From 04e994800c8899b0509e92f8359313e72fdf61d8 Mon Sep 17 00:00:00 2001
From: booboy <bpmcdevitt@thelinuxspace.com>
Date: Fri, 23 Oct 2020 04:51:14 -0500
Subject: [PATCH] init git

---
 .../docker-compose.yml                        |   89 +
 .../domain_registration_tracker/README.md     |    2 +
 .../redhat_package_manifest_scraper/README.md |   48 +
 .../all_redhat7_rpm_package_manifest.csv      | 4238 ++++++++++
 ...389-ds-base-libs_security_api_results.json |    1 +
 .../389-ds-base_security_api_results.json     |    1 +
 .../ElectricFence_security_api_results.json   |    1 +
 .../GConf2_security_api_results.json          |    1 +
 .../GeoIP_security_api_results.json           |    1 +
 .../ImageMagick-c++_security_api_results.json |    1 +
 ...ImageMagick-perl_security_api_results.json |    1 +
 .../ImageMagick_security_api_results.json     |    1 +
 .../LibRaw_security_api_results.json          |    1 +
 ...odemManager-glib_security_api_results.json |    1 +
 .../ModemManager_security_api_results.json    |    1 +
 .../MySQL-python_security_api_results.json    |    1 +
 ...workManager-adsl_security_api_results.json |    1 +
 ...anager-bluetooth_security_api_results.json |    1 +
 ...er-config-server_security_api_results.json |    1 +
 ...workManager-glib_security_api_results.json |    1 +
 ...orkManager-libnm_security_api_results.json |    1 +
 ...-libreswan-gnome_security_api_results.json |    1 +
 ...anager-libreswan_security_api_results.json |    1 +
 ...tworkManager-ppp_security_api_results.json |    1 +
 ...workManager-team_security_api_results.json |    1 +
 ...tworkManager-tui_security_api_results.json |    1 +
 ...workManager-wifi_security_api_results.json |    1 +
 ...workManager-wwan_security_api_results.json |    1 +
 .../NetworkManager_security_api_results.json  |    1 +
 .../ORBit2_security_api_results.json          |    1 +
 .../OVMF_security_api_results.json            |    1 +
 .../OpenEXR-libs_security_api_results.json    |    1 +
 .../OpenIPMI-libs_security_api_results.json   |    1 +
 ...penIPMI-modalias_security_api_results.json |    1 +
 .../OpenIPMI-perl_security_api_results.json   |    1 +
 .../OpenIPMI_security_api_results.json        |    1 +
 ...ommand-not-found_security_api_results.json |    1 +
 .../PackageKit-glib_security_api_results.json |    1 +
 ...gstreamer-plugin_security_api_results.json |    1 +
 ...eKit-gtk3-module_security_api_results.json |    1 +
 .../PackageKit-yum_security_api_results.json  |    1 +
 .../PackageKit_security_api_results.json      |    1 +
 .../Package_security_api_results.json         |    1 +
 .../PyGreSQL_security_api_results.json        |    1 +
 .../PyPAM_security_api_results.json           |    1 +
 .../PyQt4-devel_security_api_results.json     |    1 +
 .../PyQt4_security_api_results.json           |    1 +
 .../PyYAML_security_api_results.json          |    1 +
 ...se_Notes-7-as-IN_security_api_results.json |    1 +
 ...se_Notes-7-bn-IN_security_api_results.json |    1 +
 ...se_Notes-7-de-DE_security_api_results.json |    1 +
 ...se_Notes-7-en-US_security_api_results.json |    1 +
 ...se_Notes-7-es-ES_security_api_results.json |    1 +
 ...se_Notes-7-fr-FR_security_api_results.json |    1 +
 ...se_Notes-7-gu-IN_security_api_results.json |    1 +
 ...se_Notes-7-hi-IN_security_api_results.json |    1 +
 ...se_Notes-7-it-IT_security_api_results.json |    1 +
 ...se_Notes-7-ja-JP_security_api_results.json |    1 +
 ...se_Notes-7-kn-IN_security_api_results.json |    1 +
 ...se_Notes-7-ko-KR_security_api_results.json |    1 +
 ...se_Notes-7-ml-IN_security_api_results.json |    1 +
 ...se_Notes-7-mr-IN_security_api_results.json |    1 +
 ...se_Notes-7-or-IN_security_api_results.json |    1 +
 ...se_Notes-7-pa-IN_security_api_results.json |    1 +
 ...se_Notes-7-pt-BR_security_api_results.json |    1 +
 ...se_Notes-7-ru-RU_security_api_results.json |    1 +
 ...se_Notes-7-ta-IN_security_api_results.json |    1 +
 ...se_Notes-7-te-IN_security_api_results.json |    1 +
 ...se_Notes-7-zh-CN_security_api_results.json |    1 +
 ...se_Notes-7-zh-TW_security_api_results.json |    1 +
 .../SDL-devel_security_api_results.json       |    1 +
 .../SDL_security_api_results.json             |    1 +
 .../SLOF_security_api_results.json            |    1 +
 ...-cantarell-fonts_security_api_results.json |    1 +
 .../abrt-addon-ccpp_security_api_results.json |    1 +
 ...addon-kerneloops_security_api_results.json |    1 +
 ...addon-pstoreoops_security_api_results.json |    1 +
 ...brt-addon-python_security_api_results.json |    1 +
 ...brt-addon-vmcore_security_api_results.json |    1 +
 .../abrt-addon-xorg_security_api_results.json |    1 +
 .../abrt-cli_security_api_results.json        |    1 +
 ...ole-notification_security_api_results.json |    1 +
 .../abrt-dbus_security_api_results.json       |    1 +
 .../abrt-desktop_security_api_results.json    |    1 +
 .../abrt-gui-libs_security_api_results.json   |    1 +
 .../abrt-gui_security_api_results.json        |    1 +
 ...t-java-connector_security_api_results.json |    1 +
 .../abrt-libs_security_api_results.json       |    1 +
 .../abrt-python_security_api_results.json     |    1 +
 .../abrt-tui_security_api_results.json        |    1 +
 .../abrt_security_api_results.json            |    1 +
 ...untsservice-libs_security_api_results.json |    1 +
 .../accountsservice_security_api_results.json |    1 +
 .../acl_security_api_results.json             |    1 +
 .../acpid_security_api_results.json           |    1 +
 .../adcli_security_api_results.json           |    1 +
 ...-cmap-deprecated_security_api_results.json |    1 +
 ...be-mappings-cmap_security_api_results.json |    1 +
 ...obe-mappings-pdf_security_api_results.json |    1 +
 ...ita-cursor-theme_security_api_results.json |    1 +
 ...waita-gtk2-theme_security_api_results.json |    1 +
 ...waita-icon-theme_security_api_results.json |    1 +
 .../adwaita-qt4_security_api_results.json     |    1 +
 .../adwaita-qt5_security_api_results.json     |    1 +
 .../adwaita-qt_security_api_results.json      |    1 +
 .../agg_security_api_results.json             |    1 +
 ...aic94xx-firmware_security_api_results.json |    1 +
 .../aide_security_api_results.json            |    1 +
 .../akonadi-mysql_security_api_results.json   |    1 +
 .../akonadi_security_api_results.json         |    1 +
 .../alacarte_security_api_results.json        |    1 +
 .../alsa-firmware_security_api_results.json   |    1 +
 .../alsa-lib-devel_security_api_results.json  |    1 +
 .../alsa-lib_security_api_results.json        |    1 +
 ...ugins-pulseaudio_security_api_results.json |    1 +
 ...a-tools-firmware_security_api_results.json |    1 +
 .../alsa-utils_security_api_results.json      |    1 +
 .../amanda-client_security_api_results.json   |    1 +
 .../amanda-libs_security_api_results.json     |    1 +
 .../amanda-server_security_api_results.json   |    1 +
 .../amanda_security_api_results.json          |    1 +
 .../anaconda-core_security_api_results.json   |    1 +
 .../anaconda-gui_security_api_results.json    |    1 +
 .../anaconda-tui_security_api_results.json    |    1 +
 ...aconda-user-help_security_api_results.json |    1 +
 ...anaconda-widgets_security_api_results.json |    1 +
 .../anaconda_security_api_results.json        |    1 +
 .../ant_security_api_results.json             |    1 +
 .../antlr-tool_security_api_results.json      |    1 +
 ...ache-commons-cli_security_api_results.json |    1 +
 ...he-commons-codec_security_api_results.json |    1 +
 ...mons-collections_security_api_results.json |    1 +
 ...e-commons-daemon_security_api_results.json |    1 +
 ...che-commons-dbcp_security_api_results.json |    1 +
 ...pache-commons-io_security_api_results.json |    1 +
 ...che-commons-lang_security_api_results.json |    1 +
 ...-commons-logging_security_api_results.json |    1 +
 ...che-commons-pool_security_api_results.json |    1 +
 .../appstream-data_security_api_results.json  |    1 +
 .../apr-devel_security_api_results.json       |    1 +
 .../apr-util-devel_security_api_results.json  |    1 +
 ...apr-util-openssl_security_api_results.json |    1 +
 .../apr-util_security_api_results.json        |    1 +
 .../apr_security_api_results.json             |    1 +
 .../args4j_security_api_results.json          |    1 +
 .../ark-libs_security_api_results.json        |    1 +
 .../ark_security_api_results.json             |    1 +
 .../arptables_security_api_results.json       |    1 +
 .../arpwatch_security_api_results.json        |    1 +
 ...t-spi2-atk-devel_security_api_results.json |    1 +
 .../at-spi2-atk_security_api_results.json     |    1 +
 ...-spi2-core-devel_security_api_results.json |    1 +
 .../at-spi2-core_security_api_results.json    |    1 +
 .../at_security_api_results.json              |    1 +
 .../atk-devel_security_api_results.json       |    1 +
 .../atk_security_api_results.json             |    1 +
 .../atkmm_security_api_results.json           |    1 +
 .../atlas-sse2_security_api_results.json      |    1 +
 .../atlas-sse3_security_api_results.json      |    1 +
 .../atlas_security_api_results.json           |    1 +
 .../attica-devel_security_api_results.json    |    1 +
 .../attica_security_api_results.json          |    1 +
 .../attr_security_api_results.json            |    1 +
 .../audispd-plugins_security_api_results.json |    1 +
 ...audit-libs-devel_security_api_results.json |    1 +
 ...udit-libs-python_security_api_results.json |    1 +
 .../audit-libs_security_api_results.json      |    1 +
 .../audit_security_api_results.json           |    1 +
 .../augeas-libs_security_api_results.json     |    1 +
 .../augeas_security_api_results.json          |    1 +
 .../authconfig-gtk_security_api_results.json  |    1 +
 .../authconfig_security_api_results.json      |    1 +
 .../authd_security_api_results.json           |    1 +
 ...autoconf-archive_security_api_results.json |    1 +
 .../autoconf_security_api_results.json        |    1 +
 .../autocorr-af_security_api_results.json     |    1 +
 .../autocorr-bg_security_api_results.json     |    1 +
 .../autocorr-ca_security_api_results.json     |    1 +
 .../autocorr-cs_security_api_results.json     |    1 +
 .../autocorr-da_security_api_results.json     |    1 +
 .../autocorr-de_security_api_results.json     |    1 +
 .../autocorr-en_security_api_results.json     |    1 +
 .../autocorr-es_security_api_results.json     |    1 +
 .../autocorr-fa_security_api_results.json     |    1 +
 .../autocorr-fi_security_api_results.json     |    1 +
 .../autocorr-fr_security_api_results.json     |    1 +
 .../autocorr-ga_security_api_results.json     |    1 +
 .../autocorr-hr_security_api_results.json     |    1 +
 .../autocorr-hu_security_api_results.json     |    1 +
 .../autocorr-is_security_api_results.json     |    1 +
 .../autocorr-it_security_api_results.json     |    1 +
 .../autocorr-ja_security_api_results.json     |    1 +
 .../autocorr-ko_security_api_results.json     |    1 +
 .../autocorr-lb_security_api_results.json     |    1 +
 .../autocorr-lt_security_api_results.json     |    1 +
 .../autocorr-mn_security_api_results.json     |    1 +
 .../autocorr-nl_security_api_results.json     |    1 +
 .../autocorr-pl_security_api_results.json     |    1 +
 .../autocorr-pt_security_api_results.json     |    1 +
 .../autocorr-ro_security_api_results.json     |    1 +
 .../autocorr-ru_security_api_results.json     |    1 +
 .../autocorr-sk_security_api_results.json     |    1 +
 .../autocorr-sl_security_api_results.json     |    1 +
 .../autocorr-sr_security_api_results.json     |    1 +
 .../autocorr-sv_security_api_results.json     |    1 +
 .../autocorr-tr_security_api_results.json     |    1 +
 .../autocorr-vi_security_api_results.json     |    1 +
 .../autocorr-zh_security_api_results.json     |    1 +
 .../autofs_security_api_results.json          |    1 +
 .../autogen-libopts_security_api_results.json |    1 +
 .../automake_security_api_results.json        |    1 +
 .../automoc_security_api_results.json         |    1 +
 .../avahi-autoipd_security_api_results.json   |    1 +
 .../avahi-glib_security_api_results.json      |    1 +
 .../avahi-gobject_security_api_results.json   |    1 +
 .../avahi-libs_security_api_results.json      |    1 +
 .../avahi-ui-gtk3_security_api_results.json   |    1 +
 .../avahi_security_api_results.json           |    1 +
 ...avalon-framework_security_api_results.json |    1 +
 .../avalon-logkit_security_api_results.json   |    1 +
 .../awscli_security_api_results.json          |    1 +
 .../babel_security_api_results.json           |    1 +
 .../babl_security_api_results.json            |    1 +
 .../bacula-client_security_api_results.json   |    1 +
 .../bacula-common_security_api_results.json   |    1 +
 .../bacula-libs_security_api_results.json     |    1 +
 .../baobab_security_api_results.json          |    1 +
 .../basesystem_security_api_results.json      |    1 +
 .../bash-completion_security_api_results.json |    1 +
 .../bash_security_api_results.json            |    1 +
 .../bc_security_api_results.json              |    1 +
 .../bcc-tools_security_api_results.json       |    1 +
 .../bcc_security_api_results.json             |    1 +
 .../bcel_security_api_results.json            |    1 +
 .../bea-stax-api_security_api_results.json    |    1 +
 .../bea-stax_security_api_results.json        |    1 +
 .../bind-chroot_security_api_results.json     |    1 +
 .../bind-dyndb-ldap_security_api_results.json |    1 +
 ...bind-export-libs_security_api_results.json |    1 +
 .../bind-libs-lite_security_api_results.json  |    1 +
 .../bind-libs_security_api_results.json       |    1 +
 .../bind-license_security_api_results.json    |    1 +
 ...bind-pkcs11-libs_security_api_results.json |    1 +
 ...ind-pkcs11-utils_security_api_results.json |    1 +
 .../bind-pkcs11_security_api_results.json     |    1 +
 .../bind-utils_security_api_results.json      |    1 +
 .../bind_security_api_results.json            |    1 +
 .../binutils-devel_security_api_results.json  |    1 +
 .../binutils_security_api_results.json        |    1 +
 .../biosdevname_security_api_results.json     |    1 +
 .../bison_security_api_results.json           |    1 +
 ...tmap-fixed-fonts_security_api_results.json |    1 +
 ...typewriter-fonts_security_api_results.json |    1 +
 .../blas_security_api_results.json            |    1 +
 .../blivet3-data_security_api_results.json    |    1 +
 .../blktrace_security_api_results.json        |    1 +
 .../bltk_security_api_results.json            |    1 +
 .../bluedevil_security_api_results.json       |    1 +
 .../bluez-libs_security_api_results.json      |    1 +
 .../bluez_security_api_results.json           |    1 +
 .../bolt_security_api_results.json            |    1 +
 .../boost-atomic_security_api_results.json    |    1 +
 .../boost-chrono_security_api_results.json    |    1 +
 .../boost-context_security_api_results.json   |    1 +
 .../boost-date-time_security_api_results.json |    1 +
 .../boost-devel_security_api_results.json     |    1 +
 ...boost-filesystem_security_api_results.json |    1 +
 .../boost-graph_security_api_results.json     |    1 +
 .../boost-iostreams_security_api_results.json |    1 +
 .../boost-locale_security_api_results.json    |    1 +
 .../boost-math_security_api_results.json      |    1 +
 ...-program-options_security_api_results.json |    1 +
 .../boost-python_security_api_results.json    |    1 +
 .../boost-random_security_api_results.json    |    1 +
 .../boost-regex_security_api_results.json     |    1 +
 ...st-serialization_security_api_results.json |    1 +
 .../boost-signals_security_api_results.json   |    1 +
 .../boost-system_security_api_results.json    |    1 +
 .../boost-test_security_api_results.json      |    1 +
 .../boost-thread_security_api_results.json    |    1 +
 .../boost-timer_security_api_results.json     |    1 +
 .../boost-wave_security_api_results.json      |    1 +
 .../boost_security_api_results.json           |    1 +
 ...booth-arbitrator_security_api_results.json |    1 +
 .../booth-core_security_api_results.json      |    1 +
 .../booth-site_security_api_results.json      |    1 +
 .../booth-test_security_api_results.json      |    1 +
 .../booth_security_api_results.json           |    1 +
 .../bpftool_security_api_results.json         |    1 +
 ...veulebrivi-fonts_security_api_results.json |    1 +
 ...pg-courier-fonts_security_api_results.json |    1 +
 ...bpg-fonts-common_security_api_results.json |    1 +
 .../bpg-glaho-fonts_security_api_results.json |    1 +
 .../brasero-libs_security_api_results.json    |    1 +
 ...brasero-nautilus_security_api_results.json |    1 +
 .../brasero_security_api_results.json         |    1 +
 .../bridge-utils_security_api_results.json    |    1 +
 .../brlapi_security_api_results.json          |    1 +
 .../brltty_security_api_results.json          |    1 +
 .../btrfs-progs_security_api_results.json     |    1 +
 .../byacc_security_api_results.json           |    1 +
 .../bzip2-devel_security_api_results.json     |    1 +
 .../bzip2-libs_security_api_results.json      |    1 +
 .../bzip2_security_api_results.json           |    1 +
 .../bzr_security_api_results.json             |    1 +
 .../c-ares-devel_security_api_results.json    |    1 +
 .../c-ares_security_api_results.json          |    1 +
 .../ca-certificates_security_api_results.json |    1 +
 .../cachefilesd_security_api_results.json     |    1 +
 .../cairo-devel_security_api_results.json     |    1 +
 ...ro-gobject-devel_security_api_results.json |    1 +
 .../cairo-gobject_security_api_results.json   |    1 +
 .../cairo_security_api_results.json           |    1 +
 .../cairomm_security_api_results.json         |    1 +
 .../cal10n_security_api_results.json          |    1 +
 ...ibou-gtk2-module_security_api_results.json |    1 +
 ...ibou-gtk3-module_security_api_results.json |    1 +
 .../caribou_security_api_results.json         |    1 +
 .../cdparanoia-libs_security_api_results.json |    1 +
 .../cdparanoia_security_api_results.json      |    1 +
 .../cdrdao_security_api_results.json          |    1 +
 .../celt051_security_api_results.json         |    1 +
 .../ceph-common_security_api_results.json     |    1 +
 .../certmonger_security_api_results.json      |    1 +
 .../cgdcbxd_security_api_results.json         |    1 +
 .../check-devel_security_api_results.json     |    1 +
 .../check_security_api_results.json           |    1 +
 .../checkpolicy_security_api_results.json     |    1 +
 .../cheese-libs_security_api_results.json     |    1 +
 .../cheese_security_api_results.json          |    1 +
 .../chkconfig_security_api_results.json       |    1 +
 ...rome-gnome-shell_security_api_results.json |    1 +
 .../chrony_security_api_results.json          |    1 +
 .../chrpath_security_api_results.json         |    1 +
 .../cifs-utils_security_api_results.json      |    1 +
 .../cim-schema_security_api_results.json      |    1 +
 ...jkuni-ukai-fonts_security_api_results.json |    1 +
 ...kuni-uming-fonts_security_api_results.json |    1 +
 .../clevis-dracut_security_api_results.json   |    1 +
 .../clevis-luks_security_api_results.json     |    1 +
 .../clevis-systemd_security_api_results.json  |    1 +
 .../clevis-udisks2_security_api_results.json  |    1 +
 .../clevis_security_api_results.json          |    1 +
 .../cloud-init_security_api_results.json      |    1 +
 ...d-utils-growpart_security_api_results.json |    1 +
 ...ene-contribs-lib_security_api_results.json |    1 +
 .../clucene-core_security_api_results.json    |    1 +
 .../clufter-bin_security_api_results.json     |    1 +
 .../clufter-cli_security_api_results.json     |    1 +
 .../clufter-common_security_api_results.json  |    1 +
 .../clufter-lib-ccs_security_api_results.json |    1 +
 ...fter-lib-general_security_api_results.json |    1 +
 .../clufter-lib-pcs_security_api_results.json |    1 +
 .../clutter-gst2_security_api_results.json    |    1 +
 .../clutter-gst3_security_api_results.json    |    1 +
 .../clutter-gtk_security_api_results.json     |    1 +
 .../clutter_security_api_results.json         |    1 +
 .../cmake_security_api_results.json           |    1 +
 ...-bindings-pywbem_security_api_results.json |    1 +
 .../cockpit-bridge_security_api_results.json  |    1 +
 .../cockpit-system_security_api_results.json  |    1 +
 .../cockpit-ws_security_api_results.json      |    1 +
 .../cockpit_security_api_results.json         |    1 +
 .../codemodel_security_api_results.json       |    1 +
 .../cogl_security_api_results.json            |    1 +
 ...color-filesystem_security_api_results.json |    1 +
 .../colord-gtk_security_api_results.json      |    1 +
 .../colord-kde_security_api_results.json      |    1 +
 .../colord-libs_security_api_results.json     |    1 +
 .../colord_security_api_results.json          |    1 +
 ...compat-cheese314_security_api_results.json |    1 +
 .../compat-dapl_security_api_results.json     |    1 +
 ...ompat-db-headers_security_api_results.json |    1 +
 .../compat-db47_security_api_results.json     |    1 +
 ...compat-exiv2-023_security_api_results.json |    1 +
 ...compat-exiv2-026_security_api_results.json |    1 +
 ...ompat-gcc-44-c++_security_api_results.json |    1 +
 .../compat-gcc-44_security_api_results.json   |    1 +
 .../compat-glade315_security_api_results.json |    1 +
 ...at-glibc-headers_security_api_results.json |    1 +
 .../compat-glibc_security_api_results.json    |    1 +
 ...gnome-desktop314_security_api_results.json |    1 +
 .../compat-grilo02_security_api_results.json  |    1 +
 .../compat-libcap1_security_api_results.json  |    1 +
 ...-libcogl-pango12_security_api_results.json |    1 +
 ...compat-libcogl12_security_api_results.json |    1 +
 ...ompat-libcolord1_security_api_results.json |    1 +
 ...compat-libf2c-34_security_api_results.json |    1 +
 ...ompat-libgdata13_security_api_results.json |    1 +
 ...t-libgfortran-41_security_api_results.json |    1 +
 ...nome-bluetooth11_security_api_results.json |    1 +
 ...gnome-desktop3-7_security_api_results.json |    1 +
 ...pat-libgweather3_security_api_results.json |    1 +
 .../compat-libical1_security_api_results.json |    1 +
 ...pat-libmediaart0_security_api_results.json |    1 +
 ...kagekit-glib2-16_security_api_results.json |    1 +
 .../compat-libtiff3_security_api_results.json |    1 +
 ...-libupower-glib1_security_api_results.json |    1 +
 .../compat-libxcb_security_api_results.json   |    1 +
 .../compat-openldap_security_api_results.json |    1 +
 ...compat-openmpi16_security_api_results.json |    1 +
 ...mpat-opensm-libs_security_api_results.json |    1 +
 ...-poppler022-glib_security_api_results.json |    1 +
 ...at-poppler022-qt_security_api_results.json |    1 +
 ...ompat-poppler022_security_api_results.json |    1 +
 .../comps-extras_security_api_results.json    |    1 +
 .../conman_security_api_results.json          |    1 +
 .../conntrack-tools_security_api_results.json |    1 +
 ...enter-filesystem_security_api_results.json |    1 +
 .../control-center_security_api_results.json  |    1 +
 .../convmv_security_api_results.json          |    1 +
 .../coolkey_security_api_results.json         |    1 +
 ...copy-jdk-configs_security_api_results.json |    1 +
 .../coreutils_security_api_results.json       |    1 +
 ...corosync-qdevice_security_api_results.json |    1 +
 .../corosync-qnetd_security_api_results.json  |    1 +
 .../corosync_security_api_results.json        |    1 +
 ...orosynclib-devel_security_api_results.json |    1 +
 .../corosynclib_security_api_results.json     |    1 +
 .../cpio_security_api_results.json            |    1 +
 .../cpp_security_api_results.json             |    1 +
 .../cpuid_security_api_results.json           |    1 +
 .../cracklib-dicts_security_api_results.json  |    1 +
 .../cracklib_security_api_results.json        |    1 +
 ...sh-gcore-command_security_api_results.json |    1 +
 ...h-ptdump-command_security_api_results.json |    1 +
 ...sh-trace-command_security_api_results.json |    1 +
 .../crash_security_api_results.json           |    1 +
 .../crda_security_api_results.json            |    1 +
 .../createrepo_security_api_results.json      |    1 +
 .../criu_security_api_results.json            |    1 +
 .../cronie-anacron_security_api_results.json  |    1 +
 ...cronie-noanacron_security_api_results.json |    1 +
 .../cronie_security_api_results.json          |    1 +
 .../crontabs_security_api_results.json        |    1 +
 .../crypto-utils_security_api_results.json    |    1 +
 .../cryptsetup-libs_security_api_results.json |    1 +
 ...ryptsetup-python_security_api_results.json |    1 +
 ...tsetup-reencrypt_security_api_results.json |    1 +
 .../cryptsetup_security_api_results.json      |    1 +
 .../cscope_security_api_results.json          |    1 +
 .../ctags-etags_security_api_results.json     |    1 +
 .../ctags_security_api_results.json           |    1 +
 ...haroni-clm-fonts_security_api_results.json |    1 +
 ...adings-clm-fonts_security_api_results.json |    1 +
 ...-david-clm-fonts_security_api_results.json |    1 +
 ...ugulin-clm-fonts_security_api_results.json |    1 +
 ...llinia-clm-fonts_security_api_results.json |    1 +
 ...mus-fonts-common_security_api_results.json |    1 +
 ...-ruehl-clm-fonts_security_api_results.json |    1 +
 ...adasim-clm-fonts_security_api_results.json |    1 +
 ...us-keteryg-fonts_security_api_results.json |    1 +
 ...miriam-clm-fonts_security_api_results.json |    1 +
 ...m-mono-clm-fonts_security_api_results.json |    1 +
 ...hlieli-clm-fonts_security_api_results.json |    1 +
 ...simple-clm-fonts_security_api_results.json |    1 +
 ...hkenaz-clm-fonts_security_api_results.json |    1 +
 ...efarad-clm-fonts_security_api_results.json |    1 +
 ...yehuda-clm-fonts_security_api_results.json |    1 +
 .../cups-client_security_api_results.json     |    1 +
 .../cups-devel_security_api_results.json      |    1 +
 .../cups-filesystem_security_api_results.json |    1 +
 ...ups-filters-libs_security_api_results.json |    1 +
 .../cups-filters_security_api_results.json    |    1 +
 .../cups-libs_security_api_results.json       |    1 +
 .../cups-lpd_security_api_results.json        |    1 +
 .../cups-pk-helper_security_api_results.json  |    1 +
 .../cups_security_api_results.json            |    1 +
 .../curl_security_api_results.json            |    1 +
 .../custodia_security_api_results.json        |    1 +
 .../cvs_security_api_results.json             |    1 +
 ...yrus-imapd-utils_security_api_results.json |    1 +
 .../cyrus-imapd_security_api_results.json     |    1 +
 ...cyrus-sasl-devel_security_api_results.json |    1 +
 ...yrus-sasl-gssapi_security_api_results.json |    1 +
 .../cyrus-sasl-lib_security_api_results.json  |    1 +
 .../cyrus-sasl-md5_security_api_results.json  |    1 +
 ...cyrus-sasl-plain_security_api_results.json |    1 +
 ...cyrus-sasl-scram_security_api_results.json |    1 +
 .../cyrus-sasl_security_api_results.json      |    1 +
 .../dapl_security_api_results.json            |    1 +
 .../daxctl-libs_security_api_results.json     |    1 +
 .../daxio_security_api_results.json           |    1 +
 .../dbus-devel_security_api_results.json      |    1 +
 .../dbus-glib-devel_security_api_results.json |    1 +
 .../dbus-glib_security_api_results.json       |    1 +
 .../dbus-libs_security_api_results.json       |    1 +
 .../dbus-python_security_api_results.json     |    1 +
 .../dbus-x11_security_api_results.json        |    1 +
 .../dbus_security_api_results.json            |    1 +
 .../dbusmenu-qt_security_api_results.json     |    1 +
 .../dbxtool_security_api_results.json         |    1 +
 .../dconf-editor_security_api_results.json    |    1 +
 .../dconf_security_api_results.json           |    1 +
 .../dcraw_security_api_results.json           |    1 +
 .../dejagnu_security_api_results.json         |    1 +
 ...avu-fonts-common_security_api_results.json |    1 +
 ...ejavu-sans-fonts_security_api_results.json |    1 +
 ...-sans-mono-fonts_security_api_results.json |    1 +
 ...javu-serif-fonts_security_api_results.json |    1 +
 .../deltarpm_security_api_results.json        |    1 +
 ...sktop-file-utils_security_api_results.json |    1 +
 ...apper-event-libs_security_api_results.json |    1 +
 ...ice-mapper-event_security_api_results.json |    1 +
 ...vice-mapper-libs_security_api_results.json |    1 +
 ...r-multipath-libs_security_api_results.json |    1 +
 ...mapper-multipath_security_api_results.json |    1 +
 ...-persistent-data_security_api_results.json |    1 +
 .../device-mapper_security_api_results.json   |    1 +
 .../dhclient_security_api_results.json        |    1 +
 .../dhcp-common_security_api_results.json     |    1 +
 .../dhcp-libs_security_api_results.json       |    1 +
 .../dhcp_security_api_results.json            |    1 +
 .../dialog_security_api_results.json          |    1 +
 .../diffstat_security_api_results.json        |    1 +
 .../diffutils_security_api_results.json       |    1 +
 ...a-connector-dbus_security_api_results.json |    1 +
 .../dleyna-core_security_api_results.json     |    1 +
 .../dleyna-server_security_api_results.json   |    1 +
 .../dlm-devel_security_api_results.json       |    1 +
 .../dlm-lib_security_api_results.json         |    1 +
 .../dmidecode_security_api_results.json       |    1 +
 .../dmraid-events_security_api_results.json   |    1 +
 .../dmraid_security_api_results.json          |    1 +
 .../dnsmasq_security_api_results.json         |    1 +
 .../dnssec-trigger_security_api_results.json  |    1 +
 .../docbook-dtds_security_api_results.json    |    1 +
 .../docbook-simple_security_api_results.json  |    1 +
 .../docbook-slides_security_api_results.json  |    1 +
 ...book-style-dsssl_security_api_results.json |    1 +
 ...ocbook-style-xsl_security_api_results.json |    1 +
 ...ocbook-utils-pdf_security_api_results.json |    1 +
 .../docbook-utils_security_api_results.json   |    1 +
 ...docbook5-schemas_security_api_results.json |    1 +
 ...cbook5-style-xsl_security_api_results.json |    1 +
 .../dom4j_security_api_results.json           |    1 +
 .../dos2unix_security_api_results.json        |    1 +
 .../dosfstools_security_api_results.json      |    1 +
 .../dotconf_security_api_results.json         |    1 +
 .../dovecot-mysql_security_api_results.json   |    1 +
 .../dovecot-pgsql_security_api_results.json   |    1 +
 ...vecot-pigeonhole_security_api_results.json |    1 +
 .../dovecot_security_api_results.json         |    1 +
 .../doxygen_security_api_results.json         |    1 +
 .../dptfxtract_security_api_results.json      |    1 +
 ...t-config-generic_security_api_results.json |    1 +
 ...ut-config-rescue_security_api_results.json |    1 +
 ...racut-fips-aesni_security_api_results.json |    1 +
 .../dracut-fips_security_api_results.json     |    1 +
 .../dracut-network_security_api_results.json  |    1 +
 .../dracut_security_api_results.json          |    1 +
 .../dragon_security_api_results.json          |    1 +
 .../dropwatch_security_api_results.json       |    1 +
 .../dstat_security_api_results.json           |    1 +
 .../dump_security_api_results.json            |    1 +
 .../dumpet_security_api_results.json          |    1 +
 .../dvd+rw-tools_security_api_results.json    |    1 +
 .../dvgrab_security_api_results.json          |    1 +
 .../dwz_security_api_results.json             |    1 +
 .../dyninst_security_api_results.json         |    1 +
 .../e2fsprogs-devel_security_api_results.json |    1 +
 .../e2fsprogs-libs_security_api_results.json  |    1 +
 .../e2fsprogs_security_api_results.json       |    1 +
 .../easymock2_security_api_results.json       |    1 +
 .../ebtables_security_api_results.json        |    1 +
 .../ecj_security_api_results.json             |    1 +
 .../ed_security_api_results.json              |    1 +
 .../edac-utils_security_api_results.json      |    1 +
 .../efax_security_api_results.json            |    1 +
 .../efibootmgr_security_api_results.json      |    1 +
 .../efivar-libs_security_api_results.json     |    1 +
 .../efivar_security_api_results.json          |    1 +
 .../ekiga_security_api_results.json           |    1 +
 ...fault-yama-scope_security_api_results.json |    1 +
 .../elfutils-devel_security_api_results.json  |    1 +
 ...ils-libelf-devel_security_api_results.json |    1 +
 .../elfutils-libelf_security_api_results.json |    1 +
 .../elfutils-libs_security_api_results.json   |    1 +
 .../elfutils_security_api_results.json        |    1 +
 .../elinks_security_api_results.json          |    1 +
 .../emacs-auctex_security_api_results.json    |    1 +
 .../emacs-common_security_api_results.json    |    1 +
 ...emacs-filesystem_security_api_results.json |    1 +
 .../emacs-gnuplot_security_api_results.json   |    1 +
 .../emacs-nox_security_api_results.json       |    1 +
 .../emacs-php-mode_security_api_results.json  |    1 +
 .../emacs_security_api_results.json           |    1 +
 .../empathy_security_api_results.json         |    1 +
 .../enchant_security_api_results.json         |    1 +
 .../enscript_security_api_results.json        |    1 +
 ...ironment-modules_security_api_results.json |    1 +
 .../eog_security_api_results.json             |    1 +
 .../esc_security_api_results.json             |    1 +
 .../espeak_security_api_results.json          |    1 +
 .../ethtool_security_api_results.json         |    1 +
 .../evince-dvi_security_api_results.json      |    1 +
 .../evince-libs_security_api_results.json     |    1 +
 .../evince-nautilus_security_api_results.json |    1 +
 .../evince_security_api_results.json          |    1 +
 ...ata-server-devel_security_api_results.json |    1 +
 ...server-langpacks_security_api_results.json |    1 +
 ...tion-data-server_security_api_results.json |    1 +
 ...on-ews-langpacks_security_api_results.json |    1 +
 .../evolution-ews_security_api_results.json   |    1 +
 .../evolution-help_security_api_results.json  |    1 +
 ...lution-langpacks_security_api_results.json |    1 +
 ...n-mapi-langpacks_security_api_results.json |    1 +
 .../evolution-mapi_security_api_results.json  |    1 +
 .../evolution_security_api_results.json       |    1 +
 .../exempi_security_api_results.json          |    1 +
 .../exiv2-libs_security_api_results.json      |    1 +
 .../exiv2_security_api_results.json           |    1 +
 .../expat-devel_security_api_results.json     |    1 +
 .../expat_security_api_results.json           |    1 +
 .../expect_security_api_results.json          |    1 +
 .../fabtests_security_api_results.json        |    1 +
 .../farstream02_security_api_results.json     |    1 +
 .../farstream_security_api_results.json       |    1 +
 .../fcoe-utils_security_api_results.json      |    1 +
 ...ce-agents-aliyun_security_api_results.json |    1 +
 ...fence-agents-all_security_api_results.json |    1 +
 ...ce-agents-amt-ws_security_api_results.json |    1 +
 ...-agents-apc-snmp_security_api_results.json |    1 +
 ...fence-agents-apc_security_api_results.json |    1 +
 ...fence-agents-aws_security_api_results.json |    1 +
 ...agents-azure-arm_security_api_results.json |    1 +
 ...ents-bladecenter_security_api_results.json |    1 +
 ...e-agents-brocade_security_api_results.json |    1 +
 ...agents-cisco-mds_security_api_results.json |    1 +
 ...agents-cisco-ucs_security_api_results.json |    1 +
 ...ce-agents-common_security_api_results.json |    1 +
 ...e-agents-compute_security_api_results.json |    1 +
 ...nce-agents-drac5_security_api_results.json |    1 +
 ...gents-eaton-snmp_security_api_results.json |    1 +
 ...e-agents-emerson_security_api_results.json |    1 +
 ...fence-agents-eps_security_api_results.json |    1 +
 ...fence-agents-gce_security_api_results.json |    1 +
 ...-heuristics-ping_security_api_results.json |    1 +
 ...e-agents-hpblade_security_api_results.json |    1 +
 ...-agents-ibmblade_security_api_results.json |    1 +
 ...nce-agents-ifmib_security_api_results.json |    1 +
 ...nts-ilo-moonshot_security_api_results.json |    1 +
 ...ce-agents-ilo-mp_security_api_results.json |    1 +
 ...e-agents-ilo-ssh_security_api_results.json |    1 +
 ...ence-agents-ilo2_security_api_results.json |    1 +
 ...nts-intelmodular_security_api_results.json |    1 +
 ...ence-agents-ipdu_security_api_results.json |    1 +
 ...e-agents-ipmilan_security_api_results.json |    1 +
 ...nce-agents-kdump_security_api_results.json |    1 +
 ...ence-agents-lpar_security_api_results.json |    1 +
 ...nce-agents-mpath_security_api_results.json |    1 +
 ...e-agents-redfish_security_api_results.json |    1 +
 ...nce-agents-rhevm_security_api_results.json |    1 +
 ...fence-agents-rsa_security_api_results.json |    1 +
 ...fence-agents-rsb_security_api_results.json |    1 +
 ...fence-agents-sbd_security_api_results.json |    1 +
 ...ence-agents-scsi_security_api_results.json |    1 +
 ...ents-vmware-rest_security_api_results.json |    1 +
 ...ents-vmware-soap_security_api_results.json |    1 +
 ...fence-agents-wti_security_api_results.json |    1 +
 ...fence-agents-zvm_security_api_results.json |    1 +
 .../fence-virt_security_api_results.json      |    1 +
 ...ce-virtd-libvirt_security_api_results.json |    1 +
 ...-virtd-multicast_security_api_results.json |    1 +
 ...nce-virtd-serial_security_api_results.json |    1 +
 .../fence-virtd_security_api_results.json     |    1 +
 ...-freebsoft-utils_security_api_results.json |    1 +
 .../festival-lib_security_api_results.json    |    1 +
 ...speechtools-libs_security_api_results.json |    1 +
 .../festival_security_api_results.json        |    1 +
 ...x-slt-arctic-hts_security_api_results.json |    1 +
 .../fetchmail_security_api_results.json       |    1 +
 .../fftw-devel_security_api_results.json      |    1 +
 ...fftw-libs-double_security_api_results.json |    1 +
 .../fftw-libs-long_security_api_results.json  |    1 +
 ...fftw-libs-single_security_api_results.json |    1 +
 .../fftw-libs_security_api_results.json       |    1 +
 .../fftw-static_security_api_results.json     |    1 +
 .../fftw_security_api_results.json            |    1 +
 .../file-libs_security_api_results.json       |    1 +
 ...-roller-nautilus_security_api_results.json |    1 +
 .../file-roller_security_api_results.json     |    1 +
 .../file_security_api_results.json            |    1 +
 .../filebench_security_api_results.json       |    1 +
 .../filesystem_security_api_results.json      |    1 +
 .../findutils_security_api_results.json       |    1 +
 .../finger-server_security_api_results.json   |    1 +
 .../finger_security_api_results.json          |    1 +
 .../fio_security_api_results.json             |    1 +
 .../fipscheck-lib_security_api_results.json   |    1 +
 .../fipscheck_security_api_results.json       |    1 +
 .../firefox_security_api_results.json         |    1 +
 .../firewall-config_security_api_results.json |    1 +
 ...walld-filesystem_security_api_results.json |    1 +
 .../firewalld_security_api_results.json       |    1 +
 .../firstboot_security_api_results.json       |    1 +
 .../flac-libs_security_api_results.json       |    1 +
 .../flatpak-libs_security_api_results.json    |    1 +
 .../flatpak_security_api_results.json         |    1 +
 .../flex_security_api_results.json            |    1 +
 .../flite_security_api_results.json           |    1 +
 .../fltk_security_api_results.json            |    1 +
 .../flute_security_api_results.json           |    1 +
 .../folks_security_api_results.json           |    1 +
 ...ontawesome-fonts_security_api_results.json |    1 +
 ...fontconfig-devel_security_api_results.json |    1 +
 .../fontconfig_security_api_results.json      |    1 +
 ...kages-filesystem_security_api_results.json |    1 +
 ...fonts-tweak-tool_security_api_results.json |    1 +
 ...ic-db-filesystem_security_api_results.json |    1 +
 ...foomatic-db-ppds_security_api_results.json |    1 +
 .../foomatic-db_security_api_results.json     |    1 +
 ...foomatic-filters_security_api_results.json |    1 +
 .../foomatic_security_api_results.json        |    1 +
 .../fprintd-pam_security_api_results.json     |    1 +
 .../fprintd_security_api_results.json         |    1 +
 .../freeglut-devel_security_api_results.json  |    1 +
 .../freeglut_security_api_results.json        |    1 +
 ...pmi-bmc-watchdog_security_api_results.json |    1 +
 ...ipmi-ipmidetectd_security_api_results.json |    1 +
 .../freeipmi_security_api_results.json        |    1 +
 .../freeradius_security_api_results.json      |    1 +
 .../freerdp-libs_security_api_results.json    |    1 +
 .../freerdp_security_api_results.json         |    1 +
 .../freetype-devel_security_api_results.json  |    1 +
 .../freetype_security_api_results.json        |    1 +
 .../frei0r-plugins_security_api_results.json  |    1 +
 .../fribidi-devel_security_api_results.json   |    1 +
 .../fribidi_security_api_results.json         |    1 +
 .../fros_security_api_results.json            |    1 +
 .../ftp_security_api_results.json             |    1 +
 .../fuse-devel_security_api_results.json      |    1 +
 .../fuse-libs_security_api_results.json       |    1 +
 .../fuse_security_api_results.json            |    1 +
 .../fuseiso_security_api_results.json         |    1 +
 .../fwupd_security_api_results.json           |    1 +
 .../fwupdate-efi_security_api_results.json    |    1 +
 .../fwupdate-libs_security_api_results.json   |    1 +
 .../fwupdate_security_api_results.json        |    1 +
 .../fxload_security_api_results.json          |    1 +
 .../gamin_security_api_results.json           |    1 +
 .../gavl_security_api_results.json            |    1 +
 .../gawk_security_api_results.json            |    1 +
 .../gc_security_api_results.json              |    1 +
 .../gcc-c++_security_api_results.json         |    1 +
 .../gcc-gfortran_security_api_results.json    |    1 +
 .../gcc-gnat_security_api_results.json        |    1 +
 .../gcc-objc++_security_api_results.json      |    1 +
 .../gcc-objc_security_api_results.json        |    1 +
 .../gcc_security_api_results.json             |    1 +
 .../gconf-editor_security_api_results.json    |    1 +
 .../gcr-devel_security_api_results.json       |    1 +
 .../gcr_security_api_results.json             |    1 +
 .../gd_security_api_results.json              |    1 +
 .../gdb-gdbserver_security_api_results.json   |    1 +
 .../gdb_security_api_results.json             |    1 +
 .../gdbm-devel_security_api_results.json      |    1 +
 .../gdbm_security_api_results.json            |    1 +
 .../gdisk_security_api_results.json           |    1 +
 ...dk-pixbuf2-devel_security_api_results.json |    1 +
 .../gdk-pixbuf2_security_api_results.json     |    1 +
 .../gdm_security_api_results.json             |    1 +
 ...plugin-bookmarks_security_api_results.json |    1 +
 ...racketcompletion_security_api_results.json |    1 +
 ...t-plugin-charmap_security_api_results.json |    1 +
 ...ugin-codecomment_security_api_results.json |    1 +
 ...ugin-colorpicker_security_api_results.json |    1 +
 ...gin-colorschemer_security_api_results.json |    1 +
 ...plugin-commander_security_api_results.json |    1 +
 ...lugin-drawspaces_security_api_results.json |    1 +
 ...plugin-joinlines_security_api_results.json |    1 +
 ...plugin-multiedit_security_api_results.json |    1 +
 ...ugin-smartspaces_security_api_results.json |    1 +
 ...t-plugin-synctex_security_api_results.json |    1 +
 ...-plugin-terminal_security_api_results.json |    1 +
 ...-plugin-textsize_security_api_results.json |    1 +
 ...n-wordcompletion_security_api_results.json |    1 +
 ...dit-plugins-data_security_api_results.json |    1 +
 .../gedit-plugins_security_api_results.json   |    1 +
 .../gedit_security_api_results.json           |    1 +
 .../gegl_security_api_results.json            |    1 +
 .../genisoimage_security_api_results.json     |    1 +
 .../genwqe-tools_security_api_results.json    |    1 +
 .../genwqe-zlib_security_api_results.json     |    1 +
 .../geoclue2-libs_security_api_results.json   |    1 +
 .../geoclue2_security_api_results.json        |    1 +
 .../geoclue_security_api_results.json         |    1 +
 ...ocode-glib-devel_security_api_results.json |    1 +
 .../geocode-glib_security_api_results.json    |    1 +
 .../geoipupdate_security_api_results.json     |    1 +
 .../geolite2-city_security_api_results.json   |    1 +
 ...geolite2-country_security_api_results.json |    1 +
 ...onimo-annotation_security_api_results.json |    1 +
 .../geronimo-jms_security_api_results.json    |    1 +
 .../geronimo-jta_security_api_results.json    |    1 +
 ...ext-common-devel_security_api_results.json |    1 +
 .../gettext-devel_security_api_results.json   |    1 +
 .../gettext-libs_security_api_results.json    |    1 +
 .../gettext_security_api_results.json         |    1 +
 .../gfs2-utils_security_api_results.json      |    1 +
 ...stscript-chinese_security_api_results.json |    1 +
 ...ghostscript-cups_security_api_results.json |    1 +
 ...hostscript-fonts_security_api_results.json |    1 +
 .../ghostscript_security_api_results.json     |    1 +
 .../giflib_security_api_results.json          |    1 +
 ...gimp-data-extras_security_api_results.json |    1 +
 .../gimp-help_security_api_results.json       |    1 +
 .../gimp-libs_security_api_results.json       |    1 +
 .../gimp_security_api_results.json            |    1 +
 .../git_security_api_results.json             |    1 +
 .../gjs_security_api_results.json             |    1 +
 .../gl-manpages_security_api_results.json     |    1 +
 .../glade-libs_security_api_results.json      |    1 +
 ...sfish-dtd-parser_security_api_results.json |    1 +
 ...fish-fastinfoset_security_api_results.json |    1 +
 ...assfish-jaxb-api_security_api_results.json |    1 +
 .../glassfish-jaxb_security_api_results.json  |    1 +
 .../glib-networking_security_api_results.json |    1 +
 .../glib2-devel_security_api_results.json     |    1 +
 .../glib2_security_api_results.json           |    1 +
 .../glibc-common_security_api_results.json    |    1 +
 .../glibc-devel_security_api_results.json     |    1 +
 .../glibc-headers_security_api_results.json   |    1 +
 .../glibc-utils_security_api_results.json     |    1 +
 .../glibc_security_api_results.json           |    1 +
 .../glibmm24_security_api_results.json        |    1 +
 .../glusterfs-api_security_api_results.json   |    1 +
 .../glusterfs-cli_security_api_results.json   |    1 +
 ...s-client-xlators_security_api_results.json |    1 +
 .../glusterfs-fuse_security_api_results.json  |    1 +
 .../glusterfs-libs_security_api_results.json  |    1 +
 .../glusterfs-rdma_security_api_results.json  |    1 +
 .../glusterfs_security_api_results.json       |    1 +
 .../glx-utils_security_api_results.json       |    1 +
 .../gmp-devel_security_api_results.json       |    1 +
 .../gmp_security_api_results.json             |    1 +
 .../gnome-abrt_security_api_results.json      |    1 +
 ...e-bluetooth-libs_security_api_results.json |    1 +
 .../gnome-bluetooth_security_api_results.json |    1 +
 .../gnome-boxes_security_api_results.json     |    1 +
 ...gnome-calculator_security_api_results.json |    1 +
 ...-classic-session_security_api_results.json |    1 +
 .../gnome-clocks_security_api_results.json    |    1 +
 ...me-color-manager_security_api_results.json |    1 +
 .../gnome-common_security_api_results.json    |    1 +
 .../gnome-contacts_security_api_results.json  |    1 +
 ...e-desktop3-devel_security_api_results.json |    1 +
 .../gnome-desktop3_security_api_results.json  |    1 +
 ...gnome-dictionary_security_api_results.json |    1 +
 ...ome-disk-utility_security_api_results.json |    1 +
 ...e-documents-libs_security_api_results.json |    1 +
 .../gnome-documents_security_api_results.json |    1 +
 ...nome-font-viewer_security_api_results.json |    1 +
 ...ing-started-docs_security_api_results.json |    1 +
 ...con-theme-extras_security_api_results.json |    1 +
 ...con-theme-legacy_security_api_results.json |    1 +
 ...n-theme-symbolic_security_api_results.json |    1 +
 ...gnome-icon-theme_security_api_results.json |    1 +
 ...me-initial-setup_security_api_results.json |    1 +
 ...nome-keyring-pam_security_api_results.json |    1 +
 .../gnome-keyring_security_api_results.json   |    1 +
 .../gnome-menus_security_api_results.json     |    1 +
 ...e-accounts-devel_security_api_results.json |    1 +
 ...-online-accounts_security_api_results.json |    1 +
 ...me-online-miners_security_api_results.json |    1 +
 ...ackagekit-common_security_api_results.json |    1 +
 ...agekit-installer_security_api_results.json |    1 +
 ...ckagekit-updater_security_api_results.json |    1 +
 ...gnome-packagekit_security_api_results.json |    1 +
 ...e-python2-bonobo_security_api_results.json |    1 +
 ...e-python2-canvas_security_api_results.json |    1 +
 ...me-python2-gconf_security_api_results.json |    1 +
 ...me-python2-gnome_security_api_results.json |    1 +
 ...python2-gnomevfs_security_api_results.json |    1 +
 .../gnome-python2_security_api_results.json   |    1 +
 ...gnome-screenshot_security_api_results.json |    1 +
 ...session-xsession_security_api_results.json |    1 +
 .../gnome-session_security_api_results.json   |    1 +
 ...-settings-daemon_security_api_results.json |    1 +
 ...on-alternate-tab_security_api_results.json |    1 +
 ...ension-apps-menu_security_api_results.json |    1 +
 ...extension-common_security_api_results.json |    1 +
 ...ontal-workspaces_security_api_results.json |    1 +
 ...nch-new-instance_security_api_results.json |    1 +
 ...sion-places-menu_security_api_results.json |    1 +
 ...ension-top-icons_security_api_results.json |    1 +
 ...nsion-user-theme_security_api_results.json |    1 +
 ...sion-window-list_security_api_results.json |    1 +
 .../gnome-shell_security_api_results.json     |    1 +
 .../gnome-software_security_api_results.json  |    1 +
 ...gnome-system-log_security_api_results.json |    1 +
 ...e-system-monitor_security_api_results.json |    1 +
 ...erminal-nautilus_security_api_results.json |    1 +
 .../gnome-terminal_security_api_results.json  |    1 +
 ...-themes-standard_security_api_results.json |    1 +
 ...gnome-tweak-tool_security_api_results.json |    1 +
 .../gnome-user-docs_security_api_results.json |    1 +
 .../gnome-vfs2_security_api_results.json      |    1 +
 ...me-video-effects_security_api_results.json |    1 +
 .../gnome-weather_security_api_results.json   |    1 +
 .../gnote_security_api_results.json           |    1 +
 ...ree-fonts-common_security_api_results.json |    1 +
 ...-free-mono-fonts_security_api_results.json |    1 +
 ...-free-sans-fonts_security_api_results.json |    1 +
 ...free-serif-fonts_security_api_results.json |    1 +
 .../gnupg2_security_api_results.json          |    1 +
 .../gnuplot-common_security_api_results.json  |    1 +
 .../gnuplot_security_api_results.json         |    1 +
 .../gnutls-c++_security_api_results.json      |    1 +
 .../gnutls-dane_security_api_results.json     |    1 +
 .../gnutls-devel_security_api_results.json    |    1 +
 .../gnutls-utils_security_api_results.json    |    1 +
 .../gnutls_security_api_results.json          |    1 +
 ...rospection-devel_security_api_results.json |    1 +
 ...ct-introspection_security_api_results.json |    1 +
 .../gom_security_api_results.json             |    1 +
 ...ra-caladea-fonts_security_api_results.json |    1 +
 ...ra-carlito-fonts_security_api_results.json |    1 +
 ...moji-color-fonts_security_api_results.json |    1 +
 ...noto-emoji-fonts_security_api_results.json |    1 +
 ...oto-fonts-common_security_api_results.json |    1 +
 ...s-armenian-fonts_security_api_results.json |    1 +
 ...devanagari-fonts_security_api_results.json |    1 +
 ...anagari-ui-fonts_security_api_results.json |    1 +
 ...s-ethiopic-fonts_security_api_results.json |    1 +
 ...-noto-sans-fonts_security_api_results.json |    1 +
 ...s-georgian-fonts_security_api_results.json |    1 +
 ...ans-hebrew-fonts_security_api_results.json |    1 +
 ...sans-khmer-fonts_security_api_results.json |    1 +
 ...s-khmer-ui-fonts_security_api_results.json |    1 +
 ...o-sans-lao-fonts_security_api_results.json |    1 +
 ...ans-lao-ui-fonts_security_api_results.json |    1 +
 ...sans-tamil-fonts_security_api_results.json |    1 +
 ...s-tamil-ui-fonts_security_api_results.json |    1 +
 ...-sans-thai-fonts_security_api_results.json |    1 +
 ...ns-thai-ui-fonts_security_api_results.json |    1 +
 ...to-sans-ui-fonts_security_api_results.json |    1 +
 ...f-armenian-fonts_security_api_results.json |    1 +
 ...noto-serif-fonts_security_api_results.json |    1 +
 ...f-georgian-fonts_security_api_results.json |    1 +
 ...-serif-lao-fonts_security_api_results.json |    1 +
 ...serif-thai-fonts_security_api_results.json |    1 +
 .../gperftools-libs_security_api_results.json |    1 +
 .../gpgme_security_api_results.json           |    1 +
 .../gpm-libs_security_api_results.json        |    1 +
 .../gpm_security_api_results.json             |    1 +
 .../grantlee_security_api_results.json        |    1 +
 .../graphite2-devel_security_api_results.json |    1 +
 .../graphite2_security_api_results.json       |    1 +
 .../graphviz-tcl_security_api_results.json    |    1 +
 .../graphviz_security_api_results.json        |    1 +
 .../grep_security_api_results.json            |    1 +
 .../grilo-plugins_security_api_results.json   |    1 +
 .../grilo_security_api_results.json           |    1 +
 .../groff-base_security_api_results.json      |    1 +
 .../grub2-common_security_api_results.json    |    1 +
 ...efi-ia32-modules_security_api_results.json |    1 +
 .../grub2-efi-ia32_security_api_results.json  |    1 +
 ...-efi-x64-modules_security_api_results.json |    1 +
 .../grub2-efi-x64_security_api_results.json   |    1 +
 ...grub2-pc-modules_security_api_results.json |    1 +
 .../grub2-pc_security_api_results.json        |    1 +
 ...b2-ppc64-modules_security_api_results.json |    1 +
 .../grub2-ppc64_security_api_results.json     |    1 +
 ...-ppc64le-modules_security_api_results.json |    1 +
 .../grub2-ppc64le_security_api_results.json   |    1 +
 ...rub2-tools-extra_security_api_results.json |    1 +
 ...b2-tools-minimal_security_api_results.json |    1 +
 .../grub2-tools_security_api_results.json     |    1 +
 .../grub2_security_api_results.json           |    1 +
 .../grubby_security_api_results.json          |    1 +
 ...op-schemas-devel_security_api_results.json |    1 +
 ...-desktop-schemas_security_api_results.json |    1 +
 .../gsl-devel_security_api_results.json       |    1 +
 .../gsl_security_api_results.json             |    1 +
 .../gsm_security_api_results.json             |    1 +
 .../gsound_security_api_results.json          |    1 +
 .../gspell_security_api_results.json          |    1 +
 .../gssdp_security_api_results.json           |    1 +
 .../gssproxy_security_api_results.json        |    1 +
 ...plugins-bad-free_security_api_results.json |    1 +
 ...mer-plugins-base_security_api_results.json |    1 +
 ...mer-plugins-good_security_api_results.json |    1 +
 .../gstreamer-tools_security_api_results.json |    1 +
 ...gstreamer1-devel_security_api_results.json |    1 +
 ...ins-bad-free-gtk_security_api_results.json |    1 +
 ...plugins-bad-free_security_api_results.json |    1 +
 ...ugins-base-devel_security_api_results.json |    1 +
 ...er1-plugins-base_security_api_results.json |    1 +
 ...er1-plugins-good_security_api_results.json |    1 +
 ...lugins-ugly-free_security_api_results.json |    1 +
 .../gstreamer1_security_api_results.json      |    1 +
 .../gstreamer_security_api_results.json       |    1 +
 ...pdate-icon-cache_security_api_results.json |    1 +
 .../gtk-vnc2_security_api_results.json        |    1 +
 .../gtk2-devel-docs_security_api_results.json |    1 +
 .../gtk2-devel_security_api_results.json      |    1 +
 ...tk2-immodule-xim_security_api_results.json |    1 +
 .../gtk2_security_api_results.json            |    1 +
 .../gtk3-devel_security_api_results.json      |    1 +
 ...tk3-immodule-xim_security_api_results.json |    1 +
 .../gtk3_security_api_results.json            |    1 +
 .../gtkhtml3_security_api_results.json        |    1 +
 .../gtkmm24_security_api_results.json         |    1 +
 .../gtkmm30_security_api_results.json         |    1 +
 .../gtksourceview3_security_api_results.json  |    1 +
 .../gtkspell3_security_api_results.json       |    1 +
 .../gtkspell_security_api_results.json        |    1 +
 .../guava_security_api_results.json           |    1 +
 .../gubbi-fonts_security_api_results.json     |    1 +
 .../gucharmap-libs_security_api_results.json  |    1 +
 .../gucharmap_security_api_results.json       |    1 +
 .../gupnp-av_security_api_results.json        |    1 +
 .../gupnp-dlna_security_api_results.json      |    1 +
 .../gupnp-igd_security_api_results.json       |    1 +
 .../gupnp_security_api_results.json           |    1 +
 .../gutenprint-cups_security_api_results.json |    1 +
 ...utenprint-plugin_security_api_results.json |    1 +
 .../gutenprint_security_api_results.json      |    1 +
 .../gvfs-afc_security_api_results.json        |    1 +
 .../gvfs-afp_security_api_results.json        |    1 +
 .../gvfs-archive_security_api_results.json    |    1 +
 .../gvfs-client_security_api_results.json     |    1 +
 .../gvfs-devel_security_api_results.json      |    1 +
 .../gvfs-fuse_security_api_results.json       |    1 +
 .../gvfs-goa_security_api_results.json        |    1 +
 .../gvfs-gphoto2_security_api_results.json    |    1 +
 .../gvfs-mtp_security_api_results.json        |    1 +
 .../gvfs-smb_security_api_results.json        |    1 +
 .../gvfs_security_api_results.json            |    1 +
 .../gvnc_security_api_results.json            |    1 +
 .../gwenview-libs_security_api_results.json   |    1 +
 .../gwenview_security_api_results.json        |    1 +
 .../gzip_security_api_results.json            |    1 +
 .../hamcrest_security_api_results.json        |    1 +
 .../haproxy_security_api_results.json         |    1 +
 .../hardlink_security_api_results.json        |    1 +
 .../harfbuzz-devel_security_api_results.json  |    1 +
 .../harfbuzz-icu_security_api_results.json    |    1 +
 .../harfbuzz_security_api_results.json        |    1 +
 .../hawkey_security_api_results.json          |    1 +
 .../hdparm_security_api_results.json          |    1 +
 .../hesiod_security_api_results.json          |    1 +
 .../hexedit_security_api_results.json         |    1 +
 ...color-icon-theme_security_api_results.json |    1 +
 ...highcontrast-qt5_security_api_results.json |    1 +
 .../highlight_security_api_results.json       |    1 +
 .../hivex_security_api_results.json           |    1 +
 .../hmaccalc_security_api_results.json        |    1 +
 .../hostname_security_api_results.json        |    1 +
 .../hpijs_security_api_results.json           |    1 +
 .../hplip-common_security_api_results.json    |    1 +
 .../hplip-gui_security_api_results.json       |    1 +
 .../hplip-libs_security_api_results.json      |    1 +
 .../hplip_security_api_results.json           |    1 +
 .../hsakmt_security_api_results.json          |    1 +
 .../hsqldb_security_api_results.json          |    1 +
 .../http-parser_security_api_results.json     |    1 +
 ...omponents-client_security_api_results.json |    1 +
 ...pcomponents-core_security_api_results.json |    1 +
 .../httpd-devel_security_api_results.json     |    1 +
 .../httpd-manual_security_api_results.json    |    1 +
 .../httpd-tools_security_api_results.json     |    1 +
 .../httpd_security_api_results.json           |    1 +
 .../hunspell-af_security_api_results.json     |    1 +
 .../hunspell-ak_security_api_results.json     |    1 +
 .../hunspell-am_security_api_results.json     |    1 +
 .../hunspell-ar_security_api_results.json     |    1 +
 .../hunspell-as_security_api_results.json     |    1 +
 .../hunspell-ast_security_api_results.json    |    1 +
 .../hunspell-az_security_api_results.json     |    1 +
 .../hunspell-be_security_api_results.json     |    1 +
 .../hunspell-ber_security_api_results.json    |    1 +
 .../hunspell-bg_security_api_results.json     |    1 +
 .../hunspell-bn_security_api_results.json     |    1 +
 .../hunspell-br_security_api_results.json     |    1 +
 .../hunspell-ca_security_api_results.json     |    1 +
 .../hunspell-cop_security_api_results.json    |    1 +
 .../hunspell-cs_security_api_results.json     |    1 +
 .../hunspell-csb_security_api_results.json    |    1 +
 .../hunspell-cv_security_api_results.json     |    1 +
 .../hunspell-cy_security_api_results.json     |    1 +
 .../hunspell-da_security_api_results.json     |    1 +
 .../hunspell-de_security_api_results.json     |    1 +
 .../hunspell-devel_security_api_results.json  |    1 +
 .../hunspell-dsb_security_api_results.json    |    1 +
 .../hunspell-el_security_api_results.json     |    1 +
 .../hunspell-en-GB_security_api_results.json  |    1 +
 .../hunspell-en-US_security_api_results.json  |    1 +
 .../hunspell-en_security_api_results.json     |    1 +
 .../hunspell-eo_security_api_results.json     |    1 +
 .../hunspell-es_security_api_results.json     |    1 +
 .../hunspell-et_security_api_results.json     |    1 +
 .../hunspell-eu_security_api_results.json     |    1 +
 .../hunspell-fa_security_api_results.json     |    1 +
 .../hunspell-fj_security_api_results.json     |    1 +
 .../hunspell-fo_security_api_results.json     |    1 +
 .../hunspell-fr_security_api_results.json     |    1 +
 .../hunspell-fur_security_api_results.json    |    1 +
 .../hunspell-fy_security_api_results.json     |    1 +
 .../hunspell-ga_security_api_results.json     |    1 +
 .../hunspell-gd_security_api_results.json     |    1 +
 .../hunspell-gl_security_api_results.json     |    1 +
 .../hunspell-grc_security_api_results.json    |    1 +
 .../hunspell-gu_security_api_results.json     |    1 +
 .../hunspell-gv_security_api_results.json     |    1 +
 .../hunspell-haw_security_api_results.json    |    1 +
 .../hunspell-he_security_api_results.json     |    1 +
 .../hunspell-hi_security_api_results.json     |    1 +
 .../hunspell-hil_security_api_results.json    |    1 +
 .../hunspell-hr_security_api_results.json     |    1 +
 .../hunspell-hsb_security_api_results.json    |    1 +
 .../hunspell-ht_security_api_results.json     |    1 +
 .../hunspell-hu_security_api_results.json     |    1 +
 .../hunspell-hy_security_api_results.json     |    1 +
 .../hunspell-ia_security_api_results.json     |    1 +
 .../hunspell-id_security_api_results.json     |    1 +
 .../hunspell-is_security_api_results.json     |    1 +
 .../hunspell-it_security_api_results.json     |    1 +
 .../hunspell-kk_security_api_results.json     |    1 +
 .../hunspell-km_security_api_results.json     |    1 +
 .../hunspell-kn_security_api_results.json     |    1 +
 .../hunspell-ko_security_api_results.json     |    1 +
 .../hunspell-ku_security_api_results.json     |    1 +
 .../hunspell-ky_security_api_results.json     |    1 +
 .../hunspell-la_security_api_results.json     |    1 +
 .../hunspell-lb_security_api_results.json     |    1 +
 .../hunspell-ln_security_api_results.json     |    1 +
 .../hunspell-lt_security_api_results.json     |    1 +
 .../hunspell-lv_security_api_results.json     |    1 +
 .../hunspell-mai_security_api_results.json    |    1 +
 .../hunspell-mg_security_api_results.json     |    1 +
 .../hunspell-mi_security_api_results.json     |    1 +
 .../hunspell-mk_security_api_results.json     |    1 +
 .../hunspell-ml_security_api_results.json     |    1 +
 .../hunspell-mn_security_api_results.json     |    1 +
 .../hunspell-mos_security_api_results.json    |    1 +
 .../hunspell-mr_security_api_results.json     |    1 +
 .../hunspell-ms_security_api_results.json     |    1 +
 .../hunspell-mt_security_api_results.json     |    1 +
 .../hunspell-nb_security_api_results.json     |    1 +
 .../hunspell-nds_security_api_results.json    |    1 +
 .../hunspell-ne_security_api_results.json     |    1 +
 .../hunspell-nl_security_api_results.json     |    1 +
 .../hunspell-nn_security_api_results.json     |    1 +
 .../hunspell-nr_security_api_results.json     |    1 +
 .../hunspell-nso_security_api_results.json    |    1 +
 .../hunspell-ny_security_api_results.json     |    1 +
 .../hunspell-oc_security_api_results.json     |    1 +
 .../hunspell-om_security_api_results.json     |    1 +
 .../hunspell-or_security_api_results.json     |    1 +
 .../hunspell-pa_security_api_results.json     |    1 +
 .../hunspell-pl_security_api_results.json     |    1 +
 .../hunspell-pt_security_api_results.json     |    1 +
 .../hunspell-qu_security_api_results.json     |    1 +
 .../hunspell-quh_security_api_results.json    |    1 +
 .../hunspell-ro_security_api_results.json     |    1 +
 .../hunspell-ru_security_api_results.json     |    1 +
 .../hunspell-rw_security_api_results.json     |    1 +
 .../hunspell-sc_security_api_results.json     |    1 +
 .../hunspell-se_security_api_results.json     |    1 +
 .../hunspell-shs_security_api_results.json    |    1 +
 .../hunspell-si_security_api_results.json     |    1 +
 .../hunspell-sk_security_api_results.json     |    1 +
 .../hunspell-sl_security_api_results.json     |    1 +
 .../hunspell-smj_security_api_results.json    |    1 +
 .../hunspell-so_security_api_results.json     |    1 +
 .../hunspell-sq_security_api_results.json     |    1 +
 .../hunspell-sr_security_api_results.json     |    1 +
 .../hunspell-ss_security_api_results.json     |    1 +
 .../hunspell-st_security_api_results.json     |    1 +
 .../hunspell-sv_security_api_results.json     |    1 +
 .../hunspell-sw_security_api_results.json     |    1 +
 .../hunspell-ta_security_api_results.json     |    1 +
 .../hunspell-te_security_api_results.json     |    1 +
 .../hunspell-tet_security_api_results.json    |    1 +
 .../hunspell-th_security_api_results.json     |    1 +
 .../hunspell-ti_security_api_results.json     |    1 +
 .../hunspell-tk_security_api_results.json     |    1 +
 .../hunspell-tl_security_api_results.json     |    1 +
 .../hunspell-tn_security_api_results.json     |    1 +
 .../hunspell-tpi_security_api_results.json    |    1 +
 .../hunspell-ts_security_api_results.json     |    1 +
 .../hunspell-uk_security_api_results.json     |    1 +
 .../hunspell-ur_security_api_results.json     |    1 +
 .../hunspell-uz_security_api_results.json     |    1 +
 .../hunspell-ve_security_api_results.json     |    1 +
 .../hunspell-vi_security_api_results.json     |    1 +
 .../hunspell-wa_security_api_results.json     |    1 +
 .../hunspell-xh_security_api_results.json     |    1 +
 .../hunspell-yi_security_api_results.json     |    1 +
 .../hunspell-zu_security_api_results.json     |    1 +
 .../hunspell_security_api_results.json        |    1 +
 .../hwdata_security_api_results.json          |    1 +
 .../hwloc-libs_security_api_results.json      |    1 +
 .../hwloc_security_api_results.json           |    1 +
 ...-daemons-license_security_api_results.json |    1 +
 .../hyperv-daemons_security_api_results.json  |    1 +
 .../hypervfcopyd_security_api_results.json    |    1 +
 .../hypervkvpd_security_api_results.json      |    1 +
 .../hypervvssd_security_api_results.json      |    1 +
 .../hyphen-af_security_api_results.json       |    1 +
 .../hyphen-as_security_api_results.json       |    1 +
 .../hyphen-be_security_api_results.json       |    1 +
 .../hyphen-bg_security_api_results.json       |    1 +
 .../hyphen-bn_security_api_results.json       |    1 +
 .../hyphen-ca_security_api_results.json       |    1 +
 .../hyphen-cs_security_api_results.json       |    1 +
 .../hyphen-cy_security_api_results.json       |    1 +
 .../hyphen-da_security_api_results.json       |    1 +
 .../hyphen-de_security_api_results.json       |    1 +
 .../hyphen-el_security_api_results.json       |    1 +
 .../hyphen-en_security_api_results.json       |    1 +
 .../hyphen-es_security_api_results.json       |    1 +
 .../hyphen-et_security_api_results.json       |    1 +
 .../hyphen-eu_security_api_results.json       |    1 +
 .../hyphen-fa_security_api_results.json       |    1 +
 .../hyphen-fo_security_api_results.json       |    1 +
 .../hyphen-fr_security_api_results.json       |    1 +
 .../hyphen-ga_security_api_results.json       |    1 +
 .../hyphen-gl_security_api_results.json       |    1 +
 .../hyphen-grc_security_api_results.json      |    1 +
 .../hyphen-gu_security_api_results.json       |    1 +
 .../hyphen-hi_security_api_results.json       |    1 +
 .../hyphen-hr_security_api_results.json       |    1 +
 .../hyphen-hsb_security_api_results.json      |    1 +
 .../hyphen-hu_security_api_results.json       |    1 +
 .../hyphen-ia_security_api_results.json       |    1 +
 .../hyphen-id_security_api_results.json       |    1 +
 .../hyphen-is_security_api_results.json       |    1 +
 .../hyphen-it_security_api_results.json       |    1 +
 .../hyphen-kn_security_api_results.json       |    1 +
 .../hyphen-ku_security_api_results.json       |    1 +
 .../hyphen-lt_security_api_results.json       |    1 +
 .../hyphen-lv_security_api_results.json       |    1 +
 .../hyphen-mi_security_api_results.json       |    1 +
 .../hyphen-ml_security_api_results.json       |    1 +
 .../hyphen-mn_security_api_results.json       |    1 +
 .../hyphen-mr_security_api_results.json       |    1 +
 .../hyphen-nb_security_api_results.json       |    1 +
 .../hyphen-nl_security_api_results.json       |    1 +
 .../hyphen-nn_security_api_results.json       |    1 +
 .../hyphen-or_security_api_results.json       |    1 +
 .../hyphen-pa_security_api_results.json       |    1 +
 .../hyphen-pl_security_api_results.json       |    1 +
 .../hyphen-pt_security_api_results.json       |    1 +
 .../hyphen-ro_security_api_results.json       |    1 +
 .../hyphen-ru_security_api_results.json       |    1 +
 .../hyphen-sa_security_api_results.json       |    1 +
 .../hyphen-sk_security_api_results.json       |    1 +
 .../hyphen-sl_security_api_results.json       |    1 +
 .../hyphen-sr_security_api_results.json       |    1 +
 .../hyphen-sv_security_api_results.json       |    1 +
 .../hyphen-ta_security_api_results.json       |    1 +
 .../hyphen-te_security_api_results.json       |    1 +
 .../hyphen-tk_security_api_results.json       |    1 +
 .../hyphen-uk_security_api_results.json       |    1 +
 .../hyphen-zu_security_api_results.json       |    1 +
 .../hyphen_security_api_results.json          |    1 +
 .../i2c-tools_security_api_results.json       |    1 +
 .../ibacm_security_api_results.json           |    1 +
 .../ibus-chewing_security_api_results.json    |    1 +
 .../ibus-gtk2_security_api_results.json       |    1 +
 .../ibus-gtk3_security_api_results.json       |    1 +
 .../ibus-hangul_security_api_results.json     |    1 +
 .../ibus-kkc_security_api_results.json        |    1 +
 .../ibus-libpinyin_security_api_results.json  |    1 +
 .../ibus-libs_security_api_results.json       |    1 +
 .../ibus-m17n_security_api_results.json       |    1 +
 .../ibus-qt_security_api_results.json         |    1 +
 .../ibus-rawcode_security_api_results.json    |    1 +
 .../ibus-sayura_security_api_results.json     |    1 +
 .../ibus-setup_security_api_results.json      |    1 +
 ...us-table-chinese_security_api_results.json |    1 +
 .../ibus-table_security_api_results.json      |    1 +
 ...s-typing-booster_security_api_results.json |    1 +
 .../ibus_security_api_results.json            |    1 +
 .../ibutils-libs_security_api_results.json    |    1 +
 .../ibutils_security_api_results.json         |    1 +
 .../icedax_security_api_results.json          |    1 +
 .../icedtea-web_security_api_results.json     |    1 +
 .../icoutils_security_api_results.json        |    1 +
 .../ilmbase_security_api_results.json         |    1 +
 ...m-chooser-common_security_api_results.json |    1 +
 .../im-chooser_security_api_results.json      |    1 +
 .../ima-evm-utils_security_api_results.json   |    1 +
 .../imake_security_api_results.json           |    1 +
 ...ttings-gsettings_security_api_results.json |    1 +
 .../imsettings-libs_security_api_results.json |    1 +
 .../imsettings-qt_security_api_results.json   |    1 +
 .../imsettings_security_api_results.json      |    1 +
 .../indent_security_api_results.json          |    1 +
 ...infiniband-diags_security_api_results.json |    1 +
 .../infinipath-psm_security_api_results.json  |    1 +
 .../info_security_api_results.json            |    1 +
 .../iniparser_security_api_results.json       |    1 +
 ...nitial-setup-gui_security_api_results.json |    1 +
 .../initial-setup_security_api_results.json   |    1 +
 .../initscripts_security_api_results.json     |    1 +
 .../inkscape_security_api_results.json        |    1 +
 .../insights-client_security_api_results.json |    1 +
 .../intel-cmt-cat_security_api_results.json   |    1 +
 .../intltool_security_api_results.json        |    1 +
 .../iok_security_api_results.json             |    1 +
 .../iotop_security_api_results.json           |    1 +
 .../iowatcher_security_api_results.json       |    1 +
 ...pa-client-common_security_api_results.json |    1 +
 .../ipa-client_security_api_results.json      |    1 +
 .../ipa-common_security_api_results.json      |    1 +
 ...ipa-gothic-fonts_security_api_results.json |    1 +
 ...ipa-mincho-fonts_security_api_results.json |    1 +
 ...pa-pgothic-fonts_security_api_results.json |    1 +
 ...pa-pmincho-fonts_security_api_results.json |    1 +
 ...pa-python-compat_security_api_results.json |    1 +
 ...pa-server-common_security_api_results.json |    1 +
 .../ipa-server-dns_security_api_results.json  |    1 +
 ...-server-trust-ad_security_api_results.json |    1 +
 .../ipa-server_security_api_results.json      |    1 +
 .../iperf3_security_api_results.json          |    1 +
 .../ipmitool_security_api_results.json        |    1 +
 .../iproute_security_api_results.json         |    1 +
 .../iprutils_security_api_results.json        |    1 +
 .../ipset-libs_security_api_results.json      |    1 +
 .../ipset-service_security_api_results.json   |    1 +
 .../ipset_security_api_results.json           |    1 +
 ...ipsilon-authform_security_api_results.json |    1 +
 ...silon-authgssapi_security_api_results.json |    1 +
 ...ipsilon-authldap_security_api_results.json |    1 +
 .../ipsilon-base_security_api_results.json    |    1 +
 .../ipsilon-client_security_api_results.json  |    1 +
 ...silon-filesystem_security_api_results.json |    1 +
 ...ipsilon-infosssd_security_api_results.json |    1 +
 .../ipsilon-persona_security_api_results.json |    1 +
 ...silon-saml2-base_security_api_results.json |    1 +
 .../ipsilon-saml2_security_api_results.json   |    1 +
 ...psilon-tools-ipa_security_api_results.json |    1 +
 .../ipsilon_security_api_results.json         |    1 +
 .../iptables-devel_security_api_results.json  |    1 +
 ...ptables-services_security_api_results.json |    1 +
 .../iptables_security_api_results.json        |    1 +
 .../iptraf-ng_security_api_results.json       |    1 +
 .../iptstate_security_api_results.json        |    1 +
 .../iputils_security_api_results.json         |    1 +
 .../ipvsadm_security_api_results.json         |    1 +
 .../ipxe-bootimgs_security_api_results.json   |    1 +
 .../ipxe-roms-qemu_security_api_results.json  |    1 +
 .../irqbalance_security_api_results.json      |    1 +
 .../irssi_security_api_results.json           |    1 +
 ...r-utils-iscsiuio_security_api_results.json |    1 +
 ...-initiator-utils_security_api_results.json |    1 +
 .../isdn4k-utils_security_api_results.json    |    1 +
 .../isns-utils_security_api_results.json      |    1 +
 .../iso-codes_security_api_results.json       |    1 +
 .../isomd5sum_security_api_results.json       |    1 +
 .../isorelax_security_api_results.json        |    1 +
 .../istack-commons_security_api_results.json  |    1 +
 .../itstool_security_api_results.json         |    1 +
 .../ivtv-firmware_security_api_results.json   |    1 +
 .../iw_security_api_results.json              |    1 +
 .../iwl100-firmware_security_api_results.json |    1 +
 ...iwl1000-firmware_security_api_results.json |    1 +
 .../iwl105-firmware_security_api_results.json |    1 +
 .../iwl135-firmware_security_api_results.json |    1 +
 ...iwl2000-firmware_security_api_results.json |    1 +
 ...iwl2030-firmware_security_api_results.json |    1 +
 ...iwl3160-firmware_security_api_results.json |    1 +
 ...iwl3945-firmware_security_api_results.json |    1 +
 ...iwl4965-firmware_security_api_results.json |    1 +
 ...iwl5000-firmware_security_api_results.json |    1 +
 ...iwl5150-firmware_security_api_results.json |    1 +
 ...iwl6000-firmware_security_api_results.json |    1 +
 ...6000g2a-firmware_security_api_results.json |    1 +
 ...6000g2b-firmware_security_api_results.json |    1 +
 ...iwl6050-firmware_security_api_results.json |    1 +
 ...iwl7260-firmware_security_api_results.json |    1 +
 .../iwpmd_security_api_results.json           |    1 +
 .../ixpdimm_sw_security_api_results.json      |    1 +
 .../jackson_security_api_results.json         |    1 +
 ...mmons-httpclient_security_api_results.json |    1 +
 .../jakarta-oro_security_api_results.json     |    1 +
 ...taglibs-standard_security_api_results.json |    1 +
 .../jansson_security_api_results.json         |    1 +
 .../jasper-libs_security_api_results.json     |    1 +
 ....0-openjdk-devel_security_api_results.json |    1 +
 ...va-1.6.0-openjdk_security_api_results.json |    1 +
 ....0-openjdk-devel_security_api_results.json |    1 +
 ...openjdk-headless_security_api_results.json |    1 +
 ...va-1.7.0-openjdk_security_api_results.json |    1 +
 ...a-1.7.1-ibm-demo_security_api_results.json |    1 +
 ...-1.7.1-ibm-devel_security_api_results.json |    1 +
 ...a-1.7.1-ibm-jdbc_security_api_results.json |    1 +
 ...1.7.1-ibm-plugin_security_api_results.json |    1 +
 ...va-1.7.1-ibm-src_security_api_results.json |    1 +
 .../java-1.7.1-ibm_security_api_results.json  |    1 +
 ...a-1.8.0-ibm-demo_security_api_results.json |    1 +
 ...-1.8.0-ibm-devel_security_api_results.json |    1 +
 ...a-1.8.0-ibm-jdbc_security_api_results.json |    1 +
 ...1.8.0-ibm-plugin_security_api_results.json |    1 +
 ...va-1.8.0-ibm-src_security_api_results.json |    1 +
 .../java-1.8.0-ibm_security_api_results.json  |    1 +
 ....0-openjdk-devel_security_api_results.json |    1 +
 ...openjdk-headless_security_api_results.json |    1 +
 ...va-1.8.0-openjdk_security_api_results.json |    1 +
 ...11-openjdk-devel_security_api_results.json |    1 +
 ...openjdk-headless_security_api_results.json |    1 +
 .../java-11-openjdk_security_api_results.json |    1 +
 ...java-atk-wrapper_security_api_results.json |    1 +
 .../javamail_security_api_results.json        |    1 +
 ...vapackages-tools_security_api_results.json |    1 +
 .../javassist_security_api_results.json       |    1 +
 .../jaxen_security_api_results.json           |    1 +
 .../jbigkit-libs_security_api_results.json    |    1 +
 ...otations-1.1-api_security_api_results.json |    1 +
 .../jdom_security_api_results.json            |    1 +
 .../jettison_security_api_results.json        |    1 +
 .../jing_security_api_results.json            |    1 +
 .../jline_security_api_results.json           |    1 +
 .../jna_security_api_results.json             |    1 +
 .../joda-convert_security_api_results.json    |    1 +
 .../joda-time_security_api_results.json       |    1 +
 .../jomolhari-fonts_security_api_results.json |    1 +
 .../jose_security_api_results.json            |    1 +
 .../js_security_api_results.json              |    1 +
 .../json-c_security_api_results.json          |    1 +
 .../json-glib-devel_security_api_results.json |    1 +
 .../json-glib_security_api_results.json       |    1 +
 .../jsr-311_security_api_results.json         |    1 +
 .../jss_security_api_results.json             |    1 +
 .../junit_security_api_results.json           |    1 +
 .../jvnet-parent_security_api_results.json    |    1 +
 .../k3b-common_security_api_results.json      |    1 +
 .../k3b-libs_security_api_results.json        |    1 +
 .../k3b_security_api_results.json             |    1 +
 ...kabi-yum-plugins_security_api_results.json |    1 +
 ...kaccessible-libs_security_api_results.json |    1 +
 .../kaccessible_security_api_results.json     |    1 +
 .../kacst-art-fonts_security_api_results.json |    1 +
 ...kacst-book-fonts_security_api_results.json |    1 +
 ...decorative-fonts_security_api_results.json |    1 +
 ...st-digital-fonts_security_api_results.json |    1 +
 ...acst-farsi-fonts_security_api_results.json |    1 +
 ...cst-fonts-common_security_api_results.json |    1 +
 ...cst-letter-fonts_security_api_results.json |    1 +
 ...acst-naskh-fonts_security_api_results.json |    1 +
 ...cst-office-fonts_security_api_results.json |    1 +
 .../kacst-one-fonts_security_api_results.json |    1 +
 .../kacst-pen-fonts_security_api_results.json |    1 +
 ...cst-poster-fonts_security_api_results.json |    1 +
 ...kacst-qurn-fonts_security_api_results.json |    1 +
 ...cst-screen-fonts_security_api_results.json |    1 +
 ...acst-title-fonts_security_api_results.json |    1 +
 ...cst-titlel-fonts_security_api_results.json |    1 +
 .../kactivities_security_api_results.json     |    1 +
 .../kamera_security_api_results.json          |    1 +
 .../kate-part_security_api_results.json       |    1 +
 .../kbd-legacy_security_api_results.json      |    1 +
 .../kbd-misc_security_api_results.json        |    1 +
 .../kbd_security_api_results.json             |    1 +
 .../kcalc_security_api_results.json           |    1 +
 .../kcharselect_security_api_results.json     |    1 +
 .../kcm-gtk_security_api_results.json         |    1 +
 .../kcm_colors_security_api_results.json      |    1 +
 .../kcm_touchpad_security_api_results.json    |    1 +
 .../kcolorchooser_security_api_results.json   |    1 +
 .../kcoloredit_security_api_results.json      |    1 +
 ...kde-base-artwork_security_api_results.json |    1 +
 ...de-baseapps-libs_security_api_results.json |    1 +
 .../kde-baseapps_security_api_results.json    |    1 +
 .../kde-filesystem_security_api_results.json  |    1 +
 .../kde-l10n_security_api_results.json        |    1 +
 ...kmanagement-libs_security_api_results.json |    1 +
 ...etworkmanagement_security_api_results.json |    1 +
 ...de-print-manager_security_api_results.json |    1 +
 ...-runtime-drkonqi_security_api_results.json |    1 +
 ...kde-runtime-libs_security_api_results.json |    1 +
 .../kde-runtime_security_api_results.json     |    1 +
 ...settings-ksplash_security_api_results.json |    1 +
 ...-settings-plasma_security_api_results.json |    1 +
 ...tings-pulseaudio_security_api_results.json |    1 +
 .../kde-settings_security_api_results.json    |    1 +
 ...kde-style-oxygen_security_api_results.json |    1 +
 ...-workspace-devel_security_api_results.json |    1 +
 ...e-workspace-libs_security_api_results.json |    1 +
 .../kde-workspace_security_api_results.json   |    1 +
 ...kdeaccessibility_security_api_results.json |    1 +
 .../kdeadmin_security_api_results.json        |    1 +
 ...ork-screensavers_security_api_results.json |    1 +
 ...degraphics-devel_security_api_results.json |    1 +
 ...kdegraphics-libs_security_api_results.json |    1 +
 ...-strigi-analyzer_security_api_results.json |    1 +
 ...ics-thumbnailers_security_api_results.json |    1 +
 .../kdelibs-common_security_api_results.json  |    1 +
 .../kdelibs-devel_security_api_results.json   |    1 +
 ...libs-ktexteditor_security_api_results.json |    1 +
 .../kdelibs_security_api_results.json         |    1 +
 ...denetwork-common_security_api_results.json |    1 +
 ...kdenetwork-devel_security_api_results.json |    1 +
 ...denetwork-kdnssd_security_api_results.json |    1 +
 ...etwork-kget-libs_security_api_results.json |    1 +
 .../kdenetwork-kget_security_api_results.json |    1 +
 ...ork-kopete-devel_security_api_results.json |    1 +
 ...work-kopete-libs_security_api_results.json |    1 +
 ...denetwork-kopete_security_api_results.json |    1 +
 ...twork-krdc-devel_security_api_results.json |    1 +
 ...etwork-krdc-libs_security_api_results.json |    1 +
 .../kdenetwork-krdc_security_api_results.json |    1 +
 ...etwork-krfb-libs_security_api_results.json |    1 +
 .../kdenetwork-krfb_security_api_results.json |    1 +
 .../kdepim-devel_security_api_results.json    |    1 +
 .../kdepim-libs_security_api_results.json     |    1 +
 ...pim-runtime-libs_security_api_results.json |    1 +
 .../kdepim-runtime_security_api_results.json  |    1 +
 .../kdepim_security_api_results.json          |    1 +
 ...epimlibs-akonadi_security_api_results.json |    1 +
 ...kdepimlibs-devel_security_api_results.json |    1 +
 ...bs-kxmlrpcclient_security_api_results.json |    1 +
 .../kdepimlibs_security_api_results.json      |    1 +
 ...asma-addons-libs_security_api_results.json |    1 +
 ...kdeplasma-addons_security_api_results.json |    1 +
 .../kdesdk-common_security_api_results.json   |    1 +
 .../kdesdk-devel_security_api_results.json    |    1 +
 ...dk-kmtrace-devel_security_api_results.json |    1 +
 ...sdk-kmtrace-libs_security_api_results.json |    1 +
 .../kdesdk-kmtrace_security_api_results.json  |    1 +
 ...dk-kompare-devel_security_api_results.json |    1 +
 ...sdk-kompare-libs_security_api_results.json |    1 +
 .../kdesdk-kompare_security_api_results.json  |    1 +
 ...sdk-okteta-devel_security_api_results.json |    1 +
 ...esdk-okteta-libs_security_api_results.json |    1 +
 .../kdesdk-okteta_security_api_results.json   |    1 +
 ...kdeutils-minimal_security_api_results.json |    1 +
 .../kdf_security_api_results.json             |    1 +
 .../keepalived_security_api_results.json      |    1 +
 ...l-abi-whitelists_security_api_results.json |    1 +
 ...rnel-bootwrapper_security_api_results.json |    1 +
 ...rnel-debug-devel_security_api_results.json |    1 +
 .../kernel-debug_security_api_results.json    |    1 +
 .../kernel-devel_security_api_results.json    |    1 +
 .../kernel-doc_security_api_results.json      |    1 +
 .../kernel-headers_security_api_results.json  |    1 +
 ...rnel-kdump-devel_security_api_results.json |    1 +
 .../kernel-kdump_security_api_results.json    |    1 +
 ...ernel-tools-libs_security_api_results.json |    1 +
 .../kernel-tools_security_api_results.json    |    1 +
 .../kernel_security_api_results.json          |    1 +
 .../kexec-tools_security_api_results.json     |    1 +
 .../keybinder3_security_api_results.json      |    1 +
 ...d-client-install_security_api_results.json |    1 +
 ...utils-libs-devel_security_api_results.json |    1 +
 .../keyutils-libs_security_api_results.json   |    1 +
 .../keyutils_security_api_results.json        |    1 +
 .../kgpg_security_api_results.json            |    1 +
 ...kgreeter-plugins_security_api_results.json |    1 +
 ...meros-base-fonts_security_api_results.json |    1 +
 ...battambang-fonts_security_api_results.json |    1 +
 ...eros-bokor-fonts_security_api_results.json |    1 +
 ...ros-fonts-common_security_api_results.json |    1 +
 ...andwritten-fonts_security_api_results.json |    1 +
 ...al-chrieng-fonts_security_api_results.json |    1 +
 ...meros-muol-fonts_security_api_results.json |    1 +
 ...s-siemreap-fonts_security_api_results.json |    1 +
 .../khotkeys-libs_security_api_results.json   |    1 +
 .../khotkeys_security_api_results.json        |    1 +
 .../kiconedit_security_api_results.json       |    1 +
 .../kinfocenter_security_api_results.json     |    1 +
 .../kio_sysinfo_security_api_results.json     |    1 +
 .../kmag_security_api_results.json            |    1 +
 .../kmenuedit_security_api_results.json       |    1 +
 .../kmix_security_api_results.json            |    1 +
 .../kmod-kvdo_security_api_results.json       |    1 +
 .../kmod-libs_security_api_results.json       |    1 +
 .../kmod-oracleasm_security_api_results.json  |    1 +
 .../kmod_security_api_results.json            |    1 +
 ...kolourpaint-libs_security_api_results.json |    1 +
 .../kolourpaint_security_api_results.json     |    1 +
 ...nkretcmpi-python_security_api_results.json |    1 +
 .../konkretcmpi_security_api_results.json     |    1 +
 .../konsole-part_security_api_results.json    |    1 +
 .../konsole_security_api_results.json         |    1 +
 .../kpartx_security_api_results.json          |    1 +
 .../kpatch_security_api_results.json          |    1 +
 .../krb5-devel_security_api_results.json      |    1 +
 .../krb5-libs_security_api_results.json       |    1 +
 .../krb5-pkinit_security_api_results.json     |    1 +
 ...krb5-server-ldap_security_api_results.json |    1 +
 .../krb5-server_security_api_results.json     |    1 +
 ...krb5-workstation_security_api_results.json |    1 +
 .../kruler_security_api_results.json          |    1 +
 .../ksaneplugin_security_api_results.json     |    1 +
 .../ksc_security_api_results.json             |    1 +
 .../kscreen_security_api_results.json         |    1 +
 .../ksh_security_api_results.json             |    1 +
 .../ksnapshot_security_api_results.json       |    1 +
 .../ksshaskpass_security_api_results.json     |    1 +
 .../ksysguard-libs_security_api_results.json  |    1 +
 .../ksysguard_security_api_results.json       |    1 +
 .../ksysguardd_security_api_results.json      |    1 +
 .../ktimer_security_api_results.json          |    1 +
 ...nikurd-web-fonts_security_api_results.json |    1 +
 .../kwallet_security_api_results.json         |    1 +
 .../kwin-gles-libs_security_api_results.json  |    1 +
 .../kwin-libs_security_api_results.json       |    1 +
 .../kwin_security_api_results.json            |    1 +
 .../kwrite_security_api_results.json          |    1 +
 .../langtable-data_security_api_results.json  |    1 +
 ...langtable-python_security_api_results.json |    1 +
 .../langtable_security_api_results.json       |    1 +
 .../lapack_security_api_results.json          |    1 +
 .../lasso-python_security_api_results.json    |    1 +
 .../lasso_security_api_results.json           |    1 +
 ...atencytop-common_security_api_results.json |    1 +
 .../latencytop-tui_security_api_results.json  |    1 +
 .../latencytop_security_api_results.json      |    1 +
 .../latrace_security_api_results.json         |    1 +
 .../lcms2_security_api_results.json           |    1 +
 .../ldapjdk_security_api_results.json         |    1 +
 .../ldns_security_api_results.json            |    1 +
 .../ledmon_security_api_results.json          |    1 +
 .../less_security_api_results.json            |    1 +
 .../lftp_security_api_results.json            |    1 +
 .../libGLEW_security_api_results.json         |    1 +
 .../libICE-devel_security_api_results.json    |    1 +
 .../libICE_security_api_results.json          |    1 +
 .../libIDL_security_api_results.json          |    1 +
 .../libSM-devel_security_api_results.json     |    1 +
 .../libSM_security_api_results.json           |    1 +
 .../libX11-common_security_api_results.json   |    1 +
 .../libX11-devel_security_api_results.json    |    1 +
 .../libX11_security_api_results.json          |    1 +
 ...XScrnSaver-devel_security_api_results.json |    1 +
 .../libXScrnSaver_security_api_results.json   |    1 +
 .../libXau-devel_security_api_results.json    |    1 +
 .../libXau_security_api_results.json          |    1 +
 .../libXaw-devel_security_api_results.json    |    1 +
 .../libXaw_security_api_results.json          |    1 +
 ...Xcomposite-devel_security_api_results.json |    1 +
 .../libXcomposite_security_api_results.json   |    1 +
 ...libXcursor-devel_security_api_results.json |    1 +
 .../libXcursor_security_api_results.json      |    1 +
 ...libXdamage-devel_security_api_results.json |    1 +
 .../libXdamage_security_api_results.json      |    1 +
 .../libXdmcp_security_api_results.json        |    1 +
 .../libXevie_security_api_results.json        |    1 +
 .../libXext-devel_security_api_results.json   |    1 +
 .../libXext_security_api_results.json         |    1 +
 .../libXfixes-devel_security_api_results.json |    1 +
 .../libXfixes_security_api_results.json       |    1 +
 .../libXfont2_security_api_results.json       |    1 +
 .../libXfont_security_api_results.json        |    1 +
 .../libXft-devel_security_api_results.json    |    1 +
 .../libXft_security_api_results.json          |    1 +
 .../libXi-devel_security_api_results.json     |    1 +
 .../libXi_security_api_results.json           |    1 +
 ...ibXinerama-devel_security_api_results.json |    1 +
 .../libXinerama_security_api_results.json     |    1 +
 .../libXmu-devel_security_api_results.json    |    1 +
 .../libXmu_security_api_results.json          |    1 +
 .../libXp-devel_security_api_results.json     |    1 +
 .../libXp_security_api_results.json           |    1 +
 .../libXpm-devel_security_api_results.json    |    1 +
 .../libXpm_security_api_results.json          |    1 +
 .../libXrandr-devel_security_api_results.json |    1 +
 .../libXrandr_security_api_results.json       |    1 +
 ...libXrender-devel_security_api_results.json |    1 +
 .../libXrender_security_api_results.json      |    1 +
 .../libXres_security_api_results.json         |    1 +
 .../libXt-devel_security_api_results.json     |    1 +
 .../libXt_security_api_results.json           |    1 +
 .../libXtst-devel_security_api_results.json   |    1 +
 .../libXtst_security_api_results.json         |    1 +
 .../libXv-devel_security_api_results.json     |    1 +
 .../libXvMC_security_api_results.json         |    1 +
 .../libXv_security_api_results.json           |    1 +
 .../libXxf86dga_security_api_results.json     |    1 +
 ...bXxf86misc-devel_security_api_results.json |    1 +
 .../libXxf86misc_security_api_results.json    |    1 +
 ...libXxf86vm-devel_security_api_results.json |    1 +
 .../libXxf86vm_security_api_results.json      |    1 +
 .../libabw_security_api_results.json          |    1 +
 .../libacl-devel_security_api_results.json    |    1 +
 .../libacl_security_api_results.json          |    1 +
 .../libaio-devel_security_api_results.json    |    1 +
 .../libaio_security_api_results.json          |    1 +
 .../libao_security_api_results.json           |    1 +
 ...ppindicator-gtk3_security_api_results.json |    1 +
 ...ibappstream-glib_security_api_results.json |    1 +
 .../libarchive_security_api_results.json      |    1 +
 .../libart_lgpl_security_api_results.json     |    1 +
 .../libassuan_security_api_results.json       |    1 +
 .../libasyncns_security_api_results.json      |    1 +
 .../libatasmart_security_api_results.json     |    1 +
 ...libatomic-static_security_api_results.json |    1 +
 .../libatomic_security_api_results.json       |    1 +
 .../libattr-devel_security_api_results.json   |    1 +
 .../libattr_security_api_results.json         |    1 +
 .../libavc1394_security_api_results.json      |    1 +
 .../libbase_security_api_results.json         |    1 +
 .../libbasicobjects_security_api_results.json |    1 +
 .../libblkid-devel_security_api_results.json  |    1 +
 .../libblkid_security_api_results.json        |    1 +
 ...bblockdev-crypto_security_api_results.json |    1 +
 .../libblockdev-fs_security_api_results.json  |    1 +
 ...libblockdev-loop_security_api_results.json |    1 +
 .../libblockdev-lvm_security_api_results.json |    1 +
 ...bblockdev-mdraid_security_api_results.json |    1 +
 ...bblockdev-nvdimm_security_api_results.json |    1 +
 ...libblockdev-part_security_api_results.json |    1 +
 ...libblockdev-swap_security_api_results.json |    1 +
 ...ibblockdev-utils_security_api_results.json |    1 +
 .../libblockdev_security_api_results.json     |    1 +
 .../libbluedevil_security_api_results.json    |    1 +
 .../libbluray_security_api_results.json       |    1 +
 .../libbonobo_security_api_results.json       |    1 +
 .../libbonoboui_security_api_results.json     |    1 +
 .../libburn_security_api_results.json         |    1 +
 .../libbytesize_security_api_results.json     |    1 +
 .../libcacard-tools_security_api_results.json |    1 +
 .../libcacard_security_api_results.json       |    1 +
 ...ibcanberra-devel_security_api_results.json |    1 +
 ...libcanberra-gtk2_security_api_results.json |    1 +
 ...libcanberra-gtk3_security_api_results.json |    1 +
 .../libcanberra_security_api_results.json     |    1 +
 .../libcap-devel_security_api_results.json    |    1 +
 .../libcap-ng-devel_security_api_results.json |    1 +
 .../libcap-ng_security_api_results.json       |    1 +
 .../libcap_security_api_results.json          |    1 +
 ...libcdio-paranoia_security_api_results.json |    1 +
 .../libcdio_security_api_results.json         |    1 +
 .../libcdr_security_api_results.json          |    1 +
 .../libcgroup-tools_security_api_results.json |    1 +
 .../libcgroup_security_api_results.json       |    1 +
 ...libchamplain-gtk_security_api_results.json |    1 +
 .../libchamplain_security_api_results.json    |    1 +
 .../libchewing_security_api_results.json      |    1 +
 .../libcmis_security_api_results.json         |    1 +
 .../libcmpiCppImpl0_security_api_results.json |    1 +
 .../libcmpiutil_security_api_results.json     |    1 +
 .../libcollection_security_api_results.json   |    1 +
 ...libcom_err-devel_security_api_results.json |    1 +
 .../libcom_err_security_api_results.json      |    1 +
 .../libconfig_security_api_results.json       |    1 +
 .../libcroco_security_api_results.json        |    1 +
 .../libcryptui_security_api_results.json      |    1 +
 .../libcurl-devel_security_api_results.json   |    1 +
 .../libcurl_security_api_results.json         |    1 +
 .../libcxl_security_api_results.json          |    1 +
 .../libdaemon_security_api_results.json       |    1 +
 .../libdb-cxx_security_api_results.json       |    1 +
 .../libdb-devel_security_api_results.json     |    1 +
 .../libdb-utils_security_api_results.json     |    1 +
 .../libdb_security_api_results.json           |    1 +
 ...libdbi-dbd-mysql_security_api_results.json |    1 +
 ...libdbi-dbd-pgsql_security_api_results.json |    1 +
 .../libdbi-drivers_security_api_results.json  |    1 +
 .../libdbi_security_api_results.json          |    1 +
 ...libdbusmenu-gtk3_security_api_results.json |    1 +
 .../libdbusmenu_security_api_results.json     |    1 +
 .../libdfp-devel_security_api_results.json    |    1 +
 .../libdfp_security_api_results.json          |    1 +
 .../libdhash_security_api_results.json        |    1 +
 .../libdmapsharing_security_api_results.json  |    1 +
 .../libdmx_security_api_results.json          |    1 +
 .../libdnet_security_api_results.json         |    1 +
 .../libdrm-devel_security_api_results.json    |    1 +
 .../libdrm_security_api_results.json          |    1 +
 .../libdv_security_api_results.json           |    1 +
 .../libdvdnav_security_api_results.json       |    1 +
 .../libdvdread_security_api_results.json      |    1 +
 .../libdwarf_security_api_results.json        |    1 +
 ...ibeasyfc-gobject_security_api_results.json |    1 +
 .../libeasyfc_security_api_results.json       |    1 +
 .../libecap_security_api_results.json         |    1 +
 .../libedit_security_api_results.json         |    1 +
 .../libehca_security_api_results.json         |    1 +
 .../libepoxy-devel_security_api_results.json  |    1 +
 .../libepoxy_security_api_results.json        |    1 +
 ...ion-fonts-common_security_api_results.json |    1 +
 ...liberation-fonts_security_api_results.json |    1 +
 ...ation-mono-fonts_security_api_results.json |    1 +
 ...ion-narrow-fonts_security_api_results.json |    1 +
 ...ation-sans-fonts_security_api_results.json |    1 +
 ...tion-serif-fonts_security_api_results.json |    1 +
 .../libesmtp_security_api_results.json        |    1 +
 .../libestr_security_api_results.json         |    1 +
 .../libetonyek_security_api_results.json      |    1 +
 .../libevdev_security_api_results.json        |    1 +
 .../libevent_security_api_results.json        |    1 +
 .../libexif_security_api_results.json         |    1 +
 .../libexttextcat_security_api_results.json   |    1 +
 .../libfabric_security_api_results.json       |    1 +
 .../libfastjson_security_api_results.json     |    1 +
 .../libfdt_security_api_results.json          |    1 +
 .../libffi-devel_security_api_results.json    |    1 +
 .../libffi_security_api_results.json          |    1 +
 .../libfontenc_security_api_results.json      |    1 +
 .../libfonts_security_api_results.json        |    1 +
 .../libformula_security_api_results.json      |    1 +
 .../libfprint_security_api_results.json       |    1 +
 .../libfreehand_security_api_results.json     |    1 +
 .../libgcab1_security_api_results.json        |    1 +
 .../libgcc_security_api_results.json          |    1 +
 .../libgcrypt-devel_security_api_results.json |    1 +
 .../libgcrypt_security_api_results.json       |    1 +
 .../libgdata-devel_security_api_results.json  |    1 +
 .../libgdata_security_api_results.json        |    1 +
 .../libgdither_security_api_results.json      |    1 +
 .../libgee06_security_api_results.json        |    1 +
 .../libgee_security_api_results.json          |    1 +
 .../libgepub_security_api_results.json        |    1 +
 .../libgexiv2_security_api_results.json       |    1 +
 .../libgfortran4_security_api_results.json    |    1 +
 .../libgfortran5_security_api_results.json    |    1 +
 .../libgfortran_security_api_results.json     |    1 +
 .../libglade2_security_api_results.json       |    1 +
 ...glvnd-core-devel_security_api_results.json |    1 +
 .../libglvnd-devel_security_api_results.json  |    1 +
 .../libglvnd-egl_security_api_results.json    |    1 +
 .../libglvnd-gles_security_api_results.json   |    1 +
 .../libglvnd-glx_security_api_results.json    |    1 +
 .../libglvnd-opengl_security_api_results.json |    1 +
 .../libglvnd_security_api_results.json        |    1 +
 .../libgnat-devel_security_api_results.json   |    1 +
 .../libgnat_security_api_results.json         |    1 +
 ...me-keyring-devel_security_api_results.json |    1 +
 ...libgnome-keyring_security_api_results.json |    1 +
 .../libgnome_security_api_results.json        |    1 +
 .../libgnomecanvas_security_api_results.json  |    1 +
 .../libgnomekbd_security_api_results.json     |    1 +
 .../libgnomeui_security_api_results.json      |    1 +
 .../libgomp_security_api_results.json         |    1 +
 .../libgovirt_security_api_results.json       |    1 +
 ...bgpg-error-devel_security_api_results.json |    1 +
 .../libgpg-error_security_api_results.json    |    1 +
 .../libgphoto2_security_api_results.json      |    1 +
 .../libgpod_security_api_results.json         |    1 +
 .../libgs_security_api_results.json           |    1 +
 .../libgsf_security_api_results.json          |    1 +
 .../libgtop2_security_api_results.json        |    1 +
 .../libgudev1-devel_security_api_results.json |    1 +
 .../libgudev1_security_api_results.json       |    1 +
 ...fs-inspect-icons_security_api_results.json |    1 +
 .../libguestfs-java_security_api_results.json |    1 +
 ...bguestfs-tools-c_security_api_results.json |    1 +
 ...libguestfs-tools_security_api_results.json |    1 +
 ...estfs-winsupport_security_api_results.json |    1 +
 .../libguestfs-xfs_security_api_results.json  |    1 +
 .../libguestfs_security_api_results.json      |    1 +
 .../libgusb_security_api_results.json         |    1 +
 ...ibgweather-devel_security_api_results.json |    1 +
 .../libgweather_security_api_results.json     |    1 +
 .../libgxps_security_api_results.json         |    1 +
 .../libhangul_security_api_results.json       |    1 +
 .../libhbaapi_security_api_results.json       |    1 +
 .../libhbalinux_security_api_results.json     |    1 +
 .../libhif_security_api_results.json          |    1 +
 ...bhugetlbfs-devel_security_api_results.json |    1 +
 ...bhugetlbfs-utils_security_api_results.json |    1 +
 .../libhugetlbfs_security_api_results.json    |    1 +
 .../libibcommon_security_api_results.json     |    1 +
 .../libibmad_security_api_results.json        |    1 +
 .../libibumad_security_api_results.json       |    1 +
 ...libibverbs-utils_security_api_results.json |    1 +
 .../libibverbs_security_api_results.json      |    1 +
 .../libica_security_api_results.json          |    1 +
 .../libical-devel_security_api_results.json   |    1 +
 .../libical_security_api_results.json         |    1 +
 .../libicu-devel_security_api_results.json    |    1 +
 .../libicu_security_api_results.json          |    1 +
 .../libidn_security_api_results.json          |    1 +
 .../libiec61883_security_api_results.json     |    1 +
 ...ibieee1284-devel_security_api_results.json |    1 +
 .../libieee1284_security_api_results.json     |    1 +
 ...libimobiledevice_security_api_results.json |    1 +
 ...ibindicator-gtk3_security_api_results.json |    1 +
 .../libini_config_security_api_results.json   |    1 +
 .../libinput_security_api_results.json        |    1 +
 .../libinvm-cim_security_api_results.json     |    1 +
 .../libinvm-cli_security_api_results.json     |    1 +
 .../libinvm-i18n_security_api_results.json    |    1 +
 .../libiodbc_security_api_results.json        |    1 +
 .../libipa_hbac_security_api_results.json     |    1 +
 .../libiptcdata_security_api_results.json     |    1 +
 .../libiscsi_security_api_results.json        |    1 +
 .../libisofs_security_api_results.json        |    1 +
 .../libitm-devel_security_api_results.json    |    1 +
 .../libitm_security_api_results.json          |    1 +
 .../libjose_security_api_results.json         |    1 +
 ...jpeg-turbo-devel_security_api_results.json |    1 +
 .../libjpeg-turbo_security_api_results.json   |    1 +
 .../libkadm5_security_api_results.json        |    1 +
 .../libkcddb_security_api_results.json        |    1 +
 .../libkdcraw-devel_security_api_results.json |    1 +
 .../libkdcraw_security_api_results.json       |    1 +
 .../libkexiv2-devel_security_api_results.json |    1 +
 .../libkexiv2_security_api_results.json       |    1 +
 .../libkipi-devel_security_api_results.json   |    1 +
 .../libkipi_security_api_results.json         |    1 +
 .../libkkc-common_security_api_results.json   |    1 +
 .../libkkc-data_security_api_results.json     |    1 +
 .../libkkc_security_api_results.json          |    1 +
 .../libksane-devel_security_api_results.json  |    1 +
 .../libksane_security_api_results.json        |    1 +
 .../libkscreen_security_api_results.json      |    1 +
 .../libkworkspace_security_api_results.json   |    1 +
 .../liblangtag_security_api_results.json      |    1 +
 .../liblayout_security_api_results.json       |    1 +
 .../libldb_security_api_results.json          |    1 +
 .../libloader_security_api_results.json       |    1 +
 .../liblockfile_security_api_results.json     |    1 +
 .../liblouis-python_security_api_results.json |    1 +
 .../liblouis_security_api_results.json        |    1 +
 .../libluksmeta_security_api_results.json     |    1 +
 .../libmatchbox_security_api_results.json     |    1 +
 .../libmaxminddb_security_api_results.json    |    1 +
 .../libmbim-utils_security_api_results.json   |    1 +
 .../libmbim_security_api_results.json         |    1 +
 .../libmediaart_security_api_results.json     |    1 +
 .../libmemcached_security_api_results.json    |    1 +
 .../libmicrohttpd_security_api_results.json   |    1 +
 .../libmng-devel_security_api_results.json    |    1 +
 .../libmng_security_api_results.json          |    1 +
 .../libmnl_security_api_results.json          |    1 +
 .../libmodman_security_api_results.json       |    1 +
 .../libmount_security_api_results.json        |    1 +
 .../libmpc_security_api_results.json          |    1 +
 .../libmpcdec_security_api_results.json       |    1 +
 .../libmsn_security_api_results.json          |    1 +
 .../libmspack_security_api_results.json       |    1 +
 .../libmspub_security_api_results.json        |    1 +
 .../libmtp_security_api_results.json          |    1 +
 .../libmusicbrainz5_security_api_results.json |    1 +
 .../libmusicbrainz_security_api_results.json  |    1 +
 .../libmwaw_security_api_results.json         |    1 +
 .../libmx_security_api_results.json           |    1 +
 .../libndp_security_api_results.json          |    1 +
 .../libnet_security_api_results.json          |    1 +
 ...filter_conntrack_security_api_results.json |    1 +
 ...tfilter_cthelper_security_api_results.json |    1 +
 ...filter_cttimeout_security_api_results.json |    1 +
 ...bnetfilter_queue_security_api_results.json |    1 +
 .../libnfnetlink_security_api_results.json    |    1 +
 .../libnfsidmap_security_api_results.json     |    1 +
 .../libnftnl_security_api_results.json        |    1 +
 .../libnice_security_api_results.json         |    1 +
 .../libnl-devel_security_api_results.json     |    1 +
 .../libnl3-cli_security_api_results.json      |    1 +
 .../libnl3_security_api_results.json          |    1 +
 .../libnl_security_api_results.json           |    1 +
 .../libnm-gtk_security_api_results.json       |    1 +
 .../libnma_security_api_results.json          |    1 +
 .../libnotify-devel_security_api_results.json |    1 +
 .../libnotify_security_api_results.json       |    1 +
 .../libntlm_security_api_results.json         |    1 +
 .../liboauth-devel_security_api_results.json  |    1 +
 .../liboauth_security_api_results.json        |    1 +
 .../libobjc_security_api_results.json         |    1 +
 .../libocxl_security_api_results.json         |    1 +
 .../libodfgen_security_api_results.json       |    1 +
 .../libofa_security_api_results.json          |    1 +
 .../libogg_security_api_results.json          |    1 +
 .../libopenraw_security_api_results.json      |    1 +
 .../liborcus_security_api_results.json        |    1 +
 .../libosinfo_security_api_results.json       |    1 +
 .../libotf_security_api_results.json          |    1 +
 .../libpagemaker_security_api_results.json    |    1 +
 .../libpaper_security_api_results.json        |    1 +
 .../libpath_utils_security_api_results.json   |    1 +
 .../libpcap_security_api_results.json         |    1 +
 .../libpciaccess_security_api_results.json    |    1 +
 .../libpeas-gtk_security_api_results.json     |    1 +
 ...as-loader-python_security_api_results.json |    1 +
 .../libpeas_security_api_results.json         |    1 +
 .../libpfm-devel_security_api_results.json    |    1 +
 .../libpfm_security_api_results.json          |    1 +
 .../libpinyin-data_security_api_results.json  |    1 +
 .../libpinyin_security_api_results.json       |    1 +
 .../libpipeline_security_api_results.json     |    1 +
 .../libplist_security_api_results.json        |    1 +
 .../libpmem_security_api_results.json         |    1 +
 .../libpmemblk_security_api_results.json      |    1 +
 .../libpmemlog_security_api_results.json      |    1 +
 .../libpmemobj_security_api_results.json      |    1 +
 .../libpmempool_security_api_results.json     |    1 +
 .../libpng-devel_security_api_results.json    |    1 +
 .../libpng12_security_api_results.json        |    1 +
 .../libpng_security_api_results.json          |    1 +
 .../libproxy-mozjs_security_api_results.json  |    1 +
 .../libproxy_security_api_results.json        |    1 +
 .../libpsm2_security_api_results.json         |    1 +
 .../libpurple_security_api_results.json       |    1 +
 .../libpwquality_security_api_results.json    |    1 +
 .../libqb-devel_security_api_results.json     |    1 +
 .../libqb_security_api_results.json           |    1 +
 .../libqmi-utils_security_api_results.json    |    1 +
 .../libqmi_security_api_results.json          |    1 +
 ...ibquadmath-devel_security_api_results.json |    1 +
 .../libquadmath_security_api_results.json     |    1 +
 .../libquvi-scripts_security_api_results.json |    1 +
 .../libquvi_security_api_results.json         |    1 +
 .../librabbitmq_security_api_results.json     |    1 +
 .../librados2_security_api_results.json       |    1 +
 .../libraw1394_security_api_results.json      |    1 +
 .../librbd1_security_api_results.json         |    1 +
 .../librdkafka_security_api_results.json      |    1 +
 .../librdmacm-utils_security_api_results.json |    1 +
 .../librdmacm_security_api_results.json       |    1 +
 .../libref_array_security_api_results.json    |    1 +
 .../librelp_security_api_results.json         |    1 +
 ...libreoffice-base_security_api_results.json |    1 +
 ...libreoffice-calc_security_api_results.json |    1 +
 ...libreoffice-core_security_api_results.json |    1 +
 ...libreoffice-data_security_api_results.json |    1 +
 ...libreoffice-draw_security_api_results.json |    1 +
 ...ffice-emailmerge_security_api_results.json |    1 +
 ...reoffice-filters_security_api_results.json |    1 +
 ...ce-graphicfilter_security_api_results.json |    1 +
 ...libreoffice-gtk2_security_api_results.json |    1 +
 ...libreoffice-gtk3_security_api_results.json |    1 +
 ...reoffice-impress_security_api_results.json |    1 +
 ...fice-langpack-en_security_api_results.json |    1 +
 ...libreoffice-math_security_api_results.json |    1 +
 ...eoffice-ogltrans_security_api_results.json |    1 +
 ...opensymbol-fonts_security_api_results.json |    1 +
 ...office-pdfimport_security_api_results.json |    1 +
 ...ibreoffice-pyuno_security_api_results.json |    1 +
 ...ffice-ure-common_security_api_results.json |    1 +
 .../libreoffice-ure_security_api_results.json |    1 +
 ...breoffice-voikko_security_api_results.json |    1 +
 ...e-wiki-publisher_security_api_results.json |    1 +
 ...breoffice-writer_security_api_results.json |    1 +
 .../libreoffice-x11_security_api_results.json |    1 +
 ...ffice-xsltfilter_security_api_results.json |    1 +
 .../libreofficekit_security_api_results.json  |    1 +
 .../librepo_security_api_results.json         |    1 +
 ...breport-anaconda_security_api_results.json |    1 +
 .../libreport-cli_security_api_results.json   |    1 +
 ...eport-filesystem_security_api_results.json |    1 +
 .../libreport-gtk_security_api_results.json   |    1 +
 ...-plugin-bugzilla_security_api_results.json |    1 +
 ...ort-plugin-mailx_security_api_results.json |    1 +
 ...n-reportuploader_security_api_results.json |    1 +
 ...lugin-rhtsupport_security_api_results.json |    1 +
 ...t-plugin-ureport_security_api_results.json |    1 +
 ...libreport-python_security_api_results.json |    1 +
 ...naconda-bugzilla_security_api_results.json |    1 +
 .../libreport-rhel_security_api_results.json  |    1 +
 .../libreport-web_security_api_results.json   |    1 +
 .../libreport_security_api_results.json       |    1 +
 .../librepository_security_api_results.json   |    1 +
 .../libreswan_security_api_results.json       |    1 +
 .../librevenge_security_api_results.json      |    1 +
 .../librpmem_security_api_results.json        |    1 +
 .../librsvg2-devel_security_api_results.json  |    1 +
 .../librsvg2-tools_security_api_results.json  |    1 +
 .../librsvg2_security_api_results.json        |    1 +
 .../librtas_security_api_results.json         |    1 +
 .../libsamplerate_security_api_results.json   |    1 +
 .../libsane-hpaio_security_api_results.json   |    1 +
 .../libseccomp_security_api_results.json      |    1 +
 .../libsecret-devel_security_api_results.json |    1 +
 .../libsecret_security_api_results.json       |    1 +
 ...libselinux-devel_security_api_results.json |    1 +
 ...bselinux-python3_security_api_results.json |    1 +
 ...ibselinux-python_security_api_results.json |    1 +
 .../libselinux-ruby_security_api_results.json |    1 +
 ...libselinux-utils_security_api_results.json |    1 +
 .../libselinux_security_api_results.json      |    1 +
 ...bsemanage-python_security_api_results.json |    1 +
 .../libsemanage_security_api_results.json     |    1 +
 .../libsepol-devel_security_api_results.json  |    1 +
 .../libsepol_security_api_results.json        |    1 +
 .../libserializer_security_api_results.json   |    1 +
 .../libservicelog_security_api_results.json   |    1 +
 .../libsexy_security_api_results.json         |    1 +
 .../libshout_security_api_results.json        |    1 +
 .../libsigc++20_security_api_results.json     |    1 +
 .../libsmartcols_security_api_results.json    |    1 +
 .../libsmbclient_security_api_results.json    |    1 +
 .../libsmbios_security_api_results.json       |    1 +
 .../libsmi_security_api_results.json          |    1 +
 .../libsndfile_security_api_results.json      |    1 +
 .../libsolv_security_api_results.json         |    1 +
 .../libsoup-devel_security_api_results.json   |    1 +
 .../libsoup_security_api_results.json         |    1 +
 .../libspectre_security_api_results.json      |    1 +
 .../libspiro_security_api_results.json        |    1 +
 .../libsrtp_security_api_results.json         |    1 +
 .../libss_security_api_results.json           |    1 +
 .../libssh2_security_api_results.json         |    1 +
 .../libsss_autofs_security_api_results.json   |    1 +
 .../libsss_certmap_security_api_results.json  |    1 +
 .../libsss_idmap_security_api_results.json    |    1 +
 ...libsss_nss_idmap_security_api_results.json |    1 +
 ...libsss_simpleifp_security_api_results.json |    1 +
 .../libsss_sudo_security_api_results.json     |    1 +
 .../libstaroffice_security_api_results.json   |    1 +
 .../libstdc++-devel_security_api_results.json |    1 +
 .../libstdc++-docs_security_api_results.json  |    1 +
 .../libstdc++_security_api_results.json       |    1 +
 ...t-arcconf-plugin_security_api_results.json |    1 +
 ...mgmt-hpsa-plugin_security_api_results.json |    1 +
 ...gmt-local-plugin_security_api_results.json |    1 +
 ...-megaraid-plugin_security_api_results.json |    1 +
 ...nfs-plugin-clibs_security_api_results.json |    1 +
 ...emgmt-nfs-plugin_security_api_results.json |    1 +
 ...gmt-nstor-plugin_security_api_results.json |    1 +
 ...gmt-python-clibs_security_api_results.json |    1 +
 ...oragemgmt-python_security_api_results.json |    1 +
 ...mgmt-smis-plugin_security_api_results.json |    1 +
 ...t-targetd-plugin_security_api_results.json |    1 +
 ...storagemgmt-udev_security_api_results.json |    1 +
 .../libstoragemgmt_security_api_results.json  |    1 +
 .../libsysfs_security_api_results.json        |    1 +
 .../libtalloc_security_api_results.json       |    1 +
 .../libtar_security_api_results.json          |    1 +
 .../libtasn1-devel_security_api_results.json  |    1 +
 .../libtasn1_security_api_results.json        |    1 +
 .../libtdb_security_api_results.json          |    1 +
 .../libteam_security_api_results.json         |    1 +
 .../libtevent_security_api_results.json       |    1 +
 .../libthai_security_api_results.json         |    1 +
 .../libtheora_security_api_results.json       |    1 +
 .../libtiff-devel_security_api_results.json   |    1 +
 .../libtiff_security_api_results.json         |    1 +
 .../libtimezonemap_security_api_results.json  |    1 +
 .../libtirpc_security_api_results.json        |    1 +
 ...btool-ltdl-devel_security_api_results.json |    1 +
 .../libtool-ltdl_security_api_results.json    |    1 +
 .../libtool_security_api_results.json         |    1 +
 ...libtranslit-m17n_security_api_results.json |    1 +
 .../libtranslit_security_api_results.json     |    1 +
 .../libudisks2_security_api_results.json      |    1 +
 .../libunistring_security_api_results.json    |    1 +
 .../libunwind_security_api_results.json       |    1 +
 .../libusal_security_api_results.json         |    1 +
 .../libusb_security_api_results.json          |    1 +
 .../libusbmuxd_security_api_results.json      |    1 +
 .../libusbx-devel_security_api_results.json   |    1 +
 .../libusbx_security_api_results.json         |    1 +
 .../libuser-python_security_api_results.json  |    1 +
 .../libuser_security_api_results.json         |    1 +
 .../libusnic_verbs_security_api_results.json  |    1 +
 .../libutempter_security_api_results.json     |    1 +
 .../libuuid-devel_security_api_results.json   |    1 +
 .../libuuid_security_api_results.json         |    1 +
 .../libv4l_security_api_results.json          |    1 +
 .../libva-devel_security_api_results.json     |    1 +
 .../libva_security_api_results.json           |    1 +
 .../libvdpau_security_api_results.json        |    1 +
 .../libverto-devel_security_api_results.json  |    1 +
 ...ibverto-libevent_security_api_results.json |    1 +
 .../libverto-tevent_security_api_results.json |    1 +
 .../libverto_security_api_results.json        |    1 +
 ...-bash-completion_security_api_results.json |    1 +
 .../libvirt-cim_security_api_results.json     |    1 +
 .../libvirt-client_security_api_results.json  |    1 +
 ...n-config-network_security_api_results.json |    1 +
 ...-config-nwfilter_security_api_results.json |    1 +
 ...driver-interface_security_api_results.json |    1 +
 ...aemon-driver-lxc_security_api_results.json |    1 +
 ...n-driver-network_security_api_results.json |    1 +
 ...n-driver-nodedev_security_api_results.json |    1 +
 ...-driver-nwfilter_security_api_results.json |    1 +
 ...emon-driver-qemu_security_api_results.json |    1 +
 ...on-driver-secret_security_api_results.json |    1 +
 ...ver-storage-core_security_api_results.json |    1 +
 ...ver-storage-disk_security_api_results.json |    1 +
 ...-storage-gluster_security_api_results.json |    1 +
 ...er-storage-iscsi_security_api_results.json |    1 +
 ...-storage-logical_security_api_results.json |    1 +
 ...er-storage-mpath_security_api_results.json |    1 +
 ...iver-storage-rbd_security_api_results.json |    1 +
 ...ver-storage-scsi_security_api_results.json |    1 +
 ...n-driver-storage_security_api_results.json |    1 +
 ...bvirt-daemon-kvm_security_api_results.json |    1 +
 .../libvirt-daemon_security_api_results.json  |    1 +
 .../libvirt-devel_security_api_results.json   |    1 +
 .../libvirt-docs_security_api_results.json    |    1 +
 .../libvirt-gconfig_security_api_results.json |    1 +
 .../libvirt-glib_security_api_results.json    |    1 +
 .../libvirt-gobject_security_api_results.json |    1 +
 ...bvirt-java-devel_security_api_results.json |    1 +
 .../libvirt-java_security_api_results.json    |    1 +
 .../libvirt-libs_security_api_results.json    |    1 +
 .../libvirt-python_security_api_results.json  |    1 +
 .../libvirt-snmp_security_api_results.json    |    1 +
 .../libvirt_security_api_results.json         |    1 +
 .../libvisio_security_api_results.json        |    1 +
 .../libvisual_security_api_results.json       |    1 +
 .../libvma_security_api_results.json          |    1 +
 .../libvmem_security_api_results.json         |    1 +
 .../libvmmalloc_security_api_results.json     |    1 +
 .../libvncserver_security_api_results.json    |    1 +
 .../libvoikko_security_api_results.json       |    1 +
 .../libvorbis_security_api_results.json       |    1 +
 .../libvpd_security_api_results.json          |    1 +
 .../libvpx_security_api_results.json          |    1 +
 .../libwacom-data_security_api_results.json   |    1 +
 .../libwacom_security_api_results.json        |    1 +
 ...ibwayland-client_security_api_results.json |    1 +
 ...ibwayland-cursor_security_api_results.json |    1 +
 .../libwayland-egl_security_api_results.json  |    1 +
 ...ibwayland-server_security_api_results.json |    1 +
 .../libwbclient_security_api_results.json     |    1 +
 .../libwebp_security_api_results.json         |    1 +
 .../libwinpr_security_api_results.json        |    1 +
 .../libwmf-lite_security_api_results.json     |    1 +
 .../libwmf_security_api_results.json          |    1 +
 .../libwnck3_security_api_results.json        |    1 +
 .../libwpd_security_api_results.json          |    1 +
 .../libwpg_security_api_results.json          |    1 +
 .../libwps_security_api_results.json          |    1 +
 .../libwsman1_security_api_results.json       |    1 +
 .../libwvstreams_security_api_results.json    |    1 +
 .../libxcb-devel_security_api_results.json    |    1 +
 .../libxcb_security_api_results.json          |    1 +
 ...bxkbcommon-devel_security_api_results.json |    1 +
 ...libxkbcommon-x11_security_api_results.json |    1 +
 .../libxkbcommon_security_api_results.json    |    1 +
 ...libxkbfile-devel_security_api_results.json |    1 +
 .../libxkbfile_security_api_results.json      |    1 +
 .../libxklavier_security_api_results.json     |    1 +
 .../libxml2-devel_security_api_results.json   |    1 +
 .../libxml2-python_security_api_results.json  |    1 +
 .../libxml2_security_api_results.json         |    1 +
 ...bxshmfence-devel_security_api_results.json |    1 +
 .../libxshmfence_security_api_results.json    |    1 +
 .../libxslt-devel_security_api_results.json   |    1 +
 .../libxslt_security_api_results.json         |    1 +
 .../libyami_security_api_results.json         |    1 +
 .../libyaml_security_api_results.json         |    1 +
 .../libzapojit_security_api_results.json      |    1 +
 .../libzfcphbaapi_security_api_results.json   |    1 +
 .../libzip_security_api_results.json          |    1 +
 .../libzmf_security_api_results.json          |    1 +
 .../linux-firmware_security_api_results.json  |    1 +
 ...inuxconsoletools_security_api_results.json |    1 +
 .../linuxptp_security_api_results.json        |    1 +
 .../lklug-fonts_security_api_results.json     |    1 +
 .../lksctp-tools_security_api_results.json    |    1 +
 .../lldpad_security_api_results.json          |    1 +
 .../llvm-private_security_api_results.json    |    1 +
 ...lm_sensors-devel_security_api_results.json |    1 +
 .../lm_sensors-libs_security_api_results.json |    1 +
 .../lm_sensors_security_api_results.json      |    1 +
 .../lockdev_security_api_results.json         |    1 +
 .../log4cxx_security_api_results.json         |    1 +
 .../log4j_security_api_results.json           |    1 +
 .../logrotate_security_api_results.json       |    1 +
 .../logwatch_security_api_results.json        |    1 +
 ...t-assamese-fonts_security_api_results.json |    1 +
 ...it-bengali-fonts_security_api_results.json |    1 +
 ...devanagari-fonts_security_api_results.json |    1 +
 ...t-gujarati-fonts_security_api_results.json |    1 +
 ...it-kannada-fonts_security_api_results.json |    1 +
 ...-malayalam-fonts_security_api_results.json |    1 +
 ...it-marathi-fonts_security_api_results.json |    1 +
 ...hit-nepali-fonts_security_api_results.json |    1 +
 ...ohit-oriya-fonts_security_api_results.json |    1 +
 ...it-punjabi-fonts_security_api_results.json |    1 +
 ...ohit-tamil-fonts_security_api_results.json |    1 +
 ...hit-telugu-fonts_security_api_results.json |    1 +
 .../lorax_security_api_results.json           |    1 +
 .../lpsolve_security_api_results.json         |    1 +
 .../lrzsz_security_api_results.json           |    1 +
 .../lshw_security_api_results.json            |    1 +
 .../lsof_security_api_results.json            |    1 +
 .../lsscsi_security_api_results.json          |    1 +
 .../lsvpd_security_api_results.json           |    1 +
 .../ltrace_security_api_results.json          |    1 +
 .../lua_security_api_results.json             |    1 +
 .../luksmeta_security_api_results.json        |    1 +
 .../lvm2-libs_security_api_results.json       |    1 +
 ...lvm2-python-boom_security_api_results.json |    1 +
 ...lvm2-python-libs_security_api_results.json |    1 +
 .../lvm2_security_api_results.json            |    1 +
 .../lz4_security_api_results.json             |    1 +
 .../lzo-minilzo_security_api_results.json     |    1 +
 .../lzo_security_api_results.json             |    1 +
 .../lzop_security_api_results.json            |    1 +
 .../m17n-contrib_security_api_results.json    |    1 +
 .../m17n-db_security_api_results.json         |    1 +
 .../m17n-lib_security_api_results.json        |    1 +
 .../m2crypto_security_api_results.json        |    1 +
 .../m4_security_api_results.json              |    1 +
 .../madan-fonts_security_api_results.json     |    1 +
 .../mailcap_security_api_results.json         |    1 +
 .../mailman_security_api_results.json         |    1 +
 .../mailx_security_api_results.json           |    1 +
 .../make_security_api_results.json            |    1 +
 ...aga-suomi-voikko_security_api_results.json |    1 +
 .../mallard-rng_security_api_results.json     |    1 +
 .../man-db_security_api_results.json          |    1 +
 .../man-pages-cs_security_api_results.json    |    1 +
 ...n-pages-es-extra_security_api_results.json |    1 +
 .../man-pages-es_security_api_results.json    |    1 +
 .../man-pages-fr_security_api_results.json    |    1 +
 .../man-pages-it_security_api_results.json    |    1 +
 .../man-pages-ja_security_api_results.json    |    1 +
 .../man-pages-ko_security_api_results.json    |    1 +
 ...-pages-overrides_security_api_results.json |    1 +
 .../man-pages-pl_security_api_results.json    |    1 +
 .../man-pages-ru_security_api_results.json    |    1 +
 .../man-pages-zh-CN_security_api_results.json |    1 +
 .../man-pages_security_api_results.json       |    1 +
 .../mariadb-bench_security_api_results.json   |    1 +
 .../mariadb-devel_security_api_results.json   |    1 +
 .../mariadb-libs_security_api_results.json    |    1 +
 .../mariadb-server_security_api_results.json  |    1 +
 .../mariadb-test_security_api_results.json    |    1 +
 .../mariadb_security_api_results.json         |    1 +
 .../marisa_security_api_results.json          |    1 +
 ...x-window-manager_security_api_results.json |    1 +
 .../mc_security_api_results.json              |    1 +
 .../mcelog_security_api_results.json          |    1 +
 .../mcstrans_security_api_results.json        |    1 +
 .../mdadm_security_api_results.json           |    1 +
 .../meanwhile_security_api_results.json       |    1 +
 ...edia-player-info_security_api_results.json |    1 +
 .../memcached_security_api_results.json       |    1 +
 .../memkind_security_api_results.json         |    1 +
 .../memstomp_security_api_results.json        |    1 +
 .../memtest86+_security_api_results.json      |    1 +
 .../mercurial_security_api_results.json       |    1 +
 ...mesa-dri-drivers_security_api_results.json |    1 +
 .../mesa-filesystem_security_api_results.json |    1 +
 .../mesa-khr-devel_security_api_results.json  |    1 +
 ...esa-libEGL-devel_security_api_results.json |    1 +
 .../mesa-libEGL_security_api_results.json     |    1 +
 ...mesa-libGL-devel_security_api_results.json |    1 +
 .../mesa-libGLES_security_api_results.json    |    1 +
 ...esa-libGLU-devel_security_api_results.json |    1 +
 .../mesa-libGLU_security_api_results.json     |    1 +
 .../mesa-libGL_security_api_results.json      |    1 +
 ...esa-libGLw-devel_security_api_results.json |    1 +
 .../mesa-libGLw_security_api_results.json     |    1 +
 .../mesa-libgbm_security_api_results.json     |    1 +
 .../mesa-libglapi_security_api_results.json   |    1 +
 ...esa-libxatracker_security_api_results.json |    1 +
 ...esa-private-llvm_security_api_results.json |    1 +
 .../metacity_security_api_results.json        |    1 +
 .../mgetty_security_api_results.json          |    1 +
 .../microcode_ctl_security_api_results.json   |    1 +
 .../migrationtools_security_api_results.json  |    1 +
 .../minicom_security_api_results.json         |    1 +
 .../mipv6-daemon_security_api_results.json    |    1 +
 .../mkbootdisk_security_api_results.json      |    1 +
 .../mksh_security_api_results.json            |    1 +
 .../mlocate_security_api_results.json         |    1 +
 ...nd-provider-info_security_api_results.json |    1 +
 .../mod_auth_gssapi_security_api_results.json |    1 +
 .../mod_auth_kerb_security_api_results.json   |    1 +
 ...llon-diagnostics_security_api_results.json |    1 +
 .../mod_auth_mellon_security_api_results.json |    1 +
 ...mod_auth_openidc_security_api_results.json |    1 +
 .../mod_authnz_pam_security_api_results.json  |    1 +
 .../mod_dav_svn_security_api_results.json     |    1 +
 .../mod_fcgid_security_api_results.json       |    1 +
 ...cept_form_submit_security_api_results.json |    1 +
 ..._lookup_identity_security_api_results.json |    1 +
 .../mod_nss_security_api_results.json         |    1 +
 .../mod_revocator_security_api_results.json   |    1 +
 ...mod_security_crs_security_api_results.json |    1 +
 .../mod_security_security_api_results.json    |    1 +
 .../mod_session_security_api_results.json     |    1 +
 .../mod_ssl_security_api_results.json         |    1 +
 .../mod_wsgi_security_api_results.json        |    1 +
 .../mokutil_security_api_results.json         |    1 +
 .../motif-devel_security_api_results.json     |    1 +
 .../motif_security_api_results.json           |    1 +
 .../mousetweaks_security_api_results.json     |    1 +
 ...zilla-filesystem_security_api_results.json |    1 +
 .../mozjs17_security_api_results.json         |    1 +
 .../mozjs24_security_api_results.json         |    1 +
 .../mozjs52_security_api_results.json         |    1 +
 .../mpfr-devel_security_api_results.json      |    1 +
 .../mpfr_security_api_results.json            |    1 +
 .../mpg123-libs_security_api_results.json     |    1 +
 .../mpich-3.0-devel_security_api_results.json |    1 +
 .../mpich-3.0_security_api_results.json       |    1 +
 .../mpich-3.2-devel_security_api_results.json |    1 +
 .../mpich-3.2_security_api_results.json       |    1 +
 ...mpitests-mpich32_security_api_results.json |    1 +
 .../mpitests-mpich_security_api_results.json  |    1 +
 ...sts-mvapich2-psm_security_api_results.json |    1 +
 ...-mvapich222-psm2_security_api_results.json |    1 +
 ...s-mvapich222-psm_security_api_results.json |    1 +
 ...tests-mvapich222_security_api_results.json |    1 +
 ...s-mvapich23-psm2_security_api_results.json |    1 +
 ...ts-mvapich23-psm_security_api_results.json |    1 +
 ...itests-mvapich23_security_api_results.json |    1 +
 ...pitests-mvapich2_security_api_results.json |    1 +
 ...pitests-openmpi3_security_api_results.json |    1 +
 ...mpitests-openmpi_security_api_results.json |    1 +
 .../mrtg_security_api_results.json            |    1 +
 .../mstflint_security_api_results.json        |    1 +
 .../msv-msv_security_api_results.json         |    1 +
 .../msv-xsdlib_security_api_results.json      |    1 +
 .../mt-st_security_api_results.json           |    1 +
 .../mtdev_security_api_results.json           |    1 +
 .../mtools_security_api_results.json          |    1 +
 .../mtr_security_api_results.json             |    1 +
 .../mtx_security_api_results.json             |    1 +
 .../mutt_security_api_results.json            |    1 +
 .../mutter_security_api_results.json          |    1 +
 ...apich2-2.0-devel_security_api_results.json |    1 +
 ...mvapich2-2.0-doc_security_api_results.json |    1 +
 ...h2-2.0-psm-devel_security_api_results.json |    1 +
 ...mvapich2-2.0-psm_security_api_results.json |    1 +
 .../mvapich2-2.0_security_api_results.json    |    1 +
 ...apich2-2.2-devel_security_api_results.json |    1 +
 ...mvapich2-2.2-doc_security_api_results.json |    1 +
 ...h2-2.2-psm-devel_security_api_results.json |    1 +
 ...2-2.2-psm2-devel_security_api_results.json |    1 +
 ...vapich2-2.2-psm2_security_api_results.json |    1 +
 ...mvapich2-2.2-psm_security_api_results.json |    1 +
 .../mvapich2-2.2_security_api_results.json    |    1 +
 .../mvapich23-devel_security_api_results.json |    1 +
 .../mvapich23-doc_security_api_results.json   |    1 +
 ...pich23-psm-devel_security_api_results.json |    1 +
 ...ich23-psm2-devel_security_api_results.json |    1 +
 .../mvapich23-psm2_security_api_results.json  |    1 +
 .../mvapich23-psm_security_api_results.json   |    1 +
 .../mvapich23_security_api_results.json       |    1 +
 ...l-connector-java_security_api_results.json |    1 +
 ...l-connector-odbc_security_api_results.json |    1 +
 .../mythes-bg_security_api_results.json       |    1 +
 .../mythes-ca_security_api_results.json       |    1 +
 .../mythes-cs_security_api_results.json       |    1 +
 .../mythes-da_security_api_results.json       |    1 +
 .../mythes-de_security_api_results.json       |    1 +
 .../mythes-el_security_api_results.json       |    1 +
 .../mythes-en_security_api_results.json       |    1 +
 .../mythes-es_security_api_results.json       |    1 +
 .../mythes-fr_security_api_results.json       |    1 +
 .../mythes-ga_security_api_results.json       |    1 +
 .../mythes-hu_security_api_results.json       |    1 +
 .../mythes-it_security_api_results.json       |    1 +
 .../mythes-lb_security_api_results.json       |    1 +
 .../mythes-lv_security_api_results.json       |    1 +
 .../mythes-mi_security_api_results.json       |    1 +
 .../mythes-nb_security_api_results.json       |    1 +
 .../mythes-ne_security_api_results.json       |    1 +
 .../mythes-nl_security_api_results.json       |    1 +
 .../mythes-nn_security_api_results.json       |    1 +
 .../mythes-pl_security_api_results.json       |    1 +
 .../mythes-pt_security_api_results.json       |    1 +
 .../mythes-ro_security_api_results.json       |    1 +
 .../mythes-ru_security_api_results.json       |    1 +
 .../mythes-sk_security_api_results.json       |    1 +
 .../mythes-sl_security_api_results.json       |    1 +
 .../mythes-sv_security_api_results.json       |    1 +
 .../mythes-uk_security_api_results.json       |    1 +
 .../mythes_security_api_results.json          |    1 +
 ...-web-naskh-fonts_security_api_results.json |    1 +
 .../nano_security_api_results.json            |    1 +
 .../nasm_security_api_results.json            |    1 +
 ...tilus-extensions_security_api_results.json |    1 +
 .../nautilus-sendto_security_api_results.json |    1 +
 .../nautilus_security_api_results.json        |    1 +
 .../navilu-fonts_security_api_results.json    |    1 +
 ...in-python-common_security_api_results.json |    1 +
 ...t-plugin-python2_security_api_results.json |    1 +
 ...dkit-plugin-vddk_security_api_results.json |    1 +
 .../nbdkit_security_api_results.json          |    1 +
 .../ncompress_security_api_results.json       |    1 +
 .../ncurses-base_security_api_results.json    |    1 +
 .../ncurses-devel_security_api_results.json   |    1 +
 .../ncurses-libs_security_api_results.json    |    1 +
 .../ncurses-term_security_api_results.json    |    1 +
 .../ncurses_security_api_results.json         |    1 +
 .../ndctl-libs_security_api_results.json      |    1 +
 .../ndctl_security_api_results.json           |    1 +
 .../neon_security_api_results.json            |    1 +
 ...pomuk-core-devel_security_api_results.json |    1 +
 ...epomuk-core-libs_security_api_results.json |    1 +
 .../nepomuk-core_security_api_results.json    |    1 +
 .../nepomuk-widgets_security_api_results.json |    1 +
 ...-snmp-agent-libs_security_api_results.json |    1 +
 .../net-snmp-devel_security_api_results.json  |    1 +
 .../net-snmp-libs_security_api_results.json   |    1 +
 .../net-snmp-utils_security_api_results.json  |    1 +
 .../net-snmp_security_api_results.json        |    1 +
 .../net-tools_security_api_results.json       |    1 +
 .../netcf-libs_security_api_results.json      |    1 +
 .../netlabel_tools_security_api_results.json  |    1 +
 .../netpbm-devel_security_api_results.json    |    1 +
 .../netpbm-progs_security_api_results.json    |    1 +
 .../netpbm_security_api_results.json          |    1 +
 .../netsniff-ng_security_api_results.json     |    1 +
 .../nettle-devel_security_api_results.json    |    1 +
 .../nettle_security_api_results.json          |    1 +
 .../newt-python_security_api_results.json     |    1 +
 .../newt_security_api_results.json            |    1 +
 .../nfs-utils_security_api_results.json       |    1 +
 .../nfs4-acl-tools_security_api_results.json  |    1 +
 .../nfsometer_security_api_results.json       |    1 +
 .../nfstest_security_api_results.json         |    1 +
 .../nftables_security_api_results.json        |    1 +
 ...anum-brush-fonts_security_api_results.json |    1 +
 ...num-fonts-common_security_api_results.json |    1 +
 ...num-gothic-fonts_security_api_results.json |    1 +
 ...m-myeongjo-fonts_security_api_results.json |    1 +
 ...-nanum-pen-fonts_security_api_results.json |    1 +
 ...onnection-editor_security_api_results.json |    1 +
 .../nmap-ncat_security_api_results.json       |    1 +
 .../nmap_security_api_results.json            |    1 +
 .../nscd_security_api_results.json            |    1 +
 .../nspr-devel_security_api_results.json      |    1 +
 .../nspr_security_api_results.json            |    1 +
 .../nss-devel_security_api_results.json       |    1 +
 .../nss-pam-ldapd_security_api_results.json   |    1 +
 .../nss-pem_security_api_results.json         |    1 +
 ...ss-softokn-devel_security_api_results.json |    1 +
 ...okn-freebl-devel_security_api_results.json |    1 +
 ...s-softokn-freebl_security_api_results.json |    1 +
 .../nss-softokn_security_api_results.json     |    1 +
 .../nss-sysinit_security_api_results.json     |    1 +
 .../nss-tools_security_api_results.json       |    1 +
 .../nss-util-devel_security_api_results.json  |    1 +
 .../nss-util_security_api_results.json        |    1 +
 .../nss_compat_ossl_security_api_results.json |    1 +
 .../nss_security_api_results.json             |    1 +
 .../ntp_security_api_results.json             |    1 +
 .../ntpdate_security_api_results.json         |    1 +
 .../ntsysv_security_api_results.json          |    1 +
 .../numactl-devel_security_api_results.json   |    1 +
 .../numactl-libs_security_api_results.json    |    1 +
 .../numactl_security_api_results.json         |    1 +
 .../numad_security_api_results.json           |    1 +
 .../numpy-f2py_security_api_results.json      |    1 +
 .../numpy_security_api_results.json           |    1 +
 ...wdog-client-java_security_api_results.json |    1 +
 .../nuxwdog_security_api_results.json         |    1 +
 .../nvme-cli_security_api_results.json        |    1 +
 .../nvmetcli_security_api_results.json        |    1 +
 ...obex-data-server_security_api_results.json |    1 +
 .../obexd_security_api_results.json           |    1 +
 .../objectweb-asm_security_api_results.json   |    1 +
 ...oddjob-mkhomedir_security_api_results.json |    1 +
 .../oddjob_security_api_results.json          |    1 +
 .../okular-devel_security_api_results.json    |    1 +
 .../okular-libs_security_api_results.json     |    1 +
 .../okular-part_security_api_results.json     |    1 +
 .../okular_security_api_results.json          |    1 +
 .../omping_security_api_results.json          |    1 +
 ...dress-resolution_security_api_results.json |    1 +
 .../opa-basic-tools_security_api_results.json |    1 +
 .../opa-fastfabric_security_api_results.json  |    1 +
 .../opa-fm_security_api_results.json          |    1 +
 .../opa-libopamgt_security_api_results.json   |    1 +
 .../opal-prd_security_api_results.json        |    1 +
 .../opal_security_api_results.json            |    1 +
 .../open-sans-fonts_security_api_results.json |    1 +
 ...vm-tools-desktop_security_api_results.json |    1 +
 .../open-vm-tools_security_api_results.json   |    1 +
 .../opencc_security_api_results.json          |    1 +
 .../openchange_security_api_results.json      |    1 +
 ...ncryptoki-ccatok_security_api_results.json |    1 +
 ...cryptoki-ep11tok_security_api_results.json |    1 +
 ...ncryptoki-icatok_security_api_results.json |    1 +
 ...cryptoki-icsftok_security_api_results.json |    1 +
 ...pencryptoki-libs_security_api_results.json |    1 +
 ...encryptoki-swtok_security_api_results.json |    1 +
 ...ncryptoki-tpmtok_security_api_results.json |    1 +
 .../opencryptoki_security_api_results.json    |    1 +
 .../opendnssec_security_api_results.json      |    1 +
 .../openhpi-libs_security_api_results.json    |    1 +
 .../openhpi_security_api_results.json         |    1 +
 .../openjade_security_api_results.json        |    1 +
 .../openjpeg-libs_security_api_results.json   |    1 +
 .../openjpeg2_security_api_results.json       |    1 +
 ...openldap-clients_security_api_results.json |    1 +
 .../openldap-devel_security_api_results.json  |    1 +
 ...openldap-servers_security_api_results.json |    1 +
 .../openldap_security_api_results.json        |    1 +
 ...nlmi-account-doc_security_api_results.json |    1 +
 .../openlmi-account_security_api_results.json |    1 +
 .../openlmi-fan-doc_security_api_results.json |    1 +
 .../openlmi-fan_security_api_results.json     |    1 +
 ...lmi-hardware-doc_security_api_results.json |    1 +
 ...openlmi-hardware_security_api_results.json |    1 +
 ...tionmanager-libs_security_api_results.json |    1 +
 ...-logicalfile-doc_security_api_results.json |    1 +
 ...nlmi-logicalfile_security_api_results.json |    1 +
 ...i-networking-doc_security_api_results.json |    1 +
 ...enlmi-networking_security_api_results.json |    1 +
 ...ermanagement-doc_security_api_results.json |    1 +
 ...-powermanagement_security_api_results.json |    1 +
 ...-providers-devel_security_api_results.json |    1 +
 ...penlmi-providers_security_api_results.json |    1 +
 ...nlmi-python-base_security_api_results.json |    1 +
 ...python-providers_security_api_results.json |    1 +
 ...enlmi-realmd-doc_security_api_results.json |    1 +
 .../openlmi-realmd_security_api_results.json  |    1 +
 ...nlmi-service-doc_security_api_results.json |    1 +
 .../openlmi-service_security_api_results.json |    1 +
 ...lmi-software-doc_security_api_results.json |    1 +
 ...openlmi-software_security_api_results.json |    1 +
 ...nlmi-storage-doc_security_api_results.json |    1 +
 .../openlmi-storage_security_api_results.json |    1 +
 ...penlmi-tools-doc_security_api_results.json |    1 +
 .../openlmi-tools_security_api_results.json   |    1 +
 .../openlmi_security_api_results.json         |    1 +
 .../openmpi-devel_security_api_results.json   |    1 +
 .../openmpi3-devel_security_api_results.json  |    1 +
 .../openmpi3_security_api_results.json        |    1 +
 .../openmpi_security_api_results.json         |    1 +
 .../openobex_security_api_results.json        |    1 +
 .../opensc_security_api_results.json          |    1 +
 ...nscap-containers_security_api_results.json |    1 +
 .../openscap-python_security_api_results.json |    1 +
 ...openscap-scanner_security_api_results.json |    1 +
 .../openscap-utils_security_api_results.json  |    1 +
 .../openscap_security_api_results.json        |    1 +
 .../openslp-server_security_api_results.json  |    1 +
 .../openslp_security_api_results.json         |    1 +
 .../opensm-libs_security_api_results.json     |    1 +
 .../opensm_security_api_results.json          |    1 +
 .../opensp_security_api_results.json          |    1 +
 .../openssh-askpass_security_api_results.json |    1 +
 .../openssh-clients_security_api_results.json |    1 +
 .../openssh-keycat_security_api_results.json  |    1 +
 .../openssh-server_security_api_results.json  |    1 +
 .../openssh_security_api_results.json         |    1 +
 .../openssl-devel_security_api_results.json   |    1 +
 .../openssl-ibmca_security_api_results.json   |    1 +
 .../openssl-libs_security_api_results.json    |    1 +
 .../openssl098e_security_api_results.json     |    1 +
 .../openssl_security_api_results.json         |    1 +
 ...openwsman-client_security_api_results.json |    1 +
 ...openwsman-python_security_api_results.json |    1 +
 ...openwsman-server_security_api_results.json |    1 +
 .../oprofile-gui_security_api_results.json    |    1 +
 .../oprofile-jit_security_api_results.json    |    1 +
 .../oprofile_security_api_results.json        |    1 +
 .../opus_security_api_results.json            |    1 +
 .../orc_security_api_results.json             |    1 +
 .../orca_security_api_results.json            |    1 +
 .../ortp_security_api_results.json            |    1 +
 .../os-prober_security_api_results.json       |    1 +
 ...p-anaconda-addon_security_api_results.json |    1 +
 .../osinfo-db-tools_security_api_results.json |    1 +
 .../osinfo-db_security_api_results.json       |    1 +
 .../overpass-fonts_security_api_results.json  |    1 +
 .../oxygen-gtk2_security_api_results.json     |    1 +
 .../oxygen-gtk3_security_api_results.json     |    1 +
 .../oxygen-gtk_security_api_results.json      |    1 +
 ...xygen-icon-theme_security_api_results.json |    1 +
 .../p11-kit-devel_security_api_results.json   |    1 +
 .../p11-kit-trust_security_api_results.json   |    1 +
 .../p11-kit_security_api_results.json         |    1 +
 .../pacemaker-cli_security_api_results.json   |    1 +
 ...ker-cluster-libs_security_api_results.json |    1 +
 .../pacemaker-cts_security_api_results.json   |    1 +
 .../pacemaker-doc_security_api_results.json   |    1 +
 ...maker-libs-devel_security_api_results.json |    1 +
 .../pacemaker-libs_security_api_results.json  |    1 +
 ...plugins-metadata_security_api_results.json |    1 +
 ...pacemaker-remote_security_api_results.json |    1 +
 .../pacemaker_security_api_results.json       |    1 +
 .../paflib_security_api_results.json          |    1 +
 .../pakchois_security_api_results.json        |    1 +
 ...type-naqsh-fonts_security_api_results.json |    1 +
 ...askh-basic-fonts_security_api_results.json |    1 +
 ...pe-tehreer-fonts_security_api_results.json |    1 +
 .../pam-devel_security_api_results.json       |    1 +
 .../pam_krb5_security_api_results.json        |    1 +
 .../pam_pkcs11_security_api_results.json      |    1 +
 .../pam_security_api_results.json             |    1 +
 .../pango-devel_security_api_results.json     |    1 +
 .../pango_security_api_results.json           |    1 +
 .../pangomm_security_api_results.json         |    1 +
 .../papi-devel_security_api_results.json      |    1 +
 .../papi_security_api_results.json            |    1 +
 .../paps-libs_security_api_results.json       |    1 +
 .../paps_security_api_results.json            |    1 +
 ...pe-pt-sans-fonts_security_api_results.json |    1 +
 .../parfait_security_api_results.json         |    1 +
 .../parted_security_api_results.json          |    1 +
 .../passivetex_security_api_results.json      |    1 +
 .../passwd_security_api_results.json          |    1 +
 .../patch_security_api_results.json           |    1 +
 .../patchutils_security_api_results.json      |    1 +
 .../pavucontrol_security_api_results.json     |    1 +
 .../pax_security_api_results.json             |    1 +
 .../pciutils-libs_security_api_results.json   |    1 +
 .../pciutils_security_api_results.json        |    1 +
 .../pcp-conf_security_api_results.json        |    1 +
 .../pcp-doc_security_api_results.json         |    1 +
 ...ort-pcp2graphite_security_api_results.json |    1 +
 .../pcp-gui_security_api_results.json         |    1 +
 .../pcp-libs_security_api_results.json        |    1 +
 .../pcp-manager_security_api_results.json     |    1 +
 ...cp-pmda-activemq_security_api_results.json |    1 +
 .../pcp-pmda-apache_security_api_results.json |    1 +
 .../pcp-pmda-bash_security_api_results.json   |    1 +
 ...pcp-pmda-bonding_security_api_results.json |    1 +
 .../pcp-pmda-cisco_security_api_results.json  |    1 +
 .../pcp-pmda-dbping_security_api_results.json |    1 +
 .../pcp-pmda-dm_security_api_results.json     |    1 +
 .../pcp-pmda-ds389_security_api_results.json  |    1 +
 ...cp-pmda-ds389log_security_api_results.json |    1 +
 ...da-elasticsearch_security_api_results.json |    1 +
 .../pcp-pmda-gfs2_security_api_results.json   |    1 +
 ...pcp-pmda-gluster_security_api_results.json |    1 +
 .../pcp-pmda-gpfs_security_api_results.json   |    1 +
 .../pcp-pmda-gpsd_security_api_results.json   |    1 +
 .../pcp-pmda-json_security_api_results.json   |    1 +
 ...p-pmda-lmsensors_security_api_results.json |    1 +
 .../pcp-pmda-logger_security_api_results.json |    1 +
 .../pcp-pmda-lustre_security_api_results.json |    1 +
 ...-pmda-lustrecomm_security_api_results.json |    1 +
 .../pcp-pmda-mailq_security_api_results.json  |    1 +
 ...cp-pmda-memcache_security_api_results.json |    1 +
 .../pcp-pmda-mounts_security_api_results.json |    1 +
 .../pcp-pmda-mysql_security_api_results.json  |    1 +
 .../pcp-pmda-named_security_api_results.json  |    1 +
 ...p-pmda-netfilter_security_api_results.json |    1 +
 .../pcp-pmda-news_security_api_results.json   |    1 +
 ...p-pmda-nfsclient_security_api_results.json |    1 +
 .../pcp-pmda-nginx_security_api_results.json  |    1 +
 ...-pmda-nvidia-gpu_security_api_results.json |    1 +
 .../pcp-pmda-pdns_security_api_results.json   |    1 +
 ...pcp-pmda-postfix_security_api_results.json |    1 +
 ...-pmda-postgresql_security_api_results.json |    1 +
 ...cp-pmda-roomtemp_security_api_results.json |    1 +
 .../pcp-pmda-rpm_security_api_results.json    |    1 +
 ...cp-pmda-sendmail_security_api_results.json |    1 +
 .../pcp-pmda-shping_security_api_results.json |    1 +
 ...pcp-pmda-summary_security_api_results.json |    1 +
 .../pcp-pmda-trace_security_api_results.json  |    1 +
 ...pcp-pmda-unbound_security_api_results.json |    1 +
 .../pcp-pmda-weblog_security_api_results.json |    1 +
 .../pcp-pmda-zswap_security_api_results.json  |    1 +
 .../pcp-selinux_security_api_results.json     |    1 +
 ...pcp-system-tools_security_api_results.json |    1 +
 .../pcp-webapi_security_api_results.json      |    1 +
 .../pcp-zeroconf_security_api_results.json    |    1 +
 .../pcp_security_api_results.json             |    1 +
 .../pcre-devel_security_api_results.json      |    1 +
 .../pcre2-utf16_security_api_results.json     |    1 +
 .../pcre2_security_api_results.json           |    1 +
 .../pcre_security_api_results.json            |    1 +
 .../pcs-snmp_security_api_results.json        |    1 +
 .../pcs_security_api_results.json             |    1 +
 .../pcsc-lite-ccid_security_api_results.json  |    1 +
 .../pcsc-lite-libs_security_api_results.json  |    1 +
 .../pcsc-lite_security_api_results.json       |    1 +
 .../pentaho-libxml_security_api_results.json  |    1 +
 ...ting-flow-engine_security_api_results.json |    1 +
 .../perf_security_api_results.json            |    1 +
 .../perftest_security_api_results.json        |    1 +
 ...l-Algorithm-Diff_security_api_results.json |    1 +
 ...rl-App-cpanminus_security_api_results.json |    1 +
 ...-Archive-Extract_security_api_results.json |    1 +
 ...perl-Archive-Tar_security_api_results.json |    1 +
 ...perl-Archive-Zip_security_api_results.json |    1 +
 ...perl-Authen-SASL_security_api_results.json |    1 +
 .../perl-B-Lint_security_api_results.json     |    1 +
 .../perl-Bit-Vector_security_api_results.json |    1 +
 ...siness-ISBN-Data_security_api_results.json |    1 +
 ...rl-Business-ISBN_security_api_results.json |    1 +
 ...perl-CGI-Session_security_api_results.json |    1 +
 .../perl-CGI_security_api_results.json        |    1 +
 ...eta-Requirements_security_api_results.json |    1 +
 ...l-CPAN-Meta-YAML_security_api_results.json |    1 +
 .../perl-CPAN-Meta_security_api_results.json  |    1 +
 ...NPLUS-Dist-Build_security_api_results.json |    1 +
 .../perl-CPANPLUS_security_api_results.json   |    1 +
 .../perl-CPAN_security_api_results.json       |    1 +
 .../perl-Carp-Clan_security_api_results.json  |    1 +
 .../perl-Carp_security_api_results.json       |    1 +
 .../perl-Class-ISA_security_api_results.json  |    1 +
 .../perl-Class-Load_security_api_results.json |    1 +
 ...-Class-Singleton_security_api_results.json |    1 +
 ...mpress-Raw-Bzip2_security_api_results.json |    1 +
 ...ompress-Raw-Zlib_security_api_results.json |    1 +
 ...erl-Convert-ASN1_security_api_results.json |    1 +
 ...t-OpenSSL-Bignum_security_api_results.json |    1 +
 ...rypt-OpenSSL-RSA_security_api_results.json |    1 +
 ...t-OpenSSL-Random_security_api_results.json |    1 +
 ...erl-Crypt-SSLeay_security_api_results.json |    1 +
 .../perl-DBD-MySQL_security_api_results.json  |    1 +
 .../perl-DBD-Pg_security_api_results.json     |    1 +
 .../perl-DBD-SQLite_security_api_results.json |    1 +
 .../perl-DBI_security_api_results.json        |    1 +
 ...perl-DBIx-Simple_security_api_results.json |    1 +
 .../perl-DB_File_security_api_results.json    |    1 +
 ...perl-Data-Dumper_security_api_results.json |    1 +
 ...erl-Data-OptList_security_api_results.json |    1 +
 .../perl-Date-Calc_security_api_results.json  |    1 +
 .../perl-Date-Manip_security_api_results.json |    1 +
 ...Format-DateParse_security_api_results.json |    1 +
 ...-DateTime-Locale_security_api_results.json |    1 +
 ...ateTime-TimeZone_security_api_results.json |    1 +
 .../perl-DateTime_security_api_results.json   |    1 +
 ...rl-Devel-Symdump_security_api_results.json |    1 +
 ...perl-Digest-HMAC_security_api_results.json |    1 +
 .../perl-Digest-MD5_security_api_results.json |    1 +
 ...perl-Digest-SHA1_security_api_results.json |    1 +
 .../perl-Digest-SHA_security_api_results.json |    1 +
 .../perl-Digest_security_api_results.json     |    1 +
 ...rl-Encode-Detect_security_api_results.json |    1 +
 ...rl-Encode-Locale_security_api_results.json |    1 +
 .../perl-Encode_security_api_results.json     |    1 +
 .../perl-Env_security_api_results.json        |    1 +
 .../perl-Error_security_api_results.json      |    1 +
 .../perl-Exporter_security_api_results.json   |    1 +
 ...xtUtils-CBuilder_security_api_results.json |    1 +
 ...l-ExtUtils-Embed_security_api_results.json |    1 +
 ...ExtUtils-Install_security_api_results.json |    1 +
 ...tUtils-MakeMaker_security_api_results.json |    1 +
 ...xtUtils-Manifest_security_api_results.json |    1 +
 ...ExtUtils-ParseXS_security_api_results.json |    1 +
 .../perl-FCGI_security_api_results.json       |    1 +
 ...l-File-CheckTree_security_api_results.json |    1 +
 .../perl-File-Fetch_security_api_results.json |    1 +
 ...erl-File-Listing_security_api_results.json |    1 +
 .../perl-File-Path_security_api_results.json  |    1 +
 .../perl-File-Slurp_security_api_results.json |    1 +
 .../perl-File-Temp_security_api_results.json  |    1 +
 .../perl-Filter_security_api_results.json     |    1 +
 .../perl-Font-AFM_security_api_results.json   |    1 +
 .../perl-FreezeThaw_security_api_results.json |    1 +
 .../perl-GD_security_api_results.json         |    1 +
 .../perl-GSSAPI_security_api_results.json     |    1 +
 ...perl-Getopt-Long_security_api_results.json |    1 +
 .../perl-Git_security_api_results.json        |    1 +
 ...perl-HTML-Format_security_api_results.json |    1 +
 ...perl-HTML-Parser_security_api_results.json |    1 +
 ...perl-HTML-Tagset_security_api_results.json |    1 +
 .../perl-HTML-Tree_security_api_results.json  |    1 +
 ...erl-HTTP-Cookies_security_api_results.json |    1 +
 ...perl-HTTP-Daemon_security_api_results.json |    1 +
 .../perl-HTTP-Date_security_api_results.json  |    1 +
 ...erl-HTTP-Message_security_api_results.json |    1 +
 ...l-HTTP-Negotiate_security_api_results.json |    1 +
 .../perl-HTTP-Tiny_security_api_results.json  |    1 +
 ...perl-IO-Compress_security_api_results.json |    1 +
 .../perl-IO-HTML_security_api_results.json    |    1 +
 ...-IO-Socket-INET6_security_api_results.json |    1 +
 ...erl-IO-Socket-IP_security_api_results.json |    1 +
 ...rl-IO-Socket-SSL_security_api_results.json |    1 +
 .../perl-IO-Zlib_security_api_results.json    |    1 +
 .../perl-IO-stringy_security_api_results.json |    1 +
 .../perl-IPC-Cmd_security_api_results.json    |    1 +
 .../perl-JSON-PP_security_api_results.json    |    1 +
 .../perl-JSON_security_api_results.json       |    1 +
 .../perl-LDAP_security_api_results.json       |    1 +
 ...l-LWP-MediaTypes_security_api_results.json |    1 +
 ...P-Protocol-https_security_api_results.json |    1 +
 ...l-List-MoreUtils_security_api_results.json |    1 +
 ...erl-Locale-Codes_security_api_results.json |    1 +
 ...-Maketext-Simple_security_api_results.json |    1 +
 ...-Locale-Maketext_security_api_results.json |    1 +
 ...g-Message-Simple_security_api_results.json |    1 +
 ...perl-Log-Message_security_api_results.json |    1 +
 .../perl-Mail-DKIM_security_api_results.json  |    1 +
 .../perl-Mail-SPF_security_api_results.json   |    1 +
 .../perl-MailTools_security_api_results.json  |    1 +
 ...erl-Module-Build_security_api_results.json |    1 +
 ...-Module-CoreList_security_api_results.json |    1 +
 ...e-Implementation_security_api_results.json |    1 +
 ...Load-Conditional_security_api_results.json |    1 +
 ...perl-Module-Load_security_api_results.json |    1 +
 ...rl-Module-Loaded_security_api_results.json |    1 +
 ...-Module-Metadata_security_api_results.json |    1 +
 ...Module-Pluggable_security_api_results.json |    1 +
 ...l-Module-Runtime_security_api_results.json |    1 +
 ...Module-Signature_security_api_results.json |    1 +
 .../perl-Mozilla-CA_security_api_results.json |    1 +
 ...erl-Mozilla-LDAP_security_api_results.json |    1 +
 .../perl-Net-DNS_security_api_results.json    |    1 +
 .../perl-Net-Daemon_security_api_results.json |    1 +
 .../perl-Net-HTTP_security_api_results.json   |    1 +
 .../perl-Net-LibIDN_security_api_results.json |    1 +
 ...erl-Net-SMTP-SSL_security_api_results.json |    1 +
 .../perl-Net-SSLeay_security_api_results.json |    1 +
 .../perl-NetAddr-IP_security_api_results.json |    1 +
 .../perl-Newt_security_api_results.json       |    1 +
 ...-Object-Accessor_security_api_results.json |    1 +
 .../perl-PAR-Dist_security_api_results.json   |    1 +
 .../perl-PCP-PMDA_security_api_results.json   |    1 +
 ...ackage-Constants_security_api_results.json |    1 +
 ...precationManager_security_api_results.json |    1 +
 ...Package-Stash-XS_security_api_results.json |    1 +
 ...rl-Package-Stash_security_api_results.json |    1 +
 ...erl-Params-Check_security_api_results.json |    1 +
 ...perl-Params-Util_security_api_results.json |    1 +
 ...-Params-Validate_security_api_results.json |    1 +
 ...-Parse-CPAN-Meta_security_api_results.json |    1 +
 .../perl-PathTools_security_api_results.json  |    1 +
 ...perl-Perl-OSType_security_api_results.json |    1 +
 ...l-Perl4-CoreLibs_security_api_results.json |    1 +
 .../perl-PlRPC_security_api_results.json      |    1 +
 ...perl-Pod-Checker_security_api_results.json |    1 +
 ...erl-Pod-Coverage_security_api_results.json |    1 +
 ...perl-Pod-Escapes_security_api_results.json |    1 +
 .../perl-Pod-LaTeX_security_api_results.json  |    1 +
 .../perl-Pod-Parser_security_api_results.json |    1 +
 ...perl-Pod-Perldoc_security_api_results.json |    1 +
 ...perl-Pod-Plainer_security_api_results.json |    1 +
 .../perl-Pod-Simple_security_api_results.json |    1 +
 .../perl-Pod-Usage_security_api_results.json  |    1 +
 .../perl-SGMLSpm_security_api_results.json    |    1 +
 ...erl-SNMP_Session_security_api_results.json |    1 +
 ...calar-List-Utils_security_api_results.json |    1 +
 .../perl-Socket6_security_api_results.json    |    1 +
 .../perl-Socket_security_api_results.json     |    1 +
 .../perl-Storable_security_api_results.json   |    1 +
 ...tring-ShellQuote_security_api_results.json |    1 +
 ...perl-Sub-Install_security_api_results.json |    1 +
 .../perl-Sys-CPU_security_api_results.json    |    1 +
 ...perl-Sys-Guestfs_security_api_results.json |    1 +
 ...perl-Sys-MemInfo_security_api_results.json |    1 +
 .../perl-Sys-Syslog_security_api_results.json |    1 +
 .../perl-Sys-Virt_security_api_results.json   |    1 +
 .../perl-Term-UI_security_api_results.json    |    1 +
 ...perl-TermReadKey_security_api_results.json |    1 +
 ...erl-Test-Harness_security_api_results.json |    1 +
 ...est-Pod-Coverage_security_api_results.json |    1 +
 .../perl-Test-Pod_security_api_results.json   |    1 +
 ...perl-Test-Simple_security_api_results.json |    1 +
 .../perl-Text-Diff_security_api_results.json  |    1 +
 ...-Text-ParseWords_security_api_results.json |    1 +
 ...erl-Text-Soundex_security_api_results.json |    1 +
 ...l-Text-Unidecode_security_api_results.json |    1 +
 ...erl-Thread-Queue_security_api_results.json |    1 +
 .../perl-Time-HiRes_security_api_results.json |    1 +
 .../perl-Time-Local_security_api_results.json |    1 +
 .../perl-Time-Piece_security_api_results.json |    1 +
 .../perl-TimeDate_security_api_results.json   |    1 +
 .../perl-Try-Tiny_security_api_results.json   |    1 +
 .../perl-URI_security_api_results.json        |    1 +
 ...ion-Requirements_security_api_results.json |    1 +
 ...l-WWW-RobotRules_security_api_results.json |    1 +
 .../perl-XML-Dumper_security_api_results.json |    1 +
 ...ilter-BufferText_security_api_results.json |    1 +
 .../perl-XML-Grove_security_api_results.json  |    1 +
 .../perl-XML-LibXML_security_api_results.json |    1 +
 ...NamespaceSupport_security_api_results.json |    1 +
 .../perl-XML-Parser_security_api_results.json |    1 +
 ...erl-XML-SAX-Base_security_api_results.json |    1 +
 ...l-XML-SAX-Writer_security_api_results.json |    1 +
 .../perl-XML-SAX_security_api_results.json    |    1 +
 .../perl-XML-Simple_security_api_results.json |    1 +
 .../perl-XML-Twig_security_api_results.json   |    1 +
 .../perl-XML-Writer_security_api_results.json |    1 +
 .../perl-XML-XPath_security_api_results.json  |    1 +
 .../perl-YAML-Tiny_security_api_results.json  |    1 +
 .../perl-YAML_security_api_results.json       |    1 +
 .../perl-autodie_security_api_results.json    |    1 +
 .../perl-constant_security_api_results.json   |    1 +
 .../perl-core_security_api_results.json       |    1 +
 .../perl-devel_security_api_results.json      |    1 +
 .../perl-gettext_security_api_results.json    |    1 +
 .../perl-hivex_security_api_results.json      |    1 +
 .../perl-homedir_security_api_results.json    |    1 +
 .../perl-libintl_security_api_results.json    |    1 +
 .../perl-libs_security_api_results.json       |    1 +
 ...perl-libwww-perl_security_api_results.json |    1 +
 ...perl-libxml-perl_security_api_results.json |    1 +
 .../perl-local-lib_security_api_results.json  |    1 +
 .../perl-macros_security_api_results.json     |    1 +
 .../perl-parent_security_api_results.json     |    1 +
 .../perl-podlators_security_api_results.json  |    1 +
 ...perl-srpm-macros_security_api_results.json |    1 +
 ...l-threads-shared_security_api_results.json |    1 +
 .../perl-threads_security_api_results.json    |    1 +
 .../perl-version_security_api_results.json    |    1 +
 .../perl_security_api_results.json            |    1 +
 .../perltidy_security_api_results.json        |    1 +
 .../pexpect_security_api_results.json         |    1 +
 ...ackend-gstreamer_security_api_results.json |    1 +
 .../phonon-devel_security_api_results.json    |    1 +
 .../phonon_security_api_results.json          |    1 +
 .../php-cli_security_api_results.json         |    1 +
 .../php-common_security_api_results.json      |    1 +
 .../php-gd_security_api_results.json          |    1 +
 .../php-ldap_security_api_results.json        |    1 +
 .../php-mysql_security_api_results.json       |    1 +
 .../php-odbc_security_api_results.json        |    1 +
 .../php-pdo_security_api_results.json         |    1 +
 .../php-pear_security_api_results.json        |    1 +
 ...hp-pecl-memcache_security_api_results.json |    1 +
 .../php-pgsql_security_api_results.json       |    1 +
 .../php-process_security_api_results.json     |    1 +
 .../php-recode_security_api_results.json      |    1 +
 .../php-soap_security_api_results.json        |    1 +
 .../php-xml_security_api_results.json         |    1 +
 .../php-xmlrpc_security_api_results.json      |    1 +
 .../php_security_api_results.json             |    1 +
 .../pidgin-sipe_security_api_results.json     |    1 +
 .../pidgin_security_api_results.json          |    1 +
 .../pinentry-gtk_security_api_results.json    |    1 +
 .../pinentry-qt4_security_api_results.json    |    1 +
 .../pinentry-qt_security_api_results.json     |    1 +
 .../pinentry_security_api_results.json        |    1 +
 .../pinfo_security_api_results.json           |    1 +
 .../pixman-devel_security_api_results.json    |    1 +
 .../pixman_security_api_results.json          |    1 +
 .../pkgconfig_security_api_results.json       |    1 +
 .../pki-base-java_security_api_results.json   |    1 +
 .../pki-base_security_api_results.json        |    1 +
 .../pki-ca_security_api_results.json          |    1 +
 .../pki-kra_security_api_results.json         |    1 +
 .../pki-server_security_api_results.json      |    1 +
 .../pki-symkey_security_api_results.json      |    1 +
 .../pki-tools_security_api_results.json       |    1 +
 ...iptengine-python_security_api_results.json |    1 +
 ...ymouth-core-libs_security_api_results.json |    1 +
 ...th-graphics-libs_security_api_results.json |    1 +
 ...uth-plugin-label_security_api_results.json |    1 +
 ...-plugin-two-step_security_api_results.json |    1 +
 ...plymouth-scripts_security_api_results.json |    1 +
 ...uth-system-theme_security_api_results.json |    1 +
 ...uth-theme-charge_security_api_results.json |    1 +
 .../plymouth_security_api_results.json        |    1 +
 .../pm-utils_security_api_results.json        |    1 +
 .../pmdk-convert_security_api_results.json    |    1 +
 .../pmempool_security_api_results.json        |    1 +
 .../pnm2ppa_security_api_results.json         |    1 +
 .../po4a_security_api_results.json            |    1 +
 ...ycoreutils-devel_security_api_results.json |    1 +
 ...icycoreutils-gui_security_api_results.json |    1 +
 ...oreutils-newrole_security_api_results.json |    1 +
 ...coreutils-python_security_api_results.json |    1 +
 ...oreutils-sandbox_security_api_results.json |    1 +
 .../policycoreutils_security_api_results.json |    1 +
 .../polkit-devel_security_api_results.json    |    1 +
 .../polkit-docs_security_api_results.json     |    1 +
 .../polkit-kde_security_api_results.json      |    1 +
 ...lkit-pkla-compat_security_api_results.json |    1 +
 .../polkit-qt_security_api_results.json       |    1 +
 .../polkit_security_api_results.json          |    1 +
 .../poppler-data_security_api_results.json    |    1 +
 .../poppler-glib_security_api_results.json    |    1 +
 .../poppler-qt_security_api_results.json      |    1 +
 .../poppler-utils_security_api_results.json   |    1 +
 .../poppler_security_api_results.json         |    1 +
 .../popt-devel_security_api_results.json      |    1 +
 .../popt_security_api_results.json            |    1 +
 .../portreserve_security_api_results.json     |    1 +
 ...fix-perl-scripts_security_api_results.json |    1 +
 .../postfix_security_api_results.json         |    1 +
 ...stgresql-contrib_security_api_results.json |    1 +
 ...postgresql-devel_security_api_results.json |    1 +
 .../postgresql-docs_security_api_results.json |    1 +
 .../postgresql-jdbc_security_api_results.json |    1 +
 .../postgresql-libs_security_api_results.json |    1 +
 .../postgresql-odbc_security_api_results.json |    1 +
 ...ostgresql-plperl_security_api_results.json |    1 +
 ...tgresql-plpython_security_api_results.json |    1 +
 ...postgresql-pltcl_security_api_results.json |    1 +
 ...ostgresql-server_security_api_results.json |    1 +
 .../postgresql-test_security_api_results.json |    1 +
 .../postgresql_security_api_results.json      |    1 +
 ...othana2000-fonts_security_api_results.json |    1 +
 ...rpc-utils-python_security_api_results.json |    1 +
 .../powerpc-utils_security_api_results.json   |    1 +
 .../powertop_security_api_results.json        |    1 +
 .../ppc64-diag_security_api_results.json      |    1 +
 .../ppc64-utils_security_api_results.json     |    1 +
 .../ppp_security_api_results.json             |    1 +
 .../pptp_security_api_results.json            |    1 +
 .../prelink_security_api_results.json         |    1 +
 .../procmail_security_api_results.json        |    1 +
 .../procps-ng_security_api_results.json       |    1 +
 .../protobuf-c_security_api_results.json      |    1 +
 .../protobuf_security_api_results.json        |    1 +
 .../ps_mem_security_api_results.json          |    1 +
 .../psacct_security_api_results.json          |    1 +
 .../psmisc_security_api_results.json          |    1 +
 .../pth_security_api_results.json             |    1 +
 .../ptlib_security_api_results.json           |    1 +
 ...eaudio-gdm-hooks_security_api_results.json |    1 +
 ...audio-libs-devel_security_api_results.json |    1 +
 ...audio-libs-glib2_security_api_results.json |    1 +
 .../pulseaudio-libs_security_api_results.json |    1 +
 ...module-bluetooth_security_api_results.json |    1 +
 ...audio-module-x11_security_api_results.json |    1 +
 ...pulseaudio-utils_security_api_results.json |    1 +
 .../pulseaudio_security_api_results.json      |    1 +
 .../purple-sipe_security_api_results.json     |    1 +
 .../pyOpenSSL_security_api_results.json       |    1 +
 .../pycairo_security_api_results.json         |    1 +
 .../pygobject2_security_api_results.json      |    1 +
 ...pygobject3-devel_security_api_results.json |    1 +
 .../pygpgme_security_api_results.json         |    1 +
 .../pygtk2-libglade_security_api_results.json |    1 +
 .../pygtk2_security_api_results.json          |    1 +
 .../pykde4_security_api_results.json          |    1 +
 .../pykickstart_security_api_results.json     |    1 +
 .../pyldb_security_api_results.json           |    1 +
 .../pyliblzma_security_api_results.json       |    1 +
 .../pyorbit_security_api_results.json         |    1 +
 .../pyparsing_security_api_results.json       |    1 +
 .../pyparted_security_api_results.json        |    1 +
 .../pyserial_security_api_results.json        |    1 +
 .../pytalloc_security_api_results.json        |    1 +
 .../python-IPy_security_api_results.json      |    1 +
 .../python-adal_security_api_results.json     |    1 +
 .../python-augeas_security_api_results.json   |    1 +
 ...python-azure-sdk_security_api_results.json |    1 +
 .../python-babel_security_api_results.json    |    1 +
 ...l_match_hostname_security_api_results.json |    1 +
 ...python-backports_security_api_results.json |    1 +
 .../python-bcc_security_api_results.json      |    1 +
 .../python-beaker_security_api_results.json   |    1 +
 .../python-blivet_security_api_results.json   |    1 +
 .../python-boto3_security_api_results.json    |    1 +
 .../python-brlapi_security_api_results.json   |    1 +
 .../python-cffi_security_api_results.json     |    1 +
 .../python-chardet_security_api_results.json  |    1 +
 .../python-cherrypy_security_api_results.json |    1 +
 .../python-clufter_security_api_results.json  |    1 +
 ...python-configobj_security_api_results.json |    1 +
 ...thon-configshell_security_api_results.json |    1 +
 .../python-coverage_security_api_results.json |    1 +
 .../python-cpio_security_api_results.json     |    1 +
 .../python-cups_security_api_results.json     |    1 +
 .../python-custodia_security_api_results.json |    1 +
 .../python-dateutil_security_api_results.json |    1 +
 ...python-decorator_security_api_results.json |    1 +
 .../python-deltarpm_security_api_results.json |    1 +
 .../python-devel_security_api_results.json    |    1 +
 .../python-di_security_api_results.json       |    1 +
 ...python-dmidecode_security_api_results.json |    1 +
 .../python-dns_security_api_results.json      |    1 +
 .../python-docs_security_api_results.json     |    1 +
 .../python-docutils_security_api_results.json |    1 +
 .../python-enum34_security_api_results.json   |    1 +
 .../python-ethtool_security_api_results.json  |    1 +
 .../python-firewall_security_api_results.json |    1 +
 ...hon-gobject-base_security_api_results.json |    1 +
 .../python-gobject_security_api_results.json  |    1 +
 .../python-gssapi_security_api_results.json   |    1 +
 .../python-gudev_security_api_results.json    |    1 +
 .../python-hwdata_security_api_results.json   |    1 +
 .../python-idna_security_api_results.json     |    1 +
 .../python-iniparse_security_api_results.json |    1 +
 .../python-inotify_security_api_results.json  |    1 +
 .../python-ipaddr_security_api_results.json   |    1 +
 ...python-ipaddress_security_api_results.json |    1 +
 .../python-isodate_security_api_results.json  |    1 +
 ...hon-javapackages_security_api_results.json |    1 +
 .../python-jinja2_security_api_results.json   |    1 +
 ...python-jsonpatch_security_api_results.json |    1 +
 ...thon-jsonpointer_security_api_results.json |    1 +
 .../python-jwcrypto_security_api_results.json |    1 +
 .../python-jwt_security_api_results.json      |    1 +
 .../python-kdcproxy_security_api_results.json |    1 +
 .../python-kerberos_security_api_results.json |    1 +
 .../python-kitchen_security_api_results.json  |    1 +
 .../python-kmod_security_api_results.json     |    1 +
 .../python-krbV_security_api_results.json     |    1 +
 .../python-ldap_security_api_results.json     |    1 +
 ...ython-libguestfs_security_api_results.json |    1 +
 ...thon-libipa_hbac_security_api_results.json |    1 +
 .../python-libs_security_api_results.json     |    1 +
 ...libsss_nss_idmap_security_api_results.json |    1 +
 ...hon-linux-procfs_security_api_results.json |    1 +
 .../python-lxml_security_api_results.json     |    1 +
 .../python-magic_security_api_results.json    |    1 +
 .../python-mako_security_api_results.json     |    1 +
 ...ython-markupsafe_security_api_results.json |    1 +
 ...ython-matplotlib_security_api_results.json |    1 +
 .../python-meh-gui_security_api_results.json  |    1 +
 .../python-meh_security_api_results.json      |    1 +
 ...python-memcached_security_api_results.json |    1 +
 .../python-msrest_security_api_results.json   |    1 +
 ...thon-msrestazure_security_api_results.json |    1 +
 .../python-netaddr_security_api_results.json  |    1 +
 ...python-netifaces_security_api_results.json |    1 +
 .../python-nose_security_api_results.json     |    1 +
 .../python-nss_security_api_results.json      |    1 +
 .../python-ntplib_security_api_results.json   |    1 +
 .../python-paramiko_security_api_results.json |    1 +
 .../python-paste_security_api_results.json    |    1 +
 .../python-pcp_security_api_results.json      |    1 +
 .../python-perf_security_api_results.json     |    1 +
 .../python-pillow_security_api_results.json   |    1 +
 .../python-ply_security_api_results.json      |    1 +
 ...thon-prettytable_security_api_results.json |    1 +
 .../python-psycopg2_security_api_results.json |    1 +
 ...python-pwquality_security_api_results.json |    1 +
 .../python-pyblock_security_api_results.json  |    1 +
 ...python-pycparser_security_api_results.json |    1 +
 .../python-pycurl_security_api_results.json   |    1 +
 .../python-pyudev_security_api_results.json   |    1 +
 ...thon-qrcode-core_security_api_results.json |    1 +
 .../python-rados_security_api_results.json    |    1 +
 .../python-rbd_security_api_results.json      |    1 +
 ...python-reportlab_security_api_results.json |    1 +
 .../python-requests_security_api_results.json |    1 +
 ...hsm-certificates_security_api_results.json |    1 +
 .../python-rhsm_security_api_results.json     |    1 +
 ...ython-rpm-macros_security_api_results.json |    1 +
 .../python-rtslib_security_api_results.json   |    1 +
 ...ython-s3transfer_security_api_results.json |    1 +
 ...ython-schedutils_security_api_results.json |    1 +
 ...hon-setproctitle_security_api_results.json |    1 +
 ...ython-setuptools_security_api_results.json |    1 +
 .../python-six_security_api_results.json      |    1 +
 ...python-slip-dbus_security_api_results.json |    1 +
 .../python-slip_security_api_results.json     |    1 +
 .../python-smbc_security_api_results.json     |    1 +
 ...ython-sqlalchemy_security_api_results.json |    1 +
 ...thon-srpm-macros_security_api_results.json |    1 +
 ...ython-sss-murmur_security_api_results.json |    1 +
 .../python-sss_security_api_results.json      |    1 +
 ...ython-sssdconfig_security_api_results.json |    1 +
 .../python-suds_security_api_results.json     |    1 +
 ...ython-syspurpose_security_api_results.json |    1 +
 .../python-tdb_security_api_results.json      |    1 +
 .../python-tempita_security_api_results.json  |    1 +
 .../python-tevent_security_api_results.json   |    1 +
 ...ython-urlgrabber_security_api_results.json |    1 +
 .../python-urllib3_security_api_results.json  |    1 +
 .../python-urwid_security_api_results.json    |    1 +
 ...ython-virtualenv_security_api_results.json |    1 +
 ...ython-volume_key_security_api_results.json |    1 +
 .../python-yubico_security_api_results.json   |    1 +
 .../python2-blivet3_security_api_results.json |    1 +
 ...python2-blockdev_security_api_results.json |    1 +
 ...python2-bytesize_security_api_results.json |    1 +
 .../python2-caribou_security_api_results.json |    1 +
 ...on2-cryptography_security_api_results.json |    1 +
 .../python2-futures_security_api_results.json |    1 +
 .../python2-hawkey_security_api_results.json  |    1 +
 ...ython2-ipaclient_security_api_results.json |    1 +
 .../python2-ipalib_security_api_results.json  |    1 +
 ...ython2-ipaserver_security_api_results.json |    1 +
 ...d-client-install_security_api_results.json |    1 +
 ...python2-oauthlib_security_api_results.json |    1 +
 ...2-pyasn1-modules_security_api_results.json |    1 +
 .../python2-pyasn1_security_api_results.json  |    1 +
 .../python2-pyatspi_security_api_results.json |    1 +
 ...equests-oauthlib_security_api_results.json |    1 +
 ...thon2-rpm-macros_security_api_results.json |    1 +
 ...on2-subprocess32_security_api_results.json |    1 +
 .../python3-libs_security_api_results.json    |    1 +
 .../python3-pip_security_api_results.json     |    1 +
 ...3-rpm-generators_security_api_results.json |    1 +
 ...thon3-rpm-macros_security_api_results.json |    1 +
 ...thon3-setuptools_security_api_results.json |    1 +
 .../python3-wheel_security_api_results.json   |    1 +
 .../python3_security_api_results.json         |    1 +
 .../python_security_api_results.json          |    1 +
 .../pytz_security_api_results.json            |    1 +
 .../pyusb_security_api_results.json           |    1 +
 .../pywbem_security_api_results.json          |    1 +
 .../pyxattr_security_api_results.json         |    1 +
 .../qca-ossl_security_api_results.json        |    1 +
 .../qca2_security_api_results.json            |    1 +
 .../qclib_security_api_results.json           |    1 +
 .../qdox_security_api_results.json            |    1 +
 ...qemu-guest-agent_security_api_results.json |    1 +
 .../qemu-img-ma_security_api_results.json     |    1 +
 .../qemu-img_security_api_results.json        |    1 +
 ...mu-kvm-common-ma_security_api_results.json |    1 +
 .../qemu-kvm-common_security_api_results.json |    1 +
 .../qemu-kvm-ma_security_api_results.json     |    1 +
 ...emu-kvm-tools-ma_security_api_results.json |    1 +
 .../qemu-kvm-tools_security_api_results.json  |    1 +
 .../qemu-kvm_security_api_results.json        |    1 +
 .../qgnomeplatform_security_api_results.json  |    1 +
 .../qimageblitz_security_api_results.json     |    1 +
 .../qjson_security_api_results.json           |    1 +
 .../qpdf-libs_security_api_results.json       |    1 +
 .../qperf_security_api_results.json           |    1 +
 .../qrencode-libs_security_api_results.json   |    1 +
 .../qt-devel_security_api_results.json        |    1 +
 .../qt-mysql_security_api_results.json        |    1 +
 .../qt-odbc_security_api_results.json         |    1 +
 .../qt-postgresql_security_api_results.json   |    1 +
 .../qt-settings_security_api_results.json     |    1 +
 .../qt-x11_security_api_results.json          |    1 +
 .../qt3-MySQL_security_api_results.json       |    1 +
 .../qt3-ODBC_security_api_results.json        |    1 +
 .../qt3-PostgreSQL_security_api_results.json  |    1 +
 .../qt3-devel_security_api_results.json       |    1 +
 .../qt3_security_api_results.json             |    1 +
 .../qt5-designer_security_api_results.json    |    1 +
 .../qt5-doctools_security_api_results.json    |    1 +
 .../qt5-linguist_security_api_results.json    |    1 +
 .../qt5-qt3d-devel_security_api_results.json  |    1 +
 .../qt5-qt3d_security_api_results.json        |    1 +
 ...t5-qtbase-common_security_api_results.json |    1 +
 ...qt5-qtbase-devel_security_api_results.json |    1 +
 .../qt5-qtbase-gui_security_api_results.json  |    1 +
 ...qt5-qtbase-mysql_security_api_results.json |    1 +
 .../qt5-qtbase-odbc_security_api_results.json |    1 +
 ...tbase-postgresql_security_api_results.json |    1 +
 .../qt5-qtbase_security_api_results.json      |    1 +
 .../qt5-qtcanvas3d_security_api_results.json  |    1 +
 ...nnectivity-devel_security_api_results.json |    1 +
 ...5-qtconnectivity_security_api_results.json |    1 +
 ...eclarative-devel_security_api_results.json |    1 +
 ...t5-qtdeclarative_security_api_results.json |    1 +
 .../qt5-qtdoc_security_api_results.json       |    1 +
 ...-qtenginio-devel_security_api_results.json |    1 +
 .../qt5-qtenginio_security_api_results.json   |    1 +
 ...graphicaleffects_security_api_results.json |    1 +
 ...5-qtimageformats_security_api_results.json |    1 +
 ...qtlocation-devel_security_api_results.json |    1 +
 .../qt5-qtlocation_security_api_results.json  |    1 +
 ...multimedia-devel_security_api_results.json |    1 +
 ...qt5-qtmultimedia_security_api_results.json |    1 +
 ...qtquickcontrols2_security_api_results.json |    1 +
 ...-qtquickcontrols_security_api_results.json |    1 +
 ...5-qtscript-devel_security_api_results.json |    1 +
 .../qt5-qtscript_security_api_results.json    |    1 +
 ...-qtsensors-devel_security_api_results.json |    1 +
 .../qt5-qtsensors_security_api_results.json   |    1 +
 .../qt5-qtserialbus_security_api_results.json |    1 +
 ...serialport-devel_security_api_results.json |    1 +
 ...qt5-qtserialport_security_api_results.json |    1 +
 .../qt5-qtsvg-devel_security_api_results.json |    1 +
 .../qt5-qtsvg_security_api_results.json       |    1 +
 ...5-qttools-common_security_api_results.json |    1 +
 ...t5-qttools-devel_security_api_results.json |    1 +
 ...ls-libs-designer_security_api_results.json |    1 +
 ...signercomponents_security_api_results.json |    1 +
 ...ttools-libs-help_security_api_results.json |    1 +
 .../qt5-qttools_security_api_results.json     |    1 +
 ...5-qttranslations_security_api_results.json |    1 +
 .../qt5-qtwayland_security_api_results.json   |    1 +
 ...webchannel-devel_security_api_results.json |    1 +
 ...qt5-qtwebchannel_security_api_results.json |    1 +
 ...websockets-devel_security_api_results.json |    1 +
 ...qt5-qtwebsockets_security_api_results.json |    1 +
 ...tx11extras-devel_security_api_results.json |    1 +
 .../qt5-qtx11extras_security_api_results.json |    1 +
 ...mlpatterns-devel_security_api_results.json |    1 +
 ...t5-qtxmlpatterns_security_api_results.json |    1 +
 .../qt5-rpm-macros_security_api_results.json  |    1 +
 .../qt_security_api_results.json              |    1 +
 .../quagga_security_api_results.json          |    1 +
 .../quota-nls_security_api_results.json       |    1 +
 .../quota_security_api_results.json           |    1 +
 .../radvd_security_api_results.json           |    1 +
 .../raptor2_security_api_results.json         |    1 +
 .../rarian-compat_security_api_results.json   |    1 +
 .../rarian_security_api_results.json          |    1 +
 .../rasdaemon_security_api_results.json       |    1 +
 .../rasqal_security_api_results.json          |    1 +
 .../rcs_security_api_results.json             |    1 +
 .../rdate_security_api_results.json           |    1 +
 .../rdist_security_api_results.json           |    1 +
 .../rdma-core-devel_security_api_results.json |    1 +
 .../rdma-core_security_api_results.json       |    1 +
 .../readline-devel_security_api_results.json  |    1 +
 .../readline_security_api_results.json        |    1 +
 .../realmd_security_api_results.json          |    1 +
 .../rear_security_api_results.json            |    1 +
 .../recode_security_api_results.json          |    1 +
 .../redfish-finder_security_api_results.json  |    1 +
 ...edhat-access-gui_security_api_results.json |    1 +
 ...ccess-plugin-ipa_security_api_results.json |    1 +
 ...redhat-bookmarks_security_api_results.json |    1 +
 ...redhat-indexhtml_security_api_results.json |    1 +
 .../redhat-logos_security_api_results.json    |    1 +
 .../redhat-lsb-core_security_api_results.json |    1 +
 .../redhat-lsb-cxx_security_api_results.json  |    1 +
 ...dhat-lsb-desktop_security_api_results.json |    1 +
 ...at-lsb-languages_security_api_results.json |    1 +
 ...hat-lsb-printing_security_api_results.json |    1 +
 ...ubmod-multimedia_security_api_results.json |    1 +
 ...-submod-security_security_api_results.json |    1 +
 .../redhat-lsb_security_api_results.json      |    1 +
 .../redhat-menus_security_api_results.json    |    1 +
 ...t-release-client_security_api_results.json |    1 +
 ...ease-computenode_security_api_results.json |    1 +
 ...hat-release-eula_security_api_results.json |    1 +
 ...t-release-server_security_api_results.json |    1 +
 ...ease-workstation_security_api_results.json |    1 +
 ...edhat-rpm-config_security_api_results.json |    1 +
 ...pport-lib-python_security_api_results.json |    1 +
 ...hat-support-tool_security_api_results.json |    1 +
 ...-dracut-plymouth_security_api_results.json |    1 +
 ...t-upgrade-dracut_security_api_results.json |    1 +
 ...hat-upgrade-tool_security_api_results.json |    1 +
 ...redland-virtuoso_security_api_results.json |    1 +
 .../redland_security_api_results.json         |    1 +
 .../regexp_security_api_results.json          |    1 +
 .../relaxngDatatype_security_api_results.json |    1 +
 ...ce-agents-aliyun_security_api_results.json |    1 +
 ...ource-agents-gcp_security_api_results.json |    1 +
 .../resource-agents_security_api_results.json |    1 +
 .../rest_security_api_results.json            |    1 +
 ...se-atom-provider_security_api_results.json |    1 +
 ...easy-base-client_security_api_results.json |    1 +
 ...jackson-provider_security_api_results.json |    1 +
 ...se-jaxb-provider_security_api_results.json |    1 +
 ...y-base-jaxrs-api_security_api_results.json |    1 +
 ...teasy-base-jaxrs_security_api_results.json |    1 +
 ...ettison-provider_security_api_results.json |    1 +
 .../rfkill_security_api_results.json          |    1 +
 .../rhdb-utils_security_api_results.json      |    1 +
 .../rhino_security_api_results.json           |    1 +
 .../rhn-check_security_api_results.json       |    1 +
 ...rhn-client-tools_security_api_results.json |    1 +
 .../rhn-setup-gnome_security_api_results.json |    1 +
 .../rhn-setup_security_api_results.json       |    1 +
 .../rhnlib_security_api_results.json          |    1 +
 .../rhnsd_security_api_results.json           |    1 +
 .../rhsm-gtk_security_api_results.json        |    1 +
 .../rhythmbox_security_api_results.json       |    1 +
 .../rmt_security_api_results.json             |    1 +
 .../rng-tools_security_api_results.json       |    1 +
 .../rngom_security_api_results.json           |    1 +
 .../rootfiles_security_api_results.json       |    1 +
 .../rp-pppoe_security_api_results.json        |    1 +
 .../rpcbind_security_api_results.json         |    1 +
 .../rpm-build-libs_security_api_results.json  |    1 +
 .../rpm-build_security_api_results.json       |    1 +
 .../rpm-devel_security_api_results.json       |    1 +
 .../rpm-libs_security_api_results.json        |    1 +
 .../rpm-python_security_api_results.json      |    1 +
 .../rpm-sign_security_api_results.json        |    1 +
 .../rpm_security_api_results.json             |    1 +
 .../rpmdevtools_security_api_results.json     |    1 +
 .../rpmemd_security_api_results.json          |    1 +
 .../rpmlint_security_api_results.json         |    1 +
 .../rrdtool-perl_security_api_results.json    |    1 +
 .../rrdtool_security_api_results.json         |    1 +
 .../rsh-server_security_api_results.json      |    1 +
 .../rsh_security_api_results.json             |    1 +
 .../rsync_security_api_results.json           |    1 +
 .../rsyslog-gnutls_security_api_results.json  |    1 +
 .../rsyslog-gssapi_security_api_results.json  |    1 +
 .../rsyslog-kafka_security_api_results.json   |    1 +
 ...slog-mmjsonparse_security_api_results.json |    1 +
 .../rsyslog-mysql_security_api_results.json   |    1 +
 .../rsyslog-pgsql_security_api_results.json   |    1 +
 .../rsyslog-relp_security_api_results.json    |    1 +
 .../rsyslog_security_api_results.json         |    1 +
 .../rtkit_security_api_results.json           |    1 +
 .../ruby-irb_security_api_results.json        |    1 +
 .../ruby-libs_security_api_results.json       |    1 +
 .../ruby_security_api_results.json            |    1 +
 .../rubygem-abrt_security_api_results.json    |    1 +
 ...bygem-bigdecimal_security_api_results.json |    1 +
 .../rubygem-bundler_security_api_results.json |    1 +
 ...bygem-io-console_security_api_results.json |    1 +
 .../rubygem-json_security_api_results.json    |    1 +
 ...-http-persistent_security_api_results.json |    1 +
 .../rubygem-psych_security_api_results.json   |    1 +
 .../rubygem-rdoc_security_api_results.json    |    1 +
 .../rubygem-thor_security_api_results.json    |    1 +
 .../rubygems_security_api_results.json        |    1 +
 .../rusers-server_security_api_results.json   |    1 +
 .../rusers_security_api_results.json          |    1 +
 .../rwho_security_api_results.json            |    1 +
 .../s390utils-base_security_api_results.json  |    1 +
 ...utils-cmsfs-fuse_security_api_results.json |    1 +
 .../s390utils-cmsfs_security_api_results.json |    1 +
 ...90utils-cpuplugd_security_api_results.json |    1 +
 ...90utils-hmcdrvfs_security_api_results.json |    1 +
 ...90utils-iucvterm_security_api_results.json |    1 +
 ...0utils-mon_statd_security_api_results.json |    1 +
 ...90utils-osasnmpd_security_api_results.json |    1 +
 .../s390utils-zdsfs_security_api_results.json |    1 +
 ...s390utils-ziomon_security_api_results.json |    1 +
 .../s390utils_security_api_results.json       |    1 +
 .../saab-fonts_security_api_results.json      |    1 +
 .../sac_security_api_results.json             |    1 +
 ...amba-client-libs_security_api_results.json |    1 +
 .../samba-client_security_api_results.json    |    1 +
 ...amba-common-libs_security_api_results.json |    1 +
 ...mba-common-tools_security_api_results.json |    1 +
 .../samba-common_security_api_results.json    |    1 +
 ...ba-krb5-printing_security_api_results.json |    1 +
 .../samba-libs_security_api_results.json      |    1 +
 .../samba-python_security_api_results.json    |    1 +
 ...-winbind-clients_security_api_results.json |    1 +
 ...-winbind-modules_security_api_results.json |    1 +
 .../samba-winbind_security_api_results.json   |    1 +
 .../samba_security_api_results.json           |    1 +
 ...devanagari-fonts_security_api_results.json |    1 +
 ...yak-fonts-common_security_api_results.json |    1 +
 ...k-gujarati-fonts_security_api_results.json |    1 +
 ...-malayalam-fonts_security_api_results.json |    1 +
 ...myak-oriya-fonts_security_api_results.json |    1 +
 ...myak-tamil-fonts_security_api_results.json |    1 +
 ...e-backends-devel_security_api_results.json |    1 +
 ...-drivers-cameras_security_api_results.json |    1 +
 ...drivers-scanners_security_api_results.json |    1 +
 ...ne-backends-libs_security_api_results.json |    1 +
 .../sane-backends_security_api_results.json   |    1 +
 .../sane-frontends_security_api_results.json  |    1 +
 .../sassist_security_api_results.json         |    1 +
 .../satyr_security_api_results.json           |    1 +
 .../sbc_security_api_results.json             |    1 +
 .../sbd_security_api_results.json             |    1 +
 ...blim-cim-client2_security_api_results.json |    1 +
 .../sblim-cmpi-base_security_api_results.json |    1 +
 ...sblim-cmpi-fsvol_security_api_results.json |    1 +
 ...lim-cmpi-network_security_api_results.json |    1 +
 ...sblim-cmpi-nfsv3_security_api_results.json |    1 +
 ...sblim-cmpi-nfsv4_security_api_results.json |    1 +
 ...blim-cmpi-params_security_api_results.json |    1 +
 ...sblim-cmpi-sysfs_security_api_results.json |    1 +
 ...blim-cmpi-syslog_security_api_results.json |    1 +
 ...-gather-provider_security_api_results.json |    1 +
 .../sblim-gather_security_api_results.json    |    1 +
 ...ndication_helper_security_api_results.json |    1 +
 .../sblim-sfcb_security_api_results.json      |    1 +
 .../sblim-sfcc_security_api_results.json      |    1 +
 .../sblim-smis-hba_security_api_results.json  |    1 +
 .../sblim-wbemcli_security_api_results.json   |    1 +
 .../scannotation_security_api_results.json    |    1 +
 ...curity-guide-doc_security_api_results.json |    1 +
 ...p-security-guide_security_api_results.json |    1 +
 .../scap-workbench_security_api_results.json  |    1 +
 .../scipy_security_api_results.json           |    1 +
 .../scl-utils_security_api_results.json       |    1 +
 .../screen_security_api_results.json          |    1 +
 .../scrub_security_api_results.json           |    1 +
 .../sdparm_security_api_results.json          |    1 +
 .../seabios-bin_security_api_results.json     |    1 +
 ...eahorse-nautilus_security_api_results.json |    1 +
 ...seahorse-sharing_security_api_results.json |    1 +
 .../seahorse_security_api_results.json        |    1 +
 .../seavgabios-bin_security_api_results.json  |    1 +
 .../sed_security_api_results.json             |    1 +
 ...nux-policy-devel_security_api_results.json |    1 +
 ...x-policy-minimum_security_api_results.json |    1 +
 ...linux-policy-mls_security_api_results.json |    1 +
 ...-policy-targeted_security_api_results.json |    1 +
 .../selinux-policy_security_api_results.json  |    1 +
 .../sendmail-cf_security_api_results.json     |    1 +
 .../sendmail_security_api_results.json        |    1 +
 .../servicelog_security_api_results.json      |    1 +
 .../setools-console_security_api_results.json |    1 +
 .../setools-libs_security_api_results.json    |    1 +
 ...bleshoot-plugins_security_api_results.json |    1 +
 ...ubleshoot-server_security_api_results.json |    1 +
 .../setroubleshoot_security_api_results.json  |    1 +
 .../setserial_security_api_results.json       |    1 +
 .../setup_security_api_results.json           |    1 +
 .../setuptool_security_api_results.json       |    1 +
 .../sg3_utils-libs_security_api_results.json  |    1 +
 .../sg3_utils_security_api_results.json       |    1 +
 .../sgabios-bin_security_api_results.json     |    1 +
 .../sgml-common_security_api_results.json     |    1 +
 .../sgpio_security_api_results.json           |    1 +
 .../shadow-utils_security_api_results.json    |    1 +
 ...ontologies-devel_security_api_results.json |    1 +
 ...sktop-ontologies_security_api_results.json |    1 +
 ...shared-mime-info_security_api_results.json |    1 +
 .../shim-ia32_security_api_results.json       |    1 +
 ...im-unsigned-ia32_security_api_results.json |    1 +
 ...him-unsigned-x64_security_api_results.json |    1 +
 .../shim-x64_security_api_results.json        |    1 +
 .../shotwell_security_api_results.json        |    1 +
 .../si-units_security_api_results.json        |    1 +
 ...abyssinica-fonts_security_api_results.json |    1 +
 .../sil-nuosu-fonts_security_api_results.json |    1 +
 ...sil-padauk-fonts_security_api_results.json |    1 +
 .../sip-devel_security_api_results.json       |    1 +
 .../sip-macros_security_api_results.json      |    1 +
 .../sip_security_api_results.json             |    1 +
 .../skkdic_security_api_results.json          |    1 +
 .../slang_security_api_results.json           |    1 +
 .../slapi-nis_security_api_results.json       |    1 +
 .../slf4j_security_api_results.json           |    1 +
 .../smartmontools_security_api_results.json   |    1 +
 ...alioldlipi-fonts_security_api_results.json |    1 +
 ...smc-dyuthi-fonts_security_api_results.json |    1 +
 ...smc-fonts-common_security_api_results.json |    1 +
 ...mc-kalyani-fonts_security_api_results.json |    1 +
 .../smc-meera-fonts_security_api_results.json |    1 +
 ...mc-rachana-fonts_security_api_results.json |    1 +
 ...umalayalam-fonts_security_api_results.json |    1 +
 ...smc-suruma-fonts_security_api_results.json |    1 +
 .../snapper-libs_security_api_results.json    |    1 +
 .../snapper_security_api_results.json         |    1 +
 .../snappy_security_api_results.json          |    1 +
 .../socat_security_api_results.json           |    1 +
 .../softhsm_security_api_results.json         |    1 +
 .../soprano-devel_security_api_results.json   |    1 +
 .../soprano_security_api_results.json         |    1 +
 .../sos-collector_security_api_results.json   |    1 +
 .../sos_security_api_results.json             |    1 +
 ...heme-freedesktop_security_api_results.json |    1 +
 .../soundtouch_security_api_results.json      |    1 +
 .../data/redhat7/table-1.csv                  | 4016 ++++++++++
 .../data/redhat7/table-2.csv                  |   48 +
 .../data/redhat7/table-3.csv                  | 4068 ++++++++++
 .../data/redhat7/table-4.csv                  | 3319 ++++++++
 .../data/redhat7/table-5.csv                  | 2325 ++++++
 .../data/redhat7/table-6.csv                  |   17 +
 .../data/redhat7/table-7.csv                  |   15 +
 .../data/redhat7/table-8.csv                  |   15 +
 .../data/redhat7/table-9.csv                  |   10 +
 .../all_redhat8_rpm_package_manifest.csv      | 6957 +++++++++++++++++
 ...89-ds-base-devel_security_api_results.json |    1 +
 ...ase-legacy-tools_security_api_results.json |    1 +
 ...389-ds-base-libs_security_api_results.json |    1 +
 ...389-ds-base-snmp_security_api_results.json |    1 +
 .../389-ds-base_security_api_results.json     |    1 +
 .../389-ds_security_api_results.json          |    1 +
 .../CUnit-devel_security_api_results.json     |    1 +
 .../CUnit_security_api_results.json           |    1 +
 .../GConf2-devel_security_api_results.json    |    1 +
 .../GConf2_security_api_results.json          |    1 +
 .../Judy_security_api_results.json            |    1 +
 .../LibRaw-devel_security_api_results.json    |    1 +
 .../LibRaw_security_api_results.json          |    1 +
 ...demManager-devel_security_api_results.json |    1 +
 ...nager-glib-devel_security_api_results.json |    1 +
 ...odemManager-glib_security_api_results.json |    1 +
 .../ModemManager_security_api_results.json    |    1 +
 .../Module_security_api_results.json          |    1 +
 ...workManager-adsl_security_api_results.json |    1 +
 ...anager-bluetooth_security_api_results.json |    1 +
 ...ager-cloud-setup_security_api_results.json |    1 +
 ...nectivity-redhat_security_api_results.json |    1 +
 ...er-config-server_security_api_results.json |    1 +
 ...er-routing-rules_security_api_results.json |    1 +
 ...ager-libnm-devel_security_api_results.json |    1 +
 ...orkManager-libnm_security_api_results.json |    1 +
 ...-libreswan-gnome_security_api_results.json |    1 +
 ...anager-libreswan_security_api_results.json |    1 +
 ...tworkManager-ovs_security_api_results.json |    1 +
 ...tworkManager-ppp_security_api_results.json |    1 +
 ...workManager-team_security_api_results.json |    1 +
 ...tworkManager-tui_security_api_results.json |    1 +
 ...workManager-wifi_security_api_results.json |    1 +
 ...workManager-wwan_security_api_results.json |    1 +
 .../NetworkManager_security_api_results.json  |    1 +
 .../OpenEXR-devel_security_api_results.json   |    1 +
 .../OpenEXR-libs_security_api_results.json    |    1 +
 .../OpenIPMI-devel_security_api_results.json  |    1 +
 ...OpenIPMI-lanserv_security_api_results.json |    1 +
 .../OpenIPMI-libs_security_api_results.json   |    1 +
 .../OpenIPMI-perl_security_api_results.json   |    1 +
 .../OpenIPMI_security_api_results.json        |    1 +
 ...ommand-not-found_security_api_results.json |    1 +
 .../PackageKit-cron_security_api_results.json |    1 +
 ...geKit-glib-devel_security_api_results.json |    1 +
 .../PackageKit-glib_security_api_results.json |    1 +
 ...gstreamer-plugin_security_api_results.json |    1 +
 ...eKit-gtk3-module_security_api_results.json |    1 +
 .../PackageKit_security_api_results.json      |    1 +
 .../Package_security_api_results.json         |    1 +
 .../SDL-devel_security_api_results.json       |    1 +
 .../SDL2-devel_security_api_results.json      |    1 +
 .../SDL2-static_security_api_results.json     |    1 +
 .../SDL2_security_api_results.json            |    1 +
 .../SDL_security_api_results.json             |    1 +
 .../SLOF_security_api_results.json            |    1 +
 .../SuperLU-devel_security_api_results.json   |    1 +
 .../SuperLU_security_api_results.json         |    1 +
 .../WALinuxAgent_security_api_results.json    |    1 +
 .../Xaw3d-devel_security_api_results.json     |    1 +
 .../Xaw3d_security_api_results.json           |    1 +
 ...-comfortaa-fonts_security_api_results.json |    1 +
 ...-cantarell-fonts_security_api_results.json |    1 +
 .../abrt-addon-ccpp_security_api_results.json |    1 +
 ...-coredump-helper_security_api_results.json |    1 +
 ...addon-kerneloops_security_api_results.json |    1 +
 ...addon-pstoreoops_security_api_results.json |    1 +
 ...brt-addon-vmcore_security_api_results.json |    1 +
 .../abrt-addon-xorg_security_api_results.json |    1 +
 .../abrt-cli-ng_security_api_results.json     |    1 +
 .../abrt-cli_security_api_results.json        |    1 +
 ...ole-notification_security_api_results.json |    1 +
 .../abrt-dbus_security_api_results.json       |    1 +
 .../abrt-desktop_security_api_results.json    |    1 +
 .../abrt-gui-libs_security_api_results.json   |    1 +
 .../abrt-gui_security_api_results.json        |    1 +
 ...t-java-connector_security_api_results.json |    1 +
 .../abrt-libs_security_api_results.json       |    1 +
 ...lugin-machine-id_security_api_results.json |    1 +
 ...plugin-sosreport_security_api_results.json |    1 +
 .../abrt-tui_security_api_results.json        |    1 +
 .../abrt_security_api_results.json            |    1 +
 ...ntsservice-devel_security_api_results.json |    1 +
 ...untsservice-libs_security_api_results.json |    1 +
 .../accountsservice_security_api_results.json |    1 +
 .../acl_security_api_results.json             |    1 +
 .../acpica-tools_security_api_results.json    |    1 +
 .../acpid_security_api_results.json           |    1 +
 .../adcli-doc_security_api_results.json       |    1 +
 .../adcli_security_api_results.json           |    1 +
 ...-cmap-deprecated_security_api_results.json |    1 +
 ...be-mappings-cmap_security_api_results.json |    1 +
 ...obe-mappings-pdf_security_api_results.json |    1 +
 ...ita-cursor-theme_security_api_results.json |    1 +
 ...waita-gtk2-theme_security_api_results.json |    1 +
 ...waita-icon-theme_security_api_results.json |    1 +
 .../adwaita-qt_security_api_results.json      |    1 +
 .../aide_security_api_results.json            |    1 +
 .../alsa-firmware_security_api_results.json   |    1 +
 .../alsa-lib-devel_security_api_results.json  |    1 +
 .../alsa-lib_security_api_results.json        |    1 +
 ...-plugins-arcamav_security_api_results.json |    1 +
 ...sa-plugins-maemo_security_api_results.json |    1 +
 ...alsa-plugins-oss_security_api_results.json |    1 +
 ...ugins-pulseaudio_security_api_results.json |    1 +
 ...ugins-samplerate_security_api_results.json |    1 +
 ...sa-plugins-speex_security_api_results.json |    1 +
 ...sa-plugins-upmix_security_api_results.json |    1 +
 ...lugins-usbstream_security_api_results.json |    1 +
 ...plugins-vdownmix_security_api_results.json |    1 +
 ...a-tools-firmware_security_api_results.json |    1 +
 .../alsa-ucm_security_api_results.json        |    1 +
 ...sa-utils-alsabat_security_api_results.json |    1 +
 .../alsa-utils_security_api_results.json      |    1 +
 .../amanda-client_security_api_results.json   |    1 +
 .../amanda-libs_security_api_results.json     |    1 +
 .../amanda-server_security_api_results.json   |    1 +
 .../amanda_security_api_results.json          |    1 +
 .../anaconda-core_security_api_results.json   |    1 +
 .../anaconda-dracut_security_api_results.json |    1 +
 .../anaconda-gui_security_api_results.json    |    1 +
 ...install-env-deps_security_api_results.json |    1 +
 .../anaconda-tui_security_api_results.json    |    1 +
 ...aconda-user-help_security_api_results.json |    1 +
 ...anaconda-widgets_security_api_results.json |    1 +
 .../anaconda_security_api_results.json        |    1 +
 .../annobin_security_api_results.json         |    1 +
 .../ansible-freeipa_security_api_results.json |    1 +
 .../ant-antlr_security_api_results.json       |    1 +
 .../ant-apache-bcel_security_api_results.json |    1 +
 .../ant-apache-bsf_security_api_results.json  |    1 +
 ...ant-apache-log4j_security_api_results.json |    1 +
 .../ant-apache-oro_security_api_results.json  |    1 +
 ...nt-apache-regexp_security_api_results.json |    1 +
 ...-apache-resolver_security_api_results.json |    1 +
 ...nt-apache-xalan2_security_api_results.json |    1 +
 ...-commons-logging_security_api_results.json |    1 +
 .../ant-commons-net_security_api_results.json |    1 +
 ...-contrib-javadoc_security_api_results.json |    1 +
 .../ant-contrib_security_api_results.json     |    1 +
 .../ant-javadoc_security_api_results.json     |    1 +
 .../ant-javamail_security_api_results.json    |    1 +
 .../ant-jdepend_security_api_results.json     |    1 +
 .../ant-jmf_security_api_results.json         |    1 +
 .../ant-jsch_security_api_results.json        |    1 +
 .../ant-junit_security_api_results.json       |    1 +
 .../ant-lib_security_api_results.json         |    1 +
 .../ant-manual_security_api_results.json      |    1 +
 .../ant-swing_security_api_results.json       |    1 +
 .../ant-testutil_security_api_results.json    |    1 +
 .../ant-xz_security_api_results.json          |    1 +
 .../ant_security_api_results.json             |    1 +
 .../antlr-C++_security_api_results.json       |    1 +
 .../antlr-javadoc_security_api_results.json   |    1 +
 .../antlr-manual_security_api_results.json    |    1 +
 .../antlr-tool_security_api_results.json      |    1 +
 ...alliance-javadoc_security_api_results.json |    1 +
 .../aopalliance_security_api_results.json     |    1 +
 ...eanutils-javadoc_security_api_results.json |    1 +
 ...ommons-beanutils_security_api_results.json |    1 +
 ...mons-cli-javadoc_security_api_results.json |    1 +
 ...ache-commons-cli_security_api_results.json |    1 +
 ...ns-codec-javadoc_security_api_results.json |    1 +
 ...he-commons-codec_security_api_results.json |    1 +
 ...lections-javadoc_security_api_results.json |    1 +
 ...ns-testframework_security_api_results.json |    1 +
 ...mons-collections_security_api_results.json |    1 +
 ...compress-javadoc_security_api_results.json |    1 +
 ...commons-compress_security_api_results.json |    1 +
 ...ons-exec-javadoc_security_api_results.json |    1 +
 ...che-commons-exec_security_api_results.json |    1 +
 ...mmons-io-javadoc_security_api_results.json |    1 +
 ...pache-commons-io_security_api_results.json |    1 +
 ...s-jxpath-javadoc_security_api_results.json |    1 +
 ...e-commons-jxpath_security_api_results.json |    1 +
 ...ons-lang-javadoc_security_api_results.json |    1 +
 ...ns-lang3-javadoc_security_api_results.json |    1 +
 ...he-commons-lang3_security_api_results.json |    1 +
 ...che-commons-lang_security_api_results.json |    1 +
 ...-logging-javadoc_security_api_results.json |    1 +
 ...-commons-logging_security_api_results.json |    1 +
 ...mons-net-javadoc_security_api_results.json |    1 +
 ...ache-commons-net_security_api_results.json |    1 +
 ...e-commons-parent_security_api_results.json |    1 +
 ...ache-ivy-javadoc_security_api_results.json |    1 +
 .../apache-ivy_security_api_results.json      |    1 +
 .../apache-parent_security_api_results.json   |    1 +
 ...resource-bundles_security_api_results.json |    1 +
 .../apcu-panel_security_api_results.json      |    1 +
 .../appstream-data_security_api_results.json  |    1 +
 .../apr-devel_security_api_results.json       |    1 +
 .../apr-util-bdb_security_api_results.json    |    1 +
 .../apr-util-devel_security_api_results.json  |    1 +
 .../apr-util-ldap_security_api_results.json   |    1 +
 .../apr-util-mysql_security_api_results.json  |    1 +
 .../apr-util-odbc_security_api_results.json   |    1 +
 ...apr-util-openssl_security_api_results.json |    1 +
 .../apr-util-pgsql_security_api_results.json  |    1 +
 .../apr-util-sqlite_security_api_results.json |    1 +
 .../apr-util_security_api_results.json        |    1 +
 .../apr_security_api_results.json             |    1 +
 ...qute-bnd-javadoc_security_api_results.json |    1 +
 .../aqute-bnd_security_api_results.json       |    1 +
 .../aqute-bndlib_security_api_results.json    |    1 +
 .../arpwatch_security_api_results.json        |    1 +
 .../asciidoc-doc_security_api_results.json    |    1 +
 .../asciidoc_security_api_results.json        |    1 +
 .../aspell-devel_security_api_results.json    |    1 +
 .../aspell-en_security_api_results.json       |    1 +
 .../aspell_security_api_results.json          |    1 +
 ...core-runtime-3.0_security_api_results.json |    1 +
 ...core-runtime-3.1_security_api_results.json |    1 +
 ...rgeting-pack-3.0_security_api_results.json |    1 +
 ...rgeting-pack-3.1_security_api_results.json |    1 +
 ...rtj-core-javadoc_security_api_results.json |    1 +
 .../assertj-core_security_api_results.json    |    1 +
 ...t-spi2-atk-devel_security_api_results.json |    1 +
 .../at-spi2-atk_security_api_results.json     |    1 +
 ...-spi2-core-devel_security_api_results.json |    1 +
 .../at-spi2-core_security_api_results.json    |    1 +
 .../at_security_api_results.json              |    1 +
 ...atinject-javadoc_security_api_results.json |    1 +
 .../atinject-tck_security_api_results.json    |    1 +
 .../atinject_security_api_results.json        |    1 +
 .../atk-devel_security_api_results.json       |    1 +
 .../atk_security_api_results.json             |    1 +
 .../atkmm-devel_security_api_results.json     |    1 +
 .../atkmm-doc_security_api_results.json       |    1 +
 .../atkmm_security_api_results.json           |    1 +
 ...las-corei2-devel_security_api_results.json |    1 +
 .../atlas-corei2_security_api_results.json    |    1 +
 .../atlas-devel_security_api_results.json     |    1 +
 .../atlas-z10-devel_security_api_results.json |    1 +
 .../atlas-z10_security_api_results.json       |    1 +
 ...atlas-z196-devel_security_api_results.json |    1 +
 .../atlas-z196_security_api_results.json      |    1 +
 .../atlas_security_api_results.json           |    1 +
 .../attr_security_api_results.json            |    1 +
 ...ispd-plugins-zos_security_api_results.json |    1 +
 .../audispd-plugins_security_api_results.json |    1 +
 ...audit-libs-devel_security_api_results.json |    1 +
 .../audit-libs_security_api_results.json      |    1 +
 .../audit_security_api_results.json           |    1 +
 .../augeas-devel_security_api_results.json    |    1 +
 .../augeas-libs_security_api_results.json     |    1 +
 .../augeas_security_api_results.json          |    1 +
 .../authd_security_api_results.json           |    1 +
 ...uthselect-compat_security_api_results.json |    1 +
 .../authselect-libs_security_api_results.json |    1 +
 .../authselect_security_api_results.json      |    1 +
 ...autoconf-archive_security_api_results.json |    1 +
 .../autoconf213_security_api_results.json     |    1 +
 .../autoconf_security_api_results.json        |    1 +
 .../autocorr-af_security_api_results.json     |    1 +
 .../autocorr-bg_security_api_results.json     |    1 +
 .../autocorr-ca_security_api_results.json     |    1 +
 .../autocorr-cs_security_api_results.json     |    1 +
 .../autocorr-da_security_api_results.json     |    1 +
 .../autocorr-de_security_api_results.json     |    1 +
 .../autocorr-en_security_api_results.json     |    1 +
 .../autocorr-es_security_api_results.json     |    1 +
 .../autocorr-fa_security_api_results.json     |    1 +
 .../autocorr-fi_security_api_results.json     |    1 +
 .../autocorr-fr_security_api_results.json     |    1 +
 .../autocorr-ga_security_api_results.json     |    1 +
 .../autocorr-hr_security_api_results.json     |    1 +
 .../autocorr-hu_security_api_results.json     |    1 +
 .../autocorr-is_security_api_results.json     |    1 +
 .../autocorr-it_security_api_results.json     |    1 +
 .../autocorr-ja_security_api_results.json     |    1 +
 .../autocorr-ko_security_api_results.json     |    1 +
 .../autocorr-lb_security_api_results.json     |    1 +
 .../autocorr-lt_security_api_results.json     |    1 +
 .../autocorr-mn_security_api_results.json     |    1 +
 .../autocorr-nl_security_api_results.json     |    1 +
 .../autocorr-pl_security_api_results.json     |    1 +
 .../autocorr-pt_security_api_results.json     |    1 +
 .../autocorr-ro_security_api_results.json     |    1 +
 .../autocorr-ru_security_api_results.json     |    1 +
 .../autocorr-sk_security_api_results.json     |    1 +
 .../autocorr-sl_security_api_results.json     |    1 +
 .../autocorr-sr_security_api_results.json     |    1 +
 .../autocorr-sv_security_api_results.json     |    1 +
 .../autocorr-tr_security_api_results.json     |    1 +
 .../autocorr-vi_security_api_results.json     |    1 +
 .../autocorr-zh_security_api_results.json     |    1 +
 .../autofs_security_api_results.json          |    1 +
 .../autogen-libopts_security_api_results.json |    1 +
 .../autogen_security_api_results.json         |    1 +
 .../automake_security_api_results.json        |    1 +
 .../autotrace_security_api_results.json       |    1 +
 .../avahi-autoipd_security_api_results.json   |    1 +
 ...ompat-howl-devel_security_api_results.json |    1 +
 ...vahi-compat-howl_security_api_results.json |    1 +
 ...-libdns_sd-devel_security_api_results.json |    1 +
 ...compat-libdns_sd_security_api_results.json |    1 +
 .../avahi-devel_security_api_results.json     |    1 +
 .../avahi-glib_security_api_results.json      |    1 +
 .../avahi-gobject_security_api_results.json   |    1 +
 .../avahi-libs_security_api_results.json      |    1 +
 .../avahi-ui-gtk3_security_api_results.json   |    1 +
 .../avahi_security_api_results.json           |    1 +
 .../awscli_security_api_results.json          |    1 +
 .../babel_security_api_results.json           |    1 +
 .../babl-devel-docs_security_api_results.json |    1 +
 .../babl-devel_security_api_results.json      |    1 +
 .../babl_security_api_results.json            |    1 +
 .../bacula-client_security_api_results.json   |    1 +
 .../bacula-common_security_api_results.json   |    1 +
 .../bacula-console_security_api_results.json  |    1 +
 .../bacula-director_security_api_results.json |    1 +
 .../bacula-libs-sql_security_api_results.json |    1 +
 .../bacula-libs_security_api_results.json     |    1 +
 .../bacula-logwatch_security_api_results.json |    1 +
 .../bacula-storage_security_api_results.json  |    1 +
 .../baobab_security_api_results.json          |    1 +
 .../basesystem_security_api_results.json      |    1 +
 .../bash-completion_security_api_results.json |    1 +
 .../bash-doc_security_api_results.json        |    1 +
 .../bash_security_api_results.json            |    1 +
 .../bc_security_api_results.json              |    1 +
 .../bcc-devel_security_api_results.json       |    1 +
 .../bcc-doc_security_api_results.json         |    1 +
 .../bcc-tools_security_api_results.json       |    1 +
 .../bcc_security_api_results.json             |    1 +
 .../bcel-javadoc_security_api_results.json    |    1 +
 .../bcel_security_api_results.json            |    1 +
 .../bea-stax-api_security_api_results.json    |    1 +
 ...ommander-javadoc_security_api_results.json |    1 +
 ...beust-jcommander_security_api_results.json |    1 +
 .../bind-chroot_security_api_results.json     |    1 +
 .../bind-devel_security_api_results.json      |    1 +
 .../bind-dyndb-ldap_security_api_results.json |    1 +
 ...ind-export-devel_security_api_results.json |    1 +
 ...bind-export-libs_security_api_results.json |    1 +
 .../bind-libs-lite_security_api_results.json  |    1 +
 .../bind-libs_security_api_results.json       |    1 +
 .../bind-license_security_api_results.json    |    1 +
 .../bind-lite-devel_security_api_results.json |    1 +
 ...ind-pkcs11-devel_security_api_results.json |    1 +
 ...bind-pkcs11-libs_security_api_results.json |    1 +
 ...ind-pkcs11-utils_security_api_results.json |    1 +
 .../bind-pkcs11_security_api_results.json     |    1 +
 .../bind-sdb-chroot_security_api_results.json |    1 +
 .../bind-sdb_security_api_results.json        |    1 +
 .../bind-utils_security_api_results.json      |    1 +
 .../bind_security_api_results.json            |    1 +
 .../binutils-devel_security_api_results.json  |    1 +
 .../binutils_security_api_results.json        |    1 +
 .../biosdevname_security_api_results.json     |    1 +
 .../bison-devel_security_api_results.json     |    1 +
 .../bison-runtime_security_api_results.json   |    1 +
 .../bison_security_api_results.json           |    1 +
 ...ap-console-fonts_security_api_results.json |    1 +
 ...fangsongti-fonts_security_api_results.json |    1 +
 ...tmap-fixed-fonts_security_api_results.json |    1 +
 ...map-fonts-compat_security_api_results.json |    1 +
 ...typewriter-fonts_security_api_results.json |    1 +
 .../blas-devel_security_api_results.json      |    1 +
 .../blas64_security_api_results.json          |    1 +
 .../blas_security_api_results.json            |    1 +
 .../blivet-data_security_api_results.json     |    1 +
 .../blktrace_security_api_results.json        |    1 +
 .../bluez-cups_security_api_results.json      |    1 +
 .../bluez-hid2hci_security_api_results.json   |    1 +
 ...bluez-libs-devel_security_api_results.json |    1 +
 .../bluez-libs_security_api_results.json      |    1 +
 .../bluez-obexd_security_api_results.json     |    1 +
 .../bluez_security_api_results.json           |    1 +
 ...bnd-maven-plugin_security_api_results.json |    1 +
 .../bogofilter_security_api_results.json      |    1 +
 .../bolt_security_api_results.json            |    1 +
 .../boom-boot-conf_security_api_results.json  |    1 +
 .../boom-boot-grub2_security_api_results.json |    1 +
 .../boom-boot_security_api_results.json       |    1 +
 .../boost-atomic_security_api_results.json    |    1 +
 .../boost-build_security_api_results.json     |    1 +
 .../boost-chrono_security_api_results.json    |    1 +
 .../boost-container_security_api_results.json |    1 +
 .../boost-context_security_api_results.json   |    1 +
 .../boost-coroutine_security_api_results.json |    1 +
 .../boost-date-time_security_api_results.json |    1 +
 .../boost-devel_security_api_results.json     |    1 +
 .../boost-doc_security_api_results.json       |    1 +
 .../boost-examples_security_api_results.json  |    1 +
 .../boost-fiber_security_api_results.json     |    1 +
 ...boost-filesystem_security_api_results.json |    1 +
 ...oost-graph-mpich_security_api_results.json |    1 +
 ...st-graph-openmpi_security_api_results.json |    1 +
 .../boost-graph_security_api_results.json     |    1 +
 .../boost-iostreams_security_api_results.json |    1 +
 .../boost-jam_security_api_results.json       |    1 +
 .../boost-locale_security_api_results.json    |    1 +
 .../boost-log_security_api_results.json       |    1 +
 .../boost-math_security_api_results.json      |    1 +
 ...oost-mpich-devel_security_api_results.json |    1 +
 ...st-mpich-python3_security_api_results.json |    1 +
 .../boost-mpich_security_api_results.json     |    1 +
 .../boost-numpy3_security_api_results.json    |    1 +
 ...st-openmpi-devel_security_api_results.json |    1 +
 ...-openmpi-python3_security_api_results.json |    1 +
 .../boost-openmpi_security_api_results.json   |    1 +
 ...-program-options_security_api_results.json |    1 +
 ...st-python3-devel_security_api_results.json |    1 +
 .../boost-python3_security_api_results.json   |    1 +
 .../boost-random_security_api_results.json    |    1 +
 .../boost-regex_security_api_results.json     |    1 +
 ...st-serialization_security_api_results.json |    1 +
 .../boost-signals_security_api_results.json   |    1 +
 ...boost-stacktrace_security_api_results.json |    1 +
 .../boost-static_security_api_results.json    |    1 +
 .../boost-system_security_api_results.json    |    1 +
 .../boost-test_security_api_results.json      |    1 +
 .../boost-thread_security_api_results.json    |    1 +
 .../boost-timer_security_api_results.json     |    1 +
 ...ost-type_erasure_security_api_results.json |    1 +
 .../boost-wave_security_api_results.json      |    1 +
 .../boost_security_api_results.json           |    1 +
 ...booth-arbitrator_security_api_results.json |    1 +
 .../booth-core_security_api_results.json      |    1 +
 .../booth-site_security_api_results.json      |    1 +
 .../booth-test_security_api_results.json      |    1 +
 .../booth_security_api_results.json           |    1 +
 .../bpftool_security_api_results.json         |    1 +
 .../bpftrace_security_api_results.json        |    1 +
 ...bpg-algeti-fonts_security_api_results.json |    1 +
 ...veulebrivi-fonts_security_api_results.json |    1 +
 ...pg-classic-fonts_security_api_results.json |    1 +
 ...pg-courier-fonts_security_api_results.json |    1 +
 ...-courier-s-fonts_security_api_results.json |    1 +
 ...aena-block-fonts_security_api_results.json |    1 +
 ...ejavu-sans-fonts_security_api_results.json |    1 +
 .../bpg-elite-fonts_security_api_results.json |    1 +
 ...lsior-caps-fonts_security_api_results.json |    1 +
 ...-condenced-fonts_security_api_results.json |    1 +
 ...-excelsior-fonts_security_api_results.json |    1 +
 ...bpg-fonts-common_security_api_results.json |    1 +
 .../bpg-glaho-fonts_security_api_results.json |    1 +
 .../bpg-gorda-fonts_security_api_results.json |    1 +
 ...bpg-ingiri-fonts_security_api_results.json |    1 +
 ...irubaqidze-fonts_security_api_results.json |    1 +
 ...il-stephan-fonts_security_api_results.json |    1 +
 ...ovani-caps-fonts_security_api_results.json |    1 +
 ...mrgvlovani-fonts_security_api_results.json |    1 +
 ...ateli-caps-fonts_security_api_results.json |    1 +
 ...-condenced-fonts_security_api_results.json |    1 +
 ...bpg-nateli-fonts_security_api_results.json |    1 +
 ...edium-cond-fonts_security_api_results.json |    1 +
 ...ino-medium-fonts_security_api_results.json |    1 +
 .../bpg-sans-fonts_security_api_results.json  |    1 +
 ...ans-medium-fonts_security_api_results.json |    1 +
 ...ans-modern-fonts_security_api_results.json |    1 +
 ...ns-regular-fonts_security_api_results.json |    1 +
 .../bpg-serif-fonts_security_api_results.json |    1 +
 ...rif-modern-fonts_security_api_results.json |    1 +
 ...bpg-ucnobi-fonts_security_api_results.json |    1 +
 .../brasero-devel_security_api_results.json   |    1 +
 .../brasero-libs_security_api_results.json    |    1 +
 ...brasero-nautilus_security_api_results.json |    1 +
 .../brasero_security_api_results.json         |    1 +
 .../brlapi-devel_security_api_results.json    |    1 +
 .../brlapi-java_security_api_results.json     |    1 +
 .../brlapi_security_api_results.json          |    1 +
 .../brltty-at-spi2_security_api_results.json  |    1 +
 .../brltty-docs_security_api_results.json     |    1 +
 .../brltty-dracut_security_api_results.json   |    1 +
 ...brltty-espeak-ng_security_api_results.json |    1 +
 .../brltty-xw_security_api_results.json       |    1 +
 .../brltty_security_api_results.json          |    1 +
 .../brotli-devel_security_api_results.json    |    1 +
 .../brotli_security_api_results.json          |    1 +
 .../bsdtar_security_api_results.json          |    1 +
 .../bsf-javadoc_security_api_results.json     |    1 +
 .../bsf_security_api_results.json             |    1 +
 .../bsh-javadoc_security_api_results.json     |    1 +
 .../bsh-manual_security_api_results.json      |    1 +
 .../bsh_security_api_results.json             |    1 +
 .../bubblewrap_security_api_results.json      |    1 +
 .../buildah-tests_security_api_results.json   |    1 +
 .../buildah_security_api_results.json         |    1 +
 .../byacc_security_api_results.json           |    1 +
 .../byaccj_security_api_results.json          |    1 +
 .../byteman-javadoc_security_api_results.json |    1 +
 .../byteman_security_api_results.json         |    1 +
 .../bzip2-devel_security_api_results.json     |    1 +
 .../bzip2-libs_security_api_results.json      |    1 +
 .../bzip2_security_api_results.json           |    1 +
 .../c-ares-devel_security_api_results.json    |    1 +
 .../c-ares_security_api_results.json          |    1 +
 .../c2esp_security_api_results.json           |    1 +
 .../ca-certificates_security_api_results.json |    1 +
 .../cachefilesd_security_api_results.json     |    1 +
 .../cairo-devel_security_api_results.json     |    1 +
 ...ro-gobject-devel_security_api_results.json |    1 +
 .../cairo-gobject_security_api_results.json   |    1 +
 .../cairo_security_api_results.json           |    1 +
 .../cairomm-devel_security_api_results.json   |    1 +
 .../cairomm-doc_security_api_results.json     |    1 +
 .../cairomm_security_api_results.json         |    1 +
 .../cal10n-javadoc_security_api_results.json  |    1 +
 .../cal10n_security_api_results.json          |    1 +
 .../cargo-doc_security_api_results.json       |    1 +
 .../cargo_security_api_results.json           |    1 +
 .../cdi-api-javadoc_security_api_results.json |    1 +
 .../cdi-api_security_api_results.json         |    1 +
 ...cdparanoia-devel_security_api_results.json |    1 +
 .../cdparanoia-libs_security_api_results.json |    1 +
 .../cdparanoia_security_api_results.json      |    1 +
 .../cdrdao_security_api_results.json          |    1 +
 .../celt051-devel_security_api_results.json   |    1 +
 .../celt051_security_api_results.json         |    1 +
 .../certmonger_security_api_results.json      |    1 +
 .../cgdcbxd_security_api_results.json         |    1 +
 .../cglib-javadoc_security_api_results.json   |    1 +
 .../cglib_security_api_results.json           |    1 +
 .../check-devel_security_api_results.json     |    1 +
 .../check_security_api_results.json           |    1 +
 .../checkpolicy_security_api_results.json     |    1 +
 .../cheese-libs_security_api_results.json     |    1 +
 .../cheese_security_api_results.json          |    1 +
 .../chkconfig_security_api_results.json       |    1 +
 ...rome-gnome-shell_security_api_results.json |    1 +
 .../chrony_security_api_results.json          |    1 +
 .../chrpath_security_api_results.json         |    1 +
 .../cifs-utils_security_api_results.json      |    1 +
 .../cim-schema_security_api_results.json      |    1 +
 .../cjose-devel_security_api_results.json     |    1 +
 .../cjose_security_api_results.json           |    1 +
 .../clang-analyzer_security_api_results.json  |    1 +
 .../clang-devel_security_api_results.json     |    1 +
 .../clang-libs_security_api_results.json      |    1 +
 ...lang-tools-extra_security_api_results.json |    1 +
 .../clang_security_api_results.json           |    1 +
 ...emoji-annotation_security_api_results.json |    1 +
 .../clevis-dracut_security_api_results.json   |    1 +
 .../clevis-luks_security_api_results.json     |    1 +
 .../clevis-systemd_security_api_results.json  |    1 +
 .../clevis-udisks2_security_api_results.json  |    1 +
 .../clevis_security_api_results.json          |    1 +
 .../clippy_security_api_results.json          |    1 +
 .../cloud-init_security_api_results.json      |    1 +
 ...d-utils-growpart_security_api_results.json |    1 +
 ...ene-contribs-lib_security_api_results.json |    1 +
 ...ucene-core-devel_security_api_results.json |    1 +
 .../clucene-core_security_api_results.json    |    1 +
 .../clufter-bin_security_api_results.json     |    1 +
 .../clufter-cli_security_api_results.json     |    1 +
 .../clufter-common_security_api_results.json  |    1 +
 .../clufter-lib-ccs_security_api_results.json |    1 +
 ...fter-lib-general_security_api_results.json |    1 +
 .../clufter-lib-pcs_security_api_results.json |    1 +
 .../clutter-devel_security_api_results.json   |    1 +
 .../clutter-doc_security_api_results.json     |    1 +
 .../clutter-gst2_security_api_results.json    |    1 +
 ...utter-gst3-devel_security_api_results.json |    1 +
 .../clutter-gst3_security_api_results.json    |    1 +
 ...lutter-gtk-devel_security_api_results.json |    1 +
 .../clutter-gtk_security_api_results.json     |    1 +
 .../clutter_security_api_results.json         |    1 +
 .../cmake-data_security_api_results.json      |    1 +
 .../cmake-doc_security_api_results.json       |    1 +
 ...cmake-filesystem_security_api_results.json |    1 +
 .../cmake-gui_security_api_results.json       |    1 +
 ...cmake-rpm-macros_security_api_results.json |    1 +
 .../cmake_security_api_results.json           |    1 +
 .../cmirror_security_api_results.json         |    1 +
 .../cockpit-bridge_security_api_results.json  |    1 +
 ...cockpit-composer_security_api_results.json |    1 +
 ...ockpit-dashboard_security_api_results.json |    1 +
 .../cockpit-doc_security_api_results.json     |    1 +
 ...cockpit-machines_security_api_results.json |    1 +
 ...ckpit-packagekit_security_api_results.json |    1 +
 .../cockpit-pcp_security_api_results.json     |    1 +
 .../cockpit-podman_security_api_results.json  |    1 +
 ...ession-recording_security_api_results.json |    1 +
 ...cockpit-storaged_security_api_results.json |    1 +
 .../cockpit-system_security_api_results.json  |    1 +
 .../cockpit-ws_security_api_results.json      |    1 +
 .../cockpit_security_api_results.json         |    1 +
 .../codemodel_security_api_results.json       |    1 +
 .../cogl-devel_security_api_results.json      |    1 +
 .../cogl-doc_security_api_results.json        |    1 +
 .../cogl_security_api_results.json            |    1 +
 ...color-filesystem_security_api_results.json |    1 +
 ...olord-devel-docs_security_api_results.json |    1 +
 .../colord-devel_security_api_results.json    |    1 +
 ...colord-gtk-devel_security_api_results.json |    1 +
 .../colord-gtk_security_api_results.json      |    1 +
 .../colord-libs_security_api_results.json     |    1 +
 .../colord_security_api_results.json          |    1 +
 ...compat-exiv2-026_security_api_results.json |    1 +
 ...at-guile18-devel_security_api_results.json |    1 +
 .../compat-guile18_security_api_results.json  |    1 +
 ...t-libgfortran-48_security_api_results.json |    1 +
 ...thread-nonshared_security_api_results.json |    1 +
 .../compat-libtiff3_security_api_results.json |    1 +
 ...compat-openssl10_security_api_results.json |    1 +
 .../compiler-rt_security_api_results.json     |    1 +
 .../composer-cli_security_api_results.json    |    1 +
 .../conmon_security_api_results.json          |    1 +
 .../conntrack-tools_security_api_results.json |    1 +
 ...exception-logger_security_api_results.json |    1 +
 ...ontainer-selinux_security_api_results.json |    1 +
 .../container-tools_security_api_results.json |    1 +
 ...tworking-plugins_security_api_results.json |    1 +
 ...ontainers-common_security_api_results.json |    1 +
 .../convmv_security_api_results.json          |    1 +
 ...copy-jdk-configs_security_api_results.json |    1 +
 ...coreutils-common_security_api_results.json |    1 +
 ...coreutils-single_security_api_results.json |    1 +
 .../coreutils_security_api_results.json       |    1 +
 ...corosync-qdevice_security_api_results.json |    1 +
 .../corosync-qnetd_security_api_results.json  |    1 +
 .../corosync-vqsim_security_api_results.json  |    1 +
 .../corosync_security_api_results.json        |    1 +
 ...orosynclib-devel_security_api_results.json |    1 +
 .../corosynclib_security_api_results.json     |    1 +
 .../cpio_security_api_results.json            |    1 +
 .../cpp_security_api_results.json             |    1 +
 .../cppcheck_security_api_results.json        |    1 +
 .../cppunit-devel_security_api_results.json   |    1 +
 .../cppunit-doc_security_api_results.json     |    1 +
 .../cppunit_security_api_results.json         |    1 +
 .../cracklib-devel_security_api_results.json  |    1 +
 .../cracklib-dicts_security_api_results.json  |    1 +
 .../cracklib_security_api_results.json        |    1 +
 .../crash-devel_security_api_results.json     |    1 +
 ...sh-gcore-command_security_api_results.json |    1 +
 ...h-ptdump-command_security_api_results.json |    1 +
 ...sh-trace-command_security_api_results.json |    1 +
 .../crash_security_api_results.json           |    1 +
 .../crda_security_api_results.json            |    1 +
 ...eaterepo_c-devel_security_api_results.json |    1 +
 ...reaterepo_c-libs_security_api_results.json |    1 +
 .../createrepo_c_security_api_results.json    |    1 +
 .../crit_security_api_results.json            |    1 +
 .../criu_security_api_results.json            |    1 +
 .../cronie-anacron_security_api_results.json  |    1 +
 ...cronie-noanacron_security_api_results.json |    1 +
 .../cronie_security_api_results.json          |    1 +
 .../crontabs_security_api_results.json        |    1 +
 .../crypto-policies_security_api_results.json |    1 +
 ...cryptsetup-devel_security_api_results.json |    1 +
 .../cryptsetup-libs_security_api_results.json |    1 +
 ...tsetup-reencrypt_security_api_results.json |    1 +
 .../cryptsetup_security_api_results.json      |    1 +
 .../cscope_security_api_results.json          |    1 +
 .../ctags-etags_security_api_results.json     |    1 +
 .../ctags_security_api_results.json           |    1 +
 .../ctdb-tests_security_api_results.json      |    1 +
 .../ctdb_security_api_results.json            |    1 +
 ...haroni-clm-fonts_security_api_results.json |    1 +
 ...adings-clm-fonts_security_api_results.json |    1 +
 ...-david-clm-fonts_security_api_results.json |    1 +
 ...ugulin-clm-fonts_security_api_results.json |    1 +
 ...llinia-clm-fonts_security_api_results.json |    1 +
 ...mus-fonts-common_security_api_results.json |    1 +
 ...-ruehl-clm-fonts_security_api_results.json |    1 +
 ...adasim-clm-fonts_security_api_results.json |    1 +
 ...us-keteryg-fonts_security_api_results.json |    1 +
 ...miriam-clm-fonts_security_api_results.json |    1 +
 ...m-mono-clm-fonts_security_api_results.json |    1 +
 ...hlieli-clm-fonts_security_api_results.json |    1 +
 ...mus-shofar-fonts_security_api_results.json |    1 +
 ...simple-clm-fonts_security_api_results.json |    1 +
 ...hkenaz-clm-fonts_security_api_results.json |    1 +
 ...efarad-clm-fonts_security_api_results.json |    1 +
 ...yehuda-clm-fonts_security_api_results.json |    1 +
 .../cups-client_security_api_results.json     |    1 +
 .../cups-devel_security_api_results.json      |    1 +
 .../cups-filesystem_security_api_results.json |    1 +
 ...ps-filters-devel_security_api_results.json |    1 +
 ...ups-filters-libs_security_api_results.json |    1 +
 .../cups-filters_security_api_results.json    |    1 +
 .../cups-ipptool_security_api_results.json    |    1 +
 .../cups-libs_security_api_results.json       |    1 +
 .../cups-lpd_security_api_results.json        |    1 +
 .../cups-pk-helper_security_api_results.json  |    1 +
 .../cups_security_api_results.json            |    1 +
 .../curl_security_api_results.json            |    1 +
 .../custodia_security_api_results.json        |    1 +
 ...yrus-imapd-utils_security_api_results.json |    1 +
 ...cyrus-imapd-vzic_security_api_results.json |    1 +
 .../cyrus-imapd_security_api_results.json     |    1 +
 ...cyrus-sasl-devel_security_api_results.json |    1 +
 .../cyrus-sasl-gs2_security_api_results.json  |    1 +
 ...yrus-sasl-gssapi_security_api_results.json |    1 +
 .../cyrus-sasl-ldap_security_api_results.json |    1 +
 .../cyrus-sasl-lib_security_api_results.json  |    1 +
 .../cyrus-sasl-md5_security_api_results.json  |    1 +
 .../cyrus-sasl-ntlm_security_api_results.json |    1 +
 ...cyrus-sasl-plain_security_api_results.json |    1 +
 ...cyrus-sasl-scram_security_api_results.json |    1 +
 .../cyrus-sasl-sql_security_api_results.json  |    1 +
 .../cyrus-sasl_security_api_results.json      |    1 +
 .../daxctl-devel_security_api_results.json    |    1 +
 .../daxctl-libs_security_api_results.json     |    1 +
 .../daxctl_security_api_results.json          |    1 +
 .../daxio_security_api_results.json           |    1 +
 .../dblatex_security_api_results.json         |    1 +
 .../dbus-c++-devel_security_api_results.json  |    1 +
 .../dbus-c++-glib_security_api_results.json   |    1 +
 .../dbus-c++_security_api_results.json        |    1 +
 .../dbus-common_security_api_results.json     |    1 +
 .../dbus-daemon_security_api_results.json     |    1 +
 .../dbus-devel_security_api_results.json      |    1 +
 .../dbus-glib-devel_security_api_results.json |    1 +
 .../dbus-glib_security_api_results.json       |    1 +
 .../dbus-libs_security_api_results.json       |    1 +
 .../dbus-tools_security_api_results.json      |    1 +
 .../dbus-x11_security_api_results.json        |    1 +
 .../dbus_security_api_results.json            |    1 +
 .../dbxtool_security_api_results.json         |    1 +
 .../dconf-devel_security_api_results.json     |    1 +
 .../dconf-editor_security_api_results.json    |    1 +
 .../dconf_security_api_results.json           |    1 +
 .../dcraw_security_api_results.json           |    1 +
 .../dejagnu_security_api_results.json         |    1 +
 ...avu-fonts-common_security_api_results.json |    1 +
 ...ejavu-sans-fonts_security_api_results.json |    1 +
 ...-sans-mono-fonts_security_api_results.json |    1 +
 ...javu-serif-fonts_security_api_results.json |    1 +
 .../delve_security_api_results.json           |    1 +
 ...sktop-file-utils_security_api_results.json |    1 +
 .../devhelp-devel_security_api_results.json   |    1 +
 .../devhelp-libs_security_api_results.json    |    1 +
 .../devhelp_security_api_results.json         |    1 +
 ...ice-mapper-devel_security_api_results.json |    1 +
 ...pper-event-devel_security_api_results.json |    1 +
 ...apper-event-libs_security_api_results.json |    1 +
 ...ice-mapper-event_security_api_results.json |    1 +
 ...vice-mapper-libs_security_api_results.json |    1 +
 ...-multipath-devel_security_api_results.json |    1 +
 ...r-multipath-libs_security_api_results.json |    1 +
 ...mapper-multipath_security_api_results.json |    1 +
 ...-persistent-data_security_api_results.json |    1 +
 .../device-mapper_security_api_results.json   |    1 +
 .../dhcp-client_security_api_results.json     |    1 +
 .../dhcp-common_security_api_results.json     |    1 +
 .../dhcp-libs_security_api_results.json       |    1 +
 .../dhcp-relay_security_api_results.json      |    1 +
 .../dhcp-server_security_api_results.json     |    1 +
 .../dialog_security_api_results.json          |    1 +
 .../diffstat_security_api_results.json        |    1 +
 .../diffutils_security_api_results.json       |    1 +
 ...n-plugin-javadoc_security_api_results.json |    1 +
 ...ory-maven-plugin_security_api_results.json |    1 +
 .../dirsplit_security_api_results.json        |    1 +
 .../djvulibre-devel_security_api_results.json |    1 +
 .../djvulibre-libs_security_api_results.json  |    1 +
 .../djvulibre_security_api_results.json       |    1 +
 ...a-connector-dbus_security_api_results.json |    1 +
 .../dleyna-core_security_api_results.json     |    1 +
 .../dleyna-renderer_security_api_results.json |    1 +
 .../dleyna-server_security_api_results.json   |    1 +
 .../dlm-lib_security_api_results.json         |    1 +
 .../dlm_security_api_results.json             |    1 +
 .../dmidecode_security_api_results.json       |    1 +
 .../dnf-automatic_security_api_results.json   |    1 +
 .../dnf-data_security_api_results.json        |    1 +
 ...plugin-spacewalk_security_api_results.json |    1 +
 ...cription-manager_security_api_results.json |    1 +
 ...dnf-plugins-core_security_api_results.json |    1 +
 .../dnf_security_api_results.json             |    1 +
 .../dnsmasq-utils_security_api_results.json   |    1 +
 .../dnsmasq_security_api_results.json         |    1 +
 ...ec-trigger-panel_security_api_results.json |    1 +
 .../dnssec-trigger_security_api_results.json  |    1 +
 .../docbook-dtds_security_api_results.json    |    1 +
 ...book-style-dsssl_security_api_results.json |    1 +
 ...ocbook-style-xsl_security_api_results.json |    1 +
 .../docbook-utils_security_api_results.json   |    1 +
 .../docbook2X_security_api_results.json       |    1 +
 ...docbook5-schemas_security_api_results.json |    1 +
 .../dos2unix_security_api_results.json        |    1 +
 .../dosfstools_security_api_results.json      |    1 +
 .../dotconf-devel_security_api_results.json   |    1 +
 .../dotconf_security_api_results.json         |    1 +
 ...apphost-pack-3.0_security_api_results.json |    1 +
 ...apphost-pack-3.1_security_api_results.json |    1 +
 ...net-host-fxr-2.1_security_api_results.json |    1 +
 .../dotnet-host_security_api_results.json     |    1 +
 ...tnet-hostfxr-3.0_security_api_results.json |    1 +
 ...tnet-hostfxr-3.1_security_api_results.json |    1 +
 ...tnet-runtime-2.1_security_api_results.json |    1 +
 ...tnet-runtime-3.0_security_api_results.json |    1 +
 ...tnet-runtime-3.1_security_api_results.json |    1 +
 ...tnet-sdk-2.1.5xx_security_api_results.json |    1 +
 .../dotnet-sdk-2.1_security_api_results.json  |    1 +
 .../dotnet-sdk-3.0_security_api_results.json  |    1 +
 .../dotnet-sdk-3.1_security_api_results.json  |    1 +
 ...rgeting-pack-3.0_security_api_results.json |    1 +
 ...rgeting-pack-3.1_security_api_results.json |    1 +
 ...et-templates-3.0_security_api_results.json |    1 +
 ...et-templates-3.1_security_api_results.json |    1 +
 .../dotnet_security_api_results.json          |    1 +
 .../dovecot-devel_security_api_results.json   |    1 +
 .../dovecot-mysql_security_api_results.json   |    1 +
 .../dovecot-pgsql_security_api_results.json   |    1 +
 ...vecot-pigeonhole_security_api_results.json |    1 +
 .../dovecot_security_api_results.json         |    1 +
 ...xygen-doxywizard_security_api_results.json |    1 +
 .../doxygen-latex_security_api_results.json   |    1 +
 .../doxygen_security_api_results.json         |    1 +
 .../dpdk-devel_security_api_results.json      |    1 +
 .../dpdk-doc_security_api_results.json        |    1 +
 .../dpdk-tools_security_api_results.json      |    1 +
 .../dpdk_security_api_results.json            |    1 +
 .../dptfxtract_security_api_results.json      |    1 +
 .../dracut-caps_security_api_results.json     |    1 +
 ...t-config-generic_security_api_results.json |    1 +
 ...ut-config-rescue_security_api_results.json |    1 +
 .../dracut-live_security_api_results.json     |    1 +
 .../dracut-network_security_api_results.json  |    1 +
 .../dracut-squash_security_api_results.json   |    1 +
 .../dracut-tools_security_api_results.json    |    1 +
 .../dracut_security_api_results.json          |    1 +
 .../driverctl_security_api_results.json       |    1 +
 .../dropwatch_security_api_results.json       |    1 +
 .../drpm-devel_security_api_results.json      |    1 +
 .../drpm_security_api_results.json            |    1 +
 .../dtc_security_api_results.json             |    1 +
 .../dump_security_api_results.json            |    1 +
 .../dvd+rw-tools_security_api_results.json    |    1 +
 .../dwarves_security_api_results.json         |    1 +
 .../dwz_security_api_results.json             |    1 +
 .../dyninst-devel_security_api_results.json   |    1 +
 .../dyninst-doc_security_api_results.json     |    1 +
 .../dyninst-static_security_api_results.json  |    1 +
 ...yninst-testsuite_security_api_results.json |    1 +
 .../dyninst_security_api_results.json         |    1 +
 .../e2fsprogs-devel_security_api_results.json |    1 +
 .../e2fsprogs-libs_security_api_results.json  |    1 +
 .../e2fsprogs_security_api_results.json       |    1 +
 ...easymock-javadoc_security_api_results.json |    1 +
 .../easymock_security_api_results.json        |    1 +
 .../ed_security_api_results.json              |    1 +
 .../edk2-aarch64_security_api_results.json    |    1 +
 .../edk2-ovmf_security_api_results.json       |    1 +
 .../ee4j-parent_security_api_results.json     |    1 +
 .../efi-filesystem_security_api_results.json  |    1 +
 .../efi-srpm-macros_security_api_results.json |    1 +
 .../efibootmgr_security_api_results.json      |    1 +
 .../efivar-libs_security_api_results.json     |    1 +
 .../efivar_security_api_results.json          |    1 +
 .../egl-wayland_security_api_results.json     |    1 +
 ...alplatform-devel_security_api_results.json |    1 +
 .../eigen3-devel_security_api_results.json    |    1 +
 ...fod-client-devel_security_api_results.json |    1 +
 ...ebuginfod-client_security_api_results.json |    1 +
 ...fault-yama-scope_security_api_results.json |    1 +
 ...ils-devel-static_security_api_results.json |    1 +
 .../elfutils-devel_security_api_results.json  |    1 +
 ...elf-devel-static_security_api_results.json |    1 +
 ...ils-libelf-devel_security_api_results.json |    1 +
 .../elfutils-libelf_security_api_results.json |    1 +
 .../elfutils-libs_security_api_results.json   |    1 +
 .../elfutils_security_api_results.json        |    1 +
 .../elinks_security_api_results.json          |    1 +
 .../emacs-common_security_api_results.json    |    1 +
 ...emacs-filesystem_security_api_results.json |    1 +
 .../emacs-lucid_security_api_results.json     |    1 +
 .../emacs-nox_security_api_results.json       |    1 +
 .../emacs-terminal_security_api_results.json  |    1 +
 .../emacs_security_api_results.json           |    1 +
 .../enca-devel_security_api_results.json      |    1 +
 .../enca_security_api_results.json            |    1 +
 .../enchant-devel_security_api_results.json   |    1 +
 .../enchant2-devel_security_api_results.json  |    1 +
 .../enchant2_security_api_results.json        |    1 +
 .../enchant_security_api_results.json         |    1 +
 .../enscript_security_api_results.json        |    1 +
 ...ironment-modules_security_api_results.json |    1 +
 .../eog_security_api_results.json             |    1 +
 .../esc_security_api_results.json             |    1 +
 .../espeak-ng_security_api_results.json       |    1 +
 .../ethtool_security_api_results.json         |    1 +
 .../evemu-libs_security_api_results.json      |    1 +
 .../evemu_security_api_results.json           |    1 +
 ...e-browser-plugin_security_api_results.json |    1 +
 .../evince-libs_security_api_results.json     |    1 +
 .../evince-nautilus_security_api_results.json |    1 +
 .../evince_security_api_results.json          |    1 +
 ...ution-bogofilter_security_api_results.json |    1 +
 ...ata-server-devel_security_api_results.json |    1 +
 ...-data-server-doc_security_api_results.json |    1 +
 ...server-langpacks_security_api_results.json |    1 +
 ...data-server-perl_security_api_results.json |    1 +
 ...ata-server-tests_security_api_results.json |    1 +
 ...tion-data-server_security_api_results.json |    1 +
 .../evolution-devel_security_api_results.json |    1 +
 ...on-ews-langpacks_security_api_results.json |    1 +
 .../evolution-ews_security_api_results.json   |    1 +
 .../evolution-help_security_api_results.json  |    1 +
 ...lution-langpacks_security_api_results.json |    1 +
 ...n-mapi-langpacks_security_api_results.json |    1 +
 .../evolution-mapi_security_api_results.json  |    1 +
 .../evolution-pst_security_api_results.json   |    1 +
 ...ion-spamassassin_security_api_results.json |    1 +
 .../evolution_security_api_results.json       |    1 +
 ...ange-bmc-os-info_security_api_results.json |    1 +
 ...n-plugin-javadoc_security_api_results.json |    1 +
 ...xec-maven-plugin_security_api_results.json |    1 +
 .../execstack_security_api_results.json       |    1 +
 .../exempi-devel_security_api_results.json    |    1 +
 .../exempi_security_api_results.json          |    1 +
 .../exiv2-devel_security_api_results.json     |    1 +
 .../exiv2-doc_security_api_results.json       |    1 +
 .../exiv2-libs_security_api_results.json      |    1 +
 .../exiv2_security_api_results.json           |    1 +
 .../expat-devel_security_api_results.json     |    1 +
 .../expat_security_api_results.json           |    1 +
 .../expect_security_api_results.json          |    1 +
 .../fabtests_security_api_results.json        |    1 +
 .../fapolicyd_security_api_results.json       |    1 +
 .../farstream02_security_api_results.json     |    1 +
 .../fcoe-utils_security_api_results.json      |    1 +
 ...mpendium-javadoc_security_api_results.json |    1 +
 ...-osgi-compendium_security_api_results.json |    1 +
 ...sgi-core-javadoc_security_api_results.json |    1 +
 .../felix-osgi-core_security_api_results.json |    1 +
 ...undation-javadoc_security_api_results.json |    1 +
 ...-osgi-foundation_security_api_results.json |    1 +
 .../felix-parent_security_api_results.json    |    1 +
 ...ix-utils-javadoc_security_api_results.json |    1 +
 .../felix-utils_security_api_results.json     |    1 +
 ...ce-agents-aliyun_security_api_results.json |    1 +
 ...fence-agents-all_security_api_results.json |    1 +
 ...ce-agents-amt-ws_security_api_results.json |    1 +
 ...-agents-apc-snmp_security_api_results.json |    1 +
 ...fence-agents-apc_security_api_results.json |    1 +
 ...fence-agents-aws_security_api_results.json |    1 +
 ...agents-azure-arm_security_api_results.json |    1 +
 ...ents-bladecenter_security_api_results.json |    1 +
 ...e-agents-brocade_security_api_results.json |    1 +
 ...agents-cisco-mds_security_api_results.json |    1 +
 ...agents-cisco-ucs_security_api_results.json |    1 +
 ...ce-agents-common_security_api_results.json |    1 +
 ...e-agents-compute_security_api_results.json |    1 +
 ...nce-agents-drac5_security_api_results.json |    1 +
 ...gents-eaton-snmp_security_api_results.json |    1 +
 ...e-agents-emerson_security_api_results.json |    1 +
 ...fence-agents-eps_security_api_results.json |    1 +
 ...fence-agents-gce_security_api_results.json |    1 +
 ...-heuristics-ping_security_api_results.json |    1 +
 ...e-agents-hpblade_security_api_results.json |    1 +
 ...-agents-ibmblade_security_api_results.json |    1 +
 ...nce-agents-ifmib_security_api_results.json |    1 +
 ...nts-ilo-moonshot_security_api_results.json |    1 +
 ...ce-agents-ilo-mp_security_api_results.json |    1 +
 ...e-agents-ilo-ssh_security_api_results.json |    1 +
 ...ence-agents-ilo2_security_api_results.json |    1 +
 ...nts-intelmodular_security_api_results.json |    1 +
 ...ence-agents-ipdu_security_api_results.json |    1 +
 ...e-agents-ipmilan_security_api_results.json |    1 +
 ...nce-agents-kdump_security_api_results.json |    1 +
 ...ence-agents-lpar_security_api_results.json |    1 +
 ...nce-agents-mpath_security_api_results.json |    1 +
 ...e-agents-redfish_security_api_results.json |    1 +
 ...nce-agents-rhevm_security_api_results.json |    1 +
 ...fence-agents-rsa_security_api_results.json |    1 +
 ...fence-agents-rsb_security_api_results.json |    1 +
 ...fence-agents-sbd_security_api_results.json |    1 +
 ...ence-agents-scsi_security_api_results.json |    1 +
 ...nce-agents-virsh_security_api_results.json |    1 +
 ...ents-vmware-rest_security_api_results.json |    1 +
 ...ents-vmware-soap_security_api_results.json |    1 +
 ...fence-agents-wti_security_api_results.json |    1 +
 ...fence-agents-zvm_security_api_results.json |    1 +
 .../fence-virt_security_api_results.json      |    1 +
 ...ce-virtd-libvirt_security_api_results.json |    1 +
 ...-virtd-multicast_security_api_results.json |    1 +
 ...nce-virtd-serial_security_api_results.json |    1 +
 .../fence-virtd-tcp_security_api_results.json |    1 +
 .../fence-virtd_security_api_results.json     |    1 +
 .../fetchmail_security_api_results.json       |    1 +
 .../fftw-devel_security_api_results.json      |    1 +
 .../fftw-doc_security_api_results.json        |    1 +
 ...fftw-libs-double_security_api_results.json |    1 +
 .../fftw-libs-long_security_api_results.json  |    1 +
 .../fftw-libs-quad_security_api_results.json  |    1 +
 ...fftw-libs-single_security_api_results.json |    1 +
 .../fftw-libs_security_api_results.json       |    1 +
 .../fftw-static_security_api_results.json     |    1 +
 .../fftw_security_api_results.json            |    1 +
 .../file-devel_security_api_results.json      |    1 +
 .../file-libs_security_api_results.json       |    1 +
 .../file-roller_security_api_results.json     |    1 +
 .../file_security_api_results.json            |    1 +
 .../filesystem_security_api_results.json      |    1 +
 .../findutils_security_api_results.json       |    1 +
 .../fio_security_api_results.json             |    1 +
 .../fipscheck-devel_security_api_results.json |    1 +
 .../fipscheck-lib_security_api_results.json   |    1 +
 .../fipscheck_security_api_results.json       |    1 +
 .../firefox_security_api_results.json         |    1 +
 .../firewall-applet_security_api_results.json |    1 +
 .../firewall-config_security_api_results.json |    1 +
 ...walld-filesystem_security_api_results.json |    1 +
 .../firewalld_security_api_results.json       |    1 +
 .../flac-devel_security_api_results.json      |    1 +
 .../flac-libs_security_api_results.json       |    1 +
 .../flac_security_api_results.json            |    1 +
 .../flatpak-builder_security_api_results.json |    1 +
 .../flatpak-libs_security_api_results.json    |    1 +
 .../flatpak-selinux_security_api_results.json |    1 +
 ...k-session-helper_security_api_results.json |    1 +
 .../flatpak_security_api_results.json         |    1 +
 .../flex-devel_security_api_results.json      |    1 +
 .../flex-doc_security_api_results.json        |    1 +
 .../flex_security_api_results.json            |    1 +
 .../flite-devel_security_api_results.json     |    1 +
 .../flite_security_api_results.json           |    1 +
 .../fltk-devel_security_api_results.json      |    1 +
 .../fltk_security_api_results.json            |    1 +
 .../flute_security_api_results.json           |    1 +
 ...wesome-fonts-web_security_api_results.json |    1 +
 ...ontawesome-fonts_security_api_results.json |    1 +
 ...config-devel-doc_security_api_results.json |    1 +
 ...fontconfig-devel_security_api_results.json |    1 +
 .../fontconfig_security_api_results.json      |    1 +
 .../fontforge_security_api_results.json       |    1 +
 ...ntpackages-devel_security_api_results.json |    1 +
 ...kages-filesystem_security_api_results.json |    1 +
 ...fonts-tweak-tool_security_api_results.json |    1 +
 ...ic-db-filesystem_security_api_results.json |    1 +
 ...foomatic-db-ppds_security_api_results.json |    1 +
 .../foomatic-db_security_api_results.json     |    1 +
 .../foomatic_security_api_results.json        |    1 +
 .../forge-parent_security_api_results.json    |    1 +
 .../fprintd-pam_security_api_results.json     |    1 +
 .../fprintd_security_api_results.json         |    1 +
 .../freeglut-devel_security_api_results.json  |    1 +
 .../freeglut_security_api_results.json        |    1 +
 ...pmi-bmc-watchdog_security_api_results.json |    1 +
 .../freeipmi-devel_security_api_results.json  |    1 +
 ...ipmi-ipmidetectd_security_api_results.json |    1 +
 ...reeipmi-ipmiseld_security_api_results.json |    1 +
 .../freeipmi_security_api_results.json        |    1 +
 ...freeradius-devel_security_api_results.json |    1 +
 .../freeradius-doc_security_api_results.json  |    1 +
 .../freeradius-krb5_security_api_results.json |    1 +
 .../freeradius-ldap_security_api_results.json |    1 +
 ...freeradius-mysql_security_api_results.json |    1 +
 .../freeradius-perl_security_api_results.json |    1 +
 ...adius-postgresql_security_api_results.json |    1 +
 .../freeradius-rest_security_api_results.json |    1 +
 ...reeradius-sqlite_security_api_results.json |    1 +
 ...eradius-unixODBC_security_api_results.json |    1 +
 ...freeradius-utils_security_api_results.json |    1 +
 .../freeradius_security_api_results.json      |    1 +
 .../freerdp-devel_security_api_results.json   |    1 +
 .../freerdp-libs_security_api_results.json    |    1 +
 .../freerdp_security_api_results.json         |    1 +
 .../freetype-devel_security_api_results.json  |    1 +
 .../freetype_security_api_results.json        |    1 +
 .../frei0r-devel_security_api_results.json    |    1 +
 ...r-plugins-opencv_security_api_results.json |    1 +
 .../frei0r-plugins_security_api_results.json  |    1 +
 .../fribidi-devel_security_api_results.json   |    1 +
 .../fribidi_security_api_results.json         |    1 +
 .../frr-contrib_security_api_results.json     |    1 +
 .../frr_security_api_results.json             |    1 +
 .../ftp_security_api_results.json             |    1 +
 .../fuse-common_security_api_results.json     |    1 +
 .../fuse-devel_security_api_results.json      |    1 +
 .../fuse-libs_security_api_results.json       |    1 +
 .../fuse-overlayfs_security_api_results.json  |    1 +
 .../fuse-sshfs_security_api_results.json      |    1 +
 .../fuse3-devel_security_api_results.json     |    1 +
 .../fuse3-libs_security_api_results.json      |    1 +
 .../fuse3_security_api_results.json           |    1 +
 .../fuse_security_api_results.json            |    1 +
 .../fusesource-pom_security_api_results.json  |    1 +
 .../fwupd_security_api_results.json           |    1 +
 .../fwupdate-efi_security_api_results.json    |    1 +
 .../fwupdate-libs_security_api_results.json   |    1 +
 .../fwupdate_security_api_results.json        |    1 +
 .../fxload_security_api_results.json          |    1 +
 .../galera_security_api_results.json          |    1 +
 .../gamin-devel_security_api_results.json     |    1 +
 .../gamin_security_api_results.json           |    1 +
 .../gavl_security_api_results.json            |    1 +
 .../gawk_security_api_results.json            |    1 +
 .../gc-devel_security_api_results.json        |    1 +
 .../gc_security_api_results.json              |    1 +
 .../gcc-c++_security_api_results.json         |    1 +
 .../gcc-gdb-plugin_security_api_results.json  |    1 +
 .../gcc-gfortran_security_api_results.json    |    1 +
 ...cc-offload-nvptx_security_api_results.json |    1 +
 ...gcc-plugin-devel_security_api_results.json |    1 +
 ...oolset-9-annobin_security_api_results.json |    1 +
 ...9-binutils-devel_security_api_results.json |    1 +
 ...olset-9-binutils_security_api_results.json |    1 +
 ...-toolset-9-build_security_api_results.json |    1 +
 ...cc-toolset-9-dwz_security_api_results.json |    1 +
 ...-9-dyninst-devel_security_api_results.json |    1 +
 ...et-9-dyninst-doc_security_api_results.json |    1 +
 ...9-dyninst-static_security_api_results.json |    1 +
 ...yninst-testsuite_security_api_results.json |    1 +
 ...oolset-9-dyninst_security_api_results.json |    1 +
 ...9-elfutils-devel_security_api_results.json |    1 +
 ...ils-libelf-devel_security_api_results.json |    1 +
 ...-elfutils-libelf_security_api_results.json |    1 +
 ...-9-elfutils-libs_security_api_results.json |    1 +
 ...olset-9-elfutils_security_api_results.json |    1 +
 ...oolset-9-gcc-c++_security_api_results.json |    1 +
 ...9-gcc-gdb-plugin_security_api_results.json |    1 +
 ...t-9-gcc-gfortran_security_api_results.json |    1 +
 ...gcc-plugin-devel_security_api_results.json |    1 +
 ...cc-toolset-9-gcc_security_api_results.json |    1 +
 ...oolset-9-gdb-doc_security_api_results.json |    1 +
 ...-9-gdb-gdbserver_security_api_results.json |    1 +
 ...cc-toolset-9-gdb_security_api_results.json |    1 +
 ...-9-libasan-devel_security_api_results.json |    1 +
 ...-libatomic-devel_security_api_results.json |    1 +
 ...t-9-libitm-devel_security_api_results.json |    1 +
 ...-9-liblsan-devel_security_api_results.json |    1 +
 ...ibquadmath-devel_security_api_results.json |    1 +
 ...-libstdc++-devel_security_api_results.json |    1 +
 ...9-libstdc++-docs_security_api_results.json |    1 +
 ...-9-libtsan-devel_security_api_results.json |    1 +
 ...9-libubsan-devel_security_api_results.json |    1 +
 ...toolset-9-ltrace_security_api_results.json |    1 +
 ...set-9-make-devel_security_api_results.json |    1 +
 ...c-toolset-9-make_security_api_results.json |    1 +
 ...lset-9-perftools_security_api_results.json |    1 +
 ...oolset-9-runtime_security_api_results.json |    1 +
 ...toolset-9-strace_security_api_results.json |    1 +
 ...systemtap-client_security_api_results.json |    1 +
 ...-systemtap-devel_security_api_results.json |    1 +
 ...emtap-initscript_security_api_results.json |    1 +
 ...ystemtap-runtime_security_api_results.json |    1 +
 ...temtap-sdt-devel_security_api_results.json |    1 +
 ...systemtap-server_security_api_results.json |    1 +
 ...lset-9-systemtap_security_api_results.json |    1 +
 ...lset-9-toolchain_security_api_results.json |    1 +
 ...9-valgrind-devel_security_api_results.json |    1 +
 ...olset-9-valgrind_security_api_results.json |    1 +
 .../gcc-toolset-9_security_api_results.json   |    1 +
 .../gcc_security_api_results.json             |    1 +
 .../gcr-devel_security_api_results.json       |    1 +
 .../gcr_security_api_results.json             |    1 +
 .../gd-devel_security_api_results.json        |    1 +
 .../gd_security_api_results.json              |    1 +
 .../gdb-doc_security_api_results.json         |    1 +
 .../gdb-gdbserver_security_api_results.json   |    1 +
 .../gdb-headless_security_api_results.json    |    1 +
 .../gdb_security_api_results.json             |    1 +
 .../gdbm-devel_security_api_results.json      |    1 +
 .../gdbm-libs_security_api_results.json       |    1 +
 .../gdbm_security_api_results.json            |    1 +
 .../gdisk_security_api_results.json           |    1 +
 ...dk-pixbuf2-devel_security_api_results.json |    1 +
 ...-pixbuf2-modules_security_api_results.json |    1 +
 ...xbuf2-xlib-devel_security_api_results.json |    1 +
 ...gdk-pixbuf2-xlib_security_api_results.json |    1 +
 .../gdk-pixbuf2_security_api_results.json     |    1 +
 .../gdm_security_api_results.json             |    1 +
 ...plugin-bookmarks_security_api_results.json |    1 +
 ...racketcompletion_security_api_results.json |    1 +
 ...ugin-codecomment_security_api_results.json |    1 +
 ...ugin-colorpicker_security_api_results.json |    1 +
 ...gin-colorschemer_security_api_results.json |    1 +
 ...plugin-commander_security_api_results.json |    1 +
 ...lugin-drawspaces_security_api_results.json |    1 +
 ...ugin-findinfiles_security_api_results.json |    1 +
 ...plugin-joinlines_security_api_results.json |    1 +
 ...plugin-multiedit_security_api_results.json |    1 +
 ...ugin-smartspaces_security_api_results.json |    1 +
 ...-plugin-terminal_security_api_results.json |    1 +
 ...-plugin-textsize_security_api_results.json |    1 +
 ...plugin-translate_security_api_results.json |    1 +
 ...n-wordcompletion_security_api_results.json |    1 +
 ...dit-plugins-data_security_api_results.json |    1 +
 .../gedit-plugins_security_api_results.json   |    1 +
 .../gedit_security_api_results.json           |    1 +
 .../gegl04-devel_security_api_results.json    |    1 +
 .../gegl04_security_api_results.json          |    1 +
 .../gegl_security_api_results.json            |    1 +
 .../genisoimage_security_api_results.json     |    1 +
 .../genwqe-tools_security_api_results.json    |    1 +
 .../genwqe-vpd_security_api_results.json      |    1 +
 ...enwqe-zlib-devel_security_api_results.json |    1 +
 .../genwqe-zlib_security_api_results.json     |    1 +
 .../geoclue2-demos_security_api_results.json  |    1 +
 .../geoclue2-devel_security_api_results.json  |    1 +
 .../geoclue2-libs_security_api_results.json   |    1 +
 .../geoclue2_security_api_results.json        |    1 +
 ...ocode-glib-devel_security_api_results.json |    1 +
 .../geocode-glib_security_api_results.json    |    1 +
 .../geoipupdate_security_api_results.json     |    1 +
 .../geolite2-city_security_api_results.json   |    1 +
 ...geolite2-country_security_api_results.json |    1 +
 ...notation-javadoc_security_api_results.json |    1 +
 ...onimo-annotation_security_api_results.json |    1 +
 ...nimo-jms-javadoc_security_api_results.json |    1 +
 .../geronimo-jms_security_api_results.json    |    1 +
 ...nimo-jpa-javadoc_security_api_results.json |    1 +
 .../geronimo-jpa_security_api_results.json    |    1 +
 ...nimo-parent-poms_security_api_results.json |    1 +
 ...ext-common-devel_security_api_results.json |    1 +
 .../gettext-devel_security_api_results.json   |    1 +
 .../gettext-libs_security_api_results.json    |    1 +
 .../gettext_security_api_results.json         |    1 +
 .../gfbgraph_security_api_results.json        |    1 +
 .../gflags-devel_security_api_results.json    |    1 +
 .../gflags_security_api_results.json          |    1 +
 .../gfs2-utils_security_api_results.json      |    1 +
 .../ghc-srpm-macros_security_api_results.json |    1 +
 .../ghostscript-doc_security_api_results.json |    1 +
 ...ipt-tools-dvipdf_security_api_results.json |    1 +
 ...ript-tools-fonts_security_api_results.json |    1 +
 ...t-tools-printing_security_api_results.json |    1 +
 .../ghostscript-x11_security_api_results.json |    1 +
 .../ghostscript_security_api_results.json     |    1 +
 .../giflib-devel_security_api_results.json    |    1 +
 .../giflib_security_api_results.json          |    1 +
 ...gimp-devel-tools_security_api_results.json |    1 +
 .../gimp-devel_security_api_results.json      |    1 +
 .../gimp-libs_security_api_results.json       |    1 +
 .../gimp_security_api_results.json            |    1 +
 .../git-all_security_api_results.json         |    1 +
 ...git-clang-format_security_api_results.json |    1 +
 .../git-core-doc_security_api_results.json    |    1 +
 .../git-core_security_api_results.json        |    1 +
 .../git-daemon_security_api_results.json      |    1 +
 .../git-email_security_api_results.json       |    1 +
 .../git-gui_security_api_results.json         |    1 +
 .../git-instaweb_security_api_results.json    |    1 +
 .../git-subtree_security_api_results.json     |    1 +
 .../git-svn_security_api_results.json         |    1 +
 .../git_security_api_results.json             |    1 +
 .../gitk_security_api_results.json            |    1 +
 .../gitweb_security_api_results.json          |    1 +
 .../gjs-devel_security_api_results.json       |    1 +
 .../gjs_security_api_results.json             |    1 +
 .../gl-manpages_security_api_results.json     |    1 +
 .../glade-devel_security_api_results.json     |    1 +
 .../glade-libs_security_api_results.json      |    1 +
 ...tion-api-javadoc_security_api_results.json |    1 +
 ...h-annotation-api_security_api_results.json |    1 +
 ...glassfish-el-api_security_api_results.json |    1 +
 ...sfish-el-javadoc_security_api_results.json |    1 +
 .../glassfish-el_security_api_results.json    |    1 +
 ...fish-fastinfoset_security_api_results.json |    1 +
 ...assfish-jaxb-api_security_api_results.json |    1 +
 ...ssfish-jaxb-core_security_api_results.json |    1 +
 ...ish-jaxb-runtime_security_api_results.json |    1 +
 ...ssfish-jaxb-txw2_security_api_results.json |    1 +
 ...-jsp-api-javadoc_security_api_results.json |    1 +
 ...lassfish-jsp-api_security_api_results.json |    1 +
 .../glassfish-legal_security_api_results.json |    1 +
 ...sfish-master-pom_security_api_results.json |    1 +
 ...vlet-api-javadoc_security_api_results.json |    1 +
 ...fish-servlet-api_security_api_results.json |    1 +
 .../glew-devel_security_api_results.json      |    1 +
 .../glib-networking_security_api_results.json |    1 +
 .../glib2-devel_security_api_results.json     |    1 +
 .../glib2-doc_security_api_results.json       |    1 +
 .../glib2-fam_security_api_results.json       |    1 +
 .../glib2-static_security_api_results.json    |    1 +
 .../glib2-tests_security_api_results.json     |    1 +
 .../glib2_security_api_results.json           |    1 +
 ...bc-all-langpacks_security_api_results.json |    1 +
 ...glibc-benchtests_security_api_results.json |    1 +
 .../glibc-common_security_api_results.json    |    1 +
 .../glibc-devel_security_api_results.json     |    1 +
 .../glibc-headers_security_api_results.json   |    1 +
 ...libc-langpack-aa_security_api_results.json |    1 +
 ...libc-langpack-af_security_api_results.json |    1 +
 ...ibc-langpack-agr_security_api_results.json |    1 +
 ...libc-langpack-ak_security_api_results.json |    1 +
 ...libc-langpack-am_security_api_results.json |    1 +
 ...libc-langpack-an_security_api_results.json |    1 +
 ...ibc-langpack-anp_security_api_results.json |    1 +
 ...libc-langpack-ar_security_api_results.json |    1 +
 ...libc-langpack-as_security_api_results.json |    1 +
 ...ibc-langpack-ast_security_api_results.json |    1 +
 ...ibc-langpack-ayc_security_api_results.json |    1 +
 ...libc-langpack-az_security_api_results.json |    1 +
 ...libc-langpack-be_security_api_results.json |    1 +
 ...ibc-langpack-bem_security_api_results.json |    1 +
 ...ibc-langpack-ber_security_api_results.json |    1 +
 ...libc-langpack-bg_security_api_results.json |    1 +
 ...ibc-langpack-bhb_security_api_results.json |    1 +
 ...ibc-langpack-bho_security_api_results.json |    1 +
 ...libc-langpack-bi_security_api_results.json |    1 +
 ...libc-langpack-bn_security_api_results.json |    1 +
 ...libc-langpack-bo_security_api_results.json |    1 +
 ...libc-langpack-br_security_api_results.json |    1 +
 ...ibc-langpack-brx_security_api_results.json |    1 +
 ...libc-langpack-bs_security_api_results.json |    1 +
 ...ibc-langpack-byn_security_api_results.json |    1 +
 ...libc-langpack-ca_security_api_results.json |    1 +
 ...libc-langpack-ce_security_api_results.json |    1 +
 ...ibc-langpack-chr_security_api_results.json |    1 +
 ...ibc-langpack-cmn_security_api_results.json |    1 +
 ...ibc-langpack-crh_security_api_results.json |    1 +
 ...libc-langpack-cs_security_api_results.json |    1 +
 ...ibc-langpack-csb_security_api_results.json |    1 +
 ...libc-langpack-cv_security_api_results.json |    1 +
 ...libc-langpack-cy_security_api_results.json |    1 +
 ...libc-langpack-da_security_api_results.json |    1 +
 ...libc-langpack-de_security_api_results.json |    1 +
 ...ibc-langpack-doi_security_api_results.json |    1 +
 ...ibc-langpack-dsb_security_api_results.json |    1 +
 ...libc-langpack-dv_security_api_results.json |    1 +
 ...libc-langpack-dz_security_api_results.json |    1 +
 ...libc-langpack-el_security_api_results.json |    1 +
 ...libc-langpack-en_security_api_results.json |    1 +
 ...libc-langpack-eo_security_api_results.json |    1 +
 ...libc-langpack-es_security_api_results.json |    1 +
 ...libc-langpack-et_security_api_results.json |    1 +
 ...libc-langpack-eu_security_api_results.json |    1 +
 ...libc-langpack-fa_security_api_results.json |    1 +
 ...libc-langpack-ff_security_api_results.json |    1 +
 ...libc-langpack-fi_security_api_results.json |    1 +
 ...ibc-langpack-fil_security_api_results.json |    1 +
 ...libc-langpack-fo_security_api_results.json |    1 +
 ...libc-langpack-fr_security_api_results.json |    1 +
 ...ibc-langpack-fur_security_api_results.json |    1 +
 ...libc-langpack-fy_security_api_results.json |    1 +
 ...libc-langpack-ga_security_api_results.json |    1 +
 ...libc-langpack-gd_security_api_results.json |    1 +
 ...ibc-langpack-gez_security_api_results.json |    1 +
 ...libc-langpack-gl_security_api_results.json |    1 +
 ...libc-langpack-gu_security_api_results.json |    1 +
 ...libc-langpack-gv_security_api_results.json |    1 +
 ...libc-langpack-ha_security_api_results.json |    1 +
 ...ibc-langpack-hak_security_api_results.json |    1 +
 ...libc-langpack-he_security_api_results.json |    1 +
 ...libc-langpack-hi_security_api_results.json |    1 +
 ...ibc-langpack-hif_security_api_results.json |    1 +
 ...ibc-langpack-hne_security_api_results.json |    1 +
 ...libc-langpack-hr_security_api_results.json |    1 +
 ...ibc-langpack-hsb_security_api_results.json |    1 +
 ...libc-langpack-ht_security_api_results.json |    1 +
 ...libc-langpack-hu_security_api_results.json |    1 +
 ...libc-langpack-hy_security_api_results.json |    1 +
 ...libc-langpack-ia_security_api_results.json |    1 +
 ...libc-langpack-id_security_api_results.json |    1 +
 ...libc-langpack-ig_security_api_results.json |    1 +
 ...libc-langpack-ik_security_api_results.json |    1 +
 ...libc-langpack-is_security_api_results.json |    1 +
 ...libc-langpack-it_security_api_results.json |    1 +
 ...libc-langpack-iu_security_api_results.json |    1 +
 ...libc-langpack-ja_security_api_results.json |    1 +
 ...libc-langpack-ka_security_api_results.json |    1 +
 ...ibc-langpack-kab_security_api_results.json |    1 +
 ...libc-langpack-kk_security_api_results.json |    1 +
 ...libc-langpack-kl_security_api_results.json |    1 +
 ...libc-langpack-km_security_api_results.json |    1 +
 ...libc-langpack-kn_security_api_results.json |    1 +
 ...libc-langpack-ko_security_api_results.json |    1 +
 ...ibc-langpack-kok_security_api_results.json |    1 +
 ...libc-langpack-ks_security_api_results.json |    1 +
 ...libc-langpack-ku_security_api_results.json |    1 +
 ...libc-langpack-kw_security_api_results.json |    1 +
 ...libc-langpack-ky_security_api_results.json |    1 +
 ...libc-langpack-lb_security_api_results.json |    1 +
 ...libc-langpack-lg_security_api_results.json |    1 +
 ...libc-langpack-li_security_api_results.json |    1 +
 ...ibc-langpack-lij_security_api_results.json |    1 +
 ...libc-langpack-ln_security_api_results.json |    1 +
 ...libc-langpack-lo_security_api_results.json |    1 +
 ...libc-langpack-lt_security_api_results.json |    1 +
 ...libc-langpack-lv_security_api_results.json |    1 +
 ...ibc-langpack-lzh_security_api_results.json |    1 +
 ...ibc-langpack-mag_security_api_results.json |    1 +
 ...ibc-langpack-mai_security_api_results.json |    1 +
 ...ibc-langpack-mfe_security_api_results.json |    1 +
 ...libc-langpack-mg_security_api_results.json |    1 +
 ...ibc-langpack-mhr_security_api_results.json |    1 +
 ...libc-langpack-mi_security_api_results.json |    1 +
 ...ibc-langpack-miq_security_api_results.json |    1 +
 ...ibc-langpack-mjw_security_api_results.json |    1 +
 ...libc-langpack-mk_security_api_results.json |    1 +
 ...libc-langpack-ml_security_api_results.json |    1 +
 ...libc-langpack-mn_security_api_results.json |    1 +
 ...ibc-langpack-mni_security_api_results.json |    1 +
 ...libc-langpack-mr_security_api_results.json |    1 +
 ...libc-langpack-ms_security_api_results.json |    1 +
 ...libc-langpack-mt_security_api_results.json |    1 +
 ...libc-langpack-my_security_api_results.json |    1 +
 ...ibc-langpack-nan_security_api_results.json |    1 +
 ...libc-langpack-nb_security_api_results.json |    1 +
 ...ibc-langpack-nds_security_api_results.json |    1 +
 ...libc-langpack-ne_security_api_results.json |    1 +
 ...ibc-langpack-nhn_security_api_results.json |    1 +
 ...ibc-langpack-niu_security_api_results.json |    1 +
 ...libc-langpack-nl_security_api_results.json |    1 +
 ...libc-langpack-nn_security_api_results.json |    1 +
 ...libc-langpack-nr_security_api_results.json |    1 +
 ...ibc-langpack-nso_security_api_results.json |    1 +
 ...libc-langpack-oc_security_api_results.json |    1 +
 ...libc-langpack-om_security_api_results.json |    1 +
 ...libc-langpack-or_security_api_results.json |    1 +
 ...libc-langpack-os_security_api_results.json |    1 +
 ...libc-langpack-pa_security_api_results.json |    1 +
 ...ibc-langpack-pap_security_api_results.json |    1 +
 ...libc-langpack-pl_security_api_results.json |    1 +
 ...libc-langpack-ps_security_api_results.json |    1 +
 ...libc-langpack-pt_security_api_results.json |    1 +
 ...ibc-langpack-quz_security_api_results.json |    1 +
 ...ibc-langpack-raj_security_api_results.json |    1 +
 ...libc-langpack-ro_security_api_results.json |    1 +
 ...libc-langpack-ru_security_api_results.json |    1 +
 ...libc-langpack-rw_security_api_results.json |    1 +
 ...libc-langpack-sa_security_api_results.json |    1 +
 ...ibc-langpack-sah_security_api_results.json |    1 +
 ...ibc-langpack-sat_security_api_results.json |    1 +
 ...libc-langpack-sc_security_api_results.json |    1 +
 ...libc-langpack-sd_security_api_results.json |    1 +
 ...libc-langpack-se_security_api_results.json |    1 +
 ...ibc-langpack-sgs_security_api_results.json |    1 +
 ...ibc-langpack-shn_security_api_results.json |    1 +
 ...ibc-langpack-shs_security_api_results.json |    1 +
 ...libc-langpack-si_security_api_results.json |    1 +
 ...ibc-langpack-sid_security_api_results.json |    1 +
 ...libc-langpack-sk_security_api_results.json |    1 +
 ...libc-langpack-sl_security_api_results.json |    1 +
 ...libc-langpack-sm_security_api_results.json |    1 +
 ...libc-langpack-so_security_api_results.json |    1 +
 ...libc-langpack-sq_security_api_results.json |    1 +
 ...libc-langpack-sr_security_api_results.json |    1 +
 ...libc-langpack-ss_security_api_results.json |    1 +
 ...libc-langpack-st_security_api_results.json |    1 +
 ...libc-langpack-sv_security_api_results.json |    1 +
 ...libc-langpack-sw_security_api_results.json |    1 +
 ...ibc-langpack-szl_security_api_results.json |    1 +
 ...libc-langpack-ta_security_api_results.json |    1 +
 ...ibc-langpack-tcy_security_api_results.json |    1 +
 ...libc-langpack-te_security_api_results.json |    1 +
 ...libc-langpack-tg_security_api_results.json |    1 +
 ...libc-langpack-th_security_api_results.json |    1 +
 ...ibc-langpack-the_security_api_results.json |    1 +
 ...libc-langpack-ti_security_api_results.json |    1 +
 ...ibc-langpack-tig_security_api_results.json |    1 +
 ...libc-langpack-tk_security_api_results.json |    1 +
 ...libc-langpack-tl_security_api_results.json |    1 +
 ...libc-langpack-tn_security_api_results.json |    1 +
 ...libc-langpack-to_security_api_results.json |    1 +
 ...ibc-langpack-tpi_security_api_results.json |    1 +
 ...libc-langpack-tr_security_api_results.json |    1 +
 ...libc-langpack-ts_security_api_results.json |    1 +
 ...libc-langpack-tt_security_api_results.json |    1 +
 ...libc-langpack-ug_security_api_results.json |    1 +
 ...libc-langpack-uk_security_api_results.json |    1 +
 ...ibc-langpack-unm_security_api_results.json |    1 +
 ...libc-langpack-ur_security_api_results.json |    1 +
 ...libc-langpack-uz_security_api_results.json |    1 +
 ...libc-langpack-ve_security_api_results.json |    1 +
 ...libc-langpack-vi_security_api_results.json |    1 +
 ...libc-langpack-wa_security_api_results.json |    1 +
 ...ibc-langpack-wae_security_api_results.json |    1 +
 ...ibc-langpack-wal_security_api_results.json |    1 +
 ...libc-langpack-wo_security_api_results.json |    1 +
 ...libc-langpack-xh_security_api_results.json |    1 +
 ...libc-langpack-yi_security_api_results.json |    1 +
 ...libc-langpack-yo_security_api_results.json |    1 +
 ...ibc-langpack-yue_security_api_results.json |    1 +
 ...ibc-langpack-yuw_security_api_results.json |    1 +
 ...libc-langpack-zh_security_api_results.json |    1 +
 ...libc-langpack-zu_security_api_results.json |    1 +
 ...bc-locale-source_security_api_results.json |    1 +
 ...minimal-langpack_security_api_results.json |    1 +
 .../glibc-nss-devel_security_api_results.json |    1 +
 .../glibc-static_security_api_results.json    |    1 +
 .../glibc-utils_security_api_results.json     |    1 +
 .../glibc_security_api_results.json           |    1 +
 .../glibmm24-devel_security_api_results.json  |    1 +
 .../glibmm24-doc_security_api_results.json    |    1 +
 .../glibmm24_security_api_results.json        |    1 +
 .../glm-devel_security_api_results.json       |    1 +
 .../glm-doc_security_api_results.json         |    1 +
 .../glog-devel_security_api_results.json      |    1 +
 .../glog_security_api_results.json            |    1 +
 ...sterfs-api-devel_security_api_results.json |    1 +
 .../glusterfs-api_security_api_results.json   |    1 +
 .../glusterfs-cli_security_api_results.json   |    1 +
 ...s-client-xlators_security_api_results.json |    1 +
 .../glusterfs-devel_security_api_results.json |    1 +
 .../glusterfs-fuse_security_api_results.json  |    1 +
 .../glusterfs-libs_security_api_results.json  |    1 +
 .../glusterfs-rdma_security_api_results.json  |    1 +
 .../glusterfs_security_api_results.json       |    1 +
 .../glx-utils_security_api_results.json       |    1 +
 .../gmock-devel_security_api_results.json     |    1 +
 .../gmock_security_api_results.json           |    1 +
 .../gmp-c++_security_api_results.json         |    1 +
 .../gmp-devel_security_api_results.json       |    1 +
 .../gmp_security_api_results.json             |    1 +
 .../gnome-abrt_security_api_results.json      |    1 +
 .../gnome-autoar_security_api_results.json    |    1 +
 ...ckgrounds-extras_security_api_results.json |    1 +
 ...nome-backgrounds_security_api_results.json |    1 +
 ...tooth-libs-devel_security_api_results.json |    1 +
 ...e-bluetooth-libs_security_api_results.json |    1 +
 .../gnome-bluetooth_security_api_results.json |    1 +
 .../gnome-boxes_security_api_results.json     |    1 +
 ...gnome-calculator_security_api_results.json |    1 +
 ...gnome-characters_security_api_results.json |    1 +
 ...-classic-session_security_api_results.json |    1 +
 ...me-color-manager_security_api_results.json |    1 +
 .../gnome-common_security_api_results.json    |    1 +
 ...enter-filesystem_security_api_results.json |    1 +
 ...e-control-center_security_api_results.json |    1 +
 ...e-desktop3-devel_security_api_results.json |    1 +
 .../gnome-desktop3_security_api_results.json  |    1 +
 ...ome-disk-utility_security_api_results.json |    1 +
 ...nome-font-viewer_security_api_results.json |    1 +
 ...-started-docs-cs_security_api_results.json |    1 +
 ...-started-docs-de_security_api_results.json |    1 +
 ...-started-docs-es_security_api_results.json |    1 +
 ...-started-docs-fr_security_api_results.json |    1 +
 ...-started-docs-gl_security_api_results.json |    1 +
 ...-started-docs-hu_security_api_results.json |    1 +
 ...-started-docs-it_security_api_results.json |    1 +
 ...-started-docs-pl_security_api_results.json |    1 +
 ...arted-docs-pt_BR_security_api_results.json |    1 +
 ...-started-docs-ru_security_api_results.json |    1 +
 ...ing-started-docs_security_api_results.json |    1 +
 ...me-initial-setup_security_api_results.json |    1 +
 ...nome-keyring-pam_security_api_results.json |    1 +
 .../gnome-keyring_security_api_results.json   |    1 +
 .../gnome-logs_security_api_results.json      |    1 +
 ...nome-menus-devel_security_api_results.json |    1 +
 .../gnome-menus_security_api_results.json     |    1 +
 ...e-accounts-devel_security_api_results.json |    1 +
 ...-online-accounts_security_api_results.json |    1 +
 ...me-online-miners_security_api_results.json |    1 +
 ...ome-photos-tests_security_api_results.json |    1 +
 .../gnome-photos_security_api_results.json    |    1 +
 ...e-remote-desktop_security_api_results.json |    1 +
 ...gnome-screenshot_security_api_results.json |    1 +
 ...-wayland-session_security_api_results.json |    1 +
 ...session-xsession_security_api_results.json |    1 +
 .../gnome-session_security_api_results.json   |    1 +
 ...-settings-daemon_security_api_results.json |    1 +
 ...ension-apps-menu_security_api_results.json |    1 +
 ...uto-move-windows_security_api_results.json |    1 +
 ...extension-common_security_api_results.json |    1 +
 ...ion-dash-to-dock_security_api_results.json |    1 +
 ...on-desktop-icons_security_api_results.json |    1 +
 ...ble-screenshield_security_api_results.json |    1 +
 ...nsion-drive-menu_security_api_results.json |    1 +
 ...ontal-workspaces_security_api_results.json |    1 +
 ...nch-new-instance_security_api_results.json |    1 +
 ...window-placement_security_api_results.json |    1 +
 ...on-no-hot-corner_security_api_results.json |    1 +
 ...-panel-favorites_security_api_results.json |    1 +
 ...sion-places-menu_security_api_results.json |    1 +
 ...hot-window-sizer_security_api_results.json |    1 +
 ...on-systemMonitor_security_api_results.json |    1 +
 ...ension-top-icons_security_api_results.json |    1 +
 ...n-updates-dialog_security_api_results.json |    1 +
 ...nsion-user-theme_security_api_results.json |    1 +
 ...n-window-grouper_security_api_results.json |    1 +
 ...sion-window-list_security_api_results.json |    1 +
 ...windowsNavigator_security_api_results.json |    1 +
 ...kspace-indicator_security_api_results.json |    1 +
 .../gnome-shell_security_api_results.json     |    1 +
 ...-software-editor_security_api_results.json |    1 +
 .../gnome-software_security_api_results.json  |    1 +
 ...e-system-monitor_security_api_results.json |    1 +
 ...erminal-nautilus_security_api_results.json |    1 +
 .../gnome-terminal_security_api_results.json  |    1 +
 ...-themes-standard_security_api_results.json |    1 +
 .../gnome-tweaks_security_api_results.json    |    1 +
 .../gnome-user-docs_security_api_results.json |    1 +
 ...me-video-effects_security_api_results.json |    1 +
 .../gnu-efi-devel_security_api_results.json   |    1 +
 .../gnu-efi_security_api_results.json         |    1 +
 ...ree-fonts-common_security_api_results.json |    1 +
 ...-free-mono-fonts_security_api_results.json |    1 +
 ...-free-sans-fonts_security_api_results.json |    1 +
 ...free-serif-fonts_security_api_results.json |    1 +
 .../gnupg2-smime_security_api_results.json    |    1 +
 .../gnupg2_security_api_results.json          |    1 +
 .../gnuplot-common_security_api_results.json  |    1 +
 .../gnuplot-doc_security_api_results.json     |    1 +
 .../gnuplot_security_api_results.json         |    1 +
 .../gnutls-c++_security_api_results.json      |    1 +
 .../gnutls-dane_security_api_results.json     |    1 +
 .../gnutls-devel_security_api_results.json    |    1 +
 .../gnutls-utils_security_api_results.json    |    1 +
 .../gnutls_security_api_results.json          |    1 +
 ...-golang-compiler_security_api_results.json |    1 +
 .../go-srpm-macros_security_api_results.json  |    1 +
 .../go-toolset_security_api_results.json      |    1 +
 ...rospection-devel_security_api_results.json |    1 +
 ...ct-introspection_security_api_results.json |    1 +
 .../golang-bin_security_api_results.json      |    1 +
 .../golang-docs_security_api_results.json     |    1 +
 .../golang-misc_security_api_results.json     |    1 +
 .../golang-race_security_api_results.json     |    1 +
 .../golang-src_security_api_results.json      |    1 +
 .../golang-tests_security_api_results.json    |    1 +
 .../golang_security_api_results.json          |    1 +
 .../gom_security_api_results.json             |    1 +
 ...ra-caladea-fonts_security_api_results.json |    1 +
 ...ra-carlito-fonts_security_api_results.json |    1 +
 ...droid-kufi-fonts_security_api_results.json |    1 +
 ...droid-sans-fonts_security_api_results.json |    1 +
 ...-sans-mono-fonts_security_api_results.json |    1 +
 ...roid-serif-fonts_security_api_results.json |    1 +
 ...le-guice-javadoc_security_api_results.json |    1 +
 .../google-guice_security_api_results.json    |    1 +
 ...cjk-fonts-common_security_api_results.json |    1 +
 ...moji-color-fonts_security_api_results.json |    1 +
 ...noto-emoji-fonts_security_api_results.json |    1 +
 ...oto-fonts-common_security_api_results.json |    1 +
 ...ufi-arabic-fonts_security_api_results.json |    1 +
 ...-noto-mono-fonts_security_api_results.json |    1 +
 ...skh-arabic-fonts_security_api_results.json |    1 +
 ...-arabic-ui-fonts_security_api_results.json |    1 +
 ...taliq-urdu-fonts_security_api_results.json |    1 +
 ...s-armenian-fonts_security_api_results.json |    1 +
 ...ns-avestan-fonts_security_api_results.json |    1 +
 ...s-balinese-fonts_security_api_results.json |    1 +
 ...sans-bamum-fonts_security_api_results.json |    1 +
 ...sans-batak-fonts_security_api_results.json |    1 +
 ...ns-bengali-fonts_security_api_results.json |    1 +
 ...bengali-ui-fonts_security_api_results.json |    1 +
 ...ans-brahmi-fonts_security_api_results.json |    1 +
 ...s-buginese-fonts_security_api_results.json |    1 +
 ...sans-buhid-fonts_security_api_results.json |    1 +
 ...aboriginal-fonts_security_api_results.json |    1 +
 ...ans-carian-fonts_security_api_results.json |    1 +
 ...-sans-cham-fonts_security_api_results.json |    1 +
 ...s-cherokee-fonts_security_api_results.json |    1 +
 ...ans-cjk-jp-fonts_security_api_results.json |    1 +
 ...ns-cjk-ttc-fonts_security_api_results.json |    1 +
 ...ans-coptic-fonts_security_api_results.json |    1 +
 ...-cuneiform-fonts_security_api_results.json |    1 +
 ...ns-cypriot-fonts_security_api_results.json |    1 +
 ...ns-deseret-fonts_security_api_results.json |    1 +
 ...devanagari-fonts_security_api_results.json |    1 +
 ...anagari-ui-fonts_security_api_results.json |    1 +
 ...ieroglyphs-fonts_security_api_results.json |    1 +
 ...s-ethiopic-fonts_security_api_results.json |    1 +
 ...-noto-sans-fonts_security_api_results.json |    1 +
 ...s-georgian-fonts_security_api_results.json |    1 +
 ...glagolitic-fonts_security_api_results.json |    1 +
 ...ans-gothic-fonts_security_api_results.json |    1 +
 ...s-gujarati-fonts_security_api_results.json |    1 +
 ...ujarati-ui-fonts_security_api_results.json |    1 +
 ...s-gurmukhi-fonts_security_api_results.json |    1 +
 ...urmukhi-ui-fonts_security_api_results.json |    1 +
 ...ns-hanunoo-fonts_security_api_results.json |    1 +
 ...ans-hebrew-fonts_security_api_results.json |    1 +
 ...al-aramaic-fonts_security_api_results.json |    1 +
 ...al-pahlavi-fonts_security_api_results.json |    1 +
 ...l-parthian-fonts_security_api_results.json |    1 +
 ...s-javanese-fonts_security_api_results.json |    1 +
 ...ans-kaithi-fonts_security_api_results.json |    1 +
 ...ns-kannada-fonts_security_api_results.json |    1 +
 ...kannada-ui-fonts_security_api_results.json |    1 +
 ...s-kayah-li-fonts_security_api_results.json |    1 +
 ...kharoshthi-fonts_security_api_results.json |    1 +
 ...sans-khmer-fonts_security_api_results.json |    1 +
 ...s-khmer-ui-fonts_security_api_results.json |    1 +
 ...o-sans-lao-fonts_security_api_results.json |    1 +
 ...ans-lao-ui-fonts_security_api_results.json |    1 +
 ...ans-lepcha-fonts_security_api_results.json |    1 +
 ...sans-limbu-fonts_security_api_results.json |    1 +
 ...s-linear-b-fonts_security_api_results.json |    1 +
 ...-sans-lisu-fonts_security_api_results.json |    1 +
 ...ans-lycian-fonts_security_api_results.json |    1 +
 ...ans-lydian-fonts_security_api_results.json |    1 +
 ...-malayalam-fonts_security_api_results.json |    1 +
 ...layalam-ui-fonts_security_api_results.json |    1 +
 ...ns-mandaic-fonts_security_api_results.json |    1 +
 ...etei-mayek-fonts_security_api_results.json |    1 +
 ...-mongolian-fonts_security_api_results.json |    1 +
 ...ns-myanmar-fonts_security_api_results.json |    1 +
 ...myanmar-ui-fonts_security_api_results.json |    1 +
 ...ew-tai-lue-fonts_security_api_results.json |    1 +
 ...o-sans-nko-fonts_security_api_results.json |    1 +
 ...sans-ogham-fonts_security_api_results.json |    1 +
 ...s-ol-chiki-fonts_security_api_results.json |    1 +
 ...old-italic-fonts_security_api_results.json |    1 +
 ...ld-persian-fonts_security_api_results.json |    1 +
 ...th-arabian-fonts_security_api_results.json |    1 +
 ...old-turkic-fonts_security_api_results.json |    1 +
 ...sans-oriya-fonts_security_api_results.json |    1 +
 ...s-oriya-ui-fonts_security_api_results.json |    1 +
 ...ns-osmanya-fonts_security_api_results.json |    1 +
 ...s-phags-pa-fonts_security_api_results.json |    1 +
 ...phoenician-fonts_security_api_results.json |    1 +
 ...ans-rejang-fonts_security_api_results.json |    1 +
 ...sans-runic-fonts_security_api_results.json |    1 +
 ...-samaritan-fonts_security_api_results.json |    1 +
 ...saurashtra-fonts_security_api_results.json |    1 +
 ...ns-shavian-fonts_security_api_results.json |    1 +
 ...ns-sinhala-fonts_security_api_results.json |    1 +
 ...-sundanese-fonts_security_api_results.json |    1 +
 ...loti-nagri-fonts_security_api_results.json |    1 +
 ...ns-symbols-fonts_security_api_results.json |    1 +
 ...ac-eastern-fonts_security_api_results.json |    1 +
 ...estrangela-fonts_security_api_results.json |    1 +
 ...ac-western-fonts_security_api_results.json |    1 +
 ...ns-tagalog-fonts_security_api_results.json |    1 +
 ...s-tagbanwa-fonts_security_api_results.json |    1 +
 ...ans-tai-le-fonts_security_api_results.json |    1 +
 ...s-tai-tham-fonts_security_api_results.json |    1 +
 ...s-tai-viet-fonts_security_api_results.json |    1 +
 ...sans-tamil-fonts_security_api_results.json |    1 +
 ...s-tamil-ui-fonts_security_api_results.json |    1 +
 ...ans-telugu-fonts_security_api_results.json |    1 +
 ...-telugu-ui-fonts_security_api_results.json |    1 +
 ...ans-thaana-fonts_security_api_results.json |    1 +
 ...-sans-thai-fonts_security_api_results.json |    1 +
 ...ns-thai-ui-fonts_security_api_results.json |    1 +
 ...ns-tibetan-fonts_security_api_results.json |    1 +
 ...s-tifinagh-fonts_security_api_results.json |    1 +
 ...s-ugaritic-fonts_security_api_results.json |    1 +
 ...to-sans-ui-fonts_security_api_results.json |    1 +
 ...o-sans-vai-fonts_security_api_results.json |    1 +
 ...to-sans-yi-fonts_security_api_results.json |    1 +
 ...f-armenian-fonts_security_api_results.json |    1 +
 ...if-bengali-fonts_security_api_results.json |    1 +
 ...if-cjk-ttc-fonts_security_api_results.json |    1 +
 ...devanagari-fonts_security_api_results.json |    1 +
 ...noto-serif-fonts_security_api_results.json |    1 +
 ...f-georgian-fonts_security_api_results.json |    1 +
 ...f-gujarati-fonts_security_api_results.json |    1 +
 ...if-kannada-fonts_security_api_results.json |    1 +
 ...erif-khmer-fonts_security_api_results.json |    1 +
 ...-serif-lao-fonts_security_api_results.json |    1 +
 ...-malayalam-fonts_security_api_results.json |    1 +
 ...erif-tamil-fonts_security_api_results.json |    1 +
 ...rif-telugu-fonts_security_api_results.json |    1 +
 ...serif-thai-fonts_security_api_results.json |    1 +
 ...oboto-slab-fonts_security_api_results.json |    1 +
 .../gperf_security_api_results.json           |    1 +
 .../gpgme-devel_security_api_results.json     |    1 +
 .../gpgme_security_api_results.json           |    1 +
 .../gpgmepp-devel_security_api_results.json   |    1 +
 .../gpgmepp_security_api_results.json         |    1 +
 .../gpm-devel_security_api_results.json       |    1 +
 .../gpm-libs_security_api_results.json        |    1 +
 .../gpm_security_api_results.json             |    1 +
 ...na-azure-monitor_security_api_results.json |    1 +
 ...afana-cloudwatch_security_api_results.json |    1 +
 ...na-elasticsearch_security_api_results.json |    1 +
 ...grafana-graphite_security_api_results.json |    1 +
 ...grafana-influxdb_security_api_results.json |    1 +
 .../grafana-loki_security_api_results.json    |    1 +
 .../grafana-mssql_security_api_results.json   |    1 +
 .../grafana-mysql_security_api_results.json   |    1 +
 ...grafana-opentsdb_security_api_results.json |    1 +
 .../grafana-pcp_security_api_results.json     |    1 +
 ...grafana-postgres_security_api_results.json |    1 +
 ...afana-prometheus_security_api_results.json |    1 +
 ...fana-stackdriver_security_api_results.json |    1 +
 .../grafana_security_api_results.json         |    1 +
 .../graphite2-devel_security_api_results.json |    1 +
 .../graphite2_security_api_results.json       |    1 +
 .../graphviz-devel_security_api_results.json  |    1 +
 .../graphviz-doc_security_api_results.json    |    1 +
 .../graphviz-gd_security_api_results.json     |    1 +
 ...graphviz-python3_security_api_results.json |    1 +
 .../graphviz_security_api_results.json        |    1 +
 .../grep_security_api_results.json            |    1 +
 .../grilo-devel_security_api_results.json     |    1 +
 .../grilo-plugins_security_api_results.json   |    1 +
 .../grilo_security_api_results.json           |    1 +
 .../groff-base_security_api_results.json      |    1 +
 .../groff_security_api_results.json           |    1 +
 .../grub2-common_security_api_results.json    |    1 +
 ...-efi-aa64-cdboot_security_api_results.json |    1 +
 ...efi-aa64-modules_security_api_results.json |    1 +
 .../grub2-efi-aa64_security_api_results.json  |    1 +
 ...-efi-ia32-cdboot_security_api_results.json |    1 +
 ...efi-ia32-modules_security_api_results.json |    1 +
 .../grub2-efi-ia32_security_api_results.json  |    1 +
 ...2-efi-x64-cdboot_security_api_results.json |    1 +
 ...-efi-x64-modules_security_api_results.json |    1 +
 .../grub2-efi-x64_security_api_results.json   |    1 +
 ...grub2-pc-modules_security_api_results.json |    1 +
 .../grub2-pc_security_api_results.json        |    1 +
 ...-ppc64le-modules_security_api_results.json |    1 +
 .../grub2-ppc64le_security_api_results.json   |    1 +
 .../grub2-tools-efi_security_api_results.json |    1 +
 ...rub2-tools-extra_security_api_results.json |    1 +
 ...b2-tools-minimal_security_api_results.json |    1 +
 .../grub2-tools_security_api_results.json     |    1 +
 .../grubby_security_api_results.json          |    1 +
 ...op-schemas-devel_security_api_results.json |    1 +
 ...-desktop-schemas_security_api_results.json |    1 +
 .../gsl-devel_security_api_results.json       |    1 +
 .../gsl_security_api_results.json             |    1 +
 .../gsm-devel_security_api_results.json       |    1 +
 .../gsm_security_api_results.json             |    1 +
 .../gsound_security_api_results.json          |    1 +
 .../gspell-devel_security_api_results.json    |    1 +
 .../gspell-doc_security_api_results.json      |    1 +
 .../gspell_security_api_results.json          |    1 +
 .../gssdp-devel_security_api_results.json     |    1 +
 .../gssdp-docs_security_api_results.json      |    1 +
 .../gssdp_security_api_results.json           |    1 +
 .../gssntlmssp_security_api_results.json      |    1 +
 .../gssproxy_security_api_results.json        |    1 +
 ...gstreamer1-devel_security_api_results.json |    1 +
 ...s-bad-free-devel_security_api_results.json |    1 +
 ...plugins-bad-free_security_api_results.json |    1 +
 ...ugins-base-devel_security_api_results.json |    1 +
 ...er1-plugins-base_security_api_results.json |    1 +
 ...plugins-good-gtk_security_api_results.json |    1 +
 ...er1-plugins-good_security_api_results.json |    1 +
 ...lugins-ugly-free_security_api_results.json |    1 +
 .../gstreamer1_security_api_results.json      |    1 +
 .../gtest-devel_security_api_results.json     |    1 +
 .../gtest_security_api_results.json           |    1 +
 .../gtk-doc_security_api_results.json         |    1 +
 ...pdate-icon-cache_security_api_results.json |    1 +
 .../gtk-vnc2_security_api_results.json        |    1 +
 .../gtk2-devel-docs_security_api_results.json |    1 +
 .../gtk2-devel_security_api_results.json      |    1 +
 ...tk2-immodule-xim_security_api_results.json |    1 +
 .../gtk2-immodules_security_api_results.json  |    1 +
 .../gtk2_security_api_results.json            |    1 +
 .../gtk3-devel_security_api_results.json      |    1 +
 ...tk3-immodule-xim_security_api_results.json |    1 +
 .../gtk3_security_api_results.json            |    1 +
 .../gtkmm24-devel_security_api_results.json   |    1 +
 .../gtkmm24-docs_security_api_results.json    |    1 +
 .../gtkmm24_security_api_results.json         |    1 +
 .../gtkmm30-devel_security_api_results.json   |    1 +
 .../gtkmm30-doc_security_api_results.json     |    1 +
 .../gtkmm30_security_api_results.json         |    1 +
 ...ourceview3-devel_security_api_results.json |    1 +
 .../gtksourceview3_security_api_results.json  |    1 +
 .../gtkspell-devel_security_api_results.json  |    1 +
 .../gtkspell3-devel_security_api_results.json |    1 +
 .../gtkspell3_security_api_results.json       |    1 +
 .../gtkspell_security_api_results.json        |    1 +
 .../guava20-javadoc_security_api_results.json |    1 +
 .../guava20-testlib_security_api_results.json |    1 +
 .../guava20_security_api_results.json         |    1 +
 .../guava_security_api_results.json           |    1 +
 .../gubbi-fonts_security_api_results.json     |    1 +
 ...e-assistedinject_security_api_results.json |    1 +
 .../guice-bom_security_api_results.json       |    1 +
 ...guice-extensions_security_api_results.json |    1 +
 .../guice-grapher_security_api_results.json   |    1 +
 .../guice-jmx_security_api_results.json       |    1 +
 .../guice-jndi_security_api_results.json      |    1 +
 ...ce-multibindings_security_api_results.json |    1 +
 .../guice-parent_security_api_results.json    |    1 +
 .../guice-servlet_security_api_results.json   |    1 +
 .../guice-testlib_security_api_results.json   |    1 +
 ...hrowingproviders_security_api_results.json |    1 +
 .../guile-devel_security_api_results.json     |    1 +
 .../guile_security_api_results.json           |    1 +
 .../gupnp-av_security_api_results.json        |    1 +
 .../gupnp-devel_security_api_results.json     |    1 +
 .../gupnp-dlna_security_api_results.json      |    1 +
 .../gupnp-igd-devel_security_api_results.json |    1 +
 .../gupnp-igd_security_api_results.json       |    1 +
 .../gupnp_security_api_results.json           |    1 +
 .../gutenprint-cups_security_api_results.json |    1 +
 .../gutenprint-doc_security_api_results.json  |    1 +
 ...tenprint-libs-ui_security_api_results.json |    1 +
 .../gutenprint-libs_security_api_results.json |    1 +
 ...utenprint-plugin_security_api_results.json |    1 +
 .../gutenprint_security_api_results.json      |    1 +
 .../gvfs-afc_security_api_results.json        |    1 +
 .../gvfs-afp_security_api_results.json        |    1 +
 .../gvfs-archive_security_api_results.json    |    1 +
 .../gvfs-client_security_api_results.json     |    1 +
 .../gvfs-devel_security_api_results.json      |    1 +
 .../gvfs-fuse_security_api_results.json       |    1 +
 .../gvfs-goa_security_api_results.json        |    1 +
 .../gvfs-gphoto2_security_api_results.json    |    1 +
 .../gvfs-mtp_security_api_results.json        |    1 +
 .../gvfs-smb_security_api_results.json        |    1 +
 .../gvfs_security_api_results.json            |    1 +
 .../gvnc_security_api_results.json            |    1 +
 .../gzip_security_api_results.json            |    1 +
 .../hamcrest-core_security_api_results.json   |    1 +
 .../hamcrest-demo_security_api_results.json   |    1 +
 ...hamcrest-javadoc_security_api_results.json |    1 +
 .../hamcrest_security_api_results.json        |    1 +
 .../haproxy_security_api_results.json         |    1 +
 .../hardlink_security_api_results.json        |    1 +
 .../harfbuzz-devel_security_api_results.json  |    1 +
 .../harfbuzz-icu_security_api_results.json    |    1 +
 .../harfbuzz_security_api_results.json        |    1 +
 .../hawtjni-javadoc_security_api_results.json |    1 +
 .../hawtjni-runtime_security_api_results.json |    1 +
 .../hawtjni_security_api_results.json         |    1 +
 .../hdparm_security_api_results.json          |    1 +
 .../help2man_security_api_results.json        |    1 +
 .../hesiod-devel_security_api_results.json    |    1 +
 .../hesiod_security_api_results.json          |    1 +
 .../hexchat-devel_security_api_results.json   |    1 +
 .../hexchat_security_api_results.json         |    1 +
 .../hexedit_security_api_results.json         |    1 +
 ...color-icon-theme_security_api_results.json |    1 +
 .../highlight-gui_security_api_results.json   |    1 +
 .../highlight_security_api_results.json       |    1 +
 .../hivex-devel_security_api_results.json     |    1 +
 .../hivex_security_api_results.json           |    1 +
 .../hostname_security_api_results.json        |    1 +
 .../hplip-common_security_api_results.json    |    1 +
 .../hplip-gui_security_api_results.json       |    1 +
 .../hplip-libs_security_api_results.json      |    1 +
 .../hplip_security_api_results.json           |    1 +
 .../hspell_security_api_results.json          |    1 +
 ...ttp-parser-devel_security_api_results.json |    1 +
 .../http-parser_security_api_results.json     |    1 +
 ...nts-client-cache_security_api_results.json |    1 +
 ...s-client-javadoc_security_api_results.json |    1 +
 ...omponents-client_security_api_results.json |    1 +
 ...nts-core-javadoc_security_api_results.json |    1 +
 ...pcomponents-core_security_api_results.json |    1 +
 ...mponents-project_security_api_results.json |    1 +
 .../httpd-devel_security_api_results.json     |    1 +
 ...httpd-filesystem_security_api_results.json |    1 +
 .../httpd-manual_security_api_results.json    |    1 +
 .../httpd-tools_security_api_results.json     |    1 +
 .../httpd_security_api_results.json           |    1 +
 .../hunspell-af_security_api_results.json     |    1 +
 .../hunspell-ak_security_api_results.json     |    1 +
 .../hunspell-am_security_api_results.json     |    1 +
 .../hunspell-ar_security_api_results.json     |    1 +
 .../hunspell-as_security_api_results.json     |    1 +
 .../hunspell-ast_security_api_results.json    |    1 +
 .../hunspell-az_security_api_results.json     |    1 +
 .../hunspell-be_security_api_results.json     |    1 +
 .../hunspell-ber_security_api_results.json    |    1 +
 .../hunspell-bg_security_api_results.json     |    1 +
 .../hunspell-bn_security_api_results.json     |    1 +
 .../hunspell-br_security_api_results.json     |    1 +
 .../hunspell-ca_security_api_results.json     |    1 +
 .../hunspell-cop_security_api_results.json    |    1 +
 .../hunspell-cs_security_api_results.json     |    1 +
 .../hunspell-csb_security_api_results.json    |    1 +
 .../hunspell-cv_security_api_results.json     |    1 +
 .../hunspell-cy_security_api_results.json     |    1 +
 .../hunspell-da_security_api_results.json     |    1 +
 .../hunspell-de_security_api_results.json     |    1 +
 .../hunspell-devel_security_api_results.json  |    1 +
 .../hunspell-dsb_security_api_results.json    |    1 +
 .../hunspell-el_security_api_results.json     |    1 +
 .../hunspell-en-GB_security_api_results.json  |    1 +
 .../hunspell-en-US_security_api_results.json  |    1 +
 .../hunspell-en_security_api_results.json     |    1 +
 .../hunspell-eo_security_api_results.json     |    1 +
 .../hunspell-es-AR_security_api_results.json  |    1 +
 .../hunspell-es-BO_security_api_results.json  |    1 +
 .../hunspell-es-CL_security_api_results.json  |    1 +
 .../hunspell-es-CO_security_api_results.json  |    1 +
 .../hunspell-es-CR_security_api_results.json  |    1 +
 .../hunspell-es-CU_security_api_results.json  |    1 +
 .../hunspell-es-DO_security_api_results.json  |    1 +
 .../hunspell-es-EC_security_api_results.json  |    1 +
 .../hunspell-es-ES_security_api_results.json  |    1 +
 .../hunspell-es-GT_security_api_results.json  |    1 +
 .../hunspell-es-HN_security_api_results.json  |    1 +
 .../hunspell-es-MX_security_api_results.json  |    1 +
 .../hunspell-es-NI_security_api_results.json  |    1 +
 .../hunspell-es-PA_security_api_results.json  |    1 +
 .../hunspell-es-PE_security_api_results.json  |    1 +
 .../hunspell-es-PR_security_api_results.json  |    1 +
 .../hunspell-es-PY_security_api_results.json  |    1 +
 .../hunspell-es-SV_security_api_results.json  |    1 +
 .../hunspell-es-US_security_api_results.json  |    1 +
 .../hunspell-es-UY_security_api_results.json  |    1 +
 .../hunspell-es-VE_security_api_results.json  |    1 +
 .../hunspell-es_security_api_results.json     |    1 +
 .../hunspell-et_security_api_results.json     |    1 +
 .../hunspell-eu_security_api_results.json     |    1 +
 .../hunspell-fa_security_api_results.json     |    1 +
 .../hunspell-fj_security_api_results.json     |    1 +
 .../hunspell-fo_security_api_results.json     |    1 +
 .../hunspell-fr_security_api_results.json     |    1 +
 .../hunspell-fur_security_api_results.json    |    1 +
 .../hunspell-fy_security_api_results.json     |    1 +
 .../hunspell-ga_security_api_results.json     |    1 +
 .../hunspell-gd_security_api_results.json     |    1 +
 .../hunspell-gl_security_api_results.json     |    1 +
 .../hunspell-grc_security_api_results.json    |    1 +
 .../hunspell-gu_security_api_results.json     |    1 +
 .../hunspell-gv_security_api_results.json     |    1 +
 .../hunspell-haw_security_api_results.json    |    1 +
 .../hunspell-he_security_api_results.json     |    1 +
 .../hunspell-hi_security_api_results.json     |    1 +
 .../hunspell-hil_security_api_results.json    |    1 +
 .../hunspell-hr_security_api_results.json     |    1 +
 .../hunspell-hsb_security_api_results.json    |    1 +
 .../hunspell-ht_security_api_results.json     |    1 +
 .../hunspell-hu_security_api_results.json     |    1 +
 .../hunspell-hy_security_api_results.json     |    1 +
 .../hunspell-ia_security_api_results.json     |    1 +
 .../hunspell-id_security_api_results.json     |    1 +
 .../hunspell-is_security_api_results.json     |    1 +
 .../hunspell-it_security_api_results.json     |    1 +
 .../hunspell-kk_security_api_results.json     |    1 +
 .../hunspell-km_security_api_results.json     |    1 +
 .../hunspell-kn_security_api_results.json     |    1 +
 .../hunspell-ko_security_api_results.json     |    1 +
 .../hunspell-ku_security_api_results.json     |    1 +
 .../hunspell-ky_security_api_results.json     |    1 +
 .../hunspell-la_security_api_results.json     |    1 +
 .../hunspell-lb_security_api_results.json     |    1 +
 .../hunspell-ln_security_api_results.json     |    1 +
 .../hunspell-lt_security_api_results.json     |    1 +
 .../hunspell-lv_security_api_results.json     |    1 +
 .../hunspell-mai_security_api_results.json    |    1 +
 .../hunspell-mg_security_api_results.json     |    1 +
 .../hunspell-mi_security_api_results.json     |    1 +
 .../hunspell-mk_security_api_results.json     |    1 +
 .../hunspell-ml_security_api_results.json     |    1 +
 .../hunspell-mn_security_api_results.json     |    1 +
 .../hunspell-mos_security_api_results.json    |    1 +
 .../hunspell-mr_security_api_results.json     |    1 +
 .../hunspell-ms_security_api_results.json     |    1 +
 .../hunspell-mt_security_api_results.json     |    1 +
 .../hunspell-nb_security_api_results.json     |    1 +
 .../hunspell-nds_security_api_results.json    |    1 +
 .../hunspell-ne_security_api_results.json     |    1 +
 .../hunspell-nl_security_api_results.json     |    1 +
 .../hunspell-nn_security_api_results.json     |    1 +
 .../hunspell-nr_security_api_results.json     |    1 +
 .../hunspell-nso_security_api_results.json    |    1 +
 .../hunspell-ny_security_api_results.json     |    1 +
 .../hunspell-oc_security_api_results.json     |    1 +
 .../hunspell-om_security_api_results.json     |    1 +
 .../hunspell-or_security_api_results.json     |    1 +
 .../hunspell-pa_security_api_results.json     |    1 +
 .../hunspell-pl_security_api_results.json     |    1 +
 .../hunspell-pt_security_api_results.json     |    1 +
 .../hunspell-qu_security_api_results.json     |    1 +
 .../hunspell-quh_security_api_results.json    |    1 +
 .../hunspell-ro_security_api_results.json     |    1 +
 .../hunspell-ru_security_api_results.json     |    1 +
 .../hunspell-rw_security_api_results.json     |    1 +
 .../hunspell-sc_security_api_results.json     |    1 +
 .../hunspell-se_security_api_results.json     |    1 +
 .../hunspell-shs_security_api_results.json    |    1 +
 .../hunspell-si_security_api_results.json     |    1 +
 .../hunspell-sk_security_api_results.json     |    1 +
 .../hunspell-sl_security_api_results.json     |    1 +
 .../hunspell-smj_security_api_results.json    |    1 +
 .../hunspell-so_security_api_results.json     |    1 +
 .../hunspell-sq_security_api_results.json     |    1 +
 .../hunspell-sr_security_api_results.json     |    1 +
 .../hunspell-ss_security_api_results.json     |    1 +
 .../hunspell-st_security_api_results.json     |    1 +
 .../hunspell-sv_security_api_results.json     |    1 +
 .../hunspell-sw_security_api_results.json     |    1 +
 .../hunspell-ta_security_api_results.json     |    1 +
 .../hunspell-te_security_api_results.json     |    1 +
 .../hunspell-tet_security_api_results.json    |    1 +
 .../hunspell-th_security_api_results.json     |    1 +
 .../hunspell-ti_security_api_results.json     |    1 +
 .../hunspell-tk_security_api_results.json     |    1 +
 .../hunspell-tl_security_api_results.json     |    1 +
 .../hunspell-tn_security_api_results.json     |    1 +
 .../hunspell-tpi_security_api_results.json    |    1 +
 .../hunspell-ts_security_api_results.json     |    1 +
 .../hunspell-uk_security_api_results.json     |    1 +
 .../hunspell-ur_security_api_results.json     |    1 +
 .../hunspell-uz_security_api_results.json     |    1 +
 .../hunspell-ve_security_api_results.json     |    1 +
 .../hunspell-vi_security_api_results.json     |    1 +
 .../hunspell-wa_security_api_results.json     |    1 +
 .../hunspell-xh_security_api_results.json     |    1 +
 .../hunspell-yi_security_api_results.json     |    1 +
 .../hunspell-zu_security_api_results.json     |    1 +
 .../hunspell_security_api_results.json        |    1 +
 .../hwdata_security_api_results.json          |    1 +
 .../hwloc-devel_security_api_results.json     |    1 +
 .../hwloc-gui_security_api_results.json       |    1 +
 .../hwloc-libs_security_api_results.json      |    1 +
 .../hwloc-plugins_security_api_results.json   |    1 +
 .../hwloc_security_api_results.json           |    1 +
 ...-daemons-license_security_api_results.json |    1 +
 .../hyperv-daemons_security_api_results.json  |    1 +
 .../hyperv-tools_security_api_results.json    |    1 +
 .../hypervfcopyd_security_api_results.json    |    1 +
 .../hypervkvpd_security_api_results.json      |    1 +
 .../hypervvssd_security_api_results.json      |    1 +
 .../hyphen-af_security_api_results.json       |    1 +
 .../hyphen-as_security_api_results.json       |    1 +
 .../hyphen-be_security_api_results.json       |    1 +
 .../hyphen-bg_security_api_results.json       |    1 +
 .../hyphen-bn_security_api_results.json       |    1 +
 .../hyphen-ca_security_api_results.json       |    1 +
 .../hyphen-cs_security_api_results.json       |    1 +
 .../hyphen-cy_security_api_results.json       |    1 +
 .../hyphen-da_security_api_results.json       |    1 +
 .../hyphen-de_security_api_results.json       |    1 +
 .../hyphen-devel_security_api_results.json    |    1 +
 .../hyphen-el_security_api_results.json       |    1 +
 .../hyphen-en_security_api_results.json       |    1 +
 .../hyphen-es_security_api_results.json       |    1 +
 .../hyphen-et_security_api_results.json       |    1 +
 .../hyphen-eu_security_api_results.json       |    1 +
 .../hyphen-fa_security_api_results.json       |    1 +
 .../hyphen-fo_security_api_results.json       |    1 +
 .../hyphen-fr_security_api_results.json       |    1 +
 .../hyphen-ga_security_api_results.json       |    1 +
 .../hyphen-gl_security_api_results.json       |    1 +
 .../hyphen-grc_security_api_results.json      |    1 +
 .../hyphen-gu_security_api_results.json       |    1 +
 .../hyphen-hi_security_api_results.json       |    1 +
 .../hyphen-hr_security_api_results.json       |    1 +
 .../hyphen-hsb_security_api_results.json      |    1 +
 .../hyphen-hu_security_api_results.json       |    1 +
 .../hyphen-ia_security_api_results.json       |    1 +
 .../hyphen-id_security_api_results.json       |    1 +
 .../hyphen-is_security_api_results.json       |    1 +
 .../hyphen-it_security_api_results.json       |    1 +
 .../hyphen-kn_security_api_results.json       |    1 +
 .../hyphen-ku_security_api_results.json       |    1 +
 .../hyphen-lt_security_api_results.json       |    1 +
 .../hyphen-lv_security_api_results.json       |    1 +
 .../hyphen-mi_security_api_results.json       |    1 +
 .../hyphen-ml_security_api_results.json       |    1 +
 .../hyphen-mn_security_api_results.json       |    1 +
 .../hyphen-mr_security_api_results.json       |    1 +
 .../hyphen-nb_security_api_results.json       |    1 +
 .../hyphen-nl_security_api_results.json       |    1 +
 .../hyphen-nn_security_api_results.json       |    1 +
 .../hyphen-or_security_api_results.json       |    1 +
 .../hyphen-pa_security_api_results.json       |    1 +
 .../hyphen-pl_security_api_results.json       |    1 +
 .../hyphen-pt_security_api_results.json       |    1 +
 .../hyphen-ro_security_api_results.json       |    1 +
 .../hyphen-ru_security_api_results.json       |    1 +
 .../hyphen-sa_security_api_results.json       |    1 +
 .../hyphen-sk_security_api_results.json       |    1 +
 .../hyphen-sl_security_api_results.json       |    1 +
 .../hyphen-sr_security_api_results.json       |    1 +
 .../hyphen-sv_security_api_results.json       |    1 +
 .../hyphen-ta_security_api_results.json       |    1 +
 .../hyphen-te_security_api_results.json       |    1 +
 .../hyphen-tk_security_api_results.json       |    1 +
 .../hyphen-uk_security_api_results.json       |    1 +
 .../hyphen-zu_security_api_results.json       |    1 +
 .../hyphen_security_api_results.json          |    1 +
 .../i2c-tools-perl_security_api_results.json  |    1 +
 .../i2c-tools_security_api_results.json       |    1 +
 .../ibacm_security_api_results.json           |    1 +
 .../ibus-devel-docs_security_api_results.json |    1 +
 .../ibus-devel_security_api_results.json      |    1 +
 .../ibus-gtk2_security_api_results.json       |    1 +
 .../ibus-gtk3_security_api_results.json       |    1 +
 .../ibus-hangul_security_api_results.json     |    1 +
 .../ibus-kkc_security_api_results.json        |    1 +
 .../ibus-libpinyin_security_api_results.json  |    1 +
 .../ibus-libs_security_api_results.json       |    1 +
 .../ibus-libzhuyin_security_api_results.json  |    1 +
 .../ibus-m17n_security_api_results.json       |    1 +
 .../ibus-sayura_security_api_results.json     |    1 +
 .../ibus-setup_security_api_results.json      |    1 +
 ...le-chinese-array_security_api_results.json |    1 +
 ...-chinese-cangjie_security_api_results.json |    1 +
 ...hinese-cantonese_security_api_results.json |    1 +
 ...ble-chinese-easy_security_api_results.json |    1 +
 ...ble-chinese-erbi_security_api_results.json |    1 +
 ...le-chinese-quick_security_api_results.json |    1 +
 ...able-chinese-scj_security_api_results.json |    1 +
 ...-chinese-stroke5_security_api_results.json |    1 +
 ...table-chinese-wu_security_api_results.json |    1 +
 ...ese-wubi-haifeng_security_api_results.json |    1 +
 ...nese-wubi-jidian_security_api_results.json |    1 +
 ...ble-chinese-yong_security_api_results.json |    1 +
 ...us-table-chinese_security_api_results.json |    1 +
 .../ibus-table_security_api_results.json      |    1 +
 ...s-typing-booster_security_api_results.json |    1 +
 .../ibus-wayland_security_api_results.json    |    1 +
 .../ibus_security_api_results.json            |    1 +
 .../icedax_security_api_results.json          |    1 +
 ...dtea-web-javadoc_security_api_results.json |    1 +
 .../icedtea-web_security_api_results.json     |    1 +
 .../icoutils_security_api_results.json        |    1 +
 .../icu_security_api_results.json             |    1 +
 .../idm_security_api_results.json             |    1 +
 .../idn2_security_api_results.json            |    1 +
 ...iio-sensor-proxy_security_api_results.json |    1 +
 .../ilmbase-devel_security_api_results.json   |    1 +
 .../ilmbase_security_api_results.json         |    1 +
 ...-evm-utils-devel_security_api_results.json |    1 +
 .../ima-evm-utils_security_api_results.json   |    1 +
 .../imake_security_api_results.json           |    1 +
 ...infiniband-diags_security_api_results.json |    1 +
 .../info_security_api_results.json            |    1 +
 ...nitial-setup-gui_security_api_results.json |    1 +
 .../initial-setup_security_api_results.json   |    1 +
 .../initscripts_security_api_results.json     |    1 +
 .../inkscape-docs_security_api_results.json   |    1 +
 .../inkscape-view_security_api_results.json   |    1 +
 .../inkscape_security_api_results.json        |    1 +
 .../insights-client_security_api_results.json |    1 +
 .../integritysetup_security_api_results.json  |    1 +
 .../intel-cmt-cat_security_api_results.json   |    1 +
 .../intel-gpu-tools_security_api_results.json |    1 +
 .../intltool_security_api_results.json        |    1 +
 .../iotop_security_api_results.json           |    1 +
 .../iowatcher_security_api_results.json       |    1 +
 ...pa-client-common_security_api_results.json |    1 +
 ...ipa-client-samba_security_api_results.json |    1 +
 .../ipa-client_security_api_results.json      |    1 +
 .../ipa-common_security_api_results.json      |    1 +
 ...healthcheck-core_security_api_results.json |    1 +
 .../ipa-healthcheck_security_api_results.json |    1 +
 ...-memberof-plugin_security_api_results.json |    1 +
 ...pa-python-compat_security_api_results.json |    1 +
 ...pa-server-common_security_api_results.json |    1 +
 .../ipa-server-dns_security_api_results.json  |    1 +
 ...-server-trust-ad_security_api_results.json |    1 +
 .../ipa-server_security_api_results.json      |    1 +
 .../ipcalc_security_api_results.json          |    1 +
 .../iperf3_security_api_results.json          |    1 +
 .../ipmievd_security_api_results.json         |    1 +
 .../ipmitool_security_api_results.json        |    1 +
 .../iproute-devel_security_api_results.json   |    1 +
 .../iproute-tc_security_api_results.json      |    1 +
 .../iproute_security_api_results.json         |    1 +
 .../iprutils_security_api_results.json        |    1 +
 .../ipset-devel_security_api_results.json     |    1 +
 .../ipset-libs_security_api_results.json      |    1 +
 .../ipset-service_security_api_results.json   |    1 +
 .../ipset_security_api_results.json           |    1 +
 ...tables-arptables_security_api_results.json |    1 +
 .../iptables-devel_security_api_results.json  |    1 +
 ...ptables-ebtables_security_api_results.json |    1 +
 .../iptables-libs_security_api_results.json   |    1 +
 ...ptables-services_security_api_results.json |    1 +
 .../iptables-utils_security_api_results.json  |    1 +
 .../iptables_security_api_results.json        |    1 +
 .../iptraf-ng_security_api_results.json       |    1 +
 .../iptstate_security_api_results.json        |    1 +
 .../iputils-ninfod_security_api_results.json  |    1 +
 .../iputils_security_api_results.json         |    1 +
 .../ipvsadm_security_api_results.json         |    1 +
 .../ipxe-bootimgs_security_api_results.json   |    1 +
 .../ipxe-roms-qemu_security_api_results.json  |    1 +
 .../ipxe-roms_security_api_results.json       |    1 +
 .../irqbalance_security_api_results.json      |    1 +
 .../irssi-devel_security_api_results.json     |    1 +
 .../irssi_security_api_results.json           |    1 +
 ...r-utils-iscsiuio_security_api_results.json |    1 +
 ...-initiator-utils_security_api_results.json |    1 +
 .../isl-devel_security_api_results.json       |    1 +
 .../isl_security_api_results.json             |    1 +
 ...isns-utils-devel_security_api_results.json |    1 +
 .../isns-utils-libs_security_api_results.json |    1 +
 .../isns-utils_security_api_results.json      |    1 +
 .../iso-codes-devel_security_api_results.json |    1 +
 .../iso-codes_security_api_results.json       |    1 +
 .../isomd5sum_security_api_results.json       |    1 +
 ...isorelax-javadoc_security_api_results.json |    1 +
 .../isorelax_security_api_results.json        |    1 +
 ...-commons-runtime_security_api_results.json |    1 +
 ...ck-commons-tools_security_api_results.json |    1 +
 .../istack-commons_security_api_results.json  |    1 +
 .../itstool_security_api_results.json         |    1 +
 .../ivy-local_security_api_results.json       |    1 +
 .../iw_security_api_results.json              |    1 +
 .../iwl100-firmware_security_api_results.json |    1 +
 ...iwl1000-firmware_security_api_results.json |    1 +
 .../iwl105-firmware_security_api_results.json |    1 +
 .../iwl135-firmware_security_api_results.json |    1 +
 ...iwl2000-firmware_security_api_results.json |    1 +
 ...iwl2030-firmware_security_api_results.json |    1 +
 ...iwl3160-firmware_security_api_results.json |    1 +
 ...iwl3945-firmware_security_api_results.json |    1 +
 ...iwl4965-firmware_security_api_results.json |    1 +
 ...iwl5000-firmware_security_api_results.json |    1 +
 ...iwl5150-firmware_security_api_results.json |    1 +
 ...iwl6000-firmware_security_api_results.json |    1 +
 ...6000g2a-firmware_security_api_results.json |    1 +
 ...6000g2b-firmware_security_api_results.json |    1 +
 ...iwl6050-firmware_security_api_results.json |    1 +
 ...iwl7260-firmware_security_api_results.json |    1 +
 .../iwpmd_security_api_results.json           |    1 +
 ...kson-annotations_security_api_results.json |    1 +
 .../jackson-core_security_api_results.json    |    1 +
 ...jackson-databind_security_api_results.json |    1 +
 ...rs-json-provider_security_api_results.json |    1 +
 ...-jaxrs-providers_security_api_results.json |    1 +
 ...jaxb-annotations_security_api_results.json |    1 +
 .../jaf-javadoc_security_api_results.json     |    1 +
 .../jaf_security_api_results.json             |    1 +
 ...-httpclient-demo_security_api_results.json |    1 +
 ...tpclient-javadoc_security_api_results.json |    1 +
 ...ttpclient-manual_security_api_results.json |    1 +
 ...mmons-httpclient_security_api_results.json |    1 +
 ...arta-oro-javadoc_security_api_results.json |    1 +
 .../jakarta-oro_security_api_results.json     |    1 +
 .../jansi-javadoc_security_api_results.json   |    1 +
 ...i-native-javadoc_security_api_results.json |    1 +
 .../jansi-native_security_api_results.json    |    1 +
 .../jansi_security_api_results.json           |    1 +
 .../jansson-devel_security_api_results.json   |    1 +
 .../jansson_security_api_results.json         |    1 +
 .../jasper-devel_security_api_results.json    |    1 +
 .../jasper-libs_security_api_results.json     |    1 +
 ...a-1.8.0-ibm-demo_security_api_results.json |    1 +
 ...-1.8.0-ibm-devel_security_api_results.json |    1 +
 ...8.0-ibm-headless_security_api_results.json |    1 +
 ...a-1.8.0-ibm-jdbc_security_api_results.json |    1 +
 ...1.8.0-ibm-plugin_security_api_results.json |    1 +
 ...va-1.8.0-ibm-src_security_api_results.json |    1 +
 ...8.0-ibm-webstart_security_api_results.json |    1 +
 .../java-1.8.0-ibm_security_api_results.json  |    1 +
 ...dk-accessibility_security_api_results.json |    1 +
 ...8.0-openjdk-demo_security_api_results.json |    1 +
 ....0-openjdk-devel_security_api_results.json |    1 +
 ...openjdk-headless_security_api_results.json |    1 +
 ...njdk-javadoc-zip_security_api_results.json |    1 +
 ...-openjdk-javadoc_security_api_results.json |    1 +
 ....8.0-openjdk-src_security_api_results.json |    1 +
 ...va-1.8.0-openjdk_security_api_results.json |    1 +
 ...-11-openjdk-demo_security_api_results.json |    1 +
 ...11-openjdk-devel_security_api_results.json |    1 +
 ...openjdk-headless_security_api_results.json |    1 +
 ...njdk-javadoc-zip_security_api_results.json |    1 +
 ...-openjdk-javadoc_security_api_results.json |    1 +
 ...11-openjdk-jmods_security_api_results.json |    1 +
 ...a-11-openjdk-src_security_api_results.json |    1 +
 .../java-11-openjdk_security_api_results.json |    1 +
 ...java-atk-wrapper_security_api_results.json |    1 +
 ...java_cup-javadoc_security_api_results.json |    1 +
 .../java_cup-manual_security_api_results.json |    1 +
 .../java_cup_security_api_results.json        |    1 +
 .../javacc-demo_security_api_results.json     |    1 +
 .../javacc-javadoc_security_api_results.json  |    1 +
 .../javacc-manual_security_api_results.json   |    1 +
 ...n-plugin-javadoc_security_api_results.json |    1 +
 ...acc-maven-plugin_security_api_results.json |    1 +
 .../javacc_security_api_results.json          |    1 +
 ...javamail-javadoc_security_api_results.json |    1 +
 .../javamail_security_api_results.json        |    1 +
 ...kages-filesystem_security_api_results.json |    1 +
 ...vapackages-local_security_api_results.json |    1 +
 ...packages-runtime_security_api_results.json |    1 +
 ...vapackages-tools_security_api_results.json |    1 +
 ...avassist-javadoc_security_api_results.json |    1 +
 .../javassist_security_api_results.json       |    1 +
 .../jaxen-demo_security_api_results.json      |    1 +
 .../jaxen-javadoc_security_api_results.json   |    1 +
 .../jaxen_security_api_results.json           |    1 +
 .../jbig2dec-libs_security_api_results.json   |    1 +
 .../jbigkit-devel_security_api_results.json   |    1 +
 .../jbigkit-libs_security_api_results.json    |    1 +
 ...otations-1.2-api_security_api_results.json |    1 +
 ...-1.2-api-javadoc_security_api_results.json |    1 +
 ...rceptors-1.2-api_security_api_results.json |    1 +
 ...ss-jaxrs-2.0-api_security_api_results.json |    1 +
 ...ss-logging-tools_security_api_results.json |    1 +
 .../jboss-logging_security_api_results.json   |    1 +
 .../jboss-parent_security_api_results.json    |    1 +
 .../jcl-over-slf4j_security_api_results.json  |    1 +
 .../jdeparser_security_api_results.json       |    1 +
 .../jdepend-demo_security_api_results.json    |    1 +
 .../jdepend-javadoc_security_api_results.json |    1 +
 .../jdepend_security_api_results.json         |    1 +
 ...pendency-javadoc_security_api_results.json |    1 +
 .../jdependency_security_api_results.json     |    1 +
 .../jdom-demo_security_api_results.json       |    1 +
 .../jdom-javadoc_security_api_results.json    |    1 +
 .../jdom2-javadoc_security_api_results.json   |    1 +
 .../jdom2_security_api_results.json           |    1 +
 .../jdom_security_api_results.json            |    1 +
 .../jflex-javadoc_security_api_results.json   |    1 +
 .../jflex_security_api_results.json           |    1 +
 .../jimtcl-devel_security_api_results.json    |    1 +
 .../jimtcl_security_api_results.json          |    1 +
 .../jline-javadoc_security_api_results.json   |    1 +
 .../jline_security_api_results.json           |    1 +
 ...jmc-core-javadoc_security_api_results.json |    1 +
 .../jmc-core_security_api_results.json        |    1 +
 .../jmc_security_api_results.json             |    1 +
 .../jna_security_api_results.json             |    1 +
 ...olokia-jvm-agent_security_api_results.json |    1 +
 .../jomolhari-fonts_security_api_results.json |    1 +
 .../jose_security_api_results.json            |    1 +
 .../jq_security_api_results.json              |    1 +
 .../js-uglify_security_api_results.json       |    1 +
 .../jsch-javadoc_security_api_results.json    |    1 +
 .../jsch_security_api_results.json            |    1 +
 .../json-c-devel_security_api_results.json    |    1 +
 .../json-c-doc_security_api_results.json      |    1 +
 .../json-c_security_api_results.json          |    1 +
 .../json-glib-devel_security_api_results.json |    1 +
 .../json-glib_security_api_results.json       |    1 +
 .../jsoup-javadoc_security_api_results.json   |    1 +
 .../jsoup_security_api_results.json           |    1 +
 .../jsr-305-javadoc_security_api_results.json |    1 +
 .../jsr-305_security_api_results.json         |    1 +
 .../jss-javadoc_security_api_results.json     |    1 +
 .../jss_security_api_results.json             |    1 +
 .../jtidy-javadoc_security_api_results.json   |    1 +
 .../jtidy_security_api_results.json           |    1 +
 .../jul-to-slf4j_security_api_results.json    |    1 +
 ...montserrat-fonts_security_api_results.json |    1 +
 .../junit-javadoc_security_api_results.json   |    1 +
 .../junit-manual_security_api_results.json    |    1 +
 .../junit_security_api_results.json           |    1 +
 .../jvnet-parent_security_api_results.json    |    1 +
 .../jzlib-demo_security_api_results.json      |    1 +
 .../jzlib-javadoc_security_api_results.json   |    1 +
 .../jzlib_security_api_results.json           |    1 +
 .../kabi-dw_security_api_results.json         |    1 +
 .../kacst-art-fonts_security_api_results.json |    1 +
 ...kacst-book-fonts_security_api_results.json |    1 +
 ...decorative-fonts_security_api_results.json |    1 +
 ...st-digital-fonts_security_api_results.json |    1 +
 ...acst-farsi-fonts_security_api_results.json |    1 +
 ...cst-fonts-common_security_api_results.json |    1 +
 ...cst-letter-fonts_security_api_results.json |    1 +
 ...acst-naskh-fonts_security_api_results.json |    1 +
 ...cst-office-fonts_security_api_results.json |    1 +
 .../kacst-one-fonts_security_api_results.json |    1 +
 .../kacst-pen-fonts_security_api_results.json |    1 +
 ...cst-poster-fonts_security_api_results.json |    1 +
 ...kacst-qurn-fonts_security_api_results.json |    1 +
 ...cst-screen-fonts_security_api_results.json |    1 +
 ...acst-title-fonts_security_api_results.json |    1 +
 ...cst-titlel-fonts_security_api_results.json |    1 +
 .../kbd-legacy_security_api_results.json      |    1 +
 .../kbd-misc_security_api_results.json        |    1 +
 .../kbd_security_api_results.json             |    1 +
 ...p-anaconda-addon_security_api_results.json |    1 +
 .../keepalived_security_api_results.json      |    1 +
 ...l-abi-whitelists_security_api_results.json |    1 +
 .../kernel-core_security_api_results.json     |    1 +
 ...el-cross-headers_security_api_results.json |    1 +
 ...ernel-debug-core_security_api_results.json |    1 +
 ...rnel-debug-devel_security_api_results.json |    1 +
 ...ug-modules-extra_security_api_results.json |    1 +
 ...el-debug-modules_security_api_results.json |    1 +
 .../kernel-debug_security_api_results.json    |    1 +
 .../kernel-devel_security_api_results.json    |    1 +
 .../kernel-doc_security_api_results.json      |    1 +
 .../kernel-headers_security_api_results.json  |    1 +
 ...el-modules-extra_security_api_results.json |    1 +
 .../kernel-modules_security_api_results.json  |    1 +
 ...ernel-rpm-macros_security_api_results.json |    1 +
 ...tools-libs-devel_security_api_results.json |    1 +
 ...ernel-tools-libs_security_api_results.json |    1 +
 .../kernel-tools_security_api_results.json    |    1 +
 ...el-zfcpdump-core_security_api_results.json |    1 +
 ...l-zfcpdump-devel_security_api_results.json |    1 +
 ...mp-modules-extra_security_api_results.json |    1 +
 ...zfcpdump-modules_security_api_results.json |    1 +
 .../kernel-zfcpdump_security_api_results.json |    1 +
 .../kernel_security_api_results.json          |    1 +
 .../kernelshark_security_api_results.json     |    1 +
 .../kexec-tools_security_api_results.json     |    1 +
 ...keybinder3-devel_security_api_results.json |    1 +
 .../keybinder3-doc_security_api_results.json  |    1 +
 .../keybinder3_security_api_results.json      |    1 +
 ...d-client-install_security_api_results.json |    1 +
 ...utils-libs-devel_security_api_results.json |    1 +
 .../keyutils-libs_security_api_results.json   |    1 +
 .../keyutils_security_api_results.json        |    1 +
 ...meros-base-fonts_security_api_results.json |    1 +
 ...battambang-fonts_security_api_results.json |    1 +
 ...eros-bokor-fonts_security_api_results.json |    1 +
 ...ros-fonts-common_security_api_results.json |    1 +
 ...andwritten-fonts_security_api_results.json |    1 +
 ...al-chrieng-fonts_security_api_results.json |    1 +
 ...meros-muol-fonts_security_api_results.json |    1 +
 ...s-siemreap-fonts_security_api_results.json |    1 +
 .../kmod-devel_security_api_results.json      |    1 +
 .../kmod-kvdo_security_api_results.json       |    1 +
 .../kmod-libs_security_api_results.json       |    1 +
 .../kmod_security_api_results.json            |    1 +
 .../koan_security_api_results.json            |    1 +
 .../kpartx_security_api_results.json          |    1 +
 .../kpatch_security_api_results.json          |    1 +
 .../krb5-devel_security_api_results.json      |    1 +
 .../krb5-libs_security_api_results.json       |    1 +
 .../krb5-pkinit_security_api_results.json     |    1 +
 ...krb5-server-ldap_security_api_results.json |    1 +
 .../krb5-server_security_api_results.json     |    1 +
 ...krb5-workstation_security_api_results.json |    1 +
 .../ksc_security_api_results.json             |    1 +
 .../ksh_security_api_results.json             |    1 +
 ...nikurd-web-fonts_security_api_results.json |    1 +
 ...yotocabinet-libs_security_api_results.json |    1 +
 .../ladspa-devel_security_api_results.json    |    1 +
 .../ladspa_security_api_results.json          |    1 +
 .../lame-devel_security_api_results.json      |    1 +
 .../lame-libs_security_api_results.json       |    1 +
 .../langpacks-af_security_api_results.json    |    1 +
 .../langpacks-am_security_api_results.json    |    1 +
 .../langpacks-ar_security_api_results.json    |    1 +
 .../langpacks-as_security_api_results.json    |    1 +
 .../langpacks-ast_security_api_results.json   |    1 +
 .../langpacks-be_security_api_results.json    |    1 +
 .../langpacks-bg_security_api_results.json    |    1 +
 .../langpacks-bn_security_api_results.json    |    1 +
 .../langpacks-br_security_api_results.json    |    1 +
 .../langpacks-bs_security_api_results.json    |    1 +
 .../langpacks-ca_security_api_results.json    |    1 +
 .../langpacks-cs_security_api_results.json    |    1 +
 .../langpacks-cy_security_api_results.json    |    1 +
 .../langpacks-da_security_api_results.json    |    1 +
 .../langpacks-de_security_api_results.json    |    1 +
 .../langpacks-el_security_api_results.json    |    1 +
 .../langpacks-en_GB_security_api_results.json |    1 +
 .../langpacks-en_security_api_results.json    |    1 +
 .../langpacks-es_security_api_results.json    |    1 +
 .../langpacks-et_security_api_results.json    |    1 +
 .../langpacks-eu_security_api_results.json    |    1 +
 .../langpacks-fa_security_api_results.json    |    1 +
 .../langpacks-fi_security_api_results.json    |    1 +
 .../langpacks-fr_security_api_results.json    |    1 +
 .../langpacks-ga_security_api_results.json    |    1 +
 .../langpacks-gl_security_api_results.json    |    1 +
 .../langpacks-gu_security_api_results.json    |    1 +
 .../langpacks-he_security_api_results.json    |    1 +
 .../langpacks-hi_security_api_results.json    |    1 +
 .../langpacks-hr_security_api_results.json    |    1 +
 .../langpacks-hu_security_api_results.json    |    1 +
 .../langpacks-ia_security_api_results.json    |    1 +
 .../langpacks-id_security_api_results.json    |    1 +
 .../langpacks-is_security_api_results.json    |    1 +
 .../langpacks-it_security_api_results.json    |    1 +
 .../langpacks-ja_security_api_results.json    |    1 +
 .../langpacks-kk_security_api_results.json    |    1 +
 .../langpacks-kn_security_api_results.json    |    1 +
 .../langpacks-ko_security_api_results.json    |    1 +
 .../langpacks-lt_security_api_results.json    |    1 +
 .../langpacks-lv_security_api_results.json    |    1 +
 .../langpacks-mai_security_api_results.json   |    1 +
 .../langpacks-mk_security_api_results.json    |    1 +
 .../langpacks-ml_security_api_results.json    |    1 +
 .../langpacks-mr_security_api_results.json    |    1 +
 .../langpacks-ms_security_api_results.json    |    1 +
 .../langpacks-nb_security_api_results.json    |    1 +
 .../langpacks-ne_security_api_results.json    |    1 +
 .../langpacks-nl_security_api_results.json    |    1 +
 .../langpacks-nn_security_api_results.json    |    1 +
 .../langpacks-nr_security_api_results.json    |    1 +
 .../langpacks-nso_security_api_results.json   |    1 +
 .../langpacks-or_security_api_results.json    |    1 +
 .../langpacks-pa_security_api_results.json    |    1 +
 .../langpacks-pl_security_api_results.json    |    1 +
 .../langpacks-pt_BR_security_api_results.json |    1 +
 .../langpacks-pt_security_api_results.json    |    1 +
 .../langpacks-ro_security_api_results.json    |    1 +
 .../langpacks-ru_security_api_results.json    |    1 +
 .../langpacks-si_security_api_results.json    |    1 +
 .../langpacks-sk_security_api_results.json    |    1 +
 .../langpacks-sl_security_api_results.json    |    1 +
 .../langpacks-sq_security_api_results.json    |    1 +
 .../langpacks-sr_security_api_results.json    |    1 +
 .../langpacks-ss_security_api_results.json    |    1 +
 .../langpacks-sv_security_api_results.json    |    1 +
 .../langpacks-ta_security_api_results.json    |    1 +
 .../langpacks-te_security_api_results.json    |    1 +
 .../langpacks-th_security_api_results.json    |    1 +
 .../langpacks-tn_security_api_results.json    |    1 +
 .../langpacks-tr_security_api_results.json    |    1 +
 .../langpacks-ts_security_api_results.json    |    1 +
 .../langpacks-uk_security_api_results.json    |    1 +
 .../langpacks-ur_security_api_results.json    |    1 +
 .../langpacks-ve_security_api_results.json    |    1 +
 .../langpacks-vi_security_api_results.json    |    1 +
 .../langpacks-xh_security_api_results.json    |    1 +
 .../langpacks-zh_CN_security_api_results.json |    1 +
 .../langpacks-zh_TW_security_api_results.json |    1 +
 .../langpacks-zu_security_api_results.json    |    1 +
 .../langtable-data_security_api_results.json  |    1 +
 .../langtable_security_api_results.json       |    1 +
 .../lapack-devel_security_api_results.json    |    1 +
 .../lapack-static_security_api_results.json   |    1 +
 .../lapack64_security_api_results.json        |    1 +
 .../lapack_security_api_results.json          |    1 +
 .../lasso_security_api_results.json           |    1 +
 .../latex2html_security_api_results.json      |    1 +
 .../lato-fonts_security_api_results.json      |    1 +
 .../lcms2-devel_security_api_results.json     |    1 +
 .../lcms2_security_api_results.json           |    1 +
 .../ldapjdk-javadoc_security_api_results.json |    1 +
 .../ldapjdk_security_api_results.json         |    1 +
 .../ldb-tools_security_api_results.json       |    1 +
 .../ldns-devel_security_api_results.json      |    1 +
 .../ldns_security_api_results.json            |    1 +
 .../ledmon_security_api_results.json          |    1 +
 .../lemon_security_api_results.json           |    1 +
 .../lensfun-devel_security_api_results.json   |    1 +
 .../lensfun_security_api_results.json         |    1 +
 .../leptonica-devel_security_api_results.json |    1 +
 .../leptonica_security_api_results.json       |    1 +
 .../less_security_api_results.json            |    1 +
 .../lftp-scripts_security_api_results.json    |    1 +
 .../lftp_security_api_results.json            |    1 +
 .../libEMF-devel_security_api_results.json    |    1 +
 .../libEMF_security_api_results.json          |    1 +
 .../libGLEW_security_api_results.json         |    1 +
 .../libICE-devel_security_api_results.json    |    1 +
 .../libICE_security_api_results.json          |    1 +
 .../libIDL-devel_security_api_results.json    |    1 +
 .../libIDL_security_api_results.json          |    1 +
 .../libSM-devel_security_api_results.json     |    1 +
 .../libSM_security_api_results.json           |    1 +
 .../libX11-common_security_api_results.json   |    1 +
 .../libX11-devel_security_api_results.json    |    1 +
 .../libX11-xcb_security_api_results.json      |    1 +
 .../libX11_security_api_results.json          |    1 +
 ...libXNVCtrl-devel_security_api_results.json |    1 +
 .../libXNVCtrl_security_api_results.json      |    1 +
 ...XScrnSaver-devel_security_api_results.json |    1 +
 .../libXScrnSaver_security_api_results.json   |    1 +
 .../libXau-devel_security_api_results.json    |    1 +
 .../libXau_security_api_results.json          |    1 +
 .../libXaw-devel_security_api_results.json    |    1 +
 .../libXaw_security_api_results.json          |    1 +
 ...Xcomposite-devel_security_api_results.json |    1 +
 .../libXcomposite_security_api_results.json   |    1 +
 ...libXcursor-devel_security_api_results.json |    1 +
 .../libXcursor_security_api_results.json      |    1 +
 ...libXdamage-devel_security_api_results.json |    1 +
 .../libXdamage_security_api_results.json      |    1 +
 .../libXdmcp-devel_security_api_results.json  |    1 +
 .../libXdmcp_security_api_results.json        |    1 +
 .../libXext-devel_security_api_results.json   |    1 +
 .../libXext_security_api_results.json         |    1 +
 .../libXfixes-devel_security_api_results.json |    1 +
 .../libXfixes_security_api_results.json       |    1 +
 .../libXfont2-devel_security_api_results.json |    1 +
 .../libXfont2_security_api_results.json       |    1 +
 .../libXft-devel_security_api_results.json    |    1 +
 .../libXft_security_api_results.json          |    1 +
 .../libXi-devel_security_api_results.json     |    1 +
 .../libXi_security_api_results.json           |    1 +
 ...ibXinerama-devel_security_api_results.json |    1 +
 .../libXinerama_security_api_results.json     |    1 +
 .../libXmu-devel_security_api_results.json    |    1 +
 .../libXmu_security_api_results.json          |    1 +
 .../libXp-devel_security_api_results.json     |    1 +
 .../libXp_security_api_results.json           |    1 +
 .../libXpm-devel_security_api_results.json    |    1 +
 .../libXpm_security_api_results.json          |    1 +
 .../libXrandr-devel_security_api_results.json |    1 +
 .../libXrandr_security_api_results.json       |    1 +
 ...libXrender-devel_security_api_results.json |    1 +
 .../libXrender_security_api_results.json      |    1 +
 .../libXres-devel_security_api_results.json   |    1 +
 .../libXres_security_api_results.json         |    1 +
 .../libXt-devel_security_api_results.json     |    1 +
 .../libXt_security_api_results.json           |    1 +
 .../libXtst-devel_security_api_results.json   |    1 +
 .../libXtst_security_api_results.json         |    1 +
 .../libXv-devel_security_api_results.json     |    1 +
 .../libXvMC-devel_security_api_results.json   |    1 +
 .../libXvMC_security_api_results.json         |    1 +
 .../libXv_security_api_results.json           |    1 +
 ...ibXxf86dga-devel_security_api_results.json |    1 +
 .../libXxf86dga_security_api_results.json     |    1 +
 ...bXxf86misc-devel_security_api_results.json |    1 +
 .../libXxf86misc_security_api_results.json    |    1 +
 ...libXxf86vm-devel_security_api_results.json |    1 +
 .../libXxf86vm_security_api_results.json      |    1 +
 .../liba52_security_api_results.json          |    1 +
 .../libabw_security_api_results.json          |    1 +
 .../libacl-devel_security_api_results.json    |    1 +
 .../libacl_security_api_results.json          |    1 +
 .../libaec-devel_security_api_results.json    |    1 +
 .../libaec_security_api_results.json          |    1 +
 .../libaio-devel_security_api_results.json    |    1 +
 .../libaio_security_api_results.json          |    1 +
 .../libao-devel_security_api_results.json     |    1 +
 .../libao_security_api_results.json           |    1 +
 ...cator-gtk3-devel_security_api_results.json |    1 +
 ...ppindicator-gtk3_security_api_results.json |    1 +
 ...tream-glib-devel_security_api_results.json |    1 +
 ...ibappstream-glib_security_api_results.json |    1 +
 ...libarchive-devel_security_api_results.json |    1 +
 .../libarchive_security_api_results.json      |    1 +
 .../libasan_security_api_results.json         |    1 +
 .../libassuan-devel_security_api_results.json |    1 +
 .../libassuan_security_api_results.json       |    1 +
 ...libasyncns-devel_security_api_results.json |    1 +
 .../libasyncns_security_api_results.json      |    1 +
 ...ibatasmart-devel_security_api_results.json |    1 +
 .../libatasmart_security_api_results.json     |    1 +
 ...libatomic-static_security_api_results.json |    1 +
 ...atomic_ops-devel_security_api_results.json |    1 +
 .../libatomic_ops_security_api_results.json   |    1 +
 .../libatomic_security_api_results.json       |    1 +
 .../libattr-devel_security_api_results.json   |    1 +
 .../libattr_security_api_results.json         |    1 +
 .../libavc1394_security_api_results.json      |    1 +
 .../libbabeltrace_security_api_results.json   |    1 +
 .../libbase_security_api_results.json         |    1 +
 ...sicobjects-devel_security_api_results.json |    1 +
 .../libbasicobjects_security_api_results.json |    1 +
 .../libblkid-devel_security_api_results.json  |    1 +
 .../libblkid_security_api_results.json        |    1 +
 ...bblockdev-crypto_security_api_results.json |    1 +
 .../libblockdev-dm_security_api_results.json  |    1 +
 .../libblockdev-fs_security_api_results.json  |    1 +
 .../libblockdev-kbd_security_api_results.json |    1 +
 ...libblockdev-loop_security_api_results.json |    1 +
 ...lockdev-lvm-dbus_security_api_results.json |    1 +
 .../libblockdev-lvm_security_api_results.json |    1 +
 ...bblockdev-mdraid_security_api_results.json |    1 +
 ...ibblockdev-mpath_security_api_results.json |    1 +
 ...bblockdev-nvdimm_security_api_results.json |    1 +
 ...libblockdev-part_security_api_results.json |    1 +
 ...kdev-plugins-all_security_api_results.json |    1 +
 ...libblockdev-s390_security_api_results.json |    1 +
 ...libblockdev-swap_security_api_results.json |    1 +
 ...ibblockdev-utils_security_api_results.json |    1 +
 .../libblockdev-vdo_security_api_results.json |    1 +
 .../libblockdev_security_api_results.json     |    1 +
 .../libbluray_security_api_results.json       |    1 +
 .../libbpf-devel_security_api_results.json    |    1 +
 .../libbpf-static_security_api_results.json   |    1 +
 .../libbpf_security_api_results.json          |    1 +
 .../libburn-devel_security_api_results.json   |    1 +
 .../libburn_security_api_results.json         |    1 +
 .../libbytesize_security_api_results.json     |    1 +
 .../libcacard-devel_security_api_results.json |    1 +
 .../libcacard_security_api_results.json       |    1 +
 ...ibcanberra-devel_security_api_results.json |    1 +
 ...libcanberra-gtk2_security_api_results.json |    1 +
 ...libcanberra-gtk3_security_api_results.json |    1 +
 .../libcanberra_security_api_results.json     |    1 +
 .../libcap-devel_security_api_results.json    |    1 +
 .../libcap-ng-devel_security_api_results.json |    1 +
 .../libcap-ng-utils_security_api_results.json |    1 +
 .../libcap-ng_security_api_results.json       |    1 +
 .../libcap_security_api_results.json          |    1 +
 .../libcdio-devel_security_api_results.json   |    1 +
 ...o-paranoia-devel_security_api_results.json |    1 +
 ...libcdio-paranoia_security_api_results.json |    1 +
 .../libcdio_security_api_results.json         |    1 +
 .../libcdr_security_api_results.json          |    1 +
 .../libcephfs-devel_security_api_results.json |    1 +
 .../libcephfs2_security_api_results.json      |    1 +
 .../libcgroup-pam_security_api_results.json   |    1 +
 .../libcgroup-tools_security_api_results.json |    1 +
 .../libcgroup_security_api_results.json       |    1 +
 ...bchamplain-devel_security_api_results.json |    1 +
 ...libchamplain-gtk_security_api_results.json |    1 +
 .../libchamplain_security_api_results.json    |    1 +
 .../libcmis_security_api_results.json         |    1 +
 .../libcmocka-devel_security_api_results.json |    1 +
 .../libcmocka_security_api_results.json       |    1 +
 .../libcmpiCppImpl0_security_api_results.json |    1 +
 ...collection-devel_security_api_results.json |    1 +
 .../libcollection_security_api_results.json   |    1 +
 ...libcom_err-devel_security_api_results.json |    1 +
 .../libcom_err_security_api_results.json      |    1 +
 .../libcomps-devel_security_api_results.json  |    1 +
 .../libcomps_security_api_results.json        |    1 +
 .../libconfig-devel_security_api_results.json |    1 +
 .../libconfig_security_api_results.json       |    1 +
 .../libcroco-devel_security_api_results.json  |    1 +
 .../libcroco_security_api_results.json        |    1 +
 .../libcurl-devel_security_api_results.json   |    1 +
 .../libcurl-minimal_security_api_results.json |    1 +
 .../libcurl_security_api_results.json         |    1 +
 .../libcxl-devel_security_api_results.json    |    1 +
 .../libcxl_security_api_results.json          |    1 +
 .../libdaemon-devel_security_api_results.json |    1 +
 .../libdaemon_security_api_results.json       |    1 +
 .../libdap-devel_security_api_results.json    |    1 +
 .../libdap_security_api_results.json          |    1 +
 .../libdatrie-devel_security_api_results.json |    1 +
 .../libdatrie_security_api_results.json       |    1 +
 .../libdazzle_security_api_results.json       |    1 +
 .../libdb-cxx-devel_security_api_results.json |    1 +
 .../libdb-cxx_security_api_results.json       |    1 +
 .../libdb-devel-doc_security_api_results.json |    1 +
 .../libdb-devel_security_api_results.json     |    1 +
 .../libdb-sql-devel_security_api_results.json |    1 +
 .../libdb-sql_security_api_results.json       |    1 +
 .../libdb-utils_security_api_results.json     |    1 +
 .../libdb_security_api_results.json           |    1 +
 ...ibdbusmenu-devel_security_api_results.json |    1 +
 .../libdbusmenu-doc_security_api_results.json |    1 +
 ...smenu-gtk3-devel_security_api_results.json |    1 +
 ...libdbusmenu-gtk3_security_api_results.json |    1 +
 .../libdbusmenu_security_api_results.json     |    1 +
 .../libdc1394_security_api_results.json       |    1 +
 .../libdhash_security_api_results.json        |    1 +
 .../libdmapsharing_security_api_results.json  |    1 +
 .../libdmmp_security_api_results.json         |    1 +
 .../libdmx_security_api_results.json          |    1 +
 .../libdnet-devel_security_api_results.json   |    1 +
 .../libdnet_security_api_results.json         |    1 +
 .../libdnf_security_api_results.json          |    1 +
 .../libdrm-devel_security_api_results.json    |    1 +
 .../libdrm_security_api_results.json          |    1 +
 .../libdv-devel_security_api_results.json     |    1 +
 .../libdv_security_api_results.json           |    1 +
 .../libdvdnav_security_api_results.json       |    1 +
 ...libdvdread-devel_security_api_results.json |    1 +
 .../libdvdread_security_api_results.json      |    1 +
 .../libdwarf-devel_security_api_results.json  |    1 +
 .../libdwarf-static_security_api_results.json |    1 +
 .../libdwarf-tools_security_api_results.json  |    1 +
 .../libdwarf_security_api_results.json        |    1 +
 .../libdwarves1_security_api_results.json     |    1 +
 ...ibeasyfc-gobject_security_api_results.json |    1 +
 .../libeasyfc_security_api_results.json       |    1 +
 .../libecap-devel_security_api_results.json   |    1 +
 .../libecap_security_api_results.json         |    1 +
 .../libedit-devel_security_api_results.json   |    1 +
 .../libedit_security_api_results.json         |    1 +
 .../libeot_security_api_results.json          |    1 +
 .../libepoxy-devel_security_api_results.json  |    1 +
 .../libepoxy_security_api_results.json        |    1 +
 .../libepubgen_security_api_results.json      |    1 +
 ...ion-fonts-common_security_api_results.json |    1 +
 ...liberation-fonts_security_api_results.json |    1 +
 ...ation-mono-fonts_security_api_results.json |    1 +
 ...ion-narrow-fonts_security_api_results.json |    1 +
 ...ation-sans-fonts_security_api_results.json |    1 +
 ...tion-serif-fonts_security_api_results.json |    1 +
 ...-sd8686-firmware_security_api_results.json |    1 +
 ...-sd8787-firmware_security_api_results.json |    1 +
 ...usb8388-firmware_security_api_results.json |    1 +
 ...88-olpc-firmware_security_api_results.json |    1 +
 .../libestr_security_api_results.json         |    1 +
 ...libetonyek-devel_security_api_results.json |    1 +
 .../libetonyek_security_api_results.json      |    1 +
 .../libev-devel_security_api_results.json     |    1 +
 ...v-libevent-devel_security_api_results.json |    1 +
 .../libev-source_security_api_results.json    |    1 +
 .../libev_security_api_results.json           |    1 +
 .../libevdev-devel_security_api_results.json  |    1 +
 .../libevdev_security_api_results.json        |    1 +
 .../libevent-devel_security_api_results.json  |    1 +
 .../libevent-doc_security_api_results.json    |    1 +
 .../libevent_security_api_results.json        |    1 +
 .../libexif-devel_security_api_results.json   |    1 +
 .../libexif_security_api_results.json         |    1 +
 .../libexttextcat_security_api_results.json   |    1 +
 .../libfabric-devel_security_api_results.json |    1 +
 .../libfabric_security_api_results.json       |    1 +
 .../libfastjson_security_api_results.json     |    1 +
 .../libfdisk-devel_security_api_results.json  |    1 +
 .../libfdisk_security_api_results.json        |    1 +
 .../libfdt-devel_security_api_results.json    |    1 +
 .../libfdt_security_api_results.json          |    1 +
 .../libffi-devel_security_api_results.json    |    1 +
 .../libffi_security_api_results.json          |    1 +
 ...libfontenc-devel_security_api_results.json |    1 +
 .../libfontenc_security_api_results.json      |    1 +
 .../libfonts_security_api_results.json        |    1 +
 .../libformula_security_api_results.json      |    1 +
 .../libfprint_security_api_results.json       |    1 +
 .../libfreehand_security_api_results.json     |    1 +
 .../libgcab1_security_api_results.json        |    1 +
 .../libgcc_security_api_results.json          |    1 +
 .../libgcrypt-devel_security_api_results.json |    1 +
 .../libgcrypt_security_api_results.json       |    1 +
 .../libgdata-devel_security_api_results.json  |    1 +
 .../libgdata_security_api_results.json        |    1 +
 .../libgdither_security_api_results.json      |    1 +
 .../libgee-devel_security_api_results.json    |    1 +
 .../libgee_security_api_results.json          |    1 +
 .../libgexiv2-devel_security_api_results.json |    1 +
 .../libgexiv2_security_api_results.json       |    1 +
 .../libgfortran_security_api_results.json     |    1 +
 .../libgit2-devel_security_api_results.json   |    1 +
 ...bgit2-glib-devel_security_api_results.json |    1 +
 .../libgit2-glib_security_api_results.json    |    1 +
 .../libgit2_security_api_results.json         |    1 +
 ...glvnd-core-devel_security_api_results.json |    1 +
 .../libglvnd-devel_security_api_results.json  |    1 +
 .../libglvnd-egl_security_api_results.json    |    1 +
 .../libglvnd-gles_security_api_results.json   |    1 +
 .../libglvnd-glx_security_api_results.json    |    1 +
 .../libglvnd-opengl_security_api_results.json |    1 +
 .../libglvnd_security_api_results.json        |    1 +
 ...ibgnomekbd-devel_security_api_results.json |    1 +
 .../libgnomekbd_security_api_results.json     |    1 +
 ...mp-offload-nvptx_security_api_results.json |    1 +
 .../libgomp_security_api_results.json         |    1 +
 .../libgovirt_security_api_results.json       |    1 +
 ...bgpg-error-devel_security_api_results.json |    1 +
 .../libgpg-error_security_api_results.json    |    1 +
 ...libgphoto2-devel_security_api_results.json |    1 +
 .../libgphoto2_security_api_results.json      |    1 +
 .../libgpod-devel_security_api_results.json   |    1 +
 .../libgpod-doc_security_api_results.json     |    1 +
 .../libgpod_security_api_results.json         |    1 +
 .../libgs-devel_security_api_results.json     |    1 +
 .../libgs_security_api_results.json           |    1 +
 .../libgsf-devel_security_api_results.json    |    1 +
 .../libgsf_security_api_results.json          |    1 +
 .../libgtop2-devel_security_api_results.json  |    1 +
 .../libgtop2_security_api_results.json        |    1 +
 .../libgudev-devel_security_api_results.json  |    1 +
 .../libgudev_security_api_results.json        |    1 +
 ...-bash-completion_security_api_results.json |    1 +
 ...tfs-benchmarking_security_api_results.json |    1 +
 ...libguestfs-devel_security_api_results.json |    1 +
 .../libguestfs-gfs2_security_api_results.json |    1 +
 ...fs-gobject-devel_security_api_results.json |    1 +
 ...bguestfs-gobject_security_api_results.json |    1 +
 ...fs-inspect-icons_security_api_results.json |    1 +
 ...estfs-java-devel_security_api_results.json |    1 +
 .../libguestfs-java_security_api_results.json |    1 +
 ...bguestfs-javadoc_security_api_results.json |    1 +
 ...tfs-man-pages-ja_security_api_results.json |    1 +
 ...tfs-man-pages-uk_security_api_results.json |    1 +
 ...ibguestfs-rescue_security_api_results.json |    1 +
 ...libguestfs-rsync_security_api_results.json |    1 +
 ...bguestfs-tools-c_security_api_results.json |    1 +
 ...libguestfs-tools_security_api_results.json |    1 +
 ...estfs-winsupport_security_api_results.json |    1 +
 .../libguestfs-xfs_security_api_results.json  |    1 +
 .../libguestfs_security_api_results.json      |    1 +
 .../libgusb-devel_security_api_results.json   |    1 +
 .../libgusb_security_api_results.json         |    1 +
 ...ibgweather-devel_security_api_results.json |    1 +
 .../libgweather_security_api_results.json     |    1 +
 .../libgxps-devel_security_api_results.json   |    1 +
 .../libgxps_security_api_results.json         |    1 +
 .../libhangul_security_api_results.json       |    1 +
 .../libhbaapi-devel_security_api_results.json |    1 +
 .../libhbaapi_security_api_results.json       |    1 +
 ...ibhbalinux-devel_security_api_results.json |    1 +
 .../libhbalinux_security_api_results.json     |    1 +
 ...bhugetlbfs-devel_security_api_results.json |    1 +
 ...bhugetlbfs-utils_security_api_results.json |    1 +
 .../libhugetlbfs_security_api_results.json    |    1 +
 .../libi2c_security_api_results.json          |    1 +
 .../libibumad_security_api_results.json       |    1 +
 ...libibverbs-utils_security_api_results.json |    1 +
 .../libibverbs_security_api_results.json      |    1 +
 .../libica-devel_security_api_results.json    |    1 +
 .../libica_security_api_results.json          |    1 +
 .../libical-devel_security_api_results.json   |    1 +
 .../libical_security_api_results.json         |    1 +
 .../libicu-devel_security_api_results.json    |    1 +
 .../libicu-doc_security_api_results.json      |    1 +
 .../libicu_security_api_results.json          |    1 +
 .../libidn-devel_security_api_results.json    |    1 +
 .../libidn2-devel_security_api_results.json   |    1 +
 .../libidn2_security_api_results.json         |    1 +
 .../libidn_security_api_results.json          |    1 +
 ...ibiec61883-devel_security_api_results.json |    1 +
 .../libiec61883_security_api_results.json     |    1 +
 ...ibieee1284-devel_security_api_results.json |    1 +
 .../libieee1284_security_api_results.json     |    1 +
 .../libijs_security_api_results.json          |    1 +
 ...biledevice-devel_security_api_results.json |    1 +
 ...libimobiledevice_security_api_results.json |    1 +
 ...cator-gtk3-devel_security_api_results.json |    1 +
 ...ibindicator-gtk3_security_api_results.json |    1 +
 ...ini_config-devel_security_api_results.json |    1 +
 .../libini_config_security_api_results.json   |    1 +
 .../libinput-devel_security_api_results.json  |    1 +
 .../libinput-utils_security_api_results.json  |    1 +
 .../libinput_security_api_results.json        |    1 +
 .../libipa_hbac_security_api_results.json     |    1 +
 .../libipt_security_api_results.json          |    1 +
 .../libiptcdata_security_api_results.json     |    1 +
 .../libiscsi-devel_security_api_results.json  |    1 +
 .../libiscsi-utils_security_api_results.json  |    1 +
 .../libiscsi_security_api_results.json        |    1 +
 ...libisoburn-devel_security_api_results.json |    1 +
 .../libisoburn_security_api_results.json      |    1 +
 .../libisofs-devel_security_api_results.json  |    1 +
 .../libisofs_security_api_results.json        |    1 +
 .../libitm-devel_security_api_results.json    |    1 +
 .../libitm_security_api_results.json          |    1 +
 .../libjose-devel_security_api_results.json   |    1 +
 .../libjose_security_api_results.json         |    1 +
 ...jpeg-turbo-devel_security_api_results.json |    1 +
 ...jpeg-turbo-utils_security_api_results.json |    1 +
 .../libjpeg-turbo_security_api_results.json   |    1 +
 .../libkadm5_security_api_results.json        |    1 +
 ...ibkcapi-hmaccalc_security_api_results.json |    1 +
 .../libkcapi_security_api_results.json        |    1 +
 .../libkeepalive_security_api_results.json    |    1 +
 .../libkkc-common_security_api_results.json   |    1 +
 .../libkkc-data_security_api_results.json     |    1 +
 .../libkkc_security_api_results.json          |    1 +
 ...ess-bzip2-plugin_security_api_results.json |    1 +
 ...press-lz4-plugin_security_api_results.json |    1 +
 ...ress-lzma-plugin_security_api_results.json |    1 +
 ...ress-lzo2-plugin_security_api_results.json |    1 +
 ...ress-plugins-all_security_api_results.json |    1 +
 ...ress-zlib-plugin_security_api_results.json |    1 +
 ...rypto-nss-plugin_security_api_results.json |    1 +
 ...o-openssl-plugin_security_api_results.json |    1 +
 ...ypto-plugins-all_security_api_results.json |    1 +
 .../libknet1-devel_security_api_results.json  |    1 +
 ...net1-plugins-all_security_api_results.json |    1 +
 .../libknet1_security_api_results.json        |    1 +
 .../libksba-devel_security_api_results.json   |    1 +
 .../libksba_security_api_results.json         |    1 +
 .../liblangtag-data_security_api_results.json |    1 +
 ...liblangtag-devel_security_api_results.json |    1 +
 .../liblangtag-doc_security_api_results.json  |    1 +
 ...blangtag-gobject_security_api_results.json |    1 +
 .../liblangtag_security_api_results.json      |    1 +
 .../liblayout_security_api_results.json       |    1 +
 .../libldb-devel_security_api_results.json    |    1 +
 .../libldb_security_api_results.json          |    1 +
 .../libloader_security_api_results.json       |    1 +
 ...iblockfile-devel_security_api_results.json |    1 +
 .../liblockfile_security_api_results.json     |    1 +
 .../liblognorm-doc_security_api_results.json  |    1 +
 .../liblognorm_security_api_results.json      |    1 +
 .../liblouis_security_api_results.json        |    1 +
 .../liblsan_security_api_results.json         |    1 +
 ...ibluksmeta-devel_security_api_results.json |    1 +
 .../libluksmeta_security_api_results.json     |    1 +
 .../libmad-devel_security_api_results.json    |    1 +
 .../libmad_security_api_results.json          |    1 +
 .../libmalaga_security_api_results.json       |    1 +
 .../libmatchbox_security_api_results.json     |    1 +
 ...bmaxminddb-devel_security_api_results.json |    1 +
 .../libmaxminddb_security_api_results.json    |    1 +
 .../libmbim-utils_security_api_results.json   |    1 +
 .../libmbim_security_api_results.json         |    1 +
 .../libmcpp_security_api_results.json         |    1 +
 .../libmediaart_security_api_results.json     |    1 +
 ...bmemcached-devel_security_api_results.json |    1 +
 ...ibmemcached-libs_security_api_results.json |    1 +
 .../libmemcached_security_api_results.json    |    1 +
 .../libmetalink_security_api_results.json     |    1 +
 ...microhttpd-devel_security_api_results.json |    1 +
 ...ibmicrohttpd-doc_security_api_results.json |    1 +
 .../libmicrohttpd_security_api_results.json   |    1 +
 .../libmng-devel_security_api_results.json    |    1 +
 .../libmng_security_api_results.json          |    1 +
 .../libmnl-devel_security_api_results.json    |    1 +
 .../libmnl_security_api_results.json          |    1 +
 .../libmodman_security_api_results.json       |    1 +
 ...ibmodulemd-devel_security_api_results.json |    1 +
 .../libmodulemd1_security_api_results.json    |    1 +
 .../libmodulemd_security_api_results.json     |    1 +
 .../libmount-devel_security_api_results.json  |    1 +
 .../libmount_security_api_results.json        |    1 +
 .../libmpc-devel_security_api_results.json    |    1 +
 .../libmpc_security_api_results.json          |    1 +
 .../libmpcdec-devel_security_api_results.json |    1 +
 .../libmpcdec_security_api_results.json       |    1 +
 .../libmspack-devel_security_api_results.json |    1 +
 .../libmspack_security_api_results.json       |    1 +
 .../libmspub_security_api_results.json        |    1 +
 .../libmtp-devel_security_api_results.json    |    1 +
 .../libmtp_security_api_results.json          |    1 +
 ...sicbrainz5-devel_security_api_results.json |    1 +
 .../libmusicbrainz5_security_api_results.json |    1 +
 .../libmwaw_security_api_results.json         |    1 +
 .../libndp_security_api_results.json          |    1 +
 .../libnet-devel_security_api_results.json    |    1 +
 .../libnet_security_api_results.json          |    1 +
 ..._conntrack-devel_security_api_results.json |    1 +
 ...filter_conntrack_security_api_results.json |    1 +
 ...tfilter_cthelper_security_api_results.json |    1 +
 ...filter_cttimeout_security_api_results.json |    1 +
 ...lter_queue-devel_security_api_results.json |    1 +
 ...bnetfilter_queue_security_api_results.json |    1 +
 ...bnfnetlink-devel_security_api_results.json |    1 +
 .../libnfnetlink_security_api_results.json    |    1 +
 ...ibnfsidmap-devel_security_api_results.json |    1 +
 .../libnfsidmap_security_api_results.json     |    1 +
 .../libnftnl-devel_security_api_results.json  |    1 +
 .../libnftnl_security_api_results.json        |    1 +
 ...libnghttp2-devel_security_api_results.json |    1 +
 .../libnghttp2_security_api_results.json      |    1 +
 .../libnice-devel_security_api_results.json   |    1 +
 ...bnice-gstreamer1_security_api_results.json |    1 +
 .../libnice_security_api_results.json         |    1 +
 .../libnl3-cli_security_api_results.json      |    1 +
 .../libnl3-devel_security_api_results.json    |    1 +
 .../libnl3-doc_security_api_results.json      |    1 +
 .../libnl3_security_api_results.json          |    1 +
 .../libnma-devel_security_api_results.json    |    1 +
 .../libnma_security_api_results.json          |    1 +
 .../libnotify-devel_security_api_results.json |    1 +
 .../libnotify_security_api_results.json       |    1 +
 .../libnozzle1_security_api_results.json      |    1 +
 .../libnsl2-devel_security_api_results.json   |    1 +
 .../libnsl2_security_api_results.json         |    1 +
 .../libnsl_security_api_results.json          |    1 +
 .../liboauth-devel_security_api_results.json  |    1 +
 .../liboauth_security_api_results.json        |    1 +
 .../libocxl-devel_security_api_results.json   |    1 +
 .../libocxl-docs_security_api_results.json    |    1 +
 .../libocxl_security_api_results.json         |    1 +
 .../libodfgen-devel_security_api_results.json |    1 +
 .../libodfgen_security_api_results.json       |    1 +
 ...ibogg-devel-docs_security_api_results.json |    1 +
 .../libogg-devel_security_api_results.json    |    1 +
 .../libogg_security_api_results.json          |    1 +
 .../liboggz_security_api_results.json         |    1 +
 .../libomp-devel_security_api_results.json    |    1 +
 .../libomp-test_security_api_results.json     |    1 +
 .../libomp_security_api_results.json          |    1 +
 ...libopenraw-devel_security_api_results.json |    1 +
 ...nraw-gnome-devel_security_api_results.json |    1 +
 ...libopenraw-gnome_security_api_results.json |    1 +
 .../libopenraw_security_api_results.json      |    1 +
 .../liborcus_security_api_results.json        |    1 +
 .../libosinfo_security_api_results.json       |    1 +
 .../libotf_security_api_results.json          |    1 +
 .../libpagemaker_security_api_results.json    |    1 +
 .../libpaper-devel_security_api_results.json  |    1 +
 .../libpaper_security_api_results.json        |    1 +
 ...path_utils-devel_security_api_results.json |    1 +
 .../libpath_utils_security_api_results.json   |    1 +
 .../libpcap-devel_security_api_results.json   |    1 +
 .../libpcap_security_api_results.json         |    1 +
 ...bpciaccess-devel_security_api_results.json |    1 +
 .../libpciaccess_security_api_results.json    |    1 +
 .../libpeas-devel_security_api_results.json   |    1 +
 .../libpeas-gtk_security_api_results.json     |    1 +
 ...s-loader-python3_security_api_results.json |    1 +
 .../libpeas_security_api_results.json         |    1 +
 .../libpfm-devel_security_api_results.json    |    1 +
 .../libpfm-static_security_api_results.json   |    1 +
 .../libpfm_security_api_results.json          |    1 +
 .../libpinyin-data_security_api_results.json  |    1 +
 .../libpinyin_security_api_results.json       |    1 +
 .../libpipeline_security_api_results.json     |    1 +
 .../libpkgconf_security_api_results.json      |    1 +
 .../libplist-devel_security_api_results.json  |    1 +
 .../libplist_security_api_results.json        |    1 +
 .../libpmem-debug_security_api_results.json   |    1 +
 .../libpmem-devel_security_api_results.json   |    1 +
 .../libpmem_security_api_results.json         |    1 +
 ...libpmemblk-debug_security_api_results.json |    1 +
 ...libpmemblk-devel_security_api_results.json |    1 +
 .../libpmemblk_security_api_results.json      |    1 +
 ...libpmemlog-debug_security_api_results.json |    1 +
 ...libpmemlog-devel_security_api_results.json |    1 +
 .../libpmemlog_security_api_results.json      |    1 +
 ...bpmemobj++-devel_security_api_results.json |    1 +
 ...libpmemobj++-doc_security_api_results.json |    1 +
 ...libpmemobj-debug_security_api_results.json |    1 +
 ...libpmemobj-devel_security_api_results.json |    1 +
 .../libpmemobj_security_api_results.json      |    1 +
 ...ibpmempool-debug_security_api_results.json |    1 +
 ...ibpmempool-devel_security_api_results.json |    1 +
 .../libpmempool_security_api_results.json     |    1 +
 .../libpng-devel_security_api_results.json    |    1 +
 .../libpng12_security_api_results.json        |    1 +
 .../libpng15_security_api_results.json        |    1 +
 .../libpng_security_api_results.json          |    1 +
 .../libpq-devel_security_api_results.json     |    1 +
 .../libpq_security_api_results.json           |    1 +
 .../libproxy-bin_security_api_results.json    |    1 +
 .../libproxy-devel_security_api_results.json  |    1 +
 .../libproxy-gnome_security_api_results.json  |    1 +
 ...y-networkmanager_security_api_results.json |    1 +
 ...proxy-webkitgtk4_security_api_results.json |    1 +
 .../libproxy_security_api_results.json        |    1 +
 .../libpsl_security_api_results.json          |    1 +
 .../libpsm2-compat_security_api_results.json  |    1 +
 .../libpsm2-devel_security_api_results.json   |    1 +
 .../libpsm2_security_api_results.json         |    1 +
 .../libpst-libs_security_api_results.json     |    1 +
 .../libpurple-devel_security_api_results.json |    1 +
 .../libpurple_security_api_results.json       |    1 +
 ...bpwquality-devel_security_api_results.json |    1 +
 .../libpwquality_security_api_results.json    |    1 +
 .../libqb-devel_security_api_results.json     |    1 +
 .../libqb_security_api_results.json           |    1 +
 .../libqhull_p_security_api_results.json      |    1 +
 .../libqhull_r_security_api_results.json      |    1 +
 .../libqhull_security_api_results.json        |    1 +
 .../libqmi-utils_security_api_results.json    |    1 +
 .../libqmi_security_api_results.json          |    1 +
 ...ibquadmath-devel_security_api_results.json |    1 +
 .../libquadmath_security_api_results.json     |    1 +
 .../libquvi-devel_security_api_results.json   |    1 +
 .../libquvi-scripts_security_api_results.json |    1 +
 .../libquvi_security_api_results.json         |    1 +
 .../libqxp_security_api_results.json          |    1 +
 ...ibrabbitmq-devel_security_api_results.json |    1 +
 .../librabbitmq_security_api_results.json     |    1 +
 .../librados-devel_security_api_results.json  |    1 +
 .../librados2_security_api_results.json       |    1 +
 ...dosstriper-devel_security_api_results.json |    1 +
 ...libradosstriper1_security_api_results.json |    1 +
 ...libraw1394-devel_security_api_results.json |    1 +
 .../libraw1394_security_api_results.json      |    1 +
 .../librbd-devel_security_api_results.json    |    1 +
 .../librbd1_security_api_results.json         |    1 +
 ...librdkafka-devel_security_api_results.json |    1 +
 .../librdkafka_security_api_results.json      |    1 +
 .../librdmacm-utils_security_api_results.json |    1 +
 .../librdmacm_security_api_results.json       |    1 +
 ...bref_array-devel_security_api_results.json |    1 +
 .../libref_array_security_api_results.json    |    1 +
 .../librelp_security_api_results.json         |    1 +
 ...libreoffice-base_security_api_results.json |    1 +
 ...libreoffice-calc_security_api_results.json |    1 +
 ...libreoffice-core_security_api_results.json |    1 +
 ...libreoffice-data_security_api_results.json |    1 +
 ...libreoffice-draw_security_api_results.json |    1 +
 ...ffice-emailmerge_security_api_results.json |    1 +
 ...reoffice-filters_security_api_results.json |    1 +
 ...db-debug-support_security_api_results.json |    1 +
 ...ce-graphicfilter_security_api_results.json |    1 +
 ...libreoffice-gtk2_security_api_results.json |    1 +
 ...libreoffice-gtk3_security_api_results.json |    1 +
 ...reoffice-help-ar_security_api_results.json |    1 +
 ...reoffice-help-bg_security_api_results.json |    1 +
 ...reoffice-help-bn_security_api_results.json |    1 +
 ...reoffice-help-ca_security_api_results.json |    1 +
 ...reoffice-help-cs_security_api_results.json |    1 +
 ...reoffice-help-da_security_api_results.json |    1 +
 ...reoffice-help-de_security_api_results.json |    1 +
 ...reoffice-help-dz_security_api_results.json |    1 +
 ...reoffice-help-el_security_api_results.json |    1 +
 ...reoffice-help-en_security_api_results.json |    1 +
 ...reoffice-help-es_security_api_results.json |    1 +
 ...reoffice-help-et_security_api_results.json |    1 +
 ...reoffice-help-eu_security_api_results.json |    1 +
 ...reoffice-help-fi_security_api_results.json |    1 +
 ...reoffice-help-fr_security_api_results.json |    1 +
 ...reoffice-help-gl_security_api_results.json |    1 +
 ...reoffice-help-gu_security_api_results.json |    1 +
 ...reoffice-help-he_security_api_results.json |    1 +
 ...reoffice-help-hi_security_api_results.json |    1 +
 ...reoffice-help-hr_security_api_results.json |    1 +
 ...reoffice-help-hu_security_api_results.json |    1 +
 ...reoffice-help-id_security_api_results.json |    1 +
 ...reoffice-help-it_security_api_results.json |    1 +
 ...reoffice-help-ja_security_api_results.json |    1 +
 ...reoffice-help-ko_security_api_results.json |    1 +
 ...reoffice-help-lt_security_api_results.json |    1 +
 ...reoffice-help-lv_security_api_results.json |    1 +
 ...reoffice-help-nb_security_api_results.json |    1 +
 ...reoffice-help-nl_security_api_results.json |    1 +
 ...reoffice-help-nn_security_api_results.json |    1 +
 ...reoffice-help-pl_security_api_results.json |    1 +
 ...ffice-help-pt-BR_security_api_results.json |    1 +
 ...ffice-help-pt-PT_security_api_results.json |    1 +
 ...reoffice-help-ro_security_api_results.json |    1 +
 ...reoffice-help-ru_security_api_results.json |    1 +
 ...reoffice-help-si_security_api_results.json |    1 +
 ...reoffice-help-sk_security_api_results.json |    1 +
 ...reoffice-help-sl_security_api_results.json |    1 +
 ...reoffice-help-sv_security_api_results.json |    1 +
 ...reoffice-help-ta_security_api_results.json |    1 +
 ...reoffice-help-tr_security_api_results.json |    1 +
 ...reoffice-help-uk_security_api_results.json |    1 +
 ...ice-help-zh-Hans_security_api_results.json |    1 +
 ...ice-help-zh-Hant_security_api_results.json |    1 +
 ...reoffice-impress_security_api_results.json |    1 +
 ...fice-langpack-af_security_api_results.json |    1 +
 ...fice-langpack-ar_security_api_results.json |    1 +
 ...fice-langpack-as_security_api_results.json |    1 +
 ...fice-langpack-bg_security_api_results.json |    1 +
 ...fice-langpack-bn_security_api_results.json |    1 +
 ...fice-langpack-br_security_api_results.json |    1 +
 ...fice-langpack-ca_security_api_results.json |    1 +
 ...fice-langpack-cs_security_api_results.json |    1 +
 ...fice-langpack-cy_security_api_results.json |    1 +
 ...fice-langpack-da_security_api_results.json |    1 +
 ...fice-langpack-de_security_api_results.json |    1 +
 ...fice-langpack-dz_security_api_results.json |    1 +
 ...fice-langpack-el_security_api_results.json |    1 +
 ...fice-langpack-en_security_api_results.json |    1 +
 ...fice-langpack-es_security_api_results.json |    1 +
 ...fice-langpack-et_security_api_results.json |    1 +
 ...fice-langpack-eu_security_api_results.json |    1 +
 ...fice-langpack-fa_security_api_results.json |    1 +
 ...fice-langpack-fi_security_api_results.json |    1 +
 ...fice-langpack-fr_security_api_results.json |    1 +
 ...fice-langpack-ga_security_api_results.json |    1 +
 ...fice-langpack-gl_security_api_results.json |    1 +
 ...fice-langpack-gu_security_api_results.json |    1 +
 ...fice-langpack-he_security_api_results.json |    1 +
 ...fice-langpack-hi_security_api_results.json |    1 +
 ...fice-langpack-hr_security_api_results.json |    1 +
 ...fice-langpack-hu_security_api_results.json |    1 +
 ...fice-langpack-id_security_api_results.json |    1 +
 ...fice-langpack-it_security_api_results.json |    1 +
 ...fice-langpack-ja_security_api_results.json |    1 +
 ...fice-langpack-kk_security_api_results.json |    1 +
 ...fice-langpack-kn_security_api_results.json |    1 +
 ...fice-langpack-ko_security_api_results.json |    1 +
 ...fice-langpack-lt_security_api_results.json |    1 +
 ...fice-langpack-lv_security_api_results.json |    1 +
 ...ice-langpack-mai_security_api_results.json |    1 +
 ...fice-langpack-ml_security_api_results.json |    1 +
 ...fice-langpack-mr_security_api_results.json |    1 +
 ...fice-langpack-nb_security_api_results.json |    1 +
 ...fice-langpack-nl_security_api_results.json |    1 +
 ...fice-langpack-nn_security_api_results.json |    1 +
 ...fice-langpack-nr_security_api_results.json |    1 +
 ...ice-langpack-nso_security_api_results.json |    1 +
 ...fice-langpack-or_security_api_results.json |    1 +
 ...fice-langpack-pa_security_api_results.json |    1 +
 ...fice-langpack-pl_security_api_results.json |    1 +
 ...e-langpack-pt-BR_security_api_results.json |    1 +
 ...e-langpack-pt-PT_security_api_results.json |    1 +
 ...fice-langpack-ro_security_api_results.json |    1 +
 ...fice-langpack-ru_security_api_results.json |    1 +
 ...fice-langpack-si_security_api_results.json |    1 +
 ...fice-langpack-sk_security_api_results.json |    1 +
 ...fice-langpack-sl_security_api_results.json |    1 +
 ...fice-langpack-sr_security_api_results.json |    1 +
 ...fice-langpack-ss_security_api_results.json |    1 +
 ...fice-langpack-st_security_api_results.json |    1 +
 ...fice-langpack-sv_security_api_results.json |    1 +
 ...fice-langpack-ta_security_api_results.json |    1 +
 ...fice-langpack-te_security_api_results.json |    1 +
 ...fice-langpack-th_security_api_results.json |    1 +
 ...fice-langpack-tn_security_api_results.json |    1 +
 ...fice-langpack-tr_security_api_results.json |    1 +
 ...fice-langpack-ts_security_api_results.json |    1 +
 ...fice-langpack-uk_security_api_results.json |    1 +
 ...fice-langpack-ve_security_api_results.json |    1 +
 ...fice-langpack-xh_security_api_results.json |    1 +
 ...langpack-zh-Hans_security_api_results.json |    1 +
 ...langpack-zh-Hant_security_api_results.json |    1 +
 ...fice-langpack-zu_security_api_results.json |    1 +
 ...libreoffice-math_security_api_results.json |    1 +
 ...eoffice-ogltrans_security_api_results.json |    1 +
 ...opensymbol-fonts_security_api_results.json |    1 +
 ...office-pdfimport_security_api_results.json |    1 +
 ...ibreoffice-pyuno_security_api_results.json |    1 +
 ...reoffice-sdk-doc_security_api_results.json |    1 +
 .../libreoffice-sdk_security_api_results.json |    1 +
 ...ffice-ure-common_security_api_results.json |    1 +
 .../libreoffice-ure_security_api_results.json |    1 +
 ...breoffice-voikko_security_api_results.json |    1 +
 ...e-wiki-publisher_security_api_results.json |    1 +
 ...breoffice-writer_security_api_results.json |    1 +
 .../libreoffice-x11_security_api_results.json |    1 +
 ...ffice-xsltfilter_security_api_results.json |    1 +
 .../libreofficekit_security_api_results.json  |    1 +
 .../librepo_security_api_results.json         |    1 +
 ...breport-anaconda_security_api_results.json |    1 +
 .../libreport-cli_security_api_results.json   |    1 +
 ...eport-filesystem_security_api_results.json |    1 +
 .../libreport-gtk_security_api_results.json   |    1 +
 .../libreport-newt_security_api_results.json  |    1 +
 ...-plugin-bugzilla_security_api_results.json |    1 +
 ...lugin-kerneloops_security_api_results.json |    1 +
 ...rt-plugin-logger_security_api_results.json |    1 +
 ...ort-plugin-mailx_security_api_results.json |    1 +
 ...n-reportuploader_security_api_results.json |    1 +
 ...lugin-rhtsupport_security_api_results.json |    1 +
 ...t-plugin-ureport_security_api_results.json |    1 +
 ...naconda-bugzilla_security_api_results.json |    1 +
 ...rt-rhel-bugzilla_security_api_results.json |    1 +
 .../libreport-rhel_security_api_results.json  |    1 +
 .../libreport-web_security_api_results.json   |    1 +
 .../libreport_security_api_results.json       |    1 +
 .../librepository_security_api_results.json   |    1 +
 .../libreswan_security_api_results.json       |    1 +
 ...librevenge-devel_security_api_results.json |    1 +
 .../librevenge-gdb_security_api_results.json  |    1 +
 .../librevenge_security_api_results.json      |    1 +
 .../librhsm_security_api_results.json         |    1 +
 .../librpmem-debug_security_api_results.json  |    1 +
 .../librpmem-devel_security_api_results.json  |    1 +
 .../librpmem_security_api_results.json        |    1 +
 .../librsvg2-devel_security_api_results.json  |    1 +
 .../librsvg2-tools_security_api_results.json  |    1 +
 .../librsvg2_security_api_results.json        |    1 +
 .../librtas-devel_security_api_results.json   |    1 +
 .../librtas_security_api_results.json         |    1 +
 .../librx-devel_security_api_results.json     |    1 +
 .../librx_security_api_results.json           |    1 +
 ...samplerate-devel_security_api_results.json |    1 +
 .../libsamplerate_security_api_results.json   |    1 +
 .../libsane-hpaio_security_api_results.json   |    1 +
 .../libsass-devel_security_api_results.json   |    1 +
 .../libsass_security_api_results.json         |    1 +
 ...libseccomp-devel_security_api_results.json |    1 +
 .../libseccomp_security_api_results.json      |    1 +
 .../libsecret-devel_security_api_results.json |    1 +
 .../libsecret_security_api_results.json       |    1 +
 ...libselinux-devel_security_api_results.json |    1 +
 ...ibselinux-python_security_api_results.json |    1 +
 .../libselinux-ruby_security_api_results.json |    1 +
 ...libselinux-utils_security_api_results.json |    1 +
 .../libselinux_security_api_results.json      |    1 +
 .../libsemanage_security_api_results.json     |    1 +
 .../libsepol-devel_security_api_results.json  |    1 +
 .../libsepol-static_security_api_results.json |    1 +
 .../libsepol_security_api_results.json        |    1 +
 .../libserf_security_api_results.json         |    1 +
 .../libserializer_security_api_results.json   |    1 +
 ...servicelog-devel_security_api_results.json |    1 +
 .../libservicelog_security_api_results.json   |    1 +
 .../libshout-devel_security_api_results.json  |    1 +
 .../libshout_security_api_results.json        |    1 +
 ...ibsigc++20-devel_security_api_results.json |    1 +
 .../libsigc++20-doc_security_api_results.json |    1 +
 .../libsigc++20_security_api_results.json     |    1 +
 ...libsigsegv-devel_security_api_results.json |    1 +
 .../libsigsegv_security_api_results.json      |    1 +
 ...bsmartcols-devel_security_api_results.json |    1 +
 .../libsmartcols_security_api_results.json    |    1 +
 ...bsmbclient-devel_security_api_results.json |    1 +
 .../libsmbclient_security_api_results.json    |    1 +
 .../libsmbios_security_api_results.json       |    1 +
 .../libsmi_security_api_results.json          |    1 +
 ...libsndfile-devel_security_api_results.json |    1 +
 .../libsndfile_security_api_results.json      |    1 +
 .../libsolv_security_api_results.json         |    1 +
 .../libsoup-devel_security_api_results.json   |    1 +
 .../libsoup_security_api_results.json         |    1 +
 ...libspectre-devel_security_api_results.json |    1 +
 .../libspectre_security_api_results.json      |    1 +
 .../libspiro_security_api_results.json        |    1 +
 .../libsrtp-devel_security_api_results.json   |    1 +
 .../libsrtp_security_api_results.json         |    1 +
 .../libss_security_api_results.json           |    1 +
 .../libssh-config_security_api_results.json   |    1 +
 .../libssh-devel_security_api_results.json    |    1 +
 .../libssh_security_api_results.json          |    1 +
 .../libsss_autofs_security_api_results.json   |    1 +
 .../libsss_certmap_security_api_results.json  |    1 +
 .../libsss_idmap_security_api_results.json    |    1 +
 ..._nss_idmap-devel_security_api_results.json |    1 +
 ...libsss_nss_idmap_security_api_results.json |    1 +
 ...libsss_simpleifp_security_api_results.json |    1 +
 .../libsss_sudo_security_api_results.json     |    1 +
 .../libstaroffice_security_api_results.json   |    1 +
 .../libstdc++-devel_security_api_results.json |    1 +
 .../libstdc++-docs_security_api_results.json  |    1 +
 ...libstdc++-static_security_api_results.json |    1 +
 .../libstdc++_security_api_results.json       |    1 +
 ...libstemmer-devel_security_api_results.json |    1 +
 .../libstemmer_security_api_results.json      |    1 +
 ...t-arcconf-plugin_security_api_results.json |    1 +
 ...mgmt-hpsa-plugin_security_api_results.json |    1 +
 ...gmt-local-plugin_security_api_results.json |    1 +
 ...-megaraid-plugin_security_api_results.json |    1 +
 ...nfs-plugin-clibs_security_api_results.json |    1 +
 ...emgmt-nfs-plugin_security_api_results.json |    1 +
 ...gmt-nstor-plugin_security_api_results.json |    1 +
 ...mgmt-smis-plugin_security_api_results.json |    1 +
 ...storagemgmt-udev_security_api_results.json |    1 +
 .../libstoragemgmt_security_api_results.json  |    1 +
 .../libsysfs-devel_security_api_results.json  |    1 +
 .../libsysfs_security_api_results.json        |    1 +
 .../libtalloc-devel_security_api_results.json |    1 +
 .../libtalloc_security_api_results.json       |    1 +
 .../libtar_security_api_results.json          |    1 +
 .../libtasn1-devel_security_api_results.json  |    1 +
 .../libtasn1-tools_security_api_results.json  |    1 +
 .../libtasn1_security_api_results.json        |    1 +
 .../libtdb-devel_security_api_results.json    |    1 +
 .../libtdb_security_api_results.json          |    1 +
 .../libteam-doc_security_api_results.json     |    1 +
 .../libteam_security_api_results.json         |    1 +
 .../libtevent-devel_security_api_results.json |    1 +
 .../libtevent_security_api_results.json       |    1 +
 .../libthai-devel_security_api_results.json   |    1 +
 .../libthai_security_api_results.json         |    1 +
 .../libtheora-devel_security_api_results.json |    1 +
 .../libtheora_security_api_results.json       |    1 +
 .../libtiff-devel_security_api_results.json   |    1 +
 .../libtiff-tools_security_api_results.json   |    1 +
 .../libtiff_security_api_results.json         |    1 +
 .../libtimezonemap_security_api_results.json  |    1 +
 .../libtirpc-devel_security_api_results.json  |    1 +
 .../libtirpc_security_api_results.json        |    1 +
 ...btool-ltdl-devel_security_api_results.json |    1 +
 .../libtool-ltdl_security_api_results.json    |    1 +
 .../libtool_security_api_results.json         |    1 +
 .../libtsan_security_api_results.json         |    1 +
 .../libubsan_security_api_results.json        |    1 +
 .../libucil-devel_security_api_results.json   |    1 +
 .../libucil_security_api_results.json         |    1 +
 .../libudisks2_security_api_results.json      |    1 +
 .../libunicap-devel_security_api_results.json |    1 +
 .../libunicap_security_api_results.json       |    1 +
 .../libuninameslist_security_api_results.json |    1 +
 ...bunistring-devel_security_api_results.json |    1 +
 .../libunistring_security_api_results.json    |    1 +
 .../liburing_security_api_results.json        |    1 +
 .../libusal_security_api_results.json         |    1 +
 .../libusb-devel_security_api_results.json    |    1 +
 .../libusb_security_api_results.json          |    1 +
 ...libusbmuxd-devel_security_api_results.json |    1 +
 .../libusbmuxd_security_api_results.json      |    1 +
 ...ibusbx-devel-doc_security_api_results.json |    1 +
 .../libusbx-devel_security_api_results.json   |    1 +
 .../libusbx_security_api_results.json         |    1 +
 .../libuser_security_api_results.json         |    1 +
 ...ibutempter-devel_security_api_results.json |    1 +
 .../libutempter_security_api_results.json     |    1 +
 .../libuuid-devel_security_api_results.json   |    1 +
 .../libuuid_security_api_results.json         |    1 +
 .../libuv_security_api_results.json           |    1 +
 .../libv4l-devel_security_api_results.json    |    1 +
 .../libv4l_security_api_results.json          |    1 +
 .../libva-devel_security_api_results.json     |    1 +
 .../libva_security_api_results.json           |    1 +
 ...libvarlink-devel_security_api_results.json |    1 +
 .../libvarlink-util_security_api_results.json |    1 +
 .../libvarlink_security_api_results.json      |    1 +
 .../libvdpau-devel_security_api_results.json  |    1 +
 .../libvdpau_security_api_results.json        |    1 +
 .../libverto-devel_security_api_results.json  |    1 +
 ...ibverto-libevent_security_api_results.json |    1 +
 .../libverto_security_api_results.json        |    1 +
 .../libvirt-admin_security_api_results.json   |    1 +
 ...-bash-completion_security_api_results.json |    1 +
 .../libvirt-client_security_api_results.json  |    1 +
 ...n-config-network_security_api_results.json |    1 +
 ...-config-nwfilter_security_api_results.json |    1 +
 ...driver-interface_security_api_results.json |    1 +
 ...n-driver-network_security_api_results.json |    1 +
 ...n-driver-nodedev_security_api_results.json |    1 +
 ...-driver-nwfilter_security_api_results.json |    1 +
 ...emon-driver-qemu_security_api_results.json |    1 +
 ...on-driver-secret_security_api_results.json |    1 +
 ...ver-storage-core_security_api_results.json |    1 +
 ...ver-storage-disk_security_api_results.json |    1 +
 ...-storage-gluster_security_api_results.json |    1 +
 ...er-storage-iscsi_security_api_results.json |    1 +
 ...-storage-logical_security_api_results.json |    1 +
 ...er-storage-mpath_security_api_results.json |    1 +
 ...iver-storage-rbd_security_api_results.json |    1 +
 ...ver-storage-scsi_security_api_results.json |    1 +
 ...n-driver-storage_security_api_results.json |    1 +
 ...bvirt-daemon-kvm_security_api_results.json |    1 +
 .../libvirt-daemon_security_api_results.json  |    1 +
 .../libvirt-dbus_security_api_results.json    |    1 +
 .../libvirt-devel_security_api_results.json   |    1 +
 .../libvirt-docs_security_api_results.json    |    1 +
 .../libvirt-gconfig_security_api_results.json |    1 +
 .../libvirt-glib_security_api_results.json    |    1 +
 .../libvirt-gobject_security_api_results.json |    1 +
 .../libvirt-libs_security_api_results.json    |    1 +
 ...irt-lock-sanlock_security_api_results.json |    1 +
 .../libvirt-nss_security_api_results.json     |    1 +
 .../libvirt_security_api_results.json         |    1 +
 .../libvisio-devel_security_api_results.json  |    1 +
 .../libvisio_security_api_results.json        |    1 +
 .../libvisual-devel_security_api_results.json |    1 +
 .../libvisual_security_api_results.json       |    1 +
 .../libvma_security_api_results.json          |    1 +
 .../libvmem-debug_security_api_results.json   |    1 +
 .../libvmem-devel_security_api_results.json   |    1 +
 .../libvmem_security_api_results.json         |    1 +
 ...ibvmmalloc-debug_security_api_results.json |    1 +
 ...ibvmmalloc-devel_security_api_results.json |    1 +
 .../libvmmalloc_security_api_results.json     |    1 +
 ...bvncserver-devel_security_api_results.json |    1 +
 .../libvncserver_security_api_results.json    |    1 +
 .../libvoikko_security_api_results.json       |    1 +
 ...orbis-devel-docs_security_api_results.json |    1 +
 .../libvorbis-devel_security_api_results.json |    1 +
 .../libvorbis_security_api_results.json       |    1 +
 .../libvpd-devel_security_api_results.json    |    1 +
 .../libvpd_security_api_results.json          |    1 +
 .../libvpx-devel_security_api_results.json    |    1 +
 .../libvpx_security_api_results.json          |    1 +
 .../libwacom-data_security_api_results.json   |    1 +
 .../libwacom-devel_security_api_results.json  |    1 +
 .../libwacom_security_api_results.json        |    1 +
 ...ibwayland-client_security_api_results.json |    1 +
 ...ibwayland-cursor_security_api_results.json |    1 +
 .../libwayland-egl_security_api_results.json  |    1 +
 ...ibwayland-server_security_api_results.json |    1 +
 ...ibwbclient-devel_security_api_results.json |    1 +
 .../libwbclient_security_api_results.json     |    1 +
 .../libwebp-devel_security_api_results.json   |    1 +
 .../libwebp_security_api_results.json         |    1 +
 .../libwinpr-devel_security_api_results.json  |    1 +
 .../libwinpr_security_api_results.json        |    1 +
 .../libwmf-devel_security_api_results.json    |    1 +
 .../libwmf-lite_security_api_results.json     |    1 +
 .../libwmf_security_api_results.json          |    1 +
 .../libwnck3-devel_security_api_results.json  |    1 +
 .../libwnck3_security_api_results.json        |    1 +
 .../libwpd-devel_security_api_results.json    |    1 +
 .../libwpd-doc_security_api_results.json      |    1 +
 .../libwpd_security_api_results.json          |    1 +
 .../libwpg-devel_security_api_results.json    |    1 +
 .../libwpg-doc_security_api_results.json      |    1 +
 .../libwpg_security_api_results.json          |    1 +
 .../libwps-devel_security_api_results.json    |    1 +
 .../libwps-doc_security_api_results.json      |    1 +
 .../libwps_security_api_results.json          |    1 +
 .../libwsman-devel_security_api_results.json  |    1 +
 .../libwsman1_security_api_results.json       |    1 +
 .../libxcb-devel_security_api_results.json    |    1 +
 .../libxcb_security_api_results.json          |    1 +
 .../libxcrypt-devel_security_api_results.json |    1 +
 ...libxcrypt-static_security_api_results.json |    1 +
 .../libxcrypt_security_api_results.json       |    1 +
 ...bxkbcommon-devel_security_api_results.json |    1 +
 ...common-x11-devel_security_api_results.json |    1 +
 ...libxkbcommon-x11_security_api_results.json |    1 +
 .../libxkbcommon_security_api_results.json    |    1 +
 ...libxkbfile-devel_security_api_results.json |    1 +
 .../libxkbfile_security_api_results.json      |    1 +
 ...ibxklavier-devel_security_api_results.json |    1 +
 .../libxklavier_security_api_results.json     |    1 +
 .../libxml2-devel_security_api_results.json   |    1 +
 .../libxml2_security_api_results.json         |    1 +
 ...bxshmfence-devel_security_api_results.json |    1 +
 .../libxshmfence_security_api_results.json    |    1 +
 .../libxslt-devel_security_api_results.json   |    1 +
 .../libxslt_security_api_results.json         |    1 +
 .../libyami_security_api_results.json         |    1 +
 .../libyaml-devel_security_api_results.json   |    1 +
 .../libyaml_security_api_results.json         |    1 +
 .../libyang_security_api_results.json         |    1 +
 ...bzfcphbaapi-docs_security_api_results.json |    1 +
 .../libzfcphbaapi_security_api_results.json   |    1 +
 .../libzhuyin_security_api_results.json       |    1 +
 .../libzip-devel_security_api_results.json    |    1 +
 .../libzip-tools_security_api_results.json    |    1 +
 .../libzip_security_api_results.json          |    1 +
 .../libzmf_security_api_results.json          |    1 +
 .../libzstd-devel_security_api_results.json   |    1 +
 .../libzstd_security_api_results.json         |    1 +
 .../linux-firmware_security_api_results.json  |    1 +
 ...inuxconsoletools_security_api_results.json |    1 +
 .../linuxdoc-tools_security_api_results.json  |    1 +
 .../linuxptp_security_api_results.json        |    1 +
 .../lklug-fonts_security_api_results.json     |    1 +
 ...sctp-tools-devel_security_api_results.json |    1 +
 ...lksctp-tools-doc_security_api_results.json |    1 +
 .../lksctp-tools_security_api_results.json    |    1 +
 .../lld-devel_security_api_results.json       |    1 +
 .../lld-libs_security_api_results.json        |    1 +
 .../lld-test_security_api_results.json        |    1 +
 .../lld_security_api_results.json             |    1 +
 .../lldb-devel_security_api_results.json      |    1 +
 .../lldb_security_api_results.json            |    1 +
 .../lldpad_security_api_results.json          |    1 +
 .../lldpd-devel_security_api_results.json     |    1 +
 .../lldpd_security_api_results.json           |    1 +
 .../llvm-devel_security_api_results.json      |    1 +
 .../llvm-doc_security_api_results.json        |    1 +
 .../llvm-googletest_security_api_results.json |    1 +
 .../llvm-libs_security_api_results.json       |    1 +
 .../llvm-static_security_api_results.json     |    1 +
 .../llvm-test_security_api_results.json       |    1 +
 .../llvm-toolset_security_api_results.json    |    1 +
 .../llvm_security_api_results.json            |    1 +
 ...lm_sensors-devel_security_api_results.json |    1 +
 .../lm_sensors-libs_security_api_results.json |    1 +
 ..._sensors-sensord_security_api_results.json |    1 +
 .../lm_sensors_security_api_results.json      |    1 +
 .../lmdb-libs_security_api_results.json       |    1 +
 .../lockdev-devel_security_api_results.json   |    1 +
 .../lockdev_security_api_results.json         |    1 +
 ...log4j-over-slf4j_security_api_results.json |    1 +
 .../log4j12-javadoc_security_api_results.json |    1 +
 .../log4j12_security_api_results.json         |    1 +
 .../logrotate_security_api_results.json       |    1 +
 .../logwatch_security_api_results.json        |    1 +
 ...t-assamese-fonts_security_api_results.json |    1 +
 ...it-bengali-fonts_security_api_results.json |    1 +
 ...devanagari-fonts_security_api_results.json |    1 +
 ...t-gujarati-fonts_security_api_results.json |    1 +
 ...t-gurmukhi-fonts_security_api_results.json |    1 +
 ...it-kannada-fonts_security_api_results.json |    1 +
 ...-malayalam-fonts_security_api_results.json |    1 +
 ...it-marathi-fonts_security_api_results.json |    1 +
 ...hit-nepali-fonts_security_api_results.json |    1 +
 ...lohit-odia-fonts_security_api_results.json |    1 +
 ...ohit-tamil-fonts_security_api_results.json |    1 +
 ...hit-telugu-fonts_security_api_results.json |    1 +
 .../lorax-composer_security_api_results.json  |    1 +
 ...lorax-lmc-novirt_security_api_results.json |    1 +
 .../lorax-lmc-virt_security_api_results.json  |    1 +
 ...emplates-generic_security_api_results.json |    1 +
 ...x-templates-rhel_security_api_results.json |    1 +
 .../lorax_security_api_results.json           |    1 +
 .../lpsolve_security_api_results.json         |    1 +
 .../lrzsz_security_api_results.json           |    1 +
 .../lshw-gui_security_api_results.json        |    1 +
 .../lshw_security_api_results.json            |    1 +
 .../lsof_security_api_results.json            |    1 +
 .../lsscsi_security_api_results.json          |    1 +
 .../lsvpd_security_api_results.json           |    1 +
 .../ltrace_security_api_results.json          |    1 +
 .../lttng-ust-devel_security_api_results.json |    1 +
 .../lttng-ust_security_api_results.json       |    1 +
 .../lua-devel_security_api_results.json       |    1 +
 .../lua-expat_security_api_results.json       |    1 +
 .../lua-filesystem_security_api_results.json  |    1 +
 .../lua-guestfs_security_api_results.json     |    1 +
 .../lua-json_security_api_results.json        |    1 +
 .../lua-libs_security_api_results.json        |    1 +
 .../lua-lpeg_security_api_results.json        |    1 +
 .../lua-lunit_security_api_results.json       |    1 +
 .../lua-posix_security_api_results.json       |    1 +
 .../lua-socket_security_api_results.json      |    1 +
 .../lua_security_api_results.json             |    1 +
 .../luksmeta_security_api_results.json        |    1 +
 .../lvm2-dbusd_security_api_results.json      |    1 +
 .../lvm2-devel_security_api_results.json      |    1 +
 .../lvm2-libs_security_api_results.json       |    1 +
 .../lvm2-lockd_security_api_results.json      |    1 +
 .../lvm2_security_api_results.json            |    1 +
 .../lynx_security_api_results.json            |    1 +
 .../lz4-devel_security_api_results.json       |    1 +
 .../lz4-libs_security_api_results.json        |    1 +
 .../lz4_security_api_results.json             |    1 +
 .../lzo-devel_security_api_results.json       |    1 +
 .../lzo-minilzo_security_api_results.json     |    1 +
 .../lzo_security_api_results.json             |    1 +
 .../lzop_security_api_results.json            |    1 +
 .../m17n-db_security_api_results.json         |    1 +
 .../m17n-lib_security_api_results.json        |    1 +
 .../m4_security_api_results.json              |    1 +
 .../madan-fonts_security_api_results.json     |    1 +
 .../mailcap_security_api_results.json         |    1 +
 .../mailman_security_api_results.json         |    1 +
 .../mailx_security_api_results.json           |    1 +
 .../make-devel_security_api_results.json      |    1 +
 .../make_security_api_results.json            |    1 +
 ...aga-suomi-voikko_security_api_results.json |    1 +
 .../malaga_security_api_results.json          |    1 +
 .../mallard-rng_security_api_results.json     |    1 +
 .../man-db-cron_security_api_results.json     |    1 +
 .../man-db_security_api_results.json          |    1 +
 ...-pages-overrides_security_api_results.json |    1 +
 .../man-pages_security_api_results.json       |    1 +
 .../mariadb-backup_security_api_results.json  |    1 +
 .../mariadb-common_security_api_results.json  |    1 +
 ...nnector-c-config_security_api_results.json |    1 +
 ...onnector-c-devel_security_api_results.json |    1 +
 ...iadb-connector-c_security_api_results.json |    1 +
 ...b-connector-odbc_security_api_results.json |    1 +
 .../mariadb-devel_security_api_results.json   |    1 +
 ...b-embedded-devel_security_api_results.json |    1 +
 ...mariadb-embedded_security_api_results.json |    1 +
 .../mariadb-errmsg_security_api_results.json  |    1 +
 ...db-gssapi-server_security_api_results.json |    1 +
 ...iadb-java-client_security_api_results.json |    1 +
 ...b-oqgraph-engine_security_api_results.json |    1 +
 ...db-server-galera_security_api_results.json |    1 +
 ...adb-server-utils_security_api_results.json |    1 +
 .../mariadb-server_security_api_results.json  |    1 +
 .../mariadb-test_security_api_results.json    |    1 +
 .../mariadb_security_api_results.json         |    1 +
 .../marisa_security_api_results.json          |    1 +
 ...x-window-manager_security_api_results.json |    1 +
 ...n-plugin-javadoc_security_api_results.json |    1 +
 ...en-antrun-plugin_security_api_results.json |    1 +
 ...archiver-javadoc_security_api_results.json |    1 +
 .../maven-archiver_security_api_results.json  |    1 +
 ...artifact-manager_security_api_results.json |    1 +
 ...resolver-javadoc_security_api_results.json |    1 +
 ...rtifact-resolver_security_api_results.json |    1 +
 ...transfer-javadoc_security_api_results.json |    1 +
 ...rtifact-transfer_security_api_results.json |    1 +
 .../maven-artifact_security_api_results.json  |    1 +
 ...y-plugin-javadoc_security_api_results.json |    1 +
 ...-assembly-plugin_security_api_results.json |    1 +
 ...en-cal10n-plugin_security_api_results.json |    1 +
 ...n-plugin-javadoc_security_api_results.json |    1 +
 ...ven-clean-plugin_security_api_results.json |    1 +
 ...-filters-javadoc_security_api_results.json |    1 +
 ...artifact-filters_security_api_results.json |    1 +
 ...r-plugin-javadoc_security_api_results.json |    1 +
 ...-compiler-plugin_security_api_results.json |    1 +
 ...analyzer-javadoc_security_api_results.json |    1 +
 ...endency-analyzer_security_api_results.json |    1 +
 ...y-plugin-javadoc_security_api_results.json |    1 +
 ...ependency-plugin_security_api_results.json |    1 +
 ...ncy-tree-javadoc_security_api_results.json |    1 +
 ...-dependency-tree_security_api_results.json |    1 +
 ...maven-doxia-core_security_api_results.json |    1 +
 ...en-doxia-javadoc_security_api_results.json |    1 +
 ...oxia-logging-api_security_api_results.json |    1 +
 ...doxia-module-apt_security_api_results.json |    1 +
 ...odule-confluence_security_api_results.json |    1 +
 ...e-docbook-simple_security_api_results.json |    1 +
 ...doxia-module-fml_security_api_results.json |    1 +
 ...xia-module-latex_security_api_results.json |    1 +
 ...doxia-module-rtf_security_api_results.json |    1 +
 ...xia-module-twiki_security_api_results.json |    1 +
 ...oxia-module-xdoc_security_api_results.json |    1 +
 ...xia-module-xhtml_security_api_results.json |    1 +
 ...en-doxia-modules_security_api_results.json |    1 +
 ...n-doxia-sink-api_security_api_results.json |    1 +
 ...itetools-javadoc_security_api_results.json |    1 +
 ...-doxia-sitetools_security_api_results.json |    1 +
 ...-doxia-test-docs_security_api_results.json |    1 +
 ...aven-doxia-tests_security_api_results.json |    1 +
 .../maven-doxia_security_api_results.json     |    1 +
 ...ven-enforcer-api_security_api_results.json |    1 +
 ...enforcer-javadoc_security_api_results.json |    1 +
 ...-enforcer-plugin_security_api_results.json |    1 +
 ...n-enforcer-rules_security_api_results.json |    1 +
 .../maven-enforcer_security_api_results.json  |    1 +
 ...-failsafe-plugin_security_api_results.json |    1 +
 ...nagement-javadoc_security_api_results.json |    1 +
 ...-file-management_security_api_results.json |    1 +
 ...iltering-javadoc_security_api_results.json |    1 +
 .../maven-filtering_security_api_results.json |    1 +
 ...n-hawtjni-plugin_security_api_results.json |    1 +
 ...l-plugin-javadoc_security_api_results.json |    1 +
 ...n-install-plugin_security_api_results.json |    1 +
 ...-invoker-javadoc_security_api_results.json |    1 +
 ...r-plugin-javadoc_security_api_results.json |    1 +
 ...n-invoker-plugin_security_api_results.json |    1 +
 .../maven-invoker_security_api_results.json   |    1 +
 ...r-plugin-javadoc_security_api_results.json |    1 +
 ...maven-jar-plugin_security_api_results.json |    1 +
 .../maven-javadoc_security_api_results.json   |    1 +
 .../maven-lib_security_api_results.json       |    1 +
 .../maven-local_security_api_results.json     |    1 +
 .../maven-model_security_api_results.json     |    1 +
 .../maven-monitor_security_api_results.json   |    1 +
 .../maven-openjdk11_security_api_results.json |    1 +
 .../maven-openjdk8_security_api_results.json  |    1 +
 .../maven-parent_security_api_results.json    |    1 +
 ...ugin-annotations_security_api_results.json |    1 +
 ...d-helper-javadoc_security_api_results.json |    1 +
 ...gin-build-helper_security_api_results.json |    1 +
 ...n-bundle-javadoc_security_api_results.json |    1 +
 ...en-plugin-bundle_security_api_results.json |    1 +
 ...lugin-descriptor_security_api_results.json |    1 +
 ...en-plugin-plugin_security_api_results.json |    1 +
 ...-plugin-registry_security_api_results.json |    1 +
 ...-testing-harness_security_api_results.json |    1 +
 ...-testing-javadoc_security_api_results.json |    1 +
 ...in-testing-tools_security_api_results.json |    1 +
 ...n-plugin-testing_security_api_results.json |    1 +
 ...ools-annotations_security_api_results.json |    1 +
 ...plugin-tools-ant_security_api_results.json |    1 +
 ...plugin-tools-api_security_api_results.json |    1 +
 ...-tools-beanshell_security_api_results.json |    1 +
 ...tools-generators_security_api_results.json |    1 +
 ...lugin-tools-java_security_api_results.json |    1 +
 ...in-tools-javadoc_security_api_results.json |    1 +
 ...n-tools-javadocs_security_api_results.json |    1 +
 ...ugin-tools-model_security_api_results.json |    1 +
 ...ven-plugin-tools_security_api_results.json |    1 +
 ...aven-plugins-pom_security_api_results.json |    1 +
 .../maven-profile_security_api_results.json   |    1 +
 .../maven-project_security_api_results.json   |    1 +
 ...s-plugin-javadoc_security_api_results.json |    1 +
 ...resources-plugin_security_api_results.json |    1 +
 ...ting-api-javadoc_security_api_results.json |    1 +
 ...en-reporting-api_security_api_results.json |    1 +
 ...ing-impl-javadoc_security_api_results.json |    1 +
 ...n-reporting-impl_security_api_results.json |    1 +
 ...ven-resolver-api_security_api_results.json |    1 +
 ...-connector-basic_security_api_results.json |    1 +
 ...en-resolver-impl_security_api_results.json |    1 +
 ...resolver-javadoc_security_api_results.json |    1 +
 ...ven-resolver-spi_security_api_results.json |    1 +
 ...solver-test-util_security_api_results.json |    1 +
 ...nsport-classpath_security_api_results.json |    1 +
 ...r-transport-file_security_api_results.json |    1 +
 ...r-transport-http_security_api_results.json |    1 +
 ...-transport-wagon_security_api_results.json |    1 +
 ...en-resolver-util_security_api_results.json |    1 +
 .../maven-resolver_security_api_results.json  |    1 +
 ...s-plugin-javadoc_security_api_results.json |    1 +
 ...resources-plugin_security_api_results.json |    1 +
 ...maven-script-ant_security_api_results.json |    1 +
 ...script-beanshell_security_api_results.json |    1 +
 ...erpreter-javadoc_security_api_results.json |    1 +
 ...ript-interpreter_security_api_results.json |    1 +
 .../maven-script_security_api_results.json    |    1 +
 .../maven-settings_security_api_results.json  |    1 +
 ...e-plugin-javadoc_security_api_results.json |    1 +
 ...ven-shade-plugin_security_api_results.json |    1 +
 ...remental-javadoc_security_api_results.json |    1 +
 ...ared-incremental_security_api_results.json |    1 +
 ...hared-io-javadoc_security_api_results.json |    1 +
 .../maven-shared-io_security_api_results.json |    1 +
 ...ed-utils-javadoc_security_api_results.json |    1 +
 ...ven-shared-utils_security_api_results.json |    1 +
 .../maven-shared_security_api_results.json    |    1 +
 ...e-plugin-javadoc_security_api_results.json |    1 +
 ...en-source-plugin_security_api_results.json |    1 +
 ...surefire-javadoc_security_api_results.json |    1 +
 ...-surefire-plugin_security_api_results.json |    1 +
 ...e-provider-junit_security_api_results.json |    1 +
 ...-provider-testng_security_api_results.json |    1 +
 ...re-report-parser_security_api_results.json |    1 +
 ...re-report-plugin_security_api_results.json |    1 +
 .../maven-surefire_security_api_results.json  |    1 +
 ...maven-test-tools_security_api_results.json |    1 +
 .../maven-toolchain_security_api_results.json |    1 +
 ...verifier-javadoc_security_api_results.json |    1 +
 .../maven-verifier_security_api_results.json  |    1 +
 ...maven-wagon-file_security_api_results.json |    1 +
 .../maven-wagon-ftp_security_api_results.json |    1 +
 ...http-lightweight_security_api_results.json |    1 +
 ...agon-http-shared_security_api_results.json |    1 +
 ...maven-wagon-http_security_api_results.json |    1 +
 ...en-wagon-javadoc_security_api_results.json |    1 +
 ...gon-provider-api_security_api_results.json |    1 +
 ...-wagon-providers_security_api_results.json |    1 +
 .../maven-wagon_security_api_results.json     |    1 +
 .../maven2-javadoc_security_api_results.json  |    1 +
 .../maven_security_api_results.json           |    1 +
 .../mc_security_api_results.json              |    1 +
 .../mcelog_security_api_results.json          |    1 +
 .../mcpp_security_api_results.json            |    1 +
 .../mcstrans_security_api_results.json        |    1 +
 .../mdadm_security_api_results.json           |    1 +
 .../meanwhile_security_api_results.json       |    1 +
 ...cab-ipadic-EUCJP_security_api_results.json |    1 +
 .../mecab-ipadic_security_api_results.json    |    1 +
 .../mecab_security_api_results.json           |    1 +
 ...edia-player-info_security_api_results.json |    1 +
 .../memcached_security_api_results.json       |    1 +
 .../memkind-devel_security_api_results.json   |    1 +
 .../memkind_security_api_results.json         |    1 +
 .../memtest86+_security_api_results.json      |    1 +
 .../mercurial-hgk_security_api_results.json   |    1 +
 .../mercurial_security_api_results.json       |    1 +
 ...mesa-dri-drivers_security_api_results.json |    1 +
 .../mesa-filesystem_security_api_results.json |    1 +
 ...esa-libEGL-devel_security_api_results.json |    1 +
 .../mesa-libEGL_security_api_results.json     |    1 +
 ...mesa-libGL-devel_security_api_results.json |    1 +
 ...esa-libGLU-devel_security_api_results.json |    1 +
 .../mesa-libGLU_security_api_results.json     |    1 +
 .../mesa-libGL_security_api_results.json      |    1 +
 ...esa-libGLw-devel_security_api_results.json |    1 +
 .../mesa-libGLw_security_api_results.json     |    1 +
 ...-libOSMesa-devel_security_api_results.json |    1 +
 .../mesa-libOSMesa_security_api_results.json  |    1 +
 ...esa-libgbm-devel_security_api_results.json |    1 +
 .../mesa-libgbm_security_api_results.json     |    1 +
 .../mesa-libglapi_security_api_results.json   |    1 +
 ...esa-libxatracker_security_api_results.json |    1 +
 ...sa-vdpau-drivers_security_api_results.json |    1 +
 ...esa-vulkan-devel_security_api_results.json |    1 +
 ...a-vulkan-drivers_security_api_results.json |    1 +
 .../meson_security_api_results.json           |    1 +
 .../metacity_security_api_results.json        |    1 +
 .../metis-devel_security_api_results.json     |    1 +
 .../metis_security_api_results.json           |    1 +
 .../microcode_ctl_security_api_results.json   |    1 +
 .../microdnf_security_api_results.json        |    1 +
 ...binutils-generic_security_api_results.json |    1 +
 ...-filesystem-base_security_api_results.json |    1 +
 ...mingw32-binutils_security_api_results.json |    1 +
 ...w32-bzip2-static_security_api_results.json |    1 +
 .../mingw32-bzip2_security_api_results.json   |    1 +
 .../mingw32-cairo_security_api_results.json   |    1 +
 .../mingw32-cpp_security_api_results.json     |    1 +
 .../mingw32-crt_security_api_results.json     |    1 +
 .../mingw32-expat_security_api_results.json   |    1 +
 ...ngw32-filesystem_security_api_results.json |    1 +
 ...ngw32-fontconfig_security_api_results.json |    1 +
 ...-freetype-static_security_api_results.json |    1 +
 ...mingw32-freetype_security_api_results.json |    1 +
 .../mingw32-gcc-c++_security_api_results.json |    1 +
 .../mingw32-gcc_security_api_results.json     |    1 +
 ...2-gettext-static_security_api_results.json |    1 +
 .../mingw32-gettext_security_api_results.json |    1 +
 ...w32-glib2-static_security_api_results.json |    1 +
 .../mingw32-glib2_security_api_results.json   |    1 +
 ...ngw32-gstreamer1_security_api_results.json |    1 +
 ...-harfbuzz-static_security_api_results.json |    1 +
 ...mingw32-harfbuzz_security_api_results.json |    1 +
 .../mingw32-headers_security_api_results.json |    1 +
 .../mingw32-icu_security_api_results.json     |    1 +
 .../mingw32-libffi_security_api_results.json  |    1 +
 ...peg-turbo-static_security_api_results.json |    1 +
 ...32-libjpeg-turbo_security_api_results.json |    1 +
 ...32-libpng-static_security_api_results.json |    1 +
 .../mingw32-libpng_security_api_results.json  |    1 +
 ...2-libtiff-static_security_api_results.json |    1 +
 .../mingw32-libtiff_security_api_results.json |    1 +
 .../mingw32-openssl_security_api_results.json |    1 +
 ...gw32-pcre-static_security_api_results.json |    1 +
 .../mingw32-pcre_security_api_results.json    |    1 +
 .../mingw32-pixman_security_api_results.json  |    1 +
 ...ngw32-pkg-config_security_api_results.json |    1 +
 ...mingw32-readline_security_api_results.json |    1 +
 ...32-spice-vdagent_security_api_results.json |    1 +
 ...32-sqlite-static_security_api_results.json |    1 +
 .../mingw32-sqlite_security_api_results.json  |    1 +
 .../mingw32-termcap_security_api_results.json |    1 +
 ...win-iconv-static_security_api_results.json |    1 +
 ...ingw32-win-iconv_security_api_results.json |    1 +
 ...npthreads-static_security_api_results.json |    1 +
 ...gw32-winpthreads_security_api_results.json |    1 +
 ...gw32-zlib-static_security_api_results.json |    1 +
 .../mingw32-zlib_security_api_results.json    |    1 +
 ...mingw64-binutils_security_api_results.json |    1 +
 ...w64-bzip2-static_security_api_results.json |    1 +
 .../mingw64-bzip2_security_api_results.json   |    1 +
 .../mingw64-cairo_security_api_results.json   |    1 +
 .../mingw64-cpp_security_api_results.json     |    1 +
 .../mingw64-crt_security_api_results.json     |    1 +
 .../mingw64-expat_security_api_results.json   |    1 +
 ...ngw64-filesystem_security_api_results.json |    1 +
 ...ngw64-fontconfig_security_api_results.json |    1 +
 ...-freetype-static_security_api_results.json |    1 +
 ...mingw64-freetype_security_api_results.json |    1 +
 .../mingw64-gcc-c++_security_api_results.json |    1 +
 .../mingw64-gcc_security_api_results.json     |    1 +
 ...4-gettext-static_security_api_results.json |    1 +
 .../mingw64-gettext_security_api_results.json |    1 +
 ...w64-glib2-static_security_api_results.json |    1 +
 .../mingw64-glib2_security_api_results.json   |    1 +
 ...ngw64-gstreamer1_security_api_results.json |    1 +
 ...-harfbuzz-static_security_api_results.json |    1 +
 ...mingw64-harfbuzz_security_api_results.json |    1 +
 .../mingw64-headers_security_api_results.json |    1 +
 .../mingw64-icu_security_api_results.json     |    1 +
 .../mingw64-libffi_security_api_results.json  |    1 +
 ...peg-turbo-static_security_api_results.json |    1 +
 ...64-libjpeg-turbo_security_api_results.json |    1 +
 ...64-libpng-static_security_api_results.json |    1 +
 .../mingw64-libpng_security_api_results.json  |    1 +
 ...4-libtiff-static_security_api_results.json |    1 +
 .../mingw64-libtiff_security_api_results.json |    1 +
 .../mingw64-openssl_security_api_results.json |    1 +
 ...gw64-pcre-static_security_api_results.json |    1 +
 .../mingw64-pcre_security_api_results.json    |    1 +
 .../mingw64-pixman_security_api_results.json  |    1 +
 ...ngw64-pkg-config_security_api_results.json |    1 +
 ...mingw64-readline_security_api_results.json |    1 +
 ...64-spice-vdagent_security_api_results.json |    1 +
 ...64-sqlite-static_security_api_results.json |    1 +
 .../mingw64-sqlite_security_api_results.json  |    1 +
 .../mingw64-termcap_security_api_results.json |    1 +
 ...win-iconv-static_security_api_results.json |    1 +
 ...ingw64-win-iconv_security_api_results.json |    1 +
 ...npthreads-static_security_api_results.json |    1 +
 ...gw64-winpthreads_security_api_results.json |    1 +
 ...gw64-zlib-static_security_api_results.json |    1 +
 .../mingw64-zlib_security_api_results.json    |    1 +
 .../minicom_security_api_results.json         |    1 +
 .../mksh_security_api_results.json            |    1 +
 .../mlocate_security_api_results.json         |    1 +
 ...nd-provider-info_security_api_results.json |    1 +
 .../mockito-javadoc_security_api_results.json |    1 +
 .../mockito_security_api_results.json         |    1 +
 .../mod_auth_gssapi_security_api_results.json |    1 +
 ...llon-diagnostics_security_api_results.json |    1 +
 .../mod_auth_mellon_security_api_results.json |    1 +
 ...mod_auth_openidc_security_api_results.json |    1 +
 .../mod_authnz_pam_security_api_results.json  |    1 +
 .../mod_dav_svn_security_api_results.json     |    1 +
 .../mod_fcgid_security_api_results.json       |    1 +
 .../mod_http2_security_api_results.json       |    1 +
 ...cept_form_submit_security_api_results.json |    1 +
 .../mod_ldap_security_api_results.json        |    1 +
 ..._lookup_identity_security_api_results.json |    1 +
 .../mod_md_security_api_results.json          |    1 +
 .../mod_proxy_html_security_api_results.json  |    1 +
 ...d_security-mlogc_security_api_results.json |    1 +
 ...mod_security_crs_security_api_results.json |    1 +
 .../mod_security_security_api_results.json    |    1 +
 .../mod_session_security_api_results.json     |    1 +
 .../mod_ssl_security_api_results.json         |    1 +
 .../modello-javadoc_security_api_results.json |    1 +
 .../modello_security_api_results.json         |    1 +
 .../mojo-parent_security_api_results.json     |    1 +
 .../mokutil_security_api_results.json         |    1 +
 .../motif-devel_security_api_results.json     |    1 +
 .../motif-static_security_api_results.json    |    1 +
 .../motif_security_api_results.json           |    1 +
 .../mousetweaks_security_api_results.json     |    1 +
 ...zilla-filesystem_security_api_results.json |    1 +
 .../mozjs52-devel_security_api_results.json   |    1 +
 .../mozjs52_security_api_results.json         |    1 +
 .../mozjs60-devel_security_api_results.json   |    1 +
 .../mozjs60_security_api_results.json         |    1 +
 .../mozvoikko_security_api_results.json       |    1 +
 .../mpfr-devel_security_api_results.json      |    1 +
 .../mpfr_security_api_results.json            |    1 +
 .../mpg123-devel_security_api_results.json    |    1 +
 .../mpg123-libs_security_api_results.json     |    1 +
 ...ugins-pulseaudio_security_api_results.json |    1 +
 .../mpg123_security_api_results.json          |    1 +
 .../mpich-devel_security_api_results.json     |    1 +
 .../mpich_security_api_results.json           |    1 +
 .../mpitests-mpich_security_api_results.json  |    1 +
 ...ts-mvapich2-psm2_security_api_results.json |    1 +
 ...pitests-mvapich2_security_api_results.json |    1 +
 ...mpitests-openmpi_security_api_results.json |    1 +
 .../mrtg_security_api_results.json            |    1 +
 .../mstflint_security_api_results.json        |    1 +
 .../mt-st_security_api_results.json           |    1 +
 .../mtdev-devel_security_api_results.json     |    1 +
 .../mtdev_security_api_results.json           |    1 +
 .../mtools_security_api_results.json          |    1 +
 .../mtr-gtk_security_api_results.json         |    1 +
 .../mtr_security_api_results.json             |    1 +
 .../mtx_security_api_results.json             |    1 +
 ...tilib-rpm-config_security_api_results.json |    1 +
 .../munge-devel_security_api_results.json     |    1 +
 .../munge-libs_security_api_results.json      |    1 +
 ...n-plugin-javadoc_security_api_results.json |    1 +
 ...nge-maven-plugin_security_api_results.json |    1 +
 .../munge_security_api_results.json           |    1 +
 .../mutt_security_api_results.json            |    1 +
 .../mutter-devel_security_api_results.json    |    1 +
 .../mutter_security_api_results.json          |    1 +
 .../mvapich2-psm2_security_api_results.json   |    1 +
 .../mvapich2_security_api_results.json        |    1 +
 .../mysql-common_security_api_results.json    |    1 +
 .../mysql-devel_security_api_results.json     |    1 +
 .../mysql-errmsg_security_api_results.json    |    1 +
 .../mysql-libs_security_api_results.json      |    1 +
 .../mysql-server_security_api_results.json    |    1 +
 .../mysql-test_security_api_results.json      |    1 +
 .../mysql_security_api_results.json           |    1 +
 .../mythes-bg_security_api_results.json       |    1 +
 .../mythes-ca_security_api_results.json       |    1 +
 .../mythes-cs_security_api_results.json       |    1 +
 .../mythes-da_security_api_results.json       |    1 +
 .../mythes-de_security_api_results.json       |    1 +
 .../mythes-devel_security_api_results.json    |    1 +
 .../mythes-el_security_api_results.json       |    1 +
 .../mythes-en_security_api_results.json       |    1 +
 .../mythes-es_security_api_results.json       |    1 +
 .../mythes-fr_security_api_results.json       |    1 +
 .../mythes-ga_security_api_results.json       |    1 +
 .../mythes-hu_security_api_results.json       |    1 +
 .../mythes-it_security_api_results.json       |    1 +
 .../mythes-lb_security_api_results.json       |    1 +
 .../mythes-lv_security_api_results.json       |    1 +
 .../mythes-mi_security_api_results.json       |    1 +
 .../mythes-nb_security_api_results.json       |    1 +
 .../mythes-ne_security_api_results.json       |    1 +
 .../mythes-nl_security_api_results.json       |    1 +
 .../mythes-nn_security_api_results.json       |    1 +
 .../mythes-pl_security_api_results.json       |    1 +
 .../mythes-pt_security_api_results.json       |    1 +
 .../mythes-ro_security_api_results.json       |    1 +
 .../mythes-ru_security_api_results.json       |    1 +
 .../mythes-sk_security_api_results.json       |    1 +
 .../mythes-sl_security_api_results.json       |    1 +
 .../mythes-sv_security_api_results.json       |    1 +
 .../mythes-uk_security_api_results.json       |    1 +
 .../mythes_security_api_results.json          |    1 +
 ...-web-naskh-fonts_security_api_results.json |    1 +
 .../nano_security_api_results.json            |    1 +
 .../nasm_security_api_results.json            |    1 +
 .../nautilus-devel_security_api_results.json  |    1 +
 ...tilus-extensions_security_api_results.json |    1 +
 .../nautilus-sendto_security_api_results.json |    1 +
 .../nautilus_security_api_results.json        |    1 +
 .../navilu-fonts_security_api_results.json    |    1 +
 ...-bash-completion_security_api_results.json |    1 +
 ...it-basic-plugins_security_api_results.json |    1 +
 .../nbdkit-devel_security_api_results.json    |    1 +
 ...-example-plugins_security_api_results.json |    1 +
 ...dkit-plugin-gzip_security_api_results.json |    1 +
 ...in-python-common_security_api_results.json |    1 +
 ...t-plugin-python3_security_api_results.json |    1 +
 ...dkit-plugin-vddk_security_api_results.json |    1 +
 ...nbdkit-plugin-xz_security_api_results.json |    1 +
 .../nbdkit_security_api_results.json          |    1 +
 .../ncompress_security_api_results.json       |    1 +
 .../ncurses-base_security_api_results.json    |    1 +
 ...ncurses-c++-libs_security_api_results.json |    1 +
 ...rses-compat-libs_security_api_results.json |    1 +
 .../ncurses-devel_security_api_results.json   |    1 +
 .../ncurses-libs_security_api_results.json    |    1 +
 .../ncurses-term_security_api_results.json    |    1 +
 .../ncurses_security_api_results.json         |    1 +
 .../ndctl-devel_security_api_results.json     |    1 +
 .../ndctl-libs_security_api_results.json      |    1 +
 .../ndctl_security_api_results.json           |    1 +
 .../neon-devel_security_api_results.json      |    1 +
 .../neon_security_api_results.json            |    1 +
 ...-snmp-agent-libs_security_api_results.json |    1 +
 .../net-snmp-devel_security_api_results.json  |    1 +
 .../net-snmp-libs_security_api_results.json   |    1 +
 .../net-snmp-utils_security_api_results.json  |    1 +
 .../net-snmp_security_api_results.json        |    1 +
 .../net-tools_security_api_results.json       |    1 +
 .../netcf-devel_security_api_results.json     |    1 +
 .../netcf-libs_security_api_results.json      |    1 +
 .../netcf_security_api_results.json           |    1 +
 ...tconsole-service_security_api_results.json |    1 +
 .../netlabel_tools_security_api_results.json  |    1 +
 .../netpbm-devel_security_api_results.json    |    1 +
 .../netpbm-doc_security_api_results.json      |    1 +
 .../netpbm-progs_security_api_results.json    |    1 +
 .../netpbm_security_api_results.json          |    1 +
 ...rgeting-pack-2.1_security_api_results.json |    1 +
 .../nettle-devel_security_api_results.json    |    1 +
 .../nettle_security_api_results.json          |    1 +
 ...k-manager-applet_security_api_results.json |    1 +
 ...work-scripts-ppp_security_api_results.json |    1 +
 ...ork-scripts-team_security_api_results.json |    1 +
 .../network-scripts_security_api_results.json |    1 +
 .../newt-devel_security_api_results.json      |    1 +
 .../newt_security_api_results.json            |    1 +
 .../nfs-utils_security_api_results.json       |    1 +
 .../nfs4-acl-tools_security_api_results.json  |    1 +
 .../nftables_security_api_results.json        |    1 +
 .../nghttp2_security_api_results.json         |    1 +
 ...ginx-all-modules_security_api_results.json |    1 +
 ...nginx-filesystem_security_api_results.json |    1 +
 ...ttp-image-filter_security_api_results.json |    1 +
 ...nx-mod-http-perl_security_api_results.json |    1 +
 ...http-xslt-filter_security_api_results.json |    1 +
 .../nginx-mod-mail_security_api_results.json  |    1 +
 ...nginx-mod-stream_security_api_results.json |    1 +
 .../nginx_security_api_results.json           |    1 +
 .../ninja-build_security_api_results.json     |    1 +
 .../nkf_security_api_results.json             |    1 +
 ...onnection-editor_security_api_results.json |    1 +
 .../nmap-ncat_security_api_results.json       |    1 +
 .../nmap_security_api_results.json            |    1 +
 .../nmstate_security_api_results.json         |    1 +
 .../nodejs-devel_security_api_results.json    |    1 +
 .../nodejs-docs_security_api_results.json     |    1 +
 .../nodejs-nodemon_security_api_results.json  |    1 +
 ...nodejs-packaging_security_api_results.json |    1 +
 .../nodejs_security_api_results.json          |    1 +
 .../npm_security_api_results.json             |    1 +
 .../npth_security_api_results.json            |    1 +
 .../nscd_security_api_results.json            |    1 +
 .../nspr-devel_security_api_results.json      |    1 +
 .../nspr_security_api_results.json            |    1 +
 .../nss-altfiles_security_api_results.json    |    1 +
 .../nss-devel_security_api_results.json       |    1 +
 .../nss-pam-ldapd_security_api_results.json   |    1 +
 ...ss-softokn-devel_security_api_results.json |    1 +
 ...okn-freebl-devel_security_api_results.json |    1 +
 ...s-softokn-freebl_security_api_results.json |    1 +
 .../nss-softokn_security_api_results.json     |    1 +
 .../nss-sysinit_security_api_results.json     |    1 +
 .../nss-tools_security_api_results.json       |    1 +
 .../nss-util-devel_security_api_results.json  |    1 +
 .../nss-util_security_api_results.json        |    1 +
 .../nss_db_security_api_results.json          |    1 +
 .../nss_hesiod_security_api_results.json      |    1 +
 .../nss_nis_security_api_results.json         |    1 +
 .../nss_security_api_results.json             |    1 +
 .../nss_wrapper_security_api_results.json     |    1 +
 .../ntpstat_security_api_results.json         |    1 +
 .../ntsysv_security_api_results.json          |    1 +
 .../numactl-devel_security_api_results.json   |    1 +
 .../numactl-libs_security_api_results.json    |    1 +
 .../numactl_security_api_results.json         |    1 +
 .../numad_security_api_results.json           |    1 +
 .../numatop_security_api_results.json         |    1 +
 .../nvme-cli_security_api_results.json        |    1 +
 .../nvmetcli_security_api_results.json        |    1 +
 ...tweb-asm-javadoc_security_api_results.json |    1 +
 .../objectweb-asm_security_api_results.json   |    1 +
 .../objectweb-pom_security_api_results.json   |    1 +
 ...bjenesis-javadoc_security_api_results.json |    1 +
 .../objenesis_security_api_results.json       |    1 +
 ...aml-camlp4-devel_security_api_results.json |    1 +
 .../ocaml-camlp4_security_api_results.json    |    1 +
 ...ml-compiler-libs_security_api_results.json |    1 +
 .../ocaml-cppo_security_api_results.json      |    1 +
 ...aml-extlib-devel_security_api_results.json |    1 +
 .../ocaml-extlib_security_api_results.json    |    1 +
 ...ml-findlib-devel_security_api_results.json |    1 +
 .../ocaml-findlib_security_api_results.json   |    1 +
 ...caml-hivex-devel_security_api_results.json |    1 +
 .../ocaml-hivex_security_api_results.json     |    1 +
 ...aml-labltk-devel_security_api_results.json |    1 +
 .../ocaml-labltk_security_api_results.json    |    1 +
 ...libguestfs-devel_security_api_results.json |    1 +
 ...ocaml-libguestfs_security_api_results.json |    1 +
 ...ocamlbuild-devel_security_api_results.json |    1 +
 ...ocaml-ocamlbuild_security_api_results.json |    1 +
 .../ocaml-ocamldoc_security_api_results.json  |    1 +
 .../ocaml-runtime_security_api_results.json   |    1 +
 ...caml-srpm-macros_security_api_results.json |    1 +
 .../ocaml_security_api_results.json           |    1 +
 ...oci-systemd-hook_security_api_results.json |    1 +
 .../oci-umount_security_api_results.json      |    1 +
 .../ocl-icd-devel_security_api_results.json   |    1 +
 .../ocl-icd_security_api_results.json         |    1 +
 ...oddjob-mkhomedir_security_api_results.json |    1 +
 .../oddjob_security_api_results.json          |    1 +
 .../omping_security_api_results.json          |    1 +
 ...res-scram-client_security_api_results.json |    1 +
 .../ongres-scram_security_api_results.json    |    1 +
 .../oniguruma-devel_security_api_results.json |    1 +
 .../oniguruma_security_api_results.json       |    1 +
 ...dress-resolution_security_api_results.json |    1 +
 .../opa-basic-tools_security_api_results.json |    1 +
 .../opa-fastfabric_security_api_results.json  |    1 +
 .../opa-fm_security_api_results.json          |    1 +
 .../opa-libopamgt_security_api_results.json   |    1 +
 .../opal-firmware_security_api_results.json   |    1 +
 .../opal-prd_security_api_results.json        |    1 +
 .../opal-utils_security_api_results.json      |    1 +
 .../open-sans-fonts_security_api_results.json |    1 +
 ...vm-tools-desktop_security_api_results.json |    1 +
 .../open-vm-tools_security_api_results.json   |    1 +
 ...penal-soft-devel_security_api_results.json |    1 +
 .../openal-soft_security_api_results.json     |    1 +
 .../openblas-Rblas_security_api_results.json  |    1 +
 .../openblas-devel_security_api_results.json  |    1 +
 ...enblas-openmp64__security_api_results.json |    1 +
 ...penblas-openmp64_security_api_results.json |    1 +
 .../openblas-openmp_security_api_results.json |    1 +
 ...enblas-serial64__security_api_results.json |    1 +
 ...penblas-serial64_security_api_results.json |    1 +
 ...blas-srpm-macros_security_api_results.json |    1 +
 .../openblas-static_security_api_results.json |    1 +
 ...nblas-threads64__security_api_results.json |    1 +
 ...enblas-threads64_security_api_results.json |    1 +
 ...openblas-threads_security_api_results.json |    1 +
 .../openblas_security_api_results.json        |    1 +
 .../openchange_security_api_results.json      |    1 +
 ...pencl-filesystem_security_api_results.json |    1 +
 .../opencl-headers_security_api_results.json  |    1 +
 ...ncryptoki-ccatok_security_api_results.json |    1 +
 ...encryptoki-devel_security_api_results.json |    1 +
 ...cryptoki-ep11tok_security_api_results.json |    1 +
 ...ncryptoki-icatok_security_api_results.json |    1 +
 ...cryptoki-icsftok_security_api_results.json |    1 +
 ...pencryptoki-libs_security_api_results.json |    1 +
 ...encryptoki-swtok_security_api_results.json |    1 +
 ...ncryptoki-tpmtok_security_api_results.json |    1 +
 .../opencryptoki_security_api_results.json    |    1 +
 .../opencv-contrib_security_api_results.json  |    1 +
 .../opencv-core_security_api_results.json     |    1 +
 .../opencv-devel_security_api_results.json    |    1 +
 .../opendnssec_security_api_results.json      |    1 +
 .../openhpi-libs_security_api_results.json    |    1 +
 .../openhpi_security_api_results.json         |    1 +
 .../openjade_security_api_results.json        |    1 +
 ...jpeg2-devel-docs_security_api_results.json |    1 +
 .../openjpeg2-devel_security_api_results.json |    1 +
 .../openjpeg2-tools_security_api_results.json |    1 +
 .../openjpeg2_security_api_results.json       |    1 +
 ...openldap-clients_security_api_results.json |    1 +
 .../openldap-devel_security_api_results.json  |    1 +
 .../openldap_security_api_results.json        |    1 +
 .../openmpi-devel_security_api_results.json   |    1 +
 .../openmpi_security_api_results.json         |    1 +
 .../opensc_security_api_results.json          |    1 +
 .../openscap-devel_security_api_results.json  |    1 +
 ...engine-sce-devel_security_api_results.json |    1 +
 ...nscap-engine-sce_security_api_results.json |    1 +
 ...openscap-python3_security_api_results.json |    1 +
 ...openscap-scanner_security_api_results.json |    1 +
 .../openscap-utils_security_api_results.json  |    1 +
 .../openscap_security_api_results.json        |    1 +
 .../openslp_security_api_results.json         |    1 +
 .../opensm-devel_security_api_results.json    |    1 +
 .../opensm-libs_security_api_results.json     |    1 +
 .../opensm_security_api_results.json          |    1 +
 .../opensp-devel_security_api_results.json    |    1 +
 .../opensp_security_api_results.json          |    1 +
 .../openssh-askpass_security_api_results.json |    1 +
 .../openssh-cavs_security_api_results.json    |    1 +
 .../openssh-clients_security_api_results.json |    1 +
 .../openssh-keycat_security_api_results.json  |    1 +
 .../openssh-ldap_security_api_results.json    |    1 +
 .../openssh-server_security_api_results.json  |    1 +
 .../openssh_security_api_results.json         |    1 +
 .../openssl-devel_security_api_results.json   |    1 +
 .../openssl-ibmca_security_api_results.json   |    1 +
 ...penssl-ibmpkcs11_security_api_results.json |    1 +
 .../openssl-libs_security_api_results.json    |    1 +
 .../openssl-perl_security_api_results.json    |    1 +
 .../openssl-pkcs11_security_api_results.json  |    1 +
 .../openssl_security_api_results.json         |    1 +
 ...openwsman-client_security_api_results.json |    1 +
 ...penwsman-python3_security_api_results.json |    1 +
 ...openwsman-server_security_api_results.json |    1 +
 .../opus-devel_security_api_results.json      |    1 +
 .../opus_security_api_results.json            |    1 +
 .../orc-compiler_security_api_results.json    |    1 +
 .../orc-devel_security_api_results.json       |    1 +
 .../orc_security_api_results.json             |    1 +
 .../orca_security_api_results.json            |    1 +
 ...n-plugin-javadoc_security_api_results.json |    1 +
 .../os-maven-plugin_security_api_results.json |    1 +
 .../os-prober_security_api_results.json       |    1 +
 .../osad_security_api_results.json            |    1 +
 ...p-anaconda-addon_security_api_results.json |    1 +
 ...notation-javadoc_security_api_results.json |    1 +
 .../osgi-annotation_security_api_results.json |    1 +
 ...mpendium-javadoc_security_api_results.json |    1 +
 .../osgi-compendium_security_api_results.json |    1 +
 ...sgi-core-javadoc_security_api_results.json |    1 +
 .../osgi-core_security_api_results.json       |    1 +
 .../osinfo-db-tools_security_api_results.json |    1 +
 .../osinfo-db_security_api_results.json       |    1 +
 .../ostree-devel_security_api_results.json    |    1 +
 .../ostree-grub2_security_api_results.json    |    1 +
 .../ostree-libs_security_api_results.json     |    1 +
 .../ostree_security_api_results.json          |    1 +
 .../overpass-fonts_security_api_results.json  |    1 +
 ...rpass-mono-fonts_security_api_results.json |    1 +
 ...-encoder-javadoc_security_api_results.json |    1 +
 ...asp-java-encoder_security_api_results.json |    1 +
 .../p11-kit-devel_security_api_results.json   |    1 +
 .../p11-kit-server_security_api_results.json  |    1 +
 .../p11-kit-trust_security_api_results.json   |    1 +
 .../p11-kit_security_api_results.json         |    1 +
 .../pacemaker-cli_security_api_results.json   |    1 +
 ...ker-cluster-libs_security_api_results.json |    1 +
 .../pacemaker-cts_security_api_results.json   |    1 +
 .../pacemaker-doc_security_api_results.json   |    1 +
 ...maker-libs-devel_security_api_results.json |    1 +
 .../pacemaker-libs_security_api_results.json  |    1 +
 ...plugins-metadata_security_api_results.json |    1 +
 ...pacemaker-remote_security_api_results.json |    1 +
 ...acemaker-schemas_security_api_results.json |    1 +
 .../pacemaker_security_api_results.json       |    1 +
 .../pakchois_security_api_results.json        |    1 +
 ...type-naqsh-fonts_security_api_results.json |    1 +
 ...askh-basic-fonts_security_api_results.json |    1 +
 ...pe-tehreer-fonts_security_api_results.json |    1 +
 .../pam-devel_security_api_results.json       |    1 +
 .../pam_cifscreds_security_api_results.json   |    1 +
 .../pam_security_api_results.json             |    1 +
 ...m_ssh_agent_auth_security_api_results.json |    1 +
 .../pandoc-common_security_api_results.json   |    1 +
 .../pandoc_security_api_results.json          |    1 +
 .../pango-devel_security_api_results.json     |    1 +
 .../pango_security_api_results.json           |    1 +
 .../pangomm-devel_security_api_results.json   |    1 +
 .../pangomm-doc_security_api_results.json     |    1 +
 .../pangomm_security_api_results.json         |    1 +
 .../papi-devel_security_api_results.json      |    1 +
 .../papi-libs_security_api_results.json       |    1 +
 .../papi-testsuite_security_api_results.json  |    1 +
 .../papi_security_api_results.json            |    1 +
 .../paps-libs_security_api_results.json       |    1 +
 .../paps_security_api_results.json            |    1 +
 ...ns-caption-fonts_security_api_results.json |    1 +
 ...pe-pt-sans-fonts_security_api_results.json |    1 +
 ...parfait-examples_security_api_results.json |    1 +
 .../parfait-javadoc_security_api_results.json |    1 +
 .../parfait_security_api_results.json         |    1 +
 .../parted-devel_security_api_results.json    |    1 +
 .../parted_security_api_results.json          |    1 +
 .../passwd_security_api_results.json          |    1 +
 .../patch_security_api_results.json           |    1 +
 .../patchutils_security_api_results.json      |    1 +
 .../pavucontrol_security_api_results.json     |    1 +
 .../pcaudiolib_security_api_results.json      |    1 +
 .../pciutils-devel_security_api_results.json  |    1 +
 .../pciutils-libs_security_api_results.json   |    1 +
 .../pciutils_security_api_results.json        |    1 +
 .../pcp-conf_security_api_results.json        |    1 +
 .../pcp-devel_security_api_results.json       |    1 +
 .../pcp-doc_security_api_results.json         |    1 +
 ...cp2elasticsearch_security_api_results.json |    1 +
 ...ort-pcp2graphite_security_api_results.json |    1 +
 ...ort-pcp2influxdb_security_api_results.json |    1 +
 ...-export-pcp2json_security_api_results.json |    1 +
 ...export-pcp2spark_security_api_results.json |    1 +
 ...p-export-pcp2xml_security_api_results.json |    1 +
 ...xport-pcp2zabbix_security_api_results.json |    1 +
 ...ort-zabbix-agent_security_api_results.json |    1 +
 .../pcp-gui_security_api_results.json         |    1 +
 ...ort-collectl2pcp_security_api_results.json |    1 +
 ...port-ganglia2pcp_security_api_results.json |    1 +
 ...mport-iostat2pcp_security_api_results.json |    1 +
 ...-import-mrtg2pcp_security_api_results.json |    1 +
 ...p-import-sar2pcp_security_api_results.json |    1 +
 .../pcp-libs-devel_security_api_results.json  |    1 +
 .../pcp-libs_security_api_results.json        |    1 +
 .../pcp-manager_security_api_results.json     |    1 +
 ...cp-parfait-agent_security_api_results.json |    1 +
 ...cp-pmda-activemq_security_api_results.json |    1 +
 .../pcp-pmda-apache_security_api_results.json |    1 +
 .../pcp-pmda-bash_security_api_results.json   |    1 +
 .../pcp-pmda-bcc_security_api_results.json    |    1 +
 .../pcp-pmda-bind2_security_api_results.json  |    1 +
 ...pcp-pmda-bonding_security_api_results.json |    1 +
 ...cp-pmda-bpftrace_security_api_results.json |    1 +
 .../pcp-pmda-cifs_security_api_results.json   |    1 +
 .../pcp-pmda-cisco_security_api_results.json  |    1 +
 .../pcp-pmda-dbping_security_api_results.json |    1 +
 .../pcp-pmda-dm_security_api_results.json     |    1 +
 .../pcp-pmda-docker_security_api_results.json |    1 +
 .../pcp-pmda-ds389_security_api_results.json  |    1 +
 ...cp-pmda-ds389log_security_api_results.json |    1 +
 ...da-elasticsearch_security_api_results.json |    1 +
 .../pcp-pmda-gfs2_security_api_results.json   |    1 +
 ...pcp-pmda-gluster_security_api_results.json |    1 +
 .../pcp-pmda-gpfs_security_api_results.json   |    1 +
 .../pcp-pmda-gpsd_security_api_results.json   |    1 +
 ...pcp-pmda-haproxy_security_api_results.json |    1 +
 ...-pmda-infiniband_security_api_results.json |    1 +
 .../pcp-pmda-json_security_api_results.json   |    1 +
 ...pcp-pmda-libvirt_security_api_results.json |    1 +
 .../pcp-pmda-lio_security_api_results.json    |    1 +
 ...p-pmda-lmsensors_security_api_results.json |    1 +
 .../pcp-pmda-logger_security_api_results.json |    1 +
 .../pcp-pmda-lustre_security_api_results.json |    1 +
 ...-pmda-lustrecomm_security_api_results.json |    1 +
 .../pcp-pmda-mailq_security_api_results.json  |    1 +
 ...cp-pmda-memcache_security_api_results.json |    1 +
 .../pcp-pmda-mic_security_api_results.json    |    1 +
 .../pcp-pmda-mounts_security_api_results.json |    1 +
 .../pcp-pmda-mssql_security_api_results.json  |    1 +
 .../pcp-pmda-mysql_security_api_results.json  |    1 +
 .../pcp-pmda-named_security_api_results.json  |    1 +
 ...cp-pmda-netcheck_security_api_results.json |    1 +
 ...p-pmda-netfilter_security_api_results.json |    1 +
 .../pcp-pmda-news_security_api_results.json   |    1 +
 ...p-pmda-nfsclient_security_api_results.json |    1 +
 .../pcp-pmda-nginx_security_api_results.json  |    1 +
 ...-pmda-nvidia-gpu_security_api_results.json |    1 +
 ...pmda-openmetrics_security_api_results.json |    1 +
 .../pcp-pmda-oracle_security_api_results.json |    1 +
 .../pcp-pmda-pdns_security_api_results.json   |    1 +
 ...p-pmda-perfevent_security_api_results.json |    1 +
 .../pcp-pmda-podman_security_api_results.json |    1 +
 ...pcp-pmda-postfix_security_api_results.json |    1 +
 ...-pmda-postgresql_security_api_results.json |    1 +
 .../pcp-pmda-redis_security_api_results.json  |    1 +
 ...cp-pmda-roomtemp_security_api_results.json |    1 +
 .../pcp-pmda-rpm_security_api_results.json    |    1 +
 ...pcp-pmda-rsyslog_security_api_results.json |    1 +
 .../pcp-pmda-samba_security_api_results.json  |    1 +
 ...cp-pmda-sendmail_security_api_results.json |    1 +
 .../pcp-pmda-shping_security_api_results.json |    1 +
 .../pcp-pmda-slurm_security_api_results.json  |    1 +
 .../pcp-pmda-smart_security_api_results.json  |    1 +
 .../pcp-pmda-snmp_security_api_results.json   |    1 +
 ...pcp-pmda-summary_security_api_results.json |    1 +
 ...pcp-pmda-systemd_security_api_results.json |    1 +
 .../pcp-pmda-trace_security_api_results.json  |    1 +
 ...pcp-pmda-unbound_security_api_results.json |    1 +
 .../pcp-pmda-vmware_security_api_results.json |    1 +
 .../pcp-pmda-weblog_security_api_results.json |    1 +
 .../pcp-pmda-zimbra_security_api_results.json |    1 +
 .../pcp-pmda-zswap_security_api_results.json  |    1 +
 .../pcp-selinux_security_api_results.json     |    1 +
 ...pcp-system-tools_security_api_results.json |    1 +
 .../pcp-testsuite_security_api_results.json   |    1 +
 .../pcp-zeroconf_security_api_results.json    |    1 +
 .../pcp_security_api_results.json             |    1 +
 .../pcre-cpp_security_api_results.json        |    1 +
 .../pcre-devel_security_api_results.json      |    1 +
 .../pcre-static_security_api_results.json     |    1 +
 .../pcre-utf16_security_api_results.json      |    1 +
 .../pcre-utf32_security_api_results.json      |    1 +
 .../pcre2-devel_security_api_results.json     |    1 +
 .../pcre2-utf16_security_api_results.json     |    1 +
 .../pcre2-utf32_security_api_results.json     |    1 +
 .../pcre2_security_api_results.json           |    1 +
 .../pcre_security_api_results.json            |    1 +
 .../pcs-snmp_security_api_results.json        |    1 +
 .../pcs_security_api_results.json             |    1 +
 .../pcsc-lite-ccid_security_api_results.json  |    1 +
 .../pcsc-lite-devel_security_api_results.json |    1 +
 .../pcsc-lite-doc_security_api_results.json   |    1 +
 .../pcsc-lite-libs_security_api_results.json  |    1 +
 .../pcsc-lite_security_api_results.json       |    1 +
 .../pentaho-libxml_security_api_results.json  |    1 +
 ...ting-flow-engine_security_api_results.json |    1 +
 .../perf_security_api_results.json            |    1 +
 .../perftest_security_api_results.json        |    1 +
 .../peripety_security_api_results.json        |    1 +
 ...l-Algorithm-Diff_security_api_results.json |    1 +
 .../perl-AnyEvent_security_api_results.json   |    1 +
 ...rl-App-cpanminus_security_api_results.json |    1 +
 ...perl-Archive-Tar_security_api_results.json |    1 +
 ...perl-Archive-Zip_security_api_results.json |    1 +
 ...tribute-Handlers_security_api_results.json |    1 +
 ...perl-Authen-SASL_security_api_results.json |    1 +
 .../perl-B-Debug_security_api_results.json    |    1 +
 ...Hooks-EndOfScope_security_api_results.json |    1 +
 .../perl-B-Lint_security_api_results.json     |    1 +
 .../perl-Bit-Vector_security_api_results.json |    1 +
 .../perl-CGI_security_api_results.json        |    1 +
 ...PAN-DistnameInfo_security_api_results.json |    1 +
 ...-CPAN-Meta-Check_security_api_results.json |    1 +
 ...eta-Requirements_security_api_results.json |    1 +
 ...l-CPAN-Meta-YAML_security_api_results.json |    1 +
 .../perl-CPAN-Meta_security_api_results.json  |    1 +
 .../perl-CPAN_security_api_results.json       |    1 +
 ...Canary-Stability_security_api_results.json |    1 +
 ...erl-Capture-Tiny_security_api_results.json |    1 +
 .../perl-Carp-Clan_security_api_results.json  |    1 +
 .../perl-Carp_security_api_results.json       |    1 +
 ...l-Class-Accessor_security_api_results.json |    1 +
 ...Data-Inheritable_security_api_results.json |    1 +
 ...ass-Factory-Util_security_api_results.json |    1 +
 .../perl-Class-ISA_security_api_results.json  |    1 +
 ...-Class-Inspector_security_api_results.json |    1 +
 ...Method-Modifiers_security_api_results.json |    1 +
 ...-Class-Singleton_security_api_results.json |    1 +
 .../perl-Class-Tiny_security_api_results.json |    1 +
 ...Class-XSAccessor_security_api_results.json |    1 +
 .../perl-Clone_security_api_results.json      |    1 +
 ...l-Compress-Bzip2_security_api_results.json |    1 +
 ...mpress-Raw-Bzip2_security_api_results.json |    1 +
 ...ompress-Raw-Zlib_security_api_results.json |    1 +
 ...-Config-AutoConf_security_api_results.json |    1 +
 ...rl-Config-Perl-V_security_api_results.json |    1 +
 ...erl-Convert-ASN1_security_api_results.json |    1 +
 ...t-OpenSSL-Bignum_security_api_results.json |    1 +
 ...rypt-OpenSSL-RSA_security_api_results.json |    1 +
 ...t-OpenSSL-Random_security_api_results.json |    1 +
 .../perl-DBD-MySQL_security_api_results.json  |    1 +
 .../perl-DBD-Pg_security_api_results.json     |    1 +
 .../perl-DBD-SQLite_security_api_results.json |    1 +
 .../perl-DBI_security_api_results.json        |    1 +
 .../perl-DB_File_security_api_results.json    |    1 +
 .../perl-Data-Dump_security_api_results.json  |    1 +
 ...perl-Data-Dumper_security_api_results.json |    1 +
 ...erl-Data-OptList_security_api_results.json |    1 +
 ...erl-Data-Section_security_api_results.json |    1 +
 .../perl-Data-UUID_security_api_results.json  |    1 +
 .../perl-Date-Calc_security_api_results.json  |    1 +
 ...erl-Date-ISO8601_security_api_results.json |    1 +
 .../perl-Date-Manip_security_api_results.json |    1 +
 ...e-Format-Builder_security_api_results.json |    1 +
 ...Time-Format-HTTP_security_api_results.json |    1 +
 ...e-Format-ISO8601_security_api_results.json |    1 +
 ...Time-Format-Mail_security_api_results.json |    1 +
 ...-Format-Strptime_security_api_results.json |    1 +
 ...-DateTime-Locale_security_api_results.json |    1 +
 ...TimeZone-SystemV_security_api_results.json |    1 +
 ...-TimeZone-Tzfile_security_api_results.json |    1 +
 ...ateTime-TimeZone_security_api_results.json |    1 +
 .../perl-DateTime_security_api_results.json   |    1 +
 ...evel-CallChecker_security_api_results.json |    1 +
 ...erl-Devel-Caller_security_api_results.json |    1 +
 ...l-Devel-CheckLib_security_api_results.json |    1 +
 ...lobalDestruction_security_api_results.json |    1 +
 ...l-Devel-LexAlias_security_api_results.json |    1 +
 ...erl-Devel-PPPort_security_api_results.json |    1 +
 .../perl-Devel-Peek_security_api_results.json |    1 +
 ...evel-SelfStubber_security_api_results.json |    1 +
 .../perl-Devel-Size_security_api_results.json |    1 +
 ...Devel-StackTrace_security_api_results.json |    1 +
 ...rl-Devel-Symdump_security_api_results.json |    1 +
 .../perl-Digest-CRC_security_api_results.json |    1 +
 ...perl-Digest-HMAC_security_api_results.json |    1 +
 .../perl-Digest-MD5_security_api_results.json |    1 +
 ...perl-Digest-SHA1_security_api_results.json |    1 +
 .../perl-Digest-SHA_security_api_results.json |    1 +
 .../perl-Digest_security_api_results.json     |    1 +
 ...t-CheckConflicts_security_api_results.json |    1 +
 ...Loader-Functions_security_api_results.json |    1 +
 ...rl-Encode-Detect_security_api_results.json |    1 +
 ...rl-Encode-Locale_security_api_results.json |    1 +
 ...erl-Encode-devel_security_api_results.json |    1 +
 .../perl-Encode_security_api_results.json     |    1 +
 .../perl-Env_security_api_results.json        |    1 +
 .../perl-Errno_security_api_results.json      |    1 +
 .../perl-Error_security_api_results.json      |    1 +
 ...erl-Eval-Closure_security_api_results.json |    1 +
 ...-Exception-Class_security_api_results.json |    1 +
 ...rl-Exporter-Tiny_security_api_results.json |    1 +
 .../perl-Exporter_security_api_results.json   |    1 +
 ...xtUtils-CBuilder_security_api_results.json |    1 +
 ...ExtUtils-Command_security_api_results.json |    1 +
 ...l-ExtUtils-Embed_security_api_results.json |    1 +
 ...ExtUtils-Install_security_api_results.json |    1 +
 ...xtUtils-MM-Utils_security_api_results.json |    1 +
 ...tUtils-MakeMaker_security_api_results.json |    1 +
 ...xtUtils-Manifest_security_api_results.json |    1 +
 ...xtUtils-Miniperl_security_api_results.json |    1 +
 ...ExtUtils-ParseXS_security_api_results.json |    1 +
 .../perl-FCGI_security_api_results.json       |    1 +
 .../perl-Fedora-VSP_security_api_results.json |    1 +
 ...erl-File-BaseDir_security_api_results.json |    1 +
 ...l-File-CheckTree_security_api_results.json |    1 +
 ...e-Copy-Recursive_security_api_results.json |    1 +
 ...ile-DesktopEntry_security_api_results.json |    1 +
 .../perl-File-Fetch_security_api_results.json |    1 +
 ...File-Find-Object_security_api_results.json |    1 +
 ...l-File-Find-Rule_security_api_results.json |    1 +
 ...erl-File-HomeDir_security_api_results.json |    1 +
 ...erl-File-Listing_security_api_results.json |    1 +
 ...rl-File-MimeInfo_security_api_results.json |    1 +
 .../perl-File-Path_security_api_results.json  |    1 +
 ...le-ReadBackwards_security_api_results.json |    1 +
 ...perl-File-Remove_security_api_results.json |    1 +
 ...rl-File-ShareDir_security_api_results.json |    1 +
 .../perl-File-Slurp_security_api_results.json |    1 +
 .../perl-File-Temp_security_api_results.json  |    1 +
 .../perl-File-Which_security_api_results.json |    1 +
 .../perl-File-chdir_security_api_results.json |    1 +
 .../perl-File-pushd_security_api_results.json |    1 +
 ...rl-Filter-Simple_security_api_results.json |    1 +
 .../perl-Filter_security_api_results.json     |    1 +
 .../perl-GSSAPI_security_api_results.json     |    1 +
 ...perl-Getopt-Long_security_api_results.json |    1 +
 .../perl-Git-SVN_security_api_results.json    |    1 +
 .../perl-Git_security_api_results.json        |    1 +
 ...perl-HTML-Parser_security_api_results.json |    1 +
 ...perl-HTML-Tagset_security_api_results.json |    1 +
 .../perl-HTML-Tree_security_api_results.json  |    1 +
 ...erl-HTTP-Cookies_security_api_results.json |    1 +
 ...perl-HTTP-Daemon_security_api_results.json |    1 +
 .../perl-HTTP-Date_security_api_results.json  |    1 +
 ...erl-HTTP-Message_security_api_results.json |    1 +
 ...l-HTTP-Negotiate_security_api_results.json |    1 +
 .../perl-HTTP-Tiny_security_api_results.json  |    1 +
 .../perl-IO-All_security_api_results.json     |    1 +
 ...perl-IO-Compress_security_api_results.json |    1 +
 .../perl-IO-HTML_security_api_results.json    |    1 +
 ...erl-IO-Multiplex_security_api_results.json |    1 +
 ...-IO-Socket-INET6_security_api_results.json |    1 +
 ...erl-IO-Socket-IP_security_api_results.json |    1 +
 ...rl-IO-Socket-SSL_security_api_results.json |    1 +
 .../perl-IO-String_security_api_results.json  |    1 +
 .../perl-IO-Tty_security_api_results.json     |    1 +
 .../perl-IO-Zlib_security_api_results.json    |    1 +
 .../perl-IO-stringy_security_api_results.json |    1 +
 .../perl-IO_security_api_results.json         |    1 +
 .../perl-IPC-Cmd_security_api_results.json    |    1 +
 .../perl-IPC-Run3_security_api_results.json   |    1 +
 .../perl-IPC-Run_security_api_results.json    |    1 +
 .../perl-IPC-SysV_security_api_results.json   |    1 +
 ...PC-System-Simple_security_api_results.json |    1 +
 ...perl-Import-Into_security_api_results.json |    1 +
 .../perl-Importer_security_api_results.json   |    1 +
 .../perl-JSON-PP_security_api_results.json    |    1 +
 .../perl-JSON-XS_security_api_results.json    |    1 +
 .../perl-JSON_security_api_results.json       |    1 +
 .../perl-LDAP_security_api_results.json       |    1 +
 ...l-LWP-MediaTypes_security_api_results.json |    1 +
 ...P-Protocol-https_security_api_results.json |    1 +
 ...ist-MoreUtils-XS_security_api_results.json |    1 +
 ...l-List-MoreUtils_security_api_results.json |    1 +
 ...erl-Locale-Codes_security_api_results.json |    1 +
 ...-Maketext-Simple_security_api_results.json |    1 +
 ...-Locale-Maketext_security_api_results.json |    1 +
 ...l-Locale-gettext_security_api_results.json |    1 +
 ...perl-MIME-Base64_security_api_results.json |    1 +
 ...erl-MIME-Charset_security_api_results.json |    1 +
 .../perl-MIME-Types_security_api_results.json |    1 +
 .../perl-MRO-Compat_security_api_results.json |    1 +
 .../perl-Mail-DKIM_security_api_results.json  |    1 +
 .../perl-Mail-SPF_security_api_results.json   |    1 +
 .../perl-MailTools_security_api_results.json  |    1 +
 ...-BigInt-FastCalc_security_api_results.json |    1 +
 ...perl-Math-BigInt_security_api_results.json |    1 +
 ...perl-Math-BigRat_security_api_results.json |    1 +
 ...erl-Math-Complex_security_api_results.json |    1 +
 .../perl-Memoize_security_api_results.json    |    1 +
 ...erl-Module-Build_security_api_results.json |    1 +
 ...-Module-CPANfile_security_api_results.json |    1 +
 ...e-CoreList-tools_security_api_results.json |    1 +
 ...-Module-CoreList_security_api_results.json |    1 +
 ...e-Implementation_security_api_results.json |    1 +
 ...tall-AuthorTests_security_api_results.json |    1 +
 ...ll-ReadmeFromPod_security_api_results.json |    1 +
 ...l-Module-Install_security_api_results.json |    1 +
 ...Load-Conditional_security_api_results.json |    1 +
 ...perl-Module-Load_security_api_results.json |    1 +
 ...rl-Module-Loaded_security_api_results.json |    1 +
 ...-Module-Metadata_security_api_results.json |    1 +
 ...Module-Pluggable_security_api_results.json |    1 +
 ...l-Module-Runtime_security_api_results.json |    1 +
 ...-Module-ScanDeps_security_api_results.json |    1 +
 .../perl-Mozilla-CA_security_api_results.json |    1 +
 ...erl-Mozilla-LDAP_security_api_results.json |    1 +
 .../perl-NKF_security_api_results.json        |    1 +
 .../perl-NTLM_security_api_results.json       |    1 +
 .../perl-Net-DNS_security_api_results.json    |    1 +
 .../perl-Net-HTTP_security_api_results.json   |    1 +
 .../perl-Net-Ping_security_api_results.json   |    1 +
 ...erl-Net-SMTP-SSL_security_api_results.json |    1 +
 .../perl-Net-SSLeay_security_api_results.json |    1 +
 .../perl-Net-Server_security_api_results.json |    1 +
 .../perl-NetAddr-IP_security_api_results.json |    1 +
 ...l-Number-Compare_security_api_results.json |    1 +
 ...rl-PCP-LogImport_security_api_results.json |    1 +
 ...l-PCP-LogSummary_security_api_results.json |    1 +
 .../perl-PCP-MMV_security_api_results.json    |    1 +
 .../perl-PCP-PMDA_security_api_results.json   |    1 +
 ...precationManager_security_api_results.json |    1 +
 ...ackage-Generator_security_api_results.json |    1 +
 ...Package-Stash-XS_security_api_results.json |    1 +
 ...rl-Package-Stash_security_api_results.json |    1 +
 .../perl-PadWalker_security_api_results.json  |    1 +
 ...erl-Params-Check_security_api_results.json |    1 +
 ...-Params-Classify_security_api_results.json |    1 +
 ...perl-Params-Util_security_api_results.json |    1 +
 ...-Params-Validate_security_api_results.json |    1 +
 ...lidationCompiler_security_api_results.json |    1 +
 ...erl-Parse-PMFile_security_api_results.json |    1 +
 .../perl-Parse-Yapp_security_api_results.json |    1 +
 .../perl-Path-Tiny_security_api_results.json  |    1 +
 .../perl-PathTools_security_api_results.json  |    1 +
 ...l-Destruct-Level_security_api_results.json |    1 +
 ...perl-Perl-OSType_security_api_results.json |    1 +
 ...rlIO-utf8_strict_security_api_results.json |    1 +
 ...-via-QuotedPrint_security_api_results.json |    1 +
 ...perl-Pod-Checker_security_api_results.json |    1 +
 ...erl-Pod-Coverage_security_api_results.json |    1 +
 ...perl-Pod-Escapes_security_api_results.json |    1 +
 .../perl-Pod-Html_security_api_results.json   |    1 +
 .../perl-Pod-LaTeX_security_api_results.json  |    1 +
 ...erl-Pod-Markdown_security_api_results.json |    1 +
 .../perl-Pod-Parser_security_api_results.json |    1 +
 ...perl-Pod-Perldoc_security_api_results.json |    1 +
 ...perl-Pod-Plainer_security_api_results.json |    1 +
 .../perl-Pod-Simple_security_api_results.json |    1 +
 .../perl-Pod-Usage_security_api_results.json  |    1 +
 .../perl-Readonly_security_api_results.json   |    1 +
 ...perl-Ref-Util-XS_security_api_results.json |    1 +
 .../perl-Ref-Util_security_api_results.json   |    1 +
 .../perl-Role-Tiny_security_api_results.json  |    1 +
 .../perl-SGMLSpm_security_api_results.json    |    1 +
 ...erl-SNMP_Session_security_api_results.json |    1 +
 .../perl-SUPER_security_api_results.json      |    1 +
 ...calar-List-Utils_security_api_results.json |    1 +
 ...perl-Scope-Guard_security_api_results.json |    1 +
 .../perl-SelfLoader_security_api_results.json |    1 +
 .../perl-Socket6_security_api_results.json    |    1 +
 .../perl-Socket_security_api_results.json     |    1 +
 ...Software-License_security_api_results.json |    1 +
 .../perl-Specio_security_api_results.json     |    1 +
 .../perl-Storable_security_api_results.json   |    1 +
 ...erl-String-CRC32_security_api_results.json |    1 +
 ...tring-ShellQuote_security_api_results.json |    1 +
 ...rter-Progressive_security_api_results.json |    1 +
 ...erl-Sub-Exporter_security_api_results.json |    1 +
 ...erl-Sub-Identify_security_api_results.json |    1 +
 .../perl-Sub-Info_security_api_results.json   |    1 +
 ...perl-Sub-Install_security_api_results.json |    1 +
 .../perl-Sub-Name_security_api_results.json   |    1 +
 ...perl-Sub-Uplevel_security_api_results.json |    1 +
 .../perl-Switch_security_api_results.json     |    1 +
 .../perl-Sys-CPU_security_api_results.json    |    1 +
 ...perl-Sys-Guestfs_security_api_results.json |    1 +
 ...perl-Sys-MemInfo_security_api_results.json |    1 +
 .../perl-Sys-Syslog_security_api_results.json |    1 +
 .../perl-Sys-Virt_security_api_results.json   |    1 +
 ...rl-Taint-Runtime_security_api_results.json |    1 +
 ...l-Term-ANSIColor_security_api_results.json |    1 +
 .../perl-Term-Cap_security_api_results.json   |    1 +
 ...rl-Term-Size-Any_security_api_results.json |    1 +
 ...l-Term-Size-Perl_security_api_results.json |    1 +
 .../perl-Term-Table_security_api_results.json |    1 +
 ...perl-TermReadKey_security_api_results.json |    1 +
 .../perl-Test-Deep_security_api_results.json  |    1 +
 ...Test-Differences_security_api_results.json |    1 +
 ...l-Test-Exception_security_api_results.json |    1 +
 .../perl-Test-Fatal_security_api_results.json |    1 +
 ...erl-Test-Harness_security_api_results.json |    1 +
 ...-Test-LongString_security_api_results.json |    1 +
 ...-Test-NoWarnings_security_api_results.json |    1 +
 ...est-Pod-Coverage_security_api_results.json |    1 +
 .../perl-Test-Pod_security_api_results.json   |    1 +
 ...rl-Test-Requires_security_api_results.json |    1 +
 ...perl-Test-Simple_security_api_results.json |    1 +
 .../perl-Test-Taint_security_api_results.json |    1 +
 .../perl-Test-Warn_security_api_results.json  |    1 +
 ...rl-Test-Warnings_security_api_results.json |    1 +
 ...perl-Test2-Suite_security_api_results.json |    1 +
 .../perl-Test_security_api_results.json       |    1 +
 ...rl-Text-Balanced_security_api_results.json |    1 +
 ...l-Text-CharWidth_security_api_results.json |    1 +
 .../perl-Text-Diff_security_api_results.json  |    1 +
 .../perl-Text-Glob_security_api_results.json  |    1 +
 ...-Text-ParseWords_security_api_results.json |    1 +
 ...erl-Text-Soundex_security_api_results.json |    1 +
 ...l-Text-Tabs+Wrap_security_api_results.json |    1 +
 ...rl-Text-Template_security_api_results.json |    1 +
 ...l-Text-Unidecode_security_api_results.json |    1 +
 ...rl-Text-WrapI18N_security_api_results.json |    1 +
 ...erl-Thread-Queue_security_api_results.json |    1 +
 .../perl-Tie-IxHash_security_api_results.json |    1 +
 .../perl-Time-HiRes_security_api_results.json |    1 +
 .../perl-Time-Local_security_api_results.json |    1 +
 .../perl-Time-Piece_security_api_results.json |    1 +
 .../perl-TimeDate_security_api_results.json   |    1 +
 .../perl-Tk-devel_security_api_results.json   |    1 +
 .../perl-Tk_security_api_results.json         |    1 +
 .../perl-Try-Tiny_security_api_results.json   |    1 +
 ...Types-Serialiser_security_api_results.json |    1 +
 .../perl-URI_security_api_results.json        |    1 +
 ...-Unicode-Collate_security_api_results.json |    1 +
 ...e-EastAsianWidth_security_api_results.json |    1 +
 ...nicode-LineBreak_security_api_results.json |    1 +
 ...nicode-Normalize_security_api_results.json |    1 +
 ...erl-Unicode-UTF8_security_api_results.json |    1 +
 ...perl-Unix-Syslog_security_api_results.json |    1 +
 ...l-Variable-Magic_security_api_results.json |    1 +
 ...l-WWW-RobotRules_security_api_results.json |    1 +
 ...perl-XML-Catalog_security_api_results.json |    1 +
 .../perl-XML-DOM_security_api_results.json    |    1 +
 .../perl-XML-LibXML_security_api_results.json |    1 +
 ...NamespaceSupport_security_api_results.json |    1 +
 .../perl-XML-Parser_security_api_results.json |    1 +
 .../perl-XML-RegExp_security_api_results.json |    1 +
 ...erl-XML-SAX-Base_security_api_results.json |    1 +
 .../perl-XML-SAX_security_api_results.json    |    1 +
 .../perl-XML-Simple_security_api_results.json |    1 +
 ...l-XML-TokeParser_security_api_results.json |    1 +
 .../perl-XML-Twig_security_api_results.json   |    1 +
 .../perl-XML-XPath_security_api_results.json  |    1 +
 ...erl-YAML-LibYAML_security_api_results.json |    1 +
 .../perl-YAML-Syck_security_api_results.json  |    1 +
 .../perl-YAML-Tiny_security_api_results.json  |    1 +
 .../perl-YAML_security_api_results.json       |    1 +
 .../perl-autodie_security_api_results.json    |    1 +
 .../perl-bignum_security_api_results.json     |    1 +
 ...erl-common-sense_security_api_results.json |    1 +
 .../perl-constant_security_api_results.json   |    1 +
 .../perl-core_security_api_results.json       |    1 +
 .../perl-devel_security_api_results.json      |    1 +
 .../perl-encoding_security_api_results.json   |    1 +
 ...erl-experimental_security_api_results.json |    1 +
 .../perl-generators_security_api_results.json |    1 +
 .../perl-hivex_security_api_results.json      |    1 +
 .../perl-homedir_security_api_results.json    |    1 +
 .../perl-inc-latest_security_api_results.json |    1 +
 ...perl-interpreter_security_api_results.json |    1 +
 ...erl-libintl-perl_security_api_results.json |    1 +
 .../perl-libnet_security_api_results.json     |    1 +
 .../perl-libnetcfg_security_api_results.json  |    1 +
 .../perl-libs_security_api_results.json       |    1 +
 ...perl-libwww-perl_security_api_results.json |    1 +
 ...perl-libxml-perl_security_api_results.json |    1 +
 .../perl-local-lib_security_api_results.json  |    1 +
 .../perl-macros_security_api_results.json     |    1 +
 ...espace-autoclean_security_api_results.json |    1 +
 ...-namespace-clean_security_api_results.json |    1 +
 .../perl-open_security_api_results.json       |    1 +
 .../perl-parent_security_api_results.json     |    1 +
 .../perl-perlfaq_security_api_results.json    |    1 +
 .../perl-podlators_security_api_results.json  |    1 +
 .../perl-prefork_security_api_results.json    |    1 +
 ...perl-srpm-macros_security_api_results.json |    1 +
 .../perl-tests_security_api_results.json      |    1 +
 ...l-threads-shared_security_api_results.json |    1 +
 .../perl-threads_security_api_results.json    |    1 +
 .../perl-utils_security_api_results.json      |    1 +
 .../perl-version_security_api_results.json    |    1 +
 .../perl_security_api_results.json            |    1 +
 .../perltidy_security_api_results.json        |    1 +
 .../pesign_security_api_results.json          |    1 +
 .../pgaudit_security_api_results.json         |    1 +
 .../php-bcmath_security_api_results.json      |    1 +
 .../php-cli_security_api_results.json         |    1 +
 .../php-common_security_api_results.json      |    1 +
 .../php-dba_security_api_results.json         |    1 +
 .../php-dbg_security_api_results.json         |    1 +
 .../php-devel_security_api_results.json       |    1 +
 .../php-embedded_security_api_results.json    |    1 +
 .../php-enchant_security_api_results.json     |    1 +
 .../php-fpm_security_api_results.json         |    1 +
 .../php-gd_security_api_results.json          |    1 +
 .../php-gmp_security_api_results.json         |    1 +
 .../php-intl_security_api_results.json        |    1 +
 .../php-json_security_api_results.json        |    1 +
 .../php-ldap_security_api_results.json        |    1 +
 .../php-mbstring_security_api_results.json    |    1 +
 .../php-mysqlnd_security_api_results.json     |    1 +
 .../php-odbc_security_api_results.json        |    1 +
 .../php-opcache_security_api_results.json     |    1 +
 .../php-pdo_security_api_results.json         |    1 +
 .../php-pear_security_api_results.json        |    1 +
 ...-pecl-apcu-devel_security_api_results.json |    1 +
 .../php-pecl-apcu_security_api_results.json   |    1 +
 .../php-pecl-rrd_security_api_results.json    |    1 +
 .../php-pecl-xdebug_security_api_results.json |    1 +
 .../php-pecl-zip_security_api_results.json    |    1 +
 .../php-pgsql_security_api_results.json       |    1 +
 .../php-process_security_api_results.json     |    1 +
 .../php-recode_security_api_results.json      |    1 +
 .../php-snmp_security_api_results.json        |    1 +
 .../php-soap_security_api_results.json        |    1 +
 .../php-xml_security_api_results.json         |    1 +
 .../php-xmlrpc_security_api_results.json      |    1 +
 .../php_security_api_results.json             |    1 +
 .../pidgin-devel_security_api_results.json    |    1 +
 .../pidgin-sipe_security_api_results.json     |    1 +
 .../pidgin_security_api_results.json          |    1 +
 .../pigz_security_api_results.json            |    1 +
 .../pinentry-emacs_security_api_results.json  |    1 +
 .../pinentry-gnome3_security_api_results.json |    1 +
 .../pinentry-gtk_security_api_results.json    |    1 +
 .../pinentry_security_api_results.json        |    1 +
 .../pinfo_security_api_results.json           |    1 +
 .../pipewire-devel_security_api_results.json  |    1 +
 .../pipewire-doc_security_api_results.json    |    1 +
 .../pipewire-libs_security_api_results.json   |    1 +
 .../pipewire-utils_security_api_results.json  |    1 +
 .../pipewire_security_api_results.json        |    1 +
 .../pixman-devel_security_api_results.json    |    1 +
 .../pixman_security_api_results.json          |    1 +
 .../pkgconf-m4_security_api_results.json      |    1 +
 ...gconf-pkg-config_security_api_results.json |    1 +
 .../pkgconf_security_api_results.json         |    1 +
 .../pki-base-java_security_api_results.json   |    1 +
 .../pki-base_security_api_results.json        |    1 +
 .../pki-ca_security_api_results.json          |    1 +
 .../pki-core_security_api_results.json        |    1 +
 .../pki-deps_security_api_results.json        |    1 +
 .../pki-kra_security_api_results.json         |    1 +
 .../pki-server_security_api_results.json      |    1 +
 ...-servlet-4.0-api_security_api_results.json |    1 +
 ...i-servlet-engine_security_api_results.json |    1 +
 .../pki-symkey_security_api_results.json      |    1 +
 .../pki-tools_security_api_results.json       |    1 +
 ...-python-coverage_security_api_results.json |    1 +
 ...orm-python-debug_security_api_results.json |    1 +
 ...orm-python-devel_security_api_results.json |    1 +
 ...tform-python-pip_security_api_results.json |    1 +
 ...ython-setuptools_security_api_results.json |    1 +
 .../platform-python_security_api_results.json |    1 +
 ...-factory-javadoc_security_api_results.json |    1 +
 ...exus-ant-factory_security_api_results.json |    1 +
 ...archiver-javadoc_security_api_results.json |    1 +
 .../plexus-archiver_security_api_results.json |    1 +
 ...-factory-javadoc_security_api_results.json |    1 +
 ...exus-bsh-factory_security_api_results.json |    1 +
 ...uild-api-javadoc_security_api_results.json |    1 +
 ...plexus-build-api_security_api_results.json |    1 +
 ...s-cipher-javadoc_security_api_results.json |    1 +
 .../plexus-cipher_security_api_results.json   |    1 +
 ...ssworlds-javadoc_security_api_results.json |    1 +
 ...exus-classworlds_security_api_results.json |    1 +
 ...exus-cli-javadoc_security_api_results.json |    1 +
 .../plexus-cli_security_api_results.json      |    1 +
 ...-compiler-extras_security_api_results.json |    1 +
 ...compiler-javadoc_security_api_results.json |    1 +
 ...xus-compiler-pom_security_api_results.json |    1 +
 .../plexus-compiler_security_api_results.json |    1 +
 ...nent-api-javadoc_security_api_results.json |    1 +
 ...us-component-api_security_api_results.json |    1 +
 ...nt-factories-pom_security_api_results.json |    1 +
 ...s-components-pom_security_api_results.json |    1 +
 ...nent-annotations_security_api_results.json |    1 +
 ...omponent-javadoc_security_api_results.json |    1 +
 ...mponent-metadata_security_api_results.json |    1 +
 ...ontainer-default_security_api_results.json |    1 +
 ...ntainers-javadoc_security_api_results.json |    1 +
 ...lexus-containers_security_api_results.json |    1 +
 ...xus-i18n-javadoc_security_api_results.json |    1 +
 .../plexus-i18n_security_api_results.json     |    1 +
 ...nteractivity-api_security_api_results.json |    1 +
 ...activity-javadoc_security_api_results.json |    1 +
 ...eractivity-jline_security_api_results.json |    1 +
 ...us-interactivity_security_api_results.json |    1 +
 ...polation-javadoc_security_api_results.json |    1 +
 ...us-interpolation_security_api_results.json |    1 +
 ...lexus-io-javadoc_security_api_results.json |    1 +
 .../plexus-io_security_api_results.json       |    1 +
 ...anguages-javadoc_security_api_results.json |    1 +
 ...plexus-languages_security_api_results.json |    1 +
 .../plexus-pom_security_api_results.json      |    1 +
 ...esources-javadoc_security_api_results.json |    1 +
 ...plexus-resources_security_api_results.json |    1 +
 ...spatcher-javadoc_security_api_results.json |    1 +
 ...s-sec-dispatcher_security_api_results.json |    1 +
 ...us-utils-javadoc_security_api_results.json |    1 +
 .../plexus-utils_security_api_results.json    |    1 +
 ...velocity-javadoc_security_api_results.json |    1 +
 .../plexus-velocity_security_api_results.json |    1 +
 .../plotutils-devel_security_api_results.json |    1 +
 .../plotutils_security_api_results.json       |    1 +
 ...ymouth-core-libs_security_api_results.json |    1 +
 ...th-graphics-libs_security_api_results.json |    1 +
 ...in-fade-throbber_security_api_results.json |    1 +
 ...uth-plugin-label_security_api_results.json |    1 +
 ...th-plugin-script_security_api_results.json |    1 +
 ...gin-space-flares_security_api_results.json |    1 +
 ...lugin-throbgress_security_api_results.json |    1 +
 ...-plugin-two-step_security_api_results.json |    1 +
 ...plymouth-scripts_security_api_results.json |    1 +
 ...uth-system-theme_security_api_results.json |    1 +
 ...uth-theme-charge_security_api_results.json |    1 +
 ...th-theme-fade-in_security_api_results.json |    1 +
 ...uth-theme-script_security_api_results.json |    1 +
 ...outh-theme-solar_security_api_results.json |    1 +
 ...theme-spinfinity_security_api_results.json |    1 +
 ...th-theme-spinner_security_api_results.json |    1 +
 .../plymouth_security_api_results.json        |    1 +
 .../pmdk-convert_security_api_results.json    |    1 +
 .../pmempool_security_api_results.json        |    1 +
 .../pmix_security_api_results.json            |    1 +
 .../pmreorder_security_api_results.json       |    1 +
 .../pnm2ppa_security_api_results.json         |    1 +
 .../po4a_security_api_results.json            |    1 +
 .../podman-docker_security_api_results.json   |    1 +
 .../podman-remote_security_api_results.json   |    1 +
 .../podman-tests_security_api_results.json    |    1 +
 .../podman_security_api_results.json          |    1 +
 ...cycoreutils-dbus_security_api_results.json |    1 +
 ...ycoreutils-devel_security_api_results.json |    1 +
 ...icycoreutils-gui_security_api_results.json |    1 +
 ...oreutils-newrole_security_api_results.json |    1 +
 ...ils-python-utils_security_api_results.json |    1 +
 ...tils-restorecond_security_api_results.json |    1 +
 ...oreutils-sandbox_security_api_results.json |    1 +
 .../policycoreutils_security_api_results.json |    1 +
 .../polkit-devel_security_api_results.json    |    1 +
 .../polkit-docs_security_api_results.json     |    1 +
 .../polkit-libs_security_api_results.json     |    1 +
 ...lkit-pkla-compat_security_api_results.json |    1 +
 .../polkit_security_api_results.json          |    1 +
 ...oppler-cpp-devel_security_api_results.json |    1 +
 .../poppler-cpp_security_api_results.json     |    1 +
 .../poppler-data_security_api_results.json    |    1 +
 .../poppler-devel_security_api_results.json   |    1 +
 ...ppler-glib-devel_security_api_results.json |    1 +
 .../poppler-glib_security_api_results.json    |    1 +
 ...oppler-qt5-devel_security_api_results.json |    1 +
 .../poppler-qt5_security_api_results.json     |    1 +
 .../poppler-utils_security_api_results.json   |    1 +
 .../poppler_security_api_results.json         |    1 +
 .../popt-devel_security_api_results.json      |    1 +
 .../popt_security_api_results.json            |    1 +
 .../portreserve_security_api_results.json     |    1 +
 .../postfix-cdb_security_api_results.json     |    1 +
 .../postfix-ldap_security_api_results.json    |    1 +
 .../postfix-mysql_security_api_results.json   |    1 +
 .../postfix-pcre_security_api_results.json    |    1 +
 ...fix-perl-scripts_security_api_results.json |    1 +
 .../postfix-pgsql_security_api_results.json   |    1 +
 .../postfix-sqlite_security_api_results.json  |    1 +
 .../postfix_security_api_results.json         |    1 +
 ...gres-decoderbufs_security_api_results.json |    1 +
 ...stgresql-contrib_security_api_results.json |    1 +
 .../postgresql-docs_security_api_results.json |    1 +
 ...sql-jdbc-javadoc_security_api_results.json |    1 +
 .../postgresql-jdbc_security_api_results.json |    1 +
 ...resql-odbc-tests_security_api_results.json |    1 +
 .../postgresql-odbc_security_api_results.json |    1 +
 ...ostgresql-plperl_security_api_results.json |    1 +
 ...gresql-plpython3_security_api_results.json |    1 +
 ...postgresql-pltcl_security_api_results.json |    1 +
 ...sql-server-devel_security_api_results.json |    1 +
 ...ostgresql-server_security_api_results.json |    1 +
 ...ostgresql-static_security_api_results.json |    1 +
 ...-test-rpm-macros_security_api_results.json |    1 +
 .../postgresql-test_security_api_results.json |    1 +
 ...ql-upgrade-devel_security_api_results.json |    1 +
 ...stgresql-upgrade_security_api_results.json |    1 +
 .../postgresql_security_api_results.json      |    1 +
 .../potrace_security_api_results.json         |    1 +
 ...ock-api-easymock_security_api_results.json |    1 +
 ...mock-api-mockito_security_api_results.json |    1 +
 ...mock-api-support_security_api_results.json |    1 +
 ...powermock-common_security_api_results.json |    1 +
 .../powermock-core_security_api_results.json  |    1 +
 ...owermock-javadoc_security_api_results.json |    1 +
 ...powermock-junit4_security_api_results.json |    1 +
 ...owermock-reflect_security_api_results.json |    1 +
 ...powermock-testng_security_api_results.json |    1 +
 ...werpc-utils-core_security_api_results.json |    1 +
 .../powerpc-utils_security_api_results.json   |    1 +
 .../powertop_security_api_results.json        |    1 +
 .../ppc64-diag_security_api_results.json      |    1 +
 .../ppp-devel_security_api_results.json       |    1 +
 .../ppp_security_api_results.json             |    1 +
 .../pps-tools-devel_security_api_results.json |    1 +
 .../pptp_security_api_results.json            |    1 +
 .../prefixdevname_security_api_results.json   |    1 +
 .../procmail_security_api_results.json        |    1 +
 .../procps-ng-i18n_security_api_results.json  |    1 +
 .../procps-ng_security_api_results.json       |    1 +
 ...eus-jmx-exporter_security_api_results.json |    1 +
 ...tobuf-c-compiler_security_api_results.json |    1 +
 ...protobuf-c-devel_security_api_results.json |    1 +
 .../protobuf-c_security_api_results.json      |    1 +
 ...rotobuf-compiler_security_api_results.json |    1 +
 .../protobuf-devel_security_api_results.json  |    1 +
 .../protobuf-lite_security_api_results.json   |    1 +
 .../protobuf_security_api_results.json        |    1 +
 .../ps_mem_security_api_results.json          |    1 +
 .../psacct_security_api_results.json          |    1 +
 .../psmisc_security_api_results.json          |    1 +
 .../pstoedit_security_api_results.json        |    1 +
 ...h-devel-parmetis_security_api_results.json |    1 +
 ...otch-mpich-devel_security_api_results.json |    1 +
 .../ptscotch-mpich_security_api_results.json  |    1 +
 ...ch-openmpi-devel_security_api_results.json |    1 +
 ...ptscotch-openmpi_security_api_results.json |    1 +
 ...uffix-list-dafsa_security_api_results.json |    1 +
 ...ublicsuffix-list_security_api_results.json |    1 +
 ...audio-libs-devel_security_api_results.json |    1 +
 ...audio-libs-glib2_security_api_results.json |    1 +
 .../pulseaudio-libs_security_api_results.json |    1 +
 ...module-bluetooth_security_api_results.json |    1 +
 ...audio-module-x11_security_api_results.json |    1 +
 ...pulseaudio-utils_security_api_results.json |    1 +
 .../pulseaudio_security_api_results.json      |    1 +
 .../purple-sipe_security_api_results.json     |    1 +
 ...gobject2-codegen_security_api_results.json |    1 +
 ...pygobject2-devel_security_api_results.json |    1 +
 .../pygobject2-doc_security_api_results.json  |    1 +
 .../pygobject2_security_api_results.json      |    1 +
 ...pygobject3-devel_security_api_results.json |    1 +
 .../pygtk2-codegen_security_api_results.json  |    1 +
 .../pygtk2-devel_security_api_results.json    |    1 +
 .../pygtk2-doc_security_api_results.json      |    1 +
 .../pygtk2_security_api_results.json          |    1 +
 .../pykickstart_security_api_results.json     |    1 +
 .../python-cups-doc_security_api_results.json |    1 +
 ...python-nose-docs_security_api_results.json |    1 +
 .../python-nss-doc_security_api_results.json  |    1 +
 ...ython-podman-api_security_api_results.json |    1 +
 ...hon-psycopg2-doc_security_api_results.json |    1 +
 ...thon-pymongo-doc_security_api_results.json |    1 +
 ...n-qt5-rpm-macros_security_api_results.json |    1 +
 ...ython-rpm-macros_security_api_results.json |    1 +
 ...on-sphinx-locale_security_api_results.json |    1 +
 ...n-sqlalchemy-doc_security_api_results.json |    1 +
 ...thon-srpm-macros_security_api_results.json |    1 +
 ...n-virtualenv-doc_security_api_results.json |    1 +
 .../python2-Cython_security_api_results.json  |    1 +
 .../python2-PyMySQL_security_api_results.json |    1 +
 .../python2-attrs_security_api_results.json   |    1 +
 .../python2-babel_security_api_results.json   |    1 +
 ...l_match_hostname_security_api_results.json |    1 +
 ...ython2-backports_security_api_results.json |    1 +
 .../python2-bson_security_api_results.json    |    1 +
 ...hon2-cairo-devel_security_api_results.json |    1 +
 .../python2-cairo_security_api_results.json   |    1 +
 .../python2-chardet_security_api_results.json |    1 +
 ...python2-coverage_security_api_results.json |    1 +
 .../python2-debug_security_api_results.json   |    1 +
 .../python2-devel_security_api_results.json   |    1 +
 .../python2-dns_security_api_results.json     |    1 +
 ...ython2-docs-info_security_api_results.json |    1 +
 .../python2-docs_security_api_results.json    |    1 +
 ...python2-docutils_security_api_results.json |    1 +
 ...python2-funcsigs_security_api_results.json |    1 +
 .../python2-idna_security_api_results.json    |    1 +
 ...ython2-ipaddress_security_api_results.json |    1 +
 .../python2-iso8601_security_api_results.json |    1 +
 .../python2-jinja2_security_api_results.json  |    1 +
 .../python2-libs_security_api_results.json    |    1 +
 .../python2-lxml_security_api_results.json    |    1 +
 ...thon2-markupsafe_security_api_results.json |    1 +
 .../python2-mock_security_api_results.json    |    1 +
 .../python2-nose_security_api_results.json    |    1 +
 ...ython2-numpy-doc_security_api_results.json |    1 +
 ...thon2-numpy-f2py_security_api_results.json |    1 +
 .../python2-numpy_security_api_results.json   |    1 +
 ...ython2-pip-wheel_security_api_results.json |    1 +
 .../python2-pip_security_api_results.json     |    1 +
 .../python2-pluggy_security_api_results.json  |    1 +
 ...2-psycopg2-debug_security_api_results.json |    1 +
 ...2-psycopg2-tests_security_api_results.json |    1 +
 ...python2-psycopg2_security_api_results.json |    1 +
 .../python2-py_security_api_results.json      |    1 +
 ...python2-pygments_security_api_results.json |    1 +
 ...2-pymongo-gridfs_security_api_results.json |    1 +
 .../python2-pymongo_security_api_results.json |    1 +
 .../python2-pysocks_security_api_results.json |    1 +
 ...hon2-pytest-mock_security_api_results.json |    1 +
 .../python2-pytest_security_api_results.json  |    1 +
 .../python2-pytz_security_api_results.json    |    1 +
 .../python2-pyyaml_security_api_results.json  |    1 +
 ...python2-requests_security_api_results.json |    1 +
 ...thon2-rpm-macros_security_api_results.json |    1 +
 .../python2-scipy_security_api_results.json   |    1 +
 .../python2-scour_security_api_results.json   |    1 +
 ...setuptools-wheel_security_api_results.json |    1 +
 ...2-setuptools_scm_security_api_results.json |    1 +
 ...thon2-setuptools_security_api_results.json |    1 +
 .../python2-six_security_api_results.json     |    1 +
 ...thon2-sqlalchemy_security_api_results.json |    1 +
 .../python2-test_security_api_results.json    |    1 +
 .../python2-tkinter_security_api_results.json |    1 +
 .../python2-tools_security_api_results.json   |    1 +
 .../python2-urllib3_security_api_results.json |    1 +
 ...thon2-virtualenv_security_api_results.json |    1 +
 ...hon2-wheel-wheel_security_api_results.json |    1 +
 .../python2-wheel_security_api_results.json   |    1 +
 .../python27_security_api_results.json        |    1 +
 .../python2_security_api_results.json         |    1 +
 .../python3-Cython_security_api_results.json  |    1 +
 .../python3-PyMySQL_security_api_results.json |    1 +
 ...thon3-abrt-addon_security_api_results.json |    1 +
 ...-container-addon_security_api_results.json |    1 +
 ...python3-abrt-doc_security_api_results.json |    1 +
 .../python3-abrt_security_api_results.json    |    1 +
 ...hon3-argcomplete_security_api_results.json |    1 +
 .../python3-argh_security_api_results.json    |    1 +
 ...thon3-asn1crypto_security_api_results.json |    1 +
 .../python3-attrs_security_api_results.json   |    1 +
 .../python3-audit_security_api_results.json   |    1 +
 .../python3-augeas_security_api_results.json  |    1 +
 .../python3-avahi_security_api_results.json   |    1 +
 ...ython3-azure-sdk_security_api_results.json |    1 +
 .../python3-babel_security_api_results.json   |    1 +
 .../python3-bcc_security_api_results.json     |    1 +
 .../python3-bind_security_api_results.json    |    1 +
 .../python3-blivet_security_api_results.json  |    1 +
 ...python3-blockdev_security_api_results.json |    1 +
 .../python3-boom_security_api_results.json    |    1 +
 .../python3-boto3_security_api_results.json   |    1 +
 ...python3-botocore_security_api_results.json |    1 +
 .../python3-brlapi_security_api_results.json  |    1 +
 .../python3-bson_security_api_results.json    |    1 +
 ...python3-bytesize_security_api_results.json |    1 +
 .../python3-cairo_security_api_results.json   |    1 +
 .../python3-cffi_security_api_results.json    |    1 +
 .../python3-chardet_security_api_results.json |    1 +
 .../python3-clang_security_api_results.json   |    1 +
 .../python3-click_security_api_results.json   |    1 +
 .../python3-clufter_security_api_results.json |    1 +
 ...ython3-configobj_security_api_results.json |    1 +
 ...hon3-configshell_security_api_results.json |    1 +
 ...python3-coverage_security_api_results.json |    1 +
 .../python3-cpio_security_api_results.json    |    1 +
 ...on3-createrepo_c_security_api_results.json |    1 +
 .../python3-criu_security_api_results.json    |    1 +
 ...on3-cryptography_security_api_results.json |    1 +
 .../python3-cups_security_api_results.json    |    1 +
 ...python3-custodia_security_api_results.json |    1 +
 ...python3-dateutil_security_api_results.json |    1 +
 ...-dbus-client-gen_security_api_results.json |    1 +
 ...ython-client-gen_security_api_results.json |    1 +
 ...nature-pyparsing_security_api_results.json |    1 +
 .../python3-dbus_security_api_results.json    |    1 +
 ...ython3-decorator_security_api_results.json |    1 +
 .../python3-distro_security_api_results.json  |    1 +
 ...ython3-dmidecode_security_api_results.json |    1 +
 ...nsaction-actions_security_api_results.json |    1 +
 ...plugin-spacewalk_security_api_results.json |    1 +
 ...ugin-versionlock_security_api_results.json |    1 +
 ...dnf-plugins-core_security_api_results.json |    1 +
 .../python3-dnf_security_api_results.json     |    1 +
 .../python3-dns_security_api_results.json     |    1 +
 .../python3-docs_security_api_results.json    |    1 +
 ...python3-docutils_security_api_results.json |    1 +
 .../python3-enchant_security_api_results.json |    1 +
 .../python3-ethtool_security_api_results.json |    1 +
 .../python3-evdev_security_api_results.json   |    1 +
 ...ython3-fasteners_security_api_results.json |    1 +
 ...python3-firewall_security_api_results.json |    1 +
 .../python3-flask_security_api_results.json   |    1 +
 .../python3-gevent_security_api_results.json  |    1 +
 .../python3-gflags_security_api_results.json  |    1 +
 ...on3-gobject-base_security_api_results.json |    1 +
 .../python3-gobject_security_api_results.json |    1 +
 ...oogle-api-client_security_api_results.json |    1 +
 .../python3-gpg_security_api_results.json     |    1 +
 ...3-greenlet-devel_security_api_results.json |    1 +
 ...python3-greenlet_security_api_results.json |    1 +
 .../python3-gssapi_security_api_results.json  |    1 +
 .../python3-hawkey_security_api_results.json  |    1 +
 .../python3-hivex_security_api_results.json   |    1 +
 ...python3-html5lib_security_api_results.json |    1 +
 ...python3-httplib2_security_api_results.json |    1 +
 ...python3-humanize_security_api_results.json |    1 +
 .../python3-hwdata_security_api_results.json  |    1 +
 ...thon3-hypothesis_security_api_results.json |    1 +
 .../python3-idle_security_api_results.json    |    1 +
 .../python3-idna_security_api_results.json    |    1 +
 ...ython3-imagesize_security_api_results.json |    1 +
 ...python3-iniparse_security_api_results.json |    1 +
 .../python3-inotify_security_api_results.json |    1 +
 ...into-dbus-python_security_api_results.json |    1 +
 ...ython3-ipaclient_security_api_results.json |    1 +
 .../python3-ipalib_security_api_results.json  |    1 +
 ...ython3-ipaserver_security_api_results.json |    1 +
 ...-initiator-utils_security_api_results.json |    1 +
 .../python3-iso8601_security_api_results.json |    1 +
 ...on3-itsdangerous_security_api_results.json |    1 +
 ...python3-jabberpy_security_api_results.json |    1 +
 ...on3-javapackages_security_api_results.json |    1 +
 .../python3-jinja2_security_api_results.json  |    1 +
 ...python3-jmespath_security_api_results.json |    1 +
 ...ython3-jsonpatch_security_api_results.json |    1 +
 ...hon3-jsonpointer_security_api_results.json |    1 +
 ...thon3-jsonschema_security_api_results.json |    1 +
 ...ython3-justbases_security_api_results.json |    1 +
 ...ython3-justbytes_security_api_results.json |    1 +
 ...python3-jwcrypto_security_api_results.json |    1 +
 .../python3-jwt_security_api_results.json     |    1 +
 ...python3-kdcproxy_security_api_results.json |    1 +
 ...d-client-install_security_api_results.json |    1 +
 ...ython3-kickstart_security_api_results.json |    1 +
 .../python3-kmod_security_api_results.json    |    1 +
 .../python3-koan_security_api_results.json    |    1 +
 ...ython3-langtable_security_api_results.json |    1 +
 .../python3-ldap_security_api_results.json    |    1 +
 .../python3-ldb_security_api_results.json     |    1 +
 .../python3-lesscpy_security_api_results.json |    1 +
 .../python3-lib389_security_api_results.json  |    1 +
 ...python3-libcomps_security_api_results.json |    1 +
 .../python3-libdnf_security_api_results.json  |    1 +
 ...thon3-libguestfs_security_api_results.json |    1 +
 ...hon3-libipa_hbac_security_api_results.json |    1 +
 .../python3-libnl3_security_api_results.json  |    1 +
 ...thon3-libnmstate_security_api_results.json |    1 +
 .../python3-libpfm_security_api_results.json  |    1 +
 ...python3-libproxy_security_api_results.json |    1 +
 .../python3-librepo_security_api_results.json |    1 +
 ...ython3-libreport_security_api_results.json |    1 +
 .../python3-libs_security_api_results.json    |    1 +
 ...thon3-libselinux_security_api_results.json |    1 +
 ...hon3-libsemanage_security_api_results.json |    1 +
 ...libsss_nss_idmap_security_api_results.json |    1 +
 ...toragemgmt-clibs_security_api_results.json |    1 +
 ...3-libstoragemgmt_security_api_results.json |    1 +
 .../python3-libuser_security_api_results.json |    1 +
 .../python3-libvirt_security_api_results.json |    1 +
 ...ython3-libvoikko_security_api_results.json |    1 +
 .../python3-libxml2_security_api_results.json |    1 +
 ...on3-linux-procfs_security_api_results.json |    1 +
 .../python3-lit_security_api_results.json     |    1 +
 .../python3-lldb_security_api_results.json    |    1 +
 .../python3-louis_security_api_results.json   |    1 +
 .../python3-lxml_security_api_results.json    |    1 +
 .../python3-magic_security_api_results.json   |    1 +
 .../python3-mako_security_api_results.json    |    1 +
 ...python3-markdown_security_api_results.json |    1 +
 ...thon3-markupsafe_security_api_results.json |    1 +
 .../python3-meh-gui_security_api_results.json |    1 +
 .../python3-meh_security_api_results.json     |    1 +
 .../python3-mock_security_api_results.json    |    1 +
 ...python3-mod_wsgi_security_api_results.json |    1 +
 .../python3-mpich_security_api_results.json   |    1 +
 .../python3-netaddr_security_api_results.json |    1 +
 ...ython3-netifaces_security_api_results.json |    1 +
 ...n3-networkx-core_security_api_results.json |    1 +
 ...python3-networkx_security_api_results.json |    1 +
 .../python3-newt_security_api_results.json    |    1 +
 ...python3-nftables_security_api_results.json |    1 +
 .../python3-nose_security_api_results.json    |    1 +
 .../python3-nss_security_api_results.json     |    1 +
 .../python3-ntplib_security_api_results.json  |    1 +
 ...thon3-numpy-f2py_security_api_results.json |    1 +
 .../python3-numpy_security_api_results.json   |    1 +
 ...on3-oauth2client_security_api_results.json |    1 +
 ...python3-oauthlib_security_api_results.json |    1 +
 ...python3-openipmi_security_api_results.json |    1 +
 .../python3-openmpi_security_api_results.json |    1 +
 ...hon3-ordered-set_security_api_results.json |    1 +
 ...thon3-osa-common_security_api_results.json |    1 +
 .../python3-osad_security_api_results.json    |    1 +
 ...ython3-packaging_security_api_results.json |    1 +
 .../python3-pcp_security_api_results.json     |    1 +
 .../python3-perf_security_api_results.json    |    1 +
 .../python3-pexpect_security_api_results.json |    1 +
 .../python3-pid_security_api_results.json     |    1 +
 .../python3-pillow_security_api_results.json  |    1 +
 ...ython3-pip-wheel_security_api_results.json |    1 +
 .../python3-pip_security_api_results.json     |    1 +
 .../python3-pki_security_api_results.json     |    1 +
 .../python3-pluggy_security_api_results.json  |    1 +
 .../python3-ply_security_api_results.json     |    1 +
 ...-policycoreutils_security_api_results.json |    1 +
 ...hon3-prettytable_security_api_results.json |    1 +
 ...ython3-productmd_security_api_results.json |    1 +
 ...python3-protobuf_security_api_results.json |    1 +
 .../python3-psutil_security_api_results.json  |    1 +
 ...python3-psycopg2_security_api_results.json |    1 +
 ...thon3-ptyprocess_security_api_results.json |    1 +
 ...ython3-pwquality_security_api_results.json |    1 +
 ...ython3-pyOpenSSL_security_api_results.json |    1 +
 .../python3-py_security_api_results.json      |    1 +
 ...3-pyasn1-modules_security_api_results.json |    1 +
 .../python3-pyasn1_security_api_results.json  |    1 +
 .../python3-pyatspi_security_api_results.json |    1 +
 ...ython3-pycparser_security_api_results.json |    1 +
 .../python3-pycurl_security_api_results.json  |    1 +
 .../python3-pydbus_security_api_results.json  |    1 +
 ...python3-pygments_security_api_results.json |    1 +
 ...3-pymongo-gridfs_security_api_results.json |    1 +
 .../python3-pymongo_security_api_results.json |    1 +
 ...ython3-pyparsing_security_api_results.json |    1 +
 ...python3-pyparted_security_api_results.json |    1 +
 ...ython3-pyqt5-sip_security_api_results.json |    1 +
 ...python3-pyserial_security_api_results.json |    1 +
 .../python3-pysocks_security_api_results.json |    1 +
 .../python3-pytest_security_api_results.json  |    1 +
 .../python3-pytoml_security_api_results.json  |    1 +
 .../python3-pytz_security_api_results.json    |    1 +
 .../python3-pyudev_security_api_results.json  |    1 +
 .../python3-pyusb_security_api_results.json   |    1 +
 .../python3-pywbem_security_api_results.json  |    1 +
 .../python3-pyxattr_security_api_results.json |    1 +
 .../python3-pyxdg_security_api_results.json   |    1 +
 .../python3-pyyaml_security_api_results.json  |    1 +
 ...hon3-qrcode-core_security_api_results.json |    1 +
 .../python3-qrcode_security_api_results.json  |    1 +
 ...python3-qt5-base_security_api_results.json |    1 +
 ...ython3-qt5-devel_security_api_results.json |    1 +
 .../python3-qt5_security_api_results.json     |    1 +
 ...ython3-reportlab_security_api_results.json |    1 +
 ...n3-requests-file_security_api_results.json |    1 +
 ...on3-requests-ftp_security_api_results.json |    1 +
 ...equests-oauthlib_security_api_results.json |    1 +
 ...python3-requests_security_api_results.json |    1 +
 ...ython3-rhn-check_security_api_results.json |    1 +
 ...rhn-client-tools_security_api_results.json |    1 +
 ...-rhn-setup-gnome_security_api_results.json |    1 +
 ...ython3-rhn-setup_security_api_results.json |    1 +
 ...alization-common_security_api_results.json |    1 +
 ...tualization-host_security_api_results.json |    1 +
 ...3-rhncfg-actions_security_api_results.json |    1 +
 ...n3-rhncfg-client_security_api_results.json |    1 +
 ...hncfg-management_security_api_results.json |    1 +
 .../python3-rhncfg_security_api_results.json  |    1 +
 .../python3-rhnlib_security_api_results.json  |    1 +
 .../python3-rhnpush_security_api_results.json |    1 +
 ...3-rpm-generators_security_api_results.json |    1 +
 ...thon3-rpm-macros_security_api_results.json |    1 +
 .../python3-rpm_security_api_results.json     |    1 +
 ...python3-rpmfluff_security_api_results.json |    1 +
 .../python3-rrdtool_security_api_results.json |    1 +
 .../python3-rtslib_security_api_results.json  |    1 +
 ...thon3-s3transfer_security_api_results.json |    1 +
 ...thon3-samba-test_security_api_results.json |    1 +
 .../python3-samba_security_api_results.json   |    1 +
 .../python3-sanlock_security_api_results.json |    1 +
 ...thon3-schedutils_security_api_results.json |    1 +
 .../python3-scipy_security_api_results.json   |    1 +
 .../python3-scons_security_api_results.json   |    1 +
 ...semantic_version_security_api_results.json |    1 +
 .../python3-setools_security_api_results.json |    1 +
 ...setuptools-wheel_security_api_results.json |    1 +
 ...3-setuptools_scm_security_api_results.json |    1 +
 ...thon3-setuptools_security_api_results.json |    1 +
 ...thon3-simpleline_security_api_results.json |    1 +
 ...ython3-sip-devel_security_api_results.json |    1 +
 .../python3-six_security_api_results.json     |    1 +
 ...ython3-slip-dbus_security_api_results.json |    1 +
 .../python3-slip_security_api_results.json    |    1 +
 ...-snowballstemmer_security_api_results.json |    1 +
 ...3-spacewalk-abrt_security_api_results.json |    1 +
 ...alk-backend-libs_security_api_results.json |    1 +
 ...3-spacewalk-koan_security_api_results.json |    1 +
 ...-spacewalk-oscap_security_api_results.json |    1 +
 ...3-spacewalk-usix_security_api_results.json |    1 +
 .../python3-speechd_security_api_results.json |    1 +
 ...-theme-alabaster_security_api_results.json |    1 +
 ...sphinx_rtd_theme_security_api_results.json |    1 +
 .../python3-sphinx_security_api_results.json  |    1 +
 ...ntrib-websupport_security_api_results.json |    1 +
 ...thon3-sqlalchemy_security_api_results.json |    1 +
 ...thon3-sss-murmur_security_api_results.json |    1 +
 .../python3-sss_security_api_results.json     |    1 +
 ...thon3-sssdconfig_security_api_results.json |    1 +
 ...ion-manager-rhsm_security_api_results.json |    1 +
 .../python3-suds_security_api_results.json    |    1 +
 .../python3-sure_security_api_results.json    |    1 +
 .../python3-sushy_security_api_results.json   |    1 +
 ...thon3-syspurpose_security_api_results.json |    1 +
 .../python3-systemd_security_api_results.json |    1 +
 .../python3-talloc_security_api_results.json  |    1 +
 .../python3-tbb_security_api_results.json     |    1 +
 .../python3-tdb_security_api_results.json     |    1 +
 .../python3-test_security_api_results.json    |    1 +
 .../python3-tevent_security_api_results.json  |    1 +
 .../python3-tkinter_security_api_results.json |    1 +
 .../python3-unbound_security_api_results.json |    1 +
 ...ython3-unittest2_security_api_results.json |    1 +
 ...hon3-uritemplate_security_api_results.json |    1 +
 .../python3-urllib3_security_api_results.json |    1 +
 .../python3-urwid_security_api_results.json   |    1 +
 .../python3-varlink_security_api_results.json |    1 +
 ...thon3-virtualenv_security_api_results.json |    1 +
 ...on3-webencodings_security_api_results.json |    1 +
 ...python3-werkzeug_security_api_results.json |    1 +
 ...hon3-wheel-wheel_security_api_results.json |    1 +
 .../python3-wheel_security_api_results.json   |    1 +
 .../python3-whoosh_security_api_results.json  |    1 +
 .../python3-yubico_security_api_results.json  |    1 +
 .../python36-debug_security_api_results.json  |    1 +
 .../python36-devel_security_api_results.json  |    1 +
 ...hon36-rpm-macros_security_api_results.json |    1 +
 .../python36_security_api_results.json        |    1 +
 .../python38-Cython_security_api_results.json |    1 +
 ...python38-PyMySQL_security_api_results.json |    1 +
 ...hon38-asn1crypto_security_api_results.json |    1 +
 ...n38-atomicwrites_security_api_results.json |    1 +
 .../python38-attrs_security_api_results.json  |    1 +
 .../python38-babel_security_api_results.json  |    1 +
 .../python38-cffi_security_api_results.json   |    1 +
 ...python38-chardet_security_api_results.json |    1 +
 ...n38-cryptography_security_api_results.json |    1 +
 .../python38-debug_security_api_results.json  |    1 +
 .../python38-devel_security_api_results.json  |    1 +
 .../python38-idle_security_api_results.json   |    1 +
 .../python38-idna_security_api_results.json   |    1 +
 .../python38-jinja2_security_api_results.json |    1 +
 .../python38-libs_security_api_results.json   |    1 +
 .../python38-lxml_security_api_results.json   |    1 +
 ...hon38-markupsafe_security_api_results.json |    1 +
 ...ython38-mod_wsgi_security_api_results.json |    1 +
 ...8-more-itertools_security_api_results.json |    1 +
 ...thon38-numpy-doc_security_api_results.json |    1 +
 ...hon38-numpy-f2py_security_api_results.json |    1 +
 .../python38-numpy_security_api_results.json  |    1 +
 ...thon38-packaging_security_api_results.json |    1 +
 ...thon38-pip-wheel_security_api_results.json |    1 +
 .../python38-pip_security_api_results.json    |    1 +
 .../python38-pluggy_security_api_results.json |    1 +
 .../python38-ply_security_api_results.json    |    1 +
 .../python38-psutil_security_api_results.json |    1 +
 ...n38-psycopg2-doc_security_api_results.json |    1 +
 ...8-psycopg2-tests_security_api_results.json |    1 +
 ...ython38-psycopg2_security_api_results.json |    1 +
 .../python38-py_security_api_results.json     |    1 +
 ...thon38-pycparser_security_api_results.json |    1 +
 ...thon38-pyparsing_security_api_results.json |    1 +
 ...python38-pysocks_security_api_results.json |    1 +
 .../python38-pytest_security_api_results.json |    1 +
 .../python38-pytz_security_api_results.json   |    1 +
 .../python38-pyyaml_security_api_results.json |    1 +
 ...ython38-requests_security_api_results.json |    1 +
 ...hon38-rpm-macros_security_api_results.json |    1 +
 .../python38-scipy_security_api_results.json  |    1 +
 ...setuptools-wheel_security_api_results.json |    1 +
 ...hon38-setuptools_security_api_results.json |    1 +
 .../python38-six_security_api_results.json    |    1 +
 .../python38-test_security_api_results.json   |    1 +
 ...python38-tkinter_security_api_results.json |    1 +
 ...python38-urllib3_security_api_results.json |    1 +
 ...python38-wcwidth_security_api_results.json |    1 +
 ...on38-wheel-wheel_security_api_results.json |    1 +
 .../python38-wheel_security_api_results.json  |    1 +
 .../python38_security_api_results.json        |    1 +
 .../qclib-devel_security_api_results.json     |    1 +
 .../qclib_security_api_results.json           |    1 +
 .../qdox-javadoc_security_api_results.json    |    1 +
 .../qdox_security_api_results.json            |    1 +
 ...qemu-guest-agent_security_api_results.json |    1 +
 .../qemu-img_security_api_results.json        |    1 +
 ...u-kvm-block-curl_security_api_results.json |    1 +
 ...vm-block-gluster_security_api_results.json |    1 +
 ...-kvm-block-iscsi_security_api_results.json |    1 +
 ...mu-kvm-block-rbd_security_api_results.json |    1 +
 ...mu-kvm-block-ssh_security_api_results.json |    1 +
 .../qemu-kvm-common_security_api_results.json |    1 +
 .../qemu-kvm-core_security_api_results.json   |    1 +
 .../qemu-kvm-tests_security_api_results.json  |    1 +
 .../qemu-kvm_security_api_results.json        |    1 +
 .../qgnomeplatform_security_api_results.json  |    1 +
 .../qgpgme_security_api_results.json          |    1 +
 .../qhull-devel_security_api_results.json     |    1 +
 .../qpdf-doc_security_api_results.json        |    1 +
 .../qpdf-libs_security_api_results.json       |    1 +
 .../qpdf_security_api_results.json            |    1 +
 .../qperf_security_api_results.json           |    1 +
 .../qrencode-devel_security_api_results.json  |    1 +
 .../qrencode-libs_security_api_results.json   |    1 +
 .../qrencode_security_api_results.json        |    1 +
 .../qt5-assistant_security_api_results.json   |    1 +
 .../qt5-designer_security_api_results.json    |    1 +
 .../qt5-devel_security_api_results.json       |    1 +
 .../qt5-doctools_security_api_results.json    |    1 +
 .../qt5-linguist_security_api_results.json    |    1 +
 .../qt5-qdbusviewer_security_api_results.json |    1 +
 .../qt5-qt3d-devel_security_api_results.json  |    1 +
 ...t5-qt3d-examples_security_api_results.json |    1 +
 .../qt5-qt3d_security_api_results.json        |    1 +
 ...t5-qtbase-common_security_api_results.json |    1 +
 ...qt5-qtbase-devel_security_api_results.json |    1 +
 ...-qtbase-examples_security_api_results.json |    1 +
 .../qt5-qtbase-gui_security_api_results.json  |    1 +
 ...qt5-qtbase-mysql_security_api_results.json |    1 +
 .../qt5-qtbase-odbc_security_api_results.json |    1 +
 ...tbase-postgresql_security_api_results.json |    1 +
 ...se-private-devel_security_api_results.json |    1 +
 ...t5-qtbase-static_security_api_results.json |    1 +
 .../qt5-qtbase_security_api_results.json      |    1 +
 ...anvas3d-examples_security_api_results.json |    1 +
 .../qt5-qtcanvas3d_security_api_results.json  |    1 +
 ...nnectivity-devel_security_api_results.json |    1 +
 ...ctivity-examples_security_api_results.json |    1 +
 ...5-qtconnectivity_security_api_results.json |    1 +
 ...eclarative-devel_security_api_results.json |    1 +
 ...arative-examples_security_api_results.json |    1 +
 ...clarative-static_security_api_results.json |    1 +
 ...t5-qtdeclarative_security_api_results.json |    1 +
 .../qt5-qtdoc_security_api_results.json       |    1 +
 ...graphicaleffects_security_api_results.json |    1 +
 ...5-qtimageformats_security_api_results.json |    1 +
 ...qtlocation-devel_security_api_results.json |    1 +
 ...ocation-examples_security_api_results.json |    1 +
 .../qt5-qtlocation_security_api_results.json  |    1 +
 ...multimedia-devel_security_api_results.json |    1 +
 ...timedia-examples_security_api_results.json |    1 +
 ...qt5-qtmultimedia_security_api_results.json |    1 +
 ...ontrols-examples_security_api_results.json |    1 +
 ...kcontrols2-devel_security_api_results.json |    1 +
 ...ntrols2-examples_security_api_results.json |    1 +
 ...qtquickcontrols2_security_api_results.json |    1 +
 ...-qtquickcontrols_security_api_results.json |    1 +
 ...5-qtscript-devel_security_api_results.json |    1 +
 ...tscript-examples_security_api_results.json |    1 +
 .../qt5-qtscript_security_api_results.json    |    1 +
 ...-qtsensors-devel_security_api_results.json |    1 +
 ...sensors-examples_security_api_results.json |    1 +
 .../qt5-qtsensors_security_api_results.json   |    1 +
 ...rialbus-examples_security_api_results.json |    1 +
 .../qt5-qtserialbus_security_api_results.json |    1 +
 ...serialport-devel_security_api_results.json |    1 +
 ...ialport-examples_security_api_results.json |    1 +
 ...qt5-qtserialport_security_api_results.json |    1 +
 .../qt5-qtsvg-devel_security_api_results.json |    1 +
 ...5-qtsvg-examples_security_api_results.json |    1 +
 .../qt5-qtsvg_security_api_results.json       |    1 +
 ...5-qttools-common_security_api_results.json |    1 +
 ...t5-qttools-devel_security_api_results.json |    1 +
 ...qttools-examples_security_api_results.json |    1 +
 ...ls-libs-designer_security_api_results.json |    1 +
 ...signercomponents_security_api_results.json |    1 +
 ...ttools-libs-help_security_api_results.json |    1 +
 ...5-qttools-static_security_api_results.json |    1 +
 .../qt5-qttools_security_api_results.json     |    1 +
 ...5-qttranslations_security_api_results.json |    1 +
 ...-qtwayland-devel_security_api_results.json |    1 +
 ...wayland-examples_security_api_results.json |    1 +
 .../qt5-qtwayland_security_api_results.json   |    1 +
 ...webchannel-devel_security_api_results.json |    1 +
 ...channel-examples_security_api_results.json |    1 +
 ...qt5-qtwebchannel_security_api_results.json |    1 +
 ...websockets-devel_security_api_results.json |    1 +
 ...sockets-examples_security_api_results.json |    1 +
 ...qt5-qtwebsockets_security_api_results.json |    1 +
 ...tx11extras-devel_security_api_results.json |    1 +
 .../qt5-qtx11extras_security_api_results.json |    1 +
 ...mlpatterns-devel_security_api_results.json |    1 +
 ...atterns-examples_security_api_results.json |    1 +
 ...t5-qtxmlpatterns_security_api_results.json |    1 +
 .../qt5-rpm-macros_security_api_results.json  |    1 +
 .../qt5-srpm-macros_security_api_results.json |    1 +
 .../quota-doc_security_api_results.json       |    1 +
 .../quota-nld_security_api_results.json       |    1 +
 .../quota-nls_security_api_results.json       |    1 +
 .../quota-rpc_security_api_results.json       |    1 +
 .../quota-warnquota_security_api_results.json |    1 +
 .../quota_security_api_results.json           |    1 +
 .../radvd_security_api_results.json           |    1 +
 .../raptor2-devel_security_api_results.json   |    1 +
 .../raptor2_security_api_results.json         |    1 +
 .../rarian-compat_security_api_results.json   |    1 +
 .../rarian_security_api_results.json          |    1 +
 .../rasdaemon_security_api_results.json       |    1 +
 .../rasqal-devel_security_api_results.json    |    1 +
 .../rasqal_security_api_results.json          |    1 +
 .../rdma-core-devel_security_api_results.json |    1 +
 .../rdma-core_security_api_results.json       |    1 +
 .../re2c_security_api_results.json            |    1 +
 .../readline-devel_security_api_results.json  |    1 +
 .../readline_security_api_results.json        |    1 +
 .../readonly-root_security_api_results.json   |    1 +
 .../realmd_security_api_results.json          |    1 +
 .../rear_security_api_results.json            |    1 +
 .../recode-devel_security_api_results.json    |    1 +
 .../recode_security_api_results.json          |    1 +
 .../redfish-finder_security_api_results.json  |    1 +
 ...dhat-backgrounds_security_api_results.json |    1 +
 ...redhat-indexhtml_security_api_results.json |    1 +
 ...dhat-logos-httpd_security_api_results.json |    1 +
 ...redhat-logos-ipa_security_api_results.json |    1 +
 .../redhat-logos_security_api_results.json    |    1 +
 .../redhat-lsb-core_security_api_results.json |    1 +
 .../redhat-lsb-cxx_security_api_results.json  |    1 +
 ...dhat-lsb-desktop_security_api_results.json |    1 +
 ...at-lsb-languages_security_api_results.json |    1 +
 ...hat-lsb-printing_security_api_results.json |    1 +
 ...ubmod-multimedia_security_api_results.json |    1 +
 ...-submod-security_security_api_results.json |    1 +
 .../redhat-lsb_security_api_results.json      |    1 +
 .../redhat-menus_security_api_results.json    |    1 +
 ...hat-release-eula_security_api_results.json |    1 +
 .../redhat-release_security_api_results.json  |    1 +
 ...edhat-rpm-config_security_api_results.json |    1 +
 ...pport-lib-python_security_api_results.json |    1 +
 ...hat-support-tool_security_api_results.json |    1 +
 .../redis-devel_security_api_results.json     |    1 +
 .../redis-doc_security_api_results.json       |    1 +
 .../redis_security_api_results.json           |    1 +
 .../redland-devel_security_api_results.json   |    1 +
 .../redland_security_api_results.json         |    1 +
 .../regexp-javadoc_security_api_results.json  |    1 +
 .../regexp_security_api_results.json          |    1 +
 .../relaxngDatatype_security_api_results.json |    1 +
 ...ce-agents-aliyun_security_api_results.json |    1 +
 ...ource-agents-gcp_security_api_results.json |    1 +
 .../resource-agents_security_api_results.json |    1 +
 .../rest_security_api_results.json            |    1 +
 .../resteasy_security_api_results.json        |    1 +
 ...hel-system-roles_security_api_results.json |    1 +
 .../rhn-check_security_api_results.json       |    1 +
 ...rhn-client-tools_security_api_results.json |    1 +
 .../rhn-custom-info_security_api_results.json |    1 +
 .../rhn-setup-gnome_security_api_results.json |    1 +
 .../rhn-setup_security_api_results.json       |    1 +
 .../rhn-tools_security_api_results.json       |    1 +
 ...tualization-host_security_api_results.json |    1 +
 .../rhncfg-actions_security_api_results.json  |    1 +
 .../rhncfg-client_security_api_results.json   |    1 +
 ...hncfg-management_security_api_results.json |    1 +
 .../rhncfg_security_api_results.json          |    1 +
 .../rhnlib_security_api_results.json          |    1 +
 .../rhnpush_security_api_results.json         |    1 +
 .../rhnsd_security_api_results.json           |    1 +
 .../rhsm-gtk_security_api_results.json        |    1 +
 .../rhsm-icons_security_api_results.json      |    1 +
 .../rhythmbox_security_api_results.json       |    1 +
 .../rls_security_api_results.json             |    1 +
 .../rmt_security_api_results.json             |    1 +
 .../rng-tools_security_api_results.json       |    1 +
 .../rootfiles_security_api_results.json       |    1 +
 .../rpcbind_security_api_results.json         |    1 +
 .../rpcgen_security_api_results.json          |    1 +
 ...csvc-proto-devel_security_api_results.json |    1 +
 .../rpm-apidocs_security_api_results.json     |    1 +
 .../rpm-build-libs_security_api_results.json  |    1 +
 .../rpm-build_security_api_results.json       |    1 +
 .../rpm-cron_security_api_results.json        |    1 +
 .../rpm-devel_security_api_results.json       |    1 +
 .../rpm-libs_security_api_results.json        |    1 +
 .../rpm-mpi-hooks_security_api_results.json   |    1 +
 .../rpm-ostree-libs_security_api_results.json |    1 +
 .../rpm-ostree_security_api_results.json      |    1 +
 .../rpm-plugin-ima_security_api_results.json  |    1 +
 ...plugin-prioreset_security_api_results.json |    1 +
 ...m-plugin-selinux_security_api_results.json |    1 +
 ...pm-plugin-syslog_security_api_results.json |    1 +
 ...-systemd-inhibit_security_api_results.json |    1 +
 .../rpm-sign_security_api_results.json        |    1 +
 .../rpm_security_api_results.json             |    1 +
 .../rpmdevtools_security_api_results.json     |    1 +
 .../rpmemd_security_api_results.json          |    1 +
 .../rpmlint_security_api_results.json         |    1 +
 .../rrdtool-devel_security_api_results.json   |    1 +
 .../rrdtool-doc_security_api_results.json     |    1 +
 .../rrdtool-lua_security_api_results.json     |    1 +
 .../rrdtool-perl_security_api_results.json    |    1 +
 .../rrdtool-ruby_security_api_results.json    |    1 +
 .../rrdtool-tcl_security_api_results.json     |    1 +
 .../rrdtool_security_api_results.json         |    1 +
 .../rsync-daemon_security_api_results.json    |    1 +
 .../rsync_security_api_results.json           |    1 +
 .../rsyslog-crypto_security_api_results.json  |    1 +
 .../rsyslog-doc_security_api_results.json     |    1 +
 ...og-elasticsearch_security_api_results.json |    1 +
 .../rsyslog-gnutls_security_api_results.json  |    1 +
 .../rsyslog-gssapi_security_api_results.json  |    1 +
 .../rsyslog-kafka_security_api_results.json   |    1 +
 .../rsyslog-mmaudit_security_api_results.json |    1 +
 ...slog-mmjsonparse_security_api_results.json |    1 +
 ...log-mmkubernetes_security_api_results.json |    1 +
 ...slog-mmnormalize_security_api_results.json |    1 +
 ...slog-mmsnmptrapd_security_api_results.json |    1 +
 .../rsyslog-mysql_security_api_results.json   |    1 +
 .../rsyslog-pgsql_security_api_results.json   |    1 +
 .../rsyslog-relp_security_api_results.json    |    1 +
 .../rsyslog-snmp_security_api_results.json    |    1 +
 .../rsyslog_security_api_results.json         |    1 +
 .../rtkit_security_api_results.json           |    1 +
 .../ruby-devel_security_api_results.json      |    1 +
 .../ruby-doc_security_api_results.json        |    1 +
 .../ruby-hivex_security_api_results.json      |    1 +
 .../ruby-irb_security_api_results.json        |    1 +
 .../ruby-libguestfs_security_api_results.json |    1 +
 .../ruby-libs_security_api_results.json       |    1 +
 .../ruby_security_api_results.json            |    1 +
 ...rubygem-abrt-doc_security_api_results.json |    1 +
 .../rubygem-abrt_security_api_results.json    |    1 +
 ...bygem-bigdecimal_security_api_results.json |    1 +
 ...rubygem-bson-doc_security_api_results.json |    1 +
 .../rubygem-bson_security_api_results.json    |    1 +
 ...ygem-bundler-doc_security_api_results.json |    1 +
 .../rubygem-bundler_security_api_results.json |    1 +
 ...gem-did_you_mean_security_api_results.json |    1 +
 ...rubygem-diff-lcs_security_api_results.json |    1 +
 ...bygem-io-console_security_api_results.json |    1 +
 .../rubygem-irb_security_api_results.json     |    1 +
 .../rubygem-json_security_api_results.json    |    1 +
 ...rubygem-minitest_security_api_results.json |    1 +
 ...ubygem-mongo-doc_security_api_results.json |    1 +
 .../rubygem-mongo_security_api_results.json   |    1 +
 ...bygem-mysql2-doc_security_api_results.json |    1 +
 .../rubygem-mysql2_security_api_results.json  |    1 +
 ...bygem-net-telnet_security_api_results.json |    1 +
 .../rubygem-openssl_security_api_results.json |    1 +
 .../rubygem-pg-doc_security_api_results.json  |    1 +
 .../rubygem-pg_security_api_results.json      |    1 +
 ...gem-power_assert_security_api_results.json |    1 +
 .../rubygem-psych_security_api_results.json   |    1 +
 .../rubygem-rake_security_api_results.json    |    1 +
 .../rubygem-rdoc_security_api_results.json    |    1 +
 ...bygem-rspec-core_security_api_results.json |    1 +
 ...pec-expectations_security_api_results.json |    1 +
 ...ygem-rspec-mocks_security_api_results.json |    1 +
 ...em-rspec-support_security_api_results.json |    1 +
 .../rubygem-rspec_security_api_results.json   |    1 +
 ...ubygem-test-unit_security_api_results.json |    1 +
 .../rubygem-xmlrpc_security_api_results.json  |    1 +
 .../rubygems-devel_security_api_results.json  |    1 +
 .../rubygems_security_api_results.json        |    1 +
 .../runc_security_api_results.json            |    1 +
 .../rust-analysis_security_api_results.json   |    1 +
 ...-debugger-common_security_api_results.json |    1 +
 .../rust-doc_security_api_results.json        |    1 +
 .../rust-gdb_security_api_results.json        |    1 +
 .../rust-lldb_security_api_results.json       |    1 +
 .../rust-src_security_api_results.json        |    1 +
 ...rust-srpm-macros_security_api_results.json |    1 +
 .../rust-std-static_security_api_results.json |    1 +
 .../rust-toolset_security_api_results.json    |    1 +
 .../rust_security_api_results.json            |    1 +
 .../rustfmt_security_api_results.json         |    1 +
 .../s390utils-base_security_api_results.json  |    1 +
 ...utils-cmsfs-fuse_security_api_results.json |    1 +
 .../s390utils-cmsfs_security_api_results.json |    1 +
 ...tils-cpacfstatsd_security_api_results.json |    1 +
 ...90utils-cpuplugd_security_api_results.json |    1 +
 .../s390utils-devel_security_api_results.json |    1 +
 ...90utils-hmcdrvfs_security_api_results.json |    1 +
 ...90utils-iucvterm_security_api_results.json |    1 +
 ...0utils-mon_statd_security_api_results.json |    1 +
 ...90utils-osasnmpd_security_api_results.json |    1 +
 .../s390utils-zdsfs_security_api_results.json |    1 +
 ...s390utils-ziomon_security_api_results.json |    1 +
 .../s390utils_security_api_results.json       |    1 +
 .../saab-fonts_security_api_results.json      |    1 +
 .../sac_security_api_results.json             |    1 +
 ...amba-client-libs_security_api_results.json |    1 +
 .../samba-client_security_api_results.json    |    1 +
 ...amba-common-libs_security_api_results.json |    1 +
 ...mba-common-tools_security_api_results.json |    1 +
 .../samba-common_security_api_results.json    |    1 +
 ...ba-krb5-printing_security_api_results.json |    1 +
 .../samba-libs_security_api_results.json      |    1 +
 .../samba-pidl_security_api_results.json      |    1 +
 .../samba-test-libs_security_api_results.json |    1 +
 .../samba-test_security_api_results.json      |    1 +
 ...-winbind-clients_security_api_results.json |    1 +
 ...ind-krb5-locator_security_api_results.json |    1 +
 ...-winbind-modules_security_api_results.json |    1 +
 .../samba-winbind_security_api_results.json   |    1 +
 .../samba_security_api_results.json           |    1 +
 ...devanagari-fonts_security_api_results.json |    1 +
 ...yak-fonts-common_security_api_results.json |    1 +
 ...k-gujarati-fonts_security_api_results.json |    1 +
 ...-malayalam-fonts_security_api_results.json |    1 +
 ...amyak-odia-fonts_security_api_results.json |    1 +
 ...myak-tamil-fonts_security_api_results.json |    1 +
 ...-backends-daemon_security_api_results.json |    1 +
 ...e-backends-devel_security_api_results.json |    1 +
 ...ane-backends-doc_security_api_results.json |    1 +
 ...-drivers-cameras_security_api_results.json |    1 +
 ...drivers-scanners_security_api_results.json |    1 +
 ...ne-backends-libs_security_api_results.json |    1 +
 .../sane-backends_security_api_results.json   |    1 +
 .../sane-frontends_security_api_results.json  |    1 +
 .../sanlk-reset_security_api_results.json     |    1 +
 .../sanlock-devel_security_api_results.json   |    1 +
 .../sanlock-lib_security_api_results.json     |    1 +
 .../sanlock_security_api_results.json         |    1 +
 .../sassist_security_api_results.json         |    1 +
 ...tellite-5-client_security_api_results.json |    1 +
 .../satyr_security_api_results.json           |    1 +
 .../sbc_security_api_results.json             |    1 +
 .../sbd_security_api_results.json             |    1 +
 .../sblim-cmpi-base_security_api_results.json |    1 +
 ...sblim-cmpi-devel_security_api_results.json |    1 +
 ...ndication_helper_security_api_results.json |    1 +
 .../sblim-sfcCommon_security_api_results.json |    1 +
 .../sblim-sfcb_security_api_results.json      |    1 +
 ...sblim-sfcc-devel_security_api_results.json |    1 +
 .../sblim-sfcc_security_api_results.json      |    1 +
 .../sblim-wbemcli_security_api_results.json   |    1 +
 .../scala-apidoc_security_api_results.json    |    1 +
 .../scala-swing_security_api_results.json     |    1 +
 .../scala_security_api_results.json           |    1 +
 ...curity-guide-doc_security_api_results.json |    1 +
 ...p-security-guide_security_api_results.json |    1 +
 .../scap-workbench_security_api_results.json  |    1 +
 .../scl-utils-build_security_api_results.json |    1 +
 .../scl-utils_security_api_results.json       |    1 +
 .../scotch-devel_security_api_results.json    |    1 +
 .../scotch_security_api_results.json          |    1 +
 .../scrub_security_api_results.json           |    1 +
 .../seabios-bin_security_api_results.json     |    1 +
 .../seabios_security_api_results.json         |    1 +
 .../seahorse_security_api_results.json        |    1 +
 .../seavgabios-bin_security_api_results.json  |    1 +
 .../sed_security_api_results.json             |    1 +
 ...nux-policy-devel_security_api_results.json |    1 +
 ...linux-policy-doc_security_api_results.json |    1 +
 ...x-policy-minimum_security_api_results.json |    1 +
 ...linux-policy-mls_security_api_results.json |    1 +
 ...x-policy-sandbox_security_api_results.json |    1 +
 ...-policy-targeted_security_api_results.json |    1 +
 .../selinux-policy_security_api_results.json  |    1 +
 .../sendmail-cf_security_api_results.json     |    1 +
 .../sendmail-doc_security_api_results.json    |    1 +
 ...ail-milter-devel_security_api_results.json |    1 +
 .../sendmail-milter_security_api_results.json |    1 +
 .../sendmail_security_api_results.json        |    1 +
 .../servicelog_security_api_results.json      |    1 +
 ...console-analyses_security_api_results.json |    1 +
 .../setools-console_security_api_results.json |    1 +
 .../setools-gui_security_api_results.json     |    1 +
 .../setools_security_api_results.json         |    1 +
 ...bleshoot-plugins_security_api_results.json |    1 +
 ...ubleshoot-server_security_api_results.json |    1 +
 .../setroubleshoot_security_api_results.json  |    1 +
 .../setserial_security_api_results.json       |    1 +
 .../setup_security_api_results.json           |    1 +
 .../sg3_utils-devel_security_api_results.json |    1 +
 .../sg3_utils-libs_security_api_results.json  |    1 +
 .../sg3_utils_security_api_results.json       |    1 +
 .../sgabios-bin_security_api_results.json     |    1 +
 .../sgabios_security_api_results.json         |    1 +
 .../sgml-common_security_api_results.json     |    1 +
 .../sgpio_security_api_results.json           |    1 +
 .../shadow-utils_security_api_results.json    |    1 +
 ...shared-mime-info_security_api_results.json |    1 +
 .../sharutils_security_api_results.json       |    1 +
 .../shim-aa64_security_api_results.json       |    1 +
 .../shim-ia32_security_api_results.json       |    1 +
 ...unsigned-aarch64_security_api_results.json |    1 +
 ...him-unsigned-x64_security_api_results.json |    1 +
 .../shim-x64_security_api_results.json        |    1 +
 ...si-units-javadoc_security_api_results.json |    1 +
 .../si-units_security_api_results.json        |    1 +
 ...abyssinica-fonts_security_api_results.json |    1 +
 .../sil-nuosu-fonts_security_api_results.json |    1 +
 ...adauk-book-fonts_security_api_results.json |    1 +
 ...sil-padauk-fonts_security_api_results.json |    1 +
 ...heherazade-fonts_security_api_results.json |    1 +
 .../sip_security_api_results.json             |    1 +
 .../sisu-inject_security_api_results.json     |    1 +
 .../sisu-javadoc_security_api_results.json    |    1 +
 ...su-mojos-javadoc_security_api_results.json |    1 +
 .../sisu-mojos_security_api_results.json      |    1 +
 .../sisu-plexus_security_api_results.json     |    1 +
 .../sisu_security_api_results.json            |    1 +
 .../skkdic_security_api_results.json          |    1 +
 .../skopeo-tests_security_api_results.json    |    1 +
 .../skopeo_security_api_results.json          |    1 +
 .../slang-devel_security_api_results.json     |    1 +
 .../slang_security_api_results.json           |    1 +
 .../slapi-nis_security_api_results.json       |    1 +
 .../slf4j-ext_security_api_results.json       |    1 +
 .../slf4j-javadoc_security_api_results.json   |    1 +
 .../slf4j-jcl_security_api_results.json       |    1 +
 .../slf4j-jdk14_security_api_results.json     |    1 +
 .../slf4j-log4j12_security_api_results.json   |    1 +
 .../slf4j-manual_security_api_results.json    |    1 +
 .../slf4j-sources_security_api_results.json   |    1 +
 .../slf4j_security_api_results.json           |    1 +
 .../slirp4netns_security_api_results.json     |    1 +
 .../smartmontools_security_api_results.json   |    1 +
 ...alioldlipi-fonts_security_api_results.json |    1 +
 ...smc-dyuthi-fonts_security_api_results.json |    1 +
 ...smc-fonts-common_security_api_results.json |    1 +
 ...mc-kalyani-fonts_security_api_results.json |    1 +
 .../smc-meera-fonts_security_api_results.json |    1 +
 ...mc-rachana-fonts_security_api_results.json |    1 +
 ...umalayalam-fonts_security_api_results.json |    1 +
 ...smc-suruma-fonts_security_api_results.json |    1 +
 .../smc-tools_security_api_results.json       |    1 +
 .../snappy-devel_security_api_results.json    |    1 +
 .../snappy_security_api_results.json          |    1 +
 .../socat_security_api_results.json           |    1 +
 .../socket_wrapper_security_api_results.json  |    1 +
 .../softhsm-devel_security_api_results.json   |    1 +
 .../softhsm_security_api_results.json         |    1 +
 .../sombok-devel_security_api_results.json    |    1 +
 .../sombok_security_api_results.json          |    1 +
 ...atype-oss-parent_security_api_results.json |    1 +
 ...e-plugins-parent_security_api_results.json |    1 +
 .../sos-audit_security_api_results.json       |    1 +
 .../sos-collector_security_api_results.json   |    1 +
 .../sos_security_api_results.json             |    1 +
 ...heme-freedesktop_security_api_results.json |    1 +
 ...soundtouch-devel_security_api_results.json |    1 +
 .../soundtouch_security_api_results.json      |    1 +
 ...source-highlight_security_api_results.json |    1 +
 .../spacewalk-abrt_security_api_results.json  |    1 +
 ...walk-client-cert_security_api_results.json |    1 +
 .../spacewalk-koan_security_api_results.json  |    1 +
 .../spacewalk-oscap_security_api_results.json |    1 +
 ...alk-remote-utils_security_api_results.json |    1 +
 .../spacewalk-usix_security_api_results.json  |    1 +
 .../spamassassin_security_api_results.json    |    1 +
 ...sparsehash-devel_security_api_results.json |    1 +
 .../spausedd_security_api_results.json        |    1 +
 .../spax_security_api_results.json            |    1 +
 ...n-plugin-javadoc_security_api_results.json |    1 +
 ...ion-maven-plugin_security_api_results.json |    1 +
 ...dispatcher-devel_security_api_results.json |    1 +
 ...h-dispatcher-doc_security_api_results.json |    1 +
 ...atcher-espeak-ng_security_api_results.json |    1 +
 ...peech-dispatcher_security_api_results.json |    1 +
 .../speex-devel_security_api_results.json     |    1 +
 .../speex_security_api_results.json           |    1 +
 .../speexdsp-devel_security_api_results.json  |    1 +
 .../speexdsp_security_api_results.json        |    1 +
 ...e-client-win-x64_security_api_results.json |    1 +
 ...e-client-win-x86_security_api_results.json |    1 +
 ...spice-glib-devel_security_api_results.json |    1 +
 .../spice-glib_security_api_results.json      |    1 +
 .../spice-gtk-tools_security_api_results.json |    1 +
 ...spice-gtk3-devel_security_api_results.json |    1 +
 .../spice-gtk3-vala_security_api_results.json |    1 +
 .../spice-gtk3_security_api_results.json      |    1 +
 .../spice-gtk_security_api_results.json       |    1 +
 .../spice-parent_security_api_results.json    |    1 +
 .../spice-protocol_security_api_results.json  |    1 +
 ...ice-qxl-wddm-dod_security_api_results.json |    1 +
 .../spice-qxl-xddm_security_api_results.json  |    1 +
 ...ice-server-devel_security_api_results.json |    1 +
 .../spice-server_security_api_results.json    |    1 +
 ...-streaming-agent_security_api_results.json |    1 +
 ...-vdagent-win-x64_security_api_results.json |    1 +
 ...-vdagent-win-x86_security_api_results.json |    1 +
 .../spice-vdagent_security_api_results.json   |    1 +
 ...pirv-tools-devel_security_api_results.json |    1 +
 ...spirv-tools-libs_security_api_results.json |    1 +
 .../spirv-tools_security_api_results.json     |    1 +
 .../splix_security_api_results.json           |    1 +
 .../sqlite-devel_security_api_results.json    |    1 +
 .../sqlite-doc_security_api_results.json      |    1 +
 .../sqlite-libs_security_api_results.json     |    1 +
 .../sqlite_security_api_results.json          |    1 +
 .../squashfs-tools_security_api_results.json  |    1 +
 .../squid_security_api_results.json           |    1 +
 .../srp_daemon_security_api_results.json      |    1 +
 .../sscg_security_api_results.json            |    1 +
 .../sssd-ad_security_api_results.json         |    1 +
 .../sssd-client_security_api_results.json     |    1 +
 .../sssd-common-pac_security_api_results.json |    1 +
 .../sssd-common_security_api_results.json     |    1 +
 .../sssd-dbus_security_api_results.json       |    1 +
 .../sssd-ipa_security_api_results.json        |    1 +
 .../sssd-kcm_security_api_results.json        |    1 +
 ...sssd-krb5-common_security_api_results.json |    1 +
 .../sssd-krb5_security_api_results.json       |    1 +
 .../sssd-ldap_security_api_results.json       |    1 +
 ...sssd-libwbclient_security_api_results.json |    1 +
 .../sssd-nfs-idmap_security_api_results.json  |    1 +
 ...ssd-polkit-rules_security_api_results.json |    1 +
 .../sssd-proxy_security_api_results.json      |    1 +
 .../sssd-tools_security_api_results.json      |    1 +
 ...sd-winbind-idmap_security_api_results.json |    1 +
 .../sssd_security_api_results.json            |    1 +
 .../star_security_api_results.json            |    1 +
 ...tification-devel_security_api_results.json |    1 +
 ...tup-notification_security_api_results.json |    1 +
 .../stax-ex_security_api_results.json         |    1 +
 .../stix-fonts_security_api_results.json      |    1 +
 .../stix-math-fonts_security_api_results.json |    1 +
 .../strace_security_api_results.json          |    1 +
 .../stratis-cli_security_api_results.json     |    1 +
 .../stratisd_security_api_results.json        |    1 +
 .../stunnel_security_api_results.json         |    1 +
 ...-manager-cockpit_security_api_results.json |    1 +
 ...tial-setup-addon_security_api_results.json |    1 +
 ...r-migration-data_security_api_results.json |    1 +
 ...anager-migration_security_api_results.json |    1 +
 ...er-plugin-ostree_security_api_results.json |    1 +
 ...hsm-certificates_security_api_results.json |    1 +
 ...cription-manager_security_api_results.json |    1 +
 ...subversion-devel_security_api_results.json |    1 +
 ...subversion-gnome_security_api_results.json |    1 +
 ...ubversion-javahl_security_api_results.json |    1 +
 .../subversion-libs_security_api_results.json |    1 +
 .../subversion-perl_security_api_results.json |    1 +
 ...subversion-tools_security_api_results.json |    1 +
 .../subversion_security_api_results.json      |    1 +
 .../sudo_security_api_results.json            |    1 +
 ...uitesparse-devel_security_api_results.json |    1 +
 .../suitesparse_security_api_results.json     |    1 +
 .../supermin-devel_security_api_results.json  |    1 +
 .../supermin_security_api_results.json        |    1 +
 .../sushi_security_api_results.json           |    1 +
 .../swig-doc_security_api_results.json        |    1 +
 .../swig-gdb_security_api_results.json        |    1 +
 .../swig_security_api_results.json            |    1 +
 ...itcheroo-control_security_api_results.json |    1 +
 .../symlinks_security_api_results.json        |    1 +
 .../sysfsutils_security_api_results.json      |    1 +
 ...xtlinux-nonlinux_security_api_results.json |    1 +
 ...yslinux-extlinux_security_api_results.json |    1 +
 ...yslinux-nonlinux_security_api_results.json |    1 +
 ...yslinux-tftpboot_security_api_results.json |    1 +
 .../syslinux_security_api_results.json        |    1 +
 .../sysstat_security_api_results.json         |    1 +
 ...fig-printer-libs_security_api_results.json |    1 +
 ...fig-printer-udev_security_api_results.json |    1 +
 ...-storage-manager_security_api_results.json |    1 +
 ...ystemd-container_security_api_results.json |    1 +
 .../systemd-devel_security_api_results.json   |    1 +
 ...d-journal-remote_security_api_results.json |    1 +
 .../systemd-libs_security_api_results.json    |    1 +
 .../systemd-pam_security_api_results.json     |    1 +
 .../systemd-tests_security_api_results.json   |    1 +
 .../systemd-udev_security_api_results.json    |    1 +
 .../systemd_security_api_results.json         |    1 +
 ...systemtap-client_security_api_results.json |    1 +
 .../systemtap-devel_security_api_results.json |    1 +
 ...stemtap-exporter_security_api_results.json |    1 +
 ...emtap-initscript_security_api_results.json |    1 +
 ...tap-runtime-java_security_api_results.json |    1 +
 ...-runtime-python3_security_api_results.json |    1 +
 ...untime-virtguest_security_api_results.json |    1 +
 ...runtime-virthost_security_api_results.json |    1 +
 ...ystemtap-runtime_security_api_results.json |    1 +
 ...temtap-sdt-devel_security_api_results.json |    1 +
 ...systemtap-server_security_api_results.json |    1 +
 .../systemtap_security_api_results.json       |    1 +
 .../taglib-devel_security_api_results.json    |    1 +
 .../taglib_security_api_results.json          |    1 +
 .../tagsoup_security_api_results.json         |    1 +
 .../tang_security_api_results.json            |    1 +
 .../tar_security_api_results.json             |    1 +
 .../target-restore_security_api_results.json  |    1 +
 .../targetcli_security_api_results.json       |    1 +
 .../tbb-devel_security_api_results.json       |    1 +
 .../tbb-doc_security_api_results.json         |    1 +
 .../tbb_security_api_results.json             |    1 +
 .../tboot_security_api_results.json           |    1 +
 .../tcl-brlapi_security_api_results.json      |    1 +
 .../tcl-devel_security_api_results.json       |    1 +
 .../tcl-doc_security_api_results.json         |    1 +
 .../tcl_security_api_results.json             |    1 +
 .../tcpdump_security_api_results.json         |    1 +
 .../tcsh_security_api_results.json            |    1 +
 .../tdb-tools_security_api_results.json       |    1 +
 .../teamd_security_api_results.json           |    1 +
 .../teckit_security_api_results.json          |    1 +
 .../telnet-server_security_api_results.json   |    1 +
 .../telnet_security_api_results.json          |    1 +
 .../testng-javadoc_security_api_results.json  |    1 +
 .../testng_security_api_results.json          |    1 +
 ...tex-fonts-hebrew_security_api_results.json |    1 +
 .../texi2html_security_api_results.json       |    1 +
 .../texinfo-tex_security_api_results.json     |    1 +
 .../texinfo_security_api_results.json         |    1 +
 ...exlive-adjustbox_security_api_results.json |    1 +
 .../texlive-ae_security_api_results.json      |    1 +
 ...xlive-algorithms_security_api_results.json |    1 +
 .../texlive-amscls_security_api_results.json  |    1 +
 ...texlive-amsfonts_security_api_results.json |    1 +
 .../texlive-amsmath_security_api_results.json |    1 +
 ...live-anyfontsize_security_api_results.json |    1 +
 .../texlive-anysize_security_api_results.json |    1 +
 ...texlive-appendix_security_api_results.json |    1 +
 ...exlive-arabxetex_security_api_results.json |    1 +
 .../texlive-arphic_security_api_results.json  |    1 +
 ...xlive-attachfile_security_api_results.json |    1 +
 ...texlive-avantgar_security_api_results.json |    1 +
 ...xlive-awesomebox_security_api_results.json |    1 +
 ...ve-babel-english_security_api_results.json |    1 +
 .../texlive-babel_security_api_results.json   |    1 +
 ...texlive-babelbib_security_api_results.json |    1 +
 .../texlive-base_security_api_results.json    |    1 +
 .../texlive-beamer_security_api_results.json  |    1 +
 .../texlive-bera_security_api_results.json    |    1 +
 .../texlive-beton_security_api_results.json   |    1 +
 .../texlive-bibtex_security_api_results.json  |    1 +
 ...texlive-bibtopic_security_api_results.json |    1 +
 .../texlive-bidi_security_api_results.json    |    1 +
 .../texlive-bigfoot_security_api_results.json |    1 +
 .../texlive-bookman_security_api_results.json |    1 +
 ...texlive-booktabs_security_api_results.json |    1 +
 ...texlive-breakurl_security_api_results.json |    1 +
 .../texlive-breqn_security_api_results.json   |    1 +
 .../texlive-capt-of_security_api_results.json |    1 +
 .../texlive-caption_security_api_results.json |    1 +
 ...texlive-carlisle_security_api_results.json |    1 +
 ...exlive-changebar_security_api_results.json |    1 +
 ...xlive-changepage_security_api_results.json |    1 +
 .../texlive-charter_security_api_results.json |    1 +
 ...texlive-chngcntr_security_api_results.json |    1 +
 .../texlive-cite_security_api_results.json    |    1 +
 .../texlive-cjk_security_api_results.json     |    1 +
 ...exlive-classpack_security_api_results.json |    1 +
 .../texlive-cm-lgc_security_api_results.json  |    1 +
 ...texlive-cm-super_security_api_results.json |    1 +
 .../texlive-cm_security_api_results.json      |    1 +
 .../texlive-cmap_security_api_results.json    |    1 +
 .../texlive-cmextra_security_api_results.json |    1 +
 .../texlive-cns_security_api_results.json     |    1 +
 ...xlive-collectbox_security_api_results.json |    1 +
 ...collection-basic_security_api_results.json |    1 +
 ...fontsrecommended_security_api_results.json |    1 +
 ...llection-htmlxml_security_api_results.json |    1 +
 ...collection-latex_security_api_results.json |    1 +
 ...latexrecommended_security_api_results.json |    1 +
 ...collection-xetex_security_api_results.json |    1 +
 ...texlive-colortbl_security_api_results.json |    1 +
 .../texlive-courier_security_api_results.json |    1 +
 .../texlive-crop_security_api_results.json    |    1 +
 ...texlive-csquotes_security_api_results.json |    1 +
 .../texlive-ctable_security_api_results.json  |    1 +
 ...live-ctablestack_security_api_results.json |    1 +
 ...texlive-currfile_security_api_results.json |    1 +
 ...texlive-datetime_security_api_results.json |    1 +
 ...texlive-dvipdfmx_security_api_results.json |    1 +
 .../texlive-dvipng_security_api_results.json  |    1 +
 .../texlive-dvips_security_api_results.json   |    1 +
 .../texlive-dvisvgm_security_api_results.json |    1 +
 .../texlive-ec_security_api_results.json      |    1 +
 .../texlive-eepic_security_api_results.json   |    1 +
 .../texlive-enctex_security_api_results.json  |    1 +
 ...texlive-enumitem_security_api_results.json |    1 +
 .../texlive-environ_security_api_results.json |    1 +
 .../texlive-epsf_security_api_results.json    |    1 +
 ...texlive-epstopdf_security_api_results.json |    1 +
 ...texlive-eqparbox_security_api_results.json |    1 +
 .../texlive-eso-pic_security_api_results.json |    1 +
 ...texlive-etex-pkg_security_api_results.json |    1 +
 .../texlive-etex_security_api_results.json    |    1 +
 ...texlive-etoolbox_security_api_results.json |    1 +
 .../texlive-euenc_security_api_results.json   |    1 +
 .../texlive-euler_security_api_results.json   |    1 +
 .../texlive-euro_security_api_results.json    |    1 +
 .../texlive-eurosym_security_api_results.json |    1 +
 ...texlive-extsizes_security_api_results.json |    1 +
 ...texlive-fancybox_security_api_results.json |    1 +
 ...texlive-fancyhdr_security_api_results.json |    1 +
 ...texlive-fancyref_security_api_results.json |    1 +
 ...texlive-fancyvrb_security_api_results.json |    1 +
 ...ive-filecontents_security_api_results.json |    1 +
 ...texlive-filehook_security_api_results.json |    1 +
 ...texlive-finstrut_security_api_results.json |    1 +
 .../texlive-fix2col_security_api_results.json |    1 +
 ...xlive-fixlatvian_security_api_results.json |    1 +
 .../texlive-float_security_api_results.json   |    1 +
 ...texlive-fmtcount_security_api_results.json |    1 +
 ...texlive-fncychap_security_api_results.json |    1 +
 ...live-fontawesome_security_api_results.json |    1 +
 ...texlive-fontbook_security_api_results.json |    1 +
 ...xlive-fonts-tlwg_security_api_results.json |    1 +
 ...texlive-fontspec_security_api_results.json |    1 +
 ...texlive-fontware_security_api_results.json |    1 +
 ...texlive-fontwrap_security_api_results.json |    1 +
 ...texlive-footmisc_security_api_results.json |    1 +
 .../texlive-fp_security_api_results.json      |    1 +
 .../texlive-fpl_security_api_results.json     |    1 +
 .../texlive-framed_security_api_results.json  |    1 +
 ...xlive-garuda-c90_security_api_results.json |    1 +
 ...texlive-geometry_security_api_results.json |    1 +
 ...exlive-glyphlist_security_api_results.json |    1 +
 ...ive-graphics-cfg_security_api_results.json |    1 +
 ...ive-graphics-def_security_api_results.json |    1 +
 ...texlive-graphics_security_api_results.json |    1 +
 .../texlive-gsftopk_security_api_results.json |    1 +
 ...texlive-helvetic_security_api_results.json |    1 +
 ...texlive-hyperref_security_api_results.json |    1 +
 ...exlive-hyph-utf8_security_api_results.json |    1 +
 ...live-hyphen-base_security_api_results.json |    1 +
 ...texlive-hyphenat_security_api_results.json |    1 +
 .../texlive-ifetex_security_api_results.json  |    1 +
 ...texlive-ifluatex_security_api_results.json |    1 +
 .../texlive-ifmtarg_security_api_results.json |    1 +
 ...exlive-ifoddpage_security_api_results.json |    1 +
 .../texlive-iftex_security_api_results.json   |    1 +
 .../texlive-ifxetex_security_api_results.json |    1 +
 .../texlive-import_security_api_results.json  |    1 +
 .../texlive-index_security_api_results.json   |    1 +
 .../texlive-jadetex_security_api_results.json |    1 +
 ...texlive-jknapltx_security_api_results.json |    1 +
 .../texlive-kastrup_security_api_results.json |    1 +
 .../texlive-kerkis_security_api_results.json  |    1 +
 ...exlive-knuth-lib_security_api_results.json |    1 +
 ...live-knuth-local_security_api_results.json |    1 +
 ...live-koma-script_security_api_results.json |    1 +
 ...texlive-kpathsea_security_api_results.json |    1 +
 ...e-l3experimental_security_api_results.json |    1 +
 ...texlive-l3kernel_security_api_results.json |    1 +
 ...xlive-l3packages_security_api_results.json |    1 +
 ...texlive-lastpage_security_api_results.json |    1 +
 ...live-latex-fonts_security_api_results.json |    1 +
 ...exlive-latex2man_security_api_results.json |    1 +
 .../texlive-latex_security_api_results.json   |    1 +
 ...live-latexconfig_security_api_results.json |    1 +
 ...texlive-lettrine_security_api_results.json |    1 +
 ...exlive-lib-devel_security_api_results.json |    1 +
 .../texlive-lib_security_api_results.json     |    1 +
 ...texlive-linegoal_security_api_results.json |    1 +
 .../texlive-lineno_security_api_results.json  |    1 +
 ...texlive-listings_security_api_results.json |    1 +
 .../texlive-lm-math_security_api_results.json |    1 +
 .../texlive-lm_security_api_results.json      |    1 +
 ...texlive-ltabptch_security_api_results.json |    1 +
 .../texlive-ltxmisc_security_api_results.json |    1 +
 ...e-lua-alt-getopt_security_api_results.json |    1 +
 ...ve-lualatex-math_security_api_results.json |    1 +
 .../texlive-lualibs_security_api_results.json |    1 +
 ...xlive-luaotfload_security_api_results.json |    1 +
 ...texlive-luatex85_security_api_results.json |    1 +
 .../texlive-luatex_security_api_results.json  |    1 +
 ...xlive-luatexbase_security_api_results.json |    1 +
 ...texlive-makecmds_security_api_results.json |    1 +
 ...exlive-makeindex_security_api_results.json |    1 +
 ...live-manfnt-font_security_api_results.json |    1 +
 ...xlive-marginnote_security_api_results.json |    1 +
 ...texlive-marvosym_security_api_results.json |    1 +
 ...texlive-mathpazo_security_api_results.json |    1 +
 ...texlive-mathspec_security_api_results.json |    1 +
 ...exlive-mathtools_security_api_results.json |    1 +
 ...texlive-mdwtools_security_api_results.json |    1 +
 .../texlive-memoir_security_api_results.json  |    1 +
 ...texlive-metafont_security_api_results.json |    1 +
 ...texlive-metalogo_security_api_results.json |    1 +
 ...texlive-metapost_security_api_results.json |    1 +
 ...live-mflogo-font_security_api_results.json |    1 +
 .../texlive-mflogo_security_api_results.json  |    1 +
 .../texlive-mfnfss_security_api_results.json  |    1 +
 .../texlive-mfware_security_api_results.json  |    1 +
 ...exlive-microtype_security_api_results.json |    1 +
 ...texlive-mnsymbol_security_api_results.json |    1 +
 ...texlive-mparhack_security_api_results.json |    1 +
 .../texlive-mptopdf_security_api_results.json |    1 +
 .../texlive-ms_security_api_results.json      |    1 +
 .../texlive-multido_security_api_results.json |    1 +
 ...texlive-multirow_security_api_results.json |    1 +
 .../texlive-natbib_security_api_results.json  |    1 +
 ...texlive-ncctools_security_api_results.json |    1 +
 ...texlive-ncntrsbk_security_api_results.json |    1 +
 ...exlive-needspace_security_api_results.json |    1 +
 ...xlive-norasi-c90_security_api_results.json |    1 +
 ...texlive-ntgclass_security_api_results.json |    1 +
 ...texlive-oberdiek_security_api_results.json |    1 +
 .../texlive-overpic_security_api_results.json |    1 +
 ...texlive-palatino_security_api_results.json |    1 +
 ...texlive-paralist_security_api_results.json |    1 +
 ...texlive-parallel_security_api_results.json |    1 +
 .../texlive-parskip_security_api_results.json |    1 +
 ...xlive-passivetex_security_api_results.json |    1 +
 ...texlive-pdfpages_security_api_results.json |    1 +
 .../texlive-pdftex_security_api_results.json  |    1 +
 .../texlive-pgf_security_api_results.json     |    1 +
 ...xlive-philokalia_security_api_results.json |    1 +
 ...texlive-placeins_security_api_results.json |    1 +
 .../texlive-plain_security_api_results.json   |    1 +
 ...live-polyglossia_security_api_results.json |    1 +
 ...texlive-powerdot_security_api_results.json |    1 +
 ...texlive-preprint_security_api_results.json |    1 +
 .../texlive-psfrag_security_api_results.json  |    1 +
 .../texlive-pslatex_security_api_results.json |    1 +
 .../texlive-psnfss_security_api_results.json  |    1 +
 ...exlive-pspicture_security_api_results.json |    1 +
 .../texlive-pst-3d_security_api_results.json  |    1 +
 ...texlive-pst-blur_security_api_results.json |    1 +
 ...texlive-pst-coil_security_api_results.json |    1 +
 .../texlive-pst-eps_security_api_results.json |    1 +
 ...texlive-pst-fill_security_api_results.json |    1 +
 ...texlive-pst-grad_security_api_results.json |    1 +
 ...texlive-pst-math_security_api_results.json |    1 +
 ...texlive-pst-node_security_api_results.json |    1 +
 ...texlive-pst-plot_security_api_results.json |    1 +
 ...texlive-pst-slpe_security_api_results.json |    1 +
 ...texlive-pst-text_security_api_results.json |    1 +
 ...texlive-pst-tree_security_api_results.json |    1 +
 ...ive-pstricks-add_security_api_results.json |    1 +
 ...texlive-pstricks_security_api_results.json |    1 +
 .../texlive-ptext_security_api_results.json   |    1 +
 .../texlive-pxfonts_security_api_results.json |    1 +
 .../texlive-qstest_security_api_results.json  |    1 +
 .../texlive-rcs_security_api_results.json     |    1 +
 ...live-realscripts_security_api_results.json |    1 +
 .../texlive-rsfs_security_api_results.json    |    1 +
 ...texlive-sansmath_security_api_results.json |    1 +
 .../texlive-sauerj_security_api_results.json  |    1 +
 ...ive-scheme-basic_security_api_results.json |    1 +
 .../texlive-section_security_api_results.json |    1 +
 .../texlive-sectsty_security_api_results.json |    1 +
 .../texlive-seminar_security_api_results.json |    1 +
 .../texlive-sepnum_security_api_results.json  |    1 +
 ...texlive-setspace_security_api_results.json |    1 +
 ...texlive-showexpl_security_api_results.json |    1 +
 .../texlive-soul_security_api_results.json    |    1 +
 ...texlive-stmaryrd_security_api_results.json |    1 +
 .../texlive-subfig_security_api_results.json  |    1 +
 ...exlive-subfigure_security_api_results.json |    1 +
 ...texlive-svn-prov_security_api_results.json |    1 +
 .../texlive-symbol_security_api_results.json  |    1 +
 .../texlive-t2_security_api_results.json      |    1 +
 .../texlive-tabu_security_api_results.json    |    1 +
 ...texlive-tabulary_security_api_results.json |    1 +
 .../texlive-tetex_security_api_results.json   |    1 +
 ...ve-tex-gyre-math_security_api_results.json |    1 +
 ...texlive-tex-gyre_security_api_results.json |    1 +
 ...ve-tex-ini-files_security_api_results.json |    1 +
 .../texlive-tex4ht_security_api_results.json  |    1 +
 .../texlive-tex_security_api_results.json     |    1 +
 ...exlive-texconfig_security_api_results.json |    1 +
 ...xlive-common-doc_security_api_results.json |    1 +
 ...texlive-docindex_security_api_results.json |    1 +
 ...xlive-texlive-en_security_api_results.json |    1 +
 ...msg-translations_security_api_results.json |    1 +
 ...-texlive-scripts_security_api_results.json |    1 +
 ...ve-texlive.infra_security_api_results.json |    1 +
 ...texlive-textcase_security_api_results.json |    1 +
 .../texlive-textpos_security_api_results.json |    1 +
 ...e-threeparttable_security_api_results.json |    1 +
 ...texlive-thumbpdf_security_api_results.json |    1 +
 .../texlive-times_security_api_results.json   |    1 +
 .../texlive-tipa_security_api_results.json    |    1 +
 ...texlive-titlesec_security_api_results.json |    1 +
 .../texlive-titling_security_api_results.json |    1 +
 .../texlive-tocloft_security_api_results.json |    1 +
 .../texlive-tools_security_api_results.json   |    1 +
 ...xlive-trimspaces_security_api_results.json |    1 +
 .../texlive-txfonts_security_api_results.json |    1 +
 .../texlive-type1cm_security_api_results.json |    1 +
 ...texlive-typehtml_security_api_results.json |    1 +
 ...ive-ucharclasses_security_api_results.json |    1 +
 .../texlive-ucs_security_api_results.json     |    1 +
 .../texlive-uhc_security_api_results.json     |    1 +
 .../texlive-ulem_security_api_results.json    |    1 +
 ...xlive-underscore_security_api_results.json |    1 +
 ...ive-unicode-data_security_api_results.json |    1 +
 ...ive-unicode-math_security_api_results.json |    1 +
 ...texlive-unisugar_security_api_results.json |    1 +
 ...xlive-updmap-map_security_api_results.json |    1 +
 .../texlive-upquote_security_api_results.json |    1 +
 .../texlive-url_security_api_results.json     |    1 +
 .../texlive-utopia_security_api_results.json  |    1 +
 ...texlive-varwidth_security_api_results.json |    1 +
 .../texlive-wadalab_security_api_results.json |    1 +
 .../texlive-was_security_api_results.json     |    1 +
 ...texlive-wasy2-ps_security_api_results.json |    1 +
 .../texlive-wasy_security_api_results.json    |    1 +
 .../texlive-wasysym_security_api_results.json |    1 +
 .../texlive-wrapfig_security_api_results.json |    1 +
 .../texlive-xcolor_security_api_results.json  |    1 +
 .../texlive-xdvi_security_api_results.json    |    1 +
 .../texlive-xecjk_security_api_results.json   |    1 +
 .../texlive-xecolor_security_api_results.json |    1 +
 .../texlive-xecyr_security_api_results.json   |    1 +
 .../texlive-xeindex_security_api_results.json |    1 +
 ...exlive-xepersian_security_api_results.json |    1 +
 ...texlive-xesearch_security_api_results.json |    1 +
 ...ive-xetex-itrans_security_api_results.json |    1 +
 ...e-xetex-pstricks_security_api_results.json |    1 +
 ...ve-xetex-tibetan_security_api_results.json |    1 +
 .../texlive-xetex_security_api_results.json   |    1 +
 ...live-xetexconfig_security_api_results.json |    1 +
 ...ve-xetexfontinfo_security_api_results.json |    1 +
 .../texlive-xifthen_security_api_results.json |    1 +
 .../texlive-xkeyval_security_api_results.json |    1 +
 .../texlive-xltxtra_security_api_results.json |    1 +
 .../texlive-xmltex_security_api_results.json  |    1 +
 ...ive-xmltexconfig_security_api_results.json |    1 +
 .../texlive-xstring_security_api_results.json |    1 +
 .../texlive-xtab_security_api_results.json    |    1 +
 ...texlive-xunicode_security_api_results.json |    1 +
 ...texlive-zapfchan_security_api_results.json |    1 +
 ...texlive-zapfding_security_api_results.json |    1 +
 .../texlive_security_api_results.json         |    1 +
 .../tftp-server_security_api_results.json     |    1 +
 .../tftp_security_api_results.json            |    1 +
 ...ble-fonts-common_security_api_results.json |    1 +
 ...ble-garuda-fonts_security_api_results.json |    1 +
 ...le-kinnari-fonts_security_api_results.json |    1 +
 ...e-laksaman-fonts_security_api_results.json |    1 +
 ...lable-loma-fonts_security_api_results.json |    1 +
 ...ble-norasi-fonts_security_api_results.json |    1 +
 ...ble-purisa-fonts_security_api_results.json |    1 +
 ...e-sawasdee-fonts_security_api_results.json |    1 +
 ...e-tlwgmono-fonts_security_api_results.json |    1 +
 ...typewriter-fonts_security_api_results.json |    1 +
 ...tlwgtypist-fonts_security_api_results.json |    1 +
 ...e-tlwgtypo-fonts_security_api_results.json |    1 +
 ...ble-umpush-fonts_security_api_results.json |    1 +
 ...able-waree-fonts_security_api_results.json |    1 +
 .../theora-tools_security_api_results.json    |    1 +
 .../thunderbird_security_api_results.json     |    1 +
 ...achine-uni-fonts_security_api_results.json |    1 +
 .../tigervnc-icons_security_api_results.json  |    1 +
 ...tigervnc-license_security_api_results.json |    1 +
 ...nc-server-applet_security_api_results.json |    1 +
 ...c-server-minimal_security_api_results.json |    1 +
 ...nc-server-module_security_api_results.json |    1 +
 .../tigervnc-server_security_api_results.json |    1 +
 .../tigervnc_security_api_results.json        |    1 +
 .../time_security_api_results.json            |    1 +
 .../timedatex_security_api_results.json       |    1 +
 .../tinycdb-devel_security_api_results.json   |    1 +
 .../tinycdb_security_api_results.json         |    1 +
 .../tinyxml2-devel_security_api_results.json  |    1 +
 .../tinyxml2_security_api_results.json        |    1 +
 .../tix-devel_security_api_results.json       |    1 +
 .../tix_security_api_results.json             |    1 +
 .../tk-devel_security_api_results.json        |    1 +
 .../tk_security_api_results.json              |    1 +
 .../tlog_security_api_results.json            |    1 +
 .../tmpwatch_security_api_results.json        |    1 +
 .../tmux_security_api_results.json            |    1 +
 ...og-pegasus-devel_security_api_results.json |    1 +
 ...tog-pegasus-libs_security_api_results.json |    1 +
 .../tog-pegasus_security_api_results.json     |    1 +
 ...kyocabinet-devel_security_api_results.json |    1 +
 .../tokyocabinet_security_api_results.json    |    1 +
 .../tomcatjss_security_api_results.json       |    1 +
 .../toolbox_security_api_results.json         |    1 +
 .../torque-devel_security_api_results.json    |    1 +
 .../torque-libs_security_api_results.json     |    1 +
 .../torque_security_api_results.json          |    1 +
 .../totem-nautilus_security_api_results.json  |    1 +
 .../totem-pl-parser_security_api_results.json |    1 +
 .../totem_security_api_results.json           |    1 +
 .../tpm-quote-tools_security_api_results.json |    1 +
 .../tpm-tools-devel_security_api_results.json |    1 +
 ...tpm-tools-pkcs11_security_api_results.json |    1 +
 .../tpm-tools_security_api_results.json       |    1 +
 ...tpm2-abrmd-devel_security_api_results.json |    1 +
 ...m2-abrmd-selinux_security_api_results.json |    1 +
 .../tpm2-abrmd_security_api_results.json      |    1 +
 .../tpm2-tools_security_api_results.json      |    1 +
 .../tpm2-tss-devel_security_api_results.json  |    1 +
 .../tpm2-tss_security_api_results.json        |    1 +
 .../trace-cmd_security_api_results.json       |    1 +
 .../traceroute_security_api_results.json      |    1 +
 .../tracker-miners_security_api_results.json  |    1 +
 .../tracker_security_api_results.json         |    1 +
 .../transfig_security_api_results.json        |    1 +
 .../tree_security_api_results.json            |    1 +
 .../trousers-devel_security_api_results.json  |    1 +
 .../trousers-lib_security_api_results.json    |    1 +
 .../trousers_security_api_results.json        |    1 +
 .../tss2-devel_security_api_results.json      |    1 +
 .../tss2_security_api_results.json            |    1 +
 .../ttmkfdir_security_api_results.json        |    1 +
 .../tuna_security_api_results.json            |    1 +
 .../tuned-gtk_security_api_results.json       |    1 +
 ...-profiles-atomic_security_api_results.json |    1 +
 ...-profiles-compat_security_api_results.json |    1 +
 ...cpu-partitioning_security_api_results.json |    1 +
 ...d-profiles-mssql_security_api_results.json |    1 +
 ...-profiles-oracle_security_api_results.json |    1 +
 ...-utils-systemtap_security_api_results.json |    1 +
 .../tuned-utils_security_api_results.json     |    1 +
 .../tuned_security_api_results.json           |    1 +
 .../turbojpeg-devel_security_api_results.json |    1 +
 .../turbojpeg_security_api_results.json       |    1 +
 .../twolame-libs_security_api_results.json    |    1 +
 .../tzdata-java_security_api_results.json     |    1 +
 .../tzdata_security_api_results.json          |    1 +
 ...-miscfixed-fonts_security_api_results.json |    1 +
 .../ucx_security_api_results.json             |    1 +
 .../udica_security_api_results.json           |    1 +
 .../udisks2-iscsi_security_api_results.json   |    1 +
 .../udisks2-lvm2_security_api_results.json    |    1 +
 .../udisks2_security_api_results.json         |    1 +
 .../uglify-js_security_api_results.json       |    1 +
 .../uid_wrapper_security_api_results.json     |    1 +
 .../unbound-devel_security_api_results.json   |    1 +
 .../unbound-libs_security_api_results.json    |    1 +
 .../unbound_security_api_results.json         |    1 +
 .../unicode-ucd_security_api_results.json     |    1 +
 ...unit-api-javadoc_security_api_results.json |    1 +
 .../unit-api_security_api_results.json        |    1 +
 .../units_security_api_results.json           |    1 +
 .../unixODBC-devel_security_api_results.json  |    1 +
 .../unixODBC_security_api_results.json        |    1 +
 .../unzip_security_api_results.json           |    1 +
 .../uom-lib-javadoc_security_api_results.json |    1 +
 .../uom-lib_security_api_results.json         |    1 +
 .../uom-parent_security_api_results.json      |    1 +
 .../uom-se-javadoc_security_api_results.json  |    1 +
 .../uom-se_security_api_results.json          |    1 +
 ...-systems-javadoc_security_api_results.json |    1 +
 .../uom-systems_security_api_results.json     |    1 +
 ...power-devel-docs_security_api_results.json |    1 +
 .../upower-devel_security_api_results.json    |    1 +
 .../upower_security_api_results.json          |    1 +
 .../urlview_security_api_results.json         |    1 +
 ...35-bookman-fonts_security_api_results.json |    1 +
 ...ase35-c059-fonts_security_api_results.json |    1 +
 ...5-d050000l-fonts_security_api_results.json |    1 +
 ...e35-fonts-common_security_api_results.json |    1 +
 ...se35-fonts-devel_security_api_results.json |    1 +
 ...urw-base35-fonts_security_api_results.json |    1 +
 ...e35-gothic-fonts_security_api_results.json |    1 +
 ...us-mono-ps-fonts_security_api_results.json |    1 +
 ...mbus-roman-fonts_security_api_results.json |    1 +
 ...imbus-sans-fonts_security_api_results.json |    1 +
 ...ase35-p052-fonts_security_api_results.json |    1 +
 ...symbols-ps-fonts_security_api_results.json |    1 +
 ...ase35-z003-fonts_security_api_results.json |    1 +
 ..._modeswitch-data_security_api_results.json |    1 +
 .../usb_modeswitch_security_api_results.json  |    1 +
 .../usbguard-dbus_security_api_results.json   |    1 +
 .../usbguard-tools_security_api_results.json  |    1 +
 .../usbguard_security_api_results.json        |    1 +
 .../usbmuxd_security_api_results.json         |    1 +
 .../usbredir-devel_security_api_results.json  |    1 +
 .../usbredir_security_api_results.json        |    1 +
 .../usbutils_security_api_results.json        |    1 +
 .../usermode-gtk_security_api_results.json    |    1 +
 .../usermode_security_api_results.json        |    1 +
 ...rspace-rcu-devel_security_api_results.json |    1 +
 .../userspace-rcu_security_api_results.json   |    1 +
 .../ustr_security_api_results.json            |    1 +
 .../utf8proc_security_api_results.json        |    1 +
 .../uthash-devel_security_api_results.json    |    1 +
 .../util-linux-user_security_api_results.json |    1 +
 .../util-linux_security_api_results.json      |    1 +
 .../uuid-devel_security_api_results.json      |    1 +
 .../uuid_security_api_results.json            |    1 +
 .../uuidd_security_api_results.json           |    1 +
 .../vala-devel_security_api_results.json      |    1 +
 .../vala_security_api_results.json            |    1 +
 .../valgrind-devel_security_api_results.json  |    1 +
 .../valgrind_security_api_results.json        |    1 +
 .../varnish-devel_security_api_results.json   |    1 +
 .../varnish-docs_security_api_results.json    |    1 +
 .../varnish-modules_security_api_results.json |    1 +
 .../varnish_security_api_results.json         |    1 +
 .../vdo_security_api_results.json             |    1 +
 .../velocity-demo_security_api_results.json   |    1 +
 ...velocity-javadoc_security_api_results.json |    1 +
 .../velocity-manual_security_api_results.json |    1 +
 .../velocity_security_api_results.json        |    1 +
 .../veritysetup_security_api_results.json     |    1 +
 .../vhostmd_security_api_results.json         |    1 +
 .../vim-X11_security_api_results.json         |    1 +
 .../vim-common_security_api_results.json      |    1 +
 .../vim-enhanced_security_api_results.json    |    1 +
 .../vim-filesystem_security_api_results.json  |    1 +
 .../vim-minimal_security_api_results.json     |    1 +
 .../vinagre_security_api_results.json         |    1 +
 .../vino_security_api_results.json            |    1 +
 .../virt-devel_security_api_results.json      |    1 +
 .../virt-dib_security_api_results.json        |    1 +
 .../virt-install_security_api_results.json    |    1 +
 ...t-manager-common_security_api_results.json |    1 +
 .../virt-manager_security_api_results.json    |    1 +
 .../virt-p2v-maker_security_api_results.json  |    1 +
 .../virt-top_security_api_results.json        |    1 +
 .../virt-v2v_security_api_results.json        |    1 +
 .../virt-viewer_security_api_results.json     |    1 +
 .../virt-what_security_api_results.json       |    1 +
 .../virt-who_security_api_results.json        |    1 +
 .../virt_security_api_results.json            |    1 +
 .../virtio-win_security_api_results.json      |    1 +
 ...mp-metrics-devel_security_api_results.json |    1 +
 .../vm-dump-metrics_security_api_results.json |    1 +
 .../voikko-tools_security_api_results.json    |    1 +
 ...volume_key-devel_security_api_results.json |    1 +
 .../volume_key-libs_security_api_results.json |    1 +
 .../volume_key_security_api_results.json      |    1 +
 .../vorbis-tools_security_api_results.json    |    1 +
 .../vsftpd_security_api_results.json          |    1 +
 .../vte-profile_security_api_results.json     |    1 +
 .../vte291-devel_security_api_results.json    |    1 +
 .../vte291_security_api_results.json          |    1 +
 .../vulkan-headers_security_api_results.json  |    1 +
 ...kan-loader-devel_security_api_results.json |    1 +
 .../vulkan-loader_security_api_results.json   |    1 +
 .../vulkan-tools_security_api_results.json    |    1 +
 ...alidation-layers_security_api_results.json |    1 +
 .../watchdog_security_api_results.json        |    1 +
 .../wavpack-devel_security_api_results.json   |    1 +
 .../wavpack_security_api_results.json         |    1 +
 .../wayland-devel_security_api_results.json   |    1 +
 ...-protocols-devel_security_api_results.json |    1 +
 ...web-assets-devel_security_api_results.json |    1 +
 ...ssets-filesystem_security_api_results.json |    1 +
 ...ebkit2gtk3-devel_security_api_results.json |    1 +
 ...t2gtk3-jsc-devel_security_api_results.json |    1 +
 .../webkit2gtk3-jsc_security_api_results.json |    1 +
 ...gin-process-gtk2_security_api_results.json |    1 +
 .../webkit2gtk3_security_api_results.json     |    1 +
 ...audio-processing_security_api_results.json |    1 +
 .../weld-parent_security_api_results.json     |    1 +
 .../wget_security_api_results.json            |    1 +
 .../which_security_api_results.json           |    1 +
 .../whois-nls_security_api_results.json       |    1 +
 .../whois_security_api_results.json           |    1 +
 .../wireshark-cli_security_api_results.json   |    1 +
 .../wireshark-devel_security_api_results.json |    1 +
 .../wireshark_security_api_results.json       |    1 +
 .../wodim_security_api_results.json           |    1 +
 .../woff2_security_api_results.json           |    1 +
 .../words_security_api_results.json           |    1 +
 .../wpa_supplicant_security_api_results.json  |    1 +
 ...y-microhei-fonts_security_api_results.json |    1 +
 ...wqy-unibit-fonts_security_api_results.json |    1 +
 .../wsmancli_security_api_results.json        |    1 +
 .../x3270-text_security_api_results.json      |    1 +
 .../x3270-x11_security_api_results.json       |    1 +
 .../x3270_security_api_results.json           |    1 +
 .../xalan-j2-demo_security_api_results.json   |    1 +
 ...xalan-j2-javadoc_security_api_results.json |    1 +
 .../xalan-j2-manual_security_api_results.json |    1 +
 .../xalan-j2-xsltc_security_api_results.json  |    1 +
 .../xalan-j2_security_api_results.json        |    1 +
 .../xbean-javadoc_security_api_results.json   |    1 +
 .../xbean_security_api_results.json           |    1 +
 .../xcb-proto_security_api_results.json       |    1 +
 .../xcb-util-devel_security_api_results.json  |    1 +
 ...util-image-devel_security_api_results.json |    1 +
 .../xcb-util-image_security_api_results.json  |    1 +
 ...il-keysyms-devel_security_api_results.json |    1 +
 ...xcb-util-keysyms_security_api_results.json |    1 +
 ...renderutil-devel_security_api_results.json |    1 +
 ...-util-renderutil_security_api_results.json |    1 +
 ...cb-util-wm-devel_security_api_results.json |    1 +
 .../xcb-util-wm_security_api_results.json     |    1 +
 .../xcb-util_security_api_results.json        |    1 +
 .../xdelta_security_api_results.json          |    1 +
 ...sktop-portal-gtk_security_api_results.json |    1 +
 ...g-desktop-portal_security_api_results.json |    1 +
 ...dg-user-dirs-gtk_security_api_results.json |    1 +
 .../xdg-user-dirs_security_api_results.json   |    1 +
 .../xdg-utils_security_api_results.json       |    1 +
 .../xerces-j2-demo_security_api_results.json  |    1 +
 ...erces-j2-javadoc_security_api_results.json |    1 +
 .../xerces-j2_security_api_results.json       |    1 +
 .../xfsdump_security_api_results.json         |    1 +
 .../xfsprogs-devel_security_api_results.json  |    1 +
 .../xfsprogs_security_api_results.json        |    1 +
 .../xhtml1-dtds_security_api_results.json     |    1 +
 .../xinetd_security_api_results.json          |    1 +
 ...ard-config-devel_security_api_results.json |    1 +
 ...xkeyboard-config_security_api_results.json |    1 +
 .../xml-common_security_api_results.json      |    1 +
 ...ons-apis-javadoc_security_api_results.json |    1 +
 ...mons-apis-manual_security_api_results.json |    1 +
 ...xml-commons-apis_security_api_results.json |    1 +
 ...resolver-javadoc_security_api_results.json |    1 +
 ...commons-resolver_security_api_results.json |    1 +
 .../xmlrpc-c-c++_security_api_results.json    |    1 +
 ...mlrpc-c-client++_security_api_results.json |    1 +
 .../xmlrpc-c-client_security_api_results.json |    1 +
 .../xmlrpc-c-devel_security_api_results.json  |    1 +
 .../xmlrpc-c_security_api_results.json        |    1 +
 .../xmlsec1-devel_security_api_results.json   |    1 +
 .../xmlsec1-gcrypt_security_api_results.json  |    1 +
 ...ec1-gnutls-devel_security_api_results.json |    1 +
 .../xmlsec1-gnutls_security_api_results.json  |    1 +
 .../xmlsec1-nss_security_api_results.json     |    1 +
 ...c1-openssl-devel_security_api_results.json |    1 +
 .../xmlsec1-openssl_security_api_results.json |    1 +
 .../xmlsec1_security_api_results.json         |    1 +
 .../xmlstreambuffer_security_api_results.json |    1 +
 .../xmlto_security_api_results.json           |    1 +
 .../xmltoman_security_api_results.json        |    1 +
 .../xmlunit-javadoc_security_api_results.json |    1 +
 .../xmlunit_security_api_results.json         |    1 +
 .../xmvn-api_security_api_results.json        |    1 +
 .../xmvn-bisect_security_api_results.json     |    1 +
 ...connector-aether_security_api_results.json |    1 +
 ...vn-connector-ivy_security_api_results.json |    1 +
 .../xmvn-core_security_api_results.json       |    1 +
 .../xmvn-install_security_api_results.json    |    1 +
 .../xmvn-javadoc_security_api_results.json    |    1 +
 .../xmvn-minimal_security_api_results.json    |    1 +
 .../xmvn-mojo_security_api_results.json       |    1 +
 .../xmvn-parent-pom_security_api_results.json |    1 +
 .../xmvn-resolve_security_api_results.json    |    1 +
 .../xmvn-subst_security_api_results.json      |    1 +
 .../xmvn-tools-pom_security_api_results.json  |    1 +
 .../xmvn_security_api_results.json            |    1 +
 ...rg-sgml-doctools_security_api_results.json |    1 +
 .../xorg-x11-apps_security_api_results.json   |    1 +
 .../xorg-x11-docs_security_api_results.json   |    1 +
 ...xorg-x11-drivers_security_api_results.json |    1 +
 ...xorg-x11-drv-ati_security_api_results.json |    1 +
 ...rg-x11-drv-dummy_security_api_results.json |    1 +
 ...-drv-evdev-devel_security_api_results.json |    1 +
 ...rg-x11-drv-evdev_security_api_results.json |    1 +
 ...rg-x11-drv-fbdev_security_api_results.json |    1 +
 ...rg-x11-drv-intel_security_api_results.json |    1 +
 ...v-libinput-devel_security_api_results.json |    1 +
 ...x11-drv-libinput_security_api_results.json |    1 +
 ...-x11-drv-nouveau_security_api_results.json |    1 +
 ...xorg-x11-drv-qxl_security_api_results.json |    1 +
 ...xorg-x11-drv-v4l_security_api_results.json |    1 +
 ...org-x11-drv-vesa_security_api_results.json |    1 +
 ...g-x11-drv-vmware_security_api_results.json |    1 +
 ...-drv-wacom-devel_security_api_results.json |    1 +
 ...m-serial-support_security_api_results.json |    1 +
 ...rg-x11-drv-wacom_security_api_results.json |    1 +
 ...g-x11-font-utils_security_api_results.json |    1 +
 ...x11-fonts-100dpi_security_api_results.json |    1 +
 ...-x11-fonts-75dpi_security_api_results.json |    1 +
 ...ISO8859-1-100dpi_security_api_results.json |    1 +
 ...-ISO8859-1-75dpi_security_api_results.json |    1 +
 ...SO8859-14-100dpi_security_api_results.json |    1 +
 ...ISO8859-14-75dpi_security_api_results.json |    1 +
 ...SO8859-15-100dpi_security_api_results.json |    1 +
 ...ISO8859-15-75dpi_security_api_results.json |    1 +
 ...ISO8859-2-100dpi_security_api_results.json |    1 +
 ...-ISO8859-2-75dpi_security_api_results.json |    1 +
 ...ISO8859-9-100dpi_security_api_results.json |    1 +
 ...-ISO8859-9-75dpi_security_api_results.json |    1 +
 ...-x11-fonts-Type1_security_api_results.json |    1 +
 ...1-fonts-cyrillic_security_api_results.json |    1 +
 ...1-fonts-ethiopic_security_api_results.json |    1 +
 ...g-x11-fonts-misc_security_api_results.json |    1 +
 ...-x11-proto-devel_security_api_results.json |    1 +
 ...-x11-server-Xdmx_security_api_results.json |    1 +
 ...11-server-Xephyr_security_api_results.json |    1 +
 ...x11-server-Xnest_security_api_results.json |    1 +
 ...-x11-server-Xorg_security_api_results.json |    1 +
 ...11-server-Xspice_security_api_results.json |    1 +
 ...-x11-server-Xvfb_security_api_results.json |    1 +
 ...-server-Xwayland_security_api_results.json |    1 +
 ...11-server-common_security_api_results.json |    1 +
 ...x11-server-devel_security_api_results.json |    1 +
 ...x11-server-utils_security_api_results.json |    1 +
 ...-x11-util-macros_security_api_results.json |    1 +
 .../xorg-x11-utils_security_api_results.json  |    1 +
 .../xorg-x11-xauth_security_api_results.json  |    1 +
 ...org-x11-xbitmaps_security_api_results.json |    1 +
 ...11-xinit-session_security_api_results.json |    1 +
 .../xorg-x11-xinit_security_api_results.json  |    1 +
 ...-xkb-utils-devel_security_api_results.json |    1 +
 ...rg-x11-xkb-utils_security_api_results.json |    1 +
 ...x11-xtrans-devel_security_api_results.json |    1 +
 .../xorriso_security_api_results.json         |    1 +
 .../xrestop_security_api_results.json         |    1 +
 .../xsane-common_security_api_results.json    |    1 +
 .../xsane-gimp_security_api_results.json      |    1 +
 .../xsane_security_api_results.json           |    1 +
 .../xsom_security_api_results.json            |    1 +
 .../xterm-resize_security_api_results.json    |    1 +
 .../xterm_security_api_results.json           |    1 +
 .../xz-devel_security_api_results.json        |    1 +
 .../xz-java-javadoc_security_api_results.json |    1 +
 .../xz-java_security_api_results.json         |    1 +
 .../xz-libs_security_api_results.json         |    1 +
 .../xz-lzma-compat_security_api_results.json  |    1 +
 .../xz_security_api_results.json              |    1 +
 .../yajl-devel_security_api_results.json      |    1 +
 .../yajl_security_api_results.json            |    1 +
 .../yasm_security_api_results.json            |    1 +
 .../yelp-devel_security_api_results.json      |    1 +
 .../yelp-libs_security_api_results.json       |    1 +
 .../yelp-tools_security_api_results.json      |    1 +
 .../yelp-xsl_security_api_results.json        |    1 +
 .../yelp_security_api_results.json            |    1 +
 .../yp-tools_security_api_results.json        |    1 +
 .../ypbind_security_api_results.json          |    1 +
 .../ypserv_security_api_results.json          |    1 +
 .../yum-utils_security_api_results.json       |    1 +
 .../yum_security_api_results.json             |    1 +
 .../zenity_security_api_results.json          |    1 +
 .../zip_security_api_results.json             |    1 +
 .../zlib-devel_security_api_results.json      |    1 +
 .../zlib-static_security_api_results.json     |    1 +
 .../zlib_security_api_results.json            |    1 +
 .../zsh-html_security_api_results.json        |    1 +
 .../zsh_security_api_results.json             |    1 +
 .../zstd_security_api_results.json            |    1 +
 .../zziplib-devel_security_api_results.json   |    1 +
 .../zziplib-utils_security_api_results.json   |    1 +
 .../zziplib_security_api_results.json         |    1 +
 .../data/redhat8/table-1.csv                  | 1331 ++++
 .../data/redhat8/table-2.csv                  | 4195 ++++++++++
 .../data/redhat8/table-3.csv                  |   60 +
 .../data/redhat8/table-4.csv                  | 1569 ++++
 .../data/redhat8/table-5.csv                  |    4 +
 .../data/redhat8/table-6.csv                  |   10 +
 .../data/redhat8/table-7.csv                  |   57 +
 .../data/redhat8/table-8.csv                  |   59 +
 .../html_table_extractor.py                   |   87 +
 tutorials/pydata-book                         |    1 +
 10566 files changed, 43082 insertions(+)
 create mode 100644 containers/docker-compose-elasticsearch-kibana-cluster/docker-compose.yml
 create mode 100644 containers/domain_registration_tracker/README.md
 create mode 100644 tools/redhat_package_manifest_scraper/README.md
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/all_redhat7_rpm_package_manifest.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/389-ds-base-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/389-ds-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ElectricFence_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/GConf2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/GeoIP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ImageMagick-c++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ImageMagick-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ImageMagick_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/LibRaw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ModemManager-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ModemManager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/MySQL-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-adsl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-bluetooth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-config-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-libnm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-libreswan-gnome_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-libreswan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-ppp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-team_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-tui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-wifi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-wwan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ORBit2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OVMF_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenEXR-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI-modalias_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-command-not-found_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-gstreamer-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-gtk3-module_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-yum_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Package_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyGreSQL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyPAM_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyQt4-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyQt4_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyYAML_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-as-IN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-bn-IN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-de-DE_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-en-US_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-es-ES_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-fr-FR_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-gu-IN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-hi-IN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-it-IT_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ja-JP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-kn-IN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ko-KR_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ml-IN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-mr-IN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-or-IN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-pa-IN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-pt-BR_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ru-RU_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ta-IN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-te-IN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-zh-CN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-zh-TW_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/SDL-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/SDL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/SLOF_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abattis-cantarell-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-ccpp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-kerneloops_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-pstoreoops_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-vmcore_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-xorg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-console-notification_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-dbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-desktop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-gui-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-java-connector_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-tui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/accountsservice-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/accountsservice_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/acl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/acpid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adcli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adobe-mappings-cmap-deprecated_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adobe-mappings-cmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adobe-mappings-pdf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-cursor-theme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-gtk2-theme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-icon-theme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-qt4_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-qt5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-qt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/agg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/aic94xx-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/aide_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/akonadi-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/akonadi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alacarte_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-lib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-plugins-pulseaudio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-tools-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-tui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-user-help_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-widgets_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ant_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/antlr-tool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-codec_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-collections_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-daemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-dbcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-io_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-lang_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-logging_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-pool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/appstream-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-util-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-util-openssl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-util_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/args4j_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ark-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ark_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/arptables_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/arpwatch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-atk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-atk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-core-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atkmm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atlas-sse2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atlas-sse3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atlas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/attica-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/attica_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/attr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audispd-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit-libs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit-libs-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/augeas-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/augeas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/authconfig-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/authconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/authd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autoconf-archive_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autoconf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-af_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-bg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-cs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-da_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-de_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-en_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-es_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-fa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-fi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-fr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-hr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-hu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-is_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-it_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ja_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-lb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-lt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-mn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-nl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-pl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-pt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ru_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-tr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-vi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-zh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autofs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autogen-libopts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/automake_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/automoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-autoipd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-gobject_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-ui-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avalon-framework_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avalon-logkit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/awscli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/babel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/babl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bacula-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bacula-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bacula-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/baobab_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/basesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bash-completion_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bash_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bcc-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bcc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bcel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bea-stax-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bea-stax_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-chroot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-dyndb-ldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-export-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-libs-lite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-license_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-pkcs11-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-pkcs11-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-pkcs11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/binutils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/binutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/biosdevname_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bison_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bitmap-fixed-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bitmap-lucida-typewriter-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/blas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/blivet3-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/blktrace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bltk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bluedevil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bluez-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bluez_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bolt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-atomic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-chrono_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-context_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-date-time_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-graph_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-iostreams_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-locale_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-math_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-program-options_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-random_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-regex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-serialization_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-signals_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-system_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-thread_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-timer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-wave_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-arbitrator_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-site_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpftool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-chveulebrivi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-courier-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-glaho-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brasero-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brasero-nautilus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brasero_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bridge-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brlapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brltty_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/btrfs-progs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/byacc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzip2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzip2-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzip2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/c-ares-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/c-ares_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ca-certificates_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cachefilesd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo-gobject-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo-gobject_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairomm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cal10n_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/caribou-gtk2-module_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/caribou-gtk3-module_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/caribou_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cdparanoia-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cdparanoia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cdrdao_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/celt051_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ceph-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/certmonger_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cgdcbxd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/check-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/check_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/checkpolicy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cheese-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cheese_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chkconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chrome-gnome-shell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chrony_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chrpath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cifs-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cim-schema_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cjkuni-ukai-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cjkuni-uming-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-dracut_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-luks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-systemd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-udisks2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cloud-init_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cloud-utils-growpart_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clucene-contribs-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clucene-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-bin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-lib-ccs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-lib-general_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-lib-pcs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter-gst2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter-gst3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cmake_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cmpi-bindings-pywbem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit-bridge_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit-system_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit-ws_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/codemodel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cogl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/color-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord-kde_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-cheese314_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-dapl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-db-headers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-db47_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-exiv2-023_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-exiv2-026_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-gcc-44-c++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-gcc-44_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-glade315_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-glibc-headers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-glibc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-gnome-desktop314_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-grilo02_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcap1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcogl-pango12_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcogl12_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcolord1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libf2c-34_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgdata13_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgfortran-41_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgnome-bluetooth11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgnome-desktop3-7_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgweather3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libical1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libmediaart0_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libpackagekit-glib2-16_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libtiff3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libupower-glib1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libxcb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-openldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-openmpi16_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-opensm-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-poppler022-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-poppler022-qt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-poppler022_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/comps-extras_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/conman_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/conntrack-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/control-center-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/control-center_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/convmv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/coolkey_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/copy-jdk-configs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/coreutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosync-qdevice_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosync-qnetd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosync_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosynclib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosynclib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cpio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cpp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cpuid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cracklib-dicts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cracklib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash-gcore-command_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash-ptdump-command_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash-trace-command_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crda_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/createrepo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/criu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cronie-anacron_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cronie-noanacron_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cronie_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crontabs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crypto-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup-reencrypt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cscope_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ctags-etags_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ctags_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-aharoni-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-caladings-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-david-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-drugulin-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-ellinia-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-frank-ruehl-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-hadasim-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-keteryg-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-miriam-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-miriam-mono-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-nachlieli-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-simple-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-stamashkenaz-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-stamsefarad-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-yehuda-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-filters-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-filters_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-lpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-pk-helper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/curl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/custodia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cvs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-imapd-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-imapd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-gssapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-md5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-plain_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-scram_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dapl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/daxctl-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/daxio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-glib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-x11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbusmenu-qt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbxtool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dconf-editor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dconf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dcraw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejagnu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-sans-mono-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-serif-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/deltarpm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/desktop-file-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-event-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-event_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-multipath-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-multipath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-persistent-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhclient_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhcp-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhcp-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dialog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/diffstat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/diffutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dleyna-connector-dbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dleyna-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dleyna-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dlm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dlm-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dmidecode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dmraid-events_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dmraid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dnsmasq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dnssec-trigger_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-dtds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-simple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-slides_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-style-dsssl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-style-xsl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-utils-pdf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook5-schemas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook5-style-xsl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dom4j_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dos2unix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dosfstools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dotconf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot-pgsql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot-pigeonhole_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/doxygen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dptfxtract_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-config-generic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-config-rescue_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-fips-aesni_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-fips_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-network_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dragon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dropwatch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dstat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dump_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dumpet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dvd+rw-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dvgrab_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dwz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dyninst_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/e2fsprogs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/e2fsprogs-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/e2fsprogs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/easymock2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ebtables_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ecj_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ed_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/edac-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efax_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efibootmgr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efivar-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efivar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ekiga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-default-yama-scope_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-libelf-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-libelf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elinks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-auctex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-gnuplot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-nox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-php-mode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/empathy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/enchant_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/enscript_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/environment-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/eog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/esc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/espeak_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ethtool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince-dvi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince-nautilus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-data-server-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-data-server-langpacks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-data-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-ews-langpacks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-ews_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-help_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-langpacks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-mapi-langpacks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-mapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/exempi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/exiv2-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/exiv2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/expat-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/expat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/expect_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fabtests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/farstream02_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/farstream_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fcoe-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-aliyun_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-all_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-amt-ws_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-apc-snmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-apc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-aws_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-azure-arm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-bladecenter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-brocade_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-cisco-mds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-cisco-ucs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-compute_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-drac5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-eaton-snmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-emerson_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-eps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-gce_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-heuristics-ping_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-hpblade_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ibmblade_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ifmib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo-moonshot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo-mp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo-ssh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-intelmodular_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ipdu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ipmilan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-kdump_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-lpar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-mpath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-redfish_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-rhevm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-rsa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-rsb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-sbd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-scsi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-vmware-rest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-vmware-soap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-wti_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-zvm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd-libvirt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd-multicast_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd-serial_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival-freebsoft-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival-speechtools-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festvox-slt-arctic-hts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fetchmail_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs-double_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs-long_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs-single_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file-roller-nautilus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file-roller_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/filebench_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/findutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/finger-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/finger_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fipscheck-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fipscheck_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firefox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firewall-config_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firewalld-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firewalld_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firstboot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flac-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flatpak-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flatpak_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fltk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flute_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/folks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontawesome-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontconfig-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontpackages-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fonts-tweak-tool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-db-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-db-ppds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-db_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-filters_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fprintd-pam_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fprintd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeglut-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeglut_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeipmi-bmc-watchdog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeipmi-ipmidetectd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeipmi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeradius_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freerdp-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freerdp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freetype-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freetype_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/frei0r-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fribidi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fribidi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ftp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuse-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuse-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuseiso_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupdate-efi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupdate-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupdate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fxload_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gamin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gavl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gawk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-c++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-gfortran_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-gnat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-objc++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-objc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gconf-editor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcr-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdb-gdbserver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdbm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdbm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdisk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdk-pixbuf2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdk-pixbuf2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-bookmarks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-bracketcompletion_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-charmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-codecomment_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-colorpicker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-colorschemer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-commander_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-drawspaces_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-joinlines_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-multiedit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-smartspaces_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-synctex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-terminal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-textsize_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-wordcompletion_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugins-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gegl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/genisoimage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/genwqe-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/genwqe-zlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoclue2-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoclue2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoclue_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geocode-glib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geocode-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoipupdate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geolite2-city_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geolite2-country_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geronimo-annotation_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geronimo-jms_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geronimo-jta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext-common-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gfs2-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript-chinese_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript-cups_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/giflib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp-data-extras_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp-help_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/git_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gjs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gl-manpages_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glade-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-dtd-parser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-fastinfoset_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-jaxb-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-jaxb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glib-networking_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glib2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glib2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-headers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibmm24_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-client-xlators_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-fuse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-rdma_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glx-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gmp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-abrt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-bluetooth-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-bluetooth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-boxes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-calculator_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-classic-session_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-clocks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-color-manager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-contacts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-desktop3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-desktop3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-dictionary_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-disk-utility_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-documents-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-documents_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-font-viewer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-getting-started-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme-extras_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme-legacy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme-symbolic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-initial-setup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-keyring-pam_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-keyring_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-menus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-online-accounts-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-online-accounts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-online-miners_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit-installer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit-updater_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-bonobo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-canvas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-gconf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-gnome_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-gnomevfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-screenshot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-session-xsession_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-session_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-settings-daemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-alternate-tab_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-apps-menu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-horizontal-workspaces_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-launch-new-instance_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-places-menu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-top-icons_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-user-theme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-window-list_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-software_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-system-log_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-system-monitor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-terminal-nautilus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-terminal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-themes-standard_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-tweak-tool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-user-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-vfs2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-video-effects_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-weather_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnote_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-mono-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-serif-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnupg2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnuplot-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnuplot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-c++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-dane_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gobject-introspection-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gobject-introspection_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-crosextra-caladea-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-crosextra-carlito-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-emoji-color-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-emoji-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-armenian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-devanagari-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-devanagari-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-ethiopic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-georgian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-hebrew-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-khmer-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-khmer-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-lao-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-lao-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-tamil-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-tamil-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-thai-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-thai-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-armenian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-georgian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-lao-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-thai-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gperftools-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gpgme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gpm-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gpm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grantlee_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphite2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphite2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphviz-tcl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphviz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grep_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grilo-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grilo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/groff-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-ia32-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-ia32_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-x64-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-x64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-pc-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-pc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64le-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64le_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-tools-extra_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-tools-minimal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grubby_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsettings-desktop-schemas-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsettings-desktop-schemas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsound_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gspell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gssdp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gssproxy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-plugins-bad-free_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-plugins-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-plugins-good_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-bad-free-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-bad-free_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-base-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-good_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-ugly-free_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk-update-icon-cache_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk-vnc2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2-devel-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2-immodule-xim_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk3-immodule-xim_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkhtml3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkmm24_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkmm30_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtksourceview3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkspell3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkspell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/guava_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gubbi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gucharmap-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gucharmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp-av_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp-dlna_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp-igd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gutenprint-cups_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gutenprint-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gutenprint_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-afc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-afp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-archive_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-fuse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-goa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-gphoto2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-mtp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-smb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvnc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gwenview-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gwenview_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gzip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hamcrest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/haproxy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hardlink_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/harfbuzz-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/harfbuzz-icu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/harfbuzz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hawkey_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hdparm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hesiod_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hexedit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hicolor-icon-theme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/highcontrast-qt5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/highlight_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hivex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hmaccalc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hostname_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hpijs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hsakmt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hsqldb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/http-parser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpcomponents-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpcomponents-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd-manual_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-af_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ak_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-am_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-as_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ast_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-az_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-be_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ber_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-bg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-bn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-br_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-csb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-da_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-de_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-dsb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-el_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-en-GB_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-en-US_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-en_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-eo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-es_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-et_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-eu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fj_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fur_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-grc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-haw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-he_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hsb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ht_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-id_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-is_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-it_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-kk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-km_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-kn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ku_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ky_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-la_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-lb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ln_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-lt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-lv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mai_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mos_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ms_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ne_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nso_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ny_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-oc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-om_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-or_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-pa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-pl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-pt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-qu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-quh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ru_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-rw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-se_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-shs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-si_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-smj_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-so_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-st_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-te_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-th_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ti_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-uk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ur_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-uz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ve_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-vi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-wa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-xh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-yi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-zu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hwdata_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hwloc-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hwloc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyperv-daemons-license_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyperv-daemons_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hypervfcopyd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hypervkvpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hypervvssd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-af_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-as_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-be_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-bg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-bn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-cs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-cy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-da_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-de_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-el_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-en_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-es_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-et_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-eu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-fa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-fo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-fr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-gl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-grc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-gu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hsb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-id_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-is_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-it_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-kn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ku_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-lt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-lv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-mi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-mn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-mr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-nb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-nl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-nn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-or_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-pa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-pl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-pt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ru_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-te_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-tk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-uk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-zu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/i2c-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibacm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-chewing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-gtk2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-hangul_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-kkc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-libpinyin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-m17n_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-qt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-rawcode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-sayura_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-setup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-table-chinese_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-table_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-typing-booster_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibutils-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/icedax_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/icedtea-web_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/icoutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ilmbase_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/im-chooser-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/im-chooser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ima-evm-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imake_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings-gsettings_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings-qt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/indent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/infiniband-diags_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/infinipath-psm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/info_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iniparser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/initial-setup-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/initial-setup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/initscripts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/inkscape_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/insights-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/intel-cmt-cat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/intltool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iok_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iotop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iowatcher_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-client-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-gothic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-mincho-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-pgothic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-pmincho-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-python-compat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server-dns_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server-trust-ad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iperf3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipmitool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iproute_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iprutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipset-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipset-service_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipset_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-authform_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-authgssapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-authldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-infosssd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-persona_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-saml2-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-saml2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-tools-ipa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptables-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptables-services_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptables_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptraf-ng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptstate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iputils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipvsadm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipxe-bootimgs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipxe-roms-qemu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/irqbalance_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/irssi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iscsi-initiator-utils-iscsiuio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iscsi-initiator-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isdn4k-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isns-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iso-codes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isomd5sum_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isorelax_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/istack-commons_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/itstool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ivtv-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl100-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl1000-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl105-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl135-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl2000-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl2030-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl3160-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl3945-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl4965-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl5000-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl5150-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6000-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6000g2a-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6000g2b-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6050-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl7260-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwpmd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ixpdimm_sw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jackson_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jakarta-commons-httpclient_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jakarta-oro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jakarta-taglibs-standard_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jansson_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jasper-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.6.0-openjdk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.6.0-openjdk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.0-openjdk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.0-openjdk-headless_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.0-openjdk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-demo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-jdbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-src_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-demo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-jdbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-src_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-openjdk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-openjdk-headless_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-openjdk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-11-openjdk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-11-openjdk-headless_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-11-openjdk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-atk-wrapper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/javamail_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/javapackages-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/javassist_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jaxen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jbigkit-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jboss-annotations-1.1-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jdom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jettison_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jline_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jna_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/joda-convert_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/joda-time_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jomolhari-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jose_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/js_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/json-c_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/json-glib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/json-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jsr-311_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/junit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jvnet-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/k3b-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/k3b-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/k3b_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kabi-yum-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kaccessible-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kaccessible_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-art-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-book-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-decorative-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-digital-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-farsi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-letter-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-naskh-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-office-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-one-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-pen-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-poster-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-qurn-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-screen-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-title-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-titlel-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kactivities_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kamera_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kate-part_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kbd-legacy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kbd-misc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kbd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcalc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcharselect_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcm-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcm_colors_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcm_touchpad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcolorchooser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcoloredit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-base-artwork_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-baseapps-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-baseapps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-l10n_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-plasma-networkmanagement-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-plasma-networkmanagement_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-print-manager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-runtime-drkonqi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-runtime-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-runtime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings-ksplash_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings-plasma_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings-pulseaudio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-style-oxygen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-workspace-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-workspace-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-workspace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeaccessibility_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeadmin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeartwork-screensavers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-strigi-analyzer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-thumbnailers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs-ktexteditor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kdnssd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kget-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kget_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kopete-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kopete-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kopete_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krdc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krdc-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krdc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krfb-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krfb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-runtime-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-runtime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs-akonadi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs-kxmlrpcclient_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeplasma-addons-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeplasma-addons_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kmtrace-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kmtrace-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kmtrace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kompare-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kompare-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kompare_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-okteta-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-okteta-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-okteta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeutils-minimal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keepalived_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-abi-whitelists_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-bootwrapper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-debug-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-headers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-kdump-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-kdump_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-tools-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kexec-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keybinder3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keycloak-httpd-client-install_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keyutils-libs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keyutils-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keyutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kgpg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kgreeter-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-base-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-battambang-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-bokor-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-handwritten-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-metal-chrieng-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-muol-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-siemreap-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khotkeys-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khotkeys_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kiconedit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kinfocenter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kio_sysinfo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmag_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmenuedit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod-kvdo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod-oracleasm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kolourpaint-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kolourpaint_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konkretcmpi-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konkretcmpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konsole-part_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konsole_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kpartx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kpatch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-pkinit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-server-ldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-workstation_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kruler_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksaneplugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kscreen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksnapshot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksshaskpass_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksysguard-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksysguard_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksysguardd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ktimer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kurdit-unikurd-web-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwallet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwin-gles-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwin-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwrite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/langtable-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/langtable-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/langtable_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lapack_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lasso-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lasso_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latencytop-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latencytop-tui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latencytop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latrace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lcms2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ldapjdk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ldns_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ledmon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/less_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lftp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libGLEW_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libICE-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libICE_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libIDL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libSM-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libSM_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libX11-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libX11-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libX11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXScrnSaver-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXScrnSaver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXau-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXau_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXaw-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXaw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcomposite-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcomposite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcursor-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcursor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXdamage-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXdamage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXdmcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXevie_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXext-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXext_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfixes-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfixes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfont2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfont_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXft-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXft_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXinerama-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXinerama_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXmu-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXmu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXpm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXpm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrandr-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrandr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrender-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrender_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXres_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXtst-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXtst_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXv-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXvMC_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86dga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86misc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86misc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86vm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86vm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libabw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libacl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libacl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libaio-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libaio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libao_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libappindicator-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libappstream-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libarchive_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libart_lgpl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libassuan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libasyncns_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libatasmart_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libatomic-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libatomic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libattr-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libattr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libavc1394_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbase_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbasicobjects_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblkid-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblkid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-crypto_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-fs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-loop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-lvm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-mdraid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-nvdimm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-part_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-swap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbluedevil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbluray_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbonobo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbonoboui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libburn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbytesize_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcacard-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcacard_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra-gtk2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap-ng-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap-ng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcdio-paranoia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcdio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcdr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcgroup-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcgroup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libchamplain-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libchamplain_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libchewing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcmis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcmpiCppImpl0_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcmpiutil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcollection_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcom_err-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcom_err_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcroco_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcryptui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcurl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcurl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcxl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdaemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb-cxx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi-dbd-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi-dbd-pgsql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi-drivers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbusmenu-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbusmenu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdfp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdfp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdhash_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdmapsharing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdmx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdnet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdrm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdrm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdvdnav_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdvdread_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdwarf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libeasyfc-gobject_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libeasyfc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libecap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libedit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libehca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libepoxy-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libepoxy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-mono-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-narrow-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-serif-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libesmtp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libestr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libetonyek_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libevdev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libevent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libexif_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libexttextcat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfabric_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfastjson_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfdt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libffi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libffi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfontenc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libformula_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfprint_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfreehand_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcab1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcrypt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcrypt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgdata-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgdata_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgdither_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgee06_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgee_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgepub_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgexiv2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgfortran4_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgfortran5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgfortran_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglade2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-core-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-egl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-gles_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-glx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-opengl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnat-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnome-keyring-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnome-keyring_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnome_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnomecanvas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnomekbd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnomeui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgomp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgovirt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgpg-error-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgpg-error_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgphoto2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgpod_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgsf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgtop2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgudev1-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgudev1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-inspect-icons_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-java_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-tools-c_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-winsupport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-xfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgusb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgweather-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgweather_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgxps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhangul_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhbaapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhbalinux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhif_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhugetlbfs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhugetlbfs-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhugetlbfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibcommon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibmad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibumad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibverbs-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibverbs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libica_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libical-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libical_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libicu-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libicu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libidn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiec61883_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libieee1284-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libieee1284_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libimobiledevice_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libindicator-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libini_config_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinput_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinvm-cim_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinvm-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinvm-i18n_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiodbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libipa_hbac_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiptcdata_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiscsi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libisofs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libitm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libitm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libjose_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libjpeg-turbo-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libjpeg-turbo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkadm5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkcddb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkdcraw-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkdcraw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkexiv2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkexiv2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkipi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkipi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkkc-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkkc-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkkc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libksane-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libksane_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkscreen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkworkspace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblangtag_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblayout_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libldb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libloader_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblockfile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblouis-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblouis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libluksmeta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmatchbox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmaxminddb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmbim-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmbim_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmediaart_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmemcached_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmicrohttpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmng-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmnl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmodman_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmount_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmpc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmpcdec_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmsn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmspack_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmspub_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmtp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmusicbrainz5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmusicbrainz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmwaw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libndp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_conntrack_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_cthelper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_cttimeout_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_queue_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnfnetlink_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnfsidmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnftnl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnice_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl3-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnm-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnma_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnotify-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnotify_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libntlm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liboauth-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liboauth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libobjc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libocxl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libodfgen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libofa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libogg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libopenraw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liborcus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libosinfo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libotf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpagemaker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpaper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpath_utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpcap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpciaccess_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpeas-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpeas-loader-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpeas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpfm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpfm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpinyin-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpinyin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpipeline_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libplist_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmemblk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmemlog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmemobj_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmempool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpng-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpng12_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libproxy-mozjs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libproxy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpsm2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpurple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpwquality_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqmi-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqmi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquadmath-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquadmath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquvi-scripts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquvi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librabbitmq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librados2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libraw1394_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librbd1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librdkafka_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librdmacm-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librdmacm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libref_array_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librelp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-calc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-draw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-emailmerge_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-filters_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-graphicfilter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-gtk2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-impress_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-langpack-en_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-math_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-ogltrans_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-opensymbol-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-pdfimport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-pyuno_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-ure-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-ure_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-voikko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-wiki-publisher_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-writer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-x11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-xsltfilter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreofficekit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librepo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-anaconda_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-bugzilla_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-mailx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-reportuploader_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-rhtsupport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-ureport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-rhel-anaconda-bugzilla_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-rhel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-web_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librepository_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreswan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librevenge_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librpmem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librsvg2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librsvg2-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librsvg2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librtas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsamplerate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsane-hpaio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libseccomp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsecret-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsecret_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-python3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-ruby_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsemanage-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsemanage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsepol-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsepol_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libserializer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libservicelog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsexy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libshout_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsigc++20_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmartcols_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmbclient_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmbios_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsndfile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsolv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsoup-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsoup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libspectre_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libspiro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsrtp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libssh2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_autofs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_certmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_idmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_nss_idmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_simpleifp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_sudo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstaroffice_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstdc++-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstdc++-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstdc++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-arcconf-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-hpsa-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-local-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-megaraid-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-nfs-plugin-clibs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-nfs-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-nstor-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-python-clibs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-smis-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-targetd-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-udev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsysfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtalloc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtasn1-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtasn1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libteam_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtevent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libthai_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtheora_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtiff-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtiff_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtimezonemap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtirpc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtool-ltdl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtool-ltdl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtranslit-m17n_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtranslit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libudisks2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libunistring_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libunwind_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusbmuxd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusbx-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusbx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuser-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusnic_verbs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libutempter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuuid-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuuid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libv4l_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libva-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libva_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvdpau_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto-libevent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto-tevent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-bash-completion_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-cim_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-config-network_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-config-nwfilter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-interface_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-lxc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-network_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-nodedev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-nwfilter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-qemu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-secret_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-disk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-gluster_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-iscsi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-logical_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-mpath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-rbd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-scsi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-kvm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-gconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-gobject_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-java-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-java_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-snmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvisio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvisual_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvma_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvmem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvmmalloc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvncserver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvoikko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvorbis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvpx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwacom-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwacom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-cursor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-egl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwbclient_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwebp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwinpr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwmf-lite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwmf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwnck3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwpg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwsman1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwvstreams_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxcb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxcb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbcommon-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbcommon-x11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbcommon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbfile-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbfile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxklavier_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxml2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxml2-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxml2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxshmfence-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxshmfence_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxslt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxslt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libyami_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libyaml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzapojit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzfcphbaapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzmf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/linux-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/linuxconsoletools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/linuxptp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lklug-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lksctp-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lldpad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/llvm-private_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lm_sensors-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lm_sensors-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lm_sensors_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lockdev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/log4cxx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/log4j_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/logrotate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/logwatch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-assamese-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-bengali-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-devanagari-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-gujarati-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-kannada-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-malayalam-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-marathi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-nepali-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-oriya-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-punjabi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-tamil-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-telugu-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lorax_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lpsolve_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lrzsz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lshw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lsof_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lsscsi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lsvpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ltrace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lua_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/luksmeta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2-python-boom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2-python-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lz4_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lzo-minilzo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lzo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lzop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m17n-contrib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m17n-db_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m17n-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m2crypto_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m4_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/madan-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mailcap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mailman_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mailx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/make_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/malaga-suomi-voikko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mallard-rng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-db_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-cs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-es-extra_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-es_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-fr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-it_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-ja_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-ko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-overrides_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-pl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-ru_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-zh-CN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-bench_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/marisa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/matchbox-window-manager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mcelog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mcstrans_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mdadm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/meanwhile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/media-player-info_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memcached_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memkind_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memstomp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memtest86+_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mercurial_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-dri-drivers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-khr-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libEGL-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libEGL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGL-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLES_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLU-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLU_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLw-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libgbm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libglapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libxatracker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-private-llvm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/metacity_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mgetty_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/microcode_ctl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/migrationtools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/minicom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mipv6-daemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mkbootdisk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mksh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mlocate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mobile-broadband-provider-info_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_gssapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_kerb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_mellon-diagnostics_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_mellon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_openidc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_authnz_pam_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_dav_svn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_fcgid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_intercept_form_submit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_lookup_identity_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_nss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_revocator_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_security_crs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_security_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_session_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_ssl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_wsgi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mokutil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/motif-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/motif_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mousetweaks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozilla-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozjs17_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozjs24_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozjs52_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpfr-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpfr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpg123-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.0-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.0_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mpich32_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mpich_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich2-psm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich222-psm2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich222-psm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich222_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich23-psm2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich23-psm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich23_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-openmpi3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-openmpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mrtg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mstflint_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/msv-msv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/msv-xsdlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mt-st_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtdev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mutt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mutter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-psm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-psm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mysql-connector-java_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mysql-connector-odbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-bg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-cs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-da_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-de_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-el_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-en_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-es_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-fr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-hu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-it_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-lb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-lv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-mi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-nb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ne_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-nl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-nn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-pl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-pt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ru_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-sk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-sl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-sv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-uk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nafees-web-naskh-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nano_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nasm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nautilus-extensions_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nautilus-sendto_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nautilus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/navilu-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit-plugin-python-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit-plugin-python2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit-plugin-vddk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncompress_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-term_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ndctl-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ndctl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/neon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-core-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-core-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-widgets_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-agent-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netcf-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netlabel_tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netpbm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netpbm-progs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netpbm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netsniff-ng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nettle-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nettle_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/newt-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/newt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfs-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfs4-acl-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfsometer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfstest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nftables_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-brush-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-gothic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-myeongjo-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-pen-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nm-connection-editor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nmap-ncat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nscd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nspr-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nspr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-pam-ldapd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-pem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn-freebl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn-freebl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-sysinit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-util-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-util_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss_compat_ossl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ntp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ntpdate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ntsysv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numactl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numactl-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numactl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numpy-f2py_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numpy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nuxwdog-client-java_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nuxwdog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nvme-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nvmetcli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/obex-data-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/obexd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/objectweb-asm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oddjob-mkhomedir_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oddjob_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular-part_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/omping_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-address-resolution_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-basic-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-fastfabric_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-fm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-libopamgt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opal-prd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/open-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/open-vm-tools-desktop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/open-vm-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openchange_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-ccatok_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-ep11tok_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-icatok_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-icsftok_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-swtok_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-tpmtok_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opendnssec_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openhpi-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openhpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openjade_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openjpeg-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openjpeg2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap-clients_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap-servers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-account-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-account_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-fan-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-fan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-hardware-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-hardware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-indicationmanager-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-logicalfile-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-logicalfile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-networking-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-networking_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-powermanagement-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-powermanagement_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-providers-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-providers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-python-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-python-providers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-realmd-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-realmd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-service-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-service_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-software-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-software_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-storage-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-storage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-tools-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openobex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-containers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-scanner_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openslp-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openslp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensm-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-askpass_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-clients_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-keycat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl-ibmca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl098e_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openwsman-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openwsman-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openwsman-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oprofile-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oprofile-jit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oprofile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/orc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/orca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ortp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/os-prober_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oscap-anaconda-addon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/osinfo-db-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/osinfo-db_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/overpass-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-gtk2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-icon-theme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/p11-kit-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/p11-kit-trust_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/p11-kit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-cluster-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-cts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-libs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-nagios-plugins-metadata_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-remote_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paflib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pakchois_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paktype-naqsh-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paktype-naskh-basic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paktype-tehreer-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam_krb5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam_pkcs11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pango-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pango_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pangomm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/papi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/papi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paps-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paratype-pt-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/parfait_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/parted_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/passivetex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/passwd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/patch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/patchutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pavucontrol_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pax_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pciutils-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pciutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-conf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-export-pcp2graphite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-manager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-activemq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-apache_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-bash_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-bonding_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-cisco_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-dbping_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-dm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-ds389_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-ds389log_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-elasticsearch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gfs2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gluster_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gpfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gpsd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-json_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-lmsensors_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-logger_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-lustre_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-lustrecomm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-mailq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-memcache_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-mounts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-named_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-netfilter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-news_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-nfsclient_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-nginx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-nvidia-gpu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-pdns_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-postfix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-postgresql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-roomtemp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-rpm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-sendmail_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-shping_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-summary_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-trace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-unbound_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-weblog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-zswap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-selinux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-system-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-webapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-zeroconf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre2-utf16_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcs-snmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcsc-lite-ccid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcsc-lite-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcsc-lite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pentaho-libxml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pentaho-reporting-flow-engine_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perftest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Algorithm-Diff_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-App-cpanminus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Archive-Extract_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Archive-Tar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Archive-Zip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Authen-SASL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-B-Lint_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Bit-Vector_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Business-ISBN-Data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Business-ISBN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CGI-Session_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CGI_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN-Meta-Requirements_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN-Meta-YAML_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN-Meta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPANPLUS-Dist-Build_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPANPLUS_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Carp-Clan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Carp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Class-ISA_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Class-Load_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Class-Singleton_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Compress-Raw-Bzip2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Compress-Raw-Zlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Convert-ASN1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-OpenSSL-Bignum_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-OpenSSL-RSA_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-OpenSSL-Random_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-SSLeay_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBD-MySQL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBD-Pg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBD-SQLite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBI_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBIx-Simple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DB_File_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Data-Dumper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Data-OptList_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Date-Calc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Date-Manip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime-Format-DateParse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime-Locale_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime-TimeZone_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Devel-Symdump_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-HMAC_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-MD5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-SHA1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-SHA_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Encode-Detect_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Encode-Locale_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Encode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Env_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Error_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Exporter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-CBuilder_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-Embed_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-Install_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-MakeMaker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-Manifest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-ParseXS_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-FCGI_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-CheckTree_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Fetch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Listing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Path_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Slurp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Temp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Filter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Font-AFM_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-FreezeThaw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-GD_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-GSSAPI_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Getopt-Long_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Git_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Format_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Parser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Tagset_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Tree_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Cookies_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Daemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Date_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Message_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Negotiate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Tiny_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Compress_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-HTML_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Socket-INET6_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Socket-IP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Socket-SSL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Zlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-stringy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IPC-Cmd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-JSON-PP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-JSON_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-LDAP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-LWP-MediaTypes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-LWP-Protocol-https_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-List-MoreUtils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Locale-Codes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Locale-Maketext-Simple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Locale-Maketext_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Log-Message-Simple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Log-Message_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mail-DKIM_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mail-SPF_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-MailTools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Build_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-CoreList_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Implementation_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Load-Conditional_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Load_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Loaded_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Metadata_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Pluggable_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Runtime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Signature_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mozilla-CA_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mozilla-LDAP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-DNS_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-Daemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-HTTP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-LibIDN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-SMTP-SSL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-SSLeay_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-NetAddr-IP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Newt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Object-Accessor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PAR-Dist_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PCP-PMDA_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-Constants_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-DeprecationManager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-Stash-XS_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-Stash_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Params-Check_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Params-Util_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Params-Validate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Parse-CPAN-Meta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PathTools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Perl-OSType_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Perl4-CoreLibs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PlRPC_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Checker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Coverage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Escapes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-LaTeX_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Parser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Perldoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Plainer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Simple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Usage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-SGMLSpm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-SNMP_Session_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Scalar-List-Utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Socket6_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Socket_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Storable_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-String-ShellQuote_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sub-Install_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-CPU_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-Guestfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-MemInfo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-Syslog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-Virt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Term-UI_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-TermReadKey_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Harness_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Pod-Coverage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Pod_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Simple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-Diff_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-ParseWords_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-Soundex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-Unidecode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Thread-Queue_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Time-HiRes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Time-Local_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Time-Piece_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-TimeDate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Try-Tiny_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-URI_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Version-Requirements_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-WWW-RobotRules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Dumper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Filter-BufferText_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Grove_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-LibXML_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-NamespaceSupport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Parser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-SAX-Base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-SAX-Writer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-SAX_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Simple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Twig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Writer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-XPath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-YAML-Tiny_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-YAML_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-autodie_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-constant_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-gettext_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-hivex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-homedir_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libintl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libwww-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libxml-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-local-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-podlators_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-srpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-threads-shared_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-threads_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-version_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perltidy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pexpect_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/phonon-backend-gstreamer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/phonon-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/phonon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-gd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-ldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-odbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pdo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pear_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pecl-memcache_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pgsql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-process_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-recode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-soap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-xml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-xmlrpc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pidgin-sipe_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pidgin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry-qt4_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry-qt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinfo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pixman-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pixman_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pkgconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-base-java_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-ca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-kra_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-symkey_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plasma-scriptengine-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-core-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-graphics-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-plugin-label_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-plugin-two-step_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-scripts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-system-theme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-theme-charge_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pm-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pmdk-convert_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pmempool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pnm2ppa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/po4a_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-newrole_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-sandbox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-kde_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-pkla-compat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-qt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-qt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/popt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/popt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/portreserve_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postfix-perl-scripts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postfix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-contrib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-jdbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-odbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-plperl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-plpython_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-pltcl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pothana2000-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/powerpc-utils-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/powerpc-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/powertop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ppc64-diag_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ppc64-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ppp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pptp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/prelink_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/procmail_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/procps-ng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/protobuf-c_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/protobuf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ps_mem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/psacct_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/psmisc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ptlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-gdm-hooks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-libs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-libs-glib2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-module-bluetooth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-module-x11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/purple-sipe_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyOpenSSL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pycairo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygobject2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygobject3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygpgme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygtk2-libglade_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygtk2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pykde4_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pykickstart_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyldb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyliblzma_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyorbit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyparsing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyparted_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyserial_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pytalloc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-IPy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-adal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-augeas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-azure-sdk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-babel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-backports-ssl_match_hostname_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-backports_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-bcc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-beaker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-blivet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-boto3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-brlapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cffi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-chardet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cherrypy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-clufter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-configobj_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-configshell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-coverage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cpio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cups_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-custodia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-dateutil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-decorator_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-deltarpm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-di_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-dmidecode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-dns_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-docutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-enum34_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ethtool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-firewall_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gobject-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gobject_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gssapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gudev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-hwdata_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-idna_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-iniparse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-inotify_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ipaddr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ipaddress_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-isodate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-javapackages_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jinja2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jsonpatch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jsonpointer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jwcrypto_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jwt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kdcproxy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kerberos_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kitchen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kmod_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-krbV_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libguestfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libipa_hbac_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libsss_nss_idmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-linux-procfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-lxml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-magic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-mako_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-markupsafe_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-matplotlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-meh-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-meh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-memcached_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-msrest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-msrestazure_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-netaddr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-netifaces_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-nose_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-nss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ntplib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-paramiko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-paste_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-perf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pillow_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ply_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-prettytable_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-psycopg2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pwquality_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pyblock_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pycparser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pycurl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pyudev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-qrcode-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rados_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rbd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-reportlab_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-requests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rhsm-certificates_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rhsm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rtslib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-s3transfer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-schedutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-setproctitle_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-setuptools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-six_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-slip-dbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-slip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-smbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sqlalchemy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-srpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sss-murmur_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sssdconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-suds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-syspurpose_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-tdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-tempita_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-tevent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-urlgrabber_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-urllib3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-urwid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-virtualenv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-volume_key_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-yubico_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-blivet3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-blockdev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-bytesize_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-caribou_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-cryptography_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-futures_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-hawkey_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-ipaclient_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-ipalib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-ipaserver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-keycloak-httpd-client-install_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-oauthlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-pyasn1-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-pyasn1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-pyatspi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-requests-oauthlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-rpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-subprocess32_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-pip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-rpm-generators_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-rpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-setuptools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-wheel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pytz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyusb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pywbem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyxattr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qca-ossl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qca2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qclib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qdox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-guest-agent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-img-ma_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-img_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-common-ma_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-ma_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-tools-ma_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qgnomeplatform_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qimageblitz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qjson_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qpdf-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qperf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qrencode-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-odbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-postgresql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-settings_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-x11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-MySQL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-ODBC_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-PostgreSQL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-designer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-doctools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-linguist_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qt3d-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qt3d_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-odbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-postgresql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtcanvas3d_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtconnectivity-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtconnectivity_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtdeclarative-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtdeclarative_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtdoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtenginio-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtenginio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtgraphicaleffects_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtimageformats_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtlocation-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtlocation_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtmultimedia-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtmultimedia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtquickcontrols2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtquickcontrols_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtscript-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtscript_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsensors-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsensors_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtserialbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtserialport-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtserialport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsvg-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsvg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-libs-designer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-libs-designercomponents_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-libs-help_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttranslations_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwayland_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebchannel-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebchannel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebsockets-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebsockets_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtx11extras-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtx11extras_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtxmlpatterns-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtxmlpatterns_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-rpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/quagga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/quota-nls_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/quota_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/radvd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/raptor2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rarian-compat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rarian_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rasdaemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rasqal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rcs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdist_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdma-core-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdma-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/readline-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/readline_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/realmd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rear_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/recode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redfish-finder_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-access-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-access-plugin-ipa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-bookmarks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-indexhtml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-logos_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-cxx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-desktop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-languages_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-printing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-submod-multimedia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-submod-security_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-menus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-computenode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-eula_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-workstation_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-rpm-config_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-support-lib-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-support-tool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-upgrade-dracut-plymouth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-upgrade-dracut_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-upgrade-tool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redland-virtuoso_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redland_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/regexp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/relaxngDatatype_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resource-agents-aliyun_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resource-agents-gcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resource-agents_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-atom-provider_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jackson-provider_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jaxb-provider_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jaxrs-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jaxrs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jettison-provider_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rfkill_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhdb-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhino_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-check_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-client-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-setup-gnome_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-setup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhnlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhnsd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhsm-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhythmbox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rmt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rng-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rngom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rootfiles_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rp-pppoe_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpcbind_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-build-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-build_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-sign_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpmdevtools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpmemd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpmlint_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rrdtool-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rrdtool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsh-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsync_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-gnutls_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-gssapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-kafka_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-mmjsonparse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-pgsql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-relp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rtkit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ruby-irb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ruby-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ruby_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-abrt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-bigdecimal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-bundler_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-io-console_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-json_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-net-http-persistent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-psych_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-rdoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-thor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygems_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rusers-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rusers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rwho_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-cmsfs-fuse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-cmsfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-cpuplugd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-hmcdrvfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-iucvterm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-mon_statd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-osasnmpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-zdsfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-ziomon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/saab-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sac_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-client-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-common-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-common-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-krb5-printing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-winbind-clients_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-winbind-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-winbind_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-devanagari-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-gujarati-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-malayalam-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-oriya-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-tamil-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-drivers-cameras_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-drivers-scanners_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-frontends_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sassist_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/satyr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sbd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cim-client2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-fsvol_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-network_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-nfsv3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-nfsv4_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-params_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-sysfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-syslog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-gather-provider_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-gather_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-indication_helper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-sfcb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-sfcc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-smis-hba_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-wbemcli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scannotation_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scap-security-guide-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scap-security-guide_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scap-workbench_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scipy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scl-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/screen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scrub_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sdparm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seabios-bin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seahorse-nautilus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seahorse-sharing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seahorse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seavgabios-bin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sed_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-minimum_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-mls_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-targeted_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sendmail-cf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sendmail_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/servicelog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setools-console_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setools-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setroubleshoot-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setroubleshoot-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setroubleshoot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setserial_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setuptool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sg3_utils-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sg3_utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sgabios-bin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sgml-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sgpio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shadow-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shared-desktop-ontologies-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shared-desktop-ontologies_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shared-mime-info_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-ia32_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-unsigned-ia32_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-unsigned-x64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-x64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shotwell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/si-units_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sil-abyssinica-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sil-nuosu-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sil-padauk-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sip-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sip-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/skkdic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/slang_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/slapi-nis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/slf4j_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smartmontools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-anjalioldlipi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-dyuthi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-kalyani-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-meera-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-rachana-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-raghumalayalam-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-suruma-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/snapper-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/snapper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/snappy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/socat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/softhsm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/soprano-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/soprano_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sos-collector_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sos_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sound-theme-freedesktop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/soundtouch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/table-1.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/table-2.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/table-3.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/table-4.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/table-5.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/table-6.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/table-7.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/table-8.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat7/table-9.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/all_redhat8_rpm_package_manifest.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-legacy-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-snmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/CUnit-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/CUnit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/GConf2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/GConf2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Judy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/LibRaw-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/LibRaw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager-glib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Module_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-adsl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-bluetooth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-cloud-setup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-config-connectivity-redhat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-config-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-dispatcher-routing-rules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libnm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libnm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libreswan-gnome_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libreswan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-ovs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-ppp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-team_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-tui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-wifi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-wwan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenEXR-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenEXR-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-lanserv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-command-not-found_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-cron_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-glib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-gstreamer-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-gtk3-module_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Package_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL2-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SLOF_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SuperLU-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SuperLU_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/WALinuxAgent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Xaw3d-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Xaw3d_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aajohan-comfortaa-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abattis-cantarell-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-ccpp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-coredump-helper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-kerneloops_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-pstoreoops_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-vmcore_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-xorg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-cli-ng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-console-notification_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-dbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-desktop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-gui-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-java-connector_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-plugin-machine-id_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-plugin-sosreport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-tui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/accountsservice-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/accountsservice-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/accountsservice_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/acl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/acpica-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/acpid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adcli-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adcli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adobe-mappings-cmap-deprecated_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adobe-mappings-cmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adobe-mappings-pdf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-cursor-theme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-gtk2-theme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-icon-theme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-qt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aide_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-lib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-arcamav_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-maemo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-oss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-pulseaudio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-samplerate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-speex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-upmix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-usbstream_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-vdownmix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-tools-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-ucm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-utils-alsabat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-dracut_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-install-env-deps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-tui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-user-help_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-widgets_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/annobin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ansible-freeipa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-antlr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-bcel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-bsf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-log4j_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-oro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-regexp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-resolver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-xalan2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-commons-logging_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-commons-net_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-contrib-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-contrib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-javamail_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-jdepend_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-jmf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-jsch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-junit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-manual_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-swing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-testutil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-xz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-C++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-manual_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-tool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aopalliance-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aopalliance_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-beanutils-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-beanutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-cli-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-codec-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-codec_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-collections-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-collections-testframework_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-collections_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-compress-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-compress_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-exec-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-exec_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-io-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-io_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-jxpath-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-jxpath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang3-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-logging-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-logging_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-net-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-net_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-ivy-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-ivy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-resource-bundles_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apcu-panel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/appstream-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-bdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-ldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-odbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-openssl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-pgsql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-sqlite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aqute-bnd-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aqute-bnd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aqute-bndlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/arpwatch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/asciidoc-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/asciidoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspell-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspell-en_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-runtime-3.0_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-runtime-3.1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-targeting-pack-3.0_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-targeting-pack-3.1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/assertj-core-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/assertj-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-atk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-atk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-core-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atinject-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atinject-tck_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atinject_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atkmm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atkmm-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atkmm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-corei2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-corei2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z10-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z10_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z196-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z196_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/attr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audispd-plugins-zos_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audispd-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audit-libs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audit-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/augeas-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/augeas-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/augeas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authselect-compat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authselect-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authselect_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autoconf-archive_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autoconf213_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autoconf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-af_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-bg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-cs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-da_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-de_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-en_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-es_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-fa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-fi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-fr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-hr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-hu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-is_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-it_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ja_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-lb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-lt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-mn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-nl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-pl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-pt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ru_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-tr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-vi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-zh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autofs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autogen-libopts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autogen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/automake_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autotrace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-autoipd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-howl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-howl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-libdns_sd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-libdns_sd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-gobject_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-ui-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/awscli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babl-devel-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-console_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-director_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-libs-sql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-logwatch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-storage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/baobab_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/basesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bash-completion_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bash-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bash_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcel-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bea-stax-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/beust-jcommander-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/beust-jcommander_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-chroot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-dyndb-ldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-export-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-export-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-libs-lite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-license_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-lite-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-sdb-chroot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-sdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/binutils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/binutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/biosdevname_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bison-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bison-runtime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bison_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-console-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-fangsongti-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-fixed-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-fonts-compat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-lucida-typewriter-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blas-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blas64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blivet-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blktrace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-cups_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-hid2hci_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-libs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-obexd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bnd-maven-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bogofilter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bolt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boom-boot-conf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boom-boot-grub2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boom-boot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-atomic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-build_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-chrono_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-container_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-context_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-coroutine_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-date-time_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-fiber_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-graph-mpich_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-graph-openmpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-graph_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-iostreams_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-jam_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-locale_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-log_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-math_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-mpich-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-mpich-python3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-mpich_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-numpy3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-openmpi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-openmpi-python3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-openmpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-program-options_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-python3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-python3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-random_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-regex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-serialization_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-signals_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-stacktrace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-system_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-thread_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-timer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-type_erasure_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-wave_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-arbitrator_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-site_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpftool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpftrace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-algeti-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-chveulebrivi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-classic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-courier-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-courier-s-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-dedaena-block-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-dejavu-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-elite-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-excelsior-caps-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-excelsior-condenced-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-excelsior-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-glaho-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-gorda-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-ingiri-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-irubaqidze-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-mikhail-stephan-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-mrgvlovani-caps-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-mrgvlovani-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nateli-caps-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nateli-condenced-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nateli-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nino-medium-cond-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nino-medium-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-medium-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-modern-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-regular-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-serif-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-serif-modern-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-ucnobi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero-nautilus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brlapi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brlapi-java_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brlapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-at-spi2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-dracut_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-espeak-ng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-xw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brotli-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brotli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsdtar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsf-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsh-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsh-manual_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bubblewrap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/buildah-tests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/buildah_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byacc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byaccj_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byteman-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byteman_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bzip2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bzip2-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bzip2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/c-ares-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/c-ares_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/c2esp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ca-certificates_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cachefilesd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo-gobject-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo-gobject_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairomm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairomm-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairomm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cal10n-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cal10n_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cargo-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cargo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdi-api-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdi-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdparanoia-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdparanoia-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdparanoia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdrdao_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/celt051-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/celt051_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/certmonger_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cgdcbxd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cglib-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cglib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/check-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/check_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/checkpolicy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cheese-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cheese_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chkconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chrome-gnome-shell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chrony_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chrpath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cifs-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cim-schema_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cjose-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cjose_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-analyzer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-tools-extra_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cldr-emoji-annotation_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-dracut_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-luks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-systemd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-udisks2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clippy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cloud-init_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cloud-utils-growpart_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clucene-contribs-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clucene-core-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clucene-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-bin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-lib-ccs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-lib-general_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-lib-pcs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gst2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gst3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gst3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gtk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-rpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmirror_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-bridge_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-composer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-dashboard_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-machines_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-packagekit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-pcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-podman_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-session-recording_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-storaged_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-system_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-ws_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/codemodel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cogl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cogl-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cogl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/color-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-devel-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-gtk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-exiv2-026_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-guile18-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-guile18_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-libgfortran-48_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-libpthread-nonshared_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-libtiff3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-openssl10_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compiler-rt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/composer-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/conmon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/conntrack-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/container-exception-logger_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/container-selinux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/container-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/containernetworking-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/containers-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/convmv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/copy-jdk-configs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/coreutils-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/coreutils-single_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/coreutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync-qdevice_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync-qnetd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync-vqsim_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosynclib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosynclib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cpio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cpp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppcheck_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppunit-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppunit-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppunit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cracklib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cracklib-dicts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cracklib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-gcore-command_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-ptdump-command_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-trace-command_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crda_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/createrepo_c-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/createrepo_c-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/createrepo_c_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/criu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cronie-anacron_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cronie-noanacron_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cronie_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crontabs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crypto-policies_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup-reencrypt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cscope_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctags-etags_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctags_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctdb-tests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-aharoni-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-caladings-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-david-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-drugulin-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-ellinia-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-frank-ruehl-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-hadasim-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-keteryg-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-miriam-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-miriam-mono-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-nachlieli-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-shofar-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-simple-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-stamashkenaz-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-stamsefarad-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-yehuda-clm-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filters-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filters-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filters_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-ipptool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-lpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-pk-helper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/curl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/custodia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-imapd-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-imapd-vzic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-imapd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-gs2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-gssapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-ldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-md5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-ntlm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-plain_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-scram_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-sql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxctl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxctl-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxctl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dblatex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-c++-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-c++-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-c++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-daemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-glib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-x11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbxtool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dconf-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dconf-editor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dconf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dcraw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejagnu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-sans-mono-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-serif-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/delve_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/desktop-file-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/devhelp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/devhelp-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/devhelp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-event-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-event-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-event_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-multipath-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-multipath-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-multipath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-persistent-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-relay_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dialog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/diffstat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/diffutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/directory-maven-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/directory-maven-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dirsplit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/djvulibre-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/djvulibre-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/djvulibre_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-connector-dbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-renderer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dlm-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dlm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dmidecode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-automatic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-plugin-spacewalk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-plugin-subscription-manager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-plugins-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnsmasq-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnsmasq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnssec-trigger-panel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnssec-trigger_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-dtds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-style-dsssl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-style-xsl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook2X_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook5-schemas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dos2unix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dosfstools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotconf-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotconf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-apphost-pack-3.0_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-apphost-pack-3.1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-host-fxr-2.1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-host_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-hostfxr-3.0_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-hostfxr-3.1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-runtime-2.1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-runtime-3.0_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-runtime-3.1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-2.1.5xx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-2.1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-3.0_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-3.1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-targeting-pack-3.0_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-targeting-pack-3.1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-templates-3.0_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-templates-3.1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-pgsql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-pigeonhole_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/doxygen-doxywizard_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/doxygen-latex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/doxygen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dptfxtract_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-caps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-config-generic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-config-rescue_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-live_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-network_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-squash_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/driverctl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dropwatch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/drpm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/drpm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dtc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dump_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dvd+rw-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dwarves_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dwz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-testsuite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/e2fsprogs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/e2fsprogs-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/e2fsprogs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/easymock-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/easymock_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ed_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/edk2-aarch64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/edk2-ovmf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ee4j-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efi-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efi-srpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efibootmgr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efivar-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efivar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/egl-wayland_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/eglexternalplatform-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/eigen3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-debuginfod-client-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-debuginfod-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-default-yama-scope_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-devel-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libelf-devel-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libelf-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libelf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elinks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-lucid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-nox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-terminal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enca-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enscript_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/environment-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/eog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/esc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/espeak-ng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ethtool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evemu-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evemu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince-browser-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince-nautilus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-bogofilter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-langpacks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-tests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-ews-langpacks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-ews_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-help_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-langpacks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-mapi-langpacks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-mapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-pst_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-spamassassin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exchange-bmc-os-info_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exec-maven-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exec-maven-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/execstack_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exempi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exempi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/expat-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/expat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/expect_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fabtests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fapolicyd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/farstream02_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fcoe-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-compendium-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-compendium_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-core-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-foundation-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-foundation_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-utils-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-aliyun_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-all_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-amt-ws_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-apc-snmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-apc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-aws_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-azure-arm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-bladecenter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-brocade_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-cisco-mds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-cisco-ucs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-compute_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-drac5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-eaton-snmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-emerson_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-eps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-gce_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-heuristics-ping_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-hpblade_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ibmblade_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ifmib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo-moonshot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo-mp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo-ssh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-intelmodular_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ipdu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ipmilan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-kdump_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-lpar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-mpath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-redfish_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-rhevm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-rsa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-rsb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-sbd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-scsi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-virsh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-vmware-rest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-vmware-soap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-wti_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-zvm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-libvirt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-multicast_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-serial_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-tcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fetchmail_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-double_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-long_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-quad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-single_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file-roller_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/findutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fipscheck-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fipscheck-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fipscheck_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firefox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewall-applet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewall-config_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewalld-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewalld_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flac-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flac-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flac_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-builder_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-selinux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-session-helper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flex-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flex-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flite-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fltk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fltk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flute_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontawesome-fonts-web_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontawesome-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontconfig-devel-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontconfig-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontforge_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontpackages-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontpackages-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fonts-tweak-tool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic-db-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic-db-ppds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic-db_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/forge-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fprintd-pam_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fprintd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeglut-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeglut_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-bmc-watchdog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-ipmidetectd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-ipmiseld_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-krb5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-ldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-postgresql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-rest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-sqlite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-unixODBC_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freerdp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freerdp-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freerdp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freetype-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freetype_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frei0r-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frei0r-plugins-opencv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frei0r-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fribidi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fribidi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frr-contrib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ftp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-overlayfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-sshfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse3-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fusesource-pom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupdate-efi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupdate-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupdate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fxload_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/galera_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gamin-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gamin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gavl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gawk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-c++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-gdb-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-gfortran_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-offload-nvptx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-plugin-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-annobin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-binutils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-binutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-build_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dwz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-testsuite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-libelf-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-libelf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-c++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-gdb-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-gfortran_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-plugin-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gdb-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gdb-gdbserver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libasan-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libatomic-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libitm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-liblsan-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libquadmath-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libstdc++-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libstdc++-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libtsan-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libubsan-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-ltrace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-make-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-make_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-perftools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-runtime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-strace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-initscript_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-runtime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-sdt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-toolchain_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-valgrind-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-valgrind_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcr-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb-gdbserver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb-headless_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdbm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdbm-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdbm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdisk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-xlib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-xlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-bookmarks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-bracketcompletion_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-codecomment_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-colorpicker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-colorschemer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-commander_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-drawspaces_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-findinfiles_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-joinlines_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-multiedit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-smartspaces_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-terminal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-textsize_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-translate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-wordcompletion_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugins-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gegl04-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gegl04_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gegl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genisoimage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-vpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-zlib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-zlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2-demos_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geocode-glib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geocode-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoipupdate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geolite2-city_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geolite2-country_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-annotation-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-annotation_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jms-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jms_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jpa-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jpa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-parent-poms_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext-common-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gfbgraph_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gflags-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gflags_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gfs2-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghc-srpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-tools-dvipdf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-tools-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-tools-printing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-x11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/giflib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/giflib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp-devel-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-all_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-clang-format_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-core-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-daemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-email_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-instaweb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-subtree_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-svn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gitk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gitweb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gjs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gjs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gl-manpages_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glade-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glade-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-annotation-api-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-annotation-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-el-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-el-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-el_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-fastinfoset_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-runtime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-txw2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jsp-api-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jsp-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-legal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-master-pom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-servlet-api-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-servlet-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glew-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib-networking_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-fam_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-tests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-all-langpacks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-benchtests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-headers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-aa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-af_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-agr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ak_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-am_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-an_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-anp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-as_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ast_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ayc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-az_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-be_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ber_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bhb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bho_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-br_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-brx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-byn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ce_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-chr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cmn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-crh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-csb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-da_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-de_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-doi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-dsb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-dv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-dz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-el_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-en_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-eo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-es_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-et_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-eu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ff_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fur_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gez_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ha_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hak_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-he_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hif_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hne_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hsb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ht_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-id_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ik_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-is_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-it_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-iu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ja_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ka_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kab_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-km_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kok_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ku_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ky_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-li_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lij_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ln_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lzh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mag_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mai_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mfe_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mhr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-miq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mjw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mni_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ms_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-my_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ne_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nhn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-niu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nso_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-oc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-om_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-or_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-os_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-quz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-raj_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ru_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-rw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sah_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-se_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sgs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-shn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-shs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-si_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-so_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-st_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-szl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tcy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-te_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-th_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-the_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ti_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-to_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-uk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-unm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ur_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-uz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ve_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-vi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wae_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-xh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yue_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yuw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-zh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-zu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-locale-source_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-minimal-langpack_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-nss-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibmm24-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibmm24-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibmm24_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glm-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glog-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-api-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-client-xlators_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-fuse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-rdma_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glx-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmock-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmock_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmp-c++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-abrt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-autoar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-backgrounds-extras_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-backgrounds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-bluetooth-libs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-bluetooth-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-bluetooth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-boxes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-calculator_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-characters_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-classic-session_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-color-manager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-control-center-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-control-center_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-desktop3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-desktop3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-disk-utility_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-font-viewer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-cs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-de_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-es_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-fr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-gl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-hu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-it_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-pl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-pt_BR_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-ru_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-initial-setup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-keyring-pam_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-keyring_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-logs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-menus-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-menus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-online-accounts-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-online-accounts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-online-miners_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-photos-tests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-photos_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-remote-desktop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-screenshot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-session-wayland-session_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-session-xsession_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-session_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-settings-daemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-apps-menu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-auto-move-windows_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-dash-to-dock_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-desktop-icons_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-disable-screenshield_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-drive-menu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-horizontal-workspaces_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-launch-new-instance_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-native-window-placement_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-no-hot-corner_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-panel-favorites_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-places-menu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-screenshot-window-sizer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-systemMonitor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-top-icons_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-updates-dialog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-user-theme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-window-grouper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-window-list_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-windowsNavigator_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-workspace-indicator_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-software-editor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-software_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-system-monitor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-terminal-nautilus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-terminal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-themes-standard_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-tweaks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-user-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-video-effects_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-efi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-efi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-mono-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-serif-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnupg2-smime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnupg2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnuplot-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnuplot-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnuplot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-c++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-dane_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/go-compilers-golang-compiler_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/go-srpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/go-toolset_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gobject-introspection-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gobject-introspection_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-bin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-misc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-race_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-src_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-tests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-crosextra-caladea-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-crosextra-carlito-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-kufi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-sans-mono-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-serif-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-guice-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-guice_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-cjk-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-emoji-color-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-emoji-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-kufi-arabic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-mono-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-naskh-arabic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-naskh-arabic-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-nastaliq-urdu-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-armenian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-avestan-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-balinese-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-bamum-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-batak-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-bengali-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-bengali-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-brahmi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-buginese-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-buhid-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-canadian-aboriginal-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-carian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cham-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cherokee-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cjk-jp-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cjk-ttc-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-coptic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cuneiform-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cypriot-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-deseret-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-devanagari-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-devanagari-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-egyptian-hieroglyphs-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ethiopic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-georgian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-glagolitic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gothic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gujarati-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gujarati-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gurmukhi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gurmukhi-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-hanunoo-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-hebrew-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-imperial-aramaic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-inscriptional-pahlavi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-inscriptional-parthian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-javanese-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kaithi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kannada-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kannada-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kayah-li-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kharoshthi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-khmer-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-khmer-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lao-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lao-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lepcha-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-limbu-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-linear-b-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lisu-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lycian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lydian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-malayalam-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-malayalam-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-mandaic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-meetei-mayek-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-mongolian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-myanmar-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-myanmar-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-new-tai-lue-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-nko-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ogham-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ol-chiki-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-italic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-persian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-south-arabian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-turkic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-oriya-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-oriya-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-osmanya-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-phags-pa-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-phoenician-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-rejang-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-runic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-samaritan-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-saurashtra-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-shavian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-sinhala-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-sundanese-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syloti-nagri-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-symbols-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syriac-eastern-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syriac-estrangela-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syriac-western-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tagalog-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tagbanwa-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tai-le-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tai-tham-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tai-viet-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tamil-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tamil-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-telugu-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-telugu-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-thaana-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-thai-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-thai-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tibetan-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tifinagh-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ugaritic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ui-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-vai-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-yi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-armenian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-bengali-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-cjk-ttc-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-devanagari-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-georgian-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-gujarati-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-kannada-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-khmer-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-lao-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-malayalam-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-tamil-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-telugu-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-thai-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-roboto-slab-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gperf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgme-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgmepp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgmepp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpm-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-azure-monitor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-cloudwatch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-elasticsearch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-graphite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-influxdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-loki_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-mssql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-opentsdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-pcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-postgres_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-prometheus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-stackdriver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphite2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphite2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-gd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-python3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grep_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grilo-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grilo-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grilo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/groff-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/groff_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-aa64-cdboot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-aa64-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-aa64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-ia32-cdboot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-ia32-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-ia32_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-x64-cdboot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-x64-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-x64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-pc-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-pc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-ppc64le-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-ppc64le_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools-efi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools-extra_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools-minimal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grubby_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsettings-desktop-schemas-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsettings-desktop-schemas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsound_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gspell-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gspell-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gspell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssdp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssdp-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssdp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssntlmssp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssproxy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-bad-free-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-bad-free_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-base-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-good-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-good_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-ugly-free_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtest-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk-update-icon-cache_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk-vnc2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-devel-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-immodule-xim_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-immodules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk3-immodule-xim_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm24-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm24-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm24_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm30-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm30-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm30_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtksourceview3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtksourceview3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava20-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava20-testlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava20_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gubbi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-assistedinject_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-bom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-extensions_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-grapher_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-jmx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-jndi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-multibindings_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-servlet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-testlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-throwingproviders_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guile-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-av_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-dlna_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-igd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-igd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-cups_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-libs-ui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-afc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-afp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-archive_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-fuse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-goa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-gphoto2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-mtp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-smb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvnc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gzip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest-demo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/haproxy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hardlink_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/harfbuzz-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/harfbuzz-icu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/harfbuzz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hawtjni-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hawtjni-runtime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hawtjni_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hdparm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/help2man_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hesiod-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hesiod_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hexchat-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hexchat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hexedit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hicolor-icon-theme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/highlight-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/highlight_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hivex-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hivex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hostname_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hspell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/http-parser-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/http-parser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-client-cache_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-client-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-core-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-project_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-manual_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-af_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ak_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-am_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-as_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ast_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-az_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-be_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ber_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-bg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-bn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-br_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-csb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-da_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-de_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-dsb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-el_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-en-GB_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-en-US_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-en_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-eo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-AR_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-BO_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CO_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CR_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CU_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-DO_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-EC_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-ES_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-GT_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-HN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-MX_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-NI_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PA_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PE_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PR_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PY_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-SV_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-US_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-UY_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-VE_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-et_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-eu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fj_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fur_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-grc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-haw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-he_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hsb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ht_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-id_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-is_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-it_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-kk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-km_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-kn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ku_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ky_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-la_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-lb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ln_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-lt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-lv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mai_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mos_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ms_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ne_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nso_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ny_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-oc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-om_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-or_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-pa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-pl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-pt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-qu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-quh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ru_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-rw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-se_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-shs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-si_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-smj_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-so_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-st_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-te_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-th_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ti_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-uk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ur_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-uz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ve_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-vi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-wa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-xh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-yi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-zu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwdata_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyperv-daemons-license_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyperv-daemons_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyperv-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hypervfcopyd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hypervkvpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hypervvssd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-af_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-as_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-be_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-bg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-bn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-cs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-cy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-da_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-de_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-el_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-en_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-es_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-et_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-eu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-fa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-fo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-fr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-gl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-grc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-gu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hsb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-id_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-is_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-it_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-kn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ku_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-lt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-lv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-mi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-mn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-mr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-nb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-nl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-nn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-or_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-pa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-pl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-pt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ru_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-te_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-tk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-uk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-zu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/i2c-tools-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/i2c-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibacm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-devel-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-gtk2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-hangul_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-kkc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-libpinyin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-libzhuyin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-m17n_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-sayura_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-setup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-array_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-cangjie_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-cantonese_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-easy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-erbi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-quick_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-scj_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-stroke5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-wu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-wubi-haifeng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-wubi-jidian_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-yong_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-typing-booster_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-wayland_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icedax_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icedtea-web-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icedtea-web_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icoutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/idm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/idn2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iio-sensor-proxy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ilmbase-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ilmbase_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ima-evm-utils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ima-evm-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/imake_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/infiniband-diags_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/info_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/initial-setup-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/initial-setup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/initscripts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/inkscape-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/inkscape-view_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/inkscape_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/insights-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/integritysetup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/intel-cmt-cat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/intel-gpu-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/intltool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iotop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iowatcher_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-client-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-client-samba_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-healthcheck-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-healthcheck_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-idoverride-memberof-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-python-compat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server-dns_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server-trust-ad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipcalc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iperf3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipmievd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipmitool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iproute-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iproute-tc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iproute_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iprutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset-service_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-arptables_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-ebtables_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-services_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptraf-ng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptstate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iputils-ninfod_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iputils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipvsadm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipxe-bootimgs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipxe-roms-qemu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipxe-roms_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/irqbalance_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/irssi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/irssi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iscsi-initiator-utils-iscsiuio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iscsi-initiator-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isns-utils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isns-utils-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isns-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iso-codes-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iso-codes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isomd5sum_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isorelax-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isorelax_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/istack-commons-runtime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/istack-commons-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/istack-commons_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/itstool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ivy-local_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl100-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl1000-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl105-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl135-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl2000-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl2030-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl3160-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl3945-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl4965-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl5000-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl5150-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6000-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6000g2a-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6000g2b-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6050-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl7260-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwpmd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-annotations_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-databind_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-jaxrs-json-provider_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-jaxrs-providers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-module-jaxb-annotations_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaf-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient-demo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient-manual_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-oro-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-oro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi-native-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi-native_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansson-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansson_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jasper-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jasper-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-demo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-headless_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-jdbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-src_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-webstart_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-accessibility_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-demo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-headless_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-javadoc-zip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-src_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-demo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-headless_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-javadoc-zip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-jmods_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-src_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-atk-wrapper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java_cup-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java_cup-manual_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java_cup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-demo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-manual_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-maven-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-maven-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javamail-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javamail_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-local_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-runtime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javassist-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javassist_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaxen-demo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaxen-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaxen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jbig2dec-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jbigkit-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jbigkit-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-annotations-1.2-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-interceptors-1.2-api-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-interceptors-1.2-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-jaxrs-2.0-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-logging-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-logging_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jcl-over-slf4j_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdeparser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdepend-demo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdepend-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdepend_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdependency-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdependency_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom-demo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom2-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jflex-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jflex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jimtcl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jimtcl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jline-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jline_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jmc-core-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jmc-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jmc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jna_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jolokia-jvm-agent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jomolhari-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jose_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/js-uglify_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsch-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-c-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-c-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-c_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-glib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsoup-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsoup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsr-305-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsr-305_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jss-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jtidy-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jtidy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jul-to-slf4j_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/julietaula-montserrat-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/junit-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/junit-manual_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/junit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jvnet-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jzlib-demo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jzlib-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jzlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kabi-dw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-art-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-book-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-decorative-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-digital-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-farsi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-letter-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-naskh-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-office-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-one-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-pen-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-poster-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-qurn-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-screen-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-title-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-titlel-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kbd-legacy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kbd-misc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kbd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kdump-anaconda-addon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keepalived_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-abi-whitelists_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-cross-headers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-modules-extra_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-headers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-modules-extra_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-rpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-tools-libs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-tools-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-modules-extra_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernelshark_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kexec-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keybinder3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keybinder3-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keybinder3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keycloak-httpd-client-install_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keyutils-libs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keyutils-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keyutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-base-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-battambang-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-bokor-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-handwritten-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-metal-chrieng-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-muol-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-siemreap-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod-kvdo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/koan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kpartx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kpatch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-pkinit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-server-ldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-workstation_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ksc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ksh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kurdit-unikurd-web-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kyotocabinet-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ladspa-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ladspa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lame-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lame-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-af_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-am_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-as_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ast_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-be_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-bg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-bn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-br_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-bs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-cs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-cy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-da_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-de_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-el_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-en_GB_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-en_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-es_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-et_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-eu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-fa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-fi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-fr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-gl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-gu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-he_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-hi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-hr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-hu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-id_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-is_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-it_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ja_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-kk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-kn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-lt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-lv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-mai_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-mk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-mr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ms_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ne_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nso_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-or_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pt_BR_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ru_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-si_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-te_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-th_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-tn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-tr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-uk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ur_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ve_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-vi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-xh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-zh_CN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-zh_TW_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-zu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langtable-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langtable_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lasso_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/latex2html_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lato-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lcms2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lcms2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldapjdk-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldapjdk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldb-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldns-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldns_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ledmon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lensfun-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lensfun_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/leptonica-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/leptonica_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/less_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lftp-scripts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lftp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libEMF-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libEMF_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libGLEW_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libICE-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libICE_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libIDL-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libIDL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libSM-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libSM_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11-xcb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXNVCtrl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXNVCtrl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXScrnSaver-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXScrnSaver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXau-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXau_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXaw-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXaw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcomposite-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcomposite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcursor-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcursor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdamage-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdamage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdmcp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdmcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXext-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXext_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfixes-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfixes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfont2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfont2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXft-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXft_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXinerama-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXinerama_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXmu-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXmu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXpm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXpm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrandr-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrandr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrender-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrender_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXres-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXres_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXtst-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXtst_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXv-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXvMC-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXvMC_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86dga-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86dga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86misc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86misc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86vm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86vm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liba52_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libabw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libacl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libacl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaec-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaec_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaio-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libao-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libao_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappindicator-gtk3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappindicator-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappstream-glib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappstream-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libarchive-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libarchive_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libasan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libassuan-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libassuan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libasyncns-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libasyncns_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatasmart-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatasmart_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic_ops-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic_ops_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libattr-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libattr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libavc1394_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbabeltrace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbase_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbasicobjects-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbasicobjects_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblkid-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblkid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-crypto_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-dm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-fs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-kbd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-loop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-lvm-dbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-lvm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-mdraid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-mpath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-nvdimm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-part_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-plugins-all_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-s390_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-swap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-vdo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbluray_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbpf-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbpf-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbpf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libburn-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libburn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbytesize_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcacard-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcacard_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra-gtk2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-ng-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-ng-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-ng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio-paranoia-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio-paranoia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcephfs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcephfs2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcgroup-pam_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcgroup-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcgroup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libchamplain-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libchamplain-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libchamplain_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmocka-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmocka_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmpiCppImpl0_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcollection-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcollection_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcom_err-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcom_err_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcomps-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcomps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libconfig-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcroco-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcroco_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcurl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcurl-minimal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcurl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcxl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcxl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdaemon-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdaemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdap-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdatrie-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdatrie_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdazzle_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-cxx-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-cxx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-devel-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-sql-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-sql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-gtk3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdc1394_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdhash_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdmapsharing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdmmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdmx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdnet-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdnet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdnf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdrm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdrm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdv-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdvdnav_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdvdread-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdvdread_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarves1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libeasyfc-gobject_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libeasyfc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libecap-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libecap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libedit-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libedit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libeot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libepoxy-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libepoxy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libepubgen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-mono-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-narrow-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-serif-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-sd8686-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-sd8787-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-usb8388-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-usb8388-olpc-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libestr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libetonyek-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libetonyek_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev-libevent-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev-source_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevdev-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevdev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevent-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevent-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libexif-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libexif_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libexttextcat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfabric-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfabric_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfastjson_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdisk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdisk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libffi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libffi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfontenc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfontenc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libformula_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfprint_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfreehand_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcab1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcrypt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcrypt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgdata-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgdata_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgdither_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgee-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgee_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgexiv2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgexiv2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgfortran_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2-glib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-core-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-egl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-gles_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-glx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-opengl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgnomekbd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgnomekbd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgomp-offload-nvptx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgomp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgovirt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpg-error-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpg-error_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgphoto2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgphoto2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpod-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpod-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpod_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgsf-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgsf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgtop2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgtop2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgudev-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgudev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-bash-completion_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-benchmarking_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-gfs2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-gobject-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-gobject_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-inspect-icons_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-java-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-java_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-man-pages-ja_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-man-pages-uk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-rescue_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-rsync_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-tools-c_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-winsupport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-xfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgusb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgusb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgweather-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgweather_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgxps-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgxps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhangul_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbaapi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbaapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbalinux-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbalinux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhugetlbfs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhugetlbfs-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhugetlbfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libi2c_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libibumad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libibverbs-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libibverbs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libica-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libica_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libical-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libical_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libicu-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libicu-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libicu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiec61883-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiec61883_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libieee1284-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libieee1284_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libijs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libimobiledevice-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libimobiledevice_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libindicator-gtk3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libindicator-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libini_config-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libini_config_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libinput-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libinput-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libinput_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libipa_hbac_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libipt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiptcdata_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiscsi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiscsi-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiscsi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisoburn-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisoburn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisofs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisofs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libitm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libitm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjose-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjose_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjpeg-turbo-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjpeg-turbo-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjpeg-turbo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkadm5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkcapi-hmaccalc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkcapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkeepalive_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkkc-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkkc-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkkc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-bzip2-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-lz4-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-lzma-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-lzo2-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-plugins-all_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-zlib-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-crypto-nss-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-crypto-openssl-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-crypto-plugins-all_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-plugins-all_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libksba-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libksba_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-gobject_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblayout_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libldb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libldb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libloader_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblockfile-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblockfile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblognorm-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblognorm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblouis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblsan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libluksmeta-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libluksmeta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmad-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmalaga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmatchbox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmaxminddb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmaxminddb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmbim-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmbim_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmcpp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmediaart_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmemcached-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmemcached-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmemcached_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmetalink_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmicrohttpd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmicrohttpd-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmicrohttpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmng-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmnl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmnl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodman_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodulemd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodulemd1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodulemd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmount-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmount_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpcdec-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpcdec_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmspack-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmspack_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmspub_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmtp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmtp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmusicbrainz5-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmusicbrainz5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmwaw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libndp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnet-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_conntrack-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_conntrack_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_cthelper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_cttimeout_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_queue-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_queue_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfnetlink-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfnetlink_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfsidmap-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfsidmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnftnl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnftnl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnghttp2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnghttp2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnice-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnice-gstreamer1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnice_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnma-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnma_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnotify-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnotify_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnozzle1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnsl2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnsl2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnsl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liboauth-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liboauth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libocxl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libocxl-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libocxl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libodfgen-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libodfgen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libogg-devel-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libogg-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libogg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liboggz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libomp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libomp-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libomp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw-gnome-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw-gnome_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liborcus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libosinfo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libotf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpagemaker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpaper-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpaper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpath_utils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpath_utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpcap-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpcap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpciaccess-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpciaccess_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas-loader-python3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpfm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpfm-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpfm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpinyin-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpinyin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpipeline_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpkgconf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libplist-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libplist_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmem-debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmem-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemblk-debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemblk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemblk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemlog-debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemlog-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemlog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj++-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj++-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj-debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmempool-debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmempool-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmempool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng12_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng15_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpq-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-bin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-gnome_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-networkmanager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-webkitgtk4_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsm2-compat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsm2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsm2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpst-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpurple-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpurple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpwquality-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpwquality_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqhull_p_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqhull_r_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqhull_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqmi-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqmi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquadmath-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquadmath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquvi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquvi-scripts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquvi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqxp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librabbitmq-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librabbitmq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librados-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librados2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libradosstriper-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libradosstriper1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libraw1394-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libraw1394_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librbd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librbd1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdkafka-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdkafka_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdmacm-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdmacm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libref_array-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libref_array_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librelp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-calc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-draw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-emailmerge_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-filters_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-gdb-debug-support_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-graphicfilter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-gtk2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-bg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-bn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-cs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-da_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-de_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-dz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-el_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-en_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-es_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-et_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-eu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-fi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-fr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-gl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-gu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-he_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-hi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-hr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-hu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-id_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-it_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ja_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-lt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-lv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-nb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-nl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-nn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-pl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-pt-BR_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-pt-PT_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ru_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-si_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-sk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-sl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-sv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-tr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-uk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-zh-Hans_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-zh-Hant_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-impress_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-af_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-as_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-bg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-bn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-br_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-cs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-cy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-da_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-de_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-dz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-el_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-en_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-es_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-et_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-eu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-fa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-fi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-fr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-gl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-gu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-he_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-hi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-hr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-hu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-id_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-it_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ja_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-kk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-kn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-lt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-lv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-mai_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-mr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nso_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-or_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pt-BR_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pt-PT_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ru_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-si_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-st_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-te_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-th_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-tn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-tr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-uk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ve_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-xh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-zh-Hans_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-zh-Hant_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-zu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-math_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-ogltrans_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-opensymbol-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-pdfimport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-pyuno_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-sdk-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-sdk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-ure-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-ure_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-voikko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-wiki-publisher_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-writer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-x11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-xsltfilter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreofficekit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librepo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-anaconda_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-newt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-bugzilla_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-kerneloops_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-logger_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-mailx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-reportuploader_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-rhtsupport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-ureport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-rhel-anaconda-bugzilla_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-rhel-bugzilla_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-rhel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-web_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librepository_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreswan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librevenge-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librevenge-gdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librevenge_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librhsm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librpmem-debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librpmem-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librpmem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librsvg2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librsvg2-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librsvg2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librtas-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librtas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librx-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsamplerate-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsamplerate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsane-hpaio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsass-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsass_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libseccomp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libseccomp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsecret-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsecret_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-ruby_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsemanage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsepol-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsepol-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsepol_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libserf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libserializer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libservicelog-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libservicelog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libshout-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libshout_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigc++20-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigc++20-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigc++20_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigsegv-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigsegv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmartcols-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmartcols_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmbclient-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmbclient_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmbios_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsndfile-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsndfile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsolv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsoup-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsoup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libspectre-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libspectre_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libspiro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsrtp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsrtp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libssh-config_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libssh-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libssh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_autofs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_certmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_idmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_nss_idmap-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_nss_idmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_simpleifp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_sudo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstaroffice_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstemmer-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstemmer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-arcconf-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-hpsa-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-local-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-megaraid-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-nfs-plugin-clibs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-nfs-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-nstor-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-smis-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-udev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsysfs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsysfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtalloc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtalloc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtasn1-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtasn1-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtasn1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtdb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libteam-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libteam_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtevent-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtevent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libthai-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libthai_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtheora-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtheora_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtiff-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtiff-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtiff_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtimezonemap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtirpc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtirpc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtool-ltdl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtool-ltdl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtsan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libubsan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libucil-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libucil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libudisks2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunicap-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunicap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuninameslist_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunistring-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunistring_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liburing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbmuxd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbmuxd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbx-devel-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbx-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libutempter-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libutempter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuuid-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuuid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libv4l-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libv4l_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libva-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libva_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvarlink-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvarlink-util_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvarlink_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvdpau-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvdpau_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libverto-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libverto-libevent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libverto_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-admin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-bash-completion_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-config-network_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-config-nwfilter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-interface_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-network_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-nodedev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-nwfilter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-qemu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-secret_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-disk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-gluster_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-iscsi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-logical_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-mpath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-rbd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-scsi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-kvm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-dbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-gconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-gobject_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-lock-sanlock_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-nss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisio-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisual-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisual_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvma_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmem-debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmem-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmmalloc-debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmmalloc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmmalloc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvncserver-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvncserver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvoikko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvorbis-devel-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvorbis-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvorbis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpx-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwacom-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwacom-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwacom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-cursor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-egl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwbclient-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwbclient_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwebp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwebp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwinpr-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwinpr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwmf-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwmf-lite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwmf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwnck3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwnck3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpd-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpg-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpg-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwps-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwps-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwsman-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwsman1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcrypt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcrypt-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcrypt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon-x11-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon-x11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbfile-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbfile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxklavier-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxklavier_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxml2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxml2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxshmfence-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxshmfence_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxslt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxslt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyami_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyaml-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyaml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyang_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzfcphbaapi-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzfcphbaapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzhuyin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzip-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzip-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzmf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzstd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzstd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linux-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linuxconsoletools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linuxdoc-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linuxptp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lklug-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lksctp-tools-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lksctp-tools-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lksctp-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldpad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldpd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-googletest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-toolset_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors-sensord_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lmdb-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lockdev-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lockdev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/log4j-over-slf4j_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/log4j12-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/log4j12_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/logrotate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/logwatch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-assamese-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-bengali-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-devanagari-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-gujarati-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-gurmukhi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-kannada-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-malayalam-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-marathi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-nepali-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-odia-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-tamil-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-telugu-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-composer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-lmc-novirt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-lmc-virt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-templates-generic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-templates-rhel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lpsolve_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lrzsz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lshw-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lshw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lsof_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lsscsi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lsvpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ltrace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lttng-ust-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lttng-ust_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-expat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-guestfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-json_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-lpeg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-lunit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-posix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-socket_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/luksmeta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-dbusd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-lockd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lynx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lz4-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lz4-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lz4_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzo-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzo-minilzo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/m17n-db_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/m17n-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/m4_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/madan-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mailcap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mailman_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mailx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/make-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/make_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/malaga-suomi-voikko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/malaga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mallard-rng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-db-cron_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-db_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-pages-overrides_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-pages_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-backup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-c-config_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-c-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-c_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-odbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-embedded-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-embedded_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-errmsg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-gssapi-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-java-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-oqgraph-engine_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-server-galera_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-server-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/marisa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/matchbox-window-manager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-antrun-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-antrun-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-archiver-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-archiver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-manager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-resolver-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-resolver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-transfer-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-transfer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-assembly-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-assembly-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-cal10n-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-clean-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-clean-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-common-artifact-filters-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-common-artifact-filters_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-compiler-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-compiler-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-analyzer-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-analyzer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-tree-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-tree_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-logging-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-apt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-confluence_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-docbook-simple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-fml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-latex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-rtf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-twiki_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-xdoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-xhtml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-sink-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-sitetools-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-sitetools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-test-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-tests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-rules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-failsafe-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-file-management-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-file-management_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-filtering-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-filtering_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-hawtjni-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-install-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-install-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-jar-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-jar-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-local_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-model_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-monitor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-openjdk11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-openjdk8_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-annotations_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-build-helper-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-build-helper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-bundle-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-bundle_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-descriptor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-registry_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing-harness_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-annotations_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-ant_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-beanshell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-generators_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-java_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-javadocs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-model_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugins-pom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-profile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-project_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-remote-resources-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-remote-resources-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-api-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-impl-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-impl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-connector-basic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-impl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-spi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-test-util_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-classpath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-file_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-http_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-wagon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-util_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resources-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resources-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-ant_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-beanshell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-interpreter-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-interpreter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-settings_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shade-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shade-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-incremental-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-incremental_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-io-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-io_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-utils-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-source-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-source-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-provider-junit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-provider-testng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-report-parser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-report-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-test-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-toolchain_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-verifier-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-verifier_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-file_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-ftp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-http-lightweight_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-http-shared_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-http_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-provider-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-providers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven2-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mcelog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mcpp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mcstrans_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mdadm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/meanwhile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mecab-ipadic-EUCJP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mecab-ipadic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mecab_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/media-player-info_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memcached_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memkind-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memkind_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memtest86+_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mercurial-hgk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mercurial_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-dri-drivers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libEGL-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libEGL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGL-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLU-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLU_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLw-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLw_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libOSMesa-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libOSMesa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libgbm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libgbm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libglapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libxatracker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-vdpau-drivers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-vulkan-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-vulkan-drivers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/meson_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/metacity_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/metis-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/metis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/microcode_ctl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/microdnf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw-binutils-generic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw-filesystem-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-binutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-bzip2-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-bzip2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-cairo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-cpp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-crt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-expat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-fontconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-freetype-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-freetype_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gcc-c++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gcc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gettext-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gettext_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-glib2-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-glib2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gstreamer1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-harfbuzz-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-harfbuzz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-headers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-icu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libffi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libjpeg-turbo-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libjpeg-turbo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libpng-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libpng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libtiff-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libtiff_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-openssl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pcre-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pcre_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pixman_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pkg-config_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-readline_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-spice-vdagent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-sqlite-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-sqlite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-termcap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-win-iconv-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-win-iconv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-winpthreads-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-winpthreads_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-zlib-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-zlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-binutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-bzip2-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-bzip2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-cairo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-cpp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-crt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-expat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-fontconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-freetype-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-freetype_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gcc-c++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gcc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gettext-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gettext_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-glib2-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-glib2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gstreamer1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-harfbuzz-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-harfbuzz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-headers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-icu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libffi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libjpeg-turbo-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libjpeg-turbo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libpng-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libpng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libtiff-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libtiff_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-openssl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pcre-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pcre_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pixman_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pkg-config_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-readline_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-spice-vdagent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-sqlite-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-sqlite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-termcap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-win-iconv-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-win-iconv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-winpthreads-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-winpthreads_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-zlib-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-zlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/minicom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mksh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mlocate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mobile-broadband-provider-info_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mockito-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mockito_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_gssapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_mellon-diagnostics_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_mellon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_openidc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_authnz_pam_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_dav_svn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_fcgid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_http2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_intercept_form_submit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_ldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_lookup_identity_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_md_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_proxy_html_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_security-mlogc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_security_crs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_security_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_session_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_ssl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/modello-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/modello_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mojo-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mokutil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/motif-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/motif-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/motif_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mousetweaks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozilla-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs52-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs52_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs60-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs60_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozvoikko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpfr-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpfr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123-plugins-pulseaudio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpich-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpich_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-mpich_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-mvapich2-psm2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-mvapich2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-openmpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mrtg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mstflint_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mt-st_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtdev-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtdev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtr-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/multilib-rpm-config_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-maven-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-maven-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mutt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mutter-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mutter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mvapich2-psm2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mvapich2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-errmsg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-bg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-cs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-da_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-de_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-el_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-en_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-es_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-fr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ga_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-hu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-it_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-lb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-lv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-mi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-nb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ne_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-nl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-nn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-pl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-pt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ru_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-sk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-sl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-sv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-uk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nafees-web-naskh-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nano_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nasm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus-extensions_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus-sendto_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/navilu-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-bash-completion_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-basic-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-example-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-gzip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-python-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-python3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-vddk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-xz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncompress_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-c++-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-compat-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-term_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ndctl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ndctl-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ndctl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/neon-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/neon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-agent-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netcf-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netcf-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netcf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netconsole-service_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netlabel_tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm-progs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netstandard-targeting-pack-2.1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nettle-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nettle_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-manager-applet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-scripts-ppp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-scripts-team_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-scripts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/newt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/newt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nfs-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nfs4-acl-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nftables_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nghttp2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-all-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-http-image-filter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-http-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-http-xslt-filter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-mail_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-stream_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ninja-build_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nkf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nm-connection-editor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nmap-ncat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nmstate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-nodemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-packaging_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/npm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/npth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nscd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nspr-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nspr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-altfiles_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-pam-ldapd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn-freebl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn-freebl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-sysinit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-util-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-util_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_db_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_hesiod_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_nis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_wrapper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ntpstat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ntsysv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numactl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numactl-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numactl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numatop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nvme-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nvmetcli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objectweb-asm-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objectweb-asm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objectweb-pom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objenesis-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objenesis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-camlp4-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-camlp4_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-compiler-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-cppo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-extlib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-extlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-findlib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-findlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-hivex-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-hivex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-labltk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-labltk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-libguestfs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-libguestfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-ocamlbuild-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-ocamlbuild_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-ocamldoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-runtime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-srpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oci-systemd-hook_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oci-umount_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocl-icd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocl-icd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oddjob-mkhomedir_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oddjob_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/omping_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ongres-scram-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ongres-scram_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oniguruma-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oniguruma_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-address-resolution_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-basic-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-fastfabric_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-fm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-libopamgt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opal-firmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opal-prd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opal-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/open-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/open-vm-tools-desktop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/open-vm-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openal-soft-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openal-soft_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-Rblas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-openmp64__security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-openmp64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-openmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-serial64__security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-serial64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-srpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-threads64__security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-threads64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-threads_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openchange_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencl-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencl-headers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-ccatok_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-ep11tok_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-icatok_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-icsftok_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-swtok_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-tpmtok_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencv-contrib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencv-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencv-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opendnssec_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openhpi-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openhpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjade_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2-devel-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openldap-clients_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openldap-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openmpi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openmpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-engine-sce-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-engine-sce_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-python3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-scanner_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openslp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensm-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-askpass_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-cavs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-clients_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-keycat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-ldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-ibmca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-ibmpkcs11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-pkcs11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openwsman-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openwsman-python3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openwsman-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opus-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orc-compiler_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/os-maven-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/os-maven-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/os-prober_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oscap-anaconda-addon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-annotation-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-annotation_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-compendium-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-compendium_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-core-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osinfo-db-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osinfo-db_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree-grub2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/overpass-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/overpass-mono-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/owasp-java-encoder-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/owasp-java-encoder_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit-trust_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-cluster-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-cts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-libs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-nagios-plugins-metadata_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-remote_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-schemas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pakchois_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paktype-naqsh-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paktype-naskh-basic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paktype-tehreer-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam_cifscreds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam_ssh_agent_auth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pandoc-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pandoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pango-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pango_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pangomm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pangomm-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pangomm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi-testsuite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paps-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paratype-pt-sans-caption-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paratype-pt-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parfait-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parfait-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parfait_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parted-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parted_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/passwd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/patch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/patchutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pavucontrol_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcaudiolib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pciutils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pciutils-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pciutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-conf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2elasticsearch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2graphite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2influxdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2json_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2spark_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2xml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2zabbix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-zabbix-agent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-collectl2pcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-ganglia2pcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-iostat2pcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-mrtg2pcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-sar2pcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-libs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-manager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-parfait-agent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-activemq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-apache_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bash_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bcc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bind2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bonding_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bpftrace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-cifs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-cisco_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-dbping_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-dm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-docker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-ds389_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-ds389log_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-elasticsearch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gfs2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gluster_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gpfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gpsd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-haproxy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-infiniband_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-json_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-libvirt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lmsensors_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-logger_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lustre_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lustrecomm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mailq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-memcache_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mounts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mssql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-named_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-netcheck_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-netfilter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-news_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-nfsclient_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-nginx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-nvidia-gpu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-openmetrics_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-oracle_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-pdns_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-perfevent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-podman_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-postfix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-postgresql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-redis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-roomtemp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-rpm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-rsyslog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-samba_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-sendmail_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-shping_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-slurm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-smart_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-snmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-summary_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-systemd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-trace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-unbound_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-vmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-weblog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-zimbra_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-zswap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-selinux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-system-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-testsuite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-zeroconf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-cpp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-utf16_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-utf32_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2-utf16_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2-utf32_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcs-snmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-ccid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pentaho-libxml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pentaho-reporting-flow-engine_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perftest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/peripety_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Algorithm-Diff_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-AnyEvent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-App-cpanminus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Archive-Tar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Archive-Zip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Attribute-Handlers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Authen-SASL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-B-Debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-B-Hooks-EndOfScope_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-B-Lint_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Bit-Vector_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CGI_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-DistnameInfo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta-Check_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta-Requirements_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta-YAML_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Canary-Stability_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Capture-Tiny_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Carp-Clan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Carp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Accessor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Data-Inheritable_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Factory-Util_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-ISA_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Inspector_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Method-Modifiers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Singleton_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Tiny_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-XSAccessor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Clone_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Compress-Bzip2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Compress-Raw-Bzip2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Compress-Raw-Zlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Config-AutoConf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Config-Perl-V_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Convert-ASN1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Crypt-OpenSSL-Bignum_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Crypt-OpenSSL-RSA_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Crypt-OpenSSL-Random_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBD-MySQL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBD-Pg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBD-SQLite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBI_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DB_File_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-Dump_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-Dumper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-OptList_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-Section_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-UUID_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Date-Calc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Date-ISO8601_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Date-Manip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-Builder_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-HTTP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-ISO8601_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-Mail_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-Strptime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Locale_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-TimeZone-SystemV_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-TimeZone-Tzfile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-TimeZone_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-CallChecker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Caller_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-CheckLib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-GlobalDestruction_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-LexAlias_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-PPPort_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Peek_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-SelfStubber_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Size_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-StackTrace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Symdump_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-CRC_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-HMAC_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-MD5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-SHA1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-SHA_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Dist-CheckConflicts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DynaLoader-Functions_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode-Detect_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode-Locale_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Env_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Errno_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Error_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Eval-Closure_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Exception-Class_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Exporter-Tiny_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Exporter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-CBuilder_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Command_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Embed_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Install_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-MM-Utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-MakeMaker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Manifest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Miniperl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-ParseXS_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-FCGI_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Fedora-VSP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-BaseDir_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-CheckTree_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Copy-Recursive_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-DesktopEntry_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Fetch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Find-Object_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Find-Rule_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-HomeDir_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Listing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-MimeInfo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Path_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-ReadBackwards_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Remove_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-ShareDir_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Slurp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Temp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Which_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-chdir_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-pushd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Filter-Simple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Filter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-GSSAPI_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Getopt-Long_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Git-SVN_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Git_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTML-Parser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTML-Tagset_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTML-Tree_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Cookies_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Daemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Date_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Message_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Negotiate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Tiny_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-All_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Compress_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-HTML_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Multiplex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Socket-INET6_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Socket-IP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Socket-SSL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-String_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Tty_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Zlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-stringy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-Cmd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-Run3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-Run_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-SysV_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-System-Simple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Import-Into_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Importer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-JSON-PP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-JSON-XS_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-JSON_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-LDAP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-LWP-MediaTypes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-LWP-Protocol-https_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-List-MoreUtils-XS_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-List-MoreUtils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-Codes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-Maketext-Simple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-Maketext_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-gettext_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MIME-Base64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MIME-Charset_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MIME-Types_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MRO-Compat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mail-DKIM_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mail-SPF_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MailTools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-BigInt-FastCalc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-BigInt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-BigRat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-Complex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Memoize_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Build_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-CPANfile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-CoreList-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-CoreList_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Implementation_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Install-AuthorTests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Install-ReadmeFromPod_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Install_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Load-Conditional_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Load_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Loaded_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Metadata_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Pluggable_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Runtime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-ScanDeps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mozilla-CA_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mozilla-LDAP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-NKF_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-NTLM_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-DNS_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-HTTP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-Ping_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-SMTP-SSL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-SSLeay_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-Server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-NetAddr-IP_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Number-Compare_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-LogImport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-LogSummary_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-MMV_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-PMDA_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-DeprecationManager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-Generator_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-Stash-XS_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-Stash_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PadWalker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Check_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Classify_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Util_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Validate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-ValidationCompiler_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Parse-PMFile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Parse-Yapp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Path-Tiny_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PathTools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Perl-Destruct-Level_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Perl-OSType_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PerlIO-utf8_strict_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PerlIO-via-QuotedPrint_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Checker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Coverage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Escapes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Html_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-LaTeX_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Markdown_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Parser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Perldoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Plainer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Simple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Usage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Readonly_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Ref-Util-XS_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Ref-Util_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Role-Tiny_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SGMLSpm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SNMP_Session_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SUPER_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Scalar-List-Utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Scope-Guard_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SelfLoader_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Socket6_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Socket_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Software-License_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Specio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Storable_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-String-CRC32_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-String-ShellQuote_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Exporter-Progressive_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Exporter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Identify_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Info_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Install_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Name_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Uplevel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Switch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-CPU_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-Guestfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-MemInfo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-Syslog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-Virt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Taint-Runtime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-ANSIColor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Cap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Size-Any_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Size-Perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Table_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-TermReadKey_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Deep_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Differences_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Exception_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Fatal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Harness_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-LongString_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-NoWarnings_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Pod-Coverage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Pod_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Requires_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Simple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Taint_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Warn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Warnings_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test2-Suite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Balanced_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-CharWidth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Diff_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Glob_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-ParseWords_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Soundex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Tabs+Wrap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Template_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Unidecode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-WrapI18N_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Thread-Queue_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Tie-IxHash_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Time-HiRes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Time-Local_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Time-Piece_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-TimeDate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Tk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Tk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Try-Tiny_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Types-Serialiser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-URI_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-Collate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-EastAsianWidth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-LineBreak_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-Normalize_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-UTF8_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unix-Syslog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Variable-Magic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-WWW-RobotRules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Catalog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-DOM_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-LibXML_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-NamespaceSupport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Parser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-RegExp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-SAX-Base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-SAX_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Simple_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-TokeParser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Twig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-XPath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML-LibYAML_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML-Syck_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML-Tiny_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-autodie_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-bignum_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-common-sense_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-constant_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-encoding_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-experimental_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-generators_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-hivex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-homedir_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-inc-latest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-interpreter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libintl-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libnet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libnetcfg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libwww-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libxml-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-local-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-namespace-autoclean_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-namespace-clean_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-open_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-perlfaq_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-podlators_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-prefork_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-srpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-tests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-threads-shared_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-threads_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-version_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perltidy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pesign_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pgaudit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-bcmath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-dba_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-dbg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-embedded_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-enchant_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-fpm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-gd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-gmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-intl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-json_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-ldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-mbstring_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-mysqlnd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-odbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-opcache_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pdo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pear_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-apcu-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-apcu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-rrd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-xdebug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-zip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pgsql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-process_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-recode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-snmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-soap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-xml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-xmlrpc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pidgin-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pidgin-sipe_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pidgin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pigz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry-emacs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry-gnome3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinfo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pixman-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pixman_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pkgconf-m4_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pkgconf-pkg-config_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pkgconf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-base-java_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-ca_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-deps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-kra_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-servlet-4.0-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-servlet-engine_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-symkey_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-coverage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-pip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-setuptools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-ant-factory-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-ant-factory_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-archiver-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-archiver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-bsh-factory-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-bsh-factory_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-build-api-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-build-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cipher-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cipher_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-classworlds-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-classworlds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cli-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler-extras_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler-pom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-component-api-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-component-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-component-factories-pom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-components-pom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-component-annotations_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-component-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-component-metadata_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-container-default_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-i18n-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-i18n_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity-jline_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interpolation-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interpolation_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-io-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-io_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-languages-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-languages_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-pom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-resources-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-resources_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-sec-dispatcher-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-sec-dispatcher_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-utils-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-velocity-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-velocity_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plotutils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plotutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-core-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-graphics-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-fade-throbber_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-label_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-script_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-space-flares_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-throbgress_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-two-step_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-scripts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-system-theme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-charge_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-fade-in_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-script_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-solar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-spinfinity_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-spinner_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmdk-convert_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmempool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmreorder_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pnm2ppa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/po4a_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman-docker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman-remote_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman-tests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-dbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-newrole_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-python-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-restorecond_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-sandbox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-pkla-compat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-cpp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-cpp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-glib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-qt5-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-qt5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/popt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/popt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/portreserve_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-cdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-ldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-pcre_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-perl-scripts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-pgsql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-sqlite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgres-decoderbufs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-contrib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-jdbc-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-jdbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-odbc-tests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-odbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-plperl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-plpython3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-pltcl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-server-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-test-rpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-upgrade-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-upgrade_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/potrace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-api-easymock_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-api-mockito_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-api-support_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-junit4_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-reflect_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-testng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powerpc-utils-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powerpc-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powertop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ppc64-diag_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ppp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ppp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pps-tools-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pptp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/prefixdevname_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/procmail_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/procps-ng-i18n_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/procps-ng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/prometheus-jmx-exporter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-c-compiler_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-c-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-c_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-compiler_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-lite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ps_mem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/psacct_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/psmisc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pstoedit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-mpich-devel-parmetis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-mpich-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-mpich_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-openmpi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-openmpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/publicsuffix-list-dafsa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/publicsuffix-list_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-libs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-libs-glib2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-module-bluetooth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-module-x11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/purple-sipe_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2-codegen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2-codegen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pykickstart_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-cups-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-nose-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-nss-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-podman-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-psycopg2-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-pymongo-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-qt5-rpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-rpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-sphinx-locale_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-sqlalchemy-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-srpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-virtualenv-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-Cython_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-PyMySQL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-attrs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-babel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-backports-ssl_match_hostname_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-backports_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-bson_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-cairo-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-cairo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-chardet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-coverage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-dns_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-docs-info_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-docutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-funcsigs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-idna_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-ipaddress_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-iso8601_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-jinja2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-lxml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-markupsafe_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-mock_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-nose_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-numpy-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-numpy-f2py_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-numpy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pip-wheel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pluggy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-psycopg2-debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-psycopg2-tests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-psycopg2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-py_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pygments_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pymongo-gridfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pymongo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pysocks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pytest-mock_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pytest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pytz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pyyaml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-requests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-rpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-scipy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-scour_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-setuptools-wheel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-setuptools_scm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-setuptools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-six_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-sqlalchemy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-tkinter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-urllib3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-virtualenv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-wheel-wheel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-wheel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python27_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-Cython_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-PyMySQL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt-addon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt-container-addon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-argcomplete_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-argh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-asn1crypto_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-attrs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-audit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-augeas_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-avahi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-azure-sdk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-babel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bcc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bind_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-blivet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-blockdev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-boom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-boto3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-botocore_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-brlapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bson_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bytesize_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cairo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cffi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-chardet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-clang_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-click_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-clufter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-configobj_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-configshell_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-coverage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cpio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-createrepo_c_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-criu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cryptography_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cups_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-custodia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dateutil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus-client-gen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus-python-client-gen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus-signature-pyparsing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-decorator_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-distro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dmidecode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugin-post-transaction-actions_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugin-spacewalk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugin-versionlock_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugins-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dns_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-docutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-enchant_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ethtool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-evdev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-fasteners_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-firewall_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-flask_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gevent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gflags_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gobject-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gobject_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-google-api-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gpg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-greenlet-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-greenlet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gssapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hawkey_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hivex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-html5lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-httplib2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-humanize_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hwdata_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hypothesis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-idle_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-idna_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-imagesize_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-iniparse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-inotify_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-into-dbus-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ipaclient_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ipalib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ipaserver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-iscsi-initiator-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-iso8601_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-itsdangerous_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jabberpy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-javapackages_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jinja2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jmespath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jsonpatch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jsonpointer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jsonschema_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-justbases_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-justbytes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jwcrypto_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jwt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-kdcproxy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-keycloak-httpd-client-install_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-kickstart_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-kmod_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-koan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-langtable_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ldb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lesscpy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lib389_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libcomps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libdnf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libguestfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libipa_hbac_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libnl3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libnmstate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libpfm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libproxy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-librepo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libreport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libselinux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libsemanage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libsss_nss_idmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libstoragemgmt-clibs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libstoragemgmt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libuser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libvirt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libvoikko_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libxml2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-linux-procfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lldb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-louis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lxml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-magic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mako_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-markdown_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-markupsafe_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-meh-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-meh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mock_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mod_wsgi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mpich_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-netaddr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-netifaces_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-networkx-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-networkx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-newt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-nftables_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-nose_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-nss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ntplib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-numpy-f2py_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-numpy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-oauth2client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-oauthlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-openipmi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-openmpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ordered-set_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-osa-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-osad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-packaging_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-perf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pexpect_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pillow_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pip-wheel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pki_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pluggy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ply_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-policycoreutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-prettytable_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-productmd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-protobuf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-psutil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-psycopg2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ptyprocess_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pwquality_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyOpenSSL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-py_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyasn1-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyasn1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyatspi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pycparser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pycurl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pydbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pygments_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pymongo-gridfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pymongo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyparsing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyparted_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyqt5-sip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyserial_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pysocks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pytest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pytoml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pytz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyudev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyusb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pywbem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyxattr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyxdg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyyaml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qrcode-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qrcode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qt5-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qt5-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qt5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-reportlab_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests-file_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests-ftp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests-oauthlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-check_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-client-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-setup-gnome_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-setup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-virtualization-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-virtualization-host_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg-actions_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg-management_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhnlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhnpush_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpm-generators_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpmfluff_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rrdtool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rtslib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-s3transfer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-samba-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-samba_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sanlock_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-schedutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-scipy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-scons_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-semantic_version_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setuptools-wheel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setuptools_scm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setuptools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-simpleline_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sip-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-six_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-slip-dbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-slip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-snowballstemmer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-abrt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-backend-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-koan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-oscap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-usix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-speechd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinx-theme-alabaster_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinx_rtd_theme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinxcontrib-websupport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sqlalchemy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sss-murmur_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sssdconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-subscription-manager-rhsm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-suds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sure_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sushy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-syspurpose_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-systemd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-talloc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tbb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tevent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tkinter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-unbound_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-unittest2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-uritemplate_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-urllib3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-urwid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-varlink_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-virtualenv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-webencodings_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-werkzeug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-wheel-wheel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-wheel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-whoosh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-yubico_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36-debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36-rpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-Cython_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-PyMySQL_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-asn1crypto_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-atomicwrites_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-attrs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-babel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-cffi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-chardet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-cryptography_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-debug_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-idle_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-idna_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-jinja2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-lxml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-markupsafe_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-mod_wsgi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-more-itertools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-numpy-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-numpy-f2py_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-numpy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-packaging_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pip-wheel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pluggy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-ply_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psutil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psycopg2-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psycopg2-tests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psycopg2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-py_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pycparser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pyparsing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pysocks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pytest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pytz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pyyaml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-requests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-rpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-scipy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-setuptools-wheel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-setuptools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-six_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-tkinter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-urllib3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-wcwidth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-wheel-wheel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-wheel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qclib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qclib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qdox-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qdox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-guest-agent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-img_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-curl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-gluster_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-iscsi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-rbd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-ssh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-tests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qgnomeplatform_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qgpgme_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qhull-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qpdf-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qpdf-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qpdf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qperf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qrencode-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qrencode-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qrencode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-assistant_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-designer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-doctools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-linguist_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qdbusviewer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qt3d-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qt3d-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qt3d_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-odbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-postgresql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-private-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtcanvas3d-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtcanvas3d_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtconnectivity-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtconnectivity-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtconnectivity_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtgraphicaleffects_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtimageformats_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtlocation-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtlocation-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtlocation_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtmultimedia-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtmultimedia-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtmultimedia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols2-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtscript-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtscript-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtscript_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsensors-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsensors-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsensors_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialbus-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialport-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialport-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialport_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsvg-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsvg-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsvg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-libs-designer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-libs-designercomponents_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-libs-help_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttranslations_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwayland-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwayland-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwayland_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebchannel-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebchannel-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebchannel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebsockets-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebsockets-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebsockets_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtx11extras-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtx11extras_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtxmlpatterns-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtxmlpatterns-examples_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtxmlpatterns_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-rpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-srpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-nld_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-nls_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-rpc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-warnquota_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/radvd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/raptor2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/raptor2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rarian-compat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rarian_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rasdaemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rasqal-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rasqal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rdma-core-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rdma-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/re2c_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/readline-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/readline_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/readonly-root_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/realmd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rear_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/recode-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/recode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redfish-finder_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-backgrounds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-indexhtml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-logos-httpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-logos-ipa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-logos_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-cxx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-desktop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-languages_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-printing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-submod-multimedia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-submod-security_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-menus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-release-eula_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-release_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-rpm-config_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-support-lib-python_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-support-tool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redis-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redis-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redland-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redland_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/regexp-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/regexp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/relaxngDatatype_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resource-agents-aliyun_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resource-agents-gcp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resource-agents_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resteasy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhel-system-roles_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-check_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-client-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-custom-info_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-setup-gnome_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-setup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-virtualization-host_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg-actions_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg-management_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhnlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhnpush_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhnsd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhsm-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhsm-icons_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhythmbox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rls_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rmt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rng-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rootfiles_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpcbind_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpcgen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpcsvc-proto-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-apidocs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-build-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-build_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-cron_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-mpi-hooks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-ostree-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-ostree_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-ima_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-prioreset_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-selinux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-syslog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-systemd-inhibit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-sign_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpmdevtools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpmemd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpmlint_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-lua_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-ruby_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-tcl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsync-daemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsync_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-crypto_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-elasticsearch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-gnutls_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-gssapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-kafka_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmaudit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmjsonparse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmkubernetes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmnormalize_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmsnmptrapd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mysql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-pgsql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-relp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-snmp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rtkit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-hivex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-irb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-libguestfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-abrt-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-abrt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bigdecimal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bson-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bson_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bundler-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bundler_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-did_you_mean_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-diff-lcs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-io-console_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-irb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-json_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-minitest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mongo-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mongo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mysql2-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mysql2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-net-telnet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-openssl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-pg-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-pg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-power_assert_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-psych_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rake_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rdoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-expectations_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-mocks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-support_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-test-unit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-xmlrpc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygems-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygems_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/runc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-analysis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-debugger-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-gdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-lldb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-src_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-srpm-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-std-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-toolset_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rustfmt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cmsfs-fuse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cmsfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cpacfstatsd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cpuplugd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-hmcdrvfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-iucvterm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-mon_statd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-osasnmpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-zdsfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-ziomon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/saab-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sac_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-client-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-common-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-common-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-krb5-printing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-pidl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-test-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-test_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind-clients_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind-krb5-locator_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-devanagari-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-gujarati-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-malayalam-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-odia-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-tamil-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-daemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-drivers-cameras_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-drivers-scanners_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-frontends_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlk-reset_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlock-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlock-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlock_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sassist_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/satellite-5-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/satyr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sbc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sbd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-cmpi-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-cmpi-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-indication_helper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcCommon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-wbemcli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scala-apidoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scala-swing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scala_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scap-security-guide-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scap-security-guide_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scap-workbench_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scl-utils-build_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scl-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scotch-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scotch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scrub_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seabios-bin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seabios_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seahorse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seavgabios-bin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sed_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-minimum_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-mls_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-sandbox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-targeted_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-cf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-milter-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-milter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/servicelog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools-console-analyses_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools-console_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools-gui_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setroubleshoot-plugins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setroubleshoot-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setroubleshoot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setserial_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sg3_utils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sg3_utils-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sg3_utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgabios-bin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgabios_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgml-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgpio_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shadow-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shared-mime-info_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sharutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-aa64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-ia32_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-unsigned-aarch64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-unsigned-x64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-x64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/si-units-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/si-units_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-abyssinica-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-nuosu-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-padauk-book-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-padauk-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-scheherazade-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-inject_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-mojos-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-mojos_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-plexus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/skkdic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/skopeo-tests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/skopeo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slang-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slang_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slapi-nis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-ext_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-jcl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-jdk14_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-log4j12_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-manual_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-sources_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slirp4netns_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smartmontools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-anjalioldlipi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-dyuthi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-kalyani-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-meera-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-rachana-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-raghumalayalam-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-suruma-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/snappy-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/snappy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/socat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/socket_wrapper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/softhsm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/softhsm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sombok-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sombok_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sonatype-oss-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sonatype-plugins-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sos-audit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sos-collector_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sos_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sound-theme-freedesktop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/soundtouch-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/soundtouch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/source-highlight_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-abrt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-client-cert_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-koan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-oscap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-remote-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-usix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spamassassin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sparsehash-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spausedd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spax_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spec-version-maven-plugin-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spec-version-maven-plugin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher-espeak-ng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speex-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speexdsp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speexdsp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-client-win-x64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-client-win-x86_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-glib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-glib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk3-vala_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-protocol_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-qxl-wddm-dod_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-qxl-xddm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-server-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-streaming-agent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-vdagent-win-x64_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-vdagent-win-x86_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-vdagent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spirv-tools-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spirv-tools-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spirv-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/splix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/squashfs-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/squid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/srp_daemon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sscg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-ad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-common-pac_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-dbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-ipa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-kcm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-krb5-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-krb5_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-ldap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-libwbclient_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-nfs-idmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-polkit-rules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-proxy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-winbind-idmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/star_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/startup-notification-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/startup-notification_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stax-ex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stix-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stix-math-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/strace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stratis-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stratisd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stunnel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-cockpit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-initial-setup-addon_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-migration-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-migration_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-plugin-ostree_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-rhsm-certificates_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-gnome_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-javahl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-perl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sudo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/suitesparse-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/suitesparse_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/supermin-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/supermin_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sushi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/swig-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/swig-gdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/swig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/switcheroo-control_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/symlinks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sysfsutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-extlinux-nonlinux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-extlinux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-nonlinux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-tftpboot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sysstat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/system-config-printer-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/system-config-printer-udev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/system-storage-manager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-container_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-journal-remote_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-pam_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-tests_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-udev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-exporter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-initscript_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-java_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-python3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-virtguest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-virthost_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-sdt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/taglib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/taglib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tagsoup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tang_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/target-restore_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/targetcli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tbb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tbb-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tbb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tboot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl-brlapi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcpdump_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcsh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tdb-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/teamd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/teckit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/telnet-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/telnet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/testng-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/testng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tex-fonts-hebrew_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texi2html_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texinfo-tex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texinfo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-adjustbox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ae_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-algorithms_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-amscls_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-amsfonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-amsmath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-anyfontsize_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-anysize_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-appendix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-arabxetex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-arphic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-attachfile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-avantgar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-awesomebox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-babel-english_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-babel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-babelbib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-beamer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bera_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-beton_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bibtex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bibtopic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bidi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bigfoot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bookman_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-booktabs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-breakurl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-breqn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-capt-of_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-caption_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-carlisle_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-changebar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-changepage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-charter_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-chngcntr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cite_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cjk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-classpack_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cm-lgc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cm-super_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cmap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cmextra_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cns_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collectbox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-basic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-fontsrecommended_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-htmlxml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-latex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-latexrecommended_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-xetex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-colortbl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-courier_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-crop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-csquotes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ctable_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ctablestack_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-currfile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-datetime_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvipdfmx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvipng_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvips_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvisvgm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ec_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eepic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-enctex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-enumitem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-environ_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-epsf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-epstopdf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eqparbox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eso-pic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-etex-pkg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-etex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-etoolbox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-euenc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-euler_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-euro_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eurosym_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-extsizes_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancybox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancyhdr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancyref_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancyvrb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-filecontents_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-filehook_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-finstrut_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fix2col_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fixlatvian_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-float_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fmtcount_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fncychap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontawesome_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontbook_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fonts-tlwg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontspec_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontwrap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-footmisc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fpl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-framed_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-garuda-c90_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-geometry_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-glyphlist_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-graphics-cfg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-graphics-def_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-graphics_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-gsftopk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-helvetic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyperref_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyph-utf8_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyphen-base_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyphenat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifetex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifluatex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifmtarg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifoddpage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-iftex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifxetex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-import_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-index_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-jadetex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-jknapltx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-kastrup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-kerkis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-knuth-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-knuth-local_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-koma-script_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-kpathsea_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-l3experimental_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-l3kernel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-l3packages_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lastpage_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latex-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latex2man_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latexconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lettrine_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-linegoal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lineno_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-listings_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lm-math_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ltabptch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ltxmisc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lua-alt-getopt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lualatex-math_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lualibs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luaotfload_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luatex85_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luatex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luatexbase_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-makecmds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-makeindex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-manfnt-font_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-marginnote_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-marvosym_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mathpazo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mathspec_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mathtools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mdwtools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-memoir_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-metafont_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-metalogo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-metapost_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mflogo-font_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mflogo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mfnfss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mfware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-microtype_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mnsymbol_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mparhack_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mptopdf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ms_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-multido_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-multirow_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-natbib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ncctools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ncntrsbk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-needspace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-norasi-c90_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ntgclass_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-oberdiek_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-overpic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-palatino_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-paralist_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-parallel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-parskip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-passivetex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pdfpages_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pdftex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pgf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-philokalia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-placeins_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-plain_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-polyglossia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-powerdot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-preprint_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-psfrag_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pslatex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-psnfss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pspicture_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-3d_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-blur_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-coil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-eps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-fill_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-grad_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-math_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-node_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-plot_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-slpe_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-text_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-tree_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pstricks-add_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pstricks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ptext_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pxfonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-qstest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-rcs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-realscripts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-rsfs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sansmath_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sauerj_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-scheme-basic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-section_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sectsty_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-seminar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sepnum_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-setspace_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-showexpl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-soul_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-stmaryrd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-subfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-subfigure_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-svn-prov_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-symbol_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-t2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tabu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tabulary_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tetex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex-gyre-math_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex-gyre_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex-ini-files_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex4ht_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-common-doc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-docindex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-en_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-msg-translations_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-scripts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive.infra_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-textcase_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-textpos_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-threeparttable_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-thumbpdf_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-times_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tipa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-titlesec_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-titling_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tocloft_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-trimspaces_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-txfonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-type1cm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-typehtml_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ucharclasses_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ucs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-uhc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ulem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-underscore_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-unicode-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-unicode-math_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-unisugar_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-updmap-map_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-upquote_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-url_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-utopia_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-varwidth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wadalab_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-was_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wasy2-ps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wasy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wasysym_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wrapfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xcolor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xdvi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xecjk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xecolor_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xecyr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xeindex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xepersian_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xesearch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex-itrans_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex-pstricks_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex-tibetan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetexconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetexfontinfo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xifthen_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xkeyval_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xltxtra_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xmltex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xmltexconfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xstring_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xtab_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xunicode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-zapfchan_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-zapfding_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tftp-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tftp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-garuda-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-kinnari-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-laksaman-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-loma-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-norasi-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-purisa-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-sawasdee-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgmono-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgtypewriter-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgtypist-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgtypo-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-umpush-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-waree-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/theora-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thunderbird_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tibetan-machine-uni-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-icons_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-license_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server-applet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server-minimal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server-module_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/time_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/timedatex_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinycdb-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinycdb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinyxml2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinyxml2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tix-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tix_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tk-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tlog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tmpwatch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tmux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tog-pegasus-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tog-pegasus-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tog-pegasus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tokyocabinet-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tokyocabinet_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tomcatjss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/toolbox_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/torque-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/torque-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/torque_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/totem-nautilus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/totem-pl-parser_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/totem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-quote-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-tools-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-tools-pkcs11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-abrmd-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-abrmd-selinux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-abrmd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-tss-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-tss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trace-cmd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/traceroute_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tracker-miners_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tracker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/transfig_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tree_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trousers-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trousers-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trousers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tss2-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tss2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ttmkfdir_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuna_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-atomic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-compat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-cpu-partitioning_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-mssql_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-oracle_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-utils-systemtap_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/turbojpeg-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/turbojpeg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/twolame-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tzdata-java_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tzdata_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ucs-miscfixed-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ucx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udica_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udisks2-iscsi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udisks2-lvm2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udisks2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uglify-js_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uid_wrapper_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unbound-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unbound-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unbound_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unicode-ucd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unit-api-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unit-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/units_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unixODBC-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unixODBC_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unzip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-lib-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-lib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-se-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-se_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-systems-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-systems_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/upower-devel-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/upower-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/upower_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urlview_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-bookman-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-c059-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-d050000l-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-fonts-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-fonts-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-gothic-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-nimbus-mono-ps-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-nimbus-roman-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-nimbus-sans-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-p052-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-standard-symbols-ps-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-z003-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usb_modeswitch-data_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usb_modeswitch_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbguard-dbus_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbguard-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbguard_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbmuxd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbredir-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbredir_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbutils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usermode-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usermode_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/userspace-rcu-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/userspace-rcu_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ustr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/utf8proc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uthash-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/util-linux-user_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/util-linux_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uuid-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uuid_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uuidd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vala-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vala_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/valgrind-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/valgrind_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish-modules_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vdo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity-demo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity-manual_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/veritysetup_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vhostmd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-X11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-enhanced_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-minimal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vinagre_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vino_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-dib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-install_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-manager-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-manager_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-p2v-maker_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-top_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-v2v_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-viewer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-what_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-who_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virtio-win_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vm-dump-metrics-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vm-dump-metrics_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/voikko-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/volume_key-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/volume_key-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/volume_key_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vorbis-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vsftpd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vte-profile_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vte291-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vte291_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-headers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-loader-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-loader_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-validation-layers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/watchdog_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wavpack-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wavpack_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wayland-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wayland-protocols-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/web-assets-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/web-assets-filesystem_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-jsc-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-jsc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-plugin-process-gtk2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webrtc-audio-processing_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/weld-parent_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wget_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/which_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/whois-nls_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/whois_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wireshark-cli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wireshark-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wireshark_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wodim_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/woff2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/words_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wpa_supplicant_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wqy-microhei-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wqy-unibit-fonts_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wsmancli_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/x3270-text_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/x3270-x11_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/x3270_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-demo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-manual_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-xsltc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xbean-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xbean_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-proto_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-image-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-image_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-keysyms-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-keysyms_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-renderutil-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-renderutil_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-wm-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-wm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdelta_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-desktop-portal-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-desktop-portal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-user-dirs-gtk_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-user-dirs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xerces-j2-demo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xerces-j2-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xerces-j2_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xfsdump_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xfsprogs-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xfsprogs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xhtml1-dtds_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xinetd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xkeyboard-config-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xkeyboard-config_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-apis-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-apis-manual_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-apis_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-resolver-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-resolver_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-c++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-client++_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-client_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-gcrypt_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-gnutls-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-gnutls_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-nss_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-openssl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-openssl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlstreambuffer_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlto_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmltoman_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlunit-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlunit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-api_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-bisect_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-connector-aether_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-connector-ivy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-core_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-install_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-minimal_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-mojo_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-parent-pom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-resolve_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-subst_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-tools-pom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-sgml-doctools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-apps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-docs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drivers_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-ati_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-dummy_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-evdev-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-evdev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-fbdev_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-intel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-libinput-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-libinput_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-nouveau_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-qxl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-v4l_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-vesa_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-vmware_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-wacom-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-wacom-serial-support_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-wacom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-font-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-100dpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-75dpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-1-100dpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-1-75dpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-14-100dpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-14-75dpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-15-100dpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-15-75dpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-2-100dpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-2-75dpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-9-100dpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-9-75dpi_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-Type1_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-cyrillic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ethiopic_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-misc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-proto-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xdmx_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xephyr_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xnest_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xorg_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xspice_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xvfb_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xwayland_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-util-macros_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xauth_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xbitmaps_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xinit-session_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xinit_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xkb-utils-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xkb-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xtrans-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorriso_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xrestop_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsane-common_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsane-gimp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsane_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsom_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xterm-resize_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xterm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-java-javadoc_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-java_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-lzma-compat_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yajl-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yajl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yasm_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-libs_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-xsl_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yp-tools_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ypbind_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ypserv_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yum-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yum_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zenity_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zip_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zlib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zlib-static_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zlib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zsh-html_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zsh_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zstd_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zziplib-devel_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zziplib-utils_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zziplib_security_api_results.json
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/table-1.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/table-2.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/table-3.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/table-4.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/table-5.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/table-6.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/table-7.csv
 create mode 100644 tools/redhat_package_manifest_scraper/data/redhat8/table-8.csv
 create mode 100755 tools/redhat_package_manifest_scraper/html_table_extractor.py
 create mode 160000 tutorials/pydata-book

diff --git a/containers/docker-compose-elasticsearch-kibana-cluster/docker-compose.yml b/containers/docker-compose-elasticsearch-kibana-cluster/docker-compose.yml
new file mode 100644
index 0000000..0f8bb47
--- /dev/null
+++ b/containers/docker-compose-elasticsearch-kibana-cluster/docker-compose.yml
@@ -0,0 +1,89 @@
+# ./docker-compose.yml
+
+version: '2.2'
+services:
+  es01:
+    image: docker.elastic.co/elasticsearch/elasticsearch:7.9.3
+    container_name: es01
+    environment:
+      - node.name=es01
+      - cluster.name=es-docker-cluster
+      - discovery.seed_hosts=es02,es03
+      - cluster.initial_master_nodes=es01,es02,es03
+      - bootstrap.memory_lock=true
+      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
+    ulimits:
+      memlock:
+        soft: -1
+        hard: -1
+    volumes:
+      - data01:/usr/share/elasticsearch/data
+    ports:
+      - 9200:9200
+    networks:
+      - elastic
+
+  es02:
+    image: docker.elastic.co/elasticsearch/elasticsearch:7.9.3
+    container_name: es02
+    environment:
+      - node.name=es02
+      - cluster.name=es-docker-cluster
+      - discovery.seed_hosts=es01,es03
+      - cluster.initial_master_nodes=es01,es02,es03
+      - bootstrap.memory_lock=true
+      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
+    ulimits:
+      memlock:
+        soft: -1
+        hard: -1
+    volumes:
+      - data02:/usr/share/elasticsearch/data
+    ports:
+      - 9201:9201
+    networks:
+      - elastic
+
+  es03:
+    image: docker.elastic.co/elasticsearch/elasticsearch:7.9.3
+    container_name: es03
+    environment:
+      - node.name=es03
+      - cluster.name=es-docker-cluster
+      - discovery.seed_hosts=es01,es02
+      - cluster.initial_master_nodes=es01,es02,es03
+      - bootstrap.memory_lock=true
+      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
+    ulimits:
+      memlock:
+        soft: -1
+        hard: -1
+    volumes:
+      - data03:/usr/share/elasticsearch/data
+    ports:
+      - 9202:9202
+    networks:
+      - elastic
+
+  kib01:
+    image: docker.elastic.co/kibana/kibana:7.9.3
+    container_name: kib01
+    ports:
+      - 5601:5601
+    environment:
+      ELASTICSEARCH_URL: http://es01:9200
+      ELASTICSEARCH_HOSTS: http://es01:9200
+    networks:
+      - elastic
+
+volumes:
+  data01:
+    driver: local
+  data02:
+    driver: local
+  data03:
+    driver: local
+
+networks:
+  elastic:
+    driver: bridge
diff --git a/containers/domain_registration_tracker/README.md b/containers/domain_registration_tracker/README.md
new file mode 100644
index 0000000..ce9dd2c
--- /dev/null
+++ b/containers/domain_registration_tracker/README.md
@@ -0,0 +1,2 @@
+# Domain registration tracker
+This will be a container that will be devoted to keeping a running status of newly registered domain names from major registrars on the internet
diff --git a/tools/redhat_package_manifest_scraper/README.md b/tools/redhat_package_manifest_scraper/README.md
new file mode 100644
index 0000000..85ebff6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/README.md
@@ -0,0 +1,48 @@
+## Step 1: 
+I used this python script https://github.com/x4nth055/pythoncode-tutorials/tree/master/web-scraping/html-table-extractor 
+to extract all of the tables from a redhat documentation URL. 
+
+```
+# mk some datadirs
+mkdir data
+mkdir -p data/redhat8/security_api_results
+mkdir -p data/redhat7/security_api_results
+mkdir -p data/redhat6/security_api_results
+
+# run the program to scrape and convert the data to csv
+python html_table_extractor.py "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/package_manifest/index"
+[+] Found a total of 9 tables.
+[+] Saving table-1
+[+] Saving table-2
+[+] Saving table-3
+[+] Saving table-4
+[+] Saving table-5
+[+] Saving table-6
+[+] Saving table-7
+[+] Saving table-8
+[+] Saving table-9
+```
+
+This will create a csv file per table found in the html-single page result of a given distro.
+
+## Step 2:
+To process and de-duplicate all of the packages further, I created one master CSV file in each directory for each distro by doing the following filtering on the commandline against each table csv file.
+
+```
+cat table-* | cut -f 2 -d , | sort | uniq | sort > all_redhat7_rpm_package_manifest.csv
+```
+
+and this step was repeated for redhat 8, 7, and 6.
+
+## Step 3:
+After creating a list of each base set pkg name in the distro, we can then feed these pkgs into a query against the redhat security api using the following example loop:
+
+```
+cd data/redhat8
+
+for pkg in $(cat all_redhat8_rpm_package_manifest.csv); 
+  do curl "https://access.redhat.com/hydra/rest/securitydata/cve.json?package=$pkg" > ./security_api_results/${pkg}_security_api_results.json; 
+done
+```
+
+this will send out api calls to the security api asking for cves in json format of the given pkgname.
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/all_redhat7_rpm_package_manifest.csv b/tools/redhat_package_manifest_scraper/data/redhat7/all_redhat7_rpm_package_manifest.csv
new file mode 100644
index 0000000..e49653f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/all_redhat7_rpm_package_manifest.csv
@@ -0,0 +1,4238 @@
+389-ds-base
+389-ds-base-libs
+abattis-cantarell-fonts
+abrt
+abrt-addon-ccpp
+abrt-addon-kerneloops
+abrt-addon-pstoreoops
+abrt-addon-python
+abrt-addon-vmcore
+abrt-addon-xorg
+abrt-cli
+abrt-console-notification
+abrt-dbus
+abrt-desktop
+abrt-gui
+abrt-gui-libs
+abrt-java-connector
+abrt-libs
+abrt-python
+abrt-tui
+accountsservice
+accountsservice-libs
+acl
+acpid
+adcli
+adobe-mappings-cmap
+adobe-mappings-cmap-deprecated
+adobe-mappings-pdf
+adwaita-cursor-theme
+adwaita-gtk2-theme
+adwaita-icon-theme
+adwaita-qt
+adwaita-qt4
+adwaita-qt5
+agg
+aic94xx-firmware
+aide
+akonadi
+akonadi-mysql
+alacarte
+alsa-firmware
+alsa-lib
+alsa-lib-devel
+alsa-plugins-pulseaudio
+alsa-tools-firmware
+alsa-utils
+amanda
+amanda-client
+amanda-libs
+amanda-server
+anaconda
+anaconda-core
+anaconda-gui
+anaconda-tui
+anaconda-user-help
+anaconda-widgets
+ant
+antlr-tool
+apache-commons-cli
+apache-commons-codec
+apache-commons-collections
+apache-commons-daemon
+apache-commons-dbcp
+apache-commons-io
+apache-commons-lang
+apache-commons-logging
+apache-commons-pool
+appstream-data
+apr
+apr-devel
+apr-util
+apr-util-devel
+apr-util-openssl
+args4j
+ark
+ark-libs
+arptables
+arpwatch
+at
+atk
+atk-devel
+atkmm
+atlas
+atlas-sse2
+atlas-sse3
+at-spi2-atk
+at-spi2-atk-devel
+at-spi2-core
+at-spi2-core-devel
+attica
+attica-devel
+attr
+audispd-plugins
+audit
+audit-libs
+audit-libs-devel
+audit-libs-python
+augeas
+augeas-libs
+authconfig
+authconfig-gtk
+authd
+autoconf
+autoconf-archive
+autocorr-af
+autocorr-bg
+autocorr-ca
+autocorr-cs
+autocorr-da
+autocorr-de
+autocorr-en
+autocorr-es
+autocorr-fa
+autocorr-fi
+autocorr-fr
+autocorr-ga
+autocorr-hr
+autocorr-hu
+autocorr-is
+autocorr-it
+autocorr-ja
+autocorr-ko
+autocorr-lb
+autocorr-lt
+autocorr-mn
+autocorr-nl
+autocorr-pl
+autocorr-pt
+autocorr-ro
+autocorr-ru
+autocorr-sk
+autocorr-sl
+autocorr-sr
+autocorr-sv
+autocorr-tr
+autocorr-vi
+autocorr-zh
+autofs
+autogen-libopts
+automake
+automoc
+avahi
+avahi-autoipd
+avahi-glib
+avahi-gobject
+avahi-libs
+avahi-ui-gtk3
+avalon-framework
+avalon-logkit
+awscli
+babel
+babl
+bacula-client
+bacula-common
+bacula-libs
+baobab
+basesystem
+bash
+bash-completion
+bc
+bcc
+bcc-tools
+bcel
+bea-stax
+bea-stax-api
+bind
+bind-chroot
+bind-dyndb-ldap
+bind-export-libs
+bind-libs
+bind-libs-lite
+bind-license
+bind-pkcs11
+bind-pkcs11-libs
+bind-pkcs11-utils
+bind-utils
+binutils
+binutils-devel
+biosdevname
+bison
+bitmap-fixed-fonts
+bitmap-lucida-typewriter-fonts
+blas
+blivet3-data
+blktrace
+bltk
+bluedevil
+bluez
+bluez-libs
+bolt
+boost
+boost-atomic
+boost-chrono
+boost-context
+boost-date-time
+boost-devel
+boost-filesystem
+boost-graph
+boost-iostreams
+boost-locale
+boost-math
+boost-program-options
+boost-python
+boost-random
+boost-regex
+boost-serialization
+boost-signals
+boost-system
+boost-test
+boost-thread
+boost-timer
+boost-wave
+booth
+booth-arbitrator
+booth-core
+booth-site
+booth-test
+bpftool
+bpg-chveulebrivi-fonts
+bpg-courier-fonts
+bpg-fonts-common
+bpg-glaho-fonts
+brasero
+brasero-libs
+brasero-nautilus
+bridge-utils
+brlapi
+brltty
+btrfs-progs
+byacc
+bzip2
+bzip2-devel
+bzip2-libs
+bzr
+ca-certificates
+cachefilesd
+cairo
+cairo-devel
+cairo-gobject
+cairo-gobject-devel
+cairomm
+cal10n
+c-ares
+c-ares-devel
+caribou
+caribou-gtk2-module
+caribou-gtk3-module
+cdparanoia
+cdparanoia-libs
+cdrdao
+celt051
+ceph-common
+certmonger
+cgdcbxd
+check
+check-devel
+checkpolicy
+cheese
+cheese-libs
+chkconfig
+chrome-gnome-shell
+chrony
+chrpath
+cifs-utils
+cim-schema
+cjkuni-ukai-fonts
+cjkuni-uming-fonts
+clevis
+clevis-dracut
+clevis-luks
+clevis-systemd
+clevis-udisks2
+cloud-init
+cloud-utils-growpart
+clucene-contribs-lib
+clucene-core
+clufter-bin
+clufter-cli
+clufter-common
+clufter-lib-ccs
+clufter-lib-general
+clufter-lib-pcs
+clutter
+clutter-gst2
+clutter-gst3
+clutter-gtk
+cmake
+cmpi-bindings-pywbem
+cockpit
+cockpit-bridge
+cockpit-system
+cockpit-ws
+codemodel
+cogl
+colord
+colord-gtk
+colord-kde
+colord-libs
+color-filesystem
+compat-cheese314
+compat-dapl
+compat-db47
+compat-db-headers
+compat-exiv2-023
+compat-exiv2-026
+compat-gcc-44
+compat-gcc-44-c++
+compat-glade315
+compat-glibc
+compat-glibc-headers
+compat-gnome-desktop314
+compat-grilo02
+compat-libcap1
+compat-libcogl12
+compat-libcogl-pango12
+compat-libcolord1
+compat-libf2c-34
+compat-libgdata13
+compat-libgfortran-41
+compat-libgnome-bluetooth11
+compat-libgnome-desktop3-7
+compat-libgweather3
+compat-libical1
+compat-libmediaart0
+compat-libpackagekit-glib2-16
+compat-libtiff3
+compat-libupower-glib1
+compat-libxcb
+compat-openldap
+compat-openmpi16
+compat-opensm-libs
+compat-poppler022
+compat-poppler022-glib
+compat-poppler022-qt
+comps-extras
+conman
+conntrack-tools
+control-center
+control-center-filesystem
+convmv
+coolkey
+copy-jdk-configs
+coreutils
+corosync
+corosynclib
+corosynclib-devel
+corosync-qdevice
+corosync-qnetd
+cpio
+cpp
+cpuid
+cracklib
+cracklib-dicts
+crash
+crash-gcore-command
+crash-ptdump-command
+crash-trace-command
+crda
+createrepo
+criu
+cronie
+cronie-anacron
+cronie-noanacron
+crontabs
+crypto-utils
+cryptsetup
+cryptsetup-libs
+cryptsetup-python
+cryptsetup-reencrypt
+cscope
+ctags
+ctags-etags
+culmus-aharoni-clm-fonts
+culmus-caladings-clm-fonts
+culmus-david-clm-fonts
+culmus-drugulin-clm-fonts
+culmus-ellinia-clm-fonts
+culmus-fonts-common
+culmus-frank-ruehl-clm-fonts
+culmus-hadasim-clm-fonts
+culmus-keteryg-fonts
+culmus-miriam-clm-fonts
+culmus-miriam-mono-clm-fonts
+culmus-nachlieli-clm-fonts
+culmus-simple-clm-fonts
+culmus-stamashkenaz-clm-fonts
+culmus-stamsefarad-clm-fonts
+culmus-yehuda-clm-fonts
+cups
+cups-client
+cups-devel
+cups-filesystem
+cups-filters
+cups-filters-libs
+cups-libs
+cups-lpd
+cups-pk-helper
+curl
+custodia
+cvs
+cyrus-imapd
+cyrus-imapd-utils
+cyrus-sasl
+cyrus-sasl-devel
+cyrus-sasl-gssapi
+cyrus-sasl-lib
+cyrus-sasl-md5
+cyrus-sasl-plain
+cyrus-sasl-scram
+dapl
+daxctl-libs
+daxio
+dbus
+dbus-devel
+dbus-glib
+dbus-glib-devel
+dbus-libs
+dbusmenu-qt
+dbus-python
+dbus-x11
+dbxtool
+dconf
+dconf-editor
+dcraw
+dejagnu
+dejavu-fonts-common
+dejavu-sans-fonts
+dejavu-sans-mono-fonts
+dejavu-serif-fonts
+deltarpm
+desktop-file-utils
+device-mapper
+device-mapper-event
+device-mapper-event-libs
+device-mapper-libs
+device-mapper-multipath
+device-mapper-multipath-libs
+device-mapper-persistent-data
+dhclient
+dhcp
+dhcp-common
+dhcp-libs
+dialog
+diffstat
+diffutils
+dleyna-connector-dbus
+dleyna-core
+dleyna-server
+dlm-devel
+dlm-lib
+dmidecode
+dmraid
+dmraid-events
+dnsmasq
+dnssec-trigger
+docbook5-schemas
+docbook5-style-xsl
+docbook-dtds
+docbook-simple
+docbook-slides
+docbook-style-dsssl
+docbook-style-xsl
+docbook-utils
+docbook-utils-pdf
+dom4j
+dos2unix
+dosfstools
+dotconf
+dovecot
+dovecot-mysql
+dovecot-pgsql
+dovecot-pigeonhole
+doxygen
+dptfxtract
+dracut
+dracut-config-generic
+dracut-config-rescue
+dracut-fips
+dracut-fips-aesni
+dracut-network
+dragon
+dropwatch
+dstat
+dump
+dumpet
+dvd+rw-tools
+dvgrab
+dwz
+dyninst
+e2fsprogs
+e2fsprogs-devel
+e2fsprogs-libs
+easymock2
+ebtables
+ecj
+ed
+edac-utils
+efax
+efibootmgr
+efivar
+efivar-libs
+ekiga
+ElectricFence
+elfutils
+elfutils-default-yama-scope
+elfutils-devel
+elfutils-libelf
+elfutils-libelf-devel
+elfutils-libs
+elinks
+emacs
+emacs-auctex
+emacs-common
+emacs-filesystem
+emacs-gnuplot
+emacs-nox
+emacs-php-mode
+empathy
+enchant
+enscript
+environment-modules
+eog
+esc
+espeak
+ethtool
+evince
+evince-dvi
+evince-libs
+evince-nautilus
+evolution
+evolution-data-server
+evolution-data-server-devel
+evolution-data-server-langpacks
+evolution-ews
+evolution-ews-langpacks
+evolution-help
+evolution-langpacks
+evolution-mapi
+evolution-mapi-langpacks
+exempi
+exiv2
+exiv2-libs
+expat
+expat-devel
+expect
+fabtests
+farstream
+farstream02
+fcoe-utils
+fence-agents-aliyun
+fence-agents-all
+fence-agents-amt-ws
+fence-agents-apc
+fence-agents-apc-snmp
+fence-agents-aws
+fence-agents-azure-arm
+fence-agents-bladecenter
+fence-agents-brocade
+fence-agents-cisco-mds
+fence-agents-cisco-ucs
+fence-agents-common
+fence-agents-compute
+fence-agents-drac5
+fence-agents-eaton-snmp
+fence-agents-emerson
+fence-agents-eps
+fence-agents-gce
+fence-agents-heuristics-ping
+fence-agents-hpblade
+fence-agents-ibmblade
+fence-agents-ifmib
+fence-agents-ilo2
+fence-agents-ilo-moonshot
+fence-agents-ilo-mp
+fence-agents-ilo-ssh
+fence-agents-intelmodular
+fence-agents-ipdu
+fence-agents-ipmilan
+fence-agents-kdump
+fence-agents-lpar
+fence-agents-mpath
+fence-agents-redfish
+fence-agents-rhevm
+fence-agents-rsa
+fence-agents-rsb
+fence-agents-sbd
+fence-agents-scsi
+fence-agents-vmware-rest
+fence-agents-vmware-soap
+fence-agents-wti
+fence-agents-zvm
+fence-virt
+fence-virtd
+fence-virtd-libvirt
+fence-virtd-multicast
+fence-virtd-serial
+festival
+festival-freebsoft-utils
+festival-lib
+festival-speechtools-libs
+festvox-slt-arctic-hts
+fetchmail
+fftw
+fftw-devel
+fftw-libs
+fftw-libs-double
+fftw-libs-long
+fftw-libs-single
+fftw-static
+file
+filebench
+file-libs
+file-roller
+file-roller-nautilus
+filesystem
+findutils
+finger
+finger-server
+fio
+fipscheck
+fipscheck-lib
+firefox
+firewall-config
+firewalld
+firewalld-filesystem
+firstboot
+flac-libs
+flatpak
+flatpak-libs
+flex
+flite
+fltk
+flute
+folks
+fontawesome-fonts
+fontconfig
+fontconfig-devel
+fontpackages-filesystem
+fonts-tweak-tool
+foomatic
+foomatic-db
+foomatic-db-filesystem
+foomatic-db-ppds
+foomatic-filters
+fprintd
+fprintd-pam
+freeglut
+freeglut-devel
+freeipmi
+freeipmi-bmc-watchdog
+freeipmi-ipmidetectd
+freeradius
+freerdp
+freerdp-libs
+freetype
+freetype-devel
+frei0r-plugins
+fribidi
+fribidi-devel
+fros
+ftp
+fuse
+fuse-devel
+fuseiso
+fuse-libs
+fwupd
+fwupdate
+fwupdate-efi
+fwupdate-libs
+fxload
+gamin
+gavl
+gawk
+gc
+gcc
+gcc-c++
+gcc-gfortran
+gcc-gnat
+gcc-objc
+gcc-objc++
+GConf2
+gconf-editor
+gcr
+gcr-devel
+gd
+gdb
+gdb-gdbserver
+gdbm
+gdbm-devel
+gdisk
+gdk-pixbuf2
+gdk-pixbuf2-devel
+gdm
+gedit
+gedit-plugin-bookmarks
+gedit-plugin-bracketcompletion
+gedit-plugin-charmap
+gedit-plugin-codecomment
+gedit-plugin-colorpicker
+gedit-plugin-colorschemer
+gedit-plugin-commander
+gedit-plugin-drawspaces
+gedit-plugin-joinlines
+gedit-plugin-multiedit
+gedit-plugins
+gedit-plugins-data
+gedit-plugin-smartspaces
+gedit-plugin-synctex
+gedit-plugin-terminal
+gedit-plugin-textsize
+gedit-plugin-wordcompletion
+gegl
+genisoimage
+genwqe-tools
+genwqe-zlib
+geoclue
+geoclue2
+geoclue2-libs
+geocode-glib
+geocode-glib-devel
+GeoIP
+geoipupdate
+geolite2-city
+geolite2-country
+geronimo-annotation
+geronimo-jms
+geronimo-jta
+gettext
+gettext-common-devel
+gettext-devel
+gettext-libs
+gfs2-utils
+ghostscript
+ghostscript-chinese
+ghostscript-cups
+ghostscript-fonts
+giflib
+gimp
+gimp-data-extras
+gimp-help
+gimp-libs
+git
+gjs
+glade-libs
+glassfish-dtd-parser
+glassfish-fastinfoset
+glassfish-jaxb
+glassfish-jaxb-api
+glib2
+glib2-devel
+glibc
+glibc-common
+glibc-devel
+glibc-headers
+glibc-utils
+glibmm24
+glib-networking
+gl-manpages
+glusterfs
+glusterfs-api
+glusterfs-cli
+glusterfs-client-xlators
+glusterfs-fuse
+glusterfs-libs
+glusterfs-rdma
+glx-utils
+gmp
+gmp-devel
+gnome-abrt
+gnome-bluetooth
+gnome-bluetooth-libs
+gnome-boxes
+gnome-calculator
+gnome-classic-session
+gnome-clocks
+gnome-color-manager
+gnome-common
+gnome-contacts
+gnome-desktop3
+gnome-desktop3-devel
+gnome-dictionary
+gnome-disk-utility
+gnome-documents
+gnome-documents-libs
+gnome-font-viewer
+gnome-getting-started-docs
+gnome-icon-theme
+gnome-icon-theme-extras
+gnome-icon-theme-legacy
+gnome-icon-theme-symbolic
+gnome-initial-setup
+gnome-keyring
+gnome-keyring-pam
+gnome-menus
+gnome-online-accounts
+gnome-online-accounts-devel
+gnome-online-miners
+gnome-packagekit
+gnome-packagekit-common
+gnome-packagekit-installer
+gnome-packagekit-updater
+gnome-python2
+gnome-python2-bonobo
+gnome-python2-canvas
+gnome-python2-gconf
+gnome-python2-gnome
+gnome-python2-gnomevfs
+gnome-screenshot
+gnome-session
+gnome-session-xsession
+gnome-settings-daemon
+gnome-shell
+gnome-shell-extension-alternate-tab
+gnome-shell-extension-apps-menu
+gnome-shell-extension-common
+gnome-shell-extension-horizontal-workspaces
+gnome-shell-extension-launch-new-instance
+gnome-shell-extension-places-menu
+gnome-shell-extension-top-icons
+gnome-shell-extension-user-theme
+gnome-shell-extension-window-list
+gnome-software
+gnome-system-log
+gnome-system-monitor
+gnome-terminal
+gnome-terminal-nautilus
+gnome-themes-standard
+gnome-tweak-tool
+gnome-user-docs
+gnome-vfs2
+gnome-video-effects
+gnome-weather
+gnote
+gnu-free-fonts-common
+gnu-free-mono-fonts
+gnu-free-sans-fonts
+gnu-free-serif-fonts
+gnupg2
+gnuplot
+gnuplot-common
+gnutls
+gnutls-c++
+gnutls-dane
+gnutls-devel
+gnutls-utils
+gobject-introspection
+gobject-introspection-devel
+gom
+google-crosextra-caladea-fonts
+google-crosextra-carlito-fonts
+google-noto-emoji-color-fonts
+google-noto-emoji-fonts
+google-noto-fonts-common
+google-noto-sans-armenian-fonts
+google-noto-sans-devanagari-fonts
+google-noto-sans-devanagari-ui-fonts
+google-noto-sans-ethiopic-fonts
+google-noto-sans-fonts
+google-noto-sans-georgian-fonts
+google-noto-sans-hebrew-fonts
+google-noto-sans-khmer-fonts
+google-noto-sans-khmer-ui-fonts
+google-noto-sans-lao-fonts
+google-noto-sans-lao-ui-fonts
+google-noto-sans-tamil-fonts
+google-noto-sans-tamil-ui-fonts
+google-noto-sans-thai-fonts
+google-noto-sans-thai-ui-fonts
+google-noto-sans-ui-fonts
+google-noto-serif-armenian-fonts
+google-noto-serif-fonts
+google-noto-serif-georgian-fonts
+google-noto-serif-lao-fonts
+google-noto-serif-thai-fonts
+gperftools-libs
+gpgme
+gpm
+gpm-libs
+grantlee
+graphite2
+graphite2-devel
+graphviz
+graphviz-tcl
+grep
+grilo
+grilo-plugins
+groff-base
+grub2
+grub2-common
+grub2-efi-ia32
+grub2-efi-ia32-modules
+grub2-efi-x64
+grub2-efi-x64-modules
+grub2-pc
+grub2-pc-modules
+grub2-ppc64
+grub2-ppc64le
+grub2-ppc64le-modules
+grub2-ppc64-modules
+grub2-tools
+grub2-tools-extra
+grub2-tools-minimal
+grubby
+gsettings-desktop-schemas
+gsettings-desktop-schemas-devel
+gsl
+gsl-devel
+gsm
+gsound
+gspell
+gssdp
+gssproxy
+gstreamer
+gstreamer1
+gstreamer1-devel
+gstreamer1-plugins-bad-free
+gstreamer1-plugins-bad-free-gtk
+gstreamer1-plugins-base
+gstreamer1-plugins-base-devel
+gstreamer1-plugins-good
+gstreamer1-plugins-ugly-free
+gstreamer-plugins-bad-free
+gstreamer-plugins-base
+gstreamer-plugins-good
+gstreamer-tools
+gtk2
+gtk2-devel
+gtk2-devel-docs
+gtk2-immodule-xim
+gtk3
+gtk3-devel
+gtk3-immodule-xim
+gtkhtml3
+gtkmm24
+gtkmm30
+gtksourceview3
+gtkspell
+gtkspell3
+gtk-update-icon-cache
+gtk-vnc2
+guava
+gubbi-fonts
+gucharmap
+gucharmap-libs
+gupnp
+gupnp-av
+gupnp-dlna
+gupnp-igd
+gutenprint
+gutenprint-cups
+gutenprint-plugin
+gvfs
+gvfs-afc
+gvfs-afp
+gvfs-archive
+gvfs-client
+gvfs-devel
+gvfs-fuse
+gvfs-goa
+gvfs-gphoto2
+gvfs-mtp
+gvfs-smb
+gvnc
+gwenview
+gwenview-libs
+gzip
+hamcrest
+haproxy
+hardlink
+harfbuzz
+harfbuzz-devel
+harfbuzz-icu
+hawkey
+hdparm
+hesiod
+hexedit
+hicolor-icon-theme
+highcontrast-qt5
+highlight
+hivex
+hmaccalc
+hostname
+hpijs
+hplip
+hplip-common
+hplip-gui
+hplip-libs
+hsakmt
+hsqldb
+httpcomponents-client
+httpcomponents-core
+httpd
+httpd-devel
+httpd-manual
+httpd-tools
+http-parser
+hunspell
+hunspell-af
+hunspell-ak
+hunspell-am
+hunspell-ar
+hunspell-as
+hunspell-ast
+hunspell-az
+hunspell-be
+hunspell-ber
+hunspell-bg
+hunspell-bn
+hunspell-br
+hunspell-ca
+hunspell-cop
+hunspell-cs
+hunspell-csb
+hunspell-cv
+hunspell-cy
+hunspell-da
+hunspell-de
+hunspell-devel
+hunspell-dsb
+hunspell-el
+hunspell-en
+hunspell-en-GB
+hunspell-en-US
+hunspell-eo
+hunspell-es
+hunspell-et
+hunspell-eu
+hunspell-fa
+hunspell-fj
+hunspell-fo
+hunspell-fr
+hunspell-fur
+hunspell-fy
+hunspell-ga
+hunspell-gd
+hunspell-gl
+hunspell-grc
+hunspell-gu
+hunspell-gv
+hunspell-haw
+hunspell-he
+hunspell-hi
+hunspell-hil
+hunspell-hr
+hunspell-hsb
+hunspell-ht
+hunspell-hu
+hunspell-hy
+hunspell-ia
+hunspell-id
+hunspell-is
+hunspell-it
+hunspell-kk
+hunspell-km
+hunspell-kn
+hunspell-ko
+hunspell-ku
+hunspell-ky
+hunspell-la
+hunspell-lb
+hunspell-ln
+hunspell-lt
+hunspell-lv
+hunspell-mai
+hunspell-mg
+hunspell-mi
+hunspell-mk
+hunspell-ml
+hunspell-mn
+hunspell-mos
+hunspell-mr
+hunspell-ms
+hunspell-mt
+hunspell-nb
+hunspell-nds
+hunspell-ne
+hunspell-nl
+hunspell-nn
+hunspell-nr
+hunspell-nso
+hunspell-ny
+hunspell-oc
+hunspell-om
+hunspell-or
+hunspell-pa
+hunspell-pl
+hunspell-pt
+hunspell-qu
+hunspell-quh
+hunspell-ro
+hunspell-ru
+hunspell-rw
+hunspell-sc
+hunspell-se
+hunspell-shs
+hunspell-si
+hunspell-sk
+hunspell-sl
+hunspell-smj
+hunspell-so
+hunspell-sq
+hunspell-sr
+hunspell-ss
+hunspell-st
+hunspell-sv
+hunspell-sw
+hunspell-ta
+hunspell-te
+hunspell-tet
+hunspell-th
+hunspell-ti
+hunspell-tk
+hunspell-tl
+hunspell-tn
+hunspell-tpi
+hunspell-ts
+hunspell-uk
+hunspell-ur
+hunspell-uz
+hunspell-ve
+hunspell-vi
+hunspell-wa
+hunspell-xh
+hunspell-yi
+hunspell-zu
+hwdata
+hwloc
+hwloc-libs
+hyperv-daemons
+hyperv-daemons-license
+hypervfcopyd
+hypervkvpd
+hypervvssd
+hyphen
+hyphen-af
+hyphen-as
+hyphen-be
+hyphen-bg
+hyphen-bn
+hyphen-ca
+hyphen-cs
+hyphen-cy
+hyphen-da
+hyphen-de
+hyphen-el
+hyphen-en
+hyphen-es
+hyphen-et
+hyphen-eu
+hyphen-fa
+hyphen-fo
+hyphen-fr
+hyphen-ga
+hyphen-gl
+hyphen-grc
+hyphen-gu
+hyphen-hi
+hyphen-hr
+hyphen-hsb
+hyphen-hu
+hyphen-ia
+hyphen-id
+hyphen-is
+hyphen-it
+hyphen-kn
+hyphen-ku
+hyphen-lt
+hyphen-lv
+hyphen-mi
+hyphen-ml
+hyphen-mn
+hyphen-mr
+hyphen-nb
+hyphen-nl
+hyphen-nn
+hyphen-or
+hyphen-pa
+hyphen-pl
+hyphen-pt
+hyphen-ro
+hyphen-ru
+hyphen-sa
+hyphen-sk
+hyphen-sl
+hyphen-sr
+hyphen-sv
+hyphen-ta
+hyphen-te
+hyphen-tk
+hyphen-uk
+hyphen-zu
+i2c-tools
+ibacm
+ibus
+ibus-chewing
+ibus-gtk2
+ibus-gtk3
+ibus-hangul
+ibus-kkc
+ibus-libpinyin
+ibus-libs
+ibus-m17n
+ibus-qt
+ibus-rawcode
+ibus-sayura
+ibus-setup
+ibus-table
+ibus-table-chinese
+ibus-typing-booster
+ibutils
+ibutils-libs
+icedax
+icedtea-web
+icoutils
+ilmbase
+ima-evm-utils
+ImageMagick
+ImageMagick-c++
+ImageMagick-perl
+imake
+im-chooser
+im-chooser-common
+imsettings
+imsettings-gsettings
+imsettings-libs
+imsettings-qt
+indent
+infiniband-diags
+infinipath-psm
+info
+iniparser
+initial-setup
+initial-setup-gui
+initscripts
+inkscape
+insights-client
+intel-cmt-cat
+intltool
+iok
+iotop
+iowatcher
+ipa-client
+ipa-client-common
+ipa-common
+ipa-gothic-fonts
+ipa-mincho-fonts
+ipa-pgothic-fonts
+ipa-pmincho-fonts
+ipa-python-compat
+ipa-server
+ipa-server-common
+ipa-server-dns
+ipa-server-trust-ad
+iperf3
+ipmitool
+iproute
+iprutils
+ipset
+ipset-libs
+ipset-service
+ipsilon
+ipsilon-authform
+ipsilon-authgssapi
+ipsilon-authldap
+ipsilon-base
+ipsilon-client
+ipsilon-filesystem
+ipsilon-infosssd
+ipsilon-persona
+ipsilon-saml2
+ipsilon-saml2-base
+ipsilon-tools-ipa
+iptables
+iptables-devel
+iptables-services
+iptraf-ng
+iptstate
+iputils
+ipvsadm
+ipxe-bootimgs
+ipxe-roms-qemu
+irqbalance
+irssi
+iscsi-initiator-utils
+iscsi-initiator-utils-iscsiuio
+isdn4k-utils
+isns-utils
+iso-codes
+isomd5sum
+isorelax
+istack-commons
+itstool
+ivtv-firmware
+iw
+iwl1000-firmware
+iwl100-firmware
+iwl105-firmware
+iwl135-firmware
+iwl2000-firmware
+iwl2030-firmware
+iwl3160-firmware
+iwl3945-firmware
+iwl4965-firmware
+iwl5000-firmware
+iwl5150-firmware
+iwl6000-firmware
+iwl6000g2a-firmware
+iwl6000g2b-firmware
+iwl6050-firmware
+iwl7260-firmware
+iwpmd
+ixpdimm_sw
+jackson
+jakarta-commons-httpclient
+jakarta-oro
+jakarta-taglibs-standard
+jansson
+jasper-libs
+java-11-openjdk
+java-11-openjdk-devel
+java-11-openjdk-headless
+java-1.6.0-openjdk
+java-1.6.0-openjdk-devel
+java-1.7.0-openjdk
+java-1.7.0-openjdk-devel
+java-1.7.0-openjdk-headless
+java-1.7.1-ibm
+java-1.7.1-ibm-demo
+java-1.7.1-ibm-devel
+java-1.7.1-ibm-jdbc
+java-1.7.1-ibm-plugin
+java-1.7.1-ibm-src
+java-1.8.0-ibm
+java-1.8.0-ibm-demo
+java-1.8.0-ibm-devel
+java-1.8.0-ibm-jdbc
+java-1.8.0-ibm-plugin
+java-1.8.0-ibm-src
+java-1.8.0-openjdk
+java-1.8.0-openjdk-devel
+java-1.8.0-openjdk-headless
+java-atk-wrapper
+javamail
+javapackages-tools
+javassist
+jaxen
+jbigkit-libs
+jboss-annotations-1.1-api
+jdom
+jettison
+jing
+jline
+jna
+joda-convert
+joda-time
+jomolhari-fonts
+jose
+js
+json-c
+json-glib
+json-glib-devel
+jsr-311
+jss
+junit
+jvnet-parent
+k3b
+k3b-common
+k3b-libs
+kabi-yum-plugins
+kaccessible
+kaccessible-libs
+kacst-art-fonts
+kacst-book-fonts
+kacst-decorative-fonts
+kacst-digital-fonts
+kacst-farsi-fonts
+kacst-fonts-common
+kacst-letter-fonts
+kacst-naskh-fonts
+kacst-office-fonts
+kacst-one-fonts
+kacst-pen-fonts
+kacst-poster-fonts
+kacst-qurn-fonts
+kacst-screen-fonts
+kacst-title-fonts
+kacst-titlel-fonts
+kactivities
+kamera
+kate-part
+kbd
+kbd-legacy
+kbd-misc
+kcalc
+kcharselect
+kcm_colors
+kcm-gtk
+kcm_touchpad
+kcolorchooser
+kcoloredit
+kdeaccessibility
+kdeadmin
+kdeartwork-screensavers
+kde-baseapps
+kde-baseapps-libs
+kde-base-artwork
+kde-filesystem
+kdegraphics-devel
+kdegraphics-libs
+kdegraphics-strigi-analyzer
+kdegraphics-thumbnailers
+kde-l10n
+kdelibs
+kdelibs-common
+kdelibs-devel
+kdelibs-ktexteditor
+kdenetwork-common
+kdenetwork-devel
+kdenetwork-kdnssd
+kdenetwork-kget
+kdenetwork-kget-libs
+kdenetwork-kopete
+kdenetwork-kopete-devel
+kdenetwork-kopete-libs
+kdenetwork-krdc
+kdenetwork-krdc-devel
+kdenetwork-krdc-libs
+kdenetwork-krfb
+kdenetwork-krfb-libs
+kdepim
+kdepim-devel
+kdepim-libs
+kdepimlibs
+kdepimlibs-akonadi
+kdepimlibs-devel
+kdepimlibs-kxmlrpcclient
+kdepim-runtime
+kdepim-runtime-libs
+kdeplasma-addons
+kdeplasma-addons-libs
+kde-plasma-networkmanagement
+kde-plasma-networkmanagement-libs
+kde-print-manager
+kde-runtime
+kde-runtime-drkonqi
+kde-runtime-libs
+kdesdk-common
+kdesdk-devel
+kdesdk-kmtrace
+kdesdk-kmtrace-devel
+kdesdk-kmtrace-libs
+kdesdk-kompare
+kdesdk-kompare-devel
+kdesdk-kompare-libs
+kdesdk-okteta
+kdesdk-okteta-devel
+kdesdk-okteta-libs
+kde-settings
+kde-settings-ksplash
+kde-settings-plasma
+kde-settings-pulseaudio
+kde-style-oxygen
+kdeutils-minimal
+kde-workspace
+kde-workspace-devel
+kde-workspace-libs
+kdf
+keepalived
+kernel
+kernel-abi-whitelists
+kernel-bootwrapper
+kernel-debug
+kernel-debug-devel
+kernel-devel
+kernel-doc
+kernel-headers
+kernel-kdump
+kernel-kdump-devel
+kernel-tools
+kernel-tools-libs
+kexec-tools
+keybinder3
+keycloak-httpd-client-install
+keyutils
+keyutils-libs
+keyutils-libs-devel
+kgpg
+kgreeter-plugins
+khmeros-base-fonts
+khmeros-battambang-fonts
+khmeros-bokor-fonts
+khmeros-fonts-common
+khmeros-handwritten-fonts
+khmeros-metal-chrieng-fonts
+khmeros-muol-fonts
+khmeros-siemreap-fonts
+khotkeys
+khotkeys-libs
+kiconedit
+kinfocenter
+kio_sysinfo
+kmag
+kmenuedit
+kmix
+kmod
+kmod-kvdo
+kmod-libs
+kmod-oracleasm
+kolourpaint
+kolourpaint-libs
+konkretcmpi
+konkretcmpi-python
+konsole
+konsole-part
+kpartx
+kpatch
+krb5-devel
+krb5-libs
+krb5-pkinit
+krb5-server
+krb5-server-ldap
+krb5-workstation
+kruler
+ksaneplugin
+ksc
+kscreen
+ksh
+ksnapshot
+ksshaskpass
+ksysguard
+ksysguardd
+ksysguard-libs
+ktimer
+kurdit-unikurd-web-fonts
+kwallet
+kwin
+kwin-gles-libs
+kwin-libs
+kwrite
+langtable
+langtable-data
+langtable-python
+lapack
+lasso
+lasso-python
+latencytop
+latencytop-common
+latencytop-tui
+latrace
+lcms2
+ldapjdk
+ldns
+ledmon
+less
+lftp
+libabw
+libacl
+libacl-devel
+libaio
+libaio-devel
+libao
+libappindicator-gtk3
+libappstream-glib
+libarchive
+libart_lgpl
+libassuan
+libasyncns
+libatasmart
+libatomic
+libatomic-static
+libattr
+libattr-devel
+libavc1394
+libbase
+libbasicobjects
+libblkid
+libblkid-devel
+libblockdev
+libblockdev-crypto
+libblockdev-fs
+libblockdev-loop
+libblockdev-lvm
+libblockdev-mdraid
+libblockdev-nvdimm
+libblockdev-part
+libblockdev-swap
+libblockdev-utils
+libbluedevil
+libbluray
+libbonobo
+libbonoboui
+libburn
+libbytesize
+libcacard
+libcacard-tools
+libcanberra
+libcanberra-devel
+libcanberra-gtk2
+libcanberra-gtk3
+libcap
+libcap-devel
+libcap-ng
+libcap-ng-devel
+libcdio
+libcdio-paranoia
+libcdr
+libcgroup
+libcgroup-tools
+libchamplain
+libchamplain-gtk
+libchewing
+libcmis
+libcmpiCppImpl0
+libcmpiutil
+libcollection
+libcom_err
+libcom_err-devel
+libconfig
+libcroco
+libcryptui
+libcurl
+libcurl-devel
+libcxl
+libdaemon
+libdb
+libdb-cxx
+libdb-devel
+libdbi
+libdbi-dbd-mysql
+libdbi-dbd-pgsql
+libdbi-drivers
+libdbusmenu
+libdbusmenu-gtk3
+libdb-utils
+libdfp
+libdfp-devel
+libdhash
+libdmapsharing
+libdmx
+libdnet
+libdrm
+libdrm-devel
+libdv
+libdvdnav
+libdvdread
+libdwarf
+libeasyfc
+libeasyfc-gobject
+libecap
+libedit
+libehca
+libepoxy
+libepoxy-devel
+liberation-fonts
+liberation-fonts-common
+liberation-mono-fonts
+liberation-narrow-fonts
+liberation-sans-fonts
+liberation-serif-fonts
+libesmtp
+libestr
+libetonyek
+libevdev
+libevent
+libexif
+libexttextcat
+libfabric
+libfastjson
+libfdt
+libffi
+libffi-devel
+libfontenc
+libfonts
+libformula
+libfprint
+libfreehand
+libgcab1
+libgcc
+libgcrypt
+libgcrypt-devel
+libgdata
+libgdata-devel
+libgdither
+libgee
+libgee06
+libgepub
+libgexiv2
+libgfortran
+libgfortran4
+libgfortran5
+libglade2
+libGLEW
+libglvnd
+libglvnd-core-devel
+libglvnd-devel
+libglvnd-egl
+libglvnd-gles
+libglvnd-glx
+libglvnd-opengl
+libgnat
+libgnat-devel
+libgnome
+libgnomecanvas
+libgnomekbd
+libgnome-keyring
+libgnome-keyring-devel
+libgnomeui
+libgomp
+libgovirt
+libgpg-error
+libgpg-error-devel
+libgphoto2
+libgpod
+libgs
+libgsf
+libgtop2
+libgudev1
+libgudev1-devel
+libguestfs
+libguestfs-inspect-icons
+libguestfs-java
+libguestfs-tools
+libguestfs-tools-c
+libguestfs-winsupport
+libguestfs-xfs
+libgusb
+libgweather
+libgweather-devel
+libgxps
+libhangul
+libhbaapi
+libhbalinux
+libhif
+libhugetlbfs
+libhugetlbfs-devel
+libhugetlbfs-utils
+libibcommon
+libibmad
+libibumad
+libibverbs
+libibverbs-utils
+libica
+libical
+libical-devel
+libICE
+libICE-devel
+libicu
+libicu-devel
+libIDL
+libidn
+libiec61883
+libieee1284
+libieee1284-devel
+libimobiledevice
+libindicator-gtk3
+libini_config
+libinput
+libinvm-cim
+libinvm-cli
+libinvm-i18n
+libiodbc
+libipa_hbac
+libiptcdata
+libiscsi
+libisofs
+libitm
+libitm-devel
+libjose
+libjpeg-turbo
+libjpeg-turbo-devel
+libkadm5
+libkcddb
+libkdcraw
+libkdcraw-devel
+libkexiv2
+libkexiv2-devel
+libkipi
+libkipi-devel
+libkkc
+libkkc-common
+libkkc-data
+libksane
+libksane-devel
+libkscreen
+libkworkspace
+liblangtag
+liblayout
+libldb
+libloader
+liblockfile
+liblouis
+liblouis-python
+libluksmeta
+libmatchbox
+libmaxminddb
+libmbim
+libmbim-utils
+libmediaart
+libmemcached
+libmicrohttpd
+libmng
+libmng-devel
+libmnl
+libmodman
+libmount
+libmpc
+libmpcdec
+libmsn
+libmspack
+libmspub
+libmtp
+libmusicbrainz
+libmusicbrainz5
+libmwaw
+libmx
+libndp
+libnet
+libnetfilter_conntrack
+libnetfilter_cthelper
+libnetfilter_cttimeout
+libnetfilter_queue
+libnfnetlink
+libnfsidmap
+libnftnl
+libnice
+libnl
+libnl3
+libnl3-cli
+libnl-devel
+libnma
+libnm-gtk
+libnotify
+libnotify-devel
+libntlm
+liboauth
+liboauth-devel
+libobjc
+libocxl
+libodfgen
+libofa
+libogg
+libopenraw
+liborcus
+libosinfo
+libotf
+libpagemaker
+libpaper
+libpath_utils
+libpcap
+libpciaccess
+libpeas
+libpeas-gtk
+libpeas-loader-python
+libpfm
+libpfm-devel
+libpinyin
+libpinyin-data
+libpipeline
+libplist
+libpmem
+libpmemblk
+libpmemlog
+libpmemobj
+libpmempool
+libpng
+libpng12
+libpng-devel
+libproxy
+libproxy-mozjs
+libpsm2
+libpurple
+libpwquality
+libqb
+libqb-devel
+libqmi
+libqmi-utils
+libquadmath
+libquadmath-devel
+libquvi
+libquvi-scripts
+librabbitmq
+librados2
+LibRaw
+libraw1394
+librbd1
+librdkafka
+librdmacm
+librdmacm-utils
+libref_array
+librelp
+libreoffice-base
+libreoffice-calc
+libreoffice-core
+libreoffice-data
+libreoffice-draw
+libreoffice-emailmerge
+libreoffice-filters
+libreoffice-graphicfilter
+libreoffice-gtk2
+libreoffice-gtk3
+libreoffice-impress
+libreofficekit
+libreoffice-langpack-en
+libreoffice-math
+libreoffice-ogltrans
+libreoffice-opensymbol-fonts
+libreoffice-pdfimport
+libreoffice-pyuno
+libreoffice-ure
+libreoffice-ure-common
+libreoffice-voikko
+libreoffice-wiki-publisher
+libreoffice-writer
+libreoffice-x11
+libreoffice-xsltfilter
+librepo
+libreport
+libreport-anaconda
+libreport-cli
+libreport-filesystem
+libreport-gtk
+libreport-plugin-bugzilla
+libreport-plugin-mailx
+libreport-plugin-reportuploader
+libreport-plugin-rhtsupport
+libreport-plugin-ureport
+libreport-python
+libreport-rhel
+libreport-rhel-anaconda-bugzilla
+libreport-web
+librepository
+libreswan
+librevenge
+librpmem
+librsvg2
+librsvg2-devel
+librsvg2-tools
+librtas
+libsamplerate
+libsane-hpaio
+libseccomp
+libsecret
+libsecret-devel
+libselinux
+libselinux-devel
+libselinux-python
+libselinux-python3
+libselinux-ruby
+libselinux-utils
+libsemanage
+libsemanage-python
+libsepol
+libsepol-devel
+libserializer
+libservicelog
+libsexy
+libshout
+libsigc++20
+libSM
+libsmartcols
+libsmbclient
+libsmbios
+libSM-devel
+libsmi
+libsndfile
+libsolv
+libsoup
+libsoup-devel
+libspectre
+libspiro
+libsrtp
+libss
+libssh2
+libsss_autofs
+libsss_certmap
+libsss_idmap
+libsss_nss_idmap
+libsss_simpleifp
+libsss_sudo
+libstaroffice
+libstdc++
+libstdc++-devel
+libstdc++-docs
+libstoragemgmt
+libstoragemgmt-arcconf-plugin
+libstoragemgmt-hpsa-plugin
+libstoragemgmt-local-plugin
+libstoragemgmt-megaraid-plugin
+libstoragemgmt-nfs-plugin
+libstoragemgmt-nfs-plugin-clibs
+libstoragemgmt-nstor-plugin
+libstoragemgmt-python
+libstoragemgmt-python-clibs
+libstoragemgmt-smis-plugin
+libstoragemgmt-targetd-plugin
+libstoragemgmt-udev
+libsysfs
+libtalloc
+libtar
+libtasn1
+libtasn1-devel
+libtdb
+libteam
+libtevent
+libthai
+libtheora
+libtiff
+libtiff-devel
+libtimezonemap
+libtirpc
+libtool
+libtool-ltdl
+libtool-ltdl-devel
+libtranslit
+libtranslit-m17n
+libudisks2
+libunistring
+libunwind
+libusal
+libusb
+libusbmuxd
+libusbx
+libusbx-devel
+libuser
+libuser-python
+libusnic_verbs
+libutempter
+libuuid
+libuuid-devel
+libv4l
+libva
+libva-devel
+libvdpau
+libverto
+libverto-devel
+libverto-libevent
+libverto-tevent
+libvirt
+libvirt-bash-completion
+libvirt-cim
+libvirt-client
+libvirt-daemon
+libvirt-daemon-config-network
+libvirt-daemon-config-nwfilter
+libvirt-daemon-driver-interface
+libvirt-daemon-driver-lxc
+libvirt-daemon-driver-network
+libvirt-daemon-driver-nodedev
+libvirt-daemon-driver-nwfilter
+libvirt-daemon-driver-qemu
+libvirt-daemon-driver-secret
+libvirt-daemon-driver-storage
+libvirt-daemon-driver-storage-core
+libvirt-daemon-driver-storage-disk
+libvirt-daemon-driver-storage-gluster
+libvirt-daemon-driver-storage-iscsi
+libvirt-daemon-driver-storage-logical
+libvirt-daemon-driver-storage-mpath
+libvirt-daemon-driver-storage-rbd
+libvirt-daemon-driver-storage-scsi
+libvirt-daemon-kvm
+libvirt-devel
+libvirt-docs
+libvirt-gconfig
+libvirt-glib
+libvirt-gobject
+libvirt-java
+libvirt-java-devel
+libvirt-libs
+libvirt-python
+libvirt-snmp
+libvisio
+libvisual
+libvma
+libvmem
+libvmmalloc
+libvncserver
+libvoikko
+libvorbis
+libvpd
+libvpx
+libwacom
+libwacom-data
+libwayland-client
+libwayland-cursor
+libwayland-egl
+libwayland-server
+libwbclient
+libwebp
+libwinpr
+libwmf
+libwmf-lite
+libwnck3
+libwpd
+libwpg
+libwps
+libwsman1
+libwvstreams
+libX11
+libX11-common
+libX11-devel
+libXau
+libXau-devel
+libXaw
+libXaw-devel
+libxcb
+libxcb-devel
+libXcomposite
+libXcomposite-devel
+libXcursor
+libXcursor-devel
+libXdamage
+libXdamage-devel
+libXdmcp
+libXevie
+libXext
+libXext-devel
+libXfixes
+libXfixes-devel
+libXfont
+libXfont2
+libXft
+libXft-devel
+libXi
+libXi-devel
+libXinerama
+libXinerama-devel
+libxkbcommon
+libxkbcommon-devel
+libxkbcommon-x11
+libxkbfile
+libxkbfile-devel
+libxklavier
+libxml2
+libxml2-devel
+libxml2-python
+libXmu
+libXmu-devel
+libXp
+libXp-devel
+libXpm
+libXpm-devel
+libXrandr
+libXrandr-devel
+libXrender
+libXrender-devel
+libXres
+libXScrnSaver
+libXScrnSaver-devel
+libxshmfence
+libxshmfence-devel
+libxslt
+libxslt-devel
+libXt
+libXt-devel
+libXtst
+libXtst-devel
+libXv
+libXv-devel
+libXvMC
+libXxf86dga
+libXxf86misc
+libXxf86misc-devel
+libXxf86vm
+libXxf86vm-devel
+libyami
+libyaml
+libzapojit
+libzfcphbaapi
+libzip
+libzmf
+linuxconsoletools
+linux-firmware
+linuxptp
+lklug-fonts
+lksctp-tools
+lldpad
+llvm-private
+lm_sensors
+lm_sensors-devel
+lm_sensors-libs
+lockdev
+log4cxx
+log4j
+logrotate
+logwatch
+lohit-assamese-fonts
+lohit-bengali-fonts
+lohit-devanagari-fonts
+lohit-gujarati-fonts
+lohit-kannada-fonts
+lohit-malayalam-fonts
+lohit-marathi-fonts
+lohit-nepali-fonts
+lohit-oriya-fonts
+lohit-punjabi-fonts
+lohit-tamil-fonts
+lohit-telugu-fonts
+lorax
+lpsolve
+lrzsz
+lshw
+lsof
+lsscsi
+lsvpd
+ltrace
+lua
+luksmeta
+lvm2
+lvm2-libs
+lvm2-python-boom
+lvm2-python-libs
+lz4
+lzo
+lzo-minilzo
+lzop
+m17n-contrib
+m17n-db
+m17n-lib
+m2crypto
+m4
+madan-fonts
+mailcap
+mailman
+mailx
+make
+malaga-suomi-voikko
+mallard-rng
+man-db
+man-pages
+man-pages-cs
+man-pages-es
+man-pages-es-extra
+man-pages-fr
+man-pages-it
+man-pages-ja
+man-pages-ko
+man-pages-overrides
+man-pages-pl
+man-pages-ru
+man-pages-zh-CN
+mariadb
+mariadb-bench
+mariadb-devel
+mariadb-libs
+mariadb-server
+mariadb-test
+marisa
+matchbox-window-manager
+mc
+mcelog
+mcstrans
+mdadm
+meanwhile
+media-player-info
+memcached
+memkind
+memstomp
+memtest86+
+mercurial
+mesa-dri-drivers
+mesa-filesystem
+mesa-khr-devel
+mesa-libEGL
+mesa-libEGL-devel
+mesa-libgbm
+mesa-libGL
+mesa-libglapi
+mesa-libGL-devel
+mesa-libGLES
+mesa-libGLU
+mesa-libGLU-devel
+mesa-libGLw
+mesa-libGLw-devel
+mesa-libxatracker
+mesa-private-llvm
+metacity
+mgetty
+microcode_ctl
+migrationtools
+minicom
+mipv6-daemon
+mkbootdisk
+mksh
+mlocate
+mobile-broadband-provider-info
+mod_auth_gssapi
+mod_auth_kerb
+mod_auth_mellon
+mod_auth_mellon-diagnostics
+mod_authnz_pam
+mod_auth_openidc
+mod_dav_svn
+ModemManager
+ModemManager-glib
+mod_fcgid
+mod_intercept_form_submit
+mod_lookup_identity
+mod_nss
+mod_revocator
+mod_security
+mod_security_crs
+mod_session
+mod_ssl
+mod_wsgi
+mokutil
+motif
+motif-devel
+mousetweaks
+mozilla-filesystem
+mozjs17
+mozjs24
+mozjs52
+mpfr
+mpfr-devel
+mpg123-libs
+mpich-3.0
+mpich-3.0-devel
+mpich-3.2
+mpich-3.2-devel
+mpitests-mpich
+mpitests-mpich32
+mpitests-mvapich2
+mpitests-mvapich222
+mpitests-mvapich222-psm
+mpitests-mvapich222-psm2
+mpitests-mvapich23
+mpitests-mvapich23-psm
+mpitests-mvapich23-psm2
+mpitests-mvapich2-psm
+mpitests-openmpi
+mpitests-openmpi3
+mrtg
+mstflint
+msv-msv
+msv-xsdlib
+mtdev
+mtools
+mtr
+mt-st
+mtx
+mutt
+mutter
+mvapich2-2.0
+mvapich2-2.0-devel
+mvapich2-2.0-doc
+mvapich2-2.0-psm
+mvapich2-2.0-psm-devel
+mvapich2-2.2
+mvapich2-2.2-devel
+mvapich2-2.2-doc
+mvapich2-2.2-psm
+mvapich2-2.2-psm2
+mvapich2-2.2-psm2-devel
+mvapich2-2.2-psm-devel
+mvapich23
+mvapich23-devel
+mvapich23-doc
+mvapich23-psm
+mvapich23-psm2
+mvapich23-psm2-devel
+mvapich23-psm-devel
+mysql-connector-java
+mysql-connector-odbc
+MySQL-python
+mythes
+mythes-bg
+mythes-ca
+mythes-cs
+mythes-da
+mythes-de
+mythes-el
+mythes-en
+mythes-es
+mythes-fr
+mythes-ga
+mythes-hu
+mythes-it
+mythes-lb
+mythes-lv
+mythes-mi
+mythes-nb
+mythes-ne
+mythes-nl
+mythes-nn
+mythes-pl
+mythes-pt
+mythes-ro
+mythes-ru
+mythes-sk
+mythes-sl
+mythes-sv
+mythes-uk
+nafees-web-naskh-fonts
+nano
+nasm
+nautilus
+nautilus-extensions
+nautilus-sendto
+navilu-fonts
+nbdkit
+nbdkit-plugin-python2
+nbdkit-plugin-python-common
+nbdkit-plugin-vddk
+ncompress
+ncurses
+ncurses-base
+ncurses-devel
+ncurses-libs
+ncurses-term
+ndctl
+ndctl-libs
+neon
+nepomuk-core
+nepomuk-core-devel
+nepomuk-core-libs
+nepomuk-widgets
+netcf-libs
+netlabel_tools
+netpbm
+netpbm-devel
+netpbm-progs
+netsniff-ng
+net-snmp
+net-snmp-agent-libs
+net-snmp-devel
+net-snmp-libs
+net-snmp-utils
+nettle
+nettle-devel
+net-tools
+NetworkManager
+NetworkManager-adsl
+NetworkManager-bluetooth
+NetworkManager-config-server
+NetworkManager-glib
+NetworkManager-libnm
+NetworkManager-libreswan
+NetworkManager-libreswan-gnome
+NetworkManager-ppp
+NetworkManager-team
+NetworkManager-tui
+NetworkManager-wifi
+NetworkManager-wwan
+newt
+newt-python
+nfs4-acl-tools
+nfsometer
+nfstest
+nfs-utils
+nftables
+nhn-nanum-brush-fonts
+nhn-nanum-fonts-common
+nhn-nanum-gothic-fonts
+nhn-nanum-myeongjo-fonts
+nhn-nanum-pen-fonts
+nmap
+nmap-ncat
+nm-connection-editor
+nscd
+nspr
+nspr-devel
+nss
+nss_compat_ossl
+nss-devel
+nss-pam-ldapd
+nss-pem
+nss-softokn
+nss-softokn-devel
+nss-softokn-freebl
+nss-softokn-freebl-devel
+nss-sysinit
+nss-tools
+nss-util
+nss-util-devel
+ntp
+ntpdate
+ntsysv
+numactl
+numactl-devel
+numactl-libs
+numad
+numpy
+numpy-f2py
+nuxwdog
+nuxwdog-client-java
+nvme-cli
+nvmetcli
+obexd
+obex-data-server
+objectweb-asm
+oddjob
+oddjob-mkhomedir
+okular
+okular-devel
+okular-libs
+okular-part
+omping
+opa-address-resolution
+opa-basic-tools
+opa-fastfabric
+opa-fm
+opal
+opa-libopamgt
+opal-prd
+opencc
+openchange
+opencryptoki
+opencryptoki-ccatok
+opencryptoki-ep11tok
+opencryptoki-icatok
+opencryptoki-icsftok
+opencryptoki-libs
+opencryptoki-swtok
+opencryptoki-tpmtok
+opendnssec
+OpenEXR-libs
+openhpi
+openhpi-libs
+OpenIPMI
+OpenIPMI-libs
+OpenIPMI-modalias
+OpenIPMI-perl
+openjade
+openjpeg2
+openjpeg-libs
+openldap
+openldap-clients
+openldap-devel
+openldap-servers
+openlmi
+openlmi-account
+openlmi-account-doc
+openlmi-fan
+openlmi-fan-doc
+openlmi-hardware
+openlmi-hardware-doc
+openlmi-indicationmanager-libs
+openlmi-logicalfile
+openlmi-logicalfile-doc
+openlmi-networking
+openlmi-networking-doc
+openlmi-powermanagement
+openlmi-powermanagement-doc
+openlmi-providers
+openlmi-providers-devel
+openlmi-python-base
+openlmi-python-providers
+openlmi-realmd
+openlmi-realmd-doc
+openlmi-service
+openlmi-service-doc
+openlmi-software
+openlmi-software-doc
+openlmi-storage
+openlmi-storage-doc
+openlmi-tools
+openlmi-tools-doc
+openmpi
+openmpi3
+openmpi3-devel
+openmpi-devel
+openobex
+open-sans-fonts
+opensc
+openscap
+openscap-containers
+openscap-python
+openscap-scanner
+openscap-utils
+openslp
+openslp-server
+opensm
+opensm-libs
+opensp
+openssh
+openssh-askpass
+openssh-clients
+openssh-keycat
+openssh-server
+openssl
+openssl098e
+openssl-devel
+openssl-ibmca
+openssl-libs
+open-vm-tools
+open-vm-tools-desktop
+openwsman-client
+openwsman-python
+openwsman-server
+oprofile
+oprofile-gui
+oprofile-jit
+opus
+ORBit2
+orc
+orca
+ortp
+oscap-anaconda-addon
+osinfo-db
+osinfo-db-tools
+os-prober
+overpass-fonts
+OVMF
+oxygen-gtk
+oxygen-gtk2
+oxygen-gtk3
+oxygen-icon-theme
+p11-kit
+p11-kit-devel
+p11-kit-trust
+pacemaker
+pacemaker-cli
+pacemaker-cluster-libs
+pacemaker-cts
+pacemaker-doc
+pacemaker-libs
+pacemaker-libs-devel
+pacemaker-nagios-plugins-metadata
+pacemaker-remote
+Package
+PackageKit
+PackageKit-command-not-found
+PackageKit-glib
+PackageKit-gstreamer-plugin
+PackageKit-gtk3-module
+PackageKit-yum
+paflib
+pakchois
+paktype-naqsh-fonts
+paktype-naskh-basic-fonts
+paktype-tehreer-fonts
+pam
+pam-devel
+pam_krb5
+pam_pkcs11
+pango
+pango-devel
+pangomm
+papi
+papi-devel
+paps
+paps-libs
+paratype-pt-sans-fonts
+parfait
+parted
+passivetex
+passwd
+patch
+patchutils
+pavucontrol
+pax
+pciutils
+pciutils-libs
+pcp
+pcp-conf
+pcp-doc
+pcp-export-pcp2graphite
+pcp-gui
+pcp-libs
+pcp-manager
+pcp-pmda-activemq
+pcp-pmda-apache
+pcp-pmda-bash
+pcp-pmda-bonding
+pcp-pmda-cisco
+pcp-pmda-dbping
+pcp-pmda-dm
+pcp-pmda-ds389
+pcp-pmda-ds389log
+pcp-pmda-elasticsearch
+pcp-pmda-gfs2
+pcp-pmda-gluster
+pcp-pmda-gpfs
+pcp-pmda-gpsd
+pcp-pmda-json
+pcp-pmda-lmsensors
+pcp-pmda-logger
+pcp-pmda-lustre
+pcp-pmda-lustrecomm
+pcp-pmda-mailq
+pcp-pmda-memcache
+pcp-pmda-mounts
+pcp-pmda-mysql
+pcp-pmda-named
+pcp-pmda-netfilter
+pcp-pmda-news
+pcp-pmda-nfsclient
+pcp-pmda-nginx
+pcp-pmda-nvidia-gpu
+pcp-pmda-pdns
+pcp-pmda-postfix
+pcp-pmda-postgresql
+pcp-pmda-roomtemp
+pcp-pmda-rpm
+pcp-pmda-sendmail
+pcp-pmda-shping
+pcp-pmda-summary
+pcp-pmda-trace
+pcp-pmda-unbound
+pcp-pmda-weblog
+pcp-pmda-zswap
+pcp-selinux
+pcp-system-tools
+pcp-webapi
+pcp-zeroconf
+pcre
+pcre2
+pcre2-utf16
+pcre-devel
+pcs
+pcsc-lite
+pcsc-lite-ccid
+pcsc-lite-libs
+pcs-snmp
+pentaho-libxml
+pentaho-reporting-flow-engine
+perf
+perftest
+perl
+perl-Algorithm-Diff
+perl-App-cpanminus
+perl-Archive-Extract
+perl-Archive-Tar
+perl-Archive-Zip
+perl-Authen-SASL
+perl-autodie
+perl-Bit-Vector
+perl-B-Lint
+perl-Business-ISBN
+perl-Business-ISBN-Data
+perl-Carp
+perl-Carp-Clan
+perl-CGI
+perl-CGI-Session
+perl-Class-ISA
+perl-Class-Load
+perl-Class-Singleton
+perl-Compress-Raw-Bzip2
+perl-Compress-Raw-Zlib
+perl-constant
+perl-Convert-ASN1
+perl-core
+perl-CPAN
+perl-CPAN-Meta
+perl-CPAN-Meta-Requirements
+perl-CPAN-Meta-YAML
+perl-CPANPLUS
+perl-CPANPLUS-Dist-Build
+perl-Crypt-OpenSSL-Bignum
+perl-Crypt-OpenSSL-Random
+perl-Crypt-OpenSSL-RSA
+perl-Crypt-SSLeay
+perl-Data-Dumper
+perl-Data-OptList
+perl-Date-Calc
+perl-Date-Manip
+perl-DateTime
+perl-DateTime-Format-DateParse
+perl-DateTime-Locale
+perl-DateTime-TimeZone
+perl-DBD-MySQL
+perl-DBD-Pg
+perl-DBD-SQLite
+perl-DB_File
+perl-DBI
+perl-DBIx-Simple
+perl-devel
+perl-Devel-Symdump
+perl-Digest
+perl-Digest-HMAC
+perl-Digest-MD5
+perl-Digest-SHA
+perl-Digest-SHA1
+perl-Encode
+perl-Encode-Detect
+perl-Encode-Locale
+perl-Env
+perl-Error
+perl-Exporter
+perl-ExtUtils-CBuilder
+perl-ExtUtils-Embed
+perl-ExtUtils-Install
+perl-ExtUtils-MakeMaker
+perl-ExtUtils-Manifest
+perl-ExtUtils-ParseXS
+perl-FCGI
+perl-File-CheckTree
+perl-File-Fetch
+perl-File-Listing
+perl-File-Path
+perl-File-Slurp
+perl-File-Temp
+perl-Filter
+perl-Font-AFM
+perl-FreezeThaw
+perl-GD
+perl-Getopt-Long
+perl-gettext
+perl-Git
+perl-GSSAPI
+perl-hivex
+perl-homedir
+perl-HTML-Format
+perl-HTML-Parser
+perl-HTML-Tagset
+perl-HTML-Tree
+perl-HTTP-Cookies
+perl-HTTP-Daemon
+perl-HTTP-Date
+perl-HTTP-Message
+perl-HTTP-Negotiate
+perl-HTTP-Tiny
+perl-IO-Compress
+perl-IO-HTML
+perl-IO-Socket-INET6
+perl-IO-Socket-IP
+perl-IO-Socket-SSL
+perl-IO-stringy
+perl-IO-Zlib
+perl-IPC-Cmd
+perl-JSON
+perl-JSON-PP
+perl-LDAP
+perl-libintl
+perl-libs
+perl-libwww-perl
+perl-libxml-perl
+perl-List-MoreUtils
+perl-Locale-Codes
+perl-Locale-Maketext
+perl-Locale-Maketext-Simple
+perl-local-lib
+perl-Log-Message
+perl-Log-Message-Simple
+perl-LWP-MediaTypes
+perl-LWP-Protocol-https
+perl-macros
+perl-Mail-DKIM
+perl-Mail-SPF
+perl-MailTools
+perl-Module-Build
+perl-Module-CoreList
+perl-Module-Implementation
+perl-Module-Load
+perl-Module-Load-Conditional
+perl-Module-Loaded
+perl-Module-Metadata
+perl-Module-Pluggable
+perl-Module-Runtime
+perl-Module-Signature
+perl-Mozilla-CA
+perl-Mozilla-LDAP
+perl-NetAddr-IP
+perl-Net-Daemon
+perl-Net-DNS
+perl-Net-HTTP
+perl-Net-LibIDN
+perl-Net-SMTP-SSL
+perl-Net-SSLeay
+perl-Newt
+perl-Object-Accessor
+perl-Package-Constants
+perl-Package-DeprecationManager
+perl-Package-Stash
+perl-Package-Stash-XS
+perl-Params-Check
+perl-Params-Util
+perl-Params-Validate
+perl-PAR-Dist
+perl-parent
+perl-Parse-CPAN-Meta
+perl-PathTools
+perl-PCP-PMDA
+perl-Perl4-CoreLibs
+perl-Perl-OSType
+perl-PlRPC
+perl-Pod-Checker
+perl-Pod-Coverage
+perl-Pod-Escapes
+perl-Pod-LaTeX
+perl-podlators
+perl-Pod-Parser
+perl-Pod-Perldoc
+perl-Pod-Plainer
+perl-Pod-Simple
+perl-Pod-Usage
+perl-Scalar-List-Utils
+perl-SGMLSpm
+perl-SNMP_Session
+perl-Socket
+perl-Socket6
+perl-srpm-macros
+perl-Storable
+perl-String-ShellQuote
+perl-Sub-Install
+perl-Sys-CPU
+perl-Sys-Guestfs
+perl-Sys-MemInfo
+perl-Sys-Syslog
+perl-Sys-Virt
+perl-TermReadKey
+perl-Term-UI
+perl-Test-Harness
+perl-Test-Pod
+perl-Test-Pod-Coverage
+perl-Test-Simple
+perl-Text-Diff
+perl-Text-ParseWords
+perl-Text-Soundex
+perl-Text-Unidecode
+perl-Thread-Queue
+perl-threads
+perl-threads-shared
+perltidy
+perl-TimeDate
+perl-Time-HiRes
+perl-Time-Local
+perl-Time-Piece
+perl-Try-Tiny
+perl-URI
+perl-version
+perl-Version-Requirements
+perl-WWW-RobotRules
+perl-XML-Dumper
+perl-XML-Filter-BufferText
+perl-XML-Grove
+perl-XML-LibXML
+perl-XML-NamespaceSupport
+perl-XML-Parser
+perl-XML-SAX
+perl-XML-SAX-Base
+perl-XML-SAX-Writer
+perl-XML-Simple
+perl-XML-Twig
+perl-XML-Writer
+perl-XML-XPath
+perl-YAML
+perl-YAML-Tiny
+pexpect
+phonon
+phonon-backend-gstreamer
+phonon-devel
+php
+php-cli
+php-common
+php-gd
+php-ldap
+php-mysql
+php-odbc
+php-pdo
+php-pear
+php-pecl-memcache
+php-pgsql
+php-process
+php-recode
+php-soap
+php-xml
+php-xmlrpc
+pidgin
+pidgin-sipe
+pinentry
+pinentry-gtk
+pinentry-qt
+pinentry-qt4
+pinfo
+pixman
+pixman-devel
+pkgconfig
+pki-base
+pki-base-java
+pki-ca
+pki-kra
+pki-server
+pki-symkey
+pki-tools
+plasma-scriptengine-python
+plymouth
+plymouth-core-libs
+plymouth-graphics-libs
+plymouth-plugin-label
+plymouth-plugin-two-step
+plymouth-scripts
+plymouth-system-theme
+plymouth-theme-charge
+pmdk-convert
+pmempool
+pm-utils
+pnm2ppa
+po4a
+policycoreutils
+policycoreutils-devel
+policycoreutils-gui
+policycoreutils-newrole
+policycoreutils-python
+policycoreutils-sandbox
+polkit
+polkit-devel
+polkit-docs
+polkit-kde
+polkit-pkla-compat
+polkit-qt
+poppler
+poppler-data
+poppler-glib
+poppler-qt
+poppler-utils
+popt
+popt-devel
+portreserve
+postfix
+postfix-perl-scripts
+postgresql
+postgresql-contrib
+postgresql-devel
+postgresql-docs
+postgresql-jdbc
+postgresql-libs
+postgresql-odbc
+postgresql-plperl
+postgresql-plpython
+postgresql-pltcl
+postgresql-server
+postgresql-test
+pothana2000-fonts
+powerpc-utils
+powerpc-utils-python
+powertop
+ppc64-diag
+ppc64-utils
+ppp
+pptp
+prelink
+procmail
+procps-ng
+protobuf
+protobuf-c
+psacct
+ps_mem
+psmisc
+pth
+ptlib
+pulseaudio
+pulseaudio-gdm-hooks
+pulseaudio-libs
+pulseaudio-libs-devel
+pulseaudio-libs-glib2
+pulseaudio-module-bluetooth
+pulseaudio-module-x11
+pulseaudio-utils
+purple-sipe
+pycairo
+pygobject2
+pygobject3-devel
+pygpgme
+PyGreSQL
+pygtk2
+pygtk2-libglade
+pykde4
+pykickstart
+pyldb
+pyliblzma
+pyOpenSSL
+pyorbit
+PyPAM
+pyparsing
+pyparted
+PyQt4
+PyQt4-devel
+pyserial
+pytalloc
+python
+python2-blivet3
+python2-blockdev
+python2-bytesize
+python2-caribou
+python2-cryptography
+python2-futures
+python2-hawkey
+python2-ipaclient
+python2-ipalib
+python2-ipaserver
+python2-keycloak-httpd-client-install
+python2-oauthlib
+python2-pyasn1
+python2-pyasn1-modules
+python2-pyatspi
+python2-requests-oauthlib
+python2-rpm-macros
+python2-subprocess32
+python3
+python3-libs
+python3-pip
+python3-rpm-generators
+python3-rpm-macros
+python3-setuptools
+python3-wheel
+python-adal
+python-augeas
+python-azure-sdk
+python-babel
+python-backports
+python-backports-ssl_match_hostname
+python-bcc
+python-beaker
+python-blivet
+python-boto3
+python-brlapi
+python-cffi
+python-chardet
+python-cherrypy
+python-clufter
+python-configobj
+python-configshell
+python-coverage
+python-cpio
+python-cups
+python-custodia
+python-dateutil
+python-decorator
+python-deltarpm
+python-devel
+python-di
+python-dmidecode
+python-dns
+python-docs
+python-docutils
+python-enum34
+python-ethtool
+python-firewall
+python-gobject
+python-gobject-base
+python-gssapi
+python-gudev
+python-hwdata
+python-idna
+python-iniparse
+python-inotify
+python-ipaddr
+python-ipaddress
+python-IPy
+python-isodate
+python-javapackages
+python-jinja2
+python-jsonpatch
+python-jsonpointer
+python-jwcrypto
+python-jwt
+python-kdcproxy
+python-kerberos
+python-kitchen
+python-kmod
+python-krbV
+python-ldap
+python-libguestfs
+python-libipa_hbac
+python-libs
+python-libsss_nss_idmap
+python-linux-procfs
+python-lxml
+python-magic
+python-mako
+python-markupsafe
+python-matplotlib
+python-meh
+python-meh-gui
+python-memcached
+python-msrest
+python-msrestazure
+python-netaddr
+python-netifaces
+python-nose
+python-nss
+python-ntplib
+python-paramiko
+python-paste
+python-pcp
+python-perf
+python-pillow
+python-ply
+python-prettytable
+python-psycopg2
+python-pwquality
+python-pyblock
+python-pycparser
+python-pycurl
+python-pyudev
+python-qrcode-core
+python-rados
+python-rbd
+python-reportlab
+python-requests
+python-rhsm
+python-rhsm-certificates
+python-rpm-macros
+python-rtslib
+python-s3transfer
+python-schedutils
+python-setproctitle
+python-setuptools
+python-six
+python-slip
+python-slip-dbus
+python-smbc
+python-sqlalchemy
+python-srpm-macros
+python-sss
+python-sssdconfig
+python-sss-murmur
+python-suds
+python-syspurpose
+python-tdb
+python-tempita
+python-tevent
+python-urlgrabber
+python-urllib3
+python-urwid
+python-virtualenv
+python-volume_key
+python-yubico
+pytz
+pyusb
+pywbem
+pyxattr
+PyYAML
+qca2
+qca-ossl
+qclib
+qdox
+qemu-guest-agent
+qemu-img
+qemu-img-ma
+qemu-kvm
+qemu-kvm-common
+qemu-kvm-common-ma
+qemu-kvm-ma
+qemu-kvm-tools
+qemu-kvm-tools-ma
+qgnomeplatform
+qimageblitz
+qjson
+qpdf-libs
+qperf
+qrencode-libs
+qt
+qt3
+qt3-devel
+qt3-MySQL
+qt3-ODBC
+qt3-PostgreSQL
+qt5-designer
+qt5-doctools
+qt5-linguist
+qt5-qt3d
+qt5-qt3d-devel
+qt5-qtbase
+qt5-qtbase-common
+qt5-qtbase-devel
+qt5-qtbase-gui
+qt5-qtbase-mysql
+qt5-qtbase-odbc
+qt5-qtbase-postgresql
+qt5-qtcanvas3d
+qt5-qtconnectivity
+qt5-qtconnectivity-devel
+qt5-qtdeclarative
+qt5-qtdeclarative-devel
+qt5-qtdoc
+qt5-qtenginio
+qt5-qtenginio-devel
+qt5-qtgraphicaleffects
+qt5-qtimageformats
+qt5-qtlocation
+qt5-qtlocation-devel
+qt5-qtmultimedia
+qt5-qtmultimedia-devel
+qt5-qtquickcontrols
+qt5-qtquickcontrols2
+qt5-qtscript
+qt5-qtscript-devel
+qt5-qtsensors
+qt5-qtsensors-devel
+qt5-qtserialbus
+qt5-qtserialport
+qt5-qtserialport-devel
+qt5-qtsvg
+qt5-qtsvg-devel
+qt5-qttools
+qt5-qttools-common
+qt5-qttools-devel
+qt5-qttools-libs-designer
+qt5-qttools-libs-designercomponents
+qt5-qttools-libs-help
+qt5-qttranslations
+qt5-qtwayland
+qt5-qtwebchannel
+qt5-qtwebchannel-devel
+qt5-qtwebsockets
+qt5-qtwebsockets-devel
+qt5-qtx11extras
+qt5-qtx11extras-devel
+qt5-qtxmlpatterns
+qt5-qtxmlpatterns-devel
+qt5-rpm-macros
+qt-devel
+qt-mysql
+qt-odbc
+qt-postgresql
+qt-settings
+qt-x11
+quagga
+quota
+quota-nls
+radvd
+raptor2
+rarian
+rarian-compat
+rasdaemon
+rasqal
+rcs
+rdate
+rdist
+rdma-core
+rdma-core-devel
+readline
+readline-devel
+realmd
+rear
+recode
+redfish-finder
+redhat-access-gui
+redhat-access-plugin-ipa
+redhat-bookmarks
+Red_Hat_Enterprise_Linux-Release_Notes-7-as-IN
+Red_Hat_Enterprise_Linux-Release_Notes-7-bn-IN
+Red_Hat_Enterprise_Linux-Release_Notes-7-de-DE
+Red_Hat_Enterprise_Linux-Release_Notes-7-en-US
+Red_Hat_Enterprise_Linux-Release_Notes-7-es-ES
+Red_Hat_Enterprise_Linux-Release_Notes-7-fr-FR
+Red_Hat_Enterprise_Linux-Release_Notes-7-gu-IN
+Red_Hat_Enterprise_Linux-Release_Notes-7-hi-IN
+Red_Hat_Enterprise_Linux-Release_Notes-7-it-IT
+Red_Hat_Enterprise_Linux-Release_Notes-7-ja-JP
+Red_Hat_Enterprise_Linux-Release_Notes-7-kn-IN
+Red_Hat_Enterprise_Linux-Release_Notes-7-ko-KR
+Red_Hat_Enterprise_Linux-Release_Notes-7-ml-IN
+Red_Hat_Enterprise_Linux-Release_Notes-7-mr-IN
+Red_Hat_Enterprise_Linux-Release_Notes-7-or-IN
+Red_Hat_Enterprise_Linux-Release_Notes-7-pa-IN
+Red_Hat_Enterprise_Linux-Release_Notes-7-pt-BR
+Red_Hat_Enterprise_Linux-Release_Notes-7-ru-RU
+Red_Hat_Enterprise_Linux-Release_Notes-7-ta-IN
+Red_Hat_Enterprise_Linux-Release_Notes-7-te-IN
+Red_Hat_Enterprise_Linux-Release_Notes-7-zh-CN
+Red_Hat_Enterprise_Linux-Release_Notes-7-zh-TW
+redhat-indexhtml
+redhat-logos
+redhat-lsb
+redhat-lsb-core
+redhat-lsb-cxx
+redhat-lsb-desktop
+redhat-lsb-languages
+redhat-lsb-printing
+redhat-lsb-submod-multimedia
+redhat-lsb-submod-security
+redhat-menus
+redhat-release-client
+redhat-release-computenode
+redhat-release-eula
+redhat-release-server
+redhat-release-workstation
+redhat-rpm-config
+redhat-support-lib-python
+redhat-support-tool
+redhat-upgrade-dracut
+redhat-upgrade-dracut-plymouth
+redhat-upgrade-tool
+redland
+redland-virtuoso
+regexp
+relaxngDatatype
+resource-agents
+resource-agents-aliyun
+resource-agents-gcp
+rest
+resteasy-base-atom-provider
+resteasy-base-client
+resteasy-base-jackson-provider
+resteasy-base-jaxb-provider
+resteasy-base-jaxrs
+resteasy-base-jaxrs-api
+resteasy-base-jettison-provider
+rfkill
+rhdb-utils
+rhino
+rhn-check
+rhn-client-tools
+rhnlib
+rhnsd
+rhn-setup
+rhn-setup-gnome
+rhsm-gtk
+rhythmbox
+rmt
+rngom
+rng-tools
+rootfiles
+rpcbind
+rpm
+rpm-build
+rpm-build-libs
+rpm-devel
+rpmdevtools
+rpmemd
+rpm-libs
+rpmlint
+rpm-python
+rpm-sign
+rp-pppoe
+rrdtool
+rrdtool-perl
+rsh
+rsh-server
+rsync
+rsyslog
+rsyslog-gnutls
+rsyslog-gssapi
+rsyslog-kafka
+rsyslog-mmjsonparse
+rsyslog-mysql
+rsyslog-pgsql
+rsyslog-relp
+rtkit
+ruby
+rubygem-abrt
+rubygem-bigdecimal
+rubygem-bundler
+rubygem-io-console
+rubygem-json
+rubygem-net-http-persistent
+rubygem-psych
+rubygem-rdoc
+rubygems
+rubygem-thor
+ruby-irb
+ruby-libs
+rusers
+rusers-server
+rwho
+s390utils
+s390utils-base
+s390utils-cmsfs
+s390utils-cmsfs-fuse
+s390utils-cpuplugd
+s390utils-hmcdrvfs
+s390utils-iucvterm
+s390utils-mon_statd
+s390utils-osasnmpd
+s390utils-zdsfs
+s390utils-ziomon
+saab-fonts
+sac
+samba
+samba-client
+samba-client-libs
+samba-common
+samba-common-libs
+samba-common-tools
+samba-krb5-printing
+samba-libs
+samba-python
+samba-winbind
+samba-winbind-clients
+samba-winbind-modules
+samyak-devanagari-fonts
+samyak-fonts-common
+samyak-gujarati-fonts
+samyak-malayalam-fonts
+samyak-oriya-fonts
+samyak-tamil-fonts
+sane-backends
+sane-backends-devel
+sane-backends-drivers-cameras
+sane-backends-drivers-scanners
+sane-backends-libs
+sane-frontends
+sassist
+satyr
+sbc
+sbd
+sblim-cim-client2
+sblim-cmpi-base
+sblim-cmpi-fsvol
+sblim-cmpi-network
+sblim-cmpi-nfsv3
+sblim-cmpi-nfsv4
+sblim-cmpi-params
+sblim-cmpi-sysfs
+sblim-cmpi-syslog
+sblim-gather
+sblim-gather-provider
+sblim-indication_helper
+sblim-sfcb
+sblim-sfcc
+sblim-smis-hba
+sblim-wbemcli
+scannotation
+scap-security-guide
+scap-security-guide-doc
+scap-workbench
+scipy
+scl-utils
+screen
+scrub
+SDL
+SDL-devel
+sdparm
+seabios-bin
+seahorse
+seahorse-nautilus
+seahorse-sharing
+seavgabios-bin
+sed
+selinux-policy
+selinux-policy-devel
+selinux-policy-minimum
+selinux-policy-mls
+selinux-policy-targeted
+sendmail
+sendmail-cf
+servicelog
+setools-console
+setools-libs
+setroubleshoot
+setroubleshoot-plugins
+setroubleshoot-server
+setserial
+setup
+setuptool
+sg3_utils
+sg3_utils-libs
+sgabios-bin
+sgml-common
+sgpio
+shadow-utils
+shared-desktop-ontologies
+shared-desktop-ontologies-devel
+shared-mime-info
+shim-ia32
+shim-unsigned-ia32
+shim-unsigned-x64
+shim-x64
+shotwell
+sil-abyssinica-fonts
+sil-nuosu-fonts
+sil-padauk-fonts
+sip
+sip-devel
+sip-macros
+si-units
+skkdic
+slang
+slapi-nis
+slf4j
+SLOF
+smartmontools
+smc-anjalioldlipi-fonts
+smc-dyuthi-fonts
+smc-fonts-common
+smc-kalyani-fonts
+smc-meera-fonts
+smc-rachana-fonts
+smc-raghumalayalam-fonts
+smc-suruma-fonts
+snapper
+snapper-libs
+snappy
+socat
+softhsm
+soprano
+soprano-devel
+sos
+sos-collector
+sound-theme-freedesktop
+soundtouch
+sox
+spamassassin
+spausedd
+spax
+speech-dispatcher
+speech-dispatcher-python
+speex
+spice-glib
+spice-gtk3
+spice-protocol
+spice-server
+spice-streaming-agent
+spice-vdagent
+spice-xpi
+sqlite
+sqlite-devel
+squashfs-tools
+squid
+squid-migration-script
+srp_daemon
+sssd
+sssd-ad
+sssd-client
+sssd-common
+sssd-common-pac
+sssd-dbus
+sssd-ipa
+sssd-kcm
+sssd-krb5
+sssd-krb5-common
+sssd-ldap
+sssd-libwbclient
+sssd-polkit-rules
+sssd-proxy
+sssd-tools
+sssd-winbind-idmap
+star
+startup-notification
+startup-notification-devel
+stax2-api
+stax-ex
+stix-fonts
+stix-math-fonts
+strace
+strace32
+strigi-libs
+strongimcv
+stunnel
+subscription-manager
+subscription-manager-gui
+subscription-manager-initial-setup-addon
+subscription-manager-migration
+subscription-manager-migration-data
+subscription-manager-plugin-container
+subscription-manager-rhsm
+subscription-manager-rhsm-certificates
+subversion
+subversion-gnome
+subversion-libs
+sudo
+suitesparse
+supermin5
+supermin-helper
+sushi
+svrcore
+sweeper
+swig
+symlinks
+sysfsutils
+syslinux
+syslinux-extlinux
+syslinux-tftpboot
+sysstat
+system-config-date
+system-config-date-docs
+system-config-firewall-base
+system-config-kdump
+system-config-keyboard
+system-config-keyboard-base
+system-config-kickstart
+system-config-language
+system-config-printer
+system-config-printer-libs
+system-config-printer-udev
+system-config-users
+system-config-users-docs
+systemd
+systemd-devel
+systemd-libs
+systemd-python
+systemd-sysv
+system-storage-manager
+system-switch-java
+systemtap
+systemtap-client
+systemtap-devel
+systemtap-initscript
+systemtap-runtime
+systemtap-sdt-devel
+systemtap-server
+sysvinit-tools
+t1lib
+taglib
+tagsoup
+talk
+talk-server
+tang
+tar
+targetcli
+targetd
+tbb
+tbb-devel
+tboot
+tcl
+tcl-devel
+tcl-pgtcl
+tcpdump
+tcp_wrappers
+tcp_wrappers-devel
+tcp_wrappers-libs
+tcsh
+tdb-tools
+teamd
+telepathy-farstream
+telepathy-filesystem
+telepathy-gabble
+telepathy-glib
+telepathy-haze
+telepathy-logger
+telepathy-mission-control
+telepathy-salut
+telnet
+telnet-server
+tex-fonts-hebrew
+texinfo
+texlive
+texlive-ae
+texlive-algorithms
+texlive-amscls
+texlive-amsfonts
+texlive-amsmath
+texlive-anysize
+texlive-attachfile
+texlive-avantgar
+texlive-babel
+texlive-babelbib
+texlive-base
+texlive-beamer
+texlive-bera
+texlive-beton
+texlive-bibtex
+texlive-bibtex-bin
+texlive-bookman
+texlive-booktabs
+texlive-breakurl
+texlive-caption
+texlive-carlisle
+texlive-charter
+texlive-chngcntr
+texlive-cite
+texlive-cm
+texlive-cmap
+texlive-cmextra
+texlive-cm-lgc
+texlive-cm-super
+texlive-collection-basic
+texlive-collection-documentation-base
+texlive-collection-fontsrecommended
+texlive-collection-htmlxml
+texlive-collection-latex
+texlive-collection-latexrecommended
+texlive-colortbl
+texlive-courier
+texlive-crop
+texlive-csquotes
+texlive-ctable
+texlive-currfile
+texlive-dvipdfm
+texlive-dvipdfm-bin
+texlive-dvipdfmx
+texlive-dvipdfmx-bin
+texlive-dvipdfmx-def
+texlive-dvipng
+texlive-dvipng-bin
+texlive-dvips
+texlive-dvips-bin
+texlive-ec
+texlive-enctex
+texlive-enumitem
+texlive-eso-pic
+texlive-etex
+texlive-etex-pkg
+texlive-etoolbox
+texlive-euler
+texlive-euro
+texlive-eurosym
+texlive-extsizes
+texlive-fancybox
+texlive-fancyhdr
+texlive-fancyref
+texlive-fancyvrb
+texlive-filecontents
+texlive-filehook
+texlive-fix2col
+texlive-float
+texlive-fontspec
+texlive-footmisc
+texlive-fp
+texlive-fpl
+texlive-geometry
+texlive-glyphlist
+texlive-graphics
+texlive-gsftopk
+texlive-gsftopk-bin
+texlive-helvetic
+texlive-hyperref
+texlive-hyphen-base
+texlive-hyph-utf8
+texlive-ifetex
+texlive-ifluatex
+texlive-ifxetex
+texlive-index
+texlive-jadetex
+texlive-jadetex-bin
+texlive-jknapltx
+texlive-kastrup
+texlive-kerkis
+texlive-koma-script
+texlive-kpathsea
+texlive-kpathsea-bin
+texlive-kpathsea-lib
+texlive-l3experimental
+texlive-l3kernel
+texlive-l3packages
+texlive-latex
+texlive-latex-bin
+texlive-latex-bin-bin
+texlive-latexconfig
+texlive-latex-fonts
+texlive-listings
+texlive-lm
+texlive-lm-math
+texlive-ltxmisc
+texlive-lua-alt-getopt
+texlive-lualatex-math
+texlive-luaotfload
+texlive-luaotfload-bin
+texlive-luatex
+texlive-luatexbase
+texlive-luatex-bin
+texlive-makeindex
+texlive-makeindex-bin
+texlive-marginnote
+texlive-marvosym
+texlive-mathpazo
+texlive-mdwtools
+texlive-memoir
+texlive-metafont
+texlive-metafont-bin
+texlive-metalogo
+texlive-mflogo
+texlive-mfnfss
+texlive-mfware
+texlive-mfware-bin
+texlive-mh
+texlive-microtype
+texlive-misc
+texlive-mparhack
+texlive-mptopdf
+texlive-mptopdf-bin
+texlive-ms
+texlive-multido
+texlive-natbib
+texlive-ncntrsbk
+texlive-ntgclass
+texlive-oberdiek
+texlive-palatino
+texlive-paralist
+texlive-parallel
+texlive-parskip
+texlive-passivetex
+texlive-pdfpages
+texlive-pdftex
+texlive-pdftex-bin
+texlive-pdftex-def
+texlive-pgf
+texlive-plain
+texlive-powerdot
+texlive-psfrag
+texlive-pslatex
+texlive-psnfss
+texlive-pspicture
+texlive-pst-3d
+texlive-pst-blur
+texlive-pst-coil
+texlive-pst-eps
+texlive-pst-fill
+texlive-pst-grad
+texlive-pst-math
+texlive-pst-node
+texlive-pst-plot
+texlive-pstricks
+texlive-pstricks-add
+texlive-pst-slpe
+texlive-pst-text
+texlive-pst-tree
+texlive-pxfonts
+texlive-qstest
+texlive-rcs
+texlive-rotating
+texlive-rsfs
+texlive-sansmath
+texlive-sauerj
+texlive-scheme-basic
+texlive-section
+texlive-seminar
+texlive-sepnum
+texlive-setspace
+texlive-showexpl
+texlive-soul
+texlive-subfig
+texlive-symbol
+texlive-tetex
+texlive-tetex-bin
+texlive-tex
+texlive-tex4ht
+texlive-tex4ht-bin
+texlive-tex-bin
+texlive-texconfig
+texlive-texconfig-bin
+texlive-tex-gyre
+texlive-tex-gyre-math
+texlive-texlive.infra
+texlive-texlive.infra-bin
+texlive-textcase
+texlive-thumbpdf
+texlive-thumbpdf-bin
+texlive-times
+texlive-tipa
+texlive-tools
+texlive-txfonts
+texlive-type1cm
+texlive-typehtml
+texlive-ucs
+texlive-ulem
+texlive-underscore
+texlive-unicode-math
+texlive-url
+texlive-utopia
+texlive-varwidth
+texlive-wasy
+texlive-wasysym
+texlive-xcolor
+texlive-xdvi
+texlive-xdvi-bin
+texlive-xkeyval
+texlive-xmltex
+texlive-xmltex-bin
+texlive-xunicode
+texlive-zapfchan
+texlive-zapfding
+tex-preview
+tftp
+tftp-server
+thai-scalable-fonts-common
+thai-scalable-garuda-fonts
+thai-scalable-kinnari-fonts
+thai-scalable-loma-fonts
+thai-scalable-norasi-fonts
+thai-scalable-purisa-fonts
+thai-scalable-sawasdee-fonts
+thai-scalable-tlwgmono-fonts
+thai-scalable-tlwgtypewriter-fonts
+thai-scalable-tlwgtypist-fonts
+thai-scalable-tlwgtypo-fonts
+thai-scalable-umpush-fonts
+thai-scalable-waree-fonts
+theora-tools
+thunderbird
+tibetan-machine-uni-fonts
+tigervnc
+tigervnc-icons
+tigervnc-license
+tigervnc-server
+tigervnc-server-minimal
+time
+tk
+tk-devel
+tmpwatch
+tmux
+tn5250
+tncfhh
+tncfhh-libs
+tncfhh-utils
+tog-pegasus
+tog-pegasus-libs
+tokyocabinet
+tomcat
+tomcat-admin-webapps
+tomcat-el-2.2-api
+tomcat-jsp-2.2-api
+tomcatjss
+tomcat-lib
+tomcat-servlet-3.0-api
+tomcat-webapps
+totem
+totem-nautilus
+totem-pl-parser
+tpm2-abrmd
+tpm2-tools
+tpm2-tss
+tpm2-tss-devel
+tpm-quote-tools
+tpm-tools
+trace-cmd
+traceroute
+tracker
+tree
+trousers
+tss2
+ttmkfdir
+tuna
+tuned
+tuned-profiles-cpu-partitioning
+tuned-utils
+txw2
+tzdata
+tzdata-java
+ucs-miscfixed-fonts
+ucx
+udftools
+udisks2
+udisks2-iscsi
+udisks2-lsm
+udisks2-lvm2
+unbound
+unbound-libs
+unique3
+unique3-devel
+unit-api
+units
+unixODBC
+unixODBC-devel
+unoconv
+unzip
+uom-lib
+uom-se
+uom-systems
+upower
+urlview
+urw-base35-bookman-fonts
+urw-base35-c059-fonts
+urw-base35-d050000l-fonts
+urw-base35-fonts
+urw-base35-fonts-common
+urw-base35-gothic-fonts
+urw-base35-nimbus-mono-ps-fonts
+urw-base35-nimbus-roman-fonts
+urw-base35-nimbus-sans-fonts
+urw-base35-p052-fonts
+urw-base35-standard-symbols-ps-fonts
+urw-base35-z003-fonts
+urw-fonts
+usbguard
+usb_modeswitch
+usb_modeswitch-data
+usbmuxd
+usbredir
+usbutils
+usermode
+usermode-gtk
+usnic-tools
+ustr
+util-linux
+uuid
+uuidd
+valgrind
+vdo
+velocity
+vemana2000-fonts
+vim-common
+vim-enhanced
+vim-filesystem
+vim-minimal
+vim-X11
+vinagre
+vino
+virt-install
+virtio-win
+virt-manager
+virt-manager-common
+virt-p2v-maker
+virt-top
+virtuoso-opensource
+virt-v2v
+virt-viewer
+virt-what
+virt-who
+vlgothic-fonts
+vlgothic-p-fonts
+volume_key
+volume_key-libs
+vorbis-tools
+vsftpd
+vte291
+vte3
+vte-profile
+watchdog
+wavpack
+wayland-devel
+wayland-protocols-devel
+webkitgtk3
+webkitgtk4
+webkitgtk4-devel
+webkitgtk4-jsc
+webkitgtk4-jsc-devel
+webrtc-audio-processing
+wget
+which
+whois
+wireshark
+wireshark-gnome
+wodim
+words
+wpa_supplicant
+wqy-microhei-fonts
+wqy-unibit-fonts
+wqy-zenhei-fonts
+ws-jaxme
+wsmancli
+wvdial
+x3270
+x3270-text
+x3270-x11
+x86info
+xalan-j2
+xcb-util
+xcb-util-image
+xcb-util-keysyms
+xcb-util-renderutil
+xcb-util-wm
+xchat
+xdelta
+xdg-desktop-portal
+xdg-desktop-portal-gtk
+xdg-user-dirs
+xdg-user-dirs-gtk
+xdg-utils
+xerces-c
+xerces-j2
+xferstats
+xfsdump
+xfsprogs
+xguest
+xinetd
+xkeyboard-config
+xml-common
+xml-commons-apis
+xml-commons-resolver
+xmlrpc-c
+xmlrpc-c-client
+xmlsec1
+xmlsec1-openssl
+xmlto
+xmltoman
+xmlto-tex
+xorg-x11-apps
+xorg-x11-docs
+xorg-x11-drivers
+xorg-x11-drv-ati
+xorg-x11-drv-dummy
+xorg-x11-drv-evdev
+xorg-x11-drv-fbdev
+xorg-x11-drv-intel
+xorg-x11-drv-keyboard
+xorg-x11-drv-libinput
+xorg-x11-drv-mouse
+xorg-x11-drv-nouveau
+xorg-x11-drv-openchrome
+xorg-x11-drv-qxl
+xorg-x11-drv-synaptics
+xorg-x11-drv-v4l
+xorg-x11-drv-vesa
+xorg-x11-drv-vmmouse
+xorg-x11-drv-vmware
+xorg-x11-drv-void
+xorg-x11-drv-wacom
+xorg-x11-fonts-100dpi
+xorg-x11-fonts-75dpi
+xorg-x11-fonts-cyrillic
+xorg-x11-fonts-ethiopic
+xorg-x11-fonts-ISO8859-1-100dpi
+xorg-x11-fonts-ISO8859-14-100dpi
+xorg-x11-fonts-ISO8859-14-75dpi
+xorg-x11-fonts-ISO8859-15-75dpi
+xorg-x11-fonts-ISO8859-1-75dpi
+xorg-x11-fonts-ISO8859-2-100dpi
+xorg-x11-fonts-ISO8859-2-75dpi
+xorg-x11-fonts-ISO8859-9-100dpi
+xorg-x11-fonts-ISO8859-9-75dpi
+xorg-x11-fonts-misc
+xorg-x11-fonts-Type1
+xorg-x11-font-utils
+xorg-x11-proto-devel
+xorg-x11-server-common
+xorg-x11-server-utils
+xorg-x11-server-Xephyr
+xorg-x11-server-Xorg
+xorg-x11-utils
+xorg-x11-xauth
+xorg-x11-xbitmaps
+xorg-x11-xinit
+xorg-x11-xkb-utils
+xorriso
+xpp3
+xrestop
+xsane-common
+xsane-gimp
+xsettings-kde
+xsom
+xterm
+xulrunner
+xvattr
+xz
+xz-devel
+xz-libs
+yaboot
+yajl
+yelp
+yelp-libs
+yelp-tools
+yelp-xsl
+ypbind
+ypserv
+yp-tools
+yum
+yum-cron
+yum-langpacks
+yum-metadata-parser
+yum-plugin-aliases
+yum-plugin-changelog
+yum-plugin-ovl
+yum-plugin-tmprepo
+yum-plugin-verify
+yum-plugin-versionlock
+yum-rhn-plugin
+yum-utils
+zenity
+zip
+zlib
+zlib-devel
+zsh
+zziplib
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/389-ds-base-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/389-ds-base-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/389-ds-base-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/389-ds-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/389-ds-base_security_api_results.json
new file mode 100644
index 0000000..88b41f6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/389-ds-base_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14824","severity":"important","public_date":"2019-11-04T09:14:00Z","advisories":["RHSA-2019:3401","RHSA-2020:0464","RHSA-2019:3981"],"bugzilla":"1747448","bugzilla_description":"CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["389-ds:1.4-8000020191107193846.187e9a3f","389-ds:1.4-8010020190903200205.eb48df33","389-ds-base-0:1.3.9.1-12.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14824.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10171","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:1789"],"bugzilla":"1722081","bugzilla_description":"CVE-2019-10171 389-ds-base: Insufficient fix for CVE-2018-14648 denial of service in RHEL-7.5","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["389-ds-base-0:1.3.7.5-30.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10171.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3883","severity":"moderate","public_date":"2019-04-12T00:00:00Z","advisories":["RHSA-2019:3401","RHSA-2019:1896"],"bugzilla":"1693612","bugzilla_description":"CVE-2019-3883 389-ds-base: DoS via hanging secured connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["389-ds-base-0:1.3.8.4-25.1.el7_6","389-ds:1.4-8010020190903200205.eb48df33"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3883.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-10224","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:3401"],"bugzilla":"1677147","bugzilla_description":"CVE-2019-10224 389-ds-base: using dscreate in verbose mode results in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["389-ds:1.4-8010020190903200205.eb48df33"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10224.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-14648","severity":"moderate","public_date":"2018-09-21T00:00:00Z","advisories":["RHSA-2018:3507","RHSA-2018:3127"],"bugzilla":"1630668","bugzilla_description":"CVE-2018-14648 389-ds-base: Mishandled search requests in servers/slapd/search.c:do_search() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["389-ds-base-0:1.3.8.4-15.el7","389-ds-base-0:1.3.7.5-29.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14648.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14624","severity":"moderate","public_date":"2018-08-31T00:36:00Z","advisories":["RHSA-2018:2757"],"bugzilla":"1619450","bugzilla_description":"CVE-2018-14624 389-ds-base: Server crash through modify command with large DN","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["389-ds-base-0:1.3.7.5-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14638","severity":"moderate","public_date":"2018-08-30T00:00:00Z","advisories":["RHSA-2018:2757"],"bugzilla":"1626079","bugzilla_description":"CVE-2018-14638 389-ds-base: Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["389-ds-base-0:1.3.7.5-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10935","severity":"moderate","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2757"],"bugzilla":"1613606","bugzilla_description":"CVE-2018-10935 389-ds-base: ldapsearch with server side sort allows users to cause a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["389-ds-base-0:1.3.7.5-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10935.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-10871","severity":"moderate","public_date":"2018-06-18T00:00:00Z","advisories":["RHSA-2019:3401"],"bugzilla":"1591480","bugzilla_description":"CVE-2018-10871 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-312","affected_packages":["389-ds:1.4-8010020190903200205.eb48df33"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10871.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2018-10850","severity":"moderate","public_date":"2018-06-06T00:00:00Z","advisories":["RHSA-2018:2757"],"bugzilla":"1588056","bugzilla_description":"CVE-2018-10850 389-ds-base: race condition on reference counter leads to DoS using persistent search","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["389-ds-base-0:1.3.7.5-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10850.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-1089","severity":"important","public_date":"2018-05-07T15:00:00Z","advisories":["RHSA-2018:1380","RHSA-2018:1364"],"bugzilla":"1559802","bugzilla_description":"CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["389-ds-base-0:1.2.11.15-95.el6_9","389-ds-base-0:1.3.7.5-21.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1054","severity":"important","public_date":"2018-03-05T00:00:00Z","advisories":["RHSA-2018:0515","RHSA-2018:0414"],"bugzilla":"1537314","bugzilla_description":"CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["389-ds-base-0:1.2.11.15-94.el6_9","389-ds-base-0:1.3.6.1-28.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15135","severity":"moderate","public_date":"2018-01-22T00:00:00Z","advisories":["RHSA-2018:0515","RHSA-2018:0414"],"bugzilla":"1525628","bugzilla_description":"CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["389-ds-base-0:1.2.11.15-94.el6_9","389-ds-base-0:1.3.6.1-28.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15135.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2017-15134","severity":"important","public_date":"2018-01-22T00:00:00Z","advisories":["RHSA-2018:0163"],"bugzilla":"1531573","bugzilla_description":"CVE-2017-15134 389-ds-base: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["389-ds-base-0:1.3.6.1-26.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15134.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7551","severity":"moderate","public_date":"2017-07-31T00:00:00Z","advisories":["RHSA-2017:2569"],"bugzilla":"1477669","bugzilla_description":"CVE-2017-7551 389-ds-base: Password brute-force possible for locked account due to different return codes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":["389-ds-base-0:1.3.6.1-19.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7551.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-2668","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":["RHSA-2017:0920","RHSA-2017:0893"],"bugzilla":"1436575","bugzilla_description":"CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["389-ds-base-0:1.2.11.15-91.el6_9","389-ds-base-0:1.3.5.10-20.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2668.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5405","severity":"low","public_date":"2016-10-26T00:00:00Z","advisories":["RHSA-2016:2594","RHSA-2016:2765"],"bugzilla":"1358865","bugzilla_description":"CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["389-ds-base-0:1.3.5.10-11.el7","389-ds-base-0:1.2.11.15-84.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-2591","severity":"low","public_date":"2016-09-13T00:00:00Z","advisories":[],"bugzilla":"1381481","bugzilla_description":"CVE-2017-2591 389-ds-base: Heap buffer overflow in uiduniq.c","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2591.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-4992","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:2594","RHSA-2016:2765"],"bugzilla":"1347760","bugzilla_description":"CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-209","affected_packages":["389-ds-base-0:1.3.5.10-11.el7","389-ds-base-0:1.2.11.15-84.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5416","severity":"moderate","public_date":"2016-05-25T00:00:00Z","advisories":["RHSA-2016:2594","RHSA-2016:2765"],"bugzilla":"1349540","bugzilla_description":"CVE-2016-5416 389-ds-base: ACI readable by anonymous user","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["389-ds-base-0:1.3.5.10-11.el7","389-ds-base-0:1.2.11.15-84.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5416.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-0741","severity":"important","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2016:0204"],"bugzilla":"1299416","bugzilla_description":"CVE-2016-0741 389-ds-base: worker threads do not detect abnormally closed connections causing DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-772->CWE-835","affected_packages":["389-ds-base-0:1.3.4.0-26.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0741.json"},{"CVE":"CVE-2015-3230","severity":"moderate","public_date":"2015-06-09T00:00:00Z","advisories":["RHBA-2015:1554"],"bugzilla":"1232096","bugzilla_description":"CVE-2015-3230 389-ds-base: nsSSL3Ciphers preference not enforced server side (regression)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-665->CWE-327","affected_packages":["389-ds-base-0:1.3.3.1-20.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3230.json"},{"CVE":"CVE-2015-1854","severity":"important","public_date":"2015-04-28T00:00:00Z","advisories":["RHSA-2015:0895"],"bugzilla":"1209573","bugzilla_description":"CVE-2015-1854 389-ds-base: access control bypass with modrdn","cvss_score":4.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-697->CWE-863","affected_packages":["389-ds-base-0:1.3.3.1-16.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1854.json"},{"CVE":"CVE-2014-8105","severity":"important","public_date":"2015-03-05T00:00:00Z","advisories":["RHSA-2015:0416","RHSA-2015:0628"],"bugzilla":"1167858","bugzilla_description":"CVE-2014-8105 389-ds-base: information disclosure through 'cn=changelog' subtree","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-862->CWE-200","affected_packages":["389-ds-base-0:1.3.3.1-13.el7","389-ds-base-0:1.2.11.15-50.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8105.json"},{"CVE":"CVE-2014-8112","severity":"low","public_date":"2015-03-05T00:00:00Z","advisories":["RHSA-2015:0416"],"bugzilla":"1172729","bugzilla_description":"CVE-2014-8112 389-ds-base: password hashing bypassed when \"nsslapd-unhashed-pw-switch\" is set to off","cvss_score":1.4,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-522","affected_packages":["389-ds-base-0:1.3.3.1-13.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8112.json"},{"CVE":"CVE-2014-3562","severity":"important","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2014:1032","RHSA-2014:1031"],"bugzilla":"1123477","bugzilla_description":"CVE-2014-3562 389-ds: unauthenticated information disclosure","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-862->CWE-201","affected_packages":["389-ds-base-0:1.3.1.6-26.el7_0","redhat-ds-base-0:8.2.11-15.el5dsrv","389-ds-base-0:1.2.11.15-34.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3562.json"},{"CVE":"CVE-2014-0132","severity":"important","public_date":"2014-03-13T00:00:00Z","advisories":["RHSA-2014:0292"],"bugzilla":"1074845","bugzilla_description":"CVE-2014-0132 389-ds: flaw in parsing authzid can lead to privilege escalation","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-290","affected_packages":["389-ds-base-0:1.2.11.15-32.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0132.json"},{"CVE":"CVE-2013-4485","severity":"important","public_date":"2013-11-21T00:00:00Z","advisories":["RHSA-2013:1753","RHSA-2013:1752"],"bugzilla":"1024552","bugzilla_description":"CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-30.el6_5","redhat-ds-base-0:8.2.11-14.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4485.json"},{"CVE":"CVE-2013-4283","severity":"important","public_date":"2013-08-28T00:00:00Z","advisories":["RHSA-2013:1182"],"bugzilla":"999634","bugzilla_description":"CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-22.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4283.json"},{"CVE":"CVE-2013-2219","severity":"moderate","public_date":"2013-07-29T00:00:00Z","advisories":["RHSA-2013:1119","RHSA-2013:1116"],"bugzilla":"979508","bugzilla_description":"CVE-2013-2219 Directory Server: ACLs inoperative in some search scenarios","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["redhat-ds-base-0:8.2.11-13.el5dsrv","389-ds-base-0:1.2.11.15-20.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2219.json"},{"CVE":"CVE-2013-1897","severity":"low","public_date":"2013-03-28T00:00:00Z","advisories":["RHSA-2013:0742"],"bugzilla":"928105","bugzilla_description":"CVE-2013-1897 389-ds: unintended information exposure when rootdse is enabled","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-14.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1897.json"},{"CVE":"CVE-2013-0336","severity":"moderate","public_date":"2013-03-27T00:00:00Z","advisories":[],"bugzilla":"913751","bugzilla_description":"CVE-2013-0336 389-ds-base: DoS when connecting with a missing username/dn","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0336.json"},{"CVE":"CVE-2013-0312","severity":"moderate","public_date":"2013-03-11T00:00:00Z","advisories":["RHSA-2013:0628"],"bugzilla":"912964","bugzilla_description":"CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-12.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0312.json"},{"CVE":"CVE-2012-2678","severity":"moderate","public_date":"2012-06-20T00:00:00Z","advisories":["RHSA-2012:0997","RHSA-2012:1041"],"bugzilla":"829933","bugzilla_description":"CVE-2012-2678 rhds/389: plaintext password disclosure flaw","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.10.2-18.el6_3","redhat-ds-base-0:8.2.10-3.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2678.json"},{"CVE":"CVE-2012-2746","severity":"low","public_date":"2012-05-10T00:00:00Z","advisories":["RHSA-2012:0997","RHSA-2012:1041"],"bugzilla":"833482","bugzilla_description":"CVE-2012-2746 rhds/389: plaintext password disclosure in audit log","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.10.2-18.el6_3","redhat-ds-base-0:8.2.10-3.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2746.json"},{"CVE":"CVE-2012-4450","severity":"moderate","public_date":"2012-04-16T00:00:00Z","advisories":["RHSA-2013:0503"],"bugzilla":"860603","bugzilla_description":"CVE-2012-4450 389-ds-base: Change on SLAPI_MODRDN_NEWSUPERIOR is not evaluated in ACL (ACL rules bypass possible)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-11.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4450.json"},{"CVE":"CVE-2012-0833","severity":"low","public_date":"2012-01-05T00:00:00Z","advisories":["RHSA-2012:0813","RHSA-2013:0549"],"bugzilla":"787014","bugzilla_description":"CVE-2012-0833 389: denial of service when using certificate groups","cvss_score":1.4,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["389-ds-base-0:1.2.10.2-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0833.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ElectricFence_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ElectricFence_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ElectricFence_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/GConf2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/GConf2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/GConf2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/GeoIP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/GeoIP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/GeoIP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ImageMagick-c++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ImageMagick-c++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ImageMagick-c++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ImageMagick-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ImageMagick-perl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ImageMagick-perl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ImageMagick_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ImageMagick_security_api_results.json
new file mode 100644
index 0000000..3a6aa31
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ImageMagick_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-27560","severity":"low","public_date":"2020-10-18T00:00:00Z","advisories":[],"bugzilla":"1890687","bugzilla_description":"CVE-2020-27560 ImageMagick: division by zero in OptimizeLayerFrames function in MagickCore/layer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27560.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2012-1610","severity":"moderate","public_date":"2020-07-31T00:00:00Z","advisories":[],"bugzilla":"1868354","bugzilla_description":"CVE-2012-1610 ImageMagick: integer overflow in the GetEXIFProperty function in magick/property.c could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1610.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-13902","severity":"moderate","public_date":"2020-06-07T00:00:00Z","advisories":[],"bugzilla":"1849028","bugzilla_description":"CVE-2020-13902 ImageMagick: heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13902.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-10251","severity":"moderate","public_date":"2020-03-03T00:00:00Z","advisories":[],"bugzilla":"1813322","bugzilla_description":"CVE-2020-10251 ImageMagick: out-of-bounds read in ReadHEICImageByID function in coders/heic.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10251.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19952","severity":"moderate","public_date":"2019-12-23T00:00:00Z","advisories":[],"bugzilla":"1792465","bugzilla_description":"CVE-2019-19952 ImageMagick: use-after-free in MngInfoDiscardObject in coders/png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19952.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-19949","severity":"low","public_date":"2019-12-23T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1792480","bugzilla_description":"CVE-2019-19949 ImageMagick: heap-based buffer over-read in WritePNGImage in coders/png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19949.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-19948","severity":"moderate","public_date":"2019-12-23T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1793177","bugzilla_description":"CVE-2019-19948 ImageMagick: heap-based buffer overflow in WriteSGIImage in coders/sgi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19948.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2014-8561","severity":"low","public_date":"2019-11-14T00:00:00Z","advisories":[],"bugzilla":"1777543","bugzilla_description":"CVE-2014-8561 ImageMagick: convert +profile regression enters infinite loop exhausting memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8561.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-18853","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":[],"bugzilla":"1820568","bugzilla_description":"CVE-2019-18853 ImageMagick: XML_PARSE_HUGE not properly restricted in coders/svg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18853.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16709","severity":"low","public_date":"2019-09-23T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1801661","bugzilla_description":"CVE-2019-16709 ImageMagick: memory leak in coders/dps.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16709.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-16708","severity":"low","public_date":"2019-09-23T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1801665","bugzilla_description":"CVE-2019-16708 ImageMagick: memory leak in magick/xwindow.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16708.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-16710","severity":"low","public_date":"2019-09-23T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1801667","bugzilla_description":"CVE-2019-16710 ImageMagick: memory leak in coders/dot.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16710.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-16711","severity":"low","public_date":"2019-09-23T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1801673","bugzilla_description":"CVE-2019-16711 ImageMagick: memory leak in Huffman2DEncodeImage in coders/ps2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16711.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-16712","severity":"low","public_date":"2019-09-23T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1801674","bugzilla_description":"CVE-2019-16712 ImageMagick: memory leak in Huffman2DEncodeImage in coders/ps3.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16712.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-16713","severity":"low","public_date":"2019-09-23T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1801681","bugzilla_description":"CVE-2019-16713 ImageMagick: memory leak in coders/dot.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16713.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-17547","severity":"moderate","public_date":"2019-08-18T00:00:00Z","advisories":[],"bugzilla":"1767041","bugzilla_description":"CVE-2019-17547 ImageMagick: use-after-free in TraceBezier function in MagickCore/draw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-13302","severity":"moderate","public_date":"2019-07-17T00:00:00Z","advisories":[],"bugzilla":"1730571","bugzilla_description":"CVE-2019-13302 ImageMagick: heap-based buffer over-read in MagickCore/fourier.c in ComplexImages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-13301","severity":"moderate","public_date":"2019-07-17T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1730575","bugzilla_description":"CVE-2019-13301 ImageMagick: memory leaks in AcquireMagickMemory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13301.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-13300","severity":"moderate","public_date":"2019-07-17T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1730580","bugzilla_description":"CVE-2019-13300 ImageMagick: heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13300.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-13299","severity":"moderate","public_date":"2019-07-17T00:00:00Z","advisories":[],"bugzilla":"1730583","bugzilla_description":"CVE-2019-13299 ImageMagick: heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13299.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-13298","severity":"moderate","public_date":"2019-07-17T00:00:00Z","advisories":[],"bugzilla":"1730590","bugzilla_description":"CVE-2019-13298 ImageMagick: heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because of a MagickCore/enhance.c error","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13298.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-13297","severity":"moderate","public_date":"2019-07-17T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1730596","bugzilla_description":"CVE-2019-13297 ImageMagick: heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13297.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-13296","severity":"low","public_date":"2019-07-17T00:00:00Z","advisories":[],"bugzilla":"1730599","bugzilla_description":"CVE-2019-13296 ImageMagick: direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13296.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13295","severity":"moderate","public_date":"2019-07-17T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1730604","bugzilla_description":"CVE-2019-13295 ImageMagick: heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13295.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-13311","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1730329","bugzilla_description":"CVE-2019-13311 ImageMagick: memory leaks at AcquireMagickMemory because of a wand/mogrify.c error","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13311.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13310","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1730333","bugzilla_description":"CVE-2019-13310 ImageMagick: memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13310.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-13309","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1730337","bugzilla_description":"CVE-2019-13309 ImageMagick: memory leaks at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13309.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-13308","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730342","bugzilla_description":"CVE-2019-13308 ImageMagick: heap-based buffer overflow in MagickCore/fourier.c in ComplexImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13308.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-13307","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1730351","bugzilla_description":"CVE-2019-13307 ImageMagick: heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13307.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-13306","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1730357","bugzilla_description":"CVE-2019-13306 ImageMagick: stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13306.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-13305","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1730361","bugzilla_description":"CVE-2019-13305 ImageMagick: stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13305.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-13304","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1730364","bugzilla_description":"CVE-2019-13304 ImageMagick: stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-13303","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730368","bugzilla_description":"CVE-2019-13303 ImageMagick: heap-based buffer over-read in MagickCore/composite.c in CompositeImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13303.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-17540","severity":"moderate","public_date":"2019-07-14T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1765330","bugzilla_description":"CVE-2019-17540 ImageMagick: heap-based buffer overflow in ReadPSInfo in coders/ps.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17540.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-17541","severity":"moderate","public_date":"2019-07-14T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1767087","bugzilla_description":"CVE-2019-17541 ImageMagick: Use after free in ReadICCProfile function in coders/jpeg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17541.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-13454","severity":"low","public_date":"2019-07-09T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1728474","bugzilla_description":"CVE-2019-13454 ImageMagick: division by zero in RemoveDuplicateLayers in MagickCore/layer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13454.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-12974","severity":"moderate","public_date":"2019-06-26T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1732278","bugzilla_description":"CVE-2019-12974 imagemagick: null-pointer dereference in function ReadPANGOImage in coders/pango.c and ReadVIDImage in coders/vid.c causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12974.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-12975","severity":"low","public_date":"2019-06-26T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1732282","bugzilla_description":"CVE-2019-12975 imagemagick: memory leak vulnerability in function WriteDPXImage in coders/dpx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-12976","severity":"low","public_date":"2019-06-26T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1732284","bugzilla_description":"CVE-2019-12976 imagemagick: memory leak vulnerability in function ReadPCLImage in coders/pcl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12976.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-12977","severity":"moderate","public_date":"2019-06-26T00:00:00Z","advisories":[],"bugzilla":"1732289","bugzilla_description":"CVE-2019-12977 imagemagick: use of uninitialised value in function WriteJP2Image in coders/jp2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12977.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-12978","severity":"moderate","public_date":"2019-06-26T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1732292","bugzilla_description":"CVE-2019-12978 imagemagick: use of uninitialized value in function ReadPANGOImage in coders/pango.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-12979","severity":"moderate","public_date":"2019-06-26T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1732294","bugzilla_description":"CVE-2019-12979 imagemagick: use of uninitialized value in functionSyncImageSettings in MagickCore/image.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12979.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-13133","severity":"low","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1726078","bugzilla_description":"CVE-2019-13133 ImageMagick: a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13133.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13134","severity":"low","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1726081","bugzilla_description":"CVE-2019-13134 ImageMagick: a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13134.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13137","severity":"low","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1726084","bugzilla_description":"CVE-2019-13137 ImageMagick: a memory leak vulnerability in the function ReadPSImage in coders/ps.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13137.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-13135","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1726104","bugzilla_description":"CVE-2019-13135 ImageMagick: a \"use of uninitialized value\" vulnerability in the function ReadCUTImage leading to a crash and DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-13136","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1726124","bugzilla_description":"CVE-2019-13136 ImageMagick: an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13136.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-13391","severity":"low","public_date":"2019-06-11T00:00:00Z","advisories":[],"bugzilla":"1727739","bugzilla_description":"CVE-2019-13391 ImageMagick: heap-based buffer over-read in MagickCore/fourier.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13391.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-10131","severity":"low","public_date":"2019-04-30T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1704762","bugzilla_description":"CVE-2019-10131 ImageMagick: off-by-one read in formatIPTCfromBuffer function in coders/meta.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10131.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-15141","severity":"moderate","public_date":"2019-04-28T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1767802","bugzilla_description":"CVE-2019-15141 ImageMagick: heap-based buffer overflow in WriteTIFFImage in coders/tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-122","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15141.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-11597","severity":"moderate","public_date":"2019-04-27T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1705406","bugzilla_description":"CVE-2019-11597 ImageMagick: heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c leading to DoS or information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11597.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-15140","severity":"moderate","public_date":"2019-04-27T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1767828","bugzilla_description":"CVE-2019-15140 ImageMagick: Use after free in ReadMATImage in coders/mat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15140.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-14980","severity":"low","public_date":"2019-04-21T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1757779","bugzilla_description":"CVE-2019-14980 ImageMagick: use-after-free in magick/blob.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14980.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2019-15139","severity":"moderate","public_date":"2019-04-20T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1767812","bugzilla_description":"CVE-2019-15139 ImageMagick: out-of-bounds read in ReadXWDImage in coders/xwd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-14981","severity":"low","public_date":"2019-04-18T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1757911","bugzilla_description":"CVE-2019-14981 ImageMagick: division by zero in MeanShiftImage in MagickCore/feature.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14981.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-11472","severity":"low","public_date":"2019-04-14T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1707768","bugzilla_description":"CVE-2019-11472 ImageMagick: denial of service in ReadXWDImage in coders/xwd.c in the XWD image parsing component","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11472.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-11598","severity":"moderate","public_date":"2019-04-08T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1705414","bugzilla_description":"CVE-2019-11598 ImageMagick: heap-based buffer over-read in the function WritePNMImage of coders/pnm.c leading to DoS or information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11598.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-10649","severity":"low","public_date":"2019-03-28T00:00:00Z","advisories":[],"bugzilla":"1700417","bugzilla_description":"CVE-2019-10649 ImageMagick: memory leak in SVGKeyValuePairs of coders/svg.c that leads to denial of service via crafted image file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-400|CWE-772)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10649.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-10650","severity":"low","public_date":"2019-03-28T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1700755","bugzilla_description":"CVE-2019-10650 ImageMagick: heap-based buffer over-read in WriteTIFFImage of coders/tiff.c leads to denial of service or information disclosure via crafted image file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10650.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-9956","severity":"moderate","public_date":"2019-03-22T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1692300","bugzilla_description":"CVE-2019-9956 imagemagick: stack-based buffer overflow in function PopHexPixel in coders/ps.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9956.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-10714","severity":"moderate","public_date":"2019-03-04T00:00:00Z","advisories":[],"bugzilla":"1695477","bugzilla_description":"CVE-2019-10714 ImageMagick: out-of-bounds access in function LocaleLowercase in MagickCore/locale.c leads to SIGSEGV","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10714.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-11470","severity":"low","public_date":"2019-02-05T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1707770","bugzilla_description":"CVE-2019-11470 ImageMagick: denial of service in cineon parsing component","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-7398","severity":"low","public_date":"2019-01-17T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1672560","bugzilla_description":"CVE-2019-7398 ImageMagick: Memory leak in the WriteDIBImage function in coders/dib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7398.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-7397","severity":"low","public_date":"2019-01-17T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1672564","bugzilla_description":"CVE-2019-7397 ImageMagick: Memory leak in the WritePDFImage function in coders/pdf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7397.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-7396","severity":"low","public_date":"2019-01-17T00:00:00Z","advisories":[],"bugzilla":"1672567","bugzilla_description":"CVE-2019-7396 ImageMagick: Memory leak in the ReadSIXELImage function in coders/sixel.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7396.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-7395","severity":"low","public_date":"2019-01-17T00:00:00Z","advisories":[],"bugzilla":"1672576","bugzilla_description":"CVE-2019-7395 ImageMagick: Memory leak in the WritePSDChannel function in coders/psd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7395.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-7175","severity":"low","public_date":"2019-01-17T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1687436","bugzilla_description":"CVE-2019-7175 imagemagick: memory leak in function DecodeImage in coders/pcd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7175.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-20467","severity":"low","public_date":"2018-12-06T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1664845","bugzilla_description":"CVE-2018-20467 ImageMagick: infinite loop in coders/bmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20467.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-18544","severity":"low","public_date":"2018-10-19T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1642614","bugzilla_description":"CVE-2018-18544 ImageMagick: memory leak in WriteMSLImage of coders/msl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18544.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18023","severity":"low","public_date":"2018-10-05T00:00:00Z","advisories":[],"bugzilla":"1637186","bugzilla_description":"CVE-2018-18023 ImageMagick: heap-based buffer over-read in the SVGStripString function of coders/svg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18023.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18024","severity":"low","public_date":"2018-10-05T00:00:00Z","advisories":[],"bugzilla":"1637189","bugzilla_description":"CVE-2018-18024 ImageMagick: infinite loop in the ReadBMPImage function of the coders/bmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18024.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18025","severity":"low","public_date":"2018-10-05T00:00:00Z","advisories":[],"bugzilla":"1637191","bugzilla_description":"CVE-2018-18025 ImageMagick:  heap-based buffer over-read in the EncodeImage function of coders/pict.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18025.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16749","severity":"low","public_date":"2018-09-11T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1627916","bugzilla_description":"CVE-2018-16749 ImageMagick: reachable assertion in ReadOneJNGImage in coders/png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16749.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16750","severity":"low","public_date":"2018-09-11T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1627917","bugzilla_description":"CVE-2018-16750 ImageMagick: Memory leak in the formatIPTCfromBuffer function in coders/meta.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16644","severity":"low","public_date":"2018-08-27T00:00:00Z","advisories":[],"bugzilla":"1626606","bugzilla_description":"CVE-2018-16644 ImageMagick: improper check for length in ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16644.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16645","severity":"low","public_date":"2018-08-27T00:00:00Z","advisories":[],"bugzilla":"1626611","bugzilla_description":"CVE-2018-16645 ImageMagick: Out-of-memory ReadBMPImage of coders/bmp.c and ReadDIBImage of codes/dib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16645.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15607","severity":"low","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1622738","bugzilla_description":"CVE-2018-15607 ImageMagick: CPU Exhaustion via crafted input file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15607.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16412","severity":"low","public_date":"2018-08-19T00:00:00Z","advisories":[],"bugzilla":"1625429","bugzilla_description":"CVE-2018-16412 ImageMagick: heap-based buffer over-read in the ParseImageResourceBlocks function in coders/psd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16412.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16413","severity":"low","public_date":"2018-08-19T00:00:00Z","advisories":[],"bugzilla":"1625430","bugzilla_description":"CVE-2018-16413 ImageMagick: heap-based buffer over-read in the PushShortPixel function in MagickCore/quantum-private.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16413.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16323","severity":"low","public_date":"2018-07-24T00:00:00Z","advisories":[],"bugzilla":"1624964","bugzilla_description":"CVE-2018-16323 ImageMagick: Information leak in ReadXBMImage in coders/xbm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-16328","severity":"low","public_date":"2018-07-23T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1624955","bugzilla_description":"CVE-2018-16328 ImageMagick: NULL pointer dereference in CheckEventLogging function in MagickCore/log.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16328.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16329","severity":"low","public_date":"2018-07-23T00:00:00Z","advisories":[],"bugzilla":"1624957","bugzilla_description":"CVE-2018-16329 ImageMagick: NULL pointer dereference in  GetMagickProperty function in MagickCore/property.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16329.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-14551","severity":"low","public_date":"2018-07-20T00:00:00Z","advisories":[],"bugzilla":"1610620","bugzilla_description":"CVE-2018-14551 ImageMagick: Uninitialized variable in coders/mat.c:ReadMATImageV4() allows for memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14551.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16641","severity":"low","public_date":"2018-07-12T00:00:00Z","advisories":[],"bugzilla":"1626585","bugzilla_description":"CVE-2018-16641 ImageMagick: memory leak in TIFFWritePhotoshopLayers function in coders/tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16641.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16640","severity":"low","public_date":"2018-07-06T00:00:00Z","advisories":[],"bugzilla":"1626570","bugzilla_description":"CVE-2018-16640 ImageMagick: memory leak in ReadOneJNGImage function in coders/png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16640.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16643","severity":"low","public_date":"2018-07-05T00:00:00Z","advisories":[],"bugzilla":"1626599","bugzilla_description":"CVE-2018-16643 ImageMagick: missing check for fputc function in multiple files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16643.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-13153","severity":"low","public_date":"2018-07-04T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1598471","bugzilla_description":"CVE-2018-13153 ImageMagick: memory leak in the XMagickCommand function in MagickCore/animate.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13153.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2018-14434","severity":"low","public_date":"2018-07-04T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1609933","bugzilla_description":"CVE-2018-14434 ImageMagick: memory leak for a colormap in WriteMPCImage in coders/mpc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14434.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14435","severity":"low","public_date":"2018-07-04T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1609936","bugzilla_description":"CVE-2018-14435 ImageMagick: memory leak in DecodeImage in coders/pcd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2018-14436","severity":"low","public_date":"2018-07-04T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1609939","bugzilla_description":"CVE-2018-14436 ImageMagick: memory leak in ReadMIFFImage in coders/miff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14436.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14437","severity":"low","public_date":"2018-07-04T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1609942","bugzilla_description":"CVE-2018-14437 ImageMagick: memory leak in parse8BIM in coders/meta.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14437.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12599","severity":"moderate","public_date":"2018-06-19T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1594338","bugzilla_description":"CVE-2018-12599 ImageMagick: out of bounds write in ReadBMPImage and WriteBMPImage in coders/bmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12599.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-12600","severity":"moderate","public_date":"2018-06-19T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1594339","bugzilla_description":"CVE-2018-12600 ImageMagick: out of bounds write ReadDIBImage and WriteDIBImage in coders/dib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12600.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16642","severity":"moderate","public_date":"2018-06-01T00:00:00Z","advisories":[],"bugzilla":"1626591","bugzilla_description":"CVE-2018-16642 ImageMagick: out-of-bounds write in InsertRow function in coders/cut.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16642.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-11625","severity":"low","public_date":"2018-05-30T00:00:00Z","advisories":[],"bugzilla":"1584904","bugzilla_description":"CVE-2018-11625 ImageMagick: heap-based buffer over-read in SetGrayscaleImage in the quantize.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11625.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11624","severity":"low","public_date":"2018-05-29T00:00:00Z","advisories":[],"bugzilla":"1584898","bugzilla_description":"CVE-2018-11624 ImageMagick: use after free in ReadMATImage function in coders/mat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11624.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10177","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1572044","bugzilla_description":"CVE-2018-10177 ImageMagick: Infinite loop in coders/png.c:ReadOneMNGImage() allows attackers to cause a denial of service via crafted MNG file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10177.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9133","severity":"low","public_date":"2018-03-29T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1563875","bugzilla_description":"CVE-2018-9133 ImageMagick: excessive iteration in the DecodeLabImage and EncodeLabImage functions in coders/tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9133.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10805","severity":"low","public_date":"2018-03-24T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1577398","bugzilla_description":"CVE-2018-10805 ImageMagick: Memory leak in ReadYCBCRImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10805.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10804","severity":"low","public_date":"2018-03-24T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1577399","bugzilla_description":"CVE-2018-10804 ImageMagick: Memory leak in WriteTIFFImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18016","severity":"low","public_date":"2018-03-24T00:00:00Z","advisories":[],"bugzilla":"1636579","bugzilla_description":"CVE-2018-18016 ImageMagick: memory leak in WritePCXImage in coders/pcx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18016.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17966","severity":"low","public_date":"2018-03-24T00:00:00Z","advisories":[],"bugzilla":"1636587","bugzilla_description":"CVE-2018-17966 ImageMagick: memory leak in WritePDBImage in coders/pdb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17966.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17967","severity":"low","public_date":"2018-03-24T00:00:00Z","advisories":[],"bugzilla":"1636590","bugzilla_description":"CVE-2018-17967 ImageMagick: memory leak in ReadBGRImage in coders/bgr.c.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17967.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17965","severity":"low","public_date":"2018-03-24T00:00:00Z","advisories":[],"bugzilla":"1636592","bugzilla_description":"CVE-2018-17965 ImageMagick: memory leak in WriteSGIImage in coders/sgi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17965.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8804","severity":"low","public_date":"2018-03-15T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1559892","bugzilla_description":"CVE-2018-8804 ImageMagick: double free in WriteEPTImage function in coders/ept.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8960","severity":"low","public_date":"2018-03-13T00:00:00Z","advisories":[],"bugzilla":"1561190","bugzilla_description":"CVE-2018-8960 ImageMagick: heap-buffer-overflow in ReadTIFFImage function in coders/tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8960.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9135","severity":"low","public_date":"2018-03-02T00:00:00Z","advisories":[],"bugzilla":"1563889","bugzilla_description":"CVE-2018-9135 ImageMagick: Heap-based buffer over-read in coders/webp.c:IsWEBPImageLossless()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7443","severity":"low","public_date":"2018-02-23T00:00:00Z","advisories":[],"bugzilla":"1549668","bugzilla_description":"CVE-2018-7443 ImageMagick: Memory allocation failure in ReadTIFFImage function in memory.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7443.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7470","severity":"low","public_date":"2018-02-23T00:00:00Z","advisories":[],"bugzilla":"1549786","bugzilla_description":"CVE-2018-7470 ImageMagick: denial of service (DoS) in IsWEBPImageLossless function in coders/webp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7470.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6876","severity":"low","public_date":"2018-02-07T00:00:00Z","advisories":[],"bugzilla":"1544777","bugzilla_description":"CVE-2018-6876 ImageMagick: Stack-based buffer under-read in ole/oleprop.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6876.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6405","severity":"low","public_date":"2018-01-31T00:00:00Z","advisories":[],"bugzilla":"1541866","bugzilla_description":"CVE-2018-6405 ImageMagick: Memory leak in coders/dcm.c:ReadDCMImage can allow for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6405.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6930","severity":"low","public_date":"2018-01-31T00:00:00Z","advisories":[],"bugzilla":"1544789","bugzilla_description":"CVE-2018-6930 ImageMagick: Stack-based buffer over-read in the ComputeResizeImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6930.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11251","severity":"low","public_date":"2018-01-23T00:00:00Z","advisories":[],"bugzilla":"1581493","bugzilla_description":"CVE-2018-11251 ImageMagick: heap-based buffer over-read in ReadSUNImage in coders/sun.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11251.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5357","severity":"moderate","public_date":"2018-01-15T00:00:00Z","advisories":[],"bugzilla":"1534382","bugzilla_description":"CVE-2018-5357 ImageMagick: memory leak in coders/dcm.c:ReadDCImage can cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5357.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-5358","severity":"moderate","public_date":"2018-01-12T00:00:00Z","advisories":[],"bugzilla":"1534380","bugzilla_description":"CVE-2018-5358 ImageMagick: memory leak in coders/json.c:EncodeImageAttributes could cause crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5358.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-5246","severity":"low","public_date":"2018-01-04T00:00:00Z","advisories":[],"bugzilla":"1533546","bugzilla_description":"CVE-2018-5246 ImageMagick: Memory Leak in ReadPATTERNImage in coders/pattern.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5246.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-5247","severity":"low","public_date":"2018-01-04T00:00:00Z","advisories":[],"bugzilla":"1533553","bugzilla_description":"CVE-2018-5247 ImageMagick: Memory Leak in ReadRLAImage in coders/rla.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5247.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-5248","severity":"low","public_date":"2018-01-04T00:00:00Z","advisories":[],"bugzilla":"1533568","bugzilla_description":"CVE-2018-5248 ImageMagick: Heap-based buffer over-read in the ReadSIXELImage function in coders/sixel.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5248.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-11655","severity":"low","public_date":"2018-01-04T00:00:00Z","advisories":[],"bugzilla":"1588165","bugzilla_description":"CVE-2018-11655 ImageMagick: memory leak in GetImagePixelCache function in MagickCore/cache.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11655.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-11656","severity":"low","public_date":"2018-01-04T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1588170","bugzilla_description":"CVE-2018-11656 ImageMagick: memory leak in ReadDCMImage function in coders/dcm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11656.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-1000445","severity":"moderate","public_date":"2018-01-02T00:00:00Z","advisories":[],"bugzilla":"1531351","bugzilla_description":"CVE-2017-1000445 imagemagick: NULL pointer dereference in MagickCore component can lead to a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000445.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-18008","severity":"low","public_date":"2017-12-27T00:00:00Z","advisories":[],"bugzilla":"1531257","bugzilla_description":"CVE-2017-18008 ImageMagick: Memory Leak in ReadPWPImage in coders/pwp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18008.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-17934","severity":"low","public_date":"2017-12-26T00:00:00Z","advisories":[],"bugzilla":"1529585","bugzilla_description":"CVE-2017-17934 ImageMagick:  memory leaks in coders/msl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17934.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-18272","severity":"low","public_date":"2017-12-25T00:00:00Z","advisories":[],"bugzilla":"1581485","bugzilla_description":"CVE-2017-18272 ImageMagick: use-after-free in ReadOneMNGImage function in coders/png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18272.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17879","severity":"low","public_date":"2017-12-24T00:00:00Z","advisories":[],"bugzilla":"1529170","bugzilla_description":"CVE-2017-17879 ImageMagick: Heap-based buffer over-read in ReadOneMNGImage function in coders/png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17879.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17880","severity":"low","public_date":"2017-12-22T00:00:00Z","advisories":[],"bugzilla":"1529316","bugzilla_description":"CVE-2017-17880 ImageMagick: stack-based buffer over-read in WriteWEBPImage in coders/webp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17880.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-17914","severity":"low","public_date":"2017-12-22T00:00:00Z","advisories":[],"bugzilla":"1529550","bugzilla_description":"CVE-2017-17914 ImageMagick: denial of service in the function ReadOnePNGImage in coders/png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17914.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18271","severity":"low","public_date":"2017-12-22T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1581486","bugzilla_description":"CVE-2017-18271 ImageMagick: infinite loop in ReadMIFFImage function in coders/miff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18271.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18273","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1581489","bugzilla_description":"CVE-2017-18273 ImageMagick: infinite loop ReadTXTImage  in function in coders/txt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18273.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17887","severity":"low","public_date":"2017-12-20T00:00:00Z","advisories":[],"bugzilla":"1529511","bugzilla_description":"CVE-2017-17887  ImageMagick: memory leak in the function GetImagePixelCache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17887.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17884","severity":"low","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1529382","bugzilla_description":"CVE-2017-17884 ImageMagick: memory leak in function WriteOnePNGImage in coders/png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17884.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18022","severity":"low","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1533612","bugzilla_description":"CVE-2017-18022 ImageMagick: Memory Leak in MontageImageCommand function in MagickWand/montage.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18022.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-17680","severity":"low","public_date":"2017-12-14T00:00:00Z","advisories":[],"bugzilla":"1526069","bugzilla_description":"CVE-2017-17680 ImageMagick: Memory leak in ReadXPMImage function in coders/xpm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17680.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17681","severity":"low","public_date":"2017-12-14T00:00:00Z","advisories":[],"bugzilla":"1526073","bugzilla_description":"CVE-2017-17681 ImageMagick: Infinite loop in ReadPSDChannelZip function in coders/psd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17681.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17682","severity":"low","public_date":"2017-12-14T00:00:00Z","advisories":[],"bugzilla":"1526077","bugzilla_description":"CVE-2017-17682 ImageMagick: Resource exhaustion in ExtractPostscript function in coders/wpg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17682.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17881","severity":"low","public_date":"2017-11-24T00:00:00Z","advisories":[],"bugzilla":"1529353","bugzilla_description":"CVE-2017-17881 ImageMagick: memory leak vulnerability in the function ReadMATImage in coders/mat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17881.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17882","severity":"low","public_date":"2017-11-24T00:00:00Z","advisories":[],"bugzilla":"1529369","bugzilla_description":"CVE-2017-17882 ImageMagick: Memory leak in function ReadXPMImage in coders/xpm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17883","severity":"low","public_date":"2017-11-24T00:00:00Z","advisories":[],"bugzilla":"1529374","bugzilla_description":"CVE-2017-17883 ImageMagick: memory leak in the function ReadPGXImage in coders/pgx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17883.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17885","severity":"low","public_date":"2017-11-24T00:00:00Z","advisories":[],"bugzilla":"1529387","bugzilla_description":"CVE-2017-17885 ImageMagick: memory leak in the function ReadPICTImage in coders/pict.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17886","severity":"low","public_date":"2017-11-22T00:00:00Z","advisories":[],"bugzilla":"1529503","bugzilla_description":"CVE-2017-17886 ImageMagick: memory leak in the function ReadPSDChannelZip in coders/psd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17886.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17504","severity":"low","public_date":"2017-11-21T00:00:00Z","advisories":[],"bugzilla":"1524902","bugzilla_description":"CVE-2017-17504 ImageMagick: Heap-based buffer overflow in Magick_png_read_raw_profile","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17504.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000476","severity":"low","public_date":"2017-11-17T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1532845","bugzilla_description":"CVE-2017-1000476 ImageMagick: CPU exhaustion vulnerability in function ReadDDSInfo in coders/dds.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000476.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17499","severity":"low","public_date":"2017-11-15T00:00:00Z","advisories":[],"bugzilla":"1524900","bugzilla_description":"CVE-2017-17499 ImageMagick: Use-after-free in Magick::Image::read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17499.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16546","severity":"low","public_date":"2017-11-04T00:00:00Z","advisories":[],"bugzilla":"1513940","bugzilla_description":"CVE-2017-16546 ImageMagick: Invalid memory allocation in the ReadWPGImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16546.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16352","severity":"low","public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1512043","bugzilla_description":"CVE-2017-16352 ImageMagick, GraphicsMagick: Heap based buffer over-write in DescribeImage() function of the magick/describe.c or magick/image.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16352.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16353","severity":"low","public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1512047","bugzilla_description":"CVE-2017-16353 ImageMagick, GraphicsMagick: memory information disclosure in DescribeImage function in magick/describe.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16353.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-15281","severity":"low","public_date":"2017-10-09T00:00:00Z","advisories":[],"bugzilla":"1510427","bugzilla_description":"CVE-2017-15281 ImageMagick: Conditional statement depends on unitialized value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15281.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18209","severity":"low","public_date":"2017-09-30T00:00:00Z","advisories":[],"bugzilla":"1552312","bugzilla_description":"CVE-2017-18209 ImageMagick: NULL pointer dereference in GetOpenCLCachedFilesDirectory function in magick/opencl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18210","severity":"low","public_date":"2017-09-30T00:00:00Z","advisories":[],"bugzilla":"1552316","bugzilla_description":"CVE-2017-18210 ImageMagick: NULL pointer dereference in BenchmarkOpenCLDevices in MagickCore/opencl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18210.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18211","severity":"low","public_date":"2017-09-30T00:00:00Z","advisories":[],"bugzilla":"1552320","bugzilla_description":"CVE-2017-18211 ImageMagick: NULL pointer dereference in saveBinaryCLProgram in magick/opencl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18250","severity":"low","public_date":"2017-09-30T00:00:00Z","advisories":[],"bugzilla":"1561738","bugzilla_description":"CVE-2017-18250 ImageMagick: NULL pointer dereference in LogOpenCLBuildFailure function in MagickCore/opencl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18250.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18251","severity":"low","public_date":"2017-09-30T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1561741","bugzilla_description":"CVE-2017-18251 ImageMagick: memory leak in ReadPCDImage function in coders/pcd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18251.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18252","severity":"low","public_date":"2017-09-30T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1561742","bugzilla_description":"CVE-2017-18252 ImageMagick: assertion failure in MogrifyImageList function in MagickWand/mogrify.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18252.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18253","severity":"low","public_date":"2017-09-30T00:00:00Z","advisories":[],"bugzilla":"1561743","bugzilla_description":"CVE-2017-18253 ImageMagick: NULL pointer dereference LoadOpenCLDevices function in MagickCore/opencl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18253.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18254","severity":"low","public_date":"2017-09-30T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1561744","bugzilla_description":"CVE-2017-18254 ImageMagick: memory leak in WriteGIFImage function in coders/gif.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18254.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14739","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1500240","bugzilla_description":"CVE-2017-14739 ImageMagick: NULL pointer dereference in the AcquireResampleFilterThreadSet function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14739.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14989","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1500348","bugzilla_description":"CVE-2017-14989 ImageMagick: Use-after-free in RendererFreetype","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14989.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18231","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1558746","bugzilla_description":"CVE-2017-18231 GraphicsMagick: NULL pointer dereference in ReadEnhMetaFile function in coders/emf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14684","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1500013","bugzilla_description":"CVE-2017-14684 ImageMagick: Memory leak in the function ReadVIPSImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14684.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14741","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1500241","bugzilla_description":"CVE-2017-14741 ImageMagick: Infinite loop in the ReadCAPTIONImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14741.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14607","severity":"low","public_date":"2017-09-20T00:00:00Z","advisories":[],"bugzilla":"1496592","bugzilla_description":"CVE-2017-14607 ImageMagick: Out-of-bounds read in ReadTIFFImage in coders/tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14607.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14682","severity":"low","public_date":"2017-09-18T00:00:00Z","advisories":[],"bugzilla":"1500009","bugzilla_description":"CVE-2017-14682 ImageMagick: Heap buffer overflow in the GetNextToken function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14682.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14505","severity":"low","public_date":"2017-09-17T00:00:00Z","advisories":[],"bugzilla":"1494540","bugzilla_description":"CVE-2017-14505 ImageMagick: Null pointer dereference in DrawGetStrokeDashArray function in wand/drawing-wand.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14505.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15217","severity":"low","public_date":"2017-09-15T00:00:00Z","advisories":[],"bugzilla":"1500680","bugzilla_description":"CVE-2017-15217 ImageMagick: Memory leak in ReadSGIImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15217.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15218","severity":"low","public_date":"2017-09-15T00:00:00Z","advisories":[],"bugzilla":"1500682","bugzilla_description":"CVE-2017-15218 ImageMagick: Memory leak in ReadOneJNGImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15218.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15033","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1500423","bugzilla_description":"CVE-2017-15033 ImageMagick: Memory leak in ReadYUVImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15033.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15032","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1500422","bugzilla_description":"CVE-2017-15032 ImageMagick: Memory leak in ReadYCBCRImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15032.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14400","severity":"low","public_date":"2017-09-11T00:00:00Z","advisories":[],"bugzilla":"1491280","bugzilla_description":"CVE-2017-14400 ImageMagick: NULL pointer dereference in the GetVirtualPixels function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14400.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14324","severity":"low","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1491276","bugzilla_description":"CVE-2017-14324 ImageMagick: Memory leak in the ReadMPCImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14324.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14325","severity":"low","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1491345","bugzilla_description":"CVE-2017-14325 ImageMagick: Memory leak in the PersistPixelCache function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14325.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14326","severity":"low","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1491347","bugzilla_description":"CVE-2017-14326 ImageMagick: Memory leak in the ReadMATImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14326.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14172","severity":"low","public_date":"2017-09-07T00:00:00Z","advisories":[],"bugzilla":"1489700","bugzilla_description":"CVE-2017-14172 ImageMagick: Lack of an EOF check in ReadPSImage() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14172.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14173","severity":"low","public_date":"2017-09-07T00:00:00Z","advisories":[],"bugzilla":"1489702","bugzilla_description":"CVE-2017-14173 ImageMagick: Integer overflow in the function ReadTXTImage()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14173.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14174","severity":"low","public_date":"2017-09-07T00:00:00Z","advisories":[],"bugzilla":"1489705","bugzilla_description":"CVE-2017-14174 ImageMagick: Lack of EOF check in the ReadPSDLayersInternal() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14174.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14175","severity":"low","public_date":"2017-09-07T00:00:00Z","advisories":[],"bugzilla":"1489706","bugzilla_description":"CVE-2017-14175 ImageMagick: Lack of EOF check in the ReadXBMImage() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14175.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18028","severity":"low","public_date":"2017-09-07T00:00:00Z","advisories":[],"bugzilla":"1534736","bugzilla_description":"CVE-2017-18028 ImageMagick: memory exhaustion in the function ReadTIFFImage in coders/tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18028.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14224","severity":"low","public_date":"2017-09-06T00:00:00Z","advisories":[],"bugzilla":"1491251","bugzilla_description":"CVE-2017-14224 ImageMagick: Heap-based buffer overflow in the WritePCXImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14224.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18027","severity":"low","public_date":"2017-09-06T00:00:00Z","advisories":[],"bugzilla":"1534738","bugzilla_description":"CVE-2017-18027 ImageMagick: memory leak vulnerability in the function ReadMATImage in coders/mat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18027.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14139","severity":"low","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1488430","bugzilla_description":"CVE-2017-14139 ImageMagick, GraphicsMagick: Memory leak in WriteMSLImage function in coders/msl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14137","severity":"low","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1488436","bugzilla_description":"CVE-2017-14137 ImageMagick: Excessive memory allocation in ReadWEBPImage function in coders/webp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14137.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14138","severity":"low","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1488438","bugzilla_description":"CVE-2017-14138 ImageMagick: Memory leak in ReadWEBPImage function in coders/webp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14138.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14532","severity":"low","public_date":"2017-09-03T00:00:00Z","advisories":[],"bugzilla":"1499672","bugzilla_description":"CVE-2017-14532 ImageMagick: NULL pointer dereference in the TIFFIgnoreTags function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14532.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14624","severity":"low","public_date":"2017-09-03T00:00:00Z","advisories":[],"bugzilla":"1499912","bugzilla_description":"CVE-2017-14624 ImageMagick: NULL pointer dereference in the PostscriptDelegateMessage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14624.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14625","severity":"low","public_date":"2017-09-03T00:00:00Z","advisories":[],"bugzilla":"1499915","bugzilla_description":"CVE-2017-14625 ImageMagick: NULL pointer dereference in the sixel_output_create function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14625.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14626","severity":"low","public_date":"2017-09-03T00:00:00Z","advisories":[],"bugzilla":"1499917","bugzilla_description":"CVE-2017-14626 ImageMagick: NULL pointer dereference in the sixel_decode function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14626.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15015","severity":"low","public_date":"2017-09-03T00:00:00Z","advisories":[],"bugzilla":"1500413","bugzilla_description":"CVE-2017-15015 ImageMagick: NULL pointer dereference in PDFDelegateMessage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15015.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15016","severity":"low","public_date":"2017-09-03T00:00:00Z","advisories":[],"bugzilla":"1500414","bugzilla_description":"CVE-2017-15016 ImageMagick: NULL pointer dereference in ReadEnhMetaFile","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15016.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15017","severity":"low","public_date":"2017-09-03T00:00:00Z","advisories":[],"bugzilla":"1500415","bugzilla_description":"CVE-2017-15017 ImageMagick: NULL pointer dereference in ReadOneMNGImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15017.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14531","severity":"low","public_date":"2017-09-02T00:00:00Z","advisories":[],"bugzilla":"1499670","bugzilla_description":"CVE-2017-14531 ImageMagick: Memory exhaustion in the ReadSUNImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14531.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12875","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":[],"bugzilla":"1487752","bugzilla_description":"CVE-2017-12875 ImageMagick: Resource exhaustion in WritePixelCachePixels function in coders/xcf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12875.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12693","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":[],"bugzilla":"1488445","bugzilla_description":"CVE-2017-12693 ImageMagick: Memory exhaustion in ReadBMPImage function in coders/bmp.c in ImageMagick","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12693.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12692","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":[],"bugzilla":"1488449","bugzilla_description":"CVE-2017-12692 ImageMagick: Memory exhaustion in ReadVIFFImage function in coders/viff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12692.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12691","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":[],"bugzilla":"1488450","bugzilla_description":"CVE-2017-12691 ImageMagick: Memory exhaustion in ReadOneLayer function in coders/xcf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12691.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14248","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":[],"bugzilla":"1491254","bugzilla_description":"CVE-2017-14248 ImageMagick: Heap-based buffer over-read in the SampleImage() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14248.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14060","severity":"low","public_date":"2017-08-31T00:00:00Z","advisories":[],"bugzilla":"1488979","bugzilla_description":"CVE-2017-14060 ImageMagick: NULL pointer dereference in ReadCUTImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14060.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14249","severity":"low","public_date":"2017-08-31T00:00:00Z","advisories":[],"bugzilla":"1491260","bugzilla_description":"CVE-2017-14249 ImageMagick: Division by zero in the GetPixelCacheTileSize function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14249.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13768","severity":"low","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1487679","bugzilla_description":"CVE-2017-13768 ImageMagick: NULL pointer dereference in IdentifyImage function in MagickCore/identify.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13768.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13769","severity":"moderate","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1487714","bugzilla_description":"CVE-2017-13769 ImageMagick: Improper input validation in WriteTHUMBNAILImage function in coders/thumbnail.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13769.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-13758","severity":"low","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1487763","bugzilla_description":"CVE-2017-13758 ImageMagick: Heap-based buffer overflow in the TracePoint() function in MagickCore/draw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13758.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13066","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1484491","bugzilla_description":"CVE-2017-13066 ImageMagick, GraphicsMagick: Memory leak in CloneImage function in magick/image.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13066.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13131","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1486770","bugzilla_description":"CVE-2017-13131 ImageMagick: Memory leak in ReadMIFFImage function in coders/miff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13132","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1486776","bugzilla_description":"CVE-2017-13132 ImageMagick: Assertion failure WriteBlobStream function in MagickCore/blob.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13133","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1486778","bugzilla_description":"CVE-2017-13133 ImageMagick: Improper input validadion in load_level function in coders/xcf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13133.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13134","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1486779","bugzilla_description":"CVE-2017-13134 ImageMagick: heap-based buffer over-read in SFWScan function in coders/sfw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13134.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13139","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1486784","bugzilla_description":"CVE-2017-13139 ImageMagick: Out of bounds read in ReadOneMNGImage function in coders/png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13140","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1486792","bugzilla_description":"CVE-2017-13140 ImageMagick: Denial of service in ReadOnePNGImage function in coders/png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13140.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13141","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1486793","bugzilla_description":"CVE-2017-13141 ImageMagick: Memory leak in ReadOnePNGImage function in coders/png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13141.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13142","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1486795","bugzilla_description":"CVE-2017-13142 ImageMagick: Improper validation of short files in coders/png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13142.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13143","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1486799","bugzilla_description":"CVE-2017-13143 ImageMagick: Initialized data use in ReadMATImage function in coders/mat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13143.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13144","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1486802","bugzilla_description":"CVE-2017-13144 ImageMagick: Improper size validation in ReadJPEGImage function in error/jpeg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13144.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13145","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1486804","bugzilla_description":"CVE-2017-13145 ImageMagick: Improper input validation in ReadJP2Image function in coders/jp2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13145.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13146","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1486806","bugzilla_description":"CVE-2017-13146 ImageMagick: Memory leak in the ReadMATImage function in coders/mat.c.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13146.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14528","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1499664","bugzilla_description":"CVE-2017-14528 ImageMagick: Use-after-free in the TIFFSetProfiles function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14528.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18029","severity":"low","public_date":"2017-08-22T00:00:00Z","advisories":[],"bugzilla":"1534732","bugzilla_description":"CVE-2017-18029 ImageMagick: memory leak in the function ReadMATImage in coders/mat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18029.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12983","severity":"low","public_date":"2017-08-18T00:00:00Z","advisories":[],"bugzilla":"1487238","bugzilla_description":"CVE-2017-12983 ImageMagick: Heap-based buffer overflow in the ReadSFWImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12983.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13062","severity":"low","public_date":"2017-08-11T00:00:00Z","advisories":[],"bugzilla":"1487263","bugzilla_description":"CVE-2017-13062 ImageMagick: Memory leak in the formatIPTC function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13062.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12876","severity":"low","public_date":"2017-08-10T00:00:00Z","advisories":[],"bugzilla":"1487115","bugzilla_description":"CVE-2017-12876 ImageMagick: Heap-based buffer overflow in enhance.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12876.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12877","severity":"low","public_date":"2017-08-10T00:00:00Z","advisories":[],"bugzilla":"1487118","bugzilla_description":"CVE-2017-12877 ImageMagick: Use-after-free vulnerability in the DestroyImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12877.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13058","severity":"low","public_date":"2017-08-10T00:00:00Z","advisories":[],"bugzilla":"1487258","bugzilla_description":"CVE-2017-13058 ImageMagick: Memory leak in the WritePCXImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13058.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13059","severity":"low","public_date":"2017-08-10T00:00:00Z","advisories":[],"bugzilla":"1487260","bugzilla_description":"CVE-2017-13059 ImageMagick: Memory leak in the WriteOneJNGImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13059.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12805","severity":"low","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1708521","bugzilla_description":"CVE-2017-12805 ImageMagick: memory exhaustion in function ReadTIFFImage causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-12666","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1483068","bugzilla_description":"CVE-2017-12666 ImageMagick: Memory leak in WriteINLINEImage function in coders/inline.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12666.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12643","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1483074","bugzilla_description":"CVE-2017-12643 ImageMagick: Memory exhaustion in ReadOneJNGImage function in coders\\png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12643.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12664","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1483082","bugzilla_description":"CVE-2017-12664 ImageMagick: Memory leak in WritePALMImage function in coders/palm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12664.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12641","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1483091","bugzilla_description":"CVE-2017-12641 ImageMagick: Memory leak in ReadOneJNGImage function in coders\\png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12641.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12665","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1483102","bugzilla_description":"CVE-2017-12665 ImageMagick: Memory leak vulnerability in WritePICTImage function in coders/pict.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12665.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12640","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1483103","bugzilla_description":"CVE-2017-12640 ImageMagick: Out-of-bounds read in ReadOneMNGImage function in coders/png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12640.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12662","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1483104","bugzilla_description":"CVE-2017-12662 ImageMagick: Memory leak in WritePDFImage function in coders/pdf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12662.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12663","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1483107","bugzilla_description":"CVE-2017-12663 ImageMagick: Memory leak in WriteMAPImage function in coders/map.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12663.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12654","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1483110","bugzilla_description":"CVE-2017-12654 ImageMagick: Memory leak in ReadPICTImage function in coders/pict.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12654.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12642","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1483111","bugzilla_description":"CVE-2017-12642 ImageMagick: Memory leak in ReadMPCImage function in coders/mpc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12642.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12644","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1483116","bugzilla_description":"CVE-2017-12644 ImageMagick: Memory leak in ReadDCMImage function in coders/dcm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12644.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12806","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1708517","bugzilla_description":"CVE-2017-12806 ImageMagick: memory exhaustion in function format8BIM causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12806.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-12587","severity":"low","public_date":"2017-08-06T00:00:00Z","advisories":[],"bugzilla":"1483574","bugzilla_description":"CVE-2017-12587 ImageMagick: Resource exhaustion in ReadPWPImage function in coders\\pwp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12587.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14341","severity":"low","public_date":"2017-08-06T00:00:00Z","advisories":[],"bugzilla":"1491262","bugzilla_description":"CVE-2017-14341 ImageMagick: Infinite loop in the ReadWPGImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14341.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14342","severity":"low","public_date":"2017-08-05T00:00:00Z","advisories":[],"bugzilla":"1491263","bugzilla_description":"CVE-2017-14342 ImageMagick: Memory exhaustion in the ReadWPGImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14342.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14343","severity":"low","public_date":"2017-08-05T00:00:00Z","advisories":[],"bugzilla":"1491267","bugzilla_description":"CVE-2017-14343 ImageMagick: Memory leak in the ReadXCFImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14343.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14533","severity":"low","public_date":"2017-08-05T00:00:00Z","advisories":[],"bugzilla":"1499674","bugzilla_description":"CVE-2017-14533 ImageMagick: Memory leak in the ReadMATImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14533.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12428","severity":"low","public_date":"2017-08-04T00:00:00Z","advisories":[],"bugzilla":"1482628","bugzilla_description":"CVE-2017-12428 ImageMagick: Memory leak in the function ReadWMFImage in coders/wmf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12428.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12431","severity":"low","public_date":"2017-08-04T00:00:00Z","advisories":[],"bugzilla":"1482647","bugzilla_description":"CVE-2017-12431 ImageMagick: User-after-free in ReadWMFImage in coders/wmf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12431.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12430","severity":"low","public_date":"2017-08-04T00:00:00Z","advisories":[],"bugzilla":"1482650","bugzilla_description":"CVE-2017-12430 GraphicsMagick, ImageMagick: Memory exhaustion in ReadMPCImage in coders/mpc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12430.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12427","severity":"low","public_date":"2017-08-04T00:00:00Z","advisories":[],"bugzilla":"1482652","bugzilla_description":"CVE-2017-12427 GraphicsMagick, ImageMagick: Mermory leak in ProcessMSLScript coders/msl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12427.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12432","severity":"low","public_date":"2017-08-04T00:00:00Z","advisories":[],"bugzilla":"1482653","bugzilla_description":"CVE-2017-12432 ImageMagick: Memory exhaustion in ReadPCXImage in coders/pcx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12432.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12429","severity":"low","public_date":"2017-08-04T00:00:00Z","advisories":[],"bugzilla":"1482654","bugzilla_description":"CVE-2017-12429 ImageMagick: Memory exhaustion in ReadMIFFImage in coders/miff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12429.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12433","severity":"low","public_date":"2017-08-04T00:00:00Z","advisories":[],"bugzilla":"1483127","bugzilla_description":"CVE-2017-12433 ImageMagick: Memory leak in ReadPESImage function in coders/pes.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12433.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12434","severity":"low","public_date":"2017-08-04T00:00:00Z","advisories":[],"bugzilla":"1483130","bugzilla_description":"CVE-2017-12434 ImageMagick: Missing NULL check in ReadMATImage function in coders/mat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12434.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12435","severity":"low","public_date":"2017-08-04T00:00:00Z","advisories":[],"bugzilla":"1483131","bugzilla_description":"CVE-2017-12435 ImageMagick: Memory exhaustion in ReadSUNImage function in coders/sun.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12435.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13060","severity":"low","public_date":"2017-08-04T00:00:00Z","advisories":[],"bugzilla":"1487261","bugzilla_description":"CVE-2017-13060 ImageMagick: Memory leak in the ReadMATImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13060.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13061","severity":"low","public_date":"2017-08-04T00:00:00Z","advisories":[],"bugzilla":"1487262","bugzilla_description":"CVE-2017-13061 ImageMagick: Length-validation vulnerability was found in the function ReadPSDLayersInternal function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13061.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12418","severity":"low","public_date":"2017-08-03T00:00:00Z","advisories":[],"bugzilla":"1482625","bugzilla_description":"CVE-2017-12418 ImageMagick: Memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12418.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11750","severity":"low","public_date":"2017-07-30T00:00:00Z","advisories":[],"bugzilla":"1477062","bugzilla_description":"CVE-2017-11750 ImageMagick: NULL pointer dereference in ReadOneJNGImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11750.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11751","severity":"low","public_date":"2017-07-30T00:00:00Z","advisories":[],"bugzilla":"1477063","bugzilla_description":"CVE-2017-11751 ImageMagick: Memory leak in WritePICONImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11751.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11755","severity":"low","public_date":"2017-07-30T00:00:00Z","advisories":[],"bugzilla":"1477069","bugzilla_description":"CVE-2017-11755 ImageMagick: Memory leak in WritePICONImage function via mishandled AcquireSemaphoreInfo call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11752","severity":"low","public_date":"2017-07-29T00:00:00Z","advisories":[],"bugzilla":"1477064","bugzilla_description":"CVE-2017-11752 ImageMagick: Memory leak in ReadMAGICKImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11752.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11753","severity":"low","public_date":"2017-07-29T00:00:00Z","advisories":[],"bugzilla":"1477066","bugzilla_description":"CVE-2017-11753 ImageMagick: heap-based buffer over-read in GetImageDepth function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11753.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11754","severity":"low","public_date":"2017-07-29T00:00:00Z","advisories":[],"bugzilla":"1477068","bugzilla_description":"CVE-2017-11754 ImageMagick: Memory leak in WritePICONImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11754.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11724","severity":"low","public_date":"2017-07-27T00:00:00Z","advisories":[],"bugzilla":"1477058","bugzilla_description":"CVE-2017-11724 ImageMagick: Memory leaks in ReadMATImage function involving the quantum_info and clone_info data structures","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11724.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11640","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475463","bugzilla_description":"CVE-2017-11640 ImageMagick: NULL pointer dereference in WritePTIFImage() in coders/tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11640.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11639","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475470","bugzilla_description":"CVE-2017-11639 ImageMagick: heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11644","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475485","bugzilla_description":"CVE-2017-11644 ImageMagick: Memory-Leak in ReadMATImage() coders/mat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11644.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12676","severity":"low","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1484874","bugzilla_description":"CVE-2017-12676 ImageMagick: Memory leak in the function ReadOneJNGImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12676.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12672","severity":"low","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1484875","bugzilla_description":"CVE-2017-12672 ImageMagick: Memory leak in the function ReadMATImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12672.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12671","severity":"low","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1484877","bugzilla_description":"CVE-2017-12671 ImageMagick: Invalid free in the function RelinquishMagickMemory","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12671.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12675","severity":"low","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1484880","bugzilla_description":"CVE-2017-12675 ImageMagick: Memory leak in the function ReadImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12675.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12673","severity":"low","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1484882","bugzilla_description":"CVE-2017-12673 ImageMagick: Memory leak in the function ReadOneMNGImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12673.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11478","severity":"low","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1474363","bugzilla_description":"CVE-2017-11478 ImageMagick: Infinite loop in ReadOneDJVUImage function in coders/djvu.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11478.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11446","severity":"low","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1474391","bugzilla_description":"CVE-2017-11446 ImageMagick: Infinite loop in ReadPESImage function in coders/pes.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11446.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12670","severity":"low","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1484884","bugzilla_description":"CVE-2017-12670 ImageMagick: Assertion failure in the function DestroyImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12670.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12563","severity":"low","public_date":"2017-07-23T00:00:00Z","advisories":[],"bugzilla":"1484867","bugzilla_description":"CVE-2017-12563 ImageMagick: Memory exhaustion in the function ReadPSDImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12563.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12564","severity":"low","public_date":"2017-07-23T00:00:00Z","advisories":[],"bugzilla":"1484868","bugzilla_description":"CVE-2017-12564 ImageMagick: Memory leak in the function ReadMATImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12564.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12565","severity":"low","public_date":"2017-07-23T00:00:00Z","advisories":[],"bugzilla":"1484869","bugzilla_description":"CVE-2017-12565 ImageMagick: Memory leak in the function ReadOneJNGImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12565.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12566","severity":"low","public_date":"2017-07-23T00:00:00Z","advisories":[],"bugzilla":"1484870","bugzilla_description":"CVE-2017-12566 ImageMagick: Memory leak in the function ReadMVGImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12566.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12674","severity":"low","public_date":"2017-07-23T00:00:00Z","advisories":[],"bugzilla":"1484879","bugzilla_description":"CVE-2017-12674 ImageMagick: Resource exhaustion in the function ReadPDBImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12674.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13658","severity":"low","public_date":"2017-07-23T00:00:00Z","advisories":[],"bugzilla":"1487277","bugzilla_description":"CVE-2017-13658 ImageMagick: Missing NULL check in the ReadMATImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13658.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10928","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1473717","bugzilla_description":"CVE-2017-10928 ImageMagick: heap-based buffer over-read in the GetNextToken function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10928.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11141","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1473757","bugzilla_description":"CVE-2017-11141 ImageMagick: Memory exhaustion in ReadMATImage function in coders\\mat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11141.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11450","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1473774","bugzilla_description":"CVE-2017-11450 ImageMagick: Too short JPEG data causes denial of service in coders/jpeg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11449","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1473796","bugzilla_description":"CVE-2017-11449 ImageMagick: coders/mpc.c don't validade blob sizes of mpc images received from stdin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11449.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11447","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1473798","bugzilla_description":"CVE-2017-11447 ImageMagick: Memory leak in ReadSCREENSHOTImage function in coders/screenshot.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11447.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11448","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1473801","bugzilla_description":"CVE-2017-11448 ImageMagick: Info leak from from uninitialized memory in ReadJPEGImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-11523","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1474845","bugzilla_description":"CVE-2017-11523 ImageMagick: Endless loop in ReadTXTImage function in coders/txt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11523.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11522","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1474851","bugzilla_description":"CVE-2017-11522 ImageMagick: Null-Pointer dereference in WriteOnePNGImage function in coders/png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11522.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15277","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1510426","bugzilla_description":"CVE-2017-15277 ImageMagick: Unitialized palette in ReadGIFImage when processing a crafted GIF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15277.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-11352","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1471835","bugzilla_description":"CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c can trigger crash (Incomplete fix for CVE-2017-9144)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11352.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-11360","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1473847","bugzilla_description":"CVE-2017-11360 ImageMagick: Resource exhaustion in ReadRLEImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11360.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12669","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1484872","bugzilla_description":"CVE-2017-12669 ImageMagick: Memory leak in the function WriteCALSImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12669.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12668","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1484873","bugzilla_description":"CVE-2017-12668 ImageMagick: Memory leak in the function WritePCXImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12668.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11531","severity":"low","public_date":"2017-07-16T00:00:00Z","advisories":[],"bugzilla":"1474913","bugzilla_description":"CVE-2017-11531 ImageMagick: Memory leak in the WriteHISTOGRAMImage() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11531.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11532","severity":"low","public_date":"2017-07-16T00:00:00Z","advisories":[],"bugzilla":"1474914","bugzilla_description":"CVE-2017-11532 ImageMagick: Memory leak in the WriteMPCImage() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11532.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11533","severity":"low","public_date":"2017-07-16T00:00:00Z","advisories":[],"bugzilla":"1474916","bugzilla_description":"CVE-2017-11533 ImageMagick: Heap-buffer over-read in the WriteUILImage() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11533.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11534","severity":"low","public_date":"2017-07-16T00:00:00Z","advisories":[],"bugzilla":"1474918","bugzilla_description":"CVE-2017-11534 ImageMagick: Memory leak in the lite_font_map() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11534.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11535","severity":"low","public_date":"2017-07-16T00:00:00Z","advisories":[],"bugzilla":"1474919","bugzilla_description":"CVE-2017-11535 ImageMagick: Heap-based buffer over-read in the WritePSImage() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11536","severity":"low","public_date":"2017-07-16T00:00:00Z","advisories":[],"bugzilla":"1474920","bugzilla_description":"CVE-2017-11536 ImageMagick: Memory leak in the WriteJP2Image() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11537","severity":"low","public_date":"2017-07-16T00:00:00Z","advisories":[],"bugzilla":"1474921","bugzilla_description":"CVE-2017-11537 ImageMagick: Floating point exception in the WritePALMImage() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11537.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11538","severity":"low","public_date":"2017-07-16T00:00:00Z","advisories":[],"bugzilla":"1474922","bugzilla_description":"CVE-2017-11538 ImageMagick: Memory leak in the WriteOnePNGImage() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11538.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11539","severity":"low","public_date":"2017-07-16T00:00:00Z","advisories":[],"bugzilla":"1474923","bugzilla_description":"CVE-2017-11539 ImageMagick: Memory leak in the ReadOnePNGImage() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11539.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11540","severity":"low","public_date":"2017-07-16T00:00:00Z","advisories":[],"bugzilla":"1474924","bugzilla_description":"CVE-2017-11540 ImageMagick: Heap buffer over-read in the GetPixelIndex() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11540.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11170","severity":"low","public_date":"2017-07-13T00:00:00Z","advisories":[],"bugzilla":"1470669","bugzilla_description":"CVE-2017-11170 ImageMagick: Memory leak in ReadTGAImage function when processing TGA or VST file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11170.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11188","severity":"low","public_date":"2017-07-12T00:00:00Z","advisories":[],"bugzilla":"1473824","bugzilla_description":"CVE-2017-11188 ImageMagick: Resource exhaustion in ReadDPXImage function in coders\\dpx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11188.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12667","severity":"low","public_date":"2017-07-09T00:00:00Z","advisories":[],"bugzilla":"1484881","bugzilla_description":"CVE-2017-12667 ImageMagick: Memory leak in the function ReadMATImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12667.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10995","severity":"low","public_date":"2017-07-04T00:00:00Z","advisories":[],"bugzilla":"1471121","bugzilla_description":"CVE-2017-10995 ImageMagick: Out-of-bounds heap read in mng_get_long function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10995.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12140","severity":"low","public_date":"2017-06-29T00:00:00Z","advisories":[],"bugzilla":"1477565","bugzilla_description":"CVE-2017-12140 ImageMagick: integer signedness error in ReadDCMImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12140.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11528","severity":"low","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1474854","bugzilla_description":"CVE-2017-11528 ImageMagick: Memory leak in ReadDIBImage in dib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11528.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11527","severity":"low","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1474858","bugzilla_description":"CVE-2017-11527 ImageMagick: Memory leak in the ReadDPXImage function in coders/dpx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11527.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11530","severity":"low","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1474862","bugzilla_description":"CVE-2017-11530 ImageMagick: Memory exhaustion in ReadEPTImage in ept.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11530.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11529","severity":"low","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1474863","bugzilla_description":"CVE-2017-11529 ImageMagick: Memory leak in ReadMATImage in mat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11529.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11505","severity":"low","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1474864","bugzilla_description":"CVE-2017-11505 ImageMagick: CPU exhaustion in ReadOneJNGImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11505.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11526","severity":"low","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1474865","bugzilla_description":"CVE-2017-11526 ImageMagick: CPU exhaustion in ReadOneMNGImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11526.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11525","severity":"low","public_date":"2017-06-23T00:00:00Z","advisories":[],"bugzilla":"1474855","bugzilla_description":"CVE-2017-11525 ImageMagick: Memory leak in ReadCINImage function in coders/cin.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11525.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11310","severity":"low","public_date":"2017-06-22T00:00:00Z","advisories":[],"bugzilla":"1471096","bugzilla_description":"CVE-2017-11310 ImageMagick: Memory leak in read_user_chunk_callback function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11310.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11524","severity":"low","public_date":"2017-06-04T00:00:00Z","advisories":[],"bugzilla":"1474912","bugzilla_description":"CVE-2017-11524 ImageMagick: Assertion failure in the WriteBlob function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11524.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9500","severity":"low","public_date":"2017-05-23T00:00:00Z","advisories":[],"bugzilla":"1461894","bugzilla_description":"CVE-2017-9500 ImageMagick: Assertion failure in ResetImageProfileIterator","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9500.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9098","severity":"moderate","public_date":"2017-05-18T00:00:00Z","advisories":[],"bugzilla":"1453124","bugzilla_description":"CVE-2017-9098 ImageMagick: use of uninitialized memory in RLE decoder","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9098.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2017-9141","severity":"low","public_date":"2017-05-15T00:00:00Z","advisories":[],"bugzilla":"1455578","bugzilla_description":"CVE-2017-9141 ImageMagick: Missing checks in the ReadDDSImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9141.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9142","severity":"low","public_date":"2017-05-15T00:00:00Z","advisories":[],"bugzilla":"1455581","bugzilla_description":"CVE-2017-9142 ImageMagick: Missing checks in the ReadOneJNGImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9142.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9143","severity":"low","public_date":"2017-05-15T00:00:00Z","advisories":[],"bugzilla":"1455583","bugzilla_description":"CVE-2017-9143 ImageMagick: Memory leak in the REadARTImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9143.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9144","severity":"low","public_date":"2017-05-15T00:00:00Z","advisories":[],"bugzilla":"1455584","bugzilla_description":"CVE-2017-9144 ImageMagick: Incorrect EOF handling in coders/rle.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9144.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9499","severity":"low","public_date":"2017-05-15T00:00:00Z","advisories":[],"bugzilla":"1461890","bugzilla_description":"CVE-2017-9499 ImageMagick: Assertion failure in SetPixelChannelAttributes","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9499.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9501","severity":"low","public_date":"2017-05-15T00:00:00Z","advisories":[],"bugzilla":"1461896","bugzilla_description":"CVE-2017-9501 ImageMagick: Assertion failure in LockSemaphoreInfo","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9501.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9261","severity":"low","public_date":"2017-05-06T00:00:00Z","advisories":[],"bugzilla":"1457318","bugzilla_description":"CVE-2017-9261 ImageMagick: Memory leak in the ReadMNGImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9261.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9262","severity":"low","public_date":"2017-05-06T00:00:00Z","advisories":[],"bugzilla":"1457320","bugzilla_description":"CVE-2017-9262 ImageMagick: Memory leak in the ReadJNGImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9262.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11166","severity":"low","public_date":"2017-05-04T00:00:00Z","advisories":["RHSA-2020:1180"],"bugzilla":"1772643","bugzilla_description":"CVE-2017-11166 ImageMagick: memory leak vulnerability in ReadXWDImage function in coders/xwd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["ImageMagick-0:6.9.10.68-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11166.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-8765","severity":"low","public_date":"2017-05-03T00:00:00Z","advisories":[],"bugzilla":"1449270","bugzilla_description":"CVE-2017-8765 ImageMagick: Memory leak in the ReadICONImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8765.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8830","severity":"low","public_date":"2017-05-03T00:00:00Z","advisories":[],"bugzilla":"1449271","bugzilla_description":"CVE-2017-8830 ImageMagick: Memory leak in the ReadBMPImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8830.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9405","severity":"low","public_date":"2017-04-28T00:00:00Z","advisories":[],"bugzilla":"1458812","bugzilla_description":"CVE-2017-9405 ImageMagick: Memory leak in the ReadICONImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9405.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9407","severity":"low","public_date":"2017-04-28T00:00:00Z","advisories":[],"bugzilla":"1458813","bugzilla_description":"CVE-2017-9407 ImageMagick: Memory leak in the ReadPALMImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9407.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9409","severity":"low","public_date":"2017-04-28T00:00:00Z","advisories":[],"bugzilla":"1458814","bugzilla_description":"CVE-2017-9409 ImageMagick: Memory leak in the ReadMPCImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9409.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9439","severity":"low","public_date":"2017-04-28T00:00:00Z","advisories":[],"bugzilla":"1461768","bugzilla_description":"CVE-2017-9439 ImageMagick: Memory leak in the ReadPDBImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9439.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9440","severity":"low","public_date":"2017-04-28T00:00:00Z","advisories":[],"bugzilla":"1461772","bugzilla_description":"CVE-2017-9440 ImageMagick: Memory leak in the ReadPSDChannel function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9440.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8343","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1449239","bugzilla_description":"CVE-2017-8343 ImageMagick: Memory leak in the ReadAAIImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8343.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8344","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1449240","bugzilla_description":"CVE-2017-8344 ImageMagick: Memory leak in the ReadPCXImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8344.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8345","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1449241","bugzilla_description":"CVE-2017-8345 ImageMagick: Memory leak in the ReadMNGImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8345.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8346","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1449242","bugzilla_description":"CVE-2017-8346 ImageMagick: Memory leak in the ReadDCMImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8346.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8347","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1449244","bugzilla_description":"CVE-2017-8347 ImageMagick: Memory leak in the ReadEXRImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8347.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8348","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1449247","bugzilla_description":"CVE-2017-8348 ImageMagick: Memory leak in the ReadMATImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8348.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8349","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1449248","bugzilla_description":"CVE-2017-8349 ImageMagick: Memory leak in the ReadSFWImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8349.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8350","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1449250","bugzilla_description":"CVE-2017-8350 ImageMagick: Memory leak in the ReadJNGImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8350.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8351","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1449251","bugzilla_description":"CVE-2017-8351 ImageMagick: Memory leak in the ReadPCDImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8351.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8352","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1449253","bugzilla_description":"CVE-2017-8352 ImageMagick: Memory leak in the ReadXWDImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8352.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8353","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1449254","bugzilla_description":"CVE-2017-8353 ImageMagick: Memory leak in the ReadPICTImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8353.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8354","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1449261","bugzilla_description":"CVE-2017-8354 ImageMagick: Memory leak in the ReadBMPImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8354.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8355","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1449262","bugzilla_description":"CVE-2017-8355 ImageMagick: Memory leak in the ReadMTVImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8355.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8356","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1449263","bugzilla_description":"CVE-2017-8356 ImageMagick: Memory leak in the ReadSUNImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8356.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8357","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1449264","bugzilla_description":"CVE-2017-8357 ImageMagick: Memory leak in the ReadEPTImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8357.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7941","severity":"low","public_date":"2017-04-17T00:00:00Z","advisories":[],"bugzilla":"1445676","bugzilla_description":"CVE-2017-7941 ImageMagick: Memory leak in ReadSGIImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7941.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7942","severity":"low","public_date":"2017-04-17T00:00:00Z","advisories":[],"bugzilla":"1445677","bugzilla_description":"CVE-2017-7942 ImageMagick: Memory leak in ReadAVSImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7943","severity":"low","public_date":"2017-04-17T00:00:00Z","advisories":[],"bugzilla":"1445679","bugzilla_description":"CVE-2017-7943 ImageMagick: Memory leak in ReadSVGImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7943.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7606","severity":"low","public_date":"2017-03-31T00:00:00Z","advisories":[],"bugzilla":"1441586","bugzilla_description":"CVE-2017-7606 ImageMagick: Char outside of range in coders/rle.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7606.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7275","severity":"moderate","public_date":"2017-03-27T00:00:00Z","advisories":[],"bugzilla":"1437934","bugzilla_description":"CVE-2017-7275 ImageMagick: Memory allocation failure in AcquireMagickMemory (incomplete fix for  CVE-2016-8866)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7275.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10252","severity":"low","public_date":"2017-03-07T00:00:00Z","advisories":[],"bugzilla":"1433275","bugzilla_description":"CVE-2016-10252 ImageMagick: Memory leak in isOptionMember function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10252.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7619","severity":"low","public_date":"2017-03-02T00:00:00Z","advisories":[],"bugzilla":"1441211","bugzilla_description":"CVE-2017-7619 ImageMagick: Infinite loop due to a floating-point rounding error in some of the color algorithms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7619.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6335","severity":"low","public_date":"2017-02-23T00:00:00Z","advisories":[],"bugzilla":"1427975","bugzilla_description":"CVE-2017-6335 ImageMagick: Heap out-of-bounds read in tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6335.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6502","severity":"low","public_date":"2017-02-18T00:00:00Z","advisories":[],"bugzilla":"1429557","bugzilla_description":"CVE-2017-6502 ImageMagick: File descriptor leak in libmagickcore","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6502.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6497","severity":"low","public_date":"2017-02-11T00:00:00Z","advisories":[],"bugzilla":"1429548","bugzilla_description":"CVE-2017-6497 ImageMagick: NULL pointer dereference in psd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6497.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6501","severity":"low","public_date":"2017-02-10T00:00:00Z","advisories":[],"bugzilla":"1429555","bugzilla_description":"CVE-2017-6501 ImageMagick: NULL pointer dereference in xcf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6501.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6499","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1429552","bugzilla_description":"CVE-2017-6499 ImageMagick: Memory leak in Magick++","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6499.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6500","severity":"low","public_date":"2017-02-08T00:00:00Z","advisories":[],"bugzilla":"1429554","bugzilla_description":"CVE-2017-6500 ImageMagick: Heap-buffer overflow in sun.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6500.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6498","severity":"low","public_date":"2017-01-20T00:00:00Z","advisories":[],"bugzilla":"1429549","bugzilla_description":"CVE-2017-6498 ImageMagick: Assertion failures in tga.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6498.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5506","severity":"moderate","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1414442","bugzilla_description":"CVE-2017-5506 ImageMagick: Double-free memory corruption in profile.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5506.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5507","severity":"moderate","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1414444","bugzilla_description":"CVE-2017-5507 ImageMagick: Memory leak in mpc file handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5507.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5509","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":[],"bugzilla":"1414448","bugzilla_description":"CVE-2017-5509 ImageMagick: Out-of-bounds write flaw in psd file handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5509.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5510","severity":"moderate","public_date":"2017-01-07T00:00:00Z","advisories":[],"bugzilla":"1414449","bugzilla_description":"CVE-2017-5510 ImageMagick: Out-of-bounds write flaw in psd file handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5510.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5511","severity":"moderate","public_date":"2017-01-07T00:00:00Z","advisories":[],"bugzilla":"1414452","bugzilla_description":"CVE-2017-5511 ImageMagick: Memory corruption heap overflow in psd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5508","severity":"moderate","public_date":"2017-01-05T00:00:00Z","advisories":[],"bugzilla":"1414445","bugzilla_description":"CVE-2017-5508 ImageMagick: Heap-buffer-overflow in PushQuantumPixel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5508.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10144","severity":"low","public_date":"2016-12-24T00:00:00Z","advisories":[],"bugzilla":"1414437","bugzilla_description":"CVE-2016-10144 ImageMagick: ipl file missing malloc check","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10144.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10145","severity":"low","public_date":"2016-12-24T00:00:00Z","advisories":[],"bugzilla":"1414440","bugzilla_description":"CVE-2016-10145 ImageMagick: Off-by-one error in wpg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10145.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10146","severity":"moderate","public_date":"2016-12-11T00:00:00Z","advisories":[],"bugzilla":"1414446","bugzilla_description":"CVE-2016-10146 ImageMagick: Memory leak in caption and label handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10146.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-8707","severity":"moderate","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1408375","bugzilla_description":"CVE-2016-8707 ImageMagick: OOB write in convert utility when deflating TIFF files","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8707.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.9"},{"CVE":"CVE-2016-9773","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":[],"bugzilla":"1401440","bugzilla_description":"CVE-2016-9773 ImageMagick: Heap-buffer overflow in IsPixelGray in pixel-accessor.h (Incomplete fix for CVE-2016-9556)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9773.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9559","severity":"low","public_date":"2016-11-19T00:00:00Z","advisories":[],"bugzilla":"1398189","bugzilla_description":"CVE-2016-9559 ImageMagick: Null pointer dereference in tiff.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9559.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9556","severity":"low","public_date":"2016-11-19T00:00:00Z","advisories":[],"bugzilla":"1398198","bugzilla_description":"CVE-2016-9556 ImageMagick: Heap-buffer overflow in IsPixelGray in pixel-accessor.h","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9556.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10068","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":[],"bugzilla":"1410500","bugzilla_description":"CVE-2016-10068 ImageMagick: Segmentation fault in MSL interpreter","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10068.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9298","severity":"moderate","public_date":"2016-10-31T00:00:00Z","advisories":[],"bugzilla":"1395251","bugzilla_description":"CVE-2016-9298 ImageMagick: Heap buffer overflow in WaveletDenoiseImage()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9298.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8866","severity":"moderate","public_date":"2016-10-20T00:00:00Z","advisories":[],"bugzilla":"1388816","bugzilla_description":"CVE-2016-8866 ImageMagick: Memory allocation failure in AcquireMagickMemory (incomplete fix for CVE-2016-8862)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8866.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10058","severity":"low","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1410467","bugzilla_description":"CVE-2016-10058 ImageMagick: Memory leak in psd file handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10058.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8678","severity":"moderate","public_date":"2016-10-07T00:00:00Z","advisories":[],"bugzilla":"1385694","bugzilla_description":"CVE-2016-8678 ImageMagick: Heap-buffer overflow in IsPixelMonochrome","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8678.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8862","severity":"moderate","public_date":"2016-10-07T00:00:00Z","advisories":[],"bugzilla":"1387135","bugzilla_description":"CVE-2016-8862 ImageMagick: Memory allocation failure in AcquireMagickMemory","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7799","severity":"moderate","public_date":"2016-09-30T00:00:00Z","advisories":[],"bugzilla":"1381138","bugzilla_description":"CVE-2016-7799 ImageMagick: Mogrify buffer over-read in profile.c","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7799.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2016-7906","severity":"moderate","public_date":"2016-09-30T00:00:00Z","advisories":[],"bugzilla":"1381141","bugzilla_description":"CVE-2016-7906 ImageMagick: Mogrify heap-use-after-free in attribute.c","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7906.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2016-7101","severity":"low","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1379584","bugzilla_description":"CVE-2016-7101 ImageMagick: Out-of-bounds read vulnerability in SGI Coder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-6823","severity":"moderate","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1379587","bugzilla_description":"CVE-2016-6823 ImageMagick: Integer overflow within BMP encoder/writer","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-8677","severity":"moderate","public_date":"2016-09-16T00:00:00Z","advisories":[],"bugzilla":"1385698","bugzilla_description":"CVE-2016-8677 ImageMagick: Memory allocation failure in AcquireQuantumPixels","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8677.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10053","severity":"low","public_date":"2016-08-24T00:00:00Z","advisories":[],"bugzilla":"1410461","bugzilla_description":"CVE-2016-10053 ImageMagick: TIFF divide by zero","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10054","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":[],"bugzilla":"1410462","bugzilla_description":"CVE-2016-10054 ImageMagick: Buffer overflow in MAP coder","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10054.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-10055","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":[],"bugzilla":"1410464","bugzilla_description":"CVE-2016-10055 ImageMagick: Buffer overflow in PDB coder","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10055.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-10056","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":[],"bugzilla":"1410465","bugzilla_description":"CVE-2016-10056 ImageMagick: Buffer overflow in SIXEL coder","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10056.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-10057","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":[],"bugzilla":"1410466","bugzilla_description":"CVE-2016-10057 ImageMagick: Buffer overflow in CALS coder","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10057.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-10052","severity":"moderate","public_date":"2016-08-13T00:00:00Z","advisories":[],"bugzilla":"1410459","bugzilla_description":"CVE-2016-10052 ImageMagick: Out-of-bounds write in exif (jpeg) reader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10052.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-10051","severity":"moderate","public_date":"2016-08-05T00:00:00Z","advisories":[],"bugzilla":"1410456","bugzilla_description":"CVE-2016-10051 ImageMagick: Use after free when using identify or convert","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10051.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-10046","severity":"moderate","public_date":"2016-08-04T00:00:00Z","advisories":[],"bugzilla":"1410448","bugzilla_description":"CVE-2016-10046 ImageMagick: Buffer overflow in draw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10046.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-6520","severity":"low","public_date":"2016-08-01T00:00:00Z","advisories":[],"bugzilla":"1364357","bugzilla_description":"CVE-2016-6520 ImageMagick: out-of-bounds read in enhance.c","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6520.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-6491","severity":"low","public_date":"2016-07-28T00:00:00Z","advisories":[],"bugzilla":"1361492","bugzilla_description":"CVE-2016-6491 ImageMagick: Out-of-bounds read in CopyMagickMemory","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-5010","severity":"low","public_date":"2016-07-14T00:00:00Z","advisories":[],"bugzilla":"1354500","bugzilla_description":"CVE-2016-5010 ImageMagick: Out-of-bounds read when processing crafted tiff file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5010.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-10063","severity":"moderate","public_date":"2016-07-06T00:00:00Z","advisories":[],"bugzilla":"1410476","bugzilla_description":"CVE-2016-10063 ImageMagick: Buffer overflow in tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10063.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-10064","severity":"moderate","public_date":"2016-07-06T00:00:00Z","advisories":[],"bugzilla":"1410478","bugzilla_description":"CVE-2016-10064 ImageMagick: Buffer overflow in tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10064.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-5841","severity":"important","public_date":"2016-06-22T00:00:00Z","advisories":[],"bugzilla":"1350459","bugzilla_description":"CVE-2016-5841 ImageMagick: Integer overflow in MagickCore/profile.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2016-5842","severity":"low","public_date":"2016-06-22T00:00:00Z","advisories":[],"bugzilla":"1350461","bugzilla_description":"CVE-2016-5842 ImageMagick: Information leak in MagickCore/property.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2016-7540","severity":"low","public_date":"2016-06-19T00:00:00Z","advisories":[],"bugzilla":"1378777","bugzilla_description":"CVE-2016-7540 ImageMagick: writing to rgf format aborts","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7540.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5687","severity":"low","public_date":"2016-06-14T00:00:00Z","advisories":[],"bugzilla":"1348149","bugzilla_description":"CVE-2016-5687 ImageMagick: Out-of-bounds memory read in VerticalFilter()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5687.json"},{"CVE":"CVE-2016-5688","severity":"moderate","public_date":"2016-06-14T00:00:00Z","advisories":[],"bugzilla":"1348153","bugzilla_description":"CVE-2016-5688 ImageMagick: Heap overflow and random invalid memory writes in WPg parser","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5688.json"},{"CVE":"CVE-2016-5689","severity":"low","public_date":"2016-06-14T00:00:00Z","advisories":[],"bugzilla":"1348159","bugzilla_description":"CVE-2016-5689 ImageMagick: Lack of null pointer check in ReadDCMImage()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5689.json"},{"CVE":"CVE-2016-5690","severity":"low","public_date":"2016-06-14T00:00:00Z","advisories":[],"bugzilla":"1348168","bugzilla_description":"CVE-2016-5690 ImageMagick: Possible integer overflow when computing pixel scaling table in ReadDCMImage","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5690.json"},{"CVE":"CVE-2016-5691","severity":"moderate","public_date":"2016-06-14T00:00:00Z","advisories":[],"bugzilla":"1348172","bugzilla_description":"CVE-2016-5691 ImageMagick: Possible out-of-bounds write in ReadDCMImage()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5691.json"},{"CVE":"CVE-2016-10050","severity":"moderate","public_date":"2016-06-05T00:00:00Z","advisories":[],"bugzilla":"1410454","bugzilla_description":"CVE-2016-10050 ImageMagick: Heap overflow when reading corrupt RLE files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10050.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-4562","severity":"moderate","public_date":"2016-06-04T00:00:00Z","advisories":[],"bugzilla":"1343446","bugzilla_description":"CVE-2016-4562 ImageMagick: Mishandled calculation of certain vertices integer data in DrawDashPolygon() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4562.json"},{"CVE":"CVE-2016-4563","severity":"moderate","public_date":"2016-06-04T00:00:00Z","advisories":[],"bugzilla":"1343447","bugzilla_description":"CVE-2016-4563 ImageMagick: Mishandled relationship between the BezierQuantum value and certain strokes data in TraceStrokePolygon() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4563.json"},{"CVE":"CVE-2016-4564","severity":"moderate","public_date":"2016-06-04T00:00:00Z","advisories":[],"bugzilla":"1343448","bugzilla_description":"CVE-2016-4564 ImageMagick: Incorrect function call in attempting to locate the next token in DrawImage() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4564.json"},{"CVE":"CVE-2016-10060","severity":"low","public_date":"2016-06-04T00:00:00Z","advisories":[],"bugzilla":"1410470","bugzilla_description":"CVE-2016-10060 ImageMagick: Write path does not check return of fputc in magick-cli.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10060.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10061","severity":"low","public_date":"2016-06-04T00:00:00Z","advisories":[],"bugzilla":"1410471","bugzilla_description":"CVE-2016-10061 ImageMagick: Write path does not check return of fputc in tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10061.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10062","severity":"low","public_date":"2016-06-04T00:00:00Z","advisories":[],"bugzilla":"1410473","bugzilla_description":"CVE-2016-10062 ImageMagick: Write path does not check return of fwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10062.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10047","severity":"low","public_date":"2016-06-02T00:00:00Z","advisories":[],"bugzilla":"1410449","bugzilla_description":"CVE-2016-10047 ImageMagick: Memory leak in XML file transversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10047.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-10048","severity":"low","public_date":"2016-06-02T00:00:00Z","advisories":[],"bugzilla":"1410451","bugzilla_description":"CVE-2016-10048 ImageMagick: Arbitrary module loading due to not escaping relative path","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10048.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-5118","severity":"important","public_date":"2016-05-29T00:00:00Z","advisories":["RHSA-2016:1237"],"bugzilla":"1340814","bugzilla_description":"CVE-2016-5118 ImageMagick: Remote code execution via filename","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["ImageMagick-0:6.7.8.9-15.el7_2","ImageMagick-0:6.7.2.7-5.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5118.json"},{"CVE":"CVE-2016-10066","severity":"low","public_date":"2016-05-29T00:00:00Z","advisories":[],"bugzilla":"1410491","bugzilla_description":"CVE-2016-10066 ImageMagick: Buffer overflow due to too many exceptions in viff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10066.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10067","severity":"low","public_date":"2016-05-29T00:00:00Z","advisories":[],"bugzilla":"1410494","bugzilla_description":"CVE-2016-10067 ImageMagick: Buffer overflow due to too many exceptions in memory.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10067.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10069","severity":"low","public_date":"2016-05-29T00:00:00Z","advisories":[],"bugzilla":"1410507","bugzilla_description":"CVE-2016-10069 ImageMagick: Invalid number of frames not checked in mat files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10069.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10049","severity":"moderate","public_date":"2016-05-17T00:00:00Z","advisories":[],"bugzilla":"1410452","bugzilla_description":"CVE-2016-10049 ImageMagick: Buffer overflow when reading corrupt RLE files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10049.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-5239","severity":"moderate","public_date":"2016-05-08T00:00:00Z","advisories":["RHSA-2016:1237"],"bugzilla":"1334188","bugzilla_description":"CVE-2016-5239 ImageMagick,GraphicsMagick: Gnuplot delegate vulnerability allowing command injection","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["ImageMagick-0:6.7.8.9-15.el7_2","ImageMagick-0:6.7.2.7-5.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5239.json"},{"CVE":"CVE-2016-10059","severity":"moderate","public_date":"2016-05-08T00:00:00Z","advisories":[],"bugzilla":"1410469","bugzilla_description":"CVE-2016-10059 ImageMagick: TIFF file buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10059.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-3714","severity":"important","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:0726"],"bugzilla":"1332492","bugzilla_description":"CVE-2016-3714 ImageMagick: Insufficient shell characters filtering","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["ImageMagick-0:6.7.8.9-13.el7_2","ImageMagick-0:6.7.2.7-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3714.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2016-3715","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:0726"],"bugzilla":"1332500","bugzilla_description":"CVE-2016-3715 ImageMagick: File deletion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["ImageMagick-0:6.7.8.9-13.el7_2","ImageMagick-0:6.7.2.7-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3715.json"},{"CVE":"CVE-2016-3716","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:0726"],"bugzilla":"1332504","bugzilla_description":"CVE-2016-3716 ImageMagick: File moving","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["ImageMagick-0:6.7.8.9-13.el7_2","ImageMagick-0:6.7.2.7-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3716.json"},{"CVE":"CVE-2016-3717","severity":"important","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:0726"],"bugzilla":"1332505","bugzilla_description":"CVE-2016-3717 ImageMagick: Local file read","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:N/A:N","CWE":"CWE-20","affected_packages":["ImageMagick-0:6.7.8.9-13.el7_2","ImageMagick-0:6.7.2.7-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3717.json"},{"CVE":"CVE-2016-3718","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:0726"],"bugzilla":"1332802","bugzilla_description":"CVE-2016-3718 ImageMagick: SSRF vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["ImageMagick-0:6.7.8.9-13.el7_2","ImageMagick-0:6.7.2.7-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3718.json"},{"CVE":"CVE-2016-5240","severity":"low","public_date":"2016-05-01T00:00:00Z","advisories":["RHSA-2016:1237"],"bugzilla":"1333417","bugzilla_description":"CVE-2016-5240 ImageMagick: SVG converting issue resulting in DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["ImageMagick-0:6.7.8.9-15.el7_2","ImageMagick-0:6.7.2.7-5.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5240.json"},{"CVE":"CVE-2016-7538","severity":"moderate","public_date":"2016-03-11T00:00:00Z","advisories":[],"bugzilla":"1378775","bugzilla_description":"CVE-2016-7538 ImageMagick: SIGABRT for corrupted PSD file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7538.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-7537","severity":"moderate","public_date":"2016-03-04T00:00:00Z","advisories":[],"bugzilla":"1378773","bugzilla_description":"CVE-2016-7537 ImageMagick: OOB read for corrupted pdb file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7537.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-7536","severity":"moderate","public_date":"2016-02-14T00:00:00Z","advisories":[],"bugzilla":"1378772","bugzilla_description":"CVE-2016-7536 ImageMagick: SEGV reported in corrupted profile handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7536.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10065","severity":"moderate","public_date":"2016-02-14T00:00:00Z","advisories":[],"bugzilla":"1410482","bugzilla_description":"CVE-2016-10065 ImageMagick: Out of bounds read in viff file handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10065.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-10070","severity":"moderate","public_date":"2016-02-14T00:00:00Z","advisories":[],"bugzilla":"1410510","bugzilla_description":"CVE-2016-10070 ImageMagick: Out-of-bounds read in mat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10070.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-10071","severity":"moderate","public_date":"2016-02-14T00:00:00Z","advisories":[],"bugzilla":"1410513","bugzilla_description":"CVE-2016-10071 ImageMagick: Out-of-bounds read in mat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10071.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-7535","severity":"moderate","public_date":"2016-02-12T00:00:00Z","advisories":[],"bugzilla":"1378768","bugzilla_description":"CVE-2016-7535 ImageMagick: out of bound access for corrupted psd file","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-7534","severity":"moderate","public_date":"2016-02-07T00:00:00Z","advisories":[],"bugzilla":"1378767","bugzilla_description":"CVE-2016-7534 ImageMagick: CbYCrY quantum heap-based OOB read/write","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7534.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-7527","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1378759","bugzilla_description":"CVE-2016-7527 ImageMagick: out-of-bounds read in MagickCore/memory.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7527.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-7533","severity":"moderate","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1378765","bugzilla_description":"CVE-2016-7533 ImageMagick: WPG file out-of-bounds write","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-7526","severity":"moderate","public_date":"2016-01-28T00:00:00Z","advisories":[],"bugzilla":"1378758","bugzilla_description":"CVE-2016-7526 ImageMagick: out-of-bounds write in ./MagickCore/pixel-accessor.h","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-7529","severity":"low","public_date":"2016-01-28T00:00:00Z","advisories":[],"bugzilla":"1378761","bugzilla_description":"CVE-2016-7529 ImageMagick: out of bound heap read in XCF file coder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7529.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-7530","severity":"moderate","public_date":"2016-01-28T00:00:00Z","advisories":[],"bugzilla":"1378762","bugzilla_description":"CVE-2016-7530 ImageMagick: out of bound in quantum handling","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7530.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-7531","severity":"moderate","public_date":"2016-01-28T00:00:00Z","advisories":[],"bugzilla":"1378763","bugzilla_description":"CVE-2016-7531 ImageMagick: pbd file heap-based OOB write","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7531.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-7532","severity":"low","public_date":"2016-01-28T00:00:00Z","advisories":[],"bugzilla":"1378764","bugzilla_description":"CVE-2016-7532 ImageMagick: Fix handling of corrupted psd file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7532.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-7521","severity":"low","public_date":"2016-01-24T00:00:00Z","advisories":[],"bugzilla":"1378748","bugzilla_description":"CVE-2016-7521 ImageMagick: heap buffer overflow in psd file handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7521.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-7522","severity":"low","public_date":"2016-01-24T00:00:00Z","advisories":[],"bugzilla":"1378751","bugzilla_description":"CVE-2016-7522 ImageMagick: out of bound read for malformed psd file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7522.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-7523","severity":"low","public_date":"2016-01-24T00:00:00Z","advisories":[],"bugzilla":"1378754","bugzilla_description":"CVE-2016-7523 ImageMagick: OOB read in coders/meta.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7523.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-7524","severity":null,"public_date":"2016-01-24T00:00:00Z","advisories":[],"bugzilla":"1378756","bugzilla_description":"CVE-2016-7524 ImageMagick: heap-buffer-overflow in coders/meta.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7524.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-7525","severity":"low","public_date":"2016-01-24T00:00:00Z","advisories":[],"bugzilla":"1378757","bugzilla_description":"CVE-2016-7525 ImageMagick: heap buffer overflow in psd file coder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7525.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-7528","severity":"moderate","public_date":"2016-01-24T00:00:00Z","advisories":[],"bugzilla":"1378760","bugzilla_description":"CVE-2016-7528 ImageMagick: out of bound access for viff file coder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7528.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2015-8898","severity":"low","public_date":"2016-01-17T00:00:00Z","advisories":["RHSA-2016:1237"],"bugzilla":"1344264","bugzilla_description":"CVE-2015-8898 ImageMagick: Prevent NULL pointer access in magick/constitute.c","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["ImageMagick-0:6.7.8.9-15.el7_2","ImageMagick-0:6.7.2.7-5.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8898.json"},{"CVE":"CVE-2015-8897","severity":"low","public_date":"2016-01-17T00:00:00Z","advisories":["RHSA-2016:1237"],"bugzilla":"1344271","bugzilla_description":"CVE-2015-8897 ImageMagick: Crash due to out of bounds error in SpliceImage","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["ImageMagick-0:6.7.8.9-15.el7_2","ImageMagick-0:6.7.2.7-5.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8897.json"},{"CVE":"CVE-2016-7514","severity":"low","public_date":"2016-01-13T00:00:00Z","advisories":[],"bugzilla":"1378739","bugzilla_description":"CVE-2016-7514 ImageMagick: out-of-bounds read in coders/psd.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-7515","severity":"low","public_date":"2016-01-13T00:00:00Z","advisories":[],"bugzilla":"1378741","bugzilla_description":"CVE-2016-7515 ImageMagick: rle file handling OOB read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-7516","severity":"low","public_date":"2016-01-13T00:00:00Z","advisories":[],"bugzilla":"1378743","bugzilla_description":"CVE-2016-7516 ImageMagick: out of bounds read problem in coders/viff.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7516.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-7517","severity":"low","public_date":"2016-01-13T00:00:00Z","advisories":[],"bugzilla":"1378744","bugzilla_description":"CVE-2016-7517 ImageMagick: out-of-bounds read in coders/pict.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7517.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-7518","severity":"low","public_date":"2016-01-13T00:00:00Z","advisories":[],"bugzilla":"1378745","bugzilla_description":"CVE-2016-7518 ImageMagick: out-of-bounds read in coders/sun.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7518.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-7519","severity":"low","public_date":"2016-01-13T00:00:00Z","advisories":[],"bugzilla":"1378746","bugzilla_description":"CVE-2016-7519 ImageMagick: out-of-bounds read in coders/rle.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7519.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-7520","severity":"low","public_date":"2016-01-13T00:00:00Z","advisories":[],"bugzilla":"1378747","bugzilla_description":"CVE-2016-7520 ImageMagick: heap-buffer-overflow read in coders/hdr.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7520.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-7539","severity":"low","public_date":"2016-01-07T00:00:00Z","advisories":[],"bugzilla":"1378776","bugzilla_description":"CVE-2016-7539 ImageMagick: potential DOS by not releasing memory","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-8895","severity":"moderate","public_date":"2015-05-28T00:00:00Z","advisories":["RHSA-2016:1237"],"bugzilla":"1269553","bugzilla_description":"CVE-2015-8895 ImageMagick: Integer and buffer overflow in coders/icon.c","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":["ImageMagick-0:6.7.8.9-15.el7_2","ImageMagick-0:6.7.2.7-5.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8895.json"},{"CVE":"CVE-2015-8896","severity":"moderate","public_date":"2015-04-26T00:00:00Z","advisories":["RHSA-2016:1237"],"bugzilla":"1269562","bugzilla_description":"CVE-2015-8896 ImageMagick: Integer truncation vulnerability in coders/pict.c","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["ImageMagick-0:6.7.8.9-15.el7_2","ImageMagick-0:6.7.2.7-5.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8896.json"},{"CVE":"CVE-2015-8894","severity":"moderate","public_date":"2015-04-23T00:00:00Z","advisories":[],"bugzilla":"1347275","bugzilla_description":"CVE-2015-8894 ImageMagick: Double free flaw in tga.c","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-672","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8894.json"},{"CVE":"CVE-2015-8900","severity":"low","public_date":"2015-02-19T00:00:00Z","advisories":[],"bugzilla":"1195260","bugzilla_description":"CVE-2015-8900 ImageMagick: denial of service flaw in HDR file processing","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8900.json"},{"CVE":"CVE-2015-8901","severity":"low","public_date":"2015-02-19T00:00:00Z","advisories":[],"bugzilla":"1195265","bugzilla_description":"CVE-2015-8901 ImageMagick: denial of service flaw in MIFF file processing","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8901.json"},{"CVE":"CVE-2015-8902","severity":"low","public_date":"2015-02-19T00:00:00Z","advisories":[],"bugzilla":"1195269","bugzilla_description":"CVE-2015-8902 ImageMagick: denial of service flaw in PDB file processing","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8902.json"},{"CVE":"CVE-2015-8903","severity":"low","public_date":"2015-02-19T00:00:00Z","advisories":[],"bugzilla":"1195271","bugzilla_description":"CVE-2015-8903 ImageMagick: denial of service flaw in VICAR file processing","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8903.json"},{"CVE":"CVE-2015-8959","severity":"low","public_date":"2015-01-11T00:00:00Z","advisories":[],"bugzilla":"1378738","bugzilla_description":"CVE-2015-8959 ImageMagick: CPU usage DOS due to corrupted DDS files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8959.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-8958","severity":"low","public_date":"2015-01-09T00:00:00Z","advisories":[],"bugzilla":"1378736","bugzilla_description":"CVE-2015-8958 ImageMagick: OOB read and possible crash when processing malformed SUN files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8958.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-8957","severity":"low","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1378735","bugzilla_description":"CVE-2015-8957 ImageMagick: OOB read and possible crash when handling malformed SUN files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8957.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2014-9907","severity":"moderate","public_date":"2014-12-29T00:00:00Z","advisories":[],"bugzilla":"1378734","bugzilla_description":"CVE-2014-9907 ImageMagick: DOS due to corrupted DDS files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-252","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9907.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2014-9804","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343459","bugzilla_description":"CVE-2014-9804 ImageMagick: infinite loop DoS in vision.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9804.json"},{"CVE":"CVE-2014-9805","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343460","bugzilla_description":"CVE-2014-9805 ImageMagick: crash on corrupted pnm file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9805.json"},{"CVE":"CVE-2014-9806","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343462","bugzilla_description":"CVE-2014-9806 ImageMagick: fd leak due to corrupted file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9806.json"},{"CVE":"CVE-2014-9807","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343463","bugzilla_description":"CVE-2014-9807 ImageMagick: double free in pdb coder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9807.json"},{"CVE":"CVE-2014-9808","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343464","bugzilla_description":"CVE-2014-9808 ImageMagick: crash on corrupted dpc image","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9808.json"},{"CVE":"CVE-2014-9809","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343465","bugzilla_description":"CVE-2014-9809 ImageMagick: crash on corrupted xwd image","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9809.json"},{"CVE":"CVE-2014-9810","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343466","bugzilla_description":"CVE-2014-9810 ImageMagick: crash in dpx file handler","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9810.json"},{"CVE":"CVE-2014-9811","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343467","bugzilla_description":"CVE-2014-9811 ImageMagick: crash in xwd file handler","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9811.json"},{"CVE":"CVE-2014-9812","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343468","bugzilla_description":"CVE-2014-9812 ImageMagick: NULL pointer dereference in ps file handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9812.json"},{"CVE":"CVE-2014-9813","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343469","bugzilla_description":"CVE-2014-9813 ImageMagick: crash on corrupted viff file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9813.json"},{"CVE":"CVE-2014-9814","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343470","bugzilla_description":"CVE-2014-9814 ImageMagick: NULL pointer dereference in wpg file handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9814.json"},{"CVE":"CVE-2014-9815","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343471","bugzilla_description":"CVE-2014-9815 ImageMagick: crash on corrupted wpg file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9815.json"},{"CVE":"CVE-2014-9816","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343472","bugzilla_description":"CVE-2014-9816 ImageMagick: out of bound access in viff image","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9816.json"},{"CVE":"CVE-2014-9817","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343473","bugzilla_description":"CVE-2014-9817 ImageMagick: heap buffer overflow in pdb file handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9817.json"},{"CVE":"CVE-2014-9818","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343474","bugzilla_description":"CVE-2014-9818 ImageMagick: out of bound access on malformed sun file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9818.json"},{"CVE":"CVE-2014-9819","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343475","bugzilla_description":"CVE-2014-9819 ImageMagick: heap overflow in palm files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9819.json"},{"CVE":"CVE-2014-9820","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343476","bugzilla_description":"CVE-2014-9820 ImageMagick: heap overflow in xpm files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9820.json"},{"CVE":"CVE-2014-9821","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343477","bugzilla_description":"CVE-2014-9821 ImageMagick: heap overflow in pnm files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9821.json"},{"CVE":"CVE-2014-9822","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343478","bugzilla_description":"CVE-2014-9822 ImageMagick: heap overflow in quantum file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9822.json"},{"CVE":"CVE-2014-9823","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343479","bugzilla_description":"CVE-2014-9823 ImageMagick: heap overflow in palm file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9823.json"},{"CVE":"CVE-2014-9824","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343480","bugzilla_description":"CVE-2014-9824 ImageMagick: heap overflow in psd file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9824.json"},{"CVE":"CVE-2014-9825","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343481","bugzilla_description":"CVE-2014-9825 ImageMagick: heap overflow in corrupted psd file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9825.json"},{"CVE":"CVE-2014-9826","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343482","bugzilla_description":"CVE-2014-9826 ImageMagick: incorrect error handling in sun files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9826.json"},{"CVE":"CVE-2014-9827","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343483","bugzilla_description":"CVE-2014-9827 ImageMagick: handling of corrupted of xpm file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9827.json"},{"CVE":"CVE-2014-9828","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343484","bugzilla_description":"CVE-2014-9828 ImageMagick: corrupted (too many colors) psd file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9828.json"},{"CVE":"CVE-2014-9829","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343485","bugzilla_description":"CVE-2014-9829 ImageMagick: out of bound access in sun file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9829.json"},{"CVE":"CVE-2014-9830","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343486","bugzilla_description":"CVE-2014-9830 ImageMagick: handling of corrupted sun file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9830.json"},{"CVE":"CVE-2014-9831","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343487","bugzilla_description":"CVE-2014-9831 ImageMagick: handling of corrupted wpg file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9831.json"},{"CVE":"CVE-2014-9832","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343488","bugzilla_description":"CVE-2014-9832 ImageMagick: heap overflow in pcx file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9832.json"},{"CVE":"CVE-2014-9833","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343489","bugzilla_description":"CVE-2014-9833 ImageMagick: heap overflow in psd file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9833.json"},{"CVE":"CVE-2014-9834","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343490","bugzilla_description":"CVE-2014-9834 ImageMagick: heap overflow in pict file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9834.json"},{"CVE":"CVE-2014-9835","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343491","bugzilla_description":"CVE-2014-9835 ImageMagick: heap overflow in wpf file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9835.json"},{"CVE":"CVE-2014-9836","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343492","bugzilla_description":"CVE-2014-9836 ImageMagick: crash in xpm file handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9836.json"},{"CVE":"CVE-2014-9837","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343493","bugzilla_description":"CVE-2014-9837 ImageMagick: additional PNM sanity checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9837.json"},{"CVE":"CVE-2014-9838","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343495","bugzilla_description":"CVE-2014-9838 ImageMagick: out of memory crash in magick/cache.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9838.json"},{"CVE":"CVE-2014-9839","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343496","bugzilla_description":"CVE-2014-9839 ImageMagick: theoretical out of bound access in magick/colormap-private.h","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9839.json"},{"CVE":"CVE-2014-9840","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343498","bugzilla_description":"CVE-2014-9840 ImageMagick: out of bound access in palm file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9840.json"},{"CVE":"CVE-2014-9841","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343499","bugzilla_description":"CVE-2014-9841 ImageMagick: throwing of exceptions in psd handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9841.json"},{"CVE":"CVE-2014-9842","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343500","bugzilla_description":"CVE-2014-9842 ImageMagick: memory leak in psd handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9842.json"},{"CVE":"CVE-2014-9843","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343501","bugzilla_description":"CVE-2014-9843 ImageMagick: incorrect boundary checks in DecodePSDPixels","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9843.json"},{"CVE":"CVE-2014-9844","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343502","bugzilla_description":"CVE-2014-9844 ImageMagick: out of bound issue in rle file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9844.json"},{"CVE":"CVE-2014-9845","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343503","bugzilla_description":"CVE-2014-9845 ImageMagick: crash due to corrupted dib file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9845.json"},{"CVE":"CVE-2014-9846","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343504","bugzilla_description":"CVE-2014-9846 ImageMagick: overflow in rle file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9846.json"},{"CVE":"CVE-2014-9847","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343506","bugzilla_description":"CVE-2014-9847 ImageMagick: incorrect handling of \"previous\" image in the JNG decoder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9847.json"},{"CVE":"CVE-2014-9848","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343507","bugzilla_description":"CVE-2014-9848 ImageMagick: memory leak in quantum management","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9848.json"},{"CVE":"CVE-2014-9849","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343509","bugzilla_description":"CVE-2014-9849 ImageMagick: crash in png coder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9849.json"},{"CVE":"CVE-2014-9850","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343510","bugzilla_description":"CVE-2014-9850 ImageMagick: incorrect thread limit logic","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9850.json"},{"CVE":"CVE-2014-9851","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343511","bugzilla_description":"CVE-2014-9851 ImageMagick: crash when parsing resource block","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9851.json"},{"CVE":"CVE-2014-9852","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343512","bugzilla_description":"CVE-2014-9852 ImageMagick: incorrect usage of object after it has been destroyed","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9852.json"},{"CVE":"CVE-2014-9853","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343513","bugzilla_description":"CVE-2014-9853 ImageMagick: memory leak in rle file handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9853.json"},{"CVE":"CVE-2014-9854","severity":"moderate","public_date":"2014-12-24T00:00:00Z","advisories":[],"bugzilla":"1343514","bugzilla_description":"CVE-2014-9854 ImageMagick: filling memory during identification of image","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9854.json"},{"CVE":"CVE-2016-7513","severity":"low","public_date":"2014-12-16T00:00:00Z","advisories":[],"bugzilla":"1378733","bugzilla_description":"CVE-2016-7513 ImageMagick: Off-by-one error in cache.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7513.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-8716","severity":"low","public_date":"2014-11-13T00:00:00Z","advisories":[],"bugzilla":"1164248","bugzilla_description":"CVE-2014-8716 ImageMagick: out-of-bounds memory error in JPEG decoder","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8716.json"},{"CVE":"CVE-2014-9915","severity":"low","public_date":"2014-10-29T00:00:00Z","advisories":[],"bugzilla":"1410436","bugzilla_description":"CVE-2014-9915 ImageMagick: Off-by-one count when parsing an 8BIM profile","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9915.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-8354","severity":"low","public_date":"2014-10-27T00:00:00Z","advisories":[],"bugzilla":"1158518","bugzilla_description":"CVE-2014-8354 ImageMagick: out-of-bounds memory access in resize code","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8354.json"},{"CVE":"CVE-2014-8355","severity":"low","public_date":"2014-10-27T00:00:00Z","advisories":[],"bugzilla":"1158523","bugzilla_description":"CVE-2014-8355 ImageMagick: out-of-bounds memory access in PCX parser","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8355.json"},{"CVE":"CVE-2014-8562","severity":"low","public_date":"2014-10-27T00:00:00Z","advisories":[],"bugzilla":"1159362","bugzilla_description":"CVE-2014-8562 ImageMagick: out-of-bounds memory error in DCM decode","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8562.json"},{"CVE":"CVE-2014-1947","severity":"moderate","public_date":"2013-11-14T00:00:00Z","advisories":[],"bugzilla":"1064098","bugzilla_description":"CVE-2014-1947 ImageMagick: PSD writing layer name buffer overflow (\"L%02ld\")","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1947.json"},{"CVE":"CVE-2014-1958","severity":"moderate","public_date":"2013-11-14T00:00:00Z","advisories":[],"bugzilla":"1067276","bugzilla_description":"CVE-2014-1958 ImageMagick: buffer overflow flaw when handling PSD images that use RLE encoding","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1958.json"},{"CVE":"CVE-2014-2030","severity":"moderate","public_date":"2013-11-14T00:00:00Z","advisories":[],"bugzilla":"1083477","bugzilla_description":"CVE-2014-2030 ImageMagick: PSD writing layer name buffer overflow (\"L%06ld\")","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2030.json"},{"CVE":"CVE-2013-4298","severity":"important","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"1004648","bugzilla_description":"CVE-2013-4298 ImageMagick: One-byte heap-based buffer overflow when decoding certain GIF images","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4298.json"},{"CVE":"CVE-2012-3437","severity":"low","public_date":"2012-07-27T00:00:00Z","advisories":[],"bugzilla":"844101","bugzilla_description":"CVE-2012-3437 ImageMagick: Magick_png_malloc() size argument","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3437.json"},{"CVE":"CVE-2012-0259","severity":"low","public_date":"2012-03-28T00:00:00Z","advisories":["RHSA-2012:0544"],"bugzilla":"807993","bugzilla_description":"CVE-2012-0259 ImageMagick: Out-of heap-based buffer read by processing crafted JPEG EXIF header tag value","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ImageMagick-0:6.5.4.7-6.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0259.json"},{"CVE":"CVE-2012-0260","severity":"low","public_date":"2012-03-28T00:00:00Z","advisories":["RHSA-2012:0544","RHSA-2012:0545"],"bugzilla":"807994","bugzilla_description":"CVE-2012-0260 ImageMagick: excessive CPU use DoS by processing JPEG images with crafted restart markers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ImageMagick-0:6.2.8.0-15.el5_8","ImageMagick-0:6.5.4.7-6.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0260.json"},{"CVE":"CVE-2012-1798","severity":"low","public_date":"2012-03-28T00:00:00Z","advisories":["RHSA-2012:0544"],"bugzilla":"807997","bugzilla_description":"CVE-2012-1798 ImageMagick: Out-of-bounds buffer read by copying image bytes for TIFF images with crafted TIFF EXIF IFD value","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ImageMagick-0:6.5.4.7-6.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1798.json"},{"CVE":"CVE-2012-1185","severity":"moderate","public_date":"2012-03-19T00:00:00Z","advisories":[],"bugzilla":"804588","bugzilla_description":"CVE-2012-1185: ImageMagick: Incorrect fix for CVE-2012-0247","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1185.json"},{"CVE":"CVE-2012-1186","severity":null,"public_date":"2012-03-19T00:00:00Z","advisories":[],"bugzilla":"804591","bugzilla_description":"CVE-2012-1186: ImageMagick: Incorrect fix for CVE-2012-0248","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1186.json"},{"CVE":"CVE-2012-0247","severity":"moderate","public_date":"2012-02-03T00:00:00Z","advisories":["RHSA-2012:0544","RHSA-2012:0545"],"bugzilla":"789443","bugzilla_description":"CVE-2012-0247 CVE-2012-0248 ImageMagick: invalid validation of images denial of service","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ImageMagick-0:6.2.8.0-15.el5_8","ImageMagick-0:6.5.4.7-6.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0247.json"},{"CVE":"CVE-2012-0248","severity":"moderate","public_date":"2012-02-03T00:00:00Z","advisories":["RHSA-2012:0544","RHSA-2012:0545"],"bugzilla":"789443","bugzilla_description":"CVE-2012-0247 CVE-2012-0248 ImageMagick: invalid validation of images denial of service","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ImageMagick-0:6.2.8.0-15.el5_8","ImageMagick-0:6.5.4.7-6.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0248.json"},{"CVE":"CVE-2010-4167","severity":"low","public_date":"2010-10-30T00:00:00Z","advisories":["RHSA-2012:0301","RHSA-2012:0544"],"bugzilla":"652860","bugzilla_description":"CVE-2010-4167 ImageMagick: configuration files read from $CWD may allow arbitrary code execution","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["ImageMagick-0:6.5.4.7-6.el6_2","ImageMagick-0:6.2.8.0-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4167.json"},{"CVE":"CVE-2009-1882","severity":"moderate","public_date":"2009-05-27T00:00:00Z","advisories":["RHSA-2010:0653","RHSA-2010:0652"],"bugzilla":"503017","bugzilla_description":"CVE-2009-1882 ImageMagick, GraphicsMagick: Integer overflow in the routine creating X11 images","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["ImageMagick-0:6.2.8.0-4.el5_5.2","ImageMagick-0:6.0.7.1-20.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1882.json"},{"CVE":"CVE-2007-4988","severity":"moderate","public_date":"2007-09-19T00:00:00Z","advisories":["RHSA-2008:0145"],"bugzilla":"310081","bugzilla_description":"CVE-2007-4988 Integer overflow in ImageMagick's DIB coder","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["ImageMagick-0:6.2.8.0-4.el5_1.1","ImageMagick-0:6.0.7.1-17.el4_6.1","ImageMagick-0:5.5.6-28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4988.json"},{"CVE":"CVE-2007-4985","severity":"low","public_date":"2007-09-19T00:00:00Z","advisories":["RHSA-2008:0145","RHSA-2008:0165"],"bugzilla":"310091","bugzilla_description":"CVE-2007-4985 Infinite loops in ImageMagick's XCF and DCM coders","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["ImageMagick-0:6.2.8.0-4.el5_1.1","ImageMagick-0:6.0.7.1-17.el4_6.1","ImageMagick-0:5.3.8-21","ImageMagick-0:5.5.6-28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4985.json"},{"CVE":"CVE-2007-4986","severity":"moderate","public_date":"2007-09-19T00:00:00Z","advisories":["RHSA-2008:0145","RHSA-2008:0165"],"bugzilla":"310121","bugzilla_description":"CVE-2007-4986 Multiple integer overflows in ImageMagick","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["ImageMagick-0:6.2.8.0-4.el5_1.1","ImageMagick-0:6.0.7.1-17.el4_6.1","ImageMagick-0:5.3.8-21","ImageMagick-0:5.5.6-28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4986.json"},{"CVE":"CVE-2007-1797","severity":"moderate","public_date":"2007-03-31T00:00:00Z","advisories":["RHSA-2008:0145","RHSA-2008:0165"],"bugzilla":"235071","bugzilla_description":"CVE-2007-1797 Heap overflow in ImageMagick's DCM and XWD coders","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:6.2.8.0-4.el5_1.1","ImageMagick-0:6.0.7.1-17.el4_6.1","ImageMagick-0:5.3.8-21","ImageMagick-0:5.5.6-28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1797.json"},{"CVE":"CVE-2008-1097","severity":"moderate","public_date":"2007-03-11T00:00:00Z","advisories":["RHSA-2008:0145","RHSA-2008:0165"],"bugzilla":"285861","bugzilla_description":"CVE-2008-1097 Memory corruption in ImageMagick's PCX coder","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:6.2.8.0-4.el5_1.1","ImageMagick-0:6.0.7.1-17.el4_6.1","ImageMagick-0:5.3.8-21","ImageMagick-0:5.5.6-28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1097.json"},{"CVE":"CVE-2008-1096","severity":"moderate","public_date":"2007-03-11T00:00:00Z","advisories":["RHSA-2008:0145"],"bugzilla":"286411","bugzilla_description":"CVE-2008-1096 Out of bound write in ImageMagick's XCF coder","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:6.2.8.0-4.el5_1.1","ImageMagick-0:6.0.7.1-17.el4_6.1","ImageMagick-0:5.5.6-28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1096.json"},{"CVE":"CVE-2006-5456","severity":"moderate","public_date":"2006-09-29T00:00:00Z","advisories":["RHSA-2007:0015"],"bugzilla":"210921","bugzilla_description":"CVE-2006-5456 Overflows in GraphicsMagick and ImageMagick's DCM and PALM handling routines","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:5.3.8-18","ImageMagick-0:5.5.6-24","ImageMagick-0:6.0.7.1-16.0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5456.json"},{"CVE":"CVE-2006-5868","severity":"moderate","public_date":"2006-09-29T00:00:00Z","advisories":["RHSA-2007:0015"],"bugzilla":"217560","bugzilla_description":"CVE-2006-5868 Insufficient boundary check in ImageMagick's SGIDecode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:5.3.8-18","ImageMagick-0:5.5.6-24","ImageMagick-0:6.0.7.1-16.0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5868.json"},{"CVE":"CVE-2006-3743","severity":"moderate","public_date":"2006-08-22T00:00:00Z","advisories":["RHSA-2006:0633"],"bugzilla":"1618158","bugzilla_description":"CVE-2006-3743 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:5.5.6-20","ImageMagick-0:6.0.7.1-16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3743.json"},{"CVE":"CVE-2006-3744","severity":"moderate","public_date":"2006-08-22T00:00:00Z","advisories":["RHSA-2006:0633"],"bugzilla":"1618159","bugzilla_description":"CVE-2006-3744 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:5.5.6-20","ImageMagick-0:6.0.7.1-16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3744.json"},{"CVE":"CVE-2006-4144","severity":"moderate","public_date":"2006-08-14T00:00:00Z","advisories":["RHSA-2006:0633"],"bugzilla":"1618176","bugzilla_description":"CVE-2006-4144 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:5.5.6-20","ImageMagick-0:6.0.7.1-16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4144.json"},{"CVE":"CVE-2006-0082","severity":"moderate","public_date":"2006-01-04T00:00:00Z","advisories":["RHSA-2006:0178"],"bugzilla":"1617873","bugzilla_description":"CVE-2006-0082 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:6.0.7.1-14","ImageMagick-0:5.5.6-18"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0082.json"},{"CVE":"CVE-2006-2440","severity":"low","public_date":"2006-01-02T00:00:00Z","advisories":["RHSA-2007:0015"],"bugzilla":"1618102","bugzilla_description":"CVE-2006-2440 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:5.3.8-18","ImageMagick-0:5.5.6-24","ImageMagick-0:6.0.7.1-16.0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2440.json"},{"CVE":"CVE-2005-4601","severity":"moderate","public_date":"2005-12-29T00:00:00Z","advisories":["RHSA-2006:0178"],"bugzilla":"1617859","bugzilla_description":"CVE-2005-4601 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:6.0.7.1-14","ImageMagick-0:5.5.6-18"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4601.json"},{"CVE":"CVE-2005-1739","severity":"moderate","public_date":"2005-04-25T00:00:00Z","advisories":["RHSA-2005:480"],"bugzilla":"1617662","bugzilla_description":"CVE-2005-1739 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:6.0.7.1-12","ImageMagick-0:5.5.6-15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1739.json"},{"CVE":"CVE-2005-1275","severity":"important","public_date":"2005-04-24T00:00:00Z","advisories":["RHSA-2005:413"],"bugzilla":"1617627","bugzilla_description":"CVE-2005-1275 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:6.0.7.1-11","ImageMagick-0:5.5.6-14"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1275.json"},{"CVE":"CVE-2005-0397","severity":"moderate","public_date":"2005-02-02T00:00:00Z","advisories":["RHSA-2005:320","RHSA-2005:070"],"bugzilla":"1617515","bugzilla_description":"CVE-2005-0397 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:6.0.7.1-10","ImageMagick-0:5.5.6-13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0397.json"},{"CVE":"CVE-2005-0005","severity":"moderate","public_date":"2005-01-17T00:00:00Z","advisories":["RHSA-2005:070","RHSA-2005:071"],"bugzilla":"1617431","bugzilla_description":"CVE-2005-0005 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:5.5.6-13","ImageMagick-0:6.0.7.1-6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0005.json"},{"CVE":"CVE-2004-0981","severity":null,"public_date":"2004-10-06T00:00:00Z","advisories":["RHSA-2004:636"],"bugzilla":"1617341","bugzilla_description":"CVE-2004-0981 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:5.5.6-7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0981.json"},{"CVE":"CVE-2004-0827","severity":"important","public_date":"2004-08-24T00:00:00Z","advisories":["RHSA-2004:636","RHSA-2004:480","RHSA-2004:494"],"bugzilla":"1617306","bugzilla_description":"CVE-2004-0827 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:5.5.6-7","ImageMagick-0:5.5.6-6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0827.json"},{"CVE":"CVE-2005-0761","severity":"low","public_date":"2004-06-09T00:00:00Z","advisories":["RHSA-2005:070"],"bugzilla":"1617576","bugzilla_description":"CVE-2005-0761 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:5.5.6-13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0761.json"},{"CVE":"CVE-2005-0762","severity":"moderate","public_date":"2004-06-09T00:00:00Z","advisories":["RHSA-2005:070"],"bugzilla":"1617577","bugzilla_description":"CVE-2005-0762 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:5.5.6-13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0762.json"},{"CVE":"CVE-2005-0759","severity":"low","public_date":"2004-03-11T00:00:00Z","advisories":["RHSA-2005:070"],"bugzilla":"1617574","bugzilla_description":"CVE-2005-0759 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:5.5.6-13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0759.json"},{"CVE":"CVE-2005-0760","severity":"low","public_date":"2004-03-11T00:00:00Z","advisories":["RHSA-2005:070"],"bugzilla":"1617575","bugzilla_description":"CVE-2005-0760 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ImageMagick-0:5.5.6-13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0760.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/LibRaw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/LibRaw_security_api_results.json
new file mode 100644
index 0000000..157d038
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/LibRaw_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24889","severity":"moderate","public_date":"2020-08-20T00:00:00Z","advisories":[],"bugzilla":"1882339","bugzilla_description":"CVE-2020-24889 libraw: buffer overflow vulnerability in LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24889.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-24890","severity":"moderate","public_date":"2020-08-20T00:00:00Z","advisories":[],"bugzilla":"1882344","bugzilla_description":"CVE-2020-24890 libraw: null pointer dereference in parse_tiff_ifd in src/metadata/tiff.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24890.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-15503","severity":"moderate","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1853477","bugzilla_description":"CVE-2020-15503 LibRaw: lack of thumbnail size range check can lead to buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15503.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15365","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1852093","bugzilla_description":"CVE-2020-15365 LibRaw: out-of-bounds write in parse_exif function in metadata/exif_gps.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15365.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20364","severity":"low","public_date":"2018-12-21T00:00:00Z","advisories":[],"bugzilla":"1663961","bugzilla_description":"CVE-2018-20364 libraw: NULL pointer dereference in LibRaw::copy_bayer resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20364.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20365","severity":"moderate","public_date":"2018-12-21T00:00:00Z","advisories":[],"bugzilla":"1663964","bugzilla_description":"CVE-2018-20365 libraw: Heap-based buffer overflow in LibRaw::raw2image() resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20365.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20363","severity":"low","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1663960","bugzilla_description":"CVE-2018-20363 libraw: NULL pointer dereference in LibRaw::raw2image resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20363.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20337","severity":"moderate","public_date":"2018-12-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1661555","bugzilla_description":"CVE-2018-20337 LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["LibRaw-0:0.19.5-1.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20337.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5819","severity":"low","public_date":"2018-12-13T00:00:00Z","advisories":["RHBA-2019:2044"],"bugzilla":"1661604","bugzilla_description":"CVE-2018-5819 LibRaw: DoS in parse_sinar_ia function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["LibRaw-0:0.19.2-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5819.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5818","severity":"low","public_date":"2018-12-13T00:00:00Z","advisories":["RHBA-2019:2044"],"bugzilla":"1661608","bugzilla_description":"CVE-2018-5818 LibRaw: DoS in parse_rollei function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["LibRaw-0:0.19.2-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5818.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5817","severity":"low","public_date":"2018-12-13T00:00:00Z","advisories":[],"bugzilla":"1661612","bugzilla_description":"CVE-2018-5817 LibRaw: DoS in unpacked_load_raw function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5817.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5815","severity":"moderate","public_date":"2018-07-22T00:00:00Z","advisories":[],"bugzilla":"1610151","bugzilla_description":"CVE-2018-5815 LibRaw: Integer overflow in internal/dcraw_common.cpp:parse_qt() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-5816","severity":"moderate","public_date":"2018-07-22T00:00:00Z","advisories":[],"bugzilla":"1610156","bugzilla_description":"CVE-2018-5816 LibRaw: Integer overflow in internal/dcraw_common.cpp:identify() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-5813","severity":"low","public_date":"2018-07-19T00:00:00Z","advisories":[],"bugzilla":"1609954","bugzilla_description":"CVE-2018-5813 libRaw: infinite loop in the parse_minolta function in dcraw/dcraw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5813.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5807","severity":"low","public_date":"2018-05-30T00:00:00Z","advisories":[],"bugzilla":"1610469","bugzilla_description":"CVE-2018-5807 LibRaw: out-of-bounds read in samsung_load_raw in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5807.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-5810","severity":"moderate","public_date":"2018-05-30T00:00:00Z","advisories":[],"bugzilla":"1610479","bugzilla_description":"CVE-2018-5810 libRaw: heap-based buffer overflow in rollei_load_raw in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5810.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-5811","severity":"moderate","public_date":"2018-05-30T00:00:00Z","advisories":[],"bugzilla":"1610483","bugzilla_description":"CVE-2018-5811 LibRaw: out-of-bounds read in nikon_coolscan_load_raw in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5811.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-5812","severity":"moderate","public_date":"2018-05-30T00:00:00Z","advisories":[],"bugzilla":"1610486","bugzilla_description":"CVE-2018-5812 libRaw: NULL pointer dereference in nikon_coolscan_load_raw in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5812.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5808","severity":"important","public_date":"2018-05-30T00:00:00Z","advisories":[],"bugzilla":"1661518","bugzilla_description":"CVE-2018-5808 LibRaw: stack-based buffer overflow in find_green() leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5808.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-5809","severity":"important","public_date":"2018-05-30T00:00:00Z","advisories":[],"bugzilla":"1661520","bugzilla_description":"CVE-2018-5809 LibRaw: stack-based buffer overflow in LibRaw::parse_exif() and subsequently execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5809.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-10528","severity":"moderate","public_date":"2018-04-27T00:00:00Z","advisories":[],"bugzilla":"1574313","bugzilla_description":"CVE-2018-10528 LibRaw: Stack-based buffer overflow in libraw_cxx.cpp:utf2char() allows for potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10528.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10529","severity":"low","public_date":"2018-04-27T00:00:00Z","advisories":[],"bugzilla":"1574325","bugzilla_description":"CVE-2018-10529 LibRaw: Out-of-bounds read in X3F property table list functionality in libraw_x3f.cpp and libraw_cxx.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10529.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5804","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":[],"bugzilla":"1591879","bugzilla_description":"CVE-2018-5804 LibRaw: type confusion error in identify() function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5805","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1591887","bugzilla_description":"CVE-2018-5805 LibRaw: Stack-based buffer overflow in quicktake_100_load_raw() function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5805.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-5806","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1591897","bugzilla_description":"CVE-2018-5806 LibRaw: NULL pointer dereference in leaf_hdr_load_raw() function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5806.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5800","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1553332","bugzilla_description":"CVE-2018-5800 LibRaw: Heap-based buffer overflow in LibRaw::kodak_ycbcr_load_raw function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5800.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5801","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1553334","bugzilla_description":"CVE-2018-5801 LibRaw: NULL pointer dereference in LibRaw::unpack function src/libraw_cxx.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5801.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5802","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1553335","bugzilla_description":"CVE-2018-5802 LibRaw: Out-of-bounds read in kodak_radc_load_raw function internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5802.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16909","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":[],"bugzilla":"1524859","bugzilla_description":"CVE-2017-16909 libraw: Heap-buffer overflow in the LibRaw::panasonic_load_raw() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16909.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16910","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":[],"bugzilla":"1524860","bugzilla_description":"CVE-2017-16910 libraw: Invalid read memory access in the LibRaw::xtrans_interpolate() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16910.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14348","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1492121","bugzilla_description":"CVE-2017-14348 libraw: Heap-based 1 byte buffer over-write in processCanonCameraInfo function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14348.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14608","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1499687","bugzilla_description":"CVE-2017-14608 libraw: Out-of-bounds read in the kodak_65000_load_raw function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14608.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14265","severity":"low","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1494405","bugzilla_description":"CVE-2017-14265 libraw: Stack based buffer overflow in the xtrans_interpolate function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14265.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13735","severity":"low","public_date":"2017-08-22T00:00:00Z","advisories":[],"bugzilla":"1488476","bugzilla_description":"CVE-2017-13735 libraw: Floating point exception in kodak_radc_load_raw function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6886","severity":"low","public_date":"2017-05-11T00:00:00Z","advisories":[],"bugzilla":"1451640","bugzilla_description":"CVE-2017-6886 libraw: Memory corruption in the parse_tiff_ifd()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6886.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6887","severity":"low","public_date":"2017-05-11T00:00:00Z","advisories":[],"bugzilla":"1451642","bugzilla_description":"CVE-2017-6887 libraw: Boundary error in the parse_tiff_ifd()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6887.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8366","severity":"moderate","public_date":"2015-11-30T00:00:00Z","advisories":[],"bugzilla":"1287056","bugzilla_description":"CVE-2015-8366 LibRaw: Index overflow in smal_decode_segment","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8366.json"},{"CVE":"CVE-2015-8367","severity":"low","public_date":"2015-11-30T00:00:00Z","advisories":[],"bugzilla":"1287076","bugzilla_description":"CVE-2015-8367 LibRaw: Memory objects are not intialized properly","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8367.json"},{"CVE":"CVE-2015-3885","severity":"low","public_date":"2015-05-11T00:00:00Z","advisories":[],"bugzilla":"1221249","bugzilla_description":"CVE-2015-3885 dcraw: input sanitization flaw leading to buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-190->CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3885.json"},{"CVE":"CVE-2013-1438","severity":"low","public_date":"2013-08-28T00:00:00Z","advisories":[],"bugzilla":"1002714","bugzilla_description":"CVE-2013-1438 CVE-2013-1439 LibRaw: multiple denial of service flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1438.json"},{"CVE":"CVE-2013-1439","severity":"low","public_date":"2013-08-28T00:00:00Z","advisories":[],"bugzilla":"1002714","bugzilla_description":"CVE-2013-1438 CVE-2013-1439 LibRaw: multiple denial of service flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1439.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ModemManager-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ModemManager-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ModemManager-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ModemManager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ModemManager_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ModemManager_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/MySQL-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/MySQL-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/MySQL-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-adsl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-adsl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-adsl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-bluetooth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-bluetooth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-bluetooth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-config-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-config-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-config-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-libnm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-libnm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-libnm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-libreswan-gnome_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-libreswan-gnome_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-libreswan-gnome_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-libreswan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-libreswan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-libreswan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-ppp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-ppp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-ppp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-team_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-team_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-team_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-tui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-tui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-tui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-wifi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-wifi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-wifi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-wwan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-wwan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager-wwan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager_security_api_results.json
new file mode 100644
index 0000000..5b58c39
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/NetworkManager_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10754","severity":"moderate","public_date":"2020-05-29T04:41:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4003","RHSA-2020:3011"],"bugzilla":"1841041","bugzilla_description":"CVE-2020-10754 NetworkManager: user configuration not honoured leaving the connection unauthenticated via insecure defaults","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287->CWE-306","affected_packages":["NetworkManager-1:1.18.8-1.el7","redhat-coreos-43.82.202007300301.0","NetworkManager-1:1.22.8-5.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10754.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-15688","severity":"important","public_date":"2018-10-26T00:00:00Z","advisories":["RHSA-2019:0049","RHSA-2018:3665"],"bugzilla":"1639067","bugzilla_description":"CVE-2018-15688 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-190->CWE-122","affected_packages":["NetworkManager-1:1.12.0-8.el7_6","systemd-0:219-62.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15688.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-1000135","severity":"moderate","public_date":"2018-03-20T00:00:00Z","advisories":[],"bugzilla":"1558238","bugzilla_description":"CVE-2018-1000135 NetworkManager: Information exposure in DNS resolver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000135.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-0764","severity":"low","public_date":"2016-04-02T00:00:00Z","advisories":["RHSA-2016:2581"],"bugzilla":"1324025","bugzilla_description":"CVE-2016-0764 NetworkManager: Race condition allowing info leak","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-362","affected_packages":["NetworkManager-1:1.4.0-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0764.json"},{"CVE":"CVE-2015-2924","severity":"low","public_date":"2015-04-02T00:00:00Z","advisories":["RHSA-2015:2315"],"bugzilla":"1209902","bugzilla_description":"CVE-2015-2924 NetworkManager: denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-358","affected_packages":["NetworkManager-1:1.0.6-27.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2924.json"},{"CVE":"CVE-2015-0272","severity":"moderate","public_date":"2015-02-23T00:00:00Z","advisories":["RHSA-2015:2315"],"bugzilla":"1192132","bugzilla_description":"CVE-2015-0272 NetworkManager: remote DoS using IPv6 RA with bogus MTU","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["NetworkManager-1:1.0.6-27.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0272.json"},{"CVE":"CVE-2012-1096","severity":"low","public_date":"2012-02-29T00:00:00Z","advisories":[],"bugzilla":"769807","bugzilla_description":"CVE-2012-1096 NetworkManager, wpa_supplicant: Improper x509v3 certificate and key file paths sanitization","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1096.json"},{"CVE":"CVE-2012-2736","severity":"low","public_date":"2012-01-15T00:00:00Z","advisories":[],"bugzilla":"782627","bugzilla_description":"CVE-2012-2736 NetworkManager: creating new WPA-secured wireless network results in insecure network being created instead","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2736.json"},{"CVE":"CVE-2011-3364","severity":"important","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2011:1338"],"bugzilla":"737338","bugzilla_description":"CVE-2011-3364 NetworkManager: Console user can escalate to root via newlines in ifcfg-rh connection name","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["NetworkManager-1:0.8.1-9.el6_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3364.json"},{"CVE":"CVE-2011-2176","severity":"moderate","public_date":"2011-06-08T00:00:00Z","advisories":["RHSA-2011:0930"],"bugzilla":"709662","bugzilla_description":"CVE-2011-2176 NetworkManager: Did not honour PolicyKit auth_admin action element by creation of Ad-Hoc wireless networks","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["NetworkManager-1:0.8.1-9.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2176.json"},{"CVE":"CVE-2009-4145","severity":"moderate","public_date":"2009-12-10T00:00:00Z","advisories":["RHSA-2010:0108"],"bugzilla":"546117","bugzilla_description":"CVE-2009-4145 NetworkManager: information disclosure by nm-connection-editor","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["NetworkManager-1:0.7.0-9.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4145.json"},{"CVE":"CVE-2009-4144","severity":"moderate","public_date":"2009-12-08T00:00:00Z","advisories":["RHSA-2010:0108"],"bugzilla":"546795","bugzilla_description":"CVE-2009-4144 NetworkManager: WPA enterprise network not verified when certificate is removed","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["NetworkManager-1:0.7.0-9.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4144.json"},{"CVE":"CVE-2009-0365","severity":"moderate","public_date":"2009-03-03T00:00:00Z","advisories":["RHSA-2009:0361","RHSA-2009:0362"],"bugzilla":"487722","bugzilla_description":"CVE-2009-0365 NetworkManager: GetSecrets disclosure","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["NetworkManager-0:0.3.1-5.el4","NetworkManager-1:0.7.0-4.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0365.json"},{"CVE":"CVE-2009-0578","severity":"moderate","public_date":"2009-03-03T00:00:00Z","advisories":["RHSA-2009:0361"],"bugzilla":"487752","bugzilla_description":"CVE-2009-0578 NetworkManager: local users can modify the connection settings","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["NetworkManager-1:0.7.0-4.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0578.json"},{"CVE":"CVE-2006-7246","severity":"moderate","public_date":"2006-05-10T00:00:00Z","advisories":[],"bugzilla":"756418","bugzilla_description":"CVE-2006-7246 NetworkManager, wpa_supplicant (WPA-Enterprise): Verify that the certificate is from trusted CA and matches the specified subject","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7246.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ORBit2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ORBit2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ORBit2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OVMF_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OVMF_security_api_results.json
new file mode 100644
index 0000000..0db8c7b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OVMF_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14584","severity":"moderate","public_date":"2020-10-16T00:00:00Z","advisories":[],"bugzilla":"1889486","bugzilla_description":"CVE-2019-14584 edk2: NULL pointer dereference in AuthenticodeVerify()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14584.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1968","severity":"low","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877458","bugzilla_description":"CVE-2020-1968 openssl: Information exposure when DH secret are reused across multiple TLS connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-14560","severity":"moderate","public_date":"2020-07-01T00:00:00Z","advisories":[],"bugzilla":"1858038","bugzilla_description":"CVE-2019-14560 edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14560.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2019-14586","severity":"moderate","public_date":"2020-02-16T00:00:00Z","advisories":[],"bugzilla":"1833340","bugzilla_description":"CVE-2019-14586 edk2: potential use-after-free due to the original configuration runtime memory is freed but it is still exposed to the OS runtime","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14586.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2019-14558","severity":"moderate","public_date":"2020-02-16T00:00:00Z","advisories":[],"bugzilla":"1833347","bugzilla_description":"CVE-2019-14558 edk2: potentially leaking of secret information due to uncleared memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14558.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-14587","severity":"moderate","public_date":"2020-02-16T00:00:00Z","advisories":[],"bugzilla":"1833352","bugzilla_description":"CVE-2019-14587 edk2: double-unmap issue in SdMmcCreateTrb function in MdeModulePkg/Bus/Pci/SdMmcPciHcDxe/SdMmcPciHci.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14587.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2019-14575","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":[],"bugzilla":"1736862","bugzilla_description":"CVE-2019-14575 edk2: DxeImageVerificationHandler() fails open in case of dbx signature check","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14575.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14559","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":[],"bugzilla":"1758601","bugzilla_description":"CVE-2019-14559 edk2: memory leak in ArpOnFrameRcvdDpc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14559.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-14563","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:1712"],"bugzilla":"1758620","bugzilla_description":"CVE-2019-14563 edk2: numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["edk2-0:20190829git37eef91017ad-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14563.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L","cvss3_score":"6.4"},{"CVE":"CVE-2019-14553","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":[],"bugzilla":"1758518","bugzilla_description":"CVE-2019-14553 edk2: invalid server certificate accepted in HTTPS-over-IPv6 boot","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14553.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12183","severity":"moderate","public_date":"2019-03-29T00:00:00Z","advisories":[],"bugzilla":"1694077","bugzilla_description":"CVE-2018-12183 edk2: stack overflow in DxeCore leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12183.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-12182","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":[],"bugzilla":"1694081","bugzilla_description":"CVE-2018-12182 edk2: insufficient memory write in SMM service leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-12179","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":[],"bugzilla":"1694072","bugzilla_description":"CVE-2018-12179 edk2: improper configuration insystem firmware leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12179.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-12181","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":["RHSA-2019:3338","RHSA-2019:2125"],"bugzilla":"1686783","bugzilla_description":"CVE-2018-12181 edk2: Stack buffer overflow with corrupted BMP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["edk2-0:20190308git89910a39dcfd-6.el8","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12181.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-1543","severity":"low","public_date":"2019-03-06T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1695954","bugzilla_description":"CVE-2019-1543 openssl: ChaCha20-Poly1305 with long nonces","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2018-12178","severity":"important","public_date":"2019-02-26T00:00:00Z","advisories":[],"bugzilla":"1683326","bugzilla_description":"CVE-2018-12178 edk2: improper DNS packet size check","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12178.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"7.2"},{"CVE":"CVE-2018-12180","severity":"important","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:0809","RHSA-2019:1116","RHSA-2019:0968"],"bugzilla":"1683372","bugzilla_description":"CVE-2018-12180 edk2: Buffer Overflow in BlockIo service for RAM disk","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7_6.1","redhat-virtualization-host-0:4.3-20190418.0.el7_6","edk2-0:20180508gitee3198e672e2-9.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"8.3"},{"CVE":"CVE-2019-1559","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:2304","RHSA-2019:2439","RHSA-2019:3929","RHSA-2019:2437","RHSA-2019:2471"],"bugzilla":"1683804","bugzilla_description":"CVE-2019-1559 openssl: 0-byte record padding oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-0:1.0.1e-58.el6_10","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-0160","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3338","RHSA-2019:2125"],"bugzilla":"1691640","bugzilla_description":"CVE-2019-0160 edk2: Buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-121)","affected_packages":["edk2-0:20190308git89910a39dcfd-6.el8","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0160.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2018-3630","severity":"moderate","public_date":"2019-01-26T00:00:00Z","advisories":[],"bugzilla":"1683653","bugzilla_description":"CVE-2018-3630 ovmf: Logic error in FV parsing in MdeModulePkg\\Core\\Pei\\FwVol\\FwVol.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3630.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2018-5407","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3932","RHSA-2019:0483","RHSA-2019:2125","RHSA-2019:3929","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1645695","bugzilla_description":"CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7_6.1","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-0735","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1644356","bugzilla_description":"CVE-2018-0735 openssl: timing side channel attack in the ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-3613","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641433","bugzilla_description":"CVE-2018-3613 edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3613.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5731","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641442","bugzilla_description":"CVE-2017-5731 edk2: Privilege escalation via processing of malformed files in TianoCompress.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5731.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5732","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641446","bugzilla_description":"CVE-2017-5732 edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5732.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5733","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641450","bugzilla_description":"CVE-2017-5733 edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5733.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5734","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641458","bugzilla_description":"CVE-2017-5734 edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5735","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641465","bugzilla_description":"CVE-2017-5735 edk2: Privilege escalation via heap-based buffer overflow in Decode() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-0734","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:3700","RHSA-2019:3932","RHSA-2019:2304","RHSA-2019:3933","RHSA-2019:3935","RHBA-2019:3303"],"bugzilla":"1644364","bugzilla_description":"CVE-2018-0734 openssl: timing side channel attack in the DSA signature algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0732","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2019:1296","RHSA-2019:1543","RHSA-2018:2553","RHSA-2018:2552","RHSA-2018:3221"],"bugzilla":"1591100","bugzilla_description":"CVE-2018-0732 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-1:1.0.2k-16.el7","rhoar-nodejs-1:8.11.4-2.el7","rhoar-nodejs-1:10.9.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-0161","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2019:2125","RHSA-2019:2437"],"bugzilla":"1694065","bugzilla_description":"CVE-2019-0161 edk2: stack overflow in XHCI causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-400","affected_packages":["redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2018-0737","severity":"low","public_date":"2018-04-16T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:3933","RHSA-2018:3221","RHSA-2019:3935"],"bugzilla":"1568253","bugzilla_description":"CVE-2018-0737 openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0737.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-0733","severity":"moderate","public_date":"2018-03-27T00:00:00Z","advisories":[],"bugzilla":"1561260","bugzilla_description":"CVE-2018-0733 openssl: Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages in a reduced number of attempts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0733.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-0739","severity":"moderate","public_date":"2018-03-27T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3090","RHSA-2019:1712","RHSA-2019:1711","RHSA-2018:3221"],"bugzilla":"1561266","bugzilla_description":"CVE-2018-0739 openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-400","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7","openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0739.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2017-3737","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523504","bugzilla_description":"CVE-2017-3737 openssl: Read/write after SSL object in error state","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3738","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523510","bugzilla_description":"CVE-2017-3738 openssl: rsaz_1024_mul_avx2 overflow bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3736","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1509169","bugzilla_description":"CVE-2017-3736 openssl: bn_sqrx8x_internal carry bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":["openssl-1:1.0.2k-12.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3735","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":["RHSA-2018:3221"],"bugzilla":"1486144","bugzilla_description":"CVE-2017-3735 openssl: Malformed X.509 IPAdressFamily could cause OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3733","severity":"important","public_date":"2017-02-16T00:00:00Z","advisories":[],"bugzilla":"1421695","bugzilla_description":"CVE-2017-3733 openssl: Encrypt-Then-Mac renegotiation crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3733.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3731","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2017:0286","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416852","bugzilla_description":"CVE-2017-3731 openssl: Truncated packet could crash via OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["openssl-0:1.0.1e-48.el6_8.4","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3731.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3730","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":[],"bugzilla":"1416855","bugzilla_description":"CVE-2017-3730 openssl: Bad (EC)DHE parameters cause a client crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3730.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3732","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416856","bugzilla_description":"CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-7054","severity":"important","public_date":"2016-11-10T00:00:00Z","advisories":[],"bugzilla":"1393920","bugzilla_description":"CVE-2016-7054 openssl: Corrupting larger payloads when using ChaCha20/Poly1305 ciphersuites leads to DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7053","severity":"moderate","public_date":"2016-11-10T00:00:00Z","advisories":[],"bugzilla":"1393930","bugzilla_description":"CVE-2016-7053 openssl: CMS Null dereference vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7055","severity":"low","public_date":"2016-10-11T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1393929","bugzilla_description":"CVE-2016-7055 openssl: Carry propagating bug in Montgomery multiplication","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7055.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-6302","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1369855","bugzilla_description":"CVE-2016-6302 openssl: Insufficient TLS session ticket HMAC length checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6303","severity":"moderate","public_date":"2016-08-20T00:00:00Z","advisories":[],"bugzilla":"1370146","bugzilla_description":"CVE-2016-6303 openssl: Integer overflow in MDC2_Update()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6303.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2014-8271","severity":"moderate","public_date":"2015-01-01T00:00:00Z","advisories":[],"bugzilla":"1162313","bugzilla_description":"CVE-2014-8271 uefi: INTEL-TA-201410-001 && INTEL-TA-201410-002","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8271.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenEXR-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenEXR-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenEXR-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI-modalias_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI-modalias_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI-modalias_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI-perl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI-perl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI_security_api_results.json
new file mode 100644
index 0000000..038cb32
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/OpenIPMI_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4786","severity":"moderate","public_date":"2013-07-08T00:00:00Z","advisories":[],"bugzilla":"1326638","bugzilla_description":"CVE-2013-4786 OpenIPMI, freeipmi: Leakage of password hashes via RAKP authentication","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4786.json"},{"CVE":"CVE-2011-4339","severity":"moderate","public_date":"2011-12-13T00:00:00Z","advisories":["RHSA-2011:1814","RHSA-2013:0123"],"bugzilla":"742837","bugzilla_description":"CVE-2011-4339 OpenIPMI: IPMI event daemon creates PID file with world writeable permissions","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["OpenIPMI-0:2.0.16-16.el5","ipmitool-0:1.8.11-12.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4339.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-command-not-found_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-command-not-found_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-command-not-found_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-gstreamer-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-gstreamer-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-gstreamer-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-gtk3-module_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-gtk3-module_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-gtk3-module_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-yum_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-yum_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit-yum_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit_security_api_results.json
new file mode 100644
index 0000000..f02cb18
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PackageKit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16121","severity":"low","public_date":"2020-09-24T00:00:00Z","advisories":[],"bugzilla":"1884560","bugzilla_description":"CVE-2020-16121 PackageKit: local attacker could use this issue to learn the MIME type of any file on the system","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16121.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-16122","severity":"moderate","public_date":"2020-09-24T00:00:00Z","advisories":[],"bugzilla":"1884562","bugzilla_description":"CVE-2020-16122 PackageKit: local user could possibly use this issue to install untrusted packages","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16122.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-1106","severity":"moderate","public_date":"2018-04-23T14:00:00Z","advisories":["RHSA-2018:1224"],"bugzilla":"1565992","bugzilla_description":"CVE-2018-1106 PackageKit: authentication bypass allows to install signed packages without administrator privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["PackageKit-0:1.1.5-2.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1106.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2013-1764","severity":"low","public_date":"2013-07-30T00:00:00Z","advisories":[],"bugzilla":"1090771","bugzilla_description":"CVE-2013-1764 PackageKit: downgrade packages when using the Zypper backend","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1764.json"},{"CVE":"CVE-2011-2515","severity":"low","public_date":"2011-07-01T00:00:00Z","advisories":[],"bugzilla":"717566","bugzilla_description":"CVE-2011-2515 PackageKit: installs unsigned RPM packages as though they were signed","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2515.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Package_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Package_security_api_results.json
new file mode 100644
index 0000000..f02cb18
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Package_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16121","severity":"low","public_date":"2020-09-24T00:00:00Z","advisories":[],"bugzilla":"1884560","bugzilla_description":"CVE-2020-16121 PackageKit: local attacker could use this issue to learn the MIME type of any file on the system","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16121.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-16122","severity":"moderate","public_date":"2020-09-24T00:00:00Z","advisories":[],"bugzilla":"1884562","bugzilla_description":"CVE-2020-16122 PackageKit: local user could possibly use this issue to install untrusted packages","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16122.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-1106","severity":"moderate","public_date":"2018-04-23T14:00:00Z","advisories":["RHSA-2018:1224"],"bugzilla":"1565992","bugzilla_description":"CVE-2018-1106 PackageKit: authentication bypass allows to install signed packages without administrator privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["PackageKit-0:1.1.5-2.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1106.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2013-1764","severity":"low","public_date":"2013-07-30T00:00:00Z","advisories":[],"bugzilla":"1090771","bugzilla_description":"CVE-2013-1764 PackageKit: downgrade packages when using the Zypper backend","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1764.json"},{"CVE":"CVE-2011-2515","severity":"low","public_date":"2011-07-01T00:00:00Z","advisories":[],"bugzilla":"717566","bugzilla_description":"CVE-2011-2515 PackageKit: installs unsigned RPM packages as though they were signed","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2515.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyGreSQL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyGreSQL_security_api_results.json
new file mode 100644
index 0000000..0ccb458
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyGreSQL_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2009-2940","severity":"moderate","public_date":"2009-10-14T00:00:00Z","advisories":[],"bugzilla":"1516701","bugzilla_description":"CVE-2009-2940 PyGreSQL: Missing a function to call PQescapeStringConn()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2940.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"5.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyPAM_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyPAM_security_api_results.json
new file mode 100644
index 0000000..ea6c007
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyPAM_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-1502","severity":"low","public_date":"2012-03-08T00:00:00Z","advisories":[],"bugzilla":"801116","bugzilla_description":"CVE-2012-1502 PyPAM: Double free by processing passwords containing NULL-bytes","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1502.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyQt4-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyQt4-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyQt4-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyQt4_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyQt4_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyQt4_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyYAML_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyYAML_security_api_results.json
new file mode 100644
index 0000000..6ab42e0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/PyYAML_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14343","severity":"moderate","public_date":"2020-07-22T00:00:00Z","advisories":[],"bugzilla":"1860466","bugzilla_description":"CVE-2020-14343 PyYAML: incomplete fix for CVE-2020-1747","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14343.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-1747","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1807367","bugzilla_description":"CVE-2020-1747 PyYAML: arbitrary command execution through python/object/new when FullLoader is used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1747.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-20477","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1806005","bugzilla_description":"CVE-2019-20477 PyYAML: command execution through python/object/apply constructor in FullLoader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20477.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-18342","severity":"moderate","public_date":"2018-06-27T00:00:00Z","advisories":[],"bugzilla":"1595743","bugzilla_description":"CVE-2017-18342 PyYAML: yaml.load() API could execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18342.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-as-IN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-as-IN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-as-IN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-bn-IN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-bn-IN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-bn-IN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-de-DE_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-de-DE_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-de-DE_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-en-US_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-en-US_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-en-US_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-es-ES_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-es-ES_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-es-ES_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-fr-FR_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-fr-FR_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-fr-FR_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-gu-IN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-gu-IN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-gu-IN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-hi-IN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-hi-IN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-hi-IN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-it-IT_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-it-IT_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-it-IT_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ja-JP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ja-JP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ja-JP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-kn-IN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-kn-IN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-kn-IN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ko-KR_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ko-KR_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ko-KR_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ml-IN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ml-IN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ml-IN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-mr-IN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-mr-IN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-mr-IN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-or-IN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-or-IN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-or-IN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-pa-IN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-pa-IN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-pa-IN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-pt-BR_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-pt-BR_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-pt-BR_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ru-RU_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ru-RU_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ru-RU_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ta-IN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ta-IN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-ta-IN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-te-IN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-te-IN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-te-IN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-zh-CN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-zh-CN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-zh-CN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-zh-TW_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-zh-TW_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/Red_Hat_Enterprise_Linux-Release_Notes-7-zh-TW_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/SDL-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/SDL-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/SDL-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/SDL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/SDL_security_api_results.json
new file mode 100644
index 0000000..ad7c9f0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/SDL_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14906","severity":"important","public_date":"2019-11-25T00:00:00Z","advisories":["RHSA-2019:4024"],"bugzilla":"1777372","bugzilla_description":"CVE-2019-14906 SDL: CVE-2019-13616 not fixed in Red Hat Enterprise Linux 7 erratum RHSA-2019:3950","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-787|CWE-125)","affected_packages":["SDL-0:1.2.15-15.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-13616","severity":"important","public_date":"2019-07-30T00:00:00Z","advisories":["RHSA-2019:3951","RHSA-2020:0293","RHSA-2019:3950"],"bugzilla":"1747237","bugzilla_description":"CVE-2019-13616 SDL: heap-based buffer overflow in SDL blit functions in video/SDL_blit*.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-787|CWE-125)","affected_packages":["SDL-0:1.2.15-14.el7_7","SDL-0:1.2.15-36.el8_1","SDL-0:1.2.15-33.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13616.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-13626","severity":"moderate","public_date":"2019-07-17T00:00:00Z","advisories":[],"bugzilla":"1731101","bugzilla_description":"CVE-2019-13626 SDL: integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c leads to heap-based buffer over-read in Fill_IMA_ADPCM_block","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13626.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-12221","severity":"low","public_date":"2019-05-20T00:00:00Z","advisories":[],"bugzilla":"1732250","bugzilla_description":"CVE-2019-12221 SDL: null-pointer dereference in function SDL_free_REAL in stdlib/SDL_malloc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12221.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-12216","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":[],"bugzilla":"1732252","bugzilla_description":"CVE-2019-12216 SDL: heap-based buffer overflow in function SDL2_image function IMG_LoadPCX_RW in IMG_pcx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12216.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-12217","severity":"low","public_date":"2019-05-20T00:00:00Z","advisories":[],"bugzilla":"1732254","bugzilla_description":"CVE-2019-12217 SDL: null-pointer dereference in function stdio_read in file/SDL_rwops.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12217.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-12218","severity":"low","public_date":"2019-05-20T00:00:00Z","advisories":[],"bugzilla":"1732256","bugzilla_description":"CVE-2019-12218 SDL: null-pointer dereference in function IMG_LoadPCX_RW in IMG_pcx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12218.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-12219","severity":"low","public_date":"2019-05-20T00:00:00Z","advisories":[],"bugzilla":"1732258","bugzilla_description":"CVE-2019-12219 SDL: invalid free error in function SDL_SetError_REAL","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12219.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-12220","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":[],"bugzilla":"1732260","bugzilla_description":"CVE-2019-12220 SDL: out-of-bounds read in function SDL_FreePalette_REAL in video/SDL_pixels.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12220.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-12222","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":[],"bugzilla":"1732262","bugzilla_description":"CVE-2019-12222 SDL: out-of-bounds read in function SDL_InvalidateMap in video/SDL_pixels.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12222.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-7638","severity":"moderate","public_date":"2019-02-08T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1677143","bugzilla_description":"CVE-2019-7638 SDL: heap-based buffer over-read in Map1toN in video/SDL_pixels.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7638.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-7574","severity":"low","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1676749","bugzilla_description":"CVE-2019-7574 SDL: heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7574.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-7637","severity":"moderate","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1677151","bugzilla_description":"CVE-2019-7637 SDL: heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7637.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-7636","severity":"moderate","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1677156","bugzilla_description":"CVE-2019-7636 SDL: heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7636.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-7635","severity":"low","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1677158","bugzilla_description":"CVE-2019-7635 SDL: heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7635.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-7577","severity":"low","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1676509","bugzilla_description":"CVE-2019-7577 SDL: buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7577.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-7575","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1676743","bugzilla_description":"CVE-2019-7575 SDL: heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7575.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-7573","severity":"low","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1676751","bugzilla_description":"CVE-2019-7573 SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7573.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-7572","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1676753","bugzilla_description":"CVE-2019-7572 SDL: buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7572.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-7578","severity":"low","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1676781","bugzilla_description":"CVE-2019-7578 SDL: heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7578.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-7576","severity":"low","public_date":"2019-02-05T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1676755","bugzilla_description":"CVE-2019-7576 SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7576.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2017-2888","severity":"important","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1500623","bugzilla_description":"CVE-2017-2888 SDL: Integer overflow while creating a new RGB surface","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2888.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/SLOF_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/SLOF_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/SLOF_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abattis-cantarell-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abattis-cantarell-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abattis-cantarell-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-ccpp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-ccpp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-ccpp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-kerneloops_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-kerneloops_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-kerneloops_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-pstoreoops_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-pstoreoops_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-pstoreoops_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-vmcore_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-vmcore_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-vmcore_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-xorg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-xorg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-addon-xorg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-console-notification_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-console-notification_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-console-notification_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-dbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-dbus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-dbus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-desktop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-desktop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-desktop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-gui-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-gui-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-gui-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-java-connector_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-java-connector_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-java-connector_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-tui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-tui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt-tui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt_security_api_results.json
new file mode 100644
index 0000000..b4c3da5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/abrt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5273","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2015:2505"],"bugzilla":"1262252","bugzilla_description":"CVE-2015-5273 abrt: Insecure temporary directory usage in abrt-action-install-debuginfo-to-abrt-cache","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["abrt-0:2.1.11-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5273.json"},{"CVE":"CVE-2015-5287","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2015:2505"],"bugzilla":"1266837","bugzilla_description":"CVE-2015-5287 abrt: incorrect permissions on /var/spool/abrt","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["abrt-0:2.1.11-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5287.json"},{"CVE":"CVE-2015-3159","severity":"important","public_date":"2015-04-29T00:00:00Z","advisories":["RHSA-2015:1210","RHSA-2015:1083"],"bugzilla":"1216962","bugzilla_description":"CVE-2015-3159 abrt: missing process environment sanitizaton in abrt-action-install-debuginfo-to-abrt-cache","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:N","CWE":"CWE-20","affected_packages":["abrt-0:2.0.8-26.el6_6.1","abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3159.json"},{"CVE":"CVE-2015-3151","severity":"important","public_date":"2015-04-22T00:00:00Z","advisories":["RHSA-2015:1083"],"bugzilla":"1214451","bugzilla_description":"CVE-2015-3151 abrt: directory traversals in several D-Bus methods implemented by abrt-dbus","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:N","CWE":"CWE-22","affected_packages":["abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3151.json"},{"CVE":"CVE-2015-3150","severity":"important","public_date":"2015-04-22T00:00:00Z","advisories":["RHSA-2015:1083"],"bugzilla":"1214457","bugzilla_description":"CVE-2015-3150 abrt: abrt-dbus does not guard against crafted problem directory path arguments","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:N","CWE":"CWE-20","affected_packages":["abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3150.json"},{"CVE":"CVE-2015-3142","severity":"low","public_date":"2015-04-17T00:00:00Z","advisories":["RHSA-2015:1210","RHSA-2015:1083"],"bugzilla":"1212818","bugzilla_description":"CVE-2015-3142 abrt: abrt-hook-ccpp writes core dumps to existing files owned by others","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-282->CWE-200","affected_packages":["abrt-0:2.0.8-26.el6_6.1","abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3142.json"},{"CVE":"CVE-2015-1869","severity":"important","public_date":"2015-04-17T00:00:00Z","advisories":["RHSA-2015:1210","RHSA-2015:1083"],"bugzilla":"1212861","bugzilla_description":"CVE-2015-1869 abrt: default event scripts follow symbolic links","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-59","affected_packages":["abrt-0:2.0.8-26.el6_6.1","abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1869.json"},{"CVE":"CVE-2015-1870","severity":"low","public_date":"2015-04-17T00:00:00Z","advisories":["RHSA-2015:1210","RHSA-2015:1083"],"bugzilla":"1212868","bugzilla_description":"CVE-2015-1870 abrt: default abrt event scripts lead to information disclosure","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["abrt-0:2.0.8-26.el6_6.1","abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1870.json"},{"CVE":"CVE-2015-3147","severity":"low","public_date":"2015-04-17T00:00:00Z","advisories":["RHSA-2015:1210","RHSA-2015:1083"],"bugzilla":"1212953","bugzilla_description":"CVE-2015-3147 abrt: does not validate contents of uploaded problem reports","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-283","affected_packages":["abrt-0:2.0.8-26.el6_6.1","abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3147.json"},{"CVE":"CVE-2015-1862","severity":"important","public_date":"2015-04-14T00:00:00Z","advisories":[],"bugzilla":"1211223","bugzilla_description":"CVE-2015-1862 abrt: local privilege escalation through kernel.core_pattern","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1862.json"},{"CVE":"CVE-2015-3315","severity":"important","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:1210","RHSA-2015:1083"],"bugzilla":"1211835","bugzilla_description":"CVE-2015-3315 abrt: Various race-conditions and symlink issues found in abrt","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-362->CWE-59","affected_packages":["abrt-0:2.0.8-26.el6_6.1","abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3315.json"},{"CVE":"CVE-2013-4209","severity":"low","public_date":"2013-09-06T00:00:00Z","advisories":[],"bugzilla":"991604","bugzilla_description":"CVE-2013-4209 ABRT: (substantially) limited leak of unauthorized information","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4209.json"},{"CVE":"CVE-2012-5659","severity":"important","public_date":"2013-01-30T00:00:00Z","advisories":["RHSA-2013:0215"],"bugzilla":"854011","bugzilla_description":"CVE-2012-5659 abrt: Arbitrary Python code execution due improper sanitization of the PYTHONPATH environment variable by installing debuginfo packages into cache","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["abrt-0:2.0.8-6.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5659.json"},{"CVE":"CVE-2012-5660","severity":"moderate","public_date":"2013-01-30T00:00:00Z","advisories":["RHSA-2013:0215"],"bugzilla":"887866","bugzilla_description":"CVE-2012-5660 abrt: Race condition in abrt-action-install-debuginfo","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["abrt-0:2.0.8-6.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5660.json"},{"CVE":"CVE-2012-1106","severity":"low","public_date":"2012-02-06T00:00:00Z","advisories":["RHSA-2012:0841"],"bugzilla":"785163","bugzilla_description":"CVE-2012-1106 abrt: Setuid process core dump archived with unsafe GID permissions","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["abrt-0:2.0.8-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1106.json"},{"CVE":"CVE-2011-4088","severity":"low","public_date":"2011-11-18T00:00:00Z","advisories":["RHSA-2012:0841"],"bugzilla":"749854","bugzilla_description":"CVE-2011-4088 abrt: may leak some personal information to bugzilla with some certain applications","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["abrt-0:2.0.8-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4088.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/accountsservice-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/accountsservice-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/accountsservice-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/accountsservice_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/accountsservice_security_api_results.json
new file mode 100644
index 0000000..7052de9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/accountsservice_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-14036","severity":"moderate","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1601019","bugzilla_description":"CVE-2018-14036 accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14036.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2012-6655","severity":"low","public_date":"2012-09-17T00:00:00Z","advisories":[],"bugzilla":"1130538","bugzilla_description":"CVE-2012-6655 accountsservice: local encrypted password disclosure when changing password","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6655.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/acl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/acl_security_api_results.json
new file mode 100644
index 0000000..fe98cef
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/acl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-3183","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:2943","RHSA-2018:2942","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002"],"bugzilla":"1639268","bugzilla_description":"CVE-2018-3183 OpenJDK: Unrestricted access to scripting engine (Scripting, 8202936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-11-openjdk-1:11.0.1.13-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-3169","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639293","bugzilla_description":"CVE-2018-3169 OpenJDK: Improper field access checks (Hotspot, 8199226)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3214","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639301","bugzilla_description":"CVE-2018-3214 OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3139","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639442","bugzilla_description":"CVE-2018-3139 OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3139.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3180","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639484","bugzilla_description":"CVE-2018-3180 OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-3136","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639755","bugzilla_description":"CVE-2018-3136 OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3149","severity":"important","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639834","bugzilla_description":"CVE-2018-3149 OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3149.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3209","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3003","RHSA-2018:3002"],"bugzilla":"1639904","bugzilla_description":"CVE-2018-3209 Oracle JDK: unspecified vulnerability fixed in 8u191 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3209.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3211","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3003","RHSA-2018:3002"],"bugzilla":"1639906","bugzilla_description":"CVE-2018-3211 Oracle JDK: unspecified vulnerability fixed in 8u191 and 11.0.1 (Serviceability)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.6"},{"CVE":"CVE-2018-2952","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:2283","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2241","RHSA-2018:2253","RHSA-2018:2242","RHSA-2018:2286"],"bugzilla":"1600925","bugzilla_description":"CVE-2018-2952 OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2952.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2938","severity":"important","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602141","bugzilla_description":"CVE-2018-2938 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, and 8u181 (Java DB)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2938.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2018-2964","severity":"critical","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2256","RHSA-2018:2253"],"bugzilla":"1602142","bugzilla_description":"CVE-2018-2964 Oracle JDK: unspecified vulnerability fixed in 8u181 and 10.0.2 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2964.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2941","severity":"critical","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2256","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2253"],"bugzilla":"1602143","bugzilla_description":"CVE-2018-2941 Oracle JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2941.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2942","severity":"critical","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602144","bugzilla_description":"CVE-2018-2942 Oracle JDK: unspecified vulnerability fixed in 7u191 and 8u181 (Windows DLL)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2973","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2253"],"bugzilla":"1602145","bugzilla_description":"CVE-2018-2973 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-2940","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2253"],"bugzilla":"1602146","bugzilla_description":"CVE-2018-2940 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2940.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-2814","severity":"critical","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1270","RHSA-2018:1206","RHSA-2018:1191","RHSA-2018:1204","RHSA-2018:1205","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567121","bugzilla_description":"CVE-2018-2814 OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2794","severity":"important","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567126","bugzilla_description":"CVE-2018-2794 OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2794.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-2795","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567351","bugzilla_description":"CVE-2018-2795 OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2815","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1270","RHSA-2018:1206","RHSA-2018:1191","RHSA-2018:1204","RHSA-2018:1205","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567537","bugzilla_description":"CVE-2018-2815 OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2799","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567542","bugzilla_description":"CVE-2018-2799 OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2799.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2798","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567543","bugzilla_description":"CVE-2018-2798 OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2797","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567545","bugzilla_description":"CVE-2018-2797 OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2796","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567546","bugzilla_description":"CVE-2018-2796 OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2800","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568163","bugzilla_description":"CVE-2018-2800 OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-2790","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568515","bugzilla_description":"CVE-2018-2790 OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-2811","severity":"important","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1204","RHSA-2018:1202"],"bugzilla":"1569203","bugzilla_description":"CVE-2018-2811 Oracle JDK: unspecified vulnerability fixed in 8u171 and 10.0.1 (Install)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2811.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-2783","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1203","RHSA-2018:0100","RHSA-2018:0099"],"bugzilla":"1569204","bugzilla_description":"CVE-2018-2783 Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-13785","severity":"low","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1599943","bugzilla_description":"CVE-2018-13785 libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-369","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-2678","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534263","bugzilla_description":"CVE-2018-2678 OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2678.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2677","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534288","bugzilla_description":"CVE-2018-2677 OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2663","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534296","bugzilla_description":"CVE-2018-2663 OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2663.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2579","severity":"low","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534298","bugzilla_description":"CVE-2018-2579 OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-567","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2579.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2588","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534299","bugzilla_description":"CVE-2018-2588 OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-90","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-2602","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534525","bugzilla_description":"CVE-2018-2602 OpenJDK: loading of classes from untrusted locations (I18n, 8182601)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2018-2599","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534543","bugzilla_description":"CVE-2018-2599 OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2599.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2603","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534553","bugzilla_description":"CVE-2018-2603 OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2603.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2629","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0100","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534625","bugzilla_description":"CVE-2018-2629 OpenJDK: GSS context use-after-free (JGSS, 8186212)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2618","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534762","bugzilla_description":"CVE-2018-2618 OpenJDK: insufficient strength of key agreement (JCE, 8185292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-2641","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534766","bugzilla_description":"CVE-2018-2641 OpenJDK: GTK library loading use-after-free (AWT, 8185325)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-2582","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0521","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534768","bugzilla_description":"CVE-2018-2582 OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-2634","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534943","bugzilla_description":"CVE-2018-2634 OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-2637","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534970","bugzilla_description":"CVE-2018-2637 OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-2633","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535036","bugzilla_description":"CVE-2018-2633 OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2018-2638","severity":"critical","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535350","bugzilla_description":"CVE-2018-2638 Oracle JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2639","severity":"critical","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535351","bugzilla_description":"CVE-2018-2639 Oracle JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2627","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535352","bugzilla_description":"CVE-2018-2627 Oracle JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Installer)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2657","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0458","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:1463"],"bugzilla":"1535353","bugzilla_description":"CVE-2018-2657 Oracle JDK: unspecified vulnerability fixed in 6u181 and 7u171 (Serialization)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2657.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2581","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:1812","RHSA-2018:0100","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535354","bugzilla_description":"CVE-2018-2581 Oracle JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2581.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-10285","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501868","bugzilla_description":"CVE-2017-10285 OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10346","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501873","bugzilla_description":"CVE-2017-10346 OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10388","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502038","bugzilla_description":"CVE-2017-10388 OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10274","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3047"],"bugzilla":"1502053","bugzilla_description":"CVE-2017-10274 OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10349","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502611","bugzilla_description":"CVE-2017-10349 OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10349.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10357","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502614","bugzilla_description":"CVE-2017-10357 OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10357.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10348","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502629","bugzilla_description":"CVE-2017-10348 OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10347","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502632","bugzilla_description":"CVE-2017-10347 OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10350","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502640","bugzilla_description":"CVE-2017-10350 OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10350.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10281","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502649","bugzilla_description":"CVE-2017-10281 OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10281.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10295","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502687","bugzilla_description":"CVE-2017-10295 OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10295.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-10345","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502858","bugzilla_description":"CVE-2017-10345 OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-10355","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502869","bugzilla_description":"CVE-2017-10355 OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10355.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10356","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1503169","bugzilla_description":"CVE-2017-10356 OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10356.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2017-10309","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267"],"bugzilla":"1503319","bugzilla_description":"CVE-2017-10309 Oracle JDK: unspecified vulnerability fixed in 8u151 and 9.0.1 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10309.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2017-10293","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3047"],"bugzilla":"1503320","bugzilla_description":"CVE-2017-10293 Oracle JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10293.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-10107","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471266","bugzilla_description":"CVE-2017-10107 OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10107.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10089","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471270","bugzilla_description":"CVE-2017-10089 OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10090","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1791"],"bugzilla":"1471517","bugzilla_description":"CVE-2017-10090 OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10090.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10087","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471521","bugzilla_description":"CVE-2017-10087 OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10110","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471523","bugzilla_description":"CVE-2017-10110 OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10111","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:1790"],"bugzilla":"1471526","bugzilla_description":"CVE-2017-10111 OpenJDK: incorrect range checks in LambdaFormEditor (Libraries, 8184185)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10101","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471527","bugzilla_description":"CVE-2017-10101 OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10096","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471528","bugzilla_description":"CVE-2017-10096 OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10074","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471534","bugzilla_description":"CVE-2017-10074 OpenJDK: integer overflows in range check loop predicates (Hotspot, 8173770)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10067","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471535","bugzilla_description":"CVE-2017-10067 OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10109","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471670","bugzilla_description":"CVE-2017-10109 OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10081","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471711","bugzilla_description":"CVE-2017-10081 OpenJDK: incorrect bracket processing in function signature handling (Hotspot, 8170966)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10081.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-10193","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:3392","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471715","bugzilla_description":"CVE-2017-10193 OpenJDK: incorrect key size constraint check (Security, 8179101)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-10116","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471738","bugzilla_description":"CVE-2017-10116 OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2017-10115","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471851","bugzilla_description":"CVE-2017-10115 OpenJDK: DSA implementation timing attack (JCE, 8175106)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10135","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471871","bugzilla_description":"CVE-2017-10135 OpenJDK: PKCS#8 implementation timing attack (JCE, 8176760)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10135.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-10108","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471888","bugzilla_description":"CVE-2017-10108 OpenJDK: unbounded memory allocation in BasicAttribute deserialization (Serialization, 8174105)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10108.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10053","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471889","bugzilla_description":"CVE-2017-10053 OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10078","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2469","RHSA-2017:1790","RHSA-2017:3453"],"bugzilla":"1471898","bugzilla_description":"CVE-2017-10078 OpenJDK: Nashorn incompletely blocking access to Java APIs (Scripting, 8171539)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-10198","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:3392","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1472320","bugzilla_description":"CVE-2017-10198 OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-10102","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472345","bugzilla_description":"CVE-2017-10102 OpenJDK: incorrect handling of references in DGC (RMI, 8163958)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-10118","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1790","RHSA-2017:1791"],"bugzilla":"1472470","bugzilla_description":"CVE-2017-10118 OpenJDK: ECDSA implementation timing attack (JCE, 8175110)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10176","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1790","RHSA-2017:1791"],"bugzilla":"1472476","bugzilla_description":"CVE-2017-10176 OpenJDK: incorrect handling of certain EC points (Security, 8178135)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10086","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1790","RHSA-2017:1791"],"bugzilla":"1472657","bugzilla_description":"CVE-2017-10086 Oracle JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10114","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1790","RHSA-2017:1791"],"bugzilla":"1472662","bugzilla_description":"CVE-2017-10114 Oracle JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10114.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10125","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":[],"bugzilla":"1472664","bugzilla_description":"CVE-2017-10125 Oracle JDK: unspecified vulnerability fixed in 7u151 and 8u141 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2017-10243","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472666","bugzilla_description":"CVE-2017-10243 OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10243.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-10105","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472667","bugzilla_description":"CVE-2017-10105 Oracle JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3511","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1221"],"bugzilla":"1443007","bugzilla_description":"CVE-2017-3511 OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-3509","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443052","bugzilla_description":"CVE-2017-3509 OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2017-3544","severity":"low","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443068","bugzilla_description":"CVE-2017-3544 OpenJDK: newline injection in the SMTP client (Networking, 8171533)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3539","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443097","bugzilla_description":"CVE-2017-3539 OpenJDK: MD5 allowed for jar verification (Security, 8171121)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3526","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108"],"bugzilla":"1443252","bugzilla_description":"CVE-2017-3526 OpenJDK: incomplete XML parse tree size enforcement (JAXP, 8169011)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3512","severity":"critical","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443455","bugzilla_description":"CVE-2017-3512 OpenJDK: window framing issues on MacOSX (AWT, 8165626)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3514","severity":"critical","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443469","bugzilla_description":"CVE-2017-3514 OpenJDK: peering issues on Windows (AWT, 8167110)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3533","severity":"low","public_date":"2017-02-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443083","bugzilla_description":"CVE-2017-3533 OpenJDK: newline injection in the FTP client (Networking, 8170222)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3272","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413554","bugzilla_description":"CVE-2017-3272 OpenJDK: insufficient protected field access checks in atomic field updaters (Libraries, 8165344)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3289","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413562","bugzilla_description":"CVE-2017-3289 OpenJDK: insecure class construction (Hotspot, 8167104)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3253","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413583","bugzilla_description":"CVE-2017-3253 OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-3261","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413653","bugzilla_description":"CVE-2017-3261 OpenJDK: integer overflow in SocketOutputStream boundary check (Networking, 8164147)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3231","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413717","bugzilla_description":"CVE-2017-3231 OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3231.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5547","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413764","bugzilla_description":"CVE-2016-5547 OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5547.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5552","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413882","bugzilla_description":"CVE-2016-5552 OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5552.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3252","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413906","bugzilla_description":"CVE-2017-3252 OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3252.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5546","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413911","bugzilla_description":"CVE-2016-5546 OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5546.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-5548","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413920","bugzilla_description":"CVE-2016-5548 OpenJDK: DSA implementation timing attack (Libraries, 8168728)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-5549","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413923","bugzilla_description":"CVE-2016-5549 OpenJDK: ECDSA implementation timing attack (Libraries, 8168724)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-3241","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413955","bugzilla_description":"CVE-2017-3241 OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3241.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3262","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0175"],"bugzilla":"1414162","bugzilla_description":"CVE-2017-3262 Oracle JDK: unspecified vulnerability fixed in 8u121 (Java Mission Control)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3262.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3259","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1414163","bugzilla_description":"CVE-2017-3259 Oracle JDK: unspecified vulnerability fixed in 6u141, 7u131, and 8u121 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3259.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-8328","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0175"],"bugzilla":"1414164","bugzilla_description":"CVE-2016-8328 Oracle JDK: unspecified vulnerability fixed in 8u121 (Java Mission Control)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8328.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-5582","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2658","RHSA-2016:2090"],"bugzilla":"1385402","bugzilla_description":"CVE-2016-5582 OpenJDK: incomplete type checks of System.arraycopy arguments (Hotspot, 8160591)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-5573","severity":"important","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385544","bugzilla_description":"CVE-2016-5573 OpenJDK: insufficient checks of JDWP packets (Hotspot, 8159519)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5573.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5554","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385714","bugzilla_description":"CVE-2016-5554 OpenJDK: insufficient classloader consistency checks in ClassLoaderWithRepository (JMX, 8157739)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5554.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5542","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385723","bugzilla_description":"CVE-2016-5542 OpenJDK: missing algorithm restrictions for jar verification (Libraries, 8155973)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5597","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1386103","bugzilla_description":"CVE-2016-5597 OpenJDK: exposure of server authentication credentials to proxy (Networking, 8160838)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-319","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5597.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5568","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1386112","bugzilla_description":"CVE-2016-5568 OpenJDK: incorrect menu handling on Windows (AWT, 8158993)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5568.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-5556","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2016:2659","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1386408","bugzilla_description":"CVE-2016-5556 Oracle JDK: unspecified vulnerability fixed in 6u131, 7u121, and 8u111 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5556.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-9843","severity":"low","public_date":"2016-09-29T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402351","bugzilla_description":"CVE-2016-9843 zlib: Big-endian out-of-bounds pointer","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9840","severity":"low","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402345","bugzilla_description":"CVE-2016-9840 zlib: Out-of-bounds pointer arithmetic in inftrees.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9841","severity":"low","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402346","bugzilla_description":"CVE-2016-9841 zlib: Out-of-bounds pointer arithmetic in inffast.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9842","severity":"low","public_date":"2016-09-06T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402348","bugzilla_description":"CVE-2016-9842 zlib: Undefined left shift of negative number","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10165","severity":"moderate","public_date":"2016-08-15T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2017:2999","RHSA-2017:3046","RHSA-2016:2658","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1367357","bugzilla_description":"CVE-2016-10165 lcms2: Out-of-bounds read in Type_MLU_Read()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2016-3606","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1356963","bugzilla_description":"CVE-2016-3606 OpenJDK: insufficient bytecode verification (Hotspot, 8155981)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3598","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2017:1216","RHSA-2016:1504","RHSA-2016:1587","RHSA-2016:1588","RHSA-2016:1589","RHSA-2016:1458"],"bugzilla":"1356971","bugzilla_description":"CVE-2016-3598 OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3598.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3587","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1458"],"bugzilla":"1356987","bugzilla_description":"CVE-2016-3587 OpenJDK: insufficient protection of MethodHandle.invokeBasic() (Hotspot, 8154475)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3587.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3610","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1504","RHSA-2016:1458"],"bugzilla":"1356994","bugzilla_description":"CVE-2016-3610 OpenJDK: insufficient value count check in MethodHandles.filterReturnValue() (Libraries, 8158571)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3500","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357008","bugzilla_description":"CVE-2016-3500 OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3508","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357015","bugzilla_description":"CVE-2016-3508 OpenJDK: missing entity replacement limits (JAXP, 8149962)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3458","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357494","bugzilla_description":"CVE-2016-3458 OpenJDK: insufficient restrictions on the use of custom ValueHandler (CORBA, 8079718)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-3550","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357506","bugzilla_description":"CVE-2016-3550 OpenJDK: integer overflows in bytecode streams (Hotspot, 8152479)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3550.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-3485","severity":"low","public_date":"2016-07-19T00:00:00Z","advisories":[],"bugzilla":"1357516","bugzilla_description":"CVE-2016-3485 OpenJDK: weak authentication secret in Pipe implementation on Windows (Networking, 8145446)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3485.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2016-3552","severity":"important","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475"],"bugzilla":"1358167","bugzilla_description":"CVE-2016-3552 Oracle JDK: unspecified vulnerability fixed in 8u101 (Install)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3552.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2016-3511","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2017:1216","RHSA-2016:1587","RHSA-2016:1588","RHSA-2016:1589"],"bugzilla":"1358168","bugzilla_description":"CVE-2016-3511 Oracle JDK: unspecified vulnerability fixed in 7u111 and 8u101 (Deployment)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-3503","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1477"],"bugzilla":"1358169","bugzilla_description":"CVE-2016-3503 Oracle JDK: unspecified vulnerability fixed in 6u121, 7u111, and 8u101 (Install)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3503.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-3498","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476"],"bugzilla":"1358170","bugzilla_description":"CVE-2016-3498 Oracle JDK: unspecified vulnerability fixed in 7u111 and 8u101 (JavaFX)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3498.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-0686","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327743","bugzilla_description":"CVE-2016-0686 OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0686.json"},{"CVE":"CVE-2016-0687","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327749","bugzilla_description":"CVE-2016-0687 OpenJDK: insufficient byte type checks (Hotspot, 8132051)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0687.json"},{"CVE":"CVE-2016-0695","severity":"low","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:0677"],"bugzilla":"1328022","bugzilla_description":"CVE-2016-0695 OpenJDK: insufficient DSA key parameters checks (Security, 8138593)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0695.json"},{"CVE":"CVE-2016-3425","severity":"moderate","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:0677"],"bugzilla":"1328040","bugzilla_description":"CVE-2016-3425 OpenJDK: incorrect handling of surrogate pairs in XML attribute values (JAXP, 8143167)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3425.json"},{"CVE":"CVE-2016-3426","severity":"low","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328059","bugzilla_description":"CVE-2016-3426 OpenJDK: non-constant time GCM authentication tag comparison (JCE, 8143945)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3426.json"},{"CVE":"CVE-2016-3427","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328210","bugzilla_description":"CVE-2016-3427 OpenJDK: unrestricted deserialization of authentication credentials (JMX, 8144430)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3427.json"},{"CVE":"CVE-2016-3443","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328618","bugzilla_description":"CVE-2016-3443 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3443.json"},{"CVE":"CVE-2016-3449","severity":"important","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328619","bugzilla_description":"CVE-2016-3449 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3449.json"},{"CVE":"CVE-2016-3422","severity":"moderate","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328620","bugzilla_description":"CVE-2016-3422 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3422.json"},{"CVE":"CVE-2016-0636","severity":"critical","public_date":"2016-03-23T00:00:00Z","advisories":["RHSA-2016:0513","RHSA-2016:0514","RHSA-2016:0515","RHSA-2016:0516","RHSA-2016:0511","RHSA-2016:0512"],"bugzilla":"1320650","bugzilla_description":"CVE-2016-0636 OpenJDK: missing type safety checks for MethodHandle calls across class loaders, incorrect CVE-2013-5838 fix (Hotspot, 8151666)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["java-1.7.0-oracle-1:1.7.0.99-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.77-0.b03.el6_7","java-1.7.0-oracle-1:1.7.0.99-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.77-0.b03.el7_2","java-1.8.0-oracle-1:1.8.0.77-1jpp.1.el6_7","java-1.7.0-openjdk-1:1.7.0.99-2.6.5.0.el6_7","java-1.7.0-openjdk-1:1.7.0.99-2.6.5.0.el7_2","java-1.7.0-oracle-1:1.7.0.99-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.77-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.99-2.6.5.0.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0636.json"},{"CVE":"CVE-2016-0494","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298906","bugzilla_description":"CVE-2016-0494 ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0494.json"},{"CVE":"CVE-2016-0475","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0050","RHSA-2016:0049"],"bugzilla":"1298949","bugzilla_description":"CVE-2016-0475 OpenJDK: PBE incorrect key lengths (Libraries, 8138589)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0475.json"},{"CVE":"CVE-2016-0402","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298957","bugzilla_description":"CVE-2016-0402 OpenJDK: URL deserialization inconsistencies (Networking, 8059054)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0402.json"},{"CVE":"CVE-2016-0448","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299073","bugzilla_description":"CVE-2016-0448 OpenJDK: logging of RMI connection secrets (JMX, 8130710)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0448.json"},{"CVE":"CVE-2016-0466","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299385","bugzilla_description":"CVE-2016-0466 OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0466.json"},{"CVE":"CVE-2016-0483","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299441","bugzilla_description":"CVE-2016-0483 OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0483.json"},{"CVE":"CVE-2015-7575","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0012","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0007","RHSA-2016:0008","RHSA-2016:0049"],"bugzilla":"1289841","bugzilla_description":"CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.2","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","nss-0:3.19.1-19.el7_2","gnutls-0:3.3.8-14.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","gnutls-0:2.8.5-19.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","nss-0:3.19.1-8.el6_7","openssl-1:1.0.1e-51.el7_2.2","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json"},{"CVE":"CVE-2015-8126","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8126.json"},{"CVE":"CVE-2015-8472","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8472.json"},{"CVE":"CVE-2015-4806","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1233687","bugzilla_description":"CVE-2015-4806 OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4806.json"},{"CVE":"CVE-2015-4835","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273022","bugzilla_description":"CVE-2015-4835 OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4835.json"},{"CVE":"CVE-2015-4881","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921"],"bugzilla":"1273027","bugzilla_description":"CVE-2015-4881 OpenJDK: missing type checks in IIOPInputStream (CORBA, 8076392)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4881.json"},{"CVE":"CVE-2015-4843","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273053","bugzilla_description":"CVE-2015-4843 OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4843.json"},{"CVE":"CVE-2015-4883","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273304","bugzilla_description":"CVE-2015-4883 OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4883.json"},{"CVE":"CVE-2015-4860","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273308","bugzilla_description":"CVE-2015-4860 OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4860.json"},{"CVE":"CVE-2015-4805","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273311","bugzilla_description":"CVE-2015-4805 OpenJDK: missing checks for proper initialization in ObjectStreamClass (Serialization, 8103671)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-665","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4805.json"},{"CVE":"CVE-2015-4844","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273318","bugzilla_description":"CVE-2015-4844 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4844.json"},{"CVE":"CVE-2015-4868","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:1919"],"bugzilla":"1273328","bugzilla_description":"CVE-2015-4868 OpenJDK: CRL checking flaw (Libraries, 8081744)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4868.json"},{"CVE":"CVE-2015-4840","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273338","bugzilla_description":"CVE-2015-4840 OpenJDK: OOB access in CMS code (2D, 8086092)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4840.json"},{"CVE":"CVE-2015-4882","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273414","bugzilla_description":"CVE-2015-4882 OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4882.json"},{"CVE":"CVE-2015-4842","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273425","bugzilla_description":"CVE-2015-4842 OpenJDK: leak of user.dir location (JAXP, 8078427)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4842.json"},{"CVE":"CVE-2015-4734","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273430","bugzilla_description":"CVE-2015-4734 OpenJDK: kerberos realm name leak (JGSS, 8048030)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4734.json"},{"CVE":"CVE-2015-4903","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273496","bugzilla_description":"CVE-2015-4903 OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4903.json"},{"CVE":"CVE-2015-4803","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273637","bugzilla_description":"CVE-2015-4803 OpenJDK: inefficient use of hash tables and lists during XML parsing (JAXP, 8068842)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4803.json"},{"CVE":"CVE-2015-4893","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273638","bugzilla_description":"CVE-2015-4893 OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4893.json"},{"CVE":"CVE-2015-4911","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921"],"bugzilla":"1273645","bugzilla_description":"CVE-2015-4911 OpenJDK: incomplete supportDTD enforcement (JAXP, 8130078)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4911.json"},{"CVE":"CVE-2015-4872","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273734","bugzilla_description":"CVE-2015-4872 OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4872.json"},{"CVE":"CVE-2015-4901","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926"],"bugzilla":"1273856","bugzilla_description":"CVE-2015-4901 Oracle JDK: unspecified vulnerability fixed in 8u65 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4901.json"},{"CVE":"CVE-2015-4810","severity":"important","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:2506"],"bugzilla":"1273858","bugzilla_description":"CVE-2015-4810 Oracle JDK: unspecified vulnerability fixed in 7u91 and 8u65 (Deployment)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4810.json"},{"CVE":"CVE-2015-4871","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:2509","RHSA-2015:1927","RHSA-2016:0053","RHSA-2015:2506"],"bugzilla":"1273859","bugzilla_description":"CVE-2015-4871 OpenJDK: protected methods can be used as interface methods via DirectMethodHandle (Libraries)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4871.json"},{"CVE":"CVE-2015-4902","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:2506"],"bugzilla":"1273860","bugzilla_description":"CVE-2015-4902 Oracle JDK: unspecified vulnerability fixed in 6u105, 7u91 and 8u65 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4902.json"},{"CVE":"CVE-2015-4906","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926"],"bugzilla":"1273861","bugzilla_description":"CVE-2015-4906 Oracle JDK: unspecified vulnerability fixed in 8u65 (JavaFX)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4906.json"},{"CVE":"CVE-2015-4916","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926"],"bugzilla":"1273862","bugzilla_description":"CVE-2015-4916 Oracle JDK: unspecified vulnerability fixed in 8u65 (JavaFX)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4916.json"},{"CVE":"CVE-2015-4908","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926"],"bugzilla":"1273863","bugzilla_description":"CVE-2015-4908 Oracle JDK: unspecified vulnerability fixed in 8u65 (JavaFX)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4908.json"},{"CVE":"CVE-2015-2601","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242019","bugzilla_description":"CVE-2015-2601 OpenJDK: non-constant time comparisons in crypto code (JCE, 8074865)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2601.json"},{"CVE":"CVE-2015-2659","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1228","RHSA-2015:1241"],"bugzilla":"1242144","bugzilla_description":"CVE-2015-2659 OpenJDK: GCM cipher issue causing JVM crash (Security, 8067648)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2659.json"},{"CVE":"CVE-2015-2628","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242232","bugzilla_description":"CVE-2015-2628 OpenJDK: IIOPInputStream type confusion vulnerability (CORBA, 8076376)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2628.json"},{"CVE":"CVE-2015-4731","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242234","bugzilla_description":"CVE-2015-4731 OpenJDK: improper permission checks in MBeanServerInvocationHandler (JMX, 8076397)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4731.json"},{"CVE":"CVE-2015-4732","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242240","bugzilla_description":"CVE-2015-4732 OpenJDK: insufficient context checks during object deserialization (Libraries, 8076405)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-567","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4732.json"},{"CVE":"CVE-2015-4733","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242275","bugzilla_description":"CVE-2015-4733 OpenJDK: RemoteObjectInvocationHandler allows calling finalize() (RMI, 8076409)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4733.json"},{"CVE":"CVE-2015-4748","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242281","bugzilla_description":"CVE-2015-4748 OpenJDK: incorrect OCSP nextUpdate checking (Libraries, 8075374)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-299","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4748.json"},{"CVE":"CVE-2015-2621","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242372","bugzilla_description":"CVE-2015-2621 OpenJDK: incorrect code permission checks in RMIConnectionImpl (JMX, 8075853)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2621.json"},{"CVE":"CVE-2015-4749","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242379","bugzilla_description":"CVE-2015-4749 OpenJDK: DnsClient fails to release request information after error (JNDI, 8075378)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4749.json"},{"CVE":"CVE-2015-2632","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242394","bugzilla_description":"CVE-2015-2632 ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190->CWE-125","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2632.json"},{"CVE":"CVE-2015-4760","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242447","bugzilla_description":"CVE-2015-4760 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8071715)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4760.json"},{"CVE":"CVE-2015-2613","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1242456","bugzilla_description":"CVE-2015-2613 NSS / JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2613.json"},{"CVE":"CVE-2015-2590","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1243139","bugzilla_description":"CVE-2015-2590 OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2590.json"},{"CVE":"CVE-2015-2638","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243283","bugzilla_description":"CVE-2015-2638 Oracle JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2638.json"},{"CVE":"CVE-2015-4736","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243284","bugzilla_description":"CVE-2015-4736 Oracle JDK: unspecified vulnerability fixed in 7u85 and 8u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4736.json"},{"CVE":"CVE-2015-2597","severity":"important","public_date":"2015-07-14T00:00:00Z","advisories":[],"bugzilla":"1243285","bugzilla_description":"CVE-2015-2597 Oracle JDK: unspecified vulnerability fixed in 7u85 and 8u51 (Install)","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2597.json"},{"CVE":"CVE-2015-2619","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243286","bugzilla_description":"CVE-2015-2619 Oracle JDK: unspecified vulnerability fixed in 7u85 and 8u51 (2D)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2619.json"},{"CVE":"CVE-2015-2637","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243287","bugzilla_description":"CVE-2015-2637 Oracle JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2637.json"},{"CVE":"CVE-2015-2596","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1242"],"bugzilla":"1243288","bugzilla_description":"CVE-2015-2596 Oracle JDK: unspecified vulnerability fixed in 7u85 (Hotspot)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2596.json"},{"CVE":"CVE-2015-4729","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243290","bugzilla_description":"CVE-2015-4729 Oracle JDK: unspecified vulnerability fixed in 7u85 and 8u51 (Deployment)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4729.json"},{"CVE":"CVE-2015-2627","severity":"low","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243291","bugzilla_description":"CVE-2015-2627 Oracle JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (Install)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2627.json"},{"CVE":"CVE-2015-2664","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243300","bugzilla_description":"CVE-2015-2664 Oracle JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (Deployment)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2664.json"},{"CVE":"CVE-2015-4000","severity":"moderate","public_date":"2015-05-20T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2016:2056","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2016:1624","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1197","RHSA-2015:1230","RHSA-2015:1185","RHSA-2015:1072"],"bugzilla":"1223211","bugzilla_description":"CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","nss-0:3.19.1-3.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","nss-0:3.19.1-3.ael7b_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","openssl-0:1.0.1e-30.el6_6.9","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","openssl-1:1.0.1e-42.ael7b_1.6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.8.0-openjdk-1:1.8.0.51-1.b16.ael7b_1","openssl-0:0.9.8e-36.el5_11","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-0478","severity":"low","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1210355","bugzilla_description":"CVE-2015-0478 OpenJDK: insufficient hardening of RSA-CRT implementation (JCE, 8071726)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0478.json"},{"CVE":"CVE-2015-0469","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1210829","bugzilla_description":"CVE-2015-0469 ICU: layout engine glyphStorage off-by-one (OpenJDK 2D, 8067699)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-122","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0469.json"},{"CVE":"CVE-2015-0460","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211285","bugzilla_description":"CVE-2015-0460 OpenJDK: incorrect handling of phantom references (Hotspot, 8071931)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0460.json"},{"CVE":"CVE-2015-0477","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211299","bugzilla_description":"CVE-2015-0477 OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0477.json"},{"CVE":"CVE-2015-0470","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0809"],"bugzilla":"1211387","bugzilla_description":"CVE-2015-0470 OpenJDK: incorrect handling of default methods (Hotspot, 8065366)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0470.json"},{"CVE":"CVE-2015-0488","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211543","bugzilla_description":"CVE-2015-0488 OpenJDK: certificate options parsing uncaught exception (JSSE, 8068720)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-248","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0488.json"},{"CVE":"CVE-2015-0459","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211768","bugzilla_description":"CVE-2015-0459 Oracle JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0459.json"},{"CVE":"CVE-2015-0491","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211769","bugzilla_description":"CVE-2015-0491 Oracle JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0491.json"},{"CVE":"CVE-2015-0492","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0857"],"bugzilla":"1211770","bugzilla_description":"CVE-2015-0492 Oracle JDK: unspecified vulnerability fixed in 7u79 and 8u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0492.json"},{"CVE":"CVE-2015-0458","severity":"important","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211771","bugzilla_description":"CVE-2015-0458 Oracle JDK: unspecified vulnerability fixed in 6u95, 7u79 and 8u45 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0458.json"},{"CVE":"CVE-2015-0484","severity":"important","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0857"],"bugzilla":"1211773","bugzilla_description":"CVE-2015-0484 Oracle JDK: unspecified vulnerability fixed in 7u79 and 8u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0484.json"},{"CVE":"CVE-2015-0486","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854"],"bugzilla":"1211774","bugzilla_description":"CVE-2015-0486 Oracle JDK: unspecified vulnerability fixed in 8u45 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0486.json"},{"CVE":"CVE-2015-2808","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1207101","bugzilla_description":"CVE-2015-2808 SSL/TLS: \"Invariance Weakness\" vulnerability in RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2808.json"},{"CVE":"CVE-2015-0383","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1123870","bugzilla_description":"CVE-2015-0383 OpenJDK: insecure hsperfdata temporary file handling (Hotspot, 8050807)","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0383.json"},{"CVE":"CVE-2014-6601","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183020","bugzilla_description":"CVE-2014-6601 OpenJDK: class verifier insufficient invokespecial calls verification (Hotspot, 8058982)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6601.json"},{"CVE":"CVE-2015-0412","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183021","bugzilla_description":"CVE-2015-0412 OpenJDK: insufficient code privileges checks (JAX-WS, 8054367)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0412.json"},{"CVE":"CVE-2015-0408","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183023","bugzilla_description":"CVE-2015-0408 OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0408.json"},{"CVE":"CVE-2015-0395","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183031","bugzilla_description":"CVE-2015-0395 OpenJDK: phantom references handling issue in garbage collector (Hotspot, 8047125)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0395.json"},{"CVE":"CVE-2015-0400","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1183039","bugzilla_description":"CVE-2015-0400 OpenJDK: NTLM authentication data disclosure via redirect to proxy (Libraries, 8048035)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0400.json"},{"CVE":"CVE-2015-0407","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183043","bugzilla_description":"CVE-2015-0407 OpenJDK: directory information leak via file chooser (Swing, 8055304)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0407.json"},{"CVE":"CVE-2015-0410","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183044","bugzilla_description":"CVE-2015-0410 OpenJDK: DER decoder infinite loop  (Security, 8059485)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0410.json"},{"CVE":"CVE-2014-6593","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183049","bugzilla_description":"CVE-2014-6593 OpenJDK: incorrect tracking of ChangeCipherSpec during SSL/TLS handshake (JSSE, 8057555)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6593.json"},{"CVE":"CVE-2014-6585","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183645","bugzilla_description":"CVE-2014-6585 ICU: font parsing OOB read (OpenJDK 2D, 8055489)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6585.json"},{"CVE":"CVE-2014-6591","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183646","bugzilla_description":"CVE-2014-6591 ICU: font parsing OOB read (OpenJDK 2D, 8056276)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6591.json"},{"CVE":"CVE-2014-6549","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0134","RHSA-2015:0133"],"bugzilla":"1183660","bugzilla_description":"CVE-2014-6549 OpenJDK: incorrect class loader permission check in ClassLoader getParent() (Libraries, 8055314)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6549.json"},{"CVE":"CVE-2015-0437","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069"],"bugzilla":"1183670","bugzilla_description":"CVE-2015-0437 OpenJDK: code generation issue (Hotspot, 8064524)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0437.json"},{"CVE":"CVE-2014-6587","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183715","bugzilla_description":"CVE-2014-6587 OpenJDK: MulticastSocket NULL pointer dereference (Libraries, 8056264)","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6587.json"},{"CVE":"CVE-2015-0403","severity":"important","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0134","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086"],"bugzilla":"1184275","bugzilla_description":"CVE-2015-0403 Oracle JDK: unspecified vulnerability fixed in 6u91, 7u75 and 8u31 (Deployment)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0403.json"},{"CVE":"CVE-2015-0421","severity":"important","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080"],"bugzilla":"1184276","bugzilla_description":"CVE-2015-0421 Oracle JDK: unspecified vulnerability fixed in 8u31 (Install)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0421.json"},{"CVE":"CVE-2015-0406","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0134","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086"],"bugzilla":"1184277","bugzilla_description":"CVE-2015-0406 Oracle JDK: unspecified vulnerability fixed in 6u91, 7u75 and 8u31 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0406.json"},{"CVE":"CVE-2015-0413","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0079"],"bugzilla":"1184278","bugzilla_description":"CVE-2015-0413 Oracle JDK: unspecified vulnerability fixed in 7u75 and 8u31 (Serviceability)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0413.json"},{"CVE":"CVE-2015-2625","severity":"low","public_date":"2014-11-02T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1241965","bugzilla_description":"CVE-2015-2625 OpenJDK: name for reverse DNS lookup used in certificate identity check (JSSE, 8067694)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2625.json"},{"CVE":"CVE-2014-6512","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1071210","bugzilla_description":"CVE-2014-6512 OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-345","affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6512.json"},{"CVE":"CVE-2014-6513","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1150118","bugzilla_description":"CVE-2014-6513 OpenJDK: splash image handling memory corruption (AWT, 8042609)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6513.json"},{"CVE":"CVE-2014-6506","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150155","bugzilla_description":"CVE-2014-6506 OpenJDK: insufficient permission checks when setting resource bundle on system logger (Libraries, 8041564)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6506.json"},{"CVE":"CVE-2014-6504","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1150182","bugzilla_description":"CVE-2014-6504 OpenJDK: incorrect optimization of range checks in C2 compiler (Hotspot, 8022783)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6504.json"},{"CVE":"CVE-2014-6519","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1150273","bugzilla_description":"CVE-2014-6519 OpenJDK: missing BootstrapMethods bounds check (Hotspot, 8041717)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6519.json"},{"CVE":"CVE-2014-6531","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150651","bugzilla_description":"CVE-2014-6531 OpenJDK: insufficient ResourceBundle name check (Libraries, 8044274)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6531.json"},{"CVE":"CVE-2014-6502","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150669","bugzilla_description":"CVE-2014-6502 OpenJDK: LogRecord use of incorrect CL when loading ResourceBundle (Libraries, 8042797)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6502.json"},{"CVE":"CVE-2014-6457","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151046","bugzilla_description":"CVE-2014-6457 OpenJDK: Triple Handshake attack against TLS/SSL connections (JSSE, 8037066)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6457.json"},{"CVE":"CVE-2014-6558","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151063","bugzilla_description":"CVE-2014-6558 OpenJDK: CipherInputStream incorrect exception handling (Security, 8037846)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6558.json"},{"CVE":"CVE-2014-6517","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1151364","bugzilla_description":"CVE-2014-6517 OpenJDK: StAX parser parameter entity XXE (JAXP, 8039533)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6517.json"},{"CVE":"CVE-2014-6511","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151517","bugzilla_description":"CVE-2014-6511 ICU: Layout Engine ContextualSubstitution missing boundary checks (JDK 2D, 8041540)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6511.json"},{"CVE":"CVE-2014-6562","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1636"],"bugzilla":"1151988","bugzilla_description":"CVE-2014-6562 OpenJDK: incorrect handling of zip entries with NUL in name (Libraries, 8048025)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6562.json"},{"CVE":"CVE-2014-6468","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1636"],"bugzilla":"1152049","bugzilla_description":"CVE-2014-6468 OpenJDK: insufficient SharedArchiveFile checks (Hotspot, 8044269)","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6468.json"},{"CVE":"CVE-2014-6532","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152756","bugzilla_description":"CVE-2014-6532 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6532.json"},{"CVE":"CVE-2014-6503","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152757","bugzilla_description":"CVE-2014-6503 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6503.json"},{"CVE":"CVE-2014-6456","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1657","RHSA-2014:1876","RHSA-2014:1880"],"bugzilla":"1152758","bugzilla_description":"CVE-2014-6456 Oracle JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6456.json"},{"CVE":"CVE-2014-6492","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152759","bugzilla_description":"CVE-2014-6492 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6492.json"},{"CVE":"CVE-2014-6493","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152760","bugzilla_description":"CVE-2014-6493 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6493.json"},{"CVE":"CVE-2014-4288","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152761","bugzilla_description":"CVE-2014-4288 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4288.json"},{"CVE":"CVE-2014-6466","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152762","bugzilla_description":"CVE-2014-6466 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6466.json"},{"CVE":"CVE-2014-6458","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152763","bugzilla_description":"CVE-2014-6458 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6458.json"},{"CVE":"CVE-2014-6476","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1657","RHSA-2014:1876","RHSA-2014:1880"],"bugzilla":"1152765","bugzilla_description":"CVE-2014-6476 Oracle JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6476.json"},{"CVE":"CVE-2014-6515","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152766","bugzilla_description":"CVE-2014-6515 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6515.json"},{"CVE":"CVE-2014-6527","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1657","RHSA-2014:1876","RHSA-2014:1880"],"bugzilla":"1152767","bugzilla_description":"CVE-2014-6527 Oracle JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6527.json"},{"CVE":"CVE-2014-3566","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2015:1546","RHSA-2015:1545","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2014:1881","RHSA-2014:1880","RHSA-2015:0080","RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2014:1920","RHSA-2015:0067","RHSA-2015:0012","RHSA-2015:0011","RHSA-2015:0264","RHSA-2015:0010","RHSA-2015:0086","RHSA-2015:0085","RHBA-2014:1857"],"bugzilla":"1152789","bugzilla_description":"CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-636|CWE-757)","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","openshift-origin-node-proxy-0:1.16.4.2-1.el6op","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","openshift-origin-node-proxy-0:1.22.3.4-1.el6op","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json"},{"CVE":"CVE-2014-4262","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1075795","bugzilla_description":"CVE-2014-4262 OpenJDK: AtomicReferenceFieldUpdater missing primitive type check (Libraries, 8039520)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4262.json"},{"CVE":"CVE-2014-4244","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119475","bugzilla_description":"CVE-2014-4244 OpenJDK: RSA blinding issues (Security, 8031346)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4244.json"},{"CVE":"CVE-2014-4263","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119476","bugzilla_description":"CVE-2014-4263 OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4263.json"},{"CVE":"CVE-2014-4221","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:1042"],"bugzilla":"1119483","bugzilla_description":"CVE-2014-4221 OpenJDK: MethodHandles.Lookup insufficient modifiers checks (Libraries, 8035788)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4221.json"},{"CVE":"CVE-2014-4219","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119596","bugzilla_description":"CVE-2014-4219 OpenJDK: Bytecode verification does not prevent ctor calls to this() and super() (Hotspot, 8035119)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4219.json"},{"CVE":"CVE-2014-2490","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907"],"bugzilla":"1119597","bugzilla_description":"CVE-2014-2490 OpenJDK: Event logger format string vulnerability (Hotspot, 8037076)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-134","affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2490.json"},{"CVE":"CVE-2014-4216","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907"],"bugzilla":"1119600","bugzilla_description":"CVE-2014-4216 OpenJDK: Incorrect generic signature attribute parsing (Hotspot, 8037076)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4216.json"},{"CVE":"CVE-2014-4223","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890"],"bugzilla":"1119602","bugzilla_description":"CVE-2014-4223 OpenJDK: Incorrect handling of invocations with exhausted ranks (Libraries, 8035793)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4223.json"},{"CVE":"CVE-2014-4209","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119608","bugzilla_description":"CVE-2014-4209 OpenJDK: SubjectDelegator protection insufficient (JMX, 8029755)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4209.json"},{"CVE":"CVE-2014-4218","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119611","bugzilla_description":"CVE-2014-4218 OpenJDK: Clone interfaces passed to proxy methods (Libraries, 8035009)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4218.json"},{"CVE":"CVE-2014-4252","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119613","bugzilla_description":"CVE-2014-4252 OpenJDK: Prevent instantiation of service with non-public constructor (Security, 8035004)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4252.json"},{"CVE":"CVE-2014-4266","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1042"],"bugzilla":"1119615","bugzilla_description":"CVE-2014-4266 OpenJDK: InfoBuilder incorrect return values (Serviceability, 8033301)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4266.json"},{"CVE":"CVE-2014-4268","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":[],"bugzilla":"1119616","bugzilla_description":"CVE-2014-4268 OpenJDK: Missing file choser access restrictions (Swing, 8035699)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4268.json"},{"CVE":"CVE-2014-4264","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902"],"bugzilla":"1119622","bugzilla_description":"CVE-2014-4264 OpenJDK: Incorrect TLS/EC management (Security, 8031340)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4264.json"},{"CVE":"CVE-2014-2483","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890"],"bugzilla":"1119626","bugzilla_description":"CVE-2014-2483 OpenJDK: Restrict use of privileged annotations (Libraries, 8034985)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2483.json"},{"CVE":"CVE-2014-4227","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119912","bugzilla_description":"CVE-2014-4227 Oracle JDK: unspecified vulnerability fixed in 6u81, 7u65 and 8u11 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4227.json"},{"CVE":"CVE-2014-4265","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119913","bugzilla_description":"CVE-2014-4265 Oracle JDK: unspecified vulnerability fixed in 6u81, 7u65 and 8u11 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4265.json"},{"CVE":"CVE-2014-4220","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:1042"],"bugzilla":"1119914","bugzilla_description":"CVE-2014-4220 Oracle JDK: unspecified vulnerability fixed in 7u65 and 8u11 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4220.json"},{"CVE":"CVE-2014-4208","severity":"low","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:1042"],"bugzilla":"1119915","bugzilla_description":"CVE-2014-4208 Oracle JDK: unspecified vulnerability fixed in 7u65 and 8u11 (Deployment)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4208.json"},{"CVE":"CVE-2014-4247","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":[],"bugzilla":"1119918","bugzilla_description":"CVE-2014-4247 Oracle JDK: unspecified vulnerability fixed in 8u11 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4247.json"},{"CVE":"CVE-2015-3149","severity":"low","public_date":"2014-04-20T00:00:00Z","advisories":["RHSA-2015:1228"],"bugzilla":"1213365","bugzilla_description":"CVE-2015-3149 OpenJDK8: insecure hsperfdata temporary file handling, CVE-2015-0383 regression (Hotspot)","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":["java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3149.json"},{"CVE":"CVE-2014-2398","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1086632","bugzilla_description":"CVE-2014-2398 OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2398.json"},{"CVE":"CVE-2014-0453","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1086645","bugzilla_description":"CVE-2014-0453 OpenJDK: RSA unpadding timing issues (Security, 8027766)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0453.json"},{"CVE":"CVE-2014-0429","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087409","bugzilla_description":"CVE-2014-0429 OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0429.json"},{"CVE":"CVE-2014-0457","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087411","bugzilla_description":"CVE-2014-0457 OpenJDK: ServiceLoader Exception handling security bypass (Libraries, 8031394)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0457.json"},{"CVE":"CVE-2014-0456","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0675","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0406"],"bugzilla":"1087413","bugzilla_description":"CVE-2014-0456 OpenJDK: System.arraycopy() element race condition (Hotspot, 8029858)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0456.json"},{"CVE":"CVE-2014-2421","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087417","bugzilla_description":"CVE-2014-2421 OpenJDK: JPEG decoder input stream handling (2D, 8029854)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2421.json"},{"CVE":"CVE-2014-2397","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0675","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0406"],"bugzilla":"1087423","bugzilla_description":"CVE-2014-2397 OpenJDK: classfile parser invalid BootstrapMethods attribute length (Hotspot, 8034926)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2397.json"},{"CVE":"CVE-2014-0455","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087424","bugzilla_description":"CVE-2014-0455 OpenJDK: MethodHandle variable argument lists handling (Libraries, 8029844)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0455.json"},{"CVE":"CVE-2014-0461","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087426","bugzilla_description":"CVE-2014-0461 OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0461.json"},{"CVE":"CVE-2014-2412","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087427","bugzilla_description":"CVE-2014-2412 OpenJDK: AWT thread context handling (AWT, 8025010)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2412.json"},{"CVE":"CVE-2014-0451","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087428","bugzilla_description":"CVE-2014-0451 OpenJDK: AWT incorrect FlavorMap seperation (AWT, 8026797)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0451.json"},{"CVE":"CVE-2014-0458","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087430","bugzilla_description":"CVE-2014-0458 OpenJDK: Activation framework default command map caching (JAX-WS, 8025152)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0458.json"},{"CVE":"CVE-2014-2414","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087431","bugzilla_description":"CVE-2014-2414 OpenJDK: incorrect caching of data initialized via TCCL (JAXB, 8025030)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2414.json"},{"CVE":"CVE-2014-2423","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087434","bugzilla_description":"CVE-2014-2423 OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026188)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2423.json"},{"CVE":"CVE-2014-0452","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087436","bugzilla_description":"CVE-2014-0452 OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026801)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0452.json"},{"CVE":"CVE-2014-2402","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087438","bugzilla_description":"CVE-2014-2402 OpenJDK: Incorrect NIO channel separation (Libraries, 8026716)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2402.json"},{"CVE":"CVE-2014-0446","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087439","bugzilla_description":"CVE-2014-0446 OpenJDK: Protect logger handlers (Libraries, 8029740)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0446.json"},{"CVE":"CVE-2014-0454","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087440","bugzilla_description":"CVE-2014-0454 OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0454.json"},{"CVE":"CVE-2014-2427","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087441","bugzilla_description":"CVE-2014-2427 OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2427.json"},{"CVE":"CVE-2014-0460","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087442","bugzilla_description":"CVE-2014-0460 OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0460.json"},{"CVE":"CVE-2014-2403","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0675","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0406"],"bugzilla":"1087443","bugzilla_description":"CVE-2014-2403 OpenJDK: JAXP CharInfo file access restriction (JAXP, 8029282)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2403.json"},{"CVE":"CVE-2014-0459","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087444","bugzilla_description":"CVE-2014-0459 lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0459.json"},{"CVE":"CVE-2014-2413","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0406"],"bugzilla":"1087446","bugzilla_description":"CVE-2014-2413 OpenJDK: method handle call hierachy bypass (Libraries, 8032686)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2413.json"},{"CVE":"CVE-2014-0432","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0412","RHSA-2014:0413"],"bugzilla":"1088023","bugzilla_description":"CVE-2014-0432 Oracle JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Libraries)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0432.json"},{"CVE":"CVE-2014-0448","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705"],"bugzilla":"1088024","bugzilla_description":"CVE-2014-0448 Oracle JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0448.json"},{"CVE":"CVE-2014-2428","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1088025","bugzilla_description":"CVE-2014-2428 Oracle JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2428.json"},{"CVE":"CVE-2014-2422","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0412","RHSA-2014:0413"],"bugzilla":"1088026","bugzilla_description":"CVE-2014-2422 Oracle JDK: unspecified vulnerability fixed in 7u55 and 8u5 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2422.json"},{"CVE":"CVE-2014-2409","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1088027","bugzilla_description":"CVE-2014-2409 Oracle JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2409.json"},{"CVE":"CVE-2014-0449","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1088028","bugzilla_description":"CVE-2014-0449 Oracle JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0449.json"},{"CVE":"CVE-2014-2401","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1088030","bugzilla_description":"CVE-2014-2401 Oracle JDK: unspecified vulnerability fixed in 5.0u75, 6u75, 7u55 and 8u5 (2D)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2401.json"},{"CVE":"CVE-2014-2420","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1088031","bugzilla_description":"CVE-2014-2420 Oracle JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2420.json"},{"CVE":"CVE-2014-0463","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088039","bugzilla_description":"Oracle JDK: unspecified vulnerabilities fixed in 8u5 (JavaFX, Scripting)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0463.json"},{"CVE":"CVE-2014-0464","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088039","bugzilla_description":"Oracle JDK: unspecified vulnerabilities fixed in 8u5 (JavaFX, Scripting)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0464.json"},{"CVE":"CVE-2014-2410","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088039","bugzilla_description":"Oracle JDK: unspecified vulnerabilities fixed in 8u5 (JavaFX, Scripting)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2410.json"},{"CVE":"CVE-2014-1876","severity":"low","public_date":"2014-02-03T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1060907","bugzilla_description":"CVE-2014-1876 OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1876.json"},{"CVE":"CVE-2013-4578","severity":"low","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1031471","bugzilla_description":"CVE-2013-4578 OpenJDK: jarsigner does not detect unsigned bytecode injected into signed jars","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4578.json"},{"CVE":"CVE-2014-0428","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051519","bugzilla_description":"CVE-2014-0428 OpenJDK: insufficient security checks in IIOP streams (CORBA, 8025767)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0428.json"},{"CVE":"CVE-2014-0422","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051528","bugzilla_description":"CVE-2014-0422 OpenJDK: insufficient package access checks in the Naming component (JNDI, 8025758)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0422.json"},{"CVE":"CVE-2013-5893","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0026","RHSA-2014:0027","RHSA-2014:0030"],"bugzilla":"1051549","bugzilla_description":"CVE-2013-5893 OpenJDK: JVM method processing issues (Libraries, 8029507)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5893.json"},{"CVE":"CVE-2014-0373","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051699","bugzilla_description":"CVE-2014-0373 OpenJDK: SnmpStatusException handling issues (Serviceability, 7068126)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0373.json"},{"CVE":"CVE-2013-5878","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051823","bugzilla_description":"CVE-2013-5878 OpenJDK: null xmlns handling issue (Security, 8025026)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5878.json"},{"CVE":"CVE-2013-5884","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051911","bugzilla_description":"CVE-2013-5884 OpenJDK: insufficient security checks in CORBA stub factories (CORBA, 8026193)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5884.json"},{"CVE":"CVE-2014-0416","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051912","bugzilla_description":"CVE-2014-0416 OpenJDK: insecure subject principals set handling (JAAS, 8024306)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0416.json"},{"CVE":"CVE-2014-0376","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051923","bugzilla_description":"CVE-2014-0376 OpenJDK: document builder missing security checks (JAXP, 8027201, 8025018)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0376.json"},{"CVE":"CVE-2013-5907","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052915","bugzilla_description":"CVE-2013-5907 ICU: Layout Engine LookupProcessor insufficient input checks (JDK 2D, 8025034)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5907.json"},{"CVE":"CVE-2014-0368","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052919","bugzilla_description":"CVE-2014-0368 OpenJDK: insufficient Socket checkListen checks (Networking, 8011786)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0368.json"},{"CVE":"CVE-2013-5910","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052942","bugzilla_description":"CVE-2013-5910 OpenJDK: XML canonicalizer mutable strings passed to untrusted code (Security, 8026417)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5910.json"},{"CVE":"CVE-2014-0411","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1053010","bugzilla_description":"CVE-2014-0411 OpenJDK: TLS/SSL handshake timing issues (JSSE, 8023069)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0411.json"},{"CVE":"CVE-2014-0423","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1053066","bugzilla_description":"CVE-2014-0423 OpenJDK: XXE issue in decoder (Beans, 8023245)","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0423.json"},{"CVE":"CVE-2013-5896","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1053266","bugzilla_description":"CVE-2013-5896 OpenJDK: com.sun.corba.se. should be restricted package (CORBA, 8025022)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5896.json"},{"CVE":"CVE-2014-0408","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053286","bugzilla_description":"CVE-2014-0408 OpenJDK: JObjC code issues (Hotspot, 8021266)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0408.json"},{"CVE":"CVE-2014-0410","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053495","bugzilla_description":"CVE-2014-0410 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0410.json"},{"CVE":"CVE-2014-0415","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053496","bugzilla_description":"CVE-2014-0415 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0415.json"},{"CVE":"CVE-2014-0385","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053498","bugzilla_description":"CVE-2014-0385 Oracle JDK: unspecified vulnerability fixed in 7u51 (Install)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0385.json"},{"CVE":"CVE-2013-5889","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053499","bugzilla_description":"CVE-2013-5889 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5889.json"},{"CVE":"CVE-2014-0417","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053501","bugzilla_description":"CVE-2014-0417 Oracle JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0417.json"},{"CVE":"CVE-2014-0387","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053502","bugzilla_description":"CVE-2014-0387 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0387.json"},{"CVE":"CVE-2014-0424","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053504","bugzilla_description":"CVE-2014-0424 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0424.json"},{"CVE":"CVE-2013-5904","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0030"],"bugzilla":"1053506","bugzilla_description":"CVE-2013-5904 Oracle JDK: unspecified vulnerability fixed in 7u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5904.json"},{"CVE":"CVE-2014-0403","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053507","bugzilla_description":"CVE-2014-0403 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0403.json"},{"CVE":"CVE-2014-0375","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053508","bugzilla_description":"CVE-2014-0375 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0375.json"},{"CVE":"CVE-2013-5905","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2014:0030"],"bugzilla":"1053509","bugzilla_description":"CVE-2013-5905 Oracle JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (Install)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5905.json"},{"CVE":"CVE-2013-5906","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2014:0030"],"bugzilla":"1053510","bugzilla_description":"CVE-2013-5906 Oracle JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (Install)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5906.json"},{"CVE":"CVE-2013-5902","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2014:0030"],"bugzilla":"1053512","bugzilla_description":"CVE-2013-5902 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5902.json"},{"CVE":"CVE-2014-0418","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2014:0030"],"bugzilla":"1053513","bugzilla_description":"CVE-2014-0418 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0418.json"},{"CVE":"CVE-2013-5887","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053515","bugzilla_description":"CVE-2013-5887 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5887.json"},{"CVE":"CVE-2013-5899","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053516","bugzilla_description":"CVE-2013-5899 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5899.json"},{"CVE":"CVE-2013-5888","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053517","bugzilla_description":"CVE-2013-5888 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5888.json"},{"CVE":"CVE-2013-5898","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053518","bugzilla_description":"CVE-2013-5898 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5898.json"},{"CVE":"CVE-2013-5870","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0030"],"bugzilla":"1053540","bugzilla_description":"CVE-2013-5870 CVE-2013-5895 CVE-2014-0382 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5870.json"},{"CVE":"CVE-2013-5895","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0030"],"bugzilla":"1053540","bugzilla_description":"CVE-2013-5870 CVE-2013-5895 CVE-2014-0382 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5895.json"},{"CVE":"CVE-2014-0382","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0030"],"bugzilla":"1053540","bugzilla_description":"CVE-2013-5870 CVE-2013-5895 CVE-2014-0382 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0382.json"},{"CVE":"CVE-2013-6954","severity":"low","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1045561","bugzilla_description":"CVE-2013-6954 libpng: unhandled zero-length PLTE chunk or NULL palette","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6954.json"},{"CVE":"CVE-2013-6629","severity":"moderate","public_date":"2013-11-12T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2013:1803","RHSA-2013:1804","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1031734","bugzilla_description":"CVE-2013-6629 libjpeg: information leak (read of uninitialized memory)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","libjpeg-0:6b-38","libjpeg-turbo-0:1.2.1-3.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6629.json"},{"CVE":"CVE-2013-5803","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018713","bugzilla_description":"CVE-2013-5803 OpenJDK: insufficient checks of KDC replies (JGSS, 8014341)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5803.json"},{"CVE":"CVE-2013-5772","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018717","bugzilla_description":"CVE-2013-5772 OpenJDK: insufficient html escaping in jhat (jhat, 8011081)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5772.json"},{"CVE":"CVE-2013-5797","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018720","bugzilla_description":"CVE-2013-5797 OpenJDK: insufficient escaping of window title string (Javadoc, 8016675)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5797.json"},{"CVE":"CVE-2013-5784","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018727","bugzilla_description":"CVE-2013-5784 OpenJDK: insufficient InterfaceImplementor security checks (Scripting, 8017299)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5784.json"},{"CVE":"CVE-2013-5790","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447"],"bugzilla":"1018736","bugzilla_description":"CVE-2013-5790 OpenJDK: insufficient security checks (Beans, 8012071)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5790.json"},{"CVE":"CVE-2013-5849","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018750","bugzilla_description":"CVE-2013-5849 OpenJDK: insufficient DataFlavor security checks (AWT, 8012277)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5849.json"},{"CVE":"CVE-2013-5800","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1507","RHSA-2013:1447"],"bugzilla":"1018755","bugzilla_description":"CVE-2013-5800 OpenJDK: default keytab path information leak (JGSS, 8022931)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5800.json"},{"CVE":"CVE-2013-5805","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1018761","bugzilla_description":"CVE-2013-5805 CVE-2013-5806 OpenJDK: insufficient access checks in MacOS code (Swing, 8021275, 8021282)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5805.json"},{"CVE":"CVE-2013-5806","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1018761","bugzilla_description":"CVE-2013-5805 CVE-2013-5806 OpenJDK: insufficient access checks in MacOS code (Swing, 8021275, 8021282)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5806.json"},{"CVE":"CVE-2013-5780","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018785","bugzilla_description":"CVE-2013-5780 OpenJDK: key data leak via toString() methods (Libraries, 8011071)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5780.json"},{"CVE":"CVE-2013-5840","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018831","bugzilla_description":"CVE-2013-5840 OpenJDK: getDeclaringClass() information leak (Libraries, 8014349)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5840.json"},{"CVE":"CVE-2013-5820","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018972","bugzilla_description":"CVE-2013-5820 OpenJDK: insufficient security checks (JAXWS, 8017505)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5820.json"},{"CVE":"CVE-2013-5851","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1507","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018977","bugzilla_description":"CVE-2013-5851 OpenJDK: XML stream factory finder information leak (JAXP, 8013502)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5851.json"},{"CVE":"CVE-2013-5778","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018984","bugzilla_description":"CVE-2013-5778 OpenJDK: image conversion out of bounds read (2D, 8014102)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5778.json"},{"CVE":"CVE-2013-5782","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019108","bugzilla_description":"CVE-2013-5782 OpenJDK: Incorrect awt_getPixelByte/awt_getPixelShort/awt_setPixelByte/awt_setPixelShort image raster checks (2D, 8014093)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5782.json"},{"CVE":"CVE-2013-5830","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019110","bugzilla_description":"CVE-2013-5830 OpenJDK: checkPackageAccess missing security check (Libraries, 8017291)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5830.json"},{"CVE":"CVE-2013-5809","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019113","bugzilla_description":"CVE-2013-5809 OpenJDK: JPEGImageReader and JPEGImageWriter missing band size checks (2D, 8013510)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5809.json"},{"CVE":"CVE-2013-5829","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019115","bugzilla_description":"CVE-2013-5829 OpenJDK: Java2d Disposer security bypass (2D, 8017287)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5829.json"},{"CVE":"CVE-2013-5814","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019117","bugzilla_description":"CVE-2013-5814 OpenJDK: RMIConnection stub missing permission check (CORBA, 8011157)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5814.json"},{"CVE":"CVE-2013-5817","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019118","bugzilla_description":"CVE-2013-5817 OpenJDK: VersionHelper12 does not honor modifyThreadGroup restriction (JNDI, 8013739)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5817.json"},{"CVE":"CVE-2013-5842","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019123","bugzilla_description":"CVE-2013-5842 OpenJDK: ObjectInputStream/ObjectOutputStream missing checks (Libraries, 8014987)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5842.json"},{"CVE":"CVE-2013-5850","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019127","bugzilla_description":"CVE-2013-5850 OpenJDK: Missing CORBA security checks (Libraries, 8017196)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5850.json"},{"CVE":"CVE-2013-5802","severity":"important","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019130","bugzilla_description":"CVE-2013-5802 OpenJDK: javax.xml.transform.TransformerFactory does not properly honor XMLConstants.FEATURE_SECURE_PROCESSING (JAXP, 8012425)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5802.json"},{"CVE":"CVE-2013-5804","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019131","bugzilla_description":"CVE-2013-5804 OpenJDK: javac does not ignore certain ignorable characters (Javadoc, 8016653)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5804.json"},{"CVE":"CVE-2013-3829","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019133","bugzilla_description":"CVE-2013-3829 OpenJDK: java.util.TimeZone does not restrict setting of default time zone (Libraries, 8001029)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3829.json"},{"CVE":"CVE-2013-5783","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019137","bugzilla_description":"CVE-2013-5783 OpenJDK: JTable not properly performing certain access checks (Swing, 8013744)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5783.json"},{"CVE":"CVE-2013-5825","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019139","bugzilla_description":"CVE-2013-5825 OpenJDK: XML parsing Denial of Service (JAXP, 8014530)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5825.json"},{"CVE":"CVE-2013-5823","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019145","bugzilla_description":"CVE-2013-5823 OpenJDK: com.sun.org.apache.xml.internal.security.utils.UnsyncByteArrayOutputStream Denial of Service (Security, 8021290)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5823.json"},{"CVE":"CVE-2013-5774","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019147","bugzilla_description":"CVE-2013-5774 OpenJDK: Inet6Address class IPv6 address processing errors (Libraries, 8015743)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5774.json"},{"CVE":"CVE-2013-4002","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0269","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2015:0773","RHSA-2013:1081","RHSA-2013:1060","RHSA-2014:0414","RHSA-2014:1823","RHSA-2014:1822","RHSA-2014:1821","RHSA-2013:1505","RHSA-2013:1447","RHSA-2014:1319","RHSA-2013:1059","RHSA-2014:1818"],"bugzilla":"1019176","bugzilla_description":"CVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP, 8017298)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","xerces-j2-0:2.7.1-12.7.el6_5","xerces-j2-0:2.11.0-17.el7_0","java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4002.json"},{"CVE":"CVE-2013-5838","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1507","RHSA-2013:1447"],"bugzilla":"1019300","bugzilla_description":"CVE-2013-5838 OpenJDK: Vulnerability in Libraries component (Libraries, 7023639)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5838.json"},{"CVE":"CVE-2013-5824","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019691","bugzilla_description":"CVE-2013-5824 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5824.json"},{"CVE":"CVE-2013-5788","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1507"],"bugzilla":"1019692","bugzilla_description":"CVE-2013-5788 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5788.json"},{"CVE":"CVE-2013-5787","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019693","bugzilla_description":"CVE-2013-5787 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5787.json"},{"CVE":"CVE-2013-5789","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019697","bugzilla_description":"CVE-2013-5789 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5789.json"},{"CVE":"CVE-2013-5843","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019701","bugzilla_description":"CVE-2013-5843 Oracle JDK: unspecified vulnerability fixed in 7u45 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5843.json"},{"CVE":"CVE-2013-5832","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019702","bugzilla_description":"CVE-2013-5832 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5832.json"},{"CVE":"CVE-2013-5852","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2014:0414"],"bugzilla":"1019705","bugzilla_description":"CVE-2013-5852 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5852.json"},{"CVE":"CVE-2013-5812","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019706","bugzilla_description":"CVE-2013-5812 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5812.json"},{"CVE":"CVE-2013-5801","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019710","bugzilla_description":"CVE-2013-5801 Oracle JDK: unspecified vulnerability fixed in 7u45 (2D)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5801.json"},{"CVE":"CVE-2013-5776","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019712","bugzilla_description":"CVE-2013-5776 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5776.json"},{"CVE":"CVE-2013-5818","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019713","bugzilla_description":"CVE-2013-5818 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5818.json"},{"CVE":"CVE-2013-5819","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019715","bugzilla_description":"CVE-2013-5819 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5819.json"},{"CVE":"CVE-2013-5831","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019716","bugzilla_description":"CVE-2013-5831 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5831.json"},{"CVE":"CVE-2013-5848","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019720","bugzilla_description":"CVE-2013-5848 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5848.json"},{"CVE":"CVE-2013-5775","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440"],"bugzilla":"1019722","bugzilla_description":"CVE-2013-5846 CVE-2013-5810 CVE-2013-5844 CVE-2013-5777 CVE-2013-5775 CVE-2013-5854 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5775.json"},{"CVE":"CVE-2013-5777","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440"],"bugzilla":"1019722","bugzilla_description":"CVE-2013-5846 CVE-2013-5810 CVE-2013-5844 CVE-2013-5777 CVE-2013-5775 CVE-2013-5854 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5777.json"},{"CVE":"CVE-2013-5810","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440"],"bugzilla":"1019722","bugzilla_description":"CVE-2013-5846 CVE-2013-5810 CVE-2013-5844 CVE-2013-5777 CVE-2013-5775 CVE-2013-5854 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5810.json"},{"CVE":"CVE-2013-5844","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440"],"bugzilla":"1019722","bugzilla_description":"CVE-2013-5846 CVE-2013-5810 CVE-2013-5844 CVE-2013-5777 CVE-2013-5775 CVE-2013-5854 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5844.json"},{"CVE":"CVE-2013-5846","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440"],"bugzilla":"1019722","bugzilla_description":"CVE-2013-5846 CVE-2013-5810 CVE-2013-5844 CVE-2013-5777 CVE-2013-5775 CVE-2013-5854 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5846.json"},{"CVE":"CVE-2013-5854","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440"],"bugzilla":"1019722","bugzilla_description":"CVE-2013-5846 CVE-2013-5810 CVE-2013-5844 CVE-2013-5777 CVE-2013-5775 CVE-2013-5854 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5854.json"},{"CVE":"CVE-2013-1571","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"973474","bugzilla_description":"CVE-2013-1571 OpenJDK: Frame injection in generated HTML (Javadoc, 8012375)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1571.json"},{"CVE":"CVE-2013-2470","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975099","bugzilla_description":"CVE-2013-2470 OpenJDK: ImagingLib byte lookup processing (2D, 8011243)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2470.json"},{"CVE":"CVE-2013-2471","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975102","bugzilla_description":"CVE-2013-2471 OpenJDK: Incorrect IntegerComponentRaster size checks (2D, 8011248)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2471.json"},{"CVE":"CVE-2013-2472","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975107","bugzilla_description":"CVE-2013-2472 OpenJDK: Incorrect ShortBandedRaster size checks (2D, 8011253)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2472.json"},{"CVE":"CVE-2013-2473","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975110","bugzilla_description":"CVE-2013-2473 OpenJDK: Incorrect ByteBandedRaster size checks (2D, 8011257)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2473.json"},{"CVE":"CVE-2013-2463","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975115","bugzilla_description":"CVE-2013-2463 OpenJDK: Incorrect image attribute verification (2D, 8012438)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2463.json"},{"CVE":"CVE-2013-2465","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975118","bugzilla_description":"CVE-2013-2465 OpenJDK: Incorrect image channel verification (2D, 8012597)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2465.json"},{"CVE":"CVE-2013-2469","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975120","bugzilla_description":"CVE-2013-2469 OpenJDK: Incorrect image layout verification (2D, 8012601)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2469.json"},{"CVE":"CVE-2013-2459","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975121","bugzilla_description":"CVE-2013-2459 OpenJDK: Various AWT integer overflow checks (AWT, 8009071)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2459.json"},{"CVE":"CVE-2013-2460","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975122","bugzilla_description":"CVE-2013-2460 OpenJDK: tracing insufficient access checks (Serviceability, 8010209)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2460.json"},{"CVE":"CVE-2013-2445","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:0963","RHSA-2013:1014"],"bugzilla":"975124","bugzilla_description":"CVE-2013-2445 OpenJDK: Better handling of memory allocation errors (Hotspot, 7158805)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2445.json"},{"CVE":"CVE-2013-2448","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975125","bugzilla_description":"CVE-2013-2448 OpenJDK: Better access restrictions (Sound, 8006328)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2448.json"},{"CVE":"CVE-2013-2461","severity":"important","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:0963","RHSA-2013:1014"],"bugzilla":"975126","bugzilla_description":"CVE-2013-2461 OpenJDK: Missing check for valid DOMCanonicalizationMethod canonicalization algorithm (Libraries, 8014281)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2461.json"},{"CVE":"CVE-2013-2407","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975127","bugzilla_description":"CVE-2013-2407 OpenJDK: Integrate Apache Santuario, rework class loader (Libraries, 6741606, 8008744)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2407.json"},{"CVE":"CVE-2013-2454","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975129","bugzilla_description":"CVE-2013-2454 OpenJDK: SerialJavaObject package restriction (JDBC, 8009554)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2454.json"},{"CVE":"CVE-2013-2458","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975130","bugzilla_description":"CVE-2013-2458 OpenJDK: Method handles (Libraries, 8009424)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2458.json"},{"CVE":"CVE-2013-2444","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975131","bugzilla_description":"CVE-2013-2444 OpenJDK: Resource denial of service (AWT, 8001038)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2444.json"},{"CVE":"CVE-2013-2446","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975132","bugzilla_description":"CVE-2013-2446 OpenJDK: output stream access restrictions (CORBA, 8000642)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2446.json"},{"CVE":"CVE-2013-2457","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975133","bugzilla_description":"CVE-2013-2457 OpenJDK: Proper class checking (JMX, 8008120)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2457.json"},{"CVE":"CVE-2013-2453","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975134","bugzilla_description":"CVE-2013-2453 OpenJDK: MBeanServer Introspector package access (JMX, 8008124)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2453.json"},{"CVE":"CVE-2013-2443","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975137","bugzilla_description":"CVE-2013-2443 OpenJDK: AccessControlContext check order issue (Libraries, 8001330)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2443.json"},{"CVE":"CVE-2013-2452","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975138","bugzilla_description":"CVE-2013-2452 OpenJDK: Unique VMIDs (Libraries, 8001033)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2452.json"},{"CVE":"CVE-2013-2455","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975139","bugzilla_description":"CVE-2013-2455 OpenJDK: getEnclosing* checks (Libraries, 8007812)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2455.json"},{"CVE":"CVE-2013-2447","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975140","bugzilla_description":"CVE-2013-2447 OpenJDK: Prevent revealing the local address (Networking, 8001318)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2447.json"},{"CVE":"CVE-2013-2450","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975141","bugzilla_description":"CVE-2013-2450 OpenJDK: ObjectStreamClass circular reference denial of service (Serialization, 8000638)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2450.json"},{"CVE":"CVE-2013-2456","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975142","bugzilla_description":"CVE-2013-2456 OpenJDK: ObjectOutputStream access checks (Serialization, 8008132)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2456.json"},{"CVE":"CVE-2013-2412","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975144","bugzilla_description":"CVE-2013-2412 OpenJDK: JConsole SSL support (Serviceability, 8003703)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2412.json"},{"CVE":"CVE-2013-2449","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975145","bugzilla_description":"CVE-2013-2449 OpenJDK: GnomeFileTypeDetector path access check (Libraries, 8004288)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2449.json"},{"CVE":"CVE-2013-2451","severity":"low","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975146","bugzilla_description":"CVE-2013-2451 OpenJDK: exclusive port binding (Networking, 7170730)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2451.json"},{"CVE":"CVE-2013-1500","severity":"low","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975148","bugzilla_description":"CVE-2013-1500 OpenJDK: Insecure shared memory permissions (2D, 8001034)","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1500.json"},{"CVE":"CVE-2013-2464","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975757","bugzilla_description":"CVE-2013-2464 Oracle JDK: unspecified vulnerability fixed in 7u25 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2464.json"},{"CVE":"CVE-2013-2468","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975761","bugzilla_description":"CVE-2013-2468 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2468.json"},{"CVE":"CVE-2013-2466","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975764","bugzilla_description":"CVE-2013-2466 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2466.json"},{"CVE":"CVE-2013-3743","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1081","RHSA-2013:1456","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975767","bugzilla_description":"CVE-2013-3743 Oracle JDK: unspecified vulnerability fixed in 6u51 and 5u51 (AWT)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3743.json"},{"CVE":"CVE-2013-2462","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975769","bugzilla_description":"CVE-2013-2462 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2462.json"},{"CVE":"CVE-2013-2442","severity":"important","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975770","bugzilla_description":"CVE-2013-2442 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2442.json"},{"CVE":"CVE-2013-2467","severity":"important","public_date":"2013-06-18T00:00:00Z","advisories":[],"bugzilla":"975772","bugzilla_description":"CVE-2013-2467 Oracle JDK: unspecified vulnerability fixed in 5u51 (Install)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2467.json"},{"CVE":"CVE-2013-2437","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975773","bugzilla_description":"CVE-2013-2437 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2437.json"},{"CVE":"CVE-2013-2400","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975774","bugzilla_description":"CVE-2013-2400 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2400.json"},{"CVE":"CVE-2013-3744","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975775","bugzilla_description":"CVE-2013-3744 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3744.json"},{"CVE":"CVE-2013-0401","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"920245","bugzilla_description":"CVE-2013-0401 OpenJDK: sun.awt.datatransfer.ClassLoaderObjectInputStream class may incorrectly invoke the system class loader (CanSecWest 2013, AWT, 8009305)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0401.json"},{"CVE":"CVE-2013-1488","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"920247","bugzilla_description":"CVE-2013-1488 OpenJDK: JDBC driver manager improper toString calls (CanSecWest 2013, Libraries, 8009814)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1488.json"},{"CVE":"CVE-2013-1537","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952387","bugzilla_description":"CVE-2013-1537 OpenJDK: remote code loading enabled by default (RMI, 8001040)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1537.json"},{"CVE":"CVE-2013-2415","severity":"low","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952389","bugzilla_description":"CVE-2013-2415 OpenJDK: temporary files created with insecure permissions (JAX-WS, 8003542)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2415.json"},{"CVE":"CVE-2013-2423","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0751"],"bugzilla":"952398","bugzilla_description":"CVE-2013-2423 OpenJDK: incorrect setter access checks in MethodHandles (Hostspot, 8009677)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2423.json"},{"CVE":"CVE-2013-2424","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952509","bugzilla_description":"CVE-2013-2424 OpenJDK: MBeanInstantiator insufficient class access checks (JMX, 8006435)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2424.json"},{"CVE":"CVE-2013-2429","severity":"important","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952521","bugzilla_description":"CVE-2013-2429 OpenJDK: JPEGImageWriter state corruption (ImageIO, 8007918)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2429.json"},{"CVE":"CVE-2013-2430","severity":"important","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952524","bugzilla_description":"CVE-2013-2430 OpenJDK: JPEGImageReader state corruption (ImageIO, 8007667)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2430.json"},{"CVE":"CVE-2013-2436","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0751"],"bugzilla":"952550","bugzilla_description":"CVE-2013-2436 OpenJDK: Wrapper.convert insufficient type checks (Libraries, 8009049)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2436.json"},{"CVE":"CVE-2013-2420","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952638","bugzilla_description":"CVE-2013-2420 OpenJDK: image processing vulnerability (2D, 8007617)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2420.json"},{"CVE":"CVE-2013-1558","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952640","bugzilla_description":"CVE-2013-1558 OpenJDK: java.beans.ThreadGroupContext missing restrictions (Beans, 7200507)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1558.json"},{"CVE":"CVE-2013-2422","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952642","bugzilla_description":"CVE-2013-2422 OpenJDK: MethodUtil trampoline class incorrect restrictions (Libraries, 8009857)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2422.json"},{"CVE":"CVE-2013-2431","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952645","bugzilla_description":"CVE-2013-2431 OpenJDK: Hotspot intrinsic frames vulnerability (Hotspot, 8004336)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2431.json"},{"CVE":"CVE-2013-1518","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952646","bugzilla_description":"CVE-2013-1518 OpenJDK: JAXP missing security restrictions (JAXP, 6657673)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1518.json"},{"CVE":"CVE-2013-1557","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952648","bugzilla_description":"CVE-2013-1557 OpenJDK: LogStream.setDefaultStream() missing security restrictions (RMI, 8001329)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1557.json"},{"CVE":"CVE-2013-2421","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952649","bugzilla_description":"CVE-2013-2421 OpenJDK: Hotspot MethodHandle lookup error (Hotspot, 8009699)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2421.json"},{"CVE":"CVE-2013-2426","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952653","bugzilla_description":"CVE-2013-2426 OpenJDK: ConcurrentHashMap incorrectly calls defaultReadObject() method (Libraries, 8009063)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2426.json"},{"CVE":"CVE-2013-2419","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952656","bugzilla_description":"CVE-2013-2419 ICU: Layout Engine font processing errors (JDK 2D, 8001031)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2419.json"},{"CVE":"CVE-2013-2417","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952657","bugzilla_description":"CVE-2013-2417 OpenJDK: Network InetAddress serialization information disclosure (Networking, 8000724)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2417.json"},{"CVE":"CVE-2013-2383","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952708","bugzilla_description":"CVE-2013-2383 ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004986)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2383.json"},{"CVE":"CVE-2013-2384","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952709","bugzilla_description":"CVE-2013-2384 ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004987)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2384.json"},{"CVE":"CVE-2013-1569","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952711","bugzilla_description":"CVE-2013-1569 ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004994)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1569.json"},{"CVE":"CVE-2013-1561","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"953135","bugzilla_description":"Oracle JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1561.json"},{"CVE":"CVE-2013-1564","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"953135","bugzilla_description":"Oracle JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1564.json"},{"CVE":"CVE-2013-2414","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"953135","bugzilla_description":"Oracle JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2414.json"},{"CVE":"CVE-2013-2427","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"953135","bugzilla_description":"Oracle JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2427.json"},{"CVE":"CVE-2013-2428","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"953135","bugzilla_description":"Oracle JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2428.json"},{"CVE":"CVE-2013-2438","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822"],"bugzilla":"953135","bugzilla_description":"Oracle JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2438.json"},{"CVE":"CVE-2013-1540","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953166","bugzilla_description":"CVE-2013-1540 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1540.json"},{"CVE":"CVE-2013-1563","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953172","bugzilla_description":"CVE-2013-1563 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Install)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1563.json"},{"CVE":"CVE-2013-2394","severity":"important","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953265","bugzilla_description":"CVE-2013-2394 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (2D)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2394.json"},{"CVE":"CVE-2013-2416","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822"],"bugzilla":"953266","bugzilla_description":"CVE-2013-2416 Oracle JDK: unspecified vulnerability fixed in 7u21 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2416.json"},{"CVE":"CVE-2013-2418","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953267","bugzilla_description":"CVE-2013-2418 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2418.json"},{"CVE":"CVE-2013-2425","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"953268","bugzilla_description":"CVE-2013-2425 Oracle JDK: unspecified vulnerability fixed in 7u21 (Install)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2425.json"},{"CVE":"CVE-2013-2432","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953269","bugzilla_description":"CVE-2013-2432 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2432.json"},{"CVE":"CVE-2013-2433","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953270","bugzilla_description":"CVE-2013-2433 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2433.json"},{"CVE":"CVE-2013-2434","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822"],"bugzilla":"953272","bugzilla_description":"CVE-2013-2434 Oracle JDK: unspecified vulnerability fixed in 7u21 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2434.json"},{"CVE":"CVE-2013-2435","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953273","bugzilla_description":"CVE-2013-2435 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2435.json"},{"CVE":"CVE-2013-2439","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0758"],"bugzilla":"953274","bugzilla_description":"CVE-2013-2439 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Install)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2439.json"},{"CVE":"CVE-2013-2440","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953275","bugzilla_description":"CVE-2013-2440 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2440.json"},{"CVE":"CVE-2013-0402","severity":"critical","public_date":"2013-03-06T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"920246","bugzilla_description":"CVE-2013-0402 Oracle JDK: unspecified JavaFX buffer overflow leading to JVM compromise (CanSecWest 2013, JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0402.json"},{"CVE":"CVE-2013-1491","severity":"critical","public_date":"2013-03-06T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"920248","bugzilla_description":"CVE-2013-1491 Oracle JDK: unspecified sanbox bypass (CanSecWest 2013, 2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1491.json"},{"CVE":"CVE-2013-0809","severity":"critical","public_date":"2013-03-04T00:00:00Z","advisories":["RHSA-2013:0603","RHSA-2013:0625","RHSA-2013:0602","RHSA-2013:0624","RHSA-2013:0605","RHSA-2013:0604","RHSA-2013:0626","RHSA-2013:1456","RHSA-2013:0601","RHSA-2013:0600","RHSA-2013:1455"],"bugzilla":"917550","bugzilla_description":"CVE-2013-0809 OpenJDK: Specially crafted sample model integer overflow (2D, 8007014)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.36.1.11.9.el5_9","java-1.7.0-oracle-1:1.7.0.17-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.57.1.11.9.el6_4","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el6_4","java-1.6.0-sun-1:1.6.0.43-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0809.json"},{"CVE":"CVE-2013-1493","severity":"critical","public_date":"2013-03-04T00:00:00Z","advisories":["RHSA-2013:0603","RHSA-2013:0625","RHSA-2013:0602","RHSA-2013:0624","RHSA-2013:0605","RHSA-2013:0604","RHSA-2013:0626","RHSA-2013:1456","RHSA-2013:0601","RHSA-2013:0600","RHSA-2013:1455"],"bugzilla":"917553","bugzilla_description":"CVE-2013-1493 OpenJDK: CMM malformed raster memory corruption (2D, 8007675)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.36.1.11.9.el5_9","java-1.7.0-oracle-1:1.7.0.17-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.57.1.11.9.el6_4","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el6_4","java-1.6.0-sun-1:1.6.0.43-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1493.json"},{"CVE":"CVE-2013-1486","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0532","RHSA-2013:1456","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531"],"bugzilla":"913014","bugzilla_description":"CVE-2013-1486 OpenJDK: MBeanServer insufficient privilege restrictions (JMX, 8006446)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el6_3","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1486.json"},{"CVE":"CVE-2013-1484","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0532","RHSA-2013:0275"],"bugzilla":"913021","bugzilla_description":"CVE-2013-1484 OpenJDK: MethodHandleProxies insufficient privilege checks (Libraries, 8004937)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1484.json"},{"CVE":"CVE-2013-1485","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0532","RHSA-2013:0275"],"bugzilla":"913025","bugzilla_description":"CVE-2013-1485 OpenJDK: MethodHandles insufficient privilege checks (Libraries, 8006439)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1485.json"},{"CVE":"CVE-2013-1487","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0532","RHSA-2013:1456","RHSA-2013:1455","RHSA-2013:0531"],"bugzilla":"913030","bugzilla_description":"CVE-2013-1487 Oracle JDK: unspecified vulnerability fixed in 6u41 and 7u15 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el6_3","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1487.json"},{"CVE":"CVE-2013-0169","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0636","RHSA-2013:0823","RHSA-2013:0833","RHSA-2013:0855","RHSA-2013:0822","RHSA-2013:0587","RHSA-2013:0532","RHSA-2013:1456","RHSA-2014:0416","RHSA-2013:0782","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"907589","bugzilla_description":"CVE-2013-0169 SSL/TLS: CBC padding timing attack (lucky-13)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3","spice-client-msi-0:3.3-12","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el5_9","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0169.json"},{"CVE":"CVE-2013-0440","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"859140","bugzilla_description":"CVE-2013-0440 OpenJDK: CPU consumption DoS via repeated SSL ClientHello packets (JSSE, 7192393)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0440.json"},{"CVE":"CVE-2013-1475","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0247","RHSA-2012:1485","RHSA-2013:0236","RHSA-2013:0246","RHSA-2012:1465","RHSA-2013:0237","RHSA-2012:1467","RHSA-2012:1466","RHSA-2013:0245"],"bugzilla":"860652","bugzilla_description":"CVE-2013-1475 OpenJDK: IIOP type reuse sandbox bypass (CORBA, 8000540, SE-2012-01 Issue 50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1475.json"},{"CVE":"CVE-2013-0424","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906813","bugzilla_description":"CVE-2013-0424 OpenJDK: RMI CGIHandler XSS issue (RMI, 6563318)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0424.json"},{"CVE":"CVE-2013-0435","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906892","bugzilla_description":"CVE-2013-0435 OpenJDK: com.sun.xml.internal.* not restricted packages (JAX-WS, 7201068)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0435.json"},{"CVE":"CVE-2013-1478","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906894","bugzilla_description":"CVE-2013-1478 OpenJDK: image parser insufficient raster parameter checks (2D, 8001972)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1478.json"},{"CVE":"CVE-2013-0442","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906899","bugzilla_description":"CVE-2013-0442 OpenJDK: insufficient privilege checking issue (AWT, 7192977)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0442.json"},{"CVE":"CVE-2013-0445","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906900","bugzilla_description":"CVE-2013-0445 OpenJDK: insufficient privilege checking issue (AWT, 8001057)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0445.json"},{"CVE":"CVE-2013-1480","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906904","bugzilla_description":"CVE-2013-1480 OpenJDK: image parser insufficient raster parameter checks (AWT, 8002325)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1480.json"},{"CVE":"CVE-2013-0450","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906911","bugzilla_description":"CVE-2013-0450 OpenJDK: RequiredModelMBean missing access control context checks (JMX, 8000537)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0450.json"},{"CVE":"CVE-2012-1541","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906914","bugzilla_description":"CVE-2012-1541 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1541.json"},{"CVE":"CVE-2013-0446","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906916","bugzilla_description":"CVE-2013-0446 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0446.json"},{"CVE":"CVE-2012-3342","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906917","bugzilla_description":"CVE-2012-3342 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3342.json"},{"CVE":"CVE-2013-0419","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906918","bugzilla_description":"CVE-2013-0419 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0419.json"},{"CVE":"CVE-2013-0423","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906921","bugzilla_description":"CVE-2013-0423 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0423.json"},{"CVE":"CVE-2013-0351","severity":"important","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906923","bugzilla_description":"CVE-2013-0351 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0351.json"},{"CVE":"CVE-2013-0430","severity":"low","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0236","RHSA-2013:0237"],"bugzilla":"906930","bugzilla_description":"CVE-2013-0430 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Install)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0430.json"},{"CVE":"CVE-2013-0449","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0237"],"bugzilla":"906932","bugzilla_description":"CVE-2013-0449 Oracle JDK: unspecified vulnerability fixed in 7u13 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0449.json"},{"CVE":"CVE-2013-1473","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906933","bugzilla_description":"CVE-2013-1473 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1473.json"},{"CVE":"CVE-2013-0448","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0237"],"bugzilla":"906934","bugzilla_description":"CVE-2013-0448 Oracle JDK: unspecified vulnerability fixed in 7u13 (Libraries)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0448.json"},{"CVE":"CVE-2013-0438","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906935","bugzilla_description":"CVE-2013-0438 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0438.json"},{"CVE":"CVE-2013-1479","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0237"],"bugzilla":"907190","bugzilla_description":"CVE-2013-1479 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1479.json"},{"CVE":"CVE-2013-0428","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907207","bugzilla_description":"CVE-2013-0428 OpenJDK: reflection API incorrect checks for proxy classes (Libraries, 7197546, SE-2012-01 Issue 29)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0428.json"},{"CVE":"CVE-2013-0444","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0237"],"bugzilla":"907218","bugzilla_description":"CVE-2013-0444 OpenJDK: MethodFinder insufficient checks for cached results (Beans, 7200493)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0444.json"},{"CVE":"CVE-2013-0432","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907219","bugzilla_description":"CVE-2013-0432 OpenJDK: insufficient clipboard access premission checks (AWT, 7186952)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0432.json"},{"CVE":"CVE-2013-0437","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0237"],"bugzilla":"907222","bugzilla_description":"CVE-2013-0437 Oracle JDK: unspecified vulnerability fixed in 7u13 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0437.json"},{"CVE":"CVE-2012-3213","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"907223","bugzilla_description":"CVE-2012-3213 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Scripting)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3213.json"},{"CVE":"CVE-2013-1481","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"907224","bugzilla_description":"CVE-2013-1481 Oracle JDK: unspecified vulnerability fixed in 6u39 (Sound)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1481.json"},{"CVE":"CVE-2013-0409","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"907226","bugzilla_description":"CVE-2013-0409 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (JMX)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0409.json"},{"CVE":"CVE-2013-0443","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907340","bugzilla_description":"CVE-2013-0443 OpenJDK: insufficient Diffie-Hellman public key checks (JSSE, 7192392)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0443.json"},{"CVE":"CVE-2013-0425","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907344","bugzilla_description":"CVE-2013-0425 OpenJDK: logging insufficient access control checks (Libraries, 6664509)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0425.json"},{"CVE":"CVE-2013-0426","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907346","bugzilla_description":"CVE-2013-0426 OpenJDK: logging insufficient access control checks (Libraries, 6664528)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0426.json"},{"CVE":"CVE-2013-0434","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907453","bugzilla_description":"CVE-2013-0434 OpenJDK: loadPropertyFile missing restrictions (JAXP, 8001235)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0434.json"},{"CVE":"CVE-2013-0427","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907455","bugzilla_description":"CVE-2013-0427 OpenJDK: invalid threads subject to interrupts (Libraries, 6776941)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0427.json"},{"CVE":"CVE-2013-0433","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907456","bugzilla_description":"CVE-2013-0433 OpenJDK: InetSocketAddress serialization issue (Networking, 7201071)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0433.json"},{"CVE":"CVE-2013-1476","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907457","bugzilla_description":"CVE-2013-1476 OpenJDK: missing ValueHandlerImpl class constructor access restriction (CORBA, 8000631)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1476.json"},{"CVE":"CVE-2013-0441","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907458","bugzilla_description":"CVE-2013-0441 OpenJDK: missing serialization restriction (CORBA, 7201066)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0441.json"},{"CVE":"CVE-2013-0429","severity":"important","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:0237","RHSA-2013:0245"],"bugzilla":"907460","bugzilla_description":"CVE-2013-0429 OpenJDK: PresentationManager incorrectly shared (CORBA, 7141694)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0429.json"},{"CVE":"CVE-2013-0431","severity":"moderate","public_date":"2013-01-27T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0237"],"bugzilla":"906447","bugzilla_description":"CVE-2013-0431 OpenJDK: JMX Introspector missing package access check (JMX, 8000539, SE-2012-01 Issue 52)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0431.json"},{"CVE":"CVE-2013-1489","severity":"low","public_date":"2013-01-27T00:00:00Z","advisories":["RHSA-2013:0237"],"bugzilla":"906449","bugzilla_description":"CVE-2013-1489 Oracle JDK 7: bypass of the security level setting in browser plugin (Deployment, SE-2012-01 Issue 53)","cvss_score":null,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1489.json"},{"CVE":"CVE-2013-1490","severity":null,"public_date":"2013-01-27T00:00:00Z","advisories":[],"bugzilla":"906450","bugzilla_description":"CVE-2013-1490 JDK: complete Java security sandbox bypass (Issue 51)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1490.json"},{"CVE":"CVE-2012-3174","severity":"critical","public_date":"2013-01-13T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0165","RHSA-2013:0156"],"bugzilla":"894934","bugzilla_description":"CVE-2012-3174 OpenJDK: MethodHandles incorrect permission checks (Libraries, 8004933)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1","java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3174.json"},{"CVE":"CVE-2013-0422","severity":"critical","public_date":"2013-01-10T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0165","RHSA-2013:0156"],"bugzilla":"894172","bugzilla_description":"CVE-2013-0422 OpenJDK: MethodHandles.Lookup incorrect permission checks, Java 7 0day (Libraries, 8006017)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1","java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0422.json"},{"CVE":"CVE-2012-3216","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865346","bugzilla_description":"CVE-2012-3216 OpenJDK: java.io.FilePermission information leak (Libraries, 6631398)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3216.json"},{"CVE":"CVE-2012-5068","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865348","bugzilla_description":"CVE-2012-5068 OpenJDK: RhinoScriptEngine security bypass (Scripting, 7143535)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5068.json"},{"CVE":"CVE-2012-5070","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865350","bugzilla_description":"CVE-2012-5070 OpenJDK: EnvHelp information disclosure (JMX, 7158796)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5070.json"},{"CVE":"CVE-2012-5076","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865352","bugzilla_description":"CVE-2012-5076 OpenJDK: com.sun.org.glassfish.* not restricted packages (JAX-WS, 7163198)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5076.json"},{"CVE":"CVE-2012-5077","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2012:1467"],"bugzilla":"865354","bugzilla_description":"CVE-2012-5077 OpenJDK: SecureRandom mulitple seeders information disclosure (Security, 7167656)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5077.json"},{"CVE":"CVE-2012-5073","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865357","bugzilla_description":"CVE-2012-5073 OpenJDK: LogManager security bypass (Libraries, 7169884)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5073.json"},{"CVE":"CVE-2012-5074","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865359","bugzilla_description":"CVE-2012-5074 OpenJDK: com.sun.org.glassfish.* not restricted packages (JAX-WS, 7169887)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5074.json"},{"CVE":"CVE-2012-5075","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865363","bugzilla_description":"CVE-2012-5075 OpenJDK: RMIConnectionImpl information disclosure (JMX, 7169888)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5075.json"},{"CVE":"CVE-2012-5072","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865365","bugzilla_description":"CVE-2012-5072 OpenJDK: AccessController.doPrivilegedWithCombiner() information disclosure (Security, 7172522)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5072.json"},{"CVE":"CVE-2012-5081","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865370","bugzilla_description":"CVE-2012-5081 OpenJDK: JSSE denial of service (JSSE, 7186286)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5081.json"},{"CVE":"CVE-2012-5086","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2012:1467"],"bugzilla":"865428","bugzilla_description":"CVE-2012-5086 OpenJDK: XMLDecoder sandbox restriction bypass (Beans, 7195917)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5086.json"},{"CVE":"CVE-2012-5087","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865434","bugzilla_description":"CVE-2012-5087 OpenJDK: PropertyElementHandler insufficient access checks (Beans, 7195549)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5087.json"},{"CVE":"CVE-2012-5088","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865471","bugzilla_description":"CVE-2012-5088 OpenJDK: MethodHandle insufficient access control checks (Libraries, 7196190)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5088.json"},{"CVE":"CVE-2012-5084","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865511","bugzilla_description":"CVE-2012-5084 OpenJDK: DefaultFormatter insufficient data validation (Swing, 7195194)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5084.json"},{"CVE":"CVE-2012-5089","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865514","bugzilla_description":"CVE-2012-5089 OpenJDK: RMIConnectionImpl insufficient access control checks (JMX, 7198296)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5089.json"},{"CVE":"CVE-2012-5071","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865519","bugzilla_description":"CVE-2012-5071 OpenJDK: DescriptorSupport insufficient package access checks (JMX, 7192975)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5071.json"},{"CVE":"CVE-2012-5069","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865531","bugzilla_description":"CVE-2012-5069 OpenJDK: Executors state handling issues (Concurrency, 7189103)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5069.json"},{"CVE":"CVE-2012-5085","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2013:0625","RHSA-2012:1392","RHSA-2013:0624","RHSA-2012:1384","RHSA-2013:0626","RHSA-2012:1386","RHSA-2012:1385"],"bugzilla":"865541","bugzilla_description":"CVE-2012-5085 OpenJDK: disable Gopher support by default (Gopher, 7189567)","cvss_score":null,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5085.json"},{"CVE":"CVE-2012-5079","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865568","bugzilla_description":"CVE-2012-5079 OpenJDK: ServiceLoader reject not subtype classes without instantiating (Libraries, 7195919)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5079.json"},{"CVE":"CVE-2012-1531","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1485","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"867185","bugzilla_description":"CVE-2012-1531 Oracle JDK: unspecified vulnerability (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1531.json"},{"CVE":"CVE-2012-1532","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2013:1456","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"867186","bugzilla_description":"CVE-2012-1532 Oracle JDK: unspecified vulnerability (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1532.json"},{"CVE":"CVE-2012-1533","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2013:1456","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"867187","bugzilla_description":"CVE-2012-1533 Oracle JDK: unspecified vulnerability (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1533.json"},{"CVE":"CVE-2012-3143","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"867189","bugzilla_description":"CVE-2012-3143 Oracle JDK: unspecified vulnerability (JMX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3143.json"},{"CVE":"CVE-2012-3159","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2013:1456","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"867190","bugzilla_description":"CVE-2012-3159 Oracle JDK: unspecified vulnerability (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3159.json"},{"CVE":"CVE-2012-5067","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1467"],"bugzilla":"867192","bugzilla_description":"CVE-2012-5067 Oracle JDK: unspecified vulnerability (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5067.json"},{"CVE":"CVE-2012-5083","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1485","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"867193","bugzilla_description":"CVE-2012-5083 Oracle JDK: unspecified vulnerability (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5083.json"},{"CVE":"CVE-2012-4416","severity":"low","public_date":"2012-09-07T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385"],"bugzilla":"856124","bugzilla_description":"CVE-2012-4416 OpenJDK: uninitialized Array JVM memory disclosure (Hotspot, 7198606)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4416.json"},{"CVE":"CVE-2012-4420","severity":null,"public_date":"2012-09-07T00:00:00Z","advisories":[],"bugzilla":"856588","bugzilla_description":"CVE-2012-4420 java-1.7.0-openjdk: JVM heap memory disclosure","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4420.json"},{"CVE":"CVE-2012-1682","severity":"critical","public_date":"2012-08-30T00:00:00Z","advisories":["RHSA-2012:1221","RHSA-2012:1223","RHSA-2013:1456","RHSA-2012:1289","RHSA-2012:1222","RHSA-2012:1225","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"853097","bugzilla_description":"CVE-2012-1682 OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.49.1.11.4.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.9.el5_8","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1682.json"},{"CVE":"CVE-2012-3136","severity":"critical","public_date":"2012-08-30T00:00:00Z","advisories":["RHSA-2012:1223","RHSA-2012:1289","RHSA-2012:1225"],"bugzilla":"853138","bugzilla_description":"CVE-2012-3136 OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3136.json"},{"CVE":"CVE-2012-0547","severity":"low","public_date":"2012-08-30T00:00:00Z","advisories":["RHSA-2012:1392","RHSA-2012:1221","RHSA-2012:1223","RHSA-2013:1456","RHSA-2012:1289","RHSA-2012:1222","RHSA-2012:1225","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"853228","bugzilla_description":"CVE-2012-0547 OpenJDK: AWT hardening fixes (AWT, 7163201)","cvss_score":null,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.49.1.11.4.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.9.el5_8","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0547.json"},{"CVE":"CVE-2012-4681","severity":"critical","public_date":"2012-08-27T00:00:00Z","advisories":["RHSA-2012:1223","RHSA-2012:1289","RHSA-2012:1225"],"bugzilla":"852051","bugzilla_description":"CVE-2012-4681 OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4681.json"},{"CVE":"CVE-2012-1711","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:0730"],"bugzilla":"829354","bugzilla_description":"CVE-2012-1711 OpenJDK: improper protection of CORBA data models (CORBA, 7079902)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1711.json"},{"CVE":"CVE-2012-1717","severity":"low","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:1332","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829358","bugzilla_description":"CVE-2012-1717 OpenJDK: insecure temporary file permissions (JRE, 7143606)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1717.json"},{"CVE":"CVE-2012-1716","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829360","bugzilla_description":"CVE-2012-1716 OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1716.json"},{"CVE":"CVE-2012-1713","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:1332","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829361","bugzilla_description":"CVE-2012-1713 OpenJDK: fontmanager layout lookup code memory corruption (2D, 7143617)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1713.json"},{"CVE":"CVE-2012-1719","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:1332","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829371","bugzilla_description":"CVE-2012-1719 OpenJDK: mutable repository identifiers in generated stub code (CORBA, 7143851)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1719.json"},{"CVE":"CVE-2012-1718","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1332","RHSA-2012:0730","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829372","bugzilla_description":"CVE-2012-1718 OpenJDK: CRL and certificate extensions handling improvements (Security, 7143872)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1718.json"},{"CVE":"CVE-2012-1723","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:0730"],"bugzilla":"829373","bugzilla_description":"CVE-2012-1723 OpenJDK: insufficient field accessibility checks (HotSpot, 7152811)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1723.json"},{"CVE":"CVE-2012-1724","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:0730"],"bugzilla":"829374","bugzilla_description":"CVE-2012-1724 OpenJDK: XML parsing infinite loop (JAXP, 7157609)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1724.json"},{"CVE":"CVE-2012-1725","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829376","bugzilla_description":"CVE-2012-1725 OpenJDK: insufficient invokespecial <init> verification (HotSpot, 7160757)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1725.json"},{"CVE":"CVE-2012-1726","severity":"important","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:1019","RHSA-2012:1289"],"bugzilla":"829377","bugzilla_description":"CVE-2012-1726 OpenJDK: java.lang.invoke.MethodHandles.Lookup does not honor access modes (Libraries, 7165628)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1726.json"},{"CVE":"CVE-2012-1721","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:0734","RHSA-2012:1019","RHSA-2013:1456","RHSA-2012:1289","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"831353","bugzilla_description":"CVE-2012-1721 Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1721.json"},{"CVE":"CVE-2012-1722","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:0734","RHSA-2012:1019","RHSA-2013:1456","RHSA-2012:1289","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"831354","bugzilla_description":"CVE-2012-1722 Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1722.json"},{"CVE":"CVE-2012-0551","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:0734","RHSA-2012:1019","RHSA-2013:1456","RHSA-2012:1289","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"831355","bugzilla_description":"CVE-2012-0551 Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0551.json"},{"CVE":"CVE-2015-0480","severity":"low","public_date":"2005-01-04T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211504","bugzilla_description":"CVE-2015-0480 OpenJDK: jar directory traversal issues (Tools, 8064601)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0480.json"},{"CVE":"CVE-2005-1080","severity":"low","public_date":"2005-01-04T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"606442","bugzilla_description":"CVE-2005-1080 jar: directory traversal vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1080.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/acpid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/acpid_security_api_results.json
new file mode 100644
index 0000000..1a640cb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/acpid_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-4578","severity":"low","public_date":"2011-07-30T00:00:00Z","advisories":[],"bugzilla":"760984","bugzilla_description":"CVE-2011-4578 acpid: Unsafe umask for actions executed by acpid","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4578.json"},{"CVE":"CVE-2011-1159","severity":"low","public_date":"2011-01-19T00:00:00Z","advisories":[],"bugzilla":"688698","bugzilla_description":"CVE-2011-1159 acpid: blocked writes can lead to acpid daemon hang","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1159.json"},{"CVE":"CVE-2009-4033","severity":"important","public_date":"2009-12-07T00:00:00Z","advisories":["RHSA-2009:1642"],"bugzilla":"542926","bugzilla_description":"CVE-2009-4033 acpid: log file created with random permissions","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["acpid-0:1.0.4-9.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4033.json"},{"CVE":"CVE-2009-0798","severity":"moderate","public_date":"2009-04-21T00:00:00Z","advisories":["RHSA-2009:0474"],"bugzilla":"494443","bugzilla_description":"CVE-2009-0798 acpid: too many open files DoS","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/AU:N/C:N/I:N/A:P","CWE":null,"affected_packages":["acpid-0:1.0.1-3","acpid-0:1.0.2-4","acpid-0:1.0.4-7.el5_3.1","acpid-0:1.0.3-2.el4_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0798.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adcli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adcli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adcli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adobe-mappings-cmap-deprecated_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adobe-mappings-cmap-deprecated_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adobe-mappings-cmap-deprecated_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adobe-mappings-cmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adobe-mappings-cmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adobe-mappings-cmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adobe-mappings-pdf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adobe-mappings-pdf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adobe-mappings-pdf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-cursor-theme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-cursor-theme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-cursor-theme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-gtk2-theme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-gtk2-theme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-gtk2-theme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-icon-theme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-icon-theme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-icon-theme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-qt4_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-qt4_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-qt4_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-qt5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-qt5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-qt5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-qt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-qt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/adwaita-qt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/agg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/agg_security_api_results.json
new file mode 100644
index 0000000..c361aa6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/agg_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-5378","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":[],"bugzilla":"1542972","bugzilla_description":"CVE-2018-5378 quagga: bgpd does not properly bounds check the data sent with a NOTIFY allowing leak of sensitive data or crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5378.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-5379","severity":"important","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:0377"],"bugzilla":"1542985","bugzilla_description":"CVE-2018-5379 quagga: Double free vulnerability in bgpd when processing certain forms of UPDATE message allowing to crash or potentially execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["quagga-0:0.99.22.4-5.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-5380","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":[],"bugzilla":"1542990","bugzilla_description":"CVE-2018-5380 quagga: bgpd can overrun internal BGP code-to-string conversion tables potentially allowing crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5380.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-5381","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":[],"bugzilla":"1542992","bugzilla_description":"CVE-2018-5381 quagga: Infinite loop issue triggered by invalid OPEN message allows denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-228->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5381.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-16227","severity":"moderate","public_date":"2017-10-02T00:00:00Z","advisories":[],"bugzilla":"1509291","bugzilla_description":"CVE-2017-16227 quagga: Incorrect AS_PATH size calculation for long paths","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16227.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-3224","severity":"moderate","public_date":"2017-07-27T00:00:00Z","advisories":[],"bugzilla":"1472873","bugzilla_description":"CVE-2017-3224 quagga: OSPF implementation improperly determines LSA recency (VU#793496)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-354","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3224.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-5495","severity":"moderate","public_date":"2017-01-23T00:00:00Z","advisories":["RHSA-2017:0794"],"bugzilla":"1416013","bugzilla_description":"CVE-2017-5495 quagga: Telnet interface input buffer allocates unbounded amounts of memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["quagga-0:0.99.15-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5495.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-1245","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2017:0794"],"bugzilla":"1386109","bugzilla_description":"CVE-2016-1245 quagga: Buffer Overflow in IPv6 RA handling","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["quagga-0:0.99.15-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5682","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":[],"bugzilla":"1443546","bugzilla_description":"CVE-2016-5682 hawtio-swagger-ui: XSS vulnerability in Definitions section","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5682.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-4036","severity":"low","public_date":"2016-08-23T00:00:00Z","advisories":[],"bugzilla":"1370416","bugzilla_description":"CVE-2016-4036 quagga: Wrong permissions allowing information leak","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4036.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-4049","severity":"moderate","public_date":"2016-04-27T00:00:00Z","advisories":["RHSA-2017:0794"],"bugzilla":"1331372","bugzilla_description":"CVE-2016-4049 quagga: denial of service vulnerability in BGP routing daemon","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.99.15-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4049.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-2342","severity":"moderate","public_date":"2016-03-09T00:00:00Z","advisories":["RHSA-2017:0794"],"bugzilla":"1316571","bugzilla_description":"CVE-2016-2342 quagga: VPNv4 NLRI parser memcpys to stack on unchecked length","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["quagga-0:0.99.15-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2342.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2013-6051","severity":"moderate","public_date":"2013-11-25T00:00:00Z","advisories":[],"bugzilla":"1043370","bugzilla_description":"CVE-2013-6051 quagga: bgp crash when receiving bgp updates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6051.json"},{"CVE":"CVE-2013-0149","severity":"moderate","public_date":"2013-08-01T00:00:00Z","advisories":[],"bugzilla":"991457","bugzilla_description":"CVE-2013-0149 quagga (ospfd): Possibility to use invalid / duplicate LSA information (VU#229804)","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0149.json"},{"CVE":"CVE-2013-2236","severity":"low","public_date":"2013-07-02T00:00:00Z","advisories":["RHSA-2017:0794"],"bugzilla":"981124","bugzilla_description":"CVE-2013-2236 Quagga: OSPFD Potential remote code exec (stack based buffer overflow)","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["quagga-0:0.99.15-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2236.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2012-5521","severity":"low","public_date":"2012-11-13T00:00:00Z","advisories":[],"bugzilla":"876197","bugzilla_description":"CVE-2012-5521 quagga (ospf6d): Assertion failure when removing routes (retrieving information which route to remove)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5521.json"},{"CVE":"CVE-2012-1820","severity":"low","public_date":"2012-06-03T00:00:00Z","advisories":["RHSA-2012:1259"],"bugzilla":"817580","bugzilla_description":"CVE-2012-1820 quagga (bgpd): Assertion failure by processing BGP OPEN message with malformed ORF capability TLV (VU#962587)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1820.json"},{"CVE":"CVE-2012-0255","severity":"low","public_date":"2012-03-28T00:00:00Z","advisories":["RHSA-2012:1259"],"bugzilla":"802781","bugzilla_description":"CVE-2012-0255 quagga (bgpd): Assertion failure by processing malformed AS4 capability in BGP OPEN message","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0255.json"},{"CVE":"CVE-2012-0249","severity":"low","public_date":"2012-03-28T00:00:00Z","advisories":["RHSA-2012:1258","RHSA-2012:1259"],"bugzilla":"802827","bugzilla_description":"CVE-2012-0249 quagga (ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0249.json"},{"CVE":"CVE-2012-0250","severity":"low","public_date":"2012-03-28T00:00:00Z","advisories":["RHSA-2012:1258","RHSA-2012:1259"],"bugzilla":"802829","bugzilla_description":"CVE-2012-0250 quagga (ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0250.json"},{"CVE":"CVE-2011-3323","severity":"low","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:1258","RHSA-2012:1259"],"bugzilla":"738393","bugzilla_description":"CVE-2011-3323 Quagga (ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3323.json"},{"CVE":"CVE-2011-3324","severity":"low","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:1258","RHSA-2012:1259"],"bugzilla":"738394","bugzilla_description":"CVE-2011-3324 Quagga (ospf6d): Denial of service by decoding malformed Database Description packet headers","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3324.json"},{"CVE":"CVE-2011-3325","severity":"low","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:1258","RHSA-2012:1259"],"bugzilla":"738396","bugzilla_description":"CVE-2011-3325 Quagga (ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3325.json"},{"CVE":"CVE-2011-3326","severity":"low","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:1258","RHSA-2012:1259"],"bugzilla":"738398","bugzilla_description":"CVE-2011-3326 Quagga (ospfd): Denial of service by decoding Link State Update LSAs of unknown type","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3326.json"},{"CVE":"CVE-2011-3327","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:1258","RHSA-2012:1259"],"bugzilla":"738400","bugzilla_description":"CVE-2011-3327 Quagga (bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3327.json"},{"CVE":"CVE-2010-1674","severity":"low","public_date":"2011-03-21T00:00:00Z","advisories":["RHSA-2011:0406","RHSA-2012:1258"],"bugzilla":"654603","bugzilla_description":"CVE-2010-1674 quagga: DoS (crash) by processing malformed extended community attribute in a route","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-5.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1674.json"},{"CVE":"CVE-2010-1675","severity":"moderate","public_date":"2011-03-21T00:00:00Z","advisories":["RHSA-2011:0406"],"bugzilla":"654614","bugzilla_description":"CVE-2010-1675 quagga: BGP session reset by processing BGP Update message with malformed AS-path attributes","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.99.15-5.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1675.json"},{"CVE":"CVE-2010-2948","severity":"moderate","public_date":"2010-08-19T00:00:00Z","advisories":["RHSA-2010:0945","RHSA-2010:0785"],"bugzilla":"626783","bugzilla_description":"CVE-2010-2948 Quagga (bgpd): Stack buffer overflow by processing certain Route-Refresh messages","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["quagga-0:0.98.3-4.el4_8.1","quagga-0:0.98.6-5.el5_5.2","quagga-0:0.99.15-5.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2948.json"},{"CVE":"CVE-2010-2949","severity":"low","public_date":"2010-08-19T00:00:00Z","advisories":["RHSA-2010:0945"],"bugzilla":"626795","bugzilla_description":"CVE-2010-2949 Quagga (bgpd): DoS (crash) while processing certain BGP update AS path messages","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.99.15-5.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2949.json"},{"CVE":"CVE-2007-4826","severity":"low","public_date":"2007-09-07T00:00:00Z","advisories":["RHSA-2010:0785"],"bugzilla":"285691","bugzilla_description":"CVE-2007-4826 quagga bgpd DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.98.3-4.el4_8.1","quagga-0:0.98.6-5.el5_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4826.json"},{"CVE":"CVE-2007-1995","severity":"moderate","public_date":"2007-04-08T00:00:00Z","advisories":["RHSA-2007:0389"],"bugzilla":"240478","bugzilla_description":"CVE-2007-1995 Quagga bgpd DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["quagga-0:0.96.2-12.3E","quagga-0:0.98.6-2.1.0.1.el5","quagga-0:0.98.3-2.4.0.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1995.json"},{"CVE":"CVE-2006-2223","severity":"moderate","public_date":"2006-05-03T00:00:00Z","advisories":["RHSA-2006:0525","RHSA-2006:0533"],"bugzilla":"1618091","bugzilla_description":"CVE-2006-2223 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["quagga-0:0.98.3-2.4E","quagga-0:0.96.2-11.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2223.json"},{"CVE":"CVE-2006-2224","severity":"moderate","public_date":"2006-05-03T00:00:00Z","advisories":["RHSA-2006:0525","RHSA-2006:0533"],"bugzilla":"1618092","bugzilla_description":"CVE-2006-2224 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["quagga-0:0.98.3-2.4E","quagga-0:0.96.2-11.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2224.json"},{"CVE":"CVE-2006-2276","severity":"moderate","public_date":"2006-03-29T00:00:00Z","advisories":["RHSA-2006:0525","RHSA-2006:0533"],"bugzilla":"1618099","bugzilla_description":"CVE-2006-2276 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["quagga-0:0.98.3-2.4E","quagga-0:0.96.2-11.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2276.json"},{"CVE":"CVE-2003-0858","severity":"low","public_date":"2003-11-12T00:00:00Z","advisories":["RHSA-2003:307","RHSA-2003:315","RHSA-2003:305"],"bugzilla":"1617096","bugzilla_description":"CVE-2003-0858 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["quagga-0:0.96.2-8.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0858.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/aic94xx-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/aic94xx-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/aic94xx-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/aide_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/aide_security_api_results.json
new file mode 100644
index 0000000..2cebac6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/aide_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2007-3849","severity":"moderate","public_date":"2007-09-04T00:00:00Z","advisories":["RHSA-2007:0539"],"bugzilla":"236923","bugzilla_description":"CVE-2007-3849 Rebase aide to 0.13.1","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["aide-0:0.13.1-2.0.4.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3849.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/akonadi-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/akonadi-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/akonadi-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/akonadi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/akonadi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/akonadi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alacarte_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alacarte_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alacarte_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-lib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-lib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-lib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-lib_security_api_results.json
new file mode 100644
index 0000000..ffa1290
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-lib_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2005-0087","severity":"moderate","public_date":"2005-02-15T00:00:00Z","advisories":["RHSA-2005:033"],"bugzilla":"1617449","bugzilla_description":"CVE-2005-0087 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["alsa-lib-0:1.0.6-5.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0087.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-plugins-pulseaudio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-plugins-pulseaudio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-plugins-pulseaudio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-tools-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-tools-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-tools-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/alsa-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda_security_api_results.json
new file mode 100644
index 0000000..4c57020
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/amanda_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10730","severity":"low","public_date":"2016-01-15T00:00:00Z","advisories":[],"bugzilla":"1647090","bugzilla_description":"CVE-2016-10730 amanda: Privilege escalation in amstar and amgtar via --*tar-path option","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10730.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2016-10729","severity":"low","public_date":"2016-01-11T00:00:00Z","advisories":[],"bugzilla":"1647084","bugzilla_description":"CVE-2016-10729 amanda: Privilege escalation in runtar via --rsh-command option","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10729.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.2"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-tui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-tui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-tui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-user-help_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-user-help_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-user-help_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-widgets_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-widgets_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda-widgets_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda_security_api_results.json
new file mode 100644
index 0000000..de41c58
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/anaconda_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-2314","severity":"low","public_date":"2012-05-04T00:00:00Z","advisories":[],"bugzilla":"819031","bugzilla_description":"CVE-2012-2314 anaconda: Weak permissions by writing password configuration file in bootloader configuration module","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2314.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ant_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ant_security_api_results.json
new file mode 100644
index 0000000..f717911
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ant_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15250","severity":"low","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1887810","bugzilla_description":"CVE-2020-15250 junit4: TemporaryFolder is shared between all users across system which could result in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15250.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2020-12695","severity":"moderate","public_date":"2020-06-08T00:00:00Z","advisories":[],"bugzilla":"1846006","bugzilla_description":"CVE-2020-12695 hostapd: UPnP SUBSCRIBE misbehavior in WPS AP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-400|CWE-918)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12695.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1945","severity":"moderate","public_date":"2020-05-13T00:00:00Z","advisories":["RHSA-2020:2618"],"bugzilla":"1837444","bugzilla_description":"CVE-2020-1945 ant: insecure temporary file vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1945.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.7"},{"CVE":"CVE-2019-10064","severity":"moderate","public_date":"2020-02-27T00:00:00Z","advisories":[],"bugzilla":"1811069","bugzilla_description":"CVE-2019-10064 hostapd: Not preventig the use of low quality PRNG in EAP mode leads to insufficient entropy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10064.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16275","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":[],"bugzilla":"1767023","bugzilla_description":"CVE-2019-16275 wpa_supplicant: AP mode PMF disconnection protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16275.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-15133","severity":"low","public_date":"2019-08-17T00:00:00Z","advisories":[],"bugzilla":"1771309","bugzilla_description":"CVE-2019-15133 giflib: divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15133.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2019-13377","severity":"moderate","public_date":"2019-08-03T00:00:00Z","advisories":[],"bugzilla":"1737665","bugzilla_description":"CVE-2019-13377 wpa_supplicant: Timing-based side-channel attack against WPA3's Dragonfly handshake when using Brainpool curves","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13377.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-11555","severity":"moderate","public_date":"2019-04-18T00:00:00Z","advisories":[],"bugzilla":"1703417","bugzilla_description":"CVE-2019-11555 wpa_supplicant: NULL pointer dereference due to improper fragmentation reassembly state validation in EAP-pwd implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11555.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-9494","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699141","bugzilla_description":"CVE-2019-9494 wpa_supplicant: SAE Timing-based and Cache-based side-channel attack against WPA3's Dragonfly handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9494.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9495","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699149","bugzilla_description":"CVE-2019-9495 wpa_supplicant: EAP-pwd cache side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9495.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9496","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699153","bugzilla_description":"CVE-2019-9496 hostapd: SAE confirm missing state validation in hostapd/AP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-642","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9496.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9497","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699164","bugzilla_description":"CVE-2019-9497 wpa_supplicant: EAP-pwd server not checking for reflection attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9497.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-9498","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699168","bugzilla_description":"CVE-2019-9498 wpa_supplicant: EAP-pwd server missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9498.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-9499","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699170","bugzilla_description":"CVE-2019-9499 wpa_supplicant: EAP-pwd peer missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9499.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-14526","severity":"moderate","public_date":"2018-08-08T00:00:00Z","advisories":["RHSA-2018:3107"],"bugzilla":"1614520","bugzilla_description":"CVE-2018-14526 wpa_supplicant: Unauthenticated EAPOL-Key decryption in wpa_supplicant","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["wpa_supplicant-1:2.6-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14526.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2018-11489","severity":"low","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1583399","bugzilla_description":"CVE-2018-11489 giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11490","severity":"low","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1583400","bugzilla_description":"CVE-2018-11490 giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13077","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2911","RHSA-2017:2907"],"bugzilla":"1491692","bugzilla_description":"CVE-2017-13077 wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1","wpa_supplicant-1:0.7.3-9.el6_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13077.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13078","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2911","RHSA-2017:2907"],"bugzilla":"1491693","bugzilla_description":"CVE-2017-13078 wpa_supplicant: Reinstallation of the group key in the 4-way handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1","wpa_supplicant-1:0.7.3-9.el6_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13078.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13079","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1491694","bugzilla_description":"CVE-2017-13079 wpa_supplicant: Reinstallation of the integrity group key in the 4-way handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13079.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13080","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2911","RHSA-2017:2907"],"bugzilla":"1491696","bugzilla_description":"CVE-2017-13080 wpa_supplicant: Reinstallation of the group key in the group key handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1","wpa_supplicant-1:0.7.3-9.el6_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13080.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13081","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1491697","bugzilla_description":"CVE-2017-13081 wpa_supplicant: Reinstallation of the integrity group key in the group key handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13081.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13082","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2907"],"bugzilla":"1491698","bugzilla_description":"CVE-2017-13082 wpa_supplicant: Accepting a retransmitted FT Reassociation Request and reinstalling the pairwise key while processing it","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13082.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13084","severity":"low","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1500301","bugzilla_description":"CVE-2017-13084 wpa_supplicant: reinstallation of the STK key in the PeerKey handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13084.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13086","severity":"low","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2907"],"bugzilla":"1500302","bugzilla_description":"CVE-2017-13086 wpa_supplicant: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13086.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13087","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2911","RHSA-2017:2907"],"bugzilla":"1500303","bugzilla_description":"CVE-2017-13087 wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1","wpa_supplicant-1:0.7.3-9.el6_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13087.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13088","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2907"],"bugzilla":"1500304","bugzilla_description":"CVE-2017-13088 wpa_supplicant: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13088.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2016-4476","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1332422","bugzilla_description":"CVE-2016-4476 wpa_supplicant, hostapd: denial of service via crafted WPA/WPA2 passphrase parameter","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4476.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-4477","severity":"moderate","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1332423","bugzilla_description":"CVE-2016-4477 wpa_supplicant: local configuration update allows privilege escalation","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4477.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-3977","severity":"low","public_date":"2016-04-04T00:00:00Z","advisories":[],"bugzilla":"1325771","bugzilla_description":"CVE-2016-3977 giflib: heap buffer overflow in gif2rgb","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3977.json"},{"CVE":"CVE-2016-3177","severity":"low","public_date":"2016-03-15T00:00:00Z","advisories":[],"bugzilla":"1314438","bugzilla_description":"CVE-2016-3177 giflib: Use-after-free in gifcolor utility","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3177.json"},{"CVE":"CVE-2016-10743","severity":"moderate","public_date":"2016-02-19T00:00:00Z","advisories":[],"bugzilla":"1811037","bugzilla_description":"CVE-2016-10743 hostapd: Not preventig the use of low quality PRNG leads to insufficient entropy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10743.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2015-7555","severity":"moderate","public_date":"2015-12-21T00:00:00Z","advisories":[],"bugzilla":"1290785","bugzilla_description":"CVE-2015-7555 giflib: Heap-based buffer overflow in giffix utility","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7555.json"},{"CVE":"CVE-2015-5310","severity":"low","public_date":"2015-11-10T00:00:00Z","advisories":[],"bugzilla":"1277857","bugzilla_description":"CVE-2015-5310 wpa_supplicant: unauthorized WNM Sleep Mode GTK control","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5310.json"},{"CVE":"CVE-2015-5316","severity":"low","public_date":"2015-11-10T00:00:00Z","advisories":[],"bugzilla":"1277865","bugzilla_description":"CVE-2015-5316 wpa_supplicant: EAP-pwd peer error path failure on unexpected Confirm message","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5316.json"},{"CVE":"CVE-2015-5315","severity":"low","public_date":"2015-11-10T00:00:00Z","advisories":[],"bugzilla":"1278377","bugzilla_description":"CVE-2015-5315 wpa_supplicant: EAP-pwd missing last fragment length validation","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5315.json"},{"CVE":"CVE-2015-8041","severity":"low","public_date":"2015-07-08T00:00:00Z","advisories":[],"bugzilla":"1241905","bugzilla_description":"CVE-2015-8041 hostapd and wpa_supplicant: Incomplete WPS and P2P NFC NDEF record payload length validation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190->(CWE-125|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8041.json"},{"CVE":"CVE-2015-4143","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1219449","bugzilla_description":"CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 wpa_supplicant and hostapd: EAP-pwd missing payload length validation","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4143.json"},{"CVE":"CVE-2015-4144","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1219449","bugzilla_description":"CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 wpa_supplicant and hostapd: EAP-pwd missing payload length validation","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4144.json"},{"CVE":"CVE-2015-4145","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1219449","bugzilla_description":"CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 wpa_supplicant and hostapd: EAP-pwd missing payload length validation","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4145.json"},{"CVE":"CVE-2015-4146","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1219449","bugzilla_description":"CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 wpa_supplicant and hostapd: EAP-pwd missing payload length validation","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4146.json"},{"CVE":"CVE-2015-4141","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1221172","bugzilla_description":"CVE-2015-4141 wpa_supplicant and hostapd: WPS UPnP vulnerability with HTTP chunked transfer encoding","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->(CWE-121|CWE-122)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4141.json"},{"CVE":"CVE-2015-4142","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":["RHSA-2015:1439","RHSA-2015:1090"],"bugzilla":"1221178","bugzilla_description":"CVE-2015-4142 wpa_supplicant and hostapd: integer underflow in AP mode WMM Action frame processing","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["wpa_supplicant-1:0.7.3-6.el6","wpa_supplicant-1:2.0-17.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4142.json"},{"CVE":"CVE-2015-1863","severity":"important","public_date":"2015-04-22T00:00:00Z","advisories":["RHSA-2015:1090"],"bugzilla":"1211191","bugzilla_description":"CVE-2015-1863 wpa_supplicant: P2P SSID processing vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-20->CWE-122","affected_packages":["wpa_supplicant-1:2.0-17.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1863.json"},{"CVE":"CVE-2015-0210","severity":null,"public_date":"2015-01-28T00:00:00Z","advisories":[],"bugzilla":"1178921","bugzilla_description":"CVE-2015-0210 wpa_supplicant: broken certificate subject check","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0210.json"},{"CVE":"CVE-2014-3686","severity":"moderate","public_date":"2014-10-10T00:00:00Z","advisories":["RHSA-2014:1956"],"bugzilla":"1151259","bugzilla_description":"CVE-2014-3686 wpa_supplicant and hostapd: wpa_cli and hostapd_cli remote command execution issue","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":["wpa_supplicant-1:2.0-13.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3686.json"},{"CVE":"CVE-2013-6433","severity":"low","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:0516"],"bugzilla":"1039812","bugzilla_description":"CVE-2013-6433 openstack-quantum/openstack-neutron: rootwrap sudo config allows potential privilege escalation","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["openstack-neutron-0:2013.2.3-7.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6433.json"},{"CVE":"CVE-2014-4615","severity":"important","public_date":"2014-05-20T00:00:00Z","advisories":["RHSA-2014:1050"],"bugzilla":"1112945","bugzilla_description":"CVE-2014-4615 pycadf: token leak to message queue","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":["openstack-ceilometer-0:2013.2.3-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4615.json"},{"CVE":"CVE-2014-0056","severity":"moderate","public_date":"2014-03-28T00:00:00Z","advisories":["RHSA-2014:0516"],"bugzilla":"1063141","bugzilla_description":"CVE-2014-0056 openstack-neutron: insufficient authorization checks when creating ports","cvss_score":4.1,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:N","CWE":"CWE-285","affected_packages":["openstack-neutron-0:2013.2.3-7.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0056.json"},{"CVE":"CVE-2013-4509","severity":"low","public_date":"2013-10-25T00:00:00Z","advisories":[],"bugzilla":"1027028","bugzilla_description":"CVE-2013-4509 ibus: visible password entry flaw","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4509.json"},{"CVE":"CVE-2012-5476","severity":"low","public_date":"2012-11-13T00:00:00Z","advisories":[],"bugzilla":"873524","bugzilla_description":"CVE-2012-5476 OpenStack: Quantum /etc/quantum/quantum.conf secret password and token exposure","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5476.json"},{"CVE":"CVE-2012-4445","severity":"moderate","public_date":"2012-10-08T00:00:00Z","advisories":[],"bugzilla":"859918","bugzilla_description":"CVE-2012-4445 hostapd, wpa_supplicant: DoS (abort) by processing certain fragmented EAP-TLS messages","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4445.json"},{"CVE":"CVE-2012-2098","severity":"low","public_date":"2012-05-23T00:00:00Z","advisories":[],"bugzilla":"810406","bugzilla_description":"CVE-2012-2098 apache-commons-compress: denial of service flaw when compressing certain files","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2098.json"},{"CVE":"CVE-2012-1096","severity":"low","public_date":"2012-02-29T00:00:00Z","advisories":[],"bugzilla":"769807","bugzilla_description":"CVE-2012-1096 NetworkManager, wpa_supplicant: Improper x509v3 certificate and key file paths sanitization","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1096.json"},{"CVE":"CVE-2008-2383","severity":"important","public_date":"2008-12-29T00:00:00Z","advisories":["RHSA-2009:0018","RHSA-2009:0019"],"bugzilla":"478888","bugzilla_description":"CVE-2008-2383 xterm: arbitrary command injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["hanterm-xf-1:2.0.5-5.AS21.2","xterm-0:215-5.el5_2.2","xterm-0:179-11.EL3","xterm-0:192-8.el4_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2383.json"},{"CVE":"CVE-2006-7246","severity":"moderate","public_date":"2006-05-10T00:00:00Z","advisories":[],"bugzilla":"756418","bugzilla_description":"CVE-2006-7246 NetworkManager, wpa_supplicant (WPA-Enterprise): Verify that the certificate is from trusted CA and matches the specified subject","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7246.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/antlr-tool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/antlr-tool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/antlr-tool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-codec_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-codec_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-codec_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-collections_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-collections_security_api_results.json
new file mode 100644
index 0000000..bed35cd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-collections_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-7501","severity":"critical","public_date":"2015-11-06T00:00:00Z","advisories":["RHSA-2016:1773","RHSA-2016:0040","RHSA-2015:2578","RHSA-2015:2534","RHSA-2015:2556","RHSA-2015:2557","RHSA-2015:2579","RHSA-2015:2535","RHSA-2015:2514","RHSA-2015:2536","RHSA-2015:2559","RHSA-2015:2537","RHSA-2015:2538","RHSA-2015:2516","RHSA-2015:2539","RHSA-2015:2517","RHSA-2015:2670","RHSA-2015:2671","RHSA-2020:4274","RHSA-2015:2521","RHSA-2015:2522","RHSA-2015:2500","RHSA-2015:2501","RHSA-2015:2523","RHSA-2015:2502","RHSA-2015:2524","RHSA-2015:2547","RHSA-2015:2548","RHSA-2015:2560","RHSA-2015:2540","RHSA-2015:2541","RHSA-2015:2542","RHSA-2016:0118"],"bugzilla":"1279330","bugzilla_description":"CVE-2015-7501 apache-commons-collections: InvokerTransformer code execution during deserialisation","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502->CWE-284","affected_packages":["jboss-ec2-eap-0:7.5.5-3.Final_redhat_3.ep6.el6","apache-commons-collections-0:3.2.1-22.el7_2","jakarta-commons-collections-0:3.2.1-3.5.el6_7","jenkins-0:1.651.2-1.el6op","rh-maven35-apache-commons-collections4-0:4.0-7.3.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el6","jakarta-commons-collections-0:3.2.1-5.ep5.el4","jakarta-commons-collections-0:3.2.1-5.ep5.el5","jakarta-commons-collections-0:3.2.1-5.ep5.el6","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el7","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el5","jakarta-commons-collections-0:3.2-2jpp.4","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7501.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-daemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-daemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-daemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-dbcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-dbcp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-dbcp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-io_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-io_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-io_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-lang_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-lang_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-lang_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-logging_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-logging_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-logging_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-pool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-pool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apache-commons-pool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/appstream-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/appstream-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/appstream-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-util-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-util-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-util-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-util-openssl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-util-openssl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-util-openssl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-util_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-util_security_api_results.json
new file mode 100644
index 0000000..e17a170
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr-util_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-12618","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":[],"bugzilla":"1506532","bugzilla_description":"CVE-2017-12618 apr-util: Out-of-bounds access in corrupted SDBM database","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12618.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6312","severity":"moderate","public_date":"2016-08-04T00:00:00Z","advisories":[],"bugzilla":"1364122","bugzilla_description":"CVE-2016-6312 apr-util, httpd: Billion laughs attack regression","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6312.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2010-1623","severity":"moderate","public_date":"2010-10-01T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2010:0950","RHSA-2011:0897"],"bugzilla":"640281","bugzilla_description":"CVE-2010-1623 apr-util: high memory consumption in apr_brigade_split_line()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["apr-util-0:1.3.9-3.el6_0.1","httpd22-0:2.2.17-14.ep5.el4","apr-util-0:0.9.4-22.el4_8.3","apr-util-0:1.2.7-11.el5_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1623.json"},{"CVE":"CVE-2009-0023","severity":"moderate","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107","RHSA-2009:1160"],"bugzilla":"503928","bugzilla_description":"CVE-2009-0023 apr-util heap buffer underwrite","cvss_score":4.3,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0023.json"},{"CVE":"CVE-2009-1955","severity":"moderate","public_date":"2009-06-01T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107","RHSA-2009:1160"],"bugzilla":"504555","bugzilla_description":"CVE-2009-1955 apr-util billion laughs attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1955.json"},{"CVE":"CVE-2009-1956","severity":"moderate","public_date":"2009-04-24T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107"],"bugzilla":"504390","bugzilla_description":"CVE-2009-1956 apr-util single NULL byte buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1956.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr_security_api_results.json
new file mode 100644
index 0000000..bd38de6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/apr_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-11100","severity":"critical","public_date":"2020-04-02T13:00:00Z","advisories":["RHSA-2020:1288","RHSA-2020:1287","RHSA-2020:1289","RHSA-2020:1936","RHSA-2020:1290"],"bugzilla":"1819111","bugzilla_description":"CVE-2020-11100 haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-787","affected_packages":["haproxy-0:1.8.23-3.el7","rh-haproxy18-haproxy-0:1.8.17-1.el7.1","haproxy-0:2.0.13-3.el8","haproxy-0:1.8.15-5.el8_0.1","haproxy-0:1.8.15-6.el8_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11100.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-19330","severity":"moderate","public_date":"2019-11-25T00:00:00Z","advisories":["RHSA-2020:1287","RHSA-2020:2265","RHSA-2020:1936","RHSA-2020:1725"],"bugzilla":"1777584","bugzilla_description":"CVE-2019-19330 haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["haproxy-0:1.8.23-3.el7","haproxy-0:1.8.23-3.el8","haproxy-0:2.0.13-3.el8","rh-haproxy18-haproxy-0:1.8.24-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19330.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-18277","severity":"moderate","public_date":"2019-09-13T00:00:00Z","advisories":["RHSA-2020:1287","RHSA-2020:2265","RHSA-2020:1936","RHSA-2020:1725"],"bugzilla":"1759697","bugzilla_description":"CVE-2019-18277 haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["haproxy-0:1.8.23-3.el7","haproxy-0:1.8.23-3.el8","haproxy-0:2.0.13-3.el8","rh-haproxy18-haproxy-0:1.8.24-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18277.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-14241","severity":"important","public_date":"2019-07-22T00:00:00Z","advisories":[],"bugzilla":"1733583","bugzilla_description":"CVE-2019-14241 haproxy: DoS via vectors realted to htx_manage_client_side_cookies in proto_htx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14241.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11323","severity":"moderate","public_date":"2019-04-14T00:00:00Z","advisories":[],"bugzilla":"1709229","bugzilla_description":"CVE-2019-11323 haproxy: weak HMAC keys used to TLS session resumption after reload with rotated keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-20615","severity":"important","public_date":"2019-01-08T00:00:00Z","advisories":["RHSA-2019:0275","RHSA-2019:0547","RHSA-2019:0548","RHBA-2019:0326"],"bugzilla":"1663060","bugzilla_description":"CVE-2018-20615 haproxy: Mishandling of priority flag in short HEADERS frame by HTTP/2 decoder allows for crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["haproxy-0:1.8.17-3.el7","rh-haproxy18-haproxy-0:1.8.4-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20102","severity":"moderate","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2019:0547","RHSA-2019:1436","RHBA-2019:0326"],"bugzilla":"1658874","bugzilla_description":"CVE-2018-20102 haproxy: Out-of-bounds read in dns.c:dns_validate_dns_response() allows for memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["haproxy-0:1.8.17-3.el7","rh-haproxy18-haproxy-0:1.8.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-20103","severity":"important","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2019:1436","RHBA-2019:0326"],"bugzilla":"1658876","bugzilla_description":"CVE-2018-20103 haproxy: Infinite recursion via crafted packet allows stack exhaustion and denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["haproxy-0:1.8.17-3.el7","rh-haproxy18-haproxy-0:1.8.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20103.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14645","severity":"important","public_date":"2018-09-20T12:00:00Z","advisories":["RHSA-2018:2882","RHSA-2018:2709","RHBA-2019:0028"],"bugzilla":"1630048","bugzilla_description":"CVE-2018-14645 haproxy: Out-of-bounds read in HPACK decoder","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-haproxy18-haproxy-0:1.8.4-3.el7","haproxy-0:1.8.14-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-11469","severity":"moderate","public_date":"2018-05-25T00:00:00Z","advisories":["RHSA-2019:1436"],"bugzilla":"1582635","bugzilla_description":"CVE-2018-11469 haproxy: Information disclosure in check_request_for_cacheability function in proto_http.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-haproxy18-haproxy-0:1.8.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11469.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-10184","severity":"important","public_date":"2018-04-19T00:00:00Z","advisories":["RHSA-2018:1372"],"bugzilla":"1569297","bugzilla_description":"CVE-2018-10184 haproxy: Heap buffer overflow in mux_h2.c:h2_process_demux() can allow attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-haproxy18-haproxy-0:1.8.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10184.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2017-12613","severity":"important","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2018:0316","RHSA-2017:3270","RHSA-2018:0465","RHSA-2017:3475","RHSA-2018:0466","RHSA-2018:1253","RHSA-2017:3476","RHSA-2017:3477"],"bugzilla":"1506523","bugzilla_description":"CVE-2017-12613 apr: Out-of-bounds array deref in apr_time_exp*() functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["apr-0:1.4.8-3.el7_3.1","apr-0:1.4.8-3.el7_2.1","apr-0:1.3.9-5.el6_6.1","apr-0:1.4.8-3.el7_4.1","apr-0:1.3.9-5.el6_7.1","apr-0:1.3.9-5.el6_5.1","httpd24-apr-0:1.5.1-1.el6.1","apr-0:1.3.9-5.el6_9.1","apr-0:1.3.9-5.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12613.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2017-12618","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":[],"bugzilla":"1506532","bugzilla_description":"CVE-2017-12618 apr-util: Out-of-bounds access in corrupted SDBM database","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12618.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6312","severity":"moderate","public_date":"2016-08-04T00:00:00Z","advisories":[],"bugzilla":"1364122","bugzilla_description":"CVE-2016-6312 apr-util, httpd: Billion laughs attack regression","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6312.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5360","severity":"moderate","public_date":"2016-06-09T00:00:00Z","advisories":[],"bugzilla":"1346181","bugzilla_description":"CVE-2016-5360 haproxy: denial of service via reqdeny","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5360.json"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2016-3711","severity":"low","public_date":"2016-03-17T00:00:00Z","advisories":["RHSA-2016:1064"],"bugzilla":"1322718","bugzilla_description":"CVE-2016-3711 haproxy: Setting cookie containing internal IP address of a pod","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3711.json"},{"CVE":"CVE-2015-3281","severity":"important","public_date":"2015-07-07T00:00:00Z","advisories":["RHSA-2015:1741","RHSA-2015:2666"],"bugzilla":"1239072","bugzilla_description":"CVE-2015-3281 haproxy: information leak in buffer_slow_realign()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-119","affected_packages":["haproxy-0:1.5.4-4.el7_1.1","haproxy-0:1.5.4-2.el6_7.1","haproxy15side-0:1.5.4-2.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3281.json"},{"CVE":"CVE-2013-0163","severity":"low","public_date":"2014-09-05T00:00:00Z","advisories":[],"bugzilla":"892909","bugzilla_description":"CVE-2013-0163 OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0163.json"},{"CVE":"CVE-2014-6269","severity":"moderate","public_date":"2014-08-05T00:00:00Z","advisories":["RHSA-2014:1292"],"bugzilla":"1136552","bugzilla_description":"CVE-2014-6269 haproxy: remote client denial of service vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["haproxy-0:1.5.2-3.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6269.json"},{"CVE":"CVE-2013-2175","severity":"moderate","public_date":"2013-06-17T00:00:00Z","advisories":["RHSA-2013:1120","RHSA-2013:1204"],"bugzilla":"974259","bugzilla_description":"CVE-2013-2175 haproxy: http_get_hdr()/get_ip_from_hdr2() MAX_HDR_HISTORY handling denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["haproxy-0:1.4.22-5.el6_4","haproxy-0:1.4.22-6.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2175.json"},{"CVE":"CVE-2013-1912","severity":"moderate","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0729","RHSA-2013:0868"],"bugzilla":"947581","bugzilla_description":"CVE-2013-1912 haproxy: rewrite rules flaw can lead to arbitrary code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["haproxy-0:1.4.22-5.el6op","haproxy-0:1.4.22-4.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1912.json"},{"CVE":"CVE-2013-0169","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0636","RHSA-2013:0823","RHSA-2013:0833","RHSA-2013:0855","RHSA-2013:0822","RHSA-2013:0587","RHSA-2013:0532","RHSA-2013:1456","RHSA-2014:0416","RHSA-2013:0782","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"907589","bugzilla_description":"CVE-2013-0169 SSL/TLS: CBC padding timing attack (lucky-13)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3","spice-client-msi-0:3.3-12","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el5_9","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0169.json"},{"CVE":"CVE-2012-0840","severity":"moderate","public_date":"2012-01-05T00:00:00Z","advisories":[],"bugzilla":"781606","bugzilla_description":"CVE-2012-0840 apr: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0840.json"},{"CVE":"CVE-2011-1928","severity":"low","public_date":"2011-05-19T00:00:00Z","advisories":["RHSA-2011:0844"],"bugzilla":"706203","bugzilla_description":"CVE-2011-1928 apr: DoS flaw in apr_fnmatch() due to fix for CVE-2011-0419","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["apr-0:1.3.9-3.el6_1.2","apr-0:0.9.4-26.el4","apr-0:1.2.7-11.el5_6.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1928.json"},{"CVE":"CVE-2011-0419","severity":"moderate","public_date":"2011-05-10T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2011:0507","RHSA-2011:0897"],"bugzilla":"703390","bugzilla_description":"CVE-2011-0419 apr: unconstrained recursion in apr_fnmatch","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["apr-0:1.2.7-11.el5_6.4","apr-0:0.9.4-25.el4","apr-0:1.3.9-3.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0419.json"},{"CVE":"CVE-2010-1623","severity":"moderate","public_date":"2010-10-01T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2010:0950","RHSA-2011:0897"],"bugzilla":"640281","bugzilla_description":"CVE-2010-1623 apr-util: high memory consumption in apr_brigade_split_line()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["apr-util-0:1.3.9-3.el6_0.1","httpd22-0:2.2.17-14.ep5.el4","apr-util-0:0.9.4-22.el4_8.3","apr-util-0:1.2.7-11.el5_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1623.json"},{"CVE":"CVE-2009-0023","severity":"moderate","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107","RHSA-2009:1160"],"bugzilla":"503928","bugzilla_description":"CVE-2009-0023 apr-util heap buffer underwrite","cvss_score":4.3,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0023.json"},{"CVE":"CVE-2009-1955","severity":"moderate","public_date":"2009-06-01T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107","RHSA-2009:1160"],"bugzilla":"504555","bugzilla_description":"CVE-2009-1955 apr-util billion laughs attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1955.json"},{"CVE":"CVE-2009-1956","severity":"moderate","public_date":"2009-04-24T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107"],"bugzilla":"504390","bugzilla_description":"CVE-2009-1956 apr-util single NULL byte buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1956.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/args4j_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/args4j_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/args4j_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ark-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ark-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ark-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ark_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ark_security_api_results.json
new file mode 100644
index 0000000..f5bd8f0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ark_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-26575","severity":"moderate","public_date":"2020-10-06T00:00:00Z","advisories":[],"bugzilla":"1886047","bugzilla_description":"CVE-2020-26575 wireshark: FBZERO dissector could enter an infinite loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26575.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-25862","severity":"moderate","public_date":"2020-09-23T00:00:00Z","advisories":[],"bugzilla":"1886041","bugzilla_description":"CVE-2020-25862 wireshark: TCP dissector crash (wnpa-sec-2020-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25862.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-25863","severity":"moderate","public_date":"2020-09-23T00:00:00Z","advisories":[],"bugzilla":"1886044","bugzilla_description":"CVE-2020-25863 wireshark: MIME multipart dissector crash (wnpa-sec-2020-11)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25863.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-25866","severity":"moderate","public_date":"2020-09-23T00:00:00Z","advisories":[],"bugzilla":"1886051","bugzilla_description":"CVE-2020-25866 wireshark: BLIP dissector crash (wnpa-sec-2020-13)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25866.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-26160","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1883371","bugzilla_description":"CVE-2020-26160 jwt-go: access restriction bypass vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26160.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-24654","severity":"low","public_date":"2020-08-27T00:00:00Z","advisories":[],"bugzilla":"1880358","bugzilla_description":"CVE-2020-24654 ark: crafted TAR archive with symlinks can install files outside the extraction directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24654.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2020-17498","severity":"moderate","public_date":"2020-08-12T00:00:00Z","advisories":[],"bugzilla":"1868885","bugzilla_description":"CVE-2020-17498 wireshark: Kafka protocol dissector could crash (wnpa-sec-2020-10)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17498.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-16116","severity":"low","public_date":"2020-07-30T00:00:00Z","advisories":[],"bugzilla":"1862464","bugzilla_description":"CVE-2020-16116 ark: maliciously crafted archive can install files anywhere in the user's home directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16116.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-15466","severity":"moderate","public_date":"2020-07-05T00:00:00Z","advisories":[],"bugzilla":"1854882","bugzilla_description":"CVE-2020-15466 wireshark: GVCP dissector infinite loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15466.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-5238","severity":"moderate","public_date":"2020-07-01T00:00:00Z","advisories":[],"bugzilla":"1854328","bugzilla_description":"CVE-2020-5238 cmark: Exponential time to parse certain inputs could lead to DoS.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5238.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-9480","severity":"important","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1887887","bugzilla_description":"CVE-2020-9480 apache-spark: RCE vulnerability in auth-enabled standalone master","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9480.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-13692","severity":"important","public_date":"2020-06-04T00:00:00Z","advisories":["RHSA-2020:3005","RHSA-2020:3248","RHSA-2020:3675","RHSA-2020:3285","RHSA-2020:3176","RHSA-2020:3286","RHSA-2020:3283","RHSA-2020:3284","RHSA-2020:3209","RHSA-2020:3678"],"bugzilla":"1852985","bugzilla_description":"CVE-2020-13692 postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["postgresql-jdbc-0:9.2.1002-8.el7_8","postgresql-jdbc-0:8.4.704-4.el6_10","postgresql-jdbc-0:42.2.3-3.el8_0","postgresql-jdbc-0:42.2.3-3.el8_1","postgresql-jdbc-0:42.2.3-3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13692.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2020-13164","severity":"moderate","public_date":"2020-04-02T00:00:00Z","advisories":[],"bugzilla":"1839874","bugzilla_description":"CVE-2020-13164 wireshark: NFS dissector crash (wnpa-sec-2020-08)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13164.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-11647","severity":"moderate","public_date":"2020-04-01T00:00:00Z","advisories":[],"bugzilla":"1824157","bugzilla_description":"CVE-2020-11647 wireshark: BACapp dissector crash (wnpa-sec-2020-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-121|CWE-674)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11647.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9429","severity":"moderate","public_date":"2020-02-28T00:00:00Z","advisories":[],"bugzilla":"1828780","bugzilla_description":"CVE-2020-9429 wireshark: WireGuard dissector could crash due to NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9429.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9431","severity":"low","public_date":"2020-02-26T00:00:00Z","advisories":[],"bugzilla":"1814586","bugzilla_description":"CVE-2020-9431 wireshark: LTE RRC dissector memory leak could result in excessive memory resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9431.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9430","severity":"moderate","public_date":"2020-02-26T00:00:00Z","advisories":[],"bugzilla":"1814615","bugzilla_description":"CVE-2020-9430 wireshark: injecting a malformed packet may cause WiMax DLMAP dissector to crash due to out-of-bound read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9430.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9428","severity":"moderate","public_date":"2020-02-26T00:00:00Z","advisories":[],"bugzilla":"1814622","bugzilla_description":"CVE-2020-9428 wireshark: injecting a malformed packet may cause the EAP dissector to crash due to out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9428.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7044","severity":"moderate","public_date":"2020-01-15T00:00:00Z","advisories":[],"bugzilla":"1796459","bugzilla_description":"CVE-2020-7044 wireshark: WASSP dissector crash (wnpa-sec-2020-01)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7044.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7045","severity":"moderate","public_date":"2020-01-15T00:00:00Z","advisories":[],"bugzilla":"1798671","bugzilla_description":"CVE-2020-7045 wireshark: invalid memory access in BT ATT dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7045.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-16319","severity":"moderate","public_date":"2019-08-25T00:00:00Z","advisories":[],"bugzilla":"1775149","bugzilla_description":"CVE-2019-16319 wireshark: gryphon dissector infinite loop (wnpa-sec-2019-21)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16319.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-19553","severity":"moderate","public_date":"2019-08-02T00:00:00Z","advisories":[],"bugzilla":"1782988","bugzilla_description":"CVE-2019-19553 wireshark: CMS dissector crash (wnpa-sec-2019-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13619","severity":"moderate","public_date":"2019-07-17T00:00:00Z","advisories":[],"bugzilla":"1731022","bugzilla_description":"CVE-2019-13619 wireshark: ASN.1 BER dissector crash (wnpa-sec-2019-20)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13619.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-12295","severity":"moderate","public_date":"2019-05-21T00:00:00Z","advisories":[],"bugzilla":"1831675","bugzilla_description":"CVE-2019-12295 wireshark: missing dissection recursion checks leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12295.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10901","severity":"moderate","public_date":"2019-03-19T00:00:00Z","advisories":[],"bugzilla":"1697938","bugzilla_description":"CVE-2019-10901 wireshark: LDSS dissector crash (wnpa-sec-2019-17)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10901.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10902","severity":"moderate","public_date":"2019-03-19T00:00:00Z","advisories":[],"bugzilla":"1697942","bugzilla_description":"CVE-2019-10902 wireshark: TSDNS dissector crash (wnpa-sec-2019-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10902.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10896","severity":"moderate","public_date":"2019-03-18T00:00:00Z","advisories":[],"bugzilla":"1697944","bugzilla_description":"CVE-2019-10896 wireshark: DOF dissector crash (wnpa-sec-2019-15)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10896.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10894","severity":"moderate","public_date":"2019-03-18T00:00:00Z","advisories":[],"bugzilla":"1697947","bugzilla_description":"CVE-2019-10894 wireshark: GSS-API dissector crash (wnpa-sec-2019-14)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10894.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10900","severity":"moderate","public_date":"2019-03-18T00:00:00Z","advisories":[],"bugzilla":"1697952","bugzilla_description":"CVE-2019-10900 wireshark: Rbm dissector infinite loop (wnpa-sec-2019-13)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10900.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10898","severity":"moderate","public_date":"2019-03-10T00:00:00Z","advisories":[],"bugzilla":"1697955","bugzilla_description":"CVE-2019-10898 wireshark: GSUP dissector infinite loop (wnpa-sec-2019-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10898.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10903","severity":"moderate","public_date":"2019-03-05T00:00:00Z","advisories":[],"bugzilla":"1697898","bugzilla_description":"CVE-2019-10903 wireshark: DCERPC SPOOLSS dissector crash (wnpa-sec-2019-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10903.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10897","severity":"moderate","public_date":"2019-03-04T00:00:00Z","advisories":[],"bugzilla":"1697961","bugzilla_description":"CVE-2019-10897 wireshark: IEEE 802.11 dissector infinite loop (wnpa-sec-2019-11 )","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10897.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.5"},{"CVE":"CVE-2019-10899","severity":"moderate","public_date":"2019-03-01T00:00:00Z","advisories":[],"bugzilla":"1697979","bugzilla_description":"CVE-2019-10899 wireshark: SRVLOC dissector crash (wnpa-sec-2019-10)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10899.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9214","severity":"moderate","public_date":"2019-02-27T00:00:00Z","advisories":[],"bugzilla":"1684115","bugzilla_description":"CVE-2019-9214 wireshark: null-deference read in RPCAP dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10895","severity":"moderate","public_date":"2019-02-13T00:00:00Z","advisories":[],"bugzilla":"1697982","bugzilla_description":"CVE-2019-10895 wireshark: NetScaler file parser crash (wnpa-sec-2019-09)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10895.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9208","severity":"moderate","public_date":"2019-01-29T00:00:00Z","advisories":[],"bugzilla":"1685001","bugzilla_description":"CVE-2019-9208 wireshark: null-pointer dereference in TCAP dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9208.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9209","severity":"low","public_date":"2019-01-25T00:00:00Z","advisories":[],"bugzilla":"1685009","bugzilla_description":"CVE-2019-9209 wireshark: Stack-based off-by-one buffer overflow in dissect_ber_GeneralizedTime","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9209.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-5721","severity":"moderate","public_date":"2019-01-08T00:00:00Z","advisories":[],"bugzilla":"1666277","bugzilla_description":"CVE-2019-5721 wireshark: use-after-free in ENIP dissector results in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5721.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-5716","severity":"low","public_date":"2019-01-08T00:00:00Z","advisories":[],"bugzilla":"1667579","bugzilla_description":"CVE-2019-5716 wireshark: reachable assertion in fast_ensure_contiguous() from 6LoWPAN dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5716.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-5717","severity":"low","public_date":"2019-01-08T00:00:00Z","advisories":[],"bugzilla":"1667581","bugzilla_description":"CVE-2019-5717 wireshark: P_MUL dissector crash in epan/dissectors/packet-p_mul.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5717.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-5718","severity":"low","public_date":"2019-01-08T00:00:00Z","advisories":[],"bugzilla":"1667586","bugzilla_description":"CVE-2019-5718 wireshark: out-of-bounds read in get_t61_string() in epan/charsets.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5718.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2019-5719","severity":"low","public_date":"2019-01-08T00:00:00Z","advisories":[],"bugzilla":"1667592","bugzilla_description":"CVE-2019-5719 wireshark: ISAKMP dissector crash in epan/dissectors/packet-isakmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5719.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19622","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2020:1047"],"bugzilla":"1655932","bugzilla_description":"CVE-2018-19622 wireshark: Infinite loop in the MMSE dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["wireshark-0:1.10.14-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-19623","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1655933","bugzilla_description":"CVE-2018-19623 wireshark: Heap buffer overflow in packet-lbmpdm.c:dissect_segment_ofstable() allows denial of service or possibly arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-19624","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1655934","bugzilla_description":"CVE-2018-19624 wireshark: NULL pointer dereference resulting in a PVFS dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-19625","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1655935","bugzilla_description":"CVE-2018-19625 wireshark: Heap-based buffer over-read in the dissection engine","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19625.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-19626","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1655936","bugzilla_description":"CVE-2018-19626 wireshark: DCOM dissector crash resulting in information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19626.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-19627","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1655940","bugzilla_description":"CVE-2018-19627 wireshark: IxVeriWave parser crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2018-19628","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1655941","bugzilla_description":"CVE-2018-19628 wireshark: ZigBee ZCL dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19628.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-18227","severity":"moderate","public_date":"2018-10-10T00:00:00Z","advisories":[],"bugzilla":"1642909","bugzilla_description":"CVE-2018-18227 wireshark: MS-WSP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18227.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-18226","severity":"moderate","public_date":"2018-10-10T00:00:00Z","advisories":[],"bugzilla":"1642910","bugzilla_description":"CVE-2018-18226 wireshark: Steam IHS Discovery dissector memory leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18226.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-18225","severity":"moderate","public_date":"2018-10-10T00:00:00Z","advisories":[],"bugzilla":"1642913","bugzilla_description":"CVE-2018-18225 wireshark: CoAP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-12086","severity":"moderate","public_date":"2018-10-10T00:00:00Z","advisories":[],"bugzilla":"1642915","bugzilla_description":"CVE-2018-12086 wireshark: OpcUa dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16058","severity":"moderate","public_date":"2018-08-29T00:00:00Z","advisories":[],"bugzilla":"1625921","bugzilla_description":"CVE-2018-16058 wireshark: Bluetooth AVDTP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16058.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-16056","severity":"moderate","public_date":"2018-08-29T00:00:00Z","advisories":[],"bugzilla":"1625922","bugzilla_description":"CVE-2018-16056 wireshark: Bluetooth Attribute Protocol dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-16057","severity":"low","public_date":"2018-08-29T00:00:00Z","advisories":["RHSA-2020:1047"],"bugzilla":"1625925","bugzilla_description":"CVE-2018-16057 wireshark: Radiotap dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["wireshark-0:1.10.14-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16057.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-11770","severity":"moderate","public_date":"2018-08-14T00:00:00Z","advisories":[],"bugzilla":"1615652","bugzilla_description":"CVE-2018-11770 spark: Missing authentication allows users to run driver programs via the REST API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11770.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-14342","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1607321","bugzilla_description":"CVE-2018-14342 wireshark: BGP dissector large loop (wnpa-sec-2018-34)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14342.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14344","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1607322","bugzilla_description":"CVE-2018-14344 wireshark: ISMP dissector crash (wnpa-sec-2018-35)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14344.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14340","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2020:1047"],"bugzilla":"1607323","bugzilla_description":"CVE-2018-14340 wireshark: Multiple dissectors could crash (wnpa-sec-2018-36)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["wireshark-0:1.10.14-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14340.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14343","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1607324","bugzilla_description":"CVE-2018-14343 wireshark: ASN.1 BER and related dissectors crash (wnpa-sec-2018-37)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14343.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14339","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1607325","bugzilla_description":"CVE-2018-14339 wireshark: MMSE dissector infinite loop (wnpa-sec-2018-38)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14339.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14341","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2020:1047"],"bugzilla":"1607326","bugzilla_description":"CVE-2018-14341 wireshark: DICOM dissector infinite loop (wnpa-sec-2018-39)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["wireshark-0:1.10.14-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14341.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14368","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2020:1047"],"bugzilla":"1607327","bugzilla_description":"CVE-2018-14368 wireshark: Bazaar dissector infinite loop (wnpa-sec-2018-40)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["wireshark-0:1.10.14-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14368.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14369","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1607328","bugzilla_description":"CVE-2018-14369 wireshark: HTTP2 dissector infinite loop (wnpa-sec-2018-41)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14369.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14367","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1607329","bugzilla_description":"CVE-2018-14367 wireshark: CoAP dissector infinite loop (wnpa-sec-2018-42)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14370","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1607331","bugzilla_description":"CVE-2018-14370 wireshark: IEEE dissector infinite loop (wnpa-sec-2018-43)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14370.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14438","severity":"moderate","public_date":"2018-06-28T00:00:00Z","advisories":[],"bugzilla":"1609948","bugzilla_description":"CVE-2018-14438 wireshark: Improper Access Control in create_app_running_mutex function in wsutil/file_util.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14438.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-11359","severity":"moderate","public_date":"2018-05-18T00:00:00Z","advisories":[],"bugzilla":"1581778","bugzilla_description":"CVE-2018-11359 wireshark: Out-of-bounds Read in proto.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11359.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-11358","severity":"moderate","public_date":"2018-05-13T00:00:00Z","advisories":[],"bugzilla":"1581773","bugzilla_description":"CVE-2018-11358 wireshark: Use after free in packet-q931.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-11355","severity":"moderate","public_date":"2018-05-12T00:00:00Z","advisories":[],"bugzilla":"1581758","bugzilla_description":"CVE-2018-11355 wireshark: Heap-based Buffer Overflow in packet-rtcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11355.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-11356","severity":"moderate","public_date":"2018-05-12T00:00:00Z","advisories":[],"bugzilla":"1581768","bugzilla_description":"CVE-2018-11356 wireshark: DNS dissector crash  in packet-dns.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11356.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-11357","severity":"moderate","public_date":"2018-05-12T00:00:00Z","advisories":[],"bugzilla":"1581771","bugzilla_description":"CVE-2018-11357 wireshark: Uncontrolled Resource Consumption in epan/tvbuff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11357.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-11360","severity":"moderate","public_date":"2018-05-12T00:00:00Z","advisories":[],"bugzilla":"1581781","bugzilla_description":"CVE-2018-11360 wireshark: Heap-based Buffer Overflow in packet-gsm_a_dtap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11360.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-11361","severity":"moderate","public_date":"2018-05-12T00:00:00Z","advisories":[],"bugzilla":"1581782","bugzilla_description":"CVE-2018-11361 wireshark: Heap-based Buffer Overflow in dot11decrypt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11361.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-11354","severity":"moderate","public_date":"2018-05-02T00:00:00Z","advisories":[],"bugzilla":"1581752","bugzilla_description":"CVE-2018-11354 wireshark: Out-of-bounds Read in packet-ieee1905.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11354.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-11362","severity":"moderate","public_date":"2018-04-24T00:00:00Z","advisories":["RHSA-2020:1047"],"bugzilla":"1581787","bugzilla_description":"CVE-2018-11362 wireshark: Out-of-bounds read in packet-ldss.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["wireshark-0:1.10.14-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-9263","severity":"low","public_date":"2018-03-28T00:00:00Z","advisories":[],"bugzilla":"1565749","bugzilla_description":"CVE-2018-9263 wireshark: Kerberos dissector crash in epan/dissectors/packet-kerberos.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9263.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9257","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":[],"bugzilla":"1565683","bugzilla_description":"CVE-2018-9257 wireshark: infinite loop in the CQL dissector in epan/dissectors/packet-cql.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-9159","severity":"moderate","public_date":"2018-03-06T00:00:00Z","advisories":["RHSA-2018:2020","RHSA-2018:2405"],"bugzilla":"1563732","bugzilla_description":"CVE-2018-9159 spark: Absolute and relative pathnames allow for unintended static file disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-9264","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565751","bugzilla_description":"CVE-2018-9264 wireshark: memory leak in ui/failure_message.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9264.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9265","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565785","bugzilla_description":"CVE-2018-9265 wireshark: memory leak in epan/dissectors/packet-tn3270.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9265.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9266","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565789","bugzilla_description":"CVE-2018-9266 wireshark: memory leak in epan/dissectors/packet-isup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9266.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9267","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565798","bugzilla_description":"CVE-2018-9267 wireshark: memory leak in epan/dissectors/packet-lapd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9267.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9268","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565812","bugzilla_description":"CVE-2018-9268 wireshark: memory leak in epan/dissectors/packet-smb2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9268.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9269","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565813","bugzilla_description":"CVE-2018-9269 wireshark: memory leak in epan/dissectors/packet-giop.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9269.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9270","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565817","bugzilla_description":"CVE-2018-9270 wireshark: memory leak in epan/oids.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9270.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9271","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565823","bugzilla_description":"CVE-2018-9271 wireshark: memory leak in epan/dissectors/packet-multipart.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9271.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9272","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565825","bugzilla_description":"CVE-2018-9272 wireshark: memory leak in epan/dissectors/packet-h223.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9273","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565832","bugzilla_description":"CVE-2018-9273 wireshark: memory leak in epan/dissectors/packet-pcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9273.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9274","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565833","bugzilla_description":"CVE-2018-9274 wireshark: memory leak in ui/failure_message.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9256","severity":"low","public_date":"2018-03-02T00:00:00Z","advisories":[],"bugzilla":"1565674","bugzilla_description":"CVE-2018-9256 wireshark: stack overflow via crafted LWAPP Layer 3 Packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9256.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9258","severity":"low","public_date":"2018-03-02T00:00:00Z","advisories":[],"bugzilla":"1565710","bugzilla_description":"CVE-2018-9258 wireshark: TCP dissector could crash in epan/dissectors/packet-tcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9258.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9260","severity":"low","public_date":"2018-03-02T00:00:00Z","advisories":[],"bugzilla":"1565731","bugzilla_description":"CVE-2018-9260 wireshark: IEEE 802.15.4 dissector crash  in epan/dissectors/packet-ieee802154.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9260.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9261","severity":"low","public_date":"2018-03-02T00:00:00Z","advisories":[],"bugzilla":"1565742","bugzilla_description":"CVE-2018-9261 wireshark: NBAP dissector crash in epan/dissectors/packet-nbap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9262","severity":"low","public_date":"2018-03-02T00:00:00Z","advisories":[],"bugzilla":"1565743","bugzilla_description":"CVE-2018-9262 wireshark: VLAN dissector crash in epan/dissectors/packet-vlan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9262.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-7337","severity":"low","public_date":"2018-02-19T00:00:00Z","advisories":[],"bugzilla":"1549265","bugzilla_description":"CVE-2018-7337 wireshark: DOCSIS dissector crash in packet-docsis.c by injecting a malformed packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7337.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7335","severity":"low","public_date":"2018-02-18T00:00:00Z","advisories":[],"bugzilla":"1549244","bugzilla_description":"CVE-2018-7335 wireshark: IEEE 802.11 dissector crash in airpdcap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7335.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7419","severity":"low","public_date":"2018-02-18T00:00:00Z","advisories":[],"bugzilla":"1549308","bugzilla_description":"CVE-2018-7419 wireshark: NBAP dissector crash in nbap.cnf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7419.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7417","severity":"low","public_date":"2018-02-11T00:00:00Z","advisories":[],"bugzilla":"1549301","bugzilla_description":"CVE-2018-7417 wireshark: IPMI dissector crash in packet-ipmi-picmg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-170","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7417.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7418","severity":"low","public_date":"2018-02-11T00:00:00Z","advisories":["RHSA-2020:1047"],"bugzilla":"1549305","bugzilla_description":"CVE-2018-7418 wireshark: SIGCOMP dissector crash in packet-sigcomp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["wireshark-0:1.10.14-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7418.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7420","severity":"low","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1549284","bugzilla_description":"CVE-2018-7420 wireshark: Pcapng file parser crash in pcapng.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7420.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7320","severity":"low","public_date":"2018-02-06T00:00:00Z","advisories":[],"bugzilla":"1549277","bugzilla_description":"CVE-2018-7320 wireshark: Heap-based Buffer Overflow in SIGCOMP dissector crash in packet-sigcomp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7320.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6836","severity":"low","public_date":"2018-02-05T00:00:00Z","advisories":[],"bugzilla":"1543582","bugzilla_description":"CVE-2018-6836 wireshark: free operation on an uninitialized memory address in wiretap/netmon.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6836.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7336","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":[],"bugzilla":"1549270","bugzilla_description":"CVE-2018-7336 wireshark: FCP dissector crash in packet-fcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7336.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7334","severity":"low","public_date":"2018-01-13T00:00:00Z","advisories":[],"bugzilla":"1549255","bugzilla_description":"CVE-2018-7334 wireshark: out of bounds access in UMTS MAC dissector in packet-umts_mac.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7334.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5334","severity":"moderate","public_date":"2018-01-11T00:00:00Z","advisories":[],"bugzilla":"1534361","bugzilla_description":"CVE-2018-5334 wireshark: IxVeriWave file parser crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5334.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-5335","severity":"moderate","public_date":"2018-01-11T00:00:00Z","advisories":[],"bugzilla":"1534364","bugzilla_description":"CVE-2018-5335 wireshark: WCP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5335.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-5336","severity":"moderate","public_date":"2018-01-11T00:00:00Z","advisories":[],"bugzilla":"1534374","bugzilla_description":"CVE-2018-5336 wireshark: Missing recursion limit in epan/tvbparse.c can cause multiple dissectors to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5336.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-17997","severity":"moderate","public_date":"2017-12-29T00:00:00Z","advisories":[],"bugzilla":"1530893","bugzilla_description":"CVE-2017-17997 wireshark: Misuse of NULL pointer in MRDISC dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17997.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-17935","severity":"low","public_date":"2017-12-27T00:00:00Z","advisories":[],"bugzilla":"1529592","bugzilla_description":"CVE-2017-17935 Wireshark: denial of service in the File_read_line function in epan/wslua/wslua_file.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17935.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-17084","severity":"moderate","public_date":"2017-11-30T00:00:00Z","advisories":[],"bugzilla":"1524471","bugzilla_description":"CVE-2017-17084 wireshark: IWARP_MPA dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17084.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-17083","severity":"moderate","public_date":"2017-11-30T00:00:00Z","advisories":[],"bugzilla":"1524474","bugzilla_description":"CVE-2017-17083 wireshark: NetBIOS dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17083.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-17085","severity":"moderate","public_date":"2017-11-30T00:00:00Z","advisories":[],"bugzilla":"1524475","bugzilla_description":"CVE-2017-17085 wireshark: CIP Safety dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17085.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15189","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1500762","bugzilla_description":"CVE-2017-15189 wireshark: DOCSIS infinite loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15189.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15190","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1500763","bugzilla_description":"CVE-2017-15190 wireshark: RTSP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15190.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15191","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1500765","bugzilla_description":"CVE-2017-15191 wireshark: DMP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15191.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15192","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1500767","bugzilla_description":"CVE-2017-15192 wireshark: BT ATT dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15192.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15193","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1500768","bugzilla_description":"CVE-2017-15193 wireshark: MBIM dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-13767","severity":"moderate","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1486628","bugzilla_description":"CVE-2017-13767 wireshark: MSDP dissector infinite loop (wnpa-sec-2017-38)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13767.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-13766","severity":"moderate","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1486629","bugzilla_description":"CVE-2017-13766 wireshark: Profinet I/O buffer overrun (wnpa-sec-2017-39)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-13764","severity":"moderate","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1486630","bugzilla_description":"CVE-2017-13764 wireshark: Modbus dissector crash (wnpa-sec-2017-40)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13764.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-13765","severity":"moderate","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1486631","bugzilla_description":"CVE-2017-13765 wireshark: IrCOMM dissector buffer overrun (wnpa-sec-2017-41)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13765.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-11408","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":[],"bugzilla":"1472766","bugzilla_description":"CVE-2017-11408 wireshark: AMQP dissector crash (wnpa-sec-2017-34)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11408.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-11407","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":[],"bugzilla":"1472767","bugzilla_description":"CVE-2017-11407 wireshark: MQ dissector crash (wnpa-sec-2017-35)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11407.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-11406","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":[],"bugzilla":"1472768","bugzilla_description":"CVE-2017-11406 wireshark: DOCSIS infinite loop (wnpa-sec-2017-36)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11406.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-11409","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":[],"bugzilla":"1472769","bugzilla_description":"CVE-2017-11409 wireshark: GPRS LLC dissector large loop. (wnpa-sec-2017-37)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11409.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9766","severity":"low","public_date":"2017-06-19T00:00:00Z","advisories":[],"bugzilla":"1464051","bugzilla_description":"CVE-2017-9766 wireshark: PROFINET IO data with a high recursion depth can cause stack exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9766.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9617","severity":"low","public_date":"2017-06-13T00:00:00Z","advisories":[],"bugzilla":"1464050","bugzilla_description":"CVE-2017-9617 wireshark: Deeply nested DAAP data may cause stack exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9616","severity":"low","public_date":"2017-06-08T00:00:00Z","advisories":[],"bugzilla":"1464048","bugzilla_description":"CVE-2017-9616 wireshark: Overly deep mp4 chunks may cause stack exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9259","severity":"low","public_date":"2017-06-08T00:00:00Z","advisories":[],"bugzilla":"1565721","bugzilla_description":"CVE-2018-9259 wirehsark: MP4 dissector crash in epan/dissectors/file-mp4.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9259.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-9352","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458136","bugzilla_description":"CVE-2017-9352 wireshark: Bazaar dissector infinite loop (wnpa-sec-2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9352.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9348","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458137","bugzilla_description":"CVE-2017-9348 wireshark: DOF dissector read overflow (wnpa-sec-2017-23)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9351","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458138","bugzilla_description":"CVE-2017-9351 wireshark: DHCP dissector read overflow (wnpa-sec-2017-24)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9351.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9346","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458139","bugzilla_description":"CVE-2017-9346 wireshark: SoulSeek dissector infinite loop (wnpa-sec-2017-25)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9345","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458140","bugzilla_description":"CVE-2017-9345 wireshark: DNS dissector infinite loop (wnpa-sec-2017-26)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9349","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458141","bugzilla_description":"CVE-2017-9349 wireshark: DICOM dissector infinite loop (wnpa-sec-2017-27)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9349.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-11411","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458142","bugzilla_description":"CVE-2017-9350 CVE-2017-11411 wireshark: openSAFETY dissector memory exhaustion (wnpa-sec-2017-28)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11411.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9350","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458142","bugzilla_description":"CVE-2017-9350 CVE-2017-11411 wireshark: openSAFETY dissector memory exhaustion (wnpa-sec-2017-28)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9350.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9344","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458143","bugzilla_description":"CVE-2017-9344 wireshark: BT L2CAP dissector divide by zero (wnpa-sec-2017-29)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9344.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9343","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458144","bugzilla_description":"CVE-2017-9343 wireshark: MSNIP dissector crash (wnpa-sec-2017-30)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9343.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9347","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458145","bugzilla_description":"CVE-2017-9347 wireshark: ROS dissector crash (wnpa-sec-2017-31)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9354","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458147","bugzilla_description":"CVE-2017-9354 wireshark: RGMP dissector crash (wnpa-sec-2017-32)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9354.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9353","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458148","bugzilla_description":"CVE-2017-9353 wireshark: IPv6 dissector crash (wnpa-sec-2017-33)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9353.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7703","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441969","bugzilla_description":"CVE-2017-7703 wireshark: IMAP dissector crash (wnpa-sec-2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7703.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-11410","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441970","bugzilla_description":"CVE-2017-7702 CVE-2017-11410 wireshark: WBXML dissector infinite loop (wnpa-sec-2017-13)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11410.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7702","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441970","bugzilla_description":"CVE-2017-7702 CVE-2017-11410 wireshark: WBXML dissector infinite loop (wnpa-sec-2017-13)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7702.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7700","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441971","bugzilla_description":"CVE-2017-7700 wireshark: NetScaler file parser infinite loop (wnpa-sec-2017-14)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7700.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7705","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441972","bugzilla_description":"CVE-2017-7705 wireshark: RPCoRDMA dissector infinite loop (wnpa-sec-2017-15)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7701","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441973","bugzilla_description":"CVE-2017-7701 wireshark: BGP dissector infinite loop (wnpa-sec-2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7701.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7704","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441975","bugzilla_description":"CVE-2017-7704 wireshark: DOF dissector infinite loop (wnpa-sec-2017-17)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7747","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441976","bugzilla_description":"CVE-2017-7747 wireshark: PacketBB dissector crash (wnpa-sec-2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7747.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7746","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441978","bugzilla_description":"CVE-2017-7746 wireshark: SLSK dissector long loop (wnpa-sec-2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7746.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7745","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441979","bugzilla_description":"CVE-2017-7745 wireshark: SIGCOMP dissector infinite loop (wnpa-sec-2017-20)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7748","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441980","bugzilla_description":"CVE-2017-7748 wireshark: WSP dissector infinite loop (wnpa-sec-2017-21)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7748.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6469","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429579","bugzilla_description":"CVE-2017-6469 wireshark: LDSS dissector crash (wnpa-sec-2017-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6469.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6472","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429580","bugzilla_description":"CVE-2017-6472 wireshark: RTMPT dissector infinite loop (wnpa-sec-2017-04)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6472.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6471","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429581","bugzilla_description":"CVE-2017-6471 wireshark: WSP infinite loop (wnpa-sec-2017-05)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6471.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6474","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429583","bugzilla_description":"CVE-2017-6474 wireshark: NetScaler file parser infinite loop (wnpa-sec-2017-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6474.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6468","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429585","bugzilla_description":"CVE-2017-6468 wireshark: NetScaler file parser crash (wnpa-sec-2017-08)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6473","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429586","bugzilla_description":"CVE-2017-6473 wireshark: K12 file parser crash (wnpa-sec-2017-09)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6473.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6470","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429588","bugzilla_description":"CVE-2017-6470 wireshark: IAX2 infinite loop (wnpa-sec-2017-10)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6467","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429589","bugzilla_description":"CVE-2017-6467 wireshark: Netscaler file parser infinite loop (wnpa-sec-2017-11)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6467.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6014","severity":"low","public_date":"2017-02-16T00:00:00Z","advisories":[],"bugzilla":"1425375","bugzilla_description":"CVE-2017-6014 wireshark: Memory exhaustion/infinite loop via malformed STANAG 4607 capture file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-835|CWE-400)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6014.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5596","severity":"moderate","public_date":"2017-01-23T00:00:00Z","advisories":[],"bugzilla":"1415964","bugzilla_description":"CVE-2017-5596 wireshark: ASTERIX infinite loop (wnpa-sec-2017-01)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5596.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-5597","severity":"moderate","public_date":"2017-01-23T00:00:00Z","advisories":[],"bugzilla":"1415965","bugzilla_description":"CVE-2017-5597 wireshark: DHCPv6 large loop (wnpa-sec-2017-02)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5597.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-5330","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":[],"bugzilla":"1411819","bugzilla_description":"CVE-2017-5330 ark: Unintended execution of scripts and executable files","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5330.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9372","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396409","bugzilla_description":"CVE-2016-9372 wireshark: Profinet I/O dissector long loop (wnpa-sec-2016-58)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9372.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-9374","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396410","bugzilla_description":"CVE-2016-9374 wireshark: AllJoyn crash (wnpa-sec-2016-59)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9374.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-9376","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396411","bugzilla_description":"CVE-2016-9376 wireshark: OpenFlow crash (wnpa-sec-2016-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-9373","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396413","bugzilla_description":"CVE-2016-9373 wireshark: DCERPC crash (wnpa-sec-2016-61)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9373.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-9375","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396415","bugzilla_description":"CVE-2016-9375 wireshark: DTN infinite loop (wnpa-sec-2016-62)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9375.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7957","severity":"moderate","public_date":"2016-10-04T00:00:00Z","advisories":[],"bugzilla":"1381837","bugzilla_description":"CVE-2016-7957 wireshark: Bluetooth L2CAP dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7957.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7958","severity":"moderate","public_date":"2016-10-04T00:00:00Z","advisories":[],"bugzilla":"1381838","bugzilla_description":"CVE-2016-7958 wireshark: NCP dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7958.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7175","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1375109","bugzilla_description":"CVE-2016-7175 wireshark: QNX6 QNET dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7175.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7176","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1375112","bugzilla_description":"CVE-2016-7176 wireshark: H.225 dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7177","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1375115","bugzilla_description":"CVE-2016-7177 wireshark: Catapult DCT2000 dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7177.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7178","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1375116","bugzilla_description":"CVE-2016-7178 wireshark: UMTS FP dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7178.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7179","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1375118","bugzilla_description":"CVE-2016-7179 wireshark: Catapult DCT2000 dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7179.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7180","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1375119","bugzilla_description":"CVE-2016-7180 wireshark: IPMI Trace dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6505","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361135","bugzilla_description":"CVE-2016-6505 wireshark: PacketBB crash (wnpa-sec-2016-41)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6505.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6506","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361137","bugzilla_description":"CVE-2016-6506 wireshark: WSP infinite loop (wnpa-sec-2016-42)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6507","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361138","bugzilla_description":"CVE-2016-6507 wireshark: MMSE infinite loop (wnpa-sec-2016-43)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6508","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361139","bugzilla_description":"CVE-2016-6508 wireshark: RLC long loop (wnpa-sec-2016-44)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6509","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361140","bugzilla_description":"CVE-2016-6509 wireshark: LDSS dissector crash (wnpa-sec-2016-45)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6510","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361141","bugzilla_description":"CVE-2016-6510 wireshark: RLC dissector crash (wnpa-sec-2016-46)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6510.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6511","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361142","bugzilla_description":"CVE-2016-6511 wireshark: OpenFlow long loop (wnpa-sec-2016-47)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6512","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361143","bugzilla_description":"CVE-2016-6512 wireshark: MMSE, WAP, WBXML, and WSP infinite loop. (wnpa-sec-2016-48)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6513","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361144","bugzilla_description":"CVE-2016-6513 wireshark: WBXML crash (wnpa-sec-2016-49)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-5350","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343963","bugzilla_description":"CVE-2016-5350 wireshark: SPOOLS infinite loop (wnpa-sec-2016-29)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5350.json"},{"CVE":"CVE-2016-5351","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343964","bugzilla_description":"CVE-2016-5351 wireshark: IEEE 802.11 dissector crash (wnpa-sec-2016-30)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5351.json"},{"CVE":"CVE-2016-5352","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343965","bugzilla_description":"CVE-2016-5352 wireshark: IEEE 802.11 dissector crash (wnpa-sec-2016-31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5352.json"},{"CVE":"CVE-2016-5353","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343966","bugzilla_description":"CVE-2016-5353 wireshark: UMTS FP crash (wnpa-sec-2016-32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5353.json"},{"CVE":"CVE-2016-5354","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343967","bugzilla_description":"CVE-2016-5354 wireshark: USB dissector crash (wnpa-sec-2016-33)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5354.json"},{"CVE":"CVE-2016-5355","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343968","bugzilla_description":"CVE-2016-5355 wireshark: Toshiba file parser crash (wnpa-sec-2016-34)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5355.json"},{"CVE":"CVE-2016-5356","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343969","bugzilla_description":"CVE-2016-5356 wireshark: CoSine file parser crash (wnpa-sec-2016-35)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5356.json"},{"CVE":"CVE-2016-5357","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343970","bugzilla_description":"CVE-2016-5357 wireshark: NetScreen file parser crash (wnpa-sec-2016-36)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5357.json"},{"CVE":"CVE-2016-5358","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343971","bugzilla_description":"CVE-2016-5358 wireshark: Ethernet dissector crash (wnpa-sec-2016-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5358.json"},{"CVE":"CVE-2016-5359","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343972","bugzilla_description":"CVE-2016-5359 wireshark: WBXML infinite loop (wnpa-sec-2016-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5359.json"},{"CVE":"CVE-2016-4076","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330066","bugzilla_description":"CVE-2016-4076 wireshark: NCP dissector crash (wnpa-sec-2016-19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4076.json"},{"CVE":"CVE-2016-4077","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330067","bugzilla_description":"CVE-2016-4077 wireshark: TShark reassembly crash (wnpa-sec-2016-20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4077.json"},{"CVE":"CVE-2016-4078","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330068","bugzilla_description":"CVE-2016-4078 wireshark: IEEE 802.11 dissector crash (wnpa-sec-2016-21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4078.json"},{"CVE":"CVE-2016-4079","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330069","bugzilla_description":"CVE-2016-4079 wireshark: PKTC dissector crash (wnpa-sec-2016-22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4079.json"},{"CVE":"CVE-2016-4080","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330070","bugzilla_description":"CVE-2016-4080 wireshark: PKTC dissector crash (wnpa-sec-2016-23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4080.json"},{"CVE":"CVE-2016-4081","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330071","bugzilla_description":"CVE-2016-4081 wireshark: IAX2 infinite loop (wnpa-sec-2016-24)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4081.json"},{"CVE":"CVE-2016-4006","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330073","bugzilla_description":"CVE-2016-4006 wireshark: Wireshark and TShark crash (wnpa-sec-2016-25)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4006.json"},{"CVE":"CVE-2016-4082","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330075","bugzilla_description":"CVE-2016-4082 wireshark: GSM CBCH dissector crash (wnpa-sec-2016-26)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4082.json"},{"CVE":"CVE-2016-4083","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330076","bugzilla_description":"CVE-2016-4083 CVE-2016-4084 wireshark: MS-WSP dissector crash (wnpa-sec-2016-27)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4083.json"},{"CVE":"CVE-2016-4084","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330076","bugzilla_description":"CVE-2016-4083 CVE-2016-4084 wireshark: MS-WSP dissector crash (wnpa-sec-2016-27)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4084.json"},{"CVE":"CVE-2016-4085","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330077","bugzilla_description":"CVE-2016-4085 wireshark: NCP dissector crash (wnpa-sec-2016-28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4085.json"},{"CVE":"CVE-2016-2521","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312776","bugzilla_description":"CVE-2016-2521 wireshark: DLL hijacking vulnerability (wnpa-sec-2016-01)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2521.json"},{"CVE":"CVE-2016-2522","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312777","bugzilla_description":"CVE-2016-2522 wireshark: ASN.1 BER dissector crash (wnpa-sec-2016-02)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2522.json"},{"CVE":"CVE-2016-2523","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312779","bugzilla_description":"CVE-2016-2523 wireshark: DNP3 dissector infinite loop (wnpa-sec-2016-03)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2523.json"},{"CVE":"CVE-2016-2524","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312780","bugzilla_description":"CVE-2016-2524 wireshark: X.509AF crash (wnpa-sec-2016-04)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2524.json"},{"CVE":"CVE-2016-2525","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312781","bugzilla_description":"CVE-2016-2525 wireshark: HTTP/2 dissector crash (wnpa-sec-2016-05)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2525.json"},{"CVE":"CVE-2016-2526","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312783","bugzilla_description":"CVE-2016-2526 wireshark: HiQnet dissector crash (wnpa-sec-2016-06)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2526.json"},{"CVE":"CVE-2016-2527","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312784","bugzilla_description":"CVE-2016-2527 wireshark: 3GPP TS 32.423 Trace file parser crash (wnpa-sec-2016-07)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2527.json"},{"CVE":"CVE-2016-2528","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312785","bugzilla_description":"CVE-2016-2528 wireshark: LBMC dissector crash (wnpa-sec-2016-08)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2528.json"},{"CVE":"CVE-2016-2529","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312787","bugzilla_description":"CVE-2016-2529 wireshark: iSeries file parser crash (wnpa-sec-2016-09)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2529.json"},{"CVE":"CVE-2016-2530","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312790","bugzilla_description":"CVE-2016-2530 CVE-2016-2531 wireshark: RSL dissector crash (wnpa-sec-2016-10)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2530.json"},{"CVE":"CVE-2016-2531","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312790","bugzilla_description":"CVE-2016-2530 CVE-2016-2531 wireshark: RSL dissector crash (wnpa-sec-2016-10)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2531.json"},{"CVE":"CVE-2016-2532","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312792","bugzilla_description":"CVE-2016-2532 wireshark: LLRP dissector crash (wnpa-sec-2016-11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2532.json"},{"CVE":"CVE-2016-4415","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312795","bugzilla_description":"CVE-2016-4415 wireshark: Ixia IxVeriWave file parser crash (wnpa-sec-2016-12)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4415.json"},{"CVE":"CVE-2016-4416","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312796","bugzilla_description":"CVE-2016-4416 wireshark: IEEE 802.11 dissector crash (wnpa-sec-2016-13)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4416.json"},{"CVE":"CVE-2016-4417","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312797","bugzilla_description":"CVE-2016-4417 wireshark: GSM A-bis OML dissector crash (wnpa-sec-2016-14)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4417.json"},{"CVE":"CVE-2016-4418","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312798","bugzilla_description":"CVE-2016-4418 wireshark: ASN.1 BER dissector crash (wnpa-sec-2016-15)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4418.json"},{"CVE":"CVE-2016-4419","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312799","bugzilla_description":"CVE-2016-4419 wireshark: SPICE dissector large loop (wnpa-sec-2016-16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4419.json"},{"CVE":"CVE-2016-4420","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312800","bugzilla_description":"CVE-2016-4420 wireshark: NFS dissector crash (wnpa-sec-2016-17)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4420.json"},{"CVE":"CVE-2016-4421","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312801","bugzilla_description":"CVE-2016-4421 wireshark: ASN.1 BER dissector crash. (wnpa-sec-2016-18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4421.json"},{"CVE":"CVE-2015-8711","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296054","bugzilla_description":"CVE-2015-8711 wireshark: NBAP dissector crashes (wnpa-sec-2015-31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8711.json"},{"CVE":"CVE-2015-8712","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296055","bugzilla_description":"CVE-2015-8712 CVE-2015-8713 wireshark: UMTS FP dissector crashes (wnpa-sec-2015-32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8712.json"},{"CVE":"CVE-2015-8713","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296055","bugzilla_description":"CVE-2015-8712 CVE-2015-8713 wireshark: UMTS FP dissector crashes (wnpa-sec-2015-32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8713.json"},{"CVE":"CVE-2015-8714","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296056","bugzilla_description":"CVE-2015-8714 wireshark: DCOM dissector crash (wnpa-sec-2015-33)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8714.json"},{"CVE":"CVE-2015-8715","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296057","bugzilla_description":"CVE-2015-8715 wireshark: AllJoyn dissector infinite loop (wnpa-sec-2015-34)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8715.json"},{"CVE":"CVE-2015-8716","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296059","bugzilla_description":"CVE-2015-8716 wireshark: T.38 dissector crash (wnpa-sec-2015-35)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8716.json"},{"CVE":"CVE-2015-8717","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296061","bugzilla_description":"CVE-2015-8717 wireshark: SDP dissector crash (wnpa-sec-2015-36)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8717.json"},{"CVE":"CVE-2015-8718","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296062","bugzilla_description":"CVE-2015-8718 wireshark: NLM dissector crash (wnpa-sec-2015-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8718.json"},{"CVE":"CVE-2015-8719","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296063","bugzilla_description":"CVE-2015-8719 wireshark: DNS dissector crash (wnpa-sec-2015-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8719.json"},{"CVE":"CVE-2015-8720","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296064","bugzilla_description":"CVE-2015-8720 wireshark: BER dissector crash (wnpa-sec-2015-39)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8720.json"},{"CVE":"CVE-2015-8721","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296065","bugzilla_description":"CVE-2015-8721 wireshark: Zlib decompression crash (wnpa-sec-2015-40)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8721.json"},{"CVE":"CVE-2015-8722","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296066","bugzilla_description":"CVE-2015-8722 wireshark: SCTP dissector crash (wnpa-sec-2015-41)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8722.json"},{"CVE":"CVE-2015-8723","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296067","bugzilla_description":"CVE-2015-8723 CVE-2015-8724 wireshark: 802.11 decryption crash (wnpa-sec-2015-42)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-121|CWE-122)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8723.json"},{"CVE":"CVE-2015-8724","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296067","bugzilla_description":"CVE-2015-8723 CVE-2015-8724 wireshark: 802.11 decryption crash (wnpa-sec-2015-42)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-121|CWE-122)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8724.json"},{"CVE":"CVE-2015-8725","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296068","bugzilla_description":"CVE-2015-8725 wireshark: DIAMETER dissector crash (wnpa-sec-2015-43)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8725.json"},{"CVE":"CVE-2015-8726","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296070","bugzilla_description":"CVE-2015-8726 wireshark: VeriWave file parser crashes (wnpa-sec-2015-44)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-125|CWE-121)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8726.json"},{"CVE":"CVE-2015-8727","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296072","bugzilla_description":"CVE-2015-8727 wireshark: RSVP dissector crash (wnpa-sec-2015-45)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8727.json"},{"CVE":"CVE-2015-8728","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296075","bugzilla_description":"CVE-2015-8728 wireshark: ANSI A & GSM A dissector crashes (wnpa-sec-2015-46)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8728.json"},{"CVE":"CVE-2015-8729","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296077","bugzilla_description":"CVE-2015-8729 wireshark: Ascend file parser crash (wnpa-sec-2015-47)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8729.json"},{"CVE":"CVE-2015-8730","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296078","bugzilla_description":"CVE-2015-8730 wireshark: NBAP dissector crash (wnpa-sec-2015-48)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8730.json"},{"CVE":"CVE-2015-8731","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296079","bugzilla_description":"CVE-2015-8731 wireshark: RSL dissector crash (wnpa-sec-2015-49)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8731.json"},{"CVE":"CVE-2015-8732","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296081","bugzilla_description":"CVE-2015-8732 wireshark: ZigBee ZCL dissector crash (wnpa-sec-2015-50)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8732.json"},{"CVE":"CVE-2015-8733","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296082","bugzilla_description":"CVE-2015-8733 wireshark: Sniffer file parser crash (wnpa-sec-2015-51)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8733.json"},{"CVE":"CVE-2015-8734","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296083","bugzilla_description":"CVE-2015-8734 wireshark: NWP dissector crash (wnpa-sec-2015-52)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8734.json"},{"CVE":"CVE-2015-8735","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296084","bugzilla_description":"CVE-2015-8735 wireshark: BT ATT dissector crash (wnpa-sec-2015-53)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8735.json"},{"CVE":"CVE-2015-8736","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296085","bugzilla_description":"CVE-2015-8736 wireshark: MP2T file parser crash (wnpa-sec-2015-54)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8736.json"},{"CVE":"CVE-2015-8737","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296086","bugzilla_description":"CVE-2015-8737 wireshark: MP2T file parser crash (wnpa-sec-2015-55)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8737.json"},{"CVE":"CVE-2015-8738","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296087","bugzilla_description":"CVE-2015-8738 wireshark: S7COMM dissector crash (wnpa-sec-2015-56)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8738.json"},{"CVE":"CVE-2015-8739","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296088","bugzilla_description":"CVE-2015-8739 wireshark: IPMI dissector crash (wnpa-sec-2015-57)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8739.json"},{"CVE":"CVE-2015-8740","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296089","bugzilla_description":"CVE-2015-8740 wireshark: TDS dissector crash (wnpa-sec-2015-58)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8740.json"},{"CVE":"CVE-2015-8741","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296090","bugzilla_description":"CVE-2015-8741 wireshark: PPI dissector crash (wnpa-sec-2015-59)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8741.json"},{"CVE":"CVE-2015-8742","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296091","bugzilla_description":"CVE-2015-8742 wireshark: MS-WSP dissector crash (wnpa-sec-2015-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8742.json"},{"CVE":"CVE-2015-7830","severity":"moderate","public_date":"2015-10-14T00:00:00Z","advisories":[],"bugzilla":"1272016","bugzilla_description":"CVE-2015-7830 wireshark: Pcapng file parser crash","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-704->CWE-480","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7830.json"},{"CVE":"CVE-2015-6241","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1253352","bugzilla_description":"CVE-2015-6241 wireshark: protocol tree crash (wnpa-sec-2015-21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6241.json"},{"CVE":"CVE-2015-6242","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1253353","bugzilla_description":"CVE-2015-6242 wireshark: memory manager crash (wnpa-sec-2015-22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6242.json"},{"CVE":"CVE-2015-6243","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1253354","bugzilla_description":"CVE-2015-6243 wireshark: Dissector table crash (wnpa-sec-2015-23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6243.json"},{"CVE":"CVE-2015-6244","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1253355","bugzilla_description":"CVE-2015-6244 wireshark: ZigBee dissector crash (wnpa-sec-2015-24)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-130","affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6244.json"},{"CVE":"CVE-2015-6245","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1253356","bugzilla_description":"CVE-2015-6245 wireshark: GSM RLC/MAC dissector infinite loop (wnpa-sec-2015-25)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6245.json"},{"CVE":"CVE-2015-6246","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1253357","bugzilla_description":"CVE-2015-6246 wireshark: WaveAgent dissector crash (wnpa-sec-2015-26)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6246.json"},{"CVE":"CVE-2015-6247","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1253359","bugzilla_description":"CVE-2015-6247 wireshark: OpenFlow dissector infinite loop (wnpa-sec-2015-27)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6247.json"},{"CVE":"CVE-2015-6248","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1253360","bugzilla_description":"CVE-2015-6248 wireshark: Ptvcursor crash (wnpa-sec-2015-28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6248.json"},{"CVE":"CVE-2015-6249","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1253361","bugzilla_description":"CVE-2015-6249 wireshark: WCCP dissector crash (wnpa-sec-2015-29)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6249.json"},{"CVE":"CVE-2015-4651","severity":"low","public_date":"2015-06-17T00:00:00Z","advisories":[],"bugzilla":"1234415","bugzilla_description":"CVE-2015-4651 wireshark: WCCP dissector crash (wnpa-sec-2015-19)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4651.json"},{"CVE":"CVE-2015-4652","severity":"low","public_date":"2015-06-17T00:00:00Z","advisories":[],"bugzilla":"1234416","bugzilla_description":"CVE-2015-4652 wireshark: GSM DTAP dissector crash (wnpa-sec-2015-20)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4652.json"},{"CVE":"CVE-2015-3808","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1222433","bugzilla_description":"CVE-2015-3808 CVE-2015-3809 wireshark: LBMR infinite loop (wnpa-sec-2015-12)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3808.json"},{"CVE":"CVE-2015-3809","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1222433","bugzilla_description":"CVE-2015-3808 CVE-2015-3809 wireshark: LBMR infinite loop (wnpa-sec-2015-12)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3809.json"},{"CVE":"CVE-2015-3810","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1222434","bugzilla_description":"CVE-2015-3810 wireshark: WebSocket DoS (wnpa-sec-2015-13)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3810.json"},{"CVE":"CVE-2015-3811","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2017:0631","RHSA-2015:2393"],"bugzilla":"1222436","bugzilla_description":"CVE-2015-3811 wireshark: WCP dissector crash (wnpa-sec-2015-14)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-665","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-25.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3811.json"},{"CVE":"CVE-2015-3812","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2017:0631","RHSA-2015:2393"],"bugzilla":"1222437","bugzilla_description":"CVE-2015-3812 wireshark: X11 memory leak (wnpa-sec-2015-15)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-25.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3812.json"},{"CVE":"CVE-2015-3813","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2017:0631","RHSA-2015:2393"],"bugzilla":"1222438","bugzilla_description":"CVE-2015-3813 wireshark: Reassembly memory leak (wnpa-sec-2015-16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-25.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3813.json"},{"CVE":"CVE-2015-3814","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1222439","bugzilla_description":"CVE-2015-3814 wireshark: IEEE 802.11 infinite loop (wnpa-sec-2015-17)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3814.json"},{"CVE":"CVE-2015-3815","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1222440","bugzilla_description":"CVE-2015-3815 wireshark: Android Logcat file parser crash (wnpa-sec-2015-18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3815.json"},{"CVE":"CVE-2015-3182","severity":"moderate","public_date":"2015-05-07T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1219409","bugzilla_description":"CVE-2015-3182 wireshark: crash on sample file genbroad.snoop","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-704","affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3182.json"},{"CVE":"CVE-2015-2187","severity":"low","public_date":"2015-03-04T00:00:00Z","advisories":[],"bugzilla":"1199162","bugzilla_description":"CVE-2015-2187 wireshark: ATN-CPDLC dissector could crash (wnpa-sec-2015-06)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2187.json"},{"CVE":"CVE-2015-2188","severity":"low","public_date":"2015-03-04T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1199163","bugzilla_description":"CVE-2015-2188 wireshark: The WCP dissector could crash while decompressing data (wnpa-sec-2015-07)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2188.json"},{"CVE":"CVE-2015-2189","severity":"low","public_date":"2015-03-04T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1199165","bugzilla_description":"CVE-2015-2189 wireshark: The pcapng file parser could crash (wnpa-sec-2015-08)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2189.json"},{"CVE":"CVE-2015-2190","severity":"low","public_date":"2015-03-04T00:00:00Z","advisories":[],"bugzilla":"1199166","bugzilla_description":"CVE-2015-2190 wireshark: LLDP dissector could crash (wnpa-sec-2015-09)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2190.json"},{"CVE":"CVE-2015-2191","severity":"low","public_date":"2015-03-04T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1199167","bugzilla_description":"CVE-2015-2191 wireshark: The TNEF dissector could go into an infinite loop on 32-bit architectures (wnpa-sec-2015-10)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2191.json"},{"CVE":"CVE-2015-2192","severity":"low","public_date":"2015-03-04T00:00:00Z","advisories":[],"bugzilla":"1199168","bugzilla_description":"CVE-2015-2192 wireshark: SCSI OSD dissector could go into an infinite loop (wnpa-sec-2015-11)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2192.json"},{"CVE":"CVE-2015-0559","severity":"moderate","public_date":"2015-01-07T00:00:00Z","advisories":[],"bugzilla":"1180167","bugzilla_description":"CVE-2015-0559 CVE-2015-0560 wireshark: WCCP dissector crash (wnpa-sec-2015-01)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0559.json"},{"CVE":"CVE-2015-0560","severity":"moderate","public_date":"2015-01-07T00:00:00Z","advisories":[],"bugzilla":"1180167","bugzilla_description":"CVE-2015-0559 CVE-2015-0560 wireshark: WCCP dissector crash (wnpa-sec-2015-01)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0560.json"},{"CVE":"CVE-2015-0561","severity":"moderate","public_date":"2015-01-07T00:00:00Z","advisories":[],"bugzilla":"1180171","bugzilla_description":"CVE-2015-0561 wireshark: LPP dissector crash (wnpa-sec-2015-02)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0561.json"},{"CVE":"CVE-2015-0562","severity":"moderate","public_date":"2015-01-07T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1180182","bugzilla_description":"CVE-2015-0562 wireshark: DEC DNA Routing Protocol dissector crash (wnpa-sec-2015-03)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0562.json"},{"CVE":"CVE-2015-0563","severity":"moderate","public_date":"2015-01-07T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1180195","bugzilla_description":"CVE-2015-0563 wireshark: SMTP dissector crash (wnpa-sec-2015-04)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-131","affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0563.json"},{"CVE":"CVE-2015-0564","severity":"moderate","public_date":"2015-01-07T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1180197","bugzilla_description":"CVE-2015-0564 wireshark: TLS/SSL decryption crash (wnpa-sec-2015-05)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-131","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0564.json"},{"CVE":"CVE-2014-8710","severity":"moderate","public_date":"2014-11-04T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1163584","bugzilla_description":"CVE-2014-8710 wireshark: SigComp dissector crash (wnpa-sec-2014-20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8710.json"},{"CVE":"CVE-2014-8714","severity":"moderate","public_date":"2014-10-20T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1163581","bugzilla_description":"CVE-2014-8714 wireshark: TN5250 infinite loop (wnpa-sec-2014-23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8714.json"},{"CVE":"CVE-2014-8711","severity":"moderate","public_date":"2014-10-17T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1163583","bugzilla_description":"CVE-2014-8711 wireshark: AMQP dissector crash (wnpa-sec-2014-21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8711.json"},{"CVE":"CVE-2014-8712","severity":"moderate","public_date":"2014-10-09T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1163582","bugzilla_description":"CVE-2014-8712 CVE-2014-8713 wireshark: NCP dissector crashes (wnpa-sec-2014-22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8712.json"},{"CVE":"CVE-2014-8713","severity":"moderate","public_date":"2014-10-09T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1163582","bugzilla_description":"CVE-2014-8712 CVE-2014-8713 wireshark: NCP dissector crashes (wnpa-sec-2014-22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8713.json"},{"CVE":"CVE-2014-6429","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142602","bugzilla_description":"CVE-2014-6429 CVE-2014-6430 CVE-2014-6431 CVE-2014-6432 wireshark: DOS Sniffer file parser flaw (wnpa-sec-2014-19)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6429.json"},{"CVE":"CVE-2014-6430","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142602","bugzilla_description":"CVE-2014-6429 CVE-2014-6430 CVE-2014-6431 CVE-2014-6432 wireshark: DOS Sniffer file parser flaw (wnpa-sec-2014-19)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6430.json"},{"CVE":"CVE-2014-6431","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142602","bugzilla_description":"CVE-2014-6429 CVE-2014-6430 CVE-2014-6431 CVE-2014-6432 wireshark: DOS Sniffer file parser flaw (wnpa-sec-2014-19)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6431.json"},{"CVE":"CVE-2014-6432","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142602","bugzilla_description":"CVE-2014-6429 CVE-2014-6430 CVE-2014-6431 CVE-2014-6432 wireshark: DOS Sniffer file parser flaw (wnpa-sec-2014-19)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6432.json"},{"CVE":"CVE-2014-6428","severity":"moderate","public_date":"2014-09-07T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142603","bugzilla_description":"CVE-2014-6428 wireshark: SES dissector crash (wnpa-sec-2014-18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-456","affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6428.json"},{"CVE":"CVE-2014-6427","severity":"moderate","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2014:1676"],"bugzilla":"1142604","bugzilla_description":"CVE-2014-6427 wireshark: RTSP dissector crash (wnpa-sec-2014-17)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6427.json"},{"CVE":"CVE-2014-6426","severity":"moderate","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2014:1676"],"bugzilla":"1142606","bugzilla_description":"CVE-2014-6426 wireshark: HIP dissector infinite loop (wnpa-sec-2014-16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6426.json"},{"CVE":"CVE-2014-6424","severity":"moderate","public_date":"2014-08-13T00:00:00Z","advisories":["RHSA-2014:1676"],"bugzilla":"1142609","bugzilla_description":"CVE-2014-6424 wireshark: Netflow dissector crash (wnpa-sec-2014-14)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6424.json"},{"CVE":"CVE-2014-6425","severity":"moderate","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142608","bugzilla_description":"CVE-2014-6425 wireshark: CUPS dissector crash (wnpa-sec-2014-15)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-228->CWE-125","affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6425.json"},{"CVE":"CVE-2014-6423","severity":"moderate","public_date":"2014-08-01T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142610","bugzilla_description":"CVE-2014-6423 wireshark: MEGACO dissector infinite loop (wnpa-sec-2014-13)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6423.json"},{"CVE":"CVE-2014-5161","severity":"moderate","public_date":"2014-07-31T00:00:00Z","advisories":[],"bugzilla":"1125767","bugzilla_description":"CVE-2014-5161 CVE-2014-5162 wireshark: Catapult DCT2000 and IrDA dissectors buffer underrun (wnpa-sec-2014-08)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5161.json"},{"CVE":"CVE-2014-5162","severity":"moderate","public_date":"2014-07-31T00:00:00Z","advisories":[],"bugzilla":"1125767","bugzilla_description":"CVE-2014-5161 CVE-2014-5162 wireshark: Catapult DCT2000 and IrDA dissectors buffer underrun (wnpa-sec-2014-08)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5162.json"},{"CVE":"CVE-2014-5163","severity":"moderate","public_date":"2014-06-21T00:00:00Z","advisories":[],"bugzilla":"1125766","bugzilla_description":"CVE-2014-5163 wireshark: GTP and GSM Management dissectors crash (wnpa-sec-2014-09)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5163.json"},{"CVE":"CVE-2014-5165","severity":"moderate","public_date":"2014-06-17T00:00:00Z","advisories":[],"bugzilla":"1125761","bugzilla_description":"CVE-2014-5165 wireshark: ASN.1 BER dissector crash (wnpa-sec-2014-11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5165.json"},{"CVE":"CVE-2014-2907","severity":"moderate","public_date":"2014-04-22T00:00:00Z","advisories":[],"bugzilla":"1090177","bugzilla_description":"CVE-2014-2907 wireshark: RTP dissector crash (wnpa-sec-2014-06)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2907.json"},{"CVE":"CVE-2014-4020","severity":"moderate","public_date":"2014-04-17T00:00:00Z","advisories":[],"bugzilla":"1109034","bugzilla_description":"CVE-2014-4020 wireshark: Frame metadissector crash (wnpa-sec-2014-07)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4020.json"},{"CVE":"CVE-2014-4174","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":[],"bugzilla":"1086033","bugzilla_description":"CVE-2014-4174 libpcap: file parser crash (wnpa-sec-2014-05)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4174.json"},{"CVE":"CVE-2014-6421","severity":"moderate","public_date":"2014-03-23T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142611","bugzilla_description":"CVE-2014-6421 CVE-2014-6422 wireshark: RTP dissector crash (wnpa-sec-2014-12)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6421.json"},{"CVE":"CVE-2014-6422","severity":"moderate","public_date":"2014-03-23T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142611","bugzilla_description":"CVE-2014-6421 CVE-2014-6422 wireshark: RTP dissector crash (wnpa-sec-2014-12)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6422.json"},{"CVE":"CVE-2014-2299","severity":"moderate","public_date":"2014-03-07T00:00:00Z","advisories":["RHSA-2014:0342","RHSA-2014:0341"],"bugzilla":"1074109","bugzilla_description":"CVE-2014-2299 wireshark: buffer overflow in MPEG file parser (wnpa-sec-2014-04)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["wireshark-0:1.8.10-7.el6_5","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2299.json"},{"CVE":"CVE-2014-2283","severity":"moderate","public_date":"2014-03-07T00:00:00Z","advisories":["RHSA-2014:0342"],"bugzilla":"1074111","bugzilla_description":"CVE-2014-2283 wireshark: RLC dissector crash (wnpa-sec-2014-03)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-7.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2283.json"},{"CVE":"CVE-2014-2282","severity":"moderate","public_date":"2014-03-07T00:00:00Z","advisories":[],"bugzilla":"1074112","bugzilla_description":"CVE-2014-2282 wireshark: M3UA dissector crash (wnpa-sec-2014-02)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2282.json"},{"CVE":"CVE-2014-2281","severity":"moderate","public_date":"2014-03-07T00:00:00Z","advisories":["RHSA-2014:0342","RHSA-2014:0341"],"bugzilla":"1074114","bugzilla_description":"CVE-2014-2281 wireshark: NFS dissector crash (wnpa-sec-2014-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["wireshark-0:1.8.10-7.el6_5","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2281.json"},{"CVE":"CVE-2014-5164","severity":"moderate","public_date":"2014-02-21T00:00:00Z","advisories":[],"bugzilla":"1125763","bugzilla_description":"CVE-2014-5164 wireshark: RLC dissector crash (wnpa-sec-2014-10)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5164.json"},{"CVE":"CVE-2013-7112","severity":"low","public_date":"2013-12-17T00:00:00Z","advisories":["RHSA-2014:0342","RHSA-2014:0341"],"bugzilla":"1044508","bugzilla_description":"CVE-2013-7112 wireshark: SIP dissector could go into an infinite loop (wnpa-sec-2013-66)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-7.el6_5","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7112.json"},{"CVE":"CVE-2013-7113","severity":"low","public_date":"2013-12-17T00:00:00Z","advisories":[],"bugzilla":"1044509","bugzilla_description":"CVE-2013-7113 wireshark: BSSGP dissector could crash (wnpa-sec-2013-67)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7113.json"},{"CVE":"CVE-2013-7114","severity":"low","public_date":"2013-12-17T00:00:00Z","advisories":["RHSA-2014:0342"],"bugzilla":"1044510","bugzilla_description":"CVE-2013-7114 wireshark: NTLMSSP v2 dissector could crash (wnpa-sec-2013-68)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-7.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7114.json"},{"CVE":"CVE-2013-6336","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":["RHSA-2014:0342"],"bugzilla":"1026534","bugzilla_description":"CVE-2013-6336 wireshark: IEEE 802.15.4 dissector crash (wnpa-sec-2013-61)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-7.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6336.json"},{"CVE":"CVE-2013-6337","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":["RHSA-2014:0342"],"bugzilla":"1026538","bugzilla_description":"CVE-2013-6337 wireshark: NBAP dissector crash (wnpa-sec-2013-62)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-7.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6337.json"},{"CVE":"CVE-2013-6338","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":["RHSA-2014:0342"],"bugzilla":"1026539","bugzilla_description":"CVE-2013-6338 wireshark: SIP dissector crash (wnpa-sec-2013-63)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-7.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6338.json"},{"CVE":"CVE-2013-6339","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":["RHSA-2014:0342"],"bugzilla":"1026540","bugzilla_description":"CVE-2013-6339 wireshark: ActiveMQ OpenWire dissector large loop (wnpa-sec-2013-64)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-7.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6339.json"},{"CVE":"CVE-2013-6340","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":["RHSA-2014:0342"],"bugzilla":"1026541","bugzilla_description":"CVE-2013-6340 wireshark: TCP dissector crash (wnpa-sec-2013-65)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-7.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6340.json"},{"CVE":"CVE-2013-5717","severity":"low","public_date":"2013-09-10T00:00:00Z","advisories":[],"bugzilla":"1007177","bugzilla_description":"CVE-2013-5717 wireshark: Bluetooth HCI ACL dissector crash (wnpa-sec-2013-54, upstream bug 8827)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5717.json"},{"CVE":"CVE-2013-5718","severity":"low","public_date":"2013-09-10T00:00:00Z","advisories":[],"bugzilla":"1007182","bugzilla_description":"CVE-2013-5718 wireshark: NBAP dissector crash (wnpa-sec-2013-55, upstream bug 9005)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5718.json"},{"CVE":"CVE-2013-5719","severity":"low","public_date":"2013-09-10T00:00:00Z","advisories":[],"bugzilla":"1007185","bugzilla_description":"CVE-2013-5719 wireshark: ASSA R3 dissector crash (wnpa-sec-2013-56, upstream bug 9020)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5719.json"},{"CVE":"CVE-2013-5720","severity":"low","public_date":"2013-09-10T00:00:00Z","advisories":[],"bugzilla":"1007192","bugzilla_description":"CVE-2013-5720 wireshark: RTPS dissector crash (wnpa-sec-2013-57)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5720.json"},{"CVE":"CVE-2013-5721","severity":"low","public_date":"2013-09-10T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"1007197","bugzilla_description":"CVE-2013-5721 wireshark: MQ dissector crash (wnpa-sec-2013-58, upstream bug 9079)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5721.json"},{"CVE":"CVE-2013-5722","severity":"low","public_date":"2013-09-10T00:00:00Z","advisories":[],"bugzilla":"1007201","bugzilla_description":"CVE-2013-5722 wireshark: LDAP dissector crash (wnpa-sec-2013-59)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5722.json"},{"CVE":"CVE-2013-4920","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990155","bugzilla_description":"CVE-2013-4920 wireshark: DoS (application crash) in the P1 dissector (wnpa-sec-2013-42)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4920.json"},{"CVE":"CVE-2013-4921","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990156","bugzilla_description":"CVE-2013-4921 wireshark: Off-by-one (application crash) in the Radiotap dissector (wnpa-sec-2013-43)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4921.json"},{"CVE":"CVE-2013-4922","severity":"moderate","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990157","bugzilla_description":"CVE-2013-4922 wireshark: Double-free in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4922.json"},{"CVE":"CVE-2013-4923","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990160","bugzilla_description":"CVE-2013-4923 wireshark: Memory leak (DoS, memory consumption) in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4923.json"},{"CVE":"CVE-2013-4924","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990163","bugzilla_description":"CVE-2013-4924 wireshark: Assertion failure in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4924.json"},{"CVE":"CVE-2013-4925","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990164","bugzilla_description":"CVE-2013-4925 wireshark: Integer signedness error in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4925.json"},{"CVE":"CVE-2013-4926","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990165","bugzilla_description":"CVE-2013-4926 wireshark: DoS in the DCOM ISystemActivator dissector due improper remaining data to process presence check (wnpa-sec-2013-44)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4926.json"},{"CVE":"CVE-2013-4927","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"990166","bugzilla_description":"CVE-2013-4927 wireshark: Integer signedness error in the Bluetooth SDP dissector (wnpa-sec-2013-45)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4927.json"},{"CVE":"CVE-2013-4928","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990167","bugzilla_description":"CVE-2013-4928 wireshark: Integer signedness error in the Bluetooth OBEX dissector (wnpa-sec-2013-46)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4928.json"},{"CVE":"CVE-2013-4929","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990168","bugzilla_description":"CVE-2013-4929 wireshark: DoS (infinite loop) in the DIS dissector (wnpa-sec-2013-47)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4929.json"},{"CVE":"CVE-2013-4930","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990169","bugzilla_description":"CVE-2013-4930 wireshark: Assertion failure in the DVB-CI dissector (wnpa-sec-2013-48)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4930.json"},{"CVE":"CVE-2013-4931","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"990170","bugzilla_description":"CVE-2013-4931 wireshark: DoS (infinite loop) in the GSM RR dissector (wnpa-sec-2013-49)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4931.json"},{"CVE":"CVE-2013-4932","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"990172","bugzilla_description":"CVE-2013-4932 wireshark: Multiple array index errors in the GSM A Common dissector (wnpa-sec-2013-50)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4932.json"},{"CVE":"CVE-2013-4933","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"990175","bugzilla_description":"CVE-2013-4933 wireshark: DoS (application crash) in the Netmon file parser (wnpa-sec-2013-51)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4933.json"},{"CVE":"CVE-2013-4934","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"990178","bugzilla_description":"CVE-2013-4934 wireshark: DoS (application crash) in the Netmon file parser (wnpa-sec-2013-51) (A different flaw than CVE-2013-4933)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4934.json"},{"CVE":"CVE-2013-4935","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"990179","bugzilla_description":"CVE-2013-4935 wireshark: DoS (application crash) in the ASN.1 PER dissector (wnpa-sec-2013-52)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4935.json"},{"CVE":"CVE-2013-4936","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"990180","bugzilla_description":"CVE-2013-4936 wireshark: DoS (NULL pointer dereference, crash) in the PROFINET Real-Time dissector (wnpa-sec-2013-53)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4936.json"},{"CVE":"CVE-2013-4074","severity":"low","public_date":"2013-06-07T00:00:00Z","advisories":[],"bugzilla":"972679","bugzilla_description":"CVE-2013-4074 wireshark: DoS (crash) in the CAPWAP dissector (wnpa-sec-2013-32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4074.json"},{"CVE":"CVE-2013-4075","severity":"low","public_date":"2013-06-07T00:00:00Z","advisories":["RHSA-2017:0631"],"bugzilla":"972680","bugzilla_description":"CVE-2013-4075 wireshark: DoS (crash) in the GMR-1 BCCH dissector (wnpa-sec-2013-33)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-25.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4075.json"},{"CVE":"CVE-2013-4076","severity":"moderate","public_date":"2013-06-07T00:00:00Z","advisories":[],"bugzilla":"972681","bugzilla_description":"CVE-2013-4076 wireshark: Invalid free in the PPP dissector (wnpa-sec-2013-34)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4076.json"},{"CVE":"CVE-2013-4077","severity":"moderate","public_date":"2013-06-07T00:00:00Z","advisories":[],"bugzilla":"972682","bugzilla_description":"CVE-2013-4077 wireshark: Array index error in the NBAP dissector (wnpa-sec-2013-35)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4077.json"},{"CVE":"CVE-2013-4078","severity":"low","public_date":"2013-06-07T00:00:00Z","advisories":[],"bugzilla":"972683","bugzilla_description":"CVE-2013-4078 wireshark: DoS (infinite loop) in the RDP dissector (wnpa-sec-2013-36)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4078.json"},{"CVE":"CVE-2013-4079","severity":"low","public_date":"2013-06-07T00:00:00Z","advisories":[],"bugzilla":"972684","bugzilla_description":"CVE-2013-4079 wireshark: DoS (infinite loop, application hang) in the GSM CBCH dissector (wnpa-sec-2013-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4079.json"},{"CVE":"CVE-2013-4080","severity":"low","public_date":"2013-06-07T00:00:00Z","advisories":[],"bugzilla":"972685","bugzilla_description":"CVE-2013-4080 wireshark: DoS (infinite loop, CPU & memory consumption) in the Assa Abloy R3 dissector (wnpa-sec-2013-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4080.json"},{"CVE":"CVE-2013-4081","severity":"low","public_date":"2013-06-07T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"972686","bugzilla_description":"CVE-2013-4081 wireshark: DoS (infinite loop) in the HTTP dissector (wnpa-sec-2013-39)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4081.json"},{"CVE":"CVE-2013-4082","severity":"moderate","public_date":"2013-06-07T00:00:00Z","advisories":[],"bugzilla":"972687","bugzilla_description":"CVE-2013-4082 wireshark: Heap-based buffer overflow in the Ixia IxVeriWave file parser (wnpa-sec-2013-40)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4082.json"},{"CVE":"CVE-2013-4083","severity":"moderate","public_date":"2013-06-07T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"972688","bugzilla_description":"CVE-2013-4083 wireshark: Invalid free in the DCP ETSI dissector (wnpa-sec-2013-41)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4083.json"},{"CVE":"CVE-2013-3562","severity":"low","public_date":"2013-05-17T00:00:00Z","advisories":[],"bugzilla":"965112","bugzilla_description":"CVE-2013-3562 wireshark: DoS (stack overflow, crash) in the Websocket dissector (wnpa-sec-2013-29, upstream #8448, #8499)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3562.json"},{"CVE":"CVE-2013-3560","severity":"low","public_date":"2013-05-17T00:00:00Z","advisories":[],"bugzilla":"965186","bugzilla_description":"CVE-2013-3560 wireshark: DoS (crash) in the MPEG DSM-CC dissector (wnpa-sec-2013-28, upstream #8481)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3560.json"},{"CVE":"CVE-2013-3559","severity":"moderate","public_date":"2013-05-17T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"965190","bugzilla_description":"CVE-2013-3559 wireshark: DoS (crash) in the DCP ETSI dissector (wnpa-sec-2013-27, upstream #8231, #8540, #8541)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3559.json"},{"CVE":"CVE-2013-3558","severity":"low","public_date":"2013-05-17T00:00:00Z","advisories":[],"bugzilla":"965192","bugzilla_description":"CVE-2013-3558 wireshark: DoS (crash) in the PPP CCP dissector (wnpa-sec-2013-26, upstream #8638)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3558.json"},{"CVE":"CVE-2013-3557","severity":"low","public_date":"2013-05-17T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"965193","bugzilla_description":"CVE-2013-3557 wireshark: DoS (crash) in the ASN.1 BER dissector (wnpa-sec-2013-25, upstream #8599)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3557.json"},{"CVE":"CVE-2013-3555","severity":"low","public_date":"2013-05-17T00:00:00Z","advisories":[],"bugzilla":"965194","bugzilla_description":"CVE-2013-3555 wireshark: DoS (crash) in the GTPv2 dissector (wnpa-sec-2013-24, upstream #8493)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3555.json"},{"CVE":"CVE-2013-3556","severity":"low","public_date":"2013-05-17T00:00:00Z","advisories":[],"bugzilla":"966054","bugzilla_description":"CVE-2013-3556 wireshark: DoS (crash) in the ASN.1 BER dissector (wnpa-sec-2013-25, upstream #8599)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3556.json"},{"CVE":"CVE-2013-3561","severity":"low","public_date":"2013-05-17T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"966331","bugzilla_description":"CVE-2013-3561 wireshark: Multiple Denial of Service flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3561.json"},{"CVE":"CVE-2013-2475","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919129","bugzilla_description":"CVE-2013-2475 wireshark: TCP dissector crash (wnpa-sec-2013-10, upstream bug 8274)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2475.json"},{"CVE":"CVE-2013-2476","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919130","bugzilla_description":"CVE-2013-2476 wireshark: Infinite loop in the HART/IP dissector (wnpa-sec-2013-11, upstream bug 8360)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2476.json"},{"CVE":"CVE-2013-2477","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919131","bugzilla_description":"CVE-2013-2477 wireshark: Crash in the CSN.1 dissector (wnpa-sec-2013-12, upstream bug 8383)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2477.json"},{"CVE":"CVE-2013-2478","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919133","bugzilla_description":"CVE-2013-2478 wireshark: Crash in the MS-MMS dissector (wnpa-sec-2013-13, upstream bug 8382)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2478.json"},{"CVE":"CVE-2013-2479","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919135","bugzilla_description":"CVE-2013-2479 wireshark: Infinite loop in the MPLS Echo dissector (wnpa-sec-2013-14, upstream bug 8039)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2479.json"},{"CVE":"CVE-2013-2480","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919137","bugzilla_description":"CVE-2013-2480 wireshark: Crash in the RTPS and RTPS2 dissectors (wnpa-sec-2013-15, upstream bug 8332)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2480.json"},{"CVE":"CVE-2013-2481","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919139","bugzilla_description":"CVE-2013-2481 wireshark: Crash in the Mount dissector (wnpa-sec-2013-16, upstream bug 8335)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2481.json"},{"CVE":"CVE-2013-2482","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919141","bugzilla_description":"CVE-2013-2482 wireshark: Infinite loop in the AMPQ dissector (wnpa-sec-2013-17, upstream bug 8337)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2482.json"},{"CVE":"CVE-2013-2483","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919142","bugzilla_description":"CVE-2013-2483 wireshark: Divide by zero in the ACN dissector (wnpa-sec-2013-18, upstream bug 8340)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2483.json"},{"CVE":"CVE-2013-2484","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919143","bugzilla_description":"CVE-2013-2484 wireshark: Crash in the CIMD dissector (wnpa-sec-2013-19, upstream bug 8346)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2484.json"},{"CVE":"CVE-2013-2485","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919144","bugzilla_description":"CVE-2013-2485 wireshark: Infinite loop in the FCSP dissector (wnpa-sec-2013-20, upstream bug 8359)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2485.json"},{"CVE":"CVE-2013-2486","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919146","bugzilla_description":"CVE-2013-2486 wireshark: Infinite loop in the RELOAD dissector (wnpa-sec-2013-21, upstream bug 8364) [A different flaw than CVE-2013-2487]","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2486.json"},{"CVE":"CVE-2013-2487","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919147","bugzilla_description":"CVE-2013-2487 wireshark: Infinite loop in the RELOAD dissector (wnpa-sec-2013-21, upstream bug 8364) [A different flaw than CVE-2013-2486]","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2487.json"},{"CVE":"CVE-2013-2488","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919148","bugzilla_description":"CVE-2013-2488 wireshark: Crash in the DTLS dissector (wnpa-sec-2013-22, upstream bug 8380)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2488.json"},{"CVE":"CVE-2013-1572","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906328","bugzilla_description":"CVE-2013-1572 wireshark: Infinite loop in the Slow Protocols dissector (wnpa-sec-2013-01, bug 8036)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1572.json"},{"CVE":"CVE-2013-1573","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906329","bugzilla_description":"CVE-2013-1573 wireshark: Infinite loop in the CSN.1 dissector (wnpa-sec-2013-01, bug 8037)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1573.json"},{"CVE":"CVE-2013-1574","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906330","bugzilla_description":"CVE-2013-1574 wireshark: Infinite loop in the Bluetooth HCI dissector (wnpa-sec-2013-01, bug 8038)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1574.json"},{"CVE":"CVE-2013-1575","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906331","bugzilla_description":"CVE-2013-1575 wireshark: Infinite loop in the R3 dissector (wnpa-sec-2013-01, bug 8040)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1575.json"},{"CVE":"CVE-2013-1576","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906332","bugzilla_description":"CVE-2013-1576 wireshark: Infinite loop in the SDP dissector (wnpa-sec-2013-01, bug 8041)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1576.json"},{"CVE":"CVE-2013-1577","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906333","bugzilla_description":"CVE-2013-1577 wireshark: Infinite loop in the SIP dissector (wnpa-sec-2013-01, bug 8042)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1577.json"},{"CVE":"CVE-2013-1578","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906335","bugzilla_description":"CVE-2013-1578 wireshark: MPLS payload starting with valid-looking ethernet address dissected twice (wnpa-sec-2013-01, bug 8043)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1578.json"},{"CVE":"CVE-2013-1579","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906337","bugzilla_description":"CVE-2013-1579 wireshark: Nested loop (crash) in the  RTPS dissector (wnpa-sec-2013-01, bug 8198)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1579.json"},{"CVE":"CVE-2013-1580","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906339","bugzilla_description":"CVE-2013-1580 wireshark: Infinite loop in the DOCSIS 3.0 CM-STATUS dissector (wnpa-sec-2013-01, bug 8199)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1580.json"},{"CVE":"CVE-2013-1581","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906342","bugzilla_description":"CVE-2013-1581 wireshark: Infinite loop in the DCP-ETSI dissector (wnpa-sec-2013-01, bug 8222)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1581.json"},{"CVE":"CVE-2013-1582","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906343","bugzilla_description":"CVE-2013-1582 wireshark: Infinite loop / crash in the CLNP dissector (wnpa-sec-2013-02, bug 7871)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1582.json"},{"CVE":"CVE-2013-1583","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906344","bugzilla_description":"CVE-2013-1583 wireshark: Invalid read (crash) in the DTN dissector (wnpa-sec-2013-03, bug 7945)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1583.json"},{"CVE":"CVE-2013-1584","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906347","bugzilla_description":"CVE-2013-1584 wireshark: Invalid read (crash) in the DTN dissector (wnpa-sec-2013-03, bug 7945) [A different issue than CVE-2013-1583]","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1584.json"},{"CVE":"CVE-2013-1585","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906348","bugzilla_description":"CVE-2013-1585 wireshark: MS-MMC dissector crash (wnpa-sec-2013-04, bug 8112)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1585.json"},{"CVE":"CVE-2013-1586","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906349","bugzilla_description":"CVE-2013-1586 wireshark: DTLS dissector crash (wnpa-sec-2013-05, bug 8111)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1586.json"},{"CVE":"CVE-2013-1587","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906350","bugzilla_description":"CVE-2013-1587 wireshark: ROHC dissector crash (wnpa-sec-2013-06, bug 7679)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1587.json"},{"CVE":"CVE-2013-1588","severity":"moderate","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906351","bugzilla_description":"CVE-2013-1588 wireshark: DCP-ETSI dissector crash (wnpa-sec-2013-07, bug 8213)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1588.json"},{"CVE":"CVE-2013-1589","severity":"moderate","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906353","bugzilla_description":"CVE-2013-1589 wireshark: Wireshark dissection engine invalid read / crash (wnpa-sec-2013-08, bug 8197)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1589.json"},{"CVE":"CVE-2013-1590","severity":"moderate","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906354","bugzilla_description":"CVE-2013-1590 wireshark: Buffer overflow in the NTLMSSP dissector (wnpa-sec-2013-09)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1590.json"},{"CVE":"CVE-2012-5602","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881701","bugzilla_description":"CVE-2012-5602 CVE-2012-6058 wireshark: DoS (infinite loop) in the ICMPv6 dissector (wnpa-sec-2012-40)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5602.json"},{"CVE":"CVE-2012-6058","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881701","bugzilla_description":"CVE-2012-5602 CVE-2012-6058 wireshark: DoS (infinite loop) in the ICMPv6 dissector (wnpa-sec-2012-40)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6058.json"},{"CVE":"CVE-2012-5601","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881706","bugzilla_description":"CVE-2012-5601 CVE-2012-6055 wireshark: DoS (infinite loop) in the 3GPP2 A11 dissector (wnpa-sec-2012-39)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5601.json"},{"CVE":"CVE-2012-6055","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881706","bugzilla_description":"CVE-2012-5601 CVE-2012-6055 wireshark: DoS (infinite loop) in the 3GPP2 A11 dissector (wnpa-sec-2012-39)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6055.json"},{"CVE":"CVE-2012-5600","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881742","bugzilla_description":"CVE-2012-5600 CVE-2012-6062 wireshark: DoS (infinite loop) in the RTCP dissector (wnpa-sec-2012-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5600.json"},{"CVE":"CVE-2012-6062","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881742","bugzilla_description":"CVE-2012-5600 CVE-2012-6062 wireshark: DoS (infinite loop) in the RTCP dissector (wnpa-sec-2012-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6062.json"},{"CVE":"CVE-2012-5599","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881748","bugzilla_description":"CVE-2012-5599 CVE-2012-6061 wireshark: DoS (infinite loop) in the WTP dissector (wnpa-sec-2012-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5599.json"},{"CVE":"CVE-2012-6061","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881748","bugzilla_description":"CVE-2012-5599 CVE-2012-6061 wireshark: DoS (infinite loop) in the WTP dissector (wnpa-sec-2012-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6061.json"},{"CVE":"CVE-2012-5598","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881771","bugzilla_description":"CVE-2012-5598 CVE-2012-6060 wireshark: DoS (infinite loop) in the iSCSI dissector (wnpa-sec-2012-36)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5598.json"},{"CVE":"CVE-2012-6060","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881771","bugzilla_description":"CVE-2012-5598 CVE-2012-6060 wireshark: DoS (infinite loop) in the iSCSI dissector (wnpa-sec-2012-36)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6060.json"},{"CVE":"CVE-2012-5597","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"881790","bugzilla_description":"CVE-2012-5597 CVE-2012-6059 wireshark: DoS (crash) in the ISAKMP dissector (wnpa-sec-2012-35)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5597.json"},{"CVE":"CVE-2012-6059","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"881790","bugzilla_description":"CVE-2012-5597 CVE-2012-6059 wireshark: DoS (crash) in the ISAKMP dissector (wnpa-sec-2012-35)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6059.json"},{"CVE":"CVE-2012-5596","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881805","bugzilla_description":"CVE-2012-5596 CVE-2012-6057 wireshark: DoS (infinite loop) in the EIGRP dissector (wnpa-sec-2012-34)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5596.json"},{"CVE":"CVE-2012-6057","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881805","bugzilla_description":"CVE-2012-5596 CVE-2012-6057 wireshark: DoS (infinite loop) in the EIGRP dissector (wnpa-sec-2012-34)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6057.json"},{"CVE":"CVE-2012-5595","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881809","bugzilla_description":"CVE-2012-5595 CVE-2012-6056 wireshark: DoS (infinite loop) in the SCTP dissector (wnpa-sec-2012-33)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5595.json"},{"CVE":"CVE-2012-6056","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881809","bugzilla_description":"CVE-2012-5595 CVE-2012-6056 wireshark: DoS (infinite loop) in the SCTP dissector (wnpa-sec-2012-33)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6056.json"},{"CVE":"CVE-2012-5594","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881816","bugzilla_description":"CVE-2012-5594 CVE-2012-6054 wireshark: DoS (infinite loop) in the sFlow dissector (wnpa-sec-2012-32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5594.json"},{"CVE":"CVE-2012-6054","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881816","bugzilla_description":"CVE-2012-5594 CVE-2012-6054 wireshark: DoS (infinite loop) in the sFlow dissector (wnpa-sec-2012-32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6054.json"},{"CVE":"CVE-2012-5593","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881822","bugzilla_description":"CVE-2012-5593 CVE-2012-6053 wireshark: DoS (infinite loop) in the USB dissector (wnpa-sec-2012-31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5593.json"},{"CVE":"CVE-2012-6053","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881822","bugzilla_description":"CVE-2012-5593 CVE-2012-6053 wireshark: DoS (infinite loop) in the USB dissector (wnpa-sec-2012-31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6053.json"},{"CVE":"CVE-2012-5592","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881855","bugzilla_description":"CVE-2012-5592 CVE-2012-6052 wireshark: pcap-ng hostname disclosure (wnpa-sec-2012-30)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5592.json"},{"CVE":"CVE-2012-6052","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881855","bugzilla_description":"CVE-2012-5592 CVE-2012-6052 wireshark: pcap-ng hostname disclosure (wnpa-sec-2012-30)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6052.json"},{"CVE":"CVE-2012-5237","severity":"low","public_date":"2012-10-02T00:00:00Z","advisories":[],"bugzilla":"862504","bugzilla_description":"CVE-2012-5237 wireshark: Infinite loop in the HSRP dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5237.json"},{"CVE":"CVE-2012-5238","severity":"low","public_date":"2012-10-02T00:00:00Z","advisories":[],"bugzilla":"862507","bugzilla_description":"CVE-2012-5238 wireshark: Application abort due to wrong variable type in PPP dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5238.json"},{"CVE":"CVE-2012-5239","severity":"low","public_date":"2012-10-02T00:00:00Z","advisories":[],"bugzilla":"862508","bugzilla_description":"CVE-2012-5239 wireshark: Infinite loop in the DRDA dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5239.json"},{"CVE":"CVE-2012-5240","severity":"moderate","public_date":"2012-10-02T00:00:00Z","advisories":[],"bugzilla":"862510","bugzilla_description":"CVE-2012-5240 wireshark: Stack-based buffer overflow in the LDP dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5240.json"},{"CVE":"CVE-2012-3548","severity":"low","public_date":"2012-08-21T00:00:00Z","advisories":[],"bugzilla":"849926","bugzilla_description":"CVE-2012-3548 wireshark (X >= 1.6.8): DoS (excessive CPU use and infinite loop) in DRDA dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3548.json"},{"CVE":"CVE-2012-4285","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:0125","RHSA-2013:1569"],"bugzilla":"848541","bugzilla_description":"CVE-2012-4285 wireshark: crash due to zero division in DCP ETSI dissector (wnpa-sec-2012-13)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4285.json"},{"CVE":"CVE-2012-4287","severity":"moderate","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848544","bugzilla_description":"CVE-2012-4287 wireshark: DoS via excessive CPU consumption in MongoDB dissector (wnpa-sec-2012-14)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4287.json"},{"CVE":"CVE-2012-4288","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"848548","bugzilla_description":"CVE-2012-4288 wireshark: DoS via excessive resource consumption in XTP dissector (wnpa-sec-2012-15)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4288.json"},{"CVE":"CVE-2012-4294","severity":"moderate","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848554","bugzilla_description":"CVE-2012-4294 CVE-2012-4295 wireshark: buffer overflow in ERF dissector (wnpa-sec-2012-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4294.json"},{"CVE":"CVE-2012-4295","severity":"moderate","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848554","bugzilla_description":"CVE-2012-4294 CVE-2012-4295 wireshark: buffer overflow in ERF dissector (wnpa-sec-2012-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4295.json"},{"CVE":"CVE-2012-4289","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:0125","RHSA-2013:1569"],"bugzilla":"848561","bugzilla_description":"CVE-2012-4289 wireshark: DoS via excessive CPU consumption in AFP dissector (wnpa-sec-2012-17)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4289.json"},{"CVE":"CVE-2012-4296","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848565","bugzilla_description":"CVE-2012-4296 wireshark: DoS via excessive CPU consumption in RTPS2 dissector (wnpa-sec-2012-18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4296.json"},{"CVE":"CVE-2012-4297","severity":"moderate","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848568","bugzilla_description":"CVE-2012-4297 wireshark: buffer overflow in GSM RLC MAC dissector (wnpa-sec-2012-19)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4297.json"},{"CVE":"CVE-2012-4291","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:0125","RHSA-2013:1569"],"bugzilla":"848572","bugzilla_description":"CVE-2012-4291 wireshark: DoS via excessive system resource consumption in CIP dissector (wnpa-sec-2012-20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4291.json"},{"CVE":"CVE-2012-4292","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"848575","bugzilla_description":"CVE-2012-4292 wireshark: crash in STUN dissector (wnpa-sec-2012-21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4292.json"},{"CVE":"CVE-2012-4293","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848577","bugzilla_description":"CVE-2012-4293 wireshark: premature exit in EtherCAT Mailbox dissector (wnpa-sec-2012-22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4293.json"},{"CVE":"CVE-2012-4290","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:0125","RHSA-2013:1569"],"bugzilla":"848578","bugzilla_description":"CVE-2012-4290 wireshark: DoS via excessive CPU consumption in CTDB dissector (wnpa-sec-2012-23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4290.json"},{"CVE":"CVE-2012-4286","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848584","bugzilla_description":"CVE-2012-4286 wireshark: crash due to zero division in pcnap-ng file parser (wnpa-sec-2012-24)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4286.json"},{"CVE":"CVE-2012-4298","severity":"moderate","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848588","bugzilla_description":"CVE-2012-4298 wireshark: buffer overflow in Ixia IxVeriWave file parser (wnpa-sec-2012-25)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4298.json"},{"CVE":"CVE-2012-4048","severity":"moderate","public_date":"2012-07-22T00:00:00Z","advisories":[],"bugzilla":"842516","bugzilla_description":"CVE-2012-4048 wireshark: Out-of-bounds memory write in PPP dissector","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4048.json"},{"CVE":"CVE-2012-4049","severity":"low","public_date":"2012-07-22T00:00:00Z","advisories":[],"bugzilla":"842518","bugzilla_description":"CVE-2012-4049 wireshark: Excessive CPU usage in NFS dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4049.json"},{"CVE":"CVE-2012-2392","severity":"low","public_date":"2012-05-21T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"824411","bugzilla_description":"CVE-2012-2392 wireshark: Infinite and large loops in ANSI MAP, ASF, IEEE 802.11, IEEE 802.3, and LTP dissectors (wnpa-sec-2012-08)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2392.json"},{"CVE":"CVE-2012-2393","severity":"low","public_date":"2012-05-21T00:00:00Z","advisories":[],"bugzilla":"824413","bugzilla_description":"CVE-2012-2393 wireshark: Memory allocation flaw in the DIAMETER dissector (wnpa-sec-2012-09)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2393.json"},{"CVE":"CVE-2012-2394","severity":"low","public_date":"2012-05-21T00:00:00Z","advisories":[],"bugzilla":"824419","bugzilla_description":"CVE-2012-2394 wireshark: Denial of service (crash) due memory alignment problem on SPARC and Itanium processors (wnpa-sec-2012-10)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2394.json"},{"CVE":"CVE-2012-3825","severity":"low","public_date":"2012-04-16T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"836960","bugzilla_description":"CVE-2012-3825 wireshark: Integer overflows in BACapp and Bluetooth HCI dissectors, leading to DoS (wnpa-sec-2012-08)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3825.json"},{"CVE":"CVE-2012-3826","severity":"low","public_date":"2012-04-16T00:00:00Z","advisories":[],"bugzilla":"836961","bugzilla_description":"CVE-2012-3826 wireshark: Integer overflows in the R3 dissector, leading to DoS (wnpa-sec-2012-08)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3826.json"},{"CVE":"CVE-2012-1596","severity":"low","public_date":"2012-02-11T00:00:00Z","advisories":[],"bugzilla":"807661","bugzilla_description":"CVE-2012-1596 wireshark: MP2T dissector memory allocation flaw","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1596.json"},{"CVE":"CVE-2012-1593","severity":"low","public_date":"2012-02-10T00:00:00Z","advisories":[],"bugzilla":"807611","bugzilla_description":"CVE-2012-1593 wireshark: NULL pointer dereference in ANSI A dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1593.json"},{"CVE":"CVE-2012-1594","severity":"low","public_date":"2012-02-08T00:00:00Z","advisories":[],"bugzilla":"807624","bugzilla_description":"CVE-2012-1594 wireshark: Infinite loop in the IEEE 802.11 dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1594.json"},{"CVE":"CVE-2012-1595","severity":"moderate","public_date":"2012-02-07T00:00:00Z","advisories":["RHSA-2012:0509"],"bugzilla":"807644","bugzilla_description":"CVE-2012-1595 wireshark: Heap-based buffer overflow when reading ERF packets from pcap/pcap-ng trace files","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1595.json"},{"CVE":"CVE-2012-0041","severity":"low","public_date":"2012-01-10T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"773726","bugzilla_description":"CVE-2012-0041 wireshark: multiple file parser vulnerabilities (wnpa-sec-2012-01)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0041.json"},{"CVE":"CVE-2012-0042","severity":"low","public_date":"2012-01-10T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"773728","bugzilla_description":"CVE-2012-0042 wireshark: NULL pointer vulnerabilities (wnpa-sec-2012-02)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0042.json"},{"CVE":"CVE-2012-0043","severity":"moderate","public_date":"2012-01-10T00:00:00Z","advisories":[],"bugzilla":"773729","bugzilla_description":"CVE-2012-0043 wireshark: RLC dissector buffer overflow (wnpa-sec-2012-03)","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0043.json"},{"CVE":"CVE-2012-0066","severity":"low","public_date":"2012-01-10T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"783360","bugzilla_description":"CVE-2012-0066 Wireshark: Dos via large buffer allocation request","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0066.json"},{"CVE":"CVE-2012-0067","severity":"low","public_date":"2012-01-10T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"783363","bugzilla_description":"CVE-2012-0067 Wireshark: Dos due to integer overflow in IPTrace capture format parser","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0067.json"},{"CVE":"CVE-2012-0068","severity":"moderate","public_date":"2012-01-10T00:00:00Z","advisories":[],"bugzilla":"783370","bugzilla_description":"CVE-2012-0068 Wireshark: Heap-buffer underflow when parsing LANalyzer packet capture files","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0068.json"},{"CVE":"CVE-2011-4102","severity":"moderate","public_date":"2011-10-21T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"750648","bugzilla_description":"CVE-2011-4102 wireshark: buffer overflow in the ERF file reader","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4102.json"},{"CVE":"CVE-2011-4101","severity":"low","public_date":"2011-10-20T00:00:00Z","advisories":[],"bugzilla":"750645","bugzilla_description":"CVE-2011-4101 wireshark: NULL pointer dereference in Infiniband dissector can cause a crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4101.json"},{"CVE":"CVE-2011-4100","severity":"low","public_date":"2011-09-16T00:00:00Z","advisories":[],"bugzilla":"750643","bugzilla_description":"CVE-2011-4100 wireshark: uninitialized variable in the CSN.1 dissector can cause a crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4100.json"},{"CVE":"CVE-2011-3266","severity":"low","public_date":"2011-07-28T00:00:00Z","advisories":[],"bugzilla":"732947","bugzilla_description":"CVE-2011-3266 Wireshark proto_tree_add_item DoS","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3266.json"},{"CVE":"CVE-2011-3360","severity":"low","public_date":"2011-07-28T00:00:00Z","advisories":[],"bugzilla":"737784","bugzilla_description":"CVE-2011-3360 Wireshark: Lua script execution vulnerability","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3360.json"},{"CVE":"CVE-2011-2698","severity":"low","public_date":"2011-06-20T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"723215","bugzilla_description":"CVE-2011-2698 wireshark: Infinite loop in the ANSI A Interface (IS-634/IOS) dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2698.json"},{"CVE":"CVE-2011-1957","severity":"low","public_date":"2011-05-31T00:00:00Z","advisories":["RHSA-2012:0509"],"bugzilla":"710021","bugzilla_description":"CVE-2011-1957 wireshark: Infinite loop in the DICOM dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1957.json"},{"CVE":"CVE-2011-1959","severity":"low","public_date":"2011-05-31T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"710039","bugzilla_description":"CVE-2011-1959 wireshark: Stack-based buffer over-read from tvbuff buffer when reading snoop capture files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1959.json"},{"CVE":"CVE-2011-2174","severity":"low","public_date":"2011-05-31T00:00:00Z","advisories":["RHSA-2012:0509"],"bugzilla":"710097","bugzilla_description":"CVE-2011-2174 wireshark: Double-free flaw by uncompressing of a zlib compressed packet","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2174.json"},{"CVE":"CVE-2011-2175","severity":"low","public_date":"2011-05-31T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"710109","bugzilla_description":"CVE-2011-2175 wireshark: Heap-based buffer over-read in Visual Networks dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2175.json"},{"CVE":"CVE-2011-1958","severity":"low","public_date":"2011-05-31T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"710184","bugzilla_description":"CVE-2011-1958 wireshark (64bit): NULL pointer dereference by processing of a corrupted Diameter dictionary file","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1958.json"},{"CVE":"CVE-2011-2597","severity":"low","public_date":"2011-05-31T00:00:00Z","advisories":["RHSA-2012:0509"],"bugzilla":"719753","bugzilla_description":"CVE-2011-2597 wireshark: infinite loop DoS in lucent/ascend file parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2597.json"},{"CVE":"CVE-2011-1590","severity":"moderate","public_date":"2011-04-15T00:00:00Z","advisories":["RHSA-2012:0509"],"bugzilla":"697741","bugzilla_description":"CVE-2011-1590 Wireshark: Use-after-free causes heap-based buffer overflow in X.509if dissector","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1590.json"},{"CVE":"CVE-2011-0024","severity":"moderate","public_date":"2011-03-21T00:00:00Z","advisories":["RHSA-2011:0370"],"bugzilla":"671331","bugzilla_description":"CVE-2011-0024 wireshark: heap-based buffer overflow in wireshark < 1.2 when reading malformed capture files","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["wireshark-0:1.0.15-2.el4","wireshark-0:1.0.15-1.el5_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0024.json"},{"CVE":"CVE-2011-1139","severity":"low","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0370","RHSA-2011:0369"],"bugzilla":"681748","bugzilla_description":"CVE-2011-1139 Wireshark: Denial Of Service (application crash) via a pcap-ng file that contains a large packet-length field","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.2.15-1.el6_0.1","wireshark-0:1.0.15-2.el4","wireshark-0:1.0.15-1.el5_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1139.json"},{"CVE":"CVE-2011-1138","severity":"low","public_date":"2011-03-01T00:00:00Z","advisories":[],"bugzilla":"681753","bugzilla_description":"CVE-2011-1138 Wireshark: Off-by-one error in the dissect_6lowpan_iphc function causes application crash (Denial Of Service)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1138.json"},{"CVE":"CVE-2011-1140","severity":"low","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0370","RHSA-2011:0369"],"bugzilla":"681754","bugzilla_description":"CVE-2011-1140 Wireshark: Multiple stack consumption vulnerabilities caused DoS via crafted SMB or CLDAP packet","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.2.15-1.el6_0.1","wireshark-0:1.0.15-2.el4","wireshark-0:1.0.15-1.el5_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1140.json"},{"CVE":"CVE-2011-1141","severity":"low","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0370","RHSA-2011:0369"],"bugzilla":"681756","bugzilla_description":"CVE-2011-1141 Wireshark: Malformed LDAP filter string causes Denial of Service via excessive memory consumption","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.2.15-1.el6_0.1","wireshark-0:1.0.15-2.el4","wireshark-0:1.0.15-1.el5_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1141.json"},{"CVE":"CVE-2011-1142","severity":"low","public_date":"2011-03-01T00:00:00Z","advisories":[],"bugzilla":"681758","bugzilla_description":"CVE-2011-1142 Wireshark: Stack consumption vulnerability in BER dissector can cause DoS","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1142.json"},{"CVE":"CVE-2011-1143","severity":"low","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2011:0370"],"bugzilla":"681760","bugzilla_description":"CVE-2011-1143 Wireshark: Null pointer dereference causing application crash when reading malformed pcap file","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["wireshark-0:1.0.15-2.el4","wireshark-0:1.0.15-1.el5_6.4","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1143.json"},{"CVE":"CVE-2011-0713","severity":"moderate","public_date":"2011-02-16T00:00:00Z","advisories":["RHSA-2011:0369"],"bugzilla":"678198","bugzilla_description":"CVE-2011-0713 Wireshark: heap-based buffer overflow when reading malformed Nokia DCT3 phone signalling traces","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["wireshark-0:1.2.15-1.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0713.json"},{"CVE":"CVE-2011-0538","severity":"low","public_date":"2011-02-03T00:00:00Z","advisories":["RHSA-2011:0370","RHSA-2011:0369"],"bugzilla":"676232","bugzilla_description":"CVE-2011-0538 Wireshark: memory corruption when reading a malformed pcap file (upstream bug #5652)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.2.15-1.el6_0.1","wireshark-0:1.0.15-2.el4","wireshark-0:1.0.15-1.el5_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0538.json"},{"CVE":"CVE-2011-0444","severity":"moderate","public_date":"2011-01-11T00:00:00Z","advisories":["RHSA-2011:0369"],"bugzilla":"669441","bugzilla_description":"CVE-2011-0444 wireshark: buffer overflow in MAC-LTE disector (upstream bug #5530)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P/","CWE":null,"affected_packages":["wireshark-0:1.2.15-1.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0444.json"},{"CVE":"CVE-2011-0445","severity":"moderate","public_date":"2011-01-11T00:00:00Z","advisories":[],"bugzilla":"669443","bugzilla_description":"CVE-2011-0445 wireshark: DoS via crafted packets to ASN.1 BER dissector (upstream bug #5537)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0445.json"},{"CVE":"CVE-2010-4538","severity":"moderate","public_date":"2010-12-31T00:00:00Z","advisories":["RHSA-2011:0013"],"bugzilla":"666894","bugzilla_description":"CVE-2010-4538 Wireshark: Stack-based array index error in ENTTEC dissector (upstream bug #5539)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-1.el4_8.3","wireshark-0:1.0.15-1.el5_5.3","wireshark-0:1.2.13-1.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4538.json"},{"CVE":"CVE-2010-4301","severity":"low","public_date":"2010-11-18T00:00:00Z","advisories":[],"bugzilla":"656437","bugzilla_description":"CVE-2010-4301 Wireshark: Infinite loop in Zigbee ZCL dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P/","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4301.json"},{"CVE":"CVE-2010-4300","severity":"moderate","public_date":"2010-11-18T00:00:00Z","advisories":["RHSA-2010:0924"],"bugzilla":"656456","bugzilla_description":"CVE-2010-4300 Wireshark: Heap-based buffer overflow in LDSS dissector","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["wireshark-0:1.2.13-1.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4300.json"},{"CVE":"CVE-2010-3445","severity":"low","public_date":"2010-09-13T00:00:00Z","advisories":["RHSA-2010:0924","RHSA-2011:0370"],"bugzilla":"639486","bugzilla_description":"CVE-2010-3445 wireshark: stack overflow in BER dissector","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-2.el4","wireshark-0:1.0.15-1.el5_6.4","wireshark-0:1.2.13-1.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3445.json"},{"CVE":"CVE-2010-2283","severity":"low","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0625"],"bugzilla":"604290","bugzilla_description":"CVE-2010-2283 wireshark: SMB dissector NULL pointer dereference","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["wireshark-0:1.0.15-1.el4_8.1","wireshark-0:1.0.15-1.el5_5.1","wireshark-0:1.0.15-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2283.json"},{"CVE":"CVE-2010-2284","severity":"low","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0625"],"bugzilla":"604292","bugzilla_description":"CVE-2010-2284 wireshark: ASN.1 BER dissector stack overrun","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-1.el4_8.1","wireshark-0:1.0.15-1.el5_5.1","wireshark-0:1.0.15-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2284.json"},{"CVE":"CVE-2010-2285","severity":null,"public_date":"2010-06-09T00:00:00Z","advisories":[],"bugzilla":"604299","bugzilla_description":"CVE-2010-2285 wireshark: SMB PIPE dissector NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2285.json"},{"CVE":"CVE-2010-2286","severity":"low","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0625"],"bugzilla":"604302","bugzilla_description":"CVE-2010-2286 wireshark: SigComp UDVM dissector infinite loop","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.0.15-1.el4_8.1","wireshark-0:1.0.15-1.el5_5.1","wireshark-0:1.0.15-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2286.json"},{"CVE":"CVE-2010-2287","severity":"moderate","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0625"],"bugzilla":"604308","bugzilla_description":"CVE-2010-2995 wireshark: SigComp UDVM dissector buffer overruns","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-1.el4_8.1","wireshark-0:1.0.15-1.el5_5.1","wireshark-0:1.0.15-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2287.json"},{"CVE":"CVE-2010-2995","severity":"moderate","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0625"],"bugzilla":"604308","bugzilla_description":"CVE-2010-2995 wireshark: SigComp UDVM dissector buffer overruns","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-1.el4_8.1","wireshark-0:1.0.15-1.el5_5.1","wireshark-0:1.0.15-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2995.json"},{"CVE":"CVE-2010-1455","severity":"low","public_date":"2010-05-05T00:00:00Z","advisories":["RHSA-2010:0625"],"bugzilla":"590613","bugzilla_description":"CVE-2010-1455 wireshark: DOCSIS dissector crash","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-1.el4_8.1","wireshark-0:1.0.15-1.el5_5.1","wireshark-0:1.0.15-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1455.json"},{"CVE":"CVE-2010-0304","severity":"moderate","public_date":"2010-01-27T00:00:00Z","advisories":["RHSA-2010:0360"],"bugzilla":"559793","bugzilla_description":"CVE-2010-0304 wireshark: crash in LWRES dissector","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.11-1.el5_5.5","wireshark-0:1.0.11-EL3.6","wireshark-0:1.0.11-1.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0304.json"},{"CVE":"CVE-2009-4377","severity":"moderate","public_date":"2009-12-17T00:00:00Z","advisories":["RHSA-2010:0360"],"bugzilla":"549578","bugzilla_description":"CVE-2009-4377 wireshark: invalid pointer dereference in SMB/SMB2 dissectors","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.11-1.el5_5.5","wireshark-0:1.0.11-EL3.6","wireshark-0:1.0.11-1.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4377.json"},{"CVE":"CVE-2009-3550","severity":"low","public_date":"2009-10-27T00:00:00Z","advisories":["RHSA-2010:0360"],"bugzilla":"531260","bugzilla_description":"CVE-2009-3550 Wireshark: NULL pointer dereference in the DCERPC over SMB packet disassembly","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["wireshark-0:1.0.11-1.el5_5.5","wireshark-0:1.0.11-EL3.6","wireshark-0:1.0.11-1.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3550.json"},{"CVE":"CVE-2009-3829","severity":"low","public_date":"2009-10-05T00:00:00Z","advisories":["RHSA-2010:0360"],"bugzilla":"532479","bugzilla_description":"CVE-2009-3829 wireshark: unsigned integer wrap vulnerability in ERF reader (VU#676492)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.11-1.el5_5.5","wireshark-0:1.0.11-EL3.6","wireshark-0:1.0.11-1.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3829.json"},{"CVE":"CVE-2009-2562","severity":"moderate","public_date":"2009-07-20T00:00:00Z","advisories":["RHSA-2010:0360"],"bugzilla":"512987","bugzilla_description":"CVE-2009-2562 Wireshark: Integer overflow in the AFS dissector","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["wireshark-0:1.0.11-1.el5_5.5","wireshark-0:1.0.11-EL3.6","wireshark-0:1.0.11-1.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2562.json"},{"CVE":"CVE-2009-2563","severity":"low","public_date":"2009-07-20T00:00:00Z","advisories":["RHSA-2010:0360"],"bugzilla":"512992","bugzilla_description":"CVE-2009-2563 Wireshark: Null-ptr dereference in the InfiniBand dissector","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.11-1.el5_5.5","wireshark-0:1.0.11-EL3.6","wireshark-0:1.0.11-1.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2563.json"},{"CVE":"CVE-2009-2560","severity":"low","public_date":"2009-07-20T00:00:00Z","advisories":["RHSA-2010:0360"],"bugzilla":"513008","bugzilla_description":"CVE-2009-2560 Wireshark: various flaws in a) RADIUS, b) Bluetooth L2CAP, c) MIOP dissectors (DoS)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.11-1.el5_5.5","wireshark-0:1.0.11-EL3.6","wireshark-0:1.0.11-1.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2560.json"},{"CVE":"CVE-2009-1829","severity":"low","public_date":"2009-05-21T00:00:00Z","advisories":["RHSA-2009:1100"],"bugzilla":"501929","bugzilla_description":"CVE-2009-1829 wireshark: PCNFSD dissector crash","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.8-1.el4_8.1","wireshark-0:1.0.8-1.el5_3.1","wireshark-0:1.0.8-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1829.json"},{"CVE":"CVE-2009-1268","severity":"low","public_date":"2009-04-08T00:00:00Z","advisories":["RHSA-2009:1100"],"bugzilla":"495119","bugzilla_description":"CVE-2009-1268 Wireshark CHAP dissector crash","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.8-1.el4_8.1","wireshark-0:1.0.8-1.el5_3.1","wireshark-0:1.0.8-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1268.json"},{"CVE":"CVE-2009-1269","severity":"low","public_date":"2009-04-08T00:00:00Z","advisories":["RHSA-2009:1100"],"bugzilla":"495121","bugzilla_description":"CVE-2009-1269 Wireshark Tektronix .rf5 file crash","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.8-1.el4_8.1","wireshark-0:1.0.8-1.el5_3.1","wireshark-0:1.0.8-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1269.json"},{"CVE":"CVE-2009-1210","severity":"moderate","public_date":"2009-03-30T00:00:00Z","advisories":["RHSA-2009:1100"],"bugzilla":"493973","bugzilla_description":"CVE-2009-1210 wireshark: format string in PROFINET dissector","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.8-1.el4_8.1","wireshark-0:1.0.8-1.el5_3.1","wireshark-0:1.0.8-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1210.json"},{"CVE":"CVE-2009-0599","severity":"moderate","public_date":"2009-02-06T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"485888","bugzilla_description":"CVE-2009-0599 wireshark: buffer overflows in NetScreen snoop file reader","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0599.json"},{"CVE":"CVE-2009-0600","severity":"low","public_date":"2009-02-06T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"485889","bugzilla_description":"CVE-2009-0600 wireshark: denial of service (application crash) via a crafted Tektronix K12 text capture file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0600.json"},{"CVE":"CVE-2008-6472","severity":"low","public_date":"2008-12-08T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"490370","bugzilla_description":"CVE-2008-6472 wireshark: DoS vulnerability in WLCCP dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-6472.json"},{"CVE":"CVE-2008-5285","severity":"low","public_date":"2008-11-22T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"472737","bugzilla_description":"CVE-2008-5285 wireshark: DoS (infinite loop) in SMTP dissector via large SMTP request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5285.json"},{"CVE":"CVE-2008-4681","severity":"low","public_date":"2008-10-20T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"468167","bugzilla_description":"CVE-2008-4681 wireshark: DoS (app crash or abort) in Bluetooth RFCOMM dissector via unknown packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4681.json"},{"CVE":"CVE-2008-4680","severity":"low","public_date":"2008-10-01T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"468166","bugzilla_description":"CVE-2008-4680 wireshark: DoS (app crash or abort) via malformed USB Request Block (URB).","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4680.json"},{"CVE":"CVE-2008-4682","severity":"low","public_date":"2008-10-01T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"468169","bugzilla_description":"CVE-2008-4682 wireshark: DoS (app abort) via a malformed  .ncf file with an unknown/unexpected packet type","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4682.json"},{"CVE":"CVE-2008-4685","severity":"low","public_date":"2008-09-13T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"468175","bugzilla_description":"CVE-2008-4685 wireshark: DoS (app crash or abort) in Q.931 dissector via certain packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4685.json"},{"CVE":"CVE-2008-3146","severity":"moderate","public_date":"2008-09-03T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"461242","bugzilla_description":"CVE-2008-3146 wireshark: multiple buffer overflows in NCP dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3146.json"},{"CVE":"CVE-2008-3932","severity":"low","public_date":"2008-09-03T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"461243","bugzilla_description":"CVE-2008-3932 wireshark: infinite loop in the NCP dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3932.json"},{"CVE":"CVE-2008-3933","severity":"low","public_date":"2008-09-03T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"461244","bugzilla_description":"CVE-2008-3933 wireshark: crash triggered by zlib-compressed packet data","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3933.json"},{"CVE":"CVE-2008-3934","severity":"low","public_date":"2008-09-03T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"461245","bugzilla_description":"CVE-2008-3934 wireshark: crash via crafted Tektronix .rf5 file","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3934.json"},{"CVE":"CVE-2008-3145","severity":"low","public_date":"2008-07-10T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"454984","bugzilla_description":"CVE-2008-3145 wireshark: crash in the packet reassembling","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3145.json"},{"CVE":"CVE-2008-3137","severity":"low","public_date":"2008-06-30T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"454970","bugzilla_description":"CVE-2008-3137 wireshark: crash in the GSM SMS dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3137.json"},{"CVE":"CVE-2008-3138","severity":"low","public_date":"2008-06-30T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"454971","bugzilla_description":"CVE-2008-3138 wireshark: unexpected exit in the PANA and KISMET dissectors","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3138.json"},{"CVE":"CVE-2008-3141","severity":"low","public_date":"2008-06-30T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"454975","bugzilla_description":"CVE-2008-3141 wireshark: memory disclosure in the RMI dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3141.json"},{"CVE":"CVE-2008-4684","severity":"low","public_date":"2008-05-16T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"468174","bugzilla_description":"CVE-2008-4684 wireshark: DoS (app crash) via certain series of packets by enabling the (1) PRP or (2) MATE post dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4684.json"},{"CVE":"CVE-2008-1563","severity":"low","public_date":"2008-03-28T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"439943","bugzilla_description":"CVE-2008-1563 wireshark: crash in SCCP dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1563.json"},{"CVE":"CVE-2008-1561","severity":"low","public_date":"2008-03-28T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"440014","bugzilla_description":"CVE-2008-1561 wireshark: crash in X.509sat and Roofnet dissectors","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1561.json"},{"CVE":"CVE-2008-1562","severity":"low","public_date":"2008-03-28T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"440015","bugzilla_description":"CVE-2008-1562 wireshark: crash in LDAP dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1562.json"},{"CVE":"CVE-2007-3393","severity":"low","public_date":"2007-05-26T00:00:00Z","advisories":["RHSA-2007:0709","RHSA-2008:0059","RHSA-2007:0710"],"bugzilla":"246221","bugzilla_description":"CVE-2007-3393 Wireshark corrupts the stack when inspecting BOOTP traffic","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.6-1.el5","wireshark-0:0.99.6-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3393.json"},{"CVE":"CVE-2008-4683","severity":"moderate","public_date":"2007-04-04T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"468171","bugzilla_description":"CVE-2008-4683 wireshark: DoS (app crash or abort) in Bluetooth ACL dissector  via a packet with an invalid length","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4683.json"},{"CVE":"CVE-2007-3391","severity":"low","public_date":"2007-03-10T00:00:00Z","advisories":["RHSA-2007:0709","RHSA-2008:0059","RHSA-2007:0710"],"bugzilla":"245797","bugzilla_description":"CVE-2007-3391 Wireshark loops infinitely when inspecting DCP ETSI traffic","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.6-1.el5","wireshark-0:0.99.6-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3391.json"},{"CVE":"CVE-2007-3390","severity":"low","public_date":"2007-03-05T00:00:00Z","advisories":["RHSA-2007:0709","RHSA-2008:0059","RHSA-2007:0710"],"bugzilla":"246225","bugzilla_description":"CVE-2007-3390 Wireshark crashes when inspecting iSeries traffic","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.6-1.el5","wireshark-0:0.99.6-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3390.json"},{"CVE":"CVE-2008-1070","severity":"low","public_date":"2007-02-27T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"435481","bugzilla_description":"CVE-2008-1070 wireshark: SCTP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1070.json"},{"CVE":"CVE-2008-1071","severity":"low","public_date":"2007-02-27T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"435482","bugzilla_description":"CVE-2008-1071 wireshark: SNMP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1071.json"},{"CVE":"CVE-2008-1072","severity":"low","public_date":"2007-02-27T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"435483","bugzilla_description":"CVE-2008-1072 wireshark: TFTP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1072.json"},{"CVE":"CVE-2007-3389","severity":"low","public_date":"2007-02-22T00:00:00Z","advisories":["RHSA-2007:0709","RHSA-2008:0059","RHSA-2007:0710"],"bugzilla":"245796","bugzilla_description":"CVE-2007-3389 Wireshark crashes when inspecting HTTP traffic","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.6-1.el5","wireshark-0:0.99.6-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3389.json"},{"CVE":"CVE-2007-3392","severity":"low","public_date":"2007-02-17T00:00:00Z","advisories":["RHSA-2007:0709","RHSA-2008:0059","RHSA-2007:0710"],"bugzilla":"246229","bugzilla_description":"CVE-2007-3392 Wireshark crashes when inspecting MMS traffic","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.6-1.el5","wireshark-0:0.99.6-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3392.json"},{"CVE":"CVE-2007-0456","severity":"low","public_date":"2007-02-01T00:00:00Z","advisories":["RHSA-2007:0066"],"bugzilla":"227140","bugzilla_description":"CVE-2007-0456 Multiple Wireshark issues (CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.5-1.el5","wireshark-0:0.99.5-EL3.1","wireshark-0:0.99.5-AS21.3","wireshark-0:0.99.5-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0456.json"},{"CVE":"CVE-2007-0457","severity":"low","public_date":"2007-02-01T00:00:00Z","advisories":["RHSA-2007:0066"],"bugzilla":"227140","bugzilla_description":"CVE-2007-0456 Multiple Wireshark issues (CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.5-1.el5","wireshark-0:0.99.5-EL3.1","wireshark-0:0.99.5-AS21.3","wireshark-0:0.99.5-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0457.json"},{"CVE":"CVE-2007-0458","severity":"low","public_date":"2007-02-01T00:00:00Z","advisories":["RHSA-2007:0066"],"bugzilla":"227140","bugzilla_description":"CVE-2007-0456 Multiple Wireshark issues (CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.5-1.el5","wireshark-0:0.99.5-EL3.1","wireshark-0:0.99.5-AS21.3","wireshark-0:0.99.5-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0458.json"},{"CVE":"CVE-2007-0459","severity":"low","public_date":"2007-02-01T00:00:00Z","advisories":["RHSA-2007:0066"],"bugzilla":"227140","bugzilla_description":"CVE-2007-0456 Multiple Wireshark issues (CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.5-1.el5","wireshark-0:0.99.5-EL3.1","wireshark-0:0.99.5-AS21.3","wireshark-0:0.99.5-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0459.json"},{"CVE":"CVE-2006-4574","severity":"moderate","public_date":"2006-10-30T00:00:00Z","advisories":["RHSA-2006:0726"],"bugzilla":"1618197","bugzilla_description":"CVE-2006-4574 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.4-EL3.1","wireshark-0:0.99.4-EL4.1","wireshark-0:0.99.4-AS21.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4574.json"},{"CVE":"CVE-2006-4805","severity":"moderate","public_date":"2006-10-30T00:00:00Z","advisories":["RHSA-2006:0726"],"bugzilla":"1618202","bugzilla_description":"CVE-2006-4805 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.4-EL3.1","wireshark-0:0.99.4-EL4.1","wireshark-0:0.99.4-AS21.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4805.json"},{"CVE":"CVE-2006-5468","severity":"moderate","public_date":"2006-10-30T00:00:00Z","advisories":["RHSA-2006:0726"],"bugzilla":"1618215","bugzilla_description":"CVE-2006-5468 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.4-EL3.1","wireshark-0:0.99.4-EL4.1","wireshark-0:0.99.4-AS21.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5468.json"},{"CVE":"CVE-2006-5469","severity":"moderate","public_date":"2006-10-30T00:00:00Z","advisories":["RHSA-2006:0726"],"bugzilla":"1618216","bugzilla_description":"CVE-2006-5469 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.4-EL3.1","wireshark-0:0.99.4-EL4.1","wireshark-0:0.99.4-AS21.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5469.json"},{"CVE":"CVE-2006-5740","severity":"moderate","public_date":"2006-10-30T00:00:00Z","advisories":["RHSA-2006:0726"],"bugzilla":"1618222","bugzilla_description":"CVE-2006-5740 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.4-EL3.1","wireshark-0:0.99.4-EL4.1","wireshark-0:0.99.4-AS21.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5740.json"},{"CVE":"CVE-2006-4330","severity":"low","public_date":"2006-08-23T00:00:00Z","advisories":["RHSA-2006:0658"],"bugzilla":"1618178","bugzilla_description":"CVE-2006-4330 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.3-EL3.2","wireshark-0:0.99.3-EL4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4330.json"},{"CVE":"CVE-2006-4331","severity":"low","public_date":"2006-08-23T00:00:00Z","advisories":["RHSA-2006:0658"],"bugzilla":"1618179","bugzilla_description":"CVE-2006-4331 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.3-EL3.2","wireshark-0:0.99.3-EL4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4331.json"},{"CVE":"CVE-2006-4333","severity":"low","public_date":"2006-08-23T00:00:00Z","advisories":["RHSA-2006:0658"],"bugzilla":"1618180","bugzilla_description":"CVE-2006-4333 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.3-EL3.2","wireshark-0:0.99.3-EL4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4333.json"},{"CVE":"CVE-2006-3627","severity":"low","public_date":"2006-07-17T00:00:00Z","advisories":["RHSA-2006:0602"],"bugzilla":"1618146","bugzilla_description":"CVE-2006-3627 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.2-EL4.1","wireshark-0:0.99.2-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3627.json"},{"CVE":"CVE-2006-3628","severity":"moderate","public_date":"2006-07-17T00:00:00Z","advisories":["RHSA-2006:0602"],"bugzilla":"1618147","bugzilla_description":"CVE-2006-3628 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.2-EL4.1","wireshark-0:0.99.2-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3628.json"},{"CVE":"CVE-2006-3629","severity":"low","public_date":"2006-07-17T00:00:00Z","advisories":["RHSA-2006:0602"],"bugzilla":"1618148","bugzilla_description":"CVE-2006-3629 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.2-EL4.1","wireshark-0:0.99.2-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3629.json"},{"CVE":"CVE-2006-3630","severity":"moderate","public_date":"2006-07-17T00:00:00Z","advisories":["RHSA-2006:0602"],"bugzilla":"1618149","bugzilla_description":"CVE-2006-3630 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.2-EL4.1","wireshark-0:0.99.2-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3630.json"},{"CVE":"CVE-2006-3631","severity":"low","public_date":"2006-07-17T00:00:00Z","advisories":["RHSA-2006:0602"],"bugzilla":"1618150","bugzilla_description":"CVE-2006-3631 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.2-EL4.1","wireshark-0:0.99.2-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3631.json"},{"CVE":"CVE-2006-3632","severity":"moderate","public_date":"2006-07-17T00:00:00Z","advisories":["RHSA-2006:0602"],"bugzilla":"1618151","bugzilla_description":"CVE-2006-3632 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.2-EL4.1","wireshark-0:0.99.2-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3632.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/arptables_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/arptables_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/arptables_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/arpwatch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/arpwatch_security_api_results.json
new file mode 100644
index 0000000..7435537
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/arpwatch_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-2653","severity":"moderate","public_date":"2012-05-24T00:00:00Z","advisories":[],"bugzilla":"825328","bugzilla_description":"CVE-2012-2653 arpwatch: fails to drop supplementary groups","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2653.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-atk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-atk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-atk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-atk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-atk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-atk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-core-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-core-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-core-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at-spi2-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at_security_api_results.json
new file mode 100644
index 0000000..70dddac
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/at_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15157","severity":"moderate","public_date":"2020-10-15T00:00:00Z","advisories":[],"bugzilla":"1888248","bugzilla_description":"CVE-2020-15157 containerd: credentials leak during image pull","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15157.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-8563","severity":"moderate","public_date":"2020-10-14T00:00:00Z","advisories":[],"bugzilla":"1886635","bugzilla_description":"CVE-2020-8563 kubernetes: Secret leaks in kube-controller-manager when using vSphere Provider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8563.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2020-8564","severity":"moderate","public_date":"2020-10-14T00:00:00Z","advisories":[],"bugzilla":"1886637","bugzilla_description":"CVE-2020-8564 kubernetes: Docker config secrets leaked when file is malformed and loglevel >= 4","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8564.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-8565","severity":"moderate","public_date":"2020-10-14T00:00:00Z","advisories":[],"bugzilla":"1886638","bugzilla_description":"CVE-2020-8565 kubernetes: Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8565.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-8566","severity":"moderate","public_date":"2020-10-14T00:00:00Z","advisories":[],"bugzilla":"1886640","bugzilla_description":"CVE-2020-8566 kubernetes: Ceph RBD adminSecrets exposed in logs when loglevel >= 4","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8566.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-13943","severity":"moderate","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1887648","bugzilla_description":"CVE-2020-13943 tomcat: Apache Tomcat HTTP/2 Request mix-up","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13943.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-26945","severity":"moderate","public_date":"2020-10-10T00:00:00Z","advisories":[],"bugzilla":"1887257","bugzilla_description":"CVE-2020-26945 mybatis: mishandles deserialization of object streams which could result in remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26945.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-8264","severity":"important","public_date":"2020-10-07T00:00:00Z","advisories":[],"bugzilla":"1886554","bugzilla_description":"CVE-2020-8264 rubygem-actionpack: possible XSS vulnerability in Action Pack in development mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8264.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"7.7"},{"CVE":"CVE-2020-7743","severity":"moderate","public_date":"2020-10-07T00:00:00Z","advisories":[],"bugzilla":"1887999","bugzilla_description":"CVE-2020-7743 mathjs: prototype pollution via the deepExtend function that runs upon configuration updates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7743.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-10763","severity":"moderate","public_date":"2020-09-30T00:00:00Z","advisories":["RHSA-2020:4143"],"bugzilla":"1845387","bugzilla_description":"CVE-2020-10763 heketi: gluster-block volume password details available in logs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["heketi-0:9.0.0-9.5.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10763.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-25644","severity":"important","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4257","RHSA-2020:4256"],"bugzilla":"1885485","bugzilla_description":"CVE-2020-25644 wildfly-openssl: memory leak per HTTP session creation in WildFly OpenSSL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el8eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el6eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el7eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25644.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24750","severity":"important","public_date":"2020-09-18T00:00:00Z","advisories":["RHSA-2020:4173"],"bugzilla":"1882310","bugzilla_description":"CVE-2020-24750 jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-26160","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1883371","bugzilla_description":"CVE-2020-26160 jwt-go: access restriction bypass vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26160.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-1968","severity":"low","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877458","bugzilla_description":"CVE-2020-1968 openssl: Information exposure when DH secret are reused across multiple TLS connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-15169","severity":"moderate","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877566","bugzilla_description":"CVE-2020-15169 rubygem-activeview: Cross-site scripting in translation helpers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15169.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-14384","severity":"important","public_date":"2020-09-03T00:00:00Z","advisories":["RHSA-2020:3731","RHSA-2020:3730"],"bugzilla":"1875176","bugzilla_description":"CVE-2020-14384 jbossweb: Incomplete fix of CVE-2020-13935 for WebSocket in JBossWeb could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jbossweb-0:7.5.31-3.Final_redhat_3.1.ep6.el7","jbossweb-0:7.5.31-3.Final_redhat_3.1.ep6.el5","jbossweb-0:7.5.31-3.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14384.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14380","severity":"important","public_date":"2020-08-31T02:44:00Z","advisories":[],"bugzilla":"1873926","bugzilla_description":"CVE-2020-14380 Satellite: Local user impersonation by Single sign-on (SSO) user leads to account takeover","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14380.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24616","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872707","bugzilla_description":"CVE-2020-24616 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24616.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14364","severity":"important","public_date":"2020-08-24T12:00:00Z","advisories":["RHSA-2020:4049","RHSA-2020:4115","RHSA-2020:4048","RHSA-2020:4059","RHSA-2020:4047","RHSA-2020:4058","RHSA-2020:4079","RHSA-2020:4167","RHSA-2020:4056","RHSA-2020:4078","RHSA-2020:4111","RHSA-2020:4055","RHSA-2020:4176","RHSA-2020:4054","RHSA-2020:4053","RHSA-2020:4052","RHSA-2020:4162","RHSA-2020:4051","RHSA-2020:4172","RHSA-2020:4050","RHSA-2020:4291","RHSA-2020:4290"],"bugzilla":"1869201","bugzilla_description":"CVE-2020-14364 QEMU: usb: out-of-bounds r/w access issue while processing usb packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["qemu-kvm-10:1.5.3-105.el7_2.20","qemu-kvm-rhev-10:2.12.0-33.el7_7.12","qemu-kvm-10:1.5.3-175.el7_9.1","qemu-kvm-10:1.5.3-160.el7_6.8","qemu-kvm-10:1.5.3-141.el7_4.11","qemu-kvm-ma-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-18.el7_6.12","qemu-kvm-2:0.12.1.2-2.448.el6_6.9","virt:rhel-8000020200910175113.f8e95b4e","qemu-kvm-ma-10:2.12.0-18.el7_6.7","qemu-kvm-10:1.5.3-167.el7_7.7","qemu-kvm-2:0.12.1.2-2.506.el6_10.8","qemu-kvm-2:0.12.1.2-2.415.el6_5.21","qemu-kvm-ma-10:2.12.0-48.el7_9.1","virt:rhel-8020020200909224913.4cda2c84","qemu-kvm-rhev-10:2.12.0-48.el7_9.1","qemu-kvm-10:1.5.3-126.el7_3.18","redhat-virtualization-host-0:4.4.2-20200930.0.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14364.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-10758","severity":"important","public_date":"2020-08-18T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3496","RHSA-2020:3497","RHSA-2020:3495","RHSA-2020:3539"],"bugzilla":"1843849","bugzilla_description":"CVE-2020-10758 keycloak: DoS by sending multiple simultaneous requests with a Content-Length header value greater than actual byte count of request body","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el6sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el7sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10758.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14352","severity":"important","public_date":"2020-08-13T00:00:00Z","advisories":["RHSA-2020:3749","RHBA-2020:3609","RHSA-2020:3658","RHSA-2020:3756"],"bugzilla":"1866498","bugzilla_description":"CVE-2020-14352 librepo: missing path validation in repomd.xml may lead to directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["librepo-0:1.9.2-2.el8_0","librepo-0:1.10.3-4.el8_1","redhat-coreos-43.82.202009181853.0","librepo-0:1.11.0-3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14352.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2020-8911","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869800","bugzilla_description":"CVE-2020-8911 aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8911.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2020-8912","severity":"low","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869801","bugzilla_description":"CVE-2020-8912 aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8912.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-1710","severity":"important","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3461","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3539","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:3637"],"bugzilla":"1793970","bugzilla_description":"CVE-2020-1710 EAP: field-name is not parsed in accordance to RFC7230","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-74->CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1710.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-16117","severity":"low","public_date":"2020-07-30T00:00:00Z","advisories":[],"bugzilla":"1862125","bugzilla_description":"CVE-2020-16117 evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16117.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-10713","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:4115","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3273","RHSA-2020:3271","RHSA-2020:4172","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1825243","bugzilla_description":"CVE-2020-10713 grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787->CWE-78","affected_packages":["grub2-1:2.02-0.86.el7_8","fwupd-0:1.1.4-7.el8_2","fwupdate-0:12-6.el7_8","grub2-1:2.02-87.el8_2","shim-0:15-14.el8_2","shim-0:15-7.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10713.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-14334","severity":"important","public_date":"2020-07-28T13:30:00Z","advisories":["RHSA-2020:4127"],"bugzilla":"1858284","bugzilla_description":"CVE-2020-14334 foreman: unauthorized cache read on RPM-based installations through local user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["foreman-0:1.24.1.28-3.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14334.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10731","severity":"important","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3410","RHSA-2020:3199","RHSA-2020:3406"],"bugzilla":"1831544","bugzilla_description":"CVE-2020-10731 openstack-tripleo-heat-templates: No sVirt protection for OSP16 VMs due to disabled SELinux","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284->CWE-1220","affected_packages":["openstack-tripleo-heat-templates-0:11.3.2-0.20200405044628.ec9970c.el8ost","openstack-tripleo-heat-templates-0:10.6.3-0.20200113185561.cf467ea.el8ost","openstack-tripleo-heat-templates-0:11.3.2-0.20200616081532.396affd.el8ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10731.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.9"},{"CVE":"CVE-2020-10715","severity":"low","public_date":"2020-07-27T00:00:00Z","advisories":["RHSA-2020:2992"],"bugzilla":"1767665","bugzilla_description":"CVE-2020-10715 openshift/console: text injection on error page via crafted url","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-web-console-0:3.11.248-1.git.1.cc96c2d.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10715.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-8557","severity":"moderate","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3520","RHSA-2020:3809","RHSA-2020:3808","RHSA-2020:3580","RHSA-2020:3519","RHSA-2020:3579"],"bugzilla":"1835977","bugzilla_description":"CVE-2020-8557 kubernetes: Node disk DOS by writing to container /etc/hosts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.3.37-202009120213.p0.git.0.dffefe4.el8","openshift4/ose-hyperkube:v4.4.0-202008250319.p0","openshift4/ose-hyperkube:v4.3.37-202009151447.p0","openshift4/ose-hyperkube:v4.5.0-202008130146.p0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8557.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-8559","severity":"moderate","public_date":"2020-07-15T00:00:00Z","advisories":[],"bugzilla":"1851422","bugzilla_description":"CVE-2020-8559 kubernetes: compromised node could escalate to cluster level privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-13935","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3303","RHSA-2020:4004","RHSA-2020:3382","RHSA-2020:3383","RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306","RHSA-2020:3305"],"bugzilla":"1857024","bugzilla_description":"CVE-2020-13935 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","tomcat-0:7.0.76-15.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el6","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-13934","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306"],"bugzilla":"1857040","bugzilla_description":"CVE-2020-13934 tomcat: OutOfMemoryException caused by HTTP/2 connection leak could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13934.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-14336","severity":"low","public_date":"2020-07-13T00:00:00Z","advisories":[],"bugzilla":"1858981","bugzilla_description":"CVE-2020-14336 openshift: restricted SCC allows pods to craft custom network packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14336.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2020-8558","severity":"moderate","public_date":"2020-07-08T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:2992","RHSA-2020:2927","RHSA-2020:3184","RHSA-2020:2926","RHSA-2020:3183","RHSA-2020:2413"],"bugzilla":"1843358","bugzilla_description":"CVE-2020-8558 kubernetes: node localhost services reachable via martian packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","atomic-openshift-0:3.11.248-1.git.0.92ee8ac.el7","openshift4/ose-hyperkube:v4.4.0-202007120152.p0","openshift4/ose-console:v4.5.0-202007012112.p0","openshift4/ose-hyperkube:v4.3.31-202007272153.p0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8558.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-14313","severity":"moderate","public_date":"2020-07-06T00:00:00Z","advisories":["RHSA-2020:3525"],"bugzilla":"1853026","bugzilla_description":"CVE-2020-14313 quay: build triggers can disclose robot account names and existence of private repos within namespaces","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["quay/quay-rhel8-operator:v3.3.1-4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14313.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-14928","severity":"low","public_date":"2020-07-04T00:00:00Z","advisories":[],"bugzilla":"1857470","bugzilla_description":"CVE-2020-14928 evolution-data-server: Response Injection via STARTTLS in SMTP and POP3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14928.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14306","severity":"important","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:2795"],"bugzilla":"1850380","bugzilla_description":"CVE-2020-14306 openshift-service-mesh/istio-rhel8-operator: control plane can deploy gateway image to any namespace","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["servicemesh-operator-0:1.1.4-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14306.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-8022","severity":"moderate","public_date":"2020-06-29T00:00:00Z","advisories":[],"bugzilla":"1852863","bugzilla_description":"CVE-2020-8022 tomcat: /usr/lib/tmpfiles.d/tomcat.conf is group-writable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8022.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2020-11996","severity":"moderate","public_date":"2020-06-25T00:00:00Z","advisories":[],"bugzilla":"1851420","bugzilla_description":"CVE-2020-11996 tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11996.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14316","severity":"important","public_date":"2020-06-23T00:00:00Z","advisories":["RHSA-2020:3194"],"bugzilla":"1848951","bugzilla_description":"CVE-2020-14316 kubevirt: VMIs can be used to access host files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.0-71","container-native-virtualization/virt-api:v2.4.0-58"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14316.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.9"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17566","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1848617","bugzilla_description":"CVE-2019-17566 batik: SSRF via \"xlink:href\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17566.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-8184","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1849141","bugzilla_description":"CVE-2020-8184 rubygem-rack: percent-encoded cookies can be used to overwrite existing prefixed cookie names","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-807","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8184.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-15780","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3218","RHSA-2020:3219","RHSA-2020:3228"],"bugzilla":"1852962","bugzilla_description":"CVE-2020-15780 kernel: lockdown: bypass through ACPI write via acpi_configfs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-193.14.3.rt13.67.el8_2","kernel-0:4.18.0-80.27.2.el8_0","kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.14.3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15780.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-14195","severity":"important","public_date":"2020-06-14T00:00:00Z","advisories":["RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848958","bugzilla_description":"CVE-2020-14195 jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14195.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10752","severity":"moderate","public_date":"2020-06-10T00:00:00Z","advisories":[],"bugzilla":"1839942","bugzilla_description":"CVE-2020-10752 openshift/openshift-apiserver: oauthtokens leaked to logs on panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10752.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-5411","severity":"important","public_date":"2020-06-10T00:00:00Z","advisories":[],"bugzilla":"1862601","bugzilla_description":"CVE-2020-5411 spring-batch-core: Jackson configuration allows code execution with unknown serialization gadgets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5411.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-0543","severity":"moderate","public_date":"2020-06-09T17:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1827165","bugzilla_description":"CVE-2020-0543 hw: Special Register Buffer Data Sampling (SRBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0543.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-10766","severity":"important","public_date":"2020-06-09T17:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845840","bugzilla_description":"CVE-2020-10766 kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10766.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10767","severity":"important","public_date":"2020-06-09T14:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845867","bugzilla_description":"CVE-2020-10767 kernel: Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10767.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10768","severity":"important","public_date":"2020-06-09T14:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845868","bugzilla_description":"CVE-2020-10768 kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10768.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-7921","severity":"moderate","public_date":"2020-06-05T00:00:00Z","advisories":[],"bugzilla":"1848563","bugzilla_description":"CVE-2020-7921 mongodb: Improper serialization permits bypass of IP based authentication restrictions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7921.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-10757","severity":"important","public_date":"2020-06-04T09:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHBA-2020:3180","RHSA-2020:3598","RHSA-2020:3221","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:3041"],"bugzilla":"1842525","bugzilla_description":"CVE-2020-10757 kernel: kernel: DAX hugepages not considered during mremap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-1062.33.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10757.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-12049","severity":"important","public_date":"2020-06-04T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3014","RHSA-2020:2894","RHSA-2020:3298","RHSA-2020:3044"],"bugzilla":"1849041","bugzilla_description":"CVE-2020-12049 dbus: denial of service via file descriptor leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-43.82.202007300301.0","dbus-1:1.12.8-10.el8_2","dbus-1:1.12.8-10.el8_1","dbus-1:1.10.24-14.el7_8","dbus-1:1.12.8-8.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12049.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-13777","severity":"important","public_date":"2020-06-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2639","RHSA-2020:2637","RHSA-2020:2638"],"bugzilla":"1843723","bugzilla_description":"CVE-2020-13777 gnutls: session resumption works without master key allowing MITM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["gnutls-0:3.6.8-9.el8_1","redhat-coreos-43.82.202007300301.0","gnutls-0:3.6.5-3.el8_0","gnutls-0:3.6.8-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13777.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-8555","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":["RHSA-2020:2594","RHSA-2020:2440","RHSA-2020:2441","RHSA-2020:2448","RHSA-2020:2449","RHSA-2020:2479"],"bugzilla":"1821583","bugzilla_description":"CVE-2020-8555 kubernetes: Server side request forgery (SSRF) in kube-controller-manager allows users to leak secret information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openshift4/ose-hyperkube:v4.3.25-202006081335","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift4/ose-hyperkube:v4.4.0-202006080610","openshift-0:4.3.25-202006060952.git.1.96c30f6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8555.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2020-10749","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:2684","RHSA-2020:2443","RHSA-2020:2592","RHSA-2020:3194","RHSA-2020:2403"],"bugzilla":"1833220","bugzilla_description":"CVE-2020-10749 containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["openshift4/ose-multus-cni:v4.5.0-202007012112.p0","containernetworking-plugins-0:0.8.3-3.el7_8","containernetworking-plugins-0:0.8.6-1.rhaos4.3.el7","openshift4/ose-container-networking-plugins-rhel7:v4.5.0-202007012112.p0","container-native-virtualization/kubevirt-ssp-operator:v2.4.0-71","container-native-virtualization/virt-api:v2.4.0-58"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10749.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.0"},{"CVE":"CVE-2020-10754","severity":"moderate","public_date":"2020-05-29T04:41:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4003","RHSA-2020:3011"],"bugzilla":"1841041","bugzilla_description":"CVE-2020-10754 NetworkManager: user configuration not honoured leaving the connection unauthenticated via insecure defaults","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287->CWE-306","affected_packages":["NetworkManager-1:1.18.8-1.el7","redhat-coreos-43.82.202007300301.0","NetworkManager-1:1.22.8-5.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10754.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-9484","severity":"important","public_date":"2020-05-20T00:00:00Z","advisories":["RHSA-2020:3017","RHSA-2020:2530","RHSA-2020:2487","RHSA-2020:2509","RHSA-2020:2483","RHSA-2020:2529","RHSA-2020:2506"],"bugzilla":"1838332","bugzilla_description":"CVE-2020-9484 tomcat: deserialization flaw in session persistence storage leading to RCE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["tomcat-0:7.0.76-12.el7_8","tomcat6-0:6.0.24-115.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9484.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-14060","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848960","bugzilla_description":"CVE-2020-14060 jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14060.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14062","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848962","bugzilla_description":"CVE-2020-14062 jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14062.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14061","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848966","bugzilla_description":"CVE-2020-14061 jackson-databind: serialization in weblogic/oracle-aqjms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14061.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-10722","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:4114","RHSA-2020:2297","RHSA-2020:2298","RHSA-2020:2683","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828867","bugzilla_description":"CVE-2020-10722 dpdk: librte_vhost Integer overflow in vhost_user_set_log_base()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["dpdk-0:18.11.8-1.el7_8","openvswitch-0:2.9.0-130.el7fdp","openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10722.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10723","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:4114","RHSA-2020:2297","RHSA-2020:2298","RHSA-2020:2683","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828874","bugzilla_description":"CVE-2020-10723 dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["dpdk-0:18.11.8-1.el7_8","openvswitch-0:2.9.0-130.el7fdp","openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10723.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10724","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2297","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828884","bugzilla_description":"CVE-2020-10724 dpdk: librte_vhost Missing inputs validation in Vhost-crypto","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10724.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2020-10725","severity":"important","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2295","RHBA-2020:2409"],"bugzilla":"1828894","bugzilla_description":"CVE-2020-10725 dpdk: librte_vhost Malicious guest could cause segfault by sending invalid Virtio descriptor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["redhat-coreos-45.82.202007062333-0","openvswitch2.13-0:2.13.0-25.el8fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10725.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2020-10726","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2295","RHBA-2020:2409"],"bugzilla":"1828898","bugzilla_description":"CVE-2020-10726 dpdk: librte_vhost VHOST_USER_GET_INFLIGHT_FD message flooding to result in a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-45.82.202007062333-0","openvswitch2.13-0:2.13.0-25.el8fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10726.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-8164","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1842634","bugzilla_description":"CVE-2020-8164 rubygem-actionpack: possible strong parameters bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8164.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-8165","severity":"important","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1843072","bugzilla_description":"CVE-2020-8165 rubygem-activesupport: potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8165.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-8167","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1843084","bugzilla_description":"CVE-2020-8167 rubygem-actionview: CSRF vulnerability in rails-ujs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8167.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-8166","severity":"low","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1843152","bugzilla_description":"CVE-2020-8166 rubygem-actionpack: ability to forge per-form CSRF tokens given a global CSRF token","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8166.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-8163","severity":"important","public_date":"2020-05-15T00:00:00Z","advisories":[],"bugzilla":"1848724","bugzilla_description":"CVE-2020-8163 rubygem-rails: potential remote code execution of user-provided local names","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8163.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12888","severity":"important","public_date":"2020-05-14T00:00:00Z","advisories":["RHSA-2020:2664","RHSA-2020:2851","RHSA-2020:3016","RHSA-2020:2665","RHSA-2020:3222","RHSA-2020:3230","RHSA-2020:3010","RHSA-2020:2831","RHSA-2020:2854","RHSA-2020:2832","RHSA-2020:3019","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1836244","bugzilla_description":"CVE-2020-12888 Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["kernel-0:3.10.0-693.71.2.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-957.56.1.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-1062.30.1.el7","kernel-0:3.10.0-1127.13.1.el7","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-327.89.1.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:3.10.0-1127.13.1.rt56.1110.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12888.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-10711","severity":"important","public_date":"2020-05-12T12:00:00Z","advisories":["RHSA-2020:2103","RHSA-2020:2125","RHSA-2020:2104","RHSA-2020:2214","RHSA-2020:2522","RHSA-2020:2203","RHSA-2020:2277","RHSA-2020:2289","RHSA-2020:2102","RHSA-2020:2242","RHSA-2020:2199","RHSA-2020:2285","RHSA-2020:2519","RHSA-2020:2429","RHBA-2020:3180","RHSA-2020:2085","RHSA-2020:2082","RHSA-2020:2291","RHSA-2020:2171"],"bugzilla":"1825116","bugzilla_description":"CVE-2020-10711 Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-514.76.1.el7","kernel-0:4.18.0-193.1.2.el8_2","kernel-rt-1:3.10.0-693.67.1.rt56.665.el6rt","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:3.10.0-327.88.1.el7","kernel-0:2.6.32-754.29.2.el6","kernel-rt-0:3.10.0-1127.8.2.rt56.1103.el7","kernel-0:3.10.0-1062.26.1.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-957.54.1.el7","kernel-rt-0:4.18.0-193.1.2.rt13.53.el8_2","kernel-0:3.10.0-1127.8.2.el7","kernel-0:3.10.0-693.67.1.el7","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10711.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-14900","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:2112","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3585","RHSA-2020:3461","RHSA-2020:3462","RHSA-2020:4252","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:3637"],"bugzilla":"1666499","bugzilla_description":"CVE-2019-14900 hibernate: SQL injection issue in Hibernate ORM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14900.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-1718","severity":"important","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:2112","RHSA-2020:2905","RHSA-2020:3197","RHSA-2020:2252","RHSA-2020:3196","RHSA-2020:2107","RHSA-2020:2108","RHSA-2020:2106"],"bugzilla":"1796756","bugzilla_description":"CVE-2020-1718 keycloak: security issue on reset credential flow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1718.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-1758","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:2112","RHSA-2020:2107","RHSA-2020:2108","RHSA-2020:2106"],"bugzilla":"1812514","bugzilla_description":"CVE-2020-1758 keycloak: improper verification of certificate with host mismatch could result in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":["rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1758.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-12825","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:3654","RHBA-2020:3609","RHSA-2020:4072"],"bugzilla":"1835377","bugzilla_description":"CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["redhat-coreos-43.82.202009181853.0","libcroco-0:0.6.12-4.el8_2.1","libcroco-0:0.6.12-6.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-8161","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":[],"bugzilla":"1838281","bugzilla_description":"CVE-2020-8161 rubygem-rack: directory traversal in Rack::Directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8161.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-1714","severity":"important","public_date":"2020-05-11T00:00:00Z","advisories":["RHSA-2020:3017","RHSA-2020:3675","RHSA-2020:2905","RHSA-2020:4252","RHSA-2020:2816","RHSA-2020:2813","RHSA-2020:2814","RHSA-2020:3678"],"bugzilla":"1705975","bugzilla_description":"CVE-2020-1714 keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["keycloak-adapter-sso7_4-eap6-0:9.0.4-1.redhat_00001.1.ep6.el7","eap7-keycloak-adapter-sso7_4-0:9.0.4-1.redhat_00001.1.el7eap","keycloak-adapter-sso7_4-eap6-0:9.0.4-1.redhat_00001.1.ep6.el6","eap7-keycloak-adapter-sso7_4-0:9.0.4-1.redhat_00001.1.el8eap","eap7-keycloak-adapter-sso7_4-0:9.0.4-1.redhat_00001.1.el6eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1714.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1724","severity":"low","public_date":"2020-05-07T00:00:00Z","advisories":["RHSA-2020:2112","RHSA-2020:2905","RHSA-2020:2252","RHSA-2020:2107","RHSA-2020:2108","RHSA-2020:2106"],"bugzilla":"1800527","bugzilla_description":"CVE-2020-1724 keycloak: problem with privacy after user logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":["rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1724.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-10693","severity":"moderate","public_date":"2020-05-05T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3461","RHSA-2020:3462","RHSA-2020:4252","RHSA-2020:3806","RHSA-2020:3638","RHSA-2020:3539","RHSA-2020:3639","RHSA-2020:3637"],"bugzilla":"1805501","bugzilla_description":"CVE-2020-10693 hibernate-validator: Improper input validation in the interpolation of constraint error messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10693.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-12657","severity":"important","public_date":"2020-05-05T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2428","RHSA-2020:2429","RHSA-2020:2427","RHSA-2020:2669","RHSA-2020:2567","RHSA-2020:2667"],"bugzilla":"1832866","bugzilla_description":"CVE-2020-12657 kernel: use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-147.20.1.el8_1","kernel-rt-0:4.18.0-193.6.3.rt13.59.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.6.3.el8_2","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12657.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-10706","severity":"moderate","public_date":"2020-04-30T00:00:00Z","advisories":[],"bugzilla":"1819011","bugzilla_description":"CVE-2020-10706 openshift/openshift-apiserver: oauth tokens not encrypted when enabling encryption of data at rest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-312","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10706.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11884","severity":"important","public_date":"2020-04-28T18:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2102","RHSA-2020:2199","RHSA-2020:2429"],"bugzilla":"1828149","bugzilla_description":"CVE-2020-11884 Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1251","affected_packages":["kernel-0:4.18.0-193.1.2.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11884.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-12243","severity":"moderate","public_date":"2020-04-28T00:00:00Z","advisories":["RHSA-2020:4041"],"bugzilla":"1833535","bugzilla_description":"CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openldap-0:2.4.44-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12243.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8203","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:3807","RHSA-2020:3370"],"bugzilla":"1857412","bugzilla_description":"CVE-2020-8203 nodejs-lodash: prototype pollution in zipObjectDeep function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","distributed-tracing/jaeger-query-rhel7:1.17.6-1","ovirt-web-ui-0:1.6.4-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2020-10716","severity":"low","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:1454"],"bugzilla":"1827300","bugzilla_description":"CVE-2020-10716 rubygem-foreman_ansible: \"User input\" entry from Job Invocation may contain sensitive data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["tfm-rubygem-foreman_ansible-0:4.0.3.5-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10716.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2020-1967","severity":"important","public_date":"2020-04-21T00:00:00Z","advisories":[],"bugzilla":"1823670","bugzilla_description":"CVE-2020-1967 openssl: Segmentation fault in SSL_check_chain causes denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1967.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10712","severity":"important","public_date":"2020-04-21T00:00:00Z","advisories":["RHSA-2020:2026","RHSA-2020:2136","RHSA-2020:2009"],"bugzilla":"1825161","bugzilla_description":"CVE-2020-10712 openshift/cluster-image-registry-operator: secrets disclosed in logs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["openshift4/ose-cluster-image-registry-operator:v4.4.0-202005121717","openshift4/ose-cluster-image-registry-operator:v4.2.32-202005050921","openshift4/ose-cluster-image-registry-operator:v4.3.19-202005041055"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10712.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L","cvss3_score":"7.0"},{"CVE":"CVE-2020-11620","severity":"important","public_date":"2020-04-07T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:3192"],"bugzilla":"1826798","bugzilla_description":"CVE-2020-11620 jackson-databind: Serialization gadgets in commons-jelly:commons-jelly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11620.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11619","severity":"important","public_date":"2020-04-06T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1826805","bugzilla_description":"CVE-2020-11619 jackson-databind: Serialization gadgets in org.springframework:spring-aop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11113","severity":"important","public_date":"2020-03-28T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3817","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821315","bugzilla_description":"CVE-2020-11113 jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11113.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11254","severity":"moderate","public_date":"2020-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:0933","RHSA-2020:2479","RHSA-2020:2413"],"bugzilla":"1819486","bugzilla_description":"CVE-2019-11254 kubernetes: Denial of service in API server via crafted YAML payloads by authorized users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-hyperkube:v4.5.0-202007100518.p0","openshift4/ose-oauth-server-rhel7:v4.5.0-202007012112.p0","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift4/ose-openshift-apiserver-rhel7:v4.3.9-202003230345"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11254.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-11501","severity":"moderate","public_date":"2020-03-27T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1998"],"bugzilla":"1821896","bugzilla_description":"CVE-2020-11501 gnutls: DTLS client hello contains a random value of all zeroes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["gnutls-0:3.6.8-10.el8_2","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11501.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-10696","severity":"important","public_date":"2020-03-26T00:00:00Z","advisories":["RHSA-2020:1926","RHSA-2020:1396","RHSA-2020:1449","RHSA-2020:1931","RHSA-2020:1932","RHSA-2020:1401","RHSA-2020:2116","RHSA-2020:2117"],"bugzilla":"1817651","bugzilla_description":"CVE-2020-10696 buildah: Crafted input tar file may lead to local file overwrite during image build process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["buildah-0:1.11.6-11.el7_8","podman-0:1.0.2-4.dev.git96ccc2e.rhaos4.1.el8","podman-0:1.6.4-10.rhaos4.3.el8","podman-0:1.6.4-18.el7_8","container-tools:2.0-8020020200420175838.28c38760","podman-0:1.4.2-6.rhaos4.2.el8","container-tools:1.0-8020020200420104655.28c38760","container-tools:rhel8-8020020200420180128.28c38760"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10696.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-1764","severity":"important","public_date":"2020-03-25T18:00:00Z","advisories":["RHSA-2020:0975"],"bugzilla":"1810383","bugzilla_description":"CVE-2020-1764 kiali: JWT cookie uses default signing key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-321","affected_packages":["openshift-service-mesh/kiali-rhel7-operator:1.0.12-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1764.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2020-1762","severity":"moderate","public_date":"2020-03-25T18:00:00Z","advisories":["RHSA-2020:0972"],"bugzilla":"1810387","bugzilla_description":"CVE-2020-1762 kiali: ignoring JWT claim fields","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613->CWE-384","affected_packages":["kiali-0:v1.0.10.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1762.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-11112","severity":"important","public_date":"2020-03-25T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821311","bugzilla_description":"CVE-2020-11112 jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11112.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11111","severity":"important","public_date":"2020-03-24T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821304","bugzilla_description":"CVE-2020-11111 jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11111.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8552","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:2992","RHBA-2020:0930","RHBA-2020:2215","RHSA-2020:1527","RHSA-2020:0933","RHSA-2020:1526","RHBA-2020:0929","RHSA-2020:2306"],"bugzilla":"1797909","bugzilla_description":"CVE-2020-8552 kubernetes: Use of unbounded 'client' label in apiserver_request_total allows for memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift4/ose-openshift-apiserver-rhel7:v4.2.34-202005252115","atomic-openshift-metrics-server-0:3.11.219-1.git.1.6fe54fb.el7","atomic-enterprise-service-catalog-1:3.11.219-1.git.1.717017c.el7","atomic-openshift-0:3.11.219-1.git.0.0c21387.el7","openshift4/ose-hyperkube:v4.2.29-202004140532","openshift-0:4.2.29-202004110432.git.0.f7d02c8.el8","openshift4/ose-service-catalog:v4.3.9-202003230345","openshift4/ose-openshift-apiserver-rhel7:v4.3.9-202003230345"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8552.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-1744","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:0947","RHSA-2020:2905","RHSA-2020:2252","RHSA-2020:0946","RHSA-2020:0945","RHSA-2020:0951"],"bugzilla":"1805792","bugzilla_description":"CVE-2020-1744 keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-sso7-keycloak-0:4.8.18-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.18-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.18-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1744.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-8551","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:1277","RHSA-2020:1276"],"bugzilla":"1816403","bugzilla_description":"CVE-2020-8551 kubernetes: crafted requests to kubelet API allow for memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.3.10-202003300855.git.0.da48c1d.el7","openshift4/ose-hyperkube:v4.3.10-202003311925"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8551.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-10968","severity":"important","public_date":"2020-03-22T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819208","bugzilla_description":"CVE-2020-10968 jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-5267","severity":"moderate","public_date":"2020-03-19T00:00:00Z","advisories":[],"bugzilla":"1831528","bugzilla_description":"CVE-2020-5267 rubygem-actionview: views that use the `j` or `escape_javascript` methods are susceptible to XSS attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5267.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-10673","severity":"important","public_date":"2020-03-18T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3585","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815470","bugzilla_description":"CVE-2020-10673 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10672","severity":"important","public_date":"2020-03-15T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815495","bugzilla_description":"CVE-2020-10672 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-1953","severity":"important","public_date":"2020-03-13T00:00:00Z","advisories":["RHSA-2020:2751","RHSA-2020:3133","RHSA-2020:3192"],"bugzilla":"1815212","bugzilla_description":"CVE-2020-1953 apache-commons-configuration: uncontrolled class instantiation when loading YAML files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1953.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2020-7598","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:3247","RHSA-2020:2852","RHSA-2020:2992","RHSA-2020:2362","RHSA-2020:2848","RHSA-2020:3042","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:3084"],"bugzilla":"1813344","bugzilla_description":"CVE-2020-7598 nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","kiali-0:v1.0.11.redhat1-1.el7","rh-nodejs12-nodejs-0:12.18.2-1.el7","servicemesh-grafana-0:6.2.2-36.el8","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:12-8010020200630154708.c27ad7f8","nodejs:10-8020020200617141353.4cda2c84","nodejs:10-8010020200617134056.c27ad7f8","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7598.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-1749","severity":"moderate","public_date":"2020-03-04T01:29:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1809833","bugzilla_description":"CVE-2020-1749 kernel: some ipv6 protocols not encrypted over ipsec tunnel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1749.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-11252","severity":"moderate","public_date":"2020-03-04T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:2413"],"bugzilla":"1860158","bugzilla_description":"CVE-2019-11252 kubernetes: credential leak in kube-controller-manager via error messages in mount failure logs and events for AzureFile and CephFS volumes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":["openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-hyperkube:v4.5.0-202007100518.p0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11252.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-10969","severity":"important","public_date":"2020-03-03T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819212","bugzilla_description":"CVE-2020-10969 jackson-databind: Serialization gadgets in javax.swing.JEditorPane","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10969.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8840","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816330","bugzilla_description":"CVE-2020-8840 jackson-databind: Lacks certain xbean-reflect/JNDI blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9546","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816332","bugzilla_description":"CVE-2020-9546 jackson-databind: Serialization gadgets in shaded-hikari-config","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9546.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9547","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816337","bugzilla_description":"CVE-2020-9547 jackson-databind: Serialization gadgets in ibatis-sqlmap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9547.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9548","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816340","bugzilla_description":"CVE-2020-9548 jackson-databind: Serialization gadgets in anteros-core","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9548.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-1745","severity":"important","public_date":"2020-02-26T00:00:00Z","advisories":["RHSA-2020:2059","RHSA-2020:2367","RHSA-2020:2511","RHSA-2020:2058","RHSA-2020:2333","RHSA-2020:0812","RHSA-2020:0813","RHSA-2020:3779","RHSA-2020:0962","RHSA-2020:2515","RHSA-2020:0961","RHSA-2020:2512","RHSA-2020:2513","RHSA-2020:0952","RHSA-2020:2905","RHSA-2020:2060","RHSA-2020:2061","RHSA-2020:3192"],"bugzilla":"1807305","bugzilla_description":"CVE-2020-1745 undertow: AJP File Read/Inclusion Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["eap7-undertow-0:2.0.28-4.SP1_redhat_00002.1.el6eap","eap7-undertow-0:2.0.28-4.SP1_redhat_00002.1.el7eap","eap7-undertow-0:2.0.28-4.SP1_redhat_00002.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1745.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2020-2732","severity":"moderate","public_date":"2020-02-24T18:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2102","RHSA-2020:4062","RHSA-2020:2171","RHSA-2020:4060"],"bugzilla":"1805135","bugzilla_description":"CVE-2020-2732 Kernel: kvm: nVMX: L2 guest may trick the L0 hypervisor to access sensitive L1 resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-193.1.2.el8_2","kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-rt-0:4.18.0-193.1.2.rt13.53.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2732.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.8"},{"CVE":"CVE-2020-1935","severity":"low","public_date":"2020-02-24T00:00:00Z","advisories":["RHSA-2020:2367","RHSA-2020:3303","RHSA-2020:1521","RHSA-2020:1520","RHSA-2020:3305"],"bugzilla":"1806835","bugzilla_description":"CVE-2020-1935 tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-17569","severity":"low","public_date":"2020-02-24T00:00:00Z","advisories":["RHSA-2020:1521","RHSA-2020:1520"],"bugzilla":"1806849","bugzilla_description":"CVE-2019-17569 tomcat: Regression in handling of Transfer-Encoding header allows for HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17569.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1938","severity":"important","public_date":"2020-02-20T00:00:00Z","advisories":["RHSA-2020:2840","RHSA-2020:2367","RHSA-2020:2783","RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:0860","RHSA-2020:1520","RHSA-2020:2781","RHSA-2020:2780","RHSA-2020:0855","RHSA-2020:0912","RHSA-2020:1479","RHSA-2020:1478","RHSA-2020:2779"],"bugzilla":"1806398","bugzilla_description":"CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["tomcat-0:7.0.76-11.el7_7","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el7","tomcat6-0:6.0.24-114.el6_10","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el6","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el5","tomcat-0:7.0.76-10.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1938.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2019-20478","severity":"moderate","public_date":"2020-02-19T00:00:00Z","advisories":[],"bugzilla":"1808088","bugzilla_description":"CVE-2019-20478 python-ruamel-yaml: code execution through load() method with an untrusted argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20478.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-1761","severity":"moderate","public_date":"2020-02-11T00:00:00Z","advisories":[],"bugzilla":"1813788","bugzilla_description":"CVE-2020-1761 openshift/console: access token stored in browser local storage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1761.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2020-1712","severity":"important","public_date":"2020-02-05T09:00:00Z","advisories":["RHSA-2020:0575","RHSA-2020:0564","RHBA-2020:0614"],"bugzilla":"1794578","bugzilla_description":"CVE-2020-1712 systemd: use-after-free when asynchronous polkit queries are performed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["systemd-0:239-18.el8_1.4","systemd-0:239-13.el8_0.7","redhat-coreos-42.81.20200224.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1712.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-8124","severity":"moderate","public_date":"2020-02-04T00:00:00Z","advisories":["RHSA-2020:0972"],"bugzilla":"1800774","bugzilla_description":"CVE-2020-8124 npmjs-url-parse: Improper validation of protocol of the returned URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["jaeger-0:v1.13.1.redhat6-1.el7","kiali-0:v1.0.10.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8124.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-3016","severity":"low","public_date":"2020-01-30T18:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3010"],"bugzilla":"1792167","bugzilla_description":"CVE-2019-3016 kernel: kvm: Information leak within a KVM guest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-200","affected_packages":["redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3016.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-18634","severity":"important","public_date":"2020-01-30T00:00:00Z","advisories":["RHSA-2020:0540","RHSA-2020:0487","RHBA-2020:0523","RHSA-2020:0509","RHSA-2020:0726"],"bugzilla":"1796944","bugzilla_description":"CVE-2019-18634 sudo: Stack based buffer overflow when pwfeedback is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["redhat-coreos-42.81.20200217.0","sudo-0:1.8.25p1-8.el8_1.1","sudo-0:1.8.25p1-4.el8_0.3","sudo-0:1.8.6p3-29.el6_10.3","sudo-0:1.8.23-4.el7_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18634.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-20445","severity":"important","public_date":"2020-01-29T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:0497","RHSA-2020:2333","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:0811","RHSA-2020:0605","RHSA-2020:0951","RHSA-2020:1445","RHSA-2020:0601","RHSA-2020:0567","RHSA-2020:0805","RHSA-2020:0606","RHSA-2020:0804","RHSA-2020:0939","RHSA-2020:0806","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1798509","bugzilla_description":"CVE-2019-20445 netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el6eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el7eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20445.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20444","severity":"important","public_date":"2020-01-29T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:0497","RHSA-2020:2333","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:0811","RHSA-2020:0605","RHSA-2020:0951","RHSA-2020:1445","RHSA-2020:0601","RHSA-2020:0567","RHSA-2020:0805","RHSA-2020:0606","RHSA-2020:0804","RHSA-2020:0939","RHSA-2020:0806","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1798524","bugzilla_description":"CVE-2019-20444 netty: HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el6eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el7eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20444.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-7955","severity":"moderate","public_date":"2020-01-29T00:00:00Z","advisories":[],"bugzilla":"1805875","bugzilla_description":"CVE-2020-7955 consul: Missing access control in HTTP API endpoints","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7955.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-7219","severity":"moderate","public_date":"2020-01-28T00:00:00Z","advisories":[],"bugzilla":"1805866","bugzilla_description":"CVE-2020-7219 consul: HTTP/RPC Services Allow Unbounded Resource Usage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7219.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7919","severity":"important","public_date":"2020-01-28T00:00:00Z","advisories":[],"bugzilla":"1808041","bugzilla_description":"CVE-2020-7919 golang: Integer overflow on 32bit architectures via crafted certificate allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7919.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-0548","severity":"low","public_date":"2020-01-27T13:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1788786","bugzilla_description":"CVE-2020-0548 hw: Vector Register Data Sampling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-200","affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0548.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2020-0549","severity":"moderate","public_date":"2020-01-27T13:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1788788","bugzilla_description":"CVE-2020-0549 hw: L1D Cache Eviction Sampling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-200","affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0549.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-12653","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHSA-2020:3432","RHSA-2020:3224","RHSA-2020:3389","RHSA-2020:3221","RHSA-2020:3232","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:2832","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1831868","bugzilla_description":"CVE-2020-12653 kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in drivers/net/wireless/marvell/mwifiex/scan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-rt-1:3.10.0-693.72.1.rt56.672.el6rt","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","kernel-0:3.10.0-327.90.2.el7","kernel-0:3.10.0-693.72.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:3.10.0-1062.31.2.el7","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12653.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12654","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHSA-2020:3432","RHSA-2020:3224","RHSA-2020:3389","RHSA-2020:3221","RHSA-2020:3232","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:2832","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1832530","bugzilla_description":"CVE-2020-12654 kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-1:3.10.0-693.72.1.rt56.672.el6rt","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","kernel-0:3.10.0-327.90.2.el7","kernel-0:3.10.0-693.72.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:3.10.0-1062.31.2.el7","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12654.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-7238","severity":"important","public_date":"2020-01-26T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:0497","RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:0811","RHSA-2020:0605","RHSA-2020:0951","RHSA-2020:1445","RHSA-2020:0601","RHSA-2020:0567","RHSA-2020:0805","RHSA-2020:0606","RHSA-2020:0804","RHSA-2020:0939","RHSA-2020:0806","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1796225","bugzilla_description":"CVE-2020-7238 netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el6eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el7eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7238.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-19355","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:0683","RHSA-2020:1280","RHSA-2020:1545"],"bugzilla":"1793277","bugzilla_description":"CVE-2019-19355 openshift/ocp-release-operator-sdk: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift4/ose-ansible-operator:v4.2.27-202003301126","openshift4/ose-ansible-operator:v4.3.5-202003020549","openshift4/ose-ansible-operator:v4.1.41-202004151639"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19355.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-19350","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1793283","bugzilla_description":"CVE-2019-19350 openshift/ansible-service-broker: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19350.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-19349","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1793284","bugzilla_description":"CVE-2019-19349 operator-framework/operator-metering: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19349.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-1705","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:0866","RHBA-2020:1278"],"bugzilla":"1793304","bugzilla_description":"CVE-2020-1705 openshift/template-service-broker-operator: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift4/ose-template-service-broker-operator:v4.3.7-202003161611","openshift4/ose-template-service-broker-operator:v4.2.27-202003301126"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1705.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-1704","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:2369"],"bugzilla":"1793305","bugzilla_description":"CVE-2020-1704 openshift-service-mesh/kiali-rhel7-operator: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift-service-mesh/kiali-rhel7-operator:1.12.12-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1704.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-1742","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1803608","bugzilla_description":"CVE-2020-1742 nmstate/kubernetes-nmstate-handler: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1742.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-10695","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1817530","bugzilla_description":"CVE-2020-10695 containers/redhat-sso-7: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10695.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-8945","severity":"moderate","public_date":"2020-01-16T00:00:00Z","advisories":["RHSA-2020:2027","RHSA-2020:2992","RHSA-2020:1234","RHSA-2020:3167","RHSA-2020:1231","RHSA-2020:1396","RHSA-2020:1230","RHSA-2020:0679","RHSA-2020:0934","RHSA-2020:1402","RHSA-2020:0863","RHSA-2020:0697","RHSA-2020:0689","RHSA-2020:1940","RHSA-2020:2413","RHSA-2020:2117","RHBA-2020:1255","RHSA-2020:0928","RHSA-2020:1937","RHSA-2020:2927"],"bugzilla":"1795838","bugzilla_description":"CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["atomic-openshift-0:3.11.248-1.git.0.92ee8ac.el7","openshift-clients-0:4.2.32-202005020632.git.1.1b0fab9.el8","skopeo-1:0.1.32-7.git1715c90.rhaos4.2.el8","podman-0:1.6.4-10.rhaos4.3.el8","openshift4/ose-docker-builder:v4.3.7-202003161611","skopeo-1:0.1.40-7.el7_8","podman-0:1.6.4-18.el7_8","openshift4/ose-cli:v4.3.7-202003161611","openshift4/ose-cli-artifacts:v4.3.7-202003161611","openshift4/ose-openshift-controller-manager-rhel7:v4.2.34-202005252115","cri-o-0:1.16.4-1.dev.rhaos4.3.git9238eee.el7","openshift4/ose-openshift-controller-manager-rhel7:v4.3.9-202003230345","cri-o-0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7","openshift-0:4.3.10-202003300855.git.0.da48c1d.el8","docker-2:1.13.1-161.git64e9980.el7_8","skopeo-1:0.1.40-4.rhaos.el8","machine-config-daemon-0:4.3.10-202003300415.git.0.56d6ae0.el8","buildah-0:1.11.6-8.el7_8","skopeo-1:0.1.32-6.git1715c90.el8_0","openshift4/ose-cluster-policy-controller-rhel7:v4.4.0-202004261927","openshift4/ose-docker-builder:v4.2.28-202004061218","openshift-clients-0:4.3.10-202003300001.git.0.e43c148.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8945.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1002104","severity":"low","public_date":"2020-01-15T00:00:00Z","advisories":[],"bugzilla":"1814953","bugzilla_description":"CVE-2018-1002104 kubernetes/ingress-nginx: /metrics endpoint exposed publicly by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002104.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-7053","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1795624","bugzilla_description":"CVE-2020-7053 kernel: use-after-free in i915_ppgtt_close in drivers/gpu/drm/i915/i915_gem_gtt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7053.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-25649","severity":"important","public_date":"2020-01-09T00:00:00Z","advisories":["RHSA-2020:4312"],"bugzilla":"1887664","bugzilla_description":"CVE-2020-25649 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25649.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-1925","severity":"moderate","public_date":"2020-01-08T00:00:00Z","advisories":[],"bugzilla":"1790309","bugzilla_description":"CVE-2020-1925 olingo-odata: Server side request forgery in AsyncResponseWrapperImpl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1925.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-20330","severity":"important","public_date":"2020-01-02T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:0939","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:0951","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1793154","bugzilla_description":"CVE-2019-20330 jackson-databind: lacks certain net.sf.ehcache blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20330.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-19922","severity":"low","public_date":"2019-12-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1493","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1792512","bugzilla_description":"CVE-2019-19922 kernel: when cpu.cfs_quota_us is used allows attackers to cause a denial of service against non-cpu-bound applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19922.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-17571","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2638"],"bugzilla":"1785616","bugzilla_description":"CVE-2019-17571 log4j: deserialization of untrusted data in SocketServer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-19232","severity":"moderate","public_date":"2019-12-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1804"],"bugzilla":"1786704","bugzilla_description":"CVE-2019-19232 sudo: attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["redhat-coreos-43.82.202007300301.0","sudo-0:1.8.29-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19232.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17563","severity":"low","public_date":"2019-12-18T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:4004","RHSA-2020:0860","RHSA-2020:1520"],"bugzilla":"1785711","bugzilla_description":"CVE-2019-17563 tomcat: session fixation when using FORM authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":["tomcat-0:7.0.76-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17563.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16782","severity":"moderate","public_date":"2019-12-18T00:00:00Z","advisories":["RHSA-2020:2480"],"bugzilla":"1789100","bugzilla_description":"CVE-2019-16782 rubygem-rack: hijack sessions by using timing attacks targeting the session id","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["cfme-gemset-0:5.11.6.0-1.el8cf","cfme-amazon-smartstate-0:5.11.6.0-1.el8cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-18801","severity":"critical","public_date":"2019-12-10T18:00:00Z","advisories":["RHSA-2019:4222"],"bugzilla":"1773444","bugzilla_description":"CVE-2019-18801 envoy: an untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":["kiali-0:v1.0.8.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18801.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-18802","severity":"important","public_date":"2019-12-10T18:00:00Z","advisories":["RHSA-2019:4222"],"bugzilla":"1773447","bugzilla_description":"CVE-2019-18802 envoy: malformed request header may cause bypass of route matchers resulting in escalation of privileges or information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kiali-0:v1.0.8.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-18838","severity":"important","public_date":"2019-12-10T18:00:00Z","advisories":["RHSA-2019:4222"],"bugzilla":"1773449","bugzilla_description":"CVE-2019-18838 envoy: malformed HTTP request without the Host header may cause abnormal termination of the Envoy process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["kiali-0:v1.0.8.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13734","severity":"important","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2019:4238","RHSA-2020:2014","RHSA-2020:0273","RHSA-2020:0229","RHBA-2020:0460","RHSA-2020:0227"],"bugzilla":"1781980","bugzilla_description":"CVE-2019-13734 sqlite: fts3: improve shadow table corruption detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sqlite-0:3.26.0-4.el8_0","chromium-browser-0:79.0.3945.79-1.el6_10","sqlite-0:3.26.0-4.el8_1","redhat-coreos-42.81.20200210.0","sqlite-0:3.7.17-8.el7_7.1","sqlite-0:3.7.17-8.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13734.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10720","severity":"moderate","public_date":"2019-12-09T14:23:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:2854","RHSA-2019:3309"],"bugzilla":"1781204","bugzilla_description":"CVE-2020-10720 kernel: use-after-free read in napi_gro_frags() in the Linux kernel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-19725","severity":"important","public_date":"2019-12-09T00:00:00Z","advisories":[],"bugzilla":"1784740","bugzilla_description":"CVE-2019-19725 sysstat: double free in check_file_actlst() in sa_common.c may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19725.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-1551","severity":"low","public_date":"2019-12-06T00:00:00Z","advisories":[],"bugzilla":"1780995","bugzilla_description":"CVE-2019-1551 openssl: Integer overflow in RSAZ modular exponentiation on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1551.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-19532","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1781821","bugzilla_description":"CVE-2019-19532 kernel: malicious USB devices can lead to multiple out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19532.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-1002102","severity":"low","public_date":"2019-12-03T00:00:00Z","advisories":[],"bugzilla":"1784602","bugzilla_description":"CVE-2018-1002102 kubernetes: improper validation of URL redirection in the Kubernetes API server allows an attacker-controlled Kubelet to redirect API server requests from streaming endpoints","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2019-14837","severity":"important","public_date":"2019-12-02T00:00:00Z","advisories":["RHSA-2019:4042","RHSA-2019:4045","RHSA-2019:4040","RHSA-2019:4041"],"bugzilla":"1730227","bugzilla_description":"CVE-2019-14837 keycloak: keycloak uses hardcoded open dummy domain for new accounts enabling information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-547","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14837.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2019-19768","severity":"important","public_date":"2019-11-29T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:2214","RHSA-2020:2522","RHSA-2020:2203","RHSA-2020:2277","RHSA-2020:2289","RHSA-2020:2242","RHSA-2020:2199","RHSA-2020:2285","RHSA-2020:2519","RHSA-2020:1966","RHSA-2020:1769","RHSA-2020:1567","RHBA-2020:3180","RHSA-2020:2085","RHSA-2020:2082","RHSA-2020:2291"],"bugzilla":"1786164","bugzilla_description":"CVE-2019-19768 kernel: use-after-free in __blk_add_trace in kernel/trace/blktrace.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-514.76.1.el7","kernel-rt-1:3.10.0-693.67.1.rt56.665.el6rt","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.18.1.el8_0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:3.10.0-327.88.1.el7","kernel-rt-0:3.10.0-1127.8.2.rt56.1103.el7","kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-193.el8","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1127.8.2.el7","kernel-0:3.10.0-693.67.1.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19768.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-18660","severity":"moderate","public_date":"2019-11-28T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:1372","RHSA-2020:0174","RHBA-2020:1450","RHSA-2020:2429","RHSA-2020:2933","RHSA-2020:1016","RHSA-2020:1984"],"bugzilla":"1777825","bugzilla_description":"CVE-2019-18660 kernel: powerpc: incomplete Spectre-RSB mitigation leads to information exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","kernel-0:2.6.32-754.31.1.el6","kernel-0:3.10.0-957.56.1.el7","redhat-coreos-42.81.20200407.0","kernel-0:3.10.0-1127.el7","kernel-alt-0:4.14.0-115.17.1.el7a","kernel-0:3.10.0-1062.21.1.el7","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18660.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2020-1728","severity":"low","public_date":"2019-11-27T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:4213","RHSA-2020:3496","RHSA-2020:3497","RHSA-2020:3495","RHSA-2020:4252","RHSA-2020:3539"],"bugzilla":"1800585","bugzilla_description":"CVE-2020-1728 keycloak: security headers missing on REST endpoints","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el6sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el7sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1728.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-10195","severity":"moderate","public_date":"2019-11-26T00:00:00Z","advisories":["RHBA-2019:4268","RHSA-2020:0378","RHSA-2020:1269"],"bugzilla":"1726223","bugzilla_description":"CVE-2019-10195 ipa: Batch API logging user passwords to /var/log/httpd/error_log","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532->CWE-200","affected_packages":["idm:DL1-8010020191127093529.6573b795","ipa-0:4.6.5-11.el7_7.4","idm:DL1-8000020200217171713.2874843d"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2020-10690","severity":"low","public_date":"2019-11-25T12:53:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1817141","bugzilla_description":"CVE-2020-10690 kernel: use-after-free in cdev_put() when a PTP device is removed while it's chardev is open","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10690.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-14895","severity":"important","public_date":"2019-11-25T08:29:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0661","RHSA-2020:0374","RHSA-2020:1493","RHSA-2020:0592","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:0653","RHSA-2020:0543","RHSA-2020:0664","RHSA-2020:0831","RHSA-2020:0609"],"bugzilla":"1774870","bugzilla_description":"CVE-2019-14895 kernel: heap-based buffer overflow in mwifiex_process_country_ie() function in drivers/net/wireless/marvell/mwifiex/sta_ioctl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:3.10.0-693.64.1.el7","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-0:3.10.0-514.73.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-0:3.10.0-957.46.1.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:4.18.0-80.16.1.el8_0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14895.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-14901","severity":"important","public_date":"2019-11-22T00:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0374","RHSA-2020:1493","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:0204"],"bugzilla":"1773519","bugzilla_description":"CVE-2019-14901 kernel: heap overflow in marvell/mwifiex/tdls.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-400|CWE-122)","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14901.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-19074","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774933","bugzilla_description":"CVE-2019-19074 kernel: a memory leak in the ath9k management function in allows local DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19073","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774937","bugzilla_description":"CVE-2019-19073 kernel: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel (DOS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19073.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-19067","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774968","bugzilla_description":"CVE-2019-19067 kernel: Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c allow for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19067.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-19065","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775000","bugzilla_description":"CVE-2019-19065 kernel: A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19065.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19059","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775042","bugzilla_description":"CVE-2019-19059 kernel: Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19059.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19058","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775047","bugzilla_description":"CVE-2019-19058 kernel: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19058.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19057","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775050","bugzilla_description":"CVE-2019-19057 kernel: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19057.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-12418","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:0860","RHSA-2020:1520"],"bugzilla":"1785699","bugzilla_description":"CVE-2019-12418 tomcat: local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12418.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-14898","severity":"moderate","public_date":"2019-11-20T00:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0374","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1774671","bugzilla_description":"CVE-2019-14898 kernel: incomplete fix  for race condition between mmget_not_zero()/get_task_mm() and core dumping in CVE-2019-11599","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-667","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14898.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-19126","severity":"low","public_date":"2019-11-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3861","RHSA-2020:1828"],"bugzilla":"1774681","bugzilla_description":"CVE-2019-19126 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glibc-0:2.17-317.el7","glibc-0:2.28-101.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-19045","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774983","bugzilla_description":"CVE-2019-19045 kernel: dos in mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19045.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.5"},{"CVE":"CVE-2019-19047","severity":"low","public_date":"2019-11-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774991","bugzilla_description":"CVE-2019-19047 kernel: dos in mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19047.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19338","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHSA-2020:1465","RHSA-2020:0839","RHSA-2020:0834","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1781514","bugzilla_description":"CVE-2019-19338 Kernel: KVM: export MSR_IA32_TSX_CTRL to guest - incomplete fix for TAA (CVE-2019-11135)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-203","affected_packages":["kernel-0:3.10.0-957.48.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-1062.18.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19338.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-12207","severity":"important","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3941","RHSA-2019:3843","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0026","RHSA-2020:0028","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3916","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1646768","bugzilla_description":"CVE-2018-12207 hw: Machine Check Error on Page Size Change (IFU)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-0154","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3840","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837"],"bugzilla":"1724393","bugzilla_description":"CVE-2019-0154 hw: Intel GPU Denial Of Service while accessing MMIO in lower power state","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0154.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-0155","severity":"important","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3887","RHSA-2019:3877","RHSA-2019:3870","RHSA-2019:3871","RHSA-2019:3872","RHSA-2019:3883","RHSA-2019:3873","RHBA-2019:3919","RHSA-2020:0204","RHSA-2019:3908","RHSA-2019:3878","RHSA-2019:3889"],"bugzilla":"1724398","bugzilla_description":"CVE-2019-0155 hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-1:3.10.0-693.60.3.rt56.655.el6rt","kernel-0:3.10.0-693.60.3.el7","kernel-0:2.6.32-754.24.3.el6","kernel-0:3.10.0-862.43.3.el7","kernel-0:3.10.0-514.70.3.el7","kernel-0:3.10.0-327.82.2.el7","kernel-rt-0:3.10.0-1062.4.3.rt56.1029.el7","kernel-0:3.10.0-1062.4.3.el7","kernel-0:4.18.0-147.0.3.el8_1","redhat-coreos-42.81.20191119.1","kernel-0:3.10.0-957.38.3.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.3.rt24.95.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0155.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-14818","severity":"moderate","public_date":"2019-11-12T15:00:00Z","advisories":["RHSA-2020:0166","RHSA-2020:0165","RHSA-2020:0168","RHSA-2020:0172","RHBA-2020:0062","RHSA-2020:0171","RHSA-2020:1735","RHSA-2020:1226"],"bugzilla":"1737327","bugzilla_description":"CVE-2019-14818 dpdk: possible memory leak leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openvswitch-0:2.9.0-124.el7fdp","dpdk-0:18.11.5-1.el7_8","openvswitch2.12-0:2.12.0-12.el7fdp","dpdk-0:19.11-4.el8","openvswitch2.12-0:2.12.0-12.el8fdp","openvswitch2.11-0:2.11.0-35.el7fdp","redhat-coreos-43.81.202001142154.0","openvswitch2.11-0:2.11.0-35.el8fdp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19807","severity":"important","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1786078","bugzilla_description":"CVE-2019-19807 kernel: use-after-free in sound/core/timer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","kernel-rt-0:3.10.0-1160.rt56.1131.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19807.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19534","severity":"moderate","public_date":"2019-11-04T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1783540","bugzilla_description":"CVE-2019-19534 kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772->CWE-200","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19534.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-10218","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:0943","RHSA-2020:1084","RHSA-2020:1878"],"bugzilla":"1763137","bugzilla_description":"CVE-2019-10218 samba: smb client vulnerable to filenames containing path separators","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.11.6-104.el7rhgs","samba-0:4.10.4-10.el7","samba-0:4.11.2-13.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10218.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-14833","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":[],"bugzilla":"1764126","bugzilla_description":"CVE-2019-14833 samba: AD DC check password script does not receive full password when non-ASCII characters are used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14833.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-14847","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":[],"bugzilla":"1764142","bugzilla_description":"CVE-2019-14847 samba: samba AD DC LDAP denial of service via dirsync","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-8726","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876612","bugzilla_description":"CVE-2019-8726 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8726.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8735","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876614","bugzilla_description":"CVE-2019-8735 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8735.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8768","severity":"low","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876616","bugzilla_description":"CVE-2019-8768 webkitgtk: Browsing history could not be deleted","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8768.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-1750","severity":"moderate","public_date":"2019-10-28T00:00:00Z","advisories":["RHSA-2020:1939","RHSA-2020:2595","RHSA-2020:2439"],"bugzilla":"1808130","bugzilla_description":"CVE-2020-1750 machine-config-operator-container: mmap stressor makes the cluster unresponsive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift4/ose-machine-config-operator:v4.2.36-202006230600.p0","openshift4/ose-machine-config-operator:v4.4.0-202005011342","openshift4/ose-machine-config-operator:v4.3.25-202006081335"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-14834","severity":"low","public_date":"2019-10-23T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1715","RHSA-2020:3878"],"bugzilla":"1764425","bugzilla_description":"CVE-2019-14834 dnsmasq: memory leak in the create_helper() function in /src/helper.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-43.82.202007300301.0","dnsmasq-0:2.79-11.el8","dnsmasq-0:2.76-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14834.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-18282","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1796360","bugzilla_description":"CVE-2019-18282 kernel: The flow_dissector feature allows device tracking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18282.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-17666","severity":"important","public_date":"2019-10-18T00:00:00Z","advisories":["RHSA-2020:0661","RHSA-2020:1353","RHSA-2020:0740","RHSA-2020:1465","RHSA-2020:1473","RHSA-2020:0834","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:1347","RHSA-2020:0543","RHSA-2020:1524","RHSA-2020:0831","RHSA-2020:0839"],"bugzilla":"1763690","bugzilla_description":"CVE-2019-17666 kernel: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel lacks a certain upper-bound check, leading to a buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-0:3.10.0-957.48.1.el7","kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.65.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:3.10.0-514.74.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-rt-1:3.10.0-693.65.1.rt56.663.el6rt","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:2.6.32-754.29.1.el6","kernel-0:3.10.0-1062.18.1.el7","kernel-0:4.18.0-80.16.1.el8_0","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17666.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2019-17596","severity":"moderate","public_date":"2019-10-17T00:00:00Z","advisories":["RHSA-2020:0101","RHSA-2020:0329"],"bugzilla":"1763310","bugzilla_description":"CVE-2019-17596 golang: invalid public key causes panic in dsa.Verify","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14287","severity":"important","public_date":"2019-10-14T15:00:00Z","advisories":["RHSA-2019:3754","RHSA-2019:3204","RHSA-2019:3941","RHSA-2019:3755","RHSA-2019:3205","RHSA-2020:0388","RHSA-2019:3694","RHSA-2019:3278","RHSA-2019:3895","RHSA-2019:3197","RHSA-2019:4191","RHSA-2019:3916","RHSA-2019:3219","RHSA-2019:3209","RHBA-2019:3248","RHBA-2019:3303"],"bugzilla":"1760531","bugzilla_description":"CVE-2019-14287 sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":["redhat-virtualization-host-0:4.2-20191022.0.el7_6","sudo-0:1.7.2p1-31.el5_11.1","sudo-0:1.8.23-3.el7_6.1","sudo-0:1.8.25p1-4.el8_0.2","sudo-0:1.8.6p3-29.el6_10.2","sudo-0:1.8.6p7-17.el7_2.2","sudo-0:1.8.19p2-12.el7_4.1","sudo-0:1.8.6p3-12.el6_5.2","redhat-coreos-42.81.20191107.0","sudo-0:1.8.19p2-14.el7_5.1","sudo-0:1.8.6p7-23.el7_3.2","sudo-0:1.8.6p3-15.el6_6.2","sudo-0:1.8.25p1-8.el8_1","sudo-0:1.8.23-4.el7_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14287.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-14820","severity":"low","public_date":"2019-10-14T00:00:00Z","advisories":["RHSA-2019:3049","RHSA-2019:3045","RHSA-2020:2067","RHSA-2019:3046","RHSA-2019:3048","RHSA-2019:3044","RHSA-2019:3050"],"bugzilla":"1649870","bugzilla_description":"CVE-2019-14820 keycloak: adapter endpoints are exposed via arbitrary URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["keycloak-adapter-sso7_3-eap6-0:4.8.13-1.Final_redhat_00001.1.ep6.el6","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","eap7-keycloak-adapter-sso7_3-0:4.8.13-1.Final_redhat_00001.1.el8eap","keycloak-adapter-sso7_3-eap6-0:4.8.13-1.Final_redhat_00001.1.ep6.el7","eap7-keycloak-adapter-sso7_3-0:4.8.13-1.Final_redhat_00001.1.el6eap","eap7-keycloak-adapter-sso7_3-0:4.8.13-1.Final_redhat_00001.1.el7eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14820.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-14832","severity":"moderate","public_date":"2019-10-14T00:00:00Z","advisories":["RHSA-2020:2366","RHSA-2019:3045","RHSA-2020:2067","RHSA-2019:3046","RHSA-2019:3044","RHSA-2019:3050"],"bugzilla":"1749487","bugzilla_description":"CVE-2019-14832 keycloak: cross-realm user access auth bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14832.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-17531","severity":"moderate","public_date":"2019-10-12T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2019:4192","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1775293","bugzilla_description":"CVE-2019-17531 jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.8.el7","pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17531.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-14838","severity":"moderate","public_date":"2019-10-11T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2020:2067","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4045","RHSA-2019:3082","RHSA-2019:3083","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0728"],"bugzilla":"1751227","bugzilla_description":"CVE-2019-14838 wildfly-core: Incorrect privileges for 'Monitor', 'Auditor' and 'Deployer' user by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","eap7-wildfly-0:7.2.4-2.SP1_redhat_00001.1.el8eap","eap7-wildfly-0:7.2.4-2.SP1_redhat_00001.1.el7eap","eap7-wildfly-0:7.2.4-2.SP1_redhat_00001.1.el6eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2019-15587","severity":"moderate","public_date":"2019-10-10T00:00:00Z","advisories":[],"bugzilla":"1774081","bugzilla_description":"CVE-2019-15587 rubygem-loofah: XXS when a crafted SVG element is republished","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15587.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-14845","severity":"moderate","public_date":"2019-10-07T00:00:00Z","advisories":["RHSA-2019:4237","RHSA-2019:4101"],"bugzilla":"1754662","bugzilla_description":"CVE-2019-14845 openshift: Container image TLS verification bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-494","affected_packages":["openshift4/ose-docker-builder:v4.1.28-201912100143","openshift4/ose-docker-builder:v4.2.10-201912022352"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14845.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2019-14854","severity":"moderate","public_date":"2019-10-07T00:00:00Z","advisories":["RHSA-2019:4091","RHSA-2019:4081","RHSA-2019:4075","RHSA-2019:4098"],"bugzilla":"1758953","bugzilla_description":"CVE-2019-14854 library-go: Secret data written to static pod logs when operator set at Debug level or higher","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["openshift4/ose-cluster-kube-apiserver-operator:v4.2.9-201911261133","openshift4/ose-cluster-kube-scheduler-operator:v4.1.27-201912030019","openshift4/ose-cluster-kube-controller-manager-operator:v4.2.10-201912022352","openshift4/ose-cluster-kube-apiserver-operator:v4.1.26-201911260202"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14854.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-17110","severity":"moderate","public_date":"2019-10-07T00:00:00Z","advisories":[],"bugzilla":"1759118","bugzilla_description":"CVE-2019-17110 kube-state-metrics: new feature exposing annotations as metrics can lead to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-19055","severity":"moderate","public_date":"2019-10-05T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775074","bugzilla_description":"CVE-2019-19055 kernel: memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c allows DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19055.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-16994","severity":"low","public_date":"2019-09-30T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1759681","bugzilla_description":"CVE-2019-16994 kernel: Memory leak in sit_init_net() in net/ipv6/sit.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16994.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-11253","severity":"important","public_date":"2019-09-28T00:00:00Z","advisories":["RHSA-2020:2796","RHSA-2020:2863","RHEA-2019:3809","RHSA-2020:2861","RHSA-2020:2795","RHSA-2019:3239","RHSA-2019:3811","RHSA-2020:2870","RHSA-2019:3905","RHSA-2019:3132","RHSA-2020:2799"],"bugzilla":"1757701","bugzilla_description":"CVE-2019-11253 kubernetes: YAML parsing vulnerable to \"Billion Laughs\" attack, allowing for remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["servicemesh-grafana-0:6.2.2-38.el8","servicemesh-grafana-0:6.4.3-11.el8","atomic-openshift-0:3.10.181-1.git.0.3ab4b3d.el7","openshift-0:4.1.20-201910101746.git.0.a80aad5.el8","servicemesh-cni-0:1.1.4-2.el8","servicemesh-0:1.0.2-3.el8","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","servicemesh-prometheus-0:2.7.2-36.el8","atomic-openshift-0:3.11.154-1.git.0.7a097ad.el7","servicemesh-prometheus-0:2.7.2-25.el8","servicemesh-cni-0:1.0.11-1.el8","servicemesh-operator-0:1.1.4-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16942","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758187","bugzilla_description":"CVE-2019-16942 jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16943","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758191","bugzilla_description":"CVE-2019-16943 jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16943.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14844","severity":"important","public_date":"2019-09-26T00:00:00Z","advisories":[],"bugzilla":"1753589","bugzilla_description":"CVE-2019-14844 krb5: reversed strlcpy() allows client to crash the KDC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14844.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-14850","severity":"low","public_date":"2019-09-20T00:00:00Z","advisories":["RHSA-2020:1167"],"bugzilla":"1757258","bugzilla_description":"CVE-2019-14850 nbdkit: denial of service due to premature opening of back-end connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406","affected_packages":["nbdkit-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14850.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-14893","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758182","bugzilla_description":"CVE-2019-14893 jackson-databind: Serialization gadgets in classes of the xalan package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-17053","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1758242","bugzilla_description":"CVE-2019-17053 kernel: unprivileged users able to create RAW sockets in AF_IEEE802154 network protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-17055","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0790","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1758248","bugzilla_description":"CVE-2019-17055 kernel: unprivileged users able to create RAW sockets in AF_ISDN network protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:2.6.32-754.28.1.el6","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17055.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-14892","severity":"moderate","public_date":"2019-09-19T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758171","bugzilla_description":"CVE-2019-14892 jackson-databind: Serialization gadgets in classes of the commons-configuration package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14892.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-11251","severity":"moderate","public_date":"2019-09-18T00:00:00Z","advisories":["RHSA-2019:3811","RHSA-2019:3266","RHSA-2019:3267","RHSA-2019:3905"],"bugzilla":"1753495","bugzilla_description":"CVE-2019-11251 kubernetes: `kubectl cp` allows for arbitrary file write via double symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["openshift4/ose-cli:v4.1.21-201910230924","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","atomic-openshift-0:3.11.154-1.git.0.7a097ad.el7","openshift-0:4.1.21-201910220952.git.0.493dbf6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-14821","severity":"important","public_date":"2019-09-17T17:00:00Z","advisories":["RHSA-2020:2851","RHSA-2019:4256","RHSA-2019:4154","RHSA-2020:0027","RHSA-2019:3978","RHSA-2019:3979","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1746708","bugzilla_description":"CVE-2019-14821 Kernel: KVM: OOB memory access via mmio ring buffer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.7.1.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:2.6.32-754.25.1.el6","kernel-rt-0:3.10.0-1062.7.1.rt56.1030.el7","kernel-alt-0:4.14.0-115.16.1.el7a","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14821.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-14826","severity":"low","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1746944","bugzilla_description":"CVE-2019-14826 ipa: Session not terminated after logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14826.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"1.8"},{"CVE":"CVE-2019-14835","severity":"important","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2019:2854","RHSA-2019:2865","RHSA-2019:2864","RHSA-2019:2863","RHSA-2019:2830","RHSA-2019:2862","RHBA-2019:3151","RHSA-2019:2869","RHSA-2019:2924","RHSA-2019:2901","RHSA-2019:2900","RHSA-2019:2867","RHSA-2019:2889","RHSA-2019:2899","RHSA-2019:2866","RHSA-2019:2829","RHSA-2019:2828","RHSA-2019:2827"],"bugzilla":"1750727","bugzilla_description":"CVE-2019-14835 kernel: vhost-net: guest to host kernel escape during migration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["redhat-coreos-42.80.20191022.0","redhat-virtualization-host-0:4.2-20190919.0.el7_6","kernel-0:2.6.32-754.23.1.el6","kernel-rt-0:3.10.0-1062.1.2.rt56.1025.el7","kernel-0:3.10.0-1062.1.2.el7","kernel-0:3.10.0-862.41.2.el7","kernel-0:3.10.0-693.59.1.el7","kernel-0:3.10.0-514.69.1.el7","kernel-0:3.10.0-327.82.1.el7","kernel-0:4.18.0-80.11.2.el8_0","kernel-0:2.6.32-504.81.2.el6","kernel-0:2.6.32-431.96.2.el6","kernel-0:3.10.0-957.35.2.el7","kernel-alt-0:4.14.0-115.13.1.el7a","kernel-rt-0:4.18.0-80.11.2.rt9.157.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14835.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-14843","severity":"important","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2974","RHSA-2019:2973","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4045","RHSA-2019:4040","RHSA-2019:4041"],"bugzilla":"1752980","bugzilla_description":"CVE-2019-14843 wildfly-security-manager: security manager authorization bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-592","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","eap7-wildfly-elytron-0:1.6.4-3.Final_redhat_00002.1.el7eap","eap7-wildfly-elytron-0:1.6.4-3.Final_redhat_00002.1.el8eap","eap7-wildfly-elytron-0:1.6.4-3.Final_redhat_00002.1.el6eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17267","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758167","bugzilla_description":"CVE-2019-17267 jackson-databind: Serialization gadgets in classes of the ehcache package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17267.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16335","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0729","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755831","bugzilla_description":"CVE-2019-16335 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16335.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14540","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755849","bugzilla_description":"CVE-2019-14540 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14540.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14822","severity":"moderate","public_date":"2019-09-13T07:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1880","RHSA-2020:3978"],"bugzilla":"1717958","bugzilla_description":"CVE-2019-14822 ibus: missing authorization allows local attacker to access the input bus of another user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["ibus-0:1.5.19-11.el8","ibus-0:1.5.17-11.el7","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14822.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-15031","severity":"moderate","public_date":"2019-09-13T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2020:1372","RHBA-2020:1450"],"bugzilla":"1760063","bugzilla_description":"CVE-2019-15031 kernel: powerpc: local user can read vector registers of other users' processes via an interrupt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","redhat-coreos-42.81.20200407.0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15031.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-5481","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792"],"bugzilla":"1749402","bugzilla_description":"CVE-2019-5481 curl: double free due to subsequent call of realloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5481.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2019-5482","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792","RHSA-2020:3916"],"bugzilla":"1749652","bugzilla_description":"CVE-2019-5482 curl: heap buffer overflow in function tftp_receive_packet()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-59.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5482.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-1547","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752090","bugzilla_description":"CVE-2019-1547 openssl: side-channel weak encryption vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-602","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-1549","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752095","bugzilla_description":"CVE-2019-1549 openssl: information disclosure in fork()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-1563","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752100","bugzilla_description":"CVE-2019-1563 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-19077","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775724","bugzilla_description":"CVE-2019-19077 kernel: memory leak in bnxt_re_create_srq function in drivers/infiniband/hw/bnxt_re/ib_verbs.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19077.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-16234","severity":"low","public_date":"2019-09-09T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1760441","bugzilla_description":"CVE-2019-16234 kernel: null pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16234.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-15030","severity":"moderate","public_date":"2019-09-06T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2020:1372","RHBA-2020:1450"],"bugzilla":"1759313","bugzilla_description":"CVE-2019-15030 kernel: powerpc: local user can read vector registers of other users' processes via a Facility Unavailable exception","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","redhat-coreos-42.81.20200407.0","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15030.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-15916","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:0740","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1750813","bugzilla_description":"CVE-2019-15916 kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15916.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15903","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3193"],"bugzilla":"1752592","bugzilla_description":"CVE-2019-15903 expat: heap-based buffer over-read via crafted XML input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-125)","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","thunderbird-0:68.2.0-1.el7_7","expat-0:2.1.0-12.el7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15903.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15921","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1760958","bugzilla_description":"CVE-2019-15921 kernel: memory leak in genl_register_family() in net/netlink/genetlink.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15921.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-15924","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1763869","bugzilla_description":"CVE-2019-15924 kernel: null pointer dereference in drivers/net/ethernet/intel/fm10k/fm10k_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15924.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15718","severity":"moderate","public_date":"2019-09-03T15:00:00Z","advisories":["RHSA-2019:3941","RHSA-2019:3592","RHBA-2019:3303"],"bugzilla":"1746057","bugzilla_description":"CVE-2019-15718 systemd: systemd-resolved allows unprivileged users to configure DNS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["redhat-coreos-42.81.20191107.0","systemd-0:239-18.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15718.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-10197","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2020:1084","RHSA-2020:1878","RHSA-2019:4023","RHSA-2019:3253"],"bugzilla":"1746225","bugzilla_description":"CVE-2019-10197 samba: Combination of parameters and permissions can allow user to escape from the share path definition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.9.8-110.el6rhs","samba-0:4.10.4-10.el7","samba-0:4.11.2-13.el8","samba-0:4.9.8-109.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-8130","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":[],"bugzilla":"1816270","bugzilla_description":"CVE-2020-8130 rake: OS Command Injection via egrep in Rake::FileList","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8130.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-8666","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876630","bugzilla_description":"CVE-2019-8666 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8666.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8671","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876632","bugzilla_description":"CVE-2019-8671 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8671.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8672","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876634","bugzilla_description":"CVE-2019-8672 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8673","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876643","bugzilla_description":"CVE-2019-8673 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8676","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876644","bugzilla_description":"CVE-2019-8676 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8676.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8677","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876645","bugzilla_description":"CVE-2019-8677 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8677.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8679","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876647","bugzilla_description":"CVE-2019-8679 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8679.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8681","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876650","bugzilla_description":"CVE-2019-8681 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8681.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8686","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876653","bugzilla_description":"CVE-2019-8686 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8686.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8687","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876655","bugzilla_description":"CVE-2019-8687 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8687.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8689","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876657","bugzilla_description":"CVE-2019-8689 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8689.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8690","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876664","bugzilla_description":"CVE-2019-8690 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8690.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-14814","severity":"moderate","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1744130","bugzilla_description":"CVE-2019-14814 kernel: heap overflow in mwifiex_set_uap_rates() function of Marvell Wifi Driver leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-14815","severity":"moderate","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHSA-2020:1070","RHBA-2020:0460","RHSA-2020:1016"],"bugzilla":"1744137","bugzilla_description":"CVE-2019-14815 kernel: heap-overflow in mwifiex_set_wmm_params() function of Marvell WiFi driver leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-1127.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-14816","severity":"important","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0661","RHSA-2020:1266","RHSA-2020:0374","RHSA-2020:1353","RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:1347","RHSA-2020:0653","RHSA-2020:0664","RHSA-2020:0204"],"bugzilla":"1744149","bugzilla_description":"CVE-2019-14816 kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.65.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-514.73.1.el7","kernel-rt-1:3.10.0-693.65.1.rt56.663.el6rt","kernel-0:3.10.0-957.46.1.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-862.51.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14816.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-10219","severity":"moderate","public_date":"2019-08-28T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445"],"bugzilla":"1738673","bugzilla_description":"CVE-2019-10219 hibernate-validator: safeHTML validator allows XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10219.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-15666","severity":"moderate","public_date":"2019-08-27T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1747334","bugzilla_description":"CVE-2019-15666 kernel: out-of-bounds array access in __xfrm_policy_unlink","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15666.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-5094","severity":"moderate","public_date":"2019-08-27T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4011","RHSA-2020:1913"],"bugzilla":"1768555","bugzilla_description":"CVE-2019-5094 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["redhat-coreos-43.82.202007300301.0","e2fsprogs-0:1.42.9-19.el7","e2fsprogs-0:1.45.4-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5094.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-14867","severity":"important","public_date":"2019-08-26T00:00:00Z","advisories":["RHBA-2019:4268","RHSA-2020:0378","RHSA-2020:1269"],"bugzilla":"1766920","bugzilla_description":"CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-94|CWE-400)","affected_packages":["idm:DL1-8010020191127093529.6573b795","ipa-0:4.6.5-11.el7_7.4","idm:DL1-8000020200217171713.2874843d"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14867.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-15090","severity":"low","public_date":"2019-08-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1743526","bugzilla_description":"CVE-2019-15090 kernel: An out-of-bounds read in drivers/scsi/qedi/qedi_dbg.c leading to crash or information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15090.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-15099","severity":"low","public_date":"2019-08-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1493","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1743560","bugzilla_description":"CVE-2019-15099 kernel: a NULL pointer dereference in drivers/net/wireless/ath/ath10k/usb.c leads to a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15099.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-10225","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743073","bugzilla_description":"CVE-2019-10225 atomic-openshift: The basic-user RBAC role allow leaking of GlusterFS StorageClass restuserkey value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-15224","severity":"important","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743940","bugzilla_description":"CVE-2019-15224 rubygem-rest-client: code-execution backdoor insterted by third party","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-348","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-20908","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3218","RHSA-2020:3219","RHSA-2020:3228"],"bugzilla":"1852942","bugzilla_description":"CVE-2019-20908 kernel: lockdown: bypass through ACPI write via efivar_ssdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-193.14.3.rt13.67.el8_2","kernel-0:4.18.0-80.27.2.el8_0","kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.14.3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20908.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-15719","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":["RHBA-2019:3674","RHBA-2019:3303"],"bugzilla":"1853350","bugzilla_description":"CVE-2020-15719 openldap: Certificate validation incorrectly matches name against CN-ID","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":["openldap-0:2.4.46-10.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15719.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-20969","severity":"important","public_date":"2019-08-16T00:00:00Z","advisories":["RHSA-2019:2964","RHSA-2019:2798","RHSA-2019:3757","RHSA-2019:4061","RHSA-2019:3758"],"bugzilla":"1746672","bugzilla_description":"CVE-2018-20969 patch: do_ed_script in pch.c does not block strings beginning with a ! character","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["patch-0:2.7.6-9.el8_0","patch-0:2.7.1-11.el7_6","patch-0:2.7.1-11.el7_5","patch-0:2.7.1-11.el7_4","patch-0:2.7.1-12.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20969.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10086","severity":"important","public_date":"2019-08-15T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2321","RHSA-2020:3587","RHSA-2020:2333","RHSA-2020:2740","RHSA-2020:1454","RHSA-2020:0057","RHSA-2019:4317","RHSA-2020:0194","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:0899","RHSA-2020:0811","RHSA-2020:1308","RHSA-2020:0951","RHBA-2020:0496","RHSA-2020:0805","RHSA-2020:0804","RHSA-2020:2619","RHSA-2020:0806","RHSA-2020:3192"],"bugzilla":"1767483","bugzilla_description":"CVE-2019-10086 apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-java-common-apache-commons-beanutils-0:1.8.3-14.14.el6","rh-maven35-apache-commons-beanutils-0:1.9.3-2.3.el7","rh-java-common-apache-commons-beanutils-0:1.8.3-14.15.el7","apache-commons-beanutils-0:1.8.3-15.el7_7","candlepin-0:2.5.22-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9513","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:3041","RHSA-2019:2692","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1735741","bugzilla_description":"CVE-2019-9513 HTTP/2: flood using PRIORITY frames results in excessive resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","rh-nginx112-nginx-1:1.12.1-3.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","kiali-0:v1.0.6.redhat1-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9515","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:2861","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3892","RHSA-2019:2766","RHSA-2020:2067","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4352","RHSA-2019:4045","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2020:3196","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2925"],"bugzilla":"1735745","bugzilla_description":"CVE-2019-9515 HTTP/2: flood using SETTINGS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","nodejs:10-8000020190911085529.f8e95b4e","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","skydive-0:0.20.5-2.el7ost","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9518","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:3892","RHSA-2020:0727","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:3196","RHSA-2019:4352","RHSA-2019:2955","RHSA-2019:2939","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2925"],"bugzilla":"1735749","bugzilla_description":"CVE-2019-9518 HTTP/2: flood using empty frames results in excessive resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nodejs:10-8000020190911085529.f8e95b4e","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11250","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:4087","RHSA-2019:4052"],"bugzilla":"1740434","bugzilla_description":"CVE-2019-11250 kubernetes: Bearer tokens written to logs at high verbosity levels (>= 7)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["atomic-openshift-0:3.11.157-1.git.0.dfe38da.el7","openshift-0:4.1.27-201912021146.git.0.a40116f.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11250.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-9511","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3932","RHSA-2019:2799","RHSA-2020:2067","RHSA-2019:2775","RHSA-2019:3041","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4021","RHSA-2019:2692","RHSA-2020:1445","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2020:3192","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741860","bugzilla_description":"CVE-2019-9511 HTTP/2: large amount of data requests leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","kiali-0:v1.0.6.redhat1-1.el7","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9516","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741864","bugzilla_description":"CVE-2019-9516 HTTP/2: 0-length headers lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9517","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:2893","RHSA-2019:3932","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2955","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741868","bugzilla_description":"CVE-2019-9517 HTTP/2: request for large response leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","httpd:2.4-8000020190829150747.f8e95b4e","nodejs:10-8000020190911085529.f8e95b4e","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9517.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15058","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":[],"bugzilla":"1816324","bugzilla_description":"CVE-2019-15058 stbi: heap-based buffer overflow in stbi__tga_load function in stb_image.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15058.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2019-9506","severity":"important","public_date":"2019-08-10T09:00:00Z","advisories":["RHSA-2019:3217","RHSA-2019:3089","RHSA-2020:1460","RHSA-2019:2975","RHSA-2019:3076","RHSA-2019:3055","RHSA-2019:3187","RHSA-2019:3220","RHSA-2019:3231","RHSA-2019:3165","RHSA-2020:0204","RHSA-2019:3218","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1727857","bugzilla_description":"CVE-2019-9506 hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["kernel-alt-0:4.14.0-115.14.1.el7a","kernel-0:3.10.0-957.38.1.el7","kernel-0:3.10.0-862.43.1.el7","kernel-0:3.10.0-514.70.1.el7","kernel-0:3.10.0-693.60.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","kernel-rt-1:3.10.0-693.60.1.rt56.654.el6rt","redhat-coreos-42.81.20191107.0","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:3.10.0-327.86.1.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.0"},{"CVE":"CVE-2019-14825","severity":"low","public_date":"2019-08-09T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1739485","bugzilla_description":"CVE-2019-14825 katello: registry credentials are captured in plain text during repository discovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["katello-0:3.12.0-2.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14825.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2019-10744","severity":"important","public_date":"2019-08-09T00:00:00Z","advisories":["RHSA-2020:2819","RHSA-2019:3024","RHSA-2020:2362"],"bugzilla":"1739497","bugzilla_description":"CVE-2019-10744 nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ovirt-web-ui-0:1.6.0-1.el7ev","servicemesh-grafana-0:6.2.2-36.el8","jaeger-0:v1.13.1.redhat7-1.el7","distributed-tracing/jaeger-query-rhel7:1.17.2-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10744.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2019-10223","severity":"moderate","public_date":"2019-08-09T00:00:00Z","advisories":[],"bugzilla":"1740431","bugzilla_description":"CVE-2019-10223 kube-state-metrics: annotations exposed as metrics in combination with `kubectl` can allow for exposure of secrets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10223.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-11248","severity":"moderate","public_date":"2019-08-07T00:00:00Z","advisories":[],"bugzilla":"1738368","bugzilla_description":"CVE-2019-11248 kubernetes: /debug/pprof endpoint exposed on kubelet's healthz port","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11248.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-1125","severity":"moderate","public_date":"2019-08-06T17:00:00Z","advisories":["RHSA-2019:2476","RHSA-2019:2696","RHSA-2019:2695","RHSA-2019:2473","RHSA-2019:2975","RHSA-2019:2600","RHSA-2019:2411","RHSA-2019:2730","RHSA-2019:3220","RHSA-2019:3011","RHBA-2019:3151","RHSA-2019:2900","RHSA-2019:2405","RHSA-2019:2899","RHSA-2019:2609","RHBA-2019:3248"],"bugzilla":"1724389","bugzilla_description":"CVE-2019-1125 kernel: hw: Spectre SWAPGS gadget vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":["kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0","redhat-virtualization-host-0:4.2-20191022.0.el7_6","kernel-0:3.10.0-957.38.1.el7","kernel-0:3.10.0-862.43.1.el7","redhat-coreos-42.80.20191022.0","kernel-0:2.6.32-431.96.1.el6","kernel-0:2.6.32-754.18.2.el6","kernel-0:4.18.0-80.7.2.el8_0","kernel-0:2.6.32-504.80.2.el6","kernel-0:3.10.0-514.69.1.el7","kernel-0:3.10.0-327.82.1.el7","kernel-rt-0:3.10.0-1062.1.1.rt56.1024.el7","kernel-0:3.10.0-693.58.1.el7","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:3.10.0-1062.1.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-19527","severity":"moderate","public_date":"2019-08-06T00:00:00Z","advisories":["RHSA-2020:4236","RHSA-2020:1378","RHSA-2020:3221","RHSA-2020:1372","RHSA-2020:3220","RHBA-2020:1450"],"bugzilla":"1783498","bugzilla_description":"CVE-2019-19527 kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-147.8.1.rt24.101.el8_1","kernel-0:3.10.0-1062.36.1.el7","kernel-0:4.18.0-147.8.1.el8_1","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","redhat-coreos-42.81.20200407.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19527.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-11247","severity":"moderate","public_date":"2019-08-05T00:00:00Z","advisories":["RHBA-2019:2816","RHSA-2019:2769","RHSA-2019:2504","RHSA-2019:2690"],"bugzilla":"1732192","bugzilla_description":"CVE-2019-11247 kubernetes: API server allows access to cluster-scoped custom resources as if resources were namespaced","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["openshift-0:4.1.10-201908060758.git.0.d81afa6.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","atomic-openshift-0:3.11.146-1.git.0.4aab273.el7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11247.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-11249","severity":"moderate","public_date":"2019-08-05T00:00:00Z","advisories":["RHSA-2019:3239","RHSA-2019:3811","RHBA-2019:2794","RHBA-2019:2816"],"bugzilla":"1737651","bugzilla_description":"CVE-2019-11249 kubernetes: Incomplete fixes for CVE-2019-1002101 and CVE-2019-11246, kubectl cp potential directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["atomic-openshift-0:3.10.181-1.git.0.3ab4b3d.el7","openshift-0:4.1.16-201909090609.git.0.2f97059.el8","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","atomic-openshift-0:3.11.146-1.git.0.4aab273.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11249.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-16167","severity":"low","public_date":"2019-08-03T00:00:00Z","advisories":[],"bugzilla":"1768970","bugzilla_description":"CVE-2019-16167 sysstat: memory corruption due to an integer overflow in remap_struct in sa_common.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16167.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15221","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1070","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1749974","bugzilla_description":"CVE-2019-15221 kernel: Null pointer dereference in the sound/usb/line6/pcm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","kernel-rt-0:3.10.0-1127.rt56.1093.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15221.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15223","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1749976","bugzilla_description":"CVE-2019-15223 kernel: Null pointer dereference in the sound/usb/line6/driver.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15223.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-14439","severity":"moderate","public_date":"2019-07-30T00:00:00Z","advisories":["RHSA-2019:3200","RHSA-2020:0983"],"bugzilla":"1752962","bugzilla_description":"CVE-2019-14439 jackson-databind: Polymorphic typing issue related to logback/JNDI","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14439.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-10207","severity":"moderate","public_date":"2019-07-29T13:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1733874","bugzilla_description":"CVE-2019-10207 kernel: null-pointer dereference in hci_uart_set_flow_control","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-13638","severity":"important","public_date":"2019-07-29T00:00:00Z","advisories":["RHSA-2019:2964","RHSA-2019:2798","RHSA-2019:3757","RHSA-2019:4061","RHSA-2019:3758"],"bugzilla":"1733916","bugzilla_description":"CVE-2019-13638 patch: OS shell command injection when processing crafted patch files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["patch-0:2.7.6-9.el8_0","patch-0:2.7.1-11.el7_6","patch-0:2.7.1-11.el7_5","patch-0:2.7.1-11.el7_4","patch-0:2.7.1-12.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13638.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-20633","severity":"low","public_date":"2019-07-28T00:00:00Z","advisories":[],"bugzilla":"1818934","bugzilla_description":"CVE-2019-20633 patch: double free in another_hunk function in pch.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20633.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13057","severity":"moderate","public_date":"2019-07-25T00:00:00Z","advisories":[],"bugzilla":"1730472","bugzilla_description":"CVE-2019-13057 openldap: Information disclosure issue in slapd component","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13057.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10184","severity":"low","public_date":"2019-07-24T00:00:00Z","advisories":["RHSA-2019:3045","RHSA-2020:0727","RHSA-2019:3046","RHSA-2019:2935","RHSA-2019:2998","RHSA-2019:3044","RHSA-2019:2938","RHSA-2020:0983","RHSA-2019:2937","RHSA-2019:3050","RHSA-2019:2936"],"bugzilla":"1713068","bugzilla_description":"CVE-2019-10184 undertow: Information leak in requests for directories without trailing slashes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10184.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-13565","severity":"moderate","public_date":"2019-07-24T00:00:00Z","advisories":[],"bugzilla":"1730477","bugzilla_description":"CVE-2019-13565 openldap: ACL restrictions bypass due to sasl_ssf value being set permanently","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13565.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-13636","severity":"moderate","public_date":"2019-07-24T00:00:00Z","advisories":["RHSA-2020:1852"],"bugzilla":"1732781","bugzilla_description":"CVE-2019-13636 patch: the following of symlinks in inp.c and util.c is mishandled in cases other than input files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["patch-0:2.7.6-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-14379","severity":"important","public_date":"2019-07-23T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:2743","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2020:0727","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1737517","bugzilla_description":"CVE-2019-14379 jackson-databind: default typing mishandling leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","rh-maven35-jackson-databind-0:2.7.6-2.7.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-13648","severity":"moderate","public_date":"2019-07-19T00:00:00Z","advisories":["RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:3019"],"bugzilla":"1735630","bugzilla_description":"CVE-2019-13648 kernel: denial of service in arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c via sigreturn() system call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-1062.30.1.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1127.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13648.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-13272","severity":"important","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2809","RHBA-2019:3151","RHSA-2019:2411","RHSA-2019:2405"],"bugzilla":"1730895","bugzilla_description":"CVE-2019-13272 kernel: broken permission and object lifetime handling for PTRACE_TRACEME","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":["kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.7.2.el8_0","kernel-alt-0:4.14.0-115.12.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13272.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10638","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1729931","bugzilla_description":"CVE-2019-10638 Kernel: net: weak IP ID generation leads to remote device tracking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331->CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-10639","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:2522","RHBA-2020:3180","RHSA-2020:1070","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1729933","bugzilla_description":"CVE-2019-10639 Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-193.el8","kernel-rt-0:3.10.0-1127.rt56.1093.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-1010305","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:1686","RHBA-2020:3180","RHSA-2020:3848"],"bugzilla":"1730568","bugzilla_description":"CVE-2019-1010305 libmspack: buffer overflow in function chmd_read_headers()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["libmspack-0:0.5-0.8.alpha.el7","libmspack-0:0.7-0.3.alpha.el8.4","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010305.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-10198","severity":"moderate","public_date":"2019-07-12T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1729130","bugzilla_description":"CVE-2019-10198 foreman: authorization bypasses in foreman-tasks leading to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tfm-rubygem-foreman-tasks-0:0.15.11.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10200","severity":"moderate","public_date":"2019-07-12T00:00:00Z","advisories":[],"bugzilla":"1730161","bugzilla_description":"CVE-2019-10200 openshift: Users with permission to schedule pods on master nodes can access credentials for AWS IAM roles","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10200.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-10213","severity":"moderate","public_date":"2019-07-12T00:00:00Z","advisories":["RHSA-2019:4088","RHSA-2019:2791","RHSA-2019:4082"],"bugzilla":"1734615","bugzilla_description":"CVE-2019-10213 openshift: Secret data written to pod logs when operator set at Debug level or higher","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["openshift4/ose-console-operator:v4.1.16-201909100604","openshift4/ose-cluster-authentication-operator:v4.1.26-201911260202","openshift4/ose-cluster-config-operator:v4.1.26-201911260202","openshift4/ose-cluster-openshift-apiserver-operator:v4.1.27-201912030019","openshift4/ose-cluster-kube-apiserver-operator:v4.1.26-201911260202"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10213.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-10176","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":["RHSA-2019:2792","RHSA-2019:4053","RHBA-2019:2922"],"bugzilla":"1712569","bugzilla_description":"CVE-2019-10176 atomic-openshift: CSRF tokens not refreshing while user is logged in and are exposed in the URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":["openshift4/ose-console:v4.1.16-201909100604","openshift3/ose-console:v3.11.157-1","openshift4/ose-pod:v4.2.0-201910101614"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-3889","severity":"moderate","public_date":"2019-07-08T00:00:00Z","advisories":["RHSA-2020:0795","RHSA-2019:3722","RHSA-2019:3770"],"bugzilla":"1693499","bugzilla_description":"CVE-2019-3889 atomic-openshift: reflected XSS in authentication flow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["openshift4/ose-hypershift:v4.1.22-201910291109","openshift4/ose-oauth-server-rhel7:v4.2.4-201911050122","atomic-openshift-0:3.11.188-1.git.0.db0eaa8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3889.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2019-13233","severity":"moderate","public_date":"2019-07-04T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1727756","bugzilla_description":"CVE-2019-13233 kernel: use-after-free in arch/x86/lib/insn-eval.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13233.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2019-10137","severity":"important","public_date":"2019-07-01T00:00:00Z","advisories":["RHSA-2019:1663"],"bugzilla":"1702604","bugzilla_description":"CVE-2019-10137 spacewalk-proxy: Path traversal in proxy authentication cache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["spacewalk-proxy-0:2.5.0-8.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-10136","severity":"low","public_date":"2019-07-01T00:00:00Z","advisories":["RHSA-2019:1661"],"bugzilla":"1708696","bugzilla_description":"CVE-2019-10136 spacewalk: Insecure computation of authentication signatures during user authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["spacewalk-backend-0:2.5.3-177.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-13164","severity":"low","public_date":"2019-06-28T00:00:00Z","advisories":[],"bugzilla":"1722559","bugzilla_description":"CVE-2019-13164 Qemu: qemu-bridge-helper ACL can be bypassed when names are too long","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-12817","severity":"important","public_date":"2019-06-24T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2703"],"bugzilla":"1720616","bugzilla_description":"CVE-2019-12817 kernel: ppc: unrelated processes being able to read/write to each other's virtual memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->(CWE-125|CWE-787)","affected_packages":["redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12817.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-20843","severity":"moderate","public_date":"2019-06-24T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1723723","bugzilla_description":"CVE-2018-20843 expat: large number of colons in input makes parser consume high amount of resources, leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["expat-0:2.1.0-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11246","severity":"moderate","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:1633","RHSA-2019:1632","RHSA-2019:1852"],"bugzilla":"1721704","bugzilla_description":"CVE-2019-11246 kubernetes: Incomplete fix for CVE-2019-1002101 allows for arbitrary file write via `kubectl cp`","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["atomic-openshift-0:3.9.89-1.git.0.9454f2a.el7","atomic-openshift-0:3.10.149-1.git.0.05de590.el7","atomic-openshift-0:3.11.117-1.git.0.14e54a3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-10072","severity":"moderate","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3929"],"bugzilla":"1723708","bugzilla_description":"CVE-2019-10072 tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10072.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-12384","severity":"important","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:1820","RHSA-2019:3200","RHSA-2019:2720","RHSA-2019:4352","RHSA-2019:3297","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1725807","bugzilla_description":"CVE-2019-12384 jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","pki-deps:10.6-8000020190807021343.f8e95b4e","rh-maven35-jackson-databind-0:2.7.6-2.6.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12384.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-10166","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720114","bugzilla_description":"CVE-2019-10166 libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10166.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10161","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1578","RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720115","bugzilla_description":"CVE-2019-10161 libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","libvirt-0:0.10.2-64.el6_10.2","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10167","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720117","bugzilla_description":"CVE-2019-10167 libvirt: arbitrary command execution via virConnectGetDomainCapabilities API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-284|CWE-250)","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10168","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720118","bugzilla_description":"CVE-2019-10168 libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-284|CWE-250)","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10168.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-12435","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1711816","bugzilla_description":"CVE-2019-12435 samba: AD DC Denial of Service in DNS management server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-12436","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1711837","bugzilla_description":"CVE-2019-12436 samba: NULL pointer dereference in Samba LDAP server leading to crash and Dos","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-11477","severity":"important","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719123","bugzilla_description":"CVE-2019-11477 Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11478","severity":"moderate","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719128","bugzilla_description":"CVE-2019-11478 Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11478.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11479","severity":"moderate","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719129","bugzilla_description":"CVE-2019-11479 kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11479.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-12749","severity":"important","public_date":"2019-06-11T00:00:00Z","advisories":["RHSA-2019:2870","RHSA-2020:4032","RHSA-2019:2868","RHSA-2019:3707","RHBA-2019:3303","RHSA-2019:1726"],"bugzilla":"1719344","bugzilla_description":"CVE-2019-12749 dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["dbus-1:1.2.24-9.el6_6","dbus-1:1.12.8-9.el8","redhat-coreos-42.81.20191107.0","dbus-1:1.10.24-15.el7","dbus-1:1.2.24-11.el6_10","dbus-1:1.2.24-9.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12749.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-12387","severity":"moderate","public_date":"2019-06-10T00:00:00Z","advisories":["RHSA-2020:1091","RHSA-2019:3172"],"bugzilla":"1719501","bugzilla_description":"CVE-2019-12387 python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python-twisted-web-0:12.1.0-6.el7","python-twisted-0:16.4.1-12.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10165","severity":"low","public_date":"2019-06-07T00:00:00Z","advisories":["RHSA-2019:1591"],"bugzilla":"1719092","bugzilla_description":"CVE-2019-10165 openshift: OAuth access tokens written in plaintext to API server audit logs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["openshift4/ose-cluster-openshift-apiserver-operator:v4.1.3-201906191409","openshift4/ose-cluster-kube-apiserver-operator:v4.1.3-201906191409"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.3"},{"CVE":"CVE-2019-12795","severity":"low","public_date":"2019-06-05T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1726505","bugzilla_description":"CVE-2019-12795 gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["gvfs-0:1.36.2-6.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12795.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-12814","severity":"moderate","public_date":"2019-06-04T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2938","RHSA-2019:2937","RHSA-2019:2804","RHSA-2019:2936"],"bugzilla":"1725795","bugzilla_description":"CVE-2019-12814 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-16871","severity":"moderate","public_date":"2019-06-03T02:23:00Z","advisories":["RHSA-2019:2696","RHBA-2020:3180","RHSA-2019:1891","RHSA-2020:0740","RHSA-2019:1873","RHSA-2019:2730","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1655162","bugzilla_description":"CVE-2018-16871 kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-957.27.2.el7","kernel-0:4.18.0-193.el8","kernel-0:3.10.0-693.58.1.el7","redhat-coreos-43.82.202007300301.0","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16871.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10160","severity":"important","public_date":"2019-06-03T00:00:00Z","advisories":["RHSA-2019:1587","RHSA-2019:1700","RHSA-2019:2437"],"bugzilla":"1718388","bugzilla_description":"CVE-2019-10160 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python27-python-0:2.7.16-6.el6","python27-python-0:2.7.16-6.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","python-0:2.7.5-80.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-10126","severity":"important","public_date":"2019-05-31T00:00:00Z","advisories":["RHSA-2020:2289","RHSA-2019:3089","RHSA-2020:0174","RHSA-2019:3076","RHSA-2019:3055","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1716992","bugzilla_description":"CVE-2019-10126 kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10126.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-3846","severity":"important","public_date":"2019-05-30T12:53:00Z","advisories":["RHSA-2020:2289","RHSA-2019:3089","RHBA-2019:3151","RHSA-2020:0174","RHSA-2019:2741","RHSA-2019:2703","RHSA-2019:3076","RHSA-2019:3055"],"bugzilla":"1713059","bugzilla_description":"CVE-2019-3846 kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3846.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-10150","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHSA-2019:3007","RHSA-2019:3811","RHSA-2019:2989","RHSA-2019:3143"],"bugzilla":"1713433","bugzilla_description":"CVE-2019-10150 atomic-openshift: OpenShift builds don't verify SSH Host Keys for the git repository","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","atomic-openshift-0:3.10.175-1.git.0.f9f0e81.el7","openshift4/ose-docker-builder:v4.1.20-201910102034"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10150.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2019-12447","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728562","bugzilla_description":"CVE-2019-12447 gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-12448","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728564","bugzilla_description":"CVE-2019-12448 gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-364","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12448.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-12449","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728567","bugzilla_description":"CVE-2019-12449 gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12449.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-12382","severity":"moderate","public_date":"2019-05-24T00:00:00Z","advisories":["RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303"],"bugzilla":"1715554","bugzilla_description":"CVE-2019-12382 kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253->CWE-476","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12382.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-11245","severity":"moderate","public_date":"2019-05-24T00:00:00Z","advisories":[],"bugzilla":"1715726","bugzilla_description":"CVE-2019-11245 kubernetes: container uid changes to root after first restart","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11245.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.9"},{"CVE":"CVE-2019-12450","severity":"moderate","public_date":"2019-05-23T00:00:00Z","advisories":["RHSA-2019:3530","RHSA-2020:3978","RHBA-2019:3303"],"bugzilla":"1719141","bugzilla_description":"CVE-2019-12450 glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["glib2-0:2.56.1-7.el7","redhat-coreos-42.81.20191107.0","glib2-0:2.56.4-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.6"},{"CVE":"CVE-2019-5436","severity":"low","public_date":"2019-05-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1020","RHBA-2020:1539","RHSA-2020:1792","RHSA-2019:1543","RHSA-2020:2505","RHBA-2020:1540"],"bugzilla":"1710620","bugzilla_description":"CVE-2019-5436 curl: TFTP receive heap buffer overflow in tftp_receive_packet() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","curl-0:7.29.0-54.el7_7.3","redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-57.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5436.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-6237","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876880","bugzilla_description":"CVE-2019-6237 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6237.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8571","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876881","bugzilla_description":"CVE-2019-8571 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8583","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876882","bugzilla_description":"CVE-2019-8583 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8584","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876883","bugzilla_description":"CVE-2019-8584 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8584.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8586","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876884","bugzilla_description":"CVE-2019-8586 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8587","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876887","bugzilla_description":"CVE-2019-8587 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8587.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8594","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876891","bugzilla_description":"CVE-2019-8594 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8594.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8595","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876892","bugzilla_description":"CVE-2019-8595 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8595.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8596","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876893","bugzilla_description":"CVE-2019-8596 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8597","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876894","bugzilla_description":"CVE-2019-8597 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8601","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876895","bugzilla_description":"CVE-2019-8601 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8607","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876897","bugzilla_description":"CVE-2019-8607 webkitgtk: Out-of-bounds read leading to memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8607.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-8608","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876898","bugzilla_description":"CVE-2019-8608 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8609","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876899","bugzilla_description":"CVE-2019-8609 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8609.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8610","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876900","bugzilla_description":"CVE-2019-8610 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8610.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8615","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877045","bugzilla_description":"CVE-2019-8615 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8615.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8611","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877046","bugzilla_description":"CVE-2019-8611 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8611.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8619","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877047","bugzilla_description":"CVE-2019-8619 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8622","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877048","bugzilla_description":"CVE-2019-8622 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8622.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8623","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877049","bugzilla_description":"CVE-2019-8623 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8623.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10139","severity":"moderate","public_date":"2019-05-17T00:00:00Z","advisories":["RHSA-2019:2433","RHSA-2019:2437"],"bugzilla":"1709829","bugzilla_description":"CVE-2019-10139 cockpit-ovirt: admin and appliance passwords saved in plain text variable file during HE deployment","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","cockpit-ovirt-0:0.13.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-12126","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646781","bugzilla_description":"CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12130","severity":"important","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646784","bugzilla_description":"CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385->CWE-226","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-12127","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1667782","bugzilla_description":"CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11091","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1705312","bugzilla_description":"CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2018-16860","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":[],"bugzilla":"1705877","bugzilla_description":"CVE-2018-16860 samba: S4U2Self with unkeyed checksum","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11085","severity":"important","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:1891","RHBA-2019:3151","RHSA-2019:1873","RHSA-2020:0609","RHSA-2020:0592","RHSA-2019:1971","RHSA-2020:0543","RHSA-2019:1959"],"bugzilla":"1710405","bugzilla_description":"CVE-2019-11085 kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-250","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.64.1.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-862.48.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11085.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-12086","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2020:1454","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3044","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2020:3192","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1713468","bugzilla_description":"CVE-2019-12086 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-11833","severity":"moderate","public_date":"2019-05-11T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1712072","bugzilla_description":"CVE-2019-11833 kernel: fs/ext4/extents.c leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11833.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-11884","severity":"moderate","public_date":"2019-05-10T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1709837","bugzilla_description":"CVE-2019-11884 kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11884.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"6.8"},{"CVE":"CVE-2019-18408","severity":"important","public_date":"2019-05-10T00:00:00Z","advisories":["RHSA-2020:0271","RHSA-2020:0203","RHSA-2020:0246","RHBA-2020:0395"],"bugzilla":"1769979","bugzilla_description":"CVE-2019-18408 libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-8.el8_1","libarchive-0:3.1.2-14.el7_7","libarchive-0:3.3.2-4.el8_0","redhat-coreos-42.81.20200203.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18408.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11810","severity":"moderate","public_date":"2019-05-07T00:00:00Z","advisories":["RHSA-2020:0036","RHSA-2019:3217","RHSA-2019:2029","RHBA-2019:3151","RHSA-2019:1971","RHSA-2019:2736","RHSA-2019:2043","RHSA-2019:1959","RHSA-2019:2837"],"bugzilla":"1709164","bugzilla_description":"CVE-2019-11810 kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.14.1.el7a","kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:2.6.32-754.22.1.el6","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.46.1.el7","kernel-0:3.10.0-957.35.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11810.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-11811","severity":"moderate","public_date":"2019-05-07T00:00:00Z","advisories":["RHSA-2019:1891","RHSA-2020:0036","RHSA-2019:4057","RHSA-2019:4058","RHBA-2019:3151","RHSA-2019:1873","RHSA-2019:1971","RHSA-2019:1959","RHSA-2020:2854"],"bugzilla":"1709180","bugzilla_description":"CVE-2019-11811 kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.61.1.el7","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-862.46.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11811.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-3843","severity":"moderate","public_date":"2019-04-25T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1794"],"bugzilla":"1684607","bugzilla_description":"CVE-2019-3843 systemd: services with DynamicUser can create SUID/SGID binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["systemd-0:239-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-3844","severity":"moderate","public_date":"2019-04-25T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1794"],"bugzilla":"1684610","bugzilla_description":"CVE-2019-3844 systemd: services with DynamicUser can get new privileges and create SGID binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-268","affected_packages":["systemd-0:239-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3844.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-3900","severity":"important","public_date":"2019-04-25T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:1973","RHSA-2019:4058","RHSA-2019:3220","RHSA-2019:2043","RHSA-2019:3967","RHSA-2019:3836","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1698757","bugzilla_description":"CVE-2019-3900 Kernel: vhost_net: infinite loop while receiving packets leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-957.38.1.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:3.10.0-693.61.1.el7","redhat-coreos-42.81.20191107.0","kernel-alt-0:4.14.0-115.10.1.el7a","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.44.2.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2017-18367","severity":"moderate","public_date":"2019-04-24T00:00:00Z","advisories":["RHSA-2019:4090","RHSA-2019:4087","RHSA-2020:2479"],"bugzilla":"1706826","bugzilla_description":"CVE-2017-18367 libseccomp-golang: mishandling of multiple argument rules leading to a bypass of intended access restrictions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["openshift4/ose-hypershift:v4.1.27-201912030019","openshift4/ose-cli:v4.1.27-201912030019","openshift4/ose-node:v4.1.27-201912030019","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift-0:4.1.27-201912021146.git.0.a40116f.el8_0","openshift4/ose-cli-artifacts:v4.1.27-201912030019","openshift4/ose-hyperkube:v4.1.27-201912030019"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-3868","severity":"moderate","public_date":"2019-04-23T16:59:00Z","advisories":["RHSA-2020:2366","RHSA-2019:0856","RHSA-2019:2998","RHSA-2019:1140","RHSA-2019:0868","RHSA-2019:0857"],"bugzilla":"1679144","bugzilla_description":"CVE-2019-3868 keycloak: session hijack using the user access token","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-sso7-keycloak-0:3.4.17-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.17-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3868.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-0223","severity":"moderate","public_date":"2019-04-23T00:00:00Z","advisories":["RHSA-2019:1398","RHSA-2019:2782","RHSA-2019:2781","RHSA-2019:2777","RHSA-2019:1400","RHSA-2019:1399","RHSA-2019:0886","RHSA-2019:2779","RHSA-2019:2778","RHSA-2019:2780"],"bugzilla":"1702439","bugzilla_description":"CVE-2019-0223 qpid-proton: TLS Man in the Middle Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-300","affected_packages":["qpid-proton-0:0.27.0-3.el7","qpid-proton-0:0.27.0-3.el6","qpid-proton-0:0.9-22.el5","qpid-proton-0:0.28.0-1.el8","qpid-proton-0:0.28.0-1.el7","qpid-proton-0:0.16.0-14.el7sat","qpid-proton-0:0.16.0-14.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0223.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-11487","severity":"important","public_date":"2019-04-22T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:3266","RHBA-2019:3151","RHSA-2020:3230","RHSA-2020:0839","RHSA-2020:0174","RHSA-2019:2741","RHSA-2020:0834","RHSA-2019:2703","RHSA-2020:4182"],"bugzilla":"1703063","bugzilla_description":"CVE-2019-11487 kernel: Count overflow in FUSE request leading to use-after-free issues.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.71.2.el7","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-1:3.10.0-693.71.2.rt56.670.el6rt","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:2.6.32-754.35.1.el6","kernel-0:3.10.0-1062.18.1.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-11244","severity":"low","public_date":"2019-04-22T00:00:00Z","advisories":["RHSA-2019:3942","RHSA-2020:0074","RHSA-2020:0020"],"bugzilla":"1703209","bugzilla_description":"CVE-2019-11244 kubernetes: Schema info written with world-writeable permissions when cached","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7","openshift4/ose-cli:v4.1.24-201911120311","openshift-0:4.1.24-201911080309.git.0.c41acf2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11244.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-11243","severity":"low","public_date":"2019-04-22T00:00:00Z","advisories":[],"bugzilla":"1703218","bugzilla_description":"CVE-2019-11243 kubernetes: Authentication information exposure in rest.AnonymousClientConfig()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11243.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-11599","severity":"moderate","public_date":"2019-04-19T00:00:00Z","advisories":["RHSA-2020:0100","RHSA-2020:0179","RHSA-2019:2029","RHSA-2019:2043","RHSA-2020:0103","RHSA-2020:0543","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1705937","bugzilla_description":"CVE-2019-11599 kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-667","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.62.1.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-957.43.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-rt-1:3.10.0-693.62.1.rt56.659.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11599.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-18805","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0740","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1771496","bugzilla_description":"CVE-2019-18805 kernel: integer overflow in tcp_ack_update_rtt in net/ipv4/tcp_input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18805.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-0231","severity":"moderate","public_date":"2019-04-14T00:00:00Z","advisories":["RHSA-2020:1454","RHSA-2020:0899","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1700016","bugzilla_description":"CVE-2019-0231 mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["candlepin-0:2.9.25-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0231.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-0221","severity":"low","public_date":"2019-04-13T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2019:3931","RHSA-2020:0860","RHSA-2019:3929"],"bugzilla":"1713275","bugzilla_description":"CVE-2019-0221 tomcat: XSS in SSI printenv","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0221.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-11459","severity":"low","public_date":"2019-04-13T00:00:00Z","advisories":["RHSA-2020:1074","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1716295","bugzilla_description":"CVE-2019-11459 evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["evince-0:3.28.4-3.el8","evince-0:3.28.2-9.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11459.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-3891","severity":"moderate","public_date":"2019-04-10T15:00:00Z","advisories":["RHSA-2019:1222"],"bugzilla":"1693867","bugzilla_description":"CVE-2019-3891 candlepin: credentials exposure through log files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["candlepin-0:2.5.15-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3891.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-9494","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699141","bugzilla_description":"CVE-2019-9494 wpa_supplicant: SAE Timing-based and Cache-based side-channel attack against WPA3's Dragonfly handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9494.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9495","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699149","bugzilla_description":"CVE-2019-9495 wpa_supplicant: EAP-pwd cache side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9495.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9497","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699164","bugzilla_description":"CVE-2019-9497 wpa_supplicant: EAP-pwd server not checking for reflection attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9497.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-9498","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699168","bugzilla_description":"CVE-2019-9498 wpa_supplicant: EAP-pwd server missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9498.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-9499","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699170","bugzilla_description":"CVE-2019-9499 wpa_supplicant: EAP-pwd peer missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9499.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-0232","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:1712","RHSA-2019:3929"],"bugzilla":"1701056","bugzilla_description":"CVE-2019-0232 tomcat: Remote Code Execution on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0232.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2005-3590","severity":"low","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1706046","bugzilla_description":"CVE-2005-3590 glibc: buffer overflow in getgrouplist function leading to corrupted memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3590.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-11070","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1709289","bugzilla_description":"CVE-2019-11070 webkitgtk: HTTP proxy setting deanonymization information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11070.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-8506","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719199","bugzilla_description":"CVE-2019-8506 webkitgtk: malicous web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8518","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719206","bugzilla_description":"CVE-2019-8518 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8523","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719208","bugzilla_description":"CVE-2019-8523 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8524","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719209","bugzilla_description":"CVE-2019-8524 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8524.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8535","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719210","bugzilla_description":"CVE-2019-8535 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8535.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8536","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719213","bugzilla_description":"CVE-2019-8536 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8536.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8544","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719224","bugzilla_description":"CVE-2019-8544 webkitgtk: malicious crafted web content leads to arbitrary we content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8558","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719231","bugzilla_description":"CVE-2019-8558 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8558.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8559","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719235","bugzilla_description":"CVE-2019-8559 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8559.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8563","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719237","bugzilla_description":"CVE-2019-8563 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-3893","severity":"moderate","public_date":"2019-04-09T03:01:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1696400","bugzilla_description":"CVE-2019-3893 foreman: Recover of plaintext password or token for the compute resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["foreman-0:1.22.0.32-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.9"},{"CVE":"CVE-2019-3870","severity":"moderate","public_date":"2019-04-09T00:00:00Z","advisories":[],"bugzilla":"1689010","bugzilla_description":"CVE-2019-3870 samba: World writable files in Samba AD DC private/ dir","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-3880","severity":"moderate","public_date":"2019-04-09T00:00:00Z","advisories":["RHSA-2019:2099","RHSA-2019:1967","RHSA-2019:1966","RHSA-2019:3582"],"bugzilla":"1691518","bugzilla_description":"CVE-2019-3880 samba: save registry file outside share as unprivileged user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.9.8-105.el7rhgs","samba-0:4.9.1-6.el7","samba-0:4.10.4-1.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3880.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2019-10906","severity":"important","public_date":"2019-04-06T00:00:00Z","advisories":["RHSA-2019:1237","RHSA-2019:1329","RHSA-2019:1152","RHSA-2019:3172"],"bugzilla":"1698839","bugzilla_description":"CVE-2019-10906 python-jinja2: str.format_map allows sandbox escape","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","rh-python36-python-jinja2-0:2.9.6-3.el6","rh-python36-python-jinja2-0:2.9.6-3.el7","rh-python35-python-jinja2-0:2.8.1-2.el7","python-jinja2-0:2.10.1-2.el8_0","rh-python35-python-jinja2-0:2.8.1-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2019-3887","severity":"important","public_date":"2019-04-05T16:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2703"],"bugzilla":"1695044","bugzilla_description":"CVE-2019-3887 Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3887.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-4300","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1695929","bugzilla_description":"CVE-2018-4300 cups: Session cookie generated by the CUPS web interface is easy to guess","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4300.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"7.3"},{"CVE":"CVE-2019-3882","severity":"moderate","public_date":"2019-04-02T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1689426","bugzilla_description":"CVE-2019-3882 kernel: denial of service vector through vfio DMA mappings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-3884","severity":"low","public_date":"2019-03-29T00:00:00Z","advisories":[],"bugzilla":"1693905","bugzilla_description":"CVE-2019-3884 atomic-openshift: cross-namespace owner references can trigger deletions of valid children","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3884.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2018-12183","severity":"moderate","public_date":"2019-03-29T00:00:00Z","advisories":[],"bugzilla":"1694077","bugzilla_description":"CVE-2018-12183 edk2: stack overflow in DxeCore leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12183.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-1002101","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":["RHBA-2019:0620","RHBA-2019:0619","RHBA-2019:0636"],"bugzilla":"1685213","bugzilla_description":"CVE-2019-1002101 kubernetes: Mishandling of symlinks allows for arbitrary file write via `kubectl cp`","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["atomic-openshift-0:3.10.127-1.git.0.dab74c6.el7","atomic-openshift-0:3.11.98-1.git.0.0cbaff3.el7","atomic-openshift-0:3.9.74-1.git.0.78e56ea.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1002101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-9946","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":["RHBA-2019:0862"],"bugzilla":"1692712","bugzilla_description":"CVE-2019-9946 kubernetes: Incorrect rule injection in CNI portmap plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":["containernetworking-plugins-0:0.7.5-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9946.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-12182","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":[],"bugzilla":"1694081","bugzilla_description":"CVE-2018-12182 edk2: insufficient memory write in SMM service leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-3876","severity":"moderate","public_date":"2019-03-27T00:24:00Z","advisories":["RHSA-2019:1851"],"bugzilla":"1691107","bugzilla_description":"CVE-2019-3876 web-console: XSS in OAuth server /oauth/token/request endpoint","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-0:3.11.129-1.git.0.bd4f2d5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3876.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3829","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2019:3600","RHBA-2019:3303"],"bugzilla":"1677048","bugzilla_description":"CVE-2019-3829 gnutls: use-after-free/double-free in certificate verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gnutls-0:3.6.8-8.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3829.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-3836","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2019:3600","RHBA-2019:3303"],"bugzilla":"1678411","bugzilla_description":"CVE-2019-3836 gnutls: invalid pointer access upon receiving async handshake messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["gnutls-0:3.6.8-8.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3836.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-12179","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":[],"bugzilla":"1694072","bugzilla_description":"CVE-2018-12179 edk2: improper configuration insystem firmware leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12179.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-3869","severity":"moderate","public_date":"2019-03-26T00:00:00Z","advisories":["RHSA-2019:0796"],"bugzilla":"1688508","bugzilla_description":"CVE-2019-3869 Tower: credentials leaked through environment variables","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-214","affected_packages":["ansible-tower-0:3.4.3-1.el7at"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-0199","severity":"important","public_date":"2019-03-25T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2020:2366","RHSA-2019:3929"],"bugzilla":"1693325","bugzilla_description":"CVE-2019-0199 tomcat: Apache Tomcat HTTP/2 DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0199.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10063","severity":"important","public_date":"2019-03-22T00:00:00Z","advisories":["RHSA-2019:1024","RHSA-2019:1143"],"bugzilla":"1695973","bugzilla_description":"CVE-2019-10063 flatpak: Sandbox bypass via IOCSTI (incomplete fix for CVE-2017-5226)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["flatpak-0:1.0.2-5.el7_6","flatpak-0:1.0.6-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10063.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11840","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":["RHBA-2020:0063"],"bugzilla":"1691529","bugzilla_description":"CVE-2019-11840 golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["openshift-0:4.3.0-202001131753.git.0.0aee6a8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-3874","severity":"moderate","public_date":"2019-03-19T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1686373","bugzilla_description":"CVE-2019-3874 kernel: SCTP socket buffer memory leak leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3874.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-9893","severity":"moderate","public_date":"2019-03-14T00:00:00Z","advisories":["RHSA-2019:3624","RHBA-2019:3303"],"bugzilla":"1690897","bugzilla_description":"CVE-2019-9893 libseccomp: incorrect generation of syscall filters in libseccomp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["redhat-coreos-42.81.20191107.0","libseccomp-0:2.4.1-1.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3855","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687303","bugzilla_description":"CVE-2019-3855 libssh2: Integer overflow in transport read resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3856","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687304","bugzilla_description":"CVE-2019-3856 libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3856.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3857","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687305","bugzilla_description":"CVE-2019-3857 libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3857.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3858","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687306","bugzilla_description":"CVE-2019-3858 libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3859","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687307","bugzilla_description":"CVE-2019-3859 libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3859.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3860","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687310","bugzilla_description":"CVE-2019-3860 libssh2: Out-of-bounds reads with specially crafted SFTP packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3861","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687311","bugzilla_description":"CVE-2019-3861 libssh2: Out-of-bounds reads with specially crafted SSH packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3861.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3862","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:1884"],"bugzilla":"1687312","bugzilla_description":"CVE-2019-3862 libssh2: Out-of-bounds memory comparison with specially crafted message channel request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["libssh2-0:1.4.3-12.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3862.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3863","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687313","bugzilla_description":"CVE-2019-3863 libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3816","severity":"important","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2019:0972","RHSA-2019:0638"],"bugzilla":"1667070","bugzilla_description":"CVE-2019-3816 openwsman: Disclosure of arbitrary files outside of the registered URIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openwsman-0:2.6.3-6.git4391e5c.el7_6","openwsman-0:2.6.5-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-3833","severity":"moderate","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2020:3940"],"bugzilla":"1674478","bugzilla_description":"CVE-2019-3833 openwsman: Infinite loop in process_connection() allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openwsman-0:2.6.3-7.git4391e5c.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3833.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-8936","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":[],"bugzilla":"1686605","bugzilla_description":"CVE-2019-8936 ntp: Crafted null dereference attack in authenticated mode 6 packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-9924","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":["RHSA-2020:1113","RHSA-2020:3474","RHBA-2020:1539","RHSA-2020:3592","RHSA-2020:3803","RHBA-2020:1540"],"bugzilla":"1691774","bugzilla_description":"CVE-2019-9924 bash: BASH_CMD is writable in restricted bash shells","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","bash-0:4.2.46-34.el7","bash-0:4.2.46-32.el7_6","bash-0:4.2.46-34.el7_7","bash-0:4.2.46-30.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9924.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9636","severity":"important","public_date":"2019-03-06T00:00:00Z","advisories":["RHBA-2019:0763","RHSA-2019:2980","RHSA-2019:0806","RHSA-2019:1467","RHSA-2019:0981","RHSA-2019:0710","RHSA-2019:0765","RHSA-2019:0997","RHSA-2019:3170","RHBA-2019:0764","RHSA-2019:0902"],"bugzilla":"1688543","bugzilla_description":"CVE-2019-9636 python: Information Disclosure due to urlsplit improper NFKC normalization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python3-0:3.6.8-2.el8_0","python27-python-0:2.7.13-4.el6","rhvm-appliance-0:4.2-20190411.1.el7","python27-python-0:2.7.13-6.el7","python-0:2.7.5-59.el7_4","python-0:2.7.5-70.el7_5","rh-python36-python-0:3.6.3-4.el6","redhat-virtualization-host-0:4.2-20190411.1.el7_6","python27:2.7-8000020190410132513.c0efe978","rh-python35-python-0:3.5.1-12.el7","rh-python35-python-0:3.5.1-12.el6","python-0:2.7.5-77.el7_6","python-0:2.6.6-68.el6_10","rh-python36-python-0:3.6.3-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-1543","severity":"low","public_date":"2019-03-06T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1695954","bugzilla_description":"CVE-2019-1543 openssl: ChaCha20-Poly1305 with long nonces","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-12439","severity":"moderate","public_date":"2019-03-01T00:00:00Z","advisories":["RHSA-2019:1833"],"bugzilla":"1695963","bugzilla_description":"CVE-2019-12439 bubblewrap: temporary directory misuse as mount point","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["bubblewrap-0:0.3.3-2.el7at"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12439.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-1002100","severity":"moderate","public_date":"2019-02-28T00:00:00Z","advisories":["RHSA-2019:3239","RHSA-2019:1851"],"bugzilla":"1683190","bugzilla_description":"CVE-2019-1002100 kube-apiserver: DoS with crafted patch of type json-patch","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":["atomic-openshift-0:3.10.181-1.git.0.3ab4b3d.el7","atomic-openshift-0:3.11.129-1.git.0.bd4f2d5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1002100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9213","severity":"important","public_date":"2019-02-27T00:00:00Z","advisories":["RHSA-2019:1479","RHBA-2019:3151","RHSA-2019:0831","RHSA-2019:1480"],"bugzilla":"1686136","bugzilla_description":"CVE-2019-9213 kernel: lack of check for mmap minimum address in expand_downwards in mm/mmap.c leads to NULL pointer dereferences exploit on non-SMAP platforms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:4.18.0-80.4.2.el8_0","redhat-coreos-42.80.20191022.0","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9213.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-12178","severity":"important","public_date":"2019-02-26T00:00:00Z","advisories":[],"bugzilla":"1683326","bugzilla_description":"CVE-2018-12178 edk2: improper DNS packet size check","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12178.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"7.2"},{"CVE":"CVE-2018-12180","severity":"important","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:0809","RHSA-2019:1116","RHSA-2019:0968"],"bugzilla":"1683372","bugzilla_description":"CVE-2018-12180 edk2: Buffer Overflow in BlockIo service for RAM disk","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7_6.1","redhat-virtualization-host-0:4.3-20190418.0.el7_6","edk2-0:20180508gitee3198e672e2-9.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"8.3"},{"CVE":"CVE-2019-1559","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:2304","RHSA-2019:2439","RHSA-2019:3929","RHSA-2019:2437","RHSA-2019:2471"],"bugzilla":"1683804","bugzilla_description":"CVE-2019-1559 openssl: 0-byte record padding oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-0:1.0.1e-58.el6_10","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-9500","severity":"important","public_date":"2019-02-19T00:00:00Z","advisories":["RHSA-2019:3217","RHSA-2019:2600","RHSA-2019:4168","RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2945","RHSA-2019:2703","RHSA-2019:2609","RHSA-2019:4171"],"bugzilla":"1701224","bugzilla_description":"CVE-2019-9500 kernel: brcmfmac heap buffer overflow in brcmf_wowl_nd_results","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-alt-0:4.14.0-115.14.1.el7a","kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","kernel-rt-0:3.10.0-1062.1.1.rt56.1024.el7","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0","kernel-0:3.10.0-1062.1.1.el7","kernel-0:3.10.0-957.41.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9503","severity":"moderate","public_date":"2019-02-19T00:00:00Z","advisories":["RHSA-2020:2522","RHBA-2019:3151","RHSA-2019:2741","RHSA-2020:1070","RHSA-2019:2703","RHSA-2020:1016"],"bugzilla":"1701842","bugzilla_description":"CVE-2019-9503 kernel: brcmfmac frame validation bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9503.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-6454","severity":"important","public_date":"2019-02-18T00:00:00Z","advisories":["RHSA-2019:0990","RHSA-2019:0461","RHSA-2019:0368","RHBA-2019:3151","RHSA-2019:1322","RHSA-2019:0457","RHSA-2019:1502","RHSA-2019:2805"],"bugzilla":"1667032","bugzilla_description":"CVE-2019-6454 systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["systemd-0:219-62.el7_6.5","rhvm-appliance-0:4.2-20190224.0.el7","systemd-0:219-42.el7_4.16","redhat-coreos-42.80.20191022.0","systemd-0:239-13.el8_0.3","systemd-0:219-57.el7_5.6","systemd-0:219-30.el7_3.14","redhat-virtualization-host-0:4.2-20190219.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6454.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-8980","severity":"moderate","public_date":"2019-02-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1679972","bugzilla_description":"CVE-2019-8980 kernel: memory leak in the kernel_read_file function in fs/exec.c allows to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8980.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-3890","severity":"moderate","public_date":"2019-02-15T00:00:00Z","advisories":["RHSA-2019:3699","RHSA-2020:1080"],"bugzilla":"1678313","bugzilla_description":"CVE-2019-3890 evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-online-accounts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-295|CWE-296)","affected_packages":["evolution-data-server-0:3.28.5-11.el8","evolution-ews-0:3.28.5-5.el7","evolution-data-server-0:3.28.5-4.el7","evolution-ews-0:3.28.5-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2019-3831","severity":"moderate","public_date":"2019-02-14T00:00:00Z","advisories":["RHSA-2019:0457","RHSA-2019:0458"],"bugzilla":"1677108","bugzilla_description":"CVE-2019-3831 vdsm: privilege escalation to root via systemd_run","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["vdsm-0:4.20.47-1.el7ev","redhat-virtualization-host-0:4.2-20190219.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3831.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-8308","severity":"important","public_date":"2019-02-11T18:47:00Z","advisories":["RHSA-2019:0375"],"bugzilla":"1675070","bugzilla_description":"CVE-2019-8308 flatpak: potential /proc based sandbox escape","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["flatpak-0:1.0.2-4.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8308.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2019-5736","severity":"important","public_date":"2019-02-11T13:22:00Z","advisories":["RHSA-2019:0401","RHSA-2019:0303","RHSA-2019:0304","RHSA-2019:0975","RHSA-2019:0408"],"bugzilla":"1664908","bugzilla_description":"CVE-2019-5736 runc: Execution of malicious containers allows for container escape and access to host filesystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["runc-0:1.0.0-59.dev.git2abd837.el7","container-tools:rhel8-8000020190416221845.2ffa3d27","docker-2:1.13.1-91.git07f3374.el7","docker-2:1.12.6-79.git5680db5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5736.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2019-8331","severity":"moderate","public_date":"2019-02-11T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2020:3936"],"bugzilla":"1686454","bugzilla_description":"CVE-2019-8331 bootstrap: XSS in the tooltip or popover data-template attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","ovirt-web-ui-0:1.6.0-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-7222","severity":"low","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1671930","bugzilla_description":"CVE-2019-7222 Kernel: KVM: leak of uninitialized stack contents to guest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7222.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2018-16890","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670252","bugzilla_description":"CVE-2018-16890 curl: NTLM type-2 heap out-of-bounds buffer read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-190","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-3822","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670254","bugzilla_description":"CVE-2019-3822 curl: NTLMv2 type-3 header stack buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-3823","severity":"low","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670256","bugzilla_description":"CVE-2019-3823 curl: SMTP end-of-response out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-3825","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1672825","bugzilla_description":"CVE-2019-3825 gdm: lock screen bypass when timed login is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["gdm-1:3.28.3-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3825.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2018-16838","severity":"low","public_date":"2019-02-04T00:00:00Z","advisories":["RHSA-2019:2177","RHSA-2019:3651","RHSA-2019:2437","RHBA-2019:3303"],"bugzilla":"1640820","bugzilla_description":"CVE-2018-16838 sssd: improper implementation of GPOs due to too restrictive permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["redhat-coreos-42.81.20191107.0","sssd-0:1.16.4-21.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","sssd-0:2.2.0-19.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-3813","severity":"important","public_date":"2019-01-28T18:00:00Z","advisories":["RHSA-2019:0231","RHSA-2019:0232","RHSA-2019:0457"],"bugzilla":"1665371","bugzilla_description":"CVE-2019-3813 spice: Off-by-one error in array access in spice/server/memslot.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["spice-0:0.14.0-6.el7_6.1","redhat-virtualization-host-0:4.2-20190219.0.el7_6","spice-server-0:0.12.4-16.el6_10.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3813.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-3630","severity":"moderate","public_date":"2019-01-26T00:00:00Z","advisories":[],"bugzilla":"1683653","bugzilla_description":"CVE-2018-3630 ovmf: Logic error in FV parsing in MdeModulePkg\\Core\\Pei\\FwVol\\FwVol.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3630.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2019-6486","severity":"moderate","public_date":"2019-01-24T00:00:00Z","advisories":[],"bugzilla":"1668972","bugzilla_description":"CVE-2019-6486 golang: crypto/elliptic implementations of P-521 and P-384 elliptic curves allow for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-18508","severity":"moderate","public_date":"2019-01-22T00:00:00Z","advisories":["RHSA-2019:1951"],"bugzilla":"1671310","bugzilla_description":"CVE-2018-18508 nss: NULL pointer dereference in several CMS functions resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3817","severity":"moderate","public_date":"2019-01-21T00:00:00Z","advisories":["RHSA-2019:3898","RHBA-2020:0062","RHSA-2019:3583"],"bugzilla":"1668005","bugzilla_description":"CVE-2019-3817 libcomps: use after free when merging two objmrtrees","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.81.202001142154.0","libcomps-0:0.1.8-13.el7","libcomps-0:0.1.11-2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1000020","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1672888","bugzilla_description":"CVE-2019-1000020 libarchive: Infinite recursion in archive_read_support_format_iso9660.c resulting in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1000020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-1000019","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1672892","bugzilla_description":"CVE-2019-1000019 libarchive: Out of bounds read in archive_read_support_format_7zip.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1000019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3772","severity":"moderate","public_date":"2019-01-14T00:00:00Z","advisories":[],"bugzilla":"1670590","bugzilla_description":"CVE-2019-3772 spring-integration: XML External Entity Injection (XXE) when receiving XML data from untrusted sources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-3774","severity":"moderate","public_date":"2019-01-14T00:00:00Z","advisories":[],"bugzilla":"1670597","bugzilla_description":"CVE-2019-3774 spring-batch: XML External Entity Injection (XXE) when receiving XML data from untrusted sources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3774.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-16886","severity":"moderate","public_date":"2019-01-11T22:05:00Z","advisories":["RHSA-2019:1352"],"bugzilla":"1651034","bugzilla_description":"CVE-2018-16886 etcd: Improper Authentication in auth/store.go:AuthInfoFromTLS() via gRPC-gateway","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["etcd-0:3.2.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16886.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-3459","severity":"moderate","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1663176","bugzilla_description":"CVE-2019-3459 kernel: Heap address information leak while using L2CAP_GET_CONF_OPT","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-3460","severity":"moderate","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1663179","bugzilla_description":"CVE-2019-3460 kernel: Heap address information leak while using L2CAP_PARSE_CONF_RSP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-16889","severity":"moderate","public_date":"2019-01-10T00:00:00Z","advisories":["RHSA-2019:2541","RHSA-2019:2538"],"bugzilla":"1665334","bugzilla_description":"CVE-2018-16889 ceph: debug logging for v4 auth does not sanitize encryption keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["ceph-2:12.2.12-45.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16889.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-16864","severity":"important","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:0342","RHSA-2019:0361","RHSA-2019:0049","RHSA-2019:2402","RHSA-2019:0204","RHSA-2019:0271"],"bugzilla":"1653855","bugzilla_description":"CVE-2018-16864 systemd: stack overflow when calling syslog from a command with long cmdline","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["systemd-0:219-30.el7_3.13","systemd-0:219-57.el7_5.5","rhvm-appliance-0:4.2-20190129.0.el7","systemd-0:219-62.el7_6.2","systemd-0:219-42.el7_4.13","redhat-virtualization-host-0:4.2-20190129.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2018-16865","severity":"important","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:0342","RHSA-2019:0361","RHSA-2019:0049","RHSA-2019:2402","RHSA-2019:0204","RHSA-2019:0271"],"bugzilla":"1653861","bugzilla_description":"CVE-2018-16865 systemd: stack overflow when receiving many journald entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["systemd-0:219-30.el7_3.13","systemd-0:219-57.el7_5.5","rhvm-appliance-0:4.2-20190129.0.el7","systemd-0:219-62.el7_6.2","systemd-0:219-42.el7_4.13","redhat-virtualization-host-0:4.2-20190129.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16866","severity":"moderate","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:3222","RHSA-2020:0593","RHSA-2020:1264","RHSA-2019:2091"],"bugzilla":"1653867","bugzilla_description":"CVE-2018-16866 systemd: out-of-bounds read when parsing a crafted syslog message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":["systemd-0:219-57.el7_5.9","systemd-0:219-62.el7_6.11","systemd-0:219-67.el7","systemd-0:219-42.el7_4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16866.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-0542","severity":"moderate","public_date":"2019-01-09T00:00:00Z","advisories":["RHSA-2019:2552","RHSA-2019:2551","RHBA-2019:0959","RHSA-2019:1422"],"bugzilla":"1668531","bugzilla_description":"CVE-2019-0542 xterm.js: Mishandling of special characters allows for remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["atomic-openshift-web-console-0:3.11.104-1.git.1.3c3a7f2.el7","atomic-openshift-web-console-0:3.10.163-1.git.1.c3a2131.el7","openshift3/ose-console:v3.11.98-6","atomic-openshift-web-console-0:3.9.99-1.git.1.49cd7e9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16846","severity":"moderate","public_date":"2019-01-07T00:00:00Z","advisories":["RHSA-2019:2541","RHSA-2019:2538"],"bugzilla":"1644461","bugzilla_description":"CVE-2018-16846 ceph: ListBucket max-keys has no defined limit in the RGW codebase","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["ceph-2:12.2.12-45.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-5489","severity":"important","public_date":"2019-01-06T00:00:00Z","advisories":["RHSA-2019:2473","RHSA-2019:4255","RHSA-2019:2029","RHSA-2019:4057","RHSA-2019:4058","RHSA-2019:4159","RHSA-2019:4164","RHSA-2019:4056","RHSA-2019:2043","RHSA-2020:0204","RHSA-2019:2809","RHSA-2019:2808","RHSA-2019:3967","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:2837","RHSA-2019:3309"],"bugzilla":"1664110","bugzilla_description":"CVE-2019-5489 Kernel: page cache side channel attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:2.6.18-439.el5","kernel-0:2.6.32-431.97.1.el6","kernel-0:2.6.32-754.18.2.el6","kernel-0:3.10.0-327.83.1.el7","kernel-0:2.6.32-504.82.1.el6","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:3.10.0-957.35.1.el7","kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.61.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.12.1.el7a","kernel-0:3.10.0-862.44.2.el7","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-514.71.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-20784","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:1971","RHSA-2019:1959"],"bugzilla":"1680540","bugzilla_description":"CVE-2018-20784 kernel: infinite loop in update_blocked_averages() in kernel/sched/fair.c leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.7.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-20483","severity":"moderate","public_date":"2018-12-26T00:00:00Z","advisories":["RHSA-2019:3701","RHBA-2019:3303"],"bugzilla":"1662705","bugzilla_description":"CVE-2018-20483 wget: Information exposure in set_file_metadata function in xattr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20483.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-20337","severity":"moderate","public_date":"2018-12-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1661555","bugzilla_description":"CVE-2018-20337 LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["LibRaw-0:0.19.5-1.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20337.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1002101","severity":"moderate","public_date":"2018-12-17T00:00:00Z","advisories":[],"bugzilla":"1659877","bugzilla_description":"CVE-2018-1002101 kubernetes: Improper input validation while setting up volume mounts on Windows nodes allows for command injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002101.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16873","severity":"moderate","public_date":"2018-12-13T20:00:00Z","advisories":[],"bugzilla":"1657563","bugzilla_description":"CVE-2018-16873 golang: \"go get\" command vulnerable to RCE via import of malicious package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16873.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16875","severity":"moderate","public_date":"2018-12-13T20:00:00Z","advisories":[],"bugzilla":"1657565","bugzilla_description":"CVE-2018-16875 golang: crypto/x509 allows for denial of service via crafted TLS client certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16875.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3804","severity":"moderate","public_date":"2018-12-13T00:00:00Z","advisories":["RHSA-2019:0482","RHSA-2019:1571","RHSA-2019:1569"],"bugzilla":"1663567","bugzilla_description":"CVE-2019-3804 cockpit: Crash when parsing invalid base64 headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["rhvm-appliance-0:4.3-20190605.0.el7","cockpit-0:173.2-1.el7","redhat-virtualization-host-0:4.3-20190610.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14623","severity":"low","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1623719","bugzilla_description":"CVE-2018-14623 katello: SQL inject in errata-related REST API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89->CWE-209","affected_packages":["katello-0:3.4.5-15.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-19985","severity":"low","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1666106","bugzilla_description":"CVE-2018-19985 kernel: oob memory read in hso_probe in drivers/net/usb/hso.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19985.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-4700","severity":"moderate","public_date":"2018-12-07T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1649347","bugzilla_description":"CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4700.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"7.3"},{"CVE":"CVE-2018-20169","severity":"moderate","public_date":"2018-12-05T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:2770","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:2777"],"bugzilla":"1660385","bugzilla_description":"CVE-2018-20169 kernel: usb: missing size check in the __usb_get_extra_descriptor() leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-rt-1:3.10.0-693.69.1.rt56.667.el6rt","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-693.69.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20169.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-19824","severity":"moderate","public_date":"2018-12-04T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2703"],"bugzilla":"1655816","bugzilla_description":"CVE-2018-19824 kernel: Use-after-free in sound/usb/card.c:usb_audio_probe()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19824.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2018-1002105","severity":"critical","public_date":"2018-12-03T17:00:00Z","advisories":["RHSA-2018:3549","RHSA-2018:3537","RHSA-2018:3624","RHSA-2018:3754","RHSA-2018:3742","RHSA-2018:3752","RHSA-2018:3598","RHSA-2018:2908","RHSA-2018:3551","RHSA-2018:2906"],"bugzilla":"1648138","bugzilla_description":"CVE-2018-1002105 kubernetes: authentication/authorization bypass in the handling of non-101 responses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["atomic-openshift-0:3.4.1.44.57-1.git.0.a631031.el7","atomic-openshift-0:3.8.44-1.git.0.9be0abd.el7","atomic-openshift-0:3.10.72-1.git.0.3cb2fdc.el7","atomic-openshift-0:3.2.1.34-2.git.20.6367d5d.el7","atomic-openshift-0:3.5.5.31.80-1.git.0.c4a0780.el7","atomic-openshift-0:3.7.72-1.git.0.925b9cd.el7","atomic-openshift-0:3.11.43-1.git.0.647ac05.el7","atomic-openshift-0:3.9.51-1.git.0.dc3a40b.el7","atomic-openshift-0:3.3.1.46.45-1.git.0.2ce596e.el7","atomic-openshift-0:3.6.173.0.140-1.git.0.9686d52.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-19788","severity":"moderate","public_date":"2018-12-03T00:00:00Z","advisories":["RHSA-2019:2046","RHSA-2019:3232"],"bugzilla":"1655925","bugzilla_description":"CVE-2018-19788 polkit: Improper handling of user with uid > INT_MAX leading to authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["polkit-0:0.112-22.el7","polkit-0:0.112-18.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19788.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16868","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1654929","bugzilla_description":"CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16868.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-16869","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1654930","bugzilla_description":"CVE-2018-16869 nettle: Leaky data conversion exposing a manager oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16869.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-12404","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":["RHSA-2019:2237"],"bugzilla":"1657913","bugzilla_description":"CVE-2018-12404 nss: Cache side-channel variant of the Bleichenbacher attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-16490","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1672396","bugzilla_description":"CVE-2018-16490 nodejs-mpath: prototype pollution in Object.prototype","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16490.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2018-18311","severity":"important","public_date":"2018-11-29T00:00:00Z","advisories":["RHSA-2019:0001","RHSA-2019:0010","RHSA-2019:2400","RHSA-2019:1942","RHSA-2019:1790","RHSA-2019:0109"],"bugzilla":"1646730","bugzilla_description":"CVE-2018-18311 perl: Integer overflow leading to buffer overflow in Perl_my_setenv()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["rh-perl524-perl-4:5.24.0-381.el6","perl-4:5.16.3-294.el7_6","rh-perl524-perl-4:5.24.0-381.el7","perl-4:5.16.3-292.el7_5.1","perl-4:5.16.3-292.el7_4.1","rh-perl526-perl-4:5.26.3-405.el7","perl-4:5.16.3-291.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14637","severity":"moderate","public_date":"2018-11-27T20:23:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1627851","bugzilla_description":"CVE-2018-14637 keycloak: expiration not validated in SAML broker consumer endpoint","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287->CWE-285","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-19591","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1653993","bugzilla_description":"CVE-2018-19591 glibc: file descriptor leak in if_nametoindex() in sysdeps/unix/sysv/linux/if_index.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19591.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16884","severity":"important","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:2696","RHSA-2019:1891","RHSA-2019:1873","RHSA-2019:2730","RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:2854","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1660375","bugzilla_description":"CVE-2018-16884 kernel: nfs: use-after-free in svc_process_common()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-693.58.1.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16884.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-20534","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":["RHBA-2020:0062","RHSA-2019:2290","RHSA-2019:3583"],"bugzilla":"1665538","bugzilla_description":"CVE-2018-20534 libsolv: illegal address access in pool_whatprovides in src/pool.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libsolv-0:0.7.4-3.el8","libsolv-0:0.6.34-4.el7","redhat-coreos-43.81.202001142154.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20534.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19416","severity":"low","public_date":"2018-11-21T00:00:00Z","advisories":[],"bugzilla":"1652728","bugzilla_description":"CVE-2018-19416 sysstat: Out-of-bounds read in remap_struct function in sa_common.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19416.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-19517","severity":"low","public_date":"2018-11-21T00:00:00Z","advisories":[],"bugzilla":"1679544","bugzilla_description":"CVE-2018-19517 sysstat: Out of bounds read in remap_struct function in sa_common.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19517.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000877","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1663887","bugzilla_description":"CVE-2018-1000877 libarchive: Double free in RAR decoder resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000877.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1000878","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1663889","bugzilla_description":"CVE-2018-1000878 libarchive: Use after free in RAR decoder resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000878.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-19360","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666482","bugzilla_description":"CVE-2018-19360 jackson-databind: improper polymorphic deserialization in axis2-transport-jms class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19360.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19361","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666484","bugzilla_description":"CVE-2018-19361 jackson-databind: improper polymorphic deserialization in openjpa class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19361.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19362","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666489","bugzilla_description":"CVE-2018-19362 jackson-databind: improper polymorphic deserialization in jboss-common-core class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-20685","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1665785","bugzilla_description":"CVE-2018-20685 openssh: scp client improper directory name validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20685.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-6109","severity":"low","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666119","bugzilla_description":"CVE-2019-6109 openssh: Missing character encoding in progress display allows for spoofing of scp client output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-6111","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666127","bugzilla_description":"CVE-2019-6111 openssh: Improper validation of object names allows malicious server to overwrite files via scp client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-14658","severity":"moderate","public_date":"2018-11-13T17:38:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625409","bugzilla_description":"CVE-2018-14658 keycloak: Open Redirect in Login and Logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14658.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14655","severity":"moderate","public_date":"2018-11-13T17:37:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625396","bugzilla_description":"CVE-2018-14655 keycloak: XSS-Vulnerability with response_mode=form_post","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14655.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2018-14657","severity":"low","public_date":"2018-11-13T17:37:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625404","bugzilla_description":"CVE-2018-14657 keycloak: brute force protection not working for the entire login workflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14657.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-1000845","severity":null,"public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1661252","bugzilla_description":"CVE-2018-1000845 avahi: DNS amplification and reflection to spoofed addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000845.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14667","severity":"critical","public_date":"2018-11-06T18:44:00Z","advisories":["RHSA-2018:3581","RHSA-2018:3519","RHSA-2018:3518","RHSA-2018:3517"],"bugzilla":"1639139","bugzilla_description":"CVE-2018-14667 RichFaces: Expression Language injection via UserResource allows for unauthenticated remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["richfaces-0:3.3.1-6.SP3_patch_03.ep5.el6","richfaces-0:3.3.1-9.SP3_patch_03.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14667.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-16470","severity":"moderate","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1646814","bugzilla_description":"CVE-2018-16470 rubygem-rack: Buffer size in multipart parser allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rubygem-rack-1:1.6.4-3.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16471","severity":"moderate","public_date":"2018-11-06T00:00:00Z","advisories":[],"bugzilla":"1646818","bugzilla_description":"CVE-2018-16471 rubygem-rack: Cross-site scripting (XSS) via `scheme` method on `Rack::Request`","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16471.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-19854","severity":"moderate","public_date":"2018-11-03T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1656986","bugzilla_description":"CVE-2018-19854 kernel: Information Disclosure in crypto_report_one in crypto/crypto_user.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19854.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-16472","severity":"moderate","public_date":"2018-11-02T00:00:00Z","advisories":[],"bugzilla":"1649118","bugzilla_description":"CVE-2018-16472 nodejs-cached-path-relative: prototype pollution due to injected properties on Object.prototype","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16472.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-5407","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3932","RHSA-2019:0483","RHSA-2019:2125","RHSA-2019:3929","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1645695","bugzilla_description":"CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7_6.1","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-18751","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":["RHSA-2019:3643","RHSA-2020:2485","RHSA-2020:2846","RHSA-2020:1138","RHBA-2019:3303"],"bugzilla":"1647043","bugzilla_description":"CVE-2018-18751 gettext: double free in default_add_message in read-catalog.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-42.81.20191107.0","gettext-0:0.19.8.1-17.el8","gettext-0:0.19.8.1-3.el7","gettext-0:0.19.8.1-3.el7_6","gettext-0:0.19.8.1-3.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18751.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-19210","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":[],"bugzilla":"1649385","bugzilla_description":"CVE-2018-19210 libtiff: NULL pointer dereference in TIFFWriteDirectorySec function in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19210.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16468","severity":"moderate","public_date":"2018-10-27T00:00:00Z","advisories":[],"bugzilla":"1646715","bugzilla_description":"CVE-2018-16468 rubygem-loofah: XXS when a crafted SVG element is republished","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-15688","severity":"important","public_date":"2018-10-26T00:00:00Z","advisories":["RHSA-2019:0049","RHSA-2018:3665"],"bugzilla":"1639067","bugzilla_description":"CVE-2018-15688 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-190->CWE-122","affected_packages":["NetworkManager-1:1.12.0-8.el7_6","systemd-0:219-62.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15688.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-0735","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1644356","bugzilla_description":"CVE-2018-0735 openssl: timing side channel attack in the ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-18661","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1644448","bugzilla_description":"CVE-2018-18661 libtiff: tiff2bw tool failed memory allocation leads to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18661.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15750","severity":"moderate","public_date":"2018-10-25T00:00:00Z","advisories":[],"bugzilla":"1644484","bugzilla_description":"CVE-2018-15750 salt: Directory traversal in salt-api allows remote attackers to identitfy arbitrary files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-15751","severity":"critical","public_date":"2018-10-25T00:00:00Z","advisories":[],"bugzilla":"1644489","bugzilla_description":"CVE-2018-15751 salt: Remote command execution and incorrect access control when using salt-api","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15751.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-1000873","severity":"moderate","public_date":"2018-10-24T00:00:00Z","advisories":[],"bugzilla":"1665601","bugzilla_description":"CVE-2018-1000873 jackson-modules-java8: DoS due to an Improper Input Validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000873.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-0734","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:3700","RHSA-2019:3932","RHSA-2019:2304","RHSA-2019:3933","RHSA-2019:3935","RHBA-2019:3303"],"bugzilla":"1644364","bugzilla_description":"CVE-2018-0734 openssl: timing side channel attack in the DSA signature algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-16887","severity":"moderate","public_date":"2018-10-11T00:00:00Z","advisories":["RHSA-2019:1222"],"bugzilla":"1645190","bugzilla_description":"CVE-2018-16887 katello: stored XSS in subscriptions and repositories pages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["katello-0:3.10.0-0.6.rc1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16887.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-14664","severity":"moderate","public_date":"2018-10-10T00:00:00Z","advisories":["RHSA-2019:1222"],"bugzilla":"1638130","bugzilla_description":"CVE-2018-14664 foreman: Persisted XSS on all pages that use breadcrumbs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["foreman-0:1.20.1.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2018-11784","severity":"moderate","public_date":"2018-10-03T00:00:00Z","advisories":["RHSA-2019:0485","RHSA-2019:0130","RHSA-2019:0131","RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1636512","bugzilla_description":"CVE-2018-11784 tomcat: Open redirect in default servlet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-99","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7_6","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-17795","severity":"low","public_date":"2018-10-02T00:00:00Z","advisories":[],"bugzilla":"1635091","bugzilla_description":"CVE-2018-17795 libtiff: Heap-based buffer overflow in tiff2pdf.c:t2p_write_pdf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-17846","severity":"moderate","public_date":"2018-10-01T00:00:00Z","advisories":[],"bugzilla":"1639109","bugzilla_description":"CVE-2018-17846 golang-org-x-net-html: infinite loop during html.Parse() via inSelectIM and inSelectInTableIM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17847","severity":"moderate","public_date":"2018-10-01T00:00:00Z","advisories":[],"bugzilla":"1639116","bugzilla_description":"CVE-2018-17847 golang-org-x-net-html: index out of range in (*nodeStack).pop in node.go causes runtime panic during html.Parse() call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17848","severity":"moderate","public_date":"2018-10-01T00:00:00Z","advisories":[],"bugzilla":"1639124","bugzilla_description":"CVE-2018-17848 golang-org-x-net-html: index out of range in (*insertionModeStack).pop in node.go causes runtime panic during html.Parse() call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17848.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17142","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":[],"bugzilla":"1633022","bugzilla_description":"CVE-2018-17142 golang-org-x-net-html: Runtime panic in html.Parse() via crafted html","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17142.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17143","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":[],"bugzilla":"1633036","bugzilla_description":"CVE-2018-17143 golang-org-x-net-html: Runtime panic in html.Parse() via crafted html","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17143.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17075","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":[],"bugzilla":"1633041","bugzilla_description":"CVE-2018-17075 golang-org-x-net-html: Mishandle of \"in frameset\" causes runtime panic in html.Parse() via crafted html","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17204","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0053","RHSA-2019:0081","RHSA-2018:3500"],"bugzilla":"1632522","bugzilla_description":"CVE-2018-17204 openvswitch: Mishandle of group mods in lib/ofp-util.c:parse_group_prop_ntr_selection_method() allows for assertion failure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openvswitch-0:2.9.0-83.el7fdp.1","openvswitch-0:2.9.0-70.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.7"},{"CVE":"CVE-2018-17205","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0053","RHSA-2019:0081","RHSA-2018:3500"],"bugzilla":"1632525","bugzilla_description":"CVE-2018-17205 openvswitch: Error during bundle commit in ofproto/ofproto.c:ofproto_rule_insert__() allows for crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openvswitch-0:2.9.0-83.el7fdp.1","openvswitch-0:2.9.0-70.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17205.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-17206","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0053","RHSA-2019:0081","RHSA-2018:3500"],"bugzilla":"1632528","bugzilla_description":"CVE-2018-17206 openvswitch: Buffer over-read in lib/ofp-actions.c:decode_bundle()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openvswitch-0:2.9.0-83.el7fdp.1","openvswitch-0:2.9.0-70.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17206.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-14643","severity":"critical","public_date":"2018-09-20T00:00:00Z","advisories":["RHSA-2018:2733"],"bugzilla":"1629063","bugzilla_description":"CVE-2018-14643 smart_proxy_dynflow: Authentication bypass in Foreman remote execution feature","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rubygem-smart_proxy_dynflow-0:0.1.10.2-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14643.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-17100","severity":"low","public_date":"2018-09-16T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1631069","bugzilla_description":"CVE-2018-17100 libtiff: Integer overflow in multiply_ms in tools/ppm2tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17100.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-17101","severity":"low","public_date":"2018-09-16T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1631078","bugzilla_description":"CVE-2018-17101 libtiff: Two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17101.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-17000","severity":"low","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1630004","bugzilla_description":"CVE-2018-17000 libtiff: NULL pointer dereference in function _TIFFmemcmp at tif_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17000.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-16981","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":[],"bugzilla":"1639548","bugzilla_description":"CVE-2018-16981 stbi: Heap-based buffer overflow in stb_image.h:stbi__out_gif_code() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-6251","severity":"moderate","public_date":"2018-09-11T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1667409","bugzilla_description":"CVE-2019-6251 webkitgtk: processing maliciously crafted web content lead to URI spoofing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-1000805","severity":"critical","public_date":"2018-09-07T00:00:00Z","advisories":["RHBA-2018:3497","RHSA-2018:3470","RHSA-2018:3406","RHSA-2018:3347"],"bugzilla":"1637263","bugzilla_description":"CVE-2018-1000805 python-paramiko: Authentication bypass in auth_handler.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["redhat-virtualization-host-0:4.2-20181026.0.el7_6","python-paramiko-0:1.7.5-5.el6_10","python-paramiko-0:2.1.1-9.el7","rhvm-appliance-0:4.2-20181026.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-14632","severity":"important","public_date":"2018-09-06T00:00:00Z","advisories":["RHBA-2018:2652","RHSA-2018:2654","RHSA-2018:2908","RHSA-2018:2709","RHSA-2018:2906"],"bugzilla":"1625885","bugzilla_description":"CVE-2018-14632 atomic-openshift: oc patch with json causes masterapi service crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["atomic-openshift-0:3.10.66-1.git.0.91d1e89.el7","atomic-openshift-0:3.11.16-1.git.0.b48b8f8.el7","atomic-openshift-0:3.7.72-1.git.0.925b9cd.el7","atomic-openshift-0:3.6.173.0.130-1.git.0.8d78a39.el7","atomic-openshift-0:3.9.51-1.git.0.dc3a40b.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-16861","severity":"moderate","public_date":"2018-09-04T00:00:00Z","advisories":["RHSA-2019:1222"],"bugzilla":"1645201","bugzilla_description":"CVE-2018-16861 foreman: stored XSS in success notification after entity creation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["foreman-0:1.20.1.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16861.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2018-19871","severity":"low","public_date":"2018-08-24T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2020:1665"],"bugzilla":"1661465","bugzilla_description":"CVE-2018-19871 qt5-qtimageformats: QTgaFile CPU exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["qt-1:4.8.7-8.el7","qt5-qtimageformats-0:5.12.5-1.el8","qt5-qtimageformats-0:5.9.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19871.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10917","severity":"moderate","public_date":"2018-08-14T21:50:00Z","advisories":["RHSA-2019:1222"],"bugzilla":"1598928","bugzilla_description":"CVE-2018-10917 pulp: Improper path parsing leads to overwriting of iso repositories","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["pulp-0:2.18.1.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10917.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-20676","severity":"moderate","public_date":"2018-08-10T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668082","bugzilla_description":"CVE-2018-20676 bootstrap: XSS in the tooltip data-viewport attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20676.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-20677","severity":"moderate","public_date":"2018-08-10T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668089","bugzilla_description":"CVE-2018-20677 bootstrap: XSS in the affix configuration target property","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-10915","severity":"important","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2557","RHSA-2018:2511","RHSA-2018:2566","RHSA-2018:2643","RHSA-2018:2565"],"bugzilla":"1609891","bugzilla_description":"CVE-2018-10915 postgresql: Certain host connection parameters defeat client-side security defenses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665->(CWE-200|CWE-89)","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","postgresql-0:9.2.24-1.el7_5","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rhvm-appliance-0:4.2-20180828.0.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10915.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2018-10925","severity":"important","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566","RHSA-2018:2565"],"bugzilla":"1612619","bugzilla_description":"CVE-2018-10925 postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-10931","severity":"critical","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:2372"],"bugzilla":"1613861","bugzilla_description":"CVE-2018-10931 cobbler: CobblerXMLRPCInterface exports all its methods over XMLRPC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-749","affected_packages":["cobbler-0:2.0.7-44.1.el6sat","cobbler-0:2.0.7-68.1.el6sat","cobbler-0:2.0.7-73.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10931.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-15209","severity":"moderate","public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1614051","bugzilla_description":"CVE-2018-15209 libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16335","severity":"moderate","public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1624981","bugzilla_description":"CVE-2018-16335 libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16335.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14718","severity":"important","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666415","bugzilla_description":"CVE-2018-14718 jackson-databind: arbitrary code execution in slf4j-ext class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14718.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14719","severity":"important","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666418","bugzilla_description":"CVE-2018-14719 jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14719.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14720","severity":"moderate","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:4037","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:1140"],"bugzilla":"1666423","bugzilla_description":"CVE-2018-14720 jackson-databind: exfiltration/XXE in some JDK classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-611","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14720.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-14721","severity":"moderate","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:4037","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:1140"],"bugzilla":"1666428","bugzilla_description":"CVE-2018-14721 jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14721.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-8034","severity":"low","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2019:0451","RHSA-2019:0130","RHSA-2019:0131","RHSA-2019:0450","RHSA-2019:2205","RHSA-2019:3892","RHSA-2019:1159","RHSA-2019:1162","RHSA-2019:1529","RHSA-2019:1161","RHSA-2019:1160"],"bugzilla":"1607580","bugzilla_description":"CVE-2018-8034 tomcat: Host name verification missing in WebSocket client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","jbossweb-0:7.5.30-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8034.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-8037","severity":"important","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1607582","bugzilla_description":"CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2018-1336","severity":"important","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2945","RHSA-2018:2921","RHSA-2018:3768","RHSA-2018:2701","RHEA-2018:2189","RHSA-2018:2700","RHEA-2018:2188","RHSA-2018:2939","RHSA-2018:2743","RHSA-2018:2930","RHSA-2018:2742","RHSA-2018:2741","RHSA-2018:2740"],"bugzilla":"1607591","bugzilla_description":"CVE-2018-1336 tomcat: A bug in the UTF-8 decoder can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["jbossweb-0:7.5.29-1.Final_redhat_1.1.ep6.el5","tomcat8-0:8.0.36-33.ep7.el7","tomcat8-0:8.0.36-33.ep7.el6","tomcat-0:7.0.76-8.el7_5","tomcat7-0:7.0.70-29.ep7.el6","tomcat7-0:7.0.70-29.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1336.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-8020","severity":"important","public_date":"2018-07-21T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2018:2469"],"bugzilla":"1581569","bugzilla_description":"CVE-2018-8020 tomcat-native: Mishandled OCSP responses can allow clients to authenticate with revoked certificates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tomcat-native-0:1.2.17-17.redhat_17.ep7.el6","tomcat-native-0:1.2.17-17.redhat_17.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-8019","severity":"moderate","public_date":"2018-07-21T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2018:2469"],"bugzilla":"1583998","bugzilla_description":"CVE-2018-8019 tomcat-native: Mishandled OCSP invalid response","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tomcat-native-0:1.2.17-17.redhat_17.ep7.el6","tomcat-native-0:1.2.17-17.redhat_17.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-10869","severity":"important","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2018:2373"],"bugzilla":"1593780","bugzilla_description":"CVE-2018-10869 redhat-certification: /download allows to download any file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["redhat-certification-0:5.16-20180809.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-10870","severity":"critical","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2018:2373"],"bugzilla":"1593803","bugzilla_description":"CVE-2018-10870 redhat-certification: rhcertStore.py:__saveResultsFile allows to write any file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["redhat-certification-0:5.16-20180809.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10870.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-14373","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609400","bugzilla_description":"CVE-2018-14373 libtiff: NULL dereference in TIFFFindField in tif_dirinfo.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14373.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14374","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609406","bugzilla_description":"CVE-2018-14374 libtiff: NULL dereference in unixErrorHandler in tif_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14374.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14375","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609411","bugzilla_description":"CVE-2018-14375 libtiff: NULL dereference in TIFFRGBAImageOK in tif_getimage.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14375.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14378","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609417","bugzilla_description":"CVE-2018-14378 libtiff: NULL dereference in TIFFWriteBufferSetup in tif_write.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14378.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-6470","severity":"moderate","public_date":"2018-07-14T00:00:00Z","advisories":["RHSA-2019:3525","RHSA-2019:2060"],"bugzilla":"1708641","bugzilla_description":"CVE-2019-6470 dhcp: double-deletion of the released addresses in the dhcpv6 code leading to crash and possible DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["dhcp-12:4.3.6-34.el8","dhcp-12:4.2.5-77.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-10894","severity":"moderate","public_date":"2018-07-09T00:00:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2019:0877","RHSA-2018:3595"],"bugzilla":"1599434","bugzilla_description":"CVE-2018-10894 keycloak: auth permitted with expired certs in SAML client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10894.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-10885","severity":"moderate","public_date":"2018-07-04T00:00:00Z","advisories":[],"bugzilla":"1597090","bugzilla_description":"CVE-2018-10885 atomic-openshift: Malicious network-policy can cause Openshift Routing DoS when using ovs-networkpolicy plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10885.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-12900","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2019:2053","RHSA-2019:3419"],"bugzilla":"1595575","bugzilla_description":"CVE-2018-12900 libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libtiff-0:4.0.3-32.el7","libtiff-0:4.0.9-15.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12900.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10863","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1594122","bugzilla_description":"CVE-2018-10863 redhat-certification: directory listing in /rhcert-transfer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-10898","severity":"important","public_date":"2018-06-22T00:00:00Z","advisories":["RHSA-2018:2214"],"bugzilla":"1600360","bugzilla_description":"CVE-2018-10898 openstack-tripleo-heat-templates: Default ODL deployment uses hard coded administrative credentials","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-798","affected_packages":["openstack-tripleo-heat-templates-0:8.0.2-43.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10898.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-10864","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":["RHSA-2018:2373"],"bugzilla":"1593627","bugzilla_description":"CVE-2018-10864 redhat-certification: resource consumption in DocumentBase:loadFiltered","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-certification-0:5.16-20180809.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10864.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10865","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593631","bugzilla_description":"CVE-2018-10865 redhat-certification: \"restart\" a node without authorization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2018-10866","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593632","bugzilla_description":"CVE-2018-10866 redhat-certification: remove a \"system\" file without authorization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10866.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-10867","severity":"moderate","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593764","bugzilla_description":"CVE-2018-10867 redhat-certification: /uploads/results page allows to remove files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10867.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-3897","severity":"moderate","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593768","bugzilla_description":"CVE-2019-3897 redhat-certification: /rhcert allows to download any file under /var/www/rhcert directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-10868","severity":"moderate","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593776","bugzilla_description":"CVE-2018-10868 redhat-certification: billion laugh attack when getting the status of a host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10868.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10841","severity":"important","public_date":"2018-06-20T10:00:00Z","advisories":["RHSA-2018:1954","RHSA-2018:1955"],"bugzilla":"1582043","bugzilla_description":"CVE-2018-10841 glusterfs: access trusted peer group via remote-host command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["glusterfs-0:3.8.4-54.11.el6","glusterfs-0:3.8.4-54.10.el7","glusterfs-0:3.8.4-54.11.el6rhs","glusterfs-0:3.8.4-54.10.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10841.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2018-14404","severity":"moderate","public_date":"2018-06-18T00:00:00Z","advisories":["RHBA-2020:3180","RHBA-2020:1539","RHSA-2020:1827","RHSA-2019:1543","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1595985","bugzilla_description":"CVE-2018-14404 libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4","redhat-coreos-43.82.202007300301.0","libxml2-0:2.9.7-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-12440","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":[],"bugzilla":"1591911","bugzilla_description":"CVE-2018-12440 netty-tcnative-boringssl-static: memory-cache side-channel attack on DSA signatures","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12440.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-12023","severity":"important","public_date":"2018-06-08T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1671096","bugzilla_description":"CVE-2018-12023 jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-16005","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588846","bugzilla_description":"CVE-2017-16005 nodejs-http-signature: HTTP header forgery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-0161","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2019:2125","RHSA-2019:2437"],"bugzilla":"1694065","bugzilla_description":"CVE-2019-0161 edk2: stack overflow in XHCI causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-400","affected_packages":["redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2018-11235","severity":"important","public_date":"2018-05-30T00:00:00Z","advisories":["RHSA-2018:1957","RHSA-2018:2147"],"bugzilla":"1583862","bugzilla_description":"CVE-2018-11235 git: arbitrary code execution when recursively cloning a malicious repository","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-git29-git-0:2.9.3-4.el7","rh-git29-git-0:2.9.3-4.el6","git-0:1.8.3.1-14.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11235.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12533","severity":"critical","public_date":"2018-05-30T00:00:00Z","advisories":["RHSA-2018:2930","RHSA-2018:2663","RHSA-2018:2664"],"bugzilla":"1584490","bugzilla_description":"CVE-2018-12533 RichFaces: Injection of arbitrary EL expressions allows remote code execution via org.richfaces.renderkit.html.Paint2DResource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["richfaces-0:3.3.1-7.SP3_patch_02.ep5.el5","richfaces-0:3.3.1-4.SP3_patch_02.ep5.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-14040","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601614","bugzilla_description":"CVE-2018-14040 bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14041","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2019:1456"],"bugzilla":"1601616","bugzilla_description":"CVE-2018-14041 bootstrap: Cross-site Scripting (XSS) in the data-target property of scrollspy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14041.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14042","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601617","bugzilla_description":"CVE-2018-14042 bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12022","severity":"important","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1671097","bugzilla_description":"CVE-2018-12022 jackson-databind: improper polymorphic deserialization of types from Jodd-db library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-10843","severity":"important","public_date":"2018-05-24T00:00:00Z","advisories":["RHSA-2018:2013"],"bugzilla":"1579096","bugzilla_description":"CVE-2018-10843 source-to-image: Builder images with assembler-user LABEL set to root allows attackers to execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.9.31-1.git.0.ef9737b.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2018-8013","severity":"moderate","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1581725","bugzilla_description":"CVE-2018-8013 batik: information disclosure when deserializing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8013.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-11627","severity":"moderate","public_date":"2018-05-22T00:00:00Z","advisories":["RHSA-2019:0212","RHSA-2019:0315"],"bugzilla":"1585218","bugzilla_description":"CVE-2018-11627 rubygem-sinatra: XSS in the 400 Bad Request page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-8014","severity":"moderate","public_date":"2018-05-17T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2019:0451","RHSA-2019:0450","RHSA-2019:2205","RHSA-2018:3768","RHSA-2018:2469","RHSA-2019:1529"],"bugzilla":"1579611","bugzilla_description":"CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","tomcat8-0:8.0.36-31.ep7.el7","tomcat7-0:7.0.70-27.ep7.el7","tomcat7-0:7.0.70-27.ep7.el6","tomcat8-0:8.0.36-31.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2018-11237","severity":"moderate","public_date":"2018-05-17T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1581274","bugzilla_description":"CVE-2018-11237 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11237.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-12422","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":[],"bugzilla":"1592624","bugzilla_description":"CVE-2018-12422 evolution-data-server: Unsafe use of strcat allows buffer overflow in addressbook/backends/ldap/e-book-backend-ldap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-11307","severity":"important","public_date":"2018-05-10T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1677341","bugzilla_description":"CVE-2018-11307 jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11307.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-1259","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:3768","RHSA-2018:1809"],"bugzilla":"1578902","bugzilla_description":"CVE-2018-1259 spring-data-commons: XXE with Spring Data’s XMLBeam integration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1259.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-1087","severity":"important","public_date":"2018-05-08T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1347","RHSA-2018:1710","RHSA-2018:1348","RHSA-2018:1524","RHSA-2018:1711","RHSA-2018:1345","RHSA-2018:1355"],"bugzilla":"1566837","bugzilla_description":"CVE-2018-1087 Kernel: KVM: error in exception handling leads to wrong debug stack value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.25.4.el7","redhat-virtualization-host-0:3.6-20180521.0","kernel-0:3.10.0-862.2.3.el7","rhev-hypervisor7-0:7.3-20180521.1.el7ev","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","rhev-hypervisor7-0:7.3-20180521.1.el6ev","kernel-0:3.10.0-327.66.3.el7","kernel-0:3.10.0-514.48.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1087.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-8897","severity":"moderate","public_date":"2018-05-08T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1319","RHSA-2018:1349","RHSA-2018:1347","RHSA-2018:1710","RHSA-2018:1348","RHSA-2018:1524","RHSA-2018:1711","RHSA-2018:1345","RHSA-2018:1346","RHSA-2018:1354","RHSA-2018:1355","RHSA-2018:1352","RHSA-2018:1353","RHSA-2018:1350","RHSA-2018:1351"],"bugzilla":"1567074","bugzilla_description":"CVE-2018-8897 Kernel: error in exception handling leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.25.4.el7","redhat-virtualization-host-0:3.6-20180521.0","kernel-0:2.6.32-696.28.1.el6","kernel-0:2.6.18-431.el5","kernel-0:2.6.32-504.68.2.el6","kernel-rt-1:3.10.0-693.25.4.rt56.613.el6rt","kernel-0:3.10.0-514.48.3.el7","kernel-0:2.6.32-358.88.2.el6","kernel-0:2.6.32-573.55.2.el6","kernel-0:2.6.32-431.89.2.el6","kernel-0:3.10.0-862.2.3.el7","rhev-hypervisor7-0:7.3-20180521.1.el7ev","kernel-0:2.6.18-348.39.2.el5","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","rhev-hypervisor7-0:7.3-20180521.1.el6ev","kernel-0:3.10.0-327.66.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8897.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1102","severity":"critical","public_date":"2018-04-27T00:00:00Z","advisories":["RHSA-2018:1239","RHSA-2018:1229","RHSA-2018:1237","RHSA-2018:1227","RHSA-2019:0036","RHSA-2018:1235","RHSA-2018:1233","RHSA-2018:1231","RHSA-2018:1243","RHSA-2018:1241"],"bugzilla":"1562246","bugzilla_description":"CVE-2018-1102 source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.3.1.46.39-2.git.3.cc57f5b.el7","atomic-openshift-0:3.9.25-1.git.0.6bc473e.el7","atomic-openshift-0:3.1.1.11-4.git.3.12809c8.el7","source-to-image-0:1.1.13-1.el7","atomic-openshift-0:3.2.1.34-2.git.3.aad33c3.el7","atomic-openshift-0:3.7.44-1.git.0.6b061d4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.9"},{"CVE":"CVE-2018-1067","severity":"moderate","public_date":"2018-04-25T17:51:00Z","advisories":["RHSA-2020:2562","RHSA-2018:1248","RHSA-2018:1249","RHSA-2019:0877","RHSA-2018:2643","RHSA-2018:1247","RHSA-2018:1251"],"bugzilla":"1550671","bugzilla_description":"CVE-2018-1067 undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-113","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:4.2-20180828.0.el7","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-10237","severity":"moderate","public_date":"2018-04-25T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:3149","RHSA-2020:2562","RHSA-2018:2428","RHSA-2018:2425","RHSA-2018:2743","RHSA-2018:2423","RHSA-2019:2858","RHSA-2018:2643","RHSA-2018:2742","RHSA-2018:2424","RHSA-2018:2741","RHSA-2018:2740","RHSA-2018:2598"],"bugzilla":"1573391","bugzilla_description":"CVE-2018-10237 guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rhvm-appliance-0:4.2-20180828.0.el7","opendaylight-0:8.3.0-3.el7ost","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10237.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15138","severity":"moderate","public_date":"2018-04-11T00:00:00Z","advisories":["RHBA-2018:0489"],"bugzilla":"1566212","bugzilla_description":"CVE-2017-15138 atomic-openshift: cluster-reader can escalate to creating builds via webhooks in any project","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["atomic-openshift-0:3.9.14-1.git.0.4efa2ca.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15138.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2018-1275","severity":"critical","public_date":"2018-04-09T19:00:00Z","advisories":["RHSA-2018:1320","RHSA-2018:2939"],"bugzilla":"1565307","bugzilla_description":"CVE-2018-1275 spring-framework: Address partial fix for CVE-2018-1270","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1275.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-1000156","severity":"important","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:2096","RHSA-2018:2097","RHSA-2018:2094","RHSA-2018:2095","RHSA-2018:2092","RHSA-2018:2093","RHSA-2018:2091","RHSA-2018:1200","RHSA-2018:1199"],"bugzilla":"1564326","bugzilla_description":"CVE-2018-1000156 patch: Malicious patch files cause ed to execute arbitrary commands","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["patch-0:2.6-8.el6_9","patch-0:2.7.1-10.el7_2","patch-0:2.6-8.el6_4","patch-0:2.7.1-10.el7_4","patch-0:2.7.1-10.el7_3","patch-0:2.6-8.el6_6","patch-0:2.6-8.el6_5","patch-0:2.7.1-10.el7_5","patch-0:2.6-8.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000156.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-1270","severity":"critical","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:2939"],"bugzilla":"1564405","bugzilla_description":"CVE-2018-1270 spring-framework: Possible RCE via spring messaging","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1270.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-1272","severity":"low","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:2669","RHSA-2018:1320"],"bugzilla":"1564408","bugzilla_description":"CVE-2018-1272 spring-framework: Multipart content pollution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1274","severity":"important","public_date":"2018-04-04T00:00:00Z","advisories":[],"bugzilla":"1565926","bugzilla_description":"CVE-2018-1274 spring-data-commons: Unlimited path depth in PropertyPath.java allow remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-9251","severity":"low","public_date":"2018-04-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1827"],"bugzilla":"1565318","bugzilla_description":"CVE-2018-9251 libxml2: infinite loop in xz_decomp function in xzlib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["redhat-coreos-43.82.202007300301.0","libxml2-0:2.9.7-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2018-1096","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":["RHSA-2018:2927"],"bugzilla":"1561061","bugzilla_description":"CVE-2018-1096 foreman: SQL injection due to improper handling of the widget id parameter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":["foreman-0:1.18.0.37-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-15137","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":["RHBA-2018:0489"],"bugzilla":"1566191","bugzilla_description":"CVE-2017-15137 atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tag","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.9.14-1.git.0.4efa2ca.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-1273","severity":"critical","public_date":"2018-03-27T00:00:00Z","advisories":[],"bugzilla":"1565923","bugzilla_description":"CVE-2018-1273 spring-data-commons: Improper neutralization of special elements allow remote attackers to execute code via crafted requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1273.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-1090","severity":"moderate","public_date":"2018-03-23T00:00:00Z","advisories":["RHSA-2018:2927"],"bugzilla":"1560035","bugzilla_description":"CVE-2018-1090 pulp: sensitive credentials revealed through the API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["pulp-0:2.16.4.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1090.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2018-1002100","severity":"moderate","public_date":"2018-03-17T00:00:00Z","advisories":["RHBA-2018:1796"],"bugzilla":"1564305","bugzilla_description":"CVE-2018-1002100 kubernetes: Kubectl copy doesn't check for paths outside of it's destination directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.9.30-1.git.0.dec1ba7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-8048","severity":"moderate","public_date":"2018-03-15T00:00:00Z","advisories":[],"bugzilla":"1559071","bugzilla_description":"CVE-2018-8048 rubygem-loofah: XSS vulnerability due to unescaped comments within attributes by libxml2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-12196","severity":"moderate","public_date":"2018-03-12T15:56:00Z","advisories":["RHSA-2018:0480","RHSA-2020:2561","RHSA-2018:2405","RHSA-2018:1525","RHSA-2020:2562","RHSA-2018:0478","RHSA-2018:3768","RHSA-2018:0479","RHSA-2018:0481"],"bugzilla":"1503055","bugzilla_description":"CVE-2017-12196 undertow: Client can use bogus uri in Digest authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rhvm-appliance-0:4.2-20180504.0","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-1002101","severity":"important","public_date":"2018-03-12T00:00:00Z","advisories":["RHSA-2018:0475"],"bugzilla":"1525130","bugzilla_description":"CVE-2017-1002101 kubernetes: Volume security can be sidestepped with innocent emptyDir and subpath","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1002101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2018-1098","severity":"moderate","public_date":"2018-03-07T00:00:00Z","advisories":[],"bugzilla":"1552714","bugzilla_description":"CVE-2018-1098 etcd: Cross-site request forgery via crafted local POST forms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1098.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1099","severity":"moderate","public_date":"2018-03-07T00:00:00Z","advisories":[],"bugzilla":"1552717","bugzilla_description":"CVE-2018-1099 etcd: DNS rebinding vulnerability in etcd server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1099.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-7536","severity":"moderate","public_date":"2018-03-06T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:0265","RHSA-2019:0051","RHSA-2019:0082"],"bugzilla":"1549777","bugzilla_description":"CVE-2018-7536 django: Catastrophic backtracking in regular expressions via 'urlize' and 'urlizetrunc'","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":["python-django-0:1.8.19-1.el7ost","python-django-0:1.11.11-1.el7sat","python-django-0:1.11.15-4.el7rhgs","python-django-0:1.11.11-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7536.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-7537","severity":"moderate","public_date":"2018-03-06T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:0265"],"bugzilla":"1549779","bugzilla_description":"CVE-2018-7537 django: Catastrophic backtracking in regular expressions via 'truncatechars_html' and 'truncatewords_html'","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":["python-django-0:1.11.11-1.el7sat","python-django-0:1.11.15-4.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7537.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-1002102","severity":"moderate","public_date":"2018-03-06T00:00:00Z","advisories":["RHSA-2018:0475"],"bugzilla":"1551818","bugzilla_description":"CVE-2017-1002102 kubernetes: Malicious containers can delete any file from the node","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1002102.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-1058","severity":"moderate","public_date":"2018-03-01T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1547044","bugzilla_description":"CVE-2018-1058 postgresql: Uncontrolled search path element in pg_dump and other client applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1058.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-15136","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":[],"bugzilla":"1540343","bugzilla_description":"CVE-2017-15136 katello: system registration hostname hijacking results in inability to access updates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2018-7489","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":["RHSA-2018:2938","RHSA-2019:3149","RHSA-2018:1448","RHSA-2018:1449","RHSA-2020:2562","RHSA-2018:1447","RHSA-2018:2939","RHSA-2018:2090","RHSA-2019:2858","RHSA-2018:1786","RHSA-2018:1451","RHSA-2018:2089","RHSA-2018:2088","RHSA-2018:1450"],"bugzilla":"1549276","bugzilla_description":"CVE-2018-7489 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-7456","severity":"low","public_date":"2018-02-24T00:00:00Z","advisories":["RHSA-2019:2053","RHSA-2019:2051"],"bugzilla":"1556708","bugzilla_description":"CVE-2018-7456 libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["compat-libtiff3-0:3.9.4-12.el7","libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1305","severity":"moderate","public_date":"2018-02-23T00:00:00Z","advisories":["RHSA-2019:2205","RHSA-2018:0465","RHSA-2018:0466","RHSA-2018:1320","RHSA-2018:2939"],"bugzilla":"1548282","bugzilla_description":"CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["tomcat-0:7.0.76-9.el7","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1305.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-8088","severity":"important","public_date":"2018-02-22T00:00:00Z","advisories":["RHSA-2018:2419","RHSA-2018:1448","RHSA-2018:1525","RHSA-2018:1449","RHSA-2018:1248","RHSA-2018:1447","RHSA-2018:1249","RHSA-2018:0630","RHSA-2018:2930","RHSA-2018:1323","RHSA-2018:1247","RHSA-2018:0592","RHSA-2018:0627","RHSA-2018:0628","RHSA-2020:2561","RHSA-2018:2669","RHSA-2019:2413","RHSA-2019:3140","RHSA-2018:0629","RHSA-2018:1575","RHSA-2018:1451","RHSA-2018:0582","RHSA-2018:2420","RHSA-2018:1251","RHSA-2018:2143","RHSA-2018:1450"],"bugzilla":"1548909","bugzilla_description":"CVE-2018-8088 slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el7","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el6","rhvm-appliance-0:4.2-20180504.0","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el5","rh-maven35-slf4j-0:1.7.25-1.3.el7","slf4j-0:1.7.4-4.el7_4","eap7-slf4j-0:1.7.22-3.redhat_2.1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6","eap7-slf4j-0:1.7.22-3.redhat_2.1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8088.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-7212","severity":"low","public_date":"2018-02-18T00:00:00Z","advisories":[],"bugzilla":"1802282","bugzilla_description":"CVE-2018-7212 rubygem-sinatra: path traversal via backslash characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7212.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-10713","severity":"low","public_date":"2018-02-13T00:00:00Z","advisories":["RHSA-2019:2033"],"bugzilla":"1545405","bugzilla_description":"CVE-2016-10713 patch: Out-of-bounds access in pch_write_line function in pch.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["patch-0:2.7.1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10713.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15709","severity":"low","public_date":"2018-02-13T00:00:00Z","advisories":[],"bugzilla":"1548057","bugzilla_description":"CVE-2017-15709 activemq-openwire-generator: Information Exposure in ActiveMQ","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15709.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2017-15089","severity":"important","public_date":"2018-02-12T15:00:00Z","advisories":["RHSA-2018:0480","RHSA-2020:2561","RHSA-2018:0478","RHSA-2018:0479","RHSA-2018:0501","RHSA-2019:1326","RHSA-2018:0294","RHSA-2018:0481"],"bugzilla":"1503610","bugzilla_description":"CVE-2017-15089 infinispan: Unsafe deserialization of malicious object injected into data cache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-1097","severity":"moderate","public_date":"2018-02-10T00:00:00Z","advisories":["RHSA-2018:2927"],"bugzilla":"1561723","bugzilla_description":"CVE-2018-1097 foreman: Ovirt admin password exposed by foreman API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["foreman-0:1.18.0.37-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1097.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2018-1053","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1539619","bugzilla_description":"CVE-2018-1053 postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-6188","severity":"moderate","public_date":"2018-02-05T13:23:00Z","advisories":["RHSA-2018:2927"],"bugzilla":"1538793","bugzilla_description":"CVE-2018-6188 django: Information leakage in AuthenticationForm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":["python-django-0:1.11.11-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6188.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-12174","severity":"important","public_date":"2018-02-05T00:00:00Z","advisories":["RHSA-2018:0270","RHSA-2018:0271","RHSA-2018:0480","RHSA-2020:2561","RHSA-2018:0478","RHSA-2018:0269","RHSA-2018:0479","RHSA-2018:0268","RHSA-2018:0275","RHSA-2018:0481"],"bugzilla":"1498378","bugzilla_description":"CVE-2017-12174 artemis/hornetq: memory exhaustion via UDP and JGroups discovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12174.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1041","severity":"moderate","public_date":"2018-02-05T00:00:00Z","advisories":["RHSA-2018:0270","RHSA-2018:0271","RHSA-2018:0269","RHSA-2018:0268","RHSA-2018:0275"],"bugzilla":"1530457","bugzilla_description":"CVE-2018-1041 jboss-remoting: High CPU Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1041.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10690","severity":"moderate","public_date":"2018-02-05T00:00:00Z","advisories":["RHSA-2018:2927"],"bugzilla":"1566764","bugzilla_description":"CVE-2017-10690 puppet: Environment leakage in puppet-agent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":["puppet-agent-0:5.5.0-2.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10690.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-11236","severity":"moderate","public_date":"2018-02-04T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1581269","bugzilla_description":"CVE-2018-11236 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-121","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-6951","severity":"low","public_date":"2018-02-03T00:00:00Z","advisories":[],"bugzilla":"1545046","bugzilla_description":"CVE-2018-6951 patch: NULL pointer dereference in pch.c:intuit_diff_type() causes a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6951.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6952","severity":"low","public_date":"2018-02-03T00:00:00Z","advisories":["RHSA-2019:2033"],"bugzilla":"1545053","bugzilla_description":"CVE-2018-6952 patch: Double free of memory in pch.c:another_hunk() causes a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["patch-0:2.7.1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6952.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6551","severity":"moderate","public_date":"2018-02-02T00:00:00Z","advisories":[],"bugzilla":"1542119","bugzilla_description":"CVE-2018-6551 glibc: integer overflow in malloc functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6551.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-15698","severity":"moderate","public_date":"2018-01-31T00:00:00Z","advisories":["RHSA-2018:0465","RHSA-2018:0466"],"bugzilla":"1540824","bugzilla_description":"CVE-2017-15698 tomcat-native: Mishandling of client certificates can allow for OCSP check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-299","affected_packages":["tomcat-native-0:1.2.8-11.redhat_11.ep7.el6","tomcat-native-0:1.2.8-11.redhat_11.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-15706","severity":"low","public_date":"2018-01-31T00:00:00Z","advisories":[],"bugzilla":"1540828","bugzilla_description":"CVE-2017-15706 tomcat: Incorrect documentation of CGI Servlet search algorithm may lead to misconfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-1304","severity":"moderate","public_date":"2018-01-31T00:00:00Z","advisories":["RHSA-2019:2205","RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1447","RHSA-2018:0465","RHSA-2018:0466","RHSA-2018:1451","RHSA-2018:1320","RHSA-2018:1450","RHSA-2018:2939"],"bugzilla":"1548289","bugzilla_description":"CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["tomcat-0:7.0.76-9.el7","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","jbossweb-0:7.5.28-1.Final_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1199","severity":"important","public_date":"2018-01-29T00:00:00Z","advisories":["RHSA-2018:2405"],"bugzilla":"1540030","bugzilla_description":"CVE-2018-1199 spring-framework: Improper URL path validation allows for bypassing of security checks on static resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1199.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-6560","severity":"moderate","public_date":"2018-01-29T00:00:00Z","advisories":["RHSA-2018:2766"],"bugzilla":"1542207","bugzilla_description":"CVE-2018-6560 flatpak: sandbox escape in D-Bus filtering by a crafted authentication handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":["flatpak-0:0.8.8-4.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6560.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-5784","severity":"low","public_date":"2018-01-18T00:00:00Z","advisories":[],"bugzilla":"1537740","bugzilla_description":"CVE-2018-5784 libtiff: uncontrolled resource consumption in TIFFSetDirectory function in tif_dir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5784.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5968","severity":"moderate","public_date":"2018-01-18T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2019:3149","RHSA-2018:1525","RHSA-2018:0478","RHSA-2018:0479","RHSA-2019:2858","RHSA-2018:0481"],"bugzilla":"1538332","bugzilla_description":"CVE-2018-5968 jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rhvm-appliance-0:4.2-20180504.0","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5968.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-1048","severity":"moderate","public_date":"2018-01-15T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2018:0478","RHSA-2018:0479","RHSA-2018:0481"],"bugzilla":"1534343","bugzilla_description":"CVE-2018-1048 undertow: ALLOW_ENCODED_SLASH option not taken into account in the AjpRequestParser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"8.6"},{"CVE":"CVE-2018-1000001","severity":"important","public_date":"2018-01-11T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1533836","bugzilla_description":"CVE-2018-1000001 glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000001.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2017-12189","severity":"important","public_date":"2018-01-03T00:00:00Z","advisories":["RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003"],"bugzilla":"1499631","bugzilla_description":"CVE-2017-12189 jboss: unsafe chown of server.log in jboss init script allows privilege escalation (Incomplete fix for CVE-2016-8656)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12189.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-17942","severity":"low","public_date":"2017-12-28T00:00:00Z","advisories":[],"bugzilla":"1529524","bugzilla_description":"CVE-2017-17942 libtiff: Heap-based buffer overflow in PackBitsEncode function in tif_packbits.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-18269","severity":"moderate","public_date":"2017-12-24T00:00:00Z","advisories":[],"bugzilla":"1580924","bugzilla_description":"CVE-2017-18269 glibc: memory corruption in memcpy-sse2-unaligned.S","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18269.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-17840","severity":"moderate","public_date":"2017-12-22T00:00:00Z","advisories":[],"bugzilla":"1529176","bugzilla_description":"CVE-2017-17840 iscsi-initiator-utils: Heap-based buffer overflow in process_iscsid_broadcast()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-16997","severity":"moderate","public_date":"2017-12-17T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1526865","bugzilla_description":"CVE-2017-16997 glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-470","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16997.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-1047","severity":"moderate","public_date":"2017-12-17T00:00:00Z","advisories":["RHSA-2018:2938","RHSA-2018:1248","RHSA-2018:1249","RHSA-2018:1247","RHSA-2018:1251"],"bugzilla":"1528361","bugzilla_description":"CVE-2018-1047 undertow: Path traversal in ServletResourceManager class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-22","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1047.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"8.6"},{"CVE":"CVE-2017-7559","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2018:1322","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1481665","bugzilla_description":"CVE-2017-7559 undertow: HTTP Request smuggling vulnerability (incomplete fix of CVE-2017-2666)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7559.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-12165","severity":"low","public_date":"2017-12-13T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2018:1322","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1490301","bugzilla_description":"CVE-2017-12165 undertow: improper whitespace parsing leading to potential HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12165.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2017-17485","severity":"important","public_date":"2017-12-12T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2018:1448","RHSA-2019:3892","RHSA-2019:1797","RHSA-2018:1449","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2018:0116","RHSA-2018:0480","RHSA-2018:2930","RHSA-2019:2858","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1528565","bugzilla_description":"CVE-2017-17485 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","rh-eclipse46-jackson-databind-0:2.6.3-2.6.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-1000408","severity":"low","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1522828","bugzilla_description":"CVE-2017-1000408 glibc: Memory leak reachable via LD_HWCAP_MASK","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000408.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000409","severity":"moderate","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1522830","bugzilla_description":"CVE-2017-1000409 glibc: Buffer overflow triggerable via LD_LIBRARY_PATH","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000409.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-7545","severity":"moderate","public_date":"2017-11-30T16:00:00Z","advisories":["RHSA-2017:3354","RHSA-2017:3355"],"bugzilla":"1474822","bugzilla_description":"CVE-2017-7545 jbpmmigration: XXE vulnerability in XmlUtils","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7545.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-17095","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":[],"bugzilla":"1524284","bugzilla_description":"CVE-2017-17095 libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-12195","severity":"moderate","public_date":"2017-11-28T00:00:00Z","advisories":["RHSA-2017:3188","RHSA-2017:3389"],"bugzilla":"1501986","bugzilla_description":"CVE-2017-12195 OpenShift Enterprise 3: authentication bypass for elasticsearch with external routes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["openshift-elasticsearch-plugin-0:2.4.4.17__redhat_1-3.el7","openshift-elasticsearch-plugin-0:2.4.1.11__redhat_1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-18197","severity":"moderate","public_date":"2017-11-22T00:00:00Z","advisories":[],"bugzilla":"1550353","bugzilla_description":"CVE-2017-18197 jgraphx: XML External Entity (XXE) vulnerability in mxGraphViewImageReader.java:convert()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-16539","severity":"moderate","public_date":"2017-11-03T00:00:00Z","advisories":[],"bugzilla":"1516205","bugzilla_description":"CVE-2017-16539 docker: The DefaultLinuxSpec function does not block /proc/scsi pathnames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15095","severity":"important","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:3149","RHSA-2017:3190","RHSA-2018:1448","RHSA-2019:3892","RHSA-2018:1449","RHSA-2018:0577","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2017:3189","RHSA-2018:0480","RHSA-2019:2858","RHSA-2018:0576","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1506612","bugzilla_description":"CVE-2017-15095 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","rh-eclipse47-jackson-databind-0:2.7.6-3.3.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","rh-eclipse46-jackson-databind-0:2.6.3-2.4.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-16232","severity":"low","public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1516189","bugzilla_description":"CVE-2017-16232 libtiff: Memory leaks in tif_open.c, tif_lzw.c, and tif_aux.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15100","severity":"moderate","public_date":"2017-10-31T00:00:00Z","advisories":["RHSA-2018:2927"],"bugzilla":"1508551","bugzilla_description":"CVE-2017-15100 foreman: Stored XSS in fact name or value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["foreman-0:1.18.0.37-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-17426","severity":"moderate","public_date":"2017-10-31T00:00:00Z","advisories":[],"bugzilla":"1524530","bugzilla_description":"CVE-2017-17426 glibc: Integer overflow with enabled tcache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17426.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10516","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1512102","bugzilla_description":"CVE-2016-10516 python-werkzeug: Cross-site scripting in render_full function in debug/tbtools.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["python-werkzeug-0:0.12.2-5.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2017-15804","severity":"moderate","public_date":"2017-10-21T00:00:00Z","advisories":["RHSA-2018:1879","RHSA-2018:0805"],"bugzilla":"1505298","bugzilla_description":"CVE-2017-15804 glibc: Buffer overflow during unescaping of user names with the ~ operator","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7","glibc-0:2.12-1.212.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-15671","severity":"low","public_date":"2017-10-20T00:00:00Z","advisories":[],"bugzilla":"1504806","bugzilla_description":"CVE-2017-15671 glibc: Memory leak in glob with GLOB_TILDE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15671.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17740","severity":"moderate","public_date":"2017-10-20T00:00:00Z","advisories":[],"bugzilla":"1527076","bugzilla_description":"CVE-2017-17740 openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15670","severity":"moderate","public_date":"2017-10-19T00:00:00Z","advisories":["RHSA-2018:1879","RHSA-2018:0805"],"bugzilla":"1504804","bugzilla_description":"CVE-2017-15670 glibc: Buffer overflow in glob with GLOB_TILDE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7","glibc-0:2.12-1.212.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15670.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-12159","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1484111","bugzilla_description":"CVE-2017-12159 keycloak: CSRF token fixation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-12160","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1484154","bugzilla_description":"CVE-2017-12160 keycloak: resource privilege extension via access token in oauth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-12158","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1489161","bugzilla_description":"CVE-2017-12158 keycloak: reflected XSS using HOST header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-12197","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1503103","bugzilla_description":"CVE-2017-12197 libpam4j: Account check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-12629","severity":"critical","public_date":"2017-10-12T00:00:00Z","advisories":["RHSA-2020:2561","RHSA-2018:0005","RHSA-2018:0002","RHSA-2017:3452","RHSA-2017:3244","RHSA-2017:3123","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:3451","RHSA-2017:3124"],"bugzilla":"1501529","bugzilla_description":"CVE-2017-12629 Solr: Code execution via entity expansion","cvss_score":10.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-138","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-lucene-solr-0:5.3.1-4.redhat_2.1.ep7.el6","eap7-lucene-solr-0:5.3.1-4.redhat_2.1.ep7.el7","rh-java-common-lucene5-0:5.4.1-2.4.el7","rh-java-common-lucene5-0:5.4.1-2.4.el6","rh-java-common-lucene-0:4.8.0-6.9.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6","rh-java-common-lucene-0:4.8.0-6.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-6485","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1542102","bugzilla_description":"CVE-2018-6485 glibc: Integer overflow in posix_memalign in memalign functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6485.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-14992","severity":"moderate","public_date":"2017-10-03T00:00:00Z","advisories":[],"bugzilla":"1510348","bugzilla_description":"CVE-2017-14992 docker: Lack of content verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-2582","severity":"moderate","public_date":"2017-09-26T00:00:00Z","advisories":["RHSA-2019:0136","RHSA-2019:0137","RHSA-2017:3220","RHSA-2017:3218","RHSA-2017:2811","RHSA-2017:3219","RHSA-2017:3216","RHSA-2017:2810","RHSA-2017:3217","RHSA-2018:2743","RHSA-2017:2808","RHSA-2018:2742","RHSA-2017:2809","RHSA-2018:2741","RHSA-2019:0139","RHSA-2018:2740"],"bugzilla":"1410481","bugzilla_description":"CVE-2017-2582 picketlink, keycloak: SAML request parser replaces special strings with system properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["jboss-ec2-eap-0:7.5.18-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-7536","severity":"moderate","public_date":"2017-09-26T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2018:3817","RHSA-2017:3141","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:2811","RHSA-2017:3458","RHSA-2017:2810","RHSA-2018:2743","RHSA-2017:2808","RHSA-2018:2742","RHSA-2017:2809","RHSA-2018:2741","RHSA-2018:2740"],"bugzilla":"1465573","bugzilla_description":"CVE-2017-7536 hibernate-validator: Privilege escalation when running under the security manager","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","rhvm-appliance-0:20171102.0-1","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2017-12617","severity":"important","public_date":"2017-09-21T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2018:0270","RHSA-2018:0271","RHSA-2017:3080","RHSA-2018:0269","RHSA-2018:0465","RHSA-2018:0268","RHSA-2018:0466","RHSA-2018:0275","RHSA-2017:3113","RHSA-2018:2939","RHSA-2017:3114"],"bugzilla":"1494283","bugzilla_description":"CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat6-0:6.0.41-19_patch_04.ep6.el7","tomcat7-0:7.0.54-28_patch_05.ep6.el7","tomcat6-0:6.0.41-19_patch_04.ep6.el6","tomcat7-0:7.0.54-28_patch_05.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","tomcat6-0:6.0.24-111.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12617.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12155","severity":"moderate","public_date":"2017-09-19T00:00:00Z","advisories":["RHSA-2018:1627","RHSA-2018:0602","RHSA-2018:1593"],"bugzilla":"1489360","bugzilla_description":"CVE-2017-12155 openstack-tripleo-heat-templates: Ceph client keyring is world-readable when deployed by director","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["openstack-tripleo-heat-templates-0:5.3.10-1.el7ost","openstack-tripleo-heat-templates-0:7.0.9-8.el7ost","puppet-tripleo-0:5.6.8-6.el7ost","puppet-tripleo-0:6.5.10-3.el7ost","openstack-tripleo-heat-templates-0:6.2.12-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12155.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cvss3_score":"8.4"},{"CVE":"CVE-2017-12615","severity":"important","public_date":"2017-09-19T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:3080","RHSA-2018:0465","RHSA-2018:0466","RHSA-2017:3113","RHSA-2017:3114"],"bugzilla":"1493220","bugzilla_description":"CVE-2017-12615 tomcat: Remote Code Execution via JSP Upload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat6-0:6.0.41-19_patch_04.ep6.el7","tomcat7-0:7.0.54-28_patch_05.ep6.el7","tomcat6-0:6.0.41-19_patch_04.ep6.el6","tomcat7-0:7.0.54-28_patch_05.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","tomcat6-0:6.0.24-111.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12616","severity":"moderate","public_date":"2017-09-19T00:00:00Z","advisories":["RHSA-2018:0465","RHSA-2018:0466"],"bugzilla":"1493222","bugzilla_description":"CVE-2017-12616 tomcat: Information Disclosure when using VirtualDirContext","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12616.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-14503","severity":"low","public_date":"2017-09-16T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1494449","bugzilla_description":"CVE-2017-14503 libarchive: Out-of-bounds read in lha_read_data_none","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14503.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12167","severity":"moderate","public_date":"2017-09-14T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1491612","bugzilla_description":"CVE-2017-12167 EAP-7: Wrong privileges on multiple property files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-16138","severity":"moderate","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1500700","bugzilla_description":"CVE-2017-16138 nodejs-mime: Regular expression Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16138.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-16137","severity":"moderate","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1500705","bugzilla_description":"CVE-2017-16137 nodejs-debug: Regular expression Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-14623","severity":"moderate","public_date":"2017-08-24T00:00:00Z","advisories":[],"bugzilla":"1493998","bugzilla_description":"CVE-2017-14623 gopkg.in-ldap.v2: Authentication bypass via empty password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7561","severity":"moderate","public_date":"2017-08-22T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2018:0005","RHSA-2018:0478","RHSA-2018:0479","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2018:0481"],"bugzilla":"1483823","bugzilla_description":"CVE-2017-7561 resteasy: Vary header not added by CORS filter leading to cache poisoning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7561.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-13726","severity":"low","public_date":"2017-08-21T00:00:00Z","advisories":[],"bugzilla":"1488886","bugzilla_description":"CVE-2017-13726 libtiff: Reachable assertion abort in the function TIFFWriteDirectorySec()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13726.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13727","severity":"low","public_date":"2017-08-21T00:00:00Z","advisories":[],"bugzilla":"1488887","bugzilla_description":"CVE-2017-13727 libtiff: Reachable assertion abort in the function TIFFWriteDirectoryTagSubifd()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13727.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7674","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:1802","RHSA-2017:1801"],"bugzilla":"1480618","bugzilla_description":"CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat-0:7.0.76-3.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7674.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-7675","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":[],"bugzilla":"1480626","bugzilla_description":"CVE-2017-7675 tomcat: Security Constraint Bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7675.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-12944","severity":"low","public_date":"2017-08-06T00:00:00Z","advisories":[],"bugzilla":"1487202","bugzilla_description":"CVE-2017-12944 libtiff: Mishandled memory allocation for short files in the TIFFReadDirEntryArray function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12944.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14159","severity":"low","public_date":"2017-07-28T00:00:00Z","advisories":[],"bugzilla":"1488751","bugzilla_description":"CVE-2017-14159 openldap: Privilege escalation via PID file manipulation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14159.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-11613","severity":null,"public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475530","bugzilla_description":"CVE-2017-11613 libtiff: Memory leak via corrupt td_imagelength in TIFFOpen function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11613.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7525","severity":"important","public_date":"2017-07-14T00:00:00Z","advisories":["RHSA-2018:1449","RHSA-2017:3141","RHSA-2017:2477","RHSA-2017:1840","RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2637","RHSA-2017:2638","RHSA-2018:0294","RHSA-2019:3149","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:2547","RHSA-2017:3458","RHSA-2017:2546","RHSA-2017:1835","RHSA-2017:1834","RHSA-2017:1837","RHSA-2017:1836","RHSA-2019:0910","RHSA-2019:2858","RHSA-2017:1839","RHSA-2018:0342","RHSA-2018:1450"],"bugzilla":"1462702","bugzilla_description":"CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["devtoolset-4-jackson-databind-0:2.5.0-2.4.el6","openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-eclipse46-jackson-databind-0:2.6.3-2.3.el7","devtoolset-4-jackson-databind-0:2.5.0-2.4.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:20171102.0-1","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7525.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-11335","severity":"moderate","public_date":"2017-07-14T00:00:00Z","advisories":[],"bugzilla":"1474356","bugzilla_description":"CVE-2017-11335 libtiff: Heap-based buffer overflow in tiff2pdf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11335.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-9935","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469725","bugzilla_description":"CVE-2017-9935 libtiff: Heap-based buffer overflow in t2p_write_pdf function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9935.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9936","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469728","bugzilla_description":"CVE-2017-9936 libtiff: memory leak in tif_jbig.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9936.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9937","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469732","bugzilla_description":"CVE-2017-9937 libtiff: memory malloc failure in tif_jbig.c could cause DOS.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9937.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10688","severity":"low","public_date":"2017-06-29T00:00:00Z","advisories":[],"bugzilla":"1470241","bugzilla_description":"CVE-2017-10688 libtiff: Assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10688.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9233","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1462729","bugzilla_description":"CVE-2017-9233 expat: Inifinite loop due to invalid XML in external entity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2014-9984","severity":"critical","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1463288","bugzilla_description":"CVE-2014-9984 glibc: nscd buffer manipulation vulnerability could lead to code execution or crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9984.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-9780","severity":"moderate","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1465025","bugzilla_description":"CVE-2017-9780 flatpak: Privilege escalation via setuid/world-writable file permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9780.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-2595","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:1550","RHSA-2017:3456","RHSA-2017:1552","RHSA-2017:1551","RHSA-2017:1411","RHSA-2017:3454","RHSA-2017:1410","RHSA-2017:3455","RHSA-2017:1412","RHSA-2017:3458","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1409"],"bugzilla":"1413028","bugzilla_description":"CVE-2017-2595 wildfly: Arbitrary file read via path traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2595.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2017-2666","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:1412","RHSA-2017:3458","RHSA-2017:1409","RHSA-2017:3456","RHSA-2017:1411","RHSA-2017:3454","RHSA-2017:1410","RHSA-2017:3455"],"bugzilla":"1436163","bugzilla_description":"CVE-2017-2666 undertow: HTTP Request smuggling vulnerability due to permitting invalid characters in HTTP requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2666.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-2670","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:1412","RHSA-2017:3458","RHSA-2018:0501","RHSA-2017:3244","RHSA-2017:1409","RHSA-2017:3456","RHSA-2017:1411","RHSA-2017:3454","RHSA-2017:1410","RHSA-2017:3455"],"bugzilla":"1438885","bugzilla_description":"CVE-2017-2670 undertow: IO thread DoS via unclean Websocket closing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2670.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5664","severity":"important","public_date":"2017-06-06T00:00:00Z","advisories":["RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:3080","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2637","RHSA-2017:2638","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:1809"],"bugzilla":"1459158","bugzilla_description":"CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["tomcat-0:7.0.69-12.el7_3","tomcat8-0:8.0.36-24.ep7.el7","tomcat7-0:7.0.70-22.ep7.el6","tomcat8-0:8.0.36-24.ep7.el6","jbossweb-0:7.5.24-1.Final_redhat_1.1.ep6.el7","tomcat7-0:7.0.70-22.ep7.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el6","tomcat6-0:6.0.24-111.el6_9","tomcat6-0:6.0.41-17_patch_04.ep6.el7","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","tomcat6-0:6.0.41-17_patch_04.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-7470","severity":"moderate","public_date":"2017-05-18T00:00:00Z","advisories":["RHSA-2017:1259"],"bugzilla":"1439622","bugzilla_description":"CVE-2017-7470 spacewalk-backend: spacewalk-channel can be used by non-admin or disabled users for performing administrative tasks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["spacewalk-backend-0:2.0.3-45.el6sat","spacewalk-backend-0:2.3.3-49.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-9083","severity":"low","public_date":"2017-05-18T00:00:00Z","advisories":[],"bugzilla":"1453198","bugzilla_description":"CVE-2017-9083 poppler: Null pointer dereference in the JPXStream::readUByte function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9083.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9147","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1454655","bugzilla_description":"CVE-2017-9147 libtiff: Out of bounds read in _TIFFVGetField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9147.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7464","severity":"moderate","public_date":"2017-05-11T00:00:00Z","advisories":[],"bugzilla":"1439520","bugzilla_description":"CVE-2017-7464 JBoss: JAXP in EAP 7.0 allows info disclosure via XXE","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7464.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H","cvss3_score":"8.7"},{"CVE":"CVE-2017-8804","severity":"moderate","public_date":"2017-05-08T00:00:00Z","advisories":[],"bugzilla":"1448794","bugzilla_description":"CVE-2017-8804 glibc: memory leak in sunrpc when decoding malformed XDR","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-9117","severity":"moderate","public_date":"2017-05-07T00:00:00Z","advisories":[],"bugzilla":"1456756","bugzilla_description":"CVE-2017-9117 libtiff: Heap-based buffer over-read in bmp2tiff","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9117.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6512","severity":"low","public_date":"2017-05-02T00:00:00Z","advisories":[],"bugzilla":"1457832","bugzilla_description":"CVE-2017-6512 perl-File-Path: rmtree/remove_tree race condition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6512.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-9403","severity":"low","public_date":"2017-04-20T00:00:00Z","advisories":[],"bugzilla":"1458902","bugzilla_description":"CVE-2017-9403 libtiff: Memory leak in TIFFReadDirEntryLong8Array","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9403.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9404","severity":"low","public_date":"2017-04-20T00:00:00Z","advisories":[],"bugzilla":"1458904","bugzilla_description":"CVE-2017-9404 libtiff: Memory leak in OJPEGReadHeaderInfoSecTablesQTable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9404.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16881","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHBA-2019:2501","RHSA-2019:2110","RHSA-2019:2439","RHSA-2019:2437"],"bugzilla":"1658366","bugzilla_description":"CVE-2018-16881 rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190","affected_packages":["rsyslog-0:8.24.0-41.el7_7","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","rsyslog-0:8.24.0-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16881.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-7465","severity":"important","public_date":"2017-04-11T00:00:00Z","advisories":["RHSA-2020:2563"],"bugzilla":"1439980","bugzilla_description":"CVE-2017-7465 JBoss: JAXP in EAP 7.0 allows RCE via XSL","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7465.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2017-7697","severity":"low","public_date":"2017-04-11T00:00:00Z","advisories":[],"bugzilla":"1441641","bugzilla_description":"CVE-2017-7697 libsamplerate: Buffer overflow in calc_output_single","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7697.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5647","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:3080","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494"],"bugzilla":"1441205","bugzilla_description":"CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat8-0:8.0.36-24.ep7.el7","tomcat7-0:7.0.70-22.ep7.el6","tomcat8-0:8.0.36-24.ep7.el6","tomcat7-0:7.0.70-22.ep7.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el6","tomcat6-0:6.0.24-111.el6_9","tomcat6-0:6.0.41-17_patch_04.ep6.el7","tomcat6-0:6.0.41-17_patch_04.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-5648","severity":"moderate","public_date":"2017-04-10T00:00:00Z","advisories":["RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:1809"],"bugzilla":"1441223","bugzilla_description":"CVE-2017-5648 tomcat: Calls to application listeners did not use the appropriate facade object","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat-0:7.0.69-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5648.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2017-5651","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":[],"bugzilla":"1441226","bugzilla_description":"CVE-2017-5651 tomcat: Incorrect handling of send file processing could result into adding Processort to the cache twice","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5651.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-5650","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":[],"bugzilla":"1441230","bugzilla_description":"CVE-2017-5650 tomcat: Handling of HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5650.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5662","severity":"moderate","public_date":"2017-04-10T00:00:00Z","advisories":["RHSA-2017:2547","RHSA-2018:0319","RHSA-2017:2546"],"bugzilla":"1443592","bugzilla_description":"CVE-2017-5662 batik: XML external entity processing vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5662.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-7595","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441248","bugzilla_description":"CVE-2017-7595 libtiff: Divide-by-zero in JPEGSetupEncode (tiff_jpeg.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7595.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7596","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441250","bugzilla_description":"CVE-2017-7596 libtiff: Float out of range issue in tif_dir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7596.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7597","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441252","bugzilla_description":"CVE-2017-7597 libtiff: Float out of range issue in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7597.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7598","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441254","bugzilla_description":"CVE-2017-7598 libtiff: Divide-by-zero in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7598.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7599","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441259","bugzilla_description":"CVE-2017-7599 libtiff: Unsigned short out of range in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7599.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7600","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441260","bugzilla_description":"CVE-2017-7600 libtiff: Unsigned char out of range in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7600.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7601","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441261","bugzilla_description":"CVE-2017-7601 libtiff: Signed integer overflow in tif_jpeg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7601.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7602","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441263","bugzilla_description":"CVE-2017-7602 libtiff: Signed integer overflow in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7602.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12132","severity":"low","public_date":"2017-04-07T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1477529","bugzilla_description":"CVE-2017-12132 glibc: Fragmentation attacks possible when EDNS0 is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12132.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.0"},{"CVE":"CVE-2017-7233","severity":"moderate","public_date":"2017-04-04T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2017:1445","RHSA-2017:3093","RHSA-2017:1470","RHSA-2017:1451","RHSA-2017:1462","RHSA-2017:1596"],"bugzilla":"1437234","bugzilla_description":"CVE-2017-7233 python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["python-django-0:1.8.18-1.el7ost","python-django-0:1.11.11-1.el7sat","python-django-0:1.6.11-7.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-2672","severity":"moderate","public_date":"2017-04-04T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1439537","bugzilla_description":"CVE-2017-2672 foreman: Image password leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-312","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2672.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-5645","severity":"important","public_date":"2017-04-02T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2635","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1417","RHSA-2017:1801","RHSA-2017:2637","RHSA-2017:2638","RHSA-2017:2808","RHSA-2017:2809"],"bugzilla":"1443635","bugzilla_description":"CVE-2017-5645 log4j: Socket receiver deserialization vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-java-common-log4j-0:1.2.17-15.15.el6","log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7","rh-java-common-log4j-0:1.2.17-15.15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3204","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":[],"bugzilla":"1439748","bugzilla_description":"CVE-2017-3204 golang-googlecode-go-crypto: Go SSH library does not verify host keys by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-11671","severity":"low","public_date":"2017-03-25T00:00:00Z","advisories":["RHSA-2018:0849"],"bugzilla":"1475733","bugzilla_description":"CVE-2017-11671 gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gcc-0:4.8.5-28.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11671.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9589","severity":"moderate","public_date":"2017-03-22T00:00:00Z","advisories":["RHSA-2017:0830","RHSA-2017:0873","RHSA-2017:0832","RHSA-2017:3458","RHSA-2017:0876","RHSA-2017:0831","RHSA-2017:0834","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:0872","RHSA-2017:3455"],"bugzilla":"1404782","bugzilla_description":"CVE-2016-9589 wildfly: ParseState headerValuesCache can be exploited to fill heap with garbage","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9589.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-16012","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":["RHSA-2018:0501","RHSA-2020:0983"],"bugzilla":"1591854","bugzilla_description":"CVE-2017-16012 js-jquery: XSS in responses from cross-origin ajax requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2016-8747","severity":"moderate","public_date":"2017-03-13T00:00:00Z","advisories":[],"bugzilla":"1432006","bugzilla_description":"CVE-2016-8747 tomcat: Information leak between requests on the same connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8747.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-2623","severity":"moderate","public_date":"2017-03-02T00:00:00Z","advisories":["RHSA-2017:0444"],"bugzilla":"1422157","bugzilla_description":"CVE-2017-2623 rpm-ostree, rpm-ostree-client: fails to check gpg package signatures when layering","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["rpm-ostree-0:2017.1-5.atomic.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-1000048","severity":"moderate","public_date":"2017-03-01T00:00:00Z","advisories":["RHSA-2017:2672"],"bugzilla":"1427872","bugzilla_description":"CVE-2017-1000048 nodejs-qs: Prototype override protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs6-nodejs-qs-0:6.2.3-1.el7","rh-nodejs6-nodejs-qs-0:6.2.3-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-1000056","severity":"moderate","public_date":"2017-03-01T00:00:00Z","advisories":[],"bugzilla":"1486336","bugzilla_description":"CVE-2017-1000056 kubernetes: Privilege escalation in the PodSecurityPolicy admission plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-9970","severity":"moderate","public_date":"2017-02-20T00:00:00Z","advisories":["RHSA-2017:2547","RHSA-2017:2811","RHSA-2017:2546","RHSA-2017:2810","RHSA-2017:2904","RHSA-2017:3141","RHSA-2017:2808","RHSA-2017:2809","RHSA-2017:2905","RHSA-2017:2906","RHSA-2018:0294"],"bugzilla":"1455566","bugzilla_description":"CVE-2014-9970 jasypt: Vulnerable to timing attack against the password hash comparison","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6","rhvm-appliance-0:20171102.0-1","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9970.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2017-2621","severity":"moderate","public_date":"2017-02-15T00:00:00Z","advisories":["RHSA-2017:1464","RHSA-2017:1243"],"bugzilla":"1420990","bugzilla_description":"CVE-2017-2621 openstack-heat: /var/log/heat/ is world readable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["openstack-heat-1:6.1.0-3.el7ost","openstack-heat-1:7.0.2-4.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2621.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3163","severity":"moderate","public_date":"2017-02-15T00:00:00Z","advisories":["RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1447","RHSA-2018:1451","RHSA-2018:1450"],"bugzilla":"1454783","bugzilla_description":"CVE-2017-3163 solr: Directory traversal via Index Replication HTTP API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3163.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-12133","severity":"low","public_date":"2017-02-08T00:00:00Z","advisories":[],"bugzilla":"1478288","bugzilla_description":"CVE-2017-12133 glibc: Use-after-free read access in clntudp_call in sunrpc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12133.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-9578","severity":"moderate","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:0549","RHSA-2017:0254","RHSA-2017:0253","RHSA-2017:0552"],"bugzilla":"1399566","bugzilla_description":"CVE-2016-9578 spice: Remote DoS via crafted message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-770","affected_packages":["spice-server-0:0.12.4-13.el6_8.2","spice-0:0.12.4-20.el7_3","rhevm-appliance-0:20170307.0-1","redhat-virtualization-host-0:4.0-20170307.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9578.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9577","severity":"moderate","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:0549","RHSA-2017:0254","RHSA-2017:0253","RHSA-2017:0552"],"bugzilla":"1401603","bugzilla_description":"CVE-2016-9577 spice: Buffer overflow in main_channel_alloc_msg_rcv_buf when reading large messages","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-20->CWE-122","affected_packages":["spice-server-0:0.12.4-13.el6_8.2","spice-0:0.12.4-20.el7_3","rhevm-appliance-0:20170307.0-1","redhat-virtualization-host-0:4.0-20170307.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-10228","severity":"low","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1428290","bugzilla_description":"CVE-2016-10228 glibc: iconv program can hang when invoked with the -c option","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10228.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8627","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:0171","RHSA-2017:0170","RHSA-2017:0250","RHSA-2017:0173","RHSA-2017:0172","RHSA-2017:3456","RHSA-2017:0245","RHSA-2017:3454","RHSA-2017:0244","RHSA-2017:3455","RHSA-2017:0247","RHSA-2017:0246","RHSA-2017:3458"],"bugzilla":"1388240","bugzilla_description":"CVE-2016-8627 admin-cli: Potential EAP resource starvation DOS attack via GET requests for server log files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-5563","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1416109","bugzilla_description":"CVE-2017-5563 libtiff: Heap-buffer overflow in LZWEncode tif_lzw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5563.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5225","severity":"moderate","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1412716","bugzilla_description":"CVE-2017-5225 libtiff: Heap-buffer overflow in tools/tiffcp via crafted BitsPerSample value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5225.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9962","severity":"important","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:0116","RHSA-2017:0127","RHSA-2017:0123"],"bugzilla":"1409531","bugzilla_description":"CVE-2016-9962 docker: insecure opening of file-descriptor allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["runc-0:1.0.0-1.rc2.el7","docker-2:1.12.5-14.el7","docker-latest-0:1.12.5-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9962.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7592","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441240","bugzilla_description":"CVE-2017-7592 libtiff: Left shift of unsigned char without a cast","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-704","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7592.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7593","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441246","bugzilla_description":"CVE-2017-7593 libtiff: tif_rawdata not properly initialized in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7593.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7594","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441247","bugzilla_description":"CVE-2017-7594 libtiff: Memory leak in OJPEGReadHeaderInfoSecTablesDcTable function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7594.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7060","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:0256"],"bugzilla":"1379909","bugzilla_description":"CVE-2016-7060 Red Hat QCI: qci exposes password in web UI when they should be masked","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":"CWE-200","affected_packages":["tfm-rubygem-fusor_ui-0:1.0.9.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7060.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.9"},{"CVE":"CVE-2016-10745","severity":"important","public_date":"2016-12-29T00:00:00Z","advisories":["RHSA-2019:1022","RHSA-2019:3964","RHSA-2019:1237","RHSA-2019:4062","RHSA-2019:1260","RHSA-2019:3172"],"bugzilla":"1698345","bugzilla_description":"CVE-2016-10745 python-jinja2: Sandbox escape due to information disclosure via str.format","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","python27-python-jinja2-0:2.6-15.el7","python-jinja2-0:2.7.2-3.el7_4","python-jinja2-0:2.7.2-3.el7_5","python-jinja2-0:2.7.2-3.el7_6","rh-python35-python-jinja2-0:2.8.1-2.el7","rh-python35-python-jinja2-0:2.8.1-2.el6","python27-python-jinja2-0:2.6-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2016-10094","severity":"moderate","public_date":"2016-12-20T00:00:00Z","advisories":[],"bugzilla":"1410119","bugzilla_description":"CVE-2016-10094 libtiff: Off-by-one error in t2p_readwrite_pdf_image_tile() causing heap buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10094.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9606","severity":"moderate","public_date":"2016-12-15T00:00:00Z","advisories":["RHSA-2018:2913","RHSA-2017:1260","RHSA-2017:1253","RHSA-2018:2909","RHSA-2017:1255","RHSA-2017:1254","RHSA-2017:1675","RHSA-2017:1411","RHSA-2017:1256","RHSA-2017:1410","RHSA-2017:1676","RHSA-2017:1412","RHSA-2017:1409"],"bugzilla":"1400644","bugzilla_description":"CVE-2016-9606 Resteasy: Yaml unmarshalling vulnerable to RCE","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["resteasy-0:2.3.19-1.Final_redhat_1.1.ep6.el5","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","jboss-ec2-eap-0:7.5.15-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-8745","severity":"important","public_date":"2016-12-12T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:0935","RHSA-2017:0527"],"bugzilla":"1403824","bugzilla_description":"CVE-2016-8745 tomcat: information disclosure due to incorrect Processor sharing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat-0:7.0.69-11.el7_3","tomcat6-0:6.0.24-105.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-8651","severity":"low","public_date":"2016-12-07T00:00:00Z","advisories":["RHSA-2016:2915"],"bugzilla":"1397987","bugzilla_description":"CVE-2016-8651 OpenShift Enterprise 3: Pulling of any image is possible with it manifest","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.1.1.10-1.git.0.efeef8d.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8651.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-10095","severity":null,"public_date":"2016-12-04T00:00:00Z","advisories":[],"bugzilla":"1410063","bugzilla_description":"CVE-2016-10095 libtiff: Stack-based buffer overflow in _TIFFVGetField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10095.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-10092","severity":"moderate","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1410067","bugzilla_description":"CVE-2016-10092 libtiff: Heap-based buffer overflow in _TIFFFax3fillruns","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10092.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10270","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438441","bugzilla_description":"CVE-2016-10270 libtiff: Heap-based buffer overflow in tiff_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10270.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10269","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438443","bugzilla_description":"CVE-2016-10269 libtiff: Heap-based buffer overflow in tiff_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10269.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10267","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438449","bugzilla_description":"CVE-2016-10267 libtiff: Divide-by-zero in tif_ojpeg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10267.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10271","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438453","bugzilla_description":"CVE-2016-10271 libtiff: Heap-based buffer overflow in tif_fax3.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10271.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10272","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438458","bugzilla_description":"CVE-2016-10272 libtiff: Heap-based buffer overflow in tif_next.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10272.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10268","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1438447","bugzilla_description":"CVE-2016-10268 libtiff: Integer underflow in tiffcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10268.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10266","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1438472","bugzilla_description":"CVE-2016-10266 libtiff: Divide-by-zero in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10266.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10093","severity":"moderate","public_date":"2016-11-27T00:00:00Z","advisories":[],"bugzilla":"1410116","bugzilla_description":"CVE-2016-10093 libtiff: Integer overflow in DECLAREreadFunc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10093.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6817","severity":"important","public_date":"2016-11-22T00:00:00Z","advisories":[],"bugzilla":"1397474","bugzilla_description":"CVE-2016-6817 tomcat: Infinite loop in HTTP/2 header parser","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6816","severity":"moderate","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0247","RHSA-2017:0456","RHSA-2017:0246","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:0935","RHSA-2017:0527","RHSA-2017:0250","RHSA-2017:0245","RHSA-2017:0244"],"bugzilla":"1397484","bugzilla_description":"CVE-2016-6816 tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-444","affected_packages":["tomcat-0:7.0.69-11.el7_3","tomcat6-0:6.0.24-105.el6_8","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","jbossweb-0:7.5.20-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-8735","severity":"important","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457"],"bugzilla":"1397485","bugzilla_description":"CVE-2016-8735 tomcat: Remote code execution vulnerability in JmxRemoteLifecycleListener","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-9453","severity":"moderate","public_date":"2016-11-18T00:00:00Z","advisories":[],"bugzilla":"1397723","bugzilla_description":"CVE-2016-9453 libtiff: Out-of-bounds access in t2p_readwrite_pdf_image_tile()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9453.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9448","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1397734","bugzilla_description":"CVE-2016-9448 libtiff: Null pointer dereference in TIFFFetchNormalTag() (regression of CVE-2016-9297)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9063","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396540","bugzilla_description":"CVE-2016-9063 firefox: Possible integer overflow to fix inside XML_Parse in Expat","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9063.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9532","severity":"low","public_date":"2016-11-11T00:00:00Z","advisories":[],"bugzilla":"1397726","bugzilla_description":"CVE-2016-9532 libtiff: Multiple uint32 overflows leading to heap buffer over-read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9532.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7061","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":["RHSA-2017:0171","RHSA-2017:0170","RHSA-2017:0250","RHSA-2017:0173","RHSA-2017:0172","RHSA-2017:3456","RHSA-2017:0245","RHSA-2017:3454","RHSA-2017:0244","RHSA-2017:3455","RHSA-2017:0247","RHSA-2017:0246","RHSA-2017:3458"],"bugzilla":"1380852","bugzilla_description":"CVE-2016-7061 EAP: Sensitive data can be exposed at the server level in domain mode","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-9273","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1395164","bugzilla_description":"CVE-2016-9273 libtiff: Out-of-bounds heap read in cpStrips","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9273.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9297","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1395264","bugzilla_description":"CVE-2016-9297 libtiff: Out-of-bounds heap read in _TIFFPrintField (tif_print.c:127)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-170","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9297.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9535","severity":"moderate","public_date":"2016-11-04T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397755","bugzilla_description":"CVE-2016-9535 libtiff: Predictor heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8634","severity":"moderate","public_date":"2016-11-03T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1391520","bugzilla_description":"CVE-2016-8634 foreman: Stored XSS in org/loc wizard","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-79","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-9185","severity":"low","public_date":"2016-11-03T00:00:00Z","advisories":["RHSA-2017:1456","RHSA-2017:1450","RHSA-2017:1464"],"bugzilla":"1391895","bugzilla_description":"CVE-2016-9185 openstack-heat: Template source URL allows network port scan","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["openstack-heat-0:2015.1.4-3.el7ost","openstack-heat-1:5.0.3-2.el7ost","openstack-heat-1:6.1.0-3.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9185.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-8631","severity":"moderate","public_date":"2016-11-01T00:00:00Z","advisories":["RHSA-2016:2696"],"bugzilla":"1390735","bugzilla_description":"CVE-2016-8631 OSE 3: Router sometimes selects new routes over old routes when determining claimed hostnames","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.3.1.4-1.git.0.7c8657c.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8631.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-8704","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390510","bugzilla_description":"CVE-2016-8704 memcached: Server append/prepend remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-8705","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390511","bugzilla_description":"CVE-2016-8705 memcached: Server update remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-6797","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:2247"],"bugzilla":"1390493","bugzilla_description":"CVE-2016-6797 tomcat: unrestricted access to global resources","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.70-16.ep7.el6","tomcat8-0:8.0.36-17.ep7.el6","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-6796","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1550","RHSA-2017:1552","RHSA-2017:2247","RHSA-2017:1551"],"bugzilla":"1390515","bugzilla_description":"CVE-2016-6796 tomcat: security manager bypass via JSP Servlet config parameters","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","jbossweb-0:7.5.23-1.Final_redhat_1.1.ep6.el7","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-6794","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:2247"],"bugzilla":"1390520","bugzilla_description":"CVE-2016-6794 tomcat: system property disclosure","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.70-16.ep7.el6","tomcat8-0:8.0.36-17.ep7.el6","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6794.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5018","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1550","RHSA-2017:1552","RHSA-2017:2247","RHSA-2017:1551"],"bugzilla":"1390525","bugzilla_description":"CVE-2016-5018 tomcat: security manager bypass via IntrospectHelper utility function","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","jbossweb-0:7.5.23-1.Final_redhat_1.1.ep6.el7","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5018.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-0762","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:2247"],"bugzilla":"1390526","bugzilla_description":"CVE-2016-0762 tomcat: timing attack in Realm implementation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.70-16.ep7.el6","tomcat8-0:8.0.36-17.ep7.el6","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-5405","severity":"low","public_date":"2016-10-26T00:00:00Z","advisories":["RHSA-2016:2594","RHSA-2016:2765"],"bugzilla":"1358865","bugzilla_description":"CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["389-ds-base-0:1.3.5.10-11.el7","389-ds-base-0:1.2.11.15-84.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2016-5652","severity":"moderate","public_date":"2016-10-25T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1389222","bugzilla_description":"CVE-2016-5652 libtiff: tiff2pdf JPEG Compression Tables Heap Buffer Overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-5875","severity":"important","public_date":"2016-10-25T00:00:00Z","advisories":[],"bugzilla":"1389228","bugzilla_description":"CVE-2016-5875 libtiff: PixarLogDecode Heap Buffer Overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5875.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-8331","severity":"moderate","public_date":"2016-10-25T00:00:00Z","advisories":[],"bugzilla":"1389229","bugzilla_description":"CVE-2016-8331 libtiff: FAX IFD Entry Parsing Type Confusion","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-8613","severity":"moderate","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1387232","bugzilla_description":"CVE-2016-8613 foreman: Stored XSS vulnerability in remote execution plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["tfm-rubygem-foreman_remote_execution-0:1.3.7.2-1.fm1_15.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8613.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2016-7078","severity":"low","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1386244","bugzilla_description":"CVE-2016-7078 foreman: Information leak through organizations and locations feature","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-285","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-7077","severity":"low","public_date":"2016-10-17T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1385777","bugzilla_description":"CVE-2016-7077 foreman: Foreman information leak through unauthorized multiple_checkboxes helper","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-285","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7077.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9539","severity":"moderate","public_date":"2016-10-14T00:00:00Z","advisories":[],"bugzilla":"1397767","bugzilla_description":"CVE-2016-9539 libtiff: Out-of-bounds read in readContigTilesIntoBuffer()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9539.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5425","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2016:2046"],"bugzilla":"1362545","bugzilla_description":"CVE-2016-5425 tomcat: Local privilege escalation via systemd-tmpfiles service","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":["tomcat-0:7.0.54-8.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5425.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6325","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2017:0456","RHSA-2016:2045","RHSA-2017:0455","RHSA-2017:0457"],"bugzilla":"1367447","bugzilla_description":"CVE-2016-6325 tomcat: tomcat writable config files allow privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6325.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-7075","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2016:2064"],"bugzilla":"1384112","bugzilla_description":"CVE-2016-7075 OpenShift 3: API server does not validate client-provided intermediate certificates correctly","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:C/A:N","CWE":"CWE-295","affected_packages":["atomic-openshift-0:3.1.1.8-1.git.0.d469026.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-8657","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2017:0827","RHSA-2017:0826","RHSA-2017:0829","RHSA-2017:0828","RHSA-2018:1609"],"bugzilla":"1400343","bugzilla_description":"CVE-2016-8657 jboss: jbossas writable config files allow privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-732","affected_packages":["jbossas-0:5.2.0-23.ep5.el5","jbossas-0:5.2.0-23.ep5.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9538","severity":"moderate","public_date":"2016-10-08T00:00:00Z","advisories":[],"bugzilla":"1397765","bugzilla_description":"CVE-2016-9538 libtiff: Integer overflow leads to reading undefined buffer in readContigStripsIntoBuffer()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9538.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9540","severity":"moderate","public_date":"2016-10-08T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397768","bugzilla_description":"CVE-2016-9540 libtiff: cpStripToTile heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9540.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9534","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397751","bugzilla_description":"CVE-2016-9534 libtiff: TIFFFlushData1 heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9534.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9536","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397758","bugzilla_description":"CVE-2016-9536 libtiff: t2p_process_jpeg_strip heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9537","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397760","bugzilla_description":"CVE-2016-9537 libtiff: Out-of-bounds write vulnerabilities in tools/tiffcrop.c","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9537.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9533","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397769","bugzilla_description":"CVE-2016-9533 libtiff: PixarLog horizontalDifference heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9533.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-4978","severity":"moderate","public_date":"2016-09-23T00:00:00Z","advisories":["RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1447","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:3458","RHSA-2017:1835","RHSA-2017:1834","RHSA-2017:1837","RHSA-2017:1836","RHSA-2018:1451","RHSA-2018:1450"],"bugzilla":"1379207","bugzilla_description":"CVE-2016-4978 Apache ActiveMQ Artemis: Deserialization of untrusted input vulnerability","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el7","hornetq-0:2.3.25-26.SP24_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.6"},{"CVE":"CVE-2016-7046","severity":"important","public_date":"2016-09-15T00:00:00Z","advisories":["RHSA-2016:2640","RHSA-2016:2642","RHSA-2017:3458","RHSA-2016:2641","RHSA-2017:3456","RHSA-2016:2657","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1376646","bugzilla_description":"CVE-2016-7046 undertow: Long URL proxy request lead to java.nio.BufferOverflowException and DoS","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-119","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.3-3.GA_redhat_2.ep7.el6","eap7-jboss-ec2-eap-0:7.0.3-3.GA_redhat_2.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7046.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-1240","severity":"important","public_date":"2016-09-15T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457"],"bugzilla":"1376712","bugzilla_description":"CVE-2016-1240 tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1240.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8656","severity":"important","public_date":"2016-09-15T00:00:00Z","advisories":["RHSA-2017:0246","RHSA-2017:0832","RHSA-2017:3458","RHSA-2017:0831","RHSA-2017:0834","RHSA-2017:0250","RHSA-2017:0245","RHSA-2017:3454","RHSA-2018:1609","RHSA-2017:0244","RHSA-2017:3455"],"bugzilla":"1400344","bugzilla_description":"CVE-2016-8656 jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":["jbossas-0:5.2.0-23.ep5.el5","eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8656.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-5418","severity":"important","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844","RHSA-2016:1852","RHSA-2016:1853"],"bugzilla":"1362601","bugzilla_description":"CVE-2016-5418 libarchive: Archive Entry with type 1 (hardlink), but has a non-zero data size file overwrite","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-20->CWE-22","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2","atomic-openshift-0:3.1.1.7-1.git.0.65f396b.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5418.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-4993","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2016:1838","RHSA-2016:1839","RHSA-2017:3456","RHSA-2016:1840","RHSA-2016:1841","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1344321","bugzilla_description":"CVE-2016-4993 eap: HTTP header injection / response splitting","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-113","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-6345","severity":"low","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372117","bugzilla_description":"CVE-2016-6345 RESTEasy: Insufficient use of random values in RESTEasy async jobs could lead to loss of data confidentiality","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-6346","severity":"moderate","public_date":"2016-09-01T00:00:00Z","advisories":["RHSA-2019:1222","RHSA-2018:0005","RHSA-2017:1675","RHSA-2017:1676","RHSA-2017:0517","RHSA-2017:0827","RHSA-2018:0002","RHSA-2017:0826","RHSA-2017:0829","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:0828","RHSA-2018:2143"],"bugzilla":"1372120","bugzilla_description":"CVE-2016-6346 RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6347","severity":"moderate","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372124","bugzilla_description":"CVE-2016-6347 RESTEasy: Use of the default exception handler in RESTEasy can lead to reflected XSS attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-6348","severity":"low","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372129","bugzilla_description":"CVE-2016-6348 RESTEasy: Use of JacksonJsonpInterceptor in RESTEasy can lead to Cross Site Script Inclusion attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-2183","severity":"moderate","public_date":"2016-08-24T00:00:00Z","advisories":["RHSA-2020:0451","RHSA-2020:3842","RHSA-2017:3240","RHSA-2019:1245","RHBA-2019:2581","RHSA-2017:0462","RHSA-2017:3113","RHSA-2017:3114","RHSA-2017:2710","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:3239","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:2709","RHSA-2017:2708","RHSA-2018:2123","RHSA-2019:2859"],"bugzilla":"1369383","bugzilla_description":"CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","openshift3/metrics-heapster:v3.11.141-2","python-0:2.7.5-69.el7_5","openshift3/ose-console:v3.11.141-2","openshift3/oauth-proxy:v3.11.170-5","openshift4/ose-console:v4.5.0-202009201759.p0","openshift3/ose-kube-rbac-proxy:v3.11.141-2","openshift3/ose-metrics-server:v3.11.141-2","java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8","openshift4/ose-oauth-proxy:v4.1.18-201909201915"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-3110","severity":"moderate","public_date":"2016-08-22T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:1650","RHSA-2016:2055","RHSA-2016:2054","RHSA-2016:1648","RHSA-2016:1649"],"bugzilla":"1326320","bugzilla_description":"CVE-2016-3110 mod_cluster: remotely Segfault Apache http server","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["mod_cluster-0:1.2.13-1.Final_redhat_1.1.ep6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3110.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2016-4973","severity":"moderate","public_date":"2016-08-17T00:00:00Z","advisories":[],"bugzilla":"1324759","bugzilla_description":"CVE-2016-4973 gcc: Targets using libssp for SSP are missing -D_FORTIFY_SOURCE functionality","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4973.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2016-6319","severity":"moderate","public_date":"2016-08-09T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1365815","bugzilla_description":"CVE-2016-6319 foreman: Persistent XSS in Foreman remote execution plugin","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-79","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6319.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-6323","severity":"low","public_date":"2016-08-04T00:00:00Z","advisories":[],"bugzilla":"1383297","bugzilla_description":"CVE-2016-6323 glibc: Missing unwind info in __startcontext causes infinite loop in _Unwind_Backtrace","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5417","severity":"low","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1362534","bugzilla_description":"CVE-2016-5417 glibc: per-thread memory leak in __res_vinit with IPv6 nameservers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5417.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-5406","severity":"moderate","public_date":"2016-07-26T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2016:1838","RHSA-2016:1839","RHSA-2017:3456","RHSA-2016:1840","RHSA-2016:1841","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1359014","bugzilla_description":"CVE-2016-5406 EAP7 Privilege escalation when managing domain including earlier version slaves","cvss_score":7.0,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:C/A:C","CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5406.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7103","severity":"low","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2017:0161","RHSA-2016:2933","RHSA-2016:2932"],"bugzilla":"1360286","bugzilla_description":"CVE-2016-7103 jquery-ui: cross-site scripting in dialog closeText","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-XStatic-jquery-ui-0:1.12.0.1-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7103.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5386","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1538"],"bugzilla":"1353798","bugzilla_description":"CVE-2016-5386 Go: sets environmental variable  based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["golang-0:1.6.3-1.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5386.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-5388","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2016:2045","RHSA-2016:1624","RHSA-2016:1635","RHSA-2016:1636"],"bugzilla":"1353809","bugzilla_description":"CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.59-51_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-5392","severity":"important","public_date":"2016-07-14T00:00:00Z","advisories":["RHSA-2016:1427"],"bugzilla":"1356195","bugzilla_description":"CVE-2016-5392 Kubernetes: disclosure of information in multi tenant environments via watch-cache list","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:C/I:N/A:N","CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.2.1.7-1.git.0.2702170.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5392.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-6223","severity":"moderate","public_date":"2016-07-10T00:00:00Z","advisories":[],"bugzilla":"1356867","bugzilla_description":"CVE-2016-6223 libtiff: Out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6223.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-1000027","severity":"moderate","public_date":"2016-07-08T00:00:00Z","advisories":[],"bugzilla":"1357929","bugzilla_description":"CVE-2016-1000027 spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000027.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-5007","severity":"moderate","public_date":"2016-07-07T00:00:00Z","advisories":[],"bugzilla":"1353902","bugzilla_description":"CVE-2016-5007 spring: Path matching inconsistency","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-41","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5007.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-6311","severity":"moderate","public_date":"2016-07-03T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1362735","bugzilla_description":"CVE-2016-6311 EAP7: Internal IP address disclosed on redirect when request header Host field is not set","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-6131","severity":null,"public_date":"2016-06-29T00:00:00Z","advisories":[],"bugzilla":"1352068","bugzilla_description":"CVE-2016-6131 gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10735","severity":"moderate","public_date":"2016-06-27T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668097","bugzilla_description":"CVE-2016-10735 bootstrap: XSS in the data-target attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-2141","severity":"critical","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:1330","RHSA-2016:2035","RHSA-2016:1374","RHSA-2016:1331","RHSA-2016:1332","RHSA-2016:1376","RHSA-2016:1333","RHSA-2016:1432","RHSA-2016:1328","RHSA-2016:1329","RHSA-2016:1439","RHSA-2016:1345","RHSA-2016:1334","RHSA-2016:1433","RHSA-2016:1389","RHSA-2016:1346","RHSA-2016:1434","RHSA-2016:1347","RHSA-2016:1435"],"bugzilla":"1313589","bugzilla_description":"CVE-2016-2141 JGroups: Authorization bypass","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["jgroups-1:3.2.16-1.Final_redhat_1.1.ep6.el6","jgroups-1:3.2.16-1.Final_redhat_1.1.ep6.el5","jgroups-1:3.2.16-1.Final_redhat_1.1.ep6.el7","jgroups-1:2.6.22-2.ep5.el5","eap7-jgroups-0:3.6.8-3.Final_redhat_3.1.ep7.el7","jgroups-1:2.6.22-2.ep5.el6","eap7-jgroups-0:3.6.8-3.Final_redhat_3.1.ep7.el6","jboss-ec2-eap-0:7.5.9-2.Final_redhat_2.ep6.el6","jgroups-1:2.6.22-2.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2141.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-4995","severity":"low","public_date":"2016-06-22T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1348939","bugzilla_description":"CVE-2016-4995 foreman: Information disclosure in provisioning template previews","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4995.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-4996","severity":"moderate","public_date":"2016-06-22T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1349136","bugzilla_description":"CVE-2016-4996 foreman: inside discovery-debug, the root password is displayed in plaintext","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-532","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4996.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-3092","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:2068","RHSA-2017:0456","RHSA-2017:0455","RHSA-2016:2069","RHSA-2017:0457","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:2071","RHSA-2016:2070","RHSA-2016:2072","RHSA-2016:2599"],"bugzilla":"1349468","bugzilla_description":"CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","jboss-ec2-eap-0:7.5.11-1.Final_redhat_1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3092.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-1000023","severity":"moderate","public_date":"2016-06-20T00:00:00Z","advisories":["RHSA-2016:1583","RHSA-2016:1582","RHSA-2016:1605"],"bugzilla":"1348509","bugzilla_description":"CVE-2016-1000023 nodejs-minimatch: Regular expression denial-of-service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["nodejs-minimatch-0:3.0.2-1.el7","rh-nodejs4-nodejs-minimatch-0:3.0.2-1.el7","nodejs010-nodejs-minimatch-0:3.0.2-1.el6","rh-nodejs4-nodejs-minimatch-0:3.0.2-1.el6","nodejs010-nodejs-minimatch-0:3.0.2-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-1000022","severity":"moderate","public_date":"2016-06-16T00:00:00Z","advisories":["RHSA-2016:1605"],"bugzilla":"1347677","bugzilla_description":"CVE-2016-1000022 nodejs-negotiator: Regular expression denial-of-service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["nodejs-negotiator-0:0.6.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000022.json"},{"CVE":"CVE-2016-5322","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346683","bugzilla_description":"CVE-2016-5322 libtiff: Out-of-bounds read in extractContigSamplesBytes() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5322.json"},{"CVE":"CVE-2016-5320","severity":"important","public_date":"2016-06-15T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1346687","bugzilla_description":"CVE-2016-5320 libtiff: Out-of-bounds write in PixarLogDecode() function in tif_pixarlog.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-5317","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346689","bugzilla_description":"CVE-2016-5317 libtiff: Out-of-bounds write in PixarLogDecode() function in libtiff.so","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5317.json"},{"CVE":"CVE-2016-5316","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346690","bugzilla_description":"CVE-2016-5316 libtiff: Out-of-bounds read in PixarLogCleanup() function in tif_pixarlog.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5316.json"},{"CVE":"CVE-2016-5315","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346694","bugzilla_description":"CVE-2016-5315 libtiff: Out-of-bounds read in setByteArray() function in tif_dir.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5315.json"},{"CVE":"CVE-2016-5321","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346695","bugzilla_description":"CVE-2016-5321 libtiff: tiffcrop readSeparateTilesIntoBuffer() memory corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5321.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-5323","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346696","bugzilla_description":"CVE-2016-5323 libtiff: more tiffcrop readSeparateTilesIntoBuffer() memory corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-5314","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346697","bugzilla_description":"CVE-2016-5314 libtiff: Out-of-bounds write in PixarLogDecode() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5314.json"},{"CVE":"CVE-2016-4970","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":["RHSA-2017:1097","RHSA-2020:3192","RHSA-2017:0179"],"bugzilla":"1343616","bugzilla_description":"CVE-2016-4970 netty: Infinite loop vulnerability when handling renegotiation using SslProvider.OpenSsl","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4970.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5300","severity":"moderate","public_date":"2016-06-04T00:00:00Z","advisories":[],"bugzilla":"1343085","bugzilla_description":"CVE-2016-5300 expat: Little entropy used for hash initialization","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5300.json"},{"CVE":"CVE-2016-4475","severity":"moderate","public_date":"2016-06-02T00:00:00Z","advisories":["RHBA-2016:1615"],"bugzilla":"1342439","bugzilla_description":"CVE-2016-4475 foreman: API and UI actions/URLs not limited to the orgs/locations assigned","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-284","affected_packages":["foreman-0:1.11.0.51-1.el6sat","foreman-0:1.11.0.51-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4475.json"},{"CVE":"CVE-2016-5102","severity":"moderate","public_date":"2016-05-30T00:00:00Z","advisories":[],"bugzilla":"1343407","bugzilla_description":"CVE-2016-5102 libtiff: Buffer overflow in readgifimage()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5102.json"},{"CVE":"CVE-2016-4451","severity":"moderate","public_date":"2016-05-25T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1339889","bugzilla_description":"CVE-2016-4451 foreman: privilege escalation through Organization and Locations API","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-284","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4451.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2016-7091","severity":"low","public_date":"2016-05-24T00:00:00Z","advisories":["RHSA-2016:2593"],"bugzilla":"1339935","bugzilla_description":"CVE-2016-7091 sudo: Possible info leak via INPUTRC","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["sudo-0:1.8.6p7-20.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7091.json"},{"CVE":"CVE-2016-3703","severity":"moderate","public_date":"2016-05-19T00:00:00Z","advisories":["RHSA-2016:1095","RHSA-2016:1094"],"bugzilla":"1330233","bugzilla_description":"CVE-2016-3703 OpenShift Enterprise 3: Untrusted content loaded via the API proxy can access web console credentials on the same domain","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-285","affected_packages":["atomic-openshift-0:3.1.1.6-8.git.64.80b61da.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3703.json"},{"CVE":"CVE-2016-4429","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1337136","bugzilla_description":"CVE-2016-4429 glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4429.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-0718","severity":"moderate","public_date":"2016-05-17T00:00:00Z","advisories":["RHSA-2016:2824","RHSA-2018:2486"],"bugzilla":"1296102","bugzilla_description":"CVE-2016-0718 expat: Out-of-bounds heap read on crafted input causing crash","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["expat-0:2.0.1-13.el6_8","expat-0:2.1.0-10.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0718.json"},{"CVE":"CVE-2016-3072","severity":"important","public_date":"2016-05-16T00:00:00Z","advisories":["RHSA-2016:1083"],"bugzilla":"1322050","bugzilla_description":"CVE-2016-3072 Katello: Authenticated sql injection via sort_by and sort_order request parameter","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-89","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3072.json"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2016-8639","severity":"moderate","public_date":"2016-05-12T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1393291","bugzilla_description":"CVE-2016-8639 foreman: Stored XSS via organization/location with HTML in name","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-79","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-11023","severity":"low","public_date":"2016-05-11T00:00:00Z","advisories":[],"bugzilla":"1819845","bugzilla_description":"CVE-2016-11023 odata4j:  allows ExecuteCountQueryCommand.java SQL injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-11024","severity":"low","public_date":"2016-05-11T00:00:00Z","advisories":[],"bugzilla":"1819846","bugzilla_description":"CVE-2016-11024 odata4j:  allows ExecuteJPQLQueryCommand.java SQL injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-11024.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-10727","severity":"moderate","public_date":"2016-05-10T00:00:00Z","advisories":["RHBA-2016:2206"],"bugzilla":"1609916","bugzilla_description":"CVE-2016-10727 evolution-data-server: IMAPx Component Information Disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393->CWE-201","affected_packages":["evolution-data-server-0:3.12.11-37.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10727.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-3728","severity":"moderate","public_date":"2016-05-05T00:00:00Z","advisories":["RHBA-2016:1501"],"bugzilla":"1333378","bugzilla_description":"CVE-2016-3728 foreman: Missing input validation in Smart Proxy allows RCE via TFTP file variant parameter","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["foreman-0:1.11.0.49-1.el6sat","foreman-0:1.11.0.49-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3728.json"},{"CVE":"CVE-2016-4492","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333377","bugzilla_description":"CVE-2016-4492 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4493","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333383","bugzilla_description":"CVE-2016-4493 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4493.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4491","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1333371","bugzilla_description":"CVE-2016-4491 gcc: Stack overflow due to infinite recursion in d_print_comp","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2016-10739","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":["RHSA-2019:3513","RHSA-2019:2118","RHBA-2019:3303"],"bugzilla":"1347549","bugzilla_description":"CVE-2016-10739 glibc: getaddrinfo should reject IP addresses with trailing characters","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","glibc-0:2.17-292.el7","glibc-0:2.28-72.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10739.json"},{"CVE":"CVE-2016-3706","severity":"low","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1330887","bugzilla_description":"CVE-2016-3706 glibc: stack (frame) overflow in getaddrinfo() when called with AF_INET, AF_INET6 (incomplete fix for CVE-2013-4458)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3706.json"},{"CVE":"CVE-2016-5318","severity":"moderate","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1344068","bugzilla_description":"CVE-2016-5318 libtiff: Stack-based buffer overflow in thumbnail's _TIFFVGetField function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5318.json"},{"CVE":"CVE-2016-5319","severity":"moderate","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1344069","bugzilla_description":"CVE-2016-5319 libtiff: Heap-based buffer overflow in bmp2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5319.json"},{"CVE":"CVE-2016-3704","severity":"moderate","public_date":"2016-04-25T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1330264","bugzilla_description":"CVE-2016-3704 pulp: Unsafe use of bash $RANDOM for NSS DB password and seed","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-330","affected_packages":["pulp-0:2.13.4.6-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-3696","severity":"low","public_date":"2016-04-20T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1328930","bugzilla_description":"CVE-2016-3696 pulp: Leakage of CA key in pulp-qpid-ssl-cfg","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["pulp-0:2.13.4.6-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3696.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-1000031","severity":"moderate","public_date":"2016-04-20T00:00:00Z","advisories":[],"bugzilla":"1393454","bugzilla_description":"CVE-2016-1000031 Apache Commons FileUpload: DiskFileItem file manipulation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000031.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-3693","severity":"moderate","public_date":"2016-04-14T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1327471","bugzilla_description":"CVE-2016-3693 foreman: inspect in a provisioning template exposes sensitive controller information","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3693.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-3107","severity":"moderate","public_date":"2016-04-13T00:00:00Z","advisories":["RHBA-2016:1501"],"bugzilla":"1325930","bugzilla_description":"CVE-2016-3107 pulp: Node certificate containing private key stored in world-readable file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["pulp-0:2.8.3.3-1.el6sat","pulp-0:2.8.3.3-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3107.json"},{"CVE":"CVE-2016-3108","severity":"moderate","public_date":"2016-04-13T00:00:00Z","advisories":["RHBA-2016:1501"],"bugzilla":"1325934","bugzilla_description":"CVE-2016-3108 pulp: Insecure temporary file used when generating certificate for Pulp Nodes","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:C/A:N","CWE":"CWE-377","affected_packages":["pulp-0:2.8.3.3-1.el6sat","pulp-0:2.8.3.3-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3108.json"},{"CVE":"CVE-2016-3112","severity":"moderate","public_date":"2016-04-13T00:00:00Z","advisories":["RHBA-2016:1501"],"bugzilla":"1326242","bugzilla_description":"CVE-2016-3112 pulp: Agent certificate containing private key is stored in world-readable file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["pulp-0:2.8.3.3-1.el6sat","pulp-0:2.8.3.3-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3112.json"},{"CVE":"CVE-2016-3111","severity":"low","public_date":"2016-04-13T00:00:00Z","advisories":["RHBA-2016:1501"],"bugzilla":"1326251","bugzilla_description":"CVE-2016-3111 pulp: Race condition when generating RSA keys for authenticating messages between server and consumers","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-362","affected_packages":["pulp-0:2.8.3.3-1.el6sat","pulp-0:2.8.3.3-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3111.json"},{"CVE":"CVE-2016-3990","severity":"important","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1326246","bugzilla_description":"CVE-2016-3990 libtiff: out-of-bounds write in horizontalDifference8()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3990.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3991","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1326249","bugzilla_description":"CVE-2016-3991 libtiff: out-of-bounds write in loadImage() function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3991.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2015-8868","severity":"moderate","public_date":"2016-04-11T00:00:00Z","advisories":["RHSA-2016:2580"],"bugzilla":"1326225","bugzilla_description":"CVE-2015-8868 poppler: heap buffer overflow in ExponentialFunction","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["poppler-0:0.26.5-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8868.json"},{"CVE":"CVE-2016-3633","severity":"low","public_date":"2016-04-11T00:00:00Z","advisories":[],"bugzilla":"1326255","bugzilla_description":"CVE-2016-3633 libtiff: out-of-bounds read in the _setrow function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3633.json"},{"CVE":"CVE-2016-3623","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325089","bugzilla_description":"CVE-2016-3623 libtiff: divide by zero in the rgb2ycybr tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3623.json"},{"CVE":"CVE-2016-3624","severity":"low","public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325090","bugzilla_description":"CVE-2016-3624 libtiff: out of bounds write in the rgb2ycybr tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3624.json"},{"CVE":"CVE-2016-3625","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325091","bugzilla_description":"CVE-2016-3625 libtiff: out of bounds read in the tiff2bw tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3625.json"},{"CVE":"CVE-2016-3945","severity":"moderate","public_date":"2016-04-08T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1325093","bugzilla_description":"CVE-2016-3945 libtiff: out-of-bounds write in the tiff2rgba tool","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3945.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3632","severity":"moderate","public_date":"2016-04-08T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1325095","bugzilla_description":"CVE-2016-3632 libtiff: out-of-bounds write in _TIFFVGetField function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3632.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3658","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1326257","bugzilla_description":"CVE-2016-3658 libtiff: out-of-bounds read in the TIFFWriteDirectoryTagLongLong8Array function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3658.json"},{"CVE":"CVE-2016-3634","severity":"low","public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1326267","bugzilla_description":"CVE-2016-3634 libtiff: out-of-bounds read in the tagCompare function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3634.json"},{"CVE":"CVE-2016-3619","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316569","bugzilla_description":"CVE-2016-3619 libtiff: bmp2tiff DumpModeEncode OOB read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3619.json"},{"CVE":"CVE-2016-3620","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316859","bugzilla_description":"CVE-2016-3620 libtiff: Out-of-bound read in ZIPEncode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3620.json"},{"CVE":"CVE-2016-3631","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316872","bugzilla_description":"CVE-2016-3631 libtiff: thumbnail tool out-of-bounds read vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3631.json"},{"CVE":"CVE-2016-3621","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1324822","bugzilla_description":"CVE-2016-3621 libtiff: out of bounds read in the bmp2tiff tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3621.json"},{"CVE":"CVE-2016-3622","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1324823","bugzilla_description":"CVE-2016-3622 libtiff: Division by zero in fpAcc function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3622.json"},{"CVE":"CVE-2016-4489","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333336","bugzilla_description":"CVE-2016-4489 gcc: Invalid write due to integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4490","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333366","bugzilla_description":"CVE-2016-4490 gcc: Write access violation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-3097","severity":"moderate","public_date":"2016-03-31T00:00:00Z","advisories":["RHSA-2016:1484"],"bugzilla":"1322747","bugzilla_description":"CVE-2016-3097 spacewalk-java: Multiple XSS flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["spacewalk-java-0:2.3.8-147.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3097.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-4487","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333330","bugzilla_description":"CVE-2016-4487 gcc: Invalid write due to a use-after-free to array btypevec","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4488","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333332","bugzilla_description":"CVE-2016-4488 gcc: Invalid write due to a use-after-free to array ktypevec","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3186","severity":"moderate","public_date":"2016-03-30T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1319666","bugzilla_description":"CVE-2016-3186 libtiff: buffer overflow in gif2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3186.json"},{"CVE":"CVE-2016-3079","severity":"moderate","public_date":"2016-03-29T00:00:00Z","advisories":["RHSA-2016:0590"],"bugzilla":"1320940","bugzilla_description":"CVE-2016-3079 spacewalk-java: Multiple XSS issues in WebUI","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["spacewalk-java-0:2.3.8-134.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3079.json"},{"CVE":"CVE-2016-3080","severity":"moderate","public_date":"2016-03-29T00:00:00Z","advisories":["RHSA-2016:1484"],"bugzilla":"1320942","bugzilla_description":"CVE-2016-3080 spacewalk-monitoring: XSS issue in monitoring probe","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["spacewalk-java-0:2.3.8-147.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3080.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-3075","severity":"low","public_date":"2016-03-29T00:00:00Z","advisories":["RHSA-2016:2573"],"bugzilla":"1321866","bugzilla_description":"CVE-2016-3075 glibc: Stack overflow in nss_dns_getnetbyname_r","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:P/I:P/A:C","CWE":"CWE-121","affected_packages":["glibc-0:2.17-157.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-1234","severity":"moderate","public_date":"2016-03-07T00:00:00Z","advisories":[],"bugzilla":"1315647","bugzilla_description":"CVE-2016-1234 glibc: Stack-based buffer overflow in glob with GLOB_ALTDIRFUNC and crafted directory","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1234.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-2103","severity":"moderate","public_date":"2016-02-29T00:00:00Z","advisories":["RHSA-2016:0590"],"bugzilla":"1305681","bugzilla_description":"CVE-2016-2103 Satellite 5: multiple stored XSS vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["spacewalk-java-0:2.3.8-134.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2103.json"},{"CVE":"CVE-2016-2104","severity":"moderate","public_date":"2016-02-24T00:00:00Z","advisories":["RHSA-2016:0590"],"bugzilla":"1305677","bugzilla_description":"CVE-2016-2104 Satellite 5: stored and reflected XSS vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["spacewalk-java-0:2.3.8-134.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2104.json"},{"CVE":"CVE-2015-5174","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2045","RHSA-2016:1432","RHSA-2015:2660","RHBA-2016:0090","RHSA-2015:2661","RHSA-2016:1433","RHSA-2016:2599","RHSA-2016:1434","RHSA-2016:1435","RHSA-2015:2659"],"bugzilla":"1265698","bugzilla_description":"CVE-2015-5174 tomcat: URL Normalization issue","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.54-21_patch_05.ep6.el5","tomcat7-0:7.0.54-21_patch_05.ep6.el7","tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-21_patch_05.ep6.el6","tomcat7-0:7.0.59-42_patch_01.ep7.el6","tomcat8-0:8.0.18-52_patch_01.ep7.el6","jboss-ec2-eap-0:7.5.9-2.Final_redhat_2.ep6.el6","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5174.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-5351","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311076","bugzilla_description":"CVE-2015-5351 tomcat: CSRF token leak","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-352","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5351.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-0714","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311082","bugzilla_description":"CVE-2016-0714 tomcat: Security Manager bypass via persistence mechanisms","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-290","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0714.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2015-5346","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087"],"bugzilla":"1311085","bugzilla_description":"CVE-2015-5346 tomcat: Session fixation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-0706","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311087","bugzilla_description":"CVE-2016-0706 tomcat: security manager bypass via StatusManagerServlet","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-287","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-5345","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311089","bugzilla_description":"CVE-2015-5345 tomcat: directory disclosure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-552","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-0763","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311093","bugzilla_description":"CVE-2016-0763 tomcat: security manager bypass via setGlobalContext()","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0763.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-2094","severity":"moderate","public_date":"2016-02-17T00:00:00Z","advisories":["RHSA-2016:0595","RHSA-2016:0596","RHSA-2016:0597","RHSA-2016:0598","RHSA-2016:0599"],"bugzilla":"1308465","bugzilla_description":"CVE-2016-2094 EAP: HTTPS NIO connector uses no timeout when reading SSL handshake from client","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-358","affected_packages":["jboss-ec2-eap-0:7.5.7-2.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2094.json"},{"CVE":"CVE-2016-2142","severity":"moderate","public_date":"2016-02-17T00:00:00Z","advisories":["RHSA-2016:1038"],"bugzilla":"1311220","bugzilla_description":"CVE-2016-2142 openshift: Bind password for AD account is stored in world readable file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["atomic-openshift-0:3.1.1.6-6.git.43.f583589.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2142.json"},{"CVE":"CVE-2016-2226","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1333322","bugzilla_description":"CVE-2016-2226 gcc: Exploitable buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-2217","severity":"moderate","public_date":"2016-02-01T00:00:00Z","advisories":[],"bugzilla":"1305437","bugzilla_description":"CVE-2016-2217 socat: Hard coded 1024 bit DH p parameter was not prime","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2217.json"},{"CVE":"CVE-2015-5295","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0440","RHSA-2016:0441","RHSA-2016:0442","RHSA-2016:0266"],"bugzilla":"1298295","bugzilla_description":"CVE-2015-5295 openstack-heat: Vulnerability in Heat template validation leading to DoS","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":["openstack-heat-0:2014.2.3-11.el7ost","openstack-heat-0:2014.1.5-7.el6ost","openstack-heat-0:2014.1.5-7.el7ost","openstack-heat-0:2015.1.2-9.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5295.json"},{"CVE":"CVE-2017-17718","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2020:1454"],"bugzilla":"1527048","bugzilla_description":"CVE-2017-17718 rubygem-net-ldap: Missing SSL Certificate Validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["tfm-rubygem-net-ldap-0:0.16.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17718.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2015-8607","severity":"moderate","public_date":"2016-01-11T00:00:00Z","advisories":[],"bugzilla":"1293272","bugzilla_description":"CVE-2015-8607 perl-PathTools: Taint propagation flaw in canonpath()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8607.json"},{"CVE":"CVE-2015-6644","severity":"moderate","public_date":"2016-01-01T00:00:00Z","advisories":["RHSA-2017:2811","RHSA-2018:2927","RHSA-2017:1832","RHSA-2017:2810","RHSA-2017:2808","RHSA-2017:2809"],"bugzilla":"1444015","bugzilla_description":"CVE-2015-6644 bouncycastle: Information disclosure in GCMBlockCipher","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6644.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2015-8560","severity":"moderate","public_date":"2015-12-12T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1291227","bugzilla_description":"CVE-2015-8560 cups-filters: foomatic-rip did not consider semicolon as illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8560.json"},{"CVE":"CVE-2015-5254","severity":"moderate","public_date":"2015-12-08T00:00:00Z","advisories":["RHSA-2016:2035","RHSA-2016:2036","RHSA-2016:0489"],"bugzilla":"1291292","bugzilla_description":"CVE-2015-5254 JMS ObjectMessage: unsafe deserialization","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["activemq-0:5.9.0-6.redhat.611454.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5254.json"},{"CVE":"CVE-2015-7544","severity":"important","public_date":"2015-12-07T00:00:00Z","advisories":["RHSA-2016:0426"],"bugzilla":"1269588","bugzilla_description":"CVE-2015-7544 redhat-support-plugin-rhev: Remote code execution by SuperUser role on hosts in RHEV","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":["redhat-support-plugin-rhev-0:3.6.0-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7544.json"},{"CVE":"CVE-2015-5304","severity":"moderate","public_date":"2015-12-02T00:00:00Z","advisories":["RHSA-2015:2540","RHSA-2015:2541","RHSA-2015:2542","RHSA-2015:2538","RHSA-2015:2539"],"bugzilla":"1273046","bugzilla_description":"CVE-2015-5304 JBoss EAP: missing authorization check for Monitor/Deployer/Auditor role when shutting down server","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-862","affected_packages":["jboss-ec2-eap-0:7.5.5-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5304.json"},{"CVE":"CVE-2015-7528","severity":"moderate","public_date":"2015-11-27T00:00:00Z","advisories":["RHSA-2015:2544","RHSA-2015:2615"],"bugzilla":"1286745","bugzilla_description":"CVE-2015-7528 OpenShift: pod log location must validate container if provided","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":["openshift-0:3.0.2.0-0.git.38.7576bc5.el7ose","atomic-openshift-0:3.1.0.4-1.git.15.5e061c3.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7528.json"},{"CVE":"CVE-2015-7518","severity":"moderate","public_date":"2015-11-26T00:00:00Z","advisories":["RHSA-2016:0174"],"bugzilla":"1285728","bugzilla_description":"CVE-2015-7518 foreman: Stored XSS vulnerability in smart class parameters/variables","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["foreman-0:1.7.2.53-1.el6_6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7518.json"},{"CVE":"CVE-2015-8327","severity":"moderate","public_date":"2015-11-26T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1287523","bugzilla_description":"CVE-2015-8327 cups-filters: foomatic-rip did not consider the back tick as an illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8327.json"},{"CVE":"CVE-2015-5329","severity":"moderate","public_date":"2015-11-11T00:00:00Z","advisories":["RHSA-2015:2650"],"bugzilla":"1281777","bugzilla_description":"CVE-2015-5329 openstack-tripleo-heat-templates: Using hardcoded rabbitmq credentials regardless of supplied values","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-798","affected_packages":["openstack-tripleo-heat-templates-0:0.8.6-94.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5329.json"},{"CVE":"CVE-2015-7501","severity":"critical","public_date":"2015-11-06T00:00:00Z","advisories":["RHSA-2016:1773","RHSA-2016:0040","RHSA-2015:2578","RHSA-2015:2534","RHSA-2015:2556","RHSA-2015:2557","RHSA-2015:2579","RHSA-2015:2535","RHSA-2015:2514","RHSA-2015:2536","RHSA-2015:2559","RHSA-2015:2537","RHSA-2015:2538","RHSA-2015:2516","RHSA-2015:2539","RHSA-2015:2517","RHSA-2015:2670","RHSA-2015:2671","RHSA-2020:4274","RHSA-2015:2521","RHSA-2015:2522","RHSA-2015:2500","RHSA-2015:2501","RHSA-2015:2523","RHSA-2015:2502","RHSA-2015:2524","RHSA-2015:2547","RHSA-2015:2548","RHSA-2015:2560","RHSA-2015:2540","RHSA-2015:2541","RHSA-2015:2542","RHSA-2016:0118"],"bugzilla":"1279330","bugzilla_description":"CVE-2015-7501 apache-commons-collections: InvokerTransformer code execution during deserialisation","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502->CWE-284","affected_packages":["jboss-ec2-eap-0:7.5.5-3.Final_redhat_3.ep6.el6","apache-commons-collections-0:3.2.1-22.el7_2","jakarta-commons-collections-0:3.2.1-3.5.el6_7","jenkins-0:1.651.2-1.el6op","rh-maven35-apache-commons-collections4-0:4.0-7.3.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el6","jakarta-commons-collections-0:3.2.1-5.ep5.el4","jakarta-commons-collections-0:3.2.1-5.ep5.el5","jakarta-commons-collections-0:3.2.1-5.ep5.el6","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el7","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el5","jakarta-commons-collections-0:3.2-2jpp.4","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7501.json"},{"CVE":"CVE-2015-5178","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:1904","RHSA-2015:1905","RHSA-2015:1906","RHSA-2015:1907"],"bugzilla":"1250552","bugzilla_description":"CVE-2015-5178 JBoss AS/WildFly: missing X-Frame-Options header leading to clickjacking","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["jboss-as-console-0:2.5.10-4.Final_redhat_2.1.ep6.el5","jboss-ec2-eap-0:7.5.4-1.Final_redhat_4.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5178.json"},{"CVE":"CVE-2015-5188","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:1904","RHSA-2015:1905","RHSA-2015:1906","RHSA-2015:1907"],"bugzilla":"1252885","bugzilla_description":"CVE-2015-5188 JBoss EAP: CSRF vulnerability in EAP & WildFly Web Console","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-352","affected_packages":["jboss-ec2-eap-0:7.5.4-1.Final_redhat_4.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5188.json"},{"CVE":"CVE-2015-5220","severity":"important","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:1904","RHSA-2015:1905","RHSA-2015:1906","RHSA-2015:1907","RHSA-2016:1519"],"bugzilla":"1255597","bugzilla_description":"CVE-2015-5220 OOME from EAP 6 http management console","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-770","affected_packages":["jboss-ec2-eap-0:7.5.4-1.Final_redhat_4.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5220.json"},{"CVE":"CVE-2015-5271","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1862"],"bugzilla":"1261697","bugzilla_description":"CVE-2015-5271 openstack-tripleo-heat-templates: unsafe pipeline ordering of swift staticweb middleware","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-285","affected_packages":["openstack-tripleo-heat-templates-0:0.8.6-71.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5271.json"},{"CVE":"CVE-2015-8776","severity":"moderate","public_date":"2015-09-20T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300299","bugzilla_description":"CVE-2015-8776 glibc: Segmentation fault caused by passing out-of-range data to strftime()","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2015-5282","severity":"moderate","public_date":"2015-09-17T00:00:00Z","advisories":["RHBA-2016:1501"],"bugzilla":"1264221","bugzilla_description":"CVE-2015-5282 foreman: XSS in hidden parameter value switcher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["foreman-0:1.11.0.49-1.el6sat","foreman-0:1.11.0.49-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5282.json"},{"CVE":"CVE-2015-5244","severity":"moderate","public_date":"2015-09-15T00:00:00Z","advisories":[],"bugzilla":"1259216","bugzilla_description":"CVE-2015-5244 mod_nss: incorrect ciphersuite parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5244.json"},{"CVE":"CVE-2015-6748","severity":"moderate","public_date":"2015-08-27T00:00:00Z","advisories":["RHSA-2015:2560","RHSA-2015:2559"],"bugzilla":"1258310","bugzilla_description":"CVE-2015-6748 jsoup: XSS vulnerability related to incomplete tags at EOF","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6748.json"},{"CVE":"CVE-2015-5233","severity":"moderate","public_date":"2015-08-27T00:00:00Z","advisories":["RHSA-2015:2622"],"bugzilla":"1262443","bugzilla_description":"CVE-2015-5233 foreman: reports show/destroy not restricted by host authorization","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:P","CWE":"CWE-284","affected_packages":["foreman-0:1.7.2.49-1.el6_6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5233.json"},{"CVE":"CVE-2015-5694","severity":"low","public_date":"2015-07-28T00:00:00Z","advisories":[],"bugzilla":"1245241","bugzilla_description":"CVE-2015-5695 openstack-designate: Infinite loop with large resource record sets","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5694.json"},{"CVE":"CVE-2015-5695","severity":"low","public_date":"2015-07-28T00:00:00Z","advisories":[],"bugzilla":"1245241","bugzilla_description":"CVE-2015-5695 openstack-designate: Infinite loop with large resource record sets","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5695.json"},{"CVE":"CVE-2015-3278","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":[],"bugzilla":"1238326","bugzilla_description":"CVE-2015-3278 nss_compat_ossl: incorrect multi-keyword mode cipherstring parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3278.json"},{"CVE":"CVE-2015-5152","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":["RHBA-2016:1501"],"bugzilla":"1243571","bugzilla_description":"CVE-2015-5152 Foreman: API permits HTTP requests when require_ssl is enabled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-319","affected_packages":["foreman-0:1.11.0.49-1.el6sat","foreman-0:1.11.0.49-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5152.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atkmm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atkmm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atkmm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atlas-sse2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atlas-sse2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atlas-sse2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atlas-sse3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atlas-sse3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atlas-sse3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atlas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atlas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/atlas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/attica-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/attica-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/attica-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/attica_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/attica_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/attica_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/attr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/attr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/attr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audispd-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audispd-plugins_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audispd-plugins_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit-libs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit-libs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit-libs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit-libs-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit-libs-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit-libs-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit_security_api_results.json
new file mode 100644
index 0000000..9df0204
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/audit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5186","severity":"moderate","public_date":"2015-08-13T00:00:00Z","advisories":[],"bugzilla":"1251621","bugzilla_description":"CVE-2015-5186 Audit: log terminal emulator escape sequences handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-138","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5186.json"},{"CVE":"CVE-2014-0058","severity":"low","public_date":"2014-02-24T00:00:00Z","advisories":["RHSA-2014:1995","RHSA-2014:0895","RHSA-2015:1009","RHSA-2014:1290","RHSA-2014:0205","RHSA-2014:0910","RHSA-2014:0204","RHSA-2015:0034","RHSA-2014:1291"],"bugzilla":"1063641","bugzilla_description":"CVE-2014-0058 Red Hat JBoss EAP6: Plain text password logging during security audit","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["jboss-as-web-0:7.3.1-4.Final_redhat_4.1.ep6.el6","jboss-as-web-0:7.3.1-4.Final_redhat_4.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0058.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/augeas-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/augeas-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/augeas-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/augeas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/augeas_security_api_results.json
new file mode 100644
index 0000000..1cd3417
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/augeas_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-7555","severity":"important","public_date":"2017-08-17T00:00:00Z","advisories":["RHSA-2017:2788","RHSA-2019:2403"],"bugzilla":"1478373","bugzilla_description":"CVE-2017-7555 augeas: Improper handling of escaped strings leading to memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-122","affected_packages":["augeas-0:1.4.0-2.el7_4.1","augeas-0:1.4.0-2.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7555.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2013-6412","severity":"moderate","public_date":"2013-11-25T00:00:00Z","advisories":["RHSA-2014:0044"],"bugzilla":"1034261","bugzilla_description":"CVE-2013-6412 augeas: incorrect permissions set on newly created files","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["augeas-0:1.0.0-5.el6_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6412.json"},{"CVE":"CVE-2012-6607","severity":null,"public_date":"2013-11-21T00:00:00Z","advisories":[],"bugzilla":"1034243","bugzilla_description":"CVE-2012-6607 augeas: symlink attack on a .augsave file","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6607.json"},{"CVE":"CVE-2012-0786","severity":"low","public_date":"2012-08-11T00:00:00Z","advisories":["RHSA-2013:1537"],"bugzilla":"772257","bugzilla_description":"CVE-2012-0786 augeas: susceptible to symlink attack","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["augeas-0:1.0.0-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0786.json"},{"CVE":"CVE-2012-0787","severity":"low","public_date":"2012-07-19T00:00:00Z","advisories":["RHSA-2013:1537"],"bugzilla":"772261","bugzilla_description":"CVE-2012-0787 augeas: susceptible to mountpoint attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["augeas-0:1.0.0-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0787.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/authconfig-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/authconfig-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/authconfig-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/authconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/authconfig_security_api_results.json
new file mode 100644
index 0000000..fa59da9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/authconfig_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-7488","severity":"moderate","public_date":"2017-05-09T00:00:00Z","advisories":["RHSA-2017:2285"],"bugzilla":"1441604","bugzilla_description":"CVE-2017-7488 authconfig: Information leak when SSSD is used for authentication against remote server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["authconfig-0:6.2.8-30.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7488.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/authd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/authd_security_api_results.json
new file mode 100644
index 0000000..f58392b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/authd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-4982","severity":"low","public_date":"2016-06-13T00:00:00Z","advisories":[],"bugzilla":"1346051","bugzilla_description":"CVE-2016-4982 authd insecure /etc/ident.key file creation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4982.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autoconf-archive_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autoconf-archive_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autoconf-archive_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autoconf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autoconf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autoconf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-af_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-af_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-af_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-bg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-bg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-bg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-cs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-cs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-cs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-da_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-da_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-da_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-de_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-de_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-de_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-en_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-en_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-en_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-es_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-es_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-es_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-fa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-fa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-fa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-fi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-fi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-fi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-fr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-fr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-fr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ga_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ga_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-hr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-hr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-hr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-hu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-hu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-hu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-is_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-is_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-is_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-it_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-it_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-it_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ja_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ja_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ja_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-lb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-lb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-lb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-lt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-lt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-lt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-mn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-mn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-mn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-nl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-nl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-nl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-pl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-pl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-pl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-pt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-pt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-pt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ru_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ru_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-ru_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-sv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-tr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-tr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-tr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-vi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-vi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-vi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-zh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-zh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autocorr-zh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autofs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autofs_security_api_results.json
new file mode 100644
index 0000000..3519955
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autofs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-8169","severity":"moderate","public_date":"2015-03-02T00:00:00Z","advisories":["RHSA-2015:1344","RHSA-2015:2417"],"bugzilla":"1192565","bugzilla_description":"CVE-2014-8169 autofs: priv escalation via interpreter load path for program based automount maps","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-426","affected_packages":["autofs-1:5.0.5-113.el6","autofs-1:5.0.7-54.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8169.json"},{"CVE":"CVE-2012-2697","severity":"low","public_date":"2013-01-07T00:00:00Z","advisories":["RHSA-2013:0132"],"bugzilla":"831772","bugzilla_description":"CVE-2012-2697 autofs: denial of service when using an LDAP-based automount map","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["autofs-1:5.0.1-0.rc2.177.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2697.json"},{"CVE":"CVE-2007-6285","severity":"important","public_date":"2007-12-20T00:00:00Z","advisories":["RHSA-2007:1177","RHSA-2007:1176"],"bugzilla":"426218","bugzilla_description":"CVE-2007-6285 autofs default doesn't set nodev in /net","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["autofs5-1:5.0.1-0.rc2.55.el4_6.2","autofs-1:5.0.1-0.rc2.55.el5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6285.json"},{"CVE":"CVE-2007-5964","severity":"important","public_date":"2007-12-12T12:00:00Z","advisories":["RHSA-2007:1129","RHSA-2007:1128"],"bugzilla":"410031","bugzilla_description":"CVE-2007-5964 autofs defaults don't restrict suid in /net","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["autofs5-1:5.0.1-0.rc2.55.el4_6.1","autofs-1:5.0.1-0.rc2.55.el5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5964.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autogen-libopts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autogen-libopts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/autogen-libopts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/automake_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/automake_security_api_results.json
new file mode 100644
index 0000000..ae5124f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/automake_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3386","severity":"low","public_date":"2012-07-09T00:00:00Z","advisories":["RHSA-2013:0526","RHSA-2014:1243"],"bugzilla":"838286","bugzilla_description":"CVE-2012-3386 automake: locally exploitable \"make distcheck\" bug","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-732","affected_packages":["automake-0:1.9.6-3.el5","automake-0:1.11.1-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3386.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/automoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/automoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/automoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-autoipd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-autoipd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-autoipd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-gobject_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-gobject_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-gobject_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-ui-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-ui-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi-ui-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi_security_api_results.json
new file mode 100644
index 0000000..b4f58aa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avahi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1000845","severity":null,"public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1661252","bugzilla_description":"CVE-2018-1000845 avahi: DNS amplification and reflection to spoofed addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000845.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-6519","severity":"low","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2020:1176"],"bugzilla":"1426712","bugzilla_description":"CVE-2017-6519 avahi: Multicast DNS responds to unicast queries outside of local network","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["avahi-0:0.6.31-20.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6519.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2011-0634","severity":"moderate","public_date":"2011-01-04T00:00:00Z","advisories":[],"bugzilla":"667187","bugzilla_description":"CVE-2011-1002 avahi: daemon infinite loop triggered by an empty UDP packet (CVE-2010-2244 fix regression)","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0634.json"},{"CVE":"CVE-2011-1002","severity":"moderate","public_date":"2011-01-04T00:00:00Z","advisories":["RHSA-2011:0436","RHSA-2011:0779"],"bugzilla":"667187","bugzilla_description":"CVE-2011-1002 avahi: daemon infinite loop triggered by an empty UDP packet (CVE-2010-2244 fix regression)","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["avahi-0:0.6.16-10.el5_6","avahi-0:0.6.25-11.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1002.json"},{"CVE":"CVE-2010-2244","severity":"moderate","public_date":"2010-06-23T00:00:00Z","advisories":["RHSA-2010:0528"],"bugzilla":"607293","bugzilla_description":"CVE-2010-2244 avahi: assertion failure after receiving a packet with corrupted checksum","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["avahi-0:0.6.16-9.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2244.json"},{"CVE":"CVE-2009-0758","severity":"low","public_date":"2009-03-01T00:00:00Z","advisories":["RHSA-2010:0528"],"bugzilla":"488314","bugzilla_description":"CVE-2009-0758 avahi: remote DoS via legacy unicast mDNS queries","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["avahi-0:0.6.16-9.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0758.json"},{"CVE":"CVE-2008-5081","severity":"moderate","public_date":"2008-12-12T00:00:00Z","advisories":["RHSA-2009:0013"],"bugzilla":"475964","bugzilla_description":"CVE-2008-5081 avahi: avahi-daemon DoS (application abort) via packet with source port 0","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["avahi-0:0.6.16-1.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5081.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avalon-framework_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avalon-framework_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avalon-framework_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avalon-logkit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avalon-logkit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/avalon-logkit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/awscli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/awscli_security_api_results.json
new file mode 100644
index 0000000..c5ea3b5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/awscli_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-15869","severity":"moderate","public_date":"2018-08-14T00:00:00Z","advisories":[],"bugzilla":"1623095","bugzilla_description":"CVE-2018-15869 awscli: Allows loading of an undesired AMI by setting similar image properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/babel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/babel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/babel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/babl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/babl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/babl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bacula-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bacula-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bacula-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bacula-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bacula-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bacula-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bacula-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bacula-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bacula-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/baobab_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/baobab_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/baobab_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/basesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/basesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/basesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bash-completion_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bash-completion_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bash-completion_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bash_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bash_security_api_results.json
new file mode 100644
index 0000000..6bd7ea5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bash_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-18276","severity":"low","public_date":"2019-07-01T00:00:00Z","advisories":[],"bugzilla":"1778309","bugzilla_description":"CVE-2019-18276 bash: when effective UID is not equal to its real UID the saved UID is not dropped","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18276.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2012-6711","severity":"moderate","public_date":"2019-06-18T00:00:00Z","advisories":[],"bugzilla":"1721071","bugzilla_description":"CVE-2012-6711 bash: heap-based buffer overflow during echo of unsupported characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6711.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-9924","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":["RHSA-2020:1113","RHSA-2020:3474","RHBA-2020:1539","RHSA-2020:3592","RHSA-2020:3803","RHBA-2020:1540"],"bugzilla":"1691774","bugzilla_description":"CVE-2019-9924 bash: BASH_CMD is writable in restricted bash shells","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","bash-0:4.2.46-34.el7","bash-0:4.2.46-32.el7_6","bash-0:4.2.46-34.el7_7","bash-0:4.2.46-30.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9924.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-5932","severity":"important","public_date":"2017-01-20T00:00:00Z","advisories":[],"bugzilla":"1420674","bugzilla_description":"CVE-2017-5932 bash: Code execution in bash autocompletion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5932.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9401","severity":"low","public_date":"2016-11-17T00:00:00Z","advisories":["RHSA-2017:1931","RHSA-2017:0725"],"bugzilla":"1396383","bugzilla_description":"CVE-2016-9401 bash: popd controlled free","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["bash-0:4.2.46-28.el7","bash-0:4.1.2-48.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9401.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7543","severity":"moderate","public_date":"2016-09-16T00:00:00Z","advisories":["RHSA-2017:1931","RHSA-2017:0725"],"bugzilla":"1379630","bugzilla_description":"CVE-2016-7543 bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["bash-0:4.2.46-28.el7","bash-0:4.1.2-48.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-0634","severity":"moderate","public_date":"2015-10-16T00:00:00Z","advisories":["RHSA-2017:1931","RHSA-2017:0725"],"bugzilla":"1377613","bugzilla_description":"CVE-2016-0634 bash: Arbitrary code execution via malicious hostname","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["bash-0:4.2.46-28.el7","bash-0:4.1.2-48.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0634.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.9"},{"CVE":"CVE-2014-6278","severity":null,"public_date":"2014-09-29T00:00:00Z","advisories":[],"bugzilla":"1147414","bugzilla_description":"CVE-2014-6278 bash: incorrect parsing of function definitions with nested command substitutions","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6278.json"},{"CVE":"CVE-2014-6277","severity":null,"public_date":"2014-09-27T00:00:00Z","advisories":[],"bugzilla":"1147189","bugzilla_description":"CVE-2014-6277 bash: uninitialized here document closing delimiter pointer use","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6277.json"},{"CVE":"CVE-2014-7187","severity":"moderate","public_date":"2014-09-26T00:00:00Z","advisories":["RHSA-2014:1312","RHSA-2014:1311","RHSA-2014:1354","RHSA-2014:1306","RHSA-2014:1865"],"bugzilla":"1146804","bugzilla_description":"CVE-2014-7187 bash: off-by-one error in deeply nested flow control constructs","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":["bash-0:3.2-32.el5_9.3","bash-0:3.2-33.el5_11.1.sjis.2","bash-0:4.2.45-5.el7_0.4","rhev-hypervisor6-0:6.5-20140930.1.el6ev","bash-0:4.1.2-15.el6_5.2","bash-0:3.2-32.el5_9.3.sjis.1","bash-0:3.2-33.el5_11.4","bash-0:4.1.2-15.el6_5.1.sjis.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7187.json"},{"CVE":"CVE-2014-7186","severity":"moderate","public_date":"2014-09-25T00:00:00Z","advisories":["RHSA-2014:1312","RHSA-2014:1311","RHSA-2014:1354","RHSA-2014:1306","RHSA-2014:1865"],"bugzilla":"1146791","bugzilla_description":"CVE-2014-7186 bash: parser can allow out-of-bounds memory access while handling redir_stack","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["bash-0:3.2-32.el5_9.3","bash-0:3.2-33.el5_11.1.sjis.2","bash-0:4.2.45-5.el7_0.4","rhev-hypervisor6-0:6.5-20140930.1.el6ev","bash-0:4.1.2-15.el6_5.2","bash-0:3.2-32.el5_9.3.sjis.1","bash-0:3.2-33.el5_11.4","bash-0:4.1.2-15.el6_5.1.sjis.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7186.json"},{"CVE":"CVE-2014-6271","severity":"critical","public_date":"2014-09-24T00:00:00Z","advisories":["RHSA-2014:1354","RHSA-2014:1294","RHSA-2014:1293","RHSA-2014:1295"],"bugzilla":"1141597","bugzilla_description":"CVE-2014-6271 bash: specially-crafted environment variables can be used to inject shell commands","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":["bash-0:3.0-27.el4.2","bash-0:3.2-33.el5_11.1.sjis.1","bash-0:3.2-33.el5.1","bash-0:4.2.45-5.el7_0.2","rhev-hypervisor6-0:6.5-20140930.1.el6ev","bash-0:4.1.2-15.el6_5.1","bash-0:4.1.2-15.el6_5.1.sjis.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6271.json"},{"CVE":"CVE-2014-7169","severity":"important","public_date":"2014-09-24T00:00:00Z","advisories":["RHSA-2014:1312","RHSA-2014:1311","RHSA-2014:1354","RHSA-2014:1306","RHSA-2014:1865"],"bugzilla":"1146319","bugzilla_description":"CVE-2014-7169 bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-228","affected_packages":["bash-0:3.2-32.el5_9.3","bash-0:3.2-33.el5_11.1.sjis.2","bash-0:4.2.45-5.el7_0.4","rhev-hypervisor6-0:6.5-20140930.1.el6ev","bash-0:4.1.2-15.el6_5.2","bash-0:3.2-32.el5_9.3.sjis.1","bash-0:3.2-33.el5_11.4","bash-0:4.1.2-15.el6_5.1.sjis.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7169.json"},{"CVE":"CVE-2012-3410","severity":"low","public_date":"2012-07-10T00:00:00Z","advisories":[],"bugzilla":"840091","bugzilla_description":"CVE-2012-3410 bash: Stack-based buffer overflow (crash) when expanding /dev/fd file names","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3410.json"},{"CVE":"CVE-2008-5374","severity":"low","public_date":"2008-08-13T00:00:00Z","advisories":["RHSA-2011:1073","RHSA-2011:0261"],"bugzilla":"475474","bugzilla_description":"CVE-2008-5374 bash: Insecure temporary file use in aliasconv.sh, aliasconv.bash, cshtobash (symlink attack)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bash-0:3.0-27.el4","bash-0:3.2-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5374.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bc_security_api_results.json
new file mode 100644
index 0000000..357292a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-1968","severity":"low","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877458","bugzilla_description":"CVE-2020-1968 openssl: Information exposure when DH secret are reused across multiple TLS connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-13692","severity":"important","public_date":"2020-06-04T00:00:00Z","advisories":["RHSA-2020:3005","RHSA-2020:3248","RHSA-2020:3675","RHSA-2020:3285","RHSA-2020:3176","RHSA-2020:3286","RHSA-2020:3283","RHSA-2020:3284","RHSA-2020:3209","RHSA-2020:3678"],"bugzilla":"1852985","bugzilla_description":"CVE-2020-13692 postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["postgresql-jdbc-0:9.2.1002-8.el7_8","postgresql-jdbc-0:8.4.704-4.el6_10","postgresql-jdbc-0:42.2.3-3.el8_0","postgresql-jdbc-0:42.2.3-3.el8_1","postgresql-jdbc-0:42.2.3-3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13692.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2020-8555","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":["RHSA-2020:2594","RHSA-2020:2440","RHSA-2020:2441","RHSA-2020:2448","RHSA-2020:2449","RHSA-2020:2479"],"bugzilla":"1821583","bugzilla_description":"CVE-2020-8555 kubernetes: Server side request forgery (SSRF) in kube-controller-manager allows users to leak secret information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openshift4/ose-hyperkube:v4.3.25-202006081335","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift4/ose-hyperkube:v4.4.0-202006080610","openshift-0:4.3.25-202006060952.git.1.96c30f6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8555.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2020-12825","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:3654","RHBA-2020:3609","RHSA-2020:4072"],"bugzilla":"1835377","bugzilla_description":"CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["redhat-coreos-43.82.202009181853.0","libcroco-0:0.6.12-4.el8_2.1","libcroco-0:0.6.12-6.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-11254","severity":"moderate","public_date":"2020-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:0933","RHSA-2020:2479","RHSA-2020:2413"],"bugzilla":"1819486","bugzilla_description":"CVE-2019-11254 kubernetes: Denial of service in API server via crafted YAML payloads by authorized users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-hyperkube:v4.5.0-202007100518.p0","openshift4/ose-oauth-server-rhel7:v4.5.0-202007012112.p0","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift4/ose-openshift-apiserver-rhel7:v4.3.9-202003230345"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11254.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-6096","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1820331","bugzilla_description":"CVE-2020-6096 glibc: signed comparison vulnerability in the ARMv7 memcpy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6096.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10029","severity":"moderate","public_date":"2020-02-12T00:00:00Z","advisories":[],"bugzilla":"1810670","bugzilla_description":"CVE-2020-10029 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10029.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2020-1751","severity":"moderate","public_date":"2020-01-20T00:00:00Z","advisories":[],"bugzilla":"1810719","bugzilla_description":"CVE-2020-1751 glibc: array overflow in backtrace functions for powerpc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1751.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-1752","severity":"moderate","public_date":"2020-01-17T00:00:00Z","advisories":[],"bugzilla":"1810718","bugzilla_description":"CVE-2020-1752 glibc: use-after-free in glob() function when expanding ~user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1752.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-2920","severity":"low","public_date":"2019-11-19T00:00:00Z","advisories":[],"bugzilla":"1774049","bugzilla_description":"CVE-2019-2920 mysql-connector-odbc: An unauthenticated attacker with network access can, via multiple protocols compromise MySQL Connectors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2920.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-19126","severity":"low","public_date":"2019-11-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3861","RHSA-2020:1828"],"bugzilla":"1774681","bugzilla_description":"CVE-2019-19126 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glibc-0:2.17-317.el7","glibc-0:2.28-101.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1010025","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":[],"bugzilla":"1737445","bugzilla_description":"CVE-2019-1010025 glibc: information disclosure of heap addresses of pthread_created thread","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010025.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-1010023","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":[],"bugzilla":"1773916","bugzilla_description":"CVE-2019-1010023 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010023.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-1010024","severity":"moderate","public_date":"2019-07-15T00:00:00Z","advisories":[],"bugzilla":"1773927","bugzilla_description":"CVE-2019-1010024 glibc: ASLR bypass using cache of thread stack and heap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010024.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-10132","severity":"important","public_date":"2019-05-21T12:00:00Z","advisories":["RHSA-2019:1264","RHSA-2019:1268","RHSA-2019:1455"],"bugzilla":"1706067","bugzilla_description":"CVE-2019-10132 libvirt: wrong permissions in systemd admin-sock due to missing SocketMode parameter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["virt:rhel-8000020190516125745.55190bc5","virt:8.0.0-8000020190530233731.55190bc5","libvirt-0:4.5.0-10.el7_6.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12126","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646781","bugzilla_description":"CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12130","severity":"important","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646784","bugzilla_description":"CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385->CWE-226","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-12127","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1667782","bugzilla_description":"CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11091","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1705312","bugzilla_description":"CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2017-18367","severity":"moderate","public_date":"2019-04-24T00:00:00Z","advisories":["RHSA-2019:4090","RHSA-2019:4087","RHSA-2020:2479"],"bugzilla":"1706826","bugzilla_description":"CVE-2017-18367 libseccomp-golang: mishandling of multiple argument rules leading to a bypass of intended access restrictions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["openshift4/ose-hypershift:v4.1.27-201912030019","openshift4/ose-cli:v4.1.27-201912030019","openshift4/ose-node:v4.1.27-201912030019","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift-0:4.1.27-201912021146.git.0.a40116f.el8_0","openshift4/ose-cli-artifacts:v4.1.27-201912030019","openshift4/ose-hyperkube:v4.1.27-201912030019"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-3868","severity":"moderate","public_date":"2019-04-23T16:59:00Z","advisories":["RHSA-2020:2366","RHSA-2019:0856","RHSA-2019:2998","RHSA-2019:1140","RHSA-2019:0868","RHSA-2019:0857"],"bugzilla":"1679144","bugzilla_description":"CVE-2019-3868 keycloak: session hijack using the user access token","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-sso7-keycloak-0:3.4.17-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.17-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3868.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2005-3590","severity":"low","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1706046","bugzilla_description":"CVE-2005-3590 glibc: buffer overflow in getgrouplist function leading to corrupted memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3590.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-0211","severity":"important","public_date":"2019-04-01T00:00:00Z","advisories":["RHSA-2019:0980","RHSA-2019:1297","RHSA-2019:1296","RHSA-2019:1543","RHSA-2019:0746"],"bugzilla":"1694980","bugzilla_description":"CVE-2019-0211 httpd: privilege escalation from modules scripts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["httpd24-httpd-0:2.4.34-7.el7.1","httpd:2.4-8000020190405071959.55190bc5","httpd24-httpd-0:2.4.34-7.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-0215","severity":"important","public_date":"2019-04-01T00:00:00Z","advisories":["RHSA-2019:0980"],"bugzilla":"1695025","bugzilla_description":"CVE-2019-0215 httpd: mod_ssl: access control bypass when using per-location client certification authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["httpd:2.4-8000020190405071959.55190bc5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0215.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2009-5155","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1683683","bugzilla_description":"CVE-2009-5155 glibc: parse_reg_exp in posix/regcomp.c misparses alternatives leading to denial of service or trigger incorrect result","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1010022","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1731964","bugzilla_description":"CVE-2019-1010022 glibc: stack guard protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-119->CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-3855","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687303","bugzilla_description":"CVE-2019-3855 libssh2: Integer overflow in transport read resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3856","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687304","bugzilla_description":"CVE-2019-3856 libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3856.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3857","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687305","bugzilla_description":"CVE-2019-3857 libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3857.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3863","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687313","bugzilla_description":"CVE-2019-3863 libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-8324","severity":"important","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHSA-2019:1972","RHSA-2020:2769","RHSA-2019:1151","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692520","bugzilla_description":"CVE-2019-8324 rubygems: Installing a malicious gem may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby:2.5-8000020190524123348.55190bc5","ruby-0:2.0.0.648-35.el7_6","ruby-0:2.4.6-91.el7cf","rh-ruby23-ruby-0:2.3.8-70.el6","rh-ruby23-ruby-0:2.3.8-70.el7","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-9192","severity":null,"public_date":"2019-02-26T00:00:00Z","advisories":[],"bugzilla":"1684374","bugzilla_description":"CVE-2019-9192 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9192.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2019-7309","severity":"low","public_date":"2019-02-02T00:00:00Z","advisories":[],"bugzilla":"1672232","bugzilla_description":"CVE-2019-7309 glibc: memcmp function incorrectly returns zero","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7309.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-3817","severity":"moderate","public_date":"2019-01-21T00:00:00Z","advisories":["RHSA-2019:3898","RHBA-2020:0062","RHSA-2019:3583"],"bugzilla":"1668005","bugzilla_description":"CVE-2019-3817 libcomps: use after free when merging two objmrtrees","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.81.202001142154.0","libcomps-0:0.1.8-13.el7","libcomps-0:0.1.11-2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20796","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":[],"bugzilla":"1683150","bugzilla_description":"CVE-2018-20796 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9169","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":[],"bugzilla":"1684057","bugzilla_description":"CVE-2019-9169 glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-6488","severity":"moderate","public_date":"2019-01-16T00:00:00Z","advisories":[],"bugzilla":"1667931","bugzilla_description":"CVE-2019-6488 glibc: Incorrect attempt to use a 64-bit register for size_t in assembly codes results in segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-20815","severity":"important","public_date":"2018-12-14T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:1881","RHSA-2019:1175","RHSA-2019:1743","RHSA-2019:1723","RHSA-2019:1667","RHSA-2019:2507","RHSA-2019:1968"],"bugzilla":"1693101","bugzilla_description":"CVE-2018-20815 QEMU: device_tree: heap buffer overflow while loading device tree blob","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-ma-10:2.12.0-18.el7_6.4","virt:rhel-8000020190510171727.55190bc5","qemu-kvm-rhev-10:2.12.0-18.el7_6.6","qemu-kvm-rhev-10:2.12.0-18.el7_6.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-14637","severity":"moderate","public_date":"2018-11-27T20:23:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1627851","bugzilla_description":"CVE-2018-14637 keycloak: expiration not validated in SAML broker consumer endpoint","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287->CWE-285","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-19591","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1653993","bugzilla_description":"CVE-2018-19591 glibc: file descriptor leak in if_nametoindex() in sysdeps/unix/sysv/linux/if_index.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19591.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14658","severity":"moderate","public_date":"2018-11-13T17:38:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625409","bugzilla_description":"CVE-2018-14658 keycloak: Open Redirect in Login and Logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14658.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14655","severity":"moderate","public_date":"2018-11-13T17:37:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625396","bugzilla_description":"CVE-2018-14655 keycloak: XSS-Vulnerability with response_mode=form_post","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14655.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2018-14657","severity":"low","public_date":"2018-11-13T17:37:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625404","bugzilla_description":"CVE-2018-14657 keycloak: brute force protection not working for the entire login workflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14657.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-11784","severity":"moderate","public_date":"2018-10-03T00:00:00Z","advisories":["RHSA-2019:0485","RHSA-2019:0130","RHSA-2019:0131","RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1636512","bugzilla_description":"CVE-2018-11784 tomcat: Open redirect in default servlet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-99","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7_6","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-10936","severity":"low","public_date":"2018-08-27T00:00:00Z","advisories":[],"bugzilla":"1622225","bugzilla_description":"CVE-2018-10936 PostgreSQL: Postgres JDBC driver does not perform host name validation by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-15857","severity":"moderate","public_date":"2018-07-30T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623022","bugzilla_description":"CVE-2018-15857 libxkbcommon: Invalid free in ExprAppendMultiKeysymList resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14348","severity":"moderate","public_date":"2018-07-25T00:00:00Z","advisories":["RHSA-2019:2047"],"bugzilla":"1611119","bugzilla_description":"CVE-2018-14348 libcgroup: cgrulesengd creates log files with insecure permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libcgroup-0:0.41-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14348.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-15858","severity":"low","public_date":"2018-07-23T00:00:00Z","advisories":[],"bugzilla":"1623024","bugzilla_description":"CVE-2018-15858 libxkbcommon: NULL pointer dereference when handling invalid aliases in CopyKeyAliasesToKeymap resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15858.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8034","severity":"low","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2019:0451","RHSA-2019:0130","RHSA-2019:0131","RHSA-2019:0450","RHSA-2019:2205","RHSA-2019:3892","RHSA-2019:1159","RHSA-2019:1162","RHSA-2019:1529","RHSA-2019:1161","RHSA-2019:1160"],"bugzilla":"1607580","bugzilla_description":"CVE-2018-8034 tomcat: Host name verification missing in WebSocket client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","jbossweb-0:7.5.30-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8034.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-8037","severity":"important","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1607582","bugzilla_description":"CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2018-10894","severity":"moderate","public_date":"2018-07-09T00:00:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2019:0877","RHSA-2018:3595"],"bugzilla":"1599434","bugzilla_description":"CVE-2018-10894 keycloak: auth permitted with expired certs in SAML client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10894.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-8014","severity":"moderate","public_date":"2018-05-17T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2019:0451","RHSA-2019:0450","RHSA-2019:2205","RHSA-2018:3768","RHSA-2018:2469","RHSA-2019:1529"],"bugzilla":"1579611","bugzilla_description":"CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","tomcat8-0:8.0.36-31.ep7.el7","tomcat7-0:7.0.70-27.ep7.el7","tomcat7-0:7.0.70-27.ep7.el6","tomcat8-0:8.0.36-31.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2018-11237","severity":"moderate","public_date":"2018-05-17T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1581274","bugzilla_description":"CVE-2018-11237 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11237.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-1313","severity":"important","public_date":"2018-05-05T00:00:00Z","advisories":[],"bugzilla":"1575639","bugzilla_description":"CVE-2018-1313 derby: Externally-controlled input vulnerability allows remote attacker to boot a database under attacker's control","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1313.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-1102","severity":"critical","public_date":"2018-04-27T00:00:00Z","advisories":["RHSA-2018:1239","RHSA-2018:1229","RHSA-2018:1237","RHSA-2018:1227","RHSA-2019:0036","RHSA-2018:1235","RHSA-2018:1233","RHSA-2018:1231","RHSA-2018:1243","RHSA-2018:1241"],"bugzilla":"1562246","bugzilla_description":"CVE-2018-1102 source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.3.1.46.39-2.git.3.cc57f5b.el7","atomic-openshift-0:3.9.25-1.git.0.6bc473e.el7","atomic-openshift-0:3.1.1.11-4.git.3.12809c8.el7","source-to-image-0:1.1.13-1.el7","atomic-openshift-0:3.2.1.34-2.git.3.aad33c3.el7","atomic-openshift-0:3.7.44-1.git.0.6b061d4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.9"},{"CVE":"CVE-2018-15856","severity":"low","public_date":"2018-03-12T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623018","bugzilla_description":"CVE-2018-15856 libxkbcommon: Infinite loop when reaching EOL unexpectedly resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15856.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15855","severity":"low","public_date":"2018-03-11T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623013","bugzilla_description":"CVE-2018-15855 libxkbcommon: NULL pointer dereference when handling xkb_geometry","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15855.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15853","severity":"low","public_date":"2018-03-10T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623009","bugzilla_description":"CVE-2018-15853 libxkbcommon: Endless recursion in xkbcomp/expr.c resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15853.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15854","severity":"low","public_date":"2018-03-10T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623012","bugzilla_description":"CVE-2018-15854 libxkbcommon: NULL pointer dereference resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15854.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7485","severity":"moderate","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2019:2336"],"bugzilla":"1549636","bugzilla_description":"CVE-2018-7485 unixODBC: Insecure buffer copy in SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["unixODBC-0:2.3.1-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2017-18198","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:3246"],"bugzilla":"1549644","bugzilla_description":"CVE-2017-18198 libcdio: Heap-based buffer over-read in print_iso9660_recurse function in iso-info.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libcdio-0:0.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2017-18199","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:3246"],"bugzilla":"1549701","bugzilla_description":"CVE-2017-18199 libcdio: NULL pointer dereference in realloc_symlink in rock.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libcdio-0:0.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2017-18201","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:3246"],"bugzilla":"1549707","bugzilla_description":"CVE-2017-18201 libcdio: Double free in get_cdtext_generic() in lib/driver/_cdio_generic.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libcdio-0:0.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18201.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-11236","severity":"moderate","public_date":"2018-02-04T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1581269","bugzilla_description":"CVE-2018-11236 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-121","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-6551","severity":"moderate","public_date":"2018-02-02T00:00:00Z","advisories":[],"bugzilla":"1542119","bugzilla_description":"CVE-2018-6551 glibc: integer overflow in malloc functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6551.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000001","severity":"important","public_date":"2018-01-11T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1533836","bugzilla_description":"CVE-2018-1000001 glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000001.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-7409","severity":"moderate","public_date":"2018-01-02T00:00:00Z","advisories":["RHSA-2019:2336"],"bugzilla":"1548305","bugzilla_description":"CVE-2018-7409 unixODBC: Buffer overflow in unicode_to_ansi_copy() can lead to crash or other unspecified impact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["unixODBC-0:2.3.1-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7409.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-18269","severity":"moderate","public_date":"2017-12-24T00:00:00Z","advisories":[],"bugzilla":"1580924","bugzilla_description":"CVE-2017-18269 glibc: memory corruption in memcpy-sse2-unaligned.S","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18269.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-16997","severity":"moderate","public_date":"2017-12-17T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1526865","bugzilla_description":"CVE-2017-16997 glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-470","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16997.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-1000408","severity":"low","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1522828","bugzilla_description":"CVE-2017-1000408 glibc: Memory leak reachable via LD_HWCAP_MASK","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000408.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000409","severity":"moderate","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1522830","bugzilla_description":"CVE-2017-1000409 glibc: Buffer overflow triggerable via LD_LIBRARY_PATH","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000409.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-17426","severity":"moderate","public_date":"2017-10-31T00:00:00Z","advisories":[],"bugzilla":"1524530","bugzilla_description":"CVE-2017-17426 glibc: Integer overflow with enabled tcache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17426.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-15859","severity":"low","public_date":"2017-10-30T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623026","bugzilla_description":"CVE-2018-15859 libxkbcommon: NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15859.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15804","severity":"moderate","public_date":"2017-10-21T00:00:00Z","advisories":["RHSA-2018:1879","RHSA-2018:0805"],"bugzilla":"1505298","bugzilla_description":"CVE-2017-15804 glibc: Buffer overflow during unescaping of user names with the ~ operator","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7","glibc-0:2.12-1.212.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-15671","severity":"low","public_date":"2017-10-20T00:00:00Z","advisories":[],"bugzilla":"1504806","bugzilla_description":"CVE-2017-15671 glibc: Memory leak in glob with GLOB_TILDE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15671.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15670","severity":"moderate","public_date":"2017-10-19T00:00:00Z","advisories":["RHSA-2018:1879","RHSA-2018:0805"],"bugzilla":"1504804","bugzilla_description":"CVE-2017-15670 glibc: Buffer overflow in glob with GLOB_TILDE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7","glibc-0:2.12-1.212.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15670.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-12159","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1484111","bugzilla_description":"CVE-2017-12159 keycloak: CSRF token fixation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-12160","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1484154","bugzilla_description":"CVE-2017-12160 keycloak: resource privilege extension via access token in oauth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-12158","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1489161","bugzilla_description":"CVE-2017-12158 keycloak: reflected XSS using HOST header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-12197","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1503103","bugzilla_description":"CVE-2017-12197 libpam4j: Account check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-6485","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1542102","bugzilla_description":"CVE-2018-6485 glibc: Integer overflow in posix_memalign in memalign functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6485.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-15861","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623028","bugzilla_description":"CVE-2018-15861 libxkbcommon: NULL pointer dereference in ExprResolveLhs resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15861.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15862","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623029","bugzilla_description":"CVE-2018-15862 libxkbcommon: NULL pointer dereference in LookupModMask resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15863","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623030","bugzilla_description":"CVE-2018-15863 libxkbcommon: NULL pointer dereference in ResolveStateAndPredicate resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15863.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15864","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623033","bugzilla_description":"CVE-2018-15864 libxkbcommon: NULL pointer dereference in resolve_keysym resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000366","severity":"important","public_date":"2017-06-19T00:00:00Z","advisories":["RHSA-2017:1567","RHSA-2017:1479","RHSA-2017:1480","RHSA-2017:1481"],"bugzilla":"1452543","bugzilla_description":"CVE-2017-1000366 glibc: heap/stack gap jumping via unbounded stack allocations","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6_9.2","glibc-0:2.5-123.el5_11.4","glibc-0:2.17-157.el7_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000366.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2014-9984","severity":"critical","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1463288","bugzilla_description":"CVE-2014-9984 glibc: nscd buffer manipulation vulnerability could lead to code execution or crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9984.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-8834","severity":"low","public_date":"2017-06-07T00:00:00Z","advisories":[],"bugzilla":"1463306","bugzilla_description":"CVE-2017-8834 libcroco: Memory allocation failure in the cr_tknzr_parse_comment function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8834.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8871","severity":"low","public_date":"2017-06-07T00:00:00Z","advisories":[],"bugzilla":"1463307","bugzilla_description":"CVE-2017-8871 libcroco: Infinite loop in the cr_parser_parse_selector_core function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8871.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8804","severity":"moderate","public_date":"2017-05-08T00:00:00Z","advisories":[],"bugzilla":"1448794","bugzilla_description":"CVE-2017-8804 glibc: memory leak in sunrpc when decoding malformed XDR","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7960","severity":"low","public_date":"2017-04-16T00:00:00Z","advisories":[],"bugzilla":"1445314","bugzilla_description":"CVE-2017-7960 libcroco: Out-of-bounds read due to missing index check in cr-input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7960.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7961","severity":"low","public_date":"2017-04-16T00:00:00Z","advisories":[],"bugzilla":"1450068","bugzilla_description":"CVE-2017-7961 libcroco: Undefined behavior issue in cr_tknzr_parse_rgb function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7961.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12132","severity":"low","public_date":"2017-04-07T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1477529","bugzilla_description":"CVE-2017-12132 glibc: Fragmentation attacks possible when EDNS0 is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12132.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.0"},{"CVE":"CVE-2014-9970","severity":"moderate","public_date":"2017-02-20T00:00:00Z","advisories":["RHSA-2017:2547","RHSA-2017:2811","RHSA-2017:2546","RHSA-2017:2810","RHSA-2017:2904","RHSA-2017:3141","RHSA-2017:2808","RHSA-2017:2809","RHSA-2017:2905","RHSA-2017:2906","RHSA-2018:0294"],"bugzilla":"1455566","bugzilla_description":"CVE-2014-9970 jasypt: Vulnerable to timing attack against the password hash comparison","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6","rhvm-appliance-0:20171102.0-1","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9970.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2017-12133","severity":"low","public_date":"2017-02-08T00:00:00Z","advisories":[],"bugzilla":"1478288","bugzilla_description":"CVE-2017-12133 glibc: Use-after-free read access in clntudp_call in sunrpc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12133.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-2614","severity":"important","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:0257"],"bugzilla":"1417702","bugzilla_description":"CVE-2017-2614 rhev-m-4: Fails to validate existing expired passwords when changing a password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ovirt-engine-extension-aaa-jdbc-0:1.1.3-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2614.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.8"},{"CVE":"CVE-2016-10228","severity":"low","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1428290","bugzilla_description":"CVE-2016-10228 glibc: iconv program can hang when invoked with the -c option","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10228.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8610","severity":"moderate","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:0286","RHSA-2017:0574"],"bugzilla":"1384743","bugzilla_description":"CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","openssl-0:1.0.1e-48.el6_8.4","gnutls-0:2.12.23-21.el6","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6304","severity":"important","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2016:2802","RHSA-2017:2493","RHSA-2017:2494","RHSA-2016:1940"],"bugzilla":"1377600","bugzilla_description":"CVE-2016-6304 openssl: OCSP Status Request extension unbounded memory growth","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-0:1.0.1e-16.el6_5.17","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-42.el6_7.6","openssl-0:1.0.1e-48.el6_8.3","openssl-0:1.0.0-27.el6_4.6","openssl-0:1.0.1e-30.el6_6.13","openssl-0:1.0.0-20.el6_2.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6323","severity":"low","public_date":"2016-08-04T00:00:00Z","advisories":[],"bugzilla":"1383297","bugzilla_description":"CVE-2016-6323 glibc: Missing unwind info in __startcontext causes infinite loop in _Unwind_Backtrace","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5417","severity":"low","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1362534","bugzilla_description":"CVE-2016-5417 glibc: per-thread memory leak in __res_vinit with IPv6 nameservers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5417.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-5387","severity":"important","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1650","RHSA-2016:1420","RHSA-2016:1421","RHSA-2016:1624","RHSA-2016:1635","RHSA-2016:1625","RHSA-2016:1636","RHSA-2016:1648","RHSA-2016:1649","RHSA-2016:1851","RHSA-2016:1422"],"bugzilla":"1353755","bugzilla_description":"CVE-2016-5387 Apache HTTPD: sets environmental variable based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd-0:2.2.26-54.ep6.el6","httpd24-httpd-0:2.4.18-11.el6","httpd24-httpd-0:2.4.18-11.el7","httpd-0:2.4.6-40.el7_2.4","httpd-0:2.2.3-92.el5_11","jbcs-httpd24-httpd-0:2.4.6-77.SP1.jbcs.el7","jbcs-httpd24-httpd-0:2.4.6-77.SP1.jbcs.el6","httpd-0:2.2.15-54.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-4979","severity":"moderate","public_date":"2016-07-05T00:00:00Z","advisories":["RHSA-2016:1420"],"bugzilla":"1352476","bugzilla_description":"CVE-2016-4979 httpd: X509 client certificate authentication bypass using HTTP/2","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["httpd24-httpd-0:2.4.18-11.el6","httpd24-httpd-0:2.4.18-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4979.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2016-2178","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1343400","bugzilla_description":"CVE-2016-2178 openssl: Non-constant time codepath followed for certain operations in DSA implementation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2178.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2016-4429","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1337136","bugzilla_description":"CVE-2016-4429 glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4429.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-2177","severity":"low","public_date":"2016-05-05T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1341705","bugzilla_description":"CVE-2016-2177 openssl: Possible integer overflow vulnerabilities in codebase","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2177.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-10739","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":["RHSA-2019:3513","RHSA-2019:2118","RHBA-2019:3303"],"bugzilla":"1347549","bugzilla_description":"CVE-2016-10739 glibc: getaddrinfo should reject IP addresses with trailing characters","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","glibc-0:2.17-292.el7","glibc-0:2.28-72.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10739.json"},{"CVE":"CVE-2016-3706","severity":"low","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1330887","bugzilla_description":"CVE-2016-3706 glibc: stack (frame) overflow in getaddrinfo() when called with AF_INET, AF_INET6 (incomplete fix for CVE-2013-4458)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3706.json"},{"CVE":"CVE-2016-3075","severity":"low","public_date":"2016-03-29T00:00:00Z","advisories":["RHSA-2016:2573"],"bugzilla":"1321866","bugzilla_description":"CVE-2016-3075 glibc: Stack overflow in nss_dns_getnetbyname_r","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:P/I:P/A:C","CWE":"CWE-121","affected_packages":["glibc-0:2.17-157.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-1234","severity":"moderate","public_date":"2016-03-07T00:00:00Z","advisories":[],"bugzilla":"1315647","bugzilla_description":"CVE-2016-1234 glibc: Stack-based buffer overflow in glob with GLOB_ALTDIRFUNC and crafted directory","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1234.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2015-7547","severity":"critical","public_date":"2016-02-16T00:00:00Z","advisories":["RHSA-2016:0175","RHSA-2016:0176","RHSA-2016:0277","RHSA-2016:0225"],"bugzilla":"1293532","bugzilla_description":"CVE-2015-7547 glibc: getaddrinfo stack-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.12-1.132.el6_5.7","glibc-0:2.12-1.107.el6_4.9","glibc-0:2.12-1.149.el6_6.11","glibc-0:2.17-79.ael7b_1.4","glibc-0:2.12-1.166.el6_7.7","glibc-0:2.12-1.47.el6_2.17","rhev-hypervisor7-0:7.2-20160105.2.el7ev","glibc-0:2.17-106.el7_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7547.json"},{"CVE":"CVE-2015-7528","severity":"moderate","public_date":"2015-11-27T00:00:00Z","advisories":["RHSA-2015:2544","RHSA-2015:2615"],"bugzilla":"1286745","bugzilla_description":"CVE-2015-7528 OpenShift: pod log location must validate container if provided","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":["openshift-0:3.0.2.0-0.git.38.7576bc5.el7ose","atomic-openshift-0:3.1.0.4-1.git.15.5e061c3.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7528.json"},{"CVE":"CVE-2015-8776","severity":"moderate","public_date":"2015-09-20T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300299","bugzilla_description":"CVE-2015-8776 glibc: Segmentation fault caused by passing out-of-range data to strftime()","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2015-5277","severity":"important","public_date":"2015-09-14T00:00:00Z","advisories":["RHSA-2015:2172","RHSA-2015:2589"],"bugzilla":"1262914","bugzilla_description":"CVE-2015-5277 glibc: data corruption while reading the NSS files database","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["glibc-0:2.17-106.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5277.json"},{"CVE":"CVE-2015-8777","severity":"low","public_date":"2015-09-05T00:00:00Z","advisories":["RHSA-2017:1916"],"bugzilla":"1260581","bugzilla_description":"CVE-2015-8777 glibc: LD_POINTER_GUARD in the environment is not sanitized","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8777.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-5229","severity":"low","public_date":"2015-08-21T00:00:00Z","advisories":["RHSA-2016:0176","RHBA-2015:1465"],"bugzilla":"1256285","bugzilla_description":"CVE-2015-5229 glibc: calloc may return non-zero memory","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.166.el6_7.1","glibc-0:2.17-106.el7_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5229.json"},{"CVE":"CVE-2015-5180","severity":"low","public_date":"2015-08-07T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1249603","bugzilla_description":"CVE-2015-5180 glibc: DNS resolver NULL pointer dereference with crafted record type","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5180.json"},{"CVE":"CVE-2015-1781","severity":"moderate","public_date":"2015-04-21T00:00:00Z","advisories":["RHSA-2015:0863","RHSA-2015:2199","RHSA-2015:2589"],"bugzilla":"1199525","bugzilla_description":"CVE-2015-1781 glibc: buffer overflow in gethostbyname_r() and related functions with misaligned buffer","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-131->CWE-119","affected_packages":["glibc-0:2.12-1.149.el6_6.7","glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1781.json"},{"CVE":"CVE-2015-8778","severity":"moderate","public_date":"2015-04-10T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300303","bugzilla_description":"CVE-2015-8778 glibc: Integer overflow in hcreate and hcreate_r","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2015-8985","severity":"low","public_date":"2015-02-28T00:00:00Z","advisories":[],"bugzilla":"1197798","bugzilla_description":"CVE-2015-8985 glibc: potential denial of service in pop_fail_stack()","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8985.json"},{"CVE":"CVE-2015-0886","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1197815","bugzilla_description":"CVE-2015-0886 jBCrypt: integer overflow in the crypt_raw method","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0886.json"},{"CVE":"CVE-2015-8984","severity":"low","public_date":"2015-02-26T00:00:00Z","advisories":[],"bugzilla":"1197730","bugzilla_description":"CVE-2015-8984 glibc: potential denial of service in internal_fnmatch()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8984.json"},{"CVE":"CVE-2014-8121","severity":"low","public_date":"2015-02-23T00:00:00Z","advisories":["RHSA-2015:0327"],"bugzilla":"1165192","bugzilla_description":"CVE-2014-8121 glibc: Unexpected closing of nss_files databases after lookups causes denial of service","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["glibc-0:2.17-78.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8121.json"},{"CVE":"CVE-2015-8983","severity":"moderate","public_date":"2015-02-22T00:00:00Z","advisories":[],"bugzilla":"1195762","bugzilla_description":"CVE-2015-8983 glibc: _IO_wstr_overflow integer overflow","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8983.json"},{"CVE":"CVE-2015-8982","severity":"low","public_date":"2015-02-13T00:00:00Z","advisories":[],"bugzilla":"1192525","bugzilla_description":"CVE-2015-8982 glibc: multiple overflows in strxfrm()","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8982.json"},{"CVE":"CVE-2015-8779","severity":"moderate","public_date":"2015-01-29T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300312","bugzilla_description":"CVE-2015-8779 glibc: Unbounded stack allocation in catopen function","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8779.json"},{"CVE":"CVE-2015-0235","severity":"critical","public_date":"2015-01-27T00:00:00Z","advisories":["RHSA-2015:0092","RHSA-2015:0090","RHSA-2015:0126","RHSA-2015:0101","RHSA-2015:0099"],"bugzilla":"1183461","bugzilla_description":"CVE-2015-0235 glibc: __nss_hostname_digits_dots() heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-131->CWE-122","affected_packages":["glibc-0:2.5-123.el5_11.1","glibc-0:2.5-58.el5_6.6","rhev-hypervisor6-0:6.6-20150123.1.el6ev","glibc-0:2.12-1.47.el6_2.15","glibc-0:2.12-1.107.el6_4.7","glibc-0:2.12-1.149.el6_6.5","glibc-0:2.12-1.132.el6_5.5","glibc-0:2.3.4-2.57.el4.2","glibc-0:2.17-55.el7_0.5","glibc-0:2.5-107.el5_9.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0235.json"},{"CVE":"CVE-2013-7424","severity":"moderate","public_date":"2015-01-27T00:00:00Z","advisories":["RHSA-2014:1391","RHSA-2015:1627"],"bugzilla":"1186614","bugzilla_description":"CVE-2013-7424 glibc: Invalid-free when using getaddrinfo()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-123.el5_11.3","glibc-0:2.12-1.149.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7424.json"},{"CVE":"CVE-2014-7817","severity":"moderate","public_date":"2014-11-20T00:00:00Z","advisories":["RHSA-2015:0016","RHSA-2014:2023"],"bugzilla":"1157689","bugzilla_description":"CVE-2014-7817 glibc: command execution in wordexp() with WRDE_NOCMD specified","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-440","affected_packages":["glibc-0:2.12-1.149.el6_6.4","glibc-0:2.17-55.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7817.json"},{"CVE":"CVE-2014-9402","severity":"low","public_date":"2014-11-20T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1175369","bugzilla_description":"CVE-2014-9402 glibc: denial of service in getnetbyname function","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9402.json"},{"CVE":"CVE-2014-6040","severity":"moderate","public_date":"2014-08-28T00:00:00Z","advisories":["RHSA-2015:0327","RHSA-2015:0016"],"bugzilla":"1135841","bugzilla_description":"CVE-2014-6040 glibc: crash in code page decoding functions (IBM933, IBM935, IBM937, IBM939, IBM1364)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":["glibc-0:2.17-78.el7","glibc-0:2.12-1.149.el6_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6040.json"},{"CVE":"CVE-2014-5119","severity":"important","public_date":"2014-07-14T00:00:00Z","advisories":["RHSA-2014:1118","RHSA-2014:1110"],"bugzilla":"1119128","bugzilla_description":"CVE-2014-5119 glibc: off-by-one error leading to a heap-based buffer overflow flaw in __gconv_translit_find()","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-193->CWE-626->CWE-122","affected_packages":["glibc-0:2.17-55.el7_0.1","glibc-0:2.12-1.132.el6_5.4","glibc-0:2.5-118.el5_10.3","glibc-0:2.5-107.el5_9.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5119.json"},{"CVE":"CVE-2014-0475","severity":"moderate","public_date":"2014-07-09T00:00:00Z","advisories":["RHSA-2014:1110"],"bugzilla":"1102353","bugzilla_description":"CVE-2014-0475 glibc: directory traversal in LC_* locale handling","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-22","affected_packages":["glibc-0:2.17-55.el7_0.1","glibc-0:2.12-1.132.el6_5.4","glibc-0:2.5-118.el5_10.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0475.json"},{"CVE":"CVE-2014-4043","severity":"low","public_date":"2014-06-11T00:00:00Z","advisories":[],"bugzilla":"1109263","bugzilla_description":"CVE-2014-4043 glibc: posix_spawn_file_actions_addopen fails to copy the path argument","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4043.json"},{"CVE":"CVE-2014-9761","severity":"moderate","public_date":"2014-05-19T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300310","bugzilla_description":"CVE-2014-9761 glibc: Unbounded stack allocation in nan* functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9761.json"},{"CVE":"CVE-2015-1472","severity":"low","public_date":"2014-02-21T00:00:00Z","advisories":["RHSA-2015:2199","RHSA-2015:2589"],"bugzilla":"1188235","bugzilla_description":"CVE-2015-1472 glibc: heap buffer overflow in glibc swscanf","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-122","affected_packages":["glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1472.json"},{"CVE":"CVE-2015-1473","severity":"low","public_date":"2014-02-21T00:00:00Z","advisories":["RHSA-2015:2199","RHSA-2015:2589"],"bugzilla":"1209105","bugzilla_description":"CVE-2015-1473 glibc: Stack-overflow in glibc swscanf","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1473.json"},{"CVE":"CVE-2013-7172","severity":"moderate","public_date":"2013-12-17T00:00:00Z","advisories":[],"bugzilla":"1044846","bugzilla_description":"CVE-2013-7172 libiodbc: insecure RPATH in certain binaries","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7172.json"},{"CVE":"CVE-2013-4458","severity":"low","public_date":"2013-10-22T00:00:00Z","advisories":["RHSA-2014:1391"],"bugzilla":"1022280","bugzilla_description":"CVE-2013-4458 glibc: Stack (frame) overflow in getaddrinfo() when called with AF_INET6","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.12-1.149.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4458.json"},{"CVE":"CVE-2013-7423","severity":"moderate","public_date":"2013-09-12T00:00:00Z","advisories":["RHSA-2015:0863","RHSA-2015:2199","RHSA-2016:1207","RHSA-2015:2589"],"bugzilla":"1187109","bugzilla_description":"CVE-2013-7423 glibc: getaddrinfo() writes DNS queries to random file descriptors under high load","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-362->CWE-201","affected_packages":["glibc-0:2.12-1.132.el6_5.8","glibc-0:2.12-1.149.el6_6.7","glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7423.json"},{"CVE":"CVE-2013-4332","severity":"moderate","public_date":"2013-08-20T00:00:00Z","advisories":["RHSA-2013:1605","RHSA-2013:1411"],"bugzilla":"1007545","bugzilla_description":"CVE-2013-4332 glibc: three integer overflows in memory allocator","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.5-118.el5_10.2","glibc-0:2.12-1.132.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4332.json"},{"CVE":"CVE-2013-4237","severity":"moderate","public_date":"2013-08-11T00:00:00Z","advisories":["RHSA-2014:1391"],"bugzilla":"995839","bugzilla_description":"CVE-2013-4237 glibc: Buffer overwrite when using readdir_r on file systems returning file names longer than NAME_MAX characters","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["glibc-0:2.12-1.149.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4237.json"},{"CVE":"CVE-2013-2207","severity":"moderate","public_date":"2013-07-16T00:00:00Z","advisories":[],"bugzilla":"976408","bugzilla_description":"CVE-2013-2207 glibc (pt_chown): Improper pseudotty ownership and permissions changes when granting access to the slave pseudoterminal","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2207.json"},{"CVE":"CVE-2013-4788","severity":"low","public_date":"2013-07-15T00:00:00Z","advisories":[],"bugzilla":"985625","bugzilla_description":"CVE-2013-4788 glibc: PTR_MANGLE does not initialize to a random value for the pointer guard when compiling static executables","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4788.json"},{"CVE":"CVE-2013-1914","severity":"low","public_date":"2013-04-03T00:00:00Z","advisories":["RHSA-2013:1605","RHSA-2013:0769"],"bugzilla":"947882","bugzilla_description":"CVE-2013-1914 glibc: Stack (frame) overflow in getaddrinfo() when processing entry mapping to long list of address structures","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.132.el6","glibc-0:2.5-107.el5_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1914.json"},{"CVE":"CVE-2013-0242","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":["RHSA-2013:1605","RHSA-2013:0769"],"bugzilla":"905874","bugzilla_description":"CVE-2013-0242 glibc: Buffer overrun (DoS) in regexp matcher by processing multibyte characters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.132.el6","glibc-0:2.5-107.el5_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0242.json"},{"CVE":"CVE-2014-3215","severity":"important","public_date":"2012-12-08T00:00:00Z","advisories":["RHSA-2015:0864","RHBA-2015:2161"],"bugzilla":"1095855","bugzilla_description":"CVE-2014-3215 policycoreutils: local privilege escalation via seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-270","affected_packages":["kernel-0:2.6.32-504.16.2.el6","libcap-ng-0:0.7.5-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3215.json"},{"CVE":"CVE-2012-4424","severity":"moderate","public_date":"2012-09-06T00:00:00Z","advisories":[],"bugzilla":"858238","bugzilla_description":"CVE-2012-4424 glibc: alloca() stack overflow in the strcoll() interface","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4424.json"},{"CVE":"CVE-2012-4412","severity":"moderate","public_date":"2012-09-05T00:00:00Z","advisories":[],"bugzilla":"855385","bugzilla_description":"CVE-2012-4412 glibc: strcoll() integer overflow leading to buffer overflow","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4412.json"},{"CVE":"CVE-2012-3480","severity":"moderate","public_date":"2012-08-12T00:00:00Z","advisories":["RHSA-2012:1207","RHSA-2012:1208","RHSA-2012:1262","RHSA-2012:1325"],"bugzilla":"847715","bugzilla_description":"CVE-2012-3480 glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-121","affected_packages":["glibc-0:2.12-1.80.el6_3.5","rhev-hypervisor6-0:6.3-20120926.0.el6_3","glibc-0:2.5-81.el5_8.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3480.json"},{"CVE":"CVE-2012-3406","severity":"moderate","public_date":"2012-07-11T00:00:00Z","advisories":["RHSA-2012:1098","RHSA-2012:1097","RHSA-2012:1185","RHSA-2012:1200"],"bugzilla":"826943","bugzilla_description":"CVE-2012-3406 glibc: printf() unbound alloca() usage in case of positional parameters + many format specs","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.3-20120815.0.el6_3","glibc-0:2.12-1.80.el6_3.3","glibc-0:2.5-81.el5_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3406.json"},{"CVE":"CVE-2012-3404","severity":"moderate","public_date":"2012-07-11T00:00:00Z","advisories":["RHSA-2012:1098","RHSA-2012:1200"],"bugzilla":"833703","bugzilla_description":"CVE-2012-3404 glibc: incorrect size calculation in formatted printing can lead to FORTIFY_SOURCE format string protection bypass","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.3-20120815.0.el6_3","glibc-0:2.12-1.80.el6_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3404.json"},{"CVE":"CVE-2012-3405","severity":"moderate","public_date":"2012-07-11T00:00:00Z","advisories":["RHSA-2012:1098","RHSA-2012:1200"],"bugzilla":"833704","bugzilla_description":"CVE-2012-3405 glibc: incorrect use of extend_alloca() in formatted printing can lead to FORTIFY_SOURCE format string protection bypass","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.3-20120815.0.el6_3","glibc-0:2.12-1.80.el6_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3405.json"},{"CVE":"CVE-2012-2657","severity":"low","public_date":"2012-05-29T00:00:00Z","advisories":[],"bugzilla":"826262","bugzilla_description":"CVE-2012-2657 unixodbc: buffer overflow due to improper checking of FILESDN= input","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2657.json"},{"CVE":"CVE-2012-2658","severity":"low","public_date":"2012-05-29T00:00:00Z","advisories":[],"bugzilla":"826263","bugzilla_description":"CVE-2012-2658 unixodbc: buffer overflow due to improper checking of DRIVER= input","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2658.json"},{"CVE":"CVE-2012-6656","severity":"moderate","public_date":"2012-05-23T00:00:00Z","advisories":[],"bugzilla":"1135840","bugzilla_description":"CVE-2012-6656 glibc: crash in IBM930 decoding","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6656.json"},{"CVE":"CVE-2012-1618","severity":null,"public_date":"2012-03-25T00:00:00Z","advisories":[],"bugzilla":"807394","bugzilla_description":"CVE-2012-1618 postgresql-jdbc: SQL injection due improper escaping of JDBC statement parameters","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1618.json"},{"CVE":"CVE-2011-4099","severity":"low","public_date":"2011-07-16T00:00:00Z","advisories":["RHSA-2011:1694"],"bugzilla":"722694","bugzilla_description":"CVE-2011-4099 capsh: does not chdir after chroot","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["libcap-0:2.16-5.5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4099.json"},{"CVE":"CVE-2011-4609","severity":"low","public_date":"2011-05-05T00:00:00Z","advisories":["RHSA-2012:0058","RHSA-2012:0125","RHSA-2012:0126"],"bugzilla":"767299","bugzilla_description":"CVE-2011-4609 glibc: svc_run() produces high cpu usage when accept() fails with EMFILE error","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.47.el6_2.5","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4609.json"},{"CVE":"CVE-2012-6686","severity":"moderate","public_date":"2011-04-13T00:00:00Z","advisories":["RHBA-2013:0022","RHBA-2012:0763"],"bugzilla":"1009643","bugzilla_description":"CVE-2012-6686 CVE-2013-4357 glibc: stack overflow in getaddrinfo()'s use of alloca()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.5-107","glibc-0:2.12-1.80.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6686.json"},{"CVE":"CVE-2013-4357","severity":"moderate","public_date":"2011-04-13T00:00:00Z","advisories":[],"bugzilla":"1009643","bugzilla_description":"CVE-2012-6686 CVE-2013-4357 glibc: stack overflow in getaddrinfo()'s use of alloca()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4357.json"},{"CVE":"CVE-2011-1145","severity":"low","public_date":"2011-03-09T00:00:00Z","advisories":[],"bugzilla":"684036","bugzilla_description":"CVE-2011-1145 unixODBC: possible buffer overrun in SQLDriverConnect()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1145.json"},{"CVE":"CVE-2011-1006","severity":"important","public_date":"2011-03-03T00:00:00Z","advisories":["RHSA-2011:0320"],"bugzilla":"678107","bugzilla_description":"CVE-2011-1006 libcgroup: Heap-based buffer overflow by converting list of controllers for given task into an array of strings","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["libcgroup-0:0.36.1-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1006.json"},{"CVE":"CVE-2011-1089","severity":"low","public_date":"2011-03-03T00:00:00Z","advisories":["RHSA-2012:0125","RHSA-2012:0126","RHSA-2011:1526"],"bugzilla":"688980","bugzilla_description":"CVE-2011-1089 glibc: Suid mount helpers fail to anticipate RLIMIT_FSIZE","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["glibc-0:2.12-1.47.el6","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1089.json"},{"CVE":"CVE-2011-1022","severity":"low","public_date":"2011-02-18T00:00:00Z","advisories":["RHSA-2011:0320"],"bugzilla":"680409","bugzilla_description":"CVE-2011-1022 libcgroup: Uncheck origin of NETLINK messages","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["libcgroup-0:0.36.1-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1022.json"},{"CVE":"CVE-2011-5320","severity":"low","public_date":"2011-01-22T00:00:00Z","advisories":[],"bugzilla":"1196745","bugzilla_description":"CVE-2011-5320 glibc: scanf implementation crashes on certain inputs","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5320.json"},{"CVE":"CVE-2011-1658","severity":"low","public_date":"2011-01-12T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413"],"bugzilla":"694873","bugzilla_description":"CVE-2011-1658 glibc: ld.so insecure handling of privileged programs' RPATHs with $ORIGIN","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1658.json"},{"CVE":"CVE-2011-0536","severity":"important","public_date":"2011-01-11T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413"],"bugzilla":"667974","bugzilla_description":"CVE-2011-0536 glibc: CVE-2010-3847 fix causes linker to search CWD when running privileged program with $ORIGIN in R*PATH","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0536.json"},{"CVE":"CVE-2010-4051","severity":null,"public_date":"2010-12-07T00:00:00Z","advisories":[],"bugzilla":"645859","bugzilla_description":"CVE-2010-4051 CVE-2010-4052 glibc: De-recursivise regular expression engine","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4051.json"},{"CVE":"CVE-2010-4052","severity":null,"public_date":"2010-12-07T00:00:00Z","advisories":[],"bugzilla":"645859","bugzilla_description":"CVE-2010-4051 CVE-2010-4052 glibc: De-recursivise regular expression engine","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4052.json"},{"CVE":"CVE-2012-0864","severity":"moderate","public_date":"2010-11-17T00:00:00Z","advisories":["RHSA-2012:0393","RHSA-2012:0397","RHSA-2012:0531","RHSA-2012:0488"],"bugzilla":"794766","bugzilla_description":"CVE-2012-0864 glibc: FORTIFY_SOURCE format string protection bypass via \"nargs\" integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.12-1.47.el6_2.9","rhev-hypervisor6-0:6.2-20120423.1.el6_2","glibc-0:2.5-81.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0864.json"},{"CVE":"CVE-2010-3856","severity":"important","public_date":"2010-10-22T00:00:00Z","advisories":["RHSA-2010:0872","RHSA-2010:0793"],"bugzilla":"645672","bugzilla_description":"CVE-2010-3856 glibc: ld.so arbitrary DSO loading via LD_AUDIT in setuid/setgid programs","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["glibc-0:2.12-1.7.el6_0.3","glibc-0:2.5-49.el5_5.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3856.json"},{"CVE":"CVE-2010-3847","severity":"important","public_date":"2010-10-18T00:00:00Z","advisories":["RHSA-2010:0787","RHSA-2010:0872"],"bugzilla":"643306","bugzilla_description":"CVE-2010-3847 glibc: ld.so insecure handling of $ORIGIN in LD_AUDIT for setuid/setgid programs","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["glibc-0:2.12-1.7.el6_0.3","glibc-0:2.5-49.el5_5.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3847.json"},{"CVE":"CVE-2010-4756","severity":"low","public_date":"2010-10-07T00:00:00Z","advisories":[],"bugzilla":"681681","bugzilla_description":"CVE-2010-4756 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4756.json"},{"CVE":"CVE-2011-1095","severity":"low","public_date":"2010-08-11T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413","RHSA-2012:0125"],"bugzilla":"625893","bugzilla_description":"CVE-2011-1095 glibc: insufficient quoting in the locale command output","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1095.json"},{"CVE":"CVE-2011-1071","severity":"low","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413","RHSA-2012:0125"],"bugzilla":"681054","bugzilla_description":"CVE-2011-1071 CVE-2011-1659 glibc: fnmatch() alloca()-based memory corruption flaw","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1071.json"},{"CVE":"CVE-2011-1659","severity":"low","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413","RHSA-2012:0125"],"bugzilla":"681054","bugzilla_description":"CVE-2011-1071 CVE-2011-1659 glibc: fnmatch() alloca()-based memory corruption flaw","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1659.json"},{"CVE":"CVE-2010-0296","severity":"low","public_date":"2010-05-25T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2012:0125"],"bugzilla":"559579","bugzilla_description":"CVE-2010-0296 glibc: Improper encoding of names with certain special character in utilities for writing to mtab table","cvss_score":4.3,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0296.json"},{"CVE":"CVE-2010-0830","severity":"low","public_date":"2010-05-25T00:00:00Z","advisories":["RHSA-2012:0125","RHSA-2012:0126"],"bugzilla":"599056","bugzilla_description":"CVE-2010-0830 glibc: ld.so d_tag signedness error in elf_get_dynamic_info","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0830.json"},{"CVE":"CVE-2010-0015","severity":"low","public_date":"2009-12-10T00:00:00Z","advisories":[],"bugzilla":"555573","bugzilla_description":"CVE-2010-0015 glibc NIS password hash disclosure","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0015.json"},{"CVE":"CVE-2009-3736","severity":"moderate","public_date":"2009-11-16T00:00:00Z","advisories":["RHSA-2009:1646","RHSA-2010:0039"],"bugzilla":"537941","bugzilla_description":"CVE-2009-3736 libtool: libltdl may load and execute code from a library in the current directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libtool-0:1.5.6-5.el4_8","gcc-0:4.1.2-46.el5_4.2","libtool-0:1.4.3-7","gcc-0:3.2.3-60","gcc-0:3.4.6-11.el4_8.1","libtool-0:1.5.22-7.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3736.json"},{"CVE":"CVE-2009-5064","severity":"low","public_date":"2009-10-26T00:00:00Z","advisories":["RHSA-2012:0125","RHSA-2012:0126","RHSA-2011:1526"],"bugzilla":"692393","bugzilla_description":"CVE-2009-5064 glibc: ldd unexpected code execution issue","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.47.el6","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5064.json"},{"CVE":"CVE-2009-5029","severity":"moderate","public_date":"2009-06-01T00:00:00Z","advisories":["RHSA-2012:0058","RHSA-2012:0125","RHSA-2012:0126"],"bugzilla":"761245","bugzilla_description":"CVE-2009-5029 glibc: __tzfile_read integer overflow to buffer overflow","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.12-1.47.el6_2.5","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5029.json"},{"CVE":"CVE-2006-7254","severity":"moderate","public_date":"2006-03-31T00:00:00Z","advisories":[],"bugzilla":"1698738","bugzilla_description":"CVE-2006-7254 glibc: Not closing unhadleable client sockets due to nscd daemon leads to DoS.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7254.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2005-2933","severity":"moderate","public_date":"2005-10-04T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2005:850","RHSA-2006:0501","RHSA-2006:0276","RHSA-2005:848"],"bugzilla":"1617767","bugzilla_description":"CVE-2005-2933 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-30.ent","imap-1:2002d-12","libc-client-0:2002e-14","php-0:4.3.9-3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2933.json"},{"CVE":"CVE-2004-0968","severity":"low","public_date":"2004-09-30T00:00:00Z","advisories":["RHSA-2005:261","RHSA-2004:586"],"bugzilla":"1617335","bugzilla_description":"CVE-2004-0968 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.3.2-95.30"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0968.json"},{"CVE":"CVE-2004-1453","severity":"low","public_date":"2004-08-17T00:00:00Z","advisories":["RHSA-2005:256","RHSA-2005:261"],"bugzilla":"1617412","bugzilla_description":"CVE-2004-1453 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.3.2-95.33"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1453.json"},{"CVE":"CVE-2003-0859","severity":"low","public_date":"2003-11-12T00:00:00Z","advisories":["RHSA-2003:334","RHSA-2003:325"],"bugzilla":"1617097","bugzilla_description":"CVE-2003-0859 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.3.2-95.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0859.json"},{"CVE":"CVE-1999-0199","severity":null,"public_date":"1999-11-09T00:00:00Z","advisories":[],"bugzilla":"1885775","bugzilla_description":"CVE-1999-0199 glibc: manual/search.texi lacks a statement about the unspecified tdelete return value upon deletion of a tree's root","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1053","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-1999-0199.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bcc-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bcc-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bcc-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bcc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bcc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bcc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bcel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bcel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bcel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bea-stax-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bea-stax-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bea-stax-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bea-stax_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bea-stax_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bea-stax_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-chroot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-chroot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-chroot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-dyndb-ldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-dyndb-ldap_security_api_results.json
new file mode 100644
index 0000000..724e4ab
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-dyndb-ldap_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3429","severity":"important","public_date":"2012-08-01T00:00:00Z","advisories":["RHSA-2012:1139"],"bugzilla":"842466","bugzilla_description":"CVE-2012-3429 bind-dyndb-ldap: named DoS via DNS query with $ in name","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-dyndb-ldap-0:1.1.0-0.9.b1.el6_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3429.json"},{"CVE":"CVE-2012-2134","severity":"important","public_date":"2012-04-24T00:00:00Z","advisories":["RHSA-2012:0683"],"bugzilla":"815846","bugzilla_description":"CVE-2012-2134 bind-dyndb-ldap: Bind DoS (named hang) by processing DNS query for zone served by bind-dyndb-ldap","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-dyndb-ldap-0:0.2.0-7.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2134.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-export-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-export-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-export-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-libs-lite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-libs-lite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-libs-lite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-license_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-license_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-license_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-pkcs11-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-pkcs11-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-pkcs11-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-pkcs11-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-pkcs11-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-pkcs11-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-pkcs11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-pkcs11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-pkcs11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind_security_api_results.json
new file mode 100644
index 0000000..59e1e94
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bind_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24750","severity":"important","public_date":"2020-09-18T00:00:00Z","advisories":["RHSA-2020:4173"],"bugzilla":"1882310","bugzilla_description":"CVE-2020-24750 jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-24616","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872707","bugzilla_description":"CVE-2020-24616 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24616.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8620","severity":"moderate","public_date":"2020-08-20T00:00:00Z","advisories":[],"bugzilla":"1869468","bugzilla_description":"CVE-2020-8620 bind: A specially crafted large TCP payload can trigger an assertion failure in tcpdns.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8620.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8621","severity":"moderate","public_date":"2020-08-20T00:00:00Z","advisories":[],"bugzilla":"1869471","bugzilla_description":"CVE-2020-8621 bind: Attempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8621.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8622","severity":"moderate","public_date":"2020-08-20T00:00:00Z","advisories":["RHSA-2020:4183"],"bugzilla":"1869473","bugzilla_description":"CVE-2020-8622 bind: truncated TSIG response can lead to an assertion failure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["bind-32:9.8.2-0.68.rc1.el6_10.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8622.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-8623","severity":"moderate","public_date":"2020-08-20T00:00:00Z","advisories":[],"bugzilla":"1869477","bugzilla_description":"CVE-2020-8623 bind: remotely triggerable assertion failure in pk11.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8623.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8624","severity":"moderate","public_date":"2020-08-20T00:00:00Z","advisories":[],"bugzilla":"1869480","bugzilla_description":"CVE-2020-8624 bind: incorrect enforcement of update-policy rules of type \"subdomain\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8624.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-8618","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1847242","bugzilla_description":"CVE-2020-8618 bind: A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8618.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-8619","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1847244","bugzilla_description":"CVE-2020-8619 bind: asterisk character in an empty non-terminal can cause an assertion failure in rbtdb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14195","severity":"important","public_date":"2020-06-14T00:00:00Z","advisories":["RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848958","bugzilla_description":"CVE-2020-14195 jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14195.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8616","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3379","RHSA-2020:2345","RHSA-2020:3378","RHSA-2020:2344","RHSA-2020:3433","RHSA-2020:3475","RHSA-2020:2383","RHSA-2020:3470","RHSA-2020:3272","RHSA-2020:3471","RHSA-2020:2338","RHSA-2020:2404"],"bugzilla":"1836118","bugzilla_description":"CVE-2020-8616 bind: BIND does not sufficiently limit the number of fetches performed when processing referrals","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["bind-32:9.8.2-0.30.rc1.el6_6.11","bind-32:9.9.4-50.el7_3.4","bind-32:9.9.4-74.el7_6.4","bind-32:9.11.4-26.P2.el8_1.3","bind-32:9.9.4-29.el7_2.9","bind-32:9.8.2-0.68.rc1.el6_10.7","bind-32:9.8.2-0.23.rc1.el6_5.9","bind-32:9.11.4-19.P2.el8_0","bind-32:9.11.4-16.P2.el7_8.6","bind-32:9.11.13-5.el8_2","bind-32:9.9.4-51.el7_4.4","bind-32:9.11.4-9.P2.el7_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8616.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2020-8617","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3379","RHSA-2020:2345","RHSA-2020:2893","RHSA-2020:3378","RHSA-2020:2344","RHSA-2020:3433","RHSA-2020:3475","RHSA-2020:2383","RHSA-2020:3470","RHSA-2020:3471","RHSA-2020:2338","RHSA-2020:2404"],"bugzilla":"1836124","bugzilla_description":"CVE-2020-8617 bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["bind-32:9.8.2-0.30.rc1.el6_6.11","bind-32:9.9.4-50.el7_3.4","bind-32:9.9.4-74.el7_6.4","bind-32:9.11.4-26.P2.el8_1.3","bind-32:9.9.4-29.el7_2.9","bind-32:9.8.2-0.68.rc1.el6_10.7","bind-32:9.8.2-0.23.rc1.el6_5.9","bind-32:9.11.4-19.P2.el8_0","bind-32:9.11.4-16.P2.el7_8.6","bind-32:9.11.13-5.el8_2","bind-32:9.9.4-51.el7_4.4","bind-32:9.11.4-9.P2.el7_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8617.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14060","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848960","bugzilla_description":"CVE-2020-14060 jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14060.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14062","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848962","bugzilla_description":"CVE-2020-14062 jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14062.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14061","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848966","bugzilla_description":"CVE-2020-14061 jackson-databind: serialization in weblogic/oracle-aqjms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14061.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11620","severity":"important","public_date":"2020-04-07T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:3192"],"bugzilla":"1826798","bugzilla_description":"CVE-2020-11620 jackson-databind: Serialization gadgets in commons-jelly:commons-jelly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11620.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11619","severity":"important","public_date":"2020-04-06T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1826805","bugzilla_description":"CVE-2020-11619 jackson-databind: Serialization gadgets in org.springframework:spring-aop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11113","severity":"important","public_date":"2020-03-28T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3817","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821315","bugzilla_description":"CVE-2020-11113 jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11113.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11112","severity":"important","public_date":"2020-03-25T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821311","bugzilla_description":"CVE-2020-11112 jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11112.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11111","severity":"important","public_date":"2020-03-24T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821304","bugzilla_description":"CVE-2020-11111 jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11111.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10968","severity":"important","public_date":"2020-03-22T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819208","bugzilla_description":"CVE-2020-10968 jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10673","severity":"important","public_date":"2020-03-18T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3585","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815470","bugzilla_description":"CVE-2020-10673 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10672","severity":"important","public_date":"2020-03-15T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815495","bugzilla_description":"CVE-2020-10672 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10969","severity":"important","public_date":"2020-03-03T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819212","bugzilla_description":"CVE-2020-10969 jackson-databind: Serialization gadgets in javax.swing.JEditorPane","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10969.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8840","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816330","bugzilla_description":"CVE-2020-8840 jackson-databind: Lacks certain xbean-reflect/JNDI blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9546","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816332","bugzilla_description":"CVE-2020-9546 jackson-databind: Serialization gadgets in shaded-hikari-config","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9546.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9547","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816337","bugzilla_description":"CVE-2020-9547 jackson-databind: Serialization gadgets in ibatis-sqlmap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9547.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9548","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816340","bugzilla_description":"CVE-2020-9548 jackson-databind: Serialization gadgets in anteros-core","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9548.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-25649","severity":"important","public_date":"2020-01-09T00:00:00Z","advisories":["RHSA-2020:4312"],"bugzilla":"1887664","bugzilla_description":"CVE-2020-25649 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25649.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20330","severity":"important","public_date":"2020-01-02T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:0939","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:0951","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1793154","bugzilla_description":"CVE-2019-20330 jackson-databind: lacks certain net.sf.ehcache blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20330.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-6477","severity":"moderate","public_date":"2019-11-20T00:00:00Z","advisories":["RHSA-2020:1845","RHSA-2020:1061"],"bugzilla":"1773617","bugzilla_description":"CVE-2019-6477 bind: TCP Pipelining doesn't limit TCP clients on a single connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["bind-32:9.11.4-16.P2.el7","bind-32:9.11.13-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-6475","severity":"moderate","public_date":"2019-10-16T00:00:00Z","advisories":[],"bugzilla":"1762914","bugzilla_description":"CVE-2019-6475 bind: A flaw in mirror zone validity checking can allow zone data to be spoofed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6475.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-6476","severity":"moderate","public_date":"2019-10-16T00:00:00Z","advisories":[],"bugzilla":"1762957","bugzilla_description":"CVE-2019-6476 bind: An error in QNAME minimization code can cause BIND to exit with an assertion failure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6476.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-17531","severity":"moderate","public_date":"2019-10-12T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2019:4192","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1775293","bugzilla_description":"CVE-2019-17531 jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.8.el7","pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17531.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-16942","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758187","bugzilla_description":"CVE-2019-16942 jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16943","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758191","bugzilla_description":"CVE-2019-16943 jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16943.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14893","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758182","bugzilla_description":"CVE-2019-14893 jackson-databind: Serialization gadgets in classes of the xalan package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14892","severity":"moderate","public_date":"2019-09-19T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758171","bugzilla_description":"CVE-2019-14892 jackson-databind: Serialization gadgets in classes of the commons-configuration package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14892.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-17267","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758167","bugzilla_description":"CVE-2019-17267 jackson-databind: Serialization gadgets in classes of the ehcache package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17267.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16335","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0729","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755831","bugzilla_description":"CVE-2019-16335 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16335.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14540","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755849","bugzilla_description":"CVE-2019-14540 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14540.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14439","severity":"moderate","public_date":"2019-07-30T00:00:00Z","advisories":["RHSA-2019:3200","RHSA-2020:0983"],"bugzilla":"1752962","bugzilla_description":"CVE-2019-14439 jackson-databind: Polymorphic typing issue related to logback/JNDI","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14439.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14379","severity":"important","public_date":"2019-07-23T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:2743","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2020:0727","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1737517","bugzilla_description":"CVE-2019-14379 jackson-databind: default typing mishandling leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","rh-maven35-jackson-databind-0:2.7.6-2.7.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-12384","severity":"important","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:1820","RHSA-2019:3200","RHSA-2019:2720","RHSA-2019:4352","RHSA-2019:3297","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1725807","bugzilla_description":"CVE-2019-12384 jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","pki-deps:10.6-8000020190807021343.f8e95b4e","rh-maven35-jackson-databind-0:2.7.6-2.6.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12384.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-6471","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:1714"],"bugzilla":"1721780","bugzilla_description":"CVE-2019-6471 bind: Race condition when discarding malformed packets can cause bind to exit with assertion failure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-32:9.11.4-17.P2.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6471.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-12814","severity":"moderate","public_date":"2019-06-04T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2938","RHSA-2019:2937","RHSA-2019:2804","RHSA-2019:2936"],"bugzilla":"1725795","bugzilla_description":"CVE-2019-12814 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-6469","severity":"moderate","public_date":"2019-05-30T00:00:00Z","advisories":[],"bugzilla":"1715352","bugzilla_description":"CVE-2019-6469 bind: an error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failure leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6469.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-12086","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2020:1454","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3044","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2020:3192","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1713468","bugzilla_description":"CVE-2019-12086 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-5743","severity":"important","public_date":"2019-04-24T00:00:00Z","advisories":["RHSA-2019:1145","RHSA-2019:2698","RHSA-2019:2977","RHSA-2019:1492","RHSA-2019:1294"],"bugzilla":"1702541","bugzilla_description":"CVE-2018-5743 bind: Limiting simultaneous TCP clients is ineffective","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-32:9.9.4-61.el7_5.2","bind-32:9.8.2-0.68.rc1.el6_10.3","bind-32:9.9.4-74.el7_6.1","bind-32:9.11.4-17.P2.el8_0","bind-32:9.9.4-51.el7_4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5743.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2019-6467","severity":"moderate","public_date":"2019-04-24T00:00:00Z","advisories":[],"bugzilla":"1702545","bugzilla_description":"CVE-2019-6467 bind: flaw in nxredirect can cause assertion failure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6467.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-6468","severity":"moderate","public_date":"2019-04-24T00:00:00Z","advisories":[],"bugzilla":"1702642","bugzilla_description":"CVE-2019-6468 bind: named can exit with an assertion failure if nxdomain-redirect is used.","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-5744","severity":"important","public_date":"2019-02-21T00:00:00Z","advisories":[],"bugzilla":"1679299","bugzilla_description":"CVE-2018-5744 bind: A specially crafted packet can cause named to leak memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5744.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5745","severity":"low","public_date":"2019-02-21T00:00:00Z","advisories":["RHSA-2019:3552","RHSA-2020:1061"],"bugzilla":"1679303","bugzilla_description":"CVE-2018-5745 bind: An assertion failure if a trust anchor rolls over to an unsupported key algorithm when using managed-keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["bind-32:9.11.4-26.P2.el8","bind-32:9.11.4-16.P2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-6465","severity":"low","public_date":"2019-02-21T00:00:00Z","advisories":["RHSA-2019:3552","RHSA-2020:1061"],"bugzilla":"1679304","bugzilla_description":"CVE-2019-6465 bind: Controls for zone transfers may not be properly applied to DLZs if the zones are writable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["bind-32:9.11.4-26.P2.el8","bind-32:9.11.4-16.P2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6465.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-5742","severity":"moderate","public_date":"2018-12-18T13:59:00Z","advisories":["RHSA-2019:0194"],"bugzilla":"1655844","bugzilla_description":"CVE-2018-5742 bind: Crash from assertion error when debug log level is 10 and log entries meet buffer boundary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["bind-32:9.9.4-73.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5742.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-19360","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666482","bugzilla_description":"CVE-2018-19360 jackson-databind: improper polymorphic deserialization in axis2-transport-jms class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19360.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19361","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666484","bugzilla_description":"CVE-2018-19361 jackson-databind: improper polymorphic deserialization in openjpa class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19361.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19362","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666489","bugzilla_description":"CVE-2018-19362 jackson-databind: improper polymorphic deserialization in jboss-common-core class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-1000873","severity":"moderate","public_date":"2018-10-24T00:00:00Z","advisories":[],"bugzilla":"1665601","bugzilla_description":"CVE-2018-1000873 jackson-modules-java8: DoS due to an Improper Input Validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000873.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-5741","severity":"moderate","public_date":"2018-09-20T00:00:00Z","advisories":["RHSA-2019:2057"],"bugzilla":"1631131","bugzilla_description":"CVE-2018-5741 bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["bind-32:9.11.4-9.P2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5741.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-5740","severity":"important","public_date":"2018-08-08T21:30:00Z","advisories":["RHSA-2018:2570","RHSA-2018:2571"],"bugzilla":"1613595","bugzilla_description":"CVE-2018-5740 bind: processing of certain records when \"deny-answer-aliases\" is in use may trigger an assert leading to a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["bind-32:9.9.4-61.el7_5.1","bind-32:9.8.2-0.68.rc1.el6_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14718","severity":"important","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666415","bugzilla_description":"CVE-2018-14718 jackson-databind: arbitrary code execution in slf4j-ext class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14718.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14719","severity":"important","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666418","bugzilla_description":"CVE-2018-14719 jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14719.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14720","severity":"moderate","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:4037","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:1140"],"bugzilla":"1666423","bugzilla_description":"CVE-2018-14720 jackson-databind: exfiltration/XXE in some JDK classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-611","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14720.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-14721","severity":"moderate","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:4037","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:1140"],"bugzilla":"1666428","bugzilla_description":"CVE-2018-14721 jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14721.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-5738","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":[],"bugzilla":"1589616","bugzilla_description":"CVE-2018-5738 bind: Improper handling of configuration allows all clients to perform recursive queries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-12023","severity":"important","public_date":"2018-06-08T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1671096","bugzilla_description":"CVE-2018-12023 jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-12022","severity":"important","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1671097","bugzilla_description":"CVE-2018-12022 jackson-databind: improper polymorphic deserialization of types from Jodd-db library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-5736","severity":"moderate","public_date":"2018-05-18T00:00:00Z","advisories":[],"bugzilla":"1578591","bugzilla_description":"CVE-2018-5736 bind: Multiple transfers of a zone in quick succession can cause an assertion failure in rbtdb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-5737","severity":"moderate","public_date":"2018-05-18T00:00:00Z","advisories":[],"bugzilla":"1578593","bugzilla_description":"CVE-2018-5737 bind: Interaction between NSEC aggresive negative caching and the serve-stale feature can cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-11307","severity":"important","public_date":"2018-05-10T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1677341","bugzilla_description":"CVE-2018-11307 jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11307.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-5734","severity":"important","public_date":"2018-02-28T00:00:00Z","advisories":[],"bugzilla":"1550602","bugzilla_description":"CVE-2018-5734 bind: A malformed request can trigger an assertion failure in badcache.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5734.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7489","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":["RHSA-2018:2938","RHSA-2019:3149","RHSA-2018:1448","RHSA-2018:1449","RHSA-2020:2562","RHSA-2018:1447","RHSA-2018:2939","RHSA-2018:2090","RHSA-2019:2858","RHSA-2018:1786","RHSA-2018:1451","RHSA-2018:2089","RHSA-2018:2088","RHSA-2018:1450"],"bugzilla":"1549276","bugzilla_description":"CVE-2018-7489 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-5735","severity":"important","public_date":"2018-02-19T00:00:00Z","advisories":[],"bugzilla":"1551511","bugzilla_description":"CVE-2018-5735 bind: Assertion failure in validator.c due to incorrect handling of DNSSEC validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000057","severity":"low","public_date":"2018-02-05T00:00:00Z","advisories":[],"bugzilla":"1542718","bugzilla_description":"CVE-2018-1000057 jenkins-plugin-credentials-binding: improper masking of the secret provided to the build in rare circumstances","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000057.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-5968","severity":"moderate","public_date":"2018-01-18T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2019:3149","RHSA-2018:1525","RHSA-2018:0478","RHSA-2018:0479","RHSA-2019:2858","RHSA-2018:0481"],"bugzilla":"1538332","bugzilla_description":"CVE-2018-5968 jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rhvm-appliance-0:4.2-20180504.0","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5968.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3145","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0487","RHSA-2018:0102","RHSA-2018:0488","RHSA-2018:0101"],"bugzilla":"1534812","bugzilla_description":"CVE-2017-3145 bind: Improper fetch cleanup sequencing in the resolver can cause named to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["bind-32:9.8.2-0.62.rc1.el6_9.5","bind-32:9.8.2-0.30.rc1.el6_6.10","bind-32:9.9.4-29.el7_2.8","bind-32:9.9.4-50.el7_3.3","bind-32:9.8.2-0.23.rc1.el6_5.8","bind-32:9.8.2-0.37.rc1.el6_7.12","bind-32:9.8.2-0.17.rc1.el6_4.13","bind-32:9.9.4-51.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3145.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-17485","severity":"important","public_date":"2017-12-12T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2018:1448","RHSA-2019:3892","RHSA-2019:1797","RHSA-2018:1449","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2018:0116","RHSA-2018:0480","RHSA-2018:2930","RHSA-2019:2858","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1528565","bugzilla_description":"CVE-2017-17485 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","rh-eclipse46-jackson-databind-0:2.6.3-2.6.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-15095","severity":"important","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:3149","RHSA-2017:3190","RHSA-2018:1448","RHSA-2019:3892","RHSA-2018:1449","RHSA-2018:0577","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2017:3189","RHSA-2018:0480","RHSA-2019:2858","RHSA-2018:0576","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1506612","bugzilla_description":"CVE-2017-15095 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","rh-eclipse47-jackson-databind-0:2.7.6-3.3.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","rh-eclipse46-jackson-databind-0:2.6.3-2.4.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-7525","severity":"important","public_date":"2017-07-14T00:00:00Z","advisories":["RHSA-2018:1449","RHSA-2017:3141","RHSA-2017:2477","RHSA-2017:1840","RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2637","RHSA-2017:2638","RHSA-2018:0294","RHSA-2019:3149","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:2547","RHSA-2017:3458","RHSA-2017:2546","RHSA-2017:1835","RHSA-2017:1834","RHSA-2017:1837","RHSA-2017:1836","RHSA-2019:0910","RHSA-2019:2858","RHSA-2017:1839","RHSA-2018:0342","RHSA-2018:1450"],"bugzilla":"1462702","bugzilla_description":"CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["devtoolset-4-jackson-databind-0:2.5.0-2.4.el6","openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-eclipse46-jackson-databind-0:2.6.3-2.3.el7","devtoolset-4-jackson-databind-0:2.5.0-2.4.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:20171102.0-1","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7525.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3142","severity":"moderate","public_date":"2017-06-29T00:00:00Z","advisories":["RHSA-2017:1679","RHSA-2017:1680"],"bugzilla":"1466189","bugzilla_description":"CVE-2017-3142 bind: An error in TSIG authentication can permit unauthorized zone transfers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["bind-32:9.8.2-0.62.rc1.el6_9.4","bind-32:9.9.4-50.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3142.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3143","severity":"important","public_date":"2017-06-29T00:00:00Z","advisories":["RHSA-2017:1679","RHSA-2017:1680"],"bugzilla":"1466193","bugzilla_description":"CVE-2017-3143 bind: An error in TSIG authentication can permit unauthorized dynamic updates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["bind-32:9.8.2-0.62.rc1.el6_9.4","bind-32:9.9.4-50.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3143.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-3140","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1461302","bugzilla_description":"CVE-2017-3140 bind: Error processing RPZ rules leads to endless loop while handling query","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3140.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-3141","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1461310","bugzilla_description":"CVE-2017-3141 bind: BIND installer on Windows uses an unquoted service path which allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3141.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2017-3139","severity":"important","public_date":"2017-05-08T00:00:00Z","advisories":["RHSA-2017:1582","RHSA-2017:1202"],"bugzilla":"1447743","bugzilla_description":"CVE-2017-3139 bind: assertion failure in DNSSEC validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-32:9.8.2-0.62.rc1.el6_9.2","bind-32:9.7.3-8.P3.el6_2.9","bind-32:9.8.2-0.37.rc1.el6_7.11","bind-32:9.8.2-0.23.rc1.el6_5.7","bind-32:9.8.2-0.17.rc1.el6_4.12","bind-32:9.8.2-0.30.rc1.el6_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3139.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8779","severity":"important","public_date":"2017-05-03T00:00:00Z","advisories":["RHSA-2017:1262","RHBA-2017:1497","RHSA-2017:1263","RHSA-2017:1395","RHSA-2017:1268","RHSA-2017:1267"],"bugzilla":"1448124","bugzilla_description":"CVE-2017-8779 rpcbind, libtirpc, libntirpc: Memory leak when failing to parse XDR strings or bytearrays","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rpcbind-0:0.2.0-13.el6_9","libntirpc-0:1.4.3-4.el7rhgs","libtirpc-0:0.2.4-0.8.el7_3","libntirpc-0:1.4.3-2.el7","libntirpc-0:1.4.3-4.el6rhs","libtirpc-0:0.2.1-13.el6_9","rpcbind-0:0.2.0-38.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3136","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":["RHSA-2017:1105","RHSA-2017:1095"],"bugzilla":"1441125","bugzilla_description":"CVE-2017-3136 bind: Incorrect error handling causes assertion failure when using DNS64 with \"break-dnssec yes;\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["bind-32:9.8.2-0.62.rc1.el6_9.1","bind-32:9.9.4-38.el7_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3137","severity":"important","public_date":"2017-04-12T00:00:00Z","advisories":["RHSA-2017:1105","RHSA-2017:1095","RHSA-2017:1583","RHSA-2017:1582"],"bugzilla":"1441133","bugzilla_description":"CVE-2017-3137 bind: Processing a response containing CNAME or DNAME with unusual order can crash resolver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["bind-32:9.9.4-29.el7_2.6","bind-32:9.8.2-0.62.rc1.el6_9.1","bind-32:9.7.3-8.P3.el6_2.9","bind-32:9.8.2-0.37.rc1.el6_7.11","bind-32:9.8.2-0.23.rc1.el6_5.7","bind-32:9.9.4-38.el7_3.3","bind-32:9.8.2-0.17.rc1.el6_4.12","bind-32:9.8.2-0.30.rc1.el6_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3138","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441137","bugzilla_description":"CVE-2017-3138 bind: REQUIRE assertion failure when null command string on control channel is received","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3138.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3135","severity":"moderate","public_date":"2017-02-08T00:00:00Z","advisories":["RHSA-2017:0276"],"bugzilla":"1420193","bugzilla_description":"CVE-2017-3135 bind: Assertion failure when using DNS64 and RPZ Can Lead to Crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.9.4-38.el7_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3135.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9131","severity":"important","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:0062","RHSA-2017:1583"],"bugzilla":"1411348","bugzilla_description":"CVE-2016-9131 bind: assertion failure while processing response to an ANY query","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-32:9.9.4-29.el7_2.6","bind-32:9.9.4-38.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9131.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9147","severity":"important","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:0063","RHSA-2017:0062","RHSA-2017:1583","RHSA-2017:0064","RHSA-2017:1582"],"bugzilla":"1411367","bugzilla_description":"CVE-2016-9147 bind: assertion failure while handling a query response containing inconsistent DNSSEC information","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind97-32:9.7.0-21.P2.el5_11.10","bind-32:9.9.4-29.el7_2.6","bind-32:9.8.2-0.47.rc1.el6_8.4","bind-30:9.3.6-25.P1.el5_11.12","bind-32:9.7.3-8.P3.el6_2.9","bind-32:9.8.2-0.37.rc1.el6_7.11","bind-32:9.8.2-0.23.rc1.el6_5.7","bind-32:9.9.4-38.el7_3.1","bind-32:9.8.2-0.17.rc1.el6_4.12","bind-32:9.8.2-0.30.rc1.el6_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9147.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9444","severity":"important","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:0062","RHSA-2017:1583"],"bugzilla":"1411377","bugzilla_description":"CVE-2016-9444 bind: assertion failure while handling an unusually-formed DS record response","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-32:9.9.4-29.el7_2.6","bind-32:9.9.4-38.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9444.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9778","severity":"important","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1411387","bugzilla_description":"CVE-2016-9778 bind: assertion failure while handling certain queries using the nxdomain-redirect feature","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-8864","severity":"important","public_date":"2016-11-01T00:00:00Z","advisories":["RHSA-2016:2871","RHSA-2016:2141","RHSA-2016:2142","RHSA-2016:2615","RHSA-2017:1583"],"bugzilla":"1389652","bugzilla_description":"CVE-2016-8864 bind: assertion failure while handling responses containing a DNAME answer","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.8.2-0.47.rc1.el6_8.3","bind-32:9.8.2-0.17.rc1.el6_4.10","bind-32:9.9.4-29.el7_2.6","bind-32:9.8.2-0.30.rc1.el6_6.7","bind-32:9.8.2-0.23.rc1.el6_5.5","bind-30:9.3.6-25.P1.el5_11.11","bind97-32:9.7.0-21.P2.el5_11.9","bind-32:9.7.3-8.P3.el6_2.6","bind-32:9.8.2-0.37.rc1.el6_7.9","bind-32:9.9.4-38.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8864.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-2848","severity":"important","public_date":"2016-10-20T00:00:00Z","advisories":["RHSA-2016:2099","RHSA-2016:2093","RHSA-2016:2094"],"bugzilla":"1385450","bugzilla_description":"CVE-2016-2848 bind: assertion failure triggered by a packet with malformed options","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["bind-32:9.8.2-0.30.rc1.el6_6.6","bind-32:9.8.2-0.47.rc1.el6_8.2","bind-32:9.8.2-0.37.rc1.el6_7.8","bind-30:9.3.6-25.P1.el5_11.10","bind-32:9.8.2-0.23.rc1.el6_5.4","bind97-32:9.7.0-21.P2.el5_11.8","bind-32:9.7.3-8.P3.el6_2.5","bind-32:9.8.2-0.17.rc1.el6_4.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2848.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-2776","severity":"important","public_date":"2016-09-27T00:00:00Z","advisories":["RHSA-2016:2099","RHSA-2016:1944","RHSA-2016:1945"],"bugzilla":"1378380","bugzilla_description":"CVE-2016-2776 bind: assertion failure in buffer.c while building responses to a specifically constructed request","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["bind-30:9.3.6-25.P1.el5_11.9","bind-32:9.8.2-0.47.rc1.el6_8.1","bind-32:9.8.2-0.30.rc1.el6_6.6","bind-32:9.8.2-0.37.rc1.el6_7.8","bind-32:9.8.2-0.23.rc1.el6_5.4","bind97-32:9.7.0-21.P2.el5_11.7","bind-32:9.7.3-8.P3.el6_2.5","bind-32:9.9.4-29.el7_2.4","bind-32:9.8.2-0.17.rc1.el6_4.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-2775","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHBA-2017:1767","RHBA-2017:0651","RHSA-2017:2533"],"bugzilla":"1357803","bugzilla_description":"CVE-2016-2775 bind: Too long query name causes segmentation fault in lwresd","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["bind-32:9.9.4-50.el7","bind-32:9.9.4-29.el7_2.7","bind-32:9.9.4-50.el7_3.2","bind-32:9.8.2-0.62.rc1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2775.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6170","severity":"low","public_date":"2016-07-04T00:00:00Z","advisories":[],"bugzilla":"1353563","bugzilla_description":"CVE-2016-6170 bind: Improper restriction of zone size limit","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6170.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-1285","severity":"important","public_date":"2016-03-09T00:00:00Z","advisories":["RHSA-2016:0562","RHSA-2016:0458","RHSA-2016:0601","RHSA-2016:0459"],"bugzilla":"1315674","bugzilla_description":"CVE-2016-1285 bind: malformed packet sent to rndc can trigger assertion failure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["bind-32:9.8.2-0.37.rc1.el6_7.7","bind-30:9.3.6-25.P1.el5_11.8","bind-32:9.8.2-0.30.rc1.el6_6.5","bind97-32:9.7.0-21.P2.el5_11.6","bind-32:9.8.2-0.23.rc1.el6_5.3","bind-32:9.7.3-8.P3.el6_2.4","bind-32:9.8.2-0.17.rc1.el6_4.8","bind-32:9.9.4-29.el7_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1285.json"},{"CVE":"CVE-2016-1286","severity":"important","public_date":"2016-03-09T00:00:00Z","advisories":["RHSA-2016:0562","RHSA-2016:0458","RHSA-2016:0601","RHSA-2016:0459"],"bugzilla":"1315680","bugzilla_description":"CVE-2016-1286 bind: malformed signature records for DNAME records can trigger assertion failure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["bind-32:9.8.2-0.37.rc1.el6_7.7","bind-30:9.3.6-25.P1.el5_11.8","bind-32:9.8.2-0.30.rc1.el6_6.5","bind97-32:9.7.0-21.P2.el5_11.6","bind-32:9.8.2-0.23.rc1.el6_5.3","bind-32:9.7.3-8.P3.el6_2.4","bind-32:9.8.2-0.17.rc1.el6_4.8","bind-32:9.9.4-29.el7_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1286.json"},{"CVE":"CVE-2016-2088","severity":"important","public_date":"2016-03-09T00:00:00Z","advisories":[],"bugzilla":"1315690","bugzilla_description":"CVE-2016-2088 bind: malformed packet containing multiple cookie options can trigger assertion failure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2088.json"},{"CVE":"CVE-2015-8704","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0073","RHSA-2016:0074"],"bugzilla":"1299364","bugzilla_description":"CVE-2015-8704 bind: specific APL data could trigger an INSIST in apl_42.c","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["bind-32:9.8.2-0.37.rc1.el6_7.6","bind97-32:9.7.0-21.P2.el5_11.5","bind-32:9.9.4-29.el7_2.2","bind-30:9.3.6-25.P1.el5_11.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8704.json"},{"CVE":"CVE-2015-8705","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1299367","bugzilla_description":"CVE-2015-8705 bind: crash when converting OPT resource records and ECS options to text format","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8705.json"},{"CVE":"CVE-2015-8000","severity":"important","public_date":"2015-12-15T00:00:00Z","advisories":["RHSA-2016:0078","RHSA-2016:0079","RHSA-2015:2655","RHSA-2015:2656","RHSA-2015:2658"],"bugzilla":"1291176","bugzilla_description":"CVE-2015-8000 bind: responses with a malformed class attribute can trigger an assertion failure in db.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["bind-32:9.8.2-0.37.rc1.el6_7.5","bind-32:9.8.2-0.30.rc1.el6_6.4","bind-32:9.8.2-0.23.rc1.el6_5.2","bind97-32:9.7.0-21.P2.el5_11.4","bind-32:9.8.2-0.17.rc1.el6_4.7","bind-32:9.9.4-29.el7_2.1","bind-30:9.3.6-25.P1.el5_11.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8000.json"},{"CVE":"CVE-2015-8461","severity":"moderate","public_date":"2015-12-15T00:00:00Z","advisories":[],"bugzilla":"1291186","bugzilla_description":"CVE-2015-8461 bind: race condition when handling socket errors can lead to an assertion failure in resolver.c","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8461.json"},{"CVE":"CVE-2015-5986","severity":"moderate","public_date":"2015-09-02T00:00:00Z","advisories":[],"bugzilla":"1259085","bugzilla_description":"CVE-2015-5986 Bind: fromwire_openpgpkey() incorrect boundary check Denial of Service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5986.json"},{"CVE":"CVE-2015-5722","severity":"important","public_date":"2015-09-02T00:00:00Z","advisories":["RHSA-2015:1705","RHSA-2015:1706","RHSA-2016:0078","RHSA-2015:1707","RHSA-2016:0079"],"bugzilla":"1259087","bugzilla_description":"CVE-2015-5722 bind: malformed DNSSEC key failed assertion denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["bind-32:9.8.2-0.30.rc1.el6_6.4","bind-32:9.9.4-18.ael7b_1.5","bind97-32:9.7.0-21.P2.el5_11.3","bind-32:9.8.2-0.23.rc1.el6_5.2","bind-32:9.8.2-0.37.rc1.el6_7.4","bind-32:9.8.2-0.17.rc1.el6_4.7","bind-30:9.3.6-25.P1.el5_11.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5722.json"},{"CVE":"CVE-2015-7236","severity":"moderate","public_date":"2015-08-06T00:00:00Z","advisories":["RHSA-2016:0005"],"bugzilla":"1264345","bugzilla_description":"CVE-2015-7236 rpcbind: Use-after-free vulnerability in PMAP_CALLIT","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["rpcbind-0:0.2.0-33.el7_2","rpcbind-0:0.2.0-11.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7236.json"},{"CVE":"CVE-2015-5477","severity":"important","public_date":"2015-07-28T00:00:00Z","advisories":["RHSA-2015:1515","RHSA-2015:1514","RHSA-2016:0078","RHSA-2015:1513","RHSA-2016:0079"],"bugzilla":"1247361","bugzilla_description":"CVE-2015-5477 bind: TKEY query handling flaw leading to denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-456->CWE-617","affected_packages":["bind97-32:9.7.0-21.P2.el5_11.2","bind-32:9.8.2-0.30.rc1.el6_6.4","bind-32:9.8.2-0.37.rc1.el6_7.2","bind-32:9.8.2-0.23.rc1.el6_5.2","bind-30:9.3.6-25.P1.el5_11.3","bind-32:9.8.2-0.17.rc1.el6_4.7","bind-32:9.9.4-18.el7_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5477.json"},{"CVE":"CVE-2015-4620","severity":"important","public_date":"2015-07-07T00:00:00Z","advisories":["RHSA-2015:1443","RHSA-2015:1471"],"bugzilla":"1237258","bugzilla_description":"CVE-2015-4620 bind: abort DoS caused by uninitialized value use in isselfsigned()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-456->CWE-617","affected_packages":["bind-32:9.8.2-0.37.rc1.el6_7.1","bind-32:9.9.4-18.el7_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4620.json"},{"CVE":"CVE-2015-1349","severity":"moderate","public_date":"2015-02-20T00:00:00Z","advisories":["RHSA-2015:0672"],"bugzilla":"1193820","bugzilla_description":"CVE-2015-1349 bind: issue in trust anchor management can cause named to crash","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":["bind-32:9.8.2-0.30.rc1.el6_6.2","bind-32:9.9.4-18.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1349.json"},{"CVE":"CVE-2014-8500","severity":"important","public_date":"2014-12-08T00:00:00Z","advisories":["RHSA-2014:1984","RHSA-2016:0078","RHSA-2014:1985"],"bugzilla":"1171912","bugzilla_description":"CVE-2014-8500 bind: delegation handling denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["bind97-32:9.7.0-21.P2.el5_11.1","bind-32:9.8.2-0.23.rc1.el6_5.2","bind-32:9.8.2-0.30.rc1.el6_6.1","bind-32:9.9.4-14.el7_0.1","bind-30:9.3.6-25.P1.el5_11.2","bind-32:9.8.2-0.17.rc1.el6_4.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8500.json"},{"CVE":"CVE-2014-8680","severity":"moderate","public_date":"2014-12-08T00:00:00Z","advisories":[],"bugzilla":"1171919","bugzilla_description":"CVE-2014-8680 bind: flaws in GeoIP leading to a denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8680.json"},{"CVE":"CVE-2012-3541","severity":"moderate","public_date":"2014-07-08T00:00:00Z","advisories":[],"bugzilla":"852282","bugzilla_description":"CVE-2012-3541 rpcbind: -h fails to control access to rpcbind","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3541.json"},{"CVE":"CVE-2014-3859","severity":"important","public_date":"2014-06-11T00:00:00Z","advisories":[],"bugzilla":"1108544","bugzilla_description":"CVE-2014-3859 bind: assertion failure during EDNS option processing","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3859.json"},{"CVE":"CVE-2014-3214","severity":"important","public_date":"2014-05-08T00:00:00Z","advisories":[],"bugzilla":"1096016","bugzilla_description":"CVE-2014-3214 bind: assertion failure when using prefetch","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3214.json"},{"CVE":"CVE-2014-0591","severity":"moderate","public_date":"2014-01-13T00:00:00Z","advisories":["RHSA-2014:1244","RHSA-2014:0043"],"bugzilla":"1051717","bugzilla_description":"CVE-2014-0591 bind: named crash when handling malformed NSEC3-signed zones","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.8.2-0.23.rc1.el6_5.1","bind97-32:9.7.0-21.P2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0591.json"},{"CVE":"CVE-2013-6230","severity":"moderate","public_date":"2013-11-06T00:00:00Z","advisories":[],"bugzilla":"1027689","bugzilla_description":"CVE-2013-6230 bind: localnets ACL bypass caused by WinSock API bug","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6230.json"},{"CVE":"CVE-2013-5661","severity":"low","public_date":"2013-09-09T00:00:00Z","advisories":[],"bugzilla":"1038750","bugzilla_description":"CVE-2013-5661 DNS response rate limiting can simplify cache poisoning attacks","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5661.json"},{"CVE":"CVE-2013-4854","severity":"important","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1115","RHSA-2013:1114"],"bugzilla":"988999","bugzilla_description":"CVE-2013-4854 bind: named crash with an assertion failure on parsing malformed rdata","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.8.2-0.17.rc1.el6_4.5","bind97-32:9.7.0-17.P2.el5_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4854.json"},{"CVE":"CVE-2013-3919","severity":"important","public_date":"2013-06-04T00:00:00Z","advisories":[],"bugzilla":"970905","bugzilla_description":"CVE-2013-3919 bind: Querying a recursive resolver for a malformed zone causes named to crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3919.json"},{"CVE":"CVE-2013-2266","severity":"important","public_date":"2013-03-26T00:00:00Z","advisories":["RHSA-2013:0690","RHSA-2013:0689"],"bugzilla":"928027","bugzilla_description":"CVE-2013-2266 bind: libdns regular expressions excessive resource consumption DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.8.2-0.17.rc1.el6_4.4","bind97-32:9.7.0-17.P2.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2266.json"},{"CVE":"CVE-2012-5689","severity":"moderate","public_date":"2013-01-24T00:00:00Z","advisories":["RHSA-2013:0550"],"bugzilla":"903417","bugzilla_description":"CVE-2012-5689 bind: denial of service when processing queries and with both DNS64 and RPZ enabled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.8.2-0.17.rc1.el6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5689.json"},{"CVE":"CVE-2012-5688","severity":"important","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2012:1549"],"bugzilla":"883533","bugzilla_description":"CVE-2012-5688 bind: DoS on servers using DNS64","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.8.2-0.10.rc1.el6_3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5688.json"},{"CVE":"CVE-2012-5166","severity":"important","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1364","RHSA-2012:1363","RHSA-2012:1365"],"bugzilla":"864273","bugzilla_description":"CVE-2012-5166 bind: Specially crafted DNS data can cause a lockup in named","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-30:9.3.6-20.P1.el5_8.5","bind97-32:9.7.0-10.P2.el5_8.4","bind-32:9.8.2-0.10.rc1.el6_3.5","bind-20:9.2.4-41.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5166.json"},{"CVE":"CVE-2012-4244","severity":"important","public_date":"2012-09-12T00:00:00Z","advisories":["RHSA-2012:1267","RHSA-2012:1365","RHSA-2012:1266","RHSA-2012:1268"],"bugzilla":"856754","bugzilla_description":"CVE-2012-4244 bind: specially crafted resource record causes named to exit","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind97-32:9.7.0-10.P2.el5_8.3","bind-30:9.3.6-20.P1.el5_8.4","bind-20:9.2.4-41.el4","bind-32:9.8.2-0.10.rc1.el6_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4244.json"},{"CVE":"CVE-2012-3429","severity":"important","public_date":"2012-08-01T00:00:00Z","advisories":["RHSA-2012:1139"],"bugzilla":"842466","bugzilla_description":"CVE-2012-3429 bind-dyndb-ldap: named DoS via DNS query with $ in name","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-dyndb-ldap-0:1.1.0-0.9.b1.el6_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3429.json"},{"CVE":"CVE-2012-3868","severity":"important","public_date":"2012-07-24T00:00:00Z","advisories":[],"bugzilla":"842895","bugzilla_description":"CVE-2012-3868 bind: high TCP query load can trigger memory leak","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3868.json"},{"CVE":"CVE-2012-3817","severity":"important","public_date":"2012-07-24T00:00:00Z","advisories":["RHSA-2012:1122","RHSA-2012:1123"],"bugzilla":"842897","bugzilla_description":"CVE-2012-3817 bind: heavy DNSSEC validation load can cause assertion failure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind97-32:9.7.0-10.P2.el5_8.2","bind-30:9.3.6-20.P1.el5_8.2","bind-32:9.8.2-0.10.rc1.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3817.json"},{"CVE":"CVE-2012-1667","severity":"important","public_date":"2012-06-04T00:00:00Z","advisories":["RHSA-2012:0716","RHSA-2012:0717","RHSA-2012:1110"],"bugzilla":"828078","bugzilla_description":"CVE-2012-1667 bind: handling of zero length rdata can cause named to terminate unexpectedly","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["bind97-32:9.7.0-10.P2.el5_8.1","bind-30:9.3.6-20.P1.el5_8.1","bind-32:9.7.3-8.P3.el6_2.3","bind-20:9.2.4-39.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1667.json"},{"CVE":"CVE-2012-2134","severity":"important","public_date":"2012-04-24T00:00:00Z","advisories":["RHSA-2012:0683"],"bugzilla":"815846","bugzilla_description":"CVE-2012-2134 bind-dyndb-ldap: Bind DoS (named hang) by processing DNS query for zone served by bind-dyndb-ldap","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-dyndb-ldap-0:0.2.0-7.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2134.json"},{"CVE":"CVE-2012-1033","severity":"low","public_date":"2012-02-07T00:00:00Z","advisories":["RHSA-2012:0716","RHSA-2012:0717"],"bugzilla":"788650","bugzilla_description":"CVE-2012-1033 bind: deleted domain name resolving flaw","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bind97-32:9.7.0-10.P2.el5_8.1","bind-30:9.3.6-20.P1.el5_8.1","bind-32:9.7.3-8.P3.el6_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1033.json"},{"CVE":"CVE-2011-4313","severity":"important","public_date":"2011-11-16T00:00:00Z","advisories":["RHSA-2011:1496","RHSA-2011:1458","RHSA-2011:1459"],"bugzilla":"754398","bugzilla_description":"CVE-2011-4313 bind: Remote denial of service against recursive servers via logging negative cache entry","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind97-32:9.7.0-6.P2.el5_7.4","bind-30:9.3.6-16.P1.el5_7.1","bind-32:9.7.3-2.el6_1.P3.3","bind-20:9.2.4-38.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4313.json"},{"CVE":"CVE-2011-2464","severity":"important","public_date":"2011-07-05T00:00:00Z","advisories":["RHSA-2011:0926"],"bugzilla":"718966","bugzilla_description":"CVE-2011-2464 bind: Specially constructed packet will cause named to exit","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.7.3-2.el6_1.P3.2","bind97-32:9.7.0-6.P2.el5_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2464.json"},{"CVE":"CVE-2011-2465","severity":"important","public_date":"2011-07-05T00:00:00Z","advisories":[],"bugzilla":"718971","bugzilla_description":"CVE-2011-2465 bind: Remote Crash with Certain RPZ Configurations","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2465.json"},{"CVE":"CVE-2011-1910","severity":"important","public_date":"2011-05-26T00:00:00Z","advisories":["RHSA-2011:0845"],"bugzilla":"708301","bugzilla_description":"CVE-2011-1910 bind: Large RRSIG RRsets and Negative Caching can crash named","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.7.3-2.el6_1.P1.1","bind97-32:9.7.0-6.P2.el5_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1910.json"},{"CVE":"CVE-2011-1907","severity":"important","public_date":"2011-05-05T00:00:00Z","advisories":[],"bugzilla":"702701","bugzilla_description":"CVE-2011-1907 bind: RRSIG queries can trigger server crash when using Response Policy Zones (RPZ)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1907.json"},{"CVE":"CVE-2011-0414","severity":"moderate","public_date":"2011-02-22T00:00:00Z","advisories":[],"bugzilla":"679496","bugzilla_description":"CVE-2011-0414 bind: named lockup with IXFR or DDNS update and a high query rate","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0414.json"},{"CVE":"CVE-2010-3613","severity":"important","public_date":"2010-12-01T00:00:00Z","advisories":["RHSA-2010:0976","RHSA-2010:0975","RHSA-2010:1000"],"bugzilla":"658974","bugzilla_description":"CVE-2010-3613 bind: failure to clear existing RRSIG records when a NO DATA is negatively cached could DoS named","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-30:9.3.6-4.P1.el5_5.3","bind-20:9.2.4-30.el4_8.6","bind-32:9.7.0-5.P2.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3613.json"},{"CVE":"CVE-2010-3614","severity":"low","public_date":"2010-12-01T00:00:00Z","advisories":["RHSA-2010:0976","RHSA-2010:0975"],"bugzilla":"658977","bugzilla_description":"CVE-2010-3614 bind: key algorithm rollover may mark secure answers as insecure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bind-30:9.3.6-4.P1.el5_5.3","bind-32:9.7.0-5.P2.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3614.json"},{"CVE":"CVE-2010-0218","severity":null,"public_date":"2010-09-28T00:00:00Z","advisories":[],"bugzilla":"640696","bugzilla_description":"CVE-2010-0218 Bind: Unitended availability of cache data.","cvss_score":null,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:N/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0218.json"},{"CVE":"CVE-2010-3762","severity":"moderate","public_date":"2010-09-28T00:00:00Z","advisories":["RHSA-2010:0976"],"bugzilla":"640730","bugzilla_description":"CVE-2010-3762 Bind: DoS (assertion failure) via a DNS query with bad signatures","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-30:9.3.6-4.P1.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3762.json"},{"CVE":"CVE-2010-0213","severity":"moderate","public_date":"2010-07-15T00:00:00Z","advisories":[],"bugzilla":"616706","bugzilla_description":"CVE-2010-0213 BIND: DoS (infinite loop of RRSIGs queries to authoritative servers) via certain RRSIG query","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0213.json"},{"CVE":"CVE-2010-0097","severity":"moderate","public_date":"2010-01-19T00:00:00Z","advisories":["RHSA-2010:0062"],"bugzilla":"554851","bugzilla_description":"CVE-2010-0097 BIND DNSSEC NSEC/NSEC3 validation code could cause bogus NXDOMAIN responses","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bind-30:9.3.6-4.P1.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0097.json"},{"CVE":"CVE-2010-0290","severity":"moderate","public_date":"2010-01-19T00:00:00Z","advisories":["RHSA-2010:0062"],"bugzilla":"557121","bugzilla_description":"CVE-2010-0290 BIND upstream fix for CVE-2009-4022 is incomplete","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bind-30:9.3.6-4.P1.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0290.json"},{"CVE":"CVE-2010-0382","severity":"moderate","public_date":"2010-01-19T00:00:00Z","advisories":["RHSA-2010:0062"],"bugzilla":"557983","bugzilla_description":"CVE-2010-0382 bind: out-of-bailiwick data vulnerability due to regression while fixing CVE-2009-4022","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bind-30:9.3.6-4.P1.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0382.json"},{"CVE":"CVE-2009-4022","severity":"moderate","public_date":"2009-11-23T00:00:00Z","advisories":["RHSA-2009:1620"],"bugzilla":"538744","bugzilla_description":"CVE-2009-4022 bind: cache poisoning using not validated DNSSEC responses","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bind-30:9.3.6-4.P1.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4022.json"},{"CVE":"CVE-2009-0696","severity":"important","public_date":"2009-07-28T00:00:00Z","advisories":["RHSA-2009:1180","RHSA-2009:1181","RHSA-2009:1179"],"bugzilla":"514292","bugzilla_description":"CVE-2009-0696 bind: DoS (assertion failure) via nsupdate packets","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-20:9.2.4-25.el3","bind-30:9.3.4-10.P1.el5_3.3","bind-20:9.2.4-30.el4_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0696.json"},{"CVE":"CVE-2009-0025","severity":"moderate","public_date":"2009-01-07T00:00:00Z","advisories":["RHSA-2009:0020"],"bugzilla":"478984","bugzilla_description":"CVE-2009-0025 bind: DSA_do_verify() returns check issue","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bind-0:9.2.1-11.el2","bind-20:9.2.4-30.el4_7.1","bind-30:9.3.4-6.0.3.P1.el5_2","bind-20:9.2.4-23.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0025.json"},{"CVE":"CVE-2008-1447","severity":"important","public_date":"2008-07-08T18:00:00Z","advisories":["RHSA-2008:0533","RHSA-2008:0789"],"bugzilla":"449345","bugzilla_description":"CVE-2008-1447 bind: implement source UDP port randomization (CERT VU#800113)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-0:9.2.1-10.el2","dnsmasq-0:2.45-1.el5_2.1","bind-20:9.2.4-22.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1447.json"},{"CVE":"CVE-2008-0122","severity":"low","public_date":"2008-01-14T00:00:00Z","advisories":["RHSA-2008:0300"],"bugzilla":"429149","bugzilla_description":"CVE-2008-0122 libbind off-by-one buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["bind-30:9.3.4-6.P1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0122.json"},{"CVE":"CVE-2007-6283","severity":"moderate","public_date":"2007-12-13T00:00:00Z","advisories":["RHSA-2008:0300"],"bugzilla":"419421","bugzilla_description":"CVE-2007-6283 bind: /etc/rndc.key has 644 permissions by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-30:9.3.4-6.P1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6283.json"},{"CVE":"CVE-2007-2926","severity":"moderate","public_date":"2007-07-23T00:00:00Z","advisories":["RHSA-2007:0740"],"bugzilla":"248851","bugzilla_description":"CVE-2007-2926 bind cryptographically weak query ids","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-0:9.2.1-9.el2","bind-20:9.2.4-27.0.1.el4","bind-20:9.2.4-21.el3","bind-30:9.3.3-9.0.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2926.json"},{"CVE":"CVE-2007-0494","severity":"moderate","public_date":"2007-01-25T00:00:00Z","advisories":["RHSA-2007:0044","RHSA-2007:0057"],"bugzilla":"225268","bugzilla_description":"CVE-2007-0494 BIND dnssec denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-0:9.2.1-8.EL2","bind-20:9.2.4-20.EL3","bind-30:9.3.3-8.el5","bind-20:9.2.4-24.EL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0494.json"},{"CVE":"CVE-2007-0493","severity":"important","public_date":"2007-01-25T00:00:00Z","advisories":["RHSA-2007:0057"],"bugzilla":"230003","bugzilla_description":"CVE-2007-0493 bind use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["bind-30:9.3.3-8.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0493.json"},{"CVE":"CVE-2006-0987","severity":"moderate","public_date":"2006-03-03T00:00:00Z","advisories":[],"bugzilla":"873618","bugzilla_description":"CVE-2006-0987 bind: DDoS (traffic amplification) via DNS queries with spoofed IP addresses due to additional information delegation to arbitrary IP addresses","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0987.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/binutils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/binutils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/binutils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/binutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/binutils_security_api_results.json
new file mode 100644
index 0000000..a2b1e1f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/binutils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17450","severity":"low","public_date":"2019-10-08T00:00:00Z","advisories":[],"bugzilla":"1771677","bugzilla_description":"CVE-2019-17450 binutils: denial of service via crafted ELF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-17451","severity":"low","public_date":"2019-10-07T00:00:00Z","advisories":["RHSA-2020:1797"],"bugzilla":"1771668","bugzilla_description":"CVE-2019-17451 binutils: integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["binutils-0:2.30-73.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17451.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-10086","severity":"important","public_date":"2019-08-15T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2321","RHSA-2020:3587","RHSA-2020:2333","RHSA-2020:2740","RHSA-2020:1454","RHSA-2020:0057","RHSA-2019:4317","RHSA-2020:0194","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:0899","RHSA-2020:0811","RHSA-2020:1308","RHSA-2020:0951","RHBA-2020:0496","RHSA-2020:0805","RHSA-2020:0804","RHSA-2020:2619","RHSA-2020:0806","RHSA-2020:3192"],"bugzilla":"1767483","bugzilla_description":"CVE-2019-10086 apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-java-common-apache-commons-beanutils-0:1.8.3-14.14.el6","rh-maven35-apache-commons-beanutils-0:1.9.3-2.3.el7","rh-java-common-apache-commons-beanutils-0:1.8.3-14.15.el7","apache-commons-beanutils-0:1.8.3-15.el7_7","candlepin-0:2.5.22-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-14250","severity":"low","public_date":"2019-08-09T00:00:00Z","advisories":[],"bugzilla":"1739490","bugzilla_description":"CVE-2019-14250 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14250.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-14444","severity":"low","public_date":"2019-07-25T00:00:00Z","advisories":[],"bugzilla":"1740469","bugzilla_description":"CVE-2019-14444 binutils: integer overflow in function apply_relocation in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14444.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-1010204","severity":"low","public_date":"2019-07-24T00:00:00Z","advisories":["RHSA-2020:1797"],"bugzilla":"1735604","bugzilla_description":"CVE-2019-1010204 binutils: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read in gold/fileread.cc and elfcpp/elfcpp_file.h leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-20|CWE-125)","affected_packages":["binutils-0:2.30-73.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010204.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-12972","severity":"low","public_date":"2019-06-17T00:00:00Z","advisories":[],"bugzilla":"1831873","bugzilla_description":"CVE-2019-12972 binutils: out-of-bounds read in setup_group in bfd/elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12972.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-9077","severity":"moderate","public_date":"2019-02-20T00:00:00Z","advisories":[],"bugzilla":"1680675","bugzilla_description":"CVE-2019-9077 binutils: heap-based buffer overflow in function process_mips_specific in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9077.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9072","severity":null,"public_date":"2019-02-19T00:00:00Z","advisories":[],"bugzilla":"1680660","bugzilla_description":"CVE-2019-9072 binutils: excessive memory allocation in function setup_group in elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9072.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-9073","severity":null,"public_date":"2019-02-19T00:00:00Z","advisories":[],"bugzilla":"1680662","bugzilla_description":"CVE-2019-9073 binutils: excessive memory allocation in function _bfd_elf_slurp_version_tables in elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9073.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-9074","severity":"moderate","public_date":"2019-02-19T00:00:00Z","advisories":[],"bugzilla":"1680665","bugzilla_description":"CVE-2019-9074 binutils: out-of-bound read in function bfd_getl32 in libbfd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9074.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9075","severity":"moderate","public_date":"2019-02-19T00:00:00Z","advisories":[],"bugzilla":"1680669","bugzilla_description":"CVE-2019-9075 binutils: heap-based buffer overflow in function _bfd_archive_64_bit_slurp_armap in archive64.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9075.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9076","severity":null,"public_date":"2019-02-19T00:00:00Z","advisories":[],"bugzilla":"1680672","bugzilla_description":"CVE-2019-9076 binutils: excessive memory allocation in function elf_read_notes in elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9076.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-9070","severity":"low","public_date":"2019-02-18T00:00:00Z","advisories":[],"bugzilla":"1680651","bugzilla_description":"CVE-2019-9070 binutils: heap-based buffer over-read in function d_expression_1 in cp-demangle.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9070.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2019-9071","severity":"low","public_date":"2019-02-18T00:00:00Z","advisories":[],"bugzilla":"1680657","bugzilla_description":"CVE-2019-9071 binutils: stack consumption in function d_count_templates_scopes in cp-demangle.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9071.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20623","severity":"moderate","public_date":"2018-12-31T00:00:00Z","advisories":[],"bugzilla":"1664700","bugzilla_description":"CVE-2018-20623 binutils: Use-after-free in the error function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20623.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20651","severity":"low","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1664703","bugzilla_description":"CVE-2018-20651 binutils: NULL pointer dereference in elf_link_add_object_symbols function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20651.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20712","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1668269","bugzilla_description":"CVE-2018-20712 libiberty: heap-based buffer over-read in d_expression_1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20712.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-20673","severity":"moderate","public_date":"2018-12-27T00:00:00Z","advisories":[],"bugzilla":"1664709","bugzilla_description":"CVE-2018-20673 libiberty: Integer overflow in demangle_template() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20673.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20671","severity":"moderate","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1664712","bugzilla_description":"CVE-2018-20671 binutils: Integer overflow in load_specific_debug_section function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20671.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20657","severity":"low","public_date":"2018-12-18T00:00:00Z","advisories":["RHSA-2019:3352"],"bugzilla":"1664708","bugzilla_description":"CVE-2018-20657 libiberty: Memory leak in demangle_template function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["gdb-0:8.2-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000876","severity":"moderate","public_date":"2018-12-16T00:00:00Z","advisories":["RHSA-2019:2075"],"bugzilla":"1664699","bugzilla_description":"CVE-2018-1000876 binutils: integer overflow leads to heap-based buffer overflow in objdump","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["binutils-0:2.27-41.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000876.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-20002","severity":"low","public_date":"2018-12-07T00:00:00Z","advisories":[],"bugzilla":"1661534","bugzilla_description":"CVE-2018-20002 binutils: memory leak in _bfd_generic_read_minisymbols function in syms.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20002.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19931","severity":"low","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1658947","bugzilla_description":"CVE-2018-19931 binutils: Heap-based buffer overflow in bfd_elf32_swap_phdr_in function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19931.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19932","severity":"low","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1658949","bugzilla_description":"CVE-2018-19932 binutils: Integer overflow due to the IS_CONTAINED_BY_LMA macro resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19932.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18700","severity":"low","public_date":"2018-10-22T00:00:00Z","advisories":[],"bugzilla":"1646535","bugzilla_description":"CVE-2018-18700 binutils: Recursive Stack Overflow within function d_name, d_encoding, and d_local_name in cp-demangle.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18700.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-18701","severity":"low","public_date":"2018-10-21T00:00:00Z","advisories":[],"bugzilla":"1646529","bugzilla_description":"CVE-2018-18701 binutils: infinite recursion in next_is_type_qual and cplus_demangle_type functions in cp-demangle.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18701.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-18605","severity":"low","public_date":"2018-10-21T00:00:00Z","advisories":[],"bugzilla":"1647403","bugzilla_description":"CVE-2018-18605 binutils: heap-based buffer over-read in sec_merge_hash_lookup in merge.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18605.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18606","severity":"low","public_date":"2018-10-21T00:00:00Z","advisories":[],"bugzilla":"1647415","bugzilla_description":"CVE-2018-18606 binutils: NULL pointer dereference in _bfd_add_merge_section in merge_strings function in merge.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18606.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18607","severity":"low","public_date":"2018-10-21T00:00:00Z","advisories":[],"bugzilla":"1647421","bugzilla_description":"CVE-2018-18607 binutils: NULL pointer dereference in elf_link_input_bfd in elflink.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18607.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18484","severity":"low","public_date":"2018-10-17T00:00:00Z","advisories":[],"bugzilla":"1645958","bugzilla_description":"CVE-2018-18484 binutils: Stack exhaustion in cp-demangle.c allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18484.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-18309","severity":"low","public_date":"2018-10-13T00:00:00Z","advisories":[],"bugzilla":"1639911","bugzilla_description":"CVE-2018-18309 binutils: invalid memory address dereference in read_reloc in reloc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18309.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17794","severity":"low","public_date":"2018-10-02T00:00:00Z","advisories":[],"bugzilla":"1635082","bugzilla_description":"CVE-2018-17794 binutils: NULL pointer dereference in libiberty/cplus-dem.c:work_stuff_copy_to_from() via crafted input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17794.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17358","severity":"low","public_date":"2018-09-19T00:00:00Z","advisories":[],"bugzilla":"1632908","bugzilla_description":"CVE-2018-17358 binutils: invalid memory access in _bfd_stab_section_find_nearest_line in syms.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17358.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17359","severity":null,"public_date":"2018-09-19T00:00:00Z","advisories":[],"bugzilla":"1632914","bugzilla_description":"CVE-2018-17359 binutils: invalid memory access in bfd_zalloc in opncls.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17359.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-17360","severity":"low","public_date":"2018-09-19T00:00:00Z","advisories":[],"bugzilla":"1632921","bugzilla_description":"CVE-2018-17360 binutils: heap-based buffer over-read in bfd_getl32 in libbfd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17360.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17985","severity":"low","public_date":"2018-09-17T00:00:00Z","advisories":[],"bugzilla":"1652723","bugzilla_description":"CVE-2018-17985 binutils: Stack consumption problem caused by the cplus_demangle_type","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17985.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-14038","severity":null,"public_date":"2018-07-12T00:00:00Z","advisories":[],"bugzilla":"1686781","bugzilla_description":"CVE-2018-14038 libbfd: remote dos via crafted file in function aout_32_swap_std_reloc_out in aoutx.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14038.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-13033","severity":"low","public_date":"2018-07-01T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1597436","bugzilla_description":"CVE-2018-13033 binutils: Uncontrolled Resource Consumption in execution of nm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13033.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-10534","severity":"low","public_date":"2018-04-24T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1574696","bugzilla_description":"CVE-2018-10534 binutils: out of bounds memory write in peXXigen.c files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10534.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-10535","severity":"low","public_date":"2018-04-24T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1574697","bugzilla_description":"CVE-2018-10535 binutils: NULL pointer dereference in elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-10372","severity":"low","public_date":"2018-04-14T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1573356","bugzilla_description":"CVE-2018-10372 binutils: Heap-base buffer over-read in dwarf.c:process_cu_tu_index() allows for denial of service via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10372.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10373","severity":"low","public_date":"2018-04-14T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1573365","bugzilla_description":"CVE-2018-10373 binutils: NULL pointer dereference in dwarf2.c:concat_filename() allows for denial of service via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10373.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12641","severity":"low","public_date":"2018-04-13T00:00:00Z","advisories":["RHSA-2019:2075"],"bugzilla":"1594410","bugzilla_description":"CVE-2018-12641 binutils: Stack Exhaustion in the demangling functions provided by libiberty","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["binutils-0:2.27-41.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12641.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12697","severity":"low","public_date":"2018-04-11T00:00:00Z","advisories":["RHSA-2019:2075"],"bugzilla":"1595417","bugzilla_description":"CVE-2018-12697 binutils: NULL pointer dereference in work_stuff_copy_to_from in cplus-dem.c.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["binutils-0:2.27-41.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12697.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12698","severity":"low","public_date":"2018-04-11T00:00:00Z","advisories":[],"bugzilla":"1595419","bugzilla_description":"CVE-2018-12698 binutils: excessive memory consumption in demangle_template in cplus-dem.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12698.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12699","severity":"low","public_date":"2018-04-11T00:00:00Z","advisories":[],"bugzilla":"1595427","bugzilla_description":"CVE-2018-12699 binutils: heap-based buffer overflow in finish_stab in stabs.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12699.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12700","severity":"low","public_date":"2018-04-11T00:00:00Z","advisories":[],"bugzilla":"1595437","bugzilla_description":"CVE-2018-12700 binutils: Stack Exhaustion in debug_write_type in debug.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12700.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12934","severity":"low","public_date":"2018-04-11T00:00:00Z","advisories":[],"bugzilla":"1597853","bugzilla_description":"CVE-2018-12934 binutils: Uncontrolled Resource Consumption in remember_Ktype in cplus-dem.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12934.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-9996","severity":null,"public_date":"2018-04-09T00:00:00Z","advisories":[],"bugzilla":"1566788","bugzilla_description":"CVE-2018-9996 binutils: Stack-overflow in libiberty/cplus-dem.c causes crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9996.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9138","severity":"low","public_date":"2018-03-27T00:00:00Z","advisories":[],"bugzilla":"1564291","bugzilla_description":"CVE-2018-9138 binutils: Stack Exhaustion in the the C++ demangling functions provided by libiberty","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9138.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7643","severity":"low","public_date":"2018-03-01T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1553119","bugzilla_description":"CVE-2018-7643 binutils: Integer overflow in the display_debug_ranges function resulting in crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7643.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7568","severity":"low","public_date":"2018-02-26T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1551771","bugzilla_description":"CVE-2018-7568 binutils: integer overflow via an ELF file with corrupt dwarf1 debug information in libbfd library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7568.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7569","severity":"low","public_date":"2018-02-26T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1551778","bugzilla_description":"CVE-2018-7569 binutils: integer underflow or overflow via an ELF file with a corrupt DWARF FORM block in libbfd library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7569.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7570","severity":"low","public_date":"2018-02-26T00:00:00Z","advisories":[],"bugzilla":"1551785","bugzilla_description":"CVE-2018-7570 binutils: NULL pointer dereference the assign_file_positions_for_non_load_sections function in libbfd library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7570.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7642","severity":"low","public_date":"2018-02-24T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1553115","bugzilla_description":"CVE-2018-7642 binutils: NULL pointer dereference in swap_std_reloc_in function in aoutx.h resulting in crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7642.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8945","severity":"low","public_date":"2018-02-07T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1560827","bugzilla_description":"CVE-2018-8945 binutils: Crash in elf.c:bfd_section_from_shdr() with crafted executable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8945.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6759","severity":"low","public_date":"2018-02-06T00:00:00Z","advisories":[],"bugzilla":"1543244","bugzilla_description":"CVE-2018-6759 binutils: Unchecked strnlen in opncls.c:bfd_get_debug_link_info_1() can allow lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6759.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-6872","severity":"low","public_date":"2018-02-05T00:00:00Z","advisories":[],"bugzilla":"1543969","bugzilla_description":"CVE-2018-6872 binutils: out of bounds read in elf_parse_notes function in elf.c file in libbfd library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6872.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6543","severity":"moderate","public_date":"2018-02-01T00:00:00Z","advisories":[],"bugzilla":"1542275","bugzilla_description":"CVE-2018-6543 binutils:  integer overflow in load_specific_debug_section function in objdump.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-6323","severity":"low","public_date":"2018-01-25T00:00:00Z","advisories":[],"bugzilla":"1539886","bugzilla_description":"CVE-2018-6323 binutils: Integer overflow in elf_object_p function in elfcode.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6323.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7208","severity":"low","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1546622","bugzilla_description":"CVE-2018-7208 binutils: Improper bounds check in coffgen.c:coff_pointerize_aux() allows for denial of service when parsing a crafted COFF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7208.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17126","severity":"low","public_date":"2017-11-28T00:00:00Z","advisories":[],"bugzilla":"1524498","bugzilla_description":"CVE-2017-17126 binutils: Invalid memory access in the load_debug_section function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17121","severity":"low","public_date":"2017-11-28T00:00:00Z","advisories":[],"bugzilla":"1524501","bugzilla_description":"CVE-2017-17121 binutils: Memory access violation via a crafted COFF binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17121.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17122","severity":"low","public_date":"2017-11-28T00:00:00Z","advisories":[],"bugzilla":"1524505","bugzilla_description":"CVE-2017-17122 binutils: Excessive memory allocation in the dump_relocs_in_section function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17122.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17123","severity":"low","public_date":"2017-11-28T00:00:00Z","advisories":[],"bugzilla":"1524509","bugzilla_description":"CVE-2017-17123 binutils: NULL pointer dereference in the coff_slurp_reloc_table function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17123.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17124","severity":"low","public_date":"2017-11-28T00:00:00Z","advisories":[],"bugzilla":"1524510","bugzilla_description":"CVE-2017-17124 binutils: Heap buffer overflow in the _bfd_coff_read_string_table function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17124.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17125","severity":"low","public_date":"2017-11-15T00:00:00Z","advisories":[],"bugzilla":"1524511","bugzilla_description":"CVE-2017-17125 binutils: Buffer over-read in the _bfd_elf_get_symbol_version_string function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17080","severity":"low","public_date":"2017-11-11T00:00:00Z","advisories":[],"bugzilla":"1524478","bugzilla_description":"CVE-2017-17080 binutils: Heap-based buffer over-read in bfd_getl32","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17080.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16828","severity":"low","public_date":"2017-11-02T00:00:00Z","advisories":[],"bugzilla":"1518591","bugzilla_description":"CVE-2017-16828 binutils: Integer overflow in the display_debug_frames function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16828.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16830","severity":"low","public_date":"2017-11-02T00:00:00Z","advisories":[],"bugzilla":"1518594","bugzilla_description":"CVE-2017-16830 binutils: Segmentation fault in the print_gnu_property_note function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16830.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16831","severity":"low","public_date":"2017-11-02T00:00:00Z","advisories":[],"bugzilla":"1518595","bugzilla_description":"CVE-2017-16831 binutils: Integer overflow in coffgen.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16831.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16826","severity":"low","public_date":"2017-10-31T00:00:00Z","advisories":[],"bugzilla":"1518589","bugzilla_description":"CVE-2017-16826 binutils: Invalid memory access in the coff_slurp_line_table function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16826.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16832","severity":"low","public_date":"2017-10-31T00:00:00Z","advisories":[],"bugzilla":"1518596","bugzilla_description":"CVE-2017-16832 binutils: Segmentation fault in the pe_bfd_read_buildid function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16832.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15996","severity":"low","public_date":"2017-10-27T00:00:00Z","advisories":[],"bugzilla":"1515742","bugzilla_description":"CVE-2017-15996 binutils: Excessive memory allocation in elfcomm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15996.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15938","severity":"low","public_date":"2017-10-24T00:00:00Z","advisories":[],"bugzilla":"1515721","bugzilla_description":"CVE-2017-15938 binutils: Invalid memory read in find_abstract_instance_name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15938.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16827","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":[],"bugzilla":"1518590","bugzilla_description":"CVE-2017-16827 binutils: Invalid free in the aout_get_external_symbols function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16827.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16829","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":[],"bugzilla":"1518592","bugzilla_description":"CVE-2017-16829 binutils: Out-of-bounds read in the _bfd_elf_parse_gnu_properties function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16829.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14934","severity":"low","public_date":"2017-09-27T00:00:00Z","advisories":[],"bugzilla":"1500332","bugzilla_description":"CVE-2017-14934 binutils: Infinite loop in process_debug_info","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14934.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14933","severity":"low","public_date":"2017-09-26T00:00:00Z","advisories":[],"bugzilla":"1500331","bugzilla_description":"CVE-2017-14933 binutils: Infinite loop in read_formatted_entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14933.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15225","severity":"low","public_date":"2017-09-26T00:00:00Z","advisories":[],"bugzilla":"1500679","bugzilla_description":"CVE-2017-15225 binutils: Memory leak in _bfd_dwarf2_cleanup_debug_info","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15225.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14932","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1500330","bugzilla_description":"CVE-2017-14932 binutils: Infinite loop in the decode_line_info","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14932.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15020","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1500372","bugzilla_description":"CVE-2017-15020 binutils: Heap-based buffer overflow in parse_die","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15020.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15023","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1500374","bugzilla_description":"CVE-2017-15023 binutils: NULL pointer dereference in read_formatted_entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15023.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15022","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1500376","bugzilla_description":"CVE-2017-15022 binutils: NULL pointer dereference in dwarf2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15022.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15939","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1510338","bugzilla_description":"CVE-2017-15939 binutils: NULL pointer dereference in the concat_filename","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15939.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15021","severity":"low","public_date":"2017-09-24T00:00:00Z","advisories":[],"bugzilla":"1500377","bugzilla_description":"CVE-2017-15021 binutils: Heap-based buffer over-read in bfd_get_debug_link_info_1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15021.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14930","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500327","bugzilla_description":"CVE-2017-14930 binutils: Memory leak in decode_line_info","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14930.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14729","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1500233","bugzilla_description":"CVE-2017-14729 binutils: Heap buffer overflow in the *_get_synthetic_symtab functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14729.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15025","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1500375","bugzilla_description":"CVE-2017-15025 binutils: Divide-by-zero in decode_line_info","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15025.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15024","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1500378","bugzilla_description":"CVE-2017-15024 binutils: Infinite recursion in find_abstract_instance_name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15024.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14938","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1500339","bugzilla_description":"CVE-2017-14938 binutils: Excessive memory allocation in _bfd_elf_slurp_version_tables","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14938.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14939","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1500340","bugzilla_description":"CVE-2017-14939 binutils: Heap-based buffer over-read in the decode_line_info","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14939.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14940","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1500341","bugzilla_description":"CVE-2017-14940 binutils: NULL pointer dereference in the scan_unit_for_symbols","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14940.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14974","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1500342","bugzilla_description":"CVE-2017-14974 binutils: NULL pointer dereference in the *_get_synthetic_symtab functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14974.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14745","severity":"low","public_date":"2017-09-18T00:00:00Z","advisories":[],"bugzilla":"1500245","bugzilla_description":"CVE-2017-14745 binutils: Integer overflow in the *_get_synthetic_symtab functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14745.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14529","severity":"low","public_date":"2017-09-17T00:00:00Z","advisories":[],"bugzilla":"1499309","bugzilla_description":"CVE-2017-14529 binutils: heap-based buffer over-read in bfd_getl16 function in peXXigen.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14529.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14128","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":[],"bugzilla":"1489061","bugzilla_description":"CVE-2017-14128 binutils: Heap-based buffer over-read in the decode_line_info function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14128.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14130","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":[],"bugzilla":"1489067","bugzilla_description":"CVE-2017-14130 binutils: Heap-based buffer over-read in the _bfd_elf_parse_attributes function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14129","severity":"low","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1489062","bugzilla_description":"CVE-2017-14129 binutils: Heap-based buffer over-read in the read_section function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14129.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13757","severity":"low","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1487760","bugzilla_description":"CVE-2017-13757 binutils: heap-based buffer over-read in elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13757.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14333","severity":"low","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1492129","bugzilla_description":"CVE-2017-14333 binutils: Insuficient input validation in process_version_sections function in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14333.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13716","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1487302","bugzilla_description":"CVE-2017-13716 binutils: Memory leak with the C++ symbol demangler routine in libiberty","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13716.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12967","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1484526","bugzilla_description":"CVE-2017-12967 binutils: Stack-based buffer over-read in getsym function in tekhex.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12967.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13710","severity":"low","public_date":"2017-08-14T00:00:00Z","advisories":[],"bugzilla":"1487294","bugzilla_description":"CVE-2017-13710 binutils: NULL pointer dereference in the setup_group function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13710.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12799","severity":"low","public_date":"2017-08-10T00:00:00Z","advisories":[],"bugzilla":"1480342","bugzilla_description":"CVE-2017-12799 binutils: Heap-based 1 byte buffer over-write in elf_read_notes function in bfd/elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12799.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12459","severity":"moderate","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1483583","bugzilla_description":"CVE-2017-12459 binutils: out of bounds heap write in bfd_mach_o_read_symtab_strtab function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12459.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-12449","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1483594","bugzilla_description":"CVE-2017-12449 binutils: out of bounds heap read in _bfd_vms_save_sized_string function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12449.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12455","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1483599","bugzilla_description":"CVE-2017-12455 binutils: out of bounds heap read in evax_bfd_print_emh function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12455.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12457","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1483601","bugzilla_description":"CVE-2017-12457 binutils: NULL pointer dereference in bfd_make_section_with_flags function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12457.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12458","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1483602","bugzilla_description":"CVE-2017-12458 binutils: out of bounds heap read in nlm_swap_auxiliary_headers_in function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12458.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12450","severity":"moderate","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1483582","bugzilla_description":"CVE-2017-12450 binutils: out of bounds heap write in alpha_vms_object_p function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-12452","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1483596","bugzilla_description":"CVE-2017-12452 binutils: out of bounds heap read in bfd_mach_o_i386_canonicalize_one_reloc function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12452.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12453","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1483597","bugzilla_description":"CVE-2017-12453 binutils: out of bounds heap read in __bfd_vms_slurp_eeom function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12453.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12454","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1483598","bugzilla_description":"CVE-2017-12454 binutils: Arbitrary memory read in _bfd_vms_slurp_egs function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12454.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12456","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1483600","bugzilla_description":"CVE-2017-12456 binutils: out of bounds heap read in read_symbol_stabs_debugging_inf function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12448","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1483581","bugzilla_description":"CVE-2017-12448 binutils: heap use after free in bfd_cache_close function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-12451","severity":"low","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1483595","bugzilla_description":"CVE-2017-12451 binutils: out of bounds stack read in _bfd_xcoff_read_ar_hdr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12451.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9744","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469591","bugzilla_description":"CVE-2017-9744 binutils: Address violation in sh_elf_set_mach_from_flags function when disassembling a corrupt SH binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9744.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9745","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469603","bugzilla_description":"CVE-2017-9745 binutils: Heap buffer over-read in _bfd_vms_slurp_etir function when handling VMS alpha binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9745.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9746","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469608","bugzilla_description":"CVE-2017-9746 binutils: Heap buffer over-read in disassemble_bytes function when disassembling a corrupt binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9746.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9747","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469611","bugzilla_description":"CVE-2017-9747 binutils: Stack-based buffer over-read in ieee_archive_p function while disassembling corrupt IEEE binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9747.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9748","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469616","bugzilla_description":"CVE-2017-9748 binutils: Stack-based buffer over-read in ieee_object_p function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9748.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9749","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469619","bugzilla_description":"CVE-2017-9749 binutils: Global buffer over-read in *regs* macros when disassembling corrupt bfin binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9749.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9750","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469635","bugzilla_description":"CVE-2017-9750 binutils: Global buffer over-read in opcodes/rx-decode.opc when disassembling a corrupt RX binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9750.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9751","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469639","bugzilla_description":"CVE-2017-9751 binutils: Stack-based buffer over-read in opcodes/rl78-decode.opc when disassembling a corrupt RL78 binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9751.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9752","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469643","bugzilla_description":"CVE-2017-9752 binutils: Heap buffer over-read in f_bfd_vms_get_value function when processing a corrupt Alpha VMA binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9752.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9753","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469646","bugzilla_description":"CVE-2017-9753 binutils: Address violation in versados_mkobject function when disassembling a corrupt versados binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9753.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9754","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469649","bugzilla_description":"CVE-2017-9754 binutils: Stack-based buffer over-read in process_otr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9754.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9755","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469657","bugzilla_description":"CVE-2017-9755 binutils: Global buffer over-read in opcodes/i386-dis.c while checking invalid registers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9756","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469663","bugzilla_description":"CVE-2017-9756 binutils: Address violation in aarch64_ext_ldst_reglist function when disassembling corrupt aarch64 binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9756.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9955","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469748","bugzilla_description":"CVE-2017-9955 binutils: heap buffer over-read in get_build_id function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9955.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9954","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469752","bugzilla_description":"CVE-2017-9954 binutils: stack-based buffer over-read in getvalue function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9954.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9742","severity":"low","public_date":"2017-06-19T00:00:00Z","advisories":[],"bugzilla":"1469284","bugzilla_description":"CVE-2017-9742 binutils: Global buffer over-read in print_insn_score16 function while disassembling corrupt score binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9742.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9743","severity":"low","public_date":"2017-06-18T00:00:00Z","advisories":[],"bugzilla":"1469520","bugzilla_description":"CVE-2017-9743 binutils: Global buffer over-read in print_insn_score32 function while disassembling corrupt score binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9743.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9038","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1452167","bugzilla_description":"CVE-2017-9038 binutils: Heap-buffer overflow in the byte_get_little_endian","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9038.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9039","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1452168","bugzilla_description":"CVE-2017-9039 binutils: Memory consumption via many program headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9039.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9040","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1452169","bugzilla_description":"CVE-2017-9040 binutils: NULL pointer dereference in the process_mips_specific_function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9040.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9041","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1452171","bugzilla_description":"CVE-2017-9041 binutils: Heap buffer overflow in the process_mips_specific function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9041.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9042","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1452173","bugzilla_description":"CVE-2017-9042 binutils: Invalid variable type in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9042.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9043","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1452175","bugzilla_description":"CVE-2017-9043 binutils: Shift exponent too large for type unsigned long in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9043.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9044","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1452176","bugzilla_description":"CVE-2017-9044 binutils: Out-of-bounds read in the print_symbol_for_build_attribute function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9044.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8421","severity":"low","public_date":"2017-04-27T00:00:00Z","advisories":[],"bugzilla":"1449555","bugzilla_description":"CVE-2017-8421 binutils: Memory exhaustion in objdump via a crafted PE file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8421.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8392","severity":"low","public_date":"2017-04-22T00:00:00Z","advisories":[],"bugzilla":"1449540","bugzilla_description":"CVE-2017-8392 binutils: NULL pointer dereference in the _bfd_dwarf2_find_nearest_line function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8392.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8393","severity":"low","public_date":"2017-04-22T00:00:00Z","advisories":[],"bugzilla":"1449542","bugzilla_description":"CVE-2017-8393 binutils: Out-of-bounds read due to wrong assumption for objcopy and strip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8393.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8394","severity":"low","public_date":"2017-04-22T00:00:00Z","advisories":[],"bugzilla":"1449546","bugzilla_description":"CVE-2017-8394 binutils: NULL pointer dereference in the _bfd_elf_large_com_section","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8394.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8395","severity":"low","public_date":"2017-04-22T00:00:00Z","advisories":[],"bugzilla":"1449548","bugzilla_description":"CVE-2017-8395 binutils: Out-of-bounds write in the _bfd_generic_get_section_contents function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8395.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8396","severity":"low","public_date":"2017-04-22T00:00:00Z","advisories":[],"bugzilla":"1449550","bugzilla_description":"CVE-2017-8396 binutils: Out-of-bounds read in the existing reloc offset range tests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8396.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8397","severity":"low","public_date":"2017-04-22T00:00:00Z","advisories":[],"bugzilla":"1449552","bugzilla_description":"CVE-2017-8397 binutils: Out-of-bounds read and write while processing binary containing reloc(s) with negative addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8397.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8398","severity":"low","public_date":"2017-04-22T00:00:00Z","advisories":[],"bugzilla":"1449553","bugzilla_description":"CVE-2017-8398 binutils: Out-of-bounds read while dumping the debug information from a corrupt binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8398.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7614","severity":"low","public_date":"2017-04-05T00:00:00Z","advisories":[],"bugzilla":"1440837","bugzilla_description":"CVE-2017-7614 binutils: NULL pointer dereference in bfd_elf_final_link function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7614.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7210","severity":"low","public_date":"2017-02-14T00:00:00Z","advisories":[],"bugzilla":"1435634","bugzilla_description":"CVE-2017-7210 binutils: Heap-based buffer over-reads in objdump","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7210.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6969","severity":"low","public_date":"2017-02-14T00:00:00Z","advisories":[],"bugzilla":"1435648","bugzilla_description":"CVE-2017-6969 binutils: Heap-based buffer over-read in readelf when processing corrupt RL78 binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6969.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7209","severity":"low","public_date":"2017-02-13T00:00:00Z","advisories":[],"bugzilla":"1435632","bugzilla_description":"CVE-2017-7209 binutils: Null pointer dereference in dump_section_as_bytes function in readelf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6965","severity":"moderate","public_date":"2017-02-13T00:00:00Z","advisories":[],"bugzilla":"1435640","bugzilla_description":"CVE-2017-6965 binutils: Heap-based buffer overflow in target_specific_reloc_handling in readelf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6965.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-6966","severity":"moderate","public_date":"2017-02-13T00:00:00Z","advisories":[],"bugzilla":"1435646","bugzilla_description":"CVE-2017-6966 binutils: Use-after-free in target_specific_reloc_handling in readelf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6966.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-18483","severity":"low","public_date":"2017-01-17T00:00:00Z","advisories":[],"bugzilla":"1645957","bugzilla_description":"CVE-2018-18483 binutils: Integer overflow in cplus-dem.c:get_count() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18483.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-7304","severity":"low","public_date":"2016-12-06T00:00:00Z","advisories":[],"bugzilla":"1440833","bugzilla_description":"CVE-2017-7304 binutils: Out-of-bounds read in copy_special_section_fields function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7304.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7301","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1440829","bugzilla_description":"CVE-2017-7301 binutils: Off-by-one error in aout_link_add_symbols function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7301.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7302","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1440830","bugzilla_description":"CVE-2017-7302 binutils: Out-of-bounds read in wap_std_reloc_out function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7302.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7303","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1440832","bugzilla_description":"CVE-2017-7303 binutils: Out-of-bounds read in find_link function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7303.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7227","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1435303","bugzilla_description":"CVE-2017-7227 binutils: Heap-based buffer overflow in ld due to missing null termination","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-170","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7227.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7299","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1440826","bugzilla_description":"CVE-2017-7299 binutils: Out-of-bounds read in bfd_elf_final_link function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7299.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7300","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1440828","bugzilla_description":"CVE-2017-7300 binutils: Heap-buffer overflow in aout_link_add_symbols function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7300.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7223","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":[],"bugzilla":"1435244","bugzilla_description":"CVE-2017-7223 binutils: Global buffer overflow when attempting to unget EOF character","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7223.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7224","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":[],"bugzilla":"1435247","bugzilla_description":"CVE-2017-7224 binutils: Invalid write in find_nearest_line function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7224.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7225","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":[],"bugzilla":"1435287","bugzilla_description":"CVE-2017-7225 binutils: Null pointer dereference and invalid write in find_nearest_line function in addr2line","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7225.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7226","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":[],"bugzilla":"1435300","bugzilla_description":"CVE-2017-7226 binutils: Heap-based buffer over-read in pe_ILF_object_p function in libbfd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-6131","severity":null,"public_date":"2016-06-29T00:00:00Z","advisories":[],"bugzilla":"1352068","bugzilla_description":"CVE-2016-6131 gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-4492","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333377","bugzilla_description":"CVE-2016-4492 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4493","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333383","bugzilla_description":"CVE-2016-4493 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4493.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4491","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1333371","bugzilla_description":"CVE-2016-4491 gcc: Stack overflow due to infinite recursion in d_print_comp","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2016-4489","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333336","bugzilla_description":"CVE-2016-4489 gcc: Invalid write due to integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4490","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333366","bugzilla_description":"CVE-2016-4490 gcc: Write access violation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4487","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333330","bugzilla_description":"CVE-2016-4487 gcc: Invalid write due to a use-after-free to array btypevec","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4488","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333332","bugzilla_description":"CVE-2016-4488 gcc: Invalid write due to a use-after-free to array ktypevec","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-2226","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1333322","bugzilla_description":"CVE-2016-2226 gcc: Exploitable buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8538","severity":"low","public_date":"2015-12-07T00:00:00Z","advisories":[],"bugzilla":"1291299","bugzilla_description":"CVE-2015-8538 libdwarf: Out-of-bounds read in dwarf_leb.c","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8538.json"},{"CVE":"CVE-2014-9939","severity":"low","public_date":"2015-07-31T00:00:00Z","advisories":[],"bugzilla":"1250129","bugzilla_description":"CVE-2014-9939 binutils: buffer overflow in ihex.c","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9939.json"},{"CVE":"CVE-2014-8737","severity":"moderate","public_date":"2014-11-04T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162655","bugzilla_description":"CVE-2014-8737 binutils: directory traversal vulnerability","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8737.json"},{"CVE":"CVE-2014-8738","severity":"low","public_date":"2014-11-02T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162666","bugzilla_description":"CVE-2014-8738 binutils: out of bounds memory write","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-787","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8738.json"},{"CVE":"CVE-2014-8503","severity":"low","public_date":"2014-10-30T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162607","bugzilla_description":"CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-121","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8503.json"},{"CVE":"CVE-2014-8502","severity":"low","public_date":"2014-10-28T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162594","bugzilla_description":"CVE-2014-8502 binutils: heap overflow in objdump when parsing a crafted ELF/PE binary file (incomplete fix for CVE-2014-8485)","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-122","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8502.json"},{"CVE":"CVE-2014-8504","severity":"low","public_date":"2014-10-27T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162621","bugzilla_description":"CVE-2014-8504 binutils: stack overflow in the SREC parser","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-121","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8504.json"},{"CVE":"CVE-2014-8501","severity":"low","public_date":"2014-10-26T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162570","bugzilla_description":"CVE-2014-8501 binutils: out-of-bounds write when parsing specially crafted PE executable","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-787","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8501.json"},{"CVE":"CVE-2014-8485","severity":"moderate","public_date":"2014-10-24T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1157276","bugzilla_description":"CVE-2014-8485 binutils: lack of range checking leading to controlled write in _bfd_elf_setup_sections()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-822","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8485.json"},{"CVE":"CVE-2014-8484","severity":"moderate","public_date":"2014-10-20T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1156272","bugzilla_description":"CVE-2014-8484 binutils: invalid read flaw in libbfd","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-839","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8484.json"},{"CVE":"CVE-2012-3509","severity":"moderate","public_date":"2012-08-29T00:00:00Z","advisories":[],"bugzilla":"849693","bugzilla_description":"CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3509.json"},{"CVE":"CVE-2005-1704","severity":"low","public_date":"2005-05-25T00:00:00Z","advisories":["RHBA-2005:675","RHSA-2005:763","RHSA-2005:673","RHSA-2006:0368","RHSA-2005:709","RHSA-2006:0354","RHSA-2005:801","RHSA-2005:659"],"bugzilla":"1617660","bugzilla_description":"CVE-2005-1704 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.63","binutils-0:2.14.90.0.4-39","elfutils-0:0.94.1-2","binutils-0:2.15.92.0.2-15","elfutils-0:0.97.1-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1704.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/biosdevname_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/biosdevname_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/biosdevname_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bison_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bison_security_api_results.json
new file mode 100644
index 0000000..cebd741
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bison_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24979","severity":"moderate","public_date":"2020-09-04T00:00:00Z","advisories":[],"bugzilla":"1877772","bugzilla_description":"CVE-2020-24979 bison: Buffer overflow in src/symtab.c via crafted input file redefining the EOF token can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24979.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-24980","severity":"moderate","public_date":"2020-09-04T00:00:00Z","advisories":[],"bugzilla":"1877779","bugzilla_description":"CVE-2020-24980 bison: Assertion failure in src/parse-gram.c could result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24980.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-24240","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1872737","bugzilla_description":"CVE-2020-24240 bison: use-after-free via crafted input file containing a NULL byte can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24240.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-14150","severity":"moderate","public_date":"2020-04-05T00:00:00Z","advisories":[],"bugzilla":"1847608","bugzilla_description":"CVE-2020-14150 bison: allows attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-617)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14150.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bitmap-fixed-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bitmap-fixed-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bitmap-fixed-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bitmap-lucida-typewriter-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bitmap-lucida-typewriter-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bitmap-lucida-typewriter-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/blas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/blas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/blas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/blivet3-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/blivet3-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/blivet3-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/blktrace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/blktrace_security_api_results.json
new file mode 100644
index 0000000..d70c1fb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/blktrace_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10689","severity":"low","public_date":"2018-05-02T00:00:00Z","advisories":["RHSA-2019:2162"],"bugzilla":"1575119","bugzilla_description":"CVE-2018-10689 blktrace: buffer overflow in the dev_map_read function in btt/devmap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["blktrace-0:1.0.5-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10689.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bltk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bltk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bltk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bluedevil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bluedevil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bluedevil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bluez-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bluez-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bluez-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bluez_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bluez_security_api_results.json
new file mode 100644
index 0000000..ba49af8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bluez_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9770","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1879820","bugzilla_description":"CVE-2020-9770 bluez: BLESA bluetooth attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9770.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2020-27153","severity":"moderate","public_date":"2020-09-06T00:00:00Z","advisories":[],"bugzilla":"1884817","bugzilla_description":"CVE-2020-27153 bluez: double free in gatttool client disconnect callback handler in src/shared/att.c could lead to DoS or RCE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27153.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10134","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1832216","bugzilla_description":"CVE-2020-10134 bluetooth: Method Confusion Pairing Vulnerability in LE Secure Connections and BR/EDR Secure Simple Pairing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-223|CWE-356)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10134.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2020-0556","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:4001"],"bugzilla":"1814293","bugzilla_description":"CVE-2020-0556 bluez: Improper access control in subsystem could result in privilege escalation and DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-400|CWE-266)","affected_packages":["bluez-0:5.44-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0556.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2018-10910","severity":"low","public_date":"2018-07-20T18:50:00Z","advisories":["RHSA-2020:1101","RHSA-2020:1912"],"bugzilla":"1606203","bugzilla_description":"CVE-2018-10910 bluez: failure in disabling Bluetooth discoverability in certain cases may lead to the unauthorized pairing of Bluetooth devices","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["bluez-0:5.50-3.el8","bluez-0:5.44-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10910.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-1000250","severity":"moderate","public_date":"2017-09-12T00:00:00Z","advisories":["RHSA-2017:2685"],"bugzilla":"1489446","bugzilla_description":"CVE-2017-1000250 bluez: Out-of-bounds heap read in service_search_attr_req function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["bluez-0:5.44-4.el7_4","bluez-0:4.66-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000250.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-9797","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401520","bugzilla_description":"CVE-2016-9797 bluez: buffer over-read in l2cap_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9797.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9798","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401522","bugzilla_description":"CVE-2016-9798 bluez: use-after-free in conf_opt()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9798.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9799","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401524","bugzilla_description":"CVE-2016-9799 bluez: buffer overflow in pklg_read_hci()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9799.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9800","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401527","bugzilla_description":"CVE-2016-9800 bluez: buffer overflow in pin_code_reply_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9800.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9801","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401538","bugzilla_description":"CVE-2016-9801 bluez: buffer overflow in set_ext_ctrl()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9801.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9802","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401541","bugzilla_description":"CVE-2016-9802 bluez: buffer over-read in l2cap_packet()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9802.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9803","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401543","bugzilla_description":"CVE-2016-9803 bluez: out-of-bounds read in le_meta_ev_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9803.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9804","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401544","bugzilla_description":"CVE-2016-9804 bluez: buffer overflow in commands_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9918","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1403881","bugzilla_description":"CVE-2016-9918 bluez: Out of bounds stack read in packet_hexdump()","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9918.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-9917","severity":"low","public_date":"2016-11-14T00:00:00Z","advisories":[],"bugzilla":"1403879","bugzilla_description":"CVE-2016-9917 bluez: Heap-based buffer overflow vulnerability in read_n()","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9917.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-7837","severity":"low","public_date":"2016-09-10T00:00:00Z","advisories":[],"bugzilla":"1425117","bugzilla_description":"CVE-2016-7837 bluez: Buffer overflow in parse_line function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2006-6899","severity":"moderate","public_date":"2006-12-28T00:00:00Z","advisories":["RHSA-2007:0065"],"bugzilla":"1618254","bugzilla_description":"CVE-2006-6899 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bluez-utils-0:2.10-2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-6899.json"},{"CVE":"CVE-2006-0670","severity":"low","public_date":"2006-02-05T00:00:00Z","advisories":[],"bugzilla":"187945","bugzilla_description":"CVE-2006-0670 bluez-hcidump Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0670.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bolt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bolt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bolt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-atomic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-atomic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-atomic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-chrono_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-chrono_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-chrono_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-context_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-context_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-context_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-date-time_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-date-time_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-date-time_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-graph_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-graph_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-graph_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-iostreams_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-iostreams_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-iostreams_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-locale_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-locale_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-locale_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-math_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-math_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-math_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-program-options_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-program-options_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-program-options_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-random_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-random_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-random_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-regex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-regex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-regex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-serialization_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-serialization_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-serialization_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-signals_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-signals_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-signals_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-system_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-system_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-system_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-thread_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-thread_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-thread_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-timer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-timer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-timer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-wave_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-wave_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost-wave_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost_security_api_results.json
new file mode 100644
index 0000000..da1e650
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/boost_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-0252","severity":"low","public_date":"2013-02-01T00:00:00Z","advisories":[],"bugzilla":"907481","bugzilla_description":"CVE-2013-0252 boost: Certain invalid UTF-8 sequences accepted as valid","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0252.json"},{"CVE":"CVE-2012-2677","severity":"moderate","public_date":"2012-06-05T00:00:00Z","advisories":["RHSA-2013:0668"],"bugzilla":"828856","bugzilla_description":"CVE-2012-2677 boost: ordered_malloc() overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["boost-0:1.33.1-16.el5_9","boost-0:1.41.0-15.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2677.json"},{"CVE":"CVE-2008-0171","severity":"low","public_date":"2008-01-11T00:00:00Z","advisories":["RHSA-2012:0305"],"bugzilla":"428316","bugzilla_description":"CVE-2008-0171 boost regular expression memory corruption flaws","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["boost-0:1.33.1-15.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0171.json"},{"CVE":"CVE-2008-0172","severity":"low","public_date":"2008-01-11T00:00:00Z","advisories":["RHSA-2012:0305"],"bugzilla":"428320","bugzilla_description":"CVE-2008-0172 boost regular expression NULL dereference flaw","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["boost-0:1.33.1-15.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0172.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-arbitrator_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-arbitrator_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-arbitrator_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-site_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-site_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-site_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/booth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpftool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpftool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpftool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-chveulebrivi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-chveulebrivi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-chveulebrivi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-courier-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-courier-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-courier-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-glaho-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-glaho-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bpg-glaho-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brasero-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brasero-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brasero-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brasero-nautilus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brasero-nautilus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brasero-nautilus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brasero_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brasero_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brasero_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bridge-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bridge-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bridge-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brlapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brlapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brlapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brltty_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brltty_security_api_results.json
new file mode 100644
index 0000000..fabbd44
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/brltty_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2008-3279","severity":"low","public_date":"2008-06-12T00:00:00Z","advisories":["RHSA-2010:0181"],"bugzilla":"457942","bugzilla_description":"CVE-2008-3279 brltty: insecure relative RPATH","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["brltty-0:3.7.2-4.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3279.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/btrfs-progs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/btrfs-progs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/btrfs-progs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/byacc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/byacc_security_api_results.json
new file mode 100644
index 0000000..8c79546
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/byacc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2008-3196","severity":"low","public_date":"2008-07-08T00:00:00Z","advisories":[],"bugzilla":"455031","bugzilla_description":"CVE-2008-3196 byacc: Potential out of bounds of allocated stack access","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3196.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzip2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzip2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzip2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzip2-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzip2-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzip2-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzip2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzip2_security_api_results.json
new file mode 100644
index 0000000..f673c54
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzip2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-12900","severity":"low","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1724459","bugzilla_description":"CVE-2019-12900 bzip2: out-of-bounds write in function BZ2_decompress","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12900.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-5399","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:2598"],"bugzilla":"1358395","bugzilla_description":"CVE-2016-5399 php: Improper error handling in bzread()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-390","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php-0:5.4.16-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5399.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-3189","severity":"low","public_date":"2016-06-20T00:00:00Z","advisories":[],"bugzilla":"1319648","bugzilla_description":"CVE-2016-3189 bzip2: heap use after free in bzip2recover","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3189.json"},{"CVE":"CVE-2010-0405","severity":"important","public_date":"2010-09-20T00:00:00Z","advisories":["RHSA-2010:0858","RHSA-2010:0703"],"bugzilla":"627882","bugzilla_description":"CVE-2010-0405 bzip2: integer overflow flaw in BZ2_decompress","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["bzip2-0:1.0.3-6.el5_5","bzip2-0:1.0.5-7.el6_0","bzip2-0:1.0.2-14.EL3","bzip2-0:1.0.2-16.el4_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0405.json"},{"CVE":"CVE-2008-1372","severity":"moderate","public_date":"2008-03-18T00:00:00Z","advisories":["RHSA-2008:0893"],"bugzilla":"438118","bugzilla_description":"CVE-2008-1372 bzip2: crash on malformed archive file","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bzip2-0:1.0.2-12.EL3","bzip2-0:1.0.3-4.el5_2","bzip2-0:1.0.1-5.EL2.1","bzip2-0:1.0.2-14.el4_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1372.json"},{"CVE":"CVE-2005-0758","severity":"low","public_date":"2005-04-22T00:00:00Z","advisories":["RHSA-2005:357","RHSA-2005:474"],"bugzilla":"1617573","bugzilla_description":"CVE-2005-0758 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-12.rhel3","gzip-0:1.3.3-15.rhel4","bzip2-0:1.0.2-11.EL3.4","bzip2-0:1.0.2-13.EL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0758.json"},{"CVE":"CVE-2005-0953","severity":"low","public_date":"2005-03-30T00:00:00Z","advisories":["RHSA-2005:474"],"bugzilla":"1617590","bugzilla_description":"CVE-2005-0953 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bzip2-0:1.0.2-11.EL3.4","bzip2-0:1.0.2-13.EL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0953.json"},{"CVE":"CVE-2005-1260","severity":"low","public_date":"2005-02-15T00:00:00Z","advisories":["RHSA-2005:474"],"bugzilla":"1617617","bugzilla_description":"CVE-2005-1260 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bzip2-0:1.0.2-11.EL3.4","bzip2-0:1.0.2-13.EL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1260.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzr_security_api_results.json
new file mode 100644
index 0000000..96e95e1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/bzr_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-14176","severity":"moderate","public_date":"2017-08-26T00:00:00Z","advisories":[],"bugzilla":"1486685","bugzilla_description":"CVE-2017-14176 bzr: does not strip bzr+ssh SSH options","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-2099","severity":"low","public_date":"2013-05-15T00:00:00Z","advisories":["RHSA-2016:1166","RHBA-2016:1500","RHSA-2014:1690","RHSA-2015:0042","RHSA-2014:1263"],"bugzilla":"963260","bugzilla_description":"CVE-2013-2099 python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-backports-ssl_match_hostname-0:3.4.0.2-1.el6","python-pymongo-0:3.2-1.el7sat","python-pymongo-0:3.2-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/c-ares-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/c-ares-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/c-ares-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/c-ares_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/c-ares_security_api_results.json
new file mode 100644
index 0000000..4df7285
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/c-ares_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14354","severity":"moderate","public_date":"2020-08-02T00:00:00Z","advisories":[],"bugzilla":"1866838","bugzilla_description":"CVE-2020-14354 c-ares: ares_destroy() with pending ares_getaddrinfo() leads to Use-After-Free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14354.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2017-1000381","severity":"moderate","public_date":"2017-06-20T00:00:00Z","advisories":["RHSA-2017:2908"],"bugzilla":"1463132","bugzilla_description":"CVE-2017-1000381 c-ares: NAPTR parser out of bounds access","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-nodejs6-nodejs-0:6.11.3-2.el6","rh-nodejs6-nodejs-0:6.11.3-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000381.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-5180","severity":"moderate","public_date":"2016-09-29T00:00:00Z","advisories":["RHSA-2017:0002"],"bugzilla":"1380463","bugzilla_description":"CVE-2016-5180 c-ares: Single byte out of buffer write","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-122","affected_packages":["rh-nodejs4-nodejs-0:4.6.2-4.el6","rh-nodejs4-nodejs-0:4.6.2-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ca-certificates_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ca-certificates_security_api_results.json
new file mode 100644
index 0000000..e93685f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ca-certificates_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-0743","severity":"important","public_date":"2013-01-03T00:00:00Z","advisories":["RHSA-2013:0213"],"bugzilla":"890605","bugzilla_description":"nss: Dis-trust TURKTRUST mis-issued *.google.com certificate","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["nss-0:3.13.6-2.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0743.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cachefilesd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cachefilesd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cachefilesd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo-gobject-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo-gobject-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo-gobject-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo-gobject_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo-gobject_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo-gobject_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo_security_api_results.json
new file mode 100644
index 0000000..85f7497
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairo_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-6461","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1669629","bugzilla_description":"CVE-2019-6461 cairo: assertion problem in _cairo_arc_in_direction in cairo-arc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6461.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2019-6462","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1671399","bugzilla_description":"CVE-2019-6462 cairo: infinite loop in the function _arc_error_normalized in the file cairo-arc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6462.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2018-19876","severity":"low","public_date":"2018-11-13T00:00:00Z","advisories":[],"bugzilla":"1661454","bugzilla_description":"CVE-2018-19876 cairo: Invalid free in cairo_ft_apply_variations() resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19876.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-18064","severity":"moderate","public_date":"2018-10-08T00:00:00Z","advisories":[],"bugzilla":"1637792","bugzilla_description":"CVE-2018-18064 cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-9814","severity":"low","public_date":"2017-06-21T00:00:00Z","advisories":[],"bugzilla":"1472788","bugzilla_description":"CVE-2017-9814 cairo: Out-of-bounds read due to mishandling of unexpected malloc(0) call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7475","severity":"low","public_date":"2017-04-23T00:00:00Z","advisories":[],"bugzilla":"1447949","bugzilla_description":"CVE-2017-7475 cairo: NULL pointer dereference with a crafted font file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7475.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9082","severity":"low","public_date":"2016-10-05T00:00:00Z","advisories":[],"bugzilla":"1312337","bugzilla_description":"CVE-2016-9082 cairo: Out of bounds read in read_png/write_png in cairo-png.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9082.json"},{"CVE":"CVE-2016-3190","severity":"moderate","public_date":"2016-03-10T00:00:00Z","advisories":["RHBA-2015:2116"],"bugzilla":"1318977","bugzilla_description":"CVE-2016-3190 cairo: out of bounds read in fill_xrgb32_lerp_opaque_spans","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-839->(CWE-125|CWE-787)","affected_packages":["cairo-0:1.14.2-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3190.json"},{"CVE":"CVE-2014-1528","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":[],"bugzilla":"1096585","bugzilla_description":"CVE-2014-1528 Mozilla: Out-of-bounds write in Cairo (MFSA 2014-41)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1528.json"},{"CVE":"CVE-2014-5116","severity":null,"public_date":"2014-02-14T00:00:00Z","advisories":[],"bugzilla":"1124500","bugzilla_description":"CVE-2014-5116 cairo: NULL pointer dereference in cairo_image_surface_get_data()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5116.json"},{"CVE":"CVE-2007-5503","severity":"important","public_date":"2007-11-29T00:00:00Z","advisories":["RHSA-2007:1078"],"bugzilla":"387431","bugzilla_description":"CVE-2007-5503 cairo integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["cairo-0:1.2.4-3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5503.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairomm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairomm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cairomm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cal10n_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cal10n_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cal10n_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/caribou-gtk2-module_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/caribou-gtk2-module_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/caribou-gtk2-module_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/caribou-gtk3-module_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/caribou-gtk3-module_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/caribou-gtk3-module_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/caribou_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/caribou_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/caribou_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cdparanoia-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cdparanoia-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cdparanoia-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cdparanoia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cdparanoia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cdparanoia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cdrdao_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cdrdao_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cdrdao_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/celt051_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/celt051_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/celt051_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ceph-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ceph-common_security_api_results.json
new file mode 100644
index 0000000..e779404
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ceph-common_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10736","severity":"important","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1833025","bugzilla_description":"CVE-2020-10736 ceph: authorization bypass in monitor and manager daemons","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10736.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2020-1700","severity":"moderate","public_date":"2020-01-31T16:55:00Z","advisories":[],"bugzilla":"1791691","bugzilla_description":"CVE-2020-1700 ceph: connection leak in the RGW Beast front-end permits a DoS against the RGW server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1700.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-19337","severity":"moderate","public_date":"2019-12-19T17:07:00Z","advisories":["RHSA-2019:4357","RHSA-2019:4353"],"bugzilla":"1781170","bugzilla_description":"CVE-2019-19337 ceph: denial of service in RGW daemon","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ceph-2:12.2.12-84.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19337.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10222","severity":"important","public_date":"2019-08-28T14:00:00Z","advisories":["RHSA-2019:2579","RHSA-2019:2577"],"bugzilla":"1739292","bugzilla_description":"CVE-2019-10222 ceph: Unauthenticated clients can crash ceph RGW configured with beast as frontend","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ceph-2:12.2.12-48.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10222.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3821","severity":"important","public_date":"2019-02-11T00:00:00Z","advisories":[],"bugzilla":"1656852","bugzilla_description":"CVE-2019-3821 ceph: radosgw: Resource exhaustion via TCP connection to port serving the SSL endpoint","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3821.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16889","severity":"moderate","public_date":"2019-01-10T00:00:00Z","advisories":["RHSA-2019:2541","RHSA-2019:2538"],"bugzilla":"1665334","bugzilla_description":"CVE-2018-16889 ceph: debug logging for v4 auth does not sanitize encryption keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["ceph-2:12.2.12-45.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16889.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-14662","severity":"low","public_date":"2019-01-07T00:00:00Z","advisories":["RHSA-2019:2541","RHSA-2019:2538"],"bugzilla":"1637327","bugzilla_description":"CVE-2018-14662 ceph: authenticated user with read only permissions can steal dm-crypt / LUKS key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["ceph-2:12.2.12-45.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14662.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2018-16846","severity":"moderate","public_date":"2019-01-07T00:00:00Z","advisories":["RHSA-2019:2541","RHSA-2019:2538"],"bugzilla":"1644461","bugzilla_description":"CVE-2018-16846 ceph: ListBucket max-keys has no defined limit in the RGW codebase","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["ceph-2:12.2.12-45.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1128","severity":"moderate","public_date":"2018-07-09T12:00:00Z","advisories":["RHSA-2018:2261","RHSA-2018:2179","RHSA-2018:2177","RHSA-2018:2274"],"bugzilla":"1575866","bugzilla_description":"CVE-2018-1128 ceph: cephx protocol is vulnerable to replay attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-294","affected_packages":["ceph-2:10.2.10-28.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1128.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2018-1129","severity":"moderate","public_date":"2018-07-09T12:00:00Z","advisories":["RHSA-2018:2261","RHSA-2018:2179","RHSA-2018:2177","RHSA-2018:2274"],"bugzilla":"1576057","bugzilla_description":"CVE-2018-1129 ceph: cephx uses weak signatures","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["ceph-2:10.2.10-28.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1129.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2018-10861","severity":"moderate","public_date":"2018-07-09T12:00:00Z","advisories":["RHSA-2018:2261","RHSA-2018:2179","RHSA-2018:2177","RHSA-2018:2274"],"bugzilla":"1593308","bugzilla_description":"CVE-2018-10861 ceph: ceph-mon does not perform authorization on OSD pool ops","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["ceph-2:10.2.10-28.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10861.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2018-7262","severity":"important","public_date":"2018-02-13T00:00:00Z","advisories":["RHSA-2018:0548","RHSA-2018:0546"],"bugzilla":"1546610","bugzilla_description":"CVE-2018-7262 ceph: Unauthenticated malformed HTTP requests handled by rgw_civetweb.cc:RGW::init_env() can lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["ceph-2:12.2.1-46.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7262.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-16818","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1515872","bugzilla_description":"CVE-2017-16818 ceph: Failed assertion through user input in ceph_assert() function in rgw_iam_policy.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5009","severity":"moderate","public_date":"2016-06-14T00:00:00Z","advisories":["RHSA-2016:1385","RHSA-2016:1384"],"bugzilla":"1351453","bugzilla_description":"CVE-2016-5009 Ceph monitor crash: mon_command crashes ceph monitors on receiving empty prefix","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["ceph-1:0.94.5-14.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5009.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/certmonger_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/certmonger_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/certmonger_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cgdcbxd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cgdcbxd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cgdcbxd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/check-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/check-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/check-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/check_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/check_security_api_results.json
new file mode 100644
index 0000000..711f6e9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/check_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-10782","severity":"moderate","public_date":"2020-01-27T00:00:00Z","advisories":[],"bugzilla":"1796858","bugzilla_description":"CVE-2019-10782 checkstyle: XML External Entity Injection due to an incomplete fix for CVE-2019-9658","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-14955","severity":"moderate","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1497971","bugzilla_description":"CVE-2017-14955 check-mk: Mishandles certain errors within the failed-login save feature because of a race condition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14955.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-11507","severity":"moderate","public_date":"2017-07-06T00:00:00Z","advisories":[],"bugzilla":"1524949","bugzilla_description":"CVE-2017-11507 check-mk: Stored XSS vulnerability using the internal server error handler","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2014-5338","severity":"important","public_date":"2014-05-05T00:00:00Z","advisories":["RHSA-2015:1495"],"bugzilla":"1132337","bugzilla_description":"CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["check-mk-0:1.2.6p1-3.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5338.json"},{"CVE":"CVE-2014-5339","severity":"important","public_date":"2014-05-05T00:00:00Z","advisories":["RHSA-2015:1495"],"bugzilla":"1132337","bugzilla_description":"CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["check-mk-0:1.2.6p1-3.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5339.json"},{"CVE":"CVE-2014-5340","severity":"important","public_date":"2014-05-05T00:00:00Z","advisories":["RHSA-2015:1495"],"bugzilla":"1132337","bugzilla_description":"CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["check-mk-0:1.2.6p1-3.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5340.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/checkpolicy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/checkpolicy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/checkpolicy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cheese-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cheese-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cheese-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cheese_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cheese_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cheese_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chkconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chkconfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chkconfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chrome-gnome-shell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chrome-gnome-shell_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chrome-gnome-shell_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chrony_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chrony_security_api_results.json
new file mode 100644
index 0000000..7ab951c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chrony_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14367","severity":"moderate","public_date":"2020-08-19T17:10:00Z","advisories":[],"bugzilla":"1870298","bugzilla_description":"CVE-2020-14367 chrony: Insecure writing to PID file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59->CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14367.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2016-1567","severity":"low","public_date":"2016-01-20T00:00:00Z","advisories":[],"bugzilla":"1297472","bugzilla_description":"CVE-2016-1567 chrony: missing key check allows impersonation between authenticated peers (VU#357792)","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-304","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1567.json"},{"CVE":"CVE-2015-1853","severity":"moderate","public_date":"2015-04-07T00:00:00Z","advisories":["RHSA-2015:2241"],"bugzilla":"1209572","bugzilla_description":"CVE-2015-1853 chrony: authentication doesn't protect symmetric associations against DoS attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-345","affected_packages":["chrony-0:2.1.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1853.json"},{"CVE":"CVE-2015-1821","severity":"moderate","public_date":"2015-04-07T00:00:00Z","advisories":["RHSA-2015:2241"],"bugzilla":"1209631","bugzilla_description":"CVE-2015-1821 chrony: Heap out of bound write in address filter","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"(CWE-122|CWE-787)","affected_packages":["chrony-0:2.1.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1821.json"},{"CVE":"CVE-2015-1822","severity":"moderate","public_date":"2015-04-07T00:00:00Z","advisories":["RHSA-2015:2241"],"bugzilla":"1209632","bugzilla_description":"CVE-2015-1822 chrony: uninitialized pointer in cmdmon reply slots","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":["chrony-0:2.1.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1822.json"},{"CVE":"CVE-2014-0021","severity":"low","public_date":"2014-01-16T00:00:00Z","advisories":[],"bugzilla":"1054790","bugzilla_description":"CVE-2014-0021 chrony: DDoS via amplification in cmdmon protocol","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0021.json"},{"CVE":"CVE-2012-4502","severity":"moderate","public_date":"2013-08-09T00:00:00Z","advisories":[],"bugzilla":"846392","bugzilla_description":"CVE-2012-4502 CVE-2012-4503 chrony: Two security flaws fixed in chrony-1.29 release","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4502.json"},{"CVE":"CVE-2012-4503","severity":"moderate","public_date":"2013-08-09T00:00:00Z","advisories":[],"bugzilla":"846392","bugzilla_description":"CVE-2012-4502 CVE-2012-4503 chrony: Two security flaws fixed in chrony-1.29 release","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4503.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chrpath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chrpath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/chrpath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cifs-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cifs-utils_security_api_results.json
new file mode 100644
index 0000000..56acca3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cifs-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14342","severity":"low","public_date":"2020-09-03T00:00:00Z","advisories":[],"bugzilla":"1860884","bugzilla_description":"CVE-2020-14342 cifs-utils: shell command injection in mount.cifs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14342.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2014-2830","severity":"moderate","public_date":"2014-04-08T00:00:00Z","advisories":[],"bugzilla":"1086224","bugzilla_description":"CVE-2014-2830 cifs-utils: stack-based buffer overflow flaw in pam_cifscreds","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2830.json"},{"CVE":"CVE-2012-1586","severity":"low","public_date":"2012-03-21T00:00:00Z","advisories":["RHSA-2012:0902"],"bugzilla":"807252","bugzilla_description":"CVE-2012-1586 samba / cifs-utils: mount.cifs file existence disclosure vulnerability","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["cifs-utils-0:4.8.1-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1586.json"},{"CVE":"CVE-2011-2724","severity":"low","public_date":"2011-07-29T00:00:00Z","advisories":["RHSA-2011:1220","RHSA-2011:1221"],"bugzilla":"726691","bugzilla_description":"CVE-2011-2724 samba, cifs-utils: mount.cifs incorrect fix for CVE-2010-0547","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["samba3x-0:3.5.4-0.83.el5_7.2","cifs-utils-0:4.8.1-2.el6_1.2","samba-0:3.5.6-86.el6_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2724.json"},{"CVE":"CVE-2011-1678","severity":"low","public_date":"2011-03-03T00:00:00Z","advisories":["RHSA-2011:1220","RHSA-2011:1221","RHSA-2011:1219"],"bugzilla":"695925","bugzilla_description":"CVE-2011-1678 samba/cifs-utils: mount.cifs and umount.cifs fail to anticipate RLIMIT_FSIZE","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["samba-0:3.0.33-0.34.el4","samba3x-0:3.5.4-0.83.el5_7.2","cifs-utils-0:4.8.1-2.el6_1.2","samba-0:3.0.33-3.29.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1678.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cim-schema_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cim-schema_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cim-schema_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cjkuni-ukai-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cjkuni-ukai-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cjkuni-ukai-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cjkuni-uming-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cjkuni-uming-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cjkuni-uming-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-dracut_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-dracut_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-dracut_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-luks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-luks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-luks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-systemd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-systemd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-systemd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-udisks2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-udisks2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis-udisks2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clevis_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cloud-init_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cloud-init_security_api_results.json
new file mode 100644
index 0000000..42799e2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cloud-init_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8632","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3898"],"bugzilla":"1798728","bugzilla_description":"CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["cloud-init-0:19.4-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8632.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8631","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3898"],"bugzilla":"1798731","bugzilla_description":"CVE-2020-8631 cloud-init: Use of random.choice when generating random password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["cloud-init-0:19.4-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8631.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-0816","severity":"moderate","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:0597"],"bugzilla":"1680165","bugzilla_description":"CVE-2019-0816 cloud-init: extra ssh keys added to authorized_keys on the Azure platform","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["cloud-init-0:18.2-1.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-10896","severity":"low","public_date":"2018-07-06T00:00:00Z","advisories":["RHSA-2020:3644","RHSA-2020:3050","RHSA-2020:3898"],"bugzilla":"1598831","bugzilla_description":"CVE-2018-10896 cloud-init: default configuration disabled deletion of SSH host keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-321","affected_packages":["cloud-init-0:18.5-12.el8_2.3","cloud-init-0:19.4-7.el7","cloud-init-0:19.4-1.el8.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10896.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2012-6639","severity":"important","public_date":"2014-01-07T00:00:00Z","advisories":[],"bugzilla":"1073591","bugzilla_description":"CVE-2012-6639 cloud-init: insecure transmission of EC2 instance data can lead to root privilege escalation","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6639.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cloud-utils-growpart_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cloud-utils-growpart_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cloud-utils-growpart_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clucene-contribs-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clucene-contribs-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clucene-contribs-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clucene-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clucene-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clucene-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-bin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-bin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-bin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-lib-ccs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-lib-ccs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-lib-ccs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-lib-general_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-lib-general_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-lib-general_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-lib-pcs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-lib-pcs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clufter-lib-pcs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter-gst2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter-gst2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter-gst2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter-gst3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter-gst3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter-gst3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter_security_api_results.json
new file mode 100644
index 0000000..41e47aa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/clutter_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-15058","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":[],"bugzilla":"1816324","bugzilla_description":"CVE-2019-15058 stbi: heap-based buffer overflow in stbi__tga_load function in stb_image.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15058.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2018-16981","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":[],"bugzilla":"1639548","bugzilla_description":"CVE-2018-16981 stbi: Heap-based buffer overflow in stb_image.h:stbi__out_gif_code() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2015-3213","severity":"moderate","public_date":"2015-06-02T00:00:00Z","advisories":["RHSA-2015:1510"],"bugzilla":"1227098","bugzilla_description":"CVE-2015-3213 Gnome clutter: screenlock bypass by performing certain mouse gestures","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-460->CWE-305","affected_packages":["clutter-0:1.14.4-12.el7_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3213.json"},{"CVE":"CVE-2013-2190","severity":"low","public_date":"2013-06-18T00:00:00Z","advisories":[],"bugzilla":"980111","bugzilla_description":"CVE-2013-2190 clutter: Improper translation of hierarchy events (gnome-shell crash after system resume)","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2190.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cmake_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cmake_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cmake_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cmpi-bindings-pywbem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cmpi-bindings-pywbem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cmpi-bindings-pywbem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit-bridge_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit-bridge_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit-bridge_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit-system_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit-system_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit-system_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit-ws_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit-ws_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit-ws_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit_security_api_results.json
new file mode 100644
index 0000000..f9476f4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cockpit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-8203","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:3807","RHSA-2020:3370"],"bugzilla":"1857412","bugzilla_description":"CVE-2020-8203 nodejs-lodash: prototype pollution in zipObjectDeep function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","distributed-tracing/jaeger-query-rhel7:1.17.6-1","ovirt-web-ui-0:1.6.4-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10139","severity":"moderate","public_date":"2019-05-17T00:00:00Z","advisories":["RHSA-2019:2433","RHSA-2019:2437"],"bugzilla":"1709829","bugzilla_description":"CVE-2019-10139 cockpit-ovirt: admin and appliance passwords saved in plain text variable file during HE deployment","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","cockpit-ovirt-0:0.13.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2019-3804","severity":"moderate","public_date":"2018-12-13T00:00:00Z","advisories":["RHSA-2019:0482","RHSA-2019:1571","RHSA-2019:1569"],"bugzilla":"1663567","bugzilla_description":"CVE-2019-3804 cockpit: Crash when parsing invalid base64 headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["rhvm-appliance-0:4.3-20190605.0.el7","cockpit-0:173.2-1.el7","redhat-virtualization-host-0:4.3-20190610.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/codemodel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/codemodel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/codemodel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cogl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cogl_security_api_results.json
new file mode 100644
index 0000000..af463c0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cogl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-15058","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":[],"bugzilla":"1816324","bugzilla_description":"CVE-2019-15058 stbi: heap-based buffer overflow in stbi__tga_load function in stb_image.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15058.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2018-16981","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":[],"bugzilla":"1639548","bugzilla_description":"CVE-2018-16981 stbi: Heap-based buffer overflow in stb_image.h:stbi__out_gif_code() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/color-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/color-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/color-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord-kde_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord-kde_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord-kde_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/colord_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-cheese314_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-cheese314_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-cheese314_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-dapl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-dapl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-dapl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-db-headers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-db-headers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-db-headers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-db47_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-db47_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-db47_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-exiv2-023_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-exiv2-023_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-exiv2-023_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-exiv2-026_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-exiv2-026_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-exiv2-026_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-gcc-44-c++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-gcc-44-c++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-gcc-44-c++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-gcc-44_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-gcc-44_security_api_results.json
new file mode 100644
index 0000000..7b0c427
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-gcc-44_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-11671","severity":"low","public_date":"2017-03-25T00:00:00Z","advisories":["RHSA-2018:0849"],"bugzilla":"1475733","bugzilla_description":"CVE-2017-11671 gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gcc-0:4.8.5-28.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11671.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-4973","severity":"moderate","public_date":"2016-08-17T00:00:00Z","advisories":[],"bugzilla":"1324759","bugzilla_description":"CVE-2016-4973 gcc: Targets using libssp for SSP are missing -D_FORTIFY_SOURCE functionality","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4973.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2016-6131","severity":null,"public_date":"2016-06-29T00:00:00Z","advisories":[],"bugzilla":"1352068","bugzilla_description":"CVE-2016-6131 gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-4492","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333377","bugzilla_description":"CVE-2016-4492 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4493","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333383","bugzilla_description":"CVE-2016-4493 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4493.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4491","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1333371","bugzilla_description":"CVE-2016-4491 gcc: Stack overflow due to infinite recursion in d_print_comp","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2016-4489","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333336","bugzilla_description":"CVE-2016-4489 gcc: Invalid write due to integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4490","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333366","bugzilla_description":"CVE-2016-4490 gcc: Write access violation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4487","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333330","bugzilla_description":"CVE-2016-4487 gcc: Invalid write due to a use-after-free to array btypevec","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4488","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333332","bugzilla_description":"CVE-2016-4488 gcc: Invalid write due to a use-after-free to array ktypevec","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-2226","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1333322","bugzilla_description":"CVE-2016-2226 gcc: Exploitable buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-glade315_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-glade315_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-glade315_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-glibc-headers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-glibc-headers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-glibc-headers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-glibc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-glibc_security_api_results.json
new file mode 100644
index 0000000..fb35d91
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-glibc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2005-3590","severity":"low","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1706046","bugzilla_description":"CVE-2005-3590 glibc: buffer overflow in getgrouplist function leading to corrupted memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3590.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-19591","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1653993","bugzilla_description":"CVE-2018-19591 glibc: file descriptor leak in if_nametoindex() in sysdeps/unix/sysv/linux/if_index.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19591.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-11237","severity":"moderate","public_date":"2018-05-17T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1581274","bugzilla_description":"CVE-2018-11237 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11237.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-11236","severity":"moderate","public_date":"2018-02-04T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1581269","bugzilla_description":"CVE-2018-11236 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-121","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-6551","severity":"moderate","public_date":"2018-02-02T00:00:00Z","advisories":[],"bugzilla":"1542119","bugzilla_description":"CVE-2018-6551 glibc: integer overflow in malloc functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6551.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000001","severity":"important","public_date":"2018-01-11T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1533836","bugzilla_description":"CVE-2018-1000001 glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000001.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-18269","severity":"moderate","public_date":"2017-12-24T00:00:00Z","advisories":[],"bugzilla":"1580924","bugzilla_description":"CVE-2017-18269 glibc: memory corruption in memcpy-sse2-unaligned.S","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18269.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-16997","severity":"moderate","public_date":"2017-12-17T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1526865","bugzilla_description":"CVE-2017-16997 glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-470","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16997.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-1000408","severity":"low","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1522828","bugzilla_description":"CVE-2017-1000408 glibc: Memory leak reachable via LD_HWCAP_MASK","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000408.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000409","severity":"moderate","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1522830","bugzilla_description":"CVE-2017-1000409 glibc: Buffer overflow triggerable via LD_LIBRARY_PATH","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000409.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-17426","severity":"moderate","public_date":"2017-10-31T00:00:00Z","advisories":[],"bugzilla":"1524530","bugzilla_description":"CVE-2017-17426 glibc: Integer overflow with enabled tcache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17426.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-15804","severity":"moderate","public_date":"2017-10-21T00:00:00Z","advisories":["RHSA-2018:1879","RHSA-2018:0805"],"bugzilla":"1505298","bugzilla_description":"CVE-2017-15804 glibc: Buffer overflow during unescaping of user names with the ~ operator","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7","glibc-0:2.12-1.212.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-15671","severity":"low","public_date":"2017-10-20T00:00:00Z","advisories":[],"bugzilla":"1504806","bugzilla_description":"CVE-2017-15671 glibc: Memory leak in glob with GLOB_TILDE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15671.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15670","severity":"moderate","public_date":"2017-10-19T00:00:00Z","advisories":["RHSA-2018:1879","RHSA-2018:0805"],"bugzilla":"1504804","bugzilla_description":"CVE-2017-15670 glibc: Buffer overflow in glob with GLOB_TILDE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7","glibc-0:2.12-1.212.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15670.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-6485","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1542102","bugzilla_description":"CVE-2018-6485 glibc: Integer overflow in posix_memalign in memalign functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6485.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2014-9984","severity":"critical","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1463288","bugzilla_description":"CVE-2014-9984 glibc: nscd buffer manipulation vulnerability could lead to code execution or crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9984.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-8804","severity":"moderate","public_date":"2017-05-08T00:00:00Z","advisories":[],"bugzilla":"1448794","bugzilla_description":"CVE-2017-8804 glibc: memory leak in sunrpc when decoding malformed XDR","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-12132","severity":"low","public_date":"2017-04-07T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1477529","bugzilla_description":"CVE-2017-12132 glibc: Fragmentation attacks possible when EDNS0 is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12132.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.0"},{"CVE":"CVE-2017-12133","severity":"low","public_date":"2017-02-08T00:00:00Z","advisories":[],"bugzilla":"1478288","bugzilla_description":"CVE-2017-12133 glibc: Use-after-free read access in clntudp_call in sunrpc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12133.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10228","severity":"low","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1428290","bugzilla_description":"CVE-2016-10228 glibc: iconv program can hang when invoked with the -c option","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10228.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6323","severity":"low","public_date":"2016-08-04T00:00:00Z","advisories":[],"bugzilla":"1383297","bugzilla_description":"CVE-2016-6323 glibc: Missing unwind info in __startcontext causes infinite loop in _Unwind_Backtrace","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5417","severity":"low","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1362534","bugzilla_description":"CVE-2016-5417 glibc: per-thread memory leak in __res_vinit with IPv6 nameservers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5417.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-4429","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1337136","bugzilla_description":"CVE-2016-4429 glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4429.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-3706","severity":"low","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1330887","bugzilla_description":"CVE-2016-3706 glibc: stack (frame) overflow in getaddrinfo() when called with AF_INET, AF_INET6 (incomplete fix for CVE-2013-4458)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3706.json"},{"CVE":"CVE-2016-3075","severity":"low","public_date":"2016-03-29T00:00:00Z","advisories":["RHSA-2016:2573"],"bugzilla":"1321866","bugzilla_description":"CVE-2016-3075 glibc: Stack overflow in nss_dns_getnetbyname_r","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:P/I:P/A:C","CWE":"CWE-121","affected_packages":["glibc-0:2.17-157.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-1234","severity":"moderate","public_date":"2016-03-07T00:00:00Z","advisories":[],"bugzilla":"1315647","bugzilla_description":"CVE-2016-1234 glibc: Stack-based buffer overflow in glob with GLOB_ALTDIRFUNC and crafted directory","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1234.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2015-8776","severity":"moderate","public_date":"2015-09-20T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300299","bugzilla_description":"CVE-2015-8776 glibc: Segmentation fault caused by passing out-of-range data to strftime()","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2015-8778","severity":"moderate","public_date":"2015-04-10T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300303","bugzilla_description":"CVE-2015-8778 glibc: Integer overflow in hcreate and hcreate_r","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2015-8779","severity":"moderate","public_date":"2015-01-29T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300312","bugzilla_description":"CVE-2015-8779 glibc: Unbounded stack allocation in catopen function","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8779.json"},{"CVE":"CVE-2014-9761","severity":"moderate","public_date":"2014-05-19T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300310","bugzilla_description":"CVE-2014-9761 glibc: Unbounded stack allocation in nan* functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9761.json"},{"CVE":"CVE-2009-5029","severity":"moderate","public_date":"2009-06-01T00:00:00Z","advisories":["RHSA-2012:0058","RHSA-2012:0125","RHSA-2012:0126"],"bugzilla":"761245","bugzilla_description":"CVE-2009-5029 glibc: __tzfile_read integer overflow to buffer overflow","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.12-1.47.el6_2.5","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5029.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-gnome-desktop314_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-gnome-desktop314_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-gnome-desktop314_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-grilo02_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-grilo02_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-grilo02_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcap1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcap1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcap1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcogl-pango12_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcogl-pango12_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcogl-pango12_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcogl12_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcogl12_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcogl12_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcolord1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcolord1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libcolord1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libf2c-34_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libf2c-34_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libf2c-34_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgdata13_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgdata13_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgdata13_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgfortran-41_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgfortran-41_security_api_results.json
new file mode 100644
index 0000000..ab2dea6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgfortran-41_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-5044","severity":"moderate","public_date":"2014-06-17T00:00:00Z","advisories":[],"bugzilla":"1122812","bugzilla_description":"CVE-2014-5044 gcc: integer overflow flaws in libgfortran","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5044.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgnome-bluetooth11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgnome-bluetooth11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgnome-bluetooth11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgnome-desktop3-7_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgnome-desktop3-7_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgnome-desktop3-7_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgweather3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgweather3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libgweather3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libical1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libical1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libical1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libmediaart0_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libmediaart0_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libmediaart0_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libpackagekit-glib2-16_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libpackagekit-glib2-16_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libpackagekit-glib2-16_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libtiff3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libtiff3_security_api_results.json
new file mode 100644
index 0000000..052a54a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libtiff3_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19210","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":[],"bugzilla":"1649385","bugzilla_description":"CVE-2018-19210 libtiff: NULL pointer dereference in TIFFWriteDirectorySec function in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19210.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18661","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1644448","bugzilla_description":"CVE-2018-18661 libtiff: tiff2bw tool failed memory allocation leads to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18661.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17795","severity":"low","public_date":"2018-10-02T00:00:00Z","advisories":[],"bugzilla":"1635091","bugzilla_description":"CVE-2018-17795 libtiff: Heap-based buffer overflow in tiff2pdf.c:t2p_write_pdf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-17100","severity":"low","public_date":"2018-09-16T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1631069","bugzilla_description":"CVE-2018-17100 libtiff: Integer overflow in multiply_ms in tools/ppm2tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17100.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-17101","severity":"low","public_date":"2018-09-16T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1631078","bugzilla_description":"CVE-2018-17101 libtiff: Two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17101.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-17000","severity":"low","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1630004","bugzilla_description":"CVE-2018-17000 libtiff: NULL pointer dereference in function _TIFFmemcmp at tif_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17000.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-15209","severity":"moderate","public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1614051","bugzilla_description":"CVE-2018-15209 libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16335","severity":"moderate","public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1624981","bugzilla_description":"CVE-2018-16335 libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16335.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14373","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609400","bugzilla_description":"CVE-2018-14373 libtiff: NULL dereference in TIFFFindField in tif_dirinfo.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14373.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14374","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609406","bugzilla_description":"CVE-2018-14374 libtiff: NULL dereference in unixErrorHandler in tif_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14374.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14375","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609411","bugzilla_description":"CVE-2018-14375 libtiff: NULL dereference in TIFFRGBAImageOK in tif_getimage.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14375.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14378","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609417","bugzilla_description":"CVE-2018-14378 libtiff: NULL dereference in TIFFWriteBufferSetup in tif_write.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14378.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12900","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2019:2053","RHSA-2019:3419"],"bugzilla":"1595575","bugzilla_description":"CVE-2018-12900 libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libtiff-0:4.0.3-32.el7","libtiff-0:4.0.9-15.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12900.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-7456","severity":"low","public_date":"2018-02-24T00:00:00Z","advisories":["RHSA-2019:2053","RHSA-2019:2051"],"bugzilla":"1556708","bugzilla_description":"CVE-2018-7456 libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["compat-libtiff3-0:3.9.4-12.el7","libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5784","severity":"low","public_date":"2018-01-18T00:00:00Z","advisories":[],"bugzilla":"1537740","bugzilla_description":"CVE-2018-5784 libtiff: uncontrolled resource consumption in TIFFSetDirectory function in tif_dir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5784.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17942","severity":"low","public_date":"2017-12-28T00:00:00Z","advisories":[],"bugzilla":"1529524","bugzilla_description":"CVE-2017-17942 libtiff: Heap-based buffer overflow in PackBitsEncode function in tif_packbits.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-17095","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":[],"bugzilla":"1524284","bugzilla_description":"CVE-2017-17095 libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16232","severity":"low","public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1516189","bugzilla_description":"CVE-2017-16232 libtiff: Memory leaks in tif_open.c, tif_lzw.c, and tif_aux.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13726","severity":"low","public_date":"2017-08-21T00:00:00Z","advisories":[],"bugzilla":"1488886","bugzilla_description":"CVE-2017-13726 libtiff: Reachable assertion abort in the function TIFFWriteDirectorySec()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13726.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13727","severity":"low","public_date":"2017-08-21T00:00:00Z","advisories":[],"bugzilla":"1488887","bugzilla_description":"CVE-2017-13727 libtiff: Reachable assertion abort in the function TIFFWriteDirectoryTagSubifd()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13727.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12944","severity":"low","public_date":"2017-08-06T00:00:00Z","advisories":[],"bugzilla":"1487202","bugzilla_description":"CVE-2017-12944 libtiff: Mishandled memory allocation for short files in the TIFFReadDirEntryArray function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12944.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11613","severity":null,"public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475530","bugzilla_description":"CVE-2017-11613 libtiff: Memory leak via corrupt td_imagelength in TIFFOpen function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11613.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11335","severity":"moderate","public_date":"2017-07-14T00:00:00Z","advisories":[],"bugzilla":"1474356","bugzilla_description":"CVE-2017-11335 libtiff: Heap-based buffer overflow in tiff2pdf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11335.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-9935","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469725","bugzilla_description":"CVE-2017-9935 libtiff: Heap-based buffer overflow in t2p_write_pdf function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9935.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9936","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469728","bugzilla_description":"CVE-2017-9936 libtiff: memory leak in tif_jbig.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9936.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9937","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469732","bugzilla_description":"CVE-2017-9937 libtiff: memory malloc failure in tif_jbig.c could cause DOS.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9937.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10688","severity":"low","public_date":"2017-06-29T00:00:00Z","advisories":[],"bugzilla":"1470241","bugzilla_description":"CVE-2017-10688 libtiff: Assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10688.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9147","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1454655","bugzilla_description":"CVE-2017-9147 libtiff: Out of bounds read in _TIFFVGetField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9147.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9117","severity":"moderate","public_date":"2017-05-07T00:00:00Z","advisories":[],"bugzilla":"1456756","bugzilla_description":"CVE-2017-9117 libtiff: Heap-based buffer over-read in bmp2tiff","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9117.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9403","severity":"low","public_date":"2017-04-20T00:00:00Z","advisories":[],"bugzilla":"1458902","bugzilla_description":"CVE-2017-9403 libtiff: Memory leak in TIFFReadDirEntryLong8Array","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9403.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9404","severity":"low","public_date":"2017-04-20T00:00:00Z","advisories":[],"bugzilla":"1458904","bugzilla_description":"CVE-2017-9404 libtiff: Memory leak in OJPEGReadHeaderInfoSecTablesQTable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9404.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7595","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441248","bugzilla_description":"CVE-2017-7595 libtiff: Divide-by-zero in JPEGSetupEncode (tiff_jpeg.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7595.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7596","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441250","bugzilla_description":"CVE-2017-7596 libtiff: Float out of range issue in tif_dir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7596.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7597","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441252","bugzilla_description":"CVE-2017-7597 libtiff: Float out of range issue in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7597.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7598","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441254","bugzilla_description":"CVE-2017-7598 libtiff: Divide-by-zero in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7598.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7599","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441259","bugzilla_description":"CVE-2017-7599 libtiff: Unsigned short out of range in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7599.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7600","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441260","bugzilla_description":"CVE-2017-7600 libtiff: Unsigned char out of range in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7600.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7601","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441261","bugzilla_description":"CVE-2017-7601 libtiff: Signed integer overflow in tif_jpeg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7601.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7602","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441263","bugzilla_description":"CVE-2017-7602 libtiff: Signed integer overflow in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7602.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5563","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1416109","bugzilla_description":"CVE-2017-5563 libtiff: Heap-buffer overflow in LZWEncode tif_lzw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5563.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5225","severity":"moderate","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1412716","bugzilla_description":"CVE-2017-5225 libtiff: Heap-buffer overflow in tools/tiffcp via crafted BitsPerSample value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5225.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-7592","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441240","bugzilla_description":"CVE-2017-7592 libtiff: Left shift of unsigned char without a cast","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-704","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7592.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7593","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441246","bugzilla_description":"CVE-2017-7593 libtiff: tif_rawdata not properly initialized in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7593.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7594","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441247","bugzilla_description":"CVE-2017-7594 libtiff: Memory leak in OJPEGReadHeaderInfoSecTablesDcTable function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7594.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10094","severity":"moderate","public_date":"2016-12-20T00:00:00Z","advisories":[],"bugzilla":"1410119","bugzilla_description":"CVE-2016-10094 libtiff: Off-by-one error in t2p_readwrite_pdf_image_tile() causing heap buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10094.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10095","severity":null,"public_date":"2016-12-04T00:00:00Z","advisories":[],"bugzilla":"1410063","bugzilla_description":"CVE-2016-10095 libtiff: Stack-based buffer overflow in _TIFFVGetField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10095.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-10092","severity":"moderate","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1410067","bugzilla_description":"CVE-2016-10092 libtiff: Heap-based buffer overflow in _TIFFFax3fillruns","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10092.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10270","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438441","bugzilla_description":"CVE-2016-10270 libtiff: Heap-based buffer overflow in tiff_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10270.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10269","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438443","bugzilla_description":"CVE-2016-10269 libtiff: Heap-based buffer overflow in tiff_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10269.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10267","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438449","bugzilla_description":"CVE-2016-10267 libtiff: Divide-by-zero in tif_ojpeg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10267.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10271","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438453","bugzilla_description":"CVE-2016-10271 libtiff: Heap-based buffer overflow in tif_fax3.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10271.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10272","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438458","bugzilla_description":"CVE-2016-10272 libtiff: Heap-based buffer overflow in tif_next.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10272.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10268","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1438447","bugzilla_description":"CVE-2016-10268 libtiff: Integer underflow in tiffcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10268.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10266","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1438472","bugzilla_description":"CVE-2016-10266 libtiff: Divide-by-zero in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10266.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10093","severity":"moderate","public_date":"2016-11-27T00:00:00Z","advisories":[],"bugzilla":"1410116","bugzilla_description":"CVE-2016-10093 libtiff: Integer overflow in DECLAREreadFunc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10093.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9453","severity":"moderate","public_date":"2016-11-18T00:00:00Z","advisories":[],"bugzilla":"1397723","bugzilla_description":"CVE-2016-9453 libtiff: Out-of-bounds access in t2p_readwrite_pdf_image_tile()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9453.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9448","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1397734","bugzilla_description":"CVE-2016-9448 libtiff: Null pointer dereference in TIFFFetchNormalTag() (regression of CVE-2016-9297)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9532","severity":"low","public_date":"2016-11-11T00:00:00Z","advisories":[],"bugzilla":"1397726","bugzilla_description":"CVE-2016-9532 libtiff: Multiple uint32 overflows leading to heap buffer over-read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9532.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9273","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1395164","bugzilla_description":"CVE-2016-9273 libtiff: Out-of-bounds heap read in cpStrips","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9273.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9297","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1395264","bugzilla_description":"CVE-2016-9297 libtiff: Out-of-bounds heap read in _TIFFPrintField (tif_print.c:127)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-170","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9297.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9535","severity":"moderate","public_date":"2016-11-04T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397755","bugzilla_description":"CVE-2016-9535 libtiff: Predictor heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-5652","severity":"moderate","public_date":"2016-10-25T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1389222","bugzilla_description":"CVE-2016-5652 libtiff: tiff2pdf JPEG Compression Tables Heap Buffer Overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-5875","severity":"important","public_date":"2016-10-25T00:00:00Z","advisories":[],"bugzilla":"1389228","bugzilla_description":"CVE-2016-5875 libtiff: PixarLogDecode Heap Buffer Overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5875.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-8331","severity":"moderate","public_date":"2016-10-25T00:00:00Z","advisories":[],"bugzilla":"1389229","bugzilla_description":"CVE-2016-8331 libtiff: FAX IFD Entry Parsing Type Confusion","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-9539","severity":"moderate","public_date":"2016-10-14T00:00:00Z","advisories":[],"bugzilla":"1397767","bugzilla_description":"CVE-2016-9539 libtiff: Out-of-bounds read in readContigTilesIntoBuffer()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9539.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9538","severity":"moderate","public_date":"2016-10-08T00:00:00Z","advisories":[],"bugzilla":"1397765","bugzilla_description":"CVE-2016-9538 libtiff: Integer overflow leads to reading undefined buffer in readContigStripsIntoBuffer()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9538.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9540","severity":"moderate","public_date":"2016-10-08T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397768","bugzilla_description":"CVE-2016-9540 libtiff: cpStripToTile heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9540.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9534","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397751","bugzilla_description":"CVE-2016-9534 libtiff: TIFFFlushData1 heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9534.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9536","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397758","bugzilla_description":"CVE-2016-9536 libtiff: t2p_process_jpeg_strip heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9537","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397760","bugzilla_description":"CVE-2016-9537 libtiff: Out-of-bounds write vulnerabilities in tools/tiffcrop.c","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9537.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9533","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397769","bugzilla_description":"CVE-2016-9533 libtiff: PixarLog horizontalDifference heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9533.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6223","severity":"moderate","public_date":"2016-07-10T00:00:00Z","advisories":[],"bugzilla":"1356867","bugzilla_description":"CVE-2016-6223 libtiff: Out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6223.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-5322","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346683","bugzilla_description":"CVE-2016-5322 libtiff: Out-of-bounds read in extractContigSamplesBytes() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5322.json"},{"CVE":"CVE-2016-5320","severity":"important","public_date":"2016-06-15T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1346687","bugzilla_description":"CVE-2016-5320 libtiff: Out-of-bounds write in PixarLogDecode() function in tif_pixarlog.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-5317","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346689","bugzilla_description":"CVE-2016-5317 libtiff: Out-of-bounds write in PixarLogDecode() function in libtiff.so","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5317.json"},{"CVE":"CVE-2016-5316","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346690","bugzilla_description":"CVE-2016-5316 libtiff: Out-of-bounds read in PixarLogCleanup() function in tif_pixarlog.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5316.json"},{"CVE":"CVE-2016-5315","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346694","bugzilla_description":"CVE-2016-5315 libtiff: Out-of-bounds read in setByteArray() function in tif_dir.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5315.json"},{"CVE":"CVE-2016-5321","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346695","bugzilla_description":"CVE-2016-5321 libtiff: tiffcrop readSeparateTilesIntoBuffer() memory corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5321.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-5323","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346696","bugzilla_description":"CVE-2016-5323 libtiff: more tiffcrop readSeparateTilesIntoBuffer() memory corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-5314","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346697","bugzilla_description":"CVE-2016-5314 libtiff: Out-of-bounds write in PixarLogDecode() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5314.json"},{"CVE":"CVE-2016-5102","severity":"moderate","public_date":"2016-05-30T00:00:00Z","advisories":[],"bugzilla":"1343407","bugzilla_description":"CVE-2016-5102 libtiff: Buffer overflow in readgifimage()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5102.json"},{"CVE":"CVE-2016-5318","severity":"moderate","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1344068","bugzilla_description":"CVE-2016-5318 libtiff: Stack-based buffer overflow in thumbnail's _TIFFVGetField function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5318.json"},{"CVE":"CVE-2016-5319","severity":"moderate","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1344069","bugzilla_description":"CVE-2016-5319 libtiff: Heap-based buffer overflow in bmp2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5319.json"},{"CVE":"CVE-2016-3990","severity":"important","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1326246","bugzilla_description":"CVE-2016-3990 libtiff: out-of-bounds write in horizontalDifference8()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3990.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3991","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1326249","bugzilla_description":"CVE-2016-3991 libtiff: out-of-bounds write in loadImage() function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3991.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-3633","severity":"low","public_date":"2016-04-11T00:00:00Z","advisories":[],"bugzilla":"1326255","bugzilla_description":"CVE-2016-3633 libtiff: out-of-bounds read in the _setrow function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3633.json"},{"CVE":"CVE-2016-3623","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325089","bugzilla_description":"CVE-2016-3623 libtiff: divide by zero in the rgb2ycybr tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3623.json"},{"CVE":"CVE-2016-3624","severity":"low","public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325090","bugzilla_description":"CVE-2016-3624 libtiff: out of bounds write in the rgb2ycybr tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3624.json"},{"CVE":"CVE-2016-3625","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325091","bugzilla_description":"CVE-2016-3625 libtiff: out of bounds read in the tiff2bw tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3625.json"},{"CVE":"CVE-2016-3945","severity":"moderate","public_date":"2016-04-08T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1325093","bugzilla_description":"CVE-2016-3945 libtiff: out-of-bounds write in the tiff2rgba tool","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3945.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3632","severity":"moderate","public_date":"2016-04-08T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1325095","bugzilla_description":"CVE-2016-3632 libtiff: out-of-bounds write in _TIFFVGetField function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3632.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3658","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1326257","bugzilla_description":"CVE-2016-3658 libtiff: out-of-bounds read in the TIFFWriteDirectoryTagLongLong8Array function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3658.json"},{"CVE":"CVE-2016-3634","severity":"low","public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1326267","bugzilla_description":"CVE-2016-3634 libtiff: out-of-bounds read in the tagCompare function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3634.json"},{"CVE":"CVE-2016-3619","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316569","bugzilla_description":"CVE-2016-3619 libtiff: bmp2tiff DumpModeEncode OOB read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3619.json"},{"CVE":"CVE-2016-3620","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316859","bugzilla_description":"CVE-2016-3620 libtiff: Out-of-bound read in ZIPEncode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3620.json"},{"CVE":"CVE-2016-3631","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316872","bugzilla_description":"CVE-2016-3631 libtiff: thumbnail tool out-of-bounds read vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3631.json"},{"CVE":"CVE-2016-3621","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1324822","bugzilla_description":"CVE-2016-3621 libtiff: out of bounds read in the bmp2tiff tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3621.json"},{"CVE":"CVE-2016-3622","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1324823","bugzilla_description":"CVE-2016-3622 libtiff: Division by zero in fpAcc function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3622.json"},{"CVE":"CVE-2016-3186","severity":"moderate","public_date":"2016-03-30T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1319666","bugzilla_description":"CVE-2016-3186 libtiff: buffer overflow in gif2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3186.json"},{"CVE":"CVE-2015-8870","severity":"moderate","public_date":"2015-01-28T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1402778","bugzilla_description":"CVE-2015-8870 libtiff: Integer overflow in tools/bmp2tiff.c","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-190","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libupower-glib1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libupower-glib1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libupower-glib1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libxcb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libxcb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-libxcb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-openldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-openldap_security_api_results.json
new file mode 100644
index 0000000..a929b53
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-openldap_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12243","severity":"moderate","public_date":"2020-04-28T00:00:00Z","advisories":["RHSA-2020:4041"],"bugzilla":"1833535","bugzilla_description":"CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openldap-0:2.4.44-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12243.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15719","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":["RHBA-2019:3674","RHBA-2019:3303"],"bugzilla":"1853350","bugzilla_description":"CVE-2020-15719 openldap: Certificate validation incorrectly matches name against CN-ID","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":["openldap-0:2.4.46-10.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15719.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-13057","severity":"moderate","public_date":"2019-07-25T00:00:00Z","advisories":[],"bugzilla":"1730472","bugzilla_description":"CVE-2019-13057 openldap: Information disclosure issue in slapd component","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13057.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-13565","severity":"moderate","public_date":"2019-07-24T00:00:00Z","advisories":[],"bugzilla":"1730477","bugzilla_description":"CVE-2019-13565 openldap: ACL restrictions bypass due to sasl_ssf value being set permanently","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13565.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-17740","severity":"moderate","public_date":"2017-10-20T00:00:00Z","advisories":[],"bugzilla":"1527076","bugzilla_description":"CVE-2017-17740 openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-14159","severity":"low","public_date":"2017-07-28T00:00:00Z","advisories":[],"bugzilla":"1488751","bugzilla_description":"CVE-2017-14159 openldap: Privilege escalation via PID file manipulation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14159.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-openmpi16_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-openmpi16_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-openmpi16_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-opensm-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-opensm-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-opensm-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-poppler022-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-poppler022-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-poppler022-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-poppler022-qt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-poppler022-qt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-poppler022-qt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-poppler022_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-poppler022_security_api_results.json
new file mode 100644
index 0000000..d45ef79
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/compat-poppler022_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-9083","severity":"low","public_date":"2017-05-18T00:00:00Z","advisories":[],"bugzilla":"1453198","bugzilla_description":"CVE-2017-9083 poppler: Null pointer dereference in the JPXStream::readUByte function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9083.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8868","severity":"moderate","public_date":"2016-04-11T00:00:00Z","advisories":["RHSA-2016:2580"],"bugzilla":"1326225","bugzilla_description":"CVE-2015-8868 poppler: heap buffer overflow in ExponentialFunction","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["poppler-0:0.26.5-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8868.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/comps-extras_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/comps-extras_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/comps-extras_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/conman_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/conman_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/conman_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/conntrack-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/conntrack-tools_security_api_results.json
new file mode 100644
index 0000000..6fa8bb5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/conntrack-tools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-6496","severity":"moderate","public_date":"2014-03-24T00:00:00Z","advisories":[],"bugzilla":"1253755","bugzilla_description":"CVE-2015-6496 conntrackd crash on unexpected network traffic","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6496.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/control-center-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/control-center-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/control-center-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/control-center_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/control-center_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/control-center_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/convmv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/convmv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/convmv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/coolkey_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/coolkey_security_api_results.json
new file mode 100644
index 0000000..a5cef58
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/coolkey_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2007-4129","severity":"low","public_date":"2007-09-06T00:00:00Z","advisories":["RHSA-2007:0631"],"bugzilla":"251774","bugzilla_description":"CVE-2007-4129 coolkey file and directory permission flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["coolkey-0:1.1.0-5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4129.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/copy-jdk-configs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/copy-jdk-configs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/copy-jdk-configs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/coreutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/coreutils_security_api_results.json
new file mode 100644
index 0000000..72b74ed
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/coreutils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-17942","severity":"low","public_date":"2018-09-19T00:00:00Z","advisories":[],"bugzilla":"1635896","bugzilla_description":"CVE-2018-17942 gnulib: heap-based buffer overflow in convert_to_decimal function in vasnprintf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1063","severity":"low","public_date":"2018-02-28T00:00:00Z","advisories":["RHSA-2018:0913"],"bugzilla":"1550122","bugzilla_description":"CVE-2018-1063 policycoreutils: Relabelling of symbolic links in /tmp and /var/tmp change the context of their target instead","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59->CWE-282","affected_packages":["policycoreutils-0:2.5-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1063.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.9"},{"CVE":"CVE-2017-18018","severity":"moderate","public_date":"2017-12-20T00:00:00Z","advisories":[],"bugzilla":"1532284","bugzilla_description":"CVE-2017-18018 coreutils: race condition vulnerability in chown and chgrp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18018.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2017-7476","severity":"important","public_date":"2017-04-27T00:00:00Z","advisories":[],"bugzilla":"1445185","bugzilla_description":"CVE-2017-7476 gnulib: Out-of-bounds write by setting a large TZ variable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7476.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-2616","severity":"moderate","public_date":"2017-02-22T00:00:00Z","advisories":["RHSA-2017:0654","RHSA-2017:0907"],"bugzilla":"1418710","bugzilla_description":"CVE-2017-2616 util-linux: Sending SIGKILL to other processes with root privileges via su","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":["coreutils-0:8.4-46.el6","util-linux-0:2.23.2-33.el7_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-7545","severity":"important","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:0535","RHSA-2017:0536","RHSA-2016:2702"],"bugzilla":"1378577","bugzilla_description":"CVE-2016-7545 policycoreutils: SELinux sandbox escape via TIOCSTI ioctl","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["policycoreutils-0:2.0.83-30.1.el6_8","policycoreutils-0:2.2.5-21.el7_2","policycoreutils-0:2.5-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7545.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2016-2781","severity":"moderate","public_date":"2016-02-28T00:00:00Z","advisories":[],"bugzilla":"1312863","bugzilla_description":"CVE-2016-2781 coreutils: Non-privileged session can escape to the parent session in chroot","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2781.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2015-4041","severity":"low","public_date":"2015-04-27T00:00:00Z","advisories":[],"bugzilla":"1223813","bugzilla_description":"CVE-2015-4041 coreutils: heap buffer overflow in sort(1) keycompare_mb()","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4041.json"},{"CVE":"CVE-2015-4042","severity":"low","public_date":"2015-04-27T00:00:00Z","advisories":[],"bugzilla":"1223817","bugzilla_description":"CVE-2015-4042 coreutils: possible buffer overflow in keycompare_mb()","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4042.json"},{"CVE":"CVE-2015-1865","severity":"low","public_date":"2015-04-14T00:00:00Z","advisories":[],"bugzilla":"1211300","bugzilla_description":"CVE-2015-1865 coreutils: \"time of check to time of use\" race condition fts.c","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1865.json"},{"CVE":"CVE-2014-9471","severity":"low","public_date":"2014-02-25T00:00:00Z","advisories":[],"bugzilla":"1167548","bugzilla_description":"CVE-2014-9471 coreutils: memory corruption flaw in parse_datetime()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9471.json"},{"CVE":"CVE-2013-0221","severity":"low","public_date":"2013-01-15T00:00:00Z","advisories":["RHSA-2013:1652"],"bugzilla":"903464","bugzilla_description":"CVE-2013-0221 coreutils: segfault in \"sort -d\" and \"sort -M\" with long line input","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-391->CWE-665","affected_packages":["coreutils-0:8.4-31.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0221.json"},{"CVE":"CVE-2013-0223","severity":"low","public_date":"2013-01-15T00:00:00Z","advisories":["RHSA-2013:1652"],"bugzilla":"903466","bugzilla_description":"CVE-2013-0223 coreutils: segfault in \"join -i\" with long line input","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-391->CWE-665","affected_packages":["coreutils-0:8.4-31.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0223.json"},{"CVE":"CVE-2013-0222","severity":"low","public_date":"2012-12-31T00:00:00Z","advisories":["RHSA-2013:1652"],"bugzilla":"903465","bugzilla_description":"CVE-2013-0222 coreutils: segfault in uniq with long line input","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-391->CWE-665","affected_packages":["coreutils-0:8.4-31.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0222.json"},{"CVE":"CVE-2014-3215","severity":"important","public_date":"2012-12-08T00:00:00Z","advisories":["RHSA-2015:0864","RHBA-2015:2161"],"bugzilla":"1095855","bugzilla_description":"CVE-2014-3215 policycoreutils: local privilege escalation via seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-270","affected_packages":["kernel-0:2.6.32-504.16.2.el6","libcap-ng-0:0.7.5-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3215.json"},{"CVE":"CVE-2011-1011","severity":"important","public_date":"2011-02-22T00:00:00Z","advisories":["RHSA-2011:0414"],"bugzilla":"633544","bugzilla_description":"CVE-2011-1011 policycoreutils: insecure temporary directory handling in seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["policycoreutils-0:2.0.83-19.8.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1011.json"},{"CVE":"CVE-2008-1946","severity":"low","public_date":"2008-07-24T00:00:00Z","advisories":["RHSA-2008:0780"],"bugzilla":"446488","bugzilla_description":"CVE-2008-1946 /etc/pam.d/su is wrong in RHEL-4.6","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["coreutils-0:5.2.1-31.8.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1946.json"},{"CVE":"CVE-2005-4890","severity":"important","public_date":"2004-07-26T00:00:00Z","advisories":[],"bugzilla":"710208","bugzilla_description":"CVE-2005-4890 coreutils: tty hijacking possible in \"su\" via TIOCSTI ioctl","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4890.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosync-qdevice_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosync-qdevice_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosync-qdevice_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosync-qnetd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosync-qnetd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosync-qnetd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosync_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosync_security_api_results.json
new file mode 100644
index 0000000..c221a46
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosync_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1084","severity":"important","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2018:1169"],"bugzilla":"1552830","bugzilla_description":"CVE-2018-1084 corosync: Integer overflow in exec/totemcrypto.c:authenticate_nss_2_3() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["corosync-0:2.4.3-2.el7_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1084.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2013-0250","severity":"moderate","public_date":"2013-01-18T00:00:00Z","advisories":[],"bugzilla":"906834","bugzilla_description":"corosync 2.x: Remote DoS due improper HMAC initialization","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0250.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosynclib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosynclib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosynclib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosynclib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosynclib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/corosynclib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cpio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cpio_security_api_results.json
new file mode 100644
index 0000000..ba15fc1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cpio_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14866","severity":"moderate","public_date":"2019-08-30T00:00:00Z","advisories":["RHSA-2020:3908"],"bugzilla":"1765511","bugzilla_description":"CVE-2019-14866 cpio: improper input validation when writing tar header fields leads to unexpect tar generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["cpio-0:2.11-28.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14866.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-7516","severity":"moderate","public_date":"2017-06-05T00:00:00Z","advisories":[],"bugzilla":"1539685","bugzilla_description":"CVE-2017-7516 cpio: --no-absolute-filenames bypass via symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7516.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-2037","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1300207","bugzilla_description":"CVE-2016-2037 cpio: out of bounds write","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2015-1197","severity":"low","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1179773","bugzilla_description":"CVE-2015-1197 cpio: directory traversal through symlinks","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1197.json"},{"CVE":"CVE-2014-9112","severity":"moderate","public_date":"2014-11-23T00:00:00Z","advisories":["RHSA-2015:2108"],"bugzilla":"1167571","bugzilla_description":"CVE-2014-9112 cpio: heap-based buffer overflow flaw in list_file()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["cpio-0:2.11-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9112.json"},{"CVE":"CVE-2010-0624","severity":"moderate","public_date":"2010-03-10T00:00:00Z","advisories":["RHSA-2010:0145","RHSA-2010:0144","RHSA-2010:0143","RHSA-2010:0142","RHSA-2010:0141"],"bugzilla":"564368","bugzilla_description":"CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially-crafted archive","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["cpio-0:2.5-6.RHEL3","tar-0:1.14-13.el4_8.1","tar-0:1.13.25-16.RHEL3","cpio-0:2.6-23.el5_4.1","tar-2:1.15.1-23.0.1.el5_4.2","cpio-0:2.5-16.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0624.json"},{"CVE":"CVE-2007-4476","severity":"low","public_date":"2007-08-17T00:00:00Z","advisories":["RHSA-2010:0144","RHSA-2010:0141"],"bugzilla":"280961","bugzilla_description":"CVE-2007-4476 tar/cpio stack crashing in safer_name_suffix","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tar-0:1.14-13.el4_8.1","cpio-0:2.6-23.el5_4.1","tar-2:1.15.1-23.0.1.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4476.json"},{"CVE":"CVE-2005-4268","severity":"low","public_date":"2005-11-07T00:00:00Z","advisories":["RHSA-2007:0245","RHSA-2010:0145"],"bugzilla":"229191","bugzilla_description":"CVE-2005-4268 cpio large filesize buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cpio-0:2.5-6.RHEL3","cpio-0:2.5-13.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4268.json"},{"CVE":"CVE-2005-1111","severity":"moderate","public_date":"2005-04-13T00:00:00Z","advisories":["RHSA-2005:378","RHSA-2005:806"],"bugzilla":"1617604","bugzilla_description":"CVE-2005-1111 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cpio-0:2.5-4.RHEL3","cpio-0:2.5-8.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1111.json"},{"CVE":"CVE-1999-1572","severity":"low","public_date":"1996-07-16T00:00:00Z","advisories":["RHSA-2005:806","RHSA-2005:073","RHSA-2005:080"],"bugzilla":"1616458","bugzilla_description":"CVE-1999-1572 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cpio-0:2.5-7.EL4.1","cpio-0:2.5-3e.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-1999-1572.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cpp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cpp_security_api_results.json
new file mode 100644
index 0000000..2b0ab82
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cpp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14274","severity":"moderate","public_date":"2019-07-26T00:00:00Z","advisories":[],"bugzilla":"1740464","bugzilla_description":"CVE-2019-14274 mcpp: heap based buffer overflow in function do_msg() in support.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14274.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-6285","severity":"low","public_date":"2019-01-14T00:00:00Z","advisories":[],"bugzilla":"1668104","bugzilla_description":"CVE-2019-6285 yaml-cpp: DoS in SingleDocParser::HandleFlowSequence funtion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-20710","severity":null,"public_date":"2019-01-14T00:00:00Z","advisories":[],"bugzilla":"1686723","bugzilla_description":"CVE-2018-20710 yaml-cpp: remote dos via crafted YAML file in function SingleDocParser::HandleFlowSequence","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20710.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-6292","severity":"low","public_date":"2019-01-02T00:00:00Z","advisories":[],"bugzilla":"1668108","bugzilla_description":"CVE-2019-6292 yaml-cpp: DoS in singledocparser.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6292.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20573","severity":"low","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1665567","bugzilla_description":"CVE-2018-20573 yaml-cpp: DoS in Scanner::EnsureTokensInQueue function in yaml-cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20573.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-20574","severity":"low","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1665571","bugzilla_description":"CVE-2018-20574 yaml-cpp: DoS in SingleDocParser::HandleFlowMap function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20574.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-11692","severity":"moderate","public_date":"2017-07-28T00:00:00Z","advisories":[],"bugzilla":"1477074","bugzilla_description":"CVE-2017-11692 yaml-cpp: assertion failure in Token& Scanner::peek function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11692.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-5950","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":[],"bugzilla":"1439662","bugzilla_description":"CVE-2017-5950 yaml-cpp: Stack overflow in HandleNode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5950.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-0224","severity":"moderate","public_date":"2015-01-27T00:00:00Z","advisories":["RHBA-2016:1500","RHSA-2015:0662","RHSA-2015:0661","RHSA-2015:0660","RHSA-2015:0708","RHSA-2015:0707"],"bugzilla":"1186302","bugzilla_description":"CVE-2015-0224 qpid-cpp: AMQP 0-10 protocol sequence-set maximal range DoS (incomplete CVE-2015-0203 fix)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["qpid-cpp-0:0.22-51.el7","qpid-cpp-0:0.18-38.el6","qpid-cpp-0:0.18-38.el7","qpid-cpp-mrg-0:0.18-38.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0224.json"},{"CVE":"CVE-2015-0223","severity":"moderate","public_date":"2015-01-27T00:00:00Z","advisories":["RHBA-2016:1500","RHSA-2015:0662","RHSA-2015:0661","RHSA-2015:0660","RHSA-2015:0708","RHSA-2015:0707"],"bugzilla":"1186308","bugzilla_description":"CVE-2015-0223 qpid-cpp: anonymous access to qpidd cannot be prevented","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qpid-cpp-0:0.22-51.el7","qpid-cpp-0:0.18-38.el6","qpid-cpp-0:0.18-38.el7","qpid-cpp-mrg-0:0.18-38.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0223.json"},{"CVE":"CVE-2015-0203","severity":"moderate","public_date":"2015-01-13T00:00:00Z","advisories":["RHBA-2016:1500","RHSA-2015:0662","RHSA-2015:0661","RHSA-2015:0660","RHSA-2015:0708","RHSA-2015:0707"],"bugzilla":"1181721","bugzilla_description":"CVE-2015-0203 qpid-cpp: 3 qpidd DoS issues in AMQP 0-10 protocol handling","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["qpid-cpp-0:0.22-51.el7","qpid-cpp-0:0.18-38.el6","qpid-cpp-0:0.18-38.el7","qpid-cpp-mrg-0:0.18-38.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0203.json"},{"CVE":"CVE-2014-3629","severity":"low","public_date":"2014-11-07T00:00:00Z","advisories":[],"bugzilla":"1164848","bugzilla_description":"CVE-2014-3629 qpid-cpp: XXE vulnerability causes outgoing HTTP connections","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3629.json"},{"CVE":"CVE-2014-0212","severity":"moderate","public_date":"2013-06-19T00:00:00Z","advisories":[],"bugzilla":"1073285","bugzilla_description":"CVE-2014-0212 qpid-cpp: on-demand ACL policy loading enables a denial of service by consuming all available file descriptors","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0212.json"},{"CVE":"CVE-2012-4446","severity":"moderate","public_date":"2013-03-06T00:00:00Z","advisories":["RHSA-2013:0562","RHSA-2013:0561"],"bugzilla":"851355","bugzilla_description":"CVE-2012-4446 qpid-cpp: qpid authentication bypass","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["qpid-cpp-0:0.18-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4446.json"},{"CVE":"CVE-2012-4458","severity":"moderate","public_date":"2013-03-05T00:00:00Z","advisories":["RHSA-2013:0562","RHSA-2013:0561"],"bugzilla":"861234","bugzilla_description":"CVE-2012-4458 qpid-cpp: long arrays of zero-width types cause a denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["qpid-cpp-0:0.18-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4458.json"},{"CVE":"CVE-2012-4459","severity":"moderate","public_date":"2013-03-05T00:00:00Z","advisories":["RHSA-2013:0562","RHSA-2013:0561"],"bugzilla":"861241","bugzilla_description":"CVE-2012-4459 qpid-cpp: crash due to qpid::framing::Buffer::checkAvailable() wraparound","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["qpid-cpp-0:0.18-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4459.json"},{"CVE":"CVE-2012-4460","severity":"moderate","public_date":"2013-03-05T00:00:00Z","advisories":[],"bugzilla":"861242","bugzilla_description":"CVE-2012-4460 qpid-cpp: lack of bounds checking in qpid::framing::Buffer can lead to DoS if asserts are enabled","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4460.json"},{"CVE":"CVE-2012-3467","severity":"moderate","public_date":"2012-06-22T00:00:00Z","advisories":["RHSA-2012:1277","RHSA-2012:1279"],"bugzilla":"836276","bugzilla_description":"CVE-2012-3467 qpid-cpp-server-cluster: unauthorized broker access caused by the use of NullAuthenticator catch-up shadow connections","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["qpid-cpp-0:0.14-22.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3467.json"},{"CVE":"CVE-2011-3620","severity":"moderate","public_date":"2012-04-30T00:00:00Z","advisories":["RHSA-2012:0528","RHSA-2012:0529"],"bugzilla":"747078","bugzilla_description":"CVE-2011-3620 qpid-cpp: cluster authentication ignores cluster-* settings","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qpid-cpp-0:0.14-14.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3620.json"},{"CVE":"CVE-2012-2145","severity":"moderate","public_date":"2012-04-24T00:00:00Z","advisories":["RHSA-2012:1277","RHSA-2012:1269"],"bugzilla":"817175","bugzilla_description":"CVE-2012-2145 qpid-cpp: not closing incomplete connections exhausts file descriptors, leading to DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["qpid-cpp-0:0.14-22.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2145.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cpuid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cpuid_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cpuid_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cracklib-dicts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cracklib-dicts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cracklib-dicts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cracklib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cracklib_security_api_results.json
new file mode 100644
index 0000000..bf0f557
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cracklib_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-6318","severity":"low","public_date":"2016-08-16T00:00:00Z","advisories":[],"bugzilla":"1364944","bugzilla_description":"CVE-2016-6318 cracklib: Stack-based buffer overflow when parsing large GECOS field","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6318.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash-gcore-command_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash-gcore-command_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash-gcore-command_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash-ptdump-command_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash-ptdump-command_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash-ptdump-command_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash-trace-command_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash-trace-command_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash-trace-command_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash_security_api_results.json
new file mode 100644
index 0000000..c2f8cc0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crash_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3509","severity":"moderate","public_date":"2012-08-29T00:00:00Z","advisories":[],"bugzilla":"849693","bugzilla_description":"CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3509.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crda_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crda_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crda_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/createrepo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/createrepo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/createrepo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/criu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/criu_security_api_results.json
new file mode 100644
index 0000000..b7705d6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/criu_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5228","severity":"moderate","public_date":"2015-08-25T00:00:00Z","advisories":[],"bugzilla":"1255782","bugzilla_description":"CVE-2015-5228 criu: arbitrary file creation and chown","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5228.json"},{"CVE":"CVE-2015-5231","severity":"low","public_date":"2015-08-25T00:00:00Z","advisories":[],"bugzilla":"1256728","bugzilla_description":"CVE-2015-5231 criu: service daemon allows to bypass ptrace policy","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5231.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cronie-anacron_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cronie-anacron_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cronie-anacron_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cronie-noanacron_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cronie-noanacron_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cronie-noanacron_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cronie_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cronie_security_api_results.json
new file mode 100644
index 0000000..2a6ce69
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cronie_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9704","severity":"low","public_date":"2019-03-08T00:00:00Z","advisories":[],"bugzilla":"1687688","bugzilla_description":"CVE-2019-9704 vixie-cron: calloc return value resulting in remote dos","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9704.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-9705","severity":"moderate","public_date":"2019-03-08T00:00:00Z","advisories":[],"bugzilla":"1687694","bugzilla_description":"CVE-2019-9705 vixie-cron: memory consumption DoS via a large crontab file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9705.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-9706","severity":"moderate","public_date":"2019-03-08T00:00:00Z","advisories":[],"bugzilla":"1687706","bugzilla_description":"CVE-2019-9706 vixie-cron: use-after-free  resulting in dos","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9706.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2012-6097","severity":"low","public_date":"2012-10-22T00:00:00Z","advisories":[],"bugzilla":"893661","bugzilla_description":"CVE-2012-6097 cronie: fd leak in 1.4.8","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6097.json"},{"CVE":"CVE-2010-0424","severity":"low","public_date":"2010-02-18T00:00:00Z","advisories":["RHSA-2012:0304"],"bugzilla":"565809","bugzilla_description":"CVE-2010-0424 vixie-cron, cronie: Race condition by setting timestamp of user's crontab file, when editing the file","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["vixie-cron-4:4.1-81.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0424.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crontabs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crontabs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crontabs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crypto-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crypto-utils_security_api_results.json
new file mode 100644
index 0000000..82ec87f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/crypto-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3504","severity":"low","public_date":"2012-10-02T00:00:00Z","advisories":[],"bugzilla":"849256","bugzilla_description":"CVE-2012-3504 crypto-utils: insecure temporary file usage in genkey","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3504.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup-reencrypt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup-reencrypt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup-reencrypt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup_security_api_results.json
new file mode 100644
index 0000000..f554963
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cryptsetup_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14382","severity":"moderate","public_date":"2020-09-03T00:00:00Z","advisories":[],"bugzilla":"1874712","bugzilla_description":"CVE-2020-14382 cryptsetup: Out-of-bounds write when validating segments","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14382.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cscope_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cscope_security_api_results.json
new file mode 100644
index 0000000..0a5e32d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cscope_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2004-2541","severity":"moderate","public_date":"2009-04-30T00:00:00Z","advisories":["RHSA-2009:1102","RHSA-2009:1101"],"bugzilla":"490667","bugzilla_description":"CVE-2004-2541, CVE-2009-0148 cscope: multiple buffer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cscope-0:15.5-15.1.el5_3.1","cscope-0:15.5-16.RHEL3","cscope-0:15.5-10.RHEL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-2541.json"},{"CVE":"CVE-2009-0148","severity":"moderate","public_date":"2009-04-30T00:00:00Z","advisories":["RHSA-2009:1102","RHSA-2009:1101"],"bugzilla":"490667","bugzilla_description":"CVE-2004-2541, CVE-2009-0148 cscope: multiple buffer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cscope-0:15.5-15.1.el5_3.1","cscope-0:15.5-16.RHEL3","cscope-0:15.5-10.RHEL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0148.json"},{"CVE":"CVE-2006-4262","severity":"low","public_date":"2006-08-20T00:00:00Z","advisories":["RHSA-2009:1101"],"bugzilla":"203645","bugzilla_description":"CVE-2006-4262 cscope: multiple buffer overflows","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cscope-0:15.5-16.RHEL3","cscope-0:15.5-10.RHEL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4262.json"},{"CVE":"CVE-2009-1577","severity":"moderate","public_date":"2006-04-22T00:00:00Z","advisories":["RHSA-2009:1101"],"bugzilla":"499174","bugzilla_description":"CVE-2009-1577 cscope: putstring buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cscope-0:15.5-16.RHEL3","cscope-0:15.5-10.RHEL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1577.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ctags-etags_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ctags-etags_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ctags-etags_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ctags_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ctags_security_api_results.json
new file mode 100644
index 0000000..8dd6c0a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ctags_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-7204","severity":"moderate","public_date":"2014-03-25T00:00:00Z","advisories":[],"bugzilla":"1147339","bugzilla_description":"CVE-2014-7204 ctags: possible denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7204.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-aharoni-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-aharoni-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-aharoni-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-caladings-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-caladings-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-caladings-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-david-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-david-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-david-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-drugulin-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-drugulin-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-drugulin-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-ellinia-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-ellinia-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-ellinia-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-frank-ruehl-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-frank-ruehl-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-frank-ruehl-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-hadasim-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-hadasim-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-hadasim-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-keteryg-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-keteryg-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-keteryg-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-miriam-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-miriam-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-miriam-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-miriam-mono-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-miriam-mono-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-miriam-mono-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-nachlieli-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-nachlieli-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-nachlieli-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-simple-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-simple-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-simple-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-stamashkenaz-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-stamashkenaz-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-stamashkenaz-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-stamsefarad-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-stamsefarad-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-stamsefarad-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-yehuda-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-yehuda-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/culmus-yehuda-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-filters-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-filters-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-filters-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-filters_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-filters_security_api_results.json
new file mode 100644
index 0000000..0f13677
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-filters_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-8560","severity":"moderate","public_date":"2015-12-12T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1291227","bugzilla_description":"CVE-2015-8560 cups-filters: foomatic-rip did not consider semicolon as illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8560.json"},{"CVE":"CVE-2015-8327","severity":"moderate","public_date":"2015-11-26T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1287523","bugzilla_description":"CVE-2015-8327 cups-filters: foomatic-rip did not consider the back tick as an illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8327.json"},{"CVE":"CVE-2015-3279","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:2360"],"bugzilla":"1238990","bugzilla_description":"CVE-2015-3279 cups-filters: texttopdf integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["cups-filters-0:1.0.35-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3279.json"},{"CVE":"CVE-2015-3258","severity":"moderate","public_date":"2015-06-26T00:00:00Z","advisories":["RHSA-2015:2360"],"bugzilla":"1235385","bugzilla_description":"CVE-2015-3258 cups-filters: texttopdf heap-based buffer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-122->CWE-125->CWE-787","affected_packages":["cups-filters-0:1.0.35-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3258.json"},{"CVE":"CVE-2015-2265","severity":"important","public_date":"2015-02-26T00:00:00Z","advisories":[],"bugzilla":"1199130","bugzilla_description":"CVE-2015-2265 cups-filters: remote command execution in remove_bad_chars() (incomplete fix for CVE-2014-2707)","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2265.json"},{"CVE":"CVE-2014-4338","severity":"moderate","public_date":"2014-04-25T00:00:00Z","advisories":["RHSA-2014:1795"],"bugzilla":"1091568","bugzilla_description":"CVE-2014-4338 cups-filters: unsupported BrowseAllow value lets cups-browsed accept from all hosts","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["cups-filters-0:1.0.35-15.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4338.json"},{"CVE":"CVE-2014-4336","severity":"important","public_date":"2014-04-23T00:00:00Z","advisories":[],"bugzilla":"1091565","bugzilla_description":"CVE-2014-4336 cups-filters: incomplete fix for CVE-2014-2707","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4336.json"},{"CVE":"CVE-2014-4337","severity":"moderate","public_date":"2014-04-23T00:00:00Z","advisories":["RHSA-2014:1795"],"bugzilla":"1111510","bugzilla_description":"CVE-2014-4337 cups-filters: cups-browsed DoS via process_browse_data() OOB read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-filters-0:1.0.35-15.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4337.json"},{"CVE":"CVE-2014-2707","severity":"important","public_date":"2014-04-01T00:00:00Z","advisories":[],"bugzilla":"1083326","bugzilla_description":"CVE-2014-2707 cups-filters: remote command injection in cups-browsed","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2707.json"},{"CVE":"CVE-2013-6475","severity":"moderate","public_date":"2014-03-11T00:00:00Z","advisories":[],"bugzilla":"1027550","bugzilla_description":"CVE-2013-6475 cups-filters: possible heap-based buffer overflows due to the use of gmalloc","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6475.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-lpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-lpd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-lpd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-pk-helper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-pk-helper_security_api_results.json
new file mode 100644
index 0000000..99ae3a5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups-pk-helper_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-4510","severity":"moderate","public_date":"2012-10-12T00:00:00Z","advisories":[],"bugzilla":"864515","bugzilla_description":"CVE-2012-4510 cups-pk-helper: Insecure wrapping of cupsGetFile() and cupsPutFile() methods","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:N","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4510.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups_security_api_results.json
new file mode 100644
index 0000000..3ecc5c1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cups_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-3898","severity":"low","public_date":"2020-04-20T00:00:00Z","advisories":[],"bugzilla":"1823964","bugzilla_description":"CVE-2020-3898 cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3898.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-8675","severity":"low","public_date":"2019-08-14T17:00:00Z","advisories":["RHSA-2020:3864","RHSA-2020:1765"],"bugzilla":"1738455","bugzilla_description":"CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["cups-1:1.6.3-51.el7","cups-1:2.2.6-33.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8675.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2019-8696","severity":"low","public_date":"2019-08-14T17:00:00Z","advisories":["RHSA-2020:3864","RHSA-2020:1765"],"bugzilla":"1738497","bugzilla_description":"CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["cups-1:1.6.3-51.el7","cups-1:2.2.6-33.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8696.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2018-4300","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1695929","bugzilla_description":"CVE-2018-4300 cups: Session cookie generated by the CUPS web interface is easy to guess","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4300.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"7.3"},{"CVE":"CVE-2018-4700","severity":"moderate","public_date":"2018-12-07T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1649347","bugzilla_description":"CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4700.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"7.3"},{"CVE":"CVE-2018-4180","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1607282","bugzilla_description":"CVE-2018-4180 cups: Local privilege escalation to root due to insecure environment variable handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-642","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4180.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-4182","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1607283","bugzilla_description":"CVE-2018-4182 cups: Sandbox bypass due to insecure error handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-4183","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1607284","bugzilla_description":"CVE-2018-4183 cups: Sandbox bypass due to profile misconfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4183.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-6553","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1607285","bugzilla_description":"CVE-2018-6553 cups: AppArmor cupsd Sandbox Bypass Due to Use of Hard Links","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6553.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-4181","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1607291","bugzilla_description":"CVE-2018-4181 cups: Manipulation of cupsd.conf by a local attacker resulting in limited reads of arbitrary files as root","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4181.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-18190","severity":"moderate","public_date":"2018-02-16T00:00:00Z","advisories":["RHSA-2020:3864"],"bugzilla":"1546395","bugzilla_description":"CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["cups-1:1.6.3-51.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18190.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2017-15400","severity":"important","public_date":"2017-10-27T00:00:00Z","advisories":[],"bugzilla":"1607288","bugzilla_description":"CVE-2017-15400 cups: Insufficient restriction of IPP filters allows a remote attacker to execute commands with the privilege level of cups daemon","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15400.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-18248","severity":"low","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1561296","bugzilla_description":"CVE-2017-18248 cups: Invalid usernames handled in scheduler/ipp.c:add_job() allow remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18248.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2015-8560","severity":"moderate","public_date":"2015-12-12T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1291227","bugzilla_description":"CVE-2015-8560 cups-filters: foomatic-rip did not consider semicolon as illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8560.json"},{"CVE":"CVE-2015-8327","severity":"moderate","public_date":"2015-11-26T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1287523","bugzilla_description":"CVE-2015-8327 cups-filters: foomatic-rip did not consider the back tick as an illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8327.json"},{"CVE":"CVE-2015-3279","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:2360"],"bugzilla":"1238990","bugzilla_description":"CVE-2015-3279 cups-filters: texttopdf integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["cups-filters-0:1.0.35-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3279.json"},{"CVE":"CVE-2015-3258","severity":"moderate","public_date":"2015-06-26T00:00:00Z","advisories":["RHSA-2015:2360"],"bugzilla":"1235385","bugzilla_description":"CVE-2015-3258 cups-filters: texttopdf heap-based buffer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-122->CWE-125->CWE-787","affected_packages":["cups-filters-0:1.0.35-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3258.json"},{"CVE":"CVE-2015-1158","severity":"important","public_date":"2015-06-10T00:00:00Z","advisories":["RHSA-2015:1123"],"bugzilla":"1221641","bugzilla_description":"CVE-2015-1158 cups: incorrect string reference counting (VU#810572)","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["cups-1:1.4.2-67.el6_6.1","cups-1:1.6.3-17.el7_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1158.json"},{"CVE":"CVE-2015-1159","severity":"moderate","public_date":"2015-06-10T00:00:00Z","advisories":["RHSA-2015:1123"],"bugzilla":"1221642","bugzilla_description":"CVE-2015-1159 cups: cross-site scripting flaw in CUPS web UI (VU#810572)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["cups-1:1.4.2-67.el6_6.1","cups-1:1.6.3-17.el7_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1159.json"},{"CVE":"CVE-2014-8166","severity":"low","public_date":"2015-03-24T00:00:00Z","advisories":[],"bugzilla":"1084577","bugzilla_description":"CVE-2014-8166 cups: code execution via unescape ANSI escape sequences","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8166.json"},{"CVE":"CVE-2015-2265","severity":"important","public_date":"2015-02-26T00:00:00Z","advisories":[],"bugzilla":"1199130","bugzilla_description":"CVE-2015-2265 cups-filters: remote command execution in remove_bad_chars() (incomplete fix for CVE-2014-2707)","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2265.json"},{"CVE":"CVE-2014-9679","severity":"moderate","public_date":"2015-02-10T00:00:00Z","advisories":["RHSA-2015:1123"],"bugzilla":"1191588","bugzilla_description":"CVE-2014-9679 cups: cupsRasterReadPixels buffer overflow","cvss_score":4.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-119","affected_packages":["cups-1:1.4.2-67.el6_6.1","cups-1:1.6.3-17.el7_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9679.json"},{"CVE":"CVE-2014-5029","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:1388","RHBA-2015:0386"],"bugzilla":"1122600","bugzilla_description":"CVE-2014-5029 cups: Incomplete fix for CVE-2014-3537","cvss_score":5.0,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:P/A:N","CWE":"CWE-59","affected_packages":["cups-1:1.4.2-67.el6","cups-1:1.6.3-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5029.json"},{"CVE":"CVE-2014-5030","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:1388","RHBA-2015:0386"],"bugzilla":"1128764","bugzilla_description":"CVE-2014-5030 cups: allows local users to read arbitrary files via a symlink attack","cvss_score":5.0,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:P/A:N","CWE":"CWE-59","affected_packages":["cups-1:1.4.2-67.el6","cups-1:1.6.3-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5030.json"},{"CVE":"CVE-2014-5031","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:1388","RHBA-2015:0386"],"bugzilla":"1128767","bugzilla_description":"CVE-2014-5031 cups: world-readable permissions","cvss_score":5.0,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:P/A:N","CWE":"CWE-59","affected_packages":["cups-1:1.4.2-67.el6","cups-1:1.6.3-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5031.json"},{"CVE":"CVE-2014-3537","severity":"moderate","public_date":"2014-07-14T00:00:00Z","advisories":["RHSA-2014:1388","RHBA-2015:0386"],"bugzilla":"1115576","bugzilla_description":"CVE-2014-3537 cups: insufficient checking leads to privilege escalation","cvss_score":5.0,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:P/A:N","CWE":"CWE-59","affected_packages":["cups-1:1.4.2-67.el6","cups-1:1.6.3-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3537.json"},{"CVE":"CVE-2014-4338","severity":"moderate","public_date":"2014-04-25T00:00:00Z","advisories":["RHSA-2014:1795"],"bugzilla":"1091568","bugzilla_description":"CVE-2014-4338 cups-filters: unsupported BrowseAllow value lets cups-browsed accept from all hosts","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["cups-filters-0:1.0.35-15.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4338.json"},{"CVE":"CVE-2014-4336","severity":"important","public_date":"2014-04-23T00:00:00Z","advisories":[],"bugzilla":"1091565","bugzilla_description":"CVE-2014-4336 cups-filters: incomplete fix for CVE-2014-2707","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4336.json"},{"CVE":"CVE-2014-4337","severity":"moderate","public_date":"2014-04-23T00:00:00Z","advisories":["RHSA-2014:1795"],"bugzilla":"1111510","bugzilla_description":"CVE-2014-4337 cups-filters: cups-browsed DoS via process_browse_data() OOB read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-filters-0:1.0.35-15.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4337.json"},{"CVE":"CVE-2014-2707","severity":"important","public_date":"2014-04-01T00:00:00Z","advisories":[],"bugzilla":"1083326","bugzilla_description":"CVE-2014-2707 cups-filters: remote command injection in cups-browsed","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2707.json"},{"CVE":"CVE-2013-6475","severity":"moderate","public_date":"2014-03-11T00:00:00Z","advisories":[],"bugzilla":"1027550","bugzilla_description":"CVE-2013-6475 cups-filters: possible heap-based buffer overflows due to the use of gmalloc","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6475.json"},{"CVE":"CVE-2014-2856","severity":"moderate","public_date":"2014-01-30T00:00:00Z","advisories":["RHSA-2014:1388","RHBA-2015:0386"],"bugzilla":"1087122","bugzilla_description":"CVE-2014-2856 cups: cross-site scripting flaw fixed in the 1.7.2 release","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["cups-1:1.4.2-67.el6","cups-1:1.6.3-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2856.json"},{"CVE":"CVE-2013-6891","severity":"low","public_date":"2013-12-19T00:00:00Z","advisories":[],"bugzilla":"1051645","bugzilla_description":"CVE-2013-6891 cups: lppasswd vulnerability allows data access to unprivileged user","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6891.json"},{"CVE":"CVE-2012-6094","severity":"moderate","public_date":"2012-12-21T00:00:00Z","advisories":[],"bugzilla":"891942","bugzilla_description":"CVE-2012-6094 cups: 'Listen localhost:631' option not honoured correctly on IPv6-enabled systems when systemd used for CUPS socket activation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6094.json"},{"CVE":"CVE-2012-5519","severity":"moderate","public_date":"2012-11-08T00:00:00Z","advisories":["RHSA-2013:0580"],"bugzilla":"875898","bugzilla_description":"CVE-2012-5519 cups: privilege escalation for users of the CUPS SystemGroup group","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":["cups-1:1.3.7-30.el5_9.3","cups-1:1.4.2-50.el6_4.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5519.json"},{"CVE":"CVE-2012-4510","severity":"moderate","public_date":"2012-10-12T00:00:00Z","advisories":[],"bugzilla":"864515","bugzilla_description":"CVE-2012-4510 cups-pk-helper: Insecure wrapping of cupsGetFile() and cupsPutFile() methods","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:N","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4510.json"},{"CVE":"CVE-2011-2896","severity":"moderate","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181","RHSA-2011:1635","RHSA-2012:0302"],"bugzilla":"727800","bugzilla_description":"CVE-2011-2896 David Koblas' GIF decoder LZW decoder buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gimp-2:2.6.9-4.el6_3.3","cups-1:1.3.7-30.el5","gimp-2:2.2.13-2.0.7.el5_8.5","cups-1:1.4.2-44.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2896.json"},{"CVE":"CVE-2011-3170","severity":"moderate","public_date":"2011-08-04T00:00:00Z","advisories":[],"bugzilla":"732106","bugzilla_description":"CVE-2011-3170 cups: gif_read_lzw() does not properly handle first code word in an LZW stream, which may lead to arbitrary code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3170.json"},{"CVE":"CVE-2010-2941","severity":"important","public_date":"2010-10-28T00:00:00Z","advisories":["RHSA-2010:0811","RHSA-2010:0866"],"bugzilla":"624438","bugzilla_description":"CVE-2010-2941 cups: cupsd memory corruption vulnerability","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.3.7-18.el5_5.8","cups-1:1.4.2-35.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2941.json"},{"CVE":"CVE-2010-3702","severity":"important","public_date":"2010-09-24T00:00:00Z","advisories":["RHSA-2010:0749","RHSA-2010:0859","RHSA-2010:0755","RHSA-2010:0754","RHSA-2010:0753","RHSA-2010:0752","RHSA-2010:0751","RHSA-2010:0750","RHSA-2012:1201"],"bugzilla":"595245","bugzilla_description":"CVE-2010-3702 xpdf: uninitialized Gfx::parser pointer dereference","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["kdegraphics-7:3.5.4-17.el5_5.1","poppler-0:0.12.4-3.el6_0.1","cups-1:1.1.22-0.rc1.9.32.el4_8.10","cups-1:1.1.17-13.3.70","kdegraphics-7:3.3.1-18.el4_8.1","tetex-0:3.0-33.15.el5_8.1","gpdf-0:2.8.2-7.7.2.el4_8.7","poppler-0:0.5.4-4.4.el5_5.14","xpdf-1:2.02-19.el3","xpdf-1:3.00-24.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3702.json"},{"CVE":"CVE-2010-3704","severity":"important","public_date":"2010-09-24T00:00:00Z","advisories":["RHSA-2010:0749","RHSA-2010:0859","RHSA-2010:0753","RHSA-2010:0752","RHSA-2010:0751","RHSA-2012:1201"],"bugzilla":"638960","bugzilla_description":"CVE-2010-3704 xpdf: array indexing error in FoFiType1::parse()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["kdegraphics-7:3.5.4-17.el5_5.1","poppler-0:0.12.4-3.el6_0.1","kdegraphics-7:3.3.1-18.el4_8.1","tetex-0:3.0-33.15.el5_8.1","gpdf-0:2.8.2-7.7.2.el4_8.7","poppler-0:0.5.4-4.4.el5_5.14","xpdf-1:3.00-24.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3704.json"},{"CVE":"CVE-2010-0542","severity":"important","public_date":"2010-06-17T00:00:00Z","advisories":["RHSA-2010:0490"],"bugzilla":"587746","bugzilla_description":"CVE-2010-0542 CUPS: texttops unchecked memory allocation failure leading to NULL pointer dereference","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["cups-1:1.1.22-0.rc1.9.32.el4_8.6","cups-1:1.3.7-18.el5_5.4","cups-1:1.1.17-13.3.65"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0542.json"},{"CVE":"CVE-2010-0540","severity":"moderate","public_date":"2010-06-15T00:00:00Z","advisories":["RHSA-2010:0490"],"bugzilla":"588805","bugzilla_description":"CVE-2010-0540 CUPS administrator web interface CSRF","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-352","affected_packages":["cups-1:1.1.22-0.rc1.9.32.el4_8.6","cups-1:1.3.7-18.el5_5.4","cups-1:1.1.17-13.3.65"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0540.json"},{"CVE":"CVE-2010-2431","severity":"low","public_date":"2010-06-15T00:00:00Z","advisories":["RHSA-2010:0811"],"bugzilla":"605397","bugzilla_description":"CVE-2010-2431 cups: latent privilege escalation vulnerability","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.3.7-18.el5_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2431.json"},{"CVE":"CVE-2010-1748","severity":"moderate","public_date":"2010-06-14T00:00:00Z","advisories":["RHSA-2010:0490"],"bugzilla":"591983","bugzilla_description":"CVE-2010-1748 cups: web interface memory disclosure","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.32.el4_8.6","cups-1:1.3.7-18.el5_5.4","cups-1:1.1.17-13.3.65"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1748.json"},{"CVE":"CVE-2010-0302","severity":"moderate","public_date":"2010-03-03T00:00:00Z","advisories":["RHSA-2010:0129"],"bugzilla":"557775","bugzilla_description":"CVE-2010-0302 cups Incomplete fix for CVE-2009-3553","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.3.7-11.el5_4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0302.json"},{"CVE":"CVE-2010-2432","severity":null,"public_date":"2010-03-03T00:00:00Z","advisories":[],"bugzilla":"607211","bugzilla_description":"CVE-2010-2432 cups: DoS (infinite loop) via HTTP_UNAUTHORIZED responses STR #3518","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2432.json"},{"CVE":"CVE-2009-2820","severity":"moderate","public_date":"2009-11-09T00:00:00Z","advisories":["RHSA-2009:1595"],"bugzilla":"529833","bugzilla_description":"CVE-2009-2820 cups: Several XSS flaws in forms processed by CUPS web interface","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["cups-1:1.3.7-11.el5_4.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2820.json"},{"CVE":"CVE-2009-3608","severity":"important","public_date":"2009-10-14T00:00:00Z","advisories":["RHSA-2009:1504","RHSA-2009:1503","RHSA-2010:0400","RHSA-2009:1502","RHSA-2009:1513","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"526637","bugzilla_description":"CVE-2009-3608 xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["xpdf-1:3.00-22.el4_8.1","kdegraphics-7:3.3.1-15.el4_8.2","cups-1:1.3.7-11.el5_4.3","poppler-0:0.5.4-4.4.el5_4.11","gpdf-0:2.8.2-7.7.2.el4_8.5","tetex-0:3.0-33.8.el5_5.5","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3608.json"},{"CVE":"CVE-2009-3609","severity":"low","public_date":"2009-10-14T00:00:00Z","advisories":["RHSA-2009:1504","RHSA-2009:1503","RHSA-2010:0755","RHSA-2010:0401","RHSA-2009:1500","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:1502","RHSA-2009:1513","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"526893","bugzilla_description":"CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["tetex-0:2.0.2-22.0.1.EL4.16","xpdf-1:3.00-22.el4_8.1","cups-1:1.1.22-0.rc1.9.32.el4_8.10","kdegraphics-7:3.3.1-15.el4_8.2","cups-1:1.3.7-11.el5_4.3","tetex-0:1.0.7-67.19","poppler-0:0.5.4-4.4.el5_4.11","gpdf-0:2.8.2-7.7.2.el4_8.5","tetex-0:3.0-33.8.el5_5.5","xpdf-1:2.02-17.el3","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3609.json"},{"CVE":"CVE-2009-1196","severity":"important","public_date":"2009-06-02T00:00:00Z","advisories":["RHSA-2009:1083"],"bugzilla":"497135","bugzilla_description":"CVE-2009-1196 cups: DoS (stop, crash) by  renewing CUPS browse packets","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.1.17-13.3.62","cups-1:1.1.22-0.rc1.9.32.el4_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1196.json"},{"CVE":"CVE-2009-0949","severity":"important","public_date":"2009-06-02T00:00:00Z","advisories":["RHSA-2009:1083","RHSA-2009:1082"],"bugzilla":"500972","bugzilla_description":"CVE-2009-0949 cups: IPP_TAG_UNSUPPORTED handling NULL pointer dereference DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["cups-1:1.1.17-13.3.62","cups-1:1.1.22-0.rc1.9.32.el4_8.3","cups-1:1.3.7-8.el5_3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0949.json"},{"CVE":"CVE-2009-0791","severity":"moderate","public_date":"2009-05-19T00:00:00Z","advisories":["RHSA-2009:0480","RHSA-2009:1503","RHSA-2009:1083","RHSA-2010:0401","RHSA-2009:1500","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:1502","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"491840","bugzilla_description":"CVE-2009-0791 xpdf: multiple integer overflows","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.17-13.3.62","tetex-0:2.0.2-22.0.1.EL4.16","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:3.00-22.el4_8.1","kdegraphics-7:3.3.1-15.el4_8.2","cups-1:1.1.22-0.rc1.9.32.el4_8.3","tetex-0:1.0.7-67.19","gpdf-0:2.8.2-7.7.2.el4_8.5","tetex-0:3.0-33.8.el5_5.5","xpdf-1:2.02-17.el3","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0791.json"},{"CVE":"CVE-2009-3553","severity":"moderate","public_date":"2009-05-15T00:00:00Z","advisories":["RHSA-2009:1595"],"bugzilla":"530111","bugzilla_description":"CVE-2009-3553 cups: Use-after-free (crash) due improper reference counting in abstract file descriptors handling interface","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["cups-1:1.3.7-11.el5_4.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3553.json"},{"CVE":"CVE-2009-0163","severity":"moderate","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0428"],"bugzilla":"490596","bugzilla_description":"CVE-2009-0163 cups: Integer overflow in the TIFF image filter","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","cups-1:1.1.17-13.3.58","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0163.json"},{"CVE":"CVE-2009-0164","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":[],"bugzilla":"490597","bugzilla_description":"CVE-2009-0164 cups: insufficient checking of the HTTP Host: header","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0164.json"},{"CVE":"CVE-2009-0146","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490612","bugzilla_description":"CVE-2009-0146 xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0146.json"},{"CVE":"CVE-2009-0195","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490612","bugzilla_description":"CVE-2009-0146 xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0195.json"},{"CVE":"CVE-2009-0147","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490614","bugzilla_description":"CVE-2009-0147 xpdf: Multiple integer overflows in JBIG2 decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0147.json"},{"CVE":"CVE-2009-0166","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490625","bugzilla_description":"CVE-2009-0166 xpdf: Freeing of potentially uninitialized memory in JBIG2 decoder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0166.json"},{"CVE":"CVE-2009-0799","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495886","bugzilla_description":"CVE-2009-0799 PDF JBIG2 decoder OOB read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0799.json"},{"CVE":"CVE-2009-0800","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495887","bugzilla_description":"CVE-2009-0800 PDF JBIG2 multiple input validation flaws","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0800.json"},{"CVE":"CVE-2009-1179","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495889","bugzilla_description":"CVE-2009-1179 PDF JBIG2 integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1179.json"},{"CVE":"CVE-2009-1180","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495892","bugzilla_description":"CVE-2009-1180 PDF JBIG2 invalid free()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1180.json"},{"CVE":"CVE-2009-1181","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495894","bugzilla_description":"CVE-2009-1181 PDF JBIG2 NULL dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1181.json"},{"CVE":"CVE-2009-1182","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495896","bugzilla_description":"CVE-2009-1182 PDF JBIG2 MMR decoder buffer overflows","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1182.json"},{"CVE":"CVE-2009-1183","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495899","bugzilla_description":"CVE-2009-1183 PDF JBIG2 MMR infinite loop DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1183.json"},{"CVE":"CVE-2009-0577","severity":"important","public_date":"2009-02-17T00:00:00Z","advisories":["RHSA-2009:0308"],"bugzilla":"486052","bugzilla_description":"CVE-2009-0577 cups-CVE-2008-3640.patch has been corrupted.","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.17-13.3.56"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0577.json"},{"CVE":"CVE-2008-5183","severity":"moderate","public_date":"2008-11-15T00:00:00Z","advisories":["RHSA-2008:1029"],"bugzilla":"473901","bugzilla_description":"CVE-2008-5183 cups: DoS (daemon crash) caused by the large number of subscriptions","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.2.4-11.18.el5_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5183.json"},{"CVE":"CVE-2008-5286","severity":"moderate","public_date":"2008-10-16T00:00:00Z","advisories":["RHSA-2008:1028"],"bugzilla":"473905","bugzilla_description":"CVE-2008-5286 cups: Incomplete fix for CVE-2008-1722","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.55"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5286.json"},{"CVE":"CVE-2008-3639","severity":"important","public_date":"2008-10-09T00:00:00Z","advisories":["RHSA-2008:0937"],"bugzilla":"464710","bugzilla_description":"CVE-2008-3639 CUPS: SGI image parser heap-based buffer overflow","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.1","cups-1:1.2.4-11.18.el5_2.2","cups-1:1.1.17-13.3.54"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3639.json"},{"CVE":"CVE-2008-3640","severity":"important","public_date":"2008-10-09T00:00:00Z","advisories":["RHSA-2008:0937"],"bugzilla":"464713","bugzilla_description":"CVE-2008-3640 CUPS: texttops integer overflow","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.1","cups-1:1.2.4-11.18.el5_2.2","cups-1:1.1.17-13.3.54"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3640.json"},{"CVE":"CVE-2008-3641","severity":"important","public_date":"2008-10-09T00:00:00Z","advisories":["RHSA-2008:0937"],"bugzilla":"464716","bugzilla_description":"CVE-2008-3641 CUPS: HP/GL reader insufficient bounds checking","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.1","cups-1:1.2.4-11.18.el5_2.2","cups-1:1.1.17-13.3.54"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3641.json"},{"CVE":"CVE-2008-1722","severity":"moderate","public_date":"2008-04-08T00:00:00Z","advisories":["RHSA-2008:0498"],"bugzilla":"441692","bugzilla_description":"CVE-2008-1722 cups: integer overflow in the image filter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["cups-1:1.2.4-11.18.el5_2.1","cups-1:1.1.22-0.rc1.9.20.2.el4_6.8","cups-1:1.1.17-13.3.53"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1722.json"},{"CVE":"CVE-2008-1373","severity":"moderate","public_date":"2008-04-01T14:00:00Z","advisories":["RHSA-2008:0192","RHSA-2008:0206"],"bugzilla":"438303","bugzilla_description":"CVE-2008-1373 cups: overflow in gif image filter","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.17-13.3.52","cups-1:1.2.4-11.14.el5_1.6","cups-1:1.1.22-0.rc1.9.20.2.el4_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1373.json"},{"CVE":"CVE-2008-1374","severity":"moderate","public_date":"2008-04-01T14:00:00Z","advisories":["RHSA-2008:0206"],"bugzilla":"438336","bugzilla_description":"CVE-2008-1374 cups: incomplete fix for CVE-2004-0888 / CVE-2005-0206","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.17-13.3.52","cups-1:1.1.22-0.rc1.9.20.2.el4_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1374.json"},{"CVE":"CVE-2008-0047","severity":"moderate","public_date":"2008-03-18T00:00:00Z","advisories":["RHSA-2008:0192"],"bugzilla":"436153","bugzilla_description":"CVE-2008-0047 cups: heap based buffer overflow in cgiCompileSearch()","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["cups-1:1.2.4-11.14.el5_1.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0047.json"},{"CVE":"CVE-2008-0053","severity":"moderate","public_date":"2008-03-18T00:00:00Z","advisories":["RHSA-2008:0192","RHSA-2008:0206"],"bugzilla":"438117","bugzilla_description":"CVE-2008-0053 cups: buffer overflows in HP-GL/2 filter","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.17-13.3.52","cups-1:1.2.4-11.14.el5_1.6","cups-1:1.1.22-0.rc1.9.20.2.el4_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0053.json"},{"CVE":"CVE-2008-0596","severity":"moderate","public_date":"2008-02-25T00:00:00Z","advisories":["RHSA-2008:0153","RHSA-2008:0161"],"bugzilla":"433825","bugzilla_description":"CVE-2008-0596 cups: memory leak handling IPP browse requests","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["cups-1:1.1.17-13.3.51","cups-1:1.1.22-0.rc1.9.20.2.el4_6.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0596.json"},{"CVE":"CVE-2008-0597","severity":"moderate","public_date":"2008-02-25T00:00:00Z","advisories":["RHSA-2008:0153","RHSA-2008:0161"],"bugzilla":"433847","bugzilla_description":"CVE-2008-0597 cups: dereference of free'd memory handling IPP browse requests","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.1.17-13.3.51","cups-1:1.1.22-0.rc1.9.20.2.el4_6.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0597.json"},{"CVE":"CVE-2008-0882","severity":"important","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0157"],"bugzilla":"433758","bugzilla_description":"CVE-2008-0882 cups: double free vulnerability in process_browse_data()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.2.4-11.14.el5_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0882.json"},{"CVE":"CVE-2007-4352","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1022","RHSA-2007:1021","RHSA-2007:1027","RHSA-2007:1026","RHSA-2007:1025","RHSA-2007:1024","RHSA-2007:1029","RHSA-2007:1030"],"bugzilla":"345101","bugzilla_description":"CVE-2007-4352 xpdf memory corruption in DCTStream::readProgressiveDataUnit()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","kdegraphics-7:3.3.1-6.el4_5","xpdf-1:2.02-11.el3","xpdf-1:3.00-14.el4","gpdf-0:2.8.2-7.7.1","cups-1:1.2.4-11.14.el5_1.3","tetex-0:2.0.2-22.0.1.EL4.10","tetex-0:3.0-33.2.el5_1.2","poppler-0:0.5.4-4.3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4352.json"},{"CVE":"CVE-2007-5392","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1022","RHSA-2007:1021","RHSA-2007:1027","RHSA-2007:1026","RHSA-2007:1025","RHSA-2007:1024","RHSA-2007:1029","RHSA-2007:1030"],"bugzilla":"345111","bugzilla_description":"CVE-2007-5392 xpdf buffer overflow in DCTStream::reset()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","kdegraphics-7:3.3.1-6.el4_5","xpdf-1:2.02-11.el3","xpdf-1:3.00-14.el4","gpdf-0:2.8.2-7.7.1","cups-1:1.2.4-11.14.el5_1.3","tetex-0:2.0.2-22.0.1.EL4.10","tetex-0:3.0-33.2.el5_1.2","poppler-0:0.5.4-4.3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5392.json"},{"CVE":"CVE-2007-5393","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1023","RHSA-2007:1022","RHSA-2007:1021","RHSA-2007:1031","RHSA-2007:1027","RHSA-2007:1026","RHSA-2007:1025","RHSA-2007:1024","RHSA-2007:1029","RHSA-2007:1028","RHSA-2007:1030","RHSA-2007:1051"],"bugzilla":"345121","bugzilla_description":"CVE-2007-5393 xpdf buffer overflow in CCITTFaxStream::lookChar()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tetex-0:1.0.7-38.5E.12","xpdf-1:2.02-11.el3","gpdf-0:2.8.2-7.7.1","cups-1:1.2.4-11.14.el5_1.3","cups-1:1.1.17-13.3.46","poppler-0:0.5.4-4.3.el5_1","cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","kdegraphics-7:3.3.1-6.el4_5","xpdf-1:3.00-14.el4","xpdf-1:0.92-19.el2","tetex-0:2.0.2-22.0.1.EL4.10","tetex-0:3.0-33.2.el5_1.2","kdegraphics-7:3.5.4-5.el5_1","tetex-0:1.0.7-67.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5393.json"},{"CVE":"CVE-2007-4351","severity":"important","public_date":"2007-10-31T00:00:00Z","advisories":["RHSA-2007:1023","RHSA-2007:1022","RHSA-2007:1020"],"bugzilla":"345091","bugzilla_description":"CVE-2007-4351 cups boundary error","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","cups-1:1.1.17-13.3.46","cups-1:1.2.4-11.14.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4351.json"},{"CVE":"CVE-2007-3387","severity":"important","public_date":"2007-07-28T00:00:00Z","advisories":["RHSA-2007:0729","RHSA-2007:0730","RHSA-2007:0732","RHSA-2007:0731","RHSA-2007:0720","RHSA-2007:0735"],"bugzilla":"248194","bugzilla_description":"CVE-2007-3387 xpdf integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["xpdf-1:3.00-12.RHEL4","tetex-0:1.0.7-38.5E.11","cups-1:1.1.22-0.rc1.9.20.2","gpdf-0:2.8.2-7.7","cups-1:1.1.17-13.3.45","cups-1:1.2.4-11.5.3.el5","tetex-0:2.0.2-22.0.1.EL4.8","kdegraphics-7:3.5.4-2.el5","kdegraphics-7:3.3.1-4.RHEL4","tetex-0:3.0-33.1.el5","poppler-0:0.5.4-4.1.el5","xpdf-1:2.02-10.RHEL3","tetex-0:1.0.7-67.10","xpdf-1:0.92-18.RHEL2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3387.json"},{"CVE":"CVE-2007-4045","severity":"low","public_date":"2007-07-20T00:00:00Z","advisories":["RHSA-2007:1023","RHSA-2007:1022"],"bugzilla":"250161","bugzilla_description":"CVE-2007-4045 Incomplete fix for CVE-2007-0720 CUPS denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","cups-1:1.1.17-13.3.46"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4045.json"},{"CVE":"CVE-2007-0720","severity":"moderate","public_date":"2006-11-13T00:00:00Z","advisories":["RHSA-2007:0123"],"bugzilla":"1618271","bugzilla_description":"CVE-2007-0720 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.18","cups-1:1.2.4-11.5.1.el5","cups-1:1.1.17-13.3.42"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0720.json"},{"CVE":"CVE-2005-3624","severity":"important","public_date":"2006-01-03T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2006:0177","RHSA-2006:0163","RHSA-2005:868"],"bugzilla":"1617826","bugzilla_description":"CVE-2005-3624 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.4","tetex-0:1.0.7-67.9","cups-1:1.1.17-13.3.36","cups-1:1.1.22-0.rc1.9.10","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3624.json"},{"CVE":"CVE-2005-3625","severity":"important","public_date":"2006-01-03T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2006:0177","RHSA-2006:0163","RHSA-2005:868"],"bugzilla":"1617827","bugzilla_description":"CVE-2005-3625 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.4","tetex-0:1.0.7-67.9","cups-1:1.1.17-13.3.36","cups-1:1.1.22-0.rc1.9.10","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3625.json"},{"CVE":"CVE-2005-3626","severity":"important","public_date":"2006-01-03T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2006:0177","RHSA-2006:0163","RHSA-2005:868"],"bugzilla":"1617828","bugzilla_description":"CVE-2005-3626 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.4","tetex-0:1.0.7-67.9","cups-1:1.1.17-13.3.36","cups-1:1.1.22-0.rc1.9.10","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3626.json"},{"CVE":"CVE-2005-3627","severity":"important","public_date":"2006-01-03T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2006:0177","RHSA-2006:0163","RHSA-2005:868"],"bugzilla":"1617829","bugzilla_description":"CVE-2005-3627 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.4","tetex-0:1.0.7-67.9","cups-1:1.1.17-13.3.36","cups-1:1.1.22-0.rc1.9.10","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3627.json"},{"CVE":"CVE-2005-3191","severity":"important","public_date":"2005-12-06T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2005:878","RHSA-2005:867","RHSA-2005:868"],"bugzilla":"1617796","bugzilla_description":"CVE-2005-3191 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.3","cups-1:1.1.22-0.rc1.9.9","tetex-0:1.0.7-67.9","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7","cups-1:1.1.17-13.3.34"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3191.json"},{"CVE":"CVE-2005-3192","severity":"important","public_date":"2005-12-06T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2005:878","RHSA-2005:867","RHSA-2005:868"],"bugzilla":"1617797","bugzilla_description":"CVE-2005-3192 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.3","cups-1:1.1.22-0.rc1.9.9","tetex-0:1.0.7-67.9","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7","cups-1:1.1.17-13.3.34"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3192.json"},{"CVE":"CVE-2005-3193","severity":"important","public_date":"2005-12-06T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2005:878","RHSA-2005:867","RHSA-2005:868"],"bugzilla":"1617798","bugzilla_description":"CVE-2005-3193 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.3","cups-1:1.1.22-0.rc1.9.9","tetex-0:1.0.7-67.9","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7","cups-1:1.1.17-13.3.34"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3193.json"},{"CVE":"CVE-2005-3628","severity":"important","public_date":"2005-12-06T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2005:878","RHSA-2005:867","RHSA-2005:868"],"bugzilla":"1617830","bugzilla_description":"CVE-2005-3628 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.3","cups-1:1.1.22-0.rc1.9.9","tetex-0:1.0.7-67.9","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7","cups-1:1.1.17-13.3.34"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3628.json"},{"CVE":"CVE-2005-2097","severity":"important","public_date":"2005-08-09T00:00:00Z","advisories":["RHSA-2005:670","RHSA-2005:708","RHSA-2005:671","RHSA-2005:706"],"bugzilla":"1617684","bugzilla_description":"CVE-2005-2097 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.8","gpdf-0:2.8.2-4.4","cups-1:1.1.17-13.3.31","kdegraphics-7:3.3.1-3.4","cups-1:1.1.22-0.rc1.9.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2097.json"},{"CVE":"CVE-2005-0064","severity":"important","public_date":"2005-01-18T00:00:00Z","advisories":["RHSA-2005:049","RHSA-2005:059","RHSA-2005:026","RHSA-2005:034","RHSA-2005:057","RHSA-2005:066","RHSA-2005:053"],"bugzilla":"1617441","bugzilla_description":"CVE-2005-0064 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gpdf-0:2.8.2-4.3","cups-1:1.1.17-13.3.24","xpdf-1:3.00-11.5","tetex-0:2.0.2-22.EL4.4","xpdf-1:2.02-9.5","cups-1:1.1.22-0.rc1.9.6","kdegraphics-7:3.3.1-3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0064.json"},{"CVE":"CVE-2005-2874","severity":"moderate","public_date":"2005-01-07T00:00:00Z","advisories":["RHSA-2005:772"],"bugzilla":"1617763","bugzilla_description":"CVE-2005-2874 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2874.json"},{"CVE":"CVE-2004-1125","severity":"moderate","public_date":"2004-12-21T00:00:00Z","advisories":["RHSA-2005:026","RHSA-2005:034","RHSA-2005:354","RHSA-2005:013","RHSA-2005:057","RHSA-2005:066","RHSA-2005:053","RHSA-2005:018"],"bugzilla":"1617371","bugzilla_description":"CVE-2004-1125 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gpdf-0:2.8.2-4.3","xpdf-1:2.02-9.4","xpdf-1:3.00-11.5","tetex-0:2.0.2-22.EL4.4","cups-1:1.1.17-13.3.22","tetex-0:1.0.7-67.7","cups-1:1.1.22-0.rc1.9.6","kdegraphics-7:3.3.1-3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1125.json"},{"CVE":"CVE-2004-1267","severity":"important","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:013","RHSA-2005:053"],"bugzilla":"1617400","bugzilla_description":"CVE-2004-1267 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.22","cups-1:1.1.22-0.rc1.9.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1267.json"},{"CVE":"CVE-2004-1268","severity":"important","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:013","RHSA-2005:053"],"bugzilla":"1617401","bugzilla_description":"CVE-2004-1268 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.22","cups-1:1.1.22-0.rc1.9.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1268.json"},{"CVE":"CVE-2004-1269","severity":"important","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:013","RHSA-2005:053"],"bugzilla":"1617402","bugzilla_description":"CVE-2004-1269 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.22","cups-1:1.1.22-0.rc1.9.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1269.json"},{"CVE":"CVE-2004-1270","severity":"important","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:013","RHSA-2005:053"],"bugzilla":"1617403","bugzilla_description":"CVE-2004-1270 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.22","cups-1:1.1.22-0.rc1.9.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1270.json"},{"CVE":"CVE-2004-0888","severity":"important","public_date":"2004-10-21T00:00:00Z","advisories":["RHSA-2005:354","RHSA-2004:592","RHSA-2005:066","RHSA-2004:543"],"bugzilla":"1617315","bugzilla_description":"CVE-2004-0888 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.16","xpdf-1:2.02-9.3","tetex-0:1.0.7-67.7","kdegraphics-7:3.3.1-3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0888.json"},{"CVE":"CVE-2005-0206","severity":"important","public_date":"2004-10-20T00:00:00Z","advisories":["RHSA-2005:213","RHSA-2005:034","RHSA-2005:057","RHSA-2005:132","RHSA-2005:053"],"bugzilla":"1617493","bugzilla_description":"CVE-2005-0206 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gpdf-0:2.8.2-4.3","cups-1:1.1.17-13.3.27","xpdf-1:3.00-11.5","xpdf-1:2.02-9.6","cups-1:1.1.22-0.rc1.9.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0206.json"},{"CVE":"CVE-2004-0923","severity":null,"public_date":"2004-09-30T00:00:00Z","advisories":["RHSA-2004:543"],"bugzilla":"1617323","bugzilla_description":"CVE-2004-0923 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0923.json"},{"CVE":"CVE-2004-0558","severity":null,"public_date":"2004-08-21T00:00:00Z","advisories":["RHSA-2004:449"],"bugzilla":"1617230","bugzilla_description":"CVE-2004-0558 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0558.json"},{"CVE":"CVE-2004-2154","severity":"moderate","public_date":"2004-05-05T00:00:00Z","advisories":["RHSA-2005:571"],"bugzilla":"1617422","bugzilla_description":"CVE-2004-2154 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.29"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-2154.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/curl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/curl_security_api_results.json
new file mode 100644
index 0000000..67d19b0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/curl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8231","severity":"low","public_date":"2020-08-19T00:00:00Z","advisories":[],"bugzilla":"1868032","bugzilla_description":"CVE-2020-8231 curl: Expired pointer dereference via multi API with `CURLOPT_CONNECT_ONLY` option set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8231.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-8177","severity":"moderate","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1847915","bugzilla_description":"CVE-2020-8177 curl: Incorrect argument check can allow remote servers to overwrite local files","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8177.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-8169","severity":"moderate","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1847916","bugzilla_description":"CVE-2020-8169 libcurl: partial password leak over DNS on HTTP redirect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8169.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-15601","severity":"low","public_date":"2020-01-06T00:00:00Z","advisories":[],"bugzilla":"1794143","bugzilla_description":"CVE-2019-15601 curl: improper input validation allows users to create a 'FILE:' URL that can make the client access a remote file using SMB","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15601.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-5481","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792"],"bugzilla":"1749402","bugzilla_description":"CVE-2019-5481 curl: double free due to subsequent call of realloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5481.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2019-5482","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792","RHSA-2020:3916"],"bugzilla":"1749652","bugzilla_description":"CVE-2019-5482 curl: heap buffer overflow in function tftp_receive_packet()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-59.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5482.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-5443","severity":"important","public_date":"2019-06-25T00:00:00Z","advisories":[],"bugzilla":"1772100","bugzilla_description":"CVE-2019-5443 curl: Windows OpenSSL engine code injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5443.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-5435","severity":"low","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1710609","bugzilla_description":"CVE-2019-5435 curl: Integer overflows in curl_url_set() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-5436","severity":"low","public_date":"2019-05-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1020","RHBA-2020:1539","RHSA-2020:1792","RHSA-2019:1543","RHSA-2020:2505","RHBA-2020:1540"],"bugzilla":"1710620","bugzilla_description":"CVE-2019-5436 curl: TFTP receive heap buffer overflow in tftp_receive_packet() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","curl-0:7.29.0-54.el7_7.3","redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-57.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5436.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16890","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670252","bugzilla_description":"CVE-2018-16890 curl: NTLM type-2 heap out-of-bounds buffer read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-190","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-3822","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670254","bugzilla_description":"CVE-2019-3822 curl: NTLMv2 type-3 header stack buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-3823","severity":"low","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670256","bugzilla_description":"CVE-2019-3823 curl: SMTP end-of-response out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-20483","severity":"moderate","public_date":"2018-12-26T00:00:00Z","advisories":["RHSA-2019:3701","RHBA-2019:3303"],"bugzilla":"1662705","bugzilla_description":"CVE-2018-20483 wget: Information exposure in set_file_metadata function in xattr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20483.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-16839","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":["RHSA-2019:1543"],"bugzilla":"1642201","bugzilla_description":"CVE-2018-16839 curl: Integer overflow leading to heap-based buffer overflow in Curl_sasl_create_plain_message()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-16840","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":["RHSA-2019:1543"],"bugzilla":"1642203","bugzilla_description":"CVE-2018-16840 curl: Use-after-free when closing \"easy\" handle in Curl_close()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16840.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-16842","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":["RHSA-2019:1543","RHSA-2019:2181"],"bugzilla":"1644124","bugzilla_description":"CVE-2018-16842 curl: Heap-based buffer over-read in the curl tool warning formatting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["curl-0:7.29.0-54.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2018-14618","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2019:1880","RHSA-2018:3558"],"bugzilla":"1622707","bugzilla_description":"CVE-2018-14618 curl: NTLM password overflow via integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-0500","severity":"moderate","public_date":"2018-07-11T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1597101","bugzilla_description":"CVE-2018-0500 curl: Heap-based buffer overflow in Curl_smtp_escape_eob() when uploading data over SMTP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000300","severity":"important","public_date":"2018-05-16T00:00:00Z","advisories":[],"bugzilla":"1575533","bugzilla_description":"CVE-2018-1000300 curl: FTP shutdown response heap-based buffer overflow can potentially lead to RCE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000300.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000301","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1575536","bugzilla_description":"CVE-2018-1000301 curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000301.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-1000120","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1552628","bugzilla_description":"CVE-2018-1000120 curl: FTP path trickery leads to NIL byte out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000120.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-1000121","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1552631","bugzilla_description":"CVE-2018-1000121 curl: LDAP NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000121.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000122","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1553398","bugzilla_description":"CVE-2018-1000122 curl: RTSP RTP buffer over-read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000122.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000005","severity":"low","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2019:1543"],"bugzilla":"1536013","bugzilla_description":"CVE-2018-1000005 curl: Out-of-bounds read in code handling HTTP/2 trailers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-1000007","severity":"moderate","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1537125","bugzilla_description":"CVE-2018-1000007 curl: HTTP authentication leak in redirects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000007.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-8816","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1515757","bugzilla_description":"CVE-2017-8816 curl: NTLM buffer overflow via integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8817","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1515760","bugzilla_description":"CVE-2017-8817 curl: FTP wildcard out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-8818","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":[],"bugzilla":"1517691","bugzilla_description":"CVE-2017-8818 curl: Out-of-bound access in SSL related cleanup code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-1000257","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2017:3263","RHSA-2018:2486"],"bugzilla":"1503705","bugzilla_description":"CVE-2017-1000257 curl: IMAP FETCH response out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-42.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-1000254","severity":"moderate","public_date":"2017-10-04T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1495541","bugzilla_description":"CVE-2017-1000254 curl: FTP PWD response parser out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-1000101","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1478309","bugzilla_description":"CVE-2017-1000101 curl: URL globbing out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2017-1000100","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1478310","bugzilla_description":"CVE-2017-1000100 curl: TFTP sends more than buffer size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-1000099","severity":"moderate","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1478316","bugzilla_description":"CVE-2017-1000099 curl: FILE buffer read out of bounds","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000099.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-9502","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1461321","bugzilla_description":"CVE-2017-9502 curl: URL file scheme drive letter buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9502.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7468","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443381","bugzilla_description":"CVE-2017-7468 curl: TLS session resumption client cert bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-7407","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1439190","bugzilla_description":"CVE-2017-7407 curl: --write-out out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7407.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2017-2628","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":["RHSA-2017:0847"],"bugzilla":"1422464","bugzilla_description":"CVE-2017-2628 curl: negotiate not treated as connection-oriented (incomplete fix for CVE-2015-3148)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["curl-0:7.19.7-53.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2628.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-2629","severity":"moderate","public_date":"2017-02-22T00:00:00Z","advisories":[],"bugzilla":"1425746","bugzilla_description":"CVE-2017-2629 curl: SSL_VERIFYSTATUS ignored","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9594","severity":"moderate","public_date":"2016-12-23T00:00:00Z","advisories":[],"bugzilla":"1408385","bugzilla_description":"CVE-2016-9594 curl: Unitialized random","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9594.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-9586","severity":"low","public_date":"2016-12-21T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1406712","bugzilla_description":"CVE-2016-9586 curl: printf floating point buffer overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9586.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-8615","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388370","bugzilla_description":"CVE-2016-8615 curl: Cookie injection for other servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-99","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8616","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388371","bugzilla_description":"CVE-2016-8616 curl: Case insensitive password comparison","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8616.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-8617","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388377","bugzilla_description":"CVE-2016-8617 curl: Out-of-bounds write via unchecked multiplication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-787","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8618","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388378","bugzilla_description":"CVE-2016-8618 curl: Double-free in curl_maprintf","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8619","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388379","bugzilla_description":"CVE-2016-8619 curl: Double-free in krb5 code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8619.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8620","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1388382","bugzilla_description":"CVE-2016-8620 curl: Glob parser write/read out of bounds","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-120","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8620.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-8621","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388385","bugzilla_description":"CVE-2016-8621 curl: curl_getdate out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8621.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8622","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388386","bugzilla_description":"CVE-2016-8622 curl: URL unescape heap overflow via integer truncation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-190->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-8623","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388388","bugzilla_description":"CVE-2016-8623 curl: Use-after-free via shared cookies","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8623.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8624","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388390","bugzilla_description":"CVE-2016-8624 curl: Invalid URL parsing with '#'","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8625","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388392","bugzilla_description":"CVE-2016-8625 curl: IDNA 2003 makes curl use wrong host","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8625.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-7167","severity":"low","public_date":"2016-09-14T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2017:2016","RHSA-2018:2486"],"bugzilla":"1375906","bugzilla_description":"CVE-2016-7167 curl: escape and unescape integer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["curl-0:7.29.0-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2016-7141","severity":"low","public_date":"2016-09-05T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1373229","bugzilla_description":"CVE-2016-7141 curl: Incorrect reuse of client certificates","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7141.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-5419","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1362183","bugzilla_description":"CVE-2016-5419 curl: TLS session resumption client cert bypass","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5419.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-5420","severity":"low","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1362190","bugzilla_description":"CVE-2016-5420 curl: Re-using connection with wrong client cert","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5420.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-5421","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1362199","bugzilla_description":"CVE-2016-5421 curl: Use of connection struct after free","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5421.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-3739","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1335430","bugzilla_description":"CVE-2016-3739 curl: TLS certificate name check bypass with mbedTLS and PolarSSL","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3739.json"},{"CVE":"CVE-2016-0755","severity":"low","public_date":"2016-01-27T00:00:00Z","advisories":[],"bugzilla":"1302263","bugzilla_description":"CVE-2016-0755 curl: NTLM credentials not-checked for proxy connection re-use","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0755.json"},{"CVE":"CVE-2015-3237","severity":"moderate","public_date":"2015-06-17T00:00:00Z","advisories":[],"bugzilla":"1233814","bugzilla_description":"CVE-2015-3237 curl: SMB send off unrelated memory contents","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3237.json"},{"CVE":"CVE-2015-3236","severity":"low","public_date":"2015-06-17T00:00:00Z","advisories":[],"bugzilla":"1233816","bugzilla_description":"CVE-2015-3236 curl: lingering HTTP credentials in connection re-use","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3236.json"},{"CVE":"CVE-2015-3153","severity":"moderate","public_date":"2015-04-29T00:00:00Z","advisories":[],"bugzilla":"1217341","bugzilla_description":"CVE-2015-3153 curl: sensitive HTTP server headers also sent to proxies","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3153.json"},{"CVE":"CVE-2015-3143","severity":"moderate","public_date":"2015-04-22T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1213306","bugzilla_description":"CVE-2015-3143 curl: re-using authenticated connection when unauthenticated","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3143.json"},{"CVE":"CVE-2015-3144","severity":"low","public_date":"2015-04-22T00:00:00Z","advisories":[],"bugzilla":"1213335","bugzilla_description":"CVE-2015-3144 curl: host name out of boundary memory access","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-129->CWE-131->CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3144.json"},{"CVE":"CVE-2015-3145","severity":"low","public_date":"2015-04-22T00:00:00Z","advisories":[],"bugzilla":"1213347","bugzilla_description":"CVE-2015-3145 curl: cookie parser out of boundary memory access","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-129->CWE-131->CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3145.json"},{"CVE":"CVE-2015-3148","severity":"moderate","public_date":"2015-04-22T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1213351","bugzilla_description":"CVE-2015-3148 curl: Negotiate not treated as connection-oriented","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3148.json"},{"CVE":"CVE-2014-8150","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1178692","bugzilla_description":"CVE-2014-8150 curl: URL request injection vulnerability in parseurlandfillconn()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-113","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8150.json"},{"CVE":"CVE-2014-8151","severity":"low","public_date":"2015-01-08T00:00:00Z","advisories":[],"bugzilla":"1178698","bugzilla_description":"CVE-2014-8151 curl: certificate check bypass when built with DarwinSSL as TLS backend","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-697->CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8151.json"},{"CVE":"CVE-2014-3707","severity":"moderate","public_date":"2014-11-05T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1154941","bugzilla_description":"CVE-2014-3707 curl: incorrect handle duplication after COPYPOSTFIELDS","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"(CWE-125|CWE-416)","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3707.json"},{"CVE":"CVE-2014-3613","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1136154","bugzilla_description":"CVE-2014-3613 curl: incorrect handling of IP addresses in cookie domain","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20->CWE-284","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3613.json"},{"CVE":"CVE-2014-3620","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":[],"bugzilla":"1138846","bugzilla_description":"CVE-2014-3620 curl: cookies accepted for TLDs","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3620.json"},{"CVE":"CVE-2014-0138","severity":"moderate","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0561"],"bugzilla":"1079148","bugzilla_description":"CVE-2014-0138 curl: wrong re-use of connections in libcurl","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["curl-0:7.19.7-37.el6_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0138.json"},{"CVE":"CVE-2014-0139","severity":"low","public_date":"2014-03-26T00:00:00Z","advisories":[],"bugzilla":"1079149","bugzilla_description":"CVE-2014-0139 curl: IP address wildcard certificate validation issue in libcurl","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0139.json"},{"CVE":"CVE-2014-0015","severity":"moderate","public_date":"2014-01-29T00:00:00Z","advisories":["RHSA-2014:0561"],"bugzilla":"1053903","bugzilla_description":"CVE-2014-0015 curl: re-use of wrong HTTP NTLM connection in libcurl","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["curl-0:7.19.7-37.el6_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0015.json"},{"CVE":"CVE-2013-6422","severity":"low","public_date":"2013-12-17T00:00:00Z","advisories":[],"bugzilla":"1037918","bugzilla_description":"CVE-2013-6422 curl: TLS/SSL certificate name check disabled with peer verification when using GnuTLS","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6422.json"},{"CVE":"CVE-2013-4545","severity":"low","public_date":"2013-11-15T00:00:00Z","advisories":[],"bugzilla":"1029159","bugzilla_description":"CVE-2013-4545 curl: TLS/SSL certificate name check disabled with peer verification","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4545.json"},{"CVE":"CVE-2013-2174","severity":"moderate","public_date":"2013-06-22T00:00:00Z","advisories":["RHSA-2013:0983"],"bugzilla":"965640","bugzilla_description":"CVE-2013-2174 curl: Loop counter error, leading to heap-based buffer overflow when decoding certain URLs","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["curl-0:7.15.5-17.el5_9","curl-0:7.19.7-37.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2174.json"},{"CVE":"CVE-2013-1944","severity":"moderate","public_date":"2013-04-12T00:00:00Z","advisories":["RHSA-2013:0771"],"bugzilla":"950577","bugzilla_description":"CVE-2013-1944 curl: Cookie domain suffix match vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["curl-0:7.19.7-36.el6_4","curl-0:7.15.5-16.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1944.json"},{"CVE":"CVE-2013-0249","severity":"moderate","public_date":"2013-02-06T00:00:00Z","advisories":[],"bugzilla":"906779","bugzilla_description":"CVE-2013-0249 curl: Stack-based buffer overflow when negotiating SASL DIGEST-MD5 authentication with IMAP, POP3 and SMTP protocols","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0249.json"},{"CVE":"CVE-2012-0036","severity":"moderate","public_date":"2012-01-24T00:00:00Z","advisories":[],"bugzilla":"773457","bugzilla_description":"CVE-2012-0036 curl: URL sanitization vulnerability","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0036.json"},{"CVE":"CVE-2011-2192","severity":"moderate","public_date":"2011-06-23T00:00:00Z","advisories":["RHSA-2011:0918"],"bugzilla":"711454","bugzilla_description":"CVE-2011-2192 curl: Improper delegation of client credentials during GSS negotiation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["curl-0:7.15.5-9.el5_6.3","curl-0:7.19.7-26.el6_1.1","curl-0:7.12.1-17.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2192.json"},{"CVE":"CVE-2010-0734","severity":"moderate","public_date":"2010-02-09T00:00:00Z","advisories":["RHSA-2010:0329","RHSA-2010:0273"],"bugzilla":"563220","bugzilla_description":"CVE-2010-0734 curl: zlib-compression causes curl to pass more than CURL_MAX_WRITE_SIZE bytes to write callback","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["curl-0:7.12.1-11.1.el4_8.3","curl-0:7.10.6-11.rhel3","curl-0:7.15.5-9.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0734.json"},{"CVE":"CVE-2009-2417","severity":"moderate","public_date":"2009-08-12T00:00:00Z","advisories":["RHSA-2009:1209"],"bugzilla":"516181","bugzilla_description":"CVE-2009-2417 curl: incorrect verification of SSL certificate with NUL in name","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["curl-0:7.12.1-11.1.el4_8.1","curl-0:7.15.5-2.1.el5_3.5","curl-0:7.10.6-10.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2417.json"},{"CVE":"CVE-2009-0037","severity":"moderate","public_date":"2009-03-03T00:00:00Z","advisories":["RHSA-2009:0341"],"bugzilla":"485271","bugzilla_description":"CVE-2009-0037 curl: local file access via unsafe redirects","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["curl-0:7.10.6-9.rhel3","curl-0:7.8-3.rhel2","curl-0:7.12.1-11.1.el4_7.1","curl-0:7.15.5-2.1.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0037.json"},{"CVE":"CVE-2005-4077","severity":"moderate","public_date":"2005-12-07T00:00:00Z","advisories":["RHSA-2005:875"],"bugzilla":"1617850","bugzilla_description":"CVE-2005-4077 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["curl-0:7.12.1-8.rhel4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4077.json"},{"CVE":"CVE-2005-3185","severity":"important","public_date":"2005-10-12T00:00:00Z","advisories":["RHSA-2005:807","RHSA-2005:812"],"bugzilla":"1617794","bugzilla_description":"CVE-2005-3185 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["curl-0:7.10.6-7.rhel3","wget-0:1.10.2-0.40E","wget-0:1.10.2-0.30E","curl-0:7.12.1-6.rhel4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3185.json"},{"CVE":"CVE-2005-0490","severity":"low","public_date":"2005-02-21T00:00:00Z","advisories":["RHSA-2005:340"],"bugzilla":"1617532","bugzilla_description":"CVE-2005-0490 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["curl-0:7.12.1-5.rhel4","curl-0:7.10.6-6.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0490.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/custodia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/custodia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/custodia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cvs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cvs_security_api_results.json
new file mode 100644
index 0000000..5b4fce3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cvs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-12836","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":[],"bugzilla":"1480800","bugzilla_description":"CVE-2017-12836 cvs: Command injection via malicious ssh URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12836.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2015-6360","severity":"moderate","public_date":"2016-04-02T00:00:00Z","advisories":["RHSA-2020:3873"],"bugzilla":"1323702","bugzilla_description":"CVE-2015-6360 libsrtp: improper handling of CSRC count and extension header length in RTP header","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libsrtp-0:1.4.4-11.20101004cvs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6360.json"},{"CVE":"CVE-2013-2139","severity":"low","public_date":"2013-05-30T00:00:00Z","advisories":["RHSA-2020:3873"],"bugzilla":"970697","bugzilla_description":"CVE-2013-2139 libsrtp: buffer overflow in application of crypto profiles","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libsrtp-0:1.4.4-11.20101004cvs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2139.json"},{"CVE":"CVE-2012-0804","severity":"moderate","public_date":"2012-02-06T00:00:00Z","advisories":["RHSA-2012:0321"],"bugzilla":"784141","bugzilla_description":"CVE-2012-0804 cvs: client proxy_connect heap-based buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["cvs-0:1.11.23-11.el6_2.1","cvs-0:1.11.22-11.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0804.json"},{"CVE":"CVE-2010-3846","severity":"moderate","public_date":"2010-10-21T00:00:00Z","advisories":["RHSA-2010:0918"],"bugzilla":"642146","bugzilla_description":"CVE-2010-3846 cvs: Heap-based buffer overflow by applying RCS file changes","cvss_score":3.5,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["cvs-0:1.11.23-11.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3846.json"},{"CVE":"CVE-2005-2693","severity":"low","public_date":"2005-08-19T00:00:00Z","advisories":["RHSA-2005:756"],"bugzilla":"1617740","bugzilla_description":"CVE-2005-2693 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cvs-0:1.11.17-8.RHEL4","cvs-0:1.11.2-28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2693.json"},{"CVE":"CVE-2005-0753","severity":"moderate","public_date":"2005-04-18T00:00:00Z","advisories":["RHSA-2005:387"],"bugzilla":"1617569","bugzilla_description":"CVE-2005-0753 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cvs-0:1.11.2-27","cvs-0:1.11.17-7.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0753.json"},{"CVE":"CVE-2004-0414","severity":"critical","public_date":"2004-06-09T00:00:00Z","advisories":["RHSA-2004:233"],"bugzilla":"1617197","bugzilla_description":"CVE-2004-0414 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cvs-0:1.11.2-24"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0414.json"},{"CVE":"CVE-2004-0416","severity":"important","public_date":"2004-06-09T00:00:00Z","advisories":["RHSA-2004:233"],"bugzilla":"1617200","bugzilla_description":"CVE-2004-0416 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cvs-0:1.11.2-24"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0416.json"},{"CVE":"CVE-2004-0417","severity":"important","public_date":"2004-06-09T00:00:00Z","advisories":["RHSA-2004:233"],"bugzilla":"1617201","bugzilla_description":"CVE-2004-0417 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cvs-0:1.11.2-24"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0417.json"},{"CVE":"CVE-2004-0418","severity":"important","public_date":"2004-06-09T00:00:00Z","advisories":["RHSA-2004:233"],"bugzilla":"1617202","bugzilla_description":"CVE-2004-0418 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cvs-0:1.11.2-24"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0418.json"},{"CVE":"CVE-2004-0778","severity":"moderate","public_date":"2004-06-09T00:00:00Z","advisories":["RHSA-2004:233"],"bugzilla":"1617282","bugzilla_description":"CVE-2004-0778 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cvs-0:1.11.2-24"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0778.json"},{"CVE":"CVE-2004-0396","severity":"critical","public_date":"2004-05-19T00:00:00Z","advisories":["RHSA-2004:190"],"bugzilla":"1617191","bugzilla_description":"CVE-2004-0396 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cvs-0:1.11.2-22"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0396.json"},{"CVE":"CVE-2004-0180","severity":"low","public_date":"2004-04-14T00:00:00Z","advisories":["RHSA-2004:153","RHSA-2004:154"],"bugzilla":"1617171","bugzilla_description":"CVE-2004-0180 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cvs-0:1.11.2-18"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0180.json"},{"CVE":"CVE-2004-0405","severity":"moderate","public_date":"2004-04-14T00:00:00Z","advisories":["RHSA-2004:153","RHSA-2004:154"],"bugzilla":"1617194","bugzilla_description":"CVE-2004-0405 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cvs-0:1.11.2-18"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0405.json"},{"CVE":"CVE-2003-0977","severity":"low","public_date":"2003-12-17T00:00:00Z","advisories":["RHSA-2004:003","RHSA-2004:004"],"bugzilla":"1617113","bugzilla_description":"CVE-2003-0977 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cvs-0:1.11.2-14"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0977.json"},{"CVE":"CVE-2002-0844","severity":"low","public_date":"2002-05-25T00:00:00Z","advisories":["RHSA-2004:004"],"bugzilla":"1616825","bugzilla_description":"CVE-2002-0844 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cvs-0:1.11.2-14"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2002-0844.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-imapd-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-imapd-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-imapd-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-imapd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-imapd_security_api_results.json
new file mode 100644
index 0000000..356f16f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-imapd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-19783","severity":"moderate","public_date":"2019-12-19T00:00:00Z","advisories":[],"bugzilla":"1786756","bugzilla_description":"CVE-2019-19783 cyrus-imapd: lmtpd component created mailboxes with administrator privileges if the \"fileinto\" was used, bypassing ACL checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19783.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-18928","severity":"moderate","public_date":"2019-11-14T00:00:00Z","advisories":[],"bugzilla":"1775177","bugzilla_description":"CVE-2019-18928 cyrus-imapd: privilege escalation in HTTP request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-11356","severity":"important","public_date":"2019-06-04T00:00:00Z","advisories":["RHSA-2019:1771"],"bugzilla":"1717828","bugzilla_description":"CVE-2019-11356 cyrus-imapd: buffer overflow in CalDAV request handling triggered by a long iCalendar property name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["cyrus-imapd-0:3.0.7-15.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11356.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-14230","severity":"moderate","public_date":"2017-08-31T00:00:00Z","advisories":[],"bugzilla":"1491236","bugzilla_description":"CVE-2017-14230 cyrus-imapd: Off-by-one error in prefix calculation in the mboxlist_do_find function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14230.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2015-8077","severity":"moderate","public_date":"2015-10-26T00:00:00Z","advisories":[],"bugzilla":"1278374","bugzilla_description":"CVE-2015-8077 cyrus-imapd: Integer overflow in range checks","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8077.json"},{"CVE":"CVE-2015-8078","severity":"moderate","public_date":"2015-10-26T00:00:00Z","advisories":[],"bugzilla":"1278380","bugzilla_description":"CVE-2015-8078 cyrus-imapd: Integer overflow in index_urlfetch","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8078.json"},{"CVE":"CVE-2015-8076","severity":"low","public_date":"2015-06-18T00:00:00Z","advisories":[],"bugzilla":"1267869","bugzilla_description":"CVE-2015-8076 cyrus-imapd: Out of bounds heap read in index_urlfetch","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"(CWE-125|CWE-122)->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8076.json"},{"CVE":"CVE-2011-3372","severity":"moderate","public_date":"2011-10-05T00:00:00Z","advisories":["RHSA-2011:1508"],"bugzilla":"740822","bugzilla_description":"CVE-2011-3372 cyrus-imapd: nntpd authentication bypass","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["cyrus-imapd-0:2.3.7-12.el5_7.2","cyrus-imapd-0:2.2.12-17.el4","cyrus-imapd-0:2.3.16-6.el6_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3372.json"},{"CVE":"CVE-2011-3208","severity":"important","public_date":"2011-09-08T00:00:00Z","advisories":["RHSA-2011:1317"],"bugzilla":"734926","bugzilla_description":"CVE-2011-3208 cyrus-imapd: nntpd buffer overflow in split_wildmats()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cyrus-imapd-0:2.3.7-12.el5_7.1","cyrus-imapd-0:2.2.12-16.el4","cyrus-imapd-0:2.3.16-6.el6_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3208.json"},{"CVE":"CVE-2011-1926","severity":"moderate","public_date":"2011-03-25T00:00:00Z","advisories":["RHSA-2011:0859"],"bugzilla":"705288","bugzilla_description":"CVE-2011-1926 cyrus-imapd: STARTTLS plaintext command injection","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["cyrus-imapd-0:2.2.12-15.el4","cyrus-imapd-0:2.3.16-6.el6_1.2","cyrus-imapd-0:2.3.7-7.el5_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1926.json"},{"CVE":"CVE-2009-3235","severity":"important","public_date":"2009-09-14T00:00:00Z","advisories":["RHSA-2009:1459"],"bugzilla":"523910","bugzilla_description":"CVE-2009-3235 cyrus-impad: CMU sieve buffer overflows","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["cyrus-imapd-0:2.3.7-7.el5_4.3","cyrus-imapd-0:2.2.12-10.el4_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3235.json"},{"CVE":"CVE-2009-2632","severity":"important","public_date":"2009-09-07T00:00:00Z","advisories":["RHSA-2009:1459"],"bugzilla":"521010","bugzilla_description":"CVE-2009-2632 cyrus-imapd: buffer overflow in cyrus sieve","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["cyrus-imapd-0:2.3.7-7.el5_4.3","cyrus-imapd-0:2.2.12-10.el4_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2632.json"},{"CVE":"CVE-2009-0688","severity":"important","public_date":"2008-05-15T00:00:00Z","advisories":["RHSA-2009:1116"],"bugzilla":"487251","bugzilla_description":"CVE-2009-0688 cyrus-sasl: sasl_encode64() does not reliably null-terminate its output","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["cyrus-imapd-0:2.2.12-10.el4_8.1","cyrus-imapd-0:2.3.7-2.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0688.json"},{"CVE":"CVE-2011-3481","severity":"moderate","public_date":"2005-12-17T00:00:00Z","advisories":["RHSA-2011:1508"],"bugzilla":"738391","bugzilla_description":"CVE-2011-3481 cyrus-imapd: NULL pointer dereference via crafted References header in email","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["cyrus-imapd-0:2.3.7-12.el5_7.2","cyrus-imapd-0:2.2.12-17.el4","cyrus-imapd-0:2.3.16-6.el6_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3481.json"},{"CVE":"CVE-2005-0546","severity":"moderate","public_date":"2005-02-14T00:00:00Z","advisories":["RHSA-2005:408"],"bugzilla":"1617539","bugzilla_description":"CVE-2005-0546 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cyrus-imapd-0:2.2.12-3.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0546.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-gssapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-gssapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-gssapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-md5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-md5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-md5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-plain_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-plain_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-plain_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-scram_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-scram_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl-scram_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl_security_api_results.json
new file mode 100644
index 0000000..47c7336
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/cyrus-sasl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-19906","severity":"moderate","public_date":"2019-11-28T00:00:00Z","advisories":[],"bugzilla":"1791854","bugzilla_description":"CVE-2019-19906 cyrus-sasl: denial of service in _sasl_add_string function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19906.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2013-4122","severity":"moderate","public_date":"2013-07-12T00:00:00Z","advisories":[],"bugzilla":"984669","bugzilla_description":"CVE-2013-4122 cyrus-sasl: NULL pointer dereference (DoS) when glibc v.2.17 or FIPS-140 enabled Linux system used","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4122.json"},{"CVE":"CVE-2006-1721","severity":"moderate","public_date":"2005-05-15T00:00:00Z","advisories":["RHSA-2007:0795","RHSA-2007:0878"],"bugzilla":"189814","bugzilla_description":"CVE-2006-1721 cyrus-sasl digest-md5 DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cyrus-sasl-0:2.1.19-14","cyrus-sasl-0:2.1.15-15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1721.json"},{"CVE":"CVE-2004-0884","severity":"important","public_date":"2004-10-07T00:00:00Z","advisories":["RHSA-2004:546"],"bugzilla":"1617313","bugzilla_description":"CVE-2004-0884 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cyrus-sasl-0:2.1.15-10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0884.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dapl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dapl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dapl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/daxctl-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/daxctl-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/daxctl-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/daxio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/daxio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/daxio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-glib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-glib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-glib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-glib_security_api_results.json
new file mode 100644
index 0000000..7471bb5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-glib_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-0292","severity":"important","public_date":"2013-02-14T00:00:00Z","advisories":["RHSA-2013:0568"],"bugzilla":"911658","bugzilla_description":"CVE-2013-0292 dbus-glib: Local privilege escalation due improper filtering of message sender when NameOwnerChanged signal received","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["dbus-glib-0:0.73-11.el5_9","dbus-glib-0:0.86-6.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0292.json"},{"CVE":"CVE-2010-1172","severity":"moderate","public_date":"2010-08-10T00:00:00Z","advisories":["RHSA-2010:0616"],"bugzilla":"585394","bugzilla_description":"CVE-2010-1172 dbus-glib: property access not validated","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P/","CWE":null,"affected_packages":["dbus-glib-0:0.73-10.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1172.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-x11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-x11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus-x11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus_security_api_results.json
new file mode 100644
index 0000000..2cca7c3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbus_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12049","severity":"important","public_date":"2020-06-04T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3014","RHSA-2020:2894","RHSA-2020:3298","RHSA-2020:3044"],"bugzilla":"1849041","bugzilla_description":"CVE-2020-12049 dbus: denial of service via file descriptor leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-43.82.202007300301.0","dbus-1:1.12.8-10.el8_2","dbus-1:1.12.8-10.el8_1","dbus-1:1.10.24-14.el7_8","dbus-1:1.12.8-8.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12049.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-16782","severity":"moderate","public_date":"2019-12-18T00:00:00Z","advisories":["RHSA-2020:2480"],"bugzilla":"1789100","bugzilla_description":"CVE-2019-16782 rubygem-rack: hijack sessions by using timing attacks targeting the session id","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["cfme-gemset-0:5.11.6.0-1.el8cf","cfme-amazon-smartstate-0:5.11.6.0-1.el8cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-12749","severity":"important","public_date":"2019-06-11T00:00:00Z","advisories":["RHSA-2019:2870","RHSA-2020:4032","RHSA-2019:2868","RHSA-2019:3707","RHBA-2019:3303","RHSA-2019:1726"],"bugzilla":"1719344","bugzilla_description":"CVE-2019-12749 dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["dbus-1:1.2.24-9.el6_6","dbus-1:1.12.8-9.el8","redhat-coreos-42.81.20191107.0","dbus-1:1.10.24-15.el7","dbus-1:1.2.24-11.el6_10","dbus-1:1.2.24-9.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12749.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16470","severity":"moderate","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1646814","bugzilla_description":"CVE-2018-16470 rubygem-rack: Buffer size in multipart parser allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rubygem-rack-1:1.6.4-3.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-0245","severity":"low","public_date":"2015-02-09T00:00:00Z","advisories":[],"bugzilla":"1186775","bugzilla_description":"CVE-2015-0245 dbus: denial of service in dbus systemd activation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0245.json"},{"CVE":"CVE-2014-7824","severity":"low","public_date":"2014-11-10T00:00:00Z","advisories":[],"bugzilla":"1173555","bugzilla_description":"CVE-2014-7824 dbus: local denial of service via incomplete fix for CVE-2014-3636","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7824.json"},{"CVE":"CVE-2014-3635","severity":"moderate","public_date":"2014-09-16T00:00:00Z","advisories":[],"bugzilla":"1140523","bugzilla_description":"CVE-2014-3635 dbus: heap-based buffer overflow flaw in file descriptor passing","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3635.json"},{"CVE":"CVE-2014-3636","severity":"low","public_date":"2014-09-16T00:00:00Z","advisories":[],"bugzilla":"1140525","bugzilla_description":"CVE-2014-3636 dbus: denial of service by queuing or splitting file descriptors","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3636.json"},{"CVE":"CVE-2014-3637","severity":"low","public_date":"2014-09-16T00:00:00Z","advisories":[],"bugzilla":"1140527","bugzilla_description":"CVE-2014-3637 dbus: denial of service by creating unkillable D-Bus connections","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3637.json"},{"CVE":"CVE-2014-3638","severity":"low","public_date":"2014-09-16T00:00:00Z","advisories":[],"bugzilla":"1140529","bugzilla_description":"CVE-2014-3638 dbus: denial of service in method call handling","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3638.json"},{"CVE":"CVE-2014-3639","severity":"low","public_date":"2014-09-16T00:00:00Z","advisories":[],"bugzilla":"1140532","bugzilla_description":"CVE-2014-3639 dbus: denial of service flaw in incomplete connection handling","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3639.json"},{"CVE":"CVE-2014-3532","severity":"moderate","public_date":"2014-07-02T00:00:00Z","advisories":[],"bugzilla":"1114414","bugzilla_description":"CVE-2014-3532 dbus: denial of service in file descriptor passing feature","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3532.json"},{"CVE":"CVE-2014-3533","severity":"moderate","public_date":"2014-07-02T00:00:00Z","advisories":[],"bugzilla":"1114416","bugzilla_description":"CVE-2014-3533 dbus: denial of service when forwarding invalid file descriptors","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3533.json"},{"CVE":"CVE-2014-3477","severity":"moderate","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1104791","bugzilla_description":"CVE-2014-3477 dbus: denial of service flaw in dbus-daemon","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3477.json"},{"CVE":"CVE-2013-2168","severity":"moderate","public_date":"2013-06-13T00:00:00Z","advisories":[],"bugzilla":"974109","bugzilla_description":"CVE-2013-2168 dbus: Crash of system services that use libdbus (DoS) due to non-portable use of va_list in UNIX format string wrapper","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2168.json"},{"CVE":"CVE-2013-0292","severity":"important","public_date":"2013-02-14T00:00:00Z","advisories":["RHSA-2013:0568"],"bugzilla":"911658","bugzilla_description":"CVE-2013-0292 dbus-glib: Local privilege escalation due improper filtering of message sender when NameOwnerChanged signal received","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["dbus-glib-0:0.73-11.el5_9","dbus-glib-0:0.86-6.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0292.json"},{"CVE":"CVE-2012-3524","severity":"important","public_date":"2012-09-12T00:00:00Z","advisories":["RHSA-2012:1261"],"bugzilla":"847402","bugzilla_description":"CVE-2012-3524 dbus: privilege escalation when libdbus is used in setuid/setgid application","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["dbus-1:1.2.24-7.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3524.json"},{"CVE":"CVE-2011-2533","severity":"low","public_date":"2011-06-10T00:00:00Z","advisories":[],"bugzilla":"715540","bugzilla_description":"CVE-2011-2533 dbus: Possibility of symlink attack in /tmp during compilation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2533.json"},{"CVE":"CVE-2011-2200","severity":"moderate","public_date":"2011-06-09T00:00:00Z","advisories":["RHSA-2011:1132"],"bugzilla":"712676","bugzilla_description":"CVE-2011-2200 dbus: Local DoS via messages with non-native byte order","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["dbus-1:1.2.24-5.el6_1","dbus-0:1.1.2-16.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2200.json"},{"CVE":"CVE-2010-4352","severity":"moderate","public_date":"2010-12-11T00:00:00Z","advisories":["RHSA-2011:0376"],"bugzilla":"663673","bugzilla_description":"CVE-2010-4352 D-BUS: Stack overflow by validating message with excessive number of nested variants","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["dbus-1:1.2.24-4.el6_0","dbus-0:1.1.2-15.el5_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4352.json"},{"CVE":"CVE-2010-1172","severity":"moderate","public_date":"2010-08-10T00:00:00Z","advisories":["RHSA-2010:0616"],"bugzilla":"585394","bugzilla_description":"CVE-2010-1172 dbus-glib: property access not validated","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P/","CWE":null,"affected_packages":["dbus-glib-0:0.73-10.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1172.json"},{"CVE":"CVE-2009-1189","severity":"moderate","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2010:0018"],"bugzilla":"496672","bugzilla_description":"CVE-2009-1189 dbus: invalid fix for CVE-2008-3834","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["dbus-0:1.1.2-12.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1189.json"},{"CVE":"CVE-2008-4311","severity":"moderate","public_date":"2008-12-05T00:00:00Z","advisories":[],"bugzilla":"469151","bugzilla_description":"CVE-2008-4311 dbus: incorrect use of [send|receive]_requested_reply policy rule attribute in system.conf","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4311.json"},{"CVE":"CVE-2008-3834","severity":"moderate","public_date":"2008-09-27T00:00:00Z","advisories":["RHSA-2009:0008"],"bugzilla":"464674","bugzilla_description":"CVE-2008-3834 dbus denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dbus-0:1.0.0-7.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3834.json"},{"CVE":"CVE-2008-0595","severity":"moderate","public_date":"2008-02-27T00:00:00Z","advisories":["RHSA-2008:0159"],"bugzilla":"432419","bugzilla_description":"CVE-2008-0595 dbus security policy circumvention","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dbus-0:1.0.0-6.3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0595.json"},{"CVE":"CVE-2006-6107","severity":"moderate","public_date":"2006-12-12T00:00:00Z","advisories":["RHSA-2007:0008"],"bugzilla":"219665","bugzilla_description":"CVE-2006-6107 D-Bus denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dbus-0:0.22-12.EL.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-6107.json"},{"CVE":"CVE-2005-0201","severity":"low","public_date":"2005-01-31T00:00:00Z","advisories":["RHSA-2005:102"],"bugzilla":"1617489","bugzilla_description":"CVE-2005-0201 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dbus-0:0.22-12.EL.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0201.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbusmenu-qt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbusmenu-qt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbusmenu-qt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbxtool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbxtool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dbxtool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dconf-editor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dconf-editor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dconf-editor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dconf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dconf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dconf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dcraw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dcraw_security_api_results.json
new file mode 100644
index 0000000..0aff6e2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dcraw_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19565","severity":"low","public_date":"2018-11-23T00:00:00Z","advisories":[],"bugzilla":"1656776","bugzilla_description":"CVE-2018-19565 dcraw: Buffer over-read in crop_masked_pixels resulting in denial of service or information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19565.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-19566","severity":"low","public_date":"2018-11-23T00:00:00Z","advisories":[],"bugzilla":"1656778","bugzilla_description":"CVE-2018-19566 dcraw: Heap buffer over-read in parse_tiff_ifd resulting in a denial of service or information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19566.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-19567","severity":"low","public_date":"2018-11-23T00:00:00Z","advisories":[],"bugzilla":"1656779","bugzilla_description":"CVE-2018-19567 dcraw: A floating point exception in parse_tiff_ifd resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19567.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19568","severity":"low","public_date":"2018-11-23T00:00:00Z","advisories":[],"bugzilla":"1656780","bugzilla_description":"CVE-2018-19568 dcraw: A floating point exception in kodak_radc_load_raw resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19568.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19655","severity":"low","public_date":"2018-08-18T00:00:00Z","advisories":[],"bugzilla":"1656773","bugzilla_description":"CVE-2018-19655 dcraw: Stack-based buffer overflow in the find_green() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19655.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5804","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":[],"bugzilla":"1591879","bugzilla_description":"CVE-2018-5804 LibRaw: type confusion error in identify() function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5805","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1591887","bugzilla_description":"CVE-2018-5805 LibRaw: Stack-based buffer overflow in quicktake_100_load_raw() function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5805.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-5806","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1591897","bugzilla_description":"CVE-2018-5806 LibRaw: NULL pointer dereference in leaf_hdr_load_raw() function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5806.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5800","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1553332","bugzilla_description":"CVE-2018-5800 LibRaw: Heap-based buffer overflow in LibRaw::kodak_ycbcr_load_raw function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5800.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5801","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1553334","bugzilla_description":"CVE-2018-5801 LibRaw: NULL pointer dereference in LibRaw::unpack function src/libraw_cxx.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5801.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5802","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1553335","bugzilla_description":"CVE-2018-5802 LibRaw: Out-of-bounds read in kodak_radc_load_raw function internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5802.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16909","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":[],"bugzilla":"1524859","bugzilla_description":"CVE-2017-16909 libraw: Heap-buffer overflow in the LibRaw::panasonic_load_raw() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16909.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16910","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":[],"bugzilla":"1524860","bugzilla_description":"CVE-2017-16910 libraw: Invalid read memory access in the LibRaw::xtrans_interpolate() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16910.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14348","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1492121","bugzilla_description":"CVE-2017-14348 libraw: Heap-based 1 byte buffer over-write in processCanonCameraInfo function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14348.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14608","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1499687","bugzilla_description":"CVE-2017-14608 libraw: Out-of-bounds read in the kodak_65000_load_raw function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14608.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14265","severity":"low","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1494405","bugzilla_description":"CVE-2017-14265 libraw: Stack based buffer overflow in the xtrans_interpolate function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14265.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13735","severity":"low","public_date":"2017-08-22T00:00:00Z","advisories":[],"bugzilla":"1488476","bugzilla_description":"CVE-2017-13735 libraw: Floating point exception in kodak_radc_load_raw function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8366","severity":"moderate","public_date":"2015-11-30T00:00:00Z","advisories":[],"bugzilla":"1287056","bugzilla_description":"CVE-2015-8366 LibRaw: Index overflow in smal_decode_segment","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8366.json"},{"CVE":"CVE-2015-8367","severity":"low","public_date":"2015-11-30T00:00:00Z","advisories":[],"bugzilla":"1287076","bugzilla_description":"CVE-2015-8367 LibRaw: Memory objects are not intialized properly","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8367.json"},{"CVE":"CVE-2015-3885","severity":"low","public_date":"2015-05-11T00:00:00Z","advisories":[],"bugzilla":"1221249","bugzilla_description":"CVE-2015-3885 dcraw: input sanitization flaw leading to buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-190->CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3885.json"},{"CVE":"CVE-2013-1438","severity":"low","public_date":"2013-08-28T00:00:00Z","advisories":[],"bugzilla":"1002714","bugzilla_description":"CVE-2013-1438 CVE-2013-1439 LibRaw: multiple denial of service flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1438.json"},{"CVE":"CVE-2013-1439","severity":"low","public_date":"2013-08-28T00:00:00Z","advisories":[],"bugzilla":"1002714","bugzilla_description":"CVE-2013-1438 CVE-2013-1439 LibRaw: multiple denial of service flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1439.json"},{"CVE":"CVE-2013-2126","severity":"moderate","public_date":"2013-05-24T00:00:00Z","advisories":[],"bugzilla":"968385","bugzilla_description":"CVE-2013-2126 LibRaw: double-free flaw when handling damaged full-color in Foveon and sRAW files","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2126.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejagnu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejagnu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejagnu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-sans-mono-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-sans-mono-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-sans-mono-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-serif-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-serif-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dejavu-serif-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/deltarpm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/deltarpm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/deltarpm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/desktop-file-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/desktop-file-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/desktop-file-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-event-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-event-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-event-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-event_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-event_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-event_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-multipath-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-multipath-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-multipath-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-multipath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-multipath_security_api_results.json
new file mode 100644
index 0000000..4f302cc
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-multipath_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2009-0115","severity":"moderate","public_date":"2009-03-24T00:00:00Z","advisories":["RHSA-2009:0411"],"bugzilla":"493330","bugzilla_description":"CVE-2009-0115 device-mapper-multipath: insecure permissions on multipathd.sock","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["device-mapper-multipath-0:0.4.5-31.el4_7.1","device-mapper-multipath-0:0.4.7-23.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0115.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-persistent-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-persistent-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper-persistent-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper_security_api_results.json
new file mode 100644
index 0000000..4f302cc
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/device-mapper_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2009-0115","severity":"moderate","public_date":"2009-03-24T00:00:00Z","advisories":["RHSA-2009:0411"],"bugzilla":"493330","bugzilla_description":"CVE-2009-0115 device-mapper-multipath: insecure permissions on multipathd.sock","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["device-mapper-multipath-0:0.4.5-31.el4_7.1","device-mapper-multipath-0:0.4.7-23.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0115.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhclient_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhclient_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhclient_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhcp-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhcp-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhcp-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhcp-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhcp-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhcp-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhcp_security_api_results.json
new file mode 100644
index 0000000..5d9e957
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dhcp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-6470","severity":"moderate","public_date":"2018-07-14T00:00:00Z","advisories":["RHSA-2019:3525","RHSA-2019:2060"],"bugzilla":"1708641","bugzilla_description":"CVE-2019-6470 dhcp: double-deletion of the released addresses in the dhcpv6 code leading to crash and possible DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["dhcp-12:4.3.6-34.el8","dhcp-12:4.2.5-77.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-1111","severity":"critical","public_date":"2018-05-15T12:00:00Z","advisories":["RHSA-2018:1459","RHSA-2018:1525","RHSA-2018:1457","RHSA-2018:1458","RHSA-2018:1524","RHSA-2018:1455","RHSA-2018:1456","RHSA-2018:1453","RHSA-2018:1454","RHSA-2018:1460","RHSA-2018:1461"],"bugzilla":"1567974","bugzilla_description":"CVE-2018-1111 dhcp: Command injection vulnerability in the DHCP client NetworkManager integration script","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["dhcp-12:4.2.5-58.el7_4.4","dhcp-12:4.1.1-34.P1.el6_4.2","dhcp-12:4.2.5-68.el7_5.1","dhcp-12:4.2.5-42.el7_2.1","rhvm-appliance-0:4.2-20180504.0","dhcp-12:4.1.1-53.P1.el6_9.4","dhcp-12:4.1.1-38.P1.el6_5.1","dhcp-12:4.1.1-49.P1.el6_7.1","dhcp-12:4.2.5-47.el7_3.1","dhcp-12:4.1.1-43.P1.el6_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1111.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5732","severity":"important","public_date":"2018-02-28T00:00:00Z","advisories":["RHSA-2018:0469","RHSA-2018:0483"],"bugzilla":"1549960","bugzilla_description":"CVE-2018-5732 dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["dhcp-12:4.2.5-58.el7_4.3","dhcp-12:4.1.1-53.P1.el6_9.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5733","severity":"moderate","public_date":"2018-02-28T00:00:00Z","advisories":["RHSA-2018:0469","RHSA-2018:0483"],"bugzilla":"1549961","bugzilla_description":"CVE-2018-5733 dhcp: Reference count overflow in dhcpd allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["dhcp-12:4.2.5-58.el7_4.3","dhcp-12:4.1.1-53.P1.el6_9.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5733.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3144","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:0158"],"bugzilla":"1522918","bugzilla_description":"CVE-2017-3144 dhcp: omapi code doesn't free socket descriptors when empty message is received allowing denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["dhcp-12:4.2.5-58.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3144.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-2774","severity":"moderate","public_date":"2016-03-07T00:00:00Z","advisories":["RHSA-2016:2590"],"bugzilla":"1315259","bugzilla_description":"CVE-2016-2774 dhcp: unclosed TCP connections to OMAPI or failover ports can cause DoS","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["dhcp-12:4.2.5-47.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2774.json"},{"CVE":"CVE-2015-8605","severity":"moderate","public_date":"2016-01-12T00:00:00Z","advisories":[],"bugzilla":"1297314","bugzilla_description":"CVE-2015-8605 dhcp: UDP payload length not properly checked","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8605.json"},{"CVE":"CVE-2013-2494","severity":"moderate","public_date":"2013-03-26T00:00:00Z","advisories":[],"bugzilla":"928011","bugzilla_description":"CVE-2013-2494 dhcp: bind/libdns CVE-2013-2266 regular expressions excessive resource consumption DoS","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2494.json"},{"CVE":"CVE-2012-3955","severity":"low","public_date":"2012-09-12T00:00:00Z","advisories":["RHSA-2013:0504"],"bugzilla":"856766","bugzilla_description":"CVE-2012-3955 dhcp: reduced expiration time of an IPv6 lease may cause dhcpd to crash","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["dhcp-12:4.1.1-34.P1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3955.json"},{"CVE":"CVE-2012-3571","severity":"moderate","public_date":"2012-07-24T00:00:00Z","advisories":["RHSA-2012:1140","RHSA-2012:1141"],"bugzilla":"842420","bugzilla_description":"CVE-2012-3571 dhcp: DoS due to error in handling malformed client identifiers","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["dhcp-12:4.1.1-31.P1.el6_3.1","dhcp-12:3.0.5-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3571.json"},{"CVE":"CVE-2012-3570","severity":"moderate","public_date":"2012-07-24T00:00:00Z","advisories":[],"bugzilla":"842424","bugzilla_description":"CVE-2012-3570 dhcp: DoS in DHCPv6 due to error in handling malformed client identifiers","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3570.json"},{"CVE":"CVE-2012-3954","severity":"moderate","public_date":"2012-07-24T00:00:00Z","advisories":["RHSA-2012:1141"],"bugzilla":"842428","bugzilla_description":"CVE-2012-3954 dhcp: two memory leaks may result in DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["dhcp-12:4.1.1-31.P1.el6_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3954.json"},{"CVE":"CVE-2011-4868","severity":"moderate","public_date":"2012-01-12T00:00:00Z","advisories":[],"bugzilla":"781242","bugzilla_description":"CVE-2011-4868 dhcp: error in DDNS processing of DHCPv6 leases can cause ISC dhcpd crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4868.json"},{"CVE":"CVE-2011-4539","severity":"moderate","public_date":"2011-12-07T00:00:00Z","advisories":["RHSA-2011:1819"],"bugzilla":"761265","bugzilla_description":"CVE-2011-4539 dhcp: DoS due to processing certain regular expressions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["dhcp-12:4.1.1-25.P1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4539.json"},{"CVE":"CVE-2011-2748","severity":"moderate","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2011:1160"],"bugzilla":"729382","bugzilla_description":"CVE-2011-2748 CVE-2011-2749 dhcp: denial of service flaws","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["dhcp-12:3.0.5-29.el5_7.1","dhcp-12:4.1.1-19.P1.el6_1.1","dhcp-7:3.0.1-68.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2748.json"},{"CVE":"CVE-2011-2749","severity":"moderate","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2011:1160"],"bugzilla":"729382","bugzilla_description":"CVE-2011-2748 CVE-2011-2749 dhcp: denial of service flaws","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["dhcp-12:3.0.5-29.el5_7.1","dhcp-12:4.1.1-19.P1.el6_1.1","dhcp-7:3.0.1-68.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2749.json"},{"CVE":"CVE-2011-0997","severity":"important","public_date":"2011-04-05T00:00:00Z","advisories":["RHSA-2011:0840","RHSA-2011:0428"],"bugzilla":"689832","bugzilla_description":"CVE-2011-0997 dhclient: insufficient sanitization of certain DHCP response values","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-78","affected_packages":["dhcp-7:3.0.1-10.3_EL3","dhcp-12:3.0.5-23.el5_6.4","dhcp-7:3.0.1-67.el4","dhcp-12:4.1.1-12.P1.el6_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0997.json"},{"CVE":"CVE-2011-2717","severity":"moderate","public_date":"2011-04-05T00:00:00Z","advisories":[],"bugzilla":"725349","bugzilla_description":"CVE-2011-2717 dhcpv6: insufficient checking of DHCP options","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2717.json"},{"CVE":"CVE-2011-0413","severity":"moderate","public_date":"2011-01-26T00:00:00Z","advisories":["RHSA-2011:0256"],"bugzilla":"672755","bugzilla_description":"CVE-2011-0413 dhcp: unexpected abort caused by a DHCPv6 decline message","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["dhcp-12:4.1.1-12.P1.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0413.json"},{"CVE":"CVE-2010-3616","severity":"moderate","public_date":"2010-12-07T00:00:00Z","advisories":[],"bugzilla":"662325","bugzilla_description":"CVE-2010-3616 dhcp: server hangs with TCP to failover peer port","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3616.json"},{"CVE":"CVE-2010-3611","severity":"moderate","public_date":"2010-11-02T00:00:00Z","advisories":["RHSA-2010:0923"],"bugzilla":"649877","bugzilla_description":"CVE-2010-3611 dhcp: NULL pointer dereference crash via crafted DHCPv6 packet","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["dhcp-12:4.1.1-12.P1.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3611.json"},{"CVE":"CVE-2010-2156","severity":null,"public_date":"2010-06-01T00:00:00Z","advisories":[],"bugzilla":"601403","bugzilla_description":"CVE-2010-2156 dhcp: remote DoS via zero-length client ID","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2156.json"},{"CVE":"CVE-2009-0692","severity":"critical","public_date":"2009-07-14T00:00:00Z","advisories":["RHSA-2009:1136","RHSA-2009:1154"],"bugzilla":"507717","bugzilla_description":"CVE-2009-0692 dhclient: stack overflow leads to arbitrary code execution as root","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-130->CWE-121","affected_packages":["dhcp-7:3.0.1-62.el4_7.1","dhcp-7:3.0.1-65.el4_8.1","dhcp-7:3.0.1-10.2_EL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0692.json"},{"CVE":"CVE-2009-1893","severity":"moderate","public_date":"2009-07-14T00:00:00Z","advisories":["RHSA-2009:1154"],"bugzilla":"510024","bugzilla_description":"CVE-2009-1893 dhcp: insecure temporary file use in the dhcpd init script","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:C","CWE":"CWE-377","affected_packages":["dhcp-7:3.0.1-10.2_EL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1893.json"},{"CVE":"CVE-2007-0063","severity":"important","public_date":"2007-10-08T00:00:00Z","advisories":["RHSA-2007:0970"],"bugzilla":"1618264","bugzilla_description":"CVE-2007-0063 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dhcp-1:2.0pl5-11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0063.json"},{"CVE":"CVE-2007-5365","severity":"important","public_date":"2007-10-08T00:00:00Z","advisories":["RHSA-2007:0970"],"bugzilla":"327781","bugzilla_description":"CVE-2007-5365 dhcpd stack-based buffer overlow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dhcp-1:2.0pl5-11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5365.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dialog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dialog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dialog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/diffstat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/diffstat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/diffstat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/diffutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/diffutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/diffutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dleyna-connector-dbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dleyna-connector-dbus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dleyna-connector-dbus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dleyna-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dleyna-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dleyna-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dleyna-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dleyna-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dleyna-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dlm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dlm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dlm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dlm-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dlm-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dlm-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dmidecode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dmidecode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dmidecode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dmraid-events_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dmraid-events_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dmraid-events_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dmraid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dmraid_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dmraid_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dnsmasq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dnsmasq_security_api_results.json
new file mode 100644
index 0000000..08dc5eb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dnsmasq_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14312","severity":"moderate","public_date":"2020-06-30T00:00:00Z","advisories":[],"bugzilla":"1851342","bugzilla_description":"CVE-2020-14312 dnsmasq: insecure default configuration makes it an open resolver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14312.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-14834","severity":"low","public_date":"2019-10-23T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1715","RHSA-2020:3878"],"bugzilla":"1764425","bugzilla_description":"CVE-2019-14834 dnsmasq: memory leak in the create_helper() function in /src/helper.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-43.82.202007300301.0","dnsmasq-0:2.79-11.el8","dnsmasq-0:2.76-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14834.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-14513","severity":"low","public_date":"2019-08-09T00:00:00Z","advisories":["RHBA-2017:2117"],"bugzilla":"1739422","bugzilla_description":"CVE-2019-14513 dnsmasq: Improper bounds checking leads to a buffer overread","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["dnsmasq-0:2.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-15107","severity":"moderate","public_date":"2018-01-19T00:00:00Z","advisories":[],"bugzilla":"1510570","bugzilla_description":"CVE-2017-15107 dnsmasq: Improper validation of wildcard synthesized NSEC records","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15107.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-14491","severity":"critical","public_date":"2017-10-02T00:00:00Z","advisories":["RHSA-2017:2837","RHSA-2017:2838","RHSA-2017:2836","RHSA-2017:2839","RHSA-2017:2840","RHSA-2017:2841"],"bugzilla":"1495409","bugzilla_description":"CVE-2017-14491 dnsmasq: heap overflow in the code responsible for building DNS replies","cvss_score":10.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["dnsmasq-0:2.45-2.el5_9.1","dnsmasq-0:2.48-14.el6_6.1","dnsmasq-0:2.48-13.el6_4.1","dnsmasq-0:2.48-13.el6_5.1","dnsmasq-0:2.48-16.el6_7.1","dnsmasq-0:2.66-21.el7_3.2","dnsmasq-0:2.45-2.el5_11.1","dnsmasq-0:2.76-2.el7_4.2","dnsmasq-0:2.48-18.el6_9","dnsmasq-0:2.66-14.el7_2.2","dnsmasq-0:2.48-5.el6_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14491.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-14492","severity":"critical","public_date":"2017-10-02T00:00:00Z","advisories":["RHSA-2017:2837","RHSA-2017:2836"],"bugzilla":"1495410","bugzilla_description":"CVE-2017-14492 dnsmasq: heap overflow in the IPv6 router advertisement code","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["dnsmasq-0:2.66-21.el7_3.2","dnsmasq-0:2.76-2.el7_4.2","dnsmasq-0:2.66-14.el7_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14492.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-14493","severity":"critical","public_date":"2017-10-02T00:00:00Z","advisories":["RHSA-2017:2837","RHSA-2017:2836"],"bugzilla":"1495411","bugzilla_description":"CVE-2017-14493 dnsmasq: stack buffer overflow in the DHCPv6 code","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["dnsmasq-0:2.66-21.el7_3.2","dnsmasq-0:2.76-2.el7_4.2","dnsmasq-0:2.66-14.el7_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14493.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-14494","severity":"important","public_date":"2017-10-02T00:00:00Z","advisories":["RHSA-2017:2837","RHSA-2017:2836"],"bugzilla":"1495412","bugzilla_description":"CVE-2017-14494 dnsmasq: information leak in the DHCPv6 relay code","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:N/A:N","CWE":"CWE-125","affected_packages":["dnsmasq-0:2.66-21.el7_3.2","dnsmasq-0:2.76-2.el7_4.2","dnsmasq-0:2.66-14.el7_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14494.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-14495","severity":"important","public_date":"2017-10-02T00:00:00Z","advisories":["RHSA-2017:2836"],"bugzilla":"1495415","bugzilla_description":"CVE-2017-14495 dnsmasq: memory exhaustion vulnerability in the EDNS0 code","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":["dnsmasq-0:2.76-2.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14495.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-14496","severity":"important","public_date":"2017-10-02T00:00:00Z","advisories":["RHSA-2017:2836"],"bugzilla":"1495416","bugzilla_description":"CVE-2017-14496 dnsmasq: integer underflow leading to buffer over-read in the EDNS0 code","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-190->CWE-125","affected_packages":["dnsmasq-0:2.76-2.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14496.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-13704","severity":"important","public_date":"2017-08-21T00:00:00Z","advisories":[],"bugzilla":"1495510","bugzilla_description":"CVE-2017-13704 dnsmasq: Size parameter overflow via large DNS query","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-8899","severity":"low","public_date":"2015-11-14T00:00:00Z","advisories":[],"bugzilla":"1343072","bugzilla_description":"CVE-2015-8899 dnsmasq: Denial-of-service when empty address from DNS overlays A record from hosts","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8899.json"},{"CVE":"CVE-2015-3294","severity":"moderate","public_date":"2015-04-23T00:00:00Z","advisories":[],"bugzilla":"1215747","bugzilla_description":"CVE-2015-3294 dnsmasq: unchecked return value of the setup_reply() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-252","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3294.json"},{"CVE":"CVE-2013-0198","severity":"low","public_date":"2013-01-11T00:00:00Z","advisories":[],"bugzilla":"894486","bugzilla_description":"CVE-2013-0198 dnsmasq: Incomplete fix for the CVE-2012-3411 issue","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0198.json"},{"CVE":"CVE-2012-3411","severity":"moderate","public_date":"2012-07-09T00:00:00Z","advisories":["RHSA-2013:0579","RHSA-2013:0276","RHSA-2013:0277"],"bugzilla":"833033","bugzilla_description":"CVE-2012-3411 libvirt+dnsmasq: DNS configured to answer DNS queries from non-virtual networks","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-18.el6","rhev-hypervisor6-0:6.4-20130221.0.el6","dnsmasq-0:2.48-13.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3411.json"},{"CVE":"CVE-2009-2957","severity":"important","public_date":"2009-08-31T00:00:00Z","advisories":["RHSA-2009:1238"],"bugzilla":"519020","bugzilla_description":"CVE-2009-2957, CVE-2009-2958 dnsmasq: multiple vulnerabilities in TFTP server","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["dnsmasq-0:2.45-1.1.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2957.json"},{"CVE":"CVE-2009-2958","severity":"important","public_date":"2009-08-31T00:00:00Z","advisories":["RHSA-2009:1238"],"bugzilla":"519020","bugzilla_description":"CVE-2009-2957, CVE-2009-2958 dnsmasq: multiple vulnerabilities in TFTP server","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["dnsmasq-0:2.45-1.1.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2958.json"},{"CVE":"CVE-2008-1447","severity":"important","public_date":"2008-07-08T18:00:00Z","advisories":["RHSA-2008:0533","RHSA-2008:0789"],"bugzilla":"449345","bugzilla_description":"CVE-2008-1447 bind: implement source UDP port randomization (CERT VU#800113)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-0:9.2.1-10.el2","dnsmasq-0:2.45-1.el5_2.1","bind-20:9.2.4-22.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1447.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dnssec-trigger_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dnssec-trigger_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dnssec-trigger_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-dtds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-dtds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-dtds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-simple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-simple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-simple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-slides_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-slides_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-slides_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-style-dsssl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-style-dsssl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-style-dsssl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-style-xsl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-style-xsl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-style-xsl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-utils-pdf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-utils-pdf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-utils-pdf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook5-schemas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook5-schemas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook5-schemas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook5-style-xsl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook5-style-xsl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/docbook5-style-xsl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dom4j_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dom4j_security_api_results.json
new file mode 100644
index 0000000..f2b85ce
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dom4j_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10683","severity":"moderate","public_date":"2020-04-15T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3585","RHSA-2020:3461","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:3637"],"bugzilla":"1694235","bugzilla_description":"CVE-2020-10683 dom4j: XML External Entity vulnerability in default SAX parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10683.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2018-1000632","severity":"moderate","public_date":"2018-07-01T00:00:00Z","advisories":["RHSA-2019:0364","RHSA-2019:1159","RHSA-2019:0365","RHSA-2019:1162","RHSA-2020:3192","RHSA-2019:1161","RHSA-2019:1160","RHSA-2019:3172","RHSA-2019:0380"],"bugzilla":"1620529","bugzilla_description":"CVE-2018-1000632 dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dos2unix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dos2unix_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dos2unix_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dosfstools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dosfstools_security_api_results.json
new file mode 100644
index 0000000..7c7b9cd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dosfstools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-8872","severity":"moderate","public_date":"2016-05-14T00:00:00Z","advisories":[],"bugzilla":"1336739","bugzilla_description":"CVE-2015-8872 dosfstools: Off-by-2 error leading to corruption in FAT12","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8872.json"},{"CVE":"CVE-2016-4804","severity":"low","public_date":"2016-05-14T00:00:00Z","advisories":[],"bugzilla":"1336745","bugzilla_description":"CVE-2016-4804 dosfstools: Heap-buffer-overflows in read_fat() and get_fat() functions","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4804.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dotconf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dotconf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dotconf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot-pgsql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot-pgsql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot-pgsql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot-pigeonhole_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot-pigeonhole_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot-pigeonhole_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot_security_api_results.json
new file mode 100644
index 0000000..840f324
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dovecot_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12100","severity":"important","public_date":"2020-08-12T12:00:00Z","advisories":["RHSA-2020:3617","RHSA-2020:3713","RHSA-2020:3735","RHSA-2020:3736"],"bugzilla":"1866309","bugzilla_description":"CVE-2020-12100 dovecot: Resource exhaustion via deeply nested MIME parts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["dovecot-1:2.3.8-2.el8_2.2","dovecot-1:2.2.36-10.el8_1.2","dovecot-1:2.2.36-6.el7_8.1","dovecot-1:2.2.36-5.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12100.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12673","severity":"important","public_date":"2020-08-12T12:00:00Z","advisories":["RHSA-2020:3617","RHSA-2020:3713","RHSA-2020:3735","RHSA-2020:3736"],"bugzilla":"1866313","bugzilla_description":"CVE-2020-12673 dovecot: Out of bound reads in dovecot NTLM implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["dovecot-1:2.3.8-2.el8_2.2","dovecot-1:2.2.36-10.el8_1.2","dovecot-1:2.2.36-6.el7_8.1","dovecot-1:2.2.36-5.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12674","severity":"important","public_date":"2020-08-12T12:00:00Z","advisories":["RHSA-2020:3617","RHSA-2020:3713","RHSA-2020:3735","RHSA-2020:3736"],"bugzilla":"1866317","bugzilla_description":"CVE-2020-12674 dovecot: Crash due to assert in RPA implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["dovecot-1:2.3.8-2.el8_2.2","dovecot-1:2.2.36-10.el8_1.2","dovecot-1:2.2.36-6.el7_8.1","dovecot-1:2.2.36-5.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12674.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10957","severity":"important","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2901"],"bugzilla":"1834317","bugzilla_description":"CVE-2020-10957 dovecot: malformed NOOP commands leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["dovecot-1:2.3.8-2.el8_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10957.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10958","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1834323","bugzilla_description":"CVE-2020-10958 dovecot: command followed by sufficient number of newlines leads to use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10958.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-10967","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1834326","bugzilla_description":"CVE-2020-10967 dovecot: sending mail with empty quoted localpart leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10967.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-7046","severity":"important","public_date":"2020-02-12T00:00:00Z","advisories":[],"bugzilla":"1800491","bugzilla_description":"CVE-2020-7046 dovecot: Attacker can cause submission-login and lmtp processes to be exhausted leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7046.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7957","severity":"low","public_date":"2020-02-12T00:00:00Z","advisories":[],"bugzilla":"1800502","bugzilla_description":"CVE-2020-7957 dovecot: specially crafted email can cause mailbox to have permanently unaccessible mail","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7957.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-19722","severity":"moderate","public_date":"2019-12-13T00:00:00Z","advisories":[],"bugzilla":"1782785","bugzilla_description":"CVE-2019-19722 dovecot: null pointer dereference in push notification driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19722.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11500","severity":"important","public_date":"2019-08-28T12:00:00Z","advisories":["RHSA-2019:2885","RHSA-2019:2836","RHSA-2019:2822"],"bugzilla":"1741141","bugzilla_description":"CVE-2019-11500 dovecot: improper NULL byte handling in IMAP and ManageSieve protocol parsers leads to out of bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["dovecot-1:2.2.36-3.el7_7.1","dovecot-1:2.0.9-22.el6_10.1","dovecot-1:2.2.36-5.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11499","severity":"moderate","public_date":"2019-04-30T00:00:00Z","advisories":[],"bugzilla":"1709240","bugzilla_description":"CVE-2019-11499 dovecot: unacceptable authentication message in AUTH PLAIN over TLS leads to crash and possible DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11499.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11494","severity":"moderate","public_date":"2019-04-30T00:00:00Z","advisories":[],"bugzilla":"1709244","bugzilla_description":"CVE-2019-11494 dovecot: premature disconnection from client during AUTH command leads to crash and possible DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11494.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10691","severity":"moderate","public_date":"2019-04-18T00:00:00Z","advisories":[],"bugzilla":"1701216","bugzilla_description":"CVE-2019-10691 dovecot: Mishandling invalid UTF-8 characters by JSON encoder leading to possible DoS attack.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-228","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10691.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-7524","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":["RHSA-2020:1062"],"bugzilla":"1696152","bugzilla_description":"CVE-2019-7524 dovecot: Buffer overflow in indexer-worker process results in privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120->CWE-284","affected_packages":["dovecot-1:2.2.36-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7524.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3814","severity":"moderate","public_date":"2019-02-05T00:00:00Z","advisories":["RHSA-2019:3467","RHSA-2020:1062"],"bugzilla":"1673415","bugzilla_description":"CVE-2019-3814 dovecot: Improper certificate validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["dovecot-1:2.2.36-10.el8","dovecot-1:2.2.36-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2017-15130","severity":"low","public_date":"2018-02-28T00:00:00Z","advisories":[],"bugzilla":"1532356","bugzilla_description":"CVE-2017-15130 dovecot: TLS SNI config lookups are inefficient and can be used for DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15130.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-14461","severity":"moderate","public_date":"2018-02-28T00:00:00Z","advisories":[],"bugzilla":"1549483","bugzilla_description":"CVE-2017-14461 dovecot: Information Leak Vulnerability in rfc822_parse_domain leading to denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14461.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15132","severity":"moderate","public_date":"2018-01-09T00:00:00Z","advisories":[],"bugzilla":"1532768","bugzilla_description":"CVE-2017-15132 dovecot: Auth leaks memory if SASL authentication is aborted","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15132.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-2669","severity":"low","public_date":"2017-04-10T00:00:00Z","advisories":[],"bugzilla":"1438676","bugzilla_description":"CVE-2017-2669 dovecot: Dovecot DoS when passdb dict was used for authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2669.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-8652","severity":"moderate","public_date":"2016-11-29T00:00:00Z","advisories":[],"bugzilla":"1401024","bugzilla_description":"CVE-2016-8652 dovecot: Remote crash when auth-policy component is activated","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2016-4983","severity":"low","public_date":"2016-06-13T00:00:00Z","advisories":[],"bugzilla":"1346055","bugzilla_description":"CVE-2016-4983 dovecot insecure SSL/TLS key and certificate file creation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4983.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2015-3420","severity":"low","public_date":"2015-04-26T00:00:00Z","advisories":[],"bugzilla":"1216057","bugzilla_description":"CVE-2015-3420 dovecot: SSL/TLS handshake failures leading to a crash of the login process.","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3420.json"},{"CVE":"CVE-2014-3430","severity":"moderate","public_date":"2014-05-09T00:00:00Z","advisories":["RHSA-2014:0790"],"bugzilla":"1096402","bugzilla_description":"CVE-2014-3430 dovecot: denial of service through maxxing out SSL connections","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["dovecot-1:2.0.9-7.el6_5.1","dovecot-1:2.2.10-4.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3430.json"},{"CVE":"CVE-2013-6171","severity":"low","public_date":"2013-11-03T00:00:00Z","advisories":[],"bugzilla":"1028589","bugzilla_description":"CVE-2013-6171 dovecot: passdb checkpassword authentication local bypass","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6171.json"},{"CVE":"CVE-2013-2111","severity":"moderate","public_date":"2013-05-20T00:00:00Z","advisories":[],"bugzilla":"966029","bugzilla_description":"CVE-2013-2111 dovecot: DoS (daemon hang) when parsing invalid IMAP APPEND command parameters","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2111.json"},{"CVE":"CVE-2012-5620","severity":null,"public_date":"2012-10-05T00:00:00Z","advisories":[],"bugzilla":"883060","bugzilla_description":"CVE-2012-5620 dovecot: DoS when handling a search for multiple keywords","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5620.json"},{"CVE":"CVE-2011-4318","severity":"low","public_date":"2011-11-17T00:00:00Z","advisories":["RHSA-2013:0520"],"bugzilla":"754980","bugzilla_description":"CVE-2011-4318 dovecot: proxy destination host name not checked against SSL certificate name","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["dovecot-1:2.0.9-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4318.json"},{"CVE":"CVE-2011-1929","severity":"moderate","public_date":"2011-05-11T00:00:00Z","advisories":["RHSA-2011:1187"],"bugzilla":"706286","bugzilla_description":"CVE-2011-1929 dovecot: potential crash when parsing header names that contain NUL characters","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["dovecot-1:2.0.9-2.el6_1.1","dovecot-0:0.99.11-10.EL4","dovecot-0:1.0.7-7.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1929.json"},{"CVE":"CVE-2011-2166","severity":"low","public_date":"2011-05-11T00:00:00Z","advisories":["RHSA-2013:0520"],"bugzilla":"709095","bugzilla_description":"CVE-2011-2166 dovecot: authenticated remote bypass of intended access restrictions","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["dovecot-1:2.0.9-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2166.json"},{"CVE":"CVE-2011-2167","severity":"low","public_date":"2011-05-11T00:00:00Z","advisories":["RHSA-2013:0520"],"bugzilla":"709097","bugzilla_description":"CVE-2011-2167 dovecot: directory traversal due to not obeying chroot directive","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["dovecot-1:2.0.9-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2167.json"},{"CVE":"CVE-2010-3780","severity":"moderate","public_date":"2010-10-06T00:00:00Z","advisories":["RHSA-2011:0600"],"bugzilla":"641276","bugzilla_description":"CVE-2010-3780 Dovecot: Busy master process, receiving a lot of SIGCHLD signals rapidly while logging, could die","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P/","CWE":null,"affected_packages":["dovecot-1:2.0.9-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3780.json"},{"CVE":"CVE-2010-3779","severity":"low","public_date":"2010-10-06T00:00:00Z","advisories":[],"bugzilla":"641287","bugzilla_description":"CVE-2010-3779 Dovecot: Admin permissions granted to the owner of each mailbox in a non-public namespace","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3779.json"},{"CVE":"CVE-2010-3706","severity":"low","public_date":"2010-10-01T00:00:00Z","advisories":[],"bugzilla":"640401","bugzilla_description":"CVE-2010-3706 Dovecot: Failed to update ACL cache for mailboxes stored in private namespace","cvss_score":3.2,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3706.json"},{"CVE":"CVE-2010-3707","severity":"low","public_date":"2010-10-01T00:00:00Z","advisories":["RHSA-2011:0600"],"bugzilla":"640410","bugzilla_description":"CVE-2010-3707 Dovecot: Failed to properly update ACL cache, when multiple rules defined rights for one subject","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["dovecot-1:2.0.9-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3707.json"},{"CVE":"CVE-2010-3304","severity":"low","public_date":"2010-07-24T00:00:00Z","advisories":[],"bugzilla":"746270","bugzilla_description":"CVE-2010-3304 dovecot: INBOX ACLs to newly created mailboxes propagation, possibly leading to weak ACLs","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3304.json"},{"CVE":"CVE-2009-3897","severity":"low","public_date":"2009-11-20T00:00:00Z","advisories":[],"bugzilla":"746266","bugzilla_description":"CVE-2009-3897 dovecot: Insecure permissions set for certain directories at installation time","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3897.json"},{"CVE":"CVE-2008-4577","severity":"low","public_date":"2008-10-05T00:00:00Z","advisories":["RHSA-2009:0205"],"bugzilla":"467436","bugzilla_description":"CVE-2008-4577 dovecot: incorrect handling of negative rights in the ACL plugin","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["dovecot-0:1.0.7-7.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4577.json"},{"CVE":"CVE-2008-4870","severity":"low","public_date":"2008-03-06T00:00:00Z","advisories":["RHSA-2009:0205"],"bugzilla":"469659","bugzilla_description":"CVE-2008-4870 dovecot: ssl_key_password disclosure due to an insecure dovecot.conf permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dovecot-0:1.0.7-7.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4870.json"},{"CVE":"CVE-2008-1199","severity":"low","public_date":"2008-03-04T00:00:00Z","advisories":["RHSA-2008:0297"],"bugzilla":"436927","bugzilla_description":"CVE-2008-1199 dovecot: insecure mail_extra_groups option","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["dovecot-0:1.0.7-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1199.json"},{"CVE":"CVE-2007-6598","severity":"low","public_date":"2007-12-29T00:00:00Z","advisories":["RHSA-2008:0297"],"bugzilla":"427575","bugzilla_description":"CVE-2007-6598 dovecot LDAP+auth cache user login mixup","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dovecot-0:1.0.7-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6598.json"},{"CVE":"CVE-2007-4211","severity":"low","public_date":"2007-08-01T00:00:00Z","advisories":["RHSA-2008:0297"],"bugzilla":"251007","bugzilla_description":"CVE-2007-4211 Dovecot possible privilege ascalation in ACL plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dovecot-0:1.0.7-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4211.json"},{"CVE":"CVE-2007-2231","severity":"low","public_date":"2007-03-28T00:00:00Z","advisories":["RHSA-2008:0297"],"bugzilla":"238439","bugzilla_description":"CVE-2007-2231 Directory traversal in dovecot with zlib plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dovecot-0:1.0.7-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2231.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/doxygen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/doxygen_security_api_results.json
new file mode 100644
index 0000000..cddc1d0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/doxygen_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10245","severity":"low","public_date":"2019-05-24T00:00:00Z","advisories":["RHSA-2020:1034"],"bugzilla":"1714190","bugzilla_description":"CVE-2016-10245 doxygen: cross-site scripting in templates/html/search_opensearch.php","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["doxygen-1:1.8.5-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dptfxtract_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dptfxtract_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dptfxtract_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-config-generic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-config-generic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-config-generic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-config-rescue_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-config-rescue_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-config-rescue_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-fips-aesni_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-fips-aesni_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-fips-aesni_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-fips_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-fips_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-fips_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-network_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-network_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut-network_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut_security_api_results.json
new file mode 100644
index 0000000..561da51
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dracut_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2016-4484","severity":"moderate","public_date":"2016-11-14T00:00:00Z","advisories":[],"bugzilla":"1395134","bugzilla_description":"CVE-2016-4484 dracut: Brute force attack on LUKS password decryption via initramfs","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4484.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2016-8637","severity":"moderate","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1392056","bugzilla_description":"CVE-2016-8637 dracut: Local information disclosure of initramfs when early cpio is used","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8637.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2012-4453","severity":"moderate","public_date":"2012-09-27T00:00:00Z","advisories":["RHSA-2013:1674"],"bugzilla":"859448","bugzilla_description":"CVE-2012-4453 dracut: Creates initramfs images with world-readable permissions (information disclosure)","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":["dracut-0:004-336.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4453.json"},{"CVE":"CVE-2010-4176","severity":"moderate","public_date":"2010-11-19T00:00:00Z","advisories":[],"bugzilla":"654489","bugzilla_description":"CVE-2010-4176  dracut: /dev/systty permissions could allow remote users to snoop on local users","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4176.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dragon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dragon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dragon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dropwatch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dropwatch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dropwatch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dstat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dstat_security_api_results.json
new file mode 100644
index 0000000..4dcb3fd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dstat_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2009-3894","severity":"moderate","public_date":"2009-11-25T00:00:00Z","advisories":["RHSA-2009:1619"],"bugzilla":"538459","bugzilla_description":"CVE-2009-3894 dstat insecure module search path","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["dstat-0:0.6.6-3.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3894.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dump_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dump_security_api_results.json
new file mode 100644
index 0000000..83d85b3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dump_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19325","severity":"low","public_date":"2020-03-16T00:00:00Z","advisories":[],"bugzilla":"1817479","bugzilla_description":"CVE-2018-19325 tcpdump: heap-based buffer over-read in the EXTRACT_32BITS function due to improper serviceId sanitization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19325.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-14882","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760430","bugzilla_description":"CVE-2018-14882 tcpdump: Buffer over-read in function rpl_dio_printopt in print-icmp6.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14882.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16300","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760445","bugzilla_description":"CVE-2018-16300 tcpdump: Resource exhaustion in bgp_attr_print() function in print-bgp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16300.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14469","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760447","bugzilla_description":"CVE-2018-14469 tcpdump: Buffer over-read in ikev1_n_print() function in print-isakmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14469.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14465","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760449","bugzilla_description":"CVE-2018-14465 tcpdump: Buffer over-read in rsvp_obj_print() function in print-rsvp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14465.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14463","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760453","bugzilla_description":"CVE-2018-14463 tcpdump: Buffer over-read in vrrp_print() function in print-vrrp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14463.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14462","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760455","bugzilla_description":"CVE-2018-14462 tcpdump: Buffer over-read in icmp_print() function in print-icmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14462.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14879","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760457","bugzilla_description":"CVE-2018-14879 tcpdump: Out of bounds read/write in in get_next_file() in tcpdump.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14879.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16229","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760458","bugzilla_description":"CVE-2018-16229 tcpdump: Buffer over-read in dccp_print_option() function in print-dccp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16229.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16227","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760461","bugzilla_description":"CVE-2018-16227 tcpdump: Buffer over-read in print-802_11.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16227.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14881","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760463","bugzilla_description":"CVE-2018-14881 tcpdump: Buffer over-read in bgp_capabilities_print() function in print-bgp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14881.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14468","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760464","bugzilla_description":"CVE-2018-14468 tcpdump: Buffer over-read in mfr_print() function in print-fr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14468.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14880","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760468","bugzilla_description":"CVE-2018-14880 tcpdump: Buffer over-read in ospf6_print_lshdr() function in print-ospf6.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14880.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10103","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760504","bugzilla_description":"CVE-2018-10103 tcpdump: SMB data printing mishandled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10103.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-10105","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760505","bugzilla_description":"CVE-2018-10105 tcpdump: SMB data printing mishandled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10105.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-14461","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760506","bugzilla_description":"CVE-2018-14461 tcpdump: Buffer over-read in ldp_tlv_print() function in print-ldp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14461.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14464","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760507","bugzilla_description":"CVE-2018-14464 tcpdump: Buffer over-read in lmp_print_data_link_subobjs() function in print-lmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14464.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14466","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760509","bugzilla_description":"CVE-2018-14466 tcpdump: Buffer over-read in print-icmp6.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14466.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14467","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760512","bugzilla_description":"CVE-2018-14467 tcpdump: Buffer over-read in bgp_capabilities_print() in print-bgp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14467.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14470","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760513","bugzilla_description":"CVE-2018-14470 tcpdump: Buffer over-read in babel_print_v2() in print-babel.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14470.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16228","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760514","bugzilla_description":"CVE-2018-16228 tcpdump: Access to uninitialized buffer in print_prefix() function in print-hncp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16228.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16230","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760516","bugzilla_description":"CVE-2018-16230 tcpdump: Buffer over-read in bgp_attr_print() function in print-bgp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16230.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16451","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760517","bugzilla_description":"CVE-2018-16451 tcpdump: Buffer over-read in print_trans() function in print-smb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16451.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16452","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760518","bugzilla_description":"CVE-2018-16452 tcpdump: Resource exhaustion in smb_fdata() funtion in smbutil.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16452.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15166","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760520","bugzilla_description":"CVE-2019-15166 tcpdump: Buffer overflow in lmp_print_data_link_subobjs() in print-lmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15166.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1010220","severity":null,"public_date":"2019-08-01T00:00:00Z","advisories":[],"bugzilla":"1735549","bugzilla_description":"CVE-2019-1010220 tcpdump: buffer over-read in function print_prefix in print-hncp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010220.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-19519","severity":"low","public_date":"2018-12-03T00:00:00Z","advisories":["RHSA-2019:3976","RHSA-2020:1604"],"bugzilla":"1655374","bugzilla_description":"CVE-2018-19519 tcpdump: Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-4.el7_7.1","tcpdump-14:4.9.2-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19519.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-16808","severity":"low","public_date":"2017-11-13T00:00:00Z","advisories":[],"bugzilla":"1516994","bugzilla_description":"CVE-2017-16808 tcpdump: heap-based buffer over-read in aoe_print in print-aoe.c and lookup_emem in addrtoname.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16808.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12893","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490539","bugzilla_description":"CVE-2017-12893 tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12894","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490540","bugzilla_description":"CVE-2017-12894 tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12894.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12895","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490541","bugzilla_description":"CVE-2017-12895 tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12895.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12896","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490543","bugzilla_description":"CVE-2017-12896 tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12896.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12897","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490545","bugzilla_description":"CVE-2017-12897 tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12898","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490546","bugzilla_description":"CVE-2017-12898 tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12898.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12899","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490547","bugzilla_description":"CVE-2017-12899 tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12899.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12900","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490548","bugzilla_description":"CVE-2017-12900 tcpdump: Buffer over-read in util-print.c:tok2strbuf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12901","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490549","bugzilla_description":"CVE-2017-12901 tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12901.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12902","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490550","bugzilla_description":"CVE-2017-12902 tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12902.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12985","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490551","bugzilla_description":"CVE-2017-12985 tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12985.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12986","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490552","bugzilla_description":"CVE-2017-12986 tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12986.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12987","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490553","bugzilla_description":"CVE-2017-12987 tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12987.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12988","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490554","bugzilla_description":"CVE-2017-12988 tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12988.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12989","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490555","bugzilla_description":"CVE-2017-12989 tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12989.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12990","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490556","bugzilla_description":"CVE-2017-12990 tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12990.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12991","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490557","bugzilla_description":"CVE-2017-12991 tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12991.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12992","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490558","bugzilla_description":"CVE-2017-12992 tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12993","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490559","bugzilla_description":"CVE-2017-12993 tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12994","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490560","bugzilla_description":"CVE-2017-12994 tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12994.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12995","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490561","bugzilla_description":"CVE-2017-12995 tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12995.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12996","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490562","bugzilla_description":"CVE-2017-12996 tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12996.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12997","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490564","bugzilla_description":"CVE-2017-12997 tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12997.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12998","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490565","bugzilla_description":"CVE-2017-12998 tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12998.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12999","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490566","bugzilla_description":"CVE-2017-12999 tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13000","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490567","bugzilla_description":"CVE-2017-13000 tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13001","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490568","bugzilla_description":"CVE-2017-13001 tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13001.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13002","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490569","bugzilla_description":"CVE-2017-13002 tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13002.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13003","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490570","bugzilla_description":"CVE-2017-13003 tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13003.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13004","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490571","bugzilla_description":"CVE-2017-13004 tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13005","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490572","bugzilla_description":"CVE-2017-13005 tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13006","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490573","bugzilla_description":"CVE-2017-13006 tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13006.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13007","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490574","bugzilla_description":"CVE-2017-13007 tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13007.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13008","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490575","bugzilla_description":"CVE-2017-13008 tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13008.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13009","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490576","bugzilla_description":"CVE-2017-13009 tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13009.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13010","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490577","bugzilla_description":"CVE-2017-13010 tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13011","severity":"moderate","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490578","bugzilla_description":"CVE-2017-13011 tcpdump: Buffer overflow in util-print.c:bittok2str_internal()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13011.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13012","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490579","bugzilla_description":"CVE-2017-13012 tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13013","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490580","bugzilla_description":"CVE-2017-13013 tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13013.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13014","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490581","bugzilla_description":"CVE-2017-13014 tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13015","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490582","bugzilla_description":"CVE-2017-13015 tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13015.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13016","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490583","bugzilla_description":"CVE-2017-13016 tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13016.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13017","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490584","bugzilla_description":"CVE-2017-13017 tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13017.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13018","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490585","bugzilla_description":"CVE-2017-13018 tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13018.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13019","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490586","bugzilla_description":"CVE-2017-13019 tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13020","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490587","bugzilla_description":"CVE-2017-13020 tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13021","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490588","bugzilla_description":"CVE-2017-13021 tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13021.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13022","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490589","bugzilla_description":"CVE-2017-13022 tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13023","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490590","bugzilla_description":"CVE-2017-13023 tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13024","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490591","bugzilla_description":"CVE-2017-13024 tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13024.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13025","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490592","bugzilla_description":"CVE-2017-13025 tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13025.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13026","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490593","bugzilla_description":"CVE-2017-13026 tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13026.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13027","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490594","bugzilla_description":"CVE-2017-13027 tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13027.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13028","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490595","bugzilla_description":"CVE-2017-13028 tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13028.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13029","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490596","bugzilla_description":"CVE-2017-13029 tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13029.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13030","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490597","bugzilla_description":"CVE-2017-13030 tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13030.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13031","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490598","bugzilla_description":"CVE-2017-13031 tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13031.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13032","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490599","bugzilla_description":"CVE-2017-13032 tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13032.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13033","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490600","bugzilla_description":"CVE-2017-13033 tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13033.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13034","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490601","bugzilla_description":"CVE-2017-13034 tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13034.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13035","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490602","bugzilla_description":"CVE-2017-13035 tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13035.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13036","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490603","bugzilla_description":"CVE-2017-13036 tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13036.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13037","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490604","bugzilla_description":"CVE-2017-13037 tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13038","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490605","bugzilla_description":"CVE-2017-13038 tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13038.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13039","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490606","bugzilla_description":"CVE-2017-13039 tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13039.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13040","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490607","bugzilla_description":"CVE-2017-13040 tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13041","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490608","bugzilla_description":"CVE-2017-13041 tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13041.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13042","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490609","bugzilla_description":"CVE-2017-13042 tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13043","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490610","bugzilla_description":"CVE-2017-13043 tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13043.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13044","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490611","bugzilla_description":"CVE-2017-13044 tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13044.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13045","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490612","bugzilla_description":"CVE-2017-13045 tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13045.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13046","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490613","bugzilla_description":"CVE-2017-13046 tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13046.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13047","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490614","bugzilla_description":"CVE-2017-13047 tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13047.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13048","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490615","bugzilla_description":"CVE-2017-13048 tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13049","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490616","bugzilla_description":"CVE-2017-13049 tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13049.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13050","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490617","bugzilla_description":"CVE-2017-13050 tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13050.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13051","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490618","bugzilla_description":"CVE-2017-13051 tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13051.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13052","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490619","bugzilla_description":"CVE-2017-13052 tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13052.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13053","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490620","bugzilla_description":"CVE-2017-13053 tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13054","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490621","bugzilla_description":"CVE-2017-13054 tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13055","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490622","bugzilla_description":"CVE-2017-13055 tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13055.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13687","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490623","bugzilla_description":"CVE-2017-13687 tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13687.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13688","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490624","bugzilla_description":"CVE-2017-13688 tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13688.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13689","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490625","bugzilla_description":"CVE-2017-13689 tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13689.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13690","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490626","bugzilla_description":"CVE-2017-13690 tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13690.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13725","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490627","bugzilla_description":"CVE-2017-13725 tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13725.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-11541","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1475352","bugzilla_description":"CVE-2017-11541 tcpdump: heap-based buffer over-read in the lldp_print","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11541.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-11542","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1475355","bugzilla_description":"CVE-2017-11542 tcpdump: heap-based buffer over-read in the pimv1_print","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-11543","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1475358","bugzilla_description":"CVE-2017-11543 tcpdump: buffer overflow in the sliplink_print function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11544","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1475359","bugzilla_description":"CVE-2017-11544 tcpdump: Segmentation Violation in the compressed_sl_print","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11544.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11108","severity":"low","public_date":"2017-07-07T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1472878","bugzilla_description":"CVE-2017-11108 tcpdump: Heap buffer overflow in the EXTRACT_16BITS function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11108.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7922","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7923","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7924","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7924.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7925","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7926","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7926.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7927","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7927.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7928","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7929","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7929.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7930","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7930.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7931","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7931.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7932","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7932.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7933","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7934","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7934.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7935","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7935.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7936","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7937","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7937.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7938","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7938.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7939","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7939.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7940","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7940.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7973","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7974","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7974.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7975","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7983","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7983.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7984","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7984.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7985","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7985.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7986","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7986.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7992","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7993","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-8574","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8574.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-8575","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8575.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5202","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5202.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5203","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5203.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5204","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5205","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5205.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5341","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5341.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5342","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5342.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5482","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5482.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5483","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5483.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5484","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5484.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5485","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5486","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-9797","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401520","bugzilla_description":"CVE-2016-9797 bluez: buffer over-read in l2cap_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9797.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9798","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401522","bugzilla_description":"CVE-2016-9798 bluez: use-after-free in conf_opt()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9798.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9800","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401527","bugzilla_description":"CVE-2016-9800 bluez: buffer overflow in pin_code_reply_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9800.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9801","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401538","bugzilla_description":"CVE-2016-9801 bluez: buffer overflow in set_ext_ctrl()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9801.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9803","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401543","bugzilla_description":"CVE-2016-9803 bluez: out-of-bounds read in le_meta_ev_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9803.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9804","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401544","bugzilla_description":"CVE-2016-9804 bluez: buffer overflow in commands_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9917","severity":"low","public_date":"2016-11-14T00:00:00Z","advisories":[],"bugzilla":"1403879","bugzilla_description":"CVE-2016-9917 bluez: Heap-based buffer overflow vulnerability in read_n()","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9917.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2015-3138","severity":"low","public_date":"2015-03-25T00:00:00Z","advisories":[],"bugzilla":"1212342","bugzilla_description":"CVE-2015-3138 tcpdump: denial of service in print-wb.c","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3138.json"},{"CVE":"CVE-2015-0261","severity":"moderate","public_date":"2015-03-09T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1201792","bugzilla_description":"CVE-2015-0261 tcpdump: IPv6 mobility printer mobility_opt_print() typecastimg/signedness error","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0261.json"},{"CVE":"CVE-2015-2153","severity":"moderate","public_date":"2015-03-09T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1201795","bugzilla_description":"CVE-2015-2153 tcpdump: tcp printer rpki_rtr_pdu_print() missing length check","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2153.json"},{"CVE":"CVE-2015-2154","severity":"low","public_date":"2015-03-09T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1201797","bugzilla_description":"CVE-2015-2154 tcpdump: ethernet printer osi_print_cksum() missing sanity checks out-of-bounds read","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2154.json"},{"CVE":"CVE-2015-2155","severity":"moderate","public_date":"2015-03-09T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1201798","bugzilla_description":"CVE-2015-2155 tcpdump: force printer vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2155.json"},{"CVE":"CVE-2014-9140","severity":"moderate","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1171182","bugzilla_description":"CVE-2014-9140 tcpdump: incorrect handling of PPP packets printing","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9140.json"},{"CVE":"CVE-2014-8767","severity":"low","public_date":"2014-11-13T00:00:00Z","advisories":[],"bugzilla":"1165160","bugzilla_description":"CVE-2014-8767 tcpdump: denial of service in verbose mode using malformed OLSR payload","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8767.json"},{"CVE":"CVE-2014-8768","severity":"low","public_date":"2014-11-13T00:00:00Z","advisories":[],"bugzilla":"1165161","bugzilla_description":"CVE-2014-8768 tcpdump: denial of service in verbose mode using malformed Geonet payload","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8768.json"},{"CVE":"CVE-2014-8769","severity":"low","public_date":"2014-11-13T00:00:00Z","advisories":[],"bugzilla":"1165162","bugzilla_description":"CVE-2014-8769 tcpdump: unreliable output using malformed AOVD payload","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8769.json"},{"CVE":"CVE-2014-4330","severity":"low","public_date":"2014-09-18T00:00:00Z","advisories":[],"bugzilla":"1139700","bugzilla_description":"CVE-2014-4330 perl-Data-Dumper: deep recursion stack overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4330.json"},{"CVE":"CVE-2014-4607","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":["RHSA-2014:0861"],"bugzilla":"1112418","bugzilla_description":"CVE-2014-4607 lzo: lzo1x_decompress_safe() integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["lzo-0:2.03-3.1.el6_5.1","lzo-0:2.06-6.el7_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4607.json"},{"CVE":"CVE-2007-3798","severity":"low","public_date":"2007-07-10T00:00:00Z","advisories":["RHSA-2007:0387","RHSA-2007:0368"],"bugzilla":"250275","bugzilla_description":"CVE-2007-3798 tcpdump BGP integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["tcpdump-14:3.9.4-11.el5","tcpdump-14:3.8.2-12.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3798.json"},{"CVE":"CVE-2007-1218","severity":"low","public_date":"2007-03-01T00:00:00Z","advisories":["RHSA-2007:0387","RHSA-2007:0368"],"bugzilla":"232347","bugzilla_description":"CVE-2007-1218 tcpdump denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.9.4-11.el5","tcpdump-14:3.8.2-12.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1218.json"},{"CVE":"CVE-2006-0670","severity":"low","public_date":"2006-02-05T00:00:00Z","advisories":[],"bugzilla":"187945","bugzilla_description":"CVE-2006-0670 bluez-hcidump Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0670.json"},{"CVE":"CVE-2005-1267","severity":"low","public_date":"2005-06-06T00:00:00Z","advisories":["RHSA-2005:505"],"bugzilla":"1617624","bugzilla_description":"CVE-2005-1267 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.8.2-10.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1267.json"},{"CVE":"CVE-2005-1278","severity":"moderate","public_date":"2005-04-26T00:00:00Z","advisories":["RHSA-2005:421","RHSA-2005:417"],"bugzilla":"1617628","bugzilla_description":"CVE-2005-1278 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.7.2-7.E3.5","tcpdump-14:3.8.2-9.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1278.json"},{"CVE":"CVE-2005-1279","severity":"moderate","public_date":"2005-04-26T00:00:00Z","advisories":["RHSA-2005:421","RHSA-2005:417"],"bugzilla":"1617629","bugzilla_description":"CVE-2005-1279 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.7.2-7.E3.5","tcpdump-14:3.8.2-9.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1279.json"},{"CVE":"CVE-2005-1280","severity":"moderate","public_date":"2005-04-26T00:00:00Z","advisories":["RHSA-2005:421","RHSA-2005:417"],"bugzilla":"1617630","bugzilla_description":"CVE-2005-1280 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.7.2-7.E3.5","tcpdump-14:3.8.2-9.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1280.json"},{"CVE":"CVE-2004-0183","severity":"low","public_date":"2004-03-29T00:00:00Z","advisories":["RHSA-2004:219"],"bugzilla":"1617174","bugzilla_description":"CVE-2004-0183 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.7.2-7.E3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0183.json"},{"CVE":"CVE-2004-0184","severity":"low","public_date":"2004-03-29T00:00:00Z","advisories":["RHSA-2004:219"],"bugzilla":"1617175","bugzilla_description":"CVE-2004-0184 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.7.2-7.E3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0184.json"},{"CVE":"CVE-2003-0989","severity":"moderate","public_date":"2004-01-14T00:00:00Z","advisories":["RHSA-2004:008","RHSA-2004:007"],"bugzilla":"1617118","bugzilla_description":"CVE-2003-0989 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.6.2-12.2.1AS.5","tcpdump-14:3.7.2-7.E3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0989.json"},{"CVE":"CVE-2004-0055","severity":"moderate","public_date":"2004-01-04T00:00:00Z","advisories":["RHSA-2004:008","RHSA-2004:007"],"bugzilla":"1617135","bugzilla_description":"CVE-2004-0055 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.6.2-12.2.1AS.5","tcpdump-14:3.7.2-7.E3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0055.json"},{"CVE":"CVE-2004-0057","severity":"moderate","public_date":"2004-01-04T00:00:00Z","advisories":["RHSA-2004:008","RHSA-2004:007"],"bugzilla":"1617136","bugzilla_description":"CVE-2004-0057 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.6.2-12.2.1AS.5","tcpdump-14:3.7.2-7.E3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0057.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dumpet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dumpet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dumpet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dvd+rw-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dvd+rw-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dvd+rw-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dvgrab_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dvgrab_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dvgrab_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dwz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dwz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dwz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dyninst_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dyninst_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/dyninst_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/e2fsprogs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/e2fsprogs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/e2fsprogs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/e2fsprogs-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/e2fsprogs-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/e2fsprogs-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/e2fsprogs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/e2fsprogs_security_api_results.json
new file mode 100644
index 0000000..953f187
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/e2fsprogs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-5188","severity":"moderate","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:4011"],"bugzilla":"1790048","bugzilla_description":"CVE-2019-5188 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["e2fsprogs-0:1.42.9-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5188.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-5094","severity":"moderate","public_date":"2019-08-27T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4011","RHSA-2020:1913"],"bugzilla":"1768555","bugzilla_description":"CVE-2019-5094 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["redhat-coreos-43.82.202007300301.0","e2fsprogs-0:1.42.9-19.el7","e2fsprogs-0:1.45.4-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5094.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2015-1572","severity":"low","public_date":"2015-02-11T00:00:00Z","advisories":[],"bugzilla":"1193945","bugzilla_description":"CVE-2015-1572 e2fsprogs: potential buffer overflow in closefs() (incomplete CVE-2015-0247 fix)","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1572.json"},{"CVE":"CVE-2015-0247","severity":"moderate","public_date":"2015-02-05T00:00:00Z","advisories":[],"bugzilla":"1187032","bugzilla_description":"CVE-2015-0247 e2fsprogs: ext2fs_open2() missing first_meta_bg boundary check leading to heap buffer overflow (oCERT-015-002)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0247.json"},{"CVE":"CVE-2007-5497","severity":"moderate","public_date":"2007-12-05T00:00:00Z","advisories":["RHSA-2008:0003"],"bugzilla":"403441","bugzilla_description":"CVE-2007-5497 e2fsprogs multiple integer overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["e2fsprogs-0:1.35-12.11.el4_6.1","e2fsprogs-0:1.26-1.73","e2fsprogs-0:1.32-15.4","e2fsprogs-0:1.39-10.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5497.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/easymock2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/easymock2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/easymock2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ebtables_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ebtables_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ebtables_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ecj_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ecj_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ecj_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ed_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ed_security_api_results.json
new file mode 100644
index 0000000..b42c56e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ed_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14584","severity":"moderate","public_date":"2020-10-16T00:00:00Z","advisories":[],"bugzilla":"1889486","bugzilla_description":"CVE-2019-14584 edk2: NULL pointer dereference in AuthenticodeVerify()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14584.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-25644","severity":"important","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4257","RHSA-2020:4256"],"bugzilla":"1885485","bugzilla_description":"CVE-2020-25644 wildfly-openssl: memory leak per HTTP session creation in WildFly OpenSSL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el8eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el6eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el7eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25644.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-26160","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1883371","bugzilla_description":"CVE-2020-26160 jwt-go: access restriction bypass vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26160.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-7733","severity":"low","public_date":"2020-09-12T00:00:00Z","advisories":[],"bugzilla":"1879733","bugzilla_description":"CVE-2020-7733 ua-parser-js: Regular expression denial of service via the regex","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7733.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14384","severity":"important","public_date":"2020-09-03T00:00:00Z","advisories":["RHSA-2020:3731","RHSA-2020:3730"],"bugzilla":"1875176","bugzilla_description":"CVE-2020-14384 jbossweb: Incomplete fix of CVE-2020-13935 for WebSocket in JBossWeb could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jbossweb-0:7.5.31-3.Final_redhat_3.1.ep6.el7","jbossweb-0:7.5.31-3.Final_redhat_3.1.ep6.el5","jbossweb-0:7.5.31-3.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14384.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14364","severity":"important","public_date":"2020-08-24T12:00:00Z","advisories":["RHSA-2020:4049","RHSA-2020:4115","RHSA-2020:4048","RHSA-2020:4059","RHSA-2020:4047","RHSA-2020:4058","RHSA-2020:4079","RHSA-2020:4167","RHSA-2020:4056","RHSA-2020:4078","RHSA-2020:4111","RHSA-2020:4055","RHSA-2020:4176","RHSA-2020:4054","RHSA-2020:4053","RHSA-2020:4052","RHSA-2020:4162","RHSA-2020:4051","RHSA-2020:4172","RHSA-2020:4050","RHSA-2020:4291","RHSA-2020:4290"],"bugzilla":"1869201","bugzilla_description":"CVE-2020-14364 QEMU: usb: out-of-bounds r/w access issue while processing usb packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["qemu-kvm-10:1.5.3-105.el7_2.20","qemu-kvm-rhev-10:2.12.0-33.el7_7.12","qemu-kvm-10:1.5.3-175.el7_9.1","qemu-kvm-10:1.5.3-160.el7_6.8","qemu-kvm-10:1.5.3-141.el7_4.11","qemu-kvm-ma-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-18.el7_6.12","qemu-kvm-2:0.12.1.2-2.448.el6_6.9","virt:rhel-8000020200910175113.f8e95b4e","qemu-kvm-ma-10:2.12.0-18.el7_6.7","qemu-kvm-10:1.5.3-167.el7_7.7","qemu-kvm-2:0.12.1.2-2.506.el6_10.8","qemu-kvm-2:0.12.1.2-2.415.el6_5.21","qemu-kvm-ma-10:2.12.0-48.el7_9.1","virt:rhel-8020020200909224913.4cda2c84","qemu-kvm-rhev-10:2.12.0-48.el7_9.1","qemu-kvm-10:1.5.3-126.el7_3.18","redhat-virtualization-host-0:4.4.2-20200930.0.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14364.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-10758","severity":"important","public_date":"2020-08-18T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3496","RHSA-2020:3497","RHSA-2020:3495","RHSA-2020:3539"],"bugzilla":"1843849","bugzilla_description":"CVE-2020-10758 keycloak: DoS by sending multiple simultaneous requests with a Content-Length header value greater than actual byte count of request body","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el6sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el7sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10758.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14352","severity":"important","public_date":"2020-08-13T00:00:00Z","advisories":["RHSA-2020:3749","RHBA-2020:3609","RHSA-2020:3658","RHSA-2020:3756"],"bugzilla":"1866498","bugzilla_description":"CVE-2020-14352 librepo: missing path validation in repomd.xml may lead to directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["librepo-0:1.9.2-2.el8_0","librepo-0:1.10.3-4.el8_1","redhat-coreos-43.82.202009181853.0","librepo-0:1.11.0-3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14352.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2020-8911","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869800","bugzilla_description":"CVE-2020-8911 aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8911.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2020-8912","severity":"low","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869801","bugzilla_description":"CVE-2020-8912 aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8912.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-13935","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3303","RHSA-2020:4004","RHSA-2020:3382","RHSA-2020:3383","RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306","RHSA-2020:3305"],"bugzilla":"1857024","bugzilla_description":"CVE-2020-13935 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","tomcat-0:7.0.76-15.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el6","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-13934","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306"],"bugzilla":"1857040","bugzilla_description":"CVE-2020-13934 tomcat: OutOfMemoryException caused by HTTP/2 connection leak could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13934.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-14560","severity":"moderate","public_date":"2020-07-01T00:00:00Z","advisories":[],"bugzilla":"1858038","bugzilla_description":"CVE-2019-14560 edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14560.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2020-15005","severity":"low","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1851026","bugzilla_description":"CVE-2020-15005 mediawiki: possible leak of private extension images into public cache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15005.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-10750","severity":"moderate","public_date":"2020-06-19T10:30:00Z","advisories":["RHSA-2020:2636"],"bugzilla":"1838401","bugzilla_description":"CVE-2020-10750 jaegertracing/jaeger: credentials leaked to container logs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532->CWE-200","affected_packages":["distributed-tracing/jaeger-all-in-one-rhel7:1.17.3-2","distributed-tracing/jaeger-ingester-rhel7:1.17.3-2","distributed-tracing/jaeger-collector-rhel7:1.17.3-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10750.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14147","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1848539","bugzilla_description":"CVE-2020-14147 redis: integer overflow in the getnum function in lua_struct.c could lead to a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14147.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2020-15780","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3218","RHSA-2020:3219","RHSA-2020:3228"],"bugzilla":"1852962","bugzilla_description":"CVE-2020-15780 kernel: lockdown: bypass through ACPI write via acpi_configfs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-193.14.3.rt13.67.el8_2","kernel-0:4.18.0-80.27.2.el8_0","kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.14.3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15780.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-0543","severity":"moderate","public_date":"2020-06-09T17:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1827165","bugzilla_description":"CVE-2020-0543 hw: Special Register Buffer Data Sampling (SRBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0543.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-10766","severity":"important","public_date":"2020-06-09T17:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845840","bugzilla_description":"CVE-2020-10766 kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10766.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10767","severity":"important","public_date":"2020-06-09T14:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845867","bugzilla_description":"CVE-2020-10767 kernel: Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10767.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10768","severity":"important","public_date":"2020-06-09T14:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845868","bugzilla_description":"CVE-2020-10768 kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10768.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10757","severity":"important","public_date":"2020-06-04T09:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHBA-2020:3180","RHSA-2020:3598","RHSA-2020:3221","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:3041"],"bugzilla":"1842525","bugzilla_description":"CVE-2020-10757 kernel: kernel: DAX hugepages not considered during mremap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-1062.33.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10757.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-12049","severity":"important","public_date":"2020-06-04T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3014","RHSA-2020:2894","RHSA-2020:3298","RHSA-2020:3044"],"bugzilla":"1849041","bugzilla_description":"CVE-2020-12049 dbus: denial of service via file descriptor leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-43.82.202007300301.0","dbus-1:1.12.8-10.el8_2","dbus-1:1.12.8-10.el8_1","dbus-1:1.10.24-14.el7_8","dbus-1:1.12.8-8.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12049.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-13777","severity":"important","public_date":"2020-06-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2639","RHSA-2020:2637","RHSA-2020:2638"],"bugzilla":"1843723","bugzilla_description":"CVE-2020-13777 gnutls: session resumption works without master key allowing MITM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["gnutls-0:3.6.8-9.el8_1","redhat-coreos-43.82.202007300301.0","gnutls-0:3.6.5-3.el8_0","gnutls-0:3.6.8-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13777.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-10754","severity":"moderate","public_date":"2020-05-29T04:41:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4003","RHSA-2020:3011"],"bugzilla":"1841041","bugzilla_description":"CVE-2020-10754 NetworkManager: user configuration not honoured leaving the connection unauthenticated via insecure defaults","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287->CWE-306","affected_packages":["NetworkManager-1:1.18.8-1.el7","redhat-coreos-43.82.202007300301.0","NetworkManager-1:1.22.8-5.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10754.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-10722","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:4114","RHSA-2020:2297","RHSA-2020:2298","RHSA-2020:2683","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828867","bugzilla_description":"CVE-2020-10722 dpdk: librte_vhost Integer overflow in vhost_user_set_log_base()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["dpdk-0:18.11.8-1.el7_8","openvswitch-0:2.9.0-130.el7fdp","openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10722.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10723","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:4114","RHSA-2020:2297","RHSA-2020:2298","RHSA-2020:2683","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828874","bugzilla_description":"CVE-2020-10723 dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["dpdk-0:18.11.8-1.el7_8","openvswitch-0:2.9.0-130.el7fdp","openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10723.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10724","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2297","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828884","bugzilla_description":"CVE-2020-10724 dpdk: librte_vhost Missing inputs validation in Vhost-crypto","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10724.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2020-10725","severity":"important","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2295","RHBA-2020:2409"],"bugzilla":"1828894","bugzilla_description":"CVE-2020-10725 dpdk: librte_vhost Malicious guest could cause segfault by sending invalid Virtio descriptor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["redhat-coreos-45.82.202007062333-0","openvswitch2.13-0:2.13.0-25.el8fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10725.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2020-10726","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2295","RHBA-2020:2409"],"bugzilla":"1828898","bugzilla_description":"CVE-2020-10726 dpdk: librte_vhost VHOST_USER_GET_INFLIGHT_FD message flooding to result in a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-45.82.202007062333-0","openvswitch2.13-0:2.13.0-25.el8fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10726.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-12888","severity":"important","public_date":"2020-05-14T00:00:00Z","advisories":["RHSA-2020:2664","RHSA-2020:2851","RHSA-2020:3016","RHSA-2020:2665","RHSA-2020:3222","RHSA-2020:3230","RHSA-2020:3010","RHSA-2020:2831","RHSA-2020:2854","RHSA-2020:2832","RHSA-2020:3019","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1836244","bugzilla_description":"CVE-2020-12888 Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["kernel-0:3.10.0-693.71.2.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-957.56.1.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-1062.30.1.el7","kernel-0:3.10.0-1127.13.1.el7","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-327.89.1.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:3.10.0-1127.13.1.rt56.1110.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12888.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-10711","severity":"important","public_date":"2020-05-12T12:00:00Z","advisories":["RHSA-2020:2103","RHSA-2020:2125","RHSA-2020:2104","RHSA-2020:2214","RHSA-2020:2522","RHSA-2020:2203","RHSA-2020:2277","RHSA-2020:2289","RHSA-2020:2102","RHSA-2020:2242","RHSA-2020:2199","RHSA-2020:2285","RHSA-2020:2519","RHSA-2020:2429","RHBA-2020:3180","RHSA-2020:2085","RHSA-2020:2082","RHSA-2020:2291","RHSA-2020:2171"],"bugzilla":"1825116","bugzilla_description":"CVE-2020-10711 Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-514.76.1.el7","kernel-0:4.18.0-193.1.2.el8_2","kernel-rt-1:3.10.0-693.67.1.rt56.665.el6rt","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:3.10.0-327.88.1.el7","kernel-0:2.6.32-754.29.2.el6","kernel-rt-0:3.10.0-1127.8.2.rt56.1103.el7","kernel-0:3.10.0-1062.26.1.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-957.54.1.el7","kernel-rt-0:4.18.0-193.1.2.rt13.53.el8_2","kernel-0:3.10.0-1127.8.2.el7","kernel-0:3.10.0-693.67.1.el7","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10711.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-1718","severity":"important","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:2112","RHSA-2020:2905","RHSA-2020:3197","RHSA-2020:2252","RHSA-2020:3196","RHSA-2020:2107","RHSA-2020:2108","RHSA-2020:2106"],"bugzilla":"1796756","bugzilla_description":"CVE-2020-1718 keycloak: security issue on reset credential flow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1718.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-1758","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:2112","RHSA-2020:2107","RHSA-2020:2108","RHSA-2020:2106"],"bugzilla":"1812514","bugzilla_description":"CVE-2020-1758 keycloak: improper verification of certificate with host mismatch could result in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":["rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1758.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-12825","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:3654","RHBA-2020:3609","RHSA-2020:4072"],"bugzilla":"1835377","bugzilla_description":"CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["redhat-coreos-43.82.202009181853.0","libcroco-0:0.6.12-4.el8_2.1","libcroco-0:0.6.12-6.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-1714","severity":"important","public_date":"2020-05-11T00:00:00Z","advisories":["RHSA-2020:3017","RHSA-2020:3675","RHSA-2020:2905","RHSA-2020:4252","RHSA-2020:2816","RHSA-2020:2813","RHSA-2020:2814","RHSA-2020:3678"],"bugzilla":"1705975","bugzilla_description":"CVE-2020-1714 keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["keycloak-adapter-sso7_4-eap6-0:9.0.4-1.redhat_00001.1.ep6.el7","eap7-keycloak-adapter-sso7_4-0:9.0.4-1.redhat_00001.1.el7eap","keycloak-adapter-sso7_4-eap6-0:9.0.4-1.redhat_00001.1.ep6.el6","eap7-keycloak-adapter-sso7_4-0:9.0.4-1.redhat_00001.1.el8eap","eap7-keycloak-adapter-sso7_4-0:9.0.4-1.redhat_00001.1.el6eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1714.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1724","severity":"low","public_date":"2020-05-07T00:00:00Z","advisories":["RHSA-2020:2112","RHSA-2020:2905","RHSA-2020:2252","RHSA-2020:2107","RHSA-2020:2108","RHSA-2020:2106"],"bugzilla":"1800527","bugzilla_description":"CVE-2020-1724 keycloak: problem with privacy after user logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":["rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1724.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-12657","severity":"important","public_date":"2020-05-05T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2428","RHSA-2020:2429","RHSA-2020:2427","RHSA-2020:2669","RHSA-2020:2567","RHSA-2020:2667"],"bugzilla":"1832866","bugzilla_description":"CVE-2020-12657 kernel: use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-147.20.1.el8_1","kernel-rt-0:4.18.0-193.6.3.rt13.59.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.6.3.el8_2","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12657.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11884","severity":"important","public_date":"2020-04-28T18:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2102","RHSA-2020:2199","RHSA-2020:2429"],"bugzilla":"1828149","bugzilla_description":"CVE-2020-11884 Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1251","affected_packages":["kernel-0:4.18.0-193.1.2.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11884.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-8203","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:3807","RHSA-2020:3370"],"bugzilla":"1857412","bugzilla_description":"CVE-2020-8203 nodejs-lodash: prototype pollution in zipObjectDeep function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","distributed-tracing/jaeger-query-rhel7:1.17.6-1","ovirt-web-ui-0:1.6.4-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11501","severity":"moderate","public_date":"2020-03-27T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1998"],"bugzilla":"1821896","bugzilla_description":"CVE-2020-11501 gnutls: DTLS client hello contains a random value of all zeroes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["gnutls-0:3.6.8-10.el8_2","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11501.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-1762","severity":"moderate","public_date":"2020-03-25T18:00:00Z","advisories":["RHSA-2020:0972"],"bugzilla":"1810387","bugzilla_description":"CVE-2020-1762 kiali: ignoring JWT claim fields","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613->CWE-384","affected_packages":["kiali-0:v1.0.10.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1762.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-10931","severity":"important","public_date":"2020-03-24T00:00:00Z","advisories":[],"bugzilla":"1816630","bugzilla_description":"CVE-2020-10931 memcached: mishandled memcpy into a stack-based buffer may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10931.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1744","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:0947","RHSA-2020:2905","RHSA-2020:2252","RHSA-2020:0946","RHSA-2020:0945","RHSA-2020:0951"],"bugzilla":"1805792","bugzilla_description":"CVE-2020-1744 keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-sso7-keycloak-0:4.8.18-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.18-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.18-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1744.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-10108","severity":"important","public_date":"2020-03-11T00:00:00Z","advisories":["RHSA-2020:1561","RHSA-2020:1962"],"bugzilla":"1813439","bugzilla_description":"CVE-2020-10108 python-twisted: HTTP request smuggling when presented with two Content-Length headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-444","affected_packages":["python-twisted-web-0:8.2.0-6.el6_10","python-twisted-web-0:12.1.0-7.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10108.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-10109","severity":"important","public_date":"2020-03-11T00:00:00Z","advisories":["RHSA-2020:1561"],"bugzilla":"1813447","bugzilla_description":"CVE-2020-10109 python-twisted: HTTP request smuggling when presented with a Content-Length and a chunked Transfer-Encoding header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-444","affected_packages":["python-twisted-web-0:12.1.0-7.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10109.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-7598","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:3247","RHSA-2020:2852","RHSA-2020:2992","RHSA-2020:2362","RHSA-2020:2848","RHSA-2020:3042","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:3084"],"bugzilla":"1813344","bugzilla_description":"CVE-2020-7598 nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","kiali-0:v1.0.11.redhat1-1.el7","rh-nodejs12-nodejs-0:12.18.2-1.el7","servicemesh-grafana-0:6.2.2-36.el8","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:12-8010020200630154708.c27ad7f8","nodejs:10-8020020200617141353.4cda2c84","nodejs:10-8010020200617134056.c27ad7f8","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7598.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-10534","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":[],"bugzilla":"1815173","bugzilla_description":"CVE-2020-10534 mediawiki: IP range evaluation issue allows blocked users regain escalated privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10534.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-1749","severity":"moderate","public_date":"2020-03-04T01:29:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1809833","bugzilla_description":"CVE-2020-1749 kernel: some ipv6 protocols not encrypted over ipsec tunnel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1749.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-10960","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1826076","bugzilla_description":"CVE-2020-10960 mediawiki: makeCollapsible allows applying event handler to any CSS selector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10960.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-1745","severity":"important","public_date":"2020-02-26T00:00:00Z","advisories":["RHSA-2020:2059","RHSA-2020:2367","RHSA-2020:2511","RHSA-2020:2058","RHSA-2020:2333","RHSA-2020:0812","RHSA-2020:0813","RHSA-2020:3779","RHSA-2020:0962","RHSA-2020:2515","RHSA-2020:0961","RHSA-2020:2512","RHSA-2020:2513","RHSA-2020:0952","RHSA-2020:2905","RHSA-2020:2060","RHSA-2020:2061","RHSA-2020:3192"],"bugzilla":"1807305","bugzilla_description":"CVE-2020-1745 undertow: AJP File Read/Inclusion Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["eap7-undertow-0:2.0.28-4.SP1_redhat_00002.1.el6eap","eap7-undertow-0:2.0.28-4.SP1_redhat_00002.1.el7eap","eap7-undertow-0:2.0.28-4.SP1_redhat_00002.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1745.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2020-2732","severity":"moderate","public_date":"2020-02-24T18:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2102","RHSA-2020:4062","RHSA-2020:2171","RHSA-2020:4060"],"bugzilla":"1805135","bugzilla_description":"CVE-2020-2732 Kernel: kvm: nVMX: L2 guest may trick the L0 hypervisor to access sensitive L1 resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-193.1.2.el8_2","kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-rt-0:4.18.0-193.1.2.rt13.53.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2732.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.8"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1938","severity":"important","public_date":"2020-02-20T00:00:00Z","advisories":["RHSA-2020:2840","RHSA-2020:2367","RHSA-2020:2783","RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:0860","RHSA-2020:1520","RHSA-2020:2781","RHSA-2020:2780","RHSA-2020:0855","RHSA-2020:0912","RHSA-2020:1479","RHSA-2020:1478","RHSA-2020:2779"],"bugzilla":"1806398","bugzilla_description":"CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["tomcat-0:7.0.76-11.el7_7","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el7","tomcat6-0:6.0.24-114.el6_10","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el6","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el5","tomcat-0:7.0.76-10.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1938.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2019-14586","severity":"moderate","public_date":"2020-02-16T00:00:00Z","advisories":[],"bugzilla":"1833340","bugzilla_description":"CVE-2019-14586 edk2: potential use-after-free due to the original configuration runtime memory is freed but it is still exposed to the OS runtime","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14586.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2019-14558","severity":"moderate","public_date":"2020-02-16T00:00:00Z","advisories":[],"bugzilla":"1833347","bugzilla_description":"CVE-2019-14558 edk2: potentially leaking of secret information due to uncleared memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14558.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-14587","severity":"moderate","public_date":"2020-02-16T00:00:00Z","advisories":[],"bugzilla":"1833352","bugzilla_description":"CVE-2019-14587 edk2: double-unmap issue in SdMmcCreateTrb function in MdeModulePkg/Bus/Pci/SdMmcPciHcDxe/SdMmcPciHci.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14587.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2020-1712","severity":"important","public_date":"2020-02-05T09:00:00Z","advisories":["RHSA-2020:0575","RHSA-2020:0564","RHBA-2020:0614"],"bugzilla":"1794578","bugzilla_description":"CVE-2020-1712 systemd: use-after-free when asynchronous polkit queries are performed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["systemd-0:239-18.el8_1.4","systemd-0:239-13.el8_0.7","redhat-coreos-42.81.20200224.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1712.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-14575","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":[],"bugzilla":"1736862","bugzilla_description":"CVE-2019-14575 edk2: DxeImageVerificationHandler() fails open in case of dbx signature check","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14575.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14559","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":[],"bugzilla":"1758601","bugzilla_description":"CVE-2019-14559 edk2: memory leak in ArpOnFrameRcvdDpc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14559.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-14563","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:1712"],"bugzilla":"1758620","bugzilla_description":"CVE-2019-14563 edk2: numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["edk2-0:20190829git37eef91017ad-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14563.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L","cvss3_score":"6.4"},{"CVE":"CVE-2020-8124","severity":"moderate","public_date":"2020-02-04T00:00:00Z","advisories":["RHSA-2020:0972"],"bugzilla":"1800774","bugzilla_description":"CVE-2020-8124 npmjs-url-parse: Improper validation of protocol of the returned URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["jaeger-0:v1.13.1.redhat6-1.el7","kiali-0:v1.0.10.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8124.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-3016","severity":"low","public_date":"2020-01-30T18:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3010"],"bugzilla":"1792167","bugzilla_description":"CVE-2019-3016 kernel: kvm: Information leak within a KVM guest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-200","affected_packages":["redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3016.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-18634","severity":"important","public_date":"2020-01-30T00:00:00Z","advisories":["RHSA-2020:0540","RHSA-2020:0487","RHBA-2020:0523","RHSA-2020:0509","RHSA-2020:0726"],"bugzilla":"1796944","bugzilla_description":"CVE-2019-18634 sudo: Stack based buffer overflow when pwfeedback is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["redhat-coreos-42.81.20200217.0","sudo-0:1.8.25p1-8.el8_1.1","sudo-0:1.8.25p1-4.el8_0.3","sudo-0:1.8.6p3-29.el6_10.3","sudo-0:1.8.23-4.el7_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18634.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-20445","severity":"important","public_date":"2020-01-29T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:0497","RHSA-2020:2333","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:0811","RHSA-2020:0605","RHSA-2020:0951","RHSA-2020:1445","RHSA-2020:0601","RHSA-2020:0567","RHSA-2020:0805","RHSA-2020:0606","RHSA-2020:0804","RHSA-2020:0939","RHSA-2020:0806","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1798509","bugzilla_description":"CVE-2019-20445 netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el6eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el7eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20445.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20444","severity":"important","public_date":"2020-01-29T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:0497","RHSA-2020:2333","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:0811","RHSA-2020:0605","RHSA-2020:0951","RHSA-2020:1445","RHSA-2020:0601","RHSA-2020:0567","RHSA-2020:0805","RHSA-2020:0606","RHSA-2020:0804","RHSA-2020:0939","RHSA-2020:0806","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1798524","bugzilla_description":"CVE-2019-20444 netty: HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el6eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el7eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20444.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-0548","severity":"low","public_date":"2020-01-27T13:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1788786","bugzilla_description":"CVE-2020-0548 hw: Vector Register Data Sampling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-200","affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0548.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2020-0549","severity":"moderate","public_date":"2020-01-27T13:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1788788","bugzilla_description":"CVE-2020-0549 hw: L1D Cache Eviction Sampling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-200","affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0549.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-12653","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHSA-2020:3432","RHSA-2020:3224","RHSA-2020:3389","RHSA-2020:3221","RHSA-2020:3232","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:2832","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1831868","bugzilla_description":"CVE-2020-12653 kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in drivers/net/wireless/marvell/mwifiex/scan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-rt-1:3.10.0-693.72.1.rt56.672.el6rt","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","kernel-0:3.10.0-327.90.2.el7","kernel-0:3.10.0-693.72.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:3.10.0-1062.31.2.el7","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12653.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12654","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHSA-2020:3432","RHSA-2020:3224","RHSA-2020:3389","RHSA-2020:3221","RHSA-2020:3232","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:2832","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1832530","bugzilla_description":"CVE-2020-12654 kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-1:3.10.0-693.72.1.rt56.672.el6rt","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","kernel-0:3.10.0-327.90.2.el7","kernel-0:3.10.0-693.72.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:3.10.0-1062.31.2.el7","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12654.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-7238","severity":"important","public_date":"2020-01-26T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:0497","RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:0811","RHSA-2020:0605","RHSA-2020:0951","RHSA-2020:1445","RHSA-2020:0601","RHSA-2020:0567","RHSA-2020:0805","RHSA-2020:0606","RHSA-2020:0804","RHSA-2020:0939","RHSA-2020:0806","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1796225","bugzilla_description":"CVE-2020-7238 netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el6eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el7eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7238.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-19345","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:0694","RHSA-2020:0617","RHSA-2020:0798"],"bugzilla":"1793296","bugzilla_description":"CVE-2019-19345 openshift/mediawiki-apb: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift3/mediawiki-apb:v3.11.188-4","openshift4/mediawiki-apb:v4.1.37-202003021622","openshift4/apb-base:v4.2.21-202002240343"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19345.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-1709","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:0694","RHSA-2020:0830","RHSA-2020:0799"],"bugzilla":"1793297","bugzilla_description":"CVE-2020-1709 openshift/mediawiki: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift3/mediawiki:v3.11.188-2","openshift4/mediawiki:v4.2.24-202003161048","openshift4/apb-base:v4.1.37-202003021622"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1709.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-10695","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1817530","bugzilla_description":"CVE-2020-10695 containers/redhat-sso-7: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10695.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-7053","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1795624","bugzilla_description":"CVE-2020-7053 kernel: use-after-free in i915_ppgtt_close in drivers/gpu/drm/i915/i915_gem_gtt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7053.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19922","severity":"low","public_date":"2019-12-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1493","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1792512","bugzilla_description":"CVE-2019-19922 kernel: when cpu.cfs_quota_us is used allows attackers to cause a denial of service against non-cpu-bound applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19922.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-17571","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2638"],"bugzilla":"1785616","bugzilla_description":"CVE-2019-17571 log4j: deserialization of untrusted data in SocketServer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-19232","severity":"moderate","public_date":"2019-12-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1804"],"bugzilla":"1786704","bugzilla_description":"CVE-2019-19232 sudo: attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["redhat-coreos-43.82.202007300301.0","sudo-0:1.8.29-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19232.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19708","severity":"moderate","public_date":"2019-12-11T00:00:00Z","advisories":[],"bugzilla":"1809045","bugzilla_description":"CVE-2019-19708 mediawiki: pasted content containing an element with a specific attribute allows for XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19708.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-18801","severity":"critical","public_date":"2019-12-10T18:00:00Z","advisories":["RHSA-2019:4222"],"bugzilla":"1773444","bugzilla_description":"CVE-2019-18801 envoy: an untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":["kiali-0:v1.0.8.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18801.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-18802","severity":"important","public_date":"2019-12-10T18:00:00Z","advisories":["RHSA-2019:4222"],"bugzilla":"1773447","bugzilla_description":"CVE-2019-18802 envoy: malformed request header may cause bypass of route matchers resulting in escalation of privileges or information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kiali-0:v1.0.8.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-18838","severity":"important","public_date":"2019-12-10T18:00:00Z","advisories":["RHSA-2019:4222"],"bugzilla":"1773449","bugzilla_description":"CVE-2019-18838 envoy: malformed HTTP request without the Host header may cause abnormal termination of the Envoy process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["kiali-0:v1.0.8.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13734","severity":"important","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2019:4238","RHSA-2020:2014","RHSA-2020:0273","RHSA-2020:0229","RHBA-2020:0460","RHSA-2020:0227"],"bugzilla":"1781980","bugzilla_description":"CVE-2019-13734 sqlite: fts3: improve shadow table corruption detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sqlite-0:3.26.0-4.el8_0","chromium-browser-0:79.0.3945.79-1.el6_10","sqlite-0:3.26.0-4.el8_1","redhat-coreos-42.81.20200210.0","sqlite-0:3.7.17-8.el7_7.1","sqlite-0:3.7.17-8.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13734.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10720","severity":"moderate","public_date":"2019-12-09T14:23:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:2854","RHSA-2019:3309"],"bugzilla":"1781204","bugzilla_description":"CVE-2020-10720 kernel: use-after-free read in napi_gro_frags() in the Linux kernel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-19532","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1781821","bugzilla_description":"CVE-2019-19532 kernel: malicious USB devices can lead to multiple out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19532.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-14837","severity":"important","public_date":"2019-12-02T00:00:00Z","advisories":["RHSA-2019:4042","RHSA-2019:4045","RHSA-2019:4040","RHSA-2019:4041"],"bugzilla":"1730227","bugzilla_description":"CVE-2019-14837 keycloak: keycloak uses hardcoded open dummy domain for new accounts enabling information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-547","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14837.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2019-19768","severity":"important","public_date":"2019-11-29T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:2214","RHSA-2020:2522","RHSA-2020:2203","RHSA-2020:2277","RHSA-2020:2289","RHSA-2020:2242","RHSA-2020:2199","RHSA-2020:2285","RHSA-2020:2519","RHSA-2020:1966","RHSA-2020:1769","RHSA-2020:1567","RHBA-2020:3180","RHSA-2020:2085","RHSA-2020:2082","RHSA-2020:2291"],"bugzilla":"1786164","bugzilla_description":"CVE-2019-19768 kernel: use-after-free in __blk_add_trace in kernel/trace/blktrace.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-514.76.1.el7","kernel-rt-1:3.10.0-693.67.1.rt56.665.el6rt","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.18.1.el8_0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:3.10.0-327.88.1.el7","kernel-rt-0:3.10.0-1127.8.2.rt56.1103.el7","kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-193.el8","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1127.8.2.el7","kernel-0:3.10.0-693.67.1.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19768.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-18660","severity":"moderate","public_date":"2019-11-28T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:1372","RHSA-2020:0174","RHBA-2020:1450","RHSA-2020:2429","RHSA-2020:2933","RHSA-2020:1016","RHSA-2020:1984"],"bugzilla":"1777825","bugzilla_description":"CVE-2019-18660 kernel: powerpc: incomplete Spectre-RSB mitigation leads to information exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","kernel-0:2.6.32-754.31.1.el6","kernel-0:3.10.0-957.56.1.el7","redhat-coreos-42.81.20200407.0","kernel-0:3.10.0-1127.el7","kernel-alt-0:4.14.0-115.17.1.el7a","kernel-0:3.10.0-1062.21.1.el7","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18660.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2020-1728","severity":"low","public_date":"2019-11-27T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:4213","RHSA-2020:3496","RHSA-2020:3497","RHSA-2020:3495","RHSA-2020:4252","RHSA-2020:3539"],"bugzilla":"1800585","bugzilla_description":"CVE-2020-1728 keycloak: security headers missing on REST endpoints","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el6sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el7sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1728.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-10195","severity":"moderate","public_date":"2019-11-26T00:00:00Z","advisories":["RHBA-2019:4268","RHSA-2020:0378","RHSA-2020:1269"],"bugzilla":"1726223","bugzilla_description":"CVE-2019-10195 ipa: Batch API logging user passwords to /var/log/httpd/error_log","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532->CWE-200","affected_packages":["idm:DL1-8010020191127093529.6573b795","ipa-0:4.6.5-11.el7_7.4","idm:DL1-8000020200217171713.2874843d"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2020-10690","severity":"low","public_date":"2019-11-25T12:53:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1817141","bugzilla_description":"CVE-2020-10690 kernel: use-after-free in cdev_put() when a PTP device is removed while it's chardev is open","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10690.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-14895","severity":"important","public_date":"2019-11-25T08:29:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0661","RHSA-2020:0374","RHSA-2020:1493","RHSA-2020:0592","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:0653","RHSA-2020:0543","RHSA-2020:0664","RHSA-2020:0831","RHSA-2020:0609"],"bugzilla":"1774870","bugzilla_description":"CVE-2019-14895 kernel: heap-based buffer overflow in mwifiex_process_country_ie() function in drivers/net/wireless/marvell/mwifiex/sta_ioctl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:3.10.0-693.64.1.el7","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-0:3.10.0-514.73.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-0:3.10.0-957.46.1.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:4.18.0-80.16.1.el8_0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14895.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-14901","severity":"important","public_date":"2019-11-22T00:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0374","RHSA-2020:1493","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:0204"],"bugzilla":"1773519","bugzilla_description":"CVE-2019-14901 kernel: heap overflow in marvell/mwifiex/tdls.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-400|CWE-122)","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14901.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-19074","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774933","bugzilla_description":"CVE-2019-19074 kernel: a memory leak in the ath9k management function in allows local DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19073","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774937","bugzilla_description":"CVE-2019-19073 kernel: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel (DOS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19073.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-19067","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774968","bugzilla_description":"CVE-2019-19067 kernel: Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c allow for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19067.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-19065","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775000","bugzilla_description":"CVE-2019-19065 kernel: A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19065.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19059","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775042","bugzilla_description":"CVE-2019-19059 kernel: Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19059.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19058","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775047","bugzilla_description":"CVE-2019-19058 kernel: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19058.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19057","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775050","bugzilla_description":"CVE-2019-19057 kernel: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19057.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-14898","severity":"moderate","public_date":"2019-11-20T00:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0374","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1774671","bugzilla_description":"CVE-2019-14898 kernel: incomplete fix  for race condition between mmget_not_zero()/get_task_mm() and core dumping in CVE-2019-11599","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-667","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14898.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-19126","severity":"low","public_date":"2019-11-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3861","RHSA-2020:1828"],"bugzilla":"1774681","bugzilla_description":"CVE-2019-19126 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glibc-0:2.17-317.el7","glibc-0:2.28-101.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-19045","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774983","bugzilla_description":"CVE-2019-19045 kernel: dos in mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19045.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.5"},{"CVE":"CVE-2019-19047","severity":"low","public_date":"2019-11-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774991","bugzilla_description":"CVE-2019-19047 kernel: dos in mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19047.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19338","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHSA-2020:1465","RHSA-2020:0839","RHSA-2020:0834","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1781514","bugzilla_description":"CVE-2019-19338 Kernel: KVM: export MSR_IA32_TSX_CTRL to guest - incomplete fix for TAA (CVE-2019-11135)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-203","affected_packages":["kernel-0:3.10.0-957.48.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-1062.18.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19338.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-12207","severity":"important","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3941","RHSA-2019:3843","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0026","RHSA-2020:0028","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3916","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1646768","bugzilla_description":"CVE-2018-12207 hw: Machine Check Error on Page Size Change (IFU)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-0154","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3840","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837"],"bugzilla":"1724393","bugzilla_description":"CVE-2019-0154 hw: Intel GPU Denial Of Service while accessing MMIO in lower power state","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0154.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-0155","severity":"important","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3887","RHSA-2019:3877","RHSA-2019:3870","RHSA-2019:3871","RHSA-2019:3872","RHSA-2019:3883","RHSA-2019:3873","RHBA-2019:3919","RHSA-2020:0204","RHSA-2019:3908","RHSA-2019:3878","RHSA-2019:3889"],"bugzilla":"1724398","bugzilla_description":"CVE-2019-0155 hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-1:3.10.0-693.60.3.rt56.655.el6rt","kernel-0:3.10.0-693.60.3.el7","kernel-0:2.6.32-754.24.3.el6","kernel-0:3.10.0-862.43.3.el7","kernel-0:3.10.0-514.70.3.el7","kernel-0:3.10.0-327.82.2.el7","kernel-rt-0:3.10.0-1062.4.3.rt56.1029.el7","kernel-0:3.10.0-1062.4.3.el7","kernel-0:4.18.0-147.0.3.el8_1","redhat-coreos-42.81.20191119.1","kernel-0:3.10.0-957.38.3.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.3.rt24.95.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0155.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-14818","severity":"moderate","public_date":"2019-11-12T15:00:00Z","advisories":["RHSA-2020:0166","RHSA-2020:0165","RHSA-2020:0168","RHSA-2020:0172","RHBA-2020:0062","RHSA-2020:0171","RHSA-2020:1735","RHSA-2020:1226"],"bugzilla":"1737327","bugzilla_description":"CVE-2019-14818 dpdk: possible memory leak leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openvswitch-0:2.9.0-124.el7fdp","dpdk-0:18.11.5-1.el7_8","openvswitch2.12-0:2.12.0-12.el7fdp","dpdk-0:19.11-4.el8","openvswitch2.12-0:2.12.0-12.el8fdp","openvswitch2.11-0:2.11.0-35.el7fdp","redhat-coreos-43.81.202001142154.0","openvswitch2.11-0:2.11.0-35.el8fdp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19807","severity":"important","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1786078","bugzilla_description":"CVE-2019-19807 kernel: use-after-free in sound/core/timer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","kernel-rt-0:3.10.0-1160.rt56.1131.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19807.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19534","severity":"moderate","public_date":"2019-11-04T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1783540","bugzilla_description":"CVE-2019-19534 kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772->CWE-200","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19534.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-10218","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:0943","RHSA-2020:1084","RHSA-2020:1878"],"bugzilla":"1763137","bugzilla_description":"CVE-2019-10218 samba: smb client vulnerable to filenames containing path separators","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.11.6-104.el7rhgs","samba-0:4.10.4-10.el7","samba-0:4.11.2-13.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10218.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-14833","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":[],"bugzilla":"1764126","bugzilla_description":"CVE-2019-14833 samba: AD DC check password script does not receive full password when non-ASCII characters are used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14833.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-14847","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":[],"bugzilla":"1764142","bugzilla_description":"CVE-2019-14847 samba: samba AD DC LDAP denial of service via dirsync","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-8726","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876612","bugzilla_description":"CVE-2019-8726 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8726.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8735","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876614","bugzilla_description":"CVE-2019-8735 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8735.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8768","severity":"low","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876616","bugzilla_description":"CVE-2019-8768 webkitgtk: Browsing history could not be deleted","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8768.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-14834","severity":"low","public_date":"2019-10-23T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1715","RHSA-2020:3878"],"bugzilla":"1764425","bugzilla_description":"CVE-2019-14834 dnsmasq: memory leak in the create_helper() function in /src/helper.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-43.82.202007300301.0","dnsmasq-0:2.79-11.el8","dnsmasq-0:2.76-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14834.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-18282","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1796360","bugzilla_description":"CVE-2019-18282 kernel: The flow_dissector feature allows device tracking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18282.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-17666","severity":"important","public_date":"2019-10-18T00:00:00Z","advisories":["RHSA-2020:0661","RHSA-2020:1353","RHSA-2020:0740","RHSA-2020:1465","RHSA-2020:1473","RHSA-2020:0834","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:1347","RHSA-2020:0543","RHSA-2020:1524","RHSA-2020:0831","RHSA-2020:0839"],"bugzilla":"1763690","bugzilla_description":"CVE-2019-17666 kernel: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel lacks a certain upper-bound check, leading to a buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-0:3.10.0-957.48.1.el7","kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.65.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:3.10.0-514.74.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-rt-1:3.10.0-693.65.1.rt56.663.el6rt","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:2.6.32-754.29.1.el6","kernel-0:3.10.0-1062.18.1.el7","kernel-0:4.18.0-80.16.1.el8_0","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17666.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2019-17596","severity":"moderate","public_date":"2019-10-17T00:00:00Z","advisories":["RHSA-2020:0101","RHSA-2020:0329"],"bugzilla":"1763310","bugzilla_description":"CVE-2019-17596 golang: invalid public key causes panic in dsa.Verify","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14287","severity":"important","public_date":"2019-10-14T15:00:00Z","advisories":["RHSA-2019:3754","RHSA-2019:3204","RHSA-2019:3941","RHSA-2019:3755","RHSA-2019:3205","RHSA-2020:0388","RHSA-2019:3694","RHSA-2019:3278","RHSA-2019:3895","RHSA-2019:3197","RHSA-2019:4191","RHSA-2019:3916","RHSA-2019:3219","RHSA-2019:3209","RHBA-2019:3248","RHBA-2019:3303"],"bugzilla":"1760531","bugzilla_description":"CVE-2019-14287 sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":["redhat-virtualization-host-0:4.2-20191022.0.el7_6","sudo-0:1.7.2p1-31.el5_11.1","sudo-0:1.8.23-3.el7_6.1","sudo-0:1.8.25p1-4.el8_0.2","sudo-0:1.8.6p3-29.el6_10.2","sudo-0:1.8.6p7-17.el7_2.2","sudo-0:1.8.19p2-12.el7_4.1","sudo-0:1.8.6p3-12.el6_5.2","redhat-coreos-42.81.20191107.0","sudo-0:1.8.19p2-14.el7_5.1","sudo-0:1.8.6p7-23.el7_3.2","sudo-0:1.8.6p3-15.el6_6.2","sudo-0:1.8.25p1-8.el8_1","sudo-0:1.8.23-4.el7_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14287.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-14820","severity":"low","public_date":"2019-10-14T00:00:00Z","advisories":["RHSA-2019:3049","RHSA-2019:3045","RHSA-2020:2067","RHSA-2019:3046","RHSA-2019:3048","RHSA-2019:3044","RHSA-2019:3050"],"bugzilla":"1649870","bugzilla_description":"CVE-2019-14820 keycloak: adapter endpoints are exposed via arbitrary URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["keycloak-adapter-sso7_3-eap6-0:4.8.13-1.Final_redhat_00001.1.ep6.el6","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","eap7-keycloak-adapter-sso7_3-0:4.8.13-1.Final_redhat_00001.1.el8eap","keycloak-adapter-sso7_3-eap6-0:4.8.13-1.Final_redhat_00001.1.ep6.el7","eap7-keycloak-adapter-sso7_3-0:4.8.13-1.Final_redhat_00001.1.el6eap","eap7-keycloak-adapter-sso7_3-0:4.8.13-1.Final_redhat_00001.1.el7eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14820.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-14832","severity":"moderate","public_date":"2019-10-14T00:00:00Z","advisories":["RHSA-2020:2366","RHSA-2019:3045","RHSA-2020:2067","RHSA-2019:3046","RHSA-2019:3044","RHSA-2019:3050"],"bugzilla":"1749487","bugzilla_description":"CVE-2019-14832 keycloak: cross-realm user access auth bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14832.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-14838","severity":"moderate","public_date":"2019-10-11T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2020:2067","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4045","RHSA-2019:3082","RHSA-2019:3083","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0728"],"bugzilla":"1751227","bugzilla_description":"CVE-2019-14838 wildfly-core: Incorrect privileges for 'Monitor', 'Auditor' and 'Deployer' user by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","eap7-wildfly-0:7.2.4-2.SP1_redhat_00001.1.el8eap","eap7-wildfly-0:7.2.4-2.SP1_redhat_00001.1.el7eap","eap7-wildfly-0:7.2.4-2.SP1_redhat_00001.1.el6eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2019-14854","severity":"moderate","public_date":"2019-10-07T00:00:00Z","advisories":["RHSA-2019:4091","RHSA-2019:4081","RHSA-2019:4075","RHSA-2019:4098"],"bugzilla":"1758953","bugzilla_description":"CVE-2019-14854 library-go: Secret data written to static pod logs when operator set at Debug level or higher","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["openshift4/ose-cluster-kube-apiserver-operator:v4.2.9-201911261133","openshift4/ose-cluster-kube-scheduler-operator:v4.1.27-201912030019","openshift4/ose-cluster-kube-controller-manager-operator:v4.2.10-201912022352","openshift4/ose-cluster-kube-apiserver-operator:v4.1.26-201911260202"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14854.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-19055","severity":"moderate","public_date":"2019-10-05T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775074","bugzilla_description":"CVE-2019-19055 kernel: memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c allows DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19055.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-16994","severity":"low","public_date":"2019-09-30T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1759681","bugzilla_description":"CVE-2019-16994 kernel: Memory leak in sit_init_net() in net/ipv6/sit.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16994.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-14844","severity":"important","public_date":"2019-09-26T00:00:00Z","advisories":[],"bugzilla":"1753589","bugzilla_description":"CVE-2019-14844 krb5: reversed strlcpy() allows client to crash the KDC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14844.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16738","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":[],"bugzilla":"1755762","bugzilla_description":"CVE-2019-16738 mediawiki: suppressed username information disclosure via Special:Redirect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-14553","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":[],"bugzilla":"1758518","bugzilla_description":"CVE-2019-14553 edk2: invalid server certificate accepted in HTTPS-over-IPv6 boot","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14553.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14562","severity":"low","public_date":"2019-09-24T00:00:00Z","advisories":[],"bugzilla":"1869245","bugzilla_description":"CVE-2019-14562 edk2: DxeImageVerificationHandler integer overflow leads to endless loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14562.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2019-14850","severity":"low","public_date":"2019-09-20T00:00:00Z","advisories":["RHSA-2020:1167"],"bugzilla":"1757258","bugzilla_description":"CVE-2019-14850 nbdkit: denial of service due to premature opening of back-end connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406","affected_packages":["nbdkit-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14850.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-17053","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1758242","bugzilla_description":"CVE-2019-17053 kernel: unprivileged users able to create RAW sockets in AF_IEEE802154 network protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-17055","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0790","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1758248","bugzilla_description":"CVE-2019-17055 kernel: unprivileged users able to create RAW sockets in AF_ISDN network protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:2.6.32-754.28.1.el6","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17055.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-14821","severity":"important","public_date":"2019-09-17T17:00:00Z","advisories":["RHSA-2020:2851","RHSA-2019:4256","RHSA-2019:4154","RHSA-2020:0027","RHSA-2019:3978","RHSA-2019:3979","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1746708","bugzilla_description":"CVE-2019-14821 Kernel: KVM: OOB memory access via mmio ring buffer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.7.1.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:2.6.32-754.25.1.el6","kernel-rt-0:3.10.0-1062.7.1.rt56.1030.el7","kernel-alt-0:4.14.0-115.16.1.el7a","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14821.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-14826","severity":"low","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1746944","bugzilla_description":"CVE-2019-14826 ipa: Session not terminated after logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14826.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"1.8"},{"CVE":"CVE-2019-14835","severity":"important","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2019:2854","RHSA-2019:2865","RHSA-2019:2864","RHSA-2019:2863","RHSA-2019:2830","RHSA-2019:2862","RHBA-2019:3151","RHSA-2019:2869","RHSA-2019:2924","RHSA-2019:2901","RHSA-2019:2900","RHSA-2019:2867","RHSA-2019:2889","RHSA-2019:2899","RHSA-2019:2866","RHSA-2019:2829","RHSA-2019:2828","RHSA-2019:2827"],"bugzilla":"1750727","bugzilla_description":"CVE-2019-14835 kernel: vhost-net: guest to host kernel escape during migration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["redhat-coreos-42.80.20191022.0","redhat-virtualization-host-0:4.2-20190919.0.el7_6","kernel-0:2.6.32-754.23.1.el6","kernel-rt-0:3.10.0-1062.1.2.rt56.1025.el7","kernel-0:3.10.0-1062.1.2.el7","kernel-0:3.10.0-862.41.2.el7","kernel-0:3.10.0-693.59.1.el7","kernel-0:3.10.0-514.69.1.el7","kernel-0:3.10.0-327.82.1.el7","kernel-0:4.18.0-80.11.2.el8_0","kernel-0:2.6.32-504.81.2.el6","kernel-0:2.6.32-431.96.2.el6","kernel-0:3.10.0-957.35.2.el7","kernel-alt-0:4.14.0-115.13.1.el7a","kernel-rt-0:4.18.0-80.11.2.rt9.157.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14835.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-14843","severity":"important","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2974","RHSA-2019:2973","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4045","RHSA-2019:4040","RHSA-2019:4041"],"bugzilla":"1752980","bugzilla_description":"CVE-2019-14843 wildfly-security-manager: security manager authorization bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-592","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","eap7-wildfly-elytron-0:1.6.4-3.Final_redhat_00002.1.el7eap","eap7-wildfly-elytron-0:1.6.4-3.Final_redhat_00002.1.el8eap","eap7-wildfly-elytron-0:1.6.4-3.Final_redhat_00002.1.el6eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10959","severity":"moderate","public_date":"2019-09-14T00:00:00Z","advisories":[],"bugzilla":"1826079","bugzilla_description":"CVE-2020-10959 mediawiki: user content can redirect the logout button to different URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10959.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-14822","severity":"moderate","public_date":"2019-09-13T07:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1880","RHSA-2020:3978"],"bugzilla":"1717958","bugzilla_description":"CVE-2019-14822 ibus: missing authorization allows local attacker to access the input bus of another user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["ibus-0:1.5.19-11.el8","ibus-0:1.5.17-11.el7","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14822.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-15031","severity":"moderate","public_date":"2019-09-13T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2020:1372","RHBA-2020:1450"],"bugzilla":"1760063","bugzilla_description":"CVE-2019-15031 kernel: powerpc: local user can read vector registers of other users' processes via an interrupt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","redhat-coreos-42.81.20200407.0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15031.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-5481","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792"],"bugzilla":"1749402","bugzilla_description":"CVE-2019-5481 curl: double free due to subsequent call of realloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5481.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2019-5482","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792","RHSA-2020:3916"],"bugzilla":"1749652","bugzilla_description":"CVE-2019-5482 curl: heap buffer overflow in function tftp_receive_packet()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-59.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5482.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-1547","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752090","bugzilla_description":"CVE-2019-1547 openssl: side-channel weak encryption vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-602","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-1549","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752095","bugzilla_description":"CVE-2019-1549 openssl: information disclosure in fork()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-1563","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752100","bugzilla_description":"CVE-2019-1563 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-19077","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775724","bugzilla_description":"CVE-2019-19077 kernel: memory leak in bnxt_re_create_srq function in drivers/infiniband/hw/bnxt_re/ib_verbs.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19077.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-16234","severity":"low","public_date":"2019-09-09T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1760441","bugzilla_description":"CVE-2019-16234 kernel: null pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16234.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-15030","severity":"moderate","public_date":"2019-09-06T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2020:1372","RHBA-2020:1450"],"bugzilla":"1759313","bugzilla_description":"CVE-2019-15030 kernel: powerpc: local user can read vector registers of other users' processes via a Facility Unavailable exception","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","redhat-coreos-42.81.20200407.0","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15030.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-15916","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:0740","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1750813","bugzilla_description":"CVE-2019-15916 kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15916.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15921","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1760958","bugzilla_description":"CVE-2019-15921 kernel: memory leak in genl_register_family() in net/netlink/genetlink.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15921.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-15924","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1763869","bugzilla_description":"CVE-2019-15924 kernel: null pointer dereference in drivers/net/ethernet/intel/fm10k/fm10k_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15924.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15718","severity":"moderate","public_date":"2019-09-03T15:00:00Z","advisories":["RHSA-2019:3941","RHSA-2019:3592","RHBA-2019:3303"],"bugzilla":"1746057","bugzilla_description":"CVE-2019-15718 systemd: systemd-resolved allows unprivileged users to configure DNS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["redhat-coreos-42.81.20191107.0","systemd-0:239-18.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15718.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-10197","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2020:1084","RHSA-2020:1878","RHSA-2019:4023","RHSA-2019:3253"],"bugzilla":"1746225","bugzilla_description":"CVE-2019-10197 samba: Combination of parameters and permissions can allow user to escape from the share path definition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.9.8-110.el6rhs","samba-0:4.10.4-10.el7","samba-0:4.11.2-13.el8","samba-0:4.9.8-109.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-8666","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876630","bugzilla_description":"CVE-2019-8666 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8666.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8671","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876632","bugzilla_description":"CVE-2019-8671 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8671.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8672","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876634","bugzilla_description":"CVE-2019-8672 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8673","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876643","bugzilla_description":"CVE-2019-8673 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8676","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876644","bugzilla_description":"CVE-2019-8676 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8676.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8677","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876645","bugzilla_description":"CVE-2019-8677 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8677.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8679","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876647","bugzilla_description":"CVE-2019-8679 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8679.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8681","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876650","bugzilla_description":"CVE-2019-8681 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8681.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8686","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876653","bugzilla_description":"CVE-2019-8686 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8686.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8687","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876655","bugzilla_description":"CVE-2019-8687 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8687.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8689","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876657","bugzilla_description":"CVE-2019-8689 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8689.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8690","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876664","bugzilla_description":"CVE-2019-8690 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8690.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-14814","severity":"moderate","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1744130","bugzilla_description":"CVE-2019-14814 kernel: heap overflow in mwifiex_set_uap_rates() function of Marvell Wifi Driver leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-14815","severity":"moderate","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHSA-2020:1070","RHBA-2020:0460","RHSA-2020:1016"],"bugzilla":"1744137","bugzilla_description":"CVE-2019-14815 kernel: heap-overflow in mwifiex_set_wmm_params() function of Marvell WiFi driver leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-1127.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-14816","severity":"important","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0661","RHSA-2020:1266","RHSA-2020:0374","RHSA-2020:1353","RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:1347","RHSA-2020:0653","RHSA-2020:0664","RHSA-2020:0204"],"bugzilla":"1744149","bugzilla_description":"CVE-2019-14816 kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.65.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-514.73.1.el7","kernel-rt-1:3.10.0-693.65.1.rt56.663.el6rt","kernel-0:3.10.0-957.46.1.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-862.51.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14816.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-15666","severity":"moderate","public_date":"2019-08-27T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1747334","bugzilla_description":"CVE-2019-15666 kernel: out-of-bounds array access in __xfrm_policy_unlink","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15666.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-5094","severity":"moderate","public_date":"2019-08-27T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4011","RHSA-2020:1913"],"bugzilla":"1768555","bugzilla_description":"CVE-2019-5094 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["redhat-coreos-43.82.202007300301.0","e2fsprogs-0:1.42.9-19.el7","e2fsprogs-0:1.45.4-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5094.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-14867","severity":"important","public_date":"2019-08-26T00:00:00Z","advisories":["RHBA-2019:4268","RHSA-2020:0378","RHSA-2020:1269"],"bugzilla":"1766920","bugzilla_description":"CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-94|CWE-400)","affected_packages":["idm:DL1-8010020191127093529.6573b795","ipa-0:4.6.5-11.el7_7.4","idm:DL1-8000020200217171713.2874843d"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14867.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-14819","severity":"important","public_date":"2019-08-24T00:00:00Z","advisories":["RHSA-2019:2818"],"bugzilla":"1746238","bugzilla_description":"CVE-2019-14819 openshift-ansible: dockergc service account incorrectly associated with namespace during upgrade","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266->CWE-270","affected_packages":["openshift-ansible-0:3.11.146-1.git.0.fcedb45.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15090","severity":"low","public_date":"2019-08-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1743526","bugzilla_description":"CVE-2019-15090 kernel: An out-of-bounds read in drivers/scsi/qedi/qedi_dbg.c leading to crash or information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15090.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-15099","severity":"low","public_date":"2019-08-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1493","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1743560","bugzilla_description":"CVE-2019-15099 kernel: a NULL pointer dereference in drivers/net/wireless/ath/ath10k/usb.c leads to a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15099.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-15026","severity":"moderate","public_date":"2019-08-20T00:00:00Z","advisories":[],"bugzilla":"1753862","bugzilla_description":"CVE-2019-15026 memcached: stack-based buffer over-read in conn_to_str in memcached.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15026.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-20908","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3218","RHSA-2020:3219","RHSA-2020:3228"],"bugzilla":"1852942","bugzilla_description":"CVE-2019-20908 kernel: lockdown: bypass through ACPI write via efivar_ssdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-193.14.3.rt13.67.el8_2","kernel-0:4.18.0-80.27.2.el8_0","kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.14.3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20908.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-15719","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":["RHBA-2019:3674","RHBA-2019:3303"],"bugzilla":"1853350","bugzilla_description":"CVE-2020-15719 openldap: Certificate validation incorrectly matches name against CN-ID","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":["openldap-0:2.4.46-10.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15719.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9513","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:3041","RHSA-2019:2692","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1735741","bugzilla_description":"CVE-2019-9513 HTTP/2: flood using PRIORITY frames results in excessive resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","rh-nginx112-nginx-1:1.12.1-3.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","kiali-0:v1.0.6.redhat1-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9515","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:2861","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3892","RHSA-2019:2766","RHSA-2020:2067","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4352","RHSA-2019:4045","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2020:3196","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2925"],"bugzilla":"1735745","bugzilla_description":"CVE-2019-9515 HTTP/2: flood using SETTINGS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","nodejs:10-8000020190911085529.f8e95b4e","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","skydive-0:0.20.5-2.el7ost","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9511","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3932","RHSA-2019:2799","RHSA-2020:2067","RHSA-2019:2775","RHSA-2019:3041","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4021","RHSA-2019:2692","RHSA-2020:1445","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2020:3192","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741860","bugzilla_description":"CVE-2019-9511 HTTP/2: large amount of data requests leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","kiali-0:v1.0.6.redhat1-1.el7","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9506","severity":"important","public_date":"2019-08-10T09:00:00Z","advisories":["RHSA-2019:3217","RHSA-2019:3089","RHSA-2020:1460","RHSA-2019:2975","RHSA-2019:3076","RHSA-2019:3055","RHSA-2019:3187","RHSA-2019:3220","RHSA-2019:3231","RHSA-2019:3165","RHSA-2020:0204","RHSA-2019:3218","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1727857","bugzilla_description":"CVE-2019-9506 hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["kernel-alt-0:4.14.0-115.14.1.el7a","kernel-0:3.10.0-957.38.1.el7","kernel-0:3.10.0-862.43.1.el7","kernel-0:3.10.0-514.70.1.el7","kernel-0:3.10.0-693.60.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","kernel-rt-1:3.10.0-693.60.1.rt56.654.el6rt","redhat-coreos-42.81.20191107.0","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:3.10.0-327.86.1.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.0"},{"CVE":"CVE-2019-10744","severity":"important","public_date":"2019-08-09T00:00:00Z","advisories":["RHSA-2020:2819","RHSA-2019:3024","RHSA-2020:2362"],"bugzilla":"1739497","bugzilla_description":"CVE-2019-10744 nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ovirt-web-ui-0:1.6.0-1.el7ev","servicemesh-grafana-0:6.2.2-36.el8","jaeger-0:v1.13.1.redhat7-1.el7","distributed-tracing/jaeger-query-rhel7:1.17.2-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10744.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2019-1125","severity":"moderate","public_date":"2019-08-06T17:00:00Z","advisories":["RHSA-2019:2476","RHSA-2019:2696","RHSA-2019:2695","RHSA-2019:2473","RHSA-2019:2975","RHSA-2019:2600","RHSA-2019:2411","RHSA-2019:2730","RHSA-2019:3220","RHSA-2019:3011","RHBA-2019:3151","RHSA-2019:2900","RHSA-2019:2405","RHSA-2019:2899","RHSA-2019:2609","RHBA-2019:3248"],"bugzilla":"1724389","bugzilla_description":"CVE-2019-1125 kernel: hw: Spectre SWAPGS gadget vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":["kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0","redhat-virtualization-host-0:4.2-20191022.0.el7_6","kernel-0:3.10.0-957.38.1.el7","kernel-0:3.10.0-862.43.1.el7","redhat-coreos-42.80.20191022.0","kernel-0:2.6.32-431.96.1.el6","kernel-0:2.6.32-754.18.2.el6","kernel-0:4.18.0-80.7.2.el8_0","kernel-0:2.6.32-504.80.2.el6","kernel-0:3.10.0-514.69.1.el7","kernel-0:3.10.0-327.82.1.el7","kernel-rt-0:3.10.0-1062.1.1.rt56.1024.el7","kernel-0:3.10.0-693.58.1.el7","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:3.10.0-1062.1.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-19527","severity":"moderate","public_date":"2019-08-06T00:00:00Z","advisories":["RHSA-2020:4236","RHSA-2020:1378","RHSA-2020:3221","RHSA-2020:1372","RHSA-2020:3220","RHBA-2020:1450"],"bugzilla":"1783498","bugzilla_description":"CVE-2019-19527 kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-147.8.1.rt24.101.el8_1","kernel-0:3.10.0-1062.36.1.el7","kernel-0:4.18.0-147.8.1.el8_1","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","redhat-coreos-42.81.20200407.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19527.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-15221","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1070","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1749974","bugzilla_description":"CVE-2019-15221 kernel: Null pointer dereference in the sound/usb/line6/pcm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","kernel-rt-0:3.10.0-1127.rt56.1093.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15221.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15223","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1749976","bugzilla_description":"CVE-2019-15223 kernel: Null pointer dereference in the sound/usb/line6/driver.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15223.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-10181","severity":"moderate","public_date":"2019-07-31T13:42:00Z","advisories":["RHSA-2019:2003","RHSA-2019:2004"],"bugzilla":"1725928","bugzilla_description":"CVE-2019-10181 icedtea-web: unsigned code injection in a signed JAR file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["icedtea-web-0:1.7.1-2.el7_6","icedtea-web-0:1.7.1-17.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-10185","severity":"important","public_date":"2019-07-31T13:41:00Z","advisories":["RHSA-2019:2003","RHSA-2019:2004"],"bugzilla":"1724989","bugzilla_description":"CVE-2019-10185 icedtea-web: directory traversal in the nested jar auto-extraction leading to arbitrary file overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["icedtea-web-0:1.7.1-2.el7_6","icedtea-web-0:1.7.1-17.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L","cvss3_score":"8.2"},{"CVE":"CVE-2019-10182","severity":"important","public_date":"2019-07-31T13:40:00Z","advisories":["RHSA-2019:2003","RHSA-2019:2004"],"bugzilla":"1724958","bugzilla_description":"CVE-2019-10182 icedtea-web: path traversal while processing <jar/> elements of JNLP files results in arbitrary file overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22->CWE-94","affected_packages":["icedtea-web-0:1.7.1-2.el7_6","icedtea-web-0:1.7.1-17.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L","cvss3_score":"8.2"},{"CVE":"CVE-2019-10207","severity":"moderate","public_date":"2019-07-29T13:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1733874","bugzilla_description":"CVE-2019-10207 kernel: null-pointer dereference in hci_uart_set_flow_control","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-10184","severity":"low","public_date":"2019-07-24T00:00:00Z","advisories":["RHSA-2019:3045","RHSA-2020:0727","RHSA-2019:3046","RHSA-2019:2935","RHSA-2019:2998","RHSA-2019:3044","RHSA-2019:2938","RHSA-2020:0983","RHSA-2019:2937","RHSA-2019:3050","RHSA-2019:2936"],"bugzilla":"1713068","bugzilla_description":"CVE-2019-10184 undertow: Information leak in requests for directories without trailing slashes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10184.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-1010241","severity":"moderate","public_date":"2019-07-23T00:00:00Z","advisories":[],"bugzilla":"1732346","bugzilla_description":"CVE-2019-1010241 jenkins-plugin-credentials-binding: storing passwords in recoverable format leading to authenticated users being able to recover credentials","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010241.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-14379","severity":"important","public_date":"2019-07-23T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:2743","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2020:0727","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1737517","bugzilla_description":"CVE-2019-14379 jackson-databind: default typing mishandling leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","rh-maven35-jackson-databind-0:2.7.6-2.7.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-13648","severity":"moderate","public_date":"2019-07-19T00:00:00Z","advisories":["RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:3019"],"bugzilla":"1735630","bugzilla_description":"CVE-2019-13648 kernel: denial of service in arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c via sigreturn() system call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-1062.30.1.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1127.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13648.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-13272","severity":"important","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2809","RHBA-2019:3151","RHSA-2019:2411","RHSA-2019:2405"],"bugzilla":"1730895","bugzilla_description":"CVE-2019-13272 kernel: broken permission and object lifetime handling for PTRACE_TRACEME","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":["kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.7.2.el8_0","kernel-alt-0:4.14.0-115.12.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13272.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10638","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1729931","bugzilla_description":"CVE-2019-10638 Kernel: net: weak IP ID generation leads to remote device tracking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331->CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-10639","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:2522","RHBA-2020:3180","RHSA-2020:1070","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1729933","bugzilla_description":"CVE-2019-10639 Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-193.el8","kernel-rt-0:3.10.0-1127.rt56.1093.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-1010305","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:1686","RHBA-2020:3180","RHSA-2020:3848"],"bugzilla":"1730568","bugzilla_description":"CVE-2019-1010305 libmspack: buffer overflow in function chmd_read_headers()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["libmspack-0:0.5-0.8.alpha.el7","libmspack-0:0.7-0.3.alpha.el8.4","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010305.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-10213","severity":"moderate","public_date":"2019-07-12T00:00:00Z","advisories":["RHSA-2019:4088","RHSA-2019:2791","RHSA-2019:4082"],"bugzilla":"1734615","bugzilla_description":"CVE-2019-10213 openshift: Secret data written to pod logs when operator set at Debug level or higher","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["openshift4/ose-console-operator:v4.1.16-201909100604","openshift4/ose-cluster-authentication-operator:v4.1.26-201911260202","openshift4/ose-cluster-config-operator:v4.1.26-201911260202","openshift4/ose-cluster-openshift-apiserver-operator:v4.1.27-201912030019","openshift4/ose-cluster-kube-apiserver-operator:v4.1.26-201911260202"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10213.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-12855","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1728206","bugzilla_description":"CVE-2019-12855 python-twisted: XMPP  support in words.protocols.jabber.xmlstream in Twisted does not verify certificates allowing for a MITM connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-13233","severity":"moderate","public_date":"2019-07-04T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1727756","bugzilla_description":"CVE-2019-13233 kernel: use-after-free in arch/x86/lib/insn-eval.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13233.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2019-13164","severity":"low","public_date":"2019-06-28T00:00:00Z","advisories":[],"bugzilla":"1722559","bugzilla_description":"CVE-2019-13164 Qemu: qemu-bridge-helper ACL can be bypassed when names are too long","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-12817","severity":"important","public_date":"2019-06-24T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2703"],"bugzilla":"1720616","bugzilla_description":"CVE-2019-12817 kernel: ppc: unrelated processes being able to read/write to each other's virtual memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->(CWE-125|CWE-787)","affected_packages":["redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12817.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-10166","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720114","bugzilla_description":"CVE-2019-10166 libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10166.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10161","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1578","RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720115","bugzilla_description":"CVE-2019-10161 libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","libvirt-0:0.10.2-64.el6_10.2","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10167","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720117","bugzilla_description":"CVE-2019-10167 libvirt: arbitrary command execution via virConnectGetDomainCapabilities API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-284|CWE-250)","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10168","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720118","bugzilla_description":"CVE-2019-10168 libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-284|CWE-250)","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10168.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-12435","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1711816","bugzilla_description":"CVE-2019-12435 samba: AD DC Denial of Service in DNS management server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-12436","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1711837","bugzilla_description":"CVE-2019-12436 samba: NULL pointer dereference in Samba LDAP server leading to crash and Dos","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10192","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:2630","RHSA-2019:1860","RHSA-2019:2002","RHSA-2019:1819","RHSA-2019:2621","RHSA-2019:2506","RHSA-2019:2508","RHSA-2019:2628"],"bugzilla":"1723918","bugzilla_description":"CVE-2019-10192 redis: Heap buffer overflow in HyperLogLog triggered by malicious client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redis-0:3.2.8-4.el7ost","redis-0:3.0.6-5.el7ost","rh-redis32-redis-0:3.2.13-1.el7","rh-redis32-redis-0:3.2.13-1.el6","redis:5-8000020190711140130.f8e95b4e","rh-redis5-redis-0:5.0.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10192.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-10193","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:2002","RHSA-2019:1819"],"bugzilla":"1727668","bugzilla_description":"CVE-2019-10193 redis: Stack buffer overflow in HyperLogLog triggered by malicious client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["redis:5-8000020190711140130.f8e95b4e","rh-redis5-redis-0:5.0.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-11477","severity":"important","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719123","bugzilla_description":"CVE-2019-11477 Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11478","severity":"moderate","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719128","bugzilla_description":"CVE-2019-11478 Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11478.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11479","severity":"moderate","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719129","bugzilla_description":"CVE-2019-11479 kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11479.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-12749","severity":"important","public_date":"2019-06-11T00:00:00Z","advisories":["RHSA-2019:2870","RHSA-2020:4032","RHSA-2019:2868","RHSA-2019:3707","RHBA-2019:3303","RHSA-2019:1726"],"bugzilla":"1719344","bugzilla_description":"CVE-2019-12749 dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["dbus-1:1.2.24-9.el6_6","dbus-1:1.12.8-9.el8","redhat-coreos-42.81.20191107.0","dbus-1:1.10.24-15.el7","dbus-1:1.2.24-11.el6_10","dbus-1:1.2.24-9.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12749.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-12387","severity":"moderate","public_date":"2019-06-10T00:00:00Z","advisories":["RHSA-2020:1091","RHSA-2019:3172"],"bugzilla":"1719501","bugzilla_description":"CVE-2019-12387 python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python-twisted-web-0:12.1.0-6.el7","python-twisted-0:16.4.1-12.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-12795","severity":"low","public_date":"2019-06-05T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1726505","bugzilla_description":"CVE-2019-12795 gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["gvfs-0:1.36.2-6.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12795.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-12814","severity":"moderate","public_date":"2019-06-04T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2938","RHSA-2019:2937","RHSA-2019:2804","RHSA-2019:2936"],"bugzilla":"1725795","bugzilla_description":"CVE-2019-12814 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-16871","severity":"moderate","public_date":"2019-06-03T02:23:00Z","advisories":["RHSA-2019:2696","RHBA-2020:3180","RHSA-2019:1891","RHSA-2020:0740","RHSA-2019:1873","RHSA-2019:2730","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1655162","bugzilla_description":"CVE-2018-16871 kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-957.27.2.el7","kernel-0:4.18.0-193.el8","kernel-0:3.10.0-693.58.1.el7","redhat-coreos-43.82.202007300301.0","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16871.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10160","severity":"important","public_date":"2019-06-03T00:00:00Z","advisories":["RHSA-2019:1587","RHSA-2019:1700","RHSA-2019:2437"],"bugzilla":"1718388","bugzilla_description":"CVE-2019-10160 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python27-python-0:2.7.16-6.el6","python27-python-0:2.7.16-6.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","python-0:2.7.5-80.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-10126","severity":"important","public_date":"2019-05-31T00:00:00Z","advisories":["RHSA-2020:2289","RHSA-2019:3089","RHSA-2020:0174","RHSA-2019:3076","RHSA-2019:3055","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1716992","bugzilla_description":"CVE-2019-10126 kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10126.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-3846","severity":"important","public_date":"2019-05-30T12:53:00Z","advisories":["RHSA-2020:2289","RHSA-2019:3089","RHBA-2019:3151","RHSA-2020:0174","RHSA-2019:2741","RHSA-2019:2703","RHSA-2019:3076","RHSA-2019:3055"],"bugzilla":"1713059","bugzilla_description":"CVE-2019-3846 kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3846.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-12447","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728562","bugzilla_description":"CVE-2019-12447 gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-12448","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728564","bugzilla_description":"CVE-2019-12448 gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-364","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12448.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-12449","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728567","bugzilla_description":"CVE-2019-12449 gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12449.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-12382","severity":"moderate","public_date":"2019-05-24T00:00:00Z","advisories":["RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303"],"bugzilla":"1715554","bugzilla_description":"CVE-2019-12382 kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253->CWE-476","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12382.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-12450","severity":"moderate","public_date":"2019-05-23T00:00:00Z","advisories":["RHSA-2019:3530","RHSA-2020:3978","RHBA-2019:3303"],"bugzilla":"1719141","bugzilla_description":"CVE-2019-12450 glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["glib2-0:2.56.1-7.el7","redhat-coreos-42.81.20191107.0","glib2-0:2.56.4-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.6"},{"CVE":"CVE-2019-5436","severity":"low","public_date":"2019-05-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1020","RHBA-2020:1539","RHSA-2020:1792","RHSA-2019:1543","RHSA-2020:2505","RHBA-2020:1540"],"bugzilla":"1710620","bugzilla_description":"CVE-2019-5436 curl: TFTP receive heap buffer overflow in tftp_receive_packet() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","curl-0:7.29.0-54.el7_7.3","redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-57.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5436.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-10320","severity":"moderate","public_date":"2019-05-21T00:00:00Z","advisories":["RHSA-2019:1636","RHBA-2019:1605"],"bugzilla":"1714054","bugzilla_description":"CVE-2019-10320 jenkins-credentials-plugin: Certificate file read vulnerability in Credentials Plugin (SECURITY-1322)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["jenkins-2-plugins-0:3.11.1559667994-1.el7","jenkins-2-plugins-0:4.1.1561471763-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-6237","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876880","bugzilla_description":"CVE-2019-6237 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6237.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8571","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876881","bugzilla_description":"CVE-2019-8571 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8583","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876882","bugzilla_description":"CVE-2019-8583 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8584","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876883","bugzilla_description":"CVE-2019-8584 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8584.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8586","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876884","bugzilla_description":"CVE-2019-8586 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8587","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876887","bugzilla_description":"CVE-2019-8587 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8587.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8594","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876891","bugzilla_description":"CVE-2019-8594 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8594.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8595","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876892","bugzilla_description":"CVE-2019-8595 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8595.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8596","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876893","bugzilla_description":"CVE-2019-8596 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8597","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876894","bugzilla_description":"CVE-2019-8597 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8601","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876895","bugzilla_description":"CVE-2019-8601 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8607","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876897","bugzilla_description":"CVE-2019-8607 webkitgtk: Out-of-bounds read leading to memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8607.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-8608","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876898","bugzilla_description":"CVE-2019-8608 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8609","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876899","bugzilla_description":"CVE-2019-8609 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8609.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8610","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876900","bugzilla_description":"CVE-2019-8610 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8610.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8615","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877045","bugzilla_description":"CVE-2019-8615 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8615.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8611","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877046","bugzilla_description":"CVE-2019-8611 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8611.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8619","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877047","bugzilla_description":"CVE-2019-8619 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8622","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877048","bugzilla_description":"CVE-2019-8622 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8622.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8623","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877049","bugzilla_description":"CVE-2019-8623 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8623.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10139","severity":"moderate","public_date":"2019-05-17T00:00:00Z","advisories":["RHSA-2019:2433","RHSA-2019:2437"],"bugzilla":"1709829","bugzilla_description":"CVE-2019-10139 cockpit-ovirt: admin and appliance passwords saved in plain text variable file during HE deployment","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","cockpit-ovirt-0:0.13.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-12126","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646781","bugzilla_description":"CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12130","severity":"important","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646784","bugzilla_description":"CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385->CWE-226","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-12127","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1667782","bugzilla_description":"CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11091","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1705312","bugzilla_description":"CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2018-16860","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":[],"bugzilla":"1705877","bugzilla_description":"CVE-2018-16860 samba: S4U2Self with unkeyed checksum","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11085","severity":"important","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:1891","RHBA-2019:3151","RHSA-2019:1873","RHSA-2020:0609","RHSA-2020:0592","RHSA-2019:1971","RHSA-2020:0543","RHSA-2019:1959"],"bugzilla":"1710405","bugzilla_description":"CVE-2019-11085 kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-250","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.64.1.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-862.48.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11085.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-12086","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2020:1454","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3044","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2020:3192","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1713468","bugzilla_description":"CVE-2019-12086 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-11833","severity":"moderate","public_date":"2019-05-11T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1712072","bugzilla_description":"CVE-2019-11833 kernel: fs/ext4/extents.c leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11833.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-11884","severity":"moderate","public_date":"2019-05-10T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1709837","bugzilla_description":"CVE-2019-11884 kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11884.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"6.8"},{"CVE":"CVE-2019-18408","severity":"important","public_date":"2019-05-10T00:00:00Z","advisories":["RHSA-2020:0271","RHSA-2020:0203","RHSA-2020:0246","RHBA-2020:0395"],"bugzilla":"1769979","bugzilla_description":"CVE-2019-18408 libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-8.el8_1","libarchive-0:3.1.2-14.el7_7","libarchive-0:3.3.2-4.el8_0","redhat-coreos-42.81.20200203.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18408.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11810","severity":"moderate","public_date":"2019-05-07T00:00:00Z","advisories":["RHSA-2020:0036","RHSA-2019:3217","RHSA-2019:2029","RHBA-2019:3151","RHSA-2019:1971","RHSA-2019:2736","RHSA-2019:2043","RHSA-2019:1959","RHSA-2019:2837"],"bugzilla":"1709164","bugzilla_description":"CVE-2019-11810 kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.14.1.el7a","kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:2.6.32-754.22.1.el6","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.46.1.el7","kernel-0:3.10.0-957.35.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11810.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-11811","severity":"moderate","public_date":"2019-05-07T00:00:00Z","advisories":["RHSA-2019:1891","RHSA-2020:0036","RHSA-2019:4057","RHSA-2019:4058","RHBA-2019:3151","RHSA-2019:1873","RHSA-2019:1971","RHSA-2019:1959","RHSA-2020:2854"],"bugzilla":"1709180","bugzilla_description":"CVE-2019-11811 kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.61.1.el7","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-862.46.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11811.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-3843","severity":"moderate","public_date":"2019-04-25T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1794"],"bugzilla":"1684607","bugzilla_description":"CVE-2019-3843 systemd: services with DynamicUser can create SUID/SGID binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["systemd-0:239-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-3844","severity":"moderate","public_date":"2019-04-25T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1794"],"bugzilla":"1684610","bugzilla_description":"CVE-2019-3844 systemd: services with DynamicUser can get new privileges and create SGID binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-268","affected_packages":["systemd-0:239-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3844.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-3900","severity":"important","public_date":"2019-04-25T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:1973","RHSA-2019:4058","RHSA-2019:3220","RHSA-2019:2043","RHSA-2019:3967","RHSA-2019:3836","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1698757","bugzilla_description":"CVE-2019-3900 Kernel: vhost_net: infinite loop while receiving packets leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-957.38.1.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:3.10.0-693.61.1.el7","redhat-coreos-42.81.20191107.0","kernel-alt-0:4.14.0-115.10.1.el7a","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.44.2.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2019-3868","severity":"moderate","public_date":"2019-04-23T16:59:00Z","advisories":["RHSA-2020:2366","RHSA-2019:0856","RHSA-2019:2998","RHSA-2019:1140","RHSA-2019:0868","RHSA-2019:0857"],"bugzilla":"1679144","bugzilla_description":"CVE-2019-3868 keycloak: session hijack using the user access token","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-sso7-keycloak-0:3.4.17-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.17-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3868.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-0223","severity":"moderate","public_date":"2019-04-23T00:00:00Z","advisories":["RHSA-2019:1398","RHSA-2019:2782","RHSA-2019:2781","RHSA-2019:2777","RHSA-2019:1400","RHSA-2019:1399","RHSA-2019:0886","RHSA-2019:2779","RHSA-2019:2778","RHSA-2019:2780"],"bugzilla":"1702439","bugzilla_description":"CVE-2019-0223 qpid-proton: TLS Man in the Middle Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-300","affected_packages":["qpid-proton-0:0.27.0-3.el7","qpid-proton-0:0.27.0-3.el6","qpid-proton-0:0.9-22.el5","qpid-proton-0:0.28.0-1.el8","qpid-proton-0:0.28.0-1.el7","qpid-proton-0:0.16.0-14.el7sat","qpid-proton-0:0.16.0-14.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0223.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-11487","severity":"important","public_date":"2019-04-22T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:3266","RHBA-2019:3151","RHSA-2020:3230","RHSA-2020:0839","RHSA-2020:0174","RHSA-2019:2741","RHSA-2020:0834","RHSA-2019:2703","RHSA-2020:4182"],"bugzilla":"1703063","bugzilla_description":"CVE-2019-11487 kernel: Count overflow in FUSE request leading to use-after-free issues.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.71.2.el7","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-1:3.10.0-693.71.2.rt56.670.el6rt","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:2.6.32-754.35.1.el6","kernel-0:3.10.0-1062.18.1.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-11599","severity":"moderate","public_date":"2019-04-19T00:00:00Z","advisories":["RHSA-2020:0100","RHSA-2020:0179","RHSA-2019:2029","RHSA-2019:2043","RHSA-2020:0103","RHSA-2020:0543","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1705937","bugzilla_description":"CVE-2019-11599 kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-667","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.62.1.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-957.43.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-rt-1:3.10.0-693.62.1.rt56.659.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11599.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-18805","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0740","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1771496","bugzilla_description":"CVE-2019-18805 kernel: integer overflow in tcp_ack_update_rtt in net/ipv4/tcp_input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18805.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-11459","severity":"low","public_date":"2019-04-13T00:00:00Z","advisories":["RHSA-2020:1074","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1716295","bugzilla_description":"CVE-2019-11459 evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["evince-0:3.28.4-3.el8","evince-0:3.28.2-9.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11459.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-9494","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699141","bugzilla_description":"CVE-2019-9494 wpa_supplicant: SAE Timing-based and Cache-based side-channel attack against WPA3's Dragonfly handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9494.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9495","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699149","bugzilla_description":"CVE-2019-9495 wpa_supplicant: EAP-pwd cache side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9495.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9497","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699164","bugzilla_description":"CVE-2019-9497 wpa_supplicant: EAP-pwd server not checking for reflection attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9497.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-9498","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699168","bugzilla_description":"CVE-2019-9498 wpa_supplicant: EAP-pwd server missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9498.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-9499","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699170","bugzilla_description":"CVE-2019-9499 wpa_supplicant: EAP-pwd peer missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9499.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-11596","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:1576"],"bugzilla":"1706001","bugzilla_description":"CVE-2019-11596 memcached: null-pointer dereference in \"lru mode\" and \"lru temp_ttl\" causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["memcached-0:1.5.9-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11596.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11070","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1709289","bugzilla_description":"CVE-2019-11070 webkitgtk: HTTP proxy setting deanonymization information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11070.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-8506","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719199","bugzilla_description":"CVE-2019-8506 webkitgtk: malicous web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8518","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719206","bugzilla_description":"CVE-2019-8518 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8523","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719208","bugzilla_description":"CVE-2019-8523 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8524","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719209","bugzilla_description":"CVE-2019-8524 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8524.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8535","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719210","bugzilla_description":"CVE-2019-8535 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8535.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8536","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719213","bugzilla_description":"CVE-2019-8536 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8536.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8544","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719224","bugzilla_description":"CVE-2019-8544 webkitgtk: malicious crafted web content leads to arbitrary we content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8558","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719231","bugzilla_description":"CVE-2019-8558 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8558.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8559","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719235","bugzilla_description":"CVE-2019-8559 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8559.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8563","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719237","bugzilla_description":"CVE-2019-8563 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-3870","severity":"moderate","public_date":"2019-04-09T00:00:00Z","advisories":[],"bugzilla":"1689010","bugzilla_description":"CVE-2019-3870 samba: World writable files in Samba AD DC private/ dir","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-3880","severity":"moderate","public_date":"2019-04-09T00:00:00Z","advisories":["RHSA-2019:2099","RHSA-2019:1967","RHSA-2019:1966","RHSA-2019:3582"],"bugzilla":"1691518","bugzilla_description":"CVE-2019-3880 samba: save registry file outside share as unprivileged user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.9.8-105.el7rhgs","samba-0:4.9.1-6.el7","samba-0:4.10.4-1.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3880.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2019-3887","severity":"important","public_date":"2019-04-05T16:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2703"],"bugzilla":"1695044","bugzilla_description":"CVE-2019-3887 Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3887.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-4300","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1695929","bugzilla_description":"CVE-2018-4300 cups: Session cookie generated by the CUPS web interface is easy to guess","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4300.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"7.3"},{"CVE":"CVE-2019-3882","severity":"moderate","public_date":"2019-04-02T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1689426","bugzilla_description":"CVE-2019-3882 kernel: denial of service vector through vfio DMA mappings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-12183","severity":"moderate","public_date":"2019-03-29T00:00:00Z","advisories":[],"bugzilla":"1694077","bugzilla_description":"CVE-2018-12183 edk2: stack overflow in DxeCore leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12183.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-12182","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":[],"bugzilla":"1694081","bugzilla_description":"CVE-2018-12182 edk2: insufficient memory write in SMM service leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-3829","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2019:3600","RHBA-2019:3303"],"bugzilla":"1677048","bugzilla_description":"CVE-2019-3829 gnutls: use-after-free/double-free in certificate verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gnutls-0:3.6.8-8.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3829.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-3836","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2019:3600","RHBA-2019:3303"],"bugzilla":"1678411","bugzilla_description":"CVE-2019-3836 gnutls: invalid pointer access upon receiving async handshake messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["gnutls-0:3.6.8-8.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3836.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-12179","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":[],"bugzilla":"1694072","bugzilla_description":"CVE-2018-12179 edk2: improper configuration insystem firmware leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12179.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-3874","severity":"moderate","public_date":"2019-03-19T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1686373","bugzilla_description":"CVE-2019-3874 kernel: SCTP socket buffer memory leak leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3874.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-9893","severity":"moderate","public_date":"2019-03-14T00:00:00Z","advisories":["RHSA-2019:3624","RHBA-2019:3303"],"bugzilla":"1690897","bugzilla_description":"CVE-2019-9893 libseccomp: incorrect generation of syscall filters in libseccomp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["redhat-coreos-42.81.20191107.0","libseccomp-0:2.4.1-1.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3855","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687303","bugzilla_description":"CVE-2019-3855 libssh2: Integer overflow in transport read resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3856","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687304","bugzilla_description":"CVE-2019-3856 libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3856.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3857","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687305","bugzilla_description":"CVE-2019-3857 libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3857.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3858","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687306","bugzilla_description":"CVE-2019-3858 libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3859","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687307","bugzilla_description":"CVE-2019-3859 libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3859.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3860","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687310","bugzilla_description":"CVE-2019-3860 libssh2: Out-of-bounds reads with specially crafted SFTP packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3861","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687311","bugzilla_description":"CVE-2019-3861 libssh2: Out-of-bounds reads with specially crafted SSH packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3861.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3862","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:1884"],"bugzilla":"1687312","bugzilla_description":"CVE-2019-3862 libssh2: Out-of-bounds memory comparison with specially crafted message channel request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["libssh2-0:1.4.3-12.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3862.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3863","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687313","bugzilla_description":"CVE-2019-3863 libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3816","severity":"important","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2019:0972","RHSA-2019:0638"],"bugzilla":"1667070","bugzilla_description":"CVE-2019-3816 openwsman: Disclosure of arbitrary files outside of the registered URIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openwsman-0:2.6.3-6.git4391e5c.el7_6","openwsman-0:2.6.5-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-3833","severity":"moderate","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2020:3940"],"bugzilla":"1674478","bugzilla_description":"CVE-2019-3833 openwsman: Infinite loop in process_connection() allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openwsman-0:2.6.3-7.git4391e5c.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3833.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-8936","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":[],"bugzilla":"1686605","bugzilla_description":"CVE-2019-8936 ntp: Crafted null dereference attack in authenticated mode 6 packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-12181","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":["RHSA-2019:3338","RHSA-2019:2125"],"bugzilla":"1686783","bugzilla_description":"CVE-2018-12181 edk2: Stack buffer overflow with corrupted BMP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["edk2-0:20190308git89910a39dcfd-6.el8","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12181.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9924","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":["RHSA-2020:1113","RHSA-2020:3474","RHBA-2020:1539","RHSA-2020:3592","RHSA-2020:3803","RHBA-2020:1540"],"bugzilla":"1691774","bugzilla_description":"CVE-2019-9924 bash: BASH_CMD is writable in restricted bash shells","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","bash-0:4.2.46-34.el7","bash-0:4.2.46-32.el7_6","bash-0:4.2.46-34.el7_7","bash-0:4.2.46-30.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9924.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9636","severity":"important","public_date":"2019-03-06T00:00:00Z","advisories":["RHBA-2019:0763","RHSA-2019:2980","RHSA-2019:0806","RHSA-2019:1467","RHSA-2019:0981","RHSA-2019:0710","RHSA-2019:0765","RHSA-2019:0997","RHSA-2019:3170","RHBA-2019:0764","RHSA-2019:0902"],"bugzilla":"1688543","bugzilla_description":"CVE-2019-9636 python: Information Disclosure due to urlsplit improper NFKC normalization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python3-0:3.6.8-2.el8_0","python27-python-0:2.7.13-4.el6","rhvm-appliance-0:4.2-20190411.1.el7","python27-python-0:2.7.13-6.el7","python-0:2.7.5-59.el7_4","python-0:2.7.5-70.el7_5","rh-python36-python-0:3.6.3-4.el6","redhat-virtualization-host-0:4.2-20190411.1.el7_6","python27:2.7-8000020190410132513.c0efe978","rh-python35-python-0:3.5.1-12.el7","rh-python35-python-0:3.5.1-12.el6","python-0:2.7.5-77.el7_6","python-0:2.6.6-68.el6_10","rh-python36-python-0:3.6.3-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-1543","severity":"low","public_date":"2019-03-06T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1695954","bugzilla_description":"CVE-2019-1543 openssl: ChaCha20-Poly1305 with long nonces","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-9213","severity":"important","public_date":"2019-02-27T00:00:00Z","advisories":["RHSA-2019:1479","RHBA-2019:3151","RHSA-2019:0831","RHSA-2019:1480"],"bugzilla":"1686136","bugzilla_description":"CVE-2019-9213 kernel: lack of check for mmap minimum address in expand_downwards in mm/mmap.c leads to NULL pointer dereferences exploit on non-SMAP platforms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:4.18.0-80.4.2.el8_0","redhat-coreos-42.80.20191022.0","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9213.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-12178","severity":"important","public_date":"2019-02-26T00:00:00Z","advisories":[],"bugzilla":"1683326","bugzilla_description":"CVE-2018-12178 edk2: improper DNS packet size check","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12178.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"7.2"},{"CVE":"CVE-2018-12180","severity":"important","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:0809","RHSA-2019:1116","RHSA-2019:0968"],"bugzilla":"1683372","bugzilla_description":"CVE-2018-12180 edk2: Buffer Overflow in BlockIo service for RAM disk","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7_6.1","redhat-virtualization-host-0:4.3-20190418.0.el7_6","edk2-0:20180508gitee3198e672e2-9.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"8.3"},{"CVE":"CVE-2019-1559","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:2304","RHSA-2019:2439","RHSA-2019:3929","RHSA-2019:2437","RHSA-2019:2471"],"bugzilla":"1683804","bugzilla_description":"CVE-2019-1559 openssl: 0-byte record padding oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-0:1.0.1e-58.el6_10","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-0160","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3338","RHSA-2019:2125"],"bugzilla":"1691640","bugzilla_description":"CVE-2019-0160 edk2: Buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-121)","affected_packages":["edk2-0:20190308git89910a39dcfd-6.el8","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0160.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2019-9500","severity":"important","public_date":"2019-02-19T00:00:00Z","advisories":["RHSA-2019:3217","RHSA-2019:2600","RHSA-2019:4168","RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2945","RHSA-2019:2703","RHSA-2019:2609","RHSA-2019:4171"],"bugzilla":"1701224","bugzilla_description":"CVE-2019-9500 kernel: brcmfmac heap buffer overflow in brcmf_wowl_nd_results","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-alt-0:4.14.0-115.14.1.el7a","kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","kernel-rt-0:3.10.0-1062.1.1.rt56.1024.el7","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0","kernel-0:3.10.0-1062.1.1.el7","kernel-0:3.10.0-957.41.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9503","severity":"moderate","public_date":"2019-02-19T00:00:00Z","advisories":["RHSA-2020:2522","RHBA-2019:3151","RHSA-2019:2741","RHSA-2020:1070","RHSA-2019:2703","RHSA-2020:1016"],"bugzilla":"1701842","bugzilla_description":"CVE-2019-9503 kernel: brcmfmac frame validation bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9503.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-6454","severity":"important","public_date":"2019-02-18T00:00:00Z","advisories":["RHSA-2019:0990","RHSA-2019:0461","RHSA-2019:0368","RHBA-2019:3151","RHSA-2019:1322","RHSA-2019:0457","RHSA-2019:1502","RHSA-2019:2805"],"bugzilla":"1667032","bugzilla_description":"CVE-2019-6454 systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["systemd-0:219-62.el7_6.5","rhvm-appliance-0:4.2-20190224.0.el7","systemd-0:219-42.el7_4.16","redhat-coreos-42.80.20191022.0","systemd-0:239-13.el8_0.3","systemd-0:219-57.el7_5.6","systemd-0:219-30.el7_3.14","redhat-virtualization-host-0:4.2-20190219.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6454.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-8980","severity":"moderate","public_date":"2019-02-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1679972","bugzilla_description":"CVE-2019-8980 kernel: memory leak in the kernel_read_file function in fs/exec.c allows to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8980.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-3831","severity":"moderate","public_date":"2019-02-14T00:00:00Z","advisories":["RHSA-2019:0457","RHSA-2019:0458"],"bugzilla":"1677108","bugzilla_description":"CVE-2019-3831 vdsm: privilege escalation to root via systemd_run","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["vdsm-0:4.20.47-1.el7ev","redhat-virtualization-host-0:4.2-20190219.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3831.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-7222","severity":"low","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1671930","bugzilla_description":"CVE-2019-7222 Kernel: KVM: leak of uninitialized stack contents to guest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7222.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2018-16890","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670252","bugzilla_description":"CVE-2018-16890 curl: NTLM type-2 heap out-of-bounds buffer read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-190","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-3822","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670254","bugzilla_description":"CVE-2019-3822 curl: NTLMv2 type-3 header stack buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-3823","severity":"low","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670256","bugzilla_description":"CVE-2019-3823 curl: SMTP end-of-response out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-3825","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1672825","bugzilla_description":"CVE-2019-3825 gdm: lock screen bypass when timed login is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["gdm-1:3.28.3-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3825.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2018-16838","severity":"low","public_date":"2019-02-04T00:00:00Z","advisories":["RHSA-2019:2177","RHSA-2019:3651","RHSA-2019:2437","RHBA-2019:3303"],"bugzilla":"1640820","bugzilla_description":"CVE-2018-16838 sssd: improper implementation of GPOs due to too restrictive permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["redhat-coreos-42.81.20191107.0","sssd-0:1.16.4-21.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","sssd-0:2.2.0-19.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-3813","severity":"important","public_date":"2019-01-28T18:00:00Z","advisories":["RHSA-2019:0231","RHSA-2019:0232","RHSA-2019:0457"],"bugzilla":"1665371","bugzilla_description":"CVE-2019-3813 spice: Off-by-one error in array access in spice/server/memslot.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["spice-0:0.14.0-6.el7_6.1","redhat-virtualization-host-0:4.2-20190219.0.el7_6","spice-server-0:0.12.4-16.el6_10.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3813.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-3630","severity":"moderate","public_date":"2019-01-26T00:00:00Z","advisories":[],"bugzilla":"1683653","bugzilla_description":"CVE-2018-3630 ovmf: Logic error in FV parsing in MdeModulePkg\\Core\\Pei\\FwVol\\FwVol.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3630.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2018-18508","severity":"moderate","public_date":"2019-01-22T00:00:00Z","advisories":["RHSA-2019:1951"],"bugzilla":"1671310","bugzilla_description":"CVE-2018-18508 nss: NULL pointer dereference in several CMS functions resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3817","severity":"moderate","public_date":"2019-01-21T00:00:00Z","advisories":["RHSA-2019:3898","RHBA-2020:0062","RHSA-2019:3583"],"bugzilla":"1668005","bugzilla_description":"CVE-2019-3817 libcomps: use after free when merging two objmrtrees","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.81.202001142154.0","libcomps-0:0.1.8-13.el7","libcomps-0:0.1.11-2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1000020","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1672888","bugzilla_description":"CVE-2019-1000020 libarchive: Infinite recursion in archive_read_support_format_iso9660.c resulting in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1000020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-1000019","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1672892","bugzilla_description":"CVE-2019-1000019 libarchive: Out of bounds read in archive_read_support_format_7zip.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1000019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3459","severity":"moderate","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1663176","bugzilla_description":"CVE-2019-3459 kernel: Heap address information leak while using L2CAP_GET_CONF_OPT","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-3460","severity":"moderate","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1663179","bugzilla_description":"CVE-2019-3460 kernel: Heap address information leak while using L2CAP_PARSE_CONF_RSP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-16889","severity":"moderate","public_date":"2019-01-10T00:00:00Z","advisories":["RHSA-2019:2541","RHSA-2019:2538"],"bugzilla":"1665334","bugzilla_description":"CVE-2018-16889 ceph: debug logging for v4 auth does not sanitize encryption keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["ceph-2:12.2.12-45.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16889.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-16864","severity":"important","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:0342","RHSA-2019:0361","RHSA-2019:0049","RHSA-2019:2402","RHSA-2019:0204","RHSA-2019:0271"],"bugzilla":"1653855","bugzilla_description":"CVE-2018-16864 systemd: stack overflow when calling syslog from a command with long cmdline","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["systemd-0:219-30.el7_3.13","systemd-0:219-57.el7_5.5","rhvm-appliance-0:4.2-20190129.0.el7","systemd-0:219-62.el7_6.2","systemd-0:219-42.el7_4.13","redhat-virtualization-host-0:4.2-20190129.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2018-16865","severity":"important","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:0342","RHSA-2019:0361","RHSA-2019:0049","RHSA-2019:2402","RHSA-2019:0204","RHSA-2019:0271"],"bugzilla":"1653861","bugzilla_description":"CVE-2018-16865 systemd: stack overflow when receiving many journald entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["systemd-0:219-30.el7_3.13","systemd-0:219-57.el7_5.5","rhvm-appliance-0:4.2-20190129.0.el7","systemd-0:219-62.el7_6.2","systemd-0:219-42.el7_4.13","redhat-virtualization-host-0:4.2-20190129.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16866","severity":"moderate","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:3222","RHSA-2020:0593","RHSA-2020:1264","RHSA-2019:2091"],"bugzilla":"1653867","bugzilla_description":"CVE-2018-16866 systemd: out-of-bounds read when parsing a crafted syslog message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":["systemd-0:219-57.el7_5.9","systemd-0:219-62.el7_6.11","systemd-0:219-67.el7","systemd-0:219-42.el7_4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16866.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-16846","severity":"moderate","public_date":"2019-01-07T00:00:00Z","advisories":["RHSA-2019:2541","RHSA-2019:2538"],"bugzilla":"1644461","bugzilla_description":"CVE-2018-16846 ceph: ListBucket max-keys has no defined limit in the RGW codebase","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["ceph-2:12.2.12-45.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-5489","severity":"important","public_date":"2019-01-06T00:00:00Z","advisories":["RHSA-2019:2473","RHSA-2019:4255","RHSA-2019:2029","RHSA-2019:4057","RHSA-2019:4058","RHSA-2019:4159","RHSA-2019:4164","RHSA-2019:4056","RHSA-2019:2043","RHSA-2020:0204","RHSA-2019:2809","RHSA-2019:2808","RHSA-2019:3967","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:2837","RHSA-2019:3309"],"bugzilla":"1664110","bugzilla_description":"CVE-2019-5489 Kernel: page cache side channel attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:2.6.18-439.el5","kernel-0:2.6.32-431.97.1.el6","kernel-0:2.6.32-754.18.2.el6","kernel-0:3.10.0-327.83.1.el7","kernel-0:2.6.32-504.82.1.el6","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:3.10.0-957.35.1.el7","kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.61.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.12.1.el7a","kernel-0:3.10.0-862.44.2.el7","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-514.71.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-20784","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:1971","RHSA-2019:1959"],"bugzilla":"1680540","bugzilla_description":"CVE-2018-20784 kernel: infinite loop in update_blocked_averages() in kernel/sched/fair.c leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.7.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-20483","severity":"moderate","public_date":"2018-12-26T00:00:00Z","advisories":["RHSA-2019:3701","RHBA-2019:3303"],"bugzilla":"1662705","bugzilla_description":"CVE-2018-20483 wget: Information exposure in set_file_metadata function in xattr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20483.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-20337","severity":"moderate","public_date":"2018-12-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1661555","bugzilla_description":"CVE-2018-20337 LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["LibRaw-0:0.19.5-1.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20337.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-3804","severity":"moderate","public_date":"2018-12-13T00:00:00Z","advisories":["RHSA-2019:0482","RHSA-2019:1571","RHSA-2019:1569"],"bugzilla":"1663567","bugzilla_description":"CVE-2019-3804 cockpit: Crash when parsing invalid base64 headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["rhvm-appliance-0:4.3-20190605.0.el7","cockpit-0:173.2-1.el7","redhat-virtualization-host-0:4.3-20190610.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-19985","severity":"low","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1666106","bugzilla_description":"CVE-2018-19985 kernel: oob memory read in hso_probe in drivers/net/usb/hso.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19985.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-4700","severity":"moderate","public_date":"2018-12-07T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1649347","bugzilla_description":"CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4700.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"7.3"},{"CVE":"CVE-2018-20169","severity":"moderate","public_date":"2018-12-05T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:2770","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:2777"],"bugzilla":"1660385","bugzilla_description":"CVE-2018-20169 kernel: usb: missing size check in the __usb_get_extra_descriptor() leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-rt-1:3.10.0-693.69.1.rt56.667.el6rt","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-693.69.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20169.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-19824","severity":"moderate","public_date":"2018-12-04T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2703"],"bugzilla":"1655816","bugzilla_description":"CVE-2018-19824 kernel: Use-after-free in sound/usb/card.c:usb_audio_probe()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19824.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2018-19788","severity":"moderate","public_date":"2018-12-03T00:00:00Z","advisories":["RHSA-2019:2046","RHSA-2019:3232"],"bugzilla":"1655925","bugzilla_description":"CVE-2018-19788 polkit: Improper handling of user with uid > INT_MAX leading to authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["polkit-0:0.112-22.el7","polkit-0:0.112-18.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19788.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16868","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1654929","bugzilla_description":"CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16868.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-16869","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1654930","bugzilla_description":"CVE-2018-16869 nettle: Leaky data conversion exposing a manager oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16869.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-12404","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":["RHSA-2019:2237"],"bugzilla":"1657913","bugzilla_description":"CVE-2018-12404 nss: Cache side-channel variant of the Bleichenbacher attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-18311","severity":"important","public_date":"2018-11-29T00:00:00Z","advisories":["RHSA-2019:0001","RHSA-2019:0010","RHSA-2019:2400","RHSA-2019:1942","RHSA-2019:1790","RHSA-2019:0109"],"bugzilla":"1646730","bugzilla_description":"CVE-2018-18311 perl: Integer overflow leading to buffer overflow in Perl_my_setenv()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["rh-perl524-perl-4:5.24.0-381.el6","perl-4:5.16.3-294.el7_6","rh-perl524-perl-4:5.24.0-381.el7","perl-4:5.16.3-292.el7_5.1","perl-4:5.16.3-292.el7_4.1","rh-perl526-perl-4:5.26.3-405.el7","perl-4:5.16.3-291.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14637","severity":"moderate","public_date":"2018-11-27T20:23:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1627851","bugzilla_description":"CVE-2018-14637 keycloak: expiration not validated in SAML broker consumer endpoint","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287->CWE-285","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-16884","severity":"important","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:2696","RHSA-2019:1891","RHSA-2019:1873","RHSA-2019:2730","RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:2854","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1660375","bugzilla_description":"CVE-2018-16884 kernel: nfs: use-after-free in svc_process_common()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-693.58.1.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16884.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-20534","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":["RHBA-2020:0062","RHSA-2019:2290","RHSA-2019:3583"],"bugzilla":"1665538","bugzilla_description":"CVE-2018-20534 libsolv: illegal address access in pool_whatprovides in src/pool.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libsolv-0:0.7.4-3.el8","libsolv-0:0.6.34-4.el7","redhat-coreos-43.81.202001142154.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20534.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000877","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1663887","bugzilla_description":"CVE-2018-1000877 libarchive: Double free in RAR decoder resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000877.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1000878","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1663889","bugzilla_description":"CVE-2018-1000878 libarchive: Use after free in RAR decoder resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000878.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-20685","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1665785","bugzilla_description":"CVE-2018-20685 openssh: scp client improper directory name validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20685.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-6109","severity":"low","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666119","bugzilla_description":"CVE-2019-6109 openssh: Missing character encoding in progress display allows for spoofing of scp client output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-6111","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666127","bugzilla_description":"CVE-2019-6111 openssh: Improper validation of object names allows malicious server to overwrite files via scp client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-14658","severity":"moderate","public_date":"2018-11-13T17:38:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625409","bugzilla_description":"CVE-2018-14658 keycloak: Open Redirect in Login and Logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14658.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14655","severity":"moderate","public_date":"2018-11-13T17:37:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625396","bugzilla_description":"CVE-2018-14655 keycloak: XSS-Vulnerability with response_mode=form_post","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14655.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2018-14657","severity":"low","public_date":"2018-11-13T17:37:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625404","bugzilla_description":"CVE-2018-14657 keycloak: brute force protection not working for the entire login workflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14657.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-19044","severity":"moderate","public_date":"2018-11-08T00:00:00Z","advisories":["RHSA-2019:2285"],"bugzilla":"1651863","bugzilla_description":"CVE-2018-19044 keepalived: Improper pathname validation allows for overwrite of arbitrary filenames via symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["keepalived-0:1.3.5-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19044.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-19045","severity":"moderate","public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1651866","bugzilla_description":"CVE-2018-19045 keepalived: Insecure permissions when creating new temporary files allows for leaking of sensitive data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19045.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-19046","severity":"moderate","public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1651869","bugzilla_description":"CVE-2018-19046 keepalived: Insecure use of temporary files allows attackers read sensitive information from pre-existing files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19046.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-19115","severity":"important","public_date":"2018-11-08T00:00:00Z","advisories":["RHSA-2019:0022","RHSA-2019:1792","RHSA-2019:1945"],"bugzilla":"1651871","bugzilla_description":"CVE-2018-19115 keepalived: Heap-based buffer overflow when parsing HTTP status codes allows for denial of service or possibly arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["keepalived-0:1.3.5-1.el7_4.1","keepalived-0:1.3.5-8.el7_6","keepalived-0:1.3.5-7.el7_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-1000845","severity":null,"public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1661252","bugzilla_description":"CVE-2018-1000845 avahi: DNS amplification and reflection to spoofed addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000845.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-19854","severity":"moderate","public_date":"2018-11-03T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1656986","bugzilla_description":"CVE-2018-19854 kernel: Information Disclosure in crypto_report_one in crypto/crypto_user.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19854.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-16472","severity":"moderate","public_date":"2018-11-02T00:00:00Z","advisories":[],"bugzilla":"1649118","bugzilla_description":"CVE-2018-16472 nodejs-cached-path-relative: prototype pollution due to injected properties on Object.prototype","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16472.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-5407","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3932","RHSA-2019:0483","RHSA-2019:2125","RHSA-2019:3929","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1645695","bugzilla_description":"CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7_6.1","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-18751","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":["RHSA-2019:3643","RHSA-2020:2485","RHSA-2020:2846","RHSA-2020:1138","RHBA-2019:3303"],"bugzilla":"1647043","bugzilla_description":"CVE-2018-18751 gettext: double free in default_add_message in read-catalog.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-42.81.20191107.0","gettext-0:0.19.8.1-17.el8","gettext-0:0.19.8.1-3.el7","gettext-0:0.19.8.1-3.el7_6","gettext-0:0.19.8.1-3.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18751.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-15688","severity":"important","public_date":"2018-10-26T00:00:00Z","advisories":["RHSA-2019:0049","RHSA-2018:3665"],"bugzilla":"1639067","bugzilla_description":"CVE-2018-15688 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-190->CWE-122","affected_packages":["NetworkManager-1:1.12.0-8.el7_6","systemd-0:219-62.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15688.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-0735","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1644356","bugzilla_description":"CVE-2018-0735 openssl: timing side channel attack in the ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-3613","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641433","bugzilla_description":"CVE-2018-3613 edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3613.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5731","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641442","bugzilla_description":"CVE-2017-5731 edk2: Privilege escalation via processing of malformed files in TianoCompress.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5731.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5732","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641446","bugzilla_description":"CVE-2017-5732 edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5732.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5733","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641450","bugzilla_description":"CVE-2017-5733 edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5733.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5734","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641458","bugzilla_description":"CVE-2017-5734 edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5735","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641465","bugzilla_description":"CVE-2017-5735 edk2: Privilege escalation via heap-based buffer overflow in Decode() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-0734","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:3700","RHSA-2019:3932","RHSA-2019:2304","RHSA-2019:3933","RHSA-2019:3935","RHBA-2019:3303"],"bugzilla":"1644364","bugzilla_description":"CVE-2018-0734 openssl: timing side channel attack in the DSA signature algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-11784","severity":"moderate","public_date":"2018-10-03T00:00:00Z","advisories":["RHSA-2019:0485","RHSA-2019:0130","RHSA-2019:0131","RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1636512","bugzilla_description":"CVE-2018-11784 tomcat: Open redirect in default servlet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-99","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7_6","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-17204","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0053","RHSA-2019:0081","RHSA-2018:3500"],"bugzilla":"1632522","bugzilla_description":"CVE-2018-17204 openvswitch: Mishandle of group mods in lib/ofp-util.c:parse_group_prop_ntr_selection_method() allows for assertion failure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openvswitch-0:2.9.0-83.el7fdp.1","openvswitch-0:2.9.0-70.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.7"},{"CVE":"CVE-2018-17205","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0053","RHSA-2019:0081","RHSA-2018:3500"],"bugzilla":"1632525","bugzilla_description":"CVE-2018-17205 openvswitch: Error during bundle commit in ofproto/ofproto.c:ofproto_rule_insert__() allows for crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openvswitch-0:2.9.0-83.el7fdp.1","openvswitch-0:2.9.0-70.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17205.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-17206","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0053","RHSA-2019:0081","RHSA-2018:3500"],"bugzilla":"1632528","bugzilla_description":"CVE-2018-17206 openvswitch: Buffer over-read in lib/ofp-actions.c:decode_bundle()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openvswitch-0:2.9.0-83.el7fdp.1","openvswitch-0:2.9.0-70.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17206.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-0503","severity":"low","public_date":"2018-09-24T00:00:00Z","advisories":["RHSA-2019:3238","RHSA-2019:3142","RHSA-2019:3813"],"bugzilla":"1634161","bugzilla_description":"CVE-2018-0503 mediawiki: $wgRateLimits (rate limit / ping limiter) entry for 'user' overrides that for 'newbie'","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["mediawiki123-0:1.23.17-1.el7","mediawiki-0:1.27.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0503.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-0505","severity":"low","public_date":"2018-09-24T00:00:00Z","advisories":["RHSA-2019:3238","RHSA-2019:3142","RHSA-2019:3813"],"bugzilla":"1634166","bugzilla_description":"CVE-2018-0505 mediawiki: BotPassword can bypass CentralAuth's account lock","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["mediawiki123-0:1.23.17-1.el7","mediawiki-0:1.27.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0505.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-0504","severity":"low","public_date":"2018-09-24T00:00:00Z","advisories":["RHSA-2019:3238","RHSA-2019:3813"],"bugzilla":"1634168","bugzilla_description":"CVE-2018-0504 mediawiki: Information exposure when a log event is (partially) hidden","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["mediawiki123-0:1.23.17-1.el7","mediawiki-0:1.27.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0504.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-17336","severity":"moderate","public_date":"2018-09-22T00:00:00Z","advisories":["RHSA-2019:2178"],"bugzilla":"1632828","bugzilla_description":"CVE-2018-17336 udisks: Format string vulnerability in udisks_log in udiskslogging.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-134","affected_packages":["udisks2-0:2.7.3-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17336.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-17942","severity":"low","public_date":"2018-09-19T00:00:00Z","advisories":[],"bugzilla":"1635896","bugzilla_description":"CVE-2018-17942 gnulib: heap-based buffer overflow in convert_to_decimal function in vasnprintf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-6251","severity":"moderate","public_date":"2018-09-11T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1667409","bugzilla_description":"CVE-2019-6251 webkitgtk: processing maliciously crafted web content lead to URI spoofing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-1000805","severity":"critical","public_date":"2018-09-07T00:00:00Z","advisories":["RHBA-2018:3497","RHSA-2018:3470","RHSA-2018:3406","RHSA-2018:3347"],"bugzilla":"1637263","bugzilla_description":"CVE-2018-1000805 python-paramiko: Authentication bypass in auth_handler.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["redhat-virtualization-host-0:4.2-20181026.0.el7_6","python-paramiko-0:1.7.5-5.el6_10","python-paramiko-0:2.1.1-9.el7","rhvm-appliance-0:4.2-20181026.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-15909","severity":"important","public_date":"2018-08-28T00:00:00Z","advisories":["RHSA-2018:3650"],"bugzilla":"1621361","bugzilla_description":"CVE-2018-15909 ghostscript: shading_param incomplete type checking (699660)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["ghostscript-0:9.07-31.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15909.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16511","severity":"important","public_date":"2018-08-24T00:00:00Z","advisories":["RHSA-2018:3650"],"bugzilla":"1621359","bugzilla_description":"CVE-2018-16511 ghostscript: missing type check in type checker (699659)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-704","affected_packages":["ghostscript-0:9.07-31.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16509","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:3760","RHSA-2018:2918"],"bugzilla":"1619748","bugzilla_description":"CVE-2018-16509 ghostscript: /invalidaccess bypass after failed restore (699654)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-29.el7_5.2","ghostscript-0:8.70-24.el6_10.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16513","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":[],"bugzilla":"1619750","bugzilla_description":"CVE-2018-16513 ghostscript: setcolor missing type check (699655)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-15910","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:2918"],"bugzilla":"1619751","bugzilla_description":"CVE-2018-15910 ghostscript: LockDistillerParams type confusion (699656)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-704","affected_packages":["ghostscript-0:9.07-29.el7_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15910.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-15908","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:3650"],"bugzilla":"1619756","bugzilla_description":"CVE-2018-15908 ghostscript: .tempfile file permission issues (699657)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-31.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15908.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-10921","severity":"low","public_date":"2018-08-02T15:45:00Z","advisories":[],"bugzilla":"1610539","bugzilla_description":"CVE-2018-10921 ttembed: failure to check file bounds may lead to input file corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10921.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-10922","severity":"low","public_date":"2018-08-02T15:45:00Z","advisories":[],"bugzilla":"1610887","bugzilla_description":"CVE-2018-10922 ttembed: use of untrusted length field may lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-8034","severity":"low","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2019:0451","RHSA-2019:0130","RHSA-2019:0131","RHSA-2019:0450","RHSA-2019:2205","RHSA-2019:3892","RHSA-2019:1159","RHSA-2019:1162","RHSA-2019:1529","RHSA-2019:1161","RHSA-2019:1160"],"bugzilla":"1607580","bugzilla_description":"CVE-2018-8034 tomcat: Host name verification missing in WebSocket client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","jbossweb-0:7.5.30-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8034.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-8037","severity":"important","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1607582","bugzilla_description":"CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2018-1336","severity":"important","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2945","RHSA-2018:2921","RHSA-2018:3768","RHSA-2018:2701","RHEA-2018:2189","RHSA-2018:2700","RHEA-2018:2188","RHSA-2018:2939","RHSA-2018:2743","RHSA-2018:2930","RHSA-2018:2742","RHSA-2018:2741","RHSA-2018:2740"],"bugzilla":"1607591","bugzilla_description":"CVE-2018-1336 tomcat: A bug in the UTF-8 decoder can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["jbossweb-0:7.5.29-1.Final_redhat_1.1.ep6.el5","tomcat8-0:8.0.36-33.ep7.el7","tomcat8-0:8.0.36-33.ep7.el6","tomcat-0:7.0.76-8.el7_5","tomcat7-0:7.0.70-29.ep7.el6","tomcat7-0:7.0.70-29.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1336.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-8020","severity":"important","public_date":"2018-07-21T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2018:2469"],"bugzilla":"1581569","bugzilla_description":"CVE-2018-8020 tomcat-native: Mishandled OCSP responses can allow clients to authenticate with revoked certificates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tomcat-native-0:1.2.17-17.redhat_17.ep7.el6","tomcat-native-0:1.2.17-17.redhat_17.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-8019","severity":"moderate","public_date":"2018-07-21T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2018:2469"],"bugzilla":"1583998","bugzilla_description":"CVE-2018-8019 tomcat-native: Mishandled OCSP invalid response","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tomcat-native-0:1.2.17-17.redhat_17.ep7.el6","tomcat-native-0:1.2.17-17.redhat_17.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-10869","severity":"important","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2018:2373"],"bugzilla":"1593780","bugzilla_description":"CVE-2018-10869 redhat-certification: /download allows to download any file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["redhat-certification-0:5.16-20180809.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-10870","severity":"critical","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2018:2373"],"bugzilla":"1593803","bugzilla_description":"CVE-2018-10870 redhat-certification: rhcertStore.py:__saveResultsFile allows to write any file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["redhat-certification-0:5.16-20180809.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10870.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-6470","severity":"moderate","public_date":"2018-07-14T00:00:00Z","advisories":["RHSA-2019:3525","RHSA-2019:2060"],"bugzilla":"1708641","bugzilla_description":"CVE-2019-6470 dhcp: double-deletion of the released addresses in the dhcpv6 code leading to crash and possible DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["dhcp-12:4.3.6-34.el8","dhcp-12:4.2.5-77.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-10894","severity":"moderate","public_date":"2018-07-09T00:00:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2019:0877","RHSA-2018:3595"],"bugzilla":"1599434","bugzilla_description":"CVE-2018-10894 keycloak: auth permitted with expired certs in SAML client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10894.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-1000601","severity":"moderate","public_date":"2018-06-25T00:00:00Z","advisories":[],"bugzilla":"1596122","bugzilla_description":"CVE-2018-1000601 jenkins-plugin-ssh-credentials: Arbitrary file read vulnerability in SSH Credentials Plugin with Credentials Binding Plugin (SECURITY-440)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000601.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-10863","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1594122","bugzilla_description":"CVE-2018-10863 redhat-certification: directory listing in /rhcert-transfer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-10864","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":["RHSA-2018:2373"],"bugzilla":"1593627","bugzilla_description":"CVE-2018-10864 redhat-certification: resource consumption in DocumentBase:loadFiltered","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-certification-0:5.16-20180809.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10864.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10865","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593631","bugzilla_description":"CVE-2018-10865 redhat-certification: \"restart\" a node without authorization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2018-10866","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593632","bugzilla_description":"CVE-2018-10866 redhat-certification: remove a \"system\" file without authorization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10866.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-10867","severity":"moderate","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593764","bugzilla_description":"CVE-2018-10867 redhat-certification: /uploads/results page allows to remove files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10867.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-3897","severity":"moderate","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593768","bugzilla_description":"CVE-2019-3897 redhat-certification: /rhcert allows to download any file under /var/www/rhcert directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-10868","severity":"moderate","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593776","bugzilla_description":"CVE-2018-10868 redhat-certification: billion laugh attack when getting the status of a host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10868.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10841","severity":"important","public_date":"2018-06-20T10:00:00Z","advisories":["RHSA-2018:1954","RHSA-2018:1955"],"bugzilla":"1582043","bugzilla_description":"CVE-2018-10841 glusterfs: access trusted peer group via remote-host command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["glusterfs-0:3.8.4-54.11.el6","glusterfs-0:3.8.4-54.10.el7","glusterfs-0:3.8.4-54.11.el6rhs","glusterfs-0:3.8.4-54.10.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10841.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2018-14404","severity":"moderate","public_date":"2018-06-18T00:00:00Z","advisories":["RHBA-2020:3180","RHBA-2020:1539","RHSA-2020:1827","RHSA-2019:1543","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1595985","bugzilla_description":"CVE-2018-14404 libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4","redhat-coreos-43.82.202007300301.0","libxml2-0:2.9.7-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-11219","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1860","RHSA-2019:0052","RHSA-2019:0094"],"bugzilla":"1590062","bugzilla_description":"CVE-2018-11219 redis: Integer overflow in lua_struct.c:b_unpack()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["redis-0:3.2.8-3.el7ost","redis-0:3.0.6-4.el7ost","rh-redis32-redis-0:3.2.13-1.el7","rh-redis32-redis-0:3.2.13-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11219.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-11218","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1860","RHSA-2019:0052","RHSA-2019:0094"],"bugzilla":"1590067","bugzilla_description":"CVE-2018-11218 redis: Heap corruption in lua_cmsgpack.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redis-0:3.2.8-3.el7ost","redis-0:3.0.6-4.el7ost","rh-redis32-redis-0:3.2.13-1.el7","rh-redis32-redis-0:3.2.13-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11218.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-12326","severity":"low","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1860","RHSA-2019:0052","RHSA-2019:0094"],"bugzilla":"1594291","bugzilla_description":"CVE-2018-12326 redis: Code execution in redis-cli via crafted command line arguments","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["redis-0:3.2.8-3.el7ost","redis-0:3.0.6-4.el7ost","rh-redis32-redis-0:3.2.13-1.el7","rh-redis32-redis-0:3.2.13-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12326.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12453","severity":"moderate","public_date":"2018-06-10T00:00:00Z","advisories":[],"bugzilla":"1592892","bugzilla_description":"CVE-2018-12453 redis: type confusion in the xgroupCommand function in t_stream.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12453.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-16118","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588785","bugzilla_description":"CVE-2017-16118 nodejs-forwarded:  regular expression denial of service when parsing crafted user input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-0161","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2019:2125","RHSA-2019:2437"],"bugzilla":"1694065","bugzilla_description":"CVE-2019-0161 edk2: stack overflow in XHCI causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-400","affected_packages":["redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-1087","severity":"important","public_date":"2018-05-08T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1347","RHSA-2018:1710","RHSA-2018:1348","RHSA-2018:1524","RHSA-2018:1711","RHSA-2018:1345","RHSA-2018:1355"],"bugzilla":"1566837","bugzilla_description":"CVE-2018-1087 Kernel: KVM: error in exception handling leads to wrong debug stack value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.25.4.el7","redhat-virtualization-host-0:3.6-20180521.0","kernel-0:3.10.0-862.2.3.el7","rhev-hypervisor7-0:7.3-20180521.1.el7ev","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","rhev-hypervisor7-0:7.3-20180521.1.el6ev","kernel-0:3.10.0-327.66.3.el7","kernel-0:3.10.0-514.48.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1087.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-8897","severity":"moderate","public_date":"2018-05-08T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1319","RHSA-2018:1349","RHSA-2018:1347","RHSA-2018:1710","RHSA-2018:1348","RHSA-2018:1524","RHSA-2018:1711","RHSA-2018:1345","RHSA-2018:1346","RHSA-2018:1354","RHSA-2018:1355","RHSA-2018:1352","RHSA-2018:1353","RHSA-2018:1350","RHSA-2018:1351"],"bugzilla":"1567074","bugzilla_description":"CVE-2018-8897 Kernel: error in exception handling leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.25.4.el7","redhat-virtualization-host-0:3.6-20180521.0","kernel-0:2.6.32-696.28.1.el6","kernel-0:2.6.18-431.el5","kernel-0:2.6.32-504.68.2.el6","kernel-rt-1:3.10.0-693.25.4.rt56.613.el6rt","kernel-0:3.10.0-514.48.3.el7","kernel-0:2.6.32-358.88.2.el6","kernel-0:2.6.32-573.55.2.el6","kernel-0:2.6.32-431.89.2.el6","kernel-0:3.10.0-862.2.3.el7","rhev-hypervisor7-0:7.3-20180521.1.el7ev","kernel-0:2.6.18-348.39.2.el5","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","rhev-hypervisor7-0:7.3-20180521.1.el6ev","kernel-0:3.10.0-327.66.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8897.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1067","severity":"moderate","public_date":"2018-04-25T17:51:00Z","advisories":["RHSA-2020:2562","RHSA-2018:1248","RHSA-2018:1249","RHSA-2019:0877","RHSA-2018:2643","RHSA-2018:1247","RHSA-2018:1251"],"bugzilla":"1550671","bugzilla_description":"CVE-2018-1067 undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-113","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:4.2-20180828.0.el7","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-9251","severity":"low","public_date":"2018-04-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1827"],"bugzilla":"1565318","bugzilla_description":"CVE-2018-9251 libxml2: infinite loop in xz_decomp function in xzlib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["redhat-coreos-43.82.202007300301.0","libxml2-0:2.9.7-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2017-12196","severity":"moderate","public_date":"2018-03-12T15:56:00Z","advisories":["RHSA-2018:0480","RHSA-2020:2561","RHSA-2018:2405","RHSA-2018:1525","RHSA-2020:2562","RHSA-2018:0478","RHSA-2018:3768","RHSA-2018:0479","RHSA-2018:0481"],"bugzilla":"1503055","bugzilla_description":"CVE-2017-12196 undertow: Client can use bogus uri in Digest authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rhvm-appliance-0:4.2-20180504.0","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-1000115","severity":"moderate","public_date":"2018-03-02T00:00:00Z","advisories":["RHSA-2018:1627","RHSA-2018:2857","RHSA-2018:2331","RHBA-2018:2140","RHSA-2018:1593"],"bugzilla":"1551182","bugzilla_description":"CVE-2018-1000115 memcached: UDP server support allows spoofed traffic amplification DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-7489","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":["RHSA-2018:2938","RHSA-2019:3149","RHSA-2018:1448","RHSA-2018:1449","RHSA-2020:2562","RHSA-2018:1447","RHSA-2018:2939","RHSA-2018:2090","RHSA-2019:2858","RHSA-2018:1786","RHSA-2018:1451","RHSA-2018:2089","RHSA-2018:2088","RHSA-2018:1450"],"bugzilla":"1549276","bugzilla_description":"CVE-2018-7489 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-1000114","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":[],"bugzilla":"1549542","bugzilla_description":"CVE-2018-1000114 jenkins-plugin-promoted-builds: Promoted Builds Plugin allowed unauthorized users to run some promotion processes (SECURITY-746)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000114.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-8088","severity":"important","public_date":"2018-02-22T00:00:00Z","advisories":["RHSA-2018:2419","RHSA-2018:1448","RHSA-2018:1525","RHSA-2018:1449","RHSA-2018:1248","RHSA-2018:1447","RHSA-2018:1249","RHSA-2018:0630","RHSA-2018:2930","RHSA-2018:1323","RHSA-2018:1247","RHSA-2018:0592","RHSA-2018:0627","RHSA-2018:0628","RHSA-2020:2561","RHSA-2018:2669","RHSA-2019:2413","RHSA-2019:3140","RHSA-2018:0629","RHSA-2018:1575","RHSA-2018:1451","RHSA-2018:0582","RHSA-2018:2420","RHSA-2018:1251","RHSA-2018:2143","RHSA-2018:1450"],"bugzilla":"1548909","bugzilla_description":"CVE-2018-8088 slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el7","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el6","rhvm-appliance-0:4.2-20180504.0","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el5","rh-maven35-slf4j-0:1.7.25-1.3.el7","slf4j-0:1.7.4-4.el7_4","eap7-slf4j-0:1.7.22-3.redhat_2.1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6","eap7-slf4j-0:1.7.22-3.redhat_2.1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8088.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-3728","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:1264","RHSA-2018:1263"],"bugzilla":"1545893","bugzilla_description":"CVE-2018-3728 hoek: Prototype pollution in utilities function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rhmap46/redis:2.8.21-40"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3728.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2017-15089","severity":"important","public_date":"2018-02-12T15:00:00Z","advisories":["RHSA-2018:0480","RHSA-2020:2561","RHSA-2018:0478","RHSA-2018:0479","RHSA-2018:0501","RHSA-2019:1326","RHSA-2018:0294","RHSA-2018:0481"],"bugzilla":"1503610","bugzilla_description":"CVE-2017-15089 infinispan: Unsafe deserialization of malicious object injected into data cache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2017-12174","severity":"important","public_date":"2018-02-05T00:00:00Z","advisories":["RHSA-2018:0270","RHSA-2018:0271","RHSA-2018:0480","RHSA-2020:2561","RHSA-2018:0478","RHSA-2018:0269","RHSA-2018:0479","RHSA-2018:0268","RHSA-2018:0275","RHSA-2018:0481"],"bugzilla":"1498378","bugzilla_description":"CVE-2017-12174 artemis/hornetq: memory exhaustion via UDP and JGroups discovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12174.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1041","severity":"moderate","public_date":"2018-02-05T00:00:00Z","advisories":["RHSA-2018:0270","RHSA-2018:0271","RHSA-2018:0269","RHSA-2018:0268","RHSA-2018:0275"],"bugzilla":"1530457","bugzilla_description":"CVE-2018-1041 jboss-remoting: High CPU Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1041.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1000057","severity":"low","public_date":"2018-02-05T00:00:00Z","advisories":[],"bugzilla":"1542718","bugzilla_description":"CVE-2018-1000057 jenkins-plugin-credentials-binding: improper masking of the secret provided to the build in rare circumstances","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000057.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-15698","severity":"moderate","public_date":"2018-01-31T00:00:00Z","advisories":["RHSA-2018:0465","RHSA-2018:0466"],"bugzilla":"1540824","bugzilla_description":"CVE-2017-15698 tomcat-native: Mishandling of client certificates can allow for OCSP check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-299","affected_packages":["tomcat-native-0:1.2.8-11.redhat_11.ep7.el6","tomcat-native-0:1.2.8-11.redhat_11.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-1304","severity":"moderate","public_date":"2018-01-31T00:00:00Z","advisories":["RHSA-2019:2205","RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1447","RHSA-2018:0465","RHSA-2018:0466","RHSA-2018:1451","RHSA-2018:1320","RHSA-2018:1450","RHSA-2018:2939"],"bugzilla":"1548289","bugzilla_description":"CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["tomcat-0:7.0.76-9.el7","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","jbossweb-0:7.5.28-1.Final_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000018","severity":"moderate","public_date":"2018-01-24T00:00:00Z","advisories":[],"bugzilla":"1537904","bugzilla_description":"CVE-2018-1000018 ovirt-hosted-engine-setup: root password exposed in log file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000018.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-5968","severity":"moderate","public_date":"2018-01-18T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2019:3149","RHSA-2018:1525","RHSA-2018:0478","RHSA-2018:0479","RHSA-2019:2858","RHSA-2018:0481"],"bugzilla":"1538332","bugzilla_description":"CVE-2018-5968 jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rhvm-appliance-0:4.2-20180504.0","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5968.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-1048","severity":"moderate","public_date":"2018-01-15T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2018:0478","RHSA-2018:0479","RHSA-2018:0481"],"bugzilla":"1534343","bugzilla_description":"CVE-2018-1048 undertow: ALLOW_ENCODED_SLASH option not taken into account in the AjpRequestParser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"8.6"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2017-12189","severity":"important","public_date":"2018-01-03T00:00:00Z","advisories":["RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003"],"bugzilla":"1499631","bugzilla_description":"CVE-2017-12189 jboss: unsafe chown of server.log in jboss init script allows privilege escalation (Incomplete fix for CVE-2016-8656)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12189.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1047","severity":"moderate","public_date":"2017-12-17T00:00:00Z","advisories":["RHSA-2018:2938","RHSA-2018:1248","RHSA-2018:1249","RHSA-2018:1247","RHSA-2018:1251"],"bugzilla":"1528361","bugzilla_description":"CVE-2018-1047 undertow: Path traversal in ServletResourceManager class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-22","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1047.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"8.6"},{"CVE":"CVE-2017-7559","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2018:1322","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1481665","bugzilla_description":"CVE-2017-7559 undertow: HTTP Request smuggling vulnerability (incomplete fix of CVE-2017-2666)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7559.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-12165","severity":"low","public_date":"2017-12-13T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2018:1322","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1490301","bugzilla_description":"CVE-2017-12165 undertow: improper whitespace parsing leading to potential HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12165.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2017-17485","severity":"important","public_date":"2017-12-12T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2018:1448","RHSA-2019:3892","RHSA-2019:1797","RHSA-2018:1449","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2018:0116","RHSA-2018:0480","RHSA-2018:2930","RHSA-2019:2858","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1528565","bugzilla_description":"CVE-2017-17485 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","rh-eclipse46-jackson-databind-0:2.6.3-2.6.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12195","severity":"moderate","public_date":"2017-11-28T00:00:00Z","advisories":["RHSA-2017:3188","RHSA-2017:3389"],"bugzilla":"1501986","bugzilla_description":"CVE-2017-12195 OpenShift Enterprise 3: authentication bypass for elasticsearch with external routes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["openshift-elasticsearch-plugin-0:2.4.4.17__redhat_1-3.el7","openshift-elasticsearch-plugin-0:2.4.1.11__redhat_1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-15095","severity":"important","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:3149","RHSA-2017:3190","RHSA-2018:1448","RHSA-2019:3892","RHSA-2018:1449","RHSA-2018:0577","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2017:3189","RHSA-2018:0480","RHSA-2019:2858","RHSA-2018:0576","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1506612","bugzilla_description":"CVE-2017-15095 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","rh-eclipse47-jackson-databind-0:2.7.6-3.3.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","rh-eclipse46-jackson-databind-0:2.6.3-2.4.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12159","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1484111","bugzilla_description":"CVE-2017-12159 keycloak: CSRF token fixation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-12160","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1484154","bugzilla_description":"CVE-2017-12160 keycloak: resource privilege extension via access token in oauth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-12158","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1489161","bugzilla_description":"CVE-2017-12158 keycloak: reflected XSS using HOST header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-12197","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1503103","bugzilla_description":"CVE-2017-12197 libpam4j: Account check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-12629","severity":"critical","public_date":"2017-10-12T00:00:00Z","advisories":["RHSA-2020:2561","RHSA-2018:0005","RHSA-2018:0002","RHSA-2017:3452","RHSA-2017:3244","RHSA-2017:3123","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:3451","RHSA-2017:3124"],"bugzilla":"1501529","bugzilla_description":"CVE-2017-12629 Solr: Code execution via entity expansion","cvss_score":10.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-138","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-lucene-solr-0:5.3.1-4.redhat_2.1.ep7.el6","eap7-lucene-solr-0:5.3.1-4.redhat_2.1.ep7.el7","rh-java-common-lucene5-0:5.4.1-2.4.el7","rh-java-common-lucene5-0:5.4.1-2.4.el6","rh-java-common-lucene-0:4.8.0-6.9.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6","rh-java-common-lucene-0:4.8.0-6.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-2582","severity":"moderate","public_date":"2017-09-26T00:00:00Z","advisories":["RHSA-2019:0136","RHSA-2019:0137","RHSA-2017:3220","RHSA-2017:3218","RHSA-2017:2811","RHSA-2017:3219","RHSA-2017:3216","RHSA-2017:2810","RHSA-2017:3217","RHSA-2018:2743","RHSA-2017:2808","RHSA-2018:2742","RHSA-2017:2809","RHSA-2018:2741","RHSA-2019:0139","RHSA-2018:2740"],"bugzilla":"1410481","bugzilla_description":"CVE-2017-2582 picketlink, keycloak: SAML request parser replaces special strings with system properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["jboss-ec2-eap-0:7.5.18-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-7536","severity":"moderate","public_date":"2017-09-26T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2018:3817","RHSA-2017:3141","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:2811","RHSA-2017:3458","RHSA-2017:2810","RHSA-2018:2743","RHSA-2017:2808","RHSA-2018:2742","RHSA-2017:2809","RHSA-2018:2741","RHSA-2018:2740"],"bugzilla":"1465573","bugzilla_description":"CVE-2017-7536 hibernate-validator: Privilege escalation when running under the security manager","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","rhvm-appliance-0:20171102.0-1","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2017-12617","severity":"important","public_date":"2017-09-21T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2018:0270","RHSA-2018:0271","RHSA-2017:3080","RHSA-2018:0269","RHSA-2018:0465","RHSA-2018:0268","RHSA-2018:0466","RHSA-2018:0275","RHSA-2017:3113","RHSA-2018:2939","RHSA-2017:3114"],"bugzilla":"1494283","bugzilla_description":"CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat6-0:6.0.41-19_patch_04.ep6.el7","tomcat7-0:7.0.54-28_patch_05.ep6.el7","tomcat6-0:6.0.41-19_patch_04.ep6.el6","tomcat7-0:7.0.54-28_patch_05.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","tomcat6-0:6.0.24-111.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12617.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-14503","severity":"low","public_date":"2017-09-16T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1494449","bugzilla_description":"CVE-2017-14503 libarchive: Out-of-bounds read in lha_read_data_none","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14503.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12167","severity":"moderate","public_date":"2017-09-14T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1491612","bugzilla_description":"CVE-2017-12167 EAP-7: Wrong privileges on multiple property files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-14108","severity":"low","public_date":"2017-09-02T00:00:00Z","advisories":[],"bugzilla":"1488335","bugzilla_description":"CVE-2017-14108 gedit: CPU consumption via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14108.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15047","severity":"low","public_date":"2017-08-31T00:00:00Z","advisories":[],"bugzilla":"1499152","bugzilla_description":"CVE-2017-15047 redis: Insufficient input validation in the clusterLoadConfig function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15047.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7561","severity":"moderate","public_date":"2017-08-22T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2018:0005","RHSA-2018:0478","RHSA-2018:0479","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2018:0481"],"bugzilla":"1483823","bugzilla_description":"CVE-2017-7561 resteasy: Vary header not added by CORS filter leading to cache poisoning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7561.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-9951","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1471970","bugzilla_description":"CVE-2017-9951 memcached: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9951.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-7525","severity":"important","public_date":"2017-07-14T00:00:00Z","advisories":["RHSA-2018:1449","RHSA-2017:3141","RHSA-2017:2477","RHSA-2017:1840","RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2637","RHSA-2017:2638","RHSA-2018:0294","RHSA-2019:3149","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:2547","RHSA-2017:3458","RHSA-2017:2546","RHSA-2017:1835","RHSA-2017:1834","RHSA-2017:1837","RHSA-2017:1836","RHSA-2019:0910","RHSA-2019:2858","RHSA-2017:1839","RHSA-2018:0342","RHSA-2018:1450"],"bugzilla":"1462702","bugzilla_description":"CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["devtoolset-4-jackson-databind-0:2.5.0-2.4.el6","openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-eclipse46-jackson-databind-0:2.6.3-2.3.el7","devtoolset-4-jackson-databind-0:2.5.0-2.4.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:20171102.0-1","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7525.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-2595","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:1550","RHSA-2017:3456","RHSA-2017:1552","RHSA-2017:1551","RHSA-2017:1411","RHSA-2017:3454","RHSA-2017:1410","RHSA-2017:3455","RHSA-2017:1412","RHSA-2017:3458","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1409"],"bugzilla":"1413028","bugzilla_description":"CVE-2017-2595 wildfly: Arbitrary file read via path traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2595.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2017-2666","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:1412","RHSA-2017:3458","RHSA-2017:1409","RHSA-2017:3456","RHSA-2017:1411","RHSA-2017:3454","RHSA-2017:1410","RHSA-2017:3455"],"bugzilla":"1436163","bugzilla_description":"CVE-2017-2666 undertow: HTTP Request smuggling vulnerability due to permitting invalid characters in HTTP requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2666.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-2670","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:1412","RHSA-2017:3458","RHSA-2018:0501","RHSA-2017:3244","RHSA-2017:1409","RHSA-2017:3456","RHSA-2017:1411","RHSA-2017:3454","RHSA-2017:1410","RHSA-2017:3455"],"bugzilla":"1438885","bugzilla_description":"CVE-2017-2670 undertow: IO thread DoS via unclean Websocket closing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2670.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5664","severity":"important","public_date":"2017-06-06T00:00:00Z","advisories":["RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:3080","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2637","RHSA-2017:2638","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:1809"],"bugzilla":"1459158","bugzilla_description":"CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["tomcat-0:7.0.69-12.el7_3","tomcat8-0:8.0.36-24.ep7.el7","tomcat7-0:7.0.70-22.ep7.el6","tomcat8-0:8.0.36-24.ep7.el6","jbossweb-0:7.5.24-1.Final_redhat_1.1.ep6.el7","tomcat7-0:7.0.70-22.ep7.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el6","tomcat6-0:6.0.24-111.el6_9","tomcat6-0:6.0.41-17_patch_04.ep6.el7","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","tomcat6-0:6.0.41-17_patch_04.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000127","severity":"moderate","public_date":"2017-04-27T00:00:00Z","advisories":["RHSA-2018:2290"],"bugzilla":"1555064","bugzilla_description":"CVE-2018-1000127 memcached: Integer Overflow in items.c:item_free()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["memcached-0:1.4.39-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000127.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-16881","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHBA-2019:2501","RHSA-2019:2110","RHSA-2019:2439","RHSA-2019:2437"],"bugzilla":"1658366","bugzilla_description":"CVE-2018-16881 rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190","affected_packages":["rsyslog-0:8.24.0-41.el7_7","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","rsyslog-0:8.24.0-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16881.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5645","severity":"important","public_date":"2017-04-02T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2635","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1417","RHSA-2017:1801","RHSA-2017:2637","RHSA-2017:2638","RHSA-2017:2808","RHSA-2017:2809"],"bugzilla":"1443635","bugzilla_description":"CVE-2017-5645 log4j: Socket receiver deserialization vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-java-common-log4j-0:1.2.17-15.15.el6","log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7","rh-java-common-log4j-0:1.2.17-15.15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-0367","severity":"low","public_date":"2017-03-26T00:00:00Z","advisories":[],"bugzilla":"1569791","bugzilla_description":"CVE-2017-0367 mediawiki: unsafe use of temporary directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9589","severity":"moderate","public_date":"2017-03-22T00:00:00Z","advisories":["RHSA-2017:0830","RHSA-2017:0873","RHSA-2017:0832","RHSA-2017:3458","RHSA-2017:0876","RHSA-2017:0831","RHSA-2017:0834","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:0872","RHSA-2017:3455"],"bugzilla":"1404782","bugzilla_description":"CVE-2016-9589 wildfly: ParseState headerValuesCache can be exploited to fill heap with garbage","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9589.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-9970","severity":"moderate","public_date":"2017-02-20T00:00:00Z","advisories":["RHSA-2017:2547","RHSA-2017:2811","RHSA-2017:2546","RHSA-2017:2810","RHSA-2017:2904","RHSA-2017:3141","RHSA-2017:2808","RHSA-2017:2809","RHSA-2017:2905","RHSA-2017:2906","RHSA-2018:0294"],"bugzilla":"1455566","bugzilla_description":"CVE-2014-9970 jasypt: Vulnerable to timing attack against the password hash comparison","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6","rhvm-appliance-0:20171102.0-1","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9970.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2017-3163","severity":"moderate","public_date":"2017-02-15T00:00:00Z","advisories":["RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1447","RHSA-2018:1451","RHSA-2018:1450"],"bugzilla":"1454783","bugzilla_description":"CVE-2017-3163 solr: Directory traversal via Index Replication HTTP API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3163.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-9578","severity":"moderate","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:0549","RHSA-2017:0254","RHSA-2017:0253","RHSA-2017:0552"],"bugzilla":"1399566","bugzilla_description":"CVE-2016-9578 spice: Remote DoS via crafted message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-770","affected_packages":["spice-server-0:0.12.4-13.el6_8.2","spice-0:0.12.4-20.el7_3","rhevm-appliance-0:20170307.0-1","redhat-virtualization-host-0:4.0-20170307.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9578.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9577","severity":"moderate","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:0549","RHSA-2017:0254","RHSA-2017:0253","RHSA-2017:0552"],"bugzilla":"1401603","bugzilla_description":"CVE-2016-9577 spice: Buffer overflow in main_channel_alloc_msg_rcv_buf when reading large messages","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-20->CWE-122","affected_packages":["spice-server-0:0.12.4-13.el6_8.2","spice-0:0.12.4-20.el7_3","rhevm-appliance-0:20170307.0-1","redhat-virtualization-host-0:4.0-20170307.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-0368","severity":"low","public_date":"2017-01-24T00:00:00Z","advisories":[],"bugzilla":"1569796","bugzilla_description":"CVE-2017-0368 mediawiki: Make rawHTML mode not apply to system messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0368.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-8627","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:0171","RHSA-2017:0170","RHSA-2017:0250","RHSA-2017:0173","RHSA-2017:0172","RHSA-2017:3456","RHSA-2017:0245","RHSA-2017:3454","RHSA-2017:0244","RHSA-2017:3455","RHSA-2017:0247","RHSA-2017:0246","RHSA-2017:3458"],"bugzilla":"1388240","bugzilla_description":"CVE-2016-8627 admin-cli: Potential EAP resource starvation DOS attack via GET requests for server log files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-5357","severity":"low","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1413901","bugzilla_description":"CVE-2017-5357 ed: Invalid free in regex.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5357.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9606","severity":"moderate","public_date":"2016-12-15T00:00:00Z","advisories":["RHSA-2018:2913","RHSA-2017:1260","RHSA-2017:1253","RHSA-2018:2909","RHSA-2017:1255","RHSA-2017:1254","RHSA-2017:1675","RHSA-2017:1411","RHSA-2017:1256","RHSA-2017:1410","RHSA-2017:1676","RHSA-2017:1412","RHSA-2017:1409"],"bugzilla":"1400644","bugzilla_description":"CVE-2016-9606 Resteasy: Yaml unmarshalling vulnerable to RCE","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["resteasy-0:2.3.19-1.Final_redhat_1.1.ep6.el5","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","jboss-ec2-eap-0:7.5.15-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-0366","severity":"low","public_date":"2016-11-27T00:00:00Z","advisories":[],"bugzilla":"1569788","bugzilla_description":"CVE-2017-0366 mediawiki: SVG filter evasion using default attribute values in DTD declaration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0366.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-6816","severity":"moderate","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0247","RHSA-2017:0456","RHSA-2017:0246","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:0935","RHSA-2017:0527","RHSA-2017:0250","RHSA-2017:0245","RHSA-2017:0244"],"bugzilla":"1397484","bugzilla_description":"CVE-2016-6816 tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-444","affected_packages":["tomcat-0:7.0.69-11.el7_3","tomcat6-0:6.0.24-105.el6_8","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","jbossweb-0:7.5.20-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-7061","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":["RHSA-2017:0171","RHSA-2017:0170","RHSA-2017:0250","RHSA-2017:0173","RHSA-2017:0172","RHSA-2017:3456","RHSA-2017:0245","RHSA-2017:3454","RHSA-2017:0244","RHSA-2017:3455","RHSA-2017:0247","RHSA-2017:0246","RHSA-2017:3458"],"bugzilla":"1380852","bugzilla_description":"CVE-2016-7061 EAP: Sensitive data can be exposed at the server level in domain mode","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2017-0362","severity":"low","public_date":"2016-11-04T00:00:00Z","advisories":[],"bugzilla":"1569737","bugzilla_description":"CVE-2017-0362 mediawiki: \"Mark all pages visited\" on the watchlist does not require a CSRF token","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-2121","severity":"low","public_date":"2016-11-01T00:00:00Z","advisories":["RHSA-2017:3226"],"bugzilla":"1390588","bugzilla_description":"CVE-2016-2121 redis: weak permissions on sensitive files","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["redis-0:3.0.6-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2121.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-8704","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390510","bugzilla_description":"CVE-2016-8704 memcached: Server append/prepend remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-8705","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390511","bugzilla_description":"CVE-2016-8705 memcached: Server update remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-8706","severity":"moderate","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2016:2819"],"bugzilla":"1390512","bugzilla_description":"CVE-2016-8706 memcached: SASL authentication remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["memcached-0:1.4.15-10.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-6796","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1550","RHSA-2017:1552","RHSA-2017:2247","RHSA-2017:1551"],"bugzilla":"1390515","bugzilla_description":"CVE-2016-6796 tomcat: security manager bypass via JSP Servlet config parameters","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","jbossweb-0:7.5.23-1.Final_redhat_1.1.ep6.el7","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-5018","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1550","RHSA-2017:1552","RHSA-2017:2247","RHSA-2017:1551"],"bugzilla":"1390525","bugzilla_description":"CVE-2016-5018 tomcat: security manager bypass via IntrospectHelper utility function","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","jbossweb-0:7.5.23-1.Final_redhat_1.1.ep6.el7","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5018.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-5405","severity":"low","public_date":"2016-10-26T00:00:00Z","advisories":["RHSA-2016:2594","RHSA-2016:2765"],"bugzilla":"1358865","bugzilla_description":"CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["389-ds-base-0:1.3.5.10-11.el7","389-ds-base-0:1.2.11.15-84.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2016-8657","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2017:0827","RHSA-2017:0826","RHSA-2017:0829","RHSA-2017:0828","RHSA-2018:1609"],"bugzilla":"1400343","bugzilla_description":"CVE-2016-8657 jboss: jbossas writable config files allow privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-732","affected_packages":["jbossas-0:5.2.0-23.ep5.el5","jbossas-0:5.2.0-23.ep5.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-8339","severity":"moderate","public_date":"2016-09-30T00:00:00Z","advisories":[],"bugzilla":"1381244","bugzilla_description":"CVE-2016-8339 redis: OOB write vulnerability in handling of client-output-buffer-limit option during the CONFIG SET command","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8339.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2016-4978","severity":"moderate","public_date":"2016-09-23T00:00:00Z","advisories":["RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1447","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:3458","RHSA-2017:1835","RHSA-2017:1834","RHSA-2017:1837","RHSA-2017:1836","RHSA-2018:1451","RHSA-2018:1450"],"bugzilla":"1379207","bugzilla_description":"CVE-2016-4978 Apache ActiveMQ Artemis: Deserialization of untrusted input vulnerability","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el7","hornetq-0:2.3.25-26.SP24_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.6"},{"CVE":"CVE-2016-7046","severity":"important","public_date":"2016-09-15T00:00:00Z","advisories":["RHSA-2016:2640","RHSA-2016:2642","RHSA-2017:3458","RHSA-2016:2641","RHSA-2017:3456","RHSA-2016:2657","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1376646","bugzilla_description":"CVE-2016-7046 undertow: Long URL proxy request lead to java.nio.BufferOverflowException and DoS","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-119","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.3-3.GA_redhat_2.ep7.el6","eap7-jboss-ec2-eap-0:7.0.3-3.GA_redhat_2.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7046.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-8656","severity":"important","public_date":"2016-09-15T00:00:00Z","advisories":["RHSA-2017:0246","RHSA-2017:0832","RHSA-2017:3458","RHSA-2017:0831","RHSA-2017:0834","RHSA-2017:0250","RHSA-2017:0245","RHSA-2017:3454","RHSA-2018:1609","RHSA-2017:0244","RHSA-2017:3455"],"bugzilla":"1400344","bugzilla_description":"CVE-2016-8656 jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":["jbossas-0:5.2.0-23.ep5.el5","eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8656.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-4993","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2016:1838","RHSA-2016:1839","RHSA-2017:3456","RHSA-2016:1840","RHSA-2016:1841","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1344321","bugzilla_description":"CVE-2016-4993 eap: HTTP header injection / response splitting","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-113","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-0365","severity":"moderate","public_date":"2016-09-06T00:00:00Z","advisories":[],"bugzilla":"1569782","bugzilla_description":"CVE-2017-0365 mediawiki: XSS in SearchHighlighter::highlightText()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2016-6346","severity":"moderate","public_date":"2016-09-01T00:00:00Z","advisories":["RHSA-2019:1222","RHSA-2018:0005","RHSA-2017:1675","RHSA-2017:1676","RHSA-2017:0517","RHSA-2017:0827","RHSA-2018:0002","RHSA-2017:0826","RHSA-2017:0829","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:0828","RHSA-2018:2143"],"bugzilla":"1372120","bugzilla_description":"CVE-2016-6346 RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-3110","severity":"moderate","public_date":"2016-08-22T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:1650","RHSA-2016:2055","RHSA-2016:2054","RHSA-2016:1648","RHSA-2016:1649"],"bugzilla":"1326320","bugzilla_description":"CVE-2016-3110 mod_cluster: remotely Segfault Apache http server","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["mod_cluster-0:1.2.13-1.Final_redhat_1.1.ep6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3110.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2016-10517","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":[],"bugzilla":"1515245","bugzilla_description":"CVE-2016-10517 redis: cross-protocol attack using malicious HTTP request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10517.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2013-7458","severity":"low","public_date":"2016-07-28T00:00:00Z","advisories":[],"bugzilla":"1363670","bugzilla_description":"CVE-2013-7458 redis: world-readable ~/.rediscli_history","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7458.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2016-5406","severity":"moderate","public_date":"2016-07-26T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2016:1838","RHSA-2016:1839","RHSA-2017:3456","RHSA-2016:1840","RHSA-2016:1841","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1359014","bugzilla_description":"CVE-2016-5406 EAP7 Privilege escalation when managing domain including earlier version slaves","cvss_score":7.0,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:C/A:C","CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5406.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-1000111","severity":"important","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1978","RHSA-2018:0273"],"bugzilla":"1357345","bugzilla_description":"CVE-2016-1000111 Python Twisted: sets environmental variable based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["python-twisted-web-0:8.2.0-5.el6_8","python-twisted-web-0:12.1.0-5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-1000027","severity":"moderate","public_date":"2016-07-08T00:00:00Z","advisories":[],"bugzilla":"1357929","bugzilla_description":"CVE-2016-1000027 spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000027.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-5007","severity":"moderate","public_date":"2016-07-07T00:00:00Z","advisories":[],"bugzilla":"1353902","bugzilla_description":"CVE-2016-5007 spring: Path matching inconsistency","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-41","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5007.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-6311","severity":"moderate","public_date":"2016-07-03T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1362735","bugzilla_description":"CVE-2016-6311 EAP7: Internal IP address disclosed on redirect when request header Host field is not set","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-2141","severity":"critical","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:1330","RHSA-2016:2035","RHSA-2016:1374","RHSA-2016:1331","RHSA-2016:1332","RHSA-2016:1376","RHSA-2016:1333","RHSA-2016:1432","RHSA-2016:1328","RHSA-2016:1329","RHSA-2016:1439","RHSA-2016:1345","RHSA-2016:1334","RHSA-2016:1433","RHSA-2016:1389","RHSA-2016:1346","RHSA-2016:1434","RHSA-2016:1347","RHSA-2016:1435"],"bugzilla":"1313589","bugzilla_description":"CVE-2016-2141 JGroups: Authorization bypass","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["jgroups-1:3.2.16-1.Final_redhat_1.1.ep6.el6","jgroups-1:3.2.16-1.Final_redhat_1.1.ep6.el5","jgroups-1:3.2.16-1.Final_redhat_1.1.ep6.el7","jgroups-1:2.6.22-2.ep5.el5","eap7-jgroups-0:3.6.8-3.Final_redhat_3.1.ep7.el7","jgroups-1:2.6.22-2.ep5.el6","eap7-jgroups-0:3.6.8-3.Final_redhat_3.1.ep7.el6","jboss-ec2-eap-0:7.5.9-2.Final_redhat_2.ep6.el6","jgroups-1:2.6.22-2.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2141.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-3092","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:2068","RHSA-2017:0456","RHSA-2017:0455","RHSA-2016:2069","RHSA-2017:0457","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:2071","RHSA-2016:2070","RHSA-2016:2072","RHSA-2016:2599"],"bugzilla":"1349468","bugzilla_description":"CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","jboss-ec2-eap-0:7.5.11-1.Final_redhat_1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3092.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-10739","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":["RHSA-2019:3513","RHSA-2019:2118","RHBA-2019:3303"],"bugzilla":"1347549","bugzilla_description":"CVE-2016-10739 glibc: getaddrinfo should reject IP addresses with trailing characters","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","glibc-0:2.17-292.el7","glibc-0:2.28-72.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10739.json"},{"CVE":"CVE-2015-5174","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2045","RHSA-2016:1432","RHSA-2015:2660","RHBA-2016:0090","RHSA-2015:2661","RHSA-2016:1433","RHSA-2016:2599","RHSA-2016:1434","RHSA-2016:1435","RHSA-2015:2659"],"bugzilla":"1265698","bugzilla_description":"CVE-2015-5174 tomcat: URL Normalization issue","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.54-21_patch_05.ep6.el5","tomcat7-0:7.0.54-21_patch_05.ep6.el7","tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-21_patch_05.ep6.el6","tomcat7-0:7.0.59-42_patch_01.ep7.el6","tomcat8-0:8.0.18-52_patch_01.ep7.el6","jboss-ec2-eap-0:7.5.9-2.Final_redhat_2.ep6.el6","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5174.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-2094","severity":"moderate","public_date":"2016-02-17T00:00:00Z","advisories":["RHSA-2016:0595","RHSA-2016:0596","RHSA-2016:0597","RHSA-2016:0598","RHSA-2016:0599"],"bugzilla":"1308465","bugzilla_description":"CVE-2016-2094 EAP: HTTPS NIO connector uses no timeout when reading SSL handshake from client","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-358","affected_packages":["jboss-ec2-eap-0:7.5.7-2.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2094.json"},{"CVE":"CVE-2017-0361","severity":"moderate","public_date":"2016-01-29T00:00:00Z","advisories":[],"bugzilla":"1569705","bugzilla_description":"CVE-2017-0361 mediawiki: information disclosure in the api.log","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0361.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-6644","severity":"moderate","public_date":"2016-01-01T00:00:00Z","advisories":["RHSA-2017:2811","RHSA-2018:2927","RHSA-2017:1832","RHSA-2017:2810","RHSA-2017:2808","RHSA-2017:2809"],"bugzilla":"1444015","bugzilla_description":"CVE-2015-6644 bouncycastle: Information disclosure in GCMBlockCipher","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6644.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-5104","severity":"low","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1339988","bugzilla_description":"CVE-2016-5104 libimobiledevice: Sockets listening on INADDR_ANY","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5104.json"},{"CVE":"CVE-2017-0364","severity":"low","public_date":"2015-12-22T00:00:00Z","advisories":[],"bugzilla":"1569779","bugzilla_description":"CVE-2017-0364 mediawiki: redirects to any interwiki link in special search","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0364.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-5254","severity":"moderate","public_date":"2015-12-08T00:00:00Z","advisories":["RHSA-2016:2035","RHSA-2016:2036","RHSA-2016:0489"],"bugzilla":"1291292","bugzilla_description":"CVE-2015-5254 JMS ObjectMessage: unsafe deserialization","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["activemq-0:5.9.0-6.redhat.611454.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5254.json"},{"CVE":"CVE-2015-7544","severity":"important","public_date":"2015-12-07T00:00:00Z","advisories":["RHSA-2016:0426"],"bugzilla":"1269588","bugzilla_description":"CVE-2015-7544 redhat-support-plugin-rhev: Remote code execution by SuperUser role on hosts in RHEV","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":["redhat-support-plugin-rhev-0:3.6.0-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7544.json"},{"CVE":"CVE-2015-5304","severity":"moderate","public_date":"2015-12-02T00:00:00Z","advisories":["RHSA-2015:2540","RHSA-2015:2541","RHSA-2015:2542","RHSA-2015:2538","RHSA-2015:2539"],"bugzilla":"1273046","bugzilla_description":"CVE-2015-5304 JBoss EAP: missing authorization check for Monitor/Deployer/Auditor role when shutting down server","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-862","affected_packages":["jboss-ec2-eap-0:7.5.5-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5304.json"},{"CVE":"CVE-2015-8080","severity":"moderate","public_date":"2015-11-06T00:00:00Z","advisories":["RHSA-2016:0095","RHSA-2016:0096","RHSA-2016:0097"],"bugzilla":"1278965","bugzilla_description":"CVE-2015-8080 redis: Integer wraparound in lua_struct.c causing stack-based buffer overflow","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["redis-0:2.8.24-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8080.json"},{"CVE":"CVE-2015-7501","severity":"critical","public_date":"2015-11-06T00:00:00Z","advisories":["RHSA-2016:1773","RHSA-2016:0040","RHSA-2015:2578","RHSA-2015:2534","RHSA-2015:2556","RHSA-2015:2557","RHSA-2015:2579","RHSA-2015:2535","RHSA-2015:2514","RHSA-2015:2536","RHSA-2015:2559","RHSA-2015:2537","RHSA-2015:2538","RHSA-2015:2516","RHSA-2015:2539","RHSA-2015:2517","RHSA-2015:2670","RHSA-2015:2671","RHSA-2020:4274","RHSA-2015:2521","RHSA-2015:2522","RHSA-2015:2500","RHSA-2015:2501","RHSA-2015:2523","RHSA-2015:2502","RHSA-2015:2524","RHSA-2015:2547","RHSA-2015:2548","RHSA-2015:2560","RHSA-2015:2540","RHSA-2015:2541","RHSA-2015:2542","RHSA-2016:0118"],"bugzilla":"1279330","bugzilla_description":"CVE-2015-7501 apache-commons-collections: InvokerTransformer code execution during deserialisation","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502->CWE-284","affected_packages":["jboss-ec2-eap-0:7.5.5-3.Final_redhat_3.ep6.el6","apache-commons-collections-0:3.2.1-22.el7_2","jakarta-commons-collections-0:3.2.1-3.5.el6_7","jenkins-0:1.651.2-1.el6op","rh-maven35-apache-commons-collections4-0:4.0-7.3.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el6","jakarta-commons-collections-0:3.2.1-5.ep5.el4","jakarta-commons-collections-0:3.2.1-5.ep5.el5","jakarta-commons-collections-0:3.2.1-5.ep5.el6","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el7","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el5","jakarta-commons-collections-0:3.2-2jpp.4","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7501.json"},{"CVE":"CVE-2015-5178","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:1904","RHSA-2015:1905","RHSA-2015:1906","RHSA-2015:1907"],"bugzilla":"1250552","bugzilla_description":"CVE-2015-5178 JBoss AS/WildFly: missing X-Frame-Options header leading to clickjacking","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["jboss-as-console-0:2.5.10-4.Final_redhat_2.1.ep6.el5","jboss-ec2-eap-0:7.5.4-1.Final_redhat_4.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5178.json"},{"CVE":"CVE-2015-5188","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:1904","RHSA-2015:1905","RHSA-2015:1906","RHSA-2015:1907"],"bugzilla":"1252885","bugzilla_description":"CVE-2015-5188 JBoss EAP: CSRF vulnerability in EAP & WildFly Web Console","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-352","affected_packages":["jboss-ec2-eap-0:7.5.4-1.Final_redhat_4.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5188.json"},{"CVE":"CVE-2015-5220","severity":"important","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:1904","RHSA-2015:1905","RHSA-2015:1906","RHSA-2015:1907","RHSA-2016:1519"],"bugzilla":"1255597","bugzilla_description":"CVE-2015-5220 OOME from EAP 6 http management console","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-770","affected_packages":["jboss-ec2-eap-0:7.5.4-1.Final_redhat_4.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5220.json"},{"CVE":"CVE-2015-5234","severity":"moderate","public_date":"2015-09-02T00:00:00Z","advisories":["RHSA-2016:0778","RHBA-2015:2457"],"bugzilla":"1233667","bugzilla_description":"CVE-2015-5234 icedtea-web: unexpected permanent authorization of unsigned applets","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-138","affected_packages":["icedtea-web-0:1.6.2-1.el6","icedtea-web-0:1.6.1-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5234.json"},{"CVE":"CVE-2015-5235","severity":"moderate","public_date":"2015-09-02T00:00:00Z","advisories":["RHSA-2016:0778","RHBA-2015:2457"],"bugzilla":"1233697","bugzilla_description":"CVE-2015-5235 icedtea-web: applet origin spoofing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-345","affected_packages":["icedtea-web-0:1.6.2-1.el6","icedtea-web-0:1.6.1-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5235.json"},{"CVE":"CVE-2015-5222","severity":"important","public_date":"2015-08-19T00:00:00Z","advisories":["RHSA-2015:1650"],"bugzilla":"1255120","bugzilla_description":"CVE-2015-5222 OpenShift3: Exec operations should be forbidden to privileged pods such as builder pods","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-862","affected_packages":["openshift-0:3.0.1.0-1.git.527.f8d5fed.el7ose"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5222.json"},{"CVE":"CVE-2017-0363","severity":"moderate","public_date":"2015-08-14T00:00:00Z","advisories":[],"bugzilla":"1569749","bugzilla_description":"CVE-2017-0363 mediawiki: open redirect to external sites","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0363.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-0369","severity":"moderate","public_date":"2015-08-06T00:00:00Z","advisories":[],"bugzilla":"1569800","bugzilla_description":"CVE-2017-0369 mediawiki: Improper Access Control to protected pages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0369.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2013-1793","severity":"moderate","public_date":"2015-07-23T00:00:00Z","advisories":[],"bugzilla":"916767","bugzilla_description":"CVE-2013-1793 openstack-utils: openstack-db insecure password creation for services","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1793.json"},{"CVE":"CVE-2015-3158","severity":"moderate","public_date":"2015-06-05T00:00:00Z","advisories":["RHSA-2015:1669","RHSA-2015:1673","RHSA-2015:1672","RHSA-2015:1671","RHSA-2015:1670"],"bugzilla":"1216123","bugzilla_description":"CVE-2015-3158 PicketLink: PicketLink IDP ignores role based authorization","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.3-1.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3158.json"},{"CVE":"CVE-2015-4335","severity":"important","public_date":"2015-06-04T00:00:00Z","advisories":["RHSA-2015:1676"],"bugzilla":"1228327","bugzilla_description":"CVE-2015-4335 redis: Lua sandbox escape and arbitrary code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["redis-0:2.8.21-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4335.json"},{"CVE":"CVE-2015-4411","severity":"low","public_date":"2015-06-04T00:00:00Z","advisories":[],"bugzilla":"1229706","bugzilla_description":"CVE-2015-4411 rubygem-moped: Denial of Service with crafted ObjectId string (incomplete fix for CVE-2015-4410)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4411.json"},{"CVE":"CVE-2015-4410","severity":"low","public_date":"2015-06-04T00:00:00Z","advisories":[],"bugzilla":"1229757","bugzilla_description":"CVE-2015-4410 rubygem-moped: Denial of Service with crafted ObjectId string","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4410.json"},{"CVE":"CVE-2015-2156","severity":"low","public_date":"2015-05-09T00:00:00Z","advisories":[],"bugzilla":"1222923","bugzilla_description":"CVE-2015-2156 netty: HttpOnly cookie bypass","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2156.json"},{"CVE":"CVE-2015-0298","severity":"important","public_date":"2015-05-05T00:00:00Z","advisories":["RHEA-2015:0955","RHEA-2015:0944","RHSA-2015:1642","RHEA-2015:0945","RHSA-2015:1641","RHSA-2015:0848","RHSA-2015:0847","RHSA-2015:0846"],"bugzilla":"1197769","bugzilla_description":"CVE-2015-0298 mod_cluster: JavaScript code injection is possible via MCMP mod_manager messages","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mod_cluster-0:1.3.1-5.Final_redhat_2.1.ep7.el7","mod_cluster-0:1.2.11-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0298.json"},{"CVE":"CVE-2015-1854","severity":"important","public_date":"2015-04-28T00:00:00Z","advisories":["RHSA-2015:0895"],"bugzilla":"1209573","bugzilla_description":"CVE-2015-1854 389-ds-base: access control bypass with modrdn","cvss_score":4.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-697->CWE-863","affected_packages":["389-ds-base-0:1.3.3.1-16.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1854.json"},{"CVE":"CVE-2014-8111","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:1642","RHSA-2015:1641","RHEA-2015:1770","RHSA-2015:0849","RHEA-2015:1771","RHSA-2015:0848","RHSA-2015:0847","RHSA-2015:0846"],"bugzilla":"1182591","bugzilla_description":"CVE-2014-8111 Tomcat mod_jk: information leak due to incorrect JkMount/JkUnmount directives processing","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["mod_jk-0:1.2.40-8.redhat_1.ep7.el6","mod_jk-0:1.2.40-3.redhat_2.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8111.json"},{"CVE":"CVE-2015-1849","severity":"low","public_date":"2015-03-23T00:00:00Z","advisories":["RHBA-2015:1073","RHEA-2015:1074","RHEA-2015:1075","RHEA-2015:1076","RHEA-2015:1077"],"bugzilla":"1208580","bugzilla_description":"CVE-2015-1849 JBoss EAP: LDAP bind password is being logged with TRACE log level","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.1-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1849.json"},{"CVE":"CVE-2014-3699","severity":"important","public_date":"2015-03-17T00:00:00Z","advisories":[],"bugzilla":"1152544","bugzilla_description":"CVE-2014-3699 eDeploy: Remote code execution due to cPickle deserialization of untrusted data","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3699.json"},{"CVE":"CVE-2014-3700","severity":"important","public_date":"2015-03-17T00:00:00Z","advisories":[],"bugzilla":"1152545","bugzilla_description":"CVE-2014-3700 eDeploy: Remote code execution due to eval() of untrusted data","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-95","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3700.json"},{"CVE":"CVE-2014-3701","severity":"critical","public_date":"2015-03-17T00:00:00Z","advisories":[],"bugzilla":"1152548","bugzilla_description":"CVE-2014-3701 eDeploy: Multiple tmp file race condition flaws","cvss_score":10.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3701.json"},{"CVE":"CVE-2014-3702","severity":"moderate","public_date":"2015-03-17T00:00:00Z","advisories":[],"bugzilla":"1153470","bugzilla_description":"CVE-2014-3702 eDeploy: Path traversal in the session parameter","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3702.json"},{"CVE":"CVE-2014-8174","severity":"low","public_date":"2015-03-17T00:00:00Z","advisories":[],"bugzilla":"1202972","bugzilla_description":"CVE-2014-8174 eDeploy enovance: use of HTTP to download sensitive files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-319","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8174.json"},{"CVE":"CVE-2014-3586","severity":"low","public_date":"2015-03-10T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0849","RHSA-2015:0848","RHSA-2015:0847","RHSA-2015:0846"],"bugzilla":"1126687","bugzilla_description":"CVE-2014-3586 JBoss AS CLI: Insecure default permissions on history file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["jboss-as-cli-0:7.5.0-8.Final_redhat_21.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3586.json"},{"CVE":"CVE-2014-3643","severity":"moderate","public_date":"2015-03-10T00:00:00Z","advisories":[],"bugzilla":"1143758","bugzilla_description":"CVE-2014-3643 jersey: XXE via parameter entities","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3643.json"},{"CVE":"CVE-2015-0271","severity":"important","public_date":"2015-03-05T00:00:00Z","advisories":["RHSA-2015:0645","RHSA-2015:0841","RHSA-2015:0840"],"bugzilla":"1193638","bugzilla_description":"CVE-2015-0271 OpenStack dashboard: log file arbitrary file retrieval","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-73->CWE-552","affected_packages":["redhat-access-plugin-openstack-0:5.0.1-0.el6ost","redhat-access-plugin-openstack-0:5.0.1-0.el7ost","redhat-access-plugin-openstack-0:6.0.3-0.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0271.json"},{"CVE":"CVE-2015-0254","severity":"important","public_date":"2015-02-27T00:00:00Z","advisories":["RHSA-2016:0121","RHSA-2016:0122","RHSA-2016:1376","RHSA-2016:0123","RHSA-2016:1838","RHSA-2016:1839","RHSA-2015:1695","RHSA-2016:0124","RHSA-2016:1840","RHSA-2016:1841","RHSA-2016:0125"],"bugzilla":"1198606","bugzilla_description":"CVE-2015-0254 jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["jakarta-taglibs-standard-0:1.1.1-11.7.el6_7","jboss-ec2-eap-0:7.5.6-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7","jakarta-taglibs-standard-0:1.1.2-14.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2015-1593","severity":"low","public_date":"2015-02-13T00:00:00Z","advisories":["RHSA-2015:1139","RHSA-2015:1138","RHSA-2015:1137","RHSA-2015:1221","RHSA-2019:3517","RHBA-2019:3303"],"bugzilla":"1192519","bugzilla_description":"CVE-2015-1593 kernel: Linux stack ASLR implementation Integer overflow","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190","affected_packages":["kernel-0:3.10.0-229.7.2.ael7b","redhat-coreos-42.81.20191107.0","kernel-rt-1:3.10.0-229.rt56.153.el6rt","kernel-0:4.18.0-147.el8","kernel-0:2.6.32-504.30.3.el6","kernel-rt-0:3.10.0-229.7.2.rt56.141.6.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1593.json"},{"CVE":"CVE-2014-0227","severity":"moderate","public_date":"2015-02-09T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0983","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:1088","RHSA-2014:1021","RHSA-2014:1087","RHSA-2014:1020","RHSA-2014:1086","RHSA-2015:0091","RHSA-2014:1019","RHSA-2015:0991","RHSA-2014:1904"],"bugzilla":"1109196","bugzilla_description":"CVE-2014-0227 Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-400","affected_packages":["tomcat6-0:6.0.24-83.el6_6","tomcat-0:7.0.54-2.el7_1","jbossweb-0:7.4.8-4.Final_redhat_4.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0227.json"},{"CVE":"CVE-2017-6056","severity":"important","public_date":"2015-02-06T00:00:00Z","advisories":["RHSA-2017:0517","RHSA-2017:0827","RHSA-2017:0826","RHSA-2017:0829","RHSA-2017:0828"],"bugzilla":"1422148","bugzilla_description":"CVE-2017-6056 tomcat: Infinite loop in the processing of https requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["jbossweb-0:7.5.21-2.Final_redhat_2.1.ep6.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-0370","severity":"low","public_date":"2014-11-22T00:00:00Z","advisories":[],"bugzilla":"1569804","bugzilla_description":"CVE-2017-0370 mediawiki: Improper URL sanitization in Spam blacklist","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0370.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2014-7839","severity":"moderate","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2015:0218","RHSA-2015:0217","RHSA-2015:1009","RHSA-2015:0216","RHSA-2015:0215","RHSA-2015:0851","RHSA-2015:0675","RHSA-2015:0850","RHSA-2015:0773"],"bugzilla":"1165328","bugzilla_description":"CVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7839.json"},{"CVE":"CVE-2014-3585","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHBA-2015:2395","RHBA-2014:1396"],"bugzilla":"1126002","bugzilla_description":"CVE-2014-3585 redhat-upgrade-tool: does not check GPG signatures on package installation","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-347","affected_packages":["redhat-upgrade-tool-2:0.9.3-1.el7","redhat-upgrade-tool-1:0.7.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3585.json"},{"CVE":"CVE-2014-7143","severity":"moderate","public_date":"2014-09-17T00:00:00Z","advisories":[],"bugzilla":"1143802","bugzilla_description":"CVE-2014-7143 python-twisted-web: specified trustRoot not respected","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7143.json"},{"CVE":"CVE-2014-3577","severity":"important","public_date":"2014-08-18T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2016:1773","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1082","RHSA-2014:1320","RHSA-2014:1166","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1146","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2016:1931","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1834","RHSA-2014:1833","RHSA-2015:1177","RHSA-2014:1836","RHSA-2015:1176","RHSA-2014:1835"],"bugzilla":"1129074","bugzilla_description":"CVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","httpcomponents-client-0:4.2.5-5.el7_0","org.ovirt.engine-root-0:3.5.0-29","jakarta-commons-httpclient-1:3.1-16.el7_0","thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1","jakarta-commons-httpclient-1:3.1-0.9.el6_5","jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2012-6153","severity":"important","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1320","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1098","RHSA-2014:1834","RHSA-2014:1833","RHSA-2014:1836","RHSA-2014:1835"],"bugzilla":"1129916","bugzilla_description":"CVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","devtoolset-2-httpcomponents-client-0:4.2.1-6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","org.ovirt.engine-root-0:3.5.0-29","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6153.json"},{"CVE":"CVE-2014-3562","severity":"important","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2014:1032","RHSA-2014:1031"],"bugzilla":"1123477","bugzilla_description":"CVE-2014-3562 389-ds: unauthenticated information disclosure","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-862->CWE-201","affected_packages":["389-ds-base-0:1.3.1.6-26.el7_0","redhat-ds-base-0:8.2.11-15.el5dsrv","389-ds-base-0:1.2.11.15-34.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3562.json"},{"CVE":"CVE-2014-3490","severity":"moderate","public_date":"2014-07-23T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0125","RHSA-2015:0234","RHSA-2014:1039","RHSA-2014:1904","RHSA-2014:1040","RHSA-2014:1298","RHSA-2014:1011"],"bugzilla":"1107901","bugzilla_description":"CVE-2014-3490 RESTEasy: XXE via parameter entities","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-base-0:2.3.5-3.el7_0","resteasy-0:2.3.8-5.SP1_redhat_1.1.ep6.el7","resteasy-0:2.3.8-5.SP1_redhat_1.1.ep6.el5","resteasy-0:2.3.8-5.SP1_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3490.json"},{"CVE":"CVE-2014-0230","severity":"low","public_date":"2014-07-19T00:00:00Z","advisories":["RHSA-2016:0595","RHSA-2016:0596","RHSA-2015:1622","RHSA-2015:1621","RHSA-2015:2659","RHSA-2015:2660","RHSA-2015:2661","RHEA-2015:1770","RHSA-2016:0597","RHEA-2015:1771","RHSA-2016:2599","RHSA-2016:0598","RHSA-2016:0599"],"bugzilla":"1191200","bugzilla_description":"CVE-2014-0230 tomcat: non-persistent DoS attack by feeding data by aborting an upload","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["tomcat8-0:8.0.18-25_patch_00.ep7.el6","jbossweb-0:7.5.15-1.Final_redhat_1.1.ep6.el5","jboss-ec2-eap-0:7.5.7-2.Final_redhat_3.ep6.el6","tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.59-26_patch_00.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0230.json"},{"CVE":"CVE-2014-3530","severity":"important","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2015:1888","RHSA-2014:0883","RHSA-2015:0091","RHSA-2014:0884","RHSA-2014:0898","RHSA-2014:0910","RHSA-2014:0885","RHSA-2014:0886","RHSA-2014:0897"],"bugzilla":"1112987","bugzilla_description":"CVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-611","affected_packages":["picketlink-federation-0:2.1.5-3_patch_01.ep5.el4","picketlink-federation-0:2.1.5-3_patch_01.ep5.el5","picketlink-federation-0:2.1.5-3_patch_01.el6_5","picketlink-federation-0:2.1.9-5.SP3_redhat_2.1.ep6.el5","picketlink-federation-0:2.1.9-5.SP3_redhat_2.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3530.json"},{"CVE":"CVE-2013-6495","severity":"moderate","public_date":"2014-07-10T00:00:00Z","advisories":["RHSA-2013:1209","RHSA-2013:1207","RHSA-2013:1208","RHSA-2013:1437"],"bugzilla":"1066794","bugzilla_description":"CVE-2013-6495 JBossWeb Bayeux: Reflected Cross-Site Scripting (XSS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["jbossweb-0:7.2.2-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6495.json"},{"CVE":"CVE-2014-3481","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0895","RHSA-2015:1009","RHSA-2015:0765","RHSA-2014:0799","RHSA-2015:0720","RHSA-2015:0675","RHSA-2014:0797","RHSA-2014:0798","RHSA-2014:1904"],"bugzilla":"1105242","bugzilla_description":"CVE-2014-3481 JBoss AS JAX-RS: Information disclosure via XML eXternal Entity (XXE)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["jboss-as-jaxrs-0:7.3.4-1.Final_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3481.json"},{"CVE":"CVE-2014-0059","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2014:0564","RHSA-2014:0895","RHSA-2014:0565","RHSA-2015:1009","RHSA-2014:0563","RHSA-2015:0851","RHSA-2015:0675","RHSA-2015:0850","RHSA-2014:1904"],"bugzilla":"1063642","bugzilla_description":"CVE-2014-0059 JBossSX/PicketBox: World readable audit.log file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":["picketbox-0:4.0.19-6.SP6_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0059.json"},{"CVE":"CVE-2014-0075","severity":"moderate","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:1149","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1072776","bugzilla_description":"CVE-2014-0075 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-400","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0075.json"},{"CVE":"CVE-2014-0096","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1088342","bugzilla_description":"CVE-2014-0096 Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0096.json"},{"CVE":"CVE-2014-0099","severity":"moderate","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:1149","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1102030","bugzilla_description":"CVE-2014-0099 Tomcat/JBossWeb: Request smuggling via malicious content length header","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-190->CWE-444","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0099.json"},{"CVE":"CVE-2014-0119","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:1034","RHSA-2014:1088","RHSA-2014:1087","RHSA-2014:1086","RHSA-2014:1038","RHSA-2014:0895","RHSA-2014:0843","RHSA-2014:0842"],"bugzilla":"1102038","bugzilla_description":"CVE-2014-0119 Tomcat/JBossWeb: XML parser hijack by malicious web application","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-470","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat6-0:6.0.24-78.el6_5","tomcat-0:7.0.42-8.el7_0","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0119.json"},{"CVE":"CVE-2014-0193","severity":"low","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2014:1019","RHSA-2014:0910","RHSA-2015:0234","RHSA-2014:0818","RHSA-2014:1351","RHSA-2014:1021","RHSA-2014:1020"],"bugzilla":"1092783","bugzilla_description":"CVE-2014-0193 netty: DoS via memory exhaustion during data aggregation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["netty-0:3.6.9-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0193.json"},{"CVE":"CVE-2014-0107","severity":"important","public_date":"2014-03-24T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:1290","RHSA-2014:0590","RHSA-2014:1291","RHSA-2015:1888","RHSA-2014:1351","RHSA-2014:0591","RHSA-2014:0454","RHSA-2014:1995","RHSA-2014:1059","RHSA-2014:0453","RHSA-2014:0348","RHSA-2014:1007","RHSA-2014:1369","RHSA-2014:0818","RHSA-2014:0819"],"bugzilla":"1080248","bugzilla_description":"CVE-2014-0107 Xalan-Java: insufficient constraints in secure processing feature","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el5","xalan-j2-0:2.7.0-6jpp.2","xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el6","xalan-j2-0:2.7.1-12_patch_08.ep5.el6","xalan-j2-0:2.7.1-12_patch_08.ep5.el4","xalan-j2-0:2.7.1-12_patch_08.ep5.el5","xalan-j2-0:2.7.0-9.9.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0107.json"},{"CVE":"CVE-2014-0003","severity":"important","public_date":"2014-02-28T00:00:00Z","advisories":["RHSA-2014:0245","RHSA-2014:0323","RHSA-2014:0452","RHSA-2014:0254","RHSA-2014:0459","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"1049692","bugzilla_description":"CVE-2014-0003 Camel: remote code execution via XSL","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0003.json"},{"CVE":"CVE-2013-4286","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0374","RHSA-2014:0344","RHSA-2014:0686","RHSA-2014:0345","RHSA-2014:0343","RHSA-2014:0458","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0511","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1069921","bugzilla_description":"CVE-2013-4286 tomcat: multiple content-length header poisoning flaws","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat-0:7.0.42-5.el7_0","tomcat6-0:6.0.37-27_patch_04.ep6.el6","jbossweb-0:7.3.1-1.Final_redhat_1.1.ep6.el5","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4286.json"},{"CVE":"CVE-2014-0058","severity":"low","public_date":"2014-02-24T00:00:00Z","advisories":["RHSA-2014:1995","RHSA-2014:0895","RHSA-2015:1009","RHSA-2014:1290","RHSA-2014:0205","RHSA-2014:0910","RHSA-2014:0204","RHSA-2015:0034","RHSA-2014:1291"],"bugzilla":"1063641","bugzilla_description":"CVE-2014-0058 Red Hat JBoss EAP6: Plain text password logging during security audit","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["jboss-as-web-0:7.3.1-4.Final_redhat_4.1.ep6.el6","jboss-as-web-0:7.3.1-4.Final_redhat_4.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0058.json"},{"CVE":"CVE-2014-0050","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0252","RHSA-2014:0253","RHSA-2014:0473","RHSA-2014:0400","RHSA-2014:0452","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0401","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1062337","bugzilla_description":"CVE-2014-0050 apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el6","tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0050.json"},{"CVE":"CVE-2013-6493","severity":"moderate","public_date":"2014-02-05T00:00:00Z","advisories":["RHBA-2014:1417"],"bugzilla":"1010958","bugzilla_description":"CVE-2013-6493 icedtea-web: insecure temporary file use flaw in LiveConnect implementation","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":["icedtea-web-0:1.5.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6493.json"},{"CVE":"CVE-2014-0018","severity":"low","public_date":"2014-01-11T00:00:00Z","advisories":["RHSA-2014:1995","RHSA-2015:1009","RHSA-2014:1290","RHSA-2014:0171","RHSA-2014:0172","RHSA-2014:1291","RHSA-2014:0170"],"bugzilla":"1052783","bugzilla_description":"CVE-2014-0018 jboss-as-server: Unchecked access to MSC Service Registry under JSM","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0018.json"},{"CVE":"CVE-2013-6440","severity":"moderate","public_date":"2013-12-11T00:00:00Z","advisories":["RHSA-2014:1995","RHSA-2014:0452","RHSA-2014:1290","RHSA-2014:0171","RHSA-2014:0172","RHSA-2014:1291","RHSA-2014:0170","RHSA-2014:0195"],"bugzilla":"1043332","bugzilla_description":"CVE-2013-6440 XMLTooling-J/OpenSAML Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6440.json"},{"CVE":"CVE-2013-4485","severity":"important","public_date":"2013-11-21T00:00:00Z","advisories":["RHSA-2013:1753","RHSA-2013:1752"],"bugzilla":"1024552","bugzilla_description":"CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-30.el6_5","redhat-ds-base-0:8.2.11-14.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4485.json"},{"CVE":"CVE-2013-4517","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":["RHSA-2015:0851","RHSA-2015:0675","RHSA-2015:0850","RHSA-2014:0171","RHSA-2014:0172","RHSA-2014:0170","RHSA-2014:0582","RHSA-2014:0473","RHSA-2014:0195","RHSA-2014:0400","RHSA-2014:1728","RHSA-2014:1727","RHSA-2014:1726","RHSA-2014:1725"],"bugzilla":"1045257","bugzilla_description":"CVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature DoS Attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["xml-security-0:1.5.6-3.el6","xml-security-0:1.5.6-3.ep5.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el6","xml-security-0:1.5.6-3.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4517.json"},{"CVE":"CVE-2013-2186","severity":"important","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1429","RHSA-2013:1428","RHSA-2013:1448","RHSA-2016:0070","RHSA-2013:1430","RHSA-2013:1442"],"bugzilla":"974814","bugzilla_description":"CVE-2013-2186 Apache commons-fileupload: Arbitrary file upload via deserialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-626","affected_packages":["jakarta-commons-fileupload-1:1.1.1-7.7.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2186.json"},{"CVE":"CVE-2013-4330","severity":"important","public_date":"2013-09-30T00:00:00Z","advisories":["RHSA-2014:0124","RHSA-2014:0245","RHSA-2014:0254","RHSA-2013:1410","RHSA-2013:1862","RHSA-2014:0140"],"bugzilla":"1011726","bugzilla_description":"CVE-2013-4330 Camel: remote code execution via header field manipulation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4330.json"},{"CVE":"CVE-2013-4349","severity":"critical","public_date":"2013-09-16T00:00:00Z","advisories":[],"bugzilla":"1007960","bugzilla_description":"CVE-2013-4349 icedtea-web: CVE-2012-4540 issue not fixed in 1.4","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4349.json"},{"CVE":"CVE-2013-1921","severity":"low","public_date":"2013-09-04T00:00:00Z","advisories":["RHSA-2014:0029","RHSA-2013:1209","RHSA-2013:1207","RHSA-2013:1208","RHSA-2013:1437"],"bugzilla":"948106","bugzilla_description":"CVE-2013-1921 JBoss PicketBox: Insecure storage of masked passwords","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["picketbox-0:4.0.17-3.SP2_redhat_2.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1921.json"},{"CVE":"CVE-2013-2185","severity":"important","public_date":"2013-09-03T00:00:00Z","advisories":["RHSA-2013:1193","RHSA-2013:1194","RHSA-2013:1265"],"bugzilla":"974813","bugzilla_description":"CVE-2013-2185 Tomcat/JBossWeb: Arbitrary file upload via deserialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-626","affected_packages":["jbossweb-0:7.2.0-3.redhat_2.ep6.el6","jbossweb-0:7.2.0-3.redhat_2.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2185.json"},{"CVE":"CVE-2013-4152","severity":"moderate","public_date":"2013-08-22T00:00:00Z","advisories":["RHSA-2014:0212","RHSA-2014:0245","RHSA-2014:0400","RHSA-2014:0254","RHSA-2014:0401"],"bugzilla":"1000186","bugzilla_description":"CVE-2013-4152 Spring Framework: XML External Entity (XXE) injection flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4152.json"},{"CVE":"CVE-2013-2219","severity":"moderate","public_date":"2013-07-29T00:00:00Z","advisories":["RHSA-2013:1119","RHSA-2013:1116"],"bugzilla":"979508","bugzilla_description":"CVE-2013-2219 Directory Server: ACLs inoperative in some search scenarios","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["redhat-ds-base-0:8.2.11-13.el5dsrv","389-ds-base-0:1.2.11.15-20.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2219.json"},{"CVE":"CVE-2013-4112","severity":"low","public_date":"2013-07-11T00:00:00Z","advisories":["RHSA-2014:0029","RHSA-2013:1209","RHSA-2013:1207","RHSA-2013:1208","RHSA-2013:1437","RHSA-2013:1771"],"bugzilla":"983489","bugzilla_description":"CVE-2013-4112 JGroups: Authentication via cached credentials","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["jgroups-1:3.2.10-1.Final_redhat_2.2.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4112.json"},{"CVE":"CVE-2013-2142","severity":"low","public_date":"2013-05-31T00:00:00Z","advisories":[],"bugzilla":"970172","bugzilla_description":"CVE-2013-2142 libimobiledevice: Insecure temporary file use when both $XDG_CONFIG_HOME and $HOME are unset","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2142.json"},{"CVE":"CVE-2013-2035","severity":"low","public_date":"2013-05-13T00:00:00Z","advisories":["RHSA-2014:1290","RHSA-2014:1291","RHSA-2014:1995","RHSA-2014:0245","RHSA-2014:0400","RHSA-2014:0254","RHSA-2014:0029","RHSA-2014:0401","RHSA-2013:1029","RHSA-2015:0034","RHSA-2014:1904","RHSA-2013:1786","RHSA-2013:1784","RHSA-2013:1785"],"bugzilla":"958618","bugzilla_description":"CVE-2013-2035 HawtJNI: predictable temporary file name leading to local arbitrary code execution","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-377","affected_packages":["jansi-0:1.9-5.redhat_3.1.ep6.el5","activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2035.json"},{"CVE":"CVE-2013-7239","severity":"moderate","public_date":"2013-04-19T00:00:00Z","advisories":[],"bugzilla":"1047299","bugzilla_description":"CVE-2013-7239 memcached: SASL authentication allows wrong credentials to access memcache","cvss_score":4.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7239.json"},{"CVE":"CVE-2013-1927","severity":"moderate","public_date":"2013-04-17T00:00:00Z","advisories":["RHSA-2013:0753"],"bugzilla":"884705","bugzilla_description":"CVE-2013-1927 icedtea-web: GIFAR issue","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.2.3-2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1927.json"},{"CVE":"CVE-2013-1926","severity":"moderate","public_date":"2013-04-17T00:00:00Z","advisories":["RHSA-2013:0753"],"bugzilla":"916774","bugzilla_description":"CVE-2013-1926 icedtea-web: class loader sharing for applets with same codebase paths","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.2.3-2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1926.json"},{"CVE":"CVE-2013-0248","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"922146","bugzilla_description":"CVE-2013-0248 jakarta-commons-fileupload, apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0248.json"},{"CVE":"CVE-2012-5633","severity":"important","public_date":"2013-02-08T00:00:00Z","advisories":["RHSA-2013:0749","RHSA-2013:0649","RHSA-2013:0726","RHSA-2013:0258","RHSA-2013:0257","RHSA-2013:0645","RHSA-2013:0259","RHSA-2013:0743","RHSA-2013:0644","RHSA-2013:0256"],"bugzilla":"889008","bugzilla_description":"CVE-2012-5633 jbossws-cxf, apache-cxf: Bypass of security constraints on WS endpoints when using WSS4JInInterceptor","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["apache-cxf-0:2.2.12-10.patch_06.ep5.el4","apache-cxf-0:2.4.9-6.redhat_3.ep6.el6","apache-cxf-0:2.4.9-6.redhat_3.ep6.el5","apache-cxf-0:2.2.12-10.patch_06.ep5.el5","apache-cxf-0:2.2.12-10.patch_06.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5633.json"},{"CVE":"CVE-2013-0239","severity":"important","public_date":"2013-02-08T00:00:00Z","advisories":["RHSA-2013:0749","RHSA-2013:0649","RHSA-2013:0645","RHSA-2013:0644"],"bugzilla":"905722","bugzilla_description":"CVE-2013-0239 jbossws-cxf, apache-cxf: UsernameTokenPolicyValidator and UsernameTokenInterceptor allow empty passwords to authenticate","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["apache-cxf-0:2.4.9-6.redhat_3.ep6.el6","apache-cxf-0:2.4.9-6.redhat_3.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0239.json"},{"CVE":"CVE-2013-7290","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"1052863","bugzilla_description":"CVE-2013-7290 memcached: remote DoS (segmentation fault) via a request to delete a key","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7290.json"},{"CVE":"CVE-2013-7291","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"1052864","bugzilla_description":"CVE-2013-7291 memcached: remote DoS (crash) via a request that triggers \"unbounded key print\"","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7291.json"},{"CVE":"CVE-2013-0179","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"895054","bugzilla_description":"CVE-2013-0179 memcached: DoS due to buffer overrun when printing out keys to be deleted in verbose mode","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0179.json"},{"CVE":"CVE-2012-3546","severity":"important","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0195","RHSA-2013:0151","RHSA-2013:0162","RHSA-2013:0194","RHSA-2013:0197","RHSA-2013:0164","RHSA-2013:0196","RHSA-2013:0163","RHSA-2013:0191","RHSA-2013:0193","RHSA-2013:0192","RHSA-2013:0005","RHSA-2013:0147","RHSA-2013:0158","RHSA-2013:0235","RHSA-2013:0642","RHSA-2013:0004","RHSA-2013:0623","RHSA-2013:0221","RHSA-2013:0198","RHSA-2013:0146","RHSA-2013:0641","RHSA-2013:0157","RHSA-2013:0640"],"bugzilla":"883634","bugzilla_description":"CVE-2012-3546 Tomcat/JBoss Web: Bypass of security constraints","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-31_patch_08.ep5.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossas-0:4.3.0-11.GA_CP10_patch_02.2.ep1.el5","tomcat6-0:6.0.35-6_patch_02.ep6.el5","tomcat6-0:6.0.32-28_patch_08.ep5.el5","jbossas-0:4.3.0-11.GA_CP10_patch_02.1.ep1.el4","tomcat5-0:5.5.33-34_patch_08.ep5.el6","jbossweb-0:7.0.17-3.Final_redhat_2.ep6.el6","jbossweb-0:7.0.17-3.Final_redhat_2.ep6.el5","tomcat6-0:6.0.32-31_patch_08.ep5.el6","tomcat6-0:6.0.24-52.el6_4","tomcat6-0:6.0.35-25_patch_01.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3546.json"},{"CVE":"CVE-2012-4431","severity":"moderate","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0647","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0268","RHSA-2013:1437","RHSA-2013:1853","RHSA-2013:0265","RHSA-2013:0267","RHSA-2013:0266"],"bugzilla":"883636","bugzilla_description":"CVE-2012-4431 Tomcat/JBoss Web - Bypass of CSRF prevention filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["tomcat7-0:7.0.30-3_patch_02.ep6.el5","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","tomcat6-0:6.0.35-6_patch_06.ep6.el5","tomcat7-0:7.0.30-5_patch_02.ep6.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4431.json"},{"CVE":"CVE-2012-4540","severity":"critical","public_date":"2012-11-07T00:00:00Z","advisories":["RHSA-2012:1434"],"bugzilla":"869040","bugzilla_description":"CVE-2012-4540 icedtea-web: IcedTeaScriptableJavaObject::invoke off-by-one heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["icedtea-web-0:1.2.2-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4540.json"},{"CVE":"CVE-2012-5885","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5885.json"},{"CVE":"CVE-2012-5886","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5886.json"},{"CVE":"CVE-2012-5887","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5887.json"},{"CVE":"CVE-2012-5783","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2014:0224","RHSA-2013:0681","RHSA-2013:0680","RHSA-2013:0679","RHSA-2013:0270","RHSA-2017:0868","RHSA-2013:0763","RHSA-2013:1006","RHSA-2013:1853","RHSA-2013:0682","RHSA-2013:1147"],"bugzilla":"873317","bugzilla_description":"CVE-2012-5783 jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el4","jakarta-commons-httpclient-1:3.1-2_patch_01.ep5.el6","jakarta-commons-httpclient-1:3.0-7jpp.2","jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el5","jakarta-commons-httpclient-1:3.1-0.7.el6_3","redhat-support-plugin-rhev-0:3.3.0-14.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2013-1752","severity":"moderate","public_date":"2012-09-25T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1046174","bugzilla_description":"CVE-2013-1752 python: multiple unbound readline() DoS flaws in python stdlib","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1752.json"},{"CVE":"CVE-2012-6136","severity":"low","public_date":"2012-08-02T00:00:00Z","advisories":["RHBA-2013:0386"],"bugzilla":"918813","bugzilla_description":"CVE-2012-6136 tuned: insecure permissions of tuned.pid","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["tuned-0:0.2.19-11.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6136.json"},{"CVE":"CVE-2012-3422","severity":"important","public_date":"2012-07-31T00:00:00Z","advisories":["RHSA-2012:1132"],"bugzilla":"840592","bugzilla_description":"CVE-2012-3422 icedtea-web: getvalueforurl uninitialized instance pointer","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["icedtea-web-0:1.2.1-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3422.json"},{"CVE":"CVE-2012-3423","severity":"important","public_date":"2012-07-31T00:00:00Z","advisories":["RHSA-2012:1132"],"bugzilla":"841345","bugzilla_description":"CVE-2012-3423 icedtea-web: incorrect handling of not 0-terminated strings","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["icedtea-web-0:1.2.1-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3423.json"},{"CVE":"CVE-2012-3431","severity":"moderate","public_date":"2012-07-19T00:00:00Z","advisories":["RHSA-2012:1301"],"bugzilla":"843669","bugzilla_description":"CVE-2012-3431 Teiid: JDBC socket does not encrypt client login messages by default","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3431.json"},{"CVE":"CVE-2012-2678","severity":"moderate","public_date":"2012-06-20T00:00:00Z","advisories":["RHSA-2012:0997","RHSA-2012:1041"],"bugzilla":"829933","bugzilla_description":"CVE-2012-2678 rhds/389: plaintext password disclosure flaw","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.10.2-18.el6_3","redhat-ds-base-0:8.2.10-3.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2678.json"},{"CVE":"CVE-2012-2746","severity":"low","public_date":"2012-05-10T00:00:00Z","advisories":["RHSA-2012:0997","RHSA-2012:1041"],"bugzilla":"833482","bugzilla_description":"CVE-2012-2746 rhds/389: plaintext password disclosure in audit log","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.10.2-18.el6_3","redhat-ds-base-0:8.2.10-3.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2746.json"},{"CVE":"CVE-2012-0213","severity":"moderate","public_date":"2012-05-09T00:00:00Z","advisories":["RHSA-2012:1232"],"bugzilla":"799078","bugzilla_description":"CVE-2012-0213 apache-poi, jakarta: JVM destabilization due to memory exhaustion when processing CDF/CFBF files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0213.json"},{"CVE":"CVE-2012-6684","severity":"moderate","public_date":"2012-02-29T00:00:00Z","advisories":[],"bugzilla":"1179870","bugzilla_description":"CVE-2012-6684 rubygem-RedCloth: XSS vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6684.json"},{"CVE":"CVE-2013-1820","severity":"low","public_date":"2012-02-26T00:00:00Z","advisories":[],"bugzilla":"918229","bugzilla_description":"CVE-2013-1820 tuned: insecure permissions of pmqos-static.pid","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1820.json"},{"CVE":"CVE-2011-3377","severity":"moderate","public_date":"2011-11-08T00:00:00Z","advisories":["RHSA-2011:1441"],"bugzilla":"742515","bugzilla_description":"CVE-2011-3377 IcedTea-Web: second-level domain subdomains and suffix domain SOP bypass","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.0.6-1.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3377.json"},{"CVE":"CVE-2011-3506","severity":"low","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2012:1125"],"bugzilla":"749078","bugzilla_description":"CVE-2011-3506 Oracle OpenSSO: unspecified vulnerability in the authentication component","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3506.json"},{"CVE":"CVE-2011-3517","severity":"low","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2012:1125"],"bugzilla":"749079","bugzilla_description":"CVE-2011-3517 Oracle OpenSSO: unspecified vulnerability in the authentication component","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3517.json"},{"CVE":"CVE-2011-2894","severity":"important","public_date":"2011-09-09T00:00:00Z","advisories":["RHSA-2011:1334"],"bugzilla":"737611","bugzilla_description":"CVE-2011-2894 Spring Framework, Spring Security:  Chosen commands execution on the server (Framework) or authentication token bypass (Security) by objects de-serialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2894.json"},{"CVE":"CVE-2011-2731","severity":"moderate","public_date":"2011-09-09T00:00:00Z","advisories":[],"bugzilla":"737613","bugzilla_description":"CVE-2011-2731 Spring Security: Privilege escalation by using RunAsManager mechanism","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2731.json"},{"CVE":"CVE-2011-2732","severity":"moderate","public_date":"2011-09-09T00:00:00Z","advisories":[],"bugzilla":"737617","bugzilla_description":"CVE-2011-2732 Spring Security: Header injection flaw due improper use of 'spring-security-redirect' parameter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2732.json"},{"CVE":"CVE-2011-2513","severity":"low","public_date":"2011-07-20T00:00:00Z","advisories":["RHSA-2011:1100"],"bugzilla":"718164","bugzilla_description":"CVE-2011-2513 icedtea, icedtea-web: home directory path disclosure to untrusted applications","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.0.4-2.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2513.json"},{"CVE":"CVE-2011-2514","severity":"moderate","public_date":"2011-07-20T00:00:00Z","advisories":["RHSA-2011:1100"],"bugzilla":"718170","bugzilla_description":"CVE-2011-2514 icedtea-web: Java Web Start security warning dialog manipulation","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["icedtea-web-0:1.0.4-2.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2514.json"},{"CVE":"CVE-2011-4971","severity":"low","public_date":"2011-05-15T00:00:00Z","advisories":[],"bugzilla":"957964","bugzilla_description":"CVE-2011-4971 memcached: specially crafted packet segmentation fault","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4971.json"},{"CVE":"CVE-2011-4905","severity":"moderate","public_date":"2011-04-22T00:00:00Z","advisories":[],"bugzilla":"769770","bugzilla_description":"CVE-2011-4905 ActiveMQ: flaw within failover mechanism when handling openwire requests can lead to DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4905.json"},{"CVE":"CVE-2011-2087","severity":"moderate","public_date":"2011-03-23T00:00:00Z","advisories":[],"bugzilla":"723828","bugzilla_description":"CVE-2011-2087 struts: Multiple XSS flaws in component handlers in javatemplates plug-in","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2087.json"},{"CVE":"CVE-2011-1772","severity":"moderate","public_date":"2011-02-22T00:00:00Z","advisories":[],"bugzilla":"723827","bugzilla_description":"CVE-2011-1772 struts: Multiple XSS flaws in XWork","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1772.json"},{"CVE":"CVE-2011-2088","severity":"low","public_date":"2011-02-22T00:00:00Z","advisories":[],"bugzilla":"723829","bugzilla_description":"CVE-2011-2088 struts: Allows remote attackers to obtain potentially sensitive information via vectors involving an s:submit element","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2088.json"},{"CVE":"CVE-2008-2930","severity":"low","public_date":"2008-08-27T00:00:00Z","advisories":["RHSA-2008:0596","RHSA-2008:0858","RHSA-2008:0602"],"bugzilla":"454065","bugzilla_description":"CVE-2008-2930 Directory Server: temporary DoS via crafted pattern searches","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["redhat-ds-base-0:8.0.4-7.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2930.json"},{"CVE":"CVE-2008-3283","severity":"moderate","public_date":"2008-08-27T00:00:00Z","advisories":["RHSA-2008:0596","RHSA-2008:0858","RHSA-2008:0602"],"bugzilla":"458977","bugzilla_description":"CVE-2008-3283 Directory Server: multiple memory leaks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["redhat-ds-base-0:8.0.4-7.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3283.json"},{"CVE":"CVE-2009-0314","severity":"low","public_date":"2008-08-06T00:00:00Z","advisories":[],"bugzilla":"481556","bugzilla_description":"CVE-2009-0314 gedit: untrusted python modules search path","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0314.json"},{"CVE":"CVE-2008-3916","severity":"moderate","public_date":"2008-06-30T00:00:00Z","advisories":["RHSA-2008:0946"],"bugzilla":"462584","bugzilla_description":"CVE-2008-3916 ed: Heap-based buffer overflow (arb. code execution)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ed-0:0.2-39.el5_2","ed-0:0.2-33.30E.1","ed-0:0.2-21.1","ed-0:0.2-36.el4_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3916.json"},{"CVE":"CVE-2008-0892","severity":"important","public_date":"2008-04-15T00:00:00Z","advisories":["RHSA-2008:0201","RHSA-2008:0199"],"bugzilla":"437301","bugzilla_description":"CVE-2008-0892 Director Server: shell command injection in CGI replication monitor","cvss_score":7.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:C/I:C/A:C","CWE":"CWE-78","affected_packages":["redhat-ds-admin-0:8.0.0-6.el5dsrv","redhat-ds-admin-0:8.0.0-6.el4dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0892.json"},{"CVE":"CVE-2008-0893","severity":"moderate","public_date":"2008-04-15T00:00:00Z","advisories":["RHSA-2008:0201"],"bugzilla":"437320","bugzilla_description":"CVE-2008-0893 Directory Server: unrestricted access to CGI scripts","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["redhat-ds-admin-0:8.0.0-6.el5dsrv","redhat-ds-admin-0:8.0.0-6.el4dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0893.json"},{"CVE":"CVE-2008-0889","severity":"important","public_date":"2008-03-19T00:00:00Z","advisories":["RHSA-2008:0191"],"bugzilla":"436107","bugzilla_description":"CVE-2008-0889 directory server: insecure permissions on fedora/redhat-idm-console","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-732","affected_packages":["redhat-idm-console-0:1.0.0-22.el4idm","redhat-idm-console-0:1.0.0-17.el5idm"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0889.json"},{"CVE":"CVE-2007-4639","severity":"moderate","public_date":"2007-08-29T00:00:00Z","advisories":["RHSA-2007:0895"],"bugzilla":"284521","bugzilla_description":"CVE-2007-4639 EnterpriseDB security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["EnterpriseDB-0:8.1.9.27-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4639.json"},{"CVE":"CVE-2008-1677","severity":"critical","public_date":"2006-02-23T00:00:00Z","advisories":["RHSA-2008:0269","RHSA-2008:0268"],"bugzilla":"444712","bugzilla_description":"CVE-2008-1677 Directory Server: insufficient buffer size for search patterns","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["redhat-ds-base-0:8.0.3-16.el4dsrv","redhat-ds-base-0:8.0.3-16.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1677.json"},{"CVE":"CVE-2005-1686","severity":"moderate","public_date":"2005-05-20T00:00:00Z","advisories":["RHSA-2005:499"],"bugzilla":"1617658","bugzilla_description":"CVE-2005-1686 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gedit-1:2.2.2-4.rhel3","gedit-1:2.8.1-4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1686.json"},{"CVE":"CVE-2004-0750","severity":"low","public_date":"2004-09-22T00:00:00Z","advisories":["RHSA-2004:434"],"bugzilla":"1617263","bugzilla_description":"CVE-2004-0750 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["redhat-config-nfs-0:1.0.13-6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0750.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/edac-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/edac-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/edac-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efax_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efax_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efax_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efibootmgr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efibootmgr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efibootmgr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efivar-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efivar-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efivar-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efivar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efivar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/efivar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ekiga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ekiga_security_api_results.json
new file mode 100644
index 0000000..2992a97
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ekiga_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-1830","severity":"low","public_date":"2019-04-22T00:00:00Z","advisories":[],"bugzilla":"1702224","bugzilla_description":"CVE-2011-1830 ekiga: attempted to load a module from /tmp/ekiga_test.so","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1830.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2012-5621","severity":"moderate","public_date":"2011-06-20T00:00:00Z","advisories":[],"bugzilla":"883058","bugzilla_description":"CVE-2012-5621 ekiga: DoS (crash) after receiving call from other party with not UTF-8 valid name","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5621.json"},{"CVE":"CVE-2007-0999","severity":"critical","public_date":"2007-03-14T00:00:00Z","advisories":["RHSA-2007:0087"],"bugzilla":"1618289","bugzilla_description":"CVE-2007-0999 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ekiga-0:2.0.2-7.0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0999.json"},{"CVE":"CVE-2007-1006","severity":"critical","public_date":"2007-02-13T00:00:00Z","advisories":["RHSA-2007:0087"],"bugzilla":"229259","bugzilla_description":"CVE-2007-1006 Ekiga format string flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ekiga-0:2.0.2-7.0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1006.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-default-yama-scope_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-default-yama-scope_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-default-yama-scope_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-libelf-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-libelf-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-libelf-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-libelf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-libelf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-libelf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils_security_api_results.json
new file mode 100644
index 0000000..814431a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elfutils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-7149","severity":"low","public_date":"2019-01-18T00:00:00Z","advisories":["RHSA-2019:3575","RHSA-2019:2197"],"bugzilla":"1671443","bugzilla_description":"CVE-2019-7149 elfutils: heap-based buffer over-read in read_srclines in dwarf_getsrclines.c in libdw","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["elfutils-0:0.176-2.el7","elfutils-0:0.176-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7149.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-7665","severity":"low","public_date":"2019-01-12T00:00:00Z","advisories":["RHSA-2019:3575","RHSA-2019:2197"],"bugzilla":"1677538","bugzilla_description":"CVE-2019-7665 elfutils: heap-based buffer over-read in function elf32_xlatetom in elf32_xlatetom.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["elfutils-0:0.176-2.el7","elfutils-0:0.176-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7665.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-7148","severity":null,"public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1671439","bugzilla_description":"CVE-2019-7148 elfutils: excessive memory allocation in read_long_names in elf_begin.c in libelf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7148.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-7664","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2019:3575","RHSA-2019:2197"],"bugzilla":"1677536","bugzilla_description":"CVE-2019-7664 elfutils: out of bound write in elf_cvt_note in libelf/note_xlate.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["elfutils-0:0.176-2.el7","elfutils-0:0.176-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7664.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-7146","severity":"low","public_date":"2019-01-09T00:00:00Z","advisories":["RHSA-2019:3575"],"bugzilla":"1671432","bugzilla_description":"CVE-2019-7146 elfutils: buffer over-read in the ebl_object_note function in eblobjnote.c in libebl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["elfutils-0:0.176-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7146.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18520","severity":"low","public_date":"2018-10-17T00:00:00Z","advisories":["RHSA-2019:2197"],"bugzilla":"1646477","bugzilla_description":"CVE-2018-18520 elfutils: eu-size cannot handle recursive ar files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["elfutils-0:0.176-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18520.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18521","severity":"low","public_date":"2018-10-17T00:00:00Z","advisories":["RHSA-2019:2197"],"bugzilla":"1646482","bugzilla_description":"CVE-2018-18521 elfutils: Divide-by-zero in arlib_add_symbols function in arlib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["elfutils-0:0.176-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18521.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18310","severity":"low","public_date":"2018-10-10T00:00:00Z","advisories":["RHSA-2019:2197"],"bugzilla":"1642604","bugzilla_description":"CVE-2018-18310 elfutils: invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["elfutils-0:0.176-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18310.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-7150","severity":"low","public_date":"2018-10-10T00:00:00Z","advisories":["RHSA-2019:3575","RHSA-2019:2197"],"bugzilla":"1671446","bugzilla_description":"CVE-2019-7150 elfutils: segmentation fault in elf64_xlatetom in libelf/elf32_xlatetom.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["elfutils-0:0.176-2.el7","elfutils-0:0.176-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7150.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16062","severity":"low","public_date":"2018-08-17T00:00:00Z","advisories":["RHSA-2019:2197"],"bugzilla":"1623752","bugzilla_description":"CVE-2018-16062 elfutils: Heap-based buffer over-read in libdw/dwarf_getaranges.c:dwarf_getaranges() via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["elfutils-0:0.176-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16062.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16402","severity":"low","public_date":"2018-08-15T00:00:00Z","advisories":["RHSA-2020:1471","RHSA-2019:2197"],"bugzilla":"1625050","bugzilla_description":"CVE-2018-16402 elfutils: Double-free due to double decompression of sections in crafted ELF causes crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["elfutils-0:0.176-2.el7","elfutils-0:0.172-4.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16402.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16403","severity":"low","public_date":"2018-08-15T00:00:00Z","advisories":["RHSA-2019:2197"],"bugzilla":"1625055","bugzilla_description":"CVE-2018-16403 elfutils: Heap-based buffer over-read in libdw/dwarf_getabbrev.c and libwd/dwarf_hasattr.c causes crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122->CWE-125","affected_packages":["elfutils-0:0.176-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16403.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8769","severity":"low","public_date":"2018-03-18T00:00:00Z","advisories":[],"bugzilla":"1559241","bugzilla_description":"CVE-2018-8769 elfutils: buffer over-read in ebldynamictagname.c:ebl_dynamic_tag_name() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8769.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7607","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":[],"bugzilla":"1441613","bugzilla_description":"CVE-2017-7607 elfutils: Heap-buffer overflow in the handle_gnu_hash function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7607.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7608","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":[],"bugzilla":"1441624","bugzilla_description":"CVE-2017-7608 elfutils: Heap-buffer overflow in the ebl_object_note_type_name function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7608.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7609","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":[],"bugzilla":"1441625","bugzilla_description":"CVE-2017-7609 elfutils: Memory allocation failure in elf_compress.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7609.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7610","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":[],"bugzilla":"1441626","bugzilla_description":"CVE-2017-7610 elfutils: Heap-buffer overflow in the check_group function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7610.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7611","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":[],"bugzilla":"1441627","bugzilla_description":"CVE-2017-7611 elfutils: Heap-buffer overflow in the check_symtab_shndx function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7611.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7612","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":[],"bugzilla":"1441628","bugzilla_description":"CVE-2017-7612 elfutils: Heap-buffer overflow in the check_sysv_hash function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7612.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7613","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":[],"bugzilla":"1441629","bugzilla_description":"CVE-2017-7613 elfutils: elflint.c does not validate the number of sections and segments","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7613.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10255","severity":"low","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1435182","bugzilla_description":"CVE-2016-10255 elfutils: Memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10255.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10254","severity":"low","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1435183","bugzilla_description":"CVE-2016-10254 elfutils: Memory allocation failure in allocate_elf","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10254.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-9447","severity":"low","public_date":"2014-12-27T00:00:00Z","advisories":["RHEA-2015:1302","RHEA-2015:2126"],"bugzilla":"1178888","bugzilla_description":"CVE-2014-9447 elfutils: directory traversal in read_long_names()","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-73","affected_packages":["elfutils-0:0.161-3.el6","elfutils-0:0.163-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9447.json"},{"CVE":"CVE-2014-0172","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":["RHEA-2015:0369"],"bugzilla":"1085663","bugzilla_description":"CVE-2014-0172 elfutils: integer overflow, leading to a heap-based buffer overflow in libdw","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["elfutils-0:0.160-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0172.json"},{"CVE":"CVE-2005-1704","severity":"low","public_date":"2005-05-25T00:00:00Z","advisories":["RHBA-2005:675","RHSA-2005:763","RHSA-2005:673","RHSA-2006:0368","RHSA-2005:709","RHSA-2006:0354","RHSA-2005:801","RHSA-2005:659"],"bugzilla":"1617660","bugzilla_description":"CVE-2005-1704 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.63","binutils-0:2.14.90.0.4-39","elfutils-0:0.94.1-2","binutils-0:2.15.92.0.2-15","elfutils-0:0.97.1-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1704.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elinks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elinks_security_api_results.json
new file mode 100644
index 0000000..b5ab368
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/elinks_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-6709","severity":"moderate","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881399","bugzilla_description":"CVE-2012-6709 elinks/links: does not properly verify SSL certificates","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6709.json"},{"CVE":"CVE-2012-4545","severity":"moderate","public_date":"2012-10-30T00:00:00Z","advisories":["RHSA-2013:0250"],"bugzilla":"864566","bugzilla_description":"CVE-2012-4545 elinks: Improper delegation of client credentials during GSS negotiation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["elinks-0:0.12-0.21.pre5.el6_3","elinks-0:0.11.1-8.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4545.json"},{"CVE":"CVE-2007-2027","severity":"low","public_date":"2007-04-04T00:00:00Z","advisories":["RHSA-2009:1471"],"bugzilla":"235411","bugzilla_description":"CVE-2007-2027 elinks tries to load .po files from a non-absolute path","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["elinks-0:0.11.1-6.el5_4.1","elinks-0:0.9.2-4.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2027.json"},{"CVE":"CVE-2007-5034","severity":"moderate","public_date":"2007-02-24T00:00:00Z","advisories":["RHSA-2007:0933"],"bugzilla":"297611","bugzilla_description":"CVE-2007-5034 elinks reveals POST data to HTTPS proxy","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["elinks-0:0.11.1-5.1.0.1.el5","elinks-0:0.9.2-3.3.5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5034.json"},{"CVE":"CVE-2006-5925","severity":"critical","public_date":"2006-11-15T01:51:00Z","advisories":["RHSA-2006:0742"],"bugzilla":"1618231","bugzilla_description":"CVE-2006-5925 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["elinks-0:0.9.2-3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5925.json"},{"CVE":"CVE-2008-7224","severity":"important","public_date":"2006-07-29T00:00:00Z","advisories":["RHSA-2009:1471"],"bugzilla":"523258","bugzilla_description":"CVE-2008-7224 elinks: entity_cache static array buffer overflow (off-by-one)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":["elinks-0:0.11.1-6.el5_4.1","elinks-0:0.9.2-4.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-7224.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-auctex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-auctex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-auctex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-gnuplot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-gnuplot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-gnuplot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-nox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-nox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-nox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-php-mode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-php-mode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs-php-mode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs_security_api_results.json
new file mode 100644
index 0000000..37f7a6d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/emacs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-1000383","severity":"low","public_date":"2017-10-31T00:00:00Z","advisories":[],"bugzilla":"1508788","bugzilla_description":"CVE-2017-1000383 emacs: Ignores umask when creating a swap file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000383.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-14482","severity":"important","public_date":"2017-09-04T00:00:00Z","advisories":["RHSA-2017:2771"],"bugzilla":"1490409","bugzilla_description":"CVE-2017-14482 emacs: command injection flaw within \"enriched mode\" handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["emacs-1:24.3-20.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14482.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2014-3421","severity":"low","public_date":"2014-05-05T00:00:00Z","advisories":[],"bugzilla":"1095586","bugzilla_description":"CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 emacs: multiple temporary file issues","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3421.json"},{"CVE":"CVE-2014-3422","severity":"low","public_date":"2014-05-05T00:00:00Z","advisories":[],"bugzilla":"1095586","bugzilla_description":"CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 emacs: multiple temporary file issues","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3422.json"},{"CVE":"CVE-2014-3423","severity":"low","public_date":"2014-05-05T00:00:00Z","advisories":[],"bugzilla":"1095586","bugzilla_description":"CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 emacs: multiple temporary file issues","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3423.json"},{"CVE":"CVE-2014-3424","severity":"low","public_date":"2014-05-05T00:00:00Z","advisories":[],"bugzilla":"1095586","bugzilla_description":"CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 emacs: multiple temporary file issues","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3424.json"},{"CVE":"CVE-2012-3479","severity":"low","public_date":"2012-08-07T00:00:00Z","advisories":[],"bugzilla":"847698","bugzilla_description":"CVE-2012-3479 emacs: Evaluation of 'eval' forms in file-local variable sections, when 'enable-local-variables' set to ':safe'","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3479.json"},{"CVE":"CVE-2012-0035","severity":"low","public_date":"2012-01-09T00:00:00Z","advisories":[],"bugzilla":"773023","bugzilla_description":"CVE-2012-0035 emacs: CEDET global-ede-mode file loading vulnerability","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0035.json"},{"CVE":"CVE-2009-2688","severity":"low","public_date":"2009-06-25T00:00:00Z","advisories":[],"bugzilla":"511994","bugzilla_description":"CVE-2009-2688 xemacs: multiple integer overflow flaws","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2688.json"},{"CVE":"CVE-2008-4191","severity":"low","public_date":"2008-08-24T00:00:00Z","advisories":[],"bugzilla":"460435","bugzilla_description":"CVE-2008-4191 emacspeak: Insecure auxiliary /tmp file usage (symlink attack possible)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4191.json"},{"CVE":"CVE-2008-2142","severity":"low","public_date":"2008-05-09T00:00:00Z","advisories":[],"bugzilla":"446069","bugzilla_description":"CVE-2008-2142 emacs: fast-lock-mode arbitrary lisp code execution","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2142.json"},{"CVE":"CVE-2008-1694","severity":"low","public_date":"2008-04-11T00:00:00Z","advisories":[],"bugzilla":"208483","bugzilla_description":"CVE-2008-1694 emacs insecure /tmp file usage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1694.json"},{"CVE":"CVE-2005-0100","severity":"important","public_date":"2005-02-06T00:00:00Z","advisories":["RHSA-2005:133","RHSA-2005:112","RHSA-2005:134","RHSA-2005:110"],"bugzilla":"1617459","bugzilla_description":"CVE-2005-0100 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xemacs-0:21.4.15-10.EL.1","xemacs-0:21.4.13-8.ent.1","emacs-0:21.3-4.1","emacs-0:21.3-19.EL.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0100.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/empathy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/empathy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/empathy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/enchant_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/enchant_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/enchant_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/enscript_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/enscript_security_api_results.json
new file mode 100644
index 0000000..9ea4ebe
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/enscript_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2008-5078","severity":"moderate","public_date":"2008-12-15T00:00:00Z","advisories":["RHSA-2008:1021"],"bugzilla":"473958","bugzilla_description":"CVE-2008-5078 enscript: \"epsf\" special escape buffer overflows","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["enscript-0:1.6.1-24.7","enscript-0:1.6.1-33.el4_7.1","enscript-0:1.6.1-16.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5078.json"},{"CVE":"CVE-2008-4306","severity":"moderate","public_date":"2008-10-29T00:00:00Z","advisories":["RHSA-2008:1021","RHSA-2008:1016"],"bugzilla":"469311","bugzilla_description":"CVE-2008-4306 enscript: \"font\" special escape buffer overflows","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["enscript-0:1.6.1-24.7","enscript-0:1.6.4-4.1.1.el5_2","enscript-0:1.6.1-33.el4_7.1","enscript-0:1.6.1-16.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4306.json"},{"CVE":"CVE-2008-3863","severity":"moderate","public_date":"2008-10-22T00:00:00Z","advisories":["RHSA-2008:1021","RHSA-2008:1016"],"bugzilla":"466771","bugzilla_description":"CVE-2008-3863 enscript: \"setfilename\" special escape buffer overflow","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["enscript-0:1.6.1-24.7","enscript-0:1.6.4-4.1.1.el5_2","enscript-0:1.6.1-33.el4_7.1","enscript-0:1.6.1-16.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3863.json"},{"CVE":"CVE-2004-1184","severity":"low","public_date":"2005-01-20T00:00:00Z","advisories":["RHSA-2005:039","RHSA-2005:040"],"bugzilla":"1617391","bugzilla_description":"CVE-2004-1184 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["enscript-0:1.6.1-28.3","enscript-0:1.6.1-24.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1184.json"},{"CVE":"CVE-2004-1185","severity":"low","public_date":"2005-01-20T00:00:00Z","advisories":["RHSA-2005:039","RHSA-2005:040"],"bugzilla":"1617392","bugzilla_description":"CVE-2004-1185 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["enscript-0:1.6.1-28.3","enscript-0:1.6.1-24.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1185.json"},{"CVE":"CVE-2004-1186","severity":"low","public_date":"2005-01-20T00:00:00Z","advisories":["RHSA-2005:039","RHSA-2005:040"],"bugzilla":"1617393","bugzilla_description":"CVE-2004-1186 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["enscript-0:1.6.1-28.3","enscript-0:1.6.1-24.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1186.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/environment-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/environment-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/environment-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/eog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/eog_security_api_results.json
new file mode 100644
index 0000000..97bb320
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/eog_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-6855","severity":"low","public_date":"2016-08-19T00:00:00Z","advisories":[],"bugzilla":"1369087","bugzilla_description":"CVE-2016-6855 eog: Out-of-bounds write when passing invalid UTF-8 to GMarkup","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6855.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/esc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/esc_security_api_results.json
new file mode 100644
index 0000000..b755a02
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/esc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-26160","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1883371","bugzilla_description":"CVE-2020-26160 jwt-go: access restriction bypass vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26160.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5146","severity":"critical","public_date":"2018-03-16T00:00:00Z","advisories":["RHSA-2018:0649","RHSA-2018:0647","RHSA-2018:0549","RHSA-2018:0648","RHSA-2018:1058"],"bugzilla":"1557221","bugzilla_description":"CVE-2018-5146 Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvorbis-1:1.2.3-5.el6_9.1","libvorbis-1:1.3.3-8.el7.1","thunderbird-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el6_9","firefox-0:52.7.2-1.el6_9","firefox-0:52.7.2-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5146.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/espeak_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/espeak_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/espeak_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ethtool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ethtool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ethtool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince-dvi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince-dvi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince-dvi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince-nautilus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince-nautilus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince-nautilus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince_security_api_results.json
new file mode 100644
index 0000000..eff8807
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evince_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-1010006","severity":"moderate","public_date":"2019-07-14T00:00:00Z","advisories":[],"bugzilla":"1730582","bugzilla_description":"CVE-2019-1010006 evince: buffer overflow in backend/tiff/tiff-document.c leads to DOS/possible code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120->(CWE-400|CWE-94)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010006.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11459","severity":"low","public_date":"2019-04-13T00:00:00Z","advisories":["RHSA-2020:1074","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1716295","bugzilla_description":"CVE-2019-11459 evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["evince-0:3.28.4-3.el8","evince-0:3.28.2-9.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11459.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000159","severity":"moderate","public_date":"2017-07-14T00:00:00Z","advisories":[],"bugzilla":"1521210","bugzilla_description":"CVE-2017-1000159 evince: Command injection when exporting to PDF","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000159.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-1000083","severity":"important","public_date":"2017-07-13T00:00:00Z","advisories":["RHSA-2017:2388"],"bugzilla":"1468488","bugzilla_description":"CVE-2017-1000083 evince: command injection via filename in tar-compressed comics archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["evince-0:3.22.1-5.2.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000083.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2017-9083","severity":"low","public_date":"2017-05-18T00:00:00Z","advisories":[],"bugzilla":"1453198","bugzilla_description":"CVE-2017-9083 poppler: Null pointer dereference in the JPXStream::readUByte function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9083.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2013-3718","severity":"moderate","public_date":"2013-05-30T00:00:00Z","advisories":[],"bugzilla":"1365025","bugzilla_description":"CVE-2013-3718 evince: Missing check of number of pages leads to segmentation fault","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3718.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2011-5244","severity":"moderate","public_date":"2011-03-04T00:00:00Z","advisories":[],"bugzilla":"878483","bugzilla_description":"CVE-2011-5244 t1lib: off-by-one errors in token and linetoken","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5244.json"},{"CVE":"CVE-2011-0433","severity":"moderate","public_date":"2011-01-30T00:00:00Z","advisories":["RHSA-2012:0062","RHSA-2012:1201","RHSA-2012:0137"],"bugzilla":"679732","bugzilla_description":"CVE-2011-0433 t1lib: Heap-based buffer overflow DVI file AFM font parser","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["texlive-0:2007-57.el6_2","tetex-0:3.0-33.15.el5_8.1","t1lib-0:5.1.2-6.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0433.json"},{"CVE":"CVE-2010-2640","severity":"moderate","public_date":"2011-01-05T00:00:00Z","advisories":["RHSA-2011:0009"],"bugzilla":"666313","bugzilla_description":"CVE-2010-2640 evince: Array index errror in DVI file PK font parser","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["evince-0:2.28.2-14.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2640.json"},{"CVE":"CVE-2010-2641","severity":"moderate","public_date":"2011-01-05T00:00:00Z","advisories":["RHSA-2011:0009"],"bugzilla":"666314","bugzilla_description":"CVE-2010-2641 evince: Array index errror in DVI file VF font parser","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["evince-0:2.28.2-14.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2641.json"},{"CVE":"CVE-2010-2642","severity":"moderate","public_date":"2011-01-05T00:00:00Z","advisories":["RHSA-2012:0062","RHSA-2012:1201","RHSA-2012:0137","RHSA-2011:0009"],"bugzilla":"666318","bugzilla_description":"CVE-2010-2642 t1lib: Heap based buffer overflow in DVI file AFM font parser","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["texlive-0:2007-57.el6_2","evince-0:2.28.2-14.el6_0.1","tetex-0:3.0-33.15.el5_8.1","t1lib-0:5.1.2-6.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2642.json"},{"CVE":"CVE-2010-2643","severity":"moderate","public_date":"2011-01-05T00:00:00Z","advisories":["RHSA-2011:0009"],"bugzilla":"666321","bugzilla_description":"CVE-2010-2643 evince: Integer overflow in DVI file TFM font parser","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["evince-0:2.28.2-14.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2643.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-data-server-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-data-server-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-data-server-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-data-server-langpacks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-data-server-langpacks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-data-server-langpacks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-data-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-data-server_security_api_results.json
new file mode 100644
index 0000000..44dc6da
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-data-server_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16117","severity":"low","public_date":"2020-07-30T00:00:00Z","advisories":[],"bugzilla":"1862125","bugzilla_description":"CVE-2020-16117 evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16117.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-14928","severity":"low","public_date":"2020-07-04T00:00:00Z","advisories":[],"bugzilla":"1857470","bugzilla_description":"CVE-2020-14928 evolution-data-server: Response Injection via STARTTLS in SMTP and POP3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14928.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-3890","severity":"moderate","public_date":"2019-02-15T00:00:00Z","advisories":["RHSA-2019:3699","RHSA-2020:1080"],"bugzilla":"1678313","bugzilla_description":"CVE-2019-3890 evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-online-accounts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-295|CWE-296)","affected_packages":["evolution-data-server-0:3.28.5-11.el8","evolution-ews-0:3.28.5-5.el7","evolution-data-server-0:3.28.5-4.el7","evolution-ews-0:3.28.5-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2018-12422","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":[],"bugzilla":"1592624","bugzilla_description":"CVE-2018-12422 evolution-data-server: Unsafe use of strcat allows buffer overflow in addressbook/backends/ldap/e-book-backend-ldap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-10727","severity":"moderate","public_date":"2016-05-10T00:00:00Z","advisories":["RHBA-2016:2206"],"bugzilla":"1609916","bugzilla_description":"CVE-2016-10727 evolution-data-server: IMAPx Component Information Disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393->CWE-201","affected_packages":["evolution-data-server-0:3.12.11-37.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10727.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2011-3355","severity":"low","public_date":"2011-04-19T00:00:00Z","advisories":[],"bugzilla":"707848","bugzilla_description":"CVE-2011-3355 evolution: IMAP does non-SSL connection when storing to Sent folder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3355.json"},{"CVE":"CVE-2009-0582","severity":"moderate","public_date":"2009-03-12T00:00:00Z","advisories":["RHSA-2009:0355","RHSA-2009:0358","RHSA-2009:0354"],"bugzilla":"487685","bugzilla_description":"CVE-2009-0582 evolution-data-server: insufficient checking of NTLM authentication challenge packets","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["evolution28-evolution-data-server-0:1.8.0-37.el4_7.2","evolution-data-server-0:1.12.3-10.el5_3.3","evolution-0:1.4.5-25.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0582.json"},{"CVE":"CVE-2009-0587","severity":"low","public_date":"2009-03-12T00:00:00Z","advisories":["RHSA-2009:0355","RHSA-2009:0358","RHSA-2009:0354"],"bugzilla":"488226","bugzilla_description":"CVE-2009-0587 evolution-data-server: integer overflow in base64 encoding functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["evolution28-evolution-data-server-0:1.8.0-37.el4_7.2","evolution-data-server-0:1.12.3-10.el5_3.3","evolution-0:1.4.5-25.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0587.json"},{"CVE":"CVE-2009-0547","severity":"moderate","public_date":"2008-12-11T00:00:00Z","advisories":["RHSA-2009:0355","RHSA-2009:0354"],"bugzilla":"484925","bugzilla_description":"CVE-2009-0547 evolution-data-server: S/MIME signatures are considered to be valid even for modified messages (MITM)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["evolution28-evolution-data-server-0:1.8.0-37.el4_7.2","evolution-data-server-0:1.12.3-10.el5_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0547.json"},{"CVE":"CVE-2007-3257","severity":"important","public_date":"2007-06-14T00:00:00Z","advisories":["RHSA-2007:0509","RHSA-2007:0510"],"bugzilla":"244277","bugzilla_description":"CVE-2007-3257 evolution malicious server arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["evolution-0:2.0.2-35.0.4.el4","evolution-data-server-0:1.8.0-15.0.4.el5","evolution-0:1.4.5-21.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3257.json"},{"CVE":"CVE-2007-1558","severity":"moderate","public_date":"2007-04-02T00:00:00Z","advisories":["RHSA-2009:1140","RHSA-2007:0385","RHSA-2007:0344","RHSA-2007:0353","RHSA-2007:0386","RHSA-2007:0401","RHSA-2007:0402"],"bugzilla":"241191","bugzilla_description":"CVE-2007-1558 fetchmail/mutt/evolution/...: APOP password disclosure vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:1.5.0.12-0.1.el4","evolution-0:2.0.2-35.0.2.el4","fetchmail-0:5.9.0-21.7.3.el2.1.6","mutt-5:1.4.1-5.el3","fetchmail-0:6.2.5-6.0.1.el4","ruby-0:1.8.1-7.el4_8.3","evolution-data-server-0:1.8.0-15.0.3.el5","thunderbird-0:1.5.0.12-1.el5","ruby-0:1.8.5-5.el5_3.7","fetchmail-0:6.3.6-1.0.1.el5","mutt-5:1.4.2.2-3.0.2.el5","mutt-5:1.4.1-12.0.3.el4","evolution-0:1.4.5-20.el3","seamonkey-0:1.0.9-0.1.el3","seamonkey-0:1.0.9-0.1.el2","fetchmail-0:6.2.0-3.el3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1558.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-ews-langpacks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-ews-langpacks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-ews-langpacks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-ews_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-ews_security_api_results.json
new file mode 100644
index 0000000..bd4f5a4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-ews_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-3890","severity":"moderate","public_date":"2019-02-15T00:00:00Z","advisories":["RHSA-2019:3699","RHSA-2020:1080"],"bugzilla":"1678313","bugzilla_description":"CVE-2019-3890 evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-online-accounts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-295|CWE-296)","affected_packages":["evolution-data-server-0:3.28.5-11.el8","evolution-ews-0:3.28.5-5.el7","evolution-data-server-0:3.28.5-4.el7","evolution-ews-0:3.28.5-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-help_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-help_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-help_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-langpacks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-langpacks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-langpacks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-mapi-langpacks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-mapi-langpacks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-mapi-langpacks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-mapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-mapi_security_api_results.json
new file mode 100644
index 0000000..6439c64
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution-mapi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-1182","severity":"critical","public_date":"2012-04-10T00:00:00Z","advisories":["RHSA-2013:0515","RHSA-2013:0506","RHSA-2012:0465","RHSA-2012:0466","RHSA-2012:0478"],"bugzilla":"804093","bugzilla_description":"CVE-2012-1182 samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-122","affected_packages":["samba4-0:4.0.0-55.el6.rc4","samba-0:3.5.6-86.el6_1.5","openchange-0:1.0-4.el6","evolution-mapi-0:0.28.3-12.el6","samba-0:3.5.4-68.el6_0.3","samba-0:3.0.33-3.36.el4","samba-0:3.0.33-3.29.el5_6.5","samba3x-0:3.5.4-0.70.el5_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1182.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution_security_api_results.json
new file mode 100644
index 0000000..aa2c105
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/evolution_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16117","severity":"low","public_date":"2020-07-30T00:00:00Z","advisories":[],"bugzilla":"1862125","bugzilla_description":"CVE-2020-16117 evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16117.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-14928","severity":"low","public_date":"2020-07-04T00:00:00Z","advisories":[],"bugzilla":"1857470","bugzilla_description":"CVE-2020-14928 evolution-data-server: Response Injection via STARTTLS in SMTP and POP3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14928.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-11879","severity":"moderate","public_date":"2020-04-17T00:00:00Z","advisories":[],"bugzilla":"1867605","bugzilla_description":"CVE-2020-11879 evolution: attaching local filed/directories to composed email can lead to unintended information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11879.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-3890","severity":"moderate","public_date":"2019-02-15T00:00:00Z","advisories":["RHSA-2019:3699","RHSA-2020:1080"],"bugzilla":"1678313","bugzilla_description":"CVE-2019-3890 evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-online-accounts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-295|CWE-296)","affected_packages":["evolution-data-server-0:3.28.5-11.el8","evolution-ews-0:3.28.5-5.el7","evolution-data-server-0:3.28.5-4.el7","evolution-ews-0:3.28.5-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2018-15587","severity":"moderate","public_date":"2018-05-27T00:00:00Z","advisories":["RHSA-2020:1600","RHSA-2020:1080"],"bugzilla":"1677650","bugzilla_description":"CVE-2018-15587 evolution: specially crafted email leading to OpenPGP signatures being spoofed for arbitrary messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-290|CWE-347)","affected_packages":["evolution-0:3.28.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15587.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-12422","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":[],"bugzilla":"1592624","bugzilla_description":"CVE-2018-12422 evolution-data-server: Unsafe use of strcat allows buffer overflow in addressbook/backends/ldap/e-book-backend-ldap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-10727","severity":"moderate","public_date":"2016-05-10T00:00:00Z","advisories":["RHBA-2016:2206"],"bugzilla":"1609916","bugzilla_description":"CVE-2016-10727 evolution-data-server: IMAPx Component Information Disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393->CWE-201","affected_packages":["evolution-data-server-0:3.12.11-37.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10727.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2013-4166","severity":"low","public_date":"2013-07-22T00:00:00Z","advisories":["RHSA-2013:1540"],"bugzilla":"973728","bugzilla_description":"CVE-2013-4166 evolution: incorrect selection of recipient gpg public key for encrypted mail","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-697","affected_packages":["evolution-0:2.32.3-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4166.json"},{"CVE":"CVE-2012-1182","severity":"critical","public_date":"2012-04-10T00:00:00Z","advisories":["RHSA-2013:0515","RHSA-2013:0506","RHSA-2012:0465","RHSA-2012:0466","RHSA-2012:0478"],"bugzilla":"804093","bugzilla_description":"CVE-2012-1182 samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-122","affected_packages":["samba4-0:4.0.0-55.el6.rc4","samba-0:3.5.6-86.el6_1.5","openchange-0:1.0-4.el6","evolution-mapi-0:0.28.3-12.el6","samba-0:3.5.4-68.el6_0.3","samba-0:3.0.33-3.36.el4","samba-0:3.0.33-3.29.el5_6.5","samba3x-0:3.5.4-0.70.el5_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1182.json"},{"CVE":"CVE-2011-3201","severity":"low","public_date":"2011-08-25T00:00:00Z","advisories":["RHSA-2013:0516"],"bugzilla":"733504","bugzilla_description":"CVE-2011-3201 evolution: mailto URL scheme attachment header improper input validation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-356","affected_packages":["evolution-0:2.28.3-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3201.json"},{"CVE":"CVE-2011-3193","severity":"moderate","public_date":"2011-07-19T00:00:00Z","advisories":["RHSA-2011:1323","RHSA-2011:1324","RHSA-2011:1325","RHSA-2011:1326","RHSA-2011:1327","RHSA-2011:1328"],"bugzilla":"733118","bugzilla_description":"CVE-2011-3193 qt/harfbuzz buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qt-1:4.6.2-17.el6_1.1","pango-0:1.14.9-8.el5_7.3","qt4-0:4.2.1-1.el5_7.1","frysk-0:0.0.1.2007.08.03-8.el4","evolution28-pango-0:1.14.9-13.el4_11","qt-1:4.6.2-20.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3193.json"},{"CVE":"CVE-2011-2485","severity":"low","public_date":"2011-06-23T00:00:00Z","advisories":[],"bugzilla":"715337","bugzilla_description":"CVE-2011-2485 gdk-pixbuf: incorrect error detection in the GIF image loader","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2485.json"},{"CVE":"CVE-2011-3355","severity":"low","public_date":"2011-04-19T00:00:00Z","advisories":[],"bugzilla":"707848","bugzilla_description":"CVE-2011-3355 evolution: IMAP does non-SSL connection when storing to Sent folder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3355.json"},{"CVE":"CVE-2011-0064","severity":"critical","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0309"],"bugzilla":"678563","bugzilla_description":"CVE-2011-0064 pango: missing memory reallocation failure checking in hb_buffer_ensure","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["pango-0:1.28.1-3.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0064.json"},{"CVE":"CVE-2011-0020","severity":"moderate","public_date":"2011-01-18T00:00:00Z","advisories":["RHSA-2011:0180"],"bugzilla":"671122","bugzilla_description":"CVE-2011-0020 pango: Heap-based buffer overflow by rendering glyph box for certain FT_Bitmap objects","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P/","CWE":"CWE-122","affected_packages":["pango-0:1.14.9-8.el5_6.2","pango-0:1.28.1-3.el6_0.3","evolution28-pango-0:1.14.9-13.el4_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0020.json"},{"CVE":"CVE-2009-0582","severity":"moderate","public_date":"2009-03-12T00:00:00Z","advisories":["RHSA-2009:0355","RHSA-2009:0358","RHSA-2009:0354"],"bugzilla":"487685","bugzilla_description":"CVE-2009-0582 evolution-data-server: insufficient checking of NTLM authentication challenge packets","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["evolution28-evolution-data-server-0:1.8.0-37.el4_7.2","evolution-data-server-0:1.12.3-10.el5_3.3","evolution-0:1.4.5-25.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0582.json"},{"CVE":"CVE-2009-0587","severity":"low","public_date":"2009-03-12T00:00:00Z","advisories":["RHSA-2009:0355","RHSA-2009:0358","RHSA-2009:0354"],"bugzilla":"488226","bugzilla_description":"CVE-2009-0587 evolution-data-server: integer overflow in base64 encoding functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["evolution28-evolution-data-server-0:1.8.0-37.el4_7.2","evolution-data-server-0:1.12.3-10.el5_3.3","evolution-0:1.4.5-25.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0587.json"},{"CVE":"CVE-2009-0547","severity":"moderate","public_date":"2008-12-11T00:00:00Z","advisories":["RHSA-2009:0355","RHSA-2009:0354"],"bugzilla":"484925","bugzilla_description":"CVE-2009-0547 evolution-data-server: S/MIME signatures are considered to be valid even for modified messages (MITM)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["evolution28-evolution-data-server-0:1.8.0-37.el4_7.2","evolution-data-server-0:1.12.3-10.el5_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0547.json"},{"CVE":"CVE-2008-1108","severity":"critical","public_date":"2008-06-04T00:00:00Z","advisories":["RHSA-2008:0517","RHSA-2008:0516","RHSA-2008:0515","RHSA-2008:0514"],"bugzilla":"448540","bugzilla_description":"CVE-2008-1108 evolution: iCalendar buffer overflow via large timezone specification","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["evolution-0:1.4.5-22.el3","evolution28-0:2.8.0-53.el4_6.3","evolution-0:2.0.2-35.0.4.el4_6.2","evolution-0:2.0.2-35.0.4.el4_5.2","evolution-0:2.12.3-8.el5_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1108.json"},{"CVE":"CVE-2008-1109","severity":"important","public_date":"2008-06-04T00:00:00Z","advisories":["RHSA-2008:0515","RHSA-2008:0514"],"bugzilla":"448541","bugzilla_description":"CVE-2008-1109 evolution: iCalendar buffer overflow via large description parameter","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["evolution28-0:2.8.0-53.el4_6.3","evolution-0:2.12.3-8.el5_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1109.json"},{"CVE":"CVE-2008-0072","severity":"critical","public_date":"2008-03-05T00:00:00Z","advisories":["RHSA-2008:0178","RHSA-2008:0177"],"bugzilla":"435759","bugzilla_description":"CVE-2008-0072 Evolution format string flaw","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["evolution-0:2.8.0-40.el5_1.1","evolution-0:2.0.2-35.0.4.el4_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0072.json"},{"CVE":"CVE-2007-3257","severity":"important","public_date":"2007-06-14T00:00:00Z","advisories":["RHSA-2007:0509","RHSA-2007:0510"],"bugzilla":"244277","bugzilla_description":"CVE-2007-3257 evolution malicious server arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["evolution-0:2.0.2-35.0.4.el4","evolution-data-server-0:1.8.0-15.0.4.el5","evolution-0:1.4.5-21.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3257.json"},{"CVE":"CVE-2007-1558","severity":"moderate","public_date":"2007-04-02T00:00:00Z","advisories":["RHSA-2009:1140","RHSA-2007:0385","RHSA-2007:0344","RHSA-2007:0353","RHSA-2007:0386","RHSA-2007:0401","RHSA-2007:0402"],"bugzilla":"241191","bugzilla_description":"CVE-2007-1558 fetchmail/mutt/evolution/...: APOP password disclosure vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:1.5.0.12-0.1.el4","evolution-0:2.0.2-35.0.2.el4","fetchmail-0:5.9.0-21.7.3.el2.1.6","mutt-5:1.4.1-5.el3","fetchmail-0:6.2.5-6.0.1.el4","ruby-0:1.8.1-7.el4_8.3","evolution-data-server-0:1.8.0-15.0.3.el5","thunderbird-0:1.5.0.12-1.el5","ruby-0:1.8.5-5.el5_3.7","fetchmail-0:6.3.6-1.0.1.el5","mutt-5:1.4.2.2-3.0.2.el5","mutt-5:1.4.1-12.0.3.el4","evolution-0:1.4.5-20.el3","seamonkey-0:1.0.9-0.1.el3","seamonkey-0:1.0.9-0.1.el2","fetchmail-0:6.2.0-3.el3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1558.json"},{"CVE":"CVE-2007-1002","severity":"moderate","public_date":"2007-03-28T00:00:00Z","advisories":["RHSA-2007:0158"],"bugzilla":"233587","bugzilla_description":"CVE-2007-1002 evolution format string flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["evolution-0:2.8.0-33.0.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1002.json"},{"CVE":"CVE-2006-0040","severity":"moderate","public_date":"2006-03-01T00:00:00Z","advisories":[],"bugzilla":"183680","bugzilla_description":"CVE-2006-0040 DoS from large email","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0040.json"},{"CVE":"CVE-2005-2549","severity":"important","public_date":"2005-08-10T00:00:00Z","advisories":["RHSA-2005:267"],"bugzilla":"1617731","bugzilla_description":"CVE-2005-2549 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["evolution-0:1.4.5-16","evolution-0:2.0.2-16.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2549.json"},{"CVE":"CVE-2005-2550","severity":"moderate","public_date":"2005-08-10T00:00:00Z","advisories":["RHSA-2005:267"],"bugzilla":"1617732","bugzilla_description":"CVE-2005-2550 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["evolution-0:1.4.5-16","evolution-0:2.0.2-16.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2550.json"},{"CVE":"CVE-2005-0806","severity":"moderate","public_date":"2005-03-20T00:00:00Z","advisories":["RHSA-2005:397"],"bugzilla":"1617583","bugzilla_description":"CVE-2005-0806 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["evolution-0:2.0.2-16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0806.json"},{"CVE":"CVE-2005-0102","severity":"low","public_date":"2005-01-18T00:00:00Z","advisories":["RHSA-2005:397","RHSA-2005:238"],"bugzilla":"1617460","bugzilla_description":"CVE-2005-0102 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["evolution-0:1.4.5-14","evolution-0:2.0.2-16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0102.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/exempi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/exempi_security_api_results.json
new file mode 100644
index 0000000..5de649e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/exempi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-12648","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1594642","bugzilla_description":"CVE-2018-12648 exempi: NULL pointer dereference in WEBP_Support.hpp:WEBP::GetLE32() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-476|CWE-787|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12648.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18238","severity":"low","public_date":"2018-03-20T00:00:00Z","advisories":["RHSA-2019:2048"],"bugzilla":"1558715","bugzilla_description":"CVE-2017-18238 exempi: Infinite loop in TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTime_Support.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["exempi-0:2.2.0-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18238.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7728","severity":"low","public_date":"2018-02-22T00:00:00Z","advisories":[],"bugzilla":"1555155","bugzilla_description":"CVE-2018-7728 exempi: Heap-based buffer overflow in third-party/zuid/interfaces/MD5.cpp:MD5Update() allows for denial of service via crafted TIFF image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7728.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7729","severity":"low","public_date":"2018-02-22T00:00:00Z","advisories":[],"bugzilla":"1555160","bugzilla_description":"CVE-2018-7729 exempi: Stack-based buffer overflow in XMPFiles/source/FileHandlers/PostScript_Handler.cpp:PostScript_MetaHandler::ParsePSFile() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7729.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7730","severity":"low","public_date":"2018-02-22T00:00:00Z","advisories":["RHSA-2019:2048"],"bugzilla":"1555163","bugzilla_description":"CVE-2018-7730 exempi: Heap-based buffer overflow in PSD_MetaHandler::CacheFileData function in XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp allows for denial of service via crafted XLS file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["exempi-0:2.2.0-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7730.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7731","severity":"low","public_date":"2018-02-22T00:00:00Z","advisories":[],"bugzilla":"1555164","bugzilla_description":"CVE-2018-7731 exempi: NULL pointer dereference in XMPFiles/source/FormatSupport/WEBP_Support.cpp:WEBP::VP8XChunk allows for denial of service via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7731.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18236","severity":"low","public_date":"2017-08-30T00:00:00Z","advisories":["RHSA-2019:2048"],"bugzilla":"1559596","bugzilla_description":"CVE-2017-18236 exempi: Infinite loop in ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSupport/ASF_Support.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["exempi-0:2.2.0-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18236.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18233","severity":"low","public_date":"2017-08-11T00:00:00Z","advisories":["RHSA-2019:2048"],"bugzilla":"1559575","bugzilla_description":"CVE-2017-18233 exempi: Infinite Loop in Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-835","affected_packages":["exempi-0:2.2.0-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18233.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18235","severity":"low","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1559595","bugzilla_description":"CVE-2017-18235 exempi: assertion failure in VPXChunk class in XMPFiles/source/FormatSupport/WEBP_Support.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18235.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18237","severity":"low","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1559599","bugzilla_description":"CVE-2017-18237 exempi:  null pointer dereference in PostScript_Support::ConvertToDate function in XMPFiles/source/FormatSupport/PostScript_Support.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18237.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18234","severity":"low","public_date":"2017-03-25T00:00:00Z","advisories":["RHSA-2019:2048"],"bugzilla":"1559590","bugzilla_description":"CVE-2017-18234 exempi: Use after free via a PDF file containing JPEG data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-416","affected_packages":["exempi-0:2.2.0-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18234.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/exiv2-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/exiv2-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/exiv2-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/exiv2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/exiv2_security_api_results.json
new file mode 100644
index 0000000..5128faa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/exiv2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17402","severity":"low","public_date":"2019-10-06T00:00:00Z","advisories":["RHSA-2020:4030"],"bugzilla":"1773683","bugzilla_description":"CVE-2019-17402 exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-3.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17402.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-20421","severity":"moderate","public_date":"2019-09-30T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1800472","bugzilla_description":"CVE-2019-20421 exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835->CWE-400","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20421.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14370","severity":"low","public_date":"2019-07-29T00:00:00Z","advisories":[],"bugzilla":"1747227","bugzilla_description":"CVE-2019-14370 exiv2: Out-of-bounds read in Exiv2::MrwImage::readMetadata() in mrwimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14370.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-14368","severity":"low","public_date":"2019-07-29T00:00:00Z","advisories":[],"bugzilla":"1747229","bugzilla_description":"CVE-2019-14368 exiv2: Heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14368.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-14369","severity":"low","public_date":"2019-07-29T00:00:00Z","advisories":[],"bugzilla":"1747231","bugzilla_description":"CVE-2019-14369 exiv2: Heap-based buffer over-read in Exiv2::PngImage::readMetadata() in pngimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14369.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-14982","severity":"low","public_date":"2019-07-14T00:00:00Z","advisories":[],"bugzilla":"1757909","bugzilla_description":"CVE-2019-14982 exiv2: integer overflow in the WebPImage::getHeaderOffset can lead to a out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14982.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-13504","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":[],"bugzilla":"1729034","bugzilla_description":"CVE-2019-13504 exiv2: out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13504.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-13108","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":[],"bugzilla":"1728481","bugzilla_description":"CVE-2019-13108 exiv2: integer overflow PngImage::readMetadata leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13108.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13109","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1728484","bugzilla_description":"CVE-2019-13109 exiv2: denial of service in PngImage::readMetadata","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13109.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13110","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":[],"bugzilla":"1728486","bugzilla_description":"CVE-2019-13110 exiv2: integer-overflow and out-of-bounds read in CiffDirectory::readDirectory leads to denail of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13110.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-13111","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1728488","bugzilla_description":"CVE-2019-13111 exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13111.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13112","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1728490","bugzilla_description":"CVE-2019-13112 exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13112.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13113","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1728492","bugzilla_description":"CVE-2019-13113 exiv2: invalid data location in CRW image file causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13113.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13114","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1728494","bugzilla_description":"CVE-2019-13114 exiv2: null-pointer dereference in http.c causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13114.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-9144","severity":"moderate","public_date":"2019-02-21T00:00:00Z","advisories":[],"bugzilla":"1683201","bugzilla_description":"CVE-2019-9144 exiv2: infinite recursion in BigTiffImage::printIFD in bigtiffimage.cpp causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9144.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9143","severity":"low","public_date":"2019-02-21T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1684381","bugzilla_description":"CVE-2019-9143 exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9143.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-20096","severity":"low","public_date":"2018-12-10T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1660423","bugzilla_description":"CVE-2018-20096 exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20096.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20097","severity":"low","public_date":"2018-12-10T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1660424","bugzilla_description":"CVE-2018-20097 exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20097.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20098","severity":"low","public_date":"2018-12-10T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1660425","bugzilla_description":"CVE-2018-20098 exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20098.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20099","severity":"low","public_date":"2018-12-10T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1660426","bugzilla_description":"CVE-2018-20099 exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20099.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19607","severity":"low","public_date":"2018-11-23T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1656195","bugzilla_description":"CVE-2018-19607 exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19607.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18915","severity":"low","public_date":"2018-11-02T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1646555","bugzilla_description":"CVE-2018-18915 exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18915.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17581","severity":"low","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1635045","bugzilla_description":"CVE-2018-17581 exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17581.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17282","severity":"low","public_date":"2018-09-20T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1632490","bugzilla_description":"CVE-2018-17282 exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17282.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17229","severity":"low","public_date":"2018-09-17T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1632481","bugzilla_description":"CVE-2018-17229 exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17229.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17230","severity":"low","public_date":"2018-09-17T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1632484","bugzilla_description":"CVE-2018-17230 exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17230.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19107","severity":"low","public_date":"2018-09-01T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1649094","bugzilla_description":"CVE-2018-19107 exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19107.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19535","severity":"low","public_date":"2018-09-01T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1656187","bugzilla_description":"CVE-2018-19535 exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19108","severity":"low","public_date":"2018-08-31T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1649101","bugzilla_description":"CVE-2018-19108 exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-835","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19108.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16336","severity":"low","public_date":"2018-08-13T00:00:00Z","advisories":[],"bugzilla":"1624977","bugzilla_description":"CVE-2018-16336 exiv2: heap-based buffer over-read via a crafted image file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16336.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14338","severity":"low","public_date":"2018-07-14T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1609396","bugzilla_description":"CVE-2018-14338 exiv2: buffer overflow in samples/geotag.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14338.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14046","severity":"low","public_date":"2018-07-08T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1601628","bugzilla_description":"CVE-2018-14046 exiv2: heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14046.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12264","severity":"low","public_date":"2018-06-11T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1590993","bugzilla_description":"CVE-2018-12264 exiv2: integer overflow in getData function in preview.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12264.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12265","severity":"low","public_date":"2018-06-11T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1590994","bugzilla_description":"CVE-2018-12265 exiv2: integer overflow in the LoaderExifJpeg class in preview.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12265.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11037","severity":"low","public_date":"2018-05-13T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1579544","bugzilla_description":"CVE-2018-11037 exiv2: information leak via a crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11037.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-10999","severity":"low","public_date":"2018-05-12T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1579488","bugzilla_description":"CVE-2018-10999 exiv2: heap-based buffer over-read in parseTXTChunk function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10999.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10958","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1578659","bugzilla_description":"CVE-2018-10958 exiv2: SIGABRT caused by memory allocation in types.cpp:Exiv2::Internal::PngChunk::zlibUncompress()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10958.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10998","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1579481","bugzilla_description":"CVE-2018-10998 exiv2: SIGABRT by triggering an incorrect Safe::add call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10998.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10780","severity":"low","public_date":"2018-05-05T00:00:00Z","advisories":[],"bugzilla":"1577319","bugzilla_description":"CVE-2018-10780 exiv2: heap-based buffer over-read in Exiv2::Image::byteSwap2 function in image.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10780.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11531","severity":"low","public_date":"2018-04-22T00:00:00Z","advisories":[],"bugzilla":"1584860","bugzilla_description":"CVE-2018-11531 exiv2: heap-based buffer overflow in getData in preview.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11531.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10772","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1594627","bugzilla_description":"CVE-2018-10772 exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-9303","severity":"low","public_date":"2018-04-04T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1566725","bugzilla_description":"CVE-2018-9303 exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9303.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9304","severity":"low","public_date":"2018-04-04T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1566731","bugzilla_description":"CVE-2018-9304 exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9304.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9305","severity":"low","public_date":"2018-04-04T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1566735","bugzilla_description":"CVE-2018-9305 exiv2: out of bounds read in IptcData::printStructure in iptc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9305.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-9306","severity":null,"public_date":"2018-04-04T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1566737","bugzilla_description":"CVE-2018-9306 exiv2: out of bounds read in IptcData::printStructure in iptc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9306.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-9145","severity":"low","public_date":"2018-04-03T00:00:00Z","advisories":[],"bugzilla":"1564281","bugzilla_description":"CVE-2018-9145 exiv2: reachable assertion abort in the function Exiv2::DataBuf::DataBuf at include/exiv2/types.hpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9145.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9144","severity":"low","public_date":"2018-03-28T00:00:00Z","advisories":[],"bugzilla":"1564277","bugzilla_description":"CVE-2018-9144 exiv2: out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9144.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9146","severity":null,"public_date":"2018-03-28T00:00:00Z","advisories":[],"bugzilla":"1564284","bugzilla_description":"CVE-2018-9146 exiv2: out-of-bounds read in Exiv2::IptcData::printStructure in image.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9146.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8976","severity":"low","public_date":"2018-03-23T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1561213","bugzilla_description":"CVE-2018-8976 exiv2: out-of-bounds read in Exiv2::Internal::stringFormat image.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8976.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8977","severity":"low","public_date":"2018-03-23T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1561217","bugzilla_description":"CVE-2018-8977 exiv2: invalid memory access in Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8977.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-4868","severity":"low","public_date":"2018-02-01T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1531724","bugzilla_description":"CVE-2018-4868 exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4868.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-5772","severity":"low","public_date":"2018-01-18T00:00:00Z","advisories":[],"bugzilla":"1536904","bugzilla_description":"CVE-2018-5772 exiv2: Uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() can allow a remote attacker to cause a denial of service via a crafted tif file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5772.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17669","severity":"low","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1526052","bugzilla_description":"CVE-2017-17669 exiv2: Heap-based buffer over-read in PngChunk::keyTXTChunk function of pngchunk_int.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17669.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-17725","severity":"low","public_date":"2017-12-12T00:00:00Z","advisories":[],"bugzilla":"1545232","bugzilla_description":"CVE-2017-17725 exiv2: heap-based buffer over-read in Exiv2::getULong function in types.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17725.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-17724","severity":"low","public_date":"2017-12-10T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1545237","bugzilla_description":"CVE-2017-17724 exiv2: heap-buffer-overflow in Exiv2::IptcData::printStructure in src/iptc.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17724.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-17722","severity":"low","public_date":"2017-12-10T00:00:00Z","advisories":[],"bugzilla":"1545246","bugzilla_description":"CVE-2017-17722 exiv2: reachable assertion in the readHeader function in bigtiffimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17722.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17723","severity":"low","public_date":"2017-12-10T00:00:00Z","advisories":[],"bugzilla":"1545249","bugzilla_description":"CVE-2017-17723 exiv2:  heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17723.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-18005","severity":"low","public_date":"2017-11-18T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1531171","bugzilla_description":"CVE-2017-18005 exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-476|CWE-617)","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-14857","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1500306","bugzilla_description":"CVE-2017-14857 exiv2: Invalid free in the Image class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14858","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500307","bugzilla_description":"CVE-2017-14858 exiv2: Heap-buffer overflow in the Exiv2::l2Data function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14858.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14865","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500309","bugzilla_description":"CVE-2017-14865 exiv2: Heap-based buffer overflow in the Exiv2::us2Data function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14865.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14866","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500310","bugzilla_description":"CVE-2017-14866 exiv2: Heap-based buffer overflow in the Exiv2::s2Data function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14866.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14859","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500315","bugzilla_description":"CVE-2017-14859 exiv2: Invalid memory address dereference in Exiv2::StringValueBase::read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14859.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14860","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500316","bugzilla_description":"CVE-2017-14860 exiv2: Heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14860.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14861","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500317","bugzilla_description":"CVE-2017-14861 exiv2: Stack consumption in the Exiv2::Internal::stringFormat function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14861.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14862","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500318","bugzilla_description":"CVE-2017-14862 exiv2: Invalid memory address dereference in the Exiv2::DataValue::read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14864","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1500308","bugzilla_description":"CVE-2017-14864 exiv2: Invalid memory address dereference in Exiv2::getULong","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14863","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1500319","bugzilla_description":"CVE-2017-14863 exiv2: NULL pointer dereference in the Exiv2::Image::printIFDStructure function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14863.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12955","severity":"low","public_date":"2017-08-17T00:00:00Z","advisories":[],"bugzilla":"1487207","bugzilla_description":"CVE-2017-12955 exiv2: Heap-based buffer overflow in basicio.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12955.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12956","severity":"low","public_date":"2017-08-17T00:00:00Z","advisories":[],"bugzilla":"1487208","bugzilla_description":"CVE-2017-12956 exiv2: Illegal address access in in Exiv2::FileIo::path[abi:cxx11]()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12956.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12957","severity":"low","public_date":"2017-08-17T00:00:00Z","advisories":[],"bugzilla":"1487210","bugzilla_description":"CVE-2017-12957 exiv2: Heap-based buffer over-read in Exiv2::Image::io function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12957.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11683","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475754","bugzilla_description":"CVE-2017-11683 exiv2: Reachable assertion in the Internal::TiffReader::visitDirectory function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11683.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11592","severity":"low","public_date":"2017-07-22T00:00:00Z","advisories":[],"bugzilla":"1475727","bugzilla_description":"CVE-2017-11592 exiv2: Mismatched memory management routines in the Exiv2::FileIo::seek function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11592.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11591","severity":"low","public_date":"2017-07-22T00:00:00Z","advisories":[],"bugzilla":"1475729","bugzilla_description":"CVE-2017-11591 exiv2: Floating point exception in the Exiv2::ValueType function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11591.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11553","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1475368","bugzilla_description":"CVE-2017-11553 exiv2: illegal address access in the extend_alias_table function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11553.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11338","severity":"low","public_date":"2017-07-14T00:00:00Z","advisories":[],"bugzilla":"1474325","bugzilla_description":"CVE-2017-11338 exiv2: Infinite loop in the Exiv2::Image::printIFDStructure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11338.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11339","severity":"moderate","public_date":"2017-07-14T00:00:00Z","advisories":[],"bugzilla":"1474329","bugzilla_description":"CVE-2017-11339 exiv2: Heap-based buffer overflow in the Image::printIFDStructure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11339.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-11340","severity":"low","public_date":"2017-07-14T00:00:00Z","advisories":[],"bugzilla":"1474334","bugzilla_description":"CVE-2017-11340 exiv2: Segmentation fault in the XmpParser::terminate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11340.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11336","severity":"low","public_date":"2017-07-13T00:00:00Z","advisories":[],"bugzilla":"1474316","bugzilla_description":"CVE-2017-11336 exiv2: Heap-based buffer over-read in the Image::printIFDStructure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11336.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11337","severity":"low","public_date":"2017-07-13T00:00:00Z","advisories":[],"bugzilla":"1474319","bugzilla_description":"CVE-2017-11337 exiv2: Invalid free in the Action::TaskFactory::cleanup","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11337.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9953","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469769","bugzilla_description":"CVE-2017-9953 exiv2: Segmentation fault in Image::printIFDStructure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9953.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000126","severity":"low","public_date":"2017-06-30T00:00:00Z","advisories":[],"bugzilla":"1524425","bugzilla_description":"CVE-2017-1000126 exiv2: Out-of-bounds read in webp parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000127","severity":"low","public_date":"2017-06-30T00:00:00Z","advisories":[],"bugzilla":"1524426","bugzilla_description":"CVE-2017-1000127 exiv2: Heap buffer overflow in tiff parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000128","severity":"low","public_date":"2017-06-30T00:00:00Z","advisories":[],"bugzilla":"1524427","bugzilla_description":"CVE-2017-1000128 exiv2: Out-of-bounds read in JPEG2000 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000128.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9239","severity":"low","public_date":"2017-05-25T00:00:00Z","advisories":[],"bugzilla":"1455859","bugzilla_description":"CVE-2017-9239 exiv2: Segmentation fault in TiffImageEntry::doWriteImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9239.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-9449","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":[],"bugzilla":"1178908","bugzilla_description":"CVE-2014-9449 exiv2: buffer overflow in RiffVideo::infoTagsHandler","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9449.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/expat-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/expat-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/expat-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/expat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/expat_security_api_results.json
new file mode 100644
index 0000000..db272b2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/expat_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-15903","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3193"],"bugzilla":"1752592","bugzilla_description":"CVE-2019-15903 expat: heap-based buffer over-read via crafted XML input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-125)","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","thunderbird-0:68.2.0-1.el7_7","expat-0:2.1.0-12.el7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15903.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-20843","severity":"moderate","public_date":"2019-06-24T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1723723","bugzilla_description":"CVE-2018-20843 expat: large number of colons in input makes parser consume high amount of resources, leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["expat-0:2.1.0-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-9233","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1462729","bugzilla_description":"CVE-2017-9233 expat: Inifinite loop due to invalid XML in external entity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-9063","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396540","bugzilla_description":"CVE-2016-9063 firefox: Possible integer overflow to fix inside XML_Parse in Expat","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9063.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-5300","severity":"moderate","public_date":"2016-06-04T00:00:00Z","advisories":[],"bugzilla":"1343085","bugzilla_description":"CVE-2016-5300 expat: Little entropy used for hash initialization","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5300.json"},{"CVE":"CVE-2016-0718","severity":"moderate","public_date":"2016-05-17T00:00:00Z","advisories":["RHSA-2016:2824","RHSA-2018:2486"],"bugzilla":"1296102","bugzilla_description":"CVE-2016-0718 expat: Out-of-bounds heap read on crafted input causing crash","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["expat-0:2.0.1-13.el6_8","expat-0:2.1.0-10.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0718.json"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2015-2716","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988","RHBA-2020:1539","RHSA-2020:1011","RHSA-2015:1012","RHSA-2020:2508","RHBA-2020:1540"],"bugzilla":"1220607","bugzilla_description":"CVE-2015-2716 expat: Integer overflow leading to buffer overflow in XML_GetBuffer()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","expat-0:2.1.0-11.el7_7","thunderbird-0:31.7.0-1.el6_6","firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1","expat-0:2.1.0-11.el7","thunderbird-0:31.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2716.json"},{"CVE":"CVE-2012-6702","severity":"moderate","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1319731","bugzilla_description":"CVE-2012-6702 expat: Using XML_Parse before rand() results into non-random output","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6702.json"},{"CVE":"CVE-2013-0340","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"1000109","bugzilla_description":"CVE-2013-0340 expat: internal entity expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0340.json"},{"CVE":"CVE-2013-0341","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"1000110","bugzilla_description":"expat: external entity expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0341.json"},{"CVE":"CVE-2012-0876","severity":"moderate","public_date":"2012-03-03T00:00:00Z","advisories":["RHSA-2017:3239","RHSA-2016:0062","RHSA-2016:2957","RHSA-2012:0731"],"bugzilla":"786617","bugzilla_description":"CVE-2012-0876 expat: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["expat-0:1.95.8-11.el5_8","expat-0:2.0.1-11.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0876.json"},{"CVE":"CVE-2012-1147","severity":"low","public_date":"2012-03-03T00:00:00Z","advisories":[],"bugzilla":"801634","bugzilla_description":"CVE-2012-1147 expat: resource leak in readfilemap.c","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1147.json"},{"CVE":"CVE-2012-1148","severity":"moderate","public_date":"2012-03-03T00:00:00Z","advisories":["RHSA-2016:2957","RHSA-2012:0731"],"bugzilla":"801648","bugzilla_description":"CVE-2012-1148 expat: Memory leak in poolGrow","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["expat-0:1.95.8-11.el5_8","expat-0:2.0.1-11.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1148.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2009-3560","severity":"moderate","public_date":"2009-12-02T00:00:00Z","advisories":["RHSA-2017:3239","RHSA-2011:0896","RHSA-2009:1625"],"bugzilla":"533174","bugzilla_description":"CVE-2009-3560 expat: buffer over-read and crash in big2_toUtf8() on XML with malformed UTF-8 sequences","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["expat-0:1.95.7-4.el4_8.2","expat-0:1.95.5-6.2","expat-0:1.95.8-8.3.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3560.json"},{"CVE":"CVE-2009-3720","severity":"moderate","public_date":"2009-01-17T00:00:00Z","advisories":["RHSA-2017:3239","RHSA-2011:0896","RHSA-2009:1625","RHSA-2010:0002","RHSA-2011:0491","RHSA-2011:0492","RHSA-2009:1572"],"bugzilla":"531697","bugzilla_description":"CVE-2009-3720 expat: buffer over-read and crash on XML with malformed UTF-8 sequences","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["expat-0:1.95.7-4.el4_8.2","expat-0:1.95.5-6.2","python-0:2.3.4-14.10.el4","expat-0:1.95.8-8.3.el5_4.2","python-0:2.4.3-44.el5","4Suite-0:0.11.1-15","PyXML-0:0.8.3-6.el4_8.2","4Suite-0:1.0-3.el4_8.1","PyXML-0:0.8.4-4.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3720.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/expect_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/expect_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/expect_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fabtests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fabtests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fabtests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/farstream02_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/farstream02_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/farstream02_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/farstream_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/farstream_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/farstream_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fcoe-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fcoe-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fcoe-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-aliyun_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-aliyun_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-aliyun_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-all_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-all_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-all_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-amt-ws_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-amt-ws_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-amt-ws_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-apc-snmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-apc-snmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-apc-snmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-apc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-apc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-apc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-aws_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-aws_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-aws_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-azure-arm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-azure-arm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-azure-arm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-bladecenter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-bladecenter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-bladecenter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-brocade_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-brocade_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-brocade_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-cisco-mds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-cisco-mds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-cisco-mds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-cisco-ucs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-cisco-ucs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-cisco-ucs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-compute_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-compute_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-compute_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-drac5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-drac5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-drac5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-eaton-snmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-eaton-snmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-eaton-snmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-emerson_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-emerson_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-emerson_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-eps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-eps_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-eps_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-gce_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-gce_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-gce_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-heuristics-ping_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-heuristics-ping_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-heuristics-ping_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-hpblade_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-hpblade_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-hpblade_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ibmblade_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ibmblade_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ibmblade_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ifmib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ifmib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ifmib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo-moonshot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo-moonshot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo-moonshot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo-mp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo-mp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo-mp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo-ssh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo-ssh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo-ssh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ilo2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-intelmodular_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-intelmodular_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-intelmodular_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ipdu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ipdu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ipdu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ipmilan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ipmilan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-ipmilan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-kdump_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-kdump_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-kdump_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-lpar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-lpar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-lpar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-mpath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-mpath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-mpath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-redfish_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-redfish_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-redfish_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-rhevm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-rhevm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-rhevm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-rsa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-rsa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-rsa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-rsb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-rsb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-rsb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-sbd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-sbd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-sbd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-scsi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-scsi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-scsi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-vmware-rest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-vmware-rest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-vmware-rest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-vmware-soap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-vmware-soap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-vmware-soap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-wti_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-wti_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-wti_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-zvm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-zvm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-agents-zvm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd-libvirt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd-libvirt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd-libvirt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd-multicast_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd-multicast_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd-multicast_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd-serial_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd-serial_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd-serial_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fence-virtd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival-freebsoft-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival-freebsoft-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival-freebsoft-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival-speechtools-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival-speechtools-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival-speechtools-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festival_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festvox-slt-arctic-hts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festvox-slt-arctic-hts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/festvox-slt-arctic-hts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fetchmail_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fetchmail_security_api_results.json
new file mode 100644
index 0000000..ba51b9f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fetchmail_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3482","severity":"low","public_date":"2012-08-13T00:00:00Z","advisories":[],"bugzilla":"847988","bugzilla_description":"CVE-2012-3482 fetchmail: DoS (crash) in the base64 decoder upon server NTLM protocol exchange abort right after the initial request","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3482.json"},{"CVE":"CVE-2011-1947","severity":"low","public_date":"2011-05-30T00:00:00Z","advisories":[],"bugzilla":"709284","bugzilla_description":"CVE-2011-1947 fetchmail: Application hang due unguarded blocking I/O in IMAP/POP3 STARTTLS initialization (fetchmail-SA-2011-01)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1947.json"},{"CVE":"CVE-2010-1167","severity":"low","public_date":"2010-04-18T00:00:00Z","advisories":[],"bugzilla":"583819","bugzilla_description":"CVE-2010-1167 fetchmail: denial of service in debug mode with multichar locales","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1167.json"},{"CVE":"CVE-2009-2666","severity":"moderate","public_date":"2009-08-05T00:00:00Z","advisories":["RHSA-2009:1427"],"bugzilla":"515804","bugzilla_description":"CVE-2009-2666 fetchmail: SSL null terminator bypass","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["fetchmail-0:6.2.0-3.el3.5","fetchmail-0:6.2.5-6.0.1.el4_8.1","fetchmail-0:6.3.6-1.1.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2666.json"},{"CVE":"CVE-2008-2711","severity":"low","public_date":"2008-06-13T00:00:00Z","advisories":["RHSA-2009:1427"],"bugzilla":"451758","bugzilla_description":"CVE-2008-2711 fetchmail: Crash in large log messages in verbose mode","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["fetchmail-0:6.2.0-3.el3.5","fetchmail-0:6.2.5-6.0.1.el4_8.1","fetchmail-0:6.3.6-1.1.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2711.json"},{"CVE":"CVE-2007-4565","severity":"low","public_date":"2007-08-28T00:00:00Z","advisories":["RHSA-2009:1427"],"bugzilla":"260601","bugzilla_description":"CVE-2007-4565 Fetchmail NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["fetchmail-0:6.2.0-3.el3.5","fetchmail-0:6.2.5-6.0.1.el4_8.1","fetchmail-0:6.3.6-1.1.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4565.json"},{"CVE":"CVE-2007-1558","severity":"moderate","public_date":"2007-04-02T00:00:00Z","advisories":["RHSA-2009:1140","RHSA-2007:0385","RHSA-2007:0344","RHSA-2007:0353","RHSA-2007:0386","RHSA-2007:0401","RHSA-2007:0402"],"bugzilla":"241191","bugzilla_description":"CVE-2007-1558 fetchmail/mutt/evolution/...: APOP password disclosure vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:1.5.0.12-0.1.el4","evolution-0:2.0.2-35.0.2.el4","fetchmail-0:5.9.0-21.7.3.el2.1.6","mutt-5:1.4.1-5.el3","fetchmail-0:6.2.5-6.0.1.el4","ruby-0:1.8.1-7.el4_8.3","evolution-data-server-0:1.8.0-15.0.3.el5","thunderbird-0:1.5.0.12-1.el5","ruby-0:1.8.5-5.el5_3.7","fetchmail-0:6.3.6-1.0.1.el5","mutt-5:1.4.2.2-3.0.2.el5","mutt-5:1.4.1-12.0.3.el4","evolution-0:1.4.5-20.el3","seamonkey-0:1.0.9-0.1.el3","seamonkey-0:1.0.9-0.1.el2","fetchmail-0:6.2.0-3.el3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1558.json"},{"CVE":"CVE-2006-5867","severity":"moderate","public_date":"2007-01-04T00:00:00Z","advisories":["RHSA-2007:0018"],"bugzilla":"221984","bugzilla_description":"CVE-2006-5867 fetchmail not enforcing TLS for POP3 properly","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["fetchmail-0:6.2.5-6.el4.5","fetchmail-0:5.9.0-21.7.3.el2.1.4","fetchmail-0:6.2.0-3.el3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5867.json"},{"CVE":"CVE-2005-4348","severity":"low","public_date":"2005-12-19T00:00:00Z","advisories":["RHSA-2007:0018"],"bugzilla":"1617856","bugzilla_description":"CVE-2005-4348 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["fetchmail-0:6.2.5-6.el4.5","fetchmail-0:5.9.0-21.7.3.el2.1.4","fetchmail-0:6.2.0-3.el3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4348.json"},{"CVE":"CVE-2005-2335","severity":"important","public_date":"2005-07-21T00:00:00Z","advisories":["RHSA-2005:640"],"bugzilla":"1617705","bugzilla_description":"CVE-2005-2335 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["fetchmail-0:6.2.5-6.el4.2","fetchmail-0:6.2.0-3.el3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2335.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs-double_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs-double_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs-double_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs-long_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs-long_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs-long_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs-single_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs-single_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs-single_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fftw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file-roller-nautilus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file-roller-nautilus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file-roller-nautilus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file-roller_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file-roller_security_api_results.json
new file mode 100644
index 0000000..104ff82
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file-roller_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-11736","severity":"low","public_date":"2020-04-12T00:00:00Z","advisories":[],"bugzilla":"1824985","bugzilla_description":"CVE-2020-11736 file-roller: directory traversal via directory symlink pointing outside of the target directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11736.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2019-16680","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":[],"bugzilla":"1767594","bugzilla_description":"CVE-2019-16680 file-roller: path traversal vulnerability via a specially crafted filename contained in malicious archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16680.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-7162","severity":"moderate","public_date":"2016-09-07T00:00:00Z","advisories":[],"bugzilla":"1374275","bugzilla_description":"CVE-2016-7162 file-roller: Path traversal vulnerability when opening crafted archive","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7162.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2013-4668","severity":"moderate","public_date":"2013-07-08T00:00:00Z","advisories":[],"bugzilla":"981471","bugzilla_description":"CVE-2013-4668 file-roller: path sanitization errors","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4668.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file_security_api_results.json
new file mode 100644
index 0000000..4a79f2a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/file_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-6829","severity":"moderate","public_date":"2020-06-02T12:00:00Z","advisories":["RHSA-2020:4076"],"bugzilla":"1826187","bugzilla_description":"CVE-2020-6829 nss: Side channel attack on ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6829.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12402","severity":"moderate","public_date":"2020-06-02T12:00:00Z","advisories":["RHSA-2020:4076","RHSA-2020:3280"],"bugzilla":"1826231","bugzilla_description":"CVE-2020-12402 nss: Side channel vulnerabilities during RSA key generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.53.1-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12402.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12399","severity":"moderate","public_date":"2020-05-21T00:00:00Z","advisories":[],"bugzilla":"1826177","bugzilla_description":"CVE-2020-12399 nss: Timing attack on DSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12399.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-11736","severity":"low","public_date":"2020-04-12T00:00:00Z","advisories":[],"bugzilla":"1824985","bugzilla_description":"CVE-2020-11736 file-roller: directory traversal via directory symlink pointing outside of the target directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11736.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2019-18218","severity":"moderate","public_date":"2019-08-26T00:00:00Z","advisories":[],"bugzilla":"1765272","bugzilla_description":"CVE-2019-18218 file: heap-based buffer overflow in cdf_read_property_info in cdf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18218.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-11719","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1951","RHSA-2020:4076"],"bugzilla":"1728436","bugzilla_description":"CVE-2019-11719 nss: Out-of-bounds read when importing curve25519 private key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11719.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11729","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:4190","RHSA-2019:1951"],"bugzilla":"1728437","bugzilla_description":"CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["nss-0:3.44.0-7.el7_7","nss-util-0:3.44.0-4.el7_7","nss-0:3.44.0-7.el8_0","nss-softokn-0:3.44.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11729.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13147","severity":null,"public_date":"2019-06-30T00:00:00Z","advisories":[],"bugzilla":"1726067","bugzilla_description":"CVE-2019-13147 audiofile: a NULL pointer dereference in ulaw2linear_buf in G711.cpp in libmodules.a leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13147.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-8905","severity":"low","public_date":"2019-02-18T00:00:00Z","advisories":[],"bugzilla":"1679181","bugzilla_description":"CVE-2019-8905 file: stack-based buffer over-read in do_core_note in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8905.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-8904","severity":"low","public_date":"2019-02-18T00:00:00Z","advisories":[],"bugzilla":"1679188","bugzilla_description":"CVE-2019-8904 file: stack-based buffer over-read in do_bid_note in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8904.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-3832","severity":"low","public_date":"2019-02-07T00:00:00Z","advisories":[],"bugzilla":"1677216","bugzilla_description":"CVE-2019-3832 libsndfile: incomplete fix for CVE-2018-19758 still allow to read beyond buffer limits","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3832.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-1003014","severity":"moderate","public_date":"2019-01-28T00:00:00Z","advisories":["RHBA-2019:0326"],"bugzilla":"1671324","bugzilla_description":"CVE-2019-1003014 jenkins-plugin-config-file-provider: Stored XSS vulnerability in Config File Provider Plugin (SECURITY-1253)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["jenkins-2-plugins-0:3.11.1549642489-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1003014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-8907","severity":"low","public_date":"2019-01-03T00:00:00Z","advisories":[],"bugzilla":"1679138","bugzilla_description":"CVE-2019-8907 file: do_core_note in readelf.c allows remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8907.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-8906","severity":"low","public_date":"2019-01-03T00:00:00Z","advisories":[],"bugzilla":"1679175","bugzilla_description":"CVE-2019-8906 file: out-of-bounds read in do_core_note in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8906.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-19661","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1659627","bugzilla_description":"CVE-2018-19661 libsndfile: buffer over-read in the function i2ulaw_array in ulaw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19661.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19662","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2020:1636","RHSA-2020:3922"],"bugzilla":"1659631","bugzilla_description":"CVE-2018-19662 libsndfile: buffer over-read in the function i2alaw_array in alaw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["libsndfile-0:1.0.28-10.el8","libsndfile-0:1.0.25-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19662.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19432","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":[],"bugzilla":"1652566","bugzilla_description":"CVE-2018-19432 libsndfile:  OOB read in sf_write_int in sndfile.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19432.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-19758","severity":"low","public_date":"2018-10-29T00:00:00Z","advisories":[],"bugzilla":"1659638","bugzilla_description":"CVE-2018-19758 libsndfile: heap-based buffer over-read at wav.c in wav_write_header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19758.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17095","severity":"moderate","public_date":"2018-09-16T00:00:00Z","advisories":["RHSA-2020:3877"],"bugzilla":"1631088","bugzilla_description":"CVE-2018-17095 audiofile: Heap-based buffer overflow in Expand3To4Module::run() when running sfconvert","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["audiofile-1:0.3.6-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17095.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-13440","severity":"low","public_date":"2018-07-07T00:00:00Z","advisories":["RHSA-2020:3877"],"bugzilla":"1600367","bugzilla_description":"CVE-2018-13440 audiofile: NULL pointer dereference in ModuleState::setup() in modules/ModuleState.cpp allows for denial of service via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["audiofile-1:0.3.6-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13440.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-13419","severity":"low","public_date":"2018-07-05T00:00:00Z","advisories":[],"bugzilla":"1599152","bugzilla_description":"CVE-2018-13419 libsndfile: Memory leak in common.c:psf_allocate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13419.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-13139","severity":"moderate","public_date":"2018-07-03T00:00:00Z","advisories":["RHSA-2020:1185","RHSA-2020:1636"],"bugzilla":"1598480","bugzilla_description":"CVE-2018-13139 libsndfile: stack-based buffer overflow in sndfile-deinterleave utility","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libsndfile-0:1.0.25-11.el7","libsndfile-0:1.0.28-10.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-10360","severity":"low","public_date":"2018-06-09T00:00:00Z","advisories":["RHSA-2020:2521","RHBA-2020:1539","RHSA-2020:1022","RHSA-2020:2838","RHSA-2020:2768","RHBA-2020:1540"],"bugzilla":"1590000","bugzilla_description":"CVE-2018-10360 file: out-of-bounds read via a crafted ELF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","file-0:5.11-35.el7_6.1","file-0:5.11-35.el7_7.1","file-0:5.11-33.el7_4.1","file-0:5.11-36.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10360.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-16680","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":[],"bugzilla":"1767594","bugzilla_description":"CVE-2019-16680 file-roller: path traversal vulnerability via a specially crafted filename contained in malicious archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16680.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-17456","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1524570","bugzilla_description":"CVE-2017-17456 libsndfile: SEGV on unknown address in the function d2alaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17457","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1524571","bugzilla_description":"CVE-2017-17457 libsndfile: SEGV on unknown address in the function d2ulaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17457.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16942","severity":"low","public_date":"2017-11-25T00:00:00Z","advisories":[],"bugzilla":"1517902","bugzilla_description":"CVE-2017-16942 libsndfile: divide-by-zero error in wav_w64_read_fmt_chunk()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-14634","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1499982","bugzilla_description":"CVE-2017-14634 libsndfile: Divide-by-zero in the double64_init() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14634.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14245","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1500006","bugzilla_description":"CVE-2017-14245 libsndfile: Out-of-bounds read in the function d2alaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14245.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14246","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1500007","bugzilla_description":"CVE-2017-14246 libsndfile: Out-of-bounds read in the function d2ulaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14246.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000249","severity":"important","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1488053","bugzilla_description":"CVE-2017-1000249 file: Stack-based buffer overflow in do_bid_note()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000249.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-12562","severity":"low","public_date":"2017-08-05T00:00:00Z","advisories":[],"bugzilla":"1483140","bugzilla_description":"CVE-2017-12562 libsndfile: Heap-based Buffer Overflow in psf_binheader_writef function in common.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12562.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6892","severity":"low","public_date":"2017-05-23T00:00:00Z","advisories":[],"bugzilla":"1463326","bugzilla_description":"CVE-2017-6892 libsndfile: Information disclosure via aiff_read_chanmap() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6892.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-6512","severity":"low","public_date":"2017-05-02T00:00:00Z","advisories":[],"bugzilla":"1457832","bugzilla_description":"CVE-2017-6512 perl-File-Path: rmtree/remove_tree race condition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6512.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-8361","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1449518","bugzilla_description":"CVE-2017-8361 libsndfile: Buffer overflow in the flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8361.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8362","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1449519","bugzilla_description":"CVE-2017-8362 libsndfile: Out-of-bounds read in the flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8362.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8365","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1449520","bugzilla_description":"CVE-2017-8365 libsndfile: Buffer over-read in the l2les_array function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8365.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8363","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1458694","bugzilla_description":"CVE-2017-8363 libsndfile: Heap buffer over-read in the flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8363.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7741","severity":"low","public_date":"2017-04-11T00:00:00Z","advisories":[],"bugzilla":"1442033","bugzilla_description":"CVE-2017-7741 libsndfile: Invalid memory write in flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7741.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7742","severity":"low","public_date":"2017-04-11T00:00:00Z","advisories":[],"bugzilla":"1442034","bugzilla_description":"CVE-2017-7742 libsndfile: Invalid memory read in flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7742.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7586","severity":"low","public_date":"2017-03-26T00:00:00Z","advisories":[],"bugzilla":"1440758","bugzilla_description":"CVE-2017-7586 libsndfile: Error in header_read() causing stack-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7586.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7585","severity":"low","public_date":"2017-03-24T00:00:00Z","advisories":[],"bugzilla":"1440756","bugzilla_description":"CVE-2017-7585 libsndfile: Stack-based buffer overflow in flac_buffer_copy()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7585.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6827","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432924","bugzilla_description":"CVE-2017-6827 audiofile: Heap-based buffer overflow in MSADPCM::initializeCoefficients","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6827.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6828","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432925","bugzilla_description":"CVE-2017-6828 audiofile: Heap-based buffer overflow in readValue","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6828.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6829","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432928","bugzilla_description":"CVE-2017-6829 audiofile: Global buffer overflow in decodeSample","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6829.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6830","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432929","bugzilla_description":"CVE-2017-6830 audiofile: Heap-based buffer overflow in alaw2linear_buf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6830.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6831","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432930","bugzilla_description":"CVE-2017-6831 audiofile: Heap-based buffer overflow in IMA::decodeBlockWAVE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6831.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6832","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432932","bugzilla_description":"CVE-2017-6832 audiofile: Heap-based buffer overflow in MSADPCM::decodeBlock","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6832.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6833","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432933","bugzilla_description":"CVE-2017-6833 audiofile: Divide-by-zero in BlockCodec::runPull","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6833.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6834","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432935","bugzilla_description":"CVE-2017-6834 audiofile: Heap-based buffer overflow in ulaw2linear_buf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6834.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6836","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432937","bugzilla_description":"CVE-2017-6836 audiofile: Heap-based buffer overflow in Expand3To4Module::run","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6836.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6835","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432939","bugzilla_description":"CVE-2017-6835 audiofile: Divide-by-zero in BlockCodec::reset1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6835.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6837","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432942","bugzilla_description":"CVE-2017-6837 audiofile: Index out of bounds for type int16_t","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6838","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432943","bugzilla_description":"CVE-2017-6838 audiofile: Signed integer overflow in sfconvert.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6838.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6839","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432944","bugzilla_description":"CVE-2017-6839 audiofile: Signed integer overflow in MSADPCM.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6839.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7162","severity":"moderate","public_date":"2016-09-07T00:00:00Z","advisories":[],"bugzilla":"1374275","bugzilla_description":"CVE-2016-7162 file-roller: Path traversal vulnerability when opening crafted archive","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7162.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-1000031","severity":"moderate","public_date":"2016-04-20T00:00:00Z","advisories":[],"bugzilla":"1393454","bugzilla_description":"CVE-2016-1000031 Apache Commons FileUpload: DiskFileItem file manipulation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000031.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2015-8865","severity":"low","public_date":"2016-02-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323118","bugzilla_description":"CVE-2015-8865 file: Buffer over-write in finfo_open with malformed magic file","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2015-5242","severity":"important","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1918"],"bugzilla":"1258743","bugzilla_description":"CVE-2015-5242 swiftonfile: use of insecure Python pickle for metadata serialization and storage","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["swiftonfile-0:1.13.1-6.el6rhs","swiftonfile-0:1.13.1-6.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5242.json"},{"CVE":"CVE-2015-7805","severity":"moderate","public_date":"2015-10-12T00:00:00Z","advisories":[],"bugzilla":"1277897","bugzilla_description":"CVE-2015-7805 libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7805.json"},{"CVE":"CVE-2015-7747","severity":"moderate","public_date":"2015-10-04T00:00:00Z","advisories":[],"bugzilla":"1269766","bugzilla_description":"CVE-2015-7747 audiofile: Buffer overflow when changing number of channels and sample format","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"(CWE-119|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7747.json"},{"CVE":"CVE-2015-5223","severity":"moderate","public_date":"2015-08-26T00:00:00Z","advisories":["RHSA-2015:1895","RHSA-2016:0328","RHSA-2016:0329"],"bugzilla":"1255622","bugzilla_description":"CVE-2015-5223 openstack-swift: Information leak via Swift tempurls","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openstack-swift-0:1.13.1-7.el6ost","openstack-swift-0:1.13.1-8.el6ost","openstack-swift-0:1.13.1-8.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5223.json"},{"CVE":"CVE-2014-8177","severity":"moderate","public_date":"2015-08-21T00:00:00Z","advisories":["RHSA-2015:1845","RHSA-2015:1846"],"bugzilla":"1257525","bugzilla_description":"CVE-2014-8177 gluster-swift metadata constraints are not correctly enforced","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["swiftonfile-0:1.13.1-5.el7rhgs","glusterfs-0:3.7.1-16.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8177.json"},{"CVE":"CVE-2015-8075","severity":"low","public_date":"2015-07-10T00:00:00Z","advisories":[],"bugzilla":"1277915","bugzilla_description":"CVE-2015-8075 libsndfile: Out of bounds memory access in psf_strlcpy_crlf","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8075.json"},{"CVE":"CVE-2015-4604","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213442","bugzilla_description":"CVE-2015-4604 CVE-2015-4605 php: denial of service when processing a crafted file with Fileinfo","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4604.json"},{"CVE":"CVE-2015-4605","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213442","bugzilla_description":"CVE-2015-4604 CVE-2015-4605 php: denial of service when processing a crafted file with Fileinfo","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4605.json"},{"CVE":"CVE-2014-9620","severity":"low","public_date":"2015-01-03T00:00:00Z","advisories":["RHSA-2016:0760"],"bugzilla":"1180639","bugzilla_description":"CVE-2014-9620 file: limit the number of ELF notes processed","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9620.json"},{"CVE":"CVE-2014-9621","severity":"low","public_date":"2015-01-03T00:00:00Z","advisories":[],"bugzilla":"1180642","bugzilla_description":"CVE-2014-9621 file: limit string printing to 100 chars","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9621.json"},{"CVE":"CVE-2014-9756","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":[],"bugzilla":"1177254","bugzilla_description":"libsndfile: division by zero leading to denial of service in psf_fwrite()","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9756.json"},{"CVE":"CVE-2014-9496","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":[],"bugzilla":"1178840","bugzilla_description":"CVE-2014-9496 libsndfile: 2 buffer overruns in sd2_parse_rsrc_fork()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9496.json"},{"CVE":"CVE-2014-8116","severity":"moderate","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2015:2155"],"bugzilla":"1171580","bugzilla_description":"CVE-2014-8116 file: multiple denial of service issues (resource consumption)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400->CWE-674","affected_packages":["file-0:5.11-31.el7","file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8116.json"},{"CVE":"CVE-2014-8117","severity":"moderate","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2015:2155"],"bugzilla":"1174606","bugzilla_description":"CVE-2014-8117 file: denial of service issue (resource consumption)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400->CWE-674","affected_packages":["file-0:5.11-31.el7","file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8117.json"},{"CVE":"CVE-2014-9653","severity":"low","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2015:2155"],"bugzilla":"1190116","bugzilla_description":"CVE-2014-9653 file: malformed elf file causes access to uninitialized memory","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9653.json"},{"CVE":"CVE-2014-9652","severity":"low","public_date":"2014-11-11T00:00:00Z","advisories":["RHSA-2015:2155","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1188599","bugzilla_description":"CVE-2014-9652 file: out of bounds read in mconvert()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9652.json"},{"CVE":"CVE-2014-3710","severity":"moderate","public_date":"2014-10-22T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1768","RHSA-2014:1767","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1155071","bugzilla_description":"CVE-2014-3710 file: out-of-bounds read in elf note headers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-40.el6_6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.3","php53-0:5.3.3-26.el5_11","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3710.json"},{"CVE":"CVE-2014-3587","severity":"moderate","public_date":"2014-08-21T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1128587","bugzilla_description":"CVE-2014-3587 file: incomplete fix for CVE-2012-1571 in cdf_read_property_info","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["php53-0:5.3.3-24.el5","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3587.json"},{"CVE":"CVE-2014-0207","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1091842","bugzilla_description":"CVE-2014-0207 file: cdf_read_short_sector insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0207.json"},{"CVE":"CVE-2014-0236","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":[],"bugzilla":"1098209","bugzilla_description":"CVE-2014-0236 file: root_storage NULL pointer deference flaw in CDF parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0236.json"},{"CVE":"CVE-2014-3538","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1098222","bugzilla_description":"CVE-2014-3538 file: unrestricted regular expression matching","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.1","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3538.json"},{"CVE":"CVE-2014-3480","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1104858","bugzilla_description":"CVE-2014-3480 file: cdf_count_chain insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3480.json"},{"CVE":"CVE-2014-3478","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1104863","bugzilla_description":"CVE-2014-3478 file: mconvert incorrect handling of truncated pascal string size","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3478.json"},{"CVE":"CVE-2014-3479","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1104869","bugzilla_description":"CVE-2014-3479 file: cdf_check_stream_offset insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3479.json"},{"CVE":"CVE-2014-3487","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1107544","bugzilla_description":"CVE-2014-3487 file: cdf_read_property_info insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3487.json"},{"CVE":"CVE-2014-0238","severity":"moderate","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1098155","bugzilla_description":"CVE-2014-0238 file: CDF property info parsing nelements infinite loop","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0238.json"},{"CVE":"CVE-2014-0237","severity":"moderate","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1098193","bugzilla_description":"CVE-2014-0237 file: cdf_unpack_summary_info() excessive looping DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0237.json"},{"CVE":"CVE-2014-1943","severity":"moderate","public_date":"2014-02-10T00:00:00Z","advisories":["RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1065836","bugzilla_description":"CVE-2014-1943 file: unrestricted recursion in handling of indirect type rules","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1943.json"},{"CVE":"CVE-2014-0050","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0252","RHSA-2014:0253","RHSA-2014:0473","RHSA-2014:0400","RHSA-2014:0452","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0401","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1062337","bugzilla_description":"CVE-2014-0050 apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el6","tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0050.json"},{"CVE":"CVE-2014-2270","severity":"moderate","public_date":"2013-12-20T00:00:00Z","advisories":["RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1072220","bugzilla_description":"CVE-2014-2270 file: out-of-bounds access in search rules with offsets from input file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2270.json"},{"CVE":"CVE-2013-2186","severity":"important","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1429","RHSA-2013:1428","RHSA-2013:1448","RHSA-2016:0070","RHSA-2013:1430","RHSA-2013:1442"],"bugzilla":"974814","bugzilla_description":"CVE-2013-2186 Apache commons-fileupload: Arbitrary file upload via deserialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-626","affected_packages":["jakarta-commons-fileupload-1:1.1.1-7.7.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2186.json"},{"CVE":"CVE-2013-4668","severity":"moderate","public_date":"2013-07-08T00:00:00Z","advisories":[],"bugzilla":"981471","bugzilla_description":"CVE-2013-4668 file-roller: path sanitization errors","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4668.json"},{"CVE":"CVE-2013-0248","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"922146","bugzilla_description":"CVE-2013-0248 jakarta-commons-fileupload, apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0248.json"},{"CVE":"CVE-2012-2451","severity":"low","public_date":"2012-05-02T00:00:00Z","advisories":[],"bugzilla":"818386","bugzilla_description":"CVE-2012-2451 perl-Config-IniFiles: insecure temporary file usage","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2451.json"},{"CVE":"CVE-2012-1571","severity":"low","public_date":"2012-02-16T00:00:00Z","advisories":["RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"805197","bugzilla_description":"CVE-2012-1571 file: out of bounds read in CDF parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php53-0:5.3.3-23.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1571.json"},{"CVE":"CVE-2013-7345","severity":"moderate","public_date":"2011-12-31T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2014:1765"],"bugzilla":"1079846","bugzilla_description":"CVE-2013-7345 file: extensive backtracking in awk rule regular expression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["php-0:5.4.16-23.el7_0","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7345.json"},{"CVE":"CVE-2011-2696","severity":"moderate","public_date":"2011-07-12T00:00:00Z","advisories":["RHSA-2011:1084"],"bugzilla":"721234","bugzilla_description":"CVE-2011-2696 libsndfile: Application crash due integer overflow by processing certain PAF audio files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["libsndfile-0:1.0.20-3.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2696.json"},{"CVE":"CVE-2011-1760","severity":"moderate","public_date":"2011-04-26T00:00:00Z","advisories":[],"bugzilla":"700883","bugzilla_description":"CVE-2011-1760 oprofile: Local privilege escalation via crafted opcontrol event parameter","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1760.json"},{"CVE":"CVE-2011-2471","severity":"moderate","public_date":"2011-04-26T00:00:00Z","advisories":[],"bugzilla":"712760","bugzilla_description":"CVE-2011-2471 oprofile: Local privilege escalation via shell metacharacters","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2471.json"},{"CVE":"CVE-2011-2472","severity":"moderate","public_date":"2011-04-26T00:00:00Z","advisories":[],"bugzilla":"712761","bugzilla_description":"CVE-2011-2472 oprofile: Directory traversal vulnerability in utils/opcontrol","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2472.json"},{"CVE":"CVE-2011-2473","severity":"moderate","public_date":"2011-04-26T00:00:00Z","advisories":[],"bugzilla":"712762","bugzilla_description":"CVE-2011-2473 oprofile: do_dump_data function symlink attack via opd_pipe","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2473.json"},{"CVE":"CVE-2008-5824","severity":"low","public_date":"2008-12-30T00:00:00Z","advisories":[],"bugzilla":"479966","bugzilla_description":"CVE-2008-5824 audiofile: heap-based overflow in Microsoft ADPCM compression module (app crash, arb. code execution)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5824.json"},{"CVE":"CVE-2007-2799","severity":"moderate","public_date":"2007-05-23T00:00:00Z","advisories":["RHSA-2007:0391"],"bugzilla":"241022","bugzilla_description":"CVE-2007-2799 file integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["file-0:4.10-3.0.2.el4","file-0:4.17-9.0.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2799.json"},{"CVE":"CVE-2007-1536","severity":"important","public_date":"2007-02-08T00:00:00Z","advisories":["RHSA-2007:0124"],"bugzilla":"233164","bugzilla_description":"CVE-2007-1536 file 4.20 fixes a heap overflow in that can result in arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["file-0:4.17-9.el5","file-0:4.10-3.EL4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1536.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/filebench_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/filebench_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/filebench_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/findutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/findutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/findutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/finger-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/finger-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/finger-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/finger_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/finger_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/finger_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fipscheck-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fipscheck-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fipscheck-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fipscheck_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fipscheck_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fipscheck_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firefox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firefox_security_api_results.json
new file mode 100644
index 0000000..6c539af
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firefox_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15683","severity":"important","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4315","RHSA-2020:4311","RHSA-2020:4310","RHSA-2020:4317"],"bugzilla":"1889932","bugzilla_description":"CVE-2020-15683 Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:78.4.0-1.el8_2","firefox-0:78.4.0-1.el7_9","firefox-0:78.4.0-1.el8_1","firefox-0:78.4.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15683.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15999","severity":"moderate","public_date":"2020-10-19T00:00:00Z","advisories":[],"bugzilla":"1890210","bugzilla_description":"CVE-2020-15999 freetype: heap-based buffer overflow via malformed ttf files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15999.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15969","severity":"important","public_date":"2020-10-06T00:00:00Z","advisories":["RHSA-2020:4315","RHSA-2020:4235","RHSA-2020:4311","RHSA-2020:4310","RHSA-2020:4317"],"bugzilla":"1885885","bugzilla_description":"CVE-2020-15969 chromium-browser: Use after free in WebRTC","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:78.4.0-1.el8_2","firefox-0:78.4.0-1.el7_9","chromium-browser-0:86.0.4240.75-1.el6_10","firefox-0:78.4.0-1.el8_1","firefox-0:78.4.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15969.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15665","severity":"moderate","public_date":"2020-10-05T00:00:00Z","advisories":[],"bugzilla":"1885176","bugzilla_description":"CVE-2020-15665 firefox: Address bar not reset when choosing to stay on a page after the beforeunload dialog is shown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15665.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2020-15674","severity":"important","public_date":"2020-10-05T00:00:00Z","advisories":[],"bugzilla":"1885180","bugzilla_description":"CVE-2020-15674 firefox: memory safety bugs showing evidence of memory corruption leading to run arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15674.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15675","severity":"important","public_date":"2020-10-05T00:00:00Z","advisories":[],"bugzilla":"1885181","bugzilla_description":"CVE-2020-15675 firefox: Use-After-Free in WebGL could result in memory corruption and a potentially exploitable crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-120|CWE-416)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15675.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15677","severity":"moderate","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4158","RHSA-2020:4157","RHSA-2020:4156","RHSA-2020:4155","RHSA-2020:4163","RHSA-2020:3834","RHSA-2020:3835","RHSA-2020:3832","RHSA-2020:4080","RHSA-2020:3833"],"bugzilla":"1881664","bugzilla_description":"CVE-2020-15677 Mozilla: Download origin spoofing via redirect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["firefox-0:78.3.0-1.el8_1","firefox-0:78.3.0-1.el8_2","thunderbird-0:78.3.1-1.el8_0","firefox-0:78.3.0-1.el8_0","thunderbird-0:78.3.1-1.el8_1","thunderbird-0:78.3.1-1.el8_2","firefox-0:78.3.0-1.el6_10","thunderbird-0:78.3.1-1.el7_9","firefox-0:78.3.0-1.el7_9","thunderbird-0:78.3.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15676","severity":"moderate","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4158","RHSA-2020:4157","RHSA-2020:4156","RHSA-2020:4155","RHSA-2020:4163","RHSA-2020:3834","RHSA-2020:3835","RHSA-2020:3832","RHSA-2020:4080","RHSA-2020:3833"],"bugzilla":"1881665","bugzilla_description":"CVE-2020-15676 Mozilla: XSS when pasting attacker-controlled data into a contenteditable element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["firefox-0:78.3.0-1.el8_1","firefox-0:78.3.0-1.el8_2","thunderbird-0:78.3.1-1.el8_0","firefox-0:78.3.0-1.el8_0","thunderbird-0:78.3.1-1.el8_1","thunderbird-0:78.3.1-1.el8_2","firefox-0:78.3.0-1.el6_10","thunderbird-0:78.3.1-1.el7_9","firefox-0:78.3.0-1.el7_9","thunderbird-0:78.3.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15676.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15678","severity":"moderate","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4158","RHSA-2020:4157","RHSA-2020:4156","RHSA-2020:4155","RHSA-2020:4163","RHSA-2020:3834","RHSA-2020:3835","RHSA-2020:3832","RHSA-2020:4080","RHSA-2020:3833"],"bugzilla":"1881666","bugzilla_description":"CVE-2020-15678 Mozilla: When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:78.3.0-1.el8_1","firefox-0:78.3.0-1.el8_2","thunderbird-0:78.3.1-1.el8_0","firefox-0:78.3.0-1.el8_0","thunderbird-0:78.3.1-1.el8_1","thunderbird-0:78.3.1-1.el8_2","firefox-0:78.3.0-1.el6_10","thunderbird-0:78.3.1-1.el7_9","firefox-0:78.3.0-1.el7_9","thunderbird-0:78.3.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15678.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15673","severity":"important","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4158","RHSA-2020:4157","RHSA-2020:4156","RHSA-2020:4155","RHSA-2020:4163","RHSA-2020:3834","RHSA-2020:3835","RHSA-2020:3832","RHSA-2020:4080","RHSA-2020:3833"],"bugzilla":"1881667","bugzilla_description":"CVE-2020-15673 Mozilla: Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:78.3.0-1.el8_1","firefox-0:78.3.0-1.el8_2","thunderbird-0:78.3.1-1.el8_0","firefox-0:78.3.0-1.el8_0","thunderbird-0:78.3.1-1.el8_1","thunderbird-0:78.3.1-1.el8_2","firefox-0:78.3.0-1.el6_10","thunderbird-0:78.3.1-1.el7_9","firefox-0:78.3.0-1.el7_9","thunderbird-0:78.3.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15663","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872530","bugzilla_description":"CVE-2020-15663 Mozilla: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15663.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15664","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":["RHSA-2020:3643","RHSA-2020:3555","RHSA-2020:3632","RHSA-2020:3556","RHSA-2020:3633","RHSA-2020:3631","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:3634","RHSA-2020:3558"],"bugzilla":"1872531","bugzilla_description":"CVE-2020-15664 Mozilla: Attacker-induced prompt for extension installation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["thunderbird-0:68.12.0-1.el6_10","thunderbird-0:68.12.0-1.el7_8","firefox-0:68.12.0-1.el6_10","firefox-0:78.2.0-3.el8_0","thunderbird-0:68.12.0-1.el8_2","firefox-0:78.2.0-3.el8_1","thunderbird-0:68.12.0-1.el8_1","thunderbird-0:68.12.0-1.el8_0","firefox-0:68.12.0-1.el7_8","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15669","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":["RHSA-2020:3643","RHSA-2020:3555","RHSA-2020:3632","RHSA-2020:3556","RHSA-2020:3633","RHSA-2020:3631","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:3634","RHSA-2020:3558"],"bugzilla":"1872532","bugzilla_description":"CVE-2020-15669 Mozilla: Use-After-Free when aborting an operation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.12.0-1.el6_10","thunderbird-0:68.12.0-1.el7_8","firefox-0:68.12.0-1.el6_10","firefox-0:78.2.0-3.el8_0","thunderbird-0:68.12.0-1.el8_2","firefox-0:78.2.0-3.el8_1","thunderbird-0:68.12.0-1.el8_1","thunderbird-0:68.12.0-1.el8_0","firefox-0:68.12.0-1.el7_8","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15669.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15670","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872533","bugzilla_description":"CVE-2020-15670 Mozilla: Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15670.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15667","severity":"low","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1884474","bugzilla_description":"CVE-2020-15667 firefox: Invalid name length could result in a heap buffer overflow, leading to memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15667.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-15652","severity":"important","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3344","RHSA-2020:3345","RHSA-2020:3254","RHSA-2020:3342","RHSA-2020:3233","RHSA-2020:3343","RHSA-2020:3241","RHSA-2020:3253","RHSA-2020:3341","RHSA-2020:3229"],"bugzilla":"1861570","bugzilla_description":"CVE-2020-15652 Mozilla: Potential leak of redirect targets when loading scripts in a worker","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":["thunderbird-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el8_2","firefox-0:68.11.0-1.el8_1","firefox-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_0","firefox-0:68.11.0-1.el8_0","thunderbird-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_2","thunderbird-0:68.11.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15659","severity":"important","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3344","RHSA-2020:3345","RHSA-2020:3254","RHSA-2020:3342","RHSA-2020:3233","RHSA-2020:3343","RHSA-2020:3241","RHSA-2020:3253","RHSA-2020:3341","RHSA-2020:3229"],"bugzilla":"1861572","bugzilla_description":"CVE-2020-15659 Mozilla: Memory safety bugs fixed in Firefox 79 and Firefox ESR 68.11","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el8_2","firefox-0:68.11.0-1.el8_1","firefox-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_0","firefox-0:68.11.0-1.el8_0","thunderbird-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_2","thunderbird-0:68.11.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15659.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15655","severity":"important","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1861644","bugzilla_description":"CVE-2020-15655 Mozilla: Extension APIs could be used to bypass Same-Origin Policy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15655.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15653","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1861645","bugzilla_description":"CVE-2020-15653 Mozilla: Bypassing iframe sandbox when allowing popups","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15653.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15656","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1861646","bugzilla_description":"CVE-2020-15656 Mozilla: Type confusion for special arguments in IonMonkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15658","severity":"low","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1861647","bugzilla_description":"CVE-2020-15658 Mozilla: Overriding file type when saving to disk","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15658.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2020-15657","severity":"low","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1861648","bugzilla_description":"CVE-2020-15657 Mozilla: DLL hijacking due to incorrect loading path","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15657.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2020-15654","severity":"low","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1861649","bugzilla_description":"CVE-2020-15654 Mozilla: Custom cursor can overlay user interface","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15654.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2020-15649","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1870408","bugzilla_description":"CVE-2020-15649 Mozilla: Exfiltrating local files through malicious file picker application","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15649.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15650","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1870410","bugzilla_description":"CVE-2020-15650 Mozilla: Overwriting local files through malicious file picker application","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15650.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6514","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3377","RHSA-2020:3344","RHSA-2020:3345","RHSA-2020:3254","RHSA-2020:3342","RHSA-2020:3233","RHSA-2020:3343","RHSA-2020:3241","RHSA-2020:3253","RHSA-2020:3341","RHSA-2020:3229"],"bugzilla":"1857349","bugzilla_description":"CVE-2020-6514 chromium-browser: Inappropriate implementation in WebRTC","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el8_2","firefox-0:68.11.0-1.el8_1","firefox-0:68.11.0-1.el6_10","chromium-browser-0:84.0.4147.105-2.el6_10","thunderbird-0:68.11.0-1.el8_0","firefox-0:68.11.0-1.el8_0","thunderbird-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_2","thunderbird-0:68.11.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6514.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-12412","severity":"moderate","public_date":"2020-07-09T00:00:00Z","advisories":[],"bugzilla":"1855560","bugzilla_description":"CVE-2020-12412 firefox: address bar spoof using history navigation and blocked ports","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12412.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2020-15648","severity":"moderate","public_date":"2020-07-08T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1872537","bugzilla_description":"CVE-2020-15648 Mozilla: X-Frame-Options bypass using object or embed tags","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15648.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-12417","severity":"important","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2828","RHSA-2020:2906","RHSA-2020:2826","RHSA-2020:2827","RHSA-2020:2825"],"bugzilla":"1853014","bugzilla_description":"CVE-2020-12417 Mozilla: Memory corruption due to missing sign-extension for ValueTags on ARM64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["firefox-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","firefox-0:68.10.0-1.el7_8","thunderbird-0:68.10.0-1.el8_1","firefox-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el7_8","firefox-0:68.10.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12417.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12418","severity":"important","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2828","RHSA-2020:2906","RHSA-2020:2826","RHSA-2020:2827","RHSA-2020:2824","RHSA-2020:2825","RHSA-2020:2966"],"bugzilla":"1853015","bugzilla_description":"CVE-2020-12418 Mozilla: Information disclosure due to manipulated URL object","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["firefox-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","firefox-0:68.10.0-1.el7_8","thunderbird-0:68.10.0-1.el8_1","firefox-0:68.10.0-1.el6_10","thunderbird-0:68.10.0-1.el6_10","firefox-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el7_8","firefox-0:68.10.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12418.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12419","severity":"important","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2828","RHSA-2020:2906","RHSA-2020:2826","RHSA-2020:2827","RHSA-2020:2824","RHSA-2020:2825","RHSA-2020:2966"],"bugzilla":"1853016","bugzilla_description":"CVE-2020-12419 Mozilla: Use-after-free in nsGlobalWindowInner","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","firefox-0:68.10.0-1.el7_8","thunderbird-0:68.10.0-1.el8_1","firefox-0:68.10.0-1.el6_10","thunderbird-0:68.10.0-1.el6_10","firefox-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el7_8","firefox-0:68.10.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12419.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12420","severity":"important","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2828","RHSA-2020:2906","RHSA-2020:2826","RHSA-2020:2827","RHSA-2020:2824","RHSA-2020:2825","RHSA-2020:2966"],"bugzilla":"1853017","bugzilla_description":"CVE-2020-12420 Mozilla: Use-After-Free when trying to connect to a STUN server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","firefox-0:68.10.0-1.el7_8","thunderbird-0:68.10.0-1.el8_1","firefox-0:68.10.0-1.el6_10","thunderbird-0:68.10.0-1.el6_10","firefox-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el7_8","firefox-0:68.10.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12420.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12421","severity":"moderate","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2828","RHSA-2020:2906","RHSA-2020:2826","RHSA-2020:2827","RHSA-2020:2824","RHSA-2020:2825","RHSA-2020:2966"],"bugzilla":"1853018","bugzilla_description":"CVE-2020-12421 Mozilla: Add-On updates did not respect the same certificate trust rules as software updates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-296","affected_packages":["firefox-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","firefox-0:68.10.0-1.el7_8","thunderbird-0:68.10.0-1.el8_1","firefox-0:68.10.0-1.el6_10","thunderbird-0:68.10.0-1.el6_10","firefox-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el7_8","firefox-0:68.10.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12421.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-12423","severity":"moderate","public_date":"2020-06-30T00:00:00Z","advisories":[],"bugzilla":"1872536","bugzilla_description":"CVE-2020-12423 Mozilla: DLL Hijacking due to searching %PATH% for a library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12423.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12422","severity":"moderate","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1872538","bugzilla_description":"CVE-2020-12422 Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12422.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12424","severity":"low","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1872539","bugzilla_description":"CVE-2020-12424 Mozilla: WebRTC permission prompt could have been bypassed by a compromised content process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12424.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-12425","severity":"low","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1872540","bugzilla_description":"CVE-2020-12425 Mozilla: Out of bound read in Date.parse()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12425.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-12410","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2378","RHSA-2020:2379","RHSA-2020:2381","RHSA-2020:2382","RHSA-2020:2615","RHSA-2020:2616","RHSA-2020:2380","RHSA-2020:2613","RHSA-2020:2614","RHSA-2020:2611"],"bugzilla":"1843030","bugzilla_description":"CVE-2020-12410 Mozilla: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.9.0-1.el8_2","thunderbird-0:68.9.0-1.el6_10","firefox-0:68.9.0-1.el6_10","thunderbird-0:68.9.0-1.el8_0","thunderbird-0:68.9.0-1.el8_1","thunderbird-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el8_1","firefox-0:68.9.0-1.el8_0","firefox-0:68.9.0-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12410.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12406","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2378","RHSA-2020:2379","RHSA-2020:2381","RHSA-2020:2382","RHSA-2020:2615","RHSA-2020:2616","RHSA-2020:2380","RHSA-2020:2613","RHSA-2020:2614","RHSA-2020:2611"],"bugzilla":"1843312","bugzilla_description":"CVE-2020-12406 Mozilla: JavaScript Type confusion with NativeTypes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:68.9.0-1.el8_2","thunderbird-0:68.9.0-1.el6_10","firefox-0:68.9.0-1.el6_10","thunderbird-0:68.9.0-1.el8_0","thunderbird-0:68.9.0-1.el8_1","thunderbird-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el8_1","firefox-0:68.9.0-1.el8_0","firefox-0:68.9.0-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12406.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12405","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2378","RHSA-2020:2379","RHSA-2020:2381","RHSA-2020:2382","RHSA-2020:2615","RHSA-2020:2616","RHSA-2020:2380","RHSA-2020:2613","RHSA-2020:2614","RHSA-2020:2611"],"bugzilla":"1843313","bugzilla_description":"CVE-2020-12405 Mozilla: Use-after-free in SharedWorkerService","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.9.0-1.el8_2","thunderbird-0:68.9.0-1.el6_10","firefox-0:68.9.0-1.el6_10","thunderbird-0:68.9.0-1.el8_0","thunderbird-0:68.9.0-1.el8_1","thunderbird-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el8_1","firefox-0:68.9.0-1.el8_0","firefox-0:68.9.0-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12399","severity":"moderate","public_date":"2020-05-21T00:00:00Z","advisories":[],"bugzilla":"1826177","bugzilla_description":"CVE-2020-12399 nss: Timing attack on DSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12399.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12387","severity":"critical","public_date":"2020-05-05T00:00:00Z","advisories":["RHSA-2020:2037","RHSA-2020:2048","RHSA-2020:2049","RHSA-2020:2046","RHSA-2020:2036","RHSA-2020:2047","RHSA-2020:2033","RHSA-2020:2031","RHSA-2020:2032","RHSA-2020:2050"],"bugzilla":"1831761","bugzilla_description":"CVE-2020-12387 Mozilla: Use-after-free during worker shutdown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:68.8.0-1.el7_8","thunderbird-0:68.8.0-1.el8_0","firefox-0:68.8.0-1.el6_10","thunderbird-0:68.8.0-1.el7_8","firefox-0:68.8.0-1.el8_0","thunderbird-0:68.8.0-1.el8_2","firefox-0:68.8.0-1.el8_1","thunderbird-0:68.8.0-1.el6_10","firefox-0:68.8.0-1.el8_2","thunderbird-0:68.8.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6831","severity":"important","public_date":"2020-05-05T00:00:00Z","advisories":["RHSA-2020:2037","RHSA-2020:2048","RHSA-2020:2049","RHSA-2020:2046","RHSA-2020:2036","RHSA-2020:2047","RHSA-2020:2033","RHSA-2020:2064","RHSA-2020:2031","RHSA-2020:2032","RHSA-2020:2050"],"bugzilla":"1831763","bugzilla_description":"CVE-2020-6831 usrsctp: Buffer overflow in AUTH chunk input validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:68.8.0-1.el7_8","thunderbird-0:68.8.0-1.el8_0","chromium-browser-0:81.0.4044.138-1.el6_10","firefox-0:68.8.0-1.el6_10","thunderbird-0:68.8.0-1.el7_8","firefox-0:68.8.0-1.el8_0","thunderbird-0:68.8.0-1.el8_2","firefox-0:68.8.0-1.el8_1","thunderbird-0:68.8.0-1.el6_10","firefox-0:68.8.0-1.el8_2","thunderbird-0:68.8.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6831.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-12392","severity":"moderate","public_date":"2020-05-05T00:00:00Z","advisories":["RHSA-2020:2037","RHSA-2020:2048","RHSA-2020:2049","RHSA-2020:2046","RHSA-2020:2036","RHSA-2020:2047","RHSA-2020:2033","RHSA-2020:2031","RHSA-2020:2032","RHSA-2020:2050"],"bugzilla":"1831764","bugzilla_description":"CVE-2020-12392 Mozilla: Arbitrary local file access with 'Copy as cURL'","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["firefox-0:68.8.0-1.el7_8","thunderbird-0:68.8.0-1.el8_0","firefox-0:68.8.0-1.el6_10","thunderbird-0:68.8.0-1.el7_8","firefox-0:68.8.0-1.el8_0","thunderbird-0:68.8.0-1.el8_2","firefox-0:68.8.0-1.el8_1","thunderbird-0:68.8.0-1.el6_10","firefox-0:68.8.0-1.el8_2","thunderbird-0:68.8.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12392.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-12395","severity":"critical","public_date":"2020-05-05T00:00:00Z","advisories":["RHSA-2020:2037","RHSA-2020:2048","RHSA-2020:2049","RHSA-2020:2046","RHSA-2020:2036","RHSA-2020:2047","RHSA-2020:2033","RHSA-2020:2031","RHSA-2020:2032","RHSA-2020:2050"],"bugzilla":"1831765","bugzilla_description":"CVE-2020-12395 Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:68.8.0-1.el7_8","thunderbird-0:68.8.0-1.el8_0","firefox-0:68.8.0-1.el6_10","thunderbird-0:68.8.0-1.el7_8","firefox-0:68.8.0-1.el8_0","thunderbird-0:68.8.0-1.el8_2","firefox-0:68.8.0-1.el8_1","thunderbird-0:68.8.0-1.el6_10","firefox-0:68.8.0-1.el8_2","thunderbird-0:68.8.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12395.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-12388","severity":"critical","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1831944","bugzilla_description":"CVE-2020-12388 Mozilla: Sandbox escape with improperly guarded Access Tokens","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12388.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"10.0"},{"CVE":"CVE-2020-12389","severity":"important","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1831945","bugzilla_description":"CVE-2020-12389 Mozilla: Sandbox escape with improperly separated process types","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12389.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"10.0"},{"CVE":"CVE-2020-12393","severity":"moderate","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1831946","bugzilla_description":"CVE-2020-12393 Mozilla: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12393.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12390","severity":"moderate","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1834686","bugzilla_description":"CVE-2020-12390 Mozilla: Incorrect serialization of nsIPrincipal.origin for IPv6 addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12390.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-12391","severity":"moderate","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1834687","bugzilla_description":"CVE-2020-12391 Mozilla: Content-Security-Policy bypass using object elements","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12391.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-12394","severity":"low","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1834688","bugzilla_description":"CVE-2020-12394 Mozilla: URL spoofing in location bar when unfocussed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12394.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-12396","severity":"important","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1834689","bugzilla_description":"CVE-2020-12396 Mozilla: Memory safety bugs fixed in Firefox 76","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12396.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-6463","severity":"important","public_date":"2020-04-21T00:00:00Z","advisories":["RHSA-2020:3344","RHSA-2020:3345","RHSA-2020:1970","RHSA-2020:3254","RHSA-2020:3342","RHSA-2020:3233","RHSA-2020:3343","RHSA-2020:3241","RHSA-2020:3253","RHSA-2020:3341","RHSA-2020:3229"],"bugzilla":"1840893","bugzilla_description":"CVE-2020-6463 chromium-browser: Use after free in ANGLE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el8_2","firefox-0:68.11.0-1.el8_1","firefox-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_0","firefox-0:68.11.0-1.el8_0","thunderbird-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_2","chromium-browser-0:81.0.4044.122-1.el6_10","thunderbird-0:68.11.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6463.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6823","severity":"moderate","public_date":"2020-04-10T12:00:00Z","advisories":[],"bugzilla":"1821693","bugzilla_description":"CVE-2020-6823 Mozilla: Malicious Extension could obtain auth codes from OAuth login flows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6823.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-6824","severity":"moderate","public_date":"2020-04-10T12:00:00Z","advisories":[],"bugzilla":"1821695","bugzilla_description":"CVE-2020-6824 Mozilla: Generated passwords may be identical on the same site between separate private browsing sessions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6824.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2020-6826","severity":"important","public_date":"2020-04-10T12:00:00Z","advisories":[],"bugzilla":"1821696","bugzilla_description":"CVE-2020-6826 Mozilla: Memory safety bugs fixed in Firefox 75","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6826.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-6821","severity":"important","public_date":"2020-04-08T00:00:00Z","advisories":["RHSA-2020:1420","RHSA-2020:1496","RHSA-2020:1488","RHSA-2020:1495","RHSA-2020:1406","RHSA-2020:1429","RHSA-2020:1489","RHSA-2020:1404"],"bugzilla":"1821674","bugzilla_description":"CVE-2020-6821 Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["firefox-0:68.7.0-2.el7_8","thunderbird-0:68.7.0-1.el8_0","thunderbird-0:68.7.0-1.el8_1","firefox-0:68.7.0-2.el8_0","thunderbird-0:68.7.0-1.el6_10","firefox-0:68.7.0-2.el6_10","thunderbird-0:68.7.0-1.el7_8","firefox-0:68.7.0-2.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6821.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-6822","severity":"moderate","public_date":"2020-04-08T00:00:00Z","advisories":["RHSA-2020:1420","RHSA-2020:1496","RHSA-2020:1488","RHSA-2020:1495","RHSA-2020:1406","RHSA-2020:1429","RHSA-2020:1489","RHSA-2020:1404"],"bugzilla":"1821676","bugzilla_description":"CVE-2020-6822 Mozilla: Out of bounds write in GMPDecodeData when processing large images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["firefox-0:68.7.0-2.el7_8","thunderbird-0:68.7.0-1.el8_0","thunderbird-0:68.7.0-1.el8_1","firefox-0:68.7.0-2.el8_0","thunderbird-0:68.7.0-1.el6_10","firefox-0:68.7.0-2.el6_10","thunderbird-0:68.7.0-1.el7_8","firefox-0:68.7.0-2.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6822.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6825","severity":"important","public_date":"2020-04-08T00:00:00Z","advisories":["RHSA-2020:1420","RHSA-2020:1496","RHSA-2020:1488","RHSA-2020:1495","RHSA-2020:1406","RHSA-2020:1429","RHSA-2020:1489","RHSA-2020:1404"],"bugzilla":"1821682","bugzilla_description":"CVE-2020-6825 Mozilla: Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:68.7.0-2.el7_8","thunderbird-0:68.7.0-1.el8_0","thunderbird-0:68.7.0-1.el8_1","firefox-0:68.7.0-2.el8_0","thunderbird-0:68.7.0-1.el6_10","firefox-0:68.7.0-2.el6_10","thunderbird-0:68.7.0-1.el7_8","firefox-0:68.7.0-2.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-6828","severity":"important","public_date":"2020-04-08T00:00:00Z","advisories":[],"bugzilla":"1821967","bugzilla_description":"CVE-2020-6828 Mozilla: Preference overwrite via crafted Intent from malicious Android application","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-642","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6828.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-6827","severity":"important","public_date":"2020-04-08T00:00:00Z","advisories":[],"bugzilla":"1821968","bugzilla_description":"CVE-2020-6827 Mozilla: Custom Tabs in Firefox for Android could have the URI spoofed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6827.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2020-6819","severity":"critical","public_date":"2020-04-03T00:00:00Z","advisories":["RHSA-2020:1496","RHSA-2020:1488","RHSA-2020:1341","RHSA-2020:1495","RHSA-2020:1340","RHSA-2020:1339","RHSA-2020:1489","RHSA-2020:1338"],"bugzilla":"1820869","bugzilla_description":"CVE-2020-6819 Mozilla: Use-after-free while running the nsDocShell destructor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:68.6.1-1.el6_10","firefox-0:68.6.1-1.el8_1","firefox-0:68.6.1-1.el8_0","thunderbird-0:68.7.0-1.el8_0","thunderbird-0:68.7.0-1.el8_1","thunderbird-0:68.7.0-1.el6_10","firefox-0:68.6.1-1.el7_8","thunderbird-0:68.7.0-1.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6819.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6820","severity":"critical","public_date":"2020-04-03T00:00:00Z","advisories":["RHSA-2020:1496","RHSA-2020:1488","RHSA-2020:1341","RHSA-2020:1495","RHSA-2020:1340","RHSA-2020:1339","RHSA-2020:1489","RHSA-2020:1338"],"bugzilla":"1820878","bugzilla_description":"CVE-2020-6820 Mozilla: Use-after-free when handling a ReadableStream","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:68.6.1-1.el6_10","firefox-0:68.6.1-1.el8_1","firefox-0:68.6.1-1.el8_0","thunderbird-0:68.7.0-1.el8_0","thunderbird-0:68.7.0-1.el8_1","thunderbird-0:68.7.0-1.el6_10","firefox-0:68.6.1-1.el7_8","thunderbird-0:68.7.0-1.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6820.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6805","severity":"important","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812199","bugzilla_description":"CVE-2020-6805 Mozilla: Use-after-free when removing data about origins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6805.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6806","severity":"important","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812200","bugzilla_description":"CVE-2020-6806 Mozilla: BodyStream::OnInputStreamReady was missing protections against state confusion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6806.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6807","severity":"important","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812201","bugzilla_description":"CVE-2020-6807 Mozilla: Use-after-free in cubeb during stream destruction","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6807.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6811","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812202","bugzilla_description":"CVE-2020-6811 Mozilla: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-78","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6811.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-20503","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:1270","RHSA-2020:0820"],"bugzilla":"1812203","bugzilla_description":"CVE-2019-20503 usrsctp: Out of bounds reads in sctp_load_addresses_from_init()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","chromium-browser-0:80.0.3987.149-1.el6_10","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20503.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6812","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812204","bugzilla_description":"CVE-2020-6812 Mozilla: The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6814","severity":"important","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812205","bugzilla_description":"CVE-2020-6814 Mozilla: Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6814.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-6808","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":[],"bugzilla":"1829342","bugzilla_description":"CVE-2020-6808 Mozilla: URL Spoofing via javascript: URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6809","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":[],"bugzilla":"1829343","bugzilla_description":"CVE-2020-6809 Mozilla: Web Extensions with the all-urls permission could access local files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6809.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-6810","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":[],"bugzilla":"1829344","bugzilla_description":"CVE-2020-6810 Mozilla: Focusing a popup while in fullscreen could have obscured the fullscreen notification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6813","severity":"low","public_date":"2020-03-10T00:00:00Z","advisories":[],"bugzilla":"1829345","bugzilla_description":"CVE-2020-6813 Mozilla: @import statements in CSS could bypass the Content Security Policy nonce feature","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6813.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-6815","severity":"important","public_date":"2020-03-10T00:00:00Z","advisories":[],"bugzilla":"1829346","bugzilla_description":"CVE-2020-6815 Mozilla: Memory and script safety bugs fixed in Firefox 74","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6815.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-6796","severity":"important","public_date":"2020-02-11T00:00:00Z","advisories":["RHSA-2020:0520","RHSA-2020:0519","RHSA-2020:0521","RHSA-2020:0512"],"bugzilla":"1801916","bugzilla_description":"CVE-2020-6796 Mozilla: Missing bounds check on shared memory read in the parent process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["firefox-0:68.5.0-2.el8_0","firefox-0:68.5.0-2.el8_1","firefox-0:68.5.0-2.el7_7","firefox-0:68.5.0-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6796.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6797","severity":"moderate","public_date":"2020-02-11T00:00:00Z","advisories":[],"bugzilla":"1801917","bugzilla_description":"CVE-2020-6797 Mozilla: Extensions granted downloads.open permission could open arbitrary applications on Mac OSX","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6798","severity":"moderate","public_date":"2020-02-11T00:00:00Z","advisories":["RHSA-2020:0520","RHSA-2020:0574","RHSA-2020:0519","RHSA-2020:0577","RHSA-2020:0521","RHSA-2020:0576","RHSA-2020:0565","RHSA-2020:0512"],"bugzilla":"1801918","bugzilla_description":"CVE-2020-6798 Mozilla: Incorrect parsing of template tag could result in JavaScript injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["firefox-0:68.5.0-2.el8_0","firefox-0:68.5.0-2.el8_1","thunderbird-0:68.5.0-1.el8_1","thunderbird-0:68.5.0-1.el8_0","firefox-0:68.5.0-2.el7_7","thunderbird-0:68.5.0-1.el6_10","firefox-0:68.5.0-2.el6_10","thunderbird-0:68.5.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6799","severity":"moderate","public_date":"2020-02-11T00:00:00Z","advisories":[],"bugzilla":"1801919","bugzilla_description":"CVE-2020-6799 Mozilla: Arbitrary code execution when opening pdf links from other applications, when Firefox is configured as default pdf reader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6799.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6800","severity":"important","public_date":"2020-02-11T00:00:00Z","advisories":["RHSA-2020:0520","RHSA-2020:0574","RHSA-2020:0519","RHSA-2020:0577","RHSA-2020:0521","RHSA-2020:0576","RHSA-2020:0565","RHSA-2020:0512"],"bugzilla":"1801920","bugzilla_description":"CVE-2020-6800 Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:68.5.0-2.el8_0","firefox-0:68.5.0-2.el8_1","thunderbird-0:68.5.0-1.el8_1","thunderbird-0:68.5.0-1.el8_0","firefox-0:68.5.0-2.el7_7","thunderbird-0:68.5.0-1.el6_10","firefox-0:68.5.0-2.el6_10","thunderbird-0:68.5.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6800.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6801","severity":"important","public_date":"2020-02-11T00:00:00Z","advisories":[],"bugzilla":"1829100","bugzilla_description":"CVE-2020-6801 Mozilla: Memory safety bugs fixed in Firefox 73","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6801.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-20446","severity":"moderate","public_date":"2020-02-02T00:00:00Z","advisories":[],"bugzilla":"1797608","bugzilla_description":"CVE-2019-20446 librsvg: Resource exhaustion via crafted SVG file with nested patterns","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20446.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-17020","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1790800","bugzilla_description":"CVE-2019-17020 Mozilla: Content Security Policy bypass for XSL stylesheet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17020.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-6750","severity":"moderate","public_date":"2020-01-09T00:00:00Z","advisories":[],"bugzilla":"1790288","bugzilla_description":"CVE-2020-6750 glib: Mishandling of proxy_addr field in GSocketClient may lead to proxy being ignored","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-17026","severity":"critical","public_date":"2020-01-08T00:00:00Z","advisories":["RHSA-2020:0111","RHSA-2020:0123","RHSA-2020:0085","RHSA-2020:0120","RHSA-2020:0086","RHSA-2020:0295","RHSA-2020:0292","RHSA-2020:0127"],"bugzilla":"1789214","bugzilla_description":"CVE-2019-17026 Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:68.4.1-2.el6_10","firefox-0:68.4.1-1.el6_10","thunderbird-0:68.4.1-2.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.4.1-1.el8_1","thunderbird-0:68.4.1-2.el8_1","firefox-0:68.4.1-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17026.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-17015","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":[],"bugzilla":"1788722","bugzilla_description":"CVE-2019-17015 Mozilla: Memory corruption in parent process during new content process initialization on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17015.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-17016","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:0111","RHSA-2020:0123","RHSA-2020:0085","RHSA-2020:0120","RHSA-2020:0086","RHSA-2020:0295","RHSA-2020:0292","RHSA-2020:0127"],"bugzilla":"1788723","bugzilla_description":"CVE-2019-17016 Mozilla: Bypass of @namespace CSS sanitization during pasting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["thunderbird-0:68.4.1-2.el6_10","firefox-0:68.4.1-1.el6_10","thunderbird-0:68.4.1-2.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.4.1-1.el8_1","thunderbird-0:68.4.1-2.el8_1","firefox-0:68.4.1-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17016.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17017","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:0111","RHSA-2020:0123","RHSA-2020:0085","RHSA-2020:0120","RHSA-2020:0086","RHSA-2020:0295","RHSA-2020:0292","RHSA-2020:0127"],"bugzilla":"1788724","bugzilla_description":"CVE-2019-17017 Mozilla: Type Confusion in XPCVariant.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:68.4.1-2.el6_10","firefox-0:68.4.1-1.el6_10","thunderbird-0:68.4.1-2.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.4.1-1.el8_1","thunderbird-0:68.4.1-2.el8_1","firefox-0:68.4.1-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17017.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-17021","severity":"moderate","public_date":"2020-01-07T00:00:00Z","advisories":[],"bugzilla":"1788725","bugzilla_description":"CVE-2019-17021 Mozilla: Heap address disclosure in parent process during content process initialization on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17021.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17022","severity":"moderate","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:0111","RHSA-2020:0123","RHSA-2020:0085","RHSA-2020:0120","RHSA-2020:0086","RHSA-2020:0295","RHSA-2020:0292","RHSA-2020:0127"],"bugzilla":"1788726","bugzilla_description":"CVE-2019-17022 Mozilla: CSS sanitization does not escape HTML tags","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["thunderbird-0:68.4.1-2.el6_10","firefox-0:68.4.1-1.el6_10","thunderbird-0:68.4.1-2.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.4.1-1.el8_1","thunderbird-0:68.4.1-2.el8_1","firefox-0:68.4.1-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17024","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:0111","RHSA-2020:0123","RHSA-2020:0085","RHSA-2020:0120","RHSA-2020:0086","RHSA-2020:0295","RHSA-2020:0292","RHSA-2020:0127"],"bugzilla":"1788727","bugzilla_description":"CVE-2019-17024 Mozilla: Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.4.1-2.el6_10","firefox-0:68.4.1-1.el6_10","thunderbird-0:68.4.1-2.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.4.1-1.el8_1","thunderbird-0:68.4.1-2.el8_1","firefox-0:68.4.1-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17024.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-17008","severity":"important","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2019:4205","RHSA-2019:4107","RHSA-2019:4108","RHSA-2019:4148","RHSA-2020:0295","RHSA-2020:0292","RHSA-2019:4111","RHSA-2019:4195"],"bugzilla":"1779431","bugzilla_description":"CVE-2019-17008 Mozilla: Use-after-free in worker destruction","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.3.0-2.el8_1","thunderbird-0:68.3.0-3.el6_10","firefox-0:68.3.0-1.el7_7","thunderbird-0:68.3.0-1.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.3.0-1.el6_10","firefox-0:68.3.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17008.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13722","severity":"important","public_date":"2019-12-03T00:00:00Z","advisories":[],"bugzilla":"1779432","bugzilla_description":"CVE-2019-13722 Mozilla: Stack corruption due to incorrect number of arguments in WebRTC code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628->CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13722.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17009","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":[],"bugzilla":"1779433","bugzilla_description":"CVE-2019-17009 Mozilla: Updater temporary files accessible to unprivileged processes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17009.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17010","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2019:4205","RHSA-2019:4107","RHSA-2019:4108","RHSA-2019:4148","RHSA-2020:0295","RHSA-2020:0292","RHSA-2019:4111","RHSA-2019:4195"],"bugzilla":"1779434","bugzilla_description":"CVE-2019-17010 Mozilla: Use-after-free when performing device orientation checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.3.0-2.el8_1","thunderbird-0:68.3.0-3.el6_10","firefox-0:68.3.0-1.el7_7","thunderbird-0:68.3.0-1.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.3.0-1.el6_10","firefox-0:68.3.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17005","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2019:4205","RHSA-2019:4107","RHSA-2019:4108","RHSA-2019:4148","RHSA-2020:0295","RHSA-2020:0292","RHSA-2019:4111","RHSA-2019:4195"],"bugzilla":"1779435","bugzilla_description":"CVE-2019-17005 Mozilla: Buffer overflow in plain text serializer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.3.0-2.el8_1","thunderbird-0:68.3.0-3.el6_10","firefox-0:68.3.0-1.el7_7","thunderbird-0:68.3.0-1.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.3.0-1.el6_10","firefox-0:68.3.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17011","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2019:4205","RHSA-2019:4107","RHSA-2019:4108","RHSA-2019:4148","RHSA-2020:0295","RHSA-2020:0292","RHSA-2019:4111","RHSA-2019:4195"],"bugzilla":"1779436","bugzilla_description":"CVE-2019-17011 Mozilla: Use-after-free when retrieving a document in antitracking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.3.0-2.el8_1","thunderbird-0:68.3.0-3.el6_10","firefox-0:68.3.0-1.el7_7","thunderbird-0:68.3.0-1.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.3.0-1.el6_10","firefox-0:68.3.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17011.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17012","severity":"important","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2019:4205","RHSA-2019:4107","RHSA-2019:4108","RHSA-2019:4148","RHSA-2020:0295","RHSA-2020:0292","RHSA-2019:4111","RHSA-2019:4195"],"bugzilla":"1779437","bugzilla_description":"CVE-2019-17012 Mozilla: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.3.0-2.el8_1","thunderbird-0:68.3.0-3.el6_10","firefox-0:68.3.0-1.el7_7","thunderbird-0:68.3.0-1.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.3.0-1.el6_10","firefox-0:68.3.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17014","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":[],"bugzilla":"1779440","bugzilla_description":"CVE-2019-17014 Mozilla: Dragging and dropping a cross-origin resource, incorrectly loaded as an image, could result in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17013","severity":"important","public_date":"2019-12-03T00:00:00Z","advisories":[],"bugzilla":"1779441","bugzilla_description":"CVE-2019-17013 Mozilla: Memory safety bugs fixed in Firefox 71","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17013.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11745","severity":"important","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:0243","RHSA-2019:4190","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:4114","RHSA-2020:1461","RHSA-2019:4152","RHSA-2020:0466"],"bugzilla":"1774831","bugzilla_description":"CVE-2019-11745 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["nss-0:3.44.0-8.el8_0","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-7.el7_7","nss-softokn-0:3.14.3-23.el6_6","nss-0:3.44.0-9.el8_1","nss-softokn-0:3.44.0-6.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11757","severity":"important","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764438","bugzilla_description":"CVE-2019-11757 Mozilla: Use-after-free when creating index updates in IndexedDB","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11757.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11758","severity":"important","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764439","bugzilla_description":"CVE-2019-11758 Mozilla: Potentially exploitable crash due to 360 Total Security","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11758.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11759","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764440","bugzilla_description":"CVE-2019-11759 Mozilla: Stack buffer overflow in HKDF output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11759.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11760","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764441","bugzilla_description":"CVE-2019-11760 Mozilla: Stack buffer overflow in WebRTC networking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11760.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11761","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764442","bugzilla_description":"CVE-2019-11761 Mozilla: Unintended access to a privileged JSONView object","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-749","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11761.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-11762","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764443","bugzilla_description":"CVE-2019-11762 Mozilla: document.domain-based origin isolation has same-origin-property violation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11762.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11763","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764444","bugzilla_description":"CVE-2019-11763 Mozilla: Incorrect HTML parsing results in XSS bypass technique","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11763.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11764","severity":"critical","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764446","bugzilla_description":"CVE-2019-11764 Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11764.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11754","severity":"moderate","public_date":"2019-09-18T00:00:00Z","advisories":[],"bugzilla":"1753448","bugzilla_description":"CVE-2019-11754 Mozilla: Pointer Lock is enabled with no user notification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11754.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-15903","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3193"],"bugzilla":"1752592","bugzilla_description":"CVE-2019-15903 expat: heap-based buffer over-read via crafted XML input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-125)","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","thunderbird-0:68.2.0-1.el7_7","expat-0:2.1.0-12.el7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15903.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-11740","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748652","bugzilla_description":"CVE-2019-11740 Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11742","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748653","bugzilla_description":"CVE-2019-11742 Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11742.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11743","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748654","bugzilla_description":"CVE-2019-11743 Mozilla: Cross-origin access to unload event attributes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11743.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11744","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748655","bugzilla_description":"CVE-2019-11744 Mozilla: XSS by breaking out of title and textarea elements using innerHTML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11744.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11746","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748656","bugzilla_description":"CVE-2019-11746 Mozilla: Use-after-free while manipulating video","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11746.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11752","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748657","bugzilla_description":"CVE-2019-11752 Mozilla: Use-after-free while extracting a key value in IndexedDB","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11753","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1748659","bugzilla_description":"CVE-2019-11753 Mozilla: Privilege escalation with Mozilla Maintenance Service in custom Firefox installation location","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11753.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-9812","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2729"],"bugzilla":"1748660","bugzilla_description":"CVE-2019-9812 Mozilla: Sandbox escape through Firefox Sync","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["firefox-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11735","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2663"],"bugzilla":"1748661","bugzilla_description":"CVE-2019-11735 Mozilla: Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11736","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1748662","bugzilla_description":"CVE-2019-11736 Mozilla: File manipulation and privilege escalation in Mozilla Maintenance Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11738","severity":"low","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2663"],"bugzilla":"1748663","bugzilla_description":"CVE-2019-11738 Mozilla: Content security policy bypass through hash-based sources in directives","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2019-11747","severity":"low","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2663"],"bugzilla":"1748664","bugzilla_description":"CVE-2019-11747 Mozilla: 'Forget about this site' removes sites from pre-loaded HSTS list","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11747.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"3.4"},{"CVE":"CVE-2019-11748","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2663"],"bugzilla":"1748665","bugzilla_description":"CVE-2019-11748 Mozilla: Persistence of WebRTC permissions in a third party context","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11748.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11749","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2663"],"bugzilla":"1748666","bugzilla_description":"CVE-2019-11749 Mozilla: Camera information available without prompting using getUserMedia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11749.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-11750","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2663"],"bugzilla":"1748667","bugzilla_description":"CVE-2019-11750 Mozilla: Type confusion in Spidermonkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11751","severity":"critical","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1748668","bugzilla_description":"CVE-2019-11751 Mozilla: Malicious code execution through command line parameters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11751.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11741","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1748673","bugzilla_description":"CVE-2019-11741 Mozilla: Isolate addons.mozilla.org and accounts.firefox.com","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11741.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-5849","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1748674","bugzilla_description":"CVE-2019-5849 Mozilla: Out-of-bounds read in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5849.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11737","severity":"low","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1748675","bugzilla_description":"CVE-2019-11737 Mozilla: Content security policy directives ignore port and path if host is a wildcard","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-11734","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1748676","bugzilla_description":"CVE-2019-11734 Mozilla: Memory safety bugs fixed in Firefox 69","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11734.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-9382","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2018:3140","RHSA-2019:4254"],"bugzilla":"1763609","bugzilla_description":"CVE-2015-9382 freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["freetype-0:2.8-12.el7","freetype-0:2.3.11-19.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9382.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-9383","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1763613","bugzilla_description":"CVE-2015-9383 freetype: a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c may lead to a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9383.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-11733","severity":"moderate","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2729"],"bugzilla":"1745687","bugzilla_description":"CVE-2019-11733 firefox: stored passwords in 'Saved Logins' can be copied without master password entry","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-862|CWE-306)","affected_packages":["firefox-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11733.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11709","severity":"critical","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728430","bugzilla_description":"CVE-2019-11709 Mozilla: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11709.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11711","severity":"important","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728431","bugzilla_description":"CVE-2019-11711 Mozilla: Script injection within domain through inner window reuse","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11711.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11712","severity":"important","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728432","bugzilla_description":"CVE-2019-11712 Mozilla: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11712.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11713","severity":"important","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728433","bugzilla_description":"CVE-2019-11713 Mozilla: Use-after-free with HTTP/2 cached stream","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11713.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11715","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728434","bugzilla_description":"CVE-2019-11715 Mozilla: HTML parsing error can contribute to content XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11715.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11717","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728435","bugzilla_description":"CVE-2019-11717 Mozilla: Caret character improperly escaped in origins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11717.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11719","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1951","RHSA-2020:4076"],"bugzilla":"1728436","bugzilla_description":"CVE-2019-11719 nss: Out-of-bounds read when importing curve25519 private key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11719.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11729","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:4190","RHSA-2019:1951"],"bugzilla":"1728437","bugzilla_description":"CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["nss-0:3.44.0-7.el7_7","nss-util-0:3.44.0-4.el7_7","nss-0:3.44.0-7.el8_0","nss-softokn-0:3.44.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11729.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11730","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728438","bugzilla_description":"CVE-2019-11730 Mozilla: Same-origin policy treats all files in a directory as having the same-origin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11730.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-9811","severity":"important","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728439","bugzilla_description":"CVE-2019-9811 Mozilla: Sandbox escape via installation of malicious language pack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-807","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11714","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730980","bugzilla_description":"CVE-2019-11714 Mozilla: NeckoChild can trigger crash when accessed off of main thread","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-567","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11714.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2019-11716","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730981","bugzilla_description":"CVE-2019-11716 Mozilla: globalThis not enumerable until accessed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11716.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2019-11718","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730982","bugzilla_description":"CVE-2019-11718 Mozilla: Activity Stream writes unsanitized content to innerHTML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11718.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2019-11720","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730983","bugzilla_description":"CVE-2019-11720 Mozilla: Character encoding XSS vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11720.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2019-11721","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730984","bugzilla_description":"CVE-2019-11721 Mozilla: Domain spoofing through unicode latin 'kra' character","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11721.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2019-11723","severity":"low","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730985","bugzilla_description":"CVE-2019-11723 Mozilla: Cookie leakage during add-on fetching across private browsing boundaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11723.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2019-11724","severity":"low","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730986","bugzilla_description":"CVE-2019-11724 Mozilla: Retired site input.mozilla.org has remote troubleshooting permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11724.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2019-11725","severity":"low","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730987","bugzilla_description":"CVE-2019-11725 Mozilla: Websocket resources bypass safebrowsing protections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11725.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"3.4"},{"CVE":"CVE-2019-11728","severity":"low","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730989","bugzilla_description":"CVE-2019-11728 Mozilla: Port scanning through Alt-Svc header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11728.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"3.4"},{"CVE":"CVE-2019-11710","severity":"critical","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730990","bugzilla_description":"CVE-2019-11710 Mozilla: Memory safety bugs fixed in Firefox 68","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11710.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-20843","severity":"moderate","public_date":"2019-06-24T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1723723","bugzilla_description":"CVE-2018-20843 expat: large number of colons in input makes parser consume high amount of resources, leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["expat-0:2.1.0-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11708","severity":"important","public_date":"2019-06-20T00:00:00Z","advisories":["RHSA-2019:1696","RHSA-2019:1604","RHSA-2019:1626","RHSA-2019:1603","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1722673","bugzilla_description":"CVE-2019-11708 Mozilla: Sandbox escape using Prompt:Open","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":["thunderbird-0:60.7.2-2.el7_6","firefox-0:60.7.2-1.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10","firefox-0:60.7.2-1.el6_10","firefox-0:60.7.2-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11707","severity":"critical","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:1696","RHSA-2019:1604","RHSA-2019:1626","RHSA-2019:1603","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1721789","bugzilla_description":"CVE-2019-11707 Mozilla: Type confusion in Array.pop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:60.7.2-2.el7_6","firefox-0:60.7.2-1.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10","firefox-0:60.7.2-1.el6_10","firefox-0:60.7.2-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11707.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11702","severity":"moderate","public_date":"2019-06-11T00:00:00Z","advisories":[],"bugzilla":"1721805","bugzilla_description":"CVE-2019-11702 Mozilla: IE protocols can be used to open known local files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11702.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-12450","severity":"moderate","public_date":"2019-05-23T00:00:00Z","advisories":["RHSA-2019:3530","RHSA-2020:3978","RHBA-2019:3303"],"bugzilla":"1719141","bugzilla_description":"CVE-2019-12450 glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["glib2-0:2.56.1-7.el7","redhat-coreos-42.81.20191107.0","glib2-0:2.56.4-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.6"},{"CVE":"CVE-2019-11691","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712617","bugzilla_description":"CVE-2019-11691 Mozilla: Use-after-free in XMLHttpRequest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11691.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11692","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712618","bugzilla_description":"CVE-2019-11692 Mozilla: Use-after-free removing listeners in the event listener manager","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11692.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11693","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712619","bugzilla_description":"CVE-2019-11693 Mozilla: Buffer overflow in WebGL bufferdata on Linux","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11693.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11694","severity":"moderate","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1712620","bugzilla_description":"CVE-2019-11694 Mozilla: Uninitialized memory leakage in Windows sandbox","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11694.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11698","severity":"moderate","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712621","bugzilla_description":"CVE-2019-11698 Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-9797","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712622","bugzilla_description":"CVE-2019-9797 Mozilla: Cross-origin theft of images with createImageBitmap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9800","severity":"critical","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712623","bugzilla_description":"CVE-2019-9800 Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9815","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1712624","bugzilla_description":"CVE-2019-9815 Mozilla: Disable hyperthreading on content JavaScript threads on macOS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9816","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267"],"bugzilla":"1712625","bugzilla_description":"CVE-2019-9816 Mozilla: Type confusion with object groups and UnboxedObjects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9817","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712626","bugzilla_description":"CVE-2019-9817 Mozilla: Stealing of cross-domain images using canvas","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9818","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1712627","bugzilla_description":"CVE-2019-9818 Mozilla: Use-after-free in crash generation server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9819","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712628","bugzilla_description":"CVE-2019-9819 Mozilla: Compartment mismatch with fetch API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-567","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9820","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712629","bugzilla_description":"CVE-2019-9820 Mozilla: Use-after-free of ChromeEventHandler by DocShell","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9820.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9821","severity":"low","public_date":"2019-05-21T00:00:00Z","advisories":[],"bugzilla":"1712749","bugzilla_description":"CVE-2019-9821 firefox: use-after-free in AssertWorkerThread leading to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9821.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-9810","severity":"critical","public_date":"2019-03-22T00:00:00Z","advisories":["RHSA-2019:0671","RHSA-2019:0672","RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966"],"bugzilla":"1692181","bugzilla_description":"CVE-2019-9810 Mozilla: IonMonkey MArraySlice has incorrect alias information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["firefox-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el6_10","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9813","severity":"critical","public_date":"2019-03-22T00:00:00Z","advisories":["RHSA-2019:0671","RHSA-2019:0672","RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966"],"bugzilla":"1692182","bugzilla_description":"CVE-2019-9813 Mozilla: Ionmonkey type confusion with __proto__ mutations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["firefox-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el6_10","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18506","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690673","bugzilla_description":"CVE-2018-18506 Mozilla: Proxy Auto-Configuration file can define localhost access to be proxied","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-9788","severity":"critical","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690674","bugzilla_description":"CVE-2019-9788 Mozilla: Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9788.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9790","severity":"critical","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690675","bugzilla_description":"CVE-2019-9790 Mozilla: Use-after-free when removing in-use DOM elements","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9791","severity":"critical","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690676","bugzilla_description":"CVE-2019-9791 Mozilla: Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9791.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9792","severity":"critical","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690677","bugzilla_description":"CVE-2019-9792 Mozilla: IonMonkey leaks JS_OPTIMIZED_OUT magic value to script","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-787","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9792.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9793","severity":"important","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690678","bugzilla_description":"CVE-2019-9793 Mozilla: Improper bounds checks when Spectre mitigations are disabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9793.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9794","severity":"important","public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1690679","bugzilla_description":"CVE-2019-9794 Mozilla: Command line arguments not discarded during execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9794.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9795","severity":"important","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690680","bugzilla_description":"CVE-2019-9795 Mozilla: Type-confusion in IonMonkey JIT compiler","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843->CWE-787","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9796","severity":"important","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690681","bugzilla_description":"CVE-2019-9796 Mozilla: Use-after-free with SMIL animation controller","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9801","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1690682","bugzilla_description":"CVE-2019-9801 Mozilla: Windows programs that are not 'URL Handlers' are exposed to web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9801.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-5798","severity":"moderate","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:0708","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1688200","bugzilla_description":"CVE-2019-5798 chromium-browser: Out of bounds read in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","chromium-browser-0:73.0.3683.75-1.el6_10","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-5785","severity":"important","public_date":"2019-02-12T00:00:00Z","advisories":["RHSA-2019:0374","RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0373","RHSA-2019:0681"],"bugzilla":"1676991","bugzilla_description":"CVE-2019-5785 mozilla: Integer overflow in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["thunderbird-0:60.6.1-1.el8","firefox-0:60.5.1-1.el7_6","firefox-0:60.5.1-1.el6_10","thunderbird-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-18511","severity":"moderate","public_date":"2019-02-12T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1676997","bugzilla_description":"CVE-2018-18511 mozilla: Cross-origin theft of images with ImageBitmapRenderingContext","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-18500","severity":"critical","public_date":"2019-01-29T00:00:00Z","advisories":["RHSA-2019:0269","RHSA-2019:0218","RHSA-2019:0219","RHSA-2019:0270"],"bugzilla":"1670631","bugzilla_description":"CVE-2018-18500 Mozilla: Use-after-free parsing HTML5 stream","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.5.0-2.el7","firefox-0:60.5.0-2.el6","thunderbird-0:60.5.0-1.el6_10","thunderbird-0:60.5.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18501","severity":"critical","public_date":"2019-01-29T00:00:00Z","advisories":["RHSA-2019:0269","RHSA-2019:0218","RHSA-2019:0219","RHSA-2019:0270"],"bugzilla":"1670632","bugzilla_description":"CVE-2018-18501 Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.5.0-2.el7","firefox-0:60.5.0-2.el6","thunderbird-0:60.5.0-1.el6_10","thunderbird-0:60.5.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18501.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18505","severity":"important","public_date":"2019-01-29T00:00:00Z","advisories":["RHSA-2019:0269","RHSA-2019:0218","RHSA-2019:0219","RHSA-2019:0270"],"bugzilla":"1670633","bugzilla_description":"CVE-2018-18505 Mozilla: Privilege escalation through IPC channel messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["firefox-0:60.5.0-2.el7","firefox-0:60.5.0-2.el6","thunderbird-0:60.5.0-1.el6_10","thunderbird-0:60.5.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18505.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9633","severity":"moderate","public_date":"2019-01-29T00:00:00Z","advisories":[],"bugzilla":"1687805","bugzilla_description":"CVE-2019-9633 glib: g_socket_client_connected_callback in gio/gsocketclient.c allows to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2019-7317","severity":"low","public_date":"2019-01-25T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:2737","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:1309","RHSA-2019:1308","RHSA-2019:2590"],"bugzilla":"1672409","bugzilla_description":"CVE-2019-7317 libpng: use-after-free in png_image_free in png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","thunderbird-0:60.7.0-1.el6_10","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","firefox-0:60.7.0-1.el7_6","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-6461","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1669629","bugzilla_description":"CVE-2019-6461 cairo: assertion problem in _cairo_arc_in_direction in cairo-arc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6461.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2019-6462","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1671399","bugzilla_description":"CVE-2019-6462 cairo: infinite loop in the function _arc_error_normalized in the file cairo-arc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6462.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2018-12405","severity":"critical","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2019:0160"],"bugzilla":"1658397","bugzilla_description":"CVE-2018-12405 Mozilla: Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18492","severity":"important","public_date":"2018-12-11T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2019:0160"],"bugzilla":"1658399","bugzilla_description":"CVE-2018-18492 Mozilla: Use-after-free with select element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18492.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-18493","severity":"important","public_date":"2018-12-11T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2019:0160"],"bugzilla":"1658400","bugzilla_description":"CVE-2018-18493 Mozilla: Buffer overflow in accelerated 2D canvas with Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18493.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-18494","severity":"important","public_date":"2018-12-11T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2019:0160"],"bugzilla":"1658401","bugzilla_description":"CVE-2018-18494 Mozilla: Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18494.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-18498","severity":"important","public_date":"2018-12-11T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2019:0160"],"bugzilla":"1658402","bugzilla_description":"CVE-2018-18498 Mozilla: Integer overflow when calculating buffer sizes for images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18498.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12406","severity":"critical","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1692732","bugzilla_description":"CVE-2018-12406 firefox: memory safety bugs showing evidence of memory corruption leading to run arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->(CWE-185|CWE-787|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12406.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12407","severity":"important","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1692795","bugzilla_description":"CVE-2018-12407 firefox: buffer overflow with ANGLE library when using VertexBuffer11 module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12407.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18497","severity":"moderate","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1696112","bugzilla_description":"CVE-2018-18497 firefox: WebExtensions can load arbitrary URLs through pipe separators","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-59|CWE-270|CWE-552)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18497.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-18495","severity":"moderate","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1696138","bugzilla_description":"CVE-2018-18495 firefox: WebExtension content scripts can be loaded in about: pages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-59|CWE-270|CWE-552)->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18495.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-18335","severity":"important","public_date":"2018-12-04T00:00:00Z","advisories":["RHSA-2018:3803"],"bugzilla":"1656549","bugzilla_description":"CVE-2018-18335 chromium-browser: Heap buffer overflow in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["chromium-browser-0:71.0.3578.80-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18335.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18356","severity":"important","public_date":"2018-12-04T00:00:00Z","advisories":["RHSA-2019:0374","RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0373","RHSA-2019:0681","RHSA-2018:3803"],"bugzilla":"1656570","bugzilla_description":"CVE-2018-18356 chromium-browser, mozilla: Use after free in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:60.6.1-1.el8","firefox-0:60.5.1-1.el7_6","firefox-0:60.5.1-1.el6_10","chromium-browser-0:71.0.3578.80-1.el6_10","thunderbird-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18356.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-18510","severity":"low","public_date":"2018-11-16T00:00:00Z","advisories":[],"bugzilla":"1704188","bugzilla_description":"CVE-2018-18510 firefox: The about:crashcontent and about:crashparent pages can be triggered by web content allowing for a non-persistent DoS attack.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-749","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18510.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-12389","severity":"low","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005","RHSA-2018:3532","RHSA-2018:3531"],"bugzilla":"1642179","bugzilla_description":"CVE-2018-12389 Mozilla: Memory safety bugs fixed in Firefox ESR 60.3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:60.3.0-1.el6","firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6","thunderbird-0:60.3.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12389.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12390","severity":"critical","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005","RHSA-2018:3532","RHSA-2018:3531"],"bugzilla":"1642180","bugzilla_description":"CVE-2018-12390 Mozilla: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:60.3.0-1.el6","firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6","thunderbird-0:60.3.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12390.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12391","severity":"important","public_date":"2018-10-23T00:00:00Z","advisories":[],"bugzilla":"1642181","bugzilla_description":"CVE-2018-12391 Mozilla: HTTP Live Stream audio data is accessible cross-origin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12391.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12392","severity":"important","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005","RHSA-2018:3532","RHSA-2018:3531"],"bugzilla":"1642182","bugzilla_description":"CVE-2018-12392 Mozilla: Crash with nested event loops","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-364","affected_packages":["thunderbird-0:60.3.0-1.el6","firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6","thunderbird-0:60.3.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12392.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12393","severity":"important","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005","RHSA-2018:3532","RHSA-2018:3531"],"bugzilla":"1642183","bugzilla_description":"CVE-2018-12393 Mozilla: Integer overflow during Unicode conversion while loading JavaScript","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["thunderbird-0:60.3.0-1.el6","firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6","thunderbird-0:60.3.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12393.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12395","severity":"moderate","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005"],"bugzilla":"1642185","bugzilla_description":"CVE-2018-12395 Mozilla: WebExtension bypass of domain restrictions through header rewriting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12395.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12396","severity":"moderate","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005"],"bugzilla":"1642186","bugzilla_description":"CVE-2018-12396 Mozilla: WebExtension content scripts can execute in disallowed contexts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12396.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12397","severity":"moderate","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005"],"bugzilla":"1642187","bugzilla_description":"CVE-2018-12397 Mozilla: WebExtension local file permission check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12397.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12403","severity":"low","public_date":"2018-10-23T00:00:00Z","advisories":[],"bugzilla":"1692373","bugzilla_description":"CVE-2018-12403 firefox: mixed content warning is not displayed when HTTPS page loads a favicon over HTTP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-356|CWE-290)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12403.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-12388","severity":"critical","public_date":"2018-10-23T00:00:00Z","advisories":[],"bugzilla":"1692663","bugzilla_description":"CVE-2018-12388 firefox: memory safety bugs showing evidence of memory corruption leading to run arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12399","severity":"low","public_date":"2018-10-23T00:00:00Z","advisories":[],"bugzilla":"1693614","bugzilla_description":"CVE-2018-12399 firefox: Spoofing of protocol registration notification bar","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-290|CWE-287)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12399.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-12398","severity":"moderate","public_date":"2018-10-23T00:00:00Z","advisories":[],"bugzilla":"1693621","bugzilla_description":"CVE-2018-12398 firefox: Content Security Policy bypass through stylesheet injection in resource URIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-79->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12398.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-12401","severity":"low","public_date":"2018-10-23T00:00:00Z","advisories":[],"bugzilla":"1693626","bugzilla_description":"CVE-2018-12401 firefox: special resource URI parsing leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12401.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-12402","severity":"moderate","public_date":"2018-10-23T00:00:00Z","advisories":[],"bugzilla":"1696127","bugzilla_description":"CVE-2018-12402 firefox: WebBrowserPersist uses incorrect origin information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12402.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-17466","severity":"important","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2018:3004","RHSA-2019:0160"],"bugzilla":"1640102","bugzilla_description":"CVE-2018-17466 chromium-browser, firefox: Memory corruption in Angle","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","chromium-browser-0:70.0.3538.67-1.el6_10","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17466.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18064","severity":"moderate","public_date":"2018-10-08T00:00:00Z","advisories":[],"bugzilla":"1637792","bugzilla_description":"CVE-2018-18064 cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-12386","severity":"critical","public_date":"2018-10-02T00:00:00Z","advisories":["RHSA-2018:2884","RHSA-2018:2881"],"bugzilla":"1635451","bugzilla_description":"CVE-2018-12386 Mozilla: type confusion in JavaScript","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843->(CWE-125|CWE-787)","affected_packages":["firefox-0:60.2.2-1.el7_5","firefox-0:60.2.2-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12386.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12387","severity":"critical","public_date":"2018-10-02T00:00:00Z","advisories":["RHSA-2018:2884","RHSA-2018:2881"],"bugzilla":"1635452","bugzilla_description":"CVE-2018-12387 Mozilla: stack out-of-bounds read in Array.prototype.push","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:60.2.2-1.el7_5","firefox-0:60.2.2-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12385","severity":"moderate","public_date":"2018-09-21T00:00:00Z","advisories":["RHSA-2018:2835","RHSA-2018:2834","RHSA-2018:3403","RHSA-2018:3458"],"bugzilla":"1632062","bugzilla_description":"CVE-2018-12385 Mozilla: Crash in TransportSecurityInfo due to cached data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-119","affected_packages":["firefox-0:60.2.1-1.el6","firefox-0:60.2.1-1.el7_5","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12385.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12375","severity":"important","public_date":"2018-09-05T00:00:00Z","advisories":[],"bugzilla":"1625524","bugzilla_description":"CVE-2018-12375 Mozilla: Memory safety bugs fixed in Firefox 62","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12375.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12376","severity":"critical","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1625525","bugzilla_description":"CVE-2018-12376 Mozilla: Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12377","severity":"important","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1625526","bugzilla_description":"CVE-2018-12377 Mozilla: Use-after-free in driver timers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12377.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12378","severity":"important","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1625527","bugzilla_description":"CVE-2018-12378 Mozilla: Use-after-free in IndexedDB","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12378.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12379","severity":"moderate","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1625528","bugzilla_description":"CVE-2018-12379 Mozilla: Out-of-bounds write with malicious MAR file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12381","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":[],"bugzilla":"1625529","bugzilla_description":"CVE-2018-12381 Mozilla: Dragging and dropping Outlook email message results in page navigation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12381.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-12382","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":[],"bugzilla":"1625530","bugzilla_description":"CVE-2018-12382 Mozilla: Addressbar spoofing with javascript URI on Firefox for Android","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12382.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-12383","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:2835","RHSA-2018:2834","RHSA-2018:3403","RHSA-2018:3458"],"bugzilla":"1625531","bugzilla_description":"CVE-2018-12383 Mozilla: Setting a master password post-Firefox 58 does not delete unencrypted previously stored passwords","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":["firefox-0:60.2.1-1.el6","firefox-0:60.2.1-1.el7_5","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12383.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-18499","severity":"important","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1849971","bugzilla_description":"CVE-2018-18499 Mozilla: Same-origin policy violation using meta refresh and performance.getEntries to steal cross-origin URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18499.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16428","severity":"low","public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1626145","bugzilla_description":"CVE-2018-16428 glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16428.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2018-16429","severity":"low","public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1626148","bugzilla_description":"CVE-2018-16429 glib2: Out-of-bounds read in g_markup_parse_context_parse() in gmarkup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16429.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2018-12358","severity":"important","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595023","bugzilla_description":"CVE-2018-12358 Mozilla: Same-origin bypass using service worker and redirection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12359","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595024","bugzilla_description":"CVE-2018-12359 Mozilla: Buffer overflow using computed size of canvas element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12359.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12360","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595025","bugzilla_description":"CVE-2018-12360 Mozilla: Use-after-free using focus()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12360.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12361","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595026","bugzilla_description":"CVE-2018-12361 Mozilla: Integer overflow in SwizzleData","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12361.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12362","severity":"important","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595027","bugzilla_description":"CVE-2018-12362 Mozilla: Integer overflow in SSSE3 scaler","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12363","severity":"important","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595028","bugzilla_description":"CVE-2018-12363 Mozilla: Use-after-free when appending DOM nodes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12363.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12364","severity":"important","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595029","bugzilla_description":"CVE-2018-12364 Mozilla: CSRF attacks through 307 redirects and NPAPI plugins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12364.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12365","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595030","bugzilla_description":"CVE-2018-12365 Mozilla: Compromised IPC child process can list local filenames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12366","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595031","bugzilla_description":"CVE-2018-12366 Mozilla: Invalid data handling during QCMS transformations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12366.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12367","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595032","bugzilla_description":"CVE-2018-12367 Mozilla: Timing attack mitigation of PerformanceNavigationTiming","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12368","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595033","bugzilla_description":"CVE-2018-12368 Mozilla: No warning when opening executable SettingContent-ms files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12368.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12369","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595034","bugzilla_description":"CVE-2018-12369 Mozilla: WebExtension security permission checks bypassed by embedded experiments","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12369.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12370","severity":"low","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595035","bugzilla_description":"CVE-2018-12370 Mozilla: SameSite cookie protections bypassed when exiting Reader View","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12370.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-12371","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595036","bugzilla_description":"CVE-2018-12371 Mozilla: Integer overflow in Skia library during edge builder allocation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12371.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5156","severity":"important","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2113","RHSA-2018:2112"],"bugzilla":"1595037","bugzilla_description":"CVE-2018-5156 Mozilla: Media recorder segmentation fault when track type is changed during capture","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5156.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5186","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595038","bugzilla_description":"CVE-2018-5186 Mozilla: Memory safety bugs fixed in Firefox 61","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5187","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595039","bugzilla_description":"CVE-2018-5187 Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5187.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5188","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595040","bugzilla_description":"CVE-2018-5188 Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5188.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-6126","severity":"important","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2018:1815","RHSA-2018:2113","RHSA-2018:2112"],"bugzilla":"1584035","bugzilla_description":"CVE-2018-6126 Skia: Heap buffer overflow rasterizing paths in SVG","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["chromium-browser-0:67.0.3396.62-2.el6_9","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6126.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5150","severity":"critical","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576250","bugzilla_description":"CVE-2018-5150 Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5150.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5151","severity":"critical","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576251","bugzilla_description":"CVE-2018-5151 Mozilla: Memory safety bugs fixed in Firefox 60","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5151.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5152","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576252","bugzilla_description":"CVE-2018-5152 Mozilla: WebExtensions information leak through webRequest API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5152.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5153","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576253","bugzilla_description":"CVE-2018-5153 Mozilla: Out-of-bounds read in mixed content websocket messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5153.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5154","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576255","bugzilla_description":"CVE-2018-5154 Mozilla: Use-after-free with SVG animations and clip paths","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5154.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5155","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576257","bugzilla_description":"CVE-2018-5155 Mozilla: Use-after-free with SVG animations and text paths","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5157","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576258","bugzilla_description":"CVE-2018-5157 Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5157.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5158","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576259","bugzilla_description":"CVE-2018-5158 Mozilla: Malicious PDF can inject JavaScript into PDF Viewer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-95","affected_packages":["firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5159","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576260","bugzilla_description":"CVE-2018-5159 Mozilla: Integer overflow and out-of-bounds write in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5160","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576261","bugzilla_description":"CVE-2018-5160 Mozilla: Uninitialized memory use by WebRTC encoder","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5163","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576262","bugzilla_description":"CVE-2018-5163 Mozilla: Replacing cached data in JavaScript Start-up Bytecode Cache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5163.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5164","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576263","bugzilla_description":"CVE-2018-5164 Mozilla: CSP not applied to all multipart content sent with multipart/x-mixed-replace","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5165","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576266","bugzilla_description":"CVE-2018-5165 Mozilla: Checkbox for enabling Flash protected mode is inverted in 32-bit Firefox","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5165.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-5166","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576267","bugzilla_description":"CVE-2018-5166 Mozilla: WebExtension host permission bypass through filterReponseData","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5166.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5167","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576268","bugzilla_description":"CVE-2018-5167 Mozilla: Improper linkification of chrome: and javascript: content in web console and JavaScript debugger","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5168","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576269","bugzilla_description":"CVE-2018-5168 Mozilla: Lightweight themes can be installed without user interaction","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5168.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5169","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576270","bugzilla_description":"CVE-2018-5169 Mozilla: Dragging and dropping link text onto home button can set home page to include chrome pages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5172","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576271","bugzilla_description":"CVE-2018-5172 Mozilla: Pasted script from clipboard can run in the Live Bookmarks page or PDF viewer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5172.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5173","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576272","bugzilla_description":"CVE-2018-5173 Mozilla: File name spoofing of Downloads panel with Unicode characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5173.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5174","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576274","bugzilla_description":"CVE-2018-5174 Mozilla: Windows Defender SmartScreen UI runs with less secure behavior for downloaded files in Windows 10 April 2018 Update","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5174.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5175","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576275","bugzilla_description":"CVE-2018-5175 Mozilla: Universal CSP bypass on sites using strict-dynamic in their policies","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5175.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5176","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576276","bugzilla_description":"CVE-2018-5176 Mozilla: JSON Viewer script injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5177","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576277","bugzilla_description":"CVE-2018-5177 Mozilla: Buffer overflow in XSLT during number formatting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5177.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5178","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576278","bugzilla_description":"CVE-2018-5178 Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5178.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5180","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576279","bugzilla_description":"CVE-2018-5180 Mozilla: heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5181","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576280","bugzilla_description":"CVE-2018-5181 Mozilla: Local file can be displayed in noopener tab through drag and drop of hyperlink","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-5182","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576281","bugzilla_description":"CVE-2018-5182 Mozilla: Local file can be displayed from hyperlink dragged and dropped on addressbar","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-5183","severity":"critical","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576283","bugzilla_description":"CVE-2018-5183 Mozilla: Backport critical security fixes in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5148","severity":"important","public_date":"2018-03-26T00:00:00Z","advisories":["RHSA-2018:1099","RHSA-2018:1098"],"bugzilla":"1560928","bugzilla_description":"CVE-2018-5148 firefox: Use-after-free in compositor potentially allows code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.7.3-1.el7_5","firefox-0:52.7.3-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5148.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5146","severity":"critical","public_date":"2018-03-16T00:00:00Z","advisories":["RHSA-2018:0649","RHSA-2018:0647","RHSA-2018:0549","RHSA-2018:0648","RHSA-2018:1058"],"bugzilla":"1557221","bugzilla_description":"CVE-2018-5146 Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvorbis-1:1.2.3-5.el6_9.1","libvorbis-1:1.3.3-8.el7.1","thunderbird-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el6_9","firefox-0:52.7.2-1.el6_9","firefox-0:52.7.2-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5146.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5125","severity":"critical","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0647","RHSA-2018:0527","RHSA-2018:0648"],"bugzilla":"1555127","bugzilla_description":"CVE-2018-5125 Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9","thunderbird-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5125.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5127","severity":"important","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0647","RHSA-2018:0527","RHSA-2018:0648"],"bugzilla":"1555128","bugzilla_description":"CVE-2018-5127 Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9","thunderbird-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5127.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5129","severity":"important","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0647","RHSA-2018:0527","RHSA-2018:0648"],"bugzilla":"1555129","bugzilla_description":"CVE-2018-5129 Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["firefox-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9","thunderbird-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5129.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5130","severity":"important","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0527"],"bugzilla":"1555130","bugzilla_description":"CVE-2018-5130 Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5130.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5131","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0527"],"bugzilla":"1555131","bugzilla_description":"CVE-2018-5131 Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":["firefox-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5131.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5144","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0647","RHSA-2018:0527","RHSA-2018:0648"],"bugzilla":"1555132","bugzilla_description":"CVE-2018-5144 Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["firefox-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9","thunderbird-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5144.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5145","severity":"critical","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0647","RHSA-2018:0527","RHSA-2018:0648"],"bugzilla":"1555133","bugzilla_description":"CVE-2018-5145 Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9","thunderbird-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5145.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-7999","severity":"low","public_date":"2018-03-05T00:00:00Z","advisories":[],"bugzilla":"1554380","bugzilla_description":"CVE-2018-7999 graphite2: NULL pointer dereference in Segment.cpp in libgraphite2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-5124","severity":"important","public_date":"2018-01-29T00:00:00Z","advisories":[],"bugzilla":"1540431","bugzilla_description":"CVE-2018-5124 firefox: Unsanitized output in browser UI can lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5124.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2018-5089","severity":"critical","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537417","bugzilla_description":"CVE-2018-5089 Mozilla: Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6 (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5091","severity":"critical","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122"],"bugzilla":"1537814","bugzilla_description":"CVE-2018-5091 Mozilla: Use-after-free with DTMF timers (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5091.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5095","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537817","bugzilla_description":"CVE-2018-5095 Mozilla: Integer overflow in Skia library during edge builder allocation (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5096","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537818","bugzilla_description":"CVE-2018-5096 Mozilla: Use-after-free while editing form elements (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5097","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537819","bugzilla_description":"CVE-2018-5097 Mozilla: Use-after-free when source document is manipulated during XSLT (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5097.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5098","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537820","bugzilla_description":"CVE-2018-5098 Mozilla: Use-after-free while manipulating form input elements (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5098.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5099","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537821","bugzilla_description":"CVE-2018-5099 Mozilla: Use-after-free with widget listener (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5099.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5102","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537822","bugzilla_description":"CVE-2018-5102 Mozilla: Use-after-free in HTML media elements (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5103","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537823","bugzilla_description":"CVE-2018-5103 Mozilla: Use-after-free during mouse event handling (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5103.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5104","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537824","bugzilla_description":"CVE-2018-5104 Mozilla: Use-after-free during font face manipulation (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5104.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5117","severity":"moderate","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537825","bugzilla_description":"CVE-2018-5117 Mozilla: URL spoofing with right-to-left text aligned left-to-right (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5117.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7843","severity":"important","public_date":"2017-12-04T00:00:00Z","advisories":["RHSA-2017:3382"],"bugzilla":"1518566","bugzilla_description":"CVE-2017-7843 Mozilla: Web worker in Private Browsing mode can write IndexedDB data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":["firefox-0:52.5.1-1.el7_4","firefox-0:52.5.1-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-7826","severity":"critical","public_date":"2017-11-15T00:00:00Z","advisories":["RHSA-2017:3372","RHSA-2017:3247"],"bugzilla":"1513308","bugzilla_description":"CVE-2017-7826 Mozilla: Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5 (MFSA 2017-25)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.5.0-1.el6_9","firefox-0:52.5.0-1.el7_4","thunderbird-0:52.5.0-1.el7_4","firefox-0:52.5.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7826.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7828","severity":"critical","public_date":"2017-11-15T00:00:00Z","advisories":["RHSA-2017:3372","RHSA-2017:3247"],"bugzilla":"1513310","bugzilla_description":"CVE-2017-7828 Mozilla: Use-after-free of PressShell while restyling layout (MFSA 2017-25)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.5.0-1.el6_9","firefox-0:52.5.0-1.el7_4","thunderbird-0:52.5.0-1.el7_4","firefox-0:52.5.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7828.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7830","severity":"important","public_date":"2017-11-15T00:00:00Z","advisories":["RHSA-2017:3372","RHSA-2017:3247"],"bugzilla":"1513311","bugzilla_description":"CVE-2017-7830 Mozilla: Cross-origin URL information leak through Resource Timing API (MFSA 2017-25)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["thunderbird-0:52.5.0-1.el6_9","firefox-0:52.5.0-1.el7_4","thunderbird-0:52.5.0-1.el7_4","firefox-0:52.5.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7830.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16541","severity":"moderate","public_date":"2017-11-03T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1510816","bugzilla_description":"CVE-2017-16541 Mozilla: Proxy bypass using automount and autofs","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16541.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-16231","severity":null,"public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1700392","bugzilla_description":"CVE-2017-16231 pcre: self-recursive call in match() in pcre_exec.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7793","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496649","bugzilla_description":"CVE-2017-7793 Mozilla: Use-after-free with Fetch API (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7793.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7810","severity":"critical","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496651","bugzilla_description":"CVE-2017-7810 Mozilla: Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4 (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-120|CWE-121|CWE-122)","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7814","severity":"moderate","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496652","bugzilla_description":"CVE-2017-7814 Mozilla: Blob and data URLs bypass phishing and malware protection warnings (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-494","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7818","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496653","bugzilla_description":"CVE-2017-7818 Mozilla: Use-after-free during ARIA array manipulation (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7819","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496654","bugzilla_description":"CVE-2017-7819 Mozilla: Use-after-free while resizing images in design mode (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7823","severity":"moderate","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496655","bugzilla_description":"CVE-2017-7823 Mozilla: CSP sandbox directive did not create a unique origin (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7824","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496656","bugzilla_description":"CVE-2017-7824 Mozilla: Buffer overflow when drawing and validating elements with ANGLE (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7824.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7825","severity":"moderate","public_date":"2017-09-28T00:00:00Z","advisories":[],"bugzilla":"1496657","bugzilla_description":"CVE-2017-7825 Mozilla: OS X fonts render some Tibetan and Arabic unicode characters as spaces (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7825.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7809","severity":"important","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479650","bugzilla_description":"CVE-2017-7809 Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7809.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7783","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479176","bugzilla_description":"CVE-2017-7783 Mozilla: DOS attack through long username in URL (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-7753","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479188","bugzilla_description":"CVE-2017-7753 Mozilla: Out-of-bounds read with cached style data and pseudo-elements (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7753.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7779","severity":"critical","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479191","bugzilla_description":"CVE-2017-7779 Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7780","severity":"critical","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479196","bugzilla_description":"CVE-2017-7780 Mozilla: Memory safety bugs fixed in Firefox 55 (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7784","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479201","bugzilla_description":"CVE-2017-7784 Mozilla: Use-after-free with image observers (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7785","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479203","bugzilla_description":"CVE-2017-7785 Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7786","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479205","bugzilla_description":"CVE-2017-7786 Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7787","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479206","bugzilla_description":"CVE-2017-7787 Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7787.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7788","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479207","bugzilla_description":"CVE-2017-7788 Mozilla: Sandboxed about:srcdoc frames do not inherit CSP directives (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7788.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7789","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479208","bugzilla_description":"CVE-2017-7789 Mozilla: Failure to enable HSTS when two STS headers are sent for a connection (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7789.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7791","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479209","bugzilla_description":"CVE-2017-7791 Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7791.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","cvss3_score":"9.3"},{"CVE":"CVE-2017-7792","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479210","bugzilla_description":"CVE-2017-7792 Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7792.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7794","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479211","bugzilla_description":"CVE-2017-7794 Mozilla: Linux file truncation via sandbox broker (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7794.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7797","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479212","bugzilla_description":"CVE-2017-7797 Mozilla: Response header name interning leaks across origins (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-7798","severity":"critical","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2456"],"bugzilla":"1479213","bugzilla_description":"CVE-2017-7798 Mozilla: XUL injection in the style editor in devtools (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["firefox-0:52.3.0-2.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7799","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479214","bugzilla_description":"CVE-2017-7799 Mozilla: Self-XSS XUL injection in about:webrtc (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7799.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7800","severity":"critical","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479218","bugzilla_description":"CVE-2017-7800 Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7801","severity":"critical","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479223","bugzilla_description":"CVE-2017-7801 Mozilla: Use-after-free with marquee during window resizing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7801.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7802","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479224","bugzilla_description":"CVE-2017-7802 Mozilla: Use-after-free resizing image elements (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7803","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479225","bugzilla_description":"CVE-2017-7803 Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7803.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7806","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479226","bugzilla_description":"CVE-2017-7806 Mozilla: Use-after-free in layer manager with SVG (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7806.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7807","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479227","bugzilla_description":"CVE-2017-7807 Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7808","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479228","bugzilla_description":"CVE-2017-7808 Mozilla: CSP information leak with frame-ancestors containing paths (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5472","severity":"critical","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461252","bugzilla_description":"CVE-2017-5472 Mozilla: Use-after-free using destroyed node when regenerating trees (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5472.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-7749","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461253","bugzilla_description":"CVE-2017-7749 Mozilla: Use-after-free during docshell reloading (MFSA 2017-16)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7749.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7750","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461254","bugzilla_description":"CVE-2017-7750 Mozilla: Use-after-free with track elements (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7751","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461255","bugzilla_description":"CVE-2017-7751 Mozilla: Use-after-free with content viewer listeners (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7751.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7752","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461256","bugzilla_description":"CVE-2017-7752 Mozilla: Use-after-free with IME input (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7754","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461257","bugzilla_description":"CVE-2017-7754 Mozilla: Out-of-bounds read in WebGL with ImageInfo object (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7754.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-7756","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461258","bugzilla_description":"CVE-2017-7756 Mozilla: Use-after-free and use-after-scope logging XHR header errors (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7756.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7757","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461259","bugzilla_description":"CVE-2017-7757 Mozilla: Use-after-free in IndexedDB (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7757.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7778","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1461260","bugzilla_description":"CVE-2017-7778 Mozilla: Vulnerabilities in the Graphite 2 library (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7758","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461261","bugzilla_description":"CVE-2017-7758 Mozilla: Out-of-bounds read in Opus encoder (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7758.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7764","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461262","bugzilla_description":"CVE-2017-7764 Mozilla: Domain spoofing with combination of Canadian Syllabics and other unicode blocks (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7764.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-5470","severity":"critical","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461264","bugzilla_description":"CVE-2017-5470 Mozilla: Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2 (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-9233","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1462729","bugzilla_description":"CVE-2017-9233 expat: Inifinite loop due to invalid XML in external entity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-7771","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472212","bugzilla_description":"CVE-2017-7771 graphite2: out of bounds read in \"graphite2::Pass::readPass\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7771.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-7772","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472213","bugzilla_description":"CVE-2017-7772 graphite2: heap-buffer-overflow write \"lz4::decompress\" (CVE-2017-7772)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7773","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472215","bugzilla_description":"CVE-2017-7773 graphite2: heap-buffer-overflow write \"lz4::decompress\" (src/Decompressor)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7773.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7774","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472219","bugzilla_description":"CVE-2017-7774 graphite2: out of bounds read \"graphite2::Silf::readGraphite\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7774.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-7775","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472221","bugzilla_description":"CVE-2017-7775 graphite2: assertion error \"size() > n\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7775.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7776","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472223","bugzilla_description":"CVE-2017-7776 graphite2: heap-buffer-overflow read \"graphite2::Silf::getClassGlyph\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-7777","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472225","bugzilla_description":"CVE-2017-7777 graphite2: use of uninitialized memory \"graphite2::GlyphCache::Loader::read_glyph\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7777.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-7762","severity":"moderate","public_date":"2017-04-20T00:00:00Z","advisories":["RHSA-2018:2113","RHSA-2018:2112"],"bugzilla":"1590493","bugzilla_description":"CVE-2017-7762 Mozilla: address bar username and password spoofing in reader mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":["firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5456","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106"],"bugzilla":"1443297","bugzilla_description":"CVE-2017-5456 Mozilla: Sandbox escape allowing local file system read access (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5456.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5442","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443298","bugzilla_description":"CVE-2017-5442 Mozilla: Use-after-free during style changes (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5442.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5443","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443299","bugzilla_description":"CVE-2017-5443 Mozilla: Out-of-bounds write during BinHex decoding (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5443.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5429","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443301","bugzilla_description":"CVE-2017-5429 Mozilla: Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and Firefox ESR 52.1 (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5429.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5464","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443303","bugzilla_description":"CVE-2017-5464 Mozilla: Memory corruption with accessibility and DOM manipulation (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5464.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5465","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443304","bugzilla_description":"CVE-2017-5465 Mozilla: Out-of-bounds read in ConvolvePixel (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5465.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5466","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443305","bugzilla_description":"CVE-2017-5466 Mozilla: Origin confusion when reloading isolated data:text/html URL (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5466.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5467","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443307","bugzilla_description":"CVE-2017-5467 Mozilla: Memory corruption when drawing Skia content (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5467.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5460","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443308","bugzilla_description":"CVE-2017-5460 Mozilla: Use-after-free in frame selection (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5448","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106"],"bugzilla":"1443310","bugzilla_description":"CVE-2017-5448 Mozilla: Out-of-bounds write in ClearKeyDecryptor (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","firefox-0:52.1.0-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5448.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5449","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443311","bugzilla_description":"CVE-2017-5449 Mozilla: Crash during bidirectional unicode manipulation with animation (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5449.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5446","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443312","bugzilla_description":"CVE-2017-5446 Mozilla: Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5447","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443313","bugzilla_description":"CVE-2017-5447 Mozilla: Out-of-bounds read during glyph processing (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5444","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443314","bugzilla_description":"CVE-2017-5444 Mozilla: Buffer overflow while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5444.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5445","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443315","bugzilla_description":"CVE-2017-5445 Mozilla: Uninitialized values used while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5445.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5468","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443316","bugzilla_description":"CVE-2017-5468 Mozilla: Incorrect ownership model for Private Browsing information (MFSA 2017-10)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5469","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443317","bugzilla_description":"CVE-2017-5469 Mozilla: Potential Buffer overflow in flex-generated code (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5469.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5440","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443322","bugzilla_description":"CVE-2017-5440 Mozilla: Use-after-free in txExecutionState destructor during XSLT processing (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5440.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5441","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443323","bugzilla_description":"CVE-2017-5441 Mozilla: Use-after-free with selection during scroll events (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5441.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5439","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443324","bugzilla_description":"CVE-2017-5439 Mozilla: Use-after-free in nsTArray Length() during XSLT processing (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5439.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5438","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443325","bugzilla_description":"CVE-2017-5438 Mozilla: Use-after-free in nsAutoPtr during XSLT processing (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5438.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5437","severity":null,"public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443326","bugzilla_description":"REJECTED CVE-2017-5437 Mozilla: Vulnerabilities in libevent library (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5437.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-5436","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443327","bugzilla_description":"CVE-2017-5436 Mozilla: Out-of-bounds write with malicious font in Graphite 2 (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5435","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443328","bugzilla_description":"CVE-2017-5435 Mozilla: Use-after-free during transaction processing in the editor (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5434","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443329","bugzilla_description":"CVE-2017-5434 Mozilla: Use-after-free during focus handling (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5434.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5433","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443330","bugzilla_description":"CVE-2017-5433 Mozilla: Use-after-free in SMIL animation functions (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5433.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5430","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106"],"bugzilla":"1443331","bugzilla_description":"CVE-2017-5430 Mozilla: Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1 (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5430.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5432","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443332","bugzilla_description":"CVE-2017-5432 Mozilla: Use-after-free in text input selection (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5432.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5459","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443333","bugzilla_description":"CVE-2017-5459 Mozilla: Buffer overflow in WebGL (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5455","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106"],"bugzilla":"1443334","bugzilla_description":"CVE-2017-5455 Mozilla: Sandbox escape through internal feed reader APIs (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5455.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5458","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443336","bugzilla_description":"CVE-2017-5458 Mozilla: Drag and drop of javascript: URLs can allow for self-XSS (MFSA 2017-11)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5454","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443338","bugzilla_description":"CVE-2017-5454 Mozilla: Sandbox escape allowing file system read access through file picker (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5454.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5451","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443340","bugzilla_description":"CVE-2017-5451 Mozilla: Addressbar spoofing with onblur event (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5451.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5453","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443343","bugzilla_description":"CVE-2017-5453 Mozilla: HTML injection into RSS Reader feed preview page through TITLE element (MFSA 2017-11)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5453.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-5428","severity":"critical","public_date":"2017-03-17T00:00:00Z","advisories":["RHSA-2017:0558"],"bugzilla":"1433202","bugzilla_description":"CVE-2017-5428 Mozilla: integer overflow in createImageBitmap() (MFSA 2017-08)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.0-5.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5428.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5400","severity":"critical","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429778","bugzilla_description":"CVE-2017-5400 Mozilla: asm.js JIT-spray bypass of ASLR and DEP (MFSA 2017-06)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5400.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5401","severity":"critical","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429779","bugzilla_description":"CVE-2017-5401 Mozilla: Memory Corruption when handling ErrorResult (MFSA 2017-06)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5401.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5402","severity":"critical","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429780","bugzilla_description":"CVE-2017-5402 Mozilla: Use-after-free working with events in FontFace objects (MFSA 2017-06)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5402.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5404","severity":"critical","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429781","bugzilla_description":"CVE-2017-5404 Mozilla: Use-after-free working with ranges in selections (MFSA 2017-06)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5407","severity":"moderate","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429782","bugzilla_description":"CVE-2017-5407 Mozilla: Pixel and history stealing via floating-point timing side channel with SVG filters (MFSA 2017-06)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5410","severity":"moderate","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429783","bugzilla_description":"CVE-2017-5410 Mozilla: Memory corruption during JavaScript garbage collection incremental sweeping (MFSA 2017-06)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5410.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-5408","severity":"moderate","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429784","bugzilla_description":"CVE-2017-5408 Mozilla: Cross-origin reading of video captions in violation of CORS (MFSA 2017-06)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5408.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5405","severity":"low","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429785","bugzilla_description":"CVE-2017-5405 Mozilla: FTP response codes can cause use of uninitialized values for ports (MFSA 2017-06)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-5398","severity":"critical","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429786","bugzilla_description":"CVE-2017-5398 Mozilla: Memory safety bugs fixed in Firefox 52 and Firefox ESR 45.8 (MFSA 2017-06)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5398.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5373","severity":"critical","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1415924","bugzilla_description":"CVE-2017-5373 Mozilla: Memory safety bugs fixed in Firefox 51 and Firefox ESR 45.7 (MFSA 2017-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5373.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5375","severity":"critical","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416271","bugzilla_description":"CVE-2017-5375 Mozilla: Excessive JIT code allocation allows bypass of ASLR and DEP (MFSA 2017-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5375.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5376","severity":"critical","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416272","bugzilla_description":"CVE-2017-5376 Mozilla: Use-after-free in XSL (MFSA 2017-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5378","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416273","bugzilla_description":"CVE-2017-5378 Mozilla: Pointer and frame data leakage of Javascript objects (MFSA 2017-02)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5378.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-5380","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416274","bugzilla_description":"CVE-2017-5380 Mozilla: Potential use-after-free during DOM manipulations (MFSA 2017-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5380.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-5390","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416279","bugzilla_description":"CVE-2017-5390 Mozilla: Insecure communication methods in Developer Tools JSON viewer (MFSA 2017-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5390.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-5396","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416280","bugzilla_description":"CVE-2017-5396 Mozilla: Use-after-free with Media Decoder (MFSA 2017-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5396.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-5383","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416281","bugzilla_description":"CVE-2017-5383 Mozilla: Location bar spoofing with unicode characters (MFSA 2017-02)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5383.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5386","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0190"],"bugzilla":"1416282","bugzilla_description":"CVE-2017-5386 Mozilla: WebExtensions can use data: protocol to affect other extensions (MFSA 2017-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","firefox-0:45.7.0-2.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5386.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-0381","severity":"low","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1413604","bugzilla_description":"CVE-2017-0381 opus: Memory corruption during media file and data processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0381.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9899","severity":"critical","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404083","bugzilla_description":"CVE-2016-9899 Mozilla: Use-after-free while manipulating DOM events and audio elements (MFSA 2016-94, MFSA 2016-95)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9899.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-9895","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404086","bugzilla_description":"CVE-2016-9895 Mozilla: CSP bypass using marquee tag (MFSA 2016-94, MFSA 2016-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9895.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-9897","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946"],"bugzilla":"1404087","bugzilla_description":"CVE-2016-9897 Mozilla: Memory corruption in libGLES (MFSA 2016-94, MFSA 2016-95)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9898","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946"],"bugzilla":"1404089","bugzilla_description":"CVE-2016-9898 Mozilla: Use-after-free in Editor while manipulating DOM subtrees (MFSA 2016-94, MFSA 2016-95)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9898.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9900","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404090","bugzilla_description":"CVE-2016-9900 Mozilla: Restricted external resources can be loaded by SVG images through data URLs (MFSA 2016-94, MFSA 2016-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9904","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946"],"bugzilla":"1404091","bugzilla_description":"CVE-2016-9904 Mozilla: Cross-origin information leak in shared atoms (MFSA 2016-94, MFSA 2016-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9904.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9905","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404094","bugzilla_description":"CVE-2016-9905 Mozilla: Crash in EnumerateSubDocuments (MFSA 2016-94, MFSA 2016-95)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9905.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9893","severity":"critical","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404096","bugzilla_description":"CVE-2016-9893 Mozilla: Memory safety bugs fixed in Firefox 50.1 and Firefox ESR 45.6 (MFSA 2016-95)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-9901","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404358","bugzilla_description":"CVE-2016-9901 Mozilla: Data from Pocket server improperly sanitized before execution (MFSA 2016-94, MFSA 2016-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9901.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9902","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404359","bugzilla_description":"CVE-2016-9902 Mozilla: Pocket extension does not validate the origin of events (MFSA 2016-94, MFSA 2016-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9902.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9079","severity":"critical","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2016:2850","RHSA-2016:2843"],"bugzilla":"1400376","bugzilla_description":"CVE-2016-9079 Mozilla: Firefox SVG Animation Remote Code Execution (MFSA 2016-92)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.5.1-1.el7_3","thunderbird-0:45.5.1-1.el5_11","firefox-0:45.5.1-1.el7_3","firefox-0:45.5.1-1.el5_11","firefox-0:45.5.1-1.el6_8","thunderbird-0:45.5.1-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9079.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5296","severity":"critical","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780"],"bugzilla":"1395055","bugzilla_description":"CVE-2016-5296 Mozilla: Heap-buffer-overflow WRITE in rasterize_edges_1 (MFSA 2016-89, MFSA 2016-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","firefox-0:45.5.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5296.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5297","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780"],"bugzilla":"1395058","bugzilla_description":"CVE-2016-5297 Mozilla: Incorrect argument length checking in Javascript (MFSA 2016-89, MFSA 2016-90)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","firefox-0:45.5.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5297.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9064","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780"],"bugzilla":"1395060","bugzilla_description":"CVE-2016-9064 Mozilla: Addons update must verify IDs match between current and new versions (MFSA 2016-89, MFSA 2016-90)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","firefox-0:45.5.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9066","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780"],"bugzilla":"1395061","bugzilla_description":"CVE-2016-9066 Mozilla: Integer overflow leading to a buffer overflow in nsScriptLoadHandler (MFSA 2016-89, MFSA 2016-90)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","firefox-0:45.5.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9066.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5291","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780"],"bugzilla":"1395065","bugzilla_description":"CVE-2016-5291 Mozilla: Same-origin policy violation using local HTML file and saved shortcut file (MFSA 2016-89, MFSA 2016-90)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","firefox-0:45.5.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5291.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5290","severity":"critical","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780","RHSA-2016:2825"],"bugzilla":"1395066","bugzilla_description":"CVE-2016-5290 Mozilla: Memory safety bugs fixed in Firefox 45.5 (MFSA 2016-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","thunderbird-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el7_3","thunderbird-0:45.5.0-1.el7_3","thunderbird-0:45.5.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5290.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5292","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395057","bugzilla_description":"CVE-2016-5292 Mozilla: URL parsing causes crash (MFSA 2016-89)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5292.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5289","severity":"critical","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395098","bugzilla_description":"CVE-2016-5289 Mozilla: Memory safety bugs fixed in Firefox 50 (MFSA 2016-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-9077","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395099","bugzilla_description":"CVE-2016-9077 Mozilla: Canvas filters allow feDisplacementMaps to be applied to cross-origin images, allowing timing attacks on them (MFSA 2016-89)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9077.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9071","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395100","bugzilla_description":"CVE-2016-9071 Mozilla: Probe browser history via HSTS/301 redirect + CSP (MFSA 2016-89)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9071.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-9075","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395101","bugzilla_description":"CVE-2016-9075 Mozilla: WebExtensions can access the mozAddonManager API and use it to gain elevated privileges (MFSA 2016-89)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9076","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396537","bugzilla_description":"CVE-2016-9076 firefox: select dropdown menu can be used for URL bar spoofing on e10s","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9076.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9067","severity":"important","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396539","bugzilla_description":"CVE-2016-9067 CVE-2016-9069 firefox: Heap use-after-free in nsINode::ReplaceOrInsertBefore","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2016-9069","severity":"important","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396539","bugzilla_description":"CVE-2016-9067 CVE-2016-9069 firefox: Heap use-after-free in nsINode::ReplaceOrInsertBefore","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9069.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2016-9063","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396540","bugzilla_description":"CVE-2016-9063 firefox: Possible integer overflow to fix inside XML_Parse in Expat","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9063.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9068","severity":"important","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396542","bugzilla_description":"CVE-2016-9068 firefox: Heap use-after-free in nsRefreshDriver","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9068.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2016-9073","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396545","bugzilla_description":"CVE-2016-9073 firefox: windows.create schema doesn't specify \"format\": \"relativeUrl\"","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9073.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-9070","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396549","bugzilla_description":"CVE-2016-9070 firefox: Sidebar bookmark can have reference to chrome window","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9070.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5287","severity":"important","public_date":"2016-10-20T00:00:00Z","advisories":[],"bugzilla":"1387586","bugzilla_description":"CVE-2016-5287 firefox: Crash in nsTArray_base","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5287.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5288","severity":"moderate","public_date":"2016-10-20T00:00:00Z","advisories":[],"bugzilla":"1387588","bugzilla_description":"CVE-2016-5288 firefox: Web content can read cache entries","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5288.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5261","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1361986","bugzilla_description":"CVE-2016-5261 Mozilla: Integer overflow and memory corruption in WebSocketChannel (MFSA 2016-75, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5250","severity":"moderate","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1361998","bugzilla_description":"CVE-2016-5250 Mozilla: Resource Timing API is storing resources sent by the previous page (MFSA 2016-84, MFSA 2016-86)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5250.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5257","severity":"critical","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912","RHSA-2016:1985"],"bugzilla":"1377543","bugzilla_description":"CVE-2016-5257 Mozilla: Memory safety bugs fixed in Firefox ESR 45.4 (MFSA 2016-85, MFSA 2016-86)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","thunderbird-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2","thunderbird-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5278","severity":"critical","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377549","bugzilla_description":"CVE-2016-5278 Mozilla: Heap-buffer-overflow in nsBMPEncoder::AddImageFrame (MFSA 2016-85, MFSA 2016-86)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5278.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5270","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377552","bugzilla_description":"CVE-2016-5270 Mozilla: Heap-buffer-overflow in nsCaseTransformTextRunFactory::TransformString (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5270.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5272","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377554","bugzilla_description":"CVE-2016-5272 Mozilla: Bad cast in nsImageGeometryMixin (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5276","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377557","bugzilla_description":"CVE-2016-5276 Mozilla: Heap-use-after-free in mozilla::a11y::DocAccessible::ProcessInvalidationList (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5274","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377558","bugzilla_description":"CVE-2016-5274 Mozilla: use-after-free in nsFrameManager::CaptureFrameState (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5277","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377559","bugzilla_description":"CVE-2016-5277 Mozilla: Heap-use-after-free in nsRefreshDriver::Tick (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5277.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5280","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377561","bugzilla_description":"CVE-2016-5280 Mozilla: Use-after-free in mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5280.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5281","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377563","bugzilla_description":"CVE-2016-5281 Mozilla: use-after-free in DOMSVGLength (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5281.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5284","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377565","bugzilla_description":"CVE-2016-5284 Mozilla: Add-on update site certificate pin expiration (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5284.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2827","severity":"low","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377660","bugzilla_description":"CVE-2016-2827 Mozilla: Out-of-bounds read in mozilla::net::IsValidReferrerPolicy (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2827.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5271","severity":"low","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377661","bugzilla_description":"CVE-2016-5271 Mozilla: Out-of-bounds read in PropertyProvider::GetSpacingInternal (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5271.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5256","severity":"critical","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377666","bugzilla_description":"CVE-2016-5256 Mozilla: Memory safety bugs fixed in Firefox 49 (MFSA 2016-85)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5256.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5275","severity":"critical","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377667","bugzilla_description":"CVE-2016-5275 Mozilla: global-buffer-overflow in mozilla::gfx::FilterSupport::ComputeSourceNeededRegions (MFSA 2016-85)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5275.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5273","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377669","bugzilla_description":"CVE-2016-5273 Mozilla: crash in mozilla::a11y::HyperTextAccessible::GetChildOffset (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5273.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5283","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377670","bugzilla_description":"CVE-2016-5283 Mozilla: iframe src fragment timing attack can reveal cross-origin data (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5279","severity":"moderate","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377673","bugzilla_description":"CVE-2016-5279 Mozilla: Full local path of files is available to web pages after drag and drop (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5279.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5282","severity":"moderate","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377675","bugzilla_description":"CVE-2016-5282 Mozilla: Don't allow content to request favicons from non-whitelisted schemes (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5282.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2830","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1342897","bugzilla_description":"CVE-2016-2830 Mozilla: Favicon network connection persists when page is closed (MFSA 2016-62)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2830.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-2836","severity":"critical","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551","RHSA-2016:1809"],"bugzilla":"1361974","bugzilla_description":"CVE-2016-2836 Mozilla: Miscellaneous memory safety hazards (rv:45.3) (MFSA 2016-62)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","thunderbird-0:45.3.0-1.el7_2","thunderbird-0:45.3.0-1.el5_11","thunderbird-0:45.3.0-1.el6_8","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2836.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-2835","severity":"critical","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361975","bugzilla_description":"CVE-2016-2835 Mozilla: Miscellaneous memory safety hazards (rv:48.0) (MFSA 2016-62)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2835.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-2838","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361976","bugzilla_description":"CVE-2016-2838 Mozilla: Buffer overflow rendering SVG with bidirectional content (MFSA 2016-64)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2839","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361977","bugzilla_description":"CVE-2016-2839 Mozilla: Cairo rendering crash due to memory allocation issue with FFMpeg 0.10 (MFSA 2016-65)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5251","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361978","bugzilla_description":"CVE-2016-5251 Mozilla: Location bar spoofing via data URLs with malformed/invalid mediatypes (MFSA 2016-66)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5252","severity":"important","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361979","bugzilla_description":"CVE-2016-5252 Mozilla: Stack underflow during 2D graphics rendering (MFSA 2016-67)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5252.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5254","severity":"low","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361980","bugzilla_description":"CVE-2016-5254 Mozilla: Use-after-free when using alt key and toplevel menus (MFSA 2016-70)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5255","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361981","bugzilla_description":"CVE-2016-5255 Mozilla: Crash in incremental garbage collection in JavaScript (MFSA 2016-71)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5255.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5258","severity":"critical","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361982","bugzilla_description":"CVE-2016-5258 Mozilla: Use-after-free in DTLS during WebRTC session shutdown (MFSA 2016-72)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5258.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5259","severity":"critical","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361984","bugzilla_description":"CVE-2016-5259 Mozilla: Use-after-free in service workers with nested sync events (MFSA 2016-73)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5259.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5260","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361985","bugzilla_description":"CVE-2016-5260 Mozilla: Form input type change from password to text can store plain text password in session restore file (MFSA 2016-74)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5260.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5262","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361987","bugzilla_description":"CVE-2016-5262 Mozilla: Scripts on marquee tag can execute in sandboxed iframes (MFSA 2016-76)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5262.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-2837","severity":"low","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361989","bugzilla_description":"CVE-2016-2837 Mozilla: Buffer overflow in ClearKey Content Decryption Module (CDM) during video playback (MFSA 2016-77)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2837.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5263","severity":"important","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361991","bugzilla_description":"CVE-2016-5263 Mozilla: Type confusion in display transformation (MFSA 2016-78)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5263.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5264","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361992","bugzilla_description":"CVE-2016-5264 Mozilla: Use-after-free when applying SVG effects (MFSA 2016-79)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5264.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5265","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361994","bugzilla_description":"CVE-2016-5265 Mozilla: Same-origin policy violation using local HTML file and saved shortcut file (MFSA 2016-80)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5265.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5266","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361995","bugzilla_description":"CVE-2016-5266 Mozilla: Information disclosure and local file manipulation through drag and drop (MFSA 2016-81)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5266.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5268","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361996","bugzilla_description":"CVE-2016-5268 Mozilla: Spoofing attack through text injection into internal error pages (MFSA 2016-83)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5268.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-2831","severity":"moderate","public_date":"2016-06-09T00:00:00Z","advisories":["RHSA-2016:1217"],"bugzilla":"1342898","bugzilla_description":"CVE-2016-2831 Mozilla: Entering fullscreen and persistent pointerlock without user permission (MFSA 2016-58)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2831.json"},{"CVE":"CVE-2016-2818","severity":"critical","public_date":"2016-06-08T00:00:00Z","advisories":["RHSA-2016:1392","RHSA-2016:1217"],"bugzilla":"1342887","bugzilla_description":"CVE-2016-2818 Mozilla: Miscellaneous memory safety hazards (rv:45.2) (MFSA 2016-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","thunderbird-0:45.2-1.el5_11","thunderbird-0:45.2-1.el7_2","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2","thunderbird-0:45.2-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2818.json"},{"CVE":"CVE-2016-2819","severity":"critical","public_date":"2016-06-08T00:00:00Z","advisories":["RHSA-2016:1217"],"bugzilla":"1342891","bugzilla_description":"CVE-2016-2819 Mozilla: Buffer overflow parsing HTML5 fragments (MFSA 2016-50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2819.json"},{"CVE":"CVE-2016-2821","severity":"moderate","public_date":"2016-06-08T00:00:00Z","advisories":["RHSA-2016:1217"],"bugzilla":"1342892","bugzilla_description":"CVE-2016-2821 Mozilla: Use-after-free deleting tables from a contenteditable document (MFSA 2016-51)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2821.json"},{"CVE":"CVE-2016-2822","severity":"moderate","public_date":"2016-06-08T00:00:00Z","advisories":["RHSA-2016:1217"],"bugzilla":"1342893","bugzilla_description":"CVE-2016-2822 Mozilla: Addressbar spoofing though the SELECT element (MFSA 2016-52)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2822.json"},{"CVE":"CVE-2016-2828","severity":"moderate","public_date":"2016-06-08T00:00:00Z","advisories":["RHSA-2016:1217"],"bugzilla":"1342895","bugzilla_description":"CVE-2016-2828 Mozilla: Use-after-free when textures are used in WebGL operations after recycle pool destruction (MFSA 2016-56)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2828.json"},{"CVE":"CVE-2016-2815","severity":"critical","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1342890","bugzilla_description":"CVE-2016-2815 Mozilla: Miscellaneous memory safety hazards (rv:47.0) (MFSA 2016-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2815.json"},{"CVE":"CVE-2016-2825","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1342894","bugzilla_description":"CVE-2016-2825 Mozilla: Partial same-origin-policy through setting location.host through data: URI (MFSA 2016-54)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2825.json"},{"CVE":"CVE-2016-2829","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1342896","bugzilla_description":"CVE-2016-2829 Mozilla: Incorrect icon displayed on permissions notifications (MFSA 2016-57)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2829.json"},{"CVE":"CVE-2016-2832","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1342899","bugzilla_description":"CVE-2016-2832 Mozilla: Information disclosure of disabled plugins through CSS pseudo-classes (MFSA 2016-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2832.json"},{"CVE":"CVE-2016-2833","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1342900","bugzilla_description":"CVE-2016-2833 Mozilla: Java applets bypass CSP protections (MFSA 2016-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2833.json"},{"CVE":"CVE-2016-5300","severity":"moderate","public_date":"2016-06-04T00:00:00Z","advisories":[],"bugzilla":"1343085","bugzilla_description":"CVE-2016-5300 expat: Little entropy used for hash initialization","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5300.json"},{"CVE":"CVE-2016-0718","severity":"moderate","public_date":"2016-05-17T00:00:00Z","advisories":["RHSA-2016:2824","RHSA-2018:2486"],"bugzilla":"1296102","bugzilla_description":"CVE-2016-0718 expat: Out-of-bounds heap read on crafted input causing crash","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["expat-0:2.0.1-13.el6_8","expat-0:2.1.0-10.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0718.json"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2016-2804","severity":"critical","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330260","bugzilla_description":"CVE-2016-2804 Mozilla: Miscellaneous memory safety hazards (rv:46.0) (MFSA 2016-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2804.json"},{"CVE":"CVE-2016-2805","severity":"critical","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:0695","RHSA-2016:1041"],"bugzilla":"1330266","bugzilla_description":"CVE-2016-2805 Mozilla: Miscellaneous memory safety hazards (rv:38.8) (MFSA 2016-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:38.8.0-1.el7_2","firefox-0:45.1.0-1.el6_7","thunderbird-0:38.8.0-2.el6_8","thunderbird-0:38.8.0-1.el5_11","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2805.json"},{"CVE":"CVE-2016-2806","severity":"critical","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:0695"],"bugzilla":"1330270","bugzilla_description":"CVE-2016-2806 Mozilla: Miscellaneous memory safety hazards (rv:46.0 / rv:45.1) (MFSA 2016-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.1.0-1.el6_7","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2806.json"},{"CVE":"CVE-2016-2807","severity":"critical","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:0695","RHSA-2016:1041"],"bugzilla":"1330271","bugzilla_description":"CVE-2016-2807 Mozilla: Miscellaneous memory safety hazards (rv:46.0 / rv:45.1 / rv:38.8) (MFSA 2016-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:38.8.0-1.el7_2","firefox-0:45.1.0-1.el6_7","thunderbird-0:38.8.0-2.el6_8","thunderbird-0:38.8.0-1.el5_11","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2807.json"},{"CVE":"CVE-2016-2809","severity":"moderate","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330272","bugzilla_description":"CVE-2016-2809 Mozilla: Privilege escalation through file deletion by Maintenance Service updater (MFSA 2016-40)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2809.json"},{"CVE":"CVE-2016-2810","severity":"moderate","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330274","bugzilla_description":"CVE-2016-2810 Mozilla: Content provider permission bypass allows malicious application to access data (MFSA 2016-41)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2810.json"},{"CVE":"CVE-2016-2811","severity":"important","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330275","bugzilla_description":"CVE-2016-2811 Mozilla: Use-after-free and buffer overflow in Service Workers (MFSA 2016-42)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2811.json"},{"CVE":"CVE-2016-2812","severity":"important","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330277","bugzilla_description":"CVE-2016-2812 Mozilla: Use-after-free and buffer overflow in Service Workers (MFSA 2016-42)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2812.json"},{"CVE":"CVE-2016-2813","severity":"important","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330278","bugzilla_description":"CVE-2016-2813 Mozilla: Disclosure of user actions through JavaScript with motion and orientation sensors (MFSA 2016-43)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2813.json"},{"CVE":"CVE-2016-2814","severity":"important","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:0695"],"bugzilla":"1330280","bugzilla_description":"CVE-2016-2814 Mozilla: Buffer overflow in libstagefright with CENC offsets (MFSA 2016-44)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.1.0-1.el6_7","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2814.json"},{"CVE":"CVE-2016-2816","severity":"moderate","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330282","bugzilla_description":"CVE-2016-2816 Mozilla: CSP not applied to pages sent with multipart/x-mixed-replace (MFSA 2016-45)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2816.json"},{"CVE":"CVE-2016-2817","severity":"moderate","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330285","bugzilla_description":"CVE-2016-2817 Mozilla: Elevation of privilege with chrome.tabs.update API in web extensions (MFSA 2016-46)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2817.json"},{"CVE":"CVE-2016-2808","severity":"important","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:0695"],"bugzilla":"1330286","bugzilla_description":"CVE-2016-2808 Mozilla: Write to invalid HashMap entry through JavaScript.watch() (MFSA 2016-47)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.1.0-1.el6_7","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2808.json"},{"CVE":"CVE-2016-2820","severity":"moderate","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330287","bugzilla_description":"CVE-2016-2820 Mozilla: Firefox Health Reports could accept events from untrusted domains (MFSA 2016-48)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2820.json"},{"CVE":"CVE-2016-1952","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315566","bugzilla_description":"CVE-2016-1952 Mozilla: Miscellaneous memory safety hazards (rv:38.7) (MFSA 2016-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1952.json"},{"CVE":"CVE-2016-1953","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315567","bugzilla_description":"CVE-2016-1953 Mozilla: Miscellaneous memory safety hazards (rv:45.0) (MFSA 2016-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1953.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-1954","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315569","bugzilla_description":"CVE-2016-1954 Mozilla: Local file overwriting and potential privilege escalation through CSP reports (MFSA 2016-17)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1954.json"},{"CVE":"CVE-2016-1955","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315570","bugzilla_description":"CVE-2016-1955 Mozilla: CSP reports fail to strip location information for embedded iframe pages (MFSA 2016-18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1955.json"},{"CVE":"CVE-2016-1956","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315571","bugzilla_description":"CVE-2016-1956 Mozilla: Linux video memory DOS with Intel drivers (MFSA 2016-19)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1956.json"},{"CVE":"CVE-2016-1957","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315573","bugzilla_description":"CVE-2016-1957 Mozilla: Memory leak in libstagefright when deleting an array during MP4 processing (MFSA 2016-20)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1957.json"},{"CVE":"CVE-2016-1958","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373"],"bugzilla":"1315574","bugzilla_description":"CVE-2016-1958 Mozilla: Displayed page address can be overridden (MFSA 2016-21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1958.json"},{"CVE":"CVE-2016-1959","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315575","bugzilla_description":"CVE-2016-1959 Mozilla: Service Worker Manager out-of-bounds read in Service Worker Manager (MFSA 2016-22)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1959.json"},{"CVE":"CVE-2016-1960","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315576","bugzilla_description":"CVE-2016-1960 Mozilla: Use-after-free in HTML5 string parser (MFSA 2016-23)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1960.json"},{"CVE":"CVE-2016-1961","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315577","bugzilla_description":"CVE-2016-1961 Mozilla: Use-after-free in SetBody (MFSA 2016-24)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1961.json"},{"CVE":"CVE-2016-1962","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373"],"bugzilla":"1315578","bugzilla_description":"CVE-2016-1962 Mozilla: Use-after-free when using multiple WebRTC data channels (MFSA 2016-25)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1962.json"},{"CVE":"CVE-2016-1963","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315579","bugzilla_description":"CVE-2016-1963 Mozilla: Memory corruption when modifying a file being read by FileReader (MFSA 2016-26)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1963.json"},{"CVE":"CVE-2016-1964","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315774","bugzilla_description":"CVE-2016-1964 Mozilla: Use-after-free during XML transformations (MFSA 2016-27)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1964.json"},{"CVE":"CVE-2016-1965","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373"],"bugzilla":"1315775","bugzilla_description":"CVE-2016-1965 Mozilla: Addressbar spoofing though history navigation and Location protocol property (MFSA 2016-28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1965.json"},{"CVE":"CVE-2016-1967","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315776","bugzilla_description":"CVE-2016-1967 Mozilla: Same-origin policy violation using perfomance.getEntries and history navigation with session restore (MFSA 2016-29)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1967.json"},{"CVE":"CVE-2016-1968","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315777","bugzilla_description":"CVE-2016-1968 Mozilla: Buffer overflow in Brotli decompression (MFSA 2016-30)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1968.json"},{"CVE":"CVE-2016-1966","severity":"important","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315778","bugzilla_description":"CVE-2016-1966 Mozilla: Memory corruption with malicious NPAPI plugin (MFSA 2016-31)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1966.json"},{"CVE":"CVE-2016-1970","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315780","bugzilla_description":"CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975  CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1970.json"},{"CVE":"CVE-2016-1971","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315780","bugzilla_description":"CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975  CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1971.json"},{"CVE":"CVE-2016-1972","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315780","bugzilla_description":"CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975  CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1972.json"},{"CVE":"CVE-2016-1975","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315780","bugzilla_description":"CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975  CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1975.json"},{"CVE":"CVE-2016-1976","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315780","bugzilla_description":"CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975  CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1976.json"},{"CVE":"CVE-2016-1973","severity":"important","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373"],"bugzilla":"1315782","bugzilla_description":"CVE-2016-1973 Mozilla: Use-after-free in GetStaticInstance in WebRTC (MFSA 2016-33)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1973.json"},{"CVE":"CVE-2016-1974","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315785","bugzilla_description":"CVE-2016-1974 Mozilla: Out-of-bounds read in HTML parser following a failed allocation (MFSA 2016-34)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1974.json"},{"CVE":"CVE-2016-1977","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1977.json"},{"CVE":"CVE-2016-2790","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2790.json"},{"CVE":"CVE-2016-2791","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2791.json"},{"CVE":"CVE-2016-2792","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2792.json"},{"CVE":"CVE-2016-2793","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2793.json"},{"CVE":"CVE-2016-2794","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2794.json"},{"CVE":"CVE-2016-2795","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2795.json"},{"CVE":"CVE-2016-2796","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2796.json"},{"CVE":"CVE-2016-2797","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2797.json"},{"CVE":"CVE-2016-2798","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2798.json"},{"CVE":"CVE-2016-2799","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2799.json"},{"CVE":"CVE-2016-2800","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2800.json"},{"CVE":"CVE-2016-2801","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2801.json"},{"CVE":"CVE-2016-2802","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2802.json"},{"CVE":"CVE-2016-1969","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0197"],"bugzilla":"1317560","bugzilla_description":"CVE-2016-1969 mozilla: out-of-bounds write with malicious font in graphite2 (MFSA 2016-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["firefox-0:38.6.1-1.el6_7","firefox-0:38.6.1-1.el5_11","firefox-0:38.6.1-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1969.json"},{"CVE":"CVE-2016-10197","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418612","bugzilla_description":"CVE-2016-10197 libevent: Out-of-bounds read in search_make_new()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-1949","severity":"critical","public_date":"2016-02-11T00:00:00Z","advisories":[],"bugzilla":"1306856","bugzilla_description":"CVE-2016-1949 firefox: Same-origin-policy violation using Service Workers with plugins","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1949.json"},{"CVE":"CVE-2016-1521","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0197","RHSA-2016:0594","RHSA-2016:0258"],"bugzilla":"1305805","bugzilla_description":"CVE-2016-1521 graphite2: Out-of-bound read vulnerability triggered by crafted fonts","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:38.6.1-1.el6_7","graphite2-0:1.3.6-1.el7_2","thunderbird-0:38.6.0-1.el5_11","firefox-0:38.6.1-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.1-1.el7_2","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1521.json"},{"CVE":"CVE-2016-1522","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0197","RHSA-2016:0594","RHSA-2016:0258"],"bugzilla":"1305810","bugzilla_description":"CVE-2016-1522 graphite2: Null pointer dereference and out-of-bounds access vulnerabilities","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["firefox-0:38.6.1-1.el6_7","graphite2-0:1.3.6-1.el7_2","thunderbird-0:38.6.0-1.el5_11","firefox-0:38.6.1-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.1-1.el7_2","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1522.json"},{"CVE":"CVE-2016-1523","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0197","RHSA-2016:0594","RHSA-2016:0258"],"bugzilla":"1305813","bugzilla_description":"CVE-2016-1523 graphite2: Heap-based buffer overflow in context item handling functionality","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["firefox-0:38.6.1-1.el6_7","graphite2-0:1.3.6-1.el7_2","thunderbird-0:38.6.0-1.el5_11","firefox-0:38.6.1-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.1-1.el7_2","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1523.json"},{"CVE":"CVE-2016-1526","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0594","RHSA-2016:0695"],"bugzilla":"1308590","bugzilla_description":"CVE-2016-1526 graphite2: Out-of-bounds read vulnerability in TfUtil:LocaLookup","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["firefox-0:45.1.0-1.el6_7","graphite2-0:1.3.6-1.el7_2","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1526.json"},{"CVE":"CVE-2016-10195","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418608","bugzilla_description":"CVE-2016-10195 libevent: Stack-buffer overflow in the name_parse() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10196","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418611","bugzilla_description":"CVE-2016-10196 libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-1930","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":["RHSA-2016:0071","RHSA-2016:0258"],"bugzilla":"1301818","bugzilla_description":"CVE-2016-1930 Mozilla: Miscellaneous memory safety hazards (rv:38.6) (MFSA 2016-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.6.0-1.el7_2","thunderbird-0:38.6.0-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.0-1.el5_11","firefox-0:38.6.0-1.el6_7","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1930.json"},{"CVE":"CVE-2016-1931","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301819","bugzilla_description":"CVE-2016-1931 Mozilla: Miscellaneous memory safety hazards (rv:44.0) (MFSA 2016-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1931.json"},{"CVE":"CVE-2016-1933","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301820","bugzilla_description":"CVE-2016-1933 Mozilla: Out of Memory crash when parsing GIF format images (MFSA 2016-02)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1933.json"},{"CVE":"CVE-2016-1935","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":["RHSA-2016:0071","RHSA-2016:0258"],"bugzilla":"1301821","bugzilla_description":"CVE-2016-1935 Mozilla: Buffer overflow in WebGL after out of memory allocation (MFSA 2016-03)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.6.0-1.el7_2","thunderbird-0:38.6.0-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.0-1.el5_11","firefox-0:38.6.0-1.el6_7","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1935.json"},{"CVE":"CVE-2016-1939","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301822","bugzilla_description":"CVE-2016-1939 Mozilla: Firefox allows for control characters to be set in cookie names (MFSA 2016-04)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1939.json"},{"CVE":"CVE-2016-1937","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301823","bugzilla_description":"CVE-2016-1937 Mozilla: Missing delay following user click events in protocol handler dialog (MFSA 2016-06)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1937.json"},{"CVE":"CVE-2016-1944","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301825","bugzilla_description":"CVE-2016-1944 CVE-2016-1945 CVE-2016-1946 Mozilla: Unsafe memory manipulation found through code inspection (MFSA 2016-10)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1944.json"},{"CVE":"CVE-2016-1945","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301825","bugzilla_description":"CVE-2016-1944 CVE-2016-1945 CVE-2016-1946 Mozilla: Unsafe memory manipulation found through code inspection (MFSA 2016-10)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1945.json"},{"CVE":"CVE-2016-1946","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301825","bugzilla_description":"CVE-2016-1944 CVE-2016-1945 CVE-2016-1946 Mozilla: Unsafe memory manipulation found through code inspection (MFSA 2016-10)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1946.json"},{"CVE":"CVE-2016-1947","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301826","bugzilla_description":"CVE-2016-1947 Mozilla: Application Reputation service disabled in Firefox 43 (MFSA 2016-11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1947.json"},{"CVE":"CVE-2016-1943","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301827","bugzilla_description":"CVE-2016-1943 Mozilla: Addressbar spoofing attacks (MFSA 2016-09)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1943.json"},{"CVE":"CVE-2015-7201","severity":"critical","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0001","RHSA-2015:2657"],"bugzilla":"1291571","bugzilla_description":"CVE-2015-7201 Mozilla: Miscellaneous memory safety hazards (rv:38.5) (MFSA 2015-134)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:38.5.0-1.el6_7","thunderbird-0:38.5.0-1.el7_2","thunderbird-0:38.5.0-1.el5_11","firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7201.json"},{"CVE":"CVE-2015-7202","severity":"critical","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291577","bugzilla_description":"CVE-2015-7202 Mozilla: Miscellaneous memory safety hazards (rv:43.0) (MFSA 2015-134)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7202.json"},{"CVE":"CVE-2015-7204","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291578","bugzilla_description":"CVE-2015-7204 Mozilla: Crash with JavaScript variable assignment with unboxed objects (MFSA 2015-135)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7204.json"},{"CVE":"CVE-2015-7207","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291581","bugzilla_description":"CVE-2015-7207 Mozilla: Same-origin policy violation using perfomance.getEntries and history navigation (MFSA 2015-136)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7207.json"},{"CVE":"CVE-2015-7208","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291583","bugzilla_description":"CVE-2015-7208 Mozilla: Firefox allows for control characters to be set in cookies (MFSA 2015-137)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7208.json"},{"CVE":"CVE-2015-7210","severity":"critical","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2015:2657"],"bugzilla":"1291585","bugzilla_description":"CVE-2015-7210 Mozilla: Use-after-free in WebRTC when datachannel is used after being destroyed (MFSA 2015-138)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7210.json"},{"CVE":"CVE-2015-7212","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0001","RHSA-2015:2657"],"bugzilla":"1291587","bugzilla_description":"CVE-2015-7212 Mozilla: Integer overflow allocating extremely large textures (MFSA 2015-139)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["thunderbird-0:38.5.0-1.el6_7","thunderbird-0:38.5.0-1.el7_2","thunderbird-0:38.5.0-1.el5_11","firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7212.json"},{"CVE":"CVE-2015-7215","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291588","bugzilla_description":"CVE-2015-7215 Mozilla: Cross-origin information leak through web workers error events (MFSA 2015-140)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7215.json"},{"CVE":"CVE-2015-7211","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291589","bugzilla_description":"CVE-2015-7211 Mozilla: Hash in data: URI is incorrectly parsed (MFSA 2015-141)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7211.json"},{"CVE":"CVE-2015-7218","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291590","bugzilla_description":"CVE-2015-7218 CVE-2015-7219 Mozilla: DOS due to malformed frames in HTTP/2 (MFSA 2015-142)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7218.json"},{"CVE":"CVE-2015-7219","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291590","bugzilla_description":"CVE-2015-7218 CVE-2015-7219 Mozilla: DOS due to malformed frames in HTTP/2 (MFSA 2015-142)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7219.json"},{"CVE":"CVE-2015-7216","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291591","bugzilla_description":"CVE-2015-7216 CVE-2015-7217 Mozilla: Linux file chooser crashes on malformed JPEG2000 and TGA images due to flaws in underlying libraries (MFSA 2015-143)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7216.json"},{"CVE":"CVE-2015-7217","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291591","bugzilla_description":"CVE-2015-7216 CVE-2015-7217 Mozilla: Linux file chooser crashes on malformed JPEG2000 and TGA images due to flaws in underlying libraries (MFSA 2015-143)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7217.json"},{"CVE":"CVE-2015-7203","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291593","bugzilla_description":"CVE-2015-7203 CVE-2015-7220 CVE-2015-7221 Mozilla: Buffer overflows found through code inspection (MFSA 2015-144)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7203.json"},{"CVE":"CVE-2015-7220","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291593","bugzilla_description":"CVE-2015-7203 CVE-2015-7220 CVE-2015-7221 Mozilla: Buffer overflows found through code inspection (MFSA 2015-144)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7220.json"},{"CVE":"CVE-2015-7221","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291593","bugzilla_description":"CVE-2015-7203 CVE-2015-7220 CVE-2015-7221 Mozilla: Buffer overflows found through code inspection (MFSA 2015-144)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7221.json"},{"CVE":"CVE-2015-7205","severity":"important","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0001","RHSA-2015:2657"],"bugzilla":"1291595","bugzilla_description":"CVE-2015-7205 Mozilla: Underflow through code inspection (MFSA 2015-145)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:38.5.0-1.el6_7","thunderbird-0:38.5.0-1.el7_2","thunderbird-0:38.5.0-1.el5_11","firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7205.json"},{"CVE":"CVE-2015-7213","severity":"important","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0001","RHSA-2015:2657"],"bugzilla":"1291596","bugzilla_description":"CVE-2015-7213 Mozilla: Integer overflow in MP4 playback in 64-bit versions (MFSA 2015-146)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["thunderbird-0:38.5.0-1.el6_7","thunderbird-0:38.5.0-1.el7_2","thunderbird-0:38.5.0-1.el5_11","firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7213.json"},{"CVE":"CVE-2015-7222","severity":"important","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2015:2657"],"bugzilla":"1291597","bugzilla_description":"CVE-2015-7222 Mozilla: Integer underflow and buffer overflow processing MP4 metadata in libstagefright (MFSA 2015-147)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-119","affected_packages":["firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7222.json"},{"CVE":"CVE-2015-7223","severity":"critical","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291599","bugzilla_description":"CVE-2015-7223 Mozilla: Privilege escalation vulnerabilities in WebExtension APIs (MFSA 2015-148)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7223.json"},{"CVE":"CVE-2015-7214","severity":"important","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0001","RHSA-2015:2657"],"bugzilla":"1291600","bugzilla_description":"CVE-2015-7214 Mozilla: Cross-site reading attack through data: and view-source: URIs (MFSA 2015-149)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:38.5.0-1.el6_7","thunderbird-0:38.5.0-1.el7_2","thunderbird-0:38.5.0-1.el5_11","firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7214.json"},{"CVE":"CVE-2015-4513","severity":"critical","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277332","bugzilla_description":"CVE-2015-4513 Mozilla: Miscellaneous memory safety hazards (rv:38.4) (MFSA 2015-116)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4513.json"},{"CVE":"CVE-2015-4514","severity":"critical","public_date":"2015-11-04T00:00:00Z","advisories":[],"bugzilla":"1277334","bugzilla_description":"CVE-2015-4514 Mozilla: Miscellaneous memory safety hazards (rv:42.0) (MFSA 2015-116)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4514.json"},{"CVE":"CVE-2015-4515","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":[],"bugzilla":"1277337","bugzilla_description":"CVE-2015-4515 Mozilla: Information disclosure through NTLM authentication (MFSA 2015-117)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4515.json"},{"CVE":"CVE-2015-4518","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":[],"bugzilla":"1277339","bugzilla_description":"CVE-2015-4518 Mozilla: CSP bypass due to permissive Reader mode whitelist (MFSA 2015-118)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4518.json"},{"CVE":"CVE-2015-7187","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":[],"bugzilla":"1277342","bugzilla_description":"CVE-2015-7187 Mozilla: disabling scripts in Add-on SDK panels has no effect (MFSA 2015-121)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7187.json"},{"CVE":"CVE-2015-7188","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:1982"],"bugzilla":"1277343","bugzilla_description":"CVE-2015-7188 Mozilla: Trailing whitespace in IP address hostnames can bypass same-origin policy (MFSA 2015-122)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["firefox-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7188.json"},{"CVE":"CVE-2015-7189","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277344","bugzilla_description":"CVE-2015-7189 Mozilla: Buffer overflow during image interactions in canvas (MFSA 2015-123)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7189.json"},{"CVE":"CVE-2015-7193","severity":"important","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277346","bugzilla_description":"CVE-2015-7193 Mozilla: CORS preflight is bypassed when non-standard Content-Type headers are received (MFSA 2015-127)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7193.json"},{"CVE":"CVE-2015-7194","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:1982"],"bugzilla":"1277347","bugzilla_description":"CVE-2015-7194 Mozilla: Memory corruption in libjar through zip files (MFSA 2015-128)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7194.json"},{"CVE":"CVE-2015-7195","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":[],"bugzilla":"1277348","bugzilla_description":"CVE-2015-7195 Mozilla: Certain escaped characters in host of Location-header are being treated as non-escaped (MFSA 2015-129)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7195.json"},{"CVE":"CVE-2015-7196","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:1982"],"bugzilla":"1277349","bugzilla_description":"CVE-2015-7196 Mozilla: JavaScript garbage collection crash with Java applet (MFSA 2015-130)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7196.json"},{"CVE":"CVE-2015-7198","severity":"critical","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277350","bugzilla_description":"CVE-2015-7198 CVE-2015-7199 CVE-2015-7200 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7198.json"},{"CVE":"CVE-2015-7199","severity":"critical","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277350","bugzilla_description":"CVE-2015-7198 CVE-2015-7199 CVE-2015-7200 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7199.json"},{"CVE":"CVE-2015-7200","severity":"critical","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277350","bugzilla_description":"CVE-2015-7198 CVE-2015-7199 CVE-2015-7200 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7200.json"},{"CVE":"CVE-2015-7197","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277351","bugzilla_description":"CVE-2015-7197 Mozilla: Mixed content WebSocket policy bypass through workers (MFSA 2015-132)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7197.json"},{"CVE":"CVE-2015-7184","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":[],"bugzilla":"1272461","bugzilla_description":"CVE-2015-7184 firefox: cross-origin restriction bypass using Fetch","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7184.json"},{"CVE":"CVE-2015-9274","severity":"low","public_date":"2015-09-29T00:00:00Z","advisories":[],"bugzilla":"1652081","bugzilla_description":"CVE-2015-9274 harfbuzz: DoS due to GPOS and GSUB table mishandling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-4500","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265186","bugzilla_description":"CVE-2015-4500 Mozilla: Miscellaneous memory safety hazards (MFSA 2015-96)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-805","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4500.json"},{"CVE":"CVE-2015-4510","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265190","bugzilla_description":"CVE-2015-4510 Mozilla: Use-after-free with shared workers and IndexedDB (MFSA 2015-104)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4510.json"},{"CVE":"CVE-2015-4509","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265192","bugzilla_description":"CVE-2015-4509 Mozilla: Use-after-free while manipulating HTML media content (MFSA 2015-106)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4509.json"},{"CVE":"CVE-2015-7178","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265201","bugzilla_description":"CVE-2015-7178 CVE-2015-7179 Mozilla: Memory safety errors in libGLES in the ANGLE graphics library (MFSA 2015-113)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-805","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7178.json"},{"CVE":"CVE-2015-7179","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265201","bugzilla_description":"CVE-2015-7178 CVE-2015-7179 Mozilla: Memory safety errors in libGLES in the ANGLE graphics library (MFSA 2015-113)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-805","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7179.json"},{"CVE":"CVE-2015-4503","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265591","bugzilla_description":"CVE-2015-4503 Mozilla: Memory leak in mozTCPSocket to servers (MFSA 2015-97)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4503.json"},{"CVE":"CVE-2015-4504","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265596","bugzilla_description":"CVE-2015-4504 Mozilla: Out of bounds read in QCMS library with ICC V4 profile attributes (MFSA 2015-98)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4504.json"},{"CVE":"CVE-2015-4476","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265603","bugzilla_description":"CVE-2015-4476 Mozilla: Site attribute spoofing on Android by pasting URL with unknown scheme (MFSA 2015-99)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4476.json"},{"CVE":"CVE-2015-4505","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265610","bugzilla_description":"CVE-2015-4505 Mozilla: Arbitrary file manipulation by local user through Mozilla updater (MFSA 2015-100)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4505.json"},{"CVE":"CVE-2015-4506","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1834"],"bugzilla":"1265617","bugzilla_description":"CVE-2015-4506 Mozilla: Buffer overflow in libvpx while parsing vp9 format video (MFSA 2015-101)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["firefox-0:38.3.0-2.el5_11","firefox-0:38.3.0-2.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4506.json"},{"CVE":"CVE-2015-4507","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265621","bugzilla_description":"CVE-2015-4507 Mozilla: Crash when using debugger with SavedStacks in JavaScript (MFSA 2015-102)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4507.json"},{"CVE":"CVE-2015-4508","severity":"low","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265624","bugzilla_description":"CVE-2015-4508 Mozilla: URL spoofing in reader mode (MFSA 2015-103)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4508.json"},{"CVE":"CVE-2015-4511","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1834"],"bugzilla":"1265630","bugzilla_description":"CVE-2015-4511 Mozilla: Buffer overflow while decoding WebM video (MFSA 2015-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["firefox-0:38.3.0-2.el5_11","firefox-0:38.3.0-2.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4511.json"},{"CVE":"CVE-2015-4512","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265769","bugzilla_description":"CVE-2015-4512 Mozilla: Out-of-bounds read during 2D canvas display on Linux 16-bit color depth systems (MFSA 2015-107)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4512.json"},{"CVE":"CVE-2015-4502","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265771","bugzilla_description":"CVE-2015-4502 Mozilla: Scripted proxies can access inner window (MFSA 2015-108)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4502.json"},{"CVE":"CVE-2015-4516","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265775","bugzilla_description":"CVE-2015-4516 Mozilla: JavaScript immutable property enforcement can be bypassed (MFSA 2015-109)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4516.json"},{"CVE":"CVE-2015-4519","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265778","bugzilla_description":"CVE-2015-4519 Mozilla: Dragging and dropping images exposes final URL after redirects (MFSA 2015-110)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4519.json"},{"CVE":"CVE-2015-4520","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265781","bugzilla_description":"CVE-2015-4520 Mozilla: Errors in the handling of CORS preflight request headers (MFSA 2015-111)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-284","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4520.json"},{"CVE":"CVE-2015-4517","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4517.json"},{"CVE":"CVE-2015-4521","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4521.json"},{"CVE":"CVE-2015-4522","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4522.json"},{"CVE":"CVE-2015-7174","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7174.json"},{"CVE":"CVE-2015-7175","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7175.json"},{"CVE":"CVE-2015-7176","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7176.json"},{"CVE":"CVE-2015-7177","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7177.json"},{"CVE":"CVE-2015-7180","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7180.json"},{"CVE":"CVE-2015-7327","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265785","bugzilla_description":"CVE-2015-7327 Mozilla: Information disclosure via the High Resolution Time API (MFSA 2015-114)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7327.json"},{"CVE":"CVE-2015-4501","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1266098","bugzilla_description":"CVE-2015-4501 Mozilla: Miscellaneous memory safety hazards (MFSA 2015-96)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4501.json"},{"CVE":"CVE-2015-4497","severity":"critical","public_date":"2015-08-27T00:00:00Z","advisories":["RHSA-2015:1693"],"bugzilla":"1257276","bugzilla_description":"CVE-2015-4497 Mozilla: Use-after-free when resizing canvas element during restyling (MFSA 2015-94)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.2.1-1.el6_7","firefox-0:38.2.1-1.el5_11","firefox-0:38.2.1-1.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4497.json"},{"CVE":"CVE-2015-4498","severity":"important","public_date":"2015-08-27T00:00:00Z","advisories":["RHSA-2015:1693"],"bugzilla":"1257278","bugzilla_description":"CVE-2015-4498 Mozilla: Add-on notification bypass through data URLs (MFSA 2015-95)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.1-1.el6_7","firefox-0:38.2.1-1.el5_11","firefox-0:38.2.1-1.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4498.json"},{"CVE":"CVE-2015-6525","severity":"moderate","public_date":"2015-08-24T00:00:00Z","advisories":[],"bugzilla":"1256797","bugzilla_description":"CVE-2015-6525 libevent: multiple integer overflows in the evbuffer APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6525.json"},{"CVE":"CVE-2015-4496","severity":"critical","public_date":"2015-08-12T00:00:00Z","advisories":["RHSA-2015:0988"],"bugzilla":"1253550","bugzilla_description":"CVE-2015-4496 Mozilla: Integer overflows in libstagefright while processing MP4 video metadata (MFSA 2015-93)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4496.json"},{"CVE":"CVE-2015-4473","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1586"],"bugzilla":"1252271","bugzilla_description":"CVE-2015-4473 Mozilla: Miscellaneous memory safety hazards (rv:38.2) (MFSA 2015-79)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4473.json"},{"CVE":"CVE-2015-4474","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252273","bugzilla_description":"CVE-2015-4474 Mozilla: Miscellaneous memory safety hazards (rv:40.0) (MFSA 2015-79)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4474.json"},{"CVE":"CVE-2015-4475","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252276","bugzilla_description":"CVE-2015-4475 Mozilla: Out-of-bounds read with malformed MP3 file (MFSA 2015-80)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4475.json"},{"CVE":"CVE-2015-4477","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252277","bugzilla_description":"CVE-2015-4477 Mozilla: Use-after-free in MediaStream playback (MFSA 2015-81)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4477.json"},{"CVE":"CVE-2015-4478","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252282","bugzilla_description":"CVE-2015-4478 Mozilla: Redefinition of non-configurable JavaScript object properties (MFSA 2015-82)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4478.json"},{"CVE":"CVE-2015-4479","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252285","bugzilla_description":"CVE-2015-4479 CVE-2015-4480 CVE-2015-4493 Mozilla: Overflow issues in libstagefright (MFSA 2015-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-190|CWE-119)","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4479.json"},{"CVE":"CVE-2015-4480","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252285","bugzilla_description":"CVE-2015-4479 CVE-2015-4480 CVE-2015-4493 Mozilla: Overflow issues in libstagefright (MFSA 2015-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-190|CWE-119)","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4480.json"},{"CVE":"CVE-2015-4493","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252285","bugzilla_description":"CVE-2015-4479 CVE-2015-4480 CVE-2015-4493 Mozilla: Overflow issues in libstagefright (MFSA 2015-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-190|CWE-119)","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4493.json"},{"CVE":"CVE-2015-4483","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252288","bugzilla_description":"CVE-2015-4483 Mozilla: Feed: protocol with POST bypasses mixed content protections (MFSA 2015-86)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4483.json"},{"CVE":"CVE-2015-4484","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252289","bugzilla_description":"CVE-2015-4484 Mozilla: Crash when using shared memory in JavaScript (MFSA 2015-87)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4484.json"},{"CVE":"CVE-2015-4491","severity":"important","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1694","RHSA-2015:1586"],"bugzilla":"1252290","bugzilla_description":"CVE-2015-4491 Mozilla: Heap overflow in gdk-pixbuf when scaling bitmap images (MFSA 2015-88)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","gdk-pixbuf2-0:2.24.1-6.el6_7","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","gdk-pixbuf2-0:2.28.2-5.el7_1","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4491.json"},{"CVE":"CVE-2015-4485","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252292","bugzilla_description":"CVE-2015-4485 CVE-2015-4486 Mozilla: Buffer overflows on Libvpx when decoding WebM video (MFSA 2015-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4485.json"},{"CVE":"CVE-2015-4486","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252292","bugzilla_description":"CVE-2015-4485 CVE-2015-4486 Mozilla: Buffer overflows on Libvpx when decoding WebM video (MFSA 2015-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4486.json"},{"CVE":"CVE-2015-4487","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1586"],"bugzilla":"1252293","bugzilla_description":"CVE-2015-4487 CVE-2015-4488 CVE-2015-4489 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4487.json"},{"CVE":"CVE-2015-4488","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1586"],"bugzilla":"1252293","bugzilla_description":"CVE-2015-4487 CVE-2015-4488 CVE-2015-4489 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4488.json"},{"CVE":"CVE-2015-4489","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1586"],"bugzilla":"1252293","bugzilla_description":"CVE-2015-4487 CVE-2015-4488 CVE-2015-4489 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4489.json"},{"CVE":"CVE-2015-4490","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252294","bugzilla_description":"CVE-2015-4490 Mozilla: Mozilla Content Security Policy allows for asterisk wildcards in violation of CSP specification (MFSA 2015-91)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4490.json"},{"CVE":"CVE-2015-4492","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252295","bugzilla_description":"CVE-2015-4492 Mozilla: Use-after-free in XMLHttpRequest with shared workers (MFSA 2015-92)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4492.json"},{"CVE":"CVE-2015-4495","severity":"important","public_date":"2015-08-06T00:00:00Z","advisories":["RHSA-2015:1581"],"bugzilla":"1251318","bugzilla_description":"CVE-2015-4495 Mozilla: Same origin violation and local file stealing via PDF reader (MFSA 2015-78)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:38.1.1-1.el7_1","firefox-0:38.1.1-1.el5_11","firefox-0:38.1.1-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4495.json"},{"CVE":"CVE-2015-2724","severity":"important","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236947","bugzilla_description":"CVE-2015-2724 CVE-2015-2725 Mozilla: Miscellaneous memory safety hazards (rv:31.8 / rv:38.1) (MFSA 2015-59)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2724.json"},{"CVE":"CVE-2015-2725","severity":"important","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236947","bugzilla_description":"CVE-2015-2724 CVE-2015-2725 Mozilla: Miscellaneous memory safety hazards (rv:31.8 / rv:38.1) (MFSA 2015-59)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2725.json"},{"CVE":"CVE-2015-2726","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":[],"bugzilla":"1236948","bugzilla_description":"CVE-2015-2726 Mozilla: Miscellaneous memory safety hazards (rv:38.1) (MFSA 2015-59)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2726.json"},{"CVE":"CVE-2015-2727","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236950","bugzilla_description":"CVE-2015-2727 Mozilla: Local files or privileged URLs in pages can be opened into new tabs (MFSA 2015-60)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2727.json"},{"CVE":"CVE-2015-2728","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236951","bugzilla_description":"CVE-2015-2728 Mozilla: Type confusion in Indexed Database Manager (MFSA 2015-61)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2728.json"},{"CVE":"CVE-2015-2729","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236952","bugzilla_description":"CVE-2015-2729 Mozilla: Out-of-bound read while computing an oscillator rendering range in Web Audio (MFSA 2015-62)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2729.json"},{"CVE":"CVE-2015-2731","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236953","bugzilla_description":"CVE-2015-2731 Mozilla: Use-after-free in Content Policy due to microtask execution error (MFSA 2015-63)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2731.json"},{"CVE":"CVE-2015-2722","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236955","bugzilla_description":"CVE-2015-2722 CVE-2015-2733 Mozilla: Use-after-free in workers while using XMLHttpRequest (MFSA 2015-65)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2722.json"},{"CVE":"CVE-2015-2733","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236955","bugzilla_description":"CVE-2015-2722 CVE-2015-2733 Mozilla: Use-after-free in workers while using XMLHttpRequest (MFSA 2015-65)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2733.json"},{"CVE":"CVE-2015-2734","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2734.json"},{"CVE":"CVE-2015-2735","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2735.json"},{"CVE":"CVE-2015-2736","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2736.json"},{"CVE":"CVE-2015-2737","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2737.json"},{"CVE":"CVE-2015-2738","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2738.json"},{"CVE":"CVE-2015-2739","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2739.json"},{"CVE":"CVE-2015-2740","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2740.json"},{"CVE":"CVE-2015-2741","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236963","bugzilla_description":"CVE-2015-2741 Mozilla: Key pinning is ignored when overridable errors are encountered (MFSA 2015-67)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2741.json"},{"CVE":"CVE-2015-2743","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236964","bugzilla_description":"CVE-2015-2743 Mozilla: Privilege escalation through internal workers (MFSA 2015-69)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2743.json"},{"CVE":"CVE-2015-2708","severity":"critical","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988","RHSA-2015:1012"],"bugzilla":"1220597","bugzilla_description":"CVE-2015-2708 Mozilla: Miscellaneous memory safety hazards (rv:31.7) (MFSA 2015-46)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.7.0-1.el6_6","firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1","thunderbird-0:31.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2708.json"},{"CVE":"CVE-2015-2709","severity":"critical","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220599","bugzilla_description":"CVE-2015-2709 Mozilla: Miscellaneous memory safety hazards (rv:38.0) (MFSA 2015-46)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2709.json"},{"CVE":"CVE-2015-0797","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988"],"bugzilla":"1220600","bugzilla_description":"CVE-2015-0797 Mozilla: Buffer overflow parsing H.264 video with Linux Gstreamer (MFSA 2015-47)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0797.json"},{"CVE":"CVE-2015-2710","severity":"critical","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988","RHSA-2015:1012"],"bugzilla":"1220601","bugzilla_description":"CVE-2015-2710 Mozilla: Buffer overflow with SVG content and CSS (MFSA 2015-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["thunderbird-0:31.7.0-1.el6_6","firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1","thunderbird-0:31.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2710.json"},{"CVE":"CVE-2015-2711","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220603","bugzilla_description":"CVE-2015-2711 Mozilla: <meta name=\"referrer\"> is ignored for navigations from the context menu and via a middle-click (MFSA 2015-49)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2711.json"},{"CVE":"CVE-2015-2712","severity":"critical","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220604","bugzilla_description":"CVE-2015-2712 Mozilla: Out-of-bounds read and write in asm.js validation (MFSA 2015-50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2712.json"},{"CVE":"CVE-2015-2713","severity":"critical","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988","RHSA-2015:1012"],"bugzilla":"1220605","bugzilla_description":"CVE-2015-2713 Mozilla: Use-after-free during text processing with vertical text enabled (MFSA 2015-51)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:31.7.0-1.el6_6","firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1","thunderbird-0:31.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2713.json"},{"CVE":"CVE-2015-2715","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220606","bugzilla_description":"CVE-2015-2715 Mozilla: Use-after-free due to Media Decoder Thread creation during shutdown (MFSA 2015-53)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2715.json"},{"CVE":"CVE-2015-2716","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988","RHBA-2020:1539","RHSA-2020:1011","RHSA-2015:1012","RHSA-2020:2508","RHBA-2020:1540"],"bugzilla":"1220607","bugzilla_description":"CVE-2015-2716 expat: Integer overflow leading to buffer overflow in XML_GetBuffer()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","expat-0:2.1.0-11.el7_7","thunderbird-0:31.7.0-1.el6_6","firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1","expat-0:2.1.0-11.el7","thunderbird-0:31.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2716.json"},{"CVE":"CVE-2015-2717","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220608","bugzilla_description":"CVE-2015-2717 Mozilla: Buffer overflow and out-of-bounds read while parsing MP4 video metadata (MFSA 2015-55)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2717.json"},{"CVE":"CVE-2015-2718","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220609","bugzilla_description":"CVE-2015-2718 Mozilla: Untrusted site hosting trusted page can intercept webchannel responses (MFSA 2015-56)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2718.json"},{"CVE":"CVE-2015-2706","severity":"critical","public_date":"2015-04-20T00:00:00Z","advisories":[],"bugzilla":"1213935","bugzilla_description":"CVE-2015-2706 Mozilla: Memory corruption during failed plugin initialization (MFSA 2015-45)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2706.json"},{"CVE":"CVE-2015-0799","severity":"important","public_date":"2015-04-03T00:00:00Z","advisories":[],"bugzilla":"1208731","bugzilla_description":"CVE-2015-0799 Mozilla: Certificate verification bypass through the HTTP/2 Alt-Svc header (MFSA 2015-44)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0799.json"},{"CVE":"CVE-2015-0815","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:0766","RHSA-2015:0771"],"bugzilla":"1207068","bugzilla_description":"CVE-2015-0815 Mozilla: Miscellaneous memory safety hazards (rv:31.6) (MFSA 2015-30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["firefox-0:31.6.0-2.el5_11","thunderbird-0:31.6.0-1.ael7b_1","firefox-0:31.6.0-2.ael7b_1","firefox-0:31.6.0-2.el6_6","thunderbird-0:31.6.0-1.el6_6","thunderbird-0:31.6.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0815.json"},{"CVE":"CVE-2015-0814","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207070","bugzilla_description":"CVE-2015-0814 Mozilla: Miscellaneous memory safety hazards (rv:37.0) (MFSA 2015-30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0814.json"},{"CVE":"CVE-2015-0812","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207071","bugzilla_description":"CVE-2015-0812 Mozilla: Add-on lightweight theme installation approval bypassed through MITM attack (MFSA 2015-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0812.json"},{"CVE":"CVE-2015-0816","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:0766","RHSA-2015:0771"],"bugzilla":"1207072","bugzilla_description":"CVE-2015-0816 Mozilla: resource:// documents can load privileged pages (MFSA 2015-33)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:31.6.0-2.el5_11","thunderbird-0:31.6.0-1.ael7b_1","firefox-0:31.6.0-2.ael7b_1","firefox-0:31.6.0-2.el6_6","thunderbird-0:31.6.0-1.el6_6","thunderbird-0:31.6.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0816.json"},{"CVE":"CVE-2015-0811","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207073","bugzilla_description":"CVE-2015-0811 Mozilla: Out of bounds read in QCMS library (MFSA 2015-34)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0811.json"},{"CVE":"CVE-2015-0808","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207075","bugzilla_description":"CVE-2015-0808 Mozilla: Incorrect memory management for simple-type arrays in WebRTC (MFSA 2015-36)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0808.json"},{"CVE":"CVE-2015-0807","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:0766","RHSA-2015:0771"],"bugzilla":"1207076","bugzilla_description":"CVE-2015-0807 Mozilla: CORS requests should not follow 30x redirections after preflight (MFSA 2015-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-352","affected_packages":["firefox-0:31.6.0-2.el5_11","thunderbird-0:31.6.0-1.ael7b_1","firefox-0:31.6.0-2.ael7b_1","firefox-0:31.6.0-2.el6_6","thunderbird-0:31.6.0-1.el6_6","thunderbird-0:31.6.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0807.json"},{"CVE":"CVE-2015-0805","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207078","bugzilla_description":"CVE-2015-0805 CVE-2015-0806 Mozilla: Memory corruption crashes in Off Main Thread Compositing (MFSA 2015-38)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0805.json"},{"CVE":"CVE-2015-0806","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207078","bugzilla_description":"CVE-2015-0805 CVE-2015-0806 Mozilla: Memory corruption crashes in Off Main Thread Compositing (MFSA 2015-38)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0806.json"},{"CVE":"CVE-2015-0803","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207081","bugzilla_description":"CVE-2015-0803 CVE-2015-0804 Mozilla: Use-after-free due to type confusion flaws (MFSA 2015-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0803.json"},{"CVE":"CVE-2015-0804","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207081","bugzilla_description":"CVE-2015-0803 CVE-2015-0804 Mozilla: Use-after-free due to type confusion flaws (MFSA 2015-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0804.json"},{"CVE":"CVE-2015-0801","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:0766","RHSA-2015:0771"],"bugzilla":"1207084","bugzilla_description":"CVE-2015-0801 Mozilla: Same-origin bypass through anchor navigation (MFSA 2015-40)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-358","affected_packages":["firefox-0:31.6.0-2.el5_11","thunderbird-0:31.6.0-1.ael7b_1","firefox-0:31.6.0-2.ael7b_1","firefox-0:31.6.0-2.el6_6","thunderbird-0:31.6.0-1.el6_6","thunderbird-0:31.6.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0801.json"},{"CVE":"CVE-2015-0802","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207086","bugzilla_description":"CVE-2015-0802 Mozilla: Windows can retain access to privileged content on navigation to unprivileged pages (MFSA 2015-42)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0802.json"},{"CVE":"CVE-2015-0813","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:0766","RHSA-2015:0771"],"bugzilla":"1207088","bugzilla_description":"CVE-2015-0813 Mozilla: Use-after-free when using the Fluendo MP3 GStreamer plugin (MFSA 2015-31)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:31.6.0-2.el5_11","thunderbird-0:31.6.0-1.ael7b_1","firefox-0:31.6.0-2.ael7b_1","firefox-0:31.6.0-2.el6_6","thunderbird-0:31.6.0-1.el6_6","thunderbird-0:31.6.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0813.json"},{"CVE":"CVE-2015-0817","severity":"critical","public_date":"2015-03-21T00:00:00Z","advisories":["RHSA-2015:0718"],"bugzilla":"1204362","bugzilla_description":"CVE-2015-0817 Mozilla: Code execution through incorrect JavaScript bounds checking elimination (MFSA 2015-29)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:31.5.3-3.ael7b_1","firefox-0:31.5.3-1.el5_11","firefox-0:31.5.3-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0817.json"},{"CVE":"CVE-2015-0818","severity":"critical","public_date":"2015-03-21T00:00:00Z","advisories":["RHSA-2015:0718"],"bugzilla":"1204363","bugzilla_description":"CVE-2015-0818 Mozilla: Privilege escalation through SVG navigation (MFSA 2015-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:31.5.3-3.ael7b_1","firefox-0:31.5.3-1.el5_11","firefox-0:31.5.3-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0818.json"},{"CVE":"CVE-2012-6702","severity":"moderate","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1319731","bugzilla_description":"CVE-2012-6702 expat: Using XML_Parse before rand() results into non-random output","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6702.json"},{"CVE":"CVE-2015-0836","severity":"critical","public_date":"2015-02-24T00:00:00Z","advisories":["RHSA-2015:0642","RHSA-2015:0266","RHSA-2015:0265","RHSA-2015:0629"],"bugzilla":"1195605","bugzilla_description":"CVE-2015-0836 Mozilla: Miscellaneous memory safety hazards (rv:31.5) (MFSA 2015-11)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:31.5.0-2.ael7b_1","firefox-0:31.5.0-1.el5_11","firefox-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-1.el5_11","thunderbird-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0836.json"},{"CVE":"CVE-2015-0835","severity":"critical","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195609","bugzilla_description":"CVE-2015-0835 Mozilla: Miscellaneous memory safety hazards (rv:36.0) (MFSA 2015-11)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0835.json"},{"CVE":"CVE-2015-0832","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195610","bugzilla_description":"CVE-2015-0832 Mozilla: Appended period to hostnames can bypass HPKP and HSTS protections (MFSA 2015-13)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0832.json"},{"CVE":"CVE-2015-0830","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195613","bugzilla_description":"CVE-2015-0830 Mozilla: Malicious WebGL content crash when writing strings (MFSA 2015-14)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0830.json"},{"CVE":"CVE-2015-0834","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195616","bugzilla_description":"CVE-2015-0834 Mozilla: TLS TURN and STUN connections silently fail to simple TCP connections (MFSA 2015-15)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-319","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0834.json"},{"CVE":"CVE-2015-0831","severity":"critical","public_date":"2015-02-24T00:00:00Z","advisories":["RHSA-2015:0642","RHSA-2015:0266","RHSA-2015:0265","RHSA-2015:0629"],"bugzilla":"1195619","bugzilla_description":"CVE-2015-0831 Mozilla: Use-after-free in IndexedDB (MFSA 2015-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:31.5.0-2.ael7b_1","firefox-0:31.5.0-1.el5_11","firefox-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-1.el5_11","thunderbird-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0831.json"},{"CVE":"CVE-2015-0829","severity":"critical","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195620","bugzilla_description":"CVE-2015-0829 Mozilla: Buffer overflow in libstagefright during MP4 video playback (MFSA 2015-17)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0829.json"},{"CVE":"CVE-2015-0828","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195621","bugzilla_description":"CVE-2015-0828 Mozilla: Double-free when using non-default memory allocators with a zero-length XHR (MFSA 2015-18)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0828.json"},{"CVE":"CVE-2015-0827","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":["RHSA-2015:0642","RHSA-2015:0266","RHSA-2015:0265","RHSA-2015:0629"],"bugzilla":"1195623","bugzilla_description":"CVE-2015-0827 Mozilla: Out-of-bounds read and write while rendering SVG content (MFSA 2015-19)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:31.5.0-2.ael7b_1","firefox-0:31.5.0-1.el5_11","firefox-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-1.el5_11","thunderbird-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0827.json"},{"CVE":"CVE-2015-0826","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195629","bugzilla_description":"CVE-2015-0826 Mozilla: Buffer overflow during CSS restyling (MFSA 2015-20)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0826.json"},{"CVE":"CVE-2015-0825","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195631","bugzilla_description":"CVE-2015-0825 Mozilla: Buffer underflow during MP3 playback (MFSA 2015-21)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0825.json"},{"CVE":"CVE-2015-0824","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195633","bugzilla_description":"CVE-2015-0824 Mozilla: Crash using DrawTarget in Cairo graphics library (MFSA 2015-22)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0824.json"},{"CVE":"CVE-2015-0823","severity":"low","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195636","bugzilla_description":"CVE-2015-0823 Mozilla: Use-after-free in Developer Console date with OpenType Sanitiser (MFSA 2015-23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0823.json"},{"CVE":"CVE-2015-0822","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":["RHSA-2015:0642","RHSA-2015:0266","RHSA-2015:0265","RHSA-2015:0629"],"bugzilla":"1195638","bugzilla_description":"CVE-2015-0822 Mozilla: Reading of local files through manipulation of form autocomplete (MFSA 2015-24)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["firefox-0:31.5.0-2.ael7b_1","firefox-0:31.5.0-1.el5_11","firefox-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-1.el5_11","thunderbird-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0822.json"},{"CVE":"CVE-2015-0821","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195639","bugzilla_description":"CVE-2015-0821 Mozilla: Local files or privileged URLs in pages can be opened into new tabs (MFSA 2015-25)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0821.json"},{"CVE":"CVE-2015-0819","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195640","bugzilla_description":"CVE-2015-0819 Mozilla: UI Tour whitelisted sites in background tab can spoof foreground tabs (MFA 2015-26)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0819.json"},{"CVE":"CVE-2014-8635","severity":"critical","public_date":"2015-01-15T00:00:00Z","advisories":[],"bugzilla":"1180963","bugzilla_description":"CVE-2014-8635 Mozilla: Miscellaneous memory safety hazards (rv:35.0) (MFSA 2015-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8635.json"},{"CVE":"CVE-2014-8637","severity":"moderate","public_date":"2015-01-15T00:00:00Z","advisories":[],"bugzilla":"1180964","bugzilla_description":"CVE-2014-8637 Mozilla: Uninitialized memory use during bitmap rendering (MFSA 2015-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8637.json"},{"CVE":"CVE-2014-8640","severity":"low","public_date":"2015-01-15T00:00:00Z","advisories":[],"bugzilla":"1180970","bugzilla_description":"CVE-2014-8640 Mozilla: Read of uninitialized memory in Web Audio (MFSA 2015-05)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8640.json"},{"CVE":"CVE-2014-8642","severity":"moderate","public_date":"2015-01-15T00:00:00Z","advisories":[],"bugzilla":"1180974","bugzilla_description":"CVE-2014-8642 Mozilla: Delegated OCSP responder certificates failure with id-pkix-ocsp-nocheck extension (MFSA 2015-08)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8642.json"},{"CVE":"CVE-2014-8634","severity":"critical","public_date":"2015-01-13T00:00:00Z","advisories":["RHSA-2015:0047","RHSA-2015:0046"],"bugzilla":"1180962","bugzilla_description":"CVE-2014-8634 Mozilla: Miscellaneous memory safety hazards (rv:31.4) (MFSA 2015-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["thunderbird-0:31.4.0-1.el6_6","firefox-0:31.4.0-1.el6_6","thunderbird-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8634.json"},{"CVE":"CVE-2014-8638","severity":"moderate","public_date":"2015-01-13T00:00:00Z","advisories":["RHSA-2015:0047","RHSA-2015:0046"],"bugzilla":"1180966","bugzilla_description":"CVE-2014-8638 Mozilla: sendBeacon requests lack an Origin header (MFSA 2015-03)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-352","affected_packages":["thunderbird-0:31.4.0-1.el6_6","firefox-0:31.4.0-1.el6_6","thunderbird-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8638.json"},{"CVE":"CVE-2014-8639","severity":"moderate","public_date":"2015-01-13T00:00:00Z","advisories":["RHSA-2015:0047","RHSA-2015:0046"],"bugzilla":"1180967","bugzilla_description":"CVE-2014-8639 Mozilla: Cookie injection through Proxy Authenticate responses (MFSA 2015-04)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-88","affected_packages":["thunderbird-0:31.4.0-1.el6_6","firefox-0:31.4.0-1.el6_6","thunderbird-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8639.json"},{"CVE":"CVE-2014-8641","severity":"important","public_date":"2015-01-13T00:00:00Z","advisories":["RHSA-2015:0046"],"bugzilla":"1180973","bugzilla_description":"CVE-2014-8641 Mozilla: Read-after-free in WebRTC (MFSA 2015-06)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:31.4.0-1.el6_6","firefox-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8641.json"},{"CVE":"CVE-2014-6272","severity":"moderate","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1144646","bugzilla_description":"CVE-2014-6272 libevent: potential heap overflow in buffer/bufferevent APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6272.json"},{"CVE":"CVE-2014-8631","severity":"moderate","public_date":"2014-12-03T00:00:00Z","advisories":[],"bugzilla":"1169211","bugzilla_description":"CVE-2014-8631 CVE-2014-8632 Mozilla: Privileged access to security wrapped protected objects (MFSA 2014-91)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8631.json"},{"CVE":"CVE-2014-8632","severity":"moderate","public_date":"2014-12-03T00:00:00Z","advisories":[],"bugzilla":"1169211","bugzilla_description":"CVE-2014-8631 CVE-2014-8632 Mozilla: Privileged access to security wrapped protected objects (MFSA 2014-91)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8632.json"},{"CVE":"CVE-2014-1587","severity":"critical","public_date":"2014-12-02T00:00:00Z","advisories":["RHSA-2014:1924","RHSA-2014:1919"],"bugzilla":"1169201","bugzilla_description":"CVE-2014-1587 Mozilla: Miscellaneous memory safety hazards (rv:31.3) (MFSA 2014-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["firefox-0:31.3.0-3.el7_0","thunderbird-0:31.3.0-1.el5_11","firefox-0:31.3.0-4.el5_11","thunderbird-0:31.3.0-1.el6_6","firefox-0:31.3.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1587.json"},{"CVE":"CVE-2014-1588","severity":"critical","public_date":"2014-12-02T00:00:00Z","advisories":[],"bugzilla":"1169204","bugzilla_description":"CVE-2014-1588 Mozilla: Miscellaneous memory safety hazards (rv:34.0) (MFSA 2014-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1588.json"},{"CVE":"CVE-2014-1589","severity":"moderate","public_date":"2014-12-02T00:00:00Z","advisories":[],"bugzilla":"1169205","bugzilla_description":"CVE-2014-1589 Mozilla: XBL bindings accessible via improper CSS declarations (MFSA 2014-84)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1589.json"},{"CVE":"CVE-2014-1590","severity":"low","public_date":"2014-12-02T00:00:00Z","advisories":["RHSA-2014:1924","RHSA-2014:1919"],"bugzilla":"1169206","bugzilla_description":"CVE-2014-1590 Mozilla: XMLHttpRequest crashes with some input streams (MFSA 2014-85)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["firefox-0:31.3.0-3.el7_0","thunderbird-0:31.3.0-1.el5_11","firefox-0:31.3.0-4.el5_11","thunderbird-0:31.3.0-1.el6_6","firefox-0:31.3.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1590.json"},{"CVE":"CVE-2014-1591","severity":"moderate","public_date":"2014-12-02T00:00:00Z","advisories":[],"bugzilla":"1169207","bugzilla_description":"CVE-2014-1591 Mozilla: CSP leaks redirect data via violation reports (MFSA 2014-86)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1591.json"},{"CVE":"CVE-2014-1592","severity":"critical","public_date":"2014-12-02T00:00:00Z","advisories":["RHSA-2014:1924","RHSA-2014:1919"],"bugzilla":"1169208","bugzilla_description":"CVE-2014-1592 Mozilla: Use-after-free during HTML5 parsing (MFSA 2014-87)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:31.3.0-3.el7_0","thunderbird-0:31.3.0-1.el5_11","firefox-0:31.3.0-4.el5_11","thunderbird-0:31.3.0-1.el6_6","firefox-0:31.3.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1592.json"},{"CVE":"CVE-2014-1593","severity":"critical","public_date":"2014-12-02T00:00:00Z","advisories":["RHSA-2014:1924","RHSA-2014:1919"],"bugzilla":"1169209","bugzilla_description":"CVE-2014-1593 Mozilla: Buffer overflow while parsing media content (MFSA 2014-88)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["firefox-0:31.3.0-3.el7_0","thunderbird-0:31.3.0-1.el5_11","firefox-0:31.3.0-4.el5_11","thunderbird-0:31.3.0-1.el6_6","firefox-0:31.3.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1593.json"},{"CVE":"CVE-2014-1594","severity":"moderate","public_date":"2014-12-02T00:00:00Z","advisories":["RHSA-2014:1924","RHSA-2014:1919"],"bugzilla":"1169210","bugzilla_description":"CVE-2014-1594 Mozilla: Bad casting from the BasicThebesLayer to BasicContainerLayer (MFSA 2014-89)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-749","affected_packages":["firefox-0:31.3.0-3.el7_0","thunderbird-0:31.3.0-1.el5_11","firefox-0:31.3.0-4.el5_11","thunderbird-0:31.3.0-1.el6_6","firefox-0:31.3.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1594.json"},{"CVE":"CVE-2014-1574","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1647","RHSA-2014:1635"],"bugzilla":"1152356","bugzilla_description":"CVE-2014-1574 Mozilla: Miscellaneous memory safety hazards (rv:31.2) (MFSA 2014-74)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:31.2.0-3.el7_0","thunderbird-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11","thunderbird-0:31.2.0-2.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1574.json"},{"CVE":"CVE-2014-1575","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152357","bugzilla_description":"CVE-2014-1575 Mozilla: Miscellaneous memory safety hazards (rv:33.0) (MFSA 2014-74)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1575.json"},{"CVE":"CVE-2014-1576","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1635"],"bugzilla":"1152358","bugzilla_description":"CVE-2014-1576 Mozilla: Buffer overflow during CSS manipulation (MFSA 2014-75)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:31.2.0-3.el7_0","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1576.json"},{"CVE":"CVE-2014-1577","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1647","RHSA-2014:1635"],"bugzilla":"1152359","bugzilla_description":"CVE-2014-1577 Mozilla: Web Audio memory corruption issues with custom waveforms (MFSA 2014-76)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:31.2.0-3.el7_0","thunderbird-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11","thunderbird-0:31.2.0-2.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1577.json"},{"CVE":"CVE-2014-1578","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1647","RHSA-2014:1635"],"bugzilla":"1152361","bugzilla_description":"CVE-2014-1578 Mozilla: Out-of-bounds write with WebM video (MFSA 2014-77)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["firefox-0:31.2.0-3.el7_0","thunderbird-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11","thunderbird-0:31.2.0-2.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1578.json"},{"CVE":"CVE-2014-1580","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152362","bugzilla_description":"CVE-2014-1580 Mozilla: Further uninitialized memory use during GIF rendering (MFSA 2014-78)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1580.json"},{"CVE":"CVE-2014-1581","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1647","RHSA-2014:1635"],"bugzilla":"1152363","bugzilla_description":"CVE-2014-1581 Mozilla: Use-after-free interacting with text directionality (MFSA 2014-79)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:31.2.0-3.el7_0","thunderbird-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11","thunderbird-0:31.2.0-2.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1581.json"},{"CVE":"CVE-2014-1582","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152364","bugzilla_description":"CVE-2014-1582 CVE-2014-1584 Mozilla: Key pinning bypasses (MFSA 2014-80)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1582.json"},{"CVE":"CVE-2014-1584","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152364","bugzilla_description":"CVE-2014-1582 CVE-2014-1584 Mozilla: Key pinning bypasses (MFSA 2014-80)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1584.json"},{"CVE":"CVE-2014-1585","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152366","bugzilla_description":"CVE-2014-1585 CVE-2014-1586 Mozilla: Inconsistent video sharing within iframe (MFSA 2014-81)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1585.json"},{"CVE":"CVE-2014-1586","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152366","bugzilla_description":"CVE-2014-1585 CVE-2014-1586 Mozilla: Inconsistent video sharing within iframe (MFSA 2014-81)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1586.json"},{"CVE":"CVE-2014-1583","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1635"],"bugzilla":"1152683","bugzilla_description":"CVE-2014-1583 Mozilla: Accessing cross-origin objects via the Alarms API (MFSA 2014-82)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:31.2.0-3.el7_0","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1583.json"},{"CVE":"CVE-2014-9766","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1311882","bugzilla_description":"CVE-2014-9766 pixman: integer overflow in create_bits function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9766.json"},{"CVE":"CVE-2014-1562","severity":"critical","public_date":"2014-09-03T00:00:00Z","advisories":["RHSA-2014:1145","RHSA-2014:1144"],"bugzilla":"1135862","bugzilla_description":"CVE-2014-1562 Mozilla: Miscellaneous memory safety hazards (rv:rv:24.8) (MFSA 2014-67)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.8.0-1.el6_5","firefox-0:24.8.0-1.el7_0","thunderbird-0:24.8.0-1.el6_5","thunderbird-0:24.8.0-1.el5_10","firefox-0:24.8.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1562.json"},{"CVE":"CVE-2014-1553","severity":"critical","public_date":"2014-09-03T00:00:00Z","advisories":[],"bugzilla":"1135863","bugzilla_description":"CVE-2014-1553 CVE-2014-1554 Mozilla: Miscellaneous memory safety hazards (rv:32.0 / rv:31.1) (MFSA 2014-67)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1553.json"},{"CVE":"CVE-2014-1554","severity":"critical","public_date":"2014-09-03T00:00:00Z","advisories":[],"bugzilla":"1135863","bugzilla_description":"CVE-2014-1553 CVE-2014-1554 Mozilla: Miscellaneous memory safety hazards (rv:32.0 / rv:31.1) (MFSA 2014-67)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1554.json"},{"CVE":"CVE-2014-1563","severity":"critical","public_date":"2014-09-03T00:00:00Z","advisories":[],"bugzilla":"1135864","bugzilla_description":"CVE-2014-1563 Mozilla: Use-after-free during DOM interactions with SVG (MFSA 2014-68)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1563.json"},{"CVE":"CVE-2014-1564","severity":"moderate","public_date":"2014-09-03T00:00:00Z","advisories":[],"bugzilla":"1135865","bugzilla_description":"CVE-2014-1564 Mozilla: Uninitialized memory use during GIF rendering (MFSA 2014-69)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1564.json"},{"CVE":"CVE-2014-1565","severity":"moderate","public_date":"2014-09-03T00:00:00Z","advisories":[],"bugzilla":"1135868","bugzilla_description":"CVE-2014-1565 Mozilla: Out-of-bounds read in Web Audio audio timeline (MFSA 2014-70)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1565.json"},{"CVE":"CVE-2014-1567","severity":"critical","public_date":"2014-09-03T00:00:00Z","advisories":["RHSA-2014:1145","RHSA-2014:1144"],"bugzilla":"1135869","bugzilla_description":"CVE-2014-1567 Mozilla: Use-after-free setting text directionality (MFSA 2014-72)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.8.0-1.el6_5","firefox-0:24.8.0-1.el7_0","thunderbird-0:24.8.0-1.el6_5","thunderbird-0:24.8.0-1.el5_10","firefox-0:24.8.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1567.json"},{"CVE":"CVE-2014-1547","severity":"critical","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:0919","RHSA-2014:0918"],"bugzilla":"1121464","bugzilla_description":"CVE-2014-1547 Mozilla: Miscellaneous memory safety hazards (rv:24.7) (MFSA 2014-56)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.7.0-1.el5_10","thunderbird-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1547.json"},{"CVE":"CVE-2014-1548","severity":"critical","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121469","bugzilla_description":"CVE-2014-1548 Mozilla: Miscellaneous memory safety hazards (rv:31.0) (MFSA 2014-56)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1548.json"},{"CVE":"CVE-2014-1549","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121470","bugzilla_description":"CVE-2014-1549 Mozilla: Buffer overflow during Web Audio buffering for playback (MFSA 2014-57)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1549.json"},{"CVE":"CVE-2014-1550","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121472","bugzilla_description":"CVE-2014-1550 Mozilla: Use-after-free in Web Audio due to incorrect control message ordering (MFSA 2014-58)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1550.json"},{"CVE":"CVE-2014-1561","severity":"low","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121473","bugzilla_description":"CVE-2014-1561 Mozilla: Toolbar dialog customization event spoofing (MFSA 2014-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1561.json"},{"CVE":"CVE-2014-1555","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:0919","RHSA-2014:0918"],"bugzilla":"1121476","bugzilla_description":"CVE-2014-1555 Mozilla: Use-after-free with FireOnStateChange event (MFSA 2014-61)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:24.7.0-1.el5_10","thunderbird-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1555.json"},{"CVE":"CVE-2014-1556","severity":"critical","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:0919","RHSA-2014:0918"],"bugzilla":"1121478","bugzilla_description":"CVE-2014-1556 Mozilla: Exploitable WebGL crash with Cesium JavaScript library (MFSA 2014-62)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.7.0-1.el5_10","thunderbird-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1556.json"},{"CVE":"CVE-2014-1557","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:0919","RHSA-2014:0918"],"bugzilla":"1121479","bugzilla_description":"CVE-2014-1557 Mozilla: Crash in Skia library when scaling high quality images (MFSA 2014-64)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-672","affected_packages":["thunderbird-0:24.7.0-1.el5_10","thunderbird-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1557.json"},{"CVE":"CVE-2014-1558","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121480","bugzilla_description":"CVE-2014-1558 CVE-2014-1559 CVE-2014-1560 Mozilla: Certificate parsing broken by non-standard character encoding (MFSA 2014-65)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1558.json"},{"CVE":"CVE-2014-1559","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121480","bugzilla_description":"CVE-2014-1558 CVE-2014-1559 CVE-2014-1560 Mozilla: Certificate parsing broken by non-standard character encoding (MFSA 2014-65)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1559.json"},{"CVE":"CVE-2014-1560","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121480","bugzilla_description":"CVE-2014-1558 CVE-2014-1559 CVE-2014-1560 Mozilla: Certificate parsing broken by non-standard character encoding (MFSA 2014-65)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1560.json"},{"CVE":"CVE-2014-1552","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121481","bugzilla_description":"CVE-2014-1552 Mozilla: IFRAME sandbox same-origin access through redirect (MFSA 2014-66)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1552.json"},{"CVE":"CVE-2014-1533","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":["RHSA-2014:0741","RHSA-2014:0742"],"bugzilla":"1107399","bugzilla_description":"CVE-2014-1533 Mozilla: Miscellaneous memory safety hazards (rv:24.6) (MFSA 2014-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.6.0-1.el5_10","thunderbird-0:24.6.0-1.el6_5","thunderbird-0:24.6.0-1.el5_10","firefox-0:24.6.0-1.el7_0","firefox-0:24.6.0-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1533.json"},{"CVE":"CVE-2014-1534","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107403","bugzilla_description":"CVE-2014-1534 Mozilla: Miscellaneous memory safety hazards (rv:30.0) (MFSA 2014-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1534.json"},{"CVE":"CVE-2014-1536","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107419","bugzilla_description":"CVE-2014-1536 CVE-2014-1537 Mozilla: Use-after-free and out of bounds issues found using Address Sanitizer (MFSA 2014-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1536.json"},{"CVE":"CVE-2014-1537","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107419","bugzilla_description":"CVE-2014-1536 CVE-2014-1537 Mozilla: Use-after-free and out of bounds issues found using Address Sanitizer (MFSA 2014-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1537.json"},{"CVE":"CVE-2014-1538","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":["RHSA-2014:0741","RHSA-2014:0742"],"bugzilla":"1107421","bugzilla_description":"CVE-2014-1538 Mozilla: Use-after-free and out of bounds issues found using Address Sanitizer (MFSA 2014-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:24.6.0-1.el5_10","thunderbird-0:24.6.0-1.el6_5","thunderbird-0:24.6.0-1.el5_10","firefox-0:24.6.0-1.el7_0","firefox-0:24.6.0-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1538.json"},{"CVE":"CVE-2014-1540","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107423","bugzilla_description":"CVE-2014-1540 Mozilla: Use-after-free in Event Listener Manager (MFSA 2014-51)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1540.json"},{"CVE":"CVE-2014-1541","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":["RHSA-2014:0741","RHSA-2014:0742"],"bugzilla":"1107424","bugzilla_description":"CVE-2014-1541 Mozilla: Use-after-free with SMIL Animation Controller (MFSA 2014-52)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.6.0-1.el5_10","thunderbird-0:24.6.0-1.el6_5","thunderbird-0:24.6.0-1.el5_10","firefox-0:24.6.0-1.el7_0","firefox-0:24.6.0-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1541.json"},{"CVE":"CVE-2014-1542","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107425","bugzilla_description":"CVE-2014-1542 Mozilla: Buffer overflow in Web Audio Speex resampler (MFSA 2014-53)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1542.json"},{"CVE":"CVE-2014-1543","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1108682","bugzilla_description":"CVE-2014-1543 firefox: Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API (MFSA 2014-54)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1543.json"},{"CVE":"CVE-2014-1518","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092657","bugzilla_description":"CVE-2014-1518 Mozilla: Miscellaneous memory safety hazards (rv:24.5) (MFSA 2014-34)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1518.json"},{"CVE":"CVE-2014-1523","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092660","bugzilla_description":"CVE-2014-1523 Mozilla: Out of bounds read while decoding JPG images (MFSA-2014-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1523.json"},{"CVE":"CVE-2014-1524","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092663","bugzilla_description":"CVE-2014-1524 Mozilla: Buffer overflow when using non-XBL object as XBL (MFSA 2014-38)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1524.json"},{"CVE":"CVE-2014-1529","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092664","bugzilla_description":"CVE-2014-1529 Mozilla: Privilege escalation through Web Notification API (MFSA 2014-42)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1529.json"},{"CVE":"CVE-2014-1530","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092666","bugzilla_description":"CVE-2014-1530 Mozilla: Cross-site scripting (XSS) using history navigations (MFSA 2014-43)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1530.json"},{"CVE":"CVE-2014-1531","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092668","bugzilla_description":"CVE-2014-1531 Mozilla: Use-after-free in imgLoader while resizing images (MFSA 2014-44)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1531.json"},{"CVE":"CVE-2014-1532","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092670","bugzilla_description":"CVE-2014-1532 Mozilla: Use-after-free in nsHostResolver (MFSA 2014-46)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1532.json"},{"CVE":"CVE-2014-1522","severity":"important","public_date":"2014-04-29T00:00:00Z","advisories":[],"bugzilla":"1095066","bugzilla_description":"CVE-2014-1522 Mozilla: Web Audio memory corruption issues (MFSA 2014-36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1522.json"},{"CVE":"CVE-2014-1525","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":[],"bugzilla":"1095070","bugzilla_description":"CVE-2014-1525 Mozilla: Use-after-free in the Text Track Manager for HTML video (MFSA 2014-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1525.json"},{"CVE":"CVE-2014-1526","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":[],"bugzilla":"1095074","bugzilla_description":"CVE-2014-1526 Mozilla: Debugger can bypass XrayWrappers with JavaScript (MFSA 2014-47)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1526.json"},{"CVE":"CVE-2014-1528","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":[],"bugzilla":"1096585","bugzilla_description":"CVE-2014-1528 Mozilla: Out-of-bounds write in Cairo (MFSA 2014-41)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1528.json"},{"CVE":"CVE-2014-1493","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077013","bugzilla_description":"CVE-2014-1493 Mozilla: Miscellaneous memory safety hazards (rv:24.4) (MFSA 2014-15)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1493.json"},{"CVE":"CVE-2014-1494","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077014","bugzilla_description":"CVE-2014-1494 Mozilla: Miscellaneous memory safety hazards (rv:28.0) (MFSA 2014-15)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1494.json"},{"CVE":"CVE-2014-1496","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077015","bugzilla_description":"CVE-2014-1496 Mozilla: Files extracted during updates are not always read only (MFSA 2014-16)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1496.json"},{"CVE":"CVE-2014-1497","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077016","bugzilla_description":"CVE-2014-1497 Mozilla: Out of bounds read during WAV file decoding (MFSA 2014-17)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1497.json"},{"CVE":"CVE-2014-1498","severity":"low","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077018","bugzilla_description":"CVE-2014-1498 Mozilla: crypto.generateCRMFRequest does not validate type of key (MFSA 2014-18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1498.json"},{"CVE":"CVE-2014-1499","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077019","bugzilla_description":"CVE-2014-1499 Mozilla: Spoofing attack on WebRTC permission prompt (MFSA 2014-19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1499.json"},{"CVE":"CVE-2014-1500","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077020","bugzilla_description":"CVE-2014-1500 Mozilla: onbeforeunload and Javascript navigation DOS (MFSA 2014-20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1500.json"},{"CVE":"CVE-2014-1502","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077021","bugzilla_description":"CVE-2014-1502 Mozilla: WebGL content injection from one domain to rendering in another (MFSA 2014-22)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1502.json"},{"CVE":"CVE-2014-1504","severity":"low","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077022","bugzilla_description":"CVE-2014-1504 Mozilla: Content Security Policy for data: documents not preserved by session restore (MFSA 2014-23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1504.json"},{"CVE":"CVE-2014-1508","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077025","bugzilla_description":"CVE-2014-1508 Mozilla: Information disclosure through polygon rendering in MathML (MFSA 2014-26)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1508.json"},{"CVE":"CVE-2014-1509","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077028","bugzilla_description":"CVE-2014-1509 Mozilla: Memory corruption in Cairo during PDF font rendering (MFSA 2014-27)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1509.json"},{"CVE":"CVE-2014-1505","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077029","bugzilla_description":"CVE-2014-1505 Mozilla: SVG filters information disclosure through feDisplacementMap (MFSA 2014-28)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1505.json"},{"CVE":"CVE-2014-1510","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077490","bugzilla_description":"CVE-2014-1510 CVE-2014-1511 Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1510.json"},{"CVE":"CVE-2014-1511","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077490","bugzilla_description":"CVE-2014-1510 CVE-2014-1511 Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1511.json"},{"CVE":"CVE-2014-1512","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077491","bugzilla_description":"CVE-2014-1512 Mozilla: Use-after-free in TypeObject (MFSA 2014-30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1512.json"},{"CVE":"CVE-2014-1513","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077492","bugzilla_description":"CVE-2014-1513 Mozilla: Out-of-bounds read/write through neutering ArrayBuffer objects (MFSA 2014-31)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1513.json"},{"CVE":"CVE-2014-1514","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077494","bugzilla_description":"CVE-2014-1514 Mozilla: Out-of-bounds write through TypedArrayObject after neutering (MFSA 2014-32)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1514.json"},{"CVE":"CVE-2013-6674","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":["RHSA-2013:1823"],"bugzilla":"1063120","bugzilla_description":"CVE-2013-6674 CVE-2014-2018 Mozilla: Script execution in HTML mail replies (MFSA 2014-14)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6674.json"},{"CVE":"CVE-2014-2018","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1063120","bugzilla_description":"CVE-2013-6674 CVE-2014-2018 Mozilla: Script execution in HTML mail replies (MFSA 2014-14)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2018.json"},{"CVE":"CVE-2014-1477","severity":"critical","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060938","bugzilla_description":"CVE-2014-1477 Mozilla: Miscellaneous memory safety hazards (rv:24.3) (MFSA 2014-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1477.json"},{"CVE":"CVE-2014-1478","severity":"critical","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060939","bugzilla_description":"CVE-2014-1478 Mozilla: Miscellaneous memory safety hazards (rv:27.0) (MFSA 2014-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1478.json"},{"CVE":"CVE-2014-1479","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060940","bugzilla_description":"CVE-2014-1479 Mozilla: Clone protected content with XBL scopes (MFSA 2014-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1479.json"},{"CVE":"CVE-2014-1480","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060941","bugzilla_description":"CVE-2014-1480 Mozilla: UI selection timeout missing on download prompts (MFSA 2014-03)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1480.json"},{"CVE":"CVE-2014-1482","severity":"critical","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060942","bugzilla_description":"CVE-2014-1482 Mozilla: Incorrect use of discarded images by RasterImage (MFSA 2014-04)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1482.json"},{"CVE":"CVE-2014-1483","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060943","bugzilla_description":"CVE-2014-1483 Mozilla: Information disclosure with *FromPoint on iframes (MFSA 2014-05)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1483.json"},{"CVE":"CVE-2014-1485","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060944","bugzilla_description":"CVE-2014-1485 Mozilla: XSLT stylesheets treated as styles in Content Security Policy (MFSA 2014-07)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1485.json"},{"CVE":"CVE-2014-1486","severity":"critical","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060945","bugzilla_description":"CVE-2014-1486 Mozilla: Use-after-free with imgRequestProxy and image proccessing (MFSA 2014-08)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1486.json"},{"CVE":"CVE-2014-1487","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060947","bugzilla_description":"CVE-2014-1487 Mozilla: Cross-origin information leak through web workers (MFSA 2014-09)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-209","affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1487.json"},{"CVE":"CVE-2014-1489","severity":"low","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060948","bugzilla_description":"CVE-2014-1489 Mozilla: Firefox default start page UI content invokable by script (MFSA 2014-10)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1489.json"},{"CVE":"CVE-2014-1488","severity":"critical","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060949","bugzilla_description":"CVE-2014-1488 Mozilla: Crash when using web workers with asm.js (MFSA 2014-11)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1488.json"},{"CVE":"CVE-2014-1481","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060952","bugzilla_description":"CVE-2014-1481 Mozilla: Inconsistent JavaScript handling of access to Window objects (MFSA 2014-13)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1481.json"},{"CVE":"CVE-2014-8636","severity":"moderate","public_date":"2014-01-15T00:00:00Z","advisories":[],"bugzilla":"1180977","bugzilla_description":"CVE-2014-8636 Mozilla: XrayWrapper bypass through DOM objects (MFSA 2015-09)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8636.json"},{"CVE":"CVE-2013-5609","severity":"important","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039417","bugzilla_description":"CVE-2013-5609 Mozilla: Miscellaneous memory safety hazards (rv:24.2) (MFSA 2013-104)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5609.json"},{"CVE":"CVE-2013-5610","severity":"critical","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039418","bugzilla_description":"CVE-2013-5610 Mozilla: Miscellaneous memory safety hazards (rv:26.0) (MFSA 2013-104)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5610.json"},{"CVE":"CVE-2013-5611","severity":"moderate","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039419","bugzilla_description":"CVE-2013-5611 Mozilla: Application Installation doorhanger persists on navigation (MFSA 2013-105)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5611.json"},{"CVE":"CVE-2013-5612","severity":"moderate","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039420","bugzilla_description":"CVE-2013-5612 Mozilla: Character encoding cross-origin XSS attack (MFSA 2013-106)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5612.json"},{"CVE":"CVE-2013-5614","severity":"low","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039421","bugzilla_description":"CVE-2013-5614 Mozilla: Sandbox restrictions not applied to nested object elements (MFSA 2013-107)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5614.json"},{"CVE":"CVE-2013-5616","severity":"important","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039422","bugzilla_description":"CVE-2013-5616 Mozilla: Use-after-free in event listeners (MFSA 2013-108)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5616.json"},{"CVE":"CVE-2013-5618","severity":"important","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039423","bugzilla_description":"CVE-2013-5618 Mozilla: Use-after-free during Table Editing (MFSA 2013-109)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5618.json"},{"CVE":"CVE-2013-5619","severity":"moderate","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039424","bugzilla_description":"CVE-2013-5619 Mozilla: Potential overflow in JavaScript binary search algorithms (MFSA 2013-110)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5619.json"},{"CVE":"CVE-2013-6671","severity":"important","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039426","bugzilla_description":"CVE-2013-6671 Mozilla: Segmentation violation when replacing ordered list elements (MFSA 2013-111)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6671.json"},{"CVE":"CVE-2013-6672","severity":"low","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039427","bugzilla_description":"CVE-2013-6672 Mozilla: Linux clipboard information disclosure though selection paste (MFSA 2013-112)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6672.json"},{"CVE":"CVE-2013-6673","severity":"moderate","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039428","bugzilla_description":"CVE-2013-6673 Mozilla: Trust settings for built-in roots ignored during EV certificate validation (MFSA 2013-113)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6673.json"},{"CVE":"CVE-2013-5613","severity":"important","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039429","bugzilla_description":"CVE-2013-5613 Mozilla: Use-after-free in synthetic mouse movement (MFSA 2013-114)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5613.json"},{"CVE":"CVE-2013-5615","severity":"moderate","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039430","bugzilla_description":"CVE-2013-5615 Mozilla: GetElementIC typed array stubs can be generated outside observed typesets (MFSA 2013-115)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5615.json"},{"CVE":"CVE-2013-5590","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023835","bugzilla_description":"CVE-2013-5590 Mozilla: Miscellaneous memory safety hazards (rv:17.0.10) (MFSA 2013-93)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5590.json"},{"CVE":"CVE-2013-5593","severity":"moderate","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1023836","bugzilla_description":"CVE-2013-5593 Mozilla: Spoofing addressbar though SELECT element (MFSA 2013-94)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5593.json"},{"CVE":"CVE-2013-5595","severity":"moderate","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023839","bugzilla_description":"CVE-2013-5595 Mozilla: Improperly initialized memory and overflows in some JavaScript functions (MFSA 2013-96)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5595.json"},{"CVE":"CVE-2013-5596","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1023840","bugzilla_description":"CVE-2013-5596 Mozilla: Writing to cycle collected object during image decoding (MFSA 2013-97)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5596.json"},{"CVE":"CVE-2013-5597","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023841","bugzilla_description":"CVE-2013-5597 Mozilla: Use-after-free when updating offline cache (MFSA 2013-98)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5597.json"},{"CVE":"CVE-2013-5598","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1023842","bugzilla_description":"CVE-2013-5598 Mozilla: Security bypass of PDF.js checks using iframes (MFSA 2013-99)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5598.json"},{"CVE":"CVE-2013-5599","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023843","bugzilla_description":"CVE-2013-5599 CVE-2013-5600 CVE-2013-5601 Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5599.json"},{"CVE":"CVE-2013-5600","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023843","bugzilla_description":"CVE-2013-5599 CVE-2013-5600 CVE-2013-5601 Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5600.json"},{"CVE":"CVE-2013-5601","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023843","bugzilla_description":"CVE-2013-5599 CVE-2013-5600 CVE-2013-5601 Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5601.json"},{"CVE":"CVE-2013-5602","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023844","bugzilla_description":"CVE-2013-5602 Mozilla: Memory corruption in workers (MFSA 2013-101)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5602.json"},{"CVE":"CVE-2013-5603","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1023845","bugzilla_description":"CVE-2013-5603 Mozilla: Use-after-free in HTML document templates (MFSA 2013-102)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5603.json"},{"CVE":"CVE-2013-5591","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1023846","bugzilla_description":"CVE-2013-5591 Mozilla: Miscellaneous memory safety hazards (rv:25.0 / rv:124.1) (MFSA 2013-93)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5591.json"},{"CVE":"CVE-2013-5604","severity":"moderate","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023863","bugzilla_description":"CVE-2013-5604 Mozilla: Access violation with XSLT and uninitialized data (MFSA 2013-95)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5604.json"},{"CVE":"CVE-2013-1718","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009031","bugzilla_description":"CVE-2013-1718 Mozilla: Miscellaneous memory safety hazards (rv:17.0.9) (MFSA 2013-76)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1718.json"},{"CVE":"CVE-2013-1722","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009032","bugzilla_description":"CVE-2013-1722 Mozilla: Use-after-free in Animation Manager during stylesheet cloning (MFSA 2013-79)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1722.json"},{"CVE":"CVE-2013-1725","severity":"important","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009033","bugzilla_description":"CVE-2013-1725 Mozilla: Calling scope for new Javascript objects can lead to memory corruption (MFSA 2013-82)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1725.json"},{"CVE":"CVE-2013-1730","severity":"important","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009036","bugzilla_description":"CVE-2013-1730 Mozilla: Compartment mismatch re-attaching XBL-backed nodes (MFSA 2013-88)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1730.json"},{"CVE":"CVE-2013-1732","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009037","bugzilla_description":"CVE-2013-1732 Mozilla: Buffer overflow with multi-column, lists, and floats (MFSA 2013-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1732.json"},{"CVE":"CVE-2013-1735","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009039","bugzilla_description":"CVE-2013-1735 CVE-2013-1736 Mozilla: Memory corruption involving scrolling (MFSA 2013-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1735.json"},{"CVE":"CVE-2013-1736","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009039","bugzilla_description":"CVE-2013-1735 CVE-2013-1736 Mozilla: Memory corruption involving scrolling (MFSA 2013-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1736.json"},{"CVE":"CVE-2013-1737","severity":"moderate","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009041","bugzilla_description":"CVE-2013-1737 Mozilla: User-defined properties on DOM proxies get the wrong \"this\" object (MFSA 2013-91)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1737.json"},{"CVE":"CVE-2013-1719","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009211","bugzilla_description":"CVE-2013-1719 Mozilla: Miscellaneous memory safety hazards (rv:24.0) (MFSA 2013-76)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1719.json"},{"CVE":"CVE-2013-1720","severity":"moderate","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009212","bugzilla_description":"CVE-2013-1720 Mozilla: Improper state in HTML5 Tree Builder with templates (MFSA 2013-77)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1720.json"},{"CVE":"CVE-2013-1721","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009213","bugzilla_description":"CVE-2013-1721 Mozilla: Integer overflow in ANGLE library (MFSA 2013-78)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1721.json"},{"CVE":"CVE-2013-1723","severity":"moderate","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009214","bugzilla_description":"CVE-2013-1723 Mozilla: NativeKey continues handling key messages after widget is destroyed (MFSA 2013-80)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1723.json"},{"CVE":"CVE-2013-1724","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009216","bugzilla_description":"CVE-2013-1724 Mozilla: Use-after-free with select element (MFSA 2013-81)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1724.json"},{"CVE":"CVE-2013-1728","severity":"moderate","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009217","bugzilla_description":"CVE-2013-1728 Mozilla: Uninitialized data in IonMonkey (MFSA 2013-85)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1728.json"},{"CVE":"CVE-2013-1729","severity":"moderate","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009218","bugzilla_description":"CVE-2013-1729 Mozilla: WebGL Information disclosure through OS X NVIDIA graphic drivers (MFSA 2013-86)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1729.json"},{"CVE":"CVE-2013-1738","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009219","bugzilla_description":"CVE-2013-1738 Mozilla: GC hazard with default compartments and frame chain restoration (MFSA 2013-92)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1738.json"},{"CVE":"CVE-2013-1701","severity":"critical","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993598","bugzilla_description":"CVE-2013-1701 Mozilla: Miscellaneous memory safety hazards (rv:17.0.8) (MFSA 2013-63)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1701.json"},{"CVE":"CVE-2013-1709","severity":"moderate","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993600","bugzilla_description":"CVE-2013-1709 Mozilla: Document URI misrepresentation and masquerading (MFSA 2013-68)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1709.json"},{"CVE":"CVE-2013-1710","severity":"critical","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993602","bugzilla_description":"CVE-2013-1710 Mozilla: CRMF requests allow for code execution and XSS attacks (MFSA 2013-69)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-79","affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1710.json"},{"CVE":"CVE-2013-1713","severity":"moderate","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993603","bugzilla_description":"CVE-2013-1713 Mozilla: Wrong principal used for validating URI for some Javascript components (MFSA 2013-72)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1713.json"},{"CVE":"CVE-2013-1714","severity":"moderate","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993604","bugzilla_description":"CVE-2013-1714 Mozilla: Same-origin bypass with web workers and XMLHttpRequest (MFSA 2013-73)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1714.json"},{"CVE":"CVE-2013-1717","severity":"moderate","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993605","bugzilla_description":"CVE-2013-1717 Mozilla: Local Java applets may read contents of local file system (MFSA 2013-75)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1717.json"},{"CVE":"CVE-2013-1702","severity":"critical","public_date":"2013-08-06T00:00:00Z","advisories":[],"bugzilla":"994332","bugzilla_description":"CVE-2013-1702 Mozilla: Miscellaneous memory safety hazards (rv:23.0) (MFSA 2013-63)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1702.json"},{"CVE":"CVE-2013-1704","severity":"critical","public_date":"2013-08-06T00:00:00Z","advisories":[],"bugzilla":"994334","bugzilla_description":"CVE-2013-1704 Mozilla: Use after free mutating DOM during SetBody (MFSA 2013-64)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1704.json"},{"CVE":"CVE-2013-1705","severity":"critical","public_date":"2013-08-06T00:00:00Z","advisories":[],"bugzilla":"994335","bugzilla_description":"CVE-2013-1705 Mozilla: Buffer underflow when generating CRMF requests (MFSA 2013-65)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1705.json"},{"CVE":"CVE-2013-1708","severity":"low","public_date":"2013-08-06T00:00:00Z","advisories":[],"bugzilla":"994337","bugzilla_description":"CVE-2013-1708 Mozilla: Crash during WAV audio file decoding (MFSA 2013-67)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1708.json"},{"CVE":"CVE-2013-1711","severity":"moderate","public_date":"2013-08-06T00:00:00Z","advisories":[],"bugzilla":"994339","bugzilla_description":"CVE-2013-1711 Mozilla: Bypass of XrayWrappers using XBL Scopes (MFSA 2013-70)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1711.json"},{"CVE":"CVE-2013-1682","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977597","bugzilla_description":"CVE-2013-1682 Mozilla: Miscellaneous memory safety hazards (rv:17.0.7) (MFSA 2013-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1682.json"},{"CVE":"CVE-2013-1683","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977598","bugzilla_description":"CVE-2013-1683 Mozilla: Miscellaneous memory safety hazards (rv:22.0) (MFSA 2013-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1683.json"},{"CVE":"CVE-2013-1684","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977599","bugzilla_description":"CVE-2013-1684 CVE-2013-1685 CVE-2013-1686 Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1684.json"},{"CVE":"CVE-2013-1685","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977599","bugzilla_description":"CVE-2013-1684 CVE-2013-1685 CVE-2013-1686 Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1685.json"},{"CVE":"CVE-2013-1686","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977599","bugzilla_description":"CVE-2013-1684 CVE-2013-1685 CVE-2013-1686 Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1686.json"},{"CVE":"CVE-2013-1687","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977600","bugzilla_description":"CVE-2013-1687 Mozilla: Privileged content access and execution via XBL (MFSA 2013-51)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1687.json"},{"CVE":"CVE-2013-1688","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977601","bugzilla_description":"CVE-2013-1688 Mozilla: Arbitrary code execution within Profiler (MFSA 2013-52)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1688.json"},{"CVE":"CVE-2013-1690","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977602","bugzilla_description":"CVE-2013-1690 Mozilla: Execution of unmapped memory through onreadystatechange event (MFSA 2013-53)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1690.json"},{"CVE":"CVE-2013-1692","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977603","bugzilla_description":"CVE-2013-1692 Mozilla: Data in the body of XHR HEAD requests leads to CSRF attacks (MFSA 2013-54)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-352","affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1692.json"},{"CVE":"CVE-2013-1693","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977605","bugzilla_description":"CVE-2013-1693 Mozilla: SVG filters can lead to information disclosure (MFSA 2013-55)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1693.json"},{"CVE":"CVE-2013-1694","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977610","bugzilla_description":"CVE-2013-1694 Mozilla: PreserveWrapper has inconsistent behavior (MFSA 2013-56)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1694.json"},{"CVE":"CVE-2013-1695","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977611","bugzilla_description":"CVE-2013-1695 Mozilla: Sandbox restrictions not applied to nested frame elements (MFSA 2013-57)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1695.json"},{"CVE":"CVE-2013-1696","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977613","bugzilla_description":"CVE-2013-1696 Mozilla: X-Frame-Options ignored when using server push with multi-part responses (MFSA 2013-58)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1696.json"},{"CVE":"CVE-2013-1697","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977614","bugzilla_description":"CVE-2013-1697 Mozilla: XrayWrappers can be bypassed to run user defined methods in a privileged context (MFSA 2013-59)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1697.json"},{"CVE":"CVE-2013-1698","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977615","bugzilla_description":"CVE-2013-1698 Mozilla: getUserMedia permission dialog incorrectly displays location (MFSA 2013-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1698.json"},{"CVE":"CVE-2013-1699","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977621","bugzilla_description":"CVE-2013-1699 Mozilla: Homograph domain spoofing in .com, .net and .name (MFSA 2013-61)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1699.json"},{"CVE":"CVE-2013-0801","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962591","bugzilla_description":"CVE-2013-0801 Mozilla: Miscellaneous memory safety hazards (rv:17.0.6) (MFSA 2013-41)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0801.json"},{"CVE":"CVE-2013-1669","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":[],"bugzilla":"962594","bugzilla_description":"CVE-2013-1669 Mozilla: Miscellaneous memory safety hazards (rv:21.0) (MFSA 2013-41)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1669.json"},{"CVE":"CVE-2013-1670","severity":"moderate","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962596","bugzilla_description":"CVE-2013-1670 Mozilla: Privileged access for content level constructor (MFSA 2013-42)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1670.json"},{"CVE":"CVE-2013-1671","severity":"moderate","public_date":"2013-05-14T00:00:00Z","advisories":[],"bugzilla":"962597","bugzilla_description":"CVE-2013-1671 Mozilla: File input control has access to full path (MFSA 2013-43)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1671.json"},{"CVE":"CVE-2013-1674","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962598","bugzilla_description":"CVE-2013-1674 Mozilla: Use-after-free with video and onresize event (MFSA 2013-46)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1674.json"},{"CVE":"CVE-2013-1675","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962601","bugzilla_description":"CVE-2013-1675 Mozilla: Uninitialized functions in DOMSVGZoomEvent (MFSA 2013-47)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1675.json"},{"CVE":"CVE-2013-1676","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1676.json"},{"CVE":"CVE-2013-1677","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1677.json"},{"CVE":"CVE-2013-1678","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1678.json"},{"CVE":"CVE-2013-1679","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1679.json"},{"CVE":"CVE-2013-1680","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1680.json"},{"CVE":"CVE-2013-1681","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1681.json"},{"CVE":"CVE-2013-6167","severity":"moderate","public_date":"2013-04-03T00:00:00Z","advisories":[],"bugzilla":"1066219","bugzilla_description":"CVE-2013-6167 Mozilla: browser document.cookie DoS vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6167.json"},{"CVE":"CVE-2013-0788","severity":"critical","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0697","RHSA-2013:0696"],"bugzilla":"946927","bugzilla_description":"CVE-2013-0788 Mozilla: Miscellaneous memory safety hazards (rv:17.0.5) (MFSA 2013-30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.5-1.el5_9","firefox-0:17.0.5-1.el6_4","thunderbird-0:17.0.5-1.el6_4","firefox-0:17.0.5-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0788.json"},{"CVE":"CVE-2013-0789","severity":"critical","public_date":"2013-04-02T00:00:00Z","advisories":[],"bugzilla":"946928","bugzilla_description":"CVE-2013-0789 Mozilla: Miscellaneous memory safety hazards (rv:20.0) (MFSA 2013-30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0789.json"},{"CVE":"CVE-2013-0800","severity":"important","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0697","RHSA-2013:0696"],"bugzilla":"946929","bugzilla_description":"CVE-2013-0800 Mozilla: Out-of-bounds write in Cairo library (MFSA 2013-31)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["thunderbird-0:17.0.5-1.el5_9","firefox-0:17.0.5-1.el6_4","thunderbird-0:17.0.5-1.el6_4","firefox-0:17.0.5-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0800.json"},{"CVE":"CVE-2013-0796","severity":"critical","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0697","RHSA-2013:0696"],"bugzilla":"946931","bugzilla_description":"CVE-2013-0796 Mozilla: WebGL crash with Mesa graphics driver on Linux (MFSA 2013-35)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.5-1.el5_9","firefox-0:17.0.5-1.el6_4","thunderbird-0:17.0.5-1.el6_4","firefox-0:17.0.5-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0796.json"},{"CVE":"CVE-2013-0795","severity":"critical","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0697","RHSA-2013:0696"],"bugzilla":"946932","bugzilla_description":"CVE-2013-0795 Mozilla: Bypass of SOW protections allows cloning of protected nodes (MFSA 2013-36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.5-1.el5_9","firefox-0:17.0.5-1.el6_4","thunderbird-0:17.0.5-1.el6_4","firefox-0:17.0.5-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0795.json"},{"CVE":"CVE-2013-0793","severity":"moderate","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0697","RHSA-2013:0696"],"bugzilla":"946935","bugzilla_description":"CVE-2013-0793 Mozilla: Cross-site scripting (XSS) using timed history navigations (MFSA 2013-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["thunderbird-0:17.0.5-1.el5_9","firefox-0:17.0.5-1.el6_4","thunderbird-0:17.0.5-1.el6_4","firefox-0:17.0.5-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0793.json"},{"CVE":"CVE-2013-0792","severity":"moderate","public_date":"2013-04-02T00:00:00Z","advisories":[],"bugzilla":"946936","bugzilla_description":"CVE-2013-0792 Mozilla: Memory corruption while rendering grayscale PNG images (MFSA 2013-39)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0792.json"},{"CVE":"CVE-2013-0783","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0272","RHSA-2013:0271"],"bugzilla":"911836","bugzilla_description":"CVE-2013-0783 Mozilla: Miscellaneous memory safety hazards (rv:17.0.3) (MFSA 2013-21)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.3-1.el5_9","thunderbird-0:17.0.3-1.el6_3","thunderbird-0:17.0.3-1.el5_9","firefox-0:17.0.3-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0783.json"},{"CVE":"CVE-2013-0784","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911837","bugzilla_description":"CVE-2013-0784 Mozilla: Miscellaneous memory safety hazards (rv:19.0) (MFSA 2013-21)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0784.json"},{"CVE":"CVE-2013-0765","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911838","bugzilla_description":"CVE-2013-0765 Mozilla: Wrapped WebIDL objects can be wrapped again (MFSA 2013-23)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0765.json"},{"CVE":"CVE-2013-0773","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911839","bugzilla_description":"CVE-2013-0773 Mozilla: Web content bypass of COW and SOW security wrappers (MFSA 2013-24)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0773.json"},{"CVE":"CVE-2013-0772","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"911840","bugzilla_description":"CVE-2013-0772 Mozilla: Out-of-bounds read in image rendering (MFSA 2013-22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0772.json"},{"CVE":"CVE-2013-0774","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911842","bugzilla_description":"CVE-2013-0774 Mozilla: Privacy leak in JavaScript Workers (MFSA 2013-25)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0774.json"},{"CVE":"CVE-2013-0775","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0272","RHSA-2013:0271"],"bugzilla":"911843","bugzilla_description":"CVE-2013-0775 Mozilla: Use-after-free in nsImageLoadingContent (MFSA 2013-26)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.3-1.el5_9","thunderbird-0:17.0.3-1.el6_3","thunderbird-0:17.0.3-1.el5_9","firefox-0:17.0.3-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0775.json"},{"CVE":"CVE-2013-0776","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0272","RHSA-2013:0271"],"bugzilla":"911844","bugzilla_description":"CVE-2013-0776 Mozilla: Phishing on HTTPS connection through malicious proxy (MFSA 2013-27)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:17.0.3-1.el5_9","thunderbird-0:17.0.3-1.el6_3","thunderbird-0:17.0.3-1.el5_9","firefox-0:17.0.3-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0776.json"},{"CVE":"CVE-2013-0780","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0272","RHSA-2013:0271"],"bugzilla":"911865","bugzilla_description":"CVE-2013-0780 CVE-2013-0782 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:17.0.3-1.el5_9","thunderbird-0:17.0.3-1.el6_3","thunderbird-0:17.0.3-1.el5_9","firefox-0:17.0.3-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0780.json"},{"CVE":"CVE-2013-0782","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0272","RHSA-2013:0271"],"bugzilla":"911865","bugzilla_description":"CVE-2013-0780 CVE-2013-0782 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:17.0.3-1.el5_9","thunderbird-0:17.0.3-1.el6_3","thunderbird-0:17.0.3-1.el5_9","firefox-0:17.0.3-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0782.json"},{"CVE":"CVE-2013-0777","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911868","bugzilla_description":"CVE-2013-0777 CVE-2013-0778 CVE-2013-0779 CVE-2013-0781 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-125|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0777.json"},{"CVE":"CVE-2013-0778","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911868","bugzilla_description":"CVE-2013-0777 CVE-2013-0778 CVE-2013-0779 CVE-2013-0781 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-125|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0778.json"},{"CVE":"CVE-2013-0779","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911868","bugzilla_description":"CVE-2013-0777 CVE-2013-0778 CVE-2013-0779 CVE-2013-0781 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-125|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0779.json"},{"CVE":"CVE-2013-0781","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911868","bugzilla_description":"CVE-2013-0777 CVE-2013-0778 CVE-2013-0779 CVE-2013-0781 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-125|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0781.json"},{"CVE":"CVE-2013-0769","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891811","bugzilla_description":"CVE-2013-0769 Mozilla: Miscellaneous memory safety hazards (rv:10.0.12) (MFSA 2013-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0769.json"},{"CVE":"CVE-2013-0749","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891813","bugzilla_description":"CVE-2013-0749 CVE-2013-0770 Mozilla: Miscellaneous memory safety hazards (rv:18.0/rv:17.0.1) (MFSA 2013-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0749.json"},{"CVE":"CVE-2013-0770","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891813","bugzilla_description":"CVE-2013-0749 CVE-2013-0770 Mozilla: Miscellaneous memory safety hazards (rv:18.0/rv:17.0.1) (MFSA 2013-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0770.json"},{"CVE":"CVE-2013-0762","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891821","bugzilla_description":"CVE-2013-0762 CVE-2013-0766 CVE-2013-0767 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0762.json"},{"CVE":"CVE-2013-0766","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891821","bugzilla_description":"CVE-2013-0762 CVE-2013-0766 CVE-2013-0767 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0766.json"},{"CVE":"CVE-2013-0767","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891821","bugzilla_description":"CVE-2013-0762 CVE-2013-0766 CVE-2013-0767 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0767.json"},{"CVE":"CVE-2013-0760","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891822","bugzilla_description":"CVE-2013-0760 CVE-2013-0761 CVE-2013-0763 CVE-2013-0771 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0760.json"},{"CVE":"CVE-2013-0761","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891822","bugzilla_description":"CVE-2013-0760 CVE-2013-0761 CVE-2013-0763 CVE-2013-0771 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0761.json"},{"CVE":"CVE-2013-0763","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891822","bugzilla_description":"CVE-2013-0760 CVE-2013-0761 CVE-2013-0763 CVE-2013-0771 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0763.json"},{"CVE":"CVE-2013-0771","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891822","bugzilla_description":"CVE-2013-0760 CVE-2013-0761 CVE-2013-0763 CVE-2013-0771 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0771.json"},{"CVE":"CVE-2013-0768","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891823","bugzilla_description":"CVE-2013-0768 Mozilla: Buffer Overflow in Canvas (MFSA 2013-03)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0768.json"},{"CVE":"CVE-2013-0759","severity":"moderate","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891824","bugzilla_description":"CVE-2013-0759 Mozilla: URL spoofing in addressbar during page loads (MFSA 2013-04)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0759.json"},{"CVE":"CVE-2013-0744","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891825","bugzilla_description":"CVE-2013-0744 Mozilla: Use-after-free when displaying table with many columns and column groups (MFSA 2013-05)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0744.json"},{"CVE":"CVE-2013-0764","severity":"important","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892140","bugzilla_description":"CVE-2013-0764 Mozilla: Crash due to handling of SSL on threads (MFSA 2013-07)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0764.json"},{"CVE":"CVE-2013-0745","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892141","bugzilla_description":"CVE-2013-0745 Mozilla: AutoWrapperChanger fails to keep objects alive during garbage collection (MFSA 2013-08)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0745.json"},{"CVE":"CVE-2013-0746","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892142","bugzilla_description":"CVE-2013-0746 Mozilla: Compartment mismatch with quickstubs returned values (MFSA 2013-09)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0746.json"},{"CVE":"CVE-2013-0747","severity":"moderate","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892143","bugzilla_description":"CVE-2013-0747 Mozilla: Event manipulation in plugin handler to bypass same-origin policy (MFSA 2013-10)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0747.json"},{"CVE":"CVE-2013-0748","severity":"moderate","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892144","bugzilla_description":"CVE-2013-0748 Mozilla: Address space layout leaked in XBL objects (MFSA 2013-11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0748.json"},{"CVE":"CVE-2013-0750","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892145","bugzilla_description":"CVE-2013-0750 Mozilla: Buffer overflow in Javascript string concatenation (MFSA 2013-12)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0750.json"},{"CVE":"CVE-2013-0752","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892146","bugzilla_description":"CVE-2013-0752 Mozilla: Memory corruption in XBL with XML bindings containing SVG (MFSA 2013-13)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0752.json"},{"CVE":"CVE-2013-0757","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892147","bugzilla_description":"CVE-2013-0757 Mozilla: Chrome Object Wrapper (COW) bypass through changing prototype (MFSA 2013-14)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0757.json"},{"CVE":"CVE-2013-0758","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892148","bugzilla_description":"CVE-2013-0758 Mozilla: Chrome Object Wrapper (COW) bypass through plugin objects (MFSA 2013-15)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0758.json"},{"CVE":"CVE-2013-0753","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892149","bugzilla_description":"CVE-2013-0753 Mozilla: Use-after-free in serializeToStream (MFSA 2013-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0753.json"},{"CVE":"CVE-2013-0754","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892150","bugzilla_description":"CVE-2013-0754 Mozilla: Use-after-free in ListenerManager (MFSA 2013-17)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0754.json"},{"CVE":"CVE-2013-0755","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892854","bugzilla_description":"CVE-2013-0755 Mozilla: Use-after-free in Vibrate (MFSA 2013-18)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0755.json"},{"CVE":"CVE-2013-0756","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892858","bugzilla_description":"CVE-2013-0756 Mozilla: garbage collection flaw in Javascript Proxy objects (MFSA 2013-19)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0756.json"},{"CVE":"CVE-2012-6051","severity":"moderate","public_date":"2012-11-23T00:00:00Z","advisories":[],"bugzilla":"882910","bugzilla_description":"CVE-2012-6051 firefox, thunderbird, xulrunner: Google CityHash hash function collisions (oCERT-2012-001)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6051.json"},{"CVE":"CVE-2012-5843","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877613","bugzilla_description":"CVE-2012-5843 Mozilla: Miscellaneous memory safety hazards (rv:17.0) (MFSA 2012-91)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5843.json"},{"CVE":"CVE-2012-5842","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877614","bugzilla_description":"CVE-2012-5842 Mozilla: Miscellaneous memory safety hazards (rv:10.0.11) (MFSA 2012-91)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5842.json"},{"CVE":"CVE-2012-4202","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877615","bugzilla_description":"CVE-2012-4202 Mozilla: Buffer overflow while rendering GIF images (MFSA 2012-92)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4202.json"},{"CVE":"CVE-2012-4201","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877616","bugzilla_description":"CVE-2012-4201 Mozilla: evalInSanbox location context incorrectly applied (MFSA 2012-93)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4201.json"},{"CVE":"CVE-2012-5836","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877617","bugzilla_description":"CVE-2012-5836 Mozilla: Crash when combining SVG text on path with CSS (MFSA 2012-94)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5836.json"},{"CVE":"CVE-2012-4203","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877618","bugzilla_description":"CVE-2012-4203 Mozilla: Javascript: URLs run in privileged context on New Tab page (MFSA 2012-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4203.json"},{"CVE":"CVE-2012-4204","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877624","bugzilla_description":"CVE-2012-4204 Mozilla: Memory corruption in str_unescape (MFSA 2012-96)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4204.json"},{"CVE":"CVE-2012-4205","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877625","bugzilla_description":"CVE-2012-4205 Mozilla: XMLHttpRequest inherits incorrect principal within sandbox (MFSA 2012-97)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4205.json"},{"CVE":"CVE-2012-4208","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877627","bugzilla_description":"CVE-2012-4208 Mozilla: XrayWrappers exposes chrome-only properties when not in chrome compartment (MFSA 2012-99)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4208.json"},{"CVE":"CVE-2012-5841","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877628","bugzilla_description":"CVE-2012-5841 Mozilla: Improper security filtering for cross-origin wrappers (MFSA 2012-100)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5841.json"},{"CVE":"CVE-2012-4207","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877629","bugzilla_description":"CVE-2012-4207 Mozilla: Improper character decoding in HZ-GB-2312 charset (MFSA 2012-101)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4207.json"},{"CVE":"CVE-2012-5837","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877631","bugzilla_description":"CVE-2012-5837 Mozilla: Script entered into Developer Toolbar runs with chrome privileges (MFSA 2012-102)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5837.json"},{"CVE":"CVE-2012-4209","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877632","bugzilla_description":"CVE-2012-4209 Mozilla: Frames can shadow top.location (MFSA 2012-103)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4209.json"},{"CVE":"CVE-2012-4210","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1482"],"bugzilla":"877633","bugzilla_description":"CVE-2012-4210 Mozilla: CSS and HTML injection through Style Inspector (MFSA 2012-104)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4210.json"},{"CVE":"CVE-2012-4214","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4214.json"},{"CVE":"CVE-2012-4215","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4215.json"},{"CVE":"CVE-2012-4216","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4216.json"},{"CVE":"CVE-2012-5829","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5829.json"},{"CVE":"CVE-2012-5839","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5839.json"},{"CVE":"CVE-2012-5840","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5840.json"},{"CVE":"CVE-2012-5830","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877635","bugzilla_description":"CVE-2012-5830 CVE-2012-5833 CVE-2012-5835 Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5830.json"},{"CVE":"CVE-2012-5833","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877635","bugzilla_description":"CVE-2012-5830 CVE-2012-5833 CVE-2012-5835 Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5833.json"},{"CVE":"CVE-2012-5835","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877635","bugzilla_description":"CVE-2012-5830 CVE-2012-5833 CVE-2012-5835 Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5835.json"},{"CVE":"CVE-2012-4212","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877942","bugzilla_description":"CVE-2012-4212 CVE-2012-4213 CVE-2012-4217 CVE-2012-4218 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4212.json"},{"CVE":"CVE-2012-4213","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877942","bugzilla_description":"CVE-2012-4212 CVE-2012-4213 CVE-2012-4217 CVE-2012-4218 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4213.json"},{"CVE":"CVE-2012-4217","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877942","bugzilla_description":"CVE-2012-4212 CVE-2012-4213 CVE-2012-4217 CVE-2012-4218 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4217.json"},{"CVE":"CVE-2012-4218","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877942","bugzilla_description":"CVE-2012-4212 CVE-2012-4213 CVE-2012-4217 CVE-2012-4218 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4218.json"},{"CVE":"CVE-2012-5838","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877945","bugzilla_description":"CVE-2012-5838 Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5838.json"},{"CVE":"CVE-2012-4194","severity":"critical","public_date":"2012-10-26T00:00:00Z","advisories":["RHSA-2012:1407","RHSA-2012:1413"],"bugzilla":"869893","bugzilla_description":"CVE-2012-4194 CVE-2012-4195 CVE-2012-4196 Mozilla: Fixes for Location object issues (MFSA 2012-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.10-1.el6_3","firefox-0:10.0.10-1.el6_3","thunderbird-0:10.0.10-1.el5_8","firefox-0:10.0.10-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4194.json"},{"CVE":"CVE-2012-4195","severity":"critical","public_date":"2012-10-26T00:00:00Z","advisories":["RHSA-2012:1407","RHSA-2012:1413"],"bugzilla":"869893","bugzilla_description":"CVE-2012-4194 CVE-2012-4195 CVE-2012-4196 Mozilla: Fixes for Location object issues (MFSA 2012-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.10-1.el6_3","firefox-0:10.0.10-1.el6_3","thunderbird-0:10.0.10-1.el5_8","firefox-0:10.0.10-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4195.json"},{"CVE":"CVE-2012-4196","severity":"critical","public_date":"2012-10-26T00:00:00Z","advisories":["RHSA-2012:1407","RHSA-2012:1413"],"bugzilla":"869893","bugzilla_description":"CVE-2012-4194 CVE-2012-4195 CVE-2012-4196 Mozilla: Fixes for Location object issues (MFSA 2012-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.10-1.el6_3","firefox-0:10.0.10-1.el6_3","thunderbird-0:10.0.10-1.el5_8","firefox-0:10.0.10-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4196.json"},{"CVE":"CVE-2012-4192","severity":"critical","public_date":"2012-10-11T00:00:00Z","advisories":[],"bugzilla":"865283","bugzilla_description":"CVE-2012-4192 Mozilla: defaultValue security checks not applied (firefox-16) (MFSA 2012-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4192.json"},{"CVE":"CVE-2012-4191","severity":"critical","public_date":"2012-10-11T00:00:00Z","advisories":[],"bugzilla":"865286","bugzilla_description":"CVE-2012-4191 Mozilla: Miscellaneous memory safety hazards (rv:16.0.1) (MFSA 2012-88)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4191.json"},{"CVE":"CVE-2012-3982","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863614","bugzilla_description":"CVE-2012-3982 Mozilla: Miscellaneous memory safety hazards (rv:10.0.8) (MFSA 2012-74)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3982.json"},{"CVE":"CVE-2012-3983","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":[],"bugzilla":"863615","bugzilla_description":"CVE-2012-3983 Mozilla: Miscellaneous memory safety hazards (rv:16.0) (MFSA 2012-74)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3983.json"},{"CVE":"CVE-2012-3984","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":[],"bugzilla":"863616","bugzilla_description":"CVE-2012-3984 CVE-2012-5354 Mozilla: Select element persistance allows for attacks (MFSA 2012-75)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3984.json"},{"CVE":"CVE-2012-5354","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":[],"bugzilla":"863616","bugzilla_description":"CVE-2012-3984 CVE-2012-5354 Mozilla: Select element persistance allows for attacks (MFSA 2012-75)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5354.json"},{"CVE":"CVE-2012-3985","severity":"moderate","public_date":"2012-10-09T00:00:00Z","advisories":[],"bugzilla":"863617","bugzilla_description":"CVE-2012-3985 Mozilla: Continued access to initial origin after setting document.domain can lead to XSS attacks (MFSA 2012-76)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3985.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firewall-config_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firewall-config_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firewall-config_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firewalld-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firewalld-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firewalld-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firewalld_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firewalld_security_api_results.json
new file mode 100644
index 0000000..14bb8ea
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firewalld_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-5410","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2016:2597"],"bugzilla":"1360135","bugzilla_description":"CVE-2016-5410 firewalld: Firewall configuration can be modified by any logged in user","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":["firewalld-0:0.4.3.2-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5410.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firstboot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firstboot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/firstboot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flac-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flac-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flac-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flatpak-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flatpak-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flatpak-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flatpak_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flatpak_security_api_results.json
new file mode 100644
index 0000000..5596cb0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flatpak_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-10063","severity":"important","public_date":"2019-03-22T00:00:00Z","advisories":["RHSA-2019:1024","RHSA-2019:1143"],"bugzilla":"1695973","bugzilla_description":"CVE-2019-10063 flatpak: Sandbox bypass via IOCSTI (incomplete fix for CVE-2017-5226)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["flatpak-0:1.0.2-5.el7_6","flatpak-0:1.0.6-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10063.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8308","severity":"important","public_date":"2019-02-11T18:47:00Z","advisories":["RHSA-2019:0375"],"bugzilla":"1675070","bugzilla_description":"CVE-2019-8308 flatpak: potential /proc based sandbox escape","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["flatpak-0:1.0.2-4.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8308.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-6560","severity":"moderate","public_date":"2018-01-29T00:00:00Z","advisories":["RHSA-2018:2766"],"bugzilla":"1542207","bugzilla_description":"CVE-2018-6560 flatpak: sandbox escape in D-Bus filtering by a crafted authentication handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":["flatpak-0:0.8.8-4.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6560.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-9780","severity":"moderate","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1465025","bugzilla_description":"CVE-2017-9780 flatpak: Privilege escalation via setuid/world-writable file permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9780.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flex_security_api_results.json
new file mode 100644
index 0000000..632cd51
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flex_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-6293","severity":"low","public_date":"2019-01-09T00:00:00Z","advisories":[],"bugzilla":"1667864","bugzilla_description":"CVE-2019-6293 flex: Recursive calls in the function mark_beginning_as_normal resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6293.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6354","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":[],"bugzilla":"1360743","bugzilla_description":"CVE-2016-6354 flex: buffer overflow in generated code (yy_get_next_buffer)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6354.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flite_security_api_results.json
new file mode 100644
index 0000000..273361f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flite_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-0027","severity":"moderate","public_date":"2014-01-10T00:00:00Z","advisories":[],"bugzilla":"1048678","bugzilla_description":"CVE-2014-0027 flite: insecure temporary file use","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0027.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fltk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fltk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fltk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flute_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flute_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/flute_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/folks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/folks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/folks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontawesome-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontawesome-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontawesome-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontconfig-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontconfig-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontconfig-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontconfig_security_api_results.json
new file mode 100644
index 0000000..ba2bd4b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontconfig_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-5384","severity":"moderate","public_date":"2016-08-05T00:00:00Z","advisories":["RHSA-2016:2601"],"bugzilla":"1350891","bugzilla_description":"CVE-2016-5384 fontconfig: Possible double free due to insufficiently validated cache files","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["fontconfig-0:2.10.95-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5384.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontpackages-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontpackages-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fontpackages-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fonts-tweak-tool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fonts-tweak-tool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fonts-tweak-tool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-db-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-db-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-db-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-db-ppds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-db-ppds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-db-ppds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-db_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-db_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-db_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-filters_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-filters_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic-filters_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic_security_api_results.json
new file mode 100644
index 0000000..fde8b02
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/foomatic_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-8560","severity":"moderate","public_date":"2015-12-12T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1291227","bugzilla_description":"CVE-2015-8560 cups-filters: foomatic-rip did not consider semicolon as illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8560.json"},{"CVE":"CVE-2015-8327","severity":"moderate","public_date":"2015-11-26T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1287523","bugzilla_description":"CVE-2015-8327 cups-filters: foomatic-rip did not consider the back tick as an illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8327.json"},{"CVE":"CVE-2010-5325","severity":"moderate","public_date":"2015-05-05T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1218297","bugzilla_description":"CVE-2010-5325 foomatic: potential remote arbitrary code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-131->CWE-122","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5325.json"},{"CVE":"CVE-2013-6500","severity":"moderate","public_date":"2015-02-04T00:00:00Z","advisories":[],"bugzilla":"995090","bugzilla_description":"CVE-2013-6500 foomatic (foomatic-extract-text): Arbitrary code execution due to insecure Perl module loading from CWD","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6500.json"},{"CVE":"CVE-2011-2923","severity":"low","public_date":"2011-07-28T00:00:00Z","advisories":[],"bugzilla":"726426","bugzilla_description":"CVE-2011-2923 CVE-2011-2924 foomatic: foomatic-rip (debug mode) insecure temporary file use in renderer command line by processing PostScript data","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2923.json"},{"CVE":"CVE-2011-2924","severity":"low","public_date":"2011-07-28T00:00:00Z","advisories":[],"bugzilla":"726426","bugzilla_description":"CVE-2011-2923 CVE-2011-2924 foomatic: foomatic-rip (debug mode) insecure temporary file use in renderer command line by processing PostScript data","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2924.json"},{"CVE":"CVE-2011-2697","severity":"moderate","public_date":"2011-06-07T00:00:00Z","advisories":["RHSA-2011:1109"],"bugzilla":"721001","bugzilla_description":"CVE-2011-2697 foomatic: Improper sanitization of command line option in foomatic-rip","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["foomatic-0:3.0.2-38.3.el5_7.1","foomatic-0:3.0.2-3.2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2697.json"},{"CVE":"CVE-2011-2964","severity":"moderate","public_date":"2011-06-07T00:00:00Z","advisories":["RHSA-2011:1110"],"bugzilla":"727016","bugzilla_description":"CVE-2011-2964 foomatic: Improper sanitization of command line option in foomatic-rip (foomatic.c)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["foomatic-0:4.0.4-1.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2964.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fprintd-pam_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fprintd-pam_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fprintd-pam_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fprintd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fprintd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fprintd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeglut-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeglut-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeglut-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeglut_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeglut_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeglut_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeipmi-bmc-watchdog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeipmi-bmc-watchdog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeipmi-bmc-watchdog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeipmi-ipmidetectd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeipmi-ipmidetectd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeipmi-ipmidetectd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeipmi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeipmi_security_api_results.json
new file mode 100644
index 0000000..5b33abb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeipmi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4786","severity":"moderate","public_date":"2013-07-08T00:00:00Z","advisories":[],"bugzilla":"1326638","bugzilla_description":"CVE-2013-4786 OpenIPMI, freeipmi: Leakage of password hashes via RAKP authentication","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4786.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeradius_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeradius_security_api_results.json
new file mode 100644
index 0000000..525d59c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freeradius_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17185","severity":"moderate","public_date":"2019-11-14T00:00:00Z","advisories":["RHSA-2020:3984"],"bugzilla":"1816680","bugzilla_description":"CVE-2019-17185 freeradius: eap-pwd: DoS issues due to multithreaded BN_CTX access","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-567","affected_packages":["freeradius-0:3.0.13-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17185.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13456","severity":"moderate","public_date":"2019-08-03T00:00:00Z","advisories":["RHSA-2020:3984","RHSA-2020:1672"],"bugzilla":"1737663","bugzilla_description":"CVE-2019-13456 freeradius: eap-pwd: Information leak due to aborting when needing more than 10 iterations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["freeradius-0:3.0.13-15.el7","freeradius:3.0-8020020191122172113.31e953cd"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13456.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-10143","severity":"moderate","public_date":"2019-05-01T00:00:00Z","advisories":["RHSA-2020:3984","RHSA-2019:3353"],"bugzilla":"1705340","bugzilla_description":"CVE-2019-10143 freeradius: privilege escalation due to insecure logrotate configuration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-266|CWE-250)","affected_packages":["freeradius-0:3.0.13-15.el7","freeradius:3.0-8010020190614154208.16b3ab4d"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10143.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-11235","severity":"important","public_date":"2019-04-10T15:00:00Z","advisories":["RHSA-2019:1131","RHSA-2019:1142"],"bugzilla":"1695748","bugzilla_description":"CVE-2019-11235 freeradius: eap-pwd: authentication bypass via an invalid curve attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["freeradius-0:3.0.13-10.el7_6","freeradius:3.0-8000020190425181943.75ec4169"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11235.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2019-11234","severity":"moderate","public_date":"2019-04-10T15:00:00Z","advisories":["RHSA-2019:1131","RHSA-2019:1142"],"bugzilla":"1695783","bugzilla_description":"CVE-2019-11234 freeradius: eap-pwd: fake authentication using reflection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["freeradius-0:3.0.13-10.el7_6","freeradius:3.0-8000020190425181943.75ec4169"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11234.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2017-10978","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:1759","RHSA-2017:2389"],"bugzilla":"1468487","bugzilla_description":"CVE-2017-10978 freeradius: Out-of-bounds read/write due to improper output buffer size check in make_secret()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["freeradius-0:2.2.6-7.el6_9","freeradius-0:3.0.13-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10979","severity":"important","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:1759"],"bugzilla":"1468490","bugzilla_description":"CVE-2017-10979 freeradius: Out-of-bounds write in rad_coalesce()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["freeradius-0:2.2.6-7.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10979.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-10980","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:1759"],"bugzilla":"1468493","bugzilla_description":"CVE-2017-10980 freeradius: Memory leak in decode_tlv()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["freeradius-0:2.2.6-7.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10980.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10981","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:1759"],"bugzilla":"1468495","bugzilla_description":"CVE-2017-10981 freeradius: Memory leak in fr_dhcp_decode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["freeradius-0:2.2.6-7.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10982","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:1759"],"bugzilla":"1468498","bugzilla_description":"CVE-2017-10982 freeradius: Out-of-bounds read in fr_dhcp_decode_options()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freeradius-0:2.2.6-7.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10982.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10983","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:1759","RHSA-2017:2389"],"bugzilla":"1468503","bugzilla_description":"CVE-2017-10983 freeradius: Out-of-bounds read in fr_dhcp_decode() when decoding option 63","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freeradius-0:2.2.6-7.el6_9","freeradius-0:3.0.13-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10983.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10984","severity":"important","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:2389"],"bugzilla":"1468549","bugzilla_description":"CVE-2017-10984 freeradius: Out-of-bounds write in data2vp_wimax()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["freeradius-0:3.0.13-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10984.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-10985","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:2389"],"bugzilla":"1468550","bugzilla_description":"CVE-2017-10985 freeradius: Infinite loop and memory exhaustion with 'concat' attributes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["freeradius-0:3.0.13-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10985.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10986","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:2389"],"bugzilla":"1468551","bugzilla_description":"CVE-2017-10986 freeradius: Infinite read in dhcp_attr2vp()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freeradius-0:3.0.13-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10986.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10987","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:2389"],"bugzilla":"1468552","bugzilla_description":"CVE-2017-10987 freeradius: Buffer over-read in fr_dhcp_decode_suboptions()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freeradius-0:3.0.13-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10987.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10988","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1468555","bugzilla_description":"CVE-2017-10988 freeradius: Incorrectly created 'signed' attributes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10988.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-9148","severity":"important","public_date":"2017-05-08T00:00:00Z","advisories":["RHSA-2017:1581"],"bugzilla":"1456697","bugzilla_description":"CVE-2017-9148 freeradius: TLS resumption authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["freeradius-0:3.0.4-8.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9148.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2015-4680","severity":"moderate","public_date":"2015-06-22T00:00:00Z","advisories":[],"bugzilla":"1234975","bugzilla_description":"CVE-2015-4680 freeradius: insufficent CRL application","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-299","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4680.json"},{"CVE":"CVE-2015-8762","severity":"moderate","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1218467","bugzilla_description":"CVE-2015-8762 CVE-2015-8763 CVE-2015-8764 freeradius: the EAP-PWD module performs insufficient validation on packets received from an EAP peer","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8762.json"},{"CVE":"CVE-2015-8763","severity":"moderate","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1218467","bugzilla_description":"CVE-2015-8762 CVE-2015-8763 CVE-2015-8764 freeradius: the EAP-PWD module performs insufficient validation on packets received from an EAP peer","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8763.json"},{"CVE":"CVE-2015-8764","severity":"moderate","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1218467","bugzilla_description":"CVE-2015-8762 CVE-2015-8763 CVE-2015-8764 freeradius: the EAP-PWD module performs insufficient validation on packets received from an EAP peer","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8764.json"},{"CVE":"CVE-2014-2015","severity":"moderate","public_date":"2014-02-12T00:00:00Z","advisories":["RHSA-2015:1287"],"bugzilla":"1066761","bugzilla_description":"CVE-2014-2015 freeradius: stack-based buffer overflow flaw in rlm_pap module","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["freeradius-0:2.2.6-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2015.json"},{"CVE":"CVE-2012-3547","severity":"moderate","public_date":"2012-09-10T00:00:00Z","advisories":["RHSA-2012:1327","RHSA-2012:1326"],"bugzilla":"852752","bugzilla_description":"CVE-2012-3547 freeradius: stack-based buffer overflow via long expiration date fields in client X509 certificates","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["freeradius-0:2.1.12-4.el6_3","freeradius2-0:2.1.12-4.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3547.json"},{"CVE":"CVE-2011-4966","severity":"low","public_date":"2011-11-14T00:00:00Z","advisories":["RHBA-2012:0881","RHSA-2013:0134"],"bugzilla":"879045","bugzilla_description":"CVE-2011-4966 freeradius: does not respect expired passwords when using the unix module","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["freeradius2-0:2.1.12-5.el5","freeradius-0:2.1.12-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4966.json"},{"CVE":"CVE-2011-2701","severity":"moderate","public_date":"2011-07-15T00:00:00Z","advisories":[],"bugzilla":"724815","bugzilla_description":"CVE-2011-2701 freeradius: OCSP does not verify status of certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2701.json"},{"CVE":"CVE-2010-3696","severity":"low","public_date":"2010-05-30T00:00:00Z","advisories":[],"bugzilla":"639390","bugzilla_description":"CVE-2010-3696 freeradius: DoS via certain DHCP requests","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3696.json"},{"CVE":"CVE-2010-3697","severity":null,"public_date":"2010-05-30T00:00:00Z","advisories":[],"bugzilla":"639397","bugzilla_description":"CVE-2010-3697 freeradius: crash when processing requests queued for more than 30 seconds","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3697.json"},{"CVE":"CVE-2009-3111","severity":"moderate","public_date":"2009-09-07T00:00:00Z","advisories":["RHSA-2009:1451"],"bugzilla":"521912","bugzilla_description":"CVE-2009-3111 FreeRADIUS: Missing check for Tunnel-Password attributes with zero length (DoS) -- re-appearance of CVE-2003-0967","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["freeradius-0:1.1.3-1.5.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3111.json"},{"CVE":"CVE-2007-2028","severity":"moderate","public_date":"2007-04-12T00:00:00Z","advisories":["RHSA-2007:0338"],"bugzilla":"1618307","bugzilla_description":"CVE-2007-2028 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-2.RHEL3.4","freeradius-0:1.1.3-1.2.el5","freeradius-0:1.0.1-3.RHEL4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2028.json"},{"CVE":"CVE-2006-1354","severity":"important","public_date":"2006-03-20T00:00:00Z","advisories":["RHSA-2006:0271"],"bugzilla":"1618034","bugzilla_description":"CVE-2006-1354 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-2.RHEL3.2","freeradius-0:1.0.1-3.RHEL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1354.json"},{"CVE":"CVE-2005-4744","severity":"low","public_date":"2005-09-09T00:00:00Z","advisories":["RHSA-2006:0271"],"bugzilla":"1617862","bugzilla_description":"CVE-2005-4744 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-2.RHEL3.2","freeradius-0:1.0.1-3.RHEL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4744.json"},{"CVE":"CVE-2005-1454","severity":"moderate","public_date":"2005-05-04T00:00:00Z","advisories":["RHSA-2005:524"],"bugzilla":"1617634","bugzilla_description":"CVE-2005-1454 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-1.1.RHEL3","freeradius-0:1.0.1-3.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1454.json"},{"CVE":"CVE-2005-1455","severity":"moderate","public_date":"2005-05-04T00:00:00Z","advisories":["RHSA-2005:524"],"bugzilla":"1617635","bugzilla_description":"CVE-2005-1455 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-1.1.RHEL3","freeradius-0:1.0.1-3.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1455.json"},{"CVE":"CVE-2004-0938","severity":null,"public_date":"2004-09-20T00:00:00Z","advisories":["RHSA-2004:609"],"bugzilla":"1617325","bugzilla_description":"CVE-2004-0938 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-1.RHEL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0938.json"},{"CVE":"CVE-2004-0960","severity":null,"public_date":"2004-09-20T00:00:00Z","advisories":["RHSA-2004:609"],"bugzilla":"1617333","bugzilla_description":"CVE-2004-0960 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-1.RHEL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0960.json"},{"CVE":"CVE-2004-0961","severity":null,"public_date":"2004-09-20T00:00:00Z","advisories":["RHSA-2004:609"],"bugzilla":"1617334","bugzilla_description":"CVE-2004-0961 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-1.RHEL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0961.json"},{"CVE":"CVE-2003-0967","severity":"moderate","public_date":"2003-11-20T00:00:00Z","advisories":["RHSA-2003:386"],"bugzilla":"1617109","bugzilla_description":"CVE-2003-0967 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:0.9.3-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0967.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freerdp-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freerdp-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freerdp-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freerdp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freerdp_security_api_results.json
new file mode 100644
index 0000000..ac8d47b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freerdp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15103","severity":"moderate","public_date":"2020-07-20T00:00:00Z","advisories":[],"bugzilla":"1858909","bugzilla_description":"CVE-2020-15103 freerdp: integer overflow due to missing input sanitation in rdpegfx channel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15103.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2020-11098","severity":"low","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854843","bugzilla_description":"CVE-2020-11098 freerdp: out-of-bound read in glyph_cache_put","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-129->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11098.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-11096","severity":"low","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854847","bugzilla_description":"CVE-2020-11096 freerdp: out-of-bound read in update_read_cache_bitmap_v3_order","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-129->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11096.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-11095","severity":"moderate","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854850","bugzilla_description":"CVE-2020-11095 freerdp: out of bound reads resulting in accessing memory location  outside of static array PRIMARY_DRAWING_ORDER_FIELD_BYTES.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11095.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-4032","severity":"moderate","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854871","bugzilla_description":"CVE-2020-4032 freerdp: integer casting vulnerability in update_recv_secondary_order","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-681","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-4032.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-4033","severity":"low","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854876","bugzilla_description":"CVE-2020-4033 freerdp:  out-of-bounds read in RLEDECOMPRESS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-4033.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-4031","severity":"moderate","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854889","bugzilla_description":"CVE-2020-4031 freerdp: use-after-free in gdi_SelectObject","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-4031.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2020-4030","severity":"moderate","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854895","bugzilla_description":"CVE-2020-4030 freerdp: out of bounds read in TrioParse","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-4030.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-11099","severity":"moderate","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854899","bugzilla_description":"CVE-2020-11099 freerdp: out of bounds read in license_read_new_or_upgrade_license_packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11099.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-11097","severity":"moderate","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854910","bugzilla_description":"CVE-2020-11097 freerdp: out of bounds read in PRIMARY_DRAWING_ORDER_FIELD_BYTES","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-129->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11097.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-11085","severity":"low","public_date":"2020-05-29T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1844161","bugzilla_description":"CVE-2020-11085 freerdp: out-of-bounds read in cliprdr_read_format_list function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805->CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11085.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2020-11086","severity":"low","public_date":"2020-05-29T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1844166","bugzilla_description":"CVE-2020-11086 freerdp: out-of-bounds read in ntlm_read_ntlm_v2_client_challenge function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11086.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-11087","severity":"low","public_date":"2020-05-29T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1844171","bugzilla_description":"CVE-2020-11087 freerdp: out-of-bounds read in ntlm_read_AuthenticateMessage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11087.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-11088","severity":"low","public_date":"2020-05-29T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1844177","bugzilla_description":"CVE-2020-11088 freerdp: out-of-bounds read in ntlm_read_NegotiateMessage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11088.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-11089","severity":"low","public_date":"2020-05-29T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1844184","bugzilla_description":"CVE-2020-11089 freerdp: out-of-bounds read in irp functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11089.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2020-13396","severity":"moderate","public_date":"2020-05-22T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1841189","bugzilla_description":"CVE-2020-13396 freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13396.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-13397","severity":"moderate","public_date":"2020-05-22T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1841196","bugzilla_description":"CVE-2020-13397 freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13397.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2020-13398","severity":"important","public_date":"2020-05-22T00:00:00Z","advisories":["RHSA-2020:2406","RHSA-2020:2417","RHSA-2020:2407","RHSA-2020:2415","RHSA-2020:2405"],"bugzilla":"1841199","bugzilla_description":"CVE-2020-13398 freerdp: Out-of-bounds write in crypto_rsa_common in libfreerdp/crypto/crypto.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805->CWE-122->CWE-787","affected_packages":["freerdp-0:1.0.2-7.el6_10","freerdp-2:2.0.0-46.rc4.el8_2.2","freerdp-2:2.0.0-46.rc4.el8_1.2","freerdp-2:2.0.0-46.rc4.el8_0.2","freerdp-0:2.0.0-4.rc4.el7_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13398.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"8.3"},{"CVE":"CVE-2020-11047","severity":"moderate","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835762","bugzilla_description":"CVE-2020-11047 freerdp: out-of-bounds read in autodetect_recv_bandwidth_measure_results function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11047.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-11048","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835766","bugzilla_description":"CVE-2020-11048 freerdp: out-of-bounds read could result in aborting the session","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11048.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-11049","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835772","bugzilla_description":"CVE-2020-11049 freerdp: out-of-bound read of client memory that is then passed on to the protocol parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11049.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-11058","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835779","bugzilla_description":"CVE-2020-11058 freerdp: stream out-of-bounds seek in rdp_read_font_capability_set could lead to out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11058.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-11521","severity":"important","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:2334","RHSA-2020:2335","RHSA-2020:2354","RHSA-2020:2336"],"bugzilla":"1836214","bugzilla_description":"CVE-2020-11521 freerdp: Out-of-bounds write in planar.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.0.0-4.rc4.el7_8","freerdp-2:2.0.0-46.rc4.el8_0.1","freerdp-2:2.0.0-46.rc4.el8_2.1","freerdp-2:2.0.0-46.rc4.el8_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11521.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2020-11522","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1836223","bugzilla_description":"CVE-2020-11522 freerdp: out-of-bounds read in gdi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11522.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-11524","severity":"important","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:2334","RHSA-2020:2335","RHSA-2020:2354","RHSA-2020:2336"],"bugzilla":"1836226","bugzilla_description":"CVE-2020-11524 freerdp: Out-of-bounds write in interleaved.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.0.0-4.rc4.el7_8","freerdp-2:2.0.0-46.rc4.el8_0.1","freerdp-2:2.0.0-46.rc4.el8_2.1","freerdp-2:2.0.0-46.rc4.el8_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11524.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2020-11523","severity":"important","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:2334","RHSA-2020:2335","RHSA-2020:2354","RHSA-2020:2336"],"bugzilla":"1836234","bugzilla_description":"CVE-2020-11523 freerdp: Integer overflow in region.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["freerdp-0:2.0.0-4.rc4.el7_8","freerdp-2:2.0.0-46.rc4.el8_0.1","freerdp-2:2.0.0-46.rc4.el8_2.1","freerdp-2:2.0.0-46.rc4.el8_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11523.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2020-11525","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1836239","bugzilla_description":"CVE-2020-11525 freerdp: out-of-bounds read in bitmap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11525.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-11526","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1836247","bugzilla_description":"CVE-2020-11526 freerdp: Stream pointer out of bounds in update_recv_secondary_order could lead out of bounds read later","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11526.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-11017","severity":"moderate","public_date":"2020-04-09T00:00:00Z","advisories":[],"bugzilla":"1848000","bugzilla_description":"CVE-2020-11017 freerdp:  Double free in cliprdr_server_receive_capabilities could result in data corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11017.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-11018","severity":"moderate","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1848008","bugzilla_description":"CVE-2020-11018 freerdp: Out of bound read in cliprdr_server_receive_capabilities","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11018.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-11019","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1848012","bugzilla_description":"CVE-2020-11019 freerdp: Out of bound read in update_recv could result in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11019.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-11038","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1848018","bugzilla_description":"CVE-2020-11038 freerdp: Integer overflow in VIDEO channel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11038.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-11039","severity":"moderate","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1848022","bugzilla_description":"CVE-2020-11039 freerdp: Out of bound read/write in usb redirection channel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190->CWE-770->(CWE-125|CWE-787)","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11039.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"6.8"},{"CVE":"CVE-2020-11040","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1848029","bugzilla_description":"CVE-2020-11040 freerdp: Out of bound access in clear_decompress_subcode_rlex","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.7"},{"CVE":"CVE-2020-11041","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1848034","bugzilla_description":"CVE-2020-11041 freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-129->CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11041.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.7"},{"CVE":"CVE-2020-11043","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1848038","bugzilla_description":"CVE-2020-11043 freerdp: out of bound read in rfx_process_message_tileset","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-805->CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11043.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.7"},{"CVE":"CVE-2020-11042","severity":"moderate","public_date":"2020-03-31T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835382","bugzilla_description":"CVE-2020-11042 freerdp: out-of-bounds read in update_read_icon_info function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11042.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-11044","severity":"low","public_date":"2020-03-31T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835391","bugzilla_description":"CVE-2020-11044 freerdp: double free in update_read_cache_bitmap_v3_order function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11044.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-11045","severity":"low","public_date":"2020-03-30T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835399","bugzilla_description":"CVE-2020-11045 freerdp: out of bounds read in update_read_bitmap_data function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11045.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2020-11046","severity":"low","public_date":"2020-03-30T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835403","bugzilla_description":"CVE-2020-11046 freerdp: out of bounds seek in update_read_synchronize function could lead out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11046.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2019-17177","severity":"low","public_date":"2019-10-04T00:00:00Z","advisories":[],"bugzilla":"1801722","bugzilla_description":"CVE-2019-17177 freerdp: supplied realloc pointer leads to memory leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17177.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-8784","severity":"moderate","public_date":"2018-10-22T00:00:00Z","advisories":[],"bugzilla":"1671356","bugzilla_description":"CVE-2018-8784 freerdp: Heap-based buffer overflow in zgfx_decompress_segment() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-8785","severity":"moderate","public_date":"2018-10-22T00:00:00Z","advisories":[],"bugzilla":"1671358","bugzilla_description":"CVE-2018-8785 freerdp: Heap-based buffer overflow in zgfx_decompress() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-8786","severity":"important","public_date":"2018-10-22T00:00:00Z","advisories":["RHSA-2019:0697"],"bugzilla":"1671359","bugzilla_description":"CVE-2018-8786 freerdp: Integer truncation leading to heap-based buffer overflow in update_read_bitmap_update() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["freerdp-0:1.0.2-15.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-8787","severity":"important","public_date":"2018-10-22T00:00:00Z","advisories":["RHSA-2019:0697"],"bugzilla":"1671361","bugzilla_description":"CVE-2018-8787 freerdp: Integer overflow leading to heap-based buffer overflow in gdi_Bitmap_Decompress() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["freerdp-0:1.0.2-15.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8787.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-8788","severity":"important","public_date":"2018-10-22T00:00:00Z","advisories":["RHSA-2019:0697"],"bugzilla":"1671363","bugzilla_description":"CVE-2018-8788 freerdp: Out-of-bounds write in nsc_rle_decode() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["freerdp-0:1.0.2-15.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8788.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-8789","severity":"moderate","public_date":"2018-10-22T00:00:00Z","advisories":[],"bugzilla":"1671367","bugzilla_description":"CVE-2018-8789 freerdp: Several out-of-bounds reads in NTLM authentication module resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8789.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000852","severity":"low","public_date":"2018-09-19T00:00:00Z","advisories":["RHSA-2019:2157"],"bugzilla":"1661640","bugzilla_description":"CVE-2018-1000852 freerdp: out of bounds read in drdynvc_process_capability_request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.0.0-1.rc4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000852.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-2834","severity":"moderate","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1475224","bugzilla_description":"CVE-2017-2834 freerdp: Out-of-bounds write in license_recv()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-129","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2834.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-2835","severity":"moderate","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1475233","bugzilla_description":"CVE-2017-2835 freerdp: Out-of-bounds write in rdp_recv_tpkt_pdu","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-129","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2835.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-2839","severity":"low","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1475234","bugzilla_description":"CVE-2017-2839 freerdp: Rdp Client License Read Challenge Packet Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-2838","severity":"low","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1475236","bugzilla_description":"CVE-2017-2838 freerdp: Rdp Client License Read Product Info Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-2837","severity":"low","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1475239","bugzilla_description":"CVE-2017-2837 freerdp: Rdp Client GCC Read Server Security Data Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2837.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-2836","severity":"low","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1475240","bugzilla_description":"CVE-2017-2836 freerdp: Rdp Client Read Server Proprietary Certificate Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2836.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2014-0250","severity":"moderate","public_date":"2014-05-28T00:00:00Z","advisories":[],"bugzilla":"998934","bugzilla_description":"CVE-2014-0250 freerdp: integer overflows in memory allocations in client/X11/xf_graphics.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0250.json"},{"CVE":"CVE-2014-0791","severity":"moderate","public_date":"2014-01-02T00:00:00Z","advisories":[],"bugzilla":"998941","bugzilla_description":"CVE-2014-0791 freerdp: integer overflow in heap allocation in license_read_scope_list()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0791.json"},{"CVE":"CVE-2013-4118","severity":"moderate","public_date":"2013-01-10T00:00:00Z","advisories":[],"bugzilla":"983078","bugzilla_description":"CVE-2013-4119 freerdp: Multiple security fixes in  versions after 1.1.0-beta1","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4118.json"},{"CVE":"CVE-2013-4119","severity":"moderate","public_date":"2013-01-10T00:00:00Z","advisories":[],"bugzilla":"983078","bugzilla_description":"CVE-2013-4119 freerdp: Multiple security fixes in  versions after 1.1.0-beta1","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4119.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freetype-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freetype-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freetype-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freetype_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freetype_security_api_results.json
new file mode 100644
index 0000000..b58890e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/freetype_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15999","severity":"moderate","public_date":"2020-10-19T00:00:00Z","advisories":[],"bugzilla":"1890210","bugzilla_description":"CVE-2020-15999 freetype: heap-based buffer overflow via malformed ttf files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15999.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-9381","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2018:3140","RHSA-2019:4254"],"bugzilla":"1752788","bugzilla_description":"CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freetype-0:2.8-12.el7","freetype-0:2.3.11-19.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9381.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2015-9382","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2018:3140","RHSA-2019:4254"],"bugzilla":"1763609","bugzilla_description":"CVE-2015-9382 freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["freetype-0:2.8-12.el7","freetype-0:2.3.11-19.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9382.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-9383","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1763613","bugzilla_description":"CVE-2015-9383 freetype: a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c may lead to a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9383.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2015-9290","severity":"low","public_date":"2019-07-30T00:00:00Z","advisories":[],"bugzilla":"1741802","bugzilla_description":"CVE-2015-9290 freetype: buffer over-read in function T1_Get_Private_Dict in type1/t1parse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9290.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2018-6942","severity":"low","public_date":"2018-01-27T00:00:00Z","advisories":[],"bugzilla":"1544771","bugzilla_description":"CVE-2018-6942 freetype: NULL pointer dereference in the Ins_GETVARIATION() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8287","severity":"moderate","public_date":"2017-03-26T00:00:00Z","advisories":[],"bugzilla":"1446073","bugzilla_description":"CVE-2017-8287 freetype: heap-based buffer overflow related to the t1_builder_close_contour function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8287.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-8105","severity":"moderate","public_date":"2017-03-24T00:00:00Z","advisories":[],"bugzilla":"1446500","bugzilla_description":"CVE-2017-8105 freetype: heap-based buffer overflow related to the t1_decoder_parse_charstrings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8105.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-7857","severity":"moderate","public_date":"2017-03-08T00:00:00Z","advisories":[],"bugzilla":"1444898","bugzilla_description":"CVE-2017-7857 freetype: heap-based buffer overflow related to the TT_Get_MM_Var function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7858","severity":"moderate","public_date":"2017-03-07T00:00:00Z","advisories":[],"bugzilla":"1444904","bugzilla_description":"CVE-2017-7858 freetype: out-of-bounds write related to the TT_Get_MM_Var and sfnt_init_face functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7858.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7864","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":[],"bugzilla":"1444911","bugzilla_description":"CVE-2017-7864 freetype: heap-based buffer overflow related to the tt_size_reset function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-10328","severity":"moderate","public_date":"2016-12-23T00:00:00Z","advisories":[],"bugzilla":"1444895","bugzilla_description":"CVE-2016-10328 freetype: heap-based buffer overflow related to the cff_parser_run function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10328.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-10244","severity":"moderate","public_date":"2016-08-25T00:00:00Z","advisories":[],"bugzilla":"1429965","bugzilla_description":"CVE-2016-10244 freetype: parse_charstrings function in type1/t1load.c does not ensure that a font contains a glyph name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2014-9674","severity":"important","public_date":"2015-02-08T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191190","bugzilla_description":"CVE-2014-9674 freetype: multiple integer overflows Mac_Read_POST_Resource() leading to heap-based buffer overflows","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9674.json"},{"CVE":"CVE-2014-9675","severity":"low","public_date":"2015-02-08T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191192","bugzilla_description":"CVE-2014-9675 freetype: information leak in _bdf_add_property()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9675.json"},{"CVE":"CVE-2014-9656","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191078","bugzilla_description":"CVE-2014-9656 freetype: integer underflow in the tt_sbit_decoder_load_image()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9656.json"},{"CVE":"CVE-2014-9657","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191079","bugzilla_description":"CVE-2014-9657 freetype: off-by-one buffer over-read in tt_face_load_hdmx()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9657.json"},{"CVE":"CVE-2014-9658","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191080","bugzilla_description":"CVE-2014-9658 freetype: buffer over-read and integer underflow in tt_face_load_kern()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-190->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9658.json"},{"CVE":"CVE-2014-9659","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191081","bugzilla_description":"CVE-2014-9659 freetype: stack-based buffer overflow in cff/cf2intrp.c in the CFF CharString interpreter","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9659.json"},{"CVE":"CVE-2014-9660","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191082","bugzilla_description":"CVE-2014-9660 freetype: missing ENDCHAR NULL pointer dereference in the _bdf_parse_glyphs()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9660.json"},{"CVE":"CVE-2014-9661","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191083","bugzilla_description":"CVE-2014-9661 freetype: out of bounds read in Type42 font parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9661.json"},{"CVE":"CVE-2014-9662","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191084","bugzilla_description":"CVE-2014-9662 freetype: heap-based buffer overflow in cff/cf2ft.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9662.json"},{"CVE":"CVE-2014-9663","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191085","bugzilla_description":"CVE-2014-9663 freetype: out-of-bounds read in tt_cmap4_validate()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9663.json"},{"CVE":"CVE-2014-9664","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191086","bugzilla_description":"CVE-2014-9664 freetype: off-by-one buffer over-read in parse_charstrings() / t42_parse_charstrings()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9664.json"},{"CVE":"CVE-2014-9665","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191087","bugzilla_description":"CVE-2014-9665 freetype: integer overflow leading to heap-based buffer overflow in Load_SBit_Png()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9665.json"},{"CVE":"CVE-2014-9666","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191089","bugzilla_description":"CVE-2014-9666 freetype: integer overflow in tt_sbit_decoder_init() leading to out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9666.json"},{"CVE":"CVE-2014-9667","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191090","bugzilla_description":"CVE-2014-9667 freetype: integer overflow in tt_face_load_font_dir() leading to out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9667.json"},{"CVE":"CVE-2014-9668","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191091","bugzilla_description":"CVE-2014-9668 freetype: integer overflow in woff_open_font() leading to heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9668.json"},{"CVE":"CVE-2014-9669","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191092","bugzilla_description":"CVE-2014-9669 freetype: multiple integer overflows leading to buffer over-reads in cmap handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9669.json"},{"CVE":"CVE-2014-9670","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191093","bugzilla_description":"CVE-2014-9670 freetype: integer overflow in pcf_get_encodings() leading to NULL pointer dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-476","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9670.json"},{"CVE":"CVE-2014-9671","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191094","bugzilla_description":"CVE-2014-9671 freetype: integer overflow in pcf_get_properties() leading to NULL pointer dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-476","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9671.json"},{"CVE":"CVE-2014-9672","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191095","bugzilla_description":"CVE-2014-9672 freetype: Array index error in the parse_fond function in base/ftmac.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-129","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9672.json"},{"CVE":"CVE-2014-9673","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191096","bugzilla_description":"CVE-2014-9673 freetype: integer signedness error in Mac_Read_POST_Resource() leading to heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-122","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9673.json"},{"CVE":"CVE-2014-2240","severity":"important","public_date":"2014-03-07T00:00:00Z","advisories":[],"bugzilla":"1074646","bugzilla_description":"CVE-2014-2240 CVE-2014-2241 freetype: OOB stack-based read/write in cf2_hintmap_build()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2240.json"},{"CVE":"CVE-2014-2241","severity":"important","public_date":"2014-03-07T00:00:00Z","advisories":[],"bugzilla":"1074646","bugzilla_description":"CVE-2014-2240 CVE-2014-2241 freetype: OOB stack-based read/write in cf2_hintmap_build()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2241.json"},{"CVE":"CVE-2014-9745","severity":"low","public_date":"2014-02-14T00:00:00Z","advisories":[],"bugzilla":"1262377","bugzilla_description":"CVE-2014-9745 freetype: Infinite loop in parse_encoding in t1load.c","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9745.json"},{"CVE":"CVE-2014-9746","severity":"low","public_date":"2014-01-22T00:00:00Z","advisories":[],"bugzilla":"1262373","bugzilla_description":"CVE-2014-9746 CVE-2014-9747 freetype: Use of uninitialized memory","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9746.json"},{"CVE":"CVE-2014-9747","severity":"low","public_date":"2014-01-22T00:00:00Z","advisories":[],"bugzilla":"1262373","bugzilla_description":"CVE-2014-9746 CVE-2014-9747 freetype: Use of uninitialized memory","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9747.json"},{"CVE":"CVE-2012-5668","severity":"low","public_date":"2012-12-15T00:00:00Z","advisories":[],"bugzilla":"890087","bugzilla_description":"CVE-2012-5668 freetype: NULL Pointer Dereference in bdf_free_font (#37905)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5668.json"},{"CVE":"CVE-2012-5669","severity":"important","public_date":"2012-12-15T00:00:00Z","advisories":["RHSA-2013:0216"],"bugzilla":"890088","bugzilla_description":"CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.3.11-14.el6_3.1","freetype-0:2.2.1-32.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5669.json"},{"CVE":"CVE-2012-5670","severity":"important","public_date":"2012-12-15T00:00:00Z","advisories":[],"bugzilla":"890094","bugzilla_description":"CVE-2012-5670 freetype: Out-of-bounds write in _bdf_parse_glyphs() (#37907)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5670.json"},{"CVE":"CVE-2012-4190","severity":"important","public_date":"2012-10-11T00:00:00Z","advisories":[],"bugzilla":"872753","bugzilla_description":"CVE-2012-4190 freetype: memory corruption and application crash (reported against firefox on android)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4190.json"},{"CVE":"CVE-2012-1144","severity":"important","public_date":"2012-03-02T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800607","bugzilla_description":"CVE-2012-1144 freetype: insufficient checking of first outline point in TTF parser (#35689)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-122|CWE-787)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1144.json"},{"CVE":"CVE-2012-1142","severity":"important","public_date":"2012-03-01T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800604","bugzilla_description":"CVE-2012-1142 freetype: incorrect computation of number of glyphs in FNT_Face_Init() for FNT/FON files (#35659)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-122|CWE-787)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1142.json"},{"CVE":"CVE-2012-1139","severity":"low","public_date":"2012-02-28T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800598","bugzilla_description":"CVE-2012-1139 freetype: data buffer underflow in BDF parser _bdf_parse_glyphs() (#35656)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"(CWE-121|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1139.json"},{"CVE":"CVE-2012-1140","severity":"low","public_date":"2012-02-28T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800600","bugzilla_description":"CVE-2012-1140 freetype: multiple buffer over-read in PS parser conversion functions (#35657)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1140.json"},{"CVE":"CVE-2012-1141","severity":"low","public_date":"2012-02-28T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800602","bugzilla_description":"CVE-2012-1141 freetype: BDF parser _bdf_list_split() fails to properly initialize field array (#35658)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1141.json"},{"CVE":"CVE-2012-1143","severity":"low","public_date":"2012-02-28T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800606","bugzilla_description":"CVE-2012-1143 freetype: integer divide by zero in FT_DivFix() (#35660)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1143.json"},{"CVE":"CVE-2012-1135","severity":"low","public_date":"2012-02-27T00:00:00Z","advisories":[],"bugzilla":"800593","bugzilla_description":"CVE-2012-1135 freetype: heap off by one read in boundary check for NPUSHB and NPUSHW instructions in TTF BIC (#35640)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1135.json"},{"CVE":"CVE-2012-1136","severity":"important","public_date":"2012-02-27T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800594","bugzilla_description":"CVE-2012-1136 freetype: uninitialized pointer use in BDF parser _bdf_parse_glyphs() (#35641)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1136.json"},{"CVE":"CVE-2012-1137","severity":"low","public_date":"2012-02-27T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800595","bugzilla_description":"CVE-2012-1137 freetype: heap buffer off-by-one in BDF parsing _bdf_list_ensure() (#35643)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1137.json"},{"CVE":"CVE-2012-1138","severity":"low","public_date":"2012-02-27T00:00:00Z","advisories":[],"bugzilla":"800597","bugzilla_description":"CVE-2012-1138 freetype: heap OOB read in the MIRP instruction implementation in TTF BCI (#35646)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1138.json"},{"CVE":"CVE-2012-1131","severity":"low","public_date":"2012-02-26T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800589","bugzilla_description":"CVE-2012-1131 freetype: incorrect type cast allowing input sanity check bypass in ft_smooth_render_generic() (#35604)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-704->CWE-122","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1131.json"},{"CVE":"CVE-2012-1126","severity":"low","public_date":"2012-02-23T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800581","bugzilla_description":"CVE-2012-1126 freetype: heap buffer over-read in BDF parsing _bdf_is_atom() (#35597, #35598)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1126.json"},{"CVE":"CVE-2012-1127","severity":"low","public_date":"2012-02-23T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800583","bugzilla_description":"CVE-2012-1127 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#35599, #35600)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1127.json"},{"CVE":"CVE-2012-1128","severity":"low","public_date":"2012-02-23T00:00:00Z","advisories":[],"bugzilla":"800584","bugzilla_description":"CVE-2012-1128 freetype: NULL dereference in the SHZ instruction implementation in TTF BCI (#35601)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1128.json"},{"CVE":"CVE-2012-1129","severity":null,"public_date":"2012-02-23T00:00:00Z","advisories":[],"bugzilla":"800585","bugzilla_description":"CVE-2012-1129 freetype: heap off-by-one buffer underflow in Type42 parser t42_parse_sfnts() (#35602)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1129.json"},{"CVE":"CVE-2012-1130","severity":"low","public_date":"2012-02-23T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800587","bugzilla_description":"CVE-2012-1130 freetype: heap buffer over-read in PCF parser pcf_get_properties() (#35603)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1130.json"},{"CVE":"CVE-2012-1132","severity":"low","public_date":"2012-02-23T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800590","bugzilla_description":"CVE-2012-1132 freetype: heap buffer over-read in Type1 parser parse_subrs() (#35606)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1132.json"},{"CVE":"CVE-2012-1133","severity":"important","public_date":"2012-02-23T00:00:00Z","advisories":[],"bugzilla":"800591","bugzilla_description":"CVE-2012-1133 freetype: heap buffer underflow in BDF parser _bdf_parse_glyphs() (#35607)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-122|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1133.json"},{"CVE":"CVE-2012-1134","severity":"important","public_date":"2012-02-23T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800592","bugzilla_description":"CVE-2012-1134 freetype: limited heap buffer overflow in Type1 parser T1_Get_Private_Dict() (#35608)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-122|CWE-787)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1134.json"},{"CVE":"CVE-2011-3439","severity":"important","public_date":"2011-11-10T00:00:00Z","advisories":["RHSA-2011:1455","RHSA-2012:0094"],"bugzilla":"753799","bugzilla_description":"CVE-2011-3439 freetype: Multiple security flaws when loading CID-keyed Type 1 fonts","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.1.9-21.el4","freetype-0:2.2.1-28.el5_7.2","freetype-0:2.3.11-6.el6_1.8","freetype-0:2.2.1-28.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3439.json"},{"CVE":"CVE-2011-3256","severity":"important","public_date":"2011-10-12T00:00:00Z","advisories":["RHSA-2011:1402","RHSA-2012:0094"],"bugzilla":"746226","bugzilla_description":"CVE-2011-3256 freetype: FT_Bitmap_New integer overflow, FreeType TT_Vary_Get_Glyph_Deltas improper input validation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["freetype-0:2.3.11-6.el6_1.7","freetype-0:2.2.1-28.el5_6.1","freetype-0:2.2.1-28.el5_7.1","freetype-0:2.1.9-20.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3256.json"},{"CVE":"CVE-2011-2895","severity":"important","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2011:1154","RHSA-2011:1155","RHSA-2011:1161","RHSA-2011:1834"],"bugzilla":"727624","bugzilla_description":"CVE-2011-2895 BSD compress LZW decoder buffer overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libXfont-0:1.2.2-1.0.3.el5_6","libXfont-0:1.4.1-2.el6_1","freetype-0:2.1.9-19.el4","xorg-x11-0:6.8.2-1.EL.69","libXfont-0:1.2.2-1.0.4.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2895.json"},{"CVE":"CVE-2011-3193","severity":"moderate","public_date":"2011-07-19T00:00:00Z","advisories":["RHSA-2011:1323","RHSA-2011:1324","RHSA-2011:1325","RHSA-2011:1326","RHSA-2011:1327","RHSA-2011:1328"],"bugzilla":"733118","bugzilla_description":"CVE-2011-3193 qt/harfbuzz buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qt-1:4.6.2-17.el6_1.1","pango-0:1.14.9-8.el5_7.3","qt4-0:4.2.1-1.el5_7.1","frysk-0:0.0.1.2007.08.03-8.el4","evolution28-pango-0:1.14.9-13.el4_11","qt-1:4.6.2-20.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3193.json"},{"CVE":"CVE-2011-0226","severity":"important","public_date":"2011-07-08T00:00:00Z","advisories":["RHSA-2011:1085"],"bugzilla":"722701","bugzilla_description":"CVE-2011-0226 freetype: postscript type1 font parsing vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.3.11-6.el6_1.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0226.json"},{"CVE":"CVE-2010-3855","severity":"important","public_date":"2010-10-11T00:00:00Z","advisories":["RHSA-2010:0889"],"bugzilla":"645275","bugzilla_description":"CVE-2010-3855 Freetype : Heap based buffer overflow in ft_var_readpackedpoints()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["freetype-0:2.2.1-28.el5_5.1","freetype-0:2.1.9-17.el4_8.1","freetype-0:2.3.11-6.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3855.json"},{"CVE":"CVE-2010-3311","severity":"important","public_date":"2010-09-30T00:00:00Z","advisories":["RHSA-2010:0737","RHSA-2010:0736","RHSA-2010:0864"],"bugzilla":"623625","bugzilla_description":"CVE-2010-3311 freetype: Input stream position error by processing Compact Font Format (CFF) font files","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["freetype-0:2.1.9-17.el4.8","freetype-0:2.1.4-18.el3","freetype-0:2.3.11-6.el6_0.1","freetype-0:2.2.1-28.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3311.json"},{"CVE":"CVE-2010-3054","severity":"low","public_date":"2010-08-13T00:00:00Z","advisories":["RHSA-2010:0737","RHSA-2010:0736"],"bugzilla":"625632","bugzilla_description":"CVE-2010-3054 freetype: DoS via nested \"seac\" calls","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["freetype-0:2.1.9-17.el4.8","freetype-0:2.1.4-18.el3","freetype-0:2.2.1-28.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3054.json"},{"CVE":"CVE-2010-1797","severity":"important","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2010:0607"],"bugzilla":"621144","bugzilla_description":"CVE-2010-1797 FreeType: Multiple stack overflows by processing CFF opcodes","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.2.1-26.el5_5","freetype-0:2.1.4-16.el3","freetype-0:2.1.9-15.el4.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1797.json"},{"CVE":"CVE-2010-2808","severity":"important","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2010:0737","RHSA-2010:0864"],"bugzilla":"621907","bugzilla_description":"CVE-2010-2808 FreeType: Stack-based buffer overflow by processing certain LWFN fonts","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["freetype-0:2.1.9-17.el4.8","freetype-0:2.3.11-6.el6_0.1","freetype-0:2.2.1-28.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2808.json"},{"CVE":"CVE-2010-2806","severity":"important","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2010:0737","RHSA-2010:0736","RHSA-2010:0864"],"bugzilla":"621980","bugzilla_description":"CVE-2010-2806 FreeType: Heap-based buffer overflow by processing FontType42 fonts with negative length of SFNT strings (FT bug #30656)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["freetype-0:2.1.9-17.el4.8","freetype-0:2.1.4-18.el3","freetype-0:2.3.11-6.el6_0.1","freetype-0:2.2.1-28.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2806.json"},{"CVE":"CVE-2010-2807","severity":"moderate","public_date":"2010-08-05T00:00:00Z","advisories":[],"bugzilla":"625627","bugzilla_description":"CVE-2010-2807 freetype: incorrect integer data types used during bounds checking","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2807.json"},{"CVE":"CVE-2010-2805","severity":"important","public_date":"2010-08-04T00:00:00Z","advisories":["RHSA-2010:0864"],"bugzilla":"625626","bugzilla_description":"CVE-2010-2805 freetype: FT_Stream_EnterFrame() does not properly validate certain position values","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P/","CWE":null,"affected_packages":["freetype-0:2.3.11-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2805.json"},{"CVE":"CVE-2010-2541","severity":"low","public_date":"2010-07-22T00:00:00Z","advisories":["RHSA-2010:0578","RHSA-2010:0577"],"bugzilla":"617342","bugzilla_description":"CVE-2010-2541 Freetype ftmulti buffer overflow","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.1.9-14.el4.8","freetype-0:2.2.1-25.el5_5","freetype-0:2.1.4-15.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2541.json"},{"CVE":"CVE-2010-2497","severity":"important","public_date":"2010-06-09T00:00:00Z","advisories":[],"bugzilla":"613154","bugzilla_description":"CVE-2010-2497 freetype: integer underflow vulnerability","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2497.json"},{"CVE":"CVE-2010-2498","severity":"important","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0578"],"bugzilla":"613160","bugzilla_description":"CVE-2010-2498 freetype: invalid free vulnerability with possible heap corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.1.9-14.el4.8","freetype-0:2.2.1-25.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2498.json"},{"CVE":"CVE-2010-2499","severity":"important","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0578"],"bugzilla":"613162","bugzilla_description":"CVE-2010-2499 freetype: buffer overflow vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.1.9-14.el4.8","freetype-0:2.2.1-25.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2499.json"},{"CVE":"CVE-2010-2500","severity":"important","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0578","RHSA-2010:0577"],"bugzilla":"613167","bugzilla_description":"CVE-2010-2500 freetype: integer overflow vulnerability in smooth/ftgrays.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["freetype-0:2.1.9-14.el4.8","freetype-0:2.2.1-25.el5_5","freetype-0:2.1.4-15.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2500.json"},{"CVE":"CVE-2010-2519","severity":"important","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0578"],"bugzilla":"613194","bugzilla_description":"CVE-2010-2519 freetype: heap buffer overflow vulnerability when processing certain font files","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["freetype-0:2.1.9-14.el4.8","freetype-0:2.2.1-25.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2519.json"},{"CVE":"CVE-2010-2527","severity":"low","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0578","RHSA-2010:0577"],"bugzilla":"614557","bugzilla_description":"CVE-2010-2527 Freetype demos multiple buffer overflows","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.1.9-14.el4.8","freetype-0:2.2.1-25.el5_5","freetype-0:2.1.4-15.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2527.json"},{"CVE":"CVE-2009-0946","severity":"important","public_date":"2009-03-20T00:00:00Z","advisories":["RHSA-2009:1062","RHSA-2009:1061","RHSA-2009:0329"],"bugzilla":"491384","bugzilla_description":"CVE-2009-0946 freetype: multiple integer overflows","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["freetype-0:2.0.3-17.el21","freetype-0:2.1.9-10.el4.7","freetype-0:2.2.1-21.el5_3","freetype-0:2.1.4-12.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0946.json"},{"CVE":"CVE-2008-1806","severity":"important","public_date":"2008-06-10T00:00:00Z","advisories":["RHSA-2008:0558","RHSA-2008:0556"],"bugzilla":"450768","bugzilla_description":"CVE-2008-1806 FreeType PFB integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["freetype-0:2.1.9-8.el4.6","freetype-0:2.2.1-20.el5_2","freetype-0:2.1.4-10.el3","freetype-0:2.0.3-15.el21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1806.json"},{"CVE":"CVE-2008-1807","severity":"important","public_date":"2008-06-10T00:00:00Z","advisories":["RHSA-2008:0558","RHSA-2008:0556"],"bugzilla":"450773","bugzilla_description":"CVE-2008-1807 FreeType invalid free() flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freetype-0:2.1.9-8.el4.6","freetype-0:2.2.1-20.el5_2","freetype-0:2.1.4-10.el3","freetype-0:2.0.3-15.el21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1807.json"},{"CVE":"CVE-2008-1808","severity":"important","public_date":"2008-06-10T00:00:00Z","advisories":["RHSA-2009:0329","RHSA-2008:0558","RHSA-2008:0556"],"bugzilla":"450774","bugzilla_description":"CVE-2008-1808 FreeType off-by-one flaws","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["freetype-0:2.1.9-10.el4.7","freetype-0:2.1.9-8.el4.6","freetype-0:2.2.1-20.el5_2","freetype-0:2.1.4-10.el3","freetype-0:2.0.3-15.el21","freetype-0:2.1.4-12.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1808.json"},{"CVE":"CVE-2007-2754","severity":"moderate","public_date":"2007-04-27T00:00:00Z","advisories":["RHSA-2009:1062","RHSA-2009:0329","RHSA-2007:0403"],"bugzilla":"240200","bugzilla_description":"CVE-2007-2754 freetype integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["freetype-0:2.1.4-7.el3","freetype-0:2.1.9-6.el4","freetype-0:2.0.3-10.el21","freetype-0:2.0.3-17.el21","freetype-0:2.1.9-10.el4.7","freetype-0:2.2.1-19.el5","freetype-0:2.1.4-12.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2754.json"},{"CVE":"CVE-2007-1351","severity":"important","public_date":"2007-04-03T00:00:00Z","advisories":["RHSA-2007:0132","RHSA-2007:0125","RHSA-2007:0126","RHSA-2007:0150"],"bugzilla":"235265","bugzilla_description":"CVE-2007-1351 Multiple font integer overflows (CVE-2007-1352)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freetype-0:2.2.1-17.el5","freetype-0:2.1.9-5.el4","XFree86-0:4.3.0-120.EL","xorg-x11-0:6.8.2-1.EL.13.37.7","freetype-0:2.1.4-6.el3","libXfont-0:1.2.2-1.0.2.el5","XFree86-0:4.1.0-82.EL"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1351.json"},{"CVE":"CVE-2006-3467","severity":"moderate","public_date":"2006-07-18T00:00:00Z","advisories":["RHSA-2006:0635","RHSA-2006:0634","RHSA-2006:0500"],"bugzilla":"487070","bugzilla_description":"CVE-2006-3467 freetype: integer overflow vulnerability due to incomplete fix for CVE-2006-1861","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["XFree86-0:4.3.0-111.EL","freetype-0:2.1.9-1.rhel4.4","freetype-0:2.1.4-4.0.rhel3.2","xorg-x11-0:6.8.2-1.EL.13.37"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3467.json"},{"CVE":"CVE-2006-0747","severity":"moderate","public_date":"2006-05-15T00:00:00Z","advisories":["RHSA-2006:0500"],"bugzilla":"1618019","bugzilla_description":"CVE-2006-0747 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freetype-0:2.1.9-1.rhel4.4","freetype-0:2.1.4-4.0.rhel3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0747.json"},{"CVE":"CVE-2006-2661","severity":"low","public_date":"2006-05-15T00:00:00Z","advisories":["RHSA-2006:0500"],"bugzilla":"1618110","bugzilla_description":"CVE-2006-2661 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freetype-0:2.1.9-1.rhel4.4","freetype-0:2.1.4-4.0.rhel3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2661.json"},{"CVE":"CVE-2006-1861","severity":"moderate","public_date":"2006-05-15T00:00:00Z","advisories":["RHSA-2009:1062","RHSA-2006:0500","RHSA-2009:0329"],"bugzilla":"484437","bugzilla_description":"CVE-2006-1861 freetype: multiple integer overflow vulnerabilities","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["freetype-0:2.0.3-17.el21","freetype-0:2.1.9-10.el4.7","freetype-0:2.1.9-1.rhel4.4","freetype-0:2.1.4-4.0.rhel3.2","freetype-0:2.1.4-12.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1861.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/frei0r-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/frei0r-plugins_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/frei0r-plugins_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fribidi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fribidi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fribidi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fribidi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fribidi_security_api_results.json
new file mode 100644
index 0000000..d3599a3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fribidi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-18397","severity":"important","public_date":"2019-11-07T00:00:00Z","advisories":["RHSA-2019:4326","RHSA-2019:4361","RHSA-2020:0291"],"bugzilla":"1768750","bugzilla_description":"CVE-2019-18397 fribidi: buffer overflow in fribidi_get_par_embedding_levels_ex() in lib/fribidi-bidi.c leading to denial of service and possible code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-400","affected_packages":["fribidi-0:1.0.4-7.el8_1","fribidi-0:1.0.2-1.el7_7.1","fribidi-0:1.0.4-6.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18397.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ftp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ftp_security_api_results.json
new file mode 100644
index 0000000..90f35a2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ftp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10916","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2020:1045"],"bugzilla":"1610349","bugzilla_description":"CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["lftp-0:4.4.8-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10916.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2015-1419","severity":null,"public_date":"2015-01-19T00:00:00Z","advisories":[],"bugzilla":"1187041","bugzilla_description":"CVE-2015-1419 vsftpd: access restrictions bypass","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1419.json"},{"CVE":"CVE-2011-2523","severity":"important","public_date":"2011-07-04T00:00:00Z","advisories":[],"bugzilla":"1778781","bugzilla_description":"CVE-2011-2523 vsftpd: backdoor which opens a shell on port 6200/tcp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2011-2199","severity":"moderate","public_date":"2011-06-10T00:00:00Z","advisories":[],"bugzilla":"713950","bugzilla_description":"CVE-2011-2199 tftp: buffer overflow when setting utimeout option","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2199.json"},{"CVE":"CVE-2011-0762","severity":"important","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0337"],"bugzilla":"681667","bugzilla_description":"CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["vsftpd-0:2.0.1-9.el4","vsftpd-0:2.0.5-16.el5_6.1","vsftpd-0:2.2.2-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0762.json"},{"CVE":"CVE-2010-2251","severity":"moderate","public_date":"2010-05-17T00:00:00Z","advisories":["RHSA-2010:0585"],"bugzilla":"591580","bugzilla_description":"CVE-2010-2251 lftp: multiple HTTP client download filename vulnerability [OCERT 2010-001]","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["lftp-0:3.7.11-4.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2251.json"},{"CVE":"CVE-2007-5962","severity":"low","public_date":"2008-05-21T00:00:00Z","advisories":["RHSA-2008:0295"],"bugzilla":"397011","bugzilla_description":"CVE-2007-5962 vsftpd: memory leak when deny_file option is set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["vsftpd-0:2.0.5-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5962.json"},{"CVE":"CVE-2007-2348","severity":"low","public_date":"2007-01-09T00:00:00Z","advisories":["RHSA-2009:1278"],"bugzilla":"236238","bugzilla_description":"CVE-2007-2348 lftp mirror --script does not escape names and targets of symbolic links","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["lftp-0:3.7.11-4.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2348.json"},{"CVE":"CVE-2008-2375","severity":"moderate","public_date":"2006-06-28T00:00:00Z","advisories":["RHSA-2008:0680","RHSA-2008:0579"],"bugzilla":"453376","bugzilla_description":"CVE-2008-2375 older vsftpd authentication memory leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["vsftpd-0:2.0.1-6.el4","vsftpd-0:1.2.1-3E.16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2375.json"},{"CVE":"CVE-2005-0372","severity":"moderate","public_date":"2005-02-14T00:00:00Z","advisories":["RHSA-2005:410"],"bugzilla":"1617512","bugzilla_description":"CVE-2005-0372 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gftp-1:2.0.17-5","gftp-1:2.0.14-4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0372.json"},{"CVE":"CVE-2003-0963","severity":"moderate","public_date":"2003-12-13T00:00:00Z","advisories":["RHSA-2003:403","RHSA-2003:404"],"bugzilla":"1617106","bugzilla_description":"CVE-2003-0963 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["lftp-0:2.6.3-5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0963.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuse-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuse-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuse-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuse-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuse-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuse-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuse_security_api_results.json
new file mode 100644
index 0000000..2c48cc7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuse_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10906","severity":"moderate","public_date":"2018-07-24T00:00:00Z","advisories":["RHSA-2018:3324"],"bugzilla":"1602996","bugzilla_description":"CVE-2018-10906 fuse: bypass of the \"user_allow_other\" restriction when SELinux is active","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["fuse-0:2.9.2-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10906.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-9878","severity":"moderate","public_date":"2016-12-21T00:00:00Z","advisories":["RHSA-2017:3115"],"bugzilla":"1408164","bugzilla_description":"CVE-2016-9878 Spring Framework: Directory Traversal in the Spring Framework ResourceServlet","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9878.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-1000229","severity":"moderate","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2017:0868"],"bugzilla":"1360275","bugzilla_description":"CVE-2016-1000229 swagger-ui: cross-site scripting in key names","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000229.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-1233","severity":"moderate","public_date":"2016-01-20T00:00:00Z","advisories":[],"bugzilla":"1301011","bugzilla_description":"CVE-2016-1233 fuse: udev rule creates world-writeable /dev/cuse","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1233.json"},{"CVE":"CVE-2015-5348","severity":"moderate","public_date":"2015-12-17T00:00:00Z","advisories":["RHSA-2016:2035"],"bugzilla":"1292849","bugzilla_description":"CVE-2015-5348 Camel: Java object deserialisation in Jetty/Servlet","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-5181","severity":"moderate","public_date":"2015-10-06T00:00:00Z","advisories":["RHSA-2015:2556","RHSA-2015:2557"],"bugzilla":"1248804","bugzilla_description":"CVE-2015-5181 A-MQ Console: script injection into queue name","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5181.json"},{"CVE":"CVE-2015-5182","severity":"moderate","public_date":"2015-10-06T00:00:00Z","advisories":[],"bugzilla":"1248809","bugzilla_description":"CVE-2015-5182 A-MQ Console: CSRF via form-based API call","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5182.json"},{"CVE":"CVE-2015-5183","severity":"low","public_date":"2015-10-06T00:00:00Z","advisories":["RHSA-2020:4154","RHSA-2018:2840"],"bugzilla":"1249182","bugzilla_description":"CVE-2015-5183 Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5183.json"},{"CVE":"CVE-2015-5184","severity":"low","public_date":"2015-10-06T00:00:00Z","advisories":["RHSA-2016:1424"],"bugzilla":"1249183","bugzilla_description":"CVE-2015-5184 Console: CORS headers set to allow all in Red Hat AMQ","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5184.json"},{"CVE":"CVE-2015-1926","severity":"moderate","public_date":"2015-07-30T00:00:00Z","advisories":[],"bugzilla":"1213007","bugzilla_description":"CVE-2015-1926 Portlet spec: Information disclosure via missing access restriction in resource dispatching","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1926.json"},{"CVE":"CVE-2015-0851","severity":"moderate","public_date":"2015-07-21T00:00:00Z","advisories":[],"bugzilla":"1248504","bugzilla_description":"CVE-2015-0851 xmltooling: incorrect processing of well-formed but invalid XML","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0851.json"},{"CVE":"CVE-2014-3576","severity":"moderate","public_date":"2015-07-17T00:00:00Z","advisories":["RHSA-2015:0137"],"bugzilla":"1198306","bugzilla_description":"CVE-2014-3576 ActiveMQ: DoS via unauthenticated remote shutdown command","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3576.json"},{"CVE":"CVE-2015-3253","severity":"important","public_date":"2015-07-16T00:00:00Z","advisories":["RHSA-2016:0066","RHSA-2016:1376","RHSA-2016:0118","RHSA-2015:2556","RHSA-2015:2557","RHSA-2015:2558","RHSA-2017:2486","RHSA-2017:2596"],"bugzilla":"1243934","bugzilla_description":"CVE-2015-3253 groovy: remote execution of untrusted code in class MethodClosure","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502->CWE-284","affected_packages":["groovy-0:1.8.9-8.el7_4","rh-maven33-groovy-0:1.8.9-7.19.el6","rh-maven33-groovy-0:1.8.9-7.19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"9.6"},{"CVE":"CVE-2015-3192","severity":"moderate","public_date":"2015-06-30T00:00:00Z","advisories":["RHSA-2016:2035","RHSA-2016:2036","RHSA-2016:1592","RHSA-2016:1593","RHSA-2016:1218","RHSA-2016:1219"],"bugzilla":"1239002","bugzilla_description":"CVE-2015-3192 Spring Framework: denial-of-service attack with XML input","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3192.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2014-8175","severity":"important","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2015:1177","RHSA-2015:1176"],"bugzilla":"1205112","bugzilla_description":"CVE-2014-8175 JBoss Fuse: insufficient access permissions checks when accessing Hawtio console","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8175.json"},{"CVE":"CVE-2015-1833","severity":"moderate","public_date":"2015-05-21T00:00:00Z","advisories":[],"bugzilla":"1223883","bugzilla_description":"CVE-2015-1833 jackrabbit: Jackrabbit WebDAV bundle susceptible to XXE/XEE attack","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1833.json"},{"CVE":"CVE-2015-3202","severity":"low","public_date":"2015-05-21T00:00:00Z","advisories":[],"bugzilla":"1224103","bugzilla_description":"CVE-2015-3202 fuse: incorrect filtering of environment variables leading to privilege escalation","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3202.json"},{"CVE":"CVE-2015-2156","severity":"low","public_date":"2015-05-09T00:00:00Z","advisories":[],"bugzilla":"1222923","bugzilla_description":"CVE-2015-2156 netty: HttpOnly cookie bypass","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2156.json"},{"CVE":"CVE-2015-3337","severity":"low","public_date":"2015-04-24T00:00:00Z","advisories":[],"bugzilla":"1216014","bugzilla_description":"CVE-2015-3337 elasticsearch: directory traversal flaw","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3337.json"},{"CVE":"CVE-2015-0899","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":[],"bugzilla":"1207099","bugzilla_description":"CVE-2015-0899 Apache Struts 1: input validation bypass in MultiPageValidator","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0899.json"},{"CVE":"CVE-2014-0219","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1095974","bugzilla_description":"CVE-2014-0219 Karaf: denial of service via shutdown port","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0219.json"},{"CVE":"CVE-2015-0264","severity":"moderate","public_date":"2015-03-17T00:00:00Z","advisories":["RHSA-2015:1538","RHSA-2015:2558","RHSA-2015:1041","RHSA-2015:1539"],"bugzilla":"1203341","bugzilla_description":"CVE-2015-0264 Camel: XXE via XPath expression evaluation","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0264.json"},{"CVE":"CVE-2015-0263","severity":"moderate","public_date":"2015-03-17T00:00:00Z","advisories":["RHSA-2015:1538","RHSA-2015:2558","RHSA-2015:1041","RHSA-2015:1539"],"bugzilla":"1203344","bugzilla_description":"CVE-2015-0263 Camel: XXE in via SAXSource expansion","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0263.json"},{"CVE":"CVE-2014-3643","severity":"moderate","public_date":"2015-03-10T00:00:00Z","advisories":[],"bugzilla":"1143758","bugzilla_description":"CVE-2014-3643 jersey: XXE via parameter entities","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3643.json"},{"CVE":"CVE-2015-1796","severity":"important","public_date":"2015-02-25T00:00:00Z","advisories":["RHSA-2015:1177","RHSA-2015:1176"],"bugzilla":"1196619","bugzilla_description":"CVE-2015-1796 OpenSAML Java: PKIX Trust Engines Exhibit Critical Flaw In Trusted Names Evaluation","cvss_score":6.3,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1796.json"},{"CVE":"CVE-2015-2080","severity":"important","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1196254","bugzilla_description":"CVE-2015-2080 jetty: remote unauthenticated credential exposure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2080.json"},{"CVE":"CVE-2015-1427","severity":"important","public_date":"2015-02-11T00:00:00Z","advisories":["RHSA-2017:0868"],"bugzilla":"1191969","bugzilla_description":"CVE-2015-1427 elasticsearch: remote code execution via Groovy sandbox bypass","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1427.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2015-0226","severity":"important","public_date":"2015-02-10T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2016:1376","RHSA-2015:0773","RHSA-2015:1177","RHSA-2015:1176","RHSA-2015:0849","RHSA-2015:0848","RHSA-2015:0847","RHSA-2015:0846"],"bugzilla":"1191446","bugzilla_description":"CVE-2015-0226 wss4j: Apache WSS4J is vulnerable to Bleichenbacher's attack (incomplete fix for CVE-2011-2487)","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:N/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0226.json"},{"CVE":"CVE-2015-0227","severity":"moderate","public_date":"2015-02-10T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0773","RHSA-2015:1177","RHSA-2015:1176","RHSA-2015:0849","RHSA-2015:0848","RHSA-2015:0847","RHSA-2015:0846"],"bugzilla":"1191451","bugzilla_description":"CVE-2015-0227 wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0227.json"},{"CVE":"CVE-2015-8837","severity":"low","public_date":"2015-02-07T00:00:00Z","advisories":[],"bugzilla":"863091","bugzilla_description":"CVE-2015-8837 fuseiso: Stack-based buffer overflow when scanning directory structure for absolute path entries","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8837.json"},{"CVE":"CVE-2015-8836","severity":"moderate","public_date":"2015-02-06T00:00:00Z","advisories":[],"bugzilla":"863102","bugzilla_description":"CVE-2015-8836 fuseiso: Integer overflow, leading to heap buffer overflow when reading certain ISO ZF blocks","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8836.json"},{"CVE":"CVE-2014-3600","severity":"moderate","public_date":"2015-02-05T00:00:00Z","advisories":["RHSA-2015:0138","RHSA-2015:0137"],"bugzilla":"1133649","bugzilla_description":"CVE-2014-3600 Apache ActiveMQ: XXE via XPath expression evaluation","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3600.json"},{"CVE":"CVE-2014-3612","severity":"important","public_date":"2015-02-05T00:00:00Z","advisories":["RHSA-2015:0138","RHSA-2015:0137"],"bugzilla":"1135912","bugzilla_description":"CVE-2014-3612 ActiveMQ JAAS: LDAPLoginModule allows empty password authentication","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3612.json"},{"CVE":"CVE-2014-8125","severity":"moderate","public_date":"2014-12-22T00:00:00Z","advisories":["RHSA-2015:0851","RHSA-2015:0850"],"bugzilla":"1169553","bugzilla_description":"CVE-2014-8125 jBPM: BPMN2 file processing XXE in Process Execution","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8125.json"},{"CVE":"CVE-2014-3627","severity":"moderate","public_date":"2014-11-21T00:00:00Z","advisories":[],"bugzilla":"1170479","bugzilla_description":"CVE-2014-3627 hadoop: file disclosure flaw","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3627.json"},{"CVE":"CVE-2014-8090","severity":"moderate","public_date":"2014-11-13T00:00:00Z","advisories":["RHSA-2014:1911","RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1159927","bugzilla_description":"CVE-2014-8090 ruby: REXML incomplete fix for CVE-2014-8080","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-776","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:1.8.7.374-3.el6_6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8090.json"},{"CVE":"CVE-2014-3625","severity":"moderate","public_date":"2014-11-11T00:00:00Z","advisories":["RHSA-2015:0236","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0234"],"bugzilla":"1165936","bugzilla_description":"CVE-2014-3625 Spring Framework: directory traversal flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3625.json"},{"CVE":"CVE-2014-8080","severity":"moderate","public_date":"2014-10-27T00:00:00Z","advisories":["RHSA-2014:1911","RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1157709","bugzilla_description":"CVE-2014-8080 ruby: REXML billion laughs attack via parameter entity expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-776","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:1.8.7.374-3.el6_6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8080.json"},{"CVE":"CVE-2014-3623","severity":"moderate","public_date":"2014-10-25T00:00:00Z","advisories":["RHSA-2015:0236","RHSA-2015:0851","RHSA-2015:0675","RHSA-2015:0850","RHSA-2014:2019","RHSA-2014:2020"],"bugzilla":"1157304","bugzilla_description":"CVE-2014-3623 Apache WSS4J / Apache CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3623.json"},{"CVE":"CVE-2014-3584","severity":"moderate","public_date":"2014-10-25T00:00:00Z","advisories":["RHSA-2014:0400"],"bugzilla":"1157330","bugzilla_description":"CVE-2014-3584 Apache CXF: Denial of Service (DoS) via invalid JAX-RS SAML tokens","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-130->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3584.json"},{"CVE":"CVE-2014-6439","severity":"low","public_date":"2014-10-01T00:00:00Z","advisories":[],"bugzilla":"1149945","bugzilla_description":"CVE-2014-6439 Elasticsearch: CSRF via insecure CORS default configuration","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-345->CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6439.json"},{"CVE":"CVE-2014-3578","severity":"moderate","public_date":"2014-09-05T00:00:00Z","advisories":["RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234"],"bugzilla":"1131882","bugzilla_description":"CVE-2014-3578 Spring Framework: Directory traversal","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3578.json"},{"CVE":"CVE-2014-3577","severity":"important","public_date":"2014-08-18T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2016:1773","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1082","RHSA-2014:1320","RHSA-2014:1166","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1146","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2016:1931","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1834","RHSA-2014:1833","RHSA-2015:1177","RHSA-2014:1836","RHSA-2015:1176","RHSA-2014:1835"],"bugzilla":"1129074","bugzilla_description":"CVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","httpcomponents-client-0:4.2.5-5.el7_0","org.ovirt.engine-root-0:3.5.0-29","jakarta-commons-httpclient-1:3.1-16.el7_0","thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1","jakarta-commons-httpclient-1:3.1-0.9.el6_5","jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2012-6153","severity":"important","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1320","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1098","RHSA-2014:1834","RHSA-2014:1833","RHSA-2014:1836","RHSA-2014:1835"],"bugzilla":"1129916","bugzilla_description":"CVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","devtoolset-2-httpcomponents-client-0:4.2.1-6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","org.ovirt.engine-root-0:3.5.0-29","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6153.json"},{"CVE":"CVE-2014-3603","severity":"important","public_date":"2014-08-13T00:00:00Z","advisories":[],"bugzilla":"1131823","bugzilla_description":"CVE-2014-3603 OpenSAML Java: HTTPS Connections Via HTTP Resources Do Not Perform Hostname Verification","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3603.json"},{"CVE":"CVE-2014-5075","severity":"moderate","public_date":"2014-08-05T00:00:00Z","advisories":["RHSA-2015:1176"],"bugzilla":"1127276","bugzilla_description":"CVE-2014-5075 smack: MitM vulnerability","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5075.json"},{"CVE":"CVE-2014-3518","severity":"important","public_date":"2014-07-16T00:00:00Z","advisories":["RHSA-2014:0887"],"bugzilla":"1112545","bugzilla_description":"CVE-2014-3518 JBoss EAP/AS 5: Remote code execution via unauthenticated JMX/RMI connector","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3518.json"},{"CVE":"CVE-2014-3558","severity":"low","public_date":"2014-07-16T00:00:00Z","advisories":["RHSA-2014:1288","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0125","RHSA-2015:0234","RHSA-2014:1287","RHSA-2014:1286","RHSA-2014:1285"],"bugzilla":"1120495","bugzilla_description":"CVE-2014-3558 Hibernate Validator: JSM bypass via ReflectionHelper","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3558.json"},{"CVE":"CVE-2014-4651","severity":"low","public_date":"2014-06-19T00:00:00Z","advisories":["RHSA-2015:1176"],"bugzilla":"1112877","bugzilla_description":"CVE-2014-4651 JClouds: predictable tmp file creation in ScriptBuilder Statements","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4651.json"},{"CVE":"CVE-2014-0225","severity":"moderate","public_date":"2014-05-28T00:00:00Z","advisories":["RHSA-2014:1351"],"bugzilla":"1110110","bugzilla_description":"CVE-2014-0225 Spring Framework: Information disclosure via SSRF","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0225.json"},{"CVE":"CVE-2014-3004","severity":"moderate","public_date":"2014-05-27T00:00:00Z","advisories":[],"bugzilla":"1108639","bugzilla_description":"CVE-2014-3004 castor: XML External Entity (XXE) attacks via a crafted XML document","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3004.json"},{"CVE":"CVE-2014-0193","severity":"low","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2014:1019","RHSA-2014:0910","RHSA-2015:0234","RHSA-2014:0818","RHSA-2014:1351","RHSA-2014:1021","RHSA-2014:1020"],"bugzilla":"1092783","bugzilla_description":"CVE-2014-0193 netty: DoS via memory exhaustion during data aggregation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["netty-0:3.6.9-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0193.json"},{"CVE":"CVE-2014-0109","severity":"moderate","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0799","RHSA-2015:0851","RHSA-2015:0850","RHSA-2014:0797","RHSA-2014:0798","RHSA-2014:1351"],"bugzilla":"1093526","bugzilla_description":"CVE-2014-0109 Apache CXF: HTML content posted to SOAP endpoint could cause OOM errors","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0109.json"},{"CVE":"CVE-2014-0110","severity":"moderate","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0799","RHSA-2015:0851","RHSA-2015:0850","RHSA-2014:0797","RHSA-2014:0798","RHSA-2014:1351"],"bugzilla":"1093527","bugzilla_description":"CVE-2014-0110 Apache CXF: Large invalid content could cause temporary space to fill","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0110.json"},{"CVE":"CVE-2014-0034","severity":"moderate","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0799","RHSA-2015:0851","RHSA-2015:0850","RHSA-2014:0797","RHSA-2014:0798","RHSA-2014:1351"],"bugzilla":"1093529","bugzilla_description":"CVE-2014-0034 Apache CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0034.json"},{"CVE":"CVE-2014-0035","severity":"low","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0799","RHSA-2015:0851","RHSA-2015:0850","RHSA-2014:0797","RHSA-2014:0798","RHSA-2014:1351"],"bugzilla":"1093530","bugzilla_description":"CVE-2014-0035 Apache CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0035.json"},{"CVE":"CVE-2014-0168","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:1351"],"bugzilla":"1084838","bugzilla_description":"CVE-2014-0168 Jolokia: cross-site request forgery (CSRF)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0168.json"},{"CVE":"CVE-2014-0114","severity":"important","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0498","RHSA-2014:0474","RHSA-2014:0497","RHSA-2018:2669","RHSA-2019:2995","RHSA-2014:0511","RHSA-2014:0500"],"bugzilla":"1091938","bugzilla_description":"CVE-2014-0114 Apache Struts 1: Class Loader manipulation via request parameters","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-470","affected_packages":["struts-0:1.2.9-4jpp.8.el5_10","struts-0:1.3.10-6.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0114.json"},{"CVE":"CVE-2014-0085","severity":"low","public_date":"2014-04-14T00:00:00Z","advisories":["RHSA-2014:0400","RHSA-2014:0401"],"bugzilla":"1067265","bugzilla_description":"CVE-2014-0085 Fuse: admin user cleartext password appears in logging","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0085.json"},{"CVE":"CVE-2014-0120","severity":"moderate","public_date":"2014-04-14T00:00:00Z","advisories":[],"bugzilla":"1072681","bugzilla_description":"CVE-2014-0120 hawtio-karaf-terminal: cross-site request forgery (CSRF)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0120.json"},{"CVE":"CVE-2014-0121","severity":"critical","public_date":"2014-04-14T00:00:00Z","advisories":[],"bugzilla":"1072716","bugzilla_description":"CVE-2014-0121 hawtio-karaf-terminal: remote code execution due to missing authentication","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0121.json"},{"CVE":"CVE-2014-2734","severity":"low","public_date":"2014-04-10T00:00:00Z","advisories":[],"bugzilla":"1091156","bugzilla_description":"CVE-2014-2734 ruby: SSL signature spoofing flaw","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2734.json"},{"CVE":"CVE-2014-0005","severity":"moderate","public_date":"2014-03-31T00:00:00Z","advisories":["RHSA-2014:0344","RHSA-2014:0345","RHSA-2015:1009","RHSA-2014:0343","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0234"],"bugzilla":"1049736","bugzilla_description":"CVE-2014-0005 PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0005.json"},{"CVE":"CVE-2014-0107","severity":"important","public_date":"2014-03-24T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:1290","RHSA-2014:0590","RHSA-2014:1291","RHSA-2015:1888","RHSA-2014:1351","RHSA-2014:0591","RHSA-2014:0454","RHSA-2014:1995","RHSA-2014:1059","RHSA-2014:0453","RHSA-2014:0348","RHSA-2014:1007","RHSA-2014:1369","RHSA-2014:0818","RHSA-2014:0819"],"bugzilla":"1080248","bugzilla_description":"CVE-2014-0107 Xalan-Java: insufficient constraints in secure processing feature","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el5","xalan-j2-0:2.7.0-6jpp.2","xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el6","xalan-j2-0:2.7.1-12_patch_08.ep5.el6","xalan-j2-0:2.7.1-12_patch_08.ep5.el4","xalan-j2-0:2.7.1-12_patch_08.ep5.el5","xalan-j2-0:2.7.0-9.9.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0107.json"},{"CVE":"CVE-2014-0074","severity":"important","public_date":"2014-03-04T00:00:00Z","advisories":["RHSA-2014:1369","RHSA-2014:1351"],"bugzilla":"1072603","bugzilla_description":"CVE-2014-0074 Apache Shiro: successful authentication without specifying user name or password","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0074.json"},{"CVE":"CVE-2014-0002","severity":"moderate","public_date":"2014-02-28T00:00:00Z","advisories":["RHSA-2014:0323","RHSA-2014:0452","RHSA-2014:0459","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"1049675","bugzilla_description":"CVE-2014-0002 Camel: XML eXternal Entity (XXE) flaw in XSLT component","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0002.json"},{"CVE":"CVE-2014-0003","severity":"important","public_date":"2014-02-28T00:00:00Z","advisories":["RHSA-2014:0245","RHSA-2014:0323","RHSA-2014:0452","RHSA-2014:0254","RHSA-2014:0459","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"1049692","bugzilla_description":"CVE-2014-0003 Camel: remote code execution via XSL","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0003.json"},{"CVE":"CVE-2014-0097","severity":"important","public_date":"2014-02-28T00:00:00Z","advisories":[],"bugzilla":"1075302","bugzilla_description":"CVE-2014-0097 Spring Framework: empty passwords may bypass authentication","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0097.json"},{"CVE":"CVE-2014-1904","severity":"moderate","public_date":"2014-02-13T00:00:00Z","advisories":["RHSA-2014:0400","RHSA-2014:0401"],"bugzilla":"1075296","bugzilla_description":"CVE-2014-1904 Spring Framework: cross-site scripting flaw when using Spring MVC","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1904.json"},{"CVE":"CVE-2014-0050","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0252","RHSA-2014:0253","RHSA-2014:0473","RHSA-2014:0400","RHSA-2014:0452","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0401","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1062337","bugzilla_description":"CVE-2014-0050 apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el6","tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0050.json"},{"CVE":"CVE-2014-0054","severity":"moderate","public_date":"2014-01-31T00:00:00Z","advisories":["RHSA-2014:0400","RHSA-2014:0401"],"bugzilla":"1075328","bugzilla_description":"CVE-2014-0054 Spring Framework: incomplete fix for CVE-2013-7315/CVE-2013-6429","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0054.json"},{"CVE":"CVE-2014-0364","severity":"moderate","public_date":"2014-01-31T00:00:00Z","advisories":["RHSA-2015:1176","RHSA-2014:0818","RHSA-2014:0819"],"bugzilla":"1093276","bugzilla_description":"CVE-2014-0364 smack: IQ response spoofing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0364.json"},{"CVE":"CVE-2013-6430","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0400","RHSA-2014:0401"],"bugzilla":"1039783","bugzilla_description":"CVE-2013-6430 Spring Framework: org.spring.web.util.JavaScriptUtils.javaScriptEscape insufficient escaping of characters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6430.json"},{"CVE":"CVE-2013-6429","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0400","RHSA-2014:0401"],"bugzilla":"1053290","bugzilla_description":"CVE-2013-6429 Spring Framework: XML External Entity (XXE) injection flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6429.json"},{"CVE":"CVE-2013-7285","severity":"important","public_date":"2013-12-22T00:00:00Z","advisories":["RHSA-2014:0323","RHSA-2014:1059","RHSA-2015:1009","RHSA-2014:0389","RHSA-2014:0452","RHSA-2014:0216","RHSA-2014:1007","RHSA-2014:0374","RHSA-2015:1888","RHSA-2014:0371","RHSA-2014:0294","RHSA-2014:0372"],"bugzilla":"1051277","bugzilla_description":"CVE-2013-7285 XStream: remote code execution due to insecure XML deserialization","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-94","affected_packages":["jasperreports-server-pro-0:5.5.0-6.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7285.json"},{"CVE":"CVE-2013-6440","severity":"moderate","public_date":"2013-12-11T00:00:00Z","advisories":["RHSA-2014:1995","RHSA-2014:0452","RHSA-2014:1290","RHSA-2014:0171","RHSA-2014:0172","RHSA-2014:1291","RHSA-2014:0170","RHSA-2014:0195"],"bugzilla":"1043332","bugzilla_description":"CVE-2013-6440 XMLTooling-J/OpenSAML Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6440.json"},{"CVE":"CVE-2014-3120","severity":"important","public_date":"2013-12-09T00:00:00Z","advisories":["RHSA-2014:1171","RHSA-2014:1170","RHSA-2014:1186"],"bugzilla":"1124252","bugzilla_description":"CVE-2014-3120 elasticsearch: remote code execution flaw via dynamic scripting","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-749","affected_packages":["katello-configure-0:1.4.5.1-3.el6sam"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3120.json"},{"CVE":"CVE-2013-4517","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":["RHSA-2015:0851","RHSA-2015:0675","RHSA-2015:0850","RHSA-2014:0171","RHSA-2014:0172","RHSA-2014:0170","RHSA-2014:0582","RHSA-2014:0473","RHSA-2014:0195","RHSA-2014:0400","RHSA-2014:1728","RHSA-2014:1727","RHSA-2014:1726","RHSA-2014:1725"],"bugzilla":"1045257","bugzilla_description":"CVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature DoS Attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["xml-security-0:1.5.6-3.el6","xml-security-0:1.5.6-3.ep5.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el6","xml-security-0:1.5.6-3.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4517.json"},{"CVE":"CVE-2013-4002","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0269","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2015:0773","RHSA-2013:1081","RHSA-2013:1060","RHSA-2014:0414","RHSA-2014:1823","RHSA-2014:1822","RHSA-2014:1821","RHSA-2013:1505","RHSA-2013:1447","RHSA-2014:1319","RHSA-2013:1059","RHSA-2014:1818"],"bugzilla":"1019176","bugzilla_description":"CVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP, 8017298)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","xerces-j2-0:2.7.1-12.7.el6_5","xerces-j2-0:2.11.0-17.el7_0","java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4002.json"},{"CVE":"CVE-2013-2186","severity":"important","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1429","RHSA-2013:1428","RHSA-2013:1448","RHSA-2016:0070","RHSA-2013:1430","RHSA-2013:1442"],"bugzilla":"974814","bugzilla_description":"CVE-2013-2186 Apache commons-fileupload: Arbitrary file upload via deserialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-626","affected_packages":["jakarta-commons-fileupload-1:1.1.1-7.7.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2186.json"},{"CVE":"CVE-2013-4330","severity":"important","public_date":"2013-09-30T00:00:00Z","advisories":["RHSA-2014:0124","RHSA-2014:0245","RHSA-2014:0254","RHSA-2013:1410","RHSA-2013:1862","RHSA-2014:0140"],"bugzilla":"1011726","bugzilla_description":"CVE-2013-4330 Camel: remote code execution via header field manipulation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4330.json"},{"CVE":"CVE-2013-2192","severity":"moderate","public_date":"2013-08-23T00:00:00Z","advisories":["RHSA-2014:0400","RHSA-2014:0037","RHSA-2014:0401"],"bugzilla":"1001326","bugzilla_description":"CVE-2013-2192 hadoop: man-in-the-middle vulnerability","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jasperreports-server-pro-0:5.5.0-4.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2192.json"},{"CVE":"CVE-2013-2193","severity":"moderate","public_date":"2013-08-23T00:00:00Z","advisories":[],"bugzilla":"1001464","bugzilla_description":"CVE-2013-2193 hbase: man-in-the-middle vulnerability","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2193.json"},{"CVE":"CVE-2013-4152","severity":"moderate","public_date":"2013-08-22T00:00:00Z","advisories":["RHSA-2014:0212","RHSA-2014:0245","RHSA-2014:0400","RHSA-2014:0254","RHSA-2014:0401"],"bugzilla":"1000186","bugzilla_description":"CVE-2013-4152 Spring Framework: XML External Entity (XXE) injection flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4152.json"},{"CVE":"CVE-2013-7397","severity":"important","public_date":"2013-07-30T00:00:00Z","advisories":["RHSA-2015:0851","RHSA-2015:0850","RHSA-2015:1551","RHSA-2015:1176"],"bugzilla":"1133769","bugzilla_description":"CVE-2013-7397 async-http-client: SSL/TLS certificate verification is disabled under certain conditions","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7397.json"},{"CVE":"CVE-2013-4073","severity":"moderate","public_date":"2013-06-27T00:00:00Z","advisories":["RHSA-2013:1090","RHSA-2013:1137","RHSA-2013:1103"],"bugzilla":"979251","bugzilla_description":"CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby193-ruby-0:1.9.3.448-38.el6","ruby193-ruby-0:1.9.3.429-34.2.el6ost","ruby-0:1.8.5-31.el5_9","ruby-0:1.8.7.352-12.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4073.json"},{"CVE":"CVE-2013-2160","severity":"moderate","public_date":"2013-06-26T00:00:00Z","advisories":["RHSA-2013:1185","RHSA-2013:1437","RHSA-2013:1028"],"bugzilla":"929197","bugzilla_description":"CVE-2013-2160 cxf, jbossws-cxf, apache-cxf: Multiple denial of service flaws in the StAX parser","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2160.json"},{"CVE":"CVE-2013-2172","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:1220","RHSA-2014:0212","RHSA-2014:0400","RHSA-2013:1209","RHSA-2013:1218","RHSA-2013:1207","RHSA-2014:1369","RHSA-2013:1219","RHSA-2013:1208","RHSA-2013:1217","RHSA-2013:1437","RHSA-2013:1853","RHSA-2013:1375"],"bugzilla":"999263","bugzilla_description":"CVE-2013-2172 Apache Santuario XML Security for Java: XML signature spoofing","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-290","affected_packages":["xml-security-0:1.5.1-3_patch01.ep5.el6","xml-security-0:1.5.1-3_patch01.ep5.el5","xml-security-0:1.5.1-3_patch01.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2172.json"},{"CVE":"CVE-2013-1768","severity":"important","public_date":"2013-06-12T00:00:00Z","advisories":["RHSA-2013:1185","RHSA-2013:1862"],"bugzilla":"984034","bugzilla_description":"CVE-2013-1768 openjpa: Remote arbitrary code execution by creating a serialized object and leveraging improperly secured server programs","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1768.json"},{"CVE":"CVE-2013-2035","severity":"low","public_date":"2013-05-13T00:00:00Z","advisories":["RHSA-2014:1290","RHSA-2014:1291","RHSA-2014:1995","RHSA-2014:0245","RHSA-2014:0400","RHSA-2014:0254","RHSA-2014:0029","RHSA-2014:0401","RHSA-2013:1029","RHSA-2015:0034","RHSA-2014:1904","RHSA-2013:1786","RHSA-2013:1784","RHSA-2013:1785"],"bugzilla":"958618","bugzilla_description":"CVE-2013-2035 HawtJNI: predictable temporary file name leading to local arbitrary code execution","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-377","affected_packages":["jansi-0:1.9-5.redhat_3.1.ep6.el5","activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2035.json"},{"CVE":"CVE-2012-4067","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"952855","bugzilla_description":"CVE-2012-4067 eucalyptus: Insecure XML Parsing Vulnerability in Walrus","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4067.json"},{"CVE":"CVE-2013-2296","severity":"low","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"952858","bugzilla_description":"CVE-2013-2296 eucalyptus: Missing Authorization Vulnerability in Walrus","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2296.json"},{"CVE":"CVE-2013-1879","severity":"moderate","public_date":"2013-03-21T00:00:00Z","advisories":["RHSA-2013:1029"],"bugzilla":"924446","bugzilla_description":"CVE-2013-1879 ActiveMQ: XSS vulnerability in scheduled.jsp","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1879.json"},{"CVE":"CVE-2013-1880","severity":"moderate","public_date":"2013-03-21T00:00:00Z","advisories":["RHSA-2013:1029"],"bugzilla":"924447","bugzilla_description":"CVE-2013-1880 ActiveMQ: XSS vulnerability in portfolioPublish demo application","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1880.json"},{"CVE":"CVE-2012-5575","severity":"important","public_date":"2013-03-08T00:00:00Z","advisories":["RHSA-2013:0839","RHSA-2013:0834","RHSA-2013:0833","RHSA-2013:0943","RHSA-2013:0874","RHSA-2013:0873","RHSA-2013:1437","RHSA-2013:0953","RHSA-2013:0876","RHSA-2013:1028","RHSA-2013:1006","RHSA-2013:0875"],"bugzilla":"880443","bugzilla_description":"CVE-2012-5575 jbossws-native, jbossws-cxf, apache-cxf: XML encryption backwards compatibility attacks","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:N/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5575.json"},{"CVE":"CVE-2013-0248","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"922146","bugzilla_description":"CVE-2013-0248 jakarta-commons-fileupload, apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0248.json"},{"CVE":"CVE-2013-1821","severity":"moderate","public_date":"2013-02-22T00:00:00Z","advisories":["RHSA-2013:1185","RHSA-2013:0612","RHSA-2013:1028","RHSA-2013:0611","RHSA-2013:1147"],"bugzilla":"914716","bugzilla_description":"CVE-2013-1821 ruby: entity expansion DoS vulnerability in REXML","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ruby-0:1.8.5-29.el5_9","ruby-0:1.8.7.352-10.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1821.json"},{"CVE":"CVE-2013-0269","severity":"moderate","public_date":"2013-02-11T00:00:00Z","advisories":["RHSA-2013:1185","RHSA-2013:0701","RHSA-2013:0686","RHSA-2013:1028","RHSA-2013:1147"],"bugzilla":"909029","bugzilla_description":"CVE-2013-0269 rubygem-json: Denial of Service and SQL Injection","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["rubygem-json-0:1.7.3-2.el6_3","ruby193-ruby-0:1.9.3.327-28.el6","rubygem-json-0:1.7.3-2.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0269.json"},{"CVE":"CVE-2014-0363","severity":"moderate","public_date":"2013-02-06T00:00:00Z","advisories":["RHSA-2015:1176","RHSA-2014:0818","RHSA-2014:0819"],"bugzilla":"1093273","bugzilla_description":"CVE-2014-0363 smack: incorrect X.509 certificate validation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0363.json"},{"CVE":"CVE-2013-1624","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2014:0400","RHSA-2015:1009","RHSA-2014:0401","RHSA-2014:0896","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"908428","bugzilla_description":"CVE-2013-1624 bouncycastle: TLS CBC padding timing attack","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1624.json"},{"CVE":"CVE-2013-7398","severity":"important","public_date":"2013-01-09T00:00:00Z","advisories":["RHSA-2015:0851","RHSA-2015:0850","RHSA-2015:1551","RHSA-2015:1176"],"bugzilla":"1133773","bugzilla_description":"CVE-2013-7398 async-http-client: missing hostname verification for SSL certificates","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7398.json"},{"CVE":"CVE-2012-6551","severity":"moderate","public_date":"2012-11-02T00:00:00Z","advisories":["RHSA-2013:1029"],"bugzilla":"955907","bugzilla_description":"CVE-2012-6551 activemq: DoS by resource consumption via HTTP requests to sample webapp","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6551.json"},{"CVE":"CVE-2013-3060","severity":"important","public_date":"2012-11-02T00:00:00Z","advisories":["RHSA-2013:1029","RHSA-2013:1221"],"bugzilla":"955908","bugzilla_description":"CVE-2013-3060 activemq: Unauthenticated access to web console","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3060.json"},{"CVE":"CVE-2012-6092","severity":"moderate","public_date":"2012-10-18T00:00:00Z","advisories":["RHSA-2013:1029"],"bugzilla":"955906","bugzilla_description":"CVE-2012-6092 activemq: Multiple XSS flaws in web demos","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6092.json"},{"CVE":"CVE-2015-0250","severity":"moderate","public_date":"2012-07-25T00:00:00Z","advisories":["RHSA-2015:2560","RHSA-2016:0041","RHSA-2016:0042","RHSA-2015:2559"],"bugzilla":"1203762","bugzilla_description":"CVE-2015-0250 batik: XML External Entity (XXE) injection in SVG parsing","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0250.json"},{"CVE":"CVE-2010-3879","severity":"low","public_date":"2010-11-02T00:00:00Z","advisories":["RHSA-2011:1083"],"bugzilla":"651183","bugzilla_description":"CVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["fuse-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3879.json"},{"CVE":"CVE-2011-0541","severity":"low","public_date":"2010-11-02T00:00:00Z","advisories":["RHSA-2011:1083"],"bugzilla":"651183","bugzilla_description":"CVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["fuse-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0541.json"},{"CVE":"CVE-2011-0542","severity":"low","public_date":"2010-11-02T00:00:00Z","advisories":["RHSA-2011:1083"],"bugzilla":"651183","bugzilla_description":"CVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["fuse-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0542.json"},{"CVE":"CVE-2011-0543","severity":"low","public_date":"2010-11-02T00:00:00Z","advisories":["RHSA-2011:1083"],"bugzilla":"651183","bugzilla_description":"CVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["fuse-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0543.json"},{"CVE":"CVE-2010-0789","severity":"low","public_date":"2010-01-26T00:00:00Z","advisories":[],"bugzilla":"577279","bugzilla_description":"CVE-2010-0789 fuse: Race condition by umount (fusermount) operations","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0789.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuseiso_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuseiso_security_api_results.json
new file mode 100644
index 0000000..5bac527
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fuseiso_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-8837","severity":"low","public_date":"2015-02-07T00:00:00Z","advisories":[],"bugzilla":"863091","bugzilla_description":"CVE-2015-8837 fuseiso: Stack-based buffer overflow when scanning directory structure for absolute path entries","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8837.json"},{"CVE":"CVE-2015-8836","severity":"moderate","public_date":"2015-02-06T00:00:00Z","advisories":[],"bugzilla":"863102","bugzilla_description":"CVE-2015-8836 fuseiso: Integer overflow, leading to heap buffer overflow when reading certain ISO ZF blocks","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8836.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupd_security_api_results.json
new file mode 100644
index 0000000..31f3461
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10713","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:4115","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3273","RHSA-2020:3271","RHSA-2020:4172","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1825243","bugzilla_description":"CVE-2020-10713 grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787->CWE-78","affected_packages":["grub2-1:2.02-0.86.el7_8","fwupd-0:1.1.4-7.el8_2","fwupdate-0:12-6.el7_8","grub2-1:2.02-87.el8_2","shim-0:15-14.el8_2","shim-0:15-7.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10713.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-10759","severity":"low","public_date":"2020-06-05T00:00:00Z","advisories":[],"bugzilla":"1844316","bugzilla_description":"CVE-2020-10759 fwupd: Possible bypass in signature verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10759.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"5.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupdate-efi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupdate-efi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupdate-efi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupdate-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupdate-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupdate-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupdate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupdate_security_api_results.json
new file mode 100644
index 0000000..30d5eec
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fwupdate_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10713","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:4115","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3273","RHSA-2020:3271","RHSA-2020:4172","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1825243","bugzilla_description":"CVE-2020-10713 grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787->CWE-78","affected_packages":["grub2-1:2.02-0.86.el7_8","fwupd-0:1.1.4-7.el8_2","fwupdate-0:12-6.el7_8","grub2-1:2.02-87.el8_2","shim-0:15-14.el8_2","shim-0:15-7.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10713.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.2"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fxload_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fxload_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/fxload_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gamin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gamin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gamin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gavl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gavl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gavl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gawk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gawk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gawk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gc_security_api_results.json
new file mode 100644
index 0000000..63d46d6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17451","severity":"low","public_date":"2019-10-07T00:00:00Z","advisories":["RHSA-2020:1797"],"bugzilla":"1771668","bugzilla_description":"CVE-2019-17451 binutils: integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["binutils-0:2.30-73.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17451.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-13627","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1764018","bugzilla_description":"CVE-2019-13627 libgcrypt: ECDSA timing attack allowing private key leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-15847","severity":"moderate","public_date":"2019-09-02T00:00:00Z","advisories":["RHSA-2020:2274","RHSA-2020:0924","RHSA-2020:1864"],"bugzilla":"1755523","bugzilla_description":"CVE-2019-15847 gcc: POWER9 \"DARN\" RNG intrinsic produces repeated output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":["devtoolset-8-gcc-0:8.3.1-3.2.el7","devtoolset-8-gcc-0:8.3.1-3.2.el6","devtoolset-9-gcc-0:9.3.1-2.el7","gcc-0:8.3.1-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14250","severity":"low","public_date":"2019-08-09T00:00:00Z","advisories":[],"bugzilla":"1739490","bugzilla_description":"CVE-2019-14250 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14250.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-12904","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730320","bugzilla_description":"CVE-2019-12904 Libgcrypt: physical addresses being available to other processes leads to a flush-and-reload side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12904.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-12972","severity":"low","public_date":"2019-06-17T00:00:00Z","advisories":[],"bugzilla":"1831873","bugzilla_description":"CVE-2019-12972 binutils: out-of-bounds read in setup_group in bfd/elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12972.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-12886","severity":"moderate","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1715823","bugzilla_description":"CVE-2018-12886 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12886.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-20712","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1668269","bugzilla_description":"CVE-2018-20712 libiberty: heap-based buffer over-read in d_expression_1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20712.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-20673","severity":"moderate","public_date":"2018-12-27T00:00:00Z","advisories":[],"bugzilla":"1664709","bugzilla_description":"CVE-2018-20673 libiberty: Integer overflow in demangle_template() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20673.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20657","severity":"low","public_date":"2018-12-18T00:00:00Z","advisories":["RHSA-2019:3352"],"bugzilla":"1664708","bugzilla_description":"CVE-2018-20657 libiberty: Memory leak in demangle_template function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["gdb-0:8.2-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000221","severity":"low","public_date":"2018-08-24T00:00:00Z","advisories":[],"bugzilla":"1622242","bugzilla_description":"CVE-2018-1000221 pkgconf: 1 byte out of bounds read for 0 length keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000221.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-6829","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1543437","bugzilla_description":"CVE-2018-6829 libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6829.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-5345","severity":"important","public_date":"2017-12-19T00:00:00Z","advisories":["RHSA-2018:0350"],"bugzilla":"1527296","bugzilla_description":"CVE-2018-5345 gcab: Extracting malformed .cab files causes stack smashing potentially leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["gcab-0:0.7-4.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5345.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-7700","severity":"low","public_date":"2017-08-31T00:00:00Z","advisories":[],"bugzilla":"1536198","bugzilla_description":"CVE-2015-7700 pngcrush: double-free in sPLT and png.c file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7700.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-0379","severity":"moderate","public_date":"2017-08-27T00:00:00Z","advisories":[],"bugzilla":"1485921","bugzilla_description":"CVE-2017-0379 libgcrypt: Missing input validation for X25519 curve","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0379.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-7526","severity":"moderate","public_date":"2017-06-29T00:00:00Z","advisories":[],"bugzilla":"1466265","bugzilla_description":"CVE-2017-7526 libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-9526","severity":"low","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1459887","bugzilla_description":"CVE-2017-9526 libgcrypt: Possible timing attack on EdDSA session key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-11671","severity":"low","public_date":"2017-03-25T00:00:00Z","advisories":["RHSA-2018:0849"],"bugzilla":"1475733","bugzilla_description":"CVE-2017-11671 gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gcc-0:4.8.5-28.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11671.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9427","severity":"moderate","public_date":"2016-08-21T00:00:00Z","advisories":[],"bugzilla":"1399674","bugzilla_description":"CVE-2016-9427 gc: Integer overflow in GC_MALLOC_ATOMIC","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9427.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-4973","severity":"moderate","public_date":"2016-08-17T00:00:00Z","advisories":[],"bugzilla":"1324759","bugzilla_description":"CVE-2016-4973 gcc: Targets using libssp for SSP are missing -D_FORTIFY_SOURCE functionality","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4973.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2016-6313","severity":"moderate","public_date":"2016-08-17T00:00:00Z","advisories":["RHSA-2016:2674"],"bugzilla":"1366105","bugzilla_description":"CVE-2016-6313 libgcrypt: PRNG output is predictable","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["libgcrypt-0:1.5.3-13.el7_3.1","libgcrypt-0:1.4.5-12.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6313.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-5386","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1538"],"bugzilla":"1353798","bugzilla_description":"CVE-2016-5386 Go: sets environmental variable  based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["golang-0:1.6.3-1.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5386.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-6131","severity":null,"public_date":"2016-06-29T00:00:00Z","advisories":[],"bugzilla":"1352068","bugzilla_description":"CVE-2016-6131 gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-4492","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333377","bugzilla_description":"CVE-2016-4492 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4493","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333383","bugzilla_description":"CVE-2016-4493 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4493.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4491","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1333371","bugzilla_description":"CVE-2016-4491 gcc: Stack overflow due to infinite recursion in d_print_comp","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2016-4489","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333336","bugzilla_description":"CVE-2016-4489 gcc: Invalid write due to integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4490","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333366","bugzilla_description":"CVE-2016-4490 gcc: Write access violation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4487","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333330","bugzilla_description":"CVE-2016-4487 gcc: Invalid write due to a use-after-free to array btypevec","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4488","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333332","bugzilla_description":"CVE-2016-4488 gcc: Invalid write due to a use-after-free to array ktypevec","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-7511","severity":"low","public_date":"2016-02-08T00:00:00Z","advisories":[],"bugzilla":"1306184","bugzilla_description":"CVE-2015-7511 libgcrypt: side-channel attack on ECDH with Weierstrass curves","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7511.json"},{"CVE":"CVE-2016-2226","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1333322","bugzilla_description":"CVE-2016-2226 gcc: Exploitable buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-3591","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198145","bugzilla_description":"CVE-2014-3591 libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3591.json"},{"CVE":"CVE-2015-0837","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198147","bugzilla_description":"CVE-2015-0837 libgcrypt: last-level cache side-channel attack","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0837.json"},{"CVE":"CVE-2015-5276","severity":"low","public_date":"2015-02-20T00:00:00Z","advisories":[],"bugzilla":"1262846","bugzilla_description":"CVE-2015-5276 gcc: Predictable randomness from std::random_device","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-665->CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5276.json"},{"CVE":"CVE-2015-2158","severity":"low","public_date":"2015-01-28T00:00:00Z","advisories":[],"bugzilla":"1198171","bugzilla_description":"CVE-2015-2158 pngcrush: pngcrush_measure_idat() off-by-one error","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2158.json"},{"CVE":"CVE-2014-5270","severity":"moderate","public_date":"2014-08-08T00:00:00Z","advisories":[],"bugzilla":"1128531","bugzilla_description":"CVE-2014-5270 libgcrypt: ELGAMAL side-channel attack","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5270.json"},{"CVE":"CVE-2014-5044","severity":"moderate","public_date":"2014-06-17T00:00:00Z","advisories":[],"bugzilla":"1122812","bugzilla_description":"CVE-2014-5044 gcc: integer overflow flaws in libgfortran","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5044.json"},{"CVE":"CVE-2013-4576","severity":"moderate","public_date":"2013-12-18T00:00:00Z","advisories":["RHSA-2014:0016"],"bugzilla":"1043327","bugzilla_description":"CVE-2013-4576 gnupg: RSA secret key recovery via acoustic cryptanalysis","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["gnupg-0:1.4.5-18.el5_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4576.json"},{"CVE":"CVE-2013-4242","severity":"moderate","public_date":"2013-07-22T00:00:00Z","advisories":["RHSA-2013:1458","RHSA-2013:1457"],"bugzilla":"988589","bugzilla_description":"CVE-2013-4242 GnuPG susceptible to Yarom/Falkner flush+reload cache side-channel attack","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libgcrypt-0:1.4.4-7.el5_10","libgcrypt-0:1.4.5-11.el6_4","gnupg-0:1.4.5-18.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4242.json"},{"CVE":"CVE-2012-3509","severity":"moderate","public_date":"2012-08-29T00:00:00Z","advisories":[],"bugzilla":"849693","bugzilla_description":"CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3509.json"},{"CVE":"CVE-2012-2673","severity":"moderate","public_date":"2012-06-05T00:00:00Z","advisories":["RHSA-2014:0149","RHSA-2014:0150","RHSA-2013:1500"],"bugzilla":"828878","bugzilla_description":"CVE-2012-2673 gc: malloc() and calloc() overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gc-0:7.1-12.2.el5sat","gc-0:7.1-12.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2673.json"},{"CVE":"CVE-2010-0831","severity":"low","public_date":"2010-06-06T00:00:00Z","advisories":["RHSA-2011:0025"],"bugzilla":"594497","bugzilla_description":"CVE-2010-0831 CVE-2010-2322 fastjar: directory traversal vulnerabilities","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gcc-0:4.1.2-50.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0831.json"},{"CVE":"CVE-2010-2322","severity":"low","public_date":"2010-06-06T00:00:00Z","advisories":["RHSA-2011:0025"],"bugzilla":"594497","bugzilla_description":"CVE-2010-0831 CVE-2010-2322 fastjar: directory traversal vulnerabilities","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gcc-0:4.1.2-50.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2322.json"},{"CVE":"CVE-2009-3736","severity":"moderate","public_date":"2009-11-16T00:00:00Z","advisories":["RHSA-2009:1646","RHSA-2010:0039"],"bugzilla":"537941","bugzilla_description":"CVE-2009-3736 libtool: libltdl may load and execute code from a library in the current directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libtool-0:1.5.6-5.el4_8","gcc-0:4.1.2-46.el5_4.2","libtool-0:1.4.3-7","gcc-0:3.2.3-60","gcc-0:3.4.6-11.el4_8.1","libtool-0:1.5.22-7.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3736.json"},{"CVE":"CVE-2006-3619","severity":"moderate","public_date":"2006-07-13T00:00:00Z","advisories":["RHSA-2007:0473","RHSA-2007:0220"],"bugzilla":"198912","bugzilla_description":"CVE-2006-3619 Directory traversal issue in fastjar","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gcc-0:3.2.3-59","gcc-0:3.4.6-8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3619.json"},{"CVE":"CVE-2002-2439","severity":"moderate","public_date":"2002-08-05T00:00:00Z","advisories":[],"bugzilla":"853906","bugzilla_description":"CVE-2002-2439 gcc: Integer overflow can occur during the computation of the memory region size for new[] operator","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2002-2439.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-c++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-c++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-c++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-gfortran_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-gfortran_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-gfortran_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-gnat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-gnat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-gnat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-objc++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-objc++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-objc++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-objc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-objc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc-objc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc_security_api_results.json
new file mode 100644
index 0000000..17df854
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17451","severity":"low","public_date":"2019-10-07T00:00:00Z","advisories":["RHSA-2020:1797"],"bugzilla":"1771668","bugzilla_description":"CVE-2019-17451 binutils: integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["binutils-0:2.30-73.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17451.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-15847","severity":"moderate","public_date":"2019-09-02T00:00:00Z","advisories":["RHSA-2020:2274","RHSA-2020:0924","RHSA-2020:1864"],"bugzilla":"1755523","bugzilla_description":"CVE-2019-15847 gcc: POWER9 \"DARN\" RNG intrinsic produces repeated output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":["devtoolset-8-gcc-0:8.3.1-3.2.el7","devtoolset-8-gcc-0:8.3.1-3.2.el6","devtoolset-9-gcc-0:9.3.1-2.el7","gcc-0:8.3.1-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14250","severity":"low","public_date":"2019-08-09T00:00:00Z","advisories":[],"bugzilla":"1739490","bugzilla_description":"CVE-2019-14250 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14250.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-12972","severity":"low","public_date":"2019-06-17T00:00:00Z","advisories":[],"bugzilla":"1831873","bugzilla_description":"CVE-2019-12972 binutils: out-of-bounds read in setup_group in bfd/elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12972.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-12886","severity":"moderate","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1715823","bugzilla_description":"CVE-2018-12886 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12886.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-20712","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1668269","bugzilla_description":"CVE-2018-20712 libiberty: heap-based buffer over-read in d_expression_1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20712.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-20673","severity":"moderate","public_date":"2018-12-27T00:00:00Z","advisories":[],"bugzilla":"1664709","bugzilla_description":"CVE-2018-20673 libiberty: Integer overflow in demangle_template() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20673.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20657","severity":"low","public_date":"2018-12-18T00:00:00Z","advisories":["RHSA-2019:3352"],"bugzilla":"1664708","bugzilla_description":"CVE-2018-20657 libiberty: Memory leak in demangle_template function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["gdb-0:8.2-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11671","severity":"low","public_date":"2017-03-25T00:00:00Z","advisories":["RHSA-2018:0849"],"bugzilla":"1475733","bugzilla_description":"CVE-2017-11671 gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gcc-0:4.8.5-28.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11671.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9427","severity":"moderate","public_date":"2016-08-21T00:00:00Z","advisories":[],"bugzilla":"1399674","bugzilla_description":"CVE-2016-9427 gc: Integer overflow in GC_MALLOC_ATOMIC","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9427.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-4973","severity":"moderate","public_date":"2016-08-17T00:00:00Z","advisories":[],"bugzilla":"1324759","bugzilla_description":"CVE-2016-4973 gcc: Targets using libssp for SSP are missing -D_FORTIFY_SOURCE functionality","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4973.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2016-5386","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1538"],"bugzilla":"1353798","bugzilla_description":"CVE-2016-5386 Go: sets environmental variable  based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["golang-0:1.6.3-1.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5386.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-6131","severity":null,"public_date":"2016-06-29T00:00:00Z","advisories":[],"bugzilla":"1352068","bugzilla_description":"CVE-2016-6131 gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-4492","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333377","bugzilla_description":"CVE-2016-4492 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4493","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333383","bugzilla_description":"CVE-2016-4493 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4493.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4491","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1333371","bugzilla_description":"CVE-2016-4491 gcc: Stack overflow due to infinite recursion in d_print_comp","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2016-4489","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333336","bugzilla_description":"CVE-2016-4489 gcc: Invalid write due to integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4490","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333366","bugzilla_description":"CVE-2016-4490 gcc: Write access violation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4487","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333330","bugzilla_description":"CVE-2016-4487 gcc: Invalid write due to a use-after-free to array btypevec","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4488","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333332","bugzilla_description":"CVE-2016-4488 gcc: Invalid write due to a use-after-free to array ktypevec","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-2226","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1333322","bugzilla_description":"CVE-2016-2226 gcc: Exploitable buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-5276","severity":"low","public_date":"2015-02-20T00:00:00Z","advisories":[],"bugzilla":"1262846","bugzilla_description":"CVE-2015-5276 gcc: Predictable randomness from std::random_device","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-665->CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5276.json"},{"CVE":"CVE-2014-5044","severity":"moderate","public_date":"2014-06-17T00:00:00Z","advisories":[],"bugzilla":"1122812","bugzilla_description":"CVE-2014-5044 gcc: integer overflow flaws in libgfortran","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5044.json"},{"CVE":"CVE-2012-3509","severity":"moderate","public_date":"2012-08-29T00:00:00Z","advisories":[],"bugzilla":"849693","bugzilla_description":"CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3509.json"},{"CVE":"CVE-2010-0831","severity":"low","public_date":"2010-06-06T00:00:00Z","advisories":["RHSA-2011:0025"],"bugzilla":"594497","bugzilla_description":"CVE-2010-0831 CVE-2010-2322 fastjar: directory traversal vulnerabilities","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gcc-0:4.1.2-50.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0831.json"},{"CVE":"CVE-2010-2322","severity":"low","public_date":"2010-06-06T00:00:00Z","advisories":["RHSA-2011:0025"],"bugzilla":"594497","bugzilla_description":"CVE-2010-0831 CVE-2010-2322 fastjar: directory traversal vulnerabilities","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gcc-0:4.1.2-50.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2322.json"},{"CVE":"CVE-2009-3736","severity":"moderate","public_date":"2009-11-16T00:00:00Z","advisories":["RHSA-2009:1646","RHSA-2010:0039"],"bugzilla":"537941","bugzilla_description":"CVE-2009-3736 libtool: libltdl may load and execute code from a library in the current directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libtool-0:1.5.6-5.el4_8","gcc-0:4.1.2-46.el5_4.2","libtool-0:1.4.3-7","gcc-0:3.2.3-60","gcc-0:3.4.6-11.el4_8.1","libtool-0:1.5.22-7.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3736.json"},{"CVE":"CVE-2006-3619","severity":"moderate","public_date":"2006-07-13T00:00:00Z","advisories":["RHSA-2007:0473","RHSA-2007:0220"],"bugzilla":"198912","bugzilla_description":"CVE-2006-3619 Directory traversal issue in fastjar","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gcc-0:3.2.3-59","gcc-0:3.4.6-8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3619.json"},{"CVE":"CVE-2002-2439","severity":"moderate","public_date":"2002-08-05T00:00:00Z","advisories":[],"bugzilla":"853906","bugzilla_description":"CVE-2002-2439 gcc: Integer overflow can occur during the computation of the memory region size for new[] operator","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2002-2439.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gconf-editor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gconf-editor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gconf-editor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcr-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcr-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcr-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcr_security_api_results.json
new file mode 100644
index 0000000..fe0e53f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gcr_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-13627","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1764018","bugzilla_description":"CVE-2019-13627 libgcrypt: ECDSA timing attack allowing private key leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2019-12904","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730320","bugzilla_description":"CVE-2019-12904 Libgcrypt: physical addresses being available to other processes leads to a flush-and-reload side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12904.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-6829","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1543437","bugzilla_description":"CVE-2018-6829 libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6829.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2015-7700","severity":"low","public_date":"2017-08-31T00:00:00Z","advisories":[],"bugzilla":"1536198","bugzilla_description":"CVE-2015-7700 pngcrush: double-free in sPLT and png.c file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7700.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-0379","severity":"moderate","public_date":"2017-08-27T00:00:00Z","advisories":[],"bugzilla":"1485921","bugzilla_description":"CVE-2017-0379 libgcrypt: Missing input validation for X25519 curve","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0379.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-7526","severity":"moderate","public_date":"2017-06-29T00:00:00Z","advisories":[],"bugzilla":"1466265","bugzilla_description":"CVE-2017-7526 libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-9526","severity":"low","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1459887","bugzilla_description":"CVE-2017-9526 libgcrypt: Possible timing attack on EdDSA session key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-6313","severity":"moderate","public_date":"2016-08-17T00:00:00Z","advisories":["RHSA-2016:2674"],"bugzilla":"1366105","bugzilla_description":"CVE-2016-6313 libgcrypt: PRNG output is predictable","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["libgcrypt-0:1.5.3-13.el7_3.1","libgcrypt-0:1.4.5-12.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6313.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2015-7511","severity":"low","public_date":"2016-02-08T00:00:00Z","advisories":[],"bugzilla":"1306184","bugzilla_description":"CVE-2015-7511 libgcrypt: side-channel attack on ECDH with Weierstrass curves","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7511.json"},{"CVE":"CVE-2014-3591","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198145","bugzilla_description":"CVE-2014-3591 libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3591.json"},{"CVE":"CVE-2015-0837","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198147","bugzilla_description":"CVE-2015-0837 libgcrypt: last-level cache side-channel attack","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0837.json"},{"CVE":"CVE-2015-2158","severity":"low","public_date":"2015-01-28T00:00:00Z","advisories":[],"bugzilla":"1198171","bugzilla_description":"CVE-2015-2158 pngcrush: pngcrush_measure_idat() off-by-one error","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2158.json"},{"CVE":"CVE-2014-5270","severity":"moderate","public_date":"2014-08-08T00:00:00Z","advisories":[],"bugzilla":"1128531","bugzilla_description":"CVE-2014-5270 libgcrypt: ELGAMAL side-channel attack","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5270.json"},{"CVE":"CVE-2013-4576","severity":"moderate","public_date":"2013-12-18T00:00:00Z","advisories":["RHSA-2014:0016"],"bugzilla":"1043327","bugzilla_description":"CVE-2013-4576 gnupg: RSA secret key recovery via acoustic cryptanalysis","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["gnupg-0:1.4.5-18.el5_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4576.json"},{"CVE":"CVE-2013-4242","severity":"moderate","public_date":"2013-07-22T00:00:00Z","advisories":["RHSA-2013:1458","RHSA-2013:1457"],"bugzilla":"988589","bugzilla_description":"CVE-2013-4242 GnuPG susceptible to Yarom/Falkner flush+reload cache side-channel attack","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libgcrypt-0:1.4.4-7.el5_10","libgcrypt-0:1.4.5-11.el6_4","gnupg-0:1.4.5-18.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4242.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gd_security_api_results.json
new file mode 100644
index 0000000..0b56f28
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-14553","severity":"low","public_date":"2019-12-20T00:00:00Z","advisories":[],"bugzilla":"1600727","bugzilla_description":"CVE-2018-14553 gd: NULL pointer dereference in gdImageClone","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14553.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-1010180","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:1635"],"bugzilla":"1740615","bugzilla_description":"CVE-2019-1010180 gdb: buffer overflow while opening an ELF for debugging leads to Dos, information dislosure and code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["gdb-0:8.2-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010180.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2019-11038","severity":"low","public_date":"2019-06-18T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2019:2519"],"bugzilla":"1724149","bugzilla_description":"CVE-2019-11038 gd: Information disclosure in gdImageCreateFromXbm()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11038.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-3825","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1672825","bugzilla_description":"CVE-2019-3825 gdm: lock screen bypass when timed login is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["gdm-1:3.28.3-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3825.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2019-6978","severity":"low","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2722","RHSA-2020:3943"],"bugzilla":"1671390","bugzilla_description":"CVE-2019-6978 gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libwmf-0:0.2.8.4-44.el7","libwmf-0:0.2.9-8.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20712","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1668269","bugzilla_description":"CVE-2018-20712 libiberty: heap-based buffer over-read in d_expression_1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20712.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-20673","severity":"moderate","public_date":"2018-12-27T00:00:00Z","advisories":[],"bugzilla":"1664709","bugzilla_description":"CVE-2018-20673 libiberty: Integer overflow in demangle_template() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20673.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20657","severity":"low","public_date":"2018-12-18T00:00:00Z","advisories":["RHSA-2019:3352"],"bugzilla":"1664708","bugzilla_description":"CVE-2018-20657 libiberty: Memory leak in demangle_template function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["gdb-0:8.2-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-6977","severity":"moderate","public_date":"2018-12-09T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2019:2519"],"bugzilla":"1672207","bugzilla_description":"CVE-2019-6977 gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6977.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-14424","severity":"moderate","public_date":"2018-08-13T00:00:00Z","advisories":[],"bugzilla":"1606915","bugzilla_description":"CVE-2018-14424 gdm: use-after-free in the GDM daemon","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14424.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2018-10915","severity":"important","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2557","RHSA-2018:2511","RHSA-2018:2566","RHSA-2018:2643","RHSA-2018:2565"],"bugzilla":"1609891","bugzilla_description":"CVE-2018-10915 postgresql: Certain host connection parameters defeat client-side security defenses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665->(CWE-200|CWE-89)","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","postgresql-0:9.2.24-1.el7_5","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rhvm-appliance-0:4.2-20180828.0.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10915.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2018-10925","severity":"important","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566","RHSA-2018:2565"],"bugzilla":"1612619","bugzilla_description":"CVE-2018-10925 postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-1000222","severity":"moderate","public_date":"2018-07-15T00:00:00Z","advisories":[],"bugzilla":"1621953","bugzilla_description":"CVE-2018-1000222 gd: Double free in src/gd_bump.c:gdImageBmpPtr() via crafted JPEG","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000222.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14038","severity":null,"public_date":"2018-07-12T00:00:00Z","advisories":[],"bugzilla":"1686781","bugzilla_description":"CVE-2018-14038 libbfd: remote dos via crafted file in function aout_32_swap_std_reloc_out in aoutx.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14038.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-1058","severity":"moderate","public_date":"2018-03-01T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1547044","bugzilla_description":"CVE-2018-1058 postgresql: Uncontrolled search path element in pg_dump and other client applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1058.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-1053","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1539619","bugzilla_description":"CVE-2018-1053 postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-5711","severity":"low","public_date":"2017-11-25T00:00:00Z","advisories":["RHSA-2019:2519","RHSA-2018:1296"],"bugzilla":"1535246","bugzilla_description":"CVE-2018-5711 gd: Infinite loop in gdImageCreateFromGifCtx() in gd_gif_in.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5711.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-2862","severity":"moderate","public_date":"2017-08-30T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1488817","bugzilla_description":"CVE-2017-2862 gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["gdk-pixbuf2-0:2.36.12-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-6362","severity":"moderate","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1489842","bugzilla_description":"CVE-2017-6362 gd: Double free in the gdImagePngPtr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-12447","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1686828","bugzilla_description":"CVE-2017-12447 gdk-pixbuf: heap-based overflow caused by invalid palette size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12447.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-1000422","severity":"moderate","public_date":"2017-08-07T00:00:00Z","advisories":[],"bugzilla":"1531397","bugzilla_description":"CVE-2017-1000422 gdk-pixbuf: Integer overflow in io-gif.c:gif_get_lzw() can lead to memory corruption and potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-9778","severity":"low","public_date":"2017-06-15T00:00:00Z","advisories":[],"bugzilla":"1466255","bugzilla_description":"CVE-2017-9778 gdb: Malformed section in an ELF binary or a core file can cause memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9778.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12164","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1490417","bugzilla_description":"CVE-2017-12164 gdm: lock screen can be circumvented when autologin is set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12164.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2017-6313","severity":"moderate","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427217","bugzilla_description":"CVE-2017-6313 gdk-pixbuf: Integer underflow in io-icns.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-6314","severity":"low","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427218","bugzilla_description":"CVE-2017-6314 gdk-pixbuf: Infinite loop in io-tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6314.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6312","severity":"low","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427221","bugzilla_description":"CVE-2017-6312 gdk-pixbuf: Out-of-bounds read in io-ico.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6312.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6311","severity":"low","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1427222","bugzilla_description":"CVE-2017-6311 gdk-pixbuf: NULL pointer dereference in gdk-pixbuf-thumbnailer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6311.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10168","severity":"moderate","public_date":"2016-12-17T00:00:00Z","advisories":["RHSA-2017:3221","RHSA-2018:1296"],"bugzilla":"1418986","bugzilla_description":"CVE-2016-10168 gd: Integer overflow in gd_io.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-43.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10168.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-9933","severity":"low","public_date":"2016-12-08T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1404723","bugzilla_description":"CVE-2016-9933 php, gd: Stack overflow in gdImageFillToBorder on truecolor images","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9933.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9317","severity":"moderate","public_date":"2016-11-12T00:00:00Z","advisories":[],"bugzilla":"1417987","bugzilla_description":"CVE-2016-9317 gd: Missing check for oversized images in gdImageCreate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9317.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-6911","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":[],"bugzilla":"1388787","bugzilla_description":"CVE-2016-6911 gd, php: Missing check for OOB read in dynamicGetbuf()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6911.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-8670","severity":"moderate","public_date":"2016-10-10T00:00:00Z","advisories":[],"bugzilla":"1391068","bugzilla_description":"CVE-2016-8670 gd, php: Stack based buffer overflow in dynamicGetbuf","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8670.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-2870","severity":"moderate","public_date":"2016-09-07T00:00:00Z","advisories":[],"bugzilla":"1486735","bugzilla_description":"CVE-2017-2870 gdk-pixbuf2: Integer overflow in tiff_image_parse function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-7568","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":[],"bugzilla":"1380450","bugzilla_description":"CVE-2016-7568 gd, php: Integer overflow in gdImageWebpCtx","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7568.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2016-6912","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":[],"bugzilla":"1417977","bugzilla_description":"CVE-2016-6912 gd, php: Double free in gdImageWebpPtr()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6912.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-10167","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2017:3221","RHSA-2018:1296"],"bugzilla":"1418984","bugzilla_description":"CVE-2016-10167 gd: DoS vulnerability in gdImageCreateFromGd2Ctx()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-43.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-6906","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":[],"bugzilla":"1435313","bugzilla_description":"CVE-2016-6906 gd: Out-of-bounds read in read_image_tga function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10166","severity":"moderate","public_date":"2016-08-06T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2019:2519"],"bugzilla":"1418983","bugzilla_description":"CVE-2016-10166 gd: Unsigned integer underflow _gdContributionsAlloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10166.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-6352","severity":"moderate","public_date":"2016-07-13T00:00:00Z","advisories":[],"bugzilla":"1349751","bugzilla_description":"CVE-2016-6352 gdk-pixbuf: Out-of-bounds write in OneLine32() function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6352.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-6214","severity":"low","public_date":"2016-07-12T00:00:00Z","advisories":[],"bugzilla":"1356466","bugzilla_description":"CVE-2016-6214 gd: Buffer over-read issue when parsing crafted TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6214.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6207","severity":"moderate","public_date":"2016-07-07T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359800","bugzilla_description":"CVE-2016-6207 php,gd: Integer overflow error within _gdContributionsAlloc()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-6905","severity":"low","public_date":"2016-07-05T00:00:00Z","advisories":[],"bugzilla":"1356485","bugzilla_description":"CVE-2016-6905 gd: Out-of-bounds read in function read_image_tga in gd_tga.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6905.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6132","severity":"low","public_date":"2016-06-30T00:00:00Z","advisories":[],"bugzilla":"1352544","bugzilla_description":"CVE-2016-6132 gd: Buffer over-read issue when parsing crafted TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6131","severity":null,"public_date":"2016-06-29T00:00:00Z","advisories":[],"bugzilla":"1352068","bugzilla_description":"CVE-2016-6131 gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6128","severity":"low","public_date":"2016-06-27T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1351603","bugzilla_description":"CVE-2016-6128 gd: Invalid color index not properly handled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6128.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5766","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:2598"],"bugzilla":"1351068","bugzilla_description":"CVE-2016-5766 gd: Integer Overflow in _gd2GetHeader() resulting in heap overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php-0:5.4.16-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5767","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:2598"],"bugzilla":"1351069","bugzilla_description":"CVE-2016-5767 gd: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php-0:5.4.16-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5767.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-1000002","severity":"low","public_date":"2016-06-02T00:00:00Z","advisories":[],"bugzilla":"1391126","bugzilla_description":"CVE-2016-1000002 gdm: Information leak before screen lock","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000002.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2016-5116","severity":"moderate","public_date":"2016-05-29T00:00:00Z","advisories":[],"bugzilla":"1340856","bugzilla_description":"CVE-2016-5116 gd: Information leak due to stack overflow in gdCtxPrintf","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5116.json"},{"CVE":"CVE-2016-6161","severity":"moderate","public_date":"2016-05-08T00:00:00Z","advisories":[],"bugzilla":"1353550","bugzilla_description":"CVE-2016-6161 gd: Global out-of-bounds read when encoding gif from malformed gd2 input","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-4492","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333377","bugzilla_description":"CVE-2016-4492 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4493","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333383","bugzilla_description":"CVE-2016-4493 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4493.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4491","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1333371","bugzilla_description":"CVE-2016-4491 gcc: Stack overflow due to infinite recursion in d_print_comp","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2016-3074","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1321893","bugzilla_description":"CVE-2016-3074 php: Signedness vulnerability causing heap overflow in libgd","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3074.json"},{"CVE":"CVE-2016-4489","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333336","bugzilla_description":"CVE-2016-4489 gcc: Invalid write due to integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4490","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333366","bugzilla_description":"CVE-2016-4490 gcc: Write access violation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4487","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333330","bugzilla_description":"CVE-2016-4487 gcc: Invalid write due to a use-after-free to array btypevec","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4488","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333332","bugzilla_description":"CVE-2016-4488 gcc: Invalid write due to a use-after-free to array ktypevec","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-2226","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1333322","bugzilla_description":"CVE-2016-2226 gcc: Exploitable buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-7552","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHBA-2017:2100"],"bugzilla":"1378894","bugzilla_description":"CVE-2015-7552 gdk-pixbuf: Heap-based buffer overflow in the gdk_pixbuf_flip function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["gdk-pixbuf2-0:2.36.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7552.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-7496","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2017:2128"],"bugzilla":"1283279","bugzilla_description":"CVE-2015-7496 gdm: Crash when holding Escape in log screen","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-364","affected_packages":["gdm-1:3.22.3-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7496.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2015-8875","severity":"moderate","public_date":"2015-10-06T00:00:00Z","advisories":[],"bugzilla":"1337063","bugzilla_description":"CVE-2015-8875 gdk-pixbuf: Integer overflows in various pixops functions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8875.json"},{"CVE":"CVE-2015-7673","severity":"moderate","public_date":"2015-10-01T00:00:00Z","advisories":[],"bugzilla":"1261836","bugzilla_description":"CVE-2015-7673 gdk-pixbuf: Heap overflow and DoS vulnerability when scaling a TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7673.json"},{"CVE":"CVE-2015-7674","severity":"moderate","public_date":"2015-10-01T00:00:00Z","advisories":[],"bugzilla":"1268249","bugzilla_description":"CVE-2015-7674 gdk-pixbuf: Heap overflow when scaling a GIF file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7674.json"},{"CVE":"CVE-2015-4491","severity":"important","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1694","RHSA-2015:1586"],"bugzilla":"1252290","bugzilla_description":"CVE-2015-4491 Mozilla: Heap overflow in gdk-pixbuf when scaling bitmap images (MFSA 2015-88)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","gdk-pixbuf2-0:2.24.1-6.el6_7","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","gdk-pixbuf2-0:2.28.2-5.el7_1","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4491.json"},{"CVE":"CVE-2015-8877","severity":"low","public_date":"2015-07-13T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1338907","bugzilla_description":"CVE-2015-8877 gd: gdImageScaleTwoPass function in gd_interpolation.c uses inconsistent allocate and free approaches","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8877.json"},{"CVE":"CVE-2015-8874","severity":"low","public_date":"2015-06-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1336772","bugzilla_description":"CVE-2015-8874 gd: gdImageFillToBorder deep recursion leading to stack overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8874.json"},{"CVE":"CVE-2014-9709","severity":"low","public_date":"2014-12-13T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1188639","bugzilla_description":"CVE-2014-9709 gd: buffer read overflow in gd_gif_in.c","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-119","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9709.json"},{"CVE":"CVE-2014-3683","severity":"important","public_date":"2014-10-02T00:00:00Z","advisories":[],"bugzilla":"1149081","bugzilla_description":"CVE-2014-3683 rsyslog: integer overflow in PRI parsing","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3683.json"},{"CVE":"CVE-2014-3634","severity":"important","public_date":"2014-09-30T00:00:00Z","advisories":["RHSA-2014:1654","RHSA-2014:1397","RHSA-2014:1671"],"bugzilla":"1142373","bugzilla_description":"CVE-2014-3634 rsyslog: remote syslog PRI vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-129->CWE-119","affected_packages":["rsyslog-0:5.8.10-9.el6_6","rsyslog7-0:7.4.10-3.el6_6","rsyslog5-0:5.8.12-5.el5_11","rsyslog-0:7.4.7-7.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3634.json"},{"CVE":"CVE-2014-2497","severity":"low","public_date":"2014-03-13T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1076676","bugzilla_description":"CVE-2014-2497 gd: NULL pointer dereference in gdImageCreateFromXpm()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php53-0:5.3.3-24.el5","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2497.json"},{"CVE":"CVE-2013-7226","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7226.json"},{"CVE":"CVE-2013-7327","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7327.json"},{"CVE":"CVE-2013-7328","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7328.json"},{"CVE":"CVE-2014-2020","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2020.json"},{"CVE":"CVE-2013-7456","severity":"low","public_date":"2013-09-24T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1340433","bugzilla_description":"CVE-2013-7456 gd: incorrect boundary adjustment in _gdContributionsCalc","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7456.json"},{"CVE":"CVE-2013-4169","severity":"important","public_date":"2013-09-05T00:00:00Z","advisories":["RHSA-2013:1213"],"bugzilla":"988498","bugzilla_description":"CVE-2013-4169 gdm: TOCTTOU race condition on /tmp/.X11-unix","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"(CWE-367|CWE-377)->CWE-552","affected_packages":["gdm-1:2.16.0-59.el5_9.1","initscripts-0:8.45.42-2.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4169.json"},{"CVE":"CVE-2012-3509","severity":"moderate","public_date":"2012-08-29T00:00:00Z","advisories":[],"bugzilla":"849693","bugzilla_description":"CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3509.json"},{"CVE":"CVE-2013-7273","severity":"low","public_date":"2012-07-30T00:00:00Z","advisories":[],"bugzilla":"1050745","bugzilla_description":"CVE-2013-7273 gdm: local DoS possible when cancelling and disable-user-list=true when fallback greeter is used","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7273.json"},{"CVE":"CVE-2012-2370","severity":"low","public_date":"2012-03-25T00:00:00Z","advisories":["RHSA-2013:0135"],"bugzilla":"822468","bugzilla_description":"CVE-2012-2370 gdk-pixbuf: DoS (GLib error and application abort) due to an integer overflow in the XBM image file format loader","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["gtk2-0:2.10.4-29.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2370.json"},{"CVE":"CVE-2012-1177","severity":"moderate","public_date":"2012-03-12T00:00:00Z","advisories":[],"bugzilla":"803335","bugzilla_description":"CVE-2012-1177 libgdata: Absent validation of SSL certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1177.json"},{"CVE":"CVE-2011-2896","severity":"moderate","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181","RHSA-2011:1635","RHSA-2012:0302"],"bugzilla":"727800","bugzilla_description":"CVE-2011-2896 David Koblas' GIF decoder LZW decoder buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gimp-2:2.6.9-4.el6_3.3","cups-1:1.3.7-30.el5","gimp-2:2.2.13-2.0.7.el5_8.5","cups-1:1.4.2-44.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2896.json"},{"CVE":"CVE-2011-2485","severity":"low","public_date":"2011-06-23T00:00:00Z","advisories":[],"bugzilla":"715337","bugzilla_description":"CVE-2011-2485 gdk-pixbuf: incorrect error detection in the GIF image loader","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2485.json"},{"CVE":"CVE-2011-1709","severity":"moderate","public_date":"2011-05-31T00:00:00Z","advisories":[],"bugzilla":"709139","bugzilla_description":"CVE-2011-1709 gdm: URI scheme handling change in glib2 allows running default browser in GDM session","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1709.json"},{"CVE":"CVE-2011-4355","severity":"moderate","public_date":"2011-04-29T00:00:00Z","advisories":["RHSA-2013:0522"],"bugzilla":"703238","bugzilla_description":"CVE-2011-4355 gdb: object file .debug_gdb_scripts section improper input validation","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["gdb-0:7.2-60.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4355.json"},{"CVE":"CVE-2011-0727","severity":"important","public_date":"2011-03-28T00:00:00Z","advisories":["RHSA-2011:0395"],"bugzilla":"688323","bugzilla_description":"CVE-2011-0727 gdm: privilege escalation vulnerability","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["gdm-1:2.30.4-21.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0727.json"},{"CVE":"CVE-2009-3546","severity":"low","public_date":"2009-10-12T00:00:00Z","advisories":["RHSA-2010:0040","RHSA-2010:0003"],"bugzilla":"529213","bugzilla_description":"CVE-2009-3546 gd: insufficient input validation in _gdGetColors()","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","gd-0:2.0.33-9.4.el5_4.2","gd-0:2.0.28-5.4E.el4_8.1","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3546.json"},{"CVE":"CVE-2010-2387","severity":null,"public_date":"2009-02-15T00:00:00Z","advisories":[],"bugzilla":"889384","bugzilla_description":"CVE-2010-2387 gdm: logs user passwors that contain invalid UTF8-encoded characters, in debug mode","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2387.json"},{"CVE":"CVE-2007-3381","severity":"moderate","public_date":"2007-07-30T00:00:00Z","advisories":["RHSA-2007:0777"],"bugzilla":"247655","bugzilla_description":"CVE-2007-3381 Gdm denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdm-1:2.16.0-31.0.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3381.json"},{"CVE":"CVE-2007-3472","severity":"low","public_date":"2007-06-21T00:00:00Z","advisories":["RHSA-2008:0146"],"bugzilla":"276751","bugzilla_description":"CVE-2007-3472 libgd Integer overflow in TrueColor code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3472.json"},{"CVE":"CVE-2007-3473","severity":"low","public_date":"2007-06-21T00:00:00Z","advisories":["RHSA-2008:0146"],"bugzilla":"276791","bugzilla_description":"CVE-2007-3473 libgd NULL pointer dereference when reading a corrupt X bitmap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3473.json"},{"CVE":"CVE-2007-3475","severity":"low","public_date":"2007-06-21T00:00:00Z","advisories":["RHSA-2008:0146"],"bugzilla":"277181","bugzilla_description":"CVE-2007-3475 libgd Denial of service by GIF images without a global color map","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3475.json"},{"CVE":"CVE-2007-3476","severity":"moderate","public_date":"2007-06-21T00:00:00Z","advisories":["RHSA-2008:0146"],"bugzilla":"277201","bugzilla_description":"CVE-2007-3476 libgd Denial of service by corrupted GIF images","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3476.json"},{"CVE":"CVE-2007-2756","severity":"low","public_date":"2007-05-16T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2008:0146","RHSA-2007:0889"],"bugzilla":"242033","bugzilla_description":"CVE-2007-2756 gd / php-gd ImageCreateFromPng infinite loop caused by truncated PNG","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["php-0:5.1.6-15.el5","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:4.3.9-3.22.9","gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2756.json"},{"CVE":"CVE-2009-2697","severity":"low","public_date":"2007-05-11T00:00:00Z","advisories":["RHSA-2009:1364"],"bugzilla":"239818","bugzilla_description":"CVE-2009-2697 gdm not built with tcp_wrappers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gdm-1:2.16.0-56.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2697.json"},{"CVE":"CVE-2007-0455","severity":"low","public_date":"2007-01-26T00:00:00Z","advisories":["RHSA-2007:0153","RHSA-2008:0146","RHSA-2007:0162","RHSA-2007:0155"],"bugzilla":"224607","bugzilla_description":"CVE-2007-0455 gd: buffer overrun","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:5.1.6-3.el4s1.6","php-0:4.3.2-40.ent","gd-0:2.0.33-9.4.el5_1.1","php-0:5.1.6-11.el5","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0455.json"},{"CVE":"CVE-2006-4146","severity":"low","public_date":"2006-08-31T00:00:00Z","advisories":["RHSA-2007:0469","RHSA-2007:0229"],"bugzilla":"203875","bugzilla_description":"CVE-2006-4146 GDB buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.138.el3","gdb-0:6.3.0.0-1.143.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4146.json"},{"CVE":"CVE-2006-4484","severity":"moderate","public_date":"2006-07-16T00:00:00Z","advisories":["RHSA-2008:0146","RHSA-2006:0669","RHSA-2006:0688"],"bugzilla":"431568","bugzilla_description":"CVE-2006-4484 gd: GIF handling buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.18","php-0:5.1.4-1.el4s1.4","php-0:4.3.2-36.ent","gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4484.json"},{"CVE":"CVE-2006-1057","severity":"low","public_date":"2006-04-19T00:00:00Z","advisories":["RHSA-2007:0286"],"bugzilla":"1618026","bugzilla_description":"CVE-2006-1057 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdm-1:2.6.0.5-7.rhel4.15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1057.json"},{"CVE":"CVE-2007-5079","severity":"low","public_date":"2006-02-13T00:00:00Z","advisories":["RHSA-2010:0657"],"bugzilla":"181302","bugzilla_description":"CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gdm-1:2.6.0.5-7.rhel4.19.el4_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5079.json"},{"CVE":"CVE-2005-2975","severity":"important","public_date":"2005-11-15T14:00:00Z","advisories":["RHSA-2005:810","RHSA-2005:811"],"bugzilla":"1617771","bugzilla_description":"CVE-2005-2975 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-13.el3.3","gdk-pixbuf-1:0.22.0-17.el4.3","gtk2-0:2.2.4-19","gtk2-0:2.4.13-18"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2975.json"},{"CVE":"CVE-2005-2976","severity":"important","public_date":"2005-11-15T14:00:00Z","advisories":["RHSA-2005:810"],"bugzilla":"1617772","bugzilla_description":"CVE-2005-2976 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-13.el3.3","gdk-pixbuf-1:0.22.0-17.el4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2976.json"},{"CVE":"CVE-2005-3186","severity":"important","public_date":"2005-11-03T00:00:00Z","advisories":["RHSA-2005:810","RHSA-2005:811"],"bugzilla":"1617795","bugzilla_description":"CVE-2005-3186 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-13.el3.3","gdk-pixbuf-1:0.22.0-17.el4.3","gtk2-0:2.2.4-19","gtk2-0:2.4.13-18"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3186.json"},{"CVE":"CVE-2005-1704","severity":"low","public_date":"2005-05-25T00:00:00Z","advisories":["RHBA-2005:675","RHSA-2005:763","RHSA-2005:673","RHSA-2006:0368","RHSA-2005:709","RHSA-2006:0354","RHSA-2005:801","RHSA-2005:659"],"bugzilla":"1617660","bugzilla_description":"CVE-2005-1704 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.63","binutils-0:2.14.90.0.4-39","elfutils-0:0.94.1-2","binutils-0:2.15.92.0.2-15","elfutils-0:0.97.1-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1704.json"},{"CVE":"CVE-2005-1705","severity":"low","public_date":"2005-05-25T00:00:00Z","advisories":["RHBA-2005:675","RHSA-2005:709","RHSA-2005:801"],"bugzilla":"1617661","bugzilla_description":"CVE-2005-1705 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.63"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1705.json"},{"CVE":"CVE-2005-0891","severity":"important","public_date":"2005-03-26T00:00:00Z","advisories":["RHSA-2005:344","RHSA-2005:343"],"bugzilla":"1617587","bugzilla_description":"CVE-2005-0891 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gtk2-0:2.4.13-14","gtk2-0:2.2.4-15","gdk-pixbuf-1:0.22.0-16.el4","gdk-pixbuf-1:0.22.0-12.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0891.json"},{"CVE":"CVE-2004-0941","severity":"low","public_date":"2004-11-10T00:00:00Z","advisories":["RHSA-2004:638","RHSA-2006:0194"],"bugzilla":"175413","bugzilla_description":"CVE-2004-0941 gd: additional overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gd-0:1.8.4-12.3.1","gd-0:2.0.28-4.4E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0941.json"},{"CVE":"CVE-2004-0990","severity":"important","public_date":"2004-10-26T00:00:00Z","advisories":["RHSA-2004:638"],"bugzilla":"1617343","bugzilla_description":"CVE-2004-0990 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gd-0:1.8.4-12.3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0990.json"},{"CVE":"CVE-2004-0782","severity":"important","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617283","bugzilla_description":"CVE-2004-0782 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0782.json"},{"CVE":"CVE-2004-0783","severity":"important","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617284","bugzilla_description":"CVE-2004-0783 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0783.json"},{"CVE":"CVE-2004-0788","severity":"moderate","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617290","bugzilla_description":"CVE-2004-0788 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0788.json"},{"CVE":"CVE-2004-0753","severity":"moderate","public_date":"2004-08-20T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617266","bugzilla_description":"CVE-2004-0753 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0753.json"},{"CVE":"CVE-2004-0111","severity":"important","public_date":"2004-03-10T00:00:00Z","advisories":["RHSA-2004:102","RHSA-2004:103"],"bugzilla":"1617155","bugzilla_description":"CVE-2004-0111 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-6.1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0111.json"},{"CVE":"CVE-2011-2897","severity":"moderate","public_date":"2001-06-01T00:00:00Z","advisories":[],"bugzilla":"727081","bugzilla_description":"CVE-2011-2897 gdk-pixbuf: GIF loader buffer overflow when initializing decompression tables","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2897.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdb-gdbserver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdb-gdbserver_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdb-gdbserver_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdb_security_api_results.json
new file mode 100644
index 0000000..b6643ba
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-1010180","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:1635"],"bugzilla":"1740615","bugzilla_description":"CVE-2019-1010180 gdb: buffer overflow while opening an ELF for debugging leads to Dos, information dislosure and code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["gdb-0:8.2-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010180.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2018-20712","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1668269","bugzilla_description":"CVE-2018-20712 libiberty: heap-based buffer over-read in d_expression_1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20712.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-20673","severity":"moderate","public_date":"2018-12-27T00:00:00Z","advisories":[],"bugzilla":"1664709","bugzilla_description":"CVE-2018-20673 libiberty: Integer overflow in demangle_template() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20673.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20657","severity":"low","public_date":"2018-12-18T00:00:00Z","advisories":["RHSA-2019:3352"],"bugzilla":"1664708","bugzilla_description":"CVE-2018-20657 libiberty: Memory leak in demangle_template function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["gdb-0:8.2-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14038","severity":null,"public_date":"2018-07-12T00:00:00Z","advisories":[],"bugzilla":"1686781","bugzilla_description":"CVE-2018-14038 libbfd: remote dos via crafted file in function aout_32_swap_std_reloc_out in aoutx.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14038.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-9778","severity":"low","public_date":"2017-06-15T00:00:00Z","advisories":[],"bugzilla":"1466255","bugzilla_description":"CVE-2017-9778 gdb: Malformed section in an ELF binary or a core file can cause memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9778.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6131","severity":null,"public_date":"2016-06-29T00:00:00Z","advisories":[],"bugzilla":"1352068","bugzilla_description":"CVE-2016-6131 gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-4492","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333377","bugzilla_description":"CVE-2016-4492 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4493","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333383","bugzilla_description":"CVE-2016-4493 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4493.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4491","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1333371","bugzilla_description":"CVE-2016-4491 gcc: Stack overflow due to infinite recursion in d_print_comp","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2016-4489","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333336","bugzilla_description":"CVE-2016-4489 gcc: Invalid write due to integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4490","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333366","bugzilla_description":"CVE-2016-4490 gcc: Write access violation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4487","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333330","bugzilla_description":"CVE-2016-4487 gcc: Invalid write due to a use-after-free to array btypevec","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4488","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333332","bugzilla_description":"CVE-2016-4488 gcc: Invalid write due to a use-after-free to array ktypevec","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-2226","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1333322","bugzilla_description":"CVE-2016-2226 gcc: Exploitable buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2012-3509","severity":"moderate","public_date":"2012-08-29T00:00:00Z","advisories":[],"bugzilla":"849693","bugzilla_description":"CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3509.json"},{"CVE":"CVE-2011-4355","severity":"moderate","public_date":"2011-04-29T00:00:00Z","advisories":["RHSA-2013:0522"],"bugzilla":"703238","bugzilla_description":"CVE-2011-4355 gdb: object file .debug_gdb_scripts section improper input validation","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["gdb-0:7.2-60.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4355.json"},{"CVE":"CVE-2006-4146","severity":"low","public_date":"2006-08-31T00:00:00Z","advisories":["RHSA-2007:0469","RHSA-2007:0229"],"bugzilla":"203875","bugzilla_description":"CVE-2006-4146 GDB buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.138.el3","gdb-0:6.3.0.0-1.143.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4146.json"},{"CVE":"CVE-2005-1704","severity":"low","public_date":"2005-05-25T00:00:00Z","advisories":["RHBA-2005:675","RHSA-2005:763","RHSA-2005:673","RHSA-2006:0368","RHSA-2005:709","RHSA-2006:0354","RHSA-2005:801","RHSA-2005:659"],"bugzilla":"1617660","bugzilla_description":"CVE-2005-1704 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.63","binutils-0:2.14.90.0.4-39","elfutils-0:0.94.1-2","binutils-0:2.15.92.0.2-15","elfutils-0:0.97.1-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1704.json"},{"CVE":"CVE-2005-1705","severity":"low","public_date":"2005-05-25T00:00:00Z","advisories":["RHBA-2005:675","RHSA-2005:709","RHSA-2005:801"],"bugzilla":"1617661","bugzilla_description":"CVE-2005-1705 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.63"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1705.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdbm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdbm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdbm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdbm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdbm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdbm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdisk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdisk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdisk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdk-pixbuf2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdk-pixbuf2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdk-pixbuf2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdk-pixbuf2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdk-pixbuf2_security_api_results.json
new file mode 100644
index 0000000..530ec3e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdk-pixbuf2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-2862","severity":"moderate","public_date":"2017-08-30T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1488817","bugzilla_description":"CVE-2017-2862 gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["gdk-pixbuf2-0:2.36.12-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-12447","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1686828","bugzilla_description":"CVE-2017-12447 gdk-pixbuf: heap-based overflow caused by invalid palette size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12447.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-1000422","severity":"moderate","public_date":"2017-08-07T00:00:00Z","advisories":[],"bugzilla":"1531397","bugzilla_description":"CVE-2017-1000422 gdk-pixbuf: Integer overflow in io-gif.c:gif_get_lzw() can lead to memory corruption and potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-6313","severity":"moderate","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427217","bugzilla_description":"CVE-2017-6313 gdk-pixbuf: Integer underflow in io-icns.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-6314","severity":"low","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427218","bugzilla_description":"CVE-2017-6314 gdk-pixbuf: Infinite loop in io-tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6314.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6312","severity":"low","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427221","bugzilla_description":"CVE-2017-6312 gdk-pixbuf: Out-of-bounds read in io-ico.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6312.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6311","severity":"low","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1427222","bugzilla_description":"CVE-2017-6311 gdk-pixbuf: NULL pointer dereference in gdk-pixbuf-thumbnailer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6311.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-2870","severity":"moderate","public_date":"2016-09-07T00:00:00Z","advisories":[],"bugzilla":"1486735","bugzilla_description":"CVE-2017-2870 gdk-pixbuf2: Integer overflow in tiff_image_parse function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6352","severity":"moderate","public_date":"2016-07-13T00:00:00Z","advisories":[],"bugzilla":"1349751","bugzilla_description":"CVE-2016-6352 gdk-pixbuf: Out-of-bounds write in OneLine32() function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6352.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2015-7552","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHBA-2017:2100"],"bugzilla":"1378894","bugzilla_description":"CVE-2015-7552 gdk-pixbuf: Heap-based buffer overflow in the gdk_pixbuf_flip function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["gdk-pixbuf2-0:2.36.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7552.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8875","severity":"moderate","public_date":"2015-10-06T00:00:00Z","advisories":[],"bugzilla":"1337063","bugzilla_description":"CVE-2015-8875 gdk-pixbuf: Integer overflows in various pixops functions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8875.json"},{"CVE":"CVE-2015-7673","severity":"moderate","public_date":"2015-10-01T00:00:00Z","advisories":[],"bugzilla":"1261836","bugzilla_description":"CVE-2015-7673 gdk-pixbuf: Heap overflow and DoS vulnerability when scaling a TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7673.json"},{"CVE":"CVE-2015-7674","severity":"moderate","public_date":"2015-10-01T00:00:00Z","advisories":[],"bugzilla":"1268249","bugzilla_description":"CVE-2015-7674 gdk-pixbuf: Heap overflow when scaling a GIF file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7674.json"},{"CVE":"CVE-2015-4491","severity":"important","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1694","RHSA-2015:1586"],"bugzilla":"1252290","bugzilla_description":"CVE-2015-4491 Mozilla: Heap overflow in gdk-pixbuf when scaling bitmap images (MFSA 2015-88)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","gdk-pixbuf2-0:2.24.1-6.el6_7","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","gdk-pixbuf2-0:2.28.2-5.el7_1","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4491.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdm_security_api_results.json
new file mode 100644
index 0000000..91e900a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gdm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-3825","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1672825","bugzilla_description":"CVE-2019-3825 gdm: lock screen bypass when timed login is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["gdm-1:3.28.3-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3825.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2018-14424","severity":"moderate","public_date":"2018-08-13T00:00:00Z","advisories":[],"bugzilla":"1606915","bugzilla_description":"CVE-2018-14424 gdm: use-after-free in the GDM daemon","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14424.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2017-12164","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1490417","bugzilla_description":"CVE-2017-12164 gdm: lock screen can be circumvented when autologin is set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12164.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2016-1000002","severity":"low","public_date":"2016-06-02T00:00:00Z","advisories":[],"bugzilla":"1391126","bugzilla_description":"CVE-2016-1000002 gdm: Information leak before screen lock","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000002.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2015-7496","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2017:2128"],"bugzilla":"1283279","bugzilla_description":"CVE-2015-7496 gdm: Crash when holding Escape in log screen","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-364","affected_packages":["gdm-1:3.22.3-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7496.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2013-4169","severity":"important","public_date":"2013-09-05T00:00:00Z","advisories":["RHSA-2013:1213"],"bugzilla":"988498","bugzilla_description":"CVE-2013-4169 gdm: TOCTTOU race condition on /tmp/.X11-unix","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"(CWE-367|CWE-377)->CWE-552","affected_packages":["gdm-1:2.16.0-59.el5_9.1","initscripts-0:8.45.42-2.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4169.json"},{"CVE":"CVE-2013-7273","severity":"low","public_date":"2012-07-30T00:00:00Z","advisories":[],"bugzilla":"1050745","bugzilla_description":"CVE-2013-7273 gdm: local DoS possible when cancelling and disable-user-list=true when fallback greeter is used","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7273.json"},{"CVE":"CVE-2011-1709","severity":"moderate","public_date":"2011-05-31T00:00:00Z","advisories":[],"bugzilla":"709139","bugzilla_description":"CVE-2011-1709 gdm: URI scheme handling change in glib2 allows running default browser in GDM session","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1709.json"},{"CVE":"CVE-2011-0727","severity":"important","public_date":"2011-03-28T00:00:00Z","advisories":["RHSA-2011:0395"],"bugzilla":"688323","bugzilla_description":"CVE-2011-0727 gdm: privilege escalation vulnerability","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["gdm-1:2.30.4-21.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0727.json"},{"CVE":"CVE-2010-2387","severity":null,"public_date":"2009-02-15T00:00:00Z","advisories":[],"bugzilla":"889384","bugzilla_description":"CVE-2010-2387 gdm: logs user passwors that contain invalid UTF8-encoded characters, in debug mode","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2387.json"},{"CVE":"CVE-2007-3381","severity":"moderate","public_date":"2007-07-30T00:00:00Z","advisories":["RHSA-2007:0777"],"bugzilla":"247655","bugzilla_description":"CVE-2007-3381 Gdm denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdm-1:2.16.0-31.0.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3381.json"},{"CVE":"CVE-2009-2697","severity":"low","public_date":"2007-05-11T00:00:00Z","advisories":["RHSA-2009:1364"],"bugzilla":"239818","bugzilla_description":"CVE-2009-2697 gdm not built with tcp_wrappers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gdm-1:2.16.0-56.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2697.json"},{"CVE":"CVE-2006-1057","severity":"low","public_date":"2006-04-19T00:00:00Z","advisories":["RHSA-2007:0286"],"bugzilla":"1618026","bugzilla_description":"CVE-2006-1057 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdm-1:2.6.0.5-7.rhel4.15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1057.json"},{"CVE":"CVE-2007-5079","severity":"low","public_date":"2006-02-13T00:00:00Z","advisories":["RHSA-2010:0657"],"bugzilla":"181302","bugzilla_description":"CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gdm-1:2.6.0.5-7.rhel4.19.el4_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5079.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-bookmarks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-bookmarks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-bookmarks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-bracketcompletion_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-bracketcompletion_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-bracketcompletion_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-charmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-charmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-charmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-codecomment_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-codecomment_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-codecomment_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-colorpicker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-colorpicker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-colorpicker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-colorschemer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-colorschemer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-colorschemer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-commander_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-commander_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-commander_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-drawspaces_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-drawspaces_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-drawspaces_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-joinlines_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-joinlines_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-joinlines_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-multiedit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-multiedit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-multiedit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-smartspaces_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-smartspaces_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-smartspaces_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-synctex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-synctex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-synctex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-terminal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-terminal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-terminal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-textsize_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-textsize_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-textsize_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-wordcompletion_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-wordcompletion_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugin-wordcompletion_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugins-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugins-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugins-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugins_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit-plugins_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit_security_api_results.json
new file mode 100644
index 0000000..fcc2e71
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gedit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-14108","severity":"low","public_date":"2017-09-02T00:00:00Z","advisories":[],"bugzilla":"1488335","bugzilla_description":"CVE-2017-14108 gedit: CPU consumption via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14108.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2009-0314","severity":"low","public_date":"2008-08-06T00:00:00Z","advisories":[],"bugzilla":"481556","bugzilla_description":"CVE-2009-0314 gedit: untrusted python modules search path","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0314.json"},{"CVE":"CVE-2005-1686","severity":"moderate","public_date":"2005-05-20T00:00:00Z","advisories":["RHSA-2005:499"],"bugzilla":"1617658","bugzilla_description":"CVE-2005-1686 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gedit-1:2.2.2-4.rhel3","gedit-1:2.8.1-4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1686.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gegl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gegl_security_api_results.json
new file mode 100644
index 0000000..1be925c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gegl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10111","severity":"low","public_date":"2018-04-14T00:00:00Z","advisories":[],"bugzilla":"1570185","bugzilla_description":"CVE-2018-10111 gegl: unbounded memory allocation in render_rectangle function in process/gegl-processor.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10111.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10112","severity":"moderate","public_date":"2018-04-14T00:00:00Z","advisories":[],"bugzilla":"1570188","bugzilla_description":"CVE-2018-10112 gegl: write access violation in gegl_tile_backend_swap_constructed function in buffer/gegl-tile-backend-swap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10112.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-10113","severity":"low","public_date":"2018-04-14T00:00:00Z","advisories":[],"bugzilla":"1570191","bugzilla_description":"CVE-2018-10113 gegl: unbounded memory allocation in process function in operations/external/ppm-load.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10113.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10114","severity":"moderate","public_date":"2018-04-14T00:00:00Z","advisories":[],"bugzilla":"1570192","bugzilla_description":"CVE-2018-10114 gegl: write access violation gegl_buffer_iterate_read_simple function in buffer/gegl-buffer-access.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10114.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2012-4433","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2012:1455"],"bugzilla":"856300","bugzilla_description":"CVE-2012-4433 gegl: Integer overflow, leading to heap-based buffer overflow by parsing PPM image headers","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["gegl-0:0.1.2-4.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4433.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/genisoimage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/genisoimage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/genisoimage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/genwqe-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/genwqe-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/genwqe-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/genwqe-zlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/genwqe-zlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/genwqe-zlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoclue2-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoclue2-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoclue2-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoclue2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoclue2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoclue2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoclue_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoclue_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoclue_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geocode-glib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geocode-glib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geocode-glib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geocode-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geocode-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geocode-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoipupdate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoipupdate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geoipupdate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geolite2-city_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geolite2-city_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geolite2-city_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geolite2-country_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geolite2-country_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geolite2-country_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geronimo-annotation_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geronimo-annotation_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geronimo-annotation_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geronimo-jms_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geronimo-jms_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geronimo-jms_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geronimo-jta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geronimo-jta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/geronimo-jta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext-common-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext-common-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext-common-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext_security_api_results.json
new file mode 100644
index 0000000..7b26016
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gettext_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12825","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:3654","RHBA-2020:3609","RHSA-2020:4072"],"bugzilla":"1835377","bugzilla_description":"CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["redhat-coreos-43.82.202009181853.0","libcroco-0:0.6.12-4.el8_2.1","libcroco-0:0.6.12-6.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-18751","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":["RHSA-2019:3643","RHSA-2020:2485","RHSA-2020:2846","RHSA-2020:1138","RHBA-2019:3303"],"bugzilla":"1647043","bugzilla_description":"CVE-2018-18751 gettext: double free in default_add_message in read-catalog.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-42.81.20191107.0","gettext-0:0.19.8.1-17.el8","gettext-0:0.19.8.1-3.el7","gettext-0:0.19.8.1-3.el7_6","gettext-0:0.19.8.1-3.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18751.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gfs2-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gfs2-utils_security_api_results.json
new file mode 100644
index 0000000..04e5aab
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gfs2-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2008-6552","severity":"low","public_date":"2008-10-31T00:00:00Z","advisories":["RHSA-2009:1339","RHSA-2011:0264","RHSA-2011:0265","RHSA-2009:1337","RHSA-2009:1341"],"bugzilla":"519436","bugzilla_description":"CVE-2008-6552 cman, gfs2-utils, rgmanager: multiple insecure temporary file use issues","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:C","CWE":"CWE-377","affected_packages":["rgmanager-0:1.9.88-2.el4","ccs-0:1.0.13-2","rgmanager-0:2.0.52-1.el5","gfs2-utils-0:0.1.62-1.el5","cman-0:2.0.115-1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-6552.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript-chinese_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript-chinese_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript-chinese_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript-cups_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript-cups_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript-cups_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript_security_api_results.json
new file mode 100644
index 0000000..3b03e1d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ghostscript_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14373","severity":"moderate","public_date":"2020-09-02T07:00:00Z","advisories":[],"bugzilla":"1873239","bugzilla_description":"CVE-2020-14373 ghostscript: use-after-free vulnerability in igc_reloc_struct_ptr() could result in DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14373.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16290","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870149","bugzilla_description":"CVE-2020-16290 ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16290.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16298","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870152","bugzilla_description":"CVE-2020-16298 ghostscript: buffer overflow in mj_color_correct() in contrib/japanese/gdevmjc.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16298.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16310","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870159","bugzilla_description":"CVE-2020-16310 ghostscript: division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16310.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16307","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870162","bugzilla_description":"CVE-2020-16307 ghostscript: NULL pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c could result in a DoS via a crafted postscript file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16307.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16306","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870165","bugzilla_description":"CVE-2020-16306 ghostscript: NULL pointer dereference vulnerability in devices/gdevtsep.c could result in a DoS via a crafted postscript file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16306.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16301","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870167","bugzilla_description":"CVE-2020-16301 ghostscript: buffer overflow in okiibm_print_page1() in devices/gdevokii.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-805->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16301.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16300","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870169","bugzilla_description":"CVE-2020-16300 ghostscript: buffer overflow in tiff12_print_page() in devices/gdevtfnx.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-122->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16300.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16299","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870171","bugzilla_description":"CVE-2020-16299 ghostscript: division by zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16299.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16296","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870175","bugzilla_description":"CVE-2020-16296 ghostscript: buffer overflow in GetNumWrongData() in contrib/lips4/gdevlips.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16296.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16295","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870179","bugzilla_description":"CVE-2020-16295 ghostscript: NULL pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-369|CWE-476)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16295.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16297","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870227","bugzilla_description":"CVE-2020-16297 ghostscript: buffer overflow in FloydSteinbergDitheringC() in contrib/gdevbjca.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-805->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16297.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16294","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870229","bugzilla_description":"CVE-2020-16294 ghostscript: buffer overflow in epsc_print_page() in devices/gdevepsc.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-131->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16294.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16293","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870231","bugzilla_description":"CVE-2020-16293 ghostscript: NULL pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16293.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16292","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870237","bugzilla_description":"CVE-2020-16292 ghostscript: buffer overflow in mj_raster_cmd() in contrib/japanese/gdevmjc.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16292.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16291","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870240","bugzilla_description":"CVE-2020-16291 ghostscript: buffer overflow in contrib/gdevdj9.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-122->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16291.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16287","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870242","bugzilla_description":"CVE-2020-16287 ghostscript: buffer overflow in lprn_is_black() in contrib/lips4/gdevlprn.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682->CWE-122->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16287.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16289","severity":"low","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870244","bugzilla_description":"CVE-2020-16289 ghostscript: buffer overflow in cif_print_page() in devices/gdevcif.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16289.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16309","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870248","bugzilla_description":"CVE-2020-16309 ghostscript: buffer overflow in lxm5700m_print_page() in devices/gdevlxm.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16309.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-17538","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870249","bugzilla_description":"CVE-2020-17538 ghostscript: buffer overflow in GetNumSameData() in contrib/lips4/gdevlips.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17538.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16308","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870256","bugzilla_description":"CVE-2020-16308 ghostscript: buffer overflow in p_print_image() in devices/gdevcdj.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16308.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16305","severity":"low","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870257","bugzilla_description":"CVE-2020-16305 ghostscript: buffer overflow in pcx_write_rle() in contrib/japanese/gdev10v.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16305.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16303","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870258","bugzilla_description":"CVE-2020-16303 ghostscript: use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c could result in a privilege escalation via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16303.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-16304","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870262","bugzilla_description":"CVE-2020-16304 ghostscript: buffer overflow in image_render_color_thresh() in base/gxicolor.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16304.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16288","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870266","bugzilla_description":"CVE-2020-16288 ghostscript: buffer overflow in pj_common_print_page() in devices/gdevpjet.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-805->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16288.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16302","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870267","bugzilla_description":"CVE-2020-16302 ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a privilege escalation via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-805->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16302.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-15900","severity":"important","public_date":"2020-07-27T00:00:00Z","advisories":[],"bugzilla":"1859492","bugzilla_description":"CVE-2020-15900 ghostscript: Memory Corruption in Ghostscript 9.52 (SAFER Sandbox Breakout)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15900.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-14869","severity":"important","public_date":"2019-11-14T13:00:00Z","advisories":["RHSA-2019:3888","RHSA-2020:0222","RHSA-2019:3890"],"bugzilla":"1768911","bugzilla_description":"CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys (701841)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.4","ghostscript-0:9.25-5.el8_1.1","ghostscript-0:9.25-2.el7_7.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-14813","severity":"important","public_date":"2019-08-28T12:00:00Z","advisories":["RHSA-2019:2586","RHSA-2019:2534","RHSA-2019:2591"],"bugzilla":"1743737","bugzilla_description":"CVE-2019-14813 ghostscript: Safer mode bypass by .forceput exposure in setsystemparams (701443)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.3","ghostscript-0:9.25-2.el7_7.2","3scale-amp26/zync:1.9-28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-14812","severity":"important","public_date":"2019-08-28T12:00:00Z","advisories":["RHSA-2019:2586","RHSA-2019:2534","RHSA-2019:2591"],"bugzilla":"1743754","bugzilla_description":"CVE-2019-14812 ghostscript: Safer mode bypass by .forceput exposure in setuserparams (701444)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.3","ghostscript-0:9.25-2.el7_7.2","3scale-amp26/zync:1.9-28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-14811","severity":"important","public_date":"2019-08-28T12:00:00Z","advisories":["RHSA-2019:2586","RHSA-2019:2534","RHSA-2019:2591"],"bugzilla":"1743757","bugzilla_description":"CVE-2019-14811 ghostscript: Safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator (701445)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.3","ghostscript-0:9.25-2.el7_7.2","3scale-amp26/zync:1.9-28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-14817","severity":"important","public_date":"2019-08-28T12:00:00Z","advisories":["RHSA-2019:2586","RHSA-2019:2534","RHSA-2019:2591"],"bugzilla":"1744042","bugzilla_description":"CVE-2019-14817 ghostscript: Safer mode bypass by .forceput exposure in .pdfexectoken and other procedures (701450)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.3","ghostscript-0:9.25-2.el7_7.2","3scale-amp26/zync:1.9-28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-10216","severity":"important","public_date":"2019-08-12T13:00:00Z","advisories":["RHSA-2019:2465","RHSA-2019:2462","RHSA-2019:2534"],"bugzilla":"1737080","bugzilla_description":"CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.2","ghostscript-0:9.25-2.el7_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10216.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3839","severity":"important","public_date":"2019-05-02T00:00:00Z","advisories":["RHSA-2019:1017","RHSA-2019:0971"],"bugzilla":"1673304","bugzilla_description":"CVE-2019-3839 ghostscript: missing attack vector protections for CVE-2019-6116","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.1","ghostscript-0:9.07-31.el7_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3838","severity":"important","public_date":"2019-03-21T12:00:00Z","advisories":["RHSA-2019:0971","RHSA-2019:0633"],"bugzilla":"1677581","bugzilla_description":"CVE-2019-3838 ghostscript: forceput in DefineResource is still accessible (700576)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.1","ghostscript-0:9.07-31.el7_6.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3835","severity":"important","public_date":"2019-03-21T12:00:00Z","advisories":["RHSA-2019:0971","RHSA-2019:0633"],"bugzilla":"1677588","bugzilla_description":"CVE-2019-3835 ghostscript: superexec operator is available (700585)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.1","ghostscript-0:9.07-31.el7_6.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3835.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-6116","severity":"important","public_date":"2019-01-23T00:00:00Z","advisories":["RHSA-2019:0229"],"bugzilla":"1666636","bugzilla_description":"CVE-2019-6116 ghostscript: subroutines within pseudo-operators must themselves be pseudo-operators (700317)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-31.el7_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16863","severity":"important","public_date":"2018-12-03T00:00:00Z","advisories":["RHSA-2018:3761"],"bugzilla":"1652893","bugzilla_description":"CVE-2018-16863 ghostscript: incomplete fix for CVE-2018-16509","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":["ghostscript-0:9.07-31.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19475","severity":"important","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:0229"],"bugzilla":"1654459","bugzilla_description":"CVE-2018-19475 ghostscript: access bypass in psi/zdevice2.c (700153)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["ghostscript-0:9.07-31.el7_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19475.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19476","severity":"important","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:0229"],"bugzilla":"1654464","bugzilla_description":"CVE-2018-19476 ghostscript: access bypass in psi/zicc.c (700169)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["ghostscript-0:9.07-31.el7_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19476.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19477","severity":"important","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:0229"],"bugzilla":"1654468","bugzilla_description":"CVE-2018-19477 ghostscript: access bypass in psi/zfjbig2.c (700168)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["ghostscript-0:9.07-31.el7_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19134","severity":"important","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1655599","bugzilla_description":"CVE-2018-19134 ghostscript: Type confusion in setpattern (700141)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19134.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19478","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1655607","bugzilla_description":"CVE-2018-19478 ghostscript: Attempting to open a carefully crafted PDF file results in long-running computation (699856)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19478.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-19409","severity":"important","public_date":"2018-11-14T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1652583","bugzilla_description":"CVE-2018-19409 ghostscript: Improperly implemented security check in zsetdevice function in psi/zdevice.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19409.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-18284","severity":"important","public_date":"2018-10-12T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1642940","bugzilla_description":"CVE-2018-18284 ghostscript: 1Policy operator allows a sandbox protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18284.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-17961","severity":"important","public_date":"2018-10-10T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1642578","bugzilla_description":"CVE-2018-17961 ghostscript: Saved execution stacks can leak operator arrays (incomplete fix for CVE-2018-17183)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17961.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-18073","severity":"important","public_date":"2018-10-09T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1642584","bugzilla_description":"CVE-2018-18073 ghostscript: Saved execution stacks can leak operator arrays","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18073.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-17183","severity":"important","public_date":"2018-09-19T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1632471","bugzilla_description":"CVE-2018-17183 ghostscript: User-writable error exception table","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16802","severity":"important","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1627959","bugzilla_description":"CVE-2018-16802 ghostscript: Incorrect \"restoration of privilege\" checking when running out of stack during exception handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16542","severity":"important","public_date":"2018-09-06T00:00:00Z","advisories":["RHSA-2018:2918"],"bugzilla":"1621363","bugzilla_description":"CVE-2018-16542 ghostscript: .definemodifiedfont memory corruption if /typecheck is handled (699668)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-29.el7_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-15911","severity":"moderate","public_date":"2018-09-06T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1625832","bugzilla_description":"CVE-2018-15911 ghostscript: Uninitialized memory access in the aesdecode operator (699665)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15911.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16510","severity":"important","public_date":"2018-09-06T00:00:00Z","advisories":[],"bugzilla":"1625836","bugzilla_description":"CVE-2018-16510 ghostscript: Incorrect exec stack handling in the \"CS\" and \"SC\" PDF primitives (699671)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16510.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16539","severity":"moderate","public_date":"2018-09-06T00:00:00Z","advisories":["RHSA-2018:3650"],"bugzilla":"1625839","bugzilla_description":"CVE-2018-16539 ghostscript: incorrect access checking in temp file handling to disclose contents of files (699658)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["ghostscript-0:9.07-31.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-16540","severity":"important","public_date":"2018-09-06T00:00:00Z","advisories":["RHSA-2019:0229"],"bugzilla":"1625843","bugzilla_description":"CVE-2018-16540 ghostscript: use-after-free in copydevice handling (699661)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["ghostscript-0:9.07-31.el7_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16540.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16541","severity":"important","public_date":"2018-09-06T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1625846","bugzilla_description":"CVE-2018-16541 ghostscript: Incorrect free logic in pagedevice replacement (699664)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16541.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16543","severity":"important","public_date":"2018-09-06T00:00:00Z","advisories":[],"bugzilla":"1625851","bugzilla_description":"CVE-2018-16543 ghostscript: gssetresolution and gsgetresolution memory corruption (699670)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-561","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16543.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16585","severity":"low","public_date":"2018-09-06T00:00:00Z","advisories":[],"bugzilla":"1626193","bugzilla_description":"CVE-2018-16585 ghostscript: .setdistillerkeys PostScript command is accepted even though it is not intended for use","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16585.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2018-15909","severity":"important","public_date":"2018-08-28T00:00:00Z","advisories":["RHSA-2018:3650"],"bugzilla":"1621361","bugzilla_description":"CVE-2018-15909 ghostscript: shading_param incomplete type checking (699660)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["ghostscript-0:9.07-31.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15909.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16511","severity":"important","public_date":"2018-08-24T00:00:00Z","advisories":["RHSA-2018:3650"],"bugzilla":"1621359","bugzilla_description":"CVE-2018-16511 ghostscript: missing type check in type checker (699659)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-704","affected_packages":["ghostscript-0:9.07-31.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16509","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:3760","RHSA-2018:2918"],"bugzilla":"1619748","bugzilla_description":"CVE-2018-16509 ghostscript: /invalidaccess bypass after failed restore (699654)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-29.el7_5.2","ghostscript-0:8.70-24.el6_10.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16513","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":[],"bugzilla":"1619750","bugzilla_description":"CVE-2018-16513 ghostscript: setcolor missing type check (699655)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-15910","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:2918"],"bugzilla":"1619751","bugzilla_description":"CVE-2018-15910 ghostscript: LockDistillerParams type confusion (699656)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-704","affected_packages":["ghostscript-0:9.07-29.el7_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15910.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-15908","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:3650"],"bugzilla":"1619756","bugzilla_description":"CVE-2018-15908 ghostscript: .tempfile file permission issues (699657)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-31.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15908.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-10194","severity":"moderate","public_date":"2018-04-20T00:00:00Z","advisories":["RHSA-2018:2918"],"bugzilla":"1569108","bugzilla_description":"CVE-2018-10194 ghostscript: Stack-based out-of-bounds write in pdf_set_text_matrix function in gdevpdts.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["ghostscript-0:9.07-29.el7_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10194.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-11714","severity":"low","public_date":"2017-07-01T00:00:00Z","advisories":[],"bugzilla":"1476192","bugzilla_description":"CVE-2017-11714 ghostscript: Out of bounds read in igc_reloc_struct_ptr()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11714.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-9739","severity":"low","public_date":"2017-06-15T00:00:00Z","advisories":[],"bugzilla":"1475834","bugzilla_description":"CVE-2017-9739 ghostscript: Heap-buffer over-read in the Ins_JMPR function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9739.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9740","severity":"low","public_date":"2017-06-15T00:00:00Z","advisories":[],"bugzilla":"1475836","bugzilla_description":"CVE-2017-9740 ghostscript: Heap-buffer over-read in the xps_decode_font_char_imp function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9740.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9620","severity":"low","public_date":"2017-06-13T00:00:00Z","advisories":[],"bugzilla":"1475829","bugzilla_description":"CVE-2017-9620 ghostscript: Heap-buffer over-read in the xps_select_font_encoding function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9620.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9726","severity":"low","public_date":"2017-06-13T00:00:00Z","advisories":[],"bugzilla":"1475830","bugzilla_description":"CVE-2017-9726 ghostscript: Heap-buffer over-read in the Ins_MDRP function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9726.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9727","severity":"low","public_date":"2017-06-13T00:00:00Z","advisories":[],"bugzilla":"1475833","bugzilla_description":"CVE-2017-9727 ghostscript: Heap-buffer over-read in the gx_ttfReader__Read function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9727.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9610","severity":"low","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1475824","bugzilla_description":"CVE-2017-9610 ghostscript: Heap-buffer over-read in the xps_load_sfnt_name function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9610.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9611","severity":"low","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1475825","bugzilla_description":"CVE-2017-9611 ghostscript: Heap-buffer over-read in the Ins_MIRP function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9611.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9612","severity":"low","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1475826","bugzilla_description":"CVE-2017-9612 ghostscript: Use-after-free in the Ins_IP function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9612.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9618","severity":"low","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1475827","bugzilla_description":"CVE-2017-9618 ghostscript: Buffer overflow in the xps_load_sfnt_name function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9618.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9619","severity":"low","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1475828","bugzilla_description":"CVE-2017-9619 ghostscript: Segmentation fault in the xps_true_callback_glyph_name function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9619.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9835","severity":"low","public_date":"2017-06-06T00:00:00Z","advisories":[],"bugzilla":"1475837","bugzilla_description":"CVE-2017-9835 ghostscript: Heap-buffer over-read in the gs_alloc_ref_array function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9835.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9216","severity":"low","public_date":"2017-05-23T00:00:00Z","advisories":[],"bugzilla":"1456728","bugzilla_description":"CVE-2017-9216 jbig2dec: Null pointer dereference in jbig2_huffman_get()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9216.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9147","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1454655","bugzilla_description":"CVE-2017-9147 libtiff: Out of bounds read in _TIFFVGetField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9147.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8908","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1451247","bugzilla_description":"CVE-2017-8908 ghostscript: Out-of-bounds read in mark_line_tr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8908.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8291","severity":"important","public_date":"2017-04-26T00:00:00Z","advisories":["RHSA-2017:1230"],"bugzilla":"1446063","bugzilla_description":"CVE-2017-8291 ghostscript: corruption of operand stack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["ghostscript-0:9.07-20.el7_3.5","ghostscript-0:8.70-23.el6_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8291.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-7948","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1444944","bugzilla_description":"CVE-2017-7948 ghostscript: Integer overflow in the mark_curve function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7948.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7885","severity":"low","public_date":"2017-03-30T00:00:00Z","advisories":[],"bugzilla":"1444104","bugzilla_description":"CVE-2017-7885 jbig2dec: Integer overflow in jbig2_decode_symbol_dict","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7975","severity":"moderate","public_date":"2017-03-27T00:00:00Z","advisories":[],"bugzilla":"1443940","bugzilla_description":"CVE-2017-7975 jbig2dec: Integer overflow in jbig2_build_huffman_table allows OOB write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7976","severity":"low","public_date":"2017-03-24T00:00:00Z","advisories":[],"bugzilla":"1443897","bugzilla_description":"CVE-2017-7976 jbig2dec: Integer overflow in the jbig2_image_compose_function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7976.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7207","severity":"low","public_date":"2017-03-19T00:00:00Z","advisories":["RHSA-2017:2180"],"bugzilla":"1434353","bugzilla_description":"CVE-2017-7207 ghostscript: NULL pointer dereference in mem_get_bits_rectangle()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["ghostscript-0:9.07-28.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6196","severity":"low","public_date":"2017-02-20T00:00:00Z","advisories":[],"bugzilla":"1427440","bugzilla_description":"CVE-2017-6196 ghostscript: Multiple use-after-free vulnerabilities in gx_image_enum_begin function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6196.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5951","severity":"low","public_date":"2017-02-03T00:00:00Z","advisories":[],"bugzilla":"1441572","bugzilla_description":"CVE-2017-5951 ghostscript: NULL pointer dereference in the mem_get_bits_rectangle function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5951.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10317","severity":"low","public_date":"2016-12-31T00:00:00Z","advisories":[],"bugzilla":"1441575","bugzilla_description":"CVE-2016-10317 ghostscript: Heap-buffer overflow in the fill_threshold_buffer function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-9601","severity":"low","public_date":"2016-12-28T00:00:00Z","advisories":[],"bugzilla":"1410021","bugzilla_description":"CVE-2016-9601 ghostscript: Heap-buffer overflow due to Integer overflow in jbig2_image_new function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9601.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10217","severity":"low","public_date":"2016-12-27T00:00:00Z","advisories":[],"bugzilla":"1441564","bugzilla_description":"CVE-2016-10217 ghostscript: Use-after-free in the pdf14_open function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10217.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10219","severity":"low","public_date":"2016-12-23T00:00:00Z","advisories":[],"bugzilla":"1441569","bugzilla_description":"CVE-2016-10219 ghostscript: Divide-by-zero in the intersect function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10219.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10220","severity":"low","public_date":"2016-12-21T00:00:00Z","advisories":[],"bugzilla":"1441571","bugzilla_description":"CVE-2016-10220 ghostscript: NULL pointer dereference in the gs_makewordimagedevice function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10220.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10218","severity":"low","public_date":"2016-12-19T00:00:00Z","advisories":[],"bugzilla":"1441568","bugzilla_description":"CVE-2016-10218 ghostscript: NULL pointer dereference in the pfd14_pop_transparency_group function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10218.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8602","severity":"moderate","public_date":"2016-10-08T00:00:00Z","advisories":["RHSA-2017:0014","RHSA-2017:0013"],"bugzilla":"1383940","bugzilla_description":"CVE-2016-8602 ghostscript: check for sufficient params in .sethalftone5","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["ghostscript-0:9.07-20.el7_3.1","ghostscript-0:8.70-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8602.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2018-11645","severity":"low","public_date":"2016-10-05T00:00:00Z","advisories":["RHSA-2019:2281"],"bugzilla":"1585914","bugzilla_description":"CVE-2018-11645 ghostscript: status command permitted with -dSAFER in psi/zfile.c allowing attackers to identify the size and existence of files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["ghostscript-0:9.25-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-7979","severity":"moderate","public_date":"2016-10-04T00:00:00Z","advisories":["RHSA-2017:0014","RHSA-2017:0013"],"bugzilla":"1382305","bugzilla_description":"CVE-2016-7979 ghostscript: Type confusion in .initialize_dsc_parser allows remote code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["ghostscript-0:9.07-20.el7_3.1","ghostscript-0:8.70-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7979.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2016-7976","severity":"important","public_date":"2016-09-30T00:00:00Z","advisories":[],"bugzilla":"1382294","bugzilla_description":"CVE-2016-7976 ghostscript: various userparams allow %pipe% in paths, allowing remote shell","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7976.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2016-7978","severity":"moderate","public_date":"2016-09-30T00:00:00Z","advisories":["RHSA-2017:0013"],"bugzilla":"1382300","bugzilla_description":"CVE-2016-7978 ghostscript: reference leak in .setdevice allows use-after-free and remote code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["ghostscript-0:9.07-20.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2016-7977","severity":"moderate","public_date":"2016-09-28T00:00:00Z","advisories":["RHSA-2017:0014","RHSA-2017:0013"],"bugzilla":"1380415","bugzilla_description":"CVE-2016-7977 ghostscript: .libfile does not honor -dSAFER","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["ghostscript-0:9.07-20.el7_3.1","ghostscript-0:8.70-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7977.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2015-3228","severity":"low","public_date":"2015-07-23T00:00:00Z","advisories":[],"bugzilla":"1232805","bugzilla_description":"CVE-2015-3228 ghostscript-core: out-of-bounbds read and write in gs_ttf.ps","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3228.json"},{"CVE":"CVE-2013-5653","severity":"moderate","public_date":"2013-10-21T00:00:00Z","advisories":["RHSA-2017:0014","RHSA-2017:0013"],"bugzilla":"1380327","bugzilla_description":"CVE-2013-5653 ghostscript: getenv and filenameforall ignore -dSAFER","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["ghostscript-0:9.07-20.el7_3.1","ghostscript-0:8.70-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5653.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2012-4405","severity":"moderate","public_date":"2012-09-11T00:00:00Z","advisories":["RHSA-2012:1256"],"bugzilla":"854227","bugzilla_description":"CVE-2012-4405 ghostscript, argyllcms: Array index error leading to heap-based bufer OOB write","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["ghostscript-0:8.70-14.el5_8.1","ghostscript-0:8.70-14.el6_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4405.json"},{"CVE":"CVE-2012-1616","severity":"moderate","public_date":"2012-04-23T00:00:00Z","advisories":[],"bugzilla":"809697","bugzilla_description":"CVE-2012-1616 icclib: Use-after-free via crafted ICC profile files","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1616.json"},{"CVE":"CVE-2009-3743","severity":"moderate","public_date":"2010-08-24T00:00:00Z","advisories":["RHSA-2012:0095"],"bugzilla":"627902","bugzilla_description":"CVE-2009-3743 ghostscript: TrueType bytecode intepreter integer overflow or wraparound","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["ghostscript-0:8.70-11.el6_2.6","ghostscript-0:8.70-6.el5_7.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3743.json"},{"CVE":"CVE-2010-2055","severity":"moderate","public_date":"2010-05-26T00:00:00Z","advisories":["RHSA-2012:0095"],"bugzilla":"599564","bugzilla_description":"CVE-2010-2055 ghostscript: gs_init.ps searched in current directory despite -P-","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ghostscript-0:8.70-11.el6_2.6","ghostscript-0:8.70-6.el5_7.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2055.json"},{"CVE":"CVE-2010-4820","severity":"moderate","public_date":"2010-05-26T00:00:00Z","advisories":["RHSA-2012:0095","RHSA-2012:0096"],"bugzilla":"771853","bugzilla_description":"CVE-2010-4820 ghostscript: CWD included in the default library search path","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ghostscript-0:7.07-33.13.el4","ghostscript-0:8.70-11.el6_2.6","ghostscript-0:8.70-6.el5_7.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4820.json"},{"CVE":"CVE-2010-1869","severity":null,"public_date":"2010-05-11T00:00:00Z","advisories":[],"bugzilla":"582300","bugzilla_description":"CVE-2010-1869 ghostscript: PS parser buffer overflow in token scanner","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1869.json"},{"CVE":"CVE-2010-1628","severity":"important","public_date":"2010-05-11T00:00:00Z","advisories":[],"bugzilla":"592492","bugzilla_description":"CVE-2010-1628 ghostscript: internal stack overflow due to recursive calls","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1628.json"},{"CVE":"CVE-2010-4054","severity":"low","public_date":"2010-01-04T00:00:00Z","advisories":["RHSA-2012:0095","RHSA-2012:0096"],"bugzilla":"646086","bugzilla_description":"CVE-2010-4054 ghostscript: glyph data access improper input validation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["ghostscript-0:7.07-33.13.el4","ghostscript-0:8.70-11.el6_2.6","ghostscript-0:8.70-6.el5_7.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4054.json"},{"CVE":"CVE-2009-4897","severity":"important","public_date":"2009-06-08T00:00:00Z","advisories":[],"bugzilla":"613792","bugzilla_description":"CVE-2009-4897 ghostscript: long name buffer overflow (GS 8.64)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4897.json"},{"CVE":"CVE-2009-0792","severity":"moderate","public_date":"2009-04-08T00:00:00Z","advisories":["RHSA-2009:0421","RHSA-2009:0420"],"bugzilla":"491853","bugzilla_description":"CVE-2009-0792 ghostscript, argyllcms: Incomplete fix for CVE-2009-0583","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ghostscript-0:7.05-32.1.20","ghostscript-0:7.07-33.2.el4_7.8","ghostscript-0:8.15.2-9.4.el5_3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0792.json"},{"CVE":"CVE-2009-0196","severity":"moderate","public_date":"2009-04-08T00:00:00Z","advisories":["RHSA-2009:0421"],"bugzilla":"493379","bugzilla_description":"CVE-2009-0196 ghostscript: Missing boundary check in Ghostscript's jbig2dec library","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ghostscript-0:8.15.2-9.4.el5_3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0196.json"},{"CVE":"CVE-2009-0583","severity":"moderate","public_date":"2009-03-19T00:00:00Z","advisories":["RHSA-2009:0345"],"bugzilla":"487742","bugzilla_description":"CVE-2009-0583 ghostscript, argyllcms: Multiple integer overflows in the International Color Consortium Format Library","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["ghostscript-0:8.15.2-9.4.el5_3.4","ghostscript-0:7.07-33.2.el4_7.5","ghostscript-0:7.05-32.1.17"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0583.json"},{"CVE":"CVE-2009-0584","severity":"moderate","public_date":"2009-03-19T00:00:00Z","advisories":["RHSA-2009:0345"],"bugzilla":"487744","bugzilla_description":"CVE-2009-0584 ghostscript, argyllcms: Multiple insufficient upper-bounds checks on certain sizes in the International Color Consortium Format Library","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ghostscript-0:8.15.2-9.4.el5_3.4","ghostscript-0:7.07-33.2.el4_7.5","ghostscript-0:7.05-32.1.17"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0584.json"},{"CVE":"CVE-2008-6679","severity":"moderate","public_date":"2008-12-22T00:00:00Z","advisories":["RHSA-2009:0421"],"bugzilla":"493445","bugzilla_description":"CVE-2008-6679 ghostscript: Buffer overflow in BaseFont writer module for pdfwrite device","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:8.15.2-9.4.el5_3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-6679.json"},{"CVE":"CVE-2008-0411","severity":"important","public_date":"2008-02-27T00:00:00Z","advisories":["RHSA-2008:0155"],"bugzilla":"431536","bugzilla_description":"CVE-2008-0411 ghostscript: stack-based buffer overflow in .seticcspace operator","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["ghostscript-0:7.07-33.2.el4_6.1","ghostscript-0:8.15.2-9.1.el5_1.1","ghostscript-0:7.05-32.1.13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0411.json"},{"CVE":"CVE-2007-6725","severity":"moderate","public_date":"2007-02-19T00:00:00Z","advisories":["RHSA-2009:0421","RHSA-2009:0420"],"bugzilla":"493442","bugzilla_description":"CVE-2007-6725 ghostscript: DoS (crash) in CCITTFax decoding filter","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:7.05-32.1.20","ghostscript-0:7.07-33.2.el4_7.8","ghostscript-0:8.15.2-9.4.el5_3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6725.json"},{"CVE":"CVE-2004-0967","severity":"low","public_date":"2004-09-30T00:00:00Z","advisories":["RHSA-2005:081"],"bugzilla":"140074","bugzilla_description":"CVE-2004-0967 temporary file vulnerabilities in various ghostscript scripts.","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:7.05-32.1.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0967.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/giflib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/giflib_security_api_results.json
new file mode 100644
index 0000000..0298526
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/giflib_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-15133","severity":"low","public_date":"2019-08-17T00:00:00Z","advisories":[],"bugzilla":"1771309","bugzilla_description":"CVE-2019-15133 giflib: divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15133.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-11489","severity":"low","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1583399","bugzilla_description":"CVE-2018-11489 giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11490","severity":"low","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1583400","bugzilla_description":"CVE-2018-11490 giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-3977","severity":"low","public_date":"2016-04-04T00:00:00Z","advisories":[],"bugzilla":"1325771","bugzilla_description":"CVE-2016-3977 giflib: heap buffer overflow in gif2rgb","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3977.json"},{"CVE":"CVE-2016-3177","severity":"low","public_date":"2016-03-15T00:00:00Z","advisories":[],"bugzilla":"1314438","bugzilla_description":"CVE-2016-3177 giflib: Use-after-free in gifcolor utility","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3177.json"},{"CVE":"CVE-2015-7555","severity":"moderate","public_date":"2015-12-21T00:00:00Z","advisories":[],"bugzilla":"1290785","bugzilla_description":"CVE-2015-7555 giflib: Heap-based buffer overflow in giffix utility","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7555.json"},{"CVE":"CVE-2005-3350","severity":"important","public_date":"2005-11-03T00:00:00Z","advisories":["RHSA-2005:828","RHSA-2009:0444"],"bugzilla":"494823","bugzilla_description":"CVE-2005-3350 giflib/libunfig: memory corruption via a crafted GIF","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libungif-0:4.1.3-1.el4.2","giflib-0:4.1.3-7.1.el5_3.1","libungif-0:4.1.0-15.el3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3350.json"},{"CVE":"CVE-2005-2974","severity":"low","public_date":"2005-11-03T00:00:00Z","advisories":["RHSA-2005:828","RHSA-2009:0444"],"bugzilla":"494826","bugzilla_description":"CVE-2005-2974 giflib/libunfig: NULL pointer dereference crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libungif-0:4.1.3-1.el4.2","giflib-0:4.1.3-7.1.el5_3.1","libungif-0:4.1.0-15.el3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2974.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp-data-extras_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp-data-extras_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp-data-extras_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp-help_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp-help_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp-help_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp_security_api_results.json
new file mode 100644
index 0000000..a268ff3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gimp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-12713","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1595819","bugzilla_description":"CVE-2018-12713 gimp: predictable temporary file name in test-xcf.c unit test","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12713.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-17788","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1529141","bugzilla_description":"CVE-2017-17788 gimp: Stack-based buffer over-read in xcf_load_stream function in app/xcf/xcf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17788.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-17787","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1529143","bugzilla_description":"CVE-2017-17787 gimp: Heap-based buffer over-read in read_creator_block function in plug-ins/common/file-psp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17787.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-17784","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1529144","bugzilla_description":"CVE-2017-17784 gimp: Heap-based buffer over-read in load_image function in plug-ins/common/file-gbr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17784.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-17786","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1529145","bugzilla_description":"CVE-2017-17786 gimp: Heap-based buffer over-read in ReadImage function in plug-ins/common/file-tga.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17786.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-17789","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1529146","bugzilla_description":"CVE-2017-17789 gimp: Heap-based buffer overflow in read_channel_data function in plug-ins/common/file-psp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17789.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-17785","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1529147","bugzilla_description":"CVE-2017-17785 gimp: Heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17785.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-4994","severity":"moderate","public_date":"2016-06-20T00:00:00Z","advisories":["RHSA-2016:2589"],"bugzilla":"1348617","bugzilla_description":"CVE-2016-4994 gimp: Use-after-free vulnerabilities in the channel and layer properties parsing process","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["gimp-2:2.8.16-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4994.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2013-1913","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2013:1778"],"bugzilla":"947868","bugzilla_description":"CVE-2013-1913 gimp: xwd plugin g_new() integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["gimp-2:2.6.9-6.el6_5","gimp-2:2.2.13-3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1913.json"},{"CVE":"CVE-2013-1978","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2013:1778"],"bugzilla":"953902","bugzilla_description":"CVE-2013-1978 gimp: XWD plugin color map heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["gimp-2:2.6.9-6.el6_5","gimp-2:2.2.13-3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1978.json"},{"CVE":"CVE-2012-5576","severity":"moderate","public_date":"2012-11-02T00:00:00Z","advisories":["RHSA-2013:1778"],"bugzilla":"879302","bugzilla_description":"CVE-2012-5576 gimp (XWD plug-in): Stack-based buffer overflow when loading XWD file","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["gimp-2:2.6.9-6.el6_5","gimp-2:2.2.13-3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5576.json"},{"CVE":"CVE-2012-3402","severity":"moderate","public_date":"2012-08-20T00:00:00Z","advisories":["RHSA-2012:1181"],"bugzilla":"838941","bugzilla_description":"CVE-2012-3402 gimp (PSD plug-in): Heap-buffer overflow by decoding certain PSD headers","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["gimp-2:2.2.13-2.0.7.el5_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3402.json"},{"CVE":"CVE-2012-3403","severity":"moderate","public_date":"2012-08-20T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181"],"bugzilla":"839020","bugzilla_description":"CVE-2012-3403 gimp (CEL plug-in): heap buffer overflow when loading external palette files","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["gimp-2:2.6.9-4.el6_3.3","gimp-2:2.2.13-2.0.7.el5_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3403.json"},{"CVE":"CVE-2012-3481","severity":"moderate","public_date":"2012-08-20T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181"],"bugzilla":"847303","bugzilla_description":"CVE-2012-3481 Gimp (GIF plug-in): Heap-based buffer overflow by loading certain GIF images","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["gimp-2:2.6.9-4.el6_3.3","gimp-2:2.2.13-2.0.7.el5_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3481.json"},{"CVE":"CVE-2012-4245","severity":null,"public_date":"2012-08-16T00:00:00Z","advisories":[],"bugzilla":"855929","bugzilla_description":"CVE-2012-4245 gimp: arbitrary code execution without authentication in scriptfu network server","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4245.json"},{"CVE":"CVE-2012-3236","severity":null,"public_date":"2012-06-29T00:00:00Z","advisories":[],"bugzilla":"834627","bugzilla_description":"CVE-2012-3236 gimp: NULL pointer deref crash when reading FIT file with crafted XTENSION header","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3236.json"},{"CVE":"CVE-2012-2763","severity":"low","public_date":"2012-05-30T00:00:00Z","advisories":[],"bugzilla":"824541","bugzilla_description":"CVE-2012-2763 gimp: Heap-based buffer overflow in the script-fu console by sending overly long arguments to script-fu server","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2763.json"},{"CVE":"CVE-2011-2896","severity":"moderate","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181","RHSA-2011:1635","RHSA-2012:0302"],"bugzilla":"727800","bugzilla_description":"CVE-2011-2896 David Koblas' GIF decoder LZW decoder buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gimp-2:2.6.9-4.el6_3.3","cups-1:1.3.7-30.el5","gimp-2:2.2.13-2.0.7.el5_8.5","cups-1:1.4.2-44.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2896.json"},{"CVE":"CVE-2011-1178","severity":"moderate","public_date":"2011-05-23T00:00:00Z","advisories":["RHSA-2011:0837","RHSA-2011:0838"],"bugzilla":"689831","bugzilla_description":"CVE-2011-1178 Gimp: Integer overflow in the PCX image file plug-in","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["gimp-1:2.0.5-7.0.7.el4.1","gimp-2:2.2.13-2.0.7.el5_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1178.json"},{"CVE":"CVE-2011-1782","severity":"moderate","public_date":"2011-05-23T00:00:00Z","advisories":[],"bugzilla":"704512","bugzilla_description":"CVE-2011-1782 Gimp: Incomplete fix for CVE-2010-4543 PSP plug-in heap overflow issue","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1782.json"},{"CVE":"CVE-2010-4540","severity":"moderate","public_date":"2010-12-31T00:00:00Z","advisories":["RHSA-2011:0839","RHSA-2011:0838"],"bugzilla":"666793","bugzilla_description":"CVE-2010-4540 Gimp: Stack-based buffer overflow in Lighting plug-in","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["gimp-2:2.2.13-2.0.7.el5_6.2","gimp-2:2.6.9-4.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4540.json"},{"CVE":"CVE-2010-4541","severity":"moderate","public_date":"2010-12-31T00:00:00Z","advisories":["RHSA-2011:0839","RHSA-2011:0837","RHSA-2011:0838"],"bugzilla":"703403","bugzilla_description":"CVE-2010-4541 Gimp: Stack-based buffer overflow in SphereDesigner plug-in","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["gimp-1:2.0.5-7.0.7.el4.1","gimp-2:2.2.13-2.0.7.el5_6.2","gimp-2:2.6.9-4.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4541.json"},{"CVE":"CVE-2010-4542","severity":"moderate","public_date":"2010-12-31T00:00:00Z","advisories":["RHSA-2011:0839","RHSA-2011:0838"],"bugzilla":"703405","bugzilla_description":"CVE-2010-4542 Gimp: Stack-based buffer overflow in Gfig plug-in","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["gimp-2:2.2.13-2.0.7.el5_6.2","gimp-2:2.6.9-4.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4542.json"},{"CVE":"CVE-2010-4543","severity":"moderate","public_date":"2010-12-31T00:00:00Z","advisories":["RHSA-2011:0839","RHSA-2011:0837","RHSA-2011:0838"],"bugzilla":"703407","bugzilla_description":"CVE-2010-4543 Gimp: Heap-based buffer overflow in Paint Shop Pro (PSP) plug-in","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["gimp-1:2.0.5-7.0.7.el4.1","gimp-2:2.2.13-2.0.7.el5_6.2","gimp-2:2.6.9-4.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4543.json"},{"CVE":"CVE-2009-3909","severity":"moderate","public_date":"2009-11-17T00:00:00Z","advisories":["RHSA-2012:1181"],"bugzilla":"537370","bugzilla_description":"CVE-2009-3909 Gimp: Integer overflow in the PSD image file plugin","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["gimp-2:2.2.13-2.0.7.el5_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3909.json"},{"CVE":"CVE-2009-1570","severity":"moderate","public_date":"2009-11-12T00:00:00Z","advisories":["RHSA-2011:0837","RHSA-2011:0838"],"bugzilla":"537356","bugzilla_description":"CVE-2009-1570 Gimp: Integer overflow in the BMP image file plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["gimp-1:2.0.5-7.0.7.el4.1","gimp-2:2.2.13-2.0.7.el5_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1570.json"},{"CVE":"CVE-2006-4519","severity":"moderate","public_date":"2007-07-09T00:00:00Z","advisories":["RHSA-2007:0513"],"bugzilla":"247565","bugzilla_description":"CVE-2006-4519 GIMP multiple image loader integer overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["gimp-1:1.2.3-20.9.el3","gimp-1:2.0.5-7.0.7.el4","gimp-2:2.2.13-2.0.7.el5","gimp-1:1.2.1-7.8.el2_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4519.json"},{"CVE":"CVE-2007-3741","severity":"moderate","public_date":"2007-07-09T00:00:00Z","advisories":["RHSA-2007:0513"],"bugzilla":"248053","bugzilla_description":"CVE-2007-3741 Gimp image loader multiple input validation flaws","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["gimp-1:1.2.3-20.9.el3","gimp-1:2.0.5-7.0.7.el4","gimp-2:2.2.13-2.0.7.el5","gimp-1:1.2.1-7.8.el2_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3741.json"},{"CVE":"CVE-2007-2949","severity":"moderate","public_date":"2007-06-27T00:00:00Z","advisories":["RHSA-2007:0513"],"bugzilla":"244400","bugzilla_description":"CVE-2007-2949 Gimp PSD integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["gimp-1:1.2.3-20.9.el3","gimp-1:2.0.5-7.0.7.el4","gimp-2:2.2.13-2.0.7.el5","gimp-1:1.2.1-7.8.el2_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2949.json"},{"CVE":"CVE-2007-2356","severity":"moderate","public_date":"2007-04-27T00:00:00Z","advisories":["RHSA-2007:0343"],"bugzilla":"238420","bugzilla_description":"CVE-2007-2356 Stack overflow in gimp's sunras plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gimp-1:1.2.3-20.3.el3","gimp-1:2.0.5-6.2.el4","gimp-1:1.2.1-7.1.el2_1","gimp-2:2.2.13-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2356.json"},{"CVE":"CVE-2006-3404","severity":"moderate","public_date":"2006-07-06T00:00:00Z","advisories":["RHSA-2006:0598"],"bugzilla":"1618141","bugzilla_description":"CVE-2006-3404 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gimp-1:2.0.5-6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3404.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/git_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/git_security_api_results.json
new file mode 100644
index 0000000..996a760
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/git_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8911","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869800","bugzilla_description":"CVE-2020-8911 aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8911.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2020-8912","severity":"low","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869801","bugzilla_description":"CVE-2020-8912 aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8912.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-10715","severity":"low","public_date":"2020-07-27T00:00:00Z","advisories":["RHSA-2020:2992"],"bugzilla":"1767665","bugzilla_description":"CVE-2020-10715 openshift/console: text injection on error page via crafted url","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-web-console-0:3.11.248-1.git.1.cc96c2d.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10715.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-8557","severity":"moderate","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3520","RHSA-2020:3809","RHSA-2020:3808","RHSA-2020:3580","RHSA-2020:3519","RHSA-2020:3579"],"bugzilla":"1835977","bugzilla_description":"CVE-2020-8557 kubernetes: Node disk DOS by writing to container /etc/hosts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.3.37-202009120213.p0.git.0.dffefe4.el8","openshift4/ose-hyperkube:v4.4.0-202008250319.p0","openshift4/ose-hyperkube:v4.3.37-202009151447.p0","openshift4/ose-hyperkube:v4.5.0-202008130146.p0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8557.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-8558","severity":"moderate","public_date":"2020-07-08T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:2992","RHSA-2020:2927","RHSA-2020:3184","RHSA-2020:2926","RHSA-2020:3183","RHSA-2020:2413"],"bugzilla":"1843358","bugzilla_description":"CVE-2020-8558 kubernetes: node localhost services reachable via martian packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","atomic-openshift-0:3.11.248-1.git.0.92ee8ac.el7","openshift4/ose-hyperkube:v4.4.0-202007120152.p0","openshift4/ose-console:v4.5.0-202007012112.p0","openshift4/ose-hyperkube:v4.3.31-202007272153.p0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8558.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-14298","severity":"important","public_date":"2020-06-23T19:00:00Z","advisories":["RHSA-2020:2653"],"bugzilla":"1848239","bugzilla_description":"CVE-2020-14298 docker: Security regression of CVE-2019-5736 due to inclusion of vulnerable runc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":["docker-2:1.13.1-162.git64e9980.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14298.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-14300","severity":"important","public_date":"2020-06-23T19:00:00Z","advisories":["RHSA-2020:2653"],"bugzilla":"1848829","bugzilla_description":"CVE-2020-14300 docker: Security regression of CVE-2016-9962 due to inclusion of vulnerable runc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":["docker-2:1.13.1-162.git64e9980.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14300.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-8555","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":["RHSA-2020:2594","RHSA-2020:2440","RHSA-2020:2441","RHSA-2020:2448","RHSA-2020:2449","RHSA-2020:2479"],"bugzilla":"1821583","bugzilla_description":"CVE-2020-8555 kubernetes: Server side request forgery (SSRF) in kube-controller-manager allows users to leak secret information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openshift4/ose-hyperkube:v4.3.25-202006081335","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift4/ose-hyperkube:v4.4.0-202006080610","openshift-0:4.3.25-202006060952.git.1.96c30f6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8555.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2020-10722","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:4114","RHSA-2020:2297","RHSA-2020:2298","RHSA-2020:2683","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828867","bugzilla_description":"CVE-2020-10722 dpdk: librte_vhost Integer overflow in vhost_user_set_log_base()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["dpdk-0:18.11.8-1.el7_8","openvswitch-0:2.9.0-130.el7fdp","openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10722.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10723","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:4114","RHSA-2020:2297","RHSA-2020:2298","RHSA-2020:2683","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828874","bugzilla_description":"CVE-2020-10723 dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["dpdk-0:18.11.8-1.el7_8","openvswitch-0:2.9.0-130.el7fdp","openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10723.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10724","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2297","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828884","bugzilla_description":"CVE-2020-10724 dpdk: librte_vhost Missing inputs validation in Vhost-crypto","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10724.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11008","severity":"important","public_date":"2020-04-20T18:00:00Z","advisories":["RHSA-2020:1980","RHSA-2020:1979","RHSA-2020:3581","RHSA-2020:1978","RHSA-2020:1975","RHSA-2020:2337"],"bugzilla":"1826001","bugzilla_description":"CVE-2020-11008 git: Crafted URL containing new lines, empty host or lacks a scheme can cause credential leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["git-0:1.8.3.1-23.el7_7","git-0:1.8.3.1-23.el7_8","git-0:2.18.4-2.el8_2","git-0:2.18.4-1.el8_0","rh-git218-git-0:2.18.4-1.el7","git-0:2.18.4-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11008.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-5260","severity":"important","public_date":"2020-04-14T18:00:00Z","advisories":["RHSA-2020:3581","RHSA-2020:1518","RHSA-2020:1511","RHSA-2020:1503","RHSA-2020:1513"],"bugzilla":"1822020","bugzilla_description":"CVE-2020-5260 git: Crafted URL containing new lines can cause credential leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["git-0:2.18.2-2.el8_0","git-0:2.18.2-2.el8_1","git-0:1.8.3.1-23.el7_7","rh-git218-git-0:2.18.2-3.el7","git-0:1.8.3.1-22.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5260.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-11254","severity":"moderate","public_date":"2020-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:0933","RHSA-2020:2479","RHSA-2020:2413"],"bugzilla":"1819486","bugzilla_description":"CVE-2019-11254 kubernetes: Denial of service in API server via crafted YAML payloads by authorized users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-hyperkube:v4.5.0-202007100518.p0","openshift4/ose-oauth-server-rhel7:v4.5.0-202007012112.p0","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift4/ose-openshift-apiserver-rhel7:v4.3.9-202003230345"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11254.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-10696","severity":"important","public_date":"2020-03-26T00:00:00Z","advisories":["RHSA-2020:1926","RHSA-2020:1396","RHSA-2020:1449","RHSA-2020:1931","RHSA-2020:1932","RHSA-2020:1401","RHSA-2020:2116","RHSA-2020:2117"],"bugzilla":"1817651","bugzilla_description":"CVE-2020-10696 buildah: Crafted input tar file may lead to local file overwrite during image build process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["buildah-0:1.11.6-11.el7_8","podman-0:1.0.2-4.dev.git96ccc2e.rhaos4.1.el8","podman-0:1.6.4-10.rhaos4.3.el8","podman-0:1.6.4-18.el7_8","container-tools:2.0-8020020200420175838.28c38760","podman-0:1.4.2-6.rhaos4.2.el8","container-tools:1.0-8020020200420104655.28c38760","container-tools:rhel8-8020020200420180128.28c38760"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10696.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-8552","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:2992","RHBA-2020:0930","RHBA-2020:2215","RHSA-2020:1527","RHSA-2020:0933","RHSA-2020:1526","RHBA-2020:0929","RHSA-2020:2306"],"bugzilla":"1797909","bugzilla_description":"CVE-2020-8552 kubernetes: Use of unbounded 'client' label in apiserver_request_total allows for memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift4/ose-openshift-apiserver-rhel7:v4.2.34-202005252115","atomic-openshift-metrics-server-0:3.11.219-1.git.1.6fe54fb.el7","atomic-enterprise-service-catalog-1:3.11.219-1.git.1.717017c.el7","atomic-openshift-0:3.11.219-1.git.0.0c21387.el7","openshift4/ose-hyperkube:v4.2.29-202004140532","openshift-0:4.2.29-202004110432.git.0.f7d02c8.el8","openshift4/ose-service-catalog:v4.3.9-202003230345","openshift4/ose-openshift-apiserver-rhel7:v4.3.9-202003230345"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8552.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-8551","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:1277","RHSA-2020:1276"],"bugzilla":"1816403","bugzilla_description":"CVE-2020-8551 kubernetes: crafted requests to kubelet API allow for memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.3.10-202003300855.git.0.da48c1d.el7","openshift4/ose-hyperkube:v4.3.10-202003311925"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8551.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-1741","severity":"low","public_date":"2020-03-13T00:00:00Z","advisories":["RHSA-2020:3541"],"bugzilla":"1802381","bugzilla_description":"CVE-2020-1741 openshift-ansible: cors allowed origin allows changing url protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185","affected_packages":["openshift-ansible-0:3.11.272-1.git.0.79ab6e9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1741.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-11252","severity":"moderate","public_date":"2020-03-04T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:2413"],"bugzilla":"1860158","bugzilla_description":"CVE-2019-11252 kubernetes: credential leak in kube-controller-manager via error messages in mount failure logs and events for AzureFile and CephFS volumes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":["openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-hyperkube:v4.5.0-202007100518.p0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11252.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14563","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:1712"],"bugzilla":"1758620","bugzilla_description":"CVE-2019-14563 edk2: numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["edk2-0:20190829git37eef91017ad-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14563.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L","cvss3_score":"6.4"},{"CVE":"CVE-2020-8608","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:2774","RHSA-2020:2730","RHSA-2020:2773","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:2342","RHSA-2020:1352","RHBA-2020:0527","RHSA-2020:1351","RHSA-2020:1208","RHSA-2020:0889","RHSA-2020:1209","RHSA-2020:2844","RHSA-2020:1379","RHSA-2020:1403","RHSA-2020:3040","RHSA-2020:1292"],"bugzilla":"1798453","bugzilla_description":"CVE-2020-8608 QEMU: Slirp: potential OOB access due to unsafe snprintf() usages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-160.el7_6.7","virt:rhel-8020020200601195459.4cda2c84","slirp4netns-0:0.3.0-8.el7_7","qemu-kvm-ma-10:2.12.0-33.el7_7.3","slirp4netns-0:0.4.2-4.git21fdece.el8","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-10:1.5.3-167.el7_7.6","qemu-kvm-10:1.5.3-173.el7_8.1","virt:rhel-8000020200526192422.f8e95b4e","qemu-kvm-2:0.12.1.2-2.506.el6_10.7","qemu-kvm-ma-10:2.12.0-44.el7_8.1","container-tools:rhel8-8010120200326094405.f8993c42"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-1702","severity":"low","public_date":"2020-01-20T00:00:00Z","advisories":["RHSA-2020:1650","RHSA-2020:1234","RHSA-2020:1937","RHSA-2020:2681","RHBA-2020:0492","RHSA-2020:2218","RHSA-2020:2116","RHSA-2020:1227"],"bugzilla":"1792796","bugzilla_description":"CVE-2020-1702 containers/image: Container images read entire image manifest into memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["cri-o-0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7","buildah-0:1.11.6-11.el7_8","podman-0:1.6.4-16.el7_8","openshift4/ose-pod:v4.3.2-202002112006","skopeo-1:0.1.40-11.el7_8","cri-o-0:1.11.16-0.9.dev.rhaos3.11.git6d43aae.el7","docker-2:1.13.1-161.git64e9980.el7_8","container-tools:rhel8-8020020200324071414.0d58ad57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1702.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2020-8945","severity":"moderate","public_date":"2020-01-16T00:00:00Z","advisories":["RHSA-2020:2027","RHSA-2020:2992","RHSA-2020:1234","RHSA-2020:3167","RHSA-2020:1231","RHSA-2020:1396","RHSA-2020:1230","RHSA-2020:0679","RHSA-2020:0934","RHSA-2020:1402","RHSA-2020:0863","RHSA-2020:0697","RHSA-2020:0689","RHSA-2020:1940","RHSA-2020:2413","RHSA-2020:2117","RHBA-2020:1255","RHSA-2020:0928","RHSA-2020:1937","RHSA-2020:2927"],"bugzilla":"1795838","bugzilla_description":"CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["atomic-openshift-0:3.11.248-1.git.0.92ee8ac.el7","openshift-clients-0:4.2.32-202005020632.git.1.1b0fab9.el8","skopeo-1:0.1.32-7.git1715c90.rhaos4.2.el8","podman-0:1.6.4-10.rhaos4.3.el8","openshift4/ose-docker-builder:v4.3.7-202003161611","skopeo-1:0.1.40-7.el7_8","podman-0:1.6.4-18.el7_8","openshift4/ose-cli:v4.3.7-202003161611","openshift4/ose-cli-artifacts:v4.3.7-202003161611","openshift4/ose-openshift-controller-manager-rhel7:v4.2.34-202005252115","cri-o-0:1.16.4-1.dev.rhaos4.3.git9238eee.el7","openshift4/ose-openshift-controller-manager-rhel7:v4.3.9-202003230345","cri-o-0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7","openshift-0:4.3.10-202003300855.git.0.da48c1d.el8","docker-2:1.13.1-161.git64e9980.el7_8","skopeo-1:0.1.40-4.rhaos.el8","machine-config-daemon-0:4.3.10-202003300415.git.0.56d6ae0.el8","buildah-0:1.11.6-8.el7_8","skopeo-1:0.1.32-6.git1715c90.el8_0","openshift4/ose-cluster-policy-controller-rhel7:v4.4.0-202004261927","openshift4/ose-docker-builder:v4.2.28-202004061218","openshift-clients-0:4.3.10-202003300001.git.0.e43c148.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8945.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7039","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:2730","RHSA-2020:1344","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:1360","RHSA-2020:2342","RHSA-2020:1352","RHSA-2020:1351","RHSA-2020:1296","RHSA-2020:0889","RHSA-2020:0775","RHSA-2020:1116","RHSA-2020:1358","RHSA-2020:0348","RHBA-2020:0390","RHSA-2020:1150"],"bugzilla":"1791551","bugzilla_description":"CVE-2020-7039 QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-173.el7","slirp4netns-0:0.3.0-8.el7_7","container-tools:1.0-8010020200206144344.c294d161","qemu-kvm-ma-10:2.12.0-33.el7_7.3","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","virt:rhel-8000020200305185300.f8e95b4e","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-ma-10:2.12.0-44.el7","qemu-kvm-rhev-10:2.12.0-44.el7","container-tools:rhel8-8010120200116121758.53d07e52","qemu-kvm-10:1.5.3-167.el7_7.6","slirp4netns-0:0.4.2-3.git21fdece.el8","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","virt:rhel-8010020200304114113.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7039.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-5313","severity":"moderate","public_date":"2020-01-03T00:00:00Z","advisories":["RHSA-2020:3185","RHSA-2020:3887"],"bugzilla":"1789532","bugzilla_description":"CVE-2020-5313 python-pillow: out-of-bounds read in ImagingFliDecode when loading FLI images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["python-pillow-0:2.0.0-21.gitd1c6db8.el7","python-pillow-0:5.1.1-12.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5313.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-5312","severity":"important","public_date":"2020-01-03T00:00:00Z","advisories":["RHSA-2020:0580","RHSA-2020:0566","RHSA-2020:0898","RHSA-2020:0578"],"bugzilla":"1789533","bugzilla_description":"CVE-2020-5312 python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["python-imaging-0:1.1.6-20.el6_10","python-pillow-0:2.0.0-20.gitd1c6db8.el7_7","python-pillow-0:5.1.1-10.el8_1","python-pillow-0:5.1.1-10.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5312.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-7211","severity":"low","public_date":"2019-12-30T00:00:00Z","advisories":["RHBA-2020:0390"],"bugzilla":"1792130","bugzilla_description":"CVE-2020-7211 QEMU: Slirp: potential directory traversal using relative paths via tftp server on Windows host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["slirp4netns-0:0.4.2-3.git21fdece.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7211.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-19921","severity":"moderate","public_date":"2019-12-21T00:00:00Z","advisories":["RHSA-2020:1650","RHSA-2020:1485","RHSA-2020:0695","RHSA-2020:0942","RHSA-2020:0688"],"bugzilla":"1796107","bugzilla_description":"CVE-2019-19921 runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-41","affected_packages":["runc-0:1.0.0-66.rc8.el7_7","runc-0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0","runc-0:1.0.0-66.rc10.rhaos4.3.el7_8","container-tools:rhel8-8020020200324071414.0d58ad57","runc-0:1.0.0-63.rc10.rhaos4.2.gitdc9208a.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19921.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-1387","severity":"important","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:0124","RHSA-2020:0002","RHSA-2019:4356","RHSA-2020:0228"],"bugzilla":"1781127","bugzilla_description":"CVE-2019-1387 git: Remote code execution in recursive clones with nested submodules","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-git218-git-0:2.18.2-1.el7","git-0:2.18.2-1.el8_0","git-0:2.18.2-1.el8_1","git-0:1.8.3.1-21.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1349","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:0002","RHSA-2019:4356","RHSA-2020:0228"],"bugzilla":"1781143","bugzilla_description":"CVE-2019-1349 git: Recursive submodule cloning allows using git directory twice with synonymous directory name written in .git/","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-git218-git-0:2.18.2-1.el7","git-0:2.18.2-1.el8_0","git-0:2.18.2-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1349.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1348","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:0002","RHSA-2019:4356","RHSA-2020:0228"],"bugzilla":"1781953","bugzilla_description":"CVE-2019-1348 git: Arbitrary path overwriting via export-marks in-stream command feature","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-git218-git-0:2.18.2-1.el7","git-0:2.18.2-1.el8_0","git-0:2.18.2-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1348.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-1350","severity":null,"public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1781958","bugzilla_description":"CVE-2019-1350 git: Incorrect quoting of command-line arguments allowed remote code execution during a recursive clone","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1350.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-1351","severity":null,"public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1781960","bugzilla_description":"CVE-2019-1351 git: Git mistakes some paths for relative paths allowing writing outside of the worktree while cloning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1351.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-1352","severity":"low","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:0002","RHSA-2019:4356","RHSA-2020:0228"],"bugzilla":"1781963","bugzilla_description":"CVE-2019-1352 git: Files inside the .git directory may be overwritten during cloning via NTFS Alternate Data Streams","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":["rh-git218-git-0:2.18.2-1.el7","git-0:2.18.2-1.el8_0","git-0:2.18.2-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1352.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1353","severity":"low","public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1781966","bugzilla_description":"CVE-2019-1353 git: NTFS protections inactive when running Git in the Windows Subsystem for Linux","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1353.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1354","severity":null,"public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1781968","bugzilla_description":"CVE-2019-1354 git: Git does not refuse to write out tracked files with backlashes in filenames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1354.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-19604","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1781971","bugzilla_description":"CVE-2019-19604 git: Recursive clone followed by a submodule update could execute code contained within repository without the user explicitly consent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-807","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19604.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-11255","severity":"moderate","public_date":"2019-11-15T00:00:00Z","advisories":["RHSA-2019:4225","RHSA-2019:4054","RHSA-2019:4099","RHSA-2019:4096"],"bugzilla":"1772727","bugzilla_description":"CVE-2019-11255 kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openshift4/ose-csi-external-provisioner-rhel7:v4.2.10-201912022352","openshift-external-storage-0:0.0.2-11.gitd3c94f0.el7","openshift-external-storage-0:0.0.2-10.gitd3c94f0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11255.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-14891","severity":"moderate","public_date":"2019-11-07T00:00:00Z","advisories":["RHSA-2020:2992","RHSA-2020:2776"],"bugzilla":"1772280","bugzilla_description":"CVE-2019-14891 cri-o: infra container reparented to systemd following OOM Killer killing it's conmon","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":["cri-o-0:1.14.12-24.dev.rhaos4.2.gita17905f.el7","cri-o-0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14891.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-16865","severity":"moderate","public_date":"2019-10-04T00:00:00Z","advisories":["RHSA-2020:0580","RHSA-2020:0566","RHSA-2020:0578"],"bugzilla":"1774066","bugzilla_description":"CVE-2019-16865 python-pillow: reading specially crafted image files leads to allocation of large amounts of memory and denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["python-pillow-0:2.0.0-20.gitd1c6db8.el7_7","python-pillow-0:5.1.1-10.el8_1","python-pillow-0:5.1.1-10.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16865.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10215","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":["RHSA-2019:3771"],"bugzilla":"1735506","bugzilla_description":"CVE-2019-10215 bootstrap3-typeahead.js: Cross-site scripting via highlighter() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["openshift4/ose-prometheus:v4.2.4-201911050122"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10215.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11253","severity":"important","public_date":"2019-09-28T00:00:00Z","advisories":["RHSA-2020:2796","RHSA-2020:2863","RHEA-2019:3809","RHSA-2020:2861","RHSA-2020:2795","RHSA-2019:3239","RHSA-2019:3811","RHSA-2020:2870","RHSA-2019:3905","RHSA-2019:3132","RHSA-2020:2799"],"bugzilla":"1757701","bugzilla_description":"CVE-2019-11253 kubernetes: YAML parsing vulnerable to \"Billion Laughs\" attack, allowing for remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["servicemesh-grafana-0:6.2.2-38.el8","servicemesh-grafana-0:6.4.3-11.el8","atomic-openshift-0:3.10.181-1.git.0.3ab4b3d.el7","openshift-0:4.1.20-201910101746.git.0.a80aad5.el8","servicemesh-cni-0:1.1.4-2.el8","servicemesh-0:1.0.2-3.el8","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","servicemesh-prometheus-0:2.7.2-36.el8","atomic-openshift-0:3.11.154-1.git.0.7a097ad.el7","servicemesh-prometheus-0:2.7.2-25.el8","servicemesh-cni-0:1.0.11-1.el8","servicemesh-operator-0:1.1.4-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-16884","severity":"moderate","public_date":"2019-09-22T00:00:00Z","advisories":["RHSA-2019:3940","RHSA-2020:1234","RHSA-2019:4269","RHBA-2020:1232","RHSA-2019:4074"],"bugzilla":"1757214","bugzilla_description":"CVE-2019-16884 runc: AppArmor/SELinux bypass with malicious image that specifies a volume at /proc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-41","affected_packages":["docker-2:1.13.1-161.git64e9980.el7_8","runc-0:1.0.0-62.rc8.rhaos4.1.git3cbe540.el8","runc-0:1.0.0-67.rc10.el7_8","container-tools:rhel8-8010020191126140055.c294d161","runc-0:1.0.0-63.rc8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16884.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11251","severity":"moderate","public_date":"2019-09-18T00:00:00Z","advisories":["RHSA-2019:3811","RHSA-2019:3266","RHSA-2019:3267","RHSA-2019:3905"],"bugzilla":"1753495","bugzilla_description":"CVE-2019-11251 kubernetes: `kubectl cp` allows for arbitrary file write via double symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["openshift4/ose-cli:v4.1.21-201910230924","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","atomic-openshift-0:3.11.154-1.git.0.7a097ad.el7","openshift-0:4.1.21-201910220952.git.0.493dbf6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-12278","severity":"low","public_date":"2019-09-18T00:00:00Z","advisories":[],"bugzilla":"1829397","bugzilla_description":"CVE-2020-12278 libgit2: files inside the .git directory may be overwritten during cloning via NTFS Alternate Data Streams","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12278.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-12279","severity":"low","public_date":"2019-09-18T00:00:00Z","advisories":[],"bugzilla":"1829407","bugzilla_description":"CVE-2020-12279 libgit2: NTFS protections inactive when running Git in the Windows Subsystem for Linux","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12279.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-10214","severity":"moderate","public_date":"2019-09-09T00:00:00Z","advisories":["RHSA-2019:3403","RHSA-2019:3007","RHSA-2019:2825","RHSA-2019:2989","RHSA-2019:3494","RHSA-2019:3812","RHSA-2019:2817"],"bugzilla":"1732508","bugzilla_description":"CVE-2019-10214 containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["container-tools:rhel8-8010020190927090915.4985cc55","cri-o-0:1.9.16-5.git858756d.el7","container-tools:1.0-8010020190927091243.4985cc55","cri-o-0:1.13.11-0.7.dev.rhaos4.1.git9cb8f2f.el8","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","cri-o-0:1.10.6-2.rhaos3.10.git56d7d9a.el7","openshift4/ose-docker-builder:v4.1.20-201910102034"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10214.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-14819","severity":"important","public_date":"2019-08-24T00:00:00Z","advisories":["RHSA-2019:2818"],"bugzilla":"1746238","bugzilla_description":"CVE-2019-14819 openshift-ansible: dockergc service account incorrectly associated with namespace during upgrade","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266->CWE-270","affected_packages":["openshift-ansible-0:3.11.146-1.git.0.fcedb45.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11250","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:4087","RHSA-2019:4052"],"bugzilla":"1740434","bugzilla_description":"CVE-2019-11250 kubernetes: Bearer tokens written to logs at high verbosity levels (>= 7)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["atomic-openshift-0:3.11.157-1.git.0.dfe38da.el7","openshift-0:4.1.27-201912021146.git.0.a40116f.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11250.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-11247","severity":"moderate","public_date":"2019-08-05T00:00:00Z","advisories":["RHBA-2019:2816","RHSA-2019:2769","RHSA-2019:2504","RHSA-2019:2690"],"bugzilla":"1732192","bugzilla_description":"CVE-2019-11247 kubernetes: API server allows access to cluster-scoped custom resources as if resources were namespaced","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["openshift-0:4.1.10-201908060758.git.0.d81afa6.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","atomic-openshift-0:3.11.146-1.git.0.4aab273.el7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11247.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-11249","severity":"moderate","public_date":"2019-08-05T00:00:00Z","advisories":["RHSA-2019:3239","RHSA-2019:3811","RHBA-2019:2794","RHBA-2019:2816"],"bugzilla":"1737651","bugzilla_description":"CVE-2019-11249 kubernetes: Incomplete fixes for CVE-2019-1002101 and CVE-2019-11246, kubectl cp potential directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["atomic-openshift-0:3.10.181-1.git.0.3ab4b3d.el7","openshift-0:4.1.16-201909090609.git.0.2f97059.el8","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","atomic-openshift-0:3.11.146-1.git.0.4aab273.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11249.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-3889","severity":"moderate","public_date":"2019-07-08T00:00:00Z","advisories":["RHSA-2020:0795","RHSA-2019:3722","RHSA-2019:3770"],"bugzilla":"1693499","bugzilla_description":"CVE-2019-3889 atomic-openshift: reflected XSS in authentication flow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["openshift4/ose-hypershift:v4.1.22-201910291109","openshift4/ose-oauth-server-rhel7:v4.2.4-201911050122","atomic-openshift-0:3.11.188-1.git.0.db0eaa8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3889.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2019-11246","severity":"moderate","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:1633","RHSA-2019:1632","RHSA-2019:1852"],"bugzilla":"1721704","bugzilla_description":"CVE-2019-11246 kubernetes: Incomplete fix for CVE-2019-1002101 allows for arbitrary file write via `kubectl cp`","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["atomic-openshift-0:3.9.89-1.git.0.9454f2a.el7","atomic-openshift-0:3.10.149-1.git.0.05de590.el7","atomic-openshift-0:3.11.117-1.git.0.14e54a3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-10150","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHSA-2019:3007","RHSA-2019:3811","RHSA-2019:2989","RHSA-2019:3143"],"bugzilla":"1713433","bugzilla_description":"CVE-2019-10150 atomic-openshift: OpenShift builds don't verify SSH Host Keys for the git repository","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","atomic-openshift-0:3.10.175-1.git.0.f9f0e81.el7","openshift4/ose-docker-builder:v4.1.20-201910102034"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10150.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2018-15664","severity":"moderate","public_date":"2019-05-23T00:00:00Z","advisories":["RHSA-2019:1910"],"bugzilla":"1714722","bugzilla_description":"CVE-2018-15664 docker: symlink-exchange race attacks in docker cp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-22|CWE-367)","affected_packages":["docker-2:1.13.1-102.git7f2769b.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15664.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-18367","severity":"moderate","public_date":"2019-04-24T00:00:00Z","advisories":["RHSA-2019:4090","RHSA-2019:4087","RHSA-2020:2479"],"bugzilla":"1706826","bugzilla_description":"CVE-2017-18367 libseccomp-golang: mishandling of multiple argument rules leading to a bypass of intended access restrictions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["openshift4/ose-hypershift:v4.1.27-201912030019","openshift4/ose-cli:v4.1.27-201912030019","openshift4/ose-node:v4.1.27-201912030019","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift-0:4.1.27-201912021146.git.0.a40116f.el8_0","openshift4/ose-cli-artifacts:v4.1.27-201912030019","openshift4/ose-hyperkube:v4.1.27-201912030019"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11244","severity":"low","public_date":"2019-04-22T00:00:00Z","advisories":["RHSA-2019:3942","RHSA-2020:0074","RHSA-2020:0020"],"bugzilla":"1703209","bugzilla_description":"CVE-2019-11244 kubernetes: Schema info written with world-writeable permissions when cached","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7","openshift4/ose-cli:v4.1.24-201911120311","openshift-0:4.1.24-201911080309.git.0.c41acf2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11244.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-1002101","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":["RHBA-2019:0620","RHBA-2019:0619","RHBA-2019:0636"],"bugzilla":"1685213","bugzilla_description":"CVE-2019-1002101 kubernetes: Mishandling of symlinks allows for arbitrary file write via `kubectl cp`","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["atomic-openshift-0:3.10.127-1.git.0.dab74c6.el7","atomic-openshift-0:3.11.98-1.git.0.0cbaff3.el7","atomic-openshift-0:3.9.74-1.git.0.78e56ea.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1002101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-3876","severity":"moderate","public_date":"2019-03-27T00:24:00Z","advisories":["RHSA-2019:1851"],"bugzilla":"1691107","bugzilla_description":"CVE-2019-3876 web-console: XSS in OAuth server /oauth/token/request endpoint","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-0:3.11.129-1.git.0.bd4f2d5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3876.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-13139","severity":"moderate","public_date":"2019-03-26T00:00:00Z","advisories":["RHBA-2019:3092"],"bugzilla":"1732627","bugzilla_description":"CVE-2019-13139 docker: command injection due to a missing validation of the git ref command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["docker-2:1.13.1-104.git4ef4b30.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-11840","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":["RHBA-2020:0063"],"bugzilla":"1691529","bugzilla_description":"CVE-2019-11840 golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["openshift-0:4.3.0-202001131753.git.0.0aee6a8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-3816","severity":"important","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2019:0972","RHSA-2019:0638"],"bugzilla":"1667070","bugzilla_description":"CVE-2019-3816 openwsman: Disclosure of arbitrary files outside of the registered URIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openwsman-0:2.6.3-6.git4391e5c.el7_6","openwsman-0:2.6.5-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-3833","severity":"moderate","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2020:3940"],"bugzilla":"1674478","bugzilla_description":"CVE-2019-3833 openwsman: Infinite loop in process_connection() allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openwsman-0:2.6.3-7.git4391e5c.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3833.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12181","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":["RHSA-2019:3338","RHSA-2019:2125"],"bugzilla":"1686783","bugzilla_description":"CVE-2018-12181 edk2: Stack buffer overflow with corrupted BMP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["edk2-0:20190308git89910a39dcfd-6.el8","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12181.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-1002100","severity":"moderate","public_date":"2019-02-28T00:00:00Z","advisories":["RHSA-2019:3239","RHSA-2019:1851"],"bugzilla":"1683190","bugzilla_description":"CVE-2019-1002100 kube-apiserver: DoS with crafted patch of type json-patch","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":["atomic-openshift-0:3.10.181-1.git.0.3ab4b3d.el7","atomic-openshift-0:3.11.129-1.git.0.bd4f2d5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1002100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-12180","severity":"important","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:0809","RHSA-2019:1116","RHSA-2019:0968"],"bugzilla":"1683372","bugzilla_description":"CVE-2018-12180 edk2: Buffer Overflow in BlockIo service for RAM disk","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7_6.1","redhat-virtualization-host-0:4.3-20190418.0.el7_6","edk2-0:20180508gitee3198e672e2-9.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"8.3"},{"CVE":"CVE-2019-0160","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3338","RHSA-2019:2125"],"bugzilla":"1691640","bugzilla_description":"CVE-2019-0160 edk2: Buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-121)","affected_packages":["edk2-0:20190308git89910a39dcfd-6.el8","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0160.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2019-5736","severity":"important","public_date":"2019-02-11T13:22:00Z","advisories":["RHSA-2019:0401","RHSA-2019:0303","RHSA-2019:0304","RHSA-2019:0975","RHSA-2019:0408"],"bugzilla":"1664908","bugzilla_description":"CVE-2019-5736 runc: Execution of malicious containers allows for container escape and access to host filesystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["runc-0:1.0.0-59.dev.git2abd837.el7","container-tools:rhel8-8000020190416221845.2ffa3d27","docker-2:1.13.1-91.git07f3374.el7","docker-2:1.12.6-79.git5680db5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5736.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2019-3826","severity":"moderate","public_date":"2019-01-31T00:00:00Z","advisories":["RHBA-2019:0326"],"bugzilla":"1672865","bugzilla_description":"CVE-2019-3826 prometheus: Stored DOM cross-site scripting (XSS) attack via crafted URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["golang-github-prometheus-prometheus-0:3.11.82-1.git.5027.9d24833.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3826.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-1003010","severity":"low","public_date":"2019-01-28T00:00:00Z","advisories":["RHBA-2019:0326"],"bugzilla":"1670292","bugzilla_description":"CVE-2019-1003010 jenkins-plugin-git: CSRF vulnerability in Git Plugin (SECURITY-1095)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["jenkins-2-plugins-0:3.11.1549642489-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1003010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-0542","severity":"moderate","public_date":"2019-01-09T00:00:00Z","advisories":["RHSA-2019:2552","RHSA-2019:2551","RHBA-2019:0959","RHSA-2019:1422"],"bugzilla":"1668531","bugzilla_description":"CVE-2019-0542 xterm.js: Mishandling of special characters allows for remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["atomic-openshift-web-console-0:3.11.104-1.git.1.3c3a7f2.el7","atomic-openshift-web-console-0:3.10.163-1.git.1.c3a2131.el7","openshift3/ose-console:v3.11.98-6","atomic-openshift-web-console-0:3.9.99-1.git.1.49cd7e9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1002105","severity":"critical","public_date":"2018-12-03T17:00:00Z","advisories":["RHSA-2018:3549","RHSA-2018:3537","RHSA-2018:3624","RHSA-2018:3754","RHSA-2018:3742","RHSA-2018:3752","RHSA-2018:3598","RHSA-2018:2908","RHSA-2018:3551","RHSA-2018:2906"],"bugzilla":"1648138","bugzilla_description":"CVE-2018-1002105 kubernetes: authentication/authorization bypass in the handling of non-101 responses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["atomic-openshift-0:3.4.1.44.57-1.git.0.a631031.el7","atomic-openshift-0:3.8.44-1.git.0.9be0abd.el7","atomic-openshift-0:3.10.72-1.git.0.3cb2fdc.el7","atomic-openshift-0:3.2.1.34-2.git.20.6367d5d.el7","atomic-openshift-0:3.5.5.31.80-1.git.0.c4a0780.el7","atomic-openshift-0:3.7.72-1.git.0.925b9cd.el7","atomic-openshift-0:3.11.43-1.git.0.647ac05.el7","atomic-openshift-0:3.9.51-1.git.0.dc3a40b.el7","atomic-openshift-0:3.3.1.46.45-1.git.0.2ce596e.el7","atomic-openshift-0:3.6.173.0.140-1.git.0.9686d52.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-5407","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3932","RHSA-2019:0483","RHSA-2019:2125","RHSA-2019:3929","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1645695","bugzilla_description":"CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7_6.1","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-19486","severity":"important","public_date":"2018-10-24T00:00:00Z","advisories":["RHSA-2018:3800"],"bugzilla":"1653143","bugzilla_description":"CVE-2018-19486 git: Improper handling of PATH allows for commands to be executed from the current directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["rh-git218-git-0:2.18.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3613","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641433","bugzilla_description":"CVE-2018-3613 edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3613.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5731","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641442","bugzilla_description":"CVE-2017-5731 edk2: Privilege escalation via processing of malformed files in TianoCompress.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5731.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5732","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641446","bugzilla_description":"CVE-2017-5732 edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5732.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5733","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641450","bugzilla_description":"CVE-2017-5733 edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5733.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5734","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641458","bugzilla_description":"CVE-2017-5734 edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5735","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641465","bugzilla_description":"CVE-2017-5735 edk2: Privilege escalation via heap-based buffer overflow in Decode() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-17456","severity":"important","public_date":"2018-10-05T00:00:00Z","advisories":["RHSA-2018:3408","RHSA-2020:0316","RHSA-2018:3541"],"bugzilla":"1636619","bugzilla_description":"CVE-2018-17456 git: arbitrary code execution via .gitmodules","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["git-0:1.7.1-10.el6_10","rh-git29-git-0:2.9.3-7.el6","git-0:1.8.3.1-20.el7","rh-git29-git-0:2.9.3-6.el7","rh-git29-git-0:2.9.3-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17456.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-20699","severity":"low","public_date":"2018-10-04T00:00:00Z","advisories":["RHSA-2019:0487"],"bugzilla":"1666565","bugzilla_description":"CVE-2018-20699 docker: Memory exhaustion via large integer used with --cpuset-mems or --cpuset-cpus","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["docker-2:1.13.1-94.gitb2f74b2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20699.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.5"},{"CVE":"CVE-2018-14632","severity":"important","public_date":"2018-09-06T00:00:00Z","advisories":["RHBA-2018:2652","RHSA-2018:2654","RHSA-2018:2908","RHSA-2018:2709","RHSA-2018:2906"],"bugzilla":"1625885","bugzilla_description":"CVE-2018-14632 atomic-openshift: oc patch with json causes masterapi service crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["atomic-openshift-0:3.10.66-1.git.0.91d1e89.el7","atomic-openshift-0:3.11.16-1.git.0.b48b8f8.el7","atomic-openshift-0:3.7.72-1.git.0.925b9cd.el7","atomic-openshift-0:3.6.173.0.130-1.git.0.8d78a39.el7","atomic-openshift-0:3.9.51-1.git.0.dc3a40b.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-10932","severity":"low","public_date":"2018-08-10T16:01:00Z","advisories":["RHSA-2019:3673"],"bugzilla":"1614896","bugzilla_description":"CVE-2018-10932 lldptool: improper sanitization of shell-escape codes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["lldpad-0:1.0.1-13.git036e314.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10932.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-15501","severity":"low","public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1615585","bugzilla_description":"CVE-2018-15501 libgit2: out-of-bounds reads when processing smart-protocol ng packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15501.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-5383","severity":"important","public_date":"2018-07-23T00:00:00Z","advisories":["RHSA-2019:2169"],"bugzilla":"1614159","bugzilla_description":"CVE-2018-5383 kernel: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["linux-firmware-0:20190429-72.gitddde598.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5383.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-10892","severity":"moderate","public_date":"2018-07-05T00:00:00Z","advisories":["RHSA-2018:2482","RHBA-2018:2796"],"bugzilla":"1598581","bugzilla_description":"CVE-2018-10892 docker: container breakout without selinux in enforcing mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["docker-2:1.13.1-74.git6e3bb8e.el7","podman-0:0.9.2-5.git37a2afe.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10892.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-1000600","severity":"moderate","public_date":"2018-06-25T00:00:00Z","advisories":[],"bugzilla":"1596120","bugzilla_description":"CVE-2018-1000600 jenkins-plugin-github: CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials (SECURITY-915)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000600.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-0161","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2019:2125","RHSA-2019:2437"],"bugzilla":"1694065","bugzilla_description":"CVE-2019-0161 edk2: stack overflow in XHCI causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-400","affected_packages":["redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2018-1000182","severity":"moderate","public_date":"2018-06-04T00:00:00Z","advisories":[],"bugzilla":"1585987","bugzilla_description":"CVE-2018-1000182 jenkins-plugin-git: Server-side request forgery vulnerability (SECURITY-810)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2018-1000184","severity":"moderate","public_date":"2018-06-04T00:00:00Z","advisories":[],"bugzilla":"1585989","bugzilla_description":"CVE-2018-1000184 jenkins-plugin-github: Server-side request forgery vulnerability (SECURITY-799)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-918","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000184.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2018-1000183","severity":"moderate","public_date":"2018-06-04T00:00:00Z","advisories":[],"bugzilla":"1585992","bugzilla_description":"CVE-2018-1000183 jenkins-plugin-github: CSRF vulnerability and missing permission checks allowed capturing credentials (SECURITY-804)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-1000185","severity":"moderate","public_date":"2018-06-04T00:00:00Z","advisories":[],"bugzilla":"1585994","bugzilla_description":"CVE-2018-1000185 jenkins-plugin-github-branch-source: Server-side request forgery vulnerability (SECURITY-806)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-918","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2018-10856","severity":"moderate","public_date":"2018-05-31T00:00:00Z","advisories":["RHSA-2018:2037"],"bugzilla":"1592166","bugzilla_description":"CVE-2018-10856 podman: Containers run as non-root users do not drop capabilities","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["podman-0:0.6.1-3.git3e0ff12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10856.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-11235","severity":"important","public_date":"2018-05-30T00:00:00Z","advisories":["RHSA-2018:1957","RHSA-2018:2147"],"bugzilla":"1583862","bugzilla_description":"CVE-2018-11235 git: arbitrary code execution when recursively cloning a malicious repository","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-git29-git-0:2.9.3-4.el7","rh-git29-git-0:2.9.3-4.el6","git-0:1.8.3.1-14.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11235.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-11233","severity":"moderate","public_date":"2018-05-30T00:00:00Z","advisories":["RHSA-2018:2147"],"bugzilla":"1583888","bugzilla_description":"CVE-2018-11233 git: path sanity check in is_ntfs_dotgit() can read arbitrary memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-git29-git-0:2.9.3-4.el7","rh-git29-git-0:2.9.3-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-11439","severity":"low","public_date":"2018-05-27T00:00:00Z","advisories":["RHSA-2020:1175"],"bugzilla":"1584868","bugzilla_description":"CVE-2018-11439 taglib: heap-based buffer over-read via a crafted audio file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["taglib-0:1.8-8.20130218git.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11439.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10843","severity":"important","public_date":"2018-05-24T00:00:00Z","advisories":["RHSA-2018:2013"],"bugzilla":"1579096","bugzilla_description":"CVE-2018-10843 source-to-image: Builder images with assembler-user LABEL set to root allows attackers to execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.9.31-1.git.0.ef9737b.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2018-1102","severity":"critical","public_date":"2018-04-27T00:00:00Z","advisories":["RHSA-2018:1239","RHSA-2018:1229","RHSA-2018:1237","RHSA-2018:1227","RHSA-2019:0036","RHSA-2018:1235","RHSA-2018:1233","RHSA-2018:1231","RHSA-2018:1243","RHSA-2018:1241"],"bugzilla":"1562246","bugzilla_description":"CVE-2018-1102 source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.3.1.46.39-2.git.3.cc57f5b.el7","atomic-openshift-0:3.9.25-1.git.0.6bc473e.el7","atomic-openshift-0:3.1.1.11-4.git.3.12809c8.el7","source-to-image-0:1.1.13-1.el7","atomic-openshift-0:3.2.1.34-2.git.3.aad33c3.el7","atomic-openshift-0:3.7.44-1.git.0.6b061d4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.9"},{"CVE":"CVE-2018-1000400","severity":"moderate","public_date":"2018-04-27T00:00:00Z","advisories":["RHBA-2018:1796"],"bugzilla":"1578109","bugzilla_description":"CVE-2018-1000400 cri-o: capabilities are not dropped when switching to a non-root user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":["cri-o-0:1.9.12-1.gitfa11beb.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000400.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-15138","severity":"moderate","public_date":"2018-04-11T00:00:00Z","advisories":["RHBA-2018:0489"],"bugzilla":"1566212","bugzilla_description":"CVE-2017-15138 atomic-openshift: cluster-reader can escalate to creating builds via webhooks in any project","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["atomic-openshift-0:3.9.14-1.git.0.4efa2ca.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15138.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2017-15137","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":["RHBA-2018:0489"],"bugzilla":"1566191","bugzilla_description":"CVE-2017-15137 atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tag","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.9.14-1.git.0.4efa2ca.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-0739","severity":"moderate","public_date":"2018-03-27T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3090","RHSA-2019:1712","RHSA-2019:1711","RHSA-2018:3221"],"bugzilla":"1561266","bugzilla_description":"CVE-2018-0739 openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-400","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7","openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0739.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1085","severity":"important","public_date":"2018-03-23T00:00:00Z","advisories":["RHSA-2018:2013"],"bugzilla":"1557822","bugzilla_description":"CVE-2018-1085 openshift-ansible: Incorrectly quoted values in etcd.conf causes disabling of SSL client certificate authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["openshift-ansible-0:3.9.31-1.git.34.154617d.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1085.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2018-1002100","severity":"moderate","public_date":"2018-03-17T00:00:00Z","advisories":["RHBA-2018:1796"],"bugzilla":"1564305","bugzilla_description":"CVE-2018-1002100 kubernetes: Kubectl copy doesn't check for paths outside of it's destination directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.9.30-1.git.0.dec1ba7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-1002101","severity":"important","public_date":"2018-03-12T00:00:00Z","advisories":["RHSA-2018:0475"],"bugzilla":"1525130","bugzilla_description":"CVE-2017-1002101 kubernetes: Volume security can be sidestepped with innocent emptyDir and subpath","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1002101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2018-8098","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":[],"bugzilla":"1554366","bugzilla_description":"CVE-2018-8099 CVE-2018-8098 libgit2: denial of service (DoS) via crafted repository index files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8098.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-8099","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":[],"bugzilla":"1554366","bugzilla_description":"CVE-2018-8099 CVE-2018-8098 libgit2: denial of service (DoS) via crafted repository index files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8099.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-1002102","severity":"moderate","public_date":"2018-03-06T00:00:00Z","advisories":["RHSA-2018:0475"],"bugzilla":"1551818","bugzilla_description":"CVE-2017-1002102 kubernetes: Malicious containers can delete any file from the node","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1002102.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-1000110","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":[],"bugzilla":"1549538","bugzilla_description":"CVE-2018-1000110 jenkins-plugin-git: Disclosure of user names and node names to unauthorized users through post-commit hook URL in Git Plugin (SECURITY-723)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000021","severity":"moderate","public_date":"2018-01-06T00:00:00Z","advisories":[],"bugzilla":"1541854","bugzilla_description":"CVE-2018-1000021 git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000021.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2017-15298","severity":"low","public_date":"2017-10-12T00:00:00Z","advisories":[],"bugzilla":"1510455","bugzilla_description":"CVE-2017-15298 git: Mishandling layers of tree objects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15298.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14867","severity":"moderate","public_date":"2017-09-26T00:00:00Z","advisories":[],"bugzilla":"1496344","bugzilla_description":"CVE-2017-14867 git: cvsserver command injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14867.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-1000117","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2491","RHSA-2017:2484","RHSA-2017:2485","RHSA-2017:2675","RHSA-2017:2674"],"bugzilla":"1480386","bugzilla_description":"CVE-2017-1000117 git: Command injection via malicious ssh URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["git-0:1.8.3.1-12.el7_4","rh-git29-git-0:2.9.3-3.el6","rh-git29-git-0:2.9.3-3.el7","git-0:1.7.1-9.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000117.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-1000092","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":["RHBA-2017:2642"],"bugzilla":"1471053","bugzilla_description":"CVE-2017-1000092 jenkins-plugin-git: CSRF vulnerability allows capturing credentials (SECURITY-528)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":["jenkins-2-plugins-0:3.7.1502412812-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000092.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-11468","severity":"low","public_date":"2017-07-07T00:00:00Z","advisories":["RHSA-2017:2603"],"bugzilla":"1474893","bugzilla_description":"CVE-2017-11468 docker-distribution: Does not properly restrict the amount of content accepted from a user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["docker-distribution-0:2.6.2-1.git48294d9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-9263","severity":"moderate","public_date":"2017-05-26T00:00:00Z","advisories":["RHSA-2017:2727","RHSA-2017:2648","RHSA-2017:2418","RHSA-2017:2692","RHSA-2017:2665","RHSA-2017:2698","RHSA-2017:2553"],"bugzilla":"1457327","bugzilla_description":"CVE-2017-9263 openvswitch: Invalid processing of a malicious OpenFlow role status message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openvswitch-0:2.4.1-2.git20160727.el7ost","openvswitch-0:2.7.2-1.git20170719.el7fdp","openvswitch-0:2.5.0-15.git20160727.el7ost","openvswitch-0:2.6.1-13.git20161206.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9263.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9265","severity":"moderate","public_date":"2017-05-26T00:00:00Z","advisories":["RHSA-2017:2727","RHSA-2017:2648","RHSA-2017:2418","RHSA-2017:2692","RHSA-2017:2665","RHSA-2017:2698","RHSA-2017:2553"],"bugzilla":"1457335","bugzilla_description":"CVE-2017-9265 openvswitch: Buffer over-read while parsing the group mod OpenFlow message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["openvswitch-0:2.4.1-2.git20160727.el7ost","openvswitch-0:2.7.2-1.git20170719.el7fdp","openvswitch-0:2.5.0-15.git20160727.el7ost","openvswitch-0:2.6.1-13.git20161206.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9265.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-9214","severity":"moderate","public_date":"2017-05-20T00:00:00Z","advisories":["RHSA-2017:2727","RHSA-2017:2648","RHSA-2017:2418","RHSA-2017:2692","RHSA-2017:2665","RHSA-2017:2698","RHSA-2017:2553"],"bugzilla":"1456795","bugzilla_description":"CVE-2017-9214 openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["openvswitch-0:2.4.1-2.git20160727.el7ost","openvswitch-0:2.7.2-1.git20170719.el7fdp","openvswitch-0:2.5.0-15.git20160727.el7ost","openvswitch-0:2.6.1-13.git20161206.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8386","severity":"moderate","public_date":"2017-05-05T00:00:00Z","advisories":["RHSA-2017:2491","RHSA-2017:2004"],"bugzilla":"1450407","bugzilla_description":"CVE-2017-8386 git: Escape out of git-shell","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-git29-git-0:2.9.3-3.el6","rh-git29-git-0:2.9.3-3.el7","git-0:1.8.3.1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8386.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2017-1000242","severity":"low","public_date":"2017-04-27T00:00:00Z","advisories":[],"bugzilla":"1446495","bugzilla_description":"CVE-2017-1000242 jenkins-plugin-git-client: Storing sensitive information in world-readable temporary files (SECURITY-445)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000242.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-9264","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":["RHSA-2017:2727","RHSA-2017:2648","RHSA-2017:2418"],"bugzilla":"1457329","bugzilla_description":"CVE-2017-9264 openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["openvswitch-0:2.7.2-1.git20170719.el7fdp","openvswitch-0:2.6.1-13.git20161206.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9264.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-8651","severity":"low","public_date":"2016-12-07T00:00:00Z","advisories":["RHSA-2016:2915"],"bugzilla":"1397987","bugzilla_description":"CVE-2016-8651 OpenShift Enterprise 3: Pulling of any image is possible with it manifest","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.1.1.10-1.git.0.efeef8d.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8651.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-8631","severity":"moderate","public_date":"2016-11-01T00:00:00Z","advisories":["RHSA-2016:2696"],"bugzilla":"1390735","bugzilla_description":"CVE-2016-8631 OSE 3: Router sometimes selects new routes over old routes when determining claimed hostnames","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.3.1.4-1.git.0.7c8657c.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8631.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-8867","severity":"important","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2020:2653"],"bugzilla":"1390163","bugzilla_description":"CVE-2016-8867 docker: Ambient capability usage in containers","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["docker-2:1.13.1-162.git64e9980.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8867.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-7075","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2016:2064"],"bugzilla":"1384112","bugzilla_description":"CVE-2016-7075 OpenShift 3: API server does not validate client-provided intermediate certificates correctly","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:C/A:N","CWE":"CWE-295","affected_packages":["atomic-openshift-0:3.1.1.8-1.git.0.d469026.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-5418","severity":"important","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844","RHSA-2016:1852","RHSA-2016:1853"],"bugzilla":"1362601","bugzilla_description":"CVE-2016-5418 libarchive: Archive Entry with type 1 (hardlink), but has a non-zero data size file overwrite","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-20->CWE-22","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2","atomic-openshift-0:3.1.1.7-1.git.0.65f396b.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5418.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5392","severity":"important","public_date":"2016-07-14T00:00:00Z","advisories":["RHSA-2016:1427"],"bugzilla":"1356195","bugzilla_description":"CVE-2016-5392 Kubernetes: disclosure of information in multi tenant environments via watch-cache list","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:C/I:N/A:N","CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.2.1.7-1.git.0.2702170.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5392.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-3703","severity":"moderate","public_date":"2016-05-19T00:00:00Z","advisories":["RHSA-2016:1095","RHSA-2016:1094"],"bugzilla":"1330233","bugzilla_description":"CVE-2016-3703 OpenShift Enterprise 3: Untrusted content loaded via the API proxy can access web console credentials on the same domain","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-285","affected_packages":["atomic-openshift-0:3.1.1.6-8.git.64.80b61da.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3703.json"},{"CVE":"CVE-2016-2074","severity":"important","public_date":"2016-03-28T00:00:00Z","advisories":["RHSA-2016:0524","RHSA-2016:0537","RHSA-2016:0615","RHSA-2016:0523"],"bugzilla":"1318553","bugzilla_description":"CVE-2016-2074 openvswitch: MPLS buffer overflow vulnerability","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["openvswitch-dpdk-0:2.4.0-0.10346.git97bab959.3.el7_2","openvswitch-0:2.4.0-2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2074.json"},{"CVE":"CVE-2016-2315","severity":"important","public_date":"2016-03-06T00:00:00Z","advisories":["RHSA-2016:0496","RHSA-2016:0497"],"bugzilla":"1317981","bugzilla_description":"CVE-2016-2315 CVE-2016-2324 git: path_name() integer truncation and overflow leading to buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-131->CWE-122->CWE-190->CWE-194","affected_packages":["git19-git-0:1.9.4-4.el7.1","git19-git-0:1.9.4-4.el6.1","git-0:1.7.1-4.el6_7.1","git-0:1.8.3.1-6.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2315.json"},{"CVE":"CVE-2016-2324","severity":"important","public_date":"2016-03-06T00:00:00Z","advisories":["RHSA-2016:0496","RHSA-2016:0497"],"bugzilla":"1317981","bugzilla_description":"CVE-2016-2315 CVE-2016-2324 git: path_name() integer truncation and overflow leading to buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-131->CWE-122->CWE-190->CWE-194","affected_packages":["git19-git-0:1.9.4-4.el7.1","git19-git-0:1.9.4-4.el6.1","git-0:1.7.1-4.el6_7.1","git-0:1.8.3.1-6.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2324.json"},{"CVE":"CVE-2016-2142","severity":"moderate","public_date":"2016-02-17T00:00:00Z","advisories":["RHSA-2016:1038"],"bugzilla":"1311220","bugzilla_description":"CVE-2016-2142 openshift: Bind password for AD account is stored in world readable file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["atomic-openshift-0:3.1.1.6-6.git.43.f583589.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2142.json"},{"CVE":"CVE-2016-1905","severity":"moderate","public_date":"2016-01-11T00:00:00Z","advisories":["RHSA-2016:0351","RHSA-2016:0070"],"bugzilla":"1297910","bugzilla_description":"CVE-2016-1905 Kubernetes api server: patch operation should use patched object to check admission control","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","CWE":"CWE-285","affected_packages":["openshift-0:3.0.2.0-0.git.45.423f434.el7ose"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1905.json"},{"CVE":"CVE-2016-1906","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0351","RHSA-2016:0070"],"bugzilla":"1297916","bugzilla_description":"CVE-2016-1906 Kubernetes api server: build config to a strategy that isn't allowed by policy","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-285","affected_packages":["openshift-0:3.0.2.0-0.git.45.423f434.el7ose"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1906.json"},{"CVE":"CVE-2015-7528","severity":"moderate","public_date":"2015-11-27T00:00:00Z","advisories":["RHSA-2015:2544","RHSA-2015:2615"],"bugzilla":"1286745","bugzilla_description":"CVE-2015-7528 OpenShift: pod log location must validate container if provided","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":["openshift-0:3.0.2.0-0.git.38.7576bc5.el7ose","atomic-openshift-0:3.1.0.4-1.git.15.5e061c3.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7528.json"},{"CVE":"CVE-2015-5305","severity":"moderate","public_date":"2015-10-27T00:00:00Z","advisories":["RHSA-2015:1945"],"bugzilla":"1273969","bugzilla_description":"CVE-2015-5305 Kubernetes: Missing name validation allows path traversal in etcd","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["openshift-0:3.0.2.0-0.git.20.656dc3e.el7ose"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5305.json"},{"CVE":"CVE-2015-7545","severity":"moderate","public_date":"2015-10-05T00:00:00Z","advisories":["RHSA-2015:2561","RHSA-2015:2515"],"bugzilla":"1269794","bugzilla_description":"CVE-2015-7545 git: arbitrary code execution via crafted URLs","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["git19-git-0:1.9.4-3.el6.1","git19-git-0:1.9.4-3.el7.1","git-0:1.8.3.1-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7545.json"},{"CVE":"CVE-2015-5250","severity":"moderate","public_date":"2015-09-03T00:00:00Z","advisories":["RHSA-2015:1736"],"bugzilla":"1259867","bugzilla_description":"CVE-2015-5250 OpenShift: Malformed JSON can cause API process crash","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["openshift-0:3.0.1.0-1.git.529.dcab62c.el7ose"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5250.json"},{"CVE":"CVE-2015-5222","severity":"important","public_date":"2015-08-19T00:00:00Z","advisories":["RHSA-2015:1650"],"bugzilla":"1255120","bugzilla_description":"CVE-2015-5222 OpenShift3: Exec operations should be forbidden to privileged pods such as builder pods","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-862","affected_packages":["openshift-0:3.0.1.0-1.git.527.f8d5fed.el7ose"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5222.json"},{"CVE":"CVE-2014-9390","severity":"low","public_date":"2014-12-18T00:00:00Z","advisories":[],"bugzilla":"1175960","bugzilla_description":"CVE-2014-9390 git: arbitrary command execution vulnerability on case-insensitive file systems","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-20->CWE-172->CWE-552->CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9390.json"},{"CVE":"CVE-2014-3583","severity":"low","public_date":"2014-10-12T00:00:00Z","advisories":["RHSA-2015:1858","RHSA-2015:1855"],"bugzilla":"1163555","bugzilla_description":"CVE-2014-3583 httpd: mod_proxy_fcgi handle_headers() buffer over read","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["mod_proxy_fcgi-0:2.4.10-5.20150415gitd45a11f.el6cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3583.json"},{"CVE":"CVE-2014-9938","severity":"moderate","public_date":"2014-04-22T00:00:00Z","advisories":["RHSA-2017:2004"],"bugzilla":"1434415","bugzilla_description":"CVE-2014-9938 git: git-prompt.sh does not sanitize branch names in $PS1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["git-0:1.8.3.1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9938.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2014-0040","severity":"low","public_date":"2014-01-09T00:00:00Z","advisories":["RHSA-2014:0579"],"bugzilla":"1059514","bugzilla_description":"CVE-2014-0040 OpenStack openstack-heat-templates: use of HTTP to download signing keys/code","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"(CWE-201|CWE-522)","affected_packages":["openstack-heat-templates-0:0-0.3.20140407git.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0040.json"},{"CVE":"CVE-2014-0041","severity":"low","public_date":"2014-01-09T00:00:00Z","advisories":["RHSA-2014:0579"],"bugzilla":"1059515","bugzilla_description":"CVE-2014-0041 OpenStack openstack-heat-templates: use of HTTPS url and sslverify=false","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":["openstack-heat-templates-0:0-0.3.20140407git.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0041.json"},{"CVE":"CVE-2014-0042","severity":"low","public_date":"2014-01-09T00:00:00Z","advisories":["RHSA-2014:0579"],"bugzilla":"1059520","bugzilla_description":"CVE-2014-0042 OpenStack openstack-heat-templates: setting gpgcheck=0 for signed packages","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-494","affected_packages":["openstack-heat-templates-0:0-0.3.20140407git.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0042.json"},{"CVE":"CVE-2013-0308","severity":"moderate","public_date":"2013-02-20T00:00:00Z","advisories":["RHSA-2013:0589"],"bugzilla":"909977","bugzilla_description":"CVE-2013-0308 git: Incorrect IMAP server's SSL x509.v3 certificate validation in git-imap-send command","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["git-0:1.7.1-3.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0308.json"},{"CVE":"CVE-2012-4518","severity":"low","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2013:0509"],"bugzilla":"865499","bugzilla_description":"CVE-2012-4518 ibacm: ibacm service files created with world writable permissions (DoS)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ibacm-0:1.0.8-0.git7a3adb7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4518.json"},{"CVE":"CVE-2012-4517","severity":"low","public_date":"2012-04-04T00:00:00Z","advisories":["RHSA-2013:0509"],"bugzilla":"865492","bugzilla_description":"CVE-2012-4517 ibacm: DoS (ibacm deamon crash) by joining responses for multicast destinations","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ibacm-0:1.0.8-0.git7a3adb7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4517.json"},{"CVE":"CVE-2010-3906","severity":"moderate","public_date":"2010-12-15T00:00:00Z","advisories":["RHSA-2010:1003"],"bugzilla":"663609","bugzilla_description":"CVE-2010-3906 Git (gitweb): XSS due to missing escaping of HTML element attributes","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["git-0:1.7.1-2.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3906.json"},{"CVE":"CVE-2010-2542","severity":"low","public_date":"2010-07-20T00:00:00Z","advisories":[],"bugzilla":"618108","bugzilla_description":"CVE-2010-2542 Git: Arbitrary code execution via specially-crafted .git file","cvss_score":3.0,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2542.json"},{"CVE":"CVE-2007-3920","severity":"low","public_date":"2007-10-19T00:00:00Z","advisories":["RHSA-2008:0485"],"bugzilla":"350271","bugzilla_description":"CVE-2007-3920 gnome-screensaver loses keyboard grab when running under compiz","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["compiz-0:0.0.13-0.37.20060817git.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3920.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gjs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gjs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gjs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gl-manpages_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gl-manpages_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gl-manpages_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glade-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glade-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glade-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-dtd-parser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-dtd-parser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-dtd-parser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-fastinfoset_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-fastinfoset_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-fastinfoset_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-jaxb-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-jaxb-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-jaxb-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-jaxb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-jaxb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glassfish-jaxb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glib-networking_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glib-networking_security_api_results.json
new file mode 100644
index 0000000..8752c9b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glib-networking_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13645","severity":"moderate","public_date":"2020-05-04T00:00:00Z","advisories":[],"bugzilla":"1842645","bugzilla_description":"CVE-2020-13645 glib-networking: GTlsClientConnection silently ignores unset server identity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13645.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glib2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glib2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glib2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glib2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glib2_security_api_results.json
new file mode 100644
index 0000000..6d26cca
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glib2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-6750","severity":"moderate","public_date":"2020-01-09T00:00:00Z","advisories":[],"bugzilla":"1790288","bugzilla_description":"CVE-2020-6750 glib: Mishandling of proxy_addr field in GSocketClient may lead to proxy being ignored","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13012","severity":"low","public_date":"2019-06-28T00:00:00Z","advisories":[],"bugzilla":"1728632","bugzilla_description":"CVE-2019-13012 glib2: insecure permissions for files and directories","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13012.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-12450","severity":"moderate","public_date":"2019-05-23T00:00:00Z","advisories":["RHSA-2019:3530","RHSA-2020:3978","RHBA-2019:3303"],"bugzilla":"1719141","bugzilla_description":"CVE-2019-12450 glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["glib2-0:2.56.1-7.el7","redhat-coreos-42.81.20191107.0","glib2-0:2.56.4-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.6"},{"CVE":"CVE-2019-9633","severity":"moderate","public_date":"2019-01-29T00:00:00Z","advisories":[],"bugzilla":"1687805","bugzilla_description":"CVE-2019-9633 glib: g_socket_client_connected_callback in gio/gsocketclient.c allows to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2018-16428","severity":"low","public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1626145","bugzilla_description":"CVE-2018-16428 glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16428.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2018-16429","severity":"low","public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1626148","bugzilla_description":"CVE-2018-16429 glib2: Out-of-bounds read in g_markup_parse_context_parse() in gmarkup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16429.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2017-16231","severity":null,"public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1700392","bugzilla_description":"CVE-2017-16231 pcre: self-recursive call in match() in pcre_exec.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11164","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":[],"bugzilla":"1470107","bugzilla_description":"CVE-2017-11164 pcre: OP_KETRMAX feature in the match function in pcre_exec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7244","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437364","bugzilla_description":"CVE-2017-7244 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7245","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437367","bugzilla_description":"CVE-2017-7245 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7246","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437369","bugzilla_description":"CVE-2017-7246 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-8399","severity":"moderate","public_date":"2017-03-10T00:00:00Z","advisories":[],"bugzilla":"1449629","bugzilla_description":"CVE-2017-8399 pcre2: Stack-based buffer overflow in pcre2_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7186","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1434504","bugzilla_description":"CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-6004","severity":"moderate","public_date":"2017-02-14T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1425365","bugzilla_description":"CVE-2017-6004 pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-9769","severity":"moderate","public_date":"2016-03-23T00:00:00Z","advisories":[],"bugzilla":"1320995","bugzilla_description":"CVE-2014-9769 pcre: incorrect nested table jumps when JIT is used (8.36/6)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9769.json"},{"CVE":"CVE-2016-3191","severity":"important","public_date":"2016-02-09T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1025"],"bugzilla":"1311503","bugzilla_description":"CVE-2016-3191 pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3191.json"},{"CVE":"CVE-2016-1283","severity":"important","public_date":"2016-01-04T00:00:00Z","advisories":["RHSA-2016:1132"],"bugzilla":"1295385","bugzilla_description":"CVE-2016-1283 pcre: heap buffer overflow in handling of duplicate named groups (8.39/14)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1283.json"},{"CVE":"CVE-2015-8383","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287614","bugzilla_description":"CVE-2015-8383 pcre: Buffer overflow caused by repeated conditional group (8.38/3)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8383.json"},{"CVE":"CVE-2015-3210","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3210.json"},{"CVE":"CVE-2015-8384","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8384.json"},{"CVE":"CVE-2015-8385","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287629","bugzilla_description":"CVE-2015-8385 pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8385.json"},{"CVE":"CVE-2015-8386","severity":"low","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287636","bugzilla_description":"CVE-2015-8386 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8386.json"},{"CVE":"CVE-2015-8387","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287646","bugzilla_description":"CVE-2015-8387 pcre: Integer overflow in subroutine calls (8.38/8)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8387.json"},{"CVE":"CVE-2015-8389","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287659","bugzilla_description":"CVE-2015-8389 pcre: infinite recursion in JIT compiler when processing certain patterns (8.38/21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8389.json"},{"CVE":"CVE-2015-8390","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287666","bugzilla_description":"CVE-2015-8390 pcre: uninitialized memory read triggered by malformed posix character class (8.38/22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8390.json"},{"CVE":"CVE-2015-8391","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287671","bugzilla_description":"CVE-2015-8391 pcre: inefficient posix character class syntax check (8.38/16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8391.json"},{"CVE":"CVE-2015-8392","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287690","bugzilla_description":"CVE-2015-8392 pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8392.json"},{"CVE":"CVE-2015-8393","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287695","bugzilla_description":"CVE-2015-8393 pcre: pcregrep -q is not always quiet (8.38/28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8393.json"},{"CVE":"CVE-2015-8394","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287702","bugzilla_description":"CVE-2015-8394 pcre: Integer overflow caused by missing check for certain conditions (8.38/31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8394.json"},{"CVE":"CVE-2015-8381","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8381.json"},{"CVE":"CVE-2015-8395","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8395.json"},{"CVE":"CVE-2015-5073","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5073.json"},{"CVE":"CVE-2015-8388","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8388.json"},{"CVE":"CVE-2015-3217","severity":"moderate","public_date":"2015-06-03T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1228283","bugzilla_description":"CVE-2015-3217 pcre: stack overflow caused by mishandled group empty match (8.38/11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3217.json"},{"CVE":"CVE-2015-8380","severity":null,"public_date":"2015-06-01T00:00:00Z","advisories":[],"bugzilla":"1285413","bugzilla_description":"CVE-2015-8380 pcre: OOB write when pcre_exec() is called with ovecsize of 1 (8.38/10)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8380.json"},{"CVE":"CVE-2015-2326","severity":"moderate","public_date":"2015-03-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1207202","bugzilla_description":"CVE-2015-2326 pcre: heap buffer over-read in pcre_compile2() (8.37/23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2326.json"},{"CVE":"CVE-2015-2328","severity":"moderate","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1285399","bugzilla_description":"CVE-2015-2328 pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2328.json"},{"CVE":"CVE-2015-2327","severity":"moderate","public_date":"2014-07-11T00:00:00Z","advisories":["RHBA-2015:2142","RHSA-2016:2750"],"bugzilla":"1285408","bugzilla_description":"CVE-2015-2327 pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2327.json"},{"CVE":"CVE-2008-4316","severity":"moderate","public_date":"2009-03-12T00:00:00Z","advisories":["RHSA-2009:0336"],"bugzilla":"474770","bugzilla_description":"CVE-2008-4316 glib2: integer overflows in the base64 handling functions (oCERT-2008-015)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["glib2-0:2.12.3-4.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4316.json"},{"CVE":"CVE-2012-0039","severity":"moderate","public_date":"2003-05-29T00:00:00Z","advisories":[],"bugzilla":"772720","bugzilla_description":"CVE-2012-0039 glib2: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0039.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-headers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-headers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-headers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc_security_api_results.json
new file mode 100644
index 0000000..dbbf939
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-6096","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1820331","bugzilla_description":"CVE-2020-6096 glibc: signed comparison vulnerability in the ARMv7 memcpy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6096.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10029","severity":"moderate","public_date":"2020-02-12T00:00:00Z","advisories":[],"bugzilla":"1810670","bugzilla_description":"CVE-2020-10029 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10029.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2020-1751","severity":"moderate","public_date":"2020-01-20T00:00:00Z","advisories":[],"bugzilla":"1810719","bugzilla_description":"CVE-2020-1751 glibc: array overflow in backtrace functions for powerpc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1751.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-1752","severity":"moderate","public_date":"2020-01-17T00:00:00Z","advisories":[],"bugzilla":"1810718","bugzilla_description":"CVE-2020-1752 glibc: use-after-free in glob() function when expanding ~user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1752.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-19126","severity":"low","public_date":"2019-11-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3861","RHSA-2020:1828"],"bugzilla":"1774681","bugzilla_description":"CVE-2019-19126 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glibc-0:2.17-317.el7","glibc-0:2.28-101.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-1010025","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":[],"bugzilla":"1737445","bugzilla_description":"CVE-2019-1010025 glibc: information disclosure of heap addresses of pthread_created thread","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010025.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-1010023","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":[],"bugzilla":"1773916","bugzilla_description":"CVE-2019-1010023 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010023.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-1010024","severity":"moderate","public_date":"2019-07-15T00:00:00Z","advisories":[],"bugzilla":"1773927","bugzilla_description":"CVE-2019-1010024 glibc: ASLR bypass using cache of thread stack and heap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010024.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2005-3590","severity":"low","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1706046","bugzilla_description":"CVE-2005-3590 glibc: buffer overflow in getgrouplist function leading to corrupted memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3590.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2009-5155","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1683683","bugzilla_description":"CVE-2009-5155 glibc: parse_reg_exp in posix/regcomp.c misparses alternatives leading to denial of service or trigger incorrect result","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1010022","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1731964","bugzilla_description":"CVE-2019-1010022 glibc: stack guard protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-119->CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-9192","severity":null,"public_date":"2019-02-26T00:00:00Z","advisories":[],"bugzilla":"1684374","bugzilla_description":"CVE-2019-9192 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9192.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2019-7309","severity":"low","public_date":"2019-02-02T00:00:00Z","advisories":[],"bugzilla":"1672232","bugzilla_description":"CVE-2019-7309 glibc: memcmp function incorrectly returns zero","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7309.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20796","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":[],"bugzilla":"1683150","bugzilla_description":"CVE-2018-20796 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9169","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":[],"bugzilla":"1684057","bugzilla_description":"CVE-2019-9169 glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-6488","severity":"moderate","public_date":"2019-01-16T00:00:00Z","advisories":[],"bugzilla":"1667931","bugzilla_description":"CVE-2019-6488 glibc: Incorrect attempt to use a 64-bit register for size_t in assembly codes results in segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-19591","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1653993","bugzilla_description":"CVE-2018-19591 glibc: file descriptor leak in if_nametoindex() in sysdeps/unix/sysv/linux/if_index.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19591.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-11237","severity":"moderate","public_date":"2018-05-17T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1581274","bugzilla_description":"CVE-2018-11237 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11237.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-11236","severity":"moderate","public_date":"2018-02-04T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1581269","bugzilla_description":"CVE-2018-11236 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-121","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-6551","severity":"moderate","public_date":"2018-02-02T00:00:00Z","advisories":[],"bugzilla":"1542119","bugzilla_description":"CVE-2018-6551 glibc: integer overflow in malloc functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6551.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000001","severity":"important","public_date":"2018-01-11T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1533836","bugzilla_description":"CVE-2018-1000001 glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000001.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-18269","severity":"moderate","public_date":"2017-12-24T00:00:00Z","advisories":[],"bugzilla":"1580924","bugzilla_description":"CVE-2017-18269 glibc: memory corruption in memcpy-sse2-unaligned.S","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18269.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-16997","severity":"moderate","public_date":"2017-12-17T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1526865","bugzilla_description":"CVE-2017-16997 glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-470","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16997.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-1000408","severity":"low","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1522828","bugzilla_description":"CVE-2017-1000408 glibc: Memory leak reachable via LD_HWCAP_MASK","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000408.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000409","severity":"moderate","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1522830","bugzilla_description":"CVE-2017-1000409 glibc: Buffer overflow triggerable via LD_LIBRARY_PATH","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000409.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-17426","severity":"moderate","public_date":"2017-10-31T00:00:00Z","advisories":[],"bugzilla":"1524530","bugzilla_description":"CVE-2017-17426 glibc: Integer overflow with enabled tcache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17426.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-15804","severity":"moderate","public_date":"2017-10-21T00:00:00Z","advisories":["RHSA-2018:1879","RHSA-2018:0805"],"bugzilla":"1505298","bugzilla_description":"CVE-2017-15804 glibc: Buffer overflow during unescaping of user names with the ~ operator","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7","glibc-0:2.12-1.212.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-15671","severity":"low","public_date":"2017-10-20T00:00:00Z","advisories":[],"bugzilla":"1504806","bugzilla_description":"CVE-2017-15671 glibc: Memory leak in glob with GLOB_TILDE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15671.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15670","severity":"moderate","public_date":"2017-10-19T00:00:00Z","advisories":["RHSA-2018:1879","RHSA-2018:0805"],"bugzilla":"1504804","bugzilla_description":"CVE-2017-15670 glibc: Buffer overflow in glob with GLOB_TILDE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7","glibc-0:2.12-1.212.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15670.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-6485","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1542102","bugzilla_description":"CVE-2018-6485 glibc: Integer overflow in posix_memalign in memalign functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6485.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-1000366","severity":"important","public_date":"2017-06-19T00:00:00Z","advisories":["RHSA-2017:1567","RHSA-2017:1479","RHSA-2017:1480","RHSA-2017:1481"],"bugzilla":"1452543","bugzilla_description":"CVE-2017-1000366 glibc: heap/stack gap jumping via unbounded stack allocations","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6_9.2","glibc-0:2.5-123.el5_11.4","glibc-0:2.17-157.el7_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000366.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2014-9984","severity":"critical","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1463288","bugzilla_description":"CVE-2014-9984 glibc: nscd buffer manipulation vulnerability could lead to code execution or crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9984.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-8804","severity":"moderate","public_date":"2017-05-08T00:00:00Z","advisories":[],"bugzilla":"1448794","bugzilla_description":"CVE-2017-8804 glibc: memory leak in sunrpc when decoding malformed XDR","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-12132","severity":"low","public_date":"2017-04-07T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1477529","bugzilla_description":"CVE-2017-12132 glibc: Fragmentation attacks possible when EDNS0 is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12132.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.0"},{"CVE":"CVE-2017-12133","severity":"low","public_date":"2017-02-08T00:00:00Z","advisories":[],"bugzilla":"1478288","bugzilla_description":"CVE-2017-12133 glibc: Use-after-free read access in clntudp_call in sunrpc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12133.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10228","severity":"low","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1428290","bugzilla_description":"CVE-2016-10228 glibc: iconv program can hang when invoked with the -c option","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10228.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6323","severity":"low","public_date":"2016-08-04T00:00:00Z","advisories":[],"bugzilla":"1383297","bugzilla_description":"CVE-2016-6323 glibc: Missing unwind info in __startcontext causes infinite loop in _Unwind_Backtrace","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5417","severity":"low","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1362534","bugzilla_description":"CVE-2016-5417 glibc: per-thread memory leak in __res_vinit with IPv6 nameservers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5417.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-4429","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1337136","bugzilla_description":"CVE-2016-4429 glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4429.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-10739","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":["RHSA-2019:3513","RHSA-2019:2118","RHBA-2019:3303"],"bugzilla":"1347549","bugzilla_description":"CVE-2016-10739 glibc: getaddrinfo should reject IP addresses with trailing characters","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","glibc-0:2.17-292.el7","glibc-0:2.28-72.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10739.json"},{"CVE":"CVE-2016-3706","severity":"low","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1330887","bugzilla_description":"CVE-2016-3706 glibc: stack (frame) overflow in getaddrinfo() when called with AF_INET, AF_INET6 (incomplete fix for CVE-2013-4458)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3706.json"},{"CVE":"CVE-2016-3075","severity":"low","public_date":"2016-03-29T00:00:00Z","advisories":["RHSA-2016:2573"],"bugzilla":"1321866","bugzilla_description":"CVE-2016-3075 glibc: Stack overflow in nss_dns_getnetbyname_r","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:P/I:P/A:C","CWE":"CWE-121","affected_packages":["glibc-0:2.17-157.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-1234","severity":"moderate","public_date":"2016-03-07T00:00:00Z","advisories":[],"bugzilla":"1315647","bugzilla_description":"CVE-2016-1234 glibc: Stack-based buffer overflow in glob with GLOB_ALTDIRFUNC and crafted directory","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1234.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2015-7547","severity":"critical","public_date":"2016-02-16T00:00:00Z","advisories":["RHSA-2016:0175","RHSA-2016:0176","RHSA-2016:0277","RHSA-2016:0225"],"bugzilla":"1293532","bugzilla_description":"CVE-2015-7547 glibc: getaddrinfo stack-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.12-1.132.el6_5.7","glibc-0:2.12-1.107.el6_4.9","glibc-0:2.12-1.149.el6_6.11","glibc-0:2.17-79.ael7b_1.4","glibc-0:2.12-1.166.el6_7.7","glibc-0:2.12-1.47.el6_2.17","rhev-hypervisor7-0:7.2-20160105.2.el7ev","glibc-0:2.17-106.el7_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7547.json"},{"CVE":"CVE-2015-8776","severity":"moderate","public_date":"2015-09-20T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300299","bugzilla_description":"CVE-2015-8776 glibc: Segmentation fault caused by passing out-of-range data to strftime()","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2015-5277","severity":"important","public_date":"2015-09-14T00:00:00Z","advisories":["RHSA-2015:2172","RHSA-2015:2589"],"bugzilla":"1262914","bugzilla_description":"CVE-2015-5277 glibc: data corruption while reading the NSS files database","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["glibc-0:2.17-106.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5277.json"},{"CVE":"CVE-2015-8777","severity":"low","public_date":"2015-09-05T00:00:00Z","advisories":["RHSA-2017:1916"],"bugzilla":"1260581","bugzilla_description":"CVE-2015-8777 glibc: LD_POINTER_GUARD in the environment is not sanitized","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8777.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-5229","severity":"low","public_date":"2015-08-21T00:00:00Z","advisories":["RHSA-2016:0176","RHBA-2015:1465"],"bugzilla":"1256285","bugzilla_description":"CVE-2015-5229 glibc: calloc may return non-zero memory","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.166.el6_7.1","glibc-0:2.17-106.el7_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5229.json"},{"CVE":"CVE-2015-5180","severity":"low","public_date":"2015-08-07T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1249603","bugzilla_description":"CVE-2015-5180 glibc: DNS resolver NULL pointer dereference with crafted record type","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5180.json"},{"CVE":"CVE-2015-1781","severity":"moderate","public_date":"2015-04-21T00:00:00Z","advisories":["RHSA-2015:0863","RHSA-2015:2199","RHSA-2015:2589"],"bugzilla":"1199525","bugzilla_description":"CVE-2015-1781 glibc: buffer overflow in gethostbyname_r() and related functions with misaligned buffer","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-131->CWE-119","affected_packages":["glibc-0:2.12-1.149.el6_6.7","glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1781.json"},{"CVE":"CVE-2015-8778","severity":"moderate","public_date":"2015-04-10T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300303","bugzilla_description":"CVE-2015-8778 glibc: Integer overflow in hcreate and hcreate_r","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2015-8985","severity":"low","public_date":"2015-02-28T00:00:00Z","advisories":[],"bugzilla":"1197798","bugzilla_description":"CVE-2015-8985 glibc: potential denial of service in pop_fail_stack()","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8985.json"},{"CVE":"CVE-2015-8984","severity":"low","public_date":"2015-02-26T00:00:00Z","advisories":[],"bugzilla":"1197730","bugzilla_description":"CVE-2015-8984 glibc: potential denial of service in internal_fnmatch()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8984.json"},{"CVE":"CVE-2014-8121","severity":"low","public_date":"2015-02-23T00:00:00Z","advisories":["RHSA-2015:0327"],"bugzilla":"1165192","bugzilla_description":"CVE-2014-8121 glibc: Unexpected closing of nss_files databases after lookups causes denial of service","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["glibc-0:2.17-78.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8121.json"},{"CVE":"CVE-2015-8983","severity":"moderate","public_date":"2015-02-22T00:00:00Z","advisories":[],"bugzilla":"1195762","bugzilla_description":"CVE-2015-8983 glibc: _IO_wstr_overflow integer overflow","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8983.json"},{"CVE":"CVE-2015-8982","severity":"low","public_date":"2015-02-13T00:00:00Z","advisories":[],"bugzilla":"1192525","bugzilla_description":"CVE-2015-8982 glibc: multiple overflows in strxfrm()","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8982.json"},{"CVE":"CVE-2015-8779","severity":"moderate","public_date":"2015-01-29T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300312","bugzilla_description":"CVE-2015-8779 glibc: Unbounded stack allocation in catopen function","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8779.json"},{"CVE":"CVE-2015-0235","severity":"critical","public_date":"2015-01-27T00:00:00Z","advisories":["RHSA-2015:0092","RHSA-2015:0090","RHSA-2015:0126","RHSA-2015:0101","RHSA-2015:0099"],"bugzilla":"1183461","bugzilla_description":"CVE-2015-0235 glibc: __nss_hostname_digits_dots() heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-131->CWE-122","affected_packages":["glibc-0:2.5-123.el5_11.1","glibc-0:2.5-58.el5_6.6","rhev-hypervisor6-0:6.6-20150123.1.el6ev","glibc-0:2.12-1.47.el6_2.15","glibc-0:2.12-1.107.el6_4.7","glibc-0:2.12-1.149.el6_6.5","glibc-0:2.12-1.132.el6_5.5","glibc-0:2.3.4-2.57.el4.2","glibc-0:2.17-55.el7_0.5","glibc-0:2.5-107.el5_9.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0235.json"},{"CVE":"CVE-2013-7424","severity":"moderate","public_date":"2015-01-27T00:00:00Z","advisories":["RHSA-2014:1391","RHSA-2015:1627"],"bugzilla":"1186614","bugzilla_description":"CVE-2013-7424 glibc: Invalid-free when using getaddrinfo()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-123.el5_11.3","glibc-0:2.12-1.149.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7424.json"},{"CVE":"CVE-2014-7817","severity":"moderate","public_date":"2014-11-20T00:00:00Z","advisories":["RHSA-2015:0016","RHSA-2014:2023"],"bugzilla":"1157689","bugzilla_description":"CVE-2014-7817 glibc: command execution in wordexp() with WRDE_NOCMD specified","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-440","affected_packages":["glibc-0:2.12-1.149.el6_6.4","glibc-0:2.17-55.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7817.json"},{"CVE":"CVE-2014-9402","severity":"low","public_date":"2014-11-20T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1175369","bugzilla_description":"CVE-2014-9402 glibc: denial of service in getnetbyname function","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9402.json"},{"CVE":"CVE-2014-6040","severity":"moderate","public_date":"2014-08-28T00:00:00Z","advisories":["RHSA-2015:0327","RHSA-2015:0016"],"bugzilla":"1135841","bugzilla_description":"CVE-2014-6040 glibc: crash in code page decoding functions (IBM933, IBM935, IBM937, IBM939, IBM1364)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":["glibc-0:2.17-78.el7","glibc-0:2.12-1.149.el6_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6040.json"},{"CVE":"CVE-2014-5119","severity":"important","public_date":"2014-07-14T00:00:00Z","advisories":["RHSA-2014:1118","RHSA-2014:1110"],"bugzilla":"1119128","bugzilla_description":"CVE-2014-5119 glibc: off-by-one error leading to a heap-based buffer overflow flaw in __gconv_translit_find()","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-193->CWE-626->CWE-122","affected_packages":["glibc-0:2.17-55.el7_0.1","glibc-0:2.12-1.132.el6_5.4","glibc-0:2.5-118.el5_10.3","glibc-0:2.5-107.el5_9.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5119.json"},{"CVE":"CVE-2014-0475","severity":"moderate","public_date":"2014-07-09T00:00:00Z","advisories":["RHSA-2014:1110"],"bugzilla":"1102353","bugzilla_description":"CVE-2014-0475 glibc: directory traversal in LC_* locale handling","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-22","affected_packages":["glibc-0:2.17-55.el7_0.1","glibc-0:2.12-1.132.el6_5.4","glibc-0:2.5-118.el5_10.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0475.json"},{"CVE":"CVE-2014-4043","severity":"low","public_date":"2014-06-11T00:00:00Z","advisories":[],"bugzilla":"1109263","bugzilla_description":"CVE-2014-4043 glibc: posix_spawn_file_actions_addopen fails to copy the path argument","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4043.json"},{"CVE":"CVE-2014-9761","severity":"moderate","public_date":"2014-05-19T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300310","bugzilla_description":"CVE-2014-9761 glibc: Unbounded stack allocation in nan* functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9761.json"},{"CVE":"CVE-2015-1472","severity":"low","public_date":"2014-02-21T00:00:00Z","advisories":["RHSA-2015:2199","RHSA-2015:2589"],"bugzilla":"1188235","bugzilla_description":"CVE-2015-1472 glibc: heap buffer overflow in glibc swscanf","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-122","affected_packages":["glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1472.json"},{"CVE":"CVE-2015-1473","severity":"low","public_date":"2014-02-21T00:00:00Z","advisories":["RHSA-2015:2199","RHSA-2015:2589"],"bugzilla":"1209105","bugzilla_description":"CVE-2015-1473 glibc: Stack-overflow in glibc swscanf","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1473.json"},{"CVE":"CVE-2013-4458","severity":"low","public_date":"2013-10-22T00:00:00Z","advisories":["RHSA-2014:1391"],"bugzilla":"1022280","bugzilla_description":"CVE-2013-4458 glibc: Stack (frame) overflow in getaddrinfo() when called with AF_INET6","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.12-1.149.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4458.json"},{"CVE":"CVE-2013-7423","severity":"moderate","public_date":"2013-09-12T00:00:00Z","advisories":["RHSA-2015:0863","RHSA-2015:2199","RHSA-2016:1207","RHSA-2015:2589"],"bugzilla":"1187109","bugzilla_description":"CVE-2013-7423 glibc: getaddrinfo() writes DNS queries to random file descriptors under high load","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-362->CWE-201","affected_packages":["glibc-0:2.12-1.132.el6_5.8","glibc-0:2.12-1.149.el6_6.7","glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7423.json"},{"CVE":"CVE-2013-4332","severity":"moderate","public_date":"2013-08-20T00:00:00Z","advisories":["RHSA-2013:1605","RHSA-2013:1411"],"bugzilla":"1007545","bugzilla_description":"CVE-2013-4332 glibc: three integer overflows in memory allocator","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.5-118.el5_10.2","glibc-0:2.12-1.132.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4332.json"},{"CVE":"CVE-2013-4237","severity":"moderate","public_date":"2013-08-11T00:00:00Z","advisories":["RHSA-2014:1391"],"bugzilla":"995839","bugzilla_description":"CVE-2013-4237 glibc: Buffer overwrite when using readdir_r on file systems returning file names longer than NAME_MAX characters","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["glibc-0:2.12-1.149.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4237.json"},{"CVE":"CVE-2013-2207","severity":"moderate","public_date":"2013-07-16T00:00:00Z","advisories":[],"bugzilla":"976408","bugzilla_description":"CVE-2013-2207 glibc (pt_chown): Improper pseudotty ownership and permissions changes when granting access to the slave pseudoterminal","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2207.json"},{"CVE":"CVE-2013-4788","severity":"low","public_date":"2013-07-15T00:00:00Z","advisories":[],"bugzilla":"985625","bugzilla_description":"CVE-2013-4788 glibc: PTR_MANGLE does not initialize to a random value for the pointer guard when compiling static executables","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4788.json"},{"CVE":"CVE-2013-1914","severity":"low","public_date":"2013-04-03T00:00:00Z","advisories":["RHSA-2013:1605","RHSA-2013:0769"],"bugzilla":"947882","bugzilla_description":"CVE-2013-1914 glibc: Stack (frame) overflow in getaddrinfo() when processing entry mapping to long list of address structures","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.132.el6","glibc-0:2.5-107.el5_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1914.json"},{"CVE":"CVE-2013-0242","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":["RHSA-2013:1605","RHSA-2013:0769"],"bugzilla":"905874","bugzilla_description":"CVE-2013-0242 glibc: Buffer overrun (DoS) in regexp matcher by processing multibyte characters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.132.el6","glibc-0:2.5-107.el5_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0242.json"},{"CVE":"CVE-2012-4424","severity":"moderate","public_date":"2012-09-06T00:00:00Z","advisories":[],"bugzilla":"858238","bugzilla_description":"CVE-2012-4424 glibc: alloca() stack overflow in the strcoll() interface","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4424.json"},{"CVE":"CVE-2012-4412","severity":"moderate","public_date":"2012-09-05T00:00:00Z","advisories":[],"bugzilla":"855385","bugzilla_description":"CVE-2012-4412 glibc: strcoll() integer overflow leading to buffer overflow","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4412.json"},{"CVE":"CVE-2012-3480","severity":"moderate","public_date":"2012-08-12T00:00:00Z","advisories":["RHSA-2012:1207","RHSA-2012:1208","RHSA-2012:1262","RHSA-2012:1325"],"bugzilla":"847715","bugzilla_description":"CVE-2012-3480 glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-121","affected_packages":["glibc-0:2.12-1.80.el6_3.5","rhev-hypervisor6-0:6.3-20120926.0.el6_3","glibc-0:2.5-81.el5_8.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3480.json"},{"CVE":"CVE-2012-3406","severity":"moderate","public_date":"2012-07-11T00:00:00Z","advisories":["RHSA-2012:1098","RHSA-2012:1097","RHSA-2012:1185","RHSA-2012:1200"],"bugzilla":"826943","bugzilla_description":"CVE-2012-3406 glibc: printf() unbound alloca() usage in case of positional parameters + many format specs","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.3-20120815.0.el6_3","glibc-0:2.12-1.80.el6_3.3","glibc-0:2.5-81.el5_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3406.json"},{"CVE":"CVE-2012-3404","severity":"moderate","public_date":"2012-07-11T00:00:00Z","advisories":["RHSA-2012:1098","RHSA-2012:1200"],"bugzilla":"833703","bugzilla_description":"CVE-2012-3404 glibc: incorrect size calculation in formatted printing can lead to FORTIFY_SOURCE format string protection bypass","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.3-20120815.0.el6_3","glibc-0:2.12-1.80.el6_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3404.json"},{"CVE":"CVE-2012-3405","severity":"moderate","public_date":"2012-07-11T00:00:00Z","advisories":["RHSA-2012:1098","RHSA-2012:1200"],"bugzilla":"833704","bugzilla_description":"CVE-2012-3405 glibc: incorrect use of extend_alloca() in formatted printing can lead to FORTIFY_SOURCE format string protection bypass","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.3-20120815.0.el6_3","glibc-0:2.12-1.80.el6_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3405.json"},{"CVE":"CVE-2012-6656","severity":"moderate","public_date":"2012-05-23T00:00:00Z","advisories":[],"bugzilla":"1135840","bugzilla_description":"CVE-2012-6656 glibc: crash in IBM930 decoding","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6656.json"},{"CVE":"CVE-2011-4609","severity":"low","public_date":"2011-05-05T00:00:00Z","advisories":["RHSA-2012:0058","RHSA-2012:0125","RHSA-2012:0126"],"bugzilla":"767299","bugzilla_description":"CVE-2011-4609 glibc: svc_run() produces high cpu usage when accept() fails with EMFILE error","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.47.el6_2.5","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4609.json"},{"CVE":"CVE-2012-6686","severity":"moderate","public_date":"2011-04-13T00:00:00Z","advisories":["RHBA-2013:0022","RHBA-2012:0763"],"bugzilla":"1009643","bugzilla_description":"CVE-2012-6686 CVE-2013-4357 glibc: stack overflow in getaddrinfo()'s use of alloca()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.5-107","glibc-0:2.12-1.80.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6686.json"},{"CVE":"CVE-2013-4357","severity":"moderate","public_date":"2011-04-13T00:00:00Z","advisories":[],"bugzilla":"1009643","bugzilla_description":"CVE-2012-6686 CVE-2013-4357 glibc: stack overflow in getaddrinfo()'s use of alloca()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4357.json"},{"CVE":"CVE-2011-1089","severity":"low","public_date":"2011-03-03T00:00:00Z","advisories":["RHSA-2012:0125","RHSA-2012:0126","RHSA-2011:1526"],"bugzilla":"688980","bugzilla_description":"CVE-2011-1089 glibc: Suid mount helpers fail to anticipate RLIMIT_FSIZE","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["glibc-0:2.12-1.47.el6","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1089.json"},{"CVE":"CVE-2011-5320","severity":"low","public_date":"2011-01-22T00:00:00Z","advisories":[],"bugzilla":"1196745","bugzilla_description":"CVE-2011-5320 glibc: scanf implementation crashes on certain inputs","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5320.json"},{"CVE":"CVE-2011-1658","severity":"low","public_date":"2011-01-12T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413"],"bugzilla":"694873","bugzilla_description":"CVE-2011-1658 glibc: ld.so insecure handling of privileged programs' RPATHs with $ORIGIN","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1658.json"},{"CVE":"CVE-2011-0536","severity":"important","public_date":"2011-01-11T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413"],"bugzilla":"667974","bugzilla_description":"CVE-2011-0536 glibc: CVE-2010-3847 fix causes linker to search CWD when running privileged program with $ORIGIN in R*PATH","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0536.json"},{"CVE":"CVE-2010-4051","severity":null,"public_date":"2010-12-07T00:00:00Z","advisories":[],"bugzilla":"645859","bugzilla_description":"CVE-2010-4051 CVE-2010-4052 glibc: De-recursivise regular expression engine","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4051.json"},{"CVE":"CVE-2010-4052","severity":null,"public_date":"2010-12-07T00:00:00Z","advisories":[],"bugzilla":"645859","bugzilla_description":"CVE-2010-4051 CVE-2010-4052 glibc: De-recursivise regular expression engine","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4052.json"},{"CVE":"CVE-2012-0864","severity":"moderate","public_date":"2010-11-17T00:00:00Z","advisories":["RHSA-2012:0393","RHSA-2012:0397","RHSA-2012:0531","RHSA-2012:0488"],"bugzilla":"794766","bugzilla_description":"CVE-2012-0864 glibc: FORTIFY_SOURCE format string protection bypass via \"nargs\" integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.12-1.47.el6_2.9","rhev-hypervisor6-0:6.2-20120423.1.el6_2","glibc-0:2.5-81.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0864.json"},{"CVE":"CVE-2010-3856","severity":"important","public_date":"2010-10-22T00:00:00Z","advisories":["RHSA-2010:0872","RHSA-2010:0793"],"bugzilla":"645672","bugzilla_description":"CVE-2010-3856 glibc: ld.so arbitrary DSO loading via LD_AUDIT in setuid/setgid programs","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["glibc-0:2.12-1.7.el6_0.3","glibc-0:2.5-49.el5_5.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3856.json"},{"CVE":"CVE-2010-3847","severity":"important","public_date":"2010-10-18T00:00:00Z","advisories":["RHSA-2010:0787","RHSA-2010:0872"],"bugzilla":"643306","bugzilla_description":"CVE-2010-3847 glibc: ld.so insecure handling of $ORIGIN in LD_AUDIT for setuid/setgid programs","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["glibc-0:2.12-1.7.el6_0.3","glibc-0:2.5-49.el5_5.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3847.json"},{"CVE":"CVE-2010-4756","severity":"low","public_date":"2010-10-07T00:00:00Z","advisories":[],"bugzilla":"681681","bugzilla_description":"CVE-2010-4756 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4756.json"},{"CVE":"CVE-2011-1095","severity":"low","public_date":"2010-08-11T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413","RHSA-2012:0125"],"bugzilla":"625893","bugzilla_description":"CVE-2011-1095 glibc: insufficient quoting in the locale command output","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1095.json"},{"CVE":"CVE-2011-1071","severity":"low","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413","RHSA-2012:0125"],"bugzilla":"681054","bugzilla_description":"CVE-2011-1071 CVE-2011-1659 glibc: fnmatch() alloca()-based memory corruption flaw","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1071.json"},{"CVE":"CVE-2011-1659","severity":"low","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413","RHSA-2012:0125"],"bugzilla":"681054","bugzilla_description":"CVE-2011-1071 CVE-2011-1659 glibc: fnmatch() alloca()-based memory corruption flaw","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1659.json"},{"CVE":"CVE-2010-0296","severity":"low","public_date":"2010-05-25T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2012:0125"],"bugzilla":"559579","bugzilla_description":"CVE-2010-0296 glibc: Improper encoding of names with certain special character in utilities for writing to mtab table","cvss_score":4.3,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0296.json"},{"CVE":"CVE-2010-0830","severity":"low","public_date":"2010-05-25T00:00:00Z","advisories":["RHSA-2012:0125","RHSA-2012:0126"],"bugzilla":"599056","bugzilla_description":"CVE-2010-0830 glibc: ld.so d_tag signedness error in elf_get_dynamic_info","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0830.json"},{"CVE":"CVE-2010-0015","severity":"low","public_date":"2009-12-10T00:00:00Z","advisories":[],"bugzilla":"555573","bugzilla_description":"CVE-2010-0015 glibc NIS password hash disclosure","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0015.json"},{"CVE":"CVE-2009-5064","severity":"low","public_date":"2009-10-26T00:00:00Z","advisories":["RHSA-2012:0125","RHSA-2012:0126","RHSA-2011:1526"],"bugzilla":"692393","bugzilla_description":"CVE-2009-5064 glibc: ldd unexpected code execution issue","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.47.el6","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5064.json"},{"CVE":"CVE-2009-5029","severity":"moderate","public_date":"2009-06-01T00:00:00Z","advisories":["RHSA-2012:0058","RHSA-2012:0125","RHSA-2012:0126"],"bugzilla":"761245","bugzilla_description":"CVE-2009-5029 glibc: __tzfile_read integer overflow to buffer overflow","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.12-1.47.el6_2.5","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5029.json"},{"CVE":"CVE-2006-7254","severity":"moderate","public_date":"2006-03-31T00:00:00Z","advisories":[],"bugzilla":"1698738","bugzilla_description":"CVE-2006-7254 glibc: Not closing unhadleable client sockets due to nscd daemon leads to DoS.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7254.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2004-0968","severity":"low","public_date":"2004-09-30T00:00:00Z","advisories":["RHSA-2005:261","RHSA-2004:586"],"bugzilla":"1617335","bugzilla_description":"CVE-2004-0968 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.3.2-95.30"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0968.json"},{"CVE":"CVE-2004-1453","severity":"low","public_date":"2004-08-17T00:00:00Z","advisories":["RHSA-2005:256","RHSA-2005:261"],"bugzilla":"1617412","bugzilla_description":"CVE-2004-1453 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.3.2-95.33"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1453.json"},{"CVE":"CVE-2003-0859","severity":"low","public_date":"2003-11-12T00:00:00Z","advisories":["RHSA-2003:334","RHSA-2003:325"],"bugzilla":"1617097","bugzilla_description":"CVE-2003-0859 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.3.2-95.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0859.json"},{"CVE":"CVE-1999-0199","severity":null,"public_date":"1999-11-09T00:00:00Z","advisories":[],"bugzilla":"1885775","bugzilla_description":"CVE-1999-0199 glibc: manual/search.texi lacks a statement about the unspecified tdelete return value upon deletion of a tree's root","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1053","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-1999-0199.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibmm24_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibmm24_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glibmm24_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-client-xlators_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-client-xlators_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-client-xlators_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-fuse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-fuse_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-fuse_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-rdma_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-rdma_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs-rdma_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs_security_api_results.json
new file mode 100644
index 0000000..4f036b1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glusterfs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-14654","severity":"moderate","public_date":"2018-10-31T08:00:00Z","advisories":["RHSA-2018:3470","RHSA-2018:3432","RHSA-2018:3431"],"bugzilla":"1631576","bugzilla_description":"CVE-2018-14654 glusterfs: \"features/index\" translator can create arbitrary, empty files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["glusterfs-0:3.12.2-25.el7rhgs","glusterfs-0:3.12.2-25.el6","glusterfs-0:3.12.2-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14654.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-14651","severity":"important","public_date":"2018-10-31T08:00:00Z","advisories":["RHSA-2018:3432","RHSA-2018:3431"],"bugzilla":"1632557","bugzilla_description":"CVE-2018-14651 glusterfs: glusterfs server exploitable via symlinks to relative paths","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["glusterfs-0:3.12.2-25.el6rhs","glusterfs-0:3.12.2-25.el6","glusterfs-0:3.12.2-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14651.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-14652","severity":"moderate","public_date":"2018-10-31T08:00:00Z","advisories":["RHSA-2018:3470","RHSA-2018:3432","RHSA-2018:3431"],"bugzilla":"1632974","bugzilla_description":"CVE-2018-14652 glusterfs: Buffer overflow in \"features/locks\" translator allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["glusterfs-0:3.12.2-25.el7rhgs","glusterfs-0:3.12.2-25.el6","glusterfs-0:3.12.2-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-14653","severity":"moderate","public_date":"2018-10-31T08:00:00Z","advisories":["RHSA-2018:3470","RHSA-2018:3432","RHSA-2018:3431"],"bugzilla":"1633431","bugzilla_description":"CVE-2018-14653 glusterfs: Heap-based buffer overflow via \"gf_getspec_req\" RPC message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glusterfs-0:3.12.2-25.el7rhgs","glusterfs-0:3.12.2-25.el6","glusterfs-0:3.12.2-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14653.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-14660","severity":"moderate","public_date":"2018-10-31T08:00:00Z","advisories":["RHSA-2018:3470","RHSA-2018:3432","RHSA-2018:3431"],"bugzilla":"1635926","bugzilla_description":"CVE-2018-14660 glusterfs: Repeat use of \"GF_META_LOCK_KEY\" xattr allows for memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["glusterfs-0:3.12.2-25.el7rhgs","glusterfs-0:3.12.2-25.el6","glusterfs-0:3.12.2-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14660.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-14659","severity":"moderate","public_date":"2018-10-31T08:00:00Z","advisories":["RHSA-2018:3470","RHSA-2018:3432","RHSA-2018:3431"],"bugzilla":"1635929","bugzilla_description":"CVE-2018-14659 glusterfs: Unlimited file creation via \"GF_XATTR_IOSTATS_DUMP_KEY\" xattr allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["glusterfs-0:3.12.2-25.el7rhgs","glusterfs-0:3.12.2-25.el6","glusterfs-0:3.12.2-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14659.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-14661","severity":"moderate","public_date":"2018-10-31T08:00:00Z","advisories":["RHSA-2018:3470","RHSA-2018:3432","RHSA-2018:3431"],"bugzilla":"1636880","bugzilla_description":"CVE-2018-14661 glusterfs: features/locks translator passes an user-controlled string to snprintf without a proper format string resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glusterfs-0:3.12.2-25.el7rhgs","glusterfs-0:3.12.2-25.el6","glusterfs-0:3.12.2-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14661.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-10904","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1601298","bugzilla_description":"CVE-2018-10904 glusterfs: Unsanitized file names in debug/io-stats translator can allow remote attackers to execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10904.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-10907","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1601642","bugzilla_description":"CVE-2018-10907 glusterfs: Stack-based buffer overflow in server-rpc-fops.c allows remote attackers to execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10907.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-10911","severity":"moderate","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470","RHSA-2018:2892","RHSA-2018:3242"],"bugzilla":"1601657","bugzilla_description":"CVE-2018-10911 glusterfs: Improper deserialization in dict.c:dict_unserialize() can allow attackers to read arbitrary memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-190->CWE-200","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10911.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-10914","severity":"moderate","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1607617","bugzilla_description":"CVE-2018-10914 glusterfs: remote denial of service of gluster volumes via posix_get_file_contents function in posix-helpers.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10914.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2018-10913","severity":"low","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1607618","bugzilla_description":"CVE-2018-10913 glusterfs:  Information Exposure in posix_get_file_contents function in posix-helpers.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10913.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2018-10923","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1610659","bugzilla_description":"CVE-2018-10923 glusterfs: I/O to arbitrary devices on storage server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2018-10924","severity":"moderate","public_date":"2018-09-04T05:30:00Z","advisories":[],"bugzilla":"1611785","bugzilla_description":"CVE-2018-10924 glusterfs: Denial-of-service via fsync(2) in Gluster FUSE client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10924.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10927","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1612658","bugzilla_description":"CVE-2018-10927 glusterfs: File status information leak and denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10927.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-10928","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1612659","bugzilla_description":"CVE-2018-10928 glusterfs: Improper resolution of symlinks allows for privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-10929","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1612660","bugzilla_description":"CVE-2018-10929 glusterfs: Arbitrary file creation on storage server allows for execution of arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10929.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-10930","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1612664","bugzilla_description":"CVE-2018-10930 glusterfs: Files can be renamed outside volume","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10930.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-10926","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1613143","bugzilla_description":"CVE-2018-10926 glusterfs: Device files can be created in arbitrary locations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10926.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2018-10841","severity":"important","public_date":"2018-06-20T10:00:00Z","advisories":["RHSA-2018:1954","RHSA-2018:1955"],"bugzilla":"1582043","bugzilla_description":"CVE-2018-10841 glusterfs: access trusted peer group via remote-host command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["glusterfs-0:3.8.4-54.11.el6","glusterfs-0:3.8.4-54.10.el7","glusterfs-0:3.8.4-54.11.el6rhs","glusterfs-0:3.8.4-54.10.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10841.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2018-1112","severity":"important","public_date":"2018-04-19T00:00:00Z","advisories":["RHSA-2018:1268","RHSA-2018:1269"],"bugzilla":"1570891","bugzilla_description":"CVE-2018-1112 glusterfs: auth.allow allows unauthenticated clients to mount gluster volumes (CVE-2018-1088 regression)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["glusterfs-0:3.8.4-54.9.el6","glusterfs-0:3.8.4-54.9.el6rhs","glusterfs-0:3.8.4-54.8.el7","glusterfs-0:3.8.4-54.8.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1112.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-1088","severity":"important","public_date":"2018-04-18T00:00:00Z","advisories":["RHSA-2018:1524","RHSA-2018:1136","RHSA-2018:1137","RHSA-2018:1275"],"bugzilla":"1558721","bugzilla_description":"CVE-2018-1088 glusterfs: Privilege escalation via gluster_shared_storage when snapshot scheduling is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["glusterfs-0:3.8.4-54.6.el7","glusterfs-0:3.8.4-54.7.el6rhs","glusterfs-0:3.8.4-54.6.el7rhgs","glusterfs-0:3.8.4-54.7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1088.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2017-15096","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":[],"bugzilla":"1504255","bugzilla_description":"CVE-2017-15096 glusterfs: Null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15096.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"1.8"},{"CVE":"CVE-2014-8177","severity":"moderate","public_date":"2015-08-21T00:00:00Z","advisories":["RHSA-2015:1845","RHSA-2015:1846"],"bugzilla":"1257525","bugzilla_description":"CVE-2014-8177 gluster-swift metadata constraints are not correctly enforced","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["swiftonfile-0:1.13.1-5.el7rhgs","glusterfs-0:3.7.1-16.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8177.json"},{"CVE":"CVE-2015-1856","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1681","RHSA-2015:1684","RHSA-2015:1845","RHSA-2015:1846"],"bugzilla":"1209994","bugzilla_description":"CVE-2015-1856 OpenStack Swift: unauthorized deletion of versioned Swift object","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["openstack-swift-0:1.13.1-6.el7ost","openstack-swift-0:2.2.0-4.el7ost","glusterfs-0:3.7.1-16.el6","openstack-swift-0:1.13.1-6.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1856.json"},{"CVE":"CVE-2015-1795","severity":"moderate","public_date":"2015-03-16T00:00:00Z","advisories":["RHSA-2017:0484","RHSA-2017:0486"],"bugzilla":"1200927","bugzilla_description":"CVE-2015-1795 glusterfs: glusterfs-server %pretrans rpm script temporary file issue","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":["glusterfs-0:3.8.4-18.el6rhs","glusterfs-0:3.8.4-18.el6","glusterfs-0:3.8.4-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1795.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2013-4186","severity":"important","public_date":"2015-02-18T00:00:00Z","advisories":[],"bugzilla":"990833","bugzilla_description":"CVE-2013-4186 Gluster: access trusted peer group via remote-host command","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4186.json"},{"CVE":"CVE-2014-3619","severity":"moderate","public_date":"2014-09-12T00:00:00Z","advisories":["RHBA-2015:0040","RHBA-2015:0038"],"bugzilla":"1138145","bugzilla_description":"CVE-2014-3619 glusterfs: fragment header infinite loop DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["glusterfs-0:3.6.0.42-1.el6","glusterfs-0:3.6.0.42-1.el6rhs","glusterfs-0:3.6.0.42-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3619.json"},{"CVE":"CVE-2012-5635","severity":"low","public_date":"2013-03-28T00:00:00Z","advisories":["RHSA-2013:0691"],"bugzilla":"886364","bugzilla_description":"CVE-2012-5635 GlusterFS: insecure temporary file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["glusterfs-0:3.3.0.7rhs-1.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5635.json"},{"CVE":"CVE-2012-4417","severity":"low","public_date":"2012-11-12T00:00:00Z","advisories":["RHSA-2012:1456"],"bugzilla":"856341","bugzilla_description":"CVE-2012-4417 GlusterFS: insecure temporary file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["glusterfs-0:3.3.0.5rhs-37.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4417.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glx-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glx-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/glx-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gmp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gmp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gmp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-abrt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-abrt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-abrt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-bluetooth-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-bluetooth-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-bluetooth-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-bluetooth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-bluetooth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-bluetooth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-boxes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-boxes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-boxes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-calculator_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-calculator_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-calculator_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-classic-session_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-classic-session_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-classic-session_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-clocks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-clocks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-clocks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-color-manager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-color-manager_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-color-manager_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-contacts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-contacts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-contacts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-desktop3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-desktop3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-desktop3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-desktop3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-desktop3_security_api_results.json
new file mode 100644
index 0000000..8171902
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-desktop3_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11460","severity":"moderate","public_date":"2019-04-13T00:00:00Z","advisories":[],"bugzilla":"1716284","bugzilla_description":"CVE-2019-11460 gnome-desktop: thumbnailer security bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-dictionary_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-dictionary_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-dictionary_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-disk-utility_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-disk-utility_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-disk-utility_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-documents-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-documents-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-documents-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-documents_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-documents_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-documents_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-font-viewer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-font-viewer_security_api_results.json
new file mode 100644
index 0000000..2da3ba2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-font-viewer_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-19308","severity":"low","public_date":"2019-11-27T00:00:00Z","advisories":[],"bugzilla":"1777938","bugzilla_description":"CVE-2019-19308 gnome-font-viewer: NULL pointer dereference in text_to_glyphs in sushi-font-widget.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19308.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-getting-started-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-getting-started-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-getting-started-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme-extras_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme-extras_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme-extras_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme-legacy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme-legacy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme-legacy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme-symbolic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme-symbolic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme-symbolic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-icon-theme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-initial-setup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-initial-setup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-initial-setup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-keyring-pam_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-keyring-pam_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-keyring-pam_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-keyring_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-keyring_security_api_results.json
new file mode 100644
index 0000000..cdb012a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-keyring_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19358","severity":null,"public_date":"2018-07-06T00:00:00Z","advisories":[],"bugzilla":"1652194","bugzilla_description":"CVE-2018-19358 gnome-keyring: login credentials retrieval via a Secret Service API call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19358.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-20781","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1677288","bugzilla_description":"CVE-2018-20781 gnome-keyring: user's login credentials is kept in a session-child process resulting in exposed plaintext password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20781.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-menus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-menus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-menus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-online-accounts-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-online-accounts-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-online-accounts-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-online-accounts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-online-accounts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-online-accounts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-online-miners_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-online-miners_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-online-miners_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit-installer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit-installer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit-installer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit-updater_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit-updater_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit-updater_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-packagekit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-bonobo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-bonobo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-bonobo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-canvas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-canvas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-canvas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-gconf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-gconf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-gconf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-gnome_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-gnome_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-gnome_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-gnomevfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-gnomevfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2-gnomevfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-python2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-screenshot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-screenshot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-screenshot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-session-xsession_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-session-xsession_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-session-xsession_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-session_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-session_security_api_results.json
new file mode 100644
index 0000000..09c4137
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-session_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-11171","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1470706","bugzilla_description":"CVE-2017-11171 gnome-session: Bad reference counting in accept_ice_connection() permits resource exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11171.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-settings-daemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-settings-daemon_security_api_results.json
new file mode 100644
index 0000000..23bf8cc
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-settings-daemon_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14391","severity":"moderate","public_date":"2020-09-08T00:00:00Z","advisories":[],"bugzilla":"1873093","bugzilla_description":"CVE-2020-14391 gnome-settings-daemon: Red Hat Customer Portal password logged and passed as command line argument when user registers through GNOME control center","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14391.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-alternate-tab_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-alternate-tab_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-alternate-tab_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-apps-menu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-apps-menu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-apps-menu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-horizontal-workspaces_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-horizontal-workspaces_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-horizontal-workspaces_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-launch-new-instance_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-launch-new-instance_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-launch-new-instance_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-places-menu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-places-menu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-places-menu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-top-icons_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-top-icons_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-top-icons_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-user-theme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-user-theme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-user-theme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-window-list_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-window-list_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell-extension-window-list_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell_security_api_results.json
new file mode 100644
index 0000000..7a168aa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-shell_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-17489","severity":"low","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1868418","bugzilla_description":"CVE-2020-17489 gnome-shell: Password from logged-out user may be shown on login screen","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17489.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-3820","severity":"moderate","public_date":"2019-02-05T12:00:00Z","advisories":["RHBA-2020:1539","RHSA-2020:1021","RHBA-2020:1540"],"bugzilla":"1669391","bugzilla_description":"CVE-2019-3820 gnome-shell: partial lock screen bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","gnome-shell-0:3.28.3-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3820.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-8288","severity":"low","public_date":"2017-04-25T00:00:00Z","advisories":[],"bugzilla":"1446088","bugzilla_description":"CVE-2017-8288 gnome-shell: Mishandling extensions that fail to reload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8288.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2014-7300","severity":"low","public_date":"2014-09-27T00:00:00Z","advisories":["RHSA-2015:0535"],"bugzilla":"1147917","bugzilla_description":"CVE-2014-7300 gnome-shell: lockscreen bypass with printscreen key","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-285->CWE-770->CWE-305","affected_packages":["gnome-shell-0:3.8.4-45.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7300.json"},{"CVE":"CVE-2013-7220","severity":"moderate","public_date":"2013-11-14T00:00:00Z","advisories":[],"bugzilla":"1030431","bugzilla_description":"CVE-2013-7220 gnome-shell: blind command execution via activities search keyboard focus","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7220.json"},{"CVE":"CVE-2013-7221","severity":"moderate","public_date":"2013-11-14T00:00:00Z","advisories":[],"bugzilla":"1046839","bugzilla_description":"CVE-2013-7221 gnome-shell: run command dialog visible above screen locker","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7221.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-software_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-software_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-software_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-system-log_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-system-log_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-system-log_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-system-monitor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-system-monitor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-system-monitor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-terminal-nautilus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-terminal-nautilus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-terminal-nautilus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-terminal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-terminal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-terminal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-themes-standard_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-themes-standard_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-themes-standard_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-tweak-tool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-tweak-tool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-tweak-tool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-user-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-user-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-user-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-vfs2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-vfs2_security_api_results.json
new file mode 100644
index 0000000..f353129
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-vfs2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2009-2473","severity":"low","public_date":"2009-08-18T00:00:00Z","advisories":["RHSA-2013:0131","RHSA-2009:1452"],"bugzilla":"518215","bugzilla_description":"CVE-2009-2473 neon: billion laughs DoS attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["gnome-vfs2-0:2.16.2-10.el5","neon-0:0.24.7-4.el4_8.2","neon-0:0.25.5-10.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2473.json"},{"CVE":"CVE-2005-0706","severity":"moderate","public_date":"2005-03-09T00:00:00Z","advisories":["RHSA-2009:0005","RHSA-2005:304"],"bugzilla":"470552","bugzilla_description":"CVE-2005-0706 grip,libcdaudio: buffer overflow caused by large amount of CDDB replies","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnome-vfs-0:1.0.1-18.2","gnome-vfs2-0:2.2.5-2E.3.3","gnome-vfs2-0:2.8.2-8.7.el4_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0706.json"},{"CVE":"CVE-2004-0494","severity":"low","public_date":"2004-08-04T00:00:00Z","advisories":["RHSA-2004:373","RHSA-2004:464"],"bugzilla":"1617212","bugzilla_description":"CVE-2004-0494 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnome-vfs2-0:2.2.5-2E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0494.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-video-effects_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-video-effects_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-video-effects_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-weather_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-weather_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnome-weather_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnote_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnote_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnote_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-mono-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-mono-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-mono-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-serif-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-serif-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnu-free-serif-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnupg2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnupg2_security_api_results.json
new file mode 100644
index 0000000..f6c3c01
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnupg2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-25125","severity":"moderate","public_date":"2020-09-04T00:00:00Z","advisories":[],"bugzilla":"1875675","bugzilla_description":"CVE-2020-25125 gnupg: AEAD preference list overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-129","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25125.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-14855","severity":"low","public_date":"2020-01-09T00:00:00Z","advisories":[],"bugzilla":"1770900","bugzilla_description":"CVE-2019-14855 gnupg2: OpenPGP Key Certification Forgeries with SHA-1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-13050","severity":"moderate","public_date":"2019-06-29T00:00:00Z","advisories":[],"bugzilla":"1726146","bugzilla_description":"CVE-2019-13050 GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13050.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000858","severity":"moderate","public_date":"2018-11-23T00:00:00Z","advisories":[],"bugzilla":"1663917","bugzilla_description":"CVE-2018-1000858 gnupg2: Cross site request forgery in dirmngr resulting in an information disclosure or denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-12020","severity":"important","public_date":"2018-06-08T00:00:00Z","advisories":["RHSA-2018:2180","RHSA-2018:2181"],"bugzilla":"1589620","bugzilla_description":"CVE-2018-12020 gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["gnupg2-0:2.0.14-9.el6_10","gnupg2-0:2.0.22-5.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-9234","severity":"low","public_date":"2018-03-19T00:00:00Z","advisories":[],"bugzilla":"1563930","bugzilla_description":"CVE-2018-9234 GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9234.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.2"},{"CVE":"CVE-2014-3591","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198145","bugzilla_description":"CVE-2014-3591 libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3591.json"},{"CVE":"CVE-2015-0837","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198147","bugzilla_description":"CVE-2015-0837 libgcrypt: last-level cache side-channel attack","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0837.json"},{"CVE":"CVE-2015-1606","severity":"low","public_date":"2015-02-13T00:00:00Z","advisories":[],"bugzilla":"1193008","bugzilla_description":"CVE-2015-1606 gnupg2: invalid memory read using a garbled keyring","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1606.json"},{"CVE":"CVE-2015-1607","severity":"low","public_date":"2015-02-13T00:00:00Z","advisories":[],"bugzilla":"1193009","bugzilla_description":"CVE-2015-1607 gnupg2: memcpy with overlapping ranges (keybox_search.c)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1607.json"},{"CVE":"CVE-2014-4617","severity":"moderate","public_date":"2014-06-20T00:00:00Z","advisories":[],"bugzilla":"1112509","bugzilla_description":"CVE-2014-4617 gnupg: infinite loop when decompressing data packets","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4617.json"},{"CVE":"CVE-2013-4402","severity":"moderate","public_date":"2013-10-05T00:00:00Z","advisories":["RHSA-2013:1458","RHSA-2013:1459"],"bugzilla":"1015685","bugzilla_description":"CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["gnupg2-0:2.0.10-6.el5_10","gnupg2-0:2.0.14-6.el6_4","gnupg-0:1.4.5-18.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4402.json"},{"CVE":"CVE-2013-4351","severity":"low","public_date":"2013-03-12T00:00:00Z","advisories":["RHSA-2013:1458","RHSA-2013:1459"],"bugzilla":"1010137","bugzilla_description":"CVE-2013-4351 gnupg: treats no-usage-permitted keys as all-usages-permitted","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gnupg2-0:2.0.10-6.el5_10","gnupg2-0:2.0.14-6.el6_4","gnupg-0:1.4.5-18.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4351.json"},{"CVE":"CVE-2012-6085","severity":"low","public_date":"2012-12-29T00:00:00Z","advisories":["RHSA-2013:1458","RHSA-2013:1459"],"bugzilla":"891142","bugzilla_description":"CVE-2012-6085 GnuPG: read_block() corrupt key input validation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["gnupg2-0:2.0.10-6.el5_10","gnupg2-0:2.0.14-6.el6_4","gnupg-0:1.4.5-18.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6085.json"},{"CVE":"CVE-2010-2547","severity":"moderate","public_date":"2010-07-23T00:00:00Z","advisories":["RHSA-2010:0603"],"bugzilla":"618156","bugzilla_description":"CVE-2010-2547 GnuPG 2: use-after-free when importing certificate with many alternate names","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["gnupg2-0:2.0.10-3.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2547.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnuplot-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnuplot-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnuplot-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnuplot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnuplot_security_api_results.json
new file mode 100644
index 0000000..7cc2963
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnuplot_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-25559","severity":"moderate","public_date":"2020-09-16T00:00:00Z","advisories":[],"bugzilla":"1882320","bugzilla_description":"CVE-2020-25559 gnuplot: double free when executing print_set_output may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25559.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-25412","severity":"moderate","public_date":"2020-09-16T00:00:00Z","advisories":[],"bugzilla":"1882322","bugzilla_description":"CVE-2020-25412 gnuplot: out-of-bounds-write from strncpy() may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25412.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-19490","severity":null,"public_date":"2018-11-19T00:00:00Z","advisories":[],"bugzilla":"1656174","bugzilla_description":"CVE-2018-19490 gnuplot: heap-based buffer overflow in df_generate_ascii_array_entry","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19491","severity":null,"public_date":"2018-11-19T00:00:00Z","advisories":[],"bugzilla":"1656179","bugzilla_description":"CVE-2018-19491 gnuplot:  buffer overflow with an arbitrary amount of data in the PS_options","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19492","severity":null,"public_date":"2018-11-19T00:00:00Z","advisories":[],"bugzilla":"1656183","bugzilla_description":"CVE-2018-19492 gnuplot: buffer overflow in cairotrm_options function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9670","severity":"moderate","public_date":"2017-06-15T00:00:00Z","advisories":[],"bugzilla":"1462135","bugzilla_description":"CVE-2017-9670 gnuplot: Uninitialized stack variable in load_tic_series()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9670.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-c++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-c++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-c++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-dane_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-dane_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-dane_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls_security_api_results.json
new file mode 100644
index 0000000..c47fb86
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gnutls_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24659","severity":"moderate","public_date":"2020-09-04T00:00:00Z","advisories":[],"bugzilla":"1872021","bugzilla_description":"CVE-2020-24659 gnutls: Heap buffer overflow in handshake with no_renegotiation alert sent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24659.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-13777","severity":"important","public_date":"2020-06-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2639","RHSA-2020:2637","RHSA-2020:2638"],"bugzilla":"1843723","bugzilla_description":"CVE-2020-13777 gnutls: session resumption works without master key allowing MITM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["gnutls-0:3.6.8-9.el8_1","redhat-coreos-43.82.202007300301.0","gnutls-0:3.6.5-3.el8_0","gnutls-0:3.6.8-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13777.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-11501","severity":"moderate","public_date":"2020-03-27T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1998"],"bugzilla":"1821896","bugzilla_description":"CVE-2020-11501 gnutls: DTLS client hello contains a random value of all zeroes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["gnutls-0:3.6.8-10.el8_2","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11501.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-3829","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2019:3600","RHBA-2019:3303"],"bugzilla":"1677048","bugzilla_description":"CVE-2019-3829 gnutls: use-after-free/double-free in certificate verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gnutls-0:3.6.8-8.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3829.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-3836","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2019:3600","RHBA-2019:3303"],"bugzilla":"1678411","bugzilla_description":"CVE-2019-3836 gnutls: invalid pointer access upon receiving async handshake messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["gnutls-0:3.6.8-8.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3836.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-16868","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1654929","bugzilla_description":"CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16868.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-10844","severity":"moderate","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:3050"],"bugzilla":"1582571","bugzilla_description":"CVE-2018-10844 gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["gnutls-0:3.3.29-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10844.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-10845","severity":"moderate","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:3050"],"bugzilla":"1582572","bugzilla_description":"CVE-2018-10845 gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["gnutls-0:3.3.29-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10845.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-10846","severity":"moderate","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:3050"],"bugzilla":"1582574","bugzilla_description":"CVE-2018-10846 gnutls: \"Just in Time\" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["gnutls-0:3.3.29-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10846.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-7507","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:2292"],"bugzilla":"1454621","bugzilla_description":"CVE-2017-7507 gnutls: Crash upon receiving well-formed status_request extension","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7869","severity":"moderate","public_date":"2017-04-14T00:00:00Z","advisories":["RHSA-2017:2292"],"bugzilla":"1443033","bugzilla_description":"CVE-2017-7869 gnutls: Out-of-bounds write related to the cdk_pkt_read function (GNUTLS-SA-2017-3)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-5334","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:2292"],"bugzilla":"1411835","bugzilla_description":"CVE-2017-5334 gnutls: Double-free while decoding crafted X.509 certificates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5334.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-5337","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:2292","RHSA-2017:0574"],"bugzilla":"1411836","bugzilla_description":"CVE-2017-5337 gnutls: Heap read overflow in read-packet.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["gnutls-0:2.12.23-21.el6","gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5337.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-5335","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:2292","RHSA-2017:0574"],"bugzilla":"1412235","bugzilla_description":"CVE-2017-5335 gnutls: Out of memory while parsing crafted OpenPGP certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["gnutls-0:2.12.23-21.el6","gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5335.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5336","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:2292","RHSA-2017:0574"],"bugzilla":"1412236","bugzilla_description":"CVE-2017-5336 gnutls: Stack overflow in cdk_pk_get_keyid","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["gnutls-0:2.12.23-21.el6","gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5336.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8610","severity":"moderate","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:0286","RHSA-2017:0574"],"bugzilla":"1384743","bugzilla_description":"CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","openssl-0:1.0.1e-48.el6_8.4","gnutls-0:2.12.23-21.el6","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7444","severity":"low","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2017:2292"],"bugzilla":"1374266","bugzilla_description":"CVE-2016-7444 gnutls: Incorrect certificate validation when using OCSP responses (GNUTLS-SA-2016-3)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":["gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7444.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-2183","severity":"moderate","public_date":"2016-08-24T00:00:00Z","advisories":["RHSA-2020:0451","RHSA-2020:3842","RHSA-2017:3240","RHSA-2019:1245","RHBA-2019:2581","RHSA-2017:0462","RHSA-2017:3113","RHSA-2017:3114","RHSA-2017:2710","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:3239","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:2709","RHSA-2017:2708","RHSA-2018:2123","RHSA-2019:2859"],"bugzilla":"1369383","bugzilla_description":"CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","openshift3/metrics-heapster:v3.11.141-2","python-0:2.7.5-69.el7_5","openshift3/ose-console:v3.11.141-2","openshift3/oauth-proxy:v3.11.170-5","openshift4/ose-console:v4.5.0-202009201759.p0","openshift3/ose-kube-rbac-proxy:v3.11.141-2","openshift3/ose-metrics-server:v3.11.141-2","java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8","openshift4/ose-oauth-proxy:v4.1.18-201909201915"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-4456","severity":"moderate","public_date":"2016-06-06T00:00:00Z","advisories":[],"bugzilla":"1343505","bugzilla_description":"CVE-2016-4456 gnutls: Environment variable GNUTLS_KEYLOGFILE is obtained via insecure getenv()","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2016-4008","severity":"moderate","public_date":"2016-04-11T00:00:00Z","advisories":[],"bugzilla":"1325965","bugzilla_description":"CVE-2016-4008 libtasn1: infinite loop while parsing DER certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4008.json"},{"CVE":"CVE-2015-7575","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0012","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0007","RHSA-2016:0008","RHSA-2016:0049"],"bugzilla":"1289841","bugzilla_description":"CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.2","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","nss-0:3.19.1-19.el7_2","gnutls-0:3.3.8-14.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","gnutls-0:2.8.5-19.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","nss-0:3.19.1-8.el6_7","openssl-1:1.0.1e-51.el7_2.2","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json"},{"CVE":"CVE-2015-8313","severity":"low","public_date":"2015-12-01T00:00:00Z","advisories":[],"bugzilla":"1287572","bugzilla_description":"CVE-2015-8313 gnutls: First byte of the padding in CBC mode is not checked","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8313.json"},{"CVE":"CVE-2015-6251","severity":"moderate","public_date":"2015-08-10T00:00:00Z","advisories":[],"bugzilla":"1251902","bugzilla_description":"CVE-2015-6251 gnutls: double free flaw in certificate DN decoding (GNUTLS-SA-2015-3)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6251.json"},{"CVE":"CVE-2015-2721","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1664","RHSA-2015:1185"],"bugzilla":"1236967","bugzilla_description":"CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["nss-0:3.19.1-3.el6_6","nss-0:3.19.1-1.el5_11","nss-0:3.19.1-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2721.json"},{"CVE":"CVE-2015-3308","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":[],"bugzilla":"1212459","bugzilla_description":"CVE-2015-3308 gnutls: use-after-free flaw in CRL distribution points parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3308.json"},{"CVE":"CVE-2015-2808","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1207101","bugzilla_description":"CVE-2015-2808 SSL/TLS: \"Invariance Weakness\" vulnerability in RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2808.json"},{"CVE":"CVE-2015-0282","severity":"moderate","public_date":"2015-03-11T00:00:00Z","advisories":["RHSA-2015:1457"],"bugzilla":"1194371","bugzilla_description":"CVE-2015-0282 gnutls: RSA PKCS#1 signature verification forgery","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["gnutls-0:2.8.5-18.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0282.json"},{"CVE":"CVE-2015-0294","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":["RHSA-2015:1457"],"bugzilla":"1196323","bugzilla_description":"CVE-2015-0294 gnutls: certificate algorithm consistency checking issue","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-295","affected_packages":["gnutls-0:2.8.5-18.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0294.json"},{"CVE":"CVE-2014-8564","severity":"moderate","public_date":"2014-11-10T00:00:00Z","advisories":["RHSA-2014:1846"],"bugzilla":"1161443","bugzilla_description":"CVE-2014-8564 gnutls: Heap corruption when generating key ID for ECC (GNUTLS-SA-2014-5)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["gnutls-0:3.1.18-10.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8564.json"},{"CVE":"CVE-2014-3566","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2015:1546","RHSA-2015:1545","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2014:1881","RHSA-2014:1880","RHSA-2015:0080","RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2014:1920","RHSA-2015:0067","RHSA-2015:0012","RHSA-2015:0011","RHSA-2015:0264","RHSA-2015:0010","RHSA-2015:0086","RHSA-2015:0085","RHBA-2014:1857"],"bugzilla":"1152789","bugzilla_description":"CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-636|CWE-757)","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","openshift-origin-node-proxy-0:1.16.4.2-1.el6op","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","openshift-origin-node-proxy-0:1.22.3.4-1.el6op","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json"},{"CVE":"CVE-2014-4607","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":["RHSA-2014:0861"],"bugzilla":"1112418","bugzilla_description":"CVE-2014-4607 lzo: lzo1x_decompress_safe() integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["lzo-0:2.03-3.1.el6_5.1","lzo-0:2.06-6.el7_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4607.json"},{"CVE":"CVE-2014-3466","severity":"important","public_date":"2014-05-30T00:00:00Z","advisories":["RHSA-2014:0595","RHSA-2014:0684","RHSA-2014:0815","RHSA-2014:0594"],"bugzilla":"1101932","bugzilla_description":"CVE-2014-3466 gnutls: insufficient session id length check in _gnutls_read_server_hello (GNUTLS-SA-2014-3)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-130->CWE-119","affected_packages":["gnutls-0:2.8.5-14.el6_5","gnutls-0:3.1.18-9.el7_0","rhev-hypervisor6-0:6.5-20140624.0.el6ev","gnutls-0:1.4.1-16.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3466.json"},{"CVE":"CVE-2014-3467","severity":"moderate","public_date":"2014-05-25T00:00:00Z","advisories":["RHSA-2014:0596","RHSA-2014:0687","RHSA-2014:0815","RHSA-2014:0594"],"bugzilla":"1102022","bugzilla_description":"CVE-2014-3467 libtasn1: multiple boundary check issues","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libtasn1-0:2.3-6.el6_5","rhev-hypervisor6-0:6.5-20140624.0.el6ev","gnutls-0:1.4.1-16.el5_10","libtasn1-0:3.3-5.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3467.json"},{"CVE":"CVE-2014-3468","severity":"moderate","public_date":"2014-05-25T00:00:00Z","advisories":["RHSA-2014:0596","RHSA-2014:0687","RHSA-2014:0815","RHSA-2014:0594"],"bugzilla":"1102323","bugzilla_description":"CVE-2014-3468 libtasn1: asn1_get_bit_der() can return negative bit length","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-392->CWE-119","affected_packages":["libtasn1-0:2.3-6.el6_5","rhev-hypervisor6-0:6.5-20140624.0.el6ev","gnutls-0:1.4.1-16.el5_10","libtasn1-0:3.3-5.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3468.json"},{"CVE":"CVE-2014-3469","severity":"moderate","public_date":"2014-05-25T00:00:00Z","advisories":["RHSA-2014:0596","RHSA-2014:0687","RHSA-2014:0815","RHSA-2014:0594"],"bugzilla":"1102329","bugzilla_description":"CVE-2014-3469 libtasn1: asn1_read_value_type() NULL pointer dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["libtasn1-0:2.3-6.el6_5","rhev-hypervisor6-0:6.5-20140624.0.el6ev","gnutls-0:1.4.1-16.el5_10","libtasn1-0:3.3-5.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3469.json"},{"CVE":"CVE-2014-0092","severity":"important","public_date":"2014-03-03T00:00:00Z","advisories":["RHSA-2014:0246","RHSA-2014:0288","RHSA-2014:0247","RHSA-2014:0339"],"bugzilla":"1069865","bugzilla_description":"CVE-2014-0092 gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["gnutls-0:1.4.1-10.el5_9.3","gnutls-0:1.4.1-14.el5_10","gnutls-0:2.8.5-13.el6_5","rhev-hypervisor6-0:6.5-20140324.0.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0092.json"},{"CVE":"CVE-2014-1959","severity":"moderate","public_date":"2014-02-12T00:00:00Z","advisories":[],"bugzilla":"1065092","bugzilla_description":"CVE-2014-1959 gnutls: incorrect handling of V1 intermediate certificates (GNUTLS-SA-2014-1)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1959.json"},{"CVE":"CVE-2014-3465","severity":"moderate","public_date":"2014-01-31T00:00:00Z","advisories":["RHSA-2014:0684"],"bugzilla":"1101734","bugzilla_description":"CVE-2014-3465 gnutls: gnutls_x509_dn_oid_name NULL pointer dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["gnutls-0:3.1.18-9.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3465.json"},{"CVE":"CVE-2013-4487","severity":"moderate","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1025637","bugzilla_description":"CVE-2013-4487 gnutls: dane_query_tlsa() CVE-2013-4466 fix off-by-one","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4487.json"},{"CVE":"CVE-2013-4466","severity":"moderate","public_date":"2013-10-23T00:00:00Z","advisories":[],"bugzilla":"1022913","bugzilla_description":"CVE-2013-4466 gnutls: dane_query_tlsa() buffer overflow (GNUTLS-SA-2013-3)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4466.json"},{"CVE":"CVE-2007-6755","severity":"moderate","public_date":"2013-10-11T00:00:00Z","advisories":[],"bugzilla":"1046045","bugzilla_description":"CVE-2007-6755 Dual_EC_DRBG: weak pseudo random number generator","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6755.json"},{"CVE":"CVE-2013-2116","severity":"important","public_date":"2013-05-29T00:00:00Z","advisories":["RHSA-2013:1076","RHSA-2013:0883"],"bugzilla":"966754","bugzilla_description":"CVE-2013-2116 gnutls: out of bounds read in _gnutls_ciphertext2compressed (GNUTLS-SA-2013-2)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gnutls-0:1.4.1-10.el5_9.2","gnutls-0:2.8.5-10.el6_4.2","rhev-hypervisor6-0:6.4-20130709.0.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2116.json"},{"CVE":"CVE-2013-2566","severity":"moderate","public_date":"2013-03-15T00:00:00Z","advisories":[],"bugzilla":"921947","bugzilla_description":"CVE-2013-2566 SSL/TLS: Attack against RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2566.json"},{"CVE":"CVE-2013-1619","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0636","RHSA-2013:0588"],"bugzilla":"908238","bugzilla_description":"CVE-2013-1619 gnutls: TLS CBC padding timing attack (lucky-13)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gnutls-0:1.4.1-10.el5_9.1","rhev-hypervisor6-0:6.4-20130306.2.el6_4","gnutls-0:2.8.5-10.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1619.json"},{"CVE":"CVE-2012-4929","severity":"moderate","public_date":"2012-09-13T00:00:00Z","advisories":["RHSA-2013:0636","RHSA-2013:0587","RHSA-2014:0416"],"bugzilla":"857051","bugzilla_description":"CVE-2012-4929 SSL/TLS CRIME attack against HTTPS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4929.json"},{"CVE":"CVE-2012-1573","severity":"important","public_date":"2012-03-21T00:00:00Z","advisories":["RHSA-2012:0428","RHSA-2012:0429","RHSA-2012:0531","RHSA-2012:0488"],"bugzilla":"805432","bugzilla_description":"CVE-2012-1573 gnutls: TLS record handling issue (GNUTLS-SA-2012-2, MU-201202-01)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["gnutls-0:2.8.5-4.el6_2.2","rhev-hypervisor6-0:6.2-20120423.1.el6_2","gnutls-0:1.4.1-7.el5_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1573.json"},{"CVE":"CVE-2012-1569","severity":"important","public_date":"2012-03-19T00:00:00Z","advisories":["RHSA-2012:0427","RHSA-2012:0428","RHSA-2012:0531","RHSA-2012:0488"],"bugzilla":"804920","bugzilla_description":"CVE-2012-1569 libtasn1: DER decoding buffer overflow (GNUTLS-SA-2012-3, MU-201202-02)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtasn1-0:2.3-3.el6_2.1","rhev-hypervisor6-0:6.2-20120423.1.el6_2","gnutls-0:1.4.1-7.el5_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1569.json"},{"CVE":"CVE-2012-1663","severity":"moderate","public_date":"2012-02-19T00:00:00Z","advisories":[],"bugzilla":"803169","bugzilla_description":"CVE-2012-1663 gnutls: double-free vulnerability in libgnutls 3.0.x","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1663.json"},{"CVE":"CVE-2012-0390","severity":"moderate","public_date":"2012-01-05T00:00:00Z","advisories":[],"bugzilla":"772132","bugzilla_description":"CVE-2012-0390 gnutls: DTLS plaintext recovery attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0390.json"},{"CVE":"CVE-2011-4128","severity":"low","public_date":"2011-11-07T00:00:00Z","advisories":["RHSA-2012:0428","RHSA-2012:0429"],"bugzilla":"752308","bugzilla_description":"CVE-2011-4128 gnutls: buffer overflow in gnutls_session_get_data() (GNUTLS-SA-2011-2)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gnutls-0:2.8.5-4.el6_2.2","gnutls-0:1.4.1-7.el5_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4128.json"},{"CVE":"CVE-2011-3389","severity":"moderate","public_date":"2011-09-10T00:00:00Z","advisories":["RHSA-2011:1384","RHSA-2012:0508","RHSA-2011:1380","RHSA-2012:0034","RHSA-2012:0343","RHSA-2013:1455","RHSA-2012:0006"],"bugzilla":"737506","bugzilla_description":"CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2","java-1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3389.json"},{"CVE":"CVE-2010-0731","severity":"moderate","public_date":"2010-03-25T00:00:00Z","advisories":["RHSA-2010:0167"],"bugzilla":"573028","bugzilla_description":"CVE-2010-0731 gnutls: gnutls_x509_crt_get_serial incorrect serial decoding from ASN1 (BE64) [GNUTLS-SA-2010-1]","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["gnutls-0:1.0.20-4.el4_8.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0731.json"},{"CVE":"CVE-2014-8155","severity":"moderate","public_date":"2010-03-14T00:00:00Z","advisories":["RHSA-2015:1457"],"bugzilla":"1197995","bugzilla_description":"CVE-2014-8155 gnutls: gnutls does not perform date/time checks on CA certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-325","affected_packages":["gnutls-0:2.8.5-18.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8155.json"},{"CVE":"CVE-2009-3555","severity":"moderate","public_date":"2009-11-05T00:00:00Z","advisories":["RHSA-2009:1580","RHSA-2010:0408","RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2010:0786","RHSA-2010:0167","RHSA-2010:0166","RHSA-2010:0165","RHSA-2010:0440","RHSA-2010:0164","RHSA-2010:0163","RHSA-2010:0162","RHSA-2009:1579","RHSA-2009:1694","RHSA-2010:0807","RHSA-2010:0119","RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2011:0880","RHSA-2010:0155","RHSA-2010:0770","RHSA-2010:0011","RHSA-2015:1591","RHSA-2010:0130"],"bugzilla":"533125","bugzilla_description":"CVE-2009-3555 TLS: MITM attacks via session renegotiation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-300","affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","httpd-0:2.2.3-31.el5_4.2","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el5","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","openssl-0:0.9.8e-12.el5_4.6","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el4_8","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","rhev-hypervisor-0:5.4-2.1.12.1.el5_4rhev2_1","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5","openssl097a-0:0.9.7a-9.el5_4.2","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","httpd22-0:2.2.10-25.1.ep5.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","httpd-0:2.0.52-41.ent.6","gnutls-0:1.0.20-4.el4_8.7","httpd-0:2.2.10-11.ep5.el5","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","httpd-0:2.0.46-77.ent","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4","pulp-0:2.6.0.15-1.el7sat","openssl-0:0.9.7a-33.26"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3555.json"},{"CVE":"CVE-2009-2730","severity":"moderate","public_date":"2009-08-04T00:00:00Z","advisories":["RHSA-2009:1232"],"bugzilla":"516231","bugzilla_description":"CVE-2009-2730 gnutls: incorrect verification of SSL certificate with NUL in name (GNUTLS-SA-2009-4)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["gnutls-0:1.0.20-4.el4_8.3","gnutls-0:1.4.1-3.el5_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2730.json"},{"CVE":"CVE-2009-2409","severity":"moderate","public_date":"2009-07-29T00:00:00Z","advisories":["RHSA-2009:1184","RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1186","RHSA-2009:1207","RHSA-2009:1190","RHSA-2010:0166","RHSA-2009:1584","RHSA-2010:0054","RHSA-2009:1432","RHSA-2010:0163","RHSA-2009:1662"],"bugzilla":"510197","bugzilla_description":"CVE-2009-2409 deprecate MD2 in SSL cert validation (Kaminsky)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","seamonkey-0:1.0.9-0.45.el3","java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","nss-0:3.12.3.99.3-1.el4_8.2","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","openssl-0:0.9.8e-12.el5_4.1","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","openssl-0:0.9.7a-33.26","nss-0:3.12.3.99.3-1.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2409.json"},{"CVE":"CVE-2009-5138","severity":"moderate","public_date":"2009-01-09T00:00:00Z","advisories":["RHSA-2014:0247"],"bugzilla":"1069301","bugzilla_description":"CVE-2009-5138 gnutls: incorrect handling of V1 intermediate certificates","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["gnutls-0:1.4.1-14.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5138.json"},{"CVE":"CVE-2008-4989","severity":"moderate","public_date":"2008-11-10T00:00:00Z","advisories":["RHSA-2008:0982"],"bugzilla":"470079","bugzilla_description":"CVE-2008-4989 gnutls: certificate chain verification flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:1.4.1-3.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4989.json"},{"CVE":"CVE-2008-1948","severity":"critical","public_date":"2008-05-19T00:00:00Z","advisories":["RHSA-2008:0489","RHSA-2008:0492"],"bugzilla":"447461","bugzilla_description":"CVE-2008-1948 GNUTLS-SA-2008-1-1 GnuTLS buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:1.4.1-3.el5_1","gnutls-0:1.0.20-4.el4_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1948.json"},{"CVE":"CVE-2008-1949","severity":"important","public_date":"2008-05-19T00:00:00Z","advisories":["RHSA-2008:0489","RHSA-2008:0492"],"bugzilla":"447462","bugzilla_description":"CVE-2008-1949 GNUTLS-SA-2008-1-2 GnuTLS null-pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["gnutls-0:1.4.1-3.el5_1","gnutls-0:1.0.20-4.el4_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1949.json"},{"CVE":"CVE-2008-1950","severity":"important","public_date":"2008-05-19T00:00:00Z","advisories":["RHSA-2008:0489","RHSA-2008:0492"],"bugzilla":"447463","bugzilla_description":"CVE-2008-1950 GNUTLS-SA-2008-1-3 GnuTLS memory overread flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:1.4.1-3.el5_1","gnutls-0:1.0.20-4.el4_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1950.json"},{"CVE":"CVE-2006-4790","severity":"important","public_date":"2006-09-08T00:00:00Z","advisories":["RHSA-2006:0680"],"bugzilla":"1618201","bugzilla_description":"CVE-2006-4790 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:1.0.20-3.2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4790.json"},{"CVE":"CVE-2006-7239","severity":"low","public_date":"2006-08-12T00:00:00Z","advisories":["RHBA-2012:0319"],"bugzilla":"595229","bugzilla_description":"CVE-2006-7239 gnutls: unknown hash algorithm NULL pointer derefence [GNUTLS-SA-2006-2]","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["gnutls-0:1.4.1-7.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7239.json"},{"CVE":"CVE-2006-0645","severity":"important","public_date":"2006-02-09T15:38:00Z","advisories":["RHSA-2006:0207"],"bugzilla":"184097","bugzilla_description":"CVE-2006-0645 - libtasn1 buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:1.0.20-3.2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0645.json"},{"CVE":"CVE-2005-1431","severity":"moderate","public_date":"2005-04-28T00:00:00Z","advisories":["RHSA-2005:430"],"bugzilla":"156856","bugzilla_description":"CVE-2005-1431 gnutls record packet parsing DoS [GNUTLS-SA-2005-1]","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:1.0.20-3.2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1431.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gobject-introspection-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gobject-introspection-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gobject-introspection-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gobject-introspection_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gobject-introspection_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gobject-introspection_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gom_security_api_results.json
new file mode 100644
index 0000000..0af9f36
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gom_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11840","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":["RHBA-2020:0063"],"bugzilla":"1691529","bugzilla_description":"CVE-2019-11840 golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["openshift-0:4.3.0-202001131753.git.0.0aee6a8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3204","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":[],"bugzilla":"1439748","bugzilla_description":"CVE-2017-3204 golang-googlecode-go-crypto: Go SSH library does not verify host keys by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-crosextra-caladea-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-crosextra-caladea-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-crosextra-caladea-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-crosextra-carlito-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-crosextra-carlito-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-crosextra-carlito-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-emoji-color-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-emoji-color-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-emoji-color-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-emoji-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-emoji-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-emoji-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-armenian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-armenian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-armenian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-devanagari-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-devanagari-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-devanagari-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-devanagari-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-devanagari-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-devanagari-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-ethiopic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-ethiopic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-ethiopic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-georgian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-georgian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-georgian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-hebrew-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-hebrew-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-hebrew-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-khmer-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-khmer-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-khmer-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-khmer-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-khmer-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-khmer-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-lao-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-lao-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-lao-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-lao-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-lao-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-lao-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-tamil-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-tamil-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-tamil-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-tamil-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-tamil-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-tamil-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-thai-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-thai-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-thai-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-thai-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-thai-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-thai-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-sans-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-armenian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-armenian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-armenian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-georgian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-georgian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-georgian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-lao-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-lao-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-lao-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-thai-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-thai-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/google-noto-serif-thai-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gperftools-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gperftools-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gperftools-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gpgme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gpgme_security_api_results.json
new file mode 100644
index 0000000..b4199d7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gpgme_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-3564","severity":"low","public_date":"2014-07-30T00:00:00Z","advisories":[],"bugzilla":"1113267","bugzilla_description":"CVE-2014-3564 gpgme: heap-based buffer overflow in gpgsm status handler","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3564.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gpm-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gpm-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gpm-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gpm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gpm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gpm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grantlee_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grantlee_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grantlee_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphite2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphite2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphite2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphite2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphite2_security_api_results.json
new file mode 100644
index 0000000..9527e2a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphite2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-7999","severity":"low","public_date":"2018-03-05T00:00:00Z","advisories":[],"bugzilla":"1554380","bugzilla_description":"CVE-2018-7999 graphite2: NULL pointer dereference in Segment.cpp in libgraphite2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-7778","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1461260","bugzilla_description":"CVE-2017-7778 Mozilla: Vulnerabilities in the Graphite 2 library (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7771","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472212","bugzilla_description":"CVE-2017-7771 graphite2: out of bounds read in \"graphite2::Pass::readPass\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7771.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-7772","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472213","bugzilla_description":"CVE-2017-7772 graphite2: heap-buffer-overflow write \"lz4::decompress\" (CVE-2017-7772)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7773","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472215","bugzilla_description":"CVE-2017-7773 graphite2: heap-buffer-overflow write \"lz4::decompress\" (src/Decompressor)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7773.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7774","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472219","bugzilla_description":"CVE-2017-7774 graphite2: out of bounds read \"graphite2::Silf::readGraphite\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7774.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-7775","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472221","bugzilla_description":"CVE-2017-7775 graphite2: assertion error \"size() > n\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7775.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7776","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472223","bugzilla_description":"CVE-2017-7776 graphite2: heap-buffer-overflow read \"graphite2::Silf::getClassGlyph\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-7777","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472225","bugzilla_description":"CVE-2017-7777 graphite2: use of uninitialized memory \"graphite2::GlyphCache::Loader::read_glyph\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7777.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-1521","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0197","RHSA-2016:0594","RHSA-2016:0258"],"bugzilla":"1305805","bugzilla_description":"CVE-2016-1521 graphite2: Out-of-bound read vulnerability triggered by crafted fonts","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:38.6.1-1.el6_7","graphite2-0:1.3.6-1.el7_2","thunderbird-0:38.6.0-1.el5_11","firefox-0:38.6.1-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.1-1.el7_2","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1521.json"},{"CVE":"CVE-2016-1522","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0197","RHSA-2016:0594","RHSA-2016:0258"],"bugzilla":"1305810","bugzilla_description":"CVE-2016-1522 graphite2: Null pointer dereference and out-of-bounds access vulnerabilities","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["firefox-0:38.6.1-1.el6_7","graphite2-0:1.3.6-1.el7_2","thunderbird-0:38.6.0-1.el5_11","firefox-0:38.6.1-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.1-1.el7_2","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1522.json"},{"CVE":"CVE-2016-1523","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0197","RHSA-2016:0594","RHSA-2016:0258"],"bugzilla":"1305813","bugzilla_description":"CVE-2016-1523 graphite2: Heap-based buffer overflow in context item handling functionality","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["firefox-0:38.6.1-1.el6_7","graphite2-0:1.3.6-1.el7_2","thunderbird-0:38.6.0-1.el5_11","firefox-0:38.6.1-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.1-1.el7_2","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1523.json"},{"CVE":"CVE-2016-1526","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0594","RHSA-2016:0695"],"bugzilla":"1308590","bugzilla_description":"CVE-2016-1526 graphite2: Out-of-bounds read vulnerability in TfUtil:LocaLookup","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["firefox-0:45.1.0-1.el6_7","graphite2-0:1.3.6-1.el7_2","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1526.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphviz-tcl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphviz-tcl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphviz-tcl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphviz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphviz_security_api_results.json
new file mode 100644
index 0000000..e67332d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/graphviz_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11023","severity":"low","public_date":"2019-04-09T00:00:00Z","advisories":[],"bugzilla":"1699848","bugzilla_description":"CVE-2019-11023 graphviz: null pointer dereference in function agroot() in cgraph\\obj.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11023.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-9904","severity":"low","public_date":"2019-03-16T00:00:00Z","advisories":[],"bugzilla":"1691717","bugzilla_description":"CVE-2019-9904 graphviz: recursive function call in agclose in lib\\cgraph\\graph.c causing stack consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9904.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2018-10196","severity":"low","public_date":"2018-04-18T00:00:00Z","advisories":[],"bugzilla":"1579254","bugzilla_description":"CVE-2018-10196 graphviz: NULL pointer dereference in rebuild_vlis","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6161","severity":"moderate","public_date":"2016-05-08T00:00:00Z","advisories":[],"bugzilla":"1353550","bugzilla_description":"CVE-2016-6161 gd: Global out-of-bounds read when encoding gif from malformed gd2 input","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2014-9157","severity":"low","public_date":"2014-11-25T00:00:00Z","advisories":[],"bugzilla":"1167866","bugzilla_description":"CVE-2014-9157 graphviz: format string vulnerability in yyerror()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-134","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9157.json"},{"CVE":"CVE-2014-1235","severity":"low","public_date":"2014-01-08T00:00:00Z","advisories":[],"bugzilla":"1050871","bugzilla_description":"CVE-2014-1235 graphviz: buffer overflow in yyerror() due to improper fix for CVE-2014-0978","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1235.json"},{"CVE":"CVE-2014-1236","severity":"low","public_date":"2014-01-08T00:00:00Z","advisories":[],"bugzilla":"1050872","bugzilla_description":"CVE-2014-1236 graphviz: stack-based buffer overflow in chkNum()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1236.json"},{"CVE":"CVE-2014-0978","severity":"low","public_date":"2014-01-06T00:00:00Z","advisories":[],"bugzilla":"1049165","bugzilla_description":"CVE-2014-0978 graphviz: stack-based buffer overflow in yyerror()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0978.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grep_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grep_security_api_results.json
new file mode 100644
index 0000000..6f931df
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grep_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-1345","severity":"low","public_date":"2015-01-18T00:00:00Z","advisories":["RHSA-2015:1447","RHSA-2015:2111"],"bugzilla":"1183651","bugzilla_description":"CVE-2015-1345 grep: heap buffer overrun","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["grep-0:2.20-3.el6","grep-0:2.20-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1345.json"},{"CVE":"CVE-2012-5667","severity":"low","public_date":"2012-12-22T00:00:00Z","advisories":["RHSA-2015:1447"],"bugzilla":"889935","bugzilla_description":"CVE-2012-5667 grep: Integer overflow leading to heap-based buffer-overflow when reading large lines","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["grep-0:2.20-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5667.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grilo-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grilo-plugins_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grilo-plugins_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grilo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grilo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grilo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/groff-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/groff-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/groff-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-ia32-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-ia32-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-ia32-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-ia32_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-ia32_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-ia32_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-x64-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-x64-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-x64-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-x64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-x64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-efi-x64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-pc-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-pc-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-pc-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-pc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-pc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-pc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64le-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64le-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64le-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64le_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64le_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-ppc64le_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-tools-extra_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-tools-extra_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-tools-extra_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-tools-minimal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-tools-minimal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-tools-minimal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2_security_api_results.json
new file mode 100644
index 0000000..514c6f8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grub2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10713","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:4115","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3273","RHSA-2020:3271","RHSA-2020:4172","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1825243","bugzilla_description":"CVE-2020-10713 grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787->CWE-78","affected_packages":["grub2-1:2.02-0.86.el7_8","fwupd-0:1.1.4-7.el8_2","fwupdate-0:12-6.el7_8","grub2-1:2.02-87.el8_2","shim-0:15-14.el8_2","shim-0:15-7.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10713.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-14308","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3273","RHSA-2020:3271","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1852009","bugzilla_description":"CVE-2020-14308 grub2: grub_malloc does not validate allocation size allowing for arithmetic overflow and subsequent heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["grub2-1:2.02-0.86.el7_8","grub2-1:2.02-87.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14308.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-14311","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3273","RHSA-2020:3271","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1852014","bugzilla_description":"CVE-2020-14311 grub2: Integer overflow in grub_ext2_read_link leads to heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["grub2-1:2.02-0.86.el7_8","grub2-1:2.02-87.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14311.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2020-14309","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3273","RHSA-2020:3271","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1852022","bugzilla_description":"CVE-2020-14309 grub2: Integer overflow in grub_squash_read_symlink may lead to heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["grub2-1:2.02-0.86.el7_8","grub2-1:2.02-87.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14309.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-14310","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3273","RHSA-2020:3271","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1852030","bugzilla_description":"CVE-2020-14310 grub2: Integer overflow read_section_as_string may lead to heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["grub2-1:2.02-0.86.el7_8","grub2-1:2.02-87.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14310.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2020-15705","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3273","RHSA-2020:3271","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1860978","bugzilla_description":"CVE-2020-15705 grub2: Fail kernel validation without shim protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["grub2-1:2.02-0.86.el7_8","grub2-1:2.02-87.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15705.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-15706","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3273","RHSA-2020:3271","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1861118","bugzilla_description":"CVE-2020-15706 grub2: Use-after-free redefining a function whilst the same function is already executing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["grub2-1:2.02-0.86.el7_8","grub2-1:2.02-87.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15706.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-15707","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3271","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1861581","bugzilla_description":"CVE-2020-15707 grub2: Integer overflow in initrd size handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["grub2-1:2.02-0.86.el7_8","grub2-1:2.02-87.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15707.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2019-14865","severity":"moderate","public_date":"2019-11-25T00:00:00Z","advisories":["RHSA-2020:0335"],"bugzilla":"1764925","bugzilla_description":"CVE-2019-14865 grub2: grub2-set-bootflag utility causes grubenv corruption rendering the system non-bootable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":["grub2-1:2.02-78.el8_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14865.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9763","severity":"low","public_date":"2017-06-11T00:00:00Z","advisories":[],"bugzilla":"1463361","bugzilla_description":"CVE-2017-9763 grub2: Stack exhaustion in grub_ext2_read_block","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9763.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8370","severity":"moderate","public_date":"2015-12-10T00:00:00Z","advisories":["RHSA-2015:2623"],"bugzilla":"1286966","bugzilla_description":"CVE-2015-8370 grub2: buffer overflow when checking password entered during bootup","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-787","affected_packages":["grub2-1:2.02-0.33.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8370.json"},{"CVE":"CVE-2015-5281","severity":"low","public_date":"2015-11-17T00:00:00Z","advisories":["RHSA-2015:2401"],"bugzilla":"1264103","bugzilla_description":"CVE-2015-5281 grub2: modules built in on EFI builds that allow loading arbitrary code, circumventing secure boot","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["grub2-1:2.02-0.29.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5281.json"},{"CVE":"CVE-2014-4607","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":["RHSA-2014:0861"],"bugzilla":"1112418","bugzilla_description":"CVE-2014-4607 lzo: lzo1x_decompress_safe() integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["lzo-0:2.03-3.1.el6_5.1","lzo-0:2.06-6.el7_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4607.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grubby_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grubby_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/grubby_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsettings-desktop-schemas-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsettings-desktop-schemas-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsettings-desktop-schemas-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsettings-desktop-schemas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsettings-desktop-schemas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsettings-desktop-schemas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsound_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsound_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gsound_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gspell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gspell_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gspell_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gssdp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gssdp_security_api_results.json
new file mode 100644
index 0000000..ce0bc36
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gssdp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12695","severity":"moderate","public_date":"2020-06-08T00:00:00Z","advisories":[],"bugzilla":"1846006","bugzilla_description":"CVE-2020-12695 hostapd: UPnP SUBSCRIBE misbehavior in WPS AP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-400|CWE-918)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12695.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gssproxy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gssproxy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gssproxy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-plugins-bad-free_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-plugins-bad-free_security_api_results.json
new file mode 100644
index 0000000..06eee23
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-plugins-bad-free_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-5843","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419592","bugzilla_description":"CVE-2017-5843 gstreamer-plugins-bad-free: Use after free in gst_mini_object_unref / gst_tag_list_unref / gst_mxf_demux_update_essence_tracks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9813","severity":"low","public_date":"2016-11-25T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401934","bugzilla_description":"CVE-2016-9813 gstreamer-plugins-bad-free: NULL pointer dereference in mpegts parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-476","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9812","severity":"low","public_date":"2016-11-24T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401930","bugzilla_description":"CVE-2016-9812 gstreamer1-plugins-bad-free: Out-of-bounds read in gst_mpegts_section_new","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9809","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021"],"bugzilla":"1401880","bugzilla_description":"CVE-2016-9809 gstreamer-plugins-bad-free: Off-by-one read in gst_h264_parse_set_caps","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":["gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9809.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9445","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021","RHSA-2016:2974"],"bugzilla":"1395767","bugzilla_description":"CVE-2016-9445 gstreamer-plugins-bad-free: Integer overflow when allocating render buffer in VMnc decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9445.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9446","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1397063","bugzilla_description":"CVE-2016-9446 gstreamer-plugins-bad-free: Missing initialization of allocated heap memory leads to information leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9447","severity":"moderate","public_date":"2016-11-14T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2016:2974"],"bugzilla":"1395126","bugzilla_description":"CVE-2016-9447 gstreamer-plugins-bad-free: Memory corruption flaw in NSF decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5848","severity":"low","public_date":"2016-01-30T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419583","bugzilla_description":"CVE-2017-5848 gstreamer-plugins-bad-free: Invalid memory read in gst_ps_demux_parse_psm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5848.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-plugins-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-plugins-base_security_api_results.json
new file mode 100644
index 0000000..c59d8f6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-plugins-base_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9928","severity":"moderate","public_date":"2019-04-22T00:00:00Z","advisories":[],"bugzilla":"1724904","bugzilla_description":"CVE-2019-9928 GStreamer: heap-based buffer overflow in the RTSP connection parser via crafted server response leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5844","severity":"low","public_date":"2017-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419600","bugzilla_description":"CVE-2017-5844 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5844.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5842","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419591","bugzilla_description":"CVE-2017-5842 gstreamer-plugins-base: Out-of-bounds heap read in html_context_handle_element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5837","severity":"low","public_date":"2017-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419584","bugzilla_description":"CVE-2017-5837 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9811","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1401918","bugzilla_description":"CVE-2016-9811 gstreamer: Out of bounds heap read in windows_icon_typefind","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-5839","severity":"low","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419586","bugzilla_description":"CVE-2017-5839 gstreamer-plugins-base: Stack overflow in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5839.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2009-0586","severity":"moderate","public_date":"2009-03-12T00:00:00Z","advisories":["RHSA-2009:0352"],"bugzilla":"488208","bugzilla_description":"CVE-2009-0586 gstreamer-plugins-base: integer overflow in gst_vorbis_tag_add_coverart()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["gstreamer-plugins-base-0:0.10.20-3.0.1.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0586.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-plugins-good_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-plugins-good_security_api_results.json
new file mode 100644
index 0000000..b0aeb6d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-plugins-good_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-5841","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419589","bugzilla_description":"CVE-2017-5841 gstreamer-plugins-good: Heap out-of-bounds read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10198","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419558","bugzilla_description":"CVE-2016-10198 gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10199","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419580","bugzilla_description":"CVE-2016-10199 gstreamer-plugins-good: Out of bounds read in qtdemux_tag_add_str_full","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9810","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1401913","bugzilla_description":"CVE-2016-9810 gstreamer: Invalid memory read in g_type_check_instance_is_fundamentally_a","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9807","severity":"low","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1401874","bugzilla_description":"CVE-2016-9807 gstreamer-plugins-good: Invalid memory read in flx_decode_chunks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9634","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9635","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9636","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9808","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5845","severity":"low","public_date":"2016-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419582","bugzilla_description":"CVE-2017-5845 gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5845.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5840","severity":"low","public_date":"2016-01-18T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419588","bugzilla_description":"CVE-2017-5840 gstreamer-plugins-good: Out of bounds heap read in qtdemux_parse_samples","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2014-4610","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":[],"bugzilla":"1112440","bugzilla_description":"CVE-2014-4610 ffmpeg: av_lzo1x_decode() integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4610.json"},{"CVE":"CVE-2009-1932","severity":"moderate","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2009:1123"],"bugzilla":"504199","bugzilla_description":"CVE-2009-1932 gstreamer-plugins-good: PNG decoder integer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["gstreamer-plugins-good-0:0.10.9-1.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1932.json"},{"CVE":"CVE-2009-0397","severity":"important","public_date":"2009-01-22T00:00:00Z","advisories":["RHSA-2009:0270","RHSA-2009:0271"],"bugzilla":"481267","bugzilla_description":"CVE-2009-0397 gstreamer-plugins, gstreamer-plugins-good: heap-based buffer overflow while parsing malformed QuickTime media files via crafted Time-to-sample (stss) atom data","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["gstreamer-plugins-good-0:0.10.9-1.el5_3.1","gstreamer-plugins-0:0.8.5-1.EL.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0397.json"},{"CVE":"CVE-2009-0386","severity":"important","public_date":"2009-01-22T00:00:00Z","advisories":["RHSA-2009:0271"],"bugzilla":"483736","bugzilla_description":"CVE-2009-0386 gstreamer-plugins-good: heap-based buffer overflow while parsing malformed QuickTime media files via crafted Composition Time To Sample (aka ctts) atom data","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["gstreamer-plugins-good-0:0.10.9-1.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0386.json"},{"CVE":"CVE-2009-0387","severity":"important","public_date":"2009-01-22T00:00:00Z","advisories":["RHSA-2009:0271"],"bugzilla":"483737","bugzilla_description":"CVE-2009-0387 gstreamer-plugins-good: Array index error while parsing malformed QuickTime media files via crafted Sync Sample (aka stss) atom data","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer-plugins-good-0:0.10.9-1.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0387.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-bad-free-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-bad-free-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-bad-free-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-bad-free_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-bad-free_security_api_results.json
new file mode 100644
index 0000000..06eee23
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-bad-free_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-5843","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419592","bugzilla_description":"CVE-2017-5843 gstreamer-plugins-bad-free: Use after free in gst_mini_object_unref / gst_tag_list_unref / gst_mxf_demux_update_essence_tracks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9813","severity":"low","public_date":"2016-11-25T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401934","bugzilla_description":"CVE-2016-9813 gstreamer-plugins-bad-free: NULL pointer dereference in mpegts parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-476","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9812","severity":"low","public_date":"2016-11-24T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401930","bugzilla_description":"CVE-2016-9812 gstreamer1-plugins-bad-free: Out-of-bounds read in gst_mpegts_section_new","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9809","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021"],"bugzilla":"1401880","bugzilla_description":"CVE-2016-9809 gstreamer-plugins-bad-free: Off-by-one read in gst_h264_parse_set_caps","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":["gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9809.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9445","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021","RHSA-2016:2974"],"bugzilla":"1395767","bugzilla_description":"CVE-2016-9445 gstreamer-plugins-bad-free: Integer overflow when allocating render buffer in VMnc decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9445.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9446","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1397063","bugzilla_description":"CVE-2016-9446 gstreamer-plugins-bad-free: Missing initialization of allocated heap memory leads to information leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9447","severity":"moderate","public_date":"2016-11-14T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2016:2974"],"bugzilla":"1395126","bugzilla_description":"CVE-2016-9447 gstreamer-plugins-bad-free: Memory corruption flaw in NSF decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5848","severity":"low","public_date":"2016-01-30T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419583","bugzilla_description":"CVE-2017-5848 gstreamer-plugins-bad-free: Invalid memory read in gst_ps_demux_parse_psm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5848.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-base-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-base-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-base-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-base_security_api_results.json
new file mode 100644
index 0000000..fe12165
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-base_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9928","severity":"moderate","public_date":"2019-04-22T00:00:00Z","advisories":[],"bugzilla":"1724904","bugzilla_description":"CVE-2019-9928 GStreamer: heap-based buffer overflow in the RTSP connection parser via crafted server response leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5844","severity":"low","public_date":"2017-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419600","bugzilla_description":"CVE-2017-5844 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5844.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5842","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419591","bugzilla_description":"CVE-2017-5842 gstreamer-plugins-base: Out-of-bounds heap read in html_context_handle_element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5837","severity":"low","public_date":"2017-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419584","bugzilla_description":"CVE-2017-5837 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9811","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1401918","bugzilla_description":"CVE-2016-9811 gstreamer: Out of bounds heap read in windows_icon_typefind","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-5839","severity":"low","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419586","bugzilla_description":"CVE-2017-5839 gstreamer-plugins-base: Stack overflow in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5839.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-good_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-good_security_api_results.json
new file mode 100644
index 0000000..8ac937d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-good_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-5841","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419589","bugzilla_description":"CVE-2017-5841 gstreamer-plugins-good: Heap out-of-bounds read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10198","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419558","bugzilla_description":"CVE-2016-10198 gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10199","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419580","bugzilla_description":"CVE-2016-10199 gstreamer-plugins-good: Out of bounds read in qtdemux_tag_add_str_full","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9810","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1401913","bugzilla_description":"CVE-2016-9810 gstreamer: Invalid memory read in g_type_check_instance_is_fundamentally_a","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9807","severity":"low","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1401874","bugzilla_description":"CVE-2016-9807 gstreamer-plugins-good: Invalid memory read in flx_decode_chunks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9634","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9635","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9636","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9808","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5845","severity":"low","public_date":"2016-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419582","bugzilla_description":"CVE-2017-5845 gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5845.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5840","severity":"low","public_date":"2016-01-18T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419588","bugzilla_description":"CVE-2017-5840 gstreamer-plugins-good: Out of bounds heap read in qtdemux_parse_samples","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2014-4610","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":[],"bugzilla":"1112440","bugzilla_description":"CVE-2014-4610 ffmpeg: av_lzo1x_decode() integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4610.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-ugly-free_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-ugly-free_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1-plugins-ugly-free_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1_security_api_results.json
new file mode 100644
index 0000000..47d9dd2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer1_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9928","severity":"moderate","public_date":"2019-04-22T00:00:00Z","advisories":[],"bugzilla":"1724904","bugzilla_description":"CVE-2019-9928 GStreamer: heap-based buffer overflow in the RTSP connection parser via crafted server response leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5844","severity":"low","public_date":"2017-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419600","bugzilla_description":"CVE-2017-5844 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5844.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5841","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419589","bugzilla_description":"CVE-2017-5841 gstreamer-plugins-good: Heap out-of-bounds read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5842","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419591","bugzilla_description":"CVE-2017-5842 gstreamer-plugins-base: Out-of-bounds heap read in html_context_handle_element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5843","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419592","bugzilla_description":"CVE-2017-5843 gstreamer-plugins-bad-free: Use after free in gst_mini_object_unref / gst_tag_list_unref / gst_mxf_demux_update_essence_tracks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5837","severity":"low","public_date":"2017-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419584","bugzilla_description":"CVE-2017-5837 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10198","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419558","bugzilla_description":"CVE-2016-10198 gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10199","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419580","bugzilla_description":"CVE-2016-10199 gstreamer-plugins-good: Out of bounds read in qtdemux_tag_add_str_full","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9813","severity":"low","public_date":"2016-11-25T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401934","bugzilla_description":"CVE-2016-9813 gstreamer-plugins-bad-free: NULL pointer dereference in mpegts parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-476","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9812","severity":"low","public_date":"2016-11-24T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401930","bugzilla_description":"CVE-2016-9812 gstreamer1-plugins-bad-free: Out-of-bounds read in gst_mpegts_section_new","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9809","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021"],"bugzilla":"1401880","bugzilla_description":"CVE-2016-9809 gstreamer-plugins-bad-free: Off-by-one read in gst_h264_parse_set_caps","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":["gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9809.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9810","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1401913","bugzilla_description":"CVE-2016-9810 gstreamer: Invalid memory read in g_type_check_instance_is_fundamentally_a","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9811","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1401918","bugzilla_description":"CVE-2016-9811 gstreamer: Out of bounds heap read in windows_icon_typefind","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9807","severity":"low","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1401874","bugzilla_description":"CVE-2016-9807 gstreamer-plugins-good: Invalid memory read in flx_decode_chunks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9634","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9635","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9636","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9808","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9445","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021","RHSA-2016:2974"],"bugzilla":"1395767","bugzilla_description":"CVE-2016-9445 gstreamer-plugins-bad-free: Integer overflow when allocating render buffer in VMnc decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9445.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9446","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1397063","bugzilla_description":"CVE-2016-9446 gstreamer-plugins-bad-free: Missing initialization of allocated heap memory leads to information leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9447","severity":"moderate","public_date":"2016-11-14T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2016:2974"],"bugzilla":"1395126","bugzilla_description":"CVE-2016-9447 gstreamer-plugins-bad-free: Memory corruption flaw in NSF decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5848","severity":"low","public_date":"2016-01-30T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419583","bugzilla_description":"CVE-2017-5848 gstreamer-plugins-bad-free: Invalid memory read in gst_ps_demux_parse_psm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5848.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5845","severity":"low","public_date":"2016-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419582","bugzilla_description":"CVE-2017-5845 gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5845.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5840","severity":"low","public_date":"2016-01-18T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419588","bugzilla_description":"CVE-2017-5840 gstreamer-plugins-good: Out of bounds heap read in qtdemux_parse_samples","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5839","severity":"low","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419586","bugzilla_description":"CVE-2017-5839 gstreamer-plugins-base: Stack overflow in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5839.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5838","severity":"low","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419587","bugzilla_description":"CVE-2017-5838 gstreamer: Out-of-bounds read in gst_date_time_new_from_iso8601_string()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer1-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5838.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2014-4610","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":[],"bugzilla":"1112440","bugzilla_description":"CVE-2014-4610 ffmpeg: av_lzo1x_decode() integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4610.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer_security_api_results.json
new file mode 100644
index 0000000..b19baa0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gstreamer_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9928","severity":"moderate","public_date":"2019-04-22T00:00:00Z","advisories":[],"bugzilla":"1724904","bugzilla_description":"CVE-2019-9928 GStreamer: heap-based buffer overflow in the RTSP connection parser via crafted server response leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5844","severity":"low","public_date":"2017-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419600","bugzilla_description":"CVE-2017-5844 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5844.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5841","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419589","bugzilla_description":"CVE-2017-5841 gstreamer-plugins-good: Heap out-of-bounds read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5842","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419591","bugzilla_description":"CVE-2017-5842 gstreamer-plugins-base: Out-of-bounds heap read in html_context_handle_element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5843","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419592","bugzilla_description":"CVE-2017-5843 gstreamer-plugins-bad-free: Use after free in gst_mini_object_unref / gst_tag_list_unref / gst_mxf_demux_update_essence_tracks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5837","severity":"low","public_date":"2017-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419584","bugzilla_description":"CVE-2017-5837 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10198","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419558","bugzilla_description":"CVE-2016-10198 gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10199","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419580","bugzilla_description":"CVE-2016-10199 gstreamer-plugins-good: Out of bounds read in qtdemux_tag_add_str_full","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9813","severity":"low","public_date":"2016-11-25T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401934","bugzilla_description":"CVE-2016-9813 gstreamer-plugins-bad-free: NULL pointer dereference in mpegts parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-476","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9812","severity":"low","public_date":"2016-11-24T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401930","bugzilla_description":"CVE-2016-9812 gstreamer1-plugins-bad-free: Out-of-bounds read in gst_mpegts_section_new","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9809","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021"],"bugzilla":"1401880","bugzilla_description":"CVE-2016-9809 gstreamer-plugins-bad-free: Off-by-one read in gst_h264_parse_set_caps","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":["gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9809.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9810","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1401913","bugzilla_description":"CVE-2016-9810 gstreamer: Invalid memory read in g_type_check_instance_is_fundamentally_a","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9811","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1401918","bugzilla_description":"CVE-2016-9811 gstreamer: Out of bounds heap read in windows_icon_typefind","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9807","severity":"low","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1401874","bugzilla_description":"CVE-2016-9807 gstreamer-plugins-good: Invalid memory read in flx_decode_chunks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9634","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9635","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9636","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9808","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9445","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021","RHSA-2016:2974"],"bugzilla":"1395767","bugzilla_description":"CVE-2016-9445 gstreamer-plugins-bad-free: Integer overflow when allocating render buffer in VMnc decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9445.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9446","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1397063","bugzilla_description":"CVE-2016-9446 gstreamer-plugins-bad-free: Missing initialization of allocated heap memory leads to information leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9447","severity":"moderate","public_date":"2016-11-14T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2016:2974"],"bugzilla":"1395126","bugzilla_description":"CVE-2016-9447 gstreamer-plugins-bad-free: Memory corruption flaw in NSF decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5848","severity":"low","public_date":"2016-01-30T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419583","bugzilla_description":"CVE-2017-5848 gstreamer-plugins-bad-free: Invalid memory read in gst_ps_demux_parse_psm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5848.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5845","severity":"low","public_date":"2016-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419582","bugzilla_description":"CVE-2017-5845 gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5845.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5840","severity":"low","public_date":"2016-01-18T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419588","bugzilla_description":"CVE-2017-5840 gstreamer-plugins-good: Out of bounds heap read in qtdemux_parse_samples","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5839","severity":"low","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419586","bugzilla_description":"CVE-2017-5839 gstreamer-plugins-base: Stack overflow in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5839.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5838","severity":"low","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419587","bugzilla_description":"CVE-2017-5838 gstreamer: Out-of-bounds read in gst_date_time_new_from_iso8601_string()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer1-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5838.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2014-4610","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":[],"bugzilla":"1112440","bugzilla_description":"CVE-2014-4610 ffmpeg: av_lzo1x_decode() integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4610.json"},{"CVE":"CVE-2011-2911","severity":"important","public_date":"2011-07-15T00:00:00Z","advisories":["RHSA-2011:1264"],"bugzilla":"728371","bugzilla_description":"CVE-2011-2911 CVE-2011-2912 CVE-2011-2913 CVE-2011-2914 CVE-2011-2915 libmodplug: multiple vulnerabilities reported in <= 0.8.8.3","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer-plugins-0:0.8.5-1.EL.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2911.json"},{"CVE":"CVE-2011-2912","severity":"important","public_date":"2011-07-15T00:00:00Z","advisories":["RHSA-2011:1264"],"bugzilla":"728371","bugzilla_description":"CVE-2011-2911 CVE-2011-2912 CVE-2011-2913 CVE-2011-2914 CVE-2011-2915 libmodplug: multiple vulnerabilities reported in <= 0.8.8.3","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer-plugins-0:0.8.5-1.EL.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2912.json"},{"CVE":"CVE-2011-2913","severity":"important","public_date":"2011-07-15T00:00:00Z","advisories":["RHSA-2011:1264"],"bugzilla":"728371","bugzilla_description":"CVE-2011-2911 CVE-2011-2912 CVE-2011-2913 CVE-2011-2914 CVE-2011-2915 libmodplug: multiple vulnerabilities reported in <= 0.8.8.3","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer-plugins-0:0.8.5-1.EL.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2913.json"},{"CVE":"CVE-2011-2914","severity":"important","public_date":"2011-07-15T00:00:00Z","advisories":["RHSA-2011:1264"],"bugzilla":"728371","bugzilla_description":"CVE-2011-2911 CVE-2011-2912 CVE-2011-2913 CVE-2011-2914 CVE-2011-2915 libmodplug: multiple vulnerabilities reported in <= 0.8.8.3","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer-plugins-0:0.8.5-1.EL.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2914.json"},{"CVE":"CVE-2011-2915","severity":"important","public_date":"2011-07-15T00:00:00Z","advisories":["RHSA-2011:1264"],"bugzilla":"728371","bugzilla_description":"CVE-2011-2911 CVE-2011-2912 CVE-2011-2913 CVE-2011-2914 CVE-2011-2915 libmodplug: multiple vulnerabilities reported in <= 0.8.8.3","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer-plugins-0:0.8.5-1.EL.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2915.json"},{"CVE":"CVE-2011-1574","severity":"important","public_date":"2011-04-07T00:00:00Z","advisories":["RHSA-2011:0477"],"bugzilla":"695420","bugzilla_description":"CVE-2011-1574 libmodplug: ReadS3M stack overflow vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer-plugins-0:0.8.5-1.EL.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1574.json"},{"CVE":"CVE-2009-1932","severity":"moderate","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2009:1123"],"bugzilla":"504199","bugzilla_description":"CVE-2009-1932 gstreamer-plugins-good: PNG decoder integer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["gstreamer-plugins-good-0:0.10.9-1.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1932.json"},{"CVE":"CVE-2009-0586","severity":"moderate","public_date":"2009-03-12T00:00:00Z","advisories":["RHSA-2009:0352"],"bugzilla":"488208","bugzilla_description":"CVE-2009-0586 gstreamer-plugins-base: integer overflow in gst_vorbis_tag_add_coverart()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["gstreamer-plugins-base-0:0.10.20-3.0.1.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0586.json"},{"CVE":"CVE-2009-0397","severity":"important","public_date":"2009-01-22T00:00:00Z","advisories":["RHSA-2009:0270","RHSA-2009:0271"],"bugzilla":"481267","bugzilla_description":"CVE-2009-0397 gstreamer-plugins, gstreamer-plugins-good: heap-based buffer overflow while parsing malformed QuickTime media files via crafted Time-to-sample (stss) atom data","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["gstreamer-plugins-good-0:0.10.9-1.el5_3.1","gstreamer-plugins-0:0.8.5-1.EL.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0397.json"},{"CVE":"CVE-2009-0386","severity":"important","public_date":"2009-01-22T00:00:00Z","advisories":["RHSA-2009:0271"],"bugzilla":"483736","bugzilla_description":"CVE-2009-0386 gstreamer-plugins-good: heap-based buffer overflow while parsing malformed QuickTime media files via crafted Composition Time To Sample (aka ctts) atom data","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["gstreamer-plugins-good-0:0.10.9-1.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0386.json"},{"CVE":"CVE-2009-0387","severity":"important","public_date":"2009-01-22T00:00:00Z","advisories":["RHSA-2009:0271"],"bugzilla":"483737","bugzilla_description":"CVE-2009-0387 gstreamer-plugins-good: Array index error while parsing malformed QuickTime media files via crafted Sync Sample (aka stss) atom data","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer-plugins-good-0:0.10.9-1.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0387.json"},{"CVE":"CVE-2009-0398","severity":"important","public_date":"2009-01-22T00:00:00Z","advisories":["RHSA-2009:0269"],"bugzilla":"483740","bugzilla_description":"CVE-2009-0398 gstreamer-plugins: Array index error while parsing malformed QuickTime media files","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer-plugins-0:0.6.0-19"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0398.json"},{"CVE":"CVE-2006-4192","severity":"low","public_date":"2006-10-06T00:00:00Z","advisories":["RHSA-2011:0477"],"bugzilla":"497154","bugzilla_description":"CVE-2006-4192 libmodplug: Integer overflow when reading samples of AMF files","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/AU:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["gstreamer-plugins-0:0.8.5-1.EL.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4192.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk-update-icon-cache_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk-update-icon-cache_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk-update-icon-cache_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk-vnc2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk-vnc2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk-vnc2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2-devel-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2-devel-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2-devel-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2-immodule-xim_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2-immodule-xim_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2-immodule-xim_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2_security_api_results.json
new file mode 100644
index 0000000..d11d863
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7447","severity":"low","public_date":"2013-06-27T00:00:00Z","advisories":[],"bugzilla":"1306681","bugzilla_description":"CVE-2013-7447 gtk2, gtk3: Integer overflow in image handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7447.json"},{"CVE":"CVE-2012-2370","severity":"low","public_date":"2012-03-25T00:00:00Z","advisories":["RHSA-2013:0135"],"bugzilla":"822468","bugzilla_description":"CVE-2012-2370 gdk-pixbuf: DoS (GLib error and application abort) due to an integer overflow in the XBM image file format loader","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["gtk2-0:2.10.4-29.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2370.json"},{"CVE":"CVE-2011-2896","severity":"moderate","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181","RHSA-2011:1635","RHSA-2012:0302"],"bugzilla":"727800","bugzilla_description":"CVE-2011-2896 David Koblas' GIF decoder LZW decoder buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gimp-2:2.6.9-4.el6_3.3","cups-1:1.3.7-30.el5","gimp-2:2.2.13-2.0.7.el5_8.5","cups-1:1.4.2-44.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2896.json"},{"CVE":"CVE-2011-2485","severity":"low","public_date":"2011-06-23T00:00:00Z","advisories":[],"bugzilla":"715337","bugzilla_description":"CVE-2011-2485 gdk-pixbuf: incorrect error detection in the GIF image loader","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2485.json"},{"CVE":"CVE-2007-0010","severity":"moderate","public_date":"2007-01-10T00:00:00Z","advisories":["RHSA-2007:0019"],"bugzilla":"1618260","bugzilla_description":"CVE-2007-0010 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gtk2-0:2.4.13-22"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0010.json"},{"CVE":"CVE-2005-2975","severity":"important","public_date":"2005-11-15T14:00:00Z","advisories":["RHSA-2005:810","RHSA-2005:811"],"bugzilla":"1617771","bugzilla_description":"CVE-2005-2975 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-13.el3.3","gdk-pixbuf-1:0.22.0-17.el4.3","gtk2-0:2.2.4-19","gtk2-0:2.4.13-18"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2975.json"},{"CVE":"CVE-2005-3186","severity":"important","public_date":"2005-11-03T00:00:00Z","advisories":["RHSA-2005:810","RHSA-2005:811"],"bugzilla":"1617795","bugzilla_description":"CVE-2005-3186 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-13.el3.3","gdk-pixbuf-1:0.22.0-17.el4.3","gtk2-0:2.2.4-19","gtk2-0:2.4.13-18"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3186.json"},{"CVE":"CVE-2005-0891","severity":"important","public_date":"2005-03-26T00:00:00Z","advisories":["RHSA-2005:344","RHSA-2005:343"],"bugzilla":"1617587","bugzilla_description":"CVE-2005-0891 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gtk2-0:2.4.13-14","gtk2-0:2.2.4-15","gdk-pixbuf-1:0.22.0-16.el4","gdk-pixbuf-1:0.22.0-12.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0891.json"},{"CVE":"CVE-2004-0782","severity":"important","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617283","bugzilla_description":"CVE-2004-0782 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0782.json"},{"CVE":"CVE-2004-0783","severity":"important","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617284","bugzilla_description":"CVE-2004-0783 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0783.json"},{"CVE":"CVE-2004-0788","severity":"moderate","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617290","bugzilla_description":"CVE-2004-0788 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0788.json"},{"CVE":"CVE-2004-0753","severity":"moderate","public_date":"2004-08-20T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617266","bugzilla_description":"CVE-2004-0753 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0753.json"},{"CVE":"CVE-2011-2897","severity":"moderate","public_date":"2001-06-01T00:00:00Z","advisories":[],"bugzilla":"727081","bugzilla_description":"CVE-2011-2897 gdk-pixbuf: GIF loader buffer overflow when initializing decompression tables","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2897.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk3-immodule-xim_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk3-immodule-xim_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk3-immodule-xim_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk3_security_api_results.json
new file mode 100644
index 0000000..6da9745
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtk3_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9862","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879532","bugzilla_description":"CVE-2020-9862 webkitgtk: Command injection in web inspector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9862.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-9893","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879535","bugzilla_description":"CVE-2020-9893 webkitgtk: Use-after-free may lead to application termination or arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9893.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9894","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879536","bugzilla_description":"CVE-2020-9894 webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9894.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-9895","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879538","bugzilla_description":"CVE-2020-9895 webkitgtk: Use-after-free may lead to application termination or arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9895.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-9915","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879540","bugzilla_description":"CVE-2020-9915 webkitgtk: Access issue in content security policy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9915.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2020-9925","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879541","bugzilla_description":"CVE-2020-9925 webkitgtk: A logic issue may lead to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841->CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9925.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-9802","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879545","bugzilla_description":"CVE-2020-9802 webkitgtk: Logic issue may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9802.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9803","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879557","bugzilla_description":"CVE-2020-9803 webkitgtk: Memory corruption may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9805","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879559","bugzilla_description":"CVE-2020-9805 webkitgtk: Logic issue may lead to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841->CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9805.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-9806","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879563","bugzilla_description":"CVE-2020-9806 webkitgtk: Memory corruption may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9806.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9807","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879564","bugzilla_description":"CVE-2020-9807 webkitgtk: Memory corruption may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9807.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9843","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879566","bugzilla_description":"CVE-2020-9843 webkitgtk: Input validation issue may lead to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9843.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-9850","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879568","bugzilla_description":"CVE-2020-9850 webkitgtk: Logic issue may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9850.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-13753","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879570","bugzilla_description":"CVE-2020-13753 webkitgtk: Improper access management to CLONE_NEWUSER and the TIOCSTI ioctl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284->CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13753.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"10.0"},{"CVE":"CVE-2020-3885","severity":"low","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876462","bugzilla_description":"CVE-2020-3885 webkitgtk: Incorrect processing of file URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3885.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-3894","severity":"low","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876463","bugzilla_description":"CVE-2020-3894 webkitgtk: Race condition allows reading of restricted memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3894.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-3895","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876465","bugzilla_description":"CVE-2020-3895 webkitgtk: Memory corruption triggered by a malicious web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3895.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3897","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876468","bugzilla_description":"CVE-2020-3897 webkitgtk: Type confusion leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3897.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3899","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876470","bugzilla_description":"CVE-2020-3899 webkitgtk: Memory consumption issue leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3899.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3900","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876472","bugzilla_description":"CVE-2020-3900 webkitgtk: Memory corruption  triggered by a malicious web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3900.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3901","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876473","bugzilla_description":"CVE-2020-3901 webkitgtk: Type confusion leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3901.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3902","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876476","bugzilla_description":"CVE-2020-3902 webkitgtk: Input validation issue leading to cross-site script attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3902.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11793","severity":"moderate","public_date":"2020-04-16T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1829369","bugzilla_description":"CVE-2020-11793 webkitgtk: use-after-free via crafted web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11793.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10018","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1811721","bugzilla_description":"CVE-2020-10018 webkitgtk: Use-after-free issue in accessibility/AXObjectCache.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10018.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-3862","severity":"low","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876516","bugzilla_description":"CVE-2020-3862 webkitgtk: Denial of service via incorrect memory handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3862.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-3864","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876518","bugzilla_description":"CVE-2020-3864 webkitgtk: Non-unique security origin for DOM object contexts","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3864.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-3865","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876521","bugzilla_description":"CVE-2020-3865 webkitgtk: Incorrect security check for a top-level DOM object context","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3865.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3867","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876522","bugzilla_description":"CVE-2020-3867 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3867.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-3868","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876523","bugzilla_description":"CVE-2020-3868 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3868.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8846","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1816678","bugzilla_description":"CVE-2019-8846 webkitgtk: Use after free issue may lead to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8846.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-8835","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1816684","bugzilla_description":"CVE-2019-8835 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8835.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-8844","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1816686","bugzilla_description":"CVE-2019-8844 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8844.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-4761","severity":"moderate","public_date":"2020-01-22T00:00:00Z","advisories":[],"bugzilla":"1800137","bugzilla_description":"CVE-2016-4761 webkitgtk: use-after-free leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4761.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8710","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876536","bugzilla_description":"CVE-2019-8710 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8710.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8743","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876537","bugzilla_description":"CVE-2019-8743 webkitgtk: Multiple memory corruption  issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8743.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8764","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876540","bugzilla_description":"CVE-2019-8764 webkitgtk: Incorrect state  management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8764.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8765","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876542","bugzilla_description":"CVE-2019-8765 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8765.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8766","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876543","bugzilla_description":"CVE-2019-8766 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8766.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8782","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876545","bugzilla_description":"CVE-2019-8782 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8783","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876548","bugzilla_description":"CVE-2019-8783 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8783.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8808","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876549","bugzilla_description":"CVE-2019-8808 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8808.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8811","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876550","bugzilla_description":"CVE-2019-8811 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8811.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8812","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876552","bugzilla_description":"CVE-2019-8812 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8812.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8813","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876553","bugzilla_description":"CVE-2019-8813 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8813.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8814","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876554","bugzilla_description":"CVE-2019-8814 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8814.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8815","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876555","bugzilla_description":"CVE-2019-8815 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8815.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8816","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876556","bugzilla_description":"CVE-2019-8816 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8816.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8819","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876590","bugzilla_description":"CVE-2019-8819 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8819.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8820","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876591","bugzilla_description":"CVE-2019-8820 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8820.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8821","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876592","bugzilla_description":"CVE-2019-8821 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8821.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8822","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876593","bugzilla_description":"CVE-2019-8822 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8822.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8823","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876594","bugzilla_description":"CVE-2019-8823 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8823.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8625","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876607","bugzilla_description":"CVE-2019-8625 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8625.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8674","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876608","bugzilla_description":"CVE-2019-8674 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8674.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8707","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876609","bugzilla_description":"CVE-2019-8707 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8707.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8719","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876610","bugzilla_description":"CVE-2019-8719 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8719.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8720","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876611","bugzilla_description":"CVE-2019-8720 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8726","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876612","bugzilla_description":"CVE-2019-8726 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8726.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8733","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876613","bugzilla_description":"CVE-2019-8733 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8733.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8735","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876614","bugzilla_description":"CVE-2019-8735 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8735.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8763","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876615","bugzilla_description":"CVE-2019-8763 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8763.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8768","severity":"low","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876616","bugzilla_description":"CVE-2019-8768 webkitgtk: Browsing history could not be deleted","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8768.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8769","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876617","bugzilla_description":"CVE-2019-8769 webkitgtk: Websites could reveal browsing history","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8769.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-8771","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876619","bugzilla_description":"CVE-2019-8771 webkitgtk: Violation of iframe sandboxing policy","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8771.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-8644","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876626","bugzilla_description":"CVE-2019-8644 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8644.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8649","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876628","bugzilla_description":"CVE-2019-8649 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8649.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8658","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876629","bugzilla_description":"CVE-2019-8658 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8658.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8666","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876630","bugzilla_description":"CVE-2019-8666 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8666.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8669","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876631","bugzilla_description":"CVE-2019-8669 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8669.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8671","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876632","bugzilla_description":"CVE-2019-8671 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8671.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8672","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876634","bugzilla_description":"CVE-2019-8672 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8673","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876643","bugzilla_description":"CVE-2019-8673 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8676","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876644","bugzilla_description":"CVE-2019-8676 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8676.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8677","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876645","bugzilla_description":"CVE-2019-8677 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8677.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8678","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876646","bugzilla_description":"CVE-2019-8678 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8678.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8679","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876647","bugzilla_description":"CVE-2019-8679 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8679.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8680","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876648","bugzilla_description":"CVE-2019-8680 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8680.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8681","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876650","bugzilla_description":"CVE-2019-8681 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8681.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8683","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876651","bugzilla_description":"CVE-2019-8683 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8683.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8684","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876652","bugzilla_description":"CVE-2019-8684 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8684.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8686","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876653","bugzilla_description":"CVE-2019-8686 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8686.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8687","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876655","bugzilla_description":"CVE-2019-8687 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8687.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8688","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876656","bugzilla_description":"CVE-2019-8688 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8688.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8689","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876657","bugzilla_description":"CVE-2019-8689 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8689.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8690","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876664","bugzilla_description":"CVE-2019-8690 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8690.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-6237","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876880","bugzilla_description":"CVE-2019-6237 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6237.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8571","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876881","bugzilla_description":"CVE-2019-8571 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8583","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876882","bugzilla_description":"CVE-2019-8583 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8584","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876883","bugzilla_description":"CVE-2019-8584 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8584.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8586","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876884","bugzilla_description":"CVE-2019-8586 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8587","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876887","bugzilla_description":"CVE-2019-8587 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8587.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8594","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876891","bugzilla_description":"CVE-2019-8594 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8594.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8595","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876892","bugzilla_description":"CVE-2019-8595 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8595.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8596","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876893","bugzilla_description":"CVE-2019-8596 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8597","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876894","bugzilla_description":"CVE-2019-8597 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8601","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876895","bugzilla_description":"CVE-2019-8601 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8607","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876897","bugzilla_description":"CVE-2019-8607 webkitgtk: Out-of-bounds read leading to memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8607.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-8608","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876898","bugzilla_description":"CVE-2019-8608 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8609","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876899","bugzilla_description":"CVE-2019-8609 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8609.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8610","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876900","bugzilla_description":"CVE-2019-8610 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8610.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8615","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877045","bugzilla_description":"CVE-2019-8615 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8615.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8611","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877046","bugzilla_description":"CVE-2019-8611 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8611.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8619","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877047","bugzilla_description":"CVE-2019-8619 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8622","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877048","bugzilla_description":"CVE-2019-8622 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8622.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8623","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877049","bugzilla_description":"CVE-2019-8623 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8623.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11070","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1709289","bugzilla_description":"CVE-2019-11070 webkitgtk: HTTP proxy setting deanonymization information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11070.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-7285","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1718725","bugzilla_description":"CVE-2019-7285 webkitgtk: crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-7292","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1719131","bugzilla_description":"CVE-2019-7292 webkitgtk: arbitrary code execution via malicious web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7292.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8503","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1719147","bugzilla_description":"CVE-2019-8503 webkitgtk: logic issue leads to code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8503.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8506","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719199","bugzilla_description":"CVE-2019-8506 webkitgtk: malicous web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8515","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1719204","bugzilla_description":"CVE-2019-8515 webkitgtk: malicious crafted web content leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-8518","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719206","bugzilla_description":"CVE-2019-8518 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8523","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719208","bugzilla_description":"CVE-2019-8523 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8524","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719209","bugzilla_description":"CVE-2019-8524 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8524.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8535","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719210","bugzilla_description":"CVE-2019-8535 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8535.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8536","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719213","bugzilla_description":"CVE-2019-8536 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8536.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8544","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719224","bugzilla_description":"CVE-2019-8544 webkitgtk: malicious crafted web content leads to arbitrary we content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8558","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719231","bugzilla_description":"CVE-2019-8558 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8558.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8559","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719235","bugzilla_description":"CVE-2019-8559 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8559.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8563","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719237","bugzilla_description":"CVE-2019-8563 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8551","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1719238","bugzilla_description":"CVE-2019-8551 webkitgtk: malicious web content leads to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8551.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-6251","severity":"moderate","public_date":"2018-09-11T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1667409","bugzilla_description":"CVE-2019-6251 webkitgtk: processing maliciously crafted web content lead to URI spoofing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-11713","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588739","bugzilla_description":"CVE-2018-11713 webkitgtk: WebSockets don't use system proxy settings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11713.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-11712","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588742","bugzilla_description":"CVE-2018-11712 webkitgtk: Improper TLS certificate verification for WebSocket connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11712.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-4204","severity":"moderate","public_date":"2018-05-07T00:00:00Z","advisories":[],"bugzilla":"1577374","bugzilla_description":"CVE-2018-4204 webkitgtk: memory corruption processing maliciously crafted web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-4200","severity":"moderate","public_date":"2018-05-07T00:00:00Z","advisories":[],"bugzilla":"1577385","bugzilla_description":"CVE-2018-4200 webkitgtk: memory corruption processing maliciously crafted web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4200.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-4121","severity":"moderate","public_date":"2018-05-07T00:00:00Z","advisories":[],"bugzilla":"1577387","bugzilla_description":"CVE-2018-4121 webkitgtk: memory corruption processing maliciously crafted web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4121.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2017-13856","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1527747","bugzilla_description":"CVE-2017-13856 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13856.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-13866","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1527756","bugzilla_description":"CVE-2017-13866 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13866.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-13870","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1527757","bugzilla_description":"CVE-2017-13870 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13870.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-7156","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1527759","bugzilla_description":"CVE-2017-7156 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7156.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-7157","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1527760","bugzilla_description":"CVE-2017-7157 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7157.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2015-2330","severity":"moderate","public_date":"2015-03-17T00:00:00Z","advisories":[],"bugzilla":"1204653","bugzilla_description":"CVE-2015-2330 webkitgtk: TLS certificate late verification","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2330.json"},{"CVE":"CVE-2015-1209","severity":"important","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:0163"],"bugzilla":"1190123","bugzilla_description":"CVE-2015-1209 chromium-browser: use-after-free in DOM","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["chromium-browser-0:40.0.2214.111-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1209.json"},{"CVE":"CVE-2015-1212","severity":"important","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:0163"],"bugzilla":"1190158","bugzilla_description":"CVE-2015-1212 chromium-browser: various security fixes in Chrome 40.0.2214.111","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:40.0.2214.111-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1212.json"},{"CVE":"CVE-2013-2871","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186231","bugzilla_description":"CVE-2013-2871 webkitgtk: use-after-free vulnerability in the handling of input (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2871.json"},{"CVE":"CVE-2013-2875","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186232","bugzilla_description":"CVE-2013-2875 webkitgtk: out-of-bounds read in the SVG implementation (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2875.json"},{"CVE":"CVE-2013-2927","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186233","bugzilla_description":"CVE-2013-2927 webkitgtk: use-after-free in the HTMLFormElement::prepareForSubmission() (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2927.json"},{"CVE":"CVE-2014-1292","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186234","bugzilla_description":"CVE-2014-1292 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1292.json"},{"CVE":"CVE-2014-1297","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186236","bugzilla_description":"CVE-2014-1297 webkitgtk: improper WebProcess IPC messages validation (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1297.json"},{"CVE":"CVE-2014-1298","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186237","bugzilla_description":"CVE-2014-1298 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1298.json"},{"CVE":"CVE-2014-1299","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186238","bugzilla_description":"CVE-2014-1299 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1299.json"},{"CVE":"CVE-2014-1300","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186239","bugzilla_description":"CVE-2014-1300 webkitgtk: arbitrary code execution with root privileges (WSA-2015-0001)","cvss_score":7.3,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1300.json"},{"CVE":"CVE-2014-1303","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186241","bugzilla_description":"CVE-2014-1303 webkitgtk: heap-based buffer overflow (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1303.json"},{"CVE":"CVE-2014-1304","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186242","bugzilla_description":"CVE-2014-1304 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1304.json"},{"CVE":"CVE-2014-1305","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186243","bugzilla_description":"CVE-2014-1305 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1305.json"},{"CVE":"CVE-2014-1307","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186245","bugzilla_description":"CVE-2014-1307 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1307.json"},{"CVE":"CVE-2014-1308","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186246","bugzilla_description":"CVE-2014-1308 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1308.json"},{"CVE":"CVE-2014-1309","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186247","bugzilla_description":"CVE-2014-1309 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1309.json"},{"CVE":"CVE-2014-1311","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186248","bugzilla_description":"CVE-2014-1311 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1311.json"},{"CVE":"CVE-2014-1313","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186250","bugzilla_description":"CVE-2014-1313 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1313.json"},{"CVE":"CVE-2014-1323","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186251","bugzilla_description":"CVE-2014-1323 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1323.json"},{"CVE":"CVE-2014-1326","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186252","bugzilla_description":"CVE-2014-1326 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1326.json"},{"CVE":"CVE-2014-1329","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186253","bugzilla_description":"CVE-2014-1329 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1329.json"},{"CVE":"CVE-2014-1330","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186254","bugzilla_description":"CVE-2014-1330 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1330.json"},{"CVE":"CVE-2014-1331","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186255","bugzilla_description":"CVE-2014-1331 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1331.json"},{"CVE":"CVE-2014-1333","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186258","bugzilla_description":"CVE-2014-1333 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1333.json"},{"CVE":"CVE-2014-1334","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186259","bugzilla_description":"CVE-2014-1334 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1334.json"},{"CVE":"CVE-2014-1335","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186262","bugzilla_description":"CVE-2014-1335 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1335.json"},{"CVE":"CVE-2014-1336","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186263","bugzilla_description":"CVE-2014-1336 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1336.json"},{"CVE":"CVE-2014-1337","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186264","bugzilla_description":"CVE-2014-1337 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1337.json"},{"CVE":"CVE-2014-1338","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186265","bugzilla_description":"CVE-2014-1338 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1338.json"},{"CVE":"CVE-2014-1339","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186266","bugzilla_description":"CVE-2014-1339 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1339.json"},{"CVE":"CVE-2014-1341","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186267","bugzilla_description":"CVE-2014-1341 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1341.json"},{"CVE":"CVE-2014-1342","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186268","bugzilla_description":"CVE-2014-1342 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1342.json"},{"CVE":"CVE-2014-1343","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186269","bugzilla_description":"CVE-2014-1343 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1343.json"},{"CVE":"CVE-2014-1346","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186270","bugzilla_description":"CVE-2014-1346 webkitgtk: improper Unicode encoding interpretation (WSA-2015-0001)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1346.json"},{"CVE":"CVE-2014-1713","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186271","bugzilla_description":"CVE-2014-1713 webkitgtk: use-after-free in the AttributeSetter function (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1713.json"},{"CVE":"CVE-2014-1731","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186273","bugzilla_description":"CVE-2014-1731 webkitgtk: improper renderer state check in core/html/HTMLSelectElement.cpp (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1731.json"},{"CVE":"CVE-2014-7907","severity":"important","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2014:1894"],"bugzilla":"1165656","bugzilla_description":"CVE-2014-7907 chromium-browser: Use-after-free in blink","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["chromium-browser-0:39.0.2171.65-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7907.json"},{"CVE":"CVE-2014-7908","severity":"important","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2014:1894"],"bugzilla":"1165657","bugzilla_description":"CVE-2014-7908 chromium-browser: Integer overflow in media","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["chromium-browser-0:39.0.2171.65-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7908.json"},{"CVE":"CVE-2014-7910","severity":"moderate","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2014:1894"],"bugzilla":"1165662","bugzilla_description":"CVE-2014-7910 chromium-browser: Unspecified security issues","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:39.0.2171.65-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7910.json"},{"CVE":"CVE-2014-1344","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181090","bugzilla_description":"CVE-2014-1344 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1344.json"},{"CVE":"CVE-2014-1384","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181095","bugzilla_description":"CVE-2014-1384 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1384.json"},{"CVE":"CVE-2014-1385","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181096","bugzilla_description":"CVE-2014-1385 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1385.json"},{"CVE":"CVE-2014-1386","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181098","bugzilla_description":"CVE-2014-1386 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1386.json"},{"CVE":"CVE-2014-1387","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181099","bugzilla_description":"CVE-2014-1387 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1387.json"},{"CVE":"CVE-2014-1388","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181101","bugzilla_description":"CVE-2014-1388 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1388.json"},{"CVE":"CVE-2014-1389","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181102","bugzilla_description":"CVE-2014-1389 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1389.json"},{"CVE":"CVE-2014-1390","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181103","bugzilla_description":"CVE-2014-1390 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1390.json"},{"CVE":"CVE-2014-3194","severity":"critical","public_date":"2014-10-07T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1151383","bugzilla_description":"CVE-2014-3194 chromium: use-after-free issue in Web Workers fixed in Chrome 38.0.2125.101","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3194.json"},{"CVE":"CVE-2014-3192","severity":"critical","public_date":"2014-10-07T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1151395","bugzilla_description":"CVE-2014-3192 chromium: use-after-free in DOM, fixed in Chrome 38.0.2125.101","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3192.json"},{"CVE":"CVE-2014-3197","severity":"moderate","public_date":"2014-10-07T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1151422","bugzilla_description":"CVE-2014-3197 chromium: information leak in XSS Auditor fixed in Chrome 38.0.2125.101","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3197.json"},{"CVE":"CVE-2014-3200","severity":"critical","public_date":"2014-10-07T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1151425","bugzilla_description":"CVE-2014-3200 chromium: multiple unspecified issues fixed in Chrome 38.0.2125.101","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3200.json"},{"CVE":"CVE-2013-7447","severity":"low","public_date":"2013-06-27T00:00:00Z","advisories":[],"bugzilla":"1306681","bugzilla_description":"CVE-2013-7447 gtk2, gtk3: Integer overflow in image handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7447.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkhtml3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkhtml3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkhtml3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkmm24_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkmm24_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkmm24_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkmm30_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkmm30_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkmm30_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtksourceview3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtksourceview3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtksourceview3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkspell3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkspell3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkspell3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkspell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkspell_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gtkspell_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/guava_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/guava_security_api_results.json
new file mode 100644
index 0000000..5081f75
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/guava_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10237","severity":"moderate","public_date":"2018-04-25T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:3149","RHSA-2020:2562","RHSA-2018:2428","RHSA-2018:2425","RHSA-2018:2743","RHSA-2018:2423","RHSA-2019:2858","RHSA-2018:2643","RHSA-2018:2742","RHSA-2018:2424","RHSA-2018:2741","RHSA-2018:2740","RHSA-2018:2598"],"bugzilla":"1573391","bugzilla_description":"CVE-2018-10237 guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rhvm-appliance-0:4.2-20180828.0.el7","opendaylight-0:8.3.0-3.el7ost","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10237.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gubbi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gubbi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gubbi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gucharmap-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gucharmap-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gucharmap-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gucharmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gucharmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gucharmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp-av_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp-av_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp-av_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp-dlna_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp-dlna_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp-dlna_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp-igd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp-igd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp-igd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp_security_api_results.json
new file mode 100644
index 0000000..ce0bc36
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gupnp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12695","severity":"moderate","public_date":"2020-06-08T00:00:00Z","advisories":[],"bugzilla":"1846006","bugzilla_description":"CVE-2020-12695 hostapd: UPnP SUBSCRIBE misbehavior in WPS AP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-400|CWE-918)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12695.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gutenprint-cups_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gutenprint-cups_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gutenprint-cups_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gutenprint-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gutenprint-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gutenprint-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gutenprint_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gutenprint_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gutenprint_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-afc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-afc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-afc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-afp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-afp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-afp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-archive_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-archive_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-archive_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-fuse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-fuse_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-fuse_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-goa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-goa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-goa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-gphoto2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-gphoto2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-gphoto2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-mtp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-mtp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-mtp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-smb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-smb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs-smb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs_security_api_results.json
new file mode 100644
index 0000000..66bb870
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvfs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-12795","severity":"low","public_date":"2019-06-05T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1726505","bugzilla_description":"CVE-2019-12795 gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["gvfs-0:1.36.2-6.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12795.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-12447","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728562","bugzilla_description":"CVE-2019-12447 gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-12448","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728564","bugzilla_description":"CVE-2019-12448 gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-364","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12448.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-12449","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728567","bugzilla_description":"CVE-2019-12449 gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12449.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-3827","severity":"moderate","public_date":"2018-12-27T00:00:00Z","advisories":["RHSA-2019:2145","RHSA-2019:1517"],"bugzilla":"1665578","bugzilla_description":"CVE-2019-3827 gvfs: Incorrect authorization in admin backend allows privileged users to read and modify arbitrary files without prompting for password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["gvfs-0:1.36.2-3.el7","gvfs-0:1.36.2-2.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3827.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvnc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvnc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gvnc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gwenview-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gwenview-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gwenview-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gwenview_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gwenview_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gwenview_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gzip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gzip_security_api_results.json
new file mode 100644
index 0000000..613514a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/gzip_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-2895","severity":"important","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2011:1154","RHSA-2011:1155","RHSA-2011:1161","RHSA-2011:1834"],"bugzilla":"727624","bugzilla_description":"CVE-2011-2895 BSD compress LZW decoder buffer overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libXfont-0:1.2.2-1.0.3.el5_6","libXfont-0:1.4.1-2.el6_1","freetype-0:2.1.9-19.el4","xorg-x11-0:6.8.2-1.EL.69","libXfont-0:1.2.2-1.0.4.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2895.json"},{"CVE":"CVE-2010-0001","severity":"moderate","public_date":"2010-01-20T00:00:00Z","advisories":["RHSA-2010:0061"],"bugzilla":"554418","bugzilla_description":"CVE-2010-0001 gzip: (64 bit) Integer underflow by decompressing LZW format files","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["gzip-0:1.3.3-15.rhel3","gzip-0:1.3.5-11.el5_4.1","gzip-0:1.3.3-18.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0001.json"},{"CVE":"CVE-2006-4335","severity":"low","public_date":"2006-12-02T00:00:00Z","advisories":["RHSA-2006:0667"],"bugzilla":"220595","bugzilla_description":"CVE-2006-4335 CVE-2006-4336 CVE-2006-4337 multiple vulnerabilities in lha","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-16.rhel4","gzip-0:1.3.3-13.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4335.json"},{"CVE":"CVE-2006-4336","severity":"low","public_date":"2006-12-02T00:00:00Z","advisories":["RHSA-2006:0667"],"bugzilla":"220595","bugzilla_description":"CVE-2006-4335 CVE-2006-4336 CVE-2006-4337 multiple vulnerabilities in lha","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-16.rhel4","gzip-0:1.3.3-13.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4336.json"},{"CVE":"CVE-2006-4337","severity":"low","public_date":"2006-12-02T00:00:00Z","advisories":["RHSA-2006:0667"],"bugzilla":"220595","bugzilla_description":"CVE-2006-4335 CVE-2006-4336 CVE-2006-4337 multiple vulnerabilities in lha","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-16.rhel4","gzip-0:1.3.3-13.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4337.json"},{"CVE":"CVE-2006-4334","severity":"low","public_date":"2006-09-19T00:00:00Z","advisories":["RHSA-2006:0667"],"bugzilla":"1618181","bugzilla_description":"CVE-2006-4334 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-16.rhel4","gzip-0:1.3.3-13.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4334.json"},{"CVE":"CVE-2006-4338","severity":"low","public_date":"2006-09-19T00:00:00Z","advisories":["RHSA-2006:0667"],"bugzilla":"1618182","bugzilla_description":"CVE-2006-4338 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-16.rhel4","gzip-0:1.3.3-13.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4338.json"},{"CVE":"CVE-2005-0758","severity":"low","public_date":"2005-04-22T00:00:00Z","advisories":["RHSA-2005:357","RHSA-2005:474"],"bugzilla":"1617573","bugzilla_description":"CVE-2005-0758 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-12.rhel3","gzip-0:1.3.3-15.rhel4","bzip2-0:1.0.2-11.EL3.4","bzip2-0:1.0.2-13.EL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0758.json"},{"CVE":"CVE-2005-1228","severity":"low","public_date":"2005-04-18T00:00:00Z","advisories":["RHSA-2005:357"],"bugzilla":"1617616","bugzilla_description":"CVE-2005-1228 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-12.rhel3","gzip-0:1.3.3-15.rhel4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1228.json"},{"CVE":"CVE-2005-0988","severity":"low","public_date":"2005-04-04T00:00:00Z","advisories":["RHSA-2005:357"],"bugzilla":"1617595","bugzilla_description":"CVE-2005-0988 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-12.rhel3","gzip-0:1.3.3-15.rhel4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0988.json"},{"CVE":"CVE-2003-0367","severity":"moderate","public_date":"2003-07-02T00:00:00Z","advisories":[],"bugzilla":"1850889","bugzilla_description":"CVE-2003-0367 gzip: symlink attack on temporary files leads to arbitrary file overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-20|CWE-377)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0367.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.2"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hamcrest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hamcrest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hamcrest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/haproxy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/haproxy_security_api_results.json
new file mode 100644
index 0000000..8cbcdc4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/haproxy_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-11100","severity":"critical","public_date":"2020-04-02T13:00:00Z","advisories":["RHSA-2020:1288","RHSA-2020:1287","RHSA-2020:1289","RHSA-2020:1936","RHSA-2020:1290"],"bugzilla":"1819111","bugzilla_description":"CVE-2020-11100 haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-787","affected_packages":["haproxy-0:1.8.23-3.el7","rh-haproxy18-haproxy-0:1.8.17-1.el7.1","haproxy-0:2.0.13-3.el8","haproxy-0:1.8.15-5.el8_0.1","haproxy-0:1.8.15-6.el8_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11100.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-19330","severity":"moderate","public_date":"2019-11-25T00:00:00Z","advisories":["RHSA-2020:1287","RHSA-2020:2265","RHSA-2020:1936","RHSA-2020:1725"],"bugzilla":"1777584","bugzilla_description":"CVE-2019-19330 haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["haproxy-0:1.8.23-3.el7","haproxy-0:1.8.23-3.el8","haproxy-0:2.0.13-3.el8","rh-haproxy18-haproxy-0:1.8.24-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19330.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-18277","severity":"moderate","public_date":"2019-09-13T00:00:00Z","advisories":["RHSA-2020:1287","RHSA-2020:2265","RHSA-2020:1936","RHSA-2020:1725"],"bugzilla":"1759697","bugzilla_description":"CVE-2019-18277 haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["haproxy-0:1.8.23-3.el7","haproxy-0:1.8.23-3.el8","haproxy-0:2.0.13-3.el8","rh-haproxy18-haproxy-0:1.8.24-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18277.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-14241","severity":"important","public_date":"2019-07-22T00:00:00Z","advisories":[],"bugzilla":"1733583","bugzilla_description":"CVE-2019-14241 haproxy: DoS via vectors realted to htx_manage_client_side_cookies in proto_htx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14241.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11323","severity":"moderate","public_date":"2019-04-14T00:00:00Z","advisories":[],"bugzilla":"1709229","bugzilla_description":"CVE-2019-11323 haproxy: weak HMAC keys used to TLS session resumption after reload with rotated keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-20615","severity":"important","public_date":"2019-01-08T00:00:00Z","advisories":["RHSA-2019:0275","RHSA-2019:0547","RHSA-2019:0548","RHBA-2019:0326"],"bugzilla":"1663060","bugzilla_description":"CVE-2018-20615 haproxy: Mishandling of priority flag in short HEADERS frame by HTTP/2 decoder allows for crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["haproxy-0:1.8.17-3.el7","rh-haproxy18-haproxy-0:1.8.4-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20102","severity":"moderate","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2019:0547","RHSA-2019:1436","RHBA-2019:0326"],"bugzilla":"1658874","bugzilla_description":"CVE-2018-20102 haproxy: Out-of-bounds read in dns.c:dns_validate_dns_response() allows for memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["haproxy-0:1.8.17-3.el7","rh-haproxy18-haproxy-0:1.8.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-20103","severity":"important","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2019:1436","RHBA-2019:0326"],"bugzilla":"1658876","bugzilla_description":"CVE-2018-20103 haproxy: Infinite recursion via crafted packet allows stack exhaustion and denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["haproxy-0:1.8.17-3.el7","rh-haproxy18-haproxy-0:1.8.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20103.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14645","severity":"important","public_date":"2018-09-20T12:00:00Z","advisories":["RHSA-2018:2882","RHSA-2018:2709","RHBA-2019:0028"],"bugzilla":"1630048","bugzilla_description":"CVE-2018-14645 haproxy: Out-of-bounds read in HPACK decoder","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-haproxy18-haproxy-0:1.8.4-3.el7","haproxy-0:1.8.14-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-11469","severity":"moderate","public_date":"2018-05-25T00:00:00Z","advisories":["RHSA-2019:1436"],"bugzilla":"1582635","bugzilla_description":"CVE-2018-11469 haproxy: Information disclosure in check_request_for_cacheability function in proto_http.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-haproxy18-haproxy-0:1.8.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11469.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-10184","severity":"important","public_date":"2018-04-19T00:00:00Z","advisories":["RHSA-2018:1372"],"bugzilla":"1569297","bugzilla_description":"CVE-2018-10184 haproxy: Heap buffer overflow in mux_h2.c:h2_process_demux() can allow attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-haproxy18-haproxy-0:1.8.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10184.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2016-5360","severity":"moderate","public_date":"2016-06-09T00:00:00Z","advisories":[],"bugzilla":"1346181","bugzilla_description":"CVE-2016-5360 haproxy: denial of service via reqdeny","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5360.json"},{"CVE":"CVE-2016-3711","severity":"low","public_date":"2016-03-17T00:00:00Z","advisories":["RHSA-2016:1064"],"bugzilla":"1322718","bugzilla_description":"CVE-2016-3711 haproxy: Setting cookie containing internal IP address of a pod","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3711.json"},{"CVE":"CVE-2015-3281","severity":"important","public_date":"2015-07-07T00:00:00Z","advisories":["RHSA-2015:1741","RHSA-2015:2666"],"bugzilla":"1239072","bugzilla_description":"CVE-2015-3281 haproxy: information leak in buffer_slow_realign()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-119","affected_packages":["haproxy-0:1.5.4-4.el7_1.1","haproxy-0:1.5.4-2.el6_7.1","haproxy15side-0:1.5.4-2.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3281.json"},{"CVE":"CVE-2013-0163","severity":"low","public_date":"2014-09-05T00:00:00Z","advisories":[],"bugzilla":"892909","bugzilla_description":"CVE-2013-0163 OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0163.json"},{"CVE":"CVE-2014-6269","severity":"moderate","public_date":"2014-08-05T00:00:00Z","advisories":["RHSA-2014:1292"],"bugzilla":"1136552","bugzilla_description":"CVE-2014-6269 haproxy: remote client denial of service vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["haproxy-0:1.5.2-3.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6269.json"},{"CVE":"CVE-2013-2175","severity":"moderate","public_date":"2013-06-17T00:00:00Z","advisories":["RHSA-2013:1120","RHSA-2013:1204"],"bugzilla":"974259","bugzilla_description":"CVE-2013-2175 haproxy: http_get_hdr()/get_ip_from_hdr2() MAX_HDR_HISTORY handling denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["haproxy-0:1.4.22-5.el6_4","haproxy-0:1.4.22-6.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2175.json"},{"CVE":"CVE-2013-1912","severity":"moderate","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0729","RHSA-2013:0868"],"bugzilla":"947581","bugzilla_description":"CVE-2013-1912 haproxy: rewrite rules flaw can lead to arbitrary code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["haproxy-0:1.4.22-5.el6op","haproxy-0:1.4.22-4.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1912.json"},{"CVE":"CVE-2013-0169","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0636","RHSA-2013:0823","RHSA-2013:0833","RHSA-2013:0855","RHSA-2013:0822","RHSA-2013:0587","RHSA-2013:0532","RHSA-2013:1456","RHSA-2014:0416","RHSA-2013:0782","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"907589","bugzilla_description":"CVE-2013-0169 SSL/TLS: CBC padding timing attack (lucky-13)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3","spice-client-msi-0:3.3-12","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el5_9","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0169.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hardlink_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hardlink_security_api_results.json
new file mode 100644
index 0000000..8d0636d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hardlink_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-3630","severity":"moderate","public_date":"2011-10-15T00:00:00Z","advisories":[],"bugzilla":"746709","bugzilla_description":"CVE-2011-3630 hardlink: Multiple stack-based buffer overflows when run on a tree with deeply nested directories","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3630.json"},{"CVE":"CVE-2011-3631","severity":"low","public_date":"2011-10-15T00:00:00Z","advisories":[],"bugzilla":"746710","bugzilla_description":"CVE-2011-3631 hardlink: Multiple integer overflows, when adding string lengths","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3631.json"},{"CVE":"CVE-2011-3632","severity":"low","public_date":"2011-10-15T00:00:00Z","advisories":[],"bugzilla":"746713","bugzilla_description":"CVE-2011-3632 hardlink: Prone to symlink attacks","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3632.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/harfbuzz-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/harfbuzz-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/harfbuzz-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/harfbuzz-icu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/harfbuzz-icu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/harfbuzz-icu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/harfbuzz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/harfbuzz_security_api_results.json
new file mode 100644
index 0000000..91ebe26
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/harfbuzz_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-8947","severity":"moderate","public_date":"2016-01-24T00:00:00Z","advisories":["RHSA-2016:0072"],"bugzilla":"1301553","bugzilla_description":"CVE-2016-2052 CVE-2015-8947 chromium-browser: Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:48.0.2564.82-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8947.json"},{"CVE":"CVE-2016-2052","severity":"moderate","public_date":"2016-01-24T00:00:00Z","advisories":["RHSA-2016:0072"],"bugzilla":"1301553","bugzilla_description":"CVE-2016-2052 CVE-2015-8947 chromium-browser: Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:48.0.2564.82-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2052.json"},{"CVE":"CVE-2015-9274","severity":"low","public_date":"2015-09-29T00:00:00Z","advisories":[],"bugzilla":"1652081","bugzilla_description":"CVE-2015-9274 harfbuzz: DoS due to GPOS and GSUB table mishandling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hawkey_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hawkey_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hawkey_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hdparm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hdparm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hdparm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hesiod_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hesiod_security_api_results.json
new file mode 100644
index 0000000..1df7174
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hesiod_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10152","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1332493","bugzilla_description":"CVE-2016-10152 hesiod: Use of hard-coded unsafe configuration if configuration file cannot be opened","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-547","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10152.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10151","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1332508","bugzilla_description":"CVE-2016-10151 hesiod: Weak SUID check allowing privilege elevation","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-547","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10151.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hexedit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hexedit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hexedit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hicolor-icon-theme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hicolor-icon-theme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hicolor-icon-theme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/highcontrast-qt5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/highcontrast-qt5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/highcontrast-qt5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/highlight_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/highlight_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/highlight_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hivex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hivex_security_api_results.json
new file mode 100644
index 0000000..a8e7e3c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hivex_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-9273","severity":"moderate","public_date":"2014-10-29T00:00:00Z","advisories":["RHSA-2015:0301","RHSA-2015:1378"],"bugzilla":"1167756","bugzilla_description":"CVE-2014-9273 hivex: missing checks for small-sized files","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["hivex-0:1.3.10-5.7.el7","hivex-0:1.3.3-4.3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9273.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hmaccalc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hmaccalc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hmaccalc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hostname_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hostname_security_api_results.json
new file mode 100644
index 0000000..de1a8f8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hostname_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-2099","severity":"low","public_date":"2013-05-15T00:00:00Z","advisories":["RHSA-2016:1166","RHBA-2016:1500","RHSA-2014:1690","RHSA-2015:0042","RHSA-2014:1263"],"bugzilla":"963260","bugzilla_description":"CVE-2013-2099 python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-backports-ssl_match_hostname-0:3.4.0.2-1.el6","python-pymongo-0:3.2-1.el7sat","python-pymongo-0:3.2-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hpijs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hpijs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hpijs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip_security_api_results.json
new file mode 100644
index 0000000..db80e4d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hplip_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-0839","severity":"low","public_date":"2015-05-29T00:00:00Z","advisories":[],"bugzilla":"1227252","bugzilla_description":"CVE-2015-0839 hplip: hp-plugin verified binary download with short key ID","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0839.json"},{"CVE":"CVE-2013-6427","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1038434","bugzilla_description":"CVE-2013-6427 hplip: insecure auto update feature","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6427.json"},{"CVE":"CVE-2013-6402","severity":"low","public_date":"2013-10-09T00:00:00Z","advisories":[],"bugzilla":"1035243","bugzilla_description":"CVE-2013-6402 hplip: insecure temporary file handling in pkit.py","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6402.json"},{"CVE":"CVE-2013-4325","severity":"important","public_date":"2013-09-18T00:00:00Z","advisories":["RHSA-2013:1274"],"bugzilla":"1006674","bugzilla_description":"CVE-2013-4325 hplip: Insecure calling of polkit","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["hplip-0:3.12.4-4.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4325.json"},{"CVE":"CVE-2013-0200","severity":"low","public_date":"2013-02-21T00:00:00Z","advisories":["RHSA-2013:0500"],"bugzilla":"902163","bugzilla_description":"CVE-2013-0200 hplip: insecure temporary file handling flaws","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["hplip-0:3.12.4-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0200.json"},{"CVE":"CVE-2012-6108","severity":"low","public_date":"2012-11-27T00:00:00Z","advisories":[],"bugzilla":"894283","bugzilla_description":"CVE-2012-6108 hplip: default permissions for /var/log/hp are too open","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6108.json"},{"CVE":"CVE-2011-2722","severity":"low","public_date":"2011-07-13T00:00:00Z","advisories":["RHSA-2013:0500","RHSA-2013:0133"],"bugzilla":"725830","bugzilla_description":"CVE-2011-2722 hplip: insecure temporary file handling","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["hplip-0:3.12.4-4.el6","hplip3-0:3.9.8-15.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2722.json"},{"CVE":"CVE-2010-4267","severity":"moderate","public_date":"2011-01-10T00:00:00Z","advisories":["RHSA-2011:0154"],"bugzilla":"662740","bugzilla_description":"CVE-2010-4267 hplip: remote stack overflow vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["hplip3-0:3.9.8-11.el5_6.1","hplip-0:3.9.8-33.el6_0.1","hplip-0:1.6.7-6.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4267.json"},{"CVE":"CVE-2008-2940","severity":"moderate","public_date":"2008-08-12T00:00:00Z","advisories":["RHSA-2008:0818"],"bugzilla":"455235","bugzilla_description":"CVE-2008-2940 hpssd of hplip allows unprivileged user to trigger alert mail","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["hplip-0:1.6.7-4.1.el5_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2940.json"},{"CVE":"CVE-2008-2941","severity":"moderate","public_date":"2008-08-12T00:00:00Z","advisories":["RHSA-2008:0818"],"bugzilla":"457052","bugzilla_description":"CVE-2008-2941 hplip hpssd.py Denial-Of-Service parsing vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["hplip-0:1.6.7-4.1.el5_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2941.json"},{"CVE":"CVE-2007-5208","severity":"important","public_date":"2007-10-11T00:00:00Z","advisories":["RHSA-2007:0960"],"bugzilla":"319921","bugzilla_description":"CVE-2007-5208 hplip arbitrary command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["hplip-0:1.6.7-4.1.el5_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5208.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hsakmt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hsakmt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hsakmt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hsqldb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hsqldb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hsqldb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/http-parser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/http-parser_security_api_results.json
new file mode 100644
index 0000000..cdad835
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/http-parser_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-15605","severity":"important","public_date":"2020-02-07T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:1510","RHSA-2020:0597","RHSA-2020:0708","RHSA-2020:0707","RHSA-2020:0602","RHSA-2020:0703","RHSA-2020:0598","RHSA-2020:0579"],"bugzilla":"1800364","bugzilla_description":"CVE-2019-15605 nodejs: HTTP request smuggling using malformed Transfer-Encoding header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["nodejs:12-8010020200220143053.c27ad7f8","http-parser-0:2.7.1-8.el7_7.2","rh-nodejs12-nodejs-0:12.16.1-1.el7","http-parser-0:2.8.0-2.el8_0.2","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","http-parser-0:2.8.0-5.el8_1.2","http-parser-0:2.7.1-5.el7_6.1","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15605.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2018-12121","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:3497","RHSA-2019:2258","RHSA-2019:1821","RHSA-2019:2939"],"bugzilla":"1661002","bugzilla_description":"CVE-2018-12121 nodejs: Denial of Service with large HTTP headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["http-parser-0:2.8.0-5.el8","http-parser-0:2.7.1-8.el7","rh-nodejs8-nodejs-0:8.16.0-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12121.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7159","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2018:2949","RHSA-2019:2258"],"bugzilla":"1561981","bugzilla_description":"CVE-2018-7159 nodejs: HTTP parser allowed for spaces inside Content-Length header values","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs8-nodejs-0:8.11.4-1.el7","http-parser-0:2.7.1-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpcomponents-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpcomponents-client_security_api_results.json
new file mode 100644
index 0000000..b35d579
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpcomponents-client_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-3577","severity":"important","public_date":"2014-08-18T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2016:1773","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1082","RHSA-2014:1320","RHSA-2014:1166","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1146","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2016:1931","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1834","RHSA-2014:1833","RHSA-2015:1177","RHSA-2014:1836","RHSA-2015:1176","RHSA-2014:1835"],"bugzilla":"1129074","bugzilla_description":"CVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","httpcomponents-client-0:4.2.5-5.el7_0","org.ovirt.engine-root-0:3.5.0-29","jakarta-commons-httpclient-1:3.1-16.el7_0","thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1","jakarta-commons-httpclient-1:3.1-0.9.el6_5","jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2012-6153","severity":"important","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1320","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1098","RHSA-2014:1834","RHSA-2014:1833","RHSA-2014:1836","RHSA-2014:1835"],"bugzilla":"1129916","bugzilla_description":"CVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","devtoolset-2-httpcomponents-client-0:4.2.1-6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","org.ovirt.engine-root-0:3.5.0-29","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6153.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpcomponents-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpcomponents-core_security_api_results.json
new file mode 100644
index 0000000..a209961
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpcomponents-core_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5262","severity":"low","public_date":"2015-09-03T00:00:00Z","advisories":[],"bugzilla":"1261538","bugzilla_description":"CVE-2015-5262 jakarta-commons-httpclient, httpcomponents-core: missing HTTPS connection timeout","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5262.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd-manual_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd-manual_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd-manual_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd_security_api_results.json
new file mode 100644
index 0000000..f2e9559
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/httpd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-1968","severity":"low","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877458","bugzilla_description":"CVE-2020-1968 openssl: Information exposure when DH secret are reused across multiple TLS connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-8231","severity":"low","public_date":"2020-08-19T00:00:00Z","advisories":[],"bugzilla":"1868032","bugzilla_description":"CVE-2020-8231 curl: Expired pointer dereference via multi API with `CURLOPT_CONNECT_ONLY` option set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8231.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-11985","severity":"moderate","public_date":"2020-08-07T00:00:00Z","advisories":["RHBA-2015:2194","RHSA-2017:1161"],"bugzilla":"1866559","bugzilla_description":"CVE-2020-11985 httpd: IP address spoofing when proxying using mod_remoteip and mod_rewrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["httpd-0:2.4.6-40.el7","httpd24-httpd-0:2.4.25-9.el7","httpd24-httpd-0:2.4.25-9.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11985.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-9490","severity":"important","public_date":"2020-08-07T00:00:00Z","advisories":["RHSA-2020:3726","RHSA-2020:3714","RHSA-2020:3733","RHSA-2020:3734"],"bugzilla":"1866560","bugzilla_description":"CVE-2020-9490 httpd: Push diary crash on specifically crafted HTTP/2 header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd:2.4-8000020200825105249.f8e95b4e","httpd24-httpd-0:2.4.34-18.el7.1","httpd24-httpd-0:2.4.34-18.el6.1","httpd:2.4-8010020200824180659.c27ad7f8","httpd:2.4-8020020200824162909.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9490.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-11984","severity":"moderate","public_date":"2020-08-07T00:00:00Z","advisories":[],"bugzilla":"1866563","bugzilla_description":"CVE-2020-11984 httpd: mod_proxy_uwsgi buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11984.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-11993","severity":"moderate","public_date":"2020-08-07T00:00:00Z","advisories":[],"bugzilla":"1866564","bugzilla_description":"CVE-2020-11993 httpd: mod_http2 concurrent pool usage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11993.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8177","severity":"moderate","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1847915","bugzilla_description":"CVE-2020-8177 curl: Incorrect argument check can allow remote servers to overwrite local files","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8177.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-8169","severity":"moderate","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1847916","bugzilla_description":"CVE-2020-8169 libcurl: partial password leak over DNS on HTTP redirect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8169.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-11080","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:2852","RHSA-2020:2850","RHSA-2020:2784","RHSA-2020:2848","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:2646","RHSA-2020:2823","RHSA-2020:2644","RHSA-2020:2523","RHSA-2020:2524","RHSA-2020:2755","RHSA-2020:3042","RHSA-2020:3084"],"bugzilla":"1844929","bugzilla_description":"CVE-2020-11080 nghttp2: overly large SETTINGS frames can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["servicemesh-proxy-0:1.0.10-3.el8","nghttp2-0:1.33.0-3.el8_1.1","rh-nodejs10-nodejs-0:10.21.0-3.el7","nghttp2-0:1.33.0-3.el8_2.1","nodejs:12-8010020200630154708.c27ad7f8","httpd24-nghttp2-0:1.7.1-8.el7.1","nodejs:10-8010020200617134056.c27ad7f8","httpd24-nghttp2-0:1.7.1-8.el6.1","nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","rh-nodejs12-nodejs-0:12.18.2-1.el7","servicemesh-proxy-0:1.1.2-3.el8","nodejs:10-8020020200617141353.4cda2c84","nghttp2-0:1.33.0-1.el8_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11080.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1927","severity":"moderate","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:2263","RHSA-2020:3958","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1820761","bugzilla_description":"CVE-2020-1927 httpd: mod_rewrite configurations vulnerable to open redirect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["httpd-0:2.4.6-95.el7","httpd24-httpd-0:2.4.34-18.el6","httpd24-httpd-0:2.4.34-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1927.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-1934","severity":"low","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:3958","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1820772","bugzilla_description":"CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["httpd-0:2.4.6-95.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1934.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-15601","severity":"low","public_date":"2020-01-06T00:00:00Z","advisories":[],"bugzilla":"1794143","bugzilla_description":"CVE-2019-15601 curl: improper input validation allows users to create a 'FILE:' URL that can make the client access a remote file using SMB","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15601.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-5481","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792"],"bugzilla":"1749402","bugzilla_description":"CVE-2019-5481 curl: double free due to subsequent call of realloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5481.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2019-5482","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792","RHSA-2020:3916"],"bugzilla":"1749652","bugzilla_description":"CVE-2019-5482 curl: heap buffer overflow in function tftp_receive_packet()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-59.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5482.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-15903","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3193"],"bugzilla":"1752592","bugzilla_description":"CVE-2019-15903 expat: heap-based buffer over-read via crafted XML input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-125)","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","thunderbird-0:68.2.0-1.el7_7","expat-0:2.1.0-12.el7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15903.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-10092","severity":"low","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2019:4126","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1743956","bugzilla_description":"CVE-2019-10092 httpd: limited cross-site scripting in mod_proxy error page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["httpd24-httpd-0:2.4.34-15.el7","httpd24-httpd-0:2.4.34-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10092.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-10098","severity":"low","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2020:2263","RHSA-2020:3958","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1743959","bugzilla_description":"CVE-2019-10098 httpd: mod_rewrite potential open redirect","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.4.6-95.el7","httpd24-httpd-0:2.4.34-18.el6","httpd24-httpd-0:2.4.34-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10098.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-10081","severity":"moderate","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1743966","bugzilla_description":"CVE-2019-10081 httpd: memory corruption on early pushes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10081.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-10082","severity":"moderate","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1743974","bugzilla_description":"CVE-2019-10082 httpd: read-after-free in h2 connection shutdown","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10082.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-10097","severity":"moderate","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2019:4126","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1743996","bugzilla_description":"CVE-2019-10097 httpd: null-pointer dereference in mod_remoteip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-120|CWE-416)","affected_packages":["httpd24-httpd-0:2.4.34-15.el7","httpd24-httpd-0:2.4.34-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10097.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2019-9513","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:3041","RHSA-2019:2692","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1735741","bugzilla_description":"CVE-2019-9513 HTTP/2: flood using PRIORITY frames results in excessive resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","rh-nginx112-nginx-1:1.12.1-3.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","kiali-0:v1.0.6.redhat1-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9511","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3932","RHSA-2019:2799","RHSA-2020:2067","RHSA-2019:2775","RHSA-2019:3041","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4021","RHSA-2019:2692","RHSA-2020:1445","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2020:3192","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741860","bugzilla_description":"CVE-2019-9511 HTTP/2: large amount of data requests leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","kiali-0:v1.0.6.redhat1-1.el7","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9516","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741864","bugzilla_description":"CVE-2019-9516 HTTP/2: 0-length headers lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9517","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:2893","RHSA-2019:3932","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2955","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741868","bugzilla_description":"CVE-2019-9517 HTTP/2: request for large response leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","httpd:2.4-8000020190829150747.f8e95b4e","nodejs:10-8000020190911085529.f8e95b4e","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9517.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-5443","severity":"important","public_date":"2019-06-25T00:00:00Z","advisories":[],"bugzilla":"1772100","bugzilla_description":"CVE-2019-5443 curl: Windows OpenSSL engine code injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5443.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2018-20843","severity":"moderate","public_date":"2019-06-24T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1723723","bugzilla_description":"CVE-2018-20843 expat: large number of colons in input makes parser consume high amount of resources, leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["expat-0:2.1.0-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-13038","severity":"moderate","public_date":"2019-06-20T00:00:00Z","advisories":["RHSA-2020:1003","RHSA-2020:1660"],"bugzilla":"1725740","bugzilla_description":"CVE-2019-13038 mod_auth_mellon: Open Redirect via the login?ReturnTo= substring which could facilitate information theft","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["mod_auth_mellon-0:0.14.0-8.el7","mod_auth_mellon-0:0.14.0-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13038.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-5435","severity":"low","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1710609","bugzilla_description":"CVE-2019-5435 curl: Integer overflows in curl_url_set() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-5436","severity":"low","public_date":"2019-05-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1020","RHBA-2020:1539","RHSA-2020:1792","RHSA-2019:1543","RHSA-2020:2505","RHBA-2020:1540"],"bugzilla":"1710620","bugzilla_description":"CVE-2019-5436 curl: TFTP receive heap buffer overflow in tftp_receive_packet() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","curl-0:7.29.0-54.el7_7.3","redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-57.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5436.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-0211","severity":"important","public_date":"2019-04-01T00:00:00Z","advisories":["RHSA-2019:0980","RHSA-2019:1297","RHSA-2019:1296","RHSA-2019:1543","RHSA-2019:0746"],"bugzilla":"1694980","bugzilla_description":"CVE-2019-0211 httpd: privilege escalation from modules scripts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["httpd24-httpd-0:2.4.34-7.el7.1","httpd:2.4-8000020190405071959.55190bc5","httpd24-httpd-0:2.4.34-7.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-0217","severity":"moderate","public_date":"2019-04-01T00:00:00Z","advisories":["RHSA-2019:2343","RHSA-2019:3436","RHSA-2019:3932","RHSA-2019:4126","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1695020","bugzilla_description":"CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["httpd:2.4-8010020190829143335.cdc1202b","httpd-0:2.4.6-90.el7","httpd24-httpd-0:2.4.34-15.el7","httpd24-httpd-0:2.4.34-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0217.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2019-0215","severity":"important","public_date":"2019-04-01T00:00:00Z","advisories":["RHSA-2019:0980"],"bugzilla":"1695025","bugzilla_description":"CVE-2019-0215 httpd: mod_ssl: access control bypass when using per-location client certification authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["httpd:2.4-8000020190405071959.55190bc5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0215.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-0196","severity":"low","public_date":"2019-04-01T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:3933","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3935"],"bugzilla":"1695030","bugzilla_description":"CVE-2019-0196 httpd: mod_http2: read-after-free on a string compare","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-0220","severity":"low","public_date":"2019-04-01T00:00:00Z","advisories":["RHSA-2019:2343","RHSA-2019:3436","RHSA-2020:0250","RHSA-2020:0251","RHSA-2019:4126"],"bugzilla":"1695036","bugzilla_description":"CVE-2019-0220 httpd: URL normalization inconsistency","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-41","affected_packages":["httpd:2.4-8010020190829143335.cdc1202b","httpd-0:2.4.6-90.el7","httpd24-httpd-0:2.4.34-15.el7","httpd24-httpd-0:2.4.34-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0220.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-3877","severity":"moderate","public_date":"2019-03-22T00:00:00Z","advisories":["RHSA-2019:3421","RHSA-2019:0766"],"bugzilla":"1691125","bugzilla_description":"CVE-2019-3877 mod_auth_mellon: open redirect in logout url when using URLs with backslashes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["mod_auth_mellon-0:0.14.0-2.el7_6.4","mod_auth_mellon-0:0.14.0-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3877.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.8"},{"CVE":"CVE-2018-16890","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670252","bugzilla_description":"CVE-2018-16890 curl: NTLM type-2 heap out-of-bounds buffer read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-190","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-3822","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670254","bugzilla_description":"CVE-2019-3822 curl: NTLMv2 type-3 header stack buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-3823","severity":"low","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670256","bugzilla_description":"CVE-2019-3823 curl: SMTP end-of-response out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-0197","severity":"low","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:3933","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3935"],"bugzilla":"1695042","bugzilla_description":"CVE-2019-0197 httpd: mod_http2: possible crash on late upgrade","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2019-0190","severity":"important","public_date":"2019-01-22T00:00:00Z","advisories":[],"bugzilla":"1668488","bugzilla_description":"CVE-2019-0190 httpd: mod_ssl: infinite loop triggered by client-initiated renegotiation when using OpenSSL 1.1.1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0190.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-17199","severity":"moderate","public_date":"2019-01-22T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2020:1121","RHSA-2019:4126","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1668493","bugzilla_description":"CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":["httpd-0:2.4.6-93.el7","httpd24-httpd-0:2.4.34-15.el7","httpd24-httpd-0:2.4.34-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17199.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-17189","severity":"low","public_date":"2019-01-22T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:4126","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1668497","bugzilla_description":"CVE-2018-17189 httpd: mod_http2: DoS via slow, unneeded request bodies","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd24-httpd-0:2.4.34-15.el7","httpd24-httpd-0:2.4.34-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17189.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16839","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":["RHSA-2019:1543"],"bugzilla":"1642201","bugzilla_description":"CVE-2018-16839 curl: Integer overflow leading to heap-based buffer overflow in Curl_sasl_create_plain_message()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-16840","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":["RHSA-2019:1543"],"bugzilla":"1642203","bugzilla_description":"CVE-2018-16840 curl: Use-after-free when closing \"easy\" handle in Curl_close()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16840.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-16842","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":["RHSA-2019:1543","RHSA-2019:2181"],"bugzilla":"1644124","bugzilla_description":"CVE-2018-16842 curl: Heap-based buffer over-read in the curl tool warning formatting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["curl-0:7.29.0-54.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2018-11763","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3558"],"bugzilla":"1633399","bugzilla_description":"CVE-2018-11763 httpd: DoS for HTTP/2 connections by continuous SETTINGS frames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["httpd24-httpd-0:2.4.34-7.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11763.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14618","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2019:1880","RHSA-2018:3558"],"bugzilla":"1622707","bugzilla_description":"CVE-2018-14618 curl: NTLM password overflow via integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-4975","severity":"moderate","public_date":"2018-08-14T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2017:0906","RHSA-2018:2486","RHSA-2018:2186"],"bugzilla":"1375968","bugzilla_description":"CVE-2016-4975 httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["httpd-0:2.4.6-45.el7_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-1333","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3558"],"bugzilla":"1605048","bugzilla_description":"CVE-2018-1333 httpd: mod_http2: Too much time allocated to workers, possibly leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd24-httpd-0:2.4.34-7.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1333.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-8011","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1605052","bugzilla_description":"CVE-2018-8011 httpd: mod_md: NULL pointer dereference causing httpd child process crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8011.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-0500","severity":"moderate","public_date":"2018-07-11T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1597101","bugzilla_description":"CVE-2018-0500 curl: Heap-based buffer overflow in Curl_smtp_escape_eob() when uploading data over SMTP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000300","severity":"important","public_date":"2018-05-16T00:00:00Z","advisories":[],"bugzilla":"1575533","bugzilla_description":"CVE-2018-1000300 curl: FTP shutdown response heap-based buffer overflow can potentially lead to RCE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000300.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000301","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1575536","bugzilla_description":"CVE-2018-1000301 curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000301.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-3878","severity":"important","public_date":"2018-05-10T00:00:00Z","advisories":["RHSA-2019:0746","RHSA-2019:0985","RHSA-2019:0766"],"bugzilla":"1691126","bugzilla_description":"CVE-2019-3878 mod_auth_mellon: authentication bypass in ECP flow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["httpd24-mod_auth_mellon-0:0.13.1-2.el7.1","mod_auth_mellon-0:0.14.0-2.el7_6.4","mod_auth_mellon-0:0.14.0-3.el8_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3878.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2018-1000168","severity":"moderate","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366"],"bugzilla":"1565035","bugzilla_description":"CVE-2018-1000168 nghttp2: Null pointer dereference when too large ALTSVC frame is received","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000168.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15710","severity":"low","public_date":"2018-03-24T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2020:1121","RHSA-2019:0366","RHSA-2018:3558"],"bugzilla":"1560599","bugzilla_description":"CVE-2017-15710 httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language values","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["httpd-0:2.4.6-93.el7","httpd24-httpd-0:2.4.34-7.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15710.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15715","severity":"low","public_date":"2018-03-24T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3558","RHSA-2020:3958"],"bugzilla":"1560614","bugzilla_description":"CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["httpd24-httpd-0:2.4.34-7.el7","httpd-0:2.4.6-95.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15715.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-1283","severity":"moderate","public_date":"2018-03-21T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3558","RHSA-2020:3958"],"bugzilla":"1560395","bugzilla_description":"CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["httpd24-httpd-0:2.4.34-7.el7","httpd-0:2.4.6-95.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-1303","severity":"moderate","public_date":"2018-03-21T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3558","RHSA-2020:3958"],"bugzilla":"1560399","bugzilla_description":"CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-httpd-0:2.4.34-7.el7","httpd-0:2.4.6-95.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1303.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1302","severity":"low","public_date":"2018-03-21T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366"],"bugzilla":"1560625","bugzilla_description":"CVE-2018-1302 httpd: Use-after-free on HTTP/2 stream shutdown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-1312","severity":"low","public_date":"2018-03-21T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3558","RHSA-2019:1898"],"bugzilla":"1560634","bugzilla_description":"CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["httpd-0:2.4.6-89.el7_6.1","httpd24-httpd-0:2.4.34-7.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1312.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-1301","severity":"low","public_date":"2018-03-21T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2020:1121","RHSA-2019:0366","RHSA-2018:3558"],"bugzilla":"1560643","bugzilla_description":"CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd-0:2.4.6-93.el7","httpd24-httpd-0:2.4.34-7.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1301.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-1000120","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1552628","bugzilla_description":"CVE-2018-1000120 curl: FTP path trickery leads to NIL byte out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000120.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-1000121","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1552631","bugzilla_description":"CVE-2018-1000121 curl: LDAP NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000121.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000122","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1553398","bugzilla_description":"CVE-2018-1000122 curl: RTSP RTP buffer over-read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000122.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000005","severity":"low","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2019:1543"],"bugzilla":"1536013","bugzilla_description":"CVE-2018-1000005 curl: Out-of-bounds read in code handling HTTP/2 trailers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-1000007","severity":"moderate","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1537125","bugzilla_description":"CVE-2018-1000007 curl: HTTP authentication leak in redirects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000007.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-15111","severity":"low","public_date":"2018-01-05T00:00:00Z","advisories":["RHSA-2019:2137"],"bugzilla":"1511623","bugzilla_description":"CVE-2017-15111 keycloak-httpd-client-install: unsafe /tmp log file in --log-file option in keycloak_cli.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["keycloak-httpd-client-install-0:0.8-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15111.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2017-15112","severity":"low","public_date":"2018-01-05T00:00:00Z","advisories":["RHSA-2019:2137"],"bugzilla":"1511626","bugzilla_description":"CVE-2017-15112 keycloak-httpd-client-install: unsafe use of -p/--admin-password on command line","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["keycloak-httpd-client-install-0:0.8-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15112.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2017-8816","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1515757","bugzilla_description":"CVE-2017-8816 curl: NTLM buffer overflow via integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8817","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1515760","bugzilla_description":"CVE-2017-8817 curl: FTP wildcard out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-8818","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":[],"bugzilla":"1517691","bugzilla_description":"CVE-2017-8818 curl: Out-of-bound access in SSL related cleanup code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16231","severity":null,"public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1700392","bugzilla_description":"CVE-2017-16231 pcre: self-recursive call in match() in pcre_exec.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-1000257","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2017:3263","RHSA-2018:2486"],"bugzilla":"1503705","bugzilla_description":"CVE-2017-1000257 curl: IMAP FETCH response out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-42.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-12613","severity":"important","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2018:0316","RHSA-2017:3270","RHSA-2018:0465","RHSA-2017:3475","RHSA-2018:0466","RHSA-2018:1253","RHSA-2017:3476","RHSA-2017:3477"],"bugzilla":"1506523","bugzilla_description":"CVE-2017-12613 apr: Out-of-bounds array deref in apr_time_exp*() functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["apr-0:1.4.8-3.el7_3.1","apr-0:1.4.8-3.el7_2.1","apr-0:1.3.9-5.el6_6.1","apr-0:1.4.8-3.el7_4.1","apr-0:1.3.9-5.el6_7.1","apr-0:1.3.9-5.el6_5.1","httpd24-apr-0:1.5.1-1.el6.1","apr-0:1.3.9-5.el6_9.1","apr-0:1.3.9-5.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12613.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2017-12618","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":[],"bugzilla":"1506532","bugzilla_description":"CVE-2017-12618 apr-util: Out-of-bounds access in corrupted SDBM database","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12618.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-12171","severity":"moderate","public_date":"2017-10-19T00:00:00Z","advisories":["RHSA-2017:2972"],"bugzilla":"1493056","bugzilla_description":"CVE-2017-12171 httpd: # character matches all IPs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["httpd-0:2.2.15-60.el6_9.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12171.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-1000254","severity":"moderate","public_date":"2017-10-04T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1495541","bugzilla_description":"CVE-2017-1000254 curl: FTP PWD response parser out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-9798","severity":"moderate","public_date":"2017-09-18T00:00:00Z","advisories":["RHSA-2017:3195","RHSA-2017:3240","RHSA-2017:3193","RHSA-2017:3194","RHSA-2017:3475","RHSA-2017:2972","RHSA-2017:3476","RHSA-2017:2882","RHSA-2017:3113","RHSA-2017:3477","RHSA-2017:3114","RHSA-2017:3018","RHSA-2017:3239"],"bugzilla":"1490344","bugzilla_description":"CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method (Optionsbleed)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["httpd-0:2.2.15-60.el6_9.6","httpd-0:2.4.6-40.el7_2.6","httpd-0:2.2.15-47.el6_7.5","httpd-0:2.4.6-45.el7_3.5","httpd-0:2.2.26-57.ep6.el6","httpd-0:2.4.6-67.el7_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-1000101","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1478309","bugzilla_description":"CVE-2017-1000101 curl: URL globbing out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2017-1000100","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1478310","bugzilla_description":"CVE-2017-1000100 curl: TFTP sends more than buffer size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-1000099","severity":"moderate","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1478316","bugzilla_description":"CVE-2017-1000099 curl: FILE buffer read out of bounds","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000099.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-9788","severity":"important","public_date":"2017-07-11T00:00:00Z","advisories":["RHSA-2017:3195","RHSA-2017:3240","RHSA-2017:3193","RHSA-2017:3194","RHSA-2017:2483","RHSA-2017:2478","RHSA-2017:3113","RHSA-2017:3114","RHSA-2017:2710","RHSA-2017:2479","RHSA-2017:3239","RHSA-2017:2709","RHSA-2017:2708"],"bugzilla":"1470748","bugzilla_description":"CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["httpd24-httpd-0:2.4.25-9.el6.1","httpd-0:2.2.15-60.el6_9.5","httpd24-httpd-0:2.4.25-9.el7.1","httpd-0:2.4.6-67.el7_4.2","httpd-0:2.4.6-40.el7_2.6","httpd-0:2.2.15-47.el6_7.5","httpd-0:2.4.6-45.el7_3.5","httpd-0:2.2.26-57.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9788.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-9789","severity":"important","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1470750","bugzilla_description":"CVE-2017-9789 httpd: Read after free in mod_http2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9789.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-11164","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":[],"bugzilla":"1470107","bugzilla_description":"CVE-2017-11164 pcre: OP_KETRMAX feature in the match function in pcre_exec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-3167","severity":"moderate","public_date":"2017-06-20T00:00:00Z","advisories":["RHSA-2017:2479","RHSA-2017:3195","RHSA-2017:3193","RHSA-2017:3194","RHSA-2017:3475","RHSA-2017:2483","RHSA-2017:2478","RHSA-2017:3476","RHSA-2017:3477"],"bugzilla":"1463194","bugzilla_description":"CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["httpd24-httpd-0:2.4.25-9.el6.1","httpd-0:2.2.15-60.el6_9.5","httpd24-httpd-0:2.4.25-9.el7.1","httpd-0:2.4.6-67.el7_4.2","httpd-0:2.4.6-40.el7_2.6","httpd-0:2.2.15-47.el6_7.5","httpd-0:2.4.6-45.el7_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-3169","severity":"moderate","public_date":"2017-06-20T00:00:00Z","advisories":["RHSA-2017:2479","RHSA-2017:3195","RHSA-2017:3193","RHSA-2017:3194","RHSA-2017:3475","RHSA-2017:2483","RHSA-2017:2478","RHSA-2017:3476","RHSA-2017:3477"],"bugzilla":"1463197","bugzilla_description":"CVE-2017-3169 httpd: mod_ssl NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["httpd24-httpd-0:2.4.25-9.el6.1","httpd-0:2.2.15-60.el6_9.5","httpd24-httpd-0:2.4.25-9.el7.1","httpd-0:2.4.6-67.el7_4.2","httpd-0:2.4.6-40.el7_2.6","httpd-0:2.2.15-47.el6_7.5","httpd-0:2.4.6-45.el7_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7659","severity":"moderate","public_date":"2017-06-20T00:00:00Z","advisories":["RHSA-2017:2483"],"bugzilla":"1463199","bugzilla_description":"CVE-2017-7659 httpd: mod_http2 NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["httpd24-httpd-0:2.4.25-9.el6.1","httpd24-httpd-0:2.4.25-9.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7659.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7668","severity":"moderate","public_date":"2017-06-20T00:00:00Z","advisories":["RHSA-2017:2479","RHSA-2017:3193","RHSA-2017:3194","RHSA-2017:2483"],"bugzilla":"1463205","bugzilla_description":"CVE-2017-7668 httpd: ap_find_token() buffer overread","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["httpd24-httpd-0:2.4.25-9.el6.1","httpd24-httpd-0:2.4.25-9.el7.1","httpd-0:2.4.6-67.el7_4.2","httpd-0:2.4.6-40.el7_2.6","httpd-0:2.4.6-45.el7_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7668.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-7679","severity":"moderate","public_date":"2017-06-20T00:00:00Z","advisories":["RHSA-2017:2479","RHSA-2017:3195","RHSA-2017:3193","RHSA-2017:3194","RHSA-2017:3475","RHSA-2017:2483","RHSA-2017:2478","RHSA-2017:3476","RHSA-2017:3477"],"bugzilla":"1463207","bugzilla_description":"CVE-2017-7679 httpd: mod_mime buffer overread","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-httpd-0:2.4.25-9.el6.1","httpd-0:2.2.15-60.el6_9.5","httpd24-httpd-0:2.4.25-9.el7.1","httpd-0:2.4.6-67.el7_4.2","httpd-0:2.4.6-40.el7_2.6","httpd-0:2.2.15-47.el6_7.5","httpd-0:2.4.6-45.el7_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7679.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-9233","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1462729","bugzilla_description":"CVE-2017-9233 expat: Inifinite loop due to invalid XML in external entity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10140","severity":"moderate","public_date":"2017-06-11T00:00:00Z","advisories":["RHSA-2019:0366"],"bugzilla":"1464032","bugzilla_description":"CVE-2017-10140 libdb: Reads DB_CONFIG from the current working directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10140.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-7468","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443381","bugzilla_description":"CVE-2017-7468 curl: TLS session resumption client cert bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-7407","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1439190","bugzilla_description":"CVE-2017-7407 curl: --write-out out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7407.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2017-7244","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437364","bugzilla_description":"CVE-2017-7244 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7245","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437367","bugzilla_description":"CVE-2017-7245 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7246","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437369","bugzilla_description":"CVE-2017-7246 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-8399","severity":"moderate","public_date":"2017-03-10T00:00:00Z","advisories":[],"bugzilla":"1449629","bugzilla_description":"CVE-2017-8399 pcre2: Stack-based buffer overflow in pcre2_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7186","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1434504","bugzilla_description":"CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-2629","severity":"moderate","public_date":"2017-02-22T00:00:00Z","advisories":[],"bugzilla":"1425746","bugzilla_description":"CVE-2017-2629 curl: SSL_VERIFYSTATUS ignored","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-6004","severity":"moderate","public_date":"2017-02-14T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1425365","bugzilla_description":"CVE-2017-6004 pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9594","severity":"moderate","public_date":"2016-12-23T00:00:00Z","advisories":[],"bugzilla":"1408385","bugzilla_description":"CVE-2016-9594 curl: Unitialized random","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9594.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-9586","severity":"low","public_date":"2016-12-21T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1406712","bugzilla_description":"CVE-2016-9586 curl: printf floating point buffer overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9586.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-0736","severity":"moderate","public_date":"2016-12-20T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1161","RHSA-2017:0906"],"bugzilla":"1406744","bugzilla_description":"CVE-2016-0736 httpd: Padding Oracle in Apache mod_session_crypto","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["httpd24-httpd-0:2.4.25-9.el7","httpd24-httpd-0:2.4.25-9.el6","httpd-0:2.4.6-45.el7_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-2161","severity":"moderate","public_date":"2016-12-20T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1161","RHSA-2017:0906"],"bugzilla":"1406753","bugzilla_description":"CVE-2016-2161 httpd: DoS vulnerability in mod_auth_digest","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["httpd24-httpd-0:2.4.25-9.el7","httpd24-httpd-0:2.4.25-9.el6","httpd-0:2.4.6-45.el7_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-8743","severity":"moderate","public_date":"2016-12-20T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1721","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1161","RHSA-2017:0906"],"bugzilla":"1406822","bugzilla_description":"CVE-2016-8743 httpd: Apache HTTP Request Parsing Whitespace Defects","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-httpd-0:2.4.25-9.el7","httpd-0:2.2.15-60.el6_9.4","httpd24-httpd-0:2.4.25-9.el6","httpd-0:2.4.6-45.el7_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8743.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-8740","severity":"low","public_date":"2016-12-04T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1161"],"bugzilla":"1401528","bugzilla_description":"CVE-2016-8740 httpd: Incomplete handling of LimitRequestFields directive in mod_http2","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-770","affected_packages":["httpd24-httpd-0:2.4.25-9.el7","httpd24-httpd-0:2.4.25-9.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-9063","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396540","bugzilla_description":"CVE-2016-9063 firefox: Possible integer overflow to fix inside XML_Parse in Expat","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9063.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-8615","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388370","bugzilla_description":"CVE-2016-8615 curl: Cookie injection for other servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-99","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8617","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388377","bugzilla_description":"CVE-2016-8617 curl: Out-of-bounds write via unchecked multiplication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-787","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8618","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388378","bugzilla_description":"CVE-2016-8618 curl: Double-free in curl_maprintf","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8619","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388379","bugzilla_description":"CVE-2016-8619 curl: Double-free in krb5 code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8619.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8620","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1388382","bugzilla_description":"CVE-2016-8620 curl: Glob parser write/read out of bounds","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-120","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8620.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-8621","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388385","bugzilla_description":"CVE-2016-8621 curl: curl_getdate out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8621.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8622","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388386","bugzilla_description":"CVE-2016-8622 curl: URL unescape heap overflow via integer truncation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-190->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-8623","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388388","bugzilla_description":"CVE-2016-8623 curl: Use-after-free via shared cookies","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8623.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8624","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388390","bugzilla_description":"CVE-2016-8624 curl: Invalid URL parsing with '#'","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8625","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388392","bugzilla_description":"CVE-2016-8625 curl: IDNA 2003 makes curl use wrong host","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8625.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8610","severity":"moderate","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:0286","RHSA-2017:0574"],"bugzilla":"1384743","bugzilla_description":"CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","openssl-0:1.0.1e-48.el6_8.4","gnutls-0:2.12.23-21.el6","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6304","severity":"important","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2016:2802","RHSA-2017:2493","RHSA-2017:2494","RHSA-2016:1940"],"bugzilla":"1377600","bugzilla_description":"CVE-2016-6304 openssl: OCSP Status Request extension unbounded memory growth","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-0:1.0.1e-16.el6_5.17","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-42.el6_7.6","openssl-0:1.0.1e-48.el6_8.3","openssl-0:1.0.0-27.el6_4.6","openssl-0:1.0.1e-30.el6_6.13","openssl-0:1.0.0-20.el6_2.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7141","severity":"low","public_date":"2016-09-05T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1373229","bugzilla_description":"CVE-2016-7141 curl: Incorrect reuse of client certificates","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7141.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-6312","severity":"moderate","public_date":"2016-08-04T00:00:00Z","advisories":[],"bugzilla":"1364122","bugzilla_description":"CVE-2016-6312 apr-util, httpd: Billion laughs attack regression","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6312.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5419","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1362183","bugzilla_description":"CVE-2016-5419 curl: TLS session resumption client cert bypass","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5419.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-5420","severity":"low","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1362190","bugzilla_description":"CVE-2016-5420 curl: Re-using connection with wrong client cert","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5420.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-5421","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1362199","bugzilla_description":"CVE-2016-5421 curl: Use of connection struct after free","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5421.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-7152","severity":"low","public_date":"2016-08-03T00:00:00Z","advisories":[],"bugzilla":"1388003","bugzilla_description":"CVE-2016-7152 HTTPS: HEIST attack allows attackers to sniff TLS encrypted HTTP traffic","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7152.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-7153","severity":"low","public_date":"2016-08-03T00:00:00Z","advisories":[],"bugzilla":"1388005","bugzilla_description":"CVE-2016-7153 HTTP/2: HEIST attack allows attackers to sniff TLS encrypted HTTP/2 traffic","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7153.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5387","severity":"important","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1650","RHSA-2016:1420","RHSA-2016:1421","RHSA-2016:1624","RHSA-2016:1635","RHSA-2016:1625","RHSA-2016:1636","RHSA-2016:1648","RHSA-2016:1649","RHSA-2016:1851","RHSA-2016:1422"],"bugzilla":"1353755","bugzilla_description":"CVE-2016-5387 Apache HTTPD: sets environmental variable based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd-0:2.2.26-54.ep6.el6","httpd24-httpd-0:2.4.18-11.el6","httpd24-httpd-0:2.4.18-11.el7","httpd-0:2.4.6-40.el7_2.4","httpd-0:2.2.3-92.el5_11","jbcs-httpd24-httpd-0:2.4.6-77.SP1.jbcs.el7","jbcs-httpd24-httpd-0:2.4.6-77.SP1.jbcs.el6","httpd-0:2.2.15-54.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-4979","severity":"moderate","public_date":"2016-07-05T00:00:00Z","advisories":["RHSA-2016:1420"],"bugzilla":"1352476","bugzilla_description":"CVE-2016-4979 httpd: X509 client certificate authentication bypass using HTTP/2","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["httpd24-httpd-0:2.4.18-11.el6","httpd24-httpd-0:2.4.18-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4979.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2016-2178","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1343400","bugzilla_description":"CVE-2016-2178 openssl: Non-constant time codepath followed for certain operations in DSA implementation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2178.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2016-2177","severity":"low","public_date":"2016-05-05T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1341705","bugzilla_description":"CVE-2016-2177 openssl: Possible integer overflow vulnerabilities in codebase","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2177.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-1546","severity":"moderate","public_date":"2016-04-11T00:00:00Z","advisories":["RHSA-2017:1161"],"bugzilla":"1336350","bugzilla_description":"CVE-2016-1546 httpd: mod_http2 denial-of-service by thread starvation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd24-httpd-0:2.4.25-9.el7","httpd24-httpd-0:2.4.25-9.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1546.json"},{"CVE":"CVE-2014-9769","severity":"moderate","public_date":"2016-03-23T00:00:00Z","advisories":[],"bugzilla":"1320995","bugzilla_description":"CVE-2014-9769 pcre: incorrect nested table jumps when JIT is used (8.36/6)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9769.json"},{"CVE":"CVE-2016-1544","severity":"low","public_date":"2016-02-11T00:00:00Z","advisories":[],"bugzilla":"1308461","bugzilla_description":"CVE-2016-1544 nghttp2: out of memory error due to unlimited incoming HTTP header fields","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1544.json"},{"CVE":"CVE-2016-3191","severity":"important","public_date":"2016-02-09T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1025"],"bugzilla":"1311503","bugzilla_description":"CVE-2016-3191 pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3191.json"},{"CVE":"CVE-2016-0755","severity":"low","public_date":"2016-01-27T00:00:00Z","advisories":[],"bugzilla":"1302263","bugzilla_description":"CVE-2016-0755 curl: NTLM credentials not-checked for proxy connection re-use","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0755.json"},{"CVE":"CVE-2016-1283","severity":"important","public_date":"2016-01-04T00:00:00Z","advisories":["RHSA-2016:1132"],"bugzilla":"1295385","bugzilla_description":"CVE-2016-1283 pcre: heap buffer overflow in handling of duplicate named groups (8.39/14)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1283.json"},{"CVE":"CVE-2015-8383","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287614","bugzilla_description":"CVE-2015-8383 pcre: Buffer overflow caused by repeated conditional group (8.38/3)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8383.json"},{"CVE":"CVE-2015-3210","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3210.json"},{"CVE":"CVE-2015-8384","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8384.json"},{"CVE":"CVE-2015-8385","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287629","bugzilla_description":"CVE-2015-8385 pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8385.json"},{"CVE":"CVE-2015-8386","severity":"low","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287636","bugzilla_description":"CVE-2015-8386 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8386.json"},{"CVE":"CVE-2015-8387","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287646","bugzilla_description":"CVE-2015-8387 pcre: Integer overflow in subroutine calls (8.38/8)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8387.json"},{"CVE":"CVE-2015-8389","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287659","bugzilla_description":"CVE-2015-8389 pcre: infinite recursion in JIT compiler when processing certain patterns (8.38/21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8389.json"},{"CVE":"CVE-2015-8390","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287666","bugzilla_description":"CVE-2015-8390 pcre: uninitialized memory read triggered by malformed posix character class (8.38/22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8390.json"},{"CVE":"CVE-2015-8391","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287671","bugzilla_description":"CVE-2015-8391 pcre: inefficient posix character class syntax check (8.38/16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8391.json"},{"CVE":"CVE-2015-8392","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287690","bugzilla_description":"CVE-2015-8392 pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8392.json"},{"CVE":"CVE-2015-8393","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287695","bugzilla_description":"CVE-2015-8393 pcre: pcregrep -q is not always quiet (8.38/28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8393.json"},{"CVE":"CVE-2015-8394","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287702","bugzilla_description":"CVE-2015-8394 pcre: Integer overflow caused by missing check for certain conditions (8.38/31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8394.json"},{"CVE":"CVE-2015-8381","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8381.json"},{"CVE":"CVE-2015-8395","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8395.json"},{"CVE":"CVE-2015-3183","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2015:1668","RHSA-2015:1667","RHSA-2016:0061","RHSA-2015:2660","RHSA-2015:1666","RHSA-2016:0062","RHSA-2015:2661","RHSA-2016:2055","RHSA-2016:2054","RHSA-2015:2659"],"bugzilla":"1243887","bugzilla_description":"CVE-2015-3183 httpd: HTTP request smuggling attack against chunked request parser","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-172","affected_packages":["httpd-0:2.2.15-47.el6_7","httpd-0:2.2.26-54.ep6.el6","httpd24-httpd-0:2.4.12-4.el6.2","httpd-0:2.2.26-41.ep6.el5","httpd24-httpd-0:2.4.12-6.el7.1","httpd-0:2.4.6-31.ael7b_1.1","httpd-0:2.2.26-41.ep6.el6","httpd24-0:2.4.6-59.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-3185","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":["RHSA-2017:2710","RHSA-2015:1667","RHSA-2015:1666","RHSA-2017:2709","RHSA-2016:2957","RHSA-2017:2708"],"bugzilla":"1243888","bugzilla_description":"CVE-2015-3185 httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-287","affected_packages":["httpd24-httpd-0:2.4.12-4.el6.2","httpd24-httpd-0:2.4.12-6.el7.1","httpd-0:2.4.6-31.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-0253","severity":"low","public_date":"2015-07-15T00:00:00Z","advisories":["RHSA-2015:1666"],"bugzilla":"1243891","bugzilla_description":"CVE-2015-0253 httpd: NULL pointer dereference crash with ErrorDocument 400 pointing to a local URL-path","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["httpd24-httpd-0:2.4.12-4.el6.2","httpd24-httpd-0:2.4.12-6.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0253.json"},{"CVE":"CVE-2015-5073","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5073.json"},{"CVE":"CVE-2015-8388","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8388.json"},{"CVE":"CVE-2015-3217","severity":"moderate","public_date":"2015-06-03T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1228283","bugzilla_description":"CVE-2015-3217 pcre: stack overflow caused by mishandled group empty match (8.38/11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3217.json"},{"CVE":"CVE-2015-8380","severity":null,"public_date":"2015-06-01T00:00:00Z","advisories":[],"bugzilla":"1285413","bugzilla_description":"CVE-2015-8380 pcre: OOB write when pcre_exec() is called with ovecsize of 1 (8.38/10)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8380.json"},{"CVE":"CVE-2015-0228","severity":"low","public_date":"2015-03-10T00:00:00Z","advisories":["RHSA-2015:1666"],"bugzilla":"1202988","bugzilla_description":"CVE-2015-0228 httpd: Possible mod_lua crash due to websocket bug","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd24-httpd-0:2.4.12-4.el6.2","httpd24-httpd-0:2.4.12-6.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0228.json"},{"CVE":"CVE-2014-8109","severity":"low","public_date":"2014-11-12T00:00:00Z","advisories":[],"bugzilla":"1174077","bugzilla_description":"CVE-2014-8109 httpd: LuaAuthzProvider argument handling issue","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8109.json"},{"CVE":"CVE-2014-3583","severity":"low","public_date":"2014-10-12T00:00:00Z","advisories":["RHSA-2015:1858","RHSA-2015:1855"],"bugzilla":"1163555","bugzilla_description":"CVE-2014-3583 httpd: mod_proxy_fcgi handle_headers() buffer over read","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["mod_proxy_fcgi-0:2.4.10-5.20150415gitd45a11f.el6cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3583.json"},{"CVE":"CVE-2014-3581","severity":"low","public_date":"2014-09-08T00:00:00Z","advisories":["RHSA-2014:1972","RHSA-2015:0325","RHSA-2015:2660","RHSA-2015:2661","RHSA-2015:2659"],"bugzilla":"1149709","bugzilla_description":"CVE-2014-3581 httpd: NULL pointer dereference in mod_cache if Content-Type has empty value","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["httpd24-httpd-0:2.4.6-25.el7","httpd24-httpd-0:2.4.6-22.el6","httpd-0:2.4.6-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3581.json"},{"CVE":"CVE-2015-2328","severity":"moderate","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1285399","bugzilla_description":"CVE-2015-2328 pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2328.json"},{"CVE":"CVE-2014-0231","severity":"moderate","public_date":"2014-07-17T00:00:00Z","advisories":["RHSA-2014:0920","RHSA-2014:0921","RHSA-2014:1019","RHSA-2014:0922","RHSA-2014:1088","RHSA-2014:1021","RHSA-2014:1087","RHSA-2014:1020","RHSA-2014:1086"],"bugzilla":"1120596","bugzilla_description":"CVE-2014-0231 httpd: mod_cgid denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.2.3-87.el5_10","httpd-0:2.4.6-18.el7_0","httpd24-httpd-0:2.4.6-18.el6","httpd-0:2.2.15-31.el6_5","httpd-0:2.2.26-35.ep6.el5","httpd24-httpd-0:2.4.6-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0231.json"},{"CVE":"CVE-2014-0117","severity":"moderate","public_date":"2014-07-17T00:00:00Z","advisories":["RHSA-2014:0921","RHSA-2014:0922"],"bugzilla":"1120599","bugzilla_description":"CVE-2014-0117 httpd: mod_proxy denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.4.6-18.el7_0","httpd24-httpd-0:2.4.6-18.el6","httpd24-httpd-0:2.4.6-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0117.json"},{"CVE":"CVE-2014-0118","severity":"moderate","public_date":"2014-07-17T00:00:00Z","advisories":["RHSA-2014:0920","RHSA-2014:0921","RHSA-2014:1019","RHSA-2014:0922","RHSA-2014:1088","RHSA-2014:1021","RHSA-2014:1087","RHSA-2014:1020","RHSA-2014:1086"],"bugzilla":"1120601","bugzilla_description":"CVE-2014-0118 httpd: mod_deflate denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["httpd-0:2.2.3-87.el5_10","httpd-0:2.4.6-18.el7_0","httpd24-httpd-0:2.4.6-18.el6","httpd-0:2.2.15-31.el6_5","httpd-0:2.2.26-35.ep6.el5","httpd24-httpd-0:2.4.6-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0118.json"},{"CVE":"CVE-2014-0226","severity":"important","public_date":"2014-07-17T00:00:00Z","advisories":["RHSA-2014:0920","RHSA-2014:0921","RHSA-2014:1019","RHSA-2014:0922","RHSA-2014:1088","RHSA-2014:1021","RHSA-2014:1087","RHSA-2014:1020","RHSA-2014:1086"],"bugzilla":"1120603","bugzilla_description":"CVE-2014-0226 httpd: mod_status heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-662->CWE-122","affected_packages":["httpd-0:2.2.3-87.el5_10","httpd-0:2.4.6-18.el7_0","httpd24-httpd-0:2.4.6-18.el6","httpd-0:2.2.15-31.el6_5","httpd-0:2.2.26-35.ep6.el5","httpd24-httpd-0:2.4.6-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0226.json"},{"CVE":"CVE-2013-4352","severity":"moderate","public_date":"2014-07-17T00:00:00Z","advisories":["RHSA-2014:0921","RHSA-2014:0922"],"bugzilla":"1120604","bugzilla_description":"CVE-2013-4352 httpd: mod_cache NULL pointer dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["httpd-0:2.4.6-18.el7_0","httpd24-httpd-0:2.4.6-18.el6","httpd24-httpd-0:2.4.6-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4352.json"},{"CVE":"CVE-2014-3523","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2016:2957"],"bugzilla":"1121519","bugzilla_description":"CVE-2014-3523 httpd: WinNT MPM denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-2327","severity":"moderate","public_date":"2014-07-11T00:00:00Z","advisories":["RHBA-2015:2142","RHSA-2016:2750"],"bugzilla":"1285408","bugzilla_description":"CVE-2015-2327 pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2327.json"},{"CVE":"CVE-2014-0098","severity":"low","public_date":"2014-03-07T00:00:00Z","advisories":["RHSA-2014:0784","RHSA-2014:0783","RHSA-2014:0369","RHSA-2014:0825","RHSA-2014:0370","RHSA-2014:0826"],"bugzilla":"1077871","bugzilla_description":"CVE-2014-0098 httpd: mod_log_config does not properly handle logging certain cookies resulting in DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-228->CWE-125","affected_packages":["httpd-0:2.2.22-27.ep6.el6","httpd-0:2.2.22-27.ep6.el5","httpd-0:2.2.3-85.el5_10","httpd-0:2.2.15-30.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0098.json"},{"CVE":"CVE-2013-4492","severity":"moderate","public_date":"2013-12-04T00:00:00Z","advisories":["RHSA-2018:0380","RHBA-2015:1100"],"bugzilla":"1039435","bugzilla_description":"CVE-2013-4492 rubygem-i18n: cross-site scripting flaw in exception handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["httpd-configmap-generator-0:0.2.1-1.el7cf","cfme-gemset-0:5.4.0.5-1.el6cf","cfme-amazon-smartstate-0:5.9.0.22-1.el7cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4492.json"},{"CVE":"CVE-2013-7038","severity":"important","public_date":"2013-11-28T00:00:00Z","advisories":[],"bugzilla":"1039384","bugzilla_description":"CVE-2013-7038 libmicrohttpd: out-of-bounds read in MHD_http_unescape()","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7038.json"},{"CVE":"CVE-2013-7039","severity":"moderate","public_date":"2013-11-28T00:00:00Z","advisories":[],"bugzilla":"1039390","bugzilla_description":"CVE-2013-7039 libmicrohttpd: stack overflow in MHD_digest_auth_check()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7039.json"},{"CVE":"CVE-2013-5704","severity":"low","public_date":"2013-10-19T00:00:00Z","advisories":["RHSA-2014:1972","RHSA-2015:1249","RHSA-2015:0325","RHSA-2016:0061","RHSA-2015:2660","RHSA-2016:0062","RHSA-2015:2661","RHSA-2015:2659"],"bugzilla":"1082903","bugzilla_description":"CVE-2013-5704 httpd: bypass of mod_headers rules via chunked requests","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-287","affected_packages":["httpd24-httpd-0:2.4.6-25.el7","httpd-0:2.2.26-41.ep6.el5","httpd-0:2.2.15-45.el6","httpd-0:2.2.26-41.ep6.el6","httpd24-httpd-0:2.4.6-22.el6","httpd-0:2.4.6-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5704.json"},{"CVE":"CVE-2013-6438","severity":"moderate","public_date":"2013-10-03T00:00:00Z","advisories":["RHSA-2014:0784","RHSA-2014:0783","RHSA-2014:0369","RHSA-2014:0825","RHSA-2014:0370","RHSA-2014:0826"],"bugzilla":"1077867","bugzilla_description":"CVE-2013-6438 httpd: mod_dav denial of service via crafted DAV WRITE request","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":["httpd-0:2.2.22-27.ep6.el6","httpd-0:2.2.22-27.ep6.el5","httpd-0:2.2.3-85.el5_10","httpd-0:2.2.15-30.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6438.json"},{"CVE":"CVE-2013-3587","severity":"moderate","public_date":"2013-08-02T00:00:00Z","advisories":[],"bugzilla":"995168","bugzilla_description":"CVE-2013-3587 BREACH attack against HTTP compression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3587.json"},{"CVE":"CVE-2013-2249","severity":"moderate","public_date":"2013-07-22T00:00:00Z","advisories":[],"bugzilla":"987543","bugzilla_description":"CVE-2013-2249 httpd: mod_session_dbd session fixation flaw","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-384","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2249.json"},{"CVE":"CVE-2013-1896","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2013:1209","RHSA-2013:1207","RHSA-2013:1208","RHSA-2013:1133","RHSA-2013:1156","RHSA-2013:1134"],"bugzilla":"983549","bugzilla_description":"CVE-2013-1896 httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.2.3-82.el5_9","httpd-0:2.2.22-25.ep6.el6","httpd-0:2.2.22-25.ep6.el5","httpd-0:2.2.15-29.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1896.json"},{"CVE":"CVE-2013-1862","severity":"low","public_date":"2013-04-19T00:00:00Z","advisories":["RHSA-2013:0815","RHSA-2013:1209","RHSA-2013:1207","RHSA-2013:1208","RHSA-2013:1133","RHSA-2013:1134"],"bugzilla":"953729","bugzilla_description":"CVE-2013-1862 httpd: mod_rewrite allows terminal escape sequences to be written to the log file","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["httpd-0:2.2.15-28.el6_4","httpd-0:2.2.22-25.ep6.el6","httpd-0:2.2.22-25.ep6.el5","httpd-0:2.2.3-78.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1862.json"},{"CVE":"CVE-2012-3499","severity":"moderate","public_date":"2013-02-18T00:00:00Z","advisories":["RHSA-2013:0815","RHSA-2013:1011","RHSA-2013:1209","RHSA-2013:1207","RHSA-2013:1208","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"915883","bugzilla_description":"CVE-2012-3499 httpd: multiple XSS flaws due to unescaped hostnames","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["httpd-0:2.2.15-28.el6_4","httpd-0:2.2.22-25.ep6.el5","httpd-0:2.2.22-23.ep6.el5","httpd-0:2.2.3-78.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3499.json"},{"CVE":"CVE-2012-4558","severity":"moderate","public_date":"2013-02-18T00:00:00Z","advisories":["RHSA-2013:0815","RHSA-2013:1011","RHSA-2013:1209","RHSA-2013:1207","RHSA-2013:1208","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"915884","bugzilla_description":"CVE-2012-4558 httpd: XSS flaw in mod_proxy_balancer manager interface","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["httpd-0:2.2.15-28.el6_4","httpd-0:2.2.22-25.ep6.el5","httpd-0:2.2.22-23.ep6.el5","httpd-0:2.2.3-78.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4558.json"},{"CVE":"CVE-2012-3502","severity":"low","public_date":"2012-08-16T00:00:00Z","advisories":[],"bugzilla":"850776","bugzilla_description":"CVE-2012-3502 httpd (mod_proxy_ajp, mod_proxy_http): Information disclosure due improper management of back end server connection close within error handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3502.json"},{"CVE":"CVE-2008-0455","severity":"low","public_date":"2012-06-13T00:00:00Z","advisories":["RHSA-2013:0130","RHSA-2012:1591","RHSA-2012:1592","RHSA-2012:1594","RHSA-2013:0512"],"bugzilla":"850794","bugzilla_description":"CVE-2012-2687 CVE-2008-0455 httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["httpd-0:2.2.3-74.el5","httpd-0:2.2.15-26.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0455.json"},{"CVE":"CVE-2012-2687","severity":"low","public_date":"2012-06-13T00:00:00Z","advisories":["RHSA-2013:0130","RHSA-2012:1591","RHSA-2012:1592","RHSA-2012:1594","RHSA-2013:0512"],"bugzilla":"850794","bugzilla_description":"CVE-2012-2687 CVE-2008-0455 httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["httpd-0:2.2.3-74.el5","httpd-0:2.2.15-26.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2687.json"},{"CVE":"CVE-2012-0883","severity":"low","public_date":"2012-03-02T00:00:00Z","advisories":["RHSA-2012:1594"],"bugzilla":"813559","bugzilla_description":"CVE-2012-0883 httpd: insecure handling of LD_LIBRARY_PATH in envvars","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0883.json"},{"CVE":"CVE-2012-0053","severity":"moderate","public_date":"2012-01-23T00:00:00Z","advisories":["RHSA-2012:0128","RHSA-2012:0542","RHSA-2012:0323","RHSA-2012:0543"],"bugzilla":"785069","bugzilla_description":"CVE-2012-0053 httpd: cookie exposure due to error responses","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["httpd-0:2.2.3-63.el5_8.1","httpd-0:2.2.17-15.4.ep5.el5","httpd-0:2.2.17-15.4.ep5.el6","httpd-0:2.2.15-15.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0053.json"},{"CVE":"CVE-2012-0031","severity":"low","public_date":"2012-01-11T00:00:00Z","advisories":["RHSA-2012:0128","RHSA-2012:0542","RHSA-2012:0323","RHSA-2012:0543"],"bugzilla":"773744","bugzilla_description":"CVE-2012-0031 httpd: possible crash on shutdown due to flaw in scoreboard handling","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.2.3-63.el5_8.1","httpd-0:2.2.17-15.4.ep5.el5","httpd-0:2.2.17-15.4.ep5.el6","httpd-0:2.2.15-15.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0031.json"},{"CVE":"CVE-2012-4557","severity":"low","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2013:0512","RHSA-2011:0897"],"bugzilla":"871685","bugzilla_description":"CVE-2012-4557 httpd: mod_proxy_ajp worker moved to error state when timeout exceeded","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.2.15-26.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4557.json"},{"CVE":"CVE-2012-0021","severity":"low","public_date":"2011-11-28T00:00:00Z","advisories":["RHSA-2012:0542","RHSA-2012:0543"],"bugzilla":"785065","bugzilla_description":"CVE-2012-0021 httpd: NULL pointer dereference crash in mod_log_config","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["httpd-0:2.2.17-15.4.ep5.el5","httpd-0:2.2.17-15.4.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0021.json"},{"CVE":"CVE-2011-4317","severity":"moderate","public_date":"2011-11-23T00:00:00Z","advisories":["RHSA-2012:0128"],"bugzilla":"756483","bugzilla_description":"CVE-2011-4317 httpd: uri scheme bypass of the reverse proxy vulnerability CVE-2011-3368 fix","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["httpd-0:2.2.15-15.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4317.json"},{"CVE":"CVE-2011-4415","severity":"low","public_date":"2011-11-02T00:00:00Z","advisories":[],"bugzilla":"750935","bugzilla_description":"CVE-2011-4415 httpd: SetEnvIf resource exhaustion","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4415.json"},{"CVE":"CVE-2011-3607","severity":"low","public_date":"2011-11-02T00:00:00Z","advisories":["RHSA-2012:0128","RHSA-2012:0542","RHSA-2012:0323","RHSA-2012:0543"],"bugzilla":"769844","bugzilla_description":"CVE-2011-3607 httpd: ap_pregsub Integer overflow to buffer overflow","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["httpd-0:2.2.3-63.el5_8.1","httpd-0:2.2.17-15.4.ep5.el5","httpd-0:2.2.17-15.4.ep5.el6","httpd-0:2.2.15-15.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3607.json"},{"CVE":"CVE-2011-3639","severity":"moderate","public_date":"2011-10-26T00:00:00Z","advisories":["RHSA-2012:0128","RHSA-2012:0323"],"bugzilla":"752080","bugzilla_description":"CVE-2011-3639 httpd: http 0.9 request bypass of the reverse proxy vulnerability CVE-2011-3368 fix","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["httpd-0:2.2.3-63.el5_8.1","httpd-0:2.2.15-15.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3639.json"},{"CVE":"CVE-2011-3368","severity":"moderate","public_date":"2011-10-05T00:00:00Z","advisories":["RHSA-2011:1391","RHSA-2011:1392","RHSA-2012:0542","RHSA-2012:0543"],"bugzilla":"740045","bugzilla_description":"CVE-2011-3368 httpd: reverse web proxy vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["httpd-0:2.0.52-49.ent","httpd-0:2.2.3-53.el5_7.3","httpd-0:2.2.15-9.el6_1.3","httpd-0:2.2.17-15.4.ep5.el5","httpd-0:2.2.17-15.4.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3368.json"},{"CVE":"CVE-2011-3348","severity":"moderate","public_date":"2011-09-14T00:00:00Z","advisories":["RHSA-2011:1391","RHSA-2012:0542","RHSA-2012:0543"],"bugzilla":"736690","bugzilla_description":"CVE-2011-3348 httpd: mod_proxy_ajp remote temporary DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.2.15-9.el6_1.3","httpd-0:2.2.17-15.4.ep5.el5","httpd-0:2.2.17-15.4.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3348.json"},{"CVE":"CVE-2011-3192","severity":"important","public_date":"2011-08-20T00:00:00Z","advisories":["RHSA-2011:1300","RHSA-2011:1245","RHSA-2011:1369","RHSA-2011:1330","RHSA-2011:1294","RHSA-2011:1329"],"bugzilla":"732928","bugzilla_description":"CVE-2011-3192 httpd: multiple ranges DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.2.15-5.el6_0.1","httpd-0:2.0.52-48.ent","httpd-0:2.2.3-53.el5_7.1","httpd-0:2.2.17-13.2.ep5.el6","httpd-0:2.2.15-9.el6_1.2","httpd-0:2.2.17-14.1.ep5.el5","httpd-0:2.2.13-3.el5s2","httpd22-0:2.2.17-16.ep5.el4","httpd-0:2.0.46-78.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3192.json"},{"CVE":"CVE-2011-1928","severity":"low","public_date":"2011-05-19T00:00:00Z","advisories":["RHSA-2011:0844"],"bugzilla":"706203","bugzilla_description":"CVE-2011-1928 apr: DoS flaw in apr_fnmatch() due to fix for CVE-2011-0419","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["apr-0:1.3.9-3.el6_1.2","apr-0:0.9.4-26.el4","apr-0:1.2.7-11.el5_6.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1928.json"},{"CVE":"CVE-2010-1623","severity":"moderate","public_date":"2010-10-01T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2010:0950","RHSA-2011:0897"],"bugzilla":"640281","bugzilla_description":"CVE-2010-1623 apr-util: high memory consumption in apr_brigade_split_line()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["apr-util-0:1.3.9-3.el6_0.1","httpd22-0:2.2.17-14.ep5.el4","apr-util-0:0.9.4-22.el4_8.3","apr-util-0:1.2.7-11.el5_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1623.json"},{"CVE":"CVE-2010-2791","severity":"moderate","public_date":"2010-07-23T00:00:00Z","advisories":["RHSA-2010:0659"],"bugzilla":"617523","bugzilla_description":"CVE-2010-2791 httpd: Reverse proxy sends wrong responses after time-outs","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["httpd-0:2.2.3-43.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2791.json"},{"CVE":"CVE-2010-1452","severity":"low","public_date":"2010-07-21T00:00:00Z","advisories":["RHSA-2010:0659","RHSA-2011:0896","RHSA-2011:0897"],"bugzilla":"618189","bugzilla_description":"CVE-2010-1452 httpd mod_cache, mod_dav: DoS (httpd child process crash) by parsing URI structure with missing path segments","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.17-14.ep5.el4","httpd-0:2.2.3-43.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1452.json"},{"CVE":"CVE-2010-2057","severity":"moderate","public_date":"2010-06-10T00:00:00Z","advisories":[],"bugzilla":"623799","bugzilla_description":"CVE-2010-2057 Apache MyFaces: encrypted view state does not include MAC","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2057.json"},{"CVE":"CVE-2010-0408","severity":"moderate","public_date":"2010-03-02T00:00:00Z","advisories":["RHSA-2010:0168","RHSA-2010:0396"],"bugzilla":"569905","bugzilla_description":"CVE-2010-0408 httpd: mod_proxy_ajp remote temporary DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.2.3-31.el5_4.4","httpd22-0:2.2.14-11.jdk6.ep5.el4","httpd-0:2.2.14-1.2.6.jdk6.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0408.json"},{"CVE":"CVE-2010-0434","severity":"low","public_date":"2009-12-09T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2010:0168","RHSA-2010:0396","RHSA-2010:0175"],"bugzilla":"570171","bugzilla_description":"CVE-2010-0434 httpd: request header information leak","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["httpd-0:2.0.52-41.ent.7","httpd-0:2.2.3-31.el5_4.4","httpd22-0:2.2.14-11.jdk6.ep5.el4","httpd-0:2.2.14-1.2.6.jdk6.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0434.json"},{"CVE":"CVE-2009-3555","severity":"moderate","public_date":"2009-11-05T00:00:00Z","advisories":["RHSA-2009:1580","RHSA-2010:0408","RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2010:0786","RHSA-2010:0167","RHSA-2010:0166","RHSA-2010:0165","RHSA-2010:0440","RHSA-2010:0164","RHSA-2010:0163","RHSA-2010:0162","RHSA-2009:1579","RHSA-2009:1694","RHSA-2010:0807","RHSA-2010:0119","RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2011:0880","RHSA-2010:0155","RHSA-2010:0770","RHSA-2010:0011","RHSA-2015:1591","RHSA-2010:0130"],"bugzilla":"533125","bugzilla_description":"CVE-2009-3555 TLS: MITM attacks via session renegotiation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-300","affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","httpd-0:2.2.3-31.el5_4.2","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el5","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","openssl-0:0.9.8e-12.el5_4.6","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el4_8","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","rhev-hypervisor-0:5.4-2.1.12.1.el5_4rhev2_1","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5","openssl097a-0:0.9.7a-9.el5_4.2","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","httpd22-0:2.2.10-25.1.ep5.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","httpd-0:2.0.52-41.ent.6","gnutls-0:1.0.20-4.el4_8.7","httpd-0:2.2.10-11.ep5.el5","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","httpd-0:2.0.46-77.ent","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4","pulp-0:2.6.0.15-1.el7sat","openssl-0:0.9.7a-33.26"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3555.json"},{"CVE":"CVE-2009-3095","severity":"low","public_date":"2009-09-03T00:00:00Z","advisories":["RHSA-2009:1580","RHSA-2009:1461","RHSA-2010:0602","RHSA-2009:1579","RHSA-2010:0011"],"bugzilla":"522209","bugzilla_description":"CVE-2009-3095 httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["httpd-0:2.0.52-41.ent.6","httpd-0:2.2.3-31.el5_4.2","httpd-0:2.2.10-11.ep5.el5","httpd22-0:2.2.10-25.1.ep5.el4","httpd-0:2.0.46-77.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3095.json"},{"CVE":"CVE-2009-3094","severity":"low","public_date":"2009-09-02T00:00:00Z","advisories":["RHSA-2009:1580","RHSA-2009:1461","RHSA-2010:0602","RHSA-2009:1579","RHSA-2010:0011"],"bugzilla":"521619","bugzilla_description":"CVE-2009-3094 httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.0.52-41.ent.6","httpd-0:2.2.3-31.el5_4.2","httpd-0:2.2.10-11.ep5.el5","httpd22-0:2.2.10-25.1.ep5.el4","httpd-0:2.0.46-77.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3094.json"},{"CVE":"CVE-2009-2412","severity":"moderate","public_date":"2009-08-04T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1205","RHSA-2009:1204","RHSA-2009:1462"],"bugzilla":"515698","bugzilla_description":"CVE-2009-2412 apr, apr-util: Integer overflows in memory pool (apr) and relocatable memory (apr-util) management","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["httpd-0:2.0.46-75.ent","httpd22-0:2.2.10-24.1.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2412.json"},{"CVE":"CVE-2009-1890","severity":"important","public_date":"2009-07-02T00:00:00Z","advisories":["RHSA-2009:1160","RHSA-2009:1148","RHSA-2009:1155","RHSA-2009:1156"],"bugzilla":"509375","bugzilla_description":"CVE-2009-1890 httpd: mod_proxy reverse proxy DoS (infinite loop)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","httpd-0:2.2.3-22.el5_3.2","httpd-0:2.2.10-10.ep5.el5","httpd-0:2.2.11-3.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1890.json"},{"CVE":"CVE-2009-1891","severity":"low","public_date":"2009-06-26T00:00:00Z","advisories":["RHSA-2009:1580","RHSA-2010:0602","RHSA-2009:1160","RHSA-2009:1148","RHSA-2009:1205","RHSA-2009:1155","RHSA-2009:1156"],"bugzilla":"509125","bugzilla_description":"CVE-2009-1891 httpd: possible temporary DoS (CPU consumption) in mod_deflate","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","httpd-0:2.0.46-75.ent","httpd-0:2.0.52-41.ent.6","httpd-0:2.2.3-22.el5_3.2","httpd-0:2.2.10-10.ep5.el5","httpd-0:2.2.11-3.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1891.json"},{"CVE":"CVE-2007-6750","severity":"low","public_date":"2009-06-17T00:00:00Z","advisories":[],"bugzilla":"508238","bugzilla_description":"CVE-2007-6750 httpd: Apache Slowloris denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6750.json"},{"CVE":"CVE-2009-0023","severity":"moderate","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107","RHSA-2009:1160"],"bugzilla":"503928","bugzilla_description":"CVE-2009-0023 apr-util heap buffer underwrite","cvss_score":4.3,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0023.json"},{"CVE":"CVE-2009-1955","severity":"moderate","public_date":"2009-06-01T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107","RHSA-2009:1160"],"bugzilla":"504555","bugzilla_description":"CVE-2009-1955 apr-util billion laughs attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1955.json"},{"CVE":"CVE-2009-1956","severity":"moderate","public_date":"2009-04-24T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107"],"bugzilla":"504390","bugzilla_description":"CVE-2009-1956 apr-util single NULL byte buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1956.json"},{"CVE":"CVE-2009-1195","severity":"low","public_date":"2009-04-22T00:00:00Z","advisories":["RHSA-2009:1075","RHSA-2009:1160","RHSA-2009:1155","RHSA-2009:1156"],"bugzilla":"489436","bugzilla_description":"CVE-2009-1195 httpd: AllowOverride Options=IncludesNoExec allows Options Includes","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","httpd-0:2.2.3-22.el5_3.1","httpd-0:2.2.10-10.ep5.el5","httpd-0:2.2.11-3.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1195.json"},{"CVE":"CVE-2009-1191","severity":"important","public_date":"2009-04-21T00:00:00Z","advisories":["RHSA-2009:1058"],"bugzilla":"496801","bugzilla_description":"CVE-2009-1191 httpd mod_proxy_ajp information disclosure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["httpd-0:2.2.10-4.ep5.el5","httpd22-0:2.2.10-16.1.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1191.json"},{"CVE":"CVE-2008-2939","severity":"low","public_date":"2008-08-05T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2008:0967","RHSA-2008:0966"],"bugzilla":"458250","bugzilla_description":"CVE-2008-2939 httpd: mod_proxy_ftp globbing XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["httpd-0:2.2.3-11.el5_2.4","httpd-0:2.0.46-71.ent","httpd-0:2.0.52-41.ent.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2939.json"},{"CVE":"CVE-2008-2364","severity":"moderate","public_date":"2008-06-10T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2008:0967","RHSA-2008:0966"],"bugzilla":"451615","bugzilla_description":"CVE-2008-2364 httpd: mod_proxy_http DoS via excessive interim responses from the origin server","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.2.3-11.el5_2.4","httpd-0:2.0.46-71.ent","httpd-0:2.0.52-41.ent.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2364.json"},{"CVE":"CVE-2008-1678","severity":"moderate","public_date":"2008-04-30T00:00:00Z","advisories":["RHSA-2009:1075"],"bugzilla":"447268","bugzilla_description":"CVE-2008-1678 httpd: mod_ssl per-connection memory leak for connections with zlib compression","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["httpd-0:2.2.3-22.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1678.json"},{"CVE":"CVE-2008-0456","severity":"low","public_date":"2008-01-22T00:00:00Z","advisories":["RHSA-2013:0130"],"bugzilla":"879292","bugzilla_description":"CVE-2008-0456 httpd: mod_negotiation CRLF injection via untrusted file names in directories with MultiViews enabled","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["httpd-0:2.2.3-74.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0456.json"},{"CVE":"CVE-2007-6421","severity":"low","public_date":"2008-01-02T00:00:00Z","advisories":["RHSA-2008:0009","RHSA-2008:0008"],"bugzilla":"427229","bugzilla_description":"CVE-2007-6421 httpd mod_proxy_balancer cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["httpd-0:2.2.3-11.el5_1.3","httpd-0:2.2.4-9.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6421.json"},{"CVE":"CVE-2008-0005","severity":"low","public_date":"2008-01-02T00:00:00Z","advisories":["RHSA-2008:0005","RHSA-2008:0004","RHSA-2010:0602","RHSA-2008:0009","RHSA-2008:0008","RHSA-2008:0007","RHSA-2008:0006"],"bugzilla":"427739","bugzilla_description":"CVE-2008-0005 mod_proxy_ftp XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["apache-0:1.3.27-14.ent","httpd-0:2.0.46-70.ent","httpd-0:2.2.3-11.el5_1.3","httpd-0:2.0.52-38.ent.2","httpd-0:2.2.4-9.el5s2","httpd-0:2.0.59-1.el4s1.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0005.json"},{"CVE":"CVE-2007-6422","severity":"low","public_date":"2008-01-01T00:00:00Z","advisories":["RHSA-2008:0009","RHSA-2008:0008"],"bugzilla":"427230","bugzilla_description":"CVE-2007-6422 httpd mod_proxy_balancer crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.2.3-11.el5_1.3","httpd-0:2.2.4-9.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6422.json"},{"CVE":"CVE-2007-6388","severity":"moderate","public_date":"2007-12-29T00:00:00Z","advisories":["RHSA-2008:0005","RHSA-2008:0004","RHSA-2010:0602","RHSA-2008:0263","RHSA-2008:0261","RHSA-2008:0009","RHSA-2008:0008","RHSA-2008:0524","RHSA-2008:0007","RHSA-2008:0006","RHSA-2008:0523"],"bugzilla":"427228","bugzilla_description":"CVE-2007-6388 apache mod_status cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["apache-0:1.3.27-14.ent","httpd-0:2.0.46-70.ent","httpd-0:2.2.3-11.el5_1.3","httpd-0:2.0.52-38.ent.2","httpd-0:2.2.4-9.el5s2","httpd-0:2.0.59-1.el4s1.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6388.json"},{"CVE":"CVE-2007-5000","severity":"low","public_date":"2007-12-11T00:00:00Z","advisories":["RHSA-2008:0005","RHSA-2008:0004","RHSA-2010:0602","RHSA-2008:0263","RHSA-2008:0261","RHSA-2008:0009","RHSA-2008:0008","RHSA-2008:0524","RHSA-2008:0007","RHSA-2008:0006","RHSA-2008:0523"],"bugzilla":"419931","bugzilla_description":"CVE-2007-5000 httpd: mod_imagemap XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["apache-0:1.3.27-14.ent","httpd-0:2.0.46-70.ent","httpd-0:2.2.3-11.el5_1.3","httpd-0:2.0.52-38.ent.2","httpd-0:2.2.4-9.el5s2","httpd-0:2.0.59-1.el4s1.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5000.json"},{"CVE":"CVE-2007-4465","severity":"low","public_date":"2007-09-13T00:00:00Z","advisories":["RHSA-2008:0005","RHSA-2008:0004","RHSA-2010:0602","RHSA-2008:0261","RHSA-2008:0008","RHSA-2008:0524","RHSA-2008:0006","RHSA-2008:0523","RHSA-2007:0911"],"bugzilla":"289511","bugzilla_description":"CVE-2007-4465 mod_autoindex XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["apache-0:1.3.27-14.ent","httpd-0:2.0.46-70.ent","httpd-0:2.2.3-11.el5_1.3","httpd-0:2.0.59-1.el4s1.8","httpd-0:2.0.52-38.ent.2","httpd-0:2.2.4-7.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4465.json"},{"CVE":"CVE-2007-3847","severity":"moderate","public_date":"2007-08-01T00:00:00Z","advisories":["RHSA-2008:0005","RHSA-2010:0602","RHSA-2007:0747","RHSA-2007:0746","RHSA-2007:0911"],"bugzilla":"250731","bugzilla_description":"CVE-2007-3847 httpd: out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd-0:2.2.3-11.el5","httpd-0:2.0.46-70.ent","httpd-0:2.0.52-38.ent","httpd-0:2.0.59-1.el4s1.8","httpd-0:2.2.4-7.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3847.json"},{"CVE":"CVE-2006-5752","severity":"moderate","public_date":"2007-06-20T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2007:0532","RHSA-2008:0263","RHSA-2008:0261","RHSA-2007:0557","RHSA-2007:0533","RHSA-2007:0534","RHSA-2007:0556","RHSA-2008:0524","RHSA-2008:0523"],"bugzilla":"245112","bugzilla_description":"CVE-2006-5752 httpd mod_status XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["httpd-0:2.0.52-32.2.ent","httpd-0:2.0.59-1.el4s1.7","httpd-0:2.0.46-67.ent","httpd-0:2.2.3-7.el5","apache-0:1.3.27-12.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5752.json"},{"CVE":"CVE-2007-3304","severity":"moderate","public_date":"2007-06-19T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2007:0532","RHSA-2007:0662","RHSA-2008:0263","RHSA-2008:0261","RHSA-2007:0557","RHSA-2007:0556","RHSA-2008:0524","RHSA-2008:0523"],"bugzilla":"245111","bugzilla_description":"CVE-2007-3304 httpd scoreboard lack of PID protection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.59-1.el4s1.7","httpd-0:2.0.46-68.ent","httpd-0:2.0.52-32.3.ent","httpd-0:2.2.3-7.el5","apache-0:1.3.27-12.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3304.json"},{"CVE":"CVE-2007-1863","severity":"moderate","public_date":"2007-05-02T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2007:0557","RHSA-2007:0533","RHSA-2007:0534","RHSA-2007:0556"],"bugzilla":"244658","bugzilla_description":"CVE-2007-1863 httpd mod_cache segfault","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.52-32.2.ent","httpd-0:2.0.59-1.el4s1.7","httpd-0:2.0.46-67.ent","httpd-0:2.2.3-7.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1863.json"},{"CVE":"CVE-2006-3918","severity":"moderate","public_date":"2006-05-08T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2006:0619","RHSA-2006:0692","RHSA-2006:0618","RHSA-2008:0523"],"bugzilla":"200732","bugzilla_description":"CVE-2006-3918 httpd: Expect header XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["httpd-0:2.0.52-28.ent","httpd-0:2.0.46-61.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3918.json"},{"CVE":"CVE-2005-3352","severity":"moderate","public_date":"2005-12-12T00:00:00Z","advisories":["RHSA-2005:882","RHSA-2006:0158","RHSA-2006:0159","RHSA-2006:0692","RHSA-2008:0523"],"bugzilla":"430524","bugzilla_description":"CVE-2005-3352 httpd cross-site scripting flaw in mod_imap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["httpd-0:2.0.46-56.ent","httpd-0:2.0.52-22.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3352.json"},{"CVE":"CVE-2005-3357","severity":"low","public_date":"2005-12-05T00:00:00Z","advisories":["RHSA-2006:0159"],"bugzilla":"1617818","bugzilla_description":"CVE-2005-3357 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-56.ent","httpd-0:2.0.52-22.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3357.json"},{"CVE":"CVE-2005-2970","severity":"low","public_date":"2005-10-25T00:00:00Z","advisories":["RHSA-2006:0159"],"bugzilla":"1617769","bugzilla_description":"CVE-2005-2970 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-56.ent","httpd-0:2.0.52-22.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2970.json"},{"CVE":"CVE-2005-2700","severity":"important","public_date":"2005-08-30T00:00:00Z","advisories":["RHSA-2005:773","RHSA-2005:882","RHSA-2005:816","RHSA-2005:608"],"bugzilla":"1617741","bugzilla_description":"CVE-2005-2700 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-46.3.ent","httpd-0:2.0.52-12.2.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2700.json"},{"CVE":"CVE-2005-2088","severity":"moderate","public_date":"2005-06-12T00:00:00Z","advisories":["RHSA-2005:582"],"bugzilla":"1617682","bugzilla_description":"CVE-2005-2088 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.52-12.1.ent","httpd-0:2.0.46-46.2.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2088.json"},{"CVE":"CVE-2005-1268","severity":"low","public_date":"2005-06-08T00:00:00Z","advisories":["RHSA-2005:582"],"bugzilla":"1617625","bugzilla_description":"CVE-2005-1268 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.52-12.1.ent","httpd-0:2.0.46-46.2.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1268.json"},{"CVE":"CVE-2004-0942","severity":"important","public_date":"2004-11-01T00:00:00Z","advisories":["RHSA-2004:562"],"bugzilla":"1617326","bugzilla_description":"CVE-2004-0942 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-44.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0942.json"},{"CVE":"CVE-2004-0885","severity":"moderate","public_date":"2004-10-05T00:00:00Z","advisories":["RHSA-2008:0261","RHSA-2005:816","RHSA-2004:562","RHSA-2004:653","RHSA-2004:600","RHSA-2008:0524","RHSA-2008:0523"],"bugzilla":"430637","bugzilla_description":"CVE-2004-0885 mod_ssl SSLCipherSuite bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-44.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0885.json"},{"CVE":"CVE-2004-0747","severity":"low","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:463"],"bugzilla":"1617261","bugzilla_description":"CVE-2004-0747 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-40.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0747.json"},{"CVE":"CVE-2004-0751","severity":"low","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:463"],"bugzilla":"1617264","bugzilla_description":"CVE-2004-0751 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-40.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0751.json"},{"CVE":"CVE-2004-0786","severity":"moderate","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:463"],"bugzilla":"1617289","bugzilla_description":"CVE-2004-0786 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-40.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0786.json"},{"CVE":"CVE-2004-0809","severity":"low","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:463"],"bugzilla":"1617299","bugzilla_description":"CVE-2004-0809 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-40.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0809.json"},{"CVE":"CVE-2004-0748","severity":"important","public_date":"2004-07-07T00:00:00Z","advisories":["RHSA-2004:349"],"bugzilla":"1617262","bugzilla_description":"CVE-2004-0748 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-38.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0748.json"},{"CVE":"CVE-2005-2728","severity":"moderate","public_date":"2004-07-07T00:00:00Z","advisories":["RHSA-2005:608"],"bugzilla":"1617753","bugzilla_description":"CVE-2005-2728 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-46.3.ent","httpd-0:2.0.52-12.2.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2728.json"},{"CVE":"CVE-2004-0493","severity":"important","public_date":"2004-06-28T00:00:00Z","advisories":["RHSA-2004:342"],"bugzilla":"1617211","bugzilla_description":"CVE-2004-0493 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-32.ent.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0493.json"},{"CVE":"CVE-2004-0488","severity":"moderate","public_date":"2004-05-17T00:00:00Z","advisories":["RHSA-2004:405","RHSA-2005:816","RHSA-2004:342","RHSA-2004:245","RHSA-2008:0523"],"bugzilla":"430867","bugzilla_description":"CVE-2004-0488 mod_ssl ssl_util_uuencode_binary CA issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-32.ent.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0488.json"},{"CVE":"CVE-2004-1834","severity":"moderate","public_date":"2004-03-20T00:00:00Z","advisories":["RHSA-2004:562"],"bugzilla":"1617419","bugzilla_description":"CVE-2004-1834 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-44.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1834.json"},{"CVE":"CVE-2004-0113","severity":null,"public_date":"2004-02-20T00:00:00Z","advisories":["RHSA-2004:182","RHSA-2004:084"],"bugzilla":"1617157","bugzilla_description":"CVE-2004-0113 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-32.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0113.json"},{"CVE":"CVE-2003-0542","severity":"low","public_date":"2003-10-29T00:00:00Z","advisories":["RHSA-2003:405","RHSA-2003:360","RHSA-2005:816","RHSA-2003:320","RHSA-2004:015","RHSA-2004:139"],"bugzilla":"1617048","bugzilla_description":"CVE-2003-0542 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-26.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0542.json"},{"CVE":"CVE-2003-1418","severity":"low","public_date":"2003-02-25T00:00:00Z","advisories":[],"bugzilla":"733043","bugzilla_description":"CVE-2003-1418 httpd information disclosure in FileEtag","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-1418.json"},{"CVE":"CVE-2001-0131","severity":"low","public_date":"2001-01-10T00:00:00Z","advisories":[],"bugzilla":"1886967","bugzilla_description":"CVE-2001-0131 httpd: allows local users to overwrite arbitrary files via a symlink attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2001-0131.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-af_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-af_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-af_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ak_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ak_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ak_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-am_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-am_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-am_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-as_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-as_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-as_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ast_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ast_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ast_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-az_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-az_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-az_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-be_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-be_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-be_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ber_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ber_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ber_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-bg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-bg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-bg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-bn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-bn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-bn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-br_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-br_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-br_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-csb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-csb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-csb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-cy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-da_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-da_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-da_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-de_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-de_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-de_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-dsb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-dsb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-dsb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-el_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-el_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-el_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-en-GB_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-en-GB_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-en-GB_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-en-US_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-en-US_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-en-US_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-en_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-en_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-en_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-eo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-eo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-eo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-es_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-es_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-es_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-et_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-et_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-et_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-eu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-eu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-eu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fj_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fj_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fj_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fur_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fur_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fur_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-fy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ga_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ga_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-grc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-grc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-grc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-gv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-haw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-haw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-haw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-he_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-he_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-he_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hsb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hsb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hsb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ht_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ht_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ht_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-hy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-id_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-id_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-id_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-is_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-is_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-is_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-it_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-it_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-it_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-kk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-kk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-kk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-km_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-km_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-km_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-kn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-kn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-kn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ku_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ku_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ku_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ky_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ky_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ky_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-la_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-la_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-la_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-lb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-lb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-lb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ln_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ln_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ln_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-lt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-lt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-lt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-lv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-lv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-lv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mai_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mai_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mai_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mos_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mos_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mos_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ms_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ms_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ms_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-mt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ne_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ne_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ne_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nso_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nso_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-nso_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ny_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ny_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ny_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-oc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-oc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-oc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-om_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-om_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-om_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-or_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-or_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-or_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-pa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-pa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-pa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-pl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-pl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-pl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-pt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-pt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-pt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-qu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-qu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-qu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-quh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-quh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-quh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ru_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ru_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ru_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-rw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-rw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-rw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-se_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-se_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-se_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-shs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-shs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-shs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-si_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-si_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-si_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-smj_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-smj_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-smj_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-so_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-so_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-so_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sq_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sq_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-st_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-st_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-st_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-sw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-te_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-te_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-te_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-th_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-th_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-th_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ti_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ti_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ti_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-tpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-uk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-uk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-uk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ur_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ur_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ur_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-uz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-uz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-uz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ve_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ve_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-ve_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-vi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-vi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-vi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-wa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-wa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-wa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-xh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-xh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-xh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-yi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-yi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-yi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-zu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-zu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell-zu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell_security_api_results.json
new file mode 100644
index 0000000..fdde65f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hunspell_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-16707","severity":"low","public_date":"2019-03-18T00:00:00Z","advisories":["RHSA-2020:3971"],"bugzilla":"1771026","bugzilla_description":"CVE-2019-16707 hunspell: out-of-bounds read in SuggestMgr::leftcommonsubstring in suggestmgr.cxx","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":["hunspell-0:1.3.2-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16707.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"5.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hwdata_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hwdata_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hwdata_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hwloc-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hwloc-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hwloc-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hwloc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hwloc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hwloc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyperv-daemons-license_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyperv-daemons-license_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyperv-daemons-license_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyperv-daemons_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyperv-daemons_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyperv-daemons_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hypervfcopyd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hypervfcopyd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hypervfcopyd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hypervkvpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hypervkvpd_security_api_results.json
new file mode 100644
index 0000000..4186c05
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hypervkvpd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-5532","severity":"low","public_date":"2012-06-06T00:00:00Z","advisories":["RHSA-2013:0807"],"bugzilla":"877572","bugzilla_description":"CVE-2012-5532 hypervkvpd: Netlink source address validation allows denial of service","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["hypervkvpd-0:0-0.7.el5_9.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5532.json"},{"CVE":"CVE-2012-2669","severity":"low","public_date":"2012-05-08T00:00:00Z","advisories":[],"bugzilla":"893728","bugzilla_description":"CVE-2012-2669 hypervkvpd: fails to check origin of netlink messages","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2669.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hypervvssd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hypervvssd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hypervvssd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-af_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-af_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-af_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-as_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-as_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-as_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-be_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-be_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-be_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-bg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-bg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-bg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-bn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-bn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-bn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-cs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-cs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-cs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-cy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-cy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-cy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-da_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-da_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-da_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-de_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-de_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-de_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-el_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-el_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-el_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-en_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-en_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-en_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-es_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-es_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-es_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-et_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-et_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-et_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-eu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-eu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-eu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-fa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-fa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-fa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-fo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-fo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-fo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-fr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-fr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-fr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ga_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ga_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-gl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-gl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-gl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-grc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-grc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-grc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-gu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-gu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-gu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hsb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hsb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hsb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-hu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-id_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-id_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-id_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-is_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-is_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-is_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-it_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-it_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-it_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-kn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-kn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-kn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ku_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ku_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ku_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-lt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-lt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-lt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-lv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-lv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-lv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-mi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-mi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-mi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-mn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-mn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-mn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-mr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-mr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-mr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-nb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-nb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-nb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-nl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-nl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-nl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-nn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-nn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-nn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-or_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-or_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-or_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-pa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-pa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-pa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-pl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-pl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-pl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-pt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-pt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-pt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ru_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ru_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ru_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-sv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-ta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-te_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-te_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-te_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-tk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-tk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-tk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-uk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-uk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-uk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-zu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-zu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen-zu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/hyphen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/i2c-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/i2c-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/i2c-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibacm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibacm_security_api_results.json
new file mode 100644
index 0000000..33cc02c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibacm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-4518","severity":"low","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2013:0509"],"bugzilla":"865499","bugzilla_description":"CVE-2012-4518 ibacm: ibacm service files created with world writable permissions (DoS)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ibacm-0:1.0.8-0.git7a3adb7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4518.json"},{"CVE":"CVE-2012-4517","severity":"low","public_date":"2012-04-04T00:00:00Z","advisories":["RHSA-2013:0509"],"bugzilla":"865492","bugzilla_description":"CVE-2012-4517 ibacm: DoS (ibacm deamon crash) by joining responses for multicast destinations","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ibacm-0:1.0.8-0.git7a3adb7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4517.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-chewing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-chewing_security_api_results.json
new file mode 100644
index 0000000..f9eb68d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-chewing_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4509","severity":"low","public_date":"2013-10-25T00:00:00Z","advisories":[],"bugzilla":"1027028","bugzilla_description":"CVE-2013-4509 ibus: visible password entry flaw","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4509.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-gtk2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-gtk2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-gtk2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-hangul_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-hangul_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-hangul_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-kkc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-kkc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-kkc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-libpinyin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-libpinyin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-libpinyin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-m17n_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-m17n_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-m17n_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-qt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-qt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-qt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-rawcode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-rawcode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-rawcode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-sayura_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-sayura_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-sayura_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-setup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-setup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-setup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-table-chinese_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-table-chinese_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-table-chinese_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-table_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-table_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-table_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-typing-booster_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-typing-booster_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus-typing-booster_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus_security_api_results.json
new file mode 100644
index 0000000..6ed5c52
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibus_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14822","severity":"moderate","public_date":"2019-09-13T07:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1880","RHSA-2020:3978"],"bugzilla":"1717958","bugzilla_description":"CVE-2019-14822 ibus: missing authorization allows local attacker to access the input bus of another user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["ibus-0:1.5.19-11.el8","ibus-0:1.5.17-11.el7","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14822.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2015-3245","severity":"moderate","public_date":"2015-07-23T00:00:00Z","advisories":["RHSA-2015:1483","RHSA-2015:1482"],"bugzilla":"1233043","bugzilla_description":"CVE-2015-3245 libuser: does not filter newline characters in the GECOS field","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-138","affected_packages":["libuser-0:0.56.13-8.el6_7","libuser-0:0.60-7.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3245.json"},{"CVE":"CVE-2015-3246","severity":"important","public_date":"2015-07-23T00:00:00Z","advisories":["RHSA-2015:1483","RHSA-2015:1482"],"bugzilla":"1233052","bugzilla_description":"CVE-2015-3246 libuser: Security flaw in handling /etc/passwd file","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["libuser-0:0.56.13-8.el6_7","libuser-0:0.60-7.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3246.json"},{"CVE":"CVE-2013-4509","severity":"low","public_date":"2013-10-25T00:00:00Z","advisories":[],"bugzilla":"1027028","bugzilla_description":"CVE-2013-4509 ibus: visible password entry flaw","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4509.json"},{"CVE":"CVE-2012-5630","severity":"low","public_date":"2013-03-28T00:00:00Z","advisories":[],"bugzilla":"884685","bugzilla_description":"CVE-2012-5630 libuser: TOCTOU race conditions by copying and removing directory trees","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5630.json"},{"CVE":"CVE-2012-5644","severity":"low","public_date":"2013-03-28T00:00:00Z","advisories":[],"bugzilla":"885724","bugzilla_description":"CVE-2012-5644 libuser: (Complete) Information disclosure when moving user's home directory","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5644.json"},{"CVE":"CVE-2011-0002","severity":"moderate","public_date":"2011-01-10T00:00:00Z","advisories":["RHSA-2011:0170"],"bugzilla":"643227","bugzilla_description":"CVE-2011-0002 libuser creates LDAP users with a default password","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["libuser-0:0.54.7-2.1.el5_5.2","libuser-0:0.52.5-1.1.el4_8.1","libuser-0:0.56.13-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0002.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibutils-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibutils-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibutils-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibutils_security_api_results.json
new file mode 100644
index 0000000..b3e8a61
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ibutils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10773","severity":"low","public_date":"2018-05-07T00:00:00Z","advisories":[],"bugzilla":"1577258","bugzilla_description":"CVE-2018-10773 bibutils: NULL pointer deference in addsn function in serialno.c in libbibcore.a","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10773.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-10774","severity":"low","public_date":"2018-05-07T00:00:00Z","advisories":[],"bugzilla":"1577268","bugzilla_description":"CVE-2018-10774 bibutils: Out-of-bounds Read in isiin_keyword function in isiin.c in libbibutils.a","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10774.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-10775","severity":"low","public_date":"2018-05-05T00:00:00Z","advisories":[],"bugzilla":"1577280","bugzilla_description":"CVE-2018-10775 bibutils: NULL pointer dereference in _fields_add function in fields.c in libbibcore.a","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10775.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2013-2561","severity":"moderate","public_date":"2013-03-06T00:00:00Z","advisories":["RHSA-2013:1661"],"bugzilla":"927430","bugzilla_description":"CVE-2013-2561 ibutils: insecure handling of files in the /tmp directory","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:C/A:N","CWE":null,"affected_packages":["ibutils-0:1.5.7-8.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2561.json"},{"CVE":"CVE-2008-3277","severity":"low","public_date":"2008-06-12T00:00:00Z","advisories":["RHSA-2012:0311"],"bugzilla":"457935","bugzilla_description":"CVE-2008-3277 ibutils: insecure relative RPATH","cvss_score":3.5,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["ibutils-0:1.2-11.2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3277.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/icedax_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/icedax_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/icedax_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/icedtea-web_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/icedtea-web_security_api_results.json
new file mode 100644
index 0000000..d101ca8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/icedtea-web_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-10181","severity":"moderate","public_date":"2019-07-31T13:42:00Z","advisories":["RHSA-2019:2003","RHSA-2019:2004"],"bugzilla":"1725928","bugzilla_description":"CVE-2019-10181 icedtea-web: unsigned code injection in a signed JAR file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["icedtea-web-0:1.7.1-2.el7_6","icedtea-web-0:1.7.1-17.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-10185","severity":"important","public_date":"2019-07-31T13:41:00Z","advisories":["RHSA-2019:2003","RHSA-2019:2004"],"bugzilla":"1724989","bugzilla_description":"CVE-2019-10185 icedtea-web: directory traversal in the nested jar auto-extraction leading to arbitrary file overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["icedtea-web-0:1.7.1-2.el7_6","icedtea-web-0:1.7.1-17.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L","cvss3_score":"8.2"},{"CVE":"CVE-2019-10182","severity":"important","public_date":"2019-07-31T13:40:00Z","advisories":["RHSA-2019:2003","RHSA-2019:2004"],"bugzilla":"1724958","bugzilla_description":"CVE-2019-10182 icedtea-web: path traversal while processing <jar/> elements of JNLP files results in arbitrary file overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22->CWE-94","affected_packages":["icedtea-web-0:1.7.1-2.el7_6","icedtea-web-0:1.7.1-17.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L","cvss3_score":"8.2"},{"CVE":"CVE-2015-5234","severity":"moderate","public_date":"2015-09-02T00:00:00Z","advisories":["RHSA-2016:0778","RHBA-2015:2457"],"bugzilla":"1233667","bugzilla_description":"CVE-2015-5234 icedtea-web: unexpected permanent authorization of unsigned applets","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-138","affected_packages":["icedtea-web-0:1.6.2-1.el6","icedtea-web-0:1.6.1-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5234.json"},{"CVE":"CVE-2015-5235","severity":"moderate","public_date":"2015-09-02T00:00:00Z","advisories":["RHSA-2016:0778","RHBA-2015:2457"],"bugzilla":"1233697","bugzilla_description":"CVE-2015-5235 icedtea-web: applet origin spoofing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-345","affected_packages":["icedtea-web-0:1.6.2-1.el6","icedtea-web-0:1.6.1-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5235.json"},{"CVE":"CVE-2013-6493","severity":"moderate","public_date":"2014-02-05T00:00:00Z","advisories":["RHBA-2014:1417"],"bugzilla":"1010958","bugzilla_description":"CVE-2013-6493 icedtea-web: insecure temporary file use flaw in LiveConnect implementation","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":["icedtea-web-0:1.5.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6493.json"},{"CVE":"CVE-2013-4349","severity":"critical","public_date":"2013-09-16T00:00:00Z","advisories":[],"bugzilla":"1007960","bugzilla_description":"CVE-2013-4349 icedtea-web: CVE-2012-4540 issue not fixed in 1.4","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4349.json"},{"CVE":"CVE-2013-1927","severity":"moderate","public_date":"2013-04-17T00:00:00Z","advisories":["RHSA-2013:0753"],"bugzilla":"884705","bugzilla_description":"CVE-2013-1927 icedtea-web: GIFAR issue","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.2.3-2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1927.json"},{"CVE":"CVE-2013-1926","severity":"moderate","public_date":"2013-04-17T00:00:00Z","advisories":["RHSA-2013:0753"],"bugzilla":"916774","bugzilla_description":"CVE-2013-1926 icedtea-web: class loader sharing for applets with same codebase paths","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.2.3-2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1926.json"},{"CVE":"CVE-2012-4540","severity":"critical","public_date":"2012-11-07T00:00:00Z","advisories":["RHSA-2012:1434"],"bugzilla":"869040","bugzilla_description":"CVE-2012-4540 icedtea-web: IcedTeaScriptableJavaObject::invoke off-by-one heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["icedtea-web-0:1.2.2-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4540.json"},{"CVE":"CVE-2012-3422","severity":"important","public_date":"2012-07-31T00:00:00Z","advisories":["RHSA-2012:1132"],"bugzilla":"840592","bugzilla_description":"CVE-2012-3422 icedtea-web: getvalueforurl uninitialized instance pointer","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["icedtea-web-0:1.2.1-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3422.json"},{"CVE":"CVE-2012-3423","severity":"important","public_date":"2012-07-31T00:00:00Z","advisories":["RHSA-2012:1132"],"bugzilla":"841345","bugzilla_description":"CVE-2012-3423 icedtea-web: incorrect handling of not 0-terminated strings","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["icedtea-web-0:1.2.1-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3423.json"},{"CVE":"CVE-2011-3377","severity":"moderate","public_date":"2011-11-08T00:00:00Z","advisories":["RHSA-2011:1441"],"bugzilla":"742515","bugzilla_description":"CVE-2011-3377 IcedTea-Web: second-level domain subdomains and suffix domain SOP bypass","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.0.6-1.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3377.json"},{"CVE":"CVE-2011-2513","severity":"low","public_date":"2011-07-20T00:00:00Z","advisories":["RHSA-2011:1100"],"bugzilla":"718164","bugzilla_description":"CVE-2011-2513 icedtea, icedtea-web: home directory path disclosure to untrusted applications","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.0.4-2.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2513.json"},{"CVE":"CVE-2011-2514","severity":"moderate","public_date":"2011-07-20T00:00:00Z","advisories":["RHSA-2011:1100"],"bugzilla":"718170","bugzilla_description":"CVE-2011-2514 icedtea-web: Java Web Start security warning dialog manipulation","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["icedtea-web-0:1.0.4-2.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2514.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/icoutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/icoutils_security_api_results.json
new file mode 100644
index 0000000..307bf70
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/icoutils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-6009","severity":"important","public_date":"2017-02-03T00:00:00Z","advisories":["RHSA-2017:0837"],"bugzilla":"1422906","bugzilla_description":"CVE-2017-6009 icoutils: Buffer overflow in the decode_ne_resource_id function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["icoutils-0:0.31.3-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6009.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L","cvss3_score":"8.1"},{"CVE":"CVE-2017-6010","severity":"moderate","public_date":"2017-02-03T00:00:00Z","advisories":["RHSA-2017:0837"],"bugzilla":"1422907","bugzilla_description":"CVE-2017-6010 icoutils: Buffer overflow in the extract_icons function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["icoutils-0:0.31.3-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6010.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L","cvss3_score":"8.1"},{"CVE":"CVE-2017-6011","severity":"moderate","public_date":"2017-02-03T00:00:00Z","advisories":["RHSA-2017:0837"],"bugzilla":"1422908","bugzilla_description":"CVE-2017-6011 icoutils: Buffer overflow in the simple_vec function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["icoutils-0:0.31.3-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6011.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L","cvss3_score":"8.1"},{"CVE":"CVE-2017-5208","severity":"important","public_date":"2017-01-08T00:00:00Z","advisories":["RHSA-2017:0837"],"bugzilla":"1411251","bugzilla_description":"CVE-2017-5208 icoutils: Check_offset overflow on 64-bit systems","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["icoutils-0:0.31.3-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5208.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L","cvss3_score":"8.1"},{"CVE":"CVE-2017-5331","severity":"moderate","public_date":"2017-01-08T00:00:00Z","advisories":[],"bugzilla":"1412248","bugzilla_description":"CVE-2017-5331 icoutils: Check_offset overflow on 64-bit systems","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5331.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5333","severity":"important","public_date":"2017-01-08T00:00:00Z","advisories":["RHSA-2017:0837"],"bugzilla":"1412259","bugzilla_description":"CVE-2017-5333 icoutils: Integer overflow vulnerability in extract.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["icoutils-0:0.31.3-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5333.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L","cvss3_score":"8.1"},{"CVE":"CVE-2017-5332","severity":"moderate","public_date":"2017-01-08T00:00:00Z","advisories":["RHSA-2017:0837"],"bugzilla":"1412263","bugzilla_description":"CVE-2017-5332 icoutils: Access to unallocated memory possible in extract.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["icoutils-0:0.31.3-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5332.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ilmbase_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ilmbase_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ilmbase_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/im-chooser-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/im-chooser-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/im-chooser-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/im-chooser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/im-chooser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/im-chooser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ima-evm-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ima-evm-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ima-evm-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imake_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imake_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imake_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings-gsettings_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings-gsettings_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings-gsettings_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings-qt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings-qt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings-qt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/imsettings_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/indent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/indent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/indent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/infiniband-diags_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/infiniband-diags_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/infiniband-diags_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/infinipath-psm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/infinipath-psm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/infinipath-psm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/info_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/info_security_api_results.json
new file mode 100644
index 0000000..816198b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/info_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-13313","severity":"low","public_date":"2019-07-05T00:00:00Z","advisories":["RHSA-2019:3387","RHSA-2020:1051"],"bugzilla":"1727766","bugzilla_description":"CVE-2019-13313 Libosinfo: osinfo-install-script option leaks password via command line argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-214->CWE-200","affected_packages":["libosinfo-0:1.1.0-5.el7","libosinfo-0:1.5.0-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2016-9181","severity":"low","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1379556","bugzilla_description":"CVE-2016-9181 perl-Image-Info: XXE in SVG files","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2006-4810","severity":"moderate","public_date":"2006-11-08T00:00:00Z","advisories":["RHSA-2006:0727"],"bugzilla":"1618203","bugzilla_description":"CVE-2006-4810 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["texinfo-0:4.5-3.el3.1","texinfo-0:4.7-5.el4.2","texinfo-0:4.0b-3.el2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4810.json"},{"CVE":"CVE-2005-3011","severity":"low","public_date":"2000-02-09T00:00:00Z","advisories":["RHSA-2006:0727"],"bugzilla":"1617775","bugzilla_description":"CVE-2005-3011 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["texinfo-0:4.5-3.el3.1","texinfo-0:4.7-5.el4.2","texinfo-0:4.0b-3.el2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3011.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iniparser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iniparser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iniparser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/initial-setup-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/initial-setup-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/initial-setup-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/initial-setup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/initial-setup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/initial-setup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/initscripts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/initscripts_security_api_results.json
new file mode 100644
index 0000000..21d0096
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/initscripts_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4169","severity":"important","public_date":"2013-09-05T00:00:00Z","advisories":["RHSA-2013:1213"],"bugzilla":"988498","bugzilla_description":"CVE-2013-4169 gdm: TOCTTOU race condition on /tmp/.X11-unix","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"(CWE-367|CWE-377)->CWE-552","affected_packages":["gdm-1:2.16.0-59.el5_9.1","initscripts-0:8.45.42-2.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4169.json"},{"CVE":"CVE-2008-1198","severity":"low","public_date":"2008-02-28T00:00:00Z","advisories":["RHSA-2012:0312"],"bugzilla":"435274","bugzilla_description":"CVE-2008-1198 initscripts: IPSec ifup script allows for aggressive IKE mode","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["initscripts-0:8.45.42-1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1198.json"},{"CVE":"CVE-2005-3629","severity":"moderate","public_date":"2005-03-07T00:00:00Z","advisories":["RHSA-2006:0015","RHSA-2006:0016"],"bugzilla":"1617831","bugzilla_description":"CVE-2005-3629 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["initscripts-0:7.31.30.EL-1","initscripts-0:7.93.24.EL-1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3629.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/inkscape_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/inkscape_security_api_results.json
new file mode 100644
index 0000000..188f07c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/inkscape_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-27560","severity":"low","public_date":"2020-10-18T00:00:00Z","advisories":[],"bugzilla":"1890687","bugzilla_description":"CVE-2020-27560 ImageMagick: division by zero in OptimizeLayerFrames function in MagickCore/layer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27560.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2012-1610","severity":"moderate","public_date":"2020-07-31T00:00:00Z","advisories":[],"bugzilla":"1868354","bugzilla_description":"CVE-2012-1610 ImageMagick: integer overflow in the GetEXIFProperty function in magick/property.c could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1610.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12825","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:3654","RHBA-2020:3609","RHSA-2020:4072"],"bugzilla":"1835377","bugzilla_description":"CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["redhat-coreos-43.82.202009181853.0","libcroco-0:0.6.12-4.el8_2.1","libcroco-0:0.6.12-6.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2012-5656","severity":"low","public_date":"2012-12-17T00:00:00Z","advisories":[],"bugzilla":"888249","bugzilla_description":"CVE-2012-5656 inkscape: XXE via SVG rasterization","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5656.json"},{"CVE":"CVE-2012-6076","severity":"low","public_date":"2012-03-04T00:00:00Z","advisories":[],"bugzilla":"891331","bugzilla_description":"CVE-2012-6076 inkscape: Reads .eps files from /tmp instead of current working directory","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6076.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/insights-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/insights-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/insights-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/intel-cmt-cat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/intel-cmt-cat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/intel-cmt-cat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/intltool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/intltool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/intltool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iok_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iok_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iok_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iotop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iotop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iotop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iowatcher_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iowatcher_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iowatcher_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-client-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-client-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-client-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-client_security_api_results.json
new file mode 100644
index 0000000..35116c2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-client_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-5484","severity":"important","public_date":"2013-01-23T00:00:00Z","advisories":["RHSA-2013:0188","RHSA-2013:0189"],"bugzilla":"876307","bugzilla_description":"CVE-2012-5484 ipa: weakness when initiating join from IPA client can potentially compromise IPA domain","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["ipa-client-0:2.1.3-5.el5_9.2","ipa-0:2.2.0-17.el6_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5484.json"},{"CVE":"CVE-2012-5631","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":[],"bugzilla":"886369","bugzilla_description":"CVE-2012-5631 ipa: client does not properly check server identity before sending cookies that contain credentials","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5631.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-gothic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-gothic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-gothic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-mincho-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-mincho-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-mincho-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-pgothic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-pgothic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-pgothic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-pmincho-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-pmincho-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-pmincho-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-python-compat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-python-compat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-python-compat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server-dns_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server-dns_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server-dns_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server-trust-ad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server-trust-ad_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server-trust-ad_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server_security_api_results.json
new file mode 100644
index 0000000..202c21d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipa-server_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-2222","severity":"important","public_date":"2010-07-01T00:00:00Z","advisories":[],"bugzilla":"604783","bugzilla_description":"CVE-2010-2222 redhat-ds/389: null deref in _ger_parse_control() for subjectdn can crash server","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2222.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iperf3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iperf3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iperf3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipmitool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipmitool_security_api_results.json
new file mode 100644
index 0000000..714cc4e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipmitool_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-5208","severity":"important","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:2213","RHSA-2020:1486","RHSA-2020:1331","RHSA-2020:0981","RHSA-2020:2286","RHSA-2020:2276","RHSA-2020:2284","RHSA-2020:0979","RHSA-2020:0984"],"bugzilla":"1798721","bugzilla_description":"CVE-2020-5208 ipmitool: Buffer overflow in read_fru_area_section function in lib/ipmi_fru.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["ipmitool-0:1.8.18-9.el7_6","ipmitool-0:1.8.18-9.el7_7","ipmitool-0:1.8.13-10.el7_2","ipmitool-0:1.8.18-9.el7_5","ipmitool-0:1.8.15-8.el7_3","ipmitool-0:1.8.15-3.el6_10","ipmitool-0:1.8.18-12.el8_1","ipmitool-0:1.8.18-12.el8_0","ipmitool-0:1.8.18-6.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5208.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2011-4339","severity":"moderate","public_date":"2011-12-13T00:00:00Z","advisories":["RHSA-2011:1814","RHSA-2013:0123"],"bugzilla":"742837","bugzilla_description":"CVE-2011-4339 OpenIPMI: IPMI event daemon creates PID file with world writeable permissions","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["OpenIPMI-0:2.0.16-16.el5","ipmitool-0:1.8.11-12.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4339.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iproute_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iproute_security_api_results.json
new file mode 100644
index 0000000..25e4cb7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iproute_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-20795","severity":"low","public_date":"2019-05-05T00:00:00Z","advisories":[],"bugzilla":"1868211","bugzilla_description":"CVE-2019-20795 iproute: use-after-free in get_netnsid_from_name in ip/ipnetns.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20795.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2012-1088","severity":"low","public_date":"2012-02-15T00:00:00Z","advisories":[],"bugzilla":"797878","bugzilla_description":"CVE-2012-1088 iproute: multiple insecure temporary file use issues","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1088.json"},{"CVE":"CVE-2003-0856","severity":"low","public_date":"2003-11-12T00:00:00Z","advisories":["RHSA-2003:317","RHSA-2003:316"],"bugzilla":"1617095","bugzilla_description":"CVE-2003-0856 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["iproute-0:2.4.7-11.30E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0856.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iprutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iprutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iprutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipset-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipset-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipset-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipset-service_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipset-service_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipset-service_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipset_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipset_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipset_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-authform_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-authform_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-authform_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-authgssapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-authgssapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-authgssapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-authldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-authldap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-authldap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-infosssd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-infosssd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-infosssd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-persona_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-persona_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-persona_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-saml2-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-saml2-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-saml2-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-saml2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-saml2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-saml2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-tools-ipa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-tools-ipa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon-tools-ipa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon_security_api_results.json
new file mode 100644
index 0000000..211f6ab
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipsilon_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2016-8638","severity":"important","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2016:2809"],"bugzilla":"1392829","bugzilla_description":"CVE-2016-8638 ipsilon: DoS via logging out all open SAML2 sessions","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-287","affected_packages":["ipsilon-0:1.0.0-13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2015-5301","severity":"moderate","public_date":"2015-10-14T00:00:00Z","advisories":[],"bugzilla":"1271530","bugzilla_description":"CVE-2015-5301 ipsilon: missing user authorization check when deleting a service provider","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5301.json"},{"CVE":"CVE-2015-5215","severity":"moderate","public_date":"2015-08-19T00:00:00Z","advisories":[],"bugzilla":"1255168","bugzilla_description":"CVE-2015-5215 ipsilon: XSS in multiple pages","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5215.json"},{"CVE":"CVE-2015-5216","severity":"moderate","public_date":"2015-08-19T00:00:00Z","advisories":[],"bugzilla":"1255170","bugzilla_description":"CVE-2015-5216 ipsilon: XSS due to exception handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5216.json"},{"CVE":"CVE-2015-5217","severity":"moderate","public_date":"2015-08-19T00:00:00Z","advisories":[],"bugzilla":"1255172","bugzilla_description":"CVE-2015-5217 ipsilon: Input validation flaw in handling of user supplied data","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5217.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptables-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptables-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptables-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptables-services_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptables-services_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptables-services_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptables_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptables_security_api_results.json
new file mode 100644
index 0000000..26dd1a9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptables_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-2663","severity":"moderate","public_date":"2011-12-02T00:00:00Z","advisories":[],"bugzilla":"826702","bugzilla_description":"CVE-2012-2663 iptables: --syn flag bypass","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2663.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptraf-ng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptraf-ng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptraf-ng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptstate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptstate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iptstate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iputils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iputils_security_api_results.json
new file mode 100644
index 0000000..9fb3001
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iputils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-2529","severity":"low","public_date":"2010-07-23T00:00:00Z","advisories":[],"bugzilla":"613819","bugzilla_description":"CVE-2010-2529 iputils: denial of service vulnerability in ping","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2529.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipvsadm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipvsadm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipvsadm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipxe-bootimgs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipxe-bootimgs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipxe-bootimgs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipxe-roms-qemu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipxe-roms-qemu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ipxe-roms-qemu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/irqbalance_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/irqbalance_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/irqbalance_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/irssi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/irssi_security_api_results.json
new file mode 100644
index 0000000..089f2d2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/irssi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-15717","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":[],"bugzilla":"1747346","bugzilla_description":"CVE-2019-15717 Irssi: use-after-free if the IRC server sends double CAP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15717.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13045","severity":"low","public_date":"2019-06-29T00:00:00Z","advisories":["RHSA-2020:1616"],"bugzilla":"1727683","bugzilla_description":"CVE-2019-13045 irssi: use after free when sending SASL login to server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["irssi-0:1.1.1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13045.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-5882","severity":"low","public_date":"2019-01-10T00:00:00Z","advisories":[],"bugzilla":"1665510","bugzilla_description":"CVE-2019-5882 irssi: Use-after-free when hidden lines were expired from the scroll buffer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5882.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-7054","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":[],"bugzilla":"1546223","bugzilla_description":"CVE-2018-7054 irssi: use-after-free when a server is disconnected during netsplits","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-7053","severity":"low","public_date":"2018-02-13T00:00:00Z","advisories":[],"bugzilla":"1546226","bugzilla_description":"CVE-2018-7053 irssi: use-after-free when SASL messages are received in unexpected order","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-7050","severity":"low","public_date":"2018-02-13T00:00:00Z","advisories":[],"bugzilla":"1546280","bugzilla_description":"CVE-2018-7050 irssi: Null pointer dereference when an \"empty\" nick joins a channel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7050.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2018-7051","severity":"low","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1546275","bugzilla_description":"CVE-2018-7051 irssi: out-of-bounds access when printing theme strings with certain nick names","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7051.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-7052","severity":"low","public_date":"2018-02-02T00:00:00Z","advisories":[],"bugzilla":"1546272","bugzilla_description":"CVE-2018-7052 irssi: Denial of Service (DoS) due to a NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7052.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5206","severity":"moderate","public_date":"2018-01-06T00:00:00Z","advisories":[],"bugzilla":"1532569","bugzilla_description":"CVE-2018-5206 irssi: NULL pointer dereference when channel topic is set without specifying sender","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5206.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-5205","severity":"moderate","public_date":"2018-01-06T00:00:00Z","advisories":[],"bugzilla":"1532573","bugzilla_description":"CVE-2018-5205 irssi: Out-of-bounds read when using incomplete escape codes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5205.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-5208","severity":"moderate","public_date":"2018-01-06T00:00:00Z","advisories":[],"bugzilla":"1532622","bugzilla_description":"CVE-2018-5208 irssi: heap buffer overflow due to calculation error in the completion code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5208.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-5207","severity":"moderate","public_date":"2018-01-06T00:00:00Z","advisories":[],"bugzilla":"1532624","bugzilla_description":"CVE-2018-5207 irssi: Out-of-bounds read when using an incomplete variable argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-15227","severity":"moderate","public_date":"2017-10-22T00:00:00Z","advisories":[],"bugzilla":"1510951","bugzilla_description":"CVE-2017-15227 irssi: Use-after-free due to failures to remove destroyed channels from the query list","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15227.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15228","severity":"moderate","public_date":"2017-10-22T00:00:00Z","advisories":[],"bugzilla":"1510953","bugzilla_description":"CVE-2017-15228 irssi: Out-of-bounds access when installing themes with unterminated colour formatting sequences","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15228.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15721","severity":"moderate","public_date":"2017-10-22T00:00:00Z","advisories":[],"bugzilla":"1510955","bugzilla_description":"CVE-2017-15721 irssi: NULL pointer dereference due to incorrectly formatted DCC CTCP messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15721.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15722","severity":"moderate","public_date":"2017-10-22T00:00:00Z","advisories":[],"bugzilla":"1510956","bugzilla_description":"CVE-2017-15722 irssi: Out-of-bounds access while verifying that a Safe channel ID is long enough","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15722.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15723","severity":"moderate","public_date":"2017-10-22T00:00:00Z","advisories":[],"bugzilla":"1510958","bugzilla_description":"CVE-2017-15723 irssi: NULL pointer dereference due to overlong nicks while splitting the message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15723.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10965","severity":"low","public_date":"2017-07-05T00:00:00Z","advisories":[],"bugzilla":"1473232","bugzilla_description":"CVE-2017-10965 irssi: NULL pointer dereference when receiving messages with invalid time stamps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10965.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-10966","severity":"low","public_date":"2017-07-05T00:00:00Z","advisories":[],"bugzilla":"1473234","bugzilla_description":"CVE-2017-10966 irssi: Use-after-free while updating the internal nick list","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10966.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-9468","severity":"low","public_date":"2017-06-07T00:00:00Z","advisories":[],"bugzilla":"1459456","bugzilla_description":"CVE-2017-9468 irssi: Null pointer dereference while receiving a DCC message without source nick/host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-9469","severity":"low","public_date":"2017-06-07T00:00:00Z","advisories":[],"bugzilla":"1459457","bugzilla_description":"CVE-2017-9469 irssi: Invalid read when receiving certain incorrectly quoted DCC files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-129","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9469.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5356","severity":"low","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1413890","bugzilla_description":"CVE-2017-5356 irssi: Out-of-bounds read in format string","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5356.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-5193","severity":"low","public_date":"2017-01-05T00:00:00Z","advisories":[],"bugzilla":"1410821","bugzilla_description":"CVE-2017-5193 irssi: Null pointer dereference in the nickcmp function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-5194","severity":"low","public_date":"2017-01-05T00:00:00Z","advisories":[],"bugzilla":"1410824","bugzilla_description":"CVE-2017-5194 irssi: Use after free when receiving invalid nick message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5194.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5195","severity":"moderate","public_date":"2017-01-05T00:00:00Z","advisories":[],"bugzilla":"1410825","bugzilla_description":"CVE-2017-5195 irssi: Out of bounds read in certain incomplete control codes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-5196","severity":"moderate","public_date":"2017-01-05T00:00:00Z","advisories":[],"bugzilla":"1410827","bugzilla_description":"CVE-2017-5196 irssi: Out of bounds read in certain incomplete character sequences","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5196.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7553","severity":"low","public_date":"2016-09-22T00:00:00Z","advisories":[],"bugzilla":"1379270","bugzilla_description":"CVE-2016-7553 irssi: Information disclosure in buf.pl","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7553.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-7044","severity":"moderate","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1378343","bugzilla_description":"CVE-2016-7044 irssi: Unchecked input in unformat_24bit_color() can lead to crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7044.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-7045","severity":"moderate","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1378344","bugzilla_description":"CVE-2016-7045 irssi: String length not validated in format_send_to_gui() causing crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7045.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iscsi-initiator-utils-iscsiuio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iscsi-initiator-utils-iscsiuio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iscsi-initiator-utils-iscsiuio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iscsi-initiator-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iscsi-initiator-utils_security_api_results.json
new file mode 100644
index 0000000..68d8026
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iscsi-initiator-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-17840","severity":"moderate","public_date":"2017-12-22T00:00:00Z","advisories":[],"bugzilla":"1529176","bugzilla_description":"CVE-2017-17840 iscsi-initiator-utils: Heap-based buffer overflow in process_iscsid_broadcast()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2007-3099","severity":"moderate","public_date":"2007-06-11T00:00:00Z","advisories":["RHSA-2007:0497"],"bugzilla":"243719","bugzilla_description":"CVE-2007-3099 dos flaws in open-iscsi (CVE-2007-3100)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["iscsi-initiator-utils-0:6.2.0.742-0.6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3099.json"},{"CVE":"CVE-2007-3100","severity":"moderate","public_date":"2007-06-11T00:00:00Z","advisories":["RHSA-2007:0497"],"bugzilla":"243719","bugzilla_description":"CVE-2007-3099 dos flaws in open-iscsi (CVE-2007-3100)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["iscsi-initiator-utils-0:6.2.0.742-0.6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3100.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isdn4k-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isdn4k-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isdn4k-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isns-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isns-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isns-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iso-codes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iso-codes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iso-codes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isomd5sum_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isomd5sum_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isomd5sum_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isorelax_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isorelax_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/isorelax_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/istack-commons_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/istack-commons_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/istack-commons_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/itstool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/itstool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/itstool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ivtv-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ivtv-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ivtv-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl100-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl100-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl100-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl1000-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl1000-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl1000-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl105-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl105-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl105-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl135-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl135-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl135-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl2000-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl2000-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl2000-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl2030-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl2030-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl2030-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl3160-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl3160-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl3160-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl3945-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl3945-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl3945-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl4965-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl4965-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl4965-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl5000-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl5000-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl5000-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl5150-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl5150-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl5150-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6000-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6000-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6000-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6000g2a-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6000g2a-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6000g2a-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6000g2b-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6000g2b-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6000g2b-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6050-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6050-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl6050-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl7260-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl7260-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwl7260-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwpmd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwpmd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/iwpmd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ixpdimm_sw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ixpdimm_sw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ixpdimm_sw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jackson_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jackson_security_api_results.json
new file mode 100644
index 0000000..4f2ec88
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jackson_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24750","severity":"important","public_date":"2020-09-18T00:00:00Z","advisories":["RHSA-2020:4173"],"bugzilla":"1882310","bugzilla_description":"CVE-2020-24750 jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-24616","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872707","bugzilla_description":"CVE-2020-24616 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24616.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14195","severity":"important","public_date":"2020-06-14T00:00:00Z","advisories":["RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848958","bugzilla_description":"CVE-2020-14195 jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14195.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14060","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848960","bugzilla_description":"CVE-2020-14060 jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14060.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14062","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848962","bugzilla_description":"CVE-2020-14062 jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14062.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14061","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848966","bugzilla_description":"CVE-2020-14061 jackson-databind: serialization in weblogic/oracle-aqjms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14061.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11620","severity":"important","public_date":"2020-04-07T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:3192"],"bugzilla":"1826798","bugzilla_description":"CVE-2020-11620 jackson-databind: Serialization gadgets in commons-jelly:commons-jelly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11620.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11619","severity":"important","public_date":"2020-04-06T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1826805","bugzilla_description":"CVE-2020-11619 jackson-databind: Serialization gadgets in org.springframework:spring-aop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11113","severity":"important","public_date":"2020-03-28T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3817","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821315","bugzilla_description":"CVE-2020-11113 jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11113.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11112","severity":"important","public_date":"2020-03-25T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821311","bugzilla_description":"CVE-2020-11112 jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11112.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11111","severity":"important","public_date":"2020-03-24T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821304","bugzilla_description":"CVE-2020-11111 jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11111.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10968","severity":"important","public_date":"2020-03-22T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819208","bugzilla_description":"CVE-2020-10968 jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10673","severity":"important","public_date":"2020-03-18T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3585","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815470","bugzilla_description":"CVE-2020-10673 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10672","severity":"important","public_date":"2020-03-15T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815495","bugzilla_description":"CVE-2020-10672 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10969","severity":"important","public_date":"2020-03-03T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819212","bugzilla_description":"CVE-2020-10969 jackson-databind: Serialization gadgets in javax.swing.JEditorPane","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10969.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8840","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816330","bugzilla_description":"CVE-2020-8840 jackson-databind: Lacks certain xbean-reflect/JNDI blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9546","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816332","bugzilla_description":"CVE-2020-9546 jackson-databind: Serialization gadgets in shaded-hikari-config","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9546.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9547","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816337","bugzilla_description":"CVE-2020-9547 jackson-databind: Serialization gadgets in ibatis-sqlmap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9547.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9548","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816340","bugzilla_description":"CVE-2020-9548 jackson-databind: Serialization gadgets in anteros-core","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9548.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-25649","severity":"important","public_date":"2020-01-09T00:00:00Z","advisories":["RHSA-2020:4312"],"bugzilla":"1887664","bugzilla_description":"CVE-2020-25649 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25649.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20330","severity":"important","public_date":"2020-01-02T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:0939","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:0951","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1793154","bugzilla_description":"CVE-2019-20330 jackson-databind: lacks certain net.sf.ehcache blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20330.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-10172","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHSA-2020:2059","RHSA-2020:2511","RHSA-2020:2112","RHSA-2020:2058","RHSA-2020:3585","RHSA-2020:2060","RHSA-2020:2061","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3192","RHSA-2020:2512","RHSA-2020:2513"],"bugzilla":"1715075","bugzilla_description":"CVE-2019-10172 jackson-mapper-asl: XML external entity similar to CVE-2016-3720","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10172.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-17531","severity":"moderate","public_date":"2019-10-12T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2019:4192","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1775293","bugzilla_description":"CVE-2019-17531 jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.8.el7","pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17531.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-16942","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758187","bugzilla_description":"CVE-2019-16942 jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16943","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758191","bugzilla_description":"CVE-2019-16943 jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16943.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14893","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758182","bugzilla_description":"CVE-2019-14893 jackson-databind: Serialization gadgets in classes of the xalan package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14892","severity":"moderate","public_date":"2019-09-19T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758171","bugzilla_description":"CVE-2019-14892 jackson-databind: Serialization gadgets in classes of the commons-configuration package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14892.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-17267","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758167","bugzilla_description":"CVE-2019-17267 jackson-databind: Serialization gadgets in classes of the ehcache package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17267.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16335","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0729","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755831","bugzilla_description":"CVE-2019-16335 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16335.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14540","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755849","bugzilla_description":"CVE-2019-14540 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14540.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14439","severity":"moderate","public_date":"2019-07-30T00:00:00Z","advisories":["RHSA-2019:3200","RHSA-2020:0983"],"bugzilla":"1752962","bugzilla_description":"CVE-2019-14439 jackson-databind: Polymorphic typing issue related to logback/JNDI","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14439.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14379","severity":"important","public_date":"2019-07-23T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:2743","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2020:0727","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1737517","bugzilla_description":"CVE-2019-14379 jackson-databind: default typing mishandling leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","rh-maven35-jackson-databind-0:2.7.6-2.7.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-12384","severity":"important","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:1820","RHSA-2019:3200","RHSA-2019:2720","RHSA-2019:4352","RHSA-2019:3297","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1725807","bugzilla_description":"CVE-2019-12384 jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","pki-deps:10.6-8000020190807021343.f8e95b4e","rh-maven35-jackson-databind-0:2.7.6-2.6.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12384.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-12814","severity":"moderate","public_date":"2019-06-04T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2938","RHSA-2019:2937","RHSA-2019:2804","RHSA-2019:2936"],"bugzilla":"1725795","bugzilla_description":"CVE-2019-12814 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-12086","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2020:1454","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3044","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2020:3192","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1713468","bugzilla_description":"CVE-2019-12086 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-19360","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666482","bugzilla_description":"CVE-2018-19360 jackson-databind: improper polymorphic deserialization in axis2-transport-jms class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19360.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19361","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666484","bugzilla_description":"CVE-2018-19361 jackson-databind: improper polymorphic deserialization in openjpa class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19361.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19362","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666489","bugzilla_description":"CVE-2018-19362 jackson-databind: improper polymorphic deserialization in jboss-common-core class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-1000873","severity":"moderate","public_date":"2018-10-24T00:00:00Z","advisories":[],"bugzilla":"1665601","bugzilla_description":"CVE-2018-1000873 jackson-modules-java8: DoS due to an Improper Input Validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000873.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-14718","severity":"important","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666415","bugzilla_description":"CVE-2018-14718 jackson-databind: arbitrary code execution in slf4j-ext class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14718.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14719","severity":"important","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666418","bugzilla_description":"CVE-2018-14719 jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14719.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14720","severity":"moderate","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:4037","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:1140"],"bugzilla":"1666423","bugzilla_description":"CVE-2018-14720 jackson-databind: exfiltration/XXE in some JDK classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-611","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14720.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-14721","severity":"moderate","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:4037","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:1140"],"bugzilla":"1666428","bugzilla_description":"CVE-2018-14721 jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14721.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-12023","severity":"important","public_date":"2018-06-08T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1671096","bugzilla_description":"CVE-2018-12023 jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-12022","severity":"important","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1671097","bugzilla_description":"CVE-2018-12022 jackson-databind: improper polymorphic deserialization of types from Jodd-db library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-11307","severity":"important","public_date":"2018-05-10T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1677341","bugzilla_description":"CVE-2018-11307 jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11307.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-10237","severity":"moderate","public_date":"2018-04-25T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:3149","RHSA-2020:2562","RHSA-2018:2428","RHSA-2018:2425","RHSA-2018:2743","RHSA-2018:2423","RHSA-2019:2858","RHSA-2018:2643","RHSA-2018:2742","RHSA-2018:2424","RHSA-2018:2741","RHSA-2018:2740","RHSA-2018:2598"],"bugzilla":"1573391","bugzilla_description":"CVE-2018-10237 guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rhvm-appliance-0:4.2-20180828.0.el7","opendaylight-0:8.3.0-3.el7ost","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10237.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-7489","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":["RHSA-2018:2938","RHSA-2019:3149","RHSA-2018:1448","RHSA-2018:1449","RHSA-2020:2562","RHSA-2018:1447","RHSA-2018:2939","RHSA-2018:2090","RHSA-2019:2858","RHSA-2018:1786","RHSA-2018:1451","RHSA-2018:2089","RHSA-2018:2088","RHSA-2018:1450"],"bugzilla":"1549276","bugzilla_description":"CVE-2018-7489 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-5968","severity":"moderate","public_date":"2018-01-18T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2019:3149","RHSA-2018:1525","RHSA-2018:0478","RHSA-2018:0479","RHSA-2019:2858","RHSA-2018:0481"],"bugzilla":"1538332","bugzilla_description":"CVE-2018-5968 jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rhvm-appliance-0:4.2-20180504.0","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5968.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-17485","severity":"important","public_date":"2017-12-12T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2018:1448","RHSA-2019:3892","RHSA-2019:1797","RHSA-2018:1449","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2018:0116","RHSA-2018:0480","RHSA-2018:2930","RHSA-2019:2858","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1528565","bugzilla_description":"CVE-2017-17485 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","rh-eclipse46-jackson-databind-0:2.6.3-2.6.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-15095","severity":"important","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:3149","RHSA-2017:3190","RHSA-2018:1448","RHSA-2019:3892","RHSA-2018:1449","RHSA-2018:0577","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2017:3189","RHSA-2018:0480","RHSA-2019:2858","RHSA-2018:0576","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1506612","bugzilla_description":"CVE-2017-15095 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","rh-eclipse47-jackson-databind-0:2.7.6-3.3.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","rh-eclipse46-jackson-databind-0:2.6.3-2.4.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-7525","severity":"important","public_date":"2017-07-14T00:00:00Z","advisories":["RHSA-2018:1449","RHSA-2017:3141","RHSA-2017:2477","RHSA-2017:1840","RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2637","RHSA-2017:2638","RHSA-2018:0294","RHSA-2019:3149","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:2547","RHSA-2017:3458","RHSA-2017:2546","RHSA-2017:1835","RHSA-2017:1834","RHSA-2017:1837","RHSA-2017:1836","RHSA-2019:0910","RHSA-2019:2858","RHSA-2017:1839","RHSA-2018:0342","RHSA-2018:1450"],"bugzilla":"1462702","bugzilla_description":"CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["devtoolset-4-jackson-databind-0:2.5.0-2.4.el6","openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-eclipse46-jackson-databind-0:2.6.3-2.3.el7","devtoolset-4-jackson-databind-0:2.5.0-2.4.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:20171102.0-1","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7525.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-8749","severity":"moderate","public_date":"2016-12-07T00:00:00Z","advisories":["RHSA-2017:1832"],"bugzilla":"1420832","bugzilla_description":"CVE-2016-8749 camel-jackson, camel-jacksonxml: Unmarshalling operation are vulnerable to RCE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8749.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jakarta-commons-httpclient_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jakarta-commons-httpclient_security_api_results.json
new file mode 100644
index 0000000..3e30d0e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jakarta-commons-httpclient_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5262","severity":"low","public_date":"2015-09-03T00:00:00Z","advisories":[],"bugzilla":"1261538","bugzilla_description":"CVE-2015-5262 jakarta-commons-httpclient, httpcomponents-core: missing HTTPS connection timeout","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5262.json"},{"CVE":"CVE-2014-3577","severity":"important","public_date":"2014-08-18T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2016:1773","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1082","RHSA-2014:1320","RHSA-2014:1166","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1146","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2016:1931","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1834","RHSA-2014:1833","RHSA-2015:1177","RHSA-2014:1836","RHSA-2015:1176","RHSA-2014:1835"],"bugzilla":"1129074","bugzilla_description":"CVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","httpcomponents-client-0:4.2.5-5.el7_0","org.ovirt.engine-root-0:3.5.0-29","jakarta-commons-httpclient-1:3.1-16.el7_0","thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1","jakarta-commons-httpclient-1:3.1-0.9.el6_5","jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2012-6153","severity":"important","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1320","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1098","RHSA-2014:1834","RHSA-2014:1833","RHSA-2014:1836","RHSA-2014:1835"],"bugzilla":"1129916","bugzilla_description":"CVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","devtoolset-2-httpcomponents-client-0:4.2.1-6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","org.ovirt.engine-root-0:3.5.0-29","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6153.json"},{"CVE":"CVE-2012-5783","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2014:0224","RHSA-2013:0681","RHSA-2013:0680","RHSA-2013:0679","RHSA-2013:0270","RHSA-2017:0868","RHSA-2013:0763","RHSA-2013:1006","RHSA-2013:1853","RHSA-2013:0682","RHSA-2013:1147"],"bugzilla":"873317","bugzilla_description":"CVE-2012-5783 jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el4","jakarta-commons-httpclient-1:3.1-2_patch_01.ep5.el6","jakarta-commons-httpclient-1:3.0-7jpp.2","jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el5","jakarta-commons-httpclient-1:3.1-0.7.el6_3","redhat-support-plugin-rhev-0:3.3.0-14.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jakarta-oro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jakarta-oro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jakarta-oro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jakarta-taglibs-standard_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jakarta-taglibs-standard_security_api_results.json
new file mode 100644
index 0000000..de4b052
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jakarta-taglibs-standard_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-0254","severity":"important","public_date":"2015-02-27T00:00:00Z","advisories":["RHSA-2016:0121","RHSA-2016:0122","RHSA-2016:1376","RHSA-2016:0123","RHSA-2016:1838","RHSA-2016:1839","RHSA-2015:1695","RHSA-2016:0124","RHSA-2016:1840","RHSA-2016:1841","RHSA-2016:0125"],"bugzilla":"1198606","bugzilla_description":"CVE-2015-0254 jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["jakarta-taglibs-standard-0:1.1.1-11.7.el6_7","jboss-ec2-eap-0:7.5.6-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7","jakarta-taglibs-standard-0:1.1.2-14.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"7.6"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jansson_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jansson_security_api_results.json
new file mode 100644
index 0000000..e2320c1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jansson_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-4425","severity":"moderate","public_date":"2016-05-01T00:00:00Z","advisories":[],"bugzilla":"1332200","bugzilla_description":"CVE-2016-4425 jansson: stack exhaustion parsing a JSON file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4425.json"},{"CVE":"CVE-2013-6401","severity":"moderate","public_date":"2014-02-12T00:00:00Z","advisories":[],"bugzilla":"1035538","bugzilla_description":"CVE-2013-6401 jansson: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6401.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jasper-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jasper-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jasper-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.6.0-openjdk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.6.0-openjdk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.6.0-openjdk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.6.0-openjdk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.6.0-openjdk_security_api_results.json
new file mode 100644
index 0000000..4b83109
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.6.0-openjdk_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-18928","severity":"low","public_date":"2018-10-30T00:00:00Z","advisories":[],"bugzilla":"1646702","bugzilla_description":"CVE-2018-18928 icu: integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5582","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2658","RHSA-2016:2090"],"bugzilla":"1385402","bugzilla_description":"CVE-2016-5582 OpenJDK: incomplete type checks of System.arraycopy arguments (Hotspot, 8160591)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-5573","severity":"important","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385544","bugzilla_description":"CVE-2016-5573 OpenJDK: insufficient checks of JDWP packets (Hotspot, 8159519)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5573.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5554","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385714","bugzilla_description":"CVE-2016-5554 OpenJDK: insufficient classloader consistency checks in ClassLoaderWithRepository (JMX, 8157739)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5554.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5542","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385723","bugzilla_description":"CVE-2016-5542 OpenJDK: missing algorithm restrictions for jar verification (Libraries, 8155973)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5597","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1386103","bugzilla_description":"CVE-2016-5597 OpenJDK: exposure of server authentication credentials to proxy (Networking, 8160838)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-319","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5597.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5568","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1386112","bugzilla_description":"CVE-2016-5568 OpenJDK: incorrect menu handling on Windows (AWT, 8158993)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5568.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3606","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1356963","bugzilla_description":"CVE-2016-3606 OpenJDK: insufficient bytecode verification (Hotspot, 8155981)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3598","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2017:1216","RHSA-2016:1504","RHSA-2016:1587","RHSA-2016:1588","RHSA-2016:1589","RHSA-2016:1458"],"bugzilla":"1356971","bugzilla_description":"CVE-2016-3598 OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3598.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3587","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1458"],"bugzilla":"1356987","bugzilla_description":"CVE-2016-3587 OpenJDK: insufficient protection of MethodHandle.invokeBasic() (Hotspot, 8154475)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3587.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3610","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1504","RHSA-2016:1458"],"bugzilla":"1356994","bugzilla_description":"CVE-2016-3610 OpenJDK: insufficient value count check in MethodHandles.filterReturnValue() (Libraries, 8158571)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3500","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357008","bugzilla_description":"CVE-2016-3500 OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3508","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357015","bugzilla_description":"CVE-2016-3508 OpenJDK: missing entity replacement limits (JAXP, 8149962)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3458","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357494","bugzilla_description":"CVE-2016-3458 OpenJDK: insufficient restrictions on the use of custom ValueHandler (CORBA, 8079718)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-3550","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357506","bugzilla_description":"CVE-2016-3550 OpenJDK: integer overflows in bytecode streams (Hotspot, 8152479)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3550.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-3485","severity":"low","public_date":"2016-07-19T00:00:00Z","advisories":[],"bugzilla":"1357516","bugzilla_description":"CVE-2016-3485 OpenJDK: weak authentication secret in Pipe implementation on Windows (Networking, 8145446)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3485.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2016-0686","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327743","bugzilla_description":"CVE-2016-0686 OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0686.json"},{"CVE":"CVE-2016-0687","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327749","bugzilla_description":"CVE-2016-0687 OpenJDK: insufficient byte type checks (Hotspot, 8132051)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0687.json"},{"CVE":"CVE-2016-0695","severity":"low","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:0677"],"bugzilla":"1328022","bugzilla_description":"CVE-2016-0695 OpenJDK: insufficient DSA key parameters checks (Security, 8138593)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0695.json"},{"CVE":"CVE-2016-3425","severity":"moderate","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:0677"],"bugzilla":"1328040","bugzilla_description":"CVE-2016-3425 OpenJDK: incorrect handling of surrogate pairs in XML attribute values (JAXP, 8143167)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3425.json"},{"CVE":"CVE-2016-3426","severity":"low","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328059","bugzilla_description":"CVE-2016-3426 OpenJDK: non-constant time GCM authentication tag comparison (JCE, 8143945)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3426.json"},{"CVE":"CVE-2016-3427","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328210","bugzilla_description":"CVE-2016-3427 OpenJDK: unrestricted deserialization of authentication credentials (JMX, 8144430)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3427.json"},{"CVE":"CVE-2016-0494","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298906","bugzilla_description":"CVE-2016-0494 ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0494.json"},{"CVE":"CVE-2016-0475","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0050","RHSA-2016:0049"],"bugzilla":"1298949","bugzilla_description":"CVE-2016-0475 OpenJDK: PBE incorrect key lengths (Libraries, 8138589)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0475.json"},{"CVE":"CVE-2016-0402","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298957","bugzilla_description":"CVE-2016-0402 OpenJDK: URL deserialization inconsistencies (Networking, 8059054)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0402.json"},{"CVE":"CVE-2016-0448","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299073","bugzilla_description":"CVE-2016-0448 OpenJDK: logging of RMI connection secrets (JMX, 8130710)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0448.json"},{"CVE":"CVE-2016-0466","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299385","bugzilla_description":"CVE-2016-0466 OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0466.json"},{"CVE":"CVE-2016-0483","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299441","bugzilla_description":"CVE-2016-0483 OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0483.json"},{"CVE":"CVE-2015-4806","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1233687","bugzilla_description":"CVE-2015-4806 OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4806.json"},{"CVE":"CVE-2015-4835","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273022","bugzilla_description":"CVE-2015-4835 OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4835.json"},{"CVE":"CVE-2015-4881","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921"],"bugzilla":"1273027","bugzilla_description":"CVE-2015-4881 OpenJDK: missing type checks in IIOPInputStream (CORBA, 8076392)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4881.json"},{"CVE":"CVE-2015-4843","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273053","bugzilla_description":"CVE-2015-4843 OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4843.json"},{"CVE":"CVE-2015-4883","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273304","bugzilla_description":"CVE-2015-4883 OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4883.json"},{"CVE":"CVE-2015-4860","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273308","bugzilla_description":"CVE-2015-4860 OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4860.json"},{"CVE":"CVE-2015-4805","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273311","bugzilla_description":"CVE-2015-4805 OpenJDK: missing checks for proper initialization in ObjectStreamClass (Serialization, 8103671)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-665","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4805.json"},{"CVE":"CVE-2015-4844","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273318","bugzilla_description":"CVE-2015-4844 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4844.json"},{"CVE":"CVE-2015-4868","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:1919"],"bugzilla":"1273328","bugzilla_description":"CVE-2015-4868 OpenJDK: CRL checking flaw (Libraries, 8081744)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4868.json"},{"CVE":"CVE-2015-4840","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273338","bugzilla_description":"CVE-2015-4840 OpenJDK: OOB access in CMS code (2D, 8086092)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4840.json"},{"CVE":"CVE-2015-4882","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273414","bugzilla_description":"CVE-2015-4882 OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4882.json"},{"CVE":"CVE-2015-4842","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273425","bugzilla_description":"CVE-2015-4842 OpenJDK: leak of user.dir location (JAXP, 8078427)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4842.json"},{"CVE":"CVE-2015-4734","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273430","bugzilla_description":"CVE-2015-4734 OpenJDK: kerberos realm name leak (JGSS, 8048030)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4734.json"},{"CVE":"CVE-2015-4903","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273496","bugzilla_description":"CVE-2015-4903 OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4903.json"},{"CVE":"CVE-2015-4803","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273637","bugzilla_description":"CVE-2015-4803 OpenJDK: inefficient use of hash tables and lists during XML parsing (JAXP, 8068842)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4803.json"},{"CVE":"CVE-2015-4893","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273638","bugzilla_description":"CVE-2015-4893 OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4893.json"},{"CVE":"CVE-2015-4911","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921"],"bugzilla":"1273645","bugzilla_description":"CVE-2015-4911 OpenJDK: incomplete supportDTD enforcement (JAXP, 8130078)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4911.json"},{"CVE":"CVE-2015-4872","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273734","bugzilla_description":"CVE-2015-4872 OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4872.json"},{"CVE":"CVE-2015-4871","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:2509","RHSA-2015:1927","RHSA-2016:0053","RHSA-2015:2506"],"bugzilla":"1273859","bugzilla_description":"CVE-2015-4871 OpenJDK: protected methods can be used as interface methods via DirectMethodHandle (Libraries)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4871.json"},{"CVE":"CVE-2015-2601","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242019","bugzilla_description":"CVE-2015-2601 OpenJDK: non-constant time comparisons in crypto code (JCE, 8074865)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2601.json"},{"CVE":"CVE-2015-2659","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1228","RHSA-2015:1241"],"bugzilla":"1242144","bugzilla_description":"CVE-2015-2659 OpenJDK: GCM cipher issue causing JVM crash (Security, 8067648)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2659.json"},{"CVE":"CVE-2015-2628","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242232","bugzilla_description":"CVE-2015-2628 OpenJDK: IIOPInputStream type confusion vulnerability (CORBA, 8076376)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2628.json"},{"CVE":"CVE-2015-4731","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242234","bugzilla_description":"CVE-2015-4731 OpenJDK: improper permission checks in MBeanServerInvocationHandler (JMX, 8076397)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4731.json"},{"CVE":"CVE-2015-4732","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242240","bugzilla_description":"CVE-2015-4732 OpenJDK: insufficient context checks during object deserialization (Libraries, 8076405)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-567","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4732.json"},{"CVE":"CVE-2015-4733","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242275","bugzilla_description":"CVE-2015-4733 OpenJDK: RemoteObjectInvocationHandler allows calling finalize() (RMI, 8076409)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4733.json"},{"CVE":"CVE-2015-4748","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242281","bugzilla_description":"CVE-2015-4748 OpenJDK: incorrect OCSP nextUpdate checking (Libraries, 8075374)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-299","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4748.json"},{"CVE":"CVE-2015-2621","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242372","bugzilla_description":"CVE-2015-2621 OpenJDK: incorrect code permission checks in RMIConnectionImpl (JMX, 8075853)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2621.json"},{"CVE":"CVE-2015-4749","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242379","bugzilla_description":"CVE-2015-4749 OpenJDK: DnsClient fails to release request information after error (JNDI, 8075378)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4749.json"},{"CVE":"CVE-2015-2632","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242394","bugzilla_description":"CVE-2015-2632 ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190->CWE-125","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2632.json"},{"CVE":"CVE-2015-4760","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242447","bugzilla_description":"CVE-2015-4760 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8071715)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4760.json"},{"CVE":"CVE-2015-2613","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1242456","bugzilla_description":"CVE-2015-2613 NSS / JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2613.json"},{"CVE":"CVE-2015-2590","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1243139","bugzilla_description":"CVE-2015-2590 OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2590.json"},{"CVE":"CVE-2015-4000","severity":"moderate","public_date":"2015-05-20T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2016:2056","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2016:1624","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1197","RHSA-2015:1230","RHSA-2015:1185","RHSA-2015:1072"],"bugzilla":"1223211","bugzilla_description":"CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","nss-0:3.19.1-3.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","nss-0:3.19.1-3.ael7b_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","openssl-0:1.0.1e-30.el6_6.9","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","openssl-1:1.0.1e-42.ael7b_1.6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.8.0-openjdk-1:1.8.0.51-1.b16.ael7b_1","openssl-0:0.9.8e-36.el5_11","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-0478","severity":"low","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1210355","bugzilla_description":"CVE-2015-0478 OpenJDK: insufficient hardening of RSA-CRT implementation (JCE, 8071726)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0478.json"},{"CVE":"CVE-2015-0469","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1210829","bugzilla_description":"CVE-2015-0469 ICU: layout engine glyphStorage off-by-one (OpenJDK 2D, 8067699)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-122","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0469.json"},{"CVE":"CVE-2015-0460","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211285","bugzilla_description":"CVE-2015-0460 OpenJDK: incorrect handling of phantom references (Hotspot, 8071931)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0460.json"},{"CVE":"CVE-2015-0477","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211299","bugzilla_description":"CVE-2015-0477 OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0477.json"},{"CVE":"CVE-2015-0470","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0809"],"bugzilla":"1211387","bugzilla_description":"CVE-2015-0470 OpenJDK: incorrect handling of default methods (Hotspot, 8065366)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0470.json"},{"CVE":"CVE-2015-0488","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211543","bugzilla_description":"CVE-2015-0488 OpenJDK: certificate options parsing uncaught exception (JSSE, 8068720)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-248","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0488.json"},{"CVE":"CVE-2015-2808","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1207101","bugzilla_description":"CVE-2015-2808 SSL/TLS: \"Invariance Weakness\" vulnerability in RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2808.json"},{"CVE":"CVE-2015-0383","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1123870","bugzilla_description":"CVE-2015-0383 OpenJDK: insecure hsperfdata temporary file handling (Hotspot, 8050807)","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0383.json"},{"CVE":"CVE-2014-6601","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183020","bugzilla_description":"CVE-2014-6601 OpenJDK: class verifier insufficient invokespecial calls verification (Hotspot, 8058982)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6601.json"},{"CVE":"CVE-2015-0412","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183021","bugzilla_description":"CVE-2015-0412 OpenJDK: insufficient code privileges checks (JAX-WS, 8054367)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0412.json"},{"CVE":"CVE-2015-0408","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183023","bugzilla_description":"CVE-2015-0408 OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0408.json"},{"CVE":"CVE-2015-0395","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183031","bugzilla_description":"CVE-2015-0395 OpenJDK: phantom references handling issue in garbage collector (Hotspot, 8047125)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0395.json"},{"CVE":"CVE-2015-0400","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1183039","bugzilla_description":"CVE-2015-0400 OpenJDK: NTLM authentication data disclosure via redirect to proxy (Libraries, 8048035)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0400.json"},{"CVE":"CVE-2015-0407","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183043","bugzilla_description":"CVE-2015-0407 OpenJDK: directory information leak via file chooser (Swing, 8055304)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0407.json"},{"CVE":"CVE-2015-0410","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183044","bugzilla_description":"CVE-2015-0410 OpenJDK: DER decoder infinite loop  (Security, 8059485)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0410.json"},{"CVE":"CVE-2014-6593","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183049","bugzilla_description":"CVE-2014-6593 OpenJDK: incorrect tracking of ChangeCipherSpec during SSL/TLS handshake (JSSE, 8057555)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6593.json"},{"CVE":"CVE-2014-6585","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183645","bugzilla_description":"CVE-2014-6585 ICU: font parsing OOB read (OpenJDK 2D, 8055489)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6585.json"},{"CVE":"CVE-2014-6591","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183646","bugzilla_description":"CVE-2014-6591 ICU: font parsing OOB read (OpenJDK 2D, 8056276)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6591.json"},{"CVE":"CVE-2014-6549","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0134","RHSA-2015:0133"],"bugzilla":"1183660","bugzilla_description":"CVE-2014-6549 OpenJDK: incorrect class loader permission check in ClassLoader getParent() (Libraries, 8055314)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6549.json"},{"CVE":"CVE-2015-0437","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069"],"bugzilla":"1183670","bugzilla_description":"CVE-2015-0437 OpenJDK: code generation issue (Hotspot, 8064524)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0437.json"},{"CVE":"CVE-2014-6587","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183715","bugzilla_description":"CVE-2014-6587 OpenJDK: MulticastSocket NULL pointer dereference (Libraries, 8056264)","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6587.json"},{"CVE":"CVE-2015-2625","severity":"low","public_date":"2014-11-02T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1241965","bugzilla_description":"CVE-2015-2625 OpenJDK: name for reverse DNS lookup used in certificate identity check (JSSE, 8067694)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2625.json"},{"CVE":"CVE-2014-6512","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1071210","bugzilla_description":"CVE-2014-6512 OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-345","affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6512.json"},{"CVE":"CVE-2014-6513","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1150118","bugzilla_description":"CVE-2014-6513 OpenJDK: splash image handling memory corruption (AWT, 8042609)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6513.json"},{"CVE":"CVE-2014-6506","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150155","bugzilla_description":"CVE-2014-6506 OpenJDK: insufficient permission checks when setting resource bundle on system logger (Libraries, 8041564)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6506.json"},{"CVE":"CVE-2014-6504","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1150182","bugzilla_description":"CVE-2014-6504 OpenJDK: incorrect optimization of range checks in C2 compiler (Hotspot, 8022783)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6504.json"},{"CVE":"CVE-2014-6519","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1150273","bugzilla_description":"CVE-2014-6519 OpenJDK: missing BootstrapMethods bounds check (Hotspot, 8041717)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6519.json"},{"CVE":"CVE-2014-6531","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150651","bugzilla_description":"CVE-2014-6531 OpenJDK: insufficient ResourceBundle name check (Libraries, 8044274)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6531.json"},{"CVE":"CVE-2014-6502","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150669","bugzilla_description":"CVE-2014-6502 OpenJDK: LogRecord use of incorrect CL when loading ResourceBundle (Libraries, 8042797)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6502.json"},{"CVE":"CVE-2014-6457","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151046","bugzilla_description":"CVE-2014-6457 OpenJDK: Triple Handshake attack against TLS/SSL connections (JSSE, 8037066)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6457.json"},{"CVE":"CVE-2014-6558","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151063","bugzilla_description":"CVE-2014-6558 OpenJDK: CipherInputStream incorrect exception handling (Security, 8037846)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6558.json"},{"CVE":"CVE-2014-6517","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1151364","bugzilla_description":"CVE-2014-6517 OpenJDK: StAX parser parameter entity XXE (JAXP, 8039533)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6517.json"},{"CVE":"CVE-2014-6511","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151517","bugzilla_description":"CVE-2014-6511 ICU: Layout Engine ContextualSubstitution missing boundary checks (JDK 2D, 8041540)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6511.json"},{"CVE":"CVE-2014-6562","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1636"],"bugzilla":"1151988","bugzilla_description":"CVE-2014-6562 OpenJDK: incorrect handling of zip entries with NUL in name (Libraries, 8048025)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6562.json"},{"CVE":"CVE-2014-6468","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1636"],"bugzilla":"1152049","bugzilla_description":"CVE-2014-6468 OpenJDK: insufficient SharedArchiveFile checks (Hotspot, 8044269)","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6468.json"},{"CVE":"CVE-2014-3566","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2015:1546","RHSA-2015:1545","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2014:1881","RHSA-2014:1880","RHSA-2015:0080","RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2014:1920","RHSA-2015:0067","RHSA-2015:0012","RHSA-2015:0011","RHSA-2015:0264","RHSA-2015:0010","RHSA-2015:0086","RHSA-2015:0085","RHBA-2014:1857"],"bugzilla":"1152789","bugzilla_description":"CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-636|CWE-757)","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","openshift-origin-node-proxy-0:1.16.4.2-1.el6op","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","openshift-origin-node-proxy-0:1.22.3.4-1.el6op","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json"},{"CVE":"CVE-2014-4262","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1075795","bugzilla_description":"CVE-2014-4262 OpenJDK: AtomicReferenceFieldUpdater missing primitive type check (Libraries, 8039520)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4262.json"},{"CVE":"CVE-2014-4244","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119475","bugzilla_description":"CVE-2014-4244 OpenJDK: RSA blinding issues (Security, 8031346)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4244.json"},{"CVE":"CVE-2014-4263","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119476","bugzilla_description":"CVE-2014-4263 OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4263.json"},{"CVE":"CVE-2014-4221","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:1042"],"bugzilla":"1119483","bugzilla_description":"CVE-2014-4221 OpenJDK: MethodHandles.Lookup insufficient modifiers checks (Libraries, 8035788)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4221.json"},{"CVE":"CVE-2014-4219","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119596","bugzilla_description":"CVE-2014-4219 OpenJDK: Bytecode verification does not prevent ctor calls to this() and super() (Hotspot, 8035119)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4219.json"},{"CVE":"CVE-2014-2490","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907"],"bugzilla":"1119597","bugzilla_description":"CVE-2014-2490 OpenJDK: Event logger format string vulnerability (Hotspot, 8037076)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-134","affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2490.json"},{"CVE":"CVE-2014-4216","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907"],"bugzilla":"1119600","bugzilla_description":"CVE-2014-4216 OpenJDK: Incorrect generic signature attribute parsing (Hotspot, 8037076)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4216.json"},{"CVE":"CVE-2014-4223","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890"],"bugzilla":"1119602","bugzilla_description":"CVE-2014-4223 OpenJDK: Incorrect handling of invocations with exhausted ranks (Libraries, 8035793)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4223.json"},{"CVE":"CVE-2014-4209","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119608","bugzilla_description":"CVE-2014-4209 OpenJDK: SubjectDelegator protection insufficient (JMX, 8029755)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4209.json"},{"CVE":"CVE-2014-4218","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119611","bugzilla_description":"CVE-2014-4218 OpenJDK: Clone interfaces passed to proxy methods (Libraries, 8035009)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4218.json"},{"CVE":"CVE-2014-4252","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119613","bugzilla_description":"CVE-2014-4252 OpenJDK: Prevent instantiation of service with non-public constructor (Security, 8035004)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4252.json"},{"CVE":"CVE-2014-4266","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1042"],"bugzilla":"1119615","bugzilla_description":"CVE-2014-4266 OpenJDK: InfoBuilder incorrect return values (Serviceability, 8033301)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4266.json"},{"CVE":"CVE-2014-4268","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":[],"bugzilla":"1119616","bugzilla_description":"CVE-2014-4268 OpenJDK: Missing file choser access restrictions (Swing, 8035699)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4268.json"},{"CVE":"CVE-2014-4264","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902"],"bugzilla":"1119622","bugzilla_description":"CVE-2014-4264 OpenJDK: Incorrect TLS/EC management (Security, 8031340)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4264.json"},{"CVE":"CVE-2014-2483","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890"],"bugzilla":"1119626","bugzilla_description":"CVE-2014-2483 OpenJDK: Restrict use of privileged annotations (Libraries, 8034985)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2483.json"},{"CVE":"CVE-2015-3149","severity":"low","public_date":"2014-04-20T00:00:00Z","advisories":["RHSA-2015:1228"],"bugzilla":"1213365","bugzilla_description":"CVE-2015-3149 OpenJDK8: insecure hsperfdata temporary file handling, CVE-2015-0383 regression (Hotspot)","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":["java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3149.json"},{"CVE":"CVE-2014-2398","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1086632","bugzilla_description":"CVE-2014-2398 OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2398.json"},{"CVE":"CVE-2014-0453","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1086645","bugzilla_description":"CVE-2014-0453 OpenJDK: RSA unpadding timing issues (Security, 8027766)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0453.json"},{"CVE":"CVE-2014-0429","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087409","bugzilla_description":"CVE-2014-0429 OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0429.json"},{"CVE":"CVE-2014-0457","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087411","bugzilla_description":"CVE-2014-0457 OpenJDK: ServiceLoader Exception handling security bypass (Libraries, 8031394)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0457.json"},{"CVE":"CVE-2014-0456","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0675","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0406"],"bugzilla":"1087413","bugzilla_description":"CVE-2014-0456 OpenJDK: System.arraycopy() element race condition (Hotspot, 8029858)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0456.json"},{"CVE":"CVE-2014-2421","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087417","bugzilla_description":"CVE-2014-2421 OpenJDK: JPEG decoder input stream handling (2D, 8029854)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2421.json"},{"CVE":"CVE-2014-2397","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0675","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0406"],"bugzilla":"1087423","bugzilla_description":"CVE-2014-2397 OpenJDK: classfile parser invalid BootstrapMethods attribute length (Hotspot, 8034926)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2397.json"},{"CVE":"CVE-2014-0455","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087424","bugzilla_description":"CVE-2014-0455 OpenJDK: MethodHandle variable argument lists handling (Libraries, 8029844)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0455.json"},{"CVE":"CVE-2014-0461","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087426","bugzilla_description":"CVE-2014-0461 OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0461.json"},{"CVE":"CVE-2014-2412","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087427","bugzilla_description":"CVE-2014-2412 OpenJDK: AWT thread context handling (AWT, 8025010)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2412.json"},{"CVE":"CVE-2014-0451","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087428","bugzilla_description":"CVE-2014-0451 OpenJDK: AWT incorrect FlavorMap seperation (AWT, 8026797)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0451.json"},{"CVE":"CVE-2014-0458","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087430","bugzilla_description":"CVE-2014-0458 OpenJDK: Activation framework default command map caching (JAX-WS, 8025152)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0458.json"},{"CVE":"CVE-2014-2414","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087431","bugzilla_description":"CVE-2014-2414 OpenJDK: incorrect caching of data initialized via TCCL (JAXB, 8025030)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2414.json"},{"CVE":"CVE-2014-2423","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087434","bugzilla_description":"CVE-2014-2423 OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026188)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2423.json"},{"CVE":"CVE-2014-0452","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087436","bugzilla_description":"CVE-2014-0452 OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026801)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0452.json"},{"CVE":"CVE-2014-2402","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087438","bugzilla_description":"CVE-2014-2402 OpenJDK: Incorrect NIO channel separation (Libraries, 8026716)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2402.json"},{"CVE":"CVE-2014-0446","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087439","bugzilla_description":"CVE-2014-0446 OpenJDK: Protect logger handlers (Libraries, 8029740)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0446.json"},{"CVE":"CVE-2014-0454","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087440","bugzilla_description":"CVE-2014-0454 OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0454.json"},{"CVE":"CVE-2014-2427","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087441","bugzilla_description":"CVE-2014-2427 OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2427.json"},{"CVE":"CVE-2014-0460","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087442","bugzilla_description":"CVE-2014-0460 OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0460.json"},{"CVE":"CVE-2014-2403","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0675","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0406"],"bugzilla":"1087443","bugzilla_description":"CVE-2014-2403 OpenJDK: JAXP CharInfo file access restriction (JAXP, 8029282)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2403.json"},{"CVE":"CVE-2014-0459","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087444","bugzilla_description":"CVE-2014-0459 lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0459.json"},{"CVE":"CVE-2014-2413","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0406"],"bugzilla":"1087446","bugzilla_description":"CVE-2014-2413 OpenJDK: method handle call hierachy bypass (Libraries, 8032686)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2413.json"},{"CVE":"CVE-2014-0462","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1106388","bugzilla_description":"CVE-2014-0462 OpenJDK: libjpeg: uninitialized memory read information leak (AWT, 8029760)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0462.json"},{"CVE":"CVE-2014-2405","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1106391","bugzilla_description":"CVE-2014-2405 OpenJDK: libpng unhandled zero-length PLTE chunk or NULL palette (AWT, 8031352)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2405.json"},{"CVE":"CVE-2014-1876","severity":"low","public_date":"2014-02-03T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1060907","bugzilla_description":"CVE-2014-1876 OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1876.json"},{"CVE":"CVE-2013-4578","severity":"low","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1031471","bugzilla_description":"CVE-2013-4578 OpenJDK: jarsigner does not detect unsigned bytecode injected into signed jars","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4578.json"},{"CVE":"CVE-2014-0428","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051519","bugzilla_description":"CVE-2014-0428 OpenJDK: insufficient security checks in IIOP streams (CORBA, 8025767)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0428.json"},{"CVE":"CVE-2014-0422","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051528","bugzilla_description":"CVE-2014-0422 OpenJDK: insufficient package access checks in the Naming component (JNDI, 8025758)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0422.json"},{"CVE":"CVE-2013-5893","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0026","RHSA-2014:0027","RHSA-2014:0030"],"bugzilla":"1051549","bugzilla_description":"CVE-2013-5893 OpenJDK: JVM method processing issues (Libraries, 8029507)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5893.json"},{"CVE":"CVE-2014-0373","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051699","bugzilla_description":"CVE-2014-0373 OpenJDK: SnmpStatusException handling issues (Serviceability, 7068126)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0373.json"},{"CVE":"CVE-2013-5878","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051823","bugzilla_description":"CVE-2013-5878 OpenJDK: null xmlns handling issue (Security, 8025026)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5878.json"},{"CVE":"CVE-2013-5884","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051911","bugzilla_description":"CVE-2013-5884 OpenJDK: insufficient security checks in CORBA stub factories (CORBA, 8026193)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5884.json"},{"CVE":"CVE-2014-0416","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051912","bugzilla_description":"CVE-2014-0416 OpenJDK: insecure subject principals set handling (JAAS, 8024306)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0416.json"},{"CVE":"CVE-2014-0376","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051923","bugzilla_description":"CVE-2014-0376 OpenJDK: document builder missing security checks (JAXP, 8027201, 8025018)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0376.json"},{"CVE":"CVE-2013-5907","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052915","bugzilla_description":"CVE-2013-5907 ICU: Layout Engine LookupProcessor insufficient input checks (JDK 2D, 8025034)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5907.json"},{"CVE":"CVE-2014-0368","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052919","bugzilla_description":"CVE-2014-0368 OpenJDK: insufficient Socket checkListen checks (Networking, 8011786)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0368.json"},{"CVE":"CVE-2013-5910","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052942","bugzilla_description":"CVE-2013-5910 OpenJDK: XML canonicalizer mutable strings passed to untrusted code (Security, 8026417)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5910.json"},{"CVE":"CVE-2014-0411","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1053010","bugzilla_description":"CVE-2014-0411 OpenJDK: TLS/SSL handshake timing issues (JSSE, 8023069)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0411.json"},{"CVE":"CVE-2014-0423","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1053066","bugzilla_description":"CVE-2014-0423 OpenJDK: XXE issue in decoder (Beans, 8023245)","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0423.json"},{"CVE":"CVE-2013-5896","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1053266","bugzilla_description":"CVE-2013-5896 OpenJDK: com.sun.corba.se. should be restricted package (CORBA, 8025022)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5896.json"},{"CVE":"CVE-2014-0408","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053286","bugzilla_description":"CVE-2014-0408 OpenJDK: JObjC code issues (Hotspot, 8021266)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0408.json"},{"CVE":"CVE-2013-5803","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018713","bugzilla_description":"CVE-2013-5803 OpenJDK: insufficient checks of KDC replies (JGSS, 8014341)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5803.json"},{"CVE":"CVE-2013-5772","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018717","bugzilla_description":"CVE-2013-5772 OpenJDK: insufficient html escaping in jhat (jhat, 8011081)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5772.json"},{"CVE":"CVE-2013-5797","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018720","bugzilla_description":"CVE-2013-5797 OpenJDK: insufficient escaping of window title string (Javadoc, 8016675)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5797.json"},{"CVE":"CVE-2013-5784","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018727","bugzilla_description":"CVE-2013-5784 OpenJDK: insufficient InterfaceImplementor security checks (Scripting, 8017299)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5784.json"},{"CVE":"CVE-2013-5790","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447"],"bugzilla":"1018736","bugzilla_description":"CVE-2013-5790 OpenJDK: insufficient security checks (Beans, 8012071)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5790.json"},{"CVE":"CVE-2013-5849","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018750","bugzilla_description":"CVE-2013-5849 OpenJDK: insufficient DataFlavor security checks (AWT, 8012277)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5849.json"},{"CVE":"CVE-2013-5800","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1507","RHSA-2013:1447"],"bugzilla":"1018755","bugzilla_description":"CVE-2013-5800 OpenJDK: default keytab path information leak (JGSS, 8022931)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5800.json"},{"CVE":"CVE-2013-5805","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1018761","bugzilla_description":"CVE-2013-5805 CVE-2013-5806 OpenJDK: insufficient access checks in MacOS code (Swing, 8021275, 8021282)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5805.json"},{"CVE":"CVE-2013-5806","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1018761","bugzilla_description":"CVE-2013-5805 CVE-2013-5806 OpenJDK: insufficient access checks in MacOS code (Swing, 8021275, 8021282)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5806.json"},{"CVE":"CVE-2013-5780","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018785","bugzilla_description":"CVE-2013-5780 OpenJDK: key data leak via toString() methods (Libraries, 8011071)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5780.json"},{"CVE":"CVE-2013-5840","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018831","bugzilla_description":"CVE-2013-5840 OpenJDK: getDeclaringClass() information leak (Libraries, 8014349)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5840.json"},{"CVE":"CVE-2013-5820","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018972","bugzilla_description":"CVE-2013-5820 OpenJDK: insufficient security checks (JAXWS, 8017505)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5820.json"},{"CVE":"CVE-2013-5851","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1507","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018977","bugzilla_description":"CVE-2013-5851 OpenJDK: XML stream factory finder information leak (JAXP, 8013502)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5851.json"},{"CVE":"CVE-2013-5778","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018984","bugzilla_description":"CVE-2013-5778 OpenJDK: image conversion out of bounds read (2D, 8014102)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5778.json"},{"CVE":"CVE-2013-5782","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019108","bugzilla_description":"CVE-2013-5782 OpenJDK: Incorrect awt_getPixelByte/awt_getPixelShort/awt_setPixelByte/awt_setPixelShort image raster checks (2D, 8014093)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5782.json"},{"CVE":"CVE-2013-5830","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019110","bugzilla_description":"CVE-2013-5830 OpenJDK: checkPackageAccess missing security check (Libraries, 8017291)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5830.json"},{"CVE":"CVE-2013-5809","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019113","bugzilla_description":"CVE-2013-5809 OpenJDK: JPEGImageReader and JPEGImageWriter missing band size checks (2D, 8013510)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5809.json"},{"CVE":"CVE-2013-5829","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019115","bugzilla_description":"CVE-2013-5829 OpenJDK: Java2d Disposer security bypass (2D, 8017287)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5829.json"},{"CVE":"CVE-2013-5814","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019117","bugzilla_description":"CVE-2013-5814 OpenJDK: RMIConnection stub missing permission check (CORBA, 8011157)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5814.json"},{"CVE":"CVE-2013-5817","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019118","bugzilla_description":"CVE-2013-5817 OpenJDK: VersionHelper12 does not honor modifyThreadGroup restriction (JNDI, 8013739)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5817.json"},{"CVE":"CVE-2013-5842","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019123","bugzilla_description":"CVE-2013-5842 OpenJDK: ObjectInputStream/ObjectOutputStream missing checks (Libraries, 8014987)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5842.json"},{"CVE":"CVE-2013-5850","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019127","bugzilla_description":"CVE-2013-5850 OpenJDK: Missing CORBA security checks (Libraries, 8017196)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5850.json"},{"CVE":"CVE-2013-5802","severity":"important","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019130","bugzilla_description":"CVE-2013-5802 OpenJDK: javax.xml.transform.TransformerFactory does not properly honor XMLConstants.FEATURE_SECURE_PROCESSING (JAXP, 8012425)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5802.json"},{"CVE":"CVE-2013-5804","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019131","bugzilla_description":"CVE-2013-5804 OpenJDK: javac does not ignore certain ignorable characters (Javadoc, 8016653)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5804.json"},{"CVE":"CVE-2013-3829","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019133","bugzilla_description":"CVE-2013-3829 OpenJDK: java.util.TimeZone does not restrict setting of default time zone (Libraries, 8001029)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3829.json"},{"CVE":"CVE-2013-5783","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019137","bugzilla_description":"CVE-2013-5783 OpenJDK: JTable not properly performing certain access checks (Swing, 8013744)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5783.json"},{"CVE":"CVE-2013-5825","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019139","bugzilla_description":"CVE-2013-5825 OpenJDK: XML parsing Denial of Service (JAXP, 8014530)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5825.json"},{"CVE":"CVE-2013-5823","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019145","bugzilla_description":"CVE-2013-5823 OpenJDK: com.sun.org.apache.xml.internal.security.utils.UnsyncByteArrayOutputStream Denial of Service (Security, 8021290)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5823.json"},{"CVE":"CVE-2013-5774","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019147","bugzilla_description":"CVE-2013-5774 OpenJDK: Inet6Address class IPv6 address processing errors (Libraries, 8015743)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5774.json"},{"CVE":"CVE-2013-4002","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0269","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2015:0773","RHSA-2013:1081","RHSA-2013:1060","RHSA-2014:0414","RHSA-2014:1823","RHSA-2014:1822","RHSA-2014:1821","RHSA-2013:1505","RHSA-2013:1447","RHSA-2014:1319","RHSA-2013:1059","RHSA-2014:1818"],"bugzilla":"1019176","bugzilla_description":"CVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP, 8017298)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","xerces-j2-0:2.7.1-12.7.el6_5","xerces-j2-0:2.11.0-17.el7_0","java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4002.json"},{"CVE":"CVE-2013-4276","severity":"moderate","public_date":"2013-08-04T00:00:00Z","advisories":[],"bugzilla":"992975","bugzilla_description":"CVE-2013-4276 lcms: Stack-based buffer overflows in ColorSpace conversion calculator and TIFF compare utility","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4276.json"},{"CVE":"CVE-2013-1571","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"973474","bugzilla_description":"CVE-2013-1571 OpenJDK: Frame injection in generated HTML (Javadoc, 8012375)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1571.json"},{"CVE":"CVE-2013-2470","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975099","bugzilla_description":"CVE-2013-2470 OpenJDK: ImagingLib byte lookup processing (2D, 8011243)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2470.json"},{"CVE":"CVE-2013-2471","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975102","bugzilla_description":"CVE-2013-2471 OpenJDK: Incorrect IntegerComponentRaster size checks (2D, 8011248)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2471.json"},{"CVE":"CVE-2013-2472","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975107","bugzilla_description":"CVE-2013-2472 OpenJDK: Incorrect ShortBandedRaster size checks (2D, 8011253)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2472.json"},{"CVE":"CVE-2013-2473","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975110","bugzilla_description":"CVE-2013-2473 OpenJDK: Incorrect ByteBandedRaster size checks (2D, 8011257)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2473.json"},{"CVE":"CVE-2013-2463","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975115","bugzilla_description":"CVE-2013-2463 OpenJDK: Incorrect image attribute verification (2D, 8012438)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2463.json"},{"CVE":"CVE-2013-2465","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975118","bugzilla_description":"CVE-2013-2465 OpenJDK: Incorrect image channel verification (2D, 8012597)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2465.json"},{"CVE":"CVE-2013-2469","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975120","bugzilla_description":"CVE-2013-2469 OpenJDK: Incorrect image layout verification (2D, 8012601)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2469.json"},{"CVE":"CVE-2013-2459","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975121","bugzilla_description":"CVE-2013-2459 OpenJDK: Various AWT integer overflow checks (AWT, 8009071)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2459.json"},{"CVE":"CVE-2013-2460","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975122","bugzilla_description":"CVE-2013-2460 OpenJDK: tracing insufficient access checks (Serviceability, 8010209)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2460.json"},{"CVE":"CVE-2013-2445","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:0963","RHSA-2013:1014"],"bugzilla":"975124","bugzilla_description":"CVE-2013-2445 OpenJDK: Better handling of memory allocation errors (Hotspot, 7158805)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2445.json"},{"CVE":"CVE-2013-2448","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975125","bugzilla_description":"CVE-2013-2448 OpenJDK: Better access restrictions (Sound, 8006328)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2448.json"},{"CVE":"CVE-2013-2461","severity":"important","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:0963","RHSA-2013:1014"],"bugzilla":"975126","bugzilla_description":"CVE-2013-2461 OpenJDK: Missing check for valid DOMCanonicalizationMethod canonicalization algorithm (Libraries, 8014281)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2461.json"},{"CVE":"CVE-2013-2407","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975127","bugzilla_description":"CVE-2013-2407 OpenJDK: Integrate Apache Santuario, rework class loader (Libraries, 6741606, 8008744)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2407.json"},{"CVE":"CVE-2013-2454","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975129","bugzilla_description":"CVE-2013-2454 OpenJDK: SerialJavaObject package restriction (JDBC, 8009554)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2454.json"},{"CVE":"CVE-2013-2458","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975130","bugzilla_description":"CVE-2013-2458 OpenJDK: Method handles (Libraries, 8009424)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2458.json"},{"CVE":"CVE-2013-2444","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975131","bugzilla_description":"CVE-2013-2444 OpenJDK: Resource denial of service (AWT, 8001038)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2444.json"},{"CVE":"CVE-2013-2446","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975132","bugzilla_description":"CVE-2013-2446 OpenJDK: output stream access restrictions (CORBA, 8000642)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2446.json"},{"CVE":"CVE-2013-2457","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975133","bugzilla_description":"CVE-2013-2457 OpenJDK: Proper class checking (JMX, 8008120)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2457.json"},{"CVE":"CVE-2013-2453","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975134","bugzilla_description":"CVE-2013-2453 OpenJDK: MBeanServer Introspector package access (JMX, 8008124)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2453.json"},{"CVE":"CVE-2013-2443","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975137","bugzilla_description":"CVE-2013-2443 OpenJDK: AccessControlContext check order issue (Libraries, 8001330)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2443.json"},{"CVE":"CVE-2013-2452","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975138","bugzilla_description":"CVE-2013-2452 OpenJDK: Unique VMIDs (Libraries, 8001033)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2452.json"},{"CVE":"CVE-2013-2455","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975139","bugzilla_description":"CVE-2013-2455 OpenJDK: getEnclosing* checks (Libraries, 8007812)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2455.json"},{"CVE":"CVE-2013-2447","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975140","bugzilla_description":"CVE-2013-2447 OpenJDK: Prevent revealing the local address (Networking, 8001318)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2447.json"},{"CVE":"CVE-2013-2450","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975141","bugzilla_description":"CVE-2013-2450 OpenJDK: ObjectStreamClass circular reference denial of service (Serialization, 8000638)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2450.json"},{"CVE":"CVE-2013-2456","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975142","bugzilla_description":"CVE-2013-2456 OpenJDK: ObjectOutputStream access checks (Serialization, 8008132)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2456.json"},{"CVE":"CVE-2013-2412","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975144","bugzilla_description":"CVE-2013-2412 OpenJDK: JConsole SSL support (Serviceability, 8003703)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2412.json"},{"CVE":"CVE-2013-2449","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975145","bugzilla_description":"CVE-2013-2449 OpenJDK: GnomeFileTypeDetector path access check (Libraries, 8004288)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2449.json"},{"CVE":"CVE-2013-2451","severity":"low","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975146","bugzilla_description":"CVE-2013-2451 OpenJDK: exclusive port binding (Networking, 7170730)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2451.json"},{"CVE":"CVE-2013-1500","severity":"low","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975148","bugzilla_description":"CVE-2013-1500 OpenJDK: Insecure shared memory permissions (2D, 8001034)","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1500.json"},{"CVE":"CVE-2013-0401","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"920245","bugzilla_description":"CVE-2013-0401 OpenJDK: sun.awt.datatransfer.ClassLoaderObjectInputStream class may incorrectly invoke the system class loader (CanSecWest 2013, AWT, 8009305)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0401.json"},{"CVE":"CVE-2013-1488","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"920247","bugzilla_description":"CVE-2013-1488 OpenJDK: JDBC driver manager improper toString calls (CanSecWest 2013, Libraries, 8009814)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1488.json"},{"CVE":"CVE-2013-1537","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952387","bugzilla_description":"CVE-2013-1537 OpenJDK: remote code loading enabled by default (RMI, 8001040)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1537.json"},{"CVE":"CVE-2013-2415","severity":"low","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952389","bugzilla_description":"CVE-2013-2415 OpenJDK: temporary files created with insecure permissions (JAX-WS, 8003542)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2415.json"},{"CVE":"CVE-2013-2423","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0751"],"bugzilla":"952398","bugzilla_description":"CVE-2013-2423 OpenJDK: incorrect setter access checks in MethodHandles (Hostspot, 8009677)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2423.json"},{"CVE":"CVE-2013-2424","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952509","bugzilla_description":"CVE-2013-2424 OpenJDK: MBeanInstantiator insufficient class access checks (JMX, 8006435)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2424.json"},{"CVE":"CVE-2013-2429","severity":"important","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952521","bugzilla_description":"CVE-2013-2429 OpenJDK: JPEGImageWriter state corruption (ImageIO, 8007918)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2429.json"},{"CVE":"CVE-2013-2430","severity":"important","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952524","bugzilla_description":"CVE-2013-2430 OpenJDK: JPEGImageReader state corruption (ImageIO, 8007667)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2430.json"},{"CVE":"CVE-2013-2436","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0751"],"bugzilla":"952550","bugzilla_description":"CVE-2013-2436 OpenJDK: Wrapper.convert insufficient type checks (Libraries, 8009049)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2436.json"},{"CVE":"CVE-2013-2420","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952638","bugzilla_description":"CVE-2013-2420 OpenJDK: image processing vulnerability (2D, 8007617)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2420.json"},{"CVE":"CVE-2013-1558","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952640","bugzilla_description":"CVE-2013-1558 OpenJDK: java.beans.ThreadGroupContext missing restrictions (Beans, 7200507)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1558.json"},{"CVE":"CVE-2013-2422","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952642","bugzilla_description":"CVE-2013-2422 OpenJDK: MethodUtil trampoline class incorrect restrictions (Libraries, 8009857)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2422.json"},{"CVE":"CVE-2013-2431","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952645","bugzilla_description":"CVE-2013-2431 OpenJDK: Hotspot intrinsic frames vulnerability (Hotspot, 8004336)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2431.json"},{"CVE":"CVE-2013-1518","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952646","bugzilla_description":"CVE-2013-1518 OpenJDK: JAXP missing security restrictions (JAXP, 6657673)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1518.json"},{"CVE":"CVE-2013-1557","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952648","bugzilla_description":"CVE-2013-1557 OpenJDK: LogStream.setDefaultStream() missing security restrictions (RMI, 8001329)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1557.json"},{"CVE":"CVE-2013-2421","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952649","bugzilla_description":"CVE-2013-2421 OpenJDK: Hotspot MethodHandle lookup error (Hotspot, 8009699)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2421.json"},{"CVE":"CVE-2013-2426","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952653","bugzilla_description":"CVE-2013-2426 OpenJDK: ConcurrentHashMap incorrectly calls defaultReadObject() method (Libraries, 8009063)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2426.json"},{"CVE":"CVE-2013-2419","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952656","bugzilla_description":"CVE-2013-2419 ICU: Layout Engine font processing errors (JDK 2D, 8001031)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2419.json"},{"CVE":"CVE-2013-2417","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952657","bugzilla_description":"CVE-2013-2417 OpenJDK: Network InetAddress serialization information disclosure (Networking, 8000724)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2417.json"},{"CVE":"CVE-2013-2383","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952708","bugzilla_description":"CVE-2013-2383 ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004986)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2383.json"},{"CVE":"CVE-2013-2384","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952709","bugzilla_description":"CVE-2013-2384 ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004987)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2384.json"},{"CVE":"CVE-2013-1569","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952711","bugzilla_description":"CVE-2013-1569 ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004994)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1569.json"},{"CVE":"CVE-2013-0402","severity":"critical","public_date":"2013-03-06T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"920246","bugzilla_description":"CVE-2013-0402 Oracle JDK: unspecified JavaFX buffer overflow leading to JVM compromise (CanSecWest 2013, JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0402.json"},{"CVE":"CVE-2013-1491","severity":"critical","public_date":"2013-03-06T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"920248","bugzilla_description":"CVE-2013-1491 Oracle JDK: unspecified sanbox bypass (CanSecWest 2013, 2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1491.json"},{"CVE":"CVE-2013-0809","severity":"critical","public_date":"2013-03-04T00:00:00Z","advisories":["RHSA-2013:0603","RHSA-2013:0625","RHSA-2013:0602","RHSA-2013:0624","RHSA-2013:0605","RHSA-2013:0604","RHSA-2013:0626","RHSA-2013:1456","RHSA-2013:0601","RHSA-2013:0600","RHSA-2013:1455"],"bugzilla":"917550","bugzilla_description":"CVE-2013-0809 OpenJDK: Specially crafted sample model integer overflow (2D, 8007014)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.36.1.11.9.el5_9","java-1.7.0-oracle-1:1.7.0.17-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.57.1.11.9.el6_4","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el6_4","java-1.6.0-sun-1:1.6.0.43-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0809.json"},{"CVE":"CVE-2013-1493","severity":"critical","public_date":"2013-03-04T00:00:00Z","advisories":["RHSA-2013:0603","RHSA-2013:0625","RHSA-2013:0602","RHSA-2013:0624","RHSA-2013:0605","RHSA-2013:0604","RHSA-2013:0626","RHSA-2013:1456","RHSA-2013:0601","RHSA-2013:0600","RHSA-2013:1455"],"bugzilla":"917553","bugzilla_description":"CVE-2013-1493 OpenJDK: CMM malformed raster memory corruption (2D, 8007675)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.36.1.11.9.el5_9","java-1.7.0-oracle-1:1.7.0.17-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.57.1.11.9.el6_4","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el6_4","java-1.6.0-sun-1:1.6.0.43-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1493.json"},{"CVE":"CVE-2013-1486","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0532","RHSA-2013:1456","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531"],"bugzilla":"913014","bugzilla_description":"CVE-2013-1486 OpenJDK: MBeanServer insufficient privilege restrictions (JMX, 8006446)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el6_3","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1486.json"},{"CVE":"CVE-2013-1484","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0532","RHSA-2013:0275"],"bugzilla":"913021","bugzilla_description":"CVE-2013-1484 OpenJDK: MethodHandleProxies insufficient privilege checks (Libraries, 8004937)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1484.json"},{"CVE":"CVE-2013-1485","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0532","RHSA-2013:0275"],"bugzilla":"913025","bugzilla_description":"CVE-2013-1485 OpenJDK: MethodHandles insufficient privilege checks (Libraries, 8006439)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1485.json"},{"CVE":"CVE-2013-0169","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0636","RHSA-2013:0823","RHSA-2013:0833","RHSA-2013:0855","RHSA-2013:0822","RHSA-2013:0587","RHSA-2013:0532","RHSA-2013:1456","RHSA-2014:0416","RHSA-2013:0782","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"907589","bugzilla_description":"CVE-2013-0169 SSL/TLS: CBC padding timing attack (lucky-13)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3","spice-client-msi-0:3.3-12","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el5_9","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0169.json"},{"CVE":"CVE-2013-0440","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"859140","bugzilla_description":"CVE-2013-0440 OpenJDK: CPU consumption DoS via repeated SSL ClientHello packets (JSSE, 7192393)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0440.json"},{"CVE":"CVE-2013-1475","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0247","RHSA-2012:1485","RHSA-2013:0236","RHSA-2013:0246","RHSA-2012:1465","RHSA-2013:0237","RHSA-2012:1467","RHSA-2012:1466","RHSA-2013:0245"],"bugzilla":"860652","bugzilla_description":"CVE-2013-1475 OpenJDK: IIOP type reuse sandbox bypass (CORBA, 8000540, SE-2012-01 Issue 50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1475.json"},{"CVE":"CVE-2013-0424","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906813","bugzilla_description":"CVE-2013-0424 OpenJDK: RMI CGIHandler XSS issue (RMI, 6563318)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0424.json"},{"CVE":"CVE-2013-0435","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906892","bugzilla_description":"CVE-2013-0435 OpenJDK: com.sun.xml.internal.* not restricted packages (JAX-WS, 7201068)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0435.json"},{"CVE":"CVE-2013-1478","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906894","bugzilla_description":"CVE-2013-1478 OpenJDK: image parser insufficient raster parameter checks (2D, 8001972)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1478.json"},{"CVE":"CVE-2013-0442","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906899","bugzilla_description":"CVE-2013-0442 OpenJDK: insufficient privilege checking issue (AWT, 7192977)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0442.json"},{"CVE":"CVE-2013-0445","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906900","bugzilla_description":"CVE-2013-0445 OpenJDK: insufficient privilege checking issue (AWT, 8001057)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0445.json"},{"CVE":"CVE-2013-1480","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906904","bugzilla_description":"CVE-2013-1480 OpenJDK: image parser insufficient raster parameter checks (AWT, 8002325)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1480.json"},{"CVE":"CVE-2013-0450","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906911","bugzilla_description":"CVE-2013-0450 OpenJDK: RequiredModelMBean missing access control context checks (JMX, 8000537)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0450.json"},{"CVE":"CVE-2013-0428","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907207","bugzilla_description":"CVE-2013-0428 OpenJDK: reflection API incorrect checks for proxy classes (Libraries, 7197546, SE-2012-01 Issue 29)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0428.json"},{"CVE":"CVE-2013-0444","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0237"],"bugzilla":"907218","bugzilla_description":"CVE-2013-0444 OpenJDK: MethodFinder insufficient checks for cached results (Beans, 7200493)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0444.json"},{"CVE":"CVE-2013-0432","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907219","bugzilla_description":"CVE-2013-0432 OpenJDK: insufficient clipboard access premission checks (AWT, 7186952)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0432.json"},{"CVE":"CVE-2013-0437","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0237"],"bugzilla":"907222","bugzilla_description":"CVE-2013-0437 Oracle JDK: unspecified vulnerability fixed in 7u13 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0437.json"},{"CVE":"CVE-2012-3213","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"907223","bugzilla_description":"CVE-2012-3213 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Scripting)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3213.json"},{"CVE":"CVE-2013-1481","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"907224","bugzilla_description":"CVE-2013-1481 Oracle JDK: unspecified vulnerability fixed in 6u39 (Sound)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1481.json"},{"CVE":"CVE-2013-0409","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"907226","bugzilla_description":"CVE-2013-0409 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (JMX)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0409.json"},{"CVE":"CVE-2013-0443","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907340","bugzilla_description":"CVE-2013-0443 OpenJDK: insufficient Diffie-Hellman public key checks (JSSE, 7192392)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0443.json"},{"CVE":"CVE-2013-0425","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907344","bugzilla_description":"CVE-2013-0425 OpenJDK: logging insufficient access control checks (Libraries, 6664509)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0425.json"},{"CVE":"CVE-2013-0426","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907346","bugzilla_description":"CVE-2013-0426 OpenJDK: logging insufficient access control checks (Libraries, 6664528)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0426.json"},{"CVE":"CVE-2013-0434","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907453","bugzilla_description":"CVE-2013-0434 OpenJDK: loadPropertyFile missing restrictions (JAXP, 8001235)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0434.json"},{"CVE":"CVE-2013-0427","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907455","bugzilla_description":"CVE-2013-0427 OpenJDK: invalid threads subject to interrupts (Libraries, 6776941)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0427.json"},{"CVE":"CVE-2013-0433","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907456","bugzilla_description":"CVE-2013-0433 OpenJDK: InetSocketAddress serialization issue (Networking, 7201071)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0433.json"},{"CVE":"CVE-2013-1476","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907457","bugzilla_description":"CVE-2013-1476 OpenJDK: missing ValueHandlerImpl class constructor access restriction (CORBA, 8000631)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1476.json"},{"CVE":"CVE-2013-0441","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907458","bugzilla_description":"CVE-2013-0441 OpenJDK: missing serialization restriction (CORBA, 7201066)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0441.json"},{"CVE":"CVE-2013-0429","severity":"important","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:0237","RHSA-2013:0245"],"bugzilla":"907460","bugzilla_description":"CVE-2013-0429 OpenJDK: PresentationManager incorrectly shared (CORBA, 7141694)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0429.json"},{"CVE":"CVE-2013-0431","severity":"moderate","public_date":"2013-01-27T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0237"],"bugzilla":"906447","bugzilla_description":"CVE-2013-0431 OpenJDK: JMX Introspector missing package access check (JMX, 8000539, SE-2012-01 Issue 52)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0431.json"},{"CVE":"CVE-2013-1490","severity":null,"public_date":"2013-01-27T00:00:00Z","advisories":[],"bugzilla":"906450","bugzilla_description":"CVE-2013-1490 JDK: complete Java security sandbox bypass (Issue 51)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1490.json"},{"CVE":"CVE-2012-5373","severity":"moderate","public_date":"2012-11-23T00:00:00Z","advisories":[],"bugzilla":"880705","bugzilla_description":"CVE-2012-5373 java: Murmur hash function collisions (oCERT-2012-001)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5373.json"},{"CVE":"CVE-2012-3216","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865346","bugzilla_description":"CVE-2012-3216 OpenJDK: java.io.FilePermission information leak (Libraries, 6631398)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3216.json"},{"CVE":"CVE-2012-5068","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865348","bugzilla_description":"CVE-2012-5068 OpenJDK: RhinoScriptEngine security bypass (Scripting, 7143535)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5068.json"},{"CVE":"CVE-2012-5070","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865350","bugzilla_description":"CVE-2012-5070 OpenJDK: EnvHelp information disclosure (JMX, 7158796)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5070.json"},{"CVE":"CVE-2012-5076","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865352","bugzilla_description":"CVE-2012-5076 OpenJDK: com.sun.org.glassfish.* not restricted packages (JAX-WS, 7163198)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5076.json"},{"CVE":"CVE-2012-5077","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2012:1467"],"bugzilla":"865354","bugzilla_description":"CVE-2012-5077 OpenJDK: SecureRandom mulitple seeders information disclosure (Security, 7167656)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5077.json"},{"CVE":"CVE-2012-5073","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865357","bugzilla_description":"CVE-2012-5073 OpenJDK: LogManager security bypass (Libraries, 7169884)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5073.json"},{"CVE":"CVE-2012-5074","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865359","bugzilla_description":"CVE-2012-5074 OpenJDK: com.sun.org.glassfish.* not restricted packages (JAX-WS, 7169887)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5074.json"},{"CVE":"CVE-2012-5075","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865363","bugzilla_description":"CVE-2012-5075 OpenJDK: RMIConnectionImpl information disclosure (JMX, 7169888)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5075.json"},{"CVE":"CVE-2012-5072","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865365","bugzilla_description":"CVE-2012-5072 OpenJDK: AccessController.doPrivilegedWithCombiner() information disclosure (Security, 7172522)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5072.json"},{"CVE":"CVE-2012-5081","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865370","bugzilla_description":"CVE-2012-5081 OpenJDK: JSSE denial of service (JSSE, 7186286)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5081.json"},{"CVE":"CVE-2012-5086","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2012:1467"],"bugzilla":"865428","bugzilla_description":"CVE-2012-5086 OpenJDK: XMLDecoder sandbox restriction bypass (Beans, 7195917)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5086.json"},{"CVE":"CVE-2012-5087","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865434","bugzilla_description":"CVE-2012-5087 OpenJDK: PropertyElementHandler insufficient access checks (Beans, 7195549)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5087.json"},{"CVE":"CVE-2012-5088","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865471","bugzilla_description":"CVE-2012-5088 OpenJDK: MethodHandle insufficient access control checks (Libraries, 7196190)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5088.json"},{"CVE":"CVE-2012-5084","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865511","bugzilla_description":"CVE-2012-5084 OpenJDK: DefaultFormatter insufficient data validation (Swing, 7195194)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5084.json"},{"CVE":"CVE-2012-5089","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865514","bugzilla_description":"CVE-2012-5089 OpenJDK: RMIConnectionImpl insufficient access control checks (JMX, 7198296)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5089.json"},{"CVE":"CVE-2012-5071","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865519","bugzilla_description":"CVE-2012-5071 OpenJDK: DescriptorSupport insufficient package access checks (JMX, 7192975)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5071.json"},{"CVE":"CVE-2012-5069","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865531","bugzilla_description":"CVE-2012-5069 OpenJDK: Executors state handling issues (Concurrency, 7189103)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5069.json"},{"CVE":"CVE-2012-5085","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2013:0625","RHSA-2012:1392","RHSA-2013:0624","RHSA-2012:1384","RHSA-2013:0626","RHSA-2012:1386","RHSA-2012:1385"],"bugzilla":"865541","bugzilla_description":"CVE-2012-5085 OpenJDK: disable Gopher support by default (Gopher, 7189567)","cvss_score":null,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5085.json"},{"CVE":"CVE-2012-5079","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865568","bugzilla_description":"CVE-2012-5079 OpenJDK: ServiceLoader reject not subtype classes without instantiating (Libraries, 7195919)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5079.json"},{"CVE":"CVE-2012-4416","severity":"low","public_date":"2012-09-07T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385"],"bugzilla":"856124","bugzilla_description":"CVE-2012-4416 OpenJDK: uninitialized Array JVM memory disclosure (Hotspot, 7198606)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4416.json"},{"CVE":"CVE-2012-4420","severity":null,"public_date":"2012-09-07T00:00:00Z","advisories":[],"bugzilla":"856588","bugzilla_description":"CVE-2012-4420 java-1.7.0-openjdk: JVM heap memory disclosure","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4420.json"},{"CVE":"CVE-2012-1682","severity":"critical","public_date":"2012-08-30T00:00:00Z","advisories":["RHSA-2012:1221","RHSA-2012:1223","RHSA-2013:1456","RHSA-2012:1289","RHSA-2012:1222","RHSA-2012:1225","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"853097","bugzilla_description":"CVE-2012-1682 OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.49.1.11.4.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.9.el5_8","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1682.json"},{"CVE":"CVE-2012-3136","severity":"critical","public_date":"2012-08-30T00:00:00Z","advisories":["RHSA-2012:1223","RHSA-2012:1289","RHSA-2012:1225"],"bugzilla":"853138","bugzilla_description":"CVE-2012-3136 OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3136.json"},{"CVE":"CVE-2012-0547","severity":"low","public_date":"2012-08-30T00:00:00Z","advisories":["RHSA-2012:1392","RHSA-2012:1221","RHSA-2012:1223","RHSA-2013:1456","RHSA-2012:1289","RHSA-2012:1222","RHSA-2012:1225","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"853228","bugzilla_description":"CVE-2012-0547 OpenJDK: AWT hardening fixes (AWT, 7163201)","cvss_score":null,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.49.1.11.4.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.9.el5_8","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0547.json"},{"CVE":"CVE-2012-4681","severity":"critical","public_date":"2012-08-27T00:00:00Z","advisories":["RHSA-2012:1223","RHSA-2012:1289","RHSA-2012:1225"],"bugzilla":"852051","bugzilla_description":"CVE-2012-4681 OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4681.json"},{"CVE":"CVE-2012-1711","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:0730"],"bugzilla":"829354","bugzilla_description":"CVE-2012-1711 OpenJDK: improper protection of CORBA data models (CORBA, 7079902)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1711.json"},{"CVE":"CVE-2012-1717","severity":"low","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:1332","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829358","bugzilla_description":"CVE-2012-1717 OpenJDK: insecure temporary file permissions (JRE, 7143606)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1717.json"},{"CVE":"CVE-2012-1716","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829360","bugzilla_description":"CVE-2012-1716 OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1716.json"},{"CVE":"CVE-2012-1713","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:1332","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829361","bugzilla_description":"CVE-2012-1713 OpenJDK: fontmanager layout lookup code memory corruption (2D, 7143617)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1713.json"},{"CVE":"CVE-2012-1719","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:1332","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829371","bugzilla_description":"CVE-2012-1719 OpenJDK: mutable repository identifiers in generated stub code (CORBA, 7143851)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1719.json"},{"CVE":"CVE-2012-1718","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1332","RHSA-2012:0730","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829372","bugzilla_description":"CVE-2012-1718 OpenJDK: CRL and certificate extensions handling improvements (Security, 7143872)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1718.json"},{"CVE":"CVE-2012-1723","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:0730"],"bugzilla":"829373","bugzilla_description":"CVE-2012-1723 OpenJDK: insufficient field accessibility checks (HotSpot, 7152811)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1723.json"},{"CVE":"CVE-2012-1724","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:0730"],"bugzilla":"829374","bugzilla_description":"CVE-2012-1724 OpenJDK: XML parsing infinite loop (JAXP, 7157609)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1724.json"},{"CVE":"CVE-2012-1725","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829376","bugzilla_description":"CVE-2012-1725 OpenJDK: insufficient invokespecial <init> verification (HotSpot, 7160757)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1725.json"},{"CVE":"CVE-2012-1726","severity":"important","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:1019","RHSA-2012:1289"],"bugzilla":"829377","bugzilla_description":"CVE-2012-1726 OpenJDK: java.lang.invoke.MethodHandles.Lookup does not honor access modes (Libraries, 7165628)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1726.json"},{"CVE":"CVE-2012-1721","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:0734","RHSA-2012:1019","RHSA-2013:1456","RHSA-2012:1289","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"831353","bugzilla_description":"CVE-2012-1721 Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1721.json"},{"CVE":"CVE-2012-1722","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:0734","RHSA-2012:1019","RHSA-2013:1456","RHSA-2012:1289","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"831354","bugzilla_description":"CVE-2012-1722 Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1722.json"},{"CVE":"CVE-2012-0551","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:0734","RHSA-2012:1019","RHSA-2013:1456","RHSA-2012:1289","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"831355","bugzilla_description":"CVE-2012-0551 Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0551.json"},{"CVE":"CVE-2012-0501","severity":"low","public_date":"2012-02-14T00:00:00Z","advisories":["RHSA-2012:0139","RHSA-2012:0514","RHSA-2012:0508","RHSA-2012:0322","RHSA-2012:0135","RHSA-2013:1455"],"bugzilla":"788624","bugzilla_description":"CVE-2012-0501 OpenJDK: off-by-one bug in ZIP reading code (JRE, 7118283)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2","java-1.6.0-openjdk-1:1.6.0.0-1.25.1.10.6.el5_8","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0501.json"},{"CVE":"CVE-2012-0503","severity":"critical","public_date":"2012-02-14T00:00:00Z","advisories":["RHSA-2012:0139","RHSA-2012:1080","RHSA-2012:0514","RHSA-2012:0702","RHSA-2012:0508","RHSA-2012:0322","RHSA-2012:0135","RHSA-2013:1455"],"bugzilla":"788976","bugzilla_description":"CVE-2012-0503 OpenJDK: unrestricted use of TimeZone.setDefault() (i18n, 7110687)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2","java-1.4.2-ibm-sap-0:1.4.2.13.12.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.12-1jpp.1.el5_8","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.25.1.10.6.el5_8","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0503.json"},{"CVE":"CVE-2011-3571","severity":"critical","public_date":"2012-02-14T00:00:00Z","advisories":["RHSA-2012:0139","RHSA-2012:0322","RHSA-2012:0135"],"bugzilla":"788994","bugzilla_description":"CVE-2012-0507 OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.25.1.10.6.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3571.json"},{"CVE":"CVE-2012-0507","severity":"critical","public_date":"2012-02-14T00:00:00Z","advisories":["RHSA-2012:0139","RHSA-2012:0514","RHSA-2012:0508","RHSA-2012:0322","RHSA-2012:0135","RHSA-2013:1455"],"bugzilla":"788994","bugzilla_description":"CVE-2012-0507 OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2","java-1.6.0-openjdk-1:1.6.0.0-1.25.1.10.6.el5_8","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0507.json"},{"CVE":"CVE-2011-3563","severity":"moderate","public_date":"2012-02-14T00:00:00Z","advisories":["RHSA-2012:0139","RHSA-2012:1080","RHSA-2012:0514","RHSA-2012:0702","RHSA-2012:0508","RHSA-2012:0322","RHSA-2012:0135","RHSA-2013:1455"],"bugzilla":"789295","bugzilla_description":"CVE-2011-3563 OpenJDK: JavaSound incorrect bounds check (Sound, 7088367)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2","java-1.4.2-ibm-sap-0:1.4.2.13.12.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.12-1jpp.1.el5_8","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.25.1.10.6.el5_8","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3563.json"},{"CVE":"CVE-2012-0502","severity":"moderate","public_date":"2012-02-14T00:00:00Z","advisories":["RHSA-2012:0139","RHSA-2012:1080","RHSA-2012:0514","RHSA-2012:0702","RHSA-2012:0508","RHSA-2012:0322","RHSA-2012:0135","RHSA-2013:1455"],"bugzilla":"789297","bugzilla_description":"CVE-2012-0502 OpenJDK: KeyboardFocusManager focus stealing (AWT, 7110683)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2","java-1.4.2-ibm-sap-0:1.4.2.13.12.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.12-1jpp.1.el5_8","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.25.1.10.6.el5_8","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0502.json"},{"CVE":"CVE-2012-0505","severity":"critical","public_date":"2012-02-14T00:00:00Z","advisories":["RHSA-2012:0139","RHSA-2012:1080","RHSA-2012:0514","RHSA-2012:0702","RHSA-2012:0508","RHSA-2012:0322","RHSA-2012:0135","RHSA-2013:1455"],"bugzilla":"789299","bugzilla_description":"CVE-2012-0505 OpenJDK: incomplete info in the deserialization exception (Serialization, 7110700)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2","java-1.4.2-ibm-sap-0:1.4.2.13.12.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.12-1jpp.1.el5_8","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.25.1.10.6.el5_8","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0505.json"},{"CVE":"CVE-2012-0506","severity":"moderate","public_date":"2012-02-14T00:00:00Z","advisories":["RHSA-2012:0139","RHSA-2012:1080","RHSA-2012:0514","RHSA-2012:0702","RHSA-2012:0508","RHSA-2012:0322","RHSA-2012:0135","RHSA-2013:1455"],"bugzilla":"789300","bugzilla_description":"CVE-2012-0506 OpenJDK: mutable repository identifiers (CORBA, 7110704)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2","java-1.4.2-ibm-sap-0:1.4.2.13.12.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.12-1jpp.1.el5_8","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.25.1.10.6.el5_8","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0506.json"},{"CVE":"CVE-2012-0497","severity":"critical","public_date":"2012-02-14T00:00:00Z","advisories":["RHSA-2012:0514","RHSA-2012:0322","RHSA-2012:0135","RHSA-2013:1455"],"bugzilla":"789301","bugzilla_description":"CVE-2012-0497 OpenJDK: insufficient checking of the graphics rendering object (2D, 7112642)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2","java-1.6.0-openjdk-1:1.6.0.0-1.25.1.10.6.el5_8","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0497.json"},{"CVE":"CVE-2012-0498","severity":"critical","public_date":"2012-02-14T00:00:00Z","advisories":["RHSA-2012:0139","RHSA-2012:0514","RHSA-2012:0508","RHSA-2013:1455"],"bugzilla":"790720","bugzilla_description":"CVE-2012-0498 Oracle JDK: unspecified vulnerability fixed in 6u31 and 7u3 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0498.json"},{"CVE":"CVE-2012-0499","severity":"critical","public_date":"2012-02-14T00:00:00Z","advisories":["RHSA-2012:0139","RHSA-2012:1080","RHSA-2012:0514","RHSA-2012:0702","RHSA-2012:0508","RHSA-2013:1455"],"bugzilla":"790722","bugzilla_description":"CVE-2012-0499 Oracle JDK: unspecified vulnerability fixed in 6u31 and 7u3 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2","java-1.4.2-ibm-sap-0:1.4.2.13.12.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.12-1jpp.1.el5_8","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0499.json"},{"CVE":"CVE-2012-0500","severity":"critical","public_date":"2012-02-14T00:00:00Z","advisories":["RHSA-2012:0139","RHSA-2012:0514","RHSA-2013:1455"],"bugzilla":"790724","bugzilla_description":"CVE-2012-0500 Oracle JDK: unspecified vulnerability fixed in 6u31 and 7u3 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0500.json"},{"CVE":"CVE-2012-0504","severity":"important","public_date":"2012-02-14T00:00:00Z","advisories":[],"bugzilla":"790725","bugzilla_description":"CVE-2012-0504 Oracle JDK: unspecified vulnerability fixed in 6u31 and 7u3 (Install)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0504.json"},{"CVE":"CVE-2012-2739","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":[],"bugzilla":"750533","bugzilla_description":"CVE-2012-2739 java: hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2739.json"},{"CVE":"CVE-2011-5035","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":["RHSA-2012:0139","RHSA-2012:0514","RHSA-2012:0322","RHSA-2012:0135","RHSA-2013:1455"],"bugzilla":"771283","bugzilla_description":"CVE-2011-5035 GlassFish: hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2","java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.25.1.10.6.el5_8","java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5035.json"},{"CVE":"CVE-2011-3377","severity":"moderate","public_date":"2011-11-08T00:00:00Z","advisories":["RHSA-2011:1441"],"bugzilla":"742515","bugzilla_description":"CVE-2011-3377 IcedTea-Web: second-level domain subdomains and suffix domain SOP bypass","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.0.6-1.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3377.json"},{"CVE":"CVE-2011-3560","severity":"moderate","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2011:1384","RHSA-2012:0508","RHSA-2011:1380","RHSA-2012:0034","RHSA-2012:0343","RHSA-2013:1455","RHSA-2012:0006"],"bugzilla":"745379","bugzilla_description":"CVE-2011-3560 OpenJDK: missing checkSetFactory calls in HttpsURLConnection (JSSE, 7096936)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2","java-1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3560.json"},{"CVE":"CVE-2011-3547","severity":"moderate","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2011:1478","RHSA-2011:1384","RHSA-2011:1380","RHSA-2012:0034","RHSA-2012:0343","RHSA-2013:1455","RHSA-2012:0006"],"bugzilla":"745387","bugzilla_description":"CVE-2011-3547 OpenJDK: InputStream skip() information leak (Networking/IO, 7000600)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.13.0-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.5.0-ibm-1:1.5.0.13.0-1jpp.1.el6","java-1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3547.json"},{"CVE":"CVE-2011-3551","severity":"critical","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2011:1384","RHSA-2011:1380","RHSA-2012:0034","RHSA-2013:1455"],"bugzilla":"745391","bugzilla_description":"CVE-2011-3551 OpenJDK: Java2D TransformHelper integer overflow (2D, 7023640)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3551.json"},{"CVE":"CVE-2011-3552","severity":"low","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2011:1478","RHSA-2011:1384","RHSA-2011:1380","RHSA-2012:0034","RHSA-2012:0343","RHSA-2013:1455","RHSA-2012:0006"],"bugzilla":"745397","bugzilla_description":"CVE-2011-3552 OpenJDK: excessive default UDP socket limit under SecurityManager (Networking, 7032417)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.13.0-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.5.0-ibm-1:1.5.0.13.0-1jpp.1.el6","java-1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3552.json"},{"CVE":"CVE-2011-3544","severity":"critical","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2011:1384","RHSA-2011:1380","RHSA-2012:0034","RHSA-2012:1467","RHSA-2013:1455"],"bugzilla":"745399","bugzilla_description":"CVE-2011-3544 OpenJDK: missing SecurityManager checks in scripting engine (Scripting, 7046823)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3544.json"},{"CVE":"CVE-2011-3521","severity":"critical","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2011:1384","RHSA-2011:1380","RHSA-2012:0034","RHSA-2013:1455"],"bugzilla":"745442","bugzilla_description":"CVE-2011-3521 OpenJDK: IIOP deserialization code execution (Deserialization, 7055902)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3521.json"},{"CVE":"CVE-2011-3554","severity":"critical","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2011:1478","RHSA-2011:1384","RHSA-2011:1380","RHSA-2012:0034","RHSA-2013:1455"],"bugzilla":"745447","bugzilla_description":"CVE-2011-3554 OpenJDK: insufficient pack200 JAR files uncompress error checks (Runtime, 7057857)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.13.0-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.5.0-ibm-1:1.5.0.13.0-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3554.json"},{"CVE":"CVE-2011-3556","severity":"critical","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2011:1478","RHSA-2011:1384","RHSA-2011:1380","RHSA-2012:0034","RHSA-2012:0343","RHSA-2013:1455","RHSA-2012:0006"],"bugzilla":"745459","bugzilla_description":"CVE-2011-3556 OpenJDK: RMI DGC server remote code execution (RMI, 7077466)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.13.0-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.5.0-ibm-1:1.5.0.13.0-1jpp.1.el6","java-1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3556.json"},{"CVE":"CVE-2011-3557","severity":"important","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2011:1384","RHSA-2012:0508","RHSA-2011:1380","RHSA-2012:0034","RHSA-2012:0343","RHSA-2013:1455","RHSA-2012:0006"],"bugzilla":"745464","bugzilla_description":"CVE-2011-3557 OpenJDK: RMI registry privileged code execution (RMI, 7083012)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2","java-1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3557.json"},{"CVE":"CVE-2011-3548","severity":"critical","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2011:1478","RHSA-2011:1384","RHSA-2011:1380","RHSA-2012:0034","RHSA-2012:0343","RHSA-2013:1455","RHSA-2012:0006"],"bugzilla":"745473","bugzilla_description":"CVE-2011-3548 OpenJDK: mutable static AWTKeyStroke.ctor (AWT, 7019773)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.13.0-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.5.0-ibm-1:1.5.0.13.0-1jpp.1.el6","java-1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3548.json"},{"CVE":"CVE-2011-3553","severity":"moderate","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2011:1384","RHSA-2011:1380","RHSA-2012:0034","RHSA-2013:1455"],"bugzilla":"745476","bugzilla_description":"CVE-2011-3553 OpenJDK: JAX-WS stack-traces information leak (JAX-WS, 7046794)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3553.json"},{"CVE":"CVE-2011-3558","severity":"moderate","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2011:1384","RHSA-2011:1380"],"bugzilla":"745492","bugzilla_description":"CVE-2011-3558 OpenJDK: Hotspot unspecified issue (Hotspot, 7070134)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3558.json"},{"CVE":"CVE-2011-3389","severity":"moderate","public_date":"2011-09-10T00:00:00Z","advisories":["RHSA-2011:1384","RHSA-2012:0508","RHSA-2011:1380","RHSA-2012:0034","RHSA-2012:0343","RHSA-2013:1455","RHSA-2012:0006"],"bugzilla":"737506","bugzilla_description":"CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2","java-1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3389.json"},{"CVE":"CVE-2011-2513","severity":"low","public_date":"2011-07-20T00:00:00Z","advisories":["RHSA-2011:1100"],"bugzilla":"718164","bugzilla_description":"CVE-2011-2513 icedtea, icedtea-web: home directory path disclosure to untrusted applications","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.0.4-2.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2513.json"},{"CVE":"CVE-2011-2514","severity":"moderate","public_date":"2011-07-20T00:00:00Z","advisories":["RHSA-2011:1100"],"bugzilla":"718170","bugzilla_description":"CVE-2011-2514 icedtea-web: Java Web Start security warning dialog manipulation","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["icedtea-web-0:1.0.4-2.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2514.json"},{"CVE":"CVE-2011-0865","severity":"low","public_date":"2011-06-07T00:00:00Z","advisories":["RHSA-2011:0860","RHSA-2011:1159","RHSA-2011:0938","RHSA-2011:1087","RHSA-2011:1265","RHSA-2011:0857","RHSA-2013:1455","RHSA-2011:0856"],"bugzilla":"706106","bugzilla_description":"CVE-2011-0865 OpenJDK: Deserialization allows creation of mutable SignedObject (Deserialization, 6618658)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.4.2-ibm-0:1.4.2.13.10-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el4","java-1.5.0-ibm-1:1.5.0.12.5-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.12.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.39.1.9.8.el6_1","java-1.4.2-ibm-sap-0:1.4.2.13.10.sap-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.0-1.22.1.9.8.el5_6","java-1.6.0-sun-1:1.6.0.26-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.26-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0865.json"},{"CVE":"CVE-2011-0815","severity":"critical","public_date":"2011-06-07T00:00:00Z","advisories":[],"bugzilla":"706111","bugzilla_description":"CVE-2011-0815 OpenJDK: FileDialog.show() buffer overflow (AWT, 7012520)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0815.json"},{"CVE":"CVE-2011-0862","severity":"critical","public_date":"2011-06-07T00:00:00Z","advisories":["RHSA-2011:0860","RHSA-2011:1159","RHSA-2011:0938","RHSA-2011:1087","RHSA-2011:1265","RHSA-2011:0857","RHSA-2013:1455","RHSA-2011:0856"],"bugzilla":"706139","bugzilla_description":"CVE-2011-0862 OpenJDK: integer overflows in JPEGImageReader and font SunLayoutEngine (2D, 7013519)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["java-1.4.2-ibm-0:1.4.2.13.10-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el4","java-1.5.0-ibm-1:1.5.0.12.5-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.12.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.39.1.9.8.el6_1","java-1.4.2-ibm-sap-0:1.4.2.13.10.sap-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.0-1.22.1.9.8.el5_6","java-1.6.0-sun-1:1.6.0.26-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.26-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0862.json"},{"CVE":"CVE-2011-0867","severity":"moderate","public_date":"2011-06-07T00:00:00Z","advisories":["RHSA-2011:0860","RHSA-2011:1159","RHSA-2011:0938","RHSA-2011:1087","RHSA-2011:1265","RHSA-2011:0857","RHSA-2013:1455","RHSA-2011:0856"],"bugzilla":"706153","bugzilla_description":"CVE-2011-0867 OpenJDK: NetworkInterface information leak (Networking, 7013969)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.4.2-ibm-0:1.4.2.13.10-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el4","java-1.5.0-ibm-1:1.5.0.12.5-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.12.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.39.1.9.8.el6_1","java-1.4.2-ibm-sap-0:1.4.2.13.10.sap-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.0-1.22.1.9.8.el5_6","java-1.6.0-sun-1:1.6.0.26-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.26-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0867.json"},{"CVE":"CVE-2011-0868","severity":"moderate","public_date":"2011-06-07T00:00:00Z","advisories":["RHSA-2011:0860","RHSA-2011:0938","RHSA-2011:0857","RHSA-2013:1455","RHSA-2011:0856"],"bugzilla":"706241","bugzilla_description":"CVE-2011-0868 OpenJDK: incorrect numeric type conversion in TransformHelper (2D, 7016495)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el4","java-1.6.0-openjdk-1:1.6.0.0-1.39.1.9.8.el6_1","java-1.6.0-openjdk-1:1.6.0.0-1.22.1.9.8.el5_6","java-1.6.0-sun-1:1.6.0.26-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.26-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0868.json"},{"CVE":"CVE-2011-0864","severity":"moderate","public_date":"2011-06-07T00:00:00Z","advisories":["RHSA-2011:0860","RHSA-2011:0857","RHSA-2011:0856"],"bugzilla":"706245","bugzilla_description":"CVE-2011-0864 OpenJDK: JVM memory corruption via certain bytecode (HotSpot, 7020373)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.39.1.9.8.el6_1","java-1.6.0-openjdk-1:1.6.0.0-1.22.1.9.8.el5_6","java-1.6.0-sun-1:1.6.0.26-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.26-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0864.json"},{"CVE":"CVE-2011-0871","severity":"critical","public_date":"2011-06-07T00:00:00Z","advisories":["RHSA-2011:0860","RHSA-2011:1159","RHSA-2011:0938","RHSA-2011:1087","RHSA-2011:1265","RHSA-2011:0857","RHSA-2013:1455","RHSA-2011:0856"],"bugzilla":"706248","bugzilla_description":"CVE-2011-0871 OpenJDK: MediaTracker created Component instances with unnecessary privileges (Swing, 7020198)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.4.2-ibm-0:1.4.2.13.10-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el4","java-1.5.0-ibm-1:1.5.0.12.5-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.12.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.39.1.9.8.el6_1","java-1.4.2-ibm-sap-0:1.4.2.13.10.sap-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.0-1.22.1.9.8.el5_6","java-1.6.0-sun-1:1.6.0.26-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.26-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0871.json"},{"CVE":"CVE-2011-0872","severity":"moderate","public_date":"2011-06-07T00:00:00Z","advisories":[],"bugzilla":"706250","bugzilla_description":"CVE-2011-0872 OpenJDK: non-blocking sockets incorrectly selected for reading (NIO, 6213702)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0872.json"},{"CVE":"CVE-2011-0869","severity":"moderate","public_date":"2011-06-02T00:00:00Z","advisories":["RHSA-2011:0860","RHSA-2011:0938","RHSA-2011:0857","RHSA-2013:1455","RHSA-2011:0856"],"bugzilla":"706234","bugzilla_description":"CVE-2011-0869 OpenJDK: unprivileged proxy settings change via SOAPConnection (SAAJ, 7013971)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el4","java-1.6.0-openjdk-1:1.6.0.0-1.39.1.9.8.el6_1","java-1.6.0-openjdk-1:1.6.0.0-1.22.1.9.8.el5_6","java-1.6.0-sun-1:1.6.0.26-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.26-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0869.json"},{"CVE":"CVE-2010-4472","severity":"low","public_date":"2011-02-15T00:00:00Z","advisories":["RHSA-2011:0281","RHSA-2011:0282"],"bugzilla":"675942","bugzilla_description":"CVE-2010-4472 OpenJDK untrusted code allowed to replace DSIG/C14N implementation (6994263)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.39.b17.el6_0","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.20.b17.el5","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4472.json"},{"CVE":"CVE-2010-4469","severity":"important","public_date":"2011-02-15T00:00:00Z","advisories":["RHSA-2011:0281","RHSA-2011:0282"],"bugzilla":"675958","bugzilla_description":"CVE-2010-4469 OpenJDK Hotspot verifier heap corruption (6878713)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.39.b17.el6_0","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.20.b17.el5","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4469.json"},{"CVE":"CVE-2010-4465","severity":"important","public_date":"2011-02-15T00:00:00Z","advisories":["RHSA-2011:0357","RHSA-2011:0880","RHSA-2011:0870","RHSA-2011:0364","RHSA-2011:0490","RHSA-2011:0281","RHSA-2011:0282"],"bugzilla":"675984","bugzilla_description":"CVE-2010-4465 OpenJDK Swing timer-based security manager bypass  (6907662)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.39.b17.el6_0","java-1.5.0-ibm-1:1.5.0.12.4-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.9-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.9.sap-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.0-1.20.b17.el5","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4465.json"},{"CVE":"CVE-2010-4470","severity":"moderate","public_date":"2011-02-15T00:00:00Z","advisories":["RHSA-2011:0281","RHSA-2011:0282"],"bugzilla":"676005","bugzilla_description":"CVE-2010-4470 OpenJDK JAXP untrusted component state manipulation (6927050)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.39.b17.el6_0","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.20.b17.el5","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4470.json"},{"CVE":"CVE-2010-4448","severity":"low","public_date":"2011-02-15T00:00:00Z","advisories":["RHSA-2011:0357","RHSA-2011:0880","RHSA-2011:0870","RHSA-2011:0364","RHSA-2011:0490","RHSA-2011:0281","RHSA-2011:0282"],"bugzilla":"676023","bugzilla_description":"CVE-2010-4448 OpenJDK DNS cache poisoning by untrusted applets (6981922)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.39.b17.el6_0","java-1.5.0-ibm-1:1.5.0.12.4-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.9-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.9.sap-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.0-1.20.b17.el5","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4448.json"},{"CVE":"CVE-2010-4450","severity":"low","public_date":"2011-02-15T00:00:00Z","advisories":["RHSA-2011:0364","RHSA-2011:0281","RHSA-2011:0282"],"bugzilla":"676026","bugzilla_description":"CVE-2010-4450 OpenJDK Launcher incorrect processing of empty library path entries  (6983554)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.39.b17.el6_0","java-1.5.0-ibm-1:1.5.0.12.4-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.12.4-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.4-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.20.b17.el5","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4450.json"},{"CVE":"CVE-2010-4476","severity":"moderate","public_date":"2011-02-01T00:00:00Z","advisories":["RHSA-2011:0291","RHSA-2011:0292","RHSA-2011:0282","RHSA-2011:0290","RHSA-2011:0211","RHSA-2011:0299","RHSA-2011:0212","RHSA-2011:0333","RHSA-2011:0334","RHSA-2011:0213","RHSA-2011:0214","RHSA-2011:0335","RHSA-2011:0350","RHSA-2011:0880","RHSA-2011:0210","RHSA-2011:0336","RHSA-2011:0348","RHSA-2011:0349"],"bugzilla":"674336","bugzilla_description":"CVE-2010-4476 JDK Double.parseDouble Denial-Of-Service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.18.b17.el5","tomcat6-0:6.0.24-24.el6_0","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.8.sap-1jpp.2.el5","tomcat5-0:5.5.23-0jpp.17.el5_6","java-1.6.0-openjdk-1:1.6.0.0-1.36.b17.el6_0","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el4","java-1.4.2-ibm-sap-0:1.4.2.13.8.sap-1jpp.2.el4_8","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el5","tomcat5-0:5.5.28-12_patch_03.ep5.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el4","jbossweb-0:2.1.10-5.patch01.1.1.ep5.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el5","java-1.4.2-ibm-0:1.4.2.13.8-1jpp.3.el5","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.5.el6","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.3.el6","jbossweb-0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el5","jbossweb-0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el4","tomcat5-0:5.5.28-18_patch_03.ep5.el4","tomcat6-0:6.0.24-11.patch_03.ep5.el5","tomcat6-0:6.0.24-11.patch_03.ep5.el4","jbossweb-0:2.1.10-5.patch01.1.ep5.el4","java-1.4.2-ibm-0:1.4.2.13.8-1jpp.4.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4476.json"},{"CVE":"CVE-2010-4351","severity":"important","public_date":"2011-01-18T00:00:00Z","advisories":["RHSA-2011:0176"],"bugzilla":"663680","bugzilla_description":"CVE-2010-4351 IcedTea jnlp security manager bypass","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-393->CWE-305","affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.17.b17.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4351.json"},{"CVE":"CVE-2010-3860","severity":"moderate","public_date":"2010-11-24T00:00:00Z","advisories":["RHSA-2011:0176"],"bugzilla":"645843","bugzilla_description":"CVE-2010-3860 IcedTea System property information leak via public static","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.17.b17.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3860.json"},{"CVE":"CVE-2010-3568","severity":"important","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2011:0880","RHSA-2010:0786","RHSA-2010:0873","RHSA-2010:0770","RHSA-2010:0807"],"bugzilla":"639876","bugzilla_description":"CVE-2010-3568 OpenJDK Deserialization Race condition (6559775)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3568.json"},{"CVE":"CVE-2010-3554","severity":"important","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2010:0768","RHSA-2010:0865","RHSA-2010:0770"],"bugzilla":"639880","bugzilla_description":"CVE-2010-3554 CVE-2010-3561  OpenJDK corba reflection vulnerabilities (6891766,6925672)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3554.json"},{"CVE":"CVE-2010-3561","severity":"important","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2010:0768","RHSA-2010:0865","RHSA-2010:0770"],"bugzilla":"639880","bugzilla_description":"CVE-2010-3554 CVE-2010-3561  OpenJDK corba reflection vulnerabilities (6891766,6925672)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3561.json"},{"CVE":"CVE-2010-3562","severity":"important","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2011:0880","RHSA-2010:0786","RHSA-2010:0873","RHSA-2010:0770","RHSA-2010:0807"],"bugzilla":"639897","bugzilla_description":"CVE-2010-3562 OpenJDK IndexColorModel double-free (6925710)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3562.json"},{"CVE":"CVE-2010-3557","severity":"important","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2011:0169","RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2011:0880","RHSA-2010:0786","RHSA-2010:0770"],"bugzilla":"639904","bugzilla_description":"CVE-2010-3557 OpenJDK Swing mutable static (6938813)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el6","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3557.json"},{"CVE":"CVE-2010-3548","severity":"moderate","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2011:0880","RHSA-2010:0786","RHSA-2010:0873","RHSA-2010:0770","RHSA-2010:0807"],"bugzilla":"639909","bugzilla_description":"CVE-2010-3548 OpenJDK DNS server IP address information leak (6957564)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3548.json"},{"CVE":"CVE-2010-3564","severity":"moderate","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2010:0768","RHSA-2010:0865"],"bugzilla":"639914","bugzilla_description":"CVE-2010-3564 OpenJDK kerberos vulnerability (6958060)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3564.json"},{"CVE":"CVE-2010-3565","severity":"important","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2011:0880","RHSA-2010:0786","RHSA-2010:0873","RHSA-2010:0770","RHSA-2010:0807"],"bugzilla":"639920","bugzilla_description":"CVE-2010-3565 OpenJDK JPEG writeImage remote code execution (6963023)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3565.json"},{"CVE":"CVE-2010-3569","severity":"important","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2011:0880","RHSA-2010:0786","RHSA-2010:0873","RHSA-2010:0770","RHSA-2010:0807"],"bugzilla":"639925","bugzilla_description":"CVE-2010-3569 OpenJDK Serialization inconsistencies (6966692)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3569.json"},{"CVE":"CVE-2010-3553","severity":"important","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2011:0169","RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2011:0880","RHSA-2010:0786","RHSA-2010:0770"],"bugzilla":"642167","bugzilla_description":"CVE-2010-3553 OpenJDK Swing unsafe reflection usage (6622002)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el6","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3553.json"},{"CVE":"CVE-2010-3549","severity":"important","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2011:0880","RHSA-2010:0786","RHSA-2010:0873","RHSA-2010:0770","RHSA-2010:0807"],"bugzilla":"642180","bugzilla_description":"CVE-2010-3549 OpenJDK HttpURLConnection request splitting (6952017)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3549.json"},{"CVE":"CVE-2010-3551","severity":"moderate","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2011:0880","RHSA-2010:0786","RHSA-2010:0873","RHSA-2010:0770","RHSA-2010:0807"],"bugzilla":"642187","bugzilla_description":"CVE-2010-3551 OpenJDK local network address disclosure (6952603)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3551.json"},{"CVE":"CVE-2010-3567","severity":"important","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2010:0768","RHSA-2010:0865","RHSA-2010:0770"],"bugzilla":"642197","bugzilla_description":"CVE-2010-3567 OpenJDK ICU Opentype layout engine crash (6963285)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3567.json"},{"CVE":"CVE-2010-3541","severity":"moderate","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2011:0880","RHSA-2010:0786","RHSA-2010:0873","RHSA-2010:0770","RHSA-2010:0807"],"bugzilla":"642202","bugzilla_description":"CVE-2010-3541 CVE-2010-3573 OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3541.json"},{"CVE":"CVE-2010-3573","severity":"moderate","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2011:0880","RHSA-2010:0873","RHSA-2010:0770","RHSA-2010:0807"],"bugzilla":"642202","bugzilla_description":"CVE-2010-3541 CVE-2010-3573 OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3573.json"},{"CVE":"CVE-2010-3574","severity":"moderate","public_date":"2010-10-12T00:00:00Z","advisories":["RHSA-2010:0935","RHSA-2010:0768","RHSA-2010:0987","RHSA-2011:0152","RHSA-2010:0865","RHSA-2011:0880","RHSA-2010:0873","RHSA-2010:0770","RHSA-2010:0807"],"bugzilla":"642215","bugzilla_description":"CVE-2010-3574 OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.8-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.8-1jpp.2.el5","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.4.2-ibm-0:1.4.2.13.7-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.4.2-ibm-0:1.4.2.13.7-1jpp.3.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3574.json"},{"CVE":"CVE-2010-2548","severity":"moderate","public_date":"2010-07-28T00:00:00Z","advisories":[],"bugzilla":"616893","bugzilla_description":"CVE-2010-2548 IcedTea Incomplete property access check for unsigned applications","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2548.json"},{"CVE":"CVE-2010-2783","severity":"important","public_date":"2010-07-28T00:00:00Z","advisories":[],"bugzilla":"616895","bugzilla_description":"CVE-2010-2783 IcedTea: 'Extended JNLP Services' arbitrary file access","cvss_score":8.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:C/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2783.json"},{"CVE":"CVE-2010-0082","severity":"moderate","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337"],"bugzilla":"575736","bugzilla_description":"CVE-2010-0082 OpenJDK Loader-constraint table allows arrays instead of only the base-classes (6626217)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0082.json"},{"CVE":"CVE-2010-0084","severity":"moderate","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2010:0586","RHSA-2010:0574","RHSA-2010:0130","RHSA-2010:0383","RHSA-2010:0471"],"bugzilla":"575740","bugzilla_description":"CVE-2010-0084 OpenJDK Policy/PolicyFile leak dynamic ProtectionDomains. (6633872)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el4_8","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0084.json"},{"CVE":"CVE-2010-0085","severity":"moderate","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2010:0586","RHSA-2010:0574","RHSA-2010:0130","RHSA-2010:0383","RHSA-2010:0471"],"bugzilla":"575747","bugzilla_description":"CVE-2010-0085 OpenJDK File TOCTOU deserialization vulnerability (6736390)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-367","affected_packages":["java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el4_8","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0085.json"},{"CVE":"CVE-2010-0088","severity":"important","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2010:0586","RHSA-2010:0574","RHSA-2010:0130","RHSA-2010:0383","RHSA-2010:0471"],"bugzilla":"575755","bugzilla_description":"CVE-2010-0088 OpenJDK Inflater/Deflater clone issues (6745393)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el4_8","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0088.json"},{"CVE":"CVE-2010-0091","severity":"moderate","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2010:0586","RHSA-2010:0574","RHSA-2010:0130","RHSA-2010:0383","RHSA-2010:0471"],"bugzilla":"575756","bugzilla_description":"CVE-2010-0091 OpenJDK Unsigned applet can retrieve the dragged information before drop action occurs(6887703)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el4_8","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0091.json"},{"CVE":"CVE-2010-0092","severity":"moderate","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2010:0130","RHSA-2010:0383","RHSA-2010:0471"],"bugzilla":"575760","bugzilla_description":"CVE-2010-0092 OpenJDK AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (6888149)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0092.json"},{"CVE":"CVE-2010-0093","severity":"moderate","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337"],"bugzilla":"575764","bugzilla_description":"CVE-2010-0093 OpenJDK System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0093.json"},{"CVE":"CVE-2010-0094","severity":"important","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2010:0130","RHSA-2010:0383","RHSA-2010:0471"],"bugzilla":"575769","bugzilla_description":"CVE-2010-0094 OpenJDK Deserialization of RMIConnectionImpl objects should enforce stricter checks (6893947)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0094.json"},{"CVE":"CVE-2010-0095","severity":"important","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2010:0586","RHSA-2010:0574","RHSA-2010:0130","RHSA-2010:0383","RHSA-2010:0471"],"bugzilla":"575772","bugzilla_description":"CVE-2010-0095 OpenJDK Subclasses of InetAddress may incorrectly interpret network addresses (6893954)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el4_8","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0095.json"},{"CVE":"CVE-2010-0845","severity":"moderate","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337"],"bugzilla":"575775","bugzilla_description":"CVE-2010-0845 OpenJDK  No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0845.json"},{"CVE":"CVE-2010-0838","severity":"critical","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2010:0130","RHSA-2010:0383","RHSA-2010:0471"],"bugzilla":"575808","bugzilla_description":"CVE-2010-0838 OpenJDK CMM readMabCurveData Buffer Overflow Vulnerability (6899653)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0838.json"},{"CVE":"CVE-2010-0837","severity":"critical","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2010:0130","RHSA-2010:0383","RHSA-2010:0471"],"bugzilla":"575818","bugzilla_description":"CVE-2010-0837 OpenJDK JAR \"unpack200\" must verify input parameters (6902299)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0837.json"},{"CVE":"CVE-2010-0840","severity":"critical","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2010:0489","RHSA-2010:0586","RHSA-2010:0574","RHSA-2010:0383","RHSA-2010:0471"],"bugzilla":"575846","bugzilla_description":"CVE-2010-0840 OpenJDK Applet Trusted Methods Chaining Privilege Escalation Vulnerability (6904691)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.11.2-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el5","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el4_8","java-1.5.0-ibm-1:1.5.0.11.2-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0840.json"},{"CVE":"CVE-2010-0848","severity":"critical","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2010:0489","RHSA-2010:0586","RHSA-2010:0574","RHSA-2010:0383","RHSA-2010:0471"],"bugzilla":"575865","bugzilla_description":"CVE-2010-0848 OpenJDK AWT Library Invalid Index Vulnerability (6914823)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.11.2-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el5","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el4_8","java-1.5.0-ibm-1:1.5.0.11.2-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0848.json"},{"CVE":"CVE-2010-0847","severity":"critical","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2010:0489","RHSA-2010:0586","RHSA-2010:0574","RHSA-2010:0383","RHSA-2010:0471"],"bugzilla":"575871","bugzilla_description":"CVE-2010-0847 OpenJDK ImagingLib arbitrary code execution vulnerability (6914866)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.8-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.11.2-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el5","java-1.4.2-ibm-sap-0:1.4.2.13.5.sap-1jpp.1.el4_8","java-1.5.0-ibm-1:1.5.0.11.2-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el3","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.5-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0847.json"},{"CVE":"CVE-2009-3555","severity":"moderate","public_date":"2009-11-05T00:00:00Z","advisories":["RHSA-2009:1580","RHSA-2010:0408","RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2010:0786","RHSA-2010:0167","RHSA-2010:0166","RHSA-2010:0165","RHSA-2010:0440","RHSA-2010:0164","RHSA-2010:0163","RHSA-2010:0162","RHSA-2009:1579","RHSA-2009:1694","RHSA-2010:0807","RHSA-2010:0119","RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2011:0880","RHSA-2010:0155","RHSA-2010:0770","RHSA-2010:0011","RHSA-2015:1591","RHSA-2010:0130"],"bugzilla":"533125","bugzilla_description":"CVE-2009-3555 TLS: MITM attacks via session renegotiation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-300","affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","httpd-0:2.2.3-31.el5_4.2","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el5","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","openssl-0:0.9.8e-12.el5_4.6","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el4_8","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","rhev-hypervisor-0:5.4-2.1.12.1.el5_4rhev2_1","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5","openssl097a-0:0.9.7a-9.el5_4.2","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","httpd22-0:2.2.10-25.1.ep5.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","httpd-0:2.0.52-41.ent.6","gnutls-0:1.0.20-4.el4_8.7","httpd-0:2.2.10-11.ep5.el5","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","httpd-0:2.0.46-77.ent","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4","pulp-0:2.6.0.15-1.el7sat","openssl-0:0.9.7a-33.26"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3555.json"},{"CVE":"CVE-2009-3873","severity":"important","public_date":"2009-11-03T00:00:00Z","advisories":["RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1647","RHSA-2009:1643","RHSA-2009:1694","RHSA-2009:1584","RHSA-2009:1551","RHSA-2010:0043","RHSA-2009:1662"],"bugzilla":"530053","bugzilla_description":"CVE-2009-3873 OpenJDK JPEG Image Writer quantization problem (6862968)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","java-1.4.2-ibm-0:1.4.2.13.2.sap-1jpp.4.el5_3","java-1.4.2-ibm-0:1.4.2.13.2.sap-1jpp.4.el4_8","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.11-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.11-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3873.json"},{"CVE":"CVE-2009-3875","severity":"moderate","public_date":"2009-11-03T00:00:00Z","advisories":["RHSA-2010:0408","RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1647","RHSA-2009:1643","RHSA-2009:1694","RHSA-2009:1584","RHSA-2010:0043"],"bugzilla":"530057","bugzilla_description":"CVE-2009-3875 OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities  (6863503)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.11-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.11-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el4_8","java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3875.json"},{"CVE":"CVE-2009-3876","severity":"moderate","public_date":"2009-11-03T00:00:00Z","advisories":["RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1647","RHSA-2009:1643","RHSA-2009:1694","RHSA-2009:1584","RHSA-2009:1551","RHSA-2010:0043","RHSA-2009:1662"],"bugzilla":"530061","bugzilla_description":"CVE-2009-3876 OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","java-1.4.2-ibm-0:1.4.2.13.2.sap-1jpp.4.el5_3","java-1.4.2-ibm-0:1.4.2.13.2.sap-1jpp.4.el4_8","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.11-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.11-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3876.json"},{"CVE":"CVE-2009-3877","severity":"moderate","public_date":"2009-11-03T00:00:00Z","advisories":["RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1647","RHSA-2009:1643","RHSA-2009:1694","RHSA-2009:1584","RHSA-2009:1551","RHSA-2010:0043","RHSA-2009:1662"],"bugzilla":"530061","bugzilla_description":"CVE-2009-3876 OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","java-1.4.2-ibm-0:1.4.2.13.2.sap-1jpp.4.el5_3","java-1.4.2-ibm-0:1.4.2.13.2.sap-1jpp.4.el4_8","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.11-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.11-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3877.json"},{"CVE":"CVE-2009-3869","severity":"important","public_date":"2009-11-03T00:00:00Z","advisories":["RHSA-2010:0408","RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1647","RHSA-2009:1643","RHSA-2009:1694","RHSA-2009:1584","RHSA-2010:0043"],"bugzilla":"530062","bugzilla_description":"CVE-2009-3869 OpenJDK JRE AWT setDifflCM stack overflow (6872357)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.11-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.11-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el4_8","java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3869.json"},{"CVE":"CVE-2009-3871","severity":"important","public_date":"2009-11-03T00:00:00Z","advisories":["RHSA-2010:0408","RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1647","RHSA-2009:1643","RHSA-2009:1694","RHSA-2009:1584","RHSA-2010:0043"],"bugzilla":"530063","bugzilla_description":"CVE-2009-3871 OpenJDK JRE AWT setBytePixels heap overflow (6872358)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.11-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.11-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el4_8","java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3871.json"},{"CVE":"CVE-2009-3874","severity":"important","public_date":"2009-11-03T00:00:00Z","advisories":["RHSA-2010:0408","RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1647","RHSA-2009:1643","RHSA-2009:1694","RHSA-2009:1584","RHSA-2010:0043"],"bugzilla":"530067","bugzilla_description":"CVE-2009-3874 OpenJDK ImageI/O JPEG heap overflow  (6874643)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.11-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.11-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el4_8","java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.3-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3874.json"},{"CVE":"CVE-2009-3728","severity":"low","public_date":"2009-11-03T00:00:00Z","advisories":["RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1584","RHSA-2009:1662"],"bugzilla":"530098","bugzilla_description":"CVE-2009-3728 OpenJDK ICC_Profile file existence detection information leak (6631533)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3728.json"},{"CVE":"CVE-2009-3881","severity":"important","public_date":"2009-11-03T00:00:00Z","advisories":["RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1584","RHSA-2009:1662"],"bugzilla":"530173","bugzilla_description":"CVE-2009-3881 OpenJDK resurrected classloaders can still have children (6636650)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3881.json"},{"CVE":"CVE-2009-3882","severity":"low","public_date":"2009-11-03T00:00:00Z","advisories":["RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1584","RHSA-2009:1662"],"bugzilla":"530175","bugzilla_description":"CVE-2009-3882 CVE-2009-3883 OpenJDK information leaks in mutable variables (6657026,6657138)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3882.json"},{"CVE":"CVE-2009-3883","severity":"low","public_date":"2009-11-03T00:00:00Z","advisories":["RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1584","RHSA-2009:1662"],"bugzilla":"530175","bugzilla_description":"CVE-2009-3882 CVE-2009-3883 OpenJDK information leaks in mutable variables (6657026,6657138)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3883.json"},{"CVE":"CVE-2009-3880","severity":"low","public_date":"2009-11-03T00:00:00Z","advisories":["RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1584","RHSA-2009:1662"],"bugzilla":"530296","bugzilla_description":"CVE-2009-3880 OpenJDK UI logging information leakage(6664512)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3880.json"},{"CVE":"CVE-2009-3879","severity":"low","public_date":"2009-11-03T00:00:00Z","advisories":["RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1584","RHSA-2009:1662"],"bugzilla":"530297","bugzilla_description":"CVE-2009-3879 OpenJDK GraphicsConfiguration information leak(6822057)","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3879.json"},{"CVE":"CVE-2009-3884","severity":"low","public_date":"2009-11-03T00:00:00Z","advisories":["RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1584","RHSA-2009:1662"],"bugzilla":"530300","bugzilla_description":"CVE-2009-3884 OpenJDK zoneinfo file existence information leak (6824265)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el5","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.17-1jpp.2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3884.json"},{"CVE":"CVE-2009-2670","severity":"moderate","public_date":"2009-08-05T00:00:00Z","advisories":["RHSA-2009:1582","RHSA-2009:1236","RHSA-2009:1199","RHSA-2010:0043","RHSA-2009:1201","RHSA-2009:1200","RHSA-2009:1662"],"bugzilla":"512896","bugzilla_description":"CVE-2009-2670 OpenJDK Untrusted applet System properties access (6738524)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el5","java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2670.json"},{"CVE":"CVE-2009-2671","severity":"important","public_date":"2009-08-05T00:00:00Z","advisories":["RHSA-2009:1582","RHSA-2009:1236","RHSA-2009:1199","RHSA-2010:0043","RHSA-2009:1201","RHSA-2009:1200","RHSA-2009:1662"],"bugzilla":"512907","bugzilla_description":"CVE-2009-2671 CVE-2009-2672 OpenJDK Proxy mechanism information leaks  (6801071)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el5","java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2671.json"},{"CVE":"CVE-2009-2672","severity":"important","public_date":"2009-08-05T00:00:00Z","advisories":["RHSA-2009:1582","RHSA-2009:1236","RHSA-2009:1199","RHSA-2010:0043","RHSA-2009:1201","RHSA-2009:1200","RHSA-2009:1662"],"bugzilla":"512907","bugzilla_description":"CVE-2009-2671 CVE-2009-2672 OpenJDK Proxy mechanism information leaks  (6801071)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el5","java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2672.json"},{"CVE":"CVE-2009-2673","severity":"important","public_date":"2009-08-05T00:00:00Z","advisories":["RHSA-2009:1582","RHSA-2009:1236","RHSA-2009:1199","RHSA-2010:0043","RHSA-2009:1201","RHSA-2009:1200","RHSA-2009:1662"],"bugzilla":"512914","bugzilla_description":"CVE-2009-2673 OpenJDK proxy mechanism allows non-authorized socket connections  (6801497)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N/","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el5","java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2673.json"},{"CVE":"CVE-2009-2674","severity":"critical","public_date":"2009-08-05T00:00:00Z","advisories":["RHSA-2009:1582","RHSA-2010:0043","RHSA-2009:1201","RHSA-2009:1200"],"bugzilla":"512915","bugzilla_description":"CVE-2009-2674 Java Web Start Buffer JPEG processing integer overflow (6823373)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2674.json"},{"CVE":"CVE-2009-2675","severity":"critical","public_date":"2009-08-05T00:00:00Z","advisories":["RHSA-2009:1582","RHSA-2009:1236","RHSA-2009:1199","RHSA-2010:0043","RHSA-2009:1201","RHSA-2009:1200","RHSA-2009:1662"],"bugzilla":"512920","bugzilla_description":"CVE-2009-2675 Java Web Start Buffer unpack200 processing integer overflow (6830335)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el5","java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el4","java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2675.json"},{"CVE":"CVE-2009-2625","severity":"moderate","public_date":"2009-08-05T00:00:00Z","advisories":["RHSA-2012:1537","RHSA-2009:1582","RHSA-2012:0725","RHSA-2009:1236","RHSA-2012:1232","RHSA-2009:1199","RHSA-2009:1650","RHSA-2009:1551","RHSA-2009:1201","RHSA-2009:1200","RHSA-2009:1662","RHSA-2009:1636","RHSA-2009:1649","RHSA-2009:1505","RHSA-2009:1637","RHSA-2009:1615","RHSA-2011:0858","RHSA-2013:0763","RHSA-2010:0043"],"bugzilla":"512921","bugzilla_description":"CVE-2009-2625 xerces-j2, JDK: XML parsing Denial-Of-Service (6845701)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jasperreports-server-pro-0:4.7.1-2.el6ev","java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el5","java-1.4.2-ibm-0:1.4.2.13.1-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.2.sap-1jpp.4.el5_3","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4","xerces-j2-0:2.7.1-12.6.el6_0","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el4","java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5","xerces-j2-0:2.7.1-7jpp.2.el5_4.2","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2625.json"},{"CVE":"CVE-2009-2475","severity":"low","public_date":"2009-08-05T00:00:00Z","advisories":["RHSA-2009:1199","RHSA-2009:1201","RHSA-2009:1200","RHSA-2009:1662"],"bugzilla":"513215","bugzilla_description":"CVE-2009-2475 OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2475.json"},{"CVE":"CVE-2009-2476","severity":"low","public_date":"2009-08-05T00:00:00Z","advisories":["RHSA-2009:1201","RHSA-2009:1200"],"bugzilla":"513220","bugzilla_description":"CVE-2009-2476 OpenJDK OpenType checks can be bypassed (6736293)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2476.json"},{"CVE":"CVE-2009-2689","severity":"low","public_date":"2009-08-05T00:00:00Z","advisories":["RHSA-2009:1199","RHSA-2009:1201","RHSA-2009:1662"],"bugzilla":"513222","bugzilla_description":"CVE-2009-2689 OpenJDK JDK13Services grants unnecessary privileges  (6777448)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2689.json"},{"CVE":"CVE-2009-2690","severity":"low","public_date":"2009-08-05T00:00:00Z","advisories":["RHSA-2009:1201","RHSA-2009:1200"],"bugzilla":"513223","bugzilla_description":"CVE-2009-2690 OpenJDK private variable information disclosure (6777487)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2690.json"},{"CVE":"CVE-2009-2409","severity":"moderate","public_date":"2009-07-29T00:00:00Z","advisories":["RHSA-2009:1184","RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1186","RHSA-2009:1207","RHSA-2009:1190","RHSA-2010:0166","RHSA-2009:1584","RHSA-2010:0054","RHSA-2009:1432","RHSA-2010:0163","RHSA-2009:1662"],"bugzilla":"510197","bugzilla_description":"CVE-2009-2409 deprecate MD2 in SSL cert validation (Kaminsky)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","seamonkey-0:1.0.9-0.45.el3","java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","nss-0:3.12.3.99.3-1.el4_8.2","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","openssl-0:0.9.8e-12.el5_4.1","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","openssl-0:0.9.7a-33.26","nss-0:3.12.3.99.3-1.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2409.json"},{"CVE":"CVE-2009-0217","severity":"moderate","public_date":"2009-07-14T00:00:00Z","advisories":["RHSA-2009:1636","RHSA-2009:1649","RHSA-2009:1637","RHSA-2009:1428","RHSA-2009:1694","RHSA-2009:1650","RHSA-2010:0043","RHSA-2009:1201","RHSA-2009:1200"],"bugzilla":"511915","bugzilla_description":"CVE-2009-0217 xmlsec1, mono, xml-security-c, xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["xmlsec1-0:1.2.9-8.1.1","java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4","xmlsec1-0:1.2.6-3.1","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0217.json"},{"CVE":"CVE-2009-0793","severity":"low","public_date":"2009-04-02T00:00:00Z","advisories":["RHSA-2009:0377"],"bugzilla":"492353","bugzilla_description":"CVE-2009-0793 lcms: Null pointer dereference (DoS) by handling transformations of monochrome profiles","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-0.30.b09.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0793.json"},{"CVE":"CVE-2009-1101","severity":"important","public_date":"2009-03-25T00:00:00Z","advisories":["RHSA-2009:0392","RHSA-2009:1038","RHSA-2009:0377","RHSA-2009:1198","RHSA-2010:0043"],"bugzilla":"490166","bugzilla_description":"CVE-2009-1101 OpenJDK JAX-WS service endpoint remote Denial-of-Service (6630639)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.13-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.13-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.9-1jpp.3.el5","java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.9-1jpp.5.el4","java-1.6.0-openjdk-1:1.6.0.0-0.30.b09.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1101.json"},{"CVE":"CVE-2009-1093","severity":"important","public_date":"2009-03-25T00:00:00Z","advisories":["RHSA-2009:0392","RHSA-2009:0394","RHSA-2009:1038","RHSA-2009:0377","RHSA-2009:1198","RHSA-2010:0043","RHSA-2009:1662"],"bugzilla":"490167","bugzilla_description":"CVE-2009-1093 OpenJDK remote LDAP Denial-Of-Service (6717680)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.5.0-sun-0:1.5.0.18-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.13-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.13-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.18-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.9-1jpp.3.el5","java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.9-1jpp.5.el4","java-1.6.0-openjdk-1:1.6.0.0-0.30.b09.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1093.json"},{"CVE":"CVE-2009-1094","severity":"critical","public_date":"2009-03-25T00:00:00Z","advisories":["RHSA-2009:0392","RHSA-2009:0394","RHSA-2009:1038","RHSA-2009:0377","RHSA-2009:1198","RHSA-2010:0043","RHSA-2009:1662"],"bugzilla":"490168","bugzilla_description":"CVE-2009-1094 OpenJDK  LDAP client remote code execution (6737315)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-sun-0:1.5.0.18-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.13-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.13-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.18-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.9-1jpp.3.el5","java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.9-1jpp.5.el4","java-1.6.0-openjdk-1:1.6.0.0-0.30.b09.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1094.json"},{"CVE":"CVE-2009-1095","severity":"critical","public_date":"2009-03-25T00:00:00Z","advisories":["RHSA-2009:0392","RHSA-2009:0394","RHSA-2009:1038","RHSA-2009:0377","RHSA-2009:1198","RHSA-2010:0043","RHSA-2009:1662"],"bugzilla":"490169","bugzilla_description":"CVE-2009-1095 CVE-2009-1096 OpenJDK Pack200 Buffer overflow vulnerability (6792554)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-sun-0:1.5.0.18-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.13-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.13-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.18-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.9-1jpp.3.el5","java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.9-1jpp.5.el4","java-1.6.0-openjdk-1:1.6.0.0-0.30.b09.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1095.json"},{"CVE":"CVE-2009-1096","severity":"critical","public_date":"2009-03-25T00:00:00Z","advisories":["RHSA-2009:0392","RHSA-2009:0394","RHSA-2009:1038","RHSA-2009:0377","RHSA-2009:1198","RHSA-2010:0043","RHSA-2009:1662"],"bugzilla":"490169","bugzilla_description":"CVE-2009-1095 CVE-2009-1096 OpenJDK Pack200 Buffer overflow vulnerability (6792554)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-sun-0:1.5.0.18-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.13-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.13-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.18-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.9-1jpp.3.el5","java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.9-1jpp.5.el4","java-1.6.0-openjdk-1:1.6.0.0-0.30.b09.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1096.json"},{"CVE":"CVE-2009-1102","severity":"critical","public_date":"2009-03-25T00:00:00Z","advisories":["RHSA-2009:0392","RHSA-2009:0377"],"bugzilla":"490172","bugzilla_description":"CVE-2009-1102 OpenJDK code generation vulnerability (6636360)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.13-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.13-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-0.30.b09.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1102.json"},{"CVE":"CVE-2009-1097","severity":"critical","public_date":"2009-03-25T00:00:00Z","advisories":["RHSA-2009:0392","RHSA-2009:1038","RHSA-2009:0377","RHSA-2009:1198","RHSA-2010:0043"],"bugzilla":"490174","bugzilla_description":"CVE-2009-1097 OpenJDK: PNG and GIF processing buffer overflow vulnerabilities (6804996, 6804997)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.13-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.13-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.9-1jpp.3.el5","java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.9-1jpp.5.el4","java-1.6.0-openjdk-1:1.6.0.0-0.30.b09.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1097.json"},{"CVE":"CVE-2009-1098","severity":"critical","public_date":"2009-03-25T00:00:00Z","advisories":["RHSA-2009:0392","RHSA-2009:0394","RHSA-2009:1038","RHSA-2009:0377","RHSA-2009:1198","RHSA-2010:0043","RHSA-2009:1662"],"bugzilla":"490178","bugzilla_description":"CVE-2009-1098 OpenJDK GIF processing buffer overflow vulnerability (6804998)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-sun-0:1.5.0.18-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.13-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.13-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.18-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.9-1jpp.3.el5","java-1.6.0-ibm-1:1.6.0.5-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.9-1jpp.5.el4","java-1.6.0-openjdk-1:1.6.0.0-0.30.b09.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1098.json"},{"CVE":"CVE-2009-0723","severity":"moderate","public_date":"2009-03-19T00:00:00Z","advisories":["RHSA-2009:0339","RHSA-2009:0377"],"bugzilla":"487508","bugzilla_description":"CVE-2009-0723 LittleCms integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["lcms-0:1.18-0.1.beta1.el5_3.2","java-1.6.0-openjdk-1:1.6.0.0-0.30.b09.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0723.json"},{"CVE":"CVE-2009-0581","severity":"low","public_date":"2009-03-19T00:00:00Z","advisories":["RHSA-2009:0339","RHSA-2009:0377"],"bugzilla":"487509","bugzilla_description":"CVE-2009-0581 LittleCms memory leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["lcms-0:1.18-0.1.beta1.el5_3.2","java-1.6.0-openjdk-1:1.6.0.0-0.30.b09.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0581.json"},{"CVE":"CVE-2009-0733","severity":"moderate","public_date":"2009-03-19T00:00:00Z","advisories":["RHSA-2009:0339","RHSA-2009:0377"],"bugzilla":"487512","bugzilla_description":"CVE-2009-0733 LittleCms lack of upper-bounds check on sizes","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["lcms-0:1.18-0.1.beta1.el5_3.2","java-1.6.0-openjdk-1:1.6.0.0-0.30.b09.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0733.json"},{"CVE":"CVE-2008-5356","severity":"critical","public_date":"2008-12-04T00:00:00Z","advisories":["RHSA-2008:1018","RHSA-2009:0466","RHSA-2009:0016","RHSA-2009:0369","RHSA-2008:1025"],"bugzilla":"472218","bugzilla_description":"CVE-2008-5356 OpenJDK Font processing vulnerability (6733336)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.11-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4","java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5356.json"},{"CVE":"CVE-2008-5357","severity":"critical","public_date":"2008-12-04T00:00:00Z","advisories":["RHSA-2008:1018","RHSA-2009:0466","RHSA-2009:0016","RHSA-2009:0369","RHSA-2008:1025"],"bugzilla":"472231","bugzilla_description":"CVE-2008-5357 OpenJDK Truetype Font processing vulnerability (6751322)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.11-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4","java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5357.json"},{"CVE":"CVE-2006-2426","severity":"low","public_date":"2006-05-14T00:00:00Z","advisories":["RHSA-2009:0392","RHSA-2009:0394","RHSA-2009:0377","RHSA-2009:1662"],"bugzilla":"395481","bugzilla_description":"CVE-2006-2426 Untrusted applet causes DoS by filling up disk space","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.5.0-sun-0:1.5.0.18-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.13-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.13-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.18-1jpp.1.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-0.30.b09.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2426.json"},{"CVE":"CVE-2015-0480","severity":"low","public_date":"2005-01-04T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211504","bugzilla_description":"CVE-2015-0480 OpenJDK: jar directory traversal issues (Tools, 8064601)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0480.json"},{"CVE":"CVE-2005-1080","severity":"low","public_date":"2005-01-04T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"606442","bugzilla_description":"CVE-2005-1080 jar: directory traversal vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1080.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.0-openjdk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.0-openjdk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.0-openjdk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.0-openjdk-headless_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.0-openjdk-headless_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.0-openjdk-headless_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.0-openjdk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.0-openjdk_security_api_results.json
new file mode 100644
index 0000000..403b217
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.0-openjdk_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-2754","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514"],"bugzilla":"1823199","bugzilla_description":"CVE-2020-2754 OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2754.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2755","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514"],"bugzilla":"1823200","bugzilla_description":"CVE-2020-2755 OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2755.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2756","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823215","bugzilla_description":"CVE-2020-2756 OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2756.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2757","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823216","bugzilla_description":"CVE-2020-2757 OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2757.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2773","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1508","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:1512","RHSA-2020:1514"],"bugzilla":"1823224","bugzilla_description":"CVE-2020-2773 OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2773.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2800","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823527","bugzilla_description":"CVE-2020-2800 OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2800.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2830","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823542","bugzilla_description":"CVE-2020-2830 OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185->CWE-400","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2830.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-2803","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823694","bugzilla_description":"CVE-2020-2803 OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2805","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823844","bugzilla_description":"CVE-2020-2805 OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2805.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2816","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1517","RHSA-2020:1514"],"bugzilla":"1823853","bugzilla_description":"CVE-2020-2816 OpenJDK: Application data accepted before TLS handshake completion (JSSE, 8235691)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["java-11-openjdk-1:11.0.7.10-4.el7_8","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2816.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-2778","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1517","RHSA-2020:1514"],"bugzilla":"1823879","bugzilla_description":"CVE-2020-2778 OpenJDK: Incomplete enforcement of algorithm restrictions for TLS (JSSE, 8232424)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-11-openjdk-1:11.0.7.10-4.el7_8","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2778.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2767","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1517","RHSA-2020:1514"],"bugzilla":"1823947","bugzilla_description":"CVE-2020-2767 OpenJDK: Incorrect handling of Certificate messages during TLS handshake (JSSE, 8232581)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["java-11-openjdk-1:11.0.7.10-4.el7_8","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2767.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2781","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823960","bugzilla_description":"CVE-2020-2781 OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2781.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-10531","severity":"important","public_date":"2020-02-25T00:00:00Z","advisories":["RHSA-2020:1343","RHSA-2020:2895","RHSA-2020:0738","RHSA-2020:1317","RHSA-2020:1293","RHSA-2020:0902","RHSA-2020:0901","RHSA-2020:3084","RHSA-2020:0896","RHSA-2020:0897"],"bugzilla":"1807349","bugzilla_description":"CVE-2020-10531 ICU: Integer overflow in UnicodeString::doAppend()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["icu-0:60.3-2.el8_0","icu-0:50.2-4.el7_7","rh-nodejs12-nodejs-0:12.18.2-1.el7","nodejs:12-8010020200326104226.c27ad7f8","icu-0:60.3-2.el8_1","chromium-browser-0:80.0.3987.122-1.el6_10","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:10-8000020200318152927.f8e95b4e","nodejs:10-8010020200318152252.c27ad7f8","icu-0:4.2.1-15.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10531.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-2583","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790444","bugzilla_description":"CVE-2020-2583 OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2590","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790556","bugzilla_description":"CVE-2020-2590 OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2590.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2601","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790570","bugzilla_description":"CVE-2020-2601 OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2020-2593","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790884","bugzilla_description":"CVE-2020-2593 OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2593.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2604","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790944","bugzilla_description":"CVE-2020-2604 OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2604.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-2655","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0128"],"bugzilla":"1790951","bugzilla_description":"CVE-2020-2655 OpenJDK: Incorrect handling of unexpected CertificateVerify TLS handshake messages (JSSE, 8231780)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":["java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2655.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2654","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:2236","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0541","RHSA-2020:0196","RHSA-2020:2241","RHSA-2020:0632","RHSA-2020:2239","RHSA-2020:0202","RHSA-2020:2237","RHSA-2020:0128","RHSA-2020:2238"],"bugzilla":"1791217","bugzilla_description":"CVE-2020-2654 OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2654.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2659","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0468"],"bugzilla":"1791284","bugzilla_description":"CVE-2020-2659 OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2659.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2964","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760963","bugzilla_description":"CVE-2019-2964 OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2964.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2975","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:4115","RHSA-2020:0006"],"bugzilla":"1760969","bugzilla_description":"CVE-2019-2975 OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2019-2973","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760978","bugzilla_description":"CVE-2019-2973 OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2981","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760980","bugzilla_description":"CVE-2019-2981 OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2999","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760992","bugzilla_description":"CVE-2019-2999 OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-2988","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760999","bugzilla_description":"CVE-2019-2988 OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2988.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2977","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3135"],"bugzilla":"1761002","bugzilla_description":"CVE-2019-2977 OpenJDK: Out of bounds access in optimized String indexof implementation (Hotspot, 8224062)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["java-11-openjdk-1:11.0.5.10-0.el8_0","java-11-openjdk-1:11.0.5.10-0.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2977.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2978","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761006","bugzilla_description":"CVE-2019-2978 OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2992","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761146","bugzilla_description":"CVE-2019-2992 OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2987","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158"],"bugzilla":"1761149","bugzilla_description":"CVE-2019-2987 OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2987.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2983","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761262","bugzilla_description":"CVE-2019-2983 OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2983.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2962","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761266","bugzilla_description":"CVE-2019-2962 OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2962.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2949","severity":"important","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2019:3134","RHSA-2019:3135","RHSA-2019:3136","RHSA-2020:2241","RHSA-2020:2239","RHSA-2020:2237"],"bugzilla":"1761594","bugzilla_description":"CVE-2019-2949 OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2949.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-2945","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761596","bugzilla_description":"CVE-2019-2945 OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2945.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2019-2989","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761601","bugzilla_description":"CVE-2019-2989 OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2989.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-2958","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777929","bugzilla_description":"CVE-2019-2958 OpenJDK: Incorrect escaping of command line arguments in ProcessImpl on Windows (Libraries, 8221858)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2958.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2933","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777981","bugzilla_description":"CVE-2019-2933 OpenJDK: FilePermission checks not preformed correctly on Windows (Libraries, 8213429)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2894","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777985","bugzilla_description":"CVE-2019-2894 OpenJDK: Side-channel vulnerability in the ECDSA implementation (Security, 8228825)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2894.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-2769","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730056","bugzilla_description":"CVE-2019-2769 OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2769.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2818","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1810","RHSA-2019:1817"],"bugzilla":"1730078","bugzilla_description":"CVE-2019-2818 OpenJDK: Non-constant time comparison in ChaCha20Cipher (Security, 8221344)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-11-openjdk-1:11.0.4.11-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2816","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730099","bugzilla_description":"CVE-2019-2816 OpenJDK: Missing URL format validation (Networking, 8221518)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-2842","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1840","RHSA-2019:1811","RHSA-2019:1839","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730110","bugzilla_description":"CVE-2019-2842 OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2842.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2821","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1810","RHSA-2019:1817"],"bugzilla":"1730251","bugzilla_description":"CVE-2019-2821 OpenJDK: Incorrect handling of certificate status messages during TLS handshake (JSSE, 8222678)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-11-openjdk-1:11.0.4.11-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2821.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2786","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:1840","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:2592","RHSA-2019:1816","RHSA-2019:1815","RHSA-2019:2590"],"bugzilla":"1730255","bugzilla_description":"CVE-2019-2786 OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2745","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1840","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730411","bugzilla_description":"CVE-2019-2745 OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2745.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2019-2762","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730415","bugzilla_description":"CVE-2019-2762 OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2766","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730459","bugzilla_description":"CVE-2019-2766 OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2602","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700440","bugzilla_description":"CVE-2019-2602 OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2698","severity":"important","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1238","RHSA-2019:1163"],"bugzilla":"1700447","bugzilla_description":"CVE-2019-2698 OpenJDK: Font layout engine out of bounds access setCurrGlyphID() (2D, 8219022)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2684","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700564","bugzilla_description":"CVE-2019-2684 OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2684.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2422","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:0462","RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0464","RHSA-2019:0640","RHSA-2019:0416","RHSA-2019:0435","RHSA-2019:0469","RHSA-2019:0436","RHSA-2019:1238"],"bugzilla":"1665945","bugzilla_description":"CVE-2019-2422 OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["java-11-openjdk-1:11.0.2.7-0.el7_6","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el6_10","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el7_6","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.201.b09-1.el6_10","java-1.8.0-openjdk-1:1.8.0.201.b09-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2426","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":[],"bugzilla":"1665953","bugzilla_description":"CVE-2019-2426 OpenJDK: transparent NTLM authentication enabled by default (Networking, 8209094)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2426.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-18928","severity":"low","public_date":"2018-10-30T00:00:00Z","advisories":[],"bugzilla":"1646702","bugzilla_description":"CVE-2018-18928 icu: integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-3183","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:2943","RHSA-2018:2942","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002"],"bugzilla":"1639268","bugzilla_description":"CVE-2018-3183 OpenJDK: Unrestricted access to scripting engine (Scripting, 8202936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-11-openjdk-1:11.0.1.13-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-3169","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639293","bugzilla_description":"CVE-2018-3169 OpenJDK: Improper field access checks (Hotspot, 8199226)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3214","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639301","bugzilla_description":"CVE-2018-3214 OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3139","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639442","bugzilla_description":"CVE-2018-3139 OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3139.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3180","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639484","bugzilla_description":"CVE-2018-3180 OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-3136","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639755","bugzilla_description":"CVE-2018-3136 OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3149","severity":"important","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639834","bugzilla_description":"CVE-2018-3149 OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3149.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3150","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3521"],"bugzilla":"1642321","bugzilla_description":"CVE-2018-3150 OpenJDK: Multi-Release attribute read from outside of the main manifest attributes (Utility, 8199171)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.1.13-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3150.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-3157","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1642328","bugzilla_description":"CVE-2018-3157 OpenJDK: Uninitialized memory use in MIDI device handling (Sound, 8200648)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3157.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-16435","severity":"moderate","public_date":"2018-08-13T00:00:00Z","advisories":["RHSA-2018:3004"],"bugzilla":"1628969","bugzilla_description":"CVE-2018-16435 lcms2: Integer overflow in AllocateDataSet() in cmscgats.c leading to heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["chromium-browser-0:70.0.3538.67-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16435.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2952","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:2283","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2241","RHSA-2018:2253","RHSA-2018:2242","RHSA-2018:2286"],"bugzilla":"1600925","bugzilla_description":"CVE-2018-2952 OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2952.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2972","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1601026","bugzilla_description":"CVE-2018-2972 OpenJDK: GCTR counter roll over (Security, 8200332)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2972.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-2814","severity":"critical","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1270","RHSA-2018:1206","RHSA-2018:1191","RHSA-2018:1204","RHSA-2018:1205","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567121","bugzilla_description":"CVE-2018-2814 OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2794","severity":"important","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567126","bugzilla_description":"CVE-2018-2794 OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2794.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-2795","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567351","bugzilla_description":"CVE-2018-2795 OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2815","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1270","RHSA-2018:1206","RHSA-2018:1191","RHSA-2018:1204","RHSA-2018:1205","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567537","bugzilla_description":"CVE-2018-2815 OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2799","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567542","bugzilla_description":"CVE-2018-2799 OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2799.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2798","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567543","bugzilla_description":"CVE-2018-2798 OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2797","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567545","bugzilla_description":"CVE-2018-2797 OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2796","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567546","bugzilla_description":"CVE-2018-2796 OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2800","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568163","bugzilla_description":"CVE-2018-2800 OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-2790","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568515","bugzilla_description":"CVE-2018-2790 OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-2826","severity":"critical","public_date":"2018-04-17T00:00:00Z","advisories":[],"bugzilla":"1568520","bugzilla_description":"CVE-2018-2826 OpenJDK: incorrect type check for the MethodHandles' tryFinally cleanup exception type (Libraries, 8194238)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2826.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2825","severity":"critical","public_date":"2018-04-17T00:00:00Z","advisories":[],"bugzilla":"1568586","bugzilla_description":"CVE-2018-2825 OpenJDK: insufficient array type checks in VarHandle (Libraries, 8194233)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2825.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2678","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534263","bugzilla_description":"CVE-2018-2678 OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2678.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2677","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534288","bugzilla_description":"CVE-2018-2677 OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2663","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534296","bugzilla_description":"CVE-2018-2663 OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2663.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2579","severity":"low","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534298","bugzilla_description":"CVE-2018-2579 OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-567","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2579.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2588","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534299","bugzilla_description":"CVE-2018-2588 OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-90","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-2602","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534525","bugzilla_description":"CVE-2018-2602 OpenJDK: loading of classes from untrusted locations (I18n, 8182601)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2018-2599","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534543","bugzilla_description":"CVE-2018-2599 OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2599.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2603","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534553","bugzilla_description":"CVE-2018-2603 OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2603.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2629","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0100","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534625","bugzilla_description":"CVE-2018-2629 OpenJDK: GSS context use-after-free (JGSS, 8186212)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2618","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534762","bugzilla_description":"CVE-2018-2618 OpenJDK: insufficient strength of key agreement (JCE, 8185292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-2641","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534766","bugzilla_description":"CVE-2018-2641 OpenJDK: GTK library loading use-after-free (AWT, 8185325)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-2582","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0521","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534768","bugzilla_description":"CVE-2018-2582 OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-2634","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534943","bugzilla_description":"CVE-2018-2634 OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-2637","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534970","bugzilla_description":"CVE-2018-2637 OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-2633","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535036","bugzilla_description":"CVE-2018-2633 OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2017-10285","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501868","bugzilla_description":"CVE-2017-10285 OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10346","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501873","bugzilla_description":"CVE-2017-10346 OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10388","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502038","bugzilla_description":"CVE-2017-10388 OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10274","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3047"],"bugzilla":"1502053","bugzilla_description":"CVE-2017-10274 OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10349","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502611","bugzilla_description":"CVE-2017-10349 OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10349.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10357","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502614","bugzilla_description":"CVE-2017-10357 OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10357.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10348","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502629","bugzilla_description":"CVE-2017-10348 OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10347","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502632","bugzilla_description":"CVE-2017-10347 OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10350","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502640","bugzilla_description":"CVE-2017-10350 OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10350.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10281","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502649","bugzilla_description":"CVE-2017-10281 OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10281.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10295","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502687","bugzilla_description":"CVE-2017-10295 OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10295.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-10345","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502858","bugzilla_description":"CVE-2017-10345 OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-10355","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502869","bugzilla_description":"CVE-2017-10355 OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10355.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10356","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1503169","bugzilla_description":"CVE-2017-10356 OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10356.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2017-10107","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471266","bugzilla_description":"CVE-2017-10107 OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10107.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10089","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471270","bugzilla_description":"CVE-2017-10089 OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10090","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1791"],"bugzilla":"1471517","bugzilla_description":"CVE-2017-10090 OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10090.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10087","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471521","bugzilla_description":"CVE-2017-10087 OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10110","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471523","bugzilla_description":"CVE-2017-10110 OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10111","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:1790"],"bugzilla":"1471526","bugzilla_description":"CVE-2017-10111 OpenJDK: incorrect range checks in LambdaFormEditor (Libraries, 8184185)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10101","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471527","bugzilla_description":"CVE-2017-10101 OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10096","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471528","bugzilla_description":"CVE-2017-10096 OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10074","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471534","bugzilla_description":"CVE-2017-10074 OpenJDK: integer overflows in range check loop predicates (Hotspot, 8173770)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10067","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471535","bugzilla_description":"CVE-2017-10067 OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10109","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471670","bugzilla_description":"CVE-2017-10109 OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10081","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471711","bugzilla_description":"CVE-2017-10081 OpenJDK: incorrect bracket processing in function signature handling (Hotspot, 8170966)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10081.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-10193","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:3392","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471715","bugzilla_description":"CVE-2017-10193 OpenJDK: incorrect key size constraint check (Security, 8179101)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-10116","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471738","bugzilla_description":"CVE-2017-10116 OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2017-10115","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471851","bugzilla_description":"CVE-2017-10115 OpenJDK: DSA implementation timing attack (JCE, 8175106)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10135","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471871","bugzilla_description":"CVE-2017-10135 OpenJDK: PKCS#8 implementation timing attack (JCE, 8176760)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10135.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-10108","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471888","bugzilla_description":"CVE-2017-10108 OpenJDK: unbounded memory allocation in BasicAttribute deserialization (Serialization, 8174105)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10108.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10053","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471889","bugzilla_description":"CVE-2017-10053 OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10078","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2469","RHSA-2017:1790","RHSA-2017:3453"],"bugzilla":"1471898","bugzilla_description":"CVE-2017-10078 OpenJDK: Nashorn incompletely blocking access to Java APIs (Scripting, 8171539)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-10198","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:3392","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1472320","bugzilla_description":"CVE-2017-10198 OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-10102","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472345","bugzilla_description":"CVE-2017-10102 OpenJDK: incorrect handling of references in DGC (RMI, 8163958)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-10118","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1790","RHSA-2017:1791"],"bugzilla":"1472470","bugzilla_description":"CVE-2017-10118 OpenJDK: ECDSA implementation timing attack (JCE, 8175110)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10176","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1790","RHSA-2017:1791"],"bugzilla":"1472476","bugzilla_description":"CVE-2017-10176 OpenJDK: incorrect handling of certain EC points (Security, 8178135)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10243","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472666","bugzilla_description":"CVE-2017-10243 OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10243.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-3511","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1221"],"bugzilla":"1443007","bugzilla_description":"CVE-2017-3511 OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-3509","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443052","bugzilla_description":"CVE-2017-3509 OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2017-3544","severity":"low","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443068","bugzilla_description":"CVE-2017-3544 OpenJDK: newline injection in the SMTP client (Networking, 8171533)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3539","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443097","bugzilla_description":"CVE-2017-3539 OpenJDK: MD5 allowed for jar verification (Security, 8171121)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3526","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108"],"bugzilla":"1443252","bugzilla_description":"CVE-2017-3526 OpenJDK: incomplete XML parse tree size enforcement (JAXP, 8169011)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3512","severity":"critical","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443455","bugzilla_description":"CVE-2017-3512 OpenJDK: window framing issues on MacOSX (AWT, 8165626)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3514","severity":"critical","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443469","bugzilla_description":"CVE-2017-3514 OpenJDK: peering issues on Windows (AWT, 8167110)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3533","severity":"low","public_date":"2017-02-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443083","bugzilla_description":"CVE-2017-3533 OpenJDK: newline injection in the FTP client (Networking, 8170222)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3272","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413554","bugzilla_description":"CVE-2017-3272 OpenJDK: insufficient protected field access checks in atomic field updaters (Libraries, 8165344)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3289","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413562","bugzilla_description":"CVE-2017-3289 OpenJDK: insecure class construction (Hotspot, 8167104)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3253","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413583","bugzilla_description":"CVE-2017-3253 OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-3261","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413653","bugzilla_description":"CVE-2017-3261 OpenJDK: integer overflow in SocketOutputStream boundary check (Networking, 8164147)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3231","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413717","bugzilla_description":"CVE-2017-3231 OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3231.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5547","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413764","bugzilla_description":"CVE-2016-5547 OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5547.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5552","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413882","bugzilla_description":"CVE-2016-5552 OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5552.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3252","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413906","bugzilla_description":"CVE-2017-3252 OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3252.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5546","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413911","bugzilla_description":"CVE-2016-5546 OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5546.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-5548","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413920","bugzilla_description":"CVE-2016-5548 OpenJDK: DSA implementation timing attack (Libraries, 8168728)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-5549","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413923","bugzilla_description":"CVE-2016-5549 OpenJDK: ECDSA implementation timing attack (Libraries, 8168724)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-3241","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413955","bugzilla_description":"CVE-2017-3241 OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3241.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3260","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":[],"bugzilla":"1414562","bugzilla_description":"CVE-2017-3260 OpenJDK: menu handling memory corruption (AWT, 8164143)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3260.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5582","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2658","RHSA-2016:2090"],"bugzilla":"1385402","bugzilla_description":"CVE-2016-5582 OpenJDK: incomplete type checks of System.arraycopy arguments (Hotspot, 8160591)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-5573","severity":"important","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385544","bugzilla_description":"CVE-2016-5573 OpenJDK: insufficient checks of JDWP packets (Hotspot, 8159519)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5573.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5554","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385714","bugzilla_description":"CVE-2016-5554 OpenJDK: insufficient classloader consistency checks in ClassLoaderWithRepository (JMX, 8157739)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5554.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5542","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385723","bugzilla_description":"CVE-2016-5542 OpenJDK: missing algorithm restrictions for jar verification (Libraries, 8155973)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5597","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1386103","bugzilla_description":"CVE-2016-5597 OpenJDK: exposure of server authentication credentials to proxy (Networking, 8160838)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-319","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5597.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5568","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1386112","bugzilla_description":"CVE-2016-5568 OpenJDK: incorrect menu handling on Windows (AWT, 8158993)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5568.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-10165","severity":"moderate","public_date":"2016-08-15T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2017:2999","RHSA-2017:3046","RHSA-2016:2658","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1367357","bugzilla_description":"CVE-2016-10165 lcms2: Out-of-bounds read in Type_MLU_Read()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2016-3606","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1356963","bugzilla_description":"CVE-2016-3606 OpenJDK: insufficient bytecode verification (Hotspot, 8155981)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3598","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2017:1216","RHSA-2016:1504","RHSA-2016:1587","RHSA-2016:1588","RHSA-2016:1589","RHSA-2016:1458"],"bugzilla":"1356971","bugzilla_description":"CVE-2016-3598 OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3598.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3587","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1458"],"bugzilla":"1356987","bugzilla_description":"CVE-2016-3587 OpenJDK: insufficient protection of MethodHandle.invokeBasic() (Hotspot, 8154475)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3587.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3610","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1504","RHSA-2016:1458"],"bugzilla":"1356994","bugzilla_description":"CVE-2016-3610 OpenJDK: insufficient value count check in MethodHandles.filterReturnValue() (Libraries, 8158571)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3500","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357008","bugzilla_description":"CVE-2016-3500 OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3508","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357015","bugzilla_description":"CVE-2016-3508 OpenJDK: missing entity replacement limits (JAXP, 8149962)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3458","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357494","bugzilla_description":"CVE-2016-3458 OpenJDK: insufficient restrictions on the use of custom ValueHandler (CORBA, 8079718)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-3550","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357506","bugzilla_description":"CVE-2016-3550 OpenJDK: integer overflows in bytecode streams (Hotspot, 8152479)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3550.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-3485","severity":"low","public_date":"2016-07-19T00:00:00Z","advisories":[],"bugzilla":"1357516","bugzilla_description":"CVE-2016-3485 OpenJDK: weak authentication secret in Pipe implementation on Windows (Networking, 8145446)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3485.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2016-0686","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327743","bugzilla_description":"CVE-2016-0686 OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0686.json"},{"CVE":"CVE-2016-0687","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327749","bugzilla_description":"CVE-2016-0687 OpenJDK: insufficient byte type checks (Hotspot, 8132051)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0687.json"},{"CVE":"CVE-2016-0695","severity":"low","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:0677"],"bugzilla":"1328022","bugzilla_description":"CVE-2016-0695 OpenJDK: insufficient DSA key parameters checks (Security, 8138593)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0695.json"},{"CVE":"CVE-2016-3425","severity":"moderate","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:0677"],"bugzilla":"1328040","bugzilla_description":"CVE-2016-3425 OpenJDK: incorrect handling of surrogate pairs in XML attribute values (JAXP, 8143167)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3425.json"},{"CVE":"CVE-2016-3426","severity":"low","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328059","bugzilla_description":"CVE-2016-3426 OpenJDK: non-constant time GCM authentication tag comparison (JCE, 8143945)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3426.json"},{"CVE":"CVE-2016-3427","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328210","bugzilla_description":"CVE-2016-3427 OpenJDK: unrestricted deserialization of authentication credentials (JMX, 8144430)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3427.json"},{"CVE":"CVE-2016-0636","severity":"critical","public_date":"2016-03-23T00:00:00Z","advisories":["RHSA-2016:0513","RHSA-2016:0514","RHSA-2016:0515","RHSA-2016:0516","RHSA-2016:0511","RHSA-2016:0512"],"bugzilla":"1320650","bugzilla_description":"CVE-2016-0636 OpenJDK: missing type safety checks for MethodHandle calls across class loaders, incorrect CVE-2013-5838 fix (Hotspot, 8151666)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["java-1.7.0-oracle-1:1.7.0.99-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.77-0.b03.el6_7","java-1.7.0-oracle-1:1.7.0.99-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.77-0.b03.el7_2","java-1.8.0-oracle-1:1.8.0.77-1jpp.1.el6_7","java-1.7.0-openjdk-1:1.7.0.99-2.6.5.0.el6_7","java-1.7.0-openjdk-1:1.7.0.99-2.6.5.0.el7_2","java-1.7.0-oracle-1:1.7.0.99-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.77-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.99-2.6.5.0.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0636.json"},{"CVE":"CVE-2016-0494","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298906","bugzilla_description":"CVE-2016-0494 ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0494.json"},{"CVE":"CVE-2016-0475","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0050","RHSA-2016:0049"],"bugzilla":"1298949","bugzilla_description":"CVE-2016-0475 OpenJDK: PBE incorrect key lengths (Libraries, 8138589)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0475.json"},{"CVE":"CVE-2016-0402","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298957","bugzilla_description":"CVE-2016-0402 OpenJDK: URL deserialization inconsistencies (Networking, 8059054)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0402.json"},{"CVE":"CVE-2016-0448","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299073","bugzilla_description":"CVE-2016-0448 OpenJDK: logging of RMI connection secrets (JMX, 8130710)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0448.json"},{"CVE":"CVE-2016-0466","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299385","bugzilla_description":"CVE-2016-0466 OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0466.json"},{"CVE":"CVE-2016-0483","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299441","bugzilla_description":"CVE-2016-0483 OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0483.json"},{"CVE":"CVE-2015-7575","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0012","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0007","RHSA-2016:0008","RHSA-2016:0049"],"bugzilla":"1289841","bugzilla_description":"CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.2","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","nss-0:3.19.1-19.el7_2","gnutls-0:3.3.8-14.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","gnutls-0:2.8.5-19.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","nss-0:3.19.1-8.el6_7","openssl-1:1.0.1e-51.el7_2.2","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json"},{"CVE":"CVE-2015-4806","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1233687","bugzilla_description":"CVE-2015-4806 OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4806.json"},{"CVE":"CVE-2015-4835","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273022","bugzilla_description":"CVE-2015-4835 OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4835.json"},{"CVE":"CVE-2015-4881","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921"],"bugzilla":"1273027","bugzilla_description":"CVE-2015-4881 OpenJDK: missing type checks in IIOPInputStream (CORBA, 8076392)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4881.json"},{"CVE":"CVE-2015-4843","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273053","bugzilla_description":"CVE-2015-4843 OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4843.json"},{"CVE":"CVE-2015-4883","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273304","bugzilla_description":"CVE-2015-4883 OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4883.json"},{"CVE":"CVE-2015-4860","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273308","bugzilla_description":"CVE-2015-4860 OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4860.json"},{"CVE":"CVE-2015-4805","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273311","bugzilla_description":"CVE-2015-4805 OpenJDK: missing checks for proper initialization in ObjectStreamClass (Serialization, 8103671)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-665","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4805.json"},{"CVE":"CVE-2015-4844","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273318","bugzilla_description":"CVE-2015-4844 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4844.json"},{"CVE":"CVE-2015-4868","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:1919"],"bugzilla":"1273328","bugzilla_description":"CVE-2015-4868 OpenJDK: CRL checking flaw (Libraries, 8081744)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4868.json"},{"CVE":"CVE-2015-4840","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273338","bugzilla_description":"CVE-2015-4840 OpenJDK: OOB access in CMS code (2D, 8086092)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4840.json"},{"CVE":"CVE-2015-4882","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273414","bugzilla_description":"CVE-2015-4882 OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4882.json"},{"CVE":"CVE-2015-4842","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273425","bugzilla_description":"CVE-2015-4842 OpenJDK: leak of user.dir location (JAXP, 8078427)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4842.json"},{"CVE":"CVE-2015-4734","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273430","bugzilla_description":"CVE-2015-4734 OpenJDK: kerberos realm name leak (JGSS, 8048030)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4734.json"},{"CVE":"CVE-2015-4903","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273496","bugzilla_description":"CVE-2015-4903 OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4903.json"},{"CVE":"CVE-2015-4803","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273637","bugzilla_description":"CVE-2015-4803 OpenJDK: inefficient use of hash tables and lists during XML parsing (JAXP, 8068842)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4803.json"},{"CVE":"CVE-2015-4893","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273638","bugzilla_description":"CVE-2015-4893 OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4893.json"},{"CVE":"CVE-2015-4911","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921"],"bugzilla":"1273645","bugzilla_description":"CVE-2015-4911 OpenJDK: incomplete supportDTD enforcement (JAXP, 8130078)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4911.json"},{"CVE":"CVE-2015-4872","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273734","bugzilla_description":"CVE-2015-4872 OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4872.json"},{"CVE":"CVE-2015-4871","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:2509","RHSA-2015:1927","RHSA-2016:0053","RHSA-2015:2506"],"bugzilla":"1273859","bugzilla_description":"CVE-2015-4871 OpenJDK: protected methods can be used as interface methods via DirectMethodHandle (Libraries)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4871.json"},{"CVE":"CVE-2015-2601","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242019","bugzilla_description":"CVE-2015-2601 OpenJDK: non-constant time comparisons in crypto code (JCE, 8074865)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2601.json"},{"CVE":"CVE-2015-2659","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1228","RHSA-2015:1241"],"bugzilla":"1242144","bugzilla_description":"CVE-2015-2659 OpenJDK: GCM cipher issue causing JVM crash (Security, 8067648)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2659.json"},{"CVE":"CVE-2015-2628","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242232","bugzilla_description":"CVE-2015-2628 OpenJDK: IIOPInputStream type confusion vulnerability (CORBA, 8076376)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2628.json"},{"CVE":"CVE-2015-4731","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242234","bugzilla_description":"CVE-2015-4731 OpenJDK: improper permission checks in MBeanServerInvocationHandler (JMX, 8076397)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4731.json"},{"CVE":"CVE-2015-4732","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242240","bugzilla_description":"CVE-2015-4732 OpenJDK: insufficient context checks during object deserialization (Libraries, 8076405)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-567","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4732.json"},{"CVE":"CVE-2015-4733","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242275","bugzilla_description":"CVE-2015-4733 OpenJDK: RemoteObjectInvocationHandler allows calling finalize() (RMI, 8076409)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4733.json"},{"CVE":"CVE-2015-4748","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242281","bugzilla_description":"CVE-2015-4748 OpenJDK: incorrect OCSP nextUpdate checking (Libraries, 8075374)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-299","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4748.json"},{"CVE":"CVE-2015-2621","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242372","bugzilla_description":"CVE-2015-2621 OpenJDK: incorrect code permission checks in RMIConnectionImpl (JMX, 8075853)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2621.json"},{"CVE":"CVE-2015-4749","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242379","bugzilla_description":"CVE-2015-4749 OpenJDK: DnsClient fails to release request information after error (JNDI, 8075378)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4749.json"},{"CVE":"CVE-2015-2632","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242394","bugzilla_description":"CVE-2015-2632 ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190->CWE-125","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2632.json"},{"CVE":"CVE-2015-4760","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242447","bugzilla_description":"CVE-2015-4760 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8071715)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4760.json"},{"CVE":"CVE-2015-2613","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1242456","bugzilla_description":"CVE-2015-2613 NSS / JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2613.json"},{"CVE":"CVE-2015-2590","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1243139","bugzilla_description":"CVE-2015-2590 OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2590.json"},{"CVE":"CVE-2015-2596","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1242"],"bugzilla":"1243288","bugzilla_description":"CVE-2015-2596 Oracle JDK: unspecified vulnerability fixed in 7u85 (Hotspot)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2596.json"},{"CVE":"CVE-2015-4000","severity":"moderate","public_date":"2015-05-20T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2016:2056","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2016:1624","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1197","RHSA-2015:1230","RHSA-2015:1185","RHSA-2015:1072"],"bugzilla":"1223211","bugzilla_description":"CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","nss-0:3.19.1-3.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","nss-0:3.19.1-3.ael7b_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","openssl-0:1.0.1e-30.el6_6.9","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","openssl-1:1.0.1e-42.ael7b_1.6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.8.0-openjdk-1:1.8.0.51-1.b16.ael7b_1","openssl-0:0.9.8e-36.el5_11","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-0478","severity":"low","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1210355","bugzilla_description":"CVE-2015-0478 OpenJDK: insufficient hardening of RSA-CRT implementation (JCE, 8071726)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0478.json"},{"CVE":"CVE-2015-0469","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1210829","bugzilla_description":"CVE-2015-0469 ICU: layout engine glyphStorage off-by-one (OpenJDK 2D, 8067699)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-122","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0469.json"},{"CVE":"CVE-2015-0460","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211285","bugzilla_description":"CVE-2015-0460 OpenJDK: incorrect handling of phantom references (Hotspot, 8071931)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0460.json"},{"CVE":"CVE-2015-0477","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211299","bugzilla_description":"CVE-2015-0477 OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0477.json"},{"CVE":"CVE-2015-0470","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0809"],"bugzilla":"1211387","bugzilla_description":"CVE-2015-0470 OpenJDK: incorrect handling of default methods (Hotspot, 8065366)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0470.json"},{"CVE":"CVE-2015-0488","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211543","bugzilla_description":"CVE-2015-0488 OpenJDK: certificate options parsing uncaught exception (JSSE, 8068720)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-248","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0488.json"},{"CVE":"CVE-2015-2808","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1207101","bugzilla_description":"CVE-2015-2808 SSL/TLS: \"Invariance Weakness\" vulnerability in RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2808.json"},{"CVE":"CVE-2015-0383","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1123870","bugzilla_description":"CVE-2015-0383 OpenJDK: insecure hsperfdata temporary file handling (Hotspot, 8050807)","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0383.json"},{"CVE":"CVE-2014-6601","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183020","bugzilla_description":"CVE-2014-6601 OpenJDK: class verifier insufficient invokespecial calls verification (Hotspot, 8058982)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6601.json"},{"CVE":"CVE-2015-0412","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183021","bugzilla_description":"CVE-2015-0412 OpenJDK: insufficient code privileges checks (JAX-WS, 8054367)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0412.json"},{"CVE":"CVE-2015-0408","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183023","bugzilla_description":"CVE-2015-0408 OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0408.json"},{"CVE":"CVE-2015-0395","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183031","bugzilla_description":"CVE-2015-0395 OpenJDK: phantom references handling issue in garbage collector (Hotspot, 8047125)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0395.json"},{"CVE":"CVE-2015-0400","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1183039","bugzilla_description":"CVE-2015-0400 OpenJDK: NTLM authentication data disclosure via redirect to proxy (Libraries, 8048035)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0400.json"},{"CVE":"CVE-2015-0407","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183043","bugzilla_description":"CVE-2015-0407 OpenJDK: directory information leak via file chooser (Swing, 8055304)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0407.json"},{"CVE":"CVE-2015-0410","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183044","bugzilla_description":"CVE-2015-0410 OpenJDK: DER decoder infinite loop  (Security, 8059485)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0410.json"},{"CVE":"CVE-2014-6593","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183049","bugzilla_description":"CVE-2014-6593 OpenJDK: incorrect tracking of ChangeCipherSpec during SSL/TLS handshake (JSSE, 8057555)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6593.json"},{"CVE":"CVE-2014-6585","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183645","bugzilla_description":"CVE-2014-6585 ICU: font parsing OOB read (OpenJDK 2D, 8055489)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6585.json"},{"CVE":"CVE-2014-6591","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183646","bugzilla_description":"CVE-2014-6591 ICU: font parsing OOB read (OpenJDK 2D, 8056276)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6591.json"},{"CVE":"CVE-2014-6549","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0134","RHSA-2015:0133"],"bugzilla":"1183660","bugzilla_description":"CVE-2014-6549 OpenJDK: incorrect class loader permission check in ClassLoader getParent() (Libraries, 8055314)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6549.json"},{"CVE":"CVE-2015-0437","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069"],"bugzilla":"1183670","bugzilla_description":"CVE-2015-0437 OpenJDK: code generation issue (Hotspot, 8064524)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0437.json"},{"CVE":"CVE-2014-6587","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183715","bugzilla_description":"CVE-2014-6587 OpenJDK: MulticastSocket NULL pointer dereference (Libraries, 8056264)","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6587.json"},{"CVE":"CVE-2015-2625","severity":"low","public_date":"2014-11-02T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1241965","bugzilla_description":"CVE-2015-2625 OpenJDK: name for reverse DNS lookup used in certificate identity check (JSSE, 8067694)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2625.json"},{"CVE":"CVE-2014-6512","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1071210","bugzilla_description":"CVE-2014-6512 OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-345","affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6512.json"},{"CVE":"CVE-2014-6513","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1150118","bugzilla_description":"CVE-2014-6513 OpenJDK: splash image handling memory corruption (AWT, 8042609)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6513.json"},{"CVE":"CVE-2014-6506","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150155","bugzilla_description":"CVE-2014-6506 OpenJDK: insufficient permission checks when setting resource bundle on system logger (Libraries, 8041564)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6506.json"},{"CVE":"CVE-2014-6504","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1150182","bugzilla_description":"CVE-2014-6504 OpenJDK: incorrect optimization of range checks in C2 compiler (Hotspot, 8022783)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6504.json"},{"CVE":"CVE-2014-6519","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1150273","bugzilla_description":"CVE-2014-6519 OpenJDK: missing BootstrapMethods bounds check (Hotspot, 8041717)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6519.json"},{"CVE":"CVE-2014-6531","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150651","bugzilla_description":"CVE-2014-6531 OpenJDK: insufficient ResourceBundle name check (Libraries, 8044274)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6531.json"},{"CVE":"CVE-2014-6502","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150669","bugzilla_description":"CVE-2014-6502 OpenJDK: LogRecord use of incorrect CL when loading ResourceBundle (Libraries, 8042797)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6502.json"},{"CVE":"CVE-2014-6457","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151046","bugzilla_description":"CVE-2014-6457 OpenJDK: Triple Handshake attack against TLS/SSL connections (JSSE, 8037066)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6457.json"},{"CVE":"CVE-2014-6558","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151063","bugzilla_description":"CVE-2014-6558 OpenJDK: CipherInputStream incorrect exception handling (Security, 8037846)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6558.json"},{"CVE":"CVE-2014-6517","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1151364","bugzilla_description":"CVE-2014-6517 OpenJDK: StAX parser parameter entity XXE (JAXP, 8039533)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6517.json"},{"CVE":"CVE-2014-6511","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151517","bugzilla_description":"CVE-2014-6511 ICU: Layout Engine ContextualSubstitution missing boundary checks (JDK 2D, 8041540)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6511.json"},{"CVE":"CVE-2014-6562","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1636"],"bugzilla":"1151988","bugzilla_description":"CVE-2014-6562 OpenJDK: incorrect handling of zip entries with NUL in name (Libraries, 8048025)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6562.json"},{"CVE":"CVE-2014-6468","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1636"],"bugzilla":"1152049","bugzilla_description":"CVE-2014-6468 OpenJDK: insufficient SharedArchiveFile checks (Hotspot, 8044269)","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6468.json"},{"CVE":"CVE-2014-3566","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2015:1546","RHSA-2015:1545","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2014:1881","RHSA-2014:1880","RHSA-2015:0080","RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2014:1920","RHSA-2015:0067","RHSA-2015:0012","RHSA-2015:0011","RHSA-2015:0264","RHSA-2015:0010","RHSA-2015:0086","RHSA-2015:0085","RHBA-2014:1857"],"bugzilla":"1152789","bugzilla_description":"CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-636|CWE-757)","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","openshift-origin-node-proxy-0:1.16.4.2-1.el6op","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","openshift-origin-node-proxy-0:1.22.3.4-1.el6op","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json"},{"CVE":"CVE-2014-4262","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1075795","bugzilla_description":"CVE-2014-4262 OpenJDK: AtomicReferenceFieldUpdater missing primitive type check (Libraries, 8039520)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4262.json"},{"CVE":"CVE-2014-4244","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119475","bugzilla_description":"CVE-2014-4244 OpenJDK: RSA blinding issues (Security, 8031346)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4244.json"},{"CVE":"CVE-2014-4263","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119476","bugzilla_description":"CVE-2014-4263 OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4263.json"},{"CVE":"CVE-2014-4221","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:1042"],"bugzilla":"1119483","bugzilla_description":"CVE-2014-4221 OpenJDK: MethodHandles.Lookup insufficient modifiers checks (Libraries, 8035788)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4221.json"},{"CVE":"CVE-2014-4219","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119596","bugzilla_description":"CVE-2014-4219 OpenJDK: Bytecode verification does not prevent ctor calls to this() and super() (Hotspot, 8035119)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4219.json"},{"CVE":"CVE-2014-2490","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907"],"bugzilla":"1119597","bugzilla_description":"CVE-2014-2490 OpenJDK: Event logger format string vulnerability (Hotspot, 8037076)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-134","affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2490.json"},{"CVE":"CVE-2014-4216","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907"],"bugzilla":"1119600","bugzilla_description":"CVE-2014-4216 OpenJDK: Incorrect generic signature attribute parsing (Hotspot, 8037076)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4216.json"},{"CVE":"CVE-2014-4223","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890"],"bugzilla":"1119602","bugzilla_description":"CVE-2014-4223 OpenJDK: Incorrect handling of invocations with exhausted ranks (Libraries, 8035793)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4223.json"},{"CVE":"CVE-2014-4209","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119608","bugzilla_description":"CVE-2014-4209 OpenJDK: SubjectDelegator protection insufficient (JMX, 8029755)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4209.json"},{"CVE":"CVE-2014-4218","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119611","bugzilla_description":"CVE-2014-4218 OpenJDK: Clone interfaces passed to proxy methods (Libraries, 8035009)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4218.json"},{"CVE":"CVE-2014-4252","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119613","bugzilla_description":"CVE-2014-4252 OpenJDK: Prevent instantiation of service with non-public constructor (Security, 8035004)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4252.json"},{"CVE":"CVE-2014-4266","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1042"],"bugzilla":"1119615","bugzilla_description":"CVE-2014-4266 OpenJDK: InfoBuilder incorrect return values (Serviceability, 8033301)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4266.json"},{"CVE":"CVE-2014-4268","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":[],"bugzilla":"1119616","bugzilla_description":"CVE-2014-4268 OpenJDK: Missing file choser access restrictions (Swing, 8035699)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4268.json"},{"CVE":"CVE-2014-4264","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902"],"bugzilla":"1119622","bugzilla_description":"CVE-2014-4264 OpenJDK: Incorrect TLS/EC management (Security, 8031340)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4264.json"},{"CVE":"CVE-2014-2483","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890"],"bugzilla":"1119626","bugzilla_description":"CVE-2014-2483 OpenJDK: Restrict use of privileged annotations (Libraries, 8034985)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2483.json"},{"CVE":"CVE-2015-3149","severity":"low","public_date":"2014-04-20T00:00:00Z","advisories":["RHSA-2015:1228"],"bugzilla":"1213365","bugzilla_description":"CVE-2015-3149 OpenJDK8: insecure hsperfdata temporary file handling, CVE-2015-0383 regression (Hotspot)","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":["java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3149.json"},{"CVE":"CVE-2014-2398","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1086632","bugzilla_description":"CVE-2014-2398 OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2398.json"},{"CVE":"CVE-2014-0453","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1086645","bugzilla_description":"CVE-2014-0453 OpenJDK: RSA unpadding timing issues (Security, 8027766)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0453.json"},{"CVE":"CVE-2014-0429","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087409","bugzilla_description":"CVE-2014-0429 OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0429.json"},{"CVE":"CVE-2014-0457","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087411","bugzilla_description":"CVE-2014-0457 OpenJDK: ServiceLoader Exception handling security bypass (Libraries, 8031394)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0457.json"},{"CVE":"CVE-2014-0456","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0675","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0406"],"bugzilla":"1087413","bugzilla_description":"CVE-2014-0456 OpenJDK: System.arraycopy() element race condition (Hotspot, 8029858)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0456.json"},{"CVE":"CVE-2014-2421","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087417","bugzilla_description":"CVE-2014-2421 OpenJDK: JPEG decoder input stream handling (2D, 8029854)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2421.json"},{"CVE":"CVE-2014-2397","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0675","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0406"],"bugzilla":"1087423","bugzilla_description":"CVE-2014-2397 OpenJDK: classfile parser invalid BootstrapMethods attribute length (Hotspot, 8034926)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2397.json"},{"CVE":"CVE-2014-0455","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087424","bugzilla_description":"CVE-2014-0455 OpenJDK: MethodHandle variable argument lists handling (Libraries, 8029844)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0455.json"},{"CVE":"CVE-2014-0461","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087426","bugzilla_description":"CVE-2014-0461 OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0461.json"},{"CVE":"CVE-2014-2412","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087427","bugzilla_description":"CVE-2014-2412 OpenJDK: AWT thread context handling (AWT, 8025010)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2412.json"},{"CVE":"CVE-2014-0451","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087428","bugzilla_description":"CVE-2014-0451 OpenJDK: AWT incorrect FlavorMap seperation (AWT, 8026797)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0451.json"},{"CVE":"CVE-2014-0458","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087430","bugzilla_description":"CVE-2014-0458 OpenJDK: Activation framework default command map caching (JAX-WS, 8025152)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0458.json"},{"CVE":"CVE-2014-2414","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087431","bugzilla_description":"CVE-2014-2414 OpenJDK: incorrect caching of data initialized via TCCL (JAXB, 8025030)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2414.json"},{"CVE":"CVE-2014-2423","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087434","bugzilla_description":"CVE-2014-2423 OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026188)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2423.json"},{"CVE":"CVE-2014-0452","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087436","bugzilla_description":"CVE-2014-0452 OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026801)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0452.json"},{"CVE":"CVE-2014-2402","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087438","bugzilla_description":"CVE-2014-2402 OpenJDK: Incorrect NIO channel separation (Libraries, 8026716)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2402.json"},{"CVE":"CVE-2014-0446","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087439","bugzilla_description":"CVE-2014-0446 OpenJDK: Protect logger handlers (Libraries, 8029740)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0446.json"},{"CVE":"CVE-2014-0454","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087440","bugzilla_description":"CVE-2014-0454 OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0454.json"},{"CVE":"CVE-2014-2427","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087441","bugzilla_description":"CVE-2014-2427 OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2427.json"},{"CVE":"CVE-2014-0460","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087442","bugzilla_description":"CVE-2014-0460 OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0460.json"},{"CVE":"CVE-2014-2403","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0675","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0406"],"bugzilla":"1087443","bugzilla_description":"CVE-2014-2403 OpenJDK: JAXP CharInfo file access restriction (JAXP, 8029282)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2403.json"},{"CVE":"CVE-2014-0459","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087444","bugzilla_description":"CVE-2014-0459 lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0459.json"},{"CVE":"CVE-2014-2413","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0406"],"bugzilla":"1087446","bugzilla_description":"CVE-2014-2413 OpenJDK: method handle call hierachy bypass (Libraries, 8032686)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2413.json"},{"CVE":"CVE-2014-0462","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1106388","bugzilla_description":"CVE-2014-0462 OpenJDK: libjpeg: uninitialized memory read information leak (AWT, 8029760)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0462.json"},{"CVE":"CVE-2014-2405","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1106391","bugzilla_description":"CVE-2014-2405 OpenJDK: libpng unhandled zero-length PLTE chunk or NULL palette (AWT, 8031352)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2405.json"},{"CVE":"CVE-2014-1876","severity":"low","public_date":"2014-02-03T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1060907","bugzilla_description":"CVE-2014-1876 OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1876.json"},{"CVE":"CVE-2013-4578","severity":"low","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1031471","bugzilla_description":"CVE-2013-4578 OpenJDK: jarsigner does not detect unsigned bytecode injected into signed jars","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4578.json"},{"CVE":"CVE-2014-0428","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051519","bugzilla_description":"CVE-2014-0428 OpenJDK: insufficient security checks in IIOP streams (CORBA, 8025767)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0428.json"},{"CVE":"CVE-2014-0422","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051528","bugzilla_description":"CVE-2014-0422 OpenJDK: insufficient package access checks in the Naming component (JNDI, 8025758)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0422.json"},{"CVE":"CVE-2013-5893","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0026","RHSA-2014:0027","RHSA-2014:0030"],"bugzilla":"1051549","bugzilla_description":"CVE-2013-5893 OpenJDK: JVM method processing issues (Libraries, 8029507)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5893.json"},{"CVE":"CVE-2014-0373","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051699","bugzilla_description":"CVE-2014-0373 OpenJDK: SnmpStatusException handling issues (Serviceability, 7068126)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0373.json"},{"CVE":"CVE-2013-5878","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051823","bugzilla_description":"CVE-2013-5878 OpenJDK: null xmlns handling issue (Security, 8025026)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5878.json"},{"CVE":"CVE-2013-5884","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051911","bugzilla_description":"CVE-2013-5884 OpenJDK: insufficient security checks in CORBA stub factories (CORBA, 8026193)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5884.json"},{"CVE":"CVE-2014-0416","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051912","bugzilla_description":"CVE-2014-0416 OpenJDK: insecure subject principals set handling (JAAS, 8024306)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0416.json"},{"CVE":"CVE-2014-0376","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051923","bugzilla_description":"CVE-2014-0376 OpenJDK: document builder missing security checks (JAXP, 8027201, 8025018)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0376.json"},{"CVE":"CVE-2013-5907","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052915","bugzilla_description":"CVE-2013-5907 ICU: Layout Engine LookupProcessor insufficient input checks (JDK 2D, 8025034)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5907.json"},{"CVE":"CVE-2014-0368","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052919","bugzilla_description":"CVE-2014-0368 OpenJDK: insufficient Socket checkListen checks (Networking, 8011786)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0368.json"},{"CVE":"CVE-2013-5910","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052942","bugzilla_description":"CVE-2013-5910 OpenJDK: XML canonicalizer mutable strings passed to untrusted code (Security, 8026417)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5910.json"},{"CVE":"CVE-2014-0411","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1053010","bugzilla_description":"CVE-2014-0411 OpenJDK: TLS/SSL handshake timing issues (JSSE, 8023069)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0411.json"},{"CVE":"CVE-2014-0423","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1053066","bugzilla_description":"CVE-2014-0423 OpenJDK: XXE issue in decoder (Beans, 8023245)","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0423.json"},{"CVE":"CVE-2013-5896","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1053266","bugzilla_description":"CVE-2013-5896 OpenJDK: com.sun.corba.se. should be restricted package (CORBA, 8025022)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5896.json"},{"CVE":"CVE-2014-0408","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053286","bugzilla_description":"CVE-2014-0408 OpenJDK: JObjC code issues (Hotspot, 8021266)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0408.json"},{"CVE":"CVE-2013-5803","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018713","bugzilla_description":"CVE-2013-5803 OpenJDK: insufficient checks of KDC replies (JGSS, 8014341)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5803.json"},{"CVE":"CVE-2013-5772","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018717","bugzilla_description":"CVE-2013-5772 OpenJDK: insufficient html escaping in jhat (jhat, 8011081)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5772.json"},{"CVE":"CVE-2013-5797","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018720","bugzilla_description":"CVE-2013-5797 OpenJDK: insufficient escaping of window title string (Javadoc, 8016675)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5797.json"},{"CVE":"CVE-2013-5784","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018727","bugzilla_description":"CVE-2013-5784 OpenJDK: insufficient InterfaceImplementor security checks (Scripting, 8017299)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5784.json"},{"CVE":"CVE-2013-5790","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447"],"bugzilla":"1018736","bugzilla_description":"CVE-2013-5790 OpenJDK: insufficient security checks (Beans, 8012071)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5790.json"},{"CVE":"CVE-2013-5849","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018750","bugzilla_description":"CVE-2013-5849 OpenJDK: insufficient DataFlavor security checks (AWT, 8012277)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5849.json"},{"CVE":"CVE-2013-5800","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1507","RHSA-2013:1447"],"bugzilla":"1018755","bugzilla_description":"CVE-2013-5800 OpenJDK: default keytab path information leak (JGSS, 8022931)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5800.json"},{"CVE":"CVE-2013-5805","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1018761","bugzilla_description":"CVE-2013-5805 CVE-2013-5806 OpenJDK: insufficient access checks in MacOS code (Swing, 8021275, 8021282)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5805.json"},{"CVE":"CVE-2013-5806","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1018761","bugzilla_description":"CVE-2013-5805 CVE-2013-5806 OpenJDK: insufficient access checks in MacOS code (Swing, 8021275, 8021282)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5806.json"},{"CVE":"CVE-2013-5780","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018785","bugzilla_description":"CVE-2013-5780 OpenJDK: key data leak via toString() methods (Libraries, 8011071)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5780.json"},{"CVE":"CVE-2013-5840","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018831","bugzilla_description":"CVE-2013-5840 OpenJDK: getDeclaringClass() information leak (Libraries, 8014349)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5840.json"},{"CVE":"CVE-2013-5820","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018972","bugzilla_description":"CVE-2013-5820 OpenJDK: insufficient security checks (JAXWS, 8017505)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5820.json"},{"CVE":"CVE-2013-5851","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1507","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018977","bugzilla_description":"CVE-2013-5851 OpenJDK: XML stream factory finder information leak (JAXP, 8013502)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5851.json"},{"CVE":"CVE-2013-5778","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018984","bugzilla_description":"CVE-2013-5778 OpenJDK: image conversion out of bounds read (2D, 8014102)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5778.json"},{"CVE":"CVE-2013-5782","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019108","bugzilla_description":"CVE-2013-5782 OpenJDK: Incorrect awt_getPixelByte/awt_getPixelShort/awt_setPixelByte/awt_setPixelShort image raster checks (2D, 8014093)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5782.json"},{"CVE":"CVE-2013-5830","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019110","bugzilla_description":"CVE-2013-5830 OpenJDK: checkPackageAccess missing security check (Libraries, 8017291)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5830.json"},{"CVE":"CVE-2013-5809","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019113","bugzilla_description":"CVE-2013-5809 OpenJDK: JPEGImageReader and JPEGImageWriter missing band size checks (2D, 8013510)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5809.json"},{"CVE":"CVE-2013-5829","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019115","bugzilla_description":"CVE-2013-5829 OpenJDK: Java2d Disposer security bypass (2D, 8017287)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5829.json"},{"CVE":"CVE-2013-5814","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019117","bugzilla_description":"CVE-2013-5814 OpenJDK: RMIConnection stub missing permission check (CORBA, 8011157)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5814.json"},{"CVE":"CVE-2013-5817","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019118","bugzilla_description":"CVE-2013-5817 OpenJDK: VersionHelper12 does not honor modifyThreadGroup restriction (JNDI, 8013739)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5817.json"},{"CVE":"CVE-2013-5842","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019123","bugzilla_description":"CVE-2013-5842 OpenJDK: ObjectInputStream/ObjectOutputStream missing checks (Libraries, 8014987)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5842.json"},{"CVE":"CVE-2013-5850","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019127","bugzilla_description":"CVE-2013-5850 OpenJDK: Missing CORBA security checks (Libraries, 8017196)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5850.json"},{"CVE":"CVE-2013-5802","severity":"important","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019130","bugzilla_description":"CVE-2013-5802 OpenJDK: javax.xml.transform.TransformerFactory does not properly honor XMLConstants.FEATURE_SECURE_PROCESSING (JAXP, 8012425)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5802.json"},{"CVE":"CVE-2013-5804","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019131","bugzilla_description":"CVE-2013-5804 OpenJDK: javac does not ignore certain ignorable characters (Javadoc, 8016653)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5804.json"},{"CVE":"CVE-2013-3829","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019133","bugzilla_description":"CVE-2013-3829 OpenJDK: java.util.TimeZone does not restrict setting of default time zone (Libraries, 8001029)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3829.json"},{"CVE":"CVE-2013-5783","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019137","bugzilla_description":"CVE-2013-5783 OpenJDK: JTable not properly performing certain access checks (Swing, 8013744)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5783.json"},{"CVE":"CVE-2013-5825","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019139","bugzilla_description":"CVE-2013-5825 OpenJDK: XML parsing Denial of Service (JAXP, 8014530)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5825.json"},{"CVE":"CVE-2013-5823","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019145","bugzilla_description":"CVE-2013-5823 OpenJDK: com.sun.org.apache.xml.internal.security.utils.UnsyncByteArrayOutputStream Denial of Service (Security, 8021290)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5823.json"},{"CVE":"CVE-2013-5774","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019147","bugzilla_description":"CVE-2013-5774 OpenJDK: Inet6Address class IPv6 address processing errors (Libraries, 8015743)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5774.json"},{"CVE":"CVE-2013-4002","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0269","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2015:0773","RHSA-2013:1081","RHSA-2013:1060","RHSA-2014:0414","RHSA-2014:1823","RHSA-2014:1822","RHSA-2014:1821","RHSA-2013:1505","RHSA-2013:1447","RHSA-2014:1319","RHSA-2013:1059","RHSA-2014:1818"],"bugzilla":"1019176","bugzilla_description":"CVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP, 8017298)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","xerces-j2-0:2.7.1-12.7.el6_5","xerces-j2-0:2.11.0-17.el7_0","java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4002.json"},{"CVE":"CVE-2013-5838","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1507","RHSA-2013:1447"],"bugzilla":"1019300","bugzilla_description":"CVE-2013-5838 OpenJDK: Vulnerability in Libraries component (Libraries, 7023639)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5838.json"},{"CVE":"CVE-2013-1777","severity":"important","public_date":"2013-07-01T00:00:00Z","advisories":[],"bugzilla":"984057","bugzilla_description":"CVE-2013-1777 geronimo: Improper RMI classloader implementation in JMX remoting functionality leading to arbitrary code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1777.json"},{"CVE":"CVE-2013-1571","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"973474","bugzilla_description":"CVE-2013-1571 OpenJDK: Frame injection in generated HTML (Javadoc, 8012375)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1571.json"},{"CVE":"CVE-2013-2470","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975099","bugzilla_description":"CVE-2013-2470 OpenJDK: ImagingLib byte lookup processing (2D, 8011243)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2470.json"},{"CVE":"CVE-2013-2471","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975102","bugzilla_description":"CVE-2013-2471 OpenJDK: Incorrect IntegerComponentRaster size checks (2D, 8011248)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2471.json"},{"CVE":"CVE-2013-2472","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975107","bugzilla_description":"CVE-2013-2472 OpenJDK: Incorrect ShortBandedRaster size checks (2D, 8011253)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2472.json"},{"CVE":"CVE-2013-2473","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975110","bugzilla_description":"CVE-2013-2473 OpenJDK: Incorrect ByteBandedRaster size checks (2D, 8011257)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2473.json"},{"CVE":"CVE-2013-2463","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975115","bugzilla_description":"CVE-2013-2463 OpenJDK: Incorrect image attribute verification (2D, 8012438)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2463.json"},{"CVE":"CVE-2013-2465","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975118","bugzilla_description":"CVE-2013-2465 OpenJDK: Incorrect image channel verification (2D, 8012597)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2465.json"},{"CVE":"CVE-2013-2469","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975120","bugzilla_description":"CVE-2013-2469 OpenJDK: Incorrect image layout verification (2D, 8012601)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2469.json"},{"CVE":"CVE-2013-2459","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975121","bugzilla_description":"CVE-2013-2459 OpenJDK: Various AWT integer overflow checks (AWT, 8009071)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2459.json"},{"CVE":"CVE-2013-2460","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975122","bugzilla_description":"CVE-2013-2460 OpenJDK: tracing insufficient access checks (Serviceability, 8010209)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2460.json"},{"CVE":"CVE-2013-2445","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:0963","RHSA-2013:1014"],"bugzilla":"975124","bugzilla_description":"CVE-2013-2445 OpenJDK: Better handling of memory allocation errors (Hotspot, 7158805)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2445.json"},{"CVE":"CVE-2013-2448","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975125","bugzilla_description":"CVE-2013-2448 OpenJDK: Better access restrictions (Sound, 8006328)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2448.json"},{"CVE":"CVE-2013-2461","severity":"important","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:0963","RHSA-2013:1014"],"bugzilla":"975126","bugzilla_description":"CVE-2013-2461 OpenJDK: Missing check for valid DOMCanonicalizationMethod canonicalization algorithm (Libraries, 8014281)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2461.json"},{"CVE":"CVE-2013-2407","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975127","bugzilla_description":"CVE-2013-2407 OpenJDK: Integrate Apache Santuario, rework class loader (Libraries, 6741606, 8008744)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2407.json"},{"CVE":"CVE-2013-2454","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975129","bugzilla_description":"CVE-2013-2454 OpenJDK: SerialJavaObject package restriction (JDBC, 8009554)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2454.json"},{"CVE":"CVE-2013-2458","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975130","bugzilla_description":"CVE-2013-2458 OpenJDK: Method handles (Libraries, 8009424)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2458.json"},{"CVE":"CVE-2013-2444","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975131","bugzilla_description":"CVE-2013-2444 OpenJDK: Resource denial of service (AWT, 8001038)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2444.json"},{"CVE":"CVE-2013-2446","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975132","bugzilla_description":"CVE-2013-2446 OpenJDK: output stream access restrictions (CORBA, 8000642)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2446.json"},{"CVE":"CVE-2013-2457","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975133","bugzilla_description":"CVE-2013-2457 OpenJDK: Proper class checking (JMX, 8008120)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2457.json"},{"CVE":"CVE-2013-2453","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975134","bugzilla_description":"CVE-2013-2453 OpenJDK: MBeanServer Introspector package access (JMX, 8008124)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2453.json"},{"CVE":"CVE-2013-2443","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975137","bugzilla_description":"CVE-2013-2443 OpenJDK: AccessControlContext check order issue (Libraries, 8001330)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2443.json"},{"CVE":"CVE-2013-2452","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975138","bugzilla_description":"CVE-2013-2452 OpenJDK: Unique VMIDs (Libraries, 8001033)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2452.json"},{"CVE":"CVE-2013-2455","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975139","bugzilla_description":"CVE-2013-2455 OpenJDK: getEnclosing* checks (Libraries, 8007812)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2455.json"},{"CVE":"CVE-2013-2447","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975140","bugzilla_description":"CVE-2013-2447 OpenJDK: Prevent revealing the local address (Networking, 8001318)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2447.json"},{"CVE":"CVE-2013-2450","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975141","bugzilla_description":"CVE-2013-2450 OpenJDK: ObjectStreamClass circular reference denial of service (Serialization, 8000638)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2450.json"},{"CVE":"CVE-2013-2456","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975142","bugzilla_description":"CVE-2013-2456 OpenJDK: ObjectOutputStream access checks (Serialization, 8008132)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2456.json"},{"CVE":"CVE-2013-2412","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975144","bugzilla_description":"CVE-2013-2412 OpenJDK: JConsole SSL support (Serviceability, 8003703)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2412.json"},{"CVE":"CVE-2013-2449","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975145","bugzilla_description":"CVE-2013-2449 OpenJDK: GnomeFileTypeDetector path access check (Libraries, 8004288)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2449.json"},{"CVE":"CVE-2013-2451","severity":"low","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975146","bugzilla_description":"CVE-2013-2451 OpenJDK: exclusive port binding (Networking, 7170730)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2451.json"},{"CVE":"CVE-2013-1500","severity":"low","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975148","bugzilla_description":"CVE-2013-1500 OpenJDK: Insecure shared memory permissions (2D, 8001034)","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1500.json"},{"CVE":"CVE-2013-0401","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"920245","bugzilla_description":"CVE-2013-0401 OpenJDK: sun.awt.datatransfer.ClassLoaderObjectInputStream class may incorrectly invoke the system class loader (CanSecWest 2013, AWT, 8009305)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0401.json"},{"CVE":"CVE-2013-1488","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"920247","bugzilla_description":"CVE-2013-1488 OpenJDK: JDBC driver manager improper toString calls (CanSecWest 2013, Libraries, 8009814)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1488.json"},{"CVE":"CVE-2013-1537","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952387","bugzilla_description":"CVE-2013-1537 OpenJDK: remote code loading enabled by default (RMI, 8001040)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1537.json"},{"CVE":"CVE-2013-2415","severity":"low","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952389","bugzilla_description":"CVE-2013-2415 OpenJDK: temporary files created with insecure permissions (JAX-WS, 8003542)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2415.json"},{"CVE":"CVE-2013-2423","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0751"],"bugzilla":"952398","bugzilla_description":"CVE-2013-2423 OpenJDK: incorrect setter access checks in MethodHandles (Hostspot, 8009677)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2423.json"},{"CVE":"CVE-2013-2424","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952509","bugzilla_description":"CVE-2013-2424 OpenJDK: MBeanInstantiator insufficient class access checks (JMX, 8006435)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2424.json"},{"CVE":"CVE-2013-2429","severity":"important","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952521","bugzilla_description":"CVE-2013-2429 OpenJDK: JPEGImageWriter state corruption (ImageIO, 8007918)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2429.json"},{"CVE":"CVE-2013-2430","severity":"important","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952524","bugzilla_description":"CVE-2013-2430 OpenJDK: JPEGImageReader state corruption (ImageIO, 8007667)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2430.json"},{"CVE":"CVE-2013-2436","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0751"],"bugzilla":"952550","bugzilla_description":"CVE-2013-2436 OpenJDK: Wrapper.convert insufficient type checks (Libraries, 8009049)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2436.json"},{"CVE":"CVE-2013-2420","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952638","bugzilla_description":"CVE-2013-2420 OpenJDK: image processing vulnerability (2D, 8007617)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2420.json"},{"CVE":"CVE-2013-1558","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952640","bugzilla_description":"CVE-2013-1558 OpenJDK: java.beans.ThreadGroupContext missing restrictions (Beans, 7200507)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1558.json"},{"CVE":"CVE-2013-2422","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952642","bugzilla_description":"CVE-2013-2422 OpenJDK: MethodUtil trampoline class incorrect restrictions (Libraries, 8009857)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2422.json"},{"CVE":"CVE-2013-2431","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952645","bugzilla_description":"CVE-2013-2431 OpenJDK: Hotspot intrinsic frames vulnerability (Hotspot, 8004336)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2431.json"},{"CVE":"CVE-2013-1518","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952646","bugzilla_description":"CVE-2013-1518 OpenJDK: JAXP missing security restrictions (JAXP, 6657673)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1518.json"},{"CVE":"CVE-2013-1557","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952648","bugzilla_description":"CVE-2013-1557 OpenJDK: LogStream.setDefaultStream() missing security restrictions (RMI, 8001329)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1557.json"},{"CVE":"CVE-2013-2421","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952649","bugzilla_description":"CVE-2013-2421 OpenJDK: Hotspot MethodHandle lookup error (Hotspot, 8009699)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2421.json"},{"CVE":"CVE-2013-2426","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952653","bugzilla_description":"CVE-2013-2426 OpenJDK: ConcurrentHashMap incorrectly calls defaultReadObject() method (Libraries, 8009063)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2426.json"},{"CVE":"CVE-2013-2419","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952656","bugzilla_description":"CVE-2013-2419 ICU: Layout Engine font processing errors (JDK 2D, 8001031)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2419.json"},{"CVE":"CVE-2013-2417","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952657","bugzilla_description":"CVE-2013-2417 OpenJDK: Network InetAddress serialization information disclosure (Networking, 8000724)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2417.json"},{"CVE":"CVE-2013-2383","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952708","bugzilla_description":"CVE-2013-2383 ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004986)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2383.json"},{"CVE":"CVE-2013-2384","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952709","bugzilla_description":"CVE-2013-2384 ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004987)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2384.json"},{"CVE":"CVE-2013-1569","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952711","bugzilla_description":"CVE-2013-1569 ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004994)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1569.json"},{"CVE":"CVE-2013-0402","severity":"critical","public_date":"2013-03-06T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"920246","bugzilla_description":"CVE-2013-0402 Oracle JDK: unspecified JavaFX buffer overflow leading to JVM compromise (CanSecWest 2013, JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0402.json"},{"CVE":"CVE-2013-1491","severity":"critical","public_date":"2013-03-06T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"920248","bugzilla_description":"CVE-2013-1491 Oracle JDK: unspecified sanbox bypass (CanSecWest 2013, 2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1491.json"},{"CVE":"CVE-2013-0809","severity":"critical","public_date":"2013-03-04T00:00:00Z","advisories":["RHSA-2013:0603","RHSA-2013:0625","RHSA-2013:0602","RHSA-2013:0624","RHSA-2013:0605","RHSA-2013:0604","RHSA-2013:0626","RHSA-2013:1456","RHSA-2013:0601","RHSA-2013:0600","RHSA-2013:1455"],"bugzilla":"917550","bugzilla_description":"CVE-2013-0809 OpenJDK: Specially crafted sample model integer overflow (2D, 8007014)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.36.1.11.9.el5_9","java-1.7.0-oracle-1:1.7.0.17-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.57.1.11.9.el6_4","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el6_4","java-1.6.0-sun-1:1.6.0.43-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0809.json"},{"CVE":"CVE-2013-1493","severity":"critical","public_date":"2013-03-04T00:00:00Z","advisories":["RHSA-2013:0603","RHSA-2013:0625","RHSA-2013:0602","RHSA-2013:0624","RHSA-2013:0605","RHSA-2013:0604","RHSA-2013:0626","RHSA-2013:1456","RHSA-2013:0601","RHSA-2013:0600","RHSA-2013:1455"],"bugzilla":"917553","bugzilla_description":"CVE-2013-1493 OpenJDK: CMM malformed raster memory corruption (2D, 8007675)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.36.1.11.9.el5_9","java-1.7.0-oracle-1:1.7.0.17-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.57.1.11.9.el6_4","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el6_4","java-1.6.0-sun-1:1.6.0.43-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1493.json"},{"CVE":"CVE-2013-1486","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0532","RHSA-2013:1456","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531"],"bugzilla":"913014","bugzilla_description":"CVE-2013-1486 OpenJDK: MBeanServer insufficient privilege restrictions (JMX, 8006446)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el6_3","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1486.json"},{"CVE":"CVE-2013-1484","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0532","RHSA-2013:0275"],"bugzilla":"913021","bugzilla_description":"CVE-2013-1484 OpenJDK: MethodHandleProxies insufficient privilege checks (Libraries, 8004937)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1484.json"},{"CVE":"CVE-2013-1485","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0532","RHSA-2013:0275"],"bugzilla":"913025","bugzilla_description":"CVE-2013-1485 OpenJDK: MethodHandles insufficient privilege checks (Libraries, 8006439)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1485.json"},{"CVE":"CVE-2013-0169","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0636","RHSA-2013:0823","RHSA-2013:0833","RHSA-2013:0855","RHSA-2013:0822","RHSA-2013:0587","RHSA-2013:0532","RHSA-2013:1456","RHSA-2014:0416","RHSA-2013:0782","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"907589","bugzilla_description":"CVE-2013-0169 SSL/TLS: CBC padding timing attack (lucky-13)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3","spice-client-msi-0:3.3-12","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el5_9","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0169.json"},{"CVE":"CVE-2013-0440","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"859140","bugzilla_description":"CVE-2013-0440 OpenJDK: CPU consumption DoS via repeated SSL ClientHello packets (JSSE, 7192393)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0440.json"},{"CVE":"CVE-2013-1475","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0247","RHSA-2012:1485","RHSA-2013:0236","RHSA-2013:0246","RHSA-2012:1465","RHSA-2013:0237","RHSA-2012:1467","RHSA-2012:1466","RHSA-2013:0245"],"bugzilla":"860652","bugzilla_description":"CVE-2013-1475 OpenJDK: IIOP type reuse sandbox bypass (CORBA, 8000540, SE-2012-01 Issue 50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1475.json"},{"CVE":"CVE-2013-0424","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906813","bugzilla_description":"CVE-2013-0424 OpenJDK: RMI CGIHandler XSS issue (RMI, 6563318)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0424.json"},{"CVE":"CVE-2013-0435","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906892","bugzilla_description":"CVE-2013-0435 OpenJDK: com.sun.xml.internal.* not restricted packages (JAX-WS, 7201068)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0435.json"},{"CVE":"CVE-2013-1478","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906894","bugzilla_description":"CVE-2013-1478 OpenJDK: image parser insufficient raster parameter checks (2D, 8001972)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1478.json"},{"CVE":"CVE-2013-0442","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906899","bugzilla_description":"CVE-2013-0442 OpenJDK: insufficient privilege checking issue (AWT, 7192977)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0442.json"},{"CVE":"CVE-2013-0445","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906900","bugzilla_description":"CVE-2013-0445 OpenJDK: insufficient privilege checking issue (AWT, 8001057)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0445.json"},{"CVE":"CVE-2013-1480","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906904","bugzilla_description":"CVE-2013-1480 OpenJDK: image parser insufficient raster parameter checks (AWT, 8002325)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1480.json"},{"CVE":"CVE-2013-0450","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906911","bugzilla_description":"CVE-2013-0450 OpenJDK: RequiredModelMBean missing access control context checks (JMX, 8000537)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0450.json"},{"CVE":"CVE-2013-0428","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907207","bugzilla_description":"CVE-2013-0428 OpenJDK: reflection API incorrect checks for proxy classes (Libraries, 7197546, SE-2012-01 Issue 29)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0428.json"},{"CVE":"CVE-2013-0444","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0237"],"bugzilla":"907218","bugzilla_description":"CVE-2013-0444 OpenJDK: MethodFinder insufficient checks for cached results (Beans, 7200493)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0444.json"},{"CVE":"CVE-2013-0432","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907219","bugzilla_description":"CVE-2013-0432 OpenJDK: insufficient clipboard access premission checks (AWT, 7186952)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0432.json"},{"CVE":"CVE-2013-0437","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0237"],"bugzilla":"907222","bugzilla_description":"CVE-2013-0437 Oracle JDK: unspecified vulnerability fixed in 7u13 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0437.json"},{"CVE":"CVE-2012-3213","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"907223","bugzilla_description":"CVE-2012-3213 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Scripting)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3213.json"},{"CVE":"CVE-2013-1481","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"907224","bugzilla_description":"CVE-2013-1481 Oracle JDK: unspecified vulnerability fixed in 6u39 (Sound)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1481.json"},{"CVE":"CVE-2013-0409","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"907226","bugzilla_description":"CVE-2013-0409 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (JMX)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0409.json"},{"CVE":"CVE-2013-0443","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907340","bugzilla_description":"CVE-2013-0443 OpenJDK: insufficient Diffie-Hellman public key checks (JSSE, 7192392)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0443.json"},{"CVE":"CVE-2013-0425","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907344","bugzilla_description":"CVE-2013-0425 OpenJDK: logging insufficient access control checks (Libraries, 6664509)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0425.json"},{"CVE":"CVE-2013-0426","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907346","bugzilla_description":"CVE-2013-0426 OpenJDK: logging insufficient access control checks (Libraries, 6664528)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0426.json"},{"CVE":"CVE-2013-0434","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907453","bugzilla_description":"CVE-2013-0434 OpenJDK: loadPropertyFile missing restrictions (JAXP, 8001235)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0434.json"},{"CVE":"CVE-2013-0427","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907455","bugzilla_description":"CVE-2013-0427 OpenJDK: invalid threads subject to interrupts (Libraries, 6776941)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0427.json"},{"CVE":"CVE-2013-0433","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907456","bugzilla_description":"CVE-2013-0433 OpenJDK: InetSocketAddress serialization issue (Networking, 7201071)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0433.json"},{"CVE":"CVE-2013-1476","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907457","bugzilla_description":"CVE-2013-1476 OpenJDK: missing ValueHandlerImpl class constructor access restriction (CORBA, 8000631)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1476.json"},{"CVE":"CVE-2013-0441","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907458","bugzilla_description":"CVE-2013-0441 OpenJDK: missing serialization restriction (CORBA, 7201066)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0441.json"},{"CVE":"CVE-2013-0429","severity":"important","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:0237","RHSA-2013:0245"],"bugzilla":"907460","bugzilla_description":"CVE-2013-0429 OpenJDK: PresentationManager incorrectly shared (CORBA, 7141694)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0429.json"},{"CVE":"CVE-2013-0431","severity":"moderate","public_date":"2013-01-27T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0237"],"bugzilla":"906447","bugzilla_description":"CVE-2013-0431 OpenJDK: JMX Introspector missing package access check (JMX, 8000539, SE-2012-01 Issue 52)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0431.json"},{"CVE":"CVE-2013-1489","severity":"low","public_date":"2013-01-27T00:00:00Z","advisories":["RHSA-2013:0237"],"bugzilla":"906449","bugzilla_description":"CVE-2013-1489 Oracle JDK 7: bypass of the security level setting in browser plugin (Deployment, SE-2012-01 Issue 53)","cvss_score":null,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1489.json"},{"CVE":"CVE-2013-1490","severity":null,"public_date":"2013-01-27T00:00:00Z","advisories":[],"bugzilla":"906450","bugzilla_description":"CVE-2013-1490 JDK: complete Java security sandbox bypass (Issue 51)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1490.json"},{"CVE":"CVE-2012-3174","severity":"critical","public_date":"2013-01-13T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0165","RHSA-2013:0156"],"bugzilla":"894934","bugzilla_description":"CVE-2012-3174 OpenJDK: MethodHandles incorrect permission checks (Libraries, 8004933)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1","java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3174.json"},{"CVE":"CVE-2013-0422","severity":"critical","public_date":"2013-01-10T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0165","RHSA-2013:0156"],"bugzilla":"894172","bugzilla_description":"CVE-2013-0422 OpenJDK: MethodHandles.Lookup incorrect permission checks, Java 7 0day (Libraries, 8006017)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1","java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0422.json"},{"CVE":"CVE-2012-5373","severity":"moderate","public_date":"2012-11-23T00:00:00Z","advisories":[],"bugzilla":"880705","bugzilla_description":"CVE-2012-5373 java: Murmur hash function collisions (oCERT-2012-001)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5373.json"},{"CVE":"CVE-2012-3216","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865346","bugzilla_description":"CVE-2012-3216 OpenJDK: java.io.FilePermission information leak (Libraries, 6631398)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3216.json"},{"CVE":"CVE-2012-5068","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865348","bugzilla_description":"CVE-2012-5068 OpenJDK: RhinoScriptEngine security bypass (Scripting, 7143535)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5068.json"},{"CVE":"CVE-2012-5070","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865350","bugzilla_description":"CVE-2012-5070 OpenJDK: EnvHelp information disclosure (JMX, 7158796)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5070.json"},{"CVE":"CVE-2012-5076","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865352","bugzilla_description":"CVE-2012-5076 OpenJDK: com.sun.org.glassfish.* not restricted packages (JAX-WS, 7163198)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5076.json"},{"CVE":"CVE-2012-5077","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2012:1467"],"bugzilla":"865354","bugzilla_description":"CVE-2012-5077 OpenJDK: SecureRandom mulitple seeders information disclosure (Security, 7167656)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5077.json"},{"CVE":"CVE-2012-5073","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865357","bugzilla_description":"CVE-2012-5073 OpenJDK: LogManager security bypass (Libraries, 7169884)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5073.json"},{"CVE":"CVE-2012-5074","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865359","bugzilla_description":"CVE-2012-5074 OpenJDK: com.sun.org.glassfish.* not restricted packages (JAX-WS, 7169887)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5074.json"},{"CVE":"CVE-2012-5075","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865363","bugzilla_description":"CVE-2012-5075 OpenJDK: RMIConnectionImpl information disclosure (JMX, 7169888)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5075.json"},{"CVE":"CVE-2012-5072","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865365","bugzilla_description":"CVE-2012-5072 OpenJDK: AccessController.doPrivilegedWithCombiner() information disclosure (Security, 7172522)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5072.json"},{"CVE":"CVE-2012-5081","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865370","bugzilla_description":"CVE-2012-5081 OpenJDK: JSSE denial of service (JSSE, 7186286)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5081.json"},{"CVE":"CVE-2012-5086","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2012:1467"],"bugzilla":"865428","bugzilla_description":"CVE-2012-5086 OpenJDK: XMLDecoder sandbox restriction bypass (Beans, 7195917)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5086.json"},{"CVE":"CVE-2012-5087","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865434","bugzilla_description":"CVE-2012-5087 OpenJDK: PropertyElementHandler insufficient access checks (Beans, 7195549)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5087.json"},{"CVE":"CVE-2012-5088","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865471","bugzilla_description":"CVE-2012-5088 OpenJDK: MethodHandle insufficient access control checks (Libraries, 7196190)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5088.json"},{"CVE":"CVE-2012-5084","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865511","bugzilla_description":"CVE-2012-5084 OpenJDK: DefaultFormatter insufficient data validation (Swing, 7195194)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5084.json"},{"CVE":"CVE-2012-5089","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865514","bugzilla_description":"CVE-2012-5089 OpenJDK: RMIConnectionImpl insufficient access control checks (JMX, 7198296)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5089.json"},{"CVE":"CVE-2012-5071","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865519","bugzilla_description":"CVE-2012-5071 OpenJDK: DescriptorSupport insufficient package access checks (JMX, 7192975)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5071.json"},{"CVE":"CVE-2012-5069","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865531","bugzilla_description":"CVE-2012-5069 OpenJDK: Executors state handling issues (Concurrency, 7189103)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5069.json"},{"CVE":"CVE-2012-5085","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2013:0625","RHSA-2012:1392","RHSA-2013:0624","RHSA-2012:1384","RHSA-2013:0626","RHSA-2012:1386","RHSA-2012:1385"],"bugzilla":"865541","bugzilla_description":"CVE-2012-5085 OpenJDK: disable Gopher support by default (Gopher, 7189567)","cvss_score":null,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5085.json"},{"CVE":"CVE-2012-5079","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865568","bugzilla_description":"CVE-2012-5079 OpenJDK: ServiceLoader reject not subtype classes without instantiating (Libraries, 7195919)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5079.json"},{"CVE":"CVE-2012-4416","severity":"low","public_date":"2012-09-07T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385"],"bugzilla":"856124","bugzilla_description":"CVE-2012-4416 OpenJDK: uninitialized Array JVM memory disclosure (Hotspot, 7198606)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4416.json"},{"CVE":"CVE-2012-4420","severity":null,"public_date":"2012-09-07T00:00:00Z","advisories":[],"bugzilla":"856588","bugzilla_description":"CVE-2012-4420 java-1.7.0-openjdk: JVM heap memory disclosure","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4420.json"},{"CVE":"CVE-2012-1682","severity":"critical","public_date":"2012-08-30T00:00:00Z","advisories":["RHSA-2012:1221","RHSA-2012:1223","RHSA-2013:1456","RHSA-2012:1289","RHSA-2012:1222","RHSA-2012:1225","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"853097","bugzilla_description":"CVE-2012-1682 OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.49.1.11.4.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.9.el5_8","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1682.json"},{"CVE":"CVE-2012-3136","severity":"critical","public_date":"2012-08-30T00:00:00Z","advisories":["RHSA-2012:1223","RHSA-2012:1289","RHSA-2012:1225"],"bugzilla":"853138","bugzilla_description":"CVE-2012-3136 OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3136.json"},{"CVE":"CVE-2012-0547","severity":"low","public_date":"2012-08-30T00:00:00Z","advisories":["RHSA-2012:1392","RHSA-2012:1221","RHSA-2012:1223","RHSA-2013:1456","RHSA-2012:1289","RHSA-2012:1222","RHSA-2012:1225","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"853228","bugzilla_description":"CVE-2012-0547 OpenJDK: AWT hardening fixes (AWT, 7163201)","cvss_score":null,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.49.1.11.4.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.9.el5_8","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0547.json"},{"CVE":"CVE-2012-4681","severity":"critical","public_date":"2012-08-27T00:00:00Z","advisories":["RHSA-2012:1223","RHSA-2012:1289","RHSA-2012:1225"],"bugzilla":"852051","bugzilla_description":"CVE-2012-4681 OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4681.json"},{"CVE":"CVE-2012-1711","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:0730"],"bugzilla":"829354","bugzilla_description":"CVE-2012-1711 OpenJDK: improper protection of CORBA data models (CORBA, 7079902)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1711.json"},{"CVE":"CVE-2012-1717","severity":"low","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:1332","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829358","bugzilla_description":"CVE-2012-1717 OpenJDK: insecure temporary file permissions (JRE, 7143606)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1717.json"},{"CVE":"CVE-2012-1716","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829360","bugzilla_description":"CVE-2012-1716 OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1716.json"},{"CVE":"CVE-2012-1713","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:1332","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829361","bugzilla_description":"CVE-2012-1713 OpenJDK: fontmanager layout lookup code memory corruption (2D, 7143617)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1713.json"},{"CVE":"CVE-2012-1719","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:1332","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829371","bugzilla_description":"CVE-2012-1719 OpenJDK: mutable repository identifiers in generated stub code (CORBA, 7143851)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1719.json"},{"CVE":"CVE-2012-1718","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1332","RHSA-2012:0730","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829372","bugzilla_description":"CVE-2012-1718 OpenJDK: CRL and certificate extensions handling improvements (Security, 7143872)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1718.json"},{"CVE":"CVE-2012-1723","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:0730"],"bugzilla":"829373","bugzilla_description":"CVE-2012-1723 OpenJDK: insufficient field accessibility checks (HotSpot, 7152811)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1723.json"},{"CVE":"CVE-2012-1724","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:0730"],"bugzilla":"829374","bugzilla_description":"CVE-2012-1724 OpenJDK: XML parsing infinite loop (JAXP, 7157609)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1724.json"},{"CVE":"CVE-2012-1725","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829376","bugzilla_description":"CVE-2012-1725 OpenJDK: insufficient invokespecial <init> verification (HotSpot, 7160757)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1725.json"},{"CVE":"CVE-2012-1726","severity":"important","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:1019","RHSA-2012:1289"],"bugzilla":"829377","bugzilla_description":"CVE-2012-1726 OpenJDK: java.lang.invoke.MethodHandles.Lookup does not honor access modes (Libraries, 7165628)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1726.json"},{"CVE":"CVE-2012-1721","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:0734","RHSA-2012:1019","RHSA-2013:1456","RHSA-2012:1289","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"831353","bugzilla_description":"CVE-2012-1721 Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1721.json"},{"CVE":"CVE-2012-1722","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:0734","RHSA-2012:1019","RHSA-2013:1456","RHSA-2012:1289","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"831354","bugzilla_description":"CVE-2012-1722 Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1722.json"},{"CVE":"CVE-2012-0551","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:0734","RHSA-2012:1019","RHSA-2013:1456","RHSA-2012:1289","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"831355","bugzilla_description":"CVE-2012-0551 Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0551.json"},{"CVE":"CVE-2015-0480","severity":"low","public_date":"2005-01-04T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211504","bugzilla_description":"CVE-2015-0480 OpenJDK: jar directory traversal issues (Tools, 8064601)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0480.json"},{"CVE":"CVE-2005-1080","severity":"low","public_date":"2005-01-04T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"606442","bugzilla_description":"CVE-2005-1080 jar: directory traversal vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1080.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-demo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-demo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-demo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-jdbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-jdbc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-jdbc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-src_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-src_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm-src_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm_security_api_results.json
new file mode 100644
index 0000000..b4722fe
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.7.1-ibm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17639","severity":"moderate","public_date":"2020-08-05T00:00:00Z","advisories":["RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3387"],"bugzilla":"1866497","bugzilla_description":"CVE-2019-17639 IBM JDK: Information disclosure via calls to System.arraycopy() with invalid length","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17639.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14583","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856448","bugzilla_description":"CVE-2020-14583 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2020-14593","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856784","bugzilla_description":"CVE-2020-14593 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14593.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-14621","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856885","bugzilla_description":"CVE-2020-14621 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14621.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14577","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856988","bugzilla_description":"CVE-2020-14577 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14577.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14578","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856991","bugzilla_description":"CVE-2020-14578 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14578.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-14579","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856995","bugzilla_description":"CVE-2020-14579 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14579.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2756","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823215","bugzilla_description":"CVE-2020-2756 OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2756.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2757","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823216","bugzilla_description":"CVE-2020-2757 OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2757.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2773","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1508","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:1512","RHSA-2020:1514"],"bugzilla":"1823224","bugzilla_description":"CVE-2020-2773 OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2773.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2800","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823527","bugzilla_description":"CVE-2020-2800 OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2800.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2830","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823542","bugzilla_description":"CVE-2020-2830 OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185->CWE-400","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2830.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-2803","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823694","bugzilla_description":"CVE-2020-2803 OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2805","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823844","bugzilla_description":"CVE-2020-2805 OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2805.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2781","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823960","bugzilla_description":"CVE-2020-2781 OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2781.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-4732","severity":"important","public_date":"2020-01-31T00:00:00Z","advisories":[],"bugzilla":"1797101","bugzilla_description":"CVE-2019-4732 IBM JDK: untrusted DLL search path vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-4732.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-2583","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790444","bugzilla_description":"CVE-2020-2583 OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2590","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790556","bugzilla_description":"CVE-2020-2590 OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2590.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2601","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790570","bugzilla_description":"CVE-2020-2601 OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2020-2593","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790884","bugzilla_description":"CVE-2020-2593 OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2593.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2604","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790944","bugzilla_description":"CVE-2020-2604 OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2604.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-2654","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:2236","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0541","RHSA-2020:0196","RHSA-2020:2241","RHSA-2020:0632","RHSA-2020:2239","RHSA-2020:0202","RHSA-2020:2237","RHSA-2020:0128","RHSA-2020:2238"],"bugzilla":"1791217","bugzilla_description":"CVE-2020-2654 OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2654.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2659","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0468"],"bugzilla":"1791284","bugzilla_description":"CVE-2020-2659 OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2659.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2585","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1807936","bugzilla_description":"CVE-2020-2585 Oracle JDK: unspecified vulnerability fixed in 8u221 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2585.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-17631","severity":"moderate","public_date":"2019-12-04T00:00:00Z","advisories":["RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:4115","RHSA-2020:0006"],"bugzilla":"1779880","bugzilla_description":"CVE-2019-17631 IBM JDK: Unrestricted access to diagnostic operations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17631.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-2964","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760963","bugzilla_description":"CVE-2019-2964 OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2964.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2973","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760978","bugzilla_description":"CVE-2019-2973 OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2981","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760980","bugzilla_description":"CVE-2019-2981 OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2999","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760992","bugzilla_description":"CVE-2019-2999 OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-2988","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760999","bugzilla_description":"CVE-2019-2988 OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2988.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2978","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761006","bugzilla_description":"CVE-2019-2978 OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2992","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761146","bugzilla_description":"CVE-2019-2992 OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2983","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761262","bugzilla_description":"CVE-2019-2983 OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2983.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2962","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761266","bugzilla_description":"CVE-2019-2962 OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2962.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2945","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761596","bugzilla_description":"CVE-2019-2945 OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2945.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2019-2989","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761601","bugzilla_description":"CVE-2019-2989 OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2989.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-2958","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777929","bugzilla_description":"CVE-2019-2958 OpenJDK: Incorrect escaping of command line arguments in ProcessImpl on Windows (Libraries, 8221858)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2958.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2933","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777981","bugzilla_description":"CVE-2019-2933 OpenJDK: FilePermission checks not preformed correctly on Windows (Libraries, 8213429)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-11772","severity":"important","public_date":"2019-08-01T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2737","RHSA-2019:2592","RHSA-2019:2590"],"bugzilla":"1738547","bugzilla_description":"CVE-2019-11772 IBM JDK: Out-of-bounds access in the String.getBytes method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11775","severity":"important","public_date":"2019-08-01T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:2737","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590"],"bugzilla":"1738549","bugzilla_description":"CVE-2019-11775 IBM JDK: Failure to privatize a value pulled out of the loop by versioning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11775.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-4473","severity":"moderate","public_date":"2019-08-01T00:00:00Z","advisories":[],"bugzilla":"1738558","bugzilla_description":"CVE-2019-4473 IBM JDK: Insecure RPATH in multiple binaries on AIX","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-4473.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-11771","severity":"moderate","public_date":"2019-08-01T00:00:00Z","advisories":[],"bugzilla":"1738559","bugzilla_description":"CVE-2019-11771 IBM JDK: Insecure RPATH in OpenJ9 on AIX","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11771.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-2769","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730056","bugzilla_description":"CVE-2019-2769 OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2769.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2816","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730099","bugzilla_description":"CVE-2019-2816 OpenJDK: Missing URL format validation (Networking, 8221518)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-2762","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730415","bugzilla_description":"CVE-2019-2762 OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2766","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730459","bugzilla_description":"CVE-2019-2766 OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-10245","severity":"moderate","public_date":"2019-04-30T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:1165","RHSA-2019:1164","RHSA-2019:1325","RHSA-2019:1238","RHSA-2019:1163"],"bugzilla":"1704799","bugzilla_description":"CVE-2019-10245 IBM JDK: Read beyond the end of bytecode array causing JVM crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2602","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700440","bugzilla_description":"CVE-2019-2602 OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2698","severity":"important","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1238","RHSA-2019:1163"],"bugzilla":"1700447","bugzilla_description":"CVE-2019-2698 OpenJDK: Font layout engine out of bounds access setCurrGlyphID() (2D, 8219022)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2684","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700564","bugzilla_description":"CVE-2019-2684 OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2684.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2697","severity":"important","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:1165","RHSA-2019:1164","RHSA-2019:1325","RHSA-2019:1238","RHSA-2019:1163"],"bugzilla":"1704480","bugzilla_description":"CVE-2019-2697 Oracle JDK: Unspecified vulnerability fixed in 7u221 and 8u211 (2D)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2697.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12547","severity":"critical","public_date":"2019-03-01T00:00:00Z","advisories":["RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0640","RHSA-2019:0469","RHSA-2019:1238"],"bugzilla":"1685611","bugzilla_description":"CVE-2018-12547 IBM JDK: buffer overflow in jio_snprintf() and jio_vsnprintf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12547.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12549","severity":"critical","public_date":"2019-03-01T00:00:00Z","advisories":["RHSA-2019:0472","RHSA-2019:0640","RHSA-2019:0469","RHSA-2019:1238"],"bugzilla":"1685717","bugzilla_description":"CVE-2018-12549 IBM JDK: missing null check when accelerating Unsafe calls","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-1890","severity":"moderate","public_date":"2019-03-01T00:00:00Z","advisories":[],"bugzilla":"1685725","bugzilla_description":"CVE-2018-1890 IBM JDK: local privilege escalation via insecure RPATHs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1890.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-7317","severity":"low","public_date":"2019-01-25T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:2737","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:1309","RHSA-2019:1308","RHSA-2019:2590"],"bugzilla":"1672409","bugzilla_description":"CVE-2019-7317 libpng: use-after-free in png_image_free in png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","thunderbird-0:60.7.0-1.el6_10","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","firefox-0:60.7.0-1.el7_6","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-2422","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:0462","RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0464","RHSA-2019:0640","RHSA-2019:0416","RHSA-2019:0435","RHSA-2019:0469","RHSA-2019:0436","RHSA-2019:1238"],"bugzilla":"1665945","bugzilla_description":"CVE-2019-2422 OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["java-11-openjdk-1:11.0.2.7-0.el7_6","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el6_10","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el7_6","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.201.b09-1.el6_10","java-1.8.0-openjdk-1:1.8.0.201.b09-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2426","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":[],"bugzilla":"1665953","bugzilla_description":"CVE-2019-2426 OpenJDK: transparent NTLM authentication enabled by default (Networking, 8209094)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2426.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-3169","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639293","bugzilla_description":"CVE-2018-3169 OpenJDK: Improper field access checks (Hotspot, 8199226)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3214","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639301","bugzilla_description":"CVE-2018-3214 OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3139","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639442","bugzilla_description":"CVE-2018-3139 OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3139.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3180","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639484","bugzilla_description":"CVE-2018-3180 OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-3136","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639755","bugzilla_description":"CVE-2018-3136 OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3149","severity":"important","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639834","bugzilla_description":"CVE-2018-3149 OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3149.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1656","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:2569","RHSA-2018:2575","RHSA-2018:2576"],"bugzilla":"1618869","bugzilla_description":"CVE-2018-1656 IBM JDK: path traversal flaw in the Diagnostic Tooling Framework","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1656.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1517","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:2569","RHSA-2018:2575","RHSA-2018:2576"],"bugzilla":"1618871","bugzilla_description":"CVE-2018-1517 IBM JDK: DoS in the java.math component","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1517.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-2952","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:2283","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2241","RHSA-2018:2253","RHSA-2018:2242","RHSA-2018:2286"],"bugzilla":"1600925","bugzilla_description":"CVE-2018-2952 OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2952.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2973","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2253"],"bugzilla":"1602145","bugzilla_description":"CVE-2018-2973 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-2940","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2253"],"bugzilla":"1602146","bugzilla_description":"CVE-2018-2940 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2940.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-11212","severity":"low","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0640","RHSA-2019:0469","RHSA-2019:1238","RHSA-2019:2052"],"bugzilla":"1579973","bugzilla_description":"CVE-2018-11212 libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11212.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-12539","severity":"important","public_date":"2018-05-11T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:2569","RHSA-2018:2575","RHSA-2018:2576"],"bugzilla":"1618767","bugzilla_description":"CVE-2018-12539 IBM JDK: privilege escalation via insufficiently restricted access to Attach API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12539.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2018-2794","severity":"important","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567126","bugzilla_description":"CVE-2018-2794 OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2794.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-2795","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567351","bugzilla_description":"CVE-2018-2795 OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2799","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567542","bugzilla_description":"CVE-2018-2799 OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2799.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2798","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567543","bugzilla_description":"CVE-2018-2798 OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2797","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567545","bugzilla_description":"CVE-2018-2797 OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2796","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567546","bugzilla_description":"CVE-2018-2796 OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2800","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568163","bugzilla_description":"CVE-2018-2800 OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-2790","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568515","bugzilla_description":"CVE-2018-2790 OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-2783","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1203","RHSA-2018:0100","RHSA-2018:0099"],"bugzilla":"1569204","bugzilla_description":"CVE-2018-2783 Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-13785","severity":"low","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1599943","bugzilla_description":"CVE-2018-13785 libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-369","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1417","severity":"critical","public_date":"2018-02-20T00:00:00Z","advisories":["RHSA-2018:0458","RHSA-2018:0521","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463"],"bugzilla":"1568966","bugzilla_description":"CVE-2018-1417 IBM JDK: J9 JVM allows untrusted code running under a security manager to elevate its privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1417.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2678","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534263","bugzilla_description":"CVE-2018-2678 OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2678.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2677","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534288","bugzilla_description":"CVE-2018-2677 OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2663","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534296","bugzilla_description":"CVE-2018-2663 OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2663.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2579","severity":"low","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534298","bugzilla_description":"CVE-2018-2579 OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-567","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2579.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2588","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534299","bugzilla_description":"CVE-2018-2588 OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-90","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-2602","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534525","bugzilla_description":"CVE-2018-2602 OpenJDK: loading of classes from untrusted locations (I18n, 8182601)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2018-2599","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534543","bugzilla_description":"CVE-2018-2599 OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2599.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2603","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534553","bugzilla_description":"CVE-2018-2603 OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2603.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2629","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0100","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534625","bugzilla_description":"CVE-2018-2629 OpenJDK: GSS context use-after-free (JGSS, 8186212)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2618","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534762","bugzilla_description":"CVE-2018-2618 OpenJDK: insufficient strength of key agreement (JCE, 8185292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-2641","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534766","bugzilla_description":"CVE-2018-2641 OpenJDK: GTK library loading use-after-free (AWT, 8185325)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-2582","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0521","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534768","bugzilla_description":"CVE-2018-2582 OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-2634","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534943","bugzilla_description":"CVE-2018-2634 OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-2637","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534970","bugzilla_description":"CVE-2018-2637 OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-2633","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535036","bugzilla_description":"CVE-2018-2633 OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2018-2657","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0458","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:1463"],"bugzilla":"1535353","bugzilla_description":"CVE-2018-2657 Oracle JDK: unspecified vulnerability fixed in 6u181 and 7u171 (Serialization)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2657.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2581","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:1812","RHSA-2018:0100","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535354","bugzilla_description":"CVE-2018-2581 Oracle JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2581.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-10285","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501868","bugzilla_description":"CVE-2017-10285 OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10346","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501873","bugzilla_description":"CVE-2017-10346 OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10388","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502038","bugzilla_description":"CVE-2017-10388 OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10349","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502611","bugzilla_description":"CVE-2017-10349 OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10349.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10357","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502614","bugzilla_description":"CVE-2017-10357 OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10357.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10348","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502629","bugzilla_description":"CVE-2017-10348 OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10347","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502632","bugzilla_description":"CVE-2017-10347 OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10350","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502640","bugzilla_description":"CVE-2017-10350 OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10350.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10281","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502649","bugzilla_description":"CVE-2017-10281 OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10281.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10295","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502687","bugzilla_description":"CVE-2017-10295 OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10295.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-10345","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502858","bugzilla_description":"CVE-2017-10345 OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-10355","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502869","bugzilla_description":"CVE-2017-10355 OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10355.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10356","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1503169","bugzilla_description":"CVE-2017-10356 OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10356.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2017-1376","severity":"critical","public_date":"2017-08-18T00:00:00Z","advisories":["RHSA-2017:2469","RHSA-2017:2481"],"bugzilla":"1483736","bugzilla_description":"CVE-2017-1376 IBM JDK: class verifier allowing Security Manager bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10107","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471266","bugzilla_description":"CVE-2017-10107 OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10107.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10089","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471270","bugzilla_description":"CVE-2017-10089 OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10090","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1791"],"bugzilla":"1471517","bugzilla_description":"CVE-2017-10090 OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10090.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10087","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471521","bugzilla_description":"CVE-2017-10087 OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10110","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471523","bugzilla_description":"CVE-2017-10110 OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10101","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471527","bugzilla_description":"CVE-2017-10101 OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10096","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471528","bugzilla_description":"CVE-2017-10096 OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10067","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471535","bugzilla_description":"CVE-2017-10067 OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10109","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471670","bugzilla_description":"CVE-2017-10109 OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10116","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471738","bugzilla_description":"CVE-2017-10116 OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2017-10115","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471851","bugzilla_description":"CVE-2017-10115 OpenJDK: DSA implementation timing attack (JCE, 8175106)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10108","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471888","bugzilla_description":"CVE-2017-10108 OpenJDK: unbounded memory allocation in BasicAttribute deserialization (Serialization, 8174105)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10108.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10053","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471889","bugzilla_description":"CVE-2017-10053 OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10102","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472345","bugzilla_description":"CVE-2017-10102 OpenJDK: incorrect handling of references in DGC (RMI, 8163958)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-10243","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472666","bugzilla_description":"CVE-2017-10243 OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10243.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-10105","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472667","bugzilla_description":"CVE-2017-10105 Oracle JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-1289","severity":"moderate","public_date":"2017-05-09T00:00:00Z","advisories":["RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1449603","bugzilla_description":"CVE-2017-1289 IBM JDK: XML External Entity Injection (XXE) error when processing XML data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"8.2"},{"CVE":"CVE-2017-3511","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1221"],"bugzilla":"1443007","bugzilla_description":"CVE-2017-3511 OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-3509","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443052","bugzilla_description":"CVE-2017-3509 OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2017-3544","severity":"low","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443068","bugzilla_description":"CVE-2017-3544 OpenJDK: newline injection in the SMTP client (Networking, 8171533)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3539","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443097","bugzilla_description":"CVE-2017-3539 OpenJDK: MD5 allowed for jar verification (Security, 8171121)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3514","severity":"critical","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443469","bugzilla_description":"CVE-2017-3514 OpenJDK: peering issues on Windows (AWT, 8167110)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3533","severity":"low","public_date":"2017-02-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443083","bugzilla_description":"CVE-2017-3533 OpenJDK: newline injection in the FTP client (Networking, 8170222)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3272","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413554","bugzilla_description":"CVE-2017-3272 OpenJDK: insufficient protected field access checks in atomic field updaters (Libraries, 8165344)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3289","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413562","bugzilla_description":"CVE-2017-3289 OpenJDK: insecure class construction (Hotspot, 8167104)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3253","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413583","bugzilla_description":"CVE-2017-3253 OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-3261","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413653","bugzilla_description":"CVE-2017-3261 OpenJDK: integer overflow in SocketOutputStream boundary check (Networking, 8164147)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3231","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413717","bugzilla_description":"CVE-2017-3231 OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3231.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5547","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413764","bugzilla_description":"CVE-2016-5547 OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5547.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5552","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413882","bugzilla_description":"CVE-2016-5552 OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5552.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3252","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413906","bugzilla_description":"CVE-2017-3252 OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3252.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5546","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413911","bugzilla_description":"CVE-2016-5546 OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5546.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-5548","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413920","bugzilla_description":"CVE-2016-5548 OpenJDK: DSA implementation timing attack (Libraries, 8168728)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-5549","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413923","bugzilla_description":"CVE-2016-5549 OpenJDK: ECDSA implementation timing attack (Libraries, 8168724)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-3241","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413955","bugzilla_description":"CVE-2017-3241 OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3241.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3259","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1414163","bugzilla_description":"CVE-2017-3259 Oracle JDK: unspecified vulnerability fixed in 6u141, 7u131, and 8u121 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3259.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3260","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":[],"bugzilla":"1414562","bugzilla_description":"CVE-2017-3260 OpenJDK: menu handling memory corruption (AWT, 8164143)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3260.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5573","severity":"important","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385544","bugzilla_description":"CVE-2016-5573 OpenJDK: insufficient checks of JDWP packets (Hotspot, 8159519)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5573.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5554","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385714","bugzilla_description":"CVE-2016-5554 OpenJDK: insufficient classloader consistency checks in ClassLoaderWithRepository (JMX, 8157739)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5554.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5542","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385723","bugzilla_description":"CVE-2016-5542 OpenJDK: missing algorithm restrictions for jar verification (Libraries, 8155973)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5597","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1386103","bugzilla_description":"CVE-2016-5597 OpenJDK: exposure of server authentication credentials to proxy (Networking, 8160838)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-319","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5597.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5556","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2016:2659","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1386408","bugzilla_description":"CVE-2016-5556 Oracle JDK: unspecified vulnerability fixed in 6u131, 7u121, and 8u111 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5556.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-9843","severity":"low","public_date":"2016-09-29T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402351","bugzilla_description":"CVE-2016-9843 zlib: Big-endian out-of-bounds pointer","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9840","severity":"low","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402345","bugzilla_description":"CVE-2016-9840 zlib: Out-of-bounds pointer arithmetic in inftrees.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9841","severity":"low","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402346","bugzilla_description":"CVE-2016-9841 zlib: Out-of-bounds pointer arithmetic in inffast.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9842","severity":"low","public_date":"2016-09-06T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402348","bugzilla_description":"CVE-2016-9842 zlib: Undefined left shift of negative number","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-2183","severity":"moderate","public_date":"2016-08-24T00:00:00Z","advisories":["RHSA-2020:0451","RHSA-2020:3842","RHSA-2017:3240","RHSA-2019:1245","RHBA-2019:2581","RHSA-2017:0462","RHSA-2017:3113","RHSA-2017:3114","RHSA-2017:2710","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:3239","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:2709","RHSA-2017:2708","RHSA-2018:2123","RHSA-2019:2859"],"bugzilla":"1369383","bugzilla_description":"CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","openshift3/metrics-heapster:v3.11.141-2","python-0:2.7.5-69.el7_5","openshift3/ose-console:v3.11.141-2","openshift3/oauth-proxy:v3.11.170-5","openshift4/ose-console:v4.5.0-202009201759.p0","openshift3/ose-kube-rbac-proxy:v3.11.141-2","openshift3/ose-metrics-server:v3.11.141-2","java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8","openshift4/ose-oauth-proxy:v4.1.18-201909201915"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10165","severity":"moderate","public_date":"2016-08-15T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2017:2999","RHSA-2017:3046","RHSA-2016:2658","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1367357","bugzilla_description":"CVE-2016-10165 lcms2: Out-of-bounds read in Type_MLU_Read()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2016-3598","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2017:1216","RHSA-2016:1504","RHSA-2016:1587","RHSA-2016:1588","RHSA-2016:1589","RHSA-2016:1458"],"bugzilla":"1356971","bugzilla_description":"CVE-2016-3598 OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3598.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3511","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2017:1216","RHSA-2016:1587","RHSA-2016:1588","RHSA-2016:1589"],"bugzilla":"1358168","bugzilla_description":"CVE-2016-3511 Oracle JDK: unspecified vulnerability fixed in 7u111 and 8u101 (Deployment)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-0264","severity":"important","public_date":"2016-04-27T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039"],"bugzilla":"1331359","bugzilla_description":"CVE-2016-0264 IBM JDK: buffer overflow vulnerability in the IBM JVM","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0264.json"},{"CVE":"CVE-2016-0686","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327743","bugzilla_description":"CVE-2016-0686 OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0686.json"},{"CVE":"CVE-2016-0687","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327749","bugzilla_description":"CVE-2016-0687 OpenJDK: insufficient byte type checks (Hotspot, 8132051)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0687.json"},{"CVE":"CVE-2016-3426","severity":"low","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328059","bugzilla_description":"CVE-2016-3426 OpenJDK: non-constant time GCM authentication tag comparison (JCE, 8143945)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3426.json"},{"CVE":"CVE-2016-3427","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328210","bugzilla_description":"CVE-2016-3427 OpenJDK: unrestricted deserialization of authentication credentials (JMX, 8144430)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3427.json"},{"CVE":"CVE-2016-3443","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328618","bugzilla_description":"CVE-2016-3443 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3443.json"},{"CVE":"CVE-2016-3449","severity":"important","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328619","bugzilla_description":"CVE-2016-3449 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3449.json"},{"CVE":"CVE-2016-3422","severity":"moderate","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328620","bugzilla_description":"CVE-2016-3422 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3422.json"},{"CVE":"CVE-2016-0376","severity":"critical","public_date":"2016-04-14T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039"],"bugzilla":"1330986","bugzilla_description":"CVE-2016-0376 IBM JDK: insecure deserialization in CORBA, incorrect CVE-2013-5456 fix","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0376.json"},{"CVE":"CVE-2016-0363","severity":"critical","public_date":"2016-04-04T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039"],"bugzilla":"1324044","bugzilla_description":"CVE-2016-0363 IBM JDK: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0363.json"},{"CVE":"CVE-2015-5041","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0100","RHSA-2016:0101"],"bugzilla":"1302689","bugzilla_description":"CVE-2015-5041 IBM JDK: J9 JVM allows code to invoke non-public interface methods","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5041.json"},{"CVE":"CVE-2016-0494","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298906","bugzilla_description":"CVE-2016-0494 ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0494.json"},{"CVE":"CVE-2016-0402","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298957","bugzilla_description":"CVE-2016-0402 OpenJDK: URL deserialization inconsistencies (Networking, 8059054)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0402.json"},{"CVE":"CVE-2016-0448","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299073","bugzilla_description":"CVE-2016-0448 OpenJDK: logging of RMI connection secrets (JMX, 8130710)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0448.json"},{"CVE":"CVE-2016-0466","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299385","bugzilla_description":"CVE-2016-0466 OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0466.json"},{"CVE":"CVE-2016-0483","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299441","bugzilla_description":"CVE-2016-0483 OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0483.json"},{"CVE":"CVE-2015-7575","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0012","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0007","RHSA-2016:0008","RHSA-2016:0049"],"bugzilla":"1289841","bugzilla_description":"CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.2","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","nss-0:3.19.1-19.el7_2","gnutls-0:3.3.8-14.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","gnutls-0:2.8.5-19.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","nss-0:3.19.1-8.el6_7","openssl-1:1.0.1e-51.el7_2.2","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json"},{"CVE":"CVE-2015-8540","severity":"low","public_date":"2015-12-10T00:00:00Z","advisories":["RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0100","RHSA-2016:0101"],"bugzilla":"1291312","bugzilla_description":"CVE-2015-8540 libpng: underflow read in png_check_keyword()","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-125","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8540.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-5006","severity":"moderate","public_date":"2015-11-13T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:2509","RHSA-2015:2506"],"bugzilla":"1282379","bugzilla_description":"CVE-2015-5006 IBM JDK: local disclosure of kerberos credentials cache","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5006.json"},{"CVE":"CVE-2015-8126","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8126.json"},{"CVE":"CVE-2015-8472","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8472.json"},{"CVE":"CVE-2015-7981","severity":"low","public_date":"2015-10-22T00:00:00Z","advisories":["RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0100","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595"],"bugzilla":"1276416","bugzilla_description":"CVE-2015-7981 libpng: Out-of-bounds read in png_convert_to_rfc1123","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","libpng12-0:1.2.50-7.el7_2","libpng-2:1.2.49-2.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7981.json"},{"CVE":"CVE-2015-4806","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1233687","bugzilla_description":"CVE-2015-4806 OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4806.json"},{"CVE":"CVE-2015-4835","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273022","bugzilla_description":"CVE-2015-4835 OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4835.json"},{"CVE":"CVE-2015-4843","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273053","bugzilla_description":"CVE-2015-4843 OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4843.json"},{"CVE":"CVE-2015-4883","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273304","bugzilla_description":"CVE-2015-4883 OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4883.json"},{"CVE":"CVE-2015-4860","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273308","bugzilla_description":"CVE-2015-4860 OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4860.json"},{"CVE":"CVE-2015-4805","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273311","bugzilla_description":"CVE-2015-4805 OpenJDK: missing checks for proper initialization in ObjectStreamClass (Serialization, 8103671)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-665","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4805.json"},{"CVE":"CVE-2015-4844","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273318","bugzilla_description":"CVE-2015-4844 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4844.json"},{"CVE":"CVE-2015-4840","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273338","bugzilla_description":"CVE-2015-4840 OpenJDK: OOB access in CMS code (2D, 8086092)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4840.json"},{"CVE":"CVE-2015-4882","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273414","bugzilla_description":"CVE-2015-4882 OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4882.json"},{"CVE":"CVE-2015-4842","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273425","bugzilla_description":"CVE-2015-4842 OpenJDK: leak of user.dir location (JAXP, 8078427)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4842.json"},{"CVE":"CVE-2015-4734","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273430","bugzilla_description":"CVE-2015-4734 OpenJDK: kerberos realm name leak (JGSS, 8048030)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4734.json"},{"CVE":"CVE-2015-4903","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273496","bugzilla_description":"CVE-2015-4903 OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4903.json"},{"CVE":"CVE-2015-4803","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273637","bugzilla_description":"CVE-2015-4803 OpenJDK: inefficient use of hash tables and lists during XML parsing (JAXP, 8068842)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4803.json"},{"CVE":"CVE-2015-4893","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273638","bugzilla_description":"CVE-2015-4893 OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4893.json"},{"CVE":"CVE-2015-4872","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273734","bugzilla_description":"CVE-2015-4872 OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4872.json"},{"CVE":"CVE-2015-4810","severity":"important","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:2506"],"bugzilla":"1273858","bugzilla_description":"CVE-2015-4810 Oracle JDK: unspecified vulnerability fixed in 7u91 and 8u65 (Deployment)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4810.json"},{"CVE":"CVE-2015-4871","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:2509","RHSA-2015:1927","RHSA-2016:0053","RHSA-2015:2506"],"bugzilla":"1273859","bugzilla_description":"CVE-2015-4871 OpenJDK: protected methods can be used as interface methods via DirectMethodHandle (Libraries)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4871.json"},{"CVE":"CVE-2015-4902","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:2506"],"bugzilla":"1273860","bugzilla_description":"CVE-2015-4902 Oracle JDK: unspecified vulnerability fixed in 6u105, 7u91 and 8u65 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4902.json"},{"CVE":"CVE-2015-1931","severity":"low","public_date":"2015-07-20T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1485"],"bugzilla":"1244828","bugzilla_description":"CVE-2015-1931 IBM JDK: plain text data stored in memory dumps","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1931.json"},{"CVE":"CVE-2015-2601","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242019","bugzilla_description":"CVE-2015-2601 OpenJDK: non-constant time comparisons in crypto code (JCE, 8074865)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2601.json"},{"CVE":"CVE-2015-4731","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242234","bugzilla_description":"CVE-2015-4731 OpenJDK: improper permission checks in MBeanServerInvocationHandler (JMX, 8076397)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4731.json"},{"CVE":"CVE-2015-4732","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242240","bugzilla_description":"CVE-2015-4732 OpenJDK: insufficient context checks during object deserialization (Libraries, 8076405)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-567","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4732.json"},{"CVE":"CVE-2015-4733","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242275","bugzilla_description":"CVE-2015-4733 OpenJDK: RemoteObjectInvocationHandler allows calling finalize() (RMI, 8076409)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4733.json"},{"CVE":"CVE-2015-4748","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242281","bugzilla_description":"CVE-2015-4748 OpenJDK: incorrect OCSP nextUpdate checking (Libraries, 8075374)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-299","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4748.json"},{"CVE":"CVE-2015-2621","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242372","bugzilla_description":"CVE-2015-2621 OpenJDK: incorrect code permission checks in RMIConnectionImpl (JMX, 8075853)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2621.json"},{"CVE":"CVE-2015-4749","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242379","bugzilla_description":"CVE-2015-4749 OpenJDK: DnsClient fails to release request information after error (JNDI, 8075378)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4749.json"},{"CVE":"CVE-2015-2632","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242394","bugzilla_description":"CVE-2015-2632 ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190->CWE-125","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2632.json"},{"CVE":"CVE-2015-4760","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242447","bugzilla_description":"CVE-2015-4760 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8071715)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4760.json"},{"CVE":"CVE-2015-2613","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1242456","bugzilla_description":"CVE-2015-2613 NSS / JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2613.json"},{"CVE":"CVE-2015-2590","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1243139","bugzilla_description":"CVE-2015-2590 OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2590.json"},{"CVE":"CVE-2015-2638","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243283","bugzilla_description":"CVE-2015-2638 Oracle JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2638.json"},{"CVE":"CVE-2015-4736","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243284","bugzilla_description":"CVE-2015-4736 Oracle JDK: unspecified vulnerability fixed in 7u85 and 8u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4736.json"},{"CVE":"CVE-2015-2619","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243286","bugzilla_description":"CVE-2015-2619 Oracle JDK: unspecified vulnerability fixed in 7u85 and 8u51 (2D)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2619.json"},{"CVE":"CVE-2015-2637","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243287","bugzilla_description":"CVE-2015-2637 Oracle JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2637.json"},{"CVE":"CVE-2015-4729","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243290","bugzilla_description":"CVE-2015-4729 Oracle JDK: unspecified vulnerability fixed in 7u85 and 8u51 (Deployment)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4729.json"},{"CVE":"CVE-2015-2664","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243300","bugzilla_description":"CVE-2015-2664 Oracle JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (Deployment)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2664.json"},{"CVE":"CVE-2015-4000","severity":"moderate","public_date":"2015-05-20T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2016:2056","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2016:1624","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1197","RHSA-2015:1230","RHSA-2015:1185","RHSA-2015:1072"],"bugzilla":"1223211","bugzilla_description":"CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","nss-0:3.19.1-3.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","nss-0:3.19.1-3.ael7b_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","openssl-0:1.0.1e-30.el6_6.9","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","openssl-1:1.0.1e-42.ael7b_1.6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.8.0-openjdk-1:1.8.0.51-1.b16.ael7b_1","openssl-0:0.9.8e-36.el5_11","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-0192","severity":"critical","public_date":"2015-05-06T00:00:00Z","advisories":["RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1219212","bugzilla_description":"CVE-2015-0192 IBM JDK: unspecified Java sandbox restrictions bypass","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0192.json"},{"CVE":"CVE-2015-1914","severity":"moderate","public_date":"2015-05-06T00:00:00Z","advisories":["RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1219215","bugzilla_description":"CVE-2015-1914 IBM JDK: unspecified partial Java sandbox restrictions bypass","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1914.json"},{"CVE":"CVE-2015-1916","severity":"moderate","public_date":"2015-05-06T00:00:00Z","advisories":[],"bugzilla":"1219265","bugzilla_description":"CVE-2015-1916 IBM JDK: unspecified SSL/TLS server DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1916.json"},{"CVE":"CVE-2015-0478","severity":"low","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1210355","bugzilla_description":"CVE-2015-0478 OpenJDK: insufficient hardening of RSA-CRT implementation (JCE, 8071726)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0478.json"},{"CVE":"CVE-2015-0469","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1210829","bugzilla_description":"CVE-2015-0469 ICU: layout engine glyphStorage off-by-one (OpenJDK 2D, 8067699)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-122","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0469.json"},{"CVE":"CVE-2015-0477","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211299","bugzilla_description":"CVE-2015-0477 OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0477.json"},{"CVE":"CVE-2015-0488","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211543","bugzilla_description":"CVE-2015-0488 OpenJDK: certificate options parsing uncaught exception (JSSE, 8068720)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-248","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0488.json"},{"CVE":"CVE-2015-0459","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211768","bugzilla_description":"CVE-2015-0459 Oracle JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0459.json"},{"CVE":"CVE-2015-0491","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211769","bugzilla_description":"CVE-2015-0491 Oracle JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0491.json"},{"CVE":"CVE-2015-0458","severity":"important","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211771","bugzilla_description":"CVE-2015-0458 Oracle JDK: unspecified vulnerability fixed in 6u95, 7u79 and 8u45 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0458.json"},{"CVE":"CVE-2015-2808","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1207101","bugzilla_description":"CVE-2015-2808 SSL/TLS: \"Invariance Weakness\" vulnerability in RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2808.json"},{"CVE":"CVE-2015-0138","severity":"moderate","public_date":"2015-03-11T00:00:00Z","advisories":["RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1219223","bugzilla_description":"CVE-2015-0138 IBM JDK: ephemeral RSA keys accepted for non-export SSL/TLS cipher suites (FREAK)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0138.json"},{"CVE":"CVE-2014-8891","severity":"critical","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0135","RHSA-2015:0134","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263"],"bugzilla":"1189142","bugzilla_description":"CVE-2014-8891 IBM JDK: unspecified full Java sandbox bypass fixed in Feb 2015 update","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8891.json"},{"CVE":"CVE-2014-8892","severity":"moderate","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0135","RHSA-2015:0134","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263"],"bugzilla":"1189145","bugzilla_description":"CVE-2014-8892 IBM JDK: unspecified partial Java sandbox bypass fixed in Feb 2015 update","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8892.json"},{"CVE":"CVE-2015-0412","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183021","bugzilla_description":"CVE-2015-0412 OpenJDK: insufficient code privileges checks (JAX-WS, 8054367)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0412.json"},{"CVE":"CVE-2015-0408","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183023","bugzilla_description":"CVE-2015-0408 OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0408.json"},{"CVE":"CVE-2015-0395","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183031","bugzilla_description":"CVE-2015-0395 OpenJDK: phantom references handling issue in garbage collector (Hotspot, 8047125)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0395.json"},{"CVE":"CVE-2015-0407","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183043","bugzilla_description":"CVE-2015-0407 OpenJDK: directory information leak via file chooser (Swing, 8055304)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0407.json"},{"CVE":"CVE-2015-0410","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183044","bugzilla_description":"CVE-2015-0410 OpenJDK: DER decoder infinite loop  (Security, 8059485)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0410.json"},{"CVE":"CVE-2014-6593","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183049","bugzilla_description":"CVE-2014-6593 OpenJDK: incorrect tracking of ChangeCipherSpec during SSL/TLS handshake (JSSE, 8057555)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6593.json"},{"CVE":"CVE-2014-6585","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183645","bugzilla_description":"CVE-2014-6585 ICU: font parsing OOB read (OpenJDK 2D, 8055489)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6585.json"},{"CVE":"CVE-2014-6591","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183646","bugzilla_description":"CVE-2014-6591 ICU: font parsing OOB read (OpenJDK 2D, 8056276)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6591.json"},{"CVE":"CVE-2014-6549","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0134","RHSA-2015:0133"],"bugzilla":"1183660","bugzilla_description":"CVE-2014-6549 OpenJDK: incorrect class loader permission check in ClassLoader getParent() (Libraries, 8055314)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6549.json"},{"CVE":"CVE-2014-6587","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183715","bugzilla_description":"CVE-2014-6587 OpenJDK: MulticastSocket NULL pointer dereference (Libraries, 8056264)","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6587.json"},{"CVE":"CVE-2015-0403","severity":"important","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0134","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086"],"bugzilla":"1184275","bugzilla_description":"CVE-2015-0403 Oracle JDK: unspecified vulnerability fixed in 6u91, 7u75 and 8u31 (Deployment)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0403.json"},{"CVE":"CVE-2015-0406","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0134","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086"],"bugzilla":"1184277","bugzilla_description":"CVE-2015-0406 Oracle JDK: unspecified vulnerability fixed in 6u91, 7u75 and 8u31 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0406.json"},{"CVE":"CVE-2014-3068","severity":"low","public_date":"2014-11-14T00:00:00Z","advisories":["RHSA-2014:1036","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1164201","bugzilla_description":"CVE-2014-3068 IBM JDK: Java CMS keystore provider potentially allows brute-force private key recovery","cvss_score":2.4,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3068.json"},{"CVE":"CVE-2014-3065","severity":"moderate","public_date":"2014-11-10T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1162554","bugzilla_description":"CVE-2014-3065 IBM JDK: privilege escalation via shared class cache","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3065.json"},{"CVE":"CVE-2015-2625","severity":"low","public_date":"2014-11-02T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1241965","bugzilla_description":"CVE-2015-2625 OpenJDK: name for reverse DNS lookup used in certificate identity check (JSSE, 8067694)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2625.json"},{"CVE":"CVE-2014-6512","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1071210","bugzilla_description":"CVE-2014-6512 OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-345","affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6512.json"},{"CVE":"CVE-2014-6513","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1150118","bugzilla_description":"CVE-2014-6513 OpenJDK: splash image handling memory corruption (AWT, 8042609)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6513.json"},{"CVE":"CVE-2014-6506","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150155","bugzilla_description":"CVE-2014-6506 OpenJDK: insufficient permission checks when setting resource bundle on system logger (Libraries, 8041564)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6506.json"},{"CVE":"CVE-2014-6531","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150651","bugzilla_description":"CVE-2014-6531 OpenJDK: insufficient ResourceBundle name check (Libraries, 8044274)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6531.json"},{"CVE":"CVE-2014-6502","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150669","bugzilla_description":"CVE-2014-6502 OpenJDK: LogRecord use of incorrect CL when loading ResourceBundle (Libraries, 8042797)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6502.json"},{"CVE":"CVE-2014-6457","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151046","bugzilla_description":"CVE-2014-6457 OpenJDK: Triple Handshake attack against TLS/SSL connections (JSSE, 8037066)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6457.json"},{"CVE":"CVE-2014-6558","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151063","bugzilla_description":"CVE-2014-6558 OpenJDK: CipherInputStream incorrect exception handling (Security, 8037846)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6558.json"},{"CVE":"CVE-2014-6517","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1151364","bugzilla_description":"CVE-2014-6517 OpenJDK: StAX parser parameter entity XXE (JAXP, 8039533)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6517.json"},{"CVE":"CVE-2014-6511","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151517","bugzilla_description":"CVE-2014-6511 ICU: Layout Engine ContextualSubstitution missing boundary checks (JDK 2D, 8041540)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6511.json"},{"CVE":"CVE-2014-6532","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152756","bugzilla_description":"CVE-2014-6532 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6532.json"},{"CVE":"CVE-2014-6503","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152757","bugzilla_description":"CVE-2014-6503 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6503.json"},{"CVE":"CVE-2014-6456","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1657","RHSA-2014:1876","RHSA-2014:1880"],"bugzilla":"1152758","bugzilla_description":"CVE-2014-6456 Oracle JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6456.json"},{"CVE":"CVE-2014-6492","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152759","bugzilla_description":"CVE-2014-6492 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6492.json"},{"CVE":"CVE-2014-6493","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152760","bugzilla_description":"CVE-2014-6493 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6493.json"},{"CVE":"CVE-2014-4288","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152761","bugzilla_description":"CVE-2014-4288 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4288.json"},{"CVE":"CVE-2014-6466","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152762","bugzilla_description":"CVE-2014-6466 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6466.json"},{"CVE":"CVE-2014-6458","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152763","bugzilla_description":"CVE-2014-6458 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6458.json"},{"CVE":"CVE-2014-6476","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1657","RHSA-2014:1876","RHSA-2014:1880"],"bugzilla":"1152765","bugzilla_description":"CVE-2014-6476 Oracle JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6476.json"},{"CVE":"CVE-2014-6515","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152766","bugzilla_description":"CVE-2014-6515 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6515.json"},{"CVE":"CVE-2014-6527","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1657","RHSA-2014:1876","RHSA-2014:1880"],"bugzilla":"1152767","bugzilla_description":"CVE-2014-6527 Oracle JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6527.json"},{"CVE":"CVE-2014-3566","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2015:1546","RHSA-2015:1545","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2014:1881","RHSA-2014:1880","RHSA-2015:0080","RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2014:1920","RHSA-2015:0067","RHSA-2015:0012","RHSA-2015:0011","RHSA-2015:0264","RHSA-2015:0010","RHSA-2015:0086","RHSA-2015:0085","RHBA-2014:1857"],"bugzilla":"1152789","bugzilla_description":"CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-636|CWE-757)","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","openshift-origin-node-proxy-0:1.16.4.2-1.el6op","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","openshift-origin-node-proxy-0:1.22.3.4-1.el6op","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json"},{"CVE":"CVE-2014-3086","severity":"moderate","public_date":"2014-07-31T00:00:00Z","advisories":["RHSA-2014:1036","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1324547","bugzilla_description":"CVE-2014-3086 IBM JDK: Privilege escalation issue","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-266","affected_packages":["java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el5_10","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3086.json"},{"CVE":"CVE-2014-4262","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1075795","bugzilla_description":"CVE-2014-4262 OpenJDK: AtomicReferenceFieldUpdater missing primitive type check (Libraries, 8039520)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4262.json"},{"CVE":"CVE-2014-4244","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119475","bugzilla_description":"CVE-2014-4244 OpenJDK: RSA blinding issues (Security, 8031346)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4244.json"},{"CVE":"CVE-2014-4263","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119476","bugzilla_description":"CVE-2014-4263 OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4263.json"},{"CVE":"CVE-2014-4221","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:1042"],"bugzilla":"1119483","bugzilla_description":"CVE-2014-4221 OpenJDK: MethodHandles.Lookup insufficient modifiers checks (Libraries, 8035788)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4221.json"},{"CVE":"CVE-2014-4219","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119596","bugzilla_description":"CVE-2014-4219 OpenJDK: Bytecode verification does not prevent ctor calls to this() and super() (Hotspot, 8035119)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4219.json"},{"CVE":"CVE-2014-4209","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119608","bugzilla_description":"CVE-2014-4209 OpenJDK: SubjectDelegator protection insufficient (JMX, 8029755)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4209.json"},{"CVE":"CVE-2014-4218","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119611","bugzilla_description":"CVE-2014-4218 OpenJDK: Clone interfaces passed to proxy methods (Libraries, 8035009)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4218.json"},{"CVE":"CVE-2014-4252","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119613","bugzilla_description":"CVE-2014-4252 OpenJDK: Prevent instantiation of service with non-public constructor (Security, 8035004)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4252.json"},{"CVE":"CVE-2014-4266","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1042"],"bugzilla":"1119615","bugzilla_description":"CVE-2014-4266 OpenJDK: InfoBuilder incorrect return values (Serviceability, 8033301)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4266.json"},{"CVE":"CVE-2014-4268","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":[],"bugzilla":"1119616","bugzilla_description":"CVE-2014-4268 OpenJDK: Missing file choser access restrictions (Swing, 8035699)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4268.json"},{"CVE":"CVE-2014-4227","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119912","bugzilla_description":"CVE-2014-4227 Oracle JDK: unspecified vulnerability fixed in 6u81, 7u65 and 8u11 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4227.json"},{"CVE":"CVE-2014-4265","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119913","bugzilla_description":"CVE-2014-4265 Oracle JDK: unspecified vulnerability fixed in 6u81, 7u65 and 8u11 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4265.json"},{"CVE":"CVE-2014-4220","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:1042"],"bugzilla":"1119914","bugzilla_description":"CVE-2014-4220 Oracle JDK: unspecified vulnerability fixed in 7u65 and 8u11 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4220.json"},{"CVE":"CVE-2014-4208","severity":"low","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:1042"],"bugzilla":"1119915","bugzilla_description":"CVE-2014-4208 Oracle JDK: unspecified vulnerability fixed in 7u65 and 8u11 (Deployment)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4208.json"},{"CVE":"CVE-2014-0878","severity":"moderate","public_date":"2014-05-12T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0705","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1097345","bugzilla_description":"CVE-2014-0878 IBM JDK: Vulnerability in the IBMSecureRandom implementation of the IBMJCE and IBMSecureRandom cryptographic providers","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0878.json"},{"CVE":"CVE-2014-2398","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1086632","bugzilla_description":"CVE-2014-2398 OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2398.json"},{"CVE":"CVE-2014-0453","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1086645","bugzilla_description":"CVE-2014-0453 OpenJDK: RSA unpadding timing issues (Security, 8027766)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0453.json"},{"CVE":"CVE-2014-0429","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087409","bugzilla_description":"CVE-2014-0429 OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0429.json"},{"CVE":"CVE-2014-0457","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087411","bugzilla_description":"CVE-2014-0457 OpenJDK: ServiceLoader Exception handling security bypass (Libraries, 8031394)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0457.json"},{"CVE":"CVE-2014-2421","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087417","bugzilla_description":"CVE-2014-2421 OpenJDK: JPEG decoder input stream handling (2D, 8029854)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2421.json"},{"CVE":"CVE-2014-0455","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087424","bugzilla_description":"CVE-2014-0455 OpenJDK: MethodHandle variable argument lists handling (Libraries, 8029844)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0455.json"},{"CVE":"CVE-2014-0461","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087426","bugzilla_description":"CVE-2014-0461 OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0461.json"},{"CVE":"CVE-2014-2412","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087427","bugzilla_description":"CVE-2014-2412 OpenJDK: AWT thread context handling (AWT, 8025010)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2412.json"},{"CVE":"CVE-2014-0451","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087428","bugzilla_description":"CVE-2014-0451 OpenJDK: AWT incorrect FlavorMap seperation (AWT, 8026797)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0451.json"},{"CVE":"CVE-2014-0458","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087430","bugzilla_description":"CVE-2014-0458 OpenJDK: Activation framework default command map caching (JAX-WS, 8025152)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0458.json"},{"CVE":"CVE-2014-2414","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087431","bugzilla_description":"CVE-2014-2414 OpenJDK: incorrect caching of data initialized via TCCL (JAXB, 8025030)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2414.json"},{"CVE":"CVE-2014-2423","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087434","bugzilla_description":"CVE-2014-2423 OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026188)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2423.json"},{"CVE":"CVE-2014-0452","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087436","bugzilla_description":"CVE-2014-0452 OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026801)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0452.json"},{"CVE":"CVE-2014-2402","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087438","bugzilla_description":"CVE-2014-2402 OpenJDK: Incorrect NIO channel separation (Libraries, 8026716)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2402.json"},{"CVE":"CVE-2014-0446","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087439","bugzilla_description":"CVE-2014-0446 OpenJDK: Protect logger handlers (Libraries, 8029740)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0446.json"},{"CVE":"CVE-2014-0454","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087440","bugzilla_description":"CVE-2014-0454 OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0454.json"},{"CVE":"CVE-2014-2427","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087441","bugzilla_description":"CVE-2014-2427 OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2427.json"},{"CVE":"CVE-2014-0460","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087442","bugzilla_description":"CVE-2014-0460 OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0460.json"},{"CVE":"CVE-2014-0459","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087444","bugzilla_description":"CVE-2014-0459 lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0459.json"},{"CVE":"CVE-2014-0448","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705"],"bugzilla":"1088024","bugzilla_description":"CVE-2014-0448 Oracle JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0448.json"},{"CVE":"CVE-2014-2428","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1088025","bugzilla_description":"CVE-2014-2428 Oracle JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2428.json"},{"CVE":"CVE-2014-2409","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1088027","bugzilla_description":"CVE-2014-2409 Oracle JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2409.json"},{"CVE":"CVE-2014-0449","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1088028","bugzilla_description":"CVE-2014-0449 Oracle JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0449.json"},{"CVE":"CVE-2014-2401","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1088030","bugzilla_description":"CVE-2014-2401 Oracle JDK: unspecified vulnerability fixed in 5.0u75, 6u75, 7u55 and 8u5 (2D)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2401.json"},{"CVE":"CVE-2014-2420","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1088031","bugzilla_description":"CVE-2014-2420 Oracle JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2420.json"},{"CVE":"CVE-2014-1876","severity":"low","public_date":"2014-02-03T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1060907","bugzilla_description":"CVE-2014-1876 OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1876.json"},{"CVE":"CVE-2014-0428","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051519","bugzilla_description":"CVE-2014-0428 OpenJDK: insufficient security checks in IIOP streams (CORBA, 8025767)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0428.json"},{"CVE":"CVE-2014-0422","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051528","bugzilla_description":"CVE-2014-0422 OpenJDK: insufficient package access checks in the Naming component (JNDI, 8025758)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0422.json"},{"CVE":"CVE-2014-0373","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051699","bugzilla_description":"CVE-2014-0373 OpenJDK: SnmpStatusException handling issues (Serviceability, 7068126)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0373.json"},{"CVE":"CVE-2013-5878","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051823","bugzilla_description":"CVE-2013-5878 OpenJDK: null xmlns handling issue (Security, 8025026)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5878.json"},{"CVE":"CVE-2013-5884","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051911","bugzilla_description":"CVE-2013-5884 OpenJDK: insufficient security checks in CORBA stub factories (CORBA, 8026193)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5884.json"},{"CVE":"CVE-2014-0416","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051912","bugzilla_description":"CVE-2014-0416 OpenJDK: insecure subject principals set handling (JAAS, 8024306)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0416.json"},{"CVE":"CVE-2014-0376","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051923","bugzilla_description":"CVE-2014-0376 OpenJDK: document builder missing security checks (JAXP, 8027201, 8025018)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0376.json"},{"CVE":"CVE-2013-5907","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052915","bugzilla_description":"CVE-2013-5907 ICU: Layout Engine LookupProcessor insufficient input checks (JDK 2D, 8025034)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5907.json"},{"CVE":"CVE-2014-0368","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052919","bugzilla_description":"CVE-2014-0368 OpenJDK: insufficient Socket checkListen checks (Networking, 8011786)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0368.json"},{"CVE":"CVE-2013-5910","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052942","bugzilla_description":"CVE-2013-5910 OpenJDK: XML canonicalizer mutable strings passed to untrusted code (Security, 8026417)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5910.json"},{"CVE":"CVE-2014-0411","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1053010","bugzilla_description":"CVE-2014-0411 OpenJDK: TLS/SSL handshake timing issues (JSSE, 8023069)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0411.json"},{"CVE":"CVE-2014-0423","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1053066","bugzilla_description":"CVE-2014-0423 OpenJDK: XXE issue in decoder (Beans, 8023245)","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0423.json"},{"CVE":"CVE-2013-5896","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1053266","bugzilla_description":"CVE-2013-5896 OpenJDK: com.sun.corba.se. should be restricted package (CORBA, 8025022)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5896.json"},{"CVE":"CVE-2014-0410","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053495","bugzilla_description":"CVE-2014-0410 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0410.json"},{"CVE":"CVE-2014-0415","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053496","bugzilla_description":"CVE-2014-0415 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0415.json"},{"CVE":"CVE-2013-5889","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053499","bugzilla_description":"CVE-2013-5889 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5889.json"},{"CVE":"CVE-2014-0417","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053501","bugzilla_description":"CVE-2014-0417 Oracle JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0417.json"},{"CVE":"CVE-2014-0387","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053502","bugzilla_description":"CVE-2014-0387 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0387.json"},{"CVE":"CVE-2014-0424","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053504","bugzilla_description":"CVE-2014-0424 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0424.json"},{"CVE":"CVE-2014-0403","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053507","bugzilla_description":"CVE-2014-0403 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0403.json"},{"CVE":"CVE-2014-0375","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053508","bugzilla_description":"CVE-2014-0375 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0375.json"},{"CVE":"CVE-2013-5887","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053515","bugzilla_description":"CVE-2013-5887 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5887.json"},{"CVE":"CVE-2013-5899","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053516","bugzilla_description":"CVE-2013-5899 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5899.json"},{"CVE":"CVE-2013-5888","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053517","bugzilla_description":"CVE-2013-5888 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5888.json"},{"CVE":"CVE-2013-5898","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053518","bugzilla_description":"CVE-2013-5898 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5898.json"},{"CVE":"CVE-2013-6954","severity":"low","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1045561","bugzilla_description":"CVE-2013-6954 libpng: unhandled zero-length PLTE chunk or NULL palette","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6954.json"},{"CVE":"CVE-2013-6629","severity":"moderate","public_date":"2013-11-12T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2013:1803","RHSA-2013:1804","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1031734","bugzilla_description":"CVE-2013-6629 libjpeg: information leak (read of uninitialized memory)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","libjpeg-0:6b-38","libjpeg-turbo-0:1.2.1-3.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6629.json"},{"CVE":"CVE-2015-0480","severity":"low","public_date":"2005-01-04T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211504","bugzilla_description":"CVE-2015-0480 OpenJDK: jar directory traversal issues (Tools, 8064601)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0480.json"},{"CVE":"CVE-2005-1080","severity":"low","public_date":"2005-01-04T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"606442","bugzilla_description":"CVE-2005-1080 jar: directory traversal vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1080.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-demo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-demo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-demo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-jdbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-jdbc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-jdbc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-src_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-src_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm-src_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm_security_api_results.json
new file mode 100644
index 0000000..453ddff
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-ibm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17639","severity":"moderate","public_date":"2020-08-05T00:00:00Z","advisories":["RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3387"],"bugzilla":"1866497","bugzilla_description":"CVE-2019-17639 IBM JDK: Information disclosure via calls to System.arraycopy() with invalid length","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17639.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14583","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856448","bugzilla_description":"CVE-2020-14583 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2020-14593","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856784","bugzilla_description":"CVE-2020-14593 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14593.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-14621","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856885","bugzilla_description":"CVE-2020-14621 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14621.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14556","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856896","bugzilla_description":"CVE-2020-14556 OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14556.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-14577","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856988","bugzilla_description":"CVE-2020-14577 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14577.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14578","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856991","bugzilla_description":"CVE-2020-14578 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14578.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-14579","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856995","bugzilla_description":"CVE-2020-14579 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14579.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2754","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514"],"bugzilla":"1823199","bugzilla_description":"CVE-2020-2754 OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2754.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2755","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514"],"bugzilla":"1823200","bugzilla_description":"CVE-2020-2755 OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2755.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2756","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823215","bugzilla_description":"CVE-2020-2756 OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2756.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2757","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823216","bugzilla_description":"CVE-2020-2757 OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2757.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2773","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1508","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:1512","RHSA-2020:1514"],"bugzilla":"1823224","bugzilla_description":"CVE-2020-2773 OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2773.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2800","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823527","bugzilla_description":"CVE-2020-2800 OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2800.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2830","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823542","bugzilla_description":"CVE-2020-2830 OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185->CWE-400","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2830.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-2803","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823694","bugzilla_description":"CVE-2020-2803 OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2805","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823844","bugzilla_description":"CVE-2020-2805 OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2805.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2781","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823960","bugzilla_description":"CVE-2020-2781 OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2781.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-4732","severity":"important","public_date":"2020-01-31T00:00:00Z","advisories":[],"bugzilla":"1797101","bugzilla_description":"CVE-2019-4732 IBM JDK: untrusted DLL search path vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-4732.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-2583","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790444","bugzilla_description":"CVE-2020-2583 OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2590","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790556","bugzilla_description":"CVE-2020-2590 OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2590.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2601","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790570","bugzilla_description":"CVE-2020-2601 OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2020-2593","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790884","bugzilla_description":"CVE-2020-2593 OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2593.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2604","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790944","bugzilla_description":"CVE-2020-2604 OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2604.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-2654","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:2236","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0541","RHSA-2020:0196","RHSA-2020:2241","RHSA-2020:0632","RHSA-2020:2239","RHSA-2020:0202","RHSA-2020:2237","RHSA-2020:0128","RHSA-2020:2238"],"bugzilla":"1791217","bugzilla_description":"CVE-2020-2654 OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2654.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2659","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0468"],"bugzilla":"1791284","bugzilla_description":"CVE-2020-2659 OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2659.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2585","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1807936","bugzilla_description":"CVE-2020-2585 Oracle JDK: unspecified vulnerability fixed in 8u221 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2585.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-17631","severity":"moderate","public_date":"2019-12-04T00:00:00Z","advisories":["RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:4115","RHSA-2020:0006"],"bugzilla":"1779880","bugzilla_description":"CVE-2019-17631 IBM JDK: Unrestricted access to diagnostic operations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17631.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-2964","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760963","bugzilla_description":"CVE-2019-2964 OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2964.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2975","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:4115","RHSA-2020:0006"],"bugzilla":"1760969","bugzilla_description":"CVE-2019-2975 OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2019-2973","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760978","bugzilla_description":"CVE-2019-2973 OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2981","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760980","bugzilla_description":"CVE-2019-2981 OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2999","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760992","bugzilla_description":"CVE-2019-2999 OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-2988","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760999","bugzilla_description":"CVE-2019-2988 OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2988.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2978","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761006","bugzilla_description":"CVE-2019-2978 OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2992","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761146","bugzilla_description":"CVE-2019-2992 OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2983","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761262","bugzilla_description":"CVE-2019-2983 OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2983.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2962","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761266","bugzilla_description":"CVE-2019-2962 OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2962.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2949","severity":"important","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2019:3134","RHSA-2019:3135","RHSA-2019:3136","RHSA-2020:2241","RHSA-2020:2239","RHSA-2020:2237"],"bugzilla":"1761594","bugzilla_description":"CVE-2019-2949 OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2949.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-2945","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761596","bugzilla_description":"CVE-2019-2945 OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2945.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2019-2989","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761601","bugzilla_description":"CVE-2019-2989 OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2989.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-2958","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777929","bugzilla_description":"CVE-2019-2958 OpenJDK: Incorrect escaping of command line arguments in ProcessImpl on Windows (Libraries, 8221858)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2958.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2933","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777981","bugzilla_description":"CVE-2019-2933 OpenJDK: FilePermission checks not preformed correctly on Windows (Libraries, 8213429)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2996","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:4115","RHSA-2020:0006"],"bugzilla":"1778942","bugzilla_description":"CVE-2019-2996 Oracle JDK: unspecified vulnerability fixed in 8u221 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2996.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-11772","severity":"important","public_date":"2019-08-01T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2737","RHSA-2019:2592","RHSA-2019:2590"],"bugzilla":"1738547","bugzilla_description":"CVE-2019-11772 IBM JDK: Out-of-bounds access in the String.getBytes method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11775","severity":"important","public_date":"2019-08-01T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:2737","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590"],"bugzilla":"1738549","bugzilla_description":"CVE-2019-11775 IBM JDK: Failure to privatize a value pulled out of the loop by versioning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11775.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-4473","severity":"moderate","public_date":"2019-08-01T00:00:00Z","advisories":[],"bugzilla":"1738558","bugzilla_description":"CVE-2019-4473 IBM JDK: Insecure RPATH in multiple binaries on AIX","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-4473.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-11771","severity":"moderate","public_date":"2019-08-01T00:00:00Z","advisories":[],"bugzilla":"1738559","bugzilla_description":"CVE-2019-11771 IBM JDK: Insecure RPATH in OpenJ9 on AIX","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11771.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-2769","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730056","bugzilla_description":"CVE-2019-2769 OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2769.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2816","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730099","bugzilla_description":"CVE-2019-2816 OpenJDK: Missing URL format validation (Networking, 8221518)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-2786","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:1840","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:2592","RHSA-2019:1816","RHSA-2019:1815","RHSA-2019:2590"],"bugzilla":"1730255","bugzilla_description":"CVE-2019-2786 OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2762","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730415","bugzilla_description":"CVE-2019-2762 OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2766","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730459","bugzilla_description":"CVE-2019-2766 OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-10245","severity":"moderate","public_date":"2019-04-30T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:1165","RHSA-2019:1164","RHSA-2019:1325","RHSA-2019:1238","RHSA-2019:1163"],"bugzilla":"1704799","bugzilla_description":"CVE-2019-10245 IBM JDK: Read beyond the end of bytecode array causing JVM crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2602","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700440","bugzilla_description":"CVE-2019-2602 OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2698","severity":"important","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1238","RHSA-2019:1163"],"bugzilla":"1700447","bugzilla_description":"CVE-2019-2698 OpenJDK: Font layout engine out of bounds access setCurrGlyphID() (2D, 8219022)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2684","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700564","bugzilla_description":"CVE-2019-2684 OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2684.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2697","severity":"important","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:1165","RHSA-2019:1164","RHSA-2019:1325","RHSA-2019:1238","RHSA-2019:1163"],"bugzilla":"1704480","bugzilla_description":"CVE-2019-2697 Oracle JDK: Unspecified vulnerability fixed in 7u221 and 8u211 (2D)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2697.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12547","severity":"critical","public_date":"2019-03-01T00:00:00Z","advisories":["RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0640","RHSA-2019:0469","RHSA-2019:1238"],"bugzilla":"1685611","bugzilla_description":"CVE-2018-12547 IBM JDK: buffer overflow in jio_snprintf() and jio_vsnprintf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12547.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12549","severity":"critical","public_date":"2019-03-01T00:00:00Z","advisories":["RHSA-2019:0472","RHSA-2019:0640","RHSA-2019:0469","RHSA-2019:1238"],"bugzilla":"1685717","bugzilla_description":"CVE-2018-12549 IBM JDK: missing null check when accelerating Unsafe calls","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-1890","severity":"moderate","public_date":"2019-03-01T00:00:00Z","advisories":[],"bugzilla":"1685725","bugzilla_description":"CVE-2018-1890 IBM JDK: local privilege escalation via insecure RPATHs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1890.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-7317","severity":"low","public_date":"2019-01-25T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:2737","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:1309","RHSA-2019:1308","RHSA-2019:2590"],"bugzilla":"1672409","bugzilla_description":"CVE-2019-7317 libpng: use-after-free in png_image_free in png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","thunderbird-0:60.7.0-1.el6_10","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","firefox-0:60.7.0-1.el7_6","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-2422","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:0462","RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0464","RHSA-2019:0640","RHSA-2019:0416","RHSA-2019:0435","RHSA-2019:0469","RHSA-2019:0436","RHSA-2019:1238"],"bugzilla":"1665945","bugzilla_description":"CVE-2019-2422 OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["java-11-openjdk-1:11.0.2.7-0.el7_6","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el6_10","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el7_6","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.201.b09-1.el6_10","java-1.8.0-openjdk-1:1.8.0.201.b09-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2426","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":[],"bugzilla":"1665953","bugzilla_description":"CVE-2019-2426 OpenJDK: transparent NTLM authentication enabled by default (Networking, 8209094)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2426.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-2449","severity":"low","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:0472","RHSA-2019:0640","RHSA-2019:0469","RHSA-2019:1238"],"bugzilla":"1685601","bugzilla_description":"CVE-2019-2449 Oracle JDK: unspecified vulnerability fixed in 8u201 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2449.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2018-3183","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:2943","RHSA-2018:2942","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002"],"bugzilla":"1639268","bugzilla_description":"CVE-2018-3183 OpenJDK: Unrestricted access to scripting engine (Scripting, 8202936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-11-openjdk-1:11.0.1.13-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-3169","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639293","bugzilla_description":"CVE-2018-3169 OpenJDK: Improper field access checks (Hotspot, 8199226)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3214","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639301","bugzilla_description":"CVE-2018-3214 OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3139","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639442","bugzilla_description":"CVE-2018-3139 OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3139.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3180","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639484","bugzilla_description":"CVE-2018-3180 OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-3136","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639755","bugzilla_description":"CVE-2018-3136 OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3149","severity":"important","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639834","bugzilla_description":"CVE-2018-3149 OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3149.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1656","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:2569","RHSA-2018:2575","RHSA-2018:2576"],"bugzilla":"1618869","bugzilla_description":"CVE-2018-1656 IBM JDK: path traversal flaw in the Diagnostic Tooling Framework","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1656.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1517","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:2569","RHSA-2018:2575","RHSA-2018:2576"],"bugzilla":"1618871","bugzilla_description":"CVE-2018-1517 IBM JDK: DoS in the java.math component","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1517.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-2952","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:2283","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2241","RHSA-2018:2253","RHSA-2018:2242","RHSA-2018:2286"],"bugzilla":"1600925","bugzilla_description":"CVE-2018-2952 OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2952.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2964","severity":"critical","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2256","RHSA-2018:2253"],"bugzilla":"1602142","bugzilla_description":"CVE-2018-2964 Oracle JDK: unspecified vulnerability fixed in 8u181 and 10.0.2 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2964.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2973","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2253"],"bugzilla":"1602145","bugzilla_description":"CVE-2018-2973 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-2940","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2253"],"bugzilla":"1602146","bugzilla_description":"CVE-2018-2940 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2940.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-11212","severity":"low","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0640","RHSA-2019:0469","RHSA-2019:1238","RHSA-2019:2052"],"bugzilla":"1579973","bugzilla_description":"CVE-2018-11212 libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11212.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-12539","severity":"important","public_date":"2018-05-11T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:2569","RHSA-2018:2575","RHSA-2018:2576"],"bugzilla":"1618767","bugzilla_description":"CVE-2018-12539 IBM JDK: privilege escalation via insufficiently restricted access to Attach API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12539.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2018-2794","severity":"important","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567126","bugzilla_description":"CVE-2018-2794 OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2794.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-2795","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567351","bugzilla_description":"CVE-2018-2795 OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2799","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567542","bugzilla_description":"CVE-2018-2799 OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2799.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2798","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567543","bugzilla_description":"CVE-2018-2798 OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2797","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567545","bugzilla_description":"CVE-2018-2797 OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2796","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567546","bugzilla_description":"CVE-2018-2796 OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2800","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568163","bugzilla_description":"CVE-2018-2800 OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-2790","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568515","bugzilla_description":"CVE-2018-2790 OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-2783","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1203","RHSA-2018:0100","RHSA-2018:0099"],"bugzilla":"1569204","bugzilla_description":"CVE-2018-2783 Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-13785","severity":"low","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1599943","bugzilla_description":"CVE-2018-13785 libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-369","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1417","severity":"critical","public_date":"2018-02-20T00:00:00Z","advisories":["RHSA-2018:0458","RHSA-2018:0521","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463"],"bugzilla":"1568966","bugzilla_description":"CVE-2018-1417 IBM JDK: J9 JVM allows untrusted code running under a security manager to elevate its privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1417.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2678","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534263","bugzilla_description":"CVE-2018-2678 OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2678.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2677","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534288","bugzilla_description":"CVE-2018-2677 OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2663","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534296","bugzilla_description":"CVE-2018-2663 OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2663.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2579","severity":"low","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534298","bugzilla_description":"CVE-2018-2579 OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-567","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2579.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2588","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534299","bugzilla_description":"CVE-2018-2588 OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-90","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-2602","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534525","bugzilla_description":"CVE-2018-2602 OpenJDK: loading of classes from untrusted locations (I18n, 8182601)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2018-2599","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534543","bugzilla_description":"CVE-2018-2599 OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2599.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2603","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534553","bugzilla_description":"CVE-2018-2603 OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2603.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2629","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0100","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534625","bugzilla_description":"CVE-2018-2629 OpenJDK: GSS context use-after-free (JGSS, 8186212)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2618","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534762","bugzilla_description":"CVE-2018-2618 OpenJDK: insufficient strength of key agreement (JCE, 8185292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-2641","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534766","bugzilla_description":"CVE-2018-2641 OpenJDK: GTK library loading use-after-free (AWT, 8185325)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-2582","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0521","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534768","bugzilla_description":"CVE-2018-2582 OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-2634","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534943","bugzilla_description":"CVE-2018-2634 OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-2637","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534970","bugzilla_description":"CVE-2018-2637 OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-2633","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535036","bugzilla_description":"CVE-2018-2633 OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2018-2638","severity":"critical","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535350","bugzilla_description":"CVE-2018-2638 Oracle JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2639","severity":"critical","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535351","bugzilla_description":"CVE-2018-2639 Oracle JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2627","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535352","bugzilla_description":"CVE-2018-2627 Oracle JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Installer)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2657","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0458","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:1463"],"bugzilla":"1535353","bugzilla_description":"CVE-2018-2657 Oracle JDK: unspecified vulnerability fixed in 6u181 and 7u171 (Serialization)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2657.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2581","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:1812","RHSA-2018:0100","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535354","bugzilla_description":"CVE-2018-2581 Oracle JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2581.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3736","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1509169","bugzilla_description":"CVE-2017-3736 openssl: bn_sqrx8x_internal carry bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":["openssl-1:1.0.2k-12.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-10285","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501868","bugzilla_description":"CVE-2017-10285 OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10346","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501873","bugzilla_description":"CVE-2017-10346 OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10388","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502038","bugzilla_description":"CVE-2017-10388 OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10349","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502611","bugzilla_description":"CVE-2017-10349 OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10349.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10357","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502614","bugzilla_description":"CVE-2017-10357 OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10357.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10348","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502629","bugzilla_description":"CVE-2017-10348 OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10347","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502632","bugzilla_description":"CVE-2017-10347 OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10350","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502640","bugzilla_description":"CVE-2017-10350 OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10350.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10281","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502649","bugzilla_description":"CVE-2017-10281 OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10281.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10295","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502687","bugzilla_description":"CVE-2017-10295 OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10295.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-10345","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502858","bugzilla_description":"CVE-2017-10345 OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-10355","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502869","bugzilla_description":"CVE-2017-10355 OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10355.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10356","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1503169","bugzilla_description":"CVE-2017-10356 OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10356.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2017-10309","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267"],"bugzilla":"1503319","bugzilla_description":"CVE-2017-10309 Oracle JDK: unspecified vulnerability fixed in 8u151 and 9.0.1 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10309.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2017-1376","severity":"critical","public_date":"2017-08-18T00:00:00Z","advisories":["RHSA-2017:2469","RHSA-2017:2481"],"bugzilla":"1483736","bugzilla_description":"CVE-2017-1376 IBM JDK: class verifier allowing Security Manager bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10107","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471266","bugzilla_description":"CVE-2017-10107 OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10107.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10089","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471270","bugzilla_description":"CVE-2017-10089 OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10090","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1791"],"bugzilla":"1471517","bugzilla_description":"CVE-2017-10090 OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10090.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10087","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471521","bugzilla_description":"CVE-2017-10087 OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10110","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471523","bugzilla_description":"CVE-2017-10110 OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10101","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471527","bugzilla_description":"CVE-2017-10101 OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10096","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471528","bugzilla_description":"CVE-2017-10096 OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10067","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471535","bugzilla_description":"CVE-2017-10067 OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10109","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471670","bugzilla_description":"CVE-2017-10109 OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10116","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471738","bugzilla_description":"CVE-2017-10116 OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2017-10115","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471851","bugzilla_description":"CVE-2017-10115 OpenJDK: DSA implementation timing attack (JCE, 8175106)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10108","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471888","bugzilla_description":"CVE-2017-10108 OpenJDK: unbounded memory allocation in BasicAttribute deserialization (Serialization, 8174105)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10108.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10053","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471889","bugzilla_description":"CVE-2017-10053 OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10078","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2469","RHSA-2017:1790","RHSA-2017:3453"],"bugzilla":"1471898","bugzilla_description":"CVE-2017-10078 OpenJDK: Nashorn incompletely blocking access to Java APIs (Scripting, 8171539)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-10102","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472345","bugzilla_description":"CVE-2017-10102 OpenJDK: incorrect handling of references in DGC (RMI, 8163958)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-10243","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472666","bugzilla_description":"CVE-2017-10243 OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10243.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-10105","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472667","bugzilla_description":"CVE-2017-10105 Oracle JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-1289","severity":"moderate","public_date":"2017-05-09T00:00:00Z","advisories":["RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1449603","bugzilla_description":"CVE-2017-1289 IBM JDK: XML External Entity Injection (XXE) error when processing XML data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"8.2"},{"CVE":"CVE-2017-3511","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1221"],"bugzilla":"1443007","bugzilla_description":"CVE-2017-3511 OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-3509","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443052","bugzilla_description":"CVE-2017-3509 OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2017-3544","severity":"low","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443068","bugzilla_description":"CVE-2017-3544 OpenJDK: newline injection in the SMTP client (Networking, 8171533)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3539","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443097","bugzilla_description":"CVE-2017-3539 OpenJDK: MD5 allowed for jar verification (Security, 8171121)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3514","severity":"critical","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443469","bugzilla_description":"CVE-2017-3514 OpenJDK: peering issues on Windows (AWT, 8167110)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3533","severity":"low","public_date":"2017-02-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443083","bugzilla_description":"CVE-2017-3533 OpenJDK: newline injection in the FTP client (Networking, 8170222)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3732","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416856","bugzilla_description":"CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3272","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413554","bugzilla_description":"CVE-2017-3272 OpenJDK: insufficient protected field access checks in atomic field updaters (Libraries, 8165344)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3289","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413562","bugzilla_description":"CVE-2017-3289 OpenJDK: insecure class construction (Hotspot, 8167104)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3253","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413583","bugzilla_description":"CVE-2017-3253 OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-3261","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413653","bugzilla_description":"CVE-2017-3261 OpenJDK: integer overflow in SocketOutputStream boundary check (Networking, 8164147)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3231","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413717","bugzilla_description":"CVE-2017-3231 OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3231.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5547","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413764","bugzilla_description":"CVE-2016-5547 OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5547.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5552","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413882","bugzilla_description":"CVE-2016-5552 OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5552.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3252","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413906","bugzilla_description":"CVE-2017-3252 OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3252.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5546","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413911","bugzilla_description":"CVE-2016-5546 OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5546.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-5548","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413920","bugzilla_description":"CVE-2016-5548 OpenJDK: DSA implementation timing attack (Libraries, 8168728)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-5549","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413923","bugzilla_description":"CVE-2016-5549 OpenJDK: ECDSA implementation timing attack (Libraries, 8168724)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-3241","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413955","bugzilla_description":"CVE-2017-3241 OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3241.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3259","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1414163","bugzilla_description":"CVE-2017-3259 Oracle JDK: unspecified vulnerability fixed in 6u141, 7u131, and 8u121 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3259.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3260","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":[],"bugzilla":"1414562","bugzilla_description":"CVE-2017-3260 OpenJDK: menu handling memory corruption (AWT, 8164143)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3260.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5573","severity":"important","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385544","bugzilla_description":"CVE-2016-5573 OpenJDK: insufficient checks of JDWP packets (Hotspot, 8159519)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5573.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5554","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385714","bugzilla_description":"CVE-2016-5554 OpenJDK: insufficient classloader consistency checks in ClassLoaderWithRepository (JMX, 8157739)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5554.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5542","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385723","bugzilla_description":"CVE-2016-5542 OpenJDK: missing algorithm restrictions for jar verification (Libraries, 8155973)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5597","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1386103","bugzilla_description":"CVE-2016-5597 OpenJDK: exposure of server authentication credentials to proxy (Networking, 8160838)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-319","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5597.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5556","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2016:2659","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1386408","bugzilla_description":"CVE-2016-5556 Oracle JDK: unspecified vulnerability fixed in 6u131, 7u121, and 8u111 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5556.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-9843","severity":"low","public_date":"2016-09-29T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402351","bugzilla_description":"CVE-2016-9843 zlib: Big-endian out-of-bounds pointer","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9840","severity":"low","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402345","bugzilla_description":"CVE-2016-9840 zlib: Out-of-bounds pointer arithmetic in inftrees.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9841","severity":"low","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402346","bugzilla_description":"CVE-2016-9841 zlib: Out-of-bounds pointer arithmetic in inffast.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9842","severity":"low","public_date":"2016-09-06T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402348","bugzilla_description":"CVE-2016-9842 zlib: Undefined left shift of negative number","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-2183","severity":"moderate","public_date":"2016-08-24T00:00:00Z","advisories":["RHSA-2020:0451","RHSA-2020:3842","RHSA-2017:3240","RHSA-2019:1245","RHBA-2019:2581","RHSA-2017:0462","RHSA-2017:3113","RHSA-2017:3114","RHSA-2017:2710","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:3239","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:2709","RHSA-2017:2708","RHSA-2018:2123","RHSA-2019:2859"],"bugzilla":"1369383","bugzilla_description":"CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","openshift3/metrics-heapster:v3.11.141-2","python-0:2.7.5-69.el7_5","openshift3/ose-console:v3.11.141-2","openshift3/oauth-proxy:v3.11.170-5","openshift4/ose-console:v4.5.0-202009201759.p0","openshift3/ose-kube-rbac-proxy:v3.11.141-2","openshift3/ose-metrics-server:v3.11.141-2","java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8","openshift4/ose-oauth-proxy:v4.1.18-201909201915"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10165","severity":"moderate","public_date":"2016-08-15T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2017:2999","RHSA-2017:3046","RHSA-2016:2658","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1367357","bugzilla_description":"CVE-2016-10165 lcms2: Out-of-bounds read in Type_MLU_Read()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2016-3598","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2017:1216","RHSA-2016:1504","RHSA-2016:1587","RHSA-2016:1588","RHSA-2016:1589","RHSA-2016:1458"],"bugzilla":"1356971","bugzilla_description":"CVE-2016-3598 OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3598.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3511","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2017:1216","RHSA-2016:1587","RHSA-2016:1588","RHSA-2016:1589"],"bugzilla":"1358168","bugzilla_description":"CVE-2016-3511 Oracle JDK: unspecified vulnerability fixed in 7u111 and 8u101 (Deployment)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-0264","severity":"important","public_date":"2016-04-27T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039"],"bugzilla":"1331359","bugzilla_description":"CVE-2016-0264 IBM JDK: buffer overflow vulnerability in the IBM JVM","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0264.json"},{"CVE":"CVE-2016-0686","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327743","bugzilla_description":"CVE-2016-0686 OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0686.json"},{"CVE":"CVE-2016-0687","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327749","bugzilla_description":"CVE-2016-0687 OpenJDK: insufficient byte type checks (Hotspot, 8132051)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0687.json"},{"CVE":"CVE-2016-3426","severity":"low","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328059","bugzilla_description":"CVE-2016-3426 OpenJDK: non-constant time GCM authentication tag comparison (JCE, 8143945)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3426.json"},{"CVE":"CVE-2016-3427","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328210","bugzilla_description":"CVE-2016-3427 OpenJDK: unrestricted deserialization of authentication credentials (JMX, 8144430)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3427.json"},{"CVE":"CVE-2016-3443","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328618","bugzilla_description":"CVE-2016-3443 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3443.json"},{"CVE":"CVE-2016-3449","severity":"important","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328619","bugzilla_description":"CVE-2016-3449 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3449.json"},{"CVE":"CVE-2016-3422","severity":"moderate","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328620","bugzilla_description":"CVE-2016-3422 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3422.json"},{"CVE":"CVE-2016-0376","severity":"critical","public_date":"2016-04-14T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039"],"bugzilla":"1330986","bugzilla_description":"CVE-2016-0376 IBM JDK: insecure deserialization in CORBA, incorrect CVE-2013-5456 fix","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0376.json"},{"CVE":"CVE-2016-0363","severity":"critical","public_date":"2016-04-04T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039"],"bugzilla":"1324044","bugzilla_description":"CVE-2016-0363 IBM JDK: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0363.json"},{"CVE":"CVE-2016-0705","severity":"low","public_date":"2016-02-18T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2016:2957","RHSA-2016:0301","RHSA-2016:0379"],"bugzilla":"1310596","bugzilla_description":"CVE-2016-0705 OpenSSL: Double-free in DSA code","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-42.el6_7.4","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","rhev-hypervisor7-0:7.2-20160302.1.el7ev","rhev-hypervisor7-0:7.2-20160302.1.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0705.json"},{"CVE":"CVE-2015-5041","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0100","RHSA-2016:0101"],"bugzilla":"1302689","bugzilla_description":"CVE-2015-5041 IBM JDK: J9 JVM allows code to invoke non-public interface methods","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5041.json"},{"CVE":"CVE-2016-0494","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298906","bugzilla_description":"CVE-2016-0494 ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0494.json"},{"CVE":"CVE-2016-0475","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0050","RHSA-2016:0049"],"bugzilla":"1298949","bugzilla_description":"CVE-2016-0475 OpenJDK: PBE incorrect key lengths (Libraries, 8138589)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0475.json"},{"CVE":"CVE-2016-0402","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298957","bugzilla_description":"CVE-2016-0402 OpenJDK: URL deserialization inconsistencies (Networking, 8059054)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0402.json"},{"CVE":"CVE-2016-0448","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299073","bugzilla_description":"CVE-2016-0448 OpenJDK: logging of RMI connection secrets (JMX, 8130710)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0448.json"},{"CVE":"CVE-2016-0466","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299385","bugzilla_description":"CVE-2016-0466 OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0466.json"},{"CVE":"CVE-2016-0483","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299441","bugzilla_description":"CVE-2016-0483 OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0483.json"},{"CVE":"CVE-2015-7575","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0012","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0007","RHSA-2016:0008","RHSA-2016:0049"],"bugzilla":"1289841","bugzilla_description":"CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.2","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","nss-0:3.19.1-19.el7_2","gnutls-0:3.3.8-14.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","gnutls-0:2.8.5-19.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","nss-0:3.19.1-8.el6_7","openssl-1:1.0.1e-51.el7_2.2","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json"},{"CVE":"CVE-2015-5006","severity":"moderate","public_date":"2015-11-13T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:2509","RHSA-2015:2506"],"bugzilla":"1282379","bugzilla_description":"CVE-2015-5006 IBM JDK: local disclosure of kerberos credentials cache","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5006.json"},{"CVE":"CVE-2015-8126","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8126.json"},{"CVE":"CVE-2015-8472","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8472.json"},{"CVE":"CVE-2015-4806","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1233687","bugzilla_description":"CVE-2015-4806 OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4806.json"},{"CVE":"CVE-2015-4835","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273022","bugzilla_description":"CVE-2015-4835 OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4835.json"},{"CVE":"CVE-2015-4843","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273053","bugzilla_description":"CVE-2015-4843 OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4843.json"},{"CVE":"CVE-2015-4883","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273304","bugzilla_description":"CVE-2015-4883 OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4883.json"},{"CVE":"CVE-2015-4860","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273308","bugzilla_description":"CVE-2015-4860 OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4860.json"},{"CVE":"CVE-2015-4805","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273311","bugzilla_description":"CVE-2015-4805 OpenJDK: missing checks for proper initialization in ObjectStreamClass (Serialization, 8103671)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-665","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4805.json"},{"CVE":"CVE-2015-4844","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273318","bugzilla_description":"CVE-2015-4844 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4844.json"},{"CVE":"CVE-2015-4840","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273338","bugzilla_description":"CVE-2015-4840 OpenJDK: OOB access in CMS code (2D, 8086092)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4840.json"},{"CVE":"CVE-2015-4882","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273414","bugzilla_description":"CVE-2015-4882 OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4882.json"},{"CVE":"CVE-2015-4842","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273425","bugzilla_description":"CVE-2015-4842 OpenJDK: leak of user.dir location (JAXP, 8078427)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4842.json"},{"CVE":"CVE-2015-4734","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273430","bugzilla_description":"CVE-2015-4734 OpenJDK: kerberos realm name leak (JGSS, 8048030)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4734.json"},{"CVE":"CVE-2015-4903","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273496","bugzilla_description":"CVE-2015-4903 OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4903.json"},{"CVE":"CVE-2015-4803","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273637","bugzilla_description":"CVE-2015-4803 OpenJDK: inefficient use of hash tables and lists during XML parsing (JAXP, 8068842)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4803.json"},{"CVE":"CVE-2015-4893","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273638","bugzilla_description":"CVE-2015-4893 OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4893.json"},{"CVE":"CVE-2015-4872","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273734","bugzilla_description":"CVE-2015-4872 OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4872.json"},{"CVE":"CVE-2015-4810","severity":"important","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:2506"],"bugzilla":"1273858","bugzilla_description":"CVE-2015-4810 Oracle JDK: unspecified vulnerability fixed in 7u91 and 8u65 (Deployment)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4810.json"},{"CVE":"CVE-2015-4871","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:2509","RHSA-2015:1927","RHSA-2016:0053","RHSA-2015:2506"],"bugzilla":"1273859","bugzilla_description":"CVE-2015-4871 OpenJDK: protected methods can be used as interface methods via DirectMethodHandle (Libraries)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4871.json"},{"CVE":"CVE-2015-4902","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:2506"],"bugzilla":"1273860","bugzilla_description":"CVE-2015-4902 Oracle JDK: unspecified vulnerability fixed in 6u105, 7u91 and 8u65 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4902.json"},{"CVE":"CVE-2014-3086","severity":"moderate","public_date":"2014-07-31T00:00:00Z","advisories":["RHSA-2014:1036","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1324547","bugzilla_description":"CVE-2014-3086 IBM JDK: Privilege escalation issue","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-266","affected_packages":["java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el5_10","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3086.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-openjdk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-openjdk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-openjdk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-openjdk-headless_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-openjdk-headless_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-openjdk-headless_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-openjdk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-openjdk_security_api_results.json
new file mode 100644
index 0000000..6647add
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-1.8.0-openjdk_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14779","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889271","bugzilla_description":"CVE-2020-14779 OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14779.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-14781","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889274","bugzilla_description":"CVE-2020-14781 OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14781.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14792","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889280","bugzilla_description":"CVE-2020-14792 OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14792.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2020-14782","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889290","bugzilla_description":"CVE-2020-14782 OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14796","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889697","bugzilla_description":"CVE-2020-14796 OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14796.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-14797","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889717","bugzilla_description":"CVE-2020-14797 OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14797.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14803","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889895","bugzilla_description":"CVE-2020-14803 OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14583","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856448","bugzilla_description":"CVE-2020-14583 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2020-14593","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856784","bugzilla_description":"CVE-2020-14593 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14593.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-14562","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2970","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969"],"bugzilla":"1856810","bugzilla_description":"CVE-2020-14562 OpenJDK: Excessive memory usage in ImageIO TIFF plugin (ImageIO, 8233239)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-11-openjdk-1:11.0.8.10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_1","java-11-openjdk-1:11.0.8.10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14562.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-14621","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856885","bugzilla_description":"CVE-2020-14621 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14621.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14556","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856896","bugzilla_description":"CVE-2020-14556 OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14556.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-14573","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2970","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969"],"bugzilla":"1856951","bugzilla_description":"CVE-2020-14573 OpenJDK: Incomplete interface type checks in Graal compiler (Hotspot, 8236867)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-11-openjdk-1:11.0.8.10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_1","java-11-openjdk-1:11.0.8.10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14573.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14577","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856988","bugzilla_description":"CVE-2020-14577 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14577.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14578","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856991","bugzilla_description":"CVE-2020-14578 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14578.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-14579","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856995","bugzilla_description":"CVE-2020-14579 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14579.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-14581","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":[],"bugzilla":"1857172","bugzilla_description":"CVE-2020-14581 OpenJDK: Information disclosure in color management (2D, 8238002)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14581.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14664","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":[],"bugzilla":"1866027","bugzilla_description":"CVE-2020-14664 JavaFX: Out-of-bounds write in HTML Rendering","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14664.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2020-2754","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514"],"bugzilla":"1823199","bugzilla_description":"CVE-2020-2754 OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2754.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2755","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514"],"bugzilla":"1823200","bugzilla_description":"CVE-2020-2755 OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2755.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2756","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823215","bugzilla_description":"CVE-2020-2756 OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2756.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2757","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823216","bugzilla_description":"CVE-2020-2757 OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2757.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2773","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1508","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:1512","RHSA-2020:1514"],"bugzilla":"1823224","bugzilla_description":"CVE-2020-2773 OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2773.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2800","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823527","bugzilla_description":"CVE-2020-2800 OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2800.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2830","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823542","bugzilla_description":"CVE-2020-2830 OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185->CWE-400","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2830.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-2803","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823694","bugzilla_description":"CVE-2020-2803 OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2805","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823844","bugzilla_description":"CVE-2020-2805 OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2805.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2816","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1517","RHSA-2020:1514"],"bugzilla":"1823853","bugzilla_description":"CVE-2020-2816 OpenJDK: Application data accepted before TLS handshake completion (JSSE, 8235691)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["java-11-openjdk-1:11.0.7.10-4.el7_8","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2816.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-2778","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1517","RHSA-2020:1514"],"bugzilla":"1823879","bugzilla_description":"CVE-2020-2778 OpenJDK: Incomplete enforcement of algorithm restrictions for TLS (JSSE, 8232424)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-11-openjdk-1:11.0.7.10-4.el7_8","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2778.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2767","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1517","RHSA-2020:1514"],"bugzilla":"1823947","bugzilla_description":"CVE-2020-2767 OpenJDK: Incorrect handling of Certificate messages during TLS handshake (JSSE, 8232581)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["java-11-openjdk-1:11.0.7.10-4.el7_8","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2767.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2781","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823960","bugzilla_description":"CVE-2020-2781 OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2781.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-10531","severity":"important","public_date":"2020-02-25T00:00:00Z","advisories":["RHSA-2020:1343","RHSA-2020:2895","RHSA-2020:0738","RHSA-2020:1317","RHSA-2020:1293","RHSA-2020:0902","RHSA-2020:0901","RHSA-2020:3084","RHSA-2020:0896","RHSA-2020:0897"],"bugzilla":"1807349","bugzilla_description":"CVE-2020-10531 ICU: Integer overflow in UnicodeString::doAppend()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["icu-0:60.3-2.el8_0","icu-0:50.2-4.el7_7","rh-nodejs12-nodejs-0:12.18.2-1.el7","nodejs:12-8010020200326104226.c27ad7f8","icu-0:60.3-2.el8_1","chromium-browser-0:80.0.3987.122-1.el6_10","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:10-8000020200318152927.f8e95b4e","nodejs:10-8010020200318152252.c27ad7f8","icu-0:4.2.1-15.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10531.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-2583","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790444","bugzilla_description":"CVE-2020-2583 OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2590","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790556","bugzilla_description":"CVE-2020-2590 OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2590.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2601","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790570","bugzilla_description":"CVE-2020-2601 OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2020-2593","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790884","bugzilla_description":"CVE-2020-2593 OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2593.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2604","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790944","bugzilla_description":"CVE-2020-2604 OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2604.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-2655","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0128"],"bugzilla":"1790951","bugzilla_description":"CVE-2020-2655 OpenJDK: Incorrect handling of unexpected CertificateVerify TLS handshake messages (JSSE, 8231780)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":["java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2655.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2654","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:2236","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0541","RHSA-2020:0196","RHSA-2020:2241","RHSA-2020:0632","RHSA-2020:2239","RHSA-2020:0202","RHSA-2020:2237","RHSA-2020:0128","RHSA-2020:2238"],"bugzilla":"1791217","bugzilla_description":"CVE-2020-2654 OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2654.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2659","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0468"],"bugzilla":"1791284","bugzilla_description":"CVE-2020-2659 OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2659.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2964","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760963","bugzilla_description":"CVE-2019-2964 OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2964.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2975","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:4115","RHSA-2020:0006"],"bugzilla":"1760969","bugzilla_description":"CVE-2019-2975 OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2019-2973","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760978","bugzilla_description":"CVE-2019-2973 OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2981","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760980","bugzilla_description":"CVE-2019-2981 OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2999","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760992","bugzilla_description":"CVE-2019-2999 OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-2988","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760999","bugzilla_description":"CVE-2019-2988 OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2988.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2977","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3135"],"bugzilla":"1761002","bugzilla_description":"CVE-2019-2977 OpenJDK: Out of bounds access in optimized String indexof implementation (Hotspot, 8224062)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["java-11-openjdk-1:11.0.5.10-0.el8_0","java-11-openjdk-1:11.0.5.10-0.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2977.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2978","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761006","bugzilla_description":"CVE-2019-2978 OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2992","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761146","bugzilla_description":"CVE-2019-2992 OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2987","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158"],"bugzilla":"1761149","bugzilla_description":"CVE-2019-2987 OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2987.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2983","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761262","bugzilla_description":"CVE-2019-2983 OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2983.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2962","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761266","bugzilla_description":"CVE-2019-2962 OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2962.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2949","severity":"important","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2019:3134","RHSA-2019:3135","RHSA-2019:3136","RHSA-2020:2241","RHSA-2020:2239","RHSA-2020:2237"],"bugzilla":"1761594","bugzilla_description":"CVE-2019-2949 OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2949.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-2945","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761596","bugzilla_description":"CVE-2019-2945 OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2945.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2019-2989","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761601","bugzilla_description":"CVE-2019-2989 OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2989.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-2958","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777929","bugzilla_description":"CVE-2019-2958 OpenJDK: Incorrect escaping of command line arguments in ProcessImpl on Windows (Libraries, 8221858)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2958.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2933","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777981","bugzilla_description":"CVE-2019-2933 OpenJDK: FilePermission checks not preformed correctly on Windows (Libraries, 8213429)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2894","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777985","bugzilla_description":"CVE-2019-2894 OpenJDK: Side-channel vulnerability in the ECDSA implementation (Security, 8228825)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2894.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-2769","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730056","bugzilla_description":"CVE-2019-2769 OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2769.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2818","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1810","RHSA-2019:1817"],"bugzilla":"1730078","bugzilla_description":"CVE-2019-2818 OpenJDK: Non-constant time comparison in ChaCha20Cipher (Security, 8221344)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-11-openjdk-1:11.0.4.11-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2816","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730099","bugzilla_description":"CVE-2019-2816 OpenJDK: Missing URL format validation (Networking, 8221518)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-2842","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1840","RHSA-2019:1811","RHSA-2019:1839","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730110","bugzilla_description":"CVE-2019-2842 OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2842.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2821","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1810","RHSA-2019:1817"],"bugzilla":"1730251","bugzilla_description":"CVE-2019-2821 OpenJDK: Incorrect handling of certificate status messages during TLS handshake (JSSE, 8222678)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-11-openjdk-1:11.0.4.11-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2821.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2786","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:1840","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:2592","RHSA-2019:1816","RHSA-2019:1815","RHSA-2019:2590"],"bugzilla":"1730255","bugzilla_description":"CVE-2019-2786 OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2745","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1840","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730411","bugzilla_description":"CVE-2019-2745 OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2745.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2019-2762","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730415","bugzilla_description":"CVE-2019-2762 OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2766","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730459","bugzilla_description":"CVE-2019-2766 OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2602","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700440","bugzilla_description":"CVE-2019-2602 OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2698","severity":"important","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1238","RHSA-2019:1163"],"bugzilla":"1700447","bugzilla_description":"CVE-2019-2698 OpenJDK: Font layout engine out of bounds access setCurrGlyphID() (2D, 8219022)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2684","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700564","bugzilla_description":"CVE-2019-2684 OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2684.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2422","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:0462","RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0464","RHSA-2019:0640","RHSA-2019:0416","RHSA-2019:0435","RHSA-2019:0469","RHSA-2019:0436","RHSA-2019:1238"],"bugzilla":"1665945","bugzilla_description":"CVE-2019-2422 OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["java-11-openjdk-1:11.0.2.7-0.el7_6","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el6_10","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el7_6","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.201.b09-1.el6_10","java-1.8.0-openjdk-1:1.8.0.201.b09-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2426","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":[],"bugzilla":"1665953","bugzilla_description":"CVE-2019-2426 OpenJDK: transparent NTLM authentication enabled by default (Networking, 8209094)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2426.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-18928","severity":"low","public_date":"2018-10-30T00:00:00Z","advisories":[],"bugzilla":"1646702","bugzilla_description":"CVE-2018-18928 icu: integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-3183","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:2943","RHSA-2018:2942","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002"],"bugzilla":"1639268","bugzilla_description":"CVE-2018-3183 OpenJDK: Unrestricted access to scripting engine (Scripting, 8202936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-11-openjdk-1:11.0.1.13-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-3169","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639293","bugzilla_description":"CVE-2018-3169 OpenJDK: Improper field access checks (Hotspot, 8199226)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3214","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639301","bugzilla_description":"CVE-2018-3214 OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3139","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639442","bugzilla_description":"CVE-2018-3139 OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3139.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3180","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639484","bugzilla_description":"CVE-2018-3180 OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-3136","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639755","bugzilla_description":"CVE-2018-3136 OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3149","severity":"important","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639834","bugzilla_description":"CVE-2018-3149 OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3149.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3150","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3521"],"bugzilla":"1642321","bugzilla_description":"CVE-2018-3150 OpenJDK: Multi-Release attribute read from outside of the main manifest attributes (Utility, 8199171)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.1.13-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3150.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-3157","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1642328","bugzilla_description":"CVE-2018-3157 OpenJDK: Uninitialized memory use in MIDI device handling (Sound, 8200648)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3157.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-16435","severity":"moderate","public_date":"2018-08-13T00:00:00Z","advisories":["RHSA-2018:3004"],"bugzilla":"1628969","bugzilla_description":"CVE-2018-16435 lcms2: Integer overflow in AllocateDataSet() in cmscgats.c leading to heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["chromium-browser-0:70.0.3538.67-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16435.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2952","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:2283","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2241","RHSA-2018:2253","RHSA-2018:2242","RHSA-2018:2286"],"bugzilla":"1600925","bugzilla_description":"CVE-2018-2952 OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2952.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2972","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1601026","bugzilla_description":"CVE-2018-2972 OpenJDK: GCTR counter roll over (Security, 8200332)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2972.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-2814","severity":"critical","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1270","RHSA-2018:1206","RHSA-2018:1191","RHSA-2018:1204","RHSA-2018:1205","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567121","bugzilla_description":"CVE-2018-2814 OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2794","severity":"important","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567126","bugzilla_description":"CVE-2018-2794 OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2794.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-2795","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567351","bugzilla_description":"CVE-2018-2795 OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2815","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1270","RHSA-2018:1206","RHSA-2018:1191","RHSA-2018:1204","RHSA-2018:1205","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567537","bugzilla_description":"CVE-2018-2815 OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2799","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567542","bugzilla_description":"CVE-2018-2799 OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2799.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2798","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567543","bugzilla_description":"CVE-2018-2798 OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2797","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567545","bugzilla_description":"CVE-2018-2797 OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2796","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567546","bugzilla_description":"CVE-2018-2796 OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2800","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568163","bugzilla_description":"CVE-2018-2800 OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-2790","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568515","bugzilla_description":"CVE-2018-2790 OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-2826","severity":"critical","public_date":"2018-04-17T00:00:00Z","advisories":[],"bugzilla":"1568520","bugzilla_description":"CVE-2018-2826 OpenJDK: incorrect type check for the MethodHandles' tryFinally cleanup exception type (Libraries, 8194238)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2826.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2825","severity":"critical","public_date":"2018-04-17T00:00:00Z","advisories":[],"bugzilla":"1568586","bugzilla_description":"CVE-2018-2825 OpenJDK: insufficient array type checks in VarHandle (Libraries, 8194233)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2825.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2678","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534263","bugzilla_description":"CVE-2018-2678 OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2678.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2677","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534288","bugzilla_description":"CVE-2018-2677 OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2663","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534296","bugzilla_description":"CVE-2018-2663 OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2663.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2579","severity":"low","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534298","bugzilla_description":"CVE-2018-2579 OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-567","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2579.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2588","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534299","bugzilla_description":"CVE-2018-2588 OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-90","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-2602","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534525","bugzilla_description":"CVE-2018-2602 OpenJDK: loading of classes from untrusted locations (I18n, 8182601)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2018-2599","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534543","bugzilla_description":"CVE-2018-2599 OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2599.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2603","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534553","bugzilla_description":"CVE-2018-2603 OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2603.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2629","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0100","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534625","bugzilla_description":"CVE-2018-2629 OpenJDK: GSS context use-after-free (JGSS, 8186212)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2618","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534762","bugzilla_description":"CVE-2018-2618 OpenJDK: insufficient strength of key agreement (JCE, 8185292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-2641","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534766","bugzilla_description":"CVE-2018-2641 OpenJDK: GTK library loading use-after-free (AWT, 8185325)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-2582","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0521","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534768","bugzilla_description":"CVE-2018-2582 OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-2634","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534943","bugzilla_description":"CVE-2018-2634 OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-2637","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534970","bugzilla_description":"CVE-2018-2637 OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-2633","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535036","bugzilla_description":"CVE-2018-2633 OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2017-10285","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501868","bugzilla_description":"CVE-2017-10285 OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10346","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501873","bugzilla_description":"CVE-2017-10346 OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10388","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502038","bugzilla_description":"CVE-2017-10388 OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10274","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3047"],"bugzilla":"1502053","bugzilla_description":"CVE-2017-10274 OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10349","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502611","bugzilla_description":"CVE-2017-10349 OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10349.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10357","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502614","bugzilla_description":"CVE-2017-10357 OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10357.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10348","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502629","bugzilla_description":"CVE-2017-10348 OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10347","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502632","bugzilla_description":"CVE-2017-10347 OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10350","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502640","bugzilla_description":"CVE-2017-10350 OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10350.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10281","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502649","bugzilla_description":"CVE-2017-10281 OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10281.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10295","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502687","bugzilla_description":"CVE-2017-10295 OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10295.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-10345","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502858","bugzilla_description":"CVE-2017-10345 OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-10355","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502869","bugzilla_description":"CVE-2017-10355 OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10355.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10356","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1503169","bugzilla_description":"CVE-2017-10356 OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10356.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2017-10107","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471266","bugzilla_description":"CVE-2017-10107 OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10107.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10089","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471270","bugzilla_description":"CVE-2017-10089 OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10090","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1791"],"bugzilla":"1471517","bugzilla_description":"CVE-2017-10090 OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10090.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10087","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471521","bugzilla_description":"CVE-2017-10087 OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10110","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471523","bugzilla_description":"CVE-2017-10110 OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10111","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:1790"],"bugzilla":"1471526","bugzilla_description":"CVE-2017-10111 OpenJDK: incorrect range checks in LambdaFormEditor (Libraries, 8184185)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10101","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471527","bugzilla_description":"CVE-2017-10101 OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10096","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471528","bugzilla_description":"CVE-2017-10096 OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10074","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471534","bugzilla_description":"CVE-2017-10074 OpenJDK: integer overflows in range check loop predicates (Hotspot, 8173770)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10067","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471535","bugzilla_description":"CVE-2017-10067 OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10109","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471670","bugzilla_description":"CVE-2017-10109 OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10081","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471711","bugzilla_description":"CVE-2017-10081 OpenJDK: incorrect bracket processing in function signature handling (Hotspot, 8170966)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10081.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-10193","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:3392","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471715","bugzilla_description":"CVE-2017-10193 OpenJDK: incorrect key size constraint check (Security, 8179101)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-10116","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471738","bugzilla_description":"CVE-2017-10116 OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2017-10115","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471851","bugzilla_description":"CVE-2017-10115 OpenJDK: DSA implementation timing attack (JCE, 8175106)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10135","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471871","bugzilla_description":"CVE-2017-10135 OpenJDK: PKCS#8 implementation timing attack (JCE, 8176760)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10135.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-10108","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471888","bugzilla_description":"CVE-2017-10108 OpenJDK: unbounded memory allocation in BasicAttribute deserialization (Serialization, 8174105)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10108.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10053","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471889","bugzilla_description":"CVE-2017-10053 OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10078","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2469","RHSA-2017:1790","RHSA-2017:3453"],"bugzilla":"1471898","bugzilla_description":"CVE-2017-10078 OpenJDK: Nashorn incompletely blocking access to Java APIs (Scripting, 8171539)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-10198","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:3392","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1472320","bugzilla_description":"CVE-2017-10198 OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-10102","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472345","bugzilla_description":"CVE-2017-10102 OpenJDK: incorrect handling of references in DGC (RMI, 8163958)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-10118","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1790","RHSA-2017:1791"],"bugzilla":"1472470","bugzilla_description":"CVE-2017-10118 OpenJDK: ECDSA implementation timing attack (JCE, 8175110)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10176","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1790","RHSA-2017:1791"],"bugzilla":"1472476","bugzilla_description":"CVE-2017-10176 OpenJDK: incorrect handling of certain EC points (Security, 8178135)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10243","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472666","bugzilla_description":"CVE-2017-10243 OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10243.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-3511","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1221"],"bugzilla":"1443007","bugzilla_description":"CVE-2017-3511 OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-3509","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443052","bugzilla_description":"CVE-2017-3509 OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2017-3544","severity":"low","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443068","bugzilla_description":"CVE-2017-3544 OpenJDK: newline injection in the SMTP client (Networking, 8171533)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3539","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443097","bugzilla_description":"CVE-2017-3539 OpenJDK: MD5 allowed for jar verification (Security, 8171121)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3526","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108"],"bugzilla":"1443252","bugzilla_description":"CVE-2017-3526 OpenJDK: incomplete XML parse tree size enforcement (JAXP, 8169011)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3512","severity":"critical","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443455","bugzilla_description":"CVE-2017-3512 OpenJDK: window framing issues on MacOSX (AWT, 8165626)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3514","severity":"critical","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443469","bugzilla_description":"CVE-2017-3514 OpenJDK: peering issues on Windows (AWT, 8167110)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3533","severity":"low","public_date":"2017-02-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443083","bugzilla_description":"CVE-2017-3533 OpenJDK: newline injection in the FTP client (Networking, 8170222)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3272","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413554","bugzilla_description":"CVE-2017-3272 OpenJDK: insufficient protected field access checks in atomic field updaters (Libraries, 8165344)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3289","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413562","bugzilla_description":"CVE-2017-3289 OpenJDK: insecure class construction (Hotspot, 8167104)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3253","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413583","bugzilla_description":"CVE-2017-3253 OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-3261","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413653","bugzilla_description":"CVE-2017-3261 OpenJDK: integer overflow in SocketOutputStream boundary check (Networking, 8164147)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3231","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413717","bugzilla_description":"CVE-2017-3231 OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3231.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5547","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413764","bugzilla_description":"CVE-2016-5547 OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5547.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5552","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413882","bugzilla_description":"CVE-2016-5552 OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5552.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3252","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413906","bugzilla_description":"CVE-2017-3252 OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3252.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5546","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413911","bugzilla_description":"CVE-2016-5546 OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5546.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-5548","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413920","bugzilla_description":"CVE-2016-5548 OpenJDK: DSA implementation timing attack (Libraries, 8168728)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-5549","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413923","bugzilla_description":"CVE-2016-5549 OpenJDK: ECDSA implementation timing attack (Libraries, 8168724)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-3241","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413955","bugzilla_description":"CVE-2017-3241 OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3241.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3260","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":[],"bugzilla":"1414562","bugzilla_description":"CVE-2017-3260 OpenJDK: menu handling memory corruption (AWT, 8164143)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3260.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5582","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2658","RHSA-2016:2090"],"bugzilla":"1385402","bugzilla_description":"CVE-2016-5582 OpenJDK: incomplete type checks of System.arraycopy arguments (Hotspot, 8160591)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-5573","severity":"important","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385544","bugzilla_description":"CVE-2016-5573 OpenJDK: insufficient checks of JDWP packets (Hotspot, 8159519)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5573.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5554","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385714","bugzilla_description":"CVE-2016-5554 OpenJDK: insufficient classloader consistency checks in ClassLoaderWithRepository (JMX, 8157739)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5554.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5542","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385723","bugzilla_description":"CVE-2016-5542 OpenJDK: missing algorithm restrictions for jar verification (Libraries, 8155973)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5597","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1386103","bugzilla_description":"CVE-2016-5597 OpenJDK: exposure of server authentication credentials to proxy (Networking, 8160838)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-319","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5597.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5568","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1386112","bugzilla_description":"CVE-2016-5568 OpenJDK: incorrect menu handling on Windows (AWT, 8158993)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5568.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-10165","severity":"moderate","public_date":"2016-08-15T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2017:2999","RHSA-2017:3046","RHSA-2016:2658","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1367357","bugzilla_description":"CVE-2016-10165 lcms2: Out-of-bounds read in Type_MLU_Read()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2016-3606","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1356963","bugzilla_description":"CVE-2016-3606 OpenJDK: insufficient bytecode verification (Hotspot, 8155981)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3598","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2017:1216","RHSA-2016:1504","RHSA-2016:1587","RHSA-2016:1588","RHSA-2016:1589","RHSA-2016:1458"],"bugzilla":"1356971","bugzilla_description":"CVE-2016-3598 OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3598.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3587","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1458"],"bugzilla":"1356987","bugzilla_description":"CVE-2016-3587 OpenJDK: insufficient protection of MethodHandle.invokeBasic() (Hotspot, 8154475)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3587.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3610","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1504","RHSA-2016:1458"],"bugzilla":"1356994","bugzilla_description":"CVE-2016-3610 OpenJDK: insufficient value count check in MethodHandles.filterReturnValue() (Libraries, 8158571)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3500","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357008","bugzilla_description":"CVE-2016-3500 OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3508","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357015","bugzilla_description":"CVE-2016-3508 OpenJDK: missing entity replacement limits (JAXP, 8149962)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3458","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357494","bugzilla_description":"CVE-2016-3458 OpenJDK: insufficient restrictions on the use of custom ValueHandler (CORBA, 8079718)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-3550","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357506","bugzilla_description":"CVE-2016-3550 OpenJDK: integer overflows in bytecode streams (Hotspot, 8152479)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3550.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-3485","severity":"low","public_date":"2016-07-19T00:00:00Z","advisories":[],"bugzilla":"1357516","bugzilla_description":"CVE-2016-3485 OpenJDK: weak authentication secret in Pipe implementation on Windows (Networking, 8145446)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3485.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2016-0686","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327743","bugzilla_description":"CVE-2016-0686 OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0686.json"},{"CVE":"CVE-2016-0687","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327749","bugzilla_description":"CVE-2016-0687 OpenJDK: insufficient byte type checks (Hotspot, 8132051)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0687.json"},{"CVE":"CVE-2016-0695","severity":"low","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:0677"],"bugzilla":"1328022","bugzilla_description":"CVE-2016-0695 OpenJDK: insufficient DSA key parameters checks (Security, 8138593)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0695.json"},{"CVE":"CVE-2016-3425","severity":"moderate","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:0677"],"bugzilla":"1328040","bugzilla_description":"CVE-2016-3425 OpenJDK: incorrect handling of surrogate pairs in XML attribute values (JAXP, 8143167)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3425.json"},{"CVE":"CVE-2016-3426","severity":"low","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328059","bugzilla_description":"CVE-2016-3426 OpenJDK: non-constant time GCM authentication tag comparison (JCE, 8143945)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3426.json"},{"CVE":"CVE-2016-3427","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328210","bugzilla_description":"CVE-2016-3427 OpenJDK: unrestricted deserialization of authentication credentials (JMX, 8144430)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3427.json"},{"CVE":"CVE-2016-0636","severity":"critical","public_date":"2016-03-23T00:00:00Z","advisories":["RHSA-2016:0513","RHSA-2016:0514","RHSA-2016:0515","RHSA-2016:0516","RHSA-2016:0511","RHSA-2016:0512"],"bugzilla":"1320650","bugzilla_description":"CVE-2016-0636 OpenJDK: missing type safety checks for MethodHandle calls across class loaders, incorrect CVE-2013-5838 fix (Hotspot, 8151666)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["java-1.7.0-oracle-1:1.7.0.99-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.77-0.b03.el6_7","java-1.7.0-oracle-1:1.7.0.99-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.77-0.b03.el7_2","java-1.8.0-oracle-1:1.8.0.77-1jpp.1.el6_7","java-1.7.0-openjdk-1:1.7.0.99-2.6.5.0.el6_7","java-1.7.0-openjdk-1:1.7.0.99-2.6.5.0.el7_2","java-1.7.0-oracle-1:1.7.0.99-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.77-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.99-2.6.5.0.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0636.json"},{"CVE":"CVE-2016-0494","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298906","bugzilla_description":"CVE-2016-0494 ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0494.json"},{"CVE":"CVE-2016-0475","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0050","RHSA-2016:0049"],"bugzilla":"1298949","bugzilla_description":"CVE-2016-0475 OpenJDK: PBE incorrect key lengths (Libraries, 8138589)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0475.json"},{"CVE":"CVE-2016-0402","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298957","bugzilla_description":"CVE-2016-0402 OpenJDK: URL deserialization inconsistencies (Networking, 8059054)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0402.json"},{"CVE":"CVE-2016-0448","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299073","bugzilla_description":"CVE-2016-0448 OpenJDK: logging of RMI connection secrets (JMX, 8130710)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0448.json"},{"CVE":"CVE-2016-0466","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299385","bugzilla_description":"CVE-2016-0466 OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0466.json"},{"CVE":"CVE-2016-0483","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299441","bugzilla_description":"CVE-2016-0483 OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0483.json"},{"CVE":"CVE-2015-7575","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0012","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0007","RHSA-2016:0008","RHSA-2016:0049"],"bugzilla":"1289841","bugzilla_description":"CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.2","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","nss-0:3.19.1-19.el7_2","gnutls-0:3.3.8-14.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","gnutls-0:2.8.5-19.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","nss-0:3.19.1-8.el6_7","openssl-1:1.0.1e-51.el7_2.2","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json"},{"CVE":"CVE-2015-4806","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1233687","bugzilla_description":"CVE-2015-4806 OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4806.json"},{"CVE":"CVE-2015-4835","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273022","bugzilla_description":"CVE-2015-4835 OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4835.json"},{"CVE":"CVE-2015-4881","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921"],"bugzilla":"1273027","bugzilla_description":"CVE-2015-4881 OpenJDK: missing type checks in IIOPInputStream (CORBA, 8076392)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4881.json"},{"CVE":"CVE-2015-4843","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273053","bugzilla_description":"CVE-2015-4843 OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4843.json"},{"CVE":"CVE-2015-4883","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273304","bugzilla_description":"CVE-2015-4883 OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4883.json"},{"CVE":"CVE-2015-4860","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273308","bugzilla_description":"CVE-2015-4860 OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4860.json"},{"CVE":"CVE-2015-4805","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273311","bugzilla_description":"CVE-2015-4805 OpenJDK: missing checks for proper initialization in ObjectStreamClass (Serialization, 8103671)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-665","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4805.json"},{"CVE":"CVE-2015-4844","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273318","bugzilla_description":"CVE-2015-4844 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4844.json"},{"CVE":"CVE-2015-4868","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:1919"],"bugzilla":"1273328","bugzilla_description":"CVE-2015-4868 OpenJDK: CRL checking flaw (Libraries, 8081744)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4868.json"},{"CVE":"CVE-2015-4840","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273338","bugzilla_description":"CVE-2015-4840 OpenJDK: OOB access in CMS code (2D, 8086092)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4840.json"},{"CVE":"CVE-2015-4882","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273414","bugzilla_description":"CVE-2015-4882 OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4882.json"},{"CVE":"CVE-2015-4842","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273425","bugzilla_description":"CVE-2015-4842 OpenJDK: leak of user.dir location (JAXP, 8078427)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4842.json"},{"CVE":"CVE-2015-4734","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273430","bugzilla_description":"CVE-2015-4734 OpenJDK: kerberos realm name leak (JGSS, 8048030)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4734.json"},{"CVE":"CVE-2015-4903","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273496","bugzilla_description":"CVE-2015-4903 OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4903.json"},{"CVE":"CVE-2015-4803","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273637","bugzilla_description":"CVE-2015-4803 OpenJDK: inefficient use of hash tables and lists during XML parsing (JAXP, 8068842)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4803.json"},{"CVE":"CVE-2015-4893","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273638","bugzilla_description":"CVE-2015-4893 OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4893.json"},{"CVE":"CVE-2015-4911","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921"],"bugzilla":"1273645","bugzilla_description":"CVE-2015-4911 OpenJDK: incomplete supportDTD enforcement (JAXP, 8130078)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4911.json"},{"CVE":"CVE-2015-4872","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273734","bugzilla_description":"CVE-2015-4872 OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4872.json"},{"CVE":"CVE-2015-4871","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:2509","RHSA-2015:1927","RHSA-2016:0053","RHSA-2015:2506"],"bugzilla":"1273859","bugzilla_description":"CVE-2015-4871 OpenJDK: protected methods can be used as interface methods via DirectMethodHandle (Libraries)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4871.json"},{"CVE":"CVE-2015-2601","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242019","bugzilla_description":"CVE-2015-2601 OpenJDK: non-constant time comparisons in crypto code (JCE, 8074865)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2601.json"},{"CVE":"CVE-2015-2659","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1228","RHSA-2015:1241"],"bugzilla":"1242144","bugzilla_description":"CVE-2015-2659 OpenJDK: GCM cipher issue causing JVM crash (Security, 8067648)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2659.json"},{"CVE":"CVE-2015-2628","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242232","bugzilla_description":"CVE-2015-2628 OpenJDK: IIOPInputStream type confusion vulnerability (CORBA, 8076376)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2628.json"},{"CVE":"CVE-2015-4731","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242234","bugzilla_description":"CVE-2015-4731 OpenJDK: improper permission checks in MBeanServerInvocationHandler (JMX, 8076397)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4731.json"},{"CVE":"CVE-2015-4732","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242240","bugzilla_description":"CVE-2015-4732 OpenJDK: insufficient context checks during object deserialization (Libraries, 8076405)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-567","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4732.json"},{"CVE":"CVE-2015-4733","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242275","bugzilla_description":"CVE-2015-4733 OpenJDK: RemoteObjectInvocationHandler allows calling finalize() (RMI, 8076409)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4733.json"},{"CVE":"CVE-2015-4748","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242281","bugzilla_description":"CVE-2015-4748 OpenJDK: incorrect OCSP nextUpdate checking (Libraries, 8075374)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-299","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4748.json"},{"CVE":"CVE-2015-2621","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242372","bugzilla_description":"CVE-2015-2621 OpenJDK: incorrect code permission checks in RMIConnectionImpl (JMX, 8075853)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2621.json"},{"CVE":"CVE-2015-4749","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242379","bugzilla_description":"CVE-2015-4749 OpenJDK: DnsClient fails to release request information after error (JNDI, 8075378)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4749.json"},{"CVE":"CVE-2015-2632","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242394","bugzilla_description":"CVE-2015-2632 ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190->CWE-125","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2632.json"},{"CVE":"CVE-2015-4760","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242447","bugzilla_description":"CVE-2015-4760 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8071715)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4760.json"},{"CVE":"CVE-2015-2613","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1242456","bugzilla_description":"CVE-2015-2613 NSS / JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2613.json"},{"CVE":"CVE-2015-2590","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1243139","bugzilla_description":"CVE-2015-2590 OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2590.json"},{"CVE":"CVE-2015-4000","severity":"moderate","public_date":"2015-05-20T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2016:2056","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2016:1624","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1197","RHSA-2015:1230","RHSA-2015:1185","RHSA-2015:1072"],"bugzilla":"1223211","bugzilla_description":"CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","nss-0:3.19.1-3.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","nss-0:3.19.1-3.ael7b_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","openssl-0:1.0.1e-30.el6_6.9","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","openssl-1:1.0.1e-42.ael7b_1.6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.8.0-openjdk-1:1.8.0.51-1.b16.ael7b_1","openssl-0:0.9.8e-36.el5_11","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-0478","severity":"low","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1210355","bugzilla_description":"CVE-2015-0478 OpenJDK: insufficient hardening of RSA-CRT implementation (JCE, 8071726)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0478.json"},{"CVE":"CVE-2015-0469","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1210829","bugzilla_description":"CVE-2015-0469 ICU: layout engine glyphStorage off-by-one (OpenJDK 2D, 8067699)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-122","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0469.json"},{"CVE":"CVE-2015-0460","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211285","bugzilla_description":"CVE-2015-0460 OpenJDK: incorrect handling of phantom references (Hotspot, 8071931)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0460.json"},{"CVE":"CVE-2015-0477","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211299","bugzilla_description":"CVE-2015-0477 OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0477.json"},{"CVE":"CVE-2015-0470","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0809"],"bugzilla":"1211387","bugzilla_description":"CVE-2015-0470 OpenJDK: incorrect handling of default methods (Hotspot, 8065366)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0470.json"},{"CVE":"CVE-2015-0488","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211543","bugzilla_description":"CVE-2015-0488 OpenJDK: certificate options parsing uncaught exception (JSSE, 8068720)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-248","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0488.json"},{"CVE":"CVE-2015-2808","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1207101","bugzilla_description":"CVE-2015-2808 SSL/TLS: \"Invariance Weakness\" vulnerability in RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2808.json"},{"CVE":"CVE-2015-0383","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1123870","bugzilla_description":"CVE-2015-0383 OpenJDK: insecure hsperfdata temporary file handling (Hotspot, 8050807)","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0383.json"},{"CVE":"CVE-2014-6601","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183020","bugzilla_description":"CVE-2014-6601 OpenJDK: class verifier insufficient invokespecial calls verification (Hotspot, 8058982)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6601.json"},{"CVE":"CVE-2015-0412","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183021","bugzilla_description":"CVE-2015-0412 OpenJDK: insufficient code privileges checks (JAX-WS, 8054367)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0412.json"},{"CVE":"CVE-2015-0408","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183023","bugzilla_description":"CVE-2015-0408 OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0408.json"},{"CVE":"CVE-2015-0395","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183031","bugzilla_description":"CVE-2015-0395 OpenJDK: phantom references handling issue in garbage collector (Hotspot, 8047125)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0395.json"},{"CVE":"CVE-2015-0400","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1183039","bugzilla_description":"CVE-2015-0400 OpenJDK: NTLM authentication data disclosure via redirect to proxy (Libraries, 8048035)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0400.json"},{"CVE":"CVE-2015-0407","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183043","bugzilla_description":"CVE-2015-0407 OpenJDK: directory information leak via file chooser (Swing, 8055304)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0407.json"},{"CVE":"CVE-2015-0410","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183044","bugzilla_description":"CVE-2015-0410 OpenJDK: DER decoder infinite loop  (Security, 8059485)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0410.json"},{"CVE":"CVE-2014-6593","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183049","bugzilla_description":"CVE-2014-6593 OpenJDK: incorrect tracking of ChangeCipherSpec during SSL/TLS handshake (JSSE, 8057555)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6593.json"},{"CVE":"CVE-2014-6585","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183645","bugzilla_description":"CVE-2014-6585 ICU: font parsing OOB read (OpenJDK 2D, 8055489)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6585.json"},{"CVE":"CVE-2014-6591","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183646","bugzilla_description":"CVE-2014-6591 ICU: font parsing OOB read (OpenJDK 2D, 8056276)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6591.json"},{"CVE":"CVE-2014-6549","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0134","RHSA-2015:0133"],"bugzilla":"1183660","bugzilla_description":"CVE-2014-6549 OpenJDK: incorrect class loader permission check in ClassLoader getParent() (Libraries, 8055314)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6549.json"},{"CVE":"CVE-2015-0437","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069"],"bugzilla":"1183670","bugzilla_description":"CVE-2015-0437 OpenJDK: code generation issue (Hotspot, 8064524)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0437.json"},{"CVE":"CVE-2014-6587","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183715","bugzilla_description":"CVE-2014-6587 OpenJDK: MulticastSocket NULL pointer dereference (Libraries, 8056264)","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6587.json"},{"CVE":"CVE-2015-2625","severity":"low","public_date":"2014-11-02T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1241965","bugzilla_description":"CVE-2015-2625 OpenJDK: name for reverse DNS lookup used in certificate identity check (JSSE, 8067694)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2625.json"},{"CVE":"CVE-2014-6512","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1071210","bugzilla_description":"CVE-2014-6512 OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-345","affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6512.json"},{"CVE":"CVE-2014-6513","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1150118","bugzilla_description":"CVE-2014-6513 OpenJDK: splash image handling memory corruption (AWT, 8042609)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6513.json"},{"CVE":"CVE-2014-6506","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150155","bugzilla_description":"CVE-2014-6506 OpenJDK: insufficient permission checks when setting resource bundle on system logger (Libraries, 8041564)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6506.json"},{"CVE":"CVE-2014-6504","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1150182","bugzilla_description":"CVE-2014-6504 OpenJDK: incorrect optimization of range checks in C2 compiler (Hotspot, 8022783)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6504.json"},{"CVE":"CVE-2014-6519","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1150273","bugzilla_description":"CVE-2014-6519 OpenJDK: missing BootstrapMethods bounds check (Hotspot, 8041717)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6519.json"},{"CVE":"CVE-2014-6531","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150651","bugzilla_description":"CVE-2014-6531 OpenJDK: insufficient ResourceBundle name check (Libraries, 8044274)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6531.json"},{"CVE":"CVE-2014-6502","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150669","bugzilla_description":"CVE-2014-6502 OpenJDK: LogRecord use of incorrect CL when loading ResourceBundle (Libraries, 8042797)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6502.json"},{"CVE":"CVE-2014-6457","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151046","bugzilla_description":"CVE-2014-6457 OpenJDK: Triple Handshake attack against TLS/SSL connections (JSSE, 8037066)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6457.json"},{"CVE":"CVE-2014-6558","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151063","bugzilla_description":"CVE-2014-6558 OpenJDK: CipherInputStream incorrect exception handling (Security, 8037846)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6558.json"},{"CVE":"CVE-2014-6517","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1151364","bugzilla_description":"CVE-2014-6517 OpenJDK: StAX parser parameter entity XXE (JAXP, 8039533)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6517.json"},{"CVE":"CVE-2014-6511","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151517","bugzilla_description":"CVE-2014-6511 ICU: Layout Engine ContextualSubstitution missing boundary checks (JDK 2D, 8041540)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6511.json"},{"CVE":"CVE-2014-6562","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1636"],"bugzilla":"1151988","bugzilla_description":"CVE-2014-6562 OpenJDK: incorrect handling of zip entries with NUL in name (Libraries, 8048025)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6562.json"},{"CVE":"CVE-2014-6468","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1636"],"bugzilla":"1152049","bugzilla_description":"CVE-2014-6468 OpenJDK: insufficient SharedArchiveFile checks (Hotspot, 8044269)","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6468.json"},{"CVE":"CVE-2014-3566","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2015:1546","RHSA-2015:1545","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2014:1881","RHSA-2014:1880","RHSA-2015:0080","RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2014:1920","RHSA-2015:0067","RHSA-2015:0012","RHSA-2015:0011","RHSA-2015:0264","RHSA-2015:0010","RHSA-2015:0086","RHSA-2015:0085","RHBA-2014:1857"],"bugzilla":"1152789","bugzilla_description":"CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-636|CWE-757)","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","openshift-origin-node-proxy-0:1.16.4.2-1.el6op","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","openshift-origin-node-proxy-0:1.22.3.4-1.el6op","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json"},{"CVE":"CVE-2015-3149","severity":"low","public_date":"2014-04-20T00:00:00Z","advisories":["RHSA-2015:1228"],"bugzilla":"1213365","bugzilla_description":"CVE-2015-3149 OpenJDK8: insecure hsperfdata temporary file handling, CVE-2015-0383 regression (Hotspot)","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":["java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3149.json"},{"CVE":"CVE-2015-0480","severity":"low","public_date":"2005-01-04T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211504","bugzilla_description":"CVE-2015-0480 OpenJDK: jar directory traversal issues (Tools, 8064601)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0480.json"},{"CVE":"CVE-2005-1080","severity":"low","public_date":"2005-01-04T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"606442","bugzilla_description":"CVE-2005-1080 jar: directory traversal vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1080.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-11-openjdk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-11-openjdk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-11-openjdk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-11-openjdk-headless_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-11-openjdk-headless_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-11-openjdk-headless_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-11-openjdk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-11-openjdk_security_api_results.json
new file mode 100644
index 0000000..b84c88e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-11-openjdk_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14779","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889271","bugzilla_description":"CVE-2020-14779 OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14779.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-14781","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889274","bugzilla_description":"CVE-2020-14781 OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14781.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14792","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889280","bugzilla_description":"CVE-2020-14792 OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14792.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2020-14782","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889290","bugzilla_description":"CVE-2020-14782 OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14796","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889697","bugzilla_description":"CVE-2020-14796 OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14796.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-14797","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889717","bugzilla_description":"CVE-2020-14797 OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14797.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14803","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889895","bugzilla_description":"CVE-2020-14803 OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14583","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856448","bugzilla_description":"CVE-2020-14583 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2020-14593","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856784","bugzilla_description":"CVE-2020-14593 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14593.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-14562","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2970","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969"],"bugzilla":"1856810","bugzilla_description":"CVE-2020-14562 OpenJDK: Excessive memory usage in ImageIO TIFF plugin (ImageIO, 8233239)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-11-openjdk-1:11.0.8.10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_1","java-11-openjdk-1:11.0.8.10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14562.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-14621","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856885","bugzilla_description":"CVE-2020-14621 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14621.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14556","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856896","bugzilla_description":"CVE-2020-14556 OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14556.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-14573","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2970","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969"],"bugzilla":"1856951","bugzilla_description":"CVE-2020-14573 OpenJDK: Incomplete interface type checks in Graal compiler (Hotspot, 8236867)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-11-openjdk-1:11.0.8.10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_1","java-11-openjdk-1:11.0.8.10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14573.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14577","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856988","bugzilla_description":"CVE-2020-14577 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14577.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14578","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856991","bugzilla_description":"CVE-2020-14578 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14578.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-14579","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856995","bugzilla_description":"CVE-2020-14579 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14579.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-14581","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":[],"bugzilla":"1857172","bugzilla_description":"CVE-2020-14581 OpenJDK: Information disclosure in color management (2D, 8238002)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14581.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14664","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":[],"bugzilla":"1866027","bugzilla_description":"CVE-2020-14664 JavaFX: Out-of-bounds write in HTML Rendering","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14664.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2020-2754","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514"],"bugzilla":"1823199","bugzilla_description":"CVE-2020-2754 OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2754.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2755","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514"],"bugzilla":"1823200","bugzilla_description":"CVE-2020-2755 OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2755.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2756","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823215","bugzilla_description":"CVE-2020-2756 OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2756.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2757","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823216","bugzilla_description":"CVE-2020-2757 OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2757.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2773","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1508","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:1512","RHSA-2020:1514"],"bugzilla":"1823224","bugzilla_description":"CVE-2020-2773 OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2773.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2800","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823527","bugzilla_description":"CVE-2020-2800 OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2800.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2830","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823542","bugzilla_description":"CVE-2020-2830 OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185->CWE-400","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2830.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-2803","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823694","bugzilla_description":"CVE-2020-2803 OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2805","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823844","bugzilla_description":"CVE-2020-2805 OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2805.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2816","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1517","RHSA-2020:1514"],"bugzilla":"1823853","bugzilla_description":"CVE-2020-2816 OpenJDK: Application data accepted before TLS handshake completion (JSSE, 8235691)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["java-11-openjdk-1:11.0.7.10-4.el7_8","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2816.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-2778","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1517","RHSA-2020:1514"],"bugzilla":"1823879","bugzilla_description":"CVE-2020-2778 OpenJDK: Incomplete enforcement of algorithm restrictions for TLS (JSSE, 8232424)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-11-openjdk-1:11.0.7.10-4.el7_8","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2778.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2767","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1517","RHSA-2020:1514"],"bugzilla":"1823947","bugzilla_description":"CVE-2020-2767 OpenJDK: Incorrect handling of Certificate messages during TLS handshake (JSSE, 8232581)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["java-11-openjdk-1:11.0.7.10-4.el7_8","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2767.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2781","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823960","bugzilla_description":"CVE-2020-2781 OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2781.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-10531","severity":"important","public_date":"2020-02-25T00:00:00Z","advisories":["RHSA-2020:1343","RHSA-2020:2895","RHSA-2020:0738","RHSA-2020:1317","RHSA-2020:1293","RHSA-2020:0902","RHSA-2020:0901","RHSA-2020:3084","RHSA-2020:0896","RHSA-2020:0897"],"bugzilla":"1807349","bugzilla_description":"CVE-2020-10531 ICU: Integer overflow in UnicodeString::doAppend()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["icu-0:60.3-2.el8_0","icu-0:50.2-4.el7_7","rh-nodejs12-nodejs-0:12.18.2-1.el7","nodejs:12-8010020200326104226.c27ad7f8","icu-0:60.3-2.el8_1","chromium-browser-0:80.0.3987.122-1.el6_10","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:10-8000020200318152927.f8e95b4e","nodejs:10-8010020200318152252.c27ad7f8","icu-0:4.2.1-15.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10531.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-2583","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790444","bugzilla_description":"CVE-2020-2583 OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2590","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790556","bugzilla_description":"CVE-2020-2590 OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2590.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2601","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790570","bugzilla_description":"CVE-2020-2601 OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2020-2593","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790884","bugzilla_description":"CVE-2020-2593 OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2593.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2604","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790944","bugzilla_description":"CVE-2020-2604 OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2604.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-2655","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0128"],"bugzilla":"1790951","bugzilla_description":"CVE-2020-2655 OpenJDK: Incorrect handling of unexpected CertificateVerify TLS handshake messages (JSSE, 8231780)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":["java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2655.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2654","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:2236","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0541","RHSA-2020:0196","RHSA-2020:2241","RHSA-2020:0632","RHSA-2020:2239","RHSA-2020:0202","RHSA-2020:2237","RHSA-2020:0128","RHSA-2020:2238"],"bugzilla":"1791217","bugzilla_description":"CVE-2020-2654 OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2654.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2659","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0468"],"bugzilla":"1791284","bugzilla_description":"CVE-2020-2659 OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2659.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2964","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760963","bugzilla_description":"CVE-2019-2964 OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2964.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2975","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:4115","RHSA-2020:0006"],"bugzilla":"1760969","bugzilla_description":"CVE-2019-2975 OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2019-2973","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760978","bugzilla_description":"CVE-2019-2973 OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2981","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760980","bugzilla_description":"CVE-2019-2981 OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2999","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760992","bugzilla_description":"CVE-2019-2999 OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-2988","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760999","bugzilla_description":"CVE-2019-2988 OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2988.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2977","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3135"],"bugzilla":"1761002","bugzilla_description":"CVE-2019-2977 OpenJDK: Out of bounds access in optimized String indexof implementation (Hotspot, 8224062)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["java-11-openjdk-1:11.0.5.10-0.el8_0","java-11-openjdk-1:11.0.5.10-0.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2977.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2978","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761006","bugzilla_description":"CVE-2019-2978 OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2992","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761146","bugzilla_description":"CVE-2019-2992 OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2987","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158"],"bugzilla":"1761149","bugzilla_description":"CVE-2019-2987 OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2987.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2983","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761262","bugzilla_description":"CVE-2019-2983 OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2983.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2962","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761266","bugzilla_description":"CVE-2019-2962 OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2962.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2949","severity":"important","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2019:3134","RHSA-2019:3135","RHSA-2019:3136","RHSA-2020:2241","RHSA-2020:2239","RHSA-2020:2237"],"bugzilla":"1761594","bugzilla_description":"CVE-2019-2949 OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2949.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-2945","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761596","bugzilla_description":"CVE-2019-2945 OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2945.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2019-2989","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761601","bugzilla_description":"CVE-2019-2989 OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2989.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-2958","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777929","bugzilla_description":"CVE-2019-2958 OpenJDK: Incorrect escaping of command line arguments in ProcessImpl on Windows (Libraries, 8221858)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2958.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2933","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777981","bugzilla_description":"CVE-2019-2933 OpenJDK: FilePermission checks not preformed correctly on Windows (Libraries, 8213429)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2894","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777985","bugzilla_description":"CVE-2019-2894 OpenJDK: Side-channel vulnerability in the ECDSA implementation (Security, 8228825)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2894.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-2769","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730056","bugzilla_description":"CVE-2019-2769 OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2769.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2818","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1810","RHSA-2019:1817"],"bugzilla":"1730078","bugzilla_description":"CVE-2019-2818 OpenJDK: Non-constant time comparison in ChaCha20Cipher (Security, 8221344)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-11-openjdk-1:11.0.4.11-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2816","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730099","bugzilla_description":"CVE-2019-2816 OpenJDK: Missing URL format validation (Networking, 8221518)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-2842","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1840","RHSA-2019:1811","RHSA-2019:1839","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730110","bugzilla_description":"CVE-2019-2842 OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2842.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2821","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1810","RHSA-2019:1817"],"bugzilla":"1730251","bugzilla_description":"CVE-2019-2821 OpenJDK: Incorrect handling of certificate status messages during TLS handshake (JSSE, 8222678)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-11-openjdk-1:11.0.4.11-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2821.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2786","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:1840","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:2592","RHSA-2019:1816","RHSA-2019:1815","RHSA-2019:2590"],"bugzilla":"1730255","bugzilla_description":"CVE-2019-2786 OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2745","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1840","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730411","bugzilla_description":"CVE-2019-2745 OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2745.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2019-2762","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730415","bugzilla_description":"CVE-2019-2762 OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2766","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730459","bugzilla_description":"CVE-2019-2766 OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2602","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700440","bugzilla_description":"CVE-2019-2602 OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2698","severity":"important","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1238","RHSA-2019:1163"],"bugzilla":"1700447","bugzilla_description":"CVE-2019-2698 OpenJDK: Font layout engine out of bounds access setCurrGlyphID() (2D, 8219022)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2684","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700564","bugzilla_description":"CVE-2019-2684 OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2684.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2422","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:0462","RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0464","RHSA-2019:0640","RHSA-2019:0416","RHSA-2019:0435","RHSA-2019:0469","RHSA-2019:0436","RHSA-2019:1238"],"bugzilla":"1665945","bugzilla_description":"CVE-2019-2422 OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["java-11-openjdk-1:11.0.2.7-0.el7_6","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el6_10","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el7_6","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.201.b09-1.el6_10","java-1.8.0-openjdk-1:1.8.0.201.b09-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2426","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":[],"bugzilla":"1665953","bugzilla_description":"CVE-2019-2426 OpenJDK: transparent NTLM authentication enabled by default (Networking, 8209094)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2426.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-3183","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:2943","RHSA-2018:2942","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002"],"bugzilla":"1639268","bugzilla_description":"CVE-2018-3183 OpenJDK: Unrestricted access to scripting engine (Scripting, 8202936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-11-openjdk-1:11.0.1.13-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-3169","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639293","bugzilla_description":"CVE-2018-3169 OpenJDK: Improper field access checks (Hotspot, 8199226)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3139","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639442","bugzilla_description":"CVE-2018-3139 OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3139.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3180","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639484","bugzilla_description":"CVE-2018-3180 OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-3136","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639755","bugzilla_description":"CVE-2018-3136 OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3149","severity":"important","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639834","bugzilla_description":"CVE-2018-3149 OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3149.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3150","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3521"],"bugzilla":"1642321","bugzilla_description":"CVE-2018-3150 OpenJDK: Multi-Release attribute read from outside of the main manifest attributes (Utility, 8199171)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.1.13-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3150.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-atk-wrapper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-atk-wrapper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/java-atk-wrapper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/javamail_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/javamail_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/javamail_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/javapackages-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/javapackages-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/javapackages-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/javassist_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/javassist_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/javassist_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jaxen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jaxen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jaxen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jbigkit-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jbigkit-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jbigkit-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jboss-annotations-1.1-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jboss-annotations-1.1-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jboss-annotations-1.1-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jdom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jdom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jdom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jettison_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jettison_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jettison_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jline_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jline_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jline_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jna_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jna_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jna_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/joda-convert_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/joda-convert_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/joda-convert_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/joda-time_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/joda-time_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/joda-time_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jomolhari-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jomolhari-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jomolhari-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jose_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jose_security_api_results.json
new file mode 100644
index 0000000..1832a42
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jose_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17195","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:1308"],"bugzilla":"1764791","bugzilla_description":"CVE-2019-17195 nimbus-jose-jwt: Uncaught exceptions while parsing a JWT","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["rhvm-dependencies-0:4.3.2-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/js_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/js_security_api_results.json
new file mode 100644
index 0000000..0aae51a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/js_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-7743","severity":"moderate","public_date":"2020-10-07T00:00:00Z","advisories":[],"bugzilla":"1887999","bugzilla_description":"CVE-2020-7743 mathjs: prototype pollution via the deepExtend function that runs upon configuration updates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7743.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-8201","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":["RHSA-2020:4272"],"bugzilla":"1879311","bugzilla_description":"CVE-2020-8201 nodejs: HTTP request smuggling due to CR-to-Hyphen conversion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["nodejs:12-8020020201007080935.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8201.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-8251","severity":"important","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1879314","bugzilla_description":"CVE-2020-8251 nodejs: Denial of Service by resource exhaustion CWE-400 due to unfinished HTTP/1.1 requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8251.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8252","severity":"important","public_date":"2020-09-15T00:00:00Z","advisories":["RHSA-2020:4272"],"bugzilla":"1879315","bugzilla_description":"CVE-2020-8252 libuv: buffer overflow in realpath","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-122","affected_packages":["nodejs:12-8020020201007080935.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8252.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-7733","severity":"low","public_date":"2020-09-12T00:00:00Z","advisories":[],"bugzilla":"1879733","bugzilla_description":"CVE-2020-7733 ua-parser-js: Regular expression denial of service via the regex","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7733.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14354","severity":"moderate","public_date":"2020-08-02T00:00:00Z","advisories":[],"bugzilla":"1866838","bugzilla_description":"CVE-2020-14354 c-ares: ares_destroy() with pending ares_getaddrinfo() leads to Use-After-Free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14354.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2020-15095","severity":"moderate","public_date":"2020-07-07T00:00:00Z","advisories":["RHSA-2020:4272"],"bugzilla":"1856875","bugzilla_description":"CVE-2020-15095 npm: Sensitive information exposure through logs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["nodejs:12-8020020201007080935.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15095.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-15366","severity":"moderate","public_date":"2020-07-04T00:00:00Z","advisories":[],"bugzilla":"1857977","bugzilla_description":"CVE-2020-15366 nodejs-ajv: prototype pollution via crafted JSON schema in ajv.validate function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15366.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-11080","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:2852","RHSA-2020:2850","RHSA-2020:2784","RHSA-2020:2848","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:2646","RHSA-2020:2823","RHSA-2020:2644","RHSA-2020:2523","RHSA-2020:2524","RHSA-2020:2755","RHSA-2020:3042","RHSA-2020:3084"],"bugzilla":"1844929","bugzilla_description":"CVE-2020-11080 nghttp2: overly large SETTINGS frames can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["servicemesh-proxy-0:1.0.10-3.el8","nghttp2-0:1.33.0-3.el8_1.1","rh-nodejs10-nodejs-0:10.21.0-3.el7","nghttp2-0:1.33.0-3.el8_2.1","nodejs:12-8010020200630154708.c27ad7f8","httpd24-nghttp2-0:1.7.1-8.el7.1","nodejs:10-8010020200617134056.c27ad7f8","httpd24-nghttp2-0:1.7.1-8.el6.1","nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","rh-nodejs12-nodejs-0:12.18.2-1.el7","servicemesh-proxy-0:1.1.2-3.el8","nodejs:10-8020020200617141353.4cda2c84","nghttp2-0:1.33.0-1.el8_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11080.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8172","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:2852","RHSA-2020:2847"],"bugzilla":"1845247","bugzilla_description":"CVE-2020-8172 nodejs: TLS session reuse can lead to hostname verification bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["nodejs:12-8020020200630155331.4cda2c84","rh-nodejs12-nodejs-0:12.18.2-1.el7","nodejs:12-8010020200630154708.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8172.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-8174","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:2852","RHSA-2020:2848","RHSA-2020:3042","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:3084"],"bugzilla":"1845256","bugzilla_description":"CVE-2020-8174 nodejs: memory corruption in napi_get_value_string_* functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","rh-nodejs12-nodejs-0:12.18.2-1.el7","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:12-8010020200630154708.c27ad7f8","nodejs:10-8020020200617141353.4cda2c84","nodejs:10-8010020200617134056.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8174.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-16769","severity":"moderate","public_date":"2020-05-04T00:00:00Z","advisories":["RHSA-2020:2796"],"bugzilla":"1848092","bugzilla_description":"CVE-2019-16769 npm-serialize-javascript: XSS via unsafe characters in serialized regular expressions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["servicemesh-grafana-0:6.4.3-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16769.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-12762","severity":"moderate","public_date":"2020-05-02T00:00:00Z","advisories":[],"bugzilla":"1835253","bugzilla_description":"CVE-2020-12762 json-c: integer overflow and out-of-bounds write via a large JSON file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12762.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-8203","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:3807","RHSA-2020:3370"],"bugzilla":"1857412","bugzilla_description":"CVE-2020-8203 nodejs-lodash: prototype pollution in zipObjectDeep function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","distributed-tracing/jaeger-query-rhel7:1.17.6-1","ovirt-web-ui-0:1.6.4-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2020-7660","severity":"moderate","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:2796","RHSA-2020:2861"],"bugzilla":"1844228","bugzilla_description":"CVE-2020-7660 npm-serialize-javascript: allows remote attackers to inject arbitrary code via the function deleteFunctions within index.js","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["servicemesh-grafana-0:6.2.2-38.el8","servicemesh-grafana-0:6.4.3-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7660.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10663","severity":"moderate","public_date":"2020-03-19T00:00:00Z","advisories":["RHSA-2020:2462","RHSA-2020:2473","RHSA-2020:2670"],"bugzilla":"1827500","bugzilla_description":"CVE-2020-10663 rubygem-json: Unsafe Object Creation Vulnerability in JSON","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-94","affected_packages":["pcs-0:0.10.1-4.el8_0.5","pcs-0:0.10.2-4.el8_1.1","pcs-0:0.10.4-6.el8_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-7608","severity":"low","public_date":"2020-03-16T00:00:00Z","advisories":[],"bugzilla":"1840004","bugzilla_description":"CVE-2020-7608 nodejs-yargs-parser: prototype pollution vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7608.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-7598","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:3247","RHSA-2020:2852","RHSA-2020:2992","RHSA-2020:2362","RHSA-2020:2848","RHSA-2020:3042","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:3084"],"bugzilla":"1813344","bugzilla_description":"CVE-2020-7598 nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","kiali-0:v1.0.11.redhat1-1.el7","rh-nodejs12-nodejs-0:12.18.2-1.el7","servicemesh-grafana-0:6.2.2-36.el8","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:12-8010020200630154708.c27ad7f8","nodejs:10-8020020200617141353.4cda2c84","nodejs:10-8010020200617134056.c27ad7f8","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7598.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-10531","severity":"important","public_date":"2020-02-25T00:00:00Z","advisories":["RHSA-2020:1343","RHSA-2020:2895","RHSA-2020:0738","RHSA-2020:1317","RHSA-2020:1293","RHSA-2020:0902","RHSA-2020:0901","RHSA-2020:3084","RHSA-2020:0896","RHSA-2020:0897"],"bugzilla":"1807349","bugzilla_description":"CVE-2020-10531 ICU: Integer overflow in UnicodeString::doAppend()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["icu-0:60.3-2.el8_0","icu-0:50.2-4.el7_7","rh-nodejs12-nodejs-0:12.18.2-1.el7","nodejs:12-8010020200326104226.c27ad7f8","icu-0:60.3-2.el8_1","chromium-browser-0:80.0.3987.122-1.el6_10","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:10-8000020200318152927.f8e95b4e","nodejs:10-8010020200318152252.c27ad7f8","icu-0:4.2.1-15.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10531.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6950","severity":"moderate","public_date":"2020-02-20T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2113","RHSA-2020:3585","RHSA-2020:2905","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHSA-2020:2513"],"bugzilla":"1805006","bugzilla_description":"CVE-2020-6950 Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6950.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-8823","severity":"moderate","public_date":"2020-02-08T00:00:00Z","advisories":[],"bugzilla":"1813969","bugzilla_description":"CVE-2020-8823 sockJS: function htmlfile is not checking the non-alphanumeric symbols which could result in reflected XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8823.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-15605","severity":"important","public_date":"2020-02-07T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:1510","RHSA-2020:0597","RHSA-2020:0708","RHSA-2020:0707","RHSA-2020:0602","RHSA-2020:0703","RHSA-2020:0598","RHSA-2020:0579"],"bugzilla":"1800364","bugzilla_description":"CVE-2019-15605 nodejs: HTTP request smuggling using malformed Transfer-Encoding header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["nodejs:12-8010020200220143053.c27ad7f8","http-parser-0:2.7.1-8.el7_7.2","rh-nodejs12-nodejs-0:12.16.1-1.el7","http-parser-0:2.8.0-2.el8_0.2","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","http-parser-0:2.8.0-5.el8_1.2","http-parser-0:2.7.1-5.el7_6.1","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15605.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2019-15606","severity":"moderate","public_date":"2020-02-07T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHSA-2020:0598","RHSA-2020:0579"],"bugzilla":"1800366","bugzilla_description":"CVE-2019-15606 nodejs: HTTP header values do not have trailing optional whitespace trimmed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["nodejs:12-8010020200220143053.c27ad7f8","rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15606.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-15604","severity":"moderate","public_date":"2020-02-07T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHSA-2020:0598","RHSA-2020:0579"],"bugzilla":"1800367","bugzilla_description":"CVE-2019-15604 nodejs: Remotely trigger an assertion on a TLS server with a malformed certificate string","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["nodejs:12-8010020200220143053.c27ad7f8","rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15604.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-8124","severity":"moderate","public_date":"2020-02-04T00:00:00Z","advisories":["RHSA-2020:0972"],"bugzilla":"1800774","bugzilla_description":"CVE-2020-8124 npmjs-url-parse: Improper validation of protocol of the returned URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["jaeger-0:v1.13.1.redhat6-1.el7","kiali-0:v1.0.10.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8124.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-8116","severity":"moderate","public_date":"2020-01-28T00:00:00Z","advisories":["RHSA-2020:4272"],"bugzilla":"1868196","bugzilla_description":"CVE-2020-8116 nodejs-dot-prop: prototype pollution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":["nodejs:12-8020020201007080935.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8116.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-17571","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2638"],"bugzilla":"1785616","bugzilla_description":"CVE-2019-17571 log4j: deserialization of untrusted data in SocketServer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-16777","severity":"low","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHEA-2020:0330","RHSA-2020:2625","RHSA-2020:0579"],"bugzilla":"1788301","bugzilla_description":"CVE-2019-16777 npm: Global node_modules Binary Overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","rh-nodejs8-nodejs-0:8.17.0-2.el7","nodejs:12-8010020200116150415.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16777.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-16775","severity":"low","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHEA-2020:0330","RHSA-2020:2625","RHSA-2020:0579"],"bugzilla":"1788305","bugzilla_description":"CVE-2019-16775 npm: Symlink reference outside of node_modules folder through the bin field upon installation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","rh-nodejs8-nodejs-0:8.17.0-2.el7","nodejs:12-8010020200116150415.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16775.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-16776","severity":"low","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHEA-2020:0330","RHSA-2020:2625","RHSA-2020:0579"],"bugzilla":"1788310","bugzilla_description":"CVE-2019-16776 npm: Arbitrary file write via constructed entry in the package.json bin field","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","rh-nodejs8-nodejs-0:8.17.0-2.el7","nodejs:12-8010020200116150415.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16776.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-10768","severity":"moderate","public_date":"2019-11-07T00:00:00Z","advisories":[],"bugzilla":"1813309","bugzilla_description":"CVE-2019-10768 AngularJS: Prototype pollution in merge function could result in code injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10768.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14823","severity":"important","public_date":"2019-10-14T12:00:00Z","advisories":["RHSA-2019:3225","RHSA-2019:3067"],"bugzilla":"1747435","bugzilla_description":"CVE-2019-14823 JSS: OCSP policy \"Leaf and Chain\" implicitly trusts the root certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["jss-0:4.4.4-6.el7_6","jss-0:4.4.6-3.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-19919","severity":"low","public_date":"2019-09-24T00:00:00Z","advisories":[],"bugzilla":"1789959","bugzilla_description":"CVE-2019-19919 nodejs-handlebars: prototype pollution leading to remote code execution via crafted payloads","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19919.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-17592","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1767146","bugzilla_description":"CVE-2019-17592 nodejs: regular expression denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17592.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15133","severity":"low","public_date":"2019-08-17T00:00:00Z","advisories":[],"bugzilla":"1771309","bugzilla_description":"CVE-2019-15133 giflib: divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15133.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9513","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:3041","RHSA-2019:2692","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1735741","bugzilla_description":"CVE-2019-9513 HTTP/2: flood using PRIORITY frames results in excessive resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","rh-nginx112-nginx-1:1.12.1-3.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","kiali-0:v1.0.6.redhat1-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9515","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:2861","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3892","RHSA-2019:2766","RHSA-2020:2067","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4352","RHSA-2019:4045","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2020:3196","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2925"],"bugzilla":"1735745","bugzilla_description":"CVE-2019-9515 HTTP/2: flood using SETTINGS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","nodejs:10-8000020190911085529.f8e95b4e","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","skydive-0:0.20.5-2.el7ost","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9518","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:3892","RHSA-2020:0727","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:3196","RHSA-2019:4352","RHSA-2019:2955","RHSA-2019:2939","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2925"],"bugzilla":"1735749","bugzilla_description":"CVE-2019-9518 HTTP/2: flood using empty frames results in excessive resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nodejs:10-8000020190911085529.f8e95b4e","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9511","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3932","RHSA-2019:2799","RHSA-2020:2067","RHSA-2019:2775","RHSA-2019:3041","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4021","RHSA-2019:2692","RHSA-2020:1445","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2020:3192","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741860","bugzilla_description":"CVE-2019-9511 HTTP/2: large amount of data requests leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","kiali-0:v1.0.6.redhat1-1.el7","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9516","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741864","bugzilla_description":"CVE-2019-9516 HTTP/2: 0-length headers lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9517","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:2893","RHSA-2019:3932","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2955","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741868","bugzilla_description":"CVE-2019-9517 HTTP/2: request for large response leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","httpd:2.4-8000020190829150747.f8e95b4e","nodejs:10-8000020190911085529.f8e95b4e","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9517.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10744","severity":"important","public_date":"2019-08-09T00:00:00Z","advisories":["RHSA-2020:2819","RHSA-2019:3024","RHSA-2020:2362"],"bugzilla":"1739497","bugzilla_description":"CVE-2019-10744 nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ovirt-web-ui-0:1.6.0-1.el7ev","servicemesh-grafana-0:6.2.2-36.el8","jaeger-0:v1.13.1.redhat7-1.el7","distributed-tracing/jaeger-query-rhel7:1.17.2-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10744.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2019-10747","severity":"moderate","public_date":"2019-06-20T00:00:00Z","advisories":[],"bugzilla":"1795479","bugzilla_description":"CVE-2019-10747 nodejs-set-value: prototype pollution in function set-value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10747.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-10746","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1795475","bugzilla_description":"CVE-2019-10746 nodejs-mixin-deep: prototype pollution in function mixin-deep","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10746.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-0188","severity":"moderate","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1719519","bugzilla_description":"CVE-2019-0188 camel-xmljson: XML external entity injection vulnerability inoutdated JSON-lib library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0188.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"5.8"},{"CVE":"CVE-2019-13173","severity":"moderate","public_date":"2019-05-15T00:00:00Z","advisories":[],"bugzilla":"1710570","bugzilla_description":"CVE-2019-13173 nodejs-fstream: File overwrite in fstream.DirWriter() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13173.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-5739","severity":"moderate","public_date":"2019-02-28T00:00:00Z","advisories":[],"bugzilla":"1690798","bugzilla_description":"CVE-2019-5739 nodejs: DoS with keep-alive HTTP connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5739.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-5737","severity":"low","public_date":"2019-02-28T00:00:00Z","advisories":["RHSA-2019:1821","RHSA-2019:2939"],"bugzilla":"1690808","bugzilla_description":"CVE-2019-5737 nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nodejs8-nodejs-0:8.16.0-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-8331","severity":"moderate","public_date":"2019-02-11T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2020:3936"],"bugzilla":"1686454","bugzilla_description":"CVE-2019-8331 bootstrap: XSS in the tooltip or popover data-template attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","ovirt-web-ui-0:1.6.0-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-16490","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1672396","bugzilla_description":"CVE-2018-16490 nodejs-mpath: prototype pollution in Object.prototype","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16490.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2018-16491","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1672400","bugzilla_description":"CVE-2018-16491 nodejs-extend: Prototype pollution in Object.prototype","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16491.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-12116","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:1821"],"bugzilla":"1660998","bugzilla_description":"CVE-2018-12116 nodejs: HTTP request splitting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["rh-nodejs8-nodejs-0:8.16.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"7.2"},{"CVE":"CVE-2018-12121","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:3497","RHSA-2019:2258","RHSA-2019:1821","RHSA-2019:2939"],"bugzilla":"1661002","bugzilla_description":"CVE-2018-12121 nodejs: Denial of Service with large HTTP headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["http-parser-0:2.8.0-5.el8","http-parser-0:2.7.1-8.el7","rh-nodejs8-nodejs-0:8.16.0-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12121.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12122","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:1821","RHSA-2019:2939"],"bugzilla":"1661005","bugzilla_description":"CVE-2018-12122 nodejs: Slowloris HTTP Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nodejs8-nodejs-0:8.16.0-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12122.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-12123","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:1821","RHSA-2019:2939"],"bugzilla":"1661010","bugzilla_description":"CVE-2018-12123 nodejs: Hostname spoofing in URL parser for javascript protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs8-nodejs-0:8.16.0-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12123.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-12120","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1661016","bugzilla_description":"CVE-2018-12120 nodejs: Debugger port 5858 listens on any interface by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12120.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19587","severity":"low","public_date":"2018-11-26T00:00:00Z","advisories":[],"bugzilla":"1656205","bugzilla_description":"CVE-2018-19587 mongoose: SIGSEGV in mg_mqtt_add_session() in mongoose.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19587.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-16472","severity":"moderate","public_date":"2018-11-02T00:00:00Z","advisories":[],"bugzilla":"1649118","bugzilla_description":"CVE-2018-16472 nodejs-cached-path-relative: prototype pollution due to injected properties on Object.prototype","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16472.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16487","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":[],"bugzilla":"1671878","bugzilla_description":"CVE-2018-16487 lodash: Prototype pollution in utilities function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16487.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-5413","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":[],"bugzilla":"1649409","bugzilla_description":"CVE-2019-5413 nodejs-morgan: Unescaped input in compile() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5413.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-18764","severity":"low","public_date":"2018-10-26T00:00:00Z","advisories":[],"bugzilla":"1646631","bugzilla_description":"CVE-2018-18764 mongoose: heap-based buffer over-read in a parse_mqtt getu16 call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18764.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-18765","severity":"low","public_date":"2018-10-26T00:00:00Z","advisories":[],"bugzilla":"1646637","bugzilla_description":"CVE-2018-18765 mongoose: heap-based buffer over-read in mg_mqtt_next_subscribe_topic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18765.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-1000873","severity":"moderate","public_date":"2018-10-24T00:00:00Z","advisories":[],"bugzilla":"1665601","bugzilla_description":"CVE-2018-1000873 jackson-modules-java8: DoS due to an Improper Input Validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000873.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-7166","severity":"moderate","public_date":"2018-08-11T00:00:00Z","advisories":["RHSA-2018:2553"],"bugzilla":"1620215","bugzilla_description":"CVE-2018-7166 nodejs: Unintentional exposure of uninitialized memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rhoar-nodejs-1:10.9.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7166.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-12115","severity":"important","public_date":"2018-08-11T00:00:00Z","advisories":["RHSA-2018:2949","RHSA-2018:2944","RHSA-2018:3537","RHSA-2018:2553","RHSA-2018:2552"],"bugzilla":"1620219","bugzilla_description":"CVE-2018-12115 nodejs: Out of bounds (OOB) write via UCS-2 encoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["rh-nodejs6-nodejs-0:6.11.3-7.el7","rhoar-nodejs-1:8.11.4-2.el7","rh-nodejs6-nodejs-0:6.11.3-6.el6","rhoar-nodejs-1:10.9.0-1.el7","rh-nodejs8-nodejs-0:8.11.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-20676","severity":"moderate","public_date":"2018-08-10T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668082","bugzilla_description":"CVE-2018-20676 bootstrap: XSS in the tooltip data-viewport attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20676.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-20677","severity":"moderate","public_date":"2018-08-10T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668089","bugzilla_description":"CVE-2018-20677 bootstrap: XSS in the affix configuration target property","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-18869","severity":"moderate","public_date":"2018-07-31T00:00:00Z","advisories":["RHSA-2020:2625"],"bugzilla":"1611613","bugzilla_description":"CVE-2017-18869 nodejs-chownr: TOCTOU vulnerability in `chownr` function in chownr.js","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":["rh-nodejs8-nodejs-0:8.17.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18869.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2018-1000620","severity":"moderate","public_date":"2018-07-19T00:00:00Z","advisories":[],"bugzilla":"1608153","bugzilla_description":"CVE-2018-1000620 nodejs-cryptiles: Insecure randomness causes the randomDigits() function returns a pseudo-random data string biased to certain digits","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000620.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-7167","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":["RHSA-2018:2949"],"bugzilla":"1591006","bugzilla_description":"CVE-2018-7167 nodejs: Denial of Service by calling Buffer.fill() or Buffer.alloc() with specially crafted parameters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-835","affected_packages":["rh-nodejs8-nodejs-0:8.11.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7161","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":["RHSA-2018:2949"],"bugzilla":"1591013","bugzilla_description":"CVE-2018-7161 nodejs: denial of service (DoS) by causing a node server providing an http2 server to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nodejs8-nodejs-0:8.11.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7162","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":[],"bugzilla":"1591018","bugzilla_description":"CVE-2018-7162 nodejs: denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7162.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7164","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":[],"bugzilla":"1591023","bugzilla_description":"CVE-2018-7164 nodejs: uncontrolled memory consumption when using the net.Socket as a stream","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-0732","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2019:1296","RHSA-2019:1543","RHSA-2018:2553","RHSA-2018:2552","RHSA-2018:3221"],"bugzilla":"1591100","bugzilla_description":"CVE-2018-0732 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-1:1.0.2k-16.el7","rhoar-nodejs-1:8.11.4-2.el7","rhoar-nodejs-1:10.9.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-16119","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588780","bugzilla_description":"CVE-2017-16119 nodejs-fresh: Regular expression denial of service when parsing crafted user input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16119.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16118","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588785","bugzilla_description":"CVE-2017-16118 nodejs-forwarded:  regular expression denial of service when parsing crafted user input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3717","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588799","bugzilla_description":"CVE-2018-3717 nodejs-connect: XSS due to a lack of validation of file in directory.js middleware","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3717.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2017-16005","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588846","bugzilla_description":"CVE-2017-16005 nodejs-http-signature: HTTP header forgery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-14040","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601614","bugzilla_description":"CVE-2018-14040 bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14042","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601617","bugzilla_description":"CVE-2018-14042 bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-11489","severity":"low","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1583399","bugzilla_description":"CVE-2018-11489 giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11490","severity":"low","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1583400","bugzilla_description":"CVE-2018-11490 giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20834","severity":"important","public_date":"2018-04-30T00:00:00Z","advisories":["RHSA-2019:1821"],"bugzilla":"1702338","bugzilla_description":"CVE-2018-20834 nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["rh-nodejs8-nodejs-0:8.16.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20834.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-16492","severity":"moderate","public_date":"2018-04-24T00:00:00Z","advisories":[],"bugzilla":"1608140","bugzilla_description":"CVE-2018-16492 nodejs-extend: Prototype pollution can allow attackers to modify object properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16492.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-3750","severity":"low","public_date":"2018-04-18T00:00:00Z","advisories":["RHSA-2020:2625"],"bugzilla":"1578246","bugzilla_description":"CVE-2018-3750 nodejs-deep-extend: Prototype pollution can allow attackers to modify object properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs8-nodejs-0:8.17.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2018-1000168","severity":"moderate","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366"],"bugzilla":"1565035","bugzilla_description":"CVE-2018-1000168 nghttp2: Null pointer dereference when too large ALTSVC frame is received","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000168.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-10196","severity":"moderate","public_date":"2018-04-05T00:00:00Z","advisories":[],"bugzilla":"1567245","bugzilla_description":"CVE-2019-10196 nodejs-http-proxy-agent: Denial of Service and data leak due to improper buffer sanitization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-3736","severity":null,"public_date":"2018-04-03T00:00:00Z","advisories":[],"bugzilla":"1576651","bugzilla_description":"CVE-2018-3736 nodejs-https-proxy-agent: Unsanitized options passed to Buffer() allow for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2015-9235","severity":"important","public_date":"2018-03-31T00:00:00Z","advisories":[],"bugzilla":"1584880","bugzilla_description":"CVE-2015-9235 nodejs-jsonwebtoken: verification step bypass with an altered token","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9235.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-5146","severity":"critical","public_date":"2018-03-16T00:00:00Z","advisories":["RHSA-2018:0649","RHSA-2018:0647","RHSA-2018:0549","RHSA-2018:0648","RHSA-2018:1058"],"bugzilla":"1557221","bugzilla_description":"CVE-2018-5146 Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvorbis-1:1.2.3-5.el6_9.1","libvorbis-1:1.3.3-8.el7.1","thunderbird-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el6_9","firefox-0:52.7.2-1.el6_9","firefox-0:52.7.2-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5146.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-3737","severity":"moderate","public_date":"2018-03-12T00:00:00Z","advisories":["RHSA-2020:2625"],"bugzilla":"1567228","bugzilla_description":"CVE-2018-3737 nodejs-sshpk: ReDoS when parsing crafted invalid public keys in lib/formats/ssh.js","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nodejs8-nodejs-0:8.17.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-7160","severity":"moderate","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2018:2949"],"bugzilla":"1561979","bugzilla_description":"CVE-2018-7160 nodejs: Inspector DNS rebinding vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs8-nodejs-0:8.11.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2018-7158","severity":"moderate","public_date":"2018-03-08T00:00:00Z","advisories":[],"bugzilla":"1561980","bugzilla_description":"CVE-2018-7158 nodejs: path module regular expression denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-7159","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2018:2949","RHSA-2019:2258"],"bugzilla":"1561981","bugzilla_description":"CVE-2018-7159 nodejs: HTTP parser allowed for spaces inside Content-Length header values","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs8-nodejs-0:8.11.4-1.el7","http-parser-0:2.7.1-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-13863","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":[],"bugzilla":"1550772","bugzilla_description":"CVE-2018-13863 nodejs-bson: Regular expression denial of service in decimal128.js","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-1109","severity":"low","public_date":"2018-02-19T00:00:00Z","advisories":[],"bugzilla":"1547272","bugzilla_description":"CVE-2018-1109 nodejs-braces: Regular Expression Denial of Service (ReDoS) in lib/parsers.js","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1109.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-1107","severity":"moderate","public_date":"2018-02-16T00:00:00Z","advisories":[],"bugzilla":"1546357","bugzilla_description":"CVE-2018-1107 nodejs-is-my-json-valid: ReDoS when validating JSON fields with email format","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1107.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-3721","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":[],"bugzilla":"1545884","bugzilla_description":"CVE-2018-3721 lodash: Prototype pollution in utilities function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3721.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2018-3728","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:1264","RHSA-2018:1263"],"bugzilla":"1545893","bugzilla_description":"CVE-2018-3728 hoek: Prototype pollution in utilities function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rhmap46/redis:2.8.21-40"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3728.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2018-3739","severity":"moderate","public_date":"2017-12-28T00:00:00Z","advisories":[],"bugzilla":"1727312","bugzilla_description":"CVE-2018-3739 nodejs-https-proxy-agent: Unsanitized options passed to Buffer() allow for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3739.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2017-15896","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1525106","bugzilla_description":"CVE-2017-15896 nodejs: Vulnerable to CVE-2017-3737 due to embedded OpenSSL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15896.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-15897","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1532534","bugzilla_description":"CVE-2017-15897 nodejs: Unitialized buffer due to incorrect encoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-14919","severity":"moderate","public_date":"2017-10-24T00:00:00Z","advisories":[],"bugzilla":"1516175","bugzilla_description":"CVE-2017-14919 nodejs: DoS via specific windowBits value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14919.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-18214","severity":"moderate","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1553413","bugzilla_description":"CVE-2017-18214 nodejs-moment: Regular expression denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-15010","severity":"moderate","public_date":"2017-09-05T00:00:00Z","advisories":["RHSA-2017:2912","RHSA-2017:2913","RHSA-2018:1264","RHSA-2018:1263"],"bugzilla":"1493989","bugzilla_description":"CVE-2017-15010 nodejs-tough-cookie: Regular expression denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rhmap46/mysql:5.5-28","rh-nodejs4-nodejs-tough-cookie-0:2.3.3-2.el7","rh-nodejs4-nodejs-tough-cookie-0:2.3.3-2.el6","rh-nodejs6-nodejs-tough-cookie-0:2.3.3-1.el6","rh-nodejs6-nodejs-tough-cookie-0:2.3.3-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-16138","severity":"moderate","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1500700","bugzilla_description":"CVE-2017-16138 nodejs-mime: Regular expression Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16138.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-16137","severity":"moderate","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1500705","bugzilla_description":"CVE-2017-16137 nodejs-debug: Regular expression Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-11499","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":["RHSA-2017:2908","RHSA-2017:3002"],"bugzilla":"1475327","bugzilla_description":"CVE-2017-11499 nodejs: Constant Hashtable Seeds vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-nodejs6-nodejs-0:6.11.3-2.el6","rh-nodejs4-nodejs-1:4.6.2-7.el6","rh-nodejs6-nodejs-0:6.11.3-2.el7","rh-nodejs4-nodejs-1:4.6.2-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11499.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-1000381","severity":"moderate","public_date":"2017-06-20T00:00:00Z","advisories":["RHSA-2017:2908"],"bugzilla":"1463132","bugzilla_description":"CVE-2017-1000381 c-ares: NAPTR parser out of bounds access","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-nodejs6-nodejs-0:6.11.3-2.el6","rh-nodejs6-nodejs-0:6.11.3-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000381.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-16014","severity":"moderate","public_date":"2017-04-11T00:00:00Z","advisories":[],"bugzilla":"1591872","bugzilla_description":"CVE-2017-16014 nodejs-http-proxy: DOS via improper error handling in middleware implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-18077","severity":"moderate","public_date":"2017-03-02T00:00:00Z","advisories":["RHSA-2020:2625"],"bugzilla":"1448380","bugzilla_description":"CVE-2017-18077 nodejs-brace-expansion: Regular expression denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs8-nodejs-0:8.17.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18077.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-1000048","severity":"moderate","public_date":"2017-03-01T00:00:00Z","advisories":["RHSA-2017:2672"],"bugzilla":"1427872","bugzilla_description":"CVE-2017-1000048 nodejs-qs: Prototype override protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs6-nodejs-qs-0:6.2.3-1.el7","rh-nodejs6-nodejs-qs-0:6.2.3-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5180","severity":"moderate","public_date":"2016-09-29T00:00:00Z","advisories":["RHSA-2017:0002"],"bugzilla":"1380463","bugzilla_description":"CVE-2016-5180 c-ares: Single byte out of buffer write","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-122","affected_packages":["rh-nodejs4-nodejs-0:4.6.2-4.el6","rh-nodejs4-nodejs-0:4.6.2-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-7099","severity":"important","public_date":"2016-09-28T00:00:00Z","advisories":["RHSA-2017:0002"],"bugzilla":"1379921","bugzilla_description":"CVE-2016-7099 nodejs: wildcard certificates not properly validated","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rh-nodejs4-nodejs-0:4.6.2-4.el6","rh-nodejs4-nodejs-0:4.6.2-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7099.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2016-6345","severity":"low","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372117","bugzilla_description":"CVE-2016-6345 RESTEasy: Insufficient use of random values in RESTEasy async jobs could lead to loss of data confidentiality","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-6346","severity":"moderate","public_date":"2016-09-01T00:00:00Z","advisories":["RHSA-2019:1222","RHSA-2018:0005","RHSA-2017:1675","RHSA-2017:1676","RHSA-2017:0517","RHSA-2017:0827","RHSA-2018:0002","RHSA-2017:0826","RHSA-2017:0829","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:0828","RHSA-2018:2143"],"bugzilla":"1372120","bugzilla_description":"CVE-2016-6346 RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6347","severity":"moderate","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372124","bugzilla_description":"CVE-2016-6347 RESTEasy: Use of the default exception handler in RESTEasy can lead to reflected XSS attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-6348","severity":"low","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372129","bugzilla_description":"CVE-2016-6348 RESTEasy: Use of JacksonJsonpInterceptor in RESTEasy can lead to Cross Site Script Inclusion attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5725","severity":"low","public_date":"2016-08-31T00:00:00Z","advisories":["RHSA-2017:3115"],"bugzilla":"1375941","bugzilla_description":"CVE-2016-5725 jsch: ChannelSftp path traversal vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5725.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-1000232","severity":"moderate","public_date":"2016-07-22T00:00:00Z","advisories":["RHSA-2016:2101","RHSA-2017:2912"],"bugzilla":"1359818","bugzilla_description":"CVE-2016-1000232 nodejs-tough-cookie: regular expression DoS via Cookie header with many semicolons","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["rh-nodejs4-nodejs-tough-cookie-0:2.3.3-2.el7","nodejs-tough-cookie-0:2.3.1-1.el7","rh-nodejs4-nodejs-tough-cookie-0:2.3.3-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000232.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-16042","severity":"important","public_date":"2016-07-21T00:00:00Z","advisories":[],"bugzilla":"1585953","bugzilla_description":"CVE-2017-16042 nodejs-growl: Does not properly sanitize input before passing it to exec","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-10735","severity":"moderate","public_date":"2016-06-27T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668097","bugzilla_description":"CVE-2016-10735 bootstrap: XSS in the data-target attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-1000025","severity":"moderate","public_date":"2016-06-24T00:00:00Z","advisories":[],"bugzilla":"1351230","bugzilla_description":"CVE-2016-1000025 nodejs-ws: DoS due to excessively large websocket message","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000025.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-10541","severity":"important","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1588519","bugzilla_description":"CVE-2016-10541 nodejs-shell-quote: Command Injection via bash escape characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10541.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2016-1000023","severity":"moderate","public_date":"2016-06-20T00:00:00Z","advisories":["RHSA-2016:1583","RHSA-2016:1582","RHSA-2016:1605"],"bugzilla":"1348509","bugzilla_description":"CVE-2016-1000023 nodejs-minimatch: Regular expression denial-of-service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["nodejs-minimatch-0:3.0.2-1.el7","rh-nodejs4-nodejs-minimatch-0:3.0.2-1.el7","nodejs010-nodejs-minimatch-0:3.0.2-1.el6","rh-nodejs4-nodejs-minimatch-0:3.0.2-1.el6","nodejs010-nodejs-minimatch-0:3.0.2-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-1000022","severity":"moderate","public_date":"2016-06-16T00:00:00Z","advisories":["RHSA-2016:1605"],"bugzilla":"1347677","bugzilla_description":"CVE-2016-1000022 nodejs-negotiator: Regular expression denial-of-service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["nodejs-negotiator-0:0.6.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000022.json"},{"CVE":"CVE-2016-5325","severity":"low","public_date":"2016-06-13T00:00:00Z","advisories":["RHSA-2016:2101","RHSA-2017:0002"],"bugzilla":"1346910","bugzilla_description":"CVE-2016-5325 nodejs: reason argument in ServerResponse#writeHead() not properly validated","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rh-nodejs4-nodejs-0:4.6.2-4.el6","rh-nodejs4-nodejs-0:4.6.2-4.el7","nodejs-0:0.10.47-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5325.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-1669","severity":"important","public_date":"2016-05-11T00:00:00Z","advisories":["RHSA-2017:0879","RHSA-2018:0336","RHSA-2016:1080","RHSA-2017:0881","RHSA-2017:0880","RHSA-2017:0882","RHSA-2017:0002"],"bugzilla":"1335449","bugzilla_description":"CVE-2016-1669 V8: integer overflow leading to buffer overflow in Zone::New","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["chromium-browser-0:50.0.2661.102-1.el6","rh-nodejs4-nodejs-0:4.6.2-4.el6","rh-nodejs4-nodejs-0:4.6.2-4.el7","v8-1:3.14.5.10-19.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1669.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-3977","severity":"low","public_date":"2016-04-04T00:00:00Z","advisories":[],"bugzilla":"1325771","bugzilla_description":"CVE-2016-3977 giflib: heap buffer overflow in gif2rgb","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3977.json"},{"CVE":"CVE-2016-3956","severity":"moderate","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1328413","bugzilla_description":"CVE-2016-3956 npm: bearer token leak to non-registry hosts","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3956.json"},{"CVE":"CVE-2015-8851","severity":"moderate","public_date":"2016-03-30T00:00:00Z","advisories":["RHBA-2016:1343"],"bugzilla":"1327056","bugzilla_description":"CVE-2015-8851 nodejs-node-uuid: insecure entropy source - Math.random()","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8851.json"},{"CVE":"CVE-2016-3177","severity":"low","public_date":"2016-03-15T00:00:00Z","advisories":[],"bugzilla":"1314438","bugzilla_description":"CVE-2016-3177 giflib: Use-after-free in gifcolor utility","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3177.json"},{"CVE":"CVE-2016-2086","severity":"moderate","public_date":"2016-02-09T00:00:00Z","advisories":[],"bugzilla":"1306200","bugzilla_description":"CVE-2016-2086 nodejs: Request smuggling vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2086.json"},{"CVE":"CVE-2016-2216","severity":"moderate","public_date":"2016-02-09T00:00:00Z","advisories":[],"bugzilla":"1306203","bugzilla_description":"CVE-2016-2216 nodejs: Response splitting vulnerability using Unicode characters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2216.json"},{"CVE":"CVE-2016-4055","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1304645","bugzilla_description":"CVE-2016-4055 moment.js: regular expression denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4055.json"},{"CVE":"CVE-2016-2515","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1309721","bugzilla_description":"CVE-2016-2515 nodejs-hawk: Long headers or URIs can cause minor DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2515.json"},{"CVE":"CVE-2017-16023","severity":"moderate","public_date":"2015-12-23T00:00:00Z","advisories":[],"bugzilla":"1445292","bugzilla_description":"CVE-2017-16023 nodejs-decamelize: Regular expression Denial-of-Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-7555","severity":"moderate","public_date":"2015-12-21T00:00:00Z","advisories":[],"bugzilla":"1290785","bugzilla_description":"CVE-2015-7555 giflib: Heap-based buffer overflow in giffix utility","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7555.json"},{"CVE":"CVE-2015-8027","severity":"moderate","public_date":"2015-11-25T00:00:00Z","advisories":[],"bugzilla":"1285771","bugzilla_description":"CVE-2015-8027 nodejs: unspecified denial of service vulnerability","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8027.json"},{"CVE":"CVE-2015-6764","severity":"low","public_date":"2015-11-25T00:00:00Z","advisories":["RHSA-2015:2545"],"bugzilla":"1285774","bugzilla_description":"CVE-2015-6764 v8: unspecified out-of-bounds access vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["chromium-browser-0:47.0.2526.73-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6764.json"},{"CVE":"CVE-2017-16026","severity":"low","public_date":"2015-11-16T00:00:00Z","advisories":[],"bugzilla":"1588833","bugzilla_description":"CVE-2017-16026 nodejs-request: Remote Memory Exposure when a multipart request is made","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16026.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-8315","severity":"moderate","public_date":"2015-10-24T00:00:00Z","advisories":[],"bugzilla":"1329552","bugzilla_description":"CVE-2015-8315 nodejs-ms: regular expression denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8315.json"},{"CVE":"CVE-2015-7384","severity":"low","public_date":"2015-10-01T00:00:00Z","advisories":[],"bugzilla":"1268791","bugzilla_description":"CVE-2015-7384 nodejs: unspecified DoS vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7384.json"},{"CVE":"CVE-2015-6748","severity":"moderate","public_date":"2015-08-27T00:00:00Z","advisories":["RHSA-2015:2560","RHSA-2015:2559"],"bugzilla":"1258310","bugzilla_description":"CVE-2015-6748 jsoup: XSS vulnerability related to incomplete tags at EOF","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6748.json"},{"CVE":"CVE-2015-5380","severity":"moderate","public_date":"2015-07-03T00:00:00Z","advisories":[],"bugzilla":"1239332","bugzilla_description":"CVE-2015-5380 nodejs: `Buffer` to UTF8 `String` conversion DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5380.json"},{"CVE":"CVE-2015-8855","severity":"moderate","public_date":"2015-04-03T00:00:00Z","advisories":[],"bugzilla":"1209496","bugzilla_description":"CVE-2015-8855 nodejs-semver: npm Regular Expression Denial of Service during package versions parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8855.json"},{"CVE":"CVE-2015-8860","severity":"moderate","public_date":"2015-03-27T00:00:00Z","advisories":[],"bugzilla":"1209501","bugzilla_description":"CVE-2015-8860 nodejs-tar: insecure processing of symbolic links during package processing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8860.json"},{"CVE":"CVE-2014-6393","severity":"moderate","public_date":"2015-03-15T00:00:00Z","advisories":[],"bugzilla":"1203190","bugzilla_description":"CVE-2014-6393 express: cross-site scripting via content-type header","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6393.json"},{"CVE":"CVE-2018-1002204","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":[],"bugzilla":"1584400","bugzilla_description":"CVE-2018-1002204 nodejs-adm-zip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002204.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2014-6394","severity":"low","public_date":"2014-09-12T00:00:00Z","advisories":[],"bugzilla":"1146063","bugzilla_description":"CVE-2014-6394 nodejs-send: directory traversal vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6394.json"},{"CVE":"CVE-2014-7191","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2016:1380"],"bugzilla":"1146054","bugzilla_description":"CVE-2014-7191 nodejs-qs: Denial-of-Service Memory Exhaustion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["nodejs010-nodejs-qs-0:0.6.5-5.el7","nodejs010-nodejs-qs-0:0.6.5-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7191.json"},{"CVE":"CVE-2016-1000236","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":[],"bugzilla":"1371409","bugzilla_description":"CVE-2016-1000236 nodejs-cookie-signature: Timing attack vulnerability","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000236.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2014-4616","severity":"moderate","public_date":"2014-05-19T00:00:00Z","advisories":["RHSA-2015:2101","RHEA-2014:1175","RHSA-2015:1064"],"bugzilla":"1112285","bugzilla_description":"CVE-2014-4616 python: missing boundary check in JSON module","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-129->CWE-119","affected_packages":["python-0:2.7.5-34.el7","python-simplejson-0:3.2.0-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4616.json"},{"CVE":"CVE-2013-6371","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":["RHSA-2014:0703"],"bugzilla":"1032311","bugzilla_description":"CVE-2013-6371 json-c: hash collision DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["json-c-0:0.11-4.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6371.json"},{"CVE":"CVE-2013-6370","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":["RHSA-2014:0703"],"bugzilla":"1032322","bugzilla_description":"CVE-2013-6370 json-c: buffer overflow if size_t is larger than int","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["json-c-0:0.11-4.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6370.json"},{"CVE":"CVE-2015-0278","severity":"moderate","public_date":"2014-02-10T00:00:00Z","advisories":[],"bugzilla":"1194651","bugzilla_description":"CVE-2015-0278 libuv: incorrect revocation order while relinquishing privileges","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0278.json"},{"CVE":"CVE-2013-5855","severity":"moderate","public_date":"2014-02-07T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2014:0910","RHSA-2015:0234","RHSA-2014:0896"],"bugzilla":"1065139","bugzilla_description":"CVE-2013-5855 Mojarra JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5855.json"},{"CVE":"CVE-2013-4450","severity":"moderate","public_date":"2013-10-18T00:00:00Z","advisories":["RHSA-2013:1842"],"bugzilla":"1021170","bugzilla_description":"CVE-2013-4450 NodeJS: HTTP Pipelining DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["nodejs010-nodejs-0:0.10.5-8.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4450.json"},{"CVE":"CVE-2013-3827","severity":"important","public_date":"2013-10-17T00:00:00Z","advisories":["RHSA-2014:0029"],"bugzilla":"1038898","bugzilla_description":"CVE-2013-3827 Mojarra JSF2: Multiple Information Disclosure flaws due to unsafe path traversal","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3827.json"},{"CVE":"CVE-2013-4116","severity":"low","public_date":"2013-07-08T00:00:00Z","advisories":[],"bugzilla":"983917","bugzilla_description":"CVE-2013-4116 npm: Insecure temporary directory generation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4116.json"},{"CVE":"CVE-2013-7370","severity":"moderate","public_date":"2013-07-01T00:00:00Z","advisories":[],"bugzilla":"1091166","bugzilla_description":"CVE-2013-7370 nodejs-connect: XSS via HTTP request with a crafted method containing JavaScript","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7370.json"},{"CVE":"CVE-2013-0269","severity":"moderate","public_date":"2013-02-11T00:00:00Z","advisories":["RHSA-2013:1185","RHSA-2013:0701","RHSA-2013:0686","RHSA-2013:1028","RHSA-2013:1147"],"bugzilla":"909029","bugzilla_description":"CVE-2013-0269 rubygem-json: Denial of Service and SQL Injection","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["rubygem-json-0:1.7.3-2.el6_3","ruby193-ruby-0:1.9.3.327-28.el6","rubygem-json-0:1.7.3-2.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0269.json"},{"CVE":"CVE-2011-4358","severity":"important","public_date":"2011-11-17T00:00:00Z","advisories":[],"bugzilla":"757980","bugzilla_description":"CVE-2011-4358 Mojarra 2 EL injection: includeViewParameters re-evaluates param/model values as EL expressions","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4358.json"},{"CVE":"CVE-2011-2729","severity":"important","public_date":"2011-08-12T00:00:00Z","advisories":["RHSA-2011:1292","RHSA-2011:1291"],"bugzilla":"730400","bugzilla_description":"CVE-2011-2729 jakarta-commons-daemon: jsvc does not drop capabilities allowing access to files and directories owned by the superuser","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jakarta-commons-daemon-jsvc-1:1.0.5-1.5.patch01.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2729.json"},{"CVE":"CVE-2009-0689","severity":"critical","public_date":"2009-11-20T00:00:00Z","advisories":["RHSA-2014:0311","RHSA-2014:0312","RHSA-2009:1601","RHSA-2010:0154","RHSA-2010:0153","RHSA-2009:1531","RHSA-2009:1530"],"bugzilla":"539784","bugzilla_description":"CVE-2009-0689 array index error in dtoa implementation of many products","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["php-0:5.1.6-40.el5_9.2","seamonkey-0:1.0.9-50.el4_8","php-0:5.1.6-23.6.el5_3","php-0:5.1.6-27.el5_6.7","kdelibs-6:3.3.1-17.el4_8.1","php-0:5.1.6-44.el5_10","kdelibs-6:3.5.4-25.el5_4.1","thunderbird-0:2.0.0.24-2.el5_4","seamonkey-0:1.0.9-0.47.el3","thunderbird-0:1.5.0.12-25.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0689.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/json-c_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/json-c_security_api_results.json
new file mode 100644
index 0000000..707475e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/json-c_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12762","severity":"moderate","public_date":"2020-05-02T00:00:00Z","advisories":[],"bugzilla":"1835253","bugzilla_description":"CVE-2020-12762 json-c: integer overflow and out-of-bounds write via a large JSON file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12762.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2013-6371","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":["RHSA-2014:0703"],"bugzilla":"1032311","bugzilla_description":"CVE-2013-6371 json-c: hash collision DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["json-c-0:0.11-4.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6371.json"},{"CVE":"CVE-2013-6370","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":["RHSA-2014:0703"],"bugzilla":"1032322","bugzilla_description":"CVE-2013-6370 json-c: buffer overflow if size_t is larger than int","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["json-c-0:0.11-4.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6370.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/json-glib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/json-glib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/json-glib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/json-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/json-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/json-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jsr-311_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jsr-311_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jsr-311_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jss_security_api_results.json
new file mode 100644
index 0000000..bcc1c2a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jss_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14823","severity":"important","public_date":"2019-10-14T12:00:00Z","advisories":["RHSA-2019:3225","RHSA-2019:3067"],"bugzilla":"1747435","bugzilla_description":"CVE-2019-14823 JSS: OCSP policy \"Leaf and Chain\" implicitly trusts the root certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["jss-0:4.4.4-6.el7_6","jss-0:4.4.6-3.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/junit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/junit_security_api_results.json
new file mode 100644
index 0000000..bad7339
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/junit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15250","severity":"low","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1887810","bugzilla_description":"CVE-2020-15250 junit4: TemporaryFolder is shared between all users across system which could result in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15250.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-1000411","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":[],"bugzilla":"1639388","bugzilla_description":"CVE-2018-1000411 jenkins-plugin-junit: CSRF due to URL not requiring POST requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000411.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-1000056","severity":"moderate","public_date":"2018-02-05T00:00:00Z","advisories":[],"bugzilla":"1542723","bugzilla_description":"CVE-2018-1000056 jenkins-plugin-junit: XML External Entity (XXE) via a maliciously crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jvnet-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jvnet-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/jvnet-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/k3b-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/k3b-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/k3b-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/k3b-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/k3b-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/k3b-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/k3b_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/k3b_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/k3b_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kabi-yum-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kabi-yum-plugins_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kabi-yum-plugins_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kaccessible-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kaccessible-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kaccessible-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kaccessible_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kaccessible_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kaccessible_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-art-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-art-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-art-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-book-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-book-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-book-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-decorative-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-decorative-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-decorative-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-digital-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-digital-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-digital-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-farsi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-farsi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-farsi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-letter-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-letter-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-letter-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-naskh-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-naskh-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-naskh-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-office-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-office-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-office-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-one-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-one-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-one-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-pen-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-pen-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-pen-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-poster-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-poster-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-poster-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-qurn-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-qurn-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-qurn-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-screen-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-screen-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-screen-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-title-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-title-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-title-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-titlel-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-titlel-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kacst-titlel-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kactivities_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kactivities_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kactivities_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kamera_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kamera_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kamera_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kate-part_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kate-part_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kate-part_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kbd-legacy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kbd-legacy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kbd-legacy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kbd-misc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kbd-misc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kbd-misc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kbd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kbd_security_api_results.json
new file mode 100644
index 0000000..99fba66
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kbd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-0460","severity":"moderate","public_date":"2011-04-18T00:00:00Z","advisories":[],"bugzilla":"722876","bugzilla_description":"CVE-2011-0460 kbd: /etc/init.d/kbd dumps state to /dev/shm/defkeymap.map on shutdown","cvss_score":6.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0460.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcalc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcalc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcalc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcharselect_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcharselect_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcharselect_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcm-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcm-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcm-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcm_colors_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcm_colors_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcm_colors_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcm_touchpad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcm_touchpad_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcm_touchpad_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcolorchooser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcolorchooser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcolorchooser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcoloredit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcoloredit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kcoloredit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-base-artwork_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-base-artwork_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-base-artwork_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-baseapps-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-baseapps-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-baseapps-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-baseapps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-baseapps_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-baseapps_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-l10n_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-l10n_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-l10n_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-plasma-networkmanagement-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-plasma-networkmanagement-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-plasma-networkmanagement-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-plasma-networkmanagement_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-plasma-networkmanagement_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-plasma-networkmanagement_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-print-manager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-print-manager_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-print-manager_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-runtime-drkonqi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-runtime-drkonqi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-runtime-drkonqi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-runtime-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-runtime-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-runtime-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-runtime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-runtime_security_api_results.json
new file mode 100644
index 0000000..b4da5bd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-runtime_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-6791","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1543457","bugzilla_description":"CVE-2018-6791 kde-runtime: Arbitrary command execution in the removable device notifier","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6791.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2014-8600","severity":"low","public_date":"2014-11-13T00:00:00Z","advisories":[],"bugzilla":"1164293","bugzilla_description":"CVE-2014-8600 kwebkitpart, kde-runtime: Insufficient Input Validation By IO Slaves and Webkit Part","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8600.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings-ksplash_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings-ksplash_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings-ksplash_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings-plasma_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings-plasma_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings-plasma_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings-pulseaudio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings-pulseaudio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings-pulseaudio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-settings_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-style-oxygen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-style-oxygen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-style-oxygen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-workspace-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-workspace-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-workspace-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-workspace-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-workspace-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-workspace-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-workspace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-workspace_security_api_results.json
new file mode 100644
index 0000000..5e0873d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kde-workspace_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-6790","severity":"low","public_date":"2018-02-08T00:00:00Z","advisories":["RHSA-2019:2141"],"bugzilla":"1543454","bugzilla_description":"CVE-2018-6790 kde-workspace: Missing sanitization of notifications allows to leak client IP address via IMG element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-200","affected_packages":["kde-workspace-0:4.11.19-13.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-1308","severity":"low","public_date":"2015-01-16T00:00:00Z","advisories":[],"bugzilla":"1183710","bugzilla_description":"CVE-2015-1308 kde-workspace: X11 clients can eavesdrop input events while screen is locked","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-807->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1308.json"},{"CVE":"CVE-2014-8651","severity":"moderate","public_date":"2014-11-04T00:00:00Z","advisories":[],"bugzilla":"1163778","bugzilla_description":"CVE-2014-8651 kde-workspace: arbitrary code execution and local privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8651.json"},{"CVE":"CVE-2013-4133","severity":"low","public_date":"2013-07-16T00:00:00Z","advisories":[],"bugzilla":"985362","bugzilla_description":"CVE-2013-4133 kde-workspace: DoS due memory leak in plasma desktop when handling blinking system tray icons","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4133.json"},{"CVE":"CVE-2013-4132","severity":"low","public_date":"2013-06-29T00:00:00Z","advisories":[],"bugzilla":"985355","bugzilla_description":"CVE-2013-4132 kde-workspace: NULL pointer dereference in KDM and KCheckPass when glibc 2.17 or FIPS-140 enabled system used","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4132.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeaccessibility_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeaccessibility_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeaccessibility_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeadmin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeadmin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeadmin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeartwork-screensavers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeartwork-screensavers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeartwork-screensavers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-strigi-analyzer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-strigi-analyzer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-strigi-analyzer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-thumbnailers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-thumbnailers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdegraphics-thumbnailers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs-ktexteditor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs-ktexteditor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs-ktexteditor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs_security_api_results.json
new file mode 100644
index 0000000..ce31d69
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdelibs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14744","severity":"important","public_date":"2019-08-12T00:00:00Z","advisories":["RHSA-2020:2833","RHSA-2019:2606"],"bugzilla":"1740138","bugzilla_description":"CVE-2019-14744 kdelibs: malicious desktop files and configuration files lead to code execution with minimal user interaction","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-454","affected_packages":["kdelibs-6:4.14.8-11.el7_7","kdelibs-6:4.14.8-8.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14744.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-8422","severity":"important","public_date":"2017-05-10T00:00:00Z","advisories":["RHSA-2017:1264"],"bugzilla":"1449647","bugzilla_description":"CVE-2017-8422 kauth: service invoking dbus is not properly checked and allows local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":["kdelibs-6:4.14.8-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8422.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-6410","severity":"low","public_date":"2017-02-28T00:00:00Z","advisories":[],"bugzilla":"1427808","bugzilla_description":"CVE-2017-6410 kf5-kio, kdelibs: Information Leak when accessing https when using a malicious PAC file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6410.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2015-7543","severity":"moderate","public_date":"2015-12-07T00:00:00Z","advisories":[],"bugzilla":"1280543","bugzilla_description":"CVE-2015-7543 arts,kdelibs3: Use of mktemp(3) allows attacker to hijack the IPC","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7543.json"},{"CVE":"CVE-2014-3494","severity":"moderate","public_date":"2014-06-17T00:00:00Z","advisories":[],"bugzilla":"1111022","bugzilla_description":"CVE-2014-3494 kdelibs: POP3 kioslave silently accepted invalid SSL certificates","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3494.json"},{"CVE":"CVE-2013-2213","severity":null,"public_date":"2013-06-26T00:00:00Z","advisories":[],"bugzilla":"978243","bugzilla_description":"CVE-2013-2213 KDE KRandom::random() CWE-334: Small Space of Random Values","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2213.json"},{"CVE":"CVE-2013-2074","severity":"low","public_date":"2013-05-06T00:00:00Z","advisories":[],"bugzilla":"961981","bugzilla_description":"CVE-2013-2074 kdelibs: prints passwords contained in HTTP URLs in error messages","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2074.json"},{"CVE":"CVE-2012-4513","severity":"low","public_date":"2012-10-30T00:00:00Z","advisories":["RHSA-2012:1416","RHSA-2012:1418"],"bugzilla":"865741","bugzilla_description":"CVE-2012-4513 kdelibs: Heap-based buffer over-read when calculating dimensions of the canvas within the scale loop","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["kdelibs-6:4.3.4-14.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4513.json"},{"CVE":"CVE-2012-4512","severity":"critical","public_date":"2012-10-30T00:00:00Z","advisories":["RHSA-2012:1416","RHSA-2012:1418"],"bugzilla":"865779","bugzilla_description":"CVE-2012-4512 kdelibs: Heap-based buffer overflow when parsing location of a font face source","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["kdelibs-6:4.3.4-14.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4512.json"},{"CVE":"CVE-2012-4515","severity":"important","public_date":"2012-10-30T00:00:00Z","advisories":[],"bugzilla":"865831","bugzilla_description":"CVE-2012-4515 kdelibs: Use-after-free when context menu being used whilst the document DOM is being changed from within JavaScript","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4515.json"},{"CVE":"CVE-2012-4514","severity":"low","public_date":"2012-10-30T00:00:00Z","advisories":[],"bugzilla":"869681","bugzilla_description":"CVE-2012-4514 kdelibs (khtml): NULL pointer dereference when trying to reuse a frame with null part","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4514.json"},{"CVE":"CVE-2011-3365","severity":"moderate","public_date":"2011-10-03T00:00:00Z","advisories":["RHSA-2011:1385","RHSA-2011:1364"],"bugzilla":"743054","bugzilla_description":"CVE-2011-3365 kdelibs: input validation failure in KSSL","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["kdelibs3-0:3.5.10-24.el6_1.1","kdelibs-6:3.5.4-26.el5_7.1","kdelibs-6:3.3.1-18.el4","kdelibs-6:4.3.4-11.el6_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3365.json"},{"CVE":"CVE-2011-1168","severity":"moderate","public_date":"2011-04-11T00:00:00Z","advisories":["RHSA-2011:0464"],"bugzilla":"695398","bugzilla_description":"CVE-2011-1168 kdelibs: partially universal XSS in Konqueror error pages","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["kdelibs-6:4.3.4-11.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1168.json"},{"CVE":"CVE-2011-1094","severity":"moderate","public_date":"2011-01-31T00:00:00Z","advisories":["RHSA-2011:0464"],"bugzilla":"632114","bugzilla_description":"CVE-2011-1094 kdelibs: SSL certificate for IP address accepted as valid for hosts that resolve to the IP","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["kdelibs-6:4.3.4-11.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1094.json"},{"CVE":"CVE-2009-0689","severity":"critical","public_date":"2009-11-20T00:00:00Z","advisories":["RHSA-2014:0311","RHSA-2014:0312","RHSA-2009:1601","RHSA-2010:0154","RHSA-2010:0153","RHSA-2009:1531","RHSA-2009:1530"],"bugzilla":"539784","bugzilla_description":"CVE-2009-0689 array index error in dtoa implementation of many products","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["php-0:5.1.6-40.el5_9.2","seamonkey-0:1.0.9-50.el4_8","php-0:5.1.6-23.6.el5_3","php-0:5.1.6-27.el5_6.7","kdelibs-6:3.3.1-17.el4_8.1","php-0:5.1.6-44.el5_10","kdelibs-6:3.5.4-25.el5_4.1","thunderbird-0:2.0.0.24-2.el5_4","seamonkey-0:1.0.9-0.47.el3","thunderbird-0:1.5.0.12-25.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0689.json"},{"CVE":"CVE-2009-2702","severity":"low","public_date":"2009-09-01T00:00:00Z","advisories":[],"bugzilla":"520661","bugzilla_description":"CVE-2009-2702 kdelibs: kssl incorrect verification of SSL certificate with NUL in subjectAltName","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-626","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2702.json"},{"CVE":"CVE-2009-1690","severity":"critical","public_date":"2009-06-25T00:00:00Z","advisories":["RHSA-2009:1127"],"bugzilla":"505571","bugzilla_description":"CVE-2009-1690 kdelibs: KHTML Incorrect handling <head> element content once the <head> element was removed (DoS, ACE)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["kdelibs-6:3.3.1-14.el4","kdelibs-6:3.5.4-22.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1690.json"},{"CVE":"CVE-2009-1687","severity":"critical","public_date":"2009-06-25T00:00:00Z","advisories":["RHSA-2009:1127"],"bugzilla":"506453","bugzilla_description":"CVE-2009-1687 kdelibs: Integer overflow in KJS JavaScript garbage collector","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["kdelibs-6:3.3.1-14.el4","kdelibs-6:3.5.4-22.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1687.json"},{"CVE":"CVE-2009-1698","severity":"important","public_date":"2009-06-25T00:00:00Z","advisories":["RHSA-2009:1128","RHSA-2009:1127"],"bugzilla":"506469","bugzilla_description":"CVE-2009-1698 kdelibs: KHTML CSS parser - incorrect handling CSS \"style\" attribute content (DoS, ACE)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["kdelibs-6:3.1.3-6.13","kdelibs-6:3.3.1-14.el4","kdelibs-6:3.5.4-22.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1698.json"},{"CVE":"CVE-2007-4224","severity":"low","public_date":"2007-08-07T00:00:00Z","advisories":["RHSA-2007:0905","RHSA-2007:0909"],"bugzilla":"251708","bugzilla_description":"CVE-2007-4224 URL spoof in address bar","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdebase-6:3.5.4-15.el5","kdelibs-6:3.3.1-9.el4","kdelibs-6:3.5.4-13.el5","kdebase-6:3.3.1-6.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4224.json"},{"CVE":"CVE-2007-3820","severity":"low","public_date":"2007-07-14T00:00:00Z","advisories":["RHSA-2007:0905","RHSA-2007:0909"],"bugzilla":"248537","bugzilla_description":"CVE-2007-3820 Spoofing of URI possible in Konqueror's address bar","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdebase-6:3.5.4-15.el5","kdelibs-6:3.3.1-9.el4","kdelibs-6:3.5.4-13.el5","kdebase-6:3.3.1-6.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3820.json"},{"CVE":"CVE-2007-0242","severity":"moderate","public_date":"2007-03-29T00:00:00Z","advisories":["RHSA-2011:1324","RHSA-2007:0883","RHSA-2007:0909"],"bugzilla":"234633","bugzilla_description":"CVE-2007-0242 QT UTF8 improper character expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["qt-1:3.3.6-23.el5","kdelibs-6:3.3.1-9.el4","kdelibs-6:3.5.4-13.el5","qt-1:3.3.3-13.RHEL4","qt-1:2.3.1-14.EL2","qt-1:3.1.2-17.RHEL3","qt4-0:4.2.1-1.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0242.json"},{"CVE":"CVE-2007-1564","severity":"low","public_date":"2007-03-22T00:00:00Z","advisories":["RHSA-2007:0909"],"bugzilla":"233592","bugzilla_description":"CVE-2007-1564 FTP protocol PASV design flaw affects konqueror","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdelibs-6:3.3.1-9.el4","kdelibs-6:3.5.4-13.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1564.json"},{"CVE":"CVE-2007-1308","severity":"low","public_date":"2007-03-04T00:00:00Z","advisories":["RHSA-2007:0909"],"bugzilla":"299891","bugzilla_description":"CVE-2007-1308 kdelibs KDE JavaScript denial of service (crash)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdelibs-6:3.3.1-9.el4","kdelibs-6:3.5.4-13.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1308.json"},{"CVE":"CVE-2007-0537","severity":"low","public_date":"2007-01-24T00:00:00Z","advisories":["RHSA-2007:0909"],"bugzilla":"229606","bugzilla_description":"CVE-2007-0537 konqueror XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kdelibs-6:3.3.1-9.el4","kdelibs-6:3.5.4-13.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0537.json"},{"CVE":"CVE-2006-4811","severity":"critical","public_date":"2006-10-13T23:06:00Z","advisories":["RHSA-2006:0725","RHSA-2006:0720"],"bugzilla":"1618204","bugzilla_description":"CVE-2006-4811 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdelibs-6:3.1.3-6.12","qt-1:3.1.2-14.RHEL3","kdelibs-6:3.3.1-6.RHEL4","qt-1:2.3.1-12.EL2","kdelibs-6:2.2.2-21.EL2","qt-1:3.3.3-10.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4811.json"},{"CVE":"CVE-2006-0019","severity":"critical","public_date":"2006-01-19T17:00:00Z","advisories":["RHSA-2006:0184"],"bugzilla":"1617866","bugzilla_description":"CVE-2006-0019 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdelibs-6:3.3.1-3.14"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0019.json"},{"CVE":"CVE-2005-1920","severity":"moderate","public_date":"2005-07-18T00:00:00Z","advisories":["RHSA-2005:612"],"bugzilla":"1617675","bugzilla_description":"CVE-2005-1920 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdelibs-6:3.3.1-3.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1920.json"},{"CVE":"CVE-2005-1046","severity":"important","public_date":"2005-03-24T00:00:00Z","advisories":["RHSA-2005:393"],"bugzilla":"1617602","bugzilla_description":"CVE-2005-1046 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdelibs-6:3.3.1-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1046.json"},{"CVE":"CVE-2005-0396","severity":"moderate","public_date":"2005-03-16T00:00:00Z","advisories":["RHSA-2005:325","RHSA-2005:307"],"bugzilla":"1617514","bugzilla_description":"CVE-2005-0396 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdelibs-6:3.3.1-3.6","kdelibs-6:3.1.3-6.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0396.json"},{"CVE":"CVE-2005-0237","severity":"important","public_date":"2005-02-07T00:00:00Z","advisories":["RHSA-2005:325"],"bugzilla":"1617503","bugzilla_description":"CVE-2005-0237 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdelibs-6:3.3.1-3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0237.json"},{"CVE":"CVE-2005-0365","severity":"low","public_date":"2005-01-21T00:00:00Z","advisories":["RHSA-2005:325"],"bugzilla":"1617511","bugzilla_description":"CVE-2005-0365 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdelibs-6:3.3.1-3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0365.json"},{"CVE":"CVE-2004-1145","severity":"important","public_date":"2004-12-20T00:00:00Z","advisories":["RHSA-2005:065"],"bugzilla":"1617380","bugzilla_description":"CVE-2004-1145 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdelibs-6:3.3.1-3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1145.json"},{"CVE":"CVE-2004-1165","severity":null,"public_date":"2004-12-05T00:00:00Z","advisories":["RHSA-2005:065","RHSA-2005:009"],"bugzilla":"1617385","bugzilla_description":"CVE-2004-1165 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdelibs-6:3.3.1-3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1165.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kdnssd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kdnssd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kdnssd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kget-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kget-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kget-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kget_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kget_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kget_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kopete-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kopete-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kopete-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kopete-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kopete-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kopete-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kopete_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kopete_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-kopete_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krdc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krdc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krdc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krdc-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krdc-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krdc-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krdc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krdc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krdc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krfb-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krfb-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krfb-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krfb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krfb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdenetwork-krfb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-runtime-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-runtime-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-runtime-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-runtime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-runtime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim-runtime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim_security_api_results.json
new file mode 100644
index 0000000..d57e64e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepim_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-17688","severity":"moderate","public_date":"2018-05-14T00:00:00Z","advisories":[],"bugzilla":"1577906","bugzilla_description":"CVE-2017-17688 OpenPGP: CFB gadget attacks allows to exfiltrate plaintext out of encrypted emails","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17688.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-17689","severity":"moderate","public_date":"2018-05-14T00:00:00Z","advisories":[],"bugzilla":"1577909","bugzilla_description":"CVE-2017-17689 S/MIME: CBC gadget attacks allows to exfiltrate plaintext out of encrypted emails","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17689.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-9604","severity":"low","public_date":"2017-06-13T00:00:00Z","advisories":[],"bugzilla":"1461756","bugzilla_description":"CVE-2017-9604 kmail: Send Later with Delay bypasses OpenPGP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9604.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-7966","severity":"low","public_date":"2016-10-04T00:00:00Z","advisories":[],"bugzilla":"1382286","bugzilla_description":"CVE-2016-7966 kdepim: HTML injection in plain text viewer of KMail","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7966.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-7967","severity":"moderate","public_date":"2016-10-04T00:00:00Z","advisories":[],"bugzilla":"1382288","bugzilla_description":"CVE-2016-7967 kdepim: JavaScript access to local and remote URLs in Kmail","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7967.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-7968","severity":"moderate","public_date":"2016-10-04T00:00:00Z","advisories":[],"bugzilla":"1382293","bugzilla_description":"CVE-2016-7968 kdepim: JavaScript execution in HTML Mails","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7968.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2014-8878","severity":"moderate","public_date":"2014-10-24T00:00:00Z","advisories":[],"bugzilla":"1243777","bugzilla_description":"CVE-2014-8878 kdepim: KMail attachments are not encrypted when \"automatic encryption\" is selected","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8878.json"},{"CVE":"CVE-2012-3413","severity":"moderate","public_date":"2012-07-02T00:00:00Z","advisories":[],"bugzilla":"840626","bugzilla_description":"CVE-2012-3413 kdepim: message viewer defaults to enabling java, javascript, and plugins","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3413.json"},{"CVE":"CVE-2003-0988","severity":"important","public_date":"2004-01-14T00:00:00Z","advisories":["RHSA-2004:005","RHSA-2004:006"],"bugzilla":"1617117","bugzilla_description":"CVE-2003-0988 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdepim-6:3.1.3-3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0988.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs-akonadi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs-akonadi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs-akonadi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs-kxmlrpcclient_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs-kxmlrpcclient_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs-kxmlrpcclient_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdepimlibs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeplasma-addons-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeplasma-addons-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeplasma-addons-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeplasma-addons_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeplasma-addons_security_api_results.json
new file mode 100644
index 0000000..8826ee3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeplasma-addons_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-2120","severity":"low","public_date":"2013-05-28T00:00:00Z","advisories":[],"bugzilla":"969421","bugzilla_description":"CVE-2013-2120 kdeplasma-addons: Weak passwords generated by PasteMacroExpander","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2120.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kmtrace-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kmtrace-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kmtrace-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kmtrace-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kmtrace-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kmtrace-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kmtrace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kmtrace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kmtrace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kompare-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kompare-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kompare-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kompare-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kompare-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kompare-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kompare_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kompare_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-kompare_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-okteta-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-okteta-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-okteta-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-okteta-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-okteta-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-okteta-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-okteta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-okteta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdesdk-okteta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeutils-minimal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeutils-minimal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdeutils-minimal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kdf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keepalived_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keepalived_security_api_results.json
new file mode 100644
index 0000000..7b075ee
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keepalived_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19044","severity":"moderate","public_date":"2018-11-08T00:00:00Z","advisories":["RHSA-2019:2285"],"bugzilla":"1651863","bugzilla_description":"CVE-2018-19044 keepalived: Improper pathname validation allows for overwrite of arbitrary filenames via symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["keepalived-0:1.3.5-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19044.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-19045","severity":"moderate","public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1651866","bugzilla_description":"CVE-2018-19045 keepalived: Insecure permissions when creating new temporary files allows for leaking of sensitive data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19045.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-19046","severity":"moderate","public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1651869","bugzilla_description":"CVE-2018-19046 keepalived: Insecure use of temporary files allows attackers read sensitive information from pre-existing files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19046.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-19115","severity":"important","public_date":"2018-11-08T00:00:00Z","advisories":["RHSA-2019:0022","RHSA-2019:1792","RHSA-2019:1945"],"bugzilla":"1651871","bugzilla_description":"CVE-2018-19115 keepalived: Heap-based buffer overflow when parsing HTTP status codes allows for denial of service or possibly arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["keepalived-0:1.3.5-1.el7_4.1","keepalived-0:1.3.5-8.el7_6","keepalived-0:1.3.5-7.el7_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-abi-whitelists_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-abi-whitelists_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-abi-whitelists_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-bootwrapper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-bootwrapper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-bootwrapper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-debug-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-debug-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-debug-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-headers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-headers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-headers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-kdump-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-kdump-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-kdump-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-kdump_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-kdump_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-kdump_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-tools-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-tools-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-tools-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel_security_api_results.json
new file mode 100644
index 0000000..df5651c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kernel_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-25656","severity":"moderate","public_date":"2020-10-16T00:00:00Z","advisories":[],"bugzilla":"1888726","bugzilla_description":"CVE-2020-25656 kernel: use-after-free in read in vt_do_kdgkb_ioctl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25656.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12351","severity":"important","public_date":"2020-10-14T00:00:00Z","advisories":["RHSA-2020:4279","RHSA-2020:4278","RHSA-2020:4289","RHSA-2020:4277","RHSA-2020:4288","RHSA-2020:4276","RHSA-2020:4287","RHSA-2020:4286","RHSA-2020:4281","RHSA-2020:4280"],"bugzilla":"1886521","bugzilla_description":"CVE-2020-12351 kernel: net: bluetooth: type confusion while processing AMP packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["kernel-0:4.18.0-147.32.1.el8_1","kernel-0:3.10.0-1062.37.1.el7","kernel-rt-0:4.18.0-193.28.1.rt13.77.el8_2","kernel-alt-0:4.14.0-115.32.1.el7a","kernel-0:3.10.0-1160.2.2.el7","kernel-0:4.18.0-193.28.1.el8_2","kernel-0:3.10.0-957.61.2.el7","kernel-rt-0:3.10.0-1160.2.2.rt56.1134.el7","kernel-0:3.10.0-693.77.1.el7","kernel-0:4.18.0-80.30.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12351.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12352","severity":"moderate","public_date":"2020-10-14T00:00:00Z","advisories":["RHSA-2020:4279","RHSA-2020:4278","RHSA-2020:4289","RHSA-2020:4277","RHSA-2020:4288","RHSA-2020:4276","RHSA-2020:4287","RHSA-2020:4286","RHSA-2020:4281","RHSA-2020:4280"],"bugzilla":"1886529","bugzilla_description":"CVE-2020-12352 kernel: net: bluetooth: information leak when processing certain AMP packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284->CWE-201","affected_packages":["kernel-0:4.18.0-147.32.1.el8_1","kernel-0:3.10.0-1062.37.1.el7","kernel-rt-0:4.18.0-193.28.1.rt13.77.el8_2","kernel-alt-0:4.14.0-115.32.1.el7a","kernel-0:3.10.0-1160.2.2.el7","kernel-0:4.18.0-193.28.1.el8_2","kernel-0:3.10.0-957.61.2.el7","kernel-rt-0:3.10.0-1160.2.2.rt56.1134.el7","kernel-0:3.10.0-693.77.1.el7","kernel-0:4.18.0-80.30.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12352.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-24490","severity":"moderate","public_date":"2020-10-14T00:00:00Z","advisories":[],"bugzilla":"1888449","bugzilla_description":"CVE-2020-24490 kernel: net: bluetooth: heap buffer overflow when processing extended advertising report events","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24490.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-16119","severity":"important","public_date":"2020-10-13T17:00:00Z","advisories":[],"bugzilla":"1886374","bugzilla_description":"CVE-2020-16119 kernel: DCCP CCID structure use-after-free may lead to DoS or code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16119.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-16120","severity":"moderate","public_date":"2020-10-13T17:00:00Z","advisories":[],"bugzilla":"1886387","bugzilla_description":"CVE-2020-16120 kernel: incorrect unprivileged overlayfs permission checking may lead to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16120.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2020-27194","severity":"moderate","public_date":"2020-10-08T00:00:00Z","advisories":[],"bugzilla":"1889477","bugzilla_description":"CVE-2020-27194 kernel: bounds tracking issue during use of 64-bit values in scalar32_min_max_or function in kernel/bpf/verifier.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27194.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2020-25641","severity":"moderate","public_date":"2020-09-30T00:24:00Z","advisories":[],"bugzilla":"1881424","bugzilla_description":"CVE-2020-25641 kernel: soft-lockups in iov_iter_copy_from_user_atomic() could result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25641.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-25643","severity":"moderate","public_date":"2020-09-25T00:00:00Z","advisories":[],"bugzilla":"1879981","bugzilla_description":"CVE-2020-25643 kernel: improper input validation in ppp_cp_parse_cr function leads to memory corruption and read overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25643.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2020-25603","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1877366","bugzilla_description":"CVE-2020-25603 xen: missing memory barriers when accessing/allocating an event channel (XSA-340)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25603.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-25595","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1877369","bugzilla_description":"CVE-2020-25595 xen: PCI passthrough code reading back hardware registers (XSA-337)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25595.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-25601","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1877378","bugzilla_description":"CVE-2020-25601 xen: lack of preemption in evtchn_reset() / evtchn_destroy() (XSA-344)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25601.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.0"},{"CVE":"CVE-2020-25604","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1877382","bugzilla_description":"CVE-2020-25604 xen: race when migrating timers between x86 HVM vCPU-s (XSA-336)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25604.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2020-25598","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1877383","bugzilla_description":"CVE-2020-25598 xen: missing unlock in XENMEM_acquire_resource error path (XSA-334)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25598.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-25597","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1879553","bugzilla_description":"CVE-2020-25597 xen: once valid event channels may not turn invalid (XSA-338)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25597.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-25599","severity":"important","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1879567","bugzilla_description":"CVE-2020-25599 xen: races with evtchn_reset function (XSA-343)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440->(CWE-125|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25599.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-25596","severity":"low","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1880137","bugzilla_description":"CVE-2020-25596 xen: x86 pv guest kernel DoS via SYSENTER (XSA-339)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25596.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2020-25600","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1880156","bugzilla_description":"CVE-2020-25600 xen: out of bounds event channels available to 32-bit x86 domains (XSA-342)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25600.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-25602","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1880158","bugzilla_description":"CVE-2020-25602 xen: x86 pv: Crash when handling guest access to MSR_MISC_ENABLE (XSA-333)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25602.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-25645","severity":"moderate","public_date":"2020-09-16T00:00:00Z","advisories":[],"bugzilla":"1883988","bugzilla_description":"CVE-2020-25645 kernel: Geneve/IPsec traffic may be unencrypted between two Geneve endpoints","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25645.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-14390","severity":"low","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1876788","bugzilla_description":"CVE-2020-14390 kernel: out-of-bounds write in fbcon_redraw_softback","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14390.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2020-26541","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1886285","bugzilla_description":"CVE-2020-26541 kernel: security bypass in certs/blacklist.c and certs/system_keyring.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26541.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-25285","severity":"moderate","public_date":"2020-09-13T00:00:00Z","advisories":[],"bugzilla":"1882591","bugzilla_description":"CVE-2020-25285 kernel: race condition between hugetlb sysctl handlers in mm/hugetlb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25285.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-25284","severity":"moderate","public_date":"2020-09-13T00:00:00Z","advisories":[],"bugzilla":"1882594","bugzilla_description":"CVE-2020-25284 kernel: incomplete permission checking for access to rbd devices","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25284.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2020-15802","severity":"moderate","public_date":"2020-09-10T14:00:00Z","advisories":[],"bugzilla":"1878021","bugzilla_description":"CVE-2020-15802 hardware: BLURtooth: \"Dual mode\" hardware using CTKD are vulnerable to key overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15802.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2020-25211","severity":"moderate","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877571","bugzilla_description":"CVE-2020-25211 kernel: Local buffer overflow in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25211.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-25212","severity":"moderate","public_date":"2020-09-09T00:00:00Z","advisories":["RHSA-2020:4279"],"bugzilla":"1877575","bugzilla_description":"CVE-2020-25212 kernel: TOCTOU mismatch in the NFS client code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":["kernel-alt-0:4.14.0-115.32.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25212.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-25221","severity":"moderate","public_date":"2020-09-08T00:00:00Z","advisories":[],"bugzilla":"1884341","bugzilla_description":"CVE-2020-25221 kernel: incorrect vsyscall page reference counting in get_gate_page function in mm/gup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25221.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-14386","severity":"important","public_date":"2020-09-03T00:00:00Z","advisories":["RHSA-2020:4289","RHSA-2020:4287","RHSA-2020:4286"],"bugzilla":"1875699","bugzilla_description":"CVE-2020-14386 kernel: memory corruption in net/packet/af_packet.c leads to elevation of privilege","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787->CWE-250","affected_packages":["kernel-0:4.18.0-147.32.1.el8_1","kernel-rt-0:4.18.0-193.28.1.rt13.77.el8_2","kernel-0:4.18.0-193.28.1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14386.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-25639","severity":"low","public_date":"2020-08-28T00:00:00Z","advisories":[],"bugzilla":"1876995","bugzilla_description":"CVE-2020-25639 kernel: NULL pointer dereference via nouveau ioctl can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25639.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-14385","severity":"important","public_date":"2020-08-25T09:00:00Z","advisories":["RHSA-2020:4289","RHSA-2020:4287","RHSA-2020:4286"],"bugzilla":"1874800","bugzilla_description":"CVE-2020-14385 kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":["kernel-0:4.18.0-147.32.1.el8_1","kernel-rt-0:4.18.0-193.28.1.rt13.77.el8_2","kernel-0:4.18.0-193.28.1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14385.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2020-26088","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1882508","bugzilla_description":"CVE-2020-26088 kernel: missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c allows local attackers to create raw sockets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26088.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-27152","severity":"moderate","public_date":"2020-08-02T00:00:00Z","advisories":[],"bugzilla":"1888886","bugzilla_description":"CVE-2020-27152 Kernel: KVM: host stack overflow due to lazy update IOAPIC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27152.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-10713","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:4115","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3273","RHSA-2020:3271","RHSA-2020:4172","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1825243","bugzilla_description":"CVE-2020-10713 grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787->CWE-78","affected_packages":["grub2-1:2.02-0.86.el7_8","fwupd-0:1.1.4-7.el8_2","fwupdate-0:12-6.el7_8","grub2-1:2.02-87.el8_2","shim-0:15-14.el8_2","shim-0:15-7.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10713.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-14331","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:4289","RHSA-2020:4286"],"bugzilla":"1858679","bugzilla_description":"CVE-2020-14331 kernel: kernel: buffer over write in vgacon_scroll","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:4.18.0-193.28.1.rt13.77.el8_2","kernel-0:4.18.0-193.28.1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14331.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2020-25220","severity":"moderate","public_date":"2020-07-22T00:00:00Z","advisories":[],"bugzilla":"1877920","bugzilla_description":"CVE-2020-25220 kernel: use-after-free because skcd->no_refcnt was not considered during the backport of CVE-2020-14356","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25220.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-0305","severity":"moderate","public_date":"2020-07-17T00:00:00Z","advisories":[],"bugzilla":"1860065","bugzilla_description":"CVE-2020-0305 kernel: possible use-after-free due to a race condition in cdev_get of char_dev.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0305.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-15852","severity":"moderate","public_date":"2020-07-16T00:00:00Z","advisories":[],"bugzilla":"1856441","bugzilla_description":"CVE-2020-15852 xen: Linux ioperm bitmap context switching issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15852.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-15564","severity":"moderate","public_date":"2020-07-07T12:00:00Z","advisories":[],"bugzilla":"1851470","bugzilla_description":"CVE-2020-15564 xen: missing alignment check in VCPUOP_register_vcpu_info leads to DoS (XSA-327)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15564.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-15563","severity":"moderate","public_date":"2020-07-07T12:00:00Z","advisories":[],"bugzilla":"1851471","bugzilla_description":"CVE-2020-15563 xen: inverted code paths in x86 dirty VRAM tracking leads to DoS (XSA-319)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15563.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2020-15567","severity":"moderate","public_date":"2020-07-07T12:00:00Z","advisories":[],"bugzilla":"1851472","bugzilla_description":"CVE-2020-15567 xen: non-atomic modification of live EPT PTE leads to DoS (XSA-328)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15567.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15566","severity":"moderate","public_date":"2020-07-07T12:00:00Z","advisories":[],"bugzilla":"1851474","bugzilla_description":"CVE-2020-15566 xen: incorrect error handling in event channel port allocation leads to DoS (XSA-317)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-392","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15566.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2020-15565","severity":"moderate","public_date":"2020-07-07T12:00:00Z","advisories":[],"bugzilla":"1851475","bugzilla_description":"CVE-2020-15565 xen: insufficient cache write-back under VT-d leads to DoS (XSA-321)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15565.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.9"},{"CVE":"CVE-2020-14416","severity":"moderate","public_date":"2020-06-18T00:00:00Z","advisories":[],"bugzilla":"1849926","bugzilla_description":"CVE-2020-14416 kernel: slcan : race over tty->disc_data can lead use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14416.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2020-10781","severity":"low","public_date":"2020-06-17T07:37:00Z","advisories":[],"bugzilla":"1847832","bugzilla_description":"CVE-2020-10781 kernel: zram sysfs resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10781.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-10774","severity":"low","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1846964","bugzilla_description":"CVE-2020-10774 kernel: possibility of memory disclosure when reading the file /proc/sys/kernel/rh_features","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10774.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-15780","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3218","RHSA-2020:3219","RHSA-2020:3228"],"bugzilla":"1852962","bugzilla_description":"CVE-2020-15780 kernel: lockdown: bypass through ACPI write via acpi_configfs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-193.14.3.rt13.67.el8_2","kernel-0:4.18.0-80.27.2.el8_0","kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.14.3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15780.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-0543","severity":"moderate","public_date":"2020-06-09T17:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1827165","bugzilla_description":"CVE-2020-0543 hw: Special Register Buffer Data Sampling (SRBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0543.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-10766","severity":"important","public_date":"2020-06-09T17:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845840","bugzilla_description":"CVE-2020-10766 kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10766.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10136","severity":"moderate","public_date":"2020-06-09T14:00:00Z","advisories":[],"bugzilla":"1829625","bugzilla_description":"CVE-2020-10136 kernel: IP-in-IP protocol routes arbitrary traffic by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10136.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10767","severity":"important","public_date":"2020-06-09T14:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845867","bugzilla_description":"CVE-2020-10767 kernel: Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10767.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10768","severity":"important","public_date":"2020-06-09T14:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845868","bugzilla_description":"CVE-2020-10768 kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10768.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-14305","severity":"moderate","public_date":"2020-06-09T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1850716","bugzilla_description":"CVE-2020-14305 kernel: memory corruption in Voice over IP nf_conntrack_h323 module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14305.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-13844","severity":"moderate","public_date":"2020-06-07T14:00:00Z","advisories":[],"bugzilla":"1848279","bugzilla_description":"CVE-2020-13844 kernel: ARM straight-line speculation vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13844.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-14314","severity":"moderate","public_date":"2020-06-05T16:45:00Z","advisories":[],"bugzilla":"1853922","bugzilla_description":"CVE-2020-14314 kernel: buffer uses out of index in ext3/4 filesystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14314.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-24394","severity":"moderate","public_date":"2020-06-05T00:00:00Z","advisories":[],"bugzilla":"1869141","bugzilla_description":"CVE-2020-24394 kernel: umask not applied on filesystem without ACL support","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24394.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2020-10757","severity":"important","public_date":"2020-06-04T09:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHBA-2020:3180","RHSA-2020:3598","RHSA-2020:3221","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:3041"],"bugzilla":"1842525","bugzilla_description":"CVE-2020-10757 kernel: kernel: DAX hugepages not considered during mremap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-1062.33.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10757.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-20810","severity":"moderate","public_date":"2020-06-03T00:00:00Z","advisories":[],"bugzilla":"1850249","bugzilla_description":"CVE-2019-20810 kernel: go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path, which causes a memory leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20810.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-15393","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":[],"bugzilla":"1852584","bugzilla_description":"CVE-2020-15393 kernel: memory leak in usbtest_disconnect function in drivers/usb/misc/usbtest.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15393.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2020-14356","severity":"moderate","public_date":"2020-05-31T12:00:00Z","advisories":[],"bugzilla":"1868453","bugzilla_description":"CVE-2020-14356 kernel: Use After Free vulnerability in cgroup BPF component","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14356.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-10135","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1832397","bugzilla_description":"CVE-2020-10135 kernel: bluetooth: BR/EDR Bluetooth Impersonation Attacks (BIAS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10135.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-14304","severity":"low","public_date":"2020-05-15T00:00:00Z","advisories":[],"bugzilla":"1847539","bugzilla_description":"CVE-2020-14304 kernel: ethtool when reading eeprom of device could lead to memory leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14304.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12888","severity":"important","public_date":"2020-05-14T00:00:00Z","advisories":["RHSA-2020:2664","RHSA-2020:2851","RHSA-2020:3016","RHSA-2020:2665","RHSA-2020:3222","RHSA-2020:3230","RHSA-2020:3010","RHSA-2020:2831","RHSA-2020:2854","RHSA-2020:2832","RHSA-2020:3019","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1836244","bugzilla_description":"CVE-2020-12888 Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["kernel-0:3.10.0-693.71.2.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-957.56.1.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-1062.30.1.el7","kernel-0:3.10.0-1127.13.1.el7","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-327.89.1.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:3.10.0-1127.13.1.rt56.1110.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12888.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-10742","severity":"moderate","public_date":"2020-05-13T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1835127","bugzilla_description":"CVE-2020-10742 kernel: NFS client crash due to index buffer overflow during Direct IO write causing kernel panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10742.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"6.0"},{"CVE":"CVE-2020-10711","severity":"important","public_date":"2020-05-12T12:00:00Z","advisories":["RHSA-2020:2103","RHSA-2020:2125","RHSA-2020:2104","RHSA-2020:2214","RHSA-2020:2522","RHSA-2020:2203","RHSA-2020:2277","RHSA-2020:2289","RHSA-2020:2102","RHSA-2020:2242","RHSA-2020:2199","RHSA-2020:2285","RHSA-2020:2519","RHSA-2020:2429","RHBA-2020:3180","RHSA-2020:2085","RHSA-2020:2082","RHSA-2020:2291","RHSA-2020:2171"],"bugzilla":"1825116","bugzilla_description":"CVE-2020-10711 Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-514.76.1.el7","kernel-0:4.18.0-193.1.2.el8_2","kernel-rt-1:3.10.0-693.67.1.rt56.665.el6rt","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:3.10.0-327.88.1.el7","kernel-0:2.6.32-754.29.2.el6","kernel-rt-0:3.10.0-1127.8.2.rt56.1103.el7","kernel-0:3.10.0-1062.26.1.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-957.54.1.el7","kernel-rt-0:4.18.0-193.1.2.rt13.53.el8_2","kernel-0:3.10.0-1127.8.2.el7","kernel-0:3.10.0-693.67.1.el7","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10711.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-10741","severity":"moderate","public_date":"2020-05-12T05:40:00Z","advisories":[],"bugzilla":"1822077","bugzilla_description":"CVE-2020-10741 kernel: possible to send arbitrary signals to a privileged (suidroot) parent process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10741.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2020-12826","severity":"moderate","public_date":"2020-05-12T05:40:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1822077","bugzilla_description":"CVE-2020-12826 kernel: possible to send arbitrary signals to a privileged (suidroot) parent process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12826.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-20794","severity":"moderate","public_date":"2020-05-09T00:00:00Z","advisories":[],"bugzilla":"1849005","bugzilla_description":"CVE-2019-20794 kernel: task processes not being properly ended could lead to resource exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20794.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2020-14381","severity":"moderate","public_date":"2020-05-07T19:00:00Z","advisories":[],"bugzilla":"1874311","bugzilla_description":"CVE-2020-14381 kernel: referencing inode of removed superblock in get_futex_key() causes UAF","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14381.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-0110","severity":"low","public_date":"2020-05-07T00:00:00Z","advisories":[],"bugzilla":"1836936","bugzilla_description":"CVE-2020-0110 kernel: out of bound write when writing 0 bytes to PSI files which could result in local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0110.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12656","severity":"low","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1832860","bugzilla_description":"CVE-2020-12656 kernel: gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation lacks certain domain_release calls, leading to a memory leak.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12656.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-12657","severity":"important","public_date":"2020-05-05T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2428","RHSA-2020:2429","RHSA-2020:2427","RHSA-2020:2669","RHSA-2020:2567","RHSA-2020:2667"],"bugzilla":"1832866","bugzilla_description":"CVE-2020-12657 kernel: use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-147.20.1.el8_1","kernel-rt-0:4.18.0-193.6.3.rt13.59.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.6.3.el8_2","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12657.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-12659","severity":"moderate","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1832876","bugzilla_description":"CVE-2020-12659 kernel: xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write which could result in crash and data coruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12659.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-12114","severity":"moderate","public_date":"2020-05-04T00:00:00Z","advisories":[],"bugzilla":"1848652","bugzilla_description":"CVE-2020-12114 kernel: DoS by corrupting mountpoint reference counter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12114.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-10732","severity":"moderate","public_date":"2020-05-01T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1831399","bugzilla_description":"CVE-2020-10732 kernel: uninitialized kernel data leak in userspace coredumps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10732.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2020-13143","severity":"low","public_date":"2020-04-30T00:00:00Z","advisories":[],"bugzilla":"1846382","bugzilla_description":"CVE-2020-13143 kernel: usb: gadget: illegal array access in binding with UDC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13143.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.0"},{"CVE":"CVE-2020-11884","severity":"important","public_date":"2020-04-28T18:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2102","RHSA-2020:2199","RHSA-2020:2429"],"bugzilla":"1828149","bugzilla_description":"CVE-2020-11884 Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1251","affected_packages":["kernel-0:4.18.0-193.1.2.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11884.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-10751","severity":"moderate","public_date":"2020-04-27T14:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1839634","bugzilla_description":"CVE-2020-10751 kernel: SELinux netlink permission check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-349","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10751.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-12771","severity":"low","public_date":"2020-04-26T00:00:00Z","advisories":[],"bugzilla":"1834862","bugzilla_description":"CVE-2020-12771 kernel: deadlock if a coalescing operation fails in btree_gc_coalesce function in drivers/md/bcache/btree.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-833","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12771.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2020-0067","severity":"moderate","public_date":"2020-04-17T05:01:00Z","advisories":[],"bugzilla":"1848847","bugzilla_description":"CVE-2020-0067 kernel: out of bounds read due to a missing bounds check in f2fs_xattr_generic_list of xattr.c leading to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0067.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-10708","severity":"moderate","public_date":"2020-04-17T00:00:00Z","advisories":[],"bugzilla":"1822593","bugzilla_description":"CVE-2020-10708 kernel: race condition in kernel/audit.c may allow low privilege users trigger kernel panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10708.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-11739","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1823783","bugzilla_description":"CVE-2020-11739 xen: missing memory barriers in read-write unlock paths (XSA-314)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11739.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2020-11740","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1823911","bugzilla_description":"CVE-2020-11740 xen: xenoprof issue allows guest OS users without active profiling to obtain sensitive information about other guests (XSA-313)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11740.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-11741","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1823913","bugzilla_description":"CVE-2020-11741 xen: xenoprof issue allows guest OS users with active profiling to obtain sensitive information about other guests (XSA-313)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11741.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11743","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1823925","bugzilla_description":"CVE-2020-11743 xen: bad error path in GNTTABOP_map_grant (XSA-316)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11743.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-11742","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1823942","bugzilla_description":"CVE-2020-11742 xen: bad continuation handling in GNTTABOP_copy (XSA-318)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11742.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-12770","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1834845","bugzilla_description":"CVE-2020-12770 kernel: sg_write function lacks an sg_remove_request call in a certain failure case","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401->CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12770.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-11725","severity":"moderate","public_date":"2020-04-12T00:00:00Z","advisories":[],"bugzilla":"1824923","bugzilla_description":"CVE-2020-11725 kernel: improper handling of private_size*count multiplication due to count=info->owner typo","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11725.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-11669","severity":"moderate","public_date":"2020-04-10T00:00:00Z","advisories":[],"bugzilla":"1824803","bugzilla_description":"CVE-2020-11669 kernel: powerpc: guest can cause DoS on POWER9 KVM hosts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11669.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-8834","severity":"important","public_date":"2020-04-06T16:00:00Z","advisories":["RHSA-2020:2854"],"bugzilla":"1819615","bugzilla_description":"CVE-2020-8834 Kernel: ppc: kvm: conflicting use of HSTATE_HOST_R1 to store r1 state leads to host stack corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["kernel-alt-0:4.14.0-115.26.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8834.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.0"},{"CVE":"CVE-2019-20636","severity":"moderate","public_date":"2020-04-04T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2020:2854"],"bugzilla":"1824059","bugzilla_description":"CVE-2019-20636 kernel: out-of-bounds write via crafted keycode table","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20636.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-11565","severity":"moderate","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2020:2854"],"bugzilla":"1824918","bugzilla_description":"CVE-2020-11565 kernel: out-of-bounds write in mpol_parse_str function in mm/mempolicy.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11565.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.0"},{"CVE":"CVE-2020-11494","severity":"low","public_date":"2020-04-01T00:00:00Z","advisories":[],"bugzilla":"1826030","bugzilla_description":"CVE-2020-11494 kernel: transmission of uninitialized data allows attackers to read sensitive information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11494.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-8835","severity":"important","public_date":"2020-03-30T16:00:00Z","advisories":[],"bugzilla":"1817350","bugzilla_description":"CVE-2020-8835 kernel: out-of-bounds read/write in the bpf verifier","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8835.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-20806","severity":"moderate","public_date":"2020-03-29T00:00:00Z","advisories":[],"bugzilla":"1842547","bugzilla_description":"CVE-2019-20806 kernel: NULL pointer dereference in tw5864_handle_frame function in drivers/media/pci/tw5864/tw5864-video.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20806.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-8832","severity":"moderate","public_date":"2020-03-25T00:00:00Z","advisories":[],"bugzilla":"1817047","bugzilla_description":"CVE-2020-8832 kernel: incomplete fix for CVE-2019-14615 allows for a local information exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-112","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8832.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-12464","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":[],"bugzilla":"1831726","bugzilla_description":"CVE-2020-12464 kernel: use-after-free in usb_sg_cancel function in drivers/usb/core/message.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12464.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10942","severity":"low","public_date":"2020-03-22T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1817718","bugzilla_description":"CVE-2020-10942 kernel: vhost-net: stack overflow in get_raw_socket while checking sk_family field","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-119","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10942.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-11608","severity":"low","public_date":"2020-03-12T00:00:00Z","advisories":[],"bugzilla":"1833445","bugzilla_description":"CVE-2020-11608 kernel: NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs in drivers/media/usb/gspca/ov519.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11608.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2020-0550","severity":"moderate","public_date":"2020-03-10T17:20:00Z","advisories":[],"bugzilla":"1810359","bugzilla_description":"CVE-2020-0550 hw: Snoop-Assisted L1D Sampling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440->CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0550.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2020-10255","severity":"important","public_date":"2020-03-10T15:00:00Z","advisories":[],"bugzilla":"1812088","bugzilla_description":"CVE-2020-10255 hw: dram: circumvent TRR to induce bit flips via Rowhammer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10255.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-0551","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":[],"bugzilla":"1753463","bugzilla_description":"CVE-2020-0551 hw: Load Value Injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440->CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0551.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2020-1749","severity":"moderate","public_date":"2020-03-04T01:29:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1809833","bugzilla_description":"CVE-2020-1749 kernel: some ipv6 protocols not encrypted over ipsec tunnel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1749.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-12465","severity":"moderate","public_date":"2020-03-03T00:00:00Z","advisories":[],"bugzilla":"1831699","bugzilla_description":"CVE-2020-12465 kernel: buffer overflow in mt76_add_fragment function in drivers/net/wireless/mediatek/mt76/dma.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12465.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-12655","severity":"low","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:3545"],"bugzilla":"1832543","bugzilla_description":"CVE-2020-12655 kernel: sync of excessive duration via an XFS v5 image with crafted metadata","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-835","affected_packages":["kernel-alt-0:4.14.0-115.29.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12655.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-9391","severity":"moderate","public_date":"2020-02-25T00:00:00Z","advisories":[],"bugzilla":"1814237","bugzilla_description":"CVE-2020-9391 kernel: brk discards top byte of addresses on aarch64 causing heap corruption in glibc malloc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9391.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-2732","severity":"moderate","public_date":"2020-02-24T18:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2102","RHSA-2020:4062","RHSA-2020:2171","RHSA-2020:4060"],"bugzilla":"1805135","bugzilla_description":"CVE-2020-2732 Kernel: kvm: nVMX: L2 guest may trick the L0 hypervisor to access sensitive L1 resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-193.1.2.el8_2","kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-rt-0:4.18.0-193.1.2.rt13.53.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2732.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.8"},{"CVE":"CVE-2020-9383","severity":"moderate","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1810685","bugzilla_description":"CVE-2020-9383 kernel: out-of-bounds read in set_fdc in drivers/block/floppy.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9383.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-12768","severity":"low","public_date":"2020-02-21T00:00:00Z","advisories":[],"bugzilla":"1834829","bugzilla_description":"CVE-2020-12768 kernel: memory leak in svm_cpu_init function in arch/x86/kvm/svm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12768.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"1.9"},{"CVE":"CVE-2011-0699","severity":"low","public_date":"2020-02-20T00:00:00Z","advisories":[],"bugzilla":"1816142","bugzilla_description":"CVE-2011-0699 kernel: integer signedness error in the btrfs_ioctl_space_info function could lead to a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0699.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2020-8992","severity":"low","public_date":"2020-02-11T00:00:00Z","advisories":[],"bugzilla":"1805887","bugzilla_description":"CVE-2020-8992 kernel: soft lockup via a crafted journal size in ext4_protect_reserved_inode in fs/ext4/block_validity.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8992.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19581","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":[],"bugzilla":"1801083","bugzilla_description":"CVE-2019-19581 xen: bit iteration mishandling allows Arm guest OS users to cause a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19581.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-0030","severity":"important","public_date":"2020-02-03T00:00:00Z","advisories":[],"bugzilla":"1829841","bugzilla_description":"CVE-2020-0030 kernel: use after free due to a race condition in binder driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0030.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-3016","severity":"low","public_date":"2020-01-30T18:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3010"],"bugzilla":"1792167","bugzilla_description":"CVE-2019-3016 kernel: kvm: Information leak within a KVM guest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-200","affected_packages":["redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3016.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-8649","severity":"moderate","public_date":"2020-01-30T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1802555","bugzilla_description":"CVE-2020-8649 kernel: invalid read location in vgacon_invert_region function in drivers/video/console/vgacon.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8649.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-8648","severity":"moderate","public_date":"2020-01-30T00:00:00Z","advisories":[],"bugzilla":"1802559","bugzilla_description":"CVE-2020-8648 kernel: use-after-free in n_tty_receive_buf_common function in drivers/tty/n_tty.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8648.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-8647","severity":"moderate","public_date":"2020-01-30T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1802563","bugzilla_description":"CVE-2020-8647 kernel: out-of-bounds read in in vc_do_resize function in drivers/tty/vt/vt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8647.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2020-8428","severity":"moderate","public_date":"2020-01-28T00:00:00Z","advisories":[],"bugzilla":"1796939","bugzilla_description":"CVE-2020-8428 kernel: use-after-free in fs/namei.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8428.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-20422","severity":"moderate","public_date":"2020-01-27T00:00:00Z","advisories":[],"bugzilla":"1798708","bugzilla_description":"CVE-2019-20422 kernel: mishandling the RT6_LOOKUP_F_DST_NOREF flag in fib6_rule_lookup in net/ipv6/ip6_fib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20422.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-12653","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHSA-2020:3432","RHSA-2020:3224","RHSA-2020:3389","RHSA-2020:3221","RHSA-2020:3232","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:2832","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1831868","bugzilla_description":"CVE-2020-12653 kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in drivers/net/wireless/marvell/mwifiex/scan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-rt-1:3.10.0-693.72.1.rt56.672.el6rt","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","kernel-0:3.10.0-327.90.2.el7","kernel-0:3.10.0-693.72.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:3.10.0-1062.31.2.el7","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12653.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12654","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHSA-2020:3432","RHSA-2020:3224","RHSA-2020:3389","RHSA-2020:3221","RHSA-2020:3232","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:2832","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1832530","bugzilla_description":"CVE-2020-12654 kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-1:3.10.0-693.72.1.rt56.672.el6rt","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","kernel-0:3.10.0-327.90.2.el7","kernel-0:3.10.0-693.72.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:3.10.0-1062.31.2.el7","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12654.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-12652","severity":"low","public_date":"2020-01-15T00:00:00Z","advisories":[],"bugzilla":"1831849","bugzilla_description":"CVE-2020-12652 kernel: race condition in __mptctl_ioctl function in drivers/message/fusion/mptctl.c allows local users to hold an incorrect lock during the ioctl operation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12652.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-14615","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1789209","bugzilla_description":"CVE-2019-14615 kernel: Intel graphics card information leak.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14615.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-7053","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1795624","bugzilla_description":"CVE-2020-7053 kernel: use-after-free in i915_ppgtt_close in drivers/gpu/drm/i915/i915_gem_gtt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7053.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19947","severity":"moderate","public_date":"2020-01-06T00:00:00Z","advisories":[],"bugzilla":"1788039","bugzilla_description":"CVE-2019-19947 kernel: uninitialized memory allocation in drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c leading to information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19947.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-11668","severity":"moderate","public_date":"2020-01-03T00:00:00Z","advisories":[],"bugzilla":"1824792","bugzilla_description":"CVE-2020-11668 kernel: mishandles invalid descriptors in drivers/media/usb/gspca/xirlink_cit.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11668.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-11609","severity":"low","public_date":"2020-01-03T00:00:00Z","advisories":[],"bugzilla":"1833452","bugzilla_description":"CVE-2020-11609 kernel: NULL pointer dereference due to incorrect handling of invalid descriptors in stv06xx subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11609.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2020-12769","severity":"low","public_date":"2020-01-03T00:00:00Z","advisories":[],"bugzilla":"1834821","bugzilla_description":"CVE-2020-12769 kernel: DoS via concurrent calls to dw_spi_irq and dw_spi_transfer_one functions in drivers/spi/spi-dw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12769.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19927","severity":"moderate","public_date":"2019-12-31T00:00:00Z","advisories":[],"bugzilla":"1790044","bugzilla_description":"CVE-2019-19927 kernel: Out-of-bounds read in ttm_put_pages in gpu/drm/ttm/ttm_page_alloc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19927.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"6.0"},{"CVE":"CVE-2019-20095","severity":"low","public_date":"2019-12-30T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1791954","bugzilla_description":"CVE-2019-20095 kernel: memory leak in mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20095.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2019-20096","severity":"low","public_date":"2019-12-30T00:00:00Z","advisories":[],"bugzilla":"1791959","bugzilla_description":"CVE-2019-20096 kernel: memory leak in __feat_register_sp() in net/dccp/feat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20096.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-20054","severity":"low","public_date":"2019-12-28T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1790063","bugzilla_description":"CVE-2019-20054 kernel: Null pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20054.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-19966","severity":"low","public_date":"2019-12-24T00:00:00Z","advisories":[],"bugzilla":"1794399","bugzilla_description":"CVE-2019-19966 kernel: use-after-free in cpia2_exit in drivers/media/usb/cpia2/cpia2_v4l.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19966.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-19965","severity":"low","public_date":"2019-12-24T00:00:00Z","advisories":[],"bugzilla":"1794404","bugzilla_description":"CVE-2019-19965 kernel: NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19965.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19922","severity":"low","public_date":"2019-12-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1493","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1792512","bugzilla_description":"CVE-2019-19922 kernel: when cpu.cfs_quota_us is used allows attackers to cause a denial of service against non-cpu-bound applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19922.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19813","severity":"moderate","public_date":"2019-12-17T00:00:00Z","advisories":[],"bugzilla":"1784911","bugzilla_description":"CVE-2019-19813 kernel: use-after-free in __mutex_lock in kernel/locking/mutex.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19813.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19814","severity":"moderate","public_date":"2019-12-17T00:00:00Z","advisories":[],"bugzilla":"1784917","bugzilla_description":"CVE-2019-19814 kernel: out-of-bounds write in __remove_dirty_segment in fs/f2fs/segment.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19814.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-19815","severity":"moderate","public_date":"2019-12-17T00:00:00Z","advisories":[],"bugzilla":"1784920","bugzilla_description":"CVE-2019-19815 kernel: NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19815.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19816","severity":"moderate","public_date":"2019-12-17T00:00:00Z","advisories":[],"bugzilla":"1784923","bugzilla_description":"CVE-2019-19816 kernel: out-of-bounds write in __btrfs_map_block in fs/btrfs/volumes.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19816.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19578","severity":"important","public_date":"2019-12-11T00:00:00Z","advisories":[],"bugzilla":"1778161","bugzilla_description":"CVE-2019-19578 xen: privilege escalation due to malicious PV guest (XSA-309)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19578.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2019-19583","severity":"moderate","public_date":"2019-12-11T00:00:00Z","advisories":[],"bugzilla":"1778171","bugzilla_description":"CVE-2019-19583 xen: denial of service in HVM/PVH guest userspace code (XSA-308)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19583.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-19580","severity":"moderate","public_date":"2019-12-11T00:00:00Z","advisories":[],"bugzilla":"1778185","bugzilla_description":"CVE-2019-19580 xen: Further issues with restartable PV type change operations (XSA-310)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19580.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2019-19582","severity":"moderate","public_date":"2019-12-11T00:00:00Z","advisories":[],"bugzilla":"1778191","bugzilla_description":"CVE-2019-19582 xen: denial of service in find_next_bit() (XSA-307)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19582.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-19577","severity":"moderate","public_date":"2019-12-11T00:00:00Z","advisories":[],"bugzilla":"1778194","bugzilla_description":"CVE-2019-19577 xen: vulnerability in dynamic height handling for AMD IOMMU pagetables (XSA-311 v2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19577.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2019-5108","severity":"moderate","public_date":"2019-12-11T00:00:00Z","advisories":["RHSA-2020:1493"],"bugzilla":"1789927","bugzilla_description":"CVE-2019-5108 kernel: triggering AP to send IAPP location updates for stations before the required authentication process has completed can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5108.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-19449","severity":"important","public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1781668","bugzilla_description":"CVE-2019-19449 kernel: mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19449.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-19448","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1781674","bugzilla_description":"CVE-2019-19448 kernel: mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19447","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1781679","bugzilla_description":"CVE-2019-19447 kernel: mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19447.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-10720","severity":"moderate","public_date":"2019-12-09T14:23:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:2854","RHSA-2019:3309"],"bugzilla":"1781204","bugzilla_description":"CVE-2020-10720 kernel: use-after-free read in napi_gro_frags() in the Linux kernel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-20812","severity":"moderate","public_date":"2019-12-09T00:00:00Z","advisories":[],"bugzilla":"1846462","bugzilla_description":"CVE-2019-20812 kernel: af_packet: TPACKET_V3: invalid timer timeout on error","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20812.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-19579","severity":"moderate","public_date":"2019-12-06T00:00:00Z","advisories":[],"bugzilla":"1780558","bugzilla_description":"CVE-2019-19579 xen: an untrusted domain with access to a physical device can DMA into host memory, leading to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19579.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"6.9"},{"CVE":"CVE-2019-0162","severity":"moderate","public_date":"2019-12-06T00:00:00Z","advisories":[],"bugzilla":"1780586","bugzilla_description":"CVE-2019-0162 hw: dram: spoiler attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0162.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-19332","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1779594","bugzilla_description":"CVE-2019-19332 Kernel: kvm: OOB memory write via kvm_dev_ioctl_get_cpuid","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19332.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-19532","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1781821","bugzilla_description":"CVE-2019-19532 kernel: malicious USB devices can lead to multiple out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19532.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-19378","severity":"low","public_date":"2019-11-30T00:00:00Z","advisories":[],"bugzilla":"1781899","bugzilla_description":"CVE-2019-19378 kernel: out-of-bounds write in index_rbio_pages in fs/btrfs/raid56.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19378.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19462","severity":"low","public_date":"2019-11-29T00:00:00Z","advisories":[],"bugzilla":"1781839","bugzilla_description":"CVE-2019-19462 kernel: NULL pointer dereference in relay_open in kernel/relay.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19462.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19768","severity":"important","public_date":"2019-11-29T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:2214","RHSA-2020:2522","RHSA-2020:2203","RHSA-2020:2277","RHSA-2020:2289","RHSA-2020:2242","RHSA-2020:2199","RHSA-2020:2285","RHSA-2020:2519","RHSA-2020:1966","RHSA-2020:1769","RHSA-2020:1567","RHBA-2020:3180","RHSA-2020:2085","RHSA-2020:2082","RHSA-2020:2291"],"bugzilla":"1786164","bugzilla_description":"CVE-2019-19768 kernel: use-after-free in __blk_add_trace in kernel/trace/blktrace.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-514.76.1.el7","kernel-rt-1:3.10.0-693.67.1.rt56.665.el6rt","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.18.1.el8_0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:3.10.0-327.88.1.el7","kernel-rt-0:3.10.0-1127.8.2.rt56.1103.el7","kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-193.el8","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1127.8.2.el7","kernel-0:3.10.0-693.67.1.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19768.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-19769","severity":"moderate","public_date":"2019-11-29T00:00:00Z","advisories":[],"bugzilla":"1786174","bugzilla_description":"CVE-2019-19769 kernel: use-after-free in perf_trace_lock_acquire related to include/trace/events/lock.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19769.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-19770","severity":"moderate","public_date":"2019-11-29T00:00:00Z","advisories":[],"bugzilla":"1786179","bugzilla_description":"CVE-2019-19770 kernel: use-after-free in debugfs_remove in fs/debugfs/inode.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19770.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-18660","severity":"moderate","public_date":"2019-11-28T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:1372","RHSA-2020:0174","RHBA-2020:1450","RHSA-2020:2429","RHSA-2020:2933","RHSA-2020:1016","RHSA-2020:1984"],"bugzilla":"1777825","bugzilla_description":"CVE-2019-18660 kernel: powerpc: incomplete Spectre-RSB mitigation leads to information exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","kernel-0:2.6.32-754.31.1.el6","kernel-0:3.10.0-957.56.1.el7","redhat-coreos-42.81.20200407.0","kernel-0:3.10.0-1127.el7","kernel-alt-0:4.14.0-115.17.1.el7a","kernel-0:3.10.0-1062.21.1.el7","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18660.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-19377","severity":"moderate","public_date":"2019-11-28T00:00:00Z","advisories":[],"bugzilla":"1781894","bugzilla_description":"CVE-2019-19377 kernel: use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19377.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19318","severity":"moderate","public_date":"2019-11-28T00:00:00Z","advisories":[],"bugzilla":"1784141","bugzilla_description":"CVE-2019-19318 kernel: use-after-free in rwsem_down_write_slowpath in kernel/locking/rwsem.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19318.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-10220","severity":"important","public_date":"2019-11-27T15:16:00Z","advisories":[],"bugzilla":"1741727","bugzilla_description":"CVE-2019-10220 kernel: CIFS: Relative paths injection in directory entry lists","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10220.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-18809","severity":"low","public_date":"2019-11-27T00:00:00Z","advisories":[],"bugzilla":"1777449","bugzilla_description":"CVE-2019-18809 kernel: memory leak in  af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18809.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-18810","severity":"moderate","public_date":"2019-11-27T00:00:00Z","advisories":[],"bugzilla":"1777452","bugzilla_description":"CVE-2019-18810 kernel: memory leak in komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18810.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-18811","severity":"moderate","public_date":"2019-11-27T00:00:00Z","advisories":[],"bugzilla":"1777455","bugzilla_description":"CVE-2019-18811 kernel: memory leak in sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18811.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19319","severity":"moderate","public_date":"2019-11-27T00:00:00Z","advisories":[],"bugzilla":"1784130","bugzilla_description":"CVE-2019-19319 kernel: out-of-bounds write in ext4_xattr_set_entry in fs/ext4/xattr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19319.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19602","severity":"moderate","public_date":"2019-11-26T00:00:00Z","advisories":[],"bugzilla":"1784572","bugzilla_description":"CVE-2019-19602 kernel: cached use of fpu_fpregs_owner_ctx in arch/x86/include/asm/fpu/internal.h can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19602.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2020-10690","severity":"low","public_date":"2019-11-25T12:53:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1817141","bugzilla_description":"CVE-2020-10690 kernel: use-after-free in cdev_put() when a PTP device is removed while it's chardev is open","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10690.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-14897","severity":"moderate","public_date":"2019-11-25T08:35:00Z","advisories":[],"bugzilla":"1774879","bugzilla_description":"CVE-2019-14897 kernel: stack-based buffer overflow in add_ie_rates function in drivers/net/wireless/marvell/libertas/cfg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14897.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2019-14896","severity":"moderate","public_date":"2019-11-25T08:33:00Z","advisories":["RHSA-2020:3548"],"bugzilla":"1774875","bugzilla_description":"CVE-2019-14896 kernel: heap-based buffer overflow in lbs_ibss_join_existing function in drivers/net/wireless/marvell/libertas/cfg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:2.6.32-754.33.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14896.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-14895","severity":"important","public_date":"2019-11-25T08:29:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0661","RHSA-2020:0374","RHSA-2020:1493","RHSA-2020:0592","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:0653","RHSA-2020:0543","RHSA-2020:0664","RHSA-2020:0831","RHSA-2020:0609"],"bugzilla":"1774870","bugzilla_description":"CVE-2019-14895 kernel: heap-based buffer overflow in mwifiex_process_country_ie() function in drivers/net/wireless/marvell/mwifiex/sta_ioctl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:3.10.0-693.64.1.el7","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-0:3.10.0-514.73.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-0:3.10.0-957.46.1.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:4.18.0-80.16.1.el8_0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14895.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-19252","severity":"low","public_date":"2019-11-25T00:00:00Z","advisories":[],"bugzilla":"1778860","bugzilla_description":"CVE-2019-19252 kernel: vcs_write in drivers/tty/vt/vc_screen.c does not prevent write access to vcsu devices","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19252.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19241","severity":"moderate","public_date":"2019-11-25T00:00:00Z","advisories":[],"bugzilla":"1784942","bugzilla_description":"CVE-2019-19241 kernel: privilege escalation via io_uring offload of sendmsg() onto kernel thread with kernel creds","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19241.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2019-14901","severity":"important","public_date":"2019-11-22T00:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0374","RHSA-2020:1493","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:0204"],"bugzilla":"1773519","bugzilla_description":"CVE-2019-14901 kernel: heap overflow in marvell/mwifiex/tdls.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-400|CWE-122)","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14901.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-18675","severity":"moderate","public_date":"2019-11-22T00:00:00Z","advisories":[],"bugzilla":"1777471","bugzilla_description":"CVE-2019-18675 kernel: integer overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18675.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-19227","severity":"moderate","public_date":"2019-11-22T00:00:00Z","advisories":[],"bugzilla":"1851480","bugzilla_description":"CVE-2019-19227 kernel: potential NULL pointer dereference leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19227.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19074","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774933","bugzilla_description":"CVE-2019-19074 kernel: a memory leak in the ath9k management function in allows local DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19073","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774937","bugzilla_description":"CVE-2019-19073 kernel: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel (DOS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19073.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-19072","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1774946","bugzilla_description":"CVE-2019-19072 kernel: A memory leak in the predicate_parse() function in kernel/trace/trace_events_filter.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19072.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-19071","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1774949","bugzilla_description":"CVE-2019-19071 kernel: A memory leak in the rsi_send_beacon() function in drivers/net/wireless/rsi/rsi_91x_mgmt.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19071.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19070","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1774957","bugzilla_description":"CVE-2019-19070 kernel: A memory leak in the spi_gpio_probe() function in drivers/spi/spi-gpio.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19070.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19069","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1774960","bugzilla_description":"CVE-2019-19069 kernel: A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19069.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19068","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1774963","bugzilla_description":"CVE-2019-19068 kernel: A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19068.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-19067","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774968","bugzilla_description":"CVE-2019-19067 kernel: Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c allow for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19067.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-19066","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1774976","bugzilla_description":"CVE-2019-19066 kernel: A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19066.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19065","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775000","bugzilla_description":"CVE-2019-19065 kernel: A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19065.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19064","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1775010","bugzilla_description":"CVE-2019-19064 kernel: A memory leak in the fsl_lpspi_probe() function in drivers/spi/spi-fsl-lpspi.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19063","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1775015","bugzilla_description":"CVE-2019-19063 kernel: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c allow for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19063.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-19062","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2020:2854"],"bugzilla":"1775021","bugzilla_description":"CVE-2019-19062 kernel: memory leak in the crypto_report() function in crypto/crypto_user_base.c allows for DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19062.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19061","severity":"important","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1775029","bugzilla_description":"CVE-2019-19061 kernel: A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19060","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1775035","bugzilla_description":"CVE-2019-19060 kernel: A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19059","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775042","bugzilla_description":"CVE-2019-19059 kernel: Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19059.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19058","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775047","bugzilla_description":"CVE-2019-19058 kernel: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19058.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19057","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775050","bugzilla_description":"CVE-2019-19057 kernel: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19057.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-14898","severity":"moderate","public_date":"2019-11-20T00:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0374","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1774671","bugzilla_description":"CVE-2019-14898 kernel: incomplete fix  for race condition between mmget_not_zero()/get_task_mm() and core dumping in CVE-2019-11599","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-667","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14898.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-19039","severity":"low","public_date":"2019-11-20T00:00:00Z","advisories":[],"bugzilla":"1775803","bugzilla_description":"CVE-2019-19039 kernel: information disclosure in __btrfs_free_extent in fs/btrfs/extent-tree.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19039.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-19043","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1774972","bugzilla_description":"CVE-2019-19043 kernel: dos in i40e_setup_macvlans() function in drivers/net/ethernet/intel/i40e/i40e_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19043.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19044","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1774977","bugzilla_description":"CVE-2019-19044 kernel: dos in v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19044.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-19045","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774983","bugzilla_description":"CVE-2019-19045 kernel: dos in mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19045.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.5"},{"CVE":"CVE-2019-19046","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHSA-2020:3545","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1774988","bugzilla_description":"CVE-2019-19046 kernel: Denial Of Service in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401->CWE-400","affected_packages":["kernel-alt-0:4.14.0-115.29.1.el7a","kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19046.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-19047","severity":"low","public_date":"2019-11-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774991","bugzilla_description":"CVE-2019-19047 kernel: dos in mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19047.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19048","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1774994","bugzilla_description":"CVE-2019-19048 kernel: dos in crypto_reportstat() function in drivers/virt/vboxguest/vboxguest_utils.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19048.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-19049","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1774996","bugzilla_description":"CVE-2019-19049 kernel: dos in unittest_data_add() function in drivers/of/unittest.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19049.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-19050","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1774998","bugzilla_description":"CVE-2019-19050 kernel: dos in crypto_reportstat() function in crypto/crypto_user_stat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19050.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-19051","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1775004","bugzilla_description":"CVE-2019-19051 kernel: dos in i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19051.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19052","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1775007","bugzilla_description":"CVE-2019-19052 kernel: dos in gs_can_open() function in drivers/net/can/usb/gs_usb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19052.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2014-3180","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1775121","bugzilla_description":"CVE-2014-3180 kernel: out-of-bounds read in kernel/compact.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3180.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-19037","severity":"low","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1775182","bugzilla_description":"CVE-2019-19037 kernel: null-pointer dereference in ext4_empty_dir in fs/ext4/namei.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19037.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19036","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1775187","bugzilla_description":"CVE-2019-19036 kernel: null-pointer dereference in btrfs_root_node in fs/btrfs/ctree.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19036.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-18807","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1777408","bugzilla_description":"CVE-2019-18807 kernel: memory leak in sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18807.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-18808","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2020:2854"],"bugzilla":"1777418","bugzilla_description":"CVE-2019-18808 kernel: memory leak in ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18808.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19338","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHSA-2020:1465","RHSA-2020:0839","RHSA-2020:0834","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1781514","bugzilla_description":"CVE-2019-19338 Kernel: KVM: export MSR_IA32_TSX_CTRL to guest - incomplete fix for TAA (CVE-2019-11135)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-203","affected_packages":["kernel-0:3.10.0-957.48.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-1062.18.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19338.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-19524","severity":"moderate","public_date":"2019-11-15T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1783459","bugzilla_description":"CVE-2019-19524 kernel: a malicious USB device in the drivers/input/ff-memless.c leads to use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19524.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-12207","severity":"important","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3941","RHSA-2019:3843","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0026","RHSA-2020:0028","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3916","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1646768","bugzilla_description":"CVE-2018-12207 hw: Machine Check Error on Page Size Change (IFU)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-0154","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3840","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837"],"bugzilla":"1724393","bugzilla_description":"CVE-2019-0154 hw: Intel GPU Denial Of Service while accessing MMIO in lower power state","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0154.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-0155","severity":"important","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3887","RHSA-2019:3877","RHSA-2019:3870","RHSA-2019:3871","RHSA-2019:3872","RHSA-2019:3883","RHSA-2019:3873","RHBA-2019:3919","RHSA-2020:0204","RHSA-2019:3908","RHSA-2019:3878","RHSA-2019:3889"],"bugzilla":"1724398","bugzilla_description":"CVE-2019-0155 hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-1:3.10.0-693.60.3.rt56.655.el6rt","kernel-0:3.10.0-693.60.3.el7","kernel-0:2.6.32-754.24.3.el6","kernel-0:3.10.0-862.43.3.el7","kernel-0:3.10.0-514.70.3.el7","kernel-0:3.10.0-327.82.2.el7","kernel-rt-0:3.10.0-1062.4.3.rt56.1029.el7","kernel-0:3.10.0-1062.4.3.el7","kernel-0:4.18.0-147.0.3.el8_1","redhat-coreos-42.81.20191119.1","kernel-0:3.10.0-957.38.3.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.3.rt24.95.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0155.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-15794","severity":"moderate","public_date":"2019-11-12T00:00:00Z","advisories":[],"bugzilla":"1831055","bugzilla_description":"CVE-2019-15794 kernel: Overlayfs in the Linux kernel and shiftfs  not restoring original value on error leading to a refcount underflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15794.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-18814","severity":"moderate","public_date":"2019-11-07T00:00:00Z","advisories":[],"bugzilla":"1772518","bugzilla_description":"CVE-2019-18814 kernel: use-after-free in aa_audit_rule_init() in security/apparmor/audit.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19767","severity":"moderate","public_date":"2019-11-07T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2020:2854"],"bugzilla":"1786160","bugzilla_description":"CVE-2019-19767 kernel: use-after-free in __ext4_expand_extra_isize and ext4_xattr_set_entry related to fs/ext4/inode.c and fs/ext4/super.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19767.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19807","severity":"important","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1786078","bugzilla_description":"CVE-2019-19807 kernel: use-after-free in sound/core/timer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","kernel-rt-0:3.10.0-1160.rt56.1131.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19807.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-10769","severity":"moderate","public_date":"2019-11-05T00:00:00Z","advisories":["RHSA-2020:3545"],"bugzilla":"1708775","bugzilla_description":"CVE-2020-10769 kernel: Buffer over-read in crypto_authenc_extractkeys() when a payload longer than 4 bytes is not aligned.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-alt-0:4.14.0-115.29.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10769.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-18683","severity":"important","public_date":"2019-11-04T00:00:00Z","advisories":[],"bugzilla":"1771826","bugzilla_description":"CVE-2019-18683 kernel: race condition in vivid_stop_generating_vid_cap(),vivid_stop_generating_vid_out(), sdr_cap_stop_streaming()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18683.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19529","severity":"moderate","public_date":"2019-11-04T00:00:00Z","advisories":[],"bugzilla":"1783515","bugzilla_description":"CVE-2019-19529 kernel: use-after-free bug caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19529.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2019-19534","severity":"moderate","public_date":"2019-11-04T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1783540","bugzilla_description":"CVE-2019-19534 kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772->CWE-200","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19534.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-15791","severity":"moderate","public_date":"2019-11-01T00:00:00Z","advisories":[],"bugzilla":"1801616","bugzilla_description":"CVE-2019-15791 kernel: reference count underflow was discovered in shiftfs implementation causing dos","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15791.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-18421","severity":"important","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1765043","bugzilla_description":"CVE-2019-18421 xen: a malicious PV guest administrator may be able to escalate their privilege to that of the host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-268","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18421.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-18424","severity":"important","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1767730","bugzilla_description":"CVE-2019-18424 xen: passed through PCI devices may corrupt host memory after deassignment leading to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18424.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2019-18425","severity":"important","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1771340","bugzilla_description":"CVE-2019-18425 xen: missing descriptor table limit checking in x86 PV emulation leading to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18425.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-18423","severity":"moderate","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1771344","bugzilla_description":"CVE-2019-18423 xen: add-to-physmap can be abused to DoS Arm hosts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18423.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2019-17340","severity":"important","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1771349","bugzilla_description":"CVE-2019-17340 xen: mishanding grant-table transfer allows x86 guest OS to cause a DoS or escalate their privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17340.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-18420","severity":"moderate","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1771366","bugzilla_description":"CVE-2019-18420 xen: allows guest OS users to cause denial of service via VCPUOP_initialise hypercall","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18420.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-18422","severity":"moderate","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1771442","bugzilla_description":"CVE-2019-18422 xen: ARM: Interrupts are unconditionally unmasked in exception handlers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18422.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-17347","severity":"important","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1771444","bugzilla_description":"CVE-2019-17347 xen: x86: PV kernel context switch corruption leading to Dos or privileges escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17347.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-10773","severity":"low","public_date":"2019-10-28T14:00:00Z","advisories":[],"bugzilla":"1846380","bugzilla_description":"CVE-2020-10773 kernel: kernel stack information leak on s390/s390x","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-626","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10773.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-18812","severity":"moderate","public_date":"2019-10-28T00:00:00Z","advisories":[],"bugzilla":"1777458","bugzilla_description":"CVE-2019-18812 kernel: memory leak in sof_dfsentry_write() function in sound/soc/sof/debug.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18812.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-18813","severity":"moderate","public_date":"2019-10-27T00:00:00Z","advisories":[],"bugzilla":"1777462","bugzilla_description":"CVE-2019-18813 kernel: memory leak in dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18813.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-18282","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1796360","bugzilla_description":"CVE-2019-18282 kernel: The flow_dissector feature allows device tracking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18282.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-17666","severity":"important","public_date":"2019-10-18T00:00:00Z","advisories":["RHSA-2020:0661","RHSA-2020:1353","RHSA-2020:0740","RHSA-2020:1465","RHSA-2020:1473","RHSA-2020:0834","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:1347","RHSA-2020:0543","RHSA-2020:1524","RHSA-2020:0831","RHSA-2020:0839"],"bugzilla":"1763690","bugzilla_description":"CVE-2019-17666 kernel: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel lacks a certain upper-bound check, leading to a buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-0:3.10.0-957.48.1.el7","kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.65.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:3.10.0-514.74.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-rt-1:3.10.0-693.65.1.rt56.663.el6rt","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:2.6.32-754.29.1.el6","kernel-0:3.10.0-1062.18.1.el7","kernel-0:4.18.0-80.16.1.el8_0","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17666.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2019-18786","severity":"low","public_date":"2019-10-18T00:00:00Z","advisories":[],"bugzilla":"1772538","bugzilla_description":"CVE-2019-18786 kernel: memory disclosure in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18786.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-2215","severity":"moderate","public_date":"2019-10-16T00:00:00Z","advisories":[],"bugzilla":"1805822","bugzilla_description":"CVE-2019-2215 kernel: Use-after-free in binder.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2215.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-19528","severity":"moderate","public_date":"2019-10-09T00:00:00Z","advisories":[],"bugzilla":"1783507","bugzilla_description":"CVE-2019-19528 kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19528.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-19526","severity":"moderate","public_date":"2019-10-08T00:00:00Z","advisories":[],"bugzilla":"1783494","bugzilla_description":"CVE-2019-19526 kernel: use-after-free bug caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19526.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-18806","severity":"low","public_date":"2019-10-07T00:00:00Z","advisories":[],"bugzilla":"1777397","bugzilla_description":"CVE-2019-18806 kernel: memory leak in ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18806.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19055","severity":"moderate","public_date":"2019-10-05T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775074","bugzilla_description":"CVE-2019-19055 kernel: memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c allows DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19055.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19056","severity":"low","public_date":"2019-10-05T00:00:00Z","advisories":[],"bugzilla":"1775097","bugzilla_description":"CVE-2019-19056 kernel: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows to cause DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19056.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-17133","severity":"important","public_date":"2019-10-04T00:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0661","RHSA-2020:0374","RHSA-2020:0609","RHSA-2020:0790","RHSA-2020:0174","RHSA-2020:0592","RHSA-2020:0653","RHSA-2020:0543","RHSA-2020:0664"],"bugzilla":"1771909","bugzilla_description":"CVE-2019-17133 kernel: buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.64.1.el7","kernel-0:3.10.0-957.46.1.el7","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-0:2.6.32-754.28.1.el6","kernel-0:3.10.0-514.73.1.el7","kernel-alt-0:4.14.0-115.17.1.el7a","kernel-0:3.10.0-862.48.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17133.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-19523","severity":"moderate","public_date":"2019-10-04T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1783434","bugzilla_description":"CVE-2019-19523 kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416->CWE-476","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19523.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-17075","severity":"moderate","public_date":"2019-10-01T00:00:00Z","advisories":[],"bugzilla":"1759767","bugzilla_description":"CVE-2019-17075 kernel: denial of service in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17075.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-16994","severity":"low","public_date":"2019-09-30T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1759681","bugzilla_description":"CVE-2019-16994 kernel: Memory leak in sit_init_net() in net/ipv6/sit.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16994.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-16995","severity":"low","public_date":"2019-09-30T00:00:00Z","advisories":[],"bugzilla":"1759684","bugzilla_description":"CVE-2019-16995 kernel: Memory leak in hsr_dev_finalize() in net/hsr/hsr_device.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16995.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2019-16921","severity":"important","public_date":"2019-09-27T00:00:00Z","advisories":[],"bugzilla":"1762321","bugzilla_description":"CVE-2019-16921 kernel: information disclosure in hns_roce_alloc_ucontext in drivers/infiniband/hw/hns/hns_roce_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16921.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-19076","severity":"low","public_date":"2019-09-26T00:00:00Z","advisories":[],"bugzilla":"1776852","bugzilla_description":"CVE-2019-19076 kernel: memory leak in the nfp_abm_u32_knode_replace() function in drivers/net/ethernet/netronome/nfp/abm/cls.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19076.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-19054","severity":"low","public_date":"2019-09-25T00:00:00Z","advisories":[],"bugzilla":"1775063","bugzilla_description":"CVE-2019-19054 kernel: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c allows attackers to cause a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19054.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19080","severity":"low","public_date":"2019-09-25T00:00:00Z","advisories":[],"bugzilla":"1776372","bugzilla_description":"CVE-2019-19080 kernel: memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19080.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-19081","severity":"low","public_date":"2019-09-25T00:00:00Z","advisories":[],"bugzilla":"1776375","bugzilla_description":"CVE-2019-19081 kernel: memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19081.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-19082","severity":"low","public_date":"2019-09-25T00:00:00Z","advisories":[],"bugzilla":"1776832","bugzilla_description":"CVE-2019-19082 kernel: memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19082.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-18198","severity":"moderate","public_date":"2019-09-24T00:00:00Z","advisories":[],"bugzilla":"1771486","bugzilla_description":"CVE-2019-18198 kernel: reference count usage error in fib6_rule_suppress function in net/ipv6/fib6_rules.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18198.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-16714","severity":"moderate","public_date":"2019-09-23T00:00:00Z","advisories":[],"bugzilla":"1755544","bugzilla_description":"CVE-2019-16714 kernel: vulnerability in rds6_inc_info_copy in net/rds/recv.c allows attackers to obtain sensitive information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16714.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-17052","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1758239","bugzilla_description":"CVE-2019-17052 kernel: unprivileged users able to create RAW sockets in the the AF_AX25 network protocol.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17052.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2019-17053","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1758242","bugzilla_description":"CVE-2019-17053 kernel: unprivileged users able to create RAW sockets in AF_IEEE802154 network protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-17054","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1758245","bugzilla_description":"CVE-2019-17054 kernel: privilege escalation in atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17054.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2019-17055","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0790","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1758248","bugzilla_description":"CVE-2019-17055 kernel: unprivileged users able to create RAW sockets in AF_ISDN network protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:2.6.32-754.28.1.el6","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17055.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-17056","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1758256","bugzilla_description":"CVE-2019-17056 kernel: unprivileged access to llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC socket type.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17056.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2019-19078","severity":"moderate","public_date":"2019-09-19T00:00:00Z","advisories":[],"bugzilla":"1776353","bugzilla_description":"CVE-2019-19078 kernel: memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19078.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-19525","severity":"moderate","public_date":"2019-09-19T00:00:00Z","advisories":[],"bugzilla":"1783478","bugzilla_description":"CVE-2019-19525 kernel: malicious USB device leads to use-after-free in the drivers/net/ieee802154/atusb.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19525.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-16413","severity":"moderate","public_date":"2019-09-18T00:00:00Z","advisories":[],"bugzilla":"1757321","bugzilla_description":"CVE-2019-16413 kernel:  i_size_read() infinite loop leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16413.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-18680","severity":"low","public_date":"2019-09-18T00:00:00Z","advisories":[],"bugzilla":"1772527","bugzilla_description":"CVE-2019-18680 kernel: NULL pointer dereference in rds_tcp_kill_sock() in net/rds/tcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18680.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14821","severity":"important","public_date":"2019-09-17T17:00:00Z","advisories":["RHSA-2020:2851","RHSA-2019:4256","RHSA-2019:4154","RHSA-2020:0027","RHSA-2019:3978","RHSA-2019:3979","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1746708","bugzilla_description":"CVE-2019-14821 Kernel: KVM: OOB memory access via mmio ring buffer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.7.1.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:2.6.32-754.25.1.el6","kernel-rt-0:3.10.0-1062.7.1.rt56.1030.el7","kernel-alt-0:4.14.0-115.16.1.el7a","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14821.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-14835","severity":"important","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2019:2854","RHSA-2019:2865","RHSA-2019:2864","RHSA-2019:2863","RHSA-2019:2830","RHSA-2019:2862","RHBA-2019:3151","RHSA-2019:2869","RHSA-2019:2924","RHSA-2019:2901","RHSA-2019:2900","RHSA-2019:2867","RHSA-2019:2889","RHSA-2019:2899","RHSA-2019:2866","RHSA-2019:2829","RHSA-2019:2828","RHSA-2019:2827"],"bugzilla":"1750727","bugzilla_description":"CVE-2019-14835 kernel: vhost-net: guest to host kernel escape during migration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["redhat-coreos-42.80.20191022.0","redhat-virtualization-host-0:4.2-20190919.0.el7_6","kernel-0:2.6.32-754.23.1.el6","kernel-rt-0:3.10.0-1062.1.2.rt56.1025.el7","kernel-0:3.10.0-1062.1.2.el7","kernel-0:3.10.0-862.41.2.el7","kernel-0:3.10.0-693.59.1.el7","kernel-0:3.10.0-514.69.1.el7","kernel-0:3.10.0-327.82.1.el7","kernel-0:4.18.0-80.11.2.el8_0","kernel-0:2.6.32-504.81.2.el6","kernel-0:2.6.32-431.96.2.el6","kernel-0:3.10.0-957.35.2.el7","kernel-alt-0:4.14.0-115.13.1.el7a","kernel-rt-0:4.18.0-80.11.2.rt9.157.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14835.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-19053","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1775056","bugzilla_description":"CVE-2019-19053 kernel: A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c allows attackers to cause a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19083","severity":"low","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1776838","bugzilla_description":"CVE-2019-19083 kernel: memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19083.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19075","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1776842","bugzilla_description":"CVE-2019-19075 kernel: memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15031","severity":"moderate","public_date":"2019-09-13T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2020:1372","RHBA-2020:1450"],"bugzilla":"1760063","bugzilla_description":"CVE-2019-15031 kernel: powerpc: local user can read vector registers of other users' processes via an interrupt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","redhat-coreos-42.81.20200407.0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15031.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-16746","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016"],"bugzilla":"1760306","bugzilla_description":"CVE-2019-16746 kernel: buffer-overflow hardening in WiFi beacon validation code.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16746.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-16231","severity":"low","public_date":"2019-09-11T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1760310","bugzilla_description":"CVE-2019-16231 kernel: null-pointer dereference in drivers/net/fjes/fjes_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16231.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-16232","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":[],"bugzilla":"1760351","bugzilla_description":"CVE-2019-16232 kernel: null-pointer dereference in drivers/net/wireless/marvell/libertas/if_sdio.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16232.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-19079","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":[],"bugzilla":"1776367","bugzilla_description":"CVE-2019-19079 kernel: memory leak in the qrtr_tun_write_iter() function in net/qrtr/tun.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19079.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11184","severity":"moderate","public_date":"2019-09-10T02:46:00Z","advisories":[],"bugzilla":"1752738","bugzilla_description":"CVE-2019-11184 hardware:  Side-channel cache attack against DDIO with RDMA","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-341->CWE-642","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11184.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2019-19077","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775724","bugzilla_description":"CVE-2019-19077 kernel: memory leak in bnxt_re_create_srq function in drivers/infiniband/hw/bnxt_re/ib_verbs.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19077.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-16233","severity":"low","public_date":"2019-09-09T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1760420","bugzilla_description":"CVE-2019-16233 kernel: null pointer dereference in drivers/scsi/qla2xxx/qla_os.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16233.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-16234","severity":"low","public_date":"2019-09-09T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1760441","bugzilla_description":"CVE-2019-16234 kernel: null pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16234.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-16230","severity":"low","public_date":"2019-09-09T00:00:00Z","advisories":[],"bugzilla":"1760450","bugzilla_description":"CVE-2019-16230 kernel: null pointer dereference in drivers/gpu/drm/radeon/radeon_display.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16230.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-16229","severity":"low","public_date":"2019-09-09T00:00:00Z","advisories":[],"bugzilla":"1760490","bugzilla_description":"CVE-2019-16229 kernel: null pointer dereference in drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16229.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-16089","severity":"low","public_date":"2019-09-06T00:00:00Z","advisories":[],"bugzilla":"1751393","bugzilla_description":"CVE-2019-16089 kernel: Improper return check in nbd_genl_status function in drivers/block/nbd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16089.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-15030","severity":"moderate","public_date":"2019-09-06T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2020:1372","RHBA-2020:1450"],"bugzilla":"1759313","bugzilla_description":"CVE-2019-15030 kernel: powerpc: local user can read vector registers of other users' processes via a Facility Unavailable exception","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","redhat-coreos-42.81.20200407.0","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15030.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-15919","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1750410","bugzilla_description":"CVE-2019-15919 kernel: use-after-free in SMB2_write function in fs/cifs/smb2pdu.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15919.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-15926","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1750802","bugzilla_description":"CVE-2019-15926 kernel: out of bounds access in  functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15926.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-15916","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:0740","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1750813","bugzilla_description":"CVE-2019-15916 kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15916.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18595","severity":"important","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:2214","RHSA-2020:2522","RHSA-2020:2277","RHSA-2020:2289","RHSA-2020:2242","RHSA-2020:2285","RHSA-2020:2085","RHSA-2020:2082"],"bugzilla":"1758671","bugzilla_description":"CVE-2017-18595 kernel: double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1127.8.2.rt56.1103.el7","kernel-0:3.10.0-514.76.1.el7","kernel-0:3.10.0-1062.26.1.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-957.54.1.el7","kernel-rt-1:3.10.0-693.67.1.rt56.665.el6rt","kernel-0:3.10.0-1127.8.2.el7","kernel-0:3.10.0-693.67.1.el7","kernel-0:3.10.0-327.88.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18595.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-15925","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1759052","bugzilla_description":"CVE-2019-15925 kernel: out-of-bounds access in function hclge_tm_schd_mode_vnet_base_cfg","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15925.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-15927","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1759059","bugzilla_description":"CVE-2019-15927 kernel: out-of-bounds in function build_audio_procunit in sound/usb/mixer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15927.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-21008","severity":"important","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1759188","bugzilla_description":"CVE-2018-21008 kernel: use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-21008.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15917","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2020:2854"],"bugzilla":"1760100","bugzilla_description":"CVE-2019-15917 kernel: use-after-free in drivers/bluetooth/hci_ldisc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15917.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-15918","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1760550","bugzilla_description":"CVE-2019-15918 kernel: out-of-bounds read in fs/cifs/smb2pdu.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15918.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-15920","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1760864","bugzilla_description":"CVE-2019-15920 kernel: use-after-free information leak in SMB2_read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15920.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-15921","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1760958","bugzilla_description":"CVE-2019-15921 kernel: memory leak in genl_register_family() in net/netlink/genetlink.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15921.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-15922","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1763828","bugzilla_description":"CVE-2019-15922 kernel: null pointer dereference in drivers/block/paride/pf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15922.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15923","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1763844","bugzilla_description":"CVE-2019-15923 kernel: null pointer dereference in drivers/block/paride/pf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15923.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15924","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1763869","bugzilla_description":"CVE-2019-15924 kernel: null pointer dereference in drivers/net/ethernet/intel/fm10k/fm10k_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15924.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15902","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1752081","bugzilla_description":"CVE-2019-15902 kernel: backporting error in ptrace_get_debugreg()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15902.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-9454","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1818818","bugzilla_description":"CVE-2019-9454 kernel: out of bounds write in i2c driver leads to local escalation of privilege","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-787|CWE-119)","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9454.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2182","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819133","bugzilla_description":"CVE-2019-2182 kernel: possible execution path in MMU code leads to local escalation of privilege","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2182.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9453","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819146","bugzilla_description":"CVE-2019-9453 kernel: out of bounds read in F2FS touch driver leads to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-125|CWE-200)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9453.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-9456","severity":"low","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1819156","bugzilla_description":"CVE-2019-9456 kernel: OOB write due to missing bounds check leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-787","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9456.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9248","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819352","bugzilla_description":"CVE-2019-9248 kernel: out of bounds write due to missing bounds check leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9248.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9245","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819355","bugzilla_description":"CVE-2019-9245 kernel: out of bounds read due to a missing bounds check leads to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9245.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-9271","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819358","bugzilla_description":"CVE-2019-9271 kernel: race condition in mnh driver due to insufficient locking leads to use-after-free and subsequently privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-362|CWE-416)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9271.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-9276","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819363","bugzilla_description":"CVE-2019-9276 kernel: out of bounds write due to use after free in synaptics_dsx_htc touchscreen driver leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9276.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9443","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819368","bugzilla_description":"CVE-2019-9443 kernel: out of bounds write due to permission bypass in vl53L0 driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9443.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9442","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819371","bugzilla_description":"CVE-2019-9442 kernel: memory corruption due to use after free in mnh driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9442.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9441","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819374","bugzilla_description":"CVE-2019-9441 kernel: out of bounds write due to improper input validation in mnh driver leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9441.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9458","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2020:2854"],"bugzilla":"1819377","bugzilla_description":"CVE-2019-9458 kernel: use after free due to race condition in the video driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9458.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-9449","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819380","bugzilla_description":"CVE-2019-9449 kernel: out of bounds read due to missing bounds check in FingerTipS touchscreen driver leads to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9449.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-9445","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819384","bugzilla_description":"CVE-2019-9445 kernel: out of bounds read due to missing bounds check in F2FS driver leads to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9445.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-9448","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819387","bugzilla_description":"CVE-2019-9448 kernel: out of bounds write due to missing bounds check in FingerTipS touchscreen driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9450","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819392","bugzilla_description":"CVE-2019-9450 kernel: memory corruption due to race condition in FingerTipS touchscreen driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9450.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-9452","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819396","bugzilla_description":"CVE-2019-9452 kernel: out of bounds read due to missing bounds check in SEC_TS touch driver leads to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9452.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-9455","severity":"low","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819399","bugzilla_description":"CVE-2019-9455 kernel: kernel pointer leak due to WARN_ON statement in video driver leads to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9455.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.3"},{"CVE":"CVE-2019-9270","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819402","bugzilla_description":"CVE-2019-9270 kernel: out of bounds write due to missing bounds check in unifi and r8180 WiFi drivers leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9270.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9273","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819405","bugzilla_description":"CVE-2019-9273 kernel: use after free due to improper locking in synaptics_dsx_htc touchscreen driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9273.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9274","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819409","bugzilla_description":"CVE-2019-9274 kernel: out of bounds write due to missing bounds check in mnh driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9274.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9275","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819412","bugzilla_description":"CVE-2019-9275 kernel: use after free due to improper locking in mnh driver leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9275.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9345","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819417","bugzilla_description":"CVE-2019-9345 kernel: data separation violation in sdcardfs leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9345.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9426","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819422","bugzilla_description":"CVE-2019-9426 kernel: out of bounds write due to missing bounds check in Bluetooth leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9426.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9436","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819426","bugzilla_description":"CVE-2019-9436 kernel: secure boot bypass in bootloader leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-592","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9436.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9444","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819433","bugzilla_description":"CVE-2019-9444 kernel: kernel pointer leak in sync debug fs driver leads to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9444.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-9446","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819437","bugzilla_description":"CVE-2019-9446 kernel: out of bounds write due to improper input validation in FingerTipS touchscreen driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9446.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9447","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819441","bugzilla_description":"CVE-2019-9447 kernel: use after free due to improper locking in FingerTipS touchscreen driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9447.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9451","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819444","bugzilla_description":"CVE-2019-9451 kernel: out of bounds write due to missing bounds check in touchscreen driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9451.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9461","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819447","bugzilla_description":"CVE-2019-9461 kernel: information disclosure via VPN routing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9461.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-15807","severity":"low","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1747216","bugzilla_description":"CVE-2019-15807 kernel: Memory leak in drivers/scsi/libsas/sas_expander.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15807.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-14814","severity":"moderate","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1744130","bugzilla_description":"CVE-2019-14814 kernel: heap overflow in mwifiex_set_uap_rates() function of Marvell Wifi Driver leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-14815","severity":"moderate","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHSA-2020:1070","RHBA-2020:0460","RHSA-2020:1016"],"bugzilla":"1744137","bugzilla_description":"CVE-2019-14815 kernel: heap-overflow in mwifiex_set_wmm_params() function of Marvell WiFi driver leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-1127.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-14816","severity":"important","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0661","RHSA-2020:1266","RHSA-2020:0374","RHSA-2020:1353","RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:1347","RHSA-2020:0653","RHSA-2020:0664","RHSA-2020:0204"],"bugzilla":"1744149","bugzilla_description":"CVE-2019-14816 kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.65.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-514.73.1.el7","kernel-rt-1:3.10.0-693.65.1.rt56.663.el6rt","kernel-0:3.10.0-957.46.1.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-862.51.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14816.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-15666","severity":"moderate","public_date":"2019-08-27T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1747334","bugzilla_description":"CVE-2019-15666 kernel: out-of-bounds array access in __xfrm_policy_unlink","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15666.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-15538","severity":"moderate","public_date":"2019-08-25T00:00:00Z","advisories":["RHSA-2020:2104"],"bugzilla":"1746777","bugzilla_description":"CVE-2019-15538 kernel: denial of service in in xfs_setattr_nonsize in fs/xfs/xfs_iops.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-alt-0:4.14.0-115.21.2.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15538.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15504","severity":"moderate","public_date":"2019-08-23T00:00:00Z","advisories":[],"bugzilla":"1746725","bugzilla_description":"CVE-2019-15504 kernel: double free in drivers/net/wireless/rsi/rsi_91x_usb.c via crafted USB device","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15504.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-15505","severity":"moderate","public_date":"2019-08-23T00:00:00Z","advisories":[],"bugzilla":"1746732","bugzilla_description":"CVE-2019-15505 kernel: out of bounds read in drivers/media/usb/dvb-usb/technisat-usb2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15505.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-15292","severity":"moderate","public_date":"2019-08-21T00:00:00Z","advisories":[],"bugzilla":"1746628","bugzilla_description":"CVE-2019-15292 kernel: Use-after-free in atalk_proc_exit function in net/appletalk","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15292.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19533","severity":"low","public_date":"2019-08-21T00:00:00Z","advisories":[],"bugzilla":"1783534","bugzilla_description":"CVE-2019-19533 kernel: information leak bug caused  by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19533.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2017-18509","severity":"important","public_date":"2019-08-20T00:00:00Z","advisories":[],"bugzilla":"1743520","bugzilla_description":"CVE-2017-18509 kernel: not checking sk_type and protocol in net/ipv6/ip6mr.c leads to general protection fault, or arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-15090","severity":"low","public_date":"2019-08-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1743526","bugzilla_description":"CVE-2019-15090 kernel: An out-of-bounds read in drivers/scsi/qedi/qedi_dbg.c leading to crash or information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15090.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-15118","severity":"moderate","public_date":"2019-08-20T00:00:00Z","advisories":[],"bugzilla":"1743539","bugzilla_description":"CVE-2019-15118 kernel: mishandling recursion in sound/usb/mixer.c leading to kernel stack exhaustion and crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-15098","severity":"low","public_date":"2019-08-20T00:00:00Z","advisories":[],"bugzilla":"1743552","bugzilla_description":"CVE-2019-15098 kernel: a NULL pointer dereference in drivers/net/wireless/ath/ath6kl/usb.c leads to a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15098.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-15099","severity":"low","public_date":"2019-08-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1493","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1743560","bugzilla_description":"CVE-2019-15099 kernel: a NULL pointer dereference in drivers/net/wireless/ath/ath10k/usb.c leads to a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15099.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-15239","severity":"important","public_date":"2019-08-20T00:00:00Z","advisories":["RHSA-2020:0027","RHSA-2019:3978","RHSA-2019:3979"],"bugzilla":"1747353","bugzilla_description":"CVE-2019-15239 kernel: local attacker can trigger multiple use-after-free conditions results in privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-1062.7.1.el7","kernel-rt-0:3.10.0-1062.7.1.rt56.1030.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15239.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-15211","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743544","bugzilla_description":"CVE-2019-15211 kernel: use-after-free in drivers/media/v4l2-core/v4l2-dev.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-15212","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743556","bugzilla_description":"CVE-2019-15212 kernel: double-free caused by malicious USB device in drivers/usb/misc/rio500.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15212.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-15213","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743580","bugzilla_description":"CVE-2019-15213 kernel: use-after-free caused by malicious USB device in drivers/media/usb/dvb-usb/dvb-usb-init.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15213.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-15214","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743591","bugzilla_description":"CVE-2019-15214 kernel: use-after-free in sound/core/init.c and sound/core/info.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15214.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-15215","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1745514","bugzilla_description":"CVE-2019-15215 kernel: use after free in drivers/media/usb/cpia2/cpia2_usb.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15215.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15216","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1745523","bugzilla_description":"CVE-2019-15216 kernel: null-pointer dereference in drivers/usb/misc/yurex.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15216.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-15217","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1745528","bugzilla_description":"CVE-2019-15217 kernel: null pointer dereference in drivers/media/usb/zr364xx/zr364xx.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15217.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15218","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1745530","bugzilla_description":"CVE-2019-15218 kernel: null pointer dereference in the drivers/media/usb/siano/smsusb.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15218.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15219","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1745536","bugzilla_description":"CVE-2019-15219 kernel: null pointer dereference in drivers/usb/misc/sisusbvga/sisusb.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15219.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-20908","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3218","RHSA-2020:3219","RHSA-2020:3228"],"bugzilla":"1852942","bugzilla_description":"CVE-2019-20908 kernel: lockdown: bypass through ACPI write via efivar_ssdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-193.14.3.rt13.67.el8_2","kernel-0:4.18.0-80.27.2.el8_0","kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.14.3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20908.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2016-10905","severity":"moderate","public_date":"2019-08-18T00:00:00Z","advisories":[],"bugzilla":"1757356","bugzilla_description":"CVE-2016-10905 kernel: use-after-free in fs/gfs2/rgrp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10905.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-18552","severity":"moderate","public_date":"2019-08-18T00:00:00Z","advisories":[],"bugzilla":"1757358","bugzilla_description":"CVE-2017-18552 kernel: OOB read and write in net/rds/af_rds.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-787|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18552.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-18549","severity":"low","public_date":"2019-08-18T00:00:00Z","advisories":[],"bugzilla":"1757363","bugzilla_description":"CVE-2017-18549 kernel: information exposure in drivers/scsi/aacraid/commctrl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18549.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-18551","severity":"moderate","public_date":"2019-08-18T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1757368","bugzilla_description":"CVE-2017-18551 kernel: out of bounds write in function i2c_smbus_xfer_emulated in drivers/i2c/i2c-core-smbus.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18551.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2016-10907","severity":"moderate","public_date":"2019-08-18T00:00:00Z","advisories":[],"bugzilla":"1757372","bugzilla_description":"CVE-2016-10907 kernel: out of bounds write in ad5755_parse_dt in drivers/iio/dac/ad5755.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10907.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-18550","severity":"moderate","public_date":"2019-08-18T00:00:00Z","advisories":[],"bugzilla":"1757375","bugzilla_description":"CVE-2017-18550 kernel: information exposure in drivers/scsi/aacraid/commctrl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18550.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-10906","severity":"moderate","public_date":"2019-08-18T00:00:00Z","advisories":[],"bugzilla":"1757380","bugzilla_description":"CVE-2016-10906 kernel: use-after-free in functions arc_emac_tx and arc_emac_tx_clean in drivers/net/ethernet/arc/emac_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10906.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-15117","severity":"moderate","public_date":"2019-08-16T00:00:00Z","advisories":[],"bugzilla":"1746769","bugzilla_description":"CVE-2019-15117 kernel: out of bounds memory access in parse_audio_mixer_unit in sound/usb/mixer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15117.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10140","severity":"moderate","public_date":"2019-08-15T03:50:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1677778","bugzilla_description":"CVE-2019-10140 kernel: overlayfs: NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10140.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19530","severity":"moderate","public_date":"2019-08-15T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1783518","bugzilla_description":"CVE-2019-19530 kernel: use-after-free caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19530.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2007-2764","severity":"moderate","public_date":"2019-08-14T00:00:00Z","advisories":[],"bugzilla":"1758987","bugzilla_description":"CVE-2007-2764 kernel: denial of service via unspecified vectors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2764.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-19537","severity":"moderate","public_date":"2019-08-12T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1783561","bugzilla_description":"CVE-2019-19537 kernel: race condition caused by a malicious USB device in the USB character device driver layer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19537.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2019-9506","severity":"important","public_date":"2019-08-10T09:00:00Z","advisories":["RHSA-2019:3217","RHSA-2019:3089","RHSA-2020:1460","RHSA-2019:2975","RHSA-2019:3076","RHSA-2019:3055","RHSA-2019:3187","RHSA-2019:3220","RHSA-2019:3231","RHSA-2019:3165","RHSA-2020:0204","RHSA-2019:3218","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1727857","bugzilla_description":"CVE-2019-9506 hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["kernel-alt-0:4.14.0-115.14.1.el7a","kernel-0:3.10.0-957.38.1.el7","kernel-0:3.10.0-862.43.1.el7","kernel-0:3.10.0-514.70.1.el7","kernel-0:3.10.0-693.60.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","kernel-rt-1:3.10.0-693.60.1.rt56.654.el6rt","redhat-coreos-42.81.20191107.0","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:3.10.0-327.86.1.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.0"},{"CVE":"CVE-2018-20961","severity":"moderate","public_date":"2019-08-07T00:00:00Z","advisories":[],"bugzilla":"1743502","bugzilla_description":"CVE-2018-20961 kernel: double free vulnerability in function f_midi_set_alt in drivers/usb/gadget/function/f_midi.c causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20961.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-14763","severity":"low","public_date":"2019-08-07T00:00:00Z","advisories":[],"bugzilla":"1743505","bugzilla_description":"CVE-2019-14763 kernel: double-locking error in drivers/usb/dwc3/gadget.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667->CWE-833","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14763.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-1125","severity":"moderate","public_date":"2019-08-06T17:00:00Z","advisories":["RHSA-2019:2476","RHSA-2019:2696","RHSA-2019:2695","RHSA-2019:2473","RHSA-2019:2975","RHSA-2019:2600","RHSA-2019:2411","RHSA-2019:2730","RHSA-2019:3220","RHSA-2019:3011","RHBA-2019:3151","RHSA-2019:2900","RHSA-2019:2405","RHSA-2019:2899","RHSA-2019:2609","RHBA-2019:3248"],"bugzilla":"1724389","bugzilla_description":"CVE-2019-1125 kernel: hw: Spectre SWAPGS gadget vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":["kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0","redhat-virtualization-host-0:4.2-20191022.0.el7_6","kernel-0:3.10.0-957.38.1.el7","kernel-0:3.10.0-862.43.1.el7","redhat-coreos-42.80.20191022.0","kernel-0:2.6.32-431.96.1.el6","kernel-0:2.6.32-754.18.2.el6","kernel-0:4.18.0-80.7.2.el8_0","kernel-0:2.6.32-504.80.2.el6","kernel-0:3.10.0-514.69.1.el7","kernel-0:3.10.0-327.82.1.el7","kernel-rt-0:3.10.0-1062.1.1.rt56.1024.el7","kernel-0:3.10.0-693.58.1.el7","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:3.10.0-1062.1.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-19527","severity":"moderate","public_date":"2019-08-06T00:00:00Z","advisories":["RHSA-2020:4236","RHSA-2020:1378","RHSA-2020:3221","RHSA-2020:1372","RHSA-2020:3220","RHBA-2020:1450"],"bugzilla":"1783498","bugzilla_description":"CVE-2019-19527 kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-147.8.1.rt24.101.el8_1","kernel-0:3.10.0-1062.36.1.el7","kernel-0:4.18.0-147.8.1.el8_1","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","redhat-coreos-42.81.20200407.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19527.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-19531","severity":"moderate","public_date":"2019-08-05T00:00:00Z","advisories":[],"bugzilla":"1783523","bugzilla_description":"CVE-2019-19531 kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/yurex.c driver leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19531.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15220","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":[],"bugzilla":"1749973","bugzilla_description":"CVE-2019-15220 kernel: Use-after-free in drivers/net/wireless/intersil/p54/p54usb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15220.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15221","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1070","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1749974","bugzilla_description":"CVE-2019-15221 kernel: Null pointer dereference in the sound/usb/line6/pcm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","kernel-rt-0:3.10.0-1127.rt56.1093.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15221.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15222","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":[],"bugzilla":"1749975","bugzilla_description":"CVE-2019-15222 kernel: Null pointer dereference in the sound/usb/helper.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15222.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15223","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1749976","bugzilla_description":"CVE-2019-15223 kernel: Null pointer dereference in the sound/usb/line6/driver.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15223.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15290","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":[],"bugzilla":"1749977","bugzilla_description":"CVE-2019-15290 kernel: Null pointer dereference in the ath6kl_usb_alloc_urb_from_pipe function in the drivers/net/wireless/ath/ath6kl/usb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15290.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15291","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":[],"bugzilla":"1749978","bugzilla_description":"CVE-2019-15291 kernel: Null pointer dereference in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15291.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-19535","severity":"moderate","public_date":"2019-08-02T00:00:00Z","advisories":[],"bugzilla":"1783547","bugzilla_description":"CVE-2019-19535 kernel: information leak bug caused  by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.cdriver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19535.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-19536","severity":"moderate","public_date":"2019-08-02T00:00:00Z","advisories":[],"bugzilla":"1783552","bugzilla_description":"CVE-2019-19536 kernel: information leak bug caused  by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19536.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-10207","severity":"moderate","public_date":"2019-07-29T13:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1733874","bugzilla_description":"CVE-2019-10207 kernel: null-pointer dereference in hci_uart_set_flow_control","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2007-6762","severity":"moderate","public_date":"2019-07-27T00:00:00Z","advisories":[],"bugzilla":"1735620","bugzilla_description":"CVE-2007-6762 kernel: buffer overflow in doi_def->tags[] array","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6762.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2011-5327","severity":"important","public_date":"2019-07-27T00:00:00Z","advisories":[],"bugzilla":"1735624","bugzilla_description":"CVE-2011-5327 kernel: memory corruption in sunction tcm_loop_make_naa_tpg() in drivers/target/loopback/tcm_loop.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5327.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10764","severity":"moderate","public_date":"2019-07-27T00:00:00Z","advisories":[],"bugzilla":"1735633","bugzilla_description":"CVE-2016-10764 kernel: off by one in function cqspi_setup_flash() in drivers/mtd/spi-nor/cadence-quadspi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10764.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18379","severity":"moderate","public_date":"2019-07-27T00:00:00Z","advisories":[],"bugzilla":"1735637","bugzilla_description":"CVE-2017-18379 kernel: out of bound access in drivers/nvme/target/fc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-787|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18379.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2012-6712","severity":"moderate","public_date":"2019-07-27T00:00:00Z","advisories":[],"bugzilla":"1735642","bugzilla_description":"CVE-2012-6712 kernel: buffer overflow in drivers/net/wireless/iwlwifi/iwl-agn-sta.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6712.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2015-9289","severity":"moderate","public_date":"2019-07-27T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016"],"bugzilla":"1735655","bugzilla_description":"CVE-2015-9289 kernel: out of bound read in DVB connexant driver.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9289.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2010-5331","severity":"moderate","public_date":"2019-07-27T00:00:00Z","advisories":[],"bugzilla":"1743598","bugzilla_description":"CVE-2010-5331 kernel: range check issue in drivers/gpu/drm/radeon/atombios.c leads to buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193->CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5331.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2010-5332","severity":"moderate","public_date":"2019-07-27T00:00:00Z","advisories":[],"bugzilla":"1743604","bugzilla_description":"CVE-2010-5332 kernel: out of bounds array access in drivers/net/mlx4/port.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5332.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2019-14283","severity":"moderate","public_date":"2019-07-26T00:00:00Z","advisories":["RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016"],"bugzilla":"1734243","bugzilla_description":"CVE-2019-14283 kernel: integer overflow and OOB read in drivers/block/floppy.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-190|CWE-125)","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14283.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2019-14284","severity":"moderate","public_date":"2019-07-26T00:00:00Z","advisories":[],"bugzilla":"1734246","bugzilla_description":"CVE-2019-14284 kernel: denial of service in drivers/block/floppy.c by setup_format_params division-by-zero","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14284.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-20856","severity":"important","public_date":"2019-07-26T00:00:00Z","advisories":["RHSA-2020:0100","RHSA-2019:3217","RHSA-2019:3089","RHSA-2019:3076","RHSA-2019:3055","RHSA-2020:0698","RHSA-2020:0103","RHSA-2020:0543","RHSA-2020:0664"],"bugzilla":"1738705","bugzilla_description":"CVE-2018-20856 kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-alt-0:4.14.0-115.14.1.el7a","kernel-0:3.10.0-693.62.1.el7","kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","kernel-0:3.10.0-957.46.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-rt-1:3.10.0-693.62.1.rt56.659.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20856.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-20855","severity":"moderate","public_date":"2019-07-26T00:00:00Z","advisories":[],"bugzilla":"1738708","bugzilla_description":"CVE-2018-20855 kernel: Information leak in create_qp_common in drivers/infiniband/hw/mlx5/qp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20855.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-20854","severity":"moderate","public_date":"2019-07-26T00:00:00Z","advisories":[],"bugzilla":"1738711","bugzilla_description":"CVE-2018-20854 kernel: Out-of-bounds read in drivers/phy/mscc/phy-ocelot-serdes.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20854.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-13648","severity":"moderate","public_date":"2019-07-19T00:00:00Z","advisories":["RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:3019"],"bugzilla":"1735630","bugzilla_description":"CVE-2019-13648 kernel: denial of service in arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c via sigreturn() system call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-1062.30.1.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1127.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13648.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-13272","severity":"important","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2809","RHBA-2019:3151","RHSA-2019:2411","RHSA-2019:2405"],"bugzilla":"1730895","bugzilla_description":"CVE-2019-13272 kernel: broken permission and object lifetime handling for PTRACE_TRACEME","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":["kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.7.2.el8_0","kernel-alt-0:4.14.0-115.12.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13272.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10638","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1729931","bugzilla_description":"CVE-2019-10638 Kernel: net: weak IP ID generation leads to remote device tracking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331->CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-10639","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:2522","RHBA-2020:3180","RHSA-2020:1070","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1729933","bugzilla_description":"CVE-2019-10639 Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-193.el8","kernel-rt-0:3.10.0-1127.rt56.1093.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-13631","severity":"moderate","public_date":"2019-07-11T00:00:00Z","advisories":[],"bugzilla":"1731000","bugzilla_description":"CVE-2019-13631 kernel: OOB writes in parse_hid_report_descriptor in drivers/input/tablet/gtco.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13631.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-13233","severity":"moderate","public_date":"2019-07-04T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1727756","bugzilla_description":"CVE-2019-13233 kernel: use-after-free in arch/x86/lib/insn-eval.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13233.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2019-12984","severity":"moderate","public_date":"2019-06-26T00:00:00Z","advisories":[],"bugzilla":"1724637","bugzilla_description":"CVE-2019-12984 kernel: null pointer dereference in function nfc_genl_deactivate_target() in net/nfc/netlink.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-476|CWE-400)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12984.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-12817","severity":"important","public_date":"2019-06-24T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2703"],"bugzilla":"1720616","bugzilla_description":"CVE-2019-12817 kernel: ppc: unrelated processes being able to read/write to each other's virtual memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->(CWE-125|CWE-787)","affected_packages":["redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12817.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-12881","severity":"moderate","public_date":"2019-06-18T00:00:00Z","advisories":[],"bugzilla":"1723860","bugzilla_description":"CVE-2019-12881 kernel: NULL pointer dereference in i915_gem_userptr_get_pages allows local denial of service via crafted ioctl calls","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12881.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-11477","severity":"important","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719123","bugzilla_description":"CVE-2019-11477 Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11478","severity":"moderate","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719128","bugzilla_description":"CVE-2019-11478 Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11478.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11479","severity":"moderate","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719129","bugzilla_description":"CVE-2019-11479 kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11479.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-3896","severity":"important","public_date":"2019-06-17T00:00:00Z","advisories":["RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1490"],"bugzilla":"1694812","bugzilla_description":"CVE-2019-3896 kernel: Double free in lib/idr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:2.6.32-754.15.3.el6","kernel-0:2.6.32-431.95.3.el6","kernel-0:2.6.32-504.79.3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3896.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-12819","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":[],"bugzilla":"1721962","bugzilla_description":"CVE-2019-12819 kernel: use-after-free in function __mdiobus_register() in drivers/net/phy/mdio_bus.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12819.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-12818","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":[],"bugzilla":"1721967","bugzilla_description":"CVE-2019-12818 kernel: null-pointer dereference in function nfc_llcp_build_tlv in net/nfc/llcp_commands.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12818.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-0174","severity":"moderate","public_date":"2019-06-11T00:00:00Z","advisories":[],"bugzilla":"1719410","bugzilla_description":"CVE-2019-0174 hw: dram: reading bits in memory without accessing them","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1231->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0174.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2018-16871","severity":"moderate","public_date":"2019-06-03T02:23:00Z","advisories":["RHSA-2019:2696","RHBA-2020:3180","RHSA-2019:1891","RHSA-2020:0740","RHSA-2019:1873","RHSA-2019:2730","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1655162","bugzilla_description":"CVE-2018-16871 kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-957.27.2.el7","kernel-0:4.18.0-193.el8","kernel-0:3.10.0-693.58.1.el7","redhat-coreos-43.82.202007300301.0","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16871.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-12614","severity":"low","public_date":"2019-06-03T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:4060"],"bugzilla":"1718176","bugzilla_description":"CVE-2019-12614 kernel: null pointer dereference in dlpar_parse_cc_property in arch/powerrc/platforms/pseries/dlpar.c causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12614.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-12615","severity":"moderate","public_date":"2019-06-02T00:00:00Z","advisories":[],"bugzilla":"1718179","bugzilla_description":"CVE-2019-12615 kernel: null pointer dereference in get_vdev_port_node_info in arch /sparc/kernel/mdesc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12615.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-10126","severity":"important","public_date":"2019-05-31T00:00:00Z","advisories":["RHSA-2020:2289","RHSA-2019:3089","RHSA-2020:0174","RHSA-2019:3076","RHSA-2019:3055","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1716992","bugzilla_description":"CVE-2019-10126 kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10126.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-3846","severity":"important","public_date":"2019-05-30T12:53:00Z","advisories":["RHSA-2020:2289","RHSA-2019:3089","RHBA-2019:3151","RHSA-2020:0174","RHSA-2019:2741","RHSA-2019:2703","RHSA-2019:3076","RHSA-2019:3055"],"bugzilla":"1713059","bugzilla_description":"CVE-2019-3846 kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3846.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-12454","severity":"low","public_date":"2019-05-29T00:00:00Z","advisories":[],"bugzilla":"1716996","bugzilla_description":"CVE-2019-12454 kernel: unspecified impact in function wcd9335_codec_enable_dec in sound/soc/codecs/wcd9335.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12454.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-12456","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":[],"bugzilla":"1717182","bugzilla_description":"CVE-2019-12456 kernel: double fetch in the MPT3COMMAND case in _ctl_ioctl_main in drivers/scsi/mpt3sas/mpt3sas_ctl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-12455","severity":"moderate","public_date":"2019-05-28T00:00:00Z","advisories":[],"bugzilla":"1716990","bugzilla_description":"CVE-2019-12455 kernel: null pointer dereference in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12455.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-12378","severity":"moderate","public_date":"2019-05-25T00:00:00Z","advisories":[],"bugzilla":"1715459","bugzilla_description":"CVE-2019-12378 kernel: unchecked kmalloc of new_ra in ip6_ra_control leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12378.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2019-12380","severity":"low","public_date":"2019-05-25T00:00:00Z","advisories":[],"bugzilla":"1715494","bugzilla_description":"CVE-2019-12380 kernel: memory allocation failure in the efi subsystem leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12380.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-12381","severity":"moderate","public_date":"2019-05-25T00:00:00Z","advisories":[],"bugzilla":"1715501","bugzilla_description":"CVE-2019-12381 kernel: unchecked kmalloc of new_ra in ip_ra_control leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12381.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-12379","severity":"low","public_date":"2019-05-24T00:00:00Z","advisories":[],"bugzilla":"1715491","bugzilla_description":"CVE-2019-12379 kernel:  memory leak in con_insert_unipair in drivers/tty/vt/consolemap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-200|CWE-400)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12379.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-12382","severity":"moderate","public_date":"2019-05-24T00:00:00Z","advisories":["RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303"],"bugzilla":"1715554","bugzilla_description":"CVE-2019-12382 kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253->CWE-476","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12382.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-12126","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646781","bugzilla_description":"CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12130","severity":"important","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646784","bugzilla_description":"CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385->CWE-226","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-12127","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1667782","bugzilla_description":"CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11091","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1705312","bugzilla_description":"CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-11085","severity":"important","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:1891","RHBA-2019:3151","RHSA-2019:1873","RHSA-2020:0609","RHSA-2020:0592","RHSA-2019:1971","RHSA-2020:0543","RHSA-2019:1959"],"bugzilla":"1710405","bugzilla_description":"CVE-2019-11085 kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-250","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.64.1.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-862.48.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11085.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10142","severity":"important","public_date":"2019-05-14T00:00:00Z","advisories":[],"bugzilla":"1711194","bugzilla_description":"CVE-2019-10142 kernel: integer overflow in ioctl handling of fsl hypervisor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10142.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-11833","severity":"moderate","public_date":"2019-05-11T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1712072","bugzilla_description":"CVE-2019-11833 kernel: fs/ext4/extents.c leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11833.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-11884","severity":"moderate","public_date":"2019-05-10T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1709837","bugzilla_description":"CVE-2019-11884 kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11884.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"6.8"},{"CVE":"CVE-2019-11815","severity":"important","public_date":"2019-05-08T00:00:00Z","advisories":[],"bugzilla":"1708518","bugzilla_description":"CVE-2019-11815 kernel: race condition in rds_tcp_kill_sock in net/rds/tcp.c leading to use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11810","severity":"moderate","public_date":"2019-05-07T00:00:00Z","advisories":["RHSA-2020:0036","RHSA-2019:3217","RHSA-2019:2029","RHBA-2019:3151","RHSA-2019:1971","RHSA-2019:2736","RHSA-2019:2043","RHSA-2019:1959","RHSA-2019:2837"],"bugzilla":"1709164","bugzilla_description":"CVE-2019-11810 kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.14.1.el7a","kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:2.6.32-754.22.1.el6","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.46.1.el7","kernel-0:3.10.0-957.35.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11810.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-11811","severity":"moderate","public_date":"2019-05-07T00:00:00Z","advisories":["RHSA-2019:1891","RHSA-2020:0036","RHSA-2019:4057","RHSA-2019:4058","RHBA-2019:3151","RHSA-2019:1873","RHSA-2019:1971","RHSA-2019:1959","RHSA-2020:2854"],"bugzilla":"1709180","bugzilla_description":"CVE-2019-11811 kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.61.1.el7","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-862.46.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11811.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-11683","severity":"moderate","public_date":"2019-05-01T00:00:00Z","advisories":[],"bugzilla":"1707358","bugzilla_description":"CVE-2019-11683 kernel: udp_gro_receive_segment in net/ipv4/udp_offload.c allows denial of service or other unspecified impact via UDP packets with 0 payload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11683.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2054","severity":"moderate","public_date":"2019-05-01T00:00:00Z","advisories":[],"bugzilla":"1709898","bugzilla_description":"CVE-2019-2054 kernel: seccompass mechanism bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-305|CWE-284)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2054.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-3900","severity":"important","public_date":"2019-04-25T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:1973","RHSA-2019:4058","RHSA-2019:3220","RHSA-2019:2043","RHSA-2019:3967","RHSA-2019:3836","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1698757","bugzilla_description":"CVE-2019-3900 Kernel: vhost_net: infinite loop while receiving packets leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-957.38.1.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:3.10.0-693.61.1.el7","redhat-coreos-42.81.20191107.0","kernel-alt-0:4.14.0-115.10.1.el7a","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.44.2.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2019-11487","severity":"important","public_date":"2019-04-22T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:3266","RHBA-2019:3151","RHSA-2020:3230","RHSA-2020:0839","RHSA-2020:0174","RHSA-2019:2741","RHSA-2020:0834","RHSA-2019:2703","RHSA-2020:4182"],"bugzilla":"1703063","bugzilla_description":"CVE-2019-11487 kernel: Count overflow in FUSE request leading to use-after-free issues.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.71.2.el7","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-1:3.10.0-693.71.2.rt56.670.el6rt","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:2.6.32-754.35.1.el6","kernel-0:3.10.0-1062.18.1.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-11599","severity":"moderate","public_date":"2019-04-19T00:00:00Z","advisories":["RHSA-2020:0100","RHSA-2020:0179","RHSA-2019:2029","RHSA-2019:2043","RHSA-2020:0103","RHSA-2020:0543","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1705937","bugzilla_description":"CVE-2019-11599 kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-667","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.62.1.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-957.43.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-rt-1:3.10.0-693.62.1.rt56.659.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11599.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-18805","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0740","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1771496","bugzilla_description":"CVE-2019-18805 kernel: integer overflow in tcp_ack_update_rtt in net/ipv4/tcp_input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18805.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2018-20510","severity":"low","public_date":"2019-04-15T00:00:00Z","advisories":[],"bugzilla":"1707391","bugzilla_description":"CVE-2018-20510 kernel: print_binder_transaction_ilocked() in drivers/android/binder.c leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20510.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-20509","severity":"low","public_date":"2019-04-13T00:00:00Z","advisories":[],"bugzilla":"1707400","bugzilla_description":"CVE-2018-20509 kernel: print_binder_ref_olocked function in drivers/android/binder.c leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20509.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-3887","severity":"important","public_date":"2019-04-05T16:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2703"],"bugzilla":"1695044","bugzilla_description":"CVE-2019-3887 Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3887.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-11486","severity":"moderate","public_date":"2019-04-05T00:00:00Z","advisories":[],"bugzilla":"1705498","bugzilla_description":"CVE-2019-11486 kernel: multiple race conditions in Siemens R3964 line discipline driver in drivers/tty/n_r3964.c leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11486.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-3892","severity":null,"public_date":"2019-04-04T02:55:00Z","advisories":[],"bugzilla":"1696015","bugzilla_description":"CVE-2019-3892 kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3892.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-3837","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":[],"bugzilla":"1678423","bugzilla_description":"CVE-2019-3837 kernel: memory leak in tcp_recvmsg() with NET_DMA","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-11190","severity":"low","public_date":"2019-04-03T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016"],"bugzilla":"1699856","bugzilla_description":"CVE-2019-11190 kernel: ASLR bypass for setuid binaries due to late install_exec_creds()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11190.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-11191","severity":"low","public_date":"2019-04-03T00:00:00Z","advisories":[],"bugzilla":"1700007","bugzilla_description":"CVE-2019-11191 kernel: race condition in load_aout_binary() allows local users to bypass ASLR on setuid a.out programs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11191.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-3882","severity":"moderate","public_date":"2019-04-02T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1689426","bugzilla_description":"CVE-2019-3882 kernel: denial of service vector through vfio DMA mappings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-3874","severity":"moderate","public_date":"2019-03-19T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1686373","bugzilla_description":"CVE-2019-3874 kernel: SCTP socket buffer memory leak leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3874.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-19543","severity":"moderate","public_date":"2019-03-19T00:00:00Z","advisories":[],"bugzilla":"1781810","bugzilla_description":"CVE-2019-19543 kernel: use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19543.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-20811","severity":"low","public_date":"2019-03-19T00:00:00Z","advisories":[],"bugzilla":"1846439","bugzilla_description":"CVE-2019-20811 kernel: net-sysfs: *_queue_add_kobject refcount issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20811.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-2024","severity":"low","public_date":"2019-03-14T00:00:00Z","advisories":[],"bugzilla":"1696017","bugzilla_description":"CVE-2019-2024 kernel: media: em28xx: Use-after-free in em28xx/em28xx-dvb.c when disconnecting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2024.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-10124","severity":null,"public_date":"2019-03-05T00:00:00Z","advisories":[],"bugzilla":"1695049","bugzilla_description":"CVE-2019-10124 kernel: hwpoison implementation in mm/memory-failure.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-119|CWE-400)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10124.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-2025","severity":"low","public_date":"2019-03-04T00:00:00Z","advisories":[],"bugzilla":"1696020","bugzilla_description":"CVE-2019-2025 kernel: Use-after-free due to race condition in android/binder.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2025.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-9857","severity":"moderate","public_date":"2019-03-02T00:00:00Z","advisories":[],"bugzilla":"1694758","bugzilla_description":"CVE-2019-9857 kernel: memory leak in inotify_update_existing_watch() leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9857.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2019-9213","severity":"important","public_date":"2019-02-27T00:00:00Z","advisories":["RHSA-2019:1479","RHBA-2019:3151","RHSA-2019:0831","RHSA-2019:1480"],"bugzilla":"1686136","bugzilla_description":"CVE-2019-9213 kernel: lack of check for mmap minimum address in expand_downwards in mm/mmap.c leads to NULL pointer dereferences exploit on non-SMAP platforms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:4.18.0-80.4.2.el8_0","redhat-coreos-42.80.20191022.0","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9213.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-10125","severity":"important","public_date":"2019-02-25T00:00:00Z","advisories":[],"bugzilla":"1695074","bugzilla_description":"CVE-2019-10125 kernel: use-after-free in aio_poll() in fs/aio.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-8956","severity":"important","public_date":"2019-02-21T00:00:00Z","advisories":[],"bugzilla":"1679889","bugzilla_description":"CVE-2019-8956 Kernel: SCTP: use-after-free while traversing list of endpoint associations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8956.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9500","severity":"important","public_date":"2019-02-19T00:00:00Z","advisories":["RHSA-2019:3217","RHSA-2019:2600","RHSA-2019:4168","RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2945","RHSA-2019:2703","RHSA-2019:2609","RHSA-2019:4171"],"bugzilla":"1701224","bugzilla_description":"CVE-2019-9500 kernel: brcmfmac heap buffer overflow in brcmf_wowl_nd_results","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-alt-0:4.14.0-115.14.1.el7a","kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","kernel-rt-0:3.10.0-1062.1.1.rt56.1024.el7","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0","kernel-0:3.10.0-1062.1.1.el7","kernel-0:3.10.0-957.41.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9503","severity":"moderate","public_date":"2019-02-19T00:00:00Z","advisories":["RHSA-2020:2522","RHBA-2019:3151","RHSA-2019:2741","RHSA-2020:1070","RHSA-2019:2703","RHSA-2020:1016"],"bugzilla":"1701842","bugzilla_description":"CVE-2019-9503 kernel: brcmfmac frame validation bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9503.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-8980","severity":"moderate","public_date":"2019-02-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1679972","bugzilla_description":"CVE-2019-8980 kernel: memory leak in the kernel_read_file function in fs/exec.c allows to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8980.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-8912","severity":"important","public_date":"2019-02-15T00:00:00Z","advisories":["RHSA-2020:0174"],"bugzilla":"1678685","bugzilla_description":"CVE-2019-8912 kernel: af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8912.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9162","severity":"important","public_date":"2019-02-11T00:00:00Z","advisories":[],"bugzilla":"1683191","bugzilla_description":"CVE-2019-9162 kernel: out-of-bounds read/write in et/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9162.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-7221","severity":"important","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2019:0818","RHSA-2019:4058","RHSA-2019:0833","RHSA-2019:3967"],"bugzilla":"1671904","bugzilla_description":"CVE-2019-7221 Kernel: KVM: nVMX: use-after-free of the hrtimer for emulation of the preemption timer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-693.61.1.el7","kernel-0:3.10.0-957.12.1.el7","kernel-rt-0:3.10.0-957.12.1.rt56.927.el7","kernel-0:3.10.0-862.44.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7221.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-6974","severity":"important","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2019:2809","RHSA-2019:0818","RHSA-2019:0833","RHSA-2020:0103","RHSA-2019:3967"],"bugzilla":"1671913","bugzilla_description":"CVE-2019-6974 Kernel: KVM: potential use-after-free via kvm_ioctl_create_device()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-693.62.1.el7","kernel-0:3.10.0-957.12.1.el7","kernel-rt-0:3.10.0-957.12.1.rt56.927.el7","kernel-alt-0:4.14.0-115.12.1.el7a","kernel-0:3.10.0-862.44.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6974.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-7222","severity":"low","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1671930","bugzilla_description":"CVE-2019-7222 Kernel: KVM: leak of uninitialized stack contents to guest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7222.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2018-16880","severity":"important","public_date":"2019-01-25T00:00:00Z","advisories":[],"bugzilla":"1656472","bugzilla_description":"CVE-2018-16880 kernel: Out of bounds write in get_rx_bufs() function in drivers/vhost/net.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16880.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-3819","severity":"low","public_date":"2019-01-25T00:00:00Z","advisories":[],"bugzilla":"1669187","bugzilla_description":"CVE-2019-3819 kernel: infinite loop in drivers/hid/hid-debug.c:hid_debug_events_read()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3819.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2018-20449","severity":"low","public_date":"2019-01-22T00:00:00Z","advisories":[],"bugzilla":"1696604","bugzilla_description":"CVE-2018-20449 kernel: reading \"callback=\" lines in a debugfs file in drivers/dma/qcom/hidma_dbg.c results in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20449.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"1.9"},{"CVE":"CVE-2019-18885","severity":"low","public_date":"2019-01-19T00:00:00Z","advisories":[],"bugzilla":"1775746","bugzilla_description":"CVE-2019-18885 kernel: fs/btrfs/volumes.c allows a btrfs_verify_dev_extents NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-9003","severity":"low","public_date":"2019-01-16T00:00:00Z","advisories":[],"bugzilla":"1681007","bugzilla_description":"CVE-2019-9003 kernel: use-after-free and OOPS in drivers/char/ipmi/ipmi_msghandler.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9003.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-3459","severity":"moderate","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1663176","bugzilla_description":"CVE-2019-3459 kernel: Heap address information leak while using L2CAP_GET_CONF_OPT","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-3460","severity":"moderate","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1663179","bugzilla_description":"CVE-2019-3460 kernel: Heap address information leak while using L2CAP_PARSE_CONF_RSP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-5489","severity":"important","public_date":"2019-01-06T00:00:00Z","advisories":["RHSA-2019:2473","RHSA-2019:4255","RHSA-2019:2029","RHSA-2019:4057","RHSA-2019:4058","RHSA-2019:4159","RHSA-2019:4164","RHSA-2019:4056","RHSA-2019:2043","RHSA-2020:0204","RHSA-2019:2809","RHSA-2019:2808","RHSA-2019:3967","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:2837","RHSA-2019:3309"],"bugzilla":"1664110","bugzilla_description":"CVE-2019-5489 Kernel: page cache side channel attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:2.6.18-439.el5","kernel-0:2.6.32-431.97.1.el6","kernel-0:2.6.32-754.18.2.el6","kernel-0:3.10.0-327.83.1.el7","kernel-0:2.6.32-504.82.1.el6","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:3.10.0-957.35.1.el7","kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.61.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.12.1.el7a","kernel-0:3.10.0-862.44.2.el7","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-514.71.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-20669","severity":"important","public_date":"2019-01-04T00:00:00Z","advisories":[],"bugzilla":"1669141","bugzilla_description":"CVE-2018-20669 kernel: missing access_ok() checks in i915_gem_execbuffer2_ioctl() results in priviledge escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20669.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-7308","severity":"important","public_date":"2019-01-03T00:00:00Z","advisories":[],"bugzilla":"1672355","bugzilla_description":"CVE-2019-7308 kernel: eBPF: Spectre v1 mitigation bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7308.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2019-3701","severity":null,"public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1663729","bugzilla_description":"CVE-2019-3701 kernel: Missing check in net/can/gw.c:can_can_gw_rcv() allows for crash by users with CAP_NET_ADMIN","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3701.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-20784","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:1971","RHSA-2019:1959"],"bugzilla":"1680540","bugzilla_description":"CVE-2018-20784 kernel: infinite loop in update_blocked_averages() in kernel/sched/fair.c leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.7.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-16885","severity":"low","public_date":"2018-12-21T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1661503","bugzilla_description":"CVE-2018-16885 kernel: out-of-bound read in memcpy_fromiovecend()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-16882","severity":"important","public_date":"2018-12-18T00:00:00Z","advisories":[],"bugzilla":"1660604","bugzilla_description":"CVE-2018-16882 Kernel: KVM: nVMX: use after free in posted interrupt processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-19985","severity":"low","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1666106","bugzilla_description":"CVE-2018-19985 kernel: oob memory read in hso_probe in drivers/net/usb/hso.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19985.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-20169","severity":"moderate","public_date":"2018-12-05T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:2770","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:2777"],"bugzilla":"1660385","bugzilla_description":"CVE-2018-20169 kernel: usb: missing size check in the __usb_get_extra_descriptor() leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-rt-1:3.10.0-693.69.1.rt56.667.el6rt","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-693.69.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20169.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-19824","severity":"moderate","public_date":"2018-12-04T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2703"],"bugzilla":"1655816","bugzilla_description":"CVE-2018-19824 kernel: Use-after-free in sound/usb/card.c:usb_audio_probe()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19824.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2018-5856","severity":"moderate","public_date":"2018-12-03T00:00:00Z","advisories":[],"bugzilla":"1655386","bugzilla_description":"CVE-2018-5856 kernel: Use-after-free in sound/soc/qcom/qdsp6/q6asm.c allows for kernel panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5856.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-16884","severity":"important","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:2696","RHSA-2019:1891","RHSA-2019:1873","RHSA-2019:2730","RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:2854","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1660375","bugzilla_description":"CVE-2018-16884 kernel: nfs: use-after-free in svc_process_common()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-693.58.1.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16884.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-14646","severity":"moderate","public_date":"2018-11-26T00:00:00Z","advisories":["RHSA-2018:3843","RHSA-2018:3666","RHSA-2018:3651"],"bugzilla":"1630124","bugzilla_description":"CVE-2018-14646 kernel: NULL pointer dereference in af_netlink.c:__netlink_ns_capable() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-957.1.3.rt56.913.el7","kernel-0:3.10.0-957.1.3.el7","kernel-0:3.10.0-862.25.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14646.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-18397","severity":"moderate","public_date":"2018-11-26T00:00:00Z","advisories":["RHSA-2019:0163","RHSA-2019:0202","RHSA-2019:0324","RHSA-2019:0831"],"bugzilla":"1641548","bugzilla_description":"CVE-2018-18397 kernel: userfaultfd bypasses tmpfs file permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-0:3.10.0-862.27.1.el7","kernel-0:3.10.0-693.44.1.el7","kernel-0:3.10.0-957.5.1.el7","kernel-alt-0:4.14.0-115.7.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18397.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-16862","severity":"moderate","public_date":"2018-11-24T00:00:00Z","advisories":[],"bugzilla":"1649017","bugzilla_description":"CVE-2018-16862 kernel: cleancache: Infoleak of deleted files after reuse of old inodes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-19961","severity":"important","public_date":"2018-11-20T12:00:00Z","advisories":[],"bugzilla":"1647573","bugzilla_description":"CVE-2018-19961 CVE-2018-19962 xen: insufficient TLB flushing / improper large page mappings with AMD IOMMUs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19961.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-19962","severity":"important","public_date":"2018-11-20T12:00:00Z","advisories":[],"bugzilla":"1647573","bugzilla_description":"CVE-2018-19961 CVE-2018-19962 xen: insufficient TLB flushing / improper large page mappings with AMD IOMMUs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19962.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-19965","severity":"important","public_date":"2018-11-20T12:00:00Z","advisories":[],"bugzilla":"1647588","bugzilla_description":"CVE-2018-19965 xen: x86: DoS from attempting to use INVPCID with a non-canonical addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-228","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19965.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-19406","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1652650","bugzilla_description":"CVE-2018-19406 kernel: kvm: NULL pointer dereference in kvm_pv_send_ipi in arch/x86/kvm/lapic.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19406.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-19407","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1652656","bugzilla_description":"CVE-2018-19407 kernel: kvm: NULL pointer dereference in vcpu_scan_ioapic in arch/x86/kvm/x86.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19407.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-19270","severity":null,"public_date":"2018-11-19T00:00:00Z","advisories":[],"bugzilla":"1651061","bugzilla_description":"CVE-2018-19270 kernel: Out-of-bounds read in drivers/usb/misc/yurex.c:yurex_read allows for DoS or potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19270.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-18955","severity":"important","public_date":"2018-11-15T00:00:00Z","advisories":[],"bugzilla":"1651384","bugzilla_description":"CVE-2018-18955 kernel: Privilege escalation in map_write() in kernel/user_namespace.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18955.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-9385","severity":"moderate","public_date":"2018-11-07T00:00:00Z","advisories":[],"bugzilla":"1647289","bugzilla_description":"CVE-2018-9385 kernel: Out-of-bounds write due to incorrect bounds check in drivers/amba/bus.c:driver_override_store()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9385.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-19854","severity":"moderate","public_date":"2018-11-03T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1656986","bugzilla_description":"CVE-2018-19854 kernel: Information Disclosure in crypto_report_one in crypto/crypto_user.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19854.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-18710","severity":"low","public_date":"2018-10-29T00:00:00Z","advisories":[],"bugzilla":"1645140","bugzilla_description":"CVE-2018-18710 kernel: Information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18710.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-18281","severity":"moderate","public_date":"2018-10-18T00:00:00Z","advisories":["RHSA-2020:0100","RHSA-2020:0036","RHSA-2020:0179","RHSA-2019:2029","RHSA-2019:0831","RHSA-2019:2043","RHSA-2020:0103"],"bugzilla":"1645121","bugzilla_description":"CVE-2018-18281 kernel: TLB flush happens too late on mremap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.62.1.el7","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.46.1.el7","kernel-0:3.10.0-957.43.1.el7","kernel-rt-1:3.10.0-693.62.1.rt56.659.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18281.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-17977","severity":"moderate","public_date":"2018-10-05T00:00:00Z","advisories":[],"bugzilla":"1637504","bugzilla_description":"CVE-2018-17977 kernel: Mishandled interactions among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17977.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-18445","severity":"moderate","public_date":"2018-10-05T00:00:00Z","advisories":["RHSA-2019:0514","RHSA-2019:0512"],"bugzilla":"1640596","bugzilla_description":"CVE-2018-18445 kernel: Faulty computation of numberic bounds in the BPF verifier","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-0:3.10.0-957.10.1.el7","kernel-rt-0:3.10.0-957.10.1.rt56.921.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18445.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-18021","severity":"important","public_date":"2018-10-03T00:00:00Z","advisories":["RHSA-2018:3656"],"bugzilla":"1635475","bugzilla_description":"CVE-2018-18021 kernel: Privilege escalation on arm64 via KVM hypervisor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-alt-0:4.14.0-115.2.2.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18021.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-17972","severity":"moderate","public_date":"2018-09-27T00:00:00Z","advisories":["RHSA-2019:2473","RHSA-2019:0514","RHSA-2019:0512","RHSA-2019:0831"],"bugzilla":"1636349","bugzilla_description":"CVE-2018-17972 kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:3.10.0-957.10.1.el7","kernel-rt-0:3.10.0-957.10.1.rt56.921.el7","kernel-0:2.6.32-754.18.2.el6","kernel-alt-0:4.14.0-115.7.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17972.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-14634","severity":"important","public_date":"2018-09-25T17:00:00Z","advisories":["RHSA-2018:2925","RHSA-2018:3591","RHSA-2018:2924","RHSA-2018:2748","RHSA-2018:3590","RHSA-2018:2846","RHSA-2018:2933","RHSA-2018:3643","RHSA-2018:2763","RHSA-2018:3586","RHSA-2018:3540"],"bugzilla":"1624498","bugzilla_description":"CVE-2018-14634 kernel: Integer overflow in Linux's create_elf_tables function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-0:2.6.32-358.94.1.el6","kernel-0:3.10.0-327.76.1.el7","kernel-0:3.10.0-693.43.1.el7","kernel-0:2.6.32-573.65.2.el6","kernel-rt-0:3.10.0-862.14.4.rt56.821.el7","kernel-rt-1:3.10.0-693.43.1.rt56.630.el6rt","kernel-0:2.6.32-504.76.2.el6","kernel-0:2.6.32-754.6.3.el6","kernel-0:2.6.32-431.93.2.el6","kernel-0:3.10.0-862.14.4.el7","kernel-0:3.10.0-514.61.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14634.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-20836","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1707796","bugzilla_description":"CVE-2018-20836 kernel: race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c leads to use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20836.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-14633","severity":"moderate","public_date":"2018-09-24T00:00:00Z","advisories":["RHSA-2018:3666","RHSA-2018:3651","RHSA-2019:1946"],"bugzilla":"1626035","bugzilla_description":"CVE-2018-14633 kernel: stack-based buffer overflow in chap_server_compute_md5() in iscsi target","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["kernel-0:3.10.0-693.55.1.el7","kernel-rt-0:3.10.0-957.1.3.rt56.913.el7","kernel-0:3.10.0-957.1.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-14641","severity":"important","public_date":"2018-09-18T09:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1629636","bugzilla_description":"CVE-2018-14641 kernel: a bug in ip_frag_reasm() can cause a crash in ip_do_fragment()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14641.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-16597","severity":"moderate","public_date":"2018-09-18T00:00:00Z","advisories":["RHSA-2016:2574"],"bugzilla":"1632443","bugzilla_description":"CVE-2018-16597 kernel: overlayfs file truncation without permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16597.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9518","severity":"moderate","public_date":"2018-09-14T00:00:00Z","advisories":[],"bugzilla":"1631027","bugzilla_description":"CVE-2018-9518 kernel: NFC: llcp: Out of bounds write in nfc_llcp_sdp_tlv struct in nfc/llcp_commands.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9518.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-9516","severity":"low","public_date":"2018-09-14T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1631036","bugzilla_description":"CVE-2018-9516 kernel: HID: debug: Buffer overflow in hid_debug_events_read() in drivers/hid/hid-debug.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9516.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2018-9517","severity":"moderate","public_date":"2018-09-14T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1631045","bugzilla_description":"CVE-2018-9517 kernel: l2tp: Race condition between pppol2tp_session_create() and l2tp_eth_create()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9517.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-14656","severity":"important","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1629940","bugzilla_description":"CVE-2018-14656 kernel: Arbitrary Kernel Read into dmesg via Missing Address Check in segfault Handler","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14656.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-17182","severity":"important","public_date":"2018-09-13T00:00:00Z","advisories":["RHSA-2018:3656"],"bugzilla":"1631205","bugzilla_description":"CVE-2018-17182 kernel: Use-after-free in the vmacache_flush_all function resulting in a possible privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-alt-0:4.14.0-115.2.2.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-20511","severity":"low","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1663072","bugzilla_description":"CVE-2018-20511 kernel: Memory address exposure in drivers/net/appletalk/ipddp.c:ipddp_ioctl() by users with CAP_NET_ADMIN","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.3"},{"CVE":"CVE-2018-12193","severity":"important","public_date":"2018-09-10T00:00:00Z","advisories":[],"bugzilla":"1638454","bugzilla_description":"CVE-2018-12193 kernel: insufficient access control in Intel QuickAssist Technology","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12193.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-6554","severity":null,"public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1623610","bugzilla_description":"CVE-2018-6554 kernel: irda: Memory leak caused by repeated binds of irda socket","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6554.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-6555","severity":null,"public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1623614","bugzilla_description":"CVE-2018-6555 kernel: irda: use-after-free vulnerability in the hashbin list","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6555.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2018-14619","severity":"important","public_date":"2018-08-28T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1622004","bugzilla_description":"CVE-2018-14619 kernel: crash (possible privesc) in kernel crypto api.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14619.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2018-10938","severity":"moderate","public_date":"2018-08-27T00:00:00Z","advisories":[],"bugzilla":"1622404","bugzilla_description":"CVE-2018-10938 kernel: infinite loop in net/ipv4/cipso_ipv4.c:cipso_v4_optptr() allows for DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10938.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10902","severity":"important","public_date":"2018-08-21T03:28:00Z","advisories":["RHSA-2018:3096","RHSA-2019:3217","RHSA-2018:3083","RHSA-2019:0641","RHSA-2019:0415","RHSA-2019:3967"],"bugzilla":"1590720","bugzilla_description":"CVE-2018-10902 kernel: MIDI driver race condition leads to a double-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:2.6.32-754.11.1.el6","kernel-alt-0:4.14.0-115.14.1.el7a","kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-rt-1:3.10.0-693.46.1.rt56.639.el6rt","kernel-0:3.10.0-862.44.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10902.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-9363","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1623067","bugzilla_description":"CVE-2018-9363 kernel: Buffer overflow in hidp_process_report","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9363.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2018-3620","severity":"important","public_date":"2018-08-14T17:00:00Z","advisories":["RHSA-2018:2603","RHSA-2018:2403","RHSA-2018:2602","RHSA-2018:2404","RHSA-2018:2393","RHSA-2018:2394","RHSA-2018:2391","RHSA-2018:2392","RHSA-2018:2390","RHSA-2018:2402","RHSA-2018:2388","RHSA-2018:2389","RHSA-2018:2387","RHSA-2018:2395","RHSA-2018:2384","RHSA-2018:2396"],"bugzilla":"1585005","bugzilla_description":"CVE-2018-3620 CVE-2018-3646 Kernel: hw: cpu: L1 terminal fault (L1TF)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["kernel-0:2.6.18-434.el5","kernel-0:3.10.0-514.55.4.el7","kernel-0:2.6.32-754.3.5.el6","kernel-0:2.6.32-358.91.4.el6","kernel-0:2.6.18-348.41.1.el5","rhvm-appliance-0:4.2-20180813.0","rhev-hypervisor7-0:7.3-20180813.0.el7ev","kernel-rt-0:3.10.0-862.11.6.rt56.819.el7","kernel-0:3.10.0-693.37.4.el7","rhev-hypervisor7-0:7.3-20180813.0.el6ev","kernel-0:2.6.32-431.91.3.el6","kernel-0:2.6.32-573.60.4.el6","kernel-0:3.10.0-327.71.4.el7","kernel-0:3.10.0-862.11.6.el7","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","kernel-0:2.6.32-504.72.4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3620.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-3646","severity":"important","public_date":"2018-08-14T17:00:00Z","advisories":["RHSA-2018:2603","RHSA-2018:2403","RHSA-2018:2602","RHSA-2018:2404","RHSA-2018:2393","RHSA-2018:2394","RHSA-2018:2391","RHSA-2018:2392","RHSA-2018:2390","RHSA-2018:2402","RHSA-2018:2388","RHSA-2018:2389","RHSA-2018:2387","RHSA-2018:2395","RHSA-2018:2384","RHSA-2018:2396"],"bugzilla":"1585005","bugzilla_description":"CVE-2018-3620 CVE-2018-3646 Kernel: hw: cpu: L1 terminal fault (L1TF)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["kernel-0:2.6.18-434.el5","kernel-0:3.10.0-514.55.4.el7","kernel-0:2.6.32-754.3.5.el6","kernel-0:2.6.32-358.91.4.el6","kernel-0:2.6.18-348.41.1.el5","rhvm-appliance-0:4.2-20180813.0","rhev-hypervisor7-0:7.3-20180813.0.el7ev","kernel-rt-0:3.10.0-862.11.6.rt56.819.el7","kernel-0:3.10.0-693.37.4.el7","rhev-hypervisor7-0:7.3-20180813.0.el6ev","kernel-0:2.6.32-431.91.3.el6","kernel-0:2.6.32-573.60.4.el6","kernel-0:3.10.0-327.71.4.el7","kernel-0:3.10.0-862.11.6.el7","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","kernel-0:2.6.32-504.72.4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3646.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-15471","severity":"important","public_date":"2018-08-14T17:00:00Z","advisories":[],"bugzilla":"1610555","bugzilla_description":"CVE-2018-15471 kernel: net: xen: Linux netback driver OOB access in hash handling (XSA-270)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15471.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2018-5391","severity":"important","public_date":"2018-08-14T16:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:2925","RHSA-2018:2924","RHSA-2018:2846","RHSA-2018:2933","RHSA-2018:3459","RHSA-2018:3096","RHSA-2018:3590","RHSA-2018:3083","RHSA-2018:2785","RHSA-2018:3586","RHSA-2018:3540","RHSA-2018:2791"],"bugzilla":"1609664","bugzilla_description":"CVE-2018-5391 kernel: IP fragments with random offsets allow a remote denial of service (FragmentSmack)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-327.76.1.el7","kernel-0:3.10.0-862.20.2.el7","kernel-rt-1:3.10.0-693.43.1.rt56.630.el6rt","kernel-0:3.10.0-514.58.1.el7","kernel-0:2.6.32-431.93.2.el6","kernel-alt-0:4.14.0-115.el7a","kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-693.43.1.el7","kernel-0:2.6.32-358.93.1.el6","kernel-0:2.6.32-573.65.2.el6","kernel-0:3.10.0-957.el7","kernel-0:2.6.32-504.76.2.el6","kernel-0:2.6.32-754.6.3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5391.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7754","severity":"low","public_date":"2018-08-09T00:00:00Z","advisories":[],"bugzilla":"1616374","bugzilla_description":"CVE-2018-7754 kernel: Information Exposure in aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7754.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-5953","severity":null,"public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1614057","bugzilla_description":"CVE-2018-5953 kernel: Information Exposure through dmesg data from a \"software IO TLB\" printk call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5953.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-5995","severity":null,"public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1614061","bugzilla_description":"CVE-2018-5995 kernel: Information Exposure through dmesg data from a \"pages/cpu\" printk call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5995.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-5390","severity":"important","public_date":"2018-08-06T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:2924","RHSA-2018:2933","RHSA-2018:2645","RHSA-2018:2789","RHSA-2018:2403","RHSA-2018:2790","RHSA-2018:2390","RHSA-2018:2776","RHSA-2018:2402","RHSA-2018:2785","RHSA-2018:2395","RHSA-2018:2384","RHSA-2018:2791"],"bugzilla":"1601704","bugzilla_description":"CVE-2018-5390 kernel: TCP segments with random offsets allow a remote denial of service (SegmentSmack)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:2.6.32-754.3.5.el6","kernel-0:2.6.32-573.62.1.el6","kernel-0:3.10.0-514.58.1.el7","kernel-rt-1:3.10.0-693.39.1.rt56.629.el6rt","rhvm-appliance-0:4.2-20180813.0","kernel-rt-0:3.10.0-862.11.6.rt56.819.el7","kernel-0:2.6.32-431.93.2.el6","kernel-alt-0:4.14.0-115.el7a","kernel-0:3.10.0-693.39.1.el7","kernel-0:3.10.0-327.73.1.el7","kernel-0:2.6.32-358.93.1.el6","kernel-0:3.10.0-862.11.6.el7","kernel-0:2.6.32-504.76.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5390.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-9465","severity":"moderate","public_date":"2018-08-05T00:00:00Z","advisories":[],"bugzilla":"1615658","bugzilla_description":"CVE-2018-9465 kernel: Use-after-free in drivers/android/binder.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9465.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-15594","severity":"moderate","public_date":"2018-08-03T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1620555","bugzilla_description":"CVE-2018-15594 kernel: Mishandling of indirect calls weakens Spectre mitigation for paravirtual guests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15594.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-14625","severity":"moderate","public_date":"2018-07-30T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:4154","RHSA-2019:2043"],"bugzilla":"1619846","bugzilla_description":"CVE-2018-14625 kernel: use-after-free Read in vhost_transport_send_pkt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.16.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14625.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-14678","severity":"moderate","public_date":"2018-07-25T00:00:00Z","advisories":[],"bugzilla":"1608559","bugzilla_description":"CVE-2018-14678 xen: Uninitialized state in x86 PV failsafe callback path (XSA-274)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14678.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-15572","severity":"moderate","public_date":"2018-07-20T00:00:00Z","advisories":[],"bugzilla":"1616245","bugzilla_description":"CVE-2018-15572 Kernel: hw: cpu: userspace-userspace spectreRSB attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1189->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15572.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-3693","severity":"important","public_date":"2018-07-10T17:00:00Z","advisories":["RHSA-2018:2390","RHSA-2020:0174","RHSA-2018:2395","RHSA-2018:2384","RHSA-2019:1946"],"bugzilla":"1581650","bugzilla_description":"CVE-2018-3693 Kernel: speculative bounds check bypass store","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:3.10.0-693.55.1.el7","kernel-0:2.6.32-754.3.5.el6","kernel-0:3.10.0-862.11.6.el7","kernel-rt-0:3.10.0-862.11.6.rt56.819.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3693.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-10872","severity":"moderate","public_date":"2018-07-10T10:00:00Z","advisories":["RHSA-2018:2164"],"bugzilla":"1596094","bugzilla_description":"CVE-2018-10872 kernel: error in exception handling leads to DoS (CVE-2018-8897 regression)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:2.6.32-754.2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10872.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-14616","severity":"low","public_date":"2018-07-09T00:00:00Z","advisories":[],"bugzilla":"1610106","bugzilla_description":"CVE-2018-14616 kernel: NULL pointer dereference in fs/crypto/crypto.c:fscrypt_do_page_crypto() when operating on a corrupted f2fs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-13406","severity":null,"public_date":"2018-07-06T00:00:00Z","advisories":[],"bugzilla":"1599168","bugzilla_description":"CVE-2018-13406 kernel: Integer overflow in drivers/video/fbdev/uvesafb.c:uvesafb_setcmap() allows for potential denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13406.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-16276","severity":"moderate","public_date":"2018-07-06T00:00:00Z","advisories":[],"bugzilla":"1624507","bugzilla_description":"CVE-2018-16276 kernel: incorrect bounds checking in yurex_read in drivers/usb/misc/yurex.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-13405","severity":"important","public_date":"2018-07-05T00:00:00Z","advisories":["RHSA-2019:2476","RHSA-2019:2696","RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083","RHSA-2019:2566","RHSA-2019:4159","RHSA-2019:2730","RHSA-2019:4164","RHSA-2019:0717"],"bugzilla":"1599161","bugzilla_description":"CVE-2018-13405 kernel: Missing check in fs/inode.c:inode_init_owner() does not clear SGID bit on non-directories for non-members","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-0:2.6.32-504.80.2.el6","kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-693.58.1.el7","kernel-0:3.10.0-862.41.1.el7","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:3.10.0-957.el7","kernel-0:3.10.0-327.83.1.el7","kernel-0:2.6.32-754.12.1.el6","kernel-alt-0:4.14.0-115.el7a","kernel-0:3.10.0-514.71.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13405.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-14615","severity":"low","public_date":"2018-07-05T00:00:00Z","advisories":[],"bugzilla":"1610102","bugzilla_description":"CVE-2018-14615 kernel: Buffer overflow in fs/f2fs/inline.c:truncate_inline_inode() when unmounting a crafted f2fs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14615.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-9415","severity":"moderate","public_date":"2018-07-02T00:00:00Z","advisories":[],"bugzilla":"1629030","bugzilla_description":"CVE-2018-9415 kernel: race condition in the ARM Advanced Microcontroller Bus Architecture (AMBA) driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9415.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2018-13053","severity":"low","public_date":"2018-06-27T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:0831","RHSA-2019:2043"],"bugzilla":"1597747","bugzilla_description":"CVE-2018-13053 kernel: Integer overflow in the alarm_timer_nsleep function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14617","severity":"low","public_date":"2018-06-27T00:00:00Z","advisories":[],"bugzilla":"1610110","bugzilla_description":"CVE-2018-14617 kernel: NULL pointer dereference in fs/hfsplus/dir.c:hfsplus_lookup() when operating on a file in a crafted hfs+ image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-11987","severity":"moderate","public_date":"2018-06-25T00:00:00Z","advisories":[],"bugzilla":"1661435","bugzilla_description":"CVE-2018-11987 kernel: Double-free in ion_system_heap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11987.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-12714","severity":"moderate","public_date":"2018-06-23T00:00:00Z","advisories":[],"bugzilla":"1595835","bugzilla_description":"CVE-2018-12714 kernel: slab out-of-bounds write in trace/trace_events_filter.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12714.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-12896","severity":null,"public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597759","bugzilla_description":"CVE-2018-12896 kernel: Integer overflow in kernel/time/posix-timers.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12896.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-13096","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597782","bugzilla_description":"CVE-2018-13096 kernel: out-of-bounds memory access in fs/f2fs/super.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13096.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-13097","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597786","bugzilla_description":"CVE-2018-13097 kernel: divide-by-zero in fs/f2fs/super.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13097.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-13098","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597792","bugzilla_description":"CVE-2018-13098 kernel: slab out-of-bounds read in fs/f2fs/inode.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13098.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-13099","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597810","bugzilla_description":"CVE-2018-13099 kernel: out-of-bounds memory access in fs/f2fs/inline.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13099.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-13100","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597814","bugzilla_description":"CVE-2018-13100 kernel: divide-by-zero in fs/f2fs/super.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13100.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-18559","severity":"important","public_date":"2018-06-15T00:00:00Z","advisories":["RHSA-2019:0188","RHSA-2019:0163","RHSA-2020:0174","RHSA-2019:4159","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:3967"],"bugzilla":"1641878","bugzilla_description":"CVE-2018-18559 kernel: Use-after-free due to race condition in AF_PACKET implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-957.5.1.el7","kernel-rt-0:3.10.0-957.5.1.rt56.916.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-0:3.10.0-862.44.2.el7","kernel-alt-0:4.14.0-115.17.1.el7a","kernel-0:3.10.0-514.71.1.el7","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18559.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-10882","severity":"low","public_date":"2018-06-14T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1596842","bugzilla_description":"CVE-2018-10882 kernel: stack-out-of-bounds write infs/jbd2/transaction.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10882.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.8"},{"CVE":"CVE-2018-10883","severity":"low","public_date":"2018-06-14T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1596846","bugzilla_description":"CVE-2018-10883 kernel: stack-out-of-bounds write in jbd2_journal_dirty_metadata function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10883.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.8"},{"CVE":"CVE-2018-3665","severity":"moderate","public_date":"2018-06-13T21:00:00Z","advisories":["RHSA-2018:1944","RHSA-2019:1170","RHSA-2018:1852","RHSA-2019:1190","RHSA-2018:2164","RHSA-2018:2165"],"bugzilla":"1585011","bugzilla_description":"CVE-2018-3665 Kernel: FPU state information leakage via lazy FPU restore","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:2.6.32-754.2.1.el6","kernel-rt-1:3.10.0-693.35.1.rt56.625.el6rt","kernel-rt-0:3.10.0-862.3.3.rt56.809.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-0:3.10.0-862.3.3.el7","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3665.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-12904","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":[],"bugzilla":"1595143","bugzilla_description":"CVE-2018-12904 kernel: kvm: nVMX: missing privilege check allows privilege escalation in nested virtualization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12904.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-10881","severity":"low","public_date":"2018-06-10T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1596828","bugzilla_description":"CVE-2018-10881 kernel: out-of-bound access in ext4_get_group_info() when mounting and operating a crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10881.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2018-10880","severity":"low","public_date":"2018-06-09T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1596812","bugzilla_description":"CVE-2018-10880 kernel: stack-out-of-bounds write in ext4_update_inline_data function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10880.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-10879","severity":"low","public_date":"2018-06-08T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1596806","bugzilla_description":"CVE-2018-10879 kernel: use-after-free detected in ext4_xattr_set_entry with a crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10879.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2018-13094","severity":"low","public_date":"2018-06-07T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:0831","RHSA-2019:2043"],"bugzilla":"1597771","bugzilla_description":"CVE-2018-13094 kernel: NULL pointer dereference in xfs_da_shrink_inode function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13094.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-10853","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2020:0036","RHSA-2020:0179","RHSA-2019:2029","RHSA-2019:2043","RHSA-2020:0103"],"bugzilla":"1589890","bugzilla_description":"CVE-2018-10853 kernel: kvm: guest userspace to guest kernel write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.62.1.el7","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.46.1.el7","kernel-0:3.10.0-957.43.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10853.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-12232","severity":"moderate","public_date":"2018-06-04T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1590215","bugzilla_description":"CVE-2018-12232 kernel: NULL pointer dereference if close and fchownat system calls share a socket file descriptor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-13095","severity":"low","public_date":"2018-06-03T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:1350"],"bugzilla":"1597775","bugzilla_description":"CVE-2018-13095 kernel: NULL pointer dereference in fs/xfs/libxfs/xfs_inode_buf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.8.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13095.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-12233","severity":"moderate","public_date":"2018-06-01T00:00:00Z","advisories":[],"bugzilla":"1590205","bugzilla_description":"CVE-2018-12233 kernel: Memory corruption in JFS setattr","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12233.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-14734","severity":"moderate","public_date":"2018-06-01T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:0831","RHSA-2019:2043"],"bugzilla":"1611005","bugzilla_description":"CVE-2018-14734 kernel: use-after-free in ucma_leave_multicast in drivers/infiniband/core/ucma.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-10878","severity":"moderate","public_date":"2018-05-28T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1596802","bugzilla_description":"CVE-2018-10878 kernel: out-of-bound write in ext4_init_block_bitmap function with a crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10878.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.8"},{"CVE":"CVE-2018-14609","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610074","bugzilla_description":"CVE-2018-14609 kernel: Invalid pointer dereference in fs/btrfs/relocation.c:__del_reloc_root() when mounting crafted btrfs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14609.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-14610","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610079","bugzilla_description":"CVE-2018-14610 kernel: Out-of-bounds access in write_extent_buffer() when mounting and operating a crafted btrfs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14610.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-14611","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610084","bugzilla_description":"CVE-2018-14611 kernel: Use-after-free in try_merge_free_space() when mounting crafted btrfs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14611.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2018-14612","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610088","bugzilla_description":"CVE-2018-14612 kernel: Invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14612.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-14613","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610092","bugzilla_description":"CVE-2018-14613 kernel: Invalid pointer dereference in io_ctl_map_page() when mounting and operating a crafted btrfs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14613.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-14614","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610098","bugzilla_description":"CVE-2018-14614 kernel: Out-of-bounds access in fs/f2fs/segment.c:__remove_dirty_segment() when mounting a crafted f2fs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14614.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-11412","severity":"moderate","public_date":"2018-05-22T00:00:00Z","advisories":["RHSA-2019:0525"],"bugzilla":"1582358","bugzilla_description":"CVE-2018-11412 kernel: out-of-bounds memcpy in fs/ext4/inline.c:ext4_read_inline_data() with crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805","affected_packages":["kernel-alt-0:4.14.0-115.6.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11412.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-3640","severity":"moderate","public_date":"2018-05-21T21:00:00Z","advisories":[],"bugzilla":"1580340","bugzilla_description":"CVE-2018-3640 hw: cpu: speculative register load","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1231->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3640.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2018-11506","severity":"moderate","public_date":"2018-05-21T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1583210","bugzilla_description":"CVE-2018-11506 kernel: Stack-based buffer overflow in drivers/scsi/sr_ioctl.c allows denial of service or other unspecified impact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11506.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000204","severity":"low","public_date":"2018-05-18T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1589324","bugzilla_description":"CVE-2018-1000204 kernel: Infoleak caused by incorrect handling of the SG_IO ioctl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000204.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2018-1120","severity":"moderate","public_date":"2018-05-17T17:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083","RHSA-2020:3804","RHSA-2020:3810"],"bugzilla":"1575472","bugzilla_description":"CVE-2018-1120 kernel: fuse-backed file mmap-ed onto process cmdline arguments causes denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-rt-1:3.10.0-693.76.1.rt56.676.el6rt","kernel-0:3.10.0-693.76.1.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1120.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-5814","severity":"moderate","public_date":"2018-05-15T00:00:00Z","advisories":[],"bugzilla":"1588620","bugzilla_description":"CVE-2018-5814 kernel: Race condition errors in USB over IP functionality can cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-20976","severity":"important","public_date":"2018-05-15T00:00:00Z","advisories":["RHSA-2020:0661","RHSA-2020:0178","RHSA-2020:0609","RHSA-2020:0592","RHSA-2020:0543"],"bugzilla":"1743547","bugzilla_description":"CVE-2018-20976 kernel: use-after-free in fs/xfs/xfs_super.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.64.1.el7","kernel-0:3.10.0-514.72.1.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-0:3.10.0-862.48.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20976.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-11508","severity":"low","public_date":"2018-05-11T00:00:00Z","advisories":[],"bugzilla":"1583314","bugzilla_description":"CVE-2018-11508 kernel: Missing initialization in kernel/compat.c:compat_get_timex() allows local attacker to obtain possibly sensitive information via adjtimex","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11508.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-1087","severity":"important","public_date":"2018-05-08T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1347","RHSA-2018:1710","RHSA-2018:1348","RHSA-2018:1524","RHSA-2018:1711","RHSA-2018:1345","RHSA-2018:1355"],"bugzilla":"1566837","bugzilla_description":"CVE-2018-1087 Kernel: KVM: error in exception handling leads to wrong debug stack value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.25.4.el7","redhat-virtualization-host-0:3.6-20180521.0","kernel-0:3.10.0-862.2.3.el7","rhev-hypervisor7-0:7.3-20180521.1.el7ev","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","rhev-hypervisor7-0:7.3-20180521.1.el6ev","kernel-0:3.10.0-327.66.3.el7","kernel-0:3.10.0-514.48.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1087.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-8897","severity":"moderate","public_date":"2018-05-08T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1319","RHSA-2018:1349","RHSA-2018:1347","RHSA-2018:1710","RHSA-2018:1348","RHSA-2018:1524","RHSA-2018:1711","RHSA-2018:1345","RHSA-2018:1346","RHSA-2018:1354","RHSA-2018:1355","RHSA-2018:1352","RHSA-2018:1353","RHSA-2018:1350","RHSA-2018:1351"],"bugzilla":"1567074","bugzilla_description":"CVE-2018-8897 Kernel: error in exception handling leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.25.4.el7","redhat-virtualization-host-0:3.6-20180521.0","kernel-0:2.6.32-696.28.1.el6","kernel-0:2.6.18-431.el5","kernel-0:2.6.32-504.68.2.el6","kernel-rt-1:3.10.0-693.25.4.rt56.613.el6rt","kernel-0:3.10.0-514.48.3.el7","kernel-0:2.6.32-358.88.2.el6","kernel-0:2.6.32-573.55.2.el6","kernel-0:2.6.32-431.89.2.el6","kernel-0:3.10.0-862.2.3.el7","rhev-hypervisor7-0:7.3-20180521.1.el7ev","kernel-0:2.6.18-348.39.2.el5","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","rhev-hypervisor7-0:7.3-20180521.1.el6ev","kernel-0:3.10.0-327.66.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8897.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-12633","severity":"moderate","public_date":"2018-05-08T00:00:00Z","advisories":[],"bugzilla":"1594170","bugzilla_description":"CVE-2018-12633 kernel: Double-fetch vulnerability in drivers/virt/vboxguest/vboxguest_linux.c:vbg_misc_device_ioctl() allows information leak and local denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12633.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2018-1000199","severity":"important","public_date":"2018-05-01T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1347","RHSA-2018:1348","RHSA-2018:1345","RHSA-2018:1354","RHSA-2018:1355","RHSA-2018:1374"],"bugzilla":"1568477","bugzilla_description":"CVE-2018-1000199 kernel: ptrace() incorrect error handling leads to corruption and DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":["kernel-0:3.10.0-693.25.4.el7","kernel-alt-0:4.14.0-49.2.2.el7a","kernel-0:3.10.0-862.2.3.el7","kernel-rt-1:3.10.0-693.25.4.rt56.613.el6rt","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","kernel-0:3.10.0-327.66.3.el7","kernel-0:3.10.0-514.48.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-16658","severity":"low","public_date":"2018-04-26T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:4154","RHSA-2019:2043"],"bugzilla":"1627731","bugzilla_description":"CVE-2018-16658 kernel: Information leak in cdrom_ioctl_drive_status","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.16.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16658.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2018-1000200","severity":"moderate","public_date":"2018-04-24T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1568744","bugzilla_description":"CVE-2018-1000200 kernel: NULL pointer dereference on OOM kill of large mlocked process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000200.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-1118","severity":"low","public_date":"2018-04-23T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1573699","bugzilla_description":"CVE-2018-1118 kernel: vhost: Information disclosure in vhost/vhost.c:vhost_new_msg()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1118.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.3"},{"CVE":"CVE-2018-10940","severity":"low","public_date":"2018-04-18T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1577408","bugzilla_description":"CVE-2018-10940 kernel: incorrect memory bounds check in drivers/cdrom/cdrom.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10940.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-10323","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":[],"bugzilla":"1571627","bugzilla_description":"CVE-2018-10323 kernel: Invalid pointer dereference in xfs_bmapi_write() when mounting and operating on crafted xfs image allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10323.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-10876","severity":"low","public_date":"2018-04-16T00:00:00Z","advisories":["RHSA-2019:0525"],"bugzilla":"1596773","bugzilla_description":"CVE-2018-10876 kernel: use-after-free in jbd2_journal_commit_transaction funtion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-alt-0:4.14.0-115.6.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10876.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-10877","severity":"low","public_date":"2018-04-16T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1596795","bugzilla_description":"CVE-2018-10877 kernel: out-of-bound access in ext4_ext_drop_refs function with a crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10877.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2018-1108","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":[],"bugzilla":"1567306","bugzilla_description":"CVE-2018-1108 kernel: drivers: getrandom(2) unblocks too early after system boot","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1108.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-10322","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1571623","bugzilla_description":"CVE-2018-10322 kernel: Invalid pointer dereference in xfs_ilock_attr_map_shared() when mounting crafted xfs image allowing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10322.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-13093","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1597766","bugzilla_description":"CVE-2018-13093 kernel: NULL pointer dereference in lookup_slow function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13093.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-12928","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":[],"bugzilla":"1597826","bugzilla_description":"CVE-2018-12928 kernel: NULL pointer dereference in hfs_ext_read_extent in hfs.ko","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12928.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-12929","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:0641"],"bugzilla":"1597831","bugzilla_description":"CVE-2018-12929 kernel: use-after-free in ntfs_read_locked_inode in the ntfs.ko","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-1:3.10.0-693.46.1.rt56.639.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12929.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-12930","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:0641"],"bugzilla":"1597837","bugzilla_description":"CVE-2018-12930 kernel: stack-based out-of-bounds write in ntfs_end_buffer_async_read in the ntfs.ko","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-1:3.10.0-693.46.1.rt56.639.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12930.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-12931","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:0641"],"bugzilla":"1597843","bugzilla_description":"CVE-2018-12931 kernel: stack-based out-of-bounds write in ntfs_attr_find in the ntfs.ko","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-1:3.10.0-693.46.1.rt56.639.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12931.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-10840","severity":"moderate","public_date":"2018-04-11T00:00:00Z","advisories":["RHSA-2019:0162"],"bugzilla":"1582346","bugzilla_description":"CVE-2018-10840 kernel: Heap-based buffer overflow in fs/ext4/xattr.c:ext4_xattr_set_entry() with crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-alt-0:4.14.0-115.5.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10840.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2018-9056","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":[],"bugzilla":"1561794","bugzilla_description":"CVE-2018-9056 hw: cpu: speculative execution branch predictor side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9056.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-1092","severity":"low","public_date":"2018-03-22T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1560777","bugzilla_description":"CVE-2018-1092 kernel: NULL pointer dereference in ext4/mballoc.c:ext4_process_freed_data() when mounting crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1092.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-1093","severity":"low","public_date":"2018-03-22T00:00:00Z","advisories":[],"bugzilla":"1560782","bugzilla_description":"CVE-2018-1093 kernel: Out of bounds read in ext4/balloc.c:ext4_valid_block_bitmap() causes crash with crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1093.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-1094","severity":"low","public_date":"2018-03-22T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1560788","bugzilla_description":"CVE-2018-1094 kernel: NULL pointer dereference in ext4/xattr.c:ext4_xattr_inode_hash() causes crash with crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1094.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-1095","severity":"low","public_date":"2018-03-22T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1560793","bugzilla_description":"CVE-2018-1095 kernel: out-of-bound access in fs/posix_acl.c:get_acl() causes crash with crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1095.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2018-8781","severity":"important","public_date":"2018-03-21T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1571062","bugzilla_description":"CVE-2018-8781 kernel: Integer overflow in drivers/gpu/drm/udl/udl_fb.c:udl_fb_mmap() can allow attackers to execute code in kernel space","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8781.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-8822","severity":"moderate","public_date":"2018-03-20T00:00:00Z","advisories":[],"bugzilla":"1558697","bugzilla_description":"CVE-2018-8822 kernel: Memory corruption in ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-18690","severity":"moderate","public_date":"2018-03-15T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1643988","bugzilla_description":"CVE-2018-18690 kernel: filesystem corruption due to an unchecked error condition during an xfs attribute change","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18690.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-7995","severity":"low","public_date":"2018-03-09T00:00:00Z","advisories":[],"bugzilla":"1553911","bugzilla_description":"CVE-2018-7995 kernel: Race condition in the store_int_with_restart() function in cpu/mcheck/mce.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7995.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-7755","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1553216","bugzilla_description":"CVE-2018-7755 kernel: Information exposure in fd_locked_ioctl function in drivers/block/floppy.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-7757","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1553361","bugzilla_description":"CVE-2018-7757 kernel: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7757.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18222","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":[],"bugzilla":"1553371","bugzilla_description":"CVE-2017-18222 kernel: Memory corruption in ethtool_get_strings function in hns driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18222.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2018-10021","severity":null,"public_date":"2018-03-08T00:00:00Z","advisories":[],"bugzilla":"1566407","bugzilla_description":"CVE-2018-10021 kernel: ata qc leak in drivers/scsi/libsas/sas_scsi_host.c allows local users to cause denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10021.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.0"},{"CVE":"CVE-2017-18221","severity":"moderate","public_date":"2018-03-07T00:00:00Z","advisories":[],"bugzilla":"1552849","bugzilla_description":"CVE-2017-18221 kernel: Race condition in __munlock_pagevec function in mm/mlock.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18221.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-7740","severity":"low","public_date":"2018-03-07T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1552867","bugzilla_description":"CVE-2018-7740 kernel: Denial of service in resv_map_release function in mm/hugetlb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7740.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-1130","severity":"moderate","public_date":"2018-03-07T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083","RHSA-2018:1854"],"bugzilla":"1576419","bugzilla_description":"CVE-2018-1130 kernel: a null pointer dereference in net/dccp/output.c:dccp_write_xmit() leads to a system crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-1068","severity":"important","public_date":"2018-03-05T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:1318","RHSA-2019:4159","RHSA-2019:1170","RHSA-2019:1190","RHSA-2018:1355"],"bugzilla":"1552048","bugzilla_description":"CVE-2018-1068 kernel: Out-of-bounds write via userland offsets in ebt_entry struct in netfilter/ebtables.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:3.10.0-862.2.3.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","kernel-alt-0:4.14.0-115.el7a","kernel-0:3.10.0-514.71.1.el7","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1068.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-18202","severity":"important","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:2772"],"bugzilla":"1549621","bugzilla_description":"CVE-2017-18202 kernel: Infoleak/use-after-free in __oom_reap_task_mm function in mm/oom_kill.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-alt-0:4.14.0-49.13.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18202.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-7480","severity":"moderate","public_date":"2018-02-25T00:00:00Z","advisories":[],"bugzilla":"1549427","bugzilla_description":"CVE-2018-7480 kernel: Double free in block/blk-cgroup.c:blkcg_init_queue() can allow a local user to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7480.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-18193","severity":"low","public_date":"2018-02-22T00:00:00Z","advisories":[],"bugzilla":"1549421","bugzilla_description":"CVE-2017-18193 kernel: Mishandled extent trees in fs/f2fs/extent_cache.c can allow a local user to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18193.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7273","severity":"low","public_date":"2018-02-20T00:00:00Z","advisories":[],"bugzilla":"1547384","bugzilla_description":"CVE-2018-7273 kernel: Kernel address information leak in drivers/block/floppy.c:show_floppy function potentially allowing KASLR bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7273.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2018-7566","severity":"moderate","public_date":"2018-02-14T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2019:1483","RHSA-2018:2390","RHSA-2019:1487","RHSA-2018:2395","RHSA-2018:2384"],"bugzilla":"1550142","bugzilla_description":"CVE-2018-7566 kernel: race condition in snd_seq_write() may lead to UAF or OOB-access","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.3.5.el6","kernel-0:3.10.0-862.11.6.el7","kernel-rt-0:3.10.0-862.11.6.rt56.819.el7","kernel-alt-0:4.14.0-115.el7a","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7566.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2018-6927","severity":"low","public_date":"2018-02-12T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:0654"],"bugzilla":"1544612","bugzilla_description":"CVE-2018-6927 kernel: Integer overflow in futex.c:futux_requeue can lead to denial of service or unspecified impact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6927.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5803","severity":"moderate","public_date":"2018-02-09T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083","RHSA-2018:1854","RHSA-2019:0641"],"bugzilla":"1551051","bugzilla_description":"CVE-2018-5803 kernel: Missing length check of payload in net/sctp/sm_make_chunk.c:_sctp_make_chunk() function allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-957.el7","kernel-rt-1:3.10.0-693.46.1.rt56.639.el6rt","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5803.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-1065","severity":"moderate","public_date":"2018-02-04T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1547824","bugzilla_description":"CVE-2018-1065 kernel: netfilter: xtables NULL pointer dereference in ip6_tables.c:ip6t_do_table() leading to a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1065.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-6412","severity":"low","public_date":"2018-01-31T00:00:00Z","advisories":[],"bugzilla":"1541240","bugzilla_description":"CVE-2018-6412 kernel: Incorrect integer signedness in sbuslibc:sbusfb_ioctl_helper() allows for information leakage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-194","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6412.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-16911","severity":"low","public_date":"2018-01-31T00:00:00Z","advisories":[],"bugzilla":"1541876","bugzilla_description":"CVE-2017-16911 kernel: vhci_cd driver in usbip/vhci_sysfs.c:port_show_vhci() discloses kernel memory addresses to local attackers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-214","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16911.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-11232","severity":"low","public_date":"2018-01-23T00:00:00Z","advisories":[],"bugzilla":"1580583","bugzilla_description":"CVE-2018-11232 kernel: coresight: kernel panic caused by invalid CPU","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000028","severity":"moderate","public_date":"2018-01-22T00:00:00Z","advisories":[],"bugzilla":"1540439","bugzilla_description":"CVE-2018-1000028 kernel: Improper sorting of GIDs in nfsd can lead to incorrect permissions being applied","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000028.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-8087","severity":"low","public_date":"2018-01-18T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1555145","bugzilla_description":"CVE-2018-8087 kernel: Memory leak in drivers/net/wireless/mac80211_hwsim.c:hwsim_new_radio_nl() can lead to potential denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8087.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18174","severity":"moderate","public_date":"2018-01-17T00:00:00Z","advisories":[],"bugzilla":"1544482","bugzilla_description":"CVE-2017-18174 kernel: Double free vulnerability in drivers/pinctrl/pinctrl-amd.c:amd_gpio_remove() function can lead to kernel panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18174.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-7191","severity":"moderate","public_date":"2018-01-17T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016"],"bugzilla":"1716328","bugzilla_description":"CVE-2018-7191 kernel: denial of service via ioctl call in network tun handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400->CWE-476","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7191.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2018-1000026","severity":"moderate","public_date":"2018-01-12T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1541846","bugzilla_description":"CVE-2018-1000026 kernel: Improper validation in bnx2x network card driver can allow for denial of service attacks via crafted packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000026.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2018-8043","severity":"low","public_date":"2018-01-11T00:00:00Z","advisories":[],"bugzilla":"1554199","bugzilla_description":"CVE-2018-8043 kernel: NULL pointer dereference in drivers/net/phy/mdio-bcm-unimac.c:unimac_mdio_probe() can lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252->CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8043.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2018-1000004","severity":"moderate","public_date":"2018-01-10T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2019:1483","RHSA-2018:2390","RHSA-2018:0676","RHSA-2018:0654","RHSA-2019:1487"],"bugzilla":"1535315","bugzilla_description":"CVE-2018-1000004 kernel: Race condition in sound system can lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.3.5.el6","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:3.10.0-862.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000004.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-5344","severity":"moderate","public_date":"2018-01-06T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1533909","bugzilla_description":"CVE-2018-5344 kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5344.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-10074","severity":"moderate","public_date":"2018-01-04T00:00:00Z","advisories":[],"bugzilla":"1567822","bugzilla_description":"CVE-2018-10074 kernel: Null pointer dereference in drivers/clk/hisilicon/clk-hi3660-stub.c:hi3660_stub_clk_probe() allows local users to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10074.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5753","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":[],"bugzilla":"1519778","bugzilla_description":"CVE-2017-5753 hw: cpu: speculative execution bounds-check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5753.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2017-5754","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":[],"bugzilla":"1519781","bugzilla_description":"CVE-2017-5754 hw: cpu: speculative execution permission faults handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5754.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-18017","severity":"moderate","public_date":"2018-01-03T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:1170","RHSA-2018:1319","RHSA-2018:1737","RHSA-2018:0676","RHSA-2018:1130"],"bugzilla":"1531135","bugzilla_description":"CVE-2017-18017 kernel: netfilter: use-after-free in tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-1:3.10.0-693.25.2.rt56.612.el6rt","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:2.6.32-696.28.1.el6","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.25.2.el7","kernel-0:3.10.0-514.51.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18017.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-5333","severity":"moderate","public_date":"2018-01-03T00:00:00Z","advisories":["RHSA-2018:0470"],"bugzilla":"1533891","bugzilla_description":"CVE-2018-5333 kernel: Null pointer dereference in rds_atomic_free_op() allowing denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-1:3.10.0-693.21.1.rt56.607.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5333.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-5703","severity":"moderate","public_date":"2018-01-03T00:00:00Z","advisories":[],"bugzilla":"1535110","bugzilla_description":"CVE-2018-5703 kernel: net/ipv6/tcp_ipv6.c:tcp_v6_syn_recv_sock function allows attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5703.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-5332","severity":"moderate","public_date":"2018-01-02T00:00:00Z","advisories":["RHSA-2018:0470"],"bugzilla":"1533890","bugzilla_description":"CVE-2018-5332 kernel: rds_message_alloc_sgs() function doesn't validate value used during DMA page allocation causes heap out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-1:3.10.0-693.21.1.rt56.607.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5332.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-13215","severity":"important","public_date":"2018-01-02T00:00:00Z","advisories":["RHSA-2019:1170","RHSA-2019:1190","RHSA-2018:2395","RHSA-2018:2384"],"bugzilla":"1535173","bugzilla_description":"CVE-2017-13215 kernel: crypto: privilege escalation in skcipher_recvmsg function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["kernel-0:3.10.0-862.11.6.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-rt-0:3.10.0-862.11.6.rt56.819.el7","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13215.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-13216","severity":"moderate","public_date":"2018-01-02T00:00:00Z","advisories":[],"bugzilla":"1535199","bugzilla_description":"CVE-2017-13216 kernel: escalation of privileges (EoP) in ashmem_ioctl function in drivers/staging/android/ashmen.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13216.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-13220","severity":"moderate","public_date":"2018-01-02T00:00:00Z","advisories":[],"bugzilla":"1536155","bugzilla_description":"CVE-2017-13220 kernel: Possible out-of-bound access in Bluetooth subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13220.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-13221","severity":"important","public_date":"2018-01-02T00:00:00Z","advisories":[],"bugzilla":"1536181","bugzilla_description":"CVE-2017-13221 kernel: elevation of privilege (EoP) in the Upstream kernel wifi driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13221.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-17864","severity":"low","public_date":"2017-12-23T00:00:00Z","advisories":[],"bugzilla":"1529120","bugzilla_description":"CVE-2017-17864 kernel: information disclosure via pointer leak in kernel/bpf/verifier.c","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17863","severity":"moderate","public_date":"2017-12-23T00:00:00Z","advisories":[],"bugzilla":"1529123","bugzilla_description":"CVE-2017-17863 kernel: integer overflow in static int check_alu_op function in bpf/verifier.c","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17863.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17862","severity":"low","public_date":"2017-12-23T00:00:00Z","advisories":[],"bugzilla":"1529124","bugzilla_description":"CVE-2017-17862 kernel: Improper logic pruning in bpf/verifier.c","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-561","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-16996","severity":"important","public_date":"2017-12-22T00:00:00Z","advisories":[],"bugzilla":"1528516","bugzilla_description":"CVE-2017-16996 kernel: memory corruption caused by BPF verifier bugs can allow for arbitrary code execution","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16996.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-16995","severity":"important","public_date":"2017-12-22T00:00:00Z","advisories":[],"bugzilla":"1528518","bugzilla_description":"CVE-2017-16995 kernel: memory corruption caused by BPF verifier bugs can allow for arbitrary code execution","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16995.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-17852","severity":"moderate","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1530269","bugzilla_description":"CVE-2017-17852 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging mishandling of 32-bit ALU ops","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17852.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-18075","severity":"moderate","public_date":"2017-12-20T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1539508","bugzilla_description":"CVE-2017-18075 kernel: Mishandled freeing of instances in pcrypt.c can allow a local user to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18075.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-18386","severity":"moderate","public_date":"2017-12-20T00:00:00Z","advisories":["RHSA-2019:0831"],"bugzilla":"1640598","bugzilla_description":"CVE-2018-18386 kernel: Type confusion in drivers/tty/n_tty.c allows for a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["kernel-alt-0:4.14.0-115.7.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18386.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17853","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1530270","bugzilla_description":"CVE-2017-17853 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging incorrect BPF_RSH signed bounds calculations","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17853.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17854","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1530271","bugzilla_description":"CVE-2017-17854 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging unrestricted integer values for pointer arithmetic","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17854.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17855","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1530272","bugzilla_description":"CVE-2017-17855 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging improper use of pointers in place of scalars","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17855.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17856","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1530273","bugzilla_description":"CVE-2017-17856 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging the lack of stack-pointer alignment enforcement","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17856.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17857","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1530274","bugzilla_description":"CVE-2017-17857 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging mishandling of invalid variable stack read operations","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-15129","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:0654","RHSA-2019:1946"],"bugzilla":"1531174","bugzilla_description":"CVE-2017-15129 kernel: net: double-free and memory corruption in get_net_ns_by_id()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-0:3.10.0-693.55.1.el7","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15129.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2018-5750","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:2948","RHSA-2018:0676"],"bugzilla":"1539706","bugzilla_description":"CVE-2018-5750 kernel: Kernel address information leak in drivers/acpi/sbshc.c:acpi_smbus_hc_add() function potentially allowing KASLR bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5750.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-18344","severity":"important","public_date":"2017-12-15T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3591","RHSA-2018:3590","RHSA-2018:3083","RHSA-2018:3459","RHSA-2018:3586","RHSA-2018:3540"],"bugzilla":"1610958","bugzilla_description":"CVE-2017-18344 kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-327.76.1.el7","kernel-0:3.10.0-693.43.1.el7","kernel-0:3.10.0-862.20.2.el7","kernel-rt-1:3.10.0-693.43.1.rt56.630.el6rt","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a","kernel-0:3.10.0-514.61.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18344.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2017-17558","severity":"moderate","public_date":"2017-12-11T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2019:1170","RHSA-2019:1190"],"bugzilla":"1525474","bugzilla_description":"CVE-2017-17558 kernel: Unallocated memory access by malicious USB device via bNumInterfaces overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17558.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-17741","severity":"low","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1527112","bugzilla_description":"CVE-2017-17741 kernel: kvm: stack-based out-of-bounds read via vmcall instruction","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17741.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2017-16912","severity":"moderate","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1541883","bugzilla_description":"CVE-2017-16912 kernel: Out-of-bounds read in usbip/stub_rx.c:get_pipe() allows attackers to cause a denial of service via crafted USB over IP packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16912.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-17712","severity":"important","public_date":"2017-12-10T00:00:00Z","advisories":["RHSA-2018:0502"],"bugzilla":"1526427","bugzilla_description":"CVE-2017-17712 kernel: Race condition in raw_sendmsg function allows denial-of-service or kernel addresses leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-alt-0:4.11.0-44.6.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17712.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-15127","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1525218","bugzilla_description":"CVE-2017-15127 kernel: Improper error handling of VM_SHARED hugetlbfs mapping in mm/hugetlb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-15128","severity":"moderate","public_date":"2017-12-08T00:00:00Z","advisories":[],"bugzilla":"1525222","bugzilla_description":"CVE-2017-15128 kernel: Out of bound access in hugetlb_mcopy_atomic_pte function in mm/hugetlb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15128.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-17807","severity":"moderate","public_date":"2017-12-08T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016"],"bugzilla":"1528335","bugzilla_description":"CVE-2017-17807 kernel: Missing permissions check for request_key() destination allows local attackers to add keys to keyring without Write permission","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17807.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-18232","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1558066","bugzilla_description":"CVE-2017-18232 kernel: Mishandling mutex within libsas allowing local Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-833","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18232.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-16914","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1541282","bugzilla_description":"CVE-2017-16914 kernel: NULL pointer dereference in usb/usbip/stub_tx.c:stub_send_ret_submit() can lead to denial of service via crafted USB over IP packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16914.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-16913","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1541888","bugzilla_description":"CVE-2017-16913 kernel: Improper validation in usbip/stub_rx.c:stub_recv_cmd_submit() allows for denial of service via crafted USB over IP CMD_SUBMIT packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16913.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-1000410","severity":"moderate","public_date":"2017-12-06T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:1170","RHSA-2018:1319","RHSA-2018:0676","RHSA-2018:0654","RHSA-2018:1130"],"bugzilla":"1519160","bugzilla_description":"CVE-2017-1000410 kernel: Stack information leak in the EFS element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-1:3.10.0-693.25.2.rt56.612.el6rt","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:2.6.32-696.28.1.el6","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.25.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000410.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-7492","severity":"moderate","public_date":"2017-12-06T00:00:00Z","advisories":[],"bugzilla":"1527393","bugzilla_description":"CVE-2018-7492 kernel: Null pointer dereference in net/rds/rdma.c:__rds_rdma_map() allowing local attackers to cause denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-13168","severity":null,"public_date":"2017-12-06T00:00:00Z","advisories":[],"bugzilla":"1658985","bugzilla_description":"CVE-2017-13168 kernel: scsi: sg driver can improperly access userspace memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13168.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-8824","severity":"important","public_date":"2017-12-05T05:43:00Z","advisories":["RHSA-2018:1062","RHSA-2018:1170","RHSA-2018:1319","RHSA-2018:0676","RHSA-2018:3822","RHSA-2018:1216","RHSA-2018:0399","RHSA-2018:1130"],"bugzilla":"1519591","bugzilla_description":"CVE-2017-8824 kernel: Use-after-free vulnerability in DCCP socket","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-327.66.1.el7","kernel-0:3.10.0-514.44.1.el7","kernel-rt-1:3.10.0-693.25.2.rt56.612.el6rt","kernel-0:2.6.18-436.el5","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:2.6.32-696.28.1.el6","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.25.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8824.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-15121","severity":"moderate","public_date":"2017-12-05T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:1854"],"bugzilla":"1520893","bugzilla_description":"CVE-2017-15121 kernel: vfs: BUG in truncate_inode_pages_range() and fuse client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15121.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-15126","severity":"moderate","public_date":"2017-12-05T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1523481","bugzilla_description":"CVE-2017-15126 kernel: Use-after-free in userfaultfd_event_wait_completion function in userfaultfd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-17450","severity":"low","public_date":"2017-12-05T00:00:00Z","advisories":[],"bugzilla":"1525761","bugzilla_description":"CVE-2017-17450 kernel: Unchecked capabilities in net/netfilter/xt_osf.c allows for unprivileged modification to systemwide fingerprint list","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-17449","severity":"moderate","public_date":"2017-12-05T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:1170","RHSA-2018:0676","RHSA-2018:0654","RHSA-2018:1130"],"bugzilla":"1525762","bugzilla_description":"CVE-2017-17449 kernel: Missing namespace check in net/netlink/af_netlink.c allows for network monitors to observe systemwide activity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-1:3.10.0-693.25.2.rt56.612.el6rt","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.25.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17449.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-0861","severity":"moderate","public_date":"2017-12-05T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2020:0036","RHSA-2018:3083","RHSA-2018:2390"],"bugzilla":"1563994","bugzilla_description":"CVE-2017-0861 kernel: Use-after-free in snd_pcm_info function in ALSA subsystem potentially leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:2.6.32-754.3.5.el6","kernel-0:3.10.0-957.el7","kernel-0:3.10.0-862.46.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0861.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-17448","severity":"moderate","public_date":"2017-12-03T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:0654"],"bugzilla":"1525768","bugzilla_description":"CVE-2017-17448 kernel: Missing capabilities check in net/netfilter/nfnetlink_cthelper.c allows for unprivileged access to systemwide nfnl_cthelper_list structure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-5848","severity":"moderate","public_date":"2017-12-02T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1590799","bugzilla_description":"CVE-2018-5848 kernel: buffer overflow in drivers/net/wireless/ath/wil6210/wmi.c:wmi_set_ie() may lead to memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5848.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-1000407","severity":"moderate","public_date":"2017-12-01T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2019:1170"],"bugzilla":"1520328","bugzilla_description":"CVE-2017-1000407 Kernel: KVM: DoS via write flood to I/O port 0x80","cvss_score":4.6,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-248","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000407.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2017-1000405","severity":"important","public_date":"2017-11-30T00:00:00Z","advisories":["RHSA-2018:0180"],"bugzilla":"1516514","bugzilla_description":"CVE-2017-1000405 kernel: pmd can become dirty without going through a COW cycle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-alt-0:4.11.0-44.4.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000405.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2017-18208","severity":"moderate","public_date":"2017-11-30T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083","RHSA-2019:4057","RHSA-2019:4058","RHSA-2019:3967"],"bugzilla":"1551565","bugzilla_description":"CVE-2017-18208 kernel: Inifinite loop vulnerability in mm/madvise.c:madvise_willneed() function allows local denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-693.61.1.el7","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-0:3.10.0-957.el7","kernel-0:3.10.0-862.44.2.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18208.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-17805","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2019:2473","RHSA-2018:3083"],"bugzilla":"1528312","bugzilla_description":"CVE-2017-17805 kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:2.6.32-754.18.2.el6","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17805.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-17806","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1528323","bugzilla_description":"CVE-2017-17806 kernel: HMAC implementation does not validate that the underlying cryptographic hash algorithm is unkeyed allowing local attackers to cause denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17806.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-16939","severity":"important","public_date":"2017-11-24T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:0654","RHSA-2019:1170","RHSA-2019:1190","RHSA-2018:1355"],"bugzilla":"1517220","bugzilla_description":"CVE-2017-16939 Kernel: ipsec: xfrm: use-after-free leading to potential privilege escalation","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["kernel-alt-0:4.14.0-49.el7a","kernel-0:3.10.0-862.2.3.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16939.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-17975","severity":"low","public_date":"2017-11-19T00:00:00Z","advisories":[],"bugzilla":"1531142","bugzilla_description":"CVE-2017-17975 kernel: use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17975.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2017-18216","severity":"moderate","public_date":"2017-11-16T00:00:00Z","advisories":[],"bugzilla":"1551992","bugzilla_description":"CVE-2017-18216 kernel: Null pointer dereference in fs/ocfs2/cluster/nodemanager.c allows local users to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18216.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-16994","severity":"moderate","public_date":"2017-11-15T00:00:00Z","advisories":["RHSA-2018:0502"],"bugzilla":"1518155","bugzilla_description":"CVE-2017-16994 kernel: mm/pagewalk.c:walk_hugetlb_range function mishandles holes in hugetlb ranges causing information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-alt-0:4.11.0-44.6.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16994.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-18204","severity":"moderate","public_date":"2017-11-15T00:00:00Z","advisories":[],"bugzilla":"1550818","bugzilla_description":"CVE-2017-18204 kernel: Deadlock caused in fs/ocfs2/file.c:ocfs2_setattr() can allow local users to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18204.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18224","severity":"moderate","public_date":"2017-11-15T00:00:00Z","advisories":[],"bugzilla":"1557555","bugzilla_description":"CVE-2017-18224 kernel: race condition due to concurrent access to extent tree in fs/ocfs2/aops.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18224.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-15306","severity":"moderate","public_date":"2017-11-06T00:00:00Z","advisories":["RHSA-2018:0654"],"bugzilla":"1510399","bugzilla_description":"CVE-2017-15306 Kernel: KVM: oops when checking KVM_CAP_PPC_HTM on PPC platform","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-49.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15306.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-16650","severity":"low","public_date":"2017-11-06T00:00:00Z","advisories":[],"bugzilla":"1516265","bugzilla_description":"CVE-2017-16650 kernel: Divide-by-zero in drivers/net/usb/qmi_wwan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16650.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16649","severity":"low","public_date":"2017-11-06T00:00:00Z","advisories":[],"bugzilla":"1516267","bugzilla_description":"CVE-2017-16649 kernel: Divide-by-zero in drivers/net/usb/cdc_ether.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16649.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-12193","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:0181","RHSA-2018:0151","RHSA-2018:0152"],"bugzilla":"1501215","bugzilla_description":"CVE-2017-12193 kernel: Null pointer dereference due to incorrect node-splitting in assoc_array implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-1:3.10.0-693.17.1.rt56.604.el6rt","kernel-rt-0:3.10.0-693.17.1.rt56.636.el7","kernel-0:3.10.0-693.17.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12193.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-18203","severity":"moderate","public_date":"2017-11-01T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:1854","RHSA-2019:4154"],"bugzilla":"1550811","bugzilla_description":"CVE-2017-18203 kernel: Race condition in drivers/md/dm.c:dm_get_from_kobject() allows local users to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-400","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-862.el7","kernel-alt-0:4.14.0-115.16.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18203.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-16645","severity":"low","public_date":"2017-10-28T00:00:00Z","advisories":[],"bugzilla":"1516235","bugzilla_description":"CVE-2017-16645 kernel: Out-of-bounds read in drivers/input/misc/ims-pcu.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16645.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16643","severity":"low","public_date":"2017-10-24T00:00:00Z","advisories":[],"bugzilla":"1516232","bugzilla_description":"CVE-2017-16643 kernel: Out-of-bounds read in drivers/input/tablet/gtco.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16643.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16648","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1516257","bugzilla_description":"CVE-2017-16648 kernel: Use-after-free in drivers/media/dvb-core/dvb_frontend.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16648.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16646","severity":"low","public_date":"2017-10-22T00:00:00Z","advisories":[],"bugzilla":"1516272","bugzilla_description":"CVE-2017-16646 kernel: BUG in drivers/media/usb/dvb-usb/dib0700_devices.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16646.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-15951","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":[],"bugzilla":"1507539","bugzilla_description":"CVE-2017-15951 kernel: Race condition in the KEYS subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15951.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-16535","severity":"low","public_date":"2017-10-18T00:00:00Z","advisories":[],"bugzilla":"1510823","bugzilla_description":"CVE-2017-16535 kernel: out-of-bounds read in usb_get_bos_descriptor function in drivers/usb/core/config.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16535.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-15115","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":[],"bugzilla":"1513345","bugzilla_description":"CVE-2017-15115 kernel: use-after-free in sctp_cmp_addr_exact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15115.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-15537","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":[],"bugzilla":"1529302","bugzilla_description":"CVE-2017-15537 kernel: Information leak of x86 FPU registers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15537.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2017-5123","severity":"important","public_date":"2017-10-12T00:00:00Z","advisories":[],"bugzilla":"1500094","bugzilla_description":"CVE-2017-5123 kernel: Missing access_ok() checks in waitid()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5123.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-15265","severity":"moderate","public_date":"2017-10-11T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:1170","RHSA-2018:2390","RHSA-2018:3823","RHSA-2018:0676","RHSA-2018:3822","RHSA-2018:1130"],"bugzilla":"1501878","bugzilla_description":"CVE-2017-15265 kernel: Use-after-free in snd_seq_ioctl_create_port()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-1:3.10.0-693.25.2.rt56.612.el6rt","kernel-0:2.6.18-348.42.1.el5","kernel-0:2.6.32-754.3.5.el6","kernel-0:2.6.18-436.el5","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.25.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15265.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-12188","severity":"important","public_date":"2017-10-10T00:00:00Z","advisories":["RHSA-2018:0412","RHSA-2018:0395"],"bugzilla":"1500380","bugzilla_description":"CVE-2017-12188 Kernel: KVM: MMU potential stack buffer overrun during page walks","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["kernel-0:3.10.0-693.21.1.el7","kernel-rt-0:3.10.0-693.21.1.rt56.639.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12188.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2017-16527","severity":"low","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1510828","bugzilla_description":"CVE-2017-16527 kernel: Use-after-free in snd_usb_mixer_interrupt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16527.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16647","severity":"low","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1516270","bugzilla_description":"CVE-2017-16647 kernel: NULL pointer dereference in drivers/net/usb/asix_devices.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16647.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-1000255","severity":"moderate","public_date":"2017-10-09T00:00:00Z","advisories":["RHSA-2018:0654"],"bugzilla":"1498067","bugzilla_description":"CVE-2017-1000255 kernel: Arbitrary stack overwrite causing oops via crafted signal frame","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-alt-0:4.14.0-49.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000255.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2017-16537","severity":"low","public_date":"2017-10-09T00:00:00Z","advisories":[],"bugzilla":"1510825","bugzilla_description":"CVE-2017-16537 kernel: NULL pointer dereference in imon_probe function in drivers/media/rc/imon.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16537.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16525","severity":"low","public_date":"2017-10-04T00:00:00Z","advisories":[],"bugzilla":"1510799","bugzilla_description":"CVE-2017-16525 kernel: Use-after-free in usb_serial_console_disconnect()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16525.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-18200","severity":"moderate","public_date":"2017-10-01T00:00:00Z","advisories":[],"bugzilla":"1549586","bugzilla_description":"CVE-2017-18200 kernel: mishandling reference counts associated with f2fs_wait_discard_bios calls allowing local attacker to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18200.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-14954","severity":"low","public_date":"2017-09-29T00:00:00Z","advisories":[],"bugzilla":"1497745","bugzilla_description":"CVE-2017-14954 kernel: Info leak in kernel_waitid()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14954.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-16532","severity":"low","public_date":"2017-09-29T00:00:00Z","advisories":[],"bugzilla":"1510835","bugzilla_description":"CVE-2017-16532 kernel: Null pointer dereference in get_endpoints function in drivers/usb/misc/usbtest.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16532.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16533","severity":"low","public_date":"2017-09-28T00:00:00Z","advisories":[],"bugzilla":"1510836","bugzilla_description":"CVE-2017-16533 kernel: out-of-bounds read in usbhid_parse function in drivers/hid/usbhid/hid-core.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16533.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-9568","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2019:2696","RHSA-2019:4255","RHSA-2019:4159","RHSA-2019:2730","RHSA-2019:0514","RHSA-2019:2736","RHSA-2019:4164","RHSA-2019:0512","RHSA-2019:4056","RHSA-2019:3967"],"bugzilla":"1655904","bugzilla_description":"CVE-2018-9568 kernel: Memory corruption due to incorrect socket cloning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:3.10.0-957.10.1.el7","kernel-0:2.6.32-431.97.1.el6","kernel-rt-0:3.10.0-957.10.1.rt56.921.el7","kernel-0:3.10.0-693.58.1.el7","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:2.6.32-754.22.1.el6","kernel-0:3.10.0-327.83.1.el7","kernel-0:2.6.32-504.82.1.el6","kernel-0:3.10.0-862.44.2.el7","kernel-0:3.10.0-514.71.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9568.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-15299","severity":"moderate","public_date":"2017-09-27T00:00:00Z","advisories":["RHSA-2018:0654"],"bugzilla":"1498016","bugzilla_description":"CVE-2017-15299 kernel: Incorrect updates of uninstantiated keys crash the kernel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-49.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15299.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-1000253","severity":"important","public_date":"2017-09-26T00:00:00Z","advisories":["RHSA-2017:2800","RHSA-2017:2801","RHSA-2017:2798","RHSA-2017:2799","RHSA-2017:2802","RHSA-2017:2793","RHSA-2017:2796","RHSA-2017:2797","RHSA-2017:2794","RHSA-2017:2795"],"bugzilla":"1492212","bugzilla_description":"CVE-2017-1000253 kernel: load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:3.10.0-514.32.3.el7","kernel-0:2.6.32-358.84.1.el6","kernel-0:2.6.32-573.48.1.el6","kernel-0:2.6.18-423.el5","kernel-0:2.6.32-220.76.1.el6","kernel-0:2.6.18-348.34.2.el5","kernel-0:2.6.32-504.63.3.el6","kernel-0:3.10.0-327.59.3.el7","kernel-0:2.6.32-696.10.3.el6","kernel-0:2.6.32-431.85.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000253.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-16538","severity":"low","public_date":"2017-09-26T00:00:00Z","advisories":[],"bugzilla":"1510826","bugzilla_description":"CVE-2017-16538 kernel: general protection fault in drivers/media/usb/dvb-usb-v2/lmedm04.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16538.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16529","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1510831","bugzilla_description":"CVE-2017-16529 kernel: out-of-bounds read in snd_usb_create_streams","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16529.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16530","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1510832","bugzilla_description":"CVE-2017-16530 kernel: out-of-bounds read in drivers/usb/storage/uas-detect{.h,.c}","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16530.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-12190","severity":"moderate","public_date":"2017-09-21T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:0654","RHSA-2018:1854","RHSA-2019:1170","RHSA-2019:1190"],"bugzilla":"1495089","bugzilla_description":"CVE-2017-12190 kernel: memory leak when merging buffers in SCSI IO vectors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-862.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12190.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-16534","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1510822","bugzilla_description":"CVE-2017-16534 kernel: out-of-bounds read in cdc_parse_cdc_header function in drivers/usb/core/message.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16534.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16536","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1510824","bugzilla_description":"CVE-2017-16536 kernel: Null pointer dereference in cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16536.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16644","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1516273","bugzilla_description":"CVE-2017-16644 kernel: Improper error handling in drivers/media/usb/hdpvr/hdpvr-core.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16644.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-15649","severity":"important","public_date":"2017-09-20T00:00:00Z","advisories":["RHSA-2018:0181","RHSA-2018:0151","RHSA-2018:0152"],"bugzilla":"1504574","bugzilla_description":"CVE-2017-15649 kernel: Use-after-free in the af_packet.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-1:3.10.0-693.17.1.rt56.604.el6rt","kernel-rt-0:3.10.0-693.17.1.rt56.636.el7","kernel-0:3.10.0-693.17.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15649.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-16531","severity":"low","public_date":"2017-09-19T00:00:00Z","advisories":[],"bugzilla":"1510833","bugzilla_description":"CVE-2017-16531 kernel: out-of-bounds read in drivers/usb/core/config.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16531.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2020-14353","severity":null,"public_date":"2017-09-18T16:00:00Z","advisories":[],"bugzilla":"1856774","bugzilla_description":"CVE-2020-14353 kernel: keys: for keyctl prevent creating a different user's keyrings in RHEL-6.10","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14353.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-12192","severity":"moderate","public_date":"2017-09-18T00:00:00Z","advisories":["RHSA-2018:0181","RHSA-2020:2430","RHSA-2018:0654","RHSA-2018:0151","RHSA-2018:0152"],"bugzilla":"1493435","bugzilla_description":"CVE-2017-12192 kernel: NULL pointer dereference due to KEYCTL_READ on negative key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-1:3.10.0-693.17.1.rt56.604.el6rt","kernel-alt-0:4.14.0-49.el7a","kernel-rt-0:3.10.0-693.17.1.rt56.636.el7","kernel-0:2.6.32-754.30.2.el6","kernel-0:3.10.0-693.17.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12192.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18270","severity":"moderate","public_date":"2017-09-18T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0412"],"bugzilla":"1580979","bugzilla_description":"CVE-2017-18270 kernel: improper keyrings creation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["kernel-0:3.10.0-862.el7","kernel-rt-0:3.10.0-693.21.1.rt56.639.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18270.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-1000252","severity":"moderate","public_date":"2017-09-15T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:1130"],"bugzilla":"1490781","bugzilla_description":"CVE-2017-1000252 kernel: kvm: Reachable BUG() on out-of-bounds guest IRQ","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-617","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.25.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000252.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.4"},{"CVE":"CVE-2017-14991","severity":"moderate","public_date":"2017-09-15T00:00:00Z","advisories":[],"bugzilla":"1500366","bugzilla_description":"CVE-2017-14991 kernel: Information leak in the scsi driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14991.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-16526","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1510827","bugzilla_description":"CVE-2017-16526 kernel: General protection fault in drivers/uwb/uwbd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16526.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-12153","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1491046","bugzilla_description":"CVE-2017-12153 kernel: null pointer dereference in nl80211_set_rekey_data()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12153.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-14340","severity":"moderate","public_date":"2017-09-13T00:00:00Z","advisories":["RHSA-2017:2918"],"bugzilla":"1491344","bugzilla_description":"CVE-2017-14340 kernel: xfs: unprivileged user kernel oops","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14340.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-1091","severity":"moderate","public_date":"2017-09-13T00:00:00Z","advisories":["RHSA-2018:1318"],"bugzilla":"1558149","bugzilla_description":"CVE-2018-1091 kernel: guest kernel crash during core dump on POWER9 host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["kernel-0:3.10.0-862.2.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-1000251","severity":"important","public_date":"2017-09-12T00:00:00Z","advisories":["RHSA-2017:2679","RHSA-2017:2732","RHSA-2017:2705","RHSA-2017:2706","RHSA-2017:2704","RHSA-2017:2682","RHSA-2017:2683","RHSA-2017:2707","RHSA-2017:2680","RHSA-2017:2681","RHSA-2017:2731"],"bugzilla":"1489716","bugzilla_description":"CVE-2017-1000251 kernel: stack buffer overflow in the native Bluetooth stack","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["kernel-0:2.6.32-220.75.1.el6","kernel-0:2.6.32-431.84.1.el6","kernel-0:2.6.32-573.45.2.el6","kernel-0:3.10.0-514.28.2.el7","kernel-rt-0:3.10.0-693.2.2.rt56.623.el7","kernel-0:3.10.0-693.2.2.el7","kernel-rt-1:3.10.0-693.2.2.rt56.588.el6rt","kernel-0:3.10.0-327.59.2.el7","kernel-0:2.6.32-504.63.2.el6","kernel-0:2.6.32-696.10.2.el6","kernel-0:2.6.32-358.83.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000251.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-12154","severity":"important","public_date":"2017-09-12T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2019:1946"],"bugzilla":"1491224","bugzilla_description":"CVE-2017-12154 Kernel: kvm: nVMX: L2 guest could access hardware(L0) CR8 register","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-284","affected_packages":["kernel-0:3.10.0-693.55.1.el7","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12154.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2017-16528","severity":"moderate","public_date":"2017-09-12T00:00:00Z","advisories":[],"bugzilla":"1510830","bugzilla_description":"CVE-2017-16528 kernel: use-after-free in snd_rawmidi_dev_seq_free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16528.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2017-14106","severity":"moderate","public_date":"2017-09-01T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2018:2172","RHSA-2017:2931","RHSA-2017:2918","RHSA-2017:3200"],"bugzilla":"1487295","bugzilla_description":"CVE-2017-14106 kernel: Divide-by-zero in __tcp_select_window","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-696.16.1.el6","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14106.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-14051","severity":"moderate","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1487126","bugzilla_description":"CVE-2017-14051 kernel: Integer overflow in the qla2x00_sysfs_write_optrom_ctl function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14051.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-14497","severity":"moderate","public_date":"2017-08-28T00:00:00Z","advisories":[],"bugzilla":"1492593","bugzilla_description":"CVE-2017-14497 kernel: buffer overflow in tpacket_rcv() in net/packet/af_packet.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14497.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.0"},{"CVE":"CVE-2017-15116","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1514609","bugzilla_description":"CVE-2017-15116 kernel: Null pointer dereference in rngapi_reset function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15116.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14489","severity":"moderate","public_date":"2017-08-27T00:00:00Z","advisories":[],"bugzilla":"1490421","bugzilla_description":"CVE-2017-14489 kernel: scsi: nlmsg is not properly parsed in iscsi_if_rx function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-17052","severity":"moderate","public_date":"2017-08-26T00:00:00Z","advisories":[],"bugzilla":"1518632","bugzilla_description":"CVE-2017-17052 kernel: use-after-free in kernel/fork.c:mm_init function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17052.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2017-17053","severity":"moderate","public_date":"2017-08-24T00:00:00Z","advisories":[],"bugzilla":"1518638","bugzilla_description":"CVE-2017-17053 kernel: Incorrect handling in arch/x86/include/asm/mmu_context.h:init_new_context function allowing use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-7558","severity":"moderate","public_date":"2017-08-23T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2017:2918"],"bugzilla":"1480266","bugzilla_description":"CVE-2017-7558 kernel: Out of bounds read in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() in SCTP stack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7558.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2017-14140","severity":"low","public_date":"2017-08-20T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1488329","bugzilla_description":"CVE-2017-14140 kernel: Missing permission check in move_pages system call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14140.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-10675","severity":"important","public_date":"2017-08-19T00:00:00Z","advisories":["RHSA-2018:2925","RHSA-2018:2924","RHSA-2018:3590","RHSA-2018:2933","RHSA-2018:2785","RHSA-2018:3586","RHSA-2018:2164","RHSA-2018:2395","RHSA-2018:2384","RHSA-2018:3540","RHSA-2018:2791"],"bugzilla":"1575065","bugzilla_description":"CVE-2018-10675 kernel: mm: use-after-free in do_get_mempolicy function allows local DoS or other unspecified impact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-327.76.1.el7","kernel-0:3.10.0-693.43.1.el7","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.93.1.el6","kernel-0:2.6.32-573.65.2.el6","kernel-rt-1:3.10.0-693.43.1.rt56.630.el6rt","kernel-0:3.10.0-862.11.6.el7","kernel-0:3.10.0-514.58.1.el7","kernel-0:2.6.32-504.76.2.el6","kernel-rt-0:3.10.0-862.11.6.rt56.819.el7","kernel-0:2.6.32-431.93.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10675.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-13686","severity":"moderate","public_date":"2017-08-16T00:00:00Z","advisories":[],"bugzilla":"1485265","bugzilla_description":"CVE-2017-13686 kernel: NULL pointer dereference due to late check for a NULL fi field when RTM_F_FIB_MATCH is set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13686.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-1000111","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2017:2918","RHSA-2017:3200"],"bugzilla":"1479304","bugzilla_description":"CVE-2017-1000111 kernel: Heap out-of-bounds read in AF_PACKET sockets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.32-696.16.1.el6","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000111.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-1000112","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2019:4159","RHSA-2017:2918","RHSA-2017:3200","RHSA-2019:1932","RHSA-2019:1931"],"bugzilla":"1479307","bugzilla_description":"CVE-2017-1000112 kernel: Exploitable memory corruption due to UFO to non-UFO path switch","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.18-438.el5","kernel-0:2.6.18-348.44.1.el5","kernel-0:2.6.32-696.16.1.el6","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7","kernel-0:3.10.0-514.71.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000112.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-18261","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":[],"bugzilla":"1569560","bugzilla_description":"CVE-2017-18261 kernel: Infinite recursion in arch/arm64/include/asm/arch_timer.h:arch_timer_reg_read_stable macro allows local users to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18261.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7533","severity":"important","public_date":"2017-08-03T00:00:00Z","advisories":["RHSA-2017:2669","RHSA-2017:2869","RHSA-2017:2473","RHSA-2017:2770","RHSA-2017:2585"],"bugzilla":"1468283","bugzilla_description":"CVE-2017-7533 kernel: a race between inotify_handle_event() and sys_rename()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-642","affected_packages":["kernel-0:3.10.0-693.1.1.el7","kernel-0:3.10.0-327.61.3.el7","kernel-0:3.10.0-514.32.2.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-rt-0:3.10.0-693.2.1.rt56.620.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7533.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-14156","severity":"low","public_date":"2017-08-03T00:00:00Z","advisories":[],"bugzilla":"1478018","bugzilla_description":"CVE-2017-14156 kernel: driver/video/fbdev/aty/atyfb_base.c: atyfb_ioctl() stack infoleak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14156.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-12762","severity":"low","public_date":"2017-08-03T00:00:00Z","advisories":[],"bugzilla":"1481178","bugzilla_description":"CVE-2017-12762 kernel: Buffer overflow due to unbounded strcpy in ISDN I4L driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12762.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2014-9900","severity":"moderate","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1481325","bugzilla_description":"CVE-2014-9900 kernel: Info leak in uninitialized structure ethtool_wolinfo in ethtool_get_wol()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-13166","severity":"important","public_date":"2017-07-20T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:2948","RHSA-2018:1170","RHSA-2018:1319","RHSA-2018:0676","RHSA-2018:1130"],"bugzilla":"1548412","bugzilla_description":"CVE-2017-13166 kernel: v4l2: disabled memory access protection mechanism allowing privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["kernel-rt-1:3.10.0-693.25.2.rt56.612.el6rt","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:2.6.32-696.28.1.el6","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.25.2.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13166.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7542","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2017:2918","RHSA-2018:0169"],"bugzilla":"1473649","bugzilla_description":"CVE-2017-7542 kernel: Integer overflow in ip6_find_1stfragopt() causes infinite loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-835","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.32-696.20.1.el6","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7542.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-13693","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1485346","bugzilla_description":"CVE-2017-13693 kernel: ACPI operand cache leak in dsutils.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13693.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-13695","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1485349","bugzilla_description":"CVE-2017-13695 kernel: ACPI operand cache leak in nseval.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13695.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-11473","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2018:0654"],"bugzilla":"1473209","bugzilla_description":"CVE-2017-11473 kernel: Buffer overflow in mp_override_legacy_irq()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-alt-0:4.14.0-49.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11473.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-7541","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2017:2918","RHSA-2017:2863"],"bugzilla":"1473198","bugzilla_description":"CVE-2017-7541 kernel: Possible heap buffer overflow in brcmf_cfg80211_mgmt_tx()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.32-696.13.2.el6","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7541.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2017-11600","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":["RHSA-2018:1965","RHSA-2019:1170","RHSA-2018:2003","RHSA-2019:1190"],"bugzilla":"1474928","bugzilla_description":"CVE-2017-11600 kernel: Out-of-bounds access via an XFRM_MSG_MIGRATE xfrm Netlink message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-0:3.10.0-862.6.3.el7","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11600.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-10087","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1568011","bugzilla_description":"CVE-2018-10087 kernel: Undefined behavior in kernel/exit.c:kernel_wait4() function allows local denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-10124","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1568205","bugzilla_description":"CVE-2018-10124 kernel: Undefined behaviour with INT_MIN argument in kernel/signal.c:kill_something_info() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10124.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-11176","severity":"moderate","public_date":"2017-07-09T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2018:3822","RHSA-2017:2918","RHSA-2018:0169"],"bugzilla":"1470659","bugzilla_description":"CVE-2017-11176 kernel: Use-after-free in sys_mq_notify()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.18-436.el5","kernel-0:2.6.32-696.20.1.el6","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11176.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-11089","severity":"moderate","public_date":"2017-07-07T00:00:00Z","advisories":[],"bugzilla":"1564038","bugzilla_description":"CVE-2017-11089 kernel: Out-of-bounds read in nl80211_set_station allows privileged local attacker to cause system crash or possibly code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11089.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-18218","severity":"moderate","public_date":"2017-07-06T00:00:00Z","advisories":[],"bugzilla":"1551985","bugzilla_description":"CVE-2017-18218 kernel: Use-after-free vulnerability in drivers/net/ethernet/hisilicon/hns/hns_enet.c allows local attacker to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18218.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18079","severity":"moderate","public_date":"2017-07-03T00:00:00Z","advisories":[],"bugzilla":"1539725","bugzilla_description":"CVE-2017-18079 kernel: Null pointer dereference in drivers/input/serio/i8042.c leading to denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18079.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-9986","severity":"low","public_date":"2017-06-28T00:00:00Z","advisories":[],"bugzilla":"1470211","bugzilla_description":"CVE-2017-9986 kernel: Double fetch in the intr function in sound/oss/msnd_pinnacle.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9986.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-9985","severity":"low","public_date":"2017-06-28T00:00:00Z","advisories":[],"bugzilla":"1470213","bugzilla_description":"CVE-2017-9985 kernel: Double fetch in the snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9985.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-8797","severity":"important","public_date":"2017-06-27T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2437","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1466329","bugzilla_description":"CVE-2017-8797 kernel: NFSv4 server does not properly validate layout type when processing NFSv4 pNFS LAYOUTGET operand","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7","kernel-0:3.10.0-514.28.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2017-7482","severity":"moderate","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:0641"],"bugzilla":"1446288","bugzilla_description":"CVE-2017-7482 kernel: net/rxrpc: overflow in decoding of krb5 principal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-rt-1:3.10.0-693.46.1.rt56.639.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7482.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-13694","severity":"moderate","public_date":"2017-06-23T00:00:00Z","advisories":[],"bugzilla":"1485348","bugzilla_description":"CVE-2017-13694 kernel: ACPI node and node_ext cache leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13694.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-7518","severity":"moderate","public_date":"2017-06-22T00:00:00Z","advisories":["RHSA-2018:0412","RHSA-2018:0395"],"bugzilla":"1464473","bugzilla_description":"CVE-2017-7518 Kernel: KVM: debug exception via syscall emulation","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.21.1.el7","kernel-rt-0:3.10.0-693.21.1.rt56.639.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7518.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2017-9984","severity":"low","public_date":"2017-06-20T00:00:00Z","advisories":[],"bugzilla":"1470178","bugzilla_description":"CVE-2017-9984 kernel: Double fetch in the snd_msnd_interrupt function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9984.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-1000364","severity":"important","public_date":"2017-06-19T00:00:00Z","advisories":["RHSA-2017:1491","RHSA-2017:1490","RHSA-2017:1482","RHSA-2017:1484","RHSA-2017:1483","RHSA-2017:1486","RHSA-2017:1485","RHSA-2017:1488","RHSA-2017:1487","RHSA-2017:1567","RHSA-2017:1489","RHSA-2017:1647","RHSA-2017:1616"],"bugzilla":"1461333","bugzilla_description":"CVE-2017-1000364 kernel: heap/stack gap jumping via unbounded stack allocations","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-rt-1:3.10.0-514.rt56.228.el6rt","kernel-0:3.10.0-327.55.2.el7","kernel-0:2.6.18-420.el5","kernel-0:2.6.32-220.72.2.el6","kernel-0:2.6.32-431.80.2.el6","kernel-0:2.6.32-696.3.2.el6","kernel-0:2.6.18-348.33.2.el5","kernel-0:2.6.32-504.60.2.el6","kernel-0:3.10.0-514.21.2.el7","kernel-0:2.6.32-358.79.2.el6","kernel-0:2.6.32-573.42.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000364.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2017-1000365","severity":"low","public_date":"2017-06-19T00:00:00Z","advisories":[],"bugzilla":"1462147","bugzilla_description":"CVE-2017-1000365 kernel: RLIMIT_STACK/RLIMIT_INFINITY string size limitation bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000365.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-1000370","severity":"low","public_date":"2017-06-19T00:00:00Z","advisories":[],"bugzilla":"1462153","bugzilla_description":"CVE-2017-1000370 kernel: offset2lib patch protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000370.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-1000371","severity":"low","public_date":"2017-06-19T00:00:00Z","advisories":["RHSA-2020:1524"],"bugzilla":"1462158","bugzilla_description":"CVE-2017-1000371 kernel: offset2lib allows for the stack guard page to be jumped over","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-0:2.6.32-754.29.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000371.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-1000379","severity":"low","public_date":"2017-06-19T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:1489","RHSA-2017:1647","RHSA-2017:1491","RHSA-2017:1490","RHSA-2017:1616","RHSA-2017:1482","RHSA-2017:1484","RHSA-2017:1486","RHSA-2017:1485","RHSA-2017:1488","RHSA-2017:1487"],"bugzilla":"1462165","bugzilla_description":"CVE-2017-1000379 kernel: Incorrectly mapped contents of PIE executable","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-rt-1:3.10.0-514.rt56.228.el6rt","kernel-0:3.10.0-327.55.2.el7","kernel-0:2.6.18-420.el5","kernel-0:2.6.32-220.72.2.el6","kernel-0:2.6.32-431.80.2.el6","kernel-0:2.6.32-696.3.2.el6","kernel-0:2.6.32-504.60.2.el6","kernel-0:3.10.0-514.21.2.el7","kernel-0:3.10.0-693.el7","kernel-0:2.6.32-358.79.2.el6","kernel-0:2.6.32-573.42.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000379.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-1000380","severity":"moderate","public_date":"2017-06-12T00:00:00Z","advisories":["RHSA-2017:3315","RHSA-2017:3295","RHSA-2017:3322"],"bugzilla":"1463311","bugzilla_description":"CVE-2017-1000380 kernel: information leak due to a data race in ALSA timer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-693.11.1.rt56.632.el7","kernel-0:3.10.0-693.11.1.el7","kernel-rt-1:3.10.0-693.11.1.rt56.597.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000380.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-15274","severity":"moderate","public_date":"2017-06-08T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2019:1946"],"bugzilla":"1500391","bugzilla_description":"CVE-2017-15274 kernel: dereferencing NULL payload with nonzero length","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-693.55.1.el7","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15274.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-13305","severity":"moderate","public_date":"2017-06-08T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:2165"],"bugzilla":"1581637","bugzilla_description":"CVE-2017-13305 kernel: Buffer over-read in keyring subsystem allows exposing potentially sensitive information to local attacker","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-rt-1:3.10.0-693.35.1.rt56.625.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13305.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-9605","severity":"low","public_date":"2017-06-02T00:00:00Z","advisories":[],"bugzilla":"1462172","bugzilla_description":"CVE-2017-9605 kernel: Uninitialized kernel memory leak in vmw_gb_surface_define_ioctl function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9605.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-18241","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1559318","bugzilla_description":"CVE-2017-18241 kernel: Null pointer dereference in fs/f2fs/segment.c via mounting fs with noflush_merge option allows local denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18241.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-12146","severity":"moderate","public_date":"2017-05-25T00:00:00Z","advisories":["RHEA-2017:3163"],"bugzilla":"1489078","bugzilla_description":"CVE-2017-12146 kernel: Race condition in driver_override implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-alt-0:4.11.0-44.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12146.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-1000363","severity":"moderate","public_date":"2017-05-22T00:00:00Z","advisories":[],"bugzilla":"1451685","bugzilla_description":"CVE-2017-1000363 kernel: Out-of-bounds write in lp_setup in drivers/char/lp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000363.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-9242","severity":"moderate","public_date":"2017-05-19T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1456388","bugzilla_description":"CVE-2017-9242 kernel: Incorrect overwrite check in __ip6_append_data()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9242.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-9075","severity":"moderate","public_date":"2017-05-17T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1452691","bugzilla_description":"CVE-2017-9075 kernel: net: sctp_v6_create_accept_sk function mishandles inheritance","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-9074","severity":"moderate","public_date":"2017-05-16T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077","RHSA-2018:0169"],"bugzilla":"1452679","bugzilla_description":"CVE-2017-9074 kernel: net: IPv6 fragmentation implementation of nexthdr field may be associated with an invalid option","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-696.20.1.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9074.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7495","severity":"moderate","public_date":"2017-05-12T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1450261","bugzilla_description":"CVE-2017-7495 kernel: ext4: power failure during write(2) causes on-disk information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2017-10663","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1481149","bugzilla_description":"CVE-2017-10663 kernel: Missing sanity check for segno and blkoff read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10663.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-18360","severity":"low","public_date":"2017-05-11T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1671343","bugzilla_description":"CVE-2017-18360 kernel: Division by zero in change_port_settings in drivers/usb/serial/io_ti.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18360.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-9076","severity":"moderate","public_date":"2017-05-10T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1452688","bugzilla_description":"CVE-2017-9076 kernel: net: IPv6 DCCP implementation mishandles inheritance","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9076.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-9077","severity":"moderate","public_date":"2017-05-10T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1452744","bugzilla_description":"CVE-2017-9077 kernel: net: tcp_v6_syn_recv_sock function mishandles inheritance","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9077.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-8890","severity":"moderate","public_date":"2017-05-09T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1450972","bugzilla_description":"CVE-2017-8890 kernel: Double free in the inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-9211","severity":"moderate","public_date":"2017-05-09T00:00:00Z","advisories":[],"bugzilla":"1454757","bugzilla_description":"CVE-2017-9211 kernel: Null pointer dereference due to missing key-size check in setkey function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-9150","severity":"moderate","public_date":"2017-05-08T00:00:00Z","advisories":[],"bugzilla":"1454647","bugzilla_description":"CVE-2017-9150 kernel: eBPF verifier log leaks lower half of map pointer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9150.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-7487","severity":"low","public_date":"2017-05-02T00:00:00Z","advisories":[],"bugzilla":"1447734","bugzilla_description":"CVE-2017-7487 kernel: Reference counter leak in ipxitf_ioctl resulting into use after free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2017-10662","severity":"low","public_date":"2017-05-02T00:00:00Z","advisories":[],"bugzilla":"1481146","bugzilla_description":"CVE-2017-10662 kernel: Missing sanity check for segment count in f2fs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10662.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-0630","severity":"low","public_date":"2017-05-01T00:00:00Z","advisories":[],"bugzilla":"1450039","bugzilla_description":"CVE-2017-0630 kernel: Information disclosure vulnerability in kernel trace subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0630.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-0627","severity":"low","public_date":"2017-05-01T00:00:00Z","advisories":[],"bugzilla":"1450042","bugzilla_description":"CVE-2017-0627 kernel: Information disclosure vulnerability in kernel UVC driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-7895","severity":"important","public_date":"2017-04-28T00:00:00Z","advisories":["RHSA-2017:1798","RHSA-2017:1723","RHSA-2017:2732","RHSA-2017:1766","RHSA-2017:1615","RHSA-2017:1647","RHSA-2017:2428","RHSA-2017:1715","RHSA-2017:2429","RHSA-2017:1616","RHSA-2017:2472","RHSA-2017:2412"],"bugzilla":"1446103","bugzilla_description":"CVE-2017-7895 kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-0:2.6.18-422.el5","kernel-0:2.6.32-220.75.1.el6","kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-rt-1:3.10.0-514.rt56.228.el6rt","kernel-0:2.6.18-348.34.1.el5","kernel-0:2.6.32-573.45.1.el6","kernel-0:2.6.32-358.81.1.el6","kernel-0:2.6.32-431.82.1.el6","kernel-0:2.6.32-696.6.3.el6","kernel-0:2.6.32-504.62.1.el6","kernel-0:3.10.0-514.26.1.el7","kernel-0:3.10.0-327.58.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7895.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-9059","severity":"moderate","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1451386","bugzilla_description":"CVE-2017-9059 kernel: Module reference leak due to improper shut down of callback channel on umount","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9059.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11472","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1473214","bugzilla_description":"CVE-2017-11472 kernel: ACPI operand cache leak in acpi_ns_terminate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11472.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-7477","severity":"important","public_date":"2017-04-24T00:00:00Z","advisories":["RHSA-2017:1615","RHSA-2017:1616"],"bugzilla":"1445207","bugzilla_description":"CVE-2017-7477 kernel: net: Heap overflow in skb_to_sgvec in macsec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-0:3.10.0-514.26.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-8831","severity":"low","public_date":"2017-04-24T00:00:00Z","advisories":[],"bugzilla":"1449980","bugzilla_description":"CVE-2017-8831 kernel: Double fetch vulnerability in saa7164_bus_get function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8831.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.0"},{"CVE":"CVE-2007-6761","severity":"moderate","public_date":"2017-04-24T00:00:00Z","advisories":[],"bugzilla":"1458182","bugzilla_description":"CVE-2007-6761 kernel: Improper initialization of videobuf_mapping data structures","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6761.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-5873","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1600268","bugzilla_description":"CVE-2018-5873 kernel: use-after-free in __ns_get_path()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5873.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2016-9604","severity":"low","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1389433","bugzilla_description":"CVE-2016-9604 kernel: security: The built-in keyrings for security tokens can be joined as a session and then modified by the root user","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-732","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9604.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-7645","severity":"important","public_date":"2017-04-14T00:00:00Z","advisories":["RHSA-2018:1319","RHSA-2017:1615","RHSA-2017:1647","RHSA-2017:1616"],"bugzilla":"1443615","bugzilla_description":"CVE-2017-7645 kernel: nfsd: Incorrect handling of long RPC replies","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-130","affected_packages":["kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-rt-1:3.10.0-514.rt56.228.el6rt","kernel-0:2.6.32-696.28.1.el6","kernel-0:3.10.0-514.26.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7979","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1444501","bugzilla_description":"CVE-2017-7979 kernel: cookie feature in packet action API implementation mishandles tb nlattr array","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7979.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7618","severity":"low","public_date":"2017-04-10T00:00:00Z","advisories":[],"bugzilla":"1441093","bugzilla_description":"CVE-2017-7618 kernel: Infinite recursion in ahash.c by triggering EBUSY on a full queue","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7618.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7616","severity":"moderate","public_date":"2017-04-08T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1441088","bugzilla_description":"CVE-2017-7616 kernel: Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-390","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-10810","severity":"low","public_date":"2017-04-06T00:00:00Z","advisories":[],"bugzilla":"1468023","bugzilla_description":"CVE-2017-10810 Kernel: virtio-gpu: memory leakage while creating gpu object","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10810.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2017-7889","severity":"moderate","public_date":"2017-04-05T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1444493","bugzilla_description":"CVE-2017-7889 kernel: mm subsystem does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7889.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7472","severity":"moderate","public_date":"2017-04-01T00:00:00Z","advisories":["RHSA-2018:0181","RHSA-2018:0151","RHSA-2018:0152"],"bugzilla":"1442086","bugzilla_description":"CVE-2017-7472 kernel: keyctl_set_reqkey_keyring() leaks thread keyrings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-1:3.10.0-693.17.1.rt56.604.el6rt","kernel-rt-0:3.10.0-693.17.1.rt56.636.el7","kernel-0:3.10.0-693.17.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7472.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7374","severity":"low","public_date":"2017-03-31T00:00:00Z","advisories":[],"bugzilla":"1438394","bugzilla_description":"CVE-2017-7374 kernel: use-after-free in keyring key revocation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7374.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2017-8106","severity":"moderate","public_date":"2017-03-31T00:00:00Z","advisories":[],"bugzilla":"1445828","bugzilla_description":"CVE-2017-8106 kernel: Null pointer dereference on host in INVEPT emulation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8106.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2017-7346","severity":"low","public_date":"2017-03-30T00:00:00Z","advisories":[],"bugzilla":"1437431","bugzilla_description":"CVE-2017-7346 kernel: drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7346.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7319","severity":null,"public_date":"2017-03-30T00:00:00Z","advisories":[],"bugzilla":"1440877","bugzilla_description":"CVE-2017-7319 kernel: Sending SIGIO signal to any process via fcntl","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7319.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-7184","severity":"important","public_date":"2017-03-29T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2019:4159","RHSA-2017:2918"],"bugzilla":"1435153","bugzilla_description":"CVE-2017-7184 kernel: Out-of-bounds heap access in xfrm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7","kernel-0:3.10.0-514.71.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7184.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7308","severity":"important","public_date":"2017-03-29T00:00:00Z","advisories":["RHSA-2018:1854","RHSA-2017:1308","RHSA-2017:1297","RHSA-2017:1298"],"bugzilla":"1437404","bugzilla_description":"CVE-2017-7308 kernel: net/packet: overflow in check for priv area size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-0:2.6.32-754.el6","kernel-rt-0:3.10.0-514.21.1.rt56.438.el7","kernel-rt-1:3.10.0-514.rt56.221.el6rt","kernel-0:3.10.0-514.21.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7308.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-7286","severity":null,"public_date":"2017-03-29T00:00:00Z","advisories":[],"bugzilla":"1440871","bugzilla_description":"CVE-2017-7286 kernel: Inode integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7286.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-7294","severity":"moderate","public_date":"2017-03-28T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1436798","bugzilla_description":"CVE-2017-7294 kernel: drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7294.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2017-7273","severity":"low","public_date":"2017-03-27T00:00:00Z","advisories":[],"bugzilla":"1437435","bugzilla_description":"CVE-2017-7273 kernel: HID: integer underflow in cp_report_fixup() (drivers/hid/hid-cypress.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7273.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-7261","severity":"low","public_date":"2017-03-24T00:00:00Z","advisories":[],"bugzilla":"1435719","bugzilla_description":"CVE-2017-7261 kernel: drm/vmwgfx: check that number of mip levels is above zero","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-839","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7261.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-2671","severity":"moderate","public_date":"2017-03-24T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1436649","bugzilla_description":"CVE-2017-2671 kernel: ping socket / AF_LLC connect() sin_family race","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2671.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-18249","severity":"moderate","public_date":"2017-03-22T00:00:00Z","advisories":[],"bugzilla":"1560968","bugzilla_description":"CVE-2017-18249 kernel: Race condition in fs/f2fs/node.c:add_free_nid() function allows local users to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18249.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-2647","severity":"important","public_date":"2017-03-21T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2437","RHSA-2017:2077","RHSA-2020:3836","RHSA-2020:3548","RHSA-2017:2444"],"bugzilla":"1428353","bugzilla_description":"CVE-2017-2647 kernel: Null pointer dereference in search_keyring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:2.6.32-754.33.1.el6","kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7","kernel-0:3.10.0-514.28.1.el7","kernel-rt-1:3.10.0-514.rt56.231.el6rt","kernel-0:2.6.32-504.84.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2647.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7277","severity":"low","public_date":"2017-03-18T00:00:00Z","advisories":[],"bugzilla":"1436629","bugzilla_description":"CVE-2017-7277 kernel: Mishandling SCM_TIMESTAMPING_OPT_STATS feature causes out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7277.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2017-7187","severity":"moderate","public_date":"2017-03-16T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1434327","bugzilla_description":"CVE-2017-7187 kernel: scsi: Stack-based buffer overflow in sg_ioctl function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7187.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-2636","severity":"important","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:1126","RHSA-2017:0986","RHSA-2017:0931","RHSA-2017:0933","RHSA-2017:0932","RHSA-2017:0892","RHSA-2017:1233","RHSA-2017:1232","RHSA-2017:1488","RHSA-2017:1125"],"bugzilla":"1428319","bugzilla_description":"CVE-2017-2636 kernel: Race condition access to n_hdlc.tbuf causes double free in n_hdlc_release()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-0:2.6.32-358.78.1.el6","kernel-rt-1:3.10.0-514.rt56.219.el6rt","kernel-0:3.10.0-327.53.1.el7","kernel-0:2.6.32-696.1.1.el6","kernel-0:2.6.32-431.80.1.el6","kernel-rt-0:3.10.0-514.16.1.rt56.437.el7","kernel-0:3.10.0-514.16.1.el7","kernel-0:2.6.32-573.42.1.el6","kernel-0:2.6.32-220.71.1.el6","kernel-0:2.6.32-504.60.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2636.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-6874","severity":"moderate","public_date":"2017-03-06T00:00:00Z","advisories":[],"bugzilla":"1432429","bugzilla_description":"CVE-2017-6874 kernel: Race condition in kernel/ucount.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6874.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8925","severity":"low","public_date":"2017-03-06T00:00:00Z","advisories":[],"bugzilla":"1451393","bugzilla_description":"CVE-2017-8925 kernel: Reference count mishandling in the omninet_open function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8925.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8924","severity":"low","public_date":"2017-03-06T00:00:00Z","advisories":[],"bugzilla":"1451399","bugzilla_description":"CVE-2017-8924 kernel: Information leak in completion handler in edge_bulk_in_callback function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8924.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-6951","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1433252","bugzilla_description":"CVE-2017-6951 kernel: NULL pointer dereference in keyring_search_aux function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6951.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8065","severity":"moderate","public_date":"2017-02-27T00:00:00Z","advisories":[],"bugzilla":"1445338","bugzilla_description":"CVE-2017-8065 kernel: crypto/ccm.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8065.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-2634","severity":"moderate","public_date":"2017-02-24T00:00:00Z","advisories":["RHSA-2017:0346","RHSA-2017:0323","RHSA-2017:0347"],"bugzilla":"1424751","bugzilla_description":"CVE-2017-2634 kernel: dccp: crash while sending ipv6 reset packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:2.6.18-348.33.1.el5","kernel-0:2.6.18-419.el5","kernel-0:2.6.18-238.58.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8066","severity":"moderate","public_date":"2017-02-24T00:00:00Z","advisories":[],"bugzilla":"1445339","bugzilla_description":"CVE-2017-8066 kernel: gs_usb.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8066.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-6353","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":[],"bugzilla":"1428907","bugzilla_description":"CVE-2017-6353 kernel: Possible double free in stcp_sendmsg() (incorrect fix for CVE-2017-5986)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6353.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18255","severity":"low","public_date":"2017-02-23T00:00:00Z","advisories":[],"bugzilla":"1563069","bugzilla_description":"CVE-2017-18255 kernel: Integer overflow in events/core.c:perf_cpu_time_max_percent_handler() can allow for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18255.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2017-6074","severity":"important","public_date":"2017-02-22T00:00:00Z","advisories":["RHSA-2017:0294","RHSA-2017:0293","RHSA-2017:0295","RHSA-2017:0366","RHSA-2017:0365","RHSA-2017:0346","RHSA-2017:0324","RHSA-2017:0323","RHSA-2017:0345","RHSA-2017:0403","RHSA-2017:0347","RHSA-2017:0501","RHSA-2017:0316","RHSA-2017:0932","RHSA-2017:1209"],"bugzilla":"1423071","bugzilla_description":"CVE-2017-6074 kernel: use after free in dccp protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:2.6.32-504.57.1.el6","kernel-0:2.6.18-348.33.1.el5","kernel-rt-1:3.10.0-514.rt56.219.el6rt","kernel-0:2.6.32-431.78.1.el6","kernel-0:3.10.0-229.49.1.ael7b","kernel-0:2.6.32-358.77.1.el6","kernel-rt-0:3.10.0-514.6.1.rt56.430.el7","kernel-0:2.6.18-238.58.1.el5","rhev-hypervisor7-0:7.3-20170425.0.el7ev","rhev-hypervisor7-0:7.3-20170425.0.el6ev","kernel-0:2.6.32-573.40.1.el6","kernel-0:3.10.0-327.49.2.el7","kernel-0:2.6.18-419.el5","kernel-0:2.6.32-220.70.1.el6","kernel-0:3.10.0-514.6.2.el7","kernel-0:2.6.32-642.13.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6074.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-6347","severity":"moderate","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427984","bugzilla_description":"CVE-2017-6347 kernel: ipv4: Incorrect IP_CHECKSUM handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-6348","severity":"moderate","public_date":"2017-02-17T00:00:00Z","advisories":[],"bugzilla":"1428491","bugzilla_description":"CVE-2017-6348 kernel: net: Improper lock dropping in the hashbin_delete function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6348.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-2618","severity":"moderate","public_date":"2017-02-16T00:00:00Z","advisories":["RHSA-2017:0931","RHSA-2017:0933","RHSA-2017:0932"],"bugzilla":"1419916","bugzilla_description":"CVE-2017-2618 kernel: Off-by-one error in selinux_setprocattr (/proc/self/attr/fscreate)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["kernel-rt-1:3.10.0-514.rt56.219.el6rt","kernel-rt-0:3.10.0-514.16.1.rt56.437.el7","kernel-0:3.10.0-514.16.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2618.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8062","severity":"moderate","public_date":"2017-02-15T00:00:00Z","advisories":[],"bugzilla":"1445332","bugzilla_description":"CVE-2017-8062 kernel: dw2102.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8062.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-6346","severity":"moderate","public_date":"2017-02-14T00:00:00Z","advisories":[],"bugzilla":"1428487","bugzilla_description":"CVE-2017-6346 kernel: net: Race condition in net/packet/af_packet.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6346.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-6345","severity":"moderate","public_date":"2017-02-13T00:00:00Z","advisories":[],"bugzilla":"1428485","bugzilla_description":"CVE-2017-6345 kernel: llc: skb->sk set without skb->destructor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6345.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-5972","severity":"moderate","public_date":"2017-02-12T00:00:00Z","advisories":[],"bugzilla":"1422081","bugzilla_description":"CVE-2017-5972 kernel: SYN cookie protection mechanism not properly implemented","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5972.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8061","severity":"moderate","public_date":"2017-02-12T00:00:00Z","advisories":[],"bugzilla":"1445333","bugzilla_description":"CVE-2017-8061 kernel: dvb-usb-firmware.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8061.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5967","severity":"low","public_date":"2017-02-10T00:00:00Z","advisories":[],"bugzilla":"1422138","bugzilla_description":"CVE-2017-5967 kernel: Time subsystem allows local users to discover real PID values","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5967.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-10661","severity":"moderate","public_date":"2017-02-10T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2020:0036","RHSA-2018:3083","RHSA-2019:4057","RHSA-2019:4058"],"bugzilla":"1481136","bugzilla_description":"CVE-2017-10661 kernel: Handling of might_cancel queueing is not properly pretected against race","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-693.61.1.el7","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-0:3.10.0-957.el7","kernel-0:3.10.0-862.46.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10661.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-8636","severity":"moderate","public_date":"2017-02-07T00:00:00Z","advisories":[],"bugzilla":"1421981","bugzilla_description":"CVE-2016-8636 kernel: Integer overflow in the RDMA over infiniband software implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8636.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2017-6214","severity":"moderate","public_date":"2017-02-07T00:00:00Z","advisories":["RHSA-2017:1615","RHSA-2017:1647","RHSA-2017:1616","RHSA-2017:1372"],"bugzilla":"1426542","bugzilla_description":"CVE-2017-6214 kernel: ipv4/tcp: Infinite loop in tcp_splice_read()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-0:2.6.32-696.3.1.el6","kernel-rt-1:3.10.0-514.rt56.228.el6rt","kernel-0:3.10.0-514.26.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5986","severity":"moderate","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:1308"],"bugzilla":"1420276","bugzilla_description":"CVE-2017-5986 kernel: Reachable BUG_ON from userspace in sctp_wait_for_sndbuf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["kernel-0:3.10.0-514.21.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5986.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5897","severity":"low","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1419848","bugzilla_description":"CVE-2017-5897 kernel: ip6_gre: Invalid reads in ip6gre_err","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-8063","severity":"moderate","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1445334","bugzilla_description":"CVE-2017-8063 kernel: cxusb.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8063.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5970","severity":"moderate","public_date":"2017-02-04T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1421638","bugzilla_description":"CVE-2017-5970 kernel: ipv4: Invalid IP options could cause skb->dst drop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5970.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8070","severity":"moderate","public_date":"2017-02-04T00:00:00Z","advisories":[],"bugzilla":"1445328","bugzilla_description":"CVE-2017-8070 kernel: catc.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8070.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8068","severity":"moderate","public_date":"2017-02-04T00:00:00Z","advisories":[],"bugzilla":"1445341","bugzilla_description":"CVE-2017-8068 kernel: pegasus.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8068.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8069","severity":"moderate","public_date":"2017-02-04T00:00:00Z","advisories":[],"bugzilla":"1445343","bugzilla_description":"CVE-2017-8069 kernel: rtl8150.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8069.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8064","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":[],"bugzilla":"1445336","bugzilla_description":"CVE-2017-8064 kernel: dvb_usb_core.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8064.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8067","severity":"moderate","public_date":"2017-02-01T00:00:00Z","advisories":[],"bugzilla":"1445340","bugzilla_description":"CVE-2017-8067 kernel: virtio_console.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8067.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8072","severity":"moderate","public_date":"2017-01-30T00:00:00Z","advisories":[],"bugzilla":"1445330","bugzilla_description":"CVE-2017-8072 kernel: cp2112_gpio_direction_input does not have the expected EIO error status for a zero-length report","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8072.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8071","severity":"moderate","public_date":"2017-01-30T00:00:00Z","advisories":[],"bugzilla":"1445331","bugzilla_description":"CVE-2017-8071 kernel: hid-cp2112.c uses a spinlock without considering that sleeping is possible in a USB HID request callback","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8071.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8405","severity":"low","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1426132","bugzilla_description":"CVE-2016-8405 kernel: Copying color maps to userspace vulnerable to heap-buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8405.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2016-10142","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0817"],"bugzilla":"1415908","bugzilla_description":"CVE-2016-10142 kernel - IPV6 fragmentation flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-406","affected_packages":["kernel-0:2.6.32-696.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10142.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2017-2596","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1417812","bugzilla_description":"CVE-2017-2596 Kernel: kvm: page reference leakage in handle_vmon","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-772","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2596.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2017-18257","severity":"low","public_date":"2017-01-22T00:00:00Z","advisories":[],"bugzilla":"1565455","bugzilla_description":"CVE-2017-18257 kernel: Inifinite loop caused by integer overflow in fs/f2fs/data.c:__get_data_block() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18257.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5669","severity":"low","public_date":"2017-01-20T00:00:00Z","advisories":[],"bugzilla":"1427239","bugzilla_description":"CVE-2017-5669 kernel: Shmat allows mmap null page protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5669.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5576","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1416436","bugzilla_description":"CVE-2017-5576 kernel: vc4: Integer overflow in temporary allocation layout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5576.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2017-5577","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1416437","bugzilla_description":"CVE-2017-5577 kernel: vc4: Heap-buffer overflow due to failing checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5577.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-5550","severity":"moderate","public_date":"2017-01-15T00:00:00Z","advisories":[],"bugzilla":"1416116","bugzilla_description":"CVE-2017-5550 kernel: Information leak due to fencepost error in pipe_advance()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5550.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-6001","severity":"moderate","public_date":"2017-01-14T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1422825","bugzilla_description":"CVE-2017-6001 kernel: Race condition between multiple sys_perf_event_open() calls","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6001.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-5547","severity":"low","public_date":"2017-01-13T00:00:00Z","advisories":[],"bugzilla":"1416096","bugzilla_description":"CVE-2017-5547 kernel: DMA buffers on stack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-2583","severity":"moderate","public_date":"2017-01-12T00:00:00Z","advisories":["RHSA-2017:1615","RHSA-2017:1616"],"bugzilla":"1414735","bugzilla_description":"CVE-2017-2583 Kernel: Kvm: vmx/svm potential privilege escalation inside guest","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-0:3.10.0-514.26.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2583.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-5548","severity":"moderate","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1416110","bugzilla_description":"CVE-2017-5548 kernel: Using stack for buffers in ieee802154","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5548.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10088","severity":"moderate","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077","RHSA-2017:0817"],"bugzilla":"1412210","bugzilla_description":"CVE-2016-10088 kernel: Use after free in SCSI generic device interface (CVE-2016-9576 regression)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:2.6.32-696.el6","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10088.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-2584","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1413001","bugzilla_description":"CVE-2017-2584 Kernel: kvm: use after free in complete_emulated_mmio","cvss_score":5.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:C","CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2584.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-5546","severity":"moderate","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1415733","bugzilla_description":"CVE-2017-5546 kernel: SLAB freelist randomization produces duplicate entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5546.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5549","severity":"low","public_date":"2017-01-10T00:00:00Z","advisories":[],"bugzilla":"1416114","bugzilla_description":"CVE-2017-5549 kernel: Incorrect line-state error handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5549.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8106","severity":"moderate","public_date":"2017-01-09T00:00:00Z","advisories":[],"bugzilla":"1386646","bugzilla_description":"CVE-2016-8106 kernel: DoS of Intel Ethernet controllers after a period of IPv6 fragment flood","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8106.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-5551","severity":"moderate","public_date":"2017-01-09T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077","RHSA-2017:0817"],"bugzilla":"1416126","bugzilla_description":"CVE-2017-5551 kernel: S_ISGD is not cleared when setting posix ACLs in tmpfs (CVE-2016-7097 incomplete fix)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:2.6.32-696.el6","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5551.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-0403","severity":"important","public_date":"2017-01-01T00:00:00Z","advisories":[],"bugzilla":"1417833","bugzilla_description":"CVE-2017-0403 kernel: Privilege escalation in Android performance subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0403.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-0404","severity":"important","public_date":"2017-01-01T00:00:00Z","advisories":[],"bugzilla":"1417834","bugzilla_description":"CVE-2017-0404 kernel: Privilege escalation in Android sound subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0404.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9588","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1404924","bugzilla_description":"CVE-2016-9588 Kernel: kvm: nVMX: uncaught software exceptions in L1 guest leads to DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-248","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9588.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2016-10154","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":[],"bugzilla":"1416104","bugzilla_description":"CVE-2016-10154 kernel: smbencrypt() points a scatterlist to the stack causing DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10154.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9919","severity":"important","public_date":"2016-12-08T00:00:00Z","advisories":[],"bugzilla":"1403260","bugzilla_description":"CVE-2016-9919 kernel: Linux panic on fragemented IPv6 traffic (icmp6_send)","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9919.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-8967","severity":"important","public_date":"2016-12-08T00:00:00Z","advisories":[],"bugzilla":"1404284","bugzilla_description":"CVE-2015-8967 kernel: arm64: Strict page permission bypass","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8967.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-8655","severity":"important","public_date":"2016-12-06T00:00:00Z","advisories":["RHSA-2017:0402","RHSA-2017:0386","RHSA-2017:0387"],"bugzilla":"1400019","bugzilla_description":"CVE-2016-8655 kernel: Race condition in packet_set_ring leads to use after free","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-362->CWE-416","affected_packages":["kernel-0:3.10.0-514.10.2.el7","kernel-rt-1:3.10.0-514.rt56.215.el6rt","kernel-rt-0:3.10.0-514.10.2.rt56.435.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8655.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8399","severity":"moderate","public_date":"2016-12-05T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2017:0869","RHSA-2017:0817"],"bugzilla":"1403833","bugzilla_description":"CVE-2016-8399 kernel: net: Out of bounds stack read in memcpy_fromiovec","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.32-573.41.1.el6","kernel-0:2.6.32-696.el6","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9793","severity":"moderate","public_date":"2016-12-02T00:00:00Z","advisories":["RHSA-2017:0931","RHSA-2017:0933","RHSA-2017:0932"],"bugzilla":"1402013","bugzilla_description":"CVE-2016-9793 kernel: Signed overflow for SO_{SND|RCV}BUFFORCE","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":["kernel-rt-1:3.10.0-514.rt56.219.el6rt","kernel-rt-0:3.10.0-514.16.1.rt56.437.el7","kernel-0:3.10.0-514.16.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9793.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2016-10147","severity":"moderate","public_date":"2016-12-02T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1404200","bugzilla_description":"CVE-2016-10147 kernel: Kernel crash by spawning mcrypt(alg) with incompatible algorithm","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10147.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10153","severity":"moderate","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1416101","bugzilla_description":"CVE-2016-10153 kernel: introduce ceph_crypt() for in-place en/decryption","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10153.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9685","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1396941","bugzilla_description":"CVE-2016-9685 kernel: Memory leaks in xfs_attr_list.c error paths","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-772","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9685.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2016-10150","severity":"important","public_date":"2016-11-30T00:00:00Z","advisories":[],"bugzilla":"1414506","bugzilla_description":"CVE-2016-10150 Kernel: Kvm: a use-after-free while creating devices","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10150.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2016-9755","severity":"moderate","public_date":"2016-11-26T00:00:00Z","advisories":[],"bugzilla":"1400904","bugzilla_description":"CVE-2016-9755 kernel: netfilter: Out-of-bounds write due to a signedness issue when defragmenting IPv6 packets","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9755.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-9576","severity":"moderate","public_date":"2016-11-25T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077","RHSA-2017:0817"],"bugzilla":"1403145","bugzilla_description":"CVE-2016-9576 kernel: Use after free in SCSI generic device interface","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:2.6.32-696.el6","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9576.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9777","severity":"important","public_date":"2016-11-23T00:00:00Z","advisories":[],"bugzilla":"1400804","bugzilla_description":"CVE-2016-9777 Kernel: kvm: out of bounds memory access via vcpu_id","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9777.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2016-9756","severity":"low","public_date":"2016-11-22T00:00:00Z","advisories":[],"bugzilla":"1400468","bugzilla_description":"CVE-2016-9756 Kernel: kvm: stack memory information leakage","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9756.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2016-10200","severity":"important","public_date":"2016-11-18T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2437","RHSA-2017:2077","RHSA-2017:2444"],"bugzilla":"1430347","bugzilla_description":"CVE-2016-10200 kernel: l2tp: Race condition in the L2TPv3 IP encapsulation feature","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7","kernel-0:3.10.0-514.28.1.el7","kernel-rt-1:3.10.0-514.rt56.231.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10200.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-12168","severity":"moderate","public_date":"2016-11-18T00:00:00Z","advisories":["RHEA-2017:3163"],"bugzilla":"1492984","bugzilla_description":"CVE-2017-12168 Kernel: kvm: ARM64: assert failure when accessing PMCCNTR register","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-617","affected_packages":["kernel-alt-0:4.11.0-44.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12168.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-8646","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:1308","RHSA-2017:1297","RHSA-2017:1298"],"bugzilla":"1388821","bugzilla_description":"CVE-2016-8646 kernel: Oops in shash_async_export()","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-514.21.1.rt56.438.el7","kernel-rt-1:3.10.0-514.rt56.221.el6rt","kernel-0:3.10.0-514.21.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8646.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8650","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:0931","RHSA-2017:0933","RHSA-2017:0932","RHSA-2018:1854"],"bugzilla":"1395187","bugzilla_description":"CVE-2016-8650 kernel: Null pointer dereference via keyctl","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-1:3.10.0-514.rt56.219.el6rt","kernel-0:2.6.32-754.el6","kernel-rt-0:3.10.0-514.16.1.rt56.437.el7","kernel-0:3.10.0-514.16.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8650.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-10208","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:1308","RHSA-2017:1297","RHSA-2017:1298"],"bugzilla":"1395190","bugzilla_description":"CVE-2016-10208 kernel: EXT4 memory corruption / SLAB out-of-bounds read","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-514.21.1.rt56.438.el7","kernel-rt-1:3.10.0-514.rt56.221.el6rt","kernel-0:3.10.0-514.21.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10208.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-8645","severity":"moderate","public_date":"2016-11-10T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1393904","bugzilla_description":"CVE-2016-8645 kernel: a BUG() statement can be hit in net/ipv4/tcp_input.c","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-617","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8645.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-9279","severity":"moderate","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1396669","bugzilla_description":"CVE-2016-9279 kernel: Use After Free in /dev/fimg2d","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9279.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9278","severity":"moderate","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1396670","bugzilla_description":"CVE-2016-9278 kernel: Kernel Crash on /dev/fimg2d ioctl command","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9278.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-10741","severity":"low","public_date":"2016-11-08T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1671869","bugzilla_description":"CVE-2016-10741 kernel: race condition between direct and memory-mapped I/O in fs/xfs/xfs_aops.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10741.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-8632","severity":"moderate","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1390832","bugzilla_description":"CVE-2016-8632 kernel: TIPC subsystem: tipc_msg_build() doesn't validate MTU, may cause memory corruption.","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8632.json"},{"CVE":"CVE-2016-8633","severity":"important","public_date":"2016-11-06T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2019:1170","RHSA-2019:1190"],"bugzilla":"1391490","bugzilla_description":"CVE-2016-8633 kernel: Buffer overflow in firewire driver via crafted incoming packets","cvss_score":5.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:C","CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8633.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2016-9191","severity":"moderate","public_date":"2016-11-05T00:00:00Z","advisories":[],"bugzilla":"1392439","bugzilla_description":"CVE-2016-9191 kernel: Local DoS via cgroup offline code","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9191.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9644","severity":"important","public_date":"2016-11-03T00:00:00Z","advisories":[],"bugzilla":"1399528","bugzilla_description":"CVE-2016-9644 kernel: Incorrect fix for CVE-2016-9178","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9644.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8630","severity":"important","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2017:0386","RHSA-2017:0387"],"bugzilla":"1393350","bugzilla_description":"CVE-2016-8630 kernel: kvm: x86: NULL pointer dereference during instruction decode","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-514.10.2.el7","kernel-rt-0:3.10.0-514.10.2.rt56.435.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8630.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-9555","severity":"moderate","public_date":"2016-10-25T00:00:00Z","advisories":["RHSA-2017:0091","RHSA-2017:0307","RHSA-2017:0086","RHSA-2017:0113"],"bugzilla":"1397930","bugzilla_description":"CVE-2016-9555 kernel: Slab out-of-bounds access in sctp_sf_ootb()","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-514.6.1.rt56.429.el7","kernel-rt-1:3.10.0-514.rt56.210.el6rt","kernel-0:2.6.32-642.15.1.el6","kernel-0:3.10.0-514.6.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9555.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-5195","severity":"important","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2133","RHSA-2016:2124","RHSA-2016:2132","RHSA-2016:2110","RHSA-2016:2120","RHSA-2016:2098","RHSA-2017:0372","RHSA-2016:2127","RHSA-2016:2105","RHSA-2016:2126","RHSA-2016:2118","RHSA-2016:2107","RHSA-2016:2128","RHSA-2016:2106"],"bugzilla":"1384344","bugzilla_description":"CVE-2016-5195 kernel: mm: privilege escalation via MAP_PRIVATE COW breakage","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-rt-0:3.10.0-327.36.3.rt56.238.el7","kernel-0:2.6.18-238.57.1.el5","kernel-0:3.10.0-229.42.2.el7","kernel-0:2.6.32-431.75.1.el6","kernel-aarch64-0:4.5.0-15.2.1.el7","kernel-0:2.6.18-416.el5","kernel-0:2.6.32-573.35.2.el6","kernel-0:2.6.32-220.68.1.el6","kernel-0:2.6.32-358.75.1.el6","kernel-0:2.6.32-642.6.2.el6","kernel-0:2.6.18-348.32.1.el5","kernel-rt-1:3.10.0-327.rt56.198.el6rt","kernel-0:2.6.32-504.54.1.el6","kernel-0:3.10.0-327.36.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5195.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-7042","severity":"moderate","public_date":"2016-10-13T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077","RHSA-2017:0817"],"bugzilla":"1373966","bugzilla_description":"CVE-2016-7042 kernel: Stack corruption while reading /proc/keys when gcc stack protector is enabled","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-121","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:2.6.32-696.el6","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7042.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8660","severity":"low","public_date":"2016-10-13T00:00:00Z","advisories":[],"bugzilla":"1384851","bugzilla_description":"CVE-2016-8660 kernel: xfs: local DoS due to a page lock order bug in the XFS seek hole/data implementation","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8660.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8666","severity":"important","public_date":"2016-10-13T00:00:00Z","advisories":["RHSA-2017:0004","RHSA-2016:2047","RHSA-2016:2110","RHSA-2017:0372","RHSA-2016:2107"],"bugzilla":"1384991","bugzilla_description":"CVE-2016-8666 kernel: Remotely triggerable recursion in GRE code leading to kernel crash","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-674","affected_packages":["kernel-rt-0:3.10.0-327.36.3.rt56.238.el7","kernel-rt-1:3.10.0-327.rt56.198.el6rt","kernel-0:3.10.0-229.46.1.el7","kernel-aarch64-0:4.5.0-15.2.1.el7","kernel-0:3.10.0-327.36.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8666.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9083","severity":"important","public_date":"2016-10-12T00:00:00Z","advisories":["RHSA-2017:0386","RHSA-2017:0387"],"bugzilla":"1389258","bugzilla_description":"CVE-2016-9083 kernel: State machine confusion bug in vfio driver leading to memory corruption","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-391","affected_packages":["kernel-0:3.10.0-514.10.2.el7","kernel-rt-0:3.10.0-514.10.2.rt56.435.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9083.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-9084","severity":"moderate","public_date":"2016-10-12T00:00:00Z","advisories":["RHSA-2017:0386","RHSA-2017:0387"],"bugzilla":"1389259","bugzilla_description":"CVE-2016-9084 kernel: Integer overflow when using kzalloc in vfio driver","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":["kernel-0:3.10.0-514.10.2.el7","kernel-rt-0:3.10.0-514.10.2.rt56.435.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9084.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-7039","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2016:2047","RHSA-2016:2110","RHSA-2017:0372","RHSA-2016:2107"],"bugzilla":"1375944","bugzilla_description":"CVE-2016-7039 kernel: remotely triggerable unbounded recursion in the vlan gro code leading to a kernel crash","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-674","affected_packages":["kernel-rt-0:3.10.0-327.36.3.rt56.238.el7","kernel-rt-1:3.10.0-327.rt56.198.el6rt","kernel-aarch64-0:4.5.0-15.2.1.el7","kernel-0:3.10.0-327.36.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7039.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15102","severity":"low","public_date":"2016-09-19T00:00:00Z","advisories":[],"bugzilla":"1505905","bugzilla_description":"CVE-2017-15102 kernel: NULL pointer dereference due to race condition in probe function of legousbtower driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15102.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2016-10044","severity":"moderate","public_date":"2016-09-16T00:00:00Z","advisories":[],"bugzilla":"1420236","bugzilla_description":"CVE-2016-10044 kernel: aio_mount function does not properly restrict execute access","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10044.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-7425","severity":"low","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1377330","bugzilla_description":"CVE-2016-7425 kernel: SCSI arcmsr driver: Buffer overflow in arcmsr_iop_message_xfer()","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7425.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-9178","severity":"low","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1391908","bugzilla_description":"CVE-2016-9178 kernel: Information leak in get_user_ex function","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9178.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-10318","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1439768","bugzilla_description":"CVE-2016-10318 kernel: User can assign an encryption policy to a directory owned by a different user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10318.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-8658","severity":"low","public_date":"2016-09-07T00:00:00Z","advisories":[],"bugzilla":"1384403","bugzilla_description":"CVE-2016-8658 kernel: Stack buffer overflow in brcmf_cfg80211_start_ap","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:C","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8658.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2016-5342","severity":"moderate","public_date":"2016-08-30T00:00:00Z","advisories":[],"bugzilla":"1866176","bugzilla_description":"CVE-2016-5342 kernel: Heap-based buffer overflow in wcnss_wlan_write function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5342.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2015-8953","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":[],"bugzilla":"1367814","bugzilla_description":"CVE-2015-8953 kernel: overlayfs: Double dentry reference leak in copy-up failure","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:C","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8953.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2016-5344","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":[],"bugzilla":"1866172","bugzilla_description":"CVE-2016-5344 kernel: multiple integer overflows in the MDSS driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5344.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2015-8952","severity":"low","public_date":"2016-08-22T00:00:00Z","advisories":[],"bugzilla":"1360968","bugzilla_description":"CVE-2015-8952 kernel: mbcache code subject to softlockup DOS in cache management","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8952.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6327","severity":"moderate","public_date":"2016-08-19T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1354525","bugzilla_description":"CVE-2016-6327 kernel: infiniband: Kernel crash by sending ABORT_TASK command","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6327.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6828","severity":"moderate","public_date":"2016-08-15T00:00:00Z","advisories":["RHSA-2017:0091","RHSA-2017:0086","RHSA-2017:0036","RHSA-2017:0113"],"bugzilla":"1367091","bugzilla_description":"CVE-2016-6828 kernel: Use after free in tcp_xmit_retransmit_queue","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-416","affected_packages":["kernel-0:2.6.32-642.13.1.el6","kernel-rt-0:3.10.0-514.6.1.rt56.429.el7","kernel-rt-1:3.10.0-514.rt56.210.el6rt","kernel-0:3.10.0-514.6.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6828.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-2064","severity":"moderate","public_date":"2016-08-09T00:00:00Z","advisories":[],"bugzilla":"1866180","bugzilla_description":"CVE-2016-2064 kernel: DoS in MSM QDSP6 audio driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-400)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2064.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-3841","severity":"important","public_date":"2016-08-08T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2695","RHSA-2016:2584","RHSA-2016:0855"],"bugzilla":"1364971","bugzilla_description":"CVE-2016-3841 kernel: use-after-free via crafted IPV6 sendmsg for raw / tcp / udp / l2tp sockets.","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-667","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7","kernel-0:3.10.0-327.41.3.el7","kernel-0:2.6.32-642.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2016-3857","severity":"important","public_date":"2016-08-05T00:00:00Z","advisories":[],"bugzilla":"1381188","bugzilla_description":"CVE-2016-3857 kernel: privilege escalation in sys_oabi_*() in arm kernel","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-7910","severity":"moderate","public_date":"2016-08-04T00:00:00Z","advisories":["RHSA-2017:1308","RHSA-2017:1297","RHSA-2017:0892","RHSA-2017:1298"],"bugzilla":"1399727","bugzilla_description":"CVE-2016-7910 kernel: Use after free in seq file","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["kernel-0:2.6.32-696.1.1.el6","kernel-rt-0:3.10.0-514.21.1.rt56.438.el7","kernel-rt-1:3.10.0-514.rt56.221.el6rt","kernel-0:3.10.0-514.21.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7910.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6480","severity":"moderate","public_date":"2016-08-01T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2017:0817"],"bugzilla":"1362466","bugzilla_description":"CVE-2016-6480 kernel: scsi: aacraid: double fetch in ioctl_send_fib()","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-362","affected_packages":["kernel-0:2.6.32-696.el6","kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6480.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2017-0605","severity":"low","public_date":"2016-08-01T00:00:00Z","advisories":[],"bugzilla":"1450028","bugzilla_description":"CVE-2017-0605 kernel: Stack corruption due to string copy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0605.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-6516","severity":"important","public_date":"2016-07-31T00:00:00Z","advisories":[],"bugzilla":"1362457","bugzilla_description":"CVE-2016-6516 kernel: vfs: ioctl: double fetch leading to heap overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6516.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2016-6492","severity":"important","public_date":"2016-07-30T00:00:00Z","advisories":[],"bugzilla":"1363702","bugzilla_description":"CVE-2016-6492 kernel: privilege escalation flaw in mediatek driver","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2016-5412","severity":"moderate","public_date":"2016-07-28T00:00:00Z","advisories":["RHSA-2016:2574"],"bugzilla":"1349916","bugzilla_description":"CVE-2016-5412 Kernel: powerpc: kvm: Infinite loop via H_CEDE hypercall when running under hypervisor-mode","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-835","affected_packages":["kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5412.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.4"},{"CVE":"CVE-2016-9313","severity":"moderate","public_date":"2016-07-22T00:00:00Z","advisories":[],"bugzilla":"1399519","bugzilla_description":"CVE-2016-9313 kernel: security/keys/big_key.c mishandles unsuccessful crypto registration","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-3044","severity":"important","public_date":"2016-07-22T00:00:00Z","advisories":["RHSA-2016:1033","RHSA-2016:2574"],"bugzilla":"1400495","bugzilla_description":"CVE-2016-3044 kernel: Infinite loop vulnerability in KVM","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-835","affected_packages":["kernel-0:3.10.0-514.el7","kernel-0:3.10.0-327.18.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3044.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.4"},{"CVE":"CVE-2016-5400","severity":"low","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358184","bugzilla_description":"CVE-2016-5400 kernel: memory leak in airspy usb driver","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5400.json","cvss3_scoring_vector":"AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2016-6213","severity":"low","public_date":"2016-07-13T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1356471","bugzilla_description":"CVE-2016-6213 kernel: Overflowing kernel mount table using shared bind mount","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-770","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6213.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-5696","severity":"important","public_date":"2016-07-12T00:00:00Z","advisories":["RHSA-2016:1815","RHSA-2016:1939","RHSA-2016:1657","RHSA-2016:1814","RHSA-2016:1664","RHSA-2016:1631","RHSA-2016:1632","RHSA-2016:1633"],"bugzilla":"1354708","bugzilla_description":"CVE-2016-5696 kernel: challenge ACK counter information disclosure.","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-203","affected_packages":["kernel-0:2.6.32-642.4.2.el6","kernel-0:3.10.0-229.40.1.el7","kernel-rt-1:3.10.0-327.rt56.195.el6rt","kernel-0:2.6.32-573.34.1.el6","kernel-0:3.10.0-327.28.3.el7","kernel-0:2.6.32-431.73.2.el6","kernel-0:2.6.32-504.52.1.el6","kernel-rt-0:3.10.0-327.28.3.rt56.235.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5696.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-6197","severity":"moderate","public_date":"2016-07-11T00:00:00Z","advisories":["RHSA-2016:1847","RHSA-2016:1875"],"bugzilla":"1355650","bugzilla_description":"CVE-2016-6197 kernel: overlayfs: missing upper dentry verification before unlink and rename","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-362","affected_packages":["kernel-0:3.10.0-327.36.1.el7","kernel-rt-0:3.10.0-327.36.1.rt56.237.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6197.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6198","severity":"moderate","public_date":"2016-07-11T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2016:1847","RHSA-2016:1875"],"bugzilla":"1355654","bugzilla_description":"CVE-2016-6198 kernel: vfs: missing detection of hardlinks in vfs_rename() on overlayfs","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-362","affected_packages":["kernel-0:3.10.0-327.36.1.el7","kernel-rt-0:3.10.0-327.36.1.rt56.237.el7","kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6187","severity":"important","public_date":"2016-07-08T00:00:00Z","advisories":[],"bugzilla":"1354383","bugzilla_description":"CVE-2016-6187 kernel: apparmor: Potential privilege escalation via oops in apparmor_setprocattr()","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6187.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2014-9410","severity":"moderate","public_date":"2016-07-08T00:00:00Z","advisories":[],"bugzilla":"1866191","bugzilla_description":"CVE-2014-9410 kernel: DoS in drivers/media/video/msm/vfe/msm_vfe31.c via crafted ioctl call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9410.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-6162","severity":null,"public_date":"2016-07-05T00:00:00Z","advisories":[],"bugzilla":"1353538","bugzilla_description":"CVE-2016-6162 kernel: Kernel panic triggered at BUG_ON in net/core/skbuff.c","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6162.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6156","severity":"moderate","public_date":"2016-07-04T00:00:00Z","advisories":[],"bugzilla":"1353490","bugzilla_description":"CVE-2016-6156 kernel: Race condition vulnerability in Chrome driver","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6156.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-6136","severity":"moderate","public_date":"2016-07-04T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2017:0307"],"bugzilla":"1353533","bugzilla_description":"CVE-2016-6136 kernel: Race condition vulnerability in execve argv arguments","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:2.6.32-642.15.1.el6","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6136.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-7911","severity":"moderate","public_date":"2016-07-01T00:00:00Z","advisories":[],"bugzilla":"1399722","bugzilla_description":"CVE-2016-7911 kernel: Use after free in sys_ioprio_get()","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7911.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-5829","severity":"moderate","public_date":"2016-06-25T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2016:2006"],"bugzilla":"1350509","bugzilla_description":"CVE-2016-5829 kernel: Heap buffer overflow in hiddev driver","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["kernel-0:2.6.32-642.6.1.el6","kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5829.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-4997","severity":"important","public_date":"2016-06-24T00:00:00Z","advisories":["RHSA-2016:1883","RHSA-2016:1847","RHSA-2016:1875"],"bugzilla":"1349722","bugzilla_description":"CVE-2016-4997 kernel: compat IPT_SO_SET_REPLACE setsockopt","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":["kernel-rt-1:3.10.0-327.rt56.197.el6rt","kernel-0:3.10.0-327.36.1.el7","kernel-rt-0:3.10.0-327.36.1.rt56.237.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4997.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2016-4998","severity":"moderate","public_date":"2016-06-24T00:00:00Z","advisories":["RHSA-2016:1883","RHSA-2016:1847","RHSA-2017:0036","RHSA-2016:1875"],"bugzilla":"1349886","bugzilla_description":"CVE-2016-4998 kernel: out of bounds reads when processing IPT_SO_SET_REPLACE setsockopt","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:C","CWE":"CWE-122","affected_packages":["kernel-0:2.6.32-642.13.1.el6","kernel-rt-1:3.10.0-327.rt56.197.el6rt","kernel-0:3.10.0-327.36.1.el7","kernel-rt-0:3.10.0-327.36.1.rt56.237.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4998.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2016-5828","severity":"moderate","public_date":"2016-06-24T00:00:00Z","advisories":["RHSA-2016:2574"],"bugzilla":"1349917","bugzilla_description":"CVE-2016-5828 Kernel: powerpc: tm: crash via exec system call on PPC","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5828.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-1237","severity":"important","public_date":"2016-06-24T00:00:00Z","advisories":[],"bugzilla":"1350845","bugzilla_description":"CVE-2016-1237 kernel: Missing check for permissions when setting ACL","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1237.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-4470","severity":"important","public_date":"2016-06-15T00:00:00Z","advisories":["RHSA-2016:2133","RHSA-2016:1541","RHSA-2016:2074","RHSA-2016:2076","RHSA-2016:1657","RHSA-2016:1539","RHSA-2016:2006","RHSA-2016:1532","RHSA-2016:2128"],"bugzilla":"1341716","bugzilla_description":"CVE-2016-4470 kernel: Uninitialized variable in request_key handling causes kernel crash in error handling path","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-253","affected_packages":["kernel-0:2.6.32-573.35.1.el6","kernel-0:2.6.32-358.75.1.el6","kernel-0:2.6.32-642.6.1.el6","kernel-0:3.10.0-229.40.1.el7","kernel-0:2.6.32-431.74.1.el6","kernel-0:3.10.0-327.28.2.el7","kernel-rt-1:3.10.0-327.rt56.194.el6rt","kernel-0:2.6.32-504.54.1.el6","kernel-rt-0:3.10.0-327.28.2.rt56.234.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4470.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-1583","severity":"important","public_date":"2016-06-10T00:00:00Z","advisories":["RHSA-2016:2124","RHSA-2017:2760","RHSA-2016:2766"],"bugzilla":"1344721","bugzilla_description":"CVE-2016-1583 kernel: Stack overflow via ecryptfs and /proc/$pid/environ","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["kernel-0:2.6.32-573.47.1.el6","kernel-0:2.6.18-416.el5","kernel-0:2.6.32-642.11.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1583.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-2061","severity":"moderate","public_date":"2016-06-06T00:00:00Z","advisories":[],"bugzilla":"1866185","bugzilla_description":"CVE-2016-2061 kernel: DoS in MSM V4L2 video driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2061.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-5243","severity":"low","public_date":"2016-06-03T00:00:00Z","advisories":[],"bugzilla":"1343335","bugzilla_description":"CVE-2016-5243 kernel: Information leak in tipc_nl_compat_link_dump","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5243.json"},{"CVE":"CVE-2016-5244","severity":"low","public_date":"2016-06-03T00:00:00Z","advisories":[],"bugzilla":"1343337","bugzilla_description":"CVE-2016-5244 kernel: Information leak in rds_inc_info_copy","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5244.json"},{"CVE":"CVE-2016-2143","severity":"moderate","public_date":"2016-06-01T00:00:00Z","advisories":["RHSA-2016:1539","RHSA-2016:2766"],"bugzilla":"1308908","bugzilla_description":"CVE-2016-2143 kernel: Fork of large process causes memory corruption","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["kernel-0:3.10.0-327.28.2.el7","kernel-0:2.6.32-642.11.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2143.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-7097","severity":"moderate","public_date":"2016-05-26T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077","RHSA-2017:0817"],"bugzilla":"1368938","bugzilla_description":"CVE-2016-7097 kernel: Setting a POSIX ACL via setxattr doesn't clear the setgid bit","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:2.6.32-696.el6","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7097.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2016-4440","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1337806","bugzilla_description":"CVE-2016-4440 Kernel: kvm: vmx: incorrect state update leading to MSR access","cvss_score":5.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:C","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4440.json"},{"CVE":"CVE-2016-3707","severity":"moderate","public_date":"2016-05-17T00:00:00Z","advisories":["RHSA-2016:1341","RHSA-2016:1301"],"bugzilla":"1327484","bugzilla_description":"CVE-2016-3707 kernel-rt: Sending SysRq command via ICMP echo request","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-312","affected_packages":["kernel-rt-0:3.10.0-327.22.2.rt56.230.el7_2","kernel-rt-1:3.10.0-327.rt56.190.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3707.json"},{"CVE":"CVE-2016-3713","severity":"moderate","public_date":"2016-05-16T00:00:00Z","advisories":[],"bugzilla":"1332139","bugzilla_description":"CVE-2016-3713 kernel: kvm: out-of-bounds access in set_var_mtrr_msr","cvss_score":5.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:C","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3713.json"},{"CVE":"CVE-2016-4951","severity":"moderate","public_date":"2016-05-16T00:00:00Z","advisories":[],"bugzilla":"1338625","bugzilla_description":"CVE-2016-4951 kernel: Null pointer dereference in tipc_nl_publ_dump","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4951.json"},{"CVE":"CVE-2016-9806","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1401502","bugzilla_description":"CVE-2016-9806 kernel: netlink: double-free in netlink_dump","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9806.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2014-8181","severity":"low","public_date":"2016-05-13T00:00:00Z","advisories":[],"bugzilla":"1335817","bugzilla_description":"CVE-2014-8181 kernel: scsi: do not fill dirty page content in the SG_IO buffer","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8181.json"},{"CVE":"CVE-2016-9754","severity":"important","public_date":"2016-05-13T00:00:00Z","advisories":[],"bugzilla":"1410370","bugzilla_description":"CVE-2016-9754 kernel: Integer overflow in ring_buffer_resize()","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9754.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2016-0758","severity":"important","public_date":"2016-05-12T00:00:00Z","advisories":["RHSA-2016:1033","RHSA-2016:1055","RHSA-2016:1051"],"bugzilla":"1300257","bugzilla_description":"CVE-2016-0758 kernel: tags with indefinite length can corrupt pointers in asn1_find_indefinite_length()","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-120","affected_packages":["kernel-rt-0:3.10.0-327.18.2.rt56.223.el7_2","kernel-rt-1:3.10.0-327.rt56.183.el6rt","kernel-0:3.10.0-327.18.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0758.json"},{"CVE":"CVE-2016-3070","severity":"low","public_date":"2016-05-10T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1308846","bugzilla_description":"CVE-2016-3070 kernel: Null pointer dereference in trace_writeback_dirty_page()","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3070.json"},{"CVE":"CVE-2016-4569","severity":"low","public_date":"2016-05-08T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1334643","bugzilla_description":"CVE-2016-4569 kernel: Information leak in Linux sound module in timer.c","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-665","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4569.json"},{"CVE":"CVE-2016-4580","severity":"low","public_date":"2016-05-08T00:00:00Z","advisories":[],"bugzilla":"1338756","bugzilla_description":"CVE-2016-4580 kernel: Information leak in x25 module","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4580.json"},{"CVE":"CVE-2016-4565","severity":"important","public_date":"2016-05-07T00:00:00Z","advisories":["RHSA-2016:1341","RHSA-2016:1640","RHSA-2016:1277","RHSA-2016:1617","RHSA-2016:1581","RHSA-2016:1657","RHSA-2016:1406","RHSA-2016:1814","RHSA-2016:1301","RHSA-2016:1489"],"bugzilla":"1310570","bugzilla_description":"CVE-2016-4565 kernel: infiniband: Unprivileged process can overwrite kernel memory using rdma_ucm.ko","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["kernel-0:2.6.32-504.51.1.el6","kernel-0:3.10.0-327.22.2.el7","kernel-0:3.10.0-229.40.1.el7","kernel-0:2.6.32-220.67.1.el6","kernel-0:2.6.32-642.3.1.el6","kernel-rt-0:3.10.0-327.22.2.rt56.230.el7_2","kernel-rt-1:3.10.0-327.rt56.190.el6rt","kernel-0:2.6.32-358.72.1.el6","kernel-0:2.6.32-431.73.2.el6","kernel-0:2.6.32-573.32.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4565.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-4568","severity":"low","public_date":"2016-05-07T00:00:00Z","advisories":[],"bugzilla":"1334316","bugzilla_description":"CVE-2016-4568 kernel: videobuf2-v412: Planes array amount not verified in buffer dequeueing","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4568.json"},{"CVE":"CVE-2016-4581","severity":"moderate","public_date":"2016-05-05T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1333712","bugzilla_description":"CVE-2016-4581 kernel: Slave being first propagated copy causes oops in propagate_mnt","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4581.json"},{"CVE":"CVE-2016-4913","severity":"low","public_date":"2016-05-05T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1337528","bugzilla_description":"CVE-2016-4913 kernel: Information leak when handling NM entries containing NUL","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4913.json"},{"CVE":"CVE-2016-4485","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1333309","bugzilla_description":"CVE-2016-4485 kernel: Information leak in llc module","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4485.json"},{"CVE":"CVE-2016-4486","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1333316","bugzilla_description":"CVE-2016-4486 kernel: Information leak in rtnetlink","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4486.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kexec-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kexec-tools_security_api_results.json
new file mode 100644
index 0000000..efea367
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kexec-tools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-5759","severity":"moderate","public_date":"2016-07-22T00:00:00Z","advisories":[],"bugzilla":"1510921","bugzilla_description":"CVE-2016-5759 kexec-tools: mkdumprd script called \"dracut\" in the current working directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5759.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2015-0267","severity":"moderate","public_date":"2015-02-10T00:00:00Z","advisories":["RHSA-2015:0986"],"bugzilla":"1191575","bugzilla_description":"CVE-2015-0267 kexec-tools: insecure use of /tmp/*$$* filenames","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":["kexec-tools-0:2.0.7-19.el7_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0267.json"},{"CVE":"CVE-2011-3588","severity":"moderate","public_date":"2011-10-05T00:00:00Z","advisories":["RHSA-2011:1532","RHSA-2012:0152"],"bugzilla":"716439","bugzilla_description":"CVE-2011-3588 CVE-2011-3589 CVE-2011-3590 kexec-tools: Multiple security flaws by management of kdump core files and ramdisk images","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":["kexec-tools-0:2.0.0-209.el6","kexec-tools-0:1.102pre-154.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3588.json"},{"CVE":"CVE-2011-3589","severity":"moderate","public_date":"2011-10-05T00:00:00Z","advisories":["RHSA-2011:1532","RHSA-2012:0152"],"bugzilla":"716439","bugzilla_description":"CVE-2011-3588 CVE-2011-3589 CVE-2011-3590 kexec-tools: Multiple security flaws by management of kdump core files and ramdisk images","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":["kexec-tools-0:2.0.0-209.el6","kexec-tools-0:1.102pre-154.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3589.json"},{"CVE":"CVE-2011-3590","severity":"moderate","public_date":"2011-10-05T00:00:00Z","advisories":["RHSA-2011:1532","RHSA-2012:0152"],"bugzilla":"716439","bugzilla_description":"CVE-2011-3588 CVE-2011-3589 CVE-2011-3590 kexec-tools: Multiple security flaws by management of kdump core files and ramdisk images","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":["kexec-tools-0:2.0.0-209.el6","kexec-tools-0:1.102pre-154.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3590.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keybinder3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keybinder3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keybinder3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keycloak-httpd-client-install_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keycloak-httpd-client-install_security_api_results.json
new file mode 100644
index 0000000..e151a9e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keycloak-httpd-client-install_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-15111","severity":"low","public_date":"2018-01-05T00:00:00Z","advisories":["RHSA-2019:2137"],"bugzilla":"1511623","bugzilla_description":"CVE-2017-15111 keycloak-httpd-client-install: unsafe /tmp log file in --log-file option in keycloak_cli.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["keycloak-httpd-client-install-0:0.8-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15111.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2017-15112","severity":"low","public_date":"2018-01-05T00:00:00Z","advisories":["RHSA-2019:2137"],"bugzilla":"1511626","bugzilla_description":"CVE-2017-15112 keycloak-httpd-client-install: unsafe use of -p/--admin-password on command line","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["keycloak-httpd-client-install-0:0.8-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15112.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keyutils-libs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keyutils-libs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keyutils-libs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keyutils-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keyutils-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keyutils-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keyutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keyutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/keyutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kgpg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kgpg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kgpg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kgreeter-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kgreeter-plugins_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kgreeter-plugins_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-base-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-base-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-base-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-battambang-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-battambang-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-battambang-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-bokor-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-bokor-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-bokor-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-handwritten-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-handwritten-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-handwritten-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-metal-chrieng-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-metal-chrieng-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-metal-chrieng-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-muol-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-muol-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-muol-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-siemreap-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-siemreap-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khmeros-siemreap-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khotkeys-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khotkeys-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khotkeys-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khotkeys_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khotkeys_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/khotkeys_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kiconedit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kiconedit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kiconedit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kinfocenter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kinfocenter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kinfocenter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kio_sysinfo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kio_sysinfo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kio_sysinfo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmag_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmag_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmag_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmenuedit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmenuedit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmenuedit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmix_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmix_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod-kvdo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod-kvdo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod-kvdo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod-oracleasm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod-oracleasm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod-oracleasm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod_security_api_results.json
new file mode 100644
index 0000000..6e026d8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kmod_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-0727","severity":"moderate","public_date":"2010-03-11T00:00:00Z","advisories":["RHSA-2010:0380","RHSA-2010:0291","RHSA-2010:0521","RHSA-2010:0178","RHSA-2010:0331","RHSA-2010:0330"],"bugzilla":"570863","bugzilla_description":"CVE-2010-0727 kernel: bug in GFS/GFS2 locking code leads to dos","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["GFS-kernel-0:2.6.9-85.2.el4_8.10","gfs-kmod-0:0.1.34-12.el5","kernel-0:2.6.18-194.el5","kernel-0:2.6.18-164.17.1.el5","gfs-kmod-0:0.1.34-2.el5_4.3","GFS-0:6.0.2.36-13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0727.json"},{"CVE":"CVE-2009-3995","severity":"moderate","public_date":"2010-02-05T00:00:00Z","advisories":["RHSA-2010:0720"],"bugzilla":"614643","bugzilla_description":"CVE-2009-3995 CVE-2009-3996 libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["mikmod-0:3.1.6-33.el4_8.1","mikmod-0:3.1.6-23.el3","mikmod-0:3.1.6-39.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3995.json"},{"CVE":"CVE-2009-3996","severity":"moderate","public_date":"2010-02-05T00:00:00Z","advisories":["RHSA-2010:0720"],"bugzilla":"614643","bugzilla_description":"CVE-2009-3995 CVE-2009-3996 libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["mikmod-0:3.1.6-33.el4_8.1","mikmod-0:3.1.6-23.el3","mikmod-0:3.1.6-39.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3996.json"},{"CVE":"CVE-2010-2546","severity":"moderate","public_date":"2010-02-05T00:00:00Z","advisories":[],"bugzilla":"614643","bugzilla_description":"CVE-2009-3995 CVE-2009-3996 libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2546.json"},{"CVE":"CVE-2010-2971","severity":"moderate","public_date":"2010-02-05T00:00:00Z","advisories":[],"bugzilla":"614643","bugzilla_description":"CVE-2009-3995 CVE-2009-3996 libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2971.json"},{"CVE":"CVE-2007-6720","severity":"low","public_date":"2008-01-19T00:00:00Z","advisories":["RHSA-2010:0720"],"bugzilla":"479829","bugzilla_description":"CVE-2007-6720 mikmod: crash or abort when loading/playing multiple files with different number of channels","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mikmod-0:3.1.6-33.el4_8.1","mikmod-0:3.1.6-23.el3","mikmod-0:3.1.6-39.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6720.json"},{"CVE":"CVE-2003-0427","severity":"low","public_date":"2003-06-13T00:00:00Z","advisories":["RHSA-2005:506"],"bugzilla":"1617026","bugzilla_description":"CVE-2003-0427 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mikmod-0:3.1.6-22.EL3","mikmod-0:3.1.6-32.EL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0427.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kolourpaint-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kolourpaint-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kolourpaint-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kolourpaint_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kolourpaint_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kolourpaint_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konkretcmpi-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konkretcmpi-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konkretcmpi-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konkretcmpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konkretcmpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konkretcmpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konsole-part_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konsole-part_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konsole-part_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konsole_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konsole_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/konsole_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kpartx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kpartx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kpartx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kpatch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kpatch_security_api_results.json
new file mode 100644
index 0000000..d023be8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kpatch_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-pkinit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-pkinit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-pkinit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-server-ldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-server-ldap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-server-ldap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-workstation_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-workstation_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/krb5-workstation_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kruler_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kruler_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kruler_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksaneplugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksaneplugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksaneplugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksc_security_api_results.json
new file mode 100644
index 0000000..188f07c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-27560","severity":"low","public_date":"2020-10-18T00:00:00Z","advisories":[],"bugzilla":"1890687","bugzilla_description":"CVE-2020-27560 ImageMagick: division by zero in OptimizeLayerFrames function in MagickCore/layer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27560.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2012-1610","severity":"moderate","public_date":"2020-07-31T00:00:00Z","advisories":[],"bugzilla":"1868354","bugzilla_description":"CVE-2012-1610 ImageMagick: integer overflow in the GetEXIFProperty function in magick/property.c could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1610.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12825","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:3654","RHBA-2020:3609","RHSA-2020:4072"],"bugzilla":"1835377","bugzilla_description":"CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["redhat-coreos-43.82.202009181853.0","libcroco-0:0.6.12-4.el8_2.1","libcroco-0:0.6.12-6.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2012-5656","severity":"low","public_date":"2012-12-17T00:00:00Z","advisories":[],"bugzilla":"888249","bugzilla_description":"CVE-2012-5656 inkscape: XXE via SVG rasterization","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5656.json"},{"CVE":"CVE-2012-6076","severity":"low","public_date":"2012-03-04T00:00:00Z","advisories":[],"bugzilla":"891331","bugzilla_description":"CVE-2012-6076 inkscape: Reads .eps files from /tmp instead of current working directory","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6076.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kscreen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kscreen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kscreen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksh_security_api_results.json
new file mode 100644
index 0000000..58d1a5e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksh_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14868","severity":"important","public_date":"2019-12-13T00:00:00Z","advisories":["RHSA-2020:1332","RHSA-2020:1333","RHSA-2020:0431","RHSA-2020:2210","RHSA-2020:0515","RHSA-2020:0559","RHSA-2020:0568"],"bugzilla":"1757324","bugzilla_description":"CVE-2019-14868 ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["ksh-0:20120801-38.el6_10","ksh-0:20120801-140.el7_6","ksh-0:20120801-253.el8_0","ksh-0:20120801-36.el7_4","ksh-0:20120801-138.el7_5","ksh-0:20120801-253.el8_1","ksh-0:20120801-140.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14868.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksnapshot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksnapshot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksnapshot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksshaskpass_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksshaskpass_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksshaskpass_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksysguard-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksysguard-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksysguard-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksysguard_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksysguard_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksysguard_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksysguardd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksysguardd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ksysguardd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ktimer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ktimer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ktimer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kurdit-unikurd-web-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kurdit-unikurd-web-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kurdit-unikurd-web-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwallet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwallet_security_api_results.json
new file mode 100644
index 0000000..b6c238e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwallet_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7252","severity":"low","public_date":"2013-07-24T00:00:00Z","advisories":[],"bugzilla":"1048168","bugzilla_description":"CVE-2013-7252 kwallet: crypto misuse","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7252.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwin-gles-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwin-gles-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwin-gles-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwin-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwin-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwin-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwrite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwrite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/kwrite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/langtable-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/langtable-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/langtable-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/langtable-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/langtable-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/langtable-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/langtable_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/langtable_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/langtable_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lapack_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lapack_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lapack_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lasso-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lasso-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lasso-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lasso_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lasso_security_api_results.json
new file mode 100644
index 0000000..46b3d65
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lasso_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-1783","severity":"moderate","public_date":"2015-03-09T00:00:00Z","advisories":[],"bugzilla":"1199925","bugzilla_description":"CVE-2015-1783 lasso: use of uninitialized value leading to a crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latencytop-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latencytop-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latencytop-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latencytop-tui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latencytop-tui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latencytop-tui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latencytop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latencytop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latencytop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latrace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latrace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/latrace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lcms2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lcms2_security_api_results.json
new file mode 100644
index 0000000..6cf66da
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lcms2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-16435","severity":"moderate","public_date":"2018-08-13T00:00:00Z","advisories":["RHSA-2018:3004"],"bugzilla":"1628969","bugzilla_description":"CVE-2018-16435 lcms2: Integer overflow in AllocateDataSet() in cmscgats.c leading to heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["chromium-browser-0:70.0.3538.67-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16435.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10165","severity":"moderate","public_date":"2016-08-15T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2017:2999","RHSA-2017:3046","RHSA-2016:2658","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1367357","bugzilla_description":"CVE-2016-10165 lcms2: Out-of-bounds read in Type_MLU_Read()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2013-7455","severity":"moderate","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1332518","bugzilla_description":"CVE-2013-7455 lcms2: double free on error recovering","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7455.json"},{"CVE":"CVE-2015-4840","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273338","bugzilla_description":"CVE-2015-4840 OpenJDK: OOB access in CMS code (2D, 8086092)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4840.json"},{"CVE":"CVE-2013-4160","severity":"moderate","public_date":"2013-06-20T00:00:00Z","advisories":[],"bugzilla":"985137","bugzilla_description":"CVE-2013-4160 Little CMS: multiple potential flaws","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4160.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ldapjdk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ldapjdk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ldapjdk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ldns_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ldns_security_api_results.json
new file mode 100644
index 0000000..a1f06f1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ldns_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-1000232","severity":"moderate","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1510993","bugzilla_description":"CVE-2017-1000232 ldns: Memory corruption in ldns_str2rdf_long_str","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000232.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-1000231","severity":"moderate","public_date":"2017-04-25T00:00:00Z","advisories":[],"bugzilla":"1510985","bugzilla_description":"CVE-2017-1000231 ldns: Memory corruption in ldns_rr_new_frm_fp_l","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2014-3209","severity":"low","public_date":"2014-05-03T00:00:00Z","advisories":[],"bugzilla":"1093943","bugzilla_description":"CVE-2014-3209 ldns: ldns-keygen generates keys with world readable permissions","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-732->CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3209.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ledmon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ledmon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ledmon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/less_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/less_security_api_results.json
new file mode 100644
index 0000000..0357c88
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/less_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-9488","severity":"low","public_date":"2015-03-10T00:00:00Z","advisories":[],"bugzilla":"1201309","bugzilla_description":"CVE-2014-9488 less: out of bounds read access in is_utf8_well_formed()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2005-0086","severity":"important","public_date":"2005-01-19T00:00:00Z","advisories":["RHSA-2005:068"],"bugzilla":"1617448","bugzilla_description":"CVE-2005-0086 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["less-0:378-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0086.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lftp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lftp_security_api_results.json
new file mode 100644
index 0000000..4fe961f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lftp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10916","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2020:1045"],"bugzilla":"1610349","bugzilla_description":"CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["lftp-0:4.4.8-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10916.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2010-2251","severity":"moderate","public_date":"2010-05-17T00:00:00Z","advisories":["RHSA-2010:0585"],"bugzilla":"591580","bugzilla_description":"CVE-2010-2251 lftp: multiple HTTP client download filename vulnerability [OCERT 2010-001]","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["lftp-0:3.7.11-4.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2251.json"},{"CVE":"CVE-2007-2348","severity":"low","public_date":"2007-01-09T00:00:00Z","advisories":["RHSA-2009:1278"],"bugzilla":"236238","bugzilla_description":"CVE-2007-2348 lftp mirror --script does not escape names and targets of symbolic links","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["lftp-0:3.7.11-4.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2348.json"},{"CVE":"CVE-2003-0963","severity":"moderate","public_date":"2003-12-13T00:00:00Z","advisories":["RHSA-2003:403","RHSA-2003:404"],"bugzilla":"1617106","bugzilla_description":"CVE-2003-0963 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["lftp-0:2.6.3-5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0963.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libGLEW_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libGLEW_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libGLEW_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libICE-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libICE-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libICE-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libICE_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libICE_security_api_results.json
new file mode 100644
index 0000000..2cc80c6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libICE_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-2626","severity":"low","public_date":"2017-02-28T00:00:00Z","advisories":["RHSA-2017:1865"],"bugzilla":"1424992","bugzilla_description":"CVE-2017-2626 libICE: weak entropy usage in session keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":["libICE-0:1.0.9-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2626.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L","cvss3_score":"5.2"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libIDL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libIDL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libIDL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libSM-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libSM-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libSM-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libSM_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libSM_security_api_results.json
new file mode 100644
index 0000000..16b4ead
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libSM_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-2891","severity":"moderate","public_date":"2010-10-20T00:00:00Z","advisories":[],"bugzilla":"647520","bugzilla_description":"CVE-2010-2891 libsmi: buffer overflow in smiGetNode can lead to arbitrary code execution","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2891.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libX11-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libX11-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libX11-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libX11-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libX11-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libX11-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libX11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libX11_security_api_results.json
new file mode 100644
index 0000000..c7aa5d0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libX11_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14363","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872473","bugzilla_description":"CVE-2020-14363 libX11: integer overflow leads to double free in locale handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14363.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-14344","severity":"moderate","public_date":"2020-07-31T00:00:00Z","advisories":[],"bugzilla":"1862255","bugzilla_description":"CVE-2020-14344 libX11: Heap overflow in the X input method client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14344.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-14598","severity":"moderate","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623238","bugzilla_description":"CVE-2018-14598 libX11: Crash on invalid reply in XListExtensions in ListExt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["libX11-0:1.6.7-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14598.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14600","severity":"moderate","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623242","bugzilla_description":"CVE-2018-14600 libX11: Out of Bounds write in XListExtensions in ListExt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libX11-0:1.6.7-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14600.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-14599","severity":"moderate","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623250","bugzilla_description":"CVE-2018-14599 libX11: Off-by-one error in XListExtensions in ListExt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libX11-0:1.6.7-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14599.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-7942","severity":"low","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381859","bugzilla_description":"CVE-2016-7942 libX11: Insufficient validation of server responses in XGetImage()","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7942.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-7943","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381861","bugzilla_description":"CVE-2016-7943 libX11: Insufficient validation of server responses in FontNames","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7943.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2013-1981","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959040","bugzilla_description":"CVE-2013-1981 libX11: Multiple integer overflows leading to heap-based buffer-overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libX11-0:1.6.0-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1981.json"},{"CVE":"CVE-2013-2004","severity":"low","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959112","bugzilla_description":"CVE-2013-2004 libX11: unbounded recursion leading to stack-overflow","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-835->CWE-121","affected_packages":["libX11-0:1.6.0-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2004.json"},{"CVE":"CVE-2013-1997","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960345","bugzilla_description":"CVE-2013-1997 libX11: Multiple Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libX11-0:1.6.0-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1997.json"},{"CVE":"CVE-2013-7439","severity":"low","public_date":"2013-03-09T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"1209943","bugzilla_description":"CVE-2013-7439 libX11: buffer overflow in MakeBigReq macro","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:N/A:P","CWE":"CWE-119","affected_packages":["libX11-0:1.6.0-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7439.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXScrnSaver-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXScrnSaver-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXScrnSaver-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXScrnSaver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXScrnSaver_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXScrnSaver_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXau-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXau-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXau-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXau_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXau_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXau_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXaw-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXaw-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXaw-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXaw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXaw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXaw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcomposite-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcomposite-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcomposite-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcomposite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcomposite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcomposite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcursor-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcursor-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcursor-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcursor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcursor_security_api_results.json
new file mode 100644
index 0000000..a640c21
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXcursor_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-9262","severity":"low","public_date":"2018-08-01T00:00:00Z","advisories":["RHSA-2018:3059"],"bugzilla":"1611599","bugzilla_description":"CVE-2015-9262 libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libXcursor-0:1.1.15-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9262.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-16612","severity":"moderate","public_date":"2017-11-25T00:00:00Z","advisories":[],"bugzilla":"1518475","bugzilla_description":"CVE-2017-16612 libXcursor: file.c: heap-based buffer overflow when reading/creating images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16612.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2013-2003","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959077","bugzilla_description":"CVE-2013-2003 libXcursor: Integer overflow leading to heap-based buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXcursor-0:1.1.14-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2003.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXdamage-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXdamage-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXdamage-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXdamage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXdamage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXdamage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXdmcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXdmcp_security_api_results.json
new file mode 100644
index 0000000..ba89cc6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXdmcp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-2625","severity":"moderate","public_date":"2017-02-28T00:00:00Z","advisories":["RHSA-2017:1865"],"bugzilla":"1424987","bugzilla_description":"CVE-2017-2625 libXdmcp: weak entropy usage for session keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":["libXdmcp-0:1.1.2-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2625.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXevie_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXevie_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXevie_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXext-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXext-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXext-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXext_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXext_security_api_results.json
new file mode 100644
index 0000000..2fa6a81
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXext_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-1982","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959046","bugzilla_description":"CVE-2013-1982 libXext: Multiple integer overflows leading to heap-based buffer-overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXext-0:1.3.2-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1982.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfixes-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfixes-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfixes-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfixes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfixes_security_api_results.json
new file mode 100644
index 0000000..2a3da25
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfixes_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7944","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381865","bugzilla_description":"CVE-2016-7944 libXfixes: Insufficient validation of server responses results in Integer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7944.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2013-1983","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959048","bugzilla_description":"CVE-2013-1983 libXfixes: Integer overflow leading to heap-based buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXfixes-0:5.0.1-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1983.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfont2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfont2_security_api_results.json
new file mode 100644
index 0000000..f29c7b6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfont2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-16611","severity":"low","public_date":"2017-11-25T00:00:00Z","advisories":[],"bugzilla":"1519082","bugzilla_description":"CVE-2017-16611 libXfont: User can trigger arbitrary file read by X server causing a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16611.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2017-13720","severity":"low","public_date":"2017-10-04T00:00:00Z","advisories":[],"bugzilla":"1500690","bugzilla_description":"CVE-2017-13720 libXfont: Insufficient input validation in fontdir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13720.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-13722","severity":"low","public_date":"2017-10-04T00:00:00Z","advisories":[],"bugzilla":"1500693","bugzilla_description":"CVE-2017-13722 libXfont: Insufficient input validation in pcfread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13722.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfont_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfont_security_api_results.json
new file mode 100644
index 0000000..7ade42a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXfont_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-16611","severity":"low","public_date":"2017-11-25T00:00:00Z","advisories":[],"bugzilla":"1519082","bugzilla_description":"CVE-2017-16611 libXfont: User can trigger arbitrary file read by X server causing a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16611.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2017-13720","severity":"low","public_date":"2017-10-04T00:00:00Z","advisories":[],"bugzilla":"1500690","bugzilla_description":"CVE-2017-13720 libXfont: Insufficient input validation in fontdir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13720.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-13722","severity":"low","public_date":"2017-10-04T00:00:00Z","advisories":[],"bugzilla":"1500693","bugzilla_description":"CVE-2017-13722 libXfont: Insufficient input validation in pcfread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13722.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2015-1802","severity":"important","public_date":"2015-03-17T00:00:00Z","advisories":["RHSA-2015:1708"],"bugzilla":"1203715","bugzilla_description":"CVE-2015-1802 libXfont: missing range check in bdfReadProperties","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-119->CWE-190->CWE-122->CWE-131->CWE-190","affected_packages":["libXfont-0:1.4.5-5.el6_7","libXfont-0:1.4.7-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1802.json"},{"CVE":"CVE-2015-1803","severity":"low","public_date":"2015-03-17T00:00:00Z","advisories":["RHSA-2015:1708"],"bugzilla":"1203718","bugzilla_description":"CVE-2015-1803 libXfont: crash on invalid read in bdfReadCharacters","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-252->CWE-391->CWE-476","affected_packages":["libXfont-0:1.4.5-5.el6_7","libXfont-0:1.4.7-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1803.json"},{"CVE":"CVE-2015-1804","severity":"important","public_date":"2015-03-17T00:00:00Z","advisories":["RHSA-2015:1708"],"bugzilla":"1203719","bugzilla_description":"CVE-2015-1804 libXfont: out-of-bounds memory access in bdfReadCharacters","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-704->CWE-681->CWE-805","affected_packages":["libXfont-0:1.4.5-5.el6_7","libXfont-0:1.4.7-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1804.json"},{"CVE":"CVE-2014-0209","severity":"important","public_date":"2014-05-13T00:00:00Z","advisories":["RHSA-2014:1893","RHSA-2014:1870"],"bugzilla":"1096593","bugzilla_description":"CVE-2014-0209 libXfont: integer overflow of allocations in font metadata file parsing","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":["libXfont-0:1.2.2-1.0.6.el5_11","libXfont-0:1.4.7-2.el7_0","libXfont-0:1.4.5-4.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0209.json"},{"CVE":"CVE-2014-0210","severity":"moderate","public_date":"2014-05-13T00:00:00Z","advisories":["RHSA-2014:1893","RHSA-2014:1870"],"bugzilla":"1096597","bugzilla_description":"CVE-2014-0210 libXfont: unvalidated length fields when parsing xfs protocol replies","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-130->CWE-787","affected_packages":["libXfont-0:1.2.2-1.0.6.el5_11","libXfont-0:1.4.7-2.el7_0","libXfont-0:1.4.5-4.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0210.json"},{"CVE":"CVE-2014-0211","severity":"moderate","public_date":"2014-05-13T00:00:00Z","advisories":["RHSA-2014:1893","RHSA-2014:1870"],"bugzilla":"1096601","bugzilla_description":"CVE-2014-0211 libXfont: integer overflows calculating memory needs for xfs replies","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-130->CWE-787","affected_packages":["libXfont-0:1.2.2-1.0.6.el5_11","libXfont-0:1.4.7-2.el7_0","libXfont-0:1.4.5-4.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0211.json"},{"CVE":"CVE-2013-6462","severity":"important","public_date":"2014-01-07T00:00:00Z","advisories":["RHSA-2014:0018"],"bugzilla":"1048044","bugzilla_description":"CVE-2013-6462 libXfont: stack-based buffer overflow flaw when parsing Glyph Bitmap Distribution Format (BDF) fonts","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["libXfont-0:1.4.5-3.el6_5","libXfont-0:1.2.2-1.0.5.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6462.json"},{"CVE":"CVE-2011-2895","severity":"important","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2011:1154","RHSA-2011:1155","RHSA-2011:1161","RHSA-2011:1834"],"bugzilla":"727624","bugzilla_description":"CVE-2011-2895 BSD compress LZW decoder buffer overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libXfont-0:1.2.2-1.0.3.el5_6","libXfont-0:1.4.1-2.el6_1","freetype-0:2.1.9-19.el4","xorg-x11-0:6.8.2-1.EL.69","libXfont-0:1.2.2-1.0.4.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2895.json"},{"CVE":"CVE-2008-0006","severity":"important","public_date":"2008-01-17T00:00:00Z","advisories":["RHSA-2008:0064","RHSA-2008:0030","RHSA-2008:0029"],"bugzilla":"428044","bugzilla_description":"CVE-2008-0006 Xorg / XFree86 PCF font parser buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["XFree86-0:4.1.0-86.EL","libXfont-0:1.2.2-1.0.3.el5_1","xorg-x11-0:6.8.2-1.EL.33.0.2","XFree86-0:4.3.0-126.EL"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0006.json"},{"CVE":"CVE-2007-5199","severity":"low","public_date":"2007-09-28T00:00:00Z","advisories":[],"bugzilla":"1484018","bugzilla_description":"CVE-2007-5199 libxfont: single byte overflow in catalogue.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2007-1351","severity":"important","public_date":"2007-04-03T00:00:00Z","advisories":["RHSA-2007:0132","RHSA-2007:0125","RHSA-2007:0126","RHSA-2007:0150"],"bugzilla":"235265","bugzilla_description":"CVE-2007-1351 Multiple font integer overflows (CVE-2007-1352)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freetype-0:2.2.1-17.el5","freetype-0:2.1.9-5.el4","XFree86-0:4.3.0-120.EL","xorg-x11-0:6.8.2-1.EL.13.37.7","freetype-0:2.1.4-6.el3","libXfont-0:1.2.2-1.0.2.el5","XFree86-0:4.1.0-82.EL"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1351.json"},{"CVE":"CVE-2007-1352","severity":"important","public_date":"2007-04-03T00:00:00Z","advisories":["RHSA-2007:0132","RHSA-2007:0125","RHSA-2007:0126"],"bugzilla":"235265","bugzilla_description":"CVE-2007-1351 Multiple font integer overflows (CVE-2007-1352)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["XFree86-0:4.3.0-120.EL","xorg-x11-0:6.8.2-1.EL.13.37.7","libXfont-0:1.2.2-1.0.2.el5","XFree86-0:4.1.0-82.EL"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1352.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXft-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXft-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXft-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXft_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXft_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXft_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXi_security_api_results.json
new file mode 100644
index 0000000..9b139a3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7945","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381868","bugzilla_description":"CVE-2016-7945 libXi: Insufficient validation of server responses result in Integer overflows","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7945.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-7946","severity":"low","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381869","bugzilla_description":"CVE-2016-7946 libXi: Insufficient validation of server responses result in various data mishandlings","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7946.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2013-1984","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959049","bugzilla_description":"CVE-2013-1984 libXi: Multiple integer overflows leading to heap-based buffer-overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXi-0:1.7.2-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1984.json"},{"CVE":"CVE-2013-1985","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959056","bugzilla_description":"CVE-2013-1985 libXinerama: Integer overflow leading to heap-based buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXinerama-0:1.1.3-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1985.json"},{"CVE":"CVE-2013-1998","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960346","bugzilla_description":"CVE-2013-1998 libXi: Multiple Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXi-0:1.7.2-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1998.json"},{"CVE":"CVE-2013-1995","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960357","bugzilla_description":"CVE-2013-1995 libXi: Sign extension issues resulting in heap-based buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-252->CWE-122","affected_packages":["libXi-0:1.7.2-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1995.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXinerama-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXinerama-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXinerama-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXinerama_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXinerama_security_api_results.json
new file mode 100644
index 0000000..b356121
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXinerama_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-1985","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959056","bugzilla_description":"CVE-2013-1985 libXinerama: Integer overflow leading to heap-based buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXinerama-0:1.1.3-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1985.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXmu-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXmu-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXmu-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXmu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXmu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXmu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXp_security_api_results.json
new file mode 100644
index 0000000..0d07171
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10164","severity":"moderate","public_date":"2016-12-12T00:00:00Z","advisories":["RHSA-2017:1865"],"bugzilla":"1416410","bugzilla_description":"CVE-2016-10164 libXpm: Out-of-bounds write in XPM extension parsing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libXpm-0:3.5.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2013-2062","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960362","bugzilla_description":"CVE-2013-2062 libXp: Integer overflow leading to heap-based buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXp-0:1.0.2-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2062.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXpm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXpm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXpm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXpm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXpm_security_api_results.json
new file mode 100644
index 0000000..f146d81
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXpm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10164","severity":"moderate","public_date":"2016-12-12T00:00:00Z","advisories":["RHSA-2017:1865"],"bugzilla":"1416410","bugzilla_description":"CVE-2016-10164 libXpm: Out-of-bounds write in XPM extension parsing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libXpm-0:3.5.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"5.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrandr-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrandr-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrandr-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrandr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrandr_security_api_results.json
new file mode 100644
index 0000000..77058ab
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrandr_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7947","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381872","bugzilla_description":"CVE-2016-7947 libXrandr: Insufficient validation of server responses result in Integer overflows","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7947.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-7948","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381873","bugzilla_description":"CVE-2016-7948 libXrandr: Insufficient validation of server responses result in various data mishandlings","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7948.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2013-1986","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959059","bugzilla_description":"CVE-2013-1986 libXrandr: Multiple integer overflows leading to heap-based bufer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXrandr-0:1.4.1-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1986.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrender-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrender-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrender-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrender_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrender_security_api_results.json
new file mode 100644
index 0000000..293f093
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXrender_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7949","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381927","bugzilla_description":"CVE-2016-7949 libXrender: Insufficient validation of server responses results in overflow of previously reserved memory","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7949.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-7950","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381928","bugzilla_description":"CVE-2016-7950 libXrender: Insufficient validation of server responses results out-of-bounds write in XRenderQueryFilters","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7950.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2013-1987","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959061","bugzilla_description":"CVE-2013-1987 libXrender: Multiple integer overflows leading to heap-based bufer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXrender-0:0.9.8-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1987.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXres_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXres_security_api_results.json
new file mode 100644
index 0000000..03f6d22
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXres_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-1988","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959066","bugzilla_description":"CVE-2013-1988 libXRes: Multiple integer overflows leading to heap-based bufer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXres-0:1.0.7-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1988.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXt_security_api_results.json
new file mode 100644
index 0000000..02da272
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7951","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381919","bugzilla_description":"CVE-2016-7951 libXtst: Insufficient validation of server responses result in Integer overflows","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7951.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-7952","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381922","bugzilla_description":"CVE-2016-7952 libXtst: Insufficient validation of server responses result in various data mishandlings","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7952.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2013-2005","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959108","bugzilla_description":"CVE-2013-2005 libXt: Memory corruption due to unchecked use of unchecked function pointers","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-392->CWE-456","affected_packages":["libXt-0:1.1.4-6.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2005.json"},{"CVE":"CVE-2013-2002","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960352","bugzilla_description":"CVE-2013-2002 libXt: Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXt-0:1.1.4-6.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2002.json"},{"CVE":"CVE-2013-2063","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960366","bugzilla_description":"CVE-2013-2063 libXtst:Integer overflow leading to heap-based buffer overlow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXtst-0:1.2.2-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2063.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXtst-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXtst-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXtst-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXtst_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXtst_security_api_results.json
new file mode 100644
index 0000000..0dc4915
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXtst_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7951","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381919","bugzilla_description":"CVE-2016-7951 libXtst: Insufficient validation of server responses result in Integer overflows","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7951.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-7952","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381922","bugzilla_description":"CVE-2016-7952 libXtst: Insufficient validation of server responses result in various data mishandlings","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7952.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2013-2063","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960366","bugzilla_description":"CVE-2013-2063 libXtst:Integer overflow leading to heap-based buffer overlow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXtst-0:1.2.2-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2063.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXv-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXv-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXv-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXvMC_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXvMC_security_api_results.json
new file mode 100644
index 0000000..e8c0113
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXvMC_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7953","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381933","bugzilla_description":"CVE-2016-7953 libXvMC: Insufficient validation of server responses results in buffer underflow","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7953.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2013-1990","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959070","bugzilla_description":"CVE-2013-1990 libXvMC: Multiple integer overflows leading to heap-based buffer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXvMC-0:1.0.8-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1990.json"},{"CVE":"CVE-2013-1999","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960347","bugzilla_description":"CVE-2013-1999 libXvMC: Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXvMC-0:1.0.8-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1999.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXv_security_api_results.json
new file mode 100644
index 0000000..8a9b5fa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXv_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-5407","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381931","bugzilla_description":"CVE-2016-5407 libXv: Insufficient validation of server responses results in out-of bounds accesses","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-7953","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381933","bugzilla_description":"CVE-2016-7953 libXvMC: Insufficient validation of server responses results in buffer underflow","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7953.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2013-1989","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959068","bugzilla_description":"CVE-2013-1989 libXv: Multiple integer overflows leading to heap-based bufer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXv-0:1.0.9-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1989.json"},{"CVE":"CVE-2013-1990","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959070","bugzilla_description":"CVE-2013-1990 libXvMC: Multiple integer overflows leading to heap-based buffer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXvMC-0:1.0.8-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1990.json"},{"CVE":"CVE-2013-1999","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960347","bugzilla_description":"CVE-2013-1999 libXvMC: Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXvMC-0:1.0.8-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1999.json"},{"CVE":"CVE-2013-2066","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960369","bugzilla_description":"CVE-2013-2066 libXv: Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXv-0:1.0.9-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2066.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86dga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86dga_security_api_results.json
new file mode 100644
index 0000000..ca382cb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86dga_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-1991","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959072","bugzilla_description":"CVE-2013-1991 libXxf86dga: Multiple integer overflows leading to heap-based buffer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXxf86dga-0:1.1.4-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1991.json"},{"CVE":"CVE-2013-2000","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960349","bugzilla_description":"CVE-2013-2000 libXxf86dga: Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXxf86dga-0:1.1.4-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2000.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86misc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86misc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86misc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86misc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86misc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86misc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86vm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86vm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86vm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86vm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86vm_security_api_results.json
new file mode 100644
index 0000000..3b8efe7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libXxf86vm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-2001","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960350","bugzilla_description":"CVE-2013-2001 libXxf86vm: Multiple Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXxf86vm-0:1.1.3-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2001.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libabw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libabw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libabw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libacl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libacl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libacl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libacl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libacl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libacl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libaio-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libaio-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libaio-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libaio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libaio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libaio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libao_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libao_security_api_results.json
new file mode 100644
index 0000000..eaa356f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libao_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-11548","severity":"low","public_date":"2017-08-07T00:00:00Z","advisories":[],"bugzilla":"1478946","bugzilla_description":"CVE-2017-11548 libao: Invalid memory allocation in _tokenize_matrix function in audio_out.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11548.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libappindicator-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libappindicator-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libappindicator-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libappstream-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libappstream-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libappstream-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libarchive_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libarchive_security_api_results.json
new file mode 100644
index 0000000..58247c4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libarchive_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9308","severity":"moderate","public_date":"2020-02-02T00:00:00Z","advisories":[],"bugzilla":"1805963","bugzilla_description":"CVE-2020-9308 libarchive: attempts to unpack a RAR5 file with an invalid or corrupted header leads to a SIGSEGV","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9308.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-21674","severity":"moderate","public_date":"2019-12-28T00:00:00Z","advisories":[],"bugzilla":"1888786","bugzilla_description":"CVE-2020-21674 libarchive: heap-based buffer overflow in archive_string_append_from_wcs function in archive_string.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-21674.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20509","severity":"moderate","public_date":"2019-11-26T00:00:00Z","advisories":[],"bugzilla":"1812633","bugzilla_description":"CVE-2019-20509 libarchive: heap-based buffer overflow in archive_read_support_format_lha.c due to insufficient validation of UTF-16 input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20509.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-19221","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1801635","bugzilla_description":"CVE-2019-19221 libarchive: out-of-bounds read in archive_wstring_append_from_mbs in archive_string.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19221.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-18408","severity":"important","public_date":"2019-05-10T00:00:00Z","advisories":["RHSA-2020:0271","RHSA-2020:0203","RHSA-2020:0246","RHBA-2020:0395"],"bugzilla":"1769979","bugzilla_description":"CVE-2019-18408 libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-8.el8_1","libarchive-0:3.1.2-14.el7_7","libarchive-0:3.3.2-4.el8_0","redhat-coreos-42.81.20200203.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18408.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11463","severity":"low","public_date":"2019-03-28T00:00:00Z","advisories":[],"bugzilla":"1702204","bugzilla_description":"CVE-2019-11463 libarchive: memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c causing denial of service via crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11463.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-1000020","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1672888","bugzilla_description":"CVE-2019-1000020 libarchive: Infinite recursion in archive_read_support_format_iso9660.c resulting in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1000020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-1000019","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1672892","bugzilla_description":"CVE-2019-1000019 libarchive: Out of bounds read in archive_read_support_format_7zip.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1000019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000877","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1663887","bugzilla_description":"CVE-2018-1000877 libarchive: Double free in RAR decoder resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000877.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1000878","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1663889","bugzilla_description":"CVE-2018-1000878 libarchive: Use after free in RAR decoder resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000878.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1000879","severity":"low","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1663890","bugzilla_description":"CVE-2018-1000879 libarchive: NULL pointer dereference in ACL parser resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000879.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000880","severity":"low","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1663892","bugzilla_description":"CVE-2018-1000880 libarchive: Improper input validation in WARC parser resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000880.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14503","severity":"low","public_date":"2017-09-16T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1494449","bugzilla_description":"CVE-2017-14503 libarchive: Out-of-bounds read in lha_read_data_none","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14503.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14501","severity":"low","public_date":"2017-09-16T00:00:00Z","advisories":[],"bugzilla":"1494460","bugzilla_description":"CVE-2017-14501 libarchive: Out-of-bounds read in parse_file_info","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14501.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14502","severity":"moderate","public_date":"2017-09-16T00:00:00Z","advisories":[],"bugzilla":"1494463","bugzilla_description":"CVE-2017-14502 libarchive: Off-by-one error in the read_header function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14502.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-14166","severity":"low","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1489852","bugzilla_description":"CVE-2017-14166 libarchive: Heap-based buffer over-read in the atol8 function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14166.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5601","severity":"moderate","public_date":"2017-01-27T00:00:00Z","advisories":[],"bugzilla":"1417912","bugzilla_description":"CVE-2017-5601 libarchive: Out of bounds read in lha_read_file_header_1() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5601.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-10209","severity":"low","public_date":"2016-12-12T00:00:00Z","advisories":[],"bugzilla":"1439703","bugzilla_description":"CVE-2016-10209 libarchive: NULL pointer dereference in archive_wstring_append_from_mbs function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10349","severity":"low","public_date":"2016-12-06T00:00:00Z","advisories":[],"bugzilla":"1449528","bugzilla_description":"CVE-2016-10349 libarchive: Heap-based buffer over-read in the archive_le32dec function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10349.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10350","severity":"low","public_date":"2016-12-06T00:00:00Z","advisories":[],"bugzilla":"1449530","bugzilla_description":"CVE-2016-10350 libarchive: Heap-based buffer over-read in the archive_read_format_cab_read_header function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10350.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8688","severity":"low","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1377923","bugzilla_description":"CVE-2016-8688 libarchive: heap based buffer overflow in detect_form (archive_read_support_format_mtree.c)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-131->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8688.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-8689","severity":"low","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1377925","bugzilla_description":"CVE-2016-8689 libarchive: heap based buffer overflow in read_header (archive_read_support_format_7zip.c)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-228->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8689.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-8687","severity":"low","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1377926","bugzilla_description":"CVE-2016-8687 libarchive: stack based buffer overflow in bsdtar_expand_char (util.c)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-131->CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8687.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5418","severity":"important","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844","RHSA-2016:1852","RHSA-2016:1853"],"bugzilla":"1362601","bugzilla_description":"CVE-2016-5418 libarchive: Archive Entry with type 1 (hardlink), but has a non-zero data size file overwrite","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-20->CWE-22","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2","atomic-openshift-0:3.1.1.7-1.git.0.65f396b.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5418.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5844","severity":"low","public_date":"2016-06-24T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844"],"bugzilla":"1350280","bugzilla_description":"CVE-2016-5844 libarchive: undefined behaviour (integer overflow) in iso parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5844.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-4300","severity":"moderate","public_date":"2016-06-19T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348439","bugzilla_description":"CVE-2016-4300 libarchive: Heap buffer overflow vulnerability in the 7zip read_SubStreamsInfo","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4300.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L","cvss3_score":"8.4"},{"CVE":"CVE-2016-4301","severity":"low","public_date":"2016-06-19T00:00:00Z","advisories":[],"bugzilla":"1348441","bugzilla_description":"CVE-2016-4301 libarchive: Stack buffer overflow in the mtree parse_device","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4301.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"7.7"},{"CVE":"CVE-2016-4302","severity":"moderate","public_date":"2016-06-19T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348444","bugzilla_description":"CVE-2016-4302 libarchive: Heap buffer overflow in the Rar decompression functionality","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"7.7"},{"CVE":"CVE-2015-8916","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348412","bugzilla_description":"CVE-2015-8916 libarchive: NULL pointer access in RAR parser through bsdtar","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-228->CWE-476","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8916.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8917","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348413","bugzilla_description":"CVE-2015-8917 libarchive: NULL pointer access in CAB parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-228->CWE-476","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8917.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8919","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348414","bugzilla_description":"CVE-2015-8919 libarchive: Heap out of bounds read in LHA/LZH parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8919.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8920","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844"],"bugzilla":"1348416","bugzilla_description":"CVE-2015-8920 libarchive: Stack out of bounds read in ar parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8920.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-8922","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348419","bugzilla_description":"CVE-2015-8922 libarchive: NULL pointer access in 7z parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-228->CWE-476","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2015-8924","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348421","bugzilla_description":"CVE-2015-8924 libarchive: Heap out of bounds read in TAR parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8924.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2015-8925","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348423","bugzilla_description":"CVE-2015-8925 libarchive: Unclear invalid memory read in mtree parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-8926","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348424","bugzilla_description":"CVE-2015-8926 libarchive: NULL pointer access in RAR parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8926.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8927","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":[],"bugzilla":"1348426","bugzilla_description":"CVE-2015-8927 libarchive: Heap out of bounds read when reading password for malformed ZIP","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-228->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8927.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"3.0"},{"CVE":"CVE-2015-8928","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348429","bugzilla_description":"CVE-2015-8928 libarchive: Heap out of bounds read in mtree parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-8918","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":[],"bugzilla":"1348770","bugzilla_description":"CVE-2015-8918 libarchive: Overlapping memcpy in CAB parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-228","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8918.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8929","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":[],"bugzilla":"1348771","bugzilla_description":"CVE-2015-8929 libarchive: Memory leak in TAR parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8929.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2015-8921","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844"],"bugzilla":"1348772","bugzilla_description":"CVE-2015-8921 libarchive: Global out of bounds read in mtree parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8921.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-8923","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348773","bugzilla_description":"CVE-2015-8923 libarchive: Unclear crashes in ZIP parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-190->CWE-125","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2015-8931","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348779","bugzilla_description":"CVE-2015-8931 libarchive: Undefined behavior (signed integer overflow) in mtree parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8931.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8932","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844"],"bugzilla":"1348780","bugzilla_description":"CVE-2015-8932 libarchive: Undefined behavior / invalid shiftleft in TAR parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-682","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8932.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2015-8933","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":[],"bugzilla":"1348781","bugzilla_description":"CVE-2015-8933 libarchive: Undefined behavior / signed integer overflow in TAR parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2015-8930","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1349204","bugzilla_description":"CVE-2015-8930 libarchive: Endless loop in ISO parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-228->CWE-835","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8930.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8934","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1349229","bugzilla_description":"CVE-2015-8934 libarchive: out of bounds heap read in RAR parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8934.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-6250","severity":"low","public_date":"2016-05-29T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1347085","bugzilla_description":"CVE-2016-6250 libarchive: Buffer overflow when writing large iso9660 containers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6250.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L","cvss3_score":"7.9"},{"CVE":"CVE-2016-4809","severity":"low","public_date":"2016-05-12T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844"],"bugzilla":"1347084","bugzilla_description":"CVE-2016-4809 libarchive: Memory allocate error with symbolic links in cpio archives","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4809.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-1541","severity":"moderate","public_date":"2016-05-02T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1334211","bugzilla_description":"CVE-2016-1541 libarchive: zip_read_mac_metadata() heap-based buffer overflow","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1541.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L","cvss3_score":"8.4"},{"CVE":"CVE-2016-7166","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844"],"bugzilla":"1347086","bugzilla_description":"CVE-2016-7166 libarchive: Denial of service using a crafted gzip file","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7166.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2015-8915","severity":"low","public_date":"2015-04-28T00:00:00Z","advisories":[],"bugzilla":"1216891","bugzilla_description":"CVE-2015-8915 libarchive: crash via malformed cpio archive","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8915.json"},{"CVE":"CVE-2015-2304","severity":"low","public_date":"2015-01-16T00:00:00Z","advisories":[],"bugzilla":"1192482","bugzilla_description":"CVE-2015-2304 libarchive: directory traversal in bsdcpio","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2304.json"},{"CVE":"CVE-2013-0211","severity":"low","public_date":"2013-03-25T00:00:00Z","advisories":[],"bugzilla":"902998","bugzilla_description":"CVE-2013-0211 libarchive: read buffer overflow on 64-bit systems","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0211.json"},{"CVE":"CVE-2011-2895","severity":"important","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2011:1154","RHSA-2011:1155","RHSA-2011:1161","RHSA-2011:1834"],"bugzilla":"727624","bugzilla_description":"CVE-2011-2895 BSD compress LZW decoder buffer overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libXfont-0:1.2.2-1.0.3.el5_6","libXfont-0:1.4.1-2.el6_1","freetype-0:2.1.9-19.el4","xorg-x11-0:6.8.2-1.EL.69","libXfont-0:1.2.2-1.0.4.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2895.json"},{"CVE":"CVE-2010-4666","severity":"moderate","public_date":"2010-12-30T00:00:00Z","advisories":[],"bugzilla":"705849","bugzilla_description":"CVE-2010-4666 CVE-2011-1777 CVE-2011-1778 CVE-2011-1779 Libarchive multiple security issues","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4666.json"},{"CVE":"CVE-2011-1777","severity":"moderate","public_date":"2010-12-30T00:00:00Z","advisories":["RHSA-2011:1507"],"bugzilla":"705849","bugzilla_description":"CVE-2010-4666 CVE-2011-1777 CVE-2011-1778 CVE-2011-1779 Libarchive multiple security issues","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libarchive-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1777.json"},{"CVE":"CVE-2011-1778","severity":"moderate","public_date":"2010-12-30T00:00:00Z","advisories":["RHSA-2011:1507"],"bugzilla":"705849","bugzilla_description":"CVE-2010-4666 CVE-2011-1777 CVE-2011-1778 CVE-2011-1779 Libarchive multiple security issues","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libarchive-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1778.json"},{"CVE":"CVE-2011-1779","severity":"moderate","public_date":"2010-12-30T00:00:00Z","advisories":[],"bugzilla":"705849","bugzilla_description":"CVE-2010-4666 CVE-2011-1777 CVE-2011-1778 CVE-2011-1779 Libarchive multiple security issues","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1779.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libart_lgpl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libart_lgpl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libart_lgpl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libassuan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libassuan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libassuan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libasyncns_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libasyncns_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libasyncns_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libatasmart_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libatasmart_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libatasmart_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libatomic-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libatomic-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libatomic-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libatomic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libatomic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libatomic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libattr-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libattr-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libattr-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libattr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libattr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libattr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libavc1394_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libavc1394_security_api_results.json
new file mode 100644
index 0000000..6d43d27
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libavc1394_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9335","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":[],"bugzilla":"1824428","bugzilla_description":"CVE-2019-9335 libavc: information disclosure due to uninitialized data (A-112328051)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9335.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9336","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":[],"bugzilla":"1824433","bugzilla_description":"CVE-2019-9336 libavc: information disclosure due to uninitialized data (A-112326322)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9336.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9337","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":[],"bugzilla":"1824439","bugzilla_description":"CVE-2019-9337 libavc: information disclosure due to uninitialized data (A-112204376)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9337.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9338","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":[],"bugzilla":"1824442","bugzilla_description":"CVE-2019-9338 libavc: information disclosure due to uninitialized data (A-111762686)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9338.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbase_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbase_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbase_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbasicobjects_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbasicobjects_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbasicobjects_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblkid-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblkid-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblkid-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblkid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblkid_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblkid_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-crypto_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-crypto_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-crypto_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-fs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-fs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-fs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-loop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-loop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-loop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-lvm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-lvm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-lvm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-mdraid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-mdraid_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-mdraid_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-nvdimm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-nvdimm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-nvdimm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-part_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-part_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-part_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-swap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-swap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-swap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libblockdev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbluedevil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbluedevil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbluedevil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbluray_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbluray_security_api_results.json
new file mode 100644
index 0000000..2d91084
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbluray_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-7810","severity":"moderate","public_date":"2015-02-06T00:00:00Z","advisories":[],"bugzilla":"959433","bugzilla_description":"CVE-2015-7810 libbluray (MountManager): TOCTOU race when expanding JAR files","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7810.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbonobo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbonobo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbonobo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbonoboui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbonoboui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbonoboui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libburn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libburn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libburn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbytesize_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbytesize_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libbytesize_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcacard-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcacard-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcacard-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcacard_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcacard_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcacard_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra-gtk2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra-gtk2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra-gtk2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcanberra_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap-ng-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap-ng-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap-ng-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap-ng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap-ng_security_api_results.json
new file mode 100644
index 0000000..85c9e75
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap-ng_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-3215","severity":"important","public_date":"2012-12-08T00:00:00Z","advisories":["RHSA-2015:0864","RHBA-2015:2161"],"bugzilla":"1095855","bugzilla_description":"CVE-2014-3215 policycoreutils: local privilege escalation via seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-270","affected_packages":["kernel-0:2.6.32-504.16.2.el6","libcap-ng-0:0.7.5-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3215.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap_security_api_results.json
new file mode 100644
index 0000000..94db922
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcap_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-3215","severity":"important","public_date":"2012-12-08T00:00:00Z","advisories":["RHSA-2015:0864","RHBA-2015:2161"],"bugzilla":"1095855","bugzilla_description":"CVE-2014-3215 policycoreutils: local privilege escalation via seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-270","affected_packages":["kernel-0:2.6.32-504.16.2.el6","libcap-ng-0:0.7.5-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3215.json"},{"CVE":"CVE-2011-4099","severity":"low","public_date":"2011-07-16T00:00:00Z","advisories":["RHSA-2011:1694"],"bugzilla":"722694","bugzilla_description":"CVE-2011-4099 capsh: does not chdir after chroot","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["libcap-0:2.16-5.5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4099.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcdio-paranoia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcdio-paranoia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcdio-paranoia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcdio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcdio_security_api_results.json
new file mode 100644
index 0000000..45ac21b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcdio_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-18198","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:3246"],"bugzilla":"1549644","bugzilla_description":"CVE-2017-18198 libcdio: Heap-based buffer over-read in print_iso9660_recurse function in iso-info.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libcdio-0:0.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2017-18199","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:3246"],"bugzilla":"1549701","bugzilla_description":"CVE-2017-18199 libcdio: NULL pointer dereference in realloc_symlink in rock.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libcdio-0:0.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2017-18201","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:3246"],"bugzilla":"1549707","bugzilla_description":"CVE-2017-18201 libcdio: Double free in get_cdtext_generic() in lib/driver/_cdio_generic.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libcdio-0:0.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18201.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcdr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcdr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcdr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcgroup-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcgroup-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcgroup-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcgroup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcgroup_security_api_results.json
new file mode 100644
index 0000000..db5555f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcgroup_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-14348","severity":"moderate","public_date":"2018-07-25T00:00:00Z","advisories":["RHSA-2019:2047"],"bugzilla":"1611119","bugzilla_description":"CVE-2018-14348 libcgroup: cgrulesengd creates log files with insecure permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libcgroup-0:0.41-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14348.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2011-1006","severity":"important","public_date":"2011-03-03T00:00:00Z","advisories":["RHSA-2011:0320"],"bugzilla":"678107","bugzilla_description":"CVE-2011-1006 libcgroup: Heap-based buffer overflow by converting list of controllers for given task into an array of strings","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["libcgroup-0:0.36.1-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1006.json"},{"CVE":"CVE-2011-1022","severity":"low","public_date":"2011-02-18T00:00:00Z","advisories":["RHSA-2011:0320"],"bugzilla":"680409","bugzilla_description":"CVE-2011-1022 libcgroup: Uncheck origin of NETLINK messages","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["libcgroup-0:0.36.1-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1022.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libchamplain-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libchamplain-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libchamplain-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libchamplain_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libchamplain_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libchamplain_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libchewing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libchewing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libchewing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcmis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcmis_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcmis_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcmpiCppImpl0_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcmpiCppImpl0_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcmpiCppImpl0_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcmpiutil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcmpiutil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcmpiutil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcollection_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcollection_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcollection_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcom_err-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcom_err-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcom_err-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcom_err_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcom_err_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcom_err_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libconfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libconfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcroco_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcroco_security_api_results.json
new file mode 100644
index 0000000..12da465
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcroco_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12825","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:3654","RHBA-2020:3609","RHSA-2020:4072"],"bugzilla":"1835377","bugzilla_description":"CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["redhat-coreos-43.82.202009181853.0","libcroco-0:0.6.12-4.el8_2.1","libcroco-0:0.6.12-6.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-8834","severity":"low","public_date":"2017-06-07T00:00:00Z","advisories":[],"bugzilla":"1463306","bugzilla_description":"CVE-2017-8834 libcroco: Memory allocation failure in the cr_tknzr_parse_comment function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8834.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8871","severity":"low","public_date":"2017-06-07T00:00:00Z","advisories":[],"bugzilla":"1463307","bugzilla_description":"CVE-2017-8871 libcroco: Infinite loop in the cr_parser_parse_selector_core function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8871.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7960","severity":"low","public_date":"2017-04-16T00:00:00Z","advisories":[],"bugzilla":"1445314","bugzilla_description":"CVE-2017-7960 libcroco: Out-of-bounds read due to missing index check in cr-input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7960.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7961","severity":"low","public_date":"2017-04-16T00:00:00Z","advisories":[],"bugzilla":"1450068","bugzilla_description":"CVE-2017-7961 libcroco: Undefined behavior issue in cr_tknzr_parse_rgb function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7961.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcryptui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcryptui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcryptui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcurl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcurl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcurl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcurl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcurl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcurl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcxl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcxl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libcxl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdaemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdaemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdaemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb-cxx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb-cxx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb-cxx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb_security_api_results.json
new file mode 100644
index 0000000..bf79779
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-2708","severity":"low","public_date":"2019-04-23T00:00:00Z","advisories":[],"bugzilla":"1853242","bugzilla_description":"CVE-2019-2708 libdb: data store execution leads to partial DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2708.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10140","severity":"moderate","public_date":"2017-06-11T00:00:00Z","advisories":["RHSA-2019:0366"],"bugzilla":"1464032","bugzilla_description":"CVE-2017-10140 libdb: Reads DB_CONFIG from the current working directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10140.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi-dbd-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi-dbd-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi-dbd-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi-dbd-pgsql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi-dbd-pgsql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi-dbd-pgsql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi-drivers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi-drivers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi-drivers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbusmenu-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbusmenu-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbusmenu-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbusmenu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbusmenu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdbusmenu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdfp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdfp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdfp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdfp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdfp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdfp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdhash_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdhash_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdhash_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdmapsharing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdmapsharing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdmapsharing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdmx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdmx_security_api_results.json
new file mode 100644
index 0000000..caf75d1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdmx_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-1992","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959074","bugzilla_description":"CVE-2013-1992 libdmx: Multiple integer overflows leading to heap-based bufer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libdmx-0:1.1.3-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1992.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdnet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdnet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdnet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdrm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdrm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdrm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdrm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdrm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdrm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdvdnav_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdvdnav_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdvdnav_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdvdread_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdvdread_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdvdread_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdwarf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdwarf_security_api_results.json
new file mode 100644
index 0000000..d287da4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libdwarf_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14249","severity":"low","public_date":"2019-07-24T00:00:00Z","advisories":[],"bugzilla":"1732719","bugzilla_description":"CVE-2019-14249 libdwarf: division by zero in dwarf_elf_load_headers.c leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14249.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9998","severity":"low","public_date":"2017-06-28T00:00:00Z","advisories":[],"bugzilla":"1470186","bugzilla_description":"CVE-2017-9998 libdwarf: Segmentation fault in the _dwarf_decode_s_leb128_chk function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9998.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9052","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1452587","bugzilla_description":"CVE-2017-9052 libdwarf: heap-based buffer over-read in dwarf_formsdata()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9052.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9053","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1452590","bugzilla_description":"CVE-2017-9053 libdwarf: heap-based buffer over-read in _dwarf_read_loc_expr_op()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9054","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1452591","bugzilla_description":"CVE-2017-9054 libdwarf: heap-based buffer over-read in _dwarf_decode_s_leb128_chk()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9054.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9055","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1452592","bugzilla_description":"CVE-2017-9055 libdwarf: heap-based buffer over-read in dwarf_formsdata()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9055.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9558","severity":"low","public_date":"2016-11-19T00:00:00Z","advisories":[],"bugzilla":"1398176","bugzilla_description":"CVE-2016-9558 libdwarf: Negation overflow in dwarf_leb.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9558.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9480","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1399990","bugzilla_description":"CVE-2016-9480 libdwarf: Heap buffer overflow in dwarf_util.c","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9480.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-9275","severity":"low","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1394802","bugzilla_description":"CVE-2016-9275 libdwarf: Out of bound heap read in _dwarf_skim_forms","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9275.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9276","severity":"low","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1394804","bugzilla_description":"CVE-2016-9276 libdwarf: Out-of-bounds heap read in dwarf_get_aranges_list","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9276.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8679","severity":"moderate","public_date":"2016-10-06T00:00:00Z","advisories":[],"bugzilla":"1385689","bugzilla_description":"CVE-2016-8679 libdwarf: Heap based buffer overflow in _dwarf_get_size_of_val","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8679.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-8681","severity":"moderate","public_date":"2016-10-06T00:00:00Z","advisories":[],"bugzilla":"1385690","bugzilla_description":"CVE-2016-8681 libdwarf: Heap based buffer overflow in _dwarf_get_abbrev_for_code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8681.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-8680","severity":"moderate","public_date":"2016-10-04T00:00:00Z","advisories":[],"bugzilla":"1385686","bugzilla_description":"CVE-2016-8680 libdwarf: Out of bounds heap read in _dwarf_get_abbrev_for_code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8680.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-7511","severity":"low","public_date":"2016-09-18T00:00:00Z","advisories":[],"bugzilla":"1379624","bugzilla_description":"CVE-2016-7511 libdwarf: Integer overflow in dwarf_die_deliv.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7510","severity":"low","public_date":"2016-09-17T00:00:00Z","advisories":[],"bugzilla":"1378718","bugzilla_description":"CVE-2016-7510 libdwarf: Out-of-bounds read in read_line_table_program","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7510.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7410","severity":"low","public_date":"2016-09-14T00:00:00Z","advisories":[],"bugzilla":"1376361","bugzilla_description":"CVE-2016-7410 libdwarf: Heap buffer overflow in _dwarf_read_loc_section","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7410.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5027","severity":"low","public_date":"2016-05-24T00:00:00Z","advisories":[],"bugzilla":"1340123","bugzilla_description":"CVE-2016-5027 libdwarf: Null pointer dereference in _dwarf_decode_s_leb128","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5027.json"},{"CVE":"CVE-2016-5028","severity":"low","public_date":"2016-05-23T00:00:00Z","advisories":[],"bugzilla":"1339929","bugzilla_description":"CVE-2016-5028 libdwarf: Null pointer dereference in print_frame_inst_bytes()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5028.json"},{"CVE":"CVE-2016-5029","severity":"low","public_date":"2016-05-22T00:00:00Z","advisories":[],"bugzilla":"1339931","bugzilla_description":"CVE-2016-5029 libdwarf: Null pointer dereference in create_fullest_file_path()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5029.json"},{"CVE":"CVE-2016-5030","severity":"low","public_date":"2016-05-22T00:00:00Z","advisories":[],"bugzilla":"1340079","bugzilla_description":"CVE-2016-5030 libdwarf: Null pointer dereference in _dwarf_calculate_info_section_end_ptr()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5030.json"},{"CVE":"CVE-2016-5031","severity":"low","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1340082","bugzilla_description":"CVE-2016-5031 libdwarf: Out-of-bounds read in print_frame_inst_bytes() function","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5031.json"},{"CVE":"CVE-2016-5032","severity":"low","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1340087","bugzilla_description":"CVE-2016-5032 libdwarf: Out-of-bounds read in dwarf_get_xu_hash_entry()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5032.json"},{"CVE":"CVE-2016-5033","severity":"low","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1340094","bugzilla_description":"CVE-2016-5033 libdwarf: Out-of-bounds read in print_explroc_content","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5033.json"},{"CVE":"CVE-2016-5034","severity":"low","public_date":"2016-05-17T00:00:00Z","advisories":[],"bugzilla":"1340099","bugzilla_description":"CVE-2016-5034 libdwarf: Out-of-bounds write in dwarf_elf_access.c","cvss_score":3.2,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5034.json"},{"CVE":"CVE-2016-5035","severity":"low","public_date":"2016-05-12T00:00:00Z","advisories":[],"bugzilla":"1340101","bugzilla_description":"CVE-2016-5035 libdwarf: Out-of-bounds read in _dwarf_read_line_table_header","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5035.json"},{"CVE":"CVE-2016-5036","severity":"low","public_date":"2016-05-12T00:00:00Z","advisories":[],"bugzilla":"1340102","bugzilla_description":"CVE-2016-5036 libdwarf: Out-of-bounds read in dump_block","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5036.json"},{"CVE":"CVE-2016-5038","severity":"low","public_date":"2016-05-12T00:00:00Z","advisories":[],"bugzilla":"1340106","bugzilla_description":"CVE-2016-5038 libdwarf: Out-of-bounds read in dwarf_get_macro_startend_file()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5038.json"},{"CVE":"CVE-2016-5037","severity":"low","public_date":"2016-05-06T00:00:00Z","advisories":[],"bugzilla":"1340103","bugzilla_description":"CVE-2016-5037 libdwarf: Null pointer dereference in _dwarf_load_section","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5037.json"},{"CVE":"CVE-2016-5039","severity":"low","public_date":"2016-05-06T00:00:00Z","advisories":[],"bugzilla":"1340121","bugzilla_description":"CVE-2016-5039 libdwarf: Out-of-bounds read in get_attr_value() function","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5039.json"},{"CVE":"CVE-2016-5040","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1340108","bugzilla_description":"CVE-2016-5040 libdwarf: Null pointer dereference in read_area_length()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5040.json"},{"CVE":"CVE-2016-5041","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1340110","bugzilla_description":"CVE-2016-5041 libdwarf: Null pointer dereference in _dwarf_file_name_is_full_path()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5041.json"},{"CVE":"CVE-2016-5042","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1340111","bugzilla_description":"CVE-2016-5042 libdwarf: Infinite loop in dwarf_get_arranges_list()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5042.json"},{"CVE":"CVE-2016-5043","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1340113","bugzilla_description":"CVE-2016-5043 libdwarf: Out-of-bounds read in dwarf_dealloc()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5043.json"},{"CVE":"CVE-2016-5044","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1340116","bugzilla_description":"CVE-2016-5044 libdwarf: Heap-based buffer overflow in update_entry()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5044.json"},{"CVE":"CVE-2016-2091","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1299964","bugzilla_description":"CVE-2016-2091 libdwarf: Out-of-bounds read in dwarf_frame2.c","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2091.json"},{"CVE":"CVE-2016-2050","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1300330","bugzilla_description":"CVE-2016-2050 libdwarf: Out-of-bounds write in get_abbrev_array_info","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2050.json"},{"CVE":"CVE-2015-8750","severity":"low","public_date":"2015-12-25T00:00:00Z","advisories":[],"bugzilla":"1296986","bugzilla_description":"CVE-2015-8750 libdwarf: NULL pointer dereference in dwarf_utils.c","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8750.json"},{"CVE":"CVE-2015-8538","severity":"low","public_date":"2015-12-07T00:00:00Z","advisories":[],"bugzilla":"1291299","bugzilla_description":"CVE-2015-8538 libdwarf: Out-of-bounds read in dwarf_leb.c","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8538.json"},{"CVE":"CVE-2014-9482","severity":"low","public_date":"2014-12-30T00:00:00Z","advisories":[],"bugzilla":"1178725","bugzilla_description":"CVE-2014-9482 libdwarf: use-after-free when parsing a crafted ELF file","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9482.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libeasyfc-gobject_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libeasyfc-gobject_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libeasyfc-gobject_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libeasyfc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libeasyfc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libeasyfc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libecap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libecap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libecap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libedit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libedit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libedit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libehca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libehca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libehca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libepoxy-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libepoxy-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libepoxy-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libepoxy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libepoxy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libepoxy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-mono-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-mono-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-mono-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-narrow-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-narrow-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-narrow-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-serif-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-serif-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liberation-serif-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libesmtp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libesmtp_security_api_results.json
new file mode 100644
index 0000000..c2a7d0a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libesmtp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-19977","severity":"moderate","public_date":"2019-12-26T00:00:00Z","advisories":[],"bugzilla":"1788744","bugzilla_description":"CVE-2019-19977 libesmtp: Stack-based buffer over-read in ntlm_build_type_2() in ntlm/ntlmstruct.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19977.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2010-1192","severity":"moderate","public_date":"2010-03-03T00:00:00Z","advisories":[],"bugzilla":"571817","bugzilla_description":"CVE-2010-1192 CVE-2010-1194 libESMTP: Multiple certificate validation flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1192.json"},{"CVE":"CVE-2010-1194","severity":"moderate","public_date":"2010-03-03T00:00:00Z","advisories":[],"bugzilla":"571817","bugzilla_description":"CVE-2010-1192 CVE-2010-1194 libESMTP: Multiple certificate validation flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1194.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libestr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libestr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libestr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libetonyek_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libetonyek_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libetonyek_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libevdev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libevdev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libevdev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libevent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libevent_security_api_results.json
new file mode 100644
index 0000000..ae0f51c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libevent_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10197","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418612","bugzilla_description":"CVE-2016-10197 libevent: Out-of-bounds read in search_make_new()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10195","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418608","bugzilla_description":"CVE-2016-10195 libevent: Stack-buffer overflow in the name_parse() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10196","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418611","bugzilla_description":"CVE-2016-10196 libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-6525","severity":"moderate","public_date":"2015-08-24T00:00:00Z","advisories":[],"bugzilla":"1256797","bugzilla_description":"CVE-2015-6525 libevent: multiple integer overflows in the evbuffer APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6525.json"},{"CVE":"CVE-2014-6272","severity":"moderate","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1144646","bugzilla_description":"CVE-2014-6272 libevent: potential heap overflow in buffer/bufferevent APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6272.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libexif_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libexif_security_api_results.json
new file mode 100644
index 0000000..b048e52
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libexif_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-0181","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":[],"bugzilla":"1847131","bugzilla_description":"CVE-2020-0181 libexif: integer overflow in exif_data_load_data_thumbnail function in exif-data.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0181.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-0198","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":[],"bugzilla":"1847133","bugzilla_description":"CVE-2020-0198 libexif: integer overflow in exif_data_load_data_content function in exif-data.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0198.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-0182","severity":"low","public_date":"2020-06-01T00:00:00Z","advisories":["RHSA-2020:4040"],"bugzilla":"1852490","bugzilla_description":"CVE-2020-0182 libexif: out of bounds read due to a missing bounds check in exif_entry_get_value function in exif-entry.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libexif-0:0.6.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0182.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-13112","severity":"moderate","public_date":"2020-05-16T00:00:00Z","advisories":["RHSA-2020:2550","RHSA-2020:2474","RHSA-2020:2672","RHSA-2020:2516","RHSA-2020:2549"],"bugzilla":"1840344","bugzilla_description":"CVE-2020-13112 libexif: several buffer over-reads in EXIF MakerNote handling can lead to information disclosure and DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-190)->CWE-125","affected_packages":["libexif-0:0.6.21-17.el8_2","libexif-0:0.6.21-17.el8_1","libexif-0:0.6.21-7.el7_8","libexif-0:0.6.21-6.el6_10","libexif-0:0.6.21-17.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13112.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2020-13113","severity":"moderate","public_date":"2020-05-16T00:00:00Z","advisories":["RHSA-2020:4040"],"bugzilla":"1840347","bugzilla_description":"CVE-2020-13113 libexif: use of uninitialized memory in EXIF Makernote handling can lead to crashes and use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->(CWE-416|CWE-822)","affected_packages":["libexif-0:0.6.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13113.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-13114","severity":"moderate","public_date":"2020-05-16T00:00:00Z","advisories":["RHSA-2020:4040"],"bugzilla":"1840350","bugzilla_description":"CVE-2020-13114 libexif: unrestricted size in handling Canon EXIF MakerNote data can lead to consumption of large amounts of compute time","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["libexif-0:0.6.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13114.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-0093","severity":"moderate","public_date":"2020-05-04T00:00:00Z","advisories":["RHSA-2020:4040"],"bugzilla":"1852487","bugzilla_description":"CVE-2020-0093 libexif: out of bounds read due to a missing bounds check in exif_data_save_data_entry function in exif-data.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805->CWE-125","affected_packages":["libexif-0:0.6.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0093.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2020-12767","severity":"low","public_date":"2020-02-17T00:00:00Z","advisories":["RHSA-2020:4040"],"bugzilla":"1834950","bugzilla_description":"CVE-2020-12767 libexif: divide-by-zero in exif_entry_get_value function in exif-entry.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["libexif-0:0.6.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12767.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-9278","severity":"moderate","public_date":"2019-12-01T00:00:00Z","advisories":["RHSA-2020:4040"],"bugzilla":"1789031","bugzilla_description":"CVE-2019-9278 libexif: out of bounds write in exif-data.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libexif-0:0.6.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9278.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20030","severity":"low","public_date":"2018-12-20T00:00:00Z","advisories":[],"bugzilla":"1663878","bugzilla_description":"CVE-2018-20030 libexif: Input validation issue resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20030.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6328","severity":"low","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1366239","bugzilla_description":"CVE-2016-6328 libexif: Integer overflow in parsing MNOTE entry data of the input file","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6328.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2017-7544","severity":"low","public_date":"2017-07-04T00:00:00Z","advisories":[],"bugzilla":"1494196","bugzilla_description":"CVE-2017-7544 libexif: Out-of-bounds heap read in exif_data_save_data_entry function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7544.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2012-2813","severity":"low","public_date":"2012-07-12T00:00:00Z","advisories":["RHSA-2012:1255"],"bugzilla":"839182","bugzilla_description":"CVE-2012-2813 libexif: \"exif_convert_utf16_to_utf8()\" heap-based out-of-bounds array read","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["libexif-0:0.6.21-5.el6_3","libexif-0:0.6.21-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2813.json"},{"CVE":"CVE-2012-2814","severity":"moderate","public_date":"2012-07-12T00:00:00Z","advisories":["RHSA-2012:1255"],"bugzilla":"839183","bugzilla_description":"CVE-2012-2814 libexif: \"exif_entry_format_value()\" buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libexif-0:0.6.21-5.el6_3","libexif-0:0.6.21-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2814.json"},{"CVE":"CVE-2012-2836","severity":"low","public_date":"2012-07-12T00:00:00Z","advisories":["RHSA-2012:1255"],"bugzilla":"839184","bugzilla_description":"CVE-2012-2836 libexif: \"exif_data_load_data()\" heap-based out-of-bounds array read","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["libexif-0:0.6.21-5.el6_3","libexif-0:0.6.21-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2836.json"},{"CVE":"CVE-2012-2837","severity":"low","public_date":"2012-07-12T00:00:00Z","advisories":["RHSA-2012:1255"],"bugzilla":"839185","bugzilla_description":"CVE-2012-2837 libexif: \"mnote_olympus_entry_get_value()\" division by zero","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libexif-0:0.6.21-5.el6_3","libexif-0:0.6.21-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2837.json"},{"CVE":"CVE-2012-2840","severity":"moderate","public_date":"2012-07-12T00:00:00Z","advisories":["RHSA-2012:1255"],"bugzilla":"839188","bugzilla_description":"CVE-2012-2840 libexif: \"exif_convert_utf16_to_utf8()\" off-by-one","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":["libexif-0:0.6.21-5.el6_3","libexif-0:0.6.21-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2840.json"},{"CVE":"CVE-2012-2841","severity":"moderate","public_date":"2012-07-12T00:00:00Z","advisories":["RHSA-2012:1255"],"bugzilla":"839189","bugzilla_description":"CVE-2012-2841 libexif: \"exif_entry_get_value()\" integer underflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["libexif-0:0.6.21-5.el6_3","libexif-0:0.6.21-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2841.json"},{"CVE":"CVE-2012-2812","severity":"low","public_date":"2012-07-12T00:00:00Z","advisories":["RHSA-2012:1255"],"bugzilla":"839203","bugzilla_description":"CVE-2012-2812 libexif: \"exif_entry_get_value()\" heap-based out-of-bounds array read","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["libexif-0:0.6.21-5.el6_3","libexif-0:0.6.21-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2812.json"},{"CVE":"CVE-2007-6351","severity":"moderate","public_date":"2007-12-14T00:00:00Z","advisories":["RHSA-2007:1165"],"bugzilla":"425551","bugzilla_description":"CVE-2007-6351 libexif infinite recursion flaw (DoS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libexif-0:0.6.13-4.0.2.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6351.json"},{"CVE":"CVE-2007-6352","severity":"moderate","public_date":"2007-12-14T00:00:00Z","advisories":["RHSA-2007:1166","RHSA-2007:1165"],"bugzilla":"425561","bugzilla_description":"CVE-2007-6352 libexif integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["libexif-0:0.5.12-5.1.0.2.el4_6.1","libexif-0:0.6.13-4.0.2.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6352.json"},{"CVE":"CVE-2006-4168","severity":"moderate","public_date":"2007-06-13T00:00:00Z","advisories":["RHSA-2007:0501"],"bugzilla":"243888","bugzilla_description":"CVE-2006-4168 libexif integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["libexif-0:0.5.12-5.1.0.2","libexif-0:0.6.13-4.0.2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4168.json"},{"CVE":"CVE-2005-0664","severity":"low","public_date":"2004-03-03T00:00:00Z","advisories":["RHSA-2005:300"],"bugzilla":"1617555","bugzilla_description":"CVE-2005-0664 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libexif-0:0.5.12-5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0664.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libexttextcat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libexttextcat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libexttextcat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfabric_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfabric_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfabric_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfastjson_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfastjson_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfastjson_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfdt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfdt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfdt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libffi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libffi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libffi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libffi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libffi_security_api_results.json
new file mode 100644
index 0000000..d4cb054
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libffi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-1000376","severity":"moderate","public_date":null,"advisories":[],"bugzilla":"1462164","bugzilla_description":"CVE-2017-1000376 libffi: Requests an executable stack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000376.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfontenc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfontenc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfontenc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libformula_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libformula_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libformula_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfprint_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfprint_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfprint_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfreehand_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfreehand_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libfreehand_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcab1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcab1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcab1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcrypt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcrypt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcrypt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcrypt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcrypt_security_api_results.json
new file mode 100644
index 0000000..ddcf658
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgcrypt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-13627","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1764018","bugzilla_description":"CVE-2019-13627 libgcrypt: ECDSA timing attack allowing private key leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2019-12904","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730320","bugzilla_description":"CVE-2019-12904 Libgcrypt: physical addresses being available to other processes leads to a flush-and-reload side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12904.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-6829","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1543437","bugzilla_description":"CVE-2018-6829 libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6829.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-0379","severity":"moderate","public_date":"2017-08-27T00:00:00Z","advisories":[],"bugzilla":"1485921","bugzilla_description":"CVE-2017-0379 libgcrypt: Missing input validation for X25519 curve","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0379.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-7526","severity":"moderate","public_date":"2017-06-29T00:00:00Z","advisories":[],"bugzilla":"1466265","bugzilla_description":"CVE-2017-7526 libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-9526","severity":"low","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1459887","bugzilla_description":"CVE-2017-9526 libgcrypt: Possible timing attack on EdDSA session key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-6313","severity":"moderate","public_date":"2016-08-17T00:00:00Z","advisories":["RHSA-2016:2674"],"bugzilla":"1366105","bugzilla_description":"CVE-2016-6313 libgcrypt: PRNG output is predictable","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["libgcrypt-0:1.5.3-13.el7_3.1","libgcrypt-0:1.4.5-12.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6313.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2015-7511","severity":"low","public_date":"2016-02-08T00:00:00Z","advisories":[],"bugzilla":"1306184","bugzilla_description":"CVE-2015-7511 libgcrypt: side-channel attack on ECDH with Weierstrass curves","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7511.json"},{"CVE":"CVE-2014-3591","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198145","bugzilla_description":"CVE-2014-3591 libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3591.json"},{"CVE":"CVE-2015-0837","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198147","bugzilla_description":"CVE-2015-0837 libgcrypt: last-level cache side-channel attack","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0837.json"},{"CVE":"CVE-2014-5270","severity":"moderate","public_date":"2014-08-08T00:00:00Z","advisories":[],"bugzilla":"1128531","bugzilla_description":"CVE-2014-5270 libgcrypt: ELGAMAL side-channel attack","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5270.json"},{"CVE":"CVE-2013-4576","severity":"moderate","public_date":"2013-12-18T00:00:00Z","advisories":["RHSA-2014:0016"],"bugzilla":"1043327","bugzilla_description":"CVE-2013-4576 gnupg: RSA secret key recovery via acoustic cryptanalysis","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["gnupg-0:1.4.5-18.el5_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4576.json"},{"CVE":"CVE-2013-4242","severity":"moderate","public_date":"2013-07-22T00:00:00Z","advisories":["RHSA-2013:1458","RHSA-2013:1457"],"bugzilla":"988589","bugzilla_description":"CVE-2013-4242 GnuPG susceptible to Yarom/Falkner flush+reload cache side-channel attack","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libgcrypt-0:1.4.4-7.el5_10","libgcrypt-0:1.4.5-11.el6_4","gnupg-0:1.4.5-18.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4242.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgdata-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgdata-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgdata-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgdata_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgdata_security_api_results.json
new file mode 100644
index 0000000..d33f0b5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgdata_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-1177","severity":"moderate","public_date":"2012-03-12T00:00:00Z","advisories":[],"bugzilla":"803335","bugzilla_description":"CVE-2012-1177 libgdata: Absent validation of SSL certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1177.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgdither_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgdither_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgdither_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgee06_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgee06_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgee06_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgee_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgee_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgee_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgepub_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgepub_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgepub_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgexiv2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgexiv2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgexiv2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgfortran4_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgfortran4_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgfortran4_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgfortran5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgfortran5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgfortran5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgfortran_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgfortran_security_api_results.json
new file mode 100644
index 0000000..ab2dea6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgfortran_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-5044","severity":"moderate","public_date":"2014-06-17T00:00:00Z","advisories":[],"bugzilla":"1122812","bugzilla_description":"CVE-2014-5044 gcc: integer overflow flaws in libgfortran","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5044.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglade2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglade2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglade2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-core-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-core-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-core-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-egl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-egl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-egl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-gles_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-gles_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-gles_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-glx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-glx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-glx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-opengl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-opengl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd-opengl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libglvnd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnat-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnat-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnat-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnome-keyring-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnome-keyring-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnome-keyring-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnome-keyring_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnome-keyring_security_api_results.json
new file mode 100644
index 0000000..a942279
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnome-keyring_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-20781","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1677288","bugzilla_description":"CVE-2018-20781 gnome-keyring: user's login credentials is kept in a session-child process resulting in exposed plaintext password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20781.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnome_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnome_security_api_results.json
new file mode 100644
index 0000000..7dfd721
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnome_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-11421","severity":"important","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1473285","bugzilla_description":"CVE-2017-11421 gnome-exe-thumbnailer: VBScript Injection when generating thumbnails for MSI files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11421.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-20781","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1677288","bugzilla_description":"CVE-2018-20781 gnome-keyring: user's login credentials is kept in a session-child process resulting in exposed plaintext password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20781.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnomecanvas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnomecanvas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnomecanvas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnomekbd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnomekbd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnomekbd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnomeui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnomeui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgnomeui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgomp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgomp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgomp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgovirt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgovirt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgovirt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgpg-error-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgpg-error-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgpg-error-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgpg-error_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgpg-error_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgpg-error_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgphoto2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgphoto2_security_api_results.json
new file mode 100644
index 0000000..c67bedc
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgphoto2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-9831","severity":"low","public_date":"2017-03-16T00:00:00Z","advisories":[],"bugzilla":"1465038","bugzilla_description":"CVE-2017-9831 libmtp: Integer overflow in ptp_unpack_EOS_CustomFuncEx","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9831.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-9832","severity":"low","public_date":"2017-03-16T00:00:00Z","advisories":[],"bugzilla":"1465040","bugzilla_description":"CVE-2017-9832 libmtp: Integer overflow in ptp_unpack_OPL function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9832.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgpod_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgpod_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgpod_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgs_security_api_results.json
new file mode 100644
index 0000000..944ddda
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-9888","severity":"low","public_date":"2016-12-07T00:00:00Z","advisories":[],"bugzilla":"1403198","bugzilla_description":"CVE-2016-9888 libgsf: Null pointer dereference in tar_directory_for_file()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9888.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2011-2709","severity":"low","public_date":"2011-05-18T00:00:00Z","advisories":[],"bugzilla":"724005","bugzilla_description":"CVE-2011-2709 libgssapi, libgssglue: Ability to load untrusted configuration file, when loading GSS mechanisms and their definitions during initialization","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2709.json"},{"CVE":"CVE-2006-4514","severity":"moderate","public_date":"2006-11-30T00:00:00Z","advisories":["RHSA-2007:0011"],"bugzilla":"1618189","bugzilla_description":"CVE-2006-4514 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libgsf-0:1.10.1-2","libgsf-0:1.6.0-7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4514.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgsf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgsf_security_api_results.json
new file mode 100644
index 0000000..5f1bce5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgsf_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-9888","severity":"low","public_date":"2016-12-07T00:00:00Z","advisories":[],"bugzilla":"1403198","bugzilla_description":"CVE-2016-9888 libgsf: Null pointer dereference in tar_directory_for_file()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9888.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2006-4514","severity":"moderate","public_date":"2006-11-30T00:00:00Z","advisories":["RHSA-2007:0011"],"bugzilla":"1618189","bugzilla_description":"CVE-2006-4514 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libgsf-0:1.10.1-2","libgsf-0:1.6.0-7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4514.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgtop2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgtop2_security_api_results.json
new file mode 100644
index 0000000..07b7523
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgtop2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2007-0235","severity":"moderate","public_date":"2007-01-14T00:00:00Z","advisories":["RHSA-2007:0765"],"bugzilla":"222637","bugzilla_description":"CVE-2007-0235 Stack overflow libgtop when pathname of mmap()-ed file is too long","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libgtop2-0:2.8.0-1.0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0235.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgudev1-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgudev1-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgudev1-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgudev1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgudev1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgudev1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-inspect-icons_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-inspect-icons_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-inspect-icons_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-java_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-java_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-java_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-tools-c_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-tools-c_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-tools-c_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-winsupport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-winsupport_security_api_results.json
new file mode 100644
index 0000000..e3849de
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-winsupport_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9755","severity":"low","public_date":"2019-03-21T00:00:00Z","advisories":["RHBA-2019:3723","RHSA-2019:3345","RHSA-2019:2308"],"bugzilla":"1691624","bugzilla_description":"CVE-2019-9755 ntfs-3g: heap-based buffer overflow leads to local root privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libguestfs-winsupport-0:7.2-3.el7","virt:rhel-8010020190916153839.cdc1202b"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-3202","severity":"low","public_date":"2015-05-21T00:00:00Z","advisories":[],"bugzilla":"1224103","bugzilla_description":"CVE-2015-3202 fuse: incorrect filtering of environment variables leading to privilege escalation","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3202.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-xfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-xfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs-xfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs_security_api_results.json
new file mode 100644
index 0000000..3dc0827
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libguestfs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9755","severity":"low","public_date":"2019-03-21T00:00:00Z","advisories":["RHBA-2019:3723","RHSA-2019:3345","RHSA-2019:2308"],"bugzilla":"1691624","bugzilla_description":"CVE-2019-9755 ntfs-3g: heap-based buffer overflow leads to local root privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libguestfs-winsupport-0:7.2-3.el7","virt:rhel-8010020190916153839.cdc1202b"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8869","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":["RHSA-2017:0565","RHSA-2016:2576","RHSA-2016:1296","RHSA-2017:0564"],"bugzilla":"1332090","bugzilla_description":"CVE-2015-8869 ocaml: sizes arguments are sign-extended from 32 to 64 bits","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-194","affected_packages":["libguestfs-1:1.32.7-3.el7","ocaml-0:3.11.2-5.el6","libguestfs-1:1.20.11-20.el6","ocaml-0:4.01.0-22.7.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8869.json"},{"CVE":"CVE-2015-3202","severity":"low","public_date":"2015-05-21T00:00:00Z","advisories":[],"bugzilla":"1224103","bugzilla_description":"CVE-2015-3202 fuse: incorrect filtering of environment variables leading to privilege escalation","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3202.json"},{"CVE":"CVE-2013-4419","severity":"moderate","public_date":"2013-10-17T00:00:00Z","advisories":["RHSA-2013:1536"],"bugzilla":"1016960","bugzilla_description":"CVE-2013-4419 libguestfs: insecure temporary directory handling for guestfish's network socket","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-377","affected_packages":["libguestfs-1:1.20.11-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4419.json"},{"CVE":"CVE-2013-2124","severity":"moderate","public_date":"2013-05-28T00:00:00Z","advisories":[],"bugzilla":"968306","bugzilla_description":"CVE-2013-2124 libguestfs: DoS (abort) due to a double free flaw when inspecting certain guest files / images","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2124.json"},{"CVE":"CVE-2012-2690","severity":"low","public_date":"2012-02-08T00:00:00Z","advisories":["RHSA-2012:0774"],"bugzilla":"831117","bugzilla_description":"CVE-2012-2690 libguestfs: virt-edit creates a new file, when it is used leading to loss of file attributes (permissions, owner, SELinux context etc.)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libguestfs-1:1.16.19-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2690.json"},{"CVE":"CVE-2010-3851","severity":"low","public_date":"2010-10-14T00:00:00Z","advisories":["RHSA-2011:0586"],"bugzilla":"643958","bugzilla_description":"CVE-2010-3851 libguestfs: missing disk format specifier when adding a disk","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["libguestfs-1:1.7.17-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3851.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgusb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgusb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgusb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgweather-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgweather-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgweather-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgweather_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgweather_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgweather_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgxps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgxps_security_api_results.json
new file mode 100644
index 0000000..14cd24c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libgxps_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10767","severity":"low","public_date":"2018-05-05T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1576175","bugzilla_description":"CVE-2018-10767 libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libgxps-0:0.3.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10767.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10733","severity":"low","public_date":"2018-05-04T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1576111","bugzilla_description":"CVE-2018-10733 libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libgxps-0:0.3.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10733.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11590","severity":"low","public_date":"2017-07-20T00:00:00Z","advisories":[],"bugzilla":"1475734","bugzilla_description":"CVE-2017-11590 libgxps: NULL pointer dereference in the caseless_hash function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11590.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhangul_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhangul_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhangul_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhbaapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhbaapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhbaapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhbalinux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhbalinux_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhbalinux_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhif_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhif_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhif_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhugetlbfs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhugetlbfs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhugetlbfs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhugetlbfs-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhugetlbfs-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhugetlbfs-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhugetlbfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhugetlbfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libhugetlbfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibcommon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibcommon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibcommon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibmad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibmad_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibmad_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibumad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibumad_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibumad_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibverbs-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibverbs-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibverbs-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibverbs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibverbs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libibverbs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libica_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libica_security_api_results.json
new file mode 100644
index 0000000..51d9fd8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libica_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11703","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720001","bugzilla_description":"CVE-2019-11703 libical: Heap buffer over read in icalparser.c parser_get_next_char","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11703.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-11704","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720006","bugzilla_description":"CVE-2019-11704 libical: Heap buffer overflow in icalmemory_strdup_and_dequote function in icalvalue.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11705","severity":"important","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720008","bugzilla_description":"CVE-2019-11705 libical: Stack buffer overflow in icalrecur_add_bydayrules in icalrecur.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11706","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720011","bugzilla_description":"CVE-2019-11706 libical: Type confusion in icaltimezone_get_vtimezone_properties function in icalproperty.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2016-9584","severity":"moderate","public_date":"2016-12-15T00:00:00Z","advisories":[],"bugzilla":"1405315","bugzilla_description":"CVE-2016-9584 libical: Use-after-free","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9584.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-5825","severity":"low","public_date":"2016-06-25T00:00:00Z","advisories":[],"bugzilla":"1375104","bugzilla_description":"CVE-2016-5825 libical: Heap buffer over-read in icalparser_parse_string function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5825.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5826","severity":"low","public_date":"2016-06-25T00:00:00Z","advisories":[],"bugzilla":"1375106","bugzilla_description":"CVE-2016-5826 libical: Heap buffer over-read in parser_get_next_char","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5826.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5827","severity":"moderate","public_date":"2016-06-24T00:00:00Z","advisories":[],"bugzilla":"1350481","bugzilla_description":"CVE-2016-5827 libical: Heap buffer over-read in icaltime_from_string","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5827.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5823","severity":"low","public_date":"2016-06-24T00:00:00Z","advisories":[],"bugzilla":"1350487","bugzilla_description":"CVE-2016-5823 libical: Segmentation fault on crafted file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5823.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5824","severity":"moderate","public_date":"2016-05-24T00:00:00Z","advisories":["RHSA-2019:0269","RHSA-2019:0270"],"bugzilla":"1375120","bugzilla_description":"CVE-2016-5824 libical: Multiple use-after-free vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:60.5.0-1.el6_10","thunderbird-0:60.5.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5824.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libical-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libical-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libical-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libical_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libical_security_api_results.json
new file mode 100644
index 0000000..51d9fd8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libical_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11703","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720001","bugzilla_description":"CVE-2019-11703 libical: Heap buffer over read in icalparser.c parser_get_next_char","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11703.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-11704","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720006","bugzilla_description":"CVE-2019-11704 libical: Heap buffer overflow in icalmemory_strdup_and_dequote function in icalvalue.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11705","severity":"important","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720008","bugzilla_description":"CVE-2019-11705 libical: Stack buffer overflow in icalrecur_add_bydayrules in icalrecur.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11706","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720011","bugzilla_description":"CVE-2019-11706 libical: Type confusion in icaltimezone_get_vtimezone_properties function in icalproperty.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2016-9584","severity":"moderate","public_date":"2016-12-15T00:00:00Z","advisories":[],"bugzilla":"1405315","bugzilla_description":"CVE-2016-9584 libical: Use-after-free","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9584.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-5825","severity":"low","public_date":"2016-06-25T00:00:00Z","advisories":[],"bugzilla":"1375104","bugzilla_description":"CVE-2016-5825 libical: Heap buffer over-read in icalparser_parse_string function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5825.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5826","severity":"low","public_date":"2016-06-25T00:00:00Z","advisories":[],"bugzilla":"1375106","bugzilla_description":"CVE-2016-5826 libical: Heap buffer over-read in parser_get_next_char","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5826.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5827","severity":"moderate","public_date":"2016-06-24T00:00:00Z","advisories":[],"bugzilla":"1350481","bugzilla_description":"CVE-2016-5827 libical: Heap buffer over-read in icaltime_from_string","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5827.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5823","severity":"low","public_date":"2016-06-24T00:00:00Z","advisories":[],"bugzilla":"1350487","bugzilla_description":"CVE-2016-5823 libical: Segmentation fault on crafted file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5823.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5824","severity":"moderate","public_date":"2016-05-24T00:00:00Z","advisories":["RHSA-2019:0269","RHSA-2019:0270"],"bugzilla":"1375120","bugzilla_description":"CVE-2016-5824 libical: Multiple use-after-free vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:60.5.0-1.el6_10","thunderbird-0:60.5.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5824.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libicu-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libicu-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libicu-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libicu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libicu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libicu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libidn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libidn_security_api_results.json
new file mode 100644
index 0000000..7f8aae8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libidn_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-18224","severity":"moderate","public_date":"2019-01-07T00:00:00Z","advisories":[],"bugzilla":"1764780","bugzilla_description":"CVE-2019-18224 libidn2: heap-based buffer overflow in idn2_to_ascii_4i in lib/lookup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-14061","severity":"low","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1486881","bugzilla_description":"CVE-2017-14061 libidn2: integer overflow in bidi.c/_isBidi()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14061.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14062","severity":"low","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1486882","bugzilla_description":"CVE-2017-14062 libidn2: Integer overflow in puny_decode.c/decode_digit","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14062.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6261","severity":"low","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1359134","bugzilla_description":"CVE-2016-6261 libidn: Out of bounds stack read in idna_to_ascii_4i","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-6262","severity":"low","public_date":"2016-01-14T00:00:00Z","advisories":[],"bugzilla":"1359138","bugzilla_description":"CVE-2016-6262 libidn: Out-of-bounds read when reading zero byte as input","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6262.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-6263","severity":"low","public_date":"2016-01-14T00:00:00Z","advisories":[],"bugzilla":"1359145","bugzilla_description":"CVE-2016-6263 libidn: Crash when given invalid UTF-8 data on input","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6263.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8948","severity":"low","public_date":"2015-08-10T00:00:00Z","advisories":[],"bugzilla":"1359141","bugzilla_description":"CVE-2015-8948 libidn: Out-of-bounds read due to use of fgets with fixed-size buffer","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8948.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-2059","severity":"low","public_date":"2015-02-23T00:00:00Z","advisories":[],"bugzilla":"1197796","bugzilla_description":"CVE-2015-2059 libidn: out-of-bounds read with stringprep on invalid UTF-8","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2059.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiec61883_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiec61883_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiec61883_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libieee1284-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libieee1284-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libieee1284-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libieee1284_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libieee1284_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libieee1284_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libimobiledevice_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libimobiledevice_security_api_results.json
new file mode 100644
index 0000000..c56c5a2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libimobiledevice_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-5104","severity":"low","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1339988","bugzilla_description":"CVE-2016-5104 libimobiledevice: Sockets listening on INADDR_ANY","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5104.json"},{"CVE":"CVE-2013-2142","severity":"low","public_date":"2013-05-31T00:00:00Z","advisories":[],"bugzilla":"970172","bugzilla_description":"CVE-2013-2142 libimobiledevice: Insecure temporary file use when both $XDG_CONFIG_HOME and $HOME are unset","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2142.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libindicator-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libindicator-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libindicator-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libini_config_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libini_config_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libini_config_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinput_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinput_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinput_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinvm-cim_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinvm-cim_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinvm-cim_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinvm-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinvm-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinvm-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinvm-i18n_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinvm-i18n_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libinvm-i18n_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiodbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiodbc_security_api_results.json
new file mode 100644
index 0000000..aa61d6c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiodbc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7172","severity":"moderate","public_date":"2013-12-17T00:00:00Z","advisories":[],"bugzilla":"1044846","bugzilla_description":"CVE-2013-7172 libiodbc: insecure RPATH in certain binaries","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7172.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libipa_hbac_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libipa_hbac_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libipa_hbac_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiptcdata_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiptcdata_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiptcdata_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiscsi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiscsi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libiscsi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libisofs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libisofs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libisofs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libitm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libitm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libitm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libitm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libitm_security_api_results.json
new file mode 100644
index 0000000..47906ba
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libitm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-6131","severity":null,"public_date":"2016-06-29T00:00:00Z","advisories":[],"bugzilla":"1352068","bugzilla_description":"CVE-2016-6131 gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libjose_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libjose_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libjose_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libjpeg-turbo-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libjpeg-turbo-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libjpeg-turbo-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libjpeg-turbo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libjpeg-turbo_security_api_results.json
new file mode 100644
index 0000000..c1cb602
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libjpeg-turbo_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14152","severity":"moderate","public_date":"2020-06-11T00:00:00Z","advisories":[],"bugzilla":"1849026","bugzilla_description":"CVE-2020-14152 libjpeg: improper handling of max_memory_to_use setting can lead to excessive memory consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14152.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-14151","severity":null,"public_date":"2020-06-11T00:00:00Z","advisories":[],"bugzilla":"1849031","bugzilla_description":"CVE-2020-14151 libjpeg: read_*_pixel functions in rdtarga.c in cjpeg mishandles EOF","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14151.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-14153","severity":"moderate","public_date":"2020-06-11T00:00:00Z","advisories":[],"bugzilla":"1849032","bugzilla_description":"CVE-2020-14153 libjpeg: out-of-bounds read for certain table pointers in jdhuff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14153.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-13790","severity":"moderate","public_date":"2020-05-25T00:00:00Z","advisories":[],"bugzilla":"1847155","bugzilla_description":"CVE-2020-13790 libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13790.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-13960","severity":"low","public_date":"2019-07-18T00:00:00Z","advisories":[],"bugzilla":"1734637","bugzilla_description":"CVE-2019-13960 libjpeg-turbo: denial of service due to incorrect width and height value of JPEG image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13960.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-2201","severity":"moderate","public_date":"2019-07-05T00:00:00Z","advisories":[],"bugzilla":"1770982","bugzilla_description":"CVE-2019-2201 libjpeg-turbo: several integer overflows and subsequent segfaults when attempting to compress/decompress gigapixel images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2201.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-19664","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1656218","bugzilla_description":"CVE-2018-19664 libjpeg-turbo: heap-based buffer over-read in the put_pixel_rows function in wrbmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-20330","severity":"low","public_date":"2018-11-25T00:00:00Z","advisories":[],"bugzilla":"1665223","bugzilla_description":"CVE-2018-20330 libjpeg-turbo: heap-based buffer overflow in tjLoadImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20330.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-14498","severity":"moderate","public_date":"2018-07-20T00:00:00Z","advisories":["RHSA-2019:2052","RHSA-2019:3705"],"bugzilla":"1687424","bugzilla_description":"CVE-2018-14498 libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libjpeg-turbo-0:1.5.3-10.el8","libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14498.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-1152","severity":"low","public_date":"2018-06-13T00:00:00Z","advisories":[],"bugzilla":"1593554","bugzilla_description":"CVE-2018-1152 libjpeg-turbo: Divide by zero allows for denial of service via crafted BMP image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1152.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-11813","severity":"low","public_date":"2018-06-07T00:00:00Z","advisories":["RHSA-2019:2052"],"bugzilla":"1588803","bugzilla_description":"CVE-2018-11813 libjpeg: \"cjpeg\" utility large loop because read_pixel in rdtarga.c mishandles EOF","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11813.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11212","severity":"low","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0640","RHSA-2019:0469","RHSA-2019:1238","RHSA-2019:2052"],"bugzilla":"1579973","bugzilla_description":"CVE-2018-11212 libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11212.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-11213","severity":"low","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2019:2052"],"bugzilla":"1579979","bugzilla_description":"CVE-2018-11213 libjpeg: Segmentation fault in get_text_gray_row function in rdppm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11213.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-11214","severity":"low","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2019:2052"],"bugzilla":"1579980","bugzilla_description":"CVE-2018-11214 libjpeg: Segmentation fault in get_text_rgb_row function in rdppm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-15232","severity":"low","public_date":"2017-09-30T00:00:00Z","advisories":[],"bugzilla":"1500678","bugzilla_description":"CVE-2017-15232 libjpeg-turbo: NULL pointer dereference in jdpostct.c and jquant1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9614","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475742","bugzilla_description":"CVE-2017-9614 libjpeg-turbo: Invalid memory access in the fill_input_buffer function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9614.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-3616","severity":"moderate","public_date":"2016-03-30T00:00:00Z","advisories":["RHSA-2019:2052"],"bugzilla":"1319661","bugzilla_description":"CVE-2016-3616 libjpeg: null pointer dereference in cjpeg","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3616.json"},{"CVE":"CVE-2014-9092","severity":"low","public_date":"2014-10-26T00:00:00Z","advisories":[],"bugzilla":"1169845","bugzilla_description":"CVE-2014-9092 libjpeg-turbo: denial of service via specially-crafted JPEG file","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9092.json"},{"CVE":"CVE-2013-6629","severity":"moderate","public_date":"2013-11-12T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2013:1803","RHSA-2013:1804","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1031734","bugzilla_description":"CVE-2013-6629 libjpeg: information leak (read of uninitialized memory)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","libjpeg-0:6b-38","libjpeg-turbo-0:1.2.1-3.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6629.json"},{"CVE":"CVE-2013-6630","severity":"moderate","public_date":"2013-11-12T00:00:00Z","advisories":["RHSA-2013:1803"],"bugzilla":"1031749","bugzilla_description":"CVE-2013-6630 libjpeg: information leak (read of uninitialized memory)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":["libjpeg-turbo-0:1.2.1-3.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6630.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkadm5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkadm5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkadm5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkcddb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkcddb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkcddb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkdcraw-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkdcraw-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkdcraw-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkdcraw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkdcraw_security_api_results.json
new file mode 100644
index 0000000..84b2012
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkdcraw_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-5804","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":[],"bugzilla":"1591879","bugzilla_description":"CVE-2018-5804 LibRaw: type confusion error in identify() function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5805","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1591887","bugzilla_description":"CVE-2018-5805 LibRaw: Stack-based buffer overflow in quicktake_100_load_raw() function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5805.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-5806","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1591897","bugzilla_description":"CVE-2018-5806 LibRaw: NULL pointer dereference in leaf_hdr_load_raw() function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5806.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5800","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1553332","bugzilla_description":"CVE-2018-5800 LibRaw: Heap-based buffer overflow in LibRaw::kodak_ycbcr_load_raw function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5800.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5801","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1553334","bugzilla_description":"CVE-2018-5801 LibRaw: NULL pointer dereference in LibRaw::unpack function src/libraw_cxx.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5801.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5802","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1553335","bugzilla_description":"CVE-2018-5802 LibRaw: Out-of-bounds read in kodak_radc_load_raw function internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5802.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16909","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":[],"bugzilla":"1524859","bugzilla_description":"CVE-2017-16909 libraw: Heap-buffer overflow in the LibRaw::panasonic_load_raw() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16909.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16910","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":[],"bugzilla":"1524860","bugzilla_description":"CVE-2017-16910 libraw: Invalid read memory access in the LibRaw::xtrans_interpolate() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16910.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14348","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1492121","bugzilla_description":"CVE-2017-14348 libraw: Heap-based 1 byte buffer over-write in processCanonCameraInfo function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14348.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14608","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1499687","bugzilla_description":"CVE-2017-14608 libraw: Out-of-bounds read in the kodak_65000_load_raw function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14608.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14265","severity":"low","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1494405","bugzilla_description":"CVE-2017-14265 libraw: Stack based buffer overflow in the xtrans_interpolate function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14265.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13735","severity":"low","public_date":"2017-08-22T00:00:00Z","advisories":[],"bugzilla":"1488476","bugzilla_description":"CVE-2017-13735 libraw: Floating point exception in kodak_radc_load_raw function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-3885","severity":"low","public_date":"2015-05-11T00:00:00Z","advisories":[],"bugzilla":"1221249","bugzilla_description":"CVE-2015-3885 dcraw: input sanitization flaw leading to buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-190->CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3885.json"},{"CVE":"CVE-2013-2126","severity":"moderate","public_date":"2013-05-24T00:00:00Z","advisories":[],"bugzilla":"968385","bugzilla_description":"CVE-2013-2126 LibRaw: double-free flaw when handling damaged full-color in Foveon and sRAW files","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2126.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkexiv2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkexiv2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkexiv2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkexiv2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkexiv2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkexiv2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkipi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkipi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkipi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkipi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkipi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkipi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkkc-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkkc-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkkc-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkkc-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkkc-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkkc-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkkc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkkc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkkc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libksane-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libksane-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libksane-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libksane_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libksane_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libksane_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkscreen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkscreen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkscreen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkworkspace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkworkspace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libkworkspace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblangtag_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblangtag_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblangtag_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblayout_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblayout_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblayout_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libldb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libldb_security_api_results.json
new file mode 100644
index 0000000..ac88381
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libldb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10730","severity":"moderate","public_date":"2020-07-02T00:00:00Z","advisories":["RHSA-2020:3119","RHSA-2020:3118"],"bugzilla":"1849489","bugzilla_description":"CVE-2020-10730 samba: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and paged_results","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["samba-0:4.11.6-107.el8rhgs","samba-0:4.11.6-107.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10730.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3824","severity":"moderate","public_date":"2019-02-25T00:00:00Z","advisories":[],"bugzilla":"1671845","bugzilla_description":"CVE-2019-3824 samba: Out of bound read in ldb_wildcard_compare in Samba AD DC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3824.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1140","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":[],"bugzilla":"1580230","bugzilla_description":"CVE-2018-1140 libldb: LDAP server crash via distinguishedName","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1140.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2015-5330","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0010","RHSA-2016:0009","RHSA-2016:0014","RHSA-2016:0015","RHSA-2016:0016","RHSA-2016:0006"],"bugzilla":"1281326","bugzilla_description":"CVE-2015-5330 samba, libldb: remote memory read in the Samba LDAP server","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-135","affected_packages":["samba-0:4.1.17-16.el6rhs","libldb-0:1.1.20-3.el7rhgs","libldb-0:1.1.20-1.el7_2.2","libldb-0:1.1.13-3.el6_7.1","samba-0:4.2.4-9.1.el7rhgs","libldb-0:1.1.20-3.el6rhs","samba4-0:4.0.0-67.el6_7.rc4","samba-0:4.2.3-11.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5330.json"},{"CVE":"CVE-2015-3223","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0009","RHSA-2016:0014"],"bugzilla":"1290287","bugzilla_description":"CVE-2015-3223 libldb: Remote DoS in Samba (AD) LDAP server","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["libldb-0:1.1.20-3.el7rhgs","libldb-0:1.1.20-1.el7_2.2","libldb-0:1.1.13-3.el6_7.1","libldb-0:1.1.20-3.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3223.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libloader_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libloader_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libloader_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblockfile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblockfile_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblockfile_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblouis-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblouis-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblouis-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblouis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblouis_security_api_results.json
new file mode 100644
index 0000000..f591ab4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liblouis_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-17294","severity":"low","public_date":"2018-09-24T00:00:00Z","advisories":[],"bugzilla":"1632834","bugzilla_description":"CVE-2018-17294 liblouis: Stack-based buffer over-read in matchCurrentInput function lou_translateString.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17294.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-11683","severity":"moderate","public_date":"2018-06-06T00:00:00Z","advisories":[],"bugzilla":"1588624","bugzilla_description":"CVE-2018-11683 liblouis: Stack-based buffer overflow in function parseChars in compileTranslationTable.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11683.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-11684","severity":"moderate","public_date":"2018-06-06T00:00:00Z","advisories":["RHSA-2020:1708"],"bugzilla":"1588631","bugzilla_description":"CVE-2018-11684 liblouis: Stack-based buffer overflow in function includeFile in compileTranslationTable.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["liblouis-0:2.6.2-21.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11684.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-11685","severity":"moderate","public_date":"2018-06-06T00:00:00Z","advisories":["RHSA-2020:1708"],"bugzilla":"1588636","bugzilla_description":"CVE-2018-11685 liblouis: Stack-based buffer overflow in function compileHyphenation in compileTranslationTable.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["liblouis-0:2.6.2-21.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11685.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-12085","severity":"low","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2020:1708"],"bugzilla":"1589940","bugzilla_description":"CVE-2018-12085 liblouis: Stack-based buffer overflow in compileTranslationTable.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["liblouis-0:2.6.2-21.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12085.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11577","severity":"low","public_date":"2018-05-30T00:00:00Z","advisories":["RHSA-2020:1708"],"bugzilla":"1585905","bugzilla_description":"CVE-2018-11577 liblouis: Segmentation fault in logging.c:lou_logPrint()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["liblouis-0:2.6.2-21.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-11440","severity":"low","public_date":"2018-05-25T00:00:00Z","advisories":[],"bugzilla":"1582658","bugzilla_description":"CVE-2018-11440 liblouis: Stack-based Buffer Overflow in parseChars function in compileTranslationTable.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11440.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11410","severity":"low","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1582304","bugzilla_description":"CVE-2018-11410 liblouis: invalid free in compileRule function in compileTranslationTable.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11410.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-15101","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2017:3384"],"bugzilla":"1511023","bugzilla_description":"CVE-2017-15101 liblouis: incomplete fix for CVE-2014-8184","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["liblouis-0:2.5.2-12.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15101.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2014-8184","severity":"moderate","public_date":"2017-10-09T00:00:00Z","advisories":["RHSA-2017:3111"],"bugzilla":"1492701","bugzilla_description":"CVE-2014-8184 liblouis: stack-based buffer overflow in findTable()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["liblouis-0:2.5.2-11.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8184.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-13738","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":["RHSA-2017:3111"],"bugzilla":"1488933","bugzilla_description":"CVE-2017-13738 liblouis: Illegal address access in the _lou_getALine function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["liblouis-0:2.5.2-11.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13738.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-13744","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":["RHSA-2017:3111"],"bugzilla":"1488935","bugzilla_description":"CVE-2017-13744 liblouis: Illegal address access in the _lou_getALine() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["liblouis-0:2.5.2-11.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13744.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-13739","severity":"moderate","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488936","bugzilla_description":"CVE-2017-13739 liblouis: Heap-buffer overflow resulting in an out-of-bounds write in resolveSubtable() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13739.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-13740","severity":"moderate","public_date":"2017-08-23T00:00:00Z","advisories":["RHSA-2017:3111"],"bugzilla":"1488937","bugzilla_description":"CVE-2017-13740 liblouis: Stack-buffer overflow in the parseChars() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["liblouis-0:2.5.2-11.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13740.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-13741","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":["RHSA-2017:3111"],"bugzilla":"1488938","bugzilla_description":"CVE-2017-13741 liblouis: Use-after-free in the function compileBrailleIndicator()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["liblouis-0:2.5.2-11.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13741.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13742","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":["RHSA-2017:3111"],"bugzilla":"1488939","bugzilla_description":"CVE-2017-13742 liblouis: Stack-buffer overflow in the function includeFile()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["liblouis-0:2.5.2-11.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13742.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13743","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":["RHSA-2017:3111"],"bugzilla":"1488942","bugzilla_description":"CVE-2017-13743 liblouis: Buffer overflow in the function _lou_showString()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["liblouis-0:2.5.2-11.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13743.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libluksmeta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libluksmeta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libluksmeta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmatchbox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmatchbox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmatchbox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmaxminddb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmaxminddb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmaxminddb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmbim-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmbim-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmbim-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmbim_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmbim_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmbim_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmediaart_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmediaart_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmediaart_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmemcached_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmemcached_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmemcached_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmicrohttpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmicrohttpd_security_api_results.json
new file mode 100644
index 0000000..6f0975b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmicrohttpd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7038","severity":"important","public_date":"2013-11-28T00:00:00Z","advisories":[],"bugzilla":"1039384","bugzilla_description":"CVE-2013-7038 libmicrohttpd: out-of-bounds read in MHD_http_unescape()","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7038.json"},{"CVE":"CVE-2013-7039","severity":"moderate","public_date":"2013-11-28T00:00:00Z","advisories":[],"bugzilla":"1039390","bugzilla_description":"CVE-2013-7039 libmicrohttpd: stack overflow in MHD_digest_auth_check()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7039.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmng-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmng-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmng-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmnl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmnl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmnl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmodman_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmodman_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmodman_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmount_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmount_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmount_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmpc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmpc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmpc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmpcdec_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmpcdec_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmpcdec_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmsn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmsn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmsn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmspack_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmspack_security_api_results.json
new file mode 100644
index 0000000..72c41a5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmspack_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-1010305","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:1686","RHBA-2020:3180","RHSA-2020:3848"],"bugzilla":"1730568","bugzilla_description":"CVE-2019-1010305 libmspack: buffer overflow in function chmd_read_headers()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["libmspack-0:0.5-0.8.alpha.el7","libmspack-0:0.7-0.3.alpha.el8.4","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010305.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2018-18584","severity":"moderate","public_date":"2018-10-17T00:00:00Z","advisories":["RHSA-2019:2049"],"bugzilla":"1644214","bugzilla_description":"CVE-2018-18584 libmspack: Out-of-bounds write in mspack/cab.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libmspack-0:0.5-0.7.alpha.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18584.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-18585","severity":"low","public_date":"2018-10-17T00:00:00Z","advisories":["RHSA-2019:2049"],"bugzilla":"1644215","bugzilla_description":"CVE-2018-18585 libmspack: chmd_read_headers() fails to reject filenames containing NULL bytes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libmspack-0:0.5-0.7.alpha.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18585.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18586","severity":"moderate","public_date":"2018-10-17T00:00:00Z","advisories":[],"bugzilla":"1644216","bugzilla_description":"CVE-2018-18586 libmspack: Directory traversal in chmextract.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18586.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14679","severity":"low","public_date":"2018-05-12T00:00:00Z","advisories":["RHSA-2018:3327"],"bugzilla":"1610890","bugzilla_description":"CVE-2018-14679 libmspack: off-by-one error in the CHM PMGI/PMGL chunk number validity checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["libmspack-0:0.5-0.6.alpha.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14679.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-14680","severity":"low","public_date":"2018-05-12T00:00:00Z","advisories":["RHSA-2018:3327"],"bugzilla":"1610934","bugzilla_description":"CVE-2018-14680 libmspack: off-by-one error in the CHM chunk number validity checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["libmspack-0:0.5-0.6.alpha.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14680.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-14682","severity":"low","public_date":"2018-02-06T00:00:00Z","advisories":["RHSA-2018:3327"],"bugzilla":"1610941","bugzilla_description":"CVE-2018-14682 libmspack: off-by-one error in the TOLOWER() macro for CHM decompression","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["libmspack-0:0.5-0.6.alpha.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14682.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-14681","severity":"low","public_date":"2017-11-26T00:00:00Z","advisories":["RHSA-2018:3327"],"bugzilla":"1610896","bugzilla_description":"CVE-2018-14681 libmspack: out-of-bounds write in kwajd_read_headers in mspack/kwajd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libmspack-0:0.5-0.6.alpha.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14681.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-11423","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":[],"bugzilla":"1472776","bugzilla_description":"CVE-2017-11423 libmspack, clamav: Stack-based buffer over-read in cabd_read_string function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11423.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-6419","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":[],"bugzilla":"1483909","bugzilla_description":"CVE-2017-6419 libmspack, clamav: heap-based buffer overflow in mspack/lzxd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6419.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmspub_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmspub_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmspub_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmtp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmtp_security_api_results.json
new file mode 100644
index 0000000..c67bedc
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmtp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-9831","severity":"low","public_date":"2017-03-16T00:00:00Z","advisories":[],"bugzilla":"1465038","bugzilla_description":"CVE-2017-9831 libmtp: Integer overflow in ptp_unpack_EOS_CustomFuncEx","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9831.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-9832","severity":"low","public_date":"2017-03-16T00:00:00Z","advisories":[],"bugzilla":"1465040","bugzilla_description":"CVE-2017-9832 libmtp: Integer overflow in ptp_unpack_OPL function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9832.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmusicbrainz5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmusicbrainz5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmusicbrainz5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmusicbrainz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmusicbrainz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmusicbrainz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmwaw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmwaw_security_api_results.json
new file mode 100644
index 0000000..e1cccea
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmwaw_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-9433","severity":"moderate","public_date":"2017-04-08T00:00:00Z","advisories":[],"bugzilla":"1461762","bugzilla_description":"CVE-2017-9433 libmwaw: Out-of-bounds write in the MsWrd1Parser::readFootnoteCorrespondence function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9433.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"8.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libmx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libndp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libndp_security_api_results.json
new file mode 100644
index 0000000..52b7018
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libndp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-3698","severity":"moderate","public_date":"2016-05-17T00:00:00Z","advisories":["RHSA-2016:1086"],"bugzilla":"1329366","bugzilla_description":"CVE-2016-3698 libndp: denial of service due to insufficient validation of source of NDP messages","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["libndp-0:1.2-6.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3698.json"},{"CVE":"CVE-2014-3554","severity":"moderate","public_date":"2014-07-29T00:00:00Z","advisories":[],"bugzilla":"1118583","bugzilla_description":"CVE-2014-3554 libndp: buffer overflow flaw in DNS Search List (DNSSL) handling","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3554.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_conntrack_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_conntrack_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_conntrack_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_cthelper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_cthelper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_cthelper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_cttimeout_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_cttimeout_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_cttimeout_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_queue_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_queue_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnetfilter_queue_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnfnetlink_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnfnetlink_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnfnetlink_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnfsidmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnfsidmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnfsidmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnftnl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnftnl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnftnl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnice_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnice_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnice_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl3-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl3-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl3-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl3_security_api_results.json
new file mode 100644
index 0000000..883b037
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl3_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-0553","severity":"moderate","public_date":"2017-02-07T00:00:00Z","advisories":["RHSA-2017:2299"],"bugzilla":"1440788","bugzilla_description":"CVE-2017-0553 libnl: Integer overflow in nlmsg_reserve()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["libnl3-0:3.2.28-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0553.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-0386","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":[],"bugzilla":"1414304","bugzilla_description":"CVE-2017-0386 libnl: Privilege escalation due to insufficient data checks in nla_reserve and nla_put","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0386.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl_security_api_results.json
new file mode 100644
index 0000000..883b037
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-0553","severity":"moderate","public_date":"2017-02-07T00:00:00Z","advisories":["RHSA-2017:2299"],"bugzilla":"1440788","bugzilla_description":"CVE-2017-0553 libnl: Integer overflow in nlmsg_reserve()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["libnl3-0:3.2.28-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0553.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-0386","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":[],"bugzilla":"1414304","bugzilla_description":"CVE-2017-0386 libnl: Privilege escalation due to insufficient data checks in nla_reserve and nla_put","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0386.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnm-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnm-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnm-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnma_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnma_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnma_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnotify-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnotify-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnotify-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnotify_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnotify_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libnotify_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libntlm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libntlm_security_api_results.json
new file mode 100644
index 0000000..150d2e9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libntlm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17455","severity":"moderate","public_date":"2019-10-08T00:00:00Z","advisories":[],"bugzilla":"1768463","bugzilla_description":"CVE-2019-17455 libntlm: stack-based buffer overflow in buildSmbNtlmAuthRequest in smbutil.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17455.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liboauth-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liboauth-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liboauth-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liboauth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liboauth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liboauth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libobjc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libobjc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libobjc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libocxl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libocxl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libocxl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libodfgen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libodfgen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libodfgen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libofa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libofa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libofa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libogg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libogg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libogg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libopenraw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libopenraw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libopenraw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liborcus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liborcus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/liborcus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libosinfo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libosinfo_security_api_results.json
new file mode 100644
index 0000000..9ab5391
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libosinfo_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-13313","severity":"low","public_date":"2019-07-05T00:00:00Z","advisories":["RHSA-2019:3387","RHSA-2020:1051"],"bugzilla":"1727766","bugzilla_description":"CVE-2019-13313 Libosinfo: osinfo-install-script option leaks password via command line argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-214->CWE-200","affected_packages":["libosinfo-0:1.1.0-5.el7","libosinfo-0:1.5.0-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libotf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libotf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libotf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpagemaker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpagemaker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpagemaker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpaper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpaper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpaper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpath_utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpath_utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpath_utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpcap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpcap_security_api_results.json
new file mode 100644
index 0000000..b6491c8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpcap_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-16301","severity":"low","public_date":"2019-09-30T00:00:00Z","advisories":[],"bugzilla":"1760500","bugzilla_description":"CVE-2018-16301 libpcap: Buffer overflow in pcapng reader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16301.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-15165","severity":"low","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1760618","bugzilla_description":"CVE-2019-15165 libpcap: Resource exhaustion during PHB header length validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15165.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15164","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1760619","bugzilla_description":"CVE-2019-15164 libpcap: Server side request forgery in rpcapd/daemon.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15164.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-15163","severity":"low","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1760621","bugzilla_description":"CVE-2019-15163 libpcap: Null pointer dereference in rpcapd/daemon.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15163.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15162","severity":"low","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1760622","bugzilla_description":"CVE-2019-15162 libpcap: Information disclosure in rpcapd/daemon.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15162.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-15161","severity":"low","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1760623","bugzilla_description":"CVE-2019-15161 libpcap: Mishandled length values in reused variables","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15161.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2014-4174","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":[],"bugzilla":"1086033","bugzilla_description":"CVE-2014-4174 libpcap: file parser crash (wnpa-sec-2014-05)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4174.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpciaccess_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpciaccess_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpciaccess_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpeas-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpeas-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpeas-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpeas-loader-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpeas-loader-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpeas-loader-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpeas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpeas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpeas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpfm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpfm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpfm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpfm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpfm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpfm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpinyin-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpinyin-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpinyin-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpinyin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpinyin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpinyin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpipeline_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpipeline_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpipeline_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libplist_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libplist_security_api_results.json
new file mode 100644
index 0000000..1fe4d90
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libplist_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-7982","severity":"low","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1445672","bugzilla_description":"CVE-2017-7982 libplist: Integer overflow in the plist_from_bin function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7982.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6437","severity":"low","public_date":"2017-02-24T00:00:00Z","advisories":[],"bugzilla":"1432954","bugzilla_description":"CVE-2017-6437 libplist: Out-of-bounds heap read in base64encode function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6437.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6438","severity":"low","public_date":"2017-02-24T00:00:00Z","advisories":[],"bugzilla":"1432956","bugzilla_description":"CVE-2017-6438 libplist: Heap-based buffer overflow in parse_unicode_node","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6438.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6440","severity":"low","public_date":"2017-02-24T00:00:00Z","advisories":[],"bugzilla":"1432965","bugzilla_description":"CVE-2017-6440 libplist: Memory allocation error in parse_data_node","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6440.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6436","severity":"low","public_date":"2017-02-08T00:00:00Z","advisories":[],"bugzilla":"1432951","bugzilla_description":"CVE-2017-6436 libplist: Integer overflow in parse_string_node","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6436.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6439","severity":"low","public_date":"2017-02-08T00:00:00Z","advisories":[],"bugzilla":"1432959","bugzilla_description":"CVE-2017-6439 libplist: Heap-based buffer overflow in parse_string_node","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6439.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6435","severity":"low","public_date":"2017-02-07T00:00:00Z","advisories":[],"bugzilla":"1432946","bugzilla_description":"CVE-2017-6435 libplist: Missing return value check from malloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6435.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5834","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1418591","bugzilla_description":"CVE-2017-5834 libplist: Heap-buffer overflow in parse_dict_node","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5834.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5835","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1418592","bugzilla_description":"CVE-2017-5835 libplist: Memory allocation error","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5835.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5545","severity":"low","public_date":"2017-01-17T00:00:00Z","advisories":[],"bugzilla":"1416002","bugzilla_description":"CVE-2017-5545 libplist: Out-of-bounds heap buffer read in plistutil","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5545.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5836","severity":"low","public_date":"2017-01-15T00:00:00Z","advisories":[],"bugzilla":"1418593","bugzilla_description":"CVE-2017-5836 libplist: Type inconsistency in bplist.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5836.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5209","severity":"low","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1412613","bugzilla_description":"CVE-2017-5209 libplist: base64decode buffer over-read via split encoded Apple Property List data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmemblk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmemblk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmemblk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmemlog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmemlog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmemlog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmemobj_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmemobj_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmemobj_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmempool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmempool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpmempool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpng-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpng-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpng-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpng12_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpng12_security_api_results.json
new file mode 100644
index 0000000..19776a0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpng12_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17371","severity":"low","public_date":"2019-07-11T00:00:00Z","advisories":[],"bugzilla":"1776981","bugzilla_description":"CVE-2019-17371 libpng: memory leaks in png_malloc_warn and png_create_info_struct","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17371.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-7317","severity":"low","public_date":"2019-01-25T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:2737","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:1309","RHSA-2019:1308","RHSA-2019:2590"],"bugzilla":"1672409","bugzilla_description":"CVE-2019-7317 libpng: use-after-free in png_image_free in png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","thunderbird-0:60.7.0-1.el6_10","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","firefox-0:60.7.0-1.el7_6","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-6129","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1667127","bugzilla_description":"CVE-2019-6129 libpng: memory leak of png_info struct in pngcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6129.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14550","severity":"moderate","public_date":"2018-07-21T00:00:00Z","advisories":[],"bugzilla":"1608800","bugzilla_description":"CVE-2018-14550 libpng: Stack-based buffer overflow in contrib/pngminus/pnm2png.c:get_token() potentially leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14550.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-14048","severity":"low","public_date":"2018-07-12T00:00:00Z","advisories":[],"bugzilla":"1608073","bugzilla_description":"CVE-2018-14048 libpng: Segmentation fault in png.c:png_free_data function causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14048.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-13785","severity":"low","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1599943","bugzilla_description":"CVE-2018-13785 libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-369","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-10087","severity":"low","public_date":"2016-12-29T00:00:00Z","advisories":[],"bugzilla":"1409617","bugzilla_description":"CVE-2016-10087 libpng: NULL pointer dereference in png_set_text_2()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8540","severity":"low","public_date":"2015-12-10T00:00:00Z","advisories":["RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0100","RHSA-2016:0101"],"bugzilla":"1291312","bugzilla_description":"CVE-2015-8540 libpng: underflow read in png_check_keyword()","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-125","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8540.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-8126","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8126.json"},{"CVE":"CVE-2015-8472","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8472.json"},{"CVE":"CVE-2015-7981","severity":"low","public_date":"2015-10-22T00:00:00Z","advisories":["RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0100","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595"],"bugzilla":"1276416","bugzilla_description":"CVE-2015-7981 libpng: Out-of-bounds read in png_convert_to_rfc1123","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","libpng12-0:1.2.50-7.el7_2","libpng-2:1.2.49-2.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7981.json"},{"CVE":"CVE-2014-9495","severity":"moderate","public_date":"2014-12-22T00:00:00Z","advisories":[],"bugzilla":"1179186","bugzilla_description":"CVE-2014-9495 libpng: buffer overflow in png_combine_row","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9495.json"},{"CVE":"CVE-2013-7353","severity":"moderate","public_date":"2014-04-11T00:00:00Z","advisories":[],"bugzilla":"1086514","bugzilla_description":"CVE-2013-7353 libpng: integer overflow leading to a heap-based buffer overflow in png_set_unknown_chunks()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7353.json"},{"CVE":"CVE-2013-7354","severity":"moderate","public_date":"2014-04-11T00:00:00Z","advisories":[],"bugzilla":"1086516","bugzilla_description":"CVE-2013-7354 libpng: integer overflow leading to a heap-based buffer overflow in png_set_sPLT() and png_set_text_2()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7354.json"},{"CVE":"CVE-2014-0333","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":[],"bugzilla":"1070985","bugzilla_description":"CVE-2014-0333 libpng: denial of service via png_push_read_chunk()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0333.json"},{"CVE":"CVE-2013-6954","severity":"low","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1045561","bugzilla_description":"CVE-2013-6954 libpng: unhandled zero-length PLTE chunk or NULL palette","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6954.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpng_security_api_results.json
new file mode 100644
index 0000000..33844ec
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpng_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17371","severity":"low","public_date":"2019-07-11T00:00:00Z","advisories":[],"bugzilla":"1776981","bugzilla_description":"CVE-2019-17371 libpng: memory leaks in png_malloc_warn and png_create_info_struct","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17371.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12652","severity":"low","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2020:3901"],"bugzilla":"1733956","bugzilla_description":"CVE-2017-12652 libpng: does not check length of chunks against user limit","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["libpng-2:1.5.13-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-7317","severity":"low","public_date":"2019-01-25T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:2737","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:1309","RHSA-2019:1308","RHSA-2019:2590"],"bugzilla":"1672409","bugzilla_description":"CVE-2019-7317 libpng: use-after-free in png_image_free in png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","thunderbird-0:60.7.0-1.el6_10","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","firefox-0:60.7.0-1.el7_6","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-6129","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1667127","bugzilla_description":"CVE-2019-6129 libpng: memory leak of png_info struct in pngcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6129.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14550","severity":"moderate","public_date":"2018-07-21T00:00:00Z","advisories":[],"bugzilla":"1608800","bugzilla_description":"CVE-2018-14550 libpng: Stack-based buffer overflow in contrib/pngminus/pnm2png.c:get_token() potentially leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14550.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-14048","severity":"low","public_date":"2018-07-12T00:00:00Z","advisories":[],"bugzilla":"1608073","bugzilla_description":"CVE-2018-14048 libpng: Segmentation fault in png.c:png_free_data function causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14048.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-13785","severity":"low","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1599943","bugzilla_description":"CVE-2018-13785 libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-369","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-10087","severity":"low","public_date":"2016-12-29T00:00:00Z","advisories":[],"bugzilla":"1409617","bugzilla_description":"CVE-2016-10087 libpng: NULL pointer dereference in png_set_text_2()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8540","severity":"low","public_date":"2015-12-10T00:00:00Z","advisories":["RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0100","RHSA-2016:0101"],"bugzilla":"1291312","bugzilla_description":"CVE-2015-8540 libpng: underflow read in png_check_keyword()","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-125","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8540.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-8126","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8126.json"},{"CVE":"CVE-2015-8472","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8472.json"},{"CVE":"CVE-2015-7981","severity":"low","public_date":"2015-10-22T00:00:00Z","advisories":["RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0100","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595"],"bugzilla":"1276416","bugzilla_description":"CVE-2015-7981 libpng: Out-of-bounds read in png_convert_to_rfc1123","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","libpng12-0:1.2.50-7.el7_2","libpng-2:1.2.49-2.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7981.json"},{"CVE":"CVE-2015-0973","severity":"critical","public_date":"2014-12-22T00:00:00Z","advisories":[],"bugzilla":"1177327","bugzilla_description":"CVE-2015-0973 libpng: Heap-buffer overflow png_combine_row() with very wide interlaced images","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0973.json"},{"CVE":"CVE-2014-9495","severity":"moderate","public_date":"2014-12-22T00:00:00Z","advisories":[],"bugzilla":"1179186","bugzilla_description":"CVE-2014-9495 libpng: buffer overflow in png_combine_row","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9495.json"},{"CVE":"CVE-2013-7353","severity":"moderate","public_date":"2014-04-11T00:00:00Z","advisories":[],"bugzilla":"1086514","bugzilla_description":"CVE-2013-7353 libpng: integer overflow leading to a heap-based buffer overflow in png_set_unknown_chunks()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7353.json"},{"CVE":"CVE-2013-7354","severity":"moderate","public_date":"2014-04-11T00:00:00Z","advisories":[],"bugzilla":"1086516","bugzilla_description":"CVE-2013-7354 libpng: integer overflow leading to a heap-based buffer overflow in png_set_sPLT() and png_set_text_2()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7354.json"},{"CVE":"CVE-2014-0333","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":[],"bugzilla":"1070985","bugzilla_description":"CVE-2014-0333 libpng: denial of service via png_push_read_chunk()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0333.json"},{"CVE":"CVE-2013-6954","severity":"low","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1045561","bugzilla_description":"CVE-2013-6954 libpng: unhandled zero-length PLTE chunk or NULL palette","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6954.json"},{"CVE":"CVE-2012-3425","severity":"low","public_date":"2012-04-08T00:00:00Z","advisories":[],"bugzilla":"813249","bugzilla_description":"CVE-2012-3425 libpng: Out-of heap-based buffer read by inflating certain PNG images","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3425.json"},{"CVE":"CVE-2011-3048","severity":"moderate","public_date":"2012-03-29T00:00:00Z","advisories":["RHSA-2012:0523"],"bugzilla":"808139","bugzilla_description":"CVE-2011-3048 libpng: memory corruption flaw","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libpng-2:1.2.10-17.el5_8","libpng-2:1.2.49-1.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3048.json"},{"CVE":"CVE-2011-3045","severity":"moderate","public_date":"2012-03-08T00:00:00Z","advisories":["RHSA-2012:0407"],"bugzilla":"799000","bugzilla_description":"CVE-2011-3045 libpng: buffer overflow in png_inflate caused by invalid type conversions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libpng-2:1.2.48-1.el6_2","libpng-2:1.2.10-16.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3045.json"},{"CVE":"CVE-2011-3026","severity":"important","public_date":"2012-02-16T00:00:00Z","advisories":["RHSA-2012:0317","RHSA-2012:0140","RHSA-2012:0141","RHSA-2012:0142","RHSA-2012:0143"],"bugzilla":"790737","bugzilla_description":"CVE-2011-3026 libpng: Heap buffer overflow in png_decompress_chunk (MFSA 2012-11)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["thunderbird-0:3.1.18-2.el6_2","firefox-0:3.6.26-3.el4","libpng-2:1.2.7-9.el4","seamonkey-0:1.0.9-79.el4","xulrunner-0:1.9.2.26-2.el5_7","libpng10-0:1.0.16-10.el4","libpng-2:1.2.10-15.el5_7","xulrunner-0:1.9.2.26-2.el6_2","libpng-2:1.2.46-2.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3026.json"},{"CVE":"CVE-2011-3464","severity":"important","public_date":"2012-02-01T00:00:00Z","advisories":[],"bugzilla":"843179","bugzilla_description":"CVE-2011-3464  libpng: One-byte stack buffer overrun in png_formatted_warning","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3464.json"},{"CVE":"CVE-2011-3328","severity":"moderate","public_date":"2011-09-22T00:00:00Z","advisories":[],"bugzilla":"740864","bugzilla_description":"CVE-2011-3328 libpng: malformed cHRM divide-by-zero vulnerability in 1.5.4","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3328.json"},{"CVE":"CVE-2011-2690","severity":"moderate","public_date":"2011-07-07T00:00:00Z","advisories":["RHSA-2011:1104","RHSA-2011:1105"],"bugzilla":"720607","bugzilla_description":"CVE-2011-2690 libpng: buffer overwrite in png_rgb_to_gray","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libpng-2:1.2.46-1.el6_1","libpng-2:1.2.10-7.1.el5_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2690.json"},{"CVE":"CVE-2011-2691","severity":"low","public_date":"2011-07-07T00:00:00Z","advisories":[],"bugzilla":"720608","bugzilla_description":"CVE-2011-2691 libpng: Crash in png_default_error due to use of NULL Pointer","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2691.json"},{"CVE":"CVE-2011-2692","severity":"moderate","public_date":"2011-07-07T00:00:00Z","advisories":["RHSA-2011:1103","RHSA-2011:1104","RHSA-2011:1105"],"bugzilla":"720612","bugzilla_description":"CVE-2011-2692 libpng: Invalid read when handling empty sCAL chunks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libpng-2:1.2.46-1.el6_1","libpng-2:1.2.10-7.1.el5_7.5","libpng-2:1.2.7-8.el4","libpng10-0:1.0.16-9.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2692.json"},{"CVE":"CVE-2011-2501","severity":"moderate","public_date":"2011-06-07T00:00:00Z","advisories":["RHSA-2011:1105"],"bugzilla":"717084","bugzilla_description":"CVE-2011-2501 libpng: regression of CVE-2004-0421 in 1.2.23+","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libpng-2:1.2.46-1.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2501.json"},{"CVE":"CVE-2011-0408","severity":"important","public_date":"2011-01-08T00:00:00Z","advisories":[],"bugzilla":"671502","bugzilla_description":"CVE-2011-0408 libpng: application crash or possible arbitrary code execution in libpng 1.5.0","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P/","CWE":"CWE-190->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0408.json"},{"CVE":"CVE-2010-1205","severity":"important","public_date":"2010-06-25T00:00:00Z","advisories":["RHSA-2010:0547","RHSA-2010:0546","RHSA-2010:0534","RHSA-2010:0545"],"bugzilla":"608238","bugzilla_description":"CVE-2010-1205 libpng: out-of-bounds memory write","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libpng-2:1.2.2-30","libpng-2:1.2.10-7.1.el5_5.3","seamonkey-0:1.0.9-0.57.el3","libpng-2:1.2.7-3.el4_8.3","seamonkey-0:1.0.9-60.el4","thunderbird-0:2.0.0.24-6.el5","libpng10-0:1.0.13-21","libpng10-0:1.0.16-3.el4_8.4","firefox-0:3.6.7-2.el4","firefox-0:3.6.7-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1205.json"},{"CVE":"CVE-2010-2249","severity":"low","public_date":"2010-06-25T00:00:00Z","advisories":["RHSA-2010:0534"],"bugzilla":"608644","bugzilla_description":"CVE-2010-2249 libpng: Memory leak when processing Physical Scale (sCAL) images","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["libpng-2:1.2.2-30","libpng-2:1.2.10-7.1.el5_5.3","libpng-2:1.2.7-3.el4_8.3","libpng10-0:1.0.13-21","libpng10-0:1.0.16-3.el4_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2249.json"},{"CVE":"CVE-2010-0205","severity":"moderate","public_date":"2010-03-01T00:00:00Z","advisories":["RHSA-2010:0534"],"bugzilla":"566234","bugzilla_description":"CVE-2010-0205 libpng: excessive memory consumption due to highly compressed huge ancillary chunk","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-409->CWE-400","affected_packages":["libpng-2:1.2.2-30","libpng-2:1.2.10-7.1.el5_5.3","libpng-2:1.2.7-3.el4_8.3","libpng10-0:1.0.13-21","libpng10-0:1.0.16-3.el4_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0205.json"},{"CVE":"CVE-2006-7244","severity":"low","public_date":"2009-08-01T00:00:00Z","advisories":[],"bugzilla":"690200","bugzilla_description":"libpng10, libpng: Memory leak by write of iCCP chunk with negative embedded profile length (CVE-2006-7244, CVE-2009-5063)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7244.json"},{"CVE":"CVE-2009-5063","severity":"low","public_date":"2009-08-01T00:00:00Z","advisories":[],"bugzilla":"690200","bugzilla_description":"libpng10, libpng: Memory leak by write of iCCP chunk with negative embedded profile length (CVE-2006-7244, CVE-2009-5063)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5063.json"},{"CVE":"CVE-2009-2042","severity":"low","public_date":"2009-06-04T00:00:00Z","advisories":["RHSA-2010:0534"],"bugzilla":"504782","bugzilla_description":"CVE-2009-2042 libpng: Interlaced Images Information Disclosure Vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libpng-2:1.2.2-30","libpng-2:1.2.10-7.1.el5_5.3","libpng-2:1.2.7-3.el4_8.3","libpng10-0:1.0.13-21","libpng10-0:1.0.16-3.el4_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2042.json"},{"CVE":"CVE-2009-0040","severity":"moderate","public_date":"2009-02-19T00:00:00Z","advisories":["RHSA-2009:0315","RHSA-2009:0333","RHSA-2009:0325","RHSA-2009:0340"],"bugzilla":"486355","bugzilla_description":"CVE-2009-0040 libpng arbitrary free() flaw","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libpng-2:1.0.14-12","seamonkey-0:1.0.9-38.el4","firefox-0:3.0.7-1.el4","seamonkey-0:1.0.9-0.30.el2","libpng-2:1.2.10-7.1.el5_3.2","seamonkey-0:1.0.9-0.34.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0040.json"},{"CVE":"CVE-2008-1382","severity":"low","public_date":"2008-04-12T00:00:00Z","advisories":["RHSA-2009:0333"],"bugzilla":"441839","bugzilla_description":"CVE-2008-1382 libpng unknown chunk handling flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libpng-2:1.0.14-12","libpng-2:1.2.10-7.1.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1382.json"},{"CVE":"CVE-2007-5269","severity":"moderate","public_date":"2007-09-11T00:00:00Z","advisories":["RHSA-2007:0992"],"bugzilla":"324771","bugzilla_description":"CVE-2007-5269 libpng DoS via multiple out-of-bounds reads","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libpng-2:1.0.14-11","libpng-2:1.2.10-7.1.el5_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5269.json"},{"CVE":"CVE-2007-2445","severity":"moderate","public_date":"2007-05-15T00:00:00Z","advisories":["RHSA-2007:0356"],"bugzilla":"239425","bugzilla_description":"CVE-2007-2445 libpng png_handle_tRNS flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libpng-2:1.0.14-10","libpng-2:1.2.10-7.0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2445.json"},{"CVE":"CVE-2006-5793","severity":"low","public_date":"2006-11-14T00:00:00Z","advisories":["RHSA-2007:0356"],"bugzilla":"215405","bugzilla_description":"CVE-2006-5793 libpng DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libpng-2:1.0.14-10","libpng-2:1.2.10-7.0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5793.json"},{"CVE":"CVE-2006-0481","severity":"moderate","public_date":"2004-12-03T00:00:00Z","advisories":["RHSA-2006:0205"],"bugzilla":"1618003","bugzilla_description":"CVE-2006-0481 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libpng-2:1.2.7-1.el4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0481.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libproxy-mozjs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libproxy-mozjs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libproxy-mozjs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libproxy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libproxy_security_api_results.json
new file mode 100644
index 0000000..6cccc2e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libproxy_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-25219","severity":"moderate","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1880349","bugzilla_description":"CVE-2020-25219 libproxy: uncontrolled recursion via an infinite stream response leading to stack exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25219.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-26154","severity":"moderate","public_date":"2020-07-16T00:00:00Z","advisories":[],"bugzilla":"1869639","bugzilla_description":"CVE-2020-26154 libproxy: sending more than 102400 bytes in PAC without a Content-Length present could result in buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26154.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2012-5580","severity":"low","public_date":"2012-11-24T00:00:00Z","advisories":[],"bugzilla":"883100","bugzilla_description":"CVE-2012-5580 libproxy: format string flaw in bin/proxy","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5580.json"},{"CVE":"CVE-2012-4505","severity":"moderate","public_date":"2012-10-12T00:00:00Z","advisories":["RHSA-2012:1461"],"bugzilla":"864612","bugzilla_description":"CVE-2012-4505 libproxy: PAC handling insufficient content length check leading to buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libproxy-0:0.3.0-3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4505.json"},{"CVE":"CVE-2012-4504","severity":"moderate","public_date":"2012-10-10T00:00:00Z","advisories":[],"bugzilla":"864417","bugzilla_description":"CVE-2012-4504 libproxy: long proxy.pac file handling buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4504.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpsm2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpsm2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpsm2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpurple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpurple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpurple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpwquality_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpwquality_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libpwquality_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqb_security_api_results.json
new file mode 100644
index 0000000..95a88f7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-12779","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":["RHSA-2020:1189","RHSA-2019:3610"],"bugzilla":"1695948","bugzilla_description":"CVE-2019-12779 libqb: Insecure treatment of IPC (temporary) files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["libqb-0:1.0.1-9.el7","libqb-0:1.0.3-10.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12779.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqmi-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqmi-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqmi-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqmi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqmi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libqmi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquadmath-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquadmath-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquadmath-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquadmath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquadmath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquadmath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquvi-scripts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquvi-scripts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquvi-scripts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquvi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquvi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libquvi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librabbitmq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librabbitmq_security_api_results.json
new file mode 100644
index 0000000..d87f5f1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librabbitmq_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-18609","severity":"moderate","public_date":"2019-12-01T00:00:00Z","advisories":["RHSA-2020:3949"],"bugzilla":"1786646","bugzilla_description":"CVE-2019-18609 librabbitmq: integer overflow in amqp_handle_input in amqp_connection.c leads to heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["librabbitmq-0:0.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18609.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librados2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librados2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librados2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libraw1394_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libraw1394_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libraw1394_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librbd1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librbd1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librbd1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librdkafka_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librdkafka_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librdkafka_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librdmacm-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librdmacm-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librdmacm-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librdmacm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librdmacm_security_api_results.json
new file mode 100644
index 0000000..0c593db
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librdmacm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-4516","severity":"low","public_date":"2012-10-08T00:00:00Z","advisories":["RHSA-2013:1661"],"bugzilla":"865483","bugzilla_description":"CVE-2012-4516 librdmacm: Tried to connect to port 6125 if ibacm.port was not found","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["librdmacm-0:1.0.17-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4516.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libref_array_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libref_array_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libref_array_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librelp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librelp_security_api_results.json
new file mode 100644
index 0000000..c1dcf59
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librelp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1000140","severity":"critical","public_date":"2018-03-23T00:00:00Z","advisories":["RHSA-2018:1703","RHSA-2018:1704","RHSA-2018:1701","RHSA-2018:1702","RHSA-2018:1225","RHSA-2018:1223","RHSA-2018:1707"],"bugzilla":"1560084","bugzilla_description":"CVE-2018-1000140 librelp: Stack-based buffer overflow in relpTcpChkPeerName function in src/tcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["librelp-0:1.2.0-4.el7_3","librelp-0:1.2.0-4.el7_2","librelp-0:1.2.7-3.el6_6.1","librelp-0:1.2.7-3.el6_7.1","librelp-0:1.2.7-3.el6_9.1","librelp-0:1.2.12-1.el7_4.1","librelp-0:1.2.12-1.el7_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000140.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-calc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-calc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-calc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-draw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-draw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-draw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-emailmerge_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-emailmerge_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-emailmerge_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-filters_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-filters_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-filters_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-graphicfilter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-graphicfilter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-graphicfilter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-gtk2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-gtk2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-gtk2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-impress_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-impress_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-impress_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-langpack-en_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-langpack-en_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-langpack-en_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-math_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-math_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-math_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-ogltrans_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-ogltrans_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-ogltrans_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-opensymbol-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-opensymbol-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-opensymbol-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-pdfimport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-pdfimport_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-pdfimport_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-pyuno_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-pyuno_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-pyuno_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-ure-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-ure-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-ure-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-ure_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-ure_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-ure_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-voikko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-voikko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-voikko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-wiki-publisher_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-wiki-publisher_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-wiki-publisher_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-writer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-writer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-writer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-x11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-x11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-x11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-xsltfilter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-xsltfilter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreoffice-xsltfilter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreofficekit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreofficekit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreofficekit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librepo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librepo_security_api_results.json
new file mode 100644
index 0000000..99ba2f9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librepo_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14352","severity":"important","public_date":"2020-08-13T00:00:00Z","advisories":["RHSA-2020:3749","RHBA-2020:3609","RHSA-2020:3658","RHSA-2020:3756"],"bugzilla":"1866498","bugzilla_description":"CVE-2020-14352 librepo: missing path validation in repomd.xml may lead to directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["librepo-0:1.9.2-2.el8_0","librepo-0:1.10.3-4.el8_1","redhat-coreos-43.82.202009181853.0","librepo-0:1.11.0-3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14352.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2015-5302","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:2504","RHSA-2015:2505"],"bugzilla":"1270903","bugzilla_description":"CVE-2015-5302 libreport: Possible private data leak in Bugzilla bugs opened by ABRT","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":["libreport-0:2.0.9-25.el6_7","libreport-0:2.1.11-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5302.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-anaconda_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-anaconda_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-anaconda_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-bugzilla_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-bugzilla_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-bugzilla_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-mailx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-mailx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-mailx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-reportuploader_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-reportuploader_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-reportuploader_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-rhtsupport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-rhtsupport_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-rhtsupport_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-ureport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-ureport_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-plugin-ureport_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-rhel-anaconda-bugzilla_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-rhel-anaconda-bugzilla_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-rhel-anaconda-bugzilla_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-rhel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-rhel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-rhel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-web_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-web_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport-web_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport_security_api_results.json
new file mode 100644
index 0000000..10c7434
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreport_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5302","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:2504","RHSA-2015:2505"],"bugzilla":"1270903","bugzilla_description":"CVE-2015-5302 libreport: Possible private data leak in Bugzilla bugs opened by ABRT","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":["libreport-0:2.0.9-25.el6_7","libreport-0:2.1.11-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5302.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librepository_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librepository_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librepository_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreswan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreswan_security_api_results.json
new file mode 100644
index 0000000..1016b50
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libreswan_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-1763","severity":"important","public_date":"2020-05-11T00:00:00Z","advisories":["RHSA-2020:2069","RHSA-2020:2071","RHSA-2020:2070"],"bugzilla":"1814541","bugzilla_description":"CVE-2020-1763 libreswan: DoS attack via malicious IKEv1 informational exchange message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libreswan-0:3.27-10.el8_0","libreswan-0:3.29-7.el8_1","libreswan-0:3.29-7.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1763.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10155","severity":"low","public_date":"2019-06-10T00:00:00Z","advisories":["RHSA-2019:3391"],"bugzilla":"1714141","bugzilla_description":"CVE-2019-10155 libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-354","affected_packages":["libreswan-0:3.29-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2019-12312","severity":"moderate","public_date":"2019-05-12T00:00:00Z","advisories":["RHSA-2019:3391"],"bugzilla":"1716918","bugzilla_description":"CVE-2019-12312 libreswan: null-pointer dereference by sending two IKEv2 packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libreswan-0:3.29-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12312.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-5389","severity":"moderate","public_date":"2018-08-14T00:00:00Z","advisories":[],"bugzilla":"1603064","bugzilla_description":"CVE-2018-5389 IKEv1: IKEv1 protocol vulnerability in the authentication mode with pre-shared keys in the main mode of operation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5389.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-5391","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":[],"bugzilla":"1356183","bugzilla_description":"CVE-2016-5391 libreswan: IKEv2 bogus proposal lacking DH transform causes pluto daemon restart","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5391.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3071","severity":"moderate","public_date":"2016-04-04T00:00:00Z","advisories":[],"bugzilla":"1327957","bugzilla_description":"CVE-2016-3071 libreswan: DoS when receiving an IKE transforn containing AES_XCBC","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3071.json"},{"CVE":"CVE-2016-5361","severity":"moderate","public_date":"2016-03-14T00:00:00Z","advisories":["RHSA-2016:2603"],"bugzilla":"1308508","bugzilla_description":"CVE-2016-5361 IKEv1 protocol is vulnerable to DoS amplification attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libreswan-0:3.15-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5361.json"},{"CVE":"CVE-2015-3240","severity":"moderate","public_date":"2015-08-25T00:00:00Z","advisories":["RHSA-2015:1979"],"bugzilla":"1232320","bugzilla_description":"CVE-2015-3240 libreswan / openswan: denial of service via IKE daemon restart when receiving a bad DH gx value","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["libreswan-0:3.15-5.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3240.json"},{"CVE":"CVE-2015-3204","severity":"moderate","public_date":"2015-06-01T00:00:00Z","advisories":["RHSA-2015:1154"],"bugzilla":"1223361","bugzilla_description":"CVE-2015-3204 libreswan: crafted IKE packet causes daemon restart","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["libreswan-0:3.12-10.1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3204.json"},{"CVE":"CVE-2014-2891","severity":"moderate","public_date":"2014-05-05T00:00:00Z","advisories":[],"bugzilla":"1095487","bugzilla_description":"CVE-2014-2891 strongswan: denial of service via crafted ID_DER_ASN1_DN_ID payload","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2891.json"},{"CVE":"CVE-2013-6467","severity":"moderate","public_date":"2014-01-15T00:00:00Z","advisories":[],"bugzilla":"1050245","bugzilla_description":"CVE-2013-6467 libreswan: dereferencing missing IKEv2 payloads causes pluto daemon to restart","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6467.json"},{"CVE":"CVE-2013-7294","severity":"moderate","public_date":"2013-11-26T00:00:00Z","advisories":[],"bugzilla":"1054022","bugzilla_description":"CVE-2013-7294 libreswan: DoS via an IKEv2 I1 notification","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7294.json"},{"CVE":"CVE-2013-4564","severity":"moderate","public_date":"2013-11-18T00:00:00Z","advisories":[],"bugzilla":"1031830","bugzilla_description":"CVE-2013-4564 libreswan: DoS due to how mangled IKE packets are handled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4564.json"},{"CVE":"CVE-2013-7283","severity":"moderate","public_date":"2013-11-08T00:00:00Z","advisories":[],"bugzilla":"1051092","bugzilla_description":"CVE-2013-7283 libreswan: insecure tmp files on rpm package installation","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7283.json"},{"CVE":"CVE-2013-6076","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":[],"bugzilla":"1026152","bugzilla_description":"CVE-2013-6076 strongswan: denial of service when handling IKEv1 fragmentation payloads","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6076.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librevenge_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librevenge_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librevenge_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librpmem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librpmem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librpmem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librsvg2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librsvg2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librsvg2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librsvg2-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librsvg2-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librsvg2-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librsvg2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librsvg2_security_api_results.json
new file mode 100644
index 0000000..fad8149
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librsvg2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-20446","severity":"moderate","public_date":"2020-02-02T00:00:00Z","advisories":[],"bugzilla":"1797608","bugzilla_description":"CVE-2019-20446 librsvg: Resource exhaustion via crafted SVG file with nested patterns","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20446.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000041","severity":"low","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588840","bugzilla_description":"CVE-2018-1000041 librsvg: Improper input validation vulnerability in rsvg-io.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000041.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-11464","severity":"low","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1474400","bugzilla_description":"CVE-2017-11464 librsvg: SIGFPE is raised in box_blur_line function of rsvg-filter.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11464.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6163","severity":"moderate","public_date":"2016-07-04T00:00:00Z","advisories":[],"bugzilla":"1353520","bugzilla_description":"CVE-2016-6163 librsvg2: Out-of-bounds read when processing crafted SVG file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6163.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-4347","severity":null,"public_date":"2016-04-28T00:00:00Z","advisories":[],"bugzilla":"1331724","bugzilla_description":"CVE-2016-4347 Rejected: CVE-2016-4347","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4347.json"},{"CVE":"CVE-2016-4348","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":[],"bugzilla":"1331725","bugzilla_description":"CVE-2016-4348 librsvg2: DoS parsing SVGs with circular definitions _rsvg_css_normalize_font_size() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4348.json"},{"CVE":"CVE-2015-7557","severity":"moderate","public_date":"2015-12-21T00:00:00Z","advisories":[],"bugzilla":"1268239","bugzilla_description":"CVE-2015-7557 librsvg2: Out-of-bounds heap read when parsing SVG file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"(CWE-122|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7557.json"},{"CVE":"CVE-2015-7558","severity":"moderate","public_date":"2015-12-21T00:00:00Z","advisories":[],"bugzilla":"1268243","bugzilla_description":"CVE-2015-7558 librsvg2: Stack exhaustion causing DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7558.json"},{"CVE":"CVE-2014-7904","severity":"moderate","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2014:1894"],"bugzilla":"1165652","bugzilla_description":"CVE-2014-7904 chromium-browser: Buffer overflow in Skia","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:39.0.2171.65-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7904.json"},{"CVE":"CVE-2014-7909","severity":"moderate","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2014:1894"],"bugzilla":"1165660","bugzilla_description":"CVE-2014-7909 chromium-browser: Uninitialized memory read in Skia","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:39.0.2171.65-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7909.json"},{"CVE":"CVE-2013-1881","severity":"moderate","public_date":"2013-08-17T00:00:00Z","advisories":["RHSA-2014:0127"],"bugzilla":"924414","bugzilla_description":"CVE-2013-1881 librsvg2: local resource access vulnerability due to XML External Entity enablement","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["librsvg2-0:2.26.0-6.el6_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1881.json"},{"CVE":"CVE-2011-3146","severity":"moderate","public_date":"2011-09-06T00:00:00Z","advisories":["RHSA-2011:1289"],"bugzilla":"734936","bugzilla_description":"CVE-2011-3146 librsvg: object type mismatch leading to invalid pointer dereference","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["librsvg2-0:2.26.0-5.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3146.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librtas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librtas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/librtas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsamplerate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsamplerate_security_api_results.json
new file mode 100644
index 0000000..d67ee29
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsamplerate_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-7697","severity":"low","public_date":"2017-04-11T00:00:00Z","advisories":[],"bugzilla":"1441641","bugzilla_description":"CVE-2017-7697 libsamplerate: Buffer overflow in calc_output_single","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7697.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsane-hpaio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsane-hpaio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsane-hpaio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libseccomp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libseccomp_security_api_results.json
new file mode 100644
index 0000000..3a7ebf6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libseccomp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9893","severity":"moderate","public_date":"2019-03-14T00:00:00Z","advisories":["RHSA-2019:3624","RHBA-2019:3303"],"bugzilla":"1690897","bugzilla_description":"CVE-2019-9893 libseccomp: incorrect generation of syscall filters in libseccomp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["redhat-coreos-42.81.20191107.0","libseccomp-0:2.4.1-1.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsecret-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsecret-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsecret-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsecret_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsecret_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsecret_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-python3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-python3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-python3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-ruby_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-ruby_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-ruby_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libselinux_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsemanage-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsemanage-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsemanage-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsemanage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsemanage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsemanage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsepol-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsepol-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsepol-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsepol_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsepol_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsepol_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libserializer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libserializer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libserializer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libservicelog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libservicelog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libservicelog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsexy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsexy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsexy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libshout_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libshout_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libshout_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsigc++20_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsigc++20_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsigc++20_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmartcols_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmartcols_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmartcols_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmbclient_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmbclient_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmbclient_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmbios_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmbios_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmbios_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmi_security_api_results.json
new file mode 100644
index 0000000..16b4ead
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsmi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-2891","severity":"moderate","public_date":"2010-10-20T00:00:00Z","advisories":[],"bugzilla":"647520","bugzilla_description":"CVE-2010-2891 libsmi: buffer overflow in smiGetNode can lead to arbitrary code execution","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2891.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsndfile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsndfile_security_api_results.json
new file mode 100644
index 0000000..878a598
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsndfile_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-3832","severity":"low","public_date":"2019-02-07T00:00:00Z","advisories":[],"bugzilla":"1677216","bugzilla_description":"CVE-2019-3832 libsndfile: incomplete fix for CVE-2018-19758 still allow to read beyond buffer limits","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3832.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19661","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1659627","bugzilla_description":"CVE-2018-19661 libsndfile: buffer over-read in the function i2ulaw_array in ulaw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19661.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19662","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2020:1636","RHSA-2020:3922"],"bugzilla":"1659631","bugzilla_description":"CVE-2018-19662 libsndfile: buffer over-read in the function i2alaw_array in alaw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["libsndfile-0:1.0.28-10.el8","libsndfile-0:1.0.25-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19662.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19432","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":[],"bugzilla":"1652566","bugzilla_description":"CVE-2018-19432 libsndfile:  OOB read in sf_write_int in sndfile.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19432.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-19758","severity":"low","public_date":"2018-10-29T00:00:00Z","advisories":[],"bugzilla":"1659638","bugzilla_description":"CVE-2018-19758 libsndfile: heap-based buffer over-read at wav.c in wav_write_header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19758.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-13419","severity":"low","public_date":"2018-07-05T00:00:00Z","advisories":[],"bugzilla":"1599152","bugzilla_description":"CVE-2018-13419 libsndfile: Memory leak in common.c:psf_allocate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13419.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-13139","severity":"moderate","public_date":"2018-07-03T00:00:00Z","advisories":["RHSA-2020:1185","RHSA-2020:1636"],"bugzilla":"1598480","bugzilla_description":"CVE-2018-13139 libsndfile: stack-based buffer overflow in sndfile-deinterleave utility","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libsndfile-0:1.0.25-11.el7","libsndfile-0:1.0.28-10.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-17456","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1524570","bugzilla_description":"CVE-2017-17456 libsndfile: SEGV on unknown address in the function d2alaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17457","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1524571","bugzilla_description":"CVE-2017-17457 libsndfile: SEGV on unknown address in the function d2ulaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17457.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16942","severity":"low","public_date":"2017-11-25T00:00:00Z","advisories":[],"bugzilla":"1517902","bugzilla_description":"CVE-2017-16942 libsndfile: divide-by-zero error in wav_w64_read_fmt_chunk()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-14634","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1499982","bugzilla_description":"CVE-2017-14634 libsndfile: Divide-by-zero in the double64_init() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14634.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14245","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1500006","bugzilla_description":"CVE-2017-14245 libsndfile: Out-of-bounds read in the function d2alaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14245.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14246","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1500007","bugzilla_description":"CVE-2017-14246 libsndfile: Out-of-bounds read in the function d2ulaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14246.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12562","severity":"low","public_date":"2017-08-05T00:00:00Z","advisories":[],"bugzilla":"1483140","bugzilla_description":"CVE-2017-12562 libsndfile: Heap-based Buffer Overflow in psf_binheader_writef function in common.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12562.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6892","severity":"low","public_date":"2017-05-23T00:00:00Z","advisories":[],"bugzilla":"1463326","bugzilla_description":"CVE-2017-6892 libsndfile: Information disclosure via aiff_read_chanmap() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6892.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-8361","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1449518","bugzilla_description":"CVE-2017-8361 libsndfile: Buffer overflow in the flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8361.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8362","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1449519","bugzilla_description":"CVE-2017-8362 libsndfile: Out-of-bounds read in the flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8362.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8365","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1449520","bugzilla_description":"CVE-2017-8365 libsndfile: Buffer over-read in the l2les_array function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8365.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8363","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1458694","bugzilla_description":"CVE-2017-8363 libsndfile: Heap buffer over-read in the flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8363.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7741","severity":"low","public_date":"2017-04-11T00:00:00Z","advisories":[],"bugzilla":"1442033","bugzilla_description":"CVE-2017-7741 libsndfile: Invalid memory write in flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7741.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7742","severity":"low","public_date":"2017-04-11T00:00:00Z","advisories":[],"bugzilla":"1442034","bugzilla_description":"CVE-2017-7742 libsndfile: Invalid memory read in flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7742.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7586","severity":"low","public_date":"2017-03-26T00:00:00Z","advisories":[],"bugzilla":"1440758","bugzilla_description":"CVE-2017-7586 libsndfile: Error in header_read() causing stack-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7586.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7585","severity":"low","public_date":"2017-03-24T00:00:00Z","advisories":[],"bugzilla":"1440756","bugzilla_description":"CVE-2017-7585 libsndfile: Stack-based buffer overflow in flac_buffer_copy()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7585.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-7805","severity":"moderate","public_date":"2015-10-12T00:00:00Z","advisories":[],"bugzilla":"1277897","bugzilla_description":"CVE-2015-7805 libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7805.json"},{"CVE":"CVE-2015-8075","severity":"low","public_date":"2015-07-10T00:00:00Z","advisories":[],"bugzilla":"1277915","bugzilla_description":"CVE-2015-8075 libsndfile: Out of bounds memory access in psf_strlcpy_crlf","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8075.json"},{"CVE":"CVE-2014-9756","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":[],"bugzilla":"1177254","bugzilla_description":"libsndfile: division by zero leading to denial of service in psf_fwrite()","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9756.json"},{"CVE":"CVE-2014-9496","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":[],"bugzilla":"1178840","bugzilla_description":"CVE-2014-9496 libsndfile: 2 buffer overruns in sd2_parse_rsrc_fork()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9496.json"},{"CVE":"CVE-2011-2696","severity":"moderate","public_date":"2011-07-12T00:00:00Z","advisories":["RHSA-2011:1084"],"bugzilla":"721234","bugzilla_description":"CVE-2011-2696 libsndfile: Application crash due integer overflow by processing certain PAF audio files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["libsndfile-0:1.0.20-3.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2696.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsolv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsolv_security_api_results.json
new file mode 100644
index 0000000..c14cdf5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsolv_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-20387","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1797072","bugzilla_description":"CVE-2019-20387 libsolv: out-of-bounds read in repodata_schema2id in repodata.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20387.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20532","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":["RHSA-2019:2290"],"bugzilla":"1665532","bugzilla_description":"CVE-2018-20532 libsolv: NULL pointer dereference in function testcase_read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libsolv-0:0.6.34-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20532.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20533","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":["RHSA-2019:2290"],"bugzilla":"1665535","bugzilla_description":"CVE-2018-20533 libsolv: NULL pointer dereference in function testcase_str2dep_complex","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libsolv-0:0.6.34-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20533.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20534","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":["RHBA-2020:0062","RHSA-2019:2290","RHSA-2019:3583"],"bugzilla":"1665538","bugzilla_description":"CVE-2018-20534 libsolv: illegal address access in pool_whatprovides in src/pool.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libsolv-0:0.7.4-3.el8","libsolv-0:0.6.34-4.el7","redhat-coreos-43.81.202001142154.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20534.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsoup-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsoup-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsoup-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsoup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsoup_security_api_results.json
new file mode 100644
index 0000000..2cb9460
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsoup_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17266","severity":"important","public_date":"2019-10-06T00:00:00Z","advisories":[],"bugzilla":"1771292","bugzilla_description":"CVE-2019-17266 libsoup: heap-based over-read in soup_ntlm_parse_challenge() in soup-auth-ntlm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17266.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"8.2"},{"CVE":"CVE-2018-12910","severity":"moderate","public_date":"2018-07-03T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1597980","bugzilla_description":"CVE-2018-12910 libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libsoup-0:2.62.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12910.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-2885","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2459"],"bugzilla":"1479281","bugzilla_description":"CVE-2017-2885 libsoup: Stack based buffer overflow with HTTP Chunked Encoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libsoup-0:2.56.0-4.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2885.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2012-2132","severity":"low","public_date":"2012-04-23T00:00:00Z","advisories":[],"bugzilla":"817692","bugzilla_description":"CVE-2012-2132 libsoup: does not indicate whether or not an SSL certificate is valid","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2132.json"},{"CVE":"CVE-2011-2524","severity":"moderate","public_date":"2011-07-28T00:00:00Z","advisories":["RHSA-2011:1102"],"bugzilla":"720509","bugzilla_description":"CVE-2011-2524 libsoup: SoupServer directory traversal flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libsoup-0:2.28.2-1.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2524.json"},{"CVE":"CVE-2009-0585","severity":"moderate","public_date":"2009-03-12T00:00:00Z","advisories":["RHSA-2009:0344"],"bugzilla":"488026","bugzilla_description":"CVE-2009-0585 libsoup: integer overflow in soup_base64_encode()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["libsoup-0:2.2.98-2.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0585.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libspectre_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libspectre_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libspectre_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libspiro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libspiro_security_api_results.json
new file mode 100644
index 0000000..e8e1561
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libspiro_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-19847","severity":"moderate","public_date":"2019-12-17T00:00:00Z","advisories":[],"bugzilla":"1786740","bugzilla_description":"CVE-2019-19847 libspiro: stack-based off-by-one buffer overflow in spiro_to_bpath0() in spiro.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19847.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsrtp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsrtp_security_api_results.json
new file mode 100644
index 0000000..11bcd7d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsrtp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-6360","severity":"moderate","public_date":"2016-04-02T00:00:00Z","advisories":["RHSA-2020:3873"],"bugzilla":"1323702","bugzilla_description":"CVE-2015-6360 libsrtp: improper handling of CSRC count and extension header length in RTP header","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libsrtp-0:1.4.4-11.20101004cvs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6360.json"},{"CVE":"CVE-2013-2139","severity":"low","public_date":"2013-05-30T00:00:00Z","advisories":["RHSA-2020:3873"],"bugzilla":"970697","bugzilla_description":"CVE-2013-2139 libsrtp: buffer overflow in application of crypto profiles","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libsrtp-0:1.4.4-11.20101004cvs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2139.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libss_security_api_results.json
new file mode 100644
index 0000000..9837244
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libss_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16135","severity":"low","public_date":"2020-07-30T00:00:00Z","advisories":[],"bugzilla":"1862456","bugzilla_description":"CVE-2020-16135 libssh: NULL pointer dereference in sftpserver.c if ssh_buffer_new returns NULL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16135.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-1730","severity":"moderate","public_date":"2020-04-09T09:00:00Z","advisories":[],"bugzilla":"1801998","bugzilla_description":"CVE-2020-1730 libssh: denial of service when handling AES-CTR (or DES) ciphers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1730.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-14889","severity":"low","public_date":"2019-12-05T00:00:00Z","advisories":[],"bugzilla":"1772523","bugzilla_description":"CVE-2019-14889 libssh: unsanitized location in scp could lead to unwanted command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14889.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-17498","severity":"moderate","public_date":"2019-10-16T00:00:00Z","advisories":["RHSA-2020:3915"],"bugzilla":"1766898","bugzilla_description":"CVE-2019-17498 libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-190|CWE-200|CWE-400)","affected_packages":["libssh2-0:1.8.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17498.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-13115","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1731324","bugzilla_description":"CVE-2019-13115 libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-3855","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687303","bugzilla_description":"CVE-2019-3855 libssh2: Integer overflow in transport read resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3856","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687304","bugzilla_description":"CVE-2019-3856 libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3856.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3857","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687305","bugzilla_description":"CVE-2019-3857 libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3857.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3858","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687306","bugzilla_description":"CVE-2019-3858 libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3859","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687307","bugzilla_description":"CVE-2019-3859 libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3859.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3860","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687310","bugzilla_description":"CVE-2019-3860 libssh2: Out-of-bounds reads with specially crafted SFTP packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3861","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687311","bugzilla_description":"CVE-2019-3861 libssh2: Out-of-bounds reads with specially crafted SSH packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3861.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3862","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:1884"],"bugzilla":"1687312","bugzilla_description":"CVE-2019-3862 libssh2: Out-of-bounds memory comparison with specially crafted message channel request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["libssh2-0:1.4.3-12.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3862.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3863","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687313","bugzilla_description":"CVE-2019-3863 libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10933","severity":"important","public_date":"2018-10-16T12:00:00Z","advisories":[],"bugzilla":"1614973","bugzilla_description":"CVE-2018-10933 libssh: Authentication Bypass due to improper message callbacks implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2016-0739","severity":"moderate","public_date":"2016-02-23T00:00:00Z","advisories":["RHSA-2016:0566"],"bugzilla":"1305971","bugzilla_description":"CVE-2016-0739 libssh: bits/bytes confusion resulting in truncated Difffie-Hellman secret length","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-704","affected_packages":["libssh-0:0.7.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0739.json"},{"CVE":"CVE-2016-0787","severity":"moderate","public_date":"2016-02-23T00:00:00Z","advisories":["RHSA-2016:0428"],"bugzilla":"1306021","bugzilla_description":"CVE-2016-0787 libssh2: bits/bytes confusion resulting in truncated Diffie-Hellman secret length","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-704","affected_packages":["libssh2-0:1.4.2-2.el6_7.1","libssh2-0:1.4.3-10.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0787.json"},{"CVE":"CVE-2015-3146","severity":"moderate","public_date":"2015-04-30T00:00:00Z","advisories":[],"bugzilla":"1213775","bugzilla_description":"CVE-2015-3146 libssh: null pointer dereference due to a logical error in the handling of a SSH_MSG_NEWKEYS and KEXDH_REPLY packets","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3146.json"},{"CVE":"CVE-2015-1782","severity":"low","public_date":"2015-03-11T00:00:00Z","advisories":["RHSA-2015:2140"],"bugzilla":"1199511","bugzilla_description":"CVE-2015-1782 libssh2: Using SSH_MSG_KEXINIT data unbounded","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-130","affected_packages":["libssh2-0:1.4.3-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1782.json"},{"CVE":"CVE-2014-0017","severity":"moderate","public_date":"2014-03-04T00:00:00Z","advisories":[],"bugzilla":"1072191","bugzilla_description":"CVE-2014-0017 libssh: Improper initialization of PRNG after fork()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0017.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libssh2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libssh2_security_api_results.json
new file mode 100644
index 0000000..5a1a524
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libssh2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16135","severity":"low","public_date":"2020-07-30T00:00:00Z","advisories":[],"bugzilla":"1862456","bugzilla_description":"CVE-2020-16135 libssh: NULL pointer dereference in sftpserver.c if ssh_buffer_new returns NULL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16135.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-1730","severity":"moderate","public_date":"2020-04-09T09:00:00Z","advisories":[],"bugzilla":"1801998","bugzilla_description":"CVE-2020-1730 libssh: denial of service when handling AES-CTR (or DES) ciphers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1730.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-14889","severity":"low","public_date":"2019-12-05T00:00:00Z","advisories":[],"bugzilla":"1772523","bugzilla_description":"CVE-2019-14889 libssh: unsanitized location in scp could lead to unwanted command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14889.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-17498","severity":"moderate","public_date":"2019-10-16T00:00:00Z","advisories":["RHSA-2020:3915"],"bugzilla":"1766898","bugzilla_description":"CVE-2019-17498 libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-190|CWE-200|CWE-400)","affected_packages":["libssh2-0:1.8.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17498.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-13115","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1731324","bugzilla_description":"CVE-2019-13115 libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-3855","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687303","bugzilla_description":"CVE-2019-3855 libssh2: Integer overflow in transport read resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3856","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687304","bugzilla_description":"CVE-2019-3856 libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3856.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3857","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687305","bugzilla_description":"CVE-2019-3857 libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3857.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3858","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687306","bugzilla_description":"CVE-2019-3858 libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3859","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687307","bugzilla_description":"CVE-2019-3859 libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3859.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3860","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687310","bugzilla_description":"CVE-2019-3860 libssh2: Out-of-bounds reads with specially crafted SFTP packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3861","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687311","bugzilla_description":"CVE-2019-3861 libssh2: Out-of-bounds reads with specially crafted SSH packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3861.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3862","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:1884"],"bugzilla":"1687312","bugzilla_description":"CVE-2019-3862 libssh2: Out-of-bounds memory comparison with specially crafted message channel request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["libssh2-0:1.4.3-12.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3862.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3863","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687313","bugzilla_description":"CVE-2019-3863 libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10933","severity":"important","public_date":"2018-10-16T12:00:00Z","advisories":[],"bugzilla":"1614973","bugzilla_description":"CVE-2018-10933 libssh: Authentication Bypass due to improper message callbacks implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2016-0787","severity":"moderate","public_date":"2016-02-23T00:00:00Z","advisories":["RHSA-2016:0428"],"bugzilla":"1306021","bugzilla_description":"CVE-2016-0787 libssh2: bits/bytes confusion resulting in truncated Diffie-Hellman secret length","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-704","affected_packages":["libssh2-0:1.4.2-2.el6_7.1","libssh2-0:1.4.3-10.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0787.json"},{"CVE":"CVE-2015-1782","severity":"low","public_date":"2015-03-11T00:00:00Z","advisories":["RHSA-2015:2140"],"bugzilla":"1199511","bugzilla_description":"CVE-2015-1782 libssh2: Using SSH_MSG_KEXINIT data unbounded","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-130","affected_packages":["libssh2-0:1.4.3-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1782.json"},{"CVE":"CVE-2014-0017","severity":"moderate","public_date":"2014-03-04T00:00:00Z","advisories":[],"bugzilla":"1072191","bugzilla_description":"CVE-2014-0017 libssh: Improper initialization of PRNG after fork()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0017.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_autofs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_autofs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_autofs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_certmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_certmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_certmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_idmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_idmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_idmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_nss_idmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_nss_idmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_nss_idmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_simpleifp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_simpleifp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_simpleifp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_sudo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_sudo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsss_sudo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstaroffice_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstaroffice_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstaroffice_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstdc++-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstdc++-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstdc++-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstdc++-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstdc++-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstdc++-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstdc++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstdc++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstdc++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-arcconf-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-arcconf-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-arcconf-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-hpsa-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-hpsa-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-hpsa-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-local-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-local-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-local-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-megaraid-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-megaraid-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-megaraid-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-nfs-plugin-clibs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-nfs-plugin-clibs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-nfs-plugin-clibs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-nfs-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-nfs-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-nfs-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-nstor-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-nstor-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-nstor-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-python-clibs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-python-clibs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-python-clibs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-smis-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-smis-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-smis-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-targetd-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-targetd-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-targetd-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-udev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-udev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt-udev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libstoragemgmt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsysfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsysfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libsysfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtalloc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtalloc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtalloc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtar_security_api_results.json
new file mode 100644
index 0000000..673543d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtar_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4397","severity":"moderate","public_date":"2013-10-09T00:00:00Z","advisories":["RHSA-2013:1418"],"bugzilla":"1014492","bugzilla_description":"CVE-2013-4397 libtar: Heap-based buffer overflows by expanding a specially-crafted archive","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtar-0:1.2.11-17.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4397.json"},{"CVE":"CVE-2013-4420","severity":"low","public_date":"2013-10-01T00:00:00Z","advisories":[],"bugzilla":"1018150","bugzilla_description":"CVE-2013-4420 libtar: missing validation of file names","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4420.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtasn1-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtasn1-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtasn1-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtasn1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtasn1_security_api_results.json
new file mode 100644
index 0000000..d5f5033
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtasn1_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1000654","severity":"low","public_date":"2018-08-12T00:00:00Z","advisories":[],"bugzilla":"1621972","bugzilla_description":"CVE-2018-1000654 libtasn1: Infinite loop in _asn1_expand_object_id(ptree) leads to memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000654.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-6003","severity":"moderate","public_date":"2018-01-04T00:00:00Z","advisories":[],"bugzilla":"1535578","bugzilla_description":"CVE-2018-6003 libtasn1: Stack exhaustion due to indefinite recursion during BER decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6003.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10790","severity":"low","public_date":"2017-06-22T00:00:00Z","advisories":[],"bugzilla":"1473192","bugzilla_description":"CVE-2017-10790 libtasn1: NULL pointer dereference in the _asn1_check_identifier function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10790.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6891","severity":"low","public_date":"2017-05-18T00:00:00Z","advisories":[],"bugzilla":"1456763","bugzilla_description":"CVE-2017-6891 libtasn1: Stack-based buffer overflow in asn1_find_node()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6891.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-4008","severity":"moderate","public_date":"2016-04-11T00:00:00Z","advisories":[],"bugzilla":"1325965","bugzilla_description":"CVE-2016-4008 libtasn1: infinite loop while parsing DER certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4008.json"},{"CVE":"CVE-2015-3622","severity":"moderate","public_date":"2015-04-30T00:00:00Z","advisories":["RHSA-2017:1860"],"bugzilla":"1218141","bugzilla_description":"CVE-2015-3622 libtasn1: heap overflow flaw in _asn1_extract_der_octet()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libtasn1-0:4.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-2806","severity":"low","public_date":"2015-03-26T00:00:00Z","advisories":["RHSA-2017:1860"],"bugzilla":"1207192","bugzilla_description":"CVE-2015-2806 libtasn1: stack overflow in asn1_der_decoding","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtasn1-0:4.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2806.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-3467","severity":"moderate","public_date":"2014-05-25T00:00:00Z","advisories":["RHSA-2014:0596","RHSA-2014:0687","RHSA-2014:0815","RHSA-2014:0594"],"bugzilla":"1102022","bugzilla_description":"CVE-2014-3467 libtasn1: multiple boundary check issues","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libtasn1-0:2.3-6.el6_5","rhev-hypervisor6-0:6.5-20140624.0.el6ev","gnutls-0:1.4.1-16.el5_10","libtasn1-0:3.3-5.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3467.json"},{"CVE":"CVE-2014-3468","severity":"moderate","public_date":"2014-05-25T00:00:00Z","advisories":["RHSA-2014:0596","RHSA-2014:0687","RHSA-2014:0815","RHSA-2014:0594"],"bugzilla":"1102323","bugzilla_description":"CVE-2014-3468 libtasn1: asn1_get_bit_der() can return negative bit length","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-392->CWE-119","affected_packages":["libtasn1-0:2.3-6.el6_5","rhev-hypervisor6-0:6.5-20140624.0.el6ev","gnutls-0:1.4.1-16.el5_10","libtasn1-0:3.3-5.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3468.json"},{"CVE":"CVE-2014-3469","severity":"moderate","public_date":"2014-05-25T00:00:00Z","advisories":["RHSA-2014:0596","RHSA-2014:0687","RHSA-2014:0815","RHSA-2014:0594"],"bugzilla":"1102329","bugzilla_description":"CVE-2014-3469 libtasn1: asn1_read_value_type() NULL pointer dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["libtasn1-0:2.3-6.el6_5","rhev-hypervisor6-0:6.5-20140624.0.el6ev","gnutls-0:1.4.1-16.el5_10","libtasn1-0:3.3-5.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3469.json"},{"CVE":"CVE-2012-1569","severity":"important","public_date":"2012-03-19T00:00:00Z","advisories":["RHSA-2012:0427","RHSA-2012:0428","RHSA-2012:0531","RHSA-2012:0488"],"bugzilla":"804920","bugzilla_description":"CVE-2012-1569 libtasn1: DER decoding buffer overflow (GNUTLS-SA-2012-3, MU-201202-02)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtasn1-0:2.3-3.el6_2.1","rhev-hypervisor6-0:6.2-20120423.1.el6_2","gnutls-0:1.4.1-7.el5_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1569.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtdb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtdb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libteam_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libteam_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libteam_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtevent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtevent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtevent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libthai_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libthai_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libthai_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtheora_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtheora_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtheora_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtiff-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtiff-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtiff-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtiff_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtiff_security_api_results.json
new file mode 100644
index 0000000..39674a4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtiff_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17546","severity":"moderate","public_date":"2019-08-15T00:00:00Z","advisories":["RHSA-2020:3902"],"bugzilla":"1765705","bugzilla_description":"CVE-2019-17546 libtiff: integer overflow leading to heap-based buffer overflow in tif_getimage.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["libtiff-0:4.0.3-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17546.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-14973","severity":"moderate","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2020:3902","RHSA-2020:1688"],"bugzilla":"1745951","bugzilla_description":"CVE-2019-14973 libtiff: integer overflow in _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["libtiff-0:4.0.3-35.el7","libtiff-0:4.0.9-17.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14973.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-6128","severity":"low","public_date":"2019-01-04T00:00:00Z","advisories":[],"bugzilla":"1667122","bugzilla_description":"CVE-2019-6128 libtiff: memory leak in TIFFFdOpen function in tif_unix.c when using pal2rgb","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-244","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6128.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-7663","severity":null,"public_date":"2018-12-18T00:00:00Z","advisories":[],"bugzilla":"1677528","bugzilla_description":"CVE-2019-7663 libtiff: integer overflow in libtiff/tif_dirwrite.c resulting in an invalid pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-19210","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":[],"bugzilla":"1649385","bugzilla_description":"CVE-2018-19210 libtiff: NULL pointer dereference in TIFFWriteDirectorySec function in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19210.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18661","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1644448","bugzilla_description":"CVE-2018-18661 libtiff: tiff2bw tool failed memory allocation leads to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18661.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18557","severity":"moderate","public_date":"2018-10-14T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1644229","bugzilla_description":"CVE-2018-18557 libtiff: Out-of-bounds write in tif_jbig.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18557.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17795","severity":"low","public_date":"2018-10-02T00:00:00Z","advisories":[],"bugzilla":"1635091","bugzilla_description":"CVE-2018-17795 libtiff: Heap-based buffer overflow in tiff2pdf.c:t2p_write_pdf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-17100","severity":"low","public_date":"2018-09-16T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1631069","bugzilla_description":"CVE-2018-17100 libtiff: Integer overflow in multiply_ms in tools/ppm2tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17100.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-17101","severity":"low","public_date":"2018-09-16T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1631078","bugzilla_description":"CVE-2018-17101 libtiff: Two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17101.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-17000","severity":"low","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1630004","bugzilla_description":"CVE-2018-17000 libtiff: NULL pointer dereference in function _TIFFmemcmp at tif_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17000.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-15209","severity":"moderate","public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1614051","bugzilla_description":"CVE-2018-15209 libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16335","severity":"moderate","public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1624981","bugzilla_description":"CVE-2018-16335 libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16335.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14373","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609400","bugzilla_description":"CVE-2018-14373 libtiff: NULL dereference in TIFFFindField in tif_dirinfo.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14373.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14374","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609406","bugzilla_description":"CVE-2018-14374 libtiff: NULL dereference in unixErrorHandler in tif_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14374.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14375","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609411","bugzilla_description":"CVE-2018-14375 libtiff: NULL dereference in TIFFRGBAImageOK in tif_getimage.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14375.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14378","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609417","bugzilla_description":"CVE-2018-14378 libtiff: NULL dereference in TIFFWriteBufferSetup in tif_write.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14378.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12900","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2019:2053","RHSA-2019:3419"],"bugzilla":"1595575","bugzilla_description":"CVE-2018-12900 libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libtiff-0:4.0.3-32.el7","libtiff-0:4.0.9-15.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12900.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10963","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1579058","bugzilla_description":"CVE-2018-10963 libtiff: reachable assertion in TIFFWriteDirectorySec function in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10963.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10779","severity":"low","public_date":"2018-05-07T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1577311","bugzilla_description":"CVE-2018-10779 libtiff: heap-based buffer over-read in TIFFWriteScanline function in tif_write.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10779.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10801","severity":"low","public_date":"2018-05-07T00:00:00Z","advisories":[],"bugzilla":"1577392","bugzilla_description":"CVE-2018-10801 libtiff: memory leak in bmp2tiff tool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10801.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10126","severity":"low","public_date":"2018-04-18T00:00:00Z","advisories":[],"bugzilla":"1572766","bugzilla_description":"CVE-2018-10126 libtiff: NULL pointer dereference in the jpeg_fdct_16x16 function in jfdctint.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8905","severity":"low","public_date":"2018-03-17T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1559704","bugzilla_description":"CVE-2018-8905 libtiff: heap-based buffer overflow in tif_lzw.c:LZWDecodeCompat() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8905.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-7456","severity":"low","public_date":"2018-02-24T00:00:00Z","advisories":["RHSA-2019:2053","RHSA-2019:2051"],"bugzilla":"1556708","bugzilla_description":"CVE-2018-7456 libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["compat-libtiff3-0:3.9.4-12.el7","libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5784","severity":"low","public_date":"2018-01-18T00:00:00Z","advisories":[],"bugzilla":"1537740","bugzilla_description":"CVE-2018-5784 libtiff: uncontrolled resource consumption in TIFFSetDirectory function in tif_dir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5784.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5360","severity":"low","public_date":"2018-01-12T00:00:00Z","advisories":[],"bugzilla":"1535494","bugzilla_description":"CVE-2018-5360 LibTIFF: heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5360.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18013","severity":"moderate","public_date":"2017-12-29T00:00:00Z","advisories":[],"bugzilla":"1530440","bugzilla_description":"CVE-2017-18013 libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18013.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-17973","severity":"moderate","public_date":"2017-12-29T00:00:00Z","advisories":[],"bugzilla":"1530912","bugzilla_description":"CVE-2017-17973 libtiff: heap-based use after free in tiff2pdf.c:t2p_writeproc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-17942","severity":"low","public_date":"2017-12-28T00:00:00Z","advisories":[],"bugzilla":"1529524","bugzilla_description":"CVE-2017-17942 libtiff: Heap-based buffer overflow in PackBitsEncode function in tif_packbits.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-17095","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":[],"bugzilla":"1524284","bugzilla_description":"CVE-2017-17095 libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16232","severity":"low","public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1516189","bugzilla_description":"CVE-2017-16232 libtiff: Memory leaks in tif_open.c, tif_lzw.c, and tif_aux.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13726","severity":"low","public_date":"2017-08-21T00:00:00Z","advisories":[],"bugzilla":"1488886","bugzilla_description":"CVE-2017-13726 libtiff: Reachable assertion abort in the function TIFFWriteDirectorySec()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13726.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13727","severity":"low","public_date":"2017-08-21T00:00:00Z","advisories":[],"bugzilla":"1488887","bugzilla_description":"CVE-2017-13727 libtiff: Reachable assertion abort in the function TIFFWriteDirectoryTagSubifd()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13727.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12944","severity":"low","public_date":"2017-08-06T00:00:00Z","advisories":[],"bugzilla":"1487202","bugzilla_description":"CVE-2017-12944 libtiff: Mishandled memory allocation for short files in the TIFFReadDirEntryArray function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12944.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11613","severity":null,"public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475530","bugzilla_description":"CVE-2017-11613 libtiff: Memory leak via corrupt td_imagelength in TIFFOpen function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11613.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11335","severity":"moderate","public_date":"2017-07-14T00:00:00Z","advisories":[],"bugzilla":"1474356","bugzilla_description":"CVE-2017-11335 libtiff: Heap-based buffer overflow in tiff2pdf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11335.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-9935","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469725","bugzilla_description":"CVE-2017-9935 libtiff: Heap-based buffer overflow in t2p_write_pdf function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9935.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9936","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469728","bugzilla_description":"CVE-2017-9936 libtiff: memory leak in tif_jbig.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9936.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9937","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469732","bugzilla_description":"CVE-2017-9937 libtiff: memory malloc failure in tif_jbig.c could cause DOS.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9937.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10688","severity":"low","public_date":"2017-06-29T00:00:00Z","advisories":[],"bugzilla":"1470241","bugzilla_description":"CVE-2017-10688 libtiff: Assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10688.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9815","severity":"low","public_date":"2017-06-22T00:00:00Z","advisories":[],"bugzilla":"1464449","bugzilla_description":"CVE-2017-9815 libtiff: Memory leak in the TIFFReadDirEntryLong8Array function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9147","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1454655","bugzilla_description":"CVE-2017-9147 libtiff: Out of bounds read in _TIFFVGetField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9147.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9117","severity":"moderate","public_date":"2017-05-07T00:00:00Z","advisories":[],"bugzilla":"1456756","bugzilla_description":"CVE-2017-9117 libtiff: Heap-based buffer over-read in bmp2tiff","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9117.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9403","severity":"low","public_date":"2017-04-20T00:00:00Z","advisories":[],"bugzilla":"1458902","bugzilla_description":"CVE-2017-9403 libtiff: Memory leak in TIFFReadDirEntryLong8Array","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9403.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9404","severity":"low","public_date":"2017-04-20T00:00:00Z","advisories":[],"bugzilla":"1458904","bugzilla_description":"CVE-2017-9404 libtiff: Memory leak in OJPEGReadHeaderInfoSecTablesQTable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9404.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7595","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441248","bugzilla_description":"CVE-2017-7595 libtiff: Divide-by-zero in JPEGSetupEncode (tiff_jpeg.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7595.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7596","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441250","bugzilla_description":"CVE-2017-7596 libtiff: Float out of range issue in tif_dir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7596.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7597","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441252","bugzilla_description":"CVE-2017-7597 libtiff: Float out of range issue in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7597.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7598","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441254","bugzilla_description":"CVE-2017-7598 libtiff: Divide-by-zero in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7598.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7599","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441259","bugzilla_description":"CVE-2017-7599 libtiff: Unsigned short out of range in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7599.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7600","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441260","bugzilla_description":"CVE-2017-7600 libtiff: Unsigned char out of range in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7600.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7601","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441261","bugzilla_description":"CVE-2017-7601 libtiff: Signed integer overflow in tif_jpeg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7601.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7602","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441263","bugzilla_description":"CVE-2017-7602 libtiff: Signed integer overflow in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7602.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5563","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1416109","bugzilla_description":"CVE-2017-5563 libtiff: Heap-buffer overflow in LZWEncode tif_lzw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5563.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5225","severity":"moderate","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1412716","bugzilla_description":"CVE-2017-5225 libtiff: Heap-buffer overflow in tools/tiffcp via crafted BitsPerSample value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5225.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-7592","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441240","bugzilla_description":"CVE-2017-7592 libtiff: Left shift of unsigned char without a cast","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-704","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7592.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7593","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441246","bugzilla_description":"CVE-2017-7593 libtiff: tif_rawdata not properly initialized in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7593.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7594","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441247","bugzilla_description":"CVE-2017-7594 libtiff: Memory leak in OJPEGReadHeaderInfoSecTablesDcTable function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7594.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10094","severity":"moderate","public_date":"2016-12-20T00:00:00Z","advisories":[],"bugzilla":"1410119","bugzilla_description":"CVE-2016-10094 libtiff: Off-by-one error in t2p_readwrite_pdf_image_tile() causing heap buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10094.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10095","severity":null,"public_date":"2016-12-04T00:00:00Z","advisories":[],"bugzilla":"1410063","bugzilla_description":"CVE-2016-10095 libtiff: Stack-based buffer overflow in _TIFFVGetField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10095.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-10092","severity":"moderate","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1410067","bugzilla_description":"CVE-2016-10092 libtiff: Heap-based buffer overflow in _TIFFFax3fillruns","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10092.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10270","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438441","bugzilla_description":"CVE-2016-10270 libtiff: Heap-based buffer overflow in tiff_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10270.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10269","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438443","bugzilla_description":"CVE-2016-10269 libtiff: Heap-based buffer overflow in tiff_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10269.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10267","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438449","bugzilla_description":"CVE-2016-10267 libtiff: Divide-by-zero in tif_ojpeg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10267.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10271","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438453","bugzilla_description":"CVE-2016-10271 libtiff: Heap-based buffer overflow in tif_fax3.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10271.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10272","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438458","bugzilla_description":"CVE-2016-10272 libtiff: Heap-based buffer overflow in tif_next.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10272.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10268","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1438447","bugzilla_description":"CVE-2016-10268 libtiff: Integer underflow in tiffcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10268.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10266","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1438472","bugzilla_description":"CVE-2016-10266 libtiff: Divide-by-zero in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10266.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10093","severity":"moderate","public_date":"2016-11-27T00:00:00Z","advisories":[],"bugzilla":"1410116","bugzilla_description":"CVE-2016-10093 libtiff: Integer overflow in DECLAREreadFunc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10093.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9453","severity":"moderate","public_date":"2016-11-18T00:00:00Z","advisories":[],"bugzilla":"1397723","bugzilla_description":"CVE-2016-9453 libtiff: Out-of-bounds access in t2p_readwrite_pdf_image_tile()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9453.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9448","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1397734","bugzilla_description":"CVE-2016-9448 libtiff: Null pointer dereference in TIFFFetchNormalTag() (regression of CVE-2016-9297)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9532","severity":"low","public_date":"2016-11-11T00:00:00Z","advisories":[],"bugzilla":"1397726","bugzilla_description":"CVE-2016-9532 libtiff: Multiple uint32 overflows leading to heap buffer over-read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9532.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9273","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1395164","bugzilla_description":"CVE-2016-9273 libtiff: Out-of-bounds heap read in cpStrips","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9273.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9297","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1395264","bugzilla_description":"CVE-2016-9297 libtiff: Out-of-bounds heap read in _TIFFPrintField (tif_print.c:127)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-170","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9297.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9535","severity":"moderate","public_date":"2016-11-04T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397755","bugzilla_description":"CVE-2016-9535 libtiff: Predictor heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-5652","severity":"moderate","public_date":"2016-10-25T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1389222","bugzilla_description":"CVE-2016-5652 libtiff: tiff2pdf JPEG Compression Tables Heap Buffer Overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-5875","severity":"important","public_date":"2016-10-25T00:00:00Z","advisories":[],"bugzilla":"1389228","bugzilla_description":"CVE-2016-5875 libtiff: PixarLogDecode Heap Buffer Overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5875.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-8331","severity":"moderate","public_date":"2016-10-25T00:00:00Z","advisories":[],"bugzilla":"1389229","bugzilla_description":"CVE-2016-8331 libtiff: FAX IFD Entry Parsing Type Confusion","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-9539","severity":"moderate","public_date":"2016-10-14T00:00:00Z","advisories":[],"bugzilla":"1397767","bugzilla_description":"CVE-2016-9539 libtiff: Out-of-bounds read in readContigTilesIntoBuffer()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9539.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9538","severity":"moderate","public_date":"2016-10-08T00:00:00Z","advisories":[],"bugzilla":"1397765","bugzilla_description":"CVE-2016-9538 libtiff: Integer overflow leads to reading undefined buffer in readContigStripsIntoBuffer()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9538.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9540","severity":"moderate","public_date":"2016-10-08T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397768","bugzilla_description":"CVE-2016-9540 libtiff: cpStripToTile heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9540.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9534","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397751","bugzilla_description":"CVE-2016-9534 libtiff: TIFFFlushData1 heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9534.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9536","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397758","bugzilla_description":"CVE-2016-9536 libtiff: t2p_process_jpeg_strip heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9537","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397760","bugzilla_description":"CVE-2016-9537 libtiff: Out-of-bounds write vulnerabilities in tools/tiffcrop.c","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9537.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9533","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397769","bugzilla_description":"CVE-2016-9533 libtiff: PixarLog horizontalDifference heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9533.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6223","severity":"moderate","public_date":"2016-07-10T00:00:00Z","advisories":[],"bugzilla":"1356867","bugzilla_description":"CVE-2016-6223 libtiff: Out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6223.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-5322","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346683","bugzilla_description":"CVE-2016-5322 libtiff: Out-of-bounds read in extractContigSamplesBytes() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5322.json"},{"CVE":"CVE-2016-5320","severity":"important","public_date":"2016-06-15T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1346687","bugzilla_description":"CVE-2016-5320 libtiff: Out-of-bounds write in PixarLogDecode() function in tif_pixarlog.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-5317","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346689","bugzilla_description":"CVE-2016-5317 libtiff: Out-of-bounds write in PixarLogDecode() function in libtiff.so","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5317.json"},{"CVE":"CVE-2016-5316","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346690","bugzilla_description":"CVE-2016-5316 libtiff: Out-of-bounds read in PixarLogCleanup() function in tif_pixarlog.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5316.json"},{"CVE":"CVE-2016-5315","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346694","bugzilla_description":"CVE-2016-5315 libtiff: Out-of-bounds read in setByteArray() function in tif_dir.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5315.json"},{"CVE":"CVE-2016-5321","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346695","bugzilla_description":"CVE-2016-5321 libtiff: tiffcrop readSeparateTilesIntoBuffer() memory corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5321.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-5323","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346696","bugzilla_description":"CVE-2016-5323 libtiff: more tiffcrop readSeparateTilesIntoBuffer() memory corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-5314","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346697","bugzilla_description":"CVE-2016-5314 libtiff: Out-of-bounds write in PixarLogDecode() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5314.json"},{"CVE":"CVE-2016-5102","severity":"moderate","public_date":"2016-05-30T00:00:00Z","advisories":[],"bugzilla":"1343407","bugzilla_description":"CVE-2016-5102 libtiff: Buffer overflow in readgifimage()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5102.json"},{"CVE":"CVE-2016-5318","severity":"moderate","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1344068","bugzilla_description":"CVE-2016-5318 libtiff: Stack-based buffer overflow in thumbnail's _TIFFVGetField function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5318.json"},{"CVE":"CVE-2016-5319","severity":"moderate","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1344069","bugzilla_description":"CVE-2016-5319 libtiff: Heap-based buffer overflow in bmp2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5319.json"},{"CVE":"CVE-2016-3990","severity":"important","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1326246","bugzilla_description":"CVE-2016-3990 libtiff: out-of-bounds write in horizontalDifference8()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3990.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3991","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1326249","bugzilla_description":"CVE-2016-3991 libtiff: out-of-bounds write in loadImage() function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3991.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-3633","severity":"low","public_date":"2016-04-11T00:00:00Z","advisories":[],"bugzilla":"1326255","bugzilla_description":"CVE-2016-3633 libtiff: out-of-bounds read in the _setrow function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3633.json"},{"CVE":"CVE-2016-3623","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325089","bugzilla_description":"CVE-2016-3623 libtiff: divide by zero in the rgb2ycybr tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3623.json"},{"CVE":"CVE-2016-3624","severity":"low","public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325090","bugzilla_description":"CVE-2016-3624 libtiff: out of bounds write in the rgb2ycybr tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3624.json"},{"CVE":"CVE-2016-3625","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325091","bugzilla_description":"CVE-2016-3625 libtiff: out of bounds read in the tiff2bw tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3625.json"},{"CVE":"CVE-2016-3945","severity":"moderate","public_date":"2016-04-08T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1325093","bugzilla_description":"CVE-2016-3945 libtiff: out-of-bounds write in the tiff2rgba tool","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3945.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3632","severity":"moderate","public_date":"2016-04-08T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1325095","bugzilla_description":"CVE-2016-3632 libtiff: out-of-bounds write in _TIFFVGetField function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3632.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3658","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1326257","bugzilla_description":"CVE-2016-3658 libtiff: out-of-bounds read in the TIFFWriteDirectoryTagLongLong8Array function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3658.json"},{"CVE":"CVE-2016-3634","severity":"low","public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1326267","bugzilla_description":"CVE-2016-3634 libtiff: out-of-bounds read in the tagCompare function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3634.json"},{"CVE":"CVE-2016-3619","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316569","bugzilla_description":"CVE-2016-3619 libtiff: bmp2tiff DumpModeEncode OOB read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3619.json"},{"CVE":"CVE-2016-3620","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316859","bugzilla_description":"CVE-2016-3620 libtiff: Out-of-bound read in ZIPEncode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3620.json"},{"CVE":"CVE-2016-3631","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316872","bugzilla_description":"CVE-2016-3631 libtiff: thumbnail tool out-of-bounds read vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3631.json"},{"CVE":"CVE-2016-3621","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1324822","bugzilla_description":"CVE-2016-3621 libtiff: out of bounds read in the bmp2tiff tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3621.json"},{"CVE":"CVE-2016-3622","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1324823","bugzilla_description":"CVE-2016-3622 libtiff: Division by zero in fpAcc function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3622.json"},{"CVE":"CVE-2016-3186","severity":"moderate","public_date":"2016-03-30T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1319666","bugzilla_description":"CVE-2016-3186 libtiff: buffer overflow in gif2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3186.json"},{"CVE":"CVE-2016-10371","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1449534","bugzilla_description":"CVE-2016-10371 libtiff: Assertion failure in TIFFWriteDirectoryTagCheckedRational","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10371.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8781","severity":"low","public_date":"2016-01-24T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1301649","bugzilla_description":"CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 libtiff: invalid assertion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8781.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8782","severity":"low","public_date":"2016-01-24T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1301649","bugzilla_description":"CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 libtiff: invalid assertion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8782.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8783","severity":"low","public_date":"2016-01-24T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1301649","bugzilla_description":"CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 libtiff: invalid assertion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8783.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8784","severity":"important","public_date":"2016-01-24T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1301652","bugzilla_description":"CVE-2015-8784 libtiff: out-of-bound write in NeXTDecode()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8784.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-8668","severity":"low","public_date":"2015-12-28T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1294425","bugzilla_description":"CVE-2015-8668 libtiff: OOB read in bmp2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8668.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-7554","severity":"moderate","public_date":"2015-12-26T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1294417","bugzilla_description":"CVE-2015-7554 libtiff: Invalid-write in _TIFFVGetField() when parsing some extension tags","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7554.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-8683","severity":"low","public_date":"2015-12-25T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1294427","bugzilla_description":"CVE-2015-8683 libtiff: Out-of-bounds when reading CIE Lab image format files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8683.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8665","severity":"low","public_date":"2015-12-24T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1294444","bugzilla_description":"CVE-2015-8665 libtiff: Out-of-bounds read in tif_getimage.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8665.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-7313","severity":"low","public_date":"2015-09-21T00:00:00Z","advisories":[],"bugzilla":"1265998","bugzilla_description":"CVE-2015-7313 libtiff: OOM when parsing crafted tiff files","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7313.json"},{"CVE":"CVE-2015-8870","severity":"moderate","public_date":"2015-01-28T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1402778","bugzilla_description":"CVE-2015-8870 libtiff: Integer overflow in tools/bmp2tiff.c","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-190","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2014-9655","severity":"moderate","public_date":"2014-12-29T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1190703","bugzilla_description":"CVE-2014-9655 libtiff: use of uninitialized memory in putcontig8bitYCbCr21tile and NeXTDecode","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9655.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2015-1547","severity":"moderate","public_date":"2014-12-29T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1190709","bugzilla_description":"CVE-2015-1547 libtiff: use of uninitialized memory in NeXTDecode","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2014-9330","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1177893","bugzilla_description":"CVE-2014-9330 libtiff: Out-of-bounds reads followed by a crash in bmp2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9330.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-8127","severity":"low","public_date":"2014-12-07T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1185805","bugzilla_description":"CVE-2014-8127 libtiff: out-of-bounds read with malformed TIFF image in multiple tools","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-8128","severity":"low","public_date":"2014-12-07T00:00:00Z","advisories":[],"bugzilla":"1185812","bugzilla_description":"CVE-2014-8128 libtiff: out-of-bounds write in multiple tools","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8128.json"},{"CVE":"CVE-2014-8129","severity":"low","public_date":"2014-12-07T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1185815","bugzilla_description":"CVE-2014-8129 libtiff: out-of-bounds read/write with malformed TIFF image in tiff2pdf","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8129.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2014-8130","severity":"low","public_date":"2014-12-07T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1185817","bugzilla_description":"CVE-2014-8130 libtiff: divide by zero in the tiffdither tool","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2013-4243","severity":"moderate","public_date":"2013-08-14T00:00:00Z","advisories":["RHSA-2014:0223","RHSA-2014:0222"],"bugzilla":"996052","bugzilla_description":"CVE-2013-4243 libtiff (gif2tiff): possible heap-based buffer overflow in readgifimage()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-10.el6_5","libtiff-0:3.8.2-19.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4243.json"},{"CVE":"CVE-2013-4244","severity":"moderate","public_date":"2013-08-14T00:00:00Z","advisories":["RHSA-2014:0223","RHSA-2014:0222"],"bugzilla":"996468","bugzilla_description":"CVE-2013-4244 libtiff (gif2tiff): OOB Write in LZW decompressor","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:3.9.4-10.el6_5","libtiff-0:3.8.2-19.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4244.json"},{"CVE":"CVE-2013-4231","severity":"moderate","public_date":"2013-08-01T00:00:00Z","advisories":["RHSA-2014:0223","RHSA-2014:0222"],"bugzilla":"995965","bugzilla_description":"CVE-2013-4231 libtiff (gif2tiff): GIF LZW decoder missing datasize value check","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libtiff-0:3.9.4-10.el6_5","libtiff-0:3.8.2-19.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4231.json"},{"CVE":"CVE-2013-4232","severity":"moderate","public_date":"2013-08-01T00:00:00Z","advisories":["RHSA-2014:0223","RHSA-2014:0222"],"bugzilla":"995975","bugzilla_description":"CVE-2013-4232 libtiff (tiff2pdf): use-after-free in t2p_readwrite_pdf_image()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["libtiff-0:3.9.4-10.el6_5","libtiff-0:3.8.2-19.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4232.json"},{"CVE":"CVE-2013-1961","severity":"low","public_date":"2013-05-02T00:00:00Z","advisories":["RHSA-2014:0223","RHSA-2014:0222"],"bugzilla":"952131","bugzilla_description":"CVE-2013-1961 libtiff (tiff2pdf): Stack-based buffer overflow with malformed image-length and resolution","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["libtiff-0:3.9.4-10.el6_5","libtiff-0:3.8.2-19.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1961.json"},{"CVE":"CVE-2013-1960","severity":"moderate","public_date":"2013-05-02T00:00:00Z","advisories":["RHSA-2014:0223","RHSA-2014:0222"],"bugzilla":"952158","bugzilla_description":"CVE-2013-1960 libtiff (tiff2pdf): Heap-based buffer overflow in t2_process_jpeg_strip()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-10.el6_5","libtiff-0:3.8.2-19.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1960.json"},{"CVE":"CVE-2012-4564","severity":"moderate","public_date":"2012-11-02T00:00:00Z","advisories":["RHSA-2012:1590"],"bugzilla":"871700","bugzilla_description":"CVE-2012-4564 libtiff: Missing return value check in ppm2tiff leading to heap-buffer overflow when reading a tiff file","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-9.el6_3","libtiff-0:3.8.2-18.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4564.json"},{"CVE":"CVE-2012-5581","severity":"moderate","public_date":"2012-10-18T00:00:00Z","advisories":["RHSA-2012:1590"],"bugzilla":"867235","bugzilla_description":"CVE-2012-5581 libtiff: Stack-based buffer overflow when reading a tiled tiff file","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["libtiff-0:3.9.4-9.el6_3","libtiff-0:3.8.2-18.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5581.json"},{"CVE":"CVE-2012-4447","severity":"moderate","public_date":"2012-09-22T00:00:00Z","advisories":["RHSA-2012:1590"],"bugzilla":"860198","bugzilla_description":"CVE-2012-4447 libtiff: Heap-buffer overflow when processing a TIFF image with PixarLog Compression","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-9.el6_3","libtiff-0:3.8.2-18.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4447.json"},{"CVE":"CVE-2012-3401","severity":"moderate","public_date":"2012-07-18T00:00:00Z","advisories":["RHSA-2012:1590"],"bugzilla":"837577","bugzilla_description":"CVE-2012-3401 libtiff (tiff2pdf): Heap-based buffer overflow due to improper initialization of T2P context struct pointer","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-9.el6_3","libtiff-0:3.8.2-18.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3401.json"},{"CVE":"CVE-2012-2113","severity":"moderate","public_date":"2012-06-15T00:00:00Z","advisories":["RHSA-2012:1054"],"bugzilla":"810551","bugzilla_description":"CVE-2012-2113 libtiff: integer overflow in tiff2pdf leading to heap-buffer overflow when reading a tiled tiff file","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libtiff-0:3.9.4-6.el6_3","libtiff-0:3.8.2-15.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2113.json"},{"CVE":"CVE-2012-2088","severity":"important","public_date":"2012-06-15T00:00:00Z","advisories":["RHSA-2012:1054"],"bugzilla":"832864","bugzilla_description":"CVE-2012-2088 libtiff: Type conversion flaw leading to heap-buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-6.el6_3","libtiff-0:3.8.2-15.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2088.json"},{"CVE":"CVE-2012-1173","severity":"important","public_date":"2012-04-04T00:00:00Z","advisories":["RHSA-2012:0468"],"bugzilla":"803078","bugzilla_description":"CVE-2012-1173 libtiff: Heap-buffer overflow due to TileSize calculation when parsing tiff files","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.8.2-14.el5_8","libtiff-0:3.9.4-5.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1173.json"},{"CVE":"CVE-2011-1167","severity":"important","public_date":"2011-03-21T00:00:00Z","advisories":["RHSA-2011:0392"],"bugzilla":"684939","bugzilla_description":"CVE-2011-1167 libtiff: heap-based buffer overflow in thunder decoder (ZDI-11-107)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.8.2-7.el5_6.7","libtiff-0:3.9.4-1.el6_0.2","libtiff-0:3.6.1-18.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1167.json"},{"CVE":"CVE-2011-0192","severity":"important","public_date":"2011-03-02T00:00:00Z","advisories":["RHSA-2011:0318"],"bugzilla":"678635","bugzilla_description":"CVE-2011-0192 libtiff: buffer overflow in Fax4Decode","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libtiff-0:3.8.2-7.el5_6.6","libtiff-0:3.9.4-1.el6_0.1","libtiff-0:3.6.1-17.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0192.json"},{"CVE":"CVE-2011-0191","severity":"important","public_date":"2011-03-02T00:00:00Z","advisories":[],"bugzilla":"678956","bugzilla_description":"CVE-2011-0191 libtiff: buffer overflow in JPEGDecode","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0191.json"},{"CVE":"CVE-2010-3087","severity":"important","public_date":"2010-07-02T00:00:00Z","advisories":[],"bugzilla":"638301","bugzilla_description":"CVE-2010-3087 libtiff: DoS or possible arbitrary code execution via crafted TIFF image","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P/","CWE":"CWE-190->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3087.json"},{"CVE":"CVE-2010-2481","severity":"low","public_date":"2010-06-23T00:00:00Z","advisories":["RHSA-2010:0519"],"bugzilla":"611895","bugzilla_description":"CVE-2010-2481 libtiff: TIFFExtractData out-of-bounds read crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libtiff-0:3.8.2-7.el5_5.5","libtiff-0:3.6.1-12.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2481.json"},{"CVE":"CVE-2010-4665","severity":"low","public_date":"2010-06-22T00:00:00Z","advisories":["RHSA-2010:0519"],"bugzilla":"695887","bugzilla_description":"CVE-2010-4665 libtiff tiffdump integer overflow","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["libtiff-0:3.8.2-7.el5_5.5","libtiff-0:3.6.1-12.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4665.json"},{"CVE":"CVE-2010-2483","severity":"low","public_date":"2010-06-16T00:00:00Z","advisories":["RHSA-2010:0519"],"bugzilla":"611900","bugzilla_description":"CVE-2010-2483 libtiff: out-of-bounds read crash on images with invalid SamplesPerPixel values","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libtiff-0:3.8.2-7.el5_5.5","libtiff-0:3.6.1-12.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2483.json"},{"CVE":"CVE-2010-2065","severity":null,"public_date":"2010-06-15T00:00:00Z","advisories":[],"bugzilla":"601274","bugzilla_description":"CVE-2010-2065 libtiff: TIFFroundup() integer overflow in TIFFFillStrip()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2065.json"},{"CVE":"CVE-2010-1411","severity":"important","public_date":"2010-06-14T00:00:00Z","advisories":["RHSA-2010:0520","RHSA-2010:0519"],"bugzilla":"592361","bugzilla_description":"CVE-2010-1411 libtiff: integer overflows leading to heap overflow in Fax3SetupState","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["libtiff-0:3.8.2-7.el5_5.5","libtiff-0:3.6.1-12.el4_8.5","libtiff-0:3.5.7-34.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1411.json"},{"CVE":"CVE-2010-2597","severity":"low","public_date":"2010-06-12T00:00:00Z","advisories":["RHSA-2010:0519"],"bugzilla":"610776","bugzilla_description":"CVE-2010-2597 libtiff: use of uninitialized values crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:3.8.2-7.el5_5.5","libtiff-0:3.6.1-12.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2597.json"},{"CVE":"CVE-2010-2598","severity":"low","public_date":"2010-06-10T00:00:00Z","advisories":["RHSA-2010:0520"],"bugzilla":"610786","bugzilla_description":"CVE-2010-2598 libtiff: crash when reading image with not configured compression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:3.5.7-34.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2598.json"},{"CVE":"CVE-2010-2595","severity":"low","public_date":"2010-04-16T00:00:00Z","advisories":["RHSA-2010:0519"],"bugzilla":"610684","bugzilla_description":"CVE-2010-2595 libtiff: Array index error due improper handling of invalid ReferenceBlackWhite values","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:3.8.2-7.el5_5.5","libtiff-0:3.6.1-12.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2595.json"},{"CVE":"CVE-2010-2596","severity":"low","public_date":"2010-04-16T00:00:00Z","advisories":["RHSA-2014:0222"],"bugzilla":"610759","bugzilla_description":"CVE-2010-2596 libtiff: assertion failure on downsampled OJPEG file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:3.9.4-10.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2596.json"},{"CVE":"CVE-2009-2347","severity":"moderate","public_date":"2009-07-13T00:00:00Z","advisories":["RHSA-2009:1159"],"bugzilla":"510041","bugzilla_description":"CVE-2009-2347 libtiff: integer overflows in various inter-color spaces conversion tools (crash, ACE)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":["libtiff-0:3.6.1-12.el4_8.4","libtiff-0:3.8.2-7.el5_3.4","libtiff-0:3.5.7-33.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2347.json"},{"CVE":"CVE-2009-5022","severity":"important","public_date":"2009-02-09T00:00:00Z","advisories":["RHSA-2011:0452"],"bugzilla":"695885","bugzilla_description":"CVE-2009-5022 libtiff ojpeg buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-228->CWE-119","affected_packages":["libtiff-0:3.9.4-1.el6_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5022.json"},{"CVE":"CVE-2009-2285","severity":"moderate","public_date":"2009-01-03T00:00:00Z","advisories":["RHSA-2009:1159"],"bugzilla":"507465","bugzilla_description":"CVE-2009-2285 libtiff: LZWDecodeCompat underflow","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:3.6.1-12.el4_8.4","libtiff-0:3.8.2-7.el5_3.4","libtiff-0:3.5.7-33.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2285.json"},{"CVE":"CVE-2008-2327","severity":"important","public_date":"2008-08-26T00:00:00Z","advisories":["RHSA-2008:0863","RHSA-2008:0848","RHSA-2008:0847"],"bugzilla":"458674","bugzilla_description":"CVE-2008-2327 libtiff: use of uninitialized memory in LZW decoder","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.6.1-12.el4_7.2","libtiff-0:3.5.7-31.el3","libtiff-0:3.8.2-7.el5_2.2","libtiff-0:3.5.7-31.el2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2327.json"},{"CVE":"CVE-2006-3459","severity":"important","public_date":"2006-08-01T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0603"],"bugzilla":"199111","bugzilla_description":"CVE-2006-3459 Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3459.json"},{"CVE":"CVE-2006-3460","severity":"important","public_date":"2006-08-01T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0603"],"bugzilla":"199111","bugzilla_description":"CVE-2006-3459 Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3460.json"},{"CVE":"CVE-2006-3461","severity":"important","public_date":"2006-08-01T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0603"],"bugzilla":"199111","bugzilla_description":"CVE-2006-3459 Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3461.json"},{"CVE":"CVE-2006-3462","severity":"important","public_date":"2006-08-01T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0603"],"bugzilla":"199111","bugzilla_description":"CVE-2006-3459 Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3462.json"},{"CVE":"CVE-2006-3463","severity":"important","public_date":"2006-08-01T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0603"],"bugzilla":"199111","bugzilla_description":"CVE-2006-3459 Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3463.json"},{"CVE":"CVE-2006-3464","severity":"important","public_date":"2006-08-01T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0603"],"bugzilla":"199111","bugzilla_description":"CVE-2006-3459 Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3464.json"},{"CVE":"CVE-2006-3465","severity":"important","public_date":"2006-08-01T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0603"],"bugzilla":"199111","bugzilla_description":"CVE-2006-3459 Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3465.json"},{"CVE":"CVE-2006-2193","severity":"low","public_date":"2006-06-07T00:00:00Z","advisories":["RHSA-2008:0848"],"bugzilla":"194362","bugzilla_description":"CVE-2006-2193 tiff2pdf buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.6.1-12.el4_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2193.json"},{"CVE":"CVE-2006-2656","severity":"low","public_date":"2006-05-25T00:00:00Z","advisories":["RHSA-2006:0603"],"bugzilla":"193166","bugzilla_description":"CVE-2006-2656 tiffsplit buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2656.json"},{"CVE":"CVE-2006-2024","severity":"important","public_date":"2006-03-03T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0425"],"bugzilla":"1618083","bugzilla_description":"CVE-2006-2024 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.1","libtiff-0:3.6.1-10","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2024.json"},{"CVE":"CVE-2006-2025","severity":"important","public_date":"2006-03-03T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0425"],"bugzilla":"1618084","bugzilla_description":"CVE-2006-2025 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.1","libtiff-0:3.6.1-10","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2025.json"},{"CVE":"CVE-2006-2026","severity":"important","public_date":"2006-03-03T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0425"],"bugzilla":"1618085","bugzilla_description":"CVE-2006-2026 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.1","libtiff-0:3.6.1-10","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2026.json"},{"CVE":"CVE-2006-2120","severity":"moderate","public_date":"2006-02-08T00:00:00Z","advisories":["RHSA-2006:0425"],"bugzilla":"1618087","bugzilla_description":"CVE-2006-2120 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.1","libtiff-0:3.6.1-10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2120.json"},{"CVE":"CVE-2004-1183","severity":"low","public_date":"2005-01-05T00:00:00Z","advisories":["RHSA-2005:035","RHSA-2005:019"],"bugzilla":"1617390","bugzilla_description":"CVE-2004-1183 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.6.1-8","libtiff-0:3.5.7-22.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1183.json"},{"CVE":"CVE-2004-1307","severity":"moderate","public_date":"2004-12-21T00:00:00Z","advisories":["RHSA-2005:021","RHSA-2004:577"],"bugzilla":"1617405","bugzilla_description":"CVE-2004-1307 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-20.1","kdegraphics-7:3.1.3-3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1307.json"},{"CVE":"CVE-2004-1308","severity":"important","public_date":"2004-12-21T00:00:00Z","advisories":["RHSA-2005:035","RHSA-2005:021","RHSA-2005:019"],"bugzilla":"1617406","bugzilla_description":"CVE-2004-1308 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdegraphics-7:3.1.3-3.7","libtiff-0:3.6.1-8","libtiff-0:3.5.7-22.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1308.json"},{"CVE":"CVE-2004-0803","severity":"important","public_date":"2004-10-13T00:00:00Z","advisories":["RHSA-2005:354","RHSA-2005:021","RHSA-2004:577"],"bugzilla":"1617294","bugzilla_description":"CVE-2004-0803 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-20.1","kdegraphics-7:3.1.3-3.7","tetex-0:1.0.7-67.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0803.json"},{"CVE":"CVE-2004-0886","severity":"moderate","public_date":"2004-10-13T00:00:00Z","advisories":["RHSA-2005:354","RHSA-2005:021","RHSA-2004:577"],"bugzilla":"1617314","bugzilla_description":"CVE-2004-0886 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-20.1","kdegraphics-7:3.1.3-3.7","tetex-0:1.0.7-67.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0886.json"},{"CVE":"CVE-2004-0804","severity":null,"public_date":"2002-03-15T00:00:00Z","advisories":["RHSA-2005:354","RHSA-2005:021","RHSA-2004:577"],"bugzilla":"1617295","bugzilla_description":"CVE-2004-0804 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-20.1","kdegraphics-7:3.1.3-3.7","tetex-0:1.0.7-67.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0804.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtimezonemap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtimezonemap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtimezonemap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtirpc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtirpc_security_api_results.json
new file mode 100644
index 0000000..8d679e3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtirpc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-8779","severity":"important","public_date":"2017-05-03T00:00:00Z","advisories":["RHSA-2017:1262","RHBA-2017:1497","RHSA-2017:1263","RHSA-2017:1395","RHSA-2017:1268","RHSA-2017:1267"],"bugzilla":"1448124","bugzilla_description":"CVE-2017-8779 rpcbind, libtirpc, libntirpc: Memory leak when failing to parse XDR strings or bytearrays","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rpcbind-0:0.2.0-13.el6_9","libntirpc-0:1.4.3-4.el7rhgs","libtirpc-0:0.2.4-0.8.el7_3","libntirpc-0:1.4.3-2.el7","libntirpc-0:1.4.3-4.el6rhs","libtirpc-0:0.2.1-13.el6_9","rpcbind-0:0.2.0-38.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-4429","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1337136","bugzilla_description":"CVE-2016-4429 glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4429.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14621","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":[],"bugzilla":"1620290","bugzilla_description":"CVE-2018-14621 libtirpc: Infinite loop in EMFILE case in svc_vc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14621.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14622","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHBA-2017:1991"],"bugzilla":"1620293","bugzilla_description":"CVE-2018-14622 libtirpc: Segmentation fault in makefd_xprt return value in svc_vc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libtirpc-0:0.2.4-0.10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2013-1950","severity":"moderate","public_date":"2013-04-18T00:00:00Z","advisories":["RHSA-2013:0884"],"bugzilla":"948378","bugzilla_description":"CVE-2013-1950 libtirpc: invalid pointer free leads to rpcbind daemon crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtirpc-0:0.2.1-6.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1950.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtool-ltdl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtool-ltdl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtool-ltdl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtool-ltdl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtool-ltdl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtool-ltdl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtool_security_api_results.json
new file mode 100644
index 0000000..9baa68f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtool_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2009-3736","severity":"moderate","public_date":"2009-11-16T00:00:00Z","advisories":["RHSA-2009:1646","RHSA-2010:0039"],"bugzilla":"537941","bugzilla_description":"CVE-2009-3736 libtool: libltdl may load and execute code from a library in the current directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libtool-0:1.5.6-5.el4_8","gcc-0:4.1.2-46.el5_4.2","libtool-0:1.4.3-7","gcc-0:3.2.3-60","gcc-0:3.4.6-11.el4_8.1","libtool-0:1.5.22-7.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3736.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtranslit-m17n_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtranslit-m17n_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtranslit-m17n_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtranslit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtranslit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libtranslit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libudisks2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libudisks2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libudisks2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libunistring_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libunistring_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libunistring_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libunwind_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libunwind_security_api_results.json
new file mode 100644
index 0000000..618b179
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libunwind_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-3239","severity":"low","public_date":"2015-06-20T00:00:00Z","advisories":["RHSA-2015:1675","RHSA-2015:1768","RHSA-2015:1769"],"bugzilla":"1232265","bugzilla_description":"CVE-2015-3239 libunwind: off-by-one in dwarf_to_unw_regnum()","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-193","affected_packages":["libunwind-0:1.1-4.1.el6ost","libunwind-0:1.1-4.1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3239.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusbmuxd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusbmuxd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusbmuxd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusbx-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusbx-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusbx-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusbx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusbx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusbx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuser-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuser-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuser-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuser_security_api_results.json
new file mode 100644
index 0000000..ba0ee94
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuser_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-3245","severity":"moderate","public_date":"2015-07-23T00:00:00Z","advisories":["RHSA-2015:1483","RHSA-2015:1482"],"bugzilla":"1233043","bugzilla_description":"CVE-2015-3245 libuser: does not filter newline characters in the GECOS field","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-138","affected_packages":["libuser-0:0.56.13-8.el6_7","libuser-0:0.60-7.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3245.json"},{"CVE":"CVE-2015-3246","severity":"important","public_date":"2015-07-23T00:00:00Z","advisories":["RHSA-2015:1483","RHSA-2015:1482"],"bugzilla":"1233052","bugzilla_description":"CVE-2015-3246 libuser: Security flaw in handling /etc/passwd file","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["libuser-0:0.56.13-8.el6_7","libuser-0:0.60-7.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3246.json"},{"CVE":"CVE-2012-5630","severity":"low","public_date":"2013-03-28T00:00:00Z","advisories":[],"bugzilla":"884685","bugzilla_description":"CVE-2012-5630 libuser: TOCTOU race conditions by copying and removing directory trees","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5630.json"},{"CVE":"CVE-2012-5644","severity":"low","public_date":"2013-03-28T00:00:00Z","advisories":[],"bugzilla":"885724","bugzilla_description":"CVE-2012-5644 libuser: (Complete) Information disclosure when moving user's home directory","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5644.json"},{"CVE":"CVE-2011-0002","severity":"moderate","public_date":"2011-01-10T00:00:00Z","advisories":["RHSA-2011:0170"],"bugzilla":"643227","bugzilla_description":"CVE-2011-0002 libuser creates LDAP users with a default password","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["libuser-0:0.54.7-2.1.el5_5.2","libuser-0:0.52.5-1.1.el4_8.1","libuser-0:0.56.13-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0002.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusnic_verbs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusnic_verbs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libusnic_verbs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libutempter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libutempter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libutempter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuuid-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuuid-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuuid-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuuid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuuid_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libuuid_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libv4l_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libv4l_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libv4l_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libva-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libva-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libva-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libva_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libva_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libva_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvdpau_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvdpau_security_api_results.json
new file mode 100644
index 0000000..5715dde
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvdpau_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5198","severity":"moderate","public_date":"2015-08-31T00:00:00Z","advisories":[],"bugzilla":"1253824","bugzilla_description":"CVE-2015-5198 libvdpau incorrect check for security transition","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5198.json"},{"CVE":"CVE-2015-5199","severity":"moderate","public_date":"2015-08-31T00:00:00Z","advisories":[],"bugzilla":"1253826","bugzilla_description":"CVE-2015-5199 libvdpau directory traversal in dlopen","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5199.json"},{"CVE":"CVE-2015-5200","severity":"moderate","public_date":"2015-08-31T00:00:00Z","advisories":[],"bugzilla":"1253827","bugzilla_description":"CVE-2015-5200 libvdpau vulnerability in trace functionality","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5200.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto-libevent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto-libevent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto-libevent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto-tevent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto-tevent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto-tevent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libverto_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-bash-completion_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-bash-completion_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-bash-completion_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-cim_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-cim_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-cim_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-config-network_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-config-network_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-config-network_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-config-nwfilter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-config-nwfilter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-config-nwfilter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-interface_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-interface_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-interface_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-lxc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-lxc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-lxc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-network_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-network_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-network_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-nodedev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-nodedev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-nodedev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-nwfilter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-nwfilter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-nwfilter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-qemu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-qemu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-qemu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-secret_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-secret_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-secret_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-disk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-disk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-disk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-gluster_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-gluster_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-gluster_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-iscsi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-iscsi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-iscsi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-logical_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-logical_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-logical_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-mpath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-mpath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-mpath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-rbd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-rbd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-rbd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-scsi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-scsi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage-scsi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-driver-storage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-kvm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-kvm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon-kvm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-daemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-gconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-gconfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-gconfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-gobject_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-gobject_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-gobject_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-java-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-java-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-java-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-java_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-java_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-java_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-snmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-snmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt-snmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt_security_api_results.json
new file mode 100644
index 0000000..76e3c46
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvirt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-25637","severity":"moderate","public_date":"2020-09-30T00:00:00Z","advisories":[],"bugzilla":"1881037","bugzilla_description":"CVE-2020-25637 libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25637.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-15708","severity":"moderate","public_date":"2020-08-04T00:00:00Z","advisories":[],"bugzilla":"1866270","bugzilla_description":"CVE-2020-15708 libvirt: incorrect permissions on the UNIX domain socket allows local attacker to escalate privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15708.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-14339","severity":"important","public_date":"2020-07-17T00:00:00Z","advisories":["RHSA-2020:3586"],"bugzilla":"1860069","bugzilla_description":"CVE-2020-14339 libvirt: leak of /dev/mapper/control into QEMU guests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14339.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14301","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHBA-2020:3172"],"bugzilla":"1848640","bugzilla_description":"CVE-2020-14301 libvirt: leak of sensitive cookie information via dumpxml","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14301.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2020-10701","severity":"moderate","public_date":"2020-03-20T00:00:00Z","advisories":[],"bugzilla":"1819163","bugzilla_description":"CVE-2020-10701 libvirt: guest agent timeout can be set under read-only mode leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10701.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12430","severity":"moderate","public_date":"2020-02-19T00:00:00Z","advisories":[],"bugzilla":"1828190","bugzilla_description":"CVE-2020-12430 libvirt: memory leak in domstats may allow read-only user to perform DoS attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12430.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-10703","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:4000"],"bugzilla":"1816650","bugzilla_description":"CVE-2020-10703 libvirt: Potential denial of service via active pool without target path","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libvirt-0:4.5.0-36.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10703.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-20485","severity":"moderate","public_date":"2019-12-05T00:00:00Z","advisories":["RHSA-2020:4000"],"bugzilla":"1809740","bugzilla_description":"CVE-2019-20485 libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["libvirt-0:4.5.0-36.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20485.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10166","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720114","bugzilla_description":"CVE-2019-10166 libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10166.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10161","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1578","RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720115","bugzilla_description":"CVE-2019-10161 libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","libvirt-0:0.10.2-64.el6_10.2","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10167","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720117","bugzilla_description":"CVE-2019-10167 libvirt: arbitrary command execution via virConnectGetDomainCapabilities API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-284|CWE-250)","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10168","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720118","bugzilla_description":"CVE-2019-10168 libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-284|CWE-250)","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10168.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10132","severity":"important","public_date":"2019-05-21T12:00:00Z","advisories":["RHSA-2019:1264","RHSA-2019:1268","RHSA-2019:1455"],"bugzilla":"1706067","bugzilla_description":"CVE-2019-10132 libvirt: wrong permissions in systemd admin-sock due to missing SocketMode parameter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["virt:rhel-8000020190516125745.55190bc5","virt:8.0.0-8000020190530233731.55190bc5","libvirt-0:4.5.0-10.el7_6.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12126","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646781","bugzilla_description":"CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12130","severity":"important","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646784","bugzilla_description":"CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385->CWE-226","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-12127","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1667782","bugzilla_description":"CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11091","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1705312","bugzilla_description":"CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2016-10746","severity":"moderate","public_date":"2019-04-18T00:00:00Z","advisories":[],"bugzilla":"1705507","bugzilla_description":"CVE-2016-10746 libvirt: libvirt-domain.c supports virDomainGetTime API calls with an RO connection instead of RW connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10746.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-3886","severity":"low","public_date":"2019-04-03T00:00:00Z","advisories":["RHBA-2019:3723"],"bugzilla":"1694880","bugzilla_description":"CVE-2019-3886 libvirt: virsh domhostname command discloses guest hostname in readonly mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3886.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-3840","severity":"moderate","public_date":"2019-01-10T00:00:00Z","advisories":["RHSA-2019:2294"],"bugzilla":"1665228","bugzilla_description":"CVE-2019-3840 libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libvirt-0:4.5.0-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3840.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2018-17942","severity":"low","public_date":"2018-09-19T00:00:00Z","advisories":[],"bugzilla":"1635896","bugzilla_description":"CVE-2018-17942 gnulib: heap-based buffer overflow in convert_to_decimal function in vasnprintf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-1064","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:1929","RHSA-2018:1396"],"bugzilla":"1550672","bugzilla_description":"CVE-2018-1064 libvirt: Incomplete fix for CVE-2018-5748 triggered by QEMU guest agent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["libvirt-0:0.10.2-64.el6","libvirt-0:3.9.0-14.el7_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1064.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6764","severity":"moderate","public_date":"2018-02-05T00:00:00Z","advisories":["RHSA-2018:3113"],"bugzilla":"1541444","bugzilla_description":"CVE-2018-6764 libvirt: guest could inject executable code via libnss_dns.so loaded by libvirt_lxc before init","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-179","affected_packages":["libvirt-0:4.5.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6764.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-5748","severity":"low","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:1929","RHSA-2018:1396"],"bugzilla":"1528396","bugzilla_description":"CVE-2018-5748 libvirt: Resource exhaustion via qemuMonitorIORead() method","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["libvirt-0:0.10.2-64.el6","libvirt-0:3.9.0-14.el7_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5748.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2017-1000256","severity":"low","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1503658","bugzilla_description":"CVE-2017-1000256 libvirt: TLS certificate verification disabled for clients","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000256.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2017-2635","severity":"moderate","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1427090","bugzilla_description":"CVE-2017-2635 libvirt: Null pointer dereference when updating storage size on empty drives","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2015-5313","severity":"moderate","public_date":"2015-12-11T00:00:00Z","advisories":["RHSA-2016:2577"],"bugzilla":"1277121","bugzilla_description":"CVE-2015-5313 libvirt: filesystem storage volume names path traversal flaw","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:C/A:N","CWE":"CWE-22","affected_packages":["libvirt-0:2.0.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5313.json"},{"CVE":"CVE-2015-5247","severity":"low","public_date":"2015-09-03T00:00:00Z","advisories":[],"bugzilla":"1259350","bugzilla_description":"CVE-2015-5247 libvirt: denial of service when volume creation fails on NFS pool","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5247.json"},{"CVE":"CVE-2015-5160","severity":"moderate","public_date":"2015-08-10T00:00:00Z","advisories":["RHSA-2016:2577"],"bugzilla":"1245647","bugzilla_description":"CVE-2015-5160 libvirt: Ceph id/key leaked in the process list","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libvirt-0:2.0.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5160.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2015-0236","severity":"low","public_date":"2015-01-22T00:00:00Z","advisories":["RHSA-2015:0323"],"bugzilla":"1184431","bugzilla_description":"CVE-2015-0236 libvirt: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save images and snapshots objects","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-285->CWE-200","affected_packages":["libvirt-0:1.2.8-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0236.json"},{"CVE":"CVE-2016-5008","severity":"moderate","public_date":"2015-01-18T00:00:00Z","advisories":["RHSA-2016:2577"],"bugzilla":"1351514","bugzilla_description":"CVE-2016-5008 libvirt: Setting empty VNC password allows access to unauthorized users","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libvirt-0:2.0.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5008.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2014-8136","severity":"low","public_date":"2014-12-17T00:00:00Z","advisories":["RHSA-2015:0323"],"bugzilla":"1176176","bugzilla_description":"CVE-2014-8136 libvirt: local denial of service in qemu/qemu_driver.c","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:1.2.8-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8136.json"},{"CVE":"CVE-2014-8135","severity":"moderate","public_date":"2014-12-17T00:00:00Z","advisories":[],"bugzilla":"1176182","bugzilla_description":"CVE-2014-8135 libvirt: local denial of service in storage/storage_driver.c","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8135.json"},{"CVE":"CVE-2014-8131","severity":"low","public_date":"2014-12-05T00:00:00Z","advisories":[],"bugzilla":"1172569","bugzilla_description":"CVE-2014-8131 libvirt: deadlock and segfault in qemuConnectGetAllDomainStats","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8131.json"},{"CVE":"CVE-2014-7823","severity":"low","public_date":"2014-11-05T00:00:00Z","advisories":["RHSA-2014:1873","RHSA-2015:0008"],"bugzilla":"1160817","bugzilla_description":"CVE-2014-7823 libvirt: dumpxml: information leak with migratable flag","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libvirt-0:0.10.2-46.el6_6.2","libvirt-0:1.1.1-29.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7823.json"},{"CVE":"CVE-2014-3657","severity":"moderate","public_date":"2014-10-01T00:00:00Z","advisories":["RHSA-2014:1873","RHSA-2014:1352"],"bugzilla":"1145667","bugzilla_description":"CVE-2014-3657 libvirt: domain_conf: domain deadlock DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["libvirt-0:0.10.2-46.el6_6.2","libvirt-0:1.1.1-29.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3657.json"},{"CVE":"CVE-2014-3633","severity":"moderate","public_date":"2014-09-17T00:00:00Z","advisories":["RHSA-2014:1873","RHSA-2014:1352"],"bugzilla":"1141131","bugzilla_description":"CVE-2014-3633 libvirt: qemu: out-of-bounds read access in qemuDomainGetBlockIoTune() due to invalid index","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["libvirt-0:0.10.2-46.el6_6.2","libvirt-0:1.1.1-29.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3633.json"},{"CVE":"CVE-2014-0179","severity":"moderate","public_date":"2014-05-06T00:00:00Z","advisories":["RHSA-2014:0914","RHSA-2014:0560"],"bugzilla":"1088290","bugzilla_description":"CVE-2014-0179 CVE-2014-5177 libvirt: unsafe parsing of XML documents allows libvirt DoS and/or arbitrary file read","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-611","affected_packages":["libvirt-0:1.1.1-29.el7_0.1","libvirt-0:0.10.2-29.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0179.json"},{"CVE":"CVE-2014-5177","severity":"moderate","public_date":"2014-05-06T00:00:00Z","advisories":["RHSA-2014:0914"],"bugzilla":"1088290","bugzilla_description":"CVE-2014-0179 CVE-2014-5177 libvirt: unsafe parsing of XML documents allows libvirt DoS and/or arbitrary file read","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-611","affected_packages":["libvirt-0:1.1.1-29.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5177.json"},{"CVE":"CVE-2014-0028","severity":"moderate","public_date":"2014-01-15T00:00:00Z","advisories":[],"bugzilla":"1048637","bugzilla_description":"CVE-2014-0028 libvirt: event registration bypasses domain:getattr ACL","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0028.json"},{"CVE":"CVE-2014-1447","severity":"moderate","public_date":"2013-12-31T00:00:00Z","advisories":["RHSA-2014:0103"],"bugzilla":"1052957","bugzilla_description":"CVE-2014-1447 libvirt: denial of service with keepalive","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-29.el6_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1447.json"},{"CVE":"CVE-2013-6436","severity":"moderate","public_date":"2013-12-20T00:00:00Z","advisories":[],"bugzilla":"1042252","bugzilla_description":"CVE-2013-6436 libvirt: crash in lxcDomainGetMemoryParameters","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6436.json"},{"CVE":"CVE-2013-6457","severity":"moderate","public_date":"2013-12-20T00:00:00Z","advisories":[],"bugzilla":"1048629","bugzilla_description":"CVE-2013-6457 libvirt: avoid crashing if calling 'virsh numatune' on an inactive domain (libxl)","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6457.json"},{"CVE":"CVE-2013-6456","severity":"moderate","public_date":"2013-12-17T00:00:00Z","advisories":[],"bugzilla":"1048627","bugzilla_description":"CVE-2013-6456 libvirt: unsafe usage of paths under /proc/$PID/root","cvss_score":6.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:P/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6456.json"},{"CVE":"CVE-2013-6441","severity":"moderate","public_date":"2013-12-16T00:00:00Z","advisories":[],"bugzilla":"1045988","bugzilla_description":"CVE-2013-6441 lxc: sshd template allow privilege escalation on host","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6441.json"},{"CVE":"CVE-2013-6458","severity":"moderate","public_date":"2013-12-13T00:00:00Z","advisories":["RHSA-2014:0103"],"bugzilla":"1048631","bugzilla_description":"CVE-2013-6458 qemu: job usage issue in several APIs leading to libvirtd crash","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libvirt-0:0.10.2-29.el6_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6458.json"},{"CVE":"CVE-2013-4400","severity":"important","public_date":"2013-10-21T00:00:00Z","advisories":[],"bugzilla":"1015228","bugzilla_description":"CVE-2013-4400 libvirt: virt-login-shell arbitrary file overwrites vulnerability","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4400.json"},{"CVE":"CVE-2013-4401","severity":"important","public_date":"2013-10-21T00:00:00Z","advisories":[],"bugzilla":"1015259","bugzilla_description":"CVE-2013-4401 libvirt: unintended API access due to incorrect permissions checks","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4401.json"},{"CVE":"CVE-2013-4399","severity":"moderate","public_date":"2013-09-27T00:00:00Z","advisories":[],"bugzilla":"1015214","bugzilla_description":"CVE-2013-4399 libvirt: unprivileged user can crash libvirtd when ACLs are enabled","cvss_score":5.5,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4399.json"},{"CVE":"CVE-2013-7336","severity":"moderate","public_date":"2013-09-19T00:00:00Z","advisories":["RHBA-2013:1581"],"bugzilla":"1077620","bugzilla_description":"CVE-2013-7336 libvirt: unprivileged user can crash libvirtd during spice migration","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-29.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7336.json"},{"CVE":"CVE-2013-4311","severity":"important","public_date":"2013-09-18T00:00:00Z","advisories":["RHSA-2013:1272"],"bugzilla":"1005332","bugzilla_description":"CVE-2013-4311 libvirt: insecure calling of polkit","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libvirt-0:0.10.2-18.el6_4.14"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4311.json"},{"CVE":"CVE-2013-4296","severity":"moderate","public_date":"2013-09-18T00:00:00Z","advisories":["RHSA-2013:1272"],"bugzilla":"1006173","bugzilla_description":"CVE-2013-4296 libvirt: invalid free in remoteDispatchDomainMemoryStats","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-18.el6_4.14"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4296.json"},{"CVE":"CVE-2013-4297","severity":"moderate","public_date":"2013-09-03T00:00:00Z","advisories":[],"bugzilla":"1006505","bugzilla_description":"CVE-2013-4297 libvirt: invalid free in virFileNBDDeviceAssociate","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4297.json"},{"CVE":"CVE-2013-4292","severity":"moderate","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"1002666","bugzilla_description":"CVE-2013-4292 libvirt: unbounded RPC arrays in remote protocol","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4292.json"},{"CVE":"CVE-2013-5651","severity":"moderate","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"1006493","bugzilla_description":"CVE-2013-5651 libvirt: virBitmapParse out-of-bounds read access","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5651.json"},{"CVE":"CVE-2013-4291","severity":"low","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"1006509","bugzilla_description":"CVE-2013-4291 libvirt: supplementary groups not adjusted correctly when parsing label","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4291.json"},{"CVE":"CVE-2013-4239","severity":"important","public_date":"2013-08-05T00:00:00Z","advisories":[],"bugzilla":"996241","bugzilla_description":"CVE-2013-4239 libvirt: memory corruption in xenDaemonListDefinedDomains function","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4239.json"},{"CVE":"CVE-2013-4153","severity":"important","public_date":"2013-07-16T00:00:00Z","advisories":[],"bugzilla":"986383","bugzilla_description":"CVE-2013-4153 libvirt: double free of returned JSON array in qemuAgentGetVCPUs()","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4153.json"},{"CVE":"CVE-2013-4154","severity":"moderate","public_date":"2013-07-16T00:00:00Z","advisories":[],"bugzilla":"986386","bugzilla_description":"CVE-2013-4154 libvirt: crash of libvirtd without guest agent configuration","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4154.json"},{"CVE":"CVE-2013-2230","severity":"moderate","public_date":"2013-07-10T00:00:00Z","advisories":[],"bugzilla":"981476","bugzilla_description":"CVE-2013-2230 libvirt: multiple registered events crash","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2230.json"},{"CVE":"CVE-2013-2218","severity":"important","public_date":"2013-07-01T00:00:00Z","advisories":[],"bugzilla":"980112","bugzilla_description":"CVE-2013-2218 libvirt: virConnectListAllInterfaces crash","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2218.json"},{"CVE":"CVE-2013-1962","severity":"moderate","public_date":"2013-05-16T00:00:00Z","advisories":["RHSA-2013:0831"],"bugzilla":"953107","bugzilla_description":"CVE-2013-1962 libvirt: DoS (max count of open files exhaustion) due sockets leak in the storage pool","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-18.el6_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1962.json"},{"CVE":"CVE-2013-1766","severity":"moderate","public_date":"2013-02-25T00:00:00Z","advisories":[],"bugzilla":"915718","bugzilla_description":"CVE-2013-1766 libvirt: kvm-group writable storage","cvss_score":3.5,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1766.json"},{"CVE":"CVE-2013-0170","severity":"important","public_date":"2013-01-28T00:00:00Z","advisories":["RHSA-2013:0199"],"bugzilla":"893450","bugzilla_description":"CVE-2013-0170 libvirt: use-after-free in virNetMessageFree()","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["libvirt-0:0.9.10-21.el6_3.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0170.json"},{"CVE":"CVE-2012-3445","severity":"moderate","public_date":"2012-07-30T00:00:00Z","advisories":["RHSA-2012:1202"],"bugzilla":"844734","bugzilla_description":"CVE-2012-3445 libvirt: crash in virTypedParameterArrayClear","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.9.10-21.el6_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3445.json"},{"CVE":"CVE-2012-4423","severity":"moderate","public_date":"2012-07-24T00:00:00Z","advisories":["RHSA-2012:1359"],"bugzilla":"857133","bugzilla_description":"CVE-2012-4423 libvirt: null function pointer invocation in virNetServerProgramDispatchCall()","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.9.10-21.el6_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4423.json"},{"CVE":"CVE-2012-3411","severity":"moderate","public_date":"2012-07-09T00:00:00Z","advisories":["RHSA-2013:0579","RHSA-2013:0276","RHSA-2013:0277"],"bugzilla":"833033","bugzilla_description":"CVE-2012-3411 libvirt+dnsmasq: DNS configured to answer DNS queries from non-virtual networks","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-18.el6","rhev-hypervisor6-0:6.4-20130221.0.el6","dnsmasq-0:2.48-13.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3411.json"},{"CVE":"CVE-2012-2693","severity":"low","public_date":"2012-04-28T00:00:00Z","advisories":["RHSA-2012:0748","RHSA-2013:0127"],"bugzilla":"831164","bugzilla_description":"CVE-2012-2693 libvirt: address bus= device= when identicle vendor ID/product IDs usb devices attached are ignored","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libvirt-0:0.8.2-29.el5","libvirt-0:0.9.10-21.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2693.json"},{"CVE":"CVE-2011-4600","severity":"low","public_date":"2011-12-09T00:00:00Z","advisories":["RHBA-2012:0013"],"bugzilla":"765964","bugzilla_description":"CVE-2011-4600 libvirt: unintended firewall port exposure after restarting libvirtd when defining a bridged forward-mode network","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libvirt-0:0.9.4-23.el6_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4600.json"},{"CVE":"CVE-2011-2511","severity":"moderate","public_date":"2011-06-24T00:00:00Z","advisories":["RHSA-2011:1197","RHSA-2011:1019"],"bugzilla":"717199","bugzilla_description":"CVE-2011-2511 libvirt: integer overflow in VirDomainGetVcpus","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["libvirt-0:0.8.7-18.el6_1.1","libvirt-0:0.8.2-22.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2511.json"},{"CVE":"CVE-2011-2178","severity":"moderate","public_date":"2011-05-31T00:00:00Z","advisories":[],"bugzilla":"709769","bugzilla_description":"CVE-2011-2178 libvirt: regression introduced in disk probe logic","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2178.json"},{"CVE":"CVE-2011-1486","severity":"moderate","public_date":"2011-03-23T00:00:00Z","advisories":["RHSA-2011:0478","RHSA-2011:0479"],"bugzilla":"693391","bugzilla_description":"CVE-2011-1486 libvirt: error reporting in libvirtd is not thread safe","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.8.2-15.el5_6.4","libvirt-0:0.8.1-27.el6_0.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1486.json"},{"CVE":"CVE-2011-1146","severity":"important","public_date":"2011-03-02T00:00:00Z","advisories":["RHSA-2011:0391"],"bugzilla":"683650","bugzilla_description":"CVE-2011-1146 libvirt: several API calls do not honour read-only connection","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libvirt-0:0.8.1-27.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1146.json"},{"CVE":"CVE-2010-2242","severity":"low","public_date":"2010-07-12T00:00:00Z","advisories":["RHSA-2010:0615"],"bugzilla":"602455","bugzilla_description":"CVE-2010-2242 libvirt: improperly mapped source privileged ports may allow for obtaining privileged resources on the host","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["libvirt-0:0.6.3-33.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2242.json"},{"CVE":"CVE-2010-2237","severity":"moderate","public_date":"2010-07-12T00:00:00Z","advisories":[],"bugzilla":"607810","bugzilla_description":"CVE-2010-2237 libvirt: ignoring defined main disk format when looking up disk backing stores","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2237.json"},{"CVE":"CVE-2010-2238","severity":"moderate","public_date":"2010-07-12T00:00:00Z","advisories":[],"bugzilla":"607811","bugzilla_description":"CVE-2010-2238 libvirt: ignoring defined disk backing store format when recursing into disk image backing stores","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2238.json"},{"CVE":"CVE-2010-2239","severity":"low","public_date":"2010-07-12T00:00:00Z","advisories":["RHSA-2010:0615"],"bugzilla":"607812","bugzilla_description":"CVE-2010-2239 libvirt: not setting user defined backing store format when creating new image","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:N/A:N","CWE":null,"affected_packages":["libvirt-0:0.6.3-33.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2239.json"},{"CVE":"CVE-2009-0036","severity":"moderate","public_date":"2009-01-27T00:00:00Z","advisories":["RHSA-2009:0382"],"bugzilla":"484947","bugzilla_description":"CVE-2009-0036 libvirt: libvirt_proxy buffer overflow","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libvirt-0:0.3.3-14.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0036.json"},{"CVE":"CVE-2008-5086","severity":"moderate","public_date":"2008-12-17T00:00:00Z","advisories":["RHSA-2009:0382"],"bugzilla":"476560","bugzilla_description":"CVE-2008-5086 libvirt: missing checks for read-only connection","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.3.3-14.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5086.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvisio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvisio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvisio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvisual_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvisual_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvisual_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvma_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvma_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvma_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvmem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvmem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvmem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvmmalloc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvmmalloc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvmmalloc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvncserver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvncserver_security_api_results.json
new file mode 100644
index 0000000..1db9307
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvncserver_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-20839","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1849877","bugzilla_description":"CVE-2019-20839 libvncserver: \"ConnectClientToUnixSock()\" buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20839.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20840","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1849881","bugzilla_description":"CVE-2019-20840 libvncserver: unaligned accesses in hybiReadAndDecode can lead to a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-21247","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1849886","bugzilla_description":"CVE-2018-21247 libvncserver: uninitialized memory contents are vulnerable to Information Leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-21247.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-14405","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860325","bugzilla_description":"CVE-2020-14405 libvncserver: libvncclient/rfbproto.c does not limit TextChat size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14403","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860334","bugzilla_description":"CVE-2020-14403 libvncserver: libvncserver/hextile.c allows out-of-bounds access via encodings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14403.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-14404","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860337","bugzilla_description":"CVE-2020-14404 libvncserver: libvncserver/rre.c allows out-of-bounds access via encodings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14404.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-14396","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860340","bugzilla_description":"CVE-2020-14396 libvncserver: libvncclient/tls_openssl.c has a NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14396.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14397","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860344","bugzilla_description":"CVE-2020-14397 libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14397.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14398","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860348","bugzilla_description":"CVE-2020-14398 libvncserver: an improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14398.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14399","severity":null,"public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860354","bugzilla_description":"CVE-2020-14399 libvncserver: byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14399.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-14400","severity":null,"public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860361","bugzilla_description":"CVE-2020-14400 libvncserver: byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14400.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-14401","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860364","bugzilla_description":"CVE-2020-14401 libvncserver: libvncserver/scale.c has a pixel_value integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14401.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-14402","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860367","bugzilla_description":"CVE-2020-14402 libvncserver: libvncserver/corre.c allows out-of-bounds access via encodings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14402.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-15690","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2020:0921","RHSA-2020:0913","RHSA-2020:0920"],"bugzilla":"1811948","bugzilla_description":"CVE-2019-15690 libvncserver: HandleCursorShape() integer overflow resulting in heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["libvncserver-0:0.9.9-14.el7_7","libvncserver-0:0.9.11-9.el8_0.2","libvncserver-0:0.9.11-9.el8_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15690.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-20788","severity":null,"public_date":"2019-11-17T00:00:00Z","advisories":["RHSA-2020:0921","RHSA-2020:0913","RHSA-2020:0920"],"bugzilla":"1829870","bugzilla_description":"CVE-2019-20788 libvncserver: integer overflow and heap-based buffer overflow in libvncclient/cursor.c in HandleCursorShape function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-190)","affected_packages":["libvncserver-0:0.9.9-14.el7_7","libvncserver-0:0.9.11-9.el8_0.2","libvncserver-0:0.9.11-9.el8_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20788.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-15681","severity":"low","public_date":"2019-10-30T00:00:00Z","advisories":[],"bugzilla":"1854761","bugzilla_description":"CVE-2019-15681 libvncserver: information disclosure and ASLR bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15681.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-20749","severity":"important","public_date":"2019-01-06T00:00:00Z","advisories":[],"bugzilla":"1671403","bugzilla_description":"CVE-2018-20749 libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution (Incomplete fix for CVE-2018-15127)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20749.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20750","severity":"important","public_date":"2019-01-06T00:00:00Z","advisories":[],"bugzilla":"1671405","bugzilla_description":"CVE-2018-20750 libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution (Incomplete fix for CVE-2018-15127)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20748","severity":"moderate","public_date":"2019-01-06T00:00:00Z","advisories":[],"bugzilla":"1671407","bugzilla_description":"CVE-2018-20748 libvncserver: Multiple heap out-of-bound writes in VNC client code (Incomplete fix for CVE-2018-20019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20748.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-15127","severity":"important","public_date":"2018-12-19T00:00:00Z","advisories":["RHSA-2019:0059"],"bugzilla":"1661102","bugzilla_description":"CVE-2018-15127 libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvncserver-0:0.9.9-13.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15127.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-15126","severity":"important","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661110","bugzilla_description":"CVE-2018-15126 libvncserver: Use-after-free in file transfer extension allows for potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15126.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20019","severity":"moderate","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661114","bugzilla_description":"CVE-2018-20019 libvncserver: Multiple heap out-of-bound writes in VNC client code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-20020","severity":"moderate","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661117","bugzilla_description":"CVE-2018-20020 libvncserver: Heap out-of-bound write inside structure in VNC client code allows for potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-20021","severity":"low","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661120","bugzilla_description":"CVE-2018-20021 libvncserver: Infinite loop in VNC client code allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20021.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-20022","severity":"low","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661123","bugzilla_description":"CVE-2018-20022 libvncserver: Improper initialization in VNC client code allows for information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-20023","severity":"low","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661128","bugzilla_description":"CVE-2018-20023 libvncserver: Improper initialization in VNC Repeater client code allows for information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-20024","severity":"low","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661132","bugzilla_description":"CVE-2018-20024 libvncserver: NULL pointer dereference in VNC client code allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20024.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-6307","severity":"important","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661136","bugzilla_description":"CVE-2018-6307 libvncserver: Use-after-free in file transfer extension server code allows for potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6307.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7225","severity":"moderate","public_date":"2018-02-18T00:00:00Z","advisories":["RHSA-2018:1055"],"bugzilla":"1546858","bugzilla_description":"CVE-2018-7225 libvncserver: Improper input sanitization in rfbProcessClientNormalMessage in rfbserver.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805","affected_packages":["libvncserver-0:0.9.9-12.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-7226","severity":"low","public_date":"2018-02-18T00:00:00Z","advisories":[],"bugzilla":"1549172","bugzilla_description":"CVE-2018-7226 libvncserver: integer overflow in vcSetXCutTextProc in VNConsole.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7226.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-18922","severity":"important","public_date":"2017-02-15T00:00:00Z","advisories":["RHSA-2020:3588","RHSA-2020:3456","RHSA-2020:3385","RHSA-2020:3281"],"bugzilla":"1852356","bugzilla_description":"CVE-2017-18922 libvncserver: websocket decoding buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvncserver-0:0.9.11-15.el8_2.1","libvncserver-0:0.9.11-9.el8_0.3","libvncserver-0:0.9.11-9.el8_1.3","libvncserver-0:0.9.9-14.el7_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18922.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-9941","severity":"moderate","public_date":"2016-11-14T00:00:00Z","advisories":[],"bugzilla":"1410166","bugzilla_description":"CVE-2016-9941 libvncserver: Heap-based buffer overflow in rfbproto.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9941.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9942","severity":"moderate","public_date":"2016-11-14T00:00:00Z","advisories":[],"bugzilla":"1410168","bugzilla_description":"CVE-2016-9942 libvncserver: Heap-based buffer overflow in ultra.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-6051","severity":"moderate","public_date":"2014-09-23T00:00:00Z","advisories":["RHSA-2015:0113","RHSA-2014:1826"],"bugzilla":"1144287","bugzilla_description":"CVE-2014-6051 libvncserver: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libvncserver-0:0.9.7-7.el6_6.1","libvncserver-0:0.9.7-7.el6_5.1","libvncserver-0:0.9.9-9.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6051.json"},{"CVE":"CVE-2014-6052","severity":"moderate","public_date":"2014-09-23T00:00:00Z","advisories":["RHSA-2014:1826"],"bugzilla":"1144288","bugzilla_description":"CVE-2014-6052 libvncserver: NULL pointer dereference flaw in framebuffer setup","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["libvncserver-0:0.9.7-7.el6_6.1","libvncserver-0:0.9.9-9.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6052.json"},{"CVE":"CVE-2014-6053","severity":"moderate","public_date":"2014-09-23T00:00:00Z","advisories":["RHSA-2014:1827","RHSA-2014:1826"],"bugzilla":"1144289","bugzilla_description":"CVE-2014-6053 libvncserver: server NULL pointer dereference flaw in ClientCutText message handling","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["kdenetwork-7:4.10.5-8.el7_0","libvncserver-0:0.9.7-7.el6_6.1","libvncserver-0:0.9.9-9.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6053.json"},{"CVE":"CVE-2014-6054","severity":"moderate","public_date":"2014-09-23T00:00:00Z","advisories":["RHSA-2014:1827","RHSA-2014:1826"],"bugzilla":"1144291","bugzilla_description":"CVE-2014-6054 libvncserver: server divide-by-zero flaw in scaling factor handling","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-369","affected_packages":["kdenetwork-7:4.10.5-8.el7_0","libvncserver-0:0.9.7-7.el6_6.1","libvncserver-0:0.9.9-9.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6054.json"},{"CVE":"CVE-2014-6055","severity":"moderate","public_date":"2014-09-23T00:00:00Z","advisories":["RHSA-2015:0113","RHSA-2014:1827","RHSA-2014:1826"],"bugzilla":"1144293","bugzilla_description":"CVE-2014-6055 libvncserver: server stacked-based buffer overflow flaws in file transfer handling","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["kdenetwork-7:4.10.5-8.el7_0","libvncserver-0:0.9.7-7.el6_6.1","libvncserver-0:0.9.7-7.el6_5.1","libvncserver-0:0.9.9-9.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6055.json"},{"CVE":"CVE-2011-0904","severity":"low","public_date":"2011-05-02T00:00:00Z","advisories":["RHSA-2013:0169"],"bugzilla":"694455","bugzilla_description":"CVE-2011-0904 vino: Out of bounds read flaw by processing certain client raw encoding framebuffer update requests","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["vino-0:2.28.1-8.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0904.json"},{"CVE":"CVE-2011-0905","severity":"low","public_date":"2011-05-02T00:00:00Z","advisories":["RHSA-2013:0169"],"bugzilla":"694456","bugzilla_description":"CVE-2011-0905 vino: Out of bounds read flaw by processing certain client tight encoding framebuffer update requests","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["vino-0:2.28.1-8.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0905.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvoikko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvoikko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvoikko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvorbis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvorbis_security_api_results.json
new file mode 100644
index 0000000..a52b8b6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvorbis_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10392","severity":"low","public_date":"2018-04-25T00:00:00Z","advisories":["RHSA-2019:3703"],"bugzilla":"1574193","bugzilla_description":"CVE-2018-10392 libvorbis: heap buffer overflow in mapping0_forward function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvorbis-1:1.3.6-2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10392.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10393","severity":"low","public_date":"2018-04-25T00:00:00Z","advisories":["RHSA-2019:3703"],"bugzilla":"1574194","bugzilla_description":"CVE-2018-10393 libvorbis: stack buffer overflow in bark_noise_hybridmp function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvorbis-1:1.3.6-2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10393.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-5146","severity":"critical","public_date":"2018-03-16T00:00:00Z","advisories":["RHSA-2018:0649","RHSA-2018:0647","RHSA-2018:0549","RHSA-2018:0648","RHSA-2018:1058"],"bugzilla":"1557221","bugzilla_description":"CVE-2018-5146 Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvorbis-1:1.2.3-5.el6_9.1","libvorbis-1:1.3.3-8.el7.1","thunderbird-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el6_9","firefox-0:52.7.2-1.el6_9","firefox-0:52.7.2-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5146.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-14160","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1499991","bugzilla_description":"CVE-2017-14160 libvorbis: Out-of-bounds read in the bark_noise_hybridmp function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14160.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14633","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1499959","bugzilla_description":"CVE-2017-14633 libvorbis: Out-of-bounds array read in the function mapping0_forward()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14633.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14632","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1499952","bugzilla_description":"CVE-2017-14632 libvorbis: Invalid freeing of uninitialized memory in the function vorbis_analysis_headerout()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14632.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11333","severity":"low","public_date":"2017-07-30T00:00:00Z","advisories":[],"bugzilla":"1480643","bugzilla_description":"CVE-2017-11333 libvorbis: Memory exhaustion in vorbis_analysis_wrote function in lib/block.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11333.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11735","severity":"low","public_date":"2017-07-30T00:00:00Z","advisories":[],"bugzilla":"1480645","bugzilla_description":"CVE-2017-11735 libvorbis: NULL pointer dereference in vorbis_block_clear function in lib/block.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2011-3960","severity":"low","public_date":"2012-02-09T00:00:00Z","advisories":[],"bugzilla":"788858","bugzilla_description":"CVE-2011-3960 libvorbis: Stack-buffer overflow in render_line","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3960.json"},{"CVE":"CVE-2012-0444","severity":"important","public_date":"2012-01-31T00:00:00Z","advisories":["RHSA-2012:0079","RHSA-2012:0136"],"bugzilla":"786026","bugzilla_description":"CVE-2012-0444 Firefox: Ogg Vorbis Decoding Memory Corruption (MFSA 2012-07)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:3.6.26-1.el6_2","firefox-0:3.6.26-2.el4","libvorbis-1:1.2.3-4.el6_2.1","libvorbis-1:1.1.0-4.el4.5","libvorbis-1:1.1.2-3.el5_7.6","firefox-0:3.6.26-1.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0444.json"},{"CVE":"CVE-2009-3379","severity":"important","public_date":"2009-10-27T00:00:00Z","advisories":["RHSA-2009:1561"],"bugzilla":"531765","bugzilla_description":"CVE-2009-3379 libvorbis: security fixes mentioned in MFSA 2009-63","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libvorbis-1:1.1.0-3.el4_8.3","libvorbis-1:1.0-12.el3","libvorbis-1:1.1.2-3.el5_4.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3379.json"},{"CVE":"CVE-2009-2663","severity":"important","public_date":"2009-06-24T00:00:00Z","advisories":["RHSA-2009:1219"],"bugzilla":"516259","bugzilla_description":"CVE-2009-2663 libvorbis: Improper codec headers processing (DoS, ACE)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libvorbis-1:1.1.0-3.el4_8.2","libvorbis-1:1.0-11.el3","libvorbis-1:1.1.2-3.el5_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2663.json"},{"CVE":"CVE-2008-1419","severity":"important","public_date":"2008-05-14T00:00:00Z","advisories":["RHSA-2008:0271","RHSA-2008:0270"],"bugzilla":"440700","bugzilla_description":"CVE-2008-1419 vorbis: zero-dim codebooks can cause crash, infinite loop or heap overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libvorbis-1:1.1.2-3.el5_1.2","libvorbis-0:1.0rc2-9.el2","libvorbis-1:1.0-10.el3","libvorbis-1:1.1.0-3.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1419.json"},{"CVE":"CVE-2008-1420","severity":"important","public_date":"2008-05-14T00:00:00Z","advisories":["RHSA-2008:0271","RHSA-2008:0270"],"bugzilla":"440706","bugzilla_description":"CVE-2008-1420 vorbis: integer overflow in partvals computation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["libvorbis-1:1.1.2-3.el5_1.2","libvorbis-0:1.0rc2-9.el2","libvorbis-1:1.0-10.el3","libvorbis-1:1.1.0-3.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1420.json"},{"CVE":"CVE-2008-1423","severity":"important","public_date":"2008-05-14T00:00:00Z","advisories":["RHSA-2008:0271","RHSA-2008:0270"],"bugzilla":"440709","bugzilla_description":"CVE-2008-1423 vorbis: integer oveflow caused by huge codebooks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["libvorbis-1:1.1.2-3.el5_1.2","libvorbis-0:1.0rc2-9.el2","libvorbis-1:1.0-10.el3","libvorbis-1:1.1.0-3.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1423.json"},{"CVE":"CVE-2008-2009","severity":"important","public_date":"2008-05-14T00:00:00Z","advisories":["RHSA-2008:0271"],"bugzilla":"444443","bugzilla_description":"CVE-2008-2009 vorbis: insufficient validation of Huffman tree causing memory corruption in _make_decode_tree()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libvorbis-0:1.0rc2-9.el2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2009.json"},{"CVE":"CVE-2007-3106","severity":"important","public_date":"2007-07-26T00:00:00Z","advisories":["RHSA-2007:0912","RHSA-2007:0845"],"bugzilla":"245991","bugzilla_description":"CVE-2007-3106 libvorbis array boundary condition","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libvorbis-1:1.1.0-2.el4.5","libvorbis-1:1.1.2-3.el5.0","libvorbis-0:1.0rc2-7.el2","libvorbis-1:1.0-8.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3106.json"},{"CVE":"CVE-2007-4029","severity":"important","public_date":"2007-07-26T00:00:00Z","advisories":["RHSA-2007:0912","RHSA-2007:0845"],"bugzilla":"249780","bugzilla_description":"CVE-2007-4065 Multiple libvorbis flaws (CVE-2007-4066, CVE-2007-4029)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libvorbis-1:1.1.0-2.el4.5","libvorbis-1:1.1.2-3.el5.0","libvorbis-0:1.0rc2-7.el2","libvorbis-1:1.0-8.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4029.json"},{"CVE":"CVE-2007-4065","severity":"important","public_date":"2007-07-26T00:00:00Z","advisories":["RHSA-2007:0912","RHSA-2007:0845"],"bugzilla":"249780","bugzilla_description":"CVE-2007-4065 Multiple libvorbis flaws (CVE-2007-4066, CVE-2007-4029)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libvorbis-1:1.1.0-2.el4.5","libvorbis-1:1.1.2-3.el5.0","libvorbis-0:1.0rc2-7.el2","libvorbis-1:1.0-8.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4065.json"},{"CVE":"CVE-2007-4066","severity":"important","public_date":"2007-07-26T00:00:00Z","advisories":["RHSA-2007:0912","RHSA-2007:0845"],"bugzilla":"249780","bugzilla_description":"CVE-2007-4065 Multiple libvorbis flaws (CVE-2007-4066, CVE-2007-4029)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libvorbis-1:1.1.0-2.el4.5","libvorbis-1:1.1.2-3.el5.0","libvorbis-0:1.0rc2-7.el2","libvorbis-1:1.0-8.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4066.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvpd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvpd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvpx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvpx_security_api_results.json
new file mode 100644
index 0000000..49da681
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libvpx_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-0034","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:3876"],"bugzilla":"1813000","bugzilla_description":"CVE-2020-0034 libvpx: Out of bounds read in vp8_decode_frame in decodeframe.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":["libvpx-0:1.3.0-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0034.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-9232","severity":"moderate","public_date":"2019-10-26T00:00:00Z","advisories":["RHSA-2020:3876"],"bugzilla":"1788966","bugzilla_description":"CVE-2019-9232 libvpx: Out of bounds read in vp8_norm table","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libvpx-0:1.3.0-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9232.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-9433","severity":"moderate","public_date":"2019-10-26T00:00:00Z","advisories":["RHSA-2020:3876"],"bugzilla":"1788994","bugzilla_description":"CVE-2019-9433 libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416->CWE-200","affected_packages":["libvpx-0:1.3.0-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9433.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9325","severity":"moderate","public_date":"2019-10-26T00:00:00Z","advisories":[],"bugzilla":"1789002","bugzilla_description":"CVE-2019-9325 libvpx: Out-of-bounds read in read in decoder_peek_si_internal() in vp9/vp9_dx_iface.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9325.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9371","severity":"moderate","public_date":"2019-10-26T00:00:00Z","advisories":[],"bugzilla":"1789004","bugzilla_description":"CVE-2019-9371 libvpx: Resource exhaustion after memory leak in mkvparser.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9371.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2126","severity":"moderate","public_date":"2019-10-26T00:00:00Z","advisories":[],"bugzilla":"1789008","bugzilla_description":"CVE-2019-2126 libvpx: Double free in ParseContentEncodingEntry() in mkvparser.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2126.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-13194","severity":"low","public_date":"2018-01-02T00:00:00Z","advisories":[],"bugzilla":"1535183","bugzilla_description":"CVE-2017-13194 libvpx:  denial of service (DoS) in vpx/src/vpx_image.c file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13194.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2017-0641","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1486854","bugzilla_description":"CVE-2017-0641 libvpx: Weak limit for frames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-0393","severity":"moderate","public_date":"2017-01-03T00:00:00Z","advisories":["RHSA-2020:3876"],"bugzilla":"1769657","bugzilla_description":"CVE-2017-0393 libvpx: Denial of service in mediaserver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["libvpx-0:1.3.0-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0393.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-1621","severity":"important","public_date":"2016-03-14T00:00:00Z","advisories":[],"bugzilla":"1318185","bugzilla_description":"CVE-2016-1621 libvpx: remote code execution via crafted media file","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1621.json"},{"CVE":"CVE-2015-1258","severity":"moderate","public_date":"2015-05-19T00:00:00Z","advisories":["RHSA-2015:1023"],"bugzilla":"1223266","bugzilla_description":"CVE-2015-1258 chromium-browser: Negative-size parameter in Libvpx.","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:43.0.2357.65-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1258.json"},{"CVE":"CVE-2012-0823","severity":"moderate","public_date":"2012-01-29T00:00:00Z","advisories":[],"bugzilla":"785640","bugzilla_description":"CVE-2012-0823 libvpx: VP8 Codec decoder crash introduced in 0.9.7","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0823.json"},{"CVE":"CVE-2010-4489","severity":"low","public_date":"2011-01-19T00:00:00Z","advisories":[],"bugzilla":"670840","bugzilla_description":"CVE-2010-4489 libvpx: Signedness error in partition size check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4489.json"},{"CVE":"CVE-2010-4203","severity":"moderate","public_date":"2010-11-04T00:00:00Z","advisories":["RHSA-2010:0999"],"bugzilla":"651213","bugzilla_description":"CVE-2010-4203 libvpx: memory corruption flaw","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libvpx-0:0.9.0-8.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4203.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwacom-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwacom-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwacom-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwacom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwacom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwacom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-cursor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-cursor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-cursor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-egl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-egl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-egl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwayland-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwbclient_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwbclient_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwbclient_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwebp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwebp_security_api_results.json
new file mode 100644
index 0000000..a46cdf7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwebp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-9085","severity":"low","public_date":"2016-10-10T00:00:00Z","advisories":[],"bugzilla":"1389338","bugzilla_description":"CVE-2016-9085 libwebp: Several integer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9085.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwinpr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwinpr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwinpr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwmf-lite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwmf-lite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwmf-lite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwmf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwmf_security_api_results.json
new file mode 100644
index 0000000..df3039e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwmf_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-6978","severity":"low","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2722","RHSA-2020:3943"],"bugzilla":"1671390","bugzilla_description":"CVE-2019-6978 gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libwmf-0:0.2.8.4-44.el7","libwmf-0:0.2.9-8.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000222","severity":"moderate","public_date":"2018-07-15T00:00:00Z","advisories":[],"bugzilla":"1621953","bugzilla_description":"CVE-2018-1000222 gd: Double free in src/gd_bump.c:gdImageBmpPtr() via crafted JPEG","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000222.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-5711","severity":"low","public_date":"2017-11-25T00:00:00Z","advisories":["RHSA-2019:2519","RHSA-2018:1296"],"bugzilla":"1535246","bugzilla_description":"CVE-2018-5711 gd: Infinite loop in gdImageCreateFromGifCtx() in gd_gif_in.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5711.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-6362","severity":"moderate","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1489842","bugzilla_description":"CVE-2017-6362 gd: Double free in the gdImagePngPtr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10168","severity":"moderate","public_date":"2016-12-17T00:00:00Z","advisories":["RHSA-2017:3221","RHSA-2018:1296"],"bugzilla":"1418986","bugzilla_description":"CVE-2016-10168 gd: Integer overflow in gd_io.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-43.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10168.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-9317","severity":"moderate","public_date":"2016-11-12T00:00:00Z","advisories":[],"bugzilla":"1417987","bugzilla_description":"CVE-2016-9317 gd: Missing check for oversized images in gdImageCreate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9317.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-9011","severity":"low","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1388450","bugzilla_description":"CVE-2016-9011 libwmf: Memory allocation failure in wmf_malloc","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9011.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6912","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":[],"bugzilla":"1417977","bugzilla_description":"CVE-2016-6912 gd, php: Double free in gdImageWebpPtr()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6912.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-10167","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2017:3221","RHSA-2018:1296"],"bugzilla":"1418984","bugzilla_description":"CVE-2016-10167 gd: DoS vulnerability in gdImageCreateFromGd2Ctx()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-43.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-6906","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":[],"bugzilla":"1435313","bugzilla_description":"CVE-2016-6906 gd: Out-of-bounds read in read_image_tga function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10166","severity":"moderate","public_date":"2016-08-06T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2019:2519"],"bugzilla":"1418983","bugzilla_description":"CVE-2016-10166 gd: Unsigned integer underflow _gdContributionsAlloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10166.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-6214","severity":"low","public_date":"2016-07-12T00:00:00Z","advisories":[],"bugzilla":"1356466","bugzilla_description":"CVE-2016-6214 gd: Buffer over-read issue when parsing crafted TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6214.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6905","severity":"low","public_date":"2016-07-05T00:00:00Z","advisories":[],"bugzilla":"1356485","bugzilla_description":"CVE-2016-6905 gd: Out-of-bounds read in function read_image_tga in gd_tga.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6905.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6132","severity":"low","public_date":"2016-06-30T00:00:00Z","advisories":[],"bugzilla":"1352544","bugzilla_description":"CVE-2016-6132 gd: Buffer over-read issue when parsing crafted TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6128","severity":"low","public_date":"2016-06-27T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1351603","bugzilla_description":"CVE-2016-6128 gd: Invalid color index not properly handled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6128.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-0848","severity":"important","public_date":"2015-06-01T00:00:00Z","advisories":["RHSA-2015:1917"],"bugzilla":"1227243","bugzilla_description":"CVE-2015-0848 libwmf: heap overflow when decoding BMP images","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libwmf-0:0.2.8.4-41.el7_1","libwmf-0:0.2.8.4-25.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0848.json"},{"CVE":"CVE-2015-4588","severity":"important","public_date":"2015-06-01T00:00:00Z","advisories":["RHSA-2015:1917"],"bugzilla":"1272993","bugzilla_description":"CVE-2015-4588 libwmf: heap overflow within the RLE decoding of embedded BMP images","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libwmf-0:0.2.8.4-41.el7_1","libwmf-0:0.2.8.4-25.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4588.json"},{"CVE":"CVE-2015-4695","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":["RHSA-2015:1917"],"bugzilla":"1235665","bugzilla_description":"CVE-2015-4695 libwmf: heap buffer overread in meta.h","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"(CWE-122|CWE-125)","affected_packages":["libwmf-0:0.2.8.4-41.el7_1","libwmf-0:0.2.8.4-25.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4695.json"},{"CVE":"CVE-2015-4696","severity":"moderate","public_date":"2015-05-03T00:00:00Z","advisories":["RHSA-2015:1917"],"bugzilla":"1235669","bugzilla_description":"CVE-2015-4696 libwmf: use-after-free flaw in meta.h","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-416","affected_packages":["libwmf-0:0.2.8.4-41.el7_1","libwmf-0:0.2.8.4-25.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4696.json"},{"CVE":"CVE-2014-2497","severity":"low","public_date":"2014-03-13T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1076676","bugzilla_description":"CVE-2014-2497 gd: NULL pointer dereference in gdImageCreateFromXpm()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php53-0:5.3.3-24.el5","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2497.json"},{"CVE":"CVE-2009-3546","severity":"low","public_date":"2009-10-12T00:00:00Z","advisories":["RHSA-2010:0040","RHSA-2010:0003"],"bugzilla":"529213","bugzilla_description":"CVE-2009-3546 gd: insufficient input validation in _gdGetColors()","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","gd-0:2.0.33-9.4.el5_4.2","gd-0:2.0.28-5.4E.el4_8.1","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3546.json"},{"CVE":"CVE-2009-1364","severity":"moderate","public_date":"2009-04-27T00:00:00Z","advisories":["RHSA-2009:0457"],"bugzilla":"496864","bugzilla_description":"CVE-2009-1364 libwmf: embedded gd use-after-free error","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["libwmf-0:0.2.8.4-10.2","libwmf-0:0.2.8.3-5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1364.json"},{"CVE":"CVE-2007-3472","severity":"low","public_date":"2007-06-21T00:00:00Z","advisories":["RHSA-2008:0146"],"bugzilla":"276751","bugzilla_description":"CVE-2007-3472 libgd Integer overflow in TrueColor code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3472.json"},{"CVE":"CVE-2007-3473","severity":"low","public_date":"2007-06-21T00:00:00Z","advisories":["RHSA-2008:0146"],"bugzilla":"276791","bugzilla_description":"CVE-2007-3473 libgd NULL pointer dereference when reading a corrupt X bitmap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3473.json"},{"CVE":"CVE-2007-3477","severity":"low","public_date":"2007-06-21T00:00:00Z","advisories":[],"bugzilla":"277221","bugzilla_description":"CVE-2007-3477 gd: arc drawing functions can consume large amount of CPU time","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3477.json"},{"CVE":"CVE-2007-2756","severity":"low","public_date":"2007-05-16T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2008:0146","RHSA-2007:0889"],"bugzilla":"242033","bugzilla_description":"CVE-2007-2756 gd / php-gd ImageCreateFromPng infinite loop caused by truncated PNG","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["php-0:5.1.6-15.el5","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:4.3.9-3.22.9","gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2756.json"},{"CVE":"CVE-2007-0455","severity":"low","public_date":"2007-01-26T00:00:00Z","advisories":["RHSA-2007:0153","RHSA-2008:0146","RHSA-2007:0162","RHSA-2007:0155"],"bugzilla":"224607","bugzilla_description":"CVE-2007-0455 gd: buffer overrun","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:5.1.6-3.el4s1.6","php-0:4.3.2-40.ent","gd-0:2.0.33-9.4.el5_1.1","php-0:5.1.6-11.el5","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0455.json"},{"CVE":"CVE-2006-3376","severity":"moderate","public_date":"2006-06-30T00:00:00Z","advisories":["RHSA-2006:0597"],"bugzilla":"1618139","bugzilla_description":"CVE-2006-3376 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libwmf-0:0.2.8.3-5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3376.json"},{"CVE":"CVE-2004-0941","severity":"low","public_date":"2004-11-10T00:00:00Z","advisories":["RHSA-2004:638","RHSA-2006:0194"],"bugzilla":"175413","bugzilla_description":"CVE-2004-0941 gd: additional overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gd-0:1.8.4-12.3.1","gd-0:2.0.28-4.4E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0941.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwnck3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwnck3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwnck3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwpd_security_api_results.json
new file mode 100644
index 0000000..7cabe16
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwpd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19208","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":["RHSA-2019:2126"],"bugzilla":"1649414","bugzilla_description":"CVE-2018-19208 libwpd: NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libwpd-0:0.10.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19208.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14226","severity":"low","public_date":"2017-09-07T00:00:00Z","advisories":[],"bugzilla":"1491812","bugzilla_description":"CVE-2017-14226 libwpd: Heap-based buffer over-read in WPXTableList class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2012-2149","severity":"important","public_date":"2012-05-16T00:00:00Z","advisories":["RHSA-2012:1043"],"bugzilla":"822207","bugzilla_description":"CVE-2012-2149 libwpd: Memory overwrite flaw by processing certain WordPerfect (WPD) documents","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libwpd-0:0.8.7-3.1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2149.json"},{"CVE":"CVE-2007-1466","severity":"important","public_date":"2007-03-16T00:00:00Z","advisories":["RHSA-2007:0033","RHSA-2007:0055"],"bugzilla":"1618301","bugzilla_description":"CVE-2007-1466 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openoffice.org-0:1.1.5-10.6.0.EL4","libwpd-0:0.8.7-3.el5","openoffice.org-0:1.1.2-38.2.0.EL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1466.json"},{"CVE":"CVE-2007-0002","severity":"important","public_date":"2007-03-16T00:00:00Z","advisories":["RHSA-2007:0055"],"bugzilla":"222808","bugzilla_description":"CVE-2007-0002 buffer overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libwpd-0:0.8.7-3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0002.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwpg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwpg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwpg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwps_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwps_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwsman1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwsman1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwsman1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwvstreams_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwvstreams_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libwvstreams_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxcb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxcb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxcb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxcb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxcb_security_api_results.json
new file mode 100644
index 0000000..44f1829
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxcb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-2064","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960367","bugzilla_description":"CVE-2013-2064 libxcb: Integer overflow leading to heap-based buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libxcb-0:1.9.1-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2064.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbcommon-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbcommon-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbcommon-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbcommon-x11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbcommon-x11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbcommon-x11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbcommon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbcommon_security_api_results.json
new file mode 100644
index 0000000..7307cea
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbcommon_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-15857","severity":"moderate","public_date":"2018-07-30T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623022","bugzilla_description":"CVE-2018-15857 libxkbcommon: Invalid free in ExprAppendMultiKeysymList resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-15858","severity":"low","public_date":"2018-07-23T00:00:00Z","advisories":[],"bugzilla":"1623024","bugzilla_description":"CVE-2018-15858 libxkbcommon: NULL pointer dereference when handling invalid aliases in CopyKeyAliasesToKeymap resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15858.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15856","severity":"low","public_date":"2018-03-12T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623018","bugzilla_description":"CVE-2018-15856 libxkbcommon: Infinite loop when reaching EOL unexpectedly resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15856.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15855","severity":"low","public_date":"2018-03-11T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623013","bugzilla_description":"CVE-2018-15855 libxkbcommon: NULL pointer dereference when handling xkb_geometry","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15855.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15853","severity":"low","public_date":"2018-03-10T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623009","bugzilla_description":"CVE-2018-15853 libxkbcommon: Endless recursion in xkbcomp/expr.c resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15853.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15854","severity":"low","public_date":"2018-03-10T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623012","bugzilla_description":"CVE-2018-15854 libxkbcommon: NULL pointer dereference resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15854.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15859","severity":"low","public_date":"2017-10-30T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623026","bugzilla_description":"CVE-2018-15859 libxkbcommon: NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15859.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15861","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623028","bugzilla_description":"CVE-2018-15861 libxkbcommon: NULL pointer dereference in ExprResolveLhs resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15861.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15862","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623029","bugzilla_description":"CVE-2018-15862 libxkbcommon: NULL pointer dereference in LookupModMask resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15863","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623030","bugzilla_description":"CVE-2018-15863 libxkbcommon: NULL pointer dereference in ResolveStateAndPredicate resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15863.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15864","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623033","bugzilla_description":"CVE-2018-15864 libxkbcommon: NULL pointer dereference in resolve_keysym resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbfile-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbfile-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbfile-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbfile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbfile_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxkbfile_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxklavier_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxklavier_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxklavier_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxml2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxml2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxml2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxml2-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxml2-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxml2-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxml2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxml2_security_api_results.json
new file mode 100644
index 0000000..c51cd49
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxml2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24977","severity":"moderate","public_date":"2020-09-04T00:00:00Z","advisories":[],"bugzilla":"1877788","bugzilla_description":"CVE-2020-24977 libxml2: Buffer Overflow vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24977.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-20388","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:3996","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1799734","bugzilla_description":"CVE-2019-20388 libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["libxml2-0:2.9.1-6.el7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20388.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7595","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:3996","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1799786","bugzilla_description":"CVE-2020-7595 libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libxml2-0:2.9.1-6.el7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7595.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19956","severity":"moderate","public_date":"2020-01-08T00:00:00Z","advisories":["RHSA-2020:3996","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1788856","bugzilla_description":"CVE-2019-19956 libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["libxml2-0:2.9.1-6.el7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19956.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14404","severity":"moderate","public_date":"2018-06-18T00:00:00Z","advisories":["RHBA-2020:3180","RHBA-2020:1539","RHSA-2020:1827","RHSA-2019:1543","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1595985","bugzilla_description":"CVE-2018-14404 libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4","redhat-coreos-43.82.202007300301.0","libxml2-0:2.9.7-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-9251","severity":"low","public_date":"2018-04-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1827"],"bugzilla":"1565318","bugzilla_description":"CVE-2018-9251 libxml2: infinite loop in xz_decomp function in xzlib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["redhat-coreos-43.82.202007300301.0","libxml2-0:2.9.7-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2018-14567","severity":"low","public_date":"2018-04-03T00:00:00Z","advisories":["RHBA-2020:1539","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1619875","bugzilla_description":"CVE-2018-14567 libxml2: Infinite loop caused by incorrect error detection during LZMA decompression","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14567.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-15412","severity":"important","public_date":"2017-12-06T00:00:00Z","advisories":["RHBA-2020:1539","RHSA-2018:0287","RHSA-2017:3401","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1523128","bugzilla_description":"CVE-2017-15412 libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4","chromium-browser-0:63.0.3239.84-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15412.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5130","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2997"],"bugzilla":"1503537","bugzilla_description":"CVE-2017-5130 chromium-browser: heap overflow in libxml2","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["chromium-browser-0:62.0.3202.62-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5130.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-18258","severity":"low","public_date":"2017-09-07T00:00:00Z","advisories":["RHBA-2020:1539","RHSA-2018:2486","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1566749","bugzilla_description":"CVE-2017-18258 libxml2: Unrestricted memory usage in xz_head() function in xzlib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18258.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2017-16932","severity":"moderate","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1517316","bugzilla_description":"CVE-2017-16932 libxml2: Infinite recursion in parameter entities","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16932.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16931","severity":"moderate","public_date":"2017-06-05T00:00:00Z","advisories":[],"bugzilla":"1517307","bugzilla_description":"CVE-2017-16931 libxml2: Mishandling parameter-entity references","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16931.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-9048","severity":"low","public_date":"2017-05-15T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1452549","bugzilla_description":"CVE-2017-9048 libxml2: Stack-based buffer overflow in function xmlSnprintfElementContent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-9050","severity":"moderate","public_date":"2017-05-15T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1452553","bugzilla_description":"CVE-2017-9050 libxml2: Heap-based buffer over-read in function xmlDictAddString","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9050.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-9047","severity":"moderate","public_date":"2017-05-15T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1452554","bugzilla_description":"CVE-2017-9047 libxml2: Buffer overflow in function xmlSnprintfElementContent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9047.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-9049","severity":"moderate","public_date":"2017-05-15T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1452556","bugzilla_description":"CVE-2017-9049 libxml2: Heap-based buffer over-read in function xmlDictComputeFastKey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9049.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-7375","severity":"moderate","public_date":"2017-04-17T00:00:00Z","advisories":[],"bugzilla":"1462203","bugzilla_description":"CVE-2017-7375 libxml2: Missing validation for external entities in xmlParsePEReference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7375.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-7376","severity":"low","public_date":"2017-04-17T00:00:00Z","advisories":[],"bugzilla":"1462216","bugzilla_description":"CVE-2017-7376 libxml2: Incorrect limit used for port values","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-0663","severity":"moderate","public_date":"2017-04-17T00:00:00Z","advisories":[],"bugzilla":"1462225","bugzilla_description":"CVE-2017-0663 libxml2: Heap buffer overflow in xmlAddID","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0663.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-8872","severity":"low","public_date":"2016-11-28T00:00:00Z","advisories":[],"bugzilla":"1449541","bugzilla_description":"CVE-2017-8872 libxml2: Out-of-bounds read in htmlParseTryOrFinish","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8872.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-5969","severity":"low","public_date":"2016-11-05T00:00:00Z","advisories":[],"bugzilla":"1421996","bugzilla_description":"CVE-2017-5969 libxml2: Null pointer dereference in xmlSaveDoc implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5969.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-4658","severity":"moderate","public_date":"2016-10-12T00:00:00Z","advisories":[],"bugzilla":"1384424","bugzilla_description":"CVE-2016-4658 libxml2: Use after free via namespace node in XPointer ranges","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4658.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9318","severity":"moderate","public_date":"2016-10-06T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1395609","bugzilla_description":"CVE-2016-9318 libxml2: XML External Entity vulnerability","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9318.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L","cvss3_score":"6.7"},{"CVE":"CVE-2016-5131","severity":"important","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1485","RHBA-2020:1539","RHSA-2018:2486","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1358641","bugzilla_description":"CVE-2016-5131 libxml2: Use after free triggered by XPointer paths beginning with range-to","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4","chromium-browser-0:52.0.2743.82-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5131.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-4447","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338686","bugzilla_description":"CVE-2016-4447 libxml2: Heap-based buffer underreads due to xmlParseName","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4447.json"},{"CVE":"CVE-2016-1835","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338691","bugzilla_description":"CVE-2016-1835 libxml2: Heap use-after-free in xmlSAX2AttributeNs","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1835.json"},{"CVE":"CVE-2016-1837","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338696","bugzilla_description":"CVE-2016-1837 libxml2: Heap use-after-free in htmlPArsePubidLiteral and htmlParseSystemiteral","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1837.json"},{"CVE":"CVE-2016-4448","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338700","bugzilla_description":"CVE-2016-4448 libxml2: Format string vulnerability","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-134","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4448.json"},{"CVE":"CVE-2016-4449","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338701","bugzilla_description":"CVE-2016-4449 libxml2: Inappropriate fetch of entities content","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4449.json"},{"CVE":"CVE-2016-1836","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338702","bugzilla_description":"CVE-2016-1836 libxml2: Heap use-after-free in xmlDictComputeFastKey","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1836.json"},{"CVE":"CVE-2016-1839","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338703","bugzilla_description":"CVE-2016-1839 libxml2: Heap-based buffer overread in xmlDictAddString","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1839.json"},{"CVE":"CVE-2016-1838","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338705","bugzilla_description":"CVE-2016-1838 libxml2: Heap-based buffer overread in xmlPArserPrintFileContextInternal","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1838.json"},{"CVE":"CVE-2016-1840","severity":"important","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338706","bugzilla_description":"CVE-2016-1840 libxml2: Heap-buffer-overflow in xmlFAParserPosCharGroup","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-1834","severity":"important","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338708","bugzilla_description":"CVE-2016-1834 libxml2: Heap-buffer-overflow in xmlStrncat","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1834.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-1762","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338711","bugzilla_description":"CVE-2016-1762 libxml2: Heap-based buffer-overread in xmlNextChar","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1762.json"},{"CVE":"CVE-2016-3705","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1332443","bugzilla_description":"CVE-2016-3705 libxml2: stack overflow before detecting invalid XML file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3705.json"},{"CVE":"CVE-2016-4483","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2957"],"bugzilla":"1332820","bugzilla_description":"CVE-2016-4483 libxml2: out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4483.json"},{"CVE":"CVE-2016-9597","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1408305","bugzilla_description":"CVE-2016-9597 libxml2: stack overflow before detecting invalid XML file (unfixed CVE-2016-3705 in JBCS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9597.json"},{"CVE":"CVE-2016-9598","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1408306","bugzilla_description":"CVE-2016-9598 libxml2: out-of-bounds read (unfixed CVE-2016-4483 in JBCS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9598.json"},{"CVE":"CVE-2016-3627","severity":"moderate","public_date":"2016-03-21T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1319829","bugzilla_description":"CVE-2016-3627 libxml2: stack exhaustion while parsing xml files in recovery mode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3627.json"},{"CVE":"CVE-2016-9596","severity":"moderate","public_date":"2016-03-21T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1408302","bugzilla_description":"CVE-2016-9596 libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9596.json"},{"CVE":"CVE-2015-8806","severity":null,"public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1304636","bugzilla_description":"CVE-2015-8806 libxml2: heap-buffer overread in dict.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8806.json"},{"CVE":"CVE-2016-2073","severity":null,"public_date":"2016-01-25T00:00:00Z","advisories":[],"bugzilla":"1301928","bugzilla_description":"CVE-2016-2073 libxml2: out-of-bounds read in htmlParseNameComplex()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2073.json"},{"CVE":"CVE-2015-5312","severity":"moderate","public_date":"2015-12-01T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1276693","bugzilla_description":"CVE-2015-5312 libxml2: CPU exhaustion when processing specially crafted XML input","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5312.json"},{"CVE":"CVE-2015-7497","severity":"moderate","public_date":"2015-12-01T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1281862","bugzilla_description":"CVE-2015-7497 libxml2: Heap-based buffer overflow in xmlDictComputeFastQKey","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7497.json"},{"CVE":"CVE-2015-7498","severity":"moderate","public_date":"2015-12-01T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1281879","bugzilla_description":"CVE-2015-7498 libxml2: Heap-based buffer overflow in xmlParseXmlDecl","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7498.json"},{"CVE":"CVE-2015-7499","severity":"moderate","public_date":"2015-12-01T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1281925","bugzilla_description":"CVE-2015-7499 libxml2: Heap-based buffer overflow in xmlGROW","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7499.json"},{"CVE":"CVE-2015-7500","severity":"moderate","public_date":"2015-12-01T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1281943","bugzilla_description":"CVE-2015-7500 libxml2: Heap buffer overflow in xmlParseMisc","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7500.json"},{"CVE":"CVE-2016-1833","severity":"moderate","public_date":"2015-11-27T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338682","bugzilla_description":"CVE-2016-1833 libxml2: Heap-based buffer overread in htmlCurrentChar","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1833.json"},{"CVE":"CVE-2015-8035","severity":"moderate","public_date":"2015-11-02T00:00:00Z","advisories":["RHSA-2016:1089","RHBA-2020:1539","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1277146","bugzilla_description":"CVE-2015-8035 libxml2: DoS caused by incorrect error detection during XZ decompression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-252","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8035.json"},{"CVE":"CVE-2015-7942","severity":"moderate","public_date":"2015-10-22T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1276297","bugzilla_description":"CVE-2015-7942 libxml2: heap-based buffer overflow in xmlParseConditionalSections()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7942.json"},{"CVE":"CVE-2015-8242","severity":"low","public_date":"2015-10-11T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1281950","bugzilla_description":"CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8242.json"},{"CVE":"CVE-2015-8241","severity":"low","public_date":"2015-10-08T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1281936","bugzilla_description":"CVE-2015-8241 libxml2: Buffer overread with XML parser in xmlNextChar","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8241.json"},{"CVE":"CVE-2015-8317","severity":"low","public_date":"2015-06-29T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1281930","bugzilla_description":"CVE-2015-8317 libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8317.json"},{"CVE":"CVE-2015-8710","severity":"moderate","public_date":"2015-04-19T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1213957","bugzilla_description":"CVE-2015-8710 libxml2: out-of-bounds memory access when parsing an unclosed HTML comment","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-119","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8710.json"},{"CVE":"CVE-2015-1819","severity":"low","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:2550","RHSA-2015:1419"],"bugzilla":"1211278","bugzilla_description":"CVE-2015-1819 libxml2: denial of service processing a crafted XML document","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1819.json"},{"CVE":"CVE-2015-7941","severity":"low","public_date":"2015-02-22T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1274222","bugzilla_description":"CVE-2015-7941 libxml2: Out-of-bounds memory access","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7941.json"},{"CVE":"CVE-2014-3660","severity":"moderate","public_date":"2014-10-16T00:00:00Z","advisories":["RHSA-2014:1885","RHSA-2014:1655"],"bugzilla":"1149084","bugzilla_description":"CVE-2014-3660 libxml2: denial of service via recursive entity expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["libxml2-0:2.6.26-2.1.25.el5_11","libxml2-0:2.7.6-17.el6_6.1","libxml2-0:2.9.1-5.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3660.json"},{"CVE":"CVE-2014-0191","severity":"moderate","public_date":"2014-05-06T00:00:00Z","advisories":["RHSA-2014:0513","RHSA-2015:0749"],"bugzilla":"1090976","bugzilla_description":"CVE-2014-0191 libxml2: external parameter entity loaded when entity substitution is disabled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-611","affected_packages":["libxml2-0:2.9.1-5.el7_1.2","libxml2-0:2.7.6-14.el6_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0191.json"},{"CVE":"CVE-2013-2877","severity":"low","public_date":"2013-07-09T00:00:00Z","advisories":["RHSA-2014:0513"],"bugzilla":"983204","bugzilla_description":"CVE-2013-2877 libxml2: Out-of-bounds read via a document that ends abruptly","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libxml2-0:2.7.6-14.el6_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2877.json"},{"CVE":"CVE-2013-0338","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0581"],"bugzilla":"912400","bugzilla_description":"CVE-2013-0338 libxml2: CPU consumption DoS when performing string substitutions during entities expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libxml2-0:2.6.26-2.1.21.el5_9.1","libxml2-0:2.7.6-12.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0338.json"},{"CVE":"CVE-2013-0339","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"915149","bugzilla_description":"CVE-2013-0339 libxml2: CPU consumption DoS and other effects when performing string substitutions during external entities expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0339.json"},{"CVE":"CVE-2013-1969","severity":"important","public_date":"2012-12-14T00:00:00Z","advisories":[],"bugzilla":"953722","bugzilla_description":"CVE-2013-1969 libxml2: multiple use-after-free flaws","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1969.json"},{"CVE":"CVE-2012-5134","severity":"important","public_date":"2012-11-27T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2012:1512"],"bugzilla":"880466","bugzilla_description":"CVE-2012-5134 libxml2: Heap-buffer-underflow in xmlParseAttValueComplex","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libxml2-0:2.7.6-8.el6_3.4","mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.6.26-2.1.15.el5_8.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5134.json"},{"CVE":"CVE-2012-2807","severity":"moderate","public_date":"2012-06-26T00:00:00Z","advisories":["RHSA-2012:1288"],"bugzilla":"835863","bugzilla_description":"CVE-2012-2807 libxml2 (64-bit): Multiple integer overflows, leading to DoS or possibly other unspecified impact","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["libxml2-0:2.7.6-8.el6_3.3","libxml2-0:2.6.26-2.1.15.el5_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2807.json"},{"CVE":"CVE-2011-3102","severity":"low","public_date":"2012-05-15T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2012:1288"],"bugzilla":"822109","bugzilla_description":"CVE-2011-3102 libxml: An off-by-one out-of-bounds write by XPointer part evaluation","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libxml2-0:2.7.6-8.el6_3.3","mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.6.26-2.1.15.el5_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3102.json"},{"CVE":"CVE-2012-0841","severity":"moderate","public_date":"2012-02-21T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2012:0324"],"bugzilla":"787067","bugzilla_description":"CVE-2012-0841 libxml2: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["libxml2-0:2.6.26-2.1.15.el5_8.2","libxml2-0:2.7.6-4.el6_2.4","mingw32-libxml2-0:2.7.6-6.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0841.json"},{"CVE":"CVE-2011-3919","severity":"important","public_date":"2012-01-06T00:00:00Z","advisories":["RHSA-2012:0018","RHSA-2013:0217","RHSA-2012:0016","RHSA-2012:0104","RHSA-2012:0017"],"bugzilla":"771896","bugzilla_description":"CVE-2011-3919 libxml2: Heap-based buffer overflow when decoding an entity reference with a long name","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.7.6-4.el6_2.1","libxml2-0:2.6.26-2.1.2.8.el5_6.2","libxml2-0:2.6.16-12.9","libxml2-0:2.6.26-2.1.12.el5_7.2","mingw32-libxml2-0:2.7.6-6.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3919.json"},{"CVE":"CVE-2011-3905","severity":"low","public_date":"2011-12-13T00:00:00Z","advisories":["RHSA-2012:0018","RHSA-2013:0217","RHSA-2012:0016","RHSA-2012:0017"],"bugzilla":"767387","bugzilla_description":"CVE-2011-3905 libxml2 out of bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libxml2-0:2.7.6-4.el6_2.1","libxml2-0:2.6.16-12.9","libxml2-0:2.6.26-2.1.12.el5_7.2","mingw32-libxml2-0:2.7.6-6.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3905.json"},{"CVE":"CVE-2011-2834","severity":"low","public_date":"2011-10-11T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2011:1749","RHSA-2012:0016","RHSA-2012:0017"],"bugzilla":"735751","bugzilla_description":"CVE-2011-2834 libxml2: double-free caused by malformed XPath expression in XSLT","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libxml2-0:2.6.16-12.9","libxml2-0:2.6.26-2.1.12.el5_7.2","mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.7.6-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2834.json"},{"CVE":"CVE-2011-2821","severity":"low","public_date":"2011-08-22T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2011:1749"],"bugzilla":"735712","bugzilla_description":"CVE-2011-2821 libxml2: double free caused by malformed XPath expression in XSLT","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-672","affected_packages":["mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.7.6-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2821.json"},{"CVE":"CVE-2011-0216","severity":"low","public_date":"2011-07-20T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2011:1749","RHSA-2012:0016","RHSA-2012:0017"],"bugzilla":"724906","bugzilla_description":"CVE-2011-0216 libxml2: Off-by-one error leading to heap-based buffer overflow in encoding","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.6.16-12.9","libxml2-0:2.6.26-2.1.12.el5_7.2","mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.7.6-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0216.json"},{"CVE":"CVE-2011-1944","severity":"low","public_date":"2011-05-27T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2011:1749","RHSA-2012:0017"],"bugzilla":"709747","bugzilla_description":"CVE-2011-1944 libxml, libxml2: Heap-based buffer overflow by adding new namespace node to an existing nodeset or merging nodesets","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.6.26-2.1.12.el5_7.2","mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.7.6-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1944.json"},{"CVE":"CVE-2010-4494","severity":"low","public_date":"2010-11-17T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2011:1749"],"bugzilla":"665963","bugzilla_description":"CVE-2010-4494 libxml2: double-free in XPath processing code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.7.6-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4494.json"},{"CVE":"CVE-2010-4008","severity":"low","public_date":"2010-11-04T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2011:1749","RHSA-2012:0017"],"bugzilla":"645341","bugzilla_description":"CVE-2010-4008 libxml2: Crash (stack frame overflow or NULL pointer dereference) by traversal of XPath axis","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["libxml2-0:2.6.26-2.1.12.el5_7.2","mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.7.6-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4008.json"},{"CVE":"CVE-2009-2414","severity":"moderate","public_date":"2009-08-10T00:00:00Z","advisories":["RHSA-2009:1206"],"bugzilla":"515195","bugzilla_description":"CVE-2009-2414 libxml, libxml2, mingw32-libxml2: Stack overflow by parsing root XML element DTD definition","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libxml2-0:2.6.26-2.1.2.8","libxml2-0:2.6.16-12.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2414.json"},{"CVE":"CVE-2009-2416","severity":"low","public_date":"2009-08-10T00:00:00Z","advisories":["RHSA-2009:1206"],"bugzilla":"515205","bugzilla_description":"CVE-2009-2416 libxml, libxml2, mingw32-libxml2: Pointer use-after-free flaws by parsing Notation and Enumeration attribute types","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["libxml2-0:2.6.26-2.1.2.8","libxml2-0:2.6.16-12.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2416.json"},{"CVE":"CVE-2008-4226","severity":"important","public_date":"2008-11-17T00:00:00Z","advisories":["RHSA-2008:0988"],"bugzilla":"470466","bugzilla_description":"CVE-2008-4226 libxml2: integer overflow leading to memory corruption in  xmlSAX2Characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["libxml2-0:2.5.10-14","libxml2-0:2.6.26-2.1.2.7","libxml2-0:2.6.16-12.6","libxml2-0:2.4.19-12.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4226.json"},{"CVE":"CVE-2008-4225","severity":"moderate","public_date":"2008-11-17T00:00:00Z","advisories":["RHSA-2008:0988"],"bugzilla":"470480","bugzilla_description":"CVE-2008-4225 libxml2: integer overflow leading to infinite loop in xmlBufferResize","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["libxml2-0:2.5.10-14","libxml2-0:2.6.26-2.1.2.7","libxml2-0:2.6.16-12.6","libxml2-0:2.4.19-12.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4225.json"},{"CVE":"CVE-2008-3529","severity":"important","public_date":"2008-09-11T00:00:00Z","advisories":["RHSA-2008:0884","RHSA-2008:0886"],"bugzilla":"461015","bugzilla_description":"CVE-2008-3529 libxml2: long entity name heap buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libxml2-0:2.6.26-2.1.2.6","libxml2-0:2.5.10-13","libxml2-0:2.4.19-11.ent","libxml2-0:2.6.16-12.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3529.json"},{"CVE":"CVE-2008-3281","severity":"moderate","public_date":"2008-08-20T00:00:00Z","advisories":["RHSA-2008:0836"],"bugzilla":"458086","bugzilla_description":"CVE-2008-3281 libxml2 denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libxml2-0:2.6.26-2.1.2.4","libxml2-0:2.6.16-12.3","libxml2-0:2.5.10-11","libxml2-0:2.4.19-9.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3281.json"},{"CVE":"CVE-2007-6284","severity":"important","public_date":"2008-01-11T00:00:00Z","advisories":["RHSA-2008:0032"],"bugzilla":"425927","bugzilla_description":"CVE-2007-6284 libxml2: infinite loop in UTF-8 decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libxml2-0:2.4.19-7.ent","libxml2-0:2.5.10-8","libxml2-0:2.6.16-10.1","libxml2-0:2.6.26-2.1.2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6284.json"},{"CVE":"CVE-2004-0989","severity":"moderate","public_date":"2004-10-26T00:00:00Z","advisories":["RHSA-2004:615","RHSA-2004:650"],"bugzilla":"430645","bugzilla_description":"CVE-2004-0989 libxml2 various overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libxml-1:1.8.17-9.2","libxml2-0:2.5.10-7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0989.json"},{"CVE":"CVE-2004-0110","severity":"moderate","public_date":"2004-02-12T00:00:00Z","advisories":["RHSA-2004:091","RHSA-2004:650","RHSA-2004:090"],"bugzilla":"430644","bugzilla_description":"CVE-2004-0110 libxml2 long URL causes SEGV","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libxml2-0:2.5.10-6","libxml-1:1.8.17-9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0110.json"},{"CVE":"CVE-2003-1564","severity":"moderate","public_date":"2003-02-02T00:00:00Z","advisories":["RHSA-2008:0886"],"bugzilla":"461107","bugzilla_description":"CVE-2003-1564 libxml2: billion laughs DoS attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libxml2-0:2.4.19-11.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-1564.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxshmfence-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxshmfence-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxshmfence-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxshmfence_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxshmfence_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxshmfence_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxslt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxslt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxslt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxslt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxslt_security_api_results.json
new file mode 100644
index 0000000..752b948
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libxslt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-18197","severity":"moderate","public_date":"2019-10-18T00:00:00Z","advisories":["RHSA-2020:4005","RHSA-2020:0514"],"bugzilla":"1770768","bugzilla_description":"CVE-2019-18197 libxslt: use after free in xsltCopyText in transform.c could lead to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["chromium-browser-0:80.0.3987.87-1.el6_10","libxslt-0:1.1.28-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18197.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13118","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":[],"bugzilla":"1728541","bugzilla_description":"CVE-2019-13118 libxslt: read of uninitialized stack data due to too narrow xsl:number instruction and an invalid character","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13118.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2019-13117","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":[],"bugzilla":"1728546","bugzilla_description":"CVE-2019-13117 libxslt: an xsl number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-134","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13117.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-11068","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4005"],"bugzilla":"1709697","bugzilla_description":"CVE-2019-11068 libxslt: xsltCheckRead and xsltCheckWrite routines security bypass by crafted URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libxslt-0:1.1.28-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11068.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-4738","severity":"moderate","public_date":"2016-10-12T00:00:00Z","advisories":[],"bugzilla":"1388777","bugzilla_description":"CVE-2016-4738 libxslt: Heap overread due to an empty decimal-separator","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-4609","severity":"moderate","public_date":"2016-07-21T00:00:00Z","advisories":[],"bugzilla":"1714979","bugzilla_description":"CVE-2016-4609 libxslt: Out-of-bounds read at xmlGetLineNoInternal()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4609.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-4610","severity":"moderate","public_date":"2016-07-21T00:00:00Z","advisories":[],"bugzilla":"1716448","bugzilla_description":"CVE-2016-4610 libxslt: Invalid memory access leading to DoS at exsltDynMapFunction()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-4607","severity":"moderate","public_date":"2016-07-21T00:00:00Z","advisories":[],"bugzilla":"1716453","bugzilla_description":"CVE-2016-4607 libxslt: allows remote attacker to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4607.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-4608","severity":"moderate","public_date":"2016-07-21T00:00:00Z","advisories":[],"bugzilla":"1716454","bugzilla_description":"CVE-2016-4608 libxslt: stack-based buffer overflow at exsltDateFormat()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4608.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-1683","severity":"moderate","public_date":"2016-05-25T00:00:00Z","advisories":["RHSA-2016:1190"],"bugzilla":"1340016","bugzilla_description":"CVE-2016-1683 chromium-browser: out-of-bounds access in libxslt","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["chromium-browser-0:51.0.2704.63-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1683.json"},{"CVE":"CVE-2016-1684","severity":"moderate","public_date":"2016-05-25T00:00:00Z","advisories":["RHSA-2016:1190"],"bugzilla":"1340017","bugzilla_description":"CVE-2016-1684 chromium-browser: integer overflow in libxslt","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["chromium-browser-0:51.0.2704.63-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1684.json"},{"CVE":"CVE-2015-9019","severity":"low","public_date":"2015-11-20T00:00:00Z","advisories":[],"bugzilla":"1439548","bugzilla_description":"CVE-2015-9019 libxslt: math.random() in xslt uses unseeded randomness","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9019.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-1841","severity":"moderate","public_date":"2015-11-18T00:00:00Z","advisories":[],"bugzilla":"1393780","bugzilla_description":"CVE-2016-1841 libxslt: Use after free in xsltDocumentFunctionLoadDocument","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1841.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2015-7995","severity":"moderate","public_date":"2015-08-26T00:00:00Z","advisories":[],"bugzilla":"1257962","bugzilla_description":"CVE-2015-7995 libxslt: Type confusion may cause DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-587->CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7995.json"},{"CVE":"CVE-2012-6139","severity":"low","public_date":"2012-10-02T00:00:00Z","advisories":[],"bugzilla":"927386","bugzilla_description":"CVE-2012-6139 libxslt: two DoS issues fixed in 1.1.28","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6139.json"},{"CVE":"CVE-2012-2893","severity":"low","public_date":"2012-09-25T00:00:00Z","advisories":["RHSA-2012:1265"],"bugzilla":"860671","bugzilla_description":"CVE-2012-2893 libxslt: Heap-double-free in xmlFreeNodeList","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libxslt-0:1.1.26-2.el6_3.1","libxslt-0:1.1.17-4.el5_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2893.json"},{"CVE":"CVE-2012-2871","severity":"important","public_date":"2012-08-31T00:00:00Z","advisories":["RHSA-2012:1265"],"bugzilla":"852935","bugzilla_description":"CVE-2012-2871 libxslt: Heap-buffer overflow caused by bad cast in XSL transforms","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libxslt-0:1.1.26-2.el6_3.1","libxslt-0:1.1.17-4.el5_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2871.json"},{"CVE":"CVE-2012-2870","severity":"low","public_date":"2012-08-31T00:00:00Z","advisories":["RHSA-2012:1265"],"bugzilla":"852937","bugzilla_description":"CVE-2012-2870 libxslt: Use-after-free when processing an invalid XPath expression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["libxslt-0:1.1.26-2.el6_3.1","libxslt-0:1.1.17-4.el5_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2870.json"},{"CVE":"CVE-2012-2825","severity":"moderate","public_date":"2012-06-26T00:00:00Z","advisories":["RHSA-2012:1265"],"bugzilla":"835982","bugzilla_description":"CVE-2012-2825 libxslt: DoS when reading unexpected DTD nodes in XSLT","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libxslt-0:1.1.26-2.el6_3.1","libxslt-0:1.1.17-4.el5_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2825.json"},{"CVE":"CVE-2011-3970","severity":"low","public_date":"2012-02-09T00:00:00Z","advisories":["RHSA-2012:1265"],"bugzilla":"788826","bugzilla_description":"CVE-2011-3970 libxslt: Out-of-bounds read when parsing certain patterns","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libxslt-0:1.1.26-2.el6_3.1","libxslt-0:1.1.17-4.el5_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3970.json"},{"CVE":"CVE-2011-1202","severity":"low","public_date":"2011-02-22T00:00:00Z","advisories":["RHSA-2011:0471","RHSA-2012:1265"],"bugzilla":"684386","bugzilla_description":"CVE-2011-1202 libxslt: Heap address leak in XLST","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libxslt-0:1.1.26-2.el6_3.1","libxslt-0:1.1.17-4.el5_8.3","firefox-0:3.6.17-2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1202.json"},{"CVE":"CVE-2013-4520","severity":"moderate","public_date":"2009-09-16T00:00:00Z","advisories":[],"bugzilla":"1027360","bugzilla_description":"CVE-2013-4520 libxslt: DoS when reading unexpected DTD nodes in XSLT in versions prior to 1.1.25","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4520.json"},{"CVE":"CVE-2008-2935","severity":"important","public_date":"2008-07-31T14:00:00Z","advisories":["RHSA-2008:0649"],"bugzilla":"455848","bugzilla_description":"CVE-2008-2935 libxslt: buffer overflow in libexslt RC4 encryption/decryption functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libxslt-0:1.1.17-2.el5_2.2","libxslt-0:1.1.11-1.el4_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2935.json"},{"CVE":"CVE-2008-1767","severity":"important","public_date":"2008-04-10T00:00:00Z","advisories":["RHSA-2008:0287"],"bugzilla":"446809","bugzilla_description":"CVE-2008-1767 libxslt: fixed-sized steps array overflow via \"template match\" condition in XSL file","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libxslt-0:1.1.11-1.el4_6.1","libxslt-0:1.1.17-2.el5_1.1","libxslt-0:1.0.33-6","libxslt-0:1.0.15-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1767.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libyami_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libyami_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libyami_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libyaml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libyaml_security_api_results.json
new file mode 100644
index 0000000..a8edf23
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libyaml_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-9130","severity":"moderate","public_date":"2014-11-26T00:00:00Z","advisories":["RHSA-2015:0112","RHSA-2015:0100","RHSA-2015:0260"],"bugzilla":"1169369","bugzilla_description":"CVE-2014-9130 libyaml: assert failure when processing wrapped strings","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["libyaml-0:0.1.4-11.el7_0","libyaml-0:0.1.3-4.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9130.json"},{"CVE":"CVE-2014-2525","severity":"important","public_date":"2014-03-27T00:00:00Z","advisories":["RHSA-2014:0355","RHSA-2014:0353","RHSA-2014:0364","RHSA-2014:0354","RHSA-2014:0415"],"bugzilla":"1078083","bugzilla_description":"CVE-2014-2525 libyaml: heap-based buffer overflow when parsing URLs","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libyaml-0:0.1.3-1.4.el6","ruby193-libyaml-0:0.1.4-5.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2525.json"},{"CVE":"CVE-2013-6393","severity":"moderate","public_date":"2014-01-27T00:00:00Z","advisories":["RHSA-2014:0355","RHSA-2014:0353","RHSA-2014:0364","RHSA-2014:0354","RHSA-2014:0415"],"bugzilla":"1033990","bugzilla_description":"CVE-2013-6393 libyaml: heap-based buffer overflow when parsing YAML tags","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libyaml-0:0.1.3-1.4.el6","ruby193-libyaml-0:0.1.4-5.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6393.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzapojit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzapojit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzapojit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzfcphbaapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzfcphbaapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzfcphbaapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzip_security_api_results.json
new file mode 100644
index 0000000..2b0c6f4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzip_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-14107","severity":"low","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1489000","bugzilla_description":"CVE-2017-14107 libzip: Memory allocation failure in _zip_cdir_grow function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14107.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12858","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1484514","bugzilla_description":"CVE-2017-12858 libzip: Double free in _zip_dirent_read function in zip_dirent.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12858.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-2331","severity":"important","public_date":"2015-03-18T00:00:00Z","advisories":[],"bugzilla":"1204676","bugzilla_description":"CVE-2015-2331 libzip: integer overflow when processing ZIP archives","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2331.json"},{"CVE":"CVE-2012-1162","severity":"moderate","public_date":"2012-03-20T00:00:00Z","advisories":[],"bugzilla":"802564","bugzilla_description":"CVE-2012-1162 libzip: heap overflow flaw when processing malformed zip file","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1162.json"},{"CVE":"CVE-2012-1163","severity":"moderate","public_date":"2012-03-20T00:00:00Z","advisories":[],"bugzilla":"803028","bugzilla_description":"CVE-2012-1163 libzip: integer overflow when processing malformed zip file","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1163.json"},{"CVE":"CVE-2011-0421","severity":"low","public_date":"2011-01-30T00:00:00Z","advisories":[],"bugzilla":"688735","bugzilla_description":"CVE-2011-0421 php/libzip: segfault with FL_UNCHANGED on empty archive in zip_name_locate()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0421.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzmf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzmf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/libzmf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/linux-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/linux-firmware_security_api_results.json
new file mode 100644
index 0000000..c814ebd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/linux-firmware_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-15126","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":[],"bugzilla":"1807728","bugzilla_description":"CVE-2019-15126 linux-firmware: Transmission of data encrypted with an all-zero session key after disassociation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-300","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15126.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-11090","severity":"moderate","public_date":"2020-01-08T00:00:00Z","advisories":[],"bugzilla":"1788755","bugzilla_description":"CVE-2019-11090 CVE-2019-16863 hw: ECDSA signature timing vulnerabilities in TPM module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11090.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-16863","severity":"moderate","public_date":"2020-01-08T00:00:00Z","advisories":[],"bugzilla":"1788755","bugzilla_description":"CVE-2019-11090 CVE-2019-16863 hw: ECDSA signature timing vulnerabilities in TPM module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16863.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-5383","severity":"important","public_date":"2018-07-23T00:00:00Z","advisories":["RHSA-2019:2169"],"bugzilla":"1614159","bugzilla_description":"CVE-2018-5383 kernel: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["linux-firmware-0:20190429-72.gitddde598.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5383.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/linuxconsoletools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/linuxconsoletools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/linuxconsoletools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/linuxptp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/linuxptp_security_api_results.json
new file mode 100644
index 0000000..3bbd481
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/linuxptp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lklug-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lklug-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lklug-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lksctp-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lksctp-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lksctp-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lldpad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lldpad_security_api_results.json
new file mode 100644
index 0000000..9d8ca73
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lldpad_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10932","severity":"low","public_date":"2018-08-10T16:01:00Z","advisories":["RHSA-2019:3673"],"bugzilla":"1614896","bugzilla_description":"CVE-2018-10932 lldptool: improper sanitization of shell-escape codes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["lldpad-0:1.0.1-13.git036e314.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10932.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/llvm-private_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/llvm-private_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/llvm-private_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lm_sensors-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lm_sensors-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lm_sensors-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lm_sensors-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lm_sensors-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lm_sensors-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lm_sensors_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lm_sensors_security_api_results.json
new file mode 100644
index 0000000..a9f3506
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lm_sensors_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2005-2672","severity":"low","public_date":"2005-08-14T00:00:00Z","advisories":["RHSA-2005:825"],"bugzilla":"1617739","bugzilla_description":"CVE-2005-2672 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["lm_sensors-0:2.8.7-2.40.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2672.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lockdev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lockdev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lockdev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/log4cxx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/log4cxx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/log4cxx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/log4j_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/log4j_security_api_results.json
new file mode 100644
index 0000000..1da2f5a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/log4j_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9488","severity":"low","public_date":"2020-04-25T00:00:00Z","advisories":["RHSA-2020:3817","RHSA-2020:2391","RHSA-2020:3779","RHSA-2020:3626"],"bugzilla":"1831139","bugzilla_description":"CVE-2020-9488 log4j: improper validation of certificate with host mismatch in SMTP appender","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9488.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-17571","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2638"],"bugzilla":"1785616","bugzilla_description":"CVE-2019-17571 log4j: deserialization of untrusted data in SocketServer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-5645","severity":"important","public_date":"2017-04-02T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2635","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1417","RHSA-2017:1801","RHSA-2017:2637","RHSA-2017:2638","RHSA-2017:2808","RHSA-2017:2809"],"bugzilla":"1443635","bugzilla_description":"CVE-2017-5645 log4j: Socket receiver deserialization vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-java-common-log4j-0:1.2.17-15.15.el6","log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7","rh-java-common-log4j-0:1.2.17-15.15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/logrotate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/logrotate_security_api_results.json
new file mode 100644
index 0000000..b4ee89b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/logrotate_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-1154","severity":"moderate","public_date":"2011-02-13T00:00:00Z","advisories":["RHSA-2011:0407"],"bugzilla":"680796","bugzilla_description":"CVE-2011-1154 logrotate: Shell command injection by using the shred configuration directive","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["logrotate-0:3.7.8-12.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1154.json"},{"CVE":"CVE-2011-1155","severity":"low","public_date":"2011-02-13T00:00:00Z","advisories":["RHSA-2011:0407"],"bugzilla":"680797","bugzilla_description":"CVE-2011-1155 logrotate: DoS due improper escaping of file names within 'write state' action","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["logrotate-0:3.7.8-12.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1155.json"},{"CVE":"CVE-2011-1098","severity":"low","public_date":"2011-02-13T00:00:00Z","advisories":["RHSA-2011:0407"],"bugzilla":"680798","bugzilla_description":"CVE-2011-1098 logrotate: TOCTOU race condition by creation of new files (between opening the file and moment, final permissions have been applied) [information disclosure]","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-367","affected_packages":["logrotate-0:3.7.8-12.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1098.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/logwatch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/logwatch_security_api_results.json
new file mode 100644
index 0000000..19d4d98
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/logwatch_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-1018","severity":"important","public_date":"2011-02-16T00:00:00Z","advisories":["RHSA-2011:0324"],"bugzilla":"680237","bugzilla_description":"CVE-2011-1018 logwatch: Privilege escalation due improper sanitization of special characters in log file names","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-73->CWE-78","affected_packages":["logwatch-0:7.3.6-49.el6","logwatch-0:7.3-9.el5_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1018.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-assamese-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-assamese-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-assamese-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-bengali-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-bengali-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-bengali-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-devanagari-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-devanagari-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-devanagari-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-gujarati-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-gujarati-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-gujarati-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-kannada-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-kannada-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-kannada-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-malayalam-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-malayalam-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-malayalam-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-marathi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-marathi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-marathi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-nepali-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-nepali-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-nepali-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-oriya-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-oriya-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-oriya-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-punjabi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-punjabi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-punjabi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-tamil-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-tamil-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-tamil-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-telugu-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-telugu-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lohit-telugu-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lorax_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lorax_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lorax_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lpsolve_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lpsolve_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lpsolve_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lrzsz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lrzsz_security_api_results.json
new file mode 100644
index 0000000..ff76b66
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lrzsz_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10195","severity":"moderate","public_date":"2018-04-18T00:00:00Z","advisories":[],"bugzilla":"1572058","bugzilla_description":"CVE-2018-10195 lrzsz: Integer overflow in src/zm.c:zsdata() causes crash in sz and can leak information to receiver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lshw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lshw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lshw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lsof_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lsof_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lsof_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lsscsi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lsscsi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lsscsi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lsvpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lsvpd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lsvpd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ltrace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ltrace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ltrace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lua_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lua_security_api_results.json
new file mode 100644
index 0000000..b3f4dc6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lua_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24369","severity":"low","public_date":"2020-07-24T00:00:00Z","advisories":[],"bugzilla":"1870230","bugzilla_description":"CVE-2020-24369 lua: NULL pointer dereference when trying to access debug information via the line hook of a stripped function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24369.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-24370","severity":"low","public_date":"2020-07-24T00:00:00Z","advisories":[],"bugzilla":"1870290","bugzilla_description":"CVE-2020-24370 lua: segmentation fault in getlocal and setlocal functions in ldebug.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24370.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-24371","severity":"moderate","public_date":"2020-07-15T00:00:00Z","advisories":[],"bugzilla":"1870294","bugzilla_description":"CVE-2020-24371 lua: mishandles the interaction between barriers and the sweep phase leading to a memory access violation involving collectgarbage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24371.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-15945","severity":"moderate","public_date":"2020-07-09T00:00:00Z","advisories":[],"bugzilla":"1861999","bugzilla_description":"CVE-2020-15945 lua: segmentation fault in changedline in ldebug.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15945.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-15888","severity":"important","public_date":"2020-07-06T00:00:00Z","advisories":[],"bugzilla":"1860310","bugzilla_description":"CVE-2020-15888 lua: stack resizes and garbage collection leads to heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15888.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15889","severity":"important","public_date":"2020-07-06T00:00:00Z","advisories":[],"bugzilla":"1860316","bugzilla_description":"CVE-2020-15889 lua: heap-based buffer over-read in lgc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15889.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-24342","severity":"moderate","public_date":"2020-07-06T00:00:00Z","advisories":[],"bugzilla":"1873084","bugzilla_description":"CVE-2020-24342 lua: buffer overflow in luaO_pushvfstring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24342.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-6706","severity":"moderate","public_date":"2019-01-10T00:00:00Z","advisories":["RHSA-2019:3706"],"bugzilla":"1670019","bugzilla_description":"CVE-2019-6706 lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["lua-0:5.3.4-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-5461","severity":"moderate","public_date":"2013-04-17T00:00:00Z","advisories":[],"bugzilla":"1132304","bugzilla_description":"CVE-2014-5461 lua: overflow flaw in vararg functions","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5461.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/luksmeta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/luksmeta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/luksmeta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2-python-boom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2-python-boom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2-python-boom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2-python-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2-python-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2-python-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2_security_api_results.json
new file mode 100644
index 0000000..43689da
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lvm2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8991","severity":"low","public_date":"2020-02-05T00:00:00Z","advisories":[],"bugzilla":"1805922","bugzilla_description":"CVE-2020-8991 lvm2: memory leak in vg_lookup in daemons/lvmetad/lvmetad-core.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8991.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.3"},{"CVE":"CVE-2010-2526","severity":"moderate","public_date":"2010-07-28T00:00:00Z","advisories":["RHSA-2010:0568","RHSA-2010:0567"],"bugzilla":"614248","bugzilla_description":"CVE-2010-2526 lvm2-cluster: insecurity when communicating between lvm2 and clvmd","cvss_score":4.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["lvm2-cluster-0:2.02.42-5.el4_8.2","lvm2-cluster-0:2.02.56-7.el5_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2526.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lz4_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lz4_security_api_results.json
new file mode 100644
index 0000000..9c7d94c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lz4_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17543","severity":"moderate","public_date":"2019-07-17T00:00:00Z","advisories":[],"bugzilla":"1765316","bugzilla_description":"CVE-2019-17543 lz4: heap-based buffer overflow in LZ4_write32","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17543.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lzo-minilzo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lzo-minilzo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lzo-minilzo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lzo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lzo_security_api_results.json
new file mode 100644
index 0000000..56528c5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lzo_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-4607","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":["RHSA-2014:0861"],"bugzilla":"1112418","bugzilla_description":"CVE-2014-4607 lzo: lzo1x_decompress_safe() integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["lzo-0:2.03-3.1.el6_5.1","lzo-0:2.06-6.el7_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4607.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lzop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lzop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/lzop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m17n-contrib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m17n-contrib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m17n-contrib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m17n-db_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m17n-db_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m17n-db_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m17n-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m17n-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m17n-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m2crypto_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m2crypto_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m2crypto_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m4_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m4_security_api_results.json
new file mode 100644
index 0000000..f2b85ce
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/m4_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10683","severity":"moderate","public_date":"2020-04-15T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3585","RHSA-2020:3461","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:3637"],"bugzilla":"1694235","bugzilla_description":"CVE-2020-10683 dom4j: XML External Entity vulnerability in default SAX parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10683.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2018-1000632","severity":"moderate","public_date":"2018-07-01T00:00:00Z","advisories":["RHSA-2019:0364","RHSA-2019:1159","RHSA-2019:0365","RHSA-2019:1162","RHSA-2020:3192","RHSA-2019:1161","RHSA-2019:1160","RHSA-2019:3172","RHSA-2019:0380"],"bugzilla":"1620529","bugzilla_description":"CVE-2018-1000632 dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/madan-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/madan-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/madan-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mailcap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mailcap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mailcap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mailman_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mailman_security_api_results.json
new file mode 100644
index 0000000..b40876d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mailman_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15011","severity":"moderate","public_date":"2020-05-07T00:00:00Z","advisories":[],"bugzilla":"1850684","bugzilla_description":"CVE-2020-15011 mailman: arbitrary content injection via the private archive login page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15011.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2020-12108","severity":"moderate","public_date":"2020-05-06T00:00:00Z","advisories":[],"bugzilla":"1848856","bugzilla_description":"CVE-2020-12108 mailman: /options/mailman allows Arbitrary Content Injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12108.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-12137","severity":"moderate","public_date":"2020-02-24T00:00:00Z","advisories":[],"bugzilla":"1830007","bugzilla_description":"CVE-2020-12137 mailman: XSS via file attachments in list archives","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12137.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-13796","severity":"moderate","public_date":"2018-07-23T00:00:00Z","advisories":["RHSA-2020:1054"],"bugzilla":"1609090","bugzilla_description":"CVE-2018-13796 mailman: Mishandled URLs in Utils.py:GetPathPieces() allows attackers to display arbitrary text on trusted sites","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["mailman-3:2.1.15-30.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-0618","severity":"moderate","public_date":"2018-06-22T00:00:00Z","advisories":["RHSA-2020:1054"],"bugzilla":"1596458","bugzilla_description":"CVE-2018-0618 mailman: Cross-site scripting vulnerability allows malicious listowners to inject scripts into listinfo pages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["mailman-3:2.1.15-30.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-5950","severity":"moderate","public_date":"2018-01-20T00:00:00Z","advisories":["RHSA-2018:0504","RHSA-2018:0505"],"bugzilla":"1537941","bugzilla_description":"CVE-2018-5950 mailman: Cross-site scripting (XSS) vulnerability in web UI","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["mailman-3:2.1.12-26.el6_9.3","mailman-3:2.1.15-26.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5950.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-7123","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":[],"bugzilla":"1373125","bugzilla_description":"CVE-2016-7123 mailman: Missing CSRF protection in admin web interface","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7123.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-6893","severity":"moderate","public_date":"2016-08-19T00:00:00Z","advisories":[],"bugzilla":"1370155","bugzilla_description":"CVE-2016-6893 mailman: CSRF protection missing in the user options page","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2015-2775","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:1417","RHSA-2015:1153"],"bugzilla":"1208059","bugzilla_description":"CVE-2015-2775 mailman: directory traversal in MTA transports that deliver programmatically","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-22","affected_packages":["mailman-3:2.1.12-25.el6","mailman-3:2.1.15-21.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2775.json"},{"CVE":"CVE-2011-0707","severity":"moderate","public_date":"2011-02-18T00:00:00Z","advisories":["RHSA-2011:0307","RHSA-2011:0308"],"bugzilla":"677375","bugzilla_description":"CVE-2011-0707 Mailman: Three XSS flaws due improper escaping of the full name of the member","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["mailman-3:2.1.9-6.el5_6.1","mailman-3:2.1.5.1-34.rhel4.7","mailman-3:2.1.12-14.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0707.json"},{"CVE":"CVE-2010-3089","severity":"low","public_date":"2010-09-09T00:00:00Z","advisories":["RHSA-2011:0307","RHSA-2011:0308"],"bugzilla":"631881","bugzilla_description":"CVE-2010-3089 mailman: Multiple security flaws leading to cross-site scripting (XSS) attacks","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["mailman-3:2.1.9-6.el5_6.1","mailman-3:2.1.5.1-34.rhel4.7","mailman-3:2.1.12-14.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3089.json"},{"CVE":"CVE-2002-0389","severity":"low","public_date":"2008-08-19T00:00:00Z","advisories":["RHSA-2015:1417"],"bugzilla":"723584","bugzilla_description":"CVE-2002-0389 mailman: Local users able to read private mailing list archives","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["mailman-3:2.1.12-25.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2002-0389.json"},{"CVE":"CVE-2008-0564","severity":"low","public_date":"2008-01-03T00:00:00Z","advisories":["RHSA-2011:0307"],"bugzilla":"431526","bugzilla_description":"CVE-2008-0564 mailman: XSS triggerable by list administrator","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["mailman-3:2.1.9-6.el5_6.1","mailman-3:2.1.5.1-34.rhel4.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0564.json"},{"CVE":"CVE-2006-2941","severity":"moderate","public_date":"2006-09-04T00:00:00Z","advisories":["RHSA-2006:0600"],"bugzilla":"1618129","bugzilla_description":"CVE-2006-2941 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5.1-25.rhel3.7","mailman-3:2.1.5.1-34.rhel4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2941.json"},{"CVE":"CVE-2006-3636","severity":"moderate","public_date":"2006-09-04T00:00:00Z","advisories":["RHSA-2006:0600"],"bugzilla":"1618152","bugzilla_description":"CVE-2006-3636 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5.1-25.rhel3.7","mailman-3:2.1.5.1-34.rhel4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3636.json"},{"CVE":"CVE-2006-4624","severity":"low","public_date":"2006-06-23T00:00:00Z","advisories":["RHSA-2007:0779"],"bugzilla":"205651","bugzilla_description":"CVE-2006-4624 mailman logfile CRLF injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5.1-34.rhel4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4624.json"},{"CVE":"CVE-2005-3573","severity":"moderate","public_date":"2005-09-12T00:00:00Z","advisories":["RHSA-2006:0204"],"bugzilla":"1617824","bugzilla_description":"CVE-2005-3573 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5.1-34.rhel4.2","mailman-3:2.1.5.1-25.rhel3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3573.json"},{"CVE":"CVE-2005-4153","severity":"moderate","public_date":"2005-09-01T00:00:00Z","advisories":["RHSA-2006:0204"],"bugzilla":"1617854","bugzilla_description":"CVE-2005-4153 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5.1-34.rhel4.2","mailman-3:2.1.5.1-25.rhel3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4153.json"},{"CVE":"CVE-2006-0052","severity":"moderate","public_date":"2005-06-06T00:00:00Z","advisories":["RHSA-2006:0486"],"bugzilla":"1617871","bugzilla_description":"CVE-2006-0052 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5.1-25.rhel3.5","mailman-3:2.1.5.1-34.rhel4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0052.json"},{"CVE":"CVE-2005-0202","severity":"important","public_date":"2005-02-09T00:00:00Z","advisories":["RHSA-2005:137","RHSA-2005:136"],"bugzilla":"1617490","bugzilla_description":"CVE-2005-0202 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5-31.rhel4","mailman-3:2.1.5-24.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0202.json"},{"CVE":"CVE-2004-1177","severity":"important","public_date":"2005-01-10T00:00:00Z","advisories":["RHSA-2005:235"],"bugzilla":"1617389","bugzilla_description":"CVE-2004-1177 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5-33.rhel4","mailman-3:2.1.5-25.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1177.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mailx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mailx_security_api_results.json
new file mode 100644
index 0000000..72a97b2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mailx_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-5899","severity":"moderate","public_date":"2017-01-27T00:00:00Z","advisories":[],"bugzilla":"1418204","bugzilla_description":"CVE-2017-5899 s-nail: privsep helper local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5899.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2004-2771","severity":"moderate","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2014:1999"],"bugzilla":"1162783","bugzilla_description":"CVE-2004-2771 CVE-2014-7844 mailx: command execution flaw","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-78","affected_packages":["mailx-0:12.5-12.el7_0","mailx-0:12.4-8.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-2771.json"},{"CVE":"CVE-2014-7844","severity":"moderate","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2014:1999"],"bugzilla":"1162783","bugzilla_description":"CVE-2004-2771 CVE-2014-7844 mailx: command execution flaw","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-78","affected_packages":["mailx-0:12.5-12.el7_0","mailx-0:12.4-8.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7844.json"},{"CVE":"CVE-2011-2895","severity":"important","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2011:1154","RHSA-2011:1155","RHSA-2011:1161","RHSA-2011:1834"],"bugzilla":"727624","bugzilla_description":"CVE-2011-2895 BSD compress LZW decoder buffer overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libXfont-0:1.2.2-1.0.3.el5_6","libXfont-0:1.4.1-2.el6_1","freetype-0:2.1.9-19.el4","xorg-x11-0:6.8.2-1.EL.69","libXfont-0:1.2.2-1.0.4.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2895.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/make_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/make_security_api_results.json
new file mode 100644
index 0000000..4325e4f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/make_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3885","severity":"low","public_date":"2019-04-17T09:45:00Z","advisories":["RHSA-2019:1279","RHSA-2019:1278"],"bugzilla":"1694554","bugzilla_description":"CVE-2019-3885 pacemaker: Information disclosure through use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["pacemaker-0:1.1.19-8.el7_6.5","pacemaker-0:2.0.1-4.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-16877","severity":"important","public_date":"2019-04-17T04:30:00Z","advisories":["RHSA-2019:1279","RHSA-2019:1278"],"bugzilla":"1652646","bugzilla_description":"CVE-2018-16877 pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["pacemaker-0:1.1.19-8.el7_6.5","pacemaker-0:2.0.1-4.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16877.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-16878","severity":"moderate","public_date":"2019-04-17T04:30:00Z","advisories":["RHSA-2019:1279","RHSA-2019:1278"],"bugzilla":"1657962","bugzilla_description":"CVE-2018-16878 pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["pacemaker-0:1.1.19-8.el7_6.5","pacemaker-0:2.0.1-4.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16878.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-7035","severity":"important","public_date":"2016-11-03T00:00:00Z","advisories":["RHSA-2016:2675","RHSA-2016:2614"],"bugzilla":"1369732","bugzilla_description":"CVE-2016-7035 pacemaker: Privilege escalation due to improper guarding of IPC communication","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-285","affected_packages":["pacemaker-0:1.1.14-8.el6_8.2","pacemaker-0:1.1.15-11.el7_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7035.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-7797","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2578"],"bugzilla":"1379784","bugzilla_description":"CVE-2016-7797 pacemaker: pacemaker remote nodes vulnerable to hijacking, resulting in a DoS attack","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["pacemaker-0:1.1.15-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2015-1867","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:2383","RHSA-2015:1424"],"bugzilla":"1211370","bugzilla_description":"CVE-2015-1867 pacemaker: acl read-only access allow role assignment","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-863","affected_packages":["pacemaker-0:1.1.13-10.el7","pacemaker-0:1.1.12-8.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1867.json"},{"CVE":"CVE-2013-0281","severity":"low","public_date":"2013-02-14T00:00:00Z","advisories":["RHSA-2013:1635"],"bugzilla":"891922","bugzilla_description":"CVE-2013-0281 pacemaker: remote DoS when CIB management is enabled caused by use of blocking sockets","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pacemaker-0:1.1.10-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0281.json"},{"CVE":"CVE-2012-3386","severity":"low","public_date":"2012-07-09T00:00:00Z","advisories":["RHSA-2013:0526","RHSA-2014:1243"],"bugzilla":"838286","bugzilla_description":"CVE-2012-3386 automake: locally exploitable \"make distcheck\" bug","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-732","affected_packages":["automake-0:1.9.6-3.el5","automake-0:1.11.1-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3386.json"},{"CVE":"CVE-2011-1920","severity":"low","public_date":"2011-05-14T00:00:00Z","advisories":[],"bugzilla":"705100","bugzilla_description":"CVE-2011-1920 mk-files: insecure temporary file usage","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1920.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/malaga-suomi-voikko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/malaga-suomi-voikko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/malaga-suomi-voikko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mallard-rng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mallard-rng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mallard-rng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-db_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-db_security_api_results.json
new file mode 100644
index 0000000..cf83706
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-db_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-1336","severity":"moderate","public_date":"2015-12-13T00:00:00Z","advisories":[],"bugzilla":"1292432","bugzilla_description":"CVE-2015-1336 man-db: TOCTOU bug when processing catman pages","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1336.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-cs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-cs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-cs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-es-extra_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-es-extra_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-es-extra_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-es_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-es_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-es_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-fr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-fr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-fr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-it_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-it_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-it_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-ja_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-ja_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-ja_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-ko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-ko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-ko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-overrides_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-overrides_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-overrides_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-pl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-pl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-pl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-ru_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-ru_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-ru_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-zh-CN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-zh-CN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages-zh-CN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/man-pages_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-bench_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-bench_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-bench_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb_security_api_results.json
new file mode 100644
index 0000000..d6f617a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mariadb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14760","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890735","bugzilla_description":"CVE-2020-14760 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14760.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-14672","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890737","bugzilla_description":"CVE-2020-14672 mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14765","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890738","bugzilla_description":"CVE-2020-14765 mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14765.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14769","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890739","bugzilla_description":"CVE-2020-14769 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14769.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14771","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890740","bugzilla_description":"CVE-2020-14771 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14771.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-14773","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890742","bugzilla_description":"CVE-2020-14773 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14773.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14776","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890743","bugzilla_description":"CVE-2020-14776 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14776.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14777","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890744","bugzilla_description":"CVE-2020-14777 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14777.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14785","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890745","bugzilla_description":"CVE-2020-14785 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14785.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14786","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890746","bugzilla_description":"CVE-2020-14786 mysql: Server: PS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14786.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14789","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890747","bugzilla_description":"CVE-2020-14789 mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14789.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14790","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890748","bugzilla_description":"CVE-2020-14790 mysql: Server: PS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14790.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14791","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890749","bugzilla_description":"CVE-2020-14791 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14791.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-14793","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890750","bugzilla_description":"CVE-2020-14793 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14793.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14794","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890751","bugzilla_description":"CVE-2020-14794 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14794.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14799","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890752","bugzilla_description":"CVE-2020-14799 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14799.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14800","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890753","bugzilla_description":"CVE-2020-14800 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14800.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14804","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890754","bugzilla_description":"CVE-2020-14804 mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14804.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14809","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890755","bugzilla_description":"CVE-2020-14809 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14809.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14812","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890756","bugzilla_description":"CVE-2020-14812 mysql: Server: Locking unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14812.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14814","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890757","bugzilla_description":"CVE-2020-14814 mysql: Server: DML unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14814.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14821","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890758","bugzilla_description":"CVE-2020-14821 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14821.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14827","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890759","bugzilla_description":"CVE-2020-14827 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14827.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-14828","severity":"important","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890760","bugzilla_description":"CVE-2020-14828 mysql: Server: DML unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14828.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14829","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890761","bugzilla_description":"CVE-2020-14829 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14829.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14830","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890762","bugzilla_description":"CVE-2020-14830 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14830.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14836","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890763","bugzilla_description":"CVE-2020-14836 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14836.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14837","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890764","bugzilla_description":"CVE-2020-14837 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14837.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14838","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890765","bugzilla_description":"CVE-2020-14838 mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14838.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-14839","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890766","bugzilla_description":"CVE-2020-14839 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14839.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14844","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890767","bugzilla_description":"CVE-2020-14844 mysql: Server: PS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14844.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14845","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890768","bugzilla_description":"CVE-2020-14845 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14846","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890769","bugzilla_description":"CVE-2020-14846 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14846.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14848","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890770","bugzilla_description":"CVE-2020-14848 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14848.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14852","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890771","bugzilla_description":"CVE-2020-14852 mysql: Server: Charsets unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14852.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14860","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890772","bugzilla_description":"CVE-2020-14860 mysql: Server: Security: Roles unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14860.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-14861","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890773","bugzilla_description":"CVE-2020-14861 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14861.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14866","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890774","bugzilla_description":"CVE-2020-14866 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14866.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14867","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890775","bugzilla_description":"CVE-2020-14867 mysql: Server: DDL unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14867.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-14868","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890776","bugzilla_description":"CVE-2020-14868 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14868.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14869","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890777","bugzilla_description":"CVE-2020-14869 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14869.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14870","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890778","bugzilla_description":"CVE-2020-14870 mysql: Server: X Plugin unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14870.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14873","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890779","bugzilla_description":"CVE-2020-14873 mysql: Server: Logging unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14873.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-14878","severity":"important","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890780","bugzilla_description":"CVE-2020-14878 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14878.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2020-14888","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890781","bugzilla_description":"CVE-2020-14888 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14888.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14891","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890782","bugzilla_description":"CVE-2020-14891 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14891.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14893","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890783","bugzilla_description":"CVE-2020-14893 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14893.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14775","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890784","bugzilla_description":"CVE-2020-14775 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14775.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14539","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865945","bugzilla_description":"CVE-2020-14539 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14539.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14540","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865947","bugzilla_description":"CVE-2020-14540 mysql: Server: DML unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14540.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14547","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865948","bugzilla_description":"CVE-2020-14547 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14547.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14550","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2019:1258","RHSA-2019:2327","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865949","bugzilla_description":"CVE-2020-14550 mysql: C API unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mariadb-1:5.5.64-1.el7","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14550.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-14553","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865950","bugzilla_description":"CVE-2020-14553 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-14559","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865951","bugzilla_description":"CVE-2020-14559 mysql: Server: Information Schema unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-14567","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865952","bugzilla_description":"CVE-2020-14567 mysql: Server: Replication unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14567.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14568","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865953","bugzilla_description":"CVE-2020-14568 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14568.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14575","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865954","bugzilla_description":"CVE-2020-14575 mysql: Server: DML unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14575.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14576","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865955","bugzilla_description":"CVE-2020-14576 mysql: Server: UDF unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14576.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865956","bugzilla_description":"CVE-2020-14586 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14591","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":[],"bugzilla":"1865957","bugzilla_description":"CVE-2020-14591 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14591.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14597","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865958","bugzilla_description":"CVE-2020-14597 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14614","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865959","bugzilla_description":"CVE-2020-14614 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14614.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14619","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865960","bugzilla_description":"CVE-2020-14619 mysql: Server: Parser unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14620","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865961","bugzilla_description":"CVE-2020-14620 mysql: Server: DML unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14620.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14623","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865962","bugzilla_description":"CVE-2020-14623 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14623.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14624","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865963","bugzilla_description":"CVE-2020-14624 mysql: Server: JSON unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14624.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14631","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865964","bugzilla_description":"CVE-2020-14631 mysql: Server: Security: Audit unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14631.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14632","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865965","bugzilla_description":"CVE-2020-14632 mysql: Server: Options unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14632.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14633","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865966","bugzilla_description":"CVE-2020-14633 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14633.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-14634","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865967","bugzilla_description":"CVE-2020-14634 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14634.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-14641","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865968","bugzilla_description":"CVE-2020-14641 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14641.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.9"},{"CVE":"CVE-2020-14643","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865969","bugzilla_description":"CVE-2020-14643 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14643.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-14654","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865970","bugzilla_description":"CVE-2020-14654 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14654.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14656","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865971","bugzilla_description":"CVE-2020-14656 mysql: Server: Locking unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14663","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865972","bugzilla_description":"CVE-2020-14663 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14678","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865973","bugzilla_description":"CVE-2020-14678 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14678.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14680","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865974","bugzilla_description":"CVE-2020-14680 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14680.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14697","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865975","bugzilla_description":"CVE-2020-14697 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14697.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14702","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865976","bugzilla_description":"CVE-2020-14702 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14702.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14725","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865977","bugzilla_description":"CVE-2020-14725 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14725.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14651","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865982","bugzilla_description":"CVE-2020-14651 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14651.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-13249","severity":"moderate","public_date":"2020-05-20T00:00:00Z","advisories":["RHSA-2020:4174"],"bugzilla":"1839827","bugzilla_description":"CVE-2020-13249 mariadb-connector-c: Improper validation of content in a OK packet received from server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13249.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-2759","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830048","bugzilla_description":"CVE-2020-2759 mysql: Server: Replication unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2759.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2761","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830049","bugzilla_description":"CVE-2020-2761 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2761.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2762","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830050","bugzilla_description":"CVE-2020-2762 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2763","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830051","bugzilla_description":"CVE-2020-2763 mysql: Server: Replication unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2763.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2765","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830052","bugzilla_description":"CVE-2020-2765 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2765.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2770","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830053","bugzilla_description":"CVE-2020-2770 mysql: Server: Logging unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2770.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2774","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830054","bugzilla_description":"CVE-2020-2774 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2774.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2779","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830055","bugzilla_description":"CVE-2020-2779 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2780","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830056","bugzilla_description":"CVE-2020-2780 mysql: Server: DML unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2790","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1830057","bugzilla_description":"CVE-2020-2790 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2804","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830058","bugzilla_description":"CVE-2020-2804 mysql: Server: Memcached unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-2812","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830059","bugzilla_description":"CVE-2020-2812 mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2814","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830060","bugzilla_description":"CVE-2020-2814 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2853","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830061","bugzilla_description":"CVE-2020-2853 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2853.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2892","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830062","bugzilla_description":"CVE-2020-2892 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2892.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2893","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830064","bugzilla_description":"CVE-2020-2893 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2895","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830066","bugzilla_description":"CVE-2020-2895 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2895.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2896","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830067","bugzilla_description":"CVE-2020-2896 mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2896.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2897","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830068","bugzilla_description":"CVE-2020-2897 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2898","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830069","bugzilla_description":"CVE-2020-2898 mysql: Server: Charsets unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2898.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2901","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830070","bugzilla_description":"CVE-2020-2901 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2901.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2903","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830071","bugzilla_description":"CVE-2020-2903 mysql: Server: Connection Handling unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2903.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2904","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830072","bugzilla_description":"CVE-2020-2904 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2904.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2921","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830073","bugzilla_description":"CVE-2020-2921 mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2921.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-2923","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830074","bugzilla_description":"CVE-2020-2923 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2924","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830075","bugzilla_description":"CVE-2020-2924 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2924.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2925","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830076","bugzilla_description":"CVE-2020-2925 mysql: Server: PS unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2926","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830077","bugzilla_description":"CVE-2020-2926 mysql: Server: Group Replication GCS unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2926.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-2928","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830078","bugzilla_description":"CVE-2020-2928 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2930","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830079","bugzilla_description":"CVE-2020-2930 mysql: Server: Parser unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2930.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-2806","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1830081","bugzilla_description":"CVE-2020-2806 mysql: Server: Compiling unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2806.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-2760","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830082","bugzilla_description":"CVE-2020-2760 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2760.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-2752","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1835849","bugzilla_description":"CVE-2020-2752 mysql: C API unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-2922","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2020:3732","RHSA-2020:4174","RHSA-2019:3708","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1835850","bugzilla_description":"CVE-2020-2922 mysql: C API unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","rh-mysql80-mysql-0:8.0.21-1.el7","mariadb-1:5.5.65-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2570","severity":"low","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1798559","bugzilla_description":"CVE-2020-2570 mysql: C API unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2570.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-2573","severity":"low","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1798576","bugzilla_description":"CVE-2020-2573 mysql: C API unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2573.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-2574","severity":"low","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1798587","bugzilla_description":"CVE-2020-2574 mysql: C API unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2574.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-7221","severity":"moderate","public_date":"2020-02-04T00:00:00Z","advisories":[],"bugzilla":"1802786","bugzilla_description":"CVE-2020-7221 mariadb: mysql_install_db allows privilege escalation due to unsafe chown and chmod operations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7221.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19346","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:0694","RHSA-2020:0617","RHSA-2020:0681","RHSA-2020:0802"],"bugzilla":"1793289","bugzilla_description":"CVE-2019-19346 openshift/mariadb-apb: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift4/apb-base:v4.2.21-202002240343","openshift4/mariadb-apb:v4.3.5-202003020549","openshift3/mariadb-apb:v3.11.188-4","openshift4/apb-base:v4.1.37-202003021622"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19346.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-2572","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1796879","bugzilla_description":"CVE-2020-2572 mysql: Server: Audit Plugin unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2572.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-2577","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796880","bugzilla_description":"CVE-2020-2577 mysql: InnoDB unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2579","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796881","bugzilla_description":"CVE-2020-2579 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2579.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2580","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796882","bugzilla_description":"CVE-2020-2580 mysql: Server: DDL unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2580.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2584","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796883","bugzilla_description":"CVE-2020-2584 mysql: Server: Options unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2584.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-2588","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796884","bugzilla_description":"CVE-2020-2588 mysql: Server: DML unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2589","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796885","bugzilla_description":"CVE-2020-2589 mysql: InnoDB unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2589.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2660","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796886","bugzilla_description":"CVE-2020-2660 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2660.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2679","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796887","bugzilla_description":"CVE-2020-2679 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2679.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2686","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796888","bugzilla_description":"CVE-2020-2686 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2686.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2694","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796889","bugzilla_description":"CVE-2020-2694 mysql: Server: Information Schema unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2694.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-2627","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796905","bugzilla_description":"CVE-2020-2627 mysql: Server: Parser unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2910","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764674","bugzilla_description":"CVE-2019-2910 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2910.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-2911","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764675","bugzilla_description":"CVE-2019-2911 mysql: Information Schema unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2911.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2019-2914","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764676","bugzilla_description":"CVE-2019-2914 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2914.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2922","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764677","bugzilla_description":"CVE-2019-2922 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2923","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764678","bugzilla_description":"CVE-2019-2923 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2924","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764679","bugzilla_description":"CVE-2019-2924 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2924.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2938","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764680","bugzilla_description":"CVE-2019-2938 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2938.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2946","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764681","bugzilla_description":"CVE-2019-2946 mysql: Server: PS unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2946.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2948","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764682","bugzilla_description":"CVE-2019-2948 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2948.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2950","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764683","bugzilla_description":"CVE-2019-2950 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2950.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2957","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764684","bugzilla_description":"CVE-2019-2957 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2957.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2960","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764685","bugzilla_description":"CVE-2019-2960 mysql: Server: Replication unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2960.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2963","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764686","bugzilla_description":"CVE-2019-2963 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2963.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2966","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764687","bugzilla_description":"CVE-2019-2966 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2966.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2967","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764688","bugzilla_description":"CVE-2019-2967 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2967.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2968","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764689","bugzilla_description":"CVE-2019-2968 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2968.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2969","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764690","bugzilla_description":"CVE-2019-2969 mysql: Client programs unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2969.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2019-2974","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764691","bugzilla_description":"CVE-2019-2974 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2974.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2982","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764692","bugzilla_description":"CVE-2019-2982 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2982.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2991","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764693","bugzilla_description":"CVE-2019-2991 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2991.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2993","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764694","bugzilla_description":"CVE-2019-2993 mysql: Server: C API unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2997","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764695","bugzilla_description":"CVE-2019-2997 mysql: Server: DDL unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2997.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2998","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764696","bugzilla_description":"CVE-2019-2998 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2998.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-3003","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764697","bugzilla_description":"CVE-2019-3003 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3003.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-3004","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764698","bugzilla_description":"CVE-2019-3004 mysql: Server: Parser unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3009","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764699","bugzilla_description":"CVE-2019-3009 mysql: Server: Connection unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3009.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-3011","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764700","bugzilla_description":"CVE-2019-3011 mysql: Server: C API unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3011.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3018","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764701","bugzilla_description":"CVE-2019-3018 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3018.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2730","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1731995","bugzilla_description":"CVE-2019-2730 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2730.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2019-2731","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1731996","bugzilla_description":"CVE-2019-2731 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2731.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-2737","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1731997","bugzilla_description":"CVE-2019-2737 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2738","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1731998","bugzilla_description":"CVE-2019-2738 mysql: Server: Compiling unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2739","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1731999","bugzilla_description":"CVE-2019-2739 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2739.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-2740","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1732000","bugzilla_description":"CVE-2019-2740 mysql: Server: XML unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2741","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732001","bugzilla_description":"CVE-2019-2741 mysql: Server: Audit Log unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2741.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2743","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732002","bugzilla_description":"CVE-2019-2743 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2743.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2746","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732003","bugzilla_description":"CVE-2019-2746 mysql: Server: Data Dictionary unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2746.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2747","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732004","bugzilla_description":"CVE-2019-2747 mysql: Server: GIS unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2747.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2752","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732005","bugzilla_description":"CVE-2019-2752 mysql: Server: Options unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2755","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732006","bugzilla_description":"CVE-2019-2755 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2755.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2757","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732007","bugzilla_description":"CVE-2019-2757 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2757.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2758","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1732008","bugzilla_description":"CVE-2019-2758 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2758.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2774","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732009","bugzilla_description":"CVE-2019-2774 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2774.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2778","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732010","bugzilla_description":"CVE-2019-2778 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-2780","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732011","bugzilla_description":"CVE-2019-2780 mysql: Server: Components / Services unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2784","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732012","bugzilla_description":"CVE-2019-2784 mysql: Server: DML unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2785","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732013","bugzilla_description":"CVE-2019-2785 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2789","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732015","bugzilla_description":"CVE-2019-2789 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2789.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2019-2791","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732016","bugzilla_description":"CVE-2019-2791 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2791.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-2795","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732017","bugzilla_description":"CVE-2019-2795 mysql: Server: Charsets unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2796","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732018","bugzilla_description":"CVE-2019-2796 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2797","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732019","bugzilla_description":"CVE-2019-2797 mysql: Client programs unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2797.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2019-2798","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732020","bugzilla_description":"CVE-2019-2798 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2800","severity":"important","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732021","bugzilla_description":"CVE-2019-2800 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-2801","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732022","bugzilla_description":"CVE-2019-2801 mysql: Server: FTS unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2801.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2802","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732023","bugzilla_description":"CVE-2019-2802 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2803","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732024","bugzilla_description":"CVE-2019-2803 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2803.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2805","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1732025","bugzilla_description":"CVE-2019-2805 mysql: Server: Parser unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2808","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732026","bugzilla_description":"CVE-2019-2808 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2810","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732027","bugzilla_description":"CVE-2019-2810 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2811","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732028","bugzilla_description":"CVE-2019-2811 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2812","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732029","bugzilla_description":"CVE-2019-2812 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2814","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732030","bugzilla_description":"CVE-2019-2814 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.2"},{"CVE":"CVE-2019-2815","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732031","bugzilla_description":"CVE-2019-2815 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2819","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732032","bugzilla_description":"CVE-2019-2819 mysql: Server: Security: Audit unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2822","severity":"important","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732033","bugzilla_description":"CVE-2019-2822 mysql: Shell: Admin / InnoDB Cluster unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2826","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732034","bugzilla_description":"CVE-2019-2826 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2826.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2830","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732035","bugzilla_description":"CVE-2019-2830 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2830.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2834","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732036","bugzilla_description":"CVE-2019-2834 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2834.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2879","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732037","bugzilla_description":"CVE-2019-2879 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2879.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3123","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":[],"bugzilla":"1702956","bugzilla_description":"CVE-2018-3123 mysql: Server: libmysqld unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3123.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2566","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":[],"bugzilla":"1702957","bugzilla_description":"CVE-2019-2566 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2566.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2580","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702958","bugzilla_description":"CVE-2019-2580 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2580.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2581","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702959","bugzilla_description":"CVE-2019-2581 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2581.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2584","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702960","bugzilla_description":"CVE-2019-2584 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2584.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2585","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702961","bugzilla_description":"CVE-2019-2585 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2585.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2587","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702962","bugzilla_description":"CVE-2019-2587 mysql: Server: Partition unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2587.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2589","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702963","bugzilla_description":"CVE-2019-2589 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2589.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2592","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702964","bugzilla_description":"CVE-2019-2592 mysql: Server: PS unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2592.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2593","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702965","bugzilla_description":"CVE-2019-2593 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2593.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2596","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702966","bugzilla_description":"CVE-2019-2596 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2596.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2606","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702967","bugzilla_description":"CVE-2019-2606 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2607","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702968","bugzilla_description":"CVE-2019-2607 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2607.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2614","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708","RHSA-2019:2327"],"bugzilla":"1702969","bugzilla_description":"CVE-2019-2614 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2614.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2617","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702970","bugzilla_description":"CVE-2019-2617 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2617.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2620","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702971","bugzilla_description":"CVE-2019-2620 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2620.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2623","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702972","bugzilla_description":"CVE-2019-2623 mysql: Server: Options unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2624","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702973","bugzilla_description":"CVE-2019-2624 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2625","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702974","bugzilla_description":"CVE-2019-2625 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2625.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2626","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702975","bugzilla_description":"CVE-2019-2626 mysql: Server: DDL unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2626.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2627","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708","RHSA-2019:2327"],"bugzilla":"1702976","bugzilla_description":"CVE-2019-2627 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2628","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1702977","bugzilla_description":"CVE-2019-2628 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2628.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2630","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702978","bugzilla_description":"CVE-2019-2630 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2630.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2631","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702979","bugzilla_description":"CVE-2019-2631 mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2631.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2632","severity":"important","public_date":"2019-04-16T00:00:00Z","advisories":[],"bugzilla":"1702980","bugzilla_description":"CVE-2019-2632 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-2635","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702981","bugzilla_description":"CVE-2019-2635 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2636","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702982","bugzilla_description":"CVE-2019-2636 mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2644","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702983","bugzilla_description":"CVE-2019-2644 mysql: Server: DDL unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2644.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2681","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702984","bugzilla_description":"CVE-2019-2681 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2681.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2683","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702985","bugzilla_description":"CVE-2019-2683 mysql: Server: Options unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2683.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2685","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702986","bugzilla_description":"CVE-2019-2685 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2685.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2686","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702987","bugzilla_description":"CVE-2019-2686 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2686.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2687","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702989","bugzilla_description":"CVE-2019-2687 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2687.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2688","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702990","bugzilla_description":"CVE-2019-2688 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2688.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2689","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702991","bugzilla_description":"CVE-2019-2689 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2689.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2691","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702992","bugzilla_description":"CVE-2019-2691 mysql: Server: Security: Roles unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2691.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2693","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702993","bugzilla_description":"CVE-2019-2693 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2693.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2694","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702994","bugzilla_description":"CVE-2019-2694 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2694.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2695","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702995","bugzilla_description":"CVE-2019-2695 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2695.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2634","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702997","bugzilla_description":"CVE-2019-2634 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2634.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-2420","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666738","bugzilla_description":"CVE-2019-2420 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2420.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2434","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666740","bugzilla_description":"CVE-2019-2434 mysql: Server: Parser unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2434.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2436","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666741","bugzilla_description":"CVE-2019-2436 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2455","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2018:2439","RHSA-2019:1258","RHSA-2019:2511"],"bugzilla":"1666742","bugzilla_description":"CVE-2019-2455 mysql: Server: Parser unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.60-1.el7_5","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2455.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2481","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2014:0702"],"bugzilla":"1666743","bugzilla_description":"CVE-2019-2481 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb-1:5.5.37-1.el7_0","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2481.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2482","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666744","bugzilla_description":"CVE-2019-2482 mysql: Server: PS unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2482.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2486","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666745","bugzilla_description":"CVE-2019-2486 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2494","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666746","bugzilla_description":"CVE-2019-2494 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2494.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2495","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666747","bugzilla_description":"CVE-2019-2495 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2495.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2502","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666748","bugzilla_description":"CVE-2019-2502 mysql: InnoDB unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2502.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2503","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:1258","RHSA-2019:2511","RHSA-2019:2327"],"bugzilla":"1666749","bugzilla_description":"CVE-2019-2503 mysql: Server: Connection Handling unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2503.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-2507","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666750","bugzilla_description":"CVE-2019-2507 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2510","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:1258","RHSA-2019:2511","RHSA-2019:3708"],"bugzilla":"1666751","bugzilla_description":"CVE-2019-2510 mysql: InnoDB unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","mariadb:10.3-8010020190902091509.cdc1202b","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2510.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2513","severity":"low","public_date":"2019-01-15T00:00:00Z","advisories":[],"bugzilla":"1666752","bugzilla_description":"CVE-2019-2513 mysql: Shell unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2513.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-2528","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666753","bugzilla_description":"CVE-2019-2528 mysql: Server: Partition unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2528.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2529","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2019:2327"],"bugzilla":"1666755","bugzilla_description":"CVE-2019-2529 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2529.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2530","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666756","bugzilla_description":"CVE-2019-2530 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2530.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2531","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666757","bugzilla_description":"CVE-2019-2531 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2531.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2532","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666758","bugzilla_description":"CVE-2019-2532 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2532.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2533","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666759","bugzilla_description":"CVE-2019-2533 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-2534","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666760","bugzilla_description":"CVE-2019-2534 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2534.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2019-2535","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666761","bugzilla_description":"CVE-2019-2535 mysql: Server: Options unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-2536","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666762","bugzilla_description":"CVE-2019-2536 mysql: Server: Packaging unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2019-2537","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:1258","RHSA-2019:2511","RHSA-2019:3708"],"bugzilla":"1666763","bugzilla_description":"CVE-2019-2537 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","mariadb:10.3-8010020190902091509.cdc1202b","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2537.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2539","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666764","bugzilla_description":"CVE-2019-2539 mysql: Server: Connection unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3276","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640307","bugzilla_description":"CVE-2018-3276 mysql: Server: Memcached unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3200","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640308","bugzilla_description":"CVE-2018-3200 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3200.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3137","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640309","bugzilla_description":"CVE-2018-3137 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3284","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640310","bugzilla_description":"CVE-2018-3284 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3284.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-3195","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640311","bugzilla_description":"CVE-2018-3195 mysql: Server: DDL unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3173","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640312","bugzilla_description":"CVE-2018-3173 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3173.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3212","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640314","bugzilla_description":"CVE-2018-3212 mysql: Server: Information Schema unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3212.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3279","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640315","bugzilla_description":"CVE-2018-3279 mysql: Server: Security: Roles unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3279.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3162","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640316","bugzilla_description":"CVE-2018-3162 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3162.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3247","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640317","bugzilla_description":"CVE-2018-3247 mysql: Server: Merge unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3247.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3156","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640318","bugzilla_description":"CVE-2018-3156 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3156.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3161","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640319","bugzilla_description":"CVE-2018-3161 mysql: Server: Partition unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3278","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640320","bugzilla_description":"CVE-2018-3278 mysql: Server: RBR unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3278.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3174","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640321","bugzilla_description":"CVE-2018-3174 mysql: Init script calling kill with root privileges using pid from pidfile owned by mysql user (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3174.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"1.9"},{"CVE":"CVE-2018-3282","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1640322","bugzilla_description":"CVE-2018-3282 mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3282.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3285","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640323","bugzilla_description":"CVE-2018-3285 mysql: Server: Windows unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3187","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640324","bugzilla_description":"CVE-2018-3187 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3187.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3277","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640325","bugzilla_description":"CVE-2018-3277 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3277.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3144","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640326","bugzilla_description":"CVE-2018-3144 mysql: Server: Security: Audit unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3144.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-3145","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640327","bugzilla_description":"CVE-2018-3145 mysql: Server: Parser unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3145.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3170","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640328","bugzilla_description":"CVE-2018-3170 mysql: Server: DDL unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3170.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3186","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640329","bugzilla_description":"CVE-2018-3186 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3182","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640330","bugzilla_description":"CVE-2018-3182 mysql: Server: DML unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3133","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640331","bugzilla_description":"CVE-2018-3133 mysql: Server: Parser unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3133.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3143","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640332","bugzilla_description":"CVE-2018-3143 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3143.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3283","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640333","bugzilla_description":"CVE-2018-3283 mysql: Server: Logging unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-3171","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640334","bugzilla_description":"CVE-2018-3171 mysql: Server: Partition unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3171.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-3251","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640335","bugzilla_description":"CVE-2018-3251 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3286","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640336","bugzilla_description":"CVE-2018-3286 mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3286.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-3185","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640337","bugzilla_description":"CVE-2018-3185 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3280","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640338","bugzilla_description":"CVE-2018-3280 mysql: Server: JSON unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3280.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3203","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640339","bugzilla_description":"CVE-2018-3203 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3203.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3155","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640340","bugzilla_description":"CVE-2018-3155 mysql: Server: Parser unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-3054","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602354","bugzilla_description":"CVE-2018-3054 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3056","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602355","bugzilla_description":"CVE-2018-3056 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-3058","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1602356","bugzilla_description":"CVE-2018-3058 mysql: MyISAM unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3058.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-3060","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1602357","bugzilla_description":"CVE-2018-3060 mysql: InnoDB unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3061","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602359","bugzilla_description":"CVE-2018-3061 mysql: Server: DML unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3062","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602360","bugzilla_description":"CVE-2018-3062 mysql: Server: Memcached unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3062.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-3063","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2019:2327"],"bugzilla":"1602363","bugzilla_description":"CVE-2018-3063 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3063.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3064","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1602364","bugzilla_description":"CVE-2018-3064 mysql: InnoDB unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-3065","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602365","bugzilla_description":"CVE-2018-3065 mysql: Server: DML unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3065.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3066","severity":"low","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1602366","bugzilla_description":"CVE-2018-3066 mysql: Server: Options unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3066.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-3067","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602368","bugzilla_description":"CVE-2018-3067 mysql: Server: Replication unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3070","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602369","bugzilla_description":"CVE-2018-3070 mysql: Client mysqldump unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3070.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-3071","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602370","bugzilla_description":"CVE-2018-3071 mysql: Audit Log unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3071.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3073","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602371","bugzilla_description":"CVE-2018-3073 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3073.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3074","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602372","bugzilla_description":"CVE-2018-3074 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-3075","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602374","bugzilla_description":"CVE-2018-3075 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3077","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602375","bugzilla_description":"CVE-2018-3077 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3077.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3078","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602376","bugzilla_description":"CVE-2018-3078 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3079","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602377","bugzilla_description":"CVE-2018-3079 mysql: InnoDB unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3079.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3080","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602378","bugzilla_description":"CVE-2018-3080 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3080.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3082","severity":"low","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602379","bugzilla_description":"CVE-2018-3082 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3082.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2018-3084","severity":"low","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602380","bugzilla_description":"CVE-2018-3084 mysql: Shell: Core / Client unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3084.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-3081","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1602424","bugzilla_description":"CVE-2018-3081 mysql: Client programs unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3081.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-2755","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568921","bugzilla_description":"CVE-2018-2755 mysql: Server: Replication unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-2758","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568922","bugzilla_description":"CVE-2018-2758 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2758.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2759","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568923","bugzilla_description":"CVE-2018-2759 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2759.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2761","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568924","bugzilla_description":"CVE-2018-2761 mysql: Client programs unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2761.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-2762","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568925","bugzilla_description":"CVE-2018-2762 mysql: Server: Connection unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-2766","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568926","bugzilla_description":"CVE-2018-2766 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2769","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568927","bugzilla_description":"CVE-2018-2769 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2769.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2771","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568931","bugzilla_description":"CVE-2018-2771 mysql: Server: Locking unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2771.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-2773","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568932","bugzilla_description":"CVE-2018-2773 mysql: pid file can be created in a world-writeable directory (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2773.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2018-2775","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568934","bugzilla_description":"CVE-2018-2775 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2775.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2776","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568936","bugzilla_description":"CVE-2018-2776 mysql: Group Replication GCS unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2777","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568937","bugzilla_description":"CVE-2018-2777 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2777.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2778","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568938","bugzilla_description":"CVE-2018-2778 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2779","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568940","bugzilla_description":"CVE-2018-2779 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2780","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568941","bugzilla_description":"CVE-2018-2780 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2781","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568942","bugzilla_description":"CVE-2018-2781 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2781.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2782","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568943","bugzilla_description":"CVE-2018-2782 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2782.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2784","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568944","bugzilla_description":"CVE-2018-2784 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2786","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568945","bugzilla_description":"CVE-2018-2786 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2787","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568946","bugzilla_description":"CVE-2018-2787 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2787.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2805","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1254"],"bugzilla":"1568948","bugzilla_description":"CVE-2018-2805 mysql: GIS Extension unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2810","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568949","bugzilla_description":"CVE-2018-2810 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2812","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568950","bugzilla_description":"CVE-2018-2812 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2813","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568951","bugzilla_description":"CVE-2018-2813 mysql: Server: DDL unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-2816","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568953","bugzilla_description":"CVE-2018-2816 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2817","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568954","bugzilla_description":"CVE-2018-2817 mysql: Server: DDL unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2818","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568955","bugzilla_description":"CVE-2018-2818 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2819","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568956","bugzilla_description":"CVE-2018-2819 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2839","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568957","bugzilla_description":"CVE-2018-2839 mysql: Server: DML unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2846","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568958","bugzilla_description":"CVE-2018-2846 mysql: Server: Performance Schema unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2767","severity":"low","public_date":"2018-04-08T00:00:00Z","advisories":["RHSA-2018:2439"],"bugzilla":"1564965","bugzilla_description":"CVE-2018-2767 mysql: use of SSL/TLS not enforced in libmysqld (Return of BACKRONYM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2767.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-2696","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1509475","bugzilla_description":"CVE-2018-2696 mysql: sha256_password authentication DoS via long password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2696.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2703","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1534139","bugzilla_description":"CVE-2018-2703 mysql: sha256_password authentication DoS via hash with large rounds value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2703.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2562","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2017:3442","RHSA-2018:0587"],"bugzilla":"1535484","bugzilla_description":"CVE-2018-2562 mysql: Server: Partition unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2562.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-2565","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535486","bugzilla_description":"CVE-2018-2565 mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2565.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2573","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535487","bugzilla_description":"CVE-2018-2573 mysql: Server: GIS unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2573.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2576","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535488","bugzilla_description":"CVE-2018-2576 mysql: Server: DML unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2576.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2583","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535490","bugzilla_description":"CVE-2018-2583 mysql: Stored Procedure unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2583.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-2586","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535491","bugzilla_description":"CVE-2018-2586 mysql: Server: DML unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2586.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2590","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535492","bugzilla_description":"CVE-2018-2590 mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2590.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2591","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2017:3442","RHSA-2018:0587"],"bugzilla":"1535493","bugzilla_description":"CVE-2018-2591 mysql: Server : Partition unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2591.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2600","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535496","bugzilla_description":"CVE-2018-2600 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2600.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2612","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535497","bugzilla_description":"CVE-2018-2612 mysql: InnoDB unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2612.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2622","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535499","bugzilla_description":"CVE-2018-2622 mysql: Server: DDL unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2640","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535500","bugzilla_description":"CVE-2018-2640 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2640.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2645","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535501","bugzilla_description":"CVE-2018-2645 mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.9"},{"CVE":"CVE-2018-2646","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535502","bugzilla_description":"CVE-2018-2646 mysql: Server: DML unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2646.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2647","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535503","bugzilla_description":"CVE-2018-2647 mysql: Server: Replication unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2665","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535504","bugzilla_description":"CVE-2018-2665 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2665.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2667","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535505","bugzilla_description":"CVE-2018-2667 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2667.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2668","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535506","bugzilla_description":"CVE-2018-2668 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2668.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-16231","severity":null,"public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1700392","bugzilla_description":"CVE-2017-16231 pcre: self-recursive call in match() in pcre_exec.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-10155","severity":"important","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503649","bugzilla_description":"CVE-2017-10155 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10165","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503651","bugzilla_description":"CVE-2017-10165 mysql: Server: Replication unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10167","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503653","bugzilla_description":"CVE-2017-10167 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10227","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503654","bugzilla_description":"CVE-2017-10227 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10227.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10268","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503656","bugzilla_description":"CVE-2017-10268 mysql: Server: Replication unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10268.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2017-10276","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503659","bugzilla_description":"CVE-2017-10276 mysql: Server: FTS unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10279","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503663","bugzilla_description":"CVE-2017-10279 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10279.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10283","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503664","bugzilla_description":"CVE-2017-10283 mysql: Server: Performance Schema unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-10284","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503665","bugzilla_description":"CVE-2017-10284 mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10284.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10286","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503669","bugzilla_description":"CVE-2017-10286 mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10286.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-10294","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503671","bugzilla_description":"CVE-2017-10294 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10294.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10296","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503673","bugzilla_description":"CVE-2017-10296 mysql: Server: DML unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10296.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10311","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503674","bugzilla_description":"CVE-2017-10311 mysql: Server: FTS unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10313","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503677","bugzilla_description":"CVE-2017-10313 mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10313.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10314","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503679","bugzilla_description":"CVE-2017-10314 mysql: Server: Memcached unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10314.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10320","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503681","bugzilla_description":"CVE-2017-10320 mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10365","severity":"low","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503682","bugzilla_description":"CVE-2017-10365 mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2017-10378","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503684","bugzilla_description":"CVE-2017-10378 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10378.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10379","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503685","bugzilla_description":"CVE-2017-10379 mysql: Client programs unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10384","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503686","bugzilla_description":"CVE-2017-10384 mysql: Server: DDL unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10384.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-15365","severity":"moderate","public_date":"2017-10-06T00:00:00Z","advisories":["RHSA-2019:1258"],"bugzilla":"1524234","bugzilla_description":"CVE-2017-15365 mariadb: Replication in sql/event_data_objects.cc occurs before ACL checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3529","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472682","bugzilla_description":"CVE-2017-3529 mysql: Server: UDF unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3529.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-3633","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472683","bugzilla_description":"CVE-2017-3633 mysql: Server: Memcached unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3634","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472684","bugzilla_description":"CVE-2017-3634 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3635","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1472685","bugzilla_description":"CVE-2017-3635 mysql: C API unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-3636","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2018:2439","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1472686","bugzilla_description":"CVE-2017-3636 mysql: Client programs unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3636.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-3637","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472687","bugzilla_description":"CVE-2017-3637 mysql: X Plugin unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-3638","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472688","bugzilla_description":"CVE-2017-3638 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3639","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472689","bugzilla_description":"CVE-2017-3639 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3640","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472692","bugzilla_description":"CVE-2017-3640 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3640.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3641","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2018:2439","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1472693","bugzilla_description":"CVE-2017-3641 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3642","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472695","bugzilla_description":"CVE-2017-3642 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3642.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3643","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472697","bugzilla_description":"CVE-2017-3643 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3643.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3644","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472698","bugzilla_description":"CVE-2017-3644 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3644.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3645","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472700","bugzilla_description":"CVE-2017-3645 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3646","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472701","bugzilla_description":"CVE-2017-3646 mysql: X Plugin unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3646.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3647","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472703","bugzilla_description":"CVE-2017-3647 mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3648","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472704","bugzilla_description":"CVE-2017-3648 mysql: Server: Charsets unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3648.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3649","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472705","bugzilla_description":"CVE-2017-3649 mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3649.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3650","severity":"low","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472706","bugzilla_description":"CVE-2017-3650 mysql: C API unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3650.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3651","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2016:2927","RHSA-2018:2439","RHSA-2017:2192","RHSA-2016:2928"],"bugzilla":"1472708","bugzilla_description":"CVE-2017-3651 mysql: Client mysqldump unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb101-mariadb-1:10.1.19-6.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-1:5.5.56-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3651.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3652","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472710","bugzilla_description":"CVE-2017-3652 mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2017-3653","severity":"low","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2018:2439","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1472711","bugzilla_description":"CVE-2017-3653 mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3653.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-11164","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":[],"bugzilla":"1470107","bugzilla_description":"CVE-2017-11164 pcre: OP_KETRMAX feature in the match function in pcre_exec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-3308","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443358","bugzilla_description":"CVE-2017-3308 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3308.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3309","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443359","bugzilla_description":"CVE-2017-3309 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3309.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3329","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443360","bugzilla_description":"CVE-2017-3329 mysql: Server: Thread Pooling unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3329.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3331","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443362","bugzilla_description":"CVE-2017-3331 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3450","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443363","bugzilla_description":"CVE-2017-3450 mysql: Server: Memcached unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3450.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3452","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787"],"bugzilla":"1443364","bugzilla_description":"CVE-2017-3452 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3452.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3453","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443365","bugzilla_description":"CVE-2017-3453 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3453.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3454","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443366","bugzilla_description":"CVE-2017-3454 mysql: Server: InnoDB unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3454.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-3455","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443368","bugzilla_description":"CVE-2017-3455 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3455.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-3456","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443369","bugzilla_description":"CVE-2017-3456 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3456.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3457","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443371","bugzilla_description":"CVE-2017-3457 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3457.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3458","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443372","bugzilla_description":"CVE-2017-3458 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3459","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443374","bugzilla_description":"CVE-2017-3459 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3460","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443375","bugzilla_description":"CVE-2017-3460 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3461","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443376","bugzilla_description":"CVE-2017-3461 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3461.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3462","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443377","bugzilla_description":"CVE-2017-3462 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3462.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3463","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443378","bugzilla_description":"CVE-2017-3463 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3463.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3464","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443379","bugzilla_description":"CVE-2017-3464 mysql: Server: DDL unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3464.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3465","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443380","bugzilla_description":"CVE-2017-3465 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3465.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3467","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443382","bugzilla_description":"CVE-2017-3467 mysql: Server: C API unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3467.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3468","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443385","bugzilla_description":"CVE-2017-3468 mysql: Server: Security: Encryption unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3599","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443386","bugzilla_description":"CVE-2017-3599 mysql: integer underflow in get_56_lenc_string() leading to DoS (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3599.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7244","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437364","bugzilla_description":"CVE-2017-7244 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7245","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437367","bugzilla_description":"CVE-2017-7245 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7246","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437369","bugzilla_description":"CVE-2017-7246 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-3305","severity":"moderate","public_date":"2017-03-17T00:00:00Z","advisories":["RHSA-2017:2787"],"bugzilla":"1431690","bugzilla_description":"CVE-2017-3305 mysql: incorrect enforcement of ssl-mode=REQUIRED in MySQL 5.5 and 5.6","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3305.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-8399","severity":"moderate","public_date":"2017-03-10T00:00:00Z","advisories":[],"bugzilla":"1449629","bugzilla_description":"CVE-2017-8399 pcre2: Stack-based buffer overflow in pcre2_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-5483","severity":"moderate","public_date":"2017-03-09T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2016:2927","RHSA-2017:2192","RHSA-2016:2928","RHSA-2016:2131"],"bugzilla":"1433010","bugzilla_description":"CVE-2017-3600 mariadb, mysql: Incorrect input validation allowing code execution via mysqldump","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el6","rh-mysql56-mysql-0:5.6.37-5.el7","mariadb55-mariadb-0:5.5.53-1.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-1:5.5.56-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5483.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-3600","severity":"moderate","public_date":"2017-03-09T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2016:2927","RHSA-2017:2192","RHSA-2016:2928"],"bugzilla":"1433010","bugzilla_description":"CVE-2017-3600 mariadb, mysql: Incorrect input validation allowing code execution via mysqldump","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb101-mariadb-1:10.1.19-6.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-1:5.5.56-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3600.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-7186","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1434504","bugzilla_description":"CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-6004","severity":"moderate","public_date":"2017-02-14T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1425365","bugzilla_description":"CVE-2017-6004 pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3302","severity":"low","public_date":"2017-01-27T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1422119","bugzilla_description":"CVE-2017-3302 mysql: prepared statement handle use-after-free after disconnect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-8318","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1414335","bugzilla_description":"CVE-2016-8318 mysql: Server: Security: Encryption  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8318.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2016-8327","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1414337","bugzilla_description":"CVE-2016-8327 mysql: Server: Replication  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8327.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3238","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414338","bugzilla_description":"CVE-2017-3238 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3238.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3243","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414340","bugzilla_description":"CVE-2017-3243 mysql: Server: Charsets unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3243.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3244","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414342","bugzilla_description":"CVE-2017-3244 mysql: Server: DML unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3251","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414343","bugzilla_description":"CVE-2017-3251 mysql: Server: Optimizer  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3256","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414345","bugzilla_description":"CVE-2017-3256 mysql: Server: Replication  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3256.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3257","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414350","bugzilla_description":"CVE-2017-3257 mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3258","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414351","bugzilla_description":"CVE-2017-3258 mysql: Server: DDL unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3258.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3273","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1414352","bugzilla_description":"CVE-2017-3273 mysql: Server: DDL  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3273.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3313","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414353","bugzilla_description":"CVE-2017-3313 mysql: Server: MyISAM unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-3317","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414355","bugzilla_description":"CVE-2017-3317 mysql: Logging unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.0"},{"CVE":"CVE-2017-3318","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414357","bugzilla_description":"CVE-2017-3318 mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3318.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2017-3319","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414358","bugzilla_description":"CVE-2017-3319 mysql: Server: X Plugin  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3319.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3320","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414360","bugzilla_description":"CVE-2017-3320 mysql: Server: Security: Encryption  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2017-3312","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414133","bugzilla_description":"CVE-2017-3312 mysql: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 fix (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3312.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-3265","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414423","bugzilla_description":"CVE-2017-3265 mysql: unsafe chmod/chown use in init script (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3265.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-3291","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414429","bugzilla_description":"CVE-2017-3291 mysql: unrestricted mysqld_safe's ledir (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3291.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-3492","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386554","bugzilla_description":"CVE-2016-3492 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3492.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3495","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386555","bugzilla_description":"CVE-2016-3495 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3495.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5507","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2749"],"bugzilla":"1386556","bugzilla_description":"CVE-2016-5507 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.34-2.el6","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5584","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386557","bugzilla_description":"CVE-2016-5584 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5584.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2016-5609","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386559","bugzilla_description":"CVE-2016-5609 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5609.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5612","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:1601"],"bugzilla":"1386561","bugzilla_description":"CVE-2016-5612 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5612.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5617","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2130","RHSA-2017:2192","RHSA-2018:0279","RHSA-2016:2749","RHSA-2018:0574"],"bugzilla":"1386564","bugzilla_description":"CVE-2016-5617 mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.34-2.el6","mariadb-1:5.5.56-2.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-6664","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2130","RHSA-2017:2192","RHSA-2018:0279","RHSA-2016:2749","RHSA-2018:0574"],"bugzilla":"1386564","bugzilla_description":"CVE-2016-5617 mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.34-2.el6","mariadb-1:5.5.56-2.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6664.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-5624","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928"],"bugzilla":"1386566","bugzilla_description":"CVE-2016-5624 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5625","severity":"important","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386567","bugzilla_description":"CVE-2016-5625 mysql: unspecified vulnerability in subcomponent: Server: Packaging (CPU October 2016)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5625.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-5626","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386568","bugzilla_description":"CVE-2016-5626 mysql: unspecified vulnerability in subcomponent: Server: GIS (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5626.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5627","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386570","bugzilla_description":"CVE-2016-5627 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5628","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386571","bugzilla_description":"CVE-2016-5628 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5628.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5629","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386572","bugzilla_description":"CVE-2016-5629 mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5630","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2927","RHSA-2016:1601"],"bugzilla":"1386573","bugzilla_description":"CVE-2016-5630 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5630.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5631","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386574","bugzilla_description":"CVE-2016-5631 mysql: unspecified vulnerability in subcomponent: Server: Memcached (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5631.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5632","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386575","bugzilla_description":"CVE-2016-5632 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5633","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386576","bugzilla_description":"CVE-2016-5633 mysql: unspecified vulnerability in subcomponent: Server: Performance Schema (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5634","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386579","bugzilla_description":"CVE-2016-5634 mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5635","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386580","bugzilla_description":"CVE-2016-5635 mysql: unspecified vulnerability in subcomponent: Server: Security: Audit (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-7440","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386584","bugzilla_description":"CVE-2016-7440 yaSSL: AES key leak via cache-bank timing side channel attack","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7440.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2016-8283","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386585","bugzilla_description":"CVE-2016-8283 mysql: unspecified vulnerability in subcomponent: Server: Types (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-8284","severity":"low","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386587","bugzilla_description":"CVE-2016-8284 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU October 2016)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8284.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"1.8"},{"CVE":"CVE-2016-8286","severity":"low","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386588","bugzilla_description":"CVE-2016-8286 mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8286.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-8287","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386589","bugzilla_description":"CVE-2016-8287 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU October 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8287.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.5"},{"CVE":"CVE-2016-8288","severity":"low","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386590","bugzilla_description":"CVE-2016-8288 mysql: unspecified vulnerability in subcomponent: Server: InnoDB Plugin (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8288.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-8289","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386591","bugzilla_description":"CVE-2016-8289 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8289.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-8290","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386592","bugzilla_description":"CVE-2016-8290 mysql: unspecified vulnerability in subcomponent: Server: Performance Schema (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8290.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2016-6662","severity":"important","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2059","RHSA-2016:2058","RHSA-2016:2130","RHSA-2016:2077","RHSA-2016:2131","RHSA-2017:0184","RHSA-2016:2060","RHSA-2016:2062","RHSA-2016:2061","RHSA-2016:2927","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1375198","bugzilla_description":"CVE-2016-6662 mysql: general_log can write to configuration files, leading to privilege escalation (CPU Oct 2016)","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-732","affected_packages":["mariadb-galera-1:5.5.42-1.2.el7ost","mariadb-galera-0:5.5.42-1.1.el6ost","mariadb55-mariadb-0:5.5.53-1.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","mysql-0:5.1.73-8.el6_8","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mysql56-mysql-0:5.6.34-2.el7","mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","rh-mariadb101-mariadb-1:10.1.19-6.el6","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-galera-1:5.5.42-5.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6662.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2016-5616","severity":"moderate","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2017:0184","RHSA-2016:2749"],"bugzilla":"1378936","bugzilla_description":"CVE-2016-5616 CVE-2016-6663 mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-362","affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","mysql-0:5.1.73-8.el6_8","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6663","severity":"moderate","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2017:0184","RHSA-2016:2749"],"bugzilla":"1378936","bugzilla_description":"CVE-2016-5616 CVE-2016-6663 mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-362","affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","mysql-0:5.1.73-8.el6_8","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6663.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-3424","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358199","bugzilla_description":"CVE-2016-3424 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3424.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-3440","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358200","bugzilla_description":"CVE-2016-3440 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3440.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3452","severity":"low","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1358201","bugzilla_description":"CVE-2016-3452 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3452.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-3459","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1601"],"bugzilla":"1358202","bugzilla_description":"CVE-2016-3459 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-3471","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1358203","bugzilla_description":"CVE-2016-3471 mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:P/I:P/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3471.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2016-3477","severity":"important","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358205","bugzilla_description":"CVE-2016-3477 mysql: unspecified vulnerability in subcomponent: Server: Parser (CPU July 2016)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-3486","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358206","bugzilla_description":"CVE-2016-3486 mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3501","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358207","bugzilla_description":"CVE-2016-3501 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3501.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3518","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358208","bugzilla_description":"CVE-2016-3518 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3521","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358209","bugzilla_description":"CVE-2016-3521 mysql: unspecified vulnerability in subcomponent: Server: Types (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3521.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3588","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358210","bugzilla_description":"CVE-2016-3588 mysql: unspecified vulnerability in subcomponent: Server: InnoDB  (CPU July 2016)","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-3614","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358211","bugzilla_description":"CVE-2016-3614 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3614.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-3615","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358212","bugzilla_description":"CVE-2016-3615 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU July 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-5436","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358213","bugzilla_description":"CVE-2016-5436 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5437","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358214","bugzilla_description":"CVE-2016-5437 mysql: unspecified vulnerability in subcomponent: Server: Log (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5437.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5439","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358216","bugzilla_description":"CVE-2016-5439 mysql: unspecified vulnerability in subcomponent: Server: Privileges (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5439.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5440","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358218","bugzilla_description":"CVE-2016-5440 mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5440.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5441","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358219","bugzilla_description":"CVE-2016-5441 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5441.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5442","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358221","bugzilla_description":"CVE-2016-5442 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption  (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5442.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5443","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358222","bugzilla_description":"CVE-2016-5443 mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5443.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-5444","severity":"low","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1358223","bugzilla_description":"CVE-2016-5444 mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5444.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-0639","severity":"critical","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1329238","bugzilla_description":"CVE-2016-0639 mysql: unspecified vulnerability in subcomponent: Server: Pluggable Authentication (CPU April 2016)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0639.json"},{"CVE":"CVE-2016-0640","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329239","bugzilla_description":"CVE-2016-0640 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0640.json"},{"CVE":"CVE-2016-0641","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329241","bugzilla_description":"CVE-2016-0641 mysql: unspecified vulnerability in subcomponent: Server: MyISAM (CPU April 2016)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0641.json"},{"CVE":"CVE-2016-0642","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1329243","bugzilla_description":"CVE-2016-0642 mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU April 2016)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:P/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0642.json"},{"CVE":"CVE-2016-0643","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329245","bugzilla_description":"CVE-2016-0643 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0643.json"},{"CVE":"CVE-2016-0644","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329247","bugzilla_description":"CVE-2016-0644 mysql: unspecified vulnerability in subcomponent: Server: DDL (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0644.json"},{"CVE":"CVE-2016-0646","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329248","bugzilla_description":"CVE-2016-0646 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0646.json"},{"CVE":"CVE-2016-0647","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329249","bugzilla_description":"CVE-2016-0647 mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0647.json"},{"CVE":"CVE-2016-0648","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329251","bugzilla_description":"CVE-2016-0648 mysql: unspecified vulnerability in subcomponent: Server: PS (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0648.json"},{"CVE":"CVE-2016-0649","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329252","bugzilla_description":"CVE-2016-0649 mysql: unspecified vulnerability in subcomponent: Server: PS (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0649.json"},{"CVE":"CVE-2016-0650","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329253","bugzilla_description":"CVE-2016-0650 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0650.json"},{"CVE":"CVE-2016-0651","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1329254","bugzilla_description":"CVE-2016-0651 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0651.json"},{"CVE":"CVE-2016-0652","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329255","bugzilla_description":"CVE-2016-0652 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0652.json"},{"CVE":"CVE-2016-0653","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329257","bugzilla_description":"CVE-2016-0653 mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0653.json"},{"CVE":"CVE-2016-0654","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329258","bugzilla_description":"CVE-2016-0654 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0654.json"},{"CVE":"CVE-2016-0655","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:0705"],"bugzilla":"1329259","bugzilla_description":"CVE-2016-0655 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0655.json"},{"CVE":"CVE-2016-0656","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329260","bugzilla_description":"CVE-2016-0656 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0656.json"},{"CVE":"CVE-2016-0657","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329261","bugzilla_description":"CVE-2016-0657 mysql: unspecified vulnerability in subcomponent: Server: JSON (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0657.json"},{"CVE":"CVE-2016-0658","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329263","bugzilla_description":"CVE-2016-0658 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0658.json"},{"CVE":"CVE-2016-0659","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329265","bugzilla_description":"CVE-2016-0659 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0659.json"},{"CVE":"CVE-2016-0661","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1329266","bugzilla_description":"CVE-2016-0661 mysql: unspecified vulnerability in subcomponent: Server: Options (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0661.json"},{"CVE":"CVE-2016-0662","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329267","bugzilla_description":"CVE-2016-0662 mysql: unspecified vulnerability in subcomponent: Server: Partition (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0662.json"},{"CVE":"CVE-2016-0663","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329268","bugzilla_description":"CVE-2016-0663 mysql: unspecified vulnerability in subcomponent: Server: Performance Schema (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0663.json"},{"CVE":"CVE-2016-0665","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1329269","bugzilla_description":"CVE-2016-0665 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0665.json"},{"CVE":"CVE-2016-0666","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329270","bugzilla_description":"CVE-2016-0666 mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0666.json"},{"CVE":"CVE-2016-0667","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329271","bugzilla_description":"CVE-2016-0667 mysql: unspecified vulnerability in subcomponent: Server: Locking (CPU April 2016)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0667.json"},{"CVE":"CVE-2016-0668","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:0705"],"bugzilla":"1329273","bugzilla_description":"CVE-2016-0668 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":1.7,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0668.json"},{"CVE":"CVE-2014-9769","severity":"moderate","public_date":"2016-03-23T00:00:00Z","advisories":[],"bugzilla":"1320995","bugzilla_description":"CVE-2014-9769 pcre: incorrect nested table jumps when JIT is used (8.36/6)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9769.json"},{"CVE":"CVE-2016-3191","severity":"important","public_date":"2016-02-09T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1025"],"bugzilla":"1311503","bugzilla_description":"CVE-2016-3191 pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3191.json"},{"CVE":"CVE-2016-1283","severity":"important","public_date":"2016-01-04T00:00:00Z","advisories":["RHSA-2016:1132"],"bugzilla":"1295385","bugzilla_description":"CVE-2016-1283 pcre: heap buffer overflow in handling of duplicate named groups (8.39/14)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1283.json"},{"CVE":"CVE-2016-2047","severity":"moderate","public_date":"2015-11-30T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301874","bugzilla_description":"CVE-2016-2047 mysql: ssl-validate-cert incorrect hostname check","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2047.json"},{"CVE":"CVE-2015-8383","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287614","bugzilla_description":"CVE-2015-8383 pcre: Buffer overflow caused by repeated conditional group (8.38/3)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8383.json"},{"CVE":"CVE-2015-3210","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3210.json"},{"CVE":"CVE-2015-8384","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8384.json"},{"CVE":"CVE-2015-8385","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287629","bugzilla_description":"CVE-2015-8385 pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8385.json"},{"CVE":"CVE-2015-8386","severity":"low","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287636","bugzilla_description":"CVE-2015-8386 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8386.json"},{"CVE":"CVE-2015-8387","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287646","bugzilla_description":"CVE-2015-8387 pcre: Integer overflow in subroutine calls (8.38/8)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8387.json"},{"CVE":"CVE-2015-8389","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287659","bugzilla_description":"CVE-2015-8389 pcre: infinite recursion in JIT compiler when processing certain patterns (8.38/21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8389.json"},{"CVE":"CVE-2015-8390","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287666","bugzilla_description":"CVE-2015-8390 pcre: uninitialized memory read triggered by malformed posix character class (8.38/22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8390.json"},{"CVE":"CVE-2015-8391","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287671","bugzilla_description":"CVE-2015-8391 pcre: inefficient posix character class syntax check (8.38/16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8391.json"},{"CVE":"CVE-2015-8392","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287690","bugzilla_description":"CVE-2015-8392 pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8392.json"},{"CVE":"CVE-2015-8393","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287695","bugzilla_description":"CVE-2015-8393 pcre: pcregrep -q is not always quiet (8.38/28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8393.json"},{"CVE":"CVE-2015-8394","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287702","bugzilla_description":"CVE-2015-8394 pcre: Integer overflow caused by missing check for certain conditions (8.38/31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8394.json"},{"CVE":"CVE-2015-8381","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8381.json"},{"CVE":"CVE-2015-8395","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8395.json"},{"CVE":"CVE-2015-4766","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1630"],"bugzilla":"1274748","bugzilla_description":"CVE-2015-4766 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4766.json"},{"CVE":"CVE-2015-4791","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274749","bugzilla_description":"CVE-2015-4791 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4791.json"},{"CVE":"CVE-2015-4792","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274752","bugzilla_description":"CVE-2015-4792 mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4792.json"},{"CVE":"CVE-2015-4800","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274754","bugzilla_description":"CVE-2015-4800 mysql: unspecified vulnerability related to Server:Optimizer (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4800.json"},{"CVE":"CVE-2015-4802","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274756","bugzilla_description":"CVE-2015-4802 mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4802.json"},{"CVE":"CVE-2015-4807","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274758","bugzilla_description":"CVE-2015-4807 mysql: unspecified vulnerability related to Server:Query Cache (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4807.json"},{"CVE":"CVE-2015-4815","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274759","bugzilla_description":"CVE-2015-4815 mysql: unspecified vulnerability related to Server:DDL (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4815.json"},{"CVE":"CVE-2015-4816","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1481","RHSA-2015:1629","RHSA-2015:1628","RHSA-2016:0534"],"bugzilla":"1274761","bugzilla_description":"CVE-2015-4816 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.45-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.49-1.el6","mysql55-mysql-0:5.5.45-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4816.json"},{"CVE":"CVE-2015-4819","severity":"low","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1481","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628","RHSA-2016:0534"],"bugzilla":"1274764","bugzilla_description":"CVE-2015-4819 mysql: unspecified vulnerability related to Client programs (CPU October 2015)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.45-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.49-1.el6","mysql55-mysql-0:5.5.45-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4819.json"},{"CVE":"CVE-2015-4826","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274766","bugzilla_description":"CVE-2015-4826 mysql: unspecified vulnerability related to Server:Types (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4826.json"},{"CVE":"CVE-2015-4830","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274767","bugzilla_description":"CVE-2015-4830 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4830.json"},{"CVE":"CVE-2015-4833","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1630"],"bugzilla":"1274770","bugzilla_description":"CVE-2015-4833 mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4833.json"},{"CVE":"CVE-2015-4836","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274771","bugzilla_description":"CVE-2015-4836 mysql: unspecified vulnerability related to Server:SP (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4836.json"},{"CVE":"CVE-2015-4858","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274773","bugzilla_description":"CVE-2015-4858 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4858.json"},{"CVE":"CVE-2015-4861","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274776","bugzilla_description":"CVE-2015-4861 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4861.json"},{"CVE":"CVE-2015-4862","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274778","bugzilla_description":"CVE-2015-4862 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4862.json"},{"CVE":"CVE-2015-4864","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1274779","bugzilla_description":"CVE-2015-4864 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4864.json"},{"CVE":"CVE-2015-4866","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1646"],"bugzilla":"1274780","bugzilla_description":"CVE-2015-4866 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4866.json"},{"CVE":"CVE-2015-4870","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274781","bugzilla_description":"CVE-2015-4870 mysql: unspecified vulnerability related to Server:Parser (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4870.json"},{"CVE":"CVE-2015-4879","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1481","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628","RHSA-2016:0534"],"bugzilla":"1274783","bugzilla_description":"CVE-2015-4879 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.45-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.49-1.el6","mysql55-mysql-0:5.5.45-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4879.json"},{"CVE":"CVE-2015-4890","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274785","bugzilla_description":"CVE-2015-4890 mysql: unspecified vulnerability related to Server:Replication (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4890.json"},{"CVE":"CVE-2015-4895","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2015:1630"],"bugzilla":"1274786","bugzilla_description":"CVE-2015-4895 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4895.json"},{"CVE":"CVE-2015-4904","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1630"],"bugzilla":"1274787","bugzilla_description":"CVE-2015-4904 mysql: unspecified vulnerability related to libmysqld (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4904.json"},{"CVE":"CVE-2015-4905","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274790","bugzilla_description":"CVE-2015-4905 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4905.json"},{"CVE":"CVE-2015-4910","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274792","bugzilla_description":"CVE-2015-4910 mysql: unspecified vulnerability related to Server:Memcached (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4910.json"},{"CVE":"CVE-2015-4913","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274794","bugzilla_description":"CVE-2015-4913 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4913.json"},{"CVE":"CVE-2015-4730","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1276265","bugzilla_description":"CVE-2015-4730 mysql: unspecified vulnerability related to Server:Types (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4730.json"},{"CVE":"CVE-2015-2582","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244768","bugzilla_description":"CVE-2015-2582 mysql: unspecified vulnerability related to Server:GIS (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2582.json"},{"CVE":"CVE-2015-2611","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244769","bugzilla_description":"CVE-2015-2611 mysql: unspecified vulnerability related to Server:DML (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2611.json"},{"CVE":"CVE-2015-2617","severity":"important","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244770","bugzilla_description":"CVE-2015-2617 mysql: unspecified vulnerability related to Server:Partition (CPU July 2015)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2617.json"},{"CVE":"CVE-2015-2620","severity":"low","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244771","bugzilla_description":"CVE-2015-2620 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU July 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2620.json"},{"CVE":"CVE-2015-2639","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244772","bugzilla_description":"CVE-2015-2639 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2639.json"},{"CVE":"CVE-2015-2641","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244773","bugzilla_description":"CVE-2015-2641 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2641.json"},{"CVE":"CVE-2015-2643","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244774","bugzilla_description":"CVE-2015-2643 mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2643.json"},{"CVE":"CVE-2015-2648","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244775","bugzilla_description":"CVE-2015-2648 mysql: unspecified vulnerability related to Server:DML (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2648.json"},{"CVE":"CVE-2015-2661","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244776","bugzilla_description":"CVE-2015-2661 mysql: unspecified vulnerability related to Client (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2661.json"},{"CVE":"CVE-2015-4737","severity":"low","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244778","bugzilla_description":"CVE-2015-4737 mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU July 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4737.json"},{"CVE":"CVE-2015-4752","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244779","bugzilla_description":"CVE-2015-4752 mysql: unspecified vulnerability related to Server:I_S (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4752.json"},{"CVE":"CVE-2015-4756","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244780","bugzilla_description":"CVE-2015-4756 mysql: unspecified vulnerability related to Server:InnoDB (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4756.json"},{"CVE":"CVE-2015-4757","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244781","bugzilla_description":"CVE-2015-4757 mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4757.json"},{"CVE":"CVE-2015-4761","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244782","bugzilla_description":"CVE-2015-4761 mysql: unspecified vulnerability related to Server:Memcached (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4761.json"},{"CVE":"CVE-2015-4767","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244784","bugzilla_description":"CVE-2015-4767 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4767.json"},{"CVE":"CVE-2015-4769","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244785","bugzilla_description":"CVE-2015-4769 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4769.json"},{"CVE":"CVE-2015-4771","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244786","bugzilla_description":"CVE-2015-4771 mysql: unspecified vulnerability related to Server:RBR (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4771.json"},{"CVE":"CVE-2015-4772","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244787","bugzilla_description":"CVE-2015-4772 mysql: unspecified vulnerability related to Server:Partition (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4772.json"},{"CVE":"CVE-2015-5073","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5073.json"},{"CVE":"CVE-2015-8388","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8388.json"},{"CVE":"CVE-2015-3217","severity":"moderate","public_date":"2015-06-03T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1228283","bugzilla_description":"CVE-2015-3217 pcre: stack overflow caused by mishandled group empty match (8.38/11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3217.json"},{"CVE":"CVE-2015-8380","severity":null,"public_date":"2015-06-01T00:00:00Z","advisories":[],"bugzilla":"1285413","bugzilla_description":"CVE-2015-8380 pcre: OOB write when pcre_exec() is called with ovecsize of 1 (8.38/10)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8380.json"},{"CVE":"CVE-2015-3152","severity":"moderate","public_date":"2015-04-29T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665"],"bugzilla":"1217506","bugzilla_description":"CVE-2015-3152 mysql: use of SSL/TLS can not be enforced in mysql client library (oCERT-2015-003, BACKRONYM)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3152.json"},{"CVE":"CVE-2015-0405","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212753","bugzilla_description":"CVE-2015-0405 mysql: unspecified vulnerability related to Server:XA (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0405.json"},{"CVE":"CVE-2015-0438","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212755","bugzilla_description":"CVE-2015-0438 mysql: unspecified vulnerability related to Server:Partition (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0438.json"},{"CVE":"CVE-2015-0498","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212757","bugzilla_description":"CVE-2015-0498 mysql: unspecified vulnerability related to Server:Replication (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0498.json"},{"CVE":"CVE-2015-0501","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212758","bugzilla_description":"CVE-2015-0501 mysql: unspecified vulnerability related to Server:Compiling (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0501.json"},{"CVE":"CVE-2015-0506","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212759","bugzilla_description":"CVE-2015-0506 mysql: unspecified vulnerability related to Server:InnoDB (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0506.json"},{"CVE":"CVE-2015-0511","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212760","bugzilla_description":"CVE-2015-0511 mysql: unspecified vulnerability related to Server:SP (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0511.json"},{"CVE":"CVE-2015-2568","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212763","bugzilla_description":"CVE-2015-2568 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2568.json"},{"CVE":"CVE-2015-0423","severity":"low","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212765","bugzilla_description":"CVE-2015-0423 mysql: unspecified vulnerability related to Server:Optimizer (CPU April 2015)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0423.json"},{"CVE":"CVE-2015-0439","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212767","bugzilla_description":"CVE-2015-0439 mysql: unspecified vulnerability related to Server:InnoDB (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0439.json"},{"CVE":"CVE-2015-0499","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212768","bugzilla_description":"CVE-2015-0499 mysql: unspecified vulnerability related to Server:Federated (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0499.json"},{"CVE":"CVE-2015-0503","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212769","bugzilla_description":"CVE-2015-0503 mysql: unspecified vulnerability related to Server:Partition (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0503.json"},{"CVE":"CVE-2015-0507","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212770","bugzilla_description":"CVE-2015-0507 mysql: unspecified vulnerability related to Server:Memcached (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0507.json"},{"CVE":"CVE-2015-2566","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212771","bugzilla_description":"CVE-2015-2566 mysql: unspecified vulnerability related to Server:DML (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2566.json"},{"CVE":"CVE-2015-2571","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212772","bugzilla_description":"CVE-2015-2571 mysql: unspecified vulnerability related to Server:Optimizer (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2571.json"},{"CVE":"CVE-2015-2576","severity":"low","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212774","bugzilla_description":"CVE-2015-2576 mysql-utilities: unspecified vulnerability related to Installation (CPU April 2015)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2576.json"},{"CVE":"CVE-2015-0433","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212776","bugzilla_description":"CVE-2015-0433 mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0433.json"},{"CVE":"CVE-2015-0441","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212777","bugzilla_description":"CVE-2015-0441 mysql: unspecified vulnerability related to Server:Security:Encryption (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0441.json"},{"CVE":"CVE-2015-0500","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212779","bugzilla_description":"CVE-2015-0500 mysql: unspecified vulnerability related to Server:Information Schema (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0500.json"},{"CVE":"CVE-2015-0505","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212780","bugzilla_description":"CVE-2015-0505 mysql: unspecified vulnerability related to Server:DDL (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0505.json"},{"CVE":"CVE-2015-0508","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212781","bugzilla_description":"CVE-2015-0508 mysql: unspecified vulnerability related to Server:InnoDB (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0508.json"},{"CVE":"CVE-2015-2567","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212782","bugzilla_description":"CVE-2015-2567 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2567.json"},{"CVE":"CVE-2015-2573","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212783","bugzilla_description":"CVE-2015-2573 mysql: unspecified vulnerability related to Server:DDL (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2573.json"},{"CVE":"CVE-2015-2305","severity":"moderate","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1191049","bugzilla_description":"CVE-2015-2305 regex: heap overflow in regcomp() on 32-bit architectures","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2305.json"},{"CVE":"CVE-2014-6568","severity":"low","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184552","bugzilla_description":"CVE-2014-6568 mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU Jan 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6568.json"},{"CVE":"CVE-2015-0374","severity":"low","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184553","bugzilla_description":"CVE-2015-0374 mysql: unspecified vulnerability related to Server:Security:Privileges:Foreign Key (CPU Jan 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0374.json"},{"CVE":"CVE-2015-0381","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184554","bugzilla_description":"CVE-2015-0381 mysql: unspecified vulnerability related to Server:Replication (CPU Jan 2015)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0381.json"},{"CVE":"CVE-2015-0382","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184555","bugzilla_description":"CVE-2015-0382 mysql: unspecified vulnerability related to Server:Replication (CPU Jan 2015)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0382.json"},{"CVE":"CVE-2015-0385","severity":"low","public_date":"2015-01-21T00:00:00Z","advisories":[],"bugzilla":"1184556","bugzilla_description":"CVE-2015-0385 mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU Jan 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0385.json"},{"CVE":"CVE-2015-0391","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHSA-2015:0117","RHSA-2015:0116","RHSA-2015:1628"],"bugzilla":"1184557","bugzilla_description":"CVE-2015-0391 mysql: unspecified vulnerability related to Server:DDL (CPU Jan 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0391.json"},{"CVE":"CVE-2015-0409","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":[],"bugzilla":"1184559","bugzilla_description":"CVE-2015-0409 mysql: unspecified vulnerability related to Server:Optimizer (CPU Jan 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0409.json"},{"CVE":"CVE-2015-0411","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184560","bugzilla_description":"CVE-2015-0411 mysql: unspecified vulnerability related to Server:Security:Encryption (CPU Jan 2015)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0411.json"},{"CVE":"CVE-2015-0432","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184561","bugzilla_description":"CVE-2015-0432 mysql: unspecified vulnerability related to Server:InnoDB:DDL:Foreign Key (CPU Jan 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0432.json"},{"CVE":"CVE-2015-7744","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301488","bugzilla_description":"CVE-2015-7744 yaSSL, wolfSSL: insufficient hardening of RSA-CRT implementation (Oracle MySQL CPU Jan 2016)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7744.json"},{"CVE":"CVE-2016-0502","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301489","bugzilla_description":"CVE-2016-0502 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0502.json"},{"CVE":"CVE-2016-0503","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301490","bugzilla_description":"CVE-2016-0503 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0503.json"},{"CVE":"CVE-2016-0504","severity":"important","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301491","bugzilla_description":"CVE-2016-0504 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0504.json"},{"CVE":"CVE-2016-0505","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301492","bugzilla_description":"CVE-2016-0505 mysql: unspecified vulnerability in subcomponent: Server: Options (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0505.json"},{"CVE":"CVE-2016-0546","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301493","bugzilla_description":"CVE-2016-0546 mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0546.json"},{"CVE":"CVE-2016-0594","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301494","bugzilla_description":"CVE-2016-0594 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0594.json"},{"CVE":"CVE-2016-0595","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301495","bugzilla_description":"CVE-2016-0595 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0595.json"},{"CVE":"CVE-2016-0596","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301496","bugzilla_description":"CVE-2016-0596 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0596.json"},{"CVE":"CVE-2016-0597","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301497","bugzilla_description":"CVE-2016-0597 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0597.json"},{"CVE":"CVE-2016-0598","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301498","bugzilla_description":"CVE-2016-0598 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0598.json"},{"CVE":"CVE-2016-0599","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301500","bugzilla_description":"CVE-2016-0599 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0599.json"},{"CVE":"CVE-2016-0600","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301501","bugzilla_description":"CVE-2016-0600 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0600.json"},{"CVE":"CVE-2016-0601","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301502","bugzilla_description":"CVE-2016-0601 mysql: unspecified vulnerability in subcomponent: Server: Partition (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0601.json"},{"CVE":"CVE-2016-0605","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301503","bugzilla_description":"CVE-2016-0605 mysql: unspecified vulnerability in subcomponent: Server: General (CPU January 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0605.json"},{"CVE":"CVE-2016-0606","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301504","bugzilla_description":"CVE-2016-0606 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0606.json"},{"CVE":"CVE-2016-0607","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301505","bugzilla_description":"CVE-2016-0607 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU January 2016)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0607.json"},{"CVE":"CVE-2016-0608","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301506","bugzilla_description":"CVE-2016-0608 mysql: unspecified vulnerability in subcomponent: Server: UDF (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0608.json"},{"CVE":"CVE-2016-0609","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301507","bugzilla_description":"CVE-2016-0609 mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU January 2016)","cvss_score":1.7,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0609.json"},{"CVE":"CVE-2016-0610","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:0705"],"bugzilla":"1301508","bugzilla_description":"CVE-2016-0610 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0610.json"},{"CVE":"CVE-2016-0611","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301509","bugzilla_description":"CVE-2016-0611 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0611.json"},{"CVE":"CVE-2016-0616","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301510","bugzilla_description":"CVE-2016-0616 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0616.json"},{"CVE":"CVE-2014-4287","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153461","bugzilla_description":"CVE-2014-4287 mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4287.json"},{"CVE":"CVE-2014-6463","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153462","bugzilla_description":"CVE-2014-6463 mysql: unspecified vulnerability related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML (CPU October 2014)","cvss_score":3.3,"cvss_scoring_vector":"AV:N/AC:L/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6463.json"},{"CVE":"CVE-2014-6464","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153463","bugzilla_description":"CVE-2014-6464 mysql: unspecified vulnerability related to SERVER:INNODB DML FOREIGN KEYS (CPU October 2014)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6464.json"},{"CVE":"CVE-2014-6469","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153464","bugzilla_description":"CVE-2014-6469 mysql: unspecified vulnerability related to SERVER:OPTIMIZER (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6469.json"},{"CVE":"CVE-2014-6474","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153465","bugzilla_description":"CVE-2014-6474 mysql: unspecified vulnerability related to SERVER:MEMCACHED (CPU October 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6474.json"},{"CVE":"CVE-2014-6478","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153466","bugzilla_description":"CVE-2014-6478 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6478.json"},{"CVE":"CVE-2014-6484","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153467","bugzilla_description":"CVE-2014-6484 mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6484.json"},{"CVE":"CVE-2014-6489","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153482","bugzilla_description":"CVE-2014-6489 mysql: unspecified vulnerability related to SERVER:SP (CPU October 2014)","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6489.json"},{"CVE":"CVE-2014-6491","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153483","bugzilla_description":"CVE-2014-6491 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6491.json"},{"CVE":"CVE-2014-6494","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153484","bugzilla_description":"CVE-2014-6494 mysql: unspecified vulnerability related to CLIENT:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6494.json"},{"CVE":"CVE-2014-6495","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153485","bugzilla_description":"CVE-2014-6495 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6495.json"},{"CVE":"CVE-2014-6496","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153486","bugzilla_description":"CVE-2014-6496 mysql: unspecified vulnerability related to CLIENT:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6496.json"},{"CVE":"CVE-2014-6500","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153487","bugzilla_description":"CVE-2014-6500 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6500.json"},{"CVE":"CVE-2014-6505","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153489","bugzilla_description":"CVE-2014-6505 mysql: unspecified vulnerability related to SERVER:MEMORY STORAGE ENGINE (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6505.json"},{"CVE":"CVE-2014-6507","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153490","bugzilla_description":"CVE-2014-6507 mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6507.json"},{"CVE":"CVE-2014-6520","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153491","bugzilla_description":"CVE-2014-6520 mysql: unspecified vulnerability related to SERVER:DDL (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6520.json"},{"CVE":"CVE-2014-6530","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153493","bugzilla_description":"CVE-2014-6530 mysql: unspecified vulnerability related to CLIENT:MYSQLDUMP (CPU October 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6530.json"},{"CVE":"CVE-2014-6551","severity":"low","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153494","bugzilla_description":"CVE-2014-6551 mysql: unspecified vulnerability related to CLIENT:MYSQLADMIN (CPU October 2014)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6551.json"},{"CVE":"CVE-2014-6555","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153495","bugzilla_description":"CVE-2014-6555 mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6555.json"},{"CVE":"CVE-2014-6559","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153496","bugzilla_description":"CVE-2014-6559 mysql: unspecified vulnerability related to C API SSL CERTIFICATE HANDLING (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6559.json"},{"CVE":"CVE-2014-6564","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153497","bugzilla_description":"CVE-2014-6564 mysql: unspecified vulnerability related to SERVER:INNODB FULLTEXT SEARCH DML (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6564.json"},{"CVE":"CVE-2015-2328","severity":"moderate","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1285399","bugzilla_description":"CVE-2015-2328 pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2328.json"},{"CVE":"CVE-2014-4274","severity":"moderate","public_date":"2014-07-31T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1126271","bugzilla_description":"CVE-2014-4274 mysql: unspecified MyISAM temporary file issue fixed in 5.5.39 and 5.6.20","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4274.json"},{"CVE":"CVE-2015-2327","severity":"moderate","public_date":"2014-07-11T00:00:00Z","advisories":["RHBA-2015:2142","RHSA-2016:2750"],"bugzilla":"1285408","bugzilla_description":"CVE-2015-2327 pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2327.json"},{"CVE":"CVE-2014-0384","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088133","bugzilla_description":"CVE-2014-0384 mysql: unspecified DoS related to XML (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0384.json"},{"CVE":"CVE-2014-2419","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088134","bugzilla_description":"CVE-2014-2419 mysql: unspecified DoS related to Partition (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2419.json"},{"CVE":"CVE-2014-2430","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088143","bugzilla_description":"CVE-2014-2430 mysql: unspecified DoS related to Performance Schema (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2430.json"},{"CVE":"CVE-2014-2431","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088146","bugzilla_description":"CVE-2014-2431 mysql: unspecified DoS related to Options (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2431.json"},{"CVE":"CVE-2014-2432","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088179","bugzilla_description":"CVE-2014-2432 mysql: unspecified DoS related to Federated (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2432.json"},{"CVE":"CVE-2014-2434","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088184","bugzilla_description":"CVE-2014-2434 mysql: unspecified DoS related to DML (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2434.json"},{"CVE":"CVE-2014-2435","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088186","bugzilla_description":"CVE-2014-2435 mysql: unspecified DoS related to InnoDB (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2435.json"},{"CVE":"CVE-2014-2436","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088190","bugzilla_description":"CVE-2014-2436 mysql: unspecified vulnerability related to RBR (CPU April 2014)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2436.json"},{"CVE":"CVE-2014-2438","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088191","bugzilla_description":"CVE-2014-2438 mysql: unspecified DoS related to Replication (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2438.json"},{"CVE":"CVE-2014-2440","severity":null,"public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088197","bugzilla_description":"CVE-2014-2440 mysql: unspecified vulnerability related to Client (CPU April 2014)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2440.json"},{"CVE":"CVE-2014-2442","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088206","bugzilla_description":"CVE-2014-2442 mysql: unspecified DoS related to MyIASM (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2442.json"},{"CVE":"CVE-2014-2444","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088208","bugzilla_description":"CVE-2014-2444 mysql: unspecified vulnerability related to InnoDB (CPU April 2014)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2444.json"},{"CVE":"CVE-2014-2450","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088212","bugzilla_description":"CVE-2014-2450 mysql: unspecified DoS related to Optimizer (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2450.json"},{"CVE":"CVE-2014-2451","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088217","bugzilla_description":"CVE-2014-2451 mysql: unspecified DoS related to Privileges (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2451.json"},{"CVE":"CVE-2014-2484","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1120330","bugzilla_description":"CVE-2014-2484 mysql: unspecified vulnerability related to SRFTS (CPU July 2014)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2484.json"},{"CVE":"CVE-2014-4214","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1120334","bugzilla_description":"CVE-2014-4214 mysql: unspecified vulnerability related to SRSP (CPU July 2014)","cvss_score":3.3,"cvss_scoring_vector":"AV:N/AC:L/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4214.json"},{"CVE":"CVE-2014-4233","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1120337","bugzilla_description":"CVE-2014-4233 mysql: unspecified vulnerability related to SRREP (CPU July 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4233.json"},{"CVE":"CVE-2014-4238","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1120338","bugzilla_description":"CVE-2014-4238 mysql: unspecified vulnerability related to SROPTZR (CPU July 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4238.json"},{"CVE":"CVE-2014-4240","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1120340","bugzilla_description":"CVE-2014-4240 mysql: unspecified vulnerability related to SRREP (CPU July 2014)","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4240.json"},{"CVE":"CVE-2014-2494","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120382","bugzilla_description":"CVE-2014-2494 mysql: unspecified vulnerability related to ENARC (CPU July 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2494.json"},{"CVE":"CVE-2014-4207","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120383","bugzilla_description":"CVE-2014-4207 mysql: unspecified vulnerability related to SROPTZR (CPU July 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4207.json"},{"CVE":"CVE-2014-4243","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1859"],"bugzilla":"1120385","bugzilla_description":"CVE-2014-4243 mysql: unspecified vulnerability related to ENFED (CPU July 2014)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4243.json"},{"CVE":"CVE-2014-4258","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120387","bugzilla_description":"CVE-2014-4258 mysql: unspecified vulnerability related to SRINFOSC (CPU July 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4258.json"},{"CVE":"CVE-2014-4260","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120388","bugzilla_description":"CVE-2014-4260 mysql: unspecified vulnerability related to SRCHAR (CPU July 2014)","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4260.json"},{"CVE":"CVE-2014-0001","severity":"moderate","public_date":"2014-01-30T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1054592","bugzilla_description":"CVE-2014-0001 mysql: command-line tool buffer overflow via long server version string","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0001.json"},{"CVE":"CVE-2013-5860","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053361","bugzilla_description":"CVE-2013-5860 mysql: unspecified DoS related to GIS subcomponent (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5860.json"},{"CVE":"CVE-2013-5881","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053364","bugzilla_description":"CVE-2013-5881 mysql: unspecified DoS related to InnoDB subcomponent (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5881.json"},{"CVE":"CVE-2013-5882","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053366","bugzilla_description":"CVE-2013-5882 mysql: unspecified DoS related to Stored Procedure subcomponent (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5882.json"},{"CVE":"CVE-2013-5891","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0173"],"bugzilla":"1053371","bugzilla_description":"CVE-2013-5891 mysql: unspecified vulnerability related to Partition DoS (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5891.json"},{"CVE":"CVE-2013-5894","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053372","bugzilla_description":"CVE-2013-5894 mysql: unspecified vulnerability related to InnoDB DoS (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5894.json"},{"CVE":"CVE-2013-5908","severity":"low","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053373","bugzilla_description":"CVE-2013-5908 mysql: unspecified vulnerability related to Error Handling DoS (CPU Jan 2014)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5908.json"},{"CVE":"CVE-2014-0386","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053375","bugzilla_description":"CVE-2014-0386 mysql: unspecified vulnerability related to Optimizer DoS (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0386.json"},{"CVE":"CVE-2014-0393","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053377","bugzilla_description":"CVE-2014-0393 mysql: unspecified vulnerability related to InnoDB affecting integrity (CPU Jan 2014)","cvss_score":3.3,"cvss_scoring_vector":"AV:N/AC:L/Au:M/C:N/I:P/A:N","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0393.json"},{"CVE":"CVE-2014-0401","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053378","bugzilla_description":"CVE-2014-0401 mysql: unspecified DoS vulnerability (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0401.json"},{"CVE":"CVE-2014-0402","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053380","bugzilla_description":"CVE-2014-0402 mysql: unspecified vulnerability related to Locking DoS (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0402.json"},{"CVE":"CVE-2014-0412","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053381","bugzilla_description":"CVE-2014-0412 mysql: unspecified vulnerability related to InnoDB DoS (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0412.json"},{"CVE":"CVE-2014-0420","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0173"],"bugzilla":"1053383","bugzilla_description":"CVE-2014-0420 mysql: unspecified vulnerability related to Replication DoS (CPU Jan 2014)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0420.json"},{"CVE":"CVE-2014-0427","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053385","bugzilla_description":"CVE-2014-0427 mysql: unspecified vulnerability related to FTS DoS (CPU Jan 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0427.json"},{"CVE":"CVE-2014-0430","severity":"low","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053386","bugzilla_description":"CVE-2014-0430 mysql: unspecified vulnerability related to Performance Schema DoS (CPU Jan 2014)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0430.json"},{"CVE":"CVE-2014-0431","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053387","bugzilla_description":"CVE-2014-0431 mysql: unspecified vulnerability related to InnoDB DoS (CPU Jan 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0431.json"},{"CVE":"CVE-2014-0433","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053388","bugzilla_description":"CVE-2014-0433 mysql: unspecified vulnerability related to Thread Pooling DoS (CPU Jan 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0433.json"},{"CVE":"CVE-2014-0437","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053390","bugzilla_description":"CVE-2014-0437 mysql: unspecified vulnerability related to Optimizer DoS (CPU Jan 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0437.json"},{"CVE":"CVE-2013-3839","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2014:0189","RHBA-2013:1647","RHSA-2014:0186","RHSA-2014:0173"],"bugzilla":"1019978","bugzilla_description":"CVE-2013-3839 mysql: unspecified DoS related to Optimizer (CPU October 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.71-1.el6","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3839.json"},{"CVE":"CVE-2013-5767","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1019984","bugzilla_description":"CVE-2013-5767 mysql: unspecified DoS related to Optimizer (CPU October 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5767.json"},{"CVE":"CVE-2013-5770","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1019988","bugzilla_description":"CVE-2013-5770 mysql: unspecified DoS related to Locking (CPU October 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5770.json"},{"CVE":"CVE-2013-5786","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1019991","bugzilla_description":"CVE-2013-5786 mysql: unspecified DoS related to InnoDB (CPU October 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5786.json"},{"CVE":"CVE-2013-5793","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1019993","bugzilla_description":"CVE-2013-5793 mysql: unspecified DoS related to InnoDB (CPU October 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5793.json"},{"CVE":"CVE-2013-5807","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0173"],"bugzilla":"1019997","bugzilla_description":"CVE-2013-5807 mysql: unspecified flaw related to Replication (CPU October 2013)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5807.json"},{"CVE":"CVE-2012-5615","severity":"low","public_date":"2012-12-01T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"882608","bugzilla_description":"CVE-2012-5615 mysql: Remote Preauth User Enumeration flaw","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-209","affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5615.json"},{"CVE":"CVE-2005-0004","severity":"moderate","public_date":"2005-01-19T00:00:00Z","advisories":[],"bugzilla":"1386138","bugzilla_description":"CVE-2005-0004 mysql: CVE-2005-0004 mysqlaccess creates/overwrite files on the system","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0004.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H","cvss3_score":"7.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/marisa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/marisa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/marisa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/matchbox-window-manager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/matchbox-window-manager_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/matchbox-window-manager_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mc_security_api_results.json
new file mode 100644
index 0000000..b5950ef
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13943","severity":"moderate","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1887648","bugzilla_description":"CVE-2020-13943 tomcat: Apache Tomcat HTTP/2 Request mix-up","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13943.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-26160","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1883371","bugzilla_description":"CVE-2020-26160 jwt-go: access restriction bypass vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26160.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-7720","severity":"moderate","public_date":"2020-09-01T00:00:00Z","advisories":[],"bugzilla":"1874606","bugzilla_description":"CVE-2020-7720 nodejs-node-forge: prototype pollution via the util.setPath function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-8237","severity":"moderate","public_date":"2020-08-26T00:00:00Z","advisories":[],"bugzilla":"1881028","bugzilla_description":"CVE-2020-8237 nodejs-json-bigint: Prototype pollution via `__proto__` assignment could result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8237.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8911","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869800","bugzilla_description":"CVE-2020-8911 aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8911.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2020-8912","severity":"low","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869801","bugzilla_description":"CVE-2020-8912 aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8912.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-1710","severity":"important","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3461","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3539","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:3637"],"bugzilla":"1793970","bugzilla_description":"CVE-2020-1710 EAP: field-name is not parsed in accordance to RFC7230","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-74->CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1710.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-13935","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3303","RHSA-2020:4004","RHSA-2020:3382","RHSA-2020:3383","RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306","RHSA-2020:3305"],"bugzilla":"1857024","bugzilla_description":"CVE-2020-13935 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","tomcat-0:7.0.76-15.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el6","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-13934","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306"],"bugzilla":"1857040","bugzilla_description":"CVE-2020-13934 tomcat: OutOfMemoryException caused by HTTP/2 connection leak could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13934.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-8022","severity":"moderate","public_date":"2020-06-29T00:00:00Z","advisories":[],"bugzilla":"1852863","bugzilla_description":"CVE-2020-8022 tomcat: /usr/lib/tmpfiles.d/tomcat.conf is group-writable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8022.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2020-11996","severity":"moderate","public_date":"2020-06-25T00:00:00Z","advisories":[],"bugzilla":"1851420","bugzilla_description":"CVE-2020-11996 tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11996.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9484","severity":"important","public_date":"2020-05-20T00:00:00Z","advisories":["RHSA-2020:3017","RHSA-2020:2530","RHSA-2020:2487","RHSA-2020:2509","RHSA-2020:2483","RHSA-2020:2529","RHSA-2020:2506"],"bugzilla":"1838332","bugzilla_description":"CVE-2020-9484 tomcat: deserialization flaw in session persistence storage leading to RCE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["tomcat-0:7.0.76-12.el7_8","tomcat6-0:6.0.24-115.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9484.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-10931","severity":"important","public_date":"2020-03-24T00:00:00Z","advisories":[],"bugzilla":"1816630","bugzilla_description":"CVE-2020-10931 memcached: mishandled memcpy into a stack-based buffer may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10931.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1935","severity":"low","public_date":"2020-02-24T00:00:00Z","advisories":["RHSA-2020:2367","RHSA-2020:3303","RHSA-2020:1521","RHSA-2020:1520","RHSA-2020:3305"],"bugzilla":"1806835","bugzilla_description":"CVE-2020-1935 tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-17569","severity":"low","public_date":"2020-02-24T00:00:00Z","advisories":["RHSA-2020:1521","RHSA-2020:1520"],"bugzilla":"1806849","bugzilla_description":"CVE-2019-17569 tomcat: Regression in handling of Transfer-Encoding header allows for HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17569.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1938","severity":"important","public_date":"2020-02-20T00:00:00Z","advisories":["RHSA-2020:2840","RHSA-2020:2367","RHSA-2020:2783","RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:0860","RHSA-2020:1520","RHSA-2020:2781","RHSA-2020:2780","RHSA-2020:0855","RHSA-2020:0912","RHSA-2020:1479","RHSA-2020:1478","RHSA-2020:2779"],"bugzilla":"1806398","bugzilla_description":"CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["tomcat-0:7.0.76-11.el7_7","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el7","tomcat6-0:6.0.24-114.el6_10","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el6","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el5","tomcat-0:7.0.76-10.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1938.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2020-8116","severity":"moderate","public_date":"2020-01-28T00:00:00Z","advisories":["RHSA-2020:4272"],"bugzilla":"1868196","bugzilla_description":"CVE-2020-8116 nodejs-dot-prop: prototype pollution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":["nodejs:12-8020020201007080935.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8116.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-17563","severity":"low","public_date":"2019-12-18T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:4004","RHSA-2020:0860","RHSA-2020:1520"],"bugzilla":"1785711","bugzilla_description":"CVE-2019-17563 tomcat: session fixation when using FORM authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":["tomcat-0:7.0.76-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17563.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-12418","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:0860","RHSA-2020:1520"],"bugzilla":"1785699","bugzilla_description":"CVE-2019-12418 tomcat: local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12418.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-15026","severity":"moderate","public_date":"2019-08-20T00:00:00Z","advisories":[],"bugzilla":"1753862","bugzilla_description":"CVE-2019-15026 memcached: stack-based buffer over-read in conn_to_str in memcached.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15026.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-17362","severity":"moderate","public_date":"2019-08-10T00:00:00Z","advisories":[],"bugzilla":"1775212","bugzilla_description":"CVE-2019-17362 libtomcrypt: out-of-bounds read in the der_decode_utf8_string function in der_decode_utf8_string.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-14274","severity":"moderate","public_date":"2019-07-26T00:00:00Z","advisories":[],"bugzilla":"1740464","bugzilla_description":"CVE-2019-14274 mcpp: heap based buffer overflow in function do_msg() in support.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14274.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-10072","severity":"moderate","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3929"],"bugzilla":"1723708","bugzilla_description":"CVE-2019-10072 tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10072.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-0221","severity":"low","public_date":"2019-04-13T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2019:3931","RHSA-2020:0860","RHSA-2019:3929"],"bugzilla":"1713275","bugzilla_description":"CVE-2019-0221 tomcat: XSS in SSI printenv","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0221.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-0232","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:1712","RHSA-2019:3929"],"bugzilla":"1701056","bugzilla_description":"CVE-2019-0232 tomcat: Remote Code Execution on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0232.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-11596","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:1576"],"bugzilla":"1706001","bugzilla_description":"CVE-2019-11596 memcached: null-pointer dereference in \"lru mode\" and \"lru temp_ttl\" causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["memcached-0:1.5.9-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11596.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-0199","severity":"important","public_date":"2019-03-25T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2020:2366","RHSA-2019:3929"],"bugzilla":"1693325","bugzilla_description":"CVE-2019-0199 tomcat: Apache Tomcat HTTP/2 DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0199.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-11784","severity":"moderate","public_date":"2018-10-03T00:00:00Z","advisories":["RHSA-2019:0485","RHSA-2019:0130","RHSA-2019:0131","RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1636512","bugzilla_description":"CVE-2018-11784 tomcat: Open redirect in default servlet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-99","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7_6","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-17540","severity":"low","public_date":"2018-10-02T00:00:00Z","advisories":[],"bugzilla":"1635877","bugzilla_description":"CVE-2018-17540 strongswan: heap buffer overflow using crafted certificates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17540.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2018-16152","severity":"moderate","public_date":"2018-09-24T00:00:00Z","advisories":[],"bugzilla":"1635870","bugzilla_description":"CVE-2018-16152 strongswan: authentication bypass in verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16152.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-16151","severity":"moderate","public_date":"2018-09-24T00:00:00Z","advisories":[],"bugzilla":"1635873","bugzilla_description":"CVE-2018-16151 strongswan: authentication bypass in verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16151.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-8034","severity":"low","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2019:0451","RHSA-2019:0130","RHSA-2019:0131","RHSA-2019:0450","RHSA-2019:2205","RHSA-2019:3892","RHSA-2019:1159","RHSA-2019:1162","RHSA-2019:1529","RHSA-2019:1161","RHSA-2019:1160"],"bugzilla":"1607580","bugzilla_description":"CVE-2018-8034 tomcat: Host name verification missing in WebSocket client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","jbossweb-0:7.5.30-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8034.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-8037","severity":"important","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1607582","bugzilla_description":"CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2018-1336","severity":"important","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2945","RHSA-2018:2921","RHSA-2018:3768","RHSA-2018:2701","RHEA-2018:2189","RHSA-2018:2700","RHEA-2018:2188","RHSA-2018:2939","RHSA-2018:2743","RHSA-2018:2930","RHSA-2018:2742","RHSA-2018:2741","RHSA-2018:2740"],"bugzilla":"1607591","bugzilla_description":"CVE-2018-1336 tomcat: A bug in the UTF-8 decoder can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["jbossweb-0:7.5.29-1.Final_redhat_1.1.ep6.el5","tomcat8-0:8.0.36-33.ep7.el7","tomcat8-0:8.0.36-33.ep7.el6","tomcat-0:7.0.76-8.el7_5","tomcat7-0:7.0.70-29.ep7.el6","tomcat7-0:7.0.70-29.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1336.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-8020","severity":"important","public_date":"2018-07-21T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2018:2469"],"bugzilla":"1581569","bugzilla_description":"CVE-2018-8020 tomcat-native: Mishandled OCSP responses can allow clients to authenticate with revoked certificates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tomcat-native-0:1.2.17-17.redhat_17.ep7.el6","tomcat-native-0:1.2.17-17.redhat_17.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-8019","severity":"moderate","public_date":"2018-07-21T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2018:2469"],"bugzilla":"1583998","bugzilla_description":"CVE-2018-8019 tomcat-native: Mishandled OCSP invalid response","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tomcat-native-0:1.2.17-17.redhat_17.ep7.el6","tomcat-native-0:1.2.17-17.redhat_17.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-12437","severity":null,"public_date":"2018-06-13T00:00:00Z","advisories":[],"bugzilla":"1591904","bugzilla_description":"CVE-2018-12437 libtomcrypt: memory-cache side-channel attack on ECDSA signatures","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12437.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-10811","severity":"moderate","public_date":"2018-05-28T00:00:00Z","advisories":[],"bugzilla":"1585966","bugzilla_description":"CVE-2018-10811 strongswan: Missing initialization of a variable in IKEv2 key derivation allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-5388","severity":"moderate","public_date":"2018-05-22T00:00:00Z","advisories":[],"bugzilla":"1581867","bugzilla_description":"CVE-2018-5388 strongswan: integer underflow leads to buffer overflow and denial of service in stroke_socket.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5388.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-8014","severity":"moderate","public_date":"2018-05-17T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2019:0451","RHSA-2019:0450","RHSA-2019:2205","RHSA-2018:3768","RHSA-2018:2469","RHSA-2019:1529"],"bugzilla":"1579611","bugzilla_description":"CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","tomcat8-0:8.0.36-31.ep7.el7","tomcat7-0:7.0.70-27.ep7.el7","tomcat7-0:7.0.70-27.ep7.el6","tomcat8-0:8.0.36-31.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2018-1067","severity":"moderate","public_date":"2018-04-25T17:51:00Z","advisories":["RHSA-2020:2562","RHSA-2018:1248","RHSA-2018:1249","RHSA-2019:0877","RHSA-2018:2643","RHSA-2018:1247","RHSA-2018:1251"],"bugzilla":"1550671","bugzilla_description":"CVE-2018-1067 undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-113","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:4.2-20180828.0.el7","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-1275","severity":"critical","public_date":"2018-04-09T19:00:00Z","advisories":["RHSA-2018:1320","RHSA-2018:2939"],"bugzilla":"1565307","bugzilla_description":"CVE-2018-1275 spring-framework: Address partial fix for CVE-2018-1270","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1275.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-1270","severity":"critical","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:2939"],"bugzilla":"1564405","bugzilla_description":"CVE-2018-1270 spring-framework: Possible RCE via spring messaging","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1270.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-1272","severity":"low","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:2669","RHSA-2018:1320"],"bugzilla":"1564408","bugzilla_description":"CVE-2018-1272 spring-framework: Multipart content pollution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000115","severity":"moderate","public_date":"2018-03-02T00:00:00Z","advisories":["RHSA-2018:1627","RHSA-2018:2857","RHSA-2018:2331","RHBA-2018:2140","RHSA-2018:1593"],"bugzilla":"1551182","bugzilla_description":"CVE-2018-1000115 memcached: UDP server support allows spoofed traffic amplification DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1305","severity":"moderate","public_date":"2018-02-23T00:00:00Z","advisories":["RHSA-2019:2205","RHSA-2018:0465","RHSA-2018:0466","RHSA-2018:1320","RHSA-2018:2939"],"bugzilla":"1548282","bugzilla_description":"CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["tomcat-0:7.0.76-9.el7","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1305.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-6459","severity":"moderate","public_date":"2018-02-19T00:00:00Z","advisories":[],"bugzilla":"1547510","bugzilla_description":"CVE-2018-6459 strongswan: Insufficient Input Validation in RSASSA-PSS Signature Parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15698","severity":"moderate","public_date":"2018-01-31T00:00:00Z","advisories":["RHSA-2018:0465","RHSA-2018:0466"],"bugzilla":"1540824","bugzilla_description":"CVE-2017-15698 tomcat-native: Mishandling of client certificates can allow for OCSP check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-299","affected_packages":["tomcat-native-0:1.2.8-11.redhat_11.ep7.el6","tomcat-native-0:1.2.8-11.redhat_11.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-15706","severity":"low","public_date":"2018-01-31T00:00:00Z","advisories":[],"bugzilla":"1540828","bugzilla_description":"CVE-2017-15706 tomcat: Incorrect documentation of CGI Servlet search algorithm may lead to misconfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-1304","severity":"moderate","public_date":"2018-01-31T00:00:00Z","advisories":["RHSA-2019:2205","RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1447","RHSA-2018:0465","RHSA-2018:0466","RHSA-2018:1451","RHSA-2018:1320","RHSA-2018:1450","RHSA-2018:2939"],"bugzilla":"1548289","bugzilla_description":"CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["tomcat-0:7.0.76-9.el7","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","jbossweb-0:7.5.28-1.Final_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1199","severity":"important","public_date":"2018-01-29T00:00:00Z","advisories":["RHSA-2018:2405"],"bugzilla":"1540030","bugzilla_description":"CVE-2018-1199 spring-framework: Improper URL path validation allows for bypassing of security checks on static resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1199.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-12617","severity":"important","public_date":"2017-09-21T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2018:0270","RHSA-2018:0271","RHSA-2017:3080","RHSA-2018:0269","RHSA-2018:0465","RHSA-2018:0268","RHSA-2018:0466","RHSA-2018:0275","RHSA-2017:3113","RHSA-2018:2939","RHSA-2017:3114"],"bugzilla":"1494283","bugzilla_description":"CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat6-0:6.0.41-19_patch_04.ep6.el7","tomcat7-0:7.0.54-28_patch_05.ep6.el7","tomcat6-0:6.0.41-19_patch_04.ep6.el6","tomcat7-0:7.0.54-28_patch_05.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","tomcat6-0:6.0.24-111.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12617.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12615","severity":"important","public_date":"2017-09-19T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:3080","RHSA-2018:0465","RHSA-2018:0466","RHSA-2017:3113","RHSA-2017:3114"],"bugzilla":"1493220","bugzilla_description":"CVE-2017-12615 tomcat: Remote Code Execution via JSP Upload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat6-0:6.0.41-19_patch_04.ep6.el7","tomcat7-0:7.0.54-28_patch_05.ep6.el7","tomcat6-0:6.0.41-19_patch_04.ep6.el6","tomcat7-0:7.0.54-28_patch_05.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","tomcat6-0:6.0.24-111.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12616","severity":"moderate","public_date":"2017-09-19T00:00:00Z","advisories":["RHSA-2018:0465","RHSA-2018:0466"],"bugzilla":"1493222","bugzilla_description":"CVE-2017-12616 tomcat: Information Disclosure when using VirtualDirContext","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12616.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-11185","severity":"moderate","public_date":"2017-08-14T00:00:00Z","advisories":[],"bugzilla":"1484008","bugzilla_description":"CVE-2017-11185 strongswan: Insufficient Input Validation in gmp Plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7674","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:1802","RHSA-2017:1801"],"bugzilla":"1480618","bugzilla_description":"CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat-0:7.0.76-3.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7674.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-7675","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":[],"bugzilla":"1480626","bugzilla_description":"CVE-2017-7675 tomcat: Security Constraint Bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7675.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-9951","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1471970","bugzilla_description":"CVE-2017-9951 memcached: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9951.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5664","severity":"important","public_date":"2017-06-06T00:00:00Z","advisories":["RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:3080","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2637","RHSA-2017:2638","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:1809"],"bugzilla":"1459158","bugzilla_description":"CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["tomcat-0:7.0.69-12.el7_3","tomcat8-0:8.0.36-24.ep7.el7","tomcat7-0:7.0.70-22.ep7.el6","tomcat8-0:8.0.36-24.ep7.el6","jbossweb-0:7.5.24-1.Final_redhat_1.1.ep6.el7","tomcat7-0:7.0.70-22.ep7.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el6","tomcat6-0:6.0.24-111.el6_9","tomcat6-0:6.0.41-17_patch_04.ep6.el7","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","tomcat6-0:6.0.41-17_patch_04.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-9022","severity":"moderate","public_date":"2017-05-30T00:00:00Z","advisories":[],"bugzilla":"1457121","bugzilla_description":"CVE-2017-9022 strongswan: Insufficient validation of RSA public keys passed to the gmp plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9023","severity":"moderate","public_date":"2017-05-30T00:00:00Z","advisories":[],"bugzilla":"1457122","bugzilla_description":"CVE-2017-9023 strongswan: Incorrect Handling of CHOICE types in ASN.1 parser and x509 plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7464","severity":"moderate","public_date":"2017-05-11T00:00:00Z","advisories":[],"bugzilla":"1439520","bugzilla_description":"CVE-2017-7464 JBoss: JAXP in EAP 7.0 allows info disclosure via XXE","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7464.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H","cvss3_score":"8.7"},{"CVE":"CVE-2017-2292","severity":"important","public_date":"2017-05-11T00:00:00Z","advisories":[],"bugzilla":"1470086","bugzilla_description":"CVE-2017-2292 mcollective: RCE via YAML deserialization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2292.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-1000127","severity":"moderate","public_date":"2017-04-27T00:00:00Z","advisories":["RHSA-2018:2290"],"bugzilla":"1555064","bugzilla_description":"CVE-2018-1000127 memcached: Integer Overflow in items.c:item_free()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["memcached-0:1.4.39-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000127.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-7465","severity":"important","public_date":"2017-04-11T00:00:00Z","advisories":["RHSA-2020:2563"],"bugzilla":"1439980","bugzilla_description":"CVE-2017-7465 JBoss: JAXP in EAP 7.0 allows RCE via XSL","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7465.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2017-5647","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:3080","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494"],"bugzilla":"1441205","bugzilla_description":"CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat8-0:8.0.36-24.ep7.el7","tomcat7-0:7.0.70-22.ep7.el6","tomcat8-0:8.0.36-24.ep7.el6","tomcat7-0:7.0.70-22.ep7.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el6","tomcat6-0:6.0.24-111.el6_9","tomcat6-0:6.0.41-17_patch_04.ep6.el7","tomcat6-0:6.0.41-17_patch_04.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-5648","severity":"moderate","public_date":"2017-04-10T00:00:00Z","advisories":["RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:1809"],"bugzilla":"1441223","bugzilla_description":"CVE-2017-5648 tomcat: Calls to application listeners did not use the appropriate facade object","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat-0:7.0.69-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5648.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2017-5651","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":[],"bugzilla":"1441226","bugzilla_description":"CVE-2017-5651 tomcat: Incorrect handling of send file processing could result into adding Processort to the cache twice","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5651.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-5650","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":[],"bugzilla":"1441230","bugzilla_description":"CVE-2017-5650 tomcat: Handling of HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5650.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-8747","severity":"moderate","public_date":"2017-03-13T00:00:00Z","advisories":[],"bugzilla":"1432006","bugzilla_description":"CVE-2016-8747 tomcat: Information leak between requests on the same connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8747.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-2625","severity":"moderate","public_date":"2017-02-28T00:00:00Z","advisories":["RHSA-2017:1865"],"bugzilla":"1424987","bugzilla_description":"CVE-2017-2625 libXdmcp: weak entropy usage for session keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":["libXdmcp-0:1.1.2-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2625.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-8745","severity":"important","public_date":"2016-12-12T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:0935","RHSA-2017:0527"],"bugzilla":"1403824","bugzilla_description":"CVE-2016-8745 tomcat: information disclosure due to incorrect Processor sharing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat-0:7.0.69-11.el7_3","tomcat6-0:6.0.24-105.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-6817","severity":"important","public_date":"2016-11-22T00:00:00Z","advisories":[],"bugzilla":"1397474","bugzilla_description":"CVE-2016-6817 tomcat: Infinite loop in HTTP/2 header parser","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6816","severity":"moderate","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0247","RHSA-2017:0456","RHSA-2017:0246","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:0935","RHSA-2017:0527","RHSA-2017:0250","RHSA-2017:0245","RHSA-2017:0244"],"bugzilla":"1397484","bugzilla_description":"CVE-2016-6816 tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-444","affected_packages":["tomcat-0:7.0.69-11.el7_3","tomcat6-0:6.0.24-105.el6_8","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","jbossweb-0:7.5.20-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-8735","severity":"important","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457"],"bugzilla":"1397485","bugzilla_description":"CVE-2016-8735 tomcat: Remote code execution vulnerability in JmxRemoteLifecycleListener","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-8704","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390510","bugzilla_description":"CVE-2016-8704 memcached: Server append/prepend remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-8705","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390511","bugzilla_description":"CVE-2016-8705 memcached: Server update remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-8706","severity":"moderate","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2016:2819"],"bugzilla":"1390512","bugzilla_description":"CVE-2016-8706 memcached: SASL authentication remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["memcached-0:1.4.15-10.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-6797","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:2247"],"bugzilla":"1390493","bugzilla_description":"CVE-2016-6797 tomcat: unrestricted access to global resources","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.70-16.ep7.el6","tomcat8-0:8.0.36-17.ep7.el6","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-6796","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1550","RHSA-2017:1552","RHSA-2017:2247","RHSA-2017:1551"],"bugzilla":"1390515","bugzilla_description":"CVE-2016-6796 tomcat: security manager bypass via JSP Servlet config parameters","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","jbossweb-0:7.5.23-1.Final_redhat_1.1.ep6.el7","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-6794","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:2247"],"bugzilla":"1390520","bugzilla_description":"CVE-2016-6794 tomcat: system property disclosure","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.70-16.ep7.el6","tomcat8-0:8.0.36-17.ep7.el6","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6794.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5018","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1550","RHSA-2017:1552","RHSA-2017:2247","RHSA-2017:1551"],"bugzilla":"1390525","bugzilla_description":"CVE-2016-5018 tomcat: security manager bypass via IntrospectHelper utility function","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","jbossweb-0:7.5.23-1.Final_redhat_1.1.ep6.el7","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5018.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-0762","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:2247"],"bugzilla":"1390526","bugzilla_description":"CVE-2016-0762 tomcat: timing attack in Realm implementation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.70-16.ep7.el6","tomcat8-0:8.0.36-17.ep7.el6","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-5425","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2016:2046"],"bugzilla":"1362545","bugzilla_description":"CVE-2016-5425 tomcat: Local privilege escalation via systemd-tmpfiles service","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":["tomcat-0:7.0.54-8.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5425.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6325","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2017:0456","RHSA-2016:2045","RHSA-2017:0455","RHSA-2017:0457"],"bugzilla":"1367447","bugzilla_description":"CVE-2016-6325 tomcat: tomcat writable config files allow privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6325.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-7953","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381933","bugzilla_description":"CVE-2016-7953 libXvMC: Insufficient validation of server responses results in buffer underflow","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7953.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-1240","severity":"important","public_date":"2016-09-15T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457"],"bugzilla":"1376712","bugzilla_description":"CVE-2016-1240 tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1240.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-4993","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2016:1838","RHSA-2016:1839","RHSA-2017:3456","RHSA-2016:1840","RHSA-2016:1841","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1344321","bugzilla_description":"CVE-2016-4993 eap: HTTP header injection / response splitting","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-113","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-6129","severity":"moderate","public_date":"2016-08-26T00:00:00Z","advisories":[],"bugzilla":"1370955","bugzilla_description":"CVE-2016-6129 libtomcrypt: possible OP-TEE Bleichenbacher attack","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6129.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-2788","severity":"moderate","public_date":"2016-08-09T00:00:00Z","advisories":[],"bugzilla":"1365799","bugzilla_description":"CVE-2016-2788 mcollective: Improper validation of fields in MCollective pings","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2788.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5388","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2016:2045","RHSA-2016:1624","RHSA-2016:1635","RHSA-2016:1636"],"bugzilla":"1353809","bugzilla_description":"CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.59-51_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-3092","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:2068","RHSA-2017:0456","RHSA-2017:0455","RHSA-2016:2069","RHSA-2017:0457","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:2071","RHSA-2016:2070","RHSA-2016:2072","RHSA-2016:2599"],"bugzilla":"1349468","bugzilla_description":"CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","jboss-ec2-eap-0:7.5.11-1.Final_redhat_1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3092.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-1000031","severity":"moderate","public_date":"2016-04-20T00:00:00Z","advisories":[],"bugzilla":"1393454","bugzilla_description":"CVE-2016-1000031 Apache Commons FileUpload: DiskFileItem file manipulation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000031.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2015-5174","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2045","RHSA-2016:1432","RHSA-2015:2660","RHBA-2016:0090","RHSA-2015:2661","RHSA-2016:1433","RHSA-2016:2599","RHSA-2016:1434","RHSA-2016:1435","RHSA-2015:2659"],"bugzilla":"1265698","bugzilla_description":"CVE-2015-5174 tomcat: URL Normalization issue","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.54-21_patch_05.ep6.el5","tomcat7-0:7.0.54-21_patch_05.ep6.el7","tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-21_patch_05.ep6.el6","tomcat7-0:7.0.59-42_patch_01.ep7.el6","tomcat8-0:8.0.18-52_patch_01.ep7.el6","jboss-ec2-eap-0:7.5.9-2.Final_redhat_2.ep6.el6","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5174.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-5351","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311076","bugzilla_description":"CVE-2015-5351 tomcat: CSRF token leak","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-352","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5351.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-0714","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311082","bugzilla_description":"CVE-2016-0714 tomcat: Security Manager bypass via persistence mechanisms","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-290","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0714.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2015-5346","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087"],"bugzilla":"1311085","bugzilla_description":"CVE-2015-5346 tomcat: Session fixation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-0706","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311087","bugzilla_description":"CVE-2016-0706 tomcat: security manager bypass via StatusManagerServlet","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-287","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-5345","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311089","bugzilla_description":"CVE-2015-5345 tomcat: directory disclosure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-552","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-0763","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311093","bugzilla_description":"CVE-2016-0763 tomcat: security manager bypass via setGlobalContext()","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0763.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2015-8023","severity":"important","public_date":"2015-11-16T00:00:00Z","advisories":[],"bugzilla":"1283219","bugzilla_description":"CVE-2015-8023 strongswan: Authentication bypass in eap-mschapv2 plugin","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8023.json"},{"CVE":"CVE-2015-7501","severity":"critical","public_date":"2015-11-06T00:00:00Z","advisories":["RHSA-2016:1773","RHSA-2016:0040","RHSA-2015:2578","RHSA-2015:2534","RHSA-2015:2556","RHSA-2015:2557","RHSA-2015:2579","RHSA-2015:2535","RHSA-2015:2514","RHSA-2015:2536","RHSA-2015:2559","RHSA-2015:2537","RHSA-2015:2538","RHSA-2015:2516","RHSA-2015:2539","RHSA-2015:2517","RHSA-2015:2670","RHSA-2015:2671","RHSA-2020:4274","RHSA-2015:2521","RHSA-2015:2522","RHSA-2015:2500","RHSA-2015:2501","RHSA-2015:2523","RHSA-2015:2502","RHSA-2015:2524","RHSA-2015:2547","RHSA-2015:2548","RHSA-2015:2560","RHSA-2015:2540","RHSA-2015:2541","RHSA-2015:2542","RHSA-2016:0118"],"bugzilla":"1279330","bugzilla_description":"CVE-2015-7501 apache-commons-collections: InvokerTransformer code execution during deserialisation","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502->CWE-284","affected_packages":["jboss-ec2-eap-0:7.5.5-3.Final_redhat_3.ep6.el6","apache-commons-collections-0:3.2.1-22.el7_2","jakarta-commons-collections-0:3.2.1-3.5.el6_7","jenkins-0:1.651.2-1.el6op","rh-maven35-apache-commons-collections4-0:4.0-7.3.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el6","jakarta-commons-collections-0:3.2.1-5.ep5.el4","jakarta-commons-collections-0:3.2.1-5.ep5.el5","jakarta-commons-collections-0:3.2.1-5.ep5.el6","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el7","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el5","jakarta-commons-collections-0:3.2-2jpp.4","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7501.json"},{"CVE":"CVE-2015-4171","severity":"low","public_date":"2015-06-08T00:00:00Z","advisories":[],"bugzilla":"1231178","bugzilla_description":"CVE-2015-4171 strongswan: rogue servers are able to gain user credentials from a client in certain IKEv2 setups","cvss_score":1.4,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4171.json"},{"CVE":"CVE-2014-7810","severity":"moderate","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2015:1622","RHSA-2015:1621","RHSA-2016:0492"],"bugzilla":"1222573","bugzilla_description":"CVE-2014-7810 Tomcat/JbossWeb: security manager bypass via EL expressions","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.54-19_patch_04.ep6.el5","tomcat7-0:7.0.54-19_patch_04.ep6.el6","tomcat6-0:6.0.41-15_patch_04.ep6.el7","tomcat6-0:6.0.24-94.el6_7","tomcat6-0:6.0.41-15_patch_04.ep6.el6","tomcat6-0:6.0.41-15_patch_04.ep6.el5","tomcat7-0:7.0.54-20_patch_04.ep6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7810.json"},{"CVE":"CVE-2015-0254","severity":"important","public_date":"2015-02-27T00:00:00Z","advisories":["RHSA-2016:0121","RHSA-2016:0122","RHSA-2016:1376","RHSA-2016:0123","RHSA-2016:1838","RHSA-2016:1839","RHSA-2015:1695","RHSA-2016:0124","RHSA-2016:1840","RHSA-2016:1841","RHSA-2016:0125"],"bugzilla":"1198606","bugzilla_description":"CVE-2015-0254 jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["jakarta-taglibs-standard-0:1.1.1-11.7.el6_7","jboss-ec2-eap-0:7.5.6-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7","jakarta-taglibs-standard-0:1.1.2-14.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2014-0227","severity":"moderate","public_date":"2015-02-09T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0983","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:1088","RHSA-2014:1021","RHSA-2014:1087","RHSA-2014:1020","RHSA-2014:1086","RHSA-2015:0091","RHSA-2014:1019","RHSA-2015:0991","RHSA-2014:1904"],"bugzilla":"1109196","bugzilla_description":"CVE-2014-0227 Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-400","affected_packages":["tomcat6-0:6.0.24-83.el6_6","tomcat-0:7.0.54-2.el7_1","jbossweb-0:7.4.8-4.Final_redhat_4.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0227.json"},{"CVE":"CVE-2017-6056","severity":"important","public_date":"2015-02-06T00:00:00Z","advisories":["RHSA-2017:0517","RHSA-2017:0827","RHSA-2017:0826","RHSA-2017:0829","RHSA-2017:0828"],"bugzilla":"1422148","bugzilla_description":"CVE-2017-6056 tomcat: Infinite loop in the processing of https requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["jbossweb-0:7.5.21-2.Final_redhat_2.1.ep6.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-9221","severity":"moderate","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1173064","bugzilla_description":"CVE-2014-9221 strongswan: denial-of-service vulnerability in libtls when processing crafted Key Exchange payload","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9221.json"},{"CVE":"CVE-2014-6439","severity":"low","public_date":"2014-10-01T00:00:00Z","advisories":[],"bugzilla":"1149945","bugzilla_description":"CVE-2014-6439 Elasticsearch: CSRF via insecure CORS default configuration","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-345->CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6439.json"},{"CVE":"CVE-2013-4444","severity":"important","public_date":"2014-09-10T00:00:00Z","advisories":[],"bugzilla":"1140314","bugzilla_description":"CVE-2013-4444 tomcat: remote code execution via uploaded JSP","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4444.json"},{"CVE":"CVE-2014-0230","severity":"low","public_date":"2014-07-19T00:00:00Z","advisories":["RHSA-2016:0595","RHSA-2016:0596","RHSA-2015:1622","RHSA-2015:1621","RHSA-2015:2659","RHSA-2015:2660","RHSA-2015:2661","RHEA-2015:1770","RHSA-2016:0597","RHEA-2015:1771","RHSA-2016:2599","RHSA-2016:0598","RHSA-2016:0599"],"bugzilla":"1191200","bugzilla_description":"CVE-2014-0230 tomcat: non-persistent DoS attack by feeding data by aborting an upload","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["tomcat8-0:8.0.18-25_patch_00.ep7.el6","jbossweb-0:7.5.15-1.Final_redhat_1.1.ep6.el5","jboss-ec2-eap-0:7.5.7-2.Final_redhat_3.ep6.el6","tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.59-26_patch_00.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0230.json"},{"CVE":"CVE-2014-3251","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":[],"bugzilla":"1105713","bugzilla_description":"CVE-2014-3251 mcollective: aes_security.rb file creation vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-348","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3251.json"},{"CVE":"CVE-2014-0175","severity":"important","public_date":"2014-07-10T00:00:00Z","advisories":["RHBA-2014:0487"],"bugzilla":"1086381","bugzilla_description":"CVE-2014-0175 mcollective: default password set at install","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-798","affected_packages":["ruby193-mcollective-0:2.4.1-5.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0175.json"},{"CVE":"CVE-2014-0186","severity":"important","public_date":"2014-06-10T00:00:00Z","advisories":["RHSA-2014:0686"],"bugzilla":"1089884","bugzilla_description":"CVE-2014-0186 tomcat7: RHEL-7 regression causing DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat-0:7.0.42-5.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0186.json"},{"CVE":"CVE-2014-0095","severity":"moderate","public_date":"2014-05-30T00:00:00Z","advisories":[],"bugzilla":"1103804","bugzilla_description":"CVE-2014-0095 Apache Tomcat 8: Denial of service via AJP requests with content length zero","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-130->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0095.json"},{"CVE":"CVE-2014-0075","severity":"moderate","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:1149","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1072776","bugzilla_description":"CVE-2014-0075 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-400","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0075.json"},{"CVE":"CVE-2014-0096","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1088342","bugzilla_description":"CVE-2014-0096 Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0096.json"},{"CVE":"CVE-2014-0099","severity":"moderate","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:1149","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1102030","bugzilla_description":"CVE-2014-0099 Tomcat/JBossWeb: Request smuggling via malicious content length header","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-190->CWE-444","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0099.json"},{"CVE":"CVE-2014-0119","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:1034","RHSA-2014:1088","RHSA-2014:1087","RHSA-2014:1086","RHSA-2014:1038","RHSA-2014:0895","RHSA-2014:0843","RHSA-2014:0842"],"bugzilla":"1102038","bugzilla_description":"CVE-2014-0119 Tomcat/JBossWeb: XML parser hijack by malicious web application","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-470","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat6-0:6.0.24-78.el6_5","tomcat-0:7.0.42-8.el7_0","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0119.json"},{"CVE":"CVE-2014-2891","severity":"moderate","public_date":"2014-05-05T00:00:00Z","advisories":[],"bugzilla":"1095487","bugzilla_description":"CVE-2014-2891 strongswan: denial of service via crafted ID_DER_ASN1_DN_ID payload","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2891.json"},{"CVE":"CVE-2014-0164","severity":"important","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2014:0461","RHSA-2014:0460"],"bugzilla":"1083847","bugzilla_description":"CVE-2014-0164 mcollective: world readable client config","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-732","affected_packages":["openshift-origin-broker-util-0:1.17.6.6-1.el6op","openshift-origin-broker-util-0:1.9.16-1.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0164.json"},{"CVE":"CVE-2013-4322","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2014:0686","RHSA-2014:0525","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1069905","bugzilla_description":"CVE-2013-4322 tomcat: incomplete fix for CVE-2012-3544","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat-0:7.0.42-5.el7_0","tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4322.json"},{"CVE":"CVE-2013-4590","severity":"low","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2014:1038","RHSA-2014:1088","RHSA-2014:1087","RHSA-2014:1086"],"bugzilla":"1069911","bugzilla_description":"CVE-2013-4590 tomcat: information disclosure via XXE when running untrusted web applications","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["tomcat6-0:6.0.24-78.el6_5","tomcat6-0:6.0.41-5_patch_02.ep6.el6","tomcat7-0:7.0.54-6_patch_02.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4590.json"},{"CVE":"CVE-2014-0033","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2014:0525","RHSA-2014:0528"],"bugzilla":"1069919","bugzilla_description":"CVE-2014-0033 tomcat: session fixation still possible with disableURLRewriting enabled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-384","affected_packages":["tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0033.json"},{"CVE":"CVE-2013-4286","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0374","RHSA-2014:0344","RHSA-2014:0686","RHSA-2014:0345","RHSA-2014:0343","RHSA-2014:0458","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0511","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1069921","bugzilla_description":"CVE-2013-4286 tomcat: multiple content-length header poisoning flaws","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat-0:7.0.42-5.el7_0","tomcat6-0:6.0.37-27_patch_04.ep6.el6","jbossweb-0:7.3.1-1.Final_redhat_1.1.ep6.el5","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4286.json"},{"CVE":"CVE-2014-0050","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0252","RHSA-2014:0253","RHSA-2014:0473","RHSA-2014:0400","RHSA-2014:0452","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0401","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1062337","bugzilla_description":"CVE-2014-0050 apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el6","tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0050.json"},{"CVE":"CVE-2013-6357","severity":"moderate","public_date":"2013-11-04T00:00:00Z","advisories":[],"bugzilla":"1030090","bugzilla_description":"CVE-2013-6357 tomcat5: CSRF vulnerability in Manager application","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6357.json"},{"CVE":"CVE-2013-4561","severity":"low","public_date":"2013-10-24T00:00:00Z","advisories":[],"bugzilla":"1029652","bugzilla_description":"CVE-2013-4561 openshift-origin-msg-node-mcollective: /etc/cron.minutely/openshift-facts tmp file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4561.json"},{"CVE":"CVE-2013-4002","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0269","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2015:0773","RHSA-2013:1081","RHSA-2013:1060","RHSA-2014:0414","RHSA-2014:1823","RHSA-2014:1822","RHSA-2014:1821","RHSA-2013:1505","RHSA-2013:1447","RHSA-2014:1319","RHSA-2013:1059","RHSA-2014:1818"],"bugzilla":"1019176","bugzilla_description":"CVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP, 8017298)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","xerces-j2-0:2.7.1-12.7.el6_5","xerces-j2-0:2.11.0-17.el7_0","java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4002.json"},{"CVE":"CVE-2013-2185","severity":"important","public_date":"2013-09-03T00:00:00Z","advisories":["RHSA-2013:1193","RHSA-2013:1194","RHSA-2013:1265"],"bugzilla":"974813","bugzilla_description":"CVE-2013-2185 Tomcat/JBossWeb: Arbitrary file upload via deserialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-626","affected_packages":["jbossweb-0:7.2.0-3.redhat_2.ep6.el6","jbossweb-0:7.2.0-3.redhat_2.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2185.json"},{"CVE":"CVE-2013-4372","severity":"moderate","public_date":"2013-08-20T00:00:00Z","advisories":["RHSA-2013:1286","RHSA-2013:1862"],"bugzilla":"1011736","bugzilla_description":"CVE-2013-4372 Fuse Management Console: Stored cross-site scripting (XSS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4372.json"},{"CVE":"CVE-2013-1976","severity":"important","public_date":"2013-05-28T00:00:00Z","advisories":["RHSA-2013:0869","RHSA-2013:0870","RHSA-2013:0872","RHSA-2013:0871"],"bugzilla":"927622","bugzilla_description":"CVE-2013-1976 tomcat: Improper TOMCAT_LOG management in init script (DoS, ACE)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["tomcat7-0:7.0.30-7_patch_03.ep6.el6","tomcat6-0:6.0.35-12_patch_07.ep6.el5","tomcat5-0:5.5.33-36_patch_09.ep5.el6","tomcat6-0:6.0.24-55.el6_4","tomcat6-0:6.0.32-35_patch_09.ep5.el6","tomcat7-0:7.0.30-5_patch_03.ep6.el5","tomcat6-0:6.0.32-32_patch_09.ep5.el5","tomcat6-0:6.0.35-33_patch_07.ep6.el6","tomcat5-0:5.5.23-0jpp.40.el5_9","tomcat5-0:5.5.33-33_patch_09.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1976.json"},{"CVE":"CVE-2013-2051","severity":"low","public_date":"2013-05-28T00:00:00Z","advisories":["RHSA-2013:0869"],"bugzilla":"959047","bugzilla_description":"CVE-2013-2051 tomcat: DIGEST authentication vulnerable to replay attacks","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["tomcat6-0:6.0.24-55.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2051.json"},{"CVE":"CVE-2013-1990","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959070","bugzilla_description":"CVE-2013-1990 libXvMC: Multiple integer overflows leading to heap-based buffer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXvMC-0:1.0.8-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1990.json"},{"CVE":"CVE-2013-1999","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960347","bugzilla_description":"CVE-2013-1999 libXvMC: Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXvMC-0:1.0.8-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1999.json"},{"CVE":"CVE-2013-2035","severity":"low","public_date":"2013-05-13T00:00:00Z","advisories":["RHSA-2014:1290","RHSA-2014:1291","RHSA-2014:1995","RHSA-2014:0245","RHSA-2014:0400","RHSA-2014:0254","RHSA-2014:0029","RHSA-2014:0401","RHSA-2013:1029","RHSA-2015:0034","RHSA-2014:1904","RHSA-2013:1786","RHSA-2013:1784","RHSA-2013:1785"],"bugzilla":"958618","bugzilla_description":"CVE-2013-2035 HawtJNI: predictable temporary file name leading to local arbitrary code execution","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-377","affected_packages":["jansi-0:1.9-5.redhat_3.1.ep6.el5","activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2035.json"},{"CVE":"CVE-2013-2067","severity":"moderate","public_date":"2013-05-10T00:00:00Z","advisories":["RHSA-2013:1011","RHSA-2013:0839","RHSA-2013:0834","RHSA-2013:0833","RHSA-2013:1437","RHSA-2013:0964","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"961779","bugzilla_description":"CVE-2013-2067 tomcat: Session fixation in form authenticator","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-384","affected_packages":["tomcat6-0:6.0.37-8_patch_01.ep6.el5","tomcat6-0:6.0.24-57.el6_4","tomcat7-0:7.0.40-9_patch_01.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2067.json"},{"CVE":"CVE-2012-3544","severity":"moderate","public_date":"2013-05-10T00:00:00Z","advisories":["RHSA-2013:1011","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"961783","bugzilla_description":"CVE-2012-3544 tomcat: Limited DoS in chunked transfer encoding input filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.37-8_patch_01.ep6.el5","tomcat7-0:7.0.40-9_patch_01.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3544.json"},{"CVE":"CVE-2013-2071","severity":"low","public_date":"2013-05-10T00:00:00Z","advisories":["RHSA-2013:1011","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"961803","bugzilla_description":"CVE-2013-2071 tomcat: Information disclosure in asynchronous context when using AsyncListeners that threw RuntimeExceptions","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat6-0:6.0.37-8_patch_01.ep6.el5","tomcat7-0:7.0.40-9_patch_01.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2071.json"},{"CVE":"CVE-2013-7239","severity":"moderate","public_date":"2013-04-19T00:00:00Z","advisories":[],"bugzilla":"1047299","bugzilla_description":"CVE-2013-7239 memcached: SASL authentication allows wrong credentials to access memcache","cvss_score":4.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7239.json"},{"CVE":"CVE-2013-7290","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"1052863","bugzilla_description":"CVE-2013-7290 memcached: remote DoS (segmentation fault) via a request to delete a key","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7290.json"},{"CVE":"CVE-2013-7291","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"1052864","bugzilla_description":"CVE-2013-7291 memcached: remote DoS (crash) via a request that triggers \"unbounded key print\"","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7291.json"},{"CVE":"CVE-2013-0179","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"895054","bugzilla_description":"CVE-2013-0179 memcached: DoS due to buffer overrun when printing out keys to be deleted in verbose mode","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0179.json"},{"CVE":"CVE-2012-3546","severity":"important","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0195","RHSA-2013:0151","RHSA-2013:0162","RHSA-2013:0194","RHSA-2013:0197","RHSA-2013:0164","RHSA-2013:0196","RHSA-2013:0163","RHSA-2013:0191","RHSA-2013:0193","RHSA-2013:0192","RHSA-2013:0005","RHSA-2013:0147","RHSA-2013:0158","RHSA-2013:0235","RHSA-2013:0642","RHSA-2013:0004","RHSA-2013:0623","RHSA-2013:0221","RHSA-2013:0198","RHSA-2013:0146","RHSA-2013:0641","RHSA-2013:0157","RHSA-2013:0640"],"bugzilla":"883634","bugzilla_description":"CVE-2012-3546 Tomcat/JBoss Web: Bypass of security constraints","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-31_patch_08.ep5.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossas-0:4.3.0-11.GA_CP10_patch_02.2.ep1.el5","tomcat6-0:6.0.35-6_patch_02.ep6.el5","tomcat6-0:6.0.32-28_patch_08.ep5.el5","jbossas-0:4.3.0-11.GA_CP10_patch_02.1.ep1.el4","tomcat5-0:5.5.33-34_patch_08.ep5.el6","jbossweb-0:7.0.17-3.Final_redhat_2.ep6.el6","jbossweb-0:7.0.17-3.Final_redhat_2.ep6.el5","tomcat6-0:6.0.32-31_patch_08.ep5.el6","tomcat6-0:6.0.24-52.el6_4","tomcat6-0:6.0.35-25_patch_01.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3546.json"},{"CVE":"CVE-2012-4431","severity":"moderate","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0647","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0268","RHSA-2013:1437","RHSA-2013:1853","RHSA-2013:0265","RHSA-2013:0267","RHSA-2013:0266"],"bugzilla":"883636","bugzilla_description":"CVE-2012-4431 Tomcat/JBoss Web - Bypass of CSRF prevention filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["tomcat7-0:7.0.30-3_patch_02.ep6.el5","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","tomcat6-0:6.0.35-6_patch_06.ep6.el5","tomcat7-0:7.0.30-5_patch_02.ep6.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4431.json"},{"CVE":"CVE-2012-4534","severity":"moderate","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0623","RHSA-2013:0265","RHSA-2013:0266"],"bugzilla":"883637","bugzilla_description":"CVE-2012-4534 Tomcat - Denial Of Service when using NIO+SSL+sendfile","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.35-6_patch_06.ep6.el5","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4534.json"},{"CVE":"CVE-2012-5885","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5885.json"},{"CVE":"CVE-2012-5886","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5886.json"},{"CVE":"CVE-2012-5887","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5887.json"},{"CVE":"CVE-2012-2733","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0265","RHSA-2013:0266"],"bugzilla":"873695","bugzilla_description":"CVE-2012-2733 tomcat: HTTP NIO connector OOM DoS via a request with large headers","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.35-6_patch_06.ep6.el5","tomcat6-0:6.0.35-29_patch_06.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2733.json"},{"CVE":"CVE-2012-6551","severity":"moderate","public_date":"2012-11-02T00:00:00Z","advisories":["RHSA-2013:1029"],"bugzilla":"955907","bugzilla_description":"CVE-2012-6551 activemq: DoS by resource consumption via HTTP requests to sample webapp","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6551.json"},{"CVE":"CVE-2013-3060","severity":"important","public_date":"2012-11-02T00:00:00Z","advisories":["RHSA-2013:1029","RHSA-2013:1221"],"bugzilla":"955908","bugzilla_description":"CVE-2013-3060 activemq: Unauthenticated access to web console","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3060.json"},{"CVE":"CVE-2012-6092","severity":"moderate","public_date":"2012-10-18T00:00:00Z","advisories":["RHSA-2013:1029"],"bugzilla":"955906","bugzilla_description":"CVE-2012-6092 activemq: Multiple XSS flaws in web demos","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6092.json"},{"CVE":"CVE-2012-4529","severity":"low","public_date":"2012-10-10T00:00:00Z","advisories":["RHSA-2013:0839","RHSA-2013:0834","RHSA-2013:0833","RHSA-2013:1437"],"bugzilla":"868202","bugzilla_description":"CVE-2012-4529 JBoss Web: jsessionid exposed via encoded url when using cookie based session tracking","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4529.json"},{"CVE":"CVE-2012-4463","severity":"low","public_date":"2012-09-28T00:00:00Z","advisories":[],"bugzilla":"862813","bugzilla_description":"CVE-2012-4463 mc: Improper sanitization of MC_EXT_SELECTED variable when viewing multiple files","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4463.json"},{"CVE":"CVE-2011-4610","severity":"important","public_date":"2012-01-31T00:00:00Z","advisories":["RHSA-2012:0074","RHSA-2012:0075","RHSA-2012:0076","RHSA-2012:0077","RHSA-2012:0078","RHSA-2012:0325"],"bugzilla":"767871","bugzilla_description":"CVE-2011-4610 JBoss Web remote denial of service when surrogate pair character is placed at buffer boundary","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4610.json"},{"CVE":"CVE-2011-3375","severity":"moderate","public_date":"2012-01-17T00:00:00Z","advisories":["RHSA-2012:0682","RHSA-2012:0681"],"bugzilla":"782624","bugzilla_description":"CVE-2011-3375 tomcat: information disclosure due to improper response and request object recycling","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat6-0:6.0.32-24_patch_07.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3375.json"},{"CVE":"CVE-2012-0022","severity":"moderate","public_date":"2012-01-17T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:1331","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0474","RHSA-2012:0475","RHSA-2012:0345","RHSA-2012:0325","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075"],"bugzilla":"783359","bugzilla_description":"CVE-2012-0022 tomcat: large number of parameters DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat6-0:6.0.24-36.el6_2","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat5-0:5.5.23-0jpp.31.el5_8","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0022.json"},{"CVE":"CVE-2011-4084","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":[],"bugzilla":"750521","bugzilla_description":"CVE-2011-4858 tomcat: hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4084.json"},{"CVE":"CVE-2011-4858","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0406","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0474","RHSA-2012:0089","RHSA-2012:0475","RHSA-2012:0325","RHSA-2012:0091","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075"],"bugzilla":"750521","bugzilla_description":"CVE-2011-4858 tomcat: hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat6-0:6.0.24-36.el6_2","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat5-0:5.5.23-0jpp.31.el5_8","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4858.json"},{"CVE":"CVE-2011-1184","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1184.json"},{"CVE":"CVE-2011-5062","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5062.json"},{"CVE":"CVE-2011-5063","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5063.json"},{"CVE":"CVE-2011-5064","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5064.json"},{"CVE":"CVE-2011-3190","severity":"moderate","public_date":"2011-08-20T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2011:1780","RHSA-2012:0680","RHSA-2012:0682","RHSA-2012:0681"],"bugzilla":"734868","bugzilla_description":"CVE-2011-3190 tomcat: authentication bypass and information disclosure","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3190.json"},{"CVE":"CVE-2011-2481","severity":"low","public_date":"2011-08-12T00:00:00Z","advisories":[],"bugzilla":"732820","bugzilla_description":"CVE-2011-2481 Apache Tomcat CVE-2009-0783 regression","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2481.json"},{"CVE":"CVE-2011-2526","severity":"low","public_date":"2011-07-13T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075"],"bugzilla":"720948","bugzilla_description":"CVE-2011-2526 tomcat: security manager restrictions bypass","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2526.json"},{"CVE":"CVE-2011-2204","severity":"low","public_date":"2011-06-27T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2011:1780","RHSA-2012:0680","RHSA-2012:0682","RHSA-2012:0681","RHSA-2011:1845"],"bugzilla":"717013","bugzilla_description":"CVE-2011-2204 tomcat: password disclosure vulnerability","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2204.json"},{"CVE":"CVE-2011-4971","severity":"low","public_date":"2011-05-15T00:00:00Z","advisories":[],"bugzilla":"957964","bugzilla_description":"CVE-2011-4971 memcached: specially crafted packet segmentation fault","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4971.json"},{"CVE":"CVE-2011-1475","severity":"low","public_date":"2011-04-06T00:00:00Z","advisories":[],"bugzilla":"708969","bugzilla_description":"CVE-2011-1475 tomcat: Information disclosure due improper handling of HTTP pipelining","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1475.json"},{"CVE":"CVE-2011-1088","severity":"moderate","public_date":"2011-03-02T00:00:00Z","advisories":[],"bugzilla":"708955","bugzilla_description":"CVE-2011-1088 CVE-2011-1183 CVE-2011-1419 CVE-2011-1582 tomcat: various flaws due not following ServletSecurity annotations","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1088.json"},{"CVE":"CVE-2011-1183","severity":"moderate","public_date":"2011-03-02T00:00:00Z","advisories":[],"bugzilla":"708955","bugzilla_description":"CVE-2011-1088 CVE-2011-1183 CVE-2011-1419 CVE-2011-1582 tomcat: various flaws due not following ServletSecurity annotations","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1183.json"},{"CVE":"CVE-2011-1419","severity":"moderate","public_date":"2011-03-02T00:00:00Z","advisories":[],"bugzilla":"708955","bugzilla_description":"CVE-2011-1088 CVE-2011-1183 CVE-2011-1419 CVE-2011-1582 tomcat: various flaws due not following ServletSecurity annotations","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1419.json"},{"CVE":"CVE-2011-1582","severity":"moderate","public_date":"2011-03-02T00:00:00Z","advisories":[],"bugzilla":"708955","bugzilla_description":"CVE-2011-1088 CVE-2011-1183 CVE-2011-1419 CVE-2011-1582 tomcat: various flaws due not following ServletSecurity annotations","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1582.json"},{"CVE":"CVE-2010-3718","severity":"moderate","public_date":"2011-02-05T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2011:0791","RHSA-2011:0897","RHSA-2011:1845"],"bugzilla":"675792","bugzilla_description":"CVE-2010-3718 tomcat: file permission bypass flaw","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat6-0:6.0.24-33.el6","tomcat5-0:5.5.23-0jpp.22.el5_7","tomcat5-0:5.5.33-14_patch_04.ep5.el4","tomcat5-0:5.5.33-16_patch_04.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3718.json"},{"CVE":"CVE-2010-4476","severity":"moderate","public_date":"2011-02-01T00:00:00Z","advisories":["RHSA-2011:0291","RHSA-2011:0292","RHSA-2011:0282","RHSA-2011:0290","RHSA-2011:0211","RHSA-2011:0299","RHSA-2011:0212","RHSA-2011:0333","RHSA-2011:0334","RHSA-2011:0213","RHSA-2011:0214","RHSA-2011:0335","RHSA-2011:0350","RHSA-2011:0880","RHSA-2011:0210","RHSA-2011:0336","RHSA-2011:0348","RHSA-2011:0349"],"bugzilla":"674336","bugzilla_description":"CVE-2010-4476 JDK Double.parseDouble Denial-Of-Service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.18.b17.el5","tomcat6-0:6.0.24-24.el6_0","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.8.sap-1jpp.2.el5","tomcat5-0:5.5.23-0jpp.17.el5_6","java-1.6.0-openjdk-1:1.6.0.0-1.36.b17.el6_0","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el4","java-1.4.2-ibm-sap-0:1.4.2.13.8.sap-1jpp.2.el4_8","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el5","tomcat5-0:5.5.28-12_patch_03.ep5.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el4","jbossweb-0:2.1.10-5.patch01.1.1.ep5.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el5","java-1.4.2-ibm-0:1.4.2.13.8-1jpp.3.el5","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.5.el6","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.3.el6","jbossweb-0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el5","jbossweb-0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el4","tomcat5-0:5.5.28-18_patch_03.ep5.el4","tomcat6-0:6.0.24-11.patch_03.ep5.el5","tomcat6-0:6.0.24-11.patch_03.ep5.el4","jbossweb-0:2.1.10-5.patch01.1.ep5.el4","java-1.4.2-ibm-0:1.4.2.13.8-1jpp.4.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4476.json"},{"CVE":"CVE-2011-0534","severity":"moderate","public_date":"2011-01-21T00:00:00Z","advisories":["RHSA-2011:0335","RHSA-2011:0350","RHSA-2011:0348"],"bugzilla":"675338","bugzilla_description":"CVE-2011-0534 tomcat: remote DoS via NIO connector","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.24-24.el6_0","tomcat6-0:6.0.24-11.patch_03.ep5.el5","tomcat6-0:6.0.24-11.patch_03.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0534.json"},{"CVE":"CVE-2011-0013","severity":"moderate","public_date":"2011-01-11T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2011:0791","RHSA-2011:0897","RHSA-2011:1845"],"bugzilla":"675786","bugzilla_description":"CVE-2011-0013 tomcat: XSS vulnerability in HTML Manager interface","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["tomcat6-0:6.0.24-33.el6","tomcat5-0:5.5.23-0jpp.22.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0013.json"},{"CVE":"CVE-2010-4172","severity":"moderate","public_date":"2010-11-22T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2011:0791","RHSA-2011:0897"],"bugzilla":"656246","bugzilla_description":"CVE-2010-4172 tomcat: cross-site-scripting vulnerability in the manager application","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["tomcat6-0:6.0.24-33.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4172.json"},{"CVE":"CVE-2010-4312","severity":"moderate","public_date":"2010-11-22T00:00:00Z","advisories":[],"bugzilla":"658267","bugzilla_description":"CVE-2010-4312 tomcat6: does not use HTTPOnly for session cookies by default","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4312.json"},{"CVE":"CVE-2009-2696","severity":"low","public_date":"2010-08-02T00:00:00Z","advisories":["RHSA-2010:0580"],"bugzilla":"616717","bugzilla_description":"CVE-2009-2696 tomcat: missing fix for CVE-2009-0781","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.9.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2696.json"},{"CVE":"CVE-2010-2227","severity":"important","public_date":"2010-07-08T00:00:00Z","advisories":["RHSA-2010:0584","RHSA-2010:0693","RHSA-2010:0583","RHSA-2010:0582","RHSA-2010:0581","RHSA-2010:0580"],"bugzilla":"612799","bugzilla_description":"CVE-2010-2227 tomcat: information leak vulnerability in the handling of 'Transfer-Encoding' header","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el4","jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el5","tomcat5-0:5.5.23-0jpp_21rh","tomcat5-0:5.5.23-0jpp_4rh.17","tomcat5-0:5.5.23-0jpp_4rh.19","tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5","tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4","tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4","tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5","tomcat5-0:5.5.23-0jpp.9.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2227.json"},{"CVE":"CVE-2010-1157","severity":"low","public_date":"2010-04-21T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2010:0584","RHSA-2011:0897"],"bugzilla":"585331","bugzilla_description":"CVE-2010-1157 tomcat: information disclosure in authentication headers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el4","jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1157.json"},{"CVE":"CVE-2009-2693","severity":"low","public_date":"2010-01-24T00:00:00Z","advisories":["RHSA-2010:0119","RHSA-2010:0693","RHSA-2010:0582","RHSA-2010:0580"],"bugzilla":"559738","bugzilla_description":"CVE-2009-2693 tomcat: unexpected file deletion and/or alteration","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_4rh.17","tomcat5-0:5.5.23-0jpp_4rh.19","tomcat5-0:5.5.23-0jpp.9.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2693.json"},{"CVE":"CVE-2009-2902","severity":"low","public_date":"2010-01-24T00:00:00Z","advisories":["RHSA-2010:0119","RHSA-2010:0693","RHSA-2010:0582","RHSA-2010:0580"],"bugzilla":"559761","bugzilla_description":"CVE-2009-2902 tomcat: unexpected file deletion in work directory","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_4rh.17","tomcat5-0:5.5.23-0jpp_4rh.19","tomcat5-0:5.5.23-0jpp.9.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2902.json"},{"CVE":"CVE-2008-5515","severity":"important","public_date":"2009-06-08T00:00:00Z","advisories":["RHSA-2009:1617","RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1144","RHSA-2009:1562","RHSA-2009:1143","RHSA-2009:1454","RHSA-2009:1146","RHSA-2009:1563","RHSA-2009:1145"],"bugzilla":"504753","bugzilla_description":"CVE-2008-5515 tomcat request dispatcher information disclosure vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.0.30-0jpp_16rh","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5515.json"},{"CVE":"CVE-2009-0783","severity":"low","public_date":"2009-06-04T00:00:00Z","advisories":["RHSA-2009:1617","RHSA-2009:1164","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1144","RHSA-2009:1562","RHSA-2009:1143","RHSA-2009:1454","RHSA-2009:1146","RHSA-2009:1563","RHSA-2009:1145"],"bugzilla":"504153","bugzilla_description":"CVE-2009-0783 tomcat XML parser information disclosure","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.0.30-0jpp_16rh","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0783.json"},{"CVE":"CVE-2009-0033","severity":"important","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2009:1617","RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1562","RHSA-2009:1454","RHSA-2009:1563"],"bugzilla":"493381","bugzilla_description":"CVE-2009-0033 tomcat6 Denial-Of-Service with AJP connection","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.0.30-0jpp_16rh","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0033.json"},{"CVE":"CVE-2009-0580","severity":"low","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1144","RHSA-2009:1562","RHSA-2009:1143","RHSA-2009:1454","RHSA-2009:1146","RHSA-2009:1563","RHSA-2009:1145"],"bugzilla":"503978","bugzilla_description":"CVE-2009-0580 tomcat6 Information disclosure in authentication classes","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0580.json"},{"CVE":"CVE-2009-0781","severity":"low","public_date":"2009-03-06T00:00:00Z","advisories":["RHSA-2009:1164","RHSA-2009:1562"],"bugzilla":"489028","bugzilla_description":"CVE-2009-0781 tomcat: XSS in Apache Tomcat calendar application","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0781.json"},{"CVE":"CVE-2008-3271","severity":"low","public_date":"2008-10-09T00:00:00Z","advisories":["RHSA-2008:1007"],"bugzilla":"466875","bugzilla_description":"CVE-2008-3271 tomcat  RemoteFilterValve Information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.0.30-0jpp_12rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3271.json"},{"CVE":"CVE-2008-2938","severity":"moderate","public_date":"2008-08-11T00:00:00Z","advisories":["RHSA-2008:1007","RHSA-2008:0862","RHSA-2008:0648","RHSA-2008:0877","RHSA-2008:0864"],"bugzilla":"456120","bugzilla_description":"CVE-2008-2938 tomcat Unicode directory traversal vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_12rh","tomcat5-0:5.5.23-0jpp.7.el5_2.1","tomcat5-0:5.5.23-0jpp_4rh.9","jbossweb-0:2.0.0-5.CP07.0jpp.ep1.1.el5","tomcat5-0:5.0.30-0jpp_12rh","jbossweb-0:2.0.0-5.CP07.0jpp.ep1.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2938.json"},{"CVE":"CVE-2008-1232","severity":"low","public_date":"2008-08-01T00:00:00Z","advisories":["RHSA-2008:1007","RHSA-2008:0862","RHSA-2010:0602","RHSA-2008:0648","RHSA-2008:0877","RHSA-2008:0864"],"bugzilla":"457597","bugzilla_description":"CVE-2008-1232 tomcat: Cross-Site-Scripting enabled by sendError call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.5.23-0jpp_12rh","tomcat5-0:5.5.23-0jpp.7.el5_2.1","tomcat5-0:5.5.23-0jpp_4rh.9","jbossweb-0:2.0.0-5.CP07.0jpp.ep1.1.el5","tomcat5-0:5.0.30-0jpp_12rh","jbossweb-0:2.0.0-5.CP07.0jpp.ep1.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1232.json"},{"CVE":"CVE-2008-2370","severity":"important","public_date":"2008-08-01T00:00:00Z","advisories":["RHSA-2008:1007","RHSA-2008:0862","RHSA-2010:0602","RHSA-2008:0648","RHSA-2008:0877","RHSA-2008:0864"],"bugzilla":"457934","bugzilla_description":"CVE-2008-2370 tomcat RequestDispatcher information disclosure vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_12rh","tomcat5-0:5.5.23-0jpp.7.el5_2.1","tomcat5-0:5.5.23-0jpp_4rh.9","jbossweb-0:2.0.0-5.CP07.0jpp.ep1.1.el5","tomcat5-0:5.0.30-0jpp_12rh","jbossweb-0:2.0.0-5.CP07.0jpp.ep1.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2370.json"},{"CVE":"CVE-2008-1947","severity":"low","public_date":"2008-06-02T00:00:00Z","advisories":["RHSA-2008:1007","RHSA-2008:0862","RHSA-2008:0648","RHSA-2008:0864"],"bugzilla":"446393","bugzilla_description":"CVE-2008-1947 Tomcat host manager xss - name field","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.5.23-0jpp_12rh","tomcat5-0:5.5.23-0jpp.7.el5_2.1","tomcat5-0:5.5.23-0jpp_4rh.9","tomcat5-0:5.0.30-0jpp_12rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1947.json"},{"CVE":"CVE-2007-5333","severity":"low","public_date":"2008-02-11T00:00:00Z","advisories":["RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1616","RHSA-2009:1562","RHSA-2009:1454","RHSA-2009:1563"],"bugzilla":"427766","bugzilla_description":"CVE-2007-5333 Improve cookie parsing for tomcat5","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5333.json"},{"CVE":"CVE-2007-5342","severity":"low","public_date":"2007-12-23T00:00:00Z","advisories":["RHSA-2008:0862","RHSA-2008:0042","RHSA-2008:0195","RHSA-2008:0834","RHSA-2008:0833","RHSA-2008:0832","RHSA-2008:0831"],"bugzilla":"427216","bugzilla_description":"CVE-2007-5342 Apache Tomcat's default security policy is too open","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_11rh","tomcat5-0:5.5.23-0jpp_4rh.9","tomcat5-0:5.5.23-0jpp.3.0.3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5342.json"},{"CVE":"CVE-2007-4570","severity":"low","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:0542"],"bugzilla":"288201","bugzilla_description":"CVE-2007-4570 mctransd DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mcstrans-0:0.2.6-1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4570.json"},{"CVE":"CVE-2007-5461","severity":"important","public_date":"2007-10-14T00:00:00Z","advisories":["RHSA-2008:0213","RHSA-2008:0158","RHSA-2008:0862","RHSA-2008:0630","RHSA-2010:0602","RHSA-2008:0042","RHSA-2008:0151","RHSA-2008:0195","RHSA-2008:0261","RHSA-2008:0524"],"bugzilla":"333791","bugzilla_description":"CVE-2007-5461 Absolute path traversal Apache Tomcat WEBDAV","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_11rh","tomcat5-0:5.5.23-0jpp_4rh.9","tomcat5-0:5.5.23-0jpp.3.0.3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5461.json"},{"CVE":"CVE-2007-3382","severity":"low","public_date":"2007-08-14T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2007:0950","RHSA-2007:0871","RHSA-2007:1069","RHSA-2008:0195","RHSA-2008:0261","RHSA-2007:0876","RHSA-2008:0524"],"bugzilla":"247972","bugzilla_description":"CVE-2007-3382 tomcat handling of cookies","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_11rh","tomcat5-0:5.5.23-0jpp.3.0.2.el5","tomcat5-0:5.5.23-0jpp_4rh.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3382.json"},{"CVE":"CVE-2007-3385","severity":"low","public_date":"2007-08-14T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2007:0950","RHSA-2007:0871","RHSA-2007:1069","RHSA-2008:0195","RHSA-2008:0261","RHSA-2007:0876","RHSA-2008:0524"],"bugzilla":"247976","bugzilla_description":"CVE-2007-3385 tomcat handling of cookie values","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_11rh","tomcat5-0:5.5.23-0jpp.3.0.2.el5","tomcat5-0:5.5.23-0jpp_4rh.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3385.json"},{"CVE":"CVE-2007-3386","severity":"low","public_date":"2007-08-14T00:00:00Z","advisories":["RHSA-2007:0871","RHSA-2007:0876"],"bugzilla":"247994","bugzilla_description":"CVE-2007-3386 tomcat host manager xss","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.5.23-0jpp.3.0.2.el5","tomcat5-0:5.5.23-0jpp_4rh.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3386.json"},{"CVE":"CVE-2007-2449","severity":"moderate","public_date":"2007-06-13T00:00:00Z","advisories":["RHSA-2008:0630","RHSA-2008:0261","RHSA-2007:0569","RHSA-2007:0876","RHSA-2008:0524"],"bugzilla":"244804","bugzilla_description":"CVE-2007-2449 tomcat examples jsp XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.5.23-0jpp.1.0.4.el5","tomcat5-0:5.5.23-0jpp_4rh.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2449.json"},{"CVE":"CVE-2007-2450","severity":"low","public_date":"2007-06-13T00:00:00Z","advisories":["RHSA-2008:0261","RHSA-2007:0569","RHSA-2007:0876","RHSA-2008:0524"],"bugzilla":"244808","bugzilla_description":"CVE-2007-2450 tomcat host manager XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.5.23-0jpp.1.0.4.el5","tomcat5-0:5.5.23-0jpp_4rh.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2450.json"},{"CVE":"CVE-2007-1358","severity":"low","public_date":"2007-06-06T00:00:00Z","advisories":["RHSA-2008:0630","RHSA-2007:0360","RHSA-2010:0602","RHSA-2008:0261","RHSA-2007:0326","RHSA-2007:0327","RHSA-2007:0876","RHSA-2007:0328","RHSA-2008:0524"],"bugzilla":"244803","bugzilla_description":"CVE-2007-1358 tomcat accept-language xss flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.5.23-0jpp_4rh.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1358.json"},{"CVE":"CVE-2006-7196","severity":"moderate","public_date":"2007-04-26T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2008:0261","RHSA-2007:0326","RHSA-2008:0524"],"bugzilla":"238131","bugzilla_description":"CVE-2006-7196 tomcat XSS in example webapps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7196.json"},{"CVE":"CVE-2006-7195","severity":"moderate","public_date":"2007-04-19T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2008:0261","RHSA-2007:0326","RHSA-2007:0327","RHSA-2007:0328","RHSA-2008:0524"],"bugzilla":"237081","bugzilla_description":"CVE-2006-7195 tomcat XSS in example webapps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7195.json"},{"CVE":"CVE-2007-1858","severity":"moderate","public_date":"2007-04-19T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2007:1069","RHSA-2007:0326"],"bugzilla":"237083","bugzilla_description":"CVE-2007-1858 tomcat anonymous cipher issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1858.json"},{"CVE":"CVE-2007-0450","severity":"important","public_date":"2007-03-14T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2007:0360","RHSA-2010:0602","RHSA-2007:1069","RHSA-2008:0261","RHSA-2007:0326","RHSA-2007:0327","RHSA-2007:0328","RHSA-2008:0524"],"bugzilla":"237080","bugzilla_description":"CVE-2007-0450 tomcat directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0450.json"},{"CVE":"CVE-2006-3835","severity":"low","public_date":"2006-07-21T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2010:0602","RHSA-2007:1069","RHSA-2008:0261","RHSA-2007:0326","RHSA-2008:0524"],"bugzilla":"237084","bugzilla_description":"CVE-2006-3835 tomcat directory listing issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3835.json"},{"CVE":"CVE-2005-3510","severity":"moderate","public_date":"2005-11-03T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2010:0602","RHSA-2007:1069","RHSA-2008:0261","RHSA-2006:0161","RHSA-2008:0524"],"bugzilla":"237085","bugzilla_description":"CVE-2005-3510 tomcat DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3510.json"},{"CVE":"CVE-2005-2090","severity":"moderate","public_date":"2005-06-06T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2007:0360","RHSA-2010:0602","RHSA-2007:1069","RHSA-2008:0261","RHSA-2007:0326","RHSA-2007:0327","RHSA-2007:0328","RHSA-2008:0524"],"bugzilla":"237079","bugzilla_description":"CVE-2005-2090 tomcat multiple content-length header poisioning","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2090.json"},{"CVE":"CVE-2005-4838","severity":"low","public_date":"2005-01-03T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2008:0630","RHSA-2008:0261","RHSA-2008:0524"],"bugzilla":"238401","bugzilla_description":"CVE-2005-4838 tomcat manager example DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4838.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mcelog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mcelog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mcelog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mcstrans_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mcstrans_security_api_results.json
new file mode 100644
index 0000000..6cbc6e4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mcstrans_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2007-4570","severity":"low","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:0542"],"bugzilla":"288201","bugzilla_description":"CVE-2007-4570 mctransd DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mcstrans-0:0.2.6-1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4570.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mdadm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mdadm_security_api_results.json
new file mode 100644
index 0000000..118c614
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mdadm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-5220","severity":"moderate","public_date":"2014-12-17T00:00:00Z","advisories":[],"bugzilla":"1589839","bugzilla_description":"CVE-2014-5220 mdadm: Improper sanitization of device names allows arbitrary command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5220.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.6"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/meanwhile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/meanwhile_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/meanwhile_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/media-player-info_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/media-player-info_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/media-player-info_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memcached_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memcached_security_api_results.json
new file mode 100644
index 0000000..a0f05f1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memcached_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10931","severity":"important","public_date":"2020-03-24T00:00:00Z","advisories":[],"bugzilla":"1816630","bugzilla_description":"CVE-2020-10931 memcached: mishandled memcpy into a stack-based buffer may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10931.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15026","severity":"moderate","public_date":"2019-08-20T00:00:00Z","advisories":[],"bugzilla":"1753862","bugzilla_description":"CVE-2019-15026 memcached: stack-based buffer over-read in conn_to_str in memcached.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15026.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-11596","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:1576"],"bugzilla":"1706001","bugzilla_description":"CVE-2019-11596 memcached: null-pointer dereference in \"lru mode\" and \"lru temp_ttl\" causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["memcached-0:1.5.9-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11596.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000115","severity":"moderate","public_date":"2018-03-02T00:00:00Z","advisories":["RHSA-2018:1627","RHSA-2018:2857","RHSA-2018:2331","RHBA-2018:2140","RHSA-2018:1593"],"bugzilla":"1551182","bugzilla_description":"CVE-2018-1000115 memcached: UDP server support allows spoofed traffic amplification DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-9951","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1471970","bugzilla_description":"CVE-2017-9951 memcached: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9951.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000127","severity":"moderate","public_date":"2017-04-27T00:00:00Z","advisories":["RHSA-2018:2290"],"bugzilla":"1555064","bugzilla_description":"CVE-2018-1000127 memcached: Integer Overflow in items.c:item_free()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["memcached-0:1.4.39-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000127.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-8704","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390510","bugzilla_description":"CVE-2016-8704 memcached: Server append/prepend remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-8705","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390511","bugzilla_description":"CVE-2016-8705 memcached: Server update remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-8706","severity":"moderate","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2016:2819"],"bugzilla":"1390512","bugzilla_description":"CVE-2016-8706 memcached: SASL authentication remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["memcached-0:1.4.15-10.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2013-7239","severity":"moderate","public_date":"2013-04-19T00:00:00Z","advisories":[],"bugzilla":"1047299","bugzilla_description":"CVE-2013-7239 memcached: SASL authentication allows wrong credentials to access memcache","cvss_score":4.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7239.json"},{"CVE":"CVE-2013-7290","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"1052863","bugzilla_description":"CVE-2013-7290 memcached: remote DoS (segmentation fault) via a request to delete a key","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7290.json"},{"CVE":"CVE-2013-7291","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"1052864","bugzilla_description":"CVE-2013-7291 memcached: remote DoS (crash) via a request that triggers \"unbounded key print\"","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7291.json"},{"CVE":"CVE-2013-0179","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"895054","bugzilla_description":"CVE-2013-0179 memcached: DoS due to buffer overrun when printing out keys to be deleted in verbose mode","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0179.json"},{"CVE":"CVE-2011-4971","severity":"low","public_date":"2011-05-15T00:00:00Z","advisories":[],"bugzilla":"957964","bugzilla_description":"CVE-2011-4971 memcached: specially crafted packet segmentation fault","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4971.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memkind_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memkind_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memkind_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memstomp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memstomp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memstomp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memtest86+_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memtest86+_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/memtest86+_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mercurial_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mercurial_security_api_results.json
new file mode 100644
index 0000000..7467a9c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mercurial_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-3902","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1696025","bugzilla_description":"CVE-2019-3902 mercurial: Path-checking logic bypass via symlinks and subrepositories","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3902.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-17983","severity":"moderate","public_date":"2018-10-01T00:00:00Z","advisories":[],"bugzilla":"1637556","bugzilla_description":"CVE-2018-17983 mercurial: Out-of-bounds read in cext/manifest.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17983.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-13348","severity":"moderate","public_date":"2018-06-06T00:00:00Z","advisories":[],"bugzilla":"1594083","bugzilla_description":"CVE-2018-13348 mercurial: Improper length check in mpatch.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-13347","severity":"moderate","public_date":"2018-06-06T00:00:00Z","advisories":["RHSA-2019:2276"],"bugzilla":"1594087","bugzilla_description":"CVE-2018-13347 mercurial: Buffer underflow in mpatch.c:mpatch_apply()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-787","affected_packages":["mercurial-0:2.6.2-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-13346","severity":"low","public_date":"2018-06-06T00:00:00Z","advisories":["RHSA-2019:2276"],"bugzilla":"1594090","bugzilla_description":"CVE-2018-13346 mercurial: Missing check for fragment start position in mpatch.c:mpatch_apply()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":["mercurial-0:2.6.2-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1000132","severity":"moderate","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2019:2276"],"bugzilla":"1553265","bugzilla_description":"CVE-2018-1000132 mercurial: HTTP server permissions bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["mercurial-0:2.6.2-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000132.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000112","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":[],"bugzilla":"1549540","bugzilla_description":"CVE-2018-1000112 jenkins-plugin-mercurial: Disclosure of user names and node names to unauthorized users through post-commit hook URL in Mercurial Plugin (SECURITY-726)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000112.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-17458","severity":"moderate","public_date":"2017-11-03T00:00:00Z","advisories":[],"bugzilla":"1509868","bugzilla_description":"CVE-2017-17458 mercurial: arbitrary command execution in mercurial repo with a git submodule","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-1000116","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2489"],"bugzilla":"1479915","bugzilla_description":"CVE-2017-1000116 mercurial: command injection on clients through malicious ssh URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["mercurial-0:2.6.2-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-1000115","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2489"],"bugzilla":"1480330","bugzilla_description":"CVE-2017-1000115 Mercurial: pathaudit: path traversal via symlink","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["mercurial-0:2.6.2-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-9462","severity":"important","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1576"],"bugzilla":"1459482","bugzilla_description":"CVE-2017-9462 mercurial: Python debugger accessible to authorized users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["mercurial-0:1.4-5.el6_9","mercurial-0:2.6.2-7.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9462.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-3105","severity":"moderate","public_date":"2016-04-06T00:00:00Z","advisories":[],"bugzilla":"1332945","bugzilla_description":"CVE-2016-3105 mercurial: arbitrary code execution when converting git repos","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3105.json"},{"CVE":"CVE-2016-3068","severity":"important","public_date":"2016-03-29T00:00:00Z","advisories":["RHSA-2016:0706"],"bugzilla":"1319768","bugzilla_description":"CVE-2016-3068 mercurial: command injection via git subrepository urls","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["mercurial-0:2.6.2-6.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3068.json"},{"CVE":"CVE-2016-3069","severity":"moderate","public_date":"2016-03-29T00:00:00Z","advisories":["RHSA-2016:0706"],"bugzilla":"1320155","bugzilla_description":"CVE-2016-3069 mercurial: convert extension command injection via git repository names","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["mercurial-0:2.6.2-6.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3069.json"},{"CVE":"CVE-2016-3630","severity":"important","public_date":"2016-03-29T00:00:00Z","advisories":[],"bugzilla":"1322264","bugzilla_description":"CVE-2016-3630 mercurial: remote code execution in binary delta decoding","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3630.json"},{"CVE":"CVE-2014-9462","severity":"moderate","public_date":"2014-12-29T00:00:00Z","advisories":[],"bugzilla":"1204807","bugzilla_description":"CVE-2014-9462 mercurial: command Injection via sshpeer._validaterepo()","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9462.json"},{"CVE":"CVE-2010-4237","severity":"moderate","public_date":"2010-09-29T00:00:00Z","advisories":[],"bugzilla":"641373","bugzilla_description":"CVE-2010-4237 Mercurial: Doesn't verify subject Common Name","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4237.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-dri-drivers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-dri-drivers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-dri-drivers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-khr-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-khr-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-khr-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libEGL-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libEGL-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libEGL-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libEGL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libEGL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libEGL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGL-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGL-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGL-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLES_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLES_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLES_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLU-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLU-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLU-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLU_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLU_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLU_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLw-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLw-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLw-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libGLw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libgbm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libgbm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libgbm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libglapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libglapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libglapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libxatracker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libxatracker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-libxatracker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-private-llvm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-private-llvm_security_api_results.json
new file mode 100644
index 0000000..5709a1b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mesa-private-llvm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-2305","severity":"moderate","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1191049","bugzilla_description":"CVE-2015-2305 regex: heap overflow in regcomp() on 32-bit architectures","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2305.json"},{"CVE":"CVE-2014-2893","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088105","bugzilla_description":"CVE-2014-2893 llvm: insecure temporary file handling in clang's scan-build utility","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367|CWE-732)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2893.json"},{"CVE":"CVE-2013-7171","severity":"moderate","public_date":"2001-07-21T00:00:00Z","advisories":[],"bugzilla":"1044842","bugzilla_description":"CVE-2013-7171 llvm: insecure RPATH in certain binaries","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7171.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/metacity_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/metacity_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/metacity_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mgetty_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mgetty_security_api_results.json
new file mode 100644
index 0000000..7f47e5f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mgetty_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-1010189","severity":"moderate","public_date":"2019-08-09T00:00:00Z","advisories":[],"bugzilla":"1739373","bugzilla_description":"CVE-2019-1010189 mgetty: opening a specially crafted file leads to an infinite loop and DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010189.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-1010190","severity":"low","public_date":"2019-07-25T00:00:00Z","advisories":[],"bugzilla":"1740487","bugzilla_description":"CVE-2019-1010190 mgetty: out-of-bounds read in function putwhitespan() in g3/pbm2g3.c causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010190.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2018-16742","severity":"low","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1629971","bugzilla_description":"CVE-2018-16742 mgetty: Stack-based buffer overflow in contrib/scrts.c triggered via command line parameter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16742.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2018-16743","severity":"low","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1629973","bugzilla_description":"CVE-2018-16743 mgetty: Stack-based buffer overflow with long username in contrib/next-login/login.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16743.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2018-16744","severity":"low","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1629975","bugzilla_description":"CVE-2018-16744 mgetty: Command injection in faxrec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16744.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2018-16745","severity":"low","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1629979","bugzilla_description":"CVE-2018-16745 mgetty: Stack-based buffer overflow in fax_notify_mail() in faxrec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16745.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2018-16741","severity":"moderate","public_date":"2018-09-11T00:00:00Z","advisories":[],"bugzilla":"1628754","bugzilla_description":"CVE-2018-16741 mgetty: command injection in faxrunq","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16741.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/microcode_ctl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/microcode_ctl_security_api_results.json
new file mode 100644
index 0000000..a1982ea
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/microcode_ctl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-0543","severity":"moderate","public_date":"2020-06-09T17:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1827165","bugzilla_description":"CVE-2020-0543 hw: Special Register Buffer Data Sampling (SRBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0543.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-0548","severity":"low","public_date":"2020-01-27T13:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1788786","bugzilla_description":"CVE-2020-0548 hw: Vector Register Data Sampling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-200","affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0548.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2020-0549","severity":"moderate","public_date":"2020-01-27T13:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1788788","bugzilla_description":"CVE-2020-0549 hw: L1D Cache Eviction Sampling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-200","affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0549.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-0117","severity":"important","public_date":"2019-11-12T18:00:00Z","advisories":[],"bugzilla":"1758414","bugzilla_description":"CVE-2019-0117 hw: Intel SGX information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1220->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0117.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.0"},{"CVE":"CVE-2019-11139","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":[],"bugzilla":"1765481","bugzilla_description":"CVE-2019-11139 hw: voltage modulation technical advisory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/migrationtools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/migrationtools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/migrationtools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/minicom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/minicom_security_api_results.json
new file mode 100644
index 0000000..636a346
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/minicom_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-7467","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1442099","bugzilla_description":"CVE-2017-7467 minicom: Out of bounds write in vt100.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7467.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mipv6-daemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mipv6-daemon_security_api_results.json
new file mode 100644
index 0000000..3da9c88
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mipv6-daemon_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-2522","severity":"moderate","public_date":"2009-10-24T00:00:00Z","advisories":[],"bugzilla":"614227","bugzilla_description":"CVE-2010-2522 mipv6-daemon: local users can spoof netlink socket communications","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2522.json"},{"CVE":"CVE-2010-2523","severity":"important","public_date":"2009-10-24T00:00:00Z","advisories":[],"bugzilla":"614237","bugzilla_description":"CVE-2010-2523 mipv6-daemon: multiple buffer overflows allow remote attackers to have unspecified impact","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2523.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mkbootdisk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mkbootdisk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mkbootdisk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mksh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mksh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mksh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mlocate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mlocate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mlocate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mobile-broadband-provider-info_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mobile-broadband-provider-info_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mobile-broadband-provider-info_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_gssapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_gssapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_gssapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_kerb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_kerb_security_api_results.json
new file mode 100644
index 0000000..3bc4bad
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_kerb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2006-5989","severity":"low","public_date":"2006-11-13T00:00:00Z","advisories":["RHSA-2006:0746"],"bugzilla":"1618232","bugzilla_description":"CVE-2006-5989 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mod_auth_kerb-0:5.0-1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5989.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_mellon-diagnostics_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_mellon-diagnostics_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_mellon-diagnostics_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_mellon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_mellon_security_api_results.json
new file mode 100644
index 0000000..4750a3f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_mellon_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-13038","severity":"moderate","public_date":"2019-06-20T00:00:00Z","advisories":["RHSA-2020:1003","RHSA-2020:1660"],"bugzilla":"1725740","bugzilla_description":"CVE-2019-13038 mod_auth_mellon: Open Redirect via the login?ReturnTo= substring which could facilitate information theft","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["mod_auth_mellon-0:0.14.0-8.el7","mod_auth_mellon-0:0.14.0-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13038.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-3877","severity":"moderate","public_date":"2019-03-22T00:00:00Z","advisories":["RHSA-2019:3421","RHSA-2019:0766"],"bugzilla":"1691125","bugzilla_description":"CVE-2019-3877 mod_auth_mellon: open redirect in logout url when using URLs with backslashes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["mod_auth_mellon-0:0.14.0-2.el7_6.4","mod_auth_mellon-0:0.14.0-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3877.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.8"},{"CVE":"CVE-2019-3878","severity":"important","public_date":"2018-05-10T00:00:00Z","advisories":["RHSA-2019:0746","RHSA-2019:0985","RHSA-2019:0766"],"bugzilla":"1691126","bugzilla_description":"CVE-2019-3878 mod_auth_mellon: authentication bypass in ECP flow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["httpd24-mod_auth_mellon-0:0.13.1-2.el7.1","mod_auth_mellon-0:0.14.0-2.el7_6.4","mod_auth_mellon-0:0.14.0-3.el8_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3878.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-6807","severity":"moderate","public_date":"2017-03-13T00:00:00Z","advisories":[],"bugzilla":"1431670","bugzilla_description":"CVE-2017-6807 mod_auth_mellon: Cross-site session transfer vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2016-2145","severity":"moderate","public_date":"2016-03-09T00:00:00Z","advisories":[],"bugzilla":"1315739","bugzilla_description":"CVE-2016-2145 mod_auth_mellon: Missing error check when calling ap_get_client_block()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2145.json"},{"CVE":"CVE-2016-2146","severity":"moderate","public_date":"2016-03-09T00:00:00Z","advisories":[],"bugzilla":"1315747","bugzilla_description":"CVE-2016-2146 mod_auth_mellon: Failure to limit amount of POST data submitted by client","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2146.json"},{"CVE":"CVE-2014-8566","severity":"important","public_date":"2014-11-03T00:00:00Z","advisories":["RHSA-2014:1803"],"bugzilla":"1157281","bugzilla_description":"CVE-2014-8566 mod_auth_mellon: remote memory disclosure flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["mod_auth_mellon-0:0.8.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8566.json"},{"CVE":"CVE-2014-8567","severity":"moderate","public_date":"2014-11-03T00:00:00Z","advisories":["RHSA-2014:1803"],"bugzilla":"1157954","bugzilla_description":"CVE-2014-8567 mod_auth_mellon: logout processing leads to denial of service","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mod_auth_mellon-0:0.8.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8567.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_openidc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_openidc_security_api_results.json
new file mode 100644
index 0000000..297cdb3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_auth_openidc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-20479","severity":"moderate","public_date":"2019-11-12T00:00:00Z","advisories":["RHSA-2020:3970","RHSA-2020:3032"],"bugzilla":"1805102","bugzilla_description":"CVE-2019-20479 mod_auth_openidc: Open redirect issue exists in URLs with slash and backslash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["mod_auth_openidc-0:1.8.8-7.el7","mod_auth_openidc:2.3-8020020200604180605.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20479.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-14857","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":["RHSA-2020:3970","RHSA-2020:3032"],"bugzilla":"1760613","bugzilla_description":"CVE-2019-14857 mod_auth_openidc: Open redirect in logout url when using URLs with leading slashes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["mod_auth_openidc-0:1.8.8-7.el7","mod_auth_openidc:2.3-8020020200604180605.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14857.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-6413","severity":"moderate","public_date":"2017-02-20T00:00:00Z","advisories":["RHSA-2019:2112"],"bugzilla":"1428855","bugzilla_description":"CVE-2017-6413 mod_auth_openidc: OIDC_CLAIM and OIDCAuthNHeader not skipped in an \"AuthType oauth20\" configuration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["mod_auth_openidc-0:1.8.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6413.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-6062","severity":"moderate","public_date":"2017-01-30T00:00:00Z","advisories":[],"bugzilla":"1425353","bugzilla_description":"CVE-2017-6062 mod_auth_openidc: OIDCUnAuthAction pass does not scrub request headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6062.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-6059","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2019:2112"],"bugzilla":"1425350","bugzilla_description":"CVE-2017-6059 mod_auth_openidc: Shows user-supplied content on error pages","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mod_auth_openidc-0:1.8.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6059.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_authnz_pam_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_authnz_pam_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_authnz_pam_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_dav_svn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_dav_svn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_dav_svn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_fcgid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_fcgid_security_api_results.json
new file mode 100644
index 0000000..91f87f5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_fcgid_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-1000104","severity":"important","public_date":"2016-07-18T00:00:00Z","advisories":[],"bugzilla":"1353760","bugzilla_description":"CVE-2016-1000104 mod_fcgid: mod_fcgid sets environmental variable based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000104.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2013-4365","severity":"important","public_date":"2013-09-29T00:00:00Z","advisories":[],"bugzilla":"1017039","bugzilla_description":"CVE-2013-4365 mod_fcgid: heap overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4365.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_intercept_form_submit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_intercept_form_submit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_intercept_form_submit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_lookup_identity_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_lookup_identity_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_lookup_identity_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_nss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_nss_security_api_results.json
new file mode 100644
index 0000000..df4f4b1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_nss_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-3099","severity":"low","public_date":"2016-04-05T00:00:00Z","advisories":["RHSA-2016:2602"],"bugzilla":"1319052","bugzilla_description":"CVE-2016-3099 mod_nss: Invalid handling of +CIPHER operator","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-392","affected_packages":["mod_nss-0:1.0.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3099.json"},{"CVE":"CVE-2015-5244","severity":"moderate","public_date":"2015-09-15T00:00:00Z","advisories":[],"bugzilla":"1259216","bugzilla_description":"CVE-2015-5244 mod_nss: incorrect ciphersuite parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5244.json"},{"CVE":"CVE-2015-3277","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":[],"bugzilla":"1238324","bugzilla_description":"CVE-2015-3277 mod_nss: incorrect multi-keyword mode cipherstring parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3277.json"},{"CVE":"CVE-2013-4566","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2013:1779"],"bugzilla":"1016832","bugzilla_description":"CVE-2013-4566 mod_nss: incorrect handling of NSSVerifyClient in directory context","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["mod_nss-0:1.0.8-19.el6_5","mod_nss-0:1.0.8-8.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4566.json"},{"CVE":"CVE-2011-4973","severity":"moderate","public_date":"2011-05-04T00:00:00Z","advisories":["RHBA-2011:1656","RHBA-2013:0009"],"bugzilla":"1017197","bugzilla_description":"CVE-2011-4973 mod_nss: FakeBasicAuth authentication bypass","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["mod_nss-0:1.0.8-7.el5","mod_nss-0:1.0.8-13.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4973.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_revocator_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_revocator_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_revocator_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_security_crs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_security_crs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_security_crs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_security_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_security_security_api_results.json
new file mode 100644
index 0000000..88f47aa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_security_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-5705","severity":"moderate","public_date":"2014-03-31T00:00:00Z","advisories":[],"bugzilla":"1082904","bugzilla_description":"CVE-2013-5705 mod_security: bypass of intended rules via chunked requests","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5705.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_session_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_session_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_session_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_ssl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_ssl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_ssl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_wsgi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_wsgi_security_api_results.json
new file mode 100644
index 0000000..2d9edf4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mod_wsgi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-8583","severity":"moderate","public_date":"2014-06-17T00:00:00Z","advisories":[],"bugzilla":"1111034","bugzilla_description":"CVE-2014-8583 mod_wsgi: failure to handle errors when attempting to drop group privileges","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-271","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8583.json"},{"CVE":"CVE-2014-0240","severity":"important","public_date":"2014-05-21T00:00:00Z","advisories":["RHSA-2014:0788","RHSA-2014:1091","RHSA-2014:0789"],"bugzilla":"1101863","bugzilla_description":"CVE-2014-0240 mod_wsgi: possible privilege escalation in setuid() failure scenarios","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-271","affected_packages":["mod_wsgi-0:3.4-12.el7_0","python27-mod_wsgi-0:3.4-12.el6","python27-mod_wsgi-0:3.4-13.el7","python33-mod_wsgi-0:3.4-13.el7","python33-mod_wsgi-0:3.4-14.el6","mod_wsgi-0:3.2-6.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0240.json"},{"CVE":"CVE-2014-0242","severity":"moderate","public_date":"2014-05-21T00:00:00Z","advisories":["RHSA-2014:0788"],"bugzilla":"1101873","bugzilla_description":"CVE-2014-0242 mod_wsgi: information leak","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["mod_wsgi-0:3.2-6.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0242.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mokutil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mokutil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mokutil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/motif-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/motif-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/motif-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/motif_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/motif_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/motif_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mousetweaks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mousetweaks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mousetweaks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozilla-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozilla-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozilla-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozjs17_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozjs17_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozjs17_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozjs24_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozjs24_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozjs24_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozjs52_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozjs52_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mozjs52_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpfr-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpfr-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpfr-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpfr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpfr_security_api_results.json
new file mode 100644
index 0000000..f296974
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpfr_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-9474","severity":"low","public_date":"2013-12-16T00:00:00Z","advisories":[],"bugzilla":"1171701","bugzilla_description":"CVE-2014-9474 mpfr: buffer overflow in mpfr_strtofr","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9474.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpg123-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpg123-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpg123-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.0-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.0-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.0-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.0_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.0_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.0_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpich-3.2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mpich32_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mpich32_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mpich32_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mpich_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mpich_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mpich_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich2-psm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich2-psm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich2-psm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich222-psm2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich222-psm2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich222-psm2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich222-psm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich222-psm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich222-psm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich222_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich222_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich222_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich23-psm2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich23-psm2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich23-psm2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich23-psm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich23-psm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich23-psm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich23_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich23_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich23_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-mvapich2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-openmpi3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-openmpi3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-openmpi3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-openmpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-openmpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mpitests-openmpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mrtg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mrtg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mrtg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mstflint_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mstflint_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mstflint_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/msv-msv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/msv-msv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/msv-msv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/msv-xsdlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/msv-xsdlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/msv-xsdlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mt-st_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mt-st_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mt-st_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtdev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtdev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtdev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtr_security_api_results.json
new file mode 100644
index 0000000..0af9f36
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtr_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11840","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":["RHBA-2020:0063"],"bugzilla":"1691529","bugzilla_description":"CVE-2019-11840 golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["openshift-0:4.3.0-202001131753.git.0.0aee6a8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3204","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":[],"bugzilla":"1439748","bugzilla_description":"CVE-2017-3204 golang-googlecode-go-crypto: Go SSH library does not verify host keys by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mtx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mutt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mutt_security_api_results.json
new file mode 100644
index 0000000..501b725
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mutt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14954","severity":"moderate","public_date":"2020-06-16T00:00:00Z","advisories":[],"bugzilla":"1850170","bugzilla_description":"CVE-2020-14954 mutt: response Injection via STARTTLS in SMTP, POP3 and IMAP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14954.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-14154","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1848287","bugzilla_description":"CVE-2020-14154 mutt: TLS mishandling during connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14154.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-14093","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1848360","bugzilla_description":"CVE-2020-14093 mutt: IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14093.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-14353","severity":"low","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1604040","bugzilla_description":"CVE-2018-14353 mutt: integer underflow in imap/util.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14353.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-14354","severity":"important","public_date":"2018-07-16T00:00:00Z","advisories":["RHSA-2018:2526"],"bugzilla":"1602069","bugzilla_description":"CVE-2018-14354 mutt: Remote code injection vulnerability to an IMAP mailbox","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["mutt-5:1.5.20-9.20091214hg736b6a.el6","mutt-5:1.5.21-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14354.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"9.6"},{"CVE":"CVE-2018-14362","severity":"moderate","public_date":"2018-07-16T00:00:00Z","advisories":["RHSA-2018:2526"],"bugzilla":"1602079","bugzilla_description":"CVE-2018-14362 mutt: POP body caching path traversal vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["mutt-5:1.5.20-9.20091214hg736b6a.el6","mutt-5:1.5.21-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-14355","severity":"moderate","public_date":"2018-07-16T00:00:00Z","advisories":["RHSA-2020:1126"],"bugzilla":"1602081","bugzilla_description":"CVE-2018-14355 mutt: IMAP header caching path traversal vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["mutt-5:1.5.21-29.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14355.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-14350","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1602922","bugzilla_description":"CVE-2018-14350 mutt: stack-based buffer overflow in imap/message.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14350.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-14351","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1602953","bugzilla_description":"CVE-2018-14351 mutt: IMAP status mailbox literal mishandled in imap/command.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14351.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-14352","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1604034","bugzilla_description":"CVE-2018-14352 mutt: stack-based buffer overflow in imap/util.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14352.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-14356","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1604047","bugzilla_description":"CVE-2018-14356 mutt: mishandles a zero-length UID in pop.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14356.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-14358","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1604064","bugzilla_description":"CVE-2018-14358 mutt: stack-based buffer overflow in imap/message.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-14359","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1604084","bugzilla_description":"CVE-2018-14359 mutt: buffer overflow via base64 data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14359.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-14357","severity":"important","public_date":"2018-07-08T00:00:00Z","advisories":["RHSA-2018:2526"],"bugzilla":"1602915","bugzilla_description":"CVE-2018-14357 mutt: Remote Code Execution via backquote characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["mutt-5:1.5.20-9.20091214hg736b6a.el6","mutt-5:1.5.21-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14357.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2018-14349","severity":"low","public_date":"2018-07-07T00:00:00Z","advisories":[],"bugzilla":"1602934","bugzilla_description":"CVE-2018-14349 mutt: Heap Overflow in imap/command.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14349.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2014-9116","severity":"low","public_date":"2014-11-26T00:00:00Z","advisories":[],"bugzilla":"1168463","bugzilla_description":"CVE-2014-9116 mutt: incorrect use of mutt_substrdup() in write_one_header()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-119->CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9116.json"},{"CVE":"CVE-2014-0467","severity":"important","public_date":"2013-05-18T00:00:00Z","advisories":["RHSA-2014:0304"],"bugzilla":"1075860","bugzilla_description":"CVE-2014-0467 mutt: heap-based buffer overflow when parsing certain headers","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["mutt-5:1.5.20-4.20091214hg736b6a.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0467.json"},{"CVE":"CVE-2011-1429","severity":"moderate","public_date":"2011-03-08T00:00:00Z","advisories":["RHSA-2011:0959"],"bugzilla":"688755","bugzilla_description":"CVE-2011-1429 mutt: SSL host name check may be skipped when verifying certificate chain","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["mutt-5:1.5.20-2.20091214hg736b6a.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1429.json"},{"CVE":"CVE-2009-3766","severity":"moderate","public_date":"2009-08-10T00:00:00Z","advisories":[],"bugzilla":"531011","bugzilla_description":"CVE-2009-3766 mutt: missing host name vs. SSL certificate name checks","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3766.json"},{"CVE":"CVE-2007-2683","severity":"low","public_date":"2007-05-11T00:00:00Z","advisories":["RHSA-2007:0386"],"bugzilla":"239890","bugzilla_description":"CVE-2007-2683 Buffer overflow in mutt's gecos structure handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mutt-5:1.4.1-5.el3","mutt-5:1.4.2.2-3.0.2.el5","mutt-5:1.4.1-12.0.3.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2683.json"},{"CVE":"CVE-2007-1558","severity":"moderate","public_date":"2007-04-02T00:00:00Z","advisories":["RHSA-2009:1140","RHSA-2007:0385","RHSA-2007:0344","RHSA-2007:0353","RHSA-2007:0386","RHSA-2007:0401","RHSA-2007:0402"],"bugzilla":"241191","bugzilla_description":"CVE-2007-1558 fetchmail/mutt/evolution/...: APOP password disclosure vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:1.5.0.12-0.1.el4","evolution-0:2.0.2-35.0.2.el4","fetchmail-0:5.9.0-21.7.3.el2.1.6","mutt-5:1.4.1-5.el3","fetchmail-0:6.2.5-6.0.1.el4","ruby-0:1.8.1-7.el4_8.3","evolution-data-server-0:1.8.0-15.0.3.el5","thunderbird-0:1.5.0.12-1.el5","ruby-0:1.8.5-5.el5_3.7","fetchmail-0:6.3.6-1.0.1.el5","mutt-5:1.4.2.2-3.0.2.el5","mutt-5:1.4.1-12.0.3.el4","evolution-0:1.4.5-20.el3","seamonkey-0:1.0.9-0.1.el3","seamonkey-0:1.0.9-0.1.el2","fetchmail-0:6.2.0-3.el3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1558.json"},{"CVE":"CVE-2006-5297","severity":"low","public_date":"2006-10-04T00:00:00Z","advisories":["RHSA-2007:0386"],"bugzilla":"211085","bugzilla_description":"CVE-2006-5297 Multiple mutt tempfile race conditions","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mutt-5:1.4.1-5.el3","mutt-5:1.4.2.2-3.0.2.el5","mutt-5:1.4.1-12.0.3.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5297.json"},{"CVE":"CVE-2006-3242","severity":"moderate","public_date":"2006-06-19T00:00:00Z","advisories":["RHSA-2006:0577"],"bugzilla":"1618137","bugzilla_description":"CVE-2006-3242 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mutt-5:1.4.1-11.rhel4","mutt-5:1.4.1-3.5.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3242.json"},{"CVE":"CVE-2005-2351","severity":"low","public_date":"2005-05-30T00:00:00Z","advisories":[],"bugzilla":"1768449","bugzilla_description":"CVE-2005-2351 mutt: denial of service via a series of requests to temporary files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2351.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2004-0078","severity":"important","public_date":"2004-02-11T00:00:00Z","advisories":["RHSA-2004:050","RHSA-2004:051"],"bugzilla":"1617139","bugzilla_description":"CVE-2004-0078 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mutt-5:1.4.1-3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0078.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mutter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mutter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mutter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-psm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-psm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-psm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-psm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-psm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0-psm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.0_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2-psm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich2-2.2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23-psm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mvapich23_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mysql-connector-java_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mysql-connector-java_security_api_results.json
new file mode 100644
index 0000000..b7249bc
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mysql-connector-java_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-2934","severity":"low","public_date":"2020-04-15T00:00:00Z","advisories":[],"bugzilla":"1851014","bugzilla_description":"CVE-2020-2934 mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2934.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-2875","severity":"low","public_date":"2020-04-15T00:00:00Z","advisories":[],"bugzilla":"1851019","bugzilla_description":"CVE-2020-2875 mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2875.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2020-2933","severity":"low","public_date":"2020-04-15T00:00:00Z","advisories":[],"bugzilla":"1851022","bugzilla_description":"CVE-2020-2933 mysql-connector-java: allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized partial DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2933.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2019-2692","severity":"moderate","public_date":"2019-04-23T00:00:00Z","advisories":[],"bugzilla":"1703402","bugzilla_description":"CVE-2019-2692 mysql-connector-java: privilege escalation in MySQL connector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2692.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2018-3258","severity":"important","public_date":"2018-10-17T00:00:00Z","advisories":["RHSA-2019:1545"],"bugzilla":"1640615","bugzilla_description":"CVE-2018-3258 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3258.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3523","severity":"important","public_date":"2017-04-21T00:00:00Z","advisories":[],"bugzilla":"1444759","bugzilla_description":"CVE-2017-3523 mysql-connector-java: Improper automatic deserialization of binary data (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2017-3586","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1444406","bugzilla_description":"CVE-2017-3586 mysql-connector-java: Connector/J unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3586.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2017-3589","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1444407","bugzilla_description":"CVE-2017-3589 mysql-connector-java: Connector/J unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3589.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2015-2575","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212764","bugzilla_description":"CVE-2015-2575 mysql-connector-java: unspecified vulnerability related to Connector/J (CPU April 2015)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2575.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mysql-connector-odbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mysql-connector-odbc_security_api_results.json
new file mode 100644
index 0000000..4031e76
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mysql-connector-odbc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-2920","severity":"low","public_date":"2019-11-19T00:00:00Z","advisories":[],"bugzilla":"1774049","bugzilla_description":"CVE-2019-2920 mysql-connector-odbc: An unauthenticated attacker with network access can, via multiple protocols compromise MySQL Connectors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2920.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-bg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-bg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-bg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-cs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-cs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-cs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-da_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-da_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-da_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-de_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-de_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-de_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-el_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-el_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-el_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-en_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-en_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-en_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-es_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-es_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-es_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-fr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-fr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-fr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ga_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ga_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-hu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-hu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-hu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-it_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-it_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-it_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-lb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-lb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-lb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-lv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-lv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-lv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-mi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-mi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-mi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-nb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-nb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-nb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ne_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ne_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ne_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-nl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-nl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-nl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-nn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-nn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-nn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-pl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-pl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-pl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-pt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-pt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-pt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ru_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ru_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-ru_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-sk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-sk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-sk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-sl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-sl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-sl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-sv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-sv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-sv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-uk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-uk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes-uk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/mythes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nafees-web-naskh-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nafees-web-naskh-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nafees-web-naskh-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nano_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nano_security_api_results.json
new file mode 100644
index 0000000..9f548c3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nano_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-1160","severity":"low","public_date":"2010-04-02T00:00:00Z","advisories":[],"bugzilla":"582434","bugzilla_description":"CVE-2010-1160 CVE-2010-1161 nano: multiple file editing insecurities","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1160.json"},{"CVE":"CVE-2010-1161","severity":"low","public_date":"2010-04-02T00:00:00Z","advisories":[],"bugzilla":"582434","bugzilla_description":"CVE-2010-1160 CVE-2010-1161 nano: multiple file editing insecurities","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1161.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nasm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nasm_security_api_results.json
new file mode 100644
index 0000000..3c1d700
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nasm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24978","severity":"low","public_date":"2020-09-04T00:00:00Z","advisories":[],"bugzilla":"1877786","bugzilla_description":"CVE-2020-24978 nasm: double-free vulnerability in pp_tokline asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24978.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-24242","severity":"low","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1872747","bugzilla_description":"CVE-2020-24242 nasm: segmentation fault in tok_text function in asm/preproc.c by accessing read memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24242.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-24241","severity":"low","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1872803","bugzilla_description":"CVE-2020-24241 nasm: use-after-free in saa_wbytes function in nasmlib/saa.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24241.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-20352","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1790845","bugzilla_description":"CVE-2019-20352 nasm: heap-based buffer over-read in set_text_free when called from expand_one_smacro in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20352.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-20334","severity":"low","public_date":"2020-01-04T00:00:00Z","advisories":[],"bugzilla":"1824469","bugzilla_description":"CVE-2019-20334 nasm: stack consumption occurs in expr# functions in asm/eval.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20334.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-14248","severity":"low","public_date":"2019-07-24T00:00:00Z","advisories":[],"bugzilla":"1732714","bugzilla_description":"CVE-2019-14248 nasm: NULL pointer dereference in asm/pragma.c leading to Segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14248.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-8343","severity":"low","public_date":"2019-02-14T00:00:00Z","advisories":[],"bugzilla":"1677636","bugzilla_description":"CVE-2019-8343 nasm: use-after-free in paste_tokens in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8343.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-6290","severity":"low","public_date":"2019-01-02T00:00:00Z","advisories":[],"bugzilla":"1668319","bugzilla_description":"CVE-2019-6290 nasm: Infinite recursion in eval.c causing stack exhaustion problem resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6290.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-6291","severity":"low","public_date":"2019-01-02T00:00:00Z","advisories":[],"bugzilla":"1668321","bugzilla_description":"CVE-2019-6291 nasm: Recursive calls in the function expr resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6291.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-7147","severity":"low","public_date":"2019-01-01T00:00:00Z","advisories":[],"bugzilla":"1670704","bugzilla_description":"CVE-2019-7147 nasm: Buffer over-read in function crc64ib in crc64.c resulting in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7147.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-20535","severity":"low","public_date":"2018-11-18T00:00:00Z","advisories":[],"bugzilla":"1663907","bugzilla_description":"CVE-2018-20535 nasm: Use-after-free at asm/preproc.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20538","severity":"low","public_date":"2018-11-18T00:00:00Z","advisories":[],"bugzilla":"1663908","bugzilla_description":"CVE-2018-20538 nasm: Use-after-free at asm/preproc.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20538.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19755","severity":"low","public_date":"2018-11-12T00:00:00Z","advisories":[],"bugzilla":"1656210","bugzilla_description":"CVE-2018-19755 nasm: out-of-bounds array access in is_mmacro in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-19213","severity":"low","public_date":"2018-10-29T00:00:00Z","advisories":[],"bugzilla":"1652029","bugzilla_description":"CVE-2018-19213 nasm: memory leaks in nasm_malloc in nasmlib/malloc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19213.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19215","severity":"low","public_date":"2018-10-29T00:00:00Z","advisories":[],"bugzilla":"1652041","bugzilla_description":"CVE-2018-19215 nasm: heap-based buffer over-read in do_directive in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19215.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19209","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":[],"bugzilla":"1652027","bugzilla_description":"CVE-2018-19209 nasm: NULL pointer dereference in find_label in asm/labels.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19214","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":[],"bugzilla":"1652033","bugzilla_description":"CVE-2018-19214 nasm: heap-based buffer over-read in expand_mmac_params in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19214.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16999","severity":"low","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1629990","bugzilla_description":"CVE-2018-16999 nasm: Invalid memory write (segmentation fault) in expand_smacro in preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16999.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000667","severity":"low","public_date":"2018-09-06T00:00:00Z","advisories":[],"bugzilla":"1626256","bugzilla_description":"CVE-2018-1000667 nasm: Memory corruption in assemble_file() function in asm/nasm.c:482","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000667.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2018-1000886","severity":"low","public_date":"2018-09-06T00:00:00Z","advisories":[],"bugzilla":"1663906","bugzilla_description":"CVE-2018-1000886 nasm: Buffer overflow in asm/stdscan.c:130 resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000886.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16517","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":[],"bugzilla":"1626549","bugzilla_description":"CVE-2018-16517 nasm: NULL Pointer Dereference in asm/labels.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16517.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2018-19216","severity":null,"public_date":"2018-08-28T00:00:00Z","advisories":[],"bugzilla":"1652046","bugzilla_description":"CVE-2018-19216 nasm: use-after-free in detoken at asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19216.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16382","severity":"low","public_date":"2018-08-03T00:00:00Z","advisories":[],"bugzilla":"1625037","bugzilla_description":"CVE-2018-16382 nasm: buffer over-read in x86/regflags.c allows for crash via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16382.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10316","severity":"low","public_date":"2018-04-25T00:00:00Z","advisories":[],"bugzilla":"1573298","bugzilla_description":"CVE-2018-10316 nasm: Endless while loop in the assemble_file function of asm/nasm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10316.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10254","severity":"low","public_date":"2018-04-21T00:00:00Z","advisories":[],"bugzilla":"1570495","bugzilla_description":"CVE-2018-10254 nasm: Stack-based buffer over-read in disasm/disasm.c:disasm() can allow attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10254.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10016","severity":"low","public_date":"2018-04-10T00:00:00Z","advisories":[],"bugzilla":"1567719","bugzilla_description":"CVE-2018-10016 nasm: Divide-by-zero asm/eval.c:expr5() allows for crash via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10016.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17810","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529312","bugzilla_description":"CVE-2017-17810 nasm: Segfault via mishandled macro calls in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17810.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-17811","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529317","bugzilla_description":"CVE-2017-17811 nasm: Heap-based buffer overflow in paste_tokens function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17811.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-17812","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529319","bugzilla_description":"CVE-2017-17812 nasm: Heap-based buffer over-read in detoken function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17812.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17813","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529326","bugzilla_description":"CVE-2017-17813 nasm: use-after-free in pp_list_one_macro function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17813.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17814","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529327","bugzilla_description":"CVE-2017-17814 nasm: use-after-free in do_directive function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17815","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529328","bugzilla_description":"CVE-2017-17815 nasm: Illegal address access in is_mmacro function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17816","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529330","bugzilla_description":"CVE-2017-17816 nasm: Use-after-free in pp_getline function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17816.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17817","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529331","bugzilla_description":"CVE-2017-17817 nasm: Use-after-free in pp_verror function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17817.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17818","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529332","bugzilla_description":"CVE-2017-17818 nasm: Heap-based buffer over-read in paste_tokens function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17818.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17819","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529334","bugzilla_description":"CVE-2017-17819 nasm: Illegal address access in find_cc function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17819.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17820","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529335","bugzilla_description":"CVE-2017-17820 nasm: Use-after-free in pp_list_one_macro function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17820.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8883","severity":"low","public_date":"2017-10-22T00:00:00Z","advisories":[],"bugzilla":"1559919","bugzilla_description":"CVE-2018-8883 nasm: Buffer over-read in parse_line function in asm/parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8883.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8881","severity":"low","public_date":"2017-10-18T00:00:00Z","advisories":[],"bugzilla":"1559905","bugzilla_description":"CVE-2018-8881 nasm: Heap overflow in function tokenize in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8881.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8882","severity":"low","public_date":"2017-10-18T00:00:00Z","advisories":[],"bugzilla":"1559913","bugzilla_description":"CVE-2018-8882 nasm: Stack buffer underflow in function ieee_shr at source file asm/float.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14228","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":[],"bugzilla":"1493189","bugzilla_description":"CVE-2017-14228 nasm: NULL pointer dereference in the paste_tokens function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14228.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10686","severity":"moderate","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1472882","bugzilla_description":"CVE-2017-10686 nasm: Use-after-free in the detoken() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10686.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-11111","severity":"moderate","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1472884","bugzilla_description":"CVE-2017-11111 nasm: Heap buffer overflow in the preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11111.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2005-1194","severity":"low","public_date":"2005-03-31T00:00:00Z","advisories":["RHSA-2005:381"],"bugzilla":"1617615","bugzilla_description":"CVE-2005-1194 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nasm-0:0.98.38-3.EL4","nasm-0:0.98.35-3.EL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1194.json"},{"CVE":"CVE-2004-1287","severity":"low","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:381"],"bugzilla":"1617404","bugzilla_description":"CVE-2004-1287 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nasm-0:0.98.38-3.EL4","nasm-0:0.98.35-3.EL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1287.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nautilus-extensions_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nautilus-extensions_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nautilus-extensions_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nautilus-sendto_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nautilus-sendto_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nautilus-sendto_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nautilus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nautilus_security_api_results.json
new file mode 100644
index 0000000..36a9e5e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nautilus_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11461","severity":"low","public_date":"2019-04-13T00:00:00Z","advisories":[],"bugzilla":"1711144","bugzilla_description":"CVE-2019-11461 nautilus: sandbox security bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11461.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-14604","severity":"moderate","public_date":"2017-01-31T00:00:00Z","advisories":["RHSA-2018:0223"],"bugzilla":"1490872","bugzilla_description":"CVE-2017-14604 nautilus: Insufficient validation of trust of .desktop files with execute permission","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["nautilus-0:3.22.3-4.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14604.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/navilu-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/navilu-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/navilu-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit-plugin-python-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit-plugin-python-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit-plugin-python-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit-plugin-python2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit-plugin-python2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit-plugin-python2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit-plugin-vddk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit-plugin-vddk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit-plugin-vddk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit_security_api_results.json
new file mode 100644
index 0000000..e939e9c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nbdkit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14850","severity":"low","public_date":"2019-09-20T00:00:00Z","advisories":["RHSA-2020:1167"],"bugzilla":"1757258","bugzilla_description":"CVE-2019-14850 nbdkit: denial of service due to premature opening of back-end connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406","affected_packages":["nbdkit-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14850.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-14851","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1757259","bugzilla_description":"CVE-2019-14851 nbdkit: assertion failure by issuing commands in the wrong order","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14851.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncompress_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncompress_security_api_results.json
new file mode 100644
index 0000000..cbbe774
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncompress_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-2895","severity":"important","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2011:1154","RHSA-2011:1155","RHSA-2011:1161","RHSA-2011:1834"],"bugzilla":"727624","bugzilla_description":"CVE-2011-2895 BSD compress LZW decoder buffer overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libXfont-0:1.2.2-1.0.3.el5_6","libXfont-0:1.4.1-2.el6_1","freetype-0:2.1.9-19.el4","xorg-x11-0:6.8.2-1.EL.69","libXfont-0:1.2.2-1.0.4.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2895.json"},{"CVE":"CVE-2006-1168","severity":"moderate","public_date":"2006-08-08T00:00:00Z","advisories":["RHSA-2012:0810","RHSA-2012:0308","RHSA-2006:0663"],"bugzilla":"201919","bugzilla_description":"CVE-2006-1168 ncompress: .bss buffer underflow in decompression","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["busybox-1:1.2.0-13.el5","ncompress-0:4.2.4-39.rhel3","ncompress-0:4.2.4-43.rhel4","busybox-1:1.15.1-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1168.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-term_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-term_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses-term_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses_security_api_results.json
new file mode 100644
index 0000000..fd08161
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ncurses_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17595","severity":"moderate","public_date":"2019-10-11T00:00:00Z","advisories":[],"bugzilla":"1766617","bugzilla_description":"CVE-2019-17595 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17595.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-17594","severity":"moderate","public_date":"2019-10-11T00:00:00Z","advisories":[],"bugzilla":"1766745","bugzilla_description":"CVE-2019-17594 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17594.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-19217","severity":"low","public_date":"2018-11-12T00:00:00Z","advisories":[],"bugzilla":"1652606","bugzilla_description":"CVE-2018-19217 ncurses: Null pointer dereference at function _nc_name_match","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19217.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-19211","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":[],"bugzilla":"1652600","bugzilla_description":"CVE-2018-19211 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-10754","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":[],"bugzilla":"1576119","bugzilla_description":"CVE-2018-10754 ncurses: NULL Pointer Dereference in _nc_parse_entry function in tinfo/parse_entry.c.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10754.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2017-16879","severity":"low","public_date":"2017-11-18T00:00:00Z","advisories":[],"bugzilla":"1517922","bugzilla_description":"CVE-2017-16879 ncurses: Stack-based buffer overflow in the _nc_write_entry function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16879.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-13728","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488915","bugzilla_description":"CVE-2017-13728 ncurses: Infinite loop in the next_char function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13728.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13729","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488916","bugzilla_description":"CVE-2017-13729 ncurses: Illegal address access in the _nc_save_str function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13729.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13730","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488917","bugzilla_description":"CVE-2017-13730 ncurses: Illegal address access in the function _nc_read_entry_source()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13730.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13731","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488918","bugzilla_description":"CVE-2017-13731 ncurses: Illegal address access in the function postprocess_termcap()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13731.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13732","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488919","bugzilla_description":"CVE-2017-13732 ncurses: Illegal address access in the function dump_uses()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13732.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13733","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488920","bugzilla_description":"CVE-2017-13733 ncurses: Illegal address access in the function fmt_entry","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13733.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13734","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488922","bugzilla_description":"CVE-2017-13734 ncurses: Illegal address access in the function _nc_safe_strcat","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10684","severity":"moderate","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1473302","bugzilla_description":"CVE-2017-10684 ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10684.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-11112","severity":"low","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1473306","bugzilla_description":"CVE-2017-11112 ncurses: Illegal address access in append_acs function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11112.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11113","severity":"low","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1473310","bugzilla_description":"CVE-2017-11113 ncurses: Null pointer dereference vulnerability in _nc_parse_entry function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11113.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10685","severity":"moderate","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1473312","bugzilla_description":"CVE-2017-10685 ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10685.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ndctl-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ndctl-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ndctl-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ndctl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ndctl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ndctl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/neon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/neon_security_api_results.json
new file mode 100644
index 0000000..a0e444a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/neon_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2009-2473","severity":"low","public_date":"2009-08-18T00:00:00Z","advisories":["RHSA-2013:0131","RHSA-2009:1452"],"bugzilla":"518215","bugzilla_description":"CVE-2009-2473 neon: billion laughs DoS attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["gnome-vfs2-0:2.16.2-10.el5","neon-0:0.24.7-4.el4_8.2","neon-0:0.25.5-10.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2473.json"},{"CVE":"CVE-2009-2474","severity":"moderate","public_date":"2009-08-18T00:00:00Z","advisories":["RHSA-2009:1452"],"bugzilla":"518223","bugzilla_description":"CVE-2009-2474 neon: Improper verification of x509v3 certificate with NULL (zero) byte in certain fields","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["neon-0:0.24.7-4.el4_8.2","neon-0:0.25.5-10.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2474.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-core-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-core-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-core-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-core-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-core-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-core-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-widgets_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-widgets_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nepomuk-widgets_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-agent-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-agent-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-agent-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp_security_api_results.json
new file mode 100644
index 0000000..b898a8d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-snmp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15862","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1873038","bugzilla_description":"CVE-2020-15862 net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15862.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15861","severity":"important","public_date":"2020-07-31T00:00:00Z","advisories":[],"bugzilla":"1862469","bugzilla_description":"CVE-2020-15861 net-snmp: combination with can lead to elevated permissions to root","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15861.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-20892","severity":"moderate","public_date":"2020-01-02T00:00:00Z","advisories":["RHBA-2020:1376"],"bugzilla":"1851145","bugzilla_description":"CVE-2019-20892 net-snmp: double free in usm_free_usmStateReference function in snmplib/snmpusm.c via an SNMPv3 GetBulk request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["net-snmp-1:5.8-12.el8_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20892.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000116","severity":"moderate","public_date":"2018-03-07T00:00:00Z","advisories":["RHSA-2015:1636"],"bugzilla":"1552844","bugzilla_description":"CVE-2018-1000116 net-snmp: Heap corruption in snmp_pdu_parse function in snmplib/snmp_api.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["net-snmp-1:5.7.2-20.el7_1.1","net-snmp-1:5.5-54.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-18065","severity":"moderate","public_date":"2016-10-06T00:00:00Z","advisories":[],"bugzilla":"1637570","bugzilla_description":"CVE-2018-18065 net-snmp: NULL pointer exception in _set_key in agent/helpers/table_container.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18065.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-18066","severity":"moderate","public_date":"2015-10-06T00:00:00Z","advisories":["RHSA-2020:1081","RHSA-2020:2539"],"bugzilla":"1637572","bugzilla_description":"CVE-2018-18066 net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["net-snmp-1:5.7.2-47.el7","net-snmp-1:5.7.2-43.el7_7.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18066.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-5621","severity":"moderate","public_date":"2015-04-13T00:00:00Z","advisories":["RHSA-2015:1636"],"bugzilla":"1212408","bugzilla_description":"CVE-2015-5621 net-snmp: snmp_pdu_parse() incompletely parsed varBinds left in list of variables","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-772->CWE-672->CWE-665","affected_packages":["net-snmp-1:5.7.2-20.ael7b_1.1","net-snmp-1:5.5-54.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5621.json"},{"CVE":"CVE-2014-3565","severity":"moderate","public_date":"2014-08-31T00:00:00Z","advisories":["RHSA-2015:2345","RHSA-2015:1385"],"bugzilla":"1125155","bugzilla_description":"CVE-2014-3565 net-snmp: snmptrapd crash when handling an SNMP trap containing a ifMtu with a NULL type","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-843","affected_packages":["net-snmp-1:5.7.2-24.el7","net-snmp-1:5.5-54.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3565.json"},{"CVE":"CVE-2014-2310","severity":"moderate","public_date":"2014-03-06T00:00:00Z","advisories":[],"bugzilla":"1074631","bugzilla_description":"CVE-2014-2310 net-snmp: AgentX incorrectly handles multi-object requests leading to DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2310.json"},{"CVE":"CVE-2014-2285","severity":"moderate","public_date":"2014-03-03T00:00:00Z","advisories":["RHSA-2014:0322"],"bugzilla":"1072778","bugzilla_description":"CVE-2014-2285 net-snmp: snmptrapd crash when using a trap with empty community string","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["net-snmp-1:5.3.2.2-22.el5_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2285.json"},{"CVE":"CVE-2014-2284","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2014:0321"],"bugzilla":"1070396","bugzilla_description":"CVE-2014-2284 net-snmp: denial of service flaw in Linux implementation of ICMP-MIB","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["net-snmp-1:5.5-49.el6_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2284.json"},{"CVE":"CVE-2012-6151","severity":"moderate","public_date":"2012-09-05T00:00:00Z","advisories":["RHSA-2014:0322","RHBA-2013:1150"],"bugzilla":"1038007","bugzilla_description":"CVE-2012-6151 net-snmp: snmpd crashes/hangs when AgentX subagent times-out","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["net-snmp-1:5.5-44.el6_4.4","net-snmp-1:5.3.2.2-22.el5_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6151.json"},{"CVE":"CVE-2012-2141","severity":"moderate","public_date":"2012-04-24T00:00:00Z","advisories":["RHSA-2012:0876","RHSA-2013:0124"],"bugzilla":"815813","bugzilla_description":"CVE-2012-2141 net-snmp: Array index error, leading to out-of heap-based buffer read (snmpd crash)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["net-snmp-1:5.5-41.el6","net-snmp-1:5.3.2.2-20.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2141.json"},{"CVE":"CVE-2009-1887","severity":"moderate","public_date":"2009-06-25T00:00:00Z","advisories":["RHSA-2009:1124"],"bugzilla":"506903","bugzilla_description":"CVE-2009-1887 net-snmp: DoS (division by zero) via SNMP GetBulk requests","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["net-snmp-0:5.0.9-2.30E.28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1887.json"},{"CVE":"CVE-2008-6123","severity":"moderate","public_date":"2008-12-09T00:00:00Z","advisories":["RHSA-2009:0295"],"bugzilla":"485211","bugzilla_description":"CVE-2008-6123 net-snmp: incorrect application of hosts access restrictions in hosts.{allow,deny}","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["net-snmp-0:5.0.9-2.30E.27"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-6123.json"},{"CVE":"CVE-2008-4309","severity":"important","public_date":"2008-10-31T00:00:00Z","advisories":["RHSA-2008:0971"],"bugzilla":"469349","bugzilla_description":"CVE-2008-4309 net-snmp: numresponses calculation integer overflow in snmp_agent.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["net-snmp-0:5.0.9-2.30E.25","net-snmp-0:5.1.2-13.el4_7.2","net-snmp-1:5.3.1-24.el5_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4309.json"},{"CVE":"CVE-2008-0960","severity":"moderate","public_date":"2008-06-09T00:00:00Z","advisories":["RHSA-2008:0529","RHSA-2008:0528"],"bugzilla":"447974","bugzilla_description":"CVE-2008-0960 net-snmp SNMPv3 authentication bypass (VU#877044)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["net-snmp-1:5.3.1-24.el5_2.1","ucd-snmp-0:4.2.5-8.AS21.7","net-snmp-0:5.1.2-11.el4_6.11.3","net-snmp-0:5.0.9-2.30E.24"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0960.json"},{"CVE":"CVE-2008-2292","severity":"moderate","public_date":"2007-11-05T00:00:00Z","advisories":["RHSA-2008:0529"],"bugzilla":"447262","bugzilla_description":"CVE-2008-2292 net-snmp: buffer overflow in perl module's Perl Module __snprint_value()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["net-snmp-1:5.3.1-24.el5_2.1","net-snmp-0:5.1.2-11.el4_6.11.3","net-snmp-0:5.0.9-2.30E.24"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2292.json"},{"CVE":"CVE-2007-5846","severity":"important","public_date":"2007-05-04T00:00:00Z","advisories":["RHSA-2007:1045"],"bugzilla":"363631","bugzilla_description":"CVE-2007-5846 net-snmp remote DoS via udp packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["net-snmp-0:5.1.2-11.el4_6.11.1","net-snmp-0:5.0.9-2.30E.23","net-snmp-1:5.3.1-19.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5846.json"},{"CVE":"CVE-2005-2177","severity":"low","public_date":"2005-07-01T00:00:00Z","advisories":["RHSA-2005:720","RHSA-2005:373","RHSA-2005:395"],"bugzilla":"1617692","bugzilla_description":"CVE-2005-2177 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["net-snmp-0:5.0.9-2.30E.19","net-snmp-0:5.1.2-11.EL4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2177.json"},{"CVE":"CVE-2005-4837","severity":"moderate","public_date":"2005-05-23T00:00:00Z","advisories":["RHSA-2005:373","RHSA-2005:395"],"bugzilla":"1617865","bugzilla_description":"CVE-2005-4837 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["net-snmp-0:5.0.9-2.30E.19","net-snmp-0:5.1.2-11.EL4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4837.json"},{"CVE":"CVE-2005-1740","severity":"low","public_date":"2005-05-18T00:00:00Z","advisories":["RHSA-2005:373","RHSA-2005:395"],"bugzilla":"1617663","bugzilla_description":"CVE-2005-1740 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["net-snmp-0:5.0.9-2.30E.19","net-snmp-0:5.1.2-11.EL4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1740.json"},{"CVE":"CVE-2003-0935","severity":"moderate","public_date":"2003-09-06T00:00:00Z","advisories":["RHSA-2004:023","RHSA-2003:335"],"bugzilla":"1617103","bugzilla_description":"CVE-2003-0935 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["net-snmp-0:5.0.9-2.30E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0935.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/net-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netcf-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netcf-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netcf-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netlabel_tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netlabel_tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netlabel_tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netpbm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netpbm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netpbm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netpbm-progs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netpbm-progs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netpbm-progs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netpbm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netpbm_security_api_results.json
new file mode 100644
index 0000000..c95651a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netpbm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-20622","severity":"low","public_date":"2018-12-31T00:00:00Z","advisories":[],"bugzilla":"1664872","bugzilla_description":"CVE-2018-20622 jasper: memory leak in jpc_dec_decodepkt()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20622.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20584","severity":"low","public_date":"2018-12-29T00:00:00Z","advisories":[],"bugzilla":"1664864","bugzilla_description":"CVE-2018-20584 jasper: DoS / hang when converting to jp2 format","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20584.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20570","severity":"low","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1664878","bugzilla_description":"CVE-2018-20570 jasper: heap-based buffer over-read in jp2_encode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20570.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-19139","severity":"low","public_date":"2018-11-09T00:00:00Z","advisories":[],"bugzilla":"1649110","bugzilla_description":"CVE-2018-19139 jasper: memory leak of data allocated in jpc_unk_getparms() after abort in jpc_dec_process_sot()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18873","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":[],"bugzilla":"1646647","bugzilla_description":"CVE-2018-18873 jasper: NULL pointer dereference in ras_putdatastd() in ras_enc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18873.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-19539","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1658773","bugzilla_description":"CVE-2018-19539 jasper: access violation in jas_image_readcmpt in libjasper/base/jas_image.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19539.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19540","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1658781","bugzilla_description":"CVE-2018-19540 jasper: heap-based buffer overflow of size 1 in jas_icctxtdesc_input in libjasper/base/jas_icc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19540.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19541","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1658786","bugzilla_description":"CVE-2018-19541 jasper: heap-based buffer over-read of size 8 in jas_image_depalettize in libjasper/base/jas_image.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19541.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-19542","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1658791","bugzilla_description":"CVE-2018-19542 jasper: invalid access in  jp2_decode in libjasper/jp2/jp2_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19542.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19543","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1658795","bugzilla_description":"CVE-2018-19543 jasper: heap-based buffer over-read of size 8 in jp2_decode in libjasper/jp2/jp2_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9154","severity":null,"public_date":"2018-05-04T00:00:00Z","advisories":[],"bugzilla":"1610135","bugzilla_description":"CVE-2018-9154 jasper: reachable abort in jpc_dec_process_sot()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9154.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9252","severity":"low","public_date":"2018-04-02T00:00:00Z","advisories":[],"bugzilla":"1565333","bugzilla_description":"CVE-2018-9252 jasper: reachable assertion in jpc_abstorelstepsize() in jpc_enc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9252.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9055","severity":"low","public_date":"2018-03-26T00:00:00Z","advisories":[],"bugzilla":"1561699","bugzilla_description":"CVE-2018-9055 jasper: reachable assertion in jpc_firstone() in jpc_math.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9055.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8975","severity":"low","public_date":"2018-03-15T00:00:00Z","advisories":[],"bugzilla":"1561206","bugzilla_description":"CVE-2018-8975 netpbm: heap-buffer-overflow in pm_mallocarray2 function in lib/util/mallocvar.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8975.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-14229","severity":"moderate","public_date":"2017-09-11T00:00:00Z","advisories":[],"bugzilla":"1491853","bugzilla_description":"CVE-2017-14229 jasper: excessive looping in jpc_dec_tileinit()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14229.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14132","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":[],"bugzilla":"1489304","bugzilla_description":"CVE-2017-14132 jasper: heap-based buffer over-read in jas_image_ishomosamp()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13745","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488958","bugzilla_description":"CVE-2017-13745 jasper: reachable abort in jpc_dec_process_sot()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13745.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13746","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488959","bugzilla_description":"CVE-2017-13746 jasper: reachable assertion in jpc_dec_process_siz() - dec->numvtiles","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13746.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13747","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488960","bugzilla_description":"CVE-2017-13747 jasper: reachable assertion in jpc_floorlog2()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13747.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13748","severity":"moderate","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488961","bugzilla_description":"CVE-2017-13748 jasper: tile memory not released on image parsing errors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13748.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13749","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488962","bugzilla_description":"CVE-2017-13749 jasper: reachable assertion in jpc_pi_nextrpcl()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13749.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13750","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488963","bugzilla_description":"CVE-2017-13750 jasper: reachable assertion in jpc_dec_process_siz() - dec->numhtiles","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13750.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13751","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488964","bugzilla_description":"CVE-2017-13751 jasper: reachable assertion in calcstepsizes()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13751.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13752","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488965","bugzilla_description":"CVE-2017-13752 jasper: reachable assertion in jpc_dequantize()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13752.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9782","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1463993","bugzilla_description":"CVE-2017-9782 jasper: cdef.ents[] heap-based buffer over-read in jp2_decode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9782.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000050","severity":"low","public_date":"2017-03-05T00:00:00Z","advisories":["RHSA-2018:3253"],"bugzilla":"1472888","bugzilla_description":"CVE-2017-1000050 jasper: NULL pointer exception in jp2_encode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000050.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-2586","severity":"low","public_date":"2017-02-06T00:00:00Z","advisories":[],"bugzilla":"1419539","bugzilla_description":"CVE-2017-2586 netpbm: Null pointer dereference in stringToUint function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2586.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-2587","severity":"low","public_date":"2017-02-06T00:00:00Z","advisories":[],"bugzilla":"1419542","bugzilla_description":"CVE-2017-2587 netpbm: Insufficient size check of memory allocation in createCanvas() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2587.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-2579","severity":"low","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1411404","bugzilla_description":"CVE-2017-2579 netpbm: Out-of-bounds read in expandCodeOntoStack()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2579.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-2580","severity":"moderate","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1411408","bugzilla_description":"CVE-2017-2580 netpbm: Out-of-bounds write of heap data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2580.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-2581","severity":"moderate","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1411409","bugzilla_description":"CVE-2017-2581 netpbm: Out-of-bounds write in writeRasterPbm() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2581.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-5849","severity":"low","public_date":"2017-01-31T00:00:00Z","advisories":[],"bugzilla":"1419650","bugzilla_description":"CVE-2017-5849 netpbm: Calls TIFFRGBA with width and height parameters switched","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5849.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-6850","severity":"moderate","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1434458","bugzilla_description":"CVE-2017-6850 jasper: uninitialized pointer use in jp2_cdef_destroy()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6850.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-6852","severity":"moderate","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1434459","bugzilla_description":"CVE-2017-6852 jasper: Out of bounds heap read in jpc_dec_decodepkt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6852.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-6851","severity":"low","public_date":"2017-01-21T00:00:00Z","advisories":[],"bugzilla":"1435324","bugzilla_description":"CVE-2017-6851 jasper: Invalid memory read in jas_matrix_bindsub (jas_seq.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6851.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9600","severity":"low","public_date":"2016-12-29T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1410026","bugzilla_description":"CVE-2016-9600 jasper: JP2 encoder NULL pointer dereference due to uninitialized cmprof_","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9600.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-9591","severity":"low","public_date":"2016-12-16T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1406405","bugzilla_description":"CVE-2016-9591 jasper: use-after-free / double-free in JPC encoder","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9591.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9583","severity":"low","public_date":"2016-12-09T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1405148","bugzilla_description":"CVE-2016-9583 jasper: integer overflows leading to out of bounds read in packet iterators in JPC decoder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9583.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8654","severity":"important","public_date":"2016-11-25T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1399167","bugzilla_description":"CVE-2016-8654 jasper: heap-based buffer overflow in QMFB code in JPC codec","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8654.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9560","severity":"important","public_date":"2016-11-20T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1398256","bugzilla_description":"CVE-2016-9560 jasper: stack-based buffer overflow in jpc_dec_tileinit()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9560.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-5503","severity":"moderate","public_date":"2016-11-20T00:00:00Z","advisories":[],"bugzilla":"1416056","bugzilla_description":"CVE-2017-5503 jasper: invalid memory write in dec_clnpass()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5503.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5505","severity":"moderate","public_date":"2016-11-20T00:00:00Z","advisories":[],"bugzilla":"1416068","bugzilla_description":"CVE-2017-5505 jasper: Invalid memory read in jas_matrix_asl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5505.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5504","severity":"moderate","public_date":"2016-11-20T00:00:00Z","advisories":[],"bugzilla":"1416069","bugzilla_description":"CVE-2017-5504 jasper: Invalid memory read in jpc_undo_roi","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5504.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-9396","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2018:3253"],"bugzilla":"1396978","bugzilla_description":"CVE-2016-9396 jasper: reachable assertion in JPC_NOMINALGAIN()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9396.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9397","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396979","bugzilla_description":"CVE-2016-9397 jasper: reachable assertion in jpc_dequantize()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9397.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9398","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396980","bugzilla_description":"CVE-2016-9398 jasper: reachable assertion in jpc_floorlog2()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9398.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9399","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396981","bugzilla_description":"CVE-2016-9399 jasper: reachable assertion in calcstepsizes()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9395","severity":"low","public_date":"2016-11-12T00:00:00Z","advisories":[],"bugzilla":"1396977","bugzilla_description":"CVE-2016-9395 jasper: reachable assertion failure in jas_seq2d_create()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9395.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9557","severity":"low","public_date":"2016-11-12T00:00:00Z","advisories":[],"bugzilla":"1398251","bugzilla_description":"CVE-2016-9557 jasper: signed integer overflow in jas_image_create()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9557.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9262","severity":"moderate","public_date":"2016-11-06T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1393882","bugzilla_description":"CVE-2016-9262 jasper: integer truncation in jas_image_cmpt_create()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9262.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10251","severity":"low","public_date":"2016-11-04T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1434461","bugzilla_description":"CVE-2016-10251 jasper: integer overflow in jpc_pi_nextcprl(), leading to out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10251.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9392","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396971","bugzilla_description":"CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 jasper: insufficient SIZ marker segment data sanity checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9392.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9393","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396971","bugzilla_description":"CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 jasper: insufficient SIZ marker segment data sanity checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9393.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9394","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396971","bugzilla_description":"CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 jasper: insufficient SIZ marker segment data sanity checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9394.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5498","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416060","bugzilla_description":"CVE-2017-5498 jasper: Left shift of negative value in jas_fast32_asl() in jas_math.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5498.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5499","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416061","bugzilla_description":"CVE-2017-5499 jasper: Signed integer overflow in jpc_dequantize() in jpc_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5499.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5500","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416063","bugzilla_description":"CVE-2017-5500 jasper: Invalid exponent shift in jpc_calcabsstepsize() in jpc_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5500.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5501","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416064","bugzilla_description":"CVE-2017-5501 jasper: Signed integer overflow in jpc_tsfb_getbands2() in jpc_tsfb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5501.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5502","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416066","bugzilla_description":"CVE-2017-5502 jasper: Left shift of negative value in jp2_validate() in jp2_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5502.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9391","severity":"low","public_date":"2016-10-25T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396967","bugzilla_description":"CVE-2016-9391 jasper: reachable assertions in the JPC bitstream code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9391.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9388","severity":"low","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396962","bugzilla_description":"CVE-2016-9388 jasper: reachable assertions in RAS encoder/decoder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9388.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9389","severity":"low","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396963","bugzilla_description":"CVE-2016-9389 jasper: reachable assertions caused by insufficient component domains checks in ICT/RCT in JPC codec","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9389.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9390","severity":"low","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396965","bugzilla_description":"CVE-2016-9390 jasper: insufficient SIZ marker tilexoff and tileyoff checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9390.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10249","severity":"important","public_date":"2016-10-23T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1388840","bugzilla_description":"CVE-2016-10249 jasper: integer overflow in jas_matrix_create()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10249.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9387","severity":"low","public_date":"2016-10-23T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396959","bugzilla_description":"CVE-2016-9387 jasper: integer overflow in jpc_dec_process_siz()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-190","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9387.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2016-10248","severity":"low","public_date":"2016-10-20T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1434447","bugzilla_description":"CVE-2016-10248 jasper: NULL pointer dereference in jpc_tsfb_synthesize()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10248.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8887","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1388828","bugzilla_description":"CVE-2016-8887 jasper: uninitialized pointer use in jp2_box_get()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8887.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10250","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1388829","bugzilla_description":"CVE-2016-10250 jasper: Null pointer dereference in jp2_colr_destroy (incomplete fix for CVE-2016-8887)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10250.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8886","severity":"low","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1388880","bugzilla_description":"CVE-2016-8886 jasper: no upper limit on memory allocations in jas_malloc()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8886.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8880","severity":null,"public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1388863","bugzilla_description":"CVE-2016-8880 jasper: heap buffer overflow in jpc_dec_cp_setfromcox() (rejected duplicate of CVE-2011-4516)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8880.json"},{"CVE":"CVE-2016-8881","severity":null,"public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1388864","bugzilla_description":"CVE-2016-8881 jasper: insufficient memory allocation in jpc_crg_getparms() (rejected duplicate of CVE-2011-4517)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8881.json"},{"CVE":"CVE-2016-8882","severity":"moderate","public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1388866","bugzilla_description":"CVE-2016-8882 jasper: uninitialized tile->pi pointer use in JPC decoder","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8883","severity":"low","public_date":"2016-10-17T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1388870","bugzilla_description":"CVE-2016-8883 jasper: reachable asserts in jpc_dec_tiledecode()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8883.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8690","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385499","bugzilla_description":"CVE-2016-8690 CVE-2016-8884 CVE-2016-8885 jasper: missing jas_matrix_create() parameter checks","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8690.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8884","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385499","bugzilla_description":"CVE-2016-8690 CVE-2016-8884 CVE-2016-8885 jasper: missing jas_matrix_create() parameter checks","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8884.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8885","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385499","bugzilla_description":"CVE-2016-8690 CVE-2016-8884 CVE-2016-8885 jasper: missing jas_matrix_create() parameter checks","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8691","severity":"low","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385502","bugzilla_description":"CVE-2016-8691 CVE-2016-8692 jasper: missing SIZ marker segment XRsiz and YRsiz fields range check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-369","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8691.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8692","severity":"low","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385502","bugzilla_description":"CVE-2016-8691 CVE-2016-8692 jasper: missing SIZ marker segment XRsiz and YRsiz fields range check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-369","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8692.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8693","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385507","bugzilla_description":"CVE-2016-8693 jasper: incorrect handling of bufsize 0 in mem_resize()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8693.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-1577","severity":"moderate","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1314466","bugzilla_description":"CVE-2016-1577 jasper: double free issue in jas_iccattrval_destroy()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1577.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-2116","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1314472","bugzilla_description":"CVE-2016-2116 jasper: memory leak in jas_iccprof_createfrombuf()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2116.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-2089","severity":"low","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1302636","bugzilla_description":"CVE-2016-2089 jasper: matrix rows_ NULL pointer dereference in jas_matrix_clip()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2089.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2015-8751","severity":"moderate","public_date":"2015-12-24T00:00:00Z","advisories":[],"bugzilla":"1296949","bugzilla_description":"CVE-2015-8751 jasper: integer overflow in the jas_matrix_create() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8751.json"},{"CVE":"CVE-2015-5221","severity":"moderate","public_date":"2015-08-20T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1255710","bugzilla_description":"CVE-2015-5221 jasper: use-after-free and double-free flaws in mif_process_cmpt()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5221.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-5203","severity":"moderate","public_date":"2015-08-16T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1254242","bugzilla_description":"CVE-2015-5203 jasper: integer overflow in jas_image_cmpt_create()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5203.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-3885","severity":"low","public_date":"2015-05-11T00:00:00Z","advisories":[],"bugzilla":"1221249","bugzilla_description":"CVE-2015-3885 dcraw: input sanitization flaw leading to buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-190->CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3885.json"},{"CVE":"CVE-2014-8157","severity":"important","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0698","RHSA-2015:0074"],"bugzilla":"1179282","bugzilla_description":"CVE-2014-8157 jasper: dec->numtiles off-by-one check in jpc_dec_process_sot() (oCERT-2015-001)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-122","affected_packages":["spice-client-msi-0:3.5-3","jasper-0:1.900.1-16.el6_6.3","jasper-0:1.900.1-26.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8157.json"},{"CVE":"CVE-2014-8158","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0698","RHSA-2015:0074"],"bugzilla":"1179298","bugzilla_description":"CVE-2014-8158 jasper: unrestricted stack memory use in jpc_qmfb.c (oCERT-2015-001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-770","affected_packages":["spice-client-msi-0:3.5-3","jasper-0:1.900.1-16.el6_6.3","jasper-0:1.900.1-26.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8158.json"},{"CVE":"CVE-2014-8137","severity":"low","public_date":"2014-12-18T00:00:00Z","advisories":["RHSA-2015:0698","RHSA-2015:1713","RHSA-2014:2021"],"bugzilla":"1173157","bugzilla_description":"CVE-2014-8137 jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rhev-hypervisor7-0:7.1-20150827.1.el7ev","spice-client-msi-0:3.5-3","jasper-0:1.900.1-16.el6_6.2","jasper-0:1.900.1-26.el7_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8137.json"},{"CVE":"CVE-2014-8138","severity":"important","public_date":"2014-12-18T00:00:00Z","advisories":["RHSA-2015:0698","RHSA-2015:1713","RHSA-2014:2021"],"bugzilla":"1173162","bugzilla_description":"CVE-2014-8138 jasper: heap overflow in jp2_decode() (oCERT-2014-012)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rhev-hypervisor7-0:7.1-20150827.1.el7ev","spice-client-msi-0:3.5-3","jasper-0:1.900.1-16.el6_6.2","jasper-0:1.900.1-26.el7_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8138.json"},{"CVE":"CVE-2014-9029","severity":"important","public_date":"2014-12-04T00:00:00Z","advisories":["RHSA-2015:0698","RHSA-2014:2021"],"bugzilla":"1167537","bugzilla_description":"CVE-2014-9029 jasper: incorrect component number check in COC, RGN and QCC marker segment decoders (oCERT-2014-009)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-122","affected_packages":["spice-client-msi-0:3.5-3","jasper-0:1.900.1-16.el6_6.2","jasper-0:1.900.1-26.el7_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9029.json"},{"CVE":"CVE-2011-4516","severity":"important","public_date":"2011-12-08T00:00:00Z","advisories":["RHSA-2011:1807","RHSA-2015:0698","RHSA-2011:1811"],"bugzilla":"747726","bugzilla_description":"CVE-2011-4516 CVE-2011-4517 jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["netpbm-0:10.35.58-8.el4","jasper-0:1.900.1-15.el6_1.1","spice-client-msi-0:3.5-3","netpbm-0:10.35.58-8.el5_7.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4516.json"},{"CVE":"CVE-2011-4517","severity":"important","public_date":"2011-12-08T00:00:00Z","advisories":["RHSA-2011:1807","RHSA-2015:0698","RHSA-2011:1811"],"bugzilla":"747726","bugzilla_description":"CVE-2011-4516 CVE-2011-4517 jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["netpbm-0:10.35.58-8.el4","jasper-0:1.900.1-15.el6_1.1","spice-client-msi-0:3.5-3","netpbm-0:10.35.58-8.el5_7.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4517.json"},{"CVE":"CVE-2009-4274","severity":"moderate","public_date":"2010-02-09T00:00:00Z","advisories":["RHSA-2011:1811"],"bugzilla":"546580","bugzilla_description":"CVE-2009-4274 netpbm: Stack-based buffer overflow by processing X PixMap image header fields","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["netpbm-0:10.35.58-8.el4","netpbm-0:10.35.58-8.el5_7.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4274.json"},{"CVE":"CVE-2008-3520","severity":"moderate","public_date":"2008-09-08T00:00:00Z","advisories":["RHSA-2015:0698","RHSA-2009:0012"],"bugzilla":"461476","bugzilla_description":"CVE-2008-3520 jasper: multiple integer overflows in jas_alloc calls","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["netpbm-0:10.25-2.1.el4_7.4","spice-client-msi-0:3.5-3","netpbm-0:10.35-6.1.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3520.json"},{"CVE":"CVE-2008-0554","severity":"moderate","public_date":"2008-02-01T00:00:00Z","advisories":["RHSA-2008:0131"],"bugzilla":"431525","bugzilla_description":"CVE-2008-0554 netpbm: GIF handling buffer overflow in giftopnm","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["netpbm-0:10.25-2.EL4.6.el4_6.1","netpbm-0:9.24-9.AS21.7","netpbm-0:9.24-11.30.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0554.json"},{"CVE":"CVE-2007-2721","severity":"moderate","public_date":"2007-03-01T00:00:00Z","advisories":["RHSA-2009:0012"],"bugzilla":"346501","bugzilla_description":"CVE-2007-2721 jasper: crash in jpc_qcx_getcompparms","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["netpbm-0:10.25-2.1.el4_7.4","netpbm-0:10.35-6.1.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2721.json"},{"CVE":"CVE-2005-3632","severity":"moderate","public_date":"2005-11-12T00:00:00Z","advisories":["RHSA-2005:843"],"bugzilla":"1617833","bugzilla_description":"CVE-2005-3632 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["netpbm-0:9.24-11.30.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3632.json"},{"CVE":"CVE-2005-3662","severity":"moderate","public_date":"2005-11-12T00:00:00Z","advisories":["RHSA-2005:843"],"bugzilla":"1617836","bugzilla_description":"CVE-2005-3662 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["netpbm-0:9.24-11.30.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3662.json"},{"CVE":"CVE-2005-2978","severity":"moderate","public_date":"2005-10-18T00:00:00Z","advisories":["RHSA-2005:793"],"bugzilla":"1617774","bugzilla_description":"CVE-2005-2978 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["netpbm-0:10.25-2.EL4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2978.json"},{"CVE":"CVE-2005-2471","severity":"low","public_date":"2005-07-24T00:00:00Z","advisories":["RHSA-2005:743"],"bugzilla":"1617722","bugzilla_description":"CVE-2005-2471 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["netpbm-0:10.25-2.EL4.1","netpbm-0:9.24-11.30.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2471.json"},{"CVE":"CVE-2003-0924","severity":"moderate","public_date":"2004-01-18T00:00:00Z","advisories":["RHSA-2004:030","RHSA-2004:031"],"bugzilla":"1617099","bugzilla_description":"CVE-2003-0924 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["netpbm-0:9.24-11.30.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0924.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netsniff-ng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netsniff-ng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/netsniff-ng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nettle-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nettle-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nettle-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nettle_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nettle_security_api_results.json
new file mode 100644
index 0000000..e1732a4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nettle_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-16869","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1654930","bugzilla_description":"CVE-2018-16869 nettle: Leaky data conversion exposing a manager oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16869.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2016-6489","severity":"moderate","public_date":"2016-06-20T00:00:00Z","advisories":["RHSA-2016:2582"],"bugzilla":"1362016","bugzilla_description":"CVE-2016-6489 nettle: RSA/DSA code is vulnerable to cache-timing related attacks","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["nettle-0:2.7.1-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2015-8803","severity":"moderate","public_date":"2016-02-02T00:00:00Z","advisories":["RHSA-2016:2582"],"bugzilla":"1304303","bugzilla_description":"CVE-2015-8803 nettle: secp256 calculation bug","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-358","affected_packages":["nettle-0:2.7.1-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8803.json"},{"CVE":"CVE-2015-8804","severity":"moderate","public_date":"2016-02-02T00:00:00Z","advisories":["RHSA-2016:2582"],"bugzilla":"1304379","bugzilla_description":"CVE-2015-8804 nettle: miscalculations on secp384 curve","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-358","affected_packages":["nettle-0:2.7.1-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8804.json"},{"CVE":"CVE-2015-8805","severity":"moderate","public_date":"2016-02-02T00:00:00Z","advisories":["RHSA-2016:2582"],"bugzilla":"1304382","bugzilla_description":"CVE-2015-8805 nettle: secp256 calculation bug","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-358","affected_packages":["nettle-0:2.7.1-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8805.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/newt-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/newt-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/newt-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/newt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/newt_security_api_results.json
new file mode 100644
index 0000000..351dfcf
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/newt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2009-2905","severity":"moderate","public_date":"2009-09-24T00:00:00Z","advisories":["RHSA-2009:1463"],"bugzilla":"523955","bugzilla_description":"CVE-2009-2905 newt: heap-overflow in textbox when text reflowing","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["newt-0:0.51.6-10.el4_8.1","newt-0:0.52.2-12.el5_4.1","newt-0:0.51.5-2.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2905.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfs-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfs-utils_security_api_results.json
new file mode 100644
index 0000000..5ed33ab
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfs-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-3689","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1850194","bugzilla_description":"CVE-2019-3689 nfs-utils: root-owned files stored in insecure /var/lib/nfs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3689.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-10197","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418612","bugzilla_description":"CVE-2016-10197 libevent: Out-of-bounds read in search_make_new()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10195","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418608","bugzilla_description":"CVE-2016-10195 libevent: Stack-buffer overflow in the name_parse() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10196","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418611","bugzilla_description":"CVE-2016-10196 libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-6525","severity":"moderate","public_date":"2015-08-24T00:00:00Z","advisories":[],"bugzilla":"1256797","bugzilla_description":"CVE-2015-6525 libevent: multiple integer overflows in the evbuffer APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6525.json"},{"CVE":"CVE-2014-6272","severity":"moderate","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1144646","bugzilla_description":"CVE-2014-6272 libevent: potential heap overflow in buffer/bufferevent APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6272.json"},{"CVE":"CVE-2013-1923","severity":"low","public_date":"2013-04-02T00:00:00Z","advisories":[],"bugzilla":"948072","bugzilla_description":"CVE-2013-1923 nfs-utils: rpc.gssd is vulnerable to DNS spoofing","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1923.json"},{"CVE":"CVE-2011-2500","severity":"low","public_date":"2011-06-22T00:00:00Z","advisories":["RHSA-2011:1534"],"bugzilla":"716949","bugzilla_description":"CVE-2011-2500 nfs-utils: Improper authentication of an incoming request when an IP based authentication used","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["nfs-utils-1:1.2.3-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2500.json"},{"CVE":"CVE-2011-1749","severity":"low","public_date":"2011-04-19T00:00:00Z","advisories":["RHSA-2011:1534","RHSA-2012:0310"],"bugzilla":"697975","bugzilla_description":"CVE-2011-1749 nfs-utils: mount.nfs fails to anticipate RLIMIT_FSIZE","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["nfs-utils-1:1.2.3-15.el6","nfs-utils-1:1.0.9-60.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1749.json"},{"CVE":"CVE-2008-4552","severity":"low","public_date":"2008-08-05T00:00:00Z","advisories":["RHSA-2009:1321"],"bugzilla":"458676","bugzilla_description":"CVE-2008-4552 nfs-utils: incorrect use of tcp_wrappers, causing hostname-based rules to be ignored","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["nfs-utils-1:1.0.9-42.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4552.json"},{"CVE":"CVE-2008-1376","severity":"moderate","public_date":"2008-07-31T00:00:00Z","advisories":["RHSA-2008:0486","RHSA-2009:0955"],"bugzilla":"440114","bugzilla_description":"CVE-2008-1376 nfs-utils: missing tcp_wrappers support","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nfs-utils-0:1.0.6-93.EL4","nfs-utils-1:1.0.9-35z.el5_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1376.json"},{"CVE":"CVE-2007-3999","severity":"important","public_date":"2007-09-04T19:00:00Z","advisories":["RHSA-2007:0951","RHSA-2007:0913","RHSA-2007:0858"],"bugzilla":"250973","bugzilla_description":"CVE-2007-3999 krb5 RPC library buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["krb5-0:1.5-29","nfs-utils-lib-0:1.0.6-8.z1","nfs-utils-lib-0:1.0.8-7.2.z2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3999.json"},{"CVE":"CVE-2007-4135","severity":"moderate","public_date":"2007-08-31T00:00:00Z","advisories":["RHSA-2007:0951"],"bugzilla":"254040","bugzilla_description":"CVE-2007-4135 nfs-utils-lib NFSv4 user id mapping flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nfs-utils-lib-0:1.0.8-7.2.z2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4135.json"},{"CVE":"CVE-2004-1014","severity":"important","public_date":"2004-12-01T00:00:00Z","advisories":["RHSA-2005:014","RHSA-2004:583"],"bugzilla":"1617349","bugzilla_description":"CVE-2004-1014 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nfs-utils-0:1.0.6-33EL"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1014.json"},{"CVE":"CVE-2004-0946","severity":null,"public_date":"2004-11-22T00:00:00Z","advisories":["RHSA-2005:014","RHSA-2004:583"],"bugzilla":"1617327","bugzilla_description":"CVE-2004-0946 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nfs-utils-0:1.0.6-33EL"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0946.json"},{"CVE":"CVE-2004-0154","severity":"low","public_date":"2003-09-09T00:00:00Z","advisories":["RHSA-2004:072"],"bugzilla":"1617162","bugzilla_description":"CVE-2004-0154 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nfs-utils-0:1.0.6-7.EL"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0154.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfs4-acl-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfs4-acl-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfs4-acl-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfsometer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfsometer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfsometer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfstest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfstest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nfstest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nftables_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nftables_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nftables_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-brush-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-brush-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-brush-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-gothic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-gothic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-gothic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-myeongjo-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-myeongjo-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-myeongjo-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-pen-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-pen-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nhn-nanum-pen-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nm-connection-editor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nm-connection-editor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nm-connection-editor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nmap-ncat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nmap-ncat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nmap-ncat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nmap_security_api_results.json
new file mode 100644
index 0000000..7af8f88
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nmap_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-18594","severity":"low","public_date":"2019-08-10T00:00:00Z","advisories":[],"bugzilla":"1749181","bugzilla_description":"CVE-2017-18594 nmap: denial of service condition due to a double free when SSH connection fails","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18594.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-15173","severity":"low","public_date":"2018-07-29T00:00:00Z","advisories":[],"bugzilla":"1615862","bugzilla_description":"CVE-2018-15173 nmap: Stack exhausation when -sV option is used allows for DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15173.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000161","severity":"moderate","public_date":"2018-03-20T00:00:00Z","advisories":[],"bugzilla":"1560005","bugzilla_description":"CVE-2018-1000161 nmap: directory traversal in the way the non-default http-fetch script sanitized URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2013-4885","severity":"low","public_date":"2013-08-07T00:00:00Z","advisories":[],"bugzilla":"995634","bugzilla_description":"CVE-2013-4885 nmap: arbitrary file upload flaw in http-domino-enum-passwords NSE script","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4885.json"},{"CVE":"CVE-2005-1751","severity":"low","public_date":"2005-05-24T00:00:00Z","advisories":["RHSA-2005:564"],"bugzilla":"158995","bugzilla_description":"CVE-2005-1751 shtool: insecure temporary file creation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["php-0:4.3.2-24.ent","php-0:4.3.9-3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1751.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nscd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nscd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nscd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nspr-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nspr-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nspr-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nspr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nspr_security_api_results.json
new file mode 100644
index 0000000..92ac791
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nspr_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-1951","severity":"moderate","public_date":"2016-05-31T00:00:00Z","advisories":[],"bugzilla":"1311126","bugzilla_description":"CVE-2016-1951 nspr: Memory allocation issue related to PR_*printf functions","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1951.json"},{"CVE":"CVE-2015-7183","severity":"critical","public_date":"2015-11-03T00:00:00Z","advisories":["RHSA-2015:1980","RHSA-2015:2068","RHSA-2015:1981"],"bugzilla":"1269353","bugzilla_description":"CVE-2015-7183 nspr: heap-buffer overflow in PL_ARENA_ALLOCATE (MFSA 2015-133)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["nspr-0:4.10.8-2.el7_1","nspr-0:4.10.8-2.el5_11","nspr-0:4.10.8-2.el6_6","nss-0:3.14.3-9.el6_4","nss-0:3.16.1-9.el6_5","nspr-0:4.8.9-6.el6_2","nspr-0:4.10.6-2.el6_5","nss-0:3.13.1-12.el6_2","nss-0:3.19.1-7.ael7b_1.2","nss-0:3.19.1-5.el6_7","nspr-0:4.9.5-5.el6_4","nspr-0:4.10.8-2.el6_7","nss-0:3.19.1-4.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7183.json"},{"CVE":"CVE-2014-1545","severity":"moderate","public_date":"2014-06-10T00:00:00Z","advisories":["RHSA-2014:1246","RHBA-2015:0364","RHSA-2014:0917"],"bugzilla":"1107432","bugzilla_description":"CVE-2014-1545 Mozilla: Out of bounds write in NSPR (MFSA 2014-55)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["nspr-0:4.10.6-1.el6_5","nspr-0:4.10.6-3.el7","nss-0:3.16.1-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1545.json"},{"CVE":"CVE-2013-5607","severity":"moderate","public_date":"2013-11-19T00:00:00Z","advisories":["RHSA-2013:1791","RHSA-2013:1829"],"bugzilla":"1031461","bugzilla_description":"CVE-2013-5607 nspr: Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["nspr-0:4.10.2-2.el5_10","nspr-0:4.10.2-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5607.json"},{"CVE":"CVE-2006-4842","severity":"important","public_date":"2006-09-05T00:00:00Z","advisories":[],"bugzilla":"1253692","bugzilla_description":"CVE-2006-4842 nspr: setuid root programs linked with NSPR allow elevation of privilege","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4842.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-pam-ldapd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-pam-ldapd_security_api_results.json
new file mode 100644
index 0000000..8312fe6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-pam-ldapd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-0288","severity":"important","public_date":"2013-02-18T00:00:00Z","advisories":["RHSA-2013:0590"],"bugzilla":"909119","bugzilla_description":"CVE-2013-0288 nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["nss-pam-ldapd-0:0.7.5-18.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0288.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-pem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-pem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-pem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn-freebl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn-freebl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn-freebl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn-freebl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn-freebl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn-freebl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn_security_api_results.json
new file mode 100644
index 0000000..9e21950
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-softokn_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11745","severity":"important","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:0243","RHSA-2019:4190","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:4114","RHSA-2020:1461","RHSA-2019:4152","RHSA-2020:0466"],"bugzilla":"1774831","bugzilla_description":"CVE-2019-11745 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["nss-0:3.44.0-8.el8_0","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-7.el7_7","nss-softokn-0:3.14.3-23.el6_6","nss-0:3.44.0-9.el8_1","nss-softokn-0:3.44.0-6.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11729","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:4190","RHSA-2019:1951"],"bugzilla":"1728437","bugzilla_description":"CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["nss-0:3.44.0-7.el7_7","nss-util-0:3.44.0-4.el7_7","nss-0:3.44.0-7.el8_0","nss-softokn-0:3.44.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11729.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2017-7781","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479197","bugzilla_description":"CVE-2017-7781 Mozilla: Elliptic curve point addition error when using mixed Jacobian-affine coordinates (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-681","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7781.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-1938","severity":"low","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1305159","bugzilla_description":"CVE-2016-1938 Mozilla NSS: Errors in mp_div and mp_exptmod cryptographic functions","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1938.json"},{"CVE":"CVE-2015-2613","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1242456","bugzilla_description":"CVE-2015-2613 NSS / JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2613.json"},{"CVE":"CVE-2015-2730","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1664","RHSA-2015:1699"],"bugzilla":"1236954","bugzilla_description":"CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-347","affected_packages":["nss-0:3.19.1-1.el5_11","nss-softokn-0:3.16.2.3-13.el7_1","nss-softokn-0:3.14.3-23.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2730.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-sysinit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-sysinit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-sysinit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-util-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-util-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-util-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-util_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-util_security_api_results.json
new file mode 100644
index 0000000..0aaa72b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss-util_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11729","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:4190","RHSA-2019:1951"],"bugzilla":"1728437","bugzilla_description":"CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["nss-0:3.44.0-7.el7_7","nss-util-0:3.44.0-4.el7_7","nss-0:3.44.0-7.el8_0","nss-softokn-0:3.44.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11729.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5461","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1101","RHSA-2017:1100","RHSA-2017:1103","RHSA-2017:1102"],"bugzilla":"1440080","bugzilla_description":"CVE-2017-5461 nss: Write beyond bounds caused by bugs in Base64 de/encoding in nssb64d.c and nssb64e.c (MFSA 2017-10)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nss-0:3.21.4-1.el5_11","nss-util-0:3.16.1-5.el6_5","nss-util-0:3.13.1-11.el6_2","nss-util-0:3.21.4-1.el6_7","nss-0:3.28.4-1.el6_9","nss-util-0:3.19.1-4.el6_6","nss-util-0:3.21.4-1.el7_2","nss-util-0:3.14.3-9.el6_4","nss-0:3.14.3-11.el5_9","nss-0:3.28.4-1.0.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5461.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-1950","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0495","RHSA-2016:0370","RHSA-2016:0371"],"bugzilla":"1310509","bugzilla_description":"CVE-2016-1950 nss: Heap buffer overflow vulnerability in ASN1 certificate parsing (MFSA 2016-35)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-util-0:3.19.1-3.el6_6","nss-util-0:3.19.1-5.el7_1","nss-util-0:3.14.3-8.el6_4","nss-util-0:3.19.1-9.el7_2","nss-util-0:3.16.1-4.el6_5","nss-0:3.19.1-4.el5_11","nss-util-0:3.19.1-5.el6_7","nss-util-0:3.13.1-10.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1950.json"},{"CVE":"CVE-2015-7181","severity":"critical","public_date":"2015-11-03T00:00:00Z","advisories":["RHSA-2015:1980","RHSA-2015:2068","RHSA-2015:1981"],"bugzilla":"1269345","bugzilla_description":"CVE-2015-7181 nss: use-after-poison in sec_asn1d_parse_leaf() (MFSA 2015-133)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-util-0:3.13.1-9.el6_2","nss-0:3.19.1-2.el5_11","nss-util-0:3.19.1-2.el6_7","nss-util-0:3.14.3-7.el6_4","nss-util-0:3.19.1-2.el6_6","nss-util-0:3.19.1-4.ael7b_1","nss-util-0:3.16.1-3.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7181.json"},{"CVE":"CVE-2015-7182","severity":"critical","public_date":"2015-11-03T00:00:00Z","advisories":["RHSA-2015:1980","RHSA-2015:2068","RHSA-2015:1981"],"bugzilla":"1269351","bugzilla_description":"CVE-2015-7182 nss: ASN.1 decoder heap overflow when decoding constructed OCTET STRING that mixes indefinite and definite length encodings (MFSA 2015-133)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["nss-util-0:3.13.1-9.el6_2","nss-0:3.19.1-2.el5_11","nss-util-0:3.19.1-2.el6_7","nss-util-0:3.14.3-7.el6_4","nss-util-0:3.19.1-2.el6_6","nss-util-0:3.19.1-4.ael7b_1","nss-util-0:3.16.1-3.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7182.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss_compat_ossl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss_compat_ossl_security_api_results.json
new file mode 100644
index 0000000..b35fa41
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss_compat_ossl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5244","severity":"moderate","public_date":"2015-09-15T00:00:00Z","advisories":[],"bugzilla":"1259216","bugzilla_description":"CVE-2015-5244 mod_nss: incorrect ciphersuite parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5244.json"},{"CVE":"CVE-2015-3278","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":[],"bugzilla":"1238326","bugzilla_description":"CVE-2015-3278 nss_compat_ossl: incorrect multi-keyword mode cipherstring parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3278.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss_security_api_results.json
new file mode 100644
index 0000000..66d51e7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nss_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-25648","severity":"moderate","public_date":"2020-10-19T00:00:00Z","advisories":[],"bugzilla":"1887319","bugzilla_description":"CVE-2020-25648 nss: TLS 1.3 CCS flood remote DoS Attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25648.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-25644","severity":"important","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4257","RHSA-2020:4256"],"bugzilla":"1885485","bugzilla_description":"CVE-2020-25644 wildfly-openssl: memory leak per HTTP session creation in WildFly OpenSSL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el8eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el6eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el7eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25644.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1968","severity":"low","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877458","bugzilla_description":"CVE-2020-1968 openssl: Information exposure when DH secret are reused across multiple TLS connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-12413","severity":"low","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877557","bugzilla_description":"CVE-2020-12413 nss: Information exposure when DH secret are reused across multiple TLS connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12413.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-12400","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:4076"],"bugzilla":"1853983","bugzilla_description":"CVE-2020-12400 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12400.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12403","severity":"moderate","public_date":"2020-07-27T00:00:00Z","advisories":["RHSA-2020:4076"],"bugzilla":"1868931","bugzilla_description":"CVE-2020-12403 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["nss-0:3.53.1-3.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12403.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2020-15778","severity":"moderate","public_date":"2020-07-18T00:00:00Z","advisories":[],"bugzilla":"1860487","bugzilla_description":"CVE-2020-15778 openssh: scp allows command injection when using backtick characters in the destination argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15778.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12401","severity":"moderate","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:4076"],"bugzilla":"1851294","bugzilla_description":"CVE-2020-12401 nss: ECDSA timing attack mitigation bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12401.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-14145","severity":"low","public_date":"2020-06-29T00:00:00Z","advisories":[],"bugzilla":"1852930","bugzilla_description":"CVE-2020-14145 openssh: Observable Discrepancy leading to an information leak in the algorithm negotiation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14145.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-6829","severity":"moderate","public_date":"2020-06-02T12:00:00Z","advisories":["RHSA-2020:4076"],"bugzilla":"1826187","bugzilla_description":"CVE-2020-6829 nss: Side channel attack on ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6829.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12402","severity":"moderate","public_date":"2020-06-02T12:00:00Z","advisories":["RHSA-2020:4076","RHSA-2020:3280"],"bugzilla":"1826231","bugzilla_description":"CVE-2020-12402 nss: Side channel vulnerabilities during RSA key generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.53.1-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12402.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12062","severity":"moderate","public_date":"2020-05-27T00:00:00Z","advisories":[],"bugzilla":"1854145","bugzilla_description":"CVE-2020-12062 openssh: scp can send duplicate responses to the server upon a utimes system call failure leading to overwrite of arbitrary files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12062.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-12399","severity":"moderate","public_date":"2020-05-21T00:00:00Z","advisories":[],"bugzilla":"1826177","bugzilla_description":"CVE-2020-12399 nss: Timing attack on DSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12399.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-1967","severity":"important","public_date":"2020-04-21T00:00:00Z","advisories":[],"bugzilla":"1823670","bugzilla_description":"CVE-2020-1967 openssl: Segmentation fault in SSL_check_chain causes denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1967.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17023","severity":"low","public_date":"2020-01-08T00:00:00Z","advisories":["RHSA-2020:4076","RHSA-2020:3280"],"bugzilla":"1791225","bugzilla_description":"CVE-2019-17023 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.53.1-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-17006","severity":"moderate","public_date":"2019-12-26T00:00:00Z","advisories":["RHSA-2020:4076","RHSA-2020:3280"],"bugzilla":"1775916","bugzilla_description":"CVE-2019-17006 nss: Check length of inputs for cryptographic primitives","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.53.1-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17006.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11756","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:4076","RHSA-2020:3280"],"bugzilla":"1774835","bugzilla_description":"CVE-2019-11756 nss: Use-after-free in sftk_FreeSession due to improper refcounting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.53.1-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11756.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-1551","severity":"low","public_date":"2019-12-06T00:00:00Z","advisories":[],"bugzilla":"1780995","bugzilla_description":"CVE-2019-1551 openssl: Integer overflow in RSAZ modular exponentiation on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1551.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2012-5582","severity":"low","public_date":"2019-11-25T00:00:00Z","advisories":[],"bugzilla":"1777925","bugzilla_description":"CVE-2012-5582 opendnssec: misuses libcurl API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5582.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2019-11745","severity":"important","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:0243","RHSA-2019:4190","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:4114","RHSA-2020:1461","RHSA-2019:4152","RHSA-2020:0466"],"bugzilla":"1774831","bugzilla_description":"CVE-2019-11745 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["nss-0:3.44.0-8.el8_0","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-7.el7_7","nss-softokn-0:3.14.3-23.el6_6","nss-0:3.44.0-9.el8_1","nss-softokn-0:3.44.0-6.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-1547","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752090","bugzilla_description":"CVE-2019-1547 openssl: side-channel weak encryption vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-602","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-1549","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752095","bugzilla_description":"CVE-2019-1549 openssl: information disclosure in fork()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-1563","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752100","bugzilla_description":"CVE-2019-1563 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-16905","severity":"important","public_date":"2019-08-28T00:00:00Z","advisories":[],"bugzilla":"1767966","bugzilla_description":"CVE-2019-16905 openssh: an integer overflow in the private key parsing code for the XMSS key type","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16905.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-1552","severity":"low","public_date":"2019-07-30T00:00:00Z","advisories":[],"bugzilla":"1745637","bugzilla_description":"CVE-2019-1552 openssl: Insecure path defaults vulnerability in mingw builds","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1552.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2019-11719","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1951","RHSA-2020:4076"],"bugzilla":"1728436","bugzilla_description":"CVE-2019-11719 nss: Out-of-bounds read when importing curve25519 private key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11719.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11729","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:4190","RHSA-2019:1951"],"bugzilla":"1728437","bugzilla_description":"CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["nss-0:3.44.0-7.el7_7","nss-util-0:3.44.0-4.el7_7","nss-0:3.44.0-7.el8_0","nss-softokn-0:3.44.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11729.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11727","severity":"low","public_date":"2019-07-09T00:00:00Z","advisories":["RHSA-2019:1951","RHSA-2020:4076"],"bugzilla":"1730988","bugzilla_description":"CVE-2019-11727 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11727.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"3.4"},{"CVE":"CVE-2019-17007","severity":"moderate","public_date":"2019-03-21T00:00:00Z","advisories":[],"bugzilla":"1703979","bugzilla_description":"CVE-2019-17007 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17007.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1543","severity":"low","public_date":"2019-03-06T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1695954","bugzilla_description":"CVE-2019-1543 openssl: ChaCha20-Poly1305 with long nonces","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-1559","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:2304","RHSA-2019:2439","RHSA-2019:3929","RHSA-2019:2437","RHSA-2019:2471"],"bugzilla":"1683804","bugzilla_description":"CVE-2019-1559 openssl: 0-byte record padding oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-0:1.0.1e-58.el6_10","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-18508","severity":"moderate","public_date":"2019-01-22T00:00:00Z","advisories":["RHSA-2019:1951"],"bugzilla":"1671310","bugzilla_description":"CVE-2018-18508 nss: NULL pointer dereference in several CMS functions resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-12404","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":["RHSA-2019:2237"],"bugzilla":"1657913","bugzilla_description":"CVE-2018-12404 nss: Cache side-channel variant of the Bleichenbacher attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-20685","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1665785","bugzilla_description":"CVE-2018-20685 openssh: scp client improper directory name validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20685.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-6109","severity":"low","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666119","bugzilla_description":"CVE-2019-6109 openssh: Missing character encoding in progress display allows for spoofing of scp client output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-6110","severity":"low","public_date":"2018-11-16T00:00:00Z","advisories":[],"bugzilla":"1666124","bugzilla_description":"CVE-2019-6110 openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-6111","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666127","bugzilla_description":"CVE-2019-6111 openssh: Improper validation of object names allows malicious server to overwrite files via scp client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-5407","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3932","RHSA-2019:0483","RHSA-2019:2125","RHSA-2019:3929","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1645695","bugzilla_description":"CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7_6.1","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-0735","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1644356","bugzilla_description":"CVE-2018-0735 openssl: timing side channel attack in the ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0734","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:3700","RHSA-2019:3932","RHSA-2019:2304","RHSA-2019:3933","RHSA-2019:3935","RHBA-2019:3303"],"bugzilla":"1644364","bugzilla_description":"CVE-2018-0734 openssl: timing side channel attack in the DSA signature algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-12384","severity":"moderate","public_date":"2018-09-03T00:00:00Z","advisories":["RHSA-2018:2768","RHSA-2018:2898"],"bugzilla":"1622089","bugzilla_description":"CVE-2018-12384 nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nss-0:3.36.0-9.el6_10","nss-0:3.36.0-7.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12384.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-15919","severity":"low","public_date":"2018-08-28T00:00:00Z","advisories":[],"bugzilla":"1623184","bugzilla_description":"CVE-2018-15919 openssh: User enumeration via malformed packets in authentication requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15919.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-15473","severity":"low","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2019:2143","RHSA-2019:0711"],"bugzilla":"1619063","bugzilla_description":"CVE-2018-15473 openssh: User enumeration via malformed packets in authentication requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssh-0:7.4p1-21.el7","openssh-0:5.3p1-124.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15473.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0732","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2019:1296","RHSA-2019:1543","RHSA-2018:2553","RHSA-2018:2552","RHSA-2018:3221"],"bugzilla":"1591100","bugzilla_description":"CVE-2018-0732 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-1:1.0.2k-16.el7","rhoar-nodejs-1:8.11.4-2.el7","rhoar-nodejs-1:10.9.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-0737","severity":"low","public_date":"2018-04-16T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:3933","RHSA-2018:3221","RHSA-2019:3935"],"bugzilla":"1568253","bugzilla_description":"CVE-2018-0737 openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0737.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-0733","severity":"moderate","public_date":"2018-03-27T00:00:00Z","advisories":[],"bugzilla":"1561260","bugzilla_description":"CVE-2018-0733 openssl: Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages in a reduced number of attempts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0733.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-0739","severity":"moderate","public_date":"2018-03-27T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3090","RHSA-2019:1712","RHSA-2019:1711","RHSA-2018:3221"],"bugzilla":"1561266","bugzilla_description":"CVE-2018-0739 openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-400","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7","openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0739.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-10708","severity":"low","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1537929","bugzilla_description":"CVE-2016-10708 openssh: Out of sequence NEWKEYS message can allow remote attacker to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-3737","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523504","bugzilla_description":"CVE-2017-3737 openssl: Read/write after SSL object in error state","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3738","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523510","bugzilla_description":"CVE-2017-3738 openssl: rsaz_1024_mul_avx2 overflow bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-1000808","severity":"low","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2019:0085"],"bugzilla":"1640216","bugzilla_description":"CVE-2018-1000808 pyOpenSSL: Failure to release memory before removing last reference in PKCS #12 Store","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["pyOpenSSL-0:17.5.0-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-1000807","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2019:0085"],"bugzilla":"1640217","bugzilla_description":"CVE-2018-1000807 pyOpenSSL: Use-after-free in X509 object handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["pyOpenSSL-0:17.5.0-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3736","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1509169","bugzilla_description":"CVE-2017-3736 openssl: bn_sqrx8x_internal carry bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":["openssl-1:1.0.2k-12.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-15906","severity":"low","public_date":"2017-10-03T00:00:00Z","advisories":["RHSA-2018:0980"],"bugzilla":"1506630","bugzilla_description":"CVE-2017-15906 openssh: Improper write operations in readonly mode allow for zero-length file creation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openssh-0:7.4p1-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-7805","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2832"],"bugzilla":"1471171","bugzilla_description":"CVE-2017-7805 nss: Potential use-after-free in TLS 1.2 server when verifying client authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["nss-0:3.28.4-12.el7_4","nss-0:3.28.4-4.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3735","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":["RHSA-2018:3221"],"bugzilla":"1486144","bugzilla_description":"CVE-2017-3735 openssl: Malformed X.509 IPAdressFamily could cause OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-11695","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1487128","bugzilla_description":"CVE-2017-11695 nss: Heap-buffer-overflow in alloc_segs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11695.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-11696","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1487129","bugzilla_description":"CVE-2017-11696 nss: Heap-buffer-overflow in __hash_open","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11696.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-11698","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1487130","bugzilla_description":"CVE-2017-11698 nss: Heap-buffer-overflow in __get_page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-11697","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1487132","bugzilla_description":"CVE-2017-11697 nss: Floating Point Exception in __hash_open","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11697.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7781","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479197","bugzilla_description":"CVE-2017-7781 Mozilla: Elliptic curve point addition error when using mixed Jacobian-affine coordinates (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-681","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7781.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7502","severity":"important","public_date":"2017-05-30T00:00:00Z","advisories":["RHSA-2017:1567","RHSA-2017:1365","RHSA-2017:1364"],"bugzilla":"1446631","bugzilla_description":"CVE-2017-7502 nss: Null pointer dereference when handling empty SSLv2 messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["nss-0:3.28.4-3.el6_9","nss-0:3.28.4-1.2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7502.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5461","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1101","RHSA-2017:1100","RHSA-2017:1103","RHSA-2017:1102"],"bugzilla":"1440080","bugzilla_description":"CVE-2017-5461 nss: Write beyond bounds caused by bugs in Base64 de/encoding in nssb64d.c and nssb64e.c (MFSA 2017-10)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nss-0:3.21.4-1.el5_11","nss-util-0:3.16.1-5.el6_5","nss-util-0:3.13.1-11.el6_2","nss-util-0:3.21.4-1.el6_7","nss-0:3.28.4-1.el6_9","nss-util-0:3.19.1-4.el6_6","nss-util-0:3.21.4-1.el7_2","nss-util-0:3.14.3-9.el6_4","nss-0:3.14.3-11.el5_9","nss-0:3.28.4-1.0.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5461.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-5462","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443348","bugzilla_description":"CVE-2017-5462 nss: DRBG flaw in NSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5462.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-3733","severity":"important","public_date":"2017-02-16T00:00:00Z","advisories":[],"bugzilla":"1421695","bugzilla_description":"CVE-2017-3733 openssl: Encrypt-Then-Mac renegotiation crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3733.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3731","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2017:0286","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416852","bugzilla_description":"CVE-2017-3731 openssl: Truncated packet could crash via OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["openssl-0:1.0.1e-48.el6_8.4","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3731.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3730","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":[],"bugzilla":"1416855","bugzilla_description":"CVE-2017-3730 openssl: Bad (EC)DHE parameters cause a client crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3730.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3732","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416856","bugzilla_description":"CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-7056","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1802","RHSA-2017:1801","RHBA-2017:1929"],"bugzilla":"1412120","bugzilla_description":"CVE-2016-7056 openssl: ECDSA P-256 timing attack key recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.0.2k-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7056.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-10009","severity":"moderate","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1406269","bugzilla_description":"CVE-2016-10009 openssh: loading of untrusted PKCS#11 modules in ssh-agent","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10009.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2016-10010","severity":"low","public_date":"2016-12-19T00:00:00Z","advisories":[],"bugzilla":"1406278","bugzilla_description":"CVE-2016-10010 openssh: privilege escalation via Unix domain socket forwarding","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-10011","severity":"low","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1406286","bugzilla_description":"CVE-2016-10011 openssh: Leak of host private key material to privilege-separated child process via realloc()","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10011.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2016-10012","severity":"low","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1406293","bugzilla_description":"CVE-2016-10012 openssh: Bounds check can be evaded in the shared memory manager used by pre-authentication compression support","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-9574","severity":"moderate","public_date":"2016-11-28T00:00:00Z","advisories":[],"bugzilla":"1404568","bugzilla_description":"CVE-2016-9574 nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSA","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9574.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-5285","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2779"],"bugzilla":"1383883","bugzilla_description":"CVE-2016-5285 nss: Missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime causes server crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["nss-0:3.21.3-2.el5_11","nss-0:3.21.3-2.el6_8","nss-0:3.21.3-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-8635","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2779"],"bugzilla":"1391818","bugzilla_description":"CVE-2016-8635 nss: small-subgroups attack flaw","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["nss-0:3.21.3-2.el5_11","nss-0:3.21.3-2.el6_8","nss-0:3.21.3-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9074","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396548","bugzilla_description":"CVE-2016-9074 nss: Insufficient timing side-channel resistance in divSpoiler","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-7054","severity":"important","public_date":"2016-11-10T00:00:00Z","advisories":[],"bugzilla":"1393920","bugzilla_description":"CVE-2016-7054 openssl: Corrupting larger payloads when using ChaCha20/Poly1305 ciphersuites leads to DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7053","severity":"moderate","public_date":"2016-11-10T00:00:00Z","advisories":[],"bugzilla":"1393930","bugzilla_description":"CVE-2016-7053 openssl: CMS Null dereference vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-8610","severity":"moderate","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:0286","RHSA-2017:0574"],"bugzilla":"1384743","bugzilla_description":"CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","openssl-0:1.0.1e-48.el6_8.4","gnutls-0:2.12.23-21.el6","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-8858","severity":"moderate","public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1384860","bugzilla_description":"CVE-2016-8858 openssh: Memory exhaustion due to unregistered KEXINIT handler after receiving message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2016-7055","severity":"low","public_date":"2016-10-11T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1393929","bugzilla_description":"CVE-2016-7055 openssl: Carry propagating bug in Montgomery multiplication","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7055.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-6309","severity":"critical","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1379302","bugzilla_description":"CVE-2016-6309 openssl: Use After Free for large message sizes","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6309.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-7052","severity":"moderate","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1379310","bugzilla_description":"CVE-2016-7052 openssl: Missing CRL sanity check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7052.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6304","severity":"important","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2016:2802","RHSA-2017:2493","RHSA-2017:2494","RHSA-2016:1940"],"bugzilla":"1377600","bugzilla_description":"CVE-2016-6304 openssl: OCSP Status Request extension unbounded memory growth","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-0:1.0.1e-16.el6_5.17","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-42.el6_7.6","openssl-0:1.0.1e-48.el6_8.3","openssl-0:1.0.0-27.el6_4.6","openssl-0:1.0.1e-30.el6_6.13","openssl-0:1.0.0-20.el6_2.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6305","severity":"moderate","public_date":"2016-09-22T00:00:00Z","advisories":[],"bugzilla":"1378127","bugzilla_description":"CVE-2016-6305 openssl: SSL_peek() hang on empty record","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6305.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6306","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1377594","bugzilla_description":"CVE-2016-6306 openssl: certificate message OOB reads","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6306.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6307","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1378203","bugzilla_description":"CVE-2016-6307 openssl: excessive allocation of memory in tls_get_message_header()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6307.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-6308","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1378208","bugzilla_description":"CVE-2016-6308 openssl: excessive allocation of memory in dtls1_preprocess_fragment()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6308.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-2183","severity":"moderate","public_date":"2016-08-24T00:00:00Z","advisories":["RHSA-2020:0451","RHSA-2020:3842","RHSA-2017:3240","RHSA-2019:1245","RHBA-2019:2581","RHSA-2017:0462","RHSA-2017:3113","RHSA-2017:3114","RHSA-2017:2710","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:3239","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:2709","RHSA-2017:2708","RHSA-2018:2123","RHSA-2019:2859"],"bugzilla":"1369383","bugzilla_description":"CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","openshift3/metrics-heapster:v3.11.141-2","python-0:2.7.5-69.el7_5","openshift3/ose-console:v3.11.141-2","openshift3/oauth-proxy:v3.11.170-5","openshift4/ose-console:v4.5.0-202009201759.p0","openshift3/ose-kube-rbac-proxy:v3.11.141-2","openshift3/ose-metrics-server:v3.11.141-2","java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8","openshift4/ose-oauth-proxy:v4.1.18-201909201915"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-6302","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1369855","bugzilla_description":"CVE-2016-6302 openssl: Insufficient TLS session ticket HMAC length checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6303","severity":"moderate","public_date":"2016-08-20T00:00:00Z","advisories":[],"bugzilla":"1370146","bugzilla_description":"CVE-2016-6303 openssl: Integer overflow in MDC2_Update()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6303.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-2182","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1367340","bugzilla_description":"CVE-2016-2182 openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-2180","severity":"low","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2016:1940"],"bugzilla":"1359615","bugzilla_description":"CVE-2016-2180 OpenSSL: OOB read in TS_OBJ_print_bio()","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2180.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2016-6515","severity":"moderate","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1364935","bugzilla_description":"CVE-2016-6515 openssh: Denial of service via very long passwords","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-6210","severity":"moderate","public_date":"2016-07-14T00:00:00Z","advisories":["RHSA-2017:2029","RHSA-2017:2563"],"bugzilla":"1357442","bugzilla_description":"CVE-2016-6210 openssh: User enumeration via covert timing channel","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["openssh-0:7.4p1-11.el7","openssh-0:5.3p1-123.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6210.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-2181","severity":"moderate","public_date":"2016-07-05T00:00:00Z","advisories":["RHSA-2016:1940"],"bugzilla":"1369113","bugzilla_description":"CVE-2016-2181 openssl: DTLS replay protection bypass allows DoS against DTLS connection","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-2179","severity":"moderate","public_date":"2016-06-30T00:00:00Z","advisories":["RHSA-2016:1940"],"bugzilla":"1369504","bugzilla_description":"CVE-2016-2179 openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2179.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-2834","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":["RHSA-2016:2779"],"bugzilla":"1347908","bugzilla_description":"CVE-2016-2834 nss: Multiple security flaws (MFSA 2016-61)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-0:3.21.3-2.el5_11","nss-0:3.21.3-2.el6_8","nss-0:3.21.3-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2834.json"},{"CVE":"CVE-2016-2178","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1343400","bugzilla_description":"CVE-2016-2178 openssl: Non-constant time codepath followed for certain operations in DSA implementation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2178.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2016-2177","severity":"low","public_date":"2016-05-05T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1341705","bugzilla_description":"CVE-2016-2177 openssl: Possible integer overflow vulnerabilities in codebase","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2177.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-2108","severity":"important","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2017:0193","RHSA-2016:0722","RHSA-2017:0194","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:1137","RHSA-2016:0996"],"bugzilla":"1331402","bugzilla_description":"CVE-2016-2108 openssl: Memory corruption in the ASN.1 encoder","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:0.9.8e-40.el5_11","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2108.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2107","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1331426","bugzilla_description":"CVE-2016-2107 openssl: Padding oracle in AES-NI CBC MAC check","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2107.json"},{"CVE":"CVE-2016-2105","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:1650","RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:1648","RHSA-2016:2957","RHSA-2016:1649","RHSA-2016:0996"],"bugzilla":"1331441","bugzilla_description":"CVE-2016-2105 openssl: EVP_EncodeUpdate overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2106","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:1650","RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:1648","RHSA-2016:2957","RHSA-2016:1649","RHSA-2016:0996"],"bugzilla":"1331536","bugzilla_description":"CVE-2016-2106 openssl: EVP_EncryptUpdate overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2106.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2176","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1331563","bugzilla_description":"CVE-2016-2176 openssl: EBCDIC overread in X509_NAME_oneline()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2176.json"},{"CVE":"CVE-2016-4425","severity":"moderate","public_date":"2016-05-01T00:00:00Z","advisories":[],"bugzilla":"1332200","bugzilla_description":"CVE-2016-4425 jansson: stack exhaustion parsing a JSON file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4425.json"},{"CVE":"CVE-2016-2109","severity":"low","public_date":"2016-04-23T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1330101","bugzilla_description":"CVE-2016-2109 openssl: ASN.1 BIO handling of large amounts of data","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2109.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2015-8325","severity":"moderate","public_date":"2016-04-13T00:00:00Z","advisories":["RHSA-2016:2588","RHSA-2017:0641"],"bugzilla":"1328012","bugzilla_description":"CVE-2015-8325 openssh: privilege escalation via user's PAM environment and UseLogin=yes","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-863","affected_packages":["openssh-0:6.6.1p1-31.el7","openssh-0:5.3p1-122.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8325.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-3099","severity":"low","public_date":"2016-04-05T00:00:00Z","advisories":["RHSA-2016:2602"],"bugzilla":"1319052","bugzilla_description":"CVE-2016-3099 mod_nss: Invalid handling of +CIPHER operator","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-392","affected_packages":["mod_nss-0:1.0.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3099.json"},{"CVE":"CVE-2016-3115","severity":"moderate","public_date":"2016-03-10T00:00:00Z","advisories":["RHSA-2016:0465","RHSA-2016:0466"],"bugzilla":"1316829","bugzilla_description":"CVE-2016-3115 openssh: missing sanitisation of input for X11 forwarding","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-20","affected_packages":["openssh-0:6.6.1p1-25.el7_2","openssh-0:5.3p1-114.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3115.json"},{"CVE":"CVE-2016-1950","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0495","RHSA-2016:0370","RHSA-2016:0371"],"bugzilla":"1310509","bugzilla_description":"CVE-2016-1950 nss: Heap buffer overflow vulnerability in ASN1 certificate parsing (MFSA 2016-35)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-util-0:3.19.1-3.el6_6","nss-util-0:3.19.1-5.el7_1","nss-util-0:3.14.3-8.el6_4","nss-util-0:3.19.1-9.el7_2","nss-util-0:3.16.1-4.el6_5","nss-0:3.19.1-4.el5_11","nss-util-0:3.19.1-5.el6_7","nss-util-0:3.13.1-10.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1950.json"},{"CVE":"CVE-2016-1979","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0684","RHSA-2016:0591","RHSA-2016:0685"],"bugzilla":"1315202","bugzilla_description":"CVE-2016-1979 nss: Use-after-free during processing of DER encoded keys in NSS (MFSA 2016-36)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-0:3.21.0-6.el5_11","nss-0:3.21.0-0.3.el6_7","nss-0:3.21.0-9.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1979.json"},{"CVE":"CVE-2016-1978","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0684","RHSA-2016:0591","RHSA-2016:0685"],"bugzilla":"1315565","bugzilla_description":"CVE-2016-1978 nss: Use-after-free in NSS during SSL connections in low memory (MFSA 2016-15)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-0:3.21.0-6.el5_11","nss-0:3.21.0-0.3.el6_7","nss-0:3.21.0-9.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1978.json"},{"CVE":"CVE-2016-2842","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1314757","bugzilla_description":"CVE-2016-2842 openssl: doapr_outch function does not verify that certain memory allocation succeeds","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2842.json"},{"CVE":"CVE-2016-0800","severity":"important","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2016:0490","RHSA-2016:1519","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0305","RHSA-2016:0306","RHSA-2016:0301","RHSA-2016:0302","RHSA-2016:0445","RHSA-2016:0379","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1310593","bugzilla_description":"CVE-2016-0800 SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-42.el6_7.4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","rhev-hypervisor7-0:7.2-20160302.1.el7ev","openssl-0:1.0.1e-30.el6_6.12","rhev-hypervisor7-0:7.2-20160302.1.el6ev","openssl-0:1.0.0-20.el6_2.8","openssl-0:0.9.7a-43.23.el4","openssl-1:1.0.1e-42.el7_1.10","openssl098e-0:0.9.8e-20.el6_7.1","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-39.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0800.json"},{"CVE":"CVE-2016-0702","severity":"low","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2016:2957","RHSA-2016:0301","RHSA-2016:0379"],"bugzilla":"1310599","bugzilla_description":"CVE-2016-0702 OpenSSL: Side channel attack on modular exponentiation","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-42.el6_7.4","rhev-hypervisor7-0:7.2-20160302.1.el7ev","rhev-hypervisor7-0:7.2-20160302.1.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0702.json"},{"CVE":"CVE-2016-0703","severity":"moderate","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0303"],"bugzilla":"1310811","bugzilla_description":"CVE-2016-0703 openssl: Divide-and-conquer session key recovery in SSLv2","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0703.json"},{"CVE":"CVE-2016-0704","severity":"moderate","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0303"],"bugzilla":"1310814","bugzilla_description":"CVE-2016-0704 openssl: SSLv2 Bleichenbacher protection overwrites wrong bytes for export ciphers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0704.json"},{"CVE":"CVE-2016-0797","severity":"low","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2016:2957","RHSA-2016:0301","RHSA-2016:0302","RHSA-2016:0379"],"bugzilla":"1311880","bugzilla_description":"CVE-2016-0797 OpenSSL: BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-42.el6_7.4","rhev-hypervisor7-0:7.2-20160302.1.el7ev","rhev-hypervisor7-0:7.2-20160302.1.el6ev","openssl-0:0.9.8e-39.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0797.json"},{"CVE":"CVE-2016-0799","severity":"low","public_date":"2016-02-26T00:00:00Z","advisories":["RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1312219","bugzilla_description":"CVE-2016-0799 OpenSSL: Fix memory issues in BIO_*printf functions","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0799.json"},{"CVE":"CVE-2016-0798","severity":"low","public_date":"2016-02-25T00:00:00Z","advisories":[],"bugzilla":"1311876","bugzilla_description":"CVE-2016-0798 OpenSSL: Avoid memory leak in SRP","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0798.json"},{"CVE":"CVE-2016-0705","severity":"low","public_date":"2016-02-18T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2016:2957","RHSA-2016:0301","RHSA-2016:0379"],"bugzilla":"1310596","bugzilla_description":"CVE-2016-0705 OpenSSL: Double-free in DSA code","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-42.el6_7.4","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","rhev-hypervisor7-0:7.2-20160302.1.el7ev","rhev-hypervisor7-0:7.2-20160302.1.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0705.json"},{"CVE":"CVE-2015-3194","severity":"low","public_date":"2016-01-28T00:00:00Z","advisories":["RHSA-2015:2617","RHSA-2016:2957"],"bugzilla":"1288320","bugzilla_description":"CVE-2015-3194 OpenSSL: Certificate verify crash with missing PSS parameter","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.1","openssl-1:1.0.1e-51.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3194.json"},{"CVE":"CVE-2016-0701","severity":"moderate","public_date":"2016-01-28T00:00:00Z","advisories":[],"bugzilla":"1301845","bugzilla_description":"CVE-2016-0701 OpenSSL: DH small subgroups","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0701.json"},{"CVE":"CVE-2015-3197","severity":"low","public_date":"2016-01-28T00:00:00Z","advisories":["RHSA-2016:0490","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0305","RHSA-2016:0306","RHSA-2016:0301","RHSA-2016:0302","RHSA-2016:0445","RHSA-2016:0379","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1301846","bugzilla_description":"CVE-2015-3197 OpenSSL: SSLv2 doesn't block disabled ciphers","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-42.el6_7.4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","rhev-hypervisor7-0:7.2-20160302.1.el7ev","openssl-0:1.0.1e-30.el6_6.12","rhev-hypervisor7-0:7.2-20160302.1.el6ev","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8","openssl-0:0.9.7a-43.23.el4","openssl098e-0:0.9.8e-20.el6_7.1","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-39.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3197.json"},{"CVE":"CVE-2016-1938","severity":"low","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1305159","bugzilla_description":"CVE-2016-1938 Mozilla NSS: Errors in mp_div and mp_exptmod cryptographic functions","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1938.json"},{"CVE":"CVE-2016-0777","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2016:0043"],"bugzilla":"1298032","bugzilla_description":"CVE-2016-0777 OpenSSH: Client Information leak due to use of roaming connection feature","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-682","affected_packages":["openssh-0:6.6.1p1-23.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0777.json"},{"CVE":"CVE-2016-0778","severity":"low","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2016:0043"],"bugzilla":"1298033","bugzilla_description":"CVE-2016-0778 OpenSSH: Client buffer-overflow when using roaming connections","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["openssh-0:6.6.1p1-23.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0778.json"},{"CVE":"CVE-2016-1908","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2016:0465","RHSA-2016:0741"],"bugzilla":"1298741","bugzilla_description":"CVE-2016-1908 openssh: possible fallback from untrusted to trusted X11 forwarding","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-284","affected_packages":["openssh-0:6.6.1p1-25.el7_2","openssh-0:5.3p1-117.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1908.json"},{"CVE":"CVE-2016-1907","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":[],"bugzilla":"1298746","bugzilla_description":"CVE-2016-1907 openssh: out-of-bounds read in packet handling code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1907.json"},{"CVE":"CVE-2015-7575","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0012","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0007","RHSA-2016:0008","RHSA-2016:0049"],"bugzilla":"1289841","bugzilla_description":"CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.2","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","nss-0:3.19.1-19.el7_2","gnutls-0:3.3.8-14.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","gnutls-0:2.8.5-19.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","nss-0:3.19.1-8.el6_7","openssl-1:1.0.1e-51.el7_2.2","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json"},{"CVE":"CVE-2015-1794","severity":"low","public_date":"2015-12-04T00:00:00Z","advisories":[],"bugzilla":"1288955","bugzilla_description":"CVE-2015-1794 OpenSSL: Anon DH ServerKeyExchange with 0 p parameter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1794.json"},{"CVE":"CVE-2015-3193","severity":"moderate","public_date":"2015-12-03T00:00:00Z","advisories":[],"bugzilla":"1288317","bugzilla_description":"CVE-2015-3193 OpenSSL: BN_mod_exp may produce incorrect results on x86_64","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3193.json"},{"CVE":"CVE-2015-3195","severity":"moderate","public_date":"2015-12-03T00:00:00Z","advisories":["RHSA-2015:2617","RHSA-2016:2056","RHSA-2016:2957","RHSA-2015:2616"],"bugzilla":"1288322","bugzilla_description":"CVE-2015-3195 OpenSSL: X509_ATTRIBUTE memory leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-42.el6_7.1","openssl-1:1.0.1e-51.el7_2.1","openssl-0:0.9.8e-37.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-3196","severity":"low","public_date":"2015-12-03T00:00:00Z","advisories":["RHSA-2015:2617","RHSA-2016:2957"],"bugzilla":"1288326","bugzilla_description":"CVE-2015-3196 OpenSSL: Race condition handling PSK identify hint","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.1","openssl-1:1.0.1e-51.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3196.json"},{"CVE":"CVE-2015-7181","severity":"critical","public_date":"2015-11-03T00:00:00Z","advisories":["RHSA-2015:1980","RHSA-2015:2068","RHSA-2015:1981"],"bugzilla":"1269345","bugzilla_description":"CVE-2015-7181 nss: use-after-poison in sec_asn1d_parse_leaf() (MFSA 2015-133)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-util-0:3.13.1-9.el6_2","nss-0:3.19.1-2.el5_11","nss-util-0:3.19.1-2.el6_7","nss-util-0:3.14.3-7.el6_4","nss-util-0:3.19.1-2.el6_6","nss-util-0:3.19.1-4.ael7b_1","nss-util-0:3.16.1-3.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7181.json"},{"CVE":"CVE-2015-7182","severity":"critical","public_date":"2015-11-03T00:00:00Z","advisories":["RHSA-2015:1980","RHSA-2015:2068","RHSA-2015:1981"],"bugzilla":"1269351","bugzilla_description":"CVE-2015-7182 nss: ASN.1 decoder heap overflow when decoding constructed OCTET STRING that mixes indefinite and definite length encodings (MFSA 2015-133)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["nss-util-0:3.13.1-9.el6_2","nss-0:3.19.1-2.el5_11","nss-util-0:3.19.1-2.el6_7","nss-util-0:3.14.3-7.el6_4","nss-util-0:3.19.1-2.el6_6","nss-util-0:3.19.1-4.ael7b_1","nss-util-0:3.16.1-3.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7182.json"},{"CVE":"CVE-2015-7183","severity":"critical","public_date":"2015-11-03T00:00:00Z","advisories":["RHSA-2015:1980","RHSA-2015:2068","RHSA-2015:1981"],"bugzilla":"1269353","bugzilla_description":"CVE-2015-7183 nspr: heap-buffer overflow in PL_ARENA_ALLOCATE (MFSA 2015-133)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["nspr-0:4.10.8-2.el7_1","nspr-0:4.10.8-2.el5_11","nspr-0:4.10.8-2.el6_6","nss-0:3.14.3-9.el6_4","nss-0:3.16.1-9.el6_5","nspr-0:4.8.9-6.el6_2","nspr-0:4.10.6-2.el6_5","nss-0:3.13.1-12.el6_2","nss-0:3.19.1-7.ael7b_1.2","nss-0:3.19.1-5.el6_7","nspr-0:4.9.5-5.el6_4","nspr-0:4.10.8-2.el6_7","nss-0:3.19.1-4.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7183.json"},{"CVE":"CVE-2015-5244","severity":"moderate","public_date":"2015-09-15T00:00:00Z","advisories":[],"bugzilla":"1259216","bugzilla_description":"CVE-2015-5244 mod_nss: incorrect ciphersuite parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5244.json"},{"CVE":"CVE-2015-6563","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2088","RHSA-2016:0741"],"bugzilla":"1252844","bugzilla_description":"CVE-2015-6563 openssh: Privilege separation weakness related to PAM support","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-266","affected_packages":["openssh-0:5.3p1-117.el6","openssh-0:6.6.1p1-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6563.json"},{"CVE":"CVE-2015-6564","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2088","RHSA-2016:0741"],"bugzilla":"1252852","bugzilla_description":"CVE-2015-6564 openssh: Use-after-free bug related to PAM support","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-416","affected_packages":["openssh-0:5.3p1-117.el6","openssh-0:6.6.1p1-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6564.json"},{"CVE":"CVE-2015-6565","severity":"low","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252861","bugzilla_description":"CVE-2015-6565 openssh: Incorrectly set TTYs to be world-writable","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6565.json"},{"CVE":"CVE-2015-5600","severity":"low","public_date":"2015-07-16T00:00:00Z","advisories":["RHSA-2015:2088","RHSA-2016:0466"],"bugzilla":"1245969","bugzilla_description":"CVE-2015-5600 openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-304","affected_packages":["openssh-0:5.3p1-114.el6_7","openssh-0:6.6.1p1-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5600.json"},{"CVE":"CVE-2015-3277","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":[],"bugzilla":"1238324","bugzilla_description":"CVE-2015-3277 mod_nss: incorrect multi-keyword mode cipherstring parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3277.json"},{"CVE":"CVE-2015-3278","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":[],"bugzilla":"1238326","bugzilla_description":"CVE-2015-3278 nss_compat_ossl: incorrect multi-keyword mode cipherstring parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3278.json"},{"CVE":"CVE-2015-2613","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1242456","bugzilla_description":"CVE-2015-2613 NSS / JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2613.json"},{"CVE":"CVE-2015-1793","severity":"important","public_date":"2015-07-09T00:00:00Z","advisories":[],"bugzilla":"1238619","bugzilla_description":"CVE-2015-1793 openssl: alternative chains certificate forgery","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1793.json"},{"CVE":"CVE-2015-2730","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1664","RHSA-2015:1699"],"bugzilla":"1236954","bugzilla_description":"CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-347","affected_packages":["nss-0:3.19.1-1.el5_11","nss-softokn-0:3.16.2.3-13.el7_1","nss-softokn-0:3.14.3-23.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2730.json"},{"CVE":"CVE-2015-2721","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1664","RHSA-2015:1185"],"bugzilla":"1236967","bugzilla_description":"CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["nss-0:3.19.1-3.el6_6","nss-0:3.19.1-1.el5_11","nss-0:3.19.1-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2721.json"},{"CVE":"CVE-2015-5352","severity":"moderate","public_date":"2015-07-01T00:00:00Z","advisories":["RHSA-2016:0741"],"bugzilla":"1238231","bugzilla_description":"CVE-2015-5352 openssh: XSECURITY restrictions bypass under certain conditions in ssh(1)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["openssh-0:5.3p1-117.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5352.json"},{"CVE":"CVE-2015-1788","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":[],"bugzilla":"1228600","bugzilla_description":"CVE-2015-1788 OpenSSL: Malformed ECParameters causes infinite loop","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1788.json"},{"CVE":"CVE-2015-1789","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2015:1197"],"bugzilla":"1228603","bugzilla_description":"CVE-2015-1789 OpenSSL: out-of-bounds read in X509_cmp_time","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11","openssl-0:0.9.8e-36.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1789.json"},{"CVE":"CVE-2015-1790","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2015:1197"],"bugzilla":"1228604","bugzilla_description":"CVE-2015-1790 OpenSSL: PKCS7 crash with missing EnvelopedContent","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11","openssl-0:0.9.8e-36.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1790.json"},{"CVE":"CVE-2015-1792","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115"],"bugzilla":"1228607","bugzilla_description":"CVE-2015-1792 OpenSSL: CMS verify infinite loop with unknown hash function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1792.json"},{"CVE":"CVE-2015-1791","severity":"low","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115"],"bugzilla":"1228608","bugzilla_description":"CVE-2015-1791 OpenSSL: Race condition handling NewSessionTicket","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1791.json"},{"CVE":"CVE-2014-8176","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2016:2957"],"bugzilla":"1228611","bugzilla_description":"CVE-2014-8176 OpenSSL: Invalid free in DTLS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-3216","severity":"low","public_date":"2015-05-28T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2016:2957"],"bugzilla":"1227574","bugzilla_description":"CVE-2015-3216 openssl: Crash in ssleay_rand_bytes due to locking regression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3216.json"},{"CVE":"CVE-2015-4000","severity":"moderate","public_date":"2015-05-20T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2016:2056","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2016:1624","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1197","RHSA-2015:1230","RHSA-2015:1185","RHSA-2015:1072"],"bugzilla":"1223211","bugzilla_description":"CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","nss-0:3.19.1-3.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","nss-0:3.19.1-3.ael7b_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","openssl-0:1.0.1e-30.el6_6.9","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","openssl-1:1.0.1e-42.ael7b_1.6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.8.0-openjdk-1:1.8.0.51-1.b16.ael7b_1","openssl-0:0.9.8e-36.el5_11","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-2808","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1207101","bugzilla_description":"CVE-2015-2808 SSL/TLS: \"Invariance Weakness\" vulnerability in RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2808.json"},{"CVE":"CVE-2015-0291","severity":"important","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202338","bugzilla_description":"CVE-2015-0291 openssl: ClientHello sigalgs NULL pointer dereference DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0291.json"},{"CVE":"CVE-2015-0290","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202345","bugzilla_description":"CVE-2015-0290 openssl: multiblock corrupted pointer","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0290.json"},{"CVE":"CVE-2015-0207","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202351","bugzilla_description":"CVE-2015-0207 openssl: DTLS segmentation fault in DTLSv1_listen","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0207.json"},{"CVE":"CVE-2015-0286","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0752","RHSA-2016:2957","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202366","bugzilla_description":"CVE-2015-0286 openssl: invalid pointer use in ASN1_TYPE_cmp()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822->CWE-125","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0286.json"},{"CVE":"CVE-2015-0208","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202369","bugzilla_description":"CVE-2015-0208 openssl: segmentation fault for invalid PSS parameters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0208.json"},{"CVE":"CVE-2015-0287","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202380","bugzilla_description":"CVE-2015-0287 openssl: ASN.1 structure reuse memory corruption","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0287.json"},{"CVE":"CVE-2015-0289","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202384","bugzilla_description":"CVE-2015-0289 openssl: PKCS7 NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0289.json"},{"CVE":"CVE-2015-0292","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202395","bugzilla_description":"CVE-2015-0292 openssl: integer underflow leading to buffer overflow in base64 decoding","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-120","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0292.json"},{"CVE":"CVE-2015-0293","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2016:0490","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0445","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1202404","bugzilla_description":"CVE-2015-0293 openssl: assertion failure in SSLv2 servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0293.json"},{"CVE":"CVE-2015-1787","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202406","bugzilla_description":"CVE-2015-1787 openssl: segmentation fault in client authentication with empty CKE and DHE","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1787.json"},{"CVE":"CVE-2015-0285","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202410","bugzilla_description":"CVE-2015-0285 openssl: handshake with unseeded PRNG","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-335","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0285.json"},{"CVE":"CVE-2015-0288","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHEA-2015:1770","RHEA-2015:1771","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202418","bugzilla_description":"CVE-2015-0288 openssl: X509_to_X509_REQ NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0288.json"},{"CVE":"CVE-2009-5146","severity":"moderate","public_date":"2015-03-16T00:00:00Z","advisories":[],"bugzilla":"1203232","bugzilla_description":"CVE-2009-5146 openssl: memory leak in hostname TLS extension","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5146.json"},{"CVE":"CVE-2015-0209","severity":"low","public_date":"2015-02-09T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:0752","RHSA-2016:2957","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1196737","bugzilla_description":"CVE-2015-0209 openssl: use-after-free on invalid EC private key import","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0209.json"},{"CVE":"CVE-2014-3571","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180234","bugzilla_description":"CVE-2014-3571 openssl: DTLS segmentation fault in dtls1_get_record","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3571.json"},{"CVE":"CVE-2015-0206","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180235","bugzilla_description":"CVE-2015-0206 openssl: DTLS memory leak in dtls1_buffer_record","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0206.json"},{"CVE":"CVE-2015-0205","severity":"low","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180239","bugzilla_description":"CVE-2015-0205 openssl: DH client certificates accepted without verification","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0205.json"},{"CVE":"CVE-2014-3570","severity":"low","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2016:1650","RHSA-2015:0066","RHSA-2015:0849"],"bugzilla":"1180240","bugzilla_description":"CVE-2014-3570 openssl: Bignum squaring may produce incorrect results","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3570.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-0204","severity":"moderate","public_date":"2015-01-06T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2016:1650","RHEA-2015:0955","RHSA-2015:0066","RHSA-2015:0849"],"bugzilla":"1180184","bugzilla_description":"CVE-2015-0204 openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"(CWE-327|CWE-757)","affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2014-3572","severity":"low","public_date":"2015-01-05T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180185","bugzilla_description":"CVE-2014-3572 openssl: ECDH downgrade bug fix","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3572.json"},{"CVE":"CVE-2014-8275","severity":"low","public_date":"2015-01-05T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0066"],"bugzilla":"1180187","bugzilla_description":"CVE-2014-8275 openssl: Fix various certificate fingerprint issues","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8275.json"},{"CVE":"CVE-2014-9424","severity":"moderate","public_date":"2014-12-29T00:00:00Z","advisories":[],"bugzilla":"1177569","bugzilla_description":"CVE-2014-9424 libressl: Double-free in ssl_parse_clienthello_use_srtp_ext() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9424.json"},{"CVE":"CVE-2014-8730","severity":"moderate","public_date":"2014-12-09T00:00:00Z","advisories":[],"bugzilla":"1171965","bugzilla_description":"CVE-2014-8730 TLS: incorrect check of padding bytes when using CBC cipher suites","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8730.json"},{"CVE":"CVE-2014-1569","severity":"low","public_date":"2014-12-01T00:00:00Z","advisories":["RHBA-2015:0925","RHBA-2015:0926","RHBA-2015:0965"],"bugzilla":"1174492","bugzilla_description":"CVE-2014-1569 nss: QuickDER decoder length issue","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["nss-0:3.18.0-6.el5_11","nss-0:3.18.0-5.3.el6_6","nss-0:3.18.0-2.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1569.json"},{"CVE":"CVE-2014-3569","severity":"moderate","public_date":"2014-10-21T00:00:00Z","advisories":[],"bugzilla":"1177249","bugzilla_description":"CVE-2014-3569 openssl: denial of service in ssl23_get_client_hello function","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3569.json"},{"CVE":"CVE-2014-3513","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1652","RHSA-2014:1692"],"bugzilla":"1152953","bugzilla_description":"CVE-2014-3513 openssl: SRTP memory leak causes crash when using specially-crafted handshake message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-30.el6_6.2","openssl-1:1.0.1e-34.el7_0.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3513.json"},{"CVE":"CVE-2014-3567","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1652","RHSA-2015:0126","RHSA-2014:1692"],"bugzilla":"1152961","bugzilla_description":"CVE-2014-3567 openssl: Invalid TLS/SSL session tickets could cause memory leak leading to server crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["rhev-hypervisor6-0:6.6-20150123.1.el6ev","openssl-0:1.0.1e-30.el6_6.2","openssl-1:1.0.1e-34.el7_0.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3567.json"},{"CVE":"CVE-2014-3568","severity":"low","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1152967","bugzilla_description":"CVE-2014-3568 openssl: Build option no-ssl3 is incomplete","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3568.json"},{"CVE":"CVE-2014-3566","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2015:1546","RHSA-2015:1545","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2014:1881","RHSA-2014:1880","RHSA-2015:0080","RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2014:1920","RHSA-2015:0067","RHSA-2015:0012","RHSA-2015:0011","RHSA-2015:0264","RHSA-2015:0010","RHSA-2015:0086","RHSA-2015:0085","RHBA-2014:1857"],"bugzilla":"1152789","bugzilla_description":"CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-636|CWE-757)","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","openshift-origin-node-proxy-0:1.16.4.2-1.el6op","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","openshift-origin-node-proxy-0:1.22.3.4-1.el6op","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json"},{"CVE":"CVE-2014-9278","severity":"low","public_date":"2014-10-03T00:00:00Z","advisories":["RHSA-2015:0425"],"bugzilla":"1169843","bugzilla_description":"CVE-2014-9278 openssh: ~/.k5users unexpectedly grants remote login","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["openssh-0:6.6.1p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9278.json"},{"CVE":"CVE-2014-1568","severity":"important","public_date":"2014-09-24T00:00:00Z","advisories":["RHSA-2014:1354","RHSA-2014:1371","RHSA-2014:1307"],"bugzilla":"1145429","bugzilla_description":"CVE-2014-1568 nss: RSA PKCS#1 signature verification forgery flaw (MFSA 2014-73)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-347","affected_packages":["nss-0:3.16.1-7.el6_5","nss-0:3.16.2-7.el7_0","nss-0:3.16.1-4.el5_11","nss-0:3.14.3-10.el5_9","rhev-hypervisor6-0:6.5-20140930.1.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1568.json"},{"CVE":"CVE-2014-2970","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1118169","bugzilla_description":"CVE-2014-2970 openssl: client-crash when parsing SRP parameters (VU#904060)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2970.json"},{"CVE":"CVE-2014-3508","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127490","bugzilla_description":"CVE-2014-3508 openssl: information leak in pretty printing functions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3508.json"},{"CVE":"CVE-2014-5139","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1127491","bugzilla_description":"CVE-2014-5139 openssl: crash with SRP ciphersuite in Server Hello message","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5139.json"},{"CVE":"CVE-2014-3509","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1052","RHSA-2015:0197","RHSA-2014:1054"],"bugzilla":"1127498","bugzilla_description":"CVE-2014-3509 openssl: race condition in ssl_parse_serverhello_tlsext","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-362","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","spice-client-msi-0:3.5-2","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3509.json"},{"CVE":"CVE-2014-3505","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127499","bugzilla_description":"CVE-2014-3505 openssl: DTLS packet processing double free","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-672","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3505.json"},{"CVE":"CVE-2014-3506","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127500","bugzilla_description":"CVE-2014-3506 openssl: DTLS memory exhaustion","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-862->CWE-400","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3506.json"},{"CVE":"CVE-2014-3507","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1052","RHSA-2014:1054"],"bugzilla":"1127502","bugzilla_description":"CVE-2014-3507 openssl: DTLS memory leak from zero-length fragments","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3507.json"},{"CVE":"CVE-2014-3510","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127503","bugzilla_description":"CVE-2014-3510 openssl: DTLS anonymous (EC)DH denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3510.json"},{"CVE":"CVE-2014-3511","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2015:0126","RHSA-2014:1052","RHSA-2015:0197","RHSA-2014:1054"],"bugzilla":"1127504","bugzilla_description":"CVE-2014-3511 openssl: TLS protocol downgrade attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-390","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","rhev-hypervisor6-0:6.6-20150123.1.el6ev","spice-client-msi-0:3.5-2","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3511.json"},{"CVE":"CVE-2014-3512","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1127505","bugzilla_description":"CVE-2014-3512 openssl: SRP buffer overrun","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3512.json"},{"CVE":"CVE-2014-1544","severity":"critical","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:0917","RHSA-2014:1165","RHSA-2014:0915","RHSA-2014:0916"],"bugzilla":"1116198","bugzilla_description":"CVE-2014-1544 nss: Race-condition in certificate verification can lead to Remote code execution (MFSA 2014-63)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["nss-0:3.12.10-7.el4","nss-0:3.15.3-7.el5_10","nss-0:3.14.3-9.el5_9","nss-0:3.15.4-7.el7_0","nss-0:3.16.1-4.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1544.json"},{"CVE":"CVE-2014-1545","severity":"moderate","public_date":"2014-06-10T00:00:00Z","advisories":["RHSA-2014:1246","RHBA-2015:0364","RHSA-2014:0917"],"bugzilla":"1107432","bugzilla_description":"CVE-2014-1545 Mozilla: Out of bounds write in NSPR (MFSA 2014-55)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["nspr-0:4.10.6-1.el6_5","nspr-0:4.10.6-3.el7","nss-0:3.16.1-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1545.json"},{"CVE":"CVE-2014-0224","severity":"important","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0630","RHSA-2014:0631","RHSA-2014:0624","RHSA-2014:0679","RHSA-2014:0632","RHSA-2014:0633","RHSA-2014:0627","RHSA-2014:0628","RHSA-2014:0625","RHSA-2014:0626","RHSA-2014:0629","RHSA-2014:0680"],"bugzilla":"1103586","bugzilla_description":"CVE-2014-0224 openssl: SSL/TLS MITM vulnerability","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-841","affected_packages":["openssl-0:0.9.8e-27.el5_10.3","openssl-0:1.0.1e-16.el6_5.14","openssl097a-0:0.9.7a-12.el5_10.1","openssl098e-0:0.9.8e-18.el6_5.2","openssl-1:1.0.1e-34.el7_0.3","openssl098e-0:0.9.8e-29.el7_0.2","rhev-hypervisor6-0:6.5-20140603.1.el6ev","openssl-0:0.9.8e-26.el5_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0224.json"},{"CVE":"CVE-2014-0221","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625","RHSA-2014:1021","RHSA-2014:1053","RHSA-2014:1086"],"bugzilla":"1103593","bugzilla_description":"CVE-2014-0221 openssl: DoS when sending invalid DTLS handshake","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["openssl-0:0.9.8e-27.el5_10.4","openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0221.json"},{"CVE":"CVE-2014-0195","severity":"important","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1103598","bugzilla_description":"CVE-2014-0195 openssl: Buffer overflow via DTLS invalid fragment","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-119","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0195.json"},{"CVE":"CVE-2014-3470","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1103600","bugzilla_description":"CVE-2014-3470 openssl: client-side denial of service when using anonymous ECDH","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3470.json"},{"CVE":"CVE-2014-0198","severity":"moderate","public_date":"2014-04-21T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1093837","bugzilla_description":"CVE-2014-0198 openssl: SSL_MODE_RELEASE_BUFFERS NULL pointer dereference in do_ssl3_write()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0198.json"},{"CVE":"CVE-2010-5298","severity":"moderate","public_date":"2014-04-08T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1087195","bugzilla_description":"CVE-2010-5298 openssl: freelist misuse causing a possible use-after-free","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5298.json"},{"CVE":"CVE-2014-0160","severity":"important","public_date":"2014-04-07T00:00:00Z","advisories":["RHSA-2014:0377","RHSA-2014:0378","RHSA-2014:0376","RHSA-2014:0416","RHSA-2014:0396"],"bugzilla":"1084875","bugzilla_description":"CVE-2014-0160 openssl: information disclosure in handling of TLS heartbeat extension packets","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-119->CWE-201","affected_packages":["openssl-0:1.0.1e-16.el6_5.7","rhev-hypervisor6-0:6.5-20140118.1.3.2.el6_5","rhev-hypervisor6-0:6.5-20140407.0.el6ev","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0160.json"},{"CVE":"CVE-2014-2653","severity":"moderate","public_date":"2014-03-24T00:00:00Z","advisories":["RHSA-2015:0425","RHSA-2014:1552"],"bugzilla":"1081338","bugzilla_description":"CVE-2014-2653 openssh: failure to check DNS SSHFP records in certain scenarios","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-287","affected_packages":["openssh-0:5.3p1-104.el6","openssh-0:6.6.1p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2653.json"},{"CVE":"CVE-2014-1492","severity":"low","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:1246","RHSA-2014:1073","RHSA-2014:0917"],"bugzilla":"1079851","bugzilla_description":"CVE-2014-1492 nss: IDNA hostname matching code does not follow RFC 6125 recommendation (MFSA 2014-45)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-172->CWE-697->CWE-295","affected_packages":["nss-0:3.16.2-2.el7_0","nss-0:3.16.1-4.el6_5","nss-0:3.16.1-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1492.json"},{"CVE":"CVE-2014-2532","severity":"low","public_date":"2014-03-15T00:00:00Z","advisories":["RHSA-2014:1552"],"bugzilla":"1077843","bugzilla_description":"CVE-2014-2532 openssh: AcceptEnv environment restriction bypass flaw","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":"CWE-138","affected_packages":["openssh-0:5.3p1-104.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2532.json"},{"CVE":"CVE-2014-0076","severity":"moderate","public_date":"2014-02-14T00:00:00Z","advisories":[],"bugzilla":"1080276","bugzilla_description":"CVE-2014-0076 openssl: ECDSA nonces susceptible to Yarom/Benger flush+reload cache side-channel attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0076.json"},{"CVE":"CVE-2013-6401","severity":"moderate","public_date":"2014-02-12T00:00:00Z","advisories":[],"bugzilla":"1035538","bugzilla_description":"CVE-2013-6401 jansson: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6401.json"},{"CVE":"CVE-2014-1490","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:1246","RHSA-2014:0917"],"bugzilla":"1060953","bugzilla_description":"CVE-2014-1490 nss: TOCTOU, potential use-after-free in libssl's session ticket processing (MFSA 2014-12)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-367->CWE-416","affected_packages":["nss-0:3.16.1-4.el6_5","nss-0:3.16.1-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1490.json"},{"CVE":"CVE-2014-1491","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:1246","RHSA-2014:0979","RHSA-2014:0917"],"bugzilla":"1060955","bugzilla_description":"CVE-2014-1491 nss: Do not allow p-1 as a public DH value (MFSA 2014-12)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["rhev-hypervisor6-0:6.5-20140725.0.el6ev","nss-0:3.16.1-4.el6_5","nss-0:3.16.1-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1491.json"},{"CVE":"CVE-2013-4353","severity":"moderate","public_date":"2014-01-06T00:00:00Z","advisories":["RHSA-2014:0015","RHSA-2014:0416","RHSA-2014:0041"],"bugzilla":"1049058","bugzilla_description":"CVE-2013-4353 openssl: client NULL dereference crash on malformed handshake packets","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.4","rhev-hypervisor6-0:6.5-20140112.0.el6ev","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4353.json"},{"CVE":"CVE-2013-1740","severity":"moderate","public_date":"2014-01-05T00:00:00Z","advisories":["RHSA-2014:1246","RHSA-2014:0917"],"bugzilla":"1053725","bugzilla_description":"CVE-2013-1740 nss: false start PR_Recv information disclosure security issue","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["nss-0:3.16.1-4.el6_5","nss-0:3.16.1-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1740.json"},{"CVE":"CVE-2013-6449","severity":"important","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0015","RHSA-2014:0041"],"bugzilla":"1045363","bugzilla_description":"CVE-2013-6449 openssl: crash when using TLS 1.2 caused by use of incorrect hash algorithm","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.4","rhev-hypervisor6-0:6.5-20140112.0.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6449.json"},{"CVE":"CVE-2013-6450","severity":"important","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0015"],"bugzilla":"1047840","bugzilla_description":"CVE-2013-6450 openssl: crash in DTLS renegotiation after packet loss","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6450.json"},{"CVE":"CVE-2013-4566","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2013:1779"],"bugzilla":"1016832","bugzilla_description":"CVE-2013-4566 mod_nss: incorrect handling of NSSVerifyClient in directory context","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["mod_nss-0:1.0.8-19.el6_5","mod_nss-0:1.0.8-8.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4566.json"},{"CVE":"CVE-2013-5606","severity":"moderate","public_date":"2013-11-19T00:00:00Z","advisories":["RHSA-2013:1791","RHSA-2013:1829","RHSA-2014:0041"],"bugzilla":"1031457","bugzilla_description":"CVE-2013-5606 nss: CERT_VerifyCert returns SECSuccess (saying certificate is good) even for bad certificates (MFSA 2013-103)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["nss-0:3.15.3-2.el6_5","nss-0:3.15.3-3.el5_10","rhev-hypervisor6-0:6.5-20140112.0.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5606.json"},{"CVE":"CVE-2013-1741","severity":"moderate","public_date":"2013-11-19T00:00:00Z","advisories":["RHSA-2013:1791","RHSA-2013:1829"],"bugzilla":"1031458","bugzilla_description":"CVE-2013-1741 nss: Integer truncation in certificate parsing (MFSA 2013-103)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["nss-0:3.15.3-2.el6_5","nss-0:3.15.3-3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1741.json"},{"CVE":"CVE-2013-5605","severity":"important","public_date":"2013-11-13T00:00:00Z","advisories":["RHSA-2013:1791","RHSA-2013:1829","RHSA-2013:1841","RHSA-2013:1840","RHSA-2014:0041"],"bugzilla":"1030807","bugzilla_description":"CVE-2013-5605 nss: Null_Cipher() does not respect maxOutputLen  (MFSA 2013-103)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-0:3.14.3-5.el6_4","nss-0:3.15.3-2.el6_5","nss-0:3.15.3-3.el5_10","rhev-hypervisor6-0:6.5-20140112.0.el6ev","nss-0:3.12.8-8.el5_6","nss-0:3.14.3-8.el5_9","nss-0:3.13.1-9.el6_2","nss-0:3.13.6-3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5605.json"},{"CVE":"CVE-2013-4548","severity":"moderate","public_date":"2013-11-07T00:00:00Z","advisories":[],"bugzilla":"1028418","bugzilla_description":"CVE-2013-4548 openssh: post-auth memory corruption when using AES-GCM cipher","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4548.json"},{"CVE":"CVE-2013-1739","severity":"moderate","public_date":"2013-10-17T00:00:00Z","advisories":["RHSA-2013:1791","RHSA-2013:1829"],"bugzilla":"1012740","bugzilla_description":"CVE-2013-1739 nss: Avoid uninitialized data read in the event of a decryption failure","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["nss-0:3.15.3-2.el6_5","nss-0:3.15.3-3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1739.json"},{"CVE":"CVE-2007-6755","severity":"moderate","public_date":"2013-10-11T00:00:00Z","advisories":[],"bugzilla":"1046045","bugzilla_description":"CVE-2007-6755 Dual_EC_DRBG: weak pseudo random number generator","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6755.json"},{"CVE":"CVE-2013-4314","severity":"moderate","public_date":"2013-09-04T00:00:00Z","advisories":[],"bugzilla":"1005325","bugzilla_description":"CVE-2013-4314 pyOpenSSL: hostname check bypassing vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4314.json"},{"CVE":"CVE-2013-0791","severity":"low","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:1181","RHSA-2013:1135","RHSA-2013:1144"],"bugzilla":"946947","bugzilla_description":"CVE-2013-0791 Mozilla: Out-of-bounds array read in CERT_DecodeCertPackage (MFSA 2013-40)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130815.0.el6_4","nss-0:3.14.3-4.el6_4","nss-0:3.14.3-6.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0791.json"},{"CVE":"CVE-2013-2566","severity":"moderate","public_date":"2013-03-15T00:00:00Z","advisories":[],"bugzilla":"921947","bugzilla_description":"CVE-2013-2566 SSL/TLS: Attack against RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2566.json"},{"CVE":"CVE-2012-5536","severity":"moderate","public_date":"2013-02-21T00:00:00Z","advisories":["RHSA-2013:0519"],"bugzilla":"834618","bugzilla_description":"CVE-2012-5536 pam_ssh_agent_auth: symbol crash leading to glibc error() called incorrectly","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["openssh-0:5.3p1-84.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5536.json"},{"CVE":"CVE-2013-0288","severity":"important","public_date":"2013-02-18T00:00:00Z","advisories":["RHSA-2013:0590"],"bugzilla":"909119","bugzilla_description":"CVE-2013-0288 nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["nss-pam-ldapd-0:0.7.5-18.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0288.json"},{"CVE":"CVE-2010-5107","severity":"low","public_date":"2013-02-06T00:00:00Z","advisories":["RHSA-2013:1591","RHSA-2013:1527"],"bugzilla":"908707","bugzilla_description":"CVE-2010-5107 openssh: Prevent connection slot exhaustion attacks","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["openssh-0:5.3p1-94.el6","rhev-hypervisor6-0:6.5-20131115.0.3.2.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5107.json"},{"CVE":"CVE-2012-2686","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":[],"bugzilla":"908029","bugzilla_description":"CVE-2012-2686 openssl: DoS due to improper handling of CBC ciphersuites in TLS 1.1/1.2 on AES-NI supporting platforms","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2686.json"},{"CVE":"CVE-2013-0166","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":["RHSA-2013:0636","RHSA-2013:0833","RHSA-2013:0587","RHSA-2013:0782","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"908052","bugzilla_description":"CVE-2013-0166 openssl: DoS due to improper handling of OCSP response verification","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0166.json"},{"CVE":"CVE-2013-0169","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0636","RHSA-2013:0823","RHSA-2013:0833","RHSA-2013:0855","RHSA-2013:0822","RHSA-2013:0587","RHSA-2013:0532","RHSA-2013:1456","RHSA-2014:0416","RHSA-2013:0782","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"907589","bugzilla_description":"CVE-2013-0169 SSL/TLS: CBC padding timing attack (lucky-13)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3","spice-client-msi-0:3.3-12","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el5_9","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0169.json"},{"CVE":"CVE-2013-1620","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:1181","RHSA-2013:1135","RHSA-2013:1144"],"bugzilla":"908234","bugzilla_description":"CVE-2013-1620 nss: TLS CBC padding timing attack","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130815.0.el6_4","nss-0:3.14.3-4.el6_4","nss-0:3.14.3-6.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1620.json"},{"CVE":"CVE-2014-1692","severity":"critical","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"1059052","bugzilla_description":"CVE-2014-1692 openssh: uninitialized variable use in J-PAKE implementation","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1692.json"},{"CVE":"CVE-2013-0743","severity":"important","public_date":"2013-01-03T00:00:00Z","advisories":["RHSA-2013:0213"],"bugzilla":"890605","bugzilla_description":"nss: Dis-trust TURKTRUST mis-issued *.google.com certificate","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["nss-0:3.13.6-2.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0743.json"},{"CVE":"CVE-2012-4929","severity":"moderate","public_date":"2012-09-13T00:00:00Z","advisories":["RHSA-2013:0636","RHSA-2013:0587","RHSA-2014:0416"],"bugzilla":"857051","bugzilla_description":"CVE-2012-4929 SSL/TLS CRIME attack against HTTPS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4929.json"},{"CVE":"CVE-2012-0441","severity":"moderate","public_date":"2012-06-05T00:00:00Z","advisories":["RHSA-2012:1091","RHSA-2012:1090"],"bugzilla":"827833","bugzilla_description":"CVE-2012-0441 nss: NSS parsing errors with zero length items","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["nss-0:3.13.5-1.el6_3","nss-0:3.13.5-4.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0441.json"},{"CVE":"CVE-2012-2333","severity":"moderate","public_date":"2012-05-10T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:1307","RHSA-2012:0699"],"bugzilla":"820686","bugzilla_description":"CVE-2012-2333 openssl: record length handling integer underflow","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["openssl-0:1.0.0-20.el6_2.5","openssl-0:0.9.8e-22.el5_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2333.json"},{"CVE":"CVE-2012-2131","severity":"important","public_date":"2012-04-23T00:00:00Z","advisories":[],"bugzilla":"815661","bugzilla_description":"CVE-2012-2131 openssl: incomplete fix of CVE-2012-2110 for 0.9.x","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2131.json"},{"CVE":"CVE-2012-2110","severity":"important","public_date":"2012-04-19T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:1307","RHSA-2012:0518","RHSA-2012:0522"],"bugzilla":"814185","bugzilla_description":"CVE-2012-2110 openssl: asn1_d2i_read_bio integer errors leading to buffer overflow","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["openssl-0:0.9.8e-12.el5_6.9","openssl-0:1.0.0-20.el6_2.4","openssl-0:0.9.8e-22.el5_8.3","openssl098e-0:0.9.8e-17.el6_2.2","openssl-0:1.0.0-10.el6_1.6","openssl097a-0:0.9.7a-11.el5_8.2","openssl-0:1.0.0-4.el6_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2110.json"},{"CVE":"CVE-2012-1165","severity":"moderate","public_date":"2012-03-12T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:0426","RHSA-2012:1308","RHSA-2012:1307"],"bugzilla":"802489","bugzilla_description":"CVE-2012-1165 openssl: mime_param_cmp NULL dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-22.el5_8.1","openssl-0:1.0.0-20.el6_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1165.json"},{"CVE":"CVE-2012-0884","severity":"low","public_date":"2012-03-12T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:0426","RHSA-2012:1308","RHSA-2012:1307"],"bugzilla":"802725","bugzilla_description":"CVE-2012-0884 openssl: CMS and PKCS#7 Bleichenbacher attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:0.9.8e-22.el5_8.1","openssl-0:1.0.0-20.el6_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0884.json"},{"CVE":"CVE-2012-0814","severity":"low","public_date":"2012-01-26T00:00:00Z","advisories":[],"bugzilla":"785292","bugzilla_description":"CVE-2012-0814 openssh: forced command option information disclosure","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0814.json"},{"CVE":"CVE-2011-4108","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0059"],"bugzilla":"771770","bugzilla_description":"CVE-2011-4108 openssl: DTLS plaintext recovery attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.0-20.el6_2.1","openssl-0:0.9.8e-20.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4108.json"},{"CVE":"CVE-2011-4109","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0168"],"bugzilla":"771771","bugzilla_description":"CVE-2011-4109 openssl: double-free in policy checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-20.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4109.json"},{"CVE":"CVE-2011-4576","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0109","RHSA-2012:0086","RHSA-2012:0168","RHSA-2012:0059"],"bugzilla":"771775","bugzilla_description":"CVE-2011-4576 openssl: uninitialized SSL 3.0 padding","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:0.9.7a-43.18.el4","openssl-0:1.0.0-20.el6_2.1","openssl-0:0.9.8e-20.el5_7.1","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4576.json"},{"CVE":"CVE-2011-4577","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:0109","RHSA-2012:0059"],"bugzilla":"771778","bugzilla_description":"CVE-2011-4577 openssl: malformed RFC 3779 data can cause assertion failures","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.0-20.el6_2.1","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4577.json"},{"CVE":"CVE-2011-4619","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0109","RHSA-2012:0086","RHSA-2012:0168","RHSA-2012:0059"],"bugzilla":"771780","bugzilla_description":"CVE-2011-4619 openssl: SGC restart DoS attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.7a-43.18.el4","openssl-0:1.0.0-20.el6_2.1","openssl-0:0.9.8e-20.el5_7.1","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4619.json"},{"CVE":"CVE-2012-0027","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":[],"bugzilla":"771782","bugzilla_description":"CVE-2012-0027 openssl: invalid GOST parameters DoS attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0027.json"},{"CVE":"CVE-2011-4354","severity":"moderate","public_date":"2011-11-24T00:00:00Z","advisories":[],"bugzilla":"757909","bugzilla_description":"CVE-2011-4354 openssl: ECC private leak (disclosure of TLS server's private key)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4354.json"},{"CVE":"CVE-2011-3640","severity":null,"public_date":"2011-09-23T00:00:00Z","advisories":[],"bugzilla":"748379","bugzilla_description":"CVE-2011-3640 nss: /pkcs11.txt and /secmod.db files read on initialization","cvss_score":null,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3640.json"},{"CVE":"CVE-2011-3389","severity":"moderate","public_date":"2011-09-10T00:00:00Z","advisories":["RHSA-2011:1384","RHSA-2012:0508","RHSA-2011:1380","RHSA-2012:0034","RHSA-2012:0343","RHSA-2013:1455","RHSA-2012:0006"],"bugzilla":"737506","bugzilla_description":"CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2","java-1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3389.json"},{"CVE":"CVE-2011-3210","severity":"moderate","public_date":"2011-09-06T00:00:00Z","advisories":[],"bugzilla":"736079","bugzilla_description":"CVE-2011-3210 openssl: TLS ephemeral ECDH crashes in OpenSSL","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3210.json"},{"CVE":"CVE-2011-3207","severity":"moderate","public_date":"2011-09-06T00:00:00Z","advisories":["RHSA-2011:1409"],"bugzilla":"736087","bugzilla_description":"CVE-2011-3207 openssl: CRL verification vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.0-10.el6_1.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3207.json"},{"CVE":"CVE-2011-5000","severity":"low","public_date":"2011-08-01T00:00:00Z","advisories":["RHSA-2012:0884"],"bugzilla":"809938","bugzilla_description":"CVE-2011-5000 openssh: post-authentication resource exhaustion bug via GSSAPI","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["openssh-0:5.3p1-81.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5000.json"},{"CVE":"CVE-2011-1945","severity":"important","public_date":"2011-05-17T00:00:00Z","advisories":[],"bugzilla":"709021","bugzilla_description":"CVE-2011-1945 openssl: ECDSA private key leak through a remote timing attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1945.json"},{"CVE":"CVE-2011-4327","severity":"moderate","public_date":"2011-05-05T00:00:00Z","advisories":[],"bugzilla":"755640","bugzilla_description":"CVE-2011-4327 openssh: Unauthorized local access to host keys on platforms where ssh-rand-helper used","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4327.json"},{"CVE":"CVE-2011-4973","severity":"moderate","public_date":"2011-05-04T00:00:00Z","advisories":["RHBA-2011:1656","RHBA-2013:0009"],"bugzilla":"1017197","bugzilla_description":"CVE-2011-4973 mod_nss: FakeBasicAuth authentication bypass","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["mod_nss-0:1.0.8-7.el5","mod_nss-0:1.0.8-13.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4973.json"},{"CVE":"CVE-2011-5095","severity":"moderate","public_date":"2011-04-13T00:00:00Z","advisories":[],"bugzilla":"834062","bugzilla_description":"CVE-2011-5095 openssl: weak public value accepted during Diffie Hellman key exchange","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5095.json"},{"CVE":"CVE-2011-1473","severity":"low","public_date":"2011-03-13T00:00:00Z","advisories":[],"bugzilla":"707065","bugzilla_description":"CVE-2011-1473 openssl: DoS via repeated SSL session renegotiations","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1473.json"},{"CVE":"CVE-2011-5094","severity":"low","public_date":"2011-03-13T00:00:00Z","advisories":[],"bugzilla":"833118","bugzilla_description":"CVE-2011-5094 nss: DoS via repeated SSL session renegotiations","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5094.json"},{"CVE":"CVE-2011-0014","severity":"moderate","public_date":"2011-02-08T00:00:00Z","advisories":["RHSA-2011:0677"],"bugzilla":"676063","bugzilla_description":"CVE-2011-0014 openssl: OCSP stapling vulnerability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.0-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0014.json"},{"CVE":"CVE-2011-0539","severity":"low","public_date":"2011-02-04T00:00:00Z","advisories":[],"bugzilla":"675254","bugzilla_description":"CVE-2011-0539 OpenSSH: legacy certificate generation information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0539.json"},{"CVE":"CVE-2012-0050","severity":"important","public_date":"2011-01-18T00:00:00Z","advisories":[],"bugzilla":"782795","bugzilla_description":"CVE-2012-0050 openssl: remote DTLS server DoS introduced in the CVE-2011-4108 fix","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0050.json"},{"CVE":"CVE-2010-4755","severity":null,"public_date":"2011-01-03T00:00:00Z","advisories":[],"bugzilla":"681698","bugzilla_description":"CVE-2010-4755 openssh: remote DoS in sftp via crafted glob expressions","cvss_score":null,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4755.json"},{"CVE":"CVE-2010-4180","severity":"moderate","public_date":"2010-12-02T00:00:00Z","advisories":["RHSA-2010:0979","RHSA-2010:0978","RHSA-2010:0977","RHSA-2011:0896"],"bugzilla":"659462","bugzilla_description":"CVE-2010-4180 openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG ciphersuite downgrade attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.0-4.el6_0.2","openssl-0:0.9.8e-12.el5_5.7","openssl-0:0.9.7a-43.17.el4_8.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4180.json"},{"CVE":"CVE-2008-7270","severity":"moderate","public_date":"2010-12-02T00:00:00Z","advisories":["RHSA-2010:0978","RHSA-2010:0977","RHSA-2011:0896"],"bugzilla":"660650","bugzilla_description":"CVE-2008-7270 openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG downgrade-to-disabled ciphersuite attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5_5.7","openssl-0:0.9.7a-43.17.el4_8.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-7270.json"},{"CVE":"CVE-2010-3864","severity":"important","public_date":"2010-11-16T00:00:00Z","advisories":["RHSA-2010:0888"],"bugzilla":"649304","bugzilla_description":"CVE-2010-3864 OpenSSL TLS extension parsing race condition","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-662->CWE-362->CWE-119","affected_packages":["openssl-0:1.0.0-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3864.json"},{"CVE":"CVE-2010-3170","severity":"low","public_date":"2010-07-14T00:00:00Z","advisories":["RHSA-2010:0862","RHSA-2010:0782","RHSA-2010:0781"],"bugzilla":"630047","bugzilla_description":"CVE-2010-3170 firefox/nss: doesn't handle IP-based wildcards in X509 certificates safely","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["nss-0:3.12.8-1.el4","seamonkey-0:1.0.9-0.61.el3","nss-0:3.12.8-1.el5","nss-0:3.12.8-1.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3170.json"},{"CVE":"CVE-2010-1633","severity":null,"public_date":"2010-06-01T00:00:00Z","advisories":[],"bugzilla":"598732","bugzilla_description":"CVE-2010-1633 openssl: information leak due to invalid Return value check","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1633.json"},{"CVE":"CVE-2010-0742","severity":null,"public_date":"2010-06-01T00:00:00Z","advisories":[],"bugzilla":"598738","bugzilla_description":"CVE-2010-0742 openssl: invalid ASN1 module definition for CMS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0742.json"},{"CVE":"CVE-2010-0826","severity":"moderate","public_date":"2010-04-01T00:00:00Z","advisories":["RHSA-2010:0347"],"bugzilla":"580187","bugzilla_description":"CVE-2010-0826 nss_db: Information leak due the DB_CONFIG file read from current working directory","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["nss_db-0:2.2-35.4.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0826.json"},{"CVE":"CVE-2009-3245","severity":"important","public_date":"2010-02-23T00:00:00Z","advisories":["RHSA-2010:0977","RHSA-2011:0896","RHSA-2010:0440","RHSA-2010:0173","RHSA-2010:0162"],"bugzilla":"570924","bugzilla_description":"CVE-2009-3245 openssl: missing bn_wexpand return value checks","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-252->CWE-476","affected_packages":["rhev-hypervisor-0:5.4-2.1.12.1.el5_4rhev2_1","openssl096b-0:0.9.6b-16.50","openssl096b-0:0.9.6b-22.46.el4_8.1","openssl-0:0.9.7a-43.17.el4_8.6","openssl-0:0.9.8e-12.el5_4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3245.json"},{"CVE":"CVE-2010-0433","severity":"moderate","public_date":"2010-01-19T00:00:00Z","advisories":["RHSA-2010:0162"],"bugzilla":"569774","bugzilla_description":"CVE-2010-0433 openssl: crash caused by a missing krb5_sname_to_principal() return value check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5_4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0433.json"},{"CVE":"CVE-2009-4355","severity":"moderate","public_date":"2010-01-13T00:00:00Z","advisories":["RHSA-2010:0054"],"bugzilla":"546707","bugzilla_description":"CVE-2009-4355 openssl significant memory leak in certain SSLv3 requests (DoS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:0.9.8e-12.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4355.json"},{"CVE":"CVE-2009-3555","severity":"moderate","public_date":"2009-11-05T00:00:00Z","advisories":["RHSA-2009:1580","RHSA-2010:0408","RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2010:0786","RHSA-2010:0167","RHSA-2010:0166","RHSA-2010:0165","RHSA-2010:0440","RHSA-2010:0164","RHSA-2010:0163","RHSA-2010:0162","RHSA-2009:1579","RHSA-2009:1694","RHSA-2010:0807","RHSA-2010:0119","RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2011:0880","RHSA-2010:0155","RHSA-2010:0770","RHSA-2010:0011","RHSA-2015:1591","RHSA-2010:0130"],"bugzilla":"533125","bugzilla_description":"CVE-2009-3555 TLS: MITM attacks via session renegotiation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-300","affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","httpd-0:2.2.3-31.el5_4.2","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el5","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","openssl-0:0.9.8e-12.el5_4.6","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el4_8","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","rhev-hypervisor-0:5.4-2.1.12.1.el5_4rhev2_1","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5","openssl097a-0:0.9.7a-9.el5_4.2","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","httpd22-0:2.2.10-25.1.ep5.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","httpd-0:2.0.52-41.ent.6","gnutls-0:1.0.20-4.el4_8.7","httpd-0:2.2.10-11.ep5.el5","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","httpd-0:2.0.46-77.ent","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4","pulp-0:2.6.0.15-1.el7sat","openssl-0:0.9.7a-33.26"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3555.json"},{"CVE":"CVE-2009-2904","severity":"moderate","public_date":"2009-09-30T00:00:00Z","advisories":["RHSA-2009:1470"],"bugzilla":"522141","bugzilla_description":"CVE-2009-2904 openssh: possible privilege escalation when using ChrootDirectory setting","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["openssh-0:4.3p2-36.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2904.json"},{"CVE":"CVE-2009-2409","severity":"moderate","public_date":"2009-07-29T00:00:00Z","advisories":["RHSA-2009:1184","RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1186","RHSA-2009:1207","RHSA-2009:1190","RHSA-2010:0166","RHSA-2009:1584","RHSA-2010:0054","RHSA-2009:1432","RHSA-2010:0163","RHSA-2009:1662"],"bugzilla":"510197","bugzilla_description":"CVE-2009-2409 deprecate MD2 in SSL cert validation (Kaminsky)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","seamonkey-0:1.0.9-0.45.el3","java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","nss-0:3.12.3.99.3-1.el4_8.2","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","openssl-0:0.9.8e-12.el5_4.1","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","openssl-0:0.9.7a-33.26","nss-0:3.12.3.99.3-1.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2409.json"},{"CVE":"CVE-2009-1386","severity":"moderate","public_date":"2009-06-02T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"503685","bugzilla_description":"CVE-2009-1386 openssl: DTLS NULL deref crash on early ChangeCipherSpec request","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1386.json"},{"CVE":"CVE-2009-1387","severity":"moderate","public_date":"2009-06-02T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"503688","bugzilla_description":"CVE-2009-1387 openssl: DTLS out-of-sequence message handling NULL deref DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1387.json"},{"CVE":"CVE-2009-1377","severity":"moderate","public_date":"2009-05-12T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"501253","bugzilla_description":"CVE-2009-1377 OpenSSL: DTLS epoch record buffer memory DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1377.json"},{"CVE":"CVE-2009-1378","severity":"moderate","public_date":"2009-05-12T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"501254","bugzilla_description":"CVE-2009-1378 OpenSSL: DTLS fragment handling memory DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1378.json"},{"CVE":"CVE-2009-1379","severity":"moderate","public_date":"2009-05-11T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"501572","bugzilla_description":"CVE-2009-1379 OpenSSL: DTLS pointer use-after-free flaw (DoS)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1379.json"},{"CVE":"CVE-2009-0590","severity":"low","public_date":"2009-03-25T00:00:00Z","advisories":["RHSA-2009:1335","RHSA-2010:0163"],"bugzilla":"492304","bugzilla_description":"CVE-2009-0590 openssl: ASN1 printing crash","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5","openssl-0:0.9.7a-43.17.el4_8.5","openssl-0:0.9.7a-33.26"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0590.json"},{"CVE":"CVE-2008-5161","severity":"low","public_date":"2008-11-19T00:00:00Z","advisories":["RHSA-2009:1287"],"bugzilla":"472068","bugzilla_description":"CVE-2008-5161 OpenSSH: Plaintext Recovery Attack against CBC ciphers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssh-0:4.3p2-36.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5161.json"},{"CVE":"CVE-2008-3844","severity":"critical","public_date":"2008-08-22T00:00:00Z","advisories":["RHSA-2008:0855"],"bugzilla":"1618333","bugzilla_description":"CVE-2008-3844 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:4.3p2-26.el5_2.1","openssh-0:3.9p1-11.el4_7","openssh-0:3.9p1-10.RHEL4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3844.json"},{"CVE":"CVE-2008-1483","severity":"low","public_date":"2008-01-08T00:00:00Z","advisories":["RHSA-2005:527"],"bugzilla":"439079","bugzilla_description":"CVE-2008-1483 openssh may set DISPLAY even if it's unable to listen on respective port","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1483.json"},{"CVE":"CVE-2007-3102","severity":"moderate","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:0540","RHSA-2007:0555","RHSA-2007:0737","RHSA-2007:0703"],"bugzilla":"243204","bugzilla_description":"CVE-2007-3102 audit logging of failed logins","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.24","openssh-0:4.3p2-24.el5","pam-0:0.99.6.2-3.26.el5","pam-0:0.77-66.23"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3102.json"},{"CVE":"CVE-2007-4995","severity":"important","public_date":"2007-10-12T00:00:00Z","advisories":["RHSA-2007:0964"],"bugzilla":"321191","bugzilla_description":"CVE-2007-4995 openssl dtls out of order vulnerabilitiy","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssl-0:0.9.8b-8.3.el5_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4995.json"},{"CVE":"CVE-2007-5135","severity":"moderate","public_date":"2007-09-27T00:00:00Z","advisories":["RHSA-2007:1003","RHSA-2007:0964","RHSA-2007:0813"],"bugzilla":"309801","bugzilla_description":"CVE-2007-5135 openssl: SSL_get_shared_ciphers() off-by-one","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["openssl-0:0.9.7a-43.17.el4_6.1","openssl-0:0.9.6b-48","openssl-0:0.9.7a-33.24","openssl-0:0.9.8b-8.3.el5_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5135.json"},{"CVE":"CVE-2007-4752","severity":"low","public_date":"2007-09-04T00:00:00Z","advisories":["RHSA-2008:0855"],"bugzilla":"280361","bugzilla_description":"CVE-2007-4752 openssh falls back to the trusted x11 cookie if generation of an untrusted cookie fails","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:4.3p2-26.el5_2.1","openssh-0:3.9p1-11.el4_7","openssh-0:3.9p1-10.RHEL4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4752.json"},{"CVE":"CVE-2007-3108","severity":"moderate","public_date":"2007-08-01T00:00:00Z","advisories":["RHSA-2007:1003","RHSA-2007:0964","RHSA-2007:0813"],"bugzilla":"245732","bugzilla_description":"CVE-2007-3108 openssl: RSA side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssl-0:0.9.7a-43.17.el4_6.1","openssl-0:0.9.6b-48","openssl-0:0.9.7a-33.24","openssl-0:0.9.8b-8.3.el5_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3108.json"},{"CVE":"CVE-2006-5794","severity":"low","public_date":"2006-11-07T00:00:00Z","advisories":["RHSA-2006:0738"],"bugzilla":"214641","bugzilla_description":"CVE-2006-5794 OpenSSH privilege separation flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.13","openssh-0:3.9p1-8.RHEL4.17.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5794.json"},{"CVE":"CVE-2006-5051","severity":"important","public_date":"2006-09-28T00:00:00Z","advisories":["RHSA-2006:0697","RHSA-2006:0698"],"bugzilla":"208347","bugzilla_description":"CVE-2006-5051 unsafe GSSAPI signal handler","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.12","openssh-0:3.9p1-8.RHEL4.17","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5051.json"},{"CVE":"CVE-2006-5052","severity":"low","public_date":"2006-09-28T00:00:00Z","advisories":["RHSA-2007:0540","RHSA-2007:0703"],"bugzilla":"234643","bugzilla_description":"CVE-2006-5052 Kerberos information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.24","openssh-0:4.3p2-24.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5052.json"},{"CVE":"CVE-2006-5170","severity":"moderate","public_date":"2006-09-20T00:00:00Z","advisories":["RHSA-2006:0719"],"bugzilla":"1618208","bugzilla_description":"CVE-2006-5170 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nss_ldap-0:226-17"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5170.json"},{"CVE":"CVE-2006-4924","severity":"moderate","public_date":"2006-09-19T00:00:00Z","advisories":["RHSA-2006:0697","RHSA-2006:0698"],"bugzilla":"207957","bugzilla_description":"CVE-2006-4924 openssh DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.12","openssh-0:3.9p1-8.RHEL4.17","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4924.json"},{"CVE":"CVE-2006-7248","severity":"moderate","public_date":"2006-08-29T00:00:00Z","advisories":[],"bugzilla":"798100","bugzilla_description":"CVE-2006-7250 openssl: mime_hdr_cmp NULL dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7248.json"},{"CVE":"CVE-2006-7250","severity":"moderate","public_date":"2006-08-29T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"798100","bugzilla_description":"CVE-2006-7250 openssl: mime_hdr_cmp NULL dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7250.json"},{"CVE":"CVE-2006-0225","severity":"low","public_date":"2005-09-28T00:00:00Z","advisories":["RHSA-2006:0698","RHSA-2006:0044","RHSA-2006:0298"],"bugzilla":"168167","bugzilla_description":"CVE-2006-0225 local to local copy uses shell expansion twice","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.12","openssh-0:3.6.1p2-33.30.9","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0225.json"},{"CVE":"CVE-2005-2798","severity":"moderate","public_date":"2005-09-01T00:00:00Z","advisories":["RHSA-2005:527"],"bugzilla":"1617757","bugzilla_description":"CVE-2005-2798 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2798.json"},{"CVE":"CVE-2005-2666","severity":"low","public_date":"2005-07-07T00:00:00Z","advisories":["RHSA-2007:0257"],"bugzilla":"162681","bugzilla_description":"CVE-2005-2666 openssh vulnerable to known_hosts address harvesting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2666.json"},{"CVE":"CVE-2007-5794","severity":"low","public_date":"2005-04-09T00:00:00Z","advisories":["RHSA-2008:0389","RHSA-2008:0715"],"bugzilla":"367461","bugzilla_description":"CVE-2007-5794 nss_ldap randomly replying with wrong user's data","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nss_ldap-0:253-12.el5","nss_ldap-0:253-5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5794.json"},{"CVE":"CVE-2004-0079","severity":"important","public_date":"2004-03-17T00:00:00Z","advisories":["RHSA-2005:830","RHSA-2005:829","RHSA-2004:120","RHSA-2004:121","RHSA-2004:139"],"bugzilla":"1617140","bugzilla_description":"CVE-2004-0079 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssl096b-0:0.9.6b-22.42","openssl096b-0:0.9.6b-16.42"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0079.json"},{"CVE":"CVE-2004-2069","severity":"low","public_date":"2004-01-27T00:00:00Z","advisories":["RHSA-2005:550"],"bugzilla":"1617421","bugzilla_description":"CVE-2004-2069 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-2069.json"},{"CVE":"CVE-2003-0386","severity":"low","public_date":"2003-06-05T00:00:00Z","advisories":["RHSA-2006:0698","RHSA-2006:0298"],"bugzilla":"1617024","bugzilla_description":"CVE-2003-0386 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.9","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0386.json"},{"CVE":"CVE-2004-0175","severity":"low","public_date":"2000-09-01T00:00:00Z","advisories":["RHSA-2005:567","RHSA-2005:562","RHSA-2005:495","RHSA-2005:165","RHSA-2005:481","RHSA-2005:074","RHSA-2005:106"],"bugzilla":"1617166","bugzilla_description":"CVE-2004-0175 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["krb5-0:1.2.7-47","krb5-0:1.3.4-17","openssh-0:3.6.1p2-33.30.4","rsh-0:0.17-25.3","rsh-0:0.17-17.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0175.json"},{"CVE":"CVE-2000-1254","severity":"moderate","public_date":"2000-06-01T00:00:00Z","advisories":[],"bugzilla":"1333287","bugzilla_description":"CVE-2000-1254 openssl: Mishandling C bitwise-shift operations making easier to bypass protection mechanisms","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2000-1254.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ntp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ntp_security_api_results.json
new file mode 100644
index 0000000..336a504
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ntp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15025","severity":"low","public_date":"2020-06-23T00:00:00Z","advisories":[],"bugzilla":"1850530","bugzilla_description":"CVE-2020-15025 ntp: Resource exhaustion via memory leak with CMAC keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15025.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2004-0657","severity":"moderate","public_date":"2020-06-18T00:00:00Z","advisories":[],"bugzilla":"1850552","bugzilla_description":"CVE-2004-0657 ntp: wrong date/time offset return could lead to integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0657.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-8956","severity":"moderate","public_date":"2020-05-06T00:00:00Z","advisories":[],"bugzilla":"1848589","bugzilla_description":"CVE-2018-8956 ntp: ntpd allows remote attackers to prevent a broadcast client from synchronizing its clock","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8956.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-11868","severity":"low","public_date":"2020-03-03T00:00:00Z","advisories":["RHSA-2020:2663"],"bugzilla":"1716665","bugzilla_description":"CVE-2020-11868 ntp: DoS on client ntpd using server mode packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ntp-0:4.2.6p5-29.el7_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11868.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-13816","severity":"moderate","public_date":"2020-03-03T00:00:00Z","advisories":[],"bugzilla":"1811627","bugzilla_description":"CVE-2020-13816 ntp: ntpd using highly predictable transmit timestamps could result in timechange or DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13816.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-13817","severity":"moderate","public_date":"2020-03-03T00:00:00Z","advisories":["RHSA-2020:2663"],"bugzilla":"1811627","bugzilla_description":"CVE-2020-13817 ntp: ntpd using highly predictable transmit timestamps could result in time change or DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["ntp-0:4.2.6p5-29.el7_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13817.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-11331","severity":"low","public_date":"2019-04-18T00:00:00Z","advisories":[],"bugzilla":"1703341","bugzilla_description":"CVE-2019-11331 ntp: Using port 123 for modes where a fixed port number is not required facilitates off-path attacks.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-8936","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":[],"bugzilla":"1686605","bugzilla_description":"CVE-2019-8936 ntp: Crafted null dereference attack in authenticated mode 6 packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-12327","severity":"low","public_date":"2018-06-20T00:00:00Z","advisories":["RHSA-2019:2077","RHSA-2020:1470","RHSA-2018:3854","RHSA-2018:3853"],"bugzilla":"1593580","bugzilla_description":"CVE-2018-12327 ntp: Stack-based buffer overflow in ntpq and ntpdc allows denial of service or code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["ntp-0:4.2.6p5-5.el6_7.6","ntp-0:4.2.6p5-15.el6_10","ntp-0:4.2.6p5-28.el7_6.1","ntp-0:4.2.6p5-29.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12327.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-7182","severity":"moderate","public_date":"2018-02-27T00:00:00Z","advisories":[],"bugzilla":"1550208","bugzilla_description":"CVE-2018-7182 ntp: buffer read overrun leads information leak in ctl_getitem()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-7170","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":[],"bugzilla":"1550214","bugzilla_description":"CVE-2018-7170 ntp: Ephemeral association time spoofing additional protection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7170.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-7184","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":[],"bugzilla":"1550218","bugzilla_description":"CVE-2018-7184 ntp: Interleaved symmetric mode cannot recover from bad state","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7184.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2018-7185","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":[],"bugzilla":"1550220","bugzilla_description":"CVE-2018-7185 ntp: Unauthenticated packet can reset authenticated interleaved association","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2018-7183","severity":"moderate","public_date":"2018-02-27T00:00:00Z","advisories":[],"bugzilla":"1550223","bugzilla_description":"CVE-2018-7183 ntp: decodearr() can write beyond its buffer limit","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2017-6464","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":["RHSA-2017:3071","RHSA-2018:0855"],"bugzilla":"1433987","bugzilla_description":"CVE-2017-6464 ntp: Denial of Service via Malformed Config","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ntp-0:4.2.6p5-28.el7","ntp-0:4.2.6p5-12.el6_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6464.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-6462","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":["RHSA-2017:3071","RHSA-2018:0855"],"bugzilla":"1433995","bugzilla_description":"CVE-2017-6462 ntp: Buffer Overflow in DPTS Clock","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-121","affected_packages":["ntp-0:4.2.6p5-28.el7","ntp-0:4.2.6p5-12.el6_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6462.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-6463","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":["RHSA-2017:3071","RHSA-2018:0855"],"bugzilla":"1434002","bugzilla_description":"CVE-2017-6463 ntp: Authenticated DoS via Malicious Config Option","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-476","affected_packages":["ntp-0:4.2.6p5-28.el7","ntp-0:4.2.6p5-12.el6_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6463.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-6458","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1434005","bugzilla_description":"CVE-2017-6458 ntp: Potential Overflows in ctl_put() functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-6451","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1434011","bugzilla_description":"CVE-2017-6451 ntp: Improper use of snprintf() in mx4200_send()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6451.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-6460","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1434014","bugzilla_description":"CVE-2017-6460 ntp: Buffer Overflow in ntpq when fetching reslist from a malicious ntpd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2016-9042","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1434017","bugzilla_description":"CVE-2016-9042 ntp: DoS via origin timestamp check functionality","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6455","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1435561","bugzilla_description":"CVE-2017-6455 ntp: Privileged execution of User Library code","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6455.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.0"},{"CVE":"CVE-2017-6452","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1435564","bugzilla_description":"CVE-2017-6452 ntp: Stack Buffer Overflow from Command Line","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6452.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"1.8"},{"CVE":"CVE-2017-6459","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1435565","bugzilla_description":"CVE-2017-6459 ntp: Data Structure terminated insufficiently","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6459.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"1.8"},{"CVE":"CVE-2016-9310","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0252"],"bugzilla":"1397319","bugzilla_description":"CVE-2016-9310 ntp: Mode 6 unauthenticated trap information disclosure and DDoS vector","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-400","affected_packages":["ntp-0:4.2.6p5-25.el7_3.1","ntp-0:4.2.6p5-10.el6_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9310.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-7428","severity":"low","public_date":"2016-11-21T00:00:00Z","advisories":[],"bugzilla":"1397328","bugzilla_description":"CVE-2016-7428 ntp: Broadcast Mode Poll Interval Enforcement DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7428.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-7427","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":[],"bugzilla":"1397329","bugzilla_description":"CVE-2016-7427 ntp: Broadcast Mode Replay Prevention DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7427.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-7431","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":[],"bugzilla":"1397331","bugzilla_description":"CVE-2016-7431 ntp: Zero Origin timestamp regression","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7431.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-7434","severity":"low","public_date":"2016-11-21T00:00:00Z","advisories":[],"bugzilla":"1397334","bugzilla_description":"CVE-2016-7434 ntp: read_mru_list() does inadequate incoming packet checks","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7434.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-7429","severity":"low","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0252"],"bugzilla":"1397341","bugzilla_description":"CVE-2016-7429 ntp: Attack on interface selection","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ntp-0:4.2.6p5-25.el7_3.1","ntp-0:4.2.6p5-10.el6_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7429.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-7426","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0252"],"bugzilla":"1397345","bugzilla_description":"CVE-2016-7426 ntp: Client rate limiting and server responses","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["ntp-0:4.2.6p5-25.el7_3.1","ntp-0:4.2.6p5-10.el6_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7426.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7433","severity":"low","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0252"],"bugzilla":"1397347","bugzilla_description":"CVE-2016-7433 ntp: Broken initial sync calculations regression","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-682","affected_packages":["ntp-0:4.2.6p5-25.el7_3.1","ntp-0:4.2.6p5-10.el6_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7433.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2016-9311","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0252"],"bugzilla":"1398350","bugzilla_description":"CVE-2016-9311 ntp: Null pointer dereference when trap service is enabled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["ntp-0:4.2.6p5-25.el7_3.1","ntp-0:4.2.6p5-10.el6_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-9312","severity":"important","public_date":"2016-11-21T00:00:00Z","advisories":[],"bugzilla":"1410014","bugzilla_description":"CVE-2016-9312 ntp: DoS by oversized UDP packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9312.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-4954","severity":"moderate","public_date":"2016-06-02T00:00:00Z","advisories":[],"bugzilla":"1302225","bugzilla_description":"CVE-2016-4954 ntp: partial processing of spoofed packets","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4954.json"},{"CVE":"CVE-2016-4957","severity":"moderate","public_date":"2016-06-02T00:00:00Z","advisories":[],"bugzilla":"1340850","bugzilla_description":"CVE-2016-4957 ntp: crypto-NAK DoS (incorrect fix for CVE-2016-1547)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4957.json"},{"CVE":"CVE-2016-4953","severity":"low","public_date":"2016-06-02T00:00:00Z","advisories":[],"bugzilla":"1340852","bugzilla_description":"CVE-2016-4953 ntp: bad authentication demobilizes ephemeral associations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4953.json"},{"CVE":"CVE-2016-4955","severity":"low","public_date":"2016-06-02T00:00:00Z","advisories":[],"bugzilla":"1340858","bugzilla_description":"CVE-2016-4955 ntp: autokey association reset","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4955.json"},{"CVE":"CVE-2016-4956","severity":"low","public_date":"2016-06-02T00:00:00Z","advisories":[],"bugzilla":"1340860","bugzilla_description":"CVE-2016-4956 ntp: broadcast interleave (incomplete fix for CVE-2016-1548)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4956.json"},{"CVE":"CVE-2016-1547","severity":"moderate","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:1552","RHSA-2016:1141"],"bugzilla":"1331461","bugzilla_description":"CVE-2016-1547 ntp: crypto-NAK preemptable association denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ntp-0:4.2.6p5-10.el6.1","ntp-0:4.2.6p5-5.el6_7.5","ntp-0:4.2.6p5-22.el7_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1547.json"},{"CVE":"CVE-2016-1548","severity":"moderate","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:1552","RHSA-2016:1141"],"bugzilla":"1331462","bugzilla_description":"CVE-2016-1548 ntp: ntpd switching to interleaved mode with spoofed packets","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["ntp-0:4.2.6p5-10.el6.1","ntp-0:4.2.6p5-5.el6_7.5","ntp-0:4.2.6p5-22.el7_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1548.json"},{"CVE":"CVE-2016-1549","severity":"low","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1331463","bugzilla_description":"CVE-2016-1549 ntp: ephemeral association time spoofing","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1549.json"},{"CVE":"CVE-2016-1550","severity":"low","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:1552","RHSA-2016:1141"],"bugzilla":"1331464","bugzilla_description":"CVE-2016-1550 ntp: libntp message digest disclosure","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["ntp-0:4.2.6p5-10.el6.1","ntp-0:4.2.6p5-5.el6_7.5","ntp-0:4.2.6p5-22.el7_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1550.json"},{"CVE":"CVE-2016-1551","severity":"low","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1331465","bugzilla_description":"CVE-2016-1551 ntp: ntpd reference clock impersonation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1551.json"},{"CVE":"CVE-2016-2516","severity":"moderate","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1331466","bugzilla_description":"CVE-2016-2516 ntp: assertion failure in ntpd on duplicate IPs on unconfig directives","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2516.json"},{"CVE":"CVE-2016-2517","severity":null,"public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1331467","bugzilla_description":"CVE-2016-2517 ntp: certain remote configuration values not properly validated","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2517.json"},{"CVE":"CVE-2016-2518","severity":"low","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:1552","RHSA-2016:1141"],"bugzilla":"1331468","bugzilla_description":"CVE-2016-2518 ntp: out-of-bounds references on crafted packet","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["ntp-0:4.2.6p5-10.el6.1","ntp-0:4.2.6p5-5.el6_7.5","ntp-0:4.2.6p5-22.el7_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2518.json"},{"CVE":"CVE-2016-2519","severity":"low","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1331469","bugzilla_description":"CVE-2016-2519 ntp:  ctl_getitem() return value not always checked","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2519.json"},{"CVE":"CVE-2016-0727","severity":"moderate","public_date":"2016-01-21T00:00:00Z","advisories":[],"bugzilla":"1382369","bugzilla_description":"CVE-2016-0727 ntp: Privilege escalation via cronjob","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0727.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-7974","severity":"low","public_date":"2016-01-20T00:00:00Z","advisories":["RHSA-2016:2583"],"bugzilla":"1297471","bugzilla_description":"CVE-2015-7974 ntp: missing key check allows impersonation between authenticated peers (VU#357792)","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-304","affected_packages":["ntp-0:4.2.6p5-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7974.json"},{"CVE":"CVE-2015-8138","severity":"important","public_date":"2016-01-20T00:00:00Z","advisories":["RHSA-2016:0063"],"bugzilla":"1299442","bugzilla_description":"CVE-2015-8138 ntp: missing check for zero originate timestamp","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-294","affected_packages":["ntp-0:4.2.6p5-5.el6_7.4","ntp-0:4.2.6p5-22.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8138.json"},{"CVE":"CVE-2015-7973","severity":"moderate","public_date":"2016-01-20T00:00:00Z","advisories":[],"bugzilla":"1300266","bugzilla_description":"CVE-2015-7973 ntp: replay attack on authenticated broadcast mode","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-294","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7973.json"},{"CVE":"CVE-2015-7975","severity":"low","public_date":"2016-01-20T00:00:00Z","advisories":[],"bugzilla":"1300267","bugzilla_description":"CVE-2015-7975 ntp: nextvar() missing length check in ntpq","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7975.json"},{"CVE":"CVE-2015-7976","severity":"low","public_date":"2016-01-20T00:00:00Z","advisories":[],"bugzilla":"1300268","bugzilla_description":"CVE-2015-7976 ntp: 'ntpq saveconfig' command allows dangerous characters in filenames","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7976.json"},{"CVE":"CVE-2015-7977","severity":"moderate","public_date":"2016-01-20T00:00:00Z","advisories":["RHSA-2016:0780","RHSA-2016:2583"],"bugzilla":"1300269","bugzilla_description":"CVE-2015-7977 ntp: restriction list NULL pointer dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["ntp-0:4.2.6p5-25.el7","ntp-0:4.2.6p5-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7977.json"},{"CVE":"CVE-2015-7978","severity":"moderate","public_date":"2016-01-20T00:00:00Z","advisories":["RHSA-2016:0780","RHSA-2016:2583"],"bugzilla":"1300270","bugzilla_description":"CVE-2015-7978 ntp: stack exhaustion in recursive traversal of restriction list","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["ntp-0:4.2.6p5-25.el7","ntp-0:4.2.6p5-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7978.json"},{"CVE":"CVE-2015-7979","severity":"moderate","public_date":"2016-01-20T00:00:00Z","advisories":["RHSA-2016:1552","RHSA-2016:1141","RHSA-2016:2583"],"bugzilla":"1300271","bugzilla_description":"CVE-2015-7979 ntp: off-path denial of service on authenticated broadcast mode","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-20","affected_packages":["ntp-0:4.2.6p5-25.el7","ntp-0:4.2.6p5-10.el6.1","ntp-0:4.2.6p5-5.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7979.json"},{"CVE":"CVE-2015-8158","severity":"low","public_date":"2016-01-20T00:00:00Z","advisories":["RHSA-2016:2583"],"bugzilla":"1300273","bugzilla_description":"CVE-2015-8158 ntp: potential infinite loop in ntpq","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["ntp-0:4.2.6p5-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8158.json"},{"CVE":"CVE-2015-8140","severity":"moderate","public_date":"2016-01-20T00:00:00Z","advisories":[],"bugzilla":"1300651","bugzilla_description":"CVE-2015-8140 ntp: ntpq protocol vulnerable to replay attacks","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-294","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8140.json"},{"CVE":"CVE-2015-8139","severity":"moderate","public_date":"2016-01-20T00:00:00Z","advisories":[],"bugzilla":"1300654","bugzilla_description":"CVE-2015-8139 ntp: ntpq and ntpdc disclose origin timestamp to unauthenticated clients","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8139.json"},{"CVE":"CVE-2015-7704","severity":"important","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:2520","RHSA-2015:1930"],"bugzilla":"1271070","bugzilla_description":"CVE-2015-7704 ntp: disabling synchronization via crafted KoD packet","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-20","affected_packages":["ntp-0:4.2.6p5-3.el6_6.1","ntp-0:4.2.6p5-5.el6_7.2","ntp-0:4.2.6p5-19.el7_1.3","ntp-0:4.2.6p5-2.el6_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7704.json"},{"CVE":"CVE-2015-5300","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1930"],"bugzilla":"1271076","bugzilla_description":"CVE-2015-5300 ntp: MITM attacker can force ntpd to make a step larger than the panic threshold","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["ntp-0:4.2.6p5-5.el6_7.2","ntp-0:4.2.6p5-19.el7_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5300.json"},{"CVE":"CVE-2015-7705","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274184","bugzilla_description":"CVE-2015-7705 ntp: denial of service by trigerring rate limiting on NTP server","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7705.json"},{"CVE":"CVE-2015-7691","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0780","RHSA-2016:2583"],"bugzilla":"1274254","bugzilla_description":"CVE-2015-7691 CVE-2015-7692 CVE-2015-7702 ntp: incomplete checks in ntp_crypto.c","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["ntp-0:4.2.6p5-25.el7","ntp-0:4.2.6p5-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7691.json"},{"CVE":"CVE-2015-7692","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0780","RHSA-2016:2583"],"bugzilla":"1274254","bugzilla_description":"CVE-2015-7691 CVE-2015-7692 CVE-2015-7702 ntp: incomplete checks in ntp_crypto.c","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["ntp-0:4.2.6p5-25.el7","ntp-0:4.2.6p5-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7692.json"},{"CVE":"CVE-2015-7702","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0780","RHSA-2016:2583"],"bugzilla":"1274254","bugzilla_description":"CVE-2015-7691 CVE-2015-7692 CVE-2015-7702 ntp: incomplete checks in ntp_crypto.c","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["ntp-0:4.2.6p5-25.el7","ntp-0:4.2.6p5-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7702.json"},{"CVE":"CVE-2015-7701","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0780","RHSA-2016:2583"],"bugzilla":"1274255","bugzilla_description":"CVE-2015-7701 ntp: slow memory leak in CRYPTO_ASSOC","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["ntp-0:4.2.6p5-25.el7","ntp-0:4.2.6p5-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7701.json"},{"CVE":"CVE-2015-7848","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274256","bugzilla_description":"CVE-2015-7848 ntp: multiple integer overflow read access violations","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7848.json"},{"CVE":"CVE-2015-7849","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274257","bugzilla_description":"CVE-2015-7849 ntp: trusted keys memory corruption vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7849.json"},{"CVE":"CVE-2015-7850","severity":"low","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274258","bugzilla_description":"CVE-2015-7850 ntp: remote configuration denial of service vulnerability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7850.json"},{"CVE":"CVE-2015-7851","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274260","bugzilla_description":"CVE-2015-7851 ntp: saveconfig directory traversal vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7851.json"},{"CVE":"CVE-2015-7852","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0780","RHSA-2016:2583"],"bugzilla":"1274261","bugzilla_description":"CVE-2015-7852 ntp: ntpq atoascii memory corruption vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":["ntp-0:4.2.6p5-25.el7","ntp-0:4.2.6p5-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7852.json"},{"CVE":"CVE-2015-7853","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274262","bugzilla_description":"CVE-2015-7853 ntp: reference clock memory corruption vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7853.json"},{"CVE":"CVE-2015-7854","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274263","bugzilla_description":"CVE-2015-7854 ntp: password length memory corruption vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7854.json"},{"CVE":"CVE-2015-7855","severity":"low","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274264","bugzilla_description":"CVE-2015-7855 ntp: ASSERT in decodenetnum() on invalid values","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7855.json"},{"CVE":"CVE-2015-7871","severity":"important","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274265","bugzilla_description":"CVE-2015-7871 ntp: crypto-NAK symmetric association authentication bypass vulnerability","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7871.json"},{"CVE":"CVE-2015-5194","severity":"low","public_date":"2015-08-25T00:00:00Z","advisories":["RHSA-2016:0780","RHSA-2016:2583"],"bugzilla":"1254542","bugzilla_description":"CVE-2015-5194 ntp: crash with crafted logconfig configuration command","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","CWE":"CWE-665->CWE-787","affected_packages":["ntp-0:4.2.6p5-25.el7","ntp-0:4.2.6p5-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5194.json"},{"CVE":"CVE-2015-5195","severity":"low","public_date":"2015-08-25T00:00:00Z","advisories":["RHSA-2016:0780","RHSA-2016:2583"],"bugzilla":"1254544","bugzilla_description":"CVE-2015-5195 ntp: ntpd crash when processing config commands with statistics type","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","CWE":"CWE-476","affected_packages":["ntp-0:4.2.6p5-25.el7","ntp-0:4.2.6p5-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5195.json"},{"CVE":"CVE-2015-5196","severity":"low","public_date":"2015-08-25T00:00:00Z","advisories":["RHSA-2016:2583"],"bugzilla":"1254547","bugzilla_description":"CVE-2015-7703 ntp: config command can be used to set the pidfile and drift file paths","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","CWE":"CWE-73","affected_packages":["ntp-0:4.2.6p5-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5196.json"},{"CVE":"CVE-2015-7703","severity":"low","public_date":"2015-08-25T00:00:00Z","advisories":["RHSA-2016:0780","RHSA-2016:2583"],"bugzilla":"1254547","bugzilla_description":"CVE-2015-7703 ntp: config command can be used to set the pidfile and drift file paths","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","CWE":"CWE-73","affected_packages":["ntp-0:4.2.6p5-25.el7","ntp-0:4.2.6p5-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7703.json"},{"CVE":"CVE-2015-5219","severity":"low","public_date":"2015-08-25T00:00:00Z","advisories":["RHSA-2016:0780","RHSA-2016:2583"],"bugzilla":"1255118","bugzilla_description":"CVE-2015-5219 ntp: infinite loop in sntp processing crafted packet","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["ntp-0:4.2.6p5-25.el7","ntp-0:4.2.6p5-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5219.json"},{"CVE":"CVE-2015-5146","severity":"low","public_date":"2015-06-30T00:00:00Z","advisories":[],"bugzilla":"1238136","bugzilla_description":"CVE-2015-5146 ntp: ntpd control message crash on crafted NUL-byte in configuration directive (VU#668167)","cvss_score":1.4,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5146.json"},{"CVE":"CVE-2015-3405","severity":"low","public_date":"2015-04-09T00:00:00Z","advisories":["RHSA-2015:1459","RHSA-2015:2231"],"bugzilla":"1210324","bugzilla_description":"CVE-2015-3405 ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-628->(CWE-835|CWE-330)","affected_packages":["ntp-0:4.2.6p5-5.el6","ntp-0:4.2.6p5-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3405.json"},{"CVE":"CVE-2015-1798","severity":"low","public_date":"2015-04-07T00:00:00Z","advisories":["RHSA-2015:1459","RHSA-2015:2231"],"bugzilla":"1199430","bugzilla_description":"CVE-2015-1798 ntp: ntpd accepts unauthenticated packets with symmetric key crypto","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-347","affected_packages":["ntp-0:4.2.6p5-5.el6","ntp-0:4.2.6p5-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1798.json"},{"CVE":"CVE-2015-1799","severity":"moderate","public_date":"2015-04-07T00:00:00Z","advisories":["RHSA-2015:1459","RHSA-2015:2231"],"bugzilla":"1199435","bugzilla_description":"CVE-2015-1799 ntp: authentication doesn't protect symmetric associations against DoS attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ntp-0:4.2.6p5-5.el6","ntp-0:4.2.6p5-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1799.json"},{"CVE":"CVE-2014-9298","severity":"moderate","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:1459","RHSA-2015:2231"],"bugzilla":"1184572","bugzilla_description":"CVE-2014-9298 CVE-2014-9751 ntp: drop packets with source address ::1","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["ntp-0:4.2.6p5-5.el6","ntp-0:4.2.6p5-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9298.json"},{"CVE":"CVE-2014-9751","severity":"moderate","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:1459","RHSA-2015:2231"],"bugzilla":"1184572","bugzilla_description":"CVE-2014-9298 CVE-2014-9751 ntp: drop packets with source address ::1","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["ntp-0:4.2.6p5-5.el6","ntp-0:4.2.6p5-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9751.json"},{"CVE":"CVE-2014-9297","severity":"low","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:1459","RHSA-2015:2231"],"bugzilla":"1184573","bugzilla_description":"CVE-2014-9297 CVE-2014-9750 ntp: vallen in extension fields are not validated","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["ntp-0:4.2.6p5-5.el6","ntp-0:4.2.6p5-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9297.json"},{"CVE":"CVE-2014-9750","severity":"low","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:1459","RHSA-2015:2231"],"bugzilla":"1184573","bugzilla_description":"CVE-2014-9297 CVE-2014-9750 ntp: vallen in extension fields are not validated","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["ntp-0:4.2.6p5-5.el6","ntp-0:4.2.6p5-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9750.json"},{"CVE":"CVE-2014-9293","severity":"moderate","public_date":"2014-12-19T00:00:00Z","advisories":["RHSA-2014:2025","RHSA-2015:0104","RHSA-2014:2024"],"bugzilla":"1176032","bugzilla_description":"CVE-2014-9293 ntp: automatic generation of weak default key in config_auth()","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-338","affected_packages":["ntp-0:4.2.2p1-18.el5_11","ntp-0:4.2.6p5-19.el7_0","ntp-0:4.2.6p5-2.el6_5","ntp-0:4.2.6p5-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9293.json"},{"CVE":"CVE-2014-9294","severity":"moderate","public_date":"2014-12-19T00:00:00Z","advisories":["RHSA-2014:2025","RHSA-2015:0104","RHSA-2014:2024"],"bugzilla":"1176035","bugzilla_description":"CVE-2014-9294 ntp: ntp-keygen uses weak random number generator and seed when generating MD5 keys","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"(CWE-335|CWE-338)","affected_packages":["ntp-0:4.2.2p1-18.el5_11","ntp-0:4.2.6p5-19.el7_0","ntp-0:4.2.6p5-2.el6_5","ntp-0:4.2.6p5-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9294.json"},{"CVE":"CVE-2014-9295","severity":"important","public_date":"2014-12-19T00:00:00Z","advisories":["RHSA-2014:2025","RHSA-2015:0104","RHSA-2014:2024"],"bugzilla":"1176037","bugzilla_description":"CVE-2014-9295 ntp: Multiple buffer overflows via specially-crafted packets","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["ntp-0:4.2.2p1-18.el5_11","ntp-0:4.2.6p5-19.el7_0","ntp-0:4.2.6p5-2.el6_5","ntp-0:4.2.6p5-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9295.json"},{"CVE":"CVE-2014-9296","severity":"low","public_date":"2014-12-19T00:00:00Z","advisories":["RHSA-2015:0104","RHSA-2014:2024"],"bugzilla":"1176040","bugzilla_description":"CVE-2014-9296 ntp: receive() missing return on error","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-390","affected_packages":["ntp-0:4.2.6p5-19.el7_0","ntp-0:4.2.6p5-2.el6_5","ntp-0:4.2.6p5-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9296.json"},{"CVE":"CVE-2014-5209","severity":"low","public_date":"2014-08-25T00:00:00Z","advisories":[],"bugzilla":"1805392","bugzilla_description":"CVE-2014-5209 ntp: Information Disclosure vulnerability via GET_RESTRICT control message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5209.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2013-5211","severity":"moderate","public_date":"2010-04-20T00:00:00Z","advisories":[],"bugzilla":"1047854","bugzilla_description":"CVE-2013-5211 ntp: DoS in monlist feature in ntpd","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5211.json"},{"CVE":"CVE-2009-3563","severity":"moderate","public_date":"2009-12-08T00:00:00Z","advisories":["RHSA-2009:1648","RHSA-2009:1651"],"bugzilla":"531213","bugzilla_description":"CVE-2009-3563 ntpd: DoS with mode 7 packets (VU#568372)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ntp-0:4.2.0.a.20040617-8.el4_8.1","ntp-0:4.2.2p1-9.el5_4.1","ntp-0:4.1.2-6.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3563.json"},{"CVE":"CVE-2009-1252","severity":"important","public_date":"2009-05-18T00:00:00Z","advisories":["RHSA-2009:1040","RHSA-2009:1039"],"bugzilla":"499694","bugzilla_description":"CVE-2009-1252 ntp: remote arbitrary code execution vulnerability if autokeys is enabled","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["ntp-0:4.2.0.a.20040617-8.el4_7.2","ntp-0:4.2.2p1-9.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1252.json"},{"CVE":"CVE-2009-0159","severity":"low","public_date":"2009-04-09T00:00:00Z","advisories":["RHSA-2009:1040","RHSA-2009:1039","RHSA-2009:1651"],"bugzilla":"490617","bugzilla_description":"CVE-2009-0159 ntp: buffer overflow in ntpq","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["ntp-0:4.2.0.a.20040617-8.el4_7.2","ntp-0:4.2.2p1-9.el5_3.2","ntp-0:4.1.2-6.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0159.json"},{"CVE":"CVE-2009-0021","severity":"moderate","public_date":"2009-01-07T00:00:00Z","advisories":["RHSA-2009:0046"],"bugzilla":"476807","bugzilla_description":"CVE-2009-0021 ntp incorrectly checks for malformed signatures","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["ntp-0:4.2.0.a.20040617-8.el4_7.1","ntp-0:4.2.2p1-9.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0021.json"},{"CVE":"CVE-2005-2496","severity":"low","public_date":"2005-08-25T00:00:00Z","advisories":["RHSA-2006:0393"],"bugzilla":"1617728","bugzilla_description":"CVE-2005-2496 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ntp-0:4.2.0.a.20040617-4.EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2496.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ntpdate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ntpdate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ntpdate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ntsysv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ntsysv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ntsysv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numactl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numactl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numactl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numactl-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numactl-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numactl-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numactl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numactl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numactl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numad_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numad_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numpy-f2py_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numpy-f2py_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numpy-f2py_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numpy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numpy_security_api_results.json
new file mode 100644
index 0000000..9cc36ba
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/numpy_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-6446","severity":"moderate","public_date":"2019-01-16T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2019:3704"],"bugzilla":"1667950","bugzilla_description":"CVE-2019-6446 numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-20","affected_packages":["python27:2.7-8010020190903182548.51c94b97","numpy-1:1.14.3-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-12852","severity":"low","public_date":"2017-08-15T00:00:00Z","advisories":[],"bugzilla":"1483686","bugzilla_description":"CVE-2017-12852 numpy: Missing input validation on empty list or ndarray in numpy.pad function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12852.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2014-1858","severity":"low","public_date":"2014-02-05T00:00:00Z","advisories":[],"bugzilla":"1062009","bugzilla_description":"CVE-2014-1858 CVE-2014-1859 numpy: f2py insecure temporary file use","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1858.json"},{"CVE":"CVE-2014-1859","severity":"low","public_date":"2014-02-05T00:00:00Z","advisories":[],"bugzilla":"1062009","bugzilla_description":"CVE-2014-1858 CVE-2014-1859 numpy: f2py insecure temporary file use","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1859.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nuxwdog-client-java_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nuxwdog-client-java_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nuxwdog-client-java_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nuxwdog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nuxwdog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nuxwdog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nvme-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nvme-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nvme-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nvmetcli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nvmetcli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/nvmetcli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/obex-data-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/obex-data-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/obex-data-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/obexd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/obexd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/obexd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/objectweb-asm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/objectweb-asm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/objectweb-asm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oddjob-mkhomedir_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oddjob-mkhomedir_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oddjob-mkhomedir_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oddjob_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oddjob_security_api_results.json
new file mode 100644
index 0000000..d6be1c9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oddjob_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10737","severity":"moderate","public_date":"2020-05-07T00:00:00Z","advisories":[],"bugzilla":"1833042","bugzilla_description":"CVE-2020-10737 oddjob: race condition in oddjob_selinux_mkdir function in mkhomedir.c can lead to symlink attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10737.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular-part_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular-part_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular-part_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular_security_api_results.json
new file mode 100644
index 0000000..e1c956c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/okular_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9359","severity":"moderate","public_date":"2020-03-12T00:00:00Z","advisories":["RHSA-2020:4024"],"bugzilla":"1815651","bugzilla_description":"CVE-2020-9359 okular: local binary execution via specially crafted PDF files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":["okular-0:4.10.5-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9359.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000801","severity":"moderate","public_date":"2018-09-06T00:00:00Z","advisories":["RHSA-2020:1173"],"bugzilla":"1626265","bugzilla_description":"CVE-2018-1000801 okular: Directory traversal in function unpackDocumentArchive() in core/document.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["okular-0:4.10.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000801.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/omping_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/omping_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/omping_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-address-resolution_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-address-resolution_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-address-resolution_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-basic-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-basic-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-basic-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-fastfabric_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-fastfabric_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-fastfabric_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-fm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-fm_security_api_results.json
new file mode 100644
index 0000000..acff3df
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-fm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5232","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1257098","bugzilla_description":"CVE-2015-5232 opa-fm, opa-ff: various /tmp races","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5232.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-libopamgt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-libopamgt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opa-libopamgt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opal-prd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opal-prd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opal-prd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opal_security_api_results.json
new file mode 100644
index 0000000..64003db
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opal_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2007-4924","severity":"moderate","public_date":"2007-09-17T00:00:00Z","advisories":["RHSA-2007:0957"],"bugzilla":"296371","bugzilla_description":"CVE-2007-4924 ekiga remote crash caused by insufficient input validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["opal-0:2.2.2-1.1.0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4924.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/open-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/open-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/open-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/open-vm-tools-desktop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/open-vm-tools-desktop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/open-vm-tools-desktop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/open-vm-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/open-vm-tools_security_api_results.json
new file mode 100644
index 0000000..144d72d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/open-vm-tools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-6969","severity":"moderate","public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1603048","bugzilla_description":"CVE-2018-6969 open-vm-tools: Out-of-bounds read in HGFS allows for information disclosure or potential privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6969.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"6.6"},{"CVE":"CVE-2015-5191","severity":"low","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1253689","bugzilla_description":"CVE-2015-5191 open-vm-tools: /tmp race conditions in the libDeployPkg component","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5191.json"},{"CVE":"CVE-2014-4199","severity":"low","public_date":"2014-08-26T00:00:00Z","advisories":[],"bugzilla":"1165899","bugzilla_description":"CVE-2014-4199 open-vm-tools: insecure temporary file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4199.json"},{"CVE":"CVE-2014-4200","severity":"low","public_date":"2014-08-26T00:00:00Z","advisories":[],"bugzilla":"1165900","bugzilla_description":"CVE-2014-4200 open-vm-tools: vm-support's diagnostics archive created with world-readable permissions","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"(CWE-377|CWE-732)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4200.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencc_security_api_results.json
new file mode 100644
index 0000000..6954969
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-16982","severity":"low","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1629955","bugzilla_description":"CVE-2018-16982 opencc: out-of-bounds keyOffset and valueOffset values in BinaryDict::NewFromFile in BinaryDict.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16982.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openchange_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openchange_security_api_results.json
new file mode 100644
index 0000000..6439c64
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openchange_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-1182","severity":"critical","public_date":"2012-04-10T00:00:00Z","advisories":["RHSA-2013:0515","RHSA-2013:0506","RHSA-2012:0465","RHSA-2012:0466","RHSA-2012:0478"],"bugzilla":"804093","bugzilla_description":"CVE-2012-1182 samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-122","affected_packages":["samba4-0:4.0.0-55.el6.rc4","samba-0:3.5.6-86.el6_1.5","openchange-0:1.0-4.el6","evolution-mapi-0:0.28.3-12.el6","samba-0:3.5.4-68.el6_0.3","samba-0:3.0.33-3.36.el4","samba-0:3.0.33-3.29.el5_6.5","samba3x-0:3.5.4-0.70.el5_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1182.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-ccatok_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-ccatok_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-ccatok_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-ep11tok_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-ep11tok_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-ep11tok_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-icatok_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-icatok_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-icatok_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-icsftok_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-icsftok_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-icsftok_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-swtok_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-swtok_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-swtok_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-tpmtok_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-tpmtok_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki-tpmtok_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki_security_api_results.json
new file mode 100644
index 0000000..d450653
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opencryptoki_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-4454","severity":"moderate","public_date":"2012-09-07T00:00:00Z","advisories":[],"bugzilla":"730636","bugzilla_description":"CVE-2012-4454 CVE-2012-4455 opencryptoki: insecure handling of files in the /tmp directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4454.json"},{"CVE":"CVE-2012-4455","severity":"moderate","public_date":"2012-09-07T00:00:00Z","advisories":[],"bugzilla":"730636","bugzilla_description":"CVE-2012-4454 CVE-2012-4455 opencryptoki: insecure handling of files in the /tmp directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4455.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opendnssec_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opendnssec_security_api_results.json
new file mode 100644
index 0000000..e0fe38a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opendnssec_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-5582","severity":"low","public_date":"2019-11-25T00:00:00Z","advisories":[],"bugzilla":"1777925","bugzilla_description":"CVE-2012-5582 opendnssec: misuses libcurl API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5582.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openhpi-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openhpi-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openhpi-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openhpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openhpi_security_api_results.json
new file mode 100644
index 0000000..06b04d9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openhpi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-3248","severity":"low","public_date":"2014-02-10T00:00:00Z","advisories":["RHSA-2015:2369"],"bugzilla":"1233520","bugzilla_description":"CVE-2015-3248 openhpi: world writable /var/lib/openhpi directory","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-552","affected_packages":["openhpi-0:3.4.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3248.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openjade_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openjade_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openjade_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openjpeg-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openjpeg-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openjpeg-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openjpeg2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openjpeg2_security_api_results.json
new file mode 100644
index 0000000..a2fa456
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openjpeg2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15389","severity":"moderate","public_date":"2020-06-28T00:00:00Z","advisories":[],"bugzilla":"1852869","bugzilla_description":"CVE-2020-15389 openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15389.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-8112","severity":"important","public_date":"2020-02-07T11:35:00Z","advisories":["RHSA-2020:0550","RHSA-2020:0570","RHSA-2020:0569"],"bugzilla":"1800535","bugzilla_description":"CVE-2020-8112 openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["openjpeg2-0:2.3.0-10.el8_0","openjpeg2-0:2.3.1-3.el8_1","openjpeg2-0:2.3.1-3.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8112.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6851","severity":"important","public_date":"2020-01-13T00:00:00Z","advisories":["RHSA-2020:0274","RHSA-2020:0296","RHSA-2020:0262"],"bugzilla":"1790511","bugzilla_description":"CVE-2020-6851 openjpeg: Heap-based buffer overflow in opj_t1_clbl_decode_processor()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["openjpeg2-0:2.3.1-2.el7_7","openjpeg2-0:2.3.1-2.el8_1","openjpeg2-0:2.3.0-9.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6851.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-21010","severity":"moderate","public_date":"2019-09-05T00:00:00Z","advisories":[],"bugzilla":"1755769","bugzilla_description":"CVE-2018-21010 openjpeg: heap buffer overflow in color_apply_icc_profile in bin/common/color.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-21010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-20845","severity":"low","public_date":"2019-06-26T00:00:00Z","advisories":[],"bugzilla":"1728505","bugzilla_description":"CVE-2018-20845 openjpeg: division-by-zero in function pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20845.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20847","severity":"low","public_date":"2019-06-26T00:00:00Z","advisories":[],"bugzilla":"1728509","bugzilla_description":"CVE-2018-20847 openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20847.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-20846","severity":"moderate","public_date":"2019-06-26T00:00:00Z","advisories":[],"bugzilla":"1728513","bugzilla_description":"CVE-2018-20846 openjpeg: out-of-bounds read in functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-12973","severity":"low","public_date":"2019-06-26T00:00:00Z","advisories":[],"bugzilla":"1732270","bugzilla_description":"CVE-2019-12973 openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12973.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18088","severity":"low","public_date":"2018-10-09T00:00:00Z","advisories":[],"bugzilla":"1638558","bugzilla_description":"CVE-2018-18088 openjpeg2: NULL pointer dereference in the imagetopnm function of jp2/convert.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18088.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16375","severity":"moderate","public_date":"2018-09-03T00:00:00Z","advisories":[],"bugzilla":"1626088","bugzilla_description":"CVE-2018-16375 openjpeg: Heap-based buffer overflow in pnmtoimage function in bin/jpwl/convert.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16375.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16376","severity":"moderate","public_date":"2018-09-03T00:00:00Z","advisories":[],"bugzilla":"1626095","bugzilla_description":"CVE-2018-16376 openjpeg: Heap-based buffer overflow in function t2_encode_packet in src/lib/openmj2/t2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16376.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2018-14423","severity":"low","public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609909","bugzilla_description":"CVE-2018-14423 openjpeg2: Division-by-zero vulnerabilities in lib/openjp3d/pi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14423.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6616","severity":"low","public_date":"2018-02-04T00:00:00Z","advisories":[],"bugzilla":"1542321","bugzilla_description":"CVE-2018-6616 openjpeg2: Excessive iteration in openjp2/t1.c:opj_t1_encode_cblks can allow for denial of service via crafted BMP file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5785","severity":"low","public_date":"2018-01-19T00:00:00Z","advisories":[],"bugzilla":"1537758","bugzilla_description":"CVE-2018-5785 openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5785.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5727","severity":"low","public_date":"2018-01-13T00:00:00Z","advisories":[],"bugzilla":"1536552","bugzilla_description":"CVE-2018-5727 openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5727.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap-clients_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap-clients_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap-clients_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap-servers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap-servers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap-servers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap_security_api_results.json
new file mode 100644
index 0000000..565f0bd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openldap_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12243","severity":"moderate","public_date":"2020-04-28T00:00:00Z","advisories":["RHSA-2020:4041"],"bugzilla":"1833535","bugzilla_description":"CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openldap-0:2.4.44-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12243.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15719","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":["RHBA-2019:3674","RHBA-2019:3303"],"bugzilla":"1853350","bugzilla_description":"CVE-2020-15719 openldap: Certificate validation incorrectly matches name against CN-ID","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":["openldap-0:2.4.46-10.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15719.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-13057","severity":"moderate","public_date":"2019-07-25T00:00:00Z","advisories":[],"bugzilla":"1730472","bugzilla_description":"CVE-2019-13057 openldap: Information disclosure issue in slapd component","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13057.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-13565","severity":"moderate","public_date":"2019-07-24T00:00:00Z","advisories":[],"bugzilla":"1730477","bugzilla_description":"CVE-2019-13565 openldap: ACL restrictions bypass due to sasl_ssf value being set permanently","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13565.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-17740","severity":"moderate","public_date":"2017-10-20T00:00:00Z","advisories":[],"bugzilla":"1527076","bugzilla_description":"CVE-2017-17740 openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-14159","severity":"low","public_date":"2017-07-28T00:00:00Z","advisories":[],"bugzilla":"1488751","bugzilla_description":"CVE-2017-14159 openldap: Privilege escalation via PID file manipulation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14159.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-9287","severity":"moderate","public_date":"2017-05-17T00:00:00Z","advisories":["RHSA-2017:1852"],"bugzilla":"1456712","bugzilla_description":"CVE-2017-9287 openldap: Double free vulnerability in servers/slapd/back-mdb/search.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["openldap-0:2.4.44-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9287.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-4984","severity":"low","public_date":"2016-06-13T00:00:00Z","advisories":[],"bugzilla":"1346120","bugzilla_description":"CVE-2016-4984 openldap-servers: /usr/libexec/openldap/generate-server-cert.sh create world readable password file","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4984.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2015-5244","severity":"moderate","public_date":"2015-09-15T00:00:00Z","advisories":[],"bugzilla":"1259216","bugzilla_description":"CVE-2015-5244 mod_nss: incorrect ciphersuite parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5244.json"},{"CVE":"CVE-2015-6908","severity":"important","public_date":"2015-09-09T00:00:00Z","advisories":["RHSA-2015:1840"],"bugzilla":"1262393","bugzilla_description":"CVE-2015-6908 openldap: ber_get_next denial of service vulnerability","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["openldap-0:2.3.43-29.el5_11","openldap-0:2.4.39-7.el7_1","openldap-0:2.4.40-6.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6908.json"},{"CVE":"CVE-2015-3276","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":["RHSA-2015:2131"],"bugzilla":"1238322","bugzilla_description":"CVE-2015-3276 openldap: incorrect multi-keyword mode cipherstring parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-682","affected_packages":["openldap-0:2.4.40-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3276.json"},{"CVE":"CVE-2015-1545","severity":"moderate","public_date":"2015-02-03T00:00:00Z","advisories":[],"bugzilla":"1190643","bugzilla_description":"CVE-2015-1545 openldap: slapd crashes on search with deref control and empty attr list","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1545.json"},{"CVE":"CVE-2015-1546","severity":"moderate","public_date":"2015-02-03T00:00:00Z","advisories":[],"bugzilla":"1190644","bugzilla_description":"CVE-2015-1546 openldap: slapd crash in valueReturnFilter cleanup","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1546.json"},{"CVE":"CVE-2014-8182","severity":"low","public_date":"2014-07-21T00:00:00Z","advisories":["RHBA-2015:1292","RHSA-2015:2131"],"bugzilla":"1095976","bugzilla_description":"CVE-2014-8182 openldap: crash in ldap_domain2hostlist when processing SRV records","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openldap-0:2.4.40-8.el7","openldap-0:2.4.40-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2013-4449","severity":"moderate","public_date":"2013-10-11T00:00:00Z","advisories":["RHSA-2014:0206","RHSA-2014:0126"],"bugzilla":"1019490","bugzilla_description":"CVE-2013-4449 openldap: segfault on certain queries with rwm overlay","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openldap-0:2.4.23-34.el6_5.1","openldap-0:2.3.43-27.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4449.json"},{"CVE":"CVE-2012-2668","severity":"low","public_date":"2012-06-04T00:00:00Z","advisories":["RHSA-2012:1151"],"bugzilla":"825875","bugzilla_description":"CVE-2012-2668 openldap: does not honor TLSCipherSuite settings","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openldap-0:2.4.23-26.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2668.json"},{"CVE":"CVE-2012-1164","severity":"low","public_date":"2012-01-29T00:00:00Z","advisories":["RHSA-2012:0899"],"bugzilla":"802514","bugzilla_description":"CVE-2012-1164 openldap (slapd): Assertion failure by processing search queries requesting only attributes for particular entry","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openldap-0:2.4.23-26.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1164.json"},{"CVE":"CVE-2011-4079","severity":null,"public_date":"2011-10-06T00:00:00Z","advisories":[],"bugzilla":"749324","bugzilla_description":"CVE-2011-4079 openldap: one-byte buffer overflow in slapd","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4079.json"},{"CVE":"CVE-2011-1081","severity":"moderate","public_date":"2011-01-03T00:00:00Z","advisories":["RHSA-2011:0347"],"bugzilla":"680975","bugzilla_description":"CVE-2011-1081 openldap: DoS when submitting special MODRDN request","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openldap-0:2.4.19-15.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1081.json"},{"CVE":"CVE-2011-1025","severity":"moderate","public_date":"2010-09-29T00:00:00Z","advisories":["RHSA-2011:0347"],"bugzilla":"680472","bugzilla_description":"CVE-2011-1025 openldap: rootpw not verified via slapd.conf when using the NDB backend","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["openldap-0:2.4.19-15.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1025.json"},{"CVE":"CVE-2011-1024","severity":"moderate","public_date":"2010-07-28T00:00:00Z","advisories":["RHSA-2011:0346","RHSA-2011:0347"],"bugzilla":"680466","bugzilla_description":"CVE-2011-1024 openldap: forwarded bind failure messages cause success","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["openldap-0:2.4.19-15.el6_0.2","openldap-0:2.3.43-12.el5_6.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1024.json"},{"CVE":"CVE-2010-0211","severity":"important","public_date":"2010-07-19T00:00:00Z","advisories":["RHSA-2010:0543","RHSA-2010:0542"],"bugzilla":"605448","bugzilla_description":"CVE-2010-0211 openldap: modrdn processing uninitialized pointer free","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openldap-0:2.2.13-12.el4_8.3","openldap-0:2.3.43-12.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0211.json"},{"CVE":"CVE-2010-0212","severity":"important","public_date":"2010-07-19T00:00:00Z","advisories":["RHSA-2010:0542"],"bugzilla":"605452","bugzilla_description":"CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openldap-0:2.3.43-12.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0212.json"},{"CVE":"CVE-2009-3767","severity":"moderate","public_date":"2009-08-10T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2010:0543","RHSA-2010:0198"],"bugzilla":"530715","bugzilla_description":"CVE-2009-3767 OpenLDAP: Doesn't properly handle NULL character in subject Common Name","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openldap-0:2.2.13-12.el4_8.3","openldap-0:2.3.43-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3767.json"},{"CVE":"CVE-2008-2952","severity":"important","public_date":"2008-06-26T00:00:00Z","advisories":["RHSA-2008:0583"],"bugzilla":"453444","bugzilla_description":"CVE-2008-2952 OpenLDAP denial-of-service flaw in ASN.1 decoder","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openldap-0:2.2.13-8.el4_6.5","openldap-0:2.3.27-8.el5_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2952.json"},{"CVE":"CVE-2008-0658","severity":"moderate","public_date":"2008-02-07T00:00:00Z","advisories":["RHSA-2008:0110"],"bugzilla":"432008","bugzilla_description":"CVE-2008-0658 openldap: slapd crash on modrdn operation with NOOP control on entry in bdb storage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openldap-0:2.3.27-8.el5_1.3","openldap-0:2.2.13-8.el4_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0658.json"},{"CVE":"CVE-2007-5707","severity":"important","public_date":"2007-10-29T00:00:00Z","advisories":["RHSA-2007:1038","RHSA-2007:1037"],"bugzilla":"359851","bugzilla_description":"CVE-2007-5707 openldap slapd DoS via objectClasses attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openldap-0:2.2.13-8.el4_6.1","openldap-0:2.3.27-8.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5707.json"},{"CVE":"CVE-2007-6698","severity":"moderate","public_date":"2007-04-11T00:00:00Z","advisories":["RHSA-2008:0110"],"bugzilla":"431203","bugzilla_description":"CVE-2007-6698 openldap: slapd crash on NOOP control operation on entry in bdb storage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openldap-0:2.3.27-8.el5_1.3","openldap-0:2.2.13-8.el4_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6698.json"},{"CVE":"CVE-2006-4600","severity":"low","public_date":"2006-09-04T00:00:00Z","advisories":["RHSA-2007:0430","RHSA-2007:0310"],"bugzilla":"1618198","bugzilla_description":"CVE-2006-4600 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openldap-0:2.0.27-23","openldap-0:2.2.13-7.4E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4600.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-account-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-account-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-account-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-account_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-account_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-account_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-fan-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-fan-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-fan-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-fan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-fan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-fan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-hardware-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-hardware-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-hardware-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-hardware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-hardware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-hardware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-indicationmanager-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-indicationmanager-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-indicationmanager-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-logicalfile-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-logicalfile-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-logicalfile-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-logicalfile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-logicalfile_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-logicalfile_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-networking-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-networking-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-networking-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-networking_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-networking_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-networking_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-powermanagement-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-powermanagement-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-powermanagement-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-powermanagement_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-powermanagement_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-powermanagement_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-providers-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-providers-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-providers-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-providers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-providers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-providers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-python-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-python-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-python-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-python-providers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-python-providers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-python-providers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-realmd-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-realmd-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-realmd-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-realmd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-realmd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-realmd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-service-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-service-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-service-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-service_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-service_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-service_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-software-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-software-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-software-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-software_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-software_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-software_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-storage-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-storage-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-storage-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-storage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-storage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-storage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-tools-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-tools-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-tools-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openlmi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi_security_api_results.json
new file mode 100644
index 0000000..ae0f51c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openmpi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10197","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418612","bugzilla_description":"CVE-2016-10197 libevent: Out-of-bounds read in search_make_new()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10195","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418608","bugzilla_description":"CVE-2016-10195 libevent: Stack-buffer overflow in the name_parse() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10196","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418611","bugzilla_description":"CVE-2016-10196 libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-6525","severity":"moderate","public_date":"2015-08-24T00:00:00Z","advisories":[],"bugzilla":"1256797","bugzilla_description":"CVE-2015-6525 libevent: multiple integer overflows in the evbuffer APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6525.json"},{"CVE":"CVE-2014-6272","severity":"moderate","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1144646","bugzilla_description":"CVE-2014-6272 libevent: potential heap overflow in buffer/bufferevent APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6272.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openobex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openobex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openobex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensc_security_api_results.json
new file mode 100644
index 0000000..45cd157
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-26570","severity":"moderate","public_date":"2020-10-06T00:00:00Z","advisories":[],"bugzilla":"1885947","bugzilla_description":"CVE-2020-26570 opensc: heap-based buffer overflow in sc_oberthur_read_file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26570.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-26571","severity":"moderate","public_date":"2020-10-06T00:00:00Z","advisories":[],"bugzilla":"1885950","bugzilla_description":"CVE-2020-26571 opensc: stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26571.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-26572","severity":"moderate","public_date":"2020-10-06T00:00:00Z","advisories":[],"bugzilla":"1885954","bugzilla_description":"CVE-2020-26572 opensc: stack-based buffer overflow in tcos_decipher","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26572.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-20792","severity":"moderate","public_date":"2020-01-04T00:00:00Z","advisories":[],"bugzilla":"1837946","bugzilla_description":"CVE-2019-20792 opensc: Double free in coolkey_free_private_data in libopensc/card-coolkey.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20792.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-19479","severity":"low","public_date":"2019-11-03T00:00:00Z","advisories":[],"bugzilla":"1782519","bugzilla_description":"CVE-2019-19479 opensc: Incorrect read operation during parsing of a SETCOS file attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19479.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-19481","severity":"moderate","public_date":"2019-10-30T00:00:00Z","advisories":[],"bugzilla":"1782955","bugzilla_description":"CVE-2019-19481 opensc: Improper handling of buffer limits for CAC certificates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19481.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-19480","severity":"moderate","public_date":"2019-10-23T00:00:00Z","advisories":[],"bugzilla":"1782950","bugzilla_description":"CVE-2019-19480 opensc: incorrect free operation in sc_pkcs15_decode_prkdf_entry in libopensc/pkcs15-prkey.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19480.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15945","severity":"moderate","public_date":"2019-09-06T00:00:00Z","advisories":[],"bugzilla":"1765222","bugzilla_description":"CVE-2019-15945 opensc: Out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15945.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-15946","severity":"moderate","public_date":"2019-09-06T00:00:00Z","advisories":[],"bugzilla":"1765229","bugzilla_description":"CVE-2019-15946 opensc: Out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15946.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-6502","severity":"low","public_date":"2019-01-20T00:00:00Z","advisories":[],"bugzilla":"1668933","bugzilla_description":"CVE-2019-6502 opensc: memory leak in sc_context_create in ctx.c in libopensc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6502.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-16391","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1627998","bugzilla_description":"CVE-2018-16391 opensc: Buffer overflows handling responses from Muscle Cards in card-muscle.c:muscle_list_files()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16391.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16392","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628002","bugzilla_description":"CVE-2018-16392 opensc: Buffer overflows handling responses from TCOS Cards in card-tcos.c:tcos_select_file()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16392.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16393","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628006","bugzilla_description":"CVE-2018-16393 opensc: Buffer overflows handling responses from Gemsafe V1 Smartcards in pkcs15-gemsafeV1.c:gemsafe_get_cert_len()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16393.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16418","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628010","bugzilla_description":"CVE-2018-16418 opensc: Buffer overflow handling string concatention in tools/util.c:util_acl_to_str()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16418.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16419","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628013","bugzilla_description":"CVE-2018-16419 opensc: Buffer overflow handling responses from Cryptoflex cards in cryptoflex-tool.c:read_public_key()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16419.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16422","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628016","bugzilla_description":"CVE-2018-16422 opensc: Buffer overflow handling responses from esteid cards in pkcs15-esteid.c:sc_pkcs15emu_esteid_init()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16422.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16423","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628020","bugzilla_description":"CVE-2018-16423 opensc: Double free handling responses from smartcards in libopensc/sc.c:sc_file_set_sec_attr()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16423.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16425","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":[],"bugzilla":"1628023","bugzilla_description":"CVE-2018-16425 opensc: Double free handling responses from HSM Cards in pkcs15-sc-hsm.c:sc_pkcs15emu_sc_hsm_init()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16425.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16420","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628026","bugzilla_description":"CVE-2018-16420 opensc: Buffer overflows handling responses from ePass 2003 Cards in card-epass2003.c:decrypt_response()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16420.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16421","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628034","bugzilla_description":"CVE-2018-16421 opensc: Buffer overflows handling responses from CAC Cards in card-cac.c:cac_get_serial_nr_from_CUID()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16421.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16424","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":[],"bugzilla":"1628040","bugzilla_description":"CVE-2018-16424 opensc: Double free handling responses from smartcards in tools/egk-tool.c:read_file()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16424.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16426","severity":"low","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628044","bugzilla_description":"CVE-2018-16426 opensc: Infinite recusrion handling responses from IAS-ECC cards in card-iasecc.c:iasecc_select_file()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16426.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.4"},{"CVE":"CVE-2018-16427","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628052","bugzilla_description":"CVE-2018-16427 opensc: Out of bounds reads handling responses from smartcards","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16427.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-containers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-containers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-containers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-scanner_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-scanner_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-scanner_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openscap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openslp-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openslp-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openslp-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openslp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openslp_security_api_results.json
new file mode 100644
index 0000000..4fe3c88
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openslp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-5544","severity":"critical","public_date":"2019-12-06T00:00:00Z","advisories":["RHSA-2020:0199","RHSA-2019:4240"],"bugzilla":"1777788","bugzilla_description":"CVE-2019-5544 openslp: Heap-based buffer overflow in ProcessSrvRqst() in slpd_process.c leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["openslp-1:2.0.0-4.el6_10","openslp-1:2.0.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-12938","severity":null,"public_date":"2018-06-28T00:00:00Z","advisories":[],"bugzilla":"1596450","bugzilla_description":"CVE-2018-12938 openslp: Double free in slp_buffer:SLPBufferRealloc() may allow a remote attacker to execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12938.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2017-17833","severity":"important","public_date":"2018-04-19T00:00:00Z","advisories":["RHSA-2018:2240","RHSA-2018:2308"],"bugzilla":"1572166","bugzilla_description":"CVE-2017-17833 openslp: Heap memory corruption in slpd/slpd_process.c allows denial of service or potentially code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["openslp-1:2.0.0-3.el6","openslp-1:2.0.0-7.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17833.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7567","severity":"low","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1379987","bugzilla_description":"CVE-2016-7567 openslp: memory corruption due to possible overflow in SLPFoldWhiteSpace in common/slp_compare.c","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7567.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-4912","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1329295","bugzilla_description":"CVE-2016-4912 openslp: null pointer dereference in _xrealloc() function","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4912.json"},{"CVE":"CVE-2015-5155","severity":null,"public_date":"2015-09-16T00:00:00Z","advisories":[],"bugzilla":"1263769","bugzilla_description":"CVE-2015-5155 openslp: Packet with crafted \"nextoffset\" and \"extid\" values causes DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5155.json"},{"CVE":"CVE-2015-5177","severity":"moderate","public_date":"2015-08-06T00:00:00Z","advisories":[],"bugzilla":"1251064","bugzilla_description":"CVE-2015-5177 openslp: double free in SLPDProcessMessage()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5177.json"},{"CVE":"CVE-2012-4428","severity":"moderate","public_date":"2012-09-13T00:00:00Z","advisories":[],"bugzilla":"857242","bugzilla_description":"CVE-2012-4428 openslp: out-of-bounds read in SLPIntersectStringList() can cause DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4428.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensm-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensm-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensm-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opensp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-askpass_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-askpass_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-askpass_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-clients_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-clients_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-clients_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-keycat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-keycat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-keycat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh_security_api_results.json
new file mode 100644
index 0000000..05c3cc5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssh_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15778","severity":"moderate","public_date":"2020-07-18T00:00:00Z","advisories":[],"bugzilla":"1860487","bugzilla_description":"CVE-2020-15778 openssh: scp allows command injection when using backtick characters in the destination argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15778.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-14145","severity":"low","public_date":"2020-06-29T00:00:00Z","advisories":[],"bugzilla":"1852930","bugzilla_description":"CVE-2020-14145 openssh: Observable Discrepancy leading to an information leak in the algorithm negotiation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14145.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-12062","severity":"moderate","public_date":"2020-05-27T00:00:00Z","advisories":[],"bugzilla":"1854145","bugzilla_description":"CVE-2020-12062 openssh: scp can send duplicate responses to the server upon a utimes system call failure leading to overwrite of arbitrary files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12062.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-16905","severity":"important","public_date":"2019-08-28T00:00:00Z","advisories":[],"bugzilla":"1767966","bugzilla_description":"CVE-2019-16905 openssh: an integer overflow in the private key parsing code for the XMSS key type","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16905.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-20685","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1665785","bugzilla_description":"CVE-2018-20685 openssh: scp client improper directory name validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20685.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-6109","severity":"low","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666119","bugzilla_description":"CVE-2019-6109 openssh: Missing character encoding in progress display allows for spoofing of scp client output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-6110","severity":"low","public_date":"2018-11-16T00:00:00Z","advisories":[],"bugzilla":"1666124","bugzilla_description":"CVE-2019-6110 openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-6111","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666127","bugzilla_description":"CVE-2019-6111 openssh: Improper validation of object names allows malicious server to overwrite files via scp client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-15919","severity":"low","public_date":"2018-08-28T00:00:00Z","advisories":[],"bugzilla":"1623184","bugzilla_description":"CVE-2018-15919 openssh: User enumeration via malformed packets in authentication requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15919.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-15473","severity":"low","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2019:2143","RHSA-2019:0711"],"bugzilla":"1619063","bugzilla_description":"CVE-2018-15473 openssh: User enumeration via malformed packets in authentication requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssh-0:7.4p1-21.el7","openssh-0:5.3p1-124.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15473.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-10708","severity":"low","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1537929","bugzilla_description":"CVE-2016-10708 openssh: Out of sequence NEWKEYS message can allow remote attacker to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-15906","severity":"low","public_date":"2017-10-03T00:00:00Z","advisories":["RHSA-2018:0980"],"bugzilla":"1506630","bugzilla_description":"CVE-2017-15906 openssh: Improper write operations in readonly mode allow for zero-length file creation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openssh-0:7.4p1-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-10009","severity":"moderate","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1406269","bugzilla_description":"CVE-2016-10009 openssh: loading of untrusted PKCS#11 modules in ssh-agent","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10009.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2016-10010","severity":"low","public_date":"2016-12-19T00:00:00Z","advisories":[],"bugzilla":"1406278","bugzilla_description":"CVE-2016-10010 openssh: privilege escalation via Unix domain socket forwarding","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-10011","severity":"low","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1406286","bugzilla_description":"CVE-2016-10011 openssh: Leak of host private key material to privilege-separated child process via realloc()","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10011.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2016-10012","severity":"low","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1406293","bugzilla_description":"CVE-2016-10012 openssh: Bounds check can be evaded in the shared memory manager used by pre-authentication compression support","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-8858","severity":"moderate","public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1384860","bugzilla_description":"CVE-2016-8858 openssh: Memory exhaustion due to unregistered KEXINIT handler after receiving message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2016-6515","severity":"moderate","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1364935","bugzilla_description":"CVE-2016-6515 openssh: Denial of service via very long passwords","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-6210","severity":"moderate","public_date":"2016-07-14T00:00:00Z","advisories":["RHSA-2017:2029","RHSA-2017:2563"],"bugzilla":"1357442","bugzilla_description":"CVE-2016-6210 openssh: User enumeration via covert timing channel","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["openssh-0:7.4p1-11.el7","openssh-0:5.3p1-123.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6210.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2015-8325","severity":"moderate","public_date":"2016-04-13T00:00:00Z","advisories":["RHSA-2016:2588","RHSA-2017:0641"],"bugzilla":"1328012","bugzilla_description":"CVE-2015-8325 openssh: privilege escalation via user's PAM environment and UseLogin=yes","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-863","affected_packages":["openssh-0:6.6.1p1-31.el7","openssh-0:5.3p1-122.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8325.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-3115","severity":"moderate","public_date":"2016-03-10T00:00:00Z","advisories":["RHSA-2016:0465","RHSA-2016:0466"],"bugzilla":"1316829","bugzilla_description":"CVE-2016-3115 openssh: missing sanitisation of input for X11 forwarding","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-20","affected_packages":["openssh-0:6.6.1p1-25.el7_2","openssh-0:5.3p1-114.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3115.json"},{"CVE":"CVE-2016-0777","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2016:0043"],"bugzilla":"1298032","bugzilla_description":"CVE-2016-0777 OpenSSH: Client Information leak due to use of roaming connection feature","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-682","affected_packages":["openssh-0:6.6.1p1-23.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0777.json"},{"CVE":"CVE-2016-0778","severity":"low","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2016:0043"],"bugzilla":"1298033","bugzilla_description":"CVE-2016-0778 OpenSSH: Client buffer-overflow when using roaming connections","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["openssh-0:6.6.1p1-23.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0778.json"},{"CVE":"CVE-2016-1908","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2016:0465","RHSA-2016:0741"],"bugzilla":"1298741","bugzilla_description":"CVE-2016-1908 openssh: possible fallback from untrusted to trusted X11 forwarding","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-284","affected_packages":["openssh-0:6.6.1p1-25.el7_2","openssh-0:5.3p1-117.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1908.json"},{"CVE":"CVE-2016-1907","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":[],"bugzilla":"1298746","bugzilla_description":"CVE-2016-1907 openssh: out-of-bounds read in packet handling code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1907.json"},{"CVE":"CVE-2015-6563","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2088","RHSA-2016:0741"],"bugzilla":"1252844","bugzilla_description":"CVE-2015-6563 openssh: Privilege separation weakness related to PAM support","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-266","affected_packages":["openssh-0:5.3p1-117.el6","openssh-0:6.6.1p1-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6563.json"},{"CVE":"CVE-2015-6564","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2088","RHSA-2016:0741"],"bugzilla":"1252852","bugzilla_description":"CVE-2015-6564 openssh: Use-after-free bug related to PAM support","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-416","affected_packages":["openssh-0:5.3p1-117.el6","openssh-0:6.6.1p1-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6564.json"},{"CVE":"CVE-2015-6565","severity":"low","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252861","bugzilla_description":"CVE-2015-6565 openssh: Incorrectly set TTYs to be world-writable","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6565.json"},{"CVE":"CVE-2015-5600","severity":"low","public_date":"2015-07-16T00:00:00Z","advisories":["RHSA-2015:2088","RHSA-2016:0466"],"bugzilla":"1245969","bugzilla_description":"CVE-2015-5600 openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-304","affected_packages":["openssh-0:5.3p1-114.el6_7","openssh-0:6.6.1p1-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5600.json"},{"CVE":"CVE-2015-5352","severity":"moderate","public_date":"2015-07-01T00:00:00Z","advisories":["RHSA-2016:0741"],"bugzilla":"1238231","bugzilla_description":"CVE-2015-5352 openssh: XSECURITY restrictions bypass under certain conditions in ssh(1)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["openssh-0:5.3p1-117.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5352.json"},{"CVE":"CVE-2014-9278","severity":"low","public_date":"2014-10-03T00:00:00Z","advisories":["RHSA-2015:0425"],"bugzilla":"1169843","bugzilla_description":"CVE-2014-9278 openssh: ~/.k5users unexpectedly grants remote login","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["openssh-0:6.6.1p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9278.json"},{"CVE":"CVE-2014-2653","severity":"moderate","public_date":"2014-03-24T00:00:00Z","advisories":["RHSA-2015:0425","RHSA-2014:1552"],"bugzilla":"1081338","bugzilla_description":"CVE-2014-2653 openssh: failure to check DNS SSHFP records in certain scenarios","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-287","affected_packages":["openssh-0:5.3p1-104.el6","openssh-0:6.6.1p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2653.json"},{"CVE":"CVE-2014-2532","severity":"low","public_date":"2014-03-15T00:00:00Z","advisories":["RHSA-2014:1552"],"bugzilla":"1077843","bugzilla_description":"CVE-2014-2532 openssh: AcceptEnv environment restriction bypass flaw","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":"CWE-138","affected_packages":["openssh-0:5.3p1-104.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2532.json"},{"CVE":"CVE-2013-4548","severity":"moderate","public_date":"2013-11-07T00:00:00Z","advisories":[],"bugzilla":"1028418","bugzilla_description":"CVE-2013-4548 openssh: post-auth memory corruption when using AES-GCM cipher","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4548.json"},{"CVE":"CVE-2012-5536","severity":"moderate","public_date":"2013-02-21T00:00:00Z","advisories":["RHSA-2013:0519"],"bugzilla":"834618","bugzilla_description":"CVE-2012-5536 pam_ssh_agent_auth: symbol crash leading to glibc error() called incorrectly","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["openssh-0:5.3p1-84.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5536.json"},{"CVE":"CVE-2010-5107","severity":"low","public_date":"2013-02-06T00:00:00Z","advisories":["RHSA-2013:1591","RHSA-2013:1527"],"bugzilla":"908707","bugzilla_description":"CVE-2010-5107 openssh: Prevent connection slot exhaustion attacks","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["openssh-0:5.3p1-94.el6","rhev-hypervisor6-0:6.5-20131115.0.3.2.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5107.json"},{"CVE":"CVE-2014-1692","severity":"critical","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"1059052","bugzilla_description":"CVE-2014-1692 openssh: uninitialized variable use in J-PAKE implementation","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1692.json"},{"CVE":"CVE-2012-0814","severity":"low","public_date":"2012-01-26T00:00:00Z","advisories":[],"bugzilla":"785292","bugzilla_description":"CVE-2012-0814 openssh: forced command option information disclosure","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0814.json"},{"CVE":"CVE-2011-5000","severity":"low","public_date":"2011-08-01T00:00:00Z","advisories":["RHSA-2012:0884"],"bugzilla":"809938","bugzilla_description":"CVE-2011-5000 openssh: post-authentication resource exhaustion bug via GSSAPI","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["openssh-0:5.3p1-81.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5000.json"},{"CVE":"CVE-2011-4327","severity":"moderate","public_date":"2011-05-05T00:00:00Z","advisories":[],"bugzilla":"755640","bugzilla_description":"CVE-2011-4327 openssh: Unauthorized local access to host keys on platforms where ssh-rand-helper used","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4327.json"},{"CVE":"CVE-2011-0539","severity":"low","public_date":"2011-02-04T00:00:00Z","advisories":[],"bugzilla":"675254","bugzilla_description":"CVE-2011-0539 OpenSSH: legacy certificate generation information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0539.json"},{"CVE":"CVE-2010-4755","severity":null,"public_date":"2011-01-03T00:00:00Z","advisories":[],"bugzilla":"681698","bugzilla_description":"CVE-2010-4755 openssh: remote DoS in sftp via crafted glob expressions","cvss_score":null,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4755.json"},{"CVE":"CVE-2009-2904","severity":"moderate","public_date":"2009-09-30T00:00:00Z","advisories":["RHSA-2009:1470"],"bugzilla":"522141","bugzilla_description":"CVE-2009-2904 openssh: possible privilege escalation when using ChrootDirectory setting","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["openssh-0:4.3p2-36.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2904.json"},{"CVE":"CVE-2008-5161","severity":"low","public_date":"2008-11-19T00:00:00Z","advisories":["RHSA-2009:1287"],"bugzilla":"472068","bugzilla_description":"CVE-2008-5161 OpenSSH: Plaintext Recovery Attack against CBC ciphers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssh-0:4.3p2-36.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5161.json"},{"CVE":"CVE-2008-3844","severity":"critical","public_date":"2008-08-22T00:00:00Z","advisories":["RHSA-2008:0855"],"bugzilla":"1618333","bugzilla_description":"CVE-2008-3844 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:4.3p2-26.el5_2.1","openssh-0:3.9p1-11.el4_7","openssh-0:3.9p1-10.RHEL4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3844.json"},{"CVE":"CVE-2008-1483","severity":"low","public_date":"2008-01-08T00:00:00Z","advisories":["RHSA-2005:527"],"bugzilla":"439079","bugzilla_description":"CVE-2008-1483 openssh may set DISPLAY even if it's unable to listen on respective port","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1483.json"},{"CVE":"CVE-2007-3102","severity":"moderate","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:0540","RHSA-2007:0555","RHSA-2007:0737","RHSA-2007:0703"],"bugzilla":"243204","bugzilla_description":"CVE-2007-3102 audit logging of failed logins","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.24","openssh-0:4.3p2-24.el5","pam-0:0.99.6.2-3.26.el5","pam-0:0.77-66.23"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3102.json"},{"CVE":"CVE-2007-4752","severity":"low","public_date":"2007-09-04T00:00:00Z","advisories":["RHSA-2008:0855"],"bugzilla":"280361","bugzilla_description":"CVE-2007-4752 openssh falls back to the trusted x11 cookie if generation of an untrusted cookie fails","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:4.3p2-26.el5_2.1","openssh-0:3.9p1-11.el4_7","openssh-0:3.9p1-10.RHEL4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4752.json"},{"CVE":"CVE-2006-5794","severity":"low","public_date":"2006-11-07T00:00:00Z","advisories":["RHSA-2006:0738"],"bugzilla":"214641","bugzilla_description":"CVE-2006-5794 OpenSSH privilege separation flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.13","openssh-0:3.9p1-8.RHEL4.17.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5794.json"},{"CVE":"CVE-2006-5051","severity":"important","public_date":"2006-09-28T00:00:00Z","advisories":["RHSA-2006:0697","RHSA-2006:0698"],"bugzilla":"208347","bugzilla_description":"CVE-2006-5051 unsafe GSSAPI signal handler","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.12","openssh-0:3.9p1-8.RHEL4.17","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5051.json"},{"CVE":"CVE-2006-5052","severity":"low","public_date":"2006-09-28T00:00:00Z","advisories":["RHSA-2007:0540","RHSA-2007:0703"],"bugzilla":"234643","bugzilla_description":"CVE-2006-5052 Kerberos information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.24","openssh-0:4.3p2-24.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5052.json"},{"CVE":"CVE-2006-4924","severity":"moderate","public_date":"2006-09-19T00:00:00Z","advisories":["RHSA-2006:0697","RHSA-2006:0698"],"bugzilla":"207957","bugzilla_description":"CVE-2006-4924 openssh DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.12","openssh-0:3.9p1-8.RHEL4.17","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4924.json"},{"CVE":"CVE-2006-0225","severity":"low","public_date":"2005-09-28T00:00:00Z","advisories":["RHSA-2006:0698","RHSA-2006:0044","RHSA-2006:0298"],"bugzilla":"168167","bugzilla_description":"CVE-2006-0225 local to local copy uses shell expansion twice","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.12","openssh-0:3.6.1p2-33.30.9","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0225.json"},{"CVE":"CVE-2005-2798","severity":"moderate","public_date":"2005-09-01T00:00:00Z","advisories":["RHSA-2005:527"],"bugzilla":"1617757","bugzilla_description":"CVE-2005-2798 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2798.json"},{"CVE":"CVE-2005-2666","severity":"low","public_date":"2005-07-07T00:00:00Z","advisories":["RHSA-2007:0257"],"bugzilla":"162681","bugzilla_description":"CVE-2005-2666 openssh vulnerable to known_hosts address harvesting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2666.json"},{"CVE":"CVE-2004-2069","severity":"low","public_date":"2004-01-27T00:00:00Z","advisories":["RHSA-2005:550"],"bugzilla":"1617421","bugzilla_description":"CVE-2004-2069 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-2069.json"},{"CVE":"CVE-2003-0386","severity":"low","public_date":"2003-06-05T00:00:00Z","advisories":["RHSA-2006:0698","RHSA-2006:0298"],"bugzilla":"1617024","bugzilla_description":"CVE-2003-0386 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.9","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0386.json"},{"CVE":"CVE-2004-0175","severity":"low","public_date":"2000-09-01T00:00:00Z","advisories":["RHSA-2005:567","RHSA-2005:562","RHSA-2005:495","RHSA-2005:165","RHSA-2005:481","RHSA-2005:074","RHSA-2005:106"],"bugzilla":"1617166","bugzilla_description":"CVE-2004-0175 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["krb5-0:1.2.7-47","krb5-0:1.3.4-17","openssh-0:3.6.1p2-33.30.4","rsh-0:0.17-25.3","rsh-0:0.17-17.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0175.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl-ibmca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl-ibmca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl-ibmca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl098e_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl098e_security_api_results.json
new file mode 100644
index 0000000..e34997a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl098e_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-1968","severity":"low","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877458","bugzilla_description":"CVE-2020-1968 openssl: Information exposure when DH secret are reused across multiple TLS connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-1967","severity":"important","public_date":"2020-04-21T00:00:00Z","advisories":[],"bugzilla":"1823670","bugzilla_description":"CVE-2020-1967 openssl: Segmentation fault in SSL_check_chain causes denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1967.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1551","severity":"low","public_date":"2019-12-06T00:00:00Z","advisories":[],"bugzilla":"1780995","bugzilla_description":"CVE-2019-1551 openssl: Integer overflow in RSAZ modular exponentiation on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1551.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-1547","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752090","bugzilla_description":"CVE-2019-1547 openssl: side-channel weak encryption vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-602","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-1543","severity":"low","public_date":"2019-03-06T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1695954","bugzilla_description":"CVE-2019-1543 openssl: ChaCha20-Poly1305 with long nonces","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-1559","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:2304","RHSA-2019:2439","RHSA-2019:3929","RHSA-2019:2437","RHSA-2019:2471"],"bugzilla":"1683804","bugzilla_description":"CVE-2019-1559 openssl: 0-byte record padding oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-0:1.0.1e-58.el6_10","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-5407","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3932","RHSA-2019:0483","RHSA-2019:2125","RHSA-2019:3929","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1645695","bugzilla_description":"CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7_6.1","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-0735","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1644356","bugzilla_description":"CVE-2018-0735 openssl: timing side channel attack in the ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0734","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:3700","RHSA-2019:3932","RHSA-2019:2304","RHSA-2019:3933","RHSA-2019:3935","RHBA-2019:3303"],"bugzilla":"1644364","bugzilla_description":"CVE-2018-0734 openssl: timing side channel attack in the DSA signature algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0732","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2019:1296","RHSA-2019:1543","RHSA-2018:2553","RHSA-2018:2552","RHSA-2018:3221"],"bugzilla":"1591100","bugzilla_description":"CVE-2018-0732 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-1:1.0.2k-16.el7","rhoar-nodejs-1:8.11.4-2.el7","rhoar-nodejs-1:10.9.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-0737","severity":"low","public_date":"2018-04-16T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:3933","RHSA-2018:3221","RHSA-2019:3935"],"bugzilla":"1568253","bugzilla_description":"CVE-2018-0737 openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0737.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-0733","severity":"moderate","public_date":"2018-03-27T00:00:00Z","advisories":[],"bugzilla":"1561260","bugzilla_description":"CVE-2018-0733 openssl: Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages in a reduced number of attempts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0733.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-0739","severity":"moderate","public_date":"2018-03-27T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3090","RHSA-2019:1712","RHSA-2019:1711","RHSA-2018:3221"],"bugzilla":"1561266","bugzilla_description":"CVE-2018-0739 openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-400","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7","openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0739.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3737","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523504","bugzilla_description":"CVE-2017-3737 openssl: Read/write after SSL object in error state","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3738","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523510","bugzilla_description":"CVE-2017-3738 openssl: rsaz_1024_mul_avx2 overflow bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3736","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1509169","bugzilla_description":"CVE-2017-3736 openssl: bn_sqrx8x_internal carry bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":["openssl-1:1.0.2k-12.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3735","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":["RHSA-2018:3221"],"bugzilla":"1486144","bugzilla_description":"CVE-2017-3735 openssl: Malformed X.509 IPAdressFamily could cause OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3733","severity":"important","public_date":"2017-02-16T00:00:00Z","advisories":[],"bugzilla":"1421695","bugzilla_description":"CVE-2017-3733 openssl: Encrypt-Then-Mac renegotiation crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3733.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3731","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2017:0286","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416852","bugzilla_description":"CVE-2017-3731 openssl: Truncated packet could crash via OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["openssl-0:1.0.1e-48.el6_8.4","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3731.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3730","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":[],"bugzilla":"1416855","bugzilla_description":"CVE-2017-3730 openssl: Bad (EC)DHE parameters cause a client crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3730.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3732","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416856","bugzilla_description":"CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-7056","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1802","RHSA-2017:1801","RHBA-2017:1929"],"bugzilla":"1412120","bugzilla_description":"CVE-2016-7056 openssl: ECDSA P-256 timing attack key recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.0.2k-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7056.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-7054","severity":"important","public_date":"2016-11-10T00:00:00Z","advisories":[],"bugzilla":"1393920","bugzilla_description":"CVE-2016-7054 openssl: Corrupting larger payloads when using ChaCha20/Poly1305 ciphersuites leads to DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7053","severity":"moderate","public_date":"2016-11-10T00:00:00Z","advisories":[],"bugzilla":"1393930","bugzilla_description":"CVE-2016-7053 openssl: CMS Null dereference vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-8610","severity":"moderate","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:0286","RHSA-2017:0574"],"bugzilla":"1384743","bugzilla_description":"CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","openssl-0:1.0.1e-48.el6_8.4","gnutls-0:2.12.23-21.el6","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7055","severity":"low","public_date":"2016-10-11T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1393929","bugzilla_description":"CVE-2016-7055 openssl: Carry propagating bug in Montgomery multiplication","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7055.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-6309","severity":"critical","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1379302","bugzilla_description":"CVE-2016-6309 openssl: Use After Free for large message sizes","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6309.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-7052","severity":"moderate","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1379310","bugzilla_description":"CVE-2016-7052 openssl: Missing CRL sanity check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7052.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6304","severity":"important","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2016:2802","RHSA-2017:2493","RHSA-2017:2494","RHSA-2016:1940"],"bugzilla":"1377600","bugzilla_description":"CVE-2016-6304 openssl: OCSP Status Request extension unbounded memory growth","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-0:1.0.1e-16.el6_5.17","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-42.el6_7.6","openssl-0:1.0.1e-48.el6_8.3","openssl-0:1.0.0-27.el6_4.6","openssl-0:1.0.1e-30.el6_6.13","openssl-0:1.0.0-20.el6_2.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6305","severity":"moderate","public_date":"2016-09-22T00:00:00Z","advisories":[],"bugzilla":"1378127","bugzilla_description":"CVE-2016-6305 openssl: SSL_peek() hang on empty record","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6305.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6306","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1377594","bugzilla_description":"CVE-2016-6306 openssl: certificate message OOB reads","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6306.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6307","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1378203","bugzilla_description":"CVE-2016-6307 openssl: excessive allocation of memory in tls_get_message_header()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6307.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-6308","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1378208","bugzilla_description":"CVE-2016-6308 openssl: excessive allocation of memory in dtls1_preprocess_fragment()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6308.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-2183","severity":"moderate","public_date":"2016-08-24T00:00:00Z","advisories":["RHSA-2020:0451","RHSA-2020:3842","RHSA-2017:3240","RHSA-2019:1245","RHBA-2019:2581","RHSA-2017:0462","RHSA-2017:3113","RHSA-2017:3114","RHSA-2017:2710","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:3239","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:2709","RHSA-2017:2708","RHSA-2018:2123","RHSA-2019:2859"],"bugzilla":"1369383","bugzilla_description":"CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","openshift3/metrics-heapster:v3.11.141-2","python-0:2.7.5-69.el7_5","openshift3/ose-console:v3.11.141-2","openshift3/oauth-proxy:v3.11.170-5","openshift4/ose-console:v4.5.0-202009201759.p0","openshift3/ose-kube-rbac-proxy:v3.11.141-2","openshift3/ose-metrics-server:v3.11.141-2","java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8","openshift4/ose-oauth-proxy:v4.1.18-201909201915"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-6302","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1369855","bugzilla_description":"CVE-2016-6302 openssl: Insufficient TLS session ticket HMAC length checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6303","severity":"moderate","public_date":"2016-08-20T00:00:00Z","advisories":[],"bugzilla":"1370146","bugzilla_description":"CVE-2016-6303 openssl: Integer overflow in MDC2_Update()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6303.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-2182","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1367340","bugzilla_description":"CVE-2016-2182 openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-2180","severity":"low","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2016:1940"],"bugzilla":"1359615","bugzilla_description":"CVE-2016-2180 OpenSSL: OOB read in TS_OBJ_print_bio()","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2180.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2016-2181","severity":"moderate","public_date":"2016-07-05T00:00:00Z","advisories":["RHSA-2016:1940"],"bugzilla":"1369113","bugzilla_description":"CVE-2016-2181 openssl: DTLS replay protection bypass allows DoS against DTLS connection","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-2179","severity":"moderate","public_date":"2016-06-30T00:00:00Z","advisories":["RHSA-2016:1940"],"bugzilla":"1369504","bugzilla_description":"CVE-2016-2179 openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2179.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-2178","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1343400","bugzilla_description":"CVE-2016-2178 openssl: Non-constant time codepath followed for certain operations in DSA implementation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2178.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2016-2177","severity":"low","public_date":"2016-05-05T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1341705","bugzilla_description":"CVE-2016-2177 openssl: Possible integer overflow vulnerabilities in codebase","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2177.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-2108","severity":"important","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2017:0193","RHSA-2016:0722","RHSA-2017:0194","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:1137","RHSA-2016:0996"],"bugzilla":"1331402","bugzilla_description":"CVE-2016-2108 openssl: Memory corruption in the ASN.1 encoder","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:0.9.8e-40.el5_11","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2108.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2107","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1331426","bugzilla_description":"CVE-2016-2107 openssl: Padding oracle in AES-NI CBC MAC check","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2107.json"},{"CVE":"CVE-2016-2105","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:1650","RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:1648","RHSA-2016:2957","RHSA-2016:1649","RHSA-2016:0996"],"bugzilla":"1331441","bugzilla_description":"CVE-2016-2105 openssl: EVP_EncodeUpdate overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2106","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:1650","RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:1648","RHSA-2016:2957","RHSA-2016:1649","RHSA-2016:0996"],"bugzilla":"1331536","bugzilla_description":"CVE-2016-2106 openssl: EVP_EncryptUpdate overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2106.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2176","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1331563","bugzilla_description":"CVE-2016-2176 openssl: EBCDIC overread in X509_NAME_oneline()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2176.json"},{"CVE":"CVE-2016-2109","severity":"low","public_date":"2016-04-23T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1330101","bugzilla_description":"CVE-2016-2109 openssl: ASN.1 BIO handling of large amounts of data","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2109.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-2842","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1314757","bugzilla_description":"CVE-2016-2842 openssl: doapr_outch function does not verify that certain memory allocation succeeds","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2842.json"},{"CVE":"CVE-2016-0800","severity":"important","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2016:0490","RHSA-2016:1519","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0305","RHSA-2016:0306","RHSA-2016:0301","RHSA-2016:0302","RHSA-2016:0445","RHSA-2016:0379","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1310593","bugzilla_description":"CVE-2016-0800 SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-42.el6_7.4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","rhev-hypervisor7-0:7.2-20160302.1.el7ev","openssl-0:1.0.1e-30.el6_6.12","rhev-hypervisor7-0:7.2-20160302.1.el6ev","openssl-0:1.0.0-20.el6_2.8","openssl-0:0.9.7a-43.23.el4","openssl-1:1.0.1e-42.el7_1.10","openssl098e-0:0.9.8e-20.el6_7.1","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-39.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0800.json"},{"CVE":"CVE-2016-0703","severity":"moderate","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0303"],"bugzilla":"1310811","bugzilla_description":"CVE-2016-0703 openssl: Divide-and-conquer session key recovery in SSLv2","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0703.json"},{"CVE":"CVE-2016-0704","severity":"moderate","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0303"],"bugzilla":"1310814","bugzilla_description":"CVE-2016-0704 openssl: SSLv2 Bleichenbacher protection overwrites wrong bytes for export ciphers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0704.json"},{"CVE":"CVE-2016-0799","severity":"low","public_date":"2016-02-26T00:00:00Z","advisories":["RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1312219","bugzilla_description":"CVE-2016-0799 OpenSSL: Fix memory issues in BIO_*printf functions","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0799.json"},{"CVE":"CVE-2016-0798","severity":"low","public_date":"2016-02-25T00:00:00Z","advisories":[],"bugzilla":"1311876","bugzilla_description":"CVE-2016-0798 OpenSSL: Avoid memory leak in SRP","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0798.json"},{"CVE":"CVE-2016-0705","severity":"low","public_date":"2016-02-18T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2016:2957","RHSA-2016:0301","RHSA-2016:0379"],"bugzilla":"1310596","bugzilla_description":"CVE-2016-0705 OpenSSL: Double-free in DSA code","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-42.el6_7.4","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","rhev-hypervisor7-0:7.2-20160302.1.el7ev","rhev-hypervisor7-0:7.2-20160302.1.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0705.json"},{"CVE":"CVE-2015-3194","severity":"low","public_date":"2016-01-28T00:00:00Z","advisories":["RHSA-2015:2617","RHSA-2016:2957"],"bugzilla":"1288320","bugzilla_description":"CVE-2015-3194 OpenSSL: Certificate verify crash with missing PSS parameter","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.1","openssl-1:1.0.1e-51.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3194.json"},{"CVE":"CVE-2016-0701","severity":"moderate","public_date":"2016-01-28T00:00:00Z","advisories":[],"bugzilla":"1301845","bugzilla_description":"CVE-2016-0701 OpenSSL: DH small subgroups","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0701.json"},{"CVE":"CVE-2015-3197","severity":"low","public_date":"2016-01-28T00:00:00Z","advisories":["RHSA-2016:0490","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0305","RHSA-2016:0306","RHSA-2016:0301","RHSA-2016:0302","RHSA-2016:0445","RHSA-2016:0379","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1301846","bugzilla_description":"CVE-2015-3197 OpenSSL: SSLv2 doesn't block disabled ciphers","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-42.el6_7.4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","rhev-hypervisor7-0:7.2-20160302.1.el7ev","openssl-0:1.0.1e-30.el6_6.12","rhev-hypervisor7-0:7.2-20160302.1.el6ev","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8","openssl-0:0.9.7a-43.23.el4","openssl098e-0:0.9.8e-20.el6_7.1","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-39.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3197.json"},{"CVE":"CVE-2015-7575","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0012","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0007","RHSA-2016:0008","RHSA-2016:0049"],"bugzilla":"1289841","bugzilla_description":"CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.2","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","nss-0:3.19.1-19.el7_2","gnutls-0:3.3.8-14.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","gnutls-0:2.8.5-19.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","nss-0:3.19.1-8.el6_7","openssl-1:1.0.1e-51.el7_2.2","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json"},{"CVE":"CVE-2015-1794","severity":"low","public_date":"2015-12-04T00:00:00Z","advisories":[],"bugzilla":"1288955","bugzilla_description":"CVE-2015-1794 OpenSSL: Anon DH ServerKeyExchange with 0 p parameter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1794.json"},{"CVE":"CVE-2015-3193","severity":"moderate","public_date":"2015-12-03T00:00:00Z","advisories":[],"bugzilla":"1288317","bugzilla_description":"CVE-2015-3193 OpenSSL: BN_mod_exp may produce incorrect results on x86_64","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3193.json"},{"CVE":"CVE-2015-3195","severity":"moderate","public_date":"2015-12-03T00:00:00Z","advisories":["RHSA-2015:2617","RHSA-2016:2056","RHSA-2016:2957","RHSA-2015:2616"],"bugzilla":"1288322","bugzilla_description":"CVE-2015-3195 OpenSSL: X509_ATTRIBUTE memory leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-42.el6_7.1","openssl-1:1.0.1e-51.el7_2.1","openssl-0:0.9.8e-37.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-3196","severity":"low","public_date":"2015-12-03T00:00:00Z","advisories":["RHSA-2015:2617","RHSA-2016:2957"],"bugzilla":"1288326","bugzilla_description":"CVE-2015-3196 OpenSSL: Race condition handling PSK identify hint","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.1","openssl-1:1.0.1e-51.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3196.json"},{"CVE":"CVE-2015-1793","severity":"important","public_date":"2015-07-09T00:00:00Z","advisories":[],"bugzilla":"1238619","bugzilla_description":"CVE-2015-1793 openssl: alternative chains certificate forgery","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1793.json"},{"CVE":"CVE-2015-1788","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":[],"bugzilla":"1228600","bugzilla_description":"CVE-2015-1788 OpenSSL: Malformed ECParameters causes infinite loop","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1788.json"},{"CVE":"CVE-2015-1789","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2015:1197"],"bugzilla":"1228603","bugzilla_description":"CVE-2015-1789 OpenSSL: out-of-bounds read in X509_cmp_time","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11","openssl-0:0.9.8e-36.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1789.json"},{"CVE":"CVE-2015-1790","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2015:1197"],"bugzilla":"1228604","bugzilla_description":"CVE-2015-1790 OpenSSL: PKCS7 crash with missing EnvelopedContent","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11","openssl-0:0.9.8e-36.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1790.json"},{"CVE":"CVE-2015-1792","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115"],"bugzilla":"1228607","bugzilla_description":"CVE-2015-1792 OpenSSL: CMS verify infinite loop with unknown hash function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1792.json"},{"CVE":"CVE-2015-1791","severity":"low","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115"],"bugzilla":"1228608","bugzilla_description":"CVE-2015-1791 OpenSSL: Race condition handling NewSessionTicket","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1791.json"},{"CVE":"CVE-2014-8176","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2016:2957"],"bugzilla":"1228611","bugzilla_description":"CVE-2014-8176 OpenSSL: Invalid free in DTLS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-4000","severity":"moderate","public_date":"2015-05-20T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2016:2056","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2016:1624","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1197","RHSA-2015:1230","RHSA-2015:1185","RHSA-2015:1072"],"bugzilla":"1223211","bugzilla_description":"CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","nss-0:3.19.1-3.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","nss-0:3.19.1-3.ael7b_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","openssl-0:1.0.1e-30.el6_6.9","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","openssl-1:1.0.1e-42.ael7b_1.6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.8.0-openjdk-1:1.8.0.51-1.b16.ael7b_1","openssl-0:0.9.8e-36.el5_11","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-0291","severity":"important","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202338","bugzilla_description":"CVE-2015-0291 openssl: ClientHello sigalgs NULL pointer dereference DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0291.json"},{"CVE":"CVE-2015-0290","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202345","bugzilla_description":"CVE-2015-0290 openssl: multiblock corrupted pointer","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0290.json"},{"CVE":"CVE-2015-0207","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202351","bugzilla_description":"CVE-2015-0207 openssl: DTLS segmentation fault in DTLSv1_listen","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0207.json"},{"CVE":"CVE-2015-0286","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0752","RHSA-2016:2957","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202366","bugzilla_description":"CVE-2015-0286 openssl: invalid pointer use in ASN1_TYPE_cmp()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822->CWE-125","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0286.json"},{"CVE":"CVE-2015-0208","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202369","bugzilla_description":"CVE-2015-0208 openssl: segmentation fault for invalid PSS parameters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0208.json"},{"CVE":"CVE-2015-0287","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202380","bugzilla_description":"CVE-2015-0287 openssl: ASN.1 structure reuse memory corruption","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0287.json"},{"CVE":"CVE-2015-0289","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202384","bugzilla_description":"CVE-2015-0289 openssl: PKCS7 NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0289.json"},{"CVE":"CVE-2015-0292","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202395","bugzilla_description":"CVE-2015-0292 openssl: integer underflow leading to buffer overflow in base64 decoding","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-120","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0292.json"},{"CVE":"CVE-2015-0293","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2016:0490","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0445","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1202404","bugzilla_description":"CVE-2015-0293 openssl: assertion failure in SSLv2 servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0293.json"},{"CVE":"CVE-2015-1787","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202406","bugzilla_description":"CVE-2015-1787 openssl: segmentation fault in client authentication with empty CKE and DHE","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1787.json"},{"CVE":"CVE-2015-0285","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202410","bugzilla_description":"CVE-2015-0285 openssl: handshake with unseeded PRNG","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-335","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0285.json"},{"CVE":"CVE-2015-0288","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHEA-2015:1770","RHEA-2015:1771","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202418","bugzilla_description":"CVE-2015-0288 openssl: X509_to_X509_REQ NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0288.json"},{"CVE":"CVE-2009-5146","severity":"moderate","public_date":"2015-03-16T00:00:00Z","advisories":[],"bugzilla":"1203232","bugzilla_description":"CVE-2009-5146 openssl: memory leak in hostname TLS extension","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5146.json"},{"CVE":"CVE-2015-0209","severity":"low","public_date":"2015-02-09T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:0752","RHSA-2016:2957","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1196737","bugzilla_description":"CVE-2015-0209 openssl: use-after-free on invalid EC private key import","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0209.json"},{"CVE":"CVE-2014-3571","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180234","bugzilla_description":"CVE-2014-3571 openssl: DTLS segmentation fault in dtls1_get_record","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3571.json"},{"CVE":"CVE-2015-0206","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180235","bugzilla_description":"CVE-2015-0206 openssl: DTLS memory leak in dtls1_buffer_record","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0206.json"},{"CVE":"CVE-2015-0205","severity":"low","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180239","bugzilla_description":"CVE-2015-0205 openssl: DH client certificates accepted without verification","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0205.json"},{"CVE":"CVE-2014-3570","severity":"low","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2016:1650","RHSA-2015:0066","RHSA-2015:0849"],"bugzilla":"1180240","bugzilla_description":"CVE-2014-3570 openssl: Bignum squaring may produce incorrect results","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3570.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-0204","severity":"moderate","public_date":"2015-01-06T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2016:1650","RHEA-2015:0955","RHSA-2015:0066","RHSA-2015:0849"],"bugzilla":"1180184","bugzilla_description":"CVE-2015-0204 openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"(CWE-327|CWE-757)","affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2014-3572","severity":"low","public_date":"2015-01-05T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180185","bugzilla_description":"CVE-2014-3572 openssl: ECDH downgrade bug fix","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3572.json"},{"CVE":"CVE-2014-8275","severity":"low","public_date":"2015-01-05T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0066"],"bugzilla":"1180187","bugzilla_description":"CVE-2014-8275 openssl: Fix various certificate fingerprint issues","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8275.json"},{"CVE":"CVE-2014-3567","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1652","RHSA-2015:0126","RHSA-2014:1692"],"bugzilla":"1152961","bugzilla_description":"CVE-2014-3567 openssl: Invalid TLS/SSL session tickets could cause memory leak leading to server crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["rhev-hypervisor6-0:6.6-20150123.1.el6ev","openssl-0:1.0.1e-30.el6_6.2","openssl-1:1.0.1e-34.el7_0.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3567.json"},{"CVE":"CVE-2014-3508","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127490","bugzilla_description":"CVE-2014-3508 openssl: information leak in pretty printing functions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3508.json"},{"CVE":"CVE-2014-5139","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1127491","bugzilla_description":"CVE-2014-5139 openssl: crash with SRP ciphersuite in Server Hello message","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5139.json"},{"CVE":"CVE-2014-3509","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1052","RHSA-2015:0197","RHSA-2014:1054"],"bugzilla":"1127498","bugzilla_description":"CVE-2014-3509 openssl: race condition in ssl_parse_serverhello_tlsext","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-362","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","spice-client-msi-0:3.5-2","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3509.json"},{"CVE":"CVE-2014-3505","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127499","bugzilla_description":"CVE-2014-3505 openssl: DTLS packet processing double free","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-672","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3505.json"},{"CVE":"CVE-2014-3506","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127500","bugzilla_description":"CVE-2014-3506 openssl: DTLS memory exhaustion","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-862->CWE-400","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3506.json"},{"CVE":"CVE-2014-3507","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1052","RHSA-2014:1054"],"bugzilla":"1127502","bugzilla_description":"CVE-2014-3507 openssl: DTLS memory leak from zero-length fragments","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3507.json"},{"CVE":"CVE-2014-3510","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127503","bugzilla_description":"CVE-2014-3510 openssl: DTLS anonymous (EC)DH denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3510.json"},{"CVE":"CVE-2014-3511","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2015:0126","RHSA-2014:1052","RHSA-2015:0197","RHSA-2014:1054"],"bugzilla":"1127504","bugzilla_description":"CVE-2014-3511 openssl: TLS protocol downgrade attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-390","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","rhev-hypervisor6-0:6.6-20150123.1.el6ev","spice-client-msi-0:3.5-2","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3511.json"},{"CVE":"CVE-2014-3512","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1127505","bugzilla_description":"CVE-2014-3512 openssl: SRP buffer overrun","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3512.json"},{"CVE":"CVE-2014-0224","severity":"important","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0630","RHSA-2014:0631","RHSA-2014:0624","RHSA-2014:0679","RHSA-2014:0632","RHSA-2014:0633","RHSA-2014:0627","RHSA-2014:0628","RHSA-2014:0625","RHSA-2014:0626","RHSA-2014:0629","RHSA-2014:0680"],"bugzilla":"1103586","bugzilla_description":"CVE-2014-0224 openssl: SSL/TLS MITM vulnerability","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-841","affected_packages":["openssl-0:0.9.8e-27.el5_10.3","openssl-0:1.0.1e-16.el6_5.14","openssl097a-0:0.9.7a-12.el5_10.1","openssl098e-0:0.9.8e-18.el6_5.2","openssl-1:1.0.1e-34.el7_0.3","openssl098e-0:0.9.8e-29.el7_0.2","rhev-hypervisor6-0:6.5-20140603.1.el6ev","openssl-0:0.9.8e-26.el5_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0224.json"},{"CVE":"CVE-2014-0221","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625","RHSA-2014:1021","RHSA-2014:1053","RHSA-2014:1086"],"bugzilla":"1103593","bugzilla_description":"CVE-2014-0221 openssl: DoS when sending invalid DTLS handshake","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["openssl-0:0.9.8e-27.el5_10.4","openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0221.json"},{"CVE":"CVE-2014-0195","severity":"important","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1103598","bugzilla_description":"CVE-2014-0195 openssl: Buffer overflow via DTLS invalid fragment","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-119","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0195.json"},{"CVE":"CVE-2014-3470","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1103600","bugzilla_description":"CVE-2014-3470 openssl: client-side denial of service when using anonymous ECDH","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3470.json"},{"CVE":"CVE-2014-0198","severity":"moderate","public_date":"2014-04-21T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1093837","bugzilla_description":"CVE-2014-0198 openssl: SSL_MODE_RELEASE_BUFFERS NULL pointer dereference in do_ssl3_write()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0198.json"},{"CVE":"CVE-2010-5298","severity":"moderate","public_date":"2014-04-08T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1087195","bugzilla_description":"CVE-2010-5298 openssl: freelist misuse causing a possible use-after-free","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5298.json"},{"CVE":"CVE-2014-0160","severity":"important","public_date":"2014-04-07T00:00:00Z","advisories":["RHSA-2014:0377","RHSA-2014:0378","RHSA-2014:0376","RHSA-2014:0416","RHSA-2014:0396"],"bugzilla":"1084875","bugzilla_description":"CVE-2014-0160 openssl: information disclosure in handling of TLS heartbeat extension packets","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-119->CWE-201","affected_packages":["openssl-0:1.0.1e-16.el6_5.7","rhev-hypervisor6-0:6.5-20140118.1.3.2.el6_5","rhev-hypervisor6-0:6.5-20140407.0.el6ev","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0160.json"},{"CVE":"CVE-2014-0076","severity":"moderate","public_date":"2014-02-14T00:00:00Z","advisories":[],"bugzilla":"1080276","bugzilla_description":"CVE-2014-0076 openssl: ECDSA nonces susceptible to Yarom/Benger flush+reload cache side-channel attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0076.json"},{"CVE":"CVE-2013-4353","severity":"moderate","public_date":"2014-01-06T00:00:00Z","advisories":["RHSA-2014:0015","RHSA-2014:0416","RHSA-2014:0041"],"bugzilla":"1049058","bugzilla_description":"CVE-2013-4353 openssl: client NULL dereference crash on malformed handshake packets","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.4","rhev-hypervisor6-0:6.5-20140112.0.el6ev","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4353.json"},{"CVE":"CVE-2013-6449","severity":"important","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0015","RHSA-2014:0041"],"bugzilla":"1045363","bugzilla_description":"CVE-2013-6449 openssl: crash when using TLS 1.2 caused by use of incorrect hash algorithm","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.4","rhev-hypervisor6-0:6.5-20140112.0.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6449.json"},{"CVE":"CVE-2013-6450","severity":"important","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0015"],"bugzilla":"1047840","bugzilla_description":"CVE-2013-6450 openssl: crash in DTLS renegotiation after packet loss","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6450.json"},{"CVE":"CVE-2012-2686","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":[],"bugzilla":"908029","bugzilla_description":"CVE-2012-2686 openssl: DoS due to improper handling of CBC ciphersuites in TLS 1.1/1.2 on AES-NI supporting platforms","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2686.json"},{"CVE":"CVE-2013-0166","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":["RHSA-2013:0636","RHSA-2013:0833","RHSA-2013:0587","RHSA-2013:0782","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"908052","bugzilla_description":"CVE-2013-0166 openssl: DoS due to improper handling of OCSP response verification","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0166.json"},{"CVE":"CVE-2013-0169","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0636","RHSA-2013:0823","RHSA-2013:0833","RHSA-2013:0855","RHSA-2013:0822","RHSA-2013:0587","RHSA-2013:0532","RHSA-2013:1456","RHSA-2014:0416","RHSA-2013:0782","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"907589","bugzilla_description":"CVE-2013-0169 SSL/TLS: CBC padding timing attack (lucky-13)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3","spice-client-msi-0:3.3-12","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el5_9","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0169.json"},{"CVE":"CVE-2012-4929","severity":"moderate","public_date":"2012-09-13T00:00:00Z","advisories":["RHSA-2013:0636","RHSA-2013:0587","RHSA-2014:0416"],"bugzilla":"857051","bugzilla_description":"CVE-2012-4929 SSL/TLS CRIME attack against HTTPS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4929.json"},{"CVE":"CVE-2012-2333","severity":"moderate","public_date":"2012-05-10T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:1307","RHSA-2012:0699"],"bugzilla":"820686","bugzilla_description":"CVE-2012-2333 openssl: record length handling integer underflow","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["openssl-0:1.0.0-20.el6_2.5","openssl-0:0.9.8e-22.el5_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2333.json"},{"CVE":"CVE-2012-2131","severity":"important","public_date":"2012-04-23T00:00:00Z","advisories":[],"bugzilla":"815661","bugzilla_description":"CVE-2012-2131 openssl: incomplete fix of CVE-2012-2110 for 0.9.x","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2131.json"},{"CVE":"CVE-2012-2110","severity":"important","public_date":"2012-04-19T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:1307","RHSA-2012:0518","RHSA-2012:0522"],"bugzilla":"814185","bugzilla_description":"CVE-2012-2110 openssl: asn1_d2i_read_bio integer errors leading to buffer overflow","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["openssl-0:0.9.8e-12.el5_6.9","openssl-0:1.0.0-20.el6_2.4","openssl-0:0.9.8e-22.el5_8.3","openssl098e-0:0.9.8e-17.el6_2.2","openssl-0:1.0.0-10.el6_1.6","openssl097a-0:0.9.7a-11.el5_8.2","openssl-0:1.0.0-4.el6_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2110.json"},{"CVE":"CVE-2012-1165","severity":"moderate","public_date":"2012-03-12T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:0426","RHSA-2012:1308","RHSA-2012:1307"],"bugzilla":"802489","bugzilla_description":"CVE-2012-1165 openssl: mime_param_cmp NULL dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-22.el5_8.1","openssl-0:1.0.0-20.el6_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1165.json"},{"CVE":"CVE-2012-0884","severity":"low","public_date":"2012-03-12T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:0426","RHSA-2012:1308","RHSA-2012:1307"],"bugzilla":"802725","bugzilla_description":"CVE-2012-0884 openssl: CMS and PKCS#7 Bleichenbacher attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:0.9.8e-22.el5_8.1","openssl-0:1.0.0-20.el6_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0884.json"},{"CVE":"CVE-2011-4108","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0059"],"bugzilla":"771770","bugzilla_description":"CVE-2011-4108 openssl: DTLS plaintext recovery attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.0-20.el6_2.1","openssl-0:0.9.8e-20.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4108.json"},{"CVE":"CVE-2011-4109","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0168"],"bugzilla":"771771","bugzilla_description":"CVE-2011-4109 openssl: double-free in policy checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-20.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4109.json"},{"CVE":"CVE-2011-4576","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0109","RHSA-2012:0086","RHSA-2012:0168","RHSA-2012:0059"],"bugzilla":"771775","bugzilla_description":"CVE-2011-4576 openssl: uninitialized SSL 3.0 padding","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:0.9.7a-43.18.el4","openssl-0:1.0.0-20.el6_2.1","openssl-0:0.9.8e-20.el5_7.1","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4576.json"},{"CVE":"CVE-2011-4577","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:0109","RHSA-2012:0059"],"bugzilla":"771778","bugzilla_description":"CVE-2011-4577 openssl: malformed RFC 3779 data can cause assertion failures","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.0-20.el6_2.1","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4577.json"},{"CVE":"CVE-2011-4619","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0109","RHSA-2012:0086","RHSA-2012:0168","RHSA-2012:0059"],"bugzilla":"771780","bugzilla_description":"CVE-2011-4619 openssl: SGC restart DoS attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.7a-43.18.el4","openssl-0:1.0.0-20.el6_2.1","openssl-0:0.9.8e-20.el5_7.1","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4619.json"},{"CVE":"CVE-2012-0027","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":[],"bugzilla":"771782","bugzilla_description":"CVE-2012-0027 openssl: invalid GOST parameters DoS attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0027.json"},{"CVE":"CVE-2011-4354","severity":"moderate","public_date":"2011-11-24T00:00:00Z","advisories":[],"bugzilla":"757909","bugzilla_description":"CVE-2011-4354 openssl: ECC private leak (disclosure of TLS server's private key)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4354.json"},{"CVE":"CVE-2011-3389","severity":"moderate","public_date":"2011-09-10T00:00:00Z","advisories":["RHSA-2011:1384","RHSA-2012:0508","RHSA-2011:1380","RHSA-2012:0034","RHSA-2012:0343","RHSA-2013:1455","RHSA-2012:0006"],"bugzilla":"737506","bugzilla_description":"CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2","java-1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3389.json"},{"CVE":"CVE-2011-3210","severity":"moderate","public_date":"2011-09-06T00:00:00Z","advisories":[],"bugzilla":"736079","bugzilla_description":"CVE-2011-3210 openssl: TLS ephemeral ECDH crashes in OpenSSL","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3210.json"},{"CVE":"CVE-2011-3207","severity":"moderate","public_date":"2011-09-06T00:00:00Z","advisories":["RHSA-2011:1409"],"bugzilla":"736087","bugzilla_description":"CVE-2011-3207 openssl: CRL verification vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.0-10.el6_1.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3207.json"},{"CVE":"CVE-2011-1945","severity":"important","public_date":"2011-05-17T00:00:00Z","advisories":[],"bugzilla":"709021","bugzilla_description":"CVE-2011-1945 openssl: ECDSA private key leak through a remote timing attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1945.json"},{"CVE":"CVE-2011-5095","severity":"moderate","public_date":"2011-04-13T00:00:00Z","advisories":[],"bugzilla":"834062","bugzilla_description":"CVE-2011-5095 openssl: weak public value accepted during Diffie Hellman key exchange","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5095.json"},{"CVE":"CVE-2011-1473","severity":"low","public_date":"2011-03-13T00:00:00Z","advisories":[],"bugzilla":"707065","bugzilla_description":"CVE-2011-1473 openssl: DoS via repeated SSL session renegotiations","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1473.json"},{"CVE":"CVE-2012-0050","severity":"important","public_date":"2011-01-18T00:00:00Z","advisories":[],"bugzilla":"782795","bugzilla_description":"CVE-2012-0050 openssl: remote DTLS server DoS introduced in the CVE-2011-4108 fix","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0050.json"},{"CVE":"CVE-2010-4180","severity":"moderate","public_date":"2010-12-02T00:00:00Z","advisories":["RHSA-2010:0979","RHSA-2010:0978","RHSA-2010:0977","RHSA-2011:0896"],"bugzilla":"659462","bugzilla_description":"CVE-2010-4180 openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG ciphersuite downgrade attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.0-4.el6_0.2","openssl-0:0.9.8e-12.el5_5.7","openssl-0:0.9.7a-43.17.el4_8.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4180.json"},{"CVE":"CVE-2008-7270","severity":"moderate","public_date":"2010-12-02T00:00:00Z","advisories":["RHSA-2010:0978","RHSA-2010:0977","RHSA-2011:0896"],"bugzilla":"660650","bugzilla_description":"CVE-2008-7270 openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG downgrade-to-disabled ciphersuite attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5_5.7","openssl-0:0.9.7a-43.17.el4_8.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-7270.json"},{"CVE":"CVE-2006-7248","severity":"moderate","public_date":"2006-08-29T00:00:00Z","advisories":[],"bugzilla":"798100","bugzilla_description":"CVE-2006-7250 openssl: mime_hdr_cmp NULL dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7248.json"},{"CVE":"CVE-2006-7250","severity":"moderate","public_date":"2006-08-29T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"798100","bugzilla_description":"CVE-2006-7250 openssl: mime_hdr_cmp NULL dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7250.json"},{"CVE":"CVE-2000-1254","severity":"moderate","public_date":"2000-06-01T00:00:00Z","advisories":[],"bugzilla":"1333287","bugzilla_description":"CVE-2000-1254 openssl: Mishandling C bitwise-shift operations making easier to bypass protection mechanisms","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2000-1254.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl_security_api_results.json
new file mode 100644
index 0000000..7ef85e3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openssl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-25644","severity":"important","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4257","RHSA-2020:4256"],"bugzilla":"1885485","bugzilla_description":"CVE-2020-25644 wildfly-openssl: memory leak per HTTP session creation in WildFly OpenSSL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el8eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el6eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el7eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25644.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1968","severity":"low","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877458","bugzilla_description":"CVE-2020-1968 openssl: Information exposure when DH secret are reused across multiple TLS connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-1967","severity":"important","public_date":"2020-04-21T00:00:00Z","advisories":[],"bugzilla":"1823670","bugzilla_description":"CVE-2020-1967 openssl: Segmentation fault in SSL_check_chain causes denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1967.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1551","severity":"low","public_date":"2019-12-06T00:00:00Z","advisories":[],"bugzilla":"1780995","bugzilla_description":"CVE-2019-1551 openssl: Integer overflow in RSAZ modular exponentiation on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1551.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-1547","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752090","bugzilla_description":"CVE-2019-1547 openssl: side-channel weak encryption vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-602","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-1549","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752095","bugzilla_description":"CVE-2019-1549 openssl: information disclosure in fork()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-1563","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752100","bugzilla_description":"CVE-2019-1563 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-1552","severity":"low","public_date":"2019-07-30T00:00:00Z","advisories":[],"bugzilla":"1745637","bugzilla_description":"CVE-2019-1552 openssl: Insecure path defaults vulnerability in mingw builds","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1552.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2019-1543","severity":"low","public_date":"2019-03-06T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1695954","bugzilla_description":"CVE-2019-1543 openssl: ChaCha20-Poly1305 with long nonces","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-1559","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:2304","RHSA-2019:2439","RHSA-2019:3929","RHSA-2019:2437","RHSA-2019:2471"],"bugzilla":"1683804","bugzilla_description":"CVE-2019-1559 openssl: 0-byte record padding oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-0:1.0.1e-58.el6_10","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-5407","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3932","RHSA-2019:0483","RHSA-2019:2125","RHSA-2019:3929","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1645695","bugzilla_description":"CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7_6.1","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-0735","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1644356","bugzilla_description":"CVE-2018-0735 openssl: timing side channel attack in the ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0734","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:3700","RHSA-2019:3932","RHSA-2019:2304","RHSA-2019:3933","RHSA-2019:3935","RHBA-2019:3303"],"bugzilla":"1644364","bugzilla_description":"CVE-2018-0734 openssl: timing side channel attack in the DSA signature algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0732","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2019:1296","RHSA-2019:1543","RHSA-2018:2553","RHSA-2018:2552","RHSA-2018:3221"],"bugzilla":"1591100","bugzilla_description":"CVE-2018-0732 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-1:1.0.2k-16.el7","rhoar-nodejs-1:8.11.4-2.el7","rhoar-nodejs-1:10.9.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-0737","severity":"low","public_date":"2018-04-16T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:3933","RHSA-2018:3221","RHSA-2019:3935"],"bugzilla":"1568253","bugzilla_description":"CVE-2018-0737 openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0737.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-0733","severity":"moderate","public_date":"2018-03-27T00:00:00Z","advisories":[],"bugzilla":"1561260","bugzilla_description":"CVE-2018-0733 openssl: Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages in a reduced number of attempts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0733.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-0739","severity":"moderate","public_date":"2018-03-27T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3090","RHSA-2019:1712","RHSA-2019:1711","RHSA-2018:3221"],"bugzilla":"1561266","bugzilla_description":"CVE-2018-0739 openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-400","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7","openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0739.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3737","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523504","bugzilla_description":"CVE-2017-3737 openssl: Read/write after SSL object in error state","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3738","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523510","bugzilla_description":"CVE-2017-3738 openssl: rsaz_1024_mul_avx2 overflow bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-1000808","severity":"low","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2019:0085"],"bugzilla":"1640216","bugzilla_description":"CVE-2018-1000808 pyOpenSSL: Failure to release memory before removing last reference in PKCS #12 Store","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["pyOpenSSL-0:17.5.0-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-1000807","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2019:0085"],"bugzilla":"1640217","bugzilla_description":"CVE-2018-1000807 pyOpenSSL: Use-after-free in X509 object handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["pyOpenSSL-0:17.5.0-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3736","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1509169","bugzilla_description":"CVE-2017-3736 openssl: bn_sqrx8x_internal carry bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":["openssl-1:1.0.2k-12.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3735","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":["RHSA-2018:3221"],"bugzilla":"1486144","bugzilla_description":"CVE-2017-3735 openssl: Malformed X.509 IPAdressFamily could cause OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3733","severity":"important","public_date":"2017-02-16T00:00:00Z","advisories":[],"bugzilla":"1421695","bugzilla_description":"CVE-2017-3733 openssl: Encrypt-Then-Mac renegotiation crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3733.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3731","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2017:0286","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416852","bugzilla_description":"CVE-2017-3731 openssl: Truncated packet could crash via OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["openssl-0:1.0.1e-48.el6_8.4","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3731.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3730","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":[],"bugzilla":"1416855","bugzilla_description":"CVE-2017-3730 openssl: Bad (EC)DHE parameters cause a client crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3730.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3732","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416856","bugzilla_description":"CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-7056","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1802","RHSA-2017:1801","RHBA-2017:1929"],"bugzilla":"1412120","bugzilla_description":"CVE-2016-7056 openssl: ECDSA P-256 timing attack key recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.0.2k-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7056.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-7054","severity":"important","public_date":"2016-11-10T00:00:00Z","advisories":[],"bugzilla":"1393920","bugzilla_description":"CVE-2016-7054 openssl: Corrupting larger payloads when using ChaCha20/Poly1305 ciphersuites leads to DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7053","severity":"moderate","public_date":"2016-11-10T00:00:00Z","advisories":[],"bugzilla":"1393930","bugzilla_description":"CVE-2016-7053 openssl: CMS Null dereference vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-8610","severity":"moderate","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:0286","RHSA-2017:0574"],"bugzilla":"1384743","bugzilla_description":"CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","openssl-0:1.0.1e-48.el6_8.4","gnutls-0:2.12.23-21.el6","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7055","severity":"low","public_date":"2016-10-11T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1393929","bugzilla_description":"CVE-2016-7055 openssl: Carry propagating bug in Montgomery multiplication","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7055.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-6309","severity":"critical","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1379302","bugzilla_description":"CVE-2016-6309 openssl: Use After Free for large message sizes","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6309.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-7052","severity":"moderate","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1379310","bugzilla_description":"CVE-2016-7052 openssl: Missing CRL sanity check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7052.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6304","severity":"important","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2016:2802","RHSA-2017:2493","RHSA-2017:2494","RHSA-2016:1940"],"bugzilla":"1377600","bugzilla_description":"CVE-2016-6304 openssl: OCSP Status Request extension unbounded memory growth","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-0:1.0.1e-16.el6_5.17","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-42.el6_7.6","openssl-0:1.0.1e-48.el6_8.3","openssl-0:1.0.0-27.el6_4.6","openssl-0:1.0.1e-30.el6_6.13","openssl-0:1.0.0-20.el6_2.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6305","severity":"moderate","public_date":"2016-09-22T00:00:00Z","advisories":[],"bugzilla":"1378127","bugzilla_description":"CVE-2016-6305 openssl: SSL_peek() hang on empty record","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6305.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6306","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1377594","bugzilla_description":"CVE-2016-6306 openssl: certificate message OOB reads","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6306.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6307","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1378203","bugzilla_description":"CVE-2016-6307 openssl: excessive allocation of memory in tls_get_message_header()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6307.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-6308","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1378208","bugzilla_description":"CVE-2016-6308 openssl: excessive allocation of memory in dtls1_preprocess_fragment()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6308.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-2183","severity":"moderate","public_date":"2016-08-24T00:00:00Z","advisories":["RHSA-2020:0451","RHSA-2020:3842","RHSA-2017:3240","RHSA-2019:1245","RHBA-2019:2581","RHSA-2017:0462","RHSA-2017:3113","RHSA-2017:3114","RHSA-2017:2710","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:3239","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:2709","RHSA-2017:2708","RHSA-2018:2123","RHSA-2019:2859"],"bugzilla":"1369383","bugzilla_description":"CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","openshift3/metrics-heapster:v3.11.141-2","python-0:2.7.5-69.el7_5","openshift3/ose-console:v3.11.141-2","openshift3/oauth-proxy:v3.11.170-5","openshift4/ose-console:v4.5.0-202009201759.p0","openshift3/ose-kube-rbac-proxy:v3.11.141-2","openshift3/ose-metrics-server:v3.11.141-2","java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8","openshift4/ose-oauth-proxy:v4.1.18-201909201915"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-6302","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1369855","bugzilla_description":"CVE-2016-6302 openssl: Insufficient TLS session ticket HMAC length checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6303","severity":"moderate","public_date":"2016-08-20T00:00:00Z","advisories":[],"bugzilla":"1370146","bugzilla_description":"CVE-2016-6303 openssl: Integer overflow in MDC2_Update()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6303.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-2182","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1367340","bugzilla_description":"CVE-2016-2182 openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-2180","severity":"low","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2016:1940"],"bugzilla":"1359615","bugzilla_description":"CVE-2016-2180 OpenSSL: OOB read in TS_OBJ_print_bio()","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2180.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2016-2181","severity":"moderate","public_date":"2016-07-05T00:00:00Z","advisories":["RHSA-2016:1940"],"bugzilla":"1369113","bugzilla_description":"CVE-2016-2181 openssl: DTLS replay protection bypass allows DoS against DTLS connection","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-2179","severity":"moderate","public_date":"2016-06-30T00:00:00Z","advisories":["RHSA-2016:1940"],"bugzilla":"1369504","bugzilla_description":"CVE-2016-2179 openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2179.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-2178","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1343400","bugzilla_description":"CVE-2016-2178 openssl: Non-constant time codepath followed for certain operations in DSA implementation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2178.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2016-2177","severity":"low","public_date":"2016-05-05T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1341705","bugzilla_description":"CVE-2016-2177 openssl: Possible integer overflow vulnerabilities in codebase","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2177.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-2108","severity":"important","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2017:0193","RHSA-2016:0722","RHSA-2017:0194","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:1137","RHSA-2016:0996"],"bugzilla":"1331402","bugzilla_description":"CVE-2016-2108 openssl: Memory corruption in the ASN.1 encoder","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:0.9.8e-40.el5_11","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2108.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2107","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1331426","bugzilla_description":"CVE-2016-2107 openssl: Padding oracle in AES-NI CBC MAC check","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2107.json"},{"CVE":"CVE-2016-2105","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:1650","RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:1648","RHSA-2016:2957","RHSA-2016:1649","RHSA-2016:0996"],"bugzilla":"1331441","bugzilla_description":"CVE-2016-2105 openssl: EVP_EncodeUpdate overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2106","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:1650","RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:1648","RHSA-2016:2957","RHSA-2016:1649","RHSA-2016:0996"],"bugzilla":"1331536","bugzilla_description":"CVE-2016-2106 openssl: EVP_EncryptUpdate overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2106.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2176","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1331563","bugzilla_description":"CVE-2016-2176 openssl: EBCDIC overread in X509_NAME_oneline()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2176.json"},{"CVE":"CVE-2016-2109","severity":"low","public_date":"2016-04-23T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1330101","bugzilla_description":"CVE-2016-2109 openssl: ASN.1 BIO handling of large amounts of data","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2109.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-2842","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1314757","bugzilla_description":"CVE-2016-2842 openssl: doapr_outch function does not verify that certain memory allocation succeeds","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2842.json"},{"CVE":"CVE-2016-0800","severity":"important","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2016:0490","RHSA-2016:1519","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0305","RHSA-2016:0306","RHSA-2016:0301","RHSA-2016:0302","RHSA-2016:0445","RHSA-2016:0379","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1310593","bugzilla_description":"CVE-2016-0800 SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-42.el6_7.4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","rhev-hypervisor7-0:7.2-20160302.1.el7ev","openssl-0:1.0.1e-30.el6_6.12","rhev-hypervisor7-0:7.2-20160302.1.el6ev","openssl-0:1.0.0-20.el6_2.8","openssl-0:0.9.7a-43.23.el4","openssl-1:1.0.1e-42.el7_1.10","openssl098e-0:0.9.8e-20.el6_7.1","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-39.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0800.json"},{"CVE":"CVE-2016-0702","severity":"low","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2016:2957","RHSA-2016:0301","RHSA-2016:0379"],"bugzilla":"1310599","bugzilla_description":"CVE-2016-0702 OpenSSL: Side channel attack on modular exponentiation","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-42.el6_7.4","rhev-hypervisor7-0:7.2-20160302.1.el7ev","rhev-hypervisor7-0:7.2-20160302.1.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0702.json"},{"CVE":"CVE-2016-0703","severity":"moderate","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0303"],"bugzilla":"1310811","bugzilla_description":"CVE-2016-0703 openssl: Divide-and-conquer session key recovery in SSLv2","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0703.json"},{"CVE":"CVE-2016-0704","severity":"moderate","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0303"],"bugzilla":"1310814","bugzilla_description":"CVE-2016-0704 openssl: SSLv2 Bleichenbacher protection overwrites wrong bytes for export ciphers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0704.json"},{"CVE":"CVE-2016-0797","severity":"low","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2016:2957","RHSA-2016:0301","RHSA-2016:0302","RHSA-2016:0379"],"bugzilla":"1311880","bugzilla_description":"CVE-2016-0797 OpenSSL: BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-42.el6_7.4","rhev-hypervisor7-0:7.2-20160302.1.el7ev","rhev-hypervisor7-0:7.2-20160302.1.el6ev","openssl-0:0.9.8e-39.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0797.json"},{"CVE":"CVE-2016-0799","severity":"low","public_date":"2016-02-26T00:00:00Z","advisories":["RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1312219","bugzilla_description":"CVE-2016-0799 OpenSSL: Fix memory issues in BIO_*printf functions","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0799.json"},{"CVE":"CVE-2016-0798","severity":"low","public_date":"2016-02-25T00:00:00Z","advisories":[],"bugzilla":"1311876","bugzilla_description":"CVE-2016-0798 OpenSSL: Avoid memory leak in SRP","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0798.json"},{"CVE":"CVE-2016-0705","severity":"low","public_date":"2016-02-18T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2016:2957","RHSA-2016:0301","RHSA-2016:0379"],"bugzilla":"1310596","bugzilla_description":"CVE-2016-0705 OpenSSL: Double-free in DSA code","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-42.el6_7.4","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","rhev-hypervisor7-0:7.2-20160302.1.el7ev","rhev-hypervisor7-0:7.2-20160302.1.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0705.json"},{"CVE":"CVE-2015-3194","severity":"low","public_date":"2016-01-28T00:00:00Z","advisories":["RHSA-2015:2617","RHSA-2016:2957"],"bugzilla":"1288320","bugzilla_description":"CVE-2015-3194 OpenSSL: Certificate verify crash with missing PSS parameter","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.1","openssl-1:1.0.1e-51.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3194.json"},{"CVE":"CVE-2016-0701","severity":"moderate","public_date":"2016-01-28T00:00:00Z","advisories":[],"bugzilla":"1301845","bugzilla_description":"CVE-2016-0701 OpenSSL: DH small subgroups","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0701.json"},{"CVE":"CVE-2015-3197","severity":"low","public_date":"2016-01-28T00:00:00Z","advisories":["RHSA-2016:0490","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0305","RHSA-2016:0306","RHSA-2016:0301","RHSA-2016:0302","RHSA-2016:0445","RHSA-2016:0379","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1301846","bugzilla_description":"CVE-2015-3197 OpenSSL: SSLv2 doesn't block disabled ciphers","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-42.el6_7.4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","rhev-hypervisor7-0:7.2-20160302.1.el7ev","openssl-0:1.0.1e-30.el6_6.12","rhev-hypervisor7-0:7.2-20160302.1.el6ev","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8","openssl-0:0.9.7a-43.23.el4","openssl098e-0:0.9.8e-20.el6_7.1","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-39.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3197.json"},{"CVE":"CVE-2015-7575","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0012","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0007","RHSA-2016:0008","RHSA-2016:0049"],"bugzilla":"1289841","bugzilla_description":"CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.2","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","nss-0:3.19.1-19.el7_2","gnutls-0:3.3.8-14.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","gnutls-0:2.8.5-19.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","nss-0:3.19.1-8.el6_7","openssl-1:1.0.1e-51.el7_2.2","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json"},{"CVE":"CVE-2015-1794","severity":"low","public_date":"2015-12-04T00:00:00Z","advisories":[],"bugzilla":"1288955","bugzilla_description":"CVE-2015-1794 OpenSSL: Anon DH ServerKeyExchange with 0 p parameter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1794.json"},{"CVE":"CVE-2015-3193","severity":"moderate","public_date":"2015-12-03T00:00:00Z","advisories":[],"bugzilla":"1288317","bugzilla_description":"CVE-2015-3193 OpenSSL: BN_mod_exp may produce incorrect results on x86_64","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3193.json"},{"CVE":"CVE-2015-3195","severity":"moderate","public_date":"2015-12-03T00:00:00Z","advisories":["RHSA-2015:2617","RHSA-2016:2056","RHSA-2016:2957","RHSA-2015:2616"],"bugzilla":"1288322","bugzilla_description":"CVE-2015-3195 OpenSSL: X509_ATTRIBUTE memory leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-42.el6_7.1","openssl-1:1.0.1e-51.el7_2.1","openssl-0:0.9.8e-37.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-3196","severity":"low","public_date":"2015-12-03T00:00:00Z","advisories":["RHSA-2015:2617","RHSA-2016:2957"],"bugzilla":"1288326","bugzilla_description":"CVE-2015-3196 OpenSSL: Race condition handling PSK identify hint","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.1","openssl-1:1.0.1e-51.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3196.json"},{"CVE":"CVE-2015-1793","severity":"important","public_date":"2015-07-09T00:00:00Z","advisories":[],"bugzilla":"1238619","bugzilla_description":"CVE-2015-1793 openssl: alternative chains certificate forgery","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1793.json"},{"CVE":"CVE-2015-2721","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1664","RHSA-2015:1185"],"bugzilla":"1236967","bugzilla_description":"CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["nss-0:3.19.1-3.el6_6","nss-0:3.19.1-1.el5_11","nss-0:3.19.1-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2721.json"},{"CVE":"CVE-2015-1788","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":[],"bugzilla":"1228600","bugzilla_description":"CVE-2015-1788 OpenSSL: Malformed ECParameters causes infinite loop","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1788.json"},{"CVE":"CVE-2015-1789","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2015:1197"],"bugzilla":"1228603","bugzilla_description":"CVE-2015-1789 OpenSSL: out-of-bounds read in X509_cmp_time","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11","openssl-0:0.9.8e-36.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1789.json"},{"CVE":"CVE-2015-1790","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2015:1197"],"bugzilla":"1228604","bugzilla_description":"CVE-2015-1790 OpenSSL: PKCS7 crash with missing EnvelopedContent","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11","openssl-0:0.9.8e-36.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1790.json"},{"CVE":"CVE-2015-1792","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115"],"bugzilla":"1228607","bugzilla_description":"CVE-2015-1792 OpenSSL: CMS verify infinite loop with unknown hash function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1792.json"},{"CVE":"CVE-2015-1791","severity":"low","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115"],"bugzilla":"1228608","bugzilla_description":"CVE-2015-1791 OpenSSL: Race condition handling NewSessionTicket","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1791.json"},{"CVE":"CVE-2014-8176","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2016:2957"],"bugzilla":"1228611","bugzilla_description":"CVE-2014-8176 OpenSSL: Invalid free in DTLS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-3216","severity":"low","public_date":"2015-05-28T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2016:2957"],"bugzilla":"1227574","bugzilla_description":"CVE-2015-3216 openssl: Crash in ssleay_rand_bytes due to locking regression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3216.json"},{"CVE":"CVE-2015-4000","severity":"moderate","public_date":"2015-05-20T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2016:2056","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2016:1624","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1197","RHSA-2015:1230","RHSA-2015:1185","RHSA-2015:1072"],"bugzilla":"1223211","bugzilla_description":"CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","nss-0:3.19.1-3.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","nss-0:3.19.1-3.ael7b_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","openssl-0:1.0.1e-30.el6_6.9","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","openssl-1:1.0.1e-42.ael7b_1.6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.8.0-openjdk-1:1.8.0.51-1.b16.ael7b_1","openssl-0:0.9.8e-36.el5_11","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-2808","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1207101","bugzilla_description":"CVE-2015-2808 SSL/TLS: \"Invariance Weakness\" vulnerability in RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2808.json"},{"CVE":"CVE-2015-0291","severity":"important","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202338","bugzilla_description":"CVE-2015-0291 openssl: ClientHello sigalgs NULL pointer dereference DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0291.json"},{"CVE":"CVE-2015-0290","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202345","bugzilla_description":"CVE-2015-0290 openssl: multiblock corrupted pointer","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0290.json"},{"CVE":"CVE-2015-0207","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202351","bugzilla_description":"CVE-2015-0207 openssl: DTLS segmentation fault in DTLSv1_listen","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0207.json"},{"CVE":"CVE-2015-0286","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0752","RHSA-2016:2957","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202366","bugzilla_description":"CVE-2015-0286 openssl: invalid pointer use in ASN1_TYPE_cmp()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822->CWE-125","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0286.json"},{"CVE":"CVE-2015-0208","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202369","bugzilla_description":"CVE-2015-0208 openssl: segmentation fault for invalid PSS parameters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0208.json"},{"CVE":"CVE-2015-0287","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202380","bugzilla_description":"CVE-2015-0287 openssl: ASN.1 structure reuse memory corruption","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0287.json"},{"CVE":"CVE-2015-0289","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202384","bugzilla_description":"CVE-2015-0289 openssl: PKCS7 NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0289.json"},{"CVE":"CVE-2015-0292","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202395","bugzilla_description":"CVE-2015-0292 openssl: integer underflow leading to buffer overflow in base64 decoding","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-120","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0292.json"},{"CVE":"CVE-2015-0293","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2016:0490","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0445","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1202404","bugzilla_description":"CVE-2015-0293 openssl: assertion failure in SSLv2 servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0293.json"},{"CVE":"CVE-2015-1787","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202406","bugzilla_description":"CVE-2015-1787 openssl: segmentation fault in client authentication with empty CKE and DHE","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1787.json"},{"CVE":"CVE-2015-0285","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202410","bugzilla_description":"CVE-2015-0285 openssl: handshake with unseeded PRNG","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-335","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0285.json"},{"CVE":"CVE-2015-0288","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHEA-2015:1770","RHEA-2015:1771","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202418","bugzilla_description":"CVE-2015-0288 openssl: X509_to_X509_REQ NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0288.json"},{"CVE":"CVE-2009-5146","severity":"moderate","public_date":"2015-03-16T00:00:00Z","advisories":[],"bugzilla":"1203232","bugzilla_description":"CVE-2009-5146 openssl: memory leak in hostname TLS extension","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5146.json"},{"CVE":"CVE-2015-0209","severity":"low","public_date":"2015-02-09T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:0752","RHSA-2016:2957","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1196737","bugzilla_description":"CVE-2015-0209 openssl: use-after-free on invalid EC private key import","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0209.json"},{"CVE":"CVE-2014-3571","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180234","bugzilla_description":"CVE-2014-3571 openssl: DTLS segmentation fault in dtls1_get_record","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3571.json"},{"CVE":"CVE-2015-0206","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180235","bugzilla_description":"CVE-2015-0206 openssl: DTLS memory leak in dtls1_buffer_record","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0206.json"},{"CVE":"CVE-2015-0205","severity":"low","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180239","bugzilla_description":"CVE-2015-0205 openssl: DH client certificates accepted without verification","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0205.json"},{"CVE":"CVE-2014-3570","severity":"low","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2016:1650","RHSA-2015:0066","RHSA-2015:0849"],"bugzilla":"1180240","bugzilla_description":"CVE-2014-3570 openssl: Bignum squaring may produce incorrect results","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3570.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-0204","severity":"moderate","public_date":"2015-01-06T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2016:1650","RHEA-2015:0955","RHSA-2015:0066","RHSA-2015:0849"],"bugzilla":"1180184","bugzilla_description":"CVE-2015-0204 openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"(CWE-327|CWE-757)","affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2014-3572","severity":"low","public_date":"2015-01-05T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180185","bugzilla_description":"CVE-2014-3572 openssl: ECDH downgrade bug fix","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3572.json"},{"CVE":"CVE-2014-8275","severity":"low","public_date":"2015-01-05T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0066"],"bugzilla":"1180187","bugzilla_description":"CVE-2014-8275 openssl: Fix various certificate fingerprint issues","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8275.json"},{"CVE":"CVE-2014-9424","severity":"moderate","public_date":"2014-12-29T00:00:00Z","advisories":[],"bugzilla":"1177569","bugzilla_description":"CVE-2014-9424 libressl: Double-free in ssl_parse_clienthello_use_srtp_ext() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9424.json"},{"CVE":"CVE-2014-8730","severity":"moderate","public_date":"2014-12-09T00:00:00Z","advisories":[],"bugzilla":"1171965","bugzilla_description":"CVE-2014-8730 TLS: incorrect check of padding bytes when using CBC cipher suites","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8730.json"},{"CVE":"CVE-2014-3569","severity":"moderate","public_date":"2014-10-21T00:00:00Z","advisories":[],"bugzilla":"1177249","bugzilla_description":"CVE-2014-3569 openssl: denial of service in ssl23_get_client_hello function","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3569.json"},{"CVE":"CVE-2014-3513","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1652","RHSA-2014:1692"],"bugzilla":"1152953","bugzilla_description":"CVE-2014-3513 openssl: SRTP memory leak causes crash when using specially-crafted handshake message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-30.el6_6.2","openssl-1:1.0.1e-34.el7_0.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3513.json"},{"CVE":"CVE-2014-3567","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1652","RHSA-2015:0126","RHSA-2014:1692"],"bugzilla":"1152961","bugzilla_description":"CVE-2014-3567 openssl: Invalid TLS/SSL session tickets could cause memory leak leading to server crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["rhev-hypervisor6-0:6.6-20150123.1.el6ev","openssl-0:1.0.1e-30.el6_6.2","openssl-1:1.0.1e-34.el7_0.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3567.json"},{"CVE":"CVE-2014-3568","severity":"low","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1152967","bugzilla_description":"CVE-2014-3568 openssl: Build option no-ssl3 is incomplete","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3568.json"},{"CVE":"CVE-2014-3566","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2015:1546","RHSA-2015:1545","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2014:1881","RHSA-2014:1880","RHSA-2015:0080","RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2014:1920","RHSA-2015:0067","RHSA-2015:0012","RHSA-2015:0011","RHSA-2015:0264","RHSA-2015:0010","RHSA-2015:0086","RHSA-2015:0085","RHBA-2014:1857"],"bugzilla":"1152789","bugzilla_description":"CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-636|CWE-757)","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","openshift-origin-node-proxy-0:1.16.4.2-1.el6op","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","openshift-origin-node-proxy-0:1.22.3.4-1.el6op","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json"},{"CVE":"CVE-2014-2970","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1118169","bugzilla_description":"CVE-2014-2970 openssl: client-crash when parsing SRP parameters (VU#904060)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2970.json"},{"CVE":"CVE-2014-3508","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127490","bugzilla_description":"CVE-2014-3508 openssl: information leak in pretty printing functions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3508.json"},{"CVE":"CVE-2014-5139","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1127491","bugzilla_description":"CVE-2014-5139 openssl: crash with SRP ciphersuite in Server Hello message","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5139.json"},{"CVE":"CVE-2014-3509","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1052","RHSA-2015:0197","RHSA-2014:1054"],"bugzilla":"1127498","bugzilla_description":"CVE-2014-3509 openssl: race condition in ssl_parse_serverhello_tlsext","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-362","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","spice-client-msi-0:3.5-2","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3509.json"},{"CVE":"CVE-2014-3505","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127499","bugzilla_description":"CVE-2014-3505 openssl: DTLS packet processing double free","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-672","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3505.json"},{"CVE":"CVE-2014-3506","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127500","bugzilla_description":"CVE-2014-3506 openssl: DTLS memory exhaustion","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-862->CWE-400","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3506.json"},{"CVE":"CVE-2014-3507","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1052","RHSA-2014:1054"],"bugzilla":"1127502","bugzilla_description":"CVE-2014-3507 openssl: DTLS memory leak from zero-length fragments","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3507.json"},{"CVE":"CVE-2014-3510","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127503","bugzilla_description":"CVE-2014-3510 openssl: DTLS anonymous (EC)DH denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3510.json"},{"CVE":"CVE-2014-3511","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2015:0126","RHSA-2014:1052","RHSA-2015:0197","RHSA-2014:1054"],"bugzilla":"1127504","bugzilla_description":"CVE-2014-3511 openssl: TLS protocol downgrade attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-390","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","rhev-hypervisor6-0:6.6-20150123.1.el6ev","spice-client-msi-0:3.5-2","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3511.json"},{"CVE":"CVE-2014-3512","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1127505","bugzilla_description":"CVE-2014-3512 openssl: SRP buffer overrun","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3512.json"},{"CVE":"CVE-2014-0224","severity":"important","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0630","RHSA-2014:0631","RHSA-2014:0624","RHSA-2014:0679","RHSA-2014:0632","RHSA-2014:0633","RHSA-2014:0627","RHSA-2014:0628","RHSA-2014:0625","RHSA-2014:0626","RHSA-2014:0629","RHSA-2014:0680"],"bugzilla":"1103586","bugzilla_description":"CVE-2014-0224 openssl: SSL/TLS MITM vulnerability","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-841","affected_packages":["openssl-0:0.9.8e-27.el5_10.3","openssl-0:1.0.1e-16.el6_5.14","openssl097a-0:0.9.7a-12.el5_10.1","openssl098e-0:0.9.8e-18.el6_5.2","openssl-1:1.0.1e-34.el7_0.3","openssl098e-0:0.9.8e-29.el7_0.2","rhev-hypervisor6-0:6.5-20140603.1.el6ev","openssl-0:0.9.8e-26.el5_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0224.json"},{"CVE":"CVE-2014-0221","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625","RHSA-2014:1021","RHSA-2014:1053","RHSA-2014:1086"],"bugzilla":"1103593","bugzilla_description":"CVE-2014-0221 openssl: DoS when sending invalid DTLS handshake","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["openssl-0:0.9.8e-27.el5_10.4","openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0221.json"},{"CVE":"CVE-2014-0195","severity":"important","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1103598","bugzilla_description":"CVE-2014-0195 openssl: Buffer overflow via DTLS invalid fragment","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-119","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0195.json"},{"CVE":"CVE-2014-3470","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1103600","bugzilla_description":"CVE-2014-3470 openssl: client-side denial of service when using anonymous ECDH","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3470.json"},{"CVE":"CVE-2014-0198","severity":"moderate","public_date":"2014-04-21T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1093837","bugzilla_description":"CVE-2014-0198 openssl: SSL_MODE_RELEASE_BUFFERS NULL pointer dereference in do_ssl3_write()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0198.json"},{"CVE":"CVE-2010-5298","severity":"moderate","public_date":"2014-04-08T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1087195","bugzilla_description":"CVE-2010-5298 openssl: freelist misuse causing a possible use-after-free","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5298.json"},{"CVE":"CVE-2014-0160","severity":"important","public_date":"2014-04-07T00:00:00Z","advisories":["RHSA-2014:0377","RHSA-2014:0378","RHSA-2014:0376","RHSA-2014:0416","RHSA-2014:0396"],"bugzilla":"1084875","bugzilla_description":"CVE-2014-0160 openssl: information disclosure in handling of TLS heartbeat extension packets","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-119->CWE-201","affected_packages":["openssl-0:1.0.1e-16.el6_5.7","rhev-hypervisor6-0:6.5-20140118.1.3.2.el6_5","rhev-hypervisor6-0:6.5-20140407.0.el6ev","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0160.json"},{"CVE":"CVE-2014-0076","severity":"moderate","public_date":"2014-02-14T00:00:00Z","advisories":[],"bugzilla":"1080276","bugzilla_description":"CVE-2014-0076 openssl: ECDSA nonces susceptible to Yarom/Benger flush+reload cache side-channel attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0076.json"},{"CVE":"CVE-2013-4353","severity":"moderate","public_date":"2014-01-06T00:00:00Z","advisories":["RHSA-2014:0015","RHSA-2014:0416","RHSA-2014:0041"],"bugzilla":"1049058","bugzilla_description":"CVE-2013-4353 openssl: client NULL dereference crash on malformed handshake packets","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.4","rhev-hypervisor6-0:6.5-20140112.0.el6ev","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4353.json"},{"CVE":"CVE-2013-6449","severity":"important","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0015","RHSA-2014:0041"],"bugzilla":"1045363","bugzilla_description":"CVE-2013-6449 openssl: crash when using TLS 1.2 caused by use of incorrect hash algorithm","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.4","rhev-hypervisor6-0:6.5-20140112.0.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6449.json"},{"CVE":"CVE-2013-6450","severity":"important","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0015"],"bugzilla":"1047840","bugzilla_description":"CVE-2013-6450 openssl: crash in DTLS renegotiation after packet loss","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6450.json"},{"CVE":"CVE-2007-6755","severity":"moderate","public_date":"2013-10-11T00:00:00Z","advisories":[],"bugzilla":"1046045","bugzilla_description":"CVE-2007-6755 Dual_EC_DRBG: weak pseudo random number generator","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6755.json"},{"CVE":"CVE-2013-4314","severity":"moderate","public_date":"2013-09-04T00:00:00Z","advisories":[],"bugzilla":"1005325","bugzilla_description":"CVE-2013-4314 pyOpenSSL: hostname check bypassing vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4314.json"},{"CVE":"CVE-2013-2566","severity":"moderate","public_date":"2013-03-15T00:00:00Z","advisories":[],"bugzilla":"921947","bugzilla_description":"CVE-2013-2566 SSL/TLS: Attack against RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2566.json"},{"CVE":"CVE-2012-2686","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":[],"bugzilla":"908029","bugzilla_description":"CVE-2012-2686 openssl: DoS due to improper handling of CBC ciphersuites in TLS 1.1/1.2 on AES-NI supporting platforms","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2686.json"},{"CVE":"CVE-2013-0166","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":["RHSA-2013:0636","RHSA-2013:0833","RHSA-2013:0587","RHSA-2013:0782","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"908052","bugzilla_description":"CVE-2013-0166 openssl: DoS due to improper handling of OCSP response verification","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0166.json"},{"CVE":"CVE-2013-0169","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0636","RHSA-2013:0823","RHSA-2013:0833","RHSA-2013:0855","RHSA-2013:0822","RHSA-2013:0587","RHSA-2013:0532","RHSA-2013:1456","RHSA-2014:0416","RHSA-2013:0782","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"907589","bugzilla_description":"CVE-2013-0169 SSL/TLS: CBC padding timing attack (lucky-13)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3","spice-client-msi-0:3.3-12","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el5_9","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0169.json"},{"CVE":"CVE-2012-4929","severity":"moderate","public_date":"2012-09-13T00:00:00Z","advisories":["RHSA-2013:0636","RHSA-2013:0587","RHSA-2014:0416"],"bugzilla":"857051","bugzilla_description":"CVE-2012-4929 SSL/TLS CRIME attack against HTTPS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4929.json"},{"CVE":"CVE-2012-2333","severity":"moderate","public_date":"2012-05-10T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:1307","RHSA-2012:0699"],"bugzilla":"820686","bugzilla_description":"CVE-2012-2333 openssl: record length handling integer underflow","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["openssl-0:1.0.0-20.el6_2.5","openssl-0:0.9.8e-22.el5_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2333.json"},{"CVE":"CVE-2012-2131","severity":"important","public_date":"2012-04-23T00:00:00Z","advisories":[],"bugzilla":"815661","bugzilla_description":"CVE-2012-2131 openssl: incomplete fix of CVE-2012-2110 for 0.9.x","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2131.json"},{"CVE":"CVE-2012-2110","severity":"important","public_date":"2012-04-19T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:1307","RHSA-2012:0518","RHSA-2012:0522"],"bugzilla":"814185","bugzilla_description":"CVE-2012-2110 openssl: asn1_d2i_read_bio integer errors leading to buffer overflow","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["openssl-0:0.9.8e-12.el5_6.9","openssl-0:1.0.0-20.el6_2.4","openssl-0:0.9.8e-22.el5_8.3","openssl098e-0:0.9.8e-17.el6_2.2","openssl-0:1.0.0-10.el6_1.6","openssl097a-0:0.9.7a-11.el5_8.2","openssl-0:1.0.0-4.el6_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2110.json"},{"CVE":"CVE-2012-1165","severity":"moderate","public_date":"2012-03-12T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:0426","RHSA-2012:1308","RHSA-2012:1307"],"bugzilla":"802489","bugzilla_description":"CVE-2012-1165 openssl: mime_param_cmp NULL dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-22.el5_8.1","openssl-0:1.0.0-20.el6_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1165.json"},{"CVE":"CVE-2012-0884","severity":"low","public_date":"2012-03-12T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:0426","RHSA-2012:1308","RHSA-2012:1307"],"bugzilla":"802725","bugzilla_description":"CVE-2012-0884 openssl: CMS and PKCS#7 Bleichenbacher attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:0.9.8e-22.el5_8.1","openssl-0:1.0.0-20.el6_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0884.json"},{"CVE":"CVE-2011-4108","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0059"],"bugzilla":"771770","bugzilla_description":"CVE-2011-4108 openssl: DTLS plaintext recovery attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.0-20.el6_2.1","openssl-0:0.9.8e-20.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4108.json"},{"CVE":"CVE-2011-4109","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0168"],"bugzilla":"771771","bugzilla_description":"CVE-2011-4109 openssl: double-free in policy checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-20.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4109.json"},{"CVE":"CVE-2011-4576","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0109","RHSA-2012:0086","RHSA-2012:0168","RHSA-2012:0059"],"bugzilla":"771775","bugzilla_description":"CVE-2011-4576 openssl: uninitialized SSL 3.0 padding","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:0.9.7a-43.18.el4","openssl-0:1.0.0-20.el6_2.1","openssl-0:0.9.8e-20.el5_7.1","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4576.json"},{"CVE":"CVE-2011-4577","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:0109","RHSA-2012:0059"],"bugzilla":"771778","bugzilla_description":"CVE-2011-4577 openssl: malformed RFC 3779 data can cause assertion failures","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.0-20.el6_2.1","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4577.json"},{"CVE":"CVE-2011-4619","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0109","RHSA-2012:0086","RHSA-2012:0168","RHSA-2012:0059"],"bugzilla":"771780","bugzilla_description":"CVE-2011-4619 openssl: SGC restart DoS attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.7a-43.18.el4","openssl-0:1.0.0-20.el6_2.1","openssl-0:0.9.8e-20.el5_7.1","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4619.json"},{"CVE":"CVE-2012-0027","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":[],"bugzilla":"771782","bugzilla_description":"CVE-2012-0027 openssl: invalid GOST parameters DoS attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0027.json"},{"CVE":"CVE-2011-4354","severity":"moderate","public_date":"2011-11-24T00:00:00Z","advisories":[],"bugzilla":"757909","bugzilla_description":"CVE-2011-4354 openssl: ECC private leak (disclosure of TLS server's private key)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4354.json"},{"CVE":"CVE-2011-3389","severity":"moderate","public_date":"2011-09-10T00:00:00Z","advisories":["RHSA-2011:1384","RHSA-2012:0508","RHSA-2011:1380","RHSA-2012:0034","RHSA-2012:0343","RHSA-2013:1455","RHSA-2012:0006"],"bugzilla":"737506","bugzilla_description":"CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2","java-1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3389.json"},{"CVE":"CVE-2011-3210","severity":"moderate","public_date":"2011-09-06T00:00:00Z","advisories":[],"bugzilla":"736079","bugzilla_description":"CVE-2011-3210 openssl: TLS ephemeral ECDH crashes in OpenSSL","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3210.json"},{"CVE":"CVE-2011-3207","severity":"moderate","public_date":"2011-09-06T00:00:00Z","advisories":["RHSA-2011:1409"],"bugzilla":"736087","bugzilla_description":"CVE-2011-3207 openssl: CRL verification vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.0-10.el6_1.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3207.json"},{"CVE":"CVE-2011-1945","severity":"important","public_date":"2011-05-17T00:00:00Z","advisories":[],"bugzilla":"709021","bugzilla_description":"CVE-2011-1945 openssl: ECDSA private key leak through a remote timing attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1945.json"},{"CVE":"CVE-2011-5095","severity":"moderate","public_date":"2011-04-13T00:00:00Z","advisories":[],"bugzilla":"834062","bugzilla_description":"CVE-2011-5095 openssl: weak public value accepted during Diffie Hellman key exchange","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5095.json"},{"CVE":"CVE-2011-1473","severity":"low","public_date":"2011-03-13T00:00:00Z","advisories":[],"bugzilla":"707065","bugzilla_description":"CVE-2011-1473 openssl: DoS via repeated SSL session renegotiations","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1473.json"},{"CVE":"CVE-2011-0014","severity":"moderate","public_date":"2011-02-08T00:00:00Z","advisories":["RHSA-2011:0677"],"bugzilla":"676063","bugzilla_description":"CVE-2011-0014 openssl: OCSP stapling vulnerability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.0-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0014.json"},{"CVE":"CVE-2012-0050","severity":"important","public_date":"2011-01-18T00:00:00Z","advisories":[],"bugzilla":"782795","bugzilla_description":"CVE-2012-0050 openssl: remote DTLS server DoS introduced in the CVE-2011-4108 fix","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0050.json"},{"CVE":"CVE-2010-4180","severity":"moderate","public_date":"2010-12-02T00:00:00Z","advisories":["RHSA-2010:0979","RHSA-2010:0978","RHSA-2010:0977","RHSA-2011:0896"],"bugzilla":"659462","bugzilla_description":"CVE-2010-4180 openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG ciphersuite downgrade attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.0-4.el6_0.2","openssl-0:0.9.8e-12.el5_5.7","openssl-0:0.9.7a-43.17.el4_8.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4180.json"},{"CVE":"CVE-2008-7270","severity":"moderate","public_date":"2010-12-02T00:00:00Z","advisories":["RHSA-2010:0978","RHSA-2010:0977","RHSA-2011:0896"],"bugzilla":"660650","bugzilla_description":"CVE-2008-7270 openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG downgrade-to-disabled ciphersuite attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5_5.7","openssl-0:0.9.7a-43.17.el4_8.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-7270.json"},{"CVE":"CVE-2010-3864","severity":"important","public_date":"2010-11-16T00:00:00Z","advisories":["RHSA-2010:0888"],"bugzilla":"649304","bugzilla_description":"CVE-2010-3864 OpenSSL TLS extension parsing race condition","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-662->CWE-362->CWE-119","affected_packages":["openssl-0:1.0.0-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3864.json"},{"CVE":"CVE-2010-1633","severity":null,"public_date":"2010-06-01T00:00:00Z","advisories":[],"bugzilla":"598732","bugzilla_description":"CVE-2010-1633 openssl: information leak due to invalid Return value check","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1633.json"},{"CVE":"CVE-2010-0742","severity":null,"public_date":"2010-06-01T00:00:00Z","advisories":[],"bugzilla":"598738","bugzilla_description":"CVE-2010-0742 openssl: invalid ASN1 module definition for CMS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0742.json"},{"CVE":"CVE-2009-3245","severity":"important","public_date":"2010-02-23T00:00:00Z","advisories":["RHSA-2010:0977","RHSA-2011:0896","RHSA-2010:0440","RHSA-2010:0173","RHSA-2010:0162"],"bugzilla":"570924","bugzilla_description":"CVE-2009-3245 openssl: missing bn_wexpand return value checks","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-252->CWE-476","affected_packages":["rhev-hypervisor-0:5.4-2.1.12.1.el5_4rhev2_1","openssl096b-0:0.9.6b-16.50","openssl096b-0:0.9.6b-22.46.el4_8.1","openssl-0:0.9.7a-43.17.el4_8.6","openssl-0:0.9.8e-12.el5_4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3245.json"},{"CVE":"CVE-2010-0433","severity":"moderate","public_date":"2010-01-19T00:00:00Z","advisories":["RHSA-2010:0162"],"bugzilla":"569774","bugzilla_description":"CVE-2010-0433 openssl: crash caused by a missing krb5_sname_to_principal() return value check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5_4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0433.json"},{"CVE":"CVE-2009-4355","severity":"moderate","public_date":"2010-01-13T00:00:00Z","advisories":["RHSA-2010:0054"],"bugzilla":"546707","bugzilla_description":"CVE-2009-4355 openssl significant memory leak in certain SSLv3 requests (DoS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:0.9.8e-12.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4355.json"},{"CVE":"CVE-2009-3555","severity":"moderate","public_date":"2009-11-05T00:00:00Z","advisories":["RHSA-2009:1580","RHSA-2010:0408","RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2010:0786","RHSA-2010:0167","RHSA-2010:0166","RHSA-2010:0165","RHSA-2010:0440","RHSA-2010:0164","RHSA-2010:0163","RHSA-2010:0162","RHSA-2009:1579","RHSA-2009:1694","RHSA-2010:0807","RHSA-2010:0119","RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2011:0880","RHSA-2010:0155","RHSA-2010:0770","RHSA-2010:0011","RHSA-2015:1591","RHSA-2010:0130"],"bugzilla":"533125","bugzilla_description":"CVE-2009-3555 TLS: MITM attacks via session renegotiation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-300","affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","httpd-0:2.2.3-31.el5_4.2","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el5","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","openssl-0:0.9.8e-12.el5_4.6","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el4_8","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","rhev-hypervisor-0:5.4-2.1.12.1.el5_4rhev2_1","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5","openssl097a-0:0.9.7a-9.el5_4.2","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","httpd22-0:2.2.10-25.1.ep5.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","httpd-0:2.0.52-41.ent.6","gnutls-0:1.0.20-4.el4_8.7","httpd-0:2.2.10-11.ep5.el5","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","httpd-0:2.0.46-77.ent","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4","pulp-0:2.6.0.15-1.el7sat","openssl-0:0.9.7a-33.26"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3555.json"},{"CVE":"CVE-2009-2409","severity":"moderate","public_date":"2009-07-29T00:00:00Z","advisories":["RHSA-2009:1184","RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1186","RHSA-2009:1207","RHSA-2009:1190","RHSA-2010:0166","RHSA-2009:1584","RHSA-2010:0054","RHSA-2009:1432","RHSA-2010:0163","RHSA-2009:1662"],"bugzilla":"510197","bugzilla_description":"CVE-2009-2409 deprecate MD2 in SSL cert validation (Kaminsky)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","seamonkey-0:1.0.9-0.45.el3","java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","nss-0:3.12.3.99.3-1.el4_8.2","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","openssl-0:0.9.8e-12.el5_4.1","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","openssl-0:0.9.7a-33.26","nss-0:3.12.3.99.3-1.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2409.json"},{"CVE":"CVE-2009-1386","severity":"moderate","public_date":"2009-06-02T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"503685","bugzilla_description":"CVE-2009-1386 openssl: DTLS NULL deref crash on early ChangeCipherSpec request","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1386.json"},{"CVE":"CVE-2009-1387","severity":"moderate","public_date":"2009-06-02T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"503688","bugzilla_description":"CVE-2009-1387 openssl: DTLS out-of-sequence message handling NULL deref DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1387.json"},{"CVE":"CVE-2009-1377","severity":"moderate","public_date":"2009-05-12T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"501253","bugzilla_description":"CVE-2009-1377 OpenSSL: DTLS epoch record buffer memory DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1377.json"},{"CVE":"CVE-2009-1378","severity":"moderate","public_date":"2009-05-12T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"501254","bugzilla_description":"CVE-2009-1378 OpenSSL: DTLS fragment handling memory DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1378.json"},{"CVE":"CVE-2009-1379","severity":"moderate","public_date":"2009-05-11T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"501572","bugzilla_description":"CVE-2009-1379 OpenSSL: DTLS pointer use-after-free flaw (DoS)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1379.json"},{"CVE":"CVE-2009-0590","severity":"low","public_date":"2009-03-25T00:00:00Z","advisories":["RHSA-2009:1335","RHSA-2010:0163"],"bugzilla":"492304","bugzilla_description":"CVE-2009-0590 openssl: ASN1 printing crash","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5","openssl-0:0.9.7a-43.17.el4_8.5","openssl-0:0.9.7a-33.26"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0590.json"},{"CVE":"CVE-2007-4995","severity":"important","public_date":"2007-10-12T00:00:00Z","advisories":["RHSA-2007:0964"],"bugzilla":"321191","bugzilla_description":"CVE-2007-4995 openssl dtls out of order vulnerabilitiy","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssl-0:0.9.8b-8.3.el5_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4995.json"},{"CVE":"CVE-2007-5135","severity":"moderate","public_date":"2007-09-27T00:00:00Z","advisories":["RHSA-2007:1003","RHSA-2007:0964","RHSA-2007:0813"],"bugzilla":"309801","bugzilla_description":"CVE-2007-5135 openssl: SSL_get_shared_ciphers() off-by-one","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["openssl-0:0.9.7a-43.17.el4_6.1","openssl-0:0.9.6b-48","openssl-0:0.9.7a-33.24","openssl-0:0.9.8b-8.3.el5_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5135.json"},{"CVE":"CVE-2007-3108","severity":"moderate","public_date":"2007-08-01T00:00:00Z","advisories":["RHSA-2007:1003","RHSA-2007:0964","RHSA-2007:0813"],"bugzilla":"245732","bugzilla_description":"CVE-2007-3108 openssl: RSA side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssl-0:0.9.7a-43.17.el4_6.1","openssl-0:0.9.6b-48","openssl-0:0.9.7a-33.24","openssl-0:0.9.8b-8.3.el5_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3108.json"},{"CVE":"CVE-2006-7248","severity":"moderate","public_date":"2006-08-29T00:00:00Z","advisories":[],"bugzilla":"798100","bugzilla_description":"CVE-2006-7250 openssl: mime_hdr_cmp NULL dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7248.json"},{"CVE":"CVE-2006-7250","severity":"moderate","public_date":"2006-08-29T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"798100","bugzilla_description":"CVE-2006-7250 openssl: mime_hdr_cmp NULL dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7250.json"},{"CVE":"CVE-2004-0079","severity":"important","public_date":"2004-03-17T00:00:00Z","advisories":["RHSA-2005:830","RHSA-2005:829","RHSA-2004:120","RHSA-2004:121","RHSA-2004:139"],"bugzilla":"1617140","bugzilla_description":"CVE-2004-0079 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssl096b-0:0.9.6b-22.42","openssl096b-0:0.9.6b-16.42"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0079.json"},{"CVE":"CVE-2000-1254","severity":"moderate","public_date":"2000-06-01T00:00:00Z","advisories":[],"bugzilla":"1333287","bugzilla_description":"CVE-2000-1254 openssl: Mishandling C bitwise-shift operations making easier to bypass protection mechanisms","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2000-1254.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openwsman-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openwsman-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openwsman-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openwsman-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openwsman-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openwsman-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openwsman-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openwsman-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/openwsman-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oprofile-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oprofile-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oprofile-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oprofile-jit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oprofile-jit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oprofile-jit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oprofile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oprofile_security_api_results.json
new file mode 100644
index 0000000..cdb5459
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oprofile_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-1760","severity":"moderate","public_date":"2011-04-26T00:00:00Z","advisories":[],"bugzilla":"700883","bugzilla_description":"CVE-2011-1760 oprofile: Local privilege escalation via crafted opcontrol event parameter","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1760.json"},{"CVE":"CVE-2011-2471","severity":"moderate","public_date":"2011-04-26T00:00:00Z","advisories":[],"bugzilla":"712760","bugzilla_description":"CVE-2011-2471 oprofile: Local privilege escalation via shell metacharacters","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2471.json"},{"CVE":"CVE-2011-2472","severity":"moderate","public_date":"2011-04-26T00:00:00Z","advisories":[],"bugzilla":"712761","bugzilla_description":"CVE-2011-2472 oprofile: Directory traversal vulnerability in utils/opcontrol","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2472.json"},{"CVE":"CVE-2011-2473","severity":"moderate","public_date":"2011-04-26T00:00:00Z","advisories":[],"bugzilla":"712762","bugzilla_description":"CVE-2011-2473 oprofile: do_dump_data function symlink attack via opd_pipe","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2473.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opus_security_api_results.json
new file mode 100644
index 0000000..7a70907
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/opus_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-0381","severity":"low","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1413604","bugzilla_description":"CVE-2017-0381 opus: Memory corruption during media file and data processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0381.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/orc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/orc_security_api_results.json
new file mode 100644
index 0000000..41c123b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/orc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4245","severity":"moderate","public_date":"2015-02-06T00:00:00Z","advisories":[],"bugzilla":"995060","bugzilla_description":"CVE-2013-4245 orca: Arbitrary code execution due to insecure CWD Python module load","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4245.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/orca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/orca_security_api_results.json
new file mode 100644
index 0000000..41c123b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/orca_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4245","severity":"moderate","public_date":"2015-02-06T00:00:00Z","advisories":[],"bugzilla":"995060","bugzilla_description":"CVE-2013-4245 orca: Arbitrary code execution due to insecure CWD Python module load","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4245.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ortp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ortp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ortp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/os-prober_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/os-prober_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/os-prober_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oscap-anaconda-addon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oscap-anaconda-addon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oscap-anaconda-addon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/osinfo-db-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/osinfo-db-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/osinfo-db-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/osinfo-db_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/osinfo-db_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/osinfo-db_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/overpass-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/overpass-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/overpass-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-gtk2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-gtk2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-gtk2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-icon-theme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-icon-theme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/oxygen-icon-theme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/p11-kit-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/p11-kit-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/p11-kit-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/p11-kit-trust_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/p11-kit-trust_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/p11-kit-trust_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/p11-kit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/p11-kit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/p11-kit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-cluster-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-cluster-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-cluster-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-cts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-cts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-cts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-libs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-libs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-libs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-nagios-plugins-metadata_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-nagios-plugins-metadata_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-nagios-plugins-metadata_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-remote_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-remote_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker-remote_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker_security_api_results.json
new file mode 100644
index 0000000..635f0b5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pacemaker_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-3885","severity":"low","public_date":"2019-04-17T09:45:00Z","advisories":["RHSA-2019:1279","RHSA-2019:1278"],"bugzilla":"1694554","bugzilla_description":"CVE-2019-3885 pacemaker: Information disclosure through use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["pacemaker-0:1.1.19-8.el7_6.5","pacemaker-0:2.0.1-4.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-16877","severity":"important","public_date":"2019-04-17T04:30:00Z","advisories":["RHSA-2019:1279","RHSA-2019:1278"],"bugzilla":"1652646","bugzilla_description":"CVE-2018-16877 pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["pacemaker-0:1.1.19-8.el7_6.5","pacemaker-0:2.0.1-4.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16877.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-16878","severity":"moderate","public_date":"2019-04-17T04:30:00Z","advisories":["RHSA-2019:1279","RHSA-2019:1278"],"bugzilla":"1657962","bugzilla_description":"CVE-2018-16878 pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["pacemaker-0:1.1.19-8.el7_6.5","pacemaker-0:2.0.1-4.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16878.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-7035","severity":"important","public_date":"2016-11-03T00:00:00Z","advisories":["RHSA-2016:2675","RHSA-2016:2614"],"bugzilla":"1369732","bugzilla_description":"CVE-2016-7035 pacemaker: Privilege escalation due to improper guarding of IPC communication","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-285","affected_packages":["pacemaker-0:1.1.14-8.el6_8.2","pacemaker-0:1.1.15-11.el7_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7035.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-7797","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2578"],"bugzilla":"1379784","bugzilla_description":"CVE-2016-7797 pacemaker: pacemaker remote nodes vulnerable to hijacking, resulting in a DoS attack","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["pacemaker-0:1.1.15-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2015-1867","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:2383","RHSA-2015:1424"],"bugzilla":"1211370","bugzilla_description":"CVE-2015-1867 pacemaker: acl read-only access allow role assignment","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-863","affected_packages":["pacemaker-0:1.1.13-10.el7","pacemaker-0:1.1.12-8.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1867.json"},{"CVE":"CVE-2013-0281","severity":"low","public_date":"2013-02-14T00:00:00Z","advisories":["RHSA-2013:1635"],"bugzilla":"891922","bugzilla_description":"CVE-2013-0281 pacemaker: remote DoS when CIB management is enabled caused by use of blocking sockets","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pacemaker-0:1.1.10-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0281.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paflib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paflib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paflib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pakchois_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pakchois_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pakchois_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paktype-naqsh-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paktype-naqsh-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paktype-naqsh-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paktype-naskh-basic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paktype-naskh-basic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paktype-naskh-basic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paktype-tehreer-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paktype-tehreer-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paktype-tehreer-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam_krb5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam_krb5_security_api_results.json
new file mode 100644
index 0000000..c97be5d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam_krb5_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10595","severity":"moderate","public_date":"2020-03-31T03:00:00Z","advisories":[],"bugzilla":"1816536","bugzilla_description":"CVE-2020-10595 pam_krb5: incorrect input handling results in single byte buffer overflow which may lead to heap corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10595.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2009-1384","severity":"low","public_date":"2009-05-27T00:00:00Z","advisories":["RHSA-2010:0258"],"bugzilla":"502602","bugzilla_description":"CVE-2009-1384 pam_krb5: Password prompt varies for existent and non-existent users","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["pam_krb5-0:2.2.14-15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1384.json"},{"CVE":"CVE-2008-3825","severity":"moderate","public_date":"2008-10-01T00:00:00Z","advisories":["RHSA-2008:0907"],"bugzilla":"461960","bugzilla_description":"CVE-2008-3825 pam_krb5 existing_ticket permission flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pam_krb5-0:2.2.14-1.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3825.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam_pkcs11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam_pkcs11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam_pkcs11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam_security_api_results.json
new file mode 100644
index 0000000..a18cd37
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pam_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10595","severity":"moderate","public_date":"2020-03-31T03:00:00Z","advisories":[],"bugzilla":"1816536","bugzilla_description":"CVE-2020-10595 pam_krb5: incorrect input handling results in single byte buffer overflow which may lead to heap corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10595.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1930","severity":"moderate","public_date":"2020-01-30T00:00:00Z","advisories":[],"bugzilla":"1802977","bugzilla_description":"CVE-2020-1930 spamassassin: command injection via crafted configuration file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1930.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-1931","severity":"moderate","public_date":"2020-01-29T00:00:00Z","advisories":[],"bugzilla":"1802975","bugzilla_description":"CVE-2020-1931 spamassassin: command injection via crafted configuration file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1931.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-11805","severity":"moderate","public_date":"2019-12-12T00:00:00Z","advisories":[],"bugzilla":"1784974","bugzilla_description":"CVE-2018-11805 spamassassin: crafted configuration files can run system commands without any output or errors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11805.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-12420","severity":"moderate","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:3973"],"bugzilla":"1784984","bugzilla_description":"CVE-2019-12420 spamassassin: crafted email message can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":["spamassassin-0:3.4.0-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12420.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-17953","severity":"moderate","public_date":"2018-11-11T00:00:00Z","advisories":[],"bugzilla":"1652593","bugzilla_description":"CVE-2018-17953 pam: pam_access.so doesn't properly handle ip addresses and subnets filtering","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17953.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-15705","severity":"important","public_date":"2018-09-17T00:00:00Z","advisories":["RHSA-2018:2916"],"bugzilla":"1629521","bugzilla_description":"CVE-2017-15705 spamassassin: Certain unclosed tags in crafted emails allow for scan timeouts and result in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["spamassassin-0:3.4.0-4.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-11780","severity":"important","public_date":"2018-09-17T00:00:00Z","advisories":[],"bugzilla":"1629532","bugzilla_description":"CVE-2018-11780 spamassassin: Potential remote code execution vulnerability in PDFInfo plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-11781","severity":"moderate","public_date":"2018-09-17T00:00:00Z","advisories":["RHSA-2018:2916"],"bugzilla":"1629536","bugzilla_description":"CVE-2018-11781 spamassassin: Local user code injection in the meta rule syntax","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["spamassassin-0:3.4.0-4.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11781.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2015-3238","severity":"moderate","public_date":"2015-06-25T00:00:00Z","advisories":["RHSA-2015:1640"],"bugzilla":"1228571","bugzilla_description":"CVE-2015-3238 pam: DoS/user enumeration due to blocking pipe in pam_unix module","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-833->CWE-203","affected_packages":["pam-0:1.1.8-12.el7_1.1","pam-0:1.1.1-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3238.json"},{"CVE":"CVE-2014-2583","severity":"moderate","public_date":"2014-03-24T00:00:00Z","advisories":[],"bugzilla":"1080243","bugzilla_description":"CVE-2014-2583 pam: path traversal issue in pam_timestamp's format_timestamp_name()","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2583.json"},{"CVE":"CVE-2013-7041","severity":"low","public_date":"2013-12-04T00:00:00Z","advisories":[],"bugzilla":"1038555","bugzilla_description":"CVE-2013-7041 pam: pam_userdb case insensitive password hash comparison","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7041.json"},{"CVE":"CVE-2013-0288","severity":"important","public_date":"2013-02-18T00:00:00Z","advisories":["RHSA-2013:0590"],"bugzilla":"909119","bugzilla_description":"CVE-2013-0288 nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["nss-pam-ldapd-0:0.7.5-18.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0288.json"},{"CVE":"CVE-2012-1502","severity":"low","public_date":"2012-03-08T00:00:00Z","advisories":[],"bugzilla":"801116","bugzilla_description":"CVE-2012-1502 PyPAM: Double free by processing passwords containing NULL-bytes","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1502.json"},{"CVE":"CVE-2011-3148","severity":"moderate","public_date":"2011-10-24T00:00:00Z","advisories":["RHSA-2013:0521"],"bugzilla":"746619","bugzilla_description":"CVE-2011-3148 pam (pam_env): Stack-based buffer overflow by parsing user's pam_environment file","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["pam-0:1.1.1-13.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3148.json"},{"CVE":"CVE-2011-3149","severity":"low","public_date":"2011-10-24T00:00:00Z","advisories":["RHSA-2013:0521"],"bugzilla":"746620","bugzilla_description":"CVE-2011-3149 pam (pam_env): Infinite loop by expanding certain arguments","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["pam-0:1.1.1-13.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3149.json"},{"CVE":"CVE-2010-3853","severity":"moderate","public_date":"2010-10-22T00:00:00Z","advisories":["RHSA-2010:0819","RHSA-2010:0891"],"bugzilla":"643043","bugzilla_description":"CVE-2010-3853 pam: pam_namespace executes namespace.init with service's environment","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["pam-0:0.99.6.2-6.el5_5.2","pam-0:1.1.1-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3853.json"},{"CVE":"CVE-2010-4706","severity":"low","public_date":"2010-10-03T00:00:00Z","advisories":[],"bugzilla":"672482","bugzilla_description":"CVE-2010-4706 pam: pam_xauth: Improper handling of failure to determine certain target uid","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4706.json"},{"CVE":"CVE-2010-4707","severity":"low","public_date":"2010-10-03T00:00:00Z","advisories":["RHSA-2010:0819","RHSA-2010:0891"],"bugzilla":"672486","bugzilla_description":"CVE-2010-4707 pam: pam_xauth: Does not check if certain ACL file is a regular file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pam-0:0.99.6.2-6.el5_5.2","pam-0:1.1.1-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4707.json"},{"CVE":"CVE-2010-4708","severity":"low","public_date":"2010-09-27T00:00:00Z","advisories":["RHSA-2010:0891"],"bugzilla":"672489","bugzilla_description":"CVE-2010-4708 pam: pam_env: reading ~/.pam_environment is security risk","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P/","CWE":null,"affected_packages":["pam-0:1.1.1-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4708.json"},{"CVE":"CVE-2010-3435","severity":"low","public_date":"2010-09-21T00:00:00Z","advisories":["RHSA-2010:0819","RHSA-2010:0891"],"bugzilla":"641335","bugzilla_description":"CVE-2010-3435 pam: pam_env and pam_mail accessing users' file with root privileges","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["pam-0:0.99.6.2-6.el5_5.2","pam-0:1.1.1-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3435.json"},{"CVE":"CVE-2010-3430","severity":"moderate","public_date":"2010-09-21T00:00:00Z","advisories":[],"bugzilla":"641361","bugzilla_description":"CVE-2010-3430 CVE-2010-3431 pam: pam_mail and pam_env incorrect privilege dropping","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3430.json"},{"CVE":"CVE-2010-3431","severity":"moderate","public_date":"2010-09-21T00:00:00Z","advisories":[],"bugzilla":"641361","bugzilla_description":"CVE-2010-3430 CVE-2010-3431 pam: pam_mail and pam_env incorrect privilege dropping","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3431.json"},{"CVE":"CVE-2010-3316","severity":"moderate","public_date":"2010-07-20T00:00:00Z","advisories":["RHSA-2010:0819","RHSA-2010:0891"],"bugzilla":"637898","bugzilla_description":"CVE-2010-3316 pam: pam_xauth missing return value checks from setuid() and similar calls","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["pam-0:0.99.6.2-6.el5_5.2","pam-0:1.1.1-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3316.json"},{"CVE":"CVE-2009-1384","severity":"low","public_date":"2009-05-27T00:00:00Z","advisories":["RHSA-2010:0258"],"bugzilla":"502602","bugzilla_description":"CVE-2009-1384 pam_krb5: Password prompt varies for existent and non-existent users","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["pam_krb5-0:2.2.14-15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1384.json"},{"CVE":"CVE-2008-3825","severity":"moderate","public_date":"2008-10-01T00:00:00Z","advisories":["RHSA-2008:0907"],"bugzilla":"461960","bugzilla_description":"CVE-2008-3825 pam_krb5 existing_ticket permission flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pam_krb5-0:2.2.14-1.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3825.json"},{"CVE":"CVE-2007-3102","severity":"moderate","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:0540","RHSA-2007:0555","RHSA-2007:0737","RHSA-2007:0703"],"bugzilla":"243204","bugzilla_description":"CVE-2007-3102 audit logging of failed logins","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.24","openssh-0:4.3p2-24.el5","pam-0:0.99.6.2-3.26.el5","pam-0:0.77-66.23"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3102.json"},{"CVE":"CVE-2007-2873","severity":"low","public_date":"2007-06-11T00:00:00Z","advisories":["RHSA-2007:0492"],"bugzilla":"243455","bugzilla_description":"CVE-2007-2873 spamassassin symlink attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:3.1.9-1.el5","spamassassin-0:3.1.9-1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2873.json"},{"CVE":"CVE-2007-1716","severity":"low","public_date":"2007-03-03T00:00:00Z","advisories":["RHSA-2007:0465","RHSA-2007:0555","RHSA-2007:0737"],"bugzilla":"1618305","bugzilla_description":"CVE-2007-1716 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pam-0:0.99.6.2-3.26.el5","pam-0:0.77-66.23"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1716.json"},{"CVE":"CVE-2007-0451","severity":"important","public_date":"2007-02-13T00:00:00Z","advisories":["RHSA-2007:0074","RHSA-2007:0075"],"bugzilla":"1618365","bugzilla_description":"CVE-2007-0451 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:3.1.8-2.el5","spamassassin-0:3.1.8-2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0451.json"},{"CVE":"CVE-2006-2447","severity":"moderate","public_date":"2006-06-06T00:00:00Z","advisories":["RHSA-2006:0543"],"bugzilla":"1618105","bugzilla_description":"CVE-2006-2447 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:3.0.6-1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2447.json"},{"CVE":"CVE-2005-2977","severity":"low","public_date":"2005-10-26T00:00:00Z","advisories":["RHSA-2005:805"],"bugzilla":"1617773","bugzilla_description":"CVE-2005-2977 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pam-0:0.77-66.13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2977.json"},{"CVE":"CVE-2005-3351","severity":"moderate","public_date":"2005-09-05T00:00:00Z","advisories":["RHSA-2006:0129"],"bugzilla":"1617815","bugzilla_description":"CVE-2005-3351 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:3.0.5-3.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3351.json"},{"CVE":"CVE-2005-1266","severity":"moderate","public_date":"2005-06-15T00:00:00Z","advisories":["RHSA-2005:498"],"bugzilla":"1617623","bugzilla_description":"CVE-2005-1266 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:3.0.4-1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1266.json"},{"CVE":"CVE-2004-0796","severity":"important","public_date":"2004-08-05T00:00:00Z","advisories":["RHSA-2004:451"],"bugzilla":"1617293","bugzilla_description":"CVE-2004-0796 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:2.55-3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0796.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pango-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pango-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pango-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pango_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pango_security_api_results.json
new file mode 100644
index 0000000..937e354
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pango_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-1010238","severity":"important","public_date":"2019-08-06T00:00:00Z","advisories":["RHSA-2019:3234","RHSA-2019:2571","RHSA-2019:2582"],"bugzilla":"1737785","bugzilla_description":"CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["pango-0:1.42.4-3.el7_6","pango-0:1.42.4-5.el8_0","pango-0:1.42.4-4.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010238.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-15120","severity":"moderate","public_date":"2018-08-20T00:00:00Z","advisories":[],"bugzilla":"1613550","bugzilla_description":"CVE-2018-15120 pango: application crash triggered by unicode chars in pango-emoji.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15120.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2011-3922","severity":"moderate","public_date":"2012-01-06T00:00:00Z","advisories":["RHSA-2012:0880"],"bugzilla":"772125","bugzilla_description":"CVE-2011-3922 qt: Stack-based buffer overflow in embedded harfbuzz code","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["qt-1:4.6.2-24.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3922.json"},{"CVE":"CVE-2011-3193","severity":"moderate","public_date":"2011-07-19T00:00:00Z","advisories":["RHSA-2011:1323","RHSA-2011:1324","RHSA-2011:1325","RHSA-2011:1326","RHSA-2011:1327","RHSA-2011:1328"],"bugzilla":"733118","bugzilla_description":"CVE-2011-3193 qt/harfbuzz buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qt-1:4.6.2-17.el6_1.1","pango-0:1.14.9-8.el5_7.3","qt4-0:4.2.1-1.el5_7.1","frysk-0:0.0.1.2007.08.03-8.el4","evolution28-pango-0:1.14.9-13.el4_11","qt-1:4.6.2-20.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3193.json"},{"CVE":"CVE-2011-0064","severity":"critical","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0309"],"bugzilla":"678563","bugzilla_description":"CVE-2011-0064 pango: missing memory reallocation failure checking in hb_buffer_ensure","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["pango-0:1.28.1-3.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0064.json"},{"CVE":"CVE-2011-0020","severity":"moderate","public_date":"2011-01-18T00:00:00Z","advisories":["RHSA-2011:0180"],"bugzilla":"671122","bugzilla_description":"CVE-2011-0020 pango: Heap-based buffer overflow by rendering glyph box for certain FT_Bitmap objects","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P/","CWE":"CWE-122","affected_packages":["pango-0:1.14.9-8.el5_6.2","pango-0:1.28.1-3.el6_0.3","evolution28-pango-0:1.14.9-13.el4_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0020.json"},{"CVE":"CVE-2010-0421","severity":"moderate","public_date":"2010-03-15T00:00:00Z","advisories":["RHSA-2010:0140"],"bugzilla":"555831","bugzilla_description":"CVE-2010-0421 libpangoft2 segfaults on forged font files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pango-0:1.14.9-8.el5","pango-0:1.2.5-10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0421.json"},{"CVE":"CVE-2009-1194","severity":"important","public_date":"2009-05-07T00:00:00Z","advisories":["RHSA-2009:0476"],"bugzilla":"496887","bugzilla_description":"CVE-2009-1194 pango: pango_glyph_string_set_size integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["pango-0:1.2.5-8","pango-0:1.14.9-5.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1194.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pangomm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pangomm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pangomm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/papi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/papi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/papi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/papi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/papi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/papi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paps-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paps-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paps-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paps_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paps_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paratype-pt-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paratype-pt-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/paratype-pt-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/parfait_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/parfait_security_api_results.json
new file mode 100644
index 0000000..8fd7cd1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/parfait_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9488","severity":"low","public_date":"2020-04-25T00:00:00Z","advisories":["RHSA-2020:3817","RHSA-2020:2391","RHSA-2020:3779","RHSA-2020:3626"],"bugzilla":"1831139","bugzilla_description":"CVE-2020-9488 log4j: improper validation of certificate with host mismatch in SMTP appender","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9488.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-17571","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2638"],"bugzilla":"1785616","bugzilla_description":"CVE-2019-17571 log4j: deserialization of untrusted data in SocketServer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/parted_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/parted_security_api_results.json
new file mode 100644
index 0000000..97d9383
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/parted_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-17942","severity":"low","public_date":"2018-09-19T00:00:00Z","advisories":[],"bugzilla":"1635896","bugzilla_description":"CVE-2018-17942 gnulib: heap-based buffer overflow in convert_to_decimal function in vasnprintf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/passivetex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/passivetex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/passivetex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/passwd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/passwd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/passwd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/patch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/patch_security_api_results.json
new file mode 100644
index 0000000..2c22950
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/patch_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17571","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2638"],"bugzilla":"1785616","bugzilla_description":"CVE-2019-17571 log4j: deserialization of untrusted data in SocketServer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-20969","severity":"important","public_date":"2019-08-16T00:00:00Z","advisories":["RHSA-2019:2964","RHSA-2019:2798","RHSA-2019:3757","RHSA-2019:4061","RHSA-2019:3758"],"bugzilla":"1746672","bugzilla_description":"CVE-2018-20969 patch: do_ed_script in pch.c does not block strings beginning with a ! character","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["patch-0:2.7.6-9.el8_0","patch-0:2.7.1-11.el7_6","patch-0:2.7.1-11.el7_5","patch-0:2.7.1-11.el7_4","patch-0:2.7.1-12.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20969.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-13638","severity":"important","public_date":"2019-07-29T00:00:00Z","advisories":["RHSA-2019:2964","RHSA-2019:2798","RHSA-2019:3757","RHSA-2019:4061","RHSA-2019:3758"],"bugzilla":"1733916","bugzilla_description":"CVE-2019-13638 patch: OS shell command injection when processing crafted patch files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["patch-0:2.7.6-9.el8_0","patch-0:2.7.1-11.el7_6","patch-0:2.7.1-11.el7_5","patch-0:2.7.1-11.el7_4","patch-0:2.7.1-12.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13638.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-20633","severity":"low","public_date":"2019-07-28T00:00:00Z","advisories":[],"bugzilla":"1818934","bugzilla_description":"CVE-2019-20633 patch: double free in another_hunk function in pch.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20633.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13636","severity":"moderate","public_date":"2019-07-24T00:00:00Z","advisories":["RHSA-2020:1852"],"bugzilla":"1732781","bugzilla_description":"CVE-2019-13636 patch: the following of symlinks in inp.c and util.c is mishandled in cases other than input files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["patch-0:2.7.6-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-14667","severity":"critical","public_date":"2018-11-06T18:44:00Z","advisories":["RHSA-2018:3581","RHSA-2018:3519","RHSA-2018:3518","RHSA-2018:3517"],"bugzilla":"1639139","bugzilla_description":"CVE-2018-14667 RichFaces: Expression Language injection via UserResource allows for unauthenticated remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["richfaces-0:3.3.1-6.SP3_patch_03.ep5.el6","richfaces-0:3.3.1-9.SP3_patch_03.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14667.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-12533","severity":"critical","public_date":"2018-05-30T00:00:00Z","advisories":["RHSA-2018:2930","RHSA-2018:2663","RHSA-2018:2664"],"bugzilla":"1584490","bugzilla_description":"CVE-2018-12533 RichFaces: Injection of arbitrary EL expressions allows remote code execution via org.richfaces.renderkit.html.Paint2DResource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["richfaces-0:3.3.1-7.SP3_patch_02.ep5.el5","richfaces-0:3.3.1-4.SP3_patch_02.ep5.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-1000156","severity":"important","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:2096","RHSA-2018:2097","RHSA-2018:2094","RHSA-2018:2095","RHSA-2018:2092","RHSA-2018:2093","RHSA-2018:2091","RHSA-2018:1200","RHSA-2018:1199"],"bugzilla":"1564326","bugzilla_description":"CVE-2018-1000156 patch: Malicious patch files cause ed to execute arbitrary commands","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["patch-0:2.6-8.el6_9","patch-0:2.7.1-10.el7_2","patch-0:2.6-8.el6_4","patch-0:2.7.1-10.el7_4","patch-0:2.7.1-10.el7_3","patch-0:2.6-8.el6_6","patch-0:2.6-8.el6_5","patch-0:2.7.1-10.el7_5","patch-0:2.6-8.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000156.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-10713","severity":"low","public_date":"2018-02-13T00:00:00Z","advisories":["RHSA-2019:2033"],"bugzilla":"1545405","bugzilla_description":"CVE-2016-10713 patch: Out-of-bounds access in pch_write_line function in pch.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["patch-0:2.7.1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10713.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6951","severity":"low","public_date":"2018-02-03T00:00:00Z","advisories":[],"bugzilla":"1545046","bugzilla_description":"CVE-2018-6951 patch: NULL pointer dereference in pch.c:intuit_diff_type() causes a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6951.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6952","severity":"low","public_date":"2018-02-03T00:00:00Z","advisories":["RHSA-2019:2033"],"bugzilla":"1545053","bugzilla_description":"CVE-2018-6952 patch: Double free of memory in pch.c:another_hunk() causes a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["patch-0:2.7.1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6952.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12617","severity":"important","public_date":"2017-09-21T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2018:0270","RHSA-2018:0271","RHSA-2017:3080","RHSA-2018:0269","RHSA-2018:0465","RHSA-2018:0268","RHSA-2018:0466","RHSA-2018:0275","RHSA-2017:3113","RHSA-2018:2939","RHSA-2017:3114"],"bugzilla":"1494283","bugzilla_description":"CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat6-0:6.0.41-19_patch_04.ep6.el7","tomcat7-0:7.0.54-28_patch_05.ep6.el7","tomcat6-0:6.0.41-19_patch_04.ep6.el6","tomcat7-0:7.0.54-28_patch_05.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","tomcat6-0:6.0.24-111.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12617.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12615","severity":"important","public_date":"2017-09-19T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:3080","RHSA-2018:0465","RHSA-2018:0466","RHSA-2017:3113","RHSA-2017:3114"],"bugzilla":"1493220","bugzilla_description":"CVE-2017-12615 tomcat: Remote Code Execution via JSP Upload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat6-0:6.0.41-19_patch_04.ep6.el7","tomcat7-0:7.0.54-28_patch_05.ep6.el7","tomcat6-0:6.0.41-19_patch_04.ep6.el6","tomcat7-0:7.0.54-28_patch_05.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","tomcat6-0:6.0.24-111.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-5664","severity":"important","public_date":"2017-06-06T00:00:00Z","advisories":["RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:3080","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2637","RHSA-2017:2638","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:1809"],"bugzilla":"1459158","bugzilla_description":"CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["tomcat-0:7.0.69-12.el7_3","tomcat8-0:8.0.36-24.ep7.el7","tomcat7-0:7.0.70-22.ep7.el6","tomcat8-0:8.0.36-24.ep7.el6","jbossweb-0:7.5.24-1.Final_redhat_1.1.ep6.el7","tomcat7-0:7.0.70-22.ep7.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el6","tomcat6-0:6.0.24-111.el6_9","tomcat6-0:6.0.41-17_patch_04.ep6.el7","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","tomcat6-0:6.0.41-17_patch_04.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-5647","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:3080","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494"],"bugzilla":"1441205","bugzilla_description":"CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat8-0:8.0.36-24.ep7.el7","tomcat7-0:7.0.70-22.ep7.el6","tomcat8-0:8.0.36-24.ep7.el6","tomcat7-0:7.0.70-22.ep7.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el6","tomcat6-0:6.0.24-111.el6_9","tomcat6-0:6.0.41-17_patch_04.ep6.el7","tomcat6-0:6.0.41-17_patch_04.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-5645","severity":"important","public_date":"2017-04-02T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2635","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1417","RHSA-2017:1801","RHSA-2017:2637","RHSA-2017:2638","RHSA-2017:2808","RHSA-2017:2809"],"bugzilla":"1443635","bugzilla_description":"CVE-2017-5645 log4j: Socket receiver deserialization vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-java-common-log4j-0:1.2.17-15.15.el6","log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7","rh-java-common-log4j-0:1.2.17-15.15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-5388","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2016:2045","RHSA-2016:1624","RHSA-2016:1635","RHSA-2016:1636"],"bugzilla":"1353809","bugzilla_description":"CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.59-51_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-3092","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:2068","RHSA-2017:0456","RHSA-2017:0455","RHSA-2016:2069","RHSA-2017:0457","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:2071","RHSA-2016:2070","RHSA-2016:2072","RHSA-2016:2599"],"bugzilla":"1349468","bugzilla_description":"CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","jboss-ec2-eap-0:7.5.11-1.Final_redhat_1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3092.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-5174","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2045","RHSA-2016:1432","RHSA-2015:2660","RHBA-2016:0090","RHSA-2015:2661","RHSA-2016:1433","RHSA-2016:2599","RHSA-2016:1434","RHSA-2016:1435","RHSA-2015:2659"],"bugzilla":"1265698","bugzilla_description":"CVE-2015-5174 tomcat: URL Normalization issue","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.54-21_patch_05.ep6.el5","tomcat7-0:7.0.54-21_patch_05.ep6.el7","tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-21_patch_05.ep6.el6","tomcat7-0:7.0.59-42_patch_01.ep7.el6","tomcat8-0:8.0.18-52_patch_01.ep7.el6","jboss-ec2-eap-0:7.5.9-2.Final_redhat_2.ep6.el6","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5174.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-5351","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311076","bugzilla_description":"CVE-2015-5351 tomcat: CSRF token leak","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-352","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5351.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-0714","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311082","bugzilla_description":"CVE-2016-0714 tomcat: Security Manager bypass via persistence mechanisms","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-290","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0714.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2015-5346","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087"],"bugzilla":"1311085","bugzilla_description":"CVE-2015-5346 tomcat: Session fixation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-0706","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311087","bugzilla_description":"CVE-2016-0706 tomcat: security manager bypass via StatusManagerServlet","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-287","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-5345","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311089","bugzilla_description":"CVE-2015-5345 tomcat: directory disclosure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-552","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-0763","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311093","bugzilla_description":"CVE-2016-0763 tomcat: security manager bypass via setGlobalContext()","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0763.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2014-7810","severity":"moderate","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2015:1622","RHSA-2015:1621","RHSA-2016:0492"],"bugzilla":"1222573","bugzilla_description":"CVE-2014-7810 Tomcat/JbossWeb: security manager bypass via EL expressions","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.54-19_patch_04.ep6.el5","tomcat7-0:7.0.54-19_patch_04.ep6.el6","tomcat6-0:6.0.41-15_patch_04.ep6.el7","tomcat6-0:6.0.24-94.el6_7","tomcat6-0:6.0.41-15_patch_04.ep6.el6","tomcat6-0:6.0.41-15_patch_04.ep6.el5","tomcat7-0:7.0.54-20_patch_04.ep6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7810.json"},{"CVE":"CVE-2015-1396","severity":"moderate","public_date":"2015-01-24T00:00:00Z","advisories":[],"bugzilla":"1186764","bugzilla_description":"CVE-2015-1396 patch: directory traversal via symlinks (incomplete fix for CVE-2015-1196)","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1396.json"},{"CVE":"CVE-2015-1395","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1184490","bugzilla_description":"CVE-2015-1395 patch: directory traversal via file rename","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1395.json"},{"CVE":"CVE-2014-9637","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1185262","bugzilla_description":"CVE-2014-9637 patch: local denial of service with a crafted patch","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9637.json"},{"CVE":"CVE-2015-1196","severity":"moderate","public_date":"2015-01-12T00:00:00Z","advisories":[],"bugzilla":"1182154","bugzilla_description":"CVE-2015-1196 patch: directory traversal via symlinks","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1196.json"},{"CVE":"CVE-2014-3577","severity":"important","public_date":"2014-08-18T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2016:1773","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1082","RHSA-2014:1320","RHSA-2014:1166","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1146","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2016:1931","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1834","RHSA-2014:1833","RHSA-2015:1177","RHSA-2014:1836","RHSA-2015:1176","RHSA-2014:1835"],"bugzilla":"1129074","bugzilla_description":"CVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","httpcomponents-client-0:4.2.5-5.el7_0","org.ovirt.engine-root-0:3.5.0-29","jakarta-commons-httpclient-1:3.1-16.el7_0","thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1","jakarta-commons-httpclient-1:3.1-0.9.el6_5","jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2012-6153","severity":"important","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1320","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1098","RHSA-2014:1834","RHSA-2014:1833","RHSA-2014:1836","RHSA-2014:1835"],"bugzilla":"1129916","bugzilla_description":"CVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","devtoolset-2-httpcomponents-client-0:4.2.1-6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","org.ovirt.engine-root-0:3.5.0-29","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6153.json"},{"CVE":"CVE-2014-0230","severity":"low","public_date":"2014-07-19T00:00:00Z","advisories":["RHSA-2016:0595","RHSA-2016:0596","RHSA-2015:1622","RHSA-2015:1621","RHSA-2015:2659","RHSA-2015:2660","RHSA-2015:2661","RHEA-2015:1770","RHSA-2016:0597","RHEA-2015:1771","RHSA-2016:2599","RHSA-2016:0598","RHSA-2016:0599"],"bugzilla":"1191200","bugzilla_description":"CVE-2014-0230 tomcat: non-persistent DoS attack by feeding data by aborting an upload","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["tomcat8-0:8.0.18-25_patch_00.ep7.el6","jbossweb-0:7.5.15-1.Final_redhat_1.1.ep6.el5","jboss-ec2-eap-0:7.5.7-2.Final_redhat_3.ep6.el6","tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.59-26_patch_00.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0230.json"},{"CVE":"CVE-2014-3530","severity":"important","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2015:1888","RHSA-2014:0883","RHSA-2015:0091","RHSA-2014:0884","RHSA-2014:0898","RHSA-2014:0910","RHSA-2014:0885","RHSA-2014:0886","RHSA-2014:0897"],"bugzilla":"1112987","bugzilla_description":"CVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-611","affected_packages":["picketlink-federation-0:2.1.5-3_patch_01.ep5.el4","picketlink-federation-0:2.1.5-3_patch_01.ep5.el5","picketlink-federation-0:2.1.5-3_patch_01.el6_5","picketlink-federation-0:2.1.9-5.SP3_redhat_2.1.ep6.el5","picketlink-federation-0:2.1.9-5.SP3_redhat_2.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3530.json"},{"CVE":"CVE-2014-0075","severity":"moderate","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:1149","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1072776","bugzilla_description":"CVE-2014-0075 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-400","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0075.json"},{"CVE":"CVE-2014-0096","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1088342","bugzilla_description":"CVE-2014-0096 Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0096.json"},{"CVE":"CVE-2014-0099","severity":"moderate","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:1149","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1102030","bugzilla_description":"CVE-2014-0099 Tomcat/JBossWeb: Request smuggling via malicious content length header","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-190->CWE-444","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0099.json"},{"CVE":"CVE-2014-0107","severity":"important","public_date":"2014-03-24T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:1290","RHSA-2014:0590","RHSA-2014:1291","RHSA-2015:1888","RHSA-2014:1351","RHSA-2014:0591","RHSA-2014:0454","RHSA-2014:1995","RHSA-2014:1059","RHSA-2014:0453","RHSA-2014:0348","RHSA-2014:1007","RHSA-2014:1369","RHSA-2014:0818","RHSA-2014:0819"],"bugzilla":"1080248","bugzilla_description":"CVE-2014-0107 Xalan-Java: insufficient constraints in secure processing feature","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el5","xalan-j2-0:2.7.0-6jpp.2","xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el6","xalan-j2-0:2.7.1-12_patch_08.ep5.el6","xalan-j2-0:2.7.1-12_patch_08.ep5.el4","xalan-j2-0:2.7.1-12_patch_08.ep5.el5","xalan-j2-0:2.7.0-9.9.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0107.json"},{"CVE":"CVE-2013-4322","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2014:0686","RHSA-2014:0525","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1069905","bugzilla_description":"CVE-2013-4322 tomcat: incomplete fix for CVE-2012-3544","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat-0:7.0.42-5.el7_0","tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4322.json"},{"CVE":"CVE-2013-4590","severity":"low","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2014:1038","RHSA-2014:1088","RHSA-2014:1087","RHSA-2014:1086"],"bugzilla":"1069911","bugzilla_description":"CVE-2013-4590 tomcat: information disclosure via XXE when running untrusted web applications","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["tomcat6-0:6.0.24-78.el6_5","tomcat6-0:6.0.41-5_patch_02.ep6.el6","tomcat7-0:7.0.54-6_patch_02.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4590.json"},{"CVE":"CVE-2014-0033","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2014:0525","RHSA-2014:0528"],"bugzilla":"1069919","bugzilla_description":"CVE-2014-0033 tomcat: session fixation still possible with disableURLRewriting enabled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-384","affected_packages":["tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0033.json"},{"CVE":"CVE-2013-4286","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0374","RHSA-2014:0344","RHSA-2014:0686","RHSA-2014:0345","RHSA-2014:0343","RHSA-2014:0458","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0511","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1069921","bugzilla_description":"CVE-2013-4286 tomcat: multiple content-length header poisoning flaws","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat-0:7.0.42-5.el7_0","tomcat6-0:6.0.37-27_patch_04.ep6.el6","jbossweb-0:7.3.1-1.Final_redhat_1.1.ep6.el5","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4286.json"},{"CVE":"CVE-2014-0050","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0252","RHSA-2014:0253","RHSA-2014:0473","RHSA-2014:0400","RHSA-2014:0452","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0401","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1062337","bugzilla_description":"CVE-2014-0050 apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el6","tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0050.json"},{"CVE":"CVE-2013-4210","severity":"moderate","public_date":"2013-09-30T00:00:00Z","advisories":["RHSA-2013:1373","RHSA-2013:1374","RHSA-2013:1371","RHSA-2013:1372","RHSA-2013:1370","RHSA-2013:1448","RHSA-2013:1369"],"bugzilla":"994321","bugzilla_description":"CVE-2013-4210 JBoss Remoting: DoS by file descriptor exhaustion","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jboss-remoting-0:2.5.4-11.SP4_patch01.ep5.el5","jboss-remoting-0:2.5.4-11.SP4_patch01.ep5.el6","jboss-remoting-0:2.5.4-11.SP4_patch01.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4210.json"},{"CVE":"CVE-2013-2165","severity":"critical","public_date":"2013-07-10T00:00:00Z","advisories":["RHSA-2013:1043","RHSA-2013:1044","RHSA-2013:1041","RHSA-2013:1042","RHSA-2013:1045"],"bugzilla":"973570","bugzilla_description":"CVE-2013-2165 JBoss RichFaces: Remote code execution due to insecure deserialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["jboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el5","richfaces-0:3.3.1-11.SP3_patch_01.ep5.el4","jboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el4","richfaces-0:3.3.1-6.SP3_patch_01.ep5.el5","richfaces-0:3.3.1-3.SP3_patch_01.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2165.json"},{"CVE":"CVE-2013-2172","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:1220","RHSA-2014:0212","RHSA-2014:0400","RHSA-2013:1209","RHSA-2013:1218","RHSA-2013:1207","RHSA-2014:1369","RHSA-2013:1219","RHSA-2013:1208","RHSA-2013:1217","RHSA-2013:1437","RHSA-2013:1853","RHSA-2013:1375"],"bugzilla":"999263","bugzilla_description":"CVE-2013-2172 Apache Santuario XML Security for Java: XML signature spoofing","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-290","affected_packages":["xml-security-0:1.5.1-3_patch01.ep5.el6","xml-security-0:1.5.1-3_patch01.ep5.el5","xml-security-0:1.5.1-3_patch01.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2172.json"},{"CVE":"CVE-2013-1976","severity":"important","public_date":"2013-05-28T00:00:00Z","advisories":["RHSA-2013:0869","RHSA-2013:0870","RHSA-2013:0872","RHSA-2013:0871"],"bugzilla":"927622","bugzilla_description":"CVE-2013-1976 tomcat: Improper TOMCAT_LOG management in init script (DoS, ACE)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["tomcat7-0:7.0.30-7_patch_03.ep6.el6","tomcat6-0:6.0.35-12_patch_07.ep6.el5","tomcat5-0:5.5.33-36_patch_09.ep5.el6","tomcat6-0:6.0.24-55.el6_4","tomcat6-0:6.0.32-35_patch_09.ep5.el6","tomcat7-0:7.0.30-5_patch_03.ep6.el5","tomcat6-0:6.0.32-32_patch_09.ep5.el5","tomcat6-0:6.0.35-33_patch_07.ep6.el6","tomcat5-0:5.5.23-0jpp.40.el5_9","tomcat5-0:5.5.33-33_patch_09.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1976.json"},{"CVE":"CVE-2013-2067","severity":"moderate","public_date":"2013-05-10T00:00:00Z","advisories":["RHSA-2013:1011","RHSA-2013:0839","RHSA-2013:0834","RHSA-2013:0833","RHSA-2013:1437","RHSA-2013:0964","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"961779","bugzilla_description":"CVE-2013-2067 tomcat: Session fixation in form authenticator","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-384","affected_packages":["tomcat6-0:6.0.37-8_patch_01.ep6.el5","tomcat6-0:6.0.24-57.el6_4","tomcat7-0:7.0.40-9_patch_01.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2067.json"},{"CVE":"CVE-2012-3544","severity":"moderate","public_date":"2013-05-10T00:00:00Z","advisories":["RHSA-2013:1011","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"961783","bugzilla_description":"CVE-2012-3544 tomcat: Limited DoS in chunked transfer encoding input filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.37-8_patch_01.ep6.el5","tomcat7-0:7.0.40-9_patch_01.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3544.json"},{"CVE":"CVE-2013-2071","severity":"low","public_date":"2013-05-10T00:00:00Z","advisories":["RHSA-2013:1011","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"961803","bugzilla_description":"CVE-2013-2071 tomcat: Information disclosure in asynchronous context when using AsyncListeners that threw RuntimeExceptions","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat6-0:6.0.37-8_patch_01.ep6.el5","tomcat7-0:7.0.40-9_patch_01.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2071.json"},{"CVE":"CVE-2012-5633","severity":"important","public_date":"2013-02-08T00:00:00Z","advisories":["RHSA-2013:0749","RHSA-2013:0649","RHSA-2013:0726","RHSA-2013:0258","RHSA-2013:0257","RHSA-2013:0645","RHSA-2013:0259","RHSA-2013:0743","RHSA-2013:0644","RHSA-2013:0256"],"bugzilla":"889008","bugzilla_description":"CVE-2012-5633 jbossws-cxf, apache-cxf: Bypass of security constraints on WS endpoints when using WSS4JInInterceptor","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["apache-cxf-0:2.2.12-10.patch_06.ep5.el4","apache-cxf-0:2.4.9-6.redhat_3.ep6.el6","apache-cxf-0:2.4.9-6.redhat_3.ep6.el5","apache-cxf-0:2.2.12-10.patch_06.ep5.el5","apache-cxf-0:2.2.12-10.patch_06.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5633.json"},{"CVE":"CVE-2012-5629","severity":"important","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0230","RHSA-2013:0229","RHSA-2013:0665","RHSA-2013:0533","RHSA-2013:0249","RHSA-2013:0248","RHSA-2013:0232","RHSA-2013:0231","RHSA-2013:0586","RHSA-2013:0234","RHSA-2013:0233"],"bugzilla":"885569","bugzilla_description":"CVE-2012-5629 JBoss: allows empty password to authenticate against LDAP","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-305","affected_packages":["jbossas-0:4.3.0-12.GA_CP10_patch_01.1.ep1.el4","jbossas-0:4.3.0-12.GA_CP10_patch_01.1.ep1.el5","jbosssx2-0:2.0.5-9.SP3_1_patch_01.ep5.el5","jbosssx2-0:2.0.5-9.SP3_1_patch_01.ep5.el4","jbosssx2-0:2.0.5-9.1.SP3_1_patch_01.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5629.json"},{"CVE":"CVE-2012-3546","severity":"important","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0195","RHSA-2013:0151","RHSA-2013:0162","RHSA-2013:0194","RHSA-2013:0197","RHSA-2013:0164","RHSA-2013:0196","RHSA-2013:0163","RHSA-2013:0191","RHSA-2013:0193","RHSA-2013:0192","RHSA-2013:0005","RHSA-2013:0147","RHSA-2013:0158","RHSA-2013:0235","RHSA-2013:0642","RHSA-2013:0004","RHSA-2013:0623","RHSA-2013:0221","RHSA-2013:0198","RHSA-2013:0146","RHSA-2013:0641","RHSA-2013:0157","RHSA-2013:0640"],"bugzilla":"883634","bugzilla_description":"CVE-2012-3546 Tomcat/JBoss Web: Bypass of security constraints","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-31_patch_08.ep5.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossas-0:4.3.0-11.GA_CP10_patch_02.2.ep1.el5","tomcat6-0:6.0.35-6_patch_02.ep6.el5","tomcat6-0:6.0.32-28_patch_08.ep5.el5","jbossas-0:4.3.0-11.GA_CP10_patch_02.1.ep1.el4","tomcat5-0:5.5.33-34_patch_08.ep5.el6","jbossweb-0:7.0.17-3.Final_redhat_2.ep6.el6","jbossweb-0:7.0.17-3.Final_redhat_2.ep6.el5","tomcat6-0:6.0.32-31_patch_08.ep5.el6","tomcat6-0:6.0.24-52.el6_4","tomcat6-0:6.0.35-25_patch_01.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3546.json"},{"CVE":"CVE-2012-4431","severity":"moderate","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0647","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0268","RHSA-2013:1437","RHSA-2013:1853","RHSA-2013:0265","RHSA-2013:0267","RHSA-2013:0266"],"bugzilla":"883636","bugzilla_description":"CVE-2012-4431 Tomcat/JBoss Web - Bypass of CSRF prevention filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["tomcat7-0:7.0.30-3_patch_02.ep6.el5","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","tomcat6-0:6.0.35-6_patch_06.ep6.el5","tomcat7-0:7.0.30-5_patch_02.ep6.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4431.json"},{"CVE":"CVE-2012-4534","severity":"moderate","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0623","RHSA-2013:0265","RHSA-2013:0266"],"bugzilla":"883637","bugzilla_description":"CVE-2012-4534 Tomcat - Denial Of Service when using NIO+SSL+sendfile","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.35-6_patch_06.ep6.el5","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4534.json"},{"CVE":"CVE-2012-5885","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5885.json"},{"CVE":"CVE-2012-5886","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5886.json"},{"CVE":"CVE-2012-5887","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5887.json"},{"CVE":"CVE-2012-2733","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0265","RHSA-2013:0266"],"bugzilla":"873695","bugzilla_description":"CVE-2012-2733 tomcat: HTTP NIO connector OOM DoS via a request with large headers","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.35-6_patch_06.ep6.el5","tomcat6-0:6.0.35-29_patch_06.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2733.json"},{"CVE":"CVE-2012-5783","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2014:0224","RHSA-2013:0681","RHSA-2013:0680","RHSA-2013:0679","RHSA-2013:0270","RHSA-2017:0868","RHSA-2013:0763","RHSA-2013:1006","RHSA-2013:1853","RHSA-2013:0682","RHSA-2013:1147"],"bugzilla":"873317","bugzilla_description":"CVE-2012-5783 jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el4","jakarta-commons-httpclient-1:3.1-2_patch_01.ep5.el6","jakarta-commons-httpclient-1:3.0-7jpp.2","jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el5","jakarta-commons-httpclient-1:3.1-0.7.el6_3","redhat-support-plugin-rhev-0:3.3.0-14.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2012-3451","severity":"moderate","public_date":"2012-09-19T00:00:00Z","advisories":["RHSA-2012:1591","RHSA-2013:0726","RHSA-2012:1592","RHSA-2013:0258","RHSA-2013:0257","RHSA-2012:1594","RHSA-2013:0259","RHSA-2013:0743","RHSA-2013:0256"],"bugzilla":"851896","bugzilla_description":"CVE-2012-3451 jbossws-cxf, apache-cxf: SOAPAction spoofing on document literal web services","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["apache-cxf-0:2.2.12-10.patch_06.ep5.el4","apache-cxf-0:2.2.12-10.patch_06.ep5.el5","apache-cxf-0:2.2.12-10.patch_06.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3451.json"},{"CVE":"CVE-2011-4605","severity":"important","public_date":"2012-06-20T00:00:00Z","advisories":["RHSA-2012:1109","RHSA-2012:1295","RHSA-2012:1232","RHSA-2012:1023","RHSA-2012:1022","RHSA-2012:1025","RHSA-2012:1024","RHSA-2012:1027","RHSA-2012:1026","RHSA-2012:1125","RHSA-2012:1028"],"bugzilla":"766469","bugzilla_description":"CVE-2011-4605 JNDI: unauthenticated remote write access is permitted by default","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":["jbossas-0:4.3.0-10.GA_CP10_patch_01.1.ep1.el4","jbossas-0:4.3.0-10.GA_CP10_patch_01.1.ep1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4605.json"},{"CVE":"CVE-2011-4610","severity":"important","public_date":"2012-01-31T00:00:00Z","advisories":["RHSA-2012:0074","RHSA-2012:0075","RHSA-2012:0076","RHSA-2012:0077","RHSA-2012:0078","RHSA-2012:0325"],"bugzilla":"767871","bugzilla_description":"CVE-2011-4610 JBoss Web remote denial of service when surrogate pair character is placed at buffer boundary","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4610.json"},{"CVE":"CVE-2011-3375","severity":"moderate","public_date":"2012-01-17T00:00:00Z","advisories":["RHSA-2012:0682","RHSA-2012:0681"],"bugzilla":"782624","bugzilla_description":"CVE-2011-3375 tomcat: information disclosure due to improper response and request object recycling","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat6-0:6.0.32-24_patch_07.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3375.json"},{"CVE":"CVE-2012-0022","severity":"moderate","public_date":"2012-01-17T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:1331","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0474","RHSA-2012:0475","RHSA-2012:0345","RHSA-2012:0325","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075"],"bugzilla":"783359","bugzilla_description":"CVE-2012-0022 tomcat: large number of parameters DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat6-0:6.0.24-36.el6_2","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat5-0:5.5.23-0jpp.31.el5_8","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0022.json"},{"CVE":"CVE-2011-5245","severity":"moderate","public_date":"2011-12-30T00:00:00Z","advisories":["RHSA-2012:0519","RHSA-2012:1056","RHSA-2012:1058","RHSA-2012:0441","RHSA-2012:1057","RHSA-2012:0421","RHSA-2012:1059","RHSA-2012:1125","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"785631","bugzilla_description":"CVE-2011-5245 CVE-2012-0818 RESTEasy: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el4","org.ovirt.engine-root-0:3.0.3_0001-3","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el6","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5245.json"},{"CVE":"CVE-2012-0818","severity":"moderate","public_date":"2011-12-30T00:00:00Z","advisories":["RHSA-2013:1263","RHSA-2012:0519","RHSA-2012:1056","RHSA-2012:1058","RHSA-2012:0441","RHSA-2012:1057","RHSA-2012:0421","RHSA-2012:1059","RHSA-2012:1125","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"785631","bugzilla_description":"CVE-2011-5245 CVE-2012-0818 RESTEasy: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el4","org.ovirt.engine-root-0:3.0.3_0001-3","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el6","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0818.json"},{"CVE":"CVE-2011-4858","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0406","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0474","RHSA-2012:0089","RHSA-2012:0475","RHSA-2012:0325","RHSA-2012:0091","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075"],"bugzilla":"750521","bugzilla_description":"CVE-2011-4858 tomcat: hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat6-0:6.0.24-36.el6_2","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat5-0:5.5.23-0jpp.31.el5_8","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4858.json"},{"CVE":"CVE-2011-1184","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1184.json"},{"CVE":"CVE-2011-5062","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5062.json"},{"CVE":"CVE-2011-5063","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5063.json"},{"CVE":"CVE-2011-5064","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5064.json"},{"CVE":"CVE-2011-1483","severity":"important","public_date":"2011-09-15T00:00:00Z","advisories":["RHSA-2011:1311","RHSA-2011:1312","RHSA-2011:1301","RHSA-2011:1313","RHSA-2011:1302","RHSA-2011:1303","RHSA-2011:1310","RHSA-2011:1308","RHSA-2011:1309","RHSA-2011:1304","RHSA-2011:1305","RHSA-2011:1306","RHSA-2011:1307"],"bugzilla":"692584","bugzilla_description":"CVE-2011-1483 JBossWS remote Denial of Service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossas-0:4.2.0-6.GA_CP09.11.1.ep1.el5","jbossws-common-0:1.1.0-4.SP7_patch_02.1.ep5.el6","jbossws-common-0:1.1.0-4.SP7_patch_02.1.ep5.el4","jbossws-common-0:1.0.0-5.GA_CP07_patch_01.1.ep1.el4","jbossws-common-0:1.1.0-4.SP7_patch_02.1.ep5.el5","jbossws-common-0:1.0.0-5.GA_CP07_patch_01.1.ep1.el5","jbossas-0:4.2.0-6.GA_CP09.11.ep1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1483.json"},{"CVE":"CVE-2012-1154","severity":"moderate","public_date":"2011-08-31T00:00:00Z","advisories":["RHSA-2012:1052","RHSA-2012:1010","RHSA-2012:1053","RHSA-2012:1166","RHSA-2012:1012","RHSA-2012:1011"],"bugzilla":"802200","bugzilla_description":"CVE-2012-1154 mod_cluster registers and exposes the root context of a server by default, despite ROOT being in the excluded-contexts list","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["mod_cluster-0:1.0.10-4.1.GA_CP02_patch01.ep5.el5","mod_cluster-0:1.0.10-4.1.GA_CP02_patch01.ep5.el6","mod_cluster-0:1.0.10-4.GA_CP02_patch01.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1154.json"},{"CVE":"CVE-2011-3190","severity":"moderate","public_date":"2011-08-20T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2011:1780","RHSA-2012:0680","RHSA-2012:0682","RHSA-2012:0681"],"bugzilla":"734868","bugzilla_description":"CVE-2011-3190 tomcat: authentication bypass and information disclosure","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3190.json"},{"CVE":"CVE-2011-2729","severity":"important","public_date":"2011-08-12T00:00:00Z","advisories":["RHSA-2011:1292","RHSA-2011:1291"],"bugzilla":"730400","bugzilla_description":"CVE-2011-2729 jakarta-commons-daemon: jsvc does not drop capabilities allowing access to files and directories owned by the superuser","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jakarta-commons-daemon-jsvc-1:1.0.5-1.5.patch01.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2729.json"},{"CVE":"CVE-2011-2526","severity":"low","public_date":"2011-07-13T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075"],"bugzilla":"720948","bugzilla_description":"CVE-2011-2526 tomcat: security manager restrictions bypass","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2526.json"},{"CVE":"CVE-2011-2204","severity":"low","public_date":"2011-06-27T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2011:1780","RHSA-2012:0680","RHSA-2012:0682","RHSA-2012:0681","RHSA-2011:1845"],"bugzilla":"717013","bugzilla_description":"CVE-2011-2204 tomcat: password disclosure vulnerability","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2204.json"},{"CVE":"CVE-2010-3718","severity":"moderate","public_date":"2011-02-05T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2011:0791","RHSA-2011:0897","RHSA-2011:1845"],"bugzilla":"675792","bugzilla_description":"CVE-2010-3718 tomcat: file permission bypass flaw","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat6-0:6.0.24-33.el6","tomcat5-0:5.5.23-0jpp.22.el5_7","tomcat5-0:5.5.33-14_patch_04.ep5.el4","tomcat5-0:5.5.33-16_patch_04.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3718.json"},{"CVE":"CVE-2010-4476","severity":"moderate","public_date":"2011-02-01T00:00:00Z","advisories":["RHSA-2011:0291","RHSA-2011:0292","RHSA-2011:0282","RHSA-2011:0290","RHSA-2011:0211","RHSA-2011:0299","RHSA-2011:0212","RHSA-2011:0333","RHSA-2011:0334","RHSA-2011:0213","RHSA-2011:0214","RHSA-2011:0335","RHSA-2011:0350","RHSA-2011:0880","RHSA-2011:0210","RHSA-2011:0336","RHSA-2011:0348","RHSA-2011:0349"],"bugzilla":"674336","bugzilla_description":"CVE-2010-4476 JDK Double.parseDouble Denial-Of-Service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.18.b17.el5","tomcat6-0:6.0.24-24.el6_0","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.8.sap-1jpp.2.el5","tomcat5-0:5.5.23-0jpp.17.el5_6","java-1.6.0-openjdk-1:1.6.0.0-1.36.b17.el6_0","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el4","java-1.4.2-ibm-sap-0:1.4.2.13.8.sap-1jpp.2.el4_8","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el5","tomcat5-0:5.5.28-12_patch_03.ep5.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el4","jbossweb-0:2.1.10-5.patch01.1.1.ep5.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el5","java-1.4.2-ibm-0:1.4.2.13.8-1jpp.3.el5","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.5.el6","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.3.el6","jbossweb-0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el5","jbossweb-0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el4","tomcat5-0:5.5.28-18_patch_03.ep5.el4","tomcat6-0:6.0.24-11.patch_03.ep5.el5","tomcat6-0:6.0.24-11.patch_03.ep5.el4","jbossweb-0:2.1.10-5.patch01.1.ep5.el4","java-1.4.2-ibm-0:1.4.2.13.8-1jpp.4.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4476.json"},{"CVE":"CVE-2011-0534","severity":"moderate","public_date":"2011-01-21T00:00:00Z","advisories":["RHSA-2011:0335","RHSA-2011:0350","RHSA-2011:0348"],"bugzilla":"675338","bugzilla_description":"CVE-2011-0534 tomcat: remote DoS via NIO connector","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.24-24.el6_0","tomcat6-0:6.0.24-11.patch_03.ep5.el5","tomcat6-0:6.0.24-11.patch_03.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0534.json"},{"CVE":"CVE-2010-4651","severity":"low","public_date":"2010-12-30T00:00:00Z","advisories":[],"bugzilla":"667529","bugzilla_description":"CVE-2010-4651 patch: directory traversal flaw allows for arbitrary file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4651.json"},{"CVE":"CVE-2010-2227","severity":"important","public_date":"2010-07-08T00:00:00Z","advisories":["RHSA-2010:0584","RHSA-2010:0693","RHSA-2010:0583","RHSA-2010:0582","RHSA-2010:0581","RHSA-2010:0580"],"bugzilla":"612799","bugzilla_description":"CVE-2010-2227 tomcat: information leak vulnerability in the handling of 'Transfer-Encoding' header","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el4","jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el5","tomcat5-0:5.5.23-0jpp_21rh","tomcat5-0:5.5.23-0jpp_4rh.17","tomcat5-0:5.5.23-0jpp_4rh.19","tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5","tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4","tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4","tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5","tomcat5-0:5.5.23-0jpp.9.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2227.json"},{"CVE":"CVE-2008-5515","severity":"important","public_date":"2009-06-08T00:00:00Z","advisories":["RHSA-2009:1617","RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1144","RHSA-2009:1562","RHSA-2009:1143","RHSA-2009:1454","RHSA-2009:1146","RHSA-2009:1563","RHSA-2009:1145"],"bugzilla":"504753","bugzilla_description":"CVE-2008-5515 tomcat request dispatcher information disclosure vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.0.30-0jpp_16rh","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5515.json"},{"CVE":"CVE-2009-0783","severity":"low","public_date":"2009-06-04T00:00:00Z","advisories":["RHSA-2009:1617","RHSA-2009:1164","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1144","RHSA-2009:1562","RHSA-2009:1143","RHSA-2009:1454","RHSA-2009:1146","RHSA-2009:1563","RHSA-2009:1145"],"bugzilla":"504153","bugzilla_description":"CVE-2009-0783 tomcat XML parser information disclosure","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.0.30-0jpp_16rh","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0783.json"},{"CVE":"CVE-2009-0033","severity":"important","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2009:1617","RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1562","RHSA-2009:1454","RHSA-2009:1563"],"bugzilla":"493381","bugzilla_description":"CVE-2009-0033 tomcat6 Denial-Of-Service with AJP connection","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.0.30-0jpp_16rh","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0033.json"},{"CVE":"CVE-2009-0580","severity":"low","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1144","RHSA-2009:1562","RHSA-2009:1143","RHSA-2009:1454","RHSA-2009:1146","RHSA-2009:1563","RHSA-2009:1145"],"bugzilla":"503978","bugzilla_description":"CVE-2009-0580 tomcat6 Information disclosure in authentication classes","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0580.json"},{"CVE":"CVE-2007-5333","severity":"low","public_date":"2008-02-11T00:00:00Z","advisories":["RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1616","RHSA-2009:1562","RHSA-2009:1454","RHSA-2009:1563"],"bugzilla":"427766","bugzilla_description":"CVE-2007-5333 Improve cookie parsing for tomcat5","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5333.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/patchutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/patchutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/patchutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pavucontrol_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pavucontrol_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pavucontrol_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pax_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pax_security_api_results.json
new file mode 100644
index 0000000..a24328b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pax_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15250","severity":"low","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1887810","bugzilla_description":"CVE-2020-15250 junit4: TemporaryFolder is shared between all users across system which could result in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15250.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-1313","severity":"important","public_date":"2018-05-05T00:00:00Z","advisories":[],"bugzilla":"1575639","bugzilla_description":"CVE-2018-1313 derby: Externally-controlled input vulnerability allows remote attacker to boot a database under attacker's control","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1313.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pciutils-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pciutils-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pciutils-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pciutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pciutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pciutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-conf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-conf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-conf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-export-pcp2graphite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-export-pcp2graphite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-export-pcp2graphite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-manager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-manager_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-manager_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-activemq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-activemq_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-activemq_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-apache_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-apache_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-apache_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-bash_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-bash_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-bash_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-bonding_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-bonding_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-bonding_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-cisco_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-cisco_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-cisco_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-dbping_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-dbping_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-dbping_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-dm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-dm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-dm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-ds389_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-ds389_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-ds389_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-ds389log_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-ds389log_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-ds389log_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-elasticsearch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-elasticsearch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-elasticsearch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gfs2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gfs2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gfs2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gluster_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gluster_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gluster_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gpfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gpfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gpfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gpsd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gpsd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-gpsd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-json_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-json_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-json_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-lmsensors_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-lmsensors_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-lmsensors_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-logger_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-logger_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-logger_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-lustre_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-lustre_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-lustre_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-lustrecomm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-lustrecomm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-lustrecomm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-mailq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-mailq_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-mailq_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-memcache_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-memcache_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-memcache_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-mounts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-mounts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-mounts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-named_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-named_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-named_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-netfilter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-netfilter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-netfilter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-news_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-news_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-news_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-nfsclient_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-nfsclient_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-nfsclient_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-nginx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-nginx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-nginx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-nvidia-gpu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-nvidia-gpu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-nvidia-gpu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-pdns_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-pdns_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-pdns_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-postfix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-postfix_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-postfix_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-postgresql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-postgresql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-postgresql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-roomtemp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-roomtemp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-roomtemp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-rpm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-rpm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-rpm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-sendmail_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-sendmail_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-sendmail_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-shping_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-shping_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-shping_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-summary_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-summary_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-summary_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-trace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-trace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-trace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-unbound_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-unbound_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-unbound_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-weblog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-weblog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-weblog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-zswap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-zswap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-pmda-zswap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-selinux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-selinux_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-selinux_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-system-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-system-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-system-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-webapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-webapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-webapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-zeroconf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-zeroconf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp-zeroconf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp_security_api_results.json
new file mode 100644
index 0000000..c64214c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2019-3695","severity":"low","public_date":"2019-10-14T00:00:00Z","advisories":["RHSA-2020:3869","RHBA-2020:1628"],"bugzilla":"1811703","bugzilla_description":"CVE-2019-3695 pcp: Local privilege escalation in pcp spec file %post section","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["pcp-0:4.3.2-12.el7","pcp-0:5.0.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3695.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-3696","severity":"low","public_date":"2019-10-14T00:00:00Z","advisories":["RHSA-2020:3869","RHBA-2020:1628"],"bugzilla":"1811707","bugzilla_description":"CVE-2019-3696 pcp: Local privilege escalation in pcp spec file through migrate_tempdirs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["pcp-0:4.3.2-12.el7","pcp-0:5.0.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3696.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2012-5530","severity":"low","public_date":"2012-11-18T00:00:00Z","advisories":[],"bugzilla":"875842","bugzilla_description":"CVE-2012-5530 pcp: Insecure temporary file use flaws","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5530.json"},{"CVE":"CVE-2012-3418","severity":"important","public_date":"2012-08-16T00:00:00Z","advisories":[],"bugzilla":"841698","bugzilla_description":"CVE-2012-3418 pcp: multiple integer and heap-based buffer overflow flaws","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3418.json"},{"CVE":"CVE-2012-3419","severity":"moderate","public_date":"2012-08-16T00:00:00Z","advisories":[],"bugzilla":"841702","bugzilla_description":"CVE-2012-3419 pcp: privileged information diclosure flaw","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3419.json"},{"CVE":"CVE-2012-3420","severity":"moderate","public_date":"2012-08-16T00:00:00Z","advisories":[],"bugzilla":"841704","bugzilla_description":"CVE-2012-3420 pcp: two memory leaks can lead to pcmd crash or trigger OOM killer","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3420.json"},{"CVE":"CVE-2012-3421","severity":"moderate","public_date":"2012-08-16T00:00:00Z","advisories":[],"bugzilla":"841706","bugzilla_description":"CVE-2012-3421 pcp: event-driven programming flaw blocks pmcd from responding to other legitimate requests","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3421.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre2-utf16_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre2-utf16_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre2-utf16_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre2_security_api_results.json
new file mode 100644
index 0000000..4e0c1d7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-11164","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":[],"bugzilla":"1470107","bugzilla_description":"CVE-2017-11164 pcre: OP_KETRMAX feature in the match function in pcre_exec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7244","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437364","bugzilla_description":"CVE-2017-7244 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7245","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437367","bugzilla_description":"CVE-2017-7245 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7246","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437369","bugzilla_description":"CVE-2017-7246 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-8786","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1500717","bugzilla_description":"CVE-2017-8786 pcre2: Heap-based buffer overflow in pcre2test.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8786.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8399","severity":"moderate","public_date":"2017-03-10T00:00:00Z","advisories":[],"bugzilla":"1449629","bugzilla_description":"CVE-2017-8399 pcre2: Stack-based buffer overflow in pcre2_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7186","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1434504","bugzilla_description":"CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre_security_api_results.json
new file mode 100644
index 0000000..b5ab610
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcre_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14155","severity":"low","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1848436","bugzilla_description":"CVE-2020-14155 pcre: integer overflow in libpcre","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14155.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-20838","severity":"low","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1848444","bugzilla_description":"CVE-2019-20838 pcre: buffer over-read in JIT when UTF is disabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20838.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16231","severity":null,"public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1700392","bugzilla_description":"CVE-2017-16231 pcre: self-recursive call in match() in pcre_exec.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11164","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":[],"bugzilla":"1470107","bugzilla_description":"CVE-2017-11164 pcre: OP_KETRMAX feature in the match function in pcre_exec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7244","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437364","bugzilla_description":"CVE-2017-7244 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7245","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437367","bugzilla_description":"CVE-2017-7245 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7246","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437369","bugzilla_description":"CVE-2017-7246 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-8786","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1500717","bugzilla_description":"CVE-2017-8786 pcre2: Heap-based buffer overflow in pcre2test.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8786.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8399","severity":"moderate","public_date":"2017-03-10T00:00:00Z","advisories":[],"bugzilla":"1449629","bugzilla_description":"CVE-2017-8399 pcre2: Stack-based buffer overflow in pcre2_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7186","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1434504","bugzilla_description":"CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-6004","severity":"moderate","public_date":"2017-02-14T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1425365","bugzilla_description":"CVE-2017-6004 pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-9769","severity":"moderate","public_date":"2016-03-23T00:00:00Z","advisories":[],"bugzilla":"1320995","bugzilla_description":"CVE-2014-9769 pcre: incorrect nested table jumps when JIT is used (8.36/6)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9769.json"},{"CVE":"CVE-2016-3191","severity":"important","public_date":"2016-02-09T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1025"],"bugzilla":"1311503","bugzilla_description":"CVE-2016-3191 pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3191.json"},{"CVE":"CVE-2016-1283","severity":"important","public_date":"2016-01-04T00:00:00Z","advisories":["RHSA-2016:1132"],"bugzilla":"1295385","bugzilla_description":"CVE-2016-1283 pcre: heap buffer overflow in handling of duplicate named groups (8.39/14)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1283.json"},{"CVE":"CVE-2015-8383","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287614","bugzilla_description":"CVE-2015-8383 pcre: Buffer overflow caused by repeated conditional group (8.38/3)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8383.json"},{"CVE":"CVE-2015-3210","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3210.json"},{"CVE":"CVE-2015-8384","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8384.json"},{"CVE":"CVE-2015-8385","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287629","bugzilla_description":"CVE-2015-8385 pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8385.json"},{"CVE":"CVE-2015-8386","severity":"low","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287636","bugzilla_description":"CVE-2015-8386 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8386.json"},{"CVE":"CVE-2015-8387","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287646","bugzilla_description":"CVE-2015-8387 pcre: Integer overflow in subroutine calls (8.38/8)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8387.json"},{"CVE":"CVE-2015-8389","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287659","bugzilla_description":"CVE-2015-8389 pcre: infinite recursion in JIT compiler when processing certain patterns (8.38/21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8389.json"},{"CVE":"CVE-2015-8390","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287666","bugzilla_description":"CVE-2015-8390 pcre: uninitialized memory read triggered by malformed posix character class (8.38/22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8390.json"},{"CVE":"CVE-2015-8391","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287671","bugzilla_description":"CVE-2015-8391 pcre: inefficient posix character class syntax check (8.38/16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8391.json"},{"CVE":"CVE-2015-8392","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287690","bugzilla_description":"CVE-2015-8392 pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8392.json"},{"CVE":"CVE-2015-8393","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287695","bugzilla_description":"CVE-2015-8393 pcre: pcregrep -q is not always quiet (8.38/28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8393.json"},{"CVE":"CVE-2015-8394","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287702","bugzilla_description":"CVE-2015-8394 pcre: Integer overflow caused by missing check for certain conditions (8.38/31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8394.json"},{"CVE":"CVE-2015-8381","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8381.json"},{"CVE":"CVE-2015-8395","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8395.json"},{"CVE":"CVE-2015-5073","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5073.json"},{"CVE":"CVE-2015-8388","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8388.json"},{"CVE":"CVE-2015-3217","severity":"moderate","public_date":"2015-06-03T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1228283","bugzilla_description":"CVE-2015-3217 pcre: stack overflow caused by mishandled group empty match (8.38/11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3217.json"},{"CVE":"CVE-2015-8380","severity":null,"public_date":"2015-06-01T00:00:00Z","advisories":[],"bugzilla":"1285413","bugzilla_description":"CVE-2015-8380 pcre: OOB write when pcre_exec() is called with ovecsize of 1 (8.38/10)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8380.json"},{"CVE":"CVE-2015-2325","severity":"important","public_date":"2015-03-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1207198","bugzilla_description":"CVE-2015-2325 pcre: heap buffer overflow in compile_branch()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2325.json"},{"CVE":"CVE-2015-2326","severity":"moderate","public_date":"2015-03-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1207202","bugzilla_description":"CVE-2015-2326 pcre: heap buffer over-read in pcre_compile2() (8.37/23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2326.json"},{"CVE":"CVE-2015-8382","severity":"low","public_date":"2015-02-03T00:00:00Z","advisories":[],"bugzilla":"1187225","bugzilla_description":"CVE-2015-8382 php: Regular Expression Uninitialized Pointer Information Disclosure Vulnerability (ZDI-CAN-2547)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8382.json"},{"CVE":"CVE-2014-8964","severity":"low","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2015:0330"],"bugzilla":"1166147","bugzilla_description":"CVE-2014-8964 pcre: incorrect handling of zero-repeat assertion conditions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":["pcre-0:8.32-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8964.json"},{"CVE":"CVE-2015-2328","severity":"moderate","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1285399","bugzilla_description":"CVE-2015-2328 pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2328.json"},{"CVE":"CVE-2015-2327","severity":"moderate","public_date":"2014-07-11T00:00:00Z","advisories":["RHBA-2015:2142","RHSA-2016:2750"],"bugzilla":"1285408","bugzilla_description":"CVE-2015-2327 pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2327.json"},{"CVE":"CVE-2006-7230","severity":"important","public_date":"2007-11-20T00:00:00Z","advisories":["RHSA-2007:1059","RHSA-2007:1068"],"bugzilla":"384801","bugzilla_description":"CVE-2006-7230 pcre miscalculation of memory requirements if options are changed during pattern compilation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pcre-0:6.6-2.el5_1.7","pcre-0:4.5-4.el4_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7230.json"},{"CVE":"CVE-2006-7225","severity":"important","public_date":"2007-11-13T00:00:00Z","advisories":["RHSA-2007:1059","RHSA-2007:1068"],"bugzilla":"384761","bugzilla_description":"CVE-2006-7225 pcre miscalculation of memory requirements for malformed Posix character class","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pcre-0:6.6-2.el5_1.7","pcre-0:4.5-4.el4_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7225.json"},{"CVE":"CVE-2006-7226","severity":"important","public_date":"2007-11-13T00:00:00Z","advisories":["RHSA-2007:1059","RHSA-2007:1068"],"bugzilla":"384781","bugzilla_description":"CVE-2006-7226 pcre miscalculation of memory requirements for repeated subpattern containing a named recursion or subroutine reference","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pcre-0:6.6-2.el5_1.7","pcre-0:4.5-4.el4_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7226.json"},{"CVE":"CVE-2006-7227","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1052"],"bugzilla":"383341","bugzilla_description":"CVE-2006-7227 pcre integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["pcre-0:6.6-2.el5_1.1","pcre-0:4.5-4.el4_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7227.json"},{"CVE":"CVE-2005-4872","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1052"],"bugzilla":"383361","bugzilla_description":"CVE-2005-4872 pcre incorrect memory requirement computation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pcre-0:6.6-2.el5_1.1","pcre-0:4.5-4.el4_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4872.json"},{"CVE":"CVE-2006-7228","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1077","RHSA-2007:1065","RHSA-2007:1076","RHSA-2007:1059","RHSA-2007:1068","RHSA-2007:1063","RHSA-2008:0546"],"bugzilla":"383371","bugzilla_description":"CVE-2006-7228 pcre integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["pcre-0:3.4-2.4","pcre-0:3.9-10.4","python-0:2.3.4-14.4.el4_6.1","pcre-0:6.6-2.el5_1.7","python-0:1.5.2-43.72.2","pcre-0:4.5-4.el4_6.6","php-0:4.1.2-2.20","python-0:2.2.3-6.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7228.json"},{"CVE":"CVE-2007-1659","severity":"critical","public_date":"2007-11-05T00:00:00Z","advisories":["RHSA-2007:1068","RHSA-2007:0967"],"bugzilla":"315871","bugzilla_description":"CVE-2007-1659 pcre regular expression flaws","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pcre-0:6.6-2.el5_0.1","pcre-0:4.5-4.el4_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1659.json"},{"CVE":"CVE-2007-1660","severity":"important","public_date":"2007-11-05T00:00:00Z","advisories":["RHSA-2007:1065","RHSA-2007:1063","RHSA-2007:0968","RHSA-2008:0546","RHSA-2007:0967"],"bugzilla":"315881","bugzilla_description":"CVE-2007-1660 pcre regular expression flaws","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pcre-0:6.6-2.el5_0.1","pcre-0:3.4-2.4","pcre-0:3.9-10.4","php-0:4.1.2-2.20","pcre-0:4.5-4.el4_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1660.json"},{"CVE":"CVE-2005-2491","severity":"moderate","public_date":"2005-08-01T00:00:00Z","advisories":["RHSA-2005:358","RHSA-2005:761","RHSA-2006:0197"],"bugzilla":"430638","bugzilla_description":"CVE-2005-2491 pcre heap overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python-0:2.2.3-6.2","exim-0:4.43-1.RHEL4.5","python-0:2.3.4-14.2","pcre-0:3.9-10.2","pcre-0:4.5-3.2.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2491.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcs-snmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcs-snmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcs-snmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcs_security_api_results.json
new file mode 100644
index 0000000..706d18a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-10663","severity":"moderate","public_date":"2020-03-19T00:00:00Z","advisories":["RHSA-2020:2462","RHSA-2020:2473","RHSA-2020:2670"],"bugzilla":"1827500","bugzilla_description":"CVE-2020-10663 rubygem-json: Unsafe Object Creation Vulnerability in JSON","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-94","affected_packages":["pcs-0:0.10.1-4.el8_0.5","pcs-0:0.10.2-4.el8_1.1","pcs-0:0.10.4-6.el8_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-11627","severity":"moderate","public_date":"2018-05-22T00:00:00Z","advisories":["RHSA-2019:0212","RHSA-2019:0315"],"bugzilla":"1585218","bugzilla_description":"CVE-2018-11627 rubygem-sinatra: XSS in the 400 Bad Request page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-1079","severity":"important","public_date":"2018-04-09T00:00:00Z","advisories":["RHSA-2018:1060"],"bugzilla":"1550243","bugzilla_description":"CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["pcs-0:0.9.162-5.el7_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1079.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H","cvss3_score":"8.7"},{"CVE":"CVE-2018-1086","severity":"moderate","public_date":"2018-04-09T00:00:00Z","advisories":["RHSA-2018:1060","RHSA-2018:1927"],"bugzilla":"1557366","bugzilla_description":"CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["pcs-0:0.9.162-5.el7_5.1","pcs-0:0.9.155-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-7212","severity":"low","public_date":"2018-02-18T00:00:00Z","advisories":[],"bugzilla":"1802282","bugzilla_description":"CVE-2018-7212 rubygem-sinatra: path traversal via backslash characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7212.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-10109","severity":"moderate","public_date":"2016-12-30T00:00:00Z","advisories":[],"bugzilla":"1410074","bugzilla_description":"CVE-2016-10109 pcsc-lite: Use-after-free of cardsList due to SCardReleaseContext invocations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10109.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-0720","severity":"moderate","public_date":"2016-02-16T00:00:00Z","advisories":["RHSA-2016:2596"],"bugzilla":"1299614","bugzilla_description":"CVE-2016-0720 pcs: Cross-Site Request Forgery in web UI","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["pcs-0:0.9.152-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0720.json"},{"CVE":"CVE-2016-0721","severity":"moderate","public_date":"2016-02-16T00:00:00Z","advisories":["RHSA-2016:2596"],"bugzilla":"1299615","bugzilla_description":"CVE-2016-0721 pcs: cookies are not invalidated upon logout","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-613->CWE-384","affected_packages":["pcs-0:0.9.152-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0721.json"},{"CVE":"CVE-2015-5189","severity":"moderate","public_date":"2015-09-01T00:00:00Z","advisories":["RHSA-2015:1700"],"bugzilla":"1252805","bugzilla_description":"CVE-2015-5189 pcs: Incorrect authorization when using pcs web UI","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-863","affected_packages":["pcs-0:0.9.139-9.el6_7.1","pcs-0:0.9.137-13.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5189.json"},{"CVE":"CVE-2015-5190","severity":"important","public_date":"2015-09-01T00:00:00Z","advisories":["RHSA-2015:1700"],"bugzilla":"1252813","bugzilla_description":"CVE-2015-5190 pcs: Command injection with root privileges.","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["pcs-0:0.9.139-9.el6_7.1","pcs-0:0.9.137-13.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5190.json"},{"CVE":"CVE-2015-9251","severity":"moderate","public_date":"2015-06-27T00:00:00Z","advisories":["RHSA-2020:0481","RHSA-2020:0729","RHSA-2020:3936","RHSA-2020:0983"],"bugzilla":"1399546","bugzilla_description":"CVE-2015-9251 js-jquery: Cross-site scripting via cross-domain ajax requests","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2015-3225","severity":"moderate","public_date":"2015-06-16T00:00:00Z","advisories":["RHBA-2018:0337","RHSA-2015:2290"],"bugzilla":"1232292","bugzilla_description":"CVE-2015-3225 rubygem-rack: Potential Denial of Service Vulnerability in Rack normalize_params()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["rubygem-rack-1:1.6.4-2.el7sat","pcs-0:0.9.143-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3225.json"},{"CVE":"CVE-2018-1000119","severity":"moderate","public_date":"2015-05-25T00:00:00Z","advisories":["RHSA-2018:1060"],"bugzilla":"1534027","bugzilla_description":"CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["pcs-0:0.9.162-5.el7_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000119.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-1848","severity":"important","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0980","RHSA-2015:0990"],"bugzilla":"1208294","bugzilla_description":"CVE-2015-1848 CVE-2015-3983 pcs: improper web session variable signing","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-347","affected_packages":["pcs-0:0.9.123-9.el6_6.2","pcs-0:0.9.137-13.el7_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1848.json"},{"CVE":"CVE-2015-3983","severity":"important","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0980","RHSA-2015:0990"],"bugzilla":"1208294","bugzilla_description":"CVE-2015-1848 CVE-2015-3983 pcs: improper web session variable signing","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-347","affected_packages":["pcs-0:0.9.123-9.el6_6.2","pcs-0:0.9.137-13.el7_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3983.json"},{"CVE":"CVE-2010-4531","severity":"moderate","public_date":"2010-12-13T00:00:00Z","advisories":["RHSA-2013:0525"],"bugzilla":"664999","bugzilla_description":"CVE-2010-4531 pcsc-lite: Stack-based buffer overflow in Answer-to-Reset (ATR) decoder","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["pcsc-lite-0:1.5.2-11.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4531.json"},{"CVE":"CVE-2009-4901","severity":"moderate","public_date":"2010-06-10T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2010:0533"],"bugzilla":"596426","bugzilla_description":"CVE-2009-4901 CVE-2009-4902 CVE-2010-0407 pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["pcsc-lite-0:1.3.3-3.el4","pcsc-lite-0:1.4.4-4.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4901.json"},{"CVE":"CVE-2009-4902","severity":"moderate","public_date":"2010-06-10T00:00:00Z","advisories":[],"bugzilla":"596426","bugzilla_description":"CVE-2009-4901 CVE-2009-4902 CVE-2010-0407 pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4902.json"},{"CVE":"CVE-2010-0407","severity":"moderate","public_date":"2010-06-10T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2010:0533"],"bugzilla":"596426","bugzilla_description":"CVE-2009-4901 CVE-2009-4902 CVE-2010-0407 pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["pcsc-lite-0:1.3.3-3.el4","pcsc-lite-0:1.4.4-4.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0407.json"},{"CVE":"CVE-2017-2661","severity":"low","public_date":null,"advisories":[],"bugzilla":"1428948","bugzilla_description":"CVE-2017-2661 pcs: Improper node name field validation when creating clusters leads to XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2661.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcsc-lite-ccid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcsc-lite-ccid_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcsc-lite-ccid_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcsc-lite-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcsc-lite-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcsc-lite-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcsc-lite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcsc-lite_security_api_results.json
new file mode 100644
index 0000000..f37911e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pcsc-lite_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10109","severity":"moderate","public_date":"2016-12-30T00:00:00Z","advisories":[],"bugzilla":"1410074","bugzilla_description":"CVE-2016-10109 pcsc-lite: Use-after-free of cardsList due to SCardReleaseContext invocations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10109.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2010-4531","severity":"moderate","public_date":"2010-12-13T00:00:00Z","advisories":["RHSA-2013:0525"],"bugzilla":"664999","bugzilla_description":"CVE-2010-4531 pcsc-lite: Stack-based buffer overflow in Answer-to-Reset (ATR) decoder","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["pcsc-lite-0:1.5.2-11.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4531.json"},{"CVE":"CVE-2009-4901","severity":"moderate","public_date":"2010-06-10T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2010:0533"],"bugzilla":"596426","bugzilla_description":"CVE-2009-4901 CVE-2009-4902 CVE-2010-0407 pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["pcsc-lite-0:1.3.3-3.el4","pcsc-lite-0:1.4.4-4.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4901.json"},{"CVE":"CVE-2009-4902","severity":"moderate","public_date":"2010-06-10T00:00:00Z","advisories":[],"bugzilla":"596426","bugzilla_description":"CVE-2009-4901 CVE-2009-4902 CVE-2010-0407 pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4902.json"},{"CVE":"CVE-2010-0407","severity":"moderate","public_date":"2010-06-10T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2010:0533"],"bugzilla":"596426","bugzilla_description":"CVE-2009-4901 CVE-2009-4902 CVE-2010-0407 pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["pcsc-lite-0:1.3.3-3.el4","pcsc-lite-0:1.4.4-4.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0407.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pentaho-libxml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pentaho-libxml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pentaho-libxml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pentaho-reporting-flow-engine_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pentaho-reporting-flow-engine_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pentaho-reporting-flow-engine_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perftest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perftest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perftest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Algorithm-Diff_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Algorithm-Diff_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Algorithm-Diff_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-App-cpanminus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-App-cpanminus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-App-cpanminus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Archive-Extract_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Archive-Extract_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Archive-Extract_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Archive-Tar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Archive-Tar_security_api_results.json
new file mode 100644
index 0000000..8a66389
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Archive-Tar_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10860","severity":"moderate","public_date":"2018-06-28T00:00:00Z","advisories":[],"bugzilla":"1591449","bugzilla_description":"CVE-2018-10860 perl-Archive-Zip: Directory traversal in Archive::Zip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-12015","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":["RHSA-2019:2097"],"bugzilla":"1588760","bugzilla_description":"CVE-2018-12015 perl: Directory traversal in Archive::Tar","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["perl-Archive-Tar-0:1.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12015.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2007-4829","severity":"moderate","public_date":"2007-08-24T00:00:00Z","advisories":["RHSA-2010:0505"],"bugzilla":"295021","bugzilla_description":"CVE-2007-4829 perl-Archive-Tar directory traversal flaws","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-Archive-Tar-1:1.39.1-1.el5_5.1","perl-Archive-Tar-0:1.39.1-1.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4829.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Archive-Zip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Archive-Zip_security_api_results.json
new file mode 100644
index 0000000..889ca05
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Archive-Zip_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10860","severity":"moderate","public_date":"2018-06-28T00:00:00Z","advisories":[],"bugzilla":"1591449","bugzilla_description":"CVE-2018-10860 perl-Archive-Zip: Directory traversal in Archive::Zip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Authen-SASL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Authen-SASL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Authen-SASL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-B-Lint_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-B-Lint_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-B-Lint_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Bit-Vector_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Bit-Vector_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Bit-Vector_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Business-ISBN-Data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Business-ISBN-Data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Business-ISBN-Data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Business-ISBN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Business-ISBN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Business-ISBN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CGI-Session_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CGI-Session_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CGI-Session_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CGI_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CGI_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CGI_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN-Meta-Requirements_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN-Meta-Requirements_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN-Meta-Requirements_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN-Meta-YAML_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN-Meta-YAML_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN-Meta-YAML_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN-Meta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN-Meta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN-Meta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPANPLUS-Dist-Build_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPANPLUS-Dist-Build_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPANPLUS-Dist-Build_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPANPLUS_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPANPLUS_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPANPLUS_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN_security_api_results.json
new file mode 100644
index 0000000..f78ec76
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-CPAN_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-1238","severity":"moderate","public_date":"2016-07-25T00:00:00Z","advisories":[],"bugzilla":"1355695","bugzilla_description":"CVE-2016-1238 perl: loading of modules from current directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1238.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Carp-Clan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Carp-Clan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Carp-Clan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Carp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Carp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Carp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Class-ISA_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Class-ISA_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Class-ISA_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Class-Load_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Class-Load_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Class-Load_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Class-Singleton_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Class-Singleton_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Class-Singleton_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Compress-Raw-Bzip2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Compress-Raw-Bzip2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Compress-Raw-Bzip2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Compress-Raw-Zlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Compress-Raw-Zlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Compress-Raw-Zlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Convert-ASN1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Convert-ASN1_security_api_results.json
new file mode 100644
index 0000000..5018469
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Convert-ASN1_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7488","severity":"moderate","public_date":"2013-10-08T00:00:00Z","advisories":[],"bugzilla":"1821879","bugzilla_description":"CVE-2013-7488 perl-Convert-ASN1: allows remote attackers to cause an infinite loop via unexpected input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7488.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-OpenSSL-Bignum_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-OpenSSL-Bignum_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-OpenSSL-Bignum_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-OpenSSL-RSA_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-OpenSSL-RSA_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-OpenSSL-RSA_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-OpenSSL-Random_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-OpenSSL-Random_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-OpenSSL-Random_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-SSLeay_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-SSLeay_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Crypt-SSLeay_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBD-MySQL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBD-MySQL_security_api_results.json
new file mode 100644
index 0000000..6008467
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBD-MySQL_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-10789","severity":"moderate","public_date":"2017-07-01T00:00:00Z","advisories":[],"bugzilla":"1467606","bugzilla_description":"CVE-2017-10789 perl-DBD-MySQL: Possible MITM attack when mysql_ssl=1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10789.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10788","severity":"moderate","public_date":"2017-06-08T00:00:00Z","advisories":[],"bugzilla":"1467600","bugzilla_description":"CVE-2017-10788 perl-DBD-MySQL: Use-after-free when calling mysql_stmt_error() after mysql_stmt_close()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10788.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-1251","severity":"moderate","public_date":"2016-11-18T00:00:00Z","advisories":[],"bugzilla":"1399580","bugzilla_description":"CVE-2016-1251 perl-DBD-MySQL: Use after free when using prepared statements","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-1249","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395591","bugzilla_description":"CVE-2016-1249 perl-DBD-MySQL: Out-of-bounds read when using server-side prepared statement support","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1249.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-1246","severity":"moderate","public_date":"2016-10-03T00:00:00Z","advisories":[],"bugzilla":"1380375","bugzilla_description":"CVE-2016-1246 perl-DBD-MySQL: Buffer overflow triggered by user supplied data","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8949","severity":"low","public_date":"2015-11-14T00:00:00Z","advisories":[],"bugzilla":"1360279","bugzilla_description":"CVE-2015-8949 perl-DBD-MySQL: Use after free when my_login fails","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8949.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2014-9906","severity":"low","public_date":"2014-08-01T00:00:00Z","advisories":[],"bugzilla":"1361073","bugzilla_description":"CVE-2014-9906 perl-DBD-MySQL: Use after free in mysql_dr_error","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBD-Pg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBD-Pg_security_api_results.json
new file mode 100644
index 0000000..a6c322f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBD-Pg_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-1151","severity":"moderate","public_date":"2012-02-27T00:00:00Z","advisories":["RHSA-2012:1116"],"bugzilla":"801733","bugzilla_description":"CVE-2012-1151 perl-DBD-Pg: Format string flaws by turning db notices into Perl warnings and by preparing DBD statement","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-DBD-Pg-0:1.49-4.el5_8","perl-DBD-Pg-0:2.15.1-4.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1151.json"},{"CVE":"CVE-2009-0663","severity":"moderate","public_date":"2009-04-28T00:00:00Z","advisories":["RHSA-2009:0479","RHSA-2009:1067"],"bugzilla":"497367","bugzilla_description":"CVE-2009-0663 perl-DBD-Pg: pg_getline buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-DBD-Pg-0:1.49-2.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0663.json"},{"CVE":"CVE-2009-1341","severity":"moderate","public_date":"2009-04-28T00:00:00Z","advisories":["RHSA-2009:0479","RHSA-2009:1067"],"bugzilla":"497503","bugzilla_description":"CVE-2009-1341 perl-DBD-Pg: dequote_bytea memory leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/AU:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["perl-DBD-Pg-0:1.49-2.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1341.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBD-SQLite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBD-SQLite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBD-SQLite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBI_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBI_security_api_results.json
new file mode 100644
index 0000000..78d7e42
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBI_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-10402","severity":"moderate","public_date":"2020-09-16T00:00:00Z","advisories":[],"bugzilla":"1879741","bugzilla_description":"CVE-2014-10402 perl-dbi: Incomplete fix for CVE-2014-10401","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-10402.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2020-14393","severity":"low","public_date":"2019-08-01T00:00:00Z","advisories":[],"bugzilla":"1877409","bugzilla_description":"CVE-2020-14393 perl-dbi: Buffer overflow on an overlong DBD class name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14393.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-14392","severity":"low","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1877402","bugzilla_description":"CVE-2020-14392 perl-dbi: Memory corruption in XS functions when Perl stack is reallocated","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14392.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-20919","severity":"low","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1877405","bugzilla_description":"CVE-2019-20919 perl-dbi: NULL profile dereference in dbi_profile()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20919.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2014-10401","severity":"moderate","public_date":"2014-10-16T00:00:00Z","advisories":[],"bugzilla":"1877444","bugzilla_description":"CVE-2014-10401 perl-dbi: DBD::File drivers open files from folders other than specifically passed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-10401.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2013-7490","severity":"moderate","public_date":"2014-09-21T00:00:00Z","advisories":[],"bugzilla":"1877427","bugzilla_description":"CVE-2013-7490 perl-dbi: Risk of memory corruption with many arguments in DBI method dispatch","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7490.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2013-7491","severity":"low","public_date":"2013-06-24T00:00:00Z","advisories":[],"bugzilla":"1877447","bugzilla_description":"CVE-2013-7491 perl-dbi: Stack corruption on callbacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7491.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2005-0077","severity":"low","public_date":"2005-01-25T00:00:00Z","advisories":["RHSA-2005:069","RHSA-2005:072"],"bugzilla":"1617444","bugzilla_description":"CVE-2005-0077 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-DBI-0:1.40-8","perl-DBI-0:1.32-9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0077.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBIx-Simple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBIx-Simple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DBIx-Simple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DB_File_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DB_File_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DB_File_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Data-Dumper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Data-Dumper_security_api_results.json
new file mode 100644
index 0000000..6f1c8c8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Data-Dumper_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-4330","severity":"low","public_date":"2014-09-18T00:00:00Z","advisories":[],"bugzilla":"1139700","bugzilla_description":"CVE-2014-4330 perl-Data-Dumper: deep recursion stack overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4330.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Data-OptList_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Data-OptList_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Data-OptList_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Date-Calc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Date-Calc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Date-Calc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Date-Manip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Date-Manip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Date-Manip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime-Format-DateParse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime-Format-DateParse_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime-Format-DateParse_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime-Locale_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime-Locale_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime-Locale_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime-TimeZone_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime-TimeZone_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime-TimeZone_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-DateTime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Devel-Symdump_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Devel-Symdump_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Devel-Symdump_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-HMAC_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-HMAC_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-HMAC_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-MD5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-MD5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-MD5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-SHA1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-SHA1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-SHA1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-SHA_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-SHA_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest-SHA_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Digest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Encode-Detect_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Encode-Detect_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Encode-Detect_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Encode-Locale_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Encode-Locale_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Encode-Locale_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Encode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Encode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Encode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Env_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Env_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Env_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Error_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Error_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Error_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Exporter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Exporter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Exporter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-CBuilder_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-CBuilder_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-CBuilder_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-Embed_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-Embed_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-Embed_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-Install_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-Install_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-Install_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-MakeMaker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-MakeMaker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-MakeMaker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-Manifest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-Manifest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-Manifest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-ParseXS_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-ParseXS_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-ExtUtils-ParseXS_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-FCGI_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-FCGI_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-FCGI_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-CheckTree_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-CheckTree_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-CheckTree_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Fetch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Fetch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Fetch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Listing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Listing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Listing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Path_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Path_security_api_results.json
new file mode 100644
index 0000000..fa34f22
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Path_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-6512","severity":"low","public_date":"2017-05-02T00:00:00Z","advisories":[],"bugzilla":"1457832","bugzilla_description":"CVE-2017-6512 perl-File-Path: rmtree/remove_tree race condition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6512.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Slurp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Slurp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Slurp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Temp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Temp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-File-Temp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Filter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Filter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Filter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Font-AFM_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Font-AFM_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Font-AFM_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-FreezeThaw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-FreezeThaw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-FreezeThaw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-GD_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-GD_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-GD_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-GSSAPI_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-GSSAPI_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-GSSAPI_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Getopt-Long_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Getopt-Long_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Getopt-Long_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Git_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Git_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Git_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Format_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Format_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Format_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Parser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Parser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Parser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Tagset_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Tagset_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Tagset_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Tree_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Tree_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTML-Tree_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Cookies_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Cookies_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Cookies_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Daemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Daemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Daemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Date_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Date_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Date_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Message_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Message_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Message_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Negotiate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Negotiate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Negotiate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Tiny_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Tiny_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-HTTP-Tiny_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Compress_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Compress_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Compress_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-HTML_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-HTML_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-HTML_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Socket-INET6_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Socket-INET6_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Socket-INET6_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Socket-IP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Socket-IP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Socket-IP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Socket-SSL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Socket-SSL_security_api_results.json
new file mode 100644
index 0000000..aca26ef
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Socket-SSL_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-4334","severity":"low","public_date":"2010-12-06T00:00:00Z","advisories":[],"bugzilla":"660847","bugzilla_description":"CVE-2010-4334 perl-IO-Socket-SSL: ignores user request for peer verification","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4334.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Zlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Zlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-Zlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-stringy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-stringy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IO-stringy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IPC-Cmd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IPC-Cmd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-IPC-Cmd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-JSON-PP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-JSON-PP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-JSON-PP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-JSON_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-JSON_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-JSON_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-LDAP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-LDAP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-LDAP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-LWP-MediaTypes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-LWP-MediaTypes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-LWP-MediaTypes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-LWP-Protocol-https_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-LWP-Protocol-https_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-LWP-Protocol-https_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-List-MoreUtils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-List-MoreUtils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-List-MoreUtils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Locale-Codes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Locale-Codes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Locale-Codes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Locale-Maketext-Simple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Locale-Maketext-Simple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Locale-Maketext-Simple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Locale-Maketext_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Locale-Maketext_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Locale-Maketext_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Log-Message-Simple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Log-Message-Simple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Log-Message-Simple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Log-Message_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Log-Message_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Log-Message_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mail-DKIM_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mail-DKIM_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mail-DKIM_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mail-SPF_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mail-SPF_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mail-SPF_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-MailTools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-MailTools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-MailTools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Build_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Build_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Build_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-CoreList_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-CoreList_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-CoreList_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Implementation_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Implementation_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Implementation_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Load-Conditional_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Load-Conditional_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Load-Conditional_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Load_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Load_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Load_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Loaded_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Loaded_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Loaded_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Metadata_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Metadata_security_api_results.json
new file mode 100644
index 0000000..fe683d3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Metadata_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-1437","severity":"low","public_date":"2013-08-21T00:00:00Z","advisories":[],"bugzilla":"996281","bugzilla_description":"CVE-2013-1437 perl-Module-Metadata: incorrectly documents that it does not execute unsafe code","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1437.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Pluggable_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Pluggable_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Pluggable_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Runtime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Runtime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Runtime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Signature_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Signature_security_api_results.json
new file mode 100644
index 0000000..fd5654a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Module-Signature_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-3406","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209911","bugzilla_description":"CVE-2015-3406 perl-Module-Signature: unsigned files interpreted as signed in some circumstances","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3406.json"},{"CVE":"CVE-2015-3407","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209915","bugzilla_description":"CVE-2015-3407 perl-Module-Signature: arbitrary code execution during test phase","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3407.json"},{"CVE":"CVE-2015-3408","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209917","bugzilla_description":"CVE-2015-3408 perl-Module-Signature: arbitrary code execution when verifying module signatures","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3408.json"},{"CVE":"CVE-2015-3409","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209918","bugzilla_description":"CVE-2015-3409 perl-Module-Signature: arbitrary modules loading in some circumstances","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3409.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mozilla-CA_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mozilla-CA_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mozilla-CA_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mozilla-LDAP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mozilla-LDAP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Mozilla-LDAP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-DNS_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-DNS_security_api_results.json
new file mode 100644
index 0000000..6b14b45
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-DNS_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2007-3377","severity":"moderate","public_date":"2006-12-22T00:00:00Z","advisories":["RHSA-2007:0675","RHSA-2007:0674"],"bugzilla":"245466","bugzilla_description":"CVE-2007-3377 perl-Net-DNS security issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-Net-DNS-0:0.48-2.el4","perl-Net-DNS-0:0.31-4.el3","perl-Net-DNS-0:0.59-3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3377.json"},{"CVE":"CVE-2007-3409","severity":"moderate","public_date":"2006-12-22T00:00:00Z","advisories":["RHSA-2007:0674"],"bugzilla":"245804","bugzilla_description":"CVE-2007-3409 Perl Net::DNS denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-Net-DNS-0:0.31-4.el3","perl-Net-DNS-0:0.59-3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3409.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-Daemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-Daemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-Daemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-HTTP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-HTTP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-HTTP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-LibIDN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-LibIDN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-LibIDN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-SMTP-SSL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-SMTP-SSL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-SMTP-SSL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-SSLeay_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-SSLeay_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Net-SSLeay_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-NetAddr-IP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-NetAddr-IP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-NetAddr-IP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Newt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Newt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Newt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Object-Accessor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Object-Accessor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Object-Accessor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PAR-Dist_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PAR-Dist_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PAR-Dist_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PCP-PMDA_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PCP-PMDA_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PCP-PMDA_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-Constants_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-Constants_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-Constants_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-DeprecationManager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-DeprecationManager_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-DeprecationManager_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-Stash-XS_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-Stash-XS_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-Stash-XS_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-Stash_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-Stash_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Package-Stash_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Params-Check_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Params-Check_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Params-Check_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Params-Util_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Params-Util_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Params-Util_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Params-Validate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Params-Validate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Params-Validate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Parse-CPAN-Meta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Parse-CPAN-Meta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Parse-CPAN-Meta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PathTools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PathTools_security_api_results.json
new file mode 100644
index 0000000..c99d26f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PathTools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-8607","severity":"moderate","public_date":"2016-01-11T00:00:00Z","advisories":[],"bugzilla":"1293272","bugzilla_description":"CVE-2015-8607 perl-PathTools: Taint propagation flaw in canonpath()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8607.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Perl-OSType_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Perl-OSType_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Perl-OSType_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Perl4-CoreLibs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Perl4-CoreLibs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Perl4-CoreLibs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PlRPC_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PlRPC_security_api_results.json
new file mode 100644
index 0000000..731bac7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-PlRPC_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7284","severity":"moderate","public_date":"2013-11-14T00:00:00Z","advisories":[],"bugzilla":"1051108","bugzilla_description":"CVE-2013-7284 perl-PlRPC: pre-auth remote code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7284.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Checker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Checker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Checker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Coverage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Coverage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Coverage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Escapes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Escapes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Escapes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-LaTeX_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-LaTeX_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-LaTeX_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Parser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Parser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Parser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Perldoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Perldoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Perldoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Plainer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Plainer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Plainer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Simple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Simple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Simple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Usage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Usage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Pod-Usage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-SGMLSpm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-SGMLSpm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-SGMLSpm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-SNMP_Session_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-SNMP_Session_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-SNMP_Session_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Scalar-List-Utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Scalar-List-Utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Scalar-List-Utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Socket6_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Socket6_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Socket6_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Socket_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Socket_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Socket_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Storable_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Storable_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Storable_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-String-ShellQuote_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-String-ShellQuote_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-String-ShellQuote_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sub-Install_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sub-Install_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sub-Install_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-CPU_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-CPU_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-CPU_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-Guestfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-Guestfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-Guestfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-MemInfo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-MemInfo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-MemInfo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-Syslog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-Syslog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-Syslog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-Virt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-Virt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Sys-Virt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Term-UI_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Term-UI_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Term-UI_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-TermReadKey_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-TermReadKey_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-TermReadKey_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Harness_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Harness_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Harness_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Pod-Coverage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Pod-Coverage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Pod-Coverage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Pod_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Pod_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Pod_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Simple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Simple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Test-Simple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-Diff_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-Diff_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-Diff_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-ParseWords_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-ParseWords_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-ParseWords_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-Soundex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-Soundex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-Soundex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-Unidecode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-Unidecode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Text-Unidecode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Thread-Queue_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Thread-Queue_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Thread-Queue_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Time-HiRes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Time-HiRes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Time-HiRes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Time-Local_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Time-Local_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Time-Local_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Time-Piece_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Time-Piece_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Time-Piece_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-TimeDate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-TimeDate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-TimeDate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Try-Tiny_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Try-Tiny_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Try-Tiny_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-URI_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-URI_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-URI_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Version-Requirements_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Version-Requirements_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-Version-Requirements_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-WWW-RobotRules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-WWW-RobotRules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-WWW-RobotRules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Dumper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Dumper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Dumper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Filter-BufferText_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Filter-BufferText_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Filter-BufferText_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Grove_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Grove_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Grove_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-LibXML_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-LibXML_security_api_results.json
new file mode 100644
index 0000000..cee9b26
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-LibXML_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-10672","severity":"moderate","public_date":"2017-06-27T00:00:00Z","advisories":[],"bugzilla":"1470204","bugzilla_description":"CVE-2017-10672 perl-XML-LibXML: Use-after-free by controlling the arguments to a replaceChild call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10672.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2015-3451","severity":"low","public_date":"2015-04-23T00:00:00Z","advisories":[],"bugzilla":"1216112","bugzilla_description":"CVE-2015-3451 perl-XML-LibXML: \"expand_entities\" option was not preserved under some circumstances","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3451.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-NamespaceSupport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-NamespaceSupport_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-NamespaceSupport_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Parser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Parser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Parser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-SAX-Base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-SAX-Base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-SAX-Base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-SAX-Writer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-SAX-Writer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-SAX-Writer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-SAX_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-SAX_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-SAX_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Simple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Simple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Simple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Twig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Twig_security_api_results.json
new file mode 100644
index 0000000..497abf9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Twig_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-9180","severity":"moderate","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1379553","bugzilla_description":"CVE-2016-9180 perl-XML-Twig:  expand_external_ents option fails to work as documented","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"7.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Writer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Writer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-Writer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-XPath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-XPath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-XML-XPath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-YAML-Tiny_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-YAML-Tiny_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-YAML-Tiny_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-YAML_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-YAML_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-YAML_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-autodie_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-autodie_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-autodie_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-constant_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-constant_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-constant_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-gettext_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-gettext_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-gettext_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-hivex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-hivex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-hivex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-homedir_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-homedir_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-homedir_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libintl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libintl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libintl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libwww-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libwww-perl_security_api_results.json
new file mode 100644
index 0000000..51596cb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libwww-perl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-3230","severity":"moderate","public_date":"2014-05-01T00:00:00Z","advisories":[],"bugzilla":"1094440","bugzilla_description":"CVE-2014-3230 perl-libwww-perl: incorrect handling of SSL certificate verification","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3230.json"},{"CVE":"CVE-2011-0633","severity":"moderate","public_date":"2011-03-08T00:00:00Z","advisories":[],"bugzilla":"705044","bugzilla_description":"CVE-2011-0633 perl-libwww-perl: no hostname check against SSL certificate name by default","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0633.json"},{"CVE":"CVE-2010-2253","severity":"low","public_date":"2010-05-17T00:00:00Z","advisories":[],"bugzilla":"602800","bugzilla_description":"CVE-2010-2253 perl-libwww-perl: multiple HTTP client download filename vulnerability [OCERT 2010-001]","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2253.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libxml-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libxml-perl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-libxml-perl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-local-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-local-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-local-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-podlators_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-podlators_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-podlators_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-srpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-srpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-srpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-threads-shared_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-threads-shared_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-threads-shared_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-threads_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-threads_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-threads_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-version_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-version_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl-version_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl_security_api_results.json
new file mode 100644
index 0000000..e3784ed
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-10402","severity":"moderate","public_date":"2020-09-16T00:00:00Z","advisories":[],"bugzilla":"1879741","bugzilla_description":"CVE-2014-10402 perl-dbi: Incomplete fix for CVE-2014-10401","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-10402.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2020-10543","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":[],"bugzilla":"1837975","bugzilla_description":"CVE-2020-10543 perl: heap-based buffer overflow in regular expression compiler leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10543.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-10878","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":[],"bugzilla":"1837988","bugzilla_description":"CVE-2020-10878 perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10878.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2020-12723","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":[],"bugzilla":"1838000","bugzilla_description":"CVE-2020-12723 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12723.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14393","severity":"low","public_date":"2019-08-01T00:00:00Z","advisories":[],"bugzilla":"1877409","bugzilla_description":"CVE-2020-14393 perl-dbi: Buffer overflow on an overlong DBD class name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14393.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-14392","severity":"low","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1877402","bugzilla_description":"CVE-2020-14392 perl-dbi: Memory corruption in XS functions when Perl stack is reallocated","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14392.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-20919","severity":"low","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1877405","bugzilla_description":"CVE-2019-20919 perl-dbi: NULL profile dereference in dbi_profile()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20919.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-18311","severity":"important","public_date":"2018-11-29T00:00:00Z","advisories":["RHSA-2019:0001","RHSA-2019:0010","RHSA-2019:2400","RHSA-2019:1942","RHSA-2019:1790","RHSA-2019:0109"],"bugzilla":"1646730","bugzilla_description":"CVE-2018-18311 perl: Integer overflow leading to buffer overflow in Perl_my_setenv()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["rh-perl524-perl-4:5.24.0-381.el6","perl-4:5.16.3-294.el7_6","rh-perl524-perl-4:5.24.0-381.el7","perl-4:5.16.3-292.el7_5.1","perl-4:5.16.3-292.el7_4.1","rh-perl526-perl-4:5.26.3-405.el7","perl-4:5.16.3-291.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-18312","severity":"moderate","public_date":"2018-11-29T00:00:00Z","advisories":["RHSA-2019:0001","RHSA-2019:0010"],"bugzilla":"1646734","bugzilla_description":"CVE-2018-18312 perl: Heap-based buffer overflow in S_handle_regex_sets()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["rh-perl524-perl-4:5.24.0-381.el6","rh-perl524-perl-4:5.24.0-381.el7","rh-perl526-perl-4:5.26.3-405.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18312.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-18313","severity":"low","public_date":"2018-11-29T00:00:00Z","advisories":["RHSA-2019:0001","RHSA-2019:0010"],"bugzilla":"1646738","bugzilla_description":"CVE-2018-18313 perl: Heap-based buffer read overflow in S_grok_bslash_N()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-perl524-perl-4:5.24.0-381.el6","rh-perl524-perl-4:5.24.0-381.el7","rh-perl526-perl-4:5.26.3-405.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18313.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-18314","severity":"moderate","public_date":"2018-11-29T00:00:00Z","advisories":["RHSA-2019:0001","RHSA-2019:0010"],"bugzilla":"1646751","bugzilla_description":"CVE-2018-18314 perl: Heap-based buffer overflow in S_regatom()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-perl524-perl-4:5.24.0-381.el6","rh-perl524-perl-4:5.24.0-381.el7","rh-perl526-perl-4:5.26.3-405.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18314.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-10860","severity":"moderate","public_date":"2018-06-28T00:00:00Z","advisories":[],"bugzilla":"1591449","bugzilla_description":"CVE-2018-10860 perl-Archive-Zip: Directory traversal in Archive::Zip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-12558","severity":"moderate","public_date":"2018-06-19T00:00:00Z","advisories":[],"bugzilla":"1593318","bugzilla_description":"CVE-2018-12558 perl-Email-Address: Specially crafted input could cause Denial of Service due to complex parse() method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12558.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12015","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":["RHSA-2019:2097"],"bugzilla":"1588760","bugzilla_description":"CVE-2018-12015 perl: Directory traversal in Archive::Tar","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["perl-Archive-Tar-0:1.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12015.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-6913","severity":"low","public_date":"2018-04-14T00:00:00Z","advisories":[],"bugzilla":"1547772","bugzilla_description":"CVE-2018-6913 perl: heap buffer overflow in pp_pack.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6913.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-6798","severity":"moderate","public_date":"2018-04-14T00:00:00Z","advisories":["RHSA-2018:1192"],"bugzilla":"1547779","bugzilla_description":"CVE-2018-6798 perl: heap read overflow in regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-perl524-perl-4:5.24.0-380.el6","rh-perl524-perl-4:5.24.0-380.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-6797","severity":"moderate","public_date":"2018-04-14T00:00:00Z","advisories":["RHSA-2018:1192"],"bugzilla":"1547783","bugzilla_description":"CVE-2018-6797 perl: heap write overflow in regcomp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["rh-perl524-perl-4:5.24.0-380.el6","rh-perl524-perl-4:5.24.0-380.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12837","severity":"low","public_date":"2017-09-12T00:00:00Z","advisories":[],"bugzilla":"1492091","bugzilla_description":"CVE-2017-12837 perl: Heap buffer overflow in regular expression compiler","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12837.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-12883","severity":"moderate","public_date":"2017-09-12T00:00:00Z","advisories":[],"bugzilla":"1492093","bugzilla_description":"CVE-2017-12883 perl: Buffer over-read in regular expression parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12883.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10789","severity":"moderate","public_date":"2017-07-01T00:00:00Z","advisories":[],"bugzilla":"1467606","bugzilla_description":"CVE-2017-10789 perl-DBD-MySQL: Possible MITM attack when mysql_ssl=1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10789.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10672","severity":"moderate","public_date":"2017-06-27T00:00:00Z","advisories":[],"bugzilla":"1470204","bugzilla_description":"CVE-2017-10672 perl-XML-LibXML: Use-after-free by controlling the arguments to a replaceChild call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10672.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-10788","severity":"moderate","public_date":"2017-06-08T00:00:00Z","advisories":[],"bugzilla":"1467600","bugzilla_description":"CVE-2017-10788 perl-DBD-MySQL: Use-after-free when calling mysql_stmt_error() after mysql_stmt_close()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10788.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6512","severity":"low","public_date":"2017-05-02T00:00:00Z","advisories":[],"bugzilla":"1457832","bugzilla_description":"CVE-2017-6512 perl-File-Path: rmtree/remove_tree race condition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6512.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2016-1251","severity":"moderate","public_date":"2016-11-18T00:00:00Z","advisories":[],"bugzilla":"1399580","bugzilla_description":"CVE-2016-1251 perl-DBD-MySQL: Use after free when using prepared statements","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-1249","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395591","bugzilla_description":"CVE-2016-1249 perl-DBD-MySQL: Out-of-bounds read when using server-side prepared statement support","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1249.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-1246","severity":"moderate","public_date":"2016-10-03T00:00:00Z","advisories":[],"bugzilla":"1380375","bugzilla_description":"CVE-2016-1246 perl-DBD-MySQL: Buffer overflow triggered by user supplied data","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-9180","severity":"moderate","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1379553","bugzilla_description":"CVE-2016-9180 perl-XML-Twig:  expand_external_ents option fails to work as documented","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2016-9181","severity":"low","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1379556","bugzilla_description":"CVE-2016-9181 perl-Image-Info: XXE in SVG files","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2016-10374","severity":"low","public_date":"2016-08-13T00:00:00Z","advisories":[],"bugzilla":"1452050","bugzilla_description":"CVE-2016-10374 perltidy: Uses current working directory without symlink-attack protection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10374.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2016-1238","severity":"moderate","public_date":"2016-07-25T00:00:00Z","advisories":[],"bugzilla":"1355695","bugzilla_description":"CVE-2016-1238 perl: loading of modules from current directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1238.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2016-6185","severity":"moderate","public_date":"2016-06-30T00:00:00Z","advisories":[],"bugzilla":"1354386","bugzilla_description":"CVE-2016-6185 perl: XSLoader loads relative paths not included in @INC","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6185.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2016-2381","severity":"moderate","public_date":"2016-03-01T00:00:00Z","advisories":[],"bugzilla":"1309214","bugzilla_description":"CVE-2016-2381 perl: ambiguous environment variables handling","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2381.json"},{"CVE":"CVE-2015-8607","severity":"moderate","public_date":"2016-01-11T00:00:00Z","advisories":[],"bugzilla":"1293272","bugzilla_description":"CVE-2015-8607 perl-PathTools: Taint propagation flaw in canonpath()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8607.json"},{"CVE":"CVE-2015-8608","severity":"moderate","public_date":"2016-01-11T00:00:00Z","advisories":[],"bugzilla":"1857318","bugzilla_description":"CVE-2015-8608 perl: out-of-bounds read and buffer overflow in functions VDir::MapPathA and VDir::MapPathW via a crafted drive letter or a pInName argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-121|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2015-8949","severity":"low","public_date":"2015-11-14T00:00:00Z","advisories":[],"bugzilla":"1360279","bugzilla_description":"CVE-2015-8949 perl-DBD-MySQL: Use after free when my_login fails","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8949.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-7686","severity":"moderate","public_date":"2015-09-27T00:00:00Z","advisories":[],"bugzilla":"1268777","bugzilla_description":"CVE-2015-7686 perl-Email-Address: denial of service when parsing crafted email address list","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7686.json"},{"CVE":"CVE-2015-8978","severity":"moderate","public_date":"2015-07-21T00:00:00Z","advisories":[],"bugzilla":"1397731","bugzilla_description":"CVE-2015-8978 perl-SOAP-Lite: XML exponential entity expansion denial-of-service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8978.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-3451","severity":"low","public_date":"2015-04-23T00:00:00Z","advisories":[],"bugzilla":"1216112","bugzilla_description":"CVE-2015-3451 perl-XML-LibXML: \"expand_entities\" option was not preserved under some circumstances","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3451.json"},{"CVE":"CVE-2015-3406","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209911","bugzilla_description":"CVE-2015-3406 perl-Module-Signature: unsigned files interpreted as signed in some circumstances","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3406.json"},{"CVE":"CVE-2015-3407","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209915","bugzilla_description":"CVE-2015-3407 perl-Module-Signature: arbitrary code execution during test phase","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3407.json"},{"CVE":"CVE-2015-3408","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209917","bugzilla_description":"CVE-2015-3408 perl-Module-Signature: arbitrary code execution when verifying module signatures","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3408.json"},{"CVE":"CVE-2015-3409","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209918","bugzilla_description":"CVE-2015-3409 perl-Module-Signature: arbitrary modules loading in some circumstances","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3409.json"},{"CVE":"CVE-2013-7422","severity":"low","public_date":"2015-01-23T00:00:00Z","advisories":[],"bugzilla":"1187149","bugzilla_description":"CVE-2013-7422 perl: segmentation fault in S_regmatch on negative backreference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7422.json"},{"CVE":"CVE-2015-8853","severity":"moderate","public_date":"2015-01-07T00:00:00Z","advisories":[],"bugzilla":"1329106","bugzilla_description":"CVE-2015-8853 perl: regexp matching hangs indefinitely on illegal UTF-8 input","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8853.json"},{"CVE":"CVE-2014-10401","severity":"moderate","public_date":"2014-10-16T00:00:00Z","advisories":[],"bugzilla":"1877444","bugzilla_description":"CVE-2014-10401 perl-dbi: DBD::File drivers open files from folders other than specifically passed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-10401.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2013-7490","severity":"moderate","public_date":"2014-09-21T00:00:00Z","advisories":[],"bugzilla":"1877427","bugzilla_description":"CVE-2013-7490 perl-dbi: Risk of memory corruption with many arguments in DBI method dispatch","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7490.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2014-4330","severity":"low","public_date":"2014-09-18T00:00:00Z","advisories":[],"bugzilla":"1139700","bugzilla_description":"CVE-2014-4330 perl-Data-Dumper: deep recursion stack overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4330.json"},{"CVE":"CVE-2014-9906","severity":"low","public_date":"2014-08-01T00:00:00Z","advisories":[],"bugzilla":"1361073","bugzilla_description":"CVE-2014-9906 perl-DBD-MySQL: Use after free in mysql_dr_error","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2014-0477","severity":"low","public_date":"2014-06-18T00:00:00Z","advisories":[],"bugzilla":"1110723","bugzilla_description":"CVE-2014-0477 perl-Email-Address: Denial-of-Service in Email::Address::parse","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0477.json"},{"CVE":"CVE-2014-3230","severity":"moderate","public_date":"2014-05-01T00:00:00Z","advisories":[],"bugzilla":"1094440","bugzilla_description":"CVE-2014-3230 perl-libwww-perl: incorrect handling of SSL certificate verification","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3230.json"},{"CVE":"CVE-2014-2277","severity":"low","public_date":"2014-03-03T00:00:00Z","advisories":[],"bugzilla":"1074720","bugzilla_description":"CVE-2014-2277 perltidy: insecure temporary file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2277.json"},{"CVE":"CVE-2014-1875","severity":"low","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1062424","bugzilla_description":"CVE-2014-1875 perl-Capture-Tiny: insecure temporary file usage","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-732)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1875.json"},{"CVE":"CVE-2013-7135","severity":"low","public_date":"2013-12-15T00:00:00Z","advisories":[],"bugzilla":"1043872","bugzilla_description":"CVE-2013-7135 perl-Proc-Daemon: writes pidfile with mode 666","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7135.json"},{"CVE":"CVE-2013-7284","severity":"moderate","public_date":"2013-11-14T00:00:00Z","advisories":[],"bugzilla":"1051108","bugzilla_description":"CVE-2013-7284 perl-PlRPC: pre-auth remote code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7284.json"},{"CVE":"CVE-2013-7488","severity":"moderate","public_date":"2013-10-08T00:00:00Z","advisories":[],"bugzilla":"1821879","bugzilla_description":"CVE-2013-7488 perl-Convert-ASN1: allows remote attackers to cause an infinite loop via unexpected input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7488.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2013-1437","severity":"low","public_date":"2013-08-21T00:00:00Z","advisories":[],"bugzilla":"996281","bugzilla_description":"CVE-2013-1437 perl-Module-Metadata: incorrectly documents that it does not execute unsafe code","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1437.json"},{"CVE":"CVE-2013-7491","severity":"low","public_date":"2013-06-24T00:00:00Z","advisories":[],"bugzilla":"1877447","bugzilla_description":"CVE-2013-7491 perl-dbi: Stack corruption on callbacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7491.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2013-1667","severity":"moderate","public_date":"2013-03-04T00:00:00Z","advisories":["RHSA-2013:0685"],"bugzilla":"912276","bugzilla_description":"CVE-2013-1667 perl: DoS in rehashing code","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["perl-4:5.8.8-40.el5_9","perl-4:5.10.1-130.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1667.json"},{"CVE":"CVE-2012-6329","severity":"moderate","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0685"],"bugzilla":"884354","bugzilla_description":"CVE-2012-6329 perl: possible arbitrary code execution via Locale::Maketext","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-4:5.8.8-40.el5_9","perl-4:5.10.1-130.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6329.json"},{"CVE":"CVE-2012-5526","severity":"moderate","public_date":"2012-11-12T00:00:00Z","advisories":["RHSA-2013:0685"],"bugzilla":"877015","bugzilla_description":"CVE-2012-5526 perl-CGI: Newline injection due to improper CRLF escaping in Set-Cookie and P3P headers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["perl-4:5.8.8-40.el5_9","perl-4:5.10.1-130.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5526.json"},{"CVE":"CVE-2012-5195","severity":"moderate","public_date":"2012-10-10T00:00:00Z","advisories":["RHSA-2013:0685"],"bugzilla":"862413","bugzilla_description":"CVE-2012-5195 perl: heap buffer overrun flaw may lead to arbitrary code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-4:5.8.8-40.el5_9","perl-4:5.10.1-130.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5195.json"},{"CVE":"CVE-2012-2451","severity":"low","public_date":"2012-05-02T00:00:00Z","advisories":[],"bugzilla":"818386","bugzilla_description":"CVE-2012-2451 perl-Config-IniFiles: insecure temporary file usage","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2451.json"},{"CVE":"CVE-2012-1151","severity":"moderate","public_date":"2012-02-27T00:00:00Z","advisories":["RHSA-2012:1116"],"bugzilla":"801733","bugzilla_description":"CVE-2012-1151 perl-DBD-Pg: Format string flaws by turning db notices into Perl warnings and by preparing DBD statement","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-DBD-Pg-0:1.49-4.el5_8","perl-DBD-Pg-0:2.15.1-4.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1151.json"},{"CVE":"CVE-2011-2767","severity":"important","public_date":"2011-10-03T00:00:00Z","advisories":["RHSA-2018:2826","RHSA-2018:2737","RHSA-2018:2825"],"bugzilla":"1623265","bugzilla_description":"CVE-2011-2767 mod_perl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["mod_perl-0:2.0.4-12.el6_10","rh-perl524-mod_perl-0:2.0.9-10.el7","rh-perl524-mod_perl-0:2.0.9-10.el6","rh-perl526-mod_perl-0:2.0.10-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2767.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2011-3597","severity":"moderate","public_date":"2011-10-02T00:00:00Z","advisories":["RHSA-2011:1797","RHSA-2011:1424"],"bugzilla":"743010","bugzilla_description":"CVE-2011-3597 Perl Digest improper control of generation of code","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-4:5.8.8-32.el5_7.6","perl-3:5.8.5-57.el4","perl-4:5.10.1-119.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3597.json"},{"CVE":"CVE-2011-2728","severity":null,"public_date":"2011-09-26T00:00:00Z","advisories":[],"bugzilla":"742236","bugzilla_description":"CVE-2011-2728 perl: File::Glob bsd_glob() crash with certain glob flags","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2728.json"},{"CVE":"CVE-2011-2939","severity":"moderate","public_date":"2011-08-09T00:00:00Z","advisories":["RHSA-2011:1424"],"bugzilla":"731246","bugzilla_description":"CVE-2011-2939 Perl decode_xs heap-based buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["perl-4:5.10.1-119.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2939.json"},{"CVE":"CVE-2011-4116","severity":"low","public_date":"2011-06-27T00:00:00Z","advisories":[],"bugzilla":"753970","bugzilla_description":"CVE-2011-4116 perl: File::Temp insecure temporary file handling","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-283","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4116.json"},{"CVE":"CVE-2011-0761","severity":"low","public_date":"2011-05-03T00:00:00Z","advisories":[],"bugzilla":"704994","bugzilla_description":"CVE-2011-0761 perl: NULL pointer dereference via crafted SOCKET, DIRHANDLE or FILEHANDLE value","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0761.json"},{"CVE":"CVE-2011-1487","severity":"low","public_date":"2011-03-30T00:00:00Z","advisories":["RHSA-2011:0558"],"bugzilla":"692898","bugzilla_description":"CVE-2011-1487 perl: lc(), uc() routines are laundering tainted data","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["perl-4:5.10.1-119.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1487.json"},{"CVE":"CVE-2011-0633","severity":"moderate","public_date":"2011-03-08T00:00:00Z","advisories":[],"bugzilla":"705044","bugzilla_description":"CVE-2011-0633 perl-libwww-perl: no hostname check against SSL certificate name by default","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0633.json"},{"CVE":"CVE-2010-4334","severity":"low","public_date":"2010-12-06T00:00:00Z","advisories":[],"bugzilla":"660847","bugzilla_description":"CVE-2010-4334 perl-IO-Socket-SSL: ignores user request for peer verification","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4334.json"},{"CVE":"CVE-2010-2761","severity":"moderate","public_date":"2010-11-10T00:00:00Z","advisories":["RHSA-2011:1797","RHSA-2011:0558"],"bugzilla":"658976","bugzilla_description":"perl-CGI, perl-CGI-Simple: CVE-2010-2761 - hardcoded MIME boundary value for multipart content, CVE-2010-4410 - CRLF injection allowing HTTP response splitting","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["perl-4:5.8.8-32.el5_7.6","perl-3:5.8.5-57.el4","perl-4:5.10.1-119.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2761.json"},{"CVE":"CVE-2010-4410","severity":"moderate","public_date":"2010-11-10T00:00:00Z","advisories":["RHSA-2011:1797","RHSA-2011:0558"],"bugzilla":"658976","bugzilla_description":"perl-CGI, perl-CGI-Simple: CVE-2010-2761 - hardcoded MIME boundary value for multipart content, CVE-2010-4410 - CRLF injection allowing HTTP response splitting","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["perl-4:5.8.8-32.el5_7.6","perl-3:5.8.5-57.el4","perl-4:5.10.1-119.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4410.json"},{"CVE":"CVE-2010-4777","severity":"moderate","public_date":"2010-07-16T00:00:00Z","advisories":[],"bugzilla":"694166","bugzilla_description":"CVE-2010-4777 perl: assertion failure with certain regular expressions","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4777.json"},{"CVE":"CVE-2010-1168","severity":"moderate","public_date":"2010-05-20T00:00:00Z","advisories":["RHSA-2010:0458","RHSA-2010:0457"],"bugzilla":"576508","bugzilla_description":"CVE-2010-1168 perl Safe: Intended restriction bypass via object references","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["perl-3:5.8.5-53.el4","perl-4:5.8.8-32.el5_5.1","perl-2:5.8.0-101.EL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1168.json"},{"CVE":"CVE-2010-1447","severity":"moderate","public_date":"2010-05-17T00:00:00Z","advisories":["RHSA-2010:0458","RHSA-2010:0457"],"bugzilla":"588269","bugzilla_description":"CVE-2010-1447 perl: Safe restriction bypass when reference to subroutine in compartment is called from outside","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-3:5.8.5-53.el4","perl-4:5.8.8-32.el5_5.1","perl-2:5.8.0-101.EL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1447.json"},{"CVE":"CVE-2010-2253","severity":"low","public_date":"2010-05-17T00:00:00Z","advisories":[],"bugzilla":"602800","bugzilla_description":"CVE-2010-2253 perl-libwww-perl: multiple HTTP client download filename vulnerability [OCERT 2010-001]","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2253.json"},{"CVE":"CVE-2010-1974","severity":null,"public_date":"2010-05-08T00:00:00Z","advisories":[],"bugzilla":"593857","bugzilla_description":"CVE-2010-1974 perl: multiple unspecified vulnerabilities in Safe","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1974.json"},{"CVE":"CVE-2009-0663","severity":"moderate","public_date":"2009-04-28T00:00:00Z","advisories":["RHSA-2009:0479","RHSA-2009:1067"],"bugzilla":"497367","bugzilla_description":"CVE-2009-0663 perl-DBD-Pg: pg_getline buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-DBD-Pg-0:1.49-2.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0663.json"},{"CVE":"CVE-2009-1341","severity":"moderate","public_date":"2009-04-28T00:00:00Z","advisories":["RHSA-2009:0479","RHSA-2009:1067"],"bugzilla":"497503","bugzilla_description":"CVE-2009-1341 perl-DBD-Pg: dequote_bytea memory leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/AU:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["perl-DBD-Pg-0:1.49-2.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1341.json"},{"CVE":"CVE-2008-5302","severity":"low","public_date":"2008-11-19T00:00:00Z","advisories":["RHSA-2010:0458"],"bugzilla":"473450","bugzilla_description":"CVE-2008-5302 perl: File::Path rmtree race condition (CVE-2005-0448) reintroduced after upstream rebase to 5.8.8-1","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-4:5.8.8-32.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5302.json"},{"CVE":"CVE-2008-5303","severity":"low","public_date":"2008-11-19T00:00:00Z","advisories":["RHSA-2010:0458"],"bugzilla":"474217","bugzilla_description":"CVE-2008-5303 symlink perl: File::Path rmtree race condition (CVE-2004-0452) reintroduced after upstream rebase to 5.8.8-1","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-4:5.8.8-32.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5303.json"},{"CVE":"CVE-2008-1927","severity":"important","public_date":"2007-12-04T00:00:00Z","advisories":["RHSA-2008:0522","RHSA-2008:0532","RHSA-2010:0602"],"bugzilla":"443928","bugzilla_description":"CVE-2008-1927 perl: heap corruption by regular expressions with utf8 characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-4:5.8.8-10.el5_2.3","perl-2:5.8.0-98.EL3","perl-3:5.8.5-36.el4_6.3","perl-4:5.8.8-6.el4s1_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1927.json"},{"CVE":"CVE-2007-5116","severity":"important","public_date":"2007-11-05T00:00:00Z","advisories":["RHSA-2007:1011","RHSA-2010:0602","RHSA-2007:0966"],"bugzilla":"323571","bugzilla_description":"CVE-2007-5116 perl regular expression UTF parsing errors","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-4:5.8.8-10.el5_0.2","perl-4:5.8.8-5.el4s1_2","perl-3:5.8.5-36.el4_5.2","perl-2:5.8.0-97.EL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5116.json"},{"CVE":"CVE-2007-4829","severity":"moderate","public_date":"2007-08-24T00:00:00Z","advisories":["RHSA-2010:0505"],"bugzilla":"295021","bugzilla_description":"CVE-2007-4829 perl-Archive-Tar directory traversal flaws","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-Archive-Tar-1:1.39.1-1.el5_5.1","perl-Archive-Tar-0:1.39.1-1.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4829.json"},{"CVE":"CVE-2007-1349","severity":"moderate","public_date":"2007-03-22T00:00:00Z","advisories":["RHSA-2007:0395","RHSA-2007:0396","RHSA-2008:0630","RHSA-2010:0602","RHSA-2008:0263","RHSA-2007:0486","RHSA-2008:0261","RHSA-2008:0627","RHSA-2008:0524","RHSA-2008:0523"],"bugzilla":"240423","bugzilla_description":"CVE-2007-1349 mod_perl PerlRun denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mod_perl-0:2.0.3-1.el4s1.3","mod_perl-0:2.0.2-12.el4","mod_perl-0:1.26-8.el2","mod_perl-0:1.99_16-4.5","mod_perl-0:1.99_09-12.ent","mod_perl-0:2.0.2-6.3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1349.json"},{"CVE":"CVE-2007-3377","severity":"moderate","public_date":"2006-12-22T00:00:00Z","advisories":["RHSA-2007:0675","RHSA-2007:0674"],"bugzilla":"245466","bugzilla_description":"CVE-2007-3377 perl-Net-DNS security issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-Net-DNS-0:0.48-2.el4","perl-Net-DNS-0:0.31-4.el3","perl-Net-DNS-0:0.59-3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3377.json"},{"CVE":"CVE-2007-3409","severity":"moderate","public_date":"2006-12-22T00:00:00Z","advisories":["RHSA-2007:0674"],"bugzilla":"245804","bugzilla_description":"CVE-2007-3409 Perl Net::DNS denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-Net-DNS-0:0.31-4.el3","perl-Net-DNS-0:0.59-3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3409.json"},{"CVE":"CVE-2006-3813","severity":"important","public_date":"2006-08-10T00:00:00Z","advisories":["RHSA-2006:0605"],"bugzilla":"1618172","bugzilla_description":"CVE-2006-3813 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-3:5.8.5-36.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3813.json"},{"CVE":"CVE-2005-3962","severity":"moderate","public_date":"2005-12-01T00:00:00Z","advisories":["RHSA-2005:881","RHSA-2005:880"],"bugzilla":"1617848","bugzilla_description":"CVE-2005-3962 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-2:5.8.0-90.4","perl-3:5.8.5-24.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3962.json"},{"CVE":"CVE-2005-0448","severity":"low","public_date":"2005-03-09T00:00:00Z","advisories":["RHSA-2005:674","RHSA-2005:881"],"bugzilla":"1617524","bugzilla_description":"CVE-2005-0448 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-2:5.8.0-90.4","perl-3:5.8.5-16.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0448.json"},{"CVE":"CVE-2005-0155","severity":"moderate","public_date":"2005-02-01T00:00:00Z","advisories":["RHSA-2005:105","RHSA-2005:103"],"bugzilla":"1617476","bugzilla_description":"CVE-2005-0155 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-2:5.8.0-89.10","perl-3:5.8.5-12.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0155.json"},{"CVE":"CVE-2005-0156","severity":"important","public_date":"2005-02-01T00:00:00Z","advisories":["RHSA-2005:105","RHSA-2005:103"],"bugzilla":"1617477","bugzilla_description":"CVE-2005-0156 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-2:5.8.0-89.10","perl-3:5.8.5-12.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0156.json"},{"CVE":"CVE-2005-0077","severity":"low","public_date":"2005-01-25T00:00:00Z","advisories":["RHSA-2005:069","RHSA-2005:072"],"bugzilla":"1617444","bugzilla_description":"CVE-2005-0077 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-DBI-0:1.40-8","perl-DBI-0:1.32-9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0077.json"},{"CVE":"CVE-2004-0452","severity":"low","public_date":"2004-12-23T00:00:00Z","advisories":["RHSA-2005:105","RHSA-2005:103"],"bugzilla":"1618363","bugzilla_description":"CVE-2004-0452 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-2:5.8.0-89.10","perl-3:5.8.5-12.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0452.json"},{"CVE":"CVE-2004-0976","severity":"low","public_date":"2004-09-30T00:00:00Z","advisories":["RHSA-2005:881"],"bugzilla":"1617339","bugzilla_description":"CVE-2004-0976 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-2:5.8.0-90.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0976.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perltidy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perltidy_security_api_results.json
new file mode 100644
index 0000000..9e83055
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/perltidy_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10374","severity":"low","public_date":"2016-08-13T00:00:00Z","advisories":[],"bugzilla":"1452050","bugzilla_description":"CVE-2016-10374 perltidy: Uses current working directory without symlink-attack protection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10374.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2014-2277","severity":"low","public_date":"2014-03-03T00:00:00Z","advisories":[],"bugzilla":"1074720","bugzilla_description":"CVE-2014-2277 perltidy: insecure temporary file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2277.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pexpect_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pexpect_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pexpect_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/phonon-backend-gstreamer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/phonon-backend-gstreamer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/phonon-backend-gstreamer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/phonon-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/phonon-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/phonon-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/phonon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/phonon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/phonon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-gd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-gd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-gd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-ldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-ldap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-ldap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-odbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-odbc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-odbc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pdo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pdo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pdo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pear_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pear_security_api_results.json
new file mode 100644
index 0000000..a72ff22
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pear_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1000888","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1669615","bugzilla_description":"CVE-2018-1000888 php-pear: Unsafe deserialization of data in Archive_Tar class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000888.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-5630","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":[],"bugzilla":"1418771","bugzilla_description":"CVE-2017-5630 php-pear: File overwrite by malicious server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5630.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.4"},{"CVE":"CVE-2014-5459","severity":"moderate","public_date":"2014-08-25T00:00:00Z","advisories":[],"bugzilla":"1133753","bugzilla_description":"CVE-2014-5459 php-pear: insecure temporary file use for cache data","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5459.json"},{"CVE":"CVE-2011-1072","severity":"low","public_date":"2010-11-14T00:00:00Z","advisories":["RHSA-2011:1741"],"bugzilla":"681982","bugzilla_description":"CVE-2011-1072 CVE-2011-1144 php-pear: symlink vulnerability in PEAR installer","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-pear-1:1.9.4-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1072.json"},{"CVE":"CVE-2011-1144","severity":"low","public_date":"2010-11-14T00:00:00Z","advisories":[],"bugzilla":"681982","bugzilla_description":"CVE-2011-1072 CVE-2011-1144 php-pear: symlink vulnerability in PEAR installer","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1144.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pecl-memcache_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pecl-memcache_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pecl-memcache_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pgsql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pgsql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-pgsql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-process_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-process_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-process_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-recode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-recode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-recode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-soap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-soap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-soap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-xml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-xml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-xml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-xmlrpc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-xmlrpc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php-xmlrpc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php_security_api_results.json
new file mode 100644
index 0000000..745b8d9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/php_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-26159","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1884111","bugzilla_description":"CVE-2020-26159 oniguruma: Buffer overflow in concat_opt_exact_str could result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26159.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2020-7068","severity":"low","public_date":"2020-08-06T00:00:00Z","advisories":[],"bugzilla":"1868109","bugzilla_description":"CVE-2020-7068 php: Use of freed hash key in the phar_parse_zipfile function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7068.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2020-7070","severity":"low","public_date":"2020-06-14T00:00:00Z","advisories":[],"bugzilla":"1885738","bugzilla_description":"CVE-2020-7070 php: PHP parses encoded cookie names so malicious `__Host-` cookies can be sent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7070.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-7069","severity":"moderate","public_date":"2020-05-15T00:00:00Z","advisories":[],"bugzilla":"1885735","bugzilla_description":"CVE-2020-7069 php: wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7069.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11048","severity":"moderate","public_date":"2020-05-14T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1837842","bugzilla_description":"CVE-2019-11048 php: Integer wraparounds when receiving multipart forms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11048.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7067","severity":"moderate","public_date":"2020-04-10T00:00:00Z","advisories":[],"bugzilla":"1827653","bugzilla_description":"CVE-2020-7067 php: out-of-bounds read when using a malformed url-encoded string","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7067.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-7064","severity":"moderate","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1820601","bugzilla_description":"CVE-2020-7064 php: Information disclosure in exif_read_data() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7064.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-7066","severity":"low","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1820604","bugzilla_description":"CVE-2020-7066 php: Information disclosure in function get_headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7066.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-7065","severity":"moderate","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1820627","bugzilla_description":"CVE-2020-7065 php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-787|CWE-121)","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7065.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-7062","severity":"moderate","public_date":"2020-02-04T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1808532","bugzilla_description":"CVE-2020-7062 php: NULL pointer dereference in PHP session upload progress","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7062.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7061","severity":"low","public_date":"2020-01-26T00:00:00Z","advisories":[],"bugzilla":"1808529","bugzilla_description":"CVE-2020-7061 php: heap-based buffer overflow in phar_extract_file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7061.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2020-7059","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1797776","bugzilla_description":"CVE-2020-7059 php: Out of bounds read in php_strip_tags_ex","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7059.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-7060","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1797779","bugzilla_description":"CVE-2020-7060 php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7060.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-7063","severity":"moderate","public_date":"2020-01-08T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1808536","bugzilla_description":"CVE-2020-7063 php: Files added to tar with Phar::buildFromIterator have all-access permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7063.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-11047","severity":"moderate","public_date":"2019-12-22T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1786570","bugzilla_description":"CVE-2019-11047 php: Information disclosure in exif_read_data()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11047.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-11045","severity":"moderate","public_date":"2019-12-22T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1786572","bugzilla_description":"CVE-2019-11045 php: DirectoryIterator class accepts filenames with embedded \\0 byte and treats them as terminating at that byte","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-170","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11045.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-14553","severity":"low","public_date":"2019-12-20T00:00:00Z","advisories":[],"bugzilla":"1600727","bugzilla_description":"CVE-2018-14553 gd: NULL pointer dereference in gdImageClone","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14553.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-11046","severity":"low","public_date":"2019-12-16T00:00:00Z","advisories":[],"bugzilla":"1786567","bugzilla_description":"CVE-2019-11046 php: OOB read  in bc_shift_addsub","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11046.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-11049","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1788586","bugzilla_description":"CVE-2019-11049 php: double free when supplying custom headers to mail function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11049.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-11044","severity":null,"public_date":"2019-11-23T00:00:00Z","advisories":[],"bugzilla":"1789069","bugzilla_description":"CVE-2019-11044 php: link function accepts filenames with embedded null byte and treats them as terminating at that byte on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-170","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11044.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-19012","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":[],"bugzilla":"1802051","bugzilla_description":"CVE-2019-19012 oniguruma: integer overflow in search_in_range function in regexec.c leads to out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19012.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11050","severity":"low","public_date":"2019-11-07T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1788258","bugzilla_description":"CVE-2019-11050 php: Out of bounds read when parsing EXIF information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11050.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-19203","severity":"moderate","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1802061","bugzilla_description":"CVE-2019-19203 oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19204","severity":"moderate","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1802068","bugzilla_description":"CVE-2019-19204 oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19204.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11043","severity":"critical","public_date":"2019-10-24T00:00:00Z","advisories":["RHSA-2020:0322","RHSA-2019:3287","RHSA-2019:3299","RHSA-2019:3300","RHSA-2020:2835","RHSA-2019:3286","RHSA-2019:3735","RHSA-2019:3724","RHSA-2019:3736"],"bugzilla":"1766378","bugzilla_description":"CVE-2019-11043 php: underflow in env_path_info in fpm_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-787","affected_packages":["php-0:5.4.16-46.1.el7_6","rh-php70-php-0:7.0.27-2.el7","rh-php72-php-0:7.2.24-1.el7","rh-php70-php-0:7.0.27-2.el6","php:7.2-8010020191030112723.dcfb48bd","php-0:5.4.16-46.1.el7_7","php-0:5.3.3-50.el6_10","php:7.3-8010020191030161321.dcfb48bd","rh-php71-php-0:7.1.30-2.el7","php:7.2-8000020191113103901.5d58a046"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11043.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-18218","severity":"moderate","public_date":"2019-08-26T00:00:00Z","advisories":[],"bugzilla":"1765272","bugzilla_description":"CVE-2019-18218 file: heap-based buffer overflow in cdf_read_property_info in cdf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18218.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-19246","severity":"low","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1777537","bugzilla_description":"CVE-2019-19246 oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2019-11041","severity":"low","public_date":"2019-08-09T00:00:00Z","advisories":["RHSA-2020:3662","RHSA-2019:3299","RHSA-2020:1624"],"bugzilla":"1739459","bugzilla_description":"CVE-2019-11041 php: Heap buffer over-read in exif_scan_thumbnail()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891","php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11041.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-11042","severity":"low","public_date":"2019-08-09T00:00:00Z","advisories":["RHSA-2020:3662","RHSA-2019:3299","RHSA-2020:1624"],"bugzilla":"1739465","bugzilla_description":"CVE-2019-11042 php: Heap buffer over-read in exif_process_user_comment()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891","php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-7189","severity":"moderate","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1734756","bugzilla_description":"CVE-2017-7189 php: misparsing fsockopen calls in main/streams/xp_socket.c leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7189.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-16162","severity":"moderate","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1781304","bugzilla_description":"CVE-2019-16162 onigmo: out-of-bounds read in next_state_val() in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16162.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16163","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1768997","bugzilla_description":"CVE-2019-16163 oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16163.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-16161","severity":"low","public_date":"2019-07-28T00:00:00Z","advisories":[],"bugzilla":"1769042","bugzilla_description":"CVE-2019-16161 onigmo: NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16161.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13225","severity":"moderate","public_date":"2019-06-27T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1728965","bugzilla_description":"CVE-2019-13225 oniguruma: NULL pointer dereference in match_at() in regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-13224","severity":"moderate","public_date":"2019-06-27T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1728970","bugzilla_description":"CVE-2019-13224 oniguruma: Use-after-free in onig_new_deluxe() in regext.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-11038","severity":"low","public_date":"2019-06-18T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2019:2519"],"bugzilla":"1724149","bugzilla_description":"CVE-2019-11038 gd: Information disclosure in gdImageCreateFromXbm()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11038.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-11039","severity":"moderate","public_date":"2019-06-18T00:00:00Z","advisories":["RHSA-2020:3662","RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1724152","bugzilla_description":"CVE-2019-11039 php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891","php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11039.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-11040","severity":"moderate","public_date":"2019-06-18T00:00:00Z","advisories":["RHSA-2020:3662","RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1724154","bugzilla_description":"CVE-2019-11040 php: Buffer over-read in exif_read_data()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891","php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-11037","severity":"moderate","public_date":"2019-05-04T00:00:00Z","advisories":[],"bugzilla":"1708570","bugzilla_description":"CVE-2019-11037 php-imagick: out-of-bounds write to memory in ImagickKernel::fromMatrix() leading to possible crash and DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11036","severity":"low","public_date":"2019-05-02T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1707299","bugzilla_description":"CVE-2019-11036 php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11036.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2019-11035","severity":"low","public_date":"2019-04-02T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1702246","bugzilla_description":"CVE-2019-11035 php: Heap buffer overflow in function exif_iif_add_value()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11035.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11034","severity":"low","public_date":"2019-03-16T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1702256","bugzilla_description":"CVE-2019-11034 php: Heap buffer overflow in function exif_process_IFD_TAG()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11034.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9639","severity":"moderate","public_date":"2019-02-23T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1688934","bugzilla_description":"CVE-2019-9639 php: Uninitialized read in exif_process_IFD_in_MAKERNOTE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9024","severity":"low","public_date":"2019-02-22T00:00:00Z","advisories":["RHSA-2020:1112","RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1685404","bugzilla_description":"CVE-2019-9024 php: Out-of-bounds read in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php-0:5.4.16-48.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9024.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-9025","severity":"moderate","public_date":"2019-02-22T00:00:00Z","advisories":[],"bugzilla":"1685408","bugzilla_description":"CVE-2019-9025 php: Negative size parameter in mb_split","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9025.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-8905","severity":"low","public_date":"2019-02-18T00:00:00Z","advisories":[],"bugzilla":"1679181","bugzilla_description":"CVE-2019-8905 file: stack-based buffer over-read in do_core_note in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8905.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-8904","severity":"low","public_date":"2019-02-18T00:00:00Z","advisories":[],"bugzilla":"1679188","bugzilla_description":"CVE-2019-8904 file: stack-based buffer over-read in do_bid_note in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8904.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-9637","severity":"moderate","public_date":"2019-02-18T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1688897","bugzilla_description":"CVE-2019-9637 php: File rename across filesystems may allow unwanted access during processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-9675","severity":null,"public_date":"2019-02-08T00:00:00Z","advisories":[],"bugzilla":"1688947","bugzilla_description":"CVE-2019-9675 php: buffer overflow in ext/phar/tar.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9675.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-9638","severity":"moderate","public_date":"2019-02-04T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1688922","bugzilla_description":"CVE-2019-9638 php: Uninitialized read in exif_process_IFD_in_MAKERNOTE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9640","severity":"moderate","public_date":"2019-01-29T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1688939","bugzilla_description":"CVE-2019-9640 php: Invalid read in exif_process_SOFn()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9640.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9641","severity":"moderate","public_date":"2019-01-23T00:00:00Z","advisories":[],"bugzilla":"1688943","bugzilla_description":"CVE-2019-9641 php: Uninitialized read in exif_process_IFD_in_TIFF","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-6978","severity":"low","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2722","RHSA-2020:3943"],"bugzilla":"1671390","bugzilla_description":"CVE-2019-6978 gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libwmf-0:0.2.8.4-44.el7","libwmf-0:0.2.9-8.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-8907","severity":"low","public_date":"2019-01-03T00:00:00Z","advisories":[],"bugzilla":"1679138","bugzilla_description":"CVE-2019-8907 file: do_core_note in readelf.c allows remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8907.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-8906","severity":"low","public_date":"2019-01-03T00:00:00Z","advisories":[],"bugzilla":"1679175","bugzilla_description":"CVE-2019-8906 file: out-of-bounds read in do_core_note in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8906.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-9023","severity":"low","public_date":"2018-12-29T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1685398","bugzilla_description":"CVE-2019-9023 php: Heap-based buffer over-read in mbstring regular expression functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-9022","severity":"low","public_date":"2018-12-29T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1685412","bugzilla_description":"CVE-2019-9022 php: memcpy with negative length via crafted DNS response","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2018-1000888","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1669615","bugzilla_description":"CVE-2018-1000888 php-pear: Unsafe deserialization of data in Archive_Tar class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000888.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-6977","severity":"moderate","public_date":"2018-12-09T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2019:2519"],"bugzilla":"1672207","bugzilla_description":"CVE-2019-6977 gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6977.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-9021","severity":"low","public_date":"2018-12-06T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1685132","bugzilla_description":"CVE-2019-9021 php: Heap-based buffer over-read in PHAR reading functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9021.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9020","severity":"moderate","public_date":"2018-12-05T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1685123","bugzilla_description":"CVE-2019-9020 php: Invalid memory access in function xmlrpc_decode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19396","severity":"low","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1652716","bugzilla_description":"CVE-2018-19396 php: Serializing or unserializing COM objects crashes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19396.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-19518","severity":"moderate","public_date":"2018-11-19T00:00:00Z","advisories":[],"bugzilla":"1654228","bugzilla_description":"CVE-2018-19518 php: imap_open() allows running arbitrary shell commands via mailbox parameter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-20783","severity":"low","public_date":"2018-11-12T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1680545","bugzilla_description":"CVE-2018-20783 php: Buffer over-read in PHAR reading functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-19935","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1660525","bugzilla_description":"CVE-2018-19935 php: NULL pointer dereference in ext/imap/php_imap.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19935.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-17082","severity":"moderate","public_date":"2018-09-13T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1629552","bugzilla_description":"CVE-2018-17082 php: Cross-site scripting (XSS) flaw in Apache2 component via body of 'Transfer-Encoding: chunked' request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17082.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-1000222","severity":"moderate","public_date":"2018-07-15T00:00:00Z","advisories":[],"bugzilla":"1621953","bugzilla_description":"CVE-2018-1000222 gd: Double free in src/gd_bump.c:gdImageBmpPtr() via crafted JPEG","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000222.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10360","severity":"low","public_date":"2018-06-09T00:00:00Z","advisories":["RHSA-2020:2521","RHBA-2020:1539","RHSA-2020:1022","RHSA-2020:2838","RHSA-2020:2768","RHBA-2020:1540"],"bugzilla":"1590000","bugzilla_description":"CVE-2018-10360 file: out-of-bounds read via a crafted ELF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","file-0:5.11-35.el7_6.1","file-0:5.11-35.el7_7.1","file-0:5.11-33.el7_4.1","file-0:5.11-36.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10360.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-14883","severity":"low","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1609637","bugzilla_description":"CVE-2018-14883 php: exif: integer overflow leading to out-of-bound buffer read in exif_thumbnail_extract()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14883.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14851","severity":"low","public_date":"2018-06-07T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1609642","bugzilla_description":"CVE-2018-14851 php: exif: Buffer over-read in exif_process_IFD_in_MAKERNOTE()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14851.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-12882","severity":"moderate","public_date":"2018-06-03T00:00:00Z","advisories":[],"bugzilla":"1595502","bugzilla_description":"CVE-2018-12882 php: Use-after-free reachable via the exif.c:exif_read_from_impl() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12882.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-10549","severity":"low","public_date":"2018-04-26T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1573797","bugzilla_description":"CVE-2018-10549 php: Out-of-bounds read in ext/exif/exif.c:exif_read_data() when reading crafted JPEG data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-10546","severity":"moderate","public_date":"2018-04-26T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1573802","bugzilla_description":"CVE-2018-10546 php: Infinite loop in ext/iconv/iconv.c when using stream filter with convert.incov on invalid sequence leads to denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10546.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10548","severity":"moderate","public_date":"2018-04-26T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1573805","bugzilla_description":"CVE-2018-10548 php: NULL pointer dereference due to mishandling of ldap_get_dn return value allows DoS via malicious LDAP server reply","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-10547","severity":"moderate","public_date":"2018-04-26T00:00:00Z","advisories":["RHSA-2020:1112","RHSA-2019:2519"],"bugzilla":"1573814","bugzilla_description":"CVE-2018-10547 php: Reflected XSS vulnerability on PHAR 403 and 404 error pages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["rh-php71-php-0:7.1.30-1.el7","php-0:5.4.16-48.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10547.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-7584","severity":"moderate","public_date":"2018-02-20T00:00:00Z","advisories":["RHSA-2020:1112","RHSA-2019:2519"],"bugzilla":"1551039","bugzilla_description":"CVE-2018-7584 php: Stack-based buffer under-read in php_stream_url_wrap_http_ex() in http_fopen_wrapper.c when parsing HTTP response","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7","php-0:5.4.16-48.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7584.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-10545","severity":"low","public_date":"2017-11-30T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1563858","bugzilla_description":"CVE-2018-10545 php: Dumpable FPM child processes allow bypassing opcache access controls","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10545.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-5711","severity":"low","public_date":"2017-11-25T00:00:00Z","advisories":["RHSA-2019:2519","RHSA-2018:1296"],"bugzilla":"1535246","bugzilla_description":"CVE-2018-5711 gd: Infinite loop in gdImageCreateFromGifCtx() in gd_gif_in.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5711.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-14884","severity":"moderate","public_date":"2017-11-17T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1612362","bugzilla_description":"CVE-2018-14884 php: Mishandled http_header_value in an atoi() call in http_fopen_wrapper.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14884.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16642","severity":"low","public_date":"2017-11-07T00:00:00Z","advisories":["RHSA-2019:2519","RHSA-2018:1296"],"bugzilla":"1512057","bugzilla_description":"CVE-2017-16642 php: Out-of-bound read in timelib_meridian()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16642.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-16231","severity":null,"public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1700392","bugzilla_description":"CVE-2017-16231 pcre: self-recursive call in match() in pcre_exec.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-1000249","severity":"important","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1488053","bugzilla_description":"CVE-2017-1000249 file: Stack-based buffer overflow in do_bid_note()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000249.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-6362","severity":"moderate","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1489842","bugzilla_description":"CVE-2017-6362 gd: Double free in the gdImagePngPtr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-12858","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1484514","bugzilla_description":"CVE-2017-12858 libzip: Double free in _zip_dirent_read function in zip_dirent.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12858.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11628","severity":"moderate","public_date":"2017-07-25T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1475522","bugzilla_description":"CVE-2017-11628 php: Stack based 1-byte buffer over-write in zend_ini_do_op() function Zend/zend_ini_parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11628.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-11362","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1475373","bugzilla_description":"CVE-2017-11362 php: Stack-based buffer over-read in msgfmt_parse_message function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11362.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-11164","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":[],"bugzilla":"1470107","bugzilla_description":"CVE-2017-11164 pcre: OP_KETRMAX feature in the match function in pcre_exec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7890","severity":"moderate","public_date":"2017-07-10T00:00:00Z","advisories":["RHSA-2018:0406","RHSA-2018:1296"],"bugzilla":"1473822","bugzilla_description":"CVE-2017-7890 php: Buffer over-read from unitialized data in gdImageCreateFromGifCtx function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-43.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7890.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-11145","severity":"low","public_date":"2017-06-27T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1471834","bugzilla_description":"CVE-2017-11145 php: wddx_deserialize() heap out-of-bound read via php_parse_date()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11145.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-5712","severity":"moderate","public_date":"2017-06-19T00:00:00Z","advisories":["RHSA-2020:1112","RHSA-2019:2519","RHSA-2018:1296"],"bugzilla":"1535251","bugzilla_description":"CVE-2018-5712 php: Reflected XSS on PHAR 404 page","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-48.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5712.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-11144","severity":"moderate","public_date":"2017-05-25T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1471827","bugzilla_description":"CVE-2017-11144 php: Incorrect return value check of OpenSSL sealing function leads to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11144.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9227","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466739","bugzilla_description":"CVE-2017-9227 oniguruma: Out-of-bounds stack read in mbc_enc_len() during regular expression searching","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9227.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9228","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466740","bugzilla_description":"CVE-2017-9228 oniguruma: Out-of-bounds heap write in bitset_set_range()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9228.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9229","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466746","bugzilla_description":"CVE-2017-9229 oniguruma: Invalid pointer dereference in left_adjust_char_head()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9229.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-9224","severity":"moderate","public_date":"2017-05-22T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466730","bugzilla_description":"CVE-2017-9224 oniguruma: Out-of-bounds stack read in match_at() during regular expression searching","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-9225","severity":"moderate","public_date":"2017-05-22T00:00:00Z","advisories":[],"bugzilla":"1466733","bugzilla_description":"CVE-2017-9225 oniguruma: Out-of-bounds stack write in onigenc_unicode_get_case_fold_codes_by_str() during regular expression compilation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9226","severity":"moderate","public_date":"2017-05-18T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466736","bugzilla_description":"CVE-2017-9226 oniguruma: Heap buffer overflow in next_state_val() during regular expression compilation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9226.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-9118","severity":"moderate","public_date":"2017-05-17T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1611890","bugzilla_description":"CVE-2017-9118 php: Out of bounds access in php_pcre.c:php_pcre_replace_impl()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-9119","severity":"moderate","public_date":"2017-05-15T00:00:00Z","advisories":[],"bugzilla":"1456749","bugzilla_description":"CVE-2017-9119 php: Segfault in i_zval_ptr_dtor()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9119.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-8923","severity":"moderate","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1451700","bugzilla_description":"CVE-2017-8923 php: Overflowing the length of string causes crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-9120","severity":"moderate","public_date":"2017-05-09T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1611898","bugzilla_description":"CVE-2017-9120 php: Integer overflow in mysqli_api.c:mysqli_real_escape_string()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9120.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-7272","severity":"low","public_date":"2017-03-27T00:00:00Z","advisories":[],"bugzilla":"1437837","bugzilla_description":"CVE-2017-7272 php: potential SSRF via fsockopen","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-7244","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437364","bugzilla_description":"CVE-2017-7244 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7245","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437367","bugzilla_description":"CVE-2017-7245 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7246","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437369","bugzilla_description":"CVE-2017-7246 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-8399","severity":"moderate","public_date":"2017-03-10T00:00:00Z","advisories":[],"bugzilla":"1449629","bugzilla_description":"CVE-2017-8399 pcre2: Stack-based buffer overflow in pcre2_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7186","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1434504","bugzilla_description":"CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-6441","severity":"low","public_date":"2017-02-22T00:00:00Z","advisories":[],"bugzilla":"1443487","bugzilla_description":"CVE-2017-6441 php: Null pointer dereference via crafted \"declare(ticks=\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6441.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11143","severity":"moderate","public_date":"2017-02-22T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1471824","bugzilla_description":"CVE-2017-11143 php: Incorrect WDDX deserialization of boolean parameters leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11143.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-12932","severity":"moderate","public_date":"2017-02-20T00:00:00Z","advisories":["RHSA-2019:2519","RHSA-2018:1296"],"bugzilla":"1484837","bugzilla_description":"CVE-2017-12932 php: Heap use after free in ext/standard/var_unserializer.re","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12932.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12933","severity":"low","public_date":"2017-02-16T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1484838","bugzilla_description":"CVE-2017-12933 php: buffer over-read in finish_nested_data function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-12934","severity":"moderate","public_date":"2017-02-15T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1484839","bugzilla_description":"CVE-2017-12934 php: heap use after free in ext/standard/var_unserializer.re","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12934.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-6004","severity":"moderate","public_date":"2017-02-14T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1425365","bugzilla_description":"CVE-2017-6004 pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5630","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":[],"bugzilla":"1418771","bugzilla_description":"CVE-2017-5630 php-pear: File overwrite by malicious server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5630.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.4"},{"CVE":"CVE-2016-10161","severity":"moderate","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1419010","bugzilla_description":"CVE-2016-10161 php: Out-of-bounds heap read on unserialize in finish_nested_data()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10162","severity":"moderate","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1419012","bugzilla_description":"CVE-2016-10162 php: Null pointer dereference when unserializing PHP object","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10162.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10158","severity":"moderate","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1419015","bugzilla_description":"CVE-2016-10158 php: Wrong calculation in exif_convert_any_to_int function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10160","severity":"moderate","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1419018","bugzilla_description":"CVE-2016-10160 php: Off-by-one error in phar_parse_pharfile when loading crafted phar archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10159","severity":"moderate","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1419020","bugzilla_description":"CVE-2016-10159 php: Integer overflow in phar_parse_pharfile","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5340","severity":"moderate","public_date":"2016-12-29T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1412631","bugzilla_description":"CVE-2017-5340 php: Use of uninitialized memory in unserialize()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5340.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-7479","severity":"moderate","public_date":"2016-12-27T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1412686","bugzilla_description":"CVE-2016-7479 php: Use-after-free vulnerability when resizing the 'properties' hash table of a serialized object","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7479.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-11142","severity":"low","public_date":"2016-12-23T00:00:00Z","advisories":[],"bugzilla":"1471820","bugzilla_description":"CVE-2017-11142 php: Denial-of-Service via injecting long form variables","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11142.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10168","severity":"moderate","public_date":"2016-12-17T00:00:00Z","advisories":["RHSA-2017:3221","RHSA-2018:1296"],"bugzilla":"1418986","bugzilla_description":"CVE-2016-10168 gd: Integer overflow in gd_io.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-43.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10168.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-11147","severity":"moderate","public_date":"2016-12-17T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1471842","bugzilla_description":"CVE-2017-11147 php: Out-of-bounds read in phar_parse_pharfile","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11147.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-9933","severity":"low","public_date":"2016-12-08T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1404723","bugzilla_description":"CVE-2016-9933 php, gd: Stack overflow in gdImageFillToBorder on truecolor images","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9933.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9935","severity":"moderate","public_date":"2016-12-08T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1404731","bugzilla_description":"CVE-2016-9935 php: Invalid read when wddx decodes empty boolean element","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9935.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2016-9936","severity":"moderate","public_date":"2016-12-08T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1404735","bugzilla_description":"CVE-2016-9936 php: Use After Free in unserialize()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9317","severity":"moderate","public_date":"2016-11-12T00:00:00Z","advisories":[],"bugzilla":"1417987","bugzilla_description":"CVE-2016-9317 gd: Missing check for oversized images in gdImageCreate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9317.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-6911","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":[],"bugzilla":"1388787","bugzilla_description":"CVE-2016-6911 gd, php: Missing check for OOB read in dynamicGetbuf()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6911.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-8670","severity":"moderate","public_date":"2016-10-10T00:00:00Z","advisories":[],"bugzilla":"1391068","bugzilla_description":"CVE-2016-8670 gd, php: Stack based buffer overflow in dynamicGetbuf","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8670.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-7480","severity":"moderate","public_date":"2016-10-06T00:00:00Z","advisories":[],"bugzilla":"1416499","bugzilla_description":"CVE-2016-7480 php: Use of uninitialized value in SplObjectStorag::unserialize","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7480.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-10397","severity":"moderate","public_date":"2016-09-28T00:00:00Z","advisories":[],"bugzilla":"1471811","bugzilla_description":"CVE-2016-10397 php: Incorrect handling of URI components in URL parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-228","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10397.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-9138","severity":"moderate","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1391012","bugzilla_description":"CVE-2016-9138 php: Use after free in unserialize() via DateInterval::__wakeup()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9138.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-9137","severity":"moderate","public_date":"2016-09-23T00:00:00Z","advisories":[],"bugzilla":"1391000","bugzilla_description":"CVE-2016-9137 php: Use after free in unserialize()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-7478","severity":"moderate","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1412245","bugzilla_description":"CVE-2016-7478 php: Unserialize Exception object can lead to infinite loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7478.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7418","severity":"moderate","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1377352","bugzilla_description":"CVE-2016-7418 php: Null pointer dereference in php_wddx_push_element","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7418.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7411","severity":"moderate","public_date":"2016-09-09T00:00:00Z","advisories":[],"bugzilla":"1377303","bugzilla_description":"CVE-2016-7411 php: Memory corruption when destructing deserialized object","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7411.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-7417","severity":"moderate","public_date":"2016-09-06T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1377344","bugzilla_description":"CVE-2016-7417 php: Missing type check when unserializing SplArray","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-252","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7417.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7416","severity":"moderate","public_date":"2016-09-03T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1377340","bugzilla_description":"CVE-2016-7416 php: Stack based buffer overflow in msgfmt_format_message","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7416.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-7124","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374697","bugzilla_description":"CVE-2016-7124 php: bypass __wakeup() in deserialization of an unexpected object","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7124.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-7125","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374698","bugzilla_description":"CVE-2016-7125 php: Session Data Injection Vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7125.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-7126","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374699","bugzilla_description":"CVE-2016-7126 php: select_colors write out-of-bounds","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7126.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7127","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374701","bugzilla_description":"CVE-2016-7127 php: imagegammacorrect allows arbitrary write access","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7127.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7128","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374704","bugzilla_description":"CVE-2016-7128 php: Memory Leakage In exif_process_IFD_in_TIFF","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7128.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-7129","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374705","bugzilla_description":"CVE-2016-7129 php: wddx_deserialize allows illegal memory access","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7129.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7130","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374707","bugzilla_description":"CVE-2016-7130 php: wddx_deserialize null dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7130.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7131","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374708","bugzilla_description":"CVE-2016-7131 php: wddx_deserialize null dereference with invalid xml","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7131.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7132","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374711","bugzilla_description":"CVE-2016-7132 php: wddx_deserialize null dereference in php_wddx_pop_element","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7132.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7133","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":[],"bugzilla":"1374712","bugzilla_description":"CVE-2016-7133 php: memory allocator fails to realloc small block to large one","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7133.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7134","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":[],"bugzilla":"1374714","bugzilla_description":"CVE-2016-7134 php: Heap overflow in curl_escape","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7134.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7568","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":[],"bugzilla":"1380450","bugzilla_description":"CVE-2016-7568 gd, php: Integer overflow in gdImageWebpCtx","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7568.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2016-7414","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1377336","bugzilla_description":"CVE-2016-7414 php: Out of bounds heap read when verifying signature of zip phar in phar_parse_zipfile","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7414.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7413","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1377314","bugzilla_description":"CVE-2016-7413 php: Use after free in wddx_deserialize","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7413.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6912","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":[],"bugzilla":"1417977","bugzilla_description":"CVE-2016-6912 gd, php: Double free in gdImageWebpPtr()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6912.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-10167","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2017:3221","RHSA-2018:1296"],"bugzilla":"1418984","bugzilla_description":"CVE-2016-10167 gd: DoS vulnerability in gdImageCreateFromGd2Ctx()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-43.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-6906","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":[],"bugzilla":"1435313","bugzilla_description":"CVE-2016-6906 gd: Out-of-bounds read in read_image_tga function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10166","severity":"moderate","public_date":"2016-08-06T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2019:2519"],"bugzilla":"1418983","bugzilla_description":"CVE-2016-10166 gd: Unsigned integer underflow _gdContributionsAlloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10166.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-6292","severity":"low","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359756","bugzilla_description":"CVE-2016-6292 php: Null pointer dereference in exif_process_user_comment","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6292.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-5385","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1609","RHSA-2016:1613","RHSA-2016:1610","RHSA-2016:1611","RHSA-2016:1612"],"bugzilla":"1353794","bugzilla_description":"CVE-2016-5385 PHP: sets environmental variable based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["php54-php-0:5.4.40-4.el7","php-0:5.3.3-48.el6_8","php-0:5.4.16-36.3.el7_2","php55-php-0:5.5.21-5.el7","rh-php56-php-0:5.6.5-9.el7","rh-php56-php-0:5.6.5-9.el6","php54-php-0:5.4.40-4.el6","php55-php-0:5.5.21-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5385.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-5399","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:2598"],"bugzilla":"1358395","bugzilla_description":"CVE-2016-5399 php: Improper error handling in bzread()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-390","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php-0:5.4.16-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5399.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-6296","severity":"moderate","public_date":"2016-07-17T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359822","bugzilla_description":"CVE-2016-6296 php: Heap buffer overflow vulnerability in simplestring_addn in simplestring.c","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-704->CWE-190->CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6296.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6291","severity":"moderate","public_date":"2016-07-15T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359718","bugzilla_description":"CVE-2016-6291 php: Out-of-bounds access in exif_process_IFD_in_MAKERNOTE","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-119","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6291.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-6214","severity":"low","public_date":"2016-07-12T00:00:00Z","advisories":[],"bugzilla":"1356466","bugzilla_description":"CVE-2016-6214 gd: Buffer over-read issue when parsing crafted TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6214.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6290","severity":"moderate","public_date":"2016-07-08T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359710","bugzilla_description":"CVE-2016-6290 php: Use after free in unserialize() with Unexpected Session Deserialization","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6290.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6207","severity":"moderate","public_date":"2016-07-07T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359800","bugzilla_description":"CVE-2016-6207 php,gd: Integer overflow error within _gdContributionsAlloc()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-6905","severity":"low","public_date":"2016-07-05T00:00:00Z","advisories":[],"bugzilla":"1356485","bugzilla_description":"CVE-2016-6905 gd: Out-of-bounds read in function read_image_tga in gd_tga.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6905.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6294","severity":"low","public_date":"2016-07-03T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359811","bugzilla_description":"CVE-2016-6294 php: Out-of-bounds access in locale_accept_from_http","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6294.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-6132","severity":"low","public_date":"2016-06-30T00:00:00Z","advisories":[],"bugzilla":"1352544","bugzilla_description":"CVE-2016-6132 gd: Buffer over-read issue when parsing crafted TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6297","severity":"low","public_date":"2016-06-30T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359828","bugzilla_description":"CVE-2016-6297 php: Stack-based buffer overflow vulnerability in php_stream_zip_opener","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6297.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2016-6289","severity":"moderate","public_date":"2016-06-29T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359698","bugzilla_description":"CVE-2016-6289 php: Integer overflow leads to buffer overflow in virtual_file_ex","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-6128","severity":"low","public_date":"2016-06-27T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1351603","bugzilla_description":"CVE-2016-6128 gd: Invalid color index not properly handled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6128.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5766","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:2598"],"bugzilla":"1351068","bugzilla_description":"CVE-2016-5766 gd: Integer Overflow in _gd2GetHeader() resulting in heap overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php-0:5.4.16-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5767","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:2598"],"bugzilla":"1351069","bugzilla_description":"CVE-2016-5767 gd: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php-0:5.4.16-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5767.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5769","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":[],"bugzilla":"1351070","bugzilla_description":"CVE-2016-5769 php: Integer Overflows in mcrypt_generic() and mdecrypt_generic() resulting in heap overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5769.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5768","severity":"low","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:2598"],"bugzilla":"1351168","bugzilla_description":"CVE-2016-5768 php: Double free in _php_mb_regex_ereg_replace_exec","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php-0:5.4.16-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5768.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5770","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1351171","bugzilla_description":"CVE-2016-5770 php: Int/size_t confusion in SplFileObject::fread","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5770.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5771","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1351173","bugzilla_description":"CVE-2016-5771 php: Use After Free Vulnerability in PHP's GC algorithm and unserialize","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5771.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5772","severity":"low","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1351175","bugzilla_description":"CVE-2016-5772 php: Double Free Corruption in wddx_deserialize","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5773","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1351179","bugzilla_description":"CVE-2016-5773 php: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5773.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-6295","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359815","bugzilla_description":"CVE-2016-6295 php: Use after free in SNMP with GC and unserialize()","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6295.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-4473","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1347772","bugzilla_description":"CVE-2016-4473 php: Invalid free() instead of efree() in phar_extract_file()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4473.json"},{"CVE":"CVE-2016-7412","severity":"moderate","public_date":"2016-05-30T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1377311","bugzilla_description":"CVE-2016-7412 php: Heap overflow in mysqlnd when not receiving UNSIGNED_FLAG in BIT field","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7412.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2016-5093","severity":"low","public_date":"2016-05-19T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1339590","bugzilla_description":"CVE-2016-5093 php: improper nul termination leading to out-of-bounds read in get_icu_value_internal","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-170","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5093.json"},{"CVE":"CVE-2016-5095","severity":"low","public_date":"2016-05-17T00:00:00Z","advisories":[],"bugzilla":"1340742","bugzilla_description":"CVE-2016-5095 php: Integer overflow in php_filter_full_special_chars","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5095.json"},{"CVE":"CVE-2016-6161","severity":"moderate","public_date":"2016-05-08T00:00:00Z","advisories":[],"bugzilla":"1353550","bugzilla_description":"CVE-2016-6161 gd: Global out-of-bounds read when encoding gif from malformed gd2 input","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-5094","severity":"low","public_date":"2016-05-01T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1340738","bugzilla_description":"CVE-2016-5094 php: Integer overflow in php_html_entities()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5094.json"},{"CVE":"CVE-2016-3078","severity":"important","public_date":"2016-04-28T00:00:00Z","advisories":[],"bugzilla":"1319750","bugzilla_description":"CVE-2016-3078 php: Heap overflow caused by integer overflow when reading zip files in ZipArchive","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3078.json"},{"CVE":"CVE-2016-5096","severity":"low","public_date":"2016-04-27T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1339949","bugzilla_description":"CVE-2016-5096 php: Integer underflow causing arbitrary null write in fread/gzread","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5096.json"},{"CVE":"CVE-2016-4539","severity":"low","public_date":"2016-04-25T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332877","bugzilla_description":"CVE-2016-4539 php: xml_parse_into_struct() can crash when XML parser is re-used","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4539.json"},{"CVE":"CVE-2016-4537","severity":"low","public_date":"2016-04-24T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332860","bugzilla_description":"CVE-2016-4537 CVE-2016-4538 php: bcpowmod accepts negative scale causing heap buffer overflow corrupting _one_ definition","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4537.json"},{"CVE":"CVE-2016-4538","severity":"low","public_date":"2016-04-24T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332860","bugzilla_description":"CVE-2016-4537 CVE-2016-4538 php: bcpowmod accepts negative scale causing heap buffer overflow corrupting _one_ definition","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4538.json"},{"CVE":"CVE-2016-4542","severity":"low","public_date":"2016-04-24T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332865","bugzilla_description":"CVE-2016-4542 CVE-2016-4543 CVE-2016-4544 php: Out-of-bounds heap memory read in exif_read_data() caused by malformed input","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4542.json"},{"CVE":"CVE-2016-4543","severity":"low","public_date":"2016-04-24T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332865","bugzilla_description":"CVE-2016-4542 CVE-2016-4543 CVE-2016-4544 php: Out-of-bounds heap memory read in exif_read_data() caused by malformed input","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4543.json"},{"CVE":"CVE-2016-4544","severity":"low","public_date":"2016-04-24T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332865","bugzilla_description":"CVE-2016-4542 CVE-2016-4543 CVE-2016-4544 php: Out-of-bounds heap memory read in exif_read_data() caused by malformed input","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4544.json"},{"CVE":"CVE-2016-3074","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1321893","bugzilla_description":"CVE-2016-3074 php: Signedness vulnerability causing heap overflow in libgd","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3074.json"},{"CVE":"CVE-2015-8866","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1330418","bugzilla_description":"CVE-2015-8866 php: libxml_disable_entity_loader setting is shared between threads","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8866.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-8867","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1330420","bugzilla_description":"CVE-2015-8867 php: openssl_random_pseudo_bytes() is not cryptographically secure","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8867.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-4540","severity":"low","public_date":"2016-04-20T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332872","bugzilla_description":"CVE-2016-4540 CVE-2016-4541 php: OOB read in grapheme_stripos and grapheme_strpos when negative offset is used","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4540.json"},{"CVE":"CVE-2016-4541","severity":"low","public_date":"2016-04-20T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332872","bugzilla_description":"CVE-2016-4540 CVE-2016-4541 php: OOB read in grapheme_stripos and grapheme_strpos when negative offset is used","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4541.json"},{"CVE":"CVE-2016-4073","severity":"moderate","public_date":"2016-03-26T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323103","bugzilla_description":"CVE-2016-4073 php: mb_strcut() Negative size parameter in memcpy","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4073.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2014-9769","severity":"moderate","public_date":"2016-03-23T00:00:00Z","advisories":[],"bugzilla":"1320995","bugzilla_description":"CVE-2014-9769 pcre: incorrect nested table jumps when JIT is used (8.36/6)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9769.json"},{"CVE":"CVE-2016-4072","severity":"moderate","public_date":"2016-03-19T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323106","bugzilla_description":"CVE-2016-4072 php: Invalid memory write in phar on filename containing \\0 inside name","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4072.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2016-4070","severity":"moderate","public_date":"2016-03-11T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323114","bugzilla_description":"CVE-2016-4070 php: Integer overflow in php_raw_url_encode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4070.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-3132","severity":"moderate","public_date":"2016-03-07T00:00:00Z","advisories":[],"bugzilla":"1333497","bugzilla_description":"CVE-2016-3132 php: Double free in SplDoublyLinkedList::offsetSet","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3132.json"},{"CVE":"CVE-2016-4071","severity":"moderate","public_date":"2016-03-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323108","bugzilla_description":"CVE-2016-4071 php: Format string vulnerability in php_snmp_error()","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-134","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4071.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2015-8865","severity":"low","public_date":"2016-02-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323118","bugzilla_description":"CVE-2015-8865 file: Buffer over-write in finfo_open with malformed magic file","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-4344","severity":"low","public_date":"2016-02-20T00:00:00Z","advisories":[],"bugzilla":"1315339","bugzilla_description":"CVE-2016-4344 CVE-2016-4345 CVE-2016-4346 php: Multiple heap overflows due to integer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4344.json"},{"CVE":"CVE-2016-4345","severity":"low","public_date":"2016-02-20T00:00:00Z","advisories":[],"bugzilla":"1315339","bugzilla_description":"CVE-2016-4344 CVE-2016-4345 CVE-2016-4346 php: Multiple heap overflows due to integer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4345.json"},{"CVE":"CVE-2016-4346","severity":"low","public_date":"2016-02-20T00:00:00Z","advisories":[],"bugzilla":"1315339","bugzilla_description":"CVE-2016-4344 CVE-2016-4345 CVE-2016-4346 php: Multiple heap overflows due to integer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4346.json"},{"CVE":"CVE-2016-3185","severity":"moderate","public_date":"2016-02-16T00:00:00Z","advisories":[],"bugzilla":"1315344","bugzilla_description":"CVE-2016-3185 php: Type confusion vulnerability in make_http_soap_request()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3185.json"},{"CVE":"CVE-2016-3141","severity":"moderate","public_date":"2016-02-14T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1315328","bugzilla_description":"CVE-2016-3141 php: Use after free in WDDX Deserialize when processing XML data","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3141.json"},{"CVE":"CVE-2016-3191","severity":"important","public_date":"2016-02-09T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1025"],"bugzilla":"1311503","bugzilla_description":"CVE-2016-3191 pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3191.json"},{"CVE":"CVE-2016-3142","severity":"low","public_date":"2016-02-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1315312","bugzilla_description":"CVE-2016-3142 php: Out-of-bounds read in phar_parse_zipfile()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3142.json"},{"CVE":"CVE-2016-2554","severity":"low","public_date":"2016-01-31T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1305543","bugzilla_description":"CVE-2016-2554 php: buffer overflow in handling of long link names in tar phar archives","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2554.json"},{"CVE":"CVE-2016-1904","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":[],"bugzilla":"1298839","bugzilla_description":"CVE-2016-1904 php: heap buffer overflow in escapeshell functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1904.json"},{"CVE":"CVE-2016-4342","severity":"moderate","public_date":"2016-01-12T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1305536","bugzilla_description":"CVE-2016-4342 php: use of uninitialized pointer in PharFileInfo::getContent","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-665","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4342.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-10712","severity":"low","public_date":"2016-01-10T00:00:00Z","advisories":[],"bugzilla":"1305523","bugzilla_description":"CVE-2016-10712 php: Output of stream_get_meta_data can be falsified by its input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10712.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-4343","severity":"moderate","public_date":"2016-01-10T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332454","bugzilla_description":"CVE-2016-4343 php: Uninitialized pointer in phar_make_dirstream()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4343.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-1283","severity":"important","public_date":"2016-01-04T00:00:00Z","advisories":["RHSA-2016:1132"],"bugzilla":"1295385","bugzilla_description":"CVE-2016-1283 pcre: heap buffer overflow in handling of duplicate named groups (8.39/14)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1283.json"},{"CVE":"CVE-2015-8880","severity":"moderate","public_date":"2015-12-17T00:00:00Z","advisories":[],"bugzilla":"1339142","bugzilla_description":"CVE-2015-8880 php: Double free vulnerability in error condition of format printer","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8880.json"},{"CVE":"CVE-2015-8617","severity":"important","public_date":"2015-12-12T00:00:00Z","advisories":[],"bugzilla":"1293880","bugzilla_description":"CVE-2015-8617 php: Format string vulnerability in class name error message","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-134","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8617.json"},{"CVE":"CVE-2016-9934","severity":"low","public_date":"2015-12-08T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1404726","bugzilla_description":"CVE-2016-9934 php: NULL Pointer Dereference in WDDX Packet Deserialization with PDORow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9934.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2015-8616","severity":"low","public_date":"2015-12-03T00:00:00Z","advisories":[],"bugzilla":"1293876","bugzilla_description":"CVE-2015-8616 php: Use after free vulnerability in Collator::sortWithSortKeys","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8616.json"},{"CVE":"CVE-2016-1903","severity":"moderate","public_date":"2015-11-26T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1297717","bugzilla_description":"CVE-2016-1903 php: Out-of-bounds memory read via gdImageRotateInterpolated","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1903.json"},{"CVE":"CVE-2015-8383","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287614","bugzilla_description":"CVE-2015-8383 pcre: Buffer overflow caused by repeated conditional group (8.38/3)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8383.json"},{"CVE":"CVE-2015-3210","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3210.json"},{"CVE":"CVE-2015-8384","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8384.json"},{"CVE":"CVE-2015-8385","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287629","bugzilla_description":"CVE-2015-8385 pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8385.json"},{"CVE":"CVE-2015-8386","severity":"low","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287636","bugzilla_description":"CVE-2015-8386 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8386.json"},{"CVE":"CVE-2015-8387","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287646","bugzilla_description":"CVE-2015-8387 pcre: Integer overflow in subroutine calls (8.38/8)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8387.json"},{"CVE":"CVE-2015-8389","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287659","bugzilla_description":"CVE-2015-8389 pcre: infinite recursion in JIT compiler when processing certain patterns (8.38/21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8389.json"},{"CVE":"CVE-2015-8390","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287666","bugzilla_description":"CVE-2015-8390 pcre: uninitialized memory read triggered by malformed posix character class (8.38/22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8390.json"},{"CVE":"CVE-2015-8391","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287671","bugzilla_description":"CVE-2015-8391 pcre: inefficient posix character class syntax check (8.38/16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8391.json"},{"CVE":"CVE-2015-8392","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287690","bugzilla_description":"CVE-2015-8392 pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8392.json"},{"CVE":"CVE-2015-8393","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287695","bugzilla_description":"CVE-2015-8393 pcre: pcregrep -q is not always quiet (8.38/28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8393.json"},{"CVE":"CVE-2015-8394","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287702","bugzilla_description":"CVE-2015-8394 pcre: Integer overflow caused by missing check for certain conditions (8.38/31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8394.json"},{"CVE":"CVE-2015-8381","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8381.json"},{"CVE":"CVE-2015-8395","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8395.json"},{"CVE":"CVE-2016-5114","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1297710","bugzilla_description":"CVE-2016-5114 php: out-of-bounds write in fpm_log.c","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-787","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5114.json"},{"CVE":"CVE-2015-7803","severity":"moderate","public_date":"2015-10-01T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1271081","bugzilla_description":"CVE-2015-7803 php: NULL pointer dereference in phar_get_fp_offset()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7803.json"},{"CVE":"CVE-2015-7804","severity":"moderate","public_date":"2015-10-01T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1271088","bugzilla_description":"CVE-2015-7804 php: uninitialized pointer in phar_make_dirstream()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7804.json"},{"CVE":"CVE-2016-6288","severity":"low","public_date":"2015-09-13T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1360322","bugzilla_description":"CVE-2016-6288 php: Buffer over-read in php_url_parse_ex","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6288.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2015-6836","severity":"low","public_date":"2015-08-29T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1260683","bugzilla_description":"CVE-2015-6836 php: SOAP serialize_function_call() type confusion","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6836.json"},{"CVE":"CVE-2014-9767","severity":"moderate","public_date":"2015-08-25T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1260716","bugzilla_description":"CVE-2014-9767 php: ZipArchive::extractTo allows for directory traversal when creating directories","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9767.json"},{"CVE":"CVE-2015-6835","severity":"low","public_date":"2015-08-09T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1260647","bugzilla_description":"CVE-2015-6835 php: use-after-free vulnerability in session deserializer","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6835.json"},{"CVE":"CVE-2015-6831","severity":"moderate","public_date":"2015-08-06T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1256290","bugzilla_description":"CVE-2015-6831 php: Use After Free Vulnerability in unserialize()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6831.json"},{"CVE":"CVE-2015-6832","severity":"moderate","public_date":"2015-08-06T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1256322","bugzilla_description":"CVE-2015-6832 php: dangling pointer in the unserialization of ArrayObject items","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6832.json"},{"CVE":"CVE-2015-8873","severity":"low","public_date":"2015-08-04T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1336775","bugzilla_description":"CVE-2015-8873 php: Stack consumption vulnerability in Zend/zend_exceptions.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8873.json"},{"CVE":"CVE-2015-8876","severity":"moderate","public_date":"2015-08-04T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1338896","bugzilla_description":"CVE-2015-8876 php: Zend/zend_exceptions.c does not validate certain Exception objects","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8876.json"},{"CVE":"CVE-2015-9253","severity":"moderate","public_date":"2015-08-03T00:00:00Z","advisories":[],"bugzilla":"1547725","bugzilla_description":"CVE-2015-9253 php: Infinite loop in php-fpm when restarting a child using program execution function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-6834","severity":"low","public_date":"2015-07-31T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1260642","bugzilla_description":"CVE-2015-6834 php: multiple unserialization use-after-free issues","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6834.json"},{"CVE":"CVE-2015-6527","severity":"moderate","public_date":"2015-07-26T00:00:00Z","advisories":[],"bugzilla":"1255780","bugzilla_description":"CVE-2015-6527 php: Arbitrary code execution in str_ireplace function","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6527.json"},{"CVE":"CVE-2015-8879","severity":"low","public_date":"2015-07-22T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1338912","bugzilla_description":"CVE-2015-8879 php: odbc_bindcols function mishandles driver behavior for SQL_WVARCHAR columns","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8879.json"},{"CVE":"CVE-2015-8835","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323074","bugzilla_description":"CVE-2015-8835 php: type confusion issue in Soap Client call() method","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8835.json"},{"CVE":"CVE-2015-8877","severity":"low","public_date":"2015-07-13T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1338907","bugzilla_description":"CVE-2015-8877 gd: gdImageScaleTwoPass function in gd_interpolation.c uses inconsistent allocate and free approaches","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8877.json"},{"CVE":"CVE-2015-6833","severity":"moderate","public_date":"2015-07-08T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1283702","bugzilla_description":"CVE-2015-6833 php: Files from archive can be extracted outside of destination directory using phar","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6833.json"},{"CVE":"CVE-2015-8878","severity":"moderate","public_date":"2015-07-06T00:00:00Z","advisories":[],"bugzilla":"1338893","bugzilla_description":"CVE-2015-8878 php: main/php_open_temporary_file.c does not ensure thread safety","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-567","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8878.json"},{"CVE":"CVE-2015-5589","severity":"moderate","public_date":"2015-07-05T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1245236","bugzilla_description":"CVE-2015-5589 php: segmentation fault in Phar::convertToData on invalid file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5589.json"},{"CVE":"CVE-2015-5590","severity":"moderate","public_date":"2015-07-05T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1245242","bugzilla_description":"CVE-2015-5590 php: buffer overflow and stack smashing error in phar_fix_filepath","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5590.json"},{"CVE":"CVE-2015-5073","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5073.json"},{"CVE":"CVE-2015-8388","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8388.json"},{"CVE":"CVE-2015-4643","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1234938","bugzilla_description":"CVE-2015-4643 php: integer overflow in ftp_genlist() resulting in heap overflow (improved fix for CVE-2015-4022)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4643.json"},{"CVE":"CVE-2015-4644","severity":"low","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1234940","bugzilla_description":"CVE-2015-4644 php: NULL pointer dereference in php_pgsql_meta_data()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4644.json"},{"CVE":"CVE-2015-4116","severity":"low","public_date":"2015-06-10T00:00:00Z","advisories":[],"bugzilla":"1336784","bugzilla_description":"CVE-2015-4116 php: Use-after-free vulnerability in the spl_ptr_heap_insert function","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4116.json"},{"CVE":"CVE-2015-6837","severity":"low","public_date":"2015-06-09T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1260711","bugzilla_description":"CVE-2015-6837 CVE-2015-6838 php: NULL pointer dereference in XSLTProcessor class","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6837.json"},{"CVE":"CVE-2015-6838","severity":"low","public_date":"2015-06-09T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1260711","bugzilla_description":"CVE-2015-6837 CVE-2015-6838 php: NULL pointer dereference in XSLTProcessor class","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6838.json"},{"CVE":"CVE-2015-3211","severity":"low","public_date":"2015-06-05T00:00:00Z","advisories":[],"bugzilla":"1228721","bugzilla_description":"CVE-2015-3211 php: php-fpm package vulnerable to symlink attack","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:C/A:N","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3211.json"},{"CVE":"CVE-2015-3217","severity":"moderate","public_date":"2015-06-03T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1228283","bugzilla_description":"CVE-2015-3217 pcre: stack overflow caused by mishandled group empty match (8.38/11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3217.json"},{"CVE":"CVE-2015-8874","severity":"low","public_date":"2015-06-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1336772","bugzilla_description":"CVE-2015-8874 gd: gdImageFillToBorder deep recursion leading to stack overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8874.json"},{"CVE":"CVE-2015-8380","severity":null,"public_date":"2015-06-01T00:00:00Z","advisories":[],"bugzilla":"1285413","bugzilla_description":"CVE-2015-8380 pcre: OOB write when pcre_exec() is called with ovecsize of 1 (8.38/10)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8380.json"},{"CVE":"CVE-2015-4598","severity":"moderate","public_date":"2015-05-28T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1232897","bugzilla_description":"CVE-2015-4598 php: missing null byte checks for paths in DOM and GD extensions","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-626","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4598.json"},{"CVE":"CVE-2015-8838","severity":"moderate","public_date":"2015-05-20T00:00:00Z","advisories":[],"bugzilla":"1323749","bugzilla_description":"CVE-2015-8838 php: mysqlnd interface vulnerable to BACKRONYM","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8838.json"},{"CVE":"CVE-2015-3307","severity":"moderate","public_date":"2015-05-18T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1223441","bugzilla_description":"CVE-2015-3307 php: invalid pointer free() in phar_tar_process_metadata()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3307.json"},{"CVE":"CVE-2015-4024","severity":"moderate","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1222485","bugzilla_description":"CVE-2015-4024 php: multipart/form-data request parsing CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4024.json"},{"CVE":"CVE-2015-4022","severity":"moderate","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1223412","bugzilla_description":"CVE-2015-4022 php: integer overflow leading to heap overflow when reading FTP file listing","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4022.json"},{"CVE":"CVE-2015-4026","severity":"low","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1223422","bugzilla_description":"CVE-2015-4026 php: pcntl_exec() accepts paths with NUL character","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-626","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4026.json"},{"CVE":"CVE-2015-4021","severity":"moderate","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1223425","bugzilla_description":"CVE-2015-4021 php: memory corruption in phar_parse_tarfile caused by empty entry file name","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-125->CWE-787","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4021.json"},{"CVE":"CVE-2015-3330","severity":"important","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213394","bugzilla_description":"CVE-2015-3330 php: pipelined request executed in deinitialized interpreter under httpd 2.4","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-665","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3330.json"},{"CVE":"CVE-2015-3411","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213407","bugzilla_description":"CVE-2015-3411 php: missing null byte checks for paths in various PHP extensions","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-626","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3411.json"},{"CVE":"CVE-2015-4604","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213442","bugzilla_description":"CVE-2015-4604 CVE-2015-4605 php: denial of service when processing a crafted file with Fileinfo","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4604.json"},{"CVE":"CVE-2015-4605","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213442","bugzilla_description":"CVE-2015-4604 CVE-2015-4605 php: denial of service when processing a crafted file with Fileinfo","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4605.json"},{"CVE":"CVE-2015-2783","severity":"low","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213446","bugzilla_description":"CVE-2015-2783 php: buffer over-read in Phar metadata parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-20->CWE-125","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2783.json"},{"CVE":"CVE-2015-3329","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213449","bugzilla_description":"CVE-2015-3329 php: buffer overflow in phar_set_inode()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3329.json"},{"CVE":"CVE-2015-4599","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1222538","bugzilla_description":"CVE-2015-4599 CVE-2015-4600 CVE-2015-4601 php: type confusion issue in unserialize() with various SOAP methods","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-843","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4599.json"},{"CVE":"CVE-2015-4600","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1222538","bugzilla_description":"CVE-2015-4599 CVE-2015-4600 CVE-2015-4601 php: type confusion issue in unserialize() with various SOAP methods","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-843","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4600.json"},{"CVE":"CVE-2015-4601","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1222538","bugzilla_description":"CVE-2015-4599 CVE-2015-4600 CVE-2015-4601 php: type confusion issue in unserialize() with various SOAP methods","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-843","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4601.json"},{"CVE":"CVE-2015-3412","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1232823","bugzilla_description":"CVE-2015-3412 php: missing null byte checks for paths in various PHP extensions","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-626","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3412.json"},{"CVE":"CVE-2015-4025","severity":"moderate","public_date":"2015-04-10T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1223408","bugzilla_description":"CVE-2015-4025 php: CVE-2006-7243 regressions in 5.4+","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-626","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4025.json"},{"CVE":"CVE-2015-2325","severity":"important","public_date":"2015-03-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1207198","bugzilla_description":"CVE-2015-2325 pcre: heap buffer overflow in compile_branch()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2325.json"},{"CVE":"CVE-2015-2326","severity":"moderate","public_date":"2015-03-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1207202","bugzilla_description":"CVE-2015-2326 pcre: heap buffer over-read in pcre_compile2() (8.37/23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2326.json"},{"CVE":"CVE-2015-4602","severity":"moderate","public_date":"2015-03-20T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1232923","bugzilla_description":"CVE-2015-4602 php: Incomplete Class unserialization type confusion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-843","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4602.json"},{"CVE":"CVE-2015-2331","severity":"important","public_date":"2015-03-18T00:00:00Z","advisories":[],"bugzilla":"1204676","bugzilla_description":"CVE-2015-2331 libzip: integer overflow when processing ZIP archives","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2331.json"},{"CVE":"CVE-2015-4147","severity":"moderate","public_date":"2015-03-03T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1204868","bugzilla_description":"CVE-2015-4147 php: SoapClient's __call() type confusion through unserialize()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4147.json"},{"CVE":"CVE-2015-4148","severity":"low","public_date":"2015-03-03T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1226916","bugzilla_description":"CVE-2015-4148 php: SoapClient's do_soap_call() type confusion after unserialize()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-843","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4148.json"},{"CVE":"CVE-2015-4603","severity":"moderate","public_date":"2015-03-03T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1232918","bugzilla_description":"CVE-2015-4603 php: exception::getTraceAsString type confusion issue after unserialize","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-843","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4603.json"},{"CVE":"CVE-2015-2787","severity":"moderate","public_date":"2015-03-02T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1207676","bugzilla_description":"CVE-2015-2787 php: use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-416","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2787.json"},{"CVE":"CVE-2015-2348","severity":"moderate","public_date":"2015-03-02T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1207682","bugzilla_description":"CVE-2015-2348 php: move_uploaded_file() NUL byte injection in file name","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-626","affected_packages":["php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2348.json"},{"CVE":"CVE-2015-0273","severity":"moderate","public_date":"2015-02-19T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1194730","bugzilla_description":"CVE-2015-0273 php: use after free vulnerability in unserialize() with DateTimeZone","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0273.json"},{"CVE":"CVE-2013-6501","severity":"low","public_date":"2015-02-08T00:00:00Z","advisories":[],"bugzilla":"1009103","bugzilla_description":"CVE-2013-6501 php: predictable file name used for cache in world writeable directory","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6501.json"},{"CVE":"CVE-2015-2305","severity":"moderate","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1191049","bugzilla_description":"CVE-2015-2305 regex: heap overflow in regcomp() on 32-bit architectures","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2305.json"},{"CVE":"CVE-2015-8382","severity":"low","public_date":"2015-02-03T00:00:00Z","advisories":[],"bugzilla":"1187225","bugzilla_description":"CVE-2015-8382 php: Regular Expression Uninitialized Pointer Information Disclosure Vulnerability (ZDI-CAN-2547)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8382.json"},{"CVE":"CVE-2015-8935","severity":"moderate","public_date":"2015-02-03T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2015:1066"],"bugzilla":"1348927","bugzilla_description":"CVE-2015-8935 php: HTTP response splitting in header() function","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-113","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php54-php-0:5.4.40-1.el6","php54-php-0:5.4.40-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8935.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2015-2301","severity":"low","public_date":"2015-01-24T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1194747","bugzilla_description":"CVE-2015-2301 php: use after free in phar_object.c","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2301.json"},{"CVE":"CVE-2015-1353","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1185896","bugzilla_description":"CVE-2015-1353 php: integer overflow in the conversion of dates to \"Julian Day Count\" function","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1353.json"},{"CVE":"CVE-2015-1352","severity":"low","public_date":"2015-01-04T00:00:00Z","advisories":["RHSA-2015:1053"],"bugzilla":"1185904","bugzilla_description":"CVE-2015-1352 php: NULL pointer dereference in pgsql extension","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1352.json"},{"CVE":"CVE-2014-9620","severity":"low","public_date":"2015-01-03T00:00:00Z","advisories":["RHSA-2016:0760"],"bugzilla":"1180639","bugzilla_description":"CVE-2014-9620 file: limit the number of ELF notes processed","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9620.json"},{"CVE":"CVE-2014-9621","severity":"low","public_date":"2015-01-03T00:00:00Z","advisories":[],"bugzilla":"1180642","bugzilla_description":"CVE-2014-9621 file: limit string printing to 100 chars","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9621.json"},{"CVE":"CVE-2015-0231","severity":"moderate","public_date":"2015-01-01T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1185397","bugzilla_description":"CVE-2015-0231 php: use after free vulnerability in unserialize() (incomplete fix of CVE-2014-8142)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0231.json"},{"CVE":"CVE-2015-0232","severity":"moderate","public_date":"2015-01-01T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1185472","bugzilla_description":"CVE-2015-0232 php: Free called on unitialized pointer in exif.c","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-822","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0232.json"},{"CVE":"CVE-2014-9425","severity":"low","public_date":"2014-12-30T00:00:00Z","advisories":["RHSA-2015:1218"],"bugzilla":"1177734","bugzilla_description":"CVE-2014-9425 php: Double-free in zend_ts_hash_graceful_destroy()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9425.json"},{"CVE":"CVE-2015-1351","severity":"low","public_date":"2014-12-29T00:00:00Z","advisories":["RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1185900","bugzilla_description":"CVE-2015-1351 php: use after free in opcache extension","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1351.json"},{"CVE":"CVE-2014-8142","severity":"moderate","public_date":"2014-12-18T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1175718","bugzilla_description":"CVE-2014-8142 php: use after free vulnerability in unserialize()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8142.json"},{"CVE":"CVE-2014-9427","severity":"low","public_date":"2014-12-17T00:00:00Z","advisories":["RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1178736","bugzilla_description":"CVE-2014-9427 php: out of bounds read when parsing a crafted .php file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9427.json"},{"CVE":"CVE-2014-8116","severity":"moderate","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2015:2155"],"bugzilla":"1171580","bugzilla_description":"CVE-2014-8116 file: multiple denial of service issues (resource consumption)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400->CWE-674","affected_packages":["file-0:5.11-31.el7","file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8116.json"},{"CVE":"CVE-2014-8117","severity":"moderate","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2015:2155"],"bugzilla":"1174606","bugzilla_description":"CVE-2014-8117 file: denial of service issue (resource consumption)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400->CWE-674","affected_packages":["file-0:5.11-31.el7","file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8117.json"},{"CVE":"CVE-2014-9653","severity":"low","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2015:2155"],"bugzilla":"1190116","bugzilla_description":"CVE-2014-9653 file: malformed elf file causes access to uninitialized memory","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9653.json"},{"CVE":"CVE-2014-9709","severity":"low","public_date":"2014-12-13T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1188639","bugzilla_description":"CVE-2014-9709 gd: buffer read overflow in gd_gif_in.c","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-119","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9709.json"},{"CVE":"CVE-2014-9705","severity":"moderate","public_date":"2014-12-05T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1194737","bugzilla_description":"CVE-2014-9705 php: heap buffer overflow in enchant_broker_request_dict()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9705.json"},{"CVE":"CVE-2014-8964","severity":"low","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2015:0330"],"bugzilla":"1166147","bugzilla_description":"CVE-2014-8964 pcre: incorrect handling of zero-repeat assertion conditions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":["pcre-0:8.32-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8964.json"},{"CVE":"CVE-2014-9652","severity":"low","public_date":"2014-11-11T00:00:00Z","advisories":["RHSA-2015:2155","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1188599","bugzilla_description":"CVE-2014-9652 file: out of bounds read in mconvert()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9652.json"},{"CVE":"CVE-2014-8626","severity":"critical","public_date":"2014-11-05T00:00:00Z","advisories":["RHSA-2014:1825","RHSA-2014:1824"],"bugzilla":"1155607","bugzilla_description":"CVE-2014-8626 php: xmlrpc ISO8601 date format parsing buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["php-0:4.3.9-3.38.el4","php-0:5.1.6-45.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8626.json"},{"CVE":"CVE-2014-3710","severity":"moderate","public_date":"2014-10-22T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1768","RHSA-2014:1767","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1155071","bugzilla_description":"CVE-2014-3710 file: out-of-bounds read in elf note headers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-40.el6_6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.3","php53-0:5.3.3-26.el5_11","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3710.json"},{"CVE":"CVE-2014-3670","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1768","RHSA-2014:1767","RHSA-2014:1766","RHSA-2014:1765","RHSA-2015:0021","RHSA-2014:1824"],"bugzilla":"1154502","bugzilla_description":"CVE-2014-3670 php: heap corruption issue in exif_thumbnail()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["php55-php-0:5.5.6-13.el6","php-0:5.1.6-45.el5_11","php-0:5.3.3-40.el6_6","php-0:5.3.3-27.el6_5.3","php-0:5.4.16-23.el7_0.3","php53-0:5.3.3-26.el5_11","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3670.json"},{"CVE":"CVE-2014-3668","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1768","RHSA-2014:1767","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1154503","bugzilla_description":"CVE-2014-3668 php: xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["php55-php-0:5.5.6-13.el6","php-0:5.3.3-40.el6_6","php-0:5.4.16-23.el7_0.3","php53-0:5.3.3-26.el5_11","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3668.json"},{"CVE":"CVE-2014-3622","severity":"low","public_date":"2014-10-03T00:00:00Z","advisories":[],"bugzilla":"1151423","bugzilla_description":"CVE-2014-3622 php: post handler potential illegal efree() vulnerability","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3622.json"},{"CVE":"CVE-2014-3669","severity":"moderate","public_date":"2014-09-18T00:00:00Z","advisories":["RHSA-2014:1768","RHSA-2014:1767","RHSA-2014:1766","RHSA-2014:1765","RHSA-2015:0021","RHSA-2014:1824"],"bugzilla":"1154500","bugzilla_description":"CVE-2014-3669 php: integer overflow in unserialize()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-190","affected_packages":["php55-php-0:5.5.6-13.el6","php-0:5.1.6-45.el5_11","php-0:5.3.3-40.el6_6","php-0:5.3.3-27.el6_5.3","php-0:5.4.16-23.el7_0.3","php53-0:5.3.3-26.el5_11","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3669.json"},{"CVE":"CVE-2014-5459","severity":"moderate","public_date":"2014-08-25T00:00:00Z","advisories":[],"bugzilla":"1133753","bugzilla_description":"CVE-2014-5459 php-pear: insecure temporary file use for cache data","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5459.json"},{"CVE":"CVE-2014-3587","severity":"moderate","public_date":"2014-08-21T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1128587","bugzilla_description":"CVE-2014-3587 file: incomplete fix for CVE-2012-1571 in cdf_read_property_info","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["php53-0:5.3.3-24.el5","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3587.json"},{"CVE":"CVE-2015-2328","severity":"moderate","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1285399","bugzilla_description":"CVE-2015-2328 pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2328.json"},{"CVE":"CVE-2014-5120","severity":"moderate","public_date":"2014-07-31T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1132793","bugzilla_description":"CVE-2014-5120 php: gd extension NUL byte injection in file names","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-626","affected_packages":["php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5120.json"},{"CVE":"CVE-2014-3597","severity":"low","public_date":"2014-07-30T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1132589","bugzilla_description":"CVE-2014-3597 php: multiple buffer over-reads in php_parserr","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["php53-0:5.3.3-24.el5","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3597.json"},{"CVE":"CVE-2015-2327","severity":"moderate","public_date":"2014-07-11T00:00:00Z","advisories":["RHBA-2015:2142","RHSA-2016:2750"],"bugzilla":"1285408","bugzilla_description":"CVE-2015-2327 pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2327.json"},{"CVE":"CVE-2014-3515","severity":"low","public_date":"2014-07-09T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1012"],"bugzilla":"1112154","bugzilla_description":"CVE-2014-3515 php: unserialize() SPL ArrayObject / SPLObjectStorage type confusion flaw","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3515.json"},{"CVE":"CVE-2014-4698","severity":"low","public_date":"2014-06-29T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1120259","bugzilla_description":"CVE-2014-4698 php: ArrayIterator use-after-free due to object change during sorting","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["php53-0:5.3.3-24.el5","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4698.json"},{"CVE":"CVE-2014-4670","severity":"low","public_date":"2014-06-29T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1120266","bugzilla_description":"CVE-2014-4670 php: SPL Iterators use-after-free","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["php53-0:5.3.3-24.el5","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4670.json"},{"CVE":"CVE-2014-0207","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1091842","bugzilla_description":"CVE-2014-0207 file: cdf_read_short_sector insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0207.json"},{"CVE":"CVE-2014-0236","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":[],"bugzilla":"1098209","bugzilla_description":"CVE-2014-0236 file: root_storage NULL pointer deference flaw in CDF parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0236.json"},{"CVE":"CVE-2014-3538","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1098222","bugzilla_description":"CVE-2014-3538 file: unrestricted regular expression matching","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.1","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3538.json"},{"CVE":"CVE-2014-3480","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1104858","bugzilla_description":"CVE-2014-3480 file: cdf_count_chain insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3480.json"},{"CVE":"CVE-2014-3478","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1104863","bugzilla_description":"CVE-2014-3478 file: mconvert incorrect handling of truncated pascal string size","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3478.json"},{"CVE":"CVE-2014-3479","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1104869","bugzilla_description":"CVE-2014-3479 file: cdf_check_stream_offset insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3479.json"},{"CVE":"CVE-2014-3487","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1107544","bugzilla_description":"CVE-2014-3487 file: cdf_read_property_info insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3487.json"},{"CVE":"CVE-2014-4721","severity":"low","public_date":"2014-06-23T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1012"],"bugzilla":"1116662","bugzilla_description":"CVE-2014-4721 php: type confusion issue in phpinfo() leading to information leak","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-843->CWE-822->CWE-201","affected_packages":["php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4721.json"},{"CVE":"CVE-2015-8994","severity":"low","public_date":"2014-06-19T00:00:00Z","advisories":[],"bugzilla":"1395231","bugzilla_description":"CVE-2015-8994 php: Zend OPCache code permission/sensitive data protection issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8994.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2014-4049","severity":"moderate","public_date":"2014-06-11T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1012"],"bugzilla":"1108447","bugzilla_description":"CVE-2014-4049 php: heap-based buffer overflow in DNS TXT record parsing","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4049.json"},{"CVE":"CVE-2014-9912","severity":"moderate","public_date":"2014-06-08T00:00:00Z","advisories":[],"bugzilla":"1399433","bugzilla_description":"CVE-2014-9912 php: stack buffer overflow in locale_get_display_name","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9912.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2014-3981","severity":"low","public_date":"2014-06-04T00:00:00Z","advisories":[],"bugzilla":"1104978","bugzilla_description":"CVE-2014-3981 php: insecure temporary file use in the configure script","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3981.json"},{"CVE":"CVE-2014-0238","severity":"moderate","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1098155","bugzilla_description":"CVE-2014-0238 file: CDF property info parsing nelements infinite loop","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0238.json"},{"CVE":"CVE-2014-0237","severity":"moderate","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1098193","bugzilla_description":"CVE-2014-0237 file: cdf_unpack_summary_info() excessive looping DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0237.json"},{"CVE":"CVE-2014-0185","severity":"moderate","public_date":"2014-04-30T00:00:00Z","advisories":[],"bugzilla":"1092815","bugzilla_description":"CVE-2014-0185 php: insecure default permissions on the FPM unix socket","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0185.json"},{"CVE":"CVE-2013-6371","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":["RHSA-2014:0703"],"bugzilla":"1032311","bugzilla_description":"CVE-2013-6371 json-c: hash collision DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["json-c-0:0.11-4.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6371.json"},{"CVE":"CVE-2013-6370","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":["RHSA-2014:0703"],"bugzilla":"1032322","bugzilla_description":"CVE-2013-6370 json-c: buffer overflow if size_t is larger than int","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["json-c-0:0.11-4.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6370.json"},{"CVE":"CVE-2014-2497","severity":"low","public_date":"2014-03-13T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1076676","bugzilla_description":"CVE-2014-2497 gd: NULL pointer dereference in gdImageCreateFromXpm()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php53-0:5.3.3-24.el5","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2497.json"},{"CVE":"CVE-2014-1943","severity":"moderate","public_date":"2014-02-10T00:00:00Z","advisories":["RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1065836","bugzilla_description":"CVE-2014-1943 file: unrestricted recursion in handling of indirect type rules","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1943.json"},{"CVE":"CVE-2013-7226","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7226.json"},{"CVE":"CVE-2013-7327","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7327.json"},{"CVE":"CVE-2013-7328","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7328.json"},{"CVE":"CVE-2014-2020","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2020.json"},{"CVE":"CVE-2014-2270","severity":"moderate","public_date":"2013-12-20T00:00:00Z","advisories":["RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1072220","bugzilla_description":"CVE-2014-2270 file: out-of-bounds access in search rules with offsets from input file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2270.json"},{"CVE":"CVE-2013-6420","severity":"critical","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1814","RHSA-2013:1825","RHSA-2013:1826","RHSA-2013:1815","RHSA-2013:1813","RHSA-2013:1824"],"bugzilla":"1036830","bugzilla_description":"CVE-2013-6420 php: memory corruption in openssl_x509_parse()","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-130->CWE-119","affected_packages":["php-0:5.1.6-43.el5_10","php-0:5.1.6-40.el5_9.1","php53-0:5.3.3-1.el5_6.4","php-0:4.3.2-57.ent","php53-0:5.3.3-13.el5_9.2","php-0:5.3.3-27.el6_5","php-0:5.1.6-27.el5_6.6","php-0:4.3.9-3.37.el4.1","php53-0:5.3.3-22.el5_10","php54-php-0:5.4.16-7.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6420.json"},{"CVE":"CVE-2013-6712","severity":"low","public_date":"2013-11-27T00:00:00Z","advisories":["RHSA-2014:1765","RHSA-2014:1012"],"bugzilla":"1035670","bugzilla_description":"CVE-2013-6712 php: heap-based buffer over-read in DateInterval","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["php-0:5.3.3-27.el6_5.1","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6712.json"},{"CVE":"CVE-2013-7456","severity":"low","public_date":"2013-09-24T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1340433","bugzilla_description":"CVE-2013-7456 gd: incorrect boundary adjustment in _gdContributionsCalc","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7456.json"},{"CVE":"CVE-2013-4248","severity":"moderate","public_date":"2013-08-13T00:00:00Z","advisories":["RHSA-2013:1307","RHSA-2013:1615"],"bugzilla":"997097","bugzilla_description":"CVE-2013-4248 php: hostname check bypassing vulnerability in SSL client","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-0:5.3.3-26.el6","php53-0:5.3.3-21.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4248.json"},{"CVE":"CVE-2013-4113","severity":"critical","public_date":"2013-07-11T00:00:00Z","advisories":["RHSA-2013:1063","RHSA-2013:1050","RHSA-2013:1061","RHSA-2013:1062","RHSA-2013:1049"],"bugzilla":"983689","bugzilla_description":"CVE-2013-4113 php: xml_parse_into_struct buffer overflow when parsing deeply nested XML","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["php-0:5.1.6-40.el5_9","php53-0:5.3.3-1.el5_6.3","php53-0:5.3.3-13.el5_9.1","php-0:5.3.3-23.el6_4","php-0:4.3.2-56.ent","php-0:5.3.3-14.el6_3.1","php-0:5.3.3-3.el6_2.10","php-0:5.1.6-23.4.el5_3","php-0:4.3.9-3.37.el4","php-0:5.1.6-27.el5_6.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4113.json"},{"CVE":"CVE-2013-2110","severity":"critical","public_date":"2013-06-06T00:00:00Z","advisories":[],"bugzilla":"964969","bugzilla_description":"CVE-2013-2110 php: Heap-based buffer overflow in quoted_printable_encode()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2110.json"},{"CVE":"CVE-2013-3735","severity":null,"public_date":"2013-05-23T00:00:00Z","advisories":[],"bugzilla":"969996","bugzilla_description":"CVE-2013-3735 php: DoS (memory exhaustion, application crash) via crafted function definition","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3735.json"},{"CVE":"CVE-2013-4635","severity":"moderate","public_date":"2013-05-22T00:00:00Z","advisories":[],"bugzilla":"977462","bugzilla_description":"CVE-2013-4635 php: Integer overflow in SndToJewish - DoS (excessive CPU use, interpreter hang)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4635.json"},{"CVE":"CVE-2013-4636","severity":"moderate","public_date":"2013-05-13T00:00:00Z","advisories":[],"bugzilla":"977463","bugzilla_description":"CVE-2013-4636 php: fileinfo: Invalid pointer dereference when checking mimetype of certain MP3 files","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4636.json"},{"CVE":"CVE-2013-1643","severity":"low","public_date":"2013-02-20T00:00:00Z","advisories":["RHSA-2013:1814","RHSA-2013:1307","RHSA-2013:1615"],"bugzilla":"918187","bugzilla_description":"CVE-2013-1643 php: Ability to read arbitrary files due use of external entities while parsing SOAP WSDL files","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["php-0:5.1.6-43.el5_10","php-0:5.3.3-26.el6","php53-0:5.3.3-21.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1643.json"},{"CVE":"CVE-2013-1635","severity":"moderate","public_date":"2013-02-07T00:00:00Z","advisories":[],"bugzilla":"918196","bugzilla_description":"CVE-2013-1635 php, php53: Arbitrary locations file write due absent validation of soap.wsdl_cache_dir configuration directive value","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1635.json"},{"CVE":"CVE-2012-4388","severity":"moderate","public_date":"2012-09-02T00:00:00Z","advisories":[],"bugzilla":"854184","bugzilla_description":"CVE-2012-4388 php: header() injection detection bypass (incorrect fix for CVE-2011-1398)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4388.json"},{"CVE":"CVE-2012-2688","severity":"low","public_date":"2012-07-19T00:00:00Z","advisories":["RHSA-2013:1814","RHSA-2013:0514","RHSA-2013:1307"],"bugzilla":"828051","bugzilla_description":"CVE-2012-2688 php: Integer Signedness issues in _php_stream_scandir","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["php-0:5.1.6-43.el5_10","php53-0:5.3.3-21.el5","php-0:5.3.3-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2688.json"},{"CVE":"CVE-2012-3450","severity":null,"public_date":"2012-06-10T00:00:00Z","advisories":[],"bugzilla":"845372","bugzilla_description":"CVE-2012-3450 php: PDO array over-read crash","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3450.json"},{"CVE":"CVE-2012-2143","severity":"moderate","public_date":"2012-05-30T00:00:00Z","advisories":["RHSA-2012:1036","RHSA-2012:1047","RHSA-2012:1046","RHSA-2012:1037"],"bugzilla":"816956","bugzilla_description":"CVE-2012-2143 BSD crypt(): DES encrypted password weakness","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["postgresql-0:8.1.23-5.el5_8","postgresql84-0:8.4.12-1.el5_8","postgresql-0:8.4.12-1.el6_2","php-0:5.3.3-14.el6_3","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2143.json"},{"CVE":"CVE-2012-2386","severity":"moderate","public_date":"2012-05-21T00:00:00Z","advisories":["RHSA-2012:1047","RHSA-2012:1046"],"bugzilla":"823594","bugzilla_description":"CVE-2012-2386 php: Integer overflow leading to heap-buffer overflow in the Phar extension","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["php-0:5.3.3-14.el6_3","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2386.json"},{"CVE":"CVE-2012-2376","severity":"low","public_date":"2012-05-19T00:00:00Z","advisories":[],"bugzilla":"823464","bugzilla_description":"CVE-2012-2376 php: Buffer overflow in com_print_typeinfo() by parsing certain variant types","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2376.json"},{"CVE":"CVE-2012-2329","severity":"important","public_date":"2012-05-08T00:00:00Z","advisories":[],"bugzilla":"820000","bugzilla_description":"CVE-2012-2329 php: buffer overflow flaw in apache_request_headers() in PHP 5.4.x","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-697->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2329.json"},{"CVE":"CVE-2012-1823","severity":"critical","public_date":"2012-05-03T00:00:00Z","advisories":["RHSA-2012:0546","RHSA-2012:0568","RHSA-2012:0547","RHSA-2012:0569","RHSA-2012:0570"],"bugzilla":"818607","bugzilla_description":"CVE-2012-1823 php: command line arguments injection when run in CGI mode (VU#520827)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_6.2","php-0:5.3.3-3.el6_2.8","php-0:5.3.2-6.el6_0.2","php-0:5.2.10-2.el5s2","php53-0:5.3.3-7.el5_8","php-0:5.1.6-27.el5_6.4","php-0:5.1.6-34.el5_8","php-0:5.3.3-3.el6_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1823.json"},{"CVE":"CVE-2012-2311","severity":"critical","public_date":"2012-05-03T00:00:00Z","advisories":[],"bugzilla":"818907","bugzilla_description":"CVE-2012-2311 php: incomplete CVE-2012-1823 fix - incorrect check for =","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2311.json"},{"CVE":"CVE-2012-2336","severity":"moderate","public_date":"2012-05-03T00:00:00Z","advisories":["RHSA-2012:1045","RHSA-2012:1047","RHSA-2012:1046"],"bugzilla":"820708","bugzilla_description":"CVE-2012-2336 php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-228->CWE-400","affected_packages":["php-0:5.3.3-14.el6_3","php-0:5.1.6-39.el5_8","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2336.json"},{"CVE":"CVE-2012-2335","severity":"low","public_date":"2012-05-03T00:00:00Z","advisories":[],"bugzilla":"820874","bugzilla_description":"CVE-2012-2335 php: incomplete CVE-2012-1823 fix - insecure wrapper","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2335.json"},{"CVE":"CVE-2012-1162","severity":"moderate","public_date":"2012-03-20T00:00:00Z","advisories":[],"bugzilla":"802564","bugzilla_description":"CVE-2012-1162 libzip: heap overflow flaw when processing malformed zip file","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1162.json"},{"CVE":"CVE-2012-1163","severity":"moderate","public_date":"2012-03-20T00:00:00Z","advisories":[],"bugzilla":"803028","bugzilla_description":"CVE-2012-1163 libzip: integer overflow when processing malformed zip file","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1163.json"},{"CVE":"CVE-2012-6113","severity":"low","public_date":"2012-03-16T00:00:00Z","advisories":[],"bugzilla":"902365","bugzilla_description":"CVE-2012-6113 php (openssl extension): Process memory sensitive information disclosure due to missing variable initialization","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6113.json"},{"CVE":"CVE-2012-1171","severity":"moderate","public_date":"2012-03-13T00:00:00Z","advisories":[],"bugzilla":"802591","bugzilla_description":"CVE-2012-1171 php: libxml RSHUTDOWN function disables the hooks which are used to implement open_basedir","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1171.json"},{"CVE":"CVE-2012-1172","severity":"moderate","public_date":"2012-03-01T00:00:00Z","advisories":["RHSA-2012:1045","RHSA-2012:1047","RHSA-2012:1046"],"bugzilla":"799187","bugzilla_description":"CVE-2012-1172 php: $_FILES array indexes corruption","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["php-0:5.3.3-14.el6_3","php-0:5.1.6-39.el5_8","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1172.json"},{"CVE":"CVE-2012-1571","severity":"low","public_date":"2012-02-16T00:00:00Z","advisories":["RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"805197","bugzilla_description":"CVE-2012-1571 file: out of bounds read in CDF parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php53-0:5.3.3-23.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1571.json"},{"CVE":"CVE-2012-0830","severity":"critical","public_date":"2012-02-02T00:00:00Z","advisories":["RHSA-2012:0092","RHSA-2012:0093"],"bugzilla":"786686","bugzilla_description":"CVE-2012-0830 php: remote code exec flaw introduced in the CVE-2011-4885 hashdos fix","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-228->CWE-119","affected_packages":["php-0:5.3.3-3.el6_2.6","php53-0:5.3.3-1.el5_7.6","php-0:4.3.9-3.36","php-0:5.1.6-27.el5_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0830.json"},{"CVE":"CVE-2012-0831","severity":"low","public_date":"2012-02-02T00:00:00Z","advisories":["RHSA-2013:0514","RHSA-2013:1307"],"bugzilla":"789468","bugzilla_description":"CVE-2012-0831 php: PG(magic_quote_gpc) was not restored on shutdown","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php53-0:5.3.3-21.el5","php-0:5.3.3-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0831.json"},{"CVE":"CVE-2012-0057","severity":"moderate","public_date":"2012-01-11T00:00:00Z","advisories":["RHSA-2012:1045","RHSA-2012:1047","RHSA-2012:1046"],"bugzilla":"782657","bugzilla_description":"CVE-2012-0057 php: XSLT file writing vulnerability","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["php-0:5.3.3-14.el6_3","php-0:5.1.6-39.el5_8","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0057.json"},{"CVE":"CVE-2012-0788","severity":null,"public_date":"2012-01-11T00:00:00Z","advisories":[],"bugzilla":"783605","bugzilla_description":"CVE-2012-0788 php: crash when unserializing serialized PDORow object","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0788.json"},{"CVE":"CVE-2012-0789","severity":"low","public_date":"2012-01-11T00:00:00Z","advisories":["RHSA-2012:1045","RHSA-2012:1047","RHSA-2012:1046"],"bugzilla":"783609","bugzilla_description":"CVE-2012-0789 php: strtotime timezone memory leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["php-0:5.3.3-14.el6_3","php-0:5.1.6-39.el5_8","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0789.json"},{"CVE":"CVE-2011-4153","severity":"low","public_date":"2012-01-10T00:00:00Z","advisories":["RHSA-2012:1045","RHSA-2012:1047","RHSA-2012:1046"],"bugzilla":"782943","bugzilla_description":"CVE-2011-4153 php: zend_strndup() NULL pointer dereference may cause DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php-0:5.3.3-14.el6_3","php-0:5.1.6-39.el5_8","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4153.json"},{"CVE":"CVE-2012-0781","severity":"low","public_date":"2012-01-10T00:00:00Z","advisories":["RHSA-2012:1046"],"bugzilla":"782951","bugzilla_description":"CVE-2012-0781 php: tidy_diagnose() NULL pointer dereference may cause DoS","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php-0:5.3.3-14.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0781.json"},{"CVE":"CVE-2013-7345","severity":"moderate","public_date":"2011-12-31T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2014:1765"],"bugzilla":"1079846","bugzilla_description":"CVE-2013-7345 file: extensive backtracking in awk rule regular expression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["php-0:5.4.16-23.el7_0","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7345.json"},{"CVE":"CVE-2011-4885","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":["RHSA-2012:0019","RHSA-2012:0071","RHSA-2012:0033"],"bugzilla":"750547","bugzilla_description":"CVE-2011-4885 php: hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php-0:5.3.3-3.el6_2.5","php53-0:5.3.3-1.el5_7.5","php-0:4.3.9-3.35","php-0:5.1.6-27.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4885.json"},{"CVE":"CVE-2011-4718","severity":"moderate","public_date":"2011-11-23T00:00:00Z","advisories":[],"bugzilla":"996774","bugzilla_description":"CVE-2011-4718 php: session fixation vulnerability allows remote hijacking of sessions","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-384","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4718.json"},{"CVE":"CVE-2011-1398","severity":"moderate","public_date":"2011-11-06T00:00:00Z","advisories":["RHSA-2013:1814","RHSA-2013:0514","RHSA-2013:1307"],"bugzilla":"853329","bugzilla_description":"CVE-2011-1398 PHP: sapi_header_op() %0D sequence handling security bypass","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-0:5.1.6-43.el5_10","php53-0:5.3.3-21.el5","php-0:5.3.3-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1398.json"},{"CVE":"CVE-2011-4566","severity":"moderate","public_date":"2011-10-27T00:00:00Z","advisories":["RHSA-2012:0019","RHSA-2012:0071","RHSA-2012:0033"],"bugzilla":"758413","bugzilla_description":"CVE-2011-4566 php: integer overflow in exif_process_IFD_TAG() may lead to DoS or arbitrary memory disclosure","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-190","affected_packages":["php-0:5.3.3-3.el6_2.5","php53-0:5.3.3-1.el5_7.5","php-0:4.3.9-3.35","php-0:5.1.6-27.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4566.json"},{"CVE":"CVE-2011-3379","severity":"moderate","public_date":"2011-09-23T00:00:00Z","advisories":[],"bugzilla":"741020","bugzilla_description":"CVE-2011-3379 php: changes to is_a() in 5.3.7 may allow arbitrary code execution with certain code","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3379.json"},{"CVE":"CVE-2011-3182","severity":null,"public_date":"2011-08-19T00:00:00Z","advisories":[],"bugzilla":"732516","bugzilla_description":"CVE-2011-3182 php: multiple NULL pointer dereferences","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3182.json"},{"CVE":"CVE-2011-3189","severity":"important","public_date":"2011-08-17T00:00:00Z","advisories":[],"bugzilla":"732795","bugzilla_description":"CVE-2011-3189 php: 5.3.7 crypt() only returns the salt for MD5 hashes","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3189.json"},{"CVE":"CVE-2011-2896","severity":"moderate","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181","RHSA-2011:1635","RHSA-2012:0302"],"bugzilla":"727800","bugzilla_description":"CVE-2011-2896 David Koblas' GIF decoder LZW decoder buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gimp-2:2.6.9-4.el6_3.3","cups-1:1.3.7-30.el5","gimp-2:2.2.13-2.0.7.el5_8.5","cups-1:1.4.2-44.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2896.json"},{"CVE":"CVE-2011-2483","severity":"moderate","public_date":"2011-06-20T00:00:00Z","advisories":["RHSA-2011:1377","RHSA-2011:1378","RHSA-2011:1423"],"bugzilla":"715025","bugzilla_description":"CVE-2011-2483 crypt_blowfish: 8-bit character mishandling allows different password pairs to produce the same hash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["postgresql-0:7.4.30-3.el4","php53-0:5.3.3-1.el5_7.3","postgresql84-0:8.4.9-1.el5_7.1","postgresql-0:8.4.9-1.el6_1.1","postgresql-0:8.1.23-1.el5_7.2","php-0:5.3.3-3.el6_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2483.json"},{"CVE":"CVE-2011-2202","severity":"low","public_date":"2011-06-12T00:00:00Z","advisories":["RHSA-2011:1423","RHSA-2012:0071","RHSA-2012:0033"],"bugzilla":"713194","bugzilla_description":"CVE-2011-2202 php: file path injection vulnerability in RFC1867 file upload filename","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3","php-0:4.3.9-3.35","php-0:5.1.6-27.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2202.json"},{"CVE":"CVE-2011-1938","severity":"low","public_date":"2011-05-23T00:00:00Z","advisories":["RHSA-2011:1423"],"bugzilla":"709067","bugzilla_description":"CVE-2011-1938 php: stack-based buffer overflow in socket_connect()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1938.json"},{"CVE":"CVE-2011-1657","severity":null,"public_date":"2011-05-07T00:00:00Z","advisories":[],"bugzilla":"718253","bugzilla_description":"CVE-2011-1657 php: ZipArchive::addGlob() missing glob flags filtering","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1657.json"},{"CVE":"CVE-2011-1153","severity":"moderate","public_date":"2011-03-14T00:00:00Z","advisories":[],"bugzilla":"688378","bugzilla_description":"CVE-2011-1153 php: several format string vulnerabilities in PHP's Phar extension","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1153.json"},{"CVE":"CVE-2011-1148","severity":"moderate","public_date":"2011-03-13T00:00:00Z","advisories":["RHSA-2011:1423","RHSA-2012:0033"],"bugzilla":"688958","bugzilla_description":"CVE-2011-1148 php: use-after-free vulnerability in substr_replace()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3","php-0:5.1.6-27.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1148.json"},{"CVE":"CVE-2011-1092","severity":null,"public_date":"2011-03-08T00:00:00Z","advisories":[],"bugzilla":"683183","bugzilla_description":"CVE-2011-1092 php: integer overflow in shmop_read()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1092.json"},{"CVE":"CVE-2011-1469","severity":"low","public_date":"2011-02-24T00:00:00Z","advisories":["RHSA-2011:1423","RHSA-2012:0033"],"bugzilla":"690905","bugzilla_description":"CVE-2011-1469 php: DoS when using HTTP proxy with the FTP wrapper","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3","php-0:5.1.6-27.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1469.json"},{"CVE":"CVE-2011-1468","severity":"low","public_date":"2011-02-21T00:00:00Z","advisories":["RHSA-2011:1423"],"bugzilla":"690899","bugzilla_description":"CVE-2011-1468 php: Multiple memory leaks in the OpenSSL extension","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1468.json"},{"CVE":"CVE-2011-1464","severity":null,"public_date":"2011-02-20T00:00:00Z","advisories":[],"bugzilla":"689365","bugzilla_description":"CVE-2011-1464 php: Crash by retrieving string value of a variable, when high precision used","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1464.json"},{"CVE":"CVE-2011-0420","severity":null,"public_date":"2011-02-17T00:00:00Z","advisories":[],"bugzilla":"678885","bugzilla_description":"CVE-2011-0420 php: missing $size checks in grapheme_extract()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0420.json"},{"CVE":"CVE-2011-0708","severity":"low","public_date":"2011-02-14T00:00:00Z","advisories":["RHSA-2011:1423","RHSA-2012:0071","RHSA-2012:0033"],"bugzilla":"680972","bugzilla_description":"CVE-2011-0708 php: buffer over-read in Exif extension","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3","php-0:4.3.9-3.35","php-0:5.1.6-27.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0708.json"},{"CVE":"CVE-2011-0421","severity":"low","public_date":"2011-01-30T00:00:00Z","advisories":[],"bugzilla":"688735","bugzilla_description":"CVE-2011-0421 php/libzip: segfault with FL_UNCHANGED on empty archive in zip_name_locate()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0421.json"},{"CVE":"CVE-2010-4645","severity":"moderate","public_date":"2010-12-30T00:00:00Z","advisories":["RHSA-2011:0196","RHSA-2011:0195"],"bugzilla":"667806","bugzilla_description":"CVE-2010-4645 php: hang on numeric value 2.2250738585072011e-308 with x87 fpu","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php-0:5.3.2-6.el6_0.1","php53-0:5.3.3-1.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4645.json"},{"CVE":"CVE-2011-1470","severity":"low","public_date":"2010-12-20T00:00:00Z","advisories":[],"bugzilla":"690911","bugzilla_description":"CVE-2011-1470 php: crash when processing certain Zip archives","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1470.json"},{"CVE":"CVE-2011-1466","severity":"low","public_date":"2010-12-19T00:00:00Z","advisories":["RHSA-2011:1423","RHSA-2012:0071","RHSA-2012:0033"],"bugzilla":"689386","bugzilla_description":"CVE-2011-1466 php: Crash by converting serial day numbers (SDN) into Julian calendar","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3","php-0:4.3.9-3.35","php-0:5.1.6-27.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1466.json"},{"CVE":"CVE-2010-4698","severity":null,"public_date":"2010-12-08T00:00:00Z","advisories":[],"bugzilla":"670799","bugzilla_description":"CVE-2010-4698 php: GD crash in imagepstext with invalid anti-aliasing argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4698.json"},{"CVE":"CVE-2011-0752","severity":"low","public_date":"2010-12-08T00:00:00Z","advisories":[],"bugzilla":"674699","bugzilla_description":"CVE-2011-0752 php: extract() can overwrite $GLOBALS and $this when using EXTR_OVERWRITE","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0752.json"},{"CVE":"CVE-2011-1467","severity":null,"public_date":"2010-12-07T00:00:00Z","advisories":[],"bugzilla":"690894","bugzilla_description":"CVE-2011-1467 php: NumberFormatter: set a symbol value crash (DoS) on bogus  values","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1467.json"},{"CVE":"CVE-2010-4409","severity":"low","public_date":"2010-11-19T00:00:00Z","advisories":[],"bugzilla":"660382","bugzilla_description":"CVE-2010-4409 php: getSymbol() integer overflow vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4409.json"},{"CVE":"CVE-2011-1072","severity":"low","public_date":"2010-11-14T00:00:00Z","advisories":["RHSA-2011:1741"],"bugzilla":"681982","bugzilla_description":"CVE-2011-1072 CVE-2011-1144 php-pear: symlink vulnerability in PEAR installer","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-pear-1:1.9.4-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1072.json"},{"CVE":"CVE-2011-1144","severity":"low","public_date":"2010-11-14T00:00:00Z","advisories":[],"bugzilla":"681982","bugzilla_description":"CVE-2011-1072 CVE-2011-1144 php-pear: symlink vulnerability in PEAR installer","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1144.json"},{"CVE":"CVE-2010-4156","severity":"moderate","public_date":"2010-11-08T00:00:00Z","advisories":["RHSA-2011:0196"],"bugzilla":"651682","bugzilla_description":"CVE-2010-4156 php information disclosure via mb_strcut()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4156.json"},{"CVE":"CVE-2010-4150","severity":null,"public_date":"2010-11-02T00:00:00Z","advisories":[],"bugzilla":"656917","bugzilla_description":"CVE-2010-4150 php: Double free in the imap extension","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4150.json"},{"CVE":"CVE-2010-3709","severity":"low","public_date":"2010-10-19T00:00:00Z","advisories":["RHSA-2011:0195"],"bugzilla":"651206","bugzilla_description":"CVE-2010-3709 php: NULL pointer dereference in ZipArchive::getArchiveComment","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php-0:5.3.2-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3709.json"},{"CVE":"CVE-2010-4657","severity":"low","public_date":"2010-10-06T00:00:00Z","advisories":[],"bugzilla":"673101","bugzilla_description":"CVE-2010-4657 php: XMLWriter information leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4657.json"},{"CVE":"CVE-2010-3710","severity":"low","public_date":"2010-09-27T00:00:00Z","advisories":["RHSA-2011:0196"],"bugzilla":"646684","bugzilla_description":"CVE-2010-3710 php: DoS in filter_var() via long email string","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3710.json"},{"CVE":"CVE-2011-0753","severity":null,"public_date":"2010-09-06T00:00:00Z","advisories":[],"bugzilla":"674705","bugzilla_description":"CVE-2011-0753 php: race condition when handling many concurrent signals may lead to memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0753.json"},{"CVE":"CVE-2010-3294","severity":"low","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2012:0811"],"bugzilla":"634334","bugzilla_description":"CVE-2010-3294 php-pecl-apc: potential XSS in apc.php","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["php-pecl-apc-0:3.1.9-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3294.json"},{"CVE":"CVE-2010-2531","severity":"low","public_date":"2010-07-09T00:00:00Z","advisories":["RHSA-2010:0919"],"bugzilla":"617673","bugzilla_description":"CVE-2010-2531 php: information leak vulnerability in var_export()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["php-0:5.1.6-27.el5_5.3","php-0:4.3.9-3.31"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2531.json"},{"CVE":"CVE-2010-4700","severity":"low","public_date":"2010-07-01T00:00:00Z","advisories":[],"bugzilla":"670811","bugzilla_description":"CVE-2010-4700 php: mysqli mysqli_fetch_assoc does not escape its output when magic_quotes are enabled","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4700.json"},{"CVE":"CVE-2010-2225","severity":null,"public_date":"2010-06-18T00:00:00Z","advisories":[],"bugzilla":"605641","bugzilla_description":"CVE-2010-2225 php: SplObjectStorage unserialization flaws (MOPS-2010-061)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2225.json"},{"CVE":"CVE-2010-3065","severity":"moderate","public_date":"2010-05-31T00:00:00Z","advisories":["RHSA-2010:0919"],"bugzilla":"619030","bugzilla_description":"CVE-2010-3065 php: session serializer session data injection vulnerability (MOPS-2010-060)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-0:5.1.6-27.el5_5.3","php-0:4.3.9-3.31"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3065.json"},{"CVE":"CVE-2010-2094","severity":"moderate","public_date":"2010-05-14T00:00:00Z","advisories":[],"bugzilla":"598537","bugzilla_description":"CVE-2010-2094 php: Multiple format string flaws in the phar extension (MOPS-2010-025 MOPS-2010-026 MOPS-2010-027 MOPS-2010-028)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2094.json"},{"CVE":"CVE-2010-2950","severity":"moderate","public_date":"2010-05-14T00:00:00Z","advisories":["RHSA-2012:1047","RHSA-2012:1046"],"bugzilla":"835024","bugzilla_description":"CVE-2010-2950 php: Format string flaw in phar extension via phar_stream_flush() (MOPS-2010-024)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["php-0:5.3.3-14.el6_3","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2950.json"},{"CVE":"CVE-2010-2093","severity":"low","public_date":"2010-05-12T00:00:00Z","advisories":[],"bugzilla":"598474","bugzilla_description":"CVE-2010-2093 PHP: Context stream use-after-free on request shutdown (MOPS-2010-022)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2093.json"},{"CVE":"CVE-2010-1917","severity":"low","public_date":"2010-05-11T00:00:00Z","advisories":["RHSA-2010:0919"],"bugzilla":"617232","bugzilla_description":"CVE-2010-1917 php: fnmatch long pattern stack memory exhaustion (MOPS-2010-021)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php-0:5.1.6-27.el5_5.3","php-0:4.3.9-3.31"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1917.json"},{"CVE":"CVE-2010-1915","severity":null,"public_date":"2010-05-09T00:00:00Z","advisories":[],"bugzilla":"617211","bugzilla_description":"CVE-2010-1915 php: preg_quote interruption vulnerability (MOPS-2010-017)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1915.json"},{"CVE":"CVE-2010-1914","severity":null,"public_date":"2010-05-08T00:00:00Z","advisories":[],"bugzilla":"617180","bugzilla_description":"CVE-2010-1914 php: bitwise operators interruption vulnerabilities (MOPS-2010-014, MOPS-2010-015, MOPS-2010-016)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1914.json"},{"CVE":"CVE-2010-1868","severity":"low","public_date":"2010-05-07T00:00:00Z","advisories":[],"bugzilla":"617134","bugzilla_description":"CVE-2010-1868 php: sqlite: use of uninitialized memory triggered by empty SQL query (MOPS-2010-012, MOPS-2010-013)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1868.json"},{"CVE":"CVE-2010-1866","severity":"moderate","public_date":"2010-05-02T00:00:00Z","advisories":[],"bugzilla":"618167","bugzilla_description":"CVE-2010-1866 php: dechunk filter integer signedness error causing buffer overflow (MOPS-2010-003)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1866.json"},{"CVE":"CVE-2010-0397","severity":"low","public_date":"2010-03-12T00:00:00Z","advisories":["RHSA-2010:0919"],"bugzilla":"573779","bugzilla_description":"CVE-2010-0397 php: NULL pointer dereference in XML-RPC extension","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php-0:5.1.6-27.el5_5.3","php-0:4.3.9-3.31"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0397.json"},{"CVE":"CVE-2010-1128","severity":"low","public_date":"2010-02-25T00:00:00Z","advisories":["RHSA-2010:0919"],"bugzilla":"577582","bugzilla_description":"CVE-2010-1128 php: LCG entropy weakness","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["php-0:5.1.6-27.el5_5.3","php-0:4.3.9-3.31"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1128.json"},{"CVE":"CVE-2009-0689","severity":"critical","public_date":"2009-11-20T00:00:00Z","advisories":["RHSA-2014:0311","RHSA-2014:0312","RHSA-2009:1601","RHSA-2010:0154","RHSA-2010:0153","RHSA-2009:1531","RHSA-2009:1530"],"bugzilla":"539784","bugzilla_description":"CVE-2009-0689 array index error in dtoa implementation of many products","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["php-0:5.1.6-40.el5_9.2","seamonkey-0:1.0.9-50.el4_8","php-0:5.1.6-23.6.el5_3","php-0:5.1.6-27.el5_6.7","kdelibs-6:3.3.1-17.el4_8.1","php-0:5.1.6-44.el5_10","kdelibs-6:3.5.4-25.el5_4.1","thunderbird-0:2.0.0.24-2.el5_4","seamonkey-0:1.0.9-0.47.el3","thunderbird-0:1.5.0.12-25.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0689.json"},{"CVE":"CVE-2009-4017","severity":"moderate","public_date":"2009-11-20T00:00:00Z","advisories":["RHSA-2010:0040"],"bugzilla":"540459","bugzilla_description":"CVE-2009-4017 PHP: resource exhaustion attack via upload requests with lots of files","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4017.json"},{"CVE":"CVE-2009-3546","severity":"low","public_date":"2009-10-12T00:00:00Z","advisories":["RHSA-2010:0040","RHSA-2010:0003"],"bugzilla":"529213","bugzilla_description":"CVE-2009-3546 gd: insufficient input validation in _gdGetColors()","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","gd-0:2.0.33-9.4.el5_4.2","gd-0:2.0.28-5.4E.el4_8.1","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3546.json"},{"CVE":"CVE-2009-4142","severity":"moderate","public_date":"2009-10-06T00:00:00Z","advisories":["RHSA-2010:0040"],"bugzilla":"548516","bugzilla_description":"CVE-2009-4142 php: htmlspecialchars() insufficient checking of input for multi-byte encodings","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4142.json"},{"CVE":"CVE-2010-3870","severity":"moderate","public_date":"2009-09-27T00:00:00Z","advisories":["RHSA-2010:0919","RHSA-2011:0195"],"bugzilla":"649056","bugzilla_description":"CVE-2010-3870 php: XSS mitigation bypass via utf8_decode()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["php-0:5.3.2-6.el6_0.1","php-0:5.1.6-27.el5_5.3","php-0:4.3.9-3.31"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3870.json"},{"CVE":"CVE-2009-5016","severity":"moderate","public_date":"2009-09-27T00:00:00Z","advisories":["RHSA-2010:0919","RHSA-2011:0195"],"bugzilla":"652836","bugzilla_description":"CVE-2009-5016 php: XSS and SQL injection bypass via crafted overlong UTF-8 encoded string","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["php-0:5.3.2-6.el6_0.1","php-0:5.1.6-27.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5016.json"},{"CVE":"CVE-2009-3292","severity":"low","public_date":"2009-09-16T00:00:00Z","advisories":["RHSA-2010:0040"],"bugzilla":"524222","bugzilla_description":"CVE-2009-3292 php: exif extension: Multiple missing sanity checks in EXIF file processing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3292.json"},{"CVE":"CVE-2009-3291","severity":"low","public_date":"2009-09-16T00:00:00Z","advisories":["RHSA-2010:0040"],"bugzilla":"524228","bugzilla_description":"CVE-2009-3291 php: openssl extension: Incorrect verification of SSL certificate with NUL in name","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3291.json"},{"CVE":"CVE-2011-1471","severity":"low","public_date":"2009-07-27T00:00:00Z","advisories":["RHSA-2011:1423"],"bugzilla":"690915","bugzilla_description":"CVE-2011-1471 php: DoS (excessive CPU consumption) by processing certain Zip archive files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1471.json"},{"CVE":"CVE-2009-2687","severity":"moderate","public_date":"2009-06-18T00:00:00Z","advisories":["RHSA-2010:0040","RHSA-2009:1461"],"bugzilla":"506896","bugzilla_description":"CVE-2009-2687 php: exif_read_data crash on corrupted JPEG files","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2687.json"},{"CVE":"CVE-2008-5498","severity":"low","public_date":"2008-12-24T00:00:00Z","advisories":["RHSA-2009:0350","RHSA-2009:0337","RHSA-2009:0338"],"bugzilla":"478425","bugzilla_description":"CVE-2008-5498 php: libgd imagerotate() array index error memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-51.ent","php-0:5.1.6-23.2.el5_3","php-0:4.3.9-3.22.15","php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5498.json"},{"CVE":"CVE-2008-5814","severity":"low","public_date":"2008-12-19T00:00:00Z","advisories":["RHSA-2009:0350","RHSA-2009:0338"],"bugzilla":"480167","bugzilla_description":"CVE-2008-5814 php: XSS via PHP error messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["php-0:5.1.6-23.2.el5_3","php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5814.json"},{"CVE":"CVE-2009-1271","severity":"low","public_date":"2008-12-19T00:00:00Z","advisories":["RHSA-2009:0350"],"bugzilla":"494530","bugzilla_description":"CVE-2009-1271 php: crash on malformed input in json_decode()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1271.json"},{"CVE":"CVE-2008-5658","severity":"moderate","public_date":"2008-12-04T00:00:00Z","advisories":["RHSA-2009:0350"],"bugzilla":"474824","bugzilla_description":"CVE-2008-5658 php: ZipArchive::extractTo() Directory Traversal Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5658.json"},{"CVE":"CVE-2011-0755","severity":null,"public_date":"2008-11-17T00:00:00Z","advisories":[],"bugzilla":"674709","bugzilla_description":"CVE-2011-0755 php: mt_rand() does not check that max is greater than min","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0755.json"},{"CVE":"CVE-2008-3658","severity":"low","public_date":"2008-08-07T00:00:00Z","advisories":["RHSA-2009:0350","RHSA-2009:0337","RHSA-2009:0338"],"bugzilla":"459529","bugzilla_description":"CVE-2008-3658 php: buffer overflow in the imageloadfont function in gd extension","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-51.ent","php-0:5.1.6-23.2.el5_3","php-0:4.3.9-3.22.15","php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3658.json"},{"CVE":"CVE-2008-3660","severity":"low","public_date":"2008-08-06T00:00:00Z","advisories":["RHSA-2009:0350","RHSA-2009:0337","RHSA-2009:0338"],"bugzilla":"459572","bugzilla_description":"CVE-2008-3660 php: FastCGI module DoS via multiple dots preceding the extension","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-51.ent","php-0:5.1.6-23.2.el5_3","php-0:4.3.9-3.22.15","php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3660.json"},{"CVE":"CVE-2008-5557","severity":"moderate","public_date":"2008-08-05T00:00:00Z","advisories":["RHSA-2009:0350","RHSA-2009:0337","RHSA-2009:0338"],"bugzilla":"478848","bugzilla_description":"CVE-2008-5557 php: Heap-based buffer overflow in the mbstring extension via crafted string containing a HTML entity (arb code execution)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["php-0:4.3.2-51.ent","php-0:5.1.6-23.2.el5_3","php-0:4.3.9-3.22.15","php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5557.json"},{"CVE":"CVE-2008-2107","severity":"low","public_date":"2008-05-06T00:00:00Z","advisories":["RHSA-2008:0544","RHSA-2008:0582","RHSA-2008:0505","RHSA-2008:0546","RHSA-2008:0545"],"bugzilla":"445684","bugzilla_description":"CVE-2008-2107 PHP 32 bit weak random seed","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.12","php-0:4.3.2-48.ent","php-0:5.1.6-3.el4s1.10","php-0:4.1.2-2.20","php-0:5.1.6-20.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2107.json"},{"CVE":"CVE-2008-2108","severity":"low","public_date":"2008-05-06T00:00:00Z","advisories":["RHSA-2008:0544","RHSA-2008:0582","RHSA-2008:0505","RHSA-2008:0546","RHSA-2008:0545"],"bugzilla":"445685","bugzilla_description":"CVE-2008-2108 PHP weak 64 bit random seed","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.12","php-0:4.3.2-48.ent","php-0:5.1.6-3.el4s1.10","php-0:4.1.2-2.20","php-0:5.1.6-20.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2108.json"},{"CVE":"CVE-2008-2051","severity":"moderate","public_date":"2008-05-01T00:00:00Z","advisories":["RHSA-2008:0544","RHSA-2008:0582","RHSA-2008:0505","RHSA-2008:0546","RHSA-2008:0545"],"bugzilla":"445006","bugzilla_description":"CVE-2008-2051 PHP multibyte shell escape flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.12","php-0:4.3.2-48.ent","php-0:5.1.6-3.el4s1.10","php-0:4.1.2-2.20","php-0:5.1.6-20.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2051.json"},{"CVE":"CVE-2007-5898","severity":"moderate","public_date":"2007-11-08T00:00:00Z","advisories":["RHSA-2008:0544","RHSA-2008:0582","RHSA-2008:0505","RHSA-2008:0546","RHSA-2008:0545"],"bugzilla":"382411","bugzilla_description":"CVE-2007-5898 php htmlentities/htmlspecialchars multibyte sequences","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.12","php-0:4.3.2-48.ent","php-0:5.1.6-3.el4s1.10","php-0:4.1.2-2.20","php-0:5.1.6-20.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5898.json"},{"CVE":"CVE-2007-5899","severity":"low","public_date":"2007-11-08T00:00:00Z","advisories":["RHSA-2008:0544","RHSA-2008:0582","RHSA-2008:0505","RHSA-2008:0546","RHSA-2008:0545"],"bugzilla":"382431","bugzilla_description":"CVE-2007-5899 php session ID leakage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.12","php-0:4.3.2-48.ent","php-0:5.1.6-3.el4s1.10","php-0:4.1.2-2.20","php-0:5.1.6-20.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5899.json"},{"CVE":"CVE-2006-7228","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1077","RHSA-2007:1065","RHSA-2007:1076","RHSA-2007:1059","RHSA-2007:1068","RHSA-2007:1063","RHSA-2008:0546"],"bugzilla":"383371","bugzilla_description":"CVE-2006-7228 pcre integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["pcre-0:3.4-2.4","pcre-0:3.9-10.4","python-0:2.3.4-14.4.el4_6.1","pcre-0:6.6-2.el5_1.7","python-0:1.5.2-43.72.2","pcre-0:4.5-4.el4_6.6","php-0:4.1.2-2.20","python-0:2.2.3-6.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7228.json"},{"CVE":"CVE-2007-1660","severity":"important","public_date":"2007-11-05T00:00:00Z","advisories":["RHSA-2007:1065","RHSA-2007:1063","RHSA-2007:0968","RHSA-2008:0546","RHSA-2007:0967"],"bugzilla":"315881","bugzilla_description":"CVE-2007-1660 pcre regular expression flaws","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pcre-0:6.6-2.el5_0.1","pcre-0:3.4-2.4","pcre-0:3.9-10.4","php-0:4.1.2-2.20","pcre-0:4.5-4.el4_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1660.json"},{"CVE":"CVE-2007-4782","severity":"low","public_date":"2007-09-04T00:00:00Z","advisories":["RHSA-2008:0544","RHSA-2008:0582","RHSA-2008:0505","RHSA-2008:0545"],"bugzilla":"285881","bugzilla_description":"CVE-2007-4782 php crash in glob() and fnmatch() functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.12","php-0:4.3.2-48.ent","php-0:5.1.6-3.el4s1.10","php-0:5.1.6-20.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4782.json"},{"CVE":"CVE-2007-3998","severity":"low","public_date":"2007-08-30T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2007:0917","RHSA-2007:0889"],"bugzilla":"276081","bugzilla_description":"CVE-2007-3998 php floating point exception inside wordwrap","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-15.el5","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:5.2.3-3.el5s2","php-0:4.3.9-3.22.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3998.json"},{"CVE":"CVE-2007-4659","severity":"low","public_date":"2007-08-30T00:00:00Z","advisories":["RHSA-2007:0917"],"bugzilla":"276531","bugzilla_description":"CVE-2007-4659 php zend_alter_ini_entry() memory_limit interruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.2.3-3.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4659.json"},{"CVE":"CVE-2007-4658","severity":"low","public_date":"2007-08-30T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2007:0917","RHSA-2007:0889"],"bugzilla":"278011","bugzilla_description":"CVE-2007-4658 php money_format format string issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-15.el5","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:5.2.3-3.el5s2","php-0:4.3.9-3.22.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4658.json"},{"CVE":"CVE-2007-3996","severity":"moderate","public_date":"2007-08-30T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2007:0917","RHSA-2007:0888","RHSA-2007:0889"],"bugzilla":"278031","bugzilla_description":"CVE-2007-3996 php multiple integer overflows in gd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["php-0:5.1.6-15.el5","php-0:4.1.2-2.19","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:5.2.3-3.el5s2","php-0:4.3.9-3.22.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3996.json"},{"CVE":"CVE-2007-4670","severity":"low","public_date":"2007-08-30T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2007:0917","RHSA-2007:0888","RHSA-2007:0889"],"bugzilla":"278041","bugzilla_description":"CVE-2007-4670 php malformed cookie handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-15.el5","php-0:4.1.2-2.19","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:5.2.3-3.el5s2","php-0:4.3.9-3.22.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4670.json"},{"CVE":"CVE-2007-4661","severity":"moderate","public_date":"2007-08-30T00:00:00Z","advisories":["RHSA-2007:0917"],"bugzilla":"278161","bugzilla_description":"CVE-2007-4661 php size calculation in chunk_split","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.2.3-3.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4661.json"},{"CVE":"CVE-2007-2872","severity":"moderate","public_date":"2007-06-01T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2007:0888","RHSA-2007:0889"],"bugzilla":"242032","bugzilla_description":"CVE-2007-2872 php chunk_split integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["php-0:5.1.6-15.el5","php-0:4.1.2-2.19","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:4.3.9-3.22.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2872.json"},{"CVE":"CVE-2007-3799","severity":"low","public_date":"2007-06-01T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2007:0917","RHSA-2007:0888","RHSA-2007:0889"],"bugzilla":"250726","bugzilla_description":"CVE-2007-3799 php cross-site cookie insertion","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-15.el5","php-0:4.1.2-2.19","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:5.2.3-3.el5s2","php-0:4.3.9-3.22.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3799.json"},{"CVE":"CVE-2007-2756","severity":"low","public_date":"2007-05-16T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2008:0146","RHSA-2007:0889"],"bugzilla":"242033","bugzilla_description":"CVE-2007-2756 gd / php-gd ImageCreateFromPng infinite loop caused by truncated PNG","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["php-0:5.1.6-15.el5","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:4.3.9-3.22.9","gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2756.json"},{"CVE":"CVE-2007-1864","severity":"important","public_date":"2007-05-03T00:00:00Z","advisories":["RHSA-2007:0355","RHSA-2007:0348","RHSA-2007:0349"],"bugzilla":"239009","bugzilla_description":"CVE-2007-1864 php libxmlrpc library overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.5","php-0:5.1.6-3.el4s1.7","php-0:5.1.6-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1864.json"},{"CVE":"CVE-2007-2510","severity":"moderate","public_date":"2007-05-03T00:00:00Z","advisories":["RHSA-2007:0355","RHSA-2007:0348"],"bugzilla":"239012","bugzilla_description":"CVE-2007-2510 php make_http_soap_request flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.7","php-0:5.1.6-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2510.json"},{"CVE":"CVE-2007-2509","severity":"low","public_date":"2007-05-03T00:00:00Z","advisories":["RHSA-2007:0355","RHSA-2007:0888","RHSA-2007:0348","RHSA-2007:0349","RHSA-2007:0889"],"bugzilla":"239014","bugzilla_description":"CVE-2007-2509 php CRLF injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.1.2-2.19","php-0:4.3.9-3.22.5","php-0:5.1.6-3.el4s1.7","php-0:4.3.2-43.ent","php-0:5.1.6-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2509.json"},{"CVE":"CVE-2007-1718","severity":"low","public_date":"2007-03-26T00:00:00Z","advisories":["RHSA-2007:0153","RHSA-2007:0162","RHSA-2007:0155"],"bugzilla":"1618306","bugzilla_description":"CVE-2007-1718 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:5.1.6-3.el4s1.6","php-0:4.3.2-40.ent","php-0:5.1.6-11.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1718.json"},{"CVE":"CVE-2007-1711","severity":"important","public_date":"2007-03-25T00:00:00Z","advisories":["RHSA-2007:0154","RHSA-2007:0163","RHSA-2007:0155"],"bugzilla":"1618304","bugzilla_description":"CVE-2007-1711 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:4.1.2-2.17","php-0:4.3.2-40.ent","stronghold-php-0:4.1.2-15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1711.json"},{"CVE":"CVE-2007-1583","severity":"low","public_date":"2007-03-20T00:00:00Z","advisories":["RHSA-2007:0153","RHSA-2007:0162","RHSA-2007:0155"],"bugzilla":"1618303","bugzilla_description":"CVE-2007-1583 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:5.1.6-3.el4s1.6","php-0:4.3.2-40.ent","php-0:5.1.6-11.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1583.json"},{"CVE":"CVE-2007-1001","severity":"moderate","public_date":"2007-03-10T00:00:00Z","advisories":["RHSA-2007:0153","RHSA-2007:0162","RHSA-2007:0155"],"bugzilla":"1618291","bugzilla_description":"CVE-2007-1001 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:5.1.6-3.el4s1.6","php-0:4.3.2-40.ent","php-0:5.1.6-11.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1001.json"},{"CVE":"CVE-2007-1286","severity":"important","public_date":"2007-03-02T00:00:00Z","advisories":["RHSA-2007:0154","RHSA-2007:0163","RHSA-2007:0155"],"bugzilla":"1618297","bugzilla_description":"CVE-2007-1286 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:4.1.2-2.17","php-0:4.3.2-40.ent","stronghold-php-0:4.1.2-15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1286.json"},{"CVE":"CVE-2007-1285","severity":"moderate","public_date":"2007-03-01T00:00:00Z","advisories":["RHSA-2007:0154","RHSA-2007:0162","RHSA-2007:0163","RHSA-2007:0155","RHSA-2007:0082"],"bugzilla":"1618296","bugzilla_description":"CVE-2007-1285 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:5.1.6-3.el4s1.6","php-0:4.1.2-2.17","php-0:4.3.2-40.ent","stronghold-php-0:4.1.2-15","php-0:5.1.6-7.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1285.json"},{"CVE":"CVE-2007-0906","severity":"important","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"1618280","bugzilla_description":"CVE-2007-0906 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0906.json"},{"CVE":"CVE-2007-0907","severity":"low","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"1618281","bugzilla_description":"CVE-2007-0907 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0907.json"},{"CVE":"CVE-2007-0908","severity":"moderate","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"1618282","bugzilla_description":"CVE-2007-0908 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0908.json"},{"CVE":"CVE-2007-0909","severity":"low","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"1618283","bugzilla_description":"CVE-2007-0909 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0909.json"},{"CVE":"CVE-2007-0910","severity":"important","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"1618284","bugzilla_description":"CVE-2007-0910 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0910.json"},{"CVE":"CVE-2007-0988","severity":"moderate","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"1618285","bugzilla_description":"CVE-2007-0988 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0988.json"},{"CVE":"CVE-2007-1380","severity":"important","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"240157","bugzilla_description":"CVE-2007-1380 php session extension information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1380.json"},{"CVE":"CVE-2007-1825","severity":"important","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"240426","bugzilla_description":"CVE-2007-1825 php imap_mail_compose() buffer overflow via type.parameters","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1825.json"},{"CVE":"CVE-2007-1701","severity":"important","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"240431","bugzilla_description":"CVE-2007-1701 php session extension global variable clobber","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1701.json"},{"CVE":"CVE-2007-0455","severity":"low","public_date":"2007-01-26T00:00:00Z","advisories":["RHSA-2007:0153","RHSA-2008:0146","RHSA-2007:0162","RHSA-2007:0155"],"bugzilla":"224607","bugzilla_description":"CVE-2007-0455 gd: buffer overrun","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:5.1.6-3.el4s1.6","php-0:4.3.2-40.ent","gd-0:2.0.33-9.4.el5_1.1","php-0:5.1.6-11.el5","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0455.json"},{"CVE":"CVE-2006-7243","severity":"moderate","public_date":"2006-12-18T00:00:00Z","advisories":["RHSA-2014:0311","RHSA-2013:1307","RHSA-2013:1615"],"bugzilla":"662707","bugzilla_description":"CVE-2006-7243 php: paths with NULL character were considered valid","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-626","affected_packages":["php-0:5.3.3-26.el6","php-0:5.1.6-44.el5_10","php53-0:5.3.3-21.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7243.json"},{"CVE":"CVE-2006-5465","severity":"important","public_date":"2006-11-02T00:00:00Z","advisories":["RHSA-2006:0736","RHSA-2006:0730","RHSA-2006:0731"],"bugzilla":"213732","bugzilla_description":"CVE-2006-5465 PHP buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.4-1.el4s1.5","php-0:4.1.2-2.13","php-0:4.3.9-3.22","php-0:4.3.2-37.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5465.json"},{"CVE":"CVE-2006-4812","severity":"important","public_date":"2006-09-30T00:00:00Z","advisories":["RHSA-2006:0688","RHSA-2006:0708"],"bugzilla":"1618205","bugzilla_description":"CVE-2006-4812 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.4-1.el4s1.4","php-0:4.1.2-2.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4812.json"},{"CVE":"CVE-2006-4486","severity":"moderate","public_date":"2006-08-18T00:00:00Z","advisories":["RHSA-2006:0669","RHSA-2006:0688","RHSA-2006:0682"],"bugzilla":"1618188","bugzilla_description":"CVE-2006-4486 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.18","php-0:5.1.4-1.el4s1.4","php-0:4.3.2-36.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4486.json"},{"CVE":"CVE-2006-4482","severity":"moderate","public_date":"2006-08-17T00:00:00Z","advisories":["RHSA-2006:0669","RHSA-2006:0688","RHSA-2006:0682"],"bugzilla":"1618186","bugzilla_description":"CVE-2006-4482 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.18","php-0:5.1.4-1.el4s1.4","php-0:4.3.2-36.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4482.json"},{"CVE":"CVE-2006-4485","severity":"low","public_date":"2006-08-17T00:00:00Z","advisories":["RHSA-2006:0688"],"bugzilla":"1618187","bugzilla_description":"CVE-2006-4485 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.4-1.el4s1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4485.json"},{"CVE":"CVE-2006-4020","severity":"low","public_date":"2006-08-04T00:00:00Z","advisories":["RHSA-2006:0736","RHSA-2006:0669","RHSA-2006:0688","RHSA-2006:0682"],"bugzilla":"1618174","bugzilla_description":"CVE-2006-4020 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.18","php-0:5.1.4-1.el4s1.4","php-0:4.3.2-36.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4020.json"},{"CVE":"CVE-2006-4023","severity":"low","public_date":"2006-07-29T00:00:00Z","advisories":[],"bugzilla":"920517","bugzilla_description":"CVE-2006-4023 php: Improper validation of strings in ip2long function (remote attackers able to obtain network information and facilitate other attacks)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4023.json"},{"CVE":"CVE-2006-4484","severity":"moderate","public_date":"2006-07-16T00:00:00Z","advisories":["RHSA-2008:0146","RHSA-2006:0669","RHSA-2006:0688"],"bugzilla":"431568","bugzilla_description":"CVE-2006-4484 gd: GIF handling buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.18","php-0:5.1.4-1.el4s1.4","php-0:4.3.2-36.ent","gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4484.json"},{"CVE":"CVE-2006-3017","severity":"moderate","public_date":"2006-06-14T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2006:0567","RHSA-2006:0568"],"bugzilla":"1618131","bugzilla_description":"CVE-2006-3017 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-33.ent","php-0:4.3.9-3.15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3017.json"},{"CVE":"CVE-2006-3016","severity":"moderate","public_date":"2006-05-02T00:00:00Z","advisories":["RHSA-2006:0736","RHSA-2006:0669","RHSA-2006:0682"],"bugzilla":"1618130","bugzilla_description":"CVE-2006-3016 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.18","php-0:4.3.2-36.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3016.json"},{"CVE":"CVE-2006-1990","severity":"low","public_date":"2006-04-24T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2006:0501","RHSA-2006:0568"],"bugzilla":"1618082","bugzilla_description":"CVE-2006-1990 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-33.ent","php-0:4.3.9-3.15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1990.json"},{"CVE":"CVE-2006-1494","severity":"low","public_date":"2006-04-08T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2006:0567","RHSA-2006:0568"],"bugzilla":"1618037","bugzilla_description":"CVE-2006-1494 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-33.ent","php-0:4.3.9-3.15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1494.json"},{"CVE":"CVE-2006-0996","severity":"low","public_date":"2006-03-30T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2006:0501","RHSA-2006:0276"],"bugzilla":"1618022","bugzilla_description":"CVE-2006-0996 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-30.ent","php-0:4.3.9-3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0996.json"},{"CVE":"CVE-2006-1490","severity":"moderate","public_date":"2006-03-28T00:00:00Z","advisories":["RHSA-2006:0276"],"bugzilla":"1618036","bugzilla_description":"CVE-2006-1490 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-30.ent","php-0:4.3.9-3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1490.json"},{"CVE":"CVE-2006-0208","severity":"low","public_date":"2006-01-12T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2006:0501","RHSA-2006:0276"],"bugzilla":"1617878","bugzilla_description":"CVE-2006-0208 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-30.ent","php-0:4.3.9-3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0208.json"},{"CVE":"CVE-2005-3883","severity":"moderate","public_date":"2005-11-24T00:00:00Z","advisories":["RHSA-2006:0276"],"bugzilla":"1617845","bugzilla_description":"CVE-2005-3883 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-30.ent","php-0:4.3.9-3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3883.json"},{"CVE":"CVE-2005-3388","severity":"low","public_date":"2005-10-31T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2005:831","RHSA-2005:882","RHSA-2005:838"],"bugzilla":"1617821","bugzilla_description":"CVE-2005-3388 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-26.ent","php-0:4.3.9-3.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3388.json"},{"CVE":"CVE-2005-3389","severity":"low","public_date":"2005-10-31T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2005:831","RHSA-2005:882","RHSA-2005:838"],"bugzilla":"1617822","bugzilla_description":"CVE-2005-3389 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-26.ent","php-0:4.3.9-3.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3389.json"},{"CVE":"CVE-2005-3390","severity":"moderate","public_date":"2005-10-31T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2005:831","RHSA-2005:882","RHSA-2005:838"],"bugzilla":"1617823","bugzilla_description":"CVE-2005-3390 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-26.ent","php-0:4.3.9-3.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3390.json"},{"CVE":"CVE-2005-2933","severity":"moderate","public_date":"2005-10-04T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2005:850","RHSA-2006:0501","RHSA-2006:0276","RHSA-2005:848"],"bugzilla":"1617767","bugzilla_description":"CVE-2005-2933 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-30.ent","imap-1:2002d-12","libc-client-0:2002e-14","php-0:4.3.9-3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2933.json"},{"CVE":"CVE-2005-3353","severity":"moderate","public_date":"2005-10-02T00:00:00Z","advisories":["RHSA-2005:831"],"bugzilla":"1617816","bugzilla_description":"CVE-2005-3353 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-26.ent","php-0:4.3.9-3.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3353.json"},{"CVE":"CVE-2005-2498","severity":"important","public_date":"2005-08-14T00:00:00Z","advisories":["RHSA-2005:748"],"bugzilla":"1617729","bugzilla_description":"CVE-2005-2498 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-25.ent","php-0:4.3.9-3.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2498.json"},{"CVE":"CVE-2005-1921","severity":"important","public_date":"2005-06-29T00:00:00Z","advisories":["RHSA-2005:564"],"bugzilla":"1617676","bugzilla_description":"CVE-2005-1921 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-24.ent","php-0:4.3.9-3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1921.json"},{"CVE":"CVE-2005-1751","severity":"low","public_date":"2005-05-24T00:00:00Z","advisories":["RHSA-2005:564"],"bugzilla":"158995","bugzilla_description":"CVE-2005-1751 shtool: insecure temporary file creation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["php-0:4.3.2-24.ent","php-0:4.3.9-3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1751.json"},{"CVE":"CVE-2005-0524","severity":"moderate","public_date":"2005-03-31T00:00:00Z","advisories":["RHSA-2005:405","RHSA-2005:406"],"bugzilla":"1617533","bugzilla_description":"CVE-2005-0524 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-23.ent","php-0:4.3.9-3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0524.json"},{"CVE":"CVE-2005-0525","severity":"moderate","public_date":"2005-03-31T00:00:00Z","advisories":["RHSA-2005:405","RHSA-2005:406"],"bugzilla":"1617534","bugzilla_description":"CVE-2005-0525 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-23.ent","php-0:4.3.9-3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0525.json"},{"CVE":"CVE-2005-1042","severity":"moderate","public_date":"2005-03-31T00:00:00Z","advisories":["RHSA-2005:405","RHSA-2005:406"],"bugzilla":"1617600","bugzilla_description":"CVE-2005-1042 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-23.ent","php-0:4.3.9-3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1042.json"},{"CVE":"CVE-2005-1043","severity":"moderate","public_date":"2005-03-31T00:00:00Z","advisories":["RHSA-2005:405","RHSA-2005:406"],"bugzilla":"1617601","bugzilla_description":"CVE-2005-1043 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-23.ent","php-0:4.3.9-3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1043.json"},{"CVE":"CVE-2004-1018","severity":"low","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:882","RHSA-2005:032","RHSA-2005:816","RHSA-2005:031","RHSA-2004:687"],"bugzilla":"1617352","bugzilla_description":"CVE-2004-1018 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-19.ent","php-0:4.3.9-3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1018.json"},{"CVE":"CVE-2004-1019","severity":"important","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:882","RHSA-2005:032","RHSA-2005:816","RHSA-2005:031","RHSA-2004:687"],"bugzilla":"1617353","bugzilla_description":"CVE-2004-1019 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-19.ent","php-0:4.3.9-3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1019.json"},{"CVE":"CVE-2004-1065","severity":"important","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:032","RHSA-2004:687"],"bugzilla":"1617361","bugzilla_description":"CVE-2004-1065 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-19.ent","php-0:4.3.9-3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1065.json"},{"CVE":"CVE-2004-1392","severity":"low","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:405","RHSA-2005:406"],"bugzilla":"1617411","bugzilla_description":"CVE-2004-1392 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-23.ent","php-0:4.3.9-3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1392.json"},{"CVE":"CVE-2004-0958","severity":null,"public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:687"],"bugzilla":"1617331","bugzilla_description":"CVE-2004-0958 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-19.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0958.json"},{"CVE":"CVE-2004-0959","severity":null,"public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:687"],"bugzilla":"1617332","bugzilla_description":"CVE-2004-0959 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-19.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0959.json"},{"CVE":"CVE-2004-0595","severity":"moderate","public_date":"2004-07-14T00:00:00Z","advisories":["RHSA-2004:405","RHSA-2004:392","RHSA-2004:395","RHSA-2005:816"],"bugzilla":"1617234","bugzilla_description":"CVE-2004-0595 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-11.1.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0595.json"},{"CVE":"CVE-2004-0594","severity":"important","public_date":"2004-07-13T00:00:00Z","advisories":["RHSA-2004:405","RHSA-2004:392","RHSA-2004:395","RHSA-2005:816"],"bugzilla":"1617233","bugzilla_description":"CVE-2004-0594 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-11.1.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0594.json"},{"CVE":"CVE-2009-0754","severity":"moderate","public_date":"2004-02-27T00:00:00Z","advisories":["RHSA-2009:0350","RHSA-2009:0337","RHSA-2009:0338"],"bugzilla":"479272","bugzilla_description":"CVE-2009-0754 PHP mbstring.func_overload web server denial of service","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-0:4.3.2-51.ent","php-0:5.1.6-23.2.el5_3","php-0:4.3.9-3.22.15","php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0754.json"},{"CVE":"CVE-2003-1303","severity":"important","public_date":"2003-06-12T00:00:00Z","advisories":["RHSA-2006:0501","RHSA-2006:0276"],"bugzilla":"1617127","bugzilla_description":"CVE-2003-1303 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-30.ent","php-0:4.3.9-3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-1303.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pidgin-sipe_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pidgin-sipe_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pidgin-sipe_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pidgin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pidgin_security_api_results.json
new file mode 100644
index 0000000..63c2876
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pidgin_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-2640","severity":"moderate","public_date":"2017-03-10T00:00:00Z","advisories":["RHSA-2017:1854"],"bugzilla":"1430019","bugzilla_description":"CVE-2017-2640 pidgin: Out-of-bounds write in purple_markup_unescape_entity triggered by invalid XML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["pidgin-0:2.10.11-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2640.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-2376","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348848","bugzilla_description":"CVE-2016-2376 pidgin: MXIT read stage 0x3 Code Execution Vulnerability","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2377","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348852","bugzilla_description":"CVE-2016-2377 pidgin: MXIT HTTP Content-Length Buffer Overflow Vulnerability","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2377.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2378","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348854","bugzilla_description":"CVE-2016-2378 pidgin: MXIT get_utf8_string Code Execution Vulnerability","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2378.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-2380","severity":"low","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348856","bugzilla_description":"CVE-2016-2380 pidgin: MXIT mxit_convert_markup_tx Information Leak Vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2380.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-4323","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348857","bugzilla_description":"CVE-2016-4323 pidgin: MXIT Splash Image Arbitrary File Overwrite Vulnerability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-2365","severity":"low","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348858","bugzilla_description":"CVE-2016-2365 pidgin: MXIT Markup Command Denial of Service Vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-2366","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348862","bugzilla_description":"CVE-2016-2366 pidgin: MXIT Table Command Denial of Service Vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2366.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-2367","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348865","bugzilla_description":"CVE-2016-2367 pidgin: MXIT Avatar Length Memory Disclosure Vulnerability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-2368","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348867","bugzilla_description":"CVE-2016-2368 pidgin: MXIT g_snprintf Multiple Buffer Overflow Vulnerabilities","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2368.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-2369","severity":"low","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348869","bugzilla_description":"CVE-2016-2369 pidgin: MXIT CP_SOCK_REC_TERM Denial of Service Vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2369.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-2370","severity":"low","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348871","bugzilla_description":"CVE-2016-2370 pidgin: MXIT Custom Resource Denial of Service Vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2370.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-2371","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348873","bugzilla_description":"CVE-2016-2371 pidgin: MXIT Extended Profiles Code Execution Vulnerability","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2371.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2372","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348876","bugzilla_description":"CVE-2016-2372 pidgin: MXIT File Transfer Length Memory Disclosure Vulnerability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2372.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2016-2373","severity":"low","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348877","bugzilla_description":"CVE-2016-2373 pidgin: MXIT Contact Mood Denial of Service Vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2373.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-2374","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348878","bugzilla_description":"CVE-2016-2374 pidgin: MXIT MultiMX Message Code Execution Vulnerability","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2374.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2375","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348880","bugzilla_description":"CVE-2016-2375 pidgin: MXIT Suggested Contacts Memory Disclosure Vulnerability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2375.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-1000030","severity":"low","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348882","bugzilla_description":"CVE-2016-1000030 pidgin: X.509 Certificates Improperly Imported","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000030.json"},{"CVE":"CVE-2016-2379","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1363715","bugzilla_description":"CVE-2016-2379 pidgin: Eavesdropping hashed password when logging","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2379.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"6.8"},{"CVE":"CVE-2014-3694","severity":"low","public_date":"2014-10-22T00:00:00Z","advisories":["RHSA-2017:1854"],"bugzilla":"1154908","bugzilla_description":"CVE-2014-3694 pidgin: SSL/TLS plug-ins failed to check Basic Constraints","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":["pidgin-0:2.10.11-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3694.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2014-3695","severity":"moderate","public_date":"2014-10-22T00:00:00Z","advisories":["RHSA-2017:1854"],"bugzilla":"1154909","bugzilla_description":"CVE-2014-3695 pidgin: crash in Mxit protocol plug-in","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.10.11-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3695.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2014-3696","severity":"moderate","public_date":"2014-10-22T00:00:00Z","advisories":["RHSA-2017:1854"],"bugzilla":"1154910","bugzilla_description":"CVE-2014-3696 pidgin: denial of service parsing Groupwise server message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["pidgin-0:2.10.11-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3696.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2014-3698","severity":"moderate","public_date":"2014-10-22T00:00:00Z","advisories":["RHSA-2017:1854"],"bugzilla":"1154911","bugzilla_description":"CVE-2014-3698 pidgin: remote information leak via crafted XMPP message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":["pidgin-0:2.10.11-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2014-3775","severity":"moderate","public_date":"2014-05-07T00:00:00Z","advisories":[],"bugzilla":"1099776","bugzilla_description":"CVE-2014-3775 libgadu: server response memory corruption issue","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3775.json"},{"CVE":"CVE-2012-6152","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1056473","bugzilla_description":"CVE-2012-6152 pidgin: DoS when decoding non-UTF-8 strings in Yahoo protocol plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-172","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6152.json"},{"CVE":"CVE-2013-6477","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1056479","bugzilla_description":"CVE-2013-6477 pidgin: DoS when handling timestamps in the XMPP plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6477.json"},{"CVE":"CVE-2013-6478","severity":"low","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1056904","bugzilla_description":"CVE-2013-6478 pidgin: DoS when rendering long URLs","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770->CWE-400","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6478.json"},{"CVE":"CVE-2013-6479","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1056907","bugzilla_description":"CVE-2013-6479 pidgin: DoS when parsing certain HTTP response headers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6479.json"},{"CVE":"CVE-2013-6481","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1056908","bugzilla_description":"CVE-2013-6481 pidgin: DoS caused due to OOB read in Yahoo protocol plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-130->CWE-125","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6481.json"},{"CVE":"CVE-2013-6482","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1056913","bugzilla_description":"CVE-2013-6482 pidgin: DoS via multiple null pointer dereferences in MSN protocol plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6482.json"},{"CVE":"CVE-2013-6483","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1056978","bugzilla_description":"CVE-2013-6483 pidgin: Possible spoofing using iq replies in XMPP protocol plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-290","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6483.json"},{"CVE":"CVE-2013-6484","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1057481","bugzilla_description":"CVE-2013-6484 pidgin: DoS via specially-crafted stun messages","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6484.json"},{"CVE":"CVE-2013-6485","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1057484","bugzilla_description":"CVE-2013-6485 pidgin: Heap-based buffer overflow when parsing chunked HTTP responses","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6485.json"},{"CVE":"CVE-2013-6487","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1057489","bugzilla_description":"CVE-2013-6487 pidgin: Heap-based buffer overflow in Gadu-Gadu protocol plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6487.json"},{"CVE":"CVE-2013-6489","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1057490","bugzilla_description":"CVE-2013-6489 pidgin: Heap-based buffer overflow in MXit emoticon parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-122","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6489.json"},{"CVE":"CVE-2013-6490","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1057498","bugzilla_description":"CVE-2013-6490 pidgin: Heap-based buffer overflow in SIMPLE protocol plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-122","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6490.json"},{"CVE":"CVE-2014-0020","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1057502","bugzilla_description":"CVE-2014-0020 pidgin: DoS in IRC protocol plugin due to arguement parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-628","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0020.json"},{"CVE":"CVE-2013-0271","severity":"moderate","public_date":"2013-02-13T00:00:00Z","advisories":[],"bugzilla":"910039","bugzilla_description":"CVE-2013-0271 pidgin: MXit protocol insufficient sanitization of saved image file names","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0271.json"},{"CVE":"CVE-2013-0272","severity":"moderate","public_date":"2013-02-13T00:00:00Z","advisories":["RHSA-2013:0646"],"bugzilla":"910040","bugzilla_description":"CVE-2013-0272 pidgin: MXit protocol stack-based buffer overflow when processing HTTP headers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["pidgin-0:2.7.9-10.el6_4.1","pidgin-0:2.6.6-17.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0272.json"},{"CVE":"CVE-2013-0273","severity":"moderate","public_date":"2013-02-13T00:00:00Z","advisories":["RHSA-2013:0646"],"bugzilla":"910041","bugzilla_description":"CVE-2013-0273 pidgin: Meanwhile protocol missing nul termination of long Lotus Sametime usernames","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.7.9-10.el6_4.1","pidgin-0:2.6.6-17.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0273.json"},{"CVE":"CVE-2013-0274","severity":"moderate","public_date":"2013-02-13T00:00:00Z","advisories":["RHSA-2013:0646"],"bugzilla":"910042","bugzilla_description":"CVE-2013-0274 pidgin: missing nul termination of long values in UPnP responses","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.7.9-10.el6_4.1","pidgin-0:2.6.6-17.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0274.json"},{"CVE":"CVE-2012-3374","severity":"moderate","public_date":"2012-07-05T00:00:00Z","advisories":["RHSA-2012:1102"],"bugzilla":"837319","bugzilla_description":"CVE-2012-3374 pidgin: Stack-based buffer overwrite in MXit protocol libPurple plug-in","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-11.el5.4","pidgin-0:2.7.9-5.el6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3374.json"},{"CVE":"CVE-2012-2318","severity":"moderate","public_date":"2012-05-06T00:00:00Z","advisories":["RHSA-2012:1102"],"bugzilla":"819446","bugzilla_description":"CVE-2012-2318 pidgin: Improper validation of incoming plaintext messages in MSN protocol plug-in","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-11.el5.4","pidgin-0:2.7.9-5.el6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2318.json"},{"CVE":"CVE-2012-2214","severity":"moderate","public_date":"2012-05-06T00:00:00Z","advisories":[],"bugzilla":"819449","bugzilla_description":"CVE-2012-2214 pidgin: Invalid memory dereference in the XMPP protocol plug-in by processing serie of specially-crafted file transfer requests","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2214.json"},{"CVE":"CVE-2012-1178","severity":"moderate","public_date":"2012-01-17T00:00:00Z","advisories":["RHSA-2012:1102"],"bugzilla":"803298","bugzilla_description":"CVE-2012-1178 pidgin: Client abort in the MSN protocol plug-in by attempt to display certain, not UTF-8 encoded text","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-11.el5.4","pidgin-0:2.7.9-5.el6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1178.json"},{"CVE":"CVE-2012-1257","severity":"low","public_date":"2011-12-20T00:00:00Z","advisories":[],"bugzilla":"798279","bugzilla_description":"CVE-2012-1257 pidgin: libpurple no way to restrict \"private\" messages from being sent over session dbus","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1257.json"},{"CVE":"CVE-2011-4603","severity":"moderate","public_date":"2011-12-11T00:00:00Z","advisories":["RHSA-2011:1820"],"bugzilla":"766446","bugzilla_description":"CVE-2011-4603 pidgin: SILC remote crash on channel messages","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-5.el5_7.4","pidgin-0:2.6.6-10.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4603.json"},{"CVE":"CVE-2011-4602","severity":"low","public_date":"2011-12-10T00:00:00Z","advisories":["RHSA-2011:1820","RHSA-2011:1821"],"bugzilla":"761510","bugzilla_description":"CVE-2011-4602 pidgin: Multiple NULL pointer deference flaws by processing certain Jingle stanzas in the XMPP protocol plug-in","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-5.el5_7.4","pidgin-0:2.6.6-10.el4","pidgin-0:2.7.9-3.el6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4602.json"},{"CVE":"CVE-2011-4601","severity":"moderate","public_date":"2011-12-10T00:00:00Z","advisories":["RHSA-2011:1820","RHSA-2011:1821"],"bugzilla":"761517","bugzilla_description":"CVE-2011-4601 pidgin (libpurple): Invalid UTF-8 string handling in OSCAR messages","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-5.el5_7.4","pidgin-0:2.6.6-10.el4","pidgin-0:2.7.9-3.el6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4601.json"},{"CVE":"CVE-2011-3594","severity":"moderate","public_date":"2011-09-29T00:00:00Z","advisories":["RHSA-2011:1371"],"bugzilla":"743481","bugzilla_description":"CVE-2011-3594 libpurple: invalid UTF-8 string handling in SILC messages","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-7.el4","pidgin-0:2.6.6-5.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3594.json"},{"CVE":"CVE-2011-3184","severity":null,"public_date":"2011-08-20T00:00:00Z","advisories":[],"bugzilla":"732405","bugzilla_description":"CVE-2011-3184 pidgin: Remote crash in MSN protocol plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3184.json"},{"CVE":"CVE-2011-2943","severity":"low","public_date":"2011-07-20T00:00:00Z","advisories":[],"bugzilla":"722939","bugzilla_description":"CVE-2011-2943 pidgin: Crash in IRC protocol plug-in by listing set of users (/who command) upon session startup","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2943.json"},{"CVE":"CVE-2011-4939","severity":"low","public_date":"2011-07-08T00:00:00Z","advisories":[],"bugzilla":"803296","bugzilla_description":"CVE-2011-4939 pidgin: NULL pointer dereference in the XMPP protocol plug-in by renaming user name","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4939.json"},{"CVE":"CVE-2011-2485","severity":"low","public_date":"2011-06-23T00:00:00Z","advisories":[],"bugzilla":"715337","bugzilla_description":"CVE-2011-2485 gdk-pixbuf: incorrect error detection in the GIF image loader","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2485.json"},{"CVE":"CVE-2011-1091","severity":"low","public_date":"2011-03-10T00:00:00Z","advisories":["RHSA-2011:0616","RHSA-2011:1371"],"bugzilla":"683031","bugzilla_description":"CVE-2011-1091 Pidgin: Multiple NULL pointer dereference flaws in Yahoo protocol plug-in","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["pidgin-0:2.7.9-3.el6","pidgin-0:2.6.6-7.el4","pidgin-0:2.6.6-5.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1091.json"},{"CVE":"CVE-2011-4922","severity":"low","public_date":"2011-02-10T00:00:00Z","advisories":["RHSA-2011:0616"],"bugzilla":"684685","bugzilla_description":"CVE-2011-4922 Cipher API information disclosure in pidgin","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["pidgin-0:2.7.9-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4922.json"},{"CVE":"CVE-2010-4528","severity":"moderate","public_date":"2010-12-26T00:00:00Z","advisories":[],"bugzilla":"665421","bugzilla_description":"CVE-2010-4528 Pidgin: MSN DirectConnect DoS (crash) after receiving a short P2P message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4528.json"},{"CVE":"CVE-2010-3711","severity":"moderate","public_date":"2010-10-20T00:00:00Z","advisories":["RHSA-2010:0788","RHSA-2010:0890"],"bugzilla":"641921","bugzilla_description":"CVE-2010-3711 Pidgin (libpurple): Multiple DoS (crash) flaws by processing of unsanitized Base64 decoder values","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-6.el6_0","pidgin-0:2.6.6-5.el4_8","pidgin-0:2.6.6-5.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3711.json"},{"CVE":"CVE-2010-2528","severity":"low","public_date":"2010-07-21T00:00:00Z","advisories":[],"bugzilla":"617105","bugzilla_description":"CVE-2010-2528 pidgin: ICQ X-Status denial of service (NULL deref)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2528.json"},{"CVE":"CVE-2010-1624","severity":"low","public_date":"2010-05-12T00:00:00Z","advisories":["RHSA-2010:0788"],"bugzilla":"589973","bugzilla_description":"CVE-2010-1624 Pidgin: MSN SLP emoticon DoS (NULL pointer dereference)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["pidgin-0:2.6.6-5.el4_8","pidgin-0:2.6.6-5.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1624.json"},{"CVE":"CVE-2010-0420","severity":"low","public_date":"2010-02-18T00:00:00Z","advisories":["RHSA-2010:0115"],"bugzilla":"565786","bugzilla_description":"CVE-2010-0420 pidgin: Finch XMPP MUC Crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-1.el5","pidgin-0:2.6.6-1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0420.json"},{"CVE":"CVE-2010-0423","severity":"low","public_date":"2010-02-18T00:00:00Z","advisories":["RHSA-2010:0115"],"bugzilla":"565792","bugzilla_description":"CVE-2010-0423 pidgin: Smiley Denial of Service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-1.el5","pidgin-0:2.6.6-1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0423.json"},{"CVE":"CVE-2010-0013","severity":"important","public_date":"2009-12-27T00:00:00Z","advisories":["RHSA-2010:0044"],"bugzilla":"552483","bugzilla_description":"CVE-2010-0013 pidgin/libpurple: MSN custom smiley request directory traversal file disclosure","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["pidgin-0:2.6.5-1.el4.1","pidgin-0:2.6.5-1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0013.json"},{"CVE":"CVE-2010-0277","severity":"moderate","public_date":"2009-12-27T00:00:00Z","advisories":["RHSA-2010:0115"],"bugzilla":"554335","bugzilla_description":"CVE-2010-0277 pidgin MSN protocol plugin memory corruption","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-1.el5","pidgin-0:2.6.6-1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0277.json"},{"CVE":"CVE-2009-3615","severity":"moderate","public_date":"2009-10-10T00:00:00Z","advisories":["RHSA-2009:1536","RHSA-2009:1535"],"bugzilla":"529357","bugzilla_description":"CVE-2009-3615 Pidgin: Invalid pointer dereference (crash) after receiving contacts from SIM IM client","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.3-2.el4","pidgin-0:2.6.3-2.el5","pidgin-0:1.5.1-6.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3615.json"},{"CVE":"CVE-2009-2703","severity":"low","public_date":"2009-09-03T00:00:00Z","advisories":["RHSA-2009:1535","RHSA-2009:1453"],"bugzilla":"521823","bugzilla_description":"CVE-2009-2703 Pidgin: NULL pointer dereference by handling IRC topic(s) (DoS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["pidgin-0:2.6.2-2.el4","pidgin-0:2.6.2-2.el5","pidgin-0:1.5.1-6.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2703.json"},{"CVE":"CVE-2009-3083","severity":"low","public_date":"2009-09-03T00:00:00Z","advisories":["RHSA-2009:1535","RHSA-2009:1453"],"bugzilla":"521832","bugzilla_description":"CVE-2009-3083 Pidgin: NULL pointer dereference by processing incomplete MSN SLP invite (DoS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["pidgin-0:2.6.2-2.el4","pidgin-0:2.6.2-2.el5","pidgin-0:1.5.1-6.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3083.json"},{"CVE":"CVE-2009-3085","severity":"moderate","public_date":"2009-09-03T00:00:00Z","advisories":["RHSA-2009:1453"],"bugzilla":"521853","bugzilla_description":"CVE-2009-3085 Pidgin: NULL pointer dereference by processing a custom smiley (DoS)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["pidgin-0:2.6.2-2.el4","pidgin-0:2.6.2-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3085.json"},{"CVE":"CVE-2009-2694","severity":"critical","public_date":"2009-08-18T00:00:00Z","advisories":["RHSA-2009:1218"],"bugzilla":"514957","bugzilla_description":"CVE-2009-2694 pidgin: insufficient input validation in msn_slplink_process_msg()","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-228->CWE-119","affected_packages":["pidgin-0:2.5.9-1.el5","pidgin-0:2.5.9-1.el4","pidgin-0:1.5.1-4.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2694.json"},{"CVE":"CVE-2009-1889","severity":"moderate","public_date":"2009-05-28T00:00:00Z","advisories":["RHSA-2009:1139"],"bugzilla":"508738","bugzilla_description":"CVE-2009-1889 pidgin: DoS via specially-crafted ICQWebMessage","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.5.8-1.el4","pidgin-0:2.5.8-1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1889.json"},{"CVE":"CVE-2009-1374","severity":"low","public_date":"2009-05-03T00:00:00Z","advisories":["RHSA-2009:1060"],"bugzilla":"500490","bugzilla_description":"CVE-2009-1374 pidgin DoS when decrypting qq packets","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.5.5-3.el5","pidgin-0:2.5.5-2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1374.json"},{"CVE":"CVE-2009-1373","severity":"moderate","public_date":"2009-05-02T00:00:00Z","advisories":["RHSA-2009:1060","RHSA-2009:1059"],"bugzilla":"500488","bugzilla_description":"CVE-2009-1373 pidgin file transfer buffer overflow","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["pidgin-0:2.5.5-3.el5","pidgin-0:2.5.5-2.el4","pidgin-0:1.5.1-3.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1373.json"},{"CVE":"CVE-2009-1376","severity":"important","public_date":"2009-05-02T00:00:00Z","advisories":["RHSA-2009:1060","RHSA-2009:1059"],"bugzilla":"500493","bugzilla_description":"CVE-2009-1376 pidgin incomplete fix for CVE-2008-2927","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["pidgin-0:2.5.5-3.el5","pidgin-0:2.5.5-2.el4","pidgin-0:1.5.1-3.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1376.json"},{"CVE":"CVE-2009-1375","severity":"low","public_date":"2009-03-20T00:00:00Z","advisories":["RHSA-2009:1060"],"bugzilla":"500491","bugzilla_description":"CVE-2009-1375 pidgin PurpleCircBuffer corruption","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.5.5-3.el5","pidgin-0:2.5.5-2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1375.json"},{"CVE":"CVE-2009-3026","severity":"low","public_date":"2009-01-15T00:00:00Z","advisories":["RHSA-2009:1453"],"bugzilla":"519224","bugzilla_description":"CVE-2009-3026 pidgin: ignores SSL/TLS requirements with old jabber servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["pidgin-0:2.6.2-2.el4","pidgin-0:2.6.2-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3026.json"},{"CVE":"CVE-2008-3532","severity":"moderate","public_date":"2008-07-28T00:00:00Z","advisories":["RHSA-2008:1023"],"bugzilla":"457907","bugzilla_description":"CVE-2008-3532 pidgin: NSS plugin doesn't verify SSL certificates","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pidgin-0:2.5.2-6.el4","pidgin-0:2.5.2-6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3532.json"},{"CVE":"CVE-2008-2927","severity":"important","public_date":"2008-07-04T00:00:00Z","advisories":["RHSA-2008:0584"],"bugzilla":"453764","bugzilla_description":"CVE-2008-2927 pidgin MSN integer overflow","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["pidgin-0:1.5.1-2.el4","pidgin-0:2.3.1-2.el5_2","pidgin-0:1.5.1-2.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2927.json"},{"CVE":"CVE-2008-2955","severity":"moderate","public_date":"2008-06-28T00:00:00Z","advisories":["RHSA-2008:1023"],"bugzilla":"453736","bugzilla_description":"CVE-2008-2955 pidgin: remote DoS via MSN message with crafted file name","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pidgin-0:2.5.2-6.el4","pidgin-0:2.5.2-6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2955.json"},{"CVE":"CVE-2008-2957","severity":"low","public_date":"2007-05-11T00:00:00Z","advisories":["RHSA-2008:1023"],"bugzilla":"453740","bugzilla_description":"CVE-2008-2957 pidgin: unrestricted download of arbitrary files triggered via UPnP","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.5.2-6.el4","pidgin-0:2.5.2-6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2957.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry-qt4_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry-qt4_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry-qt4_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry-qt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry-qt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry-qt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinentry_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinfo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinfo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pinfo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pixman-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pixman-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pixman-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pixman_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pixman_security_api_results.json
new file mode 100644
index 0000000..82d2b1d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pixman_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5297","severity":"moderate","public_date":"2015-09-16T00:00:00Z","advisories":[],"bugzilla":"1651585","bugzilla_description":"CVE-2015-5297 pixman: general_composite_rect() integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5297.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2014-9766","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1311882","bugzilla_description":"CVE-2014-9766 pixman: integer overflow in create_bits function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9766.json"},{"CVE":"CVE-2013-6425","severity":"important","public_date":"2013-07-16T00:00:00Z","advisories":["RHSA-2013:1869"],"bugzilla":"1037975","bugzilla_description":"CVE-2013-6425 pixman: integer underflow when handling trapezoids","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["pixman-0:0.22.0-2.2.el5_10","pixman-0:0.26.2-5.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6425.json"},{"CVE":"CVE-2013-1591","severity":"moderate","public_date":"2012-09-15T00:00:00Z","advisories":["RHSA-2013:0746","RHSA-2013:0687"],"bugzilla":"910149","bugzilla_description":"CVE-2013-1591 pixman: stack-based buffer overflow","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rhev-hypervisor6-0:6.4-20130415.0.el6_4","pixman-0:0.26.2-5.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1591.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pkgconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pkgconfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pkgconfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-base-java_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-base-java_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-base-java_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-ca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-ca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-ca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-kra_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-kra_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-kra_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-symkey_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-symkey_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-symkey_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pki-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plasma-scriptengine-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plasma-scriptengine-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plasma-scriptengine-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-core-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-core-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-core-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-graphics-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-graphics-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-graphics-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-plugin-label_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-plugin-label_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-plugin-label_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-plugin-two-step_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-plugin-two-step_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-plugin-two-step_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-scripts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-scripts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-scripts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-system-theme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-system-theme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-system-theme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-theme-charge_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-theme-charge_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth-theme-charge_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/plymouth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pm-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pm-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pm-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pmdk-convert_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pmdk-convert_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pmdk-convert_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pmempool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pmempool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pmempool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pnm2ppa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pnm2ppa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pnm2ppa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/po4a_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/po4a_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/po4a_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-newrole_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-newrole_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-newrole_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-sandbox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-sandbox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils-sandbox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils_security_api_results.json
new file mode 100644
index 0000000..d203cb7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/policycoreutils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1063","severity":"low","public_date":"2018-02-28T00:00:00Z","advisories":["RHSA-2018:0913"],"bugzilla":"1550122","bugzilla_description":"CVE-2018-1063 policycoreutils: Relabelling of symbolic links in /tmp and /var/tmp change the context of their target instead","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59->CWE-282","affected_packages":["policycoreutils-0:2.5-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1063.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.9"},{"CVE":"CVE-2016-7545","severity":"important","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:0535","RHSA-2017:0536","RHSA-2016:2702"],"bugzilla":"1378577","bugzilla_description":"CVE-2016-7545 policycoreutils: SELinux sandbox escape via TIOCSTI ioctl","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["policycoreutils-0:2.0.83-30.1.el6_8","policycoreutils-0:2.2.5-21.el7_2","policycoreutils-0:2.5-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7545.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2014-3215","severity":"important","public_date":"2012-12-08T00:00:00Z","advisories":["RHSA-2015:0864","RHBA-2015:2161"],"bugzilla":"1095855","bugzilla_description":"CVE-2014-3215 policycoreutils: local privilege escalation via seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-270","affected_packages":["kernel-0:2.6.32-504.16.2.el6","libcap-ng-0:0.7.5-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3215.json"},{"CVE":"CVE-2011-1011","severity":"important","public_date":"2011-02-22T00:00:00Z","advisories":["RHSA-2011:0414"],"bugzilla":"633544","bugzilla_description":"CVE-2011-1011 policycoreutils: insecure temporary directory handling in seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["policycoreutils-0:2.0.83-19.8.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1011.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-kde_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-kde_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-kde_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-pkla-compat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-pkla-compat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-pkla-compat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-qt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-qt_security_api_results.json
new file mode 100644
index 0000000..3de41e3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit-qt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-5033","severity":"important","public_date":"2014-03-24T00:00:00Z","advisories":["RHSA-2014:1359"],"bugzilla":"1094890","bugzilla_description":"CVE-2014-5033 polkit-qt: insecure calling of polkit","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-362","affected_packages":["polkit-qt-0:0.103.0-10.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5033.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit_security_api_results.json
new file mode 100644
index 0000000..d2e435f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/polkit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-6133","severity":"important","public_date":"2019-01-09T00:00:00Z","advisories":["RHSA-2019:0230","RHSA-2019:2699","RHSA-2019:0420","RHSA-2019:2978","RHSA-2019:0832"],"bugzilla":"1664212","bugzilla_description":"CVE-2019-6133 polkit: Temporary auth hijacking via PID reuse and non-atomic fork","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-697->CWE-284","affected_packages":["polkit-0:0.96-7.el6_6.1","polkit-0:0.112-12.el7_4.1","polkit-0:0.112-18.el7_6.1","polkit-0:0.96-11.el6_10.1","polkit-0:0.112-14.el7_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6133.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2018-19788","severity":"moderate","public_date":"2018-12-03T00:00:00Z","advisories":["RHSA-2019:2046","RHSA-2019:3232"],"bugzilla":"1655925","bugzilla_description":"CVE-2018-19788 polkit: Improper handling of user with uid > INT_MAX leading to authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["polkit-0:0.112-22.el7","polkit-0:0.112-18.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19788.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1116","severity":"low","public_date":"2018-07-10T00:00:00Z","advisories":["RHSA-2020:1135"],"bugzilla":"1595404","bugzilla_description":"CVE-2018-1116 polkit: Improper authorization in polkit_backend_interactive_authority_check_authorization function in polkitd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["polkit-0:0.112-26.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1116.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-2568","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1300746","bugzilla_description":"CVE-2016-2568 polkit: Program run via pkexec as unprivileged user can escape to parent session via TIOCSTI ioctl","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2568.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2015-3256","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2016:0189"],"bugzilla":"1245684","bugzilla_description":"CVE-2015-3256 polkit: Memory corruption via javascript rule evaluation","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["polkit-0:0.112-6.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3256.json"},{"CVE":"CVE-2015-3218","severity":"low","public_date":"2015-05-29T00:00:00Z","advisories":[],"bugzilla":"1228738","bugzilla_description":"CVE-2015-3218 polkit: crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3218.json"},{"CVE":"CVE-2015-4625","severity":"low","public_date":"2015-05-29T00:00:00Z","advisories":[],"bugzilla":"1233808","bugzilla_description":"CVE-2015-4625 polkit: potential information disclosure vulnerability due to cookie counter wrapping","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-190->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4625.json"},{"CVE":"CVE-2015-3255","severity":"moderate","public_date":"2014-09-07T00:00:00Z","advisories":[],"bugzilla":"1245673","bugzilla_description":"CVE-2015-3255 polkit: Heap-corruption on duplicate ids","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3255.json"},{"CVE":"CVE-2014-5033","severity":"important","public_date":"2014-03-24T00:00:00Z","advisories":["RHSA-2014:1359"],"bugzilla":"1094890","bugzilla_description":"CVE-2014-5033 polkit-qt: insecure calling of polkit","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-362","affected_packages":["polkit-qt-0:0.103.0-10.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5033.json"},{"CVE":"CVE-2013-4288","severity":"important","public_date":"2013-09-18T00:00:00Z","advisories":["RHSA-2013:1270"],"bugzilla":"1002375","bugzilla_description":"CVE-2013-4288 polkit: unix-process subject for authorization is racy","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-362","affected_packages":["polkit-0:0.96-5.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4288.json"},{"CVE":"CVE-2011-4945","severity":"important","public_date":"2011-12-09T00:00:00Z","advisories":[],"bugzilla":"807712","bugzilla_description":"CVE-2011-4945 polkit: Members of 'wheel' group allowed to become root without providing a password","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4945.json"},{"CVE":"CVE-2011-1485","severity":"important","public_date":"2011-04-19T00:00:00Z","advisories":["RHSA-2011:0455"],"bugzilla":"692922","bugzilla_description":"CVE-2011-1485 polkit: polkitd/pkexec vulnerability","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["polkit-0:0.96-2.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1485.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-qt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-qt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-qt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler_security_api_results.json
new file mode 100644
index 0000000..a24fefd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/poppler_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-21009","severity":"moderate","public_date":"2019-09-05T00:00:00Z","advisories":["RHSA-2020:1074"],"bugzilla":"1753850","bugzilla_description":"CVE-2018-21009 poppler: integer overflow in Parser::makeStream in Parser.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["poppler-0:0.26.5-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-21009.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2019-9959","severity":"low","public_date":"2019-07-23T00:00:00Z","advisories":["RHSA-2020:1074","RHSA-2019:2713"],"bugzilla":"1732340","bugzilla_description":"CVE-2019-9959 poppler: integer overflow in JPXStream::init function leading to memory consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["poppler-0:0.66.0-11.el8_0.12","poppler-0:0.26.5-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9959.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-14494","severity":"low","public_date":"2019-07-11T00:00:00Z","advisories":["RHSA-2020:3977"],"bugzilla":"1797453","bugzilla_description":"CVE-2019-14494 poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["poppler-0:0.26.5-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14494.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-12360","severity":"moderate","public_date":"2019-05-27T00:00:00Z","advisories":[],"bugzilla":"1850876","bugzilla_description":"CVE-2019-12360 xpdf: buffer over-read via crafted PDF document leads to DoS or memory leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12360.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-12293","severity":"moderate","public_date":"2019-05-23T00:00:00Z","advisories":["RHSA-2020:1074","RHSA-2019:2713"],"bugzilla":"1713582","bugzilla_description":"CVE-2019-12293 poppler: heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["poppler-0:0.66.0-11.el8_0.12","poppler-0:0.26.5-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12293.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2019-11026","severity":"low","public_date":"2019-04-09T00:00:00Z","advisories":[],"bugzilla":"1699862","bugzilla_description":"CVE-2019-11026 poppler: infinite recursion in function FontInfoScanner::scanFonts in FontInfo.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11026.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-10871","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":["RHSA-2020:1074","RHSA-2019:2713"],"bugzilla":"1696636","bugzilla_description":"CVE-2019-10871 poppler: heap-based buffer over-read in function PSOutputDev::checkPageSlice in PSOutputDev.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["poppler-0:0.66.0-11.el8_0.12","poppler-0:0.26.5-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10871.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-10872","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":[],"bugzilla":"1696638","bugzilla_description":"CVE-2019-10872 poppler: heap-based buffer over-read in function Splash::blitTransparent in splash/Splash.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10872.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-10873","severity":"low","public_date":"2019-04-01T00:00:00Z","advisories":[],"bugzilla":"1696637","bugzilla_description":"CVE-2019-10873 poppler: null-pointer dereference in function SplashClip::clipAALine in splash/SplashClip.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10873.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-9903","severity":"low","public_date":"2019-03-15T00:00:00Z","advisories":["RHSA-2019:2713"],"bugzilla":"1691724","bugzilla_description":"CVE-2019-9903 poppler: stack consumption in function Dict::find() in Dict.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9903.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-9631","severity":"low","public_date":"2019-03-07T00:00:00Z","advisories":["RHSA-2019:2022","RHSA-2019:2713"],"bugzilla":"1686802","bugzilla_description":"CVE-2019-9631 poppler: heap-based buffer over-read in function downsample_row_box_filter in CairoRescaleBox.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["poppler-0:0.26.5-38.el7","poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9631.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-9545","severity":null,"public_date":"2019-02-28T00:00:00Z","advisories":[],"bugzilla":"1685966","bugzilla_description":"CVE-2019-9545 poppler: recursive function call in JBIG2Stream::readTextRegion() in JBIG2Stream.cc causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9545.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-9543","severity":"low","public_date":"2019-02-28T00:00:00Z","advisories":[],"bugzilla":"1685971","bugzilla_description":"CVE-2019-9543 poppler: recursive function call in JBIG2Stream::readGenericBitmap() in JBIG2Stream.cc causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-9200","severity":"moderate","public_date":"2019-02-25T00:00:00Z","advisories":["RHSA-2019:2022","RHSA-2019:2713"],"bugzilla":"1683632","bugzilla_description":"CVE-2019-9200 poppler: heap-based buffer overflow in function ImageStream::getLine() in Stream.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["poppler-0:0.26.5-38.el7","poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9200.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-7310","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:2022","RHSA-2019:2713"],"bugzilla":"1672419","bugzilla_description":"CVE-2019-7310 poppler: heap-based buffer over-read in XRef::getEntry in XRef.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["poppler-0:0.26.5-38.el7","poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7310.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20662","severity":"low","public_date":"2018-12-30T00:00:00Z","advisories":["RHSA-2019:2022","RHSA-2019:2713"],"bugzilla":"1665273","bugzilla_description":"CVE-2018-20662 poppler: SIGABRT PDFDoc::setup class in PDFDoc.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["poppler-0:0.26.5-38.el7","poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20662.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20650","severity":"low","public_date":"2018-12-28T00:00:00Z","advisories":["RHSA-2019:2022","RHSA-2019:2713"],"bugzilla":"1665263","bugzilla_description":"CVE-2018-20650 poppler: reachable Object::dictLookup assertion in FileSpec class in FileSpec.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["poppler-0:0.26.5-38.el7","poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20650.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20551","severity":"low","public_date":"2018-12-26T00:00:00Z","advisories":["RHSA-2019:2713"],"bugzilla":"1665259","bugzilla_description":"CVE-2018-20551 poppler: reachable Object::getString assertion in AnnotRichMedia class in Annot.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20551.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20481","severity":"low","public_date":"2018-12-20T00:00:00Z","advisories":["RHSA-2019:2022","RHSA-2019:2713"],"bugzilla":"1665266","bugzilla_description":"CVE-2018-20481 poppler: NULL pointer dereference in the XRef::getEntry in XRef.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["poppler-0:0.26.5-38.el7","poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20481.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19149","severity":"low","public_date":"2018-11-08T00:00:00Z","advisories":["RHSA-2019:2022"],"bugzilla":"1649457","bugzilla_description":"CVE-2018-19149 poppler: NULL pointer dereference in _poppler_attachment_new","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["poppler-0:0.26.5-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19149.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19058","severity":"low","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2019:2022"],"bugzilla":"1649435","bugzilla_description":"CVE-2018-19058 poppler: reachable abort in Object.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["poppler-0:0.26.5-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19058.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19059","severity":"low","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2019:2022"],"bugzilla":"1649440","bugzilla_description":"CVE-2018-19059 poppler: out-of-bounds read in EmbFile::save2 in FileSpec.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["poppler-0:0.26.5-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19059.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19060","severity":"low","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2019:2022"],"bugzilla":"1649450","bugzilla_description":"CVE-2018-19060 poppler: pdfdetach utility does not validate save paths","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["poppler-0:0.26.5-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19060.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18897","severity":"low","public_date":"2018-11-01T00:00:00Z","advisories":["RHSA-2019:2022","RHSA-2019:2713"],"bugzilla":"1646546","bugzilla_description":"CVE-2018-18897 poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["poppler-0:0.26.5-38.el7","poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16646","severity":"low","public_date":"2018-08-28T00:00:00Z","advisories":["RHSA-2019:2022"],"bugzilla":"1626618","bugzilla_description":"CVE-2018-16646 poppler: infinite recursion in Parser::getObj function in Parser.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["poppler-0:0.26.5-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16646.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-13988","severity":"low","public_date":"2018-07-23T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1602838","bugzilla_description":"CVE-2018-13988 poppler: out of bounds read in pdfunite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["poppler-0:0.26.5-20.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13988.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10768","severity":"low","public_date":"2018-05-05T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1576169","bugzilla_description":"CVE-2018-10768 poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["poppler-0:0.26.5-20.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10768.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18267","severity":"low","public_date":"2017-10-12T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1578777","bugzilla_description":"CVE-2017-18267 poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["poppler-0:0.26.5-20.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18267.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2017-1000456","severity":"moderate","public_date":"2017-10-05T00:00:00Z","advisories":[],"bugzilla":"1531382","bugzilla_description":"CVE-2017-1000456 poppler: Invalid read in TextPool::addWord() causes crash and can lead to overflow in subsequent calculations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000456.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-14977","severity":"low","public_date":"2017-09-30T00:00:00Z","advisories":[],"bugzilla":"1500344","bugzilla_description":"CVE-2017-14977 poppler: NULL pointer dereference in the FoFiTrueType::getCFFBlock function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14977.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15565","severity":"low","public_date":"2017-09-28T00:00:00Z","advisories":[],"bugzilla":"1510977","bugzilla_description":"CVE-2017-15565 poppler: NULL pointer dereference in the GfxImageColorMap::getGrayLine() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15565.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14929","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1499167","bugzilla_description":"CVE-2017-14929 poppler: Memory corruption via Gfx.cc infinite loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14929.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14617","severity":"low","public_date":"2017-09-19T00:00:00Z","advisories":[],"bugzilla":"1499905","bugzilla_description":"CVE-2017-14617 poppler: Floating point exception in the ImageStream class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14520","severity":"low","public_date":"2017-09-17T00:00:00Z","advisories":[],"bugzilla":"1494582","bugzilla_description":"CVE-2017-14520 poppler: Floating point exception in Splash::scaleImageYuXd() function in Splash.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14520.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14976","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1500345","bugzilla_description":"CVE-2017-14976 poppler: Heap-based buffer over-read in the FoFiType1C::convertToType0 function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14976.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14517","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1499162","bugzilla_description":"CVE-2017-14517 poppler: NULL pointer dereference in the XRef::parseEntry() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14517.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14518","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1499163","bugzilla_description":"CVE-2017-14518 poppler: Floating point exception in the isImageInterpolationRequired() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14518.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14519","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1499165","bugzilla_description":"CVE-2017-14519 poppler: Memory corruption via Gfx.cc infinite loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14519.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14975","severity":"low","public_date":"2017-09-11T00:00:00Z","advisories":[],"bugzilla":"1500343","bugzilla_description":"CVE-2017-14975 poppler: NULL pointer dereference in the FoFiType1C::convertToType0 function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14975.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14928","severity":"low","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1500322","bugzilla_description":"CVE-2017-14928 poppler: NULL pointer dereference in the AnnotRichMedia::Configuration::Configuration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14928.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14926","severity":"low","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1500323","bugzilla_description":"CVE-2017-14926 poppler: NULL pointer dereference in the AnnotRichMedia::Content::Content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14926.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14927","severity":"low","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1500324","bugzilla_description":"CVE-2017-14927 poppler: NULL pointer dereference in the SplashOutputDev::type3D0() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14927.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-2814","severity":"moderate","public_date":"2017-07-07T00:00:00Z","advisories":[],"bugzilla":"1470131","bugzilla_description":"CVE-2017-2814 poppler: Heap-buffer overflow in DCTStream::readScan()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-2820","severity":"moderate","public_date":"2017-07-07T00:00:00Z","advisories":[],"bugzilla":"1470138","bugzilla_description":"CVE-2017-2820 poppler: Integer overflow in the JPEG 2000 image parsing functionality","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2820.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-2818","severity":"moderate","public_date":"2017-07-07T00:00:00Z","advisories":[],"bugzilla":"1470139","bugzilla_description":"CVE-2017-2818 poppler: Heap-buffer overflow in the image rendering functionality","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2818.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-9775","severity":"moderate","public_date":"2017-06-21T00:00:00Z","advisories":["RHSA-2017:2551"],"bugzilla":"1466442","bugzilla_description":"CVE-2017-9775 poppler: Stack-buffer overflow in GfxState.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["poppler-0:0.26.5-17.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9775.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-9776","severity":"moderate","public_date":"2017-06-21T00:00:00Z","advisories":["RHSA-2017:2550","RHSA-2017:2551"],"bugzilla":"1466443","bugzilla_description":"CVE-2017-9776 poppler: Integer overflow in JBIG2Stream.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["poppler-0:0.26.5-17.el7_4","poppler-0:0.12.4-12.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9776.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-7515","severity":"low","public_date":"2017-05-27T00:00:00Z","advisories":[],"bugzilla":"1459066","bugzilla_description":"CVE-2017-7515 poppler: Stack exhaustion due to infinite recursive call in pdfunite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7515.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7511","severity":"low","public_date":"2017-05-23T00:00:00Z","advisories":[],"bugzilla":"1456827","bugzilla_description":"CVE-2017-7511 poppler: Null pointer dereference in pdfunite via crafted documents","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9083","severity":"low","public_date":"2017-05-18T00:00:00Z","advisories":[],"bugzilla":"1453198","bugzilla_description":"CVE-2017-9083 poppler: Null pointer dereference in the JPXStream::readUByte function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9083.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9406","severity":"low","public_date":"2017-04-24T00:00:00Z","advisories":[],"bugzilla":"1458701","bugzilla_description":"CVE-2017-9406 poppler: Memory leak in the gmalloc function in gmem.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9406.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9408","severity":"low","public_date":"2017-04-24T00:00:00Z","advisories":[],"bugzilla":"1458702","bugzilla_description":"CVE-2017-9408 poppler: Memory leak in the Object::initArray function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9408.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9865","severity":"low","public_date":"2017-04-24T00:00:00Z","advisories":[],"bugzilla":"1466435","bugzilla_description":"CVE-2017-9865 poppler: Buffer over-read in the GfxImageColorMap::getGray function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9865.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8868","severity":"moderate","public_date":"2016-04-11T00:00:00Z","advisories":["RHSA-2016:2580"],"bugzilla":"1326225","bugzilla_description":"CVE-2015-8868 poppler: heap buffer overflow in ExponentialFunction","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["poppler-0:0.26.5-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8868.json"},{"CVE":"CVE-2013-7296","severity":"moderate","public_date":"2013-12-07T00:00:00Z","advisories":[],"bugzilla":"1048199","bugzilla_description":"CVE-2013-7296 poppler: DoS due to a format string error","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7296.json"},{"CVE":"CVE-2013-4472","severity":"low","public_date":"2013-10-26T00:00:00Z","advisories":[],"bugzilla":"1024746","bugzilla_description":"CVE-2013-4472 poppler, xpdf: insecure temporary file","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4472.json"},{"CVE":"CVE-2013-4473","severity":"moderate","public_date":"2013-10-26T00:00:00Z","advisories":[],"bugzilla":"1024753","bugzilla_description":"CVE-2013-4473 poppler: stack-based buffer overflow in pdfseparate utility","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4473.json"},{"CVE":"CVE-2013-4474","severity":"moderate","public_date":"2013-10-26T00:00:00Z","advisories":[],"bugzilla":"1024762","bugzilla_description":"CVE-2013-4474 poppler: format string flaw in pdfseparate utility","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4474.json"},{"CVE":"CVE-2012-2142","severity":"low","public_date":"2013-08-09T00:00:00Z","advisories":[],"bugzilla":"789936","bugzilla_description":"CVE-2012-2142 poppler, xpdf: Insufficient sanitization of escape sequences in the error messages","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2142.json"},{"CVE":"CVE-2013-1788","severity":"low","public_date":"2013-01-10T00:00:00Z","advisories":[],"bugzilla":"917108","bugzilla_description":"CVE-2013-1788 poppler: multiple invalid memory access flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1788.json"},{"CVE":"CVE-2013-1789","severity":"low","public_date":"2013-01-10T00:00:00Z","advisories":[],"bugzilla":"917109","bugzilla_description":"CVE-2013-1789 poppler: Multiple null pointer de-references in the Poppler splash backend","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1789.json"},{"CVE":"CVE-2013-1790","severity":"low","public_date":"2013-01-09T00:00:00Z","advisories":[],"bugzilla":"917111","bugzilla_description":"CVE-2013-1790 poppler: uninitialized memory read flaw","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1790.json"},{"CVE":"CVE-2010-3702","severity":"important","public_date":"2010-09-24T00:00:00Z","advisories":["RHSA-2010:0749","RHSA-2010:0859","RHSA-2010:0755","RHSA-2010:0754","RHSA-2010:0753","RHSA-2010:0752","RHSA-2010:0751","RHSA-2010:0750","RHSA-2012:1201"],"bugzilla":"595245","bugzilla_description":"CVE-2010-3702 xpdf: uninitialized Gfx::parser pointer dereference","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["kdegraphics-7:3.5.4-17.el5_5.1","poppler-0:0.12.4-3.el6_0.1","cups-1:1.1.22-0.rc1.9.32.el4_8.10","cups-1:1.1.17-13.3.70","kdegraphics-7:3.3.1-18.el4_8.1","tetex-0:3.0-33.15.el5_8.1","gpdf-0:2.8.2-7.7.2.el4_8.7","poppler-0:0.5.4-4.4.el5_5.14","xpdf-1:2.02-19.el3","xpdf-1:3.00-24.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3702.json"},{"CVE":"CVE-2010-3704","severity":"important","public_date":"2010-09-24T00:00:00Z","advisories":["RHSA-2010:0749","RHSA-2010:0859","RHSA-2010:0753","RHSA-2010:0752","RHSA-2010:0751","RHSA-2012:1201"],"bugzilla":"638960","bugzilla_description":"CVE-2010-3704 xpdf: array indexing error in FoFiType1::parse()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["kdegraphics-7:3.5.4-17.el5_5.1","poppler-0:0.12.4-3.el6_0.1","kdegraphics-7:3.3.1-18.el4_8.1","tetex-0:3.0-33.15.el5_8.1","gpdf-0:2.8.2-7.7.2.el4_8.7","poppler-0:0.5.4-4.4.el5_5.14","xpdf-1:3.00-24.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3704.json"},{"CVE":"CVE-2010-3703","severity":"important","public_date":"2010-09-24T00:00:00Z","advisories":["RHSA-2010:0859"],"bugzilla":"639356","bugzilla_description":"CVE-2010-3703 poppler: use of initialized pointer in PostScriptFunction","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["poppler-0:0.12.4-3.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3703.json"},{"CVE":"CVE-2010-5110","severity":"moderate","public_date":"2010-01-27T00:00:00Z","advisories":[],"bugzilla":"647377","bugzilla_description":"CVE-2010-5110 poppler: heap based buffer overflow in DCTStream.cc","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5110.json"},{"CVE":"CVE-2009-3608","severity":"important","public_date":"2009-10-14T00:00:00Z","advisories":["RHSA-2009:1504","RHSA-2009:1503","RHSA-2010:0400","RHSA-2009:1502","RHSA-2009:1513","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"526637","bugzilla_description":"CVE-2009-3608 xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["xpdf-1:3.00-22.el4_8.1","kdegraphics-7:3.3.1-15.el4_8.2","cups-1:1.3.7-11.el5_4.3","poppler-0:0.5.4-4.4.el5_4.11","gpdf-0:2.8.2-7.7.2.el4_8.5","tetex-0:3.0-33.8.el5_5.5","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3608.json"},{"CVE":"CVE-2009-3606","severity":"moderate","public_date":"2009-10-14T00:00:00Z","advisories":["RHSA-2009:0480","RHSA-2009:0458","RHSA-2009:1500","RHSA-2009:1502","RHSA-2009:1501"],"bugzilla":"526877","bugzilla_description":"CVE-2009-3606 xpdf/poppler: PSOutputDev::doImageL1Sep integer overflow","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:3.00-22.el4_8.1","gpdf-0:2.8.2-7.7.2.el4_7.4","xpdf-1:2.02-17.el3","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3606.json"},{"CVE":"CVE-2009-3609","severity":"low","public_date":"2009-10-14T00:00:00Z","advisories":["RHSA-2009:1504","RHSA-2009:1503","RHSA-2010:0755","RHSA-2010:0401","RHSA-2009:1500","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:1502","RHSA-2009:1513","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"526893","bugzilla_description":"CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["tetex-0:2.0.2-22.0.1.EL4.16","xpdf-1:3.00-22.el4_8.1","cups-1:1.1.22-0.rc1.9.32.el4_8.10","kdegraphics-7:3.3.1-15.el4_8.2","cups-1:1.3.7-11.el5_4.3","tetex-0:1.0.7-67.19","poppler-0:0.5.4-4.4.el5_4.11","gpdf-0:2.8.2-7.7.2.el4_8.5","tetex-0:3.0-33.8.el5_5.5","xpdf-1:2.02-17.el3","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3609.json"},{"CVE":"CVE-2009-3604","severity":"important","public_date":"2009-10-14T00:00:00Z","advisories":["RHSA-2009:0480","RHSA-2009:1503","RHSA-2009:1500","RHSA-2009:1502","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"526911","bugzilla_description":"CVE-2009-3604 xpdf/poppler: Splash::drawImage integer overflow and missing allocation return value check","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:3.00-22.el4_8.1","kdegraphics-7:3.3.1-15.el4_8.2","gpdf-0:2.8.2-7.7.2.el4_8.5","xpdf-1:2.02-17.el3","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3604.json"},{"CVE":"CVE-2009-3603","severity":"important","public_date":"2009-10-14T00:00:00Z","advisories":["RHSA-2009:1504"],"bugzilla":"526915","bugzilla_description":"CVE-2009-3603 xpdf/poppler: SplashBitmap::SplashBitmap integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["poppler-0:0.5.4-4.4.el5_4.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3603.json"},{"CVE":"CVE-2009-0791","severity":"moderate","public_date":"2009-05-19T00:00:00Z","advisories":["RHSA-2009:0480","RHSA-2009:1503","RHSA-2009:1083","RHSA-2010:0401","RHSA-2009:1500","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:1502","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"491840","bugzilla_description":"CVE-2009-0791 xpdf: multiple integer overflows","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.17-13.3.62","tetex-0:2.0.2-22.0.1.EL4.16","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:3.00-22.el4_8.1","kdegraphics-7:3.3.1-15.el4_8.2","cups-1:1.1.22-0.rc1.9.32.el4_8.3","tetex-0:1.0.7-67.19","gpdf-0:2.8.2-7.7.2.el4_8.5","tetex-0:3.0-33.8.el5_5.5","xpdf-1:2.02-17.el3","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0791.json"},{"CVE":"CVE-2009-0146","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490612","bugzilla_description":"CVE-2009-0146 xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0146.json"},{"CVE":"CVE-2009-0195","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490612","bugzilla_description":"CVE-2009-0146 xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0195.json"},{"CVE":"CVE-2009-0147","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490614","bugzilla_description":"CVE-2009-0147 xpdf: Multiple integer overflows in JBIG2 decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0147.json"},{"CVE":"CVE-2009-0166","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490625","bugzilla_description":"CVE-2009-0166 xpdf: Freeing of potentially uninitialized memory in JBIG2 decoder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0166.json"},{"CVE":"CVE-2009-0799","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495886","bugzilla_description":"CVE-2009-0799 PDF JBIG2 decoder OOB read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0799.json"},{"CVE":"CVE-2009-0800","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495887","bugzilla_description":"CVE-2009-0800 PDF JBIG2 multiple input validation flaws","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0800.json"},{"CVE":"CVE-2009-1179","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495889","bugzilla_description":"CVE-2009-1179 PDF JBIG2 integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1179.json"},{"CVE":"CVE-2009-1180","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495892","bugzilla_description":"CVE-2009-1180 PDF JBIG2 invalid free()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1180.json"},{"CVE":"CVE-2009-1181","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495894","bugzilla_description":"CVE-2009-1181 PDF JBIG2 NULL dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1181.json"},{"CVE":"CVE-2009-1182","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495896","bugzilla_description":"CVE-2009-1182 PDF JBIG2 MMR decoder buffer overflows","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1182.json"},{"CVE":"CVE-2009-1183","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495899","bugzilla_description":"CVE-2009-1183 PDF JBIG2 MMR infinite loop DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1183.json"},{"CVE":"CVE-2009-1187","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0480"],"bugzilla":"495906","bugzilla_description":"CVE-2009-1187 poppler CairoOutputDev integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["poppler-0:0.5.4-4.4.el5_3.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1187.json"},{"CVE":"CVE-2009-1188","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0480","RHSA-2009:1503","RHSA-2009:1502","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"495907","bugzilla_description":"CVE-2009-1188 xpdf/poppler: SplashBitmap integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:3.00-22.el4_8.1","kdegraphics-7:3.3.1-15.el4_8.2","gpdf-0:2.8.2-7.7.2.el4_8.5","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1188.json"},{"CVE":"CVE-2008-1693","severity":"important","public_date":"2008-04-17T00:00:00Z","advisories":["RHSA-2008:0240","RHSA-2008:0262","RHSA-2008:0239","RHSA-2008:0238"],"bugzilla":"441722","bugzilla_description":"CVE-2008-1693 xpdf: embedded font vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-16.el4","poppler-0:0.5.4-4.4.el5_1","gpdf-0:2.8.2-7.7.2","kdegraphics-7:3.3.1-9.el4_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1693.json"},{"CVE":"CVE-2007-4352","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1022","RHSA-2007:1021","RHSA-2007:1027","RHSA-2007:1026","RHSA-2007:1025","RHSA-2007:1024","RHSA-2007:1029","RHSA-2007:1030"],"bugzilla":"345101","bugzilla_description":"CVE-2007-4352 xpdf memory corruption in DCTStream::readProgressiveDataUnit()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","kdegraphics-7:3.3.1-6.el4_5","xpdf-1:2.02-11.el3","xpdf-1:3.00-14.el4","gpdf-0:2.8.2-7.7.1","cups-1:1.2.4-11.14.el5_1.3","tetex-0:2.0.2-22.0.1.EL4.10","tetex-0:3.0-33.2.el5_1.2","poppler-0:0.5.4-4.3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4352.json"},{"CVE":"CVE-2007-5392","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1022","RHSA-2007:1021","RHSA-2007:1027","RHSA-2007:1026","RHSA-2007:1025","RHSA-2007:1024","RHSA-2007:1029","RHSA-2007:1030"],"bugzilla":"345111","bugzilla_description":"CVE-2007-5392 xpdf buffer overflow in DCTStream::reset()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","kdegraphics-7:3.3.1-6.el4_5","xpdf-1:2.02-11.el3","xpdf-1:3.00-14.el4","gpdf-0:2.8.2-7.7.1","cups-1:1.2.4-11.14.el5_1.3","tetex-0:2.0.2-22.0.1.EL4.10","tetex-0:3.0-33.2.el5_1.2","poppler-0:0.5.4-4.3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5392.json"},{"CVE":"CVE-2007-5393","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1023","RHSA-2007:1022","RHSA-2007:1021","RHSA-2007:1031","RHSA-2007:1027","RHSA-2007:1026","RHSA-2007:1025","RHSA-2007:1024","RHSA-2007:1029","RHSA-2007:1028","RHSA-2007:1030","RHSA-2007:1051"],"bugzilla":"345121","bugzilla_description":"CVE-2007-5393 xpdf buffer overflow in CCITTFaxStream::lookChar()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tetex-0:1.0.7-38.5E.12","xpdf-1:2.02-11.el3","gpdf-0:2.8.2-7.7.1","cups-1:1.2.4-11.14.el5_1.3","cups-1:1.1.17-13.3.46","poppler-0:0.5.4-4.3.el5_1","cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","kdegraphics-7:3.3.1-6.el4_5","xpdf-1:3.00-14.el4","xpdf-1:0.92-19.el2","tetex-0:2.0.2-22.0.1.EL4.10","tetex-0:3.0-33.2.el5_1.2","kdegraphics-7:3.5.4-5.el5_1","tetex-0:1.0.7-67.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5393.json"},{"CVE":"CVE-2007-3387","severity":"important","public_date":"2007-07-28T00:00:00Z","advisories":["RHSA-2007:0729","RHSA-2007:0730","RHSA-2007:0732","RHSA-2007:0731","RHSA-2007:0720","RHSA-2007:0735"],"bugzilla":"248194","bugzilla_description":"CVE-2007-3387 xpdf integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["xpdf-1:3.00-12.RHEL4","tetex-0:1.0.7-38.5E.11","cups-1:1.1.22-0.rc1.9.20.2","gpdf-0:2.8.2-7.7","cups-1:1.1.17-13.3.45","cups-1:1.2.4-11.5.3.el5","tetex-0:2.0.2-22.0.1.EL4.8","kdegraphics-7:3.5.4-2.el5","kdegraphics-7:3.3.1-4.RHEL4","tetex-0:3.0-33.1.el5","poppler-0:0.5.4-4.1.el5","xpdf-1:2.02-10.RHEL3","tetex-0:1.0.7-67.10","xpdf-1:0.92-18.RHEL2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3387.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/popt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/popt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/popt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/popt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/popt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/popt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/portreserve_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/portreserve_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/portreserve_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postfix-perl-scripts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postfix-perl-scripts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postfix-perl-scripts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postfix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postfix_security_api_results.json
new file mode 100644
index 0000000..c2b2fd7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postfix_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12063","severity":null,"public_date":"2020-04-24T00:00:00Z","advisories":[],"bugzilla":"1848850","bugzilla_description":"CVE-2020-12063 postfix: an attacker may send an email from an arbitrary-looking sender via a homoglyph attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12063.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-10140","severity":"moderate","public_date":"2017-06-11T00:00:00Z","advisories":["RHSA-2019:0366"],"bugzilla":"1464032","bugzilla_description":"CVE-2017-10140 libdb: Reads DB_CONFIG from the current working directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10140.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2011-1720","severity":"moderate","public_date":"2011-05-09T00:00:00Z","advisories":["RHSA-2011:0843"],"bugzilla":"699035","bugzilla_description":"CVE-2011-1720 postfix (smtpd): Crash due to improper management of SASL handlers for SMTP sessions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["postfix-2:2.2.10-1.5.el4","postfix-2:2.6.6-2.2.el6_1","postfix-2:2.3.3-2.3.el5_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1720.json"},{"CVE":"CVE-2011-0411","severity":"moderate","public_date":"2011-03-05T00:00:00Z","advisories":["RHSA-2011:0422","RHSA-2011:0423"],"bugzilla":"674814","bugzilla_description":"CVE-2011-0411 postfix: SMTP commands injection during plaintext to TLS session switch","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["postfix-2:2.6.6-2.1.el6_0","postfix-2:2.3.3-2.2.el5_6","postfix-2:2.2.10-1.4.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0411.json"},{"CVE":"CVE-2008-2936","severity":"moderate","public_date":"2008-08-14T00:00:00Z","advisories":["RHSA-2008:0839"],"bugzilla":"456314","bugzilla_description":"CVE-2008-2936 postfix privilege escalation flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postfix-2:2.3.3-2.1.el5_2","postfix-2:2.0.16-14.1.RHEL3","postfix-2:2.2.10-1.2.1.el4_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2936.json"},{"CVE":"CVE-2008-2937","severity":"low","public_date":"2008-08-14T00:00:00Z","advisories":["RHSA-2011:0422"],"bugzilla":"456347","bugzilla_description":"CVE-2008-2937 postfix improper mailbox permissions","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["postfix-2:2.3.3-2.2.el5_6","postfix-2:2.2.10-1.4.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2937.json"},{"CVE":"CVE-2005-0337","severity":"low","public_date":"2005-01-31T00:00:00Z","advisories":["RHSA-2005:152"],"bugzilla":"1617510","bugzilla_description":"CVE-2005-0337 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postfix-2:2.1.5-4.2.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0337.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-contrib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-contrib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-contrib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-jdbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-jdbc_security_api_results.json
new file mode 100644
index 0000000..540584c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-jdbc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13692","severity":"important","public_date":"2020-06-04T00:00:00Z","advisories":["RHSA-2020:3005","RHSA-2020:3248","RHSA-2020:3675","RHSA-2020:3285","RHSA-2020:3176","RHSA-2020:3286","RHSA-2020:3283","RHSA-2020:3284","RHSA-2020:3209","RHSA-2020:3678"],"bugzilla":"1852985","bugzilla_description":"CVE-2020-13692 postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["postgresql-jdbc-0:9.2.1002-8.el7_8","postgresql-jdbc-0:8.4.704-4.el6_10","postgresql-jdbc-0:42.2.3-3.el8_0","postgresql-jdbc-0:42.2.3-3.el8_1","postgresql-jdbc-0:42.2.3-3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13692.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-10936","severity":"low","public_date":"2018-08-27T00:00:00Z","advisories":[],"bugzilla":"1622225","bugzilla_description":"CVE-2018-10936 PostgreSQL: Postgres JDBC driver does not perform host name validation by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2012-1618","severity":null,"public_date":"2012-03-25T00:00:00Z","advisories":[],"bugzilla":"807394","bugzilla_description":"CVE-2012-1618 postgresql-jdbc: SQL injection due improper escaping of JDBC statement parameters","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1618.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-odbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-odbc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-odbc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-plperl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-plperl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-plperl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-plpython_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-plpython_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-plpython_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-pltcl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-pltcl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-pltcl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql_security_api_results.json
new file mode 100644
index 0000000..16b59a9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/postgresql_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14349","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":["RHSA-2020:3669"],"bugzilla":"1865744","bugzilla_description":"CVE-2020-14349 postgresql: Uncontrolled search path element in logical replication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["postgresql:10-8020020200825115746.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14349.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-14350","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":["RHSA-2020:4295","RHSA-2020:3669"],"bugzilla":"1865746","bugzilla_description":"CVE-2020-14350 postgresql: Uncontrolled search path element in CREATE EXTENSION","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["postgresql:10-8020020200825115746.4cda2c84","rh-postgresql96-postgresql-0:9.6.19-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14350.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-13692","severity":"important","public_date":"2020-06-04T00:00:00Z","advisories":["RHSA-2020:3005","RHSA-2020:3248","RHSA-2020:3675","RHSA-2020:3285","RHSA-2020:3176","RHSA-2020:3286","RHSA-2020:3283","RHSA-2020:3284","RHSA-2020:3209","RHSA-2020:3678"],"bugzilla":"1852985","bugzilla_description":"CVE-2020-13692 postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["postgresql-jdbc-0:9.2.1002-8.el7_8","postgresql-jdbc-0:8.4.704-4.el6_10","postgresql-jdbc-0:42.2.3-3.el8_0","postgresql-jdbc-0:42.2.3-3.el8_1","postgresql-jdbc-0:42.2.3-3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13692.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2020-1720","severity":"low","public_date":"2020-02-13T00:00:00Z","advisories":["RHSA-2020:0980","RHSA-2020:4295","RHBA-2020:2396","RHSA-2020:3669"],"bugzilla":"1798852","bugzilla_description":"CVE-2020-1720 postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["postgresql:10-8020020200825115746.4cda2c84","rh-postgresql10-postgresql-0:10.12-2.el7","rh-postgresql96-postgresql-0:9.6.19-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-1707","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:0694","RHSA-2020:0617","RHSA-2020:0681","RHSA-2020:0801"],"bugzilla":"1793301","bugzilla_description":"CVE-2020-1707 openshift/postgresql-apb: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift4/postgres-apb:v4.3.5-202003020549","openshift4/apb-base:v4.2.21-202002240343","openshift3/postgresql-apb:v3.11.188-4","openshift4/apb-base:v4.1.37-202003021622"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1707.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-10208","severity":"moderate","public_date":"2019-08-08T00:00:00Z","advisories":["RHSA-2020:4295","RHSA-2020:3669"],"bugzilla":"1734416","bugzilla_description":"CVE-2019-10208 postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":["postgresql:10-8020020200825115746.4cda2c84","rh-postgresql96-postgresql-0:9.6.19-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10208.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10209","severity":"low","public_date":"2019-08-08T00:00:00Z","advisories":[],"bugzilla":"1734447","bugzilla_description":"CVE-2019-10209 postgresql: Memory disclosure in cross-type comparison for hashed subplan","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10209.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-10210","severity":"moderate","public_date":"2019-08-08T00:00:00Z","advisories":[],"bugzilla":"1734453","bugzilla_description":"CVE-2019-10210 postgresql: Windows installer writes superuser password to unprotected temporary file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10210.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-10211","severity":"moderate","public_date":"2019-08-08T00:00:00Z","advisories":[],"bugzilla":"1734461","bugzilla_description":"CVE-2019-10211 postgresql: Windows installer bundled OpenSSL executes code from unprotected directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10164","severity":"moderate","public_date":"2019-06-20T00:00:00Z","advisories":["RHSA-2020:0980","RHEA-2020:0343","RHSA-2020:3669"],"bugzilla":"1719698","bugzilla_description":"CVE-2019-10164 postgresql: Stack-based buffer overflow via setting a password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libpq-0:12.1-3.el8","postgresql:10-8020020200825115746.4cda2c84","rh-postgresql10-postgresql-0:10.12-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10127","severity":"moderate","public_date":"2019-05-09T00:00:00Z","advisories":[],"bugzilla":"1707098","bugzilla_description":"CVE-2019-10127 postgresql: BigSQL installer does not clear permissive ACL entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10128","severity":"moderate","public_date":"2019-05-09T00:00:00Z","advisories":[],"bugzilla":"1707102","bugzilla_description":"CVE-2019-10128 postgresql: EnterpriseDB installer does not clear permissive ACL entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10128.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-10129","severity":"moderate","public_date":"2019-05-09T00:00:00Z","advisories":[],"bugzilla":"1707106","bugzilla_description":"CVE-2019-10129 postgresql: Memory disclosure in partition routing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10129.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10130","severity":"low","public_date":"2019-05-09T00:00:00Z","advisories":["RHSA-2020:4295","RHSA-2020:3669"],"bugzilla":"1707109","bugzilla_description":"CVE-2019-10130 postgresql: Selectivity estimators bypass row security policies","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["postgresql:10-8020020200825115746.4cda2c84","rh-postgresql96-postgresql-0:9.6.19-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10130.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-9193","severity":null,"public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1695982","bugzilla_description":"CVE-2019-9193 postgresql: Command injection via \"COPY TO/FROM PROGRAM\" function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-16850","severity":"important","public_date":"2018-11-08T00:00:00Z","advisories":["RHSA-2018:3757"],"bugzilla":"1645937","bugzilla_description":"CVE-2018-16850 postgresql: SQL injection in pg_upgrade and pg_dump, via CREATE TRIGGER ... REFERENCING","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":["rh-postgresql10-postgresql-0:10.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16850.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-10936","severity":"low","public_date":"2018-08-27T00:00:00Z","advisories":[],"bugzilla":"1622225","bugzilla_description":"CVE-2018-10936 PostgreSQL: Postgres JDBC driver does not perform host name validation by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-10915","severity":"important","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2557","RHSA-2018:2511","RHSA-2018:2566","RHSA-2018:2643","RHSA-2018:2565"],"bugzilla":"1609891","bugzilla_description":"CVE-2018-10915 postgresql: Certain host connection parameters defeat client-side security defenses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665->(CWE-200|CWE-89)","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","postgresql-0:9.2.24-1.el7_5","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rhvm-appliance-0:4.2-20180828.0.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10915.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2018-10925","severity":"important","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566","RHSA-2018:2565"],"bugzilla":"1612619","bugzilla_description":"CVE-2018-10925 postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-1115","severity":"low","public_date":"2018-05-10T00:00:00Z","advisories":["RHSA-2018:2566","RHSA-2018:2565"],"bugzilla":"1573276","bugzilla_description":"CVE-2018-1115 postgresql: Too-permissive access control list on function pg_logfile_rotate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2018-1058","severity":"moderate","public_date":"2018-03-01T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1547044","bugzilla_description":"CVE-2018-1058 postgresql: Uncontrolled search path element in pg_dump and other client applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1058.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-1052","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1539613","bugzilla_description":"CVE-2018-1052 postgresql: Memory disclosure in table partitioning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1052.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1053","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1539619","bugzilla_description":"CVE-2018-1053 postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-15097","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2017:3405","RHSA-2017:3403","RHSA-2017:3404","RHSA-2017:3402"],"bugzilla":"1508985","bugzilla_description":"CVE-2017-15097 postgresql: Start scripts permit database administrator to modify root-owned files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["rh-postgresql95-postgresql-0:9.5.9-4.el6","rh-postgresql96-postgresql-0:9.6.5-2.el6","rh-postgresql95-postgresql-0:9.5.9-4.el7","postgresql-0:9.2.23-3.el7_4","rh-postgresql96-postgresql-0:9.6.5-2.el7","rh-postgresql94-postgresql-0:9.4.14-2.el6","rh-postgresql94-postgresql-0:9.4.14-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15097.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12172","severity":"moderate","public_date":"2017-11-09T00:00:00Z","advisories":["RHSA-2017:3405","RHSA-2017:3403","RHSA-2017:3404","RHSA-2017:3402"],"bugzilla":"1498394","bugzilla_description":"CVE-2017-12172 postgresql: Start scripts permit database administrator to modify root-owned files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["rh-postgresql95-postgresql-0:9.5.9-4.el6","rh-postgresql96-postgresql-0:9.6.5-2.el6","rh-postgresql95-postgresql-0:9.5.9-4.el7","postgresql-0:9.2.23-3.el7_4","rh-postgresql96-postgresql-0:9.6.5-2.el7","rh-postgresql94-postgresql-0:9.4.14-2.el6","rh-postgresql94-postgresql-0:9.4.14-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12172.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-15098","severity":"moderate","public_date":"2017-11-09T00:00:00Z","advisories":["RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1508820","bugzilla_description":"CVE-2017-15098 postgresql: Memory disclosure in JSON functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15098.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-15099","severity":"low","public_date":"2017-11-09T00:00:00Z","advisories":["RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1508823","bugzilla_description":"CVE-2017-15099 postgresql: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15099.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-7546","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2677","RHSA-2017:2678","RHSA-2017:2728","RHSA-2017:2860"],"bugzilla":"1477184","bugzilla_description":"CVE-2017-7546 postgresql: Empty password accepted in some authentication methods","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["postgresql-0:9.2.23-1.el7_4","rh-postgresql95-postgresql-0:9.5.9-1.el6","rh-postgresql95-postgresql-0:9.5.9-1.el7","rh-postgresql94-postgresql-0:9.4.14-1.el6","postgresql-0:8.4.20-8.el6_9","rh-postgresql94-postgresql-0:9.4.14-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7546.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7547","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2677","RHSA-2017:2678","RHSA-2017:2728"],"bugzilla":"1477185","bugzilla_description":"CVE-2017-7547 postgresql: pg_user_mappings view discloses passwords to users lacking server privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["postgresql-0:9.2.23-1.el7_4","rh-postgresql95-postgresql-0:9.5.9-1.el6","rh-postgresql95-postgresql-0:9.5.9-1.el7","rh-postgresql94-postgresql-0:9.4.14-1.el6","rh-postgresql94-postgresql-0:9.4.14-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7547.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7548","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2677","RHSA-2017:2678"],"bugzilla":"1477187","bugzilla_description":"CVE-2017-7548 postgresql: lo_put() function ignores ACLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["rh-postgresql95-postgresql-0:9.5.9-1.el6","rh-postgresql95-postgresql-0:9.5.9-1.el7","rh-postgresql94-postgresql-0:9.4.14-1.el6","rh-postgresql94-postgresql-0:9.4.14-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-7484","severity":"moderate","public_date":"2017-05-11T00:00:00Z","advisories":["RHSA-2017:1677","RHSA-2017:2425","RHSA-2017:1678","RHSA-2017:1838","RHSA-2017:1983"],"bugzilla":"1448078","bugzilla_description":"CVE-2017-7484 postgresql: Selectivity estimators bypass SELECT privilege checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["postgresql-0:9.2.21-1.el7","rh-postgresql95-postgresql-0:9.5.7-2.el6","rh-postgresql95-postgresql-0:9.5.7-2.el7","rh-postgresql94-postgresql-0:9.4.12-1.el6","rh-postgresql94-postgresql-0:9.4.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7484.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-7485","severity":"moderate","public_date":"2017-05-11T00:00:00Z","advisories":["RHSA-2017:1677","RHSA-2017:2425","RHSA-2017:1678","RHSA-2017:1838"],"bugzilla":"1448086","bugzilla_description":"CVE-2017-7485 postgresql: libpq ignores PGREQUIRESSL environment variable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-390","affected_packages":["rh-postgresql95-postgresql-0:9.5.7-2.el6","rh-postgresql95-postgresql-0:9.5.7-2.el7","rh-postgresql94-postgresql-0:9.4.12-1.el6","rh-postgresql94-postgresql-0:9.4.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-7486","severity":"moderate","public_date":"2017-05-11T00:00:00Z","advisories":["RHSA-2017:1677","RHSA-2017:2425","RHSA-2017:1678","RHSA-2017:1838","RHSA-2017:1983"],"bugzilla":"1448089","bugzilla_description":"CVE-2017-7486 postgresql: pg_user_mappings view discloses foreign server passwords","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["postgresql-0:9.2.21-1.el7","rh-postgresql95-postgresql-0:9.5.7-2.el6","rh-postgresql95-postgresql-0:9.5.7-2.el7","rh-postgresql94-postgresql-0:9.4.12-1.el6","rh-postgresql94-postgresql-0:9.4.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-7070","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":[],"bugzilla":"1627754","bugzilla_description":"CVE-2016-7070 Ansible Tower: PostgreSQL privilege escalation in Tower-deployed setups","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7070.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2016-7048","severity":"important","public_date":"2016-09-22T00:00:00Z","advisories":[],"bugzilla":"1378043","bugzilla_description":"CVE-2016-7048 postgresql: Interactive installer downloads and executes software via plain HTTP","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-494","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5423","severity":"moderate","public_date":"2016-08-11T00:00:00Z","advisories":["RHSA-2016:1781","RHSA-2017:2425","RHSA-2016:2606","RHSA-2016:1820","RHSA-2016:1821"],"bugzilla":"1364001","bugzilla_description":"CVE-2016-5423 postgresql: CASE/WHEN with inlining can cause untrusted pointer dereference","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-822","affected_packages":["postgresql92-postgresql-0:9.2.18-1.el7","postgresql92-postgresql-0:9.2.18-1.el6","rh-postgresql95-postgresql-0:9.5.4-1.el7","rh-postgresql95-postgresql-0:9.5.4-1.el6","rh-postgresql94-postgresql-0:9.4.9-1.el7","postgresql-0:9.2.18-1.el7","rh-postgresql94-postgresql-0:9.4.9-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5423.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2016-5424","severity":"moderate","public_date":"2016-08-11T00:00:00Z","advisories":["RHSA-2016:1781","RHSA-2017:2425","RHSA-2016:2606","RHSA-2016:1820","RHSA-2016:1821"],"bugzilla":"1364002","bugzilla_description":"CVE-2016-5424 postgresql: privilege escalation via crafted database and role names","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["postgresql92-postgresql-0:9.2.18-1.el7","postgresql92-postgresql-0:9.2.18-1.el6","rh-postgresql95-postgresql-0:9.5.4-1.el7","rh-postgresql95-postgresql-0:9.5.4-1.el6","rh-postgresql94-postgresql-0:9.4.9-1.el7","postgresql-0:9.2.18-1.el7","rh-postgresql94-postgresql-0:9.4.9-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5424.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2016-2193","severity":"moderate","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1319806","bugzilla_description":"CVE-2016-2193 postgresql: row security policies in prepared statements disregard user ID changes","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2193.json"},{"CVE":"CVE-2016-3065","severity":"moderate","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1319810","bugzilla_description":"CVE-2016-3065 postgresql: memory disclosure in pageinspect functions","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3065.json"},{"CVE":"CVE-2016-0773","severity":"important","public_date":"2016-02-11T00:00:00Z","advisories":["RHSA-2016:0348","RHSA-2016:0349","RHSA-2016:1060","RHSA-2016:0346","RHSA-2016:0347"],"bugzilla":"1303832","bugzilla_description":"CVE-2016-0773 postgresql: case insensitive range handling integer overflow leading to buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rh-postgresql94-postgresql-0:9.4.6-1.el7","rh-postgresql94-postgresql-0:9.4.6-1.el6","postgresql-0:9.2.15-1.el7_2","postgresql-0:8.4.20-5.el6_7","postgresql92-postgresql-0:9.2.15-2.el6","postgresql92-postgresql-0:9.2.15-1.el7","postgresql92-postgresql-0:9.2.15-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0773.json"},{"CVE":"CVE-2015-5288","severity":"moderate","public_date":"2015-10-08T00:00:00Z","advisories":["RHSA-2015:2077","RHSA-2015:2078","RHSA-2015:2081","RHSA-2015:2083"],"bugzilla":"1270306","bugzilla_description":"CVE-2015-5288 postgresql: limited memory disclosure flaw in crypt()","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-131->CWE-200","affected_packages":["postgresql92-postgresql-0:9.2.14-1.el7","postgresql-0:8.4.20-4.el6_7","postgresql92-postgresql-0:9.2.14-1.el6","postgresql-0:9.2.14-1.el7_1","rh-postgresql94-postgresql-0:9.4.5-1.el6","rh-postgresql94-postgresql-0:9.4.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5288.json"},{"CVE":"CVE-2015-5289","severity":"moderate","public_date":"2015-10-08T00:00:00Z","advisories":["RHSA-2015:2077","RHSA-2015:2078","RHSA-2015:2083"],"bugzilla":"1270312","bugzilla_description":"CVE-2015-5289 postgresql: stack overflow DoS when parsing json or jsonb inputs","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-131->CWE-674","affected_packages":["postgresql92-postgresql-0:9.2.14-1.el7","postgresql92-postgresql-0:9.2.14-1.el6","postgresql-0:9.2.14-1.el7_1","rh-postgresql94-postgresql-0:9.4.5-1.el6","rh-postgresql94-postgresql-0:9.4.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5289.json"},{"CVE":"CVE-2015-3165","severity":"moderate","public_date":"2015-05-22T00:00:00Z","advisories":["RHSA-2015:1196","RHSA-2015:1195","RHSA-2015:1194"],"bugzilla":"1221537","bugzilla_description":"CVE-2015-3165 postgresql: double-free after authentication timeout","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["postgresql-0:9.2.13-1.ael7b_1","rh-postgresql94-postgresql-0:9.4.4-1.el6","rh-postgresql94-postgresql-0:9.4.4-1.el7","postgresql92-postgresql-0:9.2.13-1.el7","postgresql92-postgresql-0:9.2.13-1.el6","postgresql-0:8.4.20-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3165.json"},{"CVE":"CVE-2015-3166","severity":"low","public_date":"2015-05-22T00:00:00Z","advisories":["RHSA-2015:1196","RHSA-2015:1195","RHSA-2015:1194"],"bugzilla":"1221539","bugzilla_description":"CVE-2015-3166 postgresql: unanticipated errors from the standard library","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-391","affected_packages":["postgresql-0:9.2.13-1.ael7b_1","rh-postgresql94-postgresql-0:9.4.4-1.el6","rh-postgresql94-postgresql-0:9.4.4-1.el7","postgresql92-postgresql-0:9.2.13-1.el7","postgresql92-postgresql-0:9.2.13-1.el6","postgresql-0:8.4.20-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3166.json"},{"CVE":"CVE-2015-3167","severity":"low","public_date":"2015-05-22T00:00:00Z","advisories":["RHSA-2015:1196","RHSA-2015:1195","RHSA-2015:1194"],"bugzilla":"1221541","bugzilla_description":"CVE-2015-3167 postgresql: pgcrypto has multiple error messages for decryption with an incorrect key.","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-209","affected_packages":["postgresql-0:9.2.13-1.ael7b_1","rh-postgresql94-postgresql-0:9.4.4-1.el6","rh-postgresql94-postgresql-0:9.4.4-1.el7","postgresql92-postgresql-0:9.2.13-1.el7","postgresql92-postgresql-0:9.2.13-1.el6","postgresql-0:8.4.20-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3167.json"},{"CVE":"CVE-2015-0241","severity":"moderate","public_date":"2015-02-16T00:00:00Z","advisories":["RHSA-2015:0856","RHSA-2015:0699","RHSA-2015:0750"],"bugzilla":"1188684","bugzilla_description":"CVE-2015-0241 postgresql: buffer overflow in the to_char() function","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["postgresql-0:9.2.10-2.el7_1","postgresql-0:8.4.20-2.el6_6","postgresql92-postgresql-0:9.2.10-2.el6","postgresql92-postgresql-0:9.2.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0241.json"},{"CVE":"CVE-2015-0242","severity":"moderate","public_date":"2015-02-16T00:00:00Z","advisories":[],"bugzilla":"1188688","bugzilla_description":"CVE-2015-0242 postgresql: buffer overflow flaws in replacement *printf() functions","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0242.json"},{"CVE":"CVE-2015-0243","severity":"moderate","public_date":"2015-02-16T00:00:00Z","advisories":["RHSA-2015:0856","RHSA-2015:0699","RHSA-2015:0750"],"bugzilla":"1188689","bugzilla_description":"CVE-2015-0243 postgresql: buffer overflow flaws in contrib/pgcrypto","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["postgresql-0:9.2.10-2.el7_1","postgresql-0:8.4.20-2.el6_6","postgresql92-postgresql-0:9.2.10-2.el6","postgresql92-postgresql-0:9.2.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0243.json"},{"CVE":"CVE-2015-0244","severity":"low","public_date":"2015-02-16T00:00:00Z","advisories":["RHSA-2015:0856","RHSA-2015:0699","RHSA-2015:0750"],"bugzilla":"1188694","bugzilla_description":"CVE-2015-0244 postgresql: loss of frontend/backend protocol synchronization after an error","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":"CWE-662->CWE-300","affected_packages":["postgresql-0:9.2.10-2.el7_1","postgresql-0:8.4.20-2.el6_6","postgresql92-postgresql-0:9.2.10-2.el6","postgresql92-postgresql-0:9.2.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0244.json"},{"CVE":"CVE-2014-8161","severity":"moderate","public_date":"2015-02-05T00:00:00Z","advisories":["RHSA-2015:0856","RHSA-2015:0699","RHSA-2015:0750"],"bugzilla":"1182043","bugzilla_description":"CVE-2014-8161 postgresql: information leak through constraint violation errors","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-662->CWE-300","affected_packages":["postgresql-0:9.2.10-2.el7_1","postgresql-0:8.4.20-2.el6_6","postgresql92-postgresql-0:9.2.10-2.el6","postgresql92-postgresql-0:9.2.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8161.json"},{"CVE":"CVE-2014-0060","severity":"moderate","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0211","RHSA-2014:0469","RHSA-2014:0249"],"bugzilla":"1065219","bugzilla_description":"CVE-2014-0060 postgresql: SET ROLE without ADMIN OPTION allows adding and removing group members","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.23-10.el5_10","postgresql84-0:8.4.20-1.el5_10","postgresql92-postgresql-0:9.2.7-1.1.el6","postgresql-0:8.4.20-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0060.json"},{"CVE":"CVE-2014-0061","severity":"moderate","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0211","RHSA-2014:0469","RHSA-2014:0249"],"bugzilla":"1065220","bugzilla_description":"CVE-2014-0061 postgresql: privilege escalation via procedural language validator functions","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.23-10.el5_10","postgresql84-0:8.4.20-1.el5_10","postgresql92-postgresql-0:9.2.7-1.1.el6","postgresql-0:8.4.20-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0061.json"},{"CVE":"CVE-2014-0062","severity":"moderate","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0211","RHSA-2014:0469","RHSA-2014:0249"],"bugzilla":"1065222","bugzilla_description":"CVE-2014-0062 postgresql: CREATE INDEX race condition possibly leading to privilege escalation","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["postgresql-0:8.1.23-10.el5_10","postgresql84-0:8.4.20-1.el5_10","postgresql92-postgresql-0:9.2.7-1.1.el6","postgresql-0:8.4.20-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0062.json"},{"CVE":"CVE-2014-0063","severity":"important","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0211","RHSA-2014:0469","RHSA-2014:0249"],"bugzilla":"1065226","bugzilla_description":"CVE-2014-0063 postgresql: stack-based buffer overflow in datetime input/output","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["postgresql-0:8.1.23-10.el5_10","postgresql84-0:8.4.20-1.el5_10","postgresql92-postgresql-0:9.2.7-1.1.el6","postgresql-0:8.4.20-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0063.json"},{"CVE":"CVE-2014-0064","severity":"important","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0211","RHSA-2014:0469","RHSA-2014:0249"],"bugzilla":"1065230","bugzilla_description":"CVE-2014-0064 postgresql: integer overflows leading to buffer overflows","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["postgresql-0:8.1.23-10.el5_10","postgresql84-0:8.4.20-1.el5_10","postgresql92-postgresql-0:9.2.7-1.1.el6","postgresql-0:8.4.20-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0064.json"},{"CVE":"CVE-2014-0065","severity":"important","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0211","RHSA-2014:0469","RHSA-2014:0249"],"bugzilla":"1065235","bugzilla_description":"CVE-2014-0065 postgresql: possible buffer overflow flaws","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.23-10.el5_10","postgresql84-0:8.4.20-1.el5_10","postgresql92-postgresql-0:9.2.7-1.1.el6","postgresql-0:8.4.20-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0065.json"},{"CVE":"CVE-2014-0066","severity":"moderate","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0211","RHSA-2014:0469","RHSA-2014:0249"],"bugzilla":"1065236","bugzilla_description":"CVE-2014-0066 postgresql: NULL pointer dereference","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["postgresql-0:8.1.23-10.el5_10","postgresql84-0:8.4.20-1.el5_10","postgresql92-postgresql-0:9.2.7-1.1.el6","postgresql-0:8.4.20-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0066.json"},{"CVE":"CVE-2014-0067","severity":"low","public_date":"2014-02-17T00:00:00Z","advisories":[],"bugzilla":"1065863","bugzilla_description":"CVE-2014-0067 postgresql: Vulnerability during \"make check\"","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0067.json"},{"CVE":"CVE-2014-2669","severity":"important","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0469"],"bugzilla":"1082154","bugzilla_description":"CVE-2014-2669 postgresql: multiple integer overflows in hstore_io.c","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["postgresql92-postgresql-0:9.2.7-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2669.json"},{"CVE":"CVE-2013-1899","severity":"important","public_date":"2013-04-04T00:00:00Z","advisories":["RHEA-2013:1487"],"bugzilla":"929223","bugzilla_description":"CVE-2013-1899 postgresql: Insecure switch parsing","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1899.json"},{"CVE":"CVE-2013-1900","severity":"low","public_date":"2013-04-04T00:00:00Z","advisories":["RHEA-2013:1487","RHSA-2013:1475"],"bugzilla":"929255","bugzilla_description":"CVE-2013-1900 postgresql: Improper randomization of pgcrypto functions (requiring random seed)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["postgresql84-0:8.4.18-1.el5_10","postgresql-0:8.4.18-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1900.json"},{"CVE":"CVE-2013-1901","severity":"low","public_date":"2013-04-04T00:00:00Z","advisories":["RHEA-2013:1487"],"bugzilla":"929328","bugzilla_description":"CVE-2013-1901 postgresql: Improper user privilege check for on-line backups","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1901.json"},{"CVE":"CVE-2013-0255","severity":"moderate","public_date":"2013-02-07T00:00:00Z","advisories":["RHSA-2013:1475"],"bugzilla":"907892","bugzilla_description":"CVE-2013-0255 postgresql: array indexing error in enum_recv()","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["postgresql84-0:8.4.18-1.el5_10","postgresql-0:8.4.18-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0255.json"},{"CVE":"CVE-2012-3488","severity":"moderate","public_date":"2012-08-17T00:00:00Z","advisories":["RHSA-2012:1263","RHSA-2012:1264"],"bugzilla":"849172","bugzilla_description":"CVE-2012-3488 postgresql (xml2 contrib module): XXE by applying XSL stylesheet to the document","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["postgresql-0:8.1.23-6.el5_8","postgresql84-0:8.4.13-1.el5_8","postgresql-0:8.4.13-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3488.json"},{"CVE":"CVE-2012-3489","severity":"low","public_date":"2012-08-17T00:00:00Z","advisories":["RHSA-2012:1263"],"bugzilla":"849173","bugzilla_description":"CVE-2012-3489 postgresql: File disclosure through XXE in xmlparse by DTD validation","cvss_score":2.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["postgresql84-0:8.4.13-1.el5_8","postgresql-0:8.4.13-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3489.json"},{"CVE":"CVE-2012-2143","severity":"moderate","public_date":"2012-05-30T00:00:00Z","advisories":["RHSA-2012:1036","RHSA-2012:1047","RHSA-2012:1046","RHSA-2012:1037"],"bugzilla":"816956","bugzilla_description":"CVE-2012-2143 BSD crypt(): DES encrypted password weakness","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["postgresql-0:8.1.23-5.el5_8","postgresql84-0:8.4.12-1.el5_8","postgresql-0:8.4.12-1.el6_2","php-0:5.3.3-14.el6_3","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2143.json"},{"CVE":"CVE-2012-2655","severity":"low","public_date":"2012-05-30T00:00:00Z","advisories":["RHSA-2012:1037"],"bugzilla":"825995","bugzilla_description":"CVE-2012-2655 postgresql: Ability of database owners to install procedural languages via CREATE LANGUAGE found unsafe (DoS)","cvss_score":2.2,"cvss_scoring_vector":"AV:A/AC:L/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["postgresql84-0:8.4.12-1.el5_8","postgresql-0:8.4.12-1.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2655.json"},{"CVE":"CVE-2012-1618","severity":null,"public_date":"2012-03-25T00:00:00Z","advisories":[],"bugzilla":"807394","bugzilla_description":"CVE-2012-1618 postgresql-jdbc: SQL injection due improper escaping of JDBC statement parameters","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1618.json"},{"CVE":"CVE-2012-0866","severity":"low","public_date":"2012-02-27T00:00:00Z","advisories":["RHSA-2012:0678","RHSA-2012:0677"],"bugzilla":"797222","bugzilla_description":"CVE-2012-0866 postgresql: Absent permission checks on trigger function to be called when creating a trigger","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.4.11-1.el6_2","postgresql-0:8.1.23-4.el5_8","postgresql84-0:8.4.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0866.json"},{"CVE":"CVE-2012-0867","severity":"low","public_date":"2012-02-27T00:00:00Z","advisories":["RHSA-2012:0678"],"bugzilla":"797915","bugzilla_description":"CVE-2012-0867 postgresql: MITM due improper x509_v3 CN validation during certificate verification","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["postgresql-0:8.4.11-1.el6_2","postgresql84-0:8.4.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0867.json"},{"CVE":"CVE-2012-0868","severity":"moderate","public_date":"2012-02-27T00:00:00Z","advisories":["RHSA-2012:0678","RHSA-2012:0677"],"bugzilla":"797917","bugzilla_description":"CVE-2012-0868 postgresql: SQL injection due unsanitized newline characters in object names","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["postgresql-0:8.4.11-1.el6_2","postgresql-0:8.1.23-4.el5_8","postgresql84-0:8.4.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0868.json"},{"CVE":"CVE-2011-2483","severity":"moderate","public_date":"2011-06-20T00:00:00Z","advisories":["RHSA-2011:1377","RHSA-2011:1378","RHSA-2011:1423"],"bugzilla":"715025","bugzilla_description":"CVE-2011-2483 crypt_blowfish: 8-bit character mishandling allows different password pairs to produce the same hash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["postgresql-0:7.4.30-3.el4","php53-0:5.3.3-1.el5_7.3","postgresql84-0:8.4.9-1.el5_7.1","postgresql-0:8.4.9-1.el6_1.1","postgresql-0:8.1.23-1.el5_7.2","php-0:5.3.3-3.el6_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2483.json"},{"CVE":"CVE-2010-4015","severity":"moderate","public_date":"2011-02-01T00:00:00Z","advisories":["RHSA-2011:0197","RHSA-2011:0198"],"bugzilla":"664402","bugzilla_description":"CVE-2010-4015 PostgreSQL: Stack-based buffer overflow by processing certain tokens from SQL query string when intarray module enabled","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["postgresql-0:8.4.7-1.el6_0.1","postgresql-0:7.4.30-1.el4_8.2","postgresql84-0:8.4.7-1.el5_6.1","postgresql-0:8.1.23-1.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4015.json"},{"CVE":"CVE-2010-3433","severity":"moderate","public_date":"2010-10-05T00:00:00Z","advisories":["RHSA-2010:0742","RHSA-2010:0908"],"bugzilla":"639371","bugzilla_description":"CVE-2010-3433 PostgreSQL (PL/Perl, PL/Tcl): SECURITY DEFINER function keyword bypass","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.22-1.el5_5.1","postgresql-0:7.4.30-1.el4_8.1","postgresql84-0:8.4.5-1.el5_5.1","postgresql-0:8.4.5-1.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3433.json"},{"CVE":"CVE-2010-1169","severity":"moderate","public_date":"2010-05-17T00:00:00Z","advisories":["RHSA-2010:0429","RHSA-2010:0428","RHSA-2010:0427","RHSA-2010:0430"],"bugzilla":"582615","bugzilla_description":"CVE-2010-1169 PostgreSQL: PL/Perl Intended restriction bypass","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.21-1.el5_5.1","postgresql84-0:8.4.4-1.el5_5.1","postgresql-0:7.4.29-1.el4_8.1","rh-postgresql-0:7.3.21-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1169.json"},{"CVE":"CVE-2010-1170","severity":"moderate","public_date":"2010-05-17T00:00:00Z","advisories":["RHSA-2010:0429","RHSA-2010:0428","RHSA-2010:0427","RHSA-2010:0430"],"bugzilla":"583072","bugzilla_description":"CVE-2010-1170 PostgreSQL: PL/Tcl Intended restriction bypass","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.21-1.el5_5.1","postgresql84-0:8.4.4-1.el5_5.1","postgresql-0:7.4.29-1.el4_8.1","rh-postgresql-0:7.3.21-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1170.json"},{"CVE":"CVE-2010-1975","severity":"low","public_date":"2010-05-17T00:00:00Z","advisories":["RHSA-2010:0429","RHSA-2010:0428","RHSA-2010:0430"],"bugzilla":"593870","bugzilla_description":"CVE-2010-1975 postgresql: improper privilege check during certain RESET ALL operations","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.21-1.el5_5.1","postgresql84-0:8.4.4-1.el5_5.1","postgresql-0:7.4.29-1.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1975.json"},{"CVE":"CVE-2010-0442","severity":"moderate","public_date":"2010-01-27T00:00:00Z","advisories":["RHSA-2010:0429","RHSA-2010:0428","RHSA-2010:0427"],"bugzilla":"559259","bugzilla_description":"CVE-2010-0442 postgresql: substring() negative length argument buffer overflow","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.21-1.el5_5.1","postgresql-0:7.4.29-1.el4_8.1","rh-postgresql-0:7.3.21-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0442.json"},{"CVE":"CVE-2009-4136","severity":"low","public_date":"2009-12-14T00:00:00Z","advisories":["RHSA-2010:0429","RHSA-2010:0428","RHSA-2010:0427"],"bugzilla":"546321","bugzilla_description":"CVE-2009-4136 postgresql: SQL privilege escalation via modifications to session-local state","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.21-1.el5_5.1","postgresql-0:7.4.29-1.el4_8.1","rh-postgresql-0:7.3.21-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4136.json"},{"CVE":"CVE-2010-0733","severity":"low","public_date":"2009-12-14T00:00:00Z","advisories":["RHSA-2010:0429","RHSA-2010:0428","RHSA-2010:0427"],"bugzilla":"546621","bugzilla_description":"CVE-2010-0733 postgresql: Integer overflow in hash table size calculation","cvss_score":2.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["postgresql-0:8.1.21-1.el5_5.1","postgresql-0:7.4.29-1.el4_8.1","rh-postgresql-0:7.3.21-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0733.json"},{"CVE":"CVE-2009-3230","severity":"moderate","public_date":"2009-09-09T00:00:00Z","advisories":["RHSA-2009:1461","RHSA-2009:1485","RHSA-2009:1484"],"bugzilla":"522085","bugzilla_description":"CVE-2009-3230 postgresql: SQL privilege escalation, incomplete fix for CVE-2007-6600","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:7.4.26-1.el4_8.1","rh-postgresql-0:7.3.21-2","postgresql-0:8.1.18-2.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3230.json"},{"CVE":"CVE-2009-0922","severity":"low","public_date":"2009-02-27T00:00:00Z","advisories":["RHSA-2009:1067","RHSA-2009:1484"],"bugzilla":"488156","bugzilla_description":"CVE-2009-0922 postgresql: potential DoS due to conversion functions","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["postgresql-0:7.4.26-1.el4_8.1","postgresql-0:8.1.18-2.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0922.json"},{"CVE":"CVE-2007-4769","severity":"moderate","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0038","RHSA-2008:0040"],"bugzilla":"315231","bugzilla_description":"CVE-2007-4769 postgresql integer overflow in regex code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["postgresql-0:8.1.11-1.el5_1.1","postgresql-0:8.1.11-1.el4s1.1","postgresql-0:7.4.19-1.el4_6.1","postgresql-0:8.2.6-1.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4769.json"},{"CVE":"CVE-2007-4772","severity":"moderate","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0038","RHSA-2008:0134","RHSA-2008:0040","RHSA-2013:0122"],"bugzilla":"316511","bugzilla_description":"CVE-2007-4772 postgresql DoS via infinite loop in regex NFA optimization code","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["postgresql-0:8.1.11-1.el5_1.1","postgresql-0:8.1.11-1.el4s1.1","tcl-0:8.4.13-6.el5","tcltk-0:8.3.5-92.8","postgresql-0:7.4.19-1.el4_6.1","postgresql-0:8.2.6-1.el5s2","tcltk-0:8.3.3-75"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4772.json"},{"CVE":"CVE-2007-6067","severity":"low","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0038","RHSA-2008:0040","RHSA-2013:0122"],"bugzilla":"400931","bugzilla_description":"CVE-2007-6067 postgresql: tempory DoS caused by slow regex NFA cleanup","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.11-1.el5_1.1","postgresql-0:8.1.11-1.el4s1.1","tcl-0:8.4.13-6.el5","postgresql-0:7.4.19-1.el4_6.1","postgresql-0:8.2.6-1.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6067.json"},{"CVE":"CVE-2007-6600","severity":"moderate","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0038","RHSA-2008:0040","RHSA-2008:0039"],"bugzilla":"427127","bugzilla_description":"CVE-2007-6600 PostgreSQL privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.11-1.el5_1.1","postgresql-0:8.1.11-1.el4s1.1","postgresql-0:7.4.19-1.el4_6.1","rh-postgresql-0:7.3.21-1","postgresql-0:8.2.6-1.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6600.json"},{"CVE":"CVE-2007-6601","severity":"moderate","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0038","RHSA-2008:0040","RHSA-2008:0039"],"bugzilla":"427128","bugzilla_description":"CVE-2007-6601 PostgreSQL privilege escalation via dblink","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.11-1.el5_1.1","postgresql-0:8.1.11-1.el4s1.1","postgresql-0:7.4.19-1.el4_6.1","rh-postgresql-0:7.3.21-1","postgresql-0:8.2.6-1.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6601.json"},{"CVE":"CVE-2007-3278","severity":null,"public_date":"2007-06-16T00:00:00Z","advisories":["RHSA-2008:0038","RHSA-2008:0040","RHSA-2008:0039"],"bugzilla":"309141","bugzilla_description":"CVE-2007-3278 dblink allows proxying of database connections via 127.0.0.1","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.11-1.el5_1.1","postgresql-0:8.1.11-1.el4s1.1","postgresql-0:7.4.19-1.el4_6.1","rh-postgresql-0:7.3.21-1","postgresql-0:8.2.6-1.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3278.json"},{"CVE":"CVE-2007-2138","severity":"moderate","public_date":"2007-04-23T00:00:00Z","advisories":["RHSA-2007:0337","RHSA-2007:0336"],"bugzilla":"237682","bugzilla_description":"CVE-2007-2138 PostgreSQL security-definer function privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.9-1.el4s1.1","rh-postgresql-0:7.3.19-1","postgresql-0:8.1.9-1.el5","postgresql-0:7.4.17-1.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2138.json"},{"CVE":"CVE-2007-0556","severity":"moderate","public_date":"2007-02-05T00:00:00Z","advisories":["RHSA-2007:0067","RHSA-2007:0068"],"bugzilla":"1618270","bugzilla_description":"CVE-2007-0556 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.8-1.el5","postgresql-0:8.1.7-3.el4s1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0556.json"},{"CVE":"CVE-2007-0555","severity":"moderate","public_date":"2007-02-05T00:00:00Z","advisories":["RHSA-2007:0064","RHSA-2007:0067","RHSA-2007:0068"],"bugzilla":"1618367","bugzilla_description":"CVE-2007-0555 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.8-1.el5","postgresql-0:8.1.7-3.el4s1.1","rh-postgresql-0:7.3.18-1","postgresql-0:7.4.16-1.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0555.json"},{"CVE":"CVE-2006-5540","severity":"low","public_date":"2006-10-16T00:00:00Z","advisories":["RHSA-2007:0064","RHSA-2007:0067","RHSA-2007:0068"],"bugzilla":"1618217","bugzilla_description":"CVE-2006-5540 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.8-1.el5","postgresql-0:8.1.7-3.el4s1.1","rh-postgresql-0:7.3.18-1","postgresql-0:7.4.16-1.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5540.json"},{"CVE":"CVE-2006-5541","severity":"low","public_date":"2006-10-16T00:00:00Z","advisories":["RHSA-2007:0067","RHSA-2007:0068"],"bugzilla":"1618218","bugzilla_description":"CVE-2006-5541 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.8-1.el5","postgresql-0:8.1.7-3.el4s1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5541.json"},{"CVE":"CVE-2006-5542","severity":"low","public_date":"2006-10-16T00:00:00Z","advisories":["RHSA-2007:0067","RHSA-2007:0068"],"bugzilla":"212360","bugzilla_description":"CVE-2006-5540 New version fixes three different crash vulnerabilities","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.8-1.el5","postgresql-0:8.1.7-3.el4s1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5542.json"},{"CVE":"CVE-2006-0591","severity":"low","public_date":"2006-02-07T00:00:00Z","advisories":["RHSA-2006:0526"],"bugzilla":"1618012","bugzilla_description":"CVE-2006-0591 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.15-2","postgresql-0:7.4.13-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0591.json"},{"CVE":"CVE-2006-2313","severity":"important","public_date":"2005-05-23T00:00:00Z","advisories":["RHSA-2006:0526"],"bugzilla":"1618100","bugzilla_description":"CVE-2006-2313 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.15-2","postgresql-0:7.4.13-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2313.json"},{"CVE":"CVE-2006-2314","severity":"important","public_date":"2005-05-23T00:00:00Z","advisories":["RHSA-2006:0526"],"bugzilla":"1618101","bugzilla_description":"CVE-2006-2314 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.15-2","postgresql-0:7.4.13-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2314.json"},{"CVE":"CVE-2005-1409","severity":"moderate","public_date":"2005-05-02T00:00:00Z","advisories":["RHSA-2005:433"],"bugzilla":"1617632","bugzilla_description":"CVE-2005-1409 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:7.4.8-1.RHEL4.1","rh-postgresql-0:7.3.10-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1409.json"},{"CVE":"CVE-2005-1410","severity":"moderate","public_date":"2005-05-02T00:00:00Z","advisories":["RHSA-2005:433"],"bugzilla":"1617633","bugzilla_description":"CVE-2005-1410 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:7.4.8-1.RHEL4.1","rh-postgresql-0:7.3.10-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1410.json"},{"CVE":"CVE-2005-0247","severity":null,"public_date":"2005-02-01T00:00:00Z","advisories":["RHSA-2005:138","RHSA-2005:141","RHSA-2005:150"],"bugzilla":"1617508","bugzilla_description":"CVE-2005-0247 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.9-2","postgresql-0:7.4.7-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0247.json"},{"CVE":"CVE-2005-0244","severity":"moderate","public_date":"2005-01-27T00:00:00Z","advisories":["RHSA-2005:138","RHSA-2005:141"],"bugzilla":"1617505","bugzilla_description":"CVE-2005-0244 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.9-2","postgresql-0:7.4.7-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0244.json"},{"CVE":"CVE-2005-0246","severity":"low","public_date":"2005-01-27T00:00:00Z","advisories":["RHSA-2005:138","RHSA-2005:141"],"bugzilla":"1617507","bugzilla_description":"CVE-2005-0246 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.9-2","postgresql-0:7.4.7-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0246.json"},{"CVE":"CVE-2005-0227","severity":null,"public_date":"2005-01-21T00:00:00Z","advisories":["RHSA-2005:138","RHSA-2005:141","RHSA-2005:150"],"bugzilla":"1617499","bugzilla_description":"CVE-2005-0227 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.9-2","postgresql-0:7.4.7-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0227.json"},{"CVE":"CVE-2005-0245","severity":"moderate","public_date":"2005-01-20T00:00:00Z","advisories":["RHSA-2005:138","RHSA-2005:141","RHSA-2005:150"],"bugzilla":"1617506","bugzilla_description":"CVE-2005-0245 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.9-2","postgresql-0:7.4.7-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0245.json"},{"CVE":"CVE-2004-0977","severity":"low","public_date":"2004-09-30T00:00:00Z","advisories":["RHSA-2004:489"],"bugzilla":"1617340","bugzilla_description":"CVE-2004-0977 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.8-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0977.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pothana2000-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pothana2000-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pothana2000-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/powerpc-utils-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/powerpc-utils-python_security_api_results.json
new file mode 100644
index 0000000..41909b0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/powerpc-utils-python_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-8165","severity":"moderate","public_date":"2014-09-30T00:00:00Z","advisories":["RHSA-2016:2607"],"bugzilla":"1073139","bugzilla_description":"CVE-2014-8165 powerpc-utils-python: arbitrary code execution due to unpickling untrusted input","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["powerpc-utils-python-0:1.2.1-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8165.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/powerpc-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/powerpc-utils_security_api_results.json
new file mode 100644
index 0000000..e864e7d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/powerpc-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-8165","severity":"moderate","public_date":"2014-09-30T00:00:00Z","advisories":["RHSA-2016:2607"],"bugzilla":"1073139","bugzilla_description":"CVE-2014-8165 powerpc-utils-python: arbitrary code execution due to unpickling untrusted input","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["powerpc-utils-python-0:1.2.1-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8165.json"},{"CVE":"CVE-2014-4040","severity":"low","public_date":"2014-06-13T00:00:00Z","advisories":["RHSA-2015:0384"],"bugzilla":"1110520","bugzilla_description":"CVE-2014-4040 powerpc-utils: snap creates archives with fstab and yaboot.conf which may expose certain passwords","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["powerpc-utils-0:1.2.24-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4040.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/powertop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/powertop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/powertop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ppc64-diag_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ppc64-diag_security_api_results.json
new file mode 100644
index 0000000..d486c46
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ppc64-diag_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-4038","severity":"moderate","public_date":"2014-06-13T00:00:00Z","advisories":["RHSA-2015:1320","RHSA-2015:0383"],"bugzilla":"1109371","bugzilla_description":"CVE-2014-4038 CVE-2014-4039 ppc64-diag: multiple temporary file races","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"(CWE-367|CWE-377)","affected_packages":["ppc64-diag-0:2.6.7-4.el6","ppc64-diag-0:2.6.7-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4038.json"},{"CVE":"CVE-2014-4039","severity":"moderate","public_date":"2014-06-13T00:00:00Z","advisories":["RHSA-2015:1320","RHSA-2015:0383"],"bugzilla":"1109371","bugzilla_description":"CVE-2014-4038 CVE-2014-4039 ppc64-diag: multiple temporary file races","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"(CWE-367|CWE-377)","affected_packages":["ppc64-diag-0:2.6.7-4.el6","ppc64-diag-0:2.6.7-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4039.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ppc64-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ppc64-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ppc64-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ppp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ppp_security_api_results.json
new file mode 100644
index 0000000..56b352a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ppp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15704","severity":null,"public_date":"2020-08-05T00:00:00Z","advisories":[],"bugzilla":"1866491","bugzilla_description":"CVE-2020-15704 ppp: Privilege escalation through loading of arbitrary kernel modules and other programs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15704.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-8597","severity":"important","public_date":"2020-02-03T00:00:00Z","advisories":["RHSA-2020:0630","RHSA-2020:0631","RHSA-2020:0634","RHSA-2020:0633"],"bugzilla":"1800727","bugzilla_description":"CVE-2020-8597 ppp: Buffer overflow in the eap_request and eap_response functions in eap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["ppp-0:2.4.7-26.el8_1","ppp-0:2.4.7-26.el8_0","ppp-0:2.4.5-11.el6_10","ppp-0:2.4.5-34.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-11574","severity":"moderate","public_date":"2018-06-12T04:16:00Z","advisories":[],"bugzilla":"1586071","bugzilla_description":"CVE-2018-11574 ppp: Remote client crash in ppp EAP-TLS patch","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11574.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-3310","severity":"moderate","public_date":"2015-04-13T00:00:00Z","advisories":[],"bugzilla":"1211293","bugzilla_description":"CVE-2015-3310 ppp: buffer overflow in radius plug-in's rc_mksid()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-120|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3310.json"},{"CVE":"CVE-2014-3158","severity":"moderate","public_date":"2014-08-10T00:00:00Z","advisories":[],"bugzilla":"1128748","bugzilla_description":"CVE-2014-3158 ppp: integer overflow in option parsing","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3158.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pptp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pptp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pptp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/prelink_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/prelink_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/prelink_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/procmail_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/procmail_security_api_results.json
new file mode 100644
index 0000000..a2e7b1a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/procmail_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-16844","severity":"important","public_date":"2017-09-22T00:00:00Z","advisories":["RHSA-2017:3269"],"bugzilla":"1500070","bugzilla_description":"CVE-2017-16844 procmail: Heap-based buffer overflow in loadbuf function in formisc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["procmail-0:3.22-36.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16844.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-3618","severity":"important","public_date":"2014-09-04T00:00:00Z","advisories":["RHSA-2014:1172"],"bugzilla":"1137581","bugzilla_description":"CVE-2014-3618 procmail: Heap-overflow in procmail's formail utility when processing specially-crafted email headers","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-228->CWE-122","affected_packages":["procmail-0:3.22-25.1.el6_5.1","procmail-0:3.22-17.1.2","procmail-0:3.22-34.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3618.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/procps-ng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/procps-ng_security_api_results.json
new file mode 100644
index 0000000..7ec4792
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/procps-ng_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1124","severity":"important","public_date":"2018-05-17T17:00:00Z","advisories":["RHSA-2019:2401","RHSA-2018:1820","RHSA-2018:1777","RHSA-2018:1700","RHSA-2019:1944","RHSA-2018:2267","RHSA-2018:2268"],"bugzilla":"1575465","bugzilla_description":"CVE-2018-1124 procps-ng, procps: Integer overflows leading to heap overflow in file2strvec","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["procps-0:3.2.8-35.el6_7.1","procps-0:3.2.8-45.el6_9.3","procps-ng-0:3.3.10-17.el7_5.2","procps-ng-0:3.3.10-10.el7_3.1","procps-ng-0:3.3.10-16.el7_4.1","procps-0:3.2.8-30.el6_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1124.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2018-1122","severity":"moderate","public_date":"2018-05-17T17:00:00Z","advisories":["RHSA-2020:0595","RHSA-2020:1464","RHSA-2019:2189","RHSA-2020:1265"],"bugzilla":"1575466","bugzilla_description":"CVE-2018-1122 procps-ng, procps: Local privilege escalation in top","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["procps-ng-0:3.3.10-26.el7","procps-ng-0:3.3.10-23.el7_6.2","procps-ng-0:3.3.10-17.el7_5.4","procps-ng-0:3.3.10-16.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1122.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-1121","severity":"low","public_date":"2018-05-17T17:00:00Z","advisories":[],"bugzilla":"1575473","bugzilla_description":"CVE-2018-1121 procps-ng, procps: process hiding through race condition enumerating /proc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1121.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2018-1123","severity":"low","public_date":"2018-05-17T17:00:00Z","advisories":[],"bugzilla":"1575474","bugzilla_description":"CVE-2018-1123 procps-ng, procps: denial of service in ps via mmap buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1123.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2018-1125","severity":"low","public_date":"2018-05-17T17:00:00Z","advisories":[],"bugzilla":"1575852","bugzilla_description":"CVE-2018-1125 procps-ng, procps: stack buffer overflow in pgrep","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-1126","severity":"moderate","public_date":"2018-05-17T17:00:00Z","advisories":["RHSA-2018:1820","RHSA-2018:1777","RHSA-2018:1700","RHSA-2019:1944","RHSA-2018:2267","RHSA-2018:2268"],"bugzilla":"1575853","bugzilla_description":"CVE-2018-1126 procps-ng, procps: incorrect integer size in proc/alloc.* leading to truncation / integer overflow issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["procps-0:3.2.8-35.el6_7.1","procps-0:3.2.8-45.el6_9.3","procps-ng-0:3.3.10-17.el7_5.2","procps-ng-0:3.3.10-16.el7_4.1","procps-0:3.2.8-30.el6_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/protobuf-c_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/protobuf-c_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/protobuf-c_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/protobuf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/protobuf_security_api_results.json
new file mode 100644
index 0000000..d67b8ae
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/protobuf_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5237","severity":"low","public_date":"2015-08-27T00:00:00Z","advisories":[],"bugzilla":"1256426","bugzilla_description":"CVE-2015-5237 protobuf: integer overflow in serialization","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-131->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5237.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ps_mem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ps_mem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ps_mem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/psacct_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/psacct_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/psacct_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/psmisc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/psmisc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/psmisc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ptlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ptlib_security_api_results.json
new file mode 100644
index 0000000..730601b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ptlib_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-1864","severity":"low","public_date":"2013-01-09T00:00:00Z","advisories":[],"bugzilla":"922177","bugzilla_description":"CVE-2013-1864 ptlib: denial of service processing certain XML documents","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1864.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-gdm-hooks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-gdm-hooks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-gdm-hooks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-libs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-libs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-libs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-libs-glib2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-libs-glib2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-libs-glib2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-module-bluetooth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-module-bluetooth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-module-bluetooth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-module-x11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-module-x11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-module-x11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio_security_api_results.json
new file mode 100644
index 0000000..dac83b4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pulseaudio_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-7805","severity":"moderate","public_date":"2015-10-12T00:00:00Z","advisories":[],"bugzilla":"1277897","bugzilla_description":"CVE-2015-7805 libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7805.json"},{"CVE":"CVE-2014-3970","severity":"low","public_date":"2014-05-31T00:00:00Z","advisories":[],"bugzilla":"1104835","bugzilla_description":"CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3970.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/purple-sipe_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/purple-sipe_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/purple-sipe_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyOpenSSL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyOpenSSL_security_api_results.json
new file mode 100644
index 0000000..55eb8d7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyOpenSSL_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1000808","severity":"low","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2019:0085"],"bugzilla":"1640216","bugzilla_description":"CVE-2018-1000808 pyOpenSSL: Failure to release memory before removing last reference in PKCS #12 Store","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["pyOpenSSL-0:17.5.0-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-1000807","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2019:0085"],"bugzilla":"1640217","bugzilla_description":"CVE-2018-1000807 pyOpenSSL: Use-after-free in X509 object handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["pyOpenSSL-0:17.5.0-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2013-4314","severity":"moderate","public_date":"2013-09-04T00:00:00Z","advisories":[],"bugzilla":"1005325","bugzilla_description":"CVE-2013-4314 pyOpenSSL: hostname check bypassing vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4314.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pycairo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pycairo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pycairo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygobject2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygobject2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygobject2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygobject3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygobject3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygobject3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygpgme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygpgme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygpgme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygtk2-libglade_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygtk2-libglade_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygtk2-libglade_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygtk2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygtk2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pygtk2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pykde4_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pykde4_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pykde4_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pykickstart_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pykickstart_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pykickstart_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyldb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyldb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyldb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyliblzma_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyliblzma_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyliblzma_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyorbit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyorbit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyorbit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyparsing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyparsing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyparsing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyparted_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyparted_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyparted_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyserial_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyserial_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyserial_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pytalloc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pytalloc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pytalloc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-IPy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-IPy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-IPy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-adal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-adal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-adal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-augeas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-augeas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-augeas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-azure-sdk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-azure-sdk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-azure-sdk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-babel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-babel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-babel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-backports-ssl_match_hostname_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-backports-ssl_match_hostname_security_api_results.json
new file mode 100644
index 0000000..de1a8f8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-backports-ssl_match_hostname_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-2099","severity":"low","public_date":"2013-05-15T00:00:00Z","advisories":["RHSA-2016:1166","RHBA-2016:1500","RHSA-2014:1690","RHSA-2015:0042","RHSA-2014:1263"],"bugzilla":"963260","bugzilla_description":"CVE-2013-2099 python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-backports-ssl_match_hostname-0:3.4.0.2-1.el6","python-pymongo-0:3.2-1.el7sat","python-pymongo-0:3.2-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-backports_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-backports_security_api_results.json
new file mode 100644
index 0000000..de1a8f8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-backports_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-2099","severity":"low","public_date":"2013-05-15T00:00:00Z","advisories":["RHSA-2016:1166","RHBA-2016:1500","RHSA-2014:1690","RHSA-2015:0042","RHSA-2014:1263"],"bugzilla":"963260","bugzilla_description":"CVE-2013-2099 python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-backports-ssl_match_hostname-0:3.4.0.2-1.el6","python-pymongo-0:3.2-1.el7sat","python-pymongo-0:3.2-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-bcc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-bcc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-bcc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-beaker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-beaker_security_api_results.json
new file mode 100644
index 0000000..288f3be
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-beaker_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7489","severity":"moderate","public_date":"2020-05-14T00:00:00Z","advisories":[],"bugzilla":"1850105","bugzilla_description":"CVE-2013-7489 python-beaker:  Deserialization of Untrusted Data which can lead to Arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7489.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"5.7"},{"CVE":"CVE-2012-3458","severity":"moderate","public_date":"2012-08-13T00:00:00Z","advisories":[],"bugzilla":"809267","bugzilla_description":"CVE-2012-3458 python-beaker: weak use of crypto can leak information to remote attackers","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3458.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-blivet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-blivet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-blivet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-boto3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-boto3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-boto3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-brlapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-brlapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-brlapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cffi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cffi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cffi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-chardet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-chardet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-chardet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cherrypy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cherrypy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cherrypy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-clufter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-clufter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-clufter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-configobj_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-configobj_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-configobj_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-configshell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-configshell_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-configshell_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-coverage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-coverage_security_api_results.json
new file mode 100644
index 0000000..770b093
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-coverage_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cpio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cpio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cpio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cups_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cups_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-cups_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-custodia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-custodia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-custodia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-dateutil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-dateutil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-dateutil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-decorator_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-decorator_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-decorator_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-deltarpm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-deltarpm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-deltarpm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-di_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-di_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-di_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-dmidecode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-dmidecode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-dmidecode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-dns_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-dns_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-dns_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-docutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-docutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-docutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-enum34_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-enum34_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-enum34_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ethtool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ethtool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ethtool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-firewall_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-firewall_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-firewall_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gobject-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gobject-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gobject-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gobject_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gobject_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gobject_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gssapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gssapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gssapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gudev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gudev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-gudev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-hwdata_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-hwdata_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-hwdata_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-idna_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-idna_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-idna_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-iniparse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-iniparse_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-iniparse_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-inotify_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-inotify_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-inotify_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ipaddr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ipaddr_security_api_results.json
new file mode 100644
index 0000000..90a5baa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ipaddr_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14422","severity":"moderate","public_date":"2020-06-18T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285"],"bugzilla":"1854926","bugzilla_description":"CVE-2020-14422 python: DoS via inefficiency in IPv{4,6}Interface classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14422.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ipaddress_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ipaddress_security_api_results.json
new file mode 100644
index 0000000..90a5baa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ipaddress_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14422","severity":"moderate","public_date":"2020-06-18T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285"],"bugzilla":"1854926","bugzilla_description":"CVE-2020-14422 python: DoS via inefficiency in IPv{4,6}Interface classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14422.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-isodate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-isodate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-isodate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-javapackages_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-javapackages_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-javapackages_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jinja2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jinja2_security_api_results.json
new file mode 100644
index 0000000..9435ae4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jinja2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-10906","severity":"important","public_date":"2019-04-06T00:00:00Z","advisories":["RHSA-2019:1237","RHSA-2019:1329","RHSA-2019:1152","RHSA-2019:3172"],"bugzilla":"1698839","bugzilla_description":"CVE-2019-10906 python-jinja2: str.format_map allows sandbox escape","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","rh-python36-python-jinja2-0:2.9.6-3.el6","rh-python36-python-jinja2-0:2.9.6-3.el7","rh-python35-python-jinja2-0:2.8.1-2.el7","python-jinja2-0:2.10.1-2.el8_0","rh-python35-python-jinja2-0:2.8.1-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2019-8341","severity":null,"public_date":"2019-02-14T00:00:00Z","advisories":[],"bugzilla":"1677653","bugzilla_description":"CVE-2019-8341 python-jinja2: command injection in function from_string","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8341.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","cvss3_score":"8.2"},{"CVE":"CVE-2016-10745","severity":"important","public_date":"2016-12-29T00:00:00Z","advisories":["RHSA-2019:1022","RHSA-2019:3964","RHSA-2019:1237","RHSA-2019:4062","RHSA-2019:1260","RHSA-2019:3172"],"bugzilla":"1698345","bugzilla_description":"CVE-2016-10745 python-jinja2: Sandbox escape due to information disclosure via str.format","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","python27-python-jinja2-0:2.6-15.el7","python-jinja2-0:2.7.2-3.el7_4","python-jinja2-0:2.7.2-3.el7_5","python-jinja2-0:2.7.2-3.el7_6","rh-python35-python-jinja2-0:2.8.1-2.el7","rh-python35-python-jinja2-0:2.8.1-2.el6","python27-python-jinja2-0:2.6-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2014-0012","severity":"moderate","public_date":"2014-01-11T00:00:00Z","advisories":[],"bugzilla":"1052102","bugzilla_description":"CVE-2014-0012 python-jinja2: FileSystemBytecodeCache insecure cache temporary file use, incorrect CVE-2014-1402 fix","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0012.json"},{"CVE":"CVE-2014-1402","severity":"moderate","public_date":"2014-01-09T00:00:00Z","advisories":["RHSA-2014:0748","RHSA-2014:0747"],"bugzilla":"1051421","bugzilla_description":"CVE-2014-1402 python-jinja2: FileSystemBytecodeCache insecure cache temporary file use","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":["python27-python-jinja2-0:2.6-10.el6","python33-python-jinja2-0:2.6-12.el7","python-jinja2-0:2.2.1-2.el6_5","python33-python-jinja2-0:2.6-11.el6","python27-python-jinja2-0:2.6-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1402.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jsonpatch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jsonpatch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jsonpatch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jsonpointer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jsonpointer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jsonpointer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jwcrypto_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jwcrypto_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jwcrypto_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jwt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jwt_security_api_results.json
new file mode 100644
index 0000000..c91b653
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-jwt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-11424","severity":"moderate","public_date":"2017-06-22T00:00:00Z","advisories":[],"bugzilla":"1482529","bugzilla_description":"CVE-2017-11424 python-jwt: Incorrect handling of PEM-encoded public keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11424.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kdcproxy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kdcproxy_security_api_results.json
new file mode 100644
index 0000000..649d681
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kdcproxy_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5159","severity":"low","public_date":"2015-07-21T00:00:00Z","advisories":[],"bugzilla":"1245200","bugzilla_description":"CVE-2015-5159 python-kdcproxy: Missing request size limit allows denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5159.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kerberos_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kerberos_security_api_results.json
new file mode 100644
index 0000000..cc1218b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kerberos_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-3206","severity":"moderate","public_date":"2015-05-21T00:00:00Z","advisories":[],"bugzilla":"1223802","bugzilla_description":"CVE-2015-3206 python-kerberos: checkPassword() does not verify KDC authenticity","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-304","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3206.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kitchen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kitchen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kitchen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kmod_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kmod_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-kmod_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-krbV_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-krbV_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-krbV_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ldap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ldap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libguestfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libguestfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libguestfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libipa_hbac_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libipa_hbac_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libipa_hbac_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libsss_nss_idmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libsss_nss_idmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-libsss_nss_idmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-linux-procfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-linux-procfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-linux-procfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-lxml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-lxml_security_api_results.json
new file mode 100644
index 0000000..161052c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-lxml_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19787","severity":"moderate","public_date":"2018-09-09T00:00:00Z","advisories":[],"bugzilla":"1660235","bugzilla_description":"CVE-2018-19787 python-lxml: XSS in lxml.html.clean module in lxml/html/clean.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19787.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2014-3146","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1092613","bugzilla_description":"CVE-2014-3146 python-lxml: clean_html input sanitization flaw","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3146.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-magic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-magic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-magic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-mako_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-mako_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-mako_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-markupsafe_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-markupsafe_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-markupsafe_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-matplotlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-matplotlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-matplotlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-meh-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-meh-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-meh-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-meh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-meh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-meh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-memcached_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-memcached_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-memcached_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-msrest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-msrest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-msrest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-msrestazure_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-msrestazure_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-msrestazure_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-netaddr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-netaddr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-netaddr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-netifaces_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-netifaces_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-netifaces_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-nose_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-nose_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-nose_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-nss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-nss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-nss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ntplib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ntplib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ntplib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-paramiko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-paramiko_security_api_results.json
new file mode 100644
index 0000000..8aeacaf
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-paramiko_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1000805","severity":"critical","public_date":"2018-09-07T00:00:00Z","advisories":["RHBA-2018:3497","RHSA-2018:3470","RHSA-2018:3406","RHSA-2018:3347"],"bugzilla":"1637263","bugzilla_description":"CVE-2018-1000805 python-paramiko: Authentication bypass in auth_handler.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["redhat-virtualization-host-0:4.2-20181026.0.el7_6","python-paramiko-0:1.7.5-5.el6_10","python-paramiko-0:2.1.1-9.el7","rhvm-appliance-0:4.2-20181026.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-7750","severity":"critical","public_date":"2018-03-13T00:00:00Z","advisories":["RHSA-2018:1525","RHSA-2018:1328","RHSA-2018:0646","RHSA-2018:1972","RHSA-2018:1213","RHSA-2018:1125","RHSA-2018:1124","RHSA-2018:0591","RHSA-2018:1274"],"bugzilla":"1557130","bugzilla_description":"CVE-2018-7750 python-paramiko: Authentication bypass in transport.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["python-paramiko-0:1.7.5-4.el6_9","python-paramiko-0:2.1.1-4.el7","python-paramiko-0:1.7.5-4.el6_7","python-paramiko-0:1.7.5-4.el6_6","python-paramiko-0:1.7.5-4.el6_5","rhvm-appliance-0:4.2-20180504.0","python-paramiko-0:1.7.5-4.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-paste_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-paste_security_api_results.json
new file mode 100644
index 0000000..a205e7d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-paste_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-0878","severity":"moderate","public_date":"2012-02-06T00:00:00Z","advisories":["RHSA-2012:1206"],"bugzilla":"796790","bugzilla_description":"CVE-2012-0878 python-paste-script: Supplementary groups not dropped when started an application with \"paster serve\" as root","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["python-paste-script-0:1.7.3-5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0878.json"},{"CVE":"CVE-2010-2477","severity":"moderate","public_date":"2010-06-24T00:00:00Z","advisories":[],"bugzilla":"651633","bugzilla_description":"CVE-2010-2477 python-paste: multiple XSS vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2477.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pcp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pcp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-perf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-perf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-perf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pillow_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pillow_security_api_results.json
new file mode 100644
index 0000000..ce54ad8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pillow_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-11538","severity":"important","public_date":"2020-07-01T00:00:00Z","advisories":["RHSA-2020:3302","RHSA-2020:3299","RHSA-2020:3185"],"bugzilla":"1852814","bugzilla_description":"CVE-2020-11538 python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["python-pillow-0:5.1.1-11.el8_1","python-pillow-0:5.1.1-11.el8_0","python-pillow-0:5.1.1-12.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11538.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10994","severity":"low","public_date":"2020-06-25T00:00:00Z","advisories":[],"bugzilla":"1852820","bugzilla_description":"CVE-2020-10994 python-pillow: multiple out-of-bounds reads via a crafted JP2 file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10994.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-10177","severity":"low","public_date":"2020-06-25T00:00:00Z","advisories":[],"bugzilla":"1852824","bugzilla_description":"CVE-2020-10177 python-pillow: multiple out-of-bounds reads in libImaging/FliDecode.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10177.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-10378","severity":"low","public_date":"2020-06-25T00:00:00Z","advisories":[],"bugzilla":"1852832","bugzilla_description":"CVE-2020-10378 python-pillow: an out-of-bounds read in libImaging/PcxDecode.c can occur when reading PCX files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10378.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-10379","severity":"important","public_date":"2020-06-25T00:00:00Z","advisories":[],"bugzilla":"1852836","bugzilla_description":"CVE-2020-10379 python-pillow: two buffer overflows in libImaging/TiffDecode.c due to small buffers allocated in ImagingLibTiffDecode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10379.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-5313","severity":"moderate","public_date":"2020-01-03T00:00:00Z","advisories":["RHSA-2020:3185","RHSA-2020:3887"],"bugzilla":"1789532","bugzilla_description":"CVE-2020-5313 python-pillow: out-of-bounds read in ImagingFliDecode when loading FLI images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["python-pillow-0:2.0.0-21.gitd1c6db8.el7","python-pillow-0:5.1.1-12.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5313.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-5312","severity":"important","public_date":"2020-01-03T00:00:00Z","advisories":["RHSA-2020:0580","RHSA-2020:0566","RHSA-2020:0898","RHSA-2020:0578"],"bugzilla":"1789533","bugzilla_description":"CVE-2020-5312 python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["python-imaging-0:1.1.6-20.el6_10","python-pillow-0:2.0.0-20.gitd1c6db8.el7_7","python-pillow-0:5.1.1-10.el8_1","python-pillow-0:5.1.1-10.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5312.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-5311","severity":"important","public_date":"2020-01-03T00:00:00Z","advisories":["RHSA-2020:0580","RHSA-2020:0566"],"bugzilla":"1789535","bugzilla_description":"CVE-2020-5311 python-pillow: out-of-bounds write in expandrow in libImaging/SgiRleDecode.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["python-pillow-0:5.1.1-10.el8_1","python-pillow-0:5.1.1-10.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5311.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-5310","severity":"important","public_date":"2020-01-03T00:00:00Z","advisories":[],"bugzilla":"1789538","bugzilla_description":"CVE-2020-5310 python-pillow: Integer overflow leading to buffer overflow in ImagingLibTiffDecode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5310.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-19911","severity":"moderate","public_date":"2020-01-03T00:00:00Z","advisories":[],"bugzilla":"1789540","bugzilla_description":"CVE-2019-19911 python-pillow: uncontrolled resource consumption in FpxImagePlugin.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19911.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16865","severity":"moderate","public_date":"2019-10-04T00:00:00Z","advisories":["RHSA-2020:0580","RHSA-2020:0566","RHSA-2020:0578"],"bugzilla":"1774066","bugzilla_description":"CVE-2019-16865 python-pillow: reading specially crafted image files leads to allocation of large amounts of memory and denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["python-pillow-0:2.0.0-20.gitd1c6db8.el7_7","python-pillow-0:5.1.1-10.el8_1","python-pillow-0:5.1.1-10.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16865.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9189","severity":"moderate","public_date":"2016-10-03T00:00:00Z","advisories":[],"bugzilla":"1382000","bugzilla_description":"CVE-2016-9189 python-pillow: Integer overflows leading to memory disclosure in PyImaging_MapBuffer (Map.c)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9189.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-9190","severity":"moderate","public_date":"2016-10-03T00:00:00Z","advisories":[],"bugzilla":"1382006","bugzilla_description":"CVE-2016-9190 python-pillow: Missing check for negative image dimensions in ImagingNew (Storage.c)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9190.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-4009","severity":"moderate","public_date":"2016-04-14T00:00:00Z","advisories":[],"bugzilla":"1327134","bugzilla_description":"CVE-2016-4009 python-pillow: integer overflow in the ImagingResampleHorizontal function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4009.json"},{"CVE":"CVE-2016-3076","severity":"moderate","public_date":"2016-04-04T00:00:00Z","advisories":[],"bugzilla":"1321929","bugzilla_description":"CVE-2016-3076 python-pillow: buffer overflow in Jpeg2kEncode.c","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3076.json"},{"CVE":"CVE-2016-0740","severity":"moderate","public_date":"2016-02-04T00:00:00Z","advisories":[],"bugzilla":"1298874","bugzilla_description":"CVE-2016-0740 python-pillow: Integer overflow resulting in buffer overflow when reading invalid tiff file","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0740.json"},{"CVE":"CVE-2016-0775","severity":"moderate","public_date":"2016-02-04T00:00:00Z","advisories":[],"bugzilla":"1301621","bugzilla_description":"CVE-2016-0775 python-pillow: Buffer overflow in FliDecode.c","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0775.json"},{"CVE":"CVE-2014-9601","severity":"low","public_date":"2014-12-31T00:00:00Z","advisories":[],"bugzilla":"1179354","bugzilla_description":"CVE-2014-9601 python-pillow: potential denial-of-service during PNG decompression","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9601.json"},{"CVE":"CVE-2014-3606","severity":null,"public_date":"2014-11-12T00:00:00Z","advisories":[],"bugzilla":"1133306","bugzilla_description":"CVE-2014-3606 python-pillow: flaw in _unop()","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3606.json"},{"CVE":"CVE-2014-3598","severity":"moderate","public_date":"2014-09-01T00:00:00Z","advisories":[],"bugzilla":"1163441","bugzilla_description":"CVE-2014-3598 python-pillow: Jpeg2KImagePlugin infinite loop DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3598.json"},{"CVE":"CVE-2014-3589","severity":"moderate","public_date":"2014-08-13T00:00:00Z","advisories":[],"bugzilla":"1130711","bugzilla_description":"CVE-2014-3589 python-pillow, python-imaging: DoS in IcnsImagePlugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3589.json"},{"CVE":"CVE-2016-2533","severity":"moderate","public_date":"2014-03-24T00:00:00Z","advisories":[],"bugzilla":"1304504","bugzilla_description":"CVE-2016-2533 python-pillow: Buffer overflow in PCD decoding","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2533.json"},{"CVE":"CVE-2014-1932","severity":"low","public_date":"2014-01-29T00:00:00Z","advisories":[],"bugzilla":"1063658","bugzilla_description":"CVE-2014-1932 python-pillow, python-imaging: insecure temporary file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1932.json"},{"CVE":"CVE-2014-1933","severity":"low","public_date":"2014-01-29T00:00:00Z","advisories":[],"bugzilla":"1063660","bugzilla_description":"CVE-2014-1933 python-pillow, python-imaging: temporary file name exposure in process list","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-214","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1933.json"},{"CVE":"CVE-2014-3007","severity":"moderate","public_date":"2014-01-29T00:00:00Z","advisories":[],"bugzilla":"1094101","bugzilla_description":"CVE-2014-3007 python-pillow, python-imaging: command injection issue","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3007.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ply_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ply_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-ply_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-prettytable_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-prettytable_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-prettytable_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-psycopg2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-psycopg2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-psycopg2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pwquality_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pwquality_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pwquality_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pyblock_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pyblock_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pyblock_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pycparser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pycparser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pycparser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pycurl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pycurl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pycurl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pyudev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pyudev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-pyudev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-qrcode-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-qrcode-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-qrcode-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rados_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rados_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rados_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rbd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rbd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rbd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-reportlab_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-reportlab_security_api_results.json
new file mode 100644
index 0000000..b921bc1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-reportlab_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17626","severity":"important","public_date":"2019-10-16T00:00:00Z","advisories":["RHSA-2020:0201","RHSA-2020:0195","RHSA-2020:0197","RHSA-2020:0230"],"bugzilla":"1769661","bugzilla_description":"CVE-2019-17626 python-reportlab: code injection in colors.py allows attacker to execute code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-95","affected_packages":["python-reportlab-0:2.5-9.el7_7.1","python-reportlab-0:2.3-3.el6_10.1","python-reportlab-0:3.4.0-6.el8_0.2","python-reportlab-0:3.4.0-6.el8_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17626.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2011-5244","severity":"moderate","public_date":"2011-03-04T00:00:00Z","advisories":[],"bugzilla":"878483","bugzilla_description":"CVE-2011-5244 t1lib: off-by-one errors in token and linetoken","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5244.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-requests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-requests_security_api_results.json
new file mode 100644
index 0000000..4a85da3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-requests_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-18074","severity":"low","public_date":"2018-06-29T00:00:00Z","advisories":["RHSA-2019:2035","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHBA-2020:1540"],"bugzilla":"1643829","bugzilla_description":"CVE-2018-18074 python-requests: Redirect from HTTPS to HTTP does not remove Authorization header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-requests-0:2.6.0-5.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18074.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2018-20060","severity":"moderate","public_date":"2018-03-26T00:00:00Z","advisories":["RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHSA-2019:2272","RHBA-2020:1540"],"bugzilla":"1649153","bugzilla_description":"CVE-2018-20060 python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-urllib3-0:1.10.2-7.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2015-2296","severity":"moderate","public_date":"2015-03-14T00:00:00Z","advisories":[],"bugzilla":"1202904","bugzilla_description":"CVE-2015-2296 python-requests: session fixation and cookie stealing vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2296.json"},{"CVE":"CVE-2014-1829","severity":"low","public_date":"2013-12-25T00:00:00Z","advisories":[],"bugzilla":"1046626","bugzilla_description":"CVE-2014-1829 python-requests: redirect can expose netrc password","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-285->CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1829.json"},{"CVE":"CVE-2014-1830","severity":"low","public_date":"2013-12-25T00:00:00Z","advisories":[],"bugzilla":"1144907","bugzilla_description":"CVE-2014-1830 python-requests: Proxy-Authorization header leak","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1830.json"},{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-2099","severity":"low","public_date":"2013-05-15T00:00:00Z","advisories":["RHSA-2016:1166","RHBA-2016:1500","RHSA-2014:1690","RHSA-2015:0042","RHSA-2014:1263"],"bugzilla":"963260","bugzilla_description":"CVE-2013-2099 python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-backports-ssl_match_hostname-0:3.4.0.2-1.el6","python-pymongo-0:3.2-1.el7sat","python-pymongo-0:3.2-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rhsm-certificates_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rhsm-certificates_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rhsm-certificates_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rhsm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rhsm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rhsm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rtslib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rtslib_security_api_results.json
new file mode 100644
index 0000000..8580009
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-rtslib_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14019","severity":"moderate","public_date":"2020-06-19T00:00:00Z","advisories":[],"bugzilla":"1854723","bugzilla_description":"CVE-2020-14019 python-rtslib: weak permissions for /etc/target/saveconfig.json","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14019.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"6.6"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-s3transfer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-s3transfer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-s3transfer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-schedutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-schedutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-schedutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-setproctitle_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-setproctitle_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-setproctitle_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-setuptools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-setuptools_security_api_results.json
new file mode 100644
index 0000000..df420ad
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-setuptools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-1633","severity":"moderate","public_date":"2013-06-02T00:00:00Z","advisories":[],"bugzilla":"994182","bugzilla_description":"CVE-2013-1633 python-setuptools: easy_install insecure installation mechanism","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1633.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-six_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-six_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-six_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-slip-dbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-slip-dbus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-slip-dbus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-slip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-slip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-slip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-smbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-smbc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-smbc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sqlalchemy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sqlalchemy_security_api_results.json
new file mode 100644
index 0000000..b2d3ad3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sqlalchemy_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-7548","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:0984","RHSA-2019:0981"],"bugzilla":"1674059","bugzilla_description":"CVE-2019-7548 python-sqlalchemy: SQL Injection when the group_by parameter can be controlled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":["python27:2.7-8000020190410132513.c0efe978","python36:3.6-8000020190410133122.593c47b3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-7164","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:0984","RHSA-2019:0981"],"bugzilla":"1678520","bugzilla_description":"CVE-2019-7164 python-sqlalchemy: SQL Injection when the order_by parameter can be controlled","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python27:2.7-8000020190410132513.c0efe978","python36:3.6-8000020190410133122.593c47b3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2012-0805","severity":"moderate","public_date":"2012-03-07T00:00:00Z","advisories":["RHSA-2012:0369"],"bugzilla":"783305","bugzilla_description":"CVE-2012-0805 python-sqlalchemy: SQL injection flaw due to not checking LIMIT input for correct type","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["python-sqlalchemy-0:0.5.5-3.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0805.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-srpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-srpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-srpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sss-murmur_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sss-murmur_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sss-murmur_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sssdconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sssdconfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-sssdconfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-suds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-suds_security_api_results.json
new file mode 100644
index 0000000..0e6cf5b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-suds_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-2217","severity":"low","public_date":"2013-06-27T00:00:00Z","advisories":[],"bugzilla":"978696","bugzilla_description":"CVE-2013-2217 python-suds: Insecure temporary directory use when initializing file-based URL cache","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2217.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-syspurpose_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-syspurpose_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-syspurpose_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-tdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-tdb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-tdb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-tempita_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-tempita_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-tempita_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-tevent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-tevent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-tevent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-urlgrabber_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-urlgrabber_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-urlgrabber_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-urllib3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-urllib3_security_api_results.json
new file mode 100644
index 0000000..fc48f8f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-urllib3_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-7212","severity":null,"public_date":"2020-03-06T00:00:00Z","advisories":[],"bugzilla":"1812095","bugzilla_description":"CVE-2020-7212 python-urllib3: inefficient algorithm allows a DoS (CPU consumption) in _encode_invalid_chars function in util/url.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7212.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-26137","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299"],"bugzilla":"1883632","bugzilla_description":"CVE-2020-26137 python-urllib3: CRLF injection via HTTP request method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["rh-python38-python-urllib3-0:1.25.7-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26137.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11324","severity":"moderate","public_date":"2019-04-17T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:2804","RHSA-2020:1916","RHSA-2020:1605","RHBA-2020:2785","RHSA-2019:3590"],"bugzilla":"1702473","bugzilla_description":"CVE-2019-11324 python-urllib3: Certification mishandle when error should be thrown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-pip-0:9.0.3-7.el7_8","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-11236","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHBA-2020:2804","RHSA-2020:1605","RHSA-2020:0851","RHBA-2020:2785","RHSA-2019:2272","RHBA-2020:1540","RHSA-2019:3590","RHSA-2020:1916","RHSA-2020:2081"],"bugzilla":"1700824","bugzilla_description":"CVE-2019-11236 python-urllib3: CRLF injection due to not encoding the '\\r\\n' sequence leading to possible attack on internal service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.10.2-7.el7","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-20060","severity":"moderate","public_date":"2018-03-26T00:00:00Z","advisories":["RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHSA-2019:2272","RHBA-2020:1540"],"bugzilla":"1649153","bugzilla_description":"CVE-2018-20060 python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-urllib3-0:1.10.2-7.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-urwid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-urwid_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-urwid_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-virtualenv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-virtualenv_security_api_results.json
new file mode 100644
index 0000000..3835962
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-virtualenv_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11324","severity":"moderate","public_date":"2019-04-17T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:2804","RHSA-2020:1916","RHSA-2020:1605","RHBA-2020:2785","RHSA-2019:3590"],"bugzilla":"1702473","bugzilla_description":"CVE-2019-11324 python-urllib3: Certification mishandle when error should be thrown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-pip-0:9.0.3-7.el7_8","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20916","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1868135","bugzilla_description":"CVE-2019-20916 python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["python27-python-pip-0:8.1.2-6.el7","rh-python36-python-virtualenv-0:15.1.0-3.el6","python27-python-virtualenv-0:13.1.0-4.el7","rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-virtualenv-0:15.1.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20916.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-11236","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHBA-2020:2804","RHSA-2020:1605","RHSA-2020:0851","RHBA-2020:2785","RHSA-2019:2272","RHBA-2020:1540","RHSA-2019:3590","RHSA-2020:1916","RHSA-2020:2081"],"bugzilla":"1700824","bugzilla_description":"CVE-2019-11236 python-urllib3: CRLF injection due to not encoding the '\\r\\n' sequence leading to possible attack on internal service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.10.2-7.el7","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-18074","severity":"low","public_date":"2018-06-29T00:00:00Z","advisories":["RHSA-2019:2035","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHBA-2020:1540"],"bugzilla":"1643829","bugzilla_description":"CVE-2018-18074 python-requests: Redirect from HTTPS to HTTP does not remove Authorization header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-requests-0:2.6.0-5.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18074.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2018-20060","severity":"moderate","public_date":"2018-03-26T00:00:00Z","advisories":["RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHSA-2019:2272","RHBA-2020:1540"],"bugzilla":"1649153","bugzilla_description":"CVE-2018-20060 python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-urllib3-0:1.10.2-7.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2014-8991","severity":"low","public_date":"2013-10-09T00:00:00Z","advisories":[],"bugzilla":"1166137","bugzilla_description":"CVE-2014-8991 python-pip: local DoS vulnerability","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8991.json"},{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-5123","severity":"moderate","public_date":"2013-07-31T00:00:00Z","advisories":[],"bugzilla":"1066692","bugzilla_description":"CVE-2013-5123 python-pip: insecure software download with mirroring support","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5123.json"},{"CVE":"CVE-2013-1633","severity":"moderate","public_date":"2013-06-02T00:00:00Z","advisories":[],"bugzilla":"994182","bugzilla_description":"CVE-2013-1633 python-setuptools: easy_install insecure installation mechanism","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1633.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-volume_key_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-volume_key_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-volume_key_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-yubico_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-yubico_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python-yubico_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-blivet3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-blivet3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-blivet3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-blockdev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-blockdev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-blockdev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-bytesize_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-bytesize_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-bytesize_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-caribou_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-caribou_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-caribou_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-cryptography_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-cryptography_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-cryptography_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-futures_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-futures_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-futures_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-hawkey_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-hawkey_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-hawkey_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-ipaclient_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-ipaclient_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-ipaclient_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-ipalib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-ipalib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-ipalib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-ipaserver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-ipaserver_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-ipaserver_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-keycloak-httpd-client-install_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-keycloak-httpd-client-install_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-keycloak-httpd-client-install_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-oauthlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-oauthlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-oauthlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-pyasn1-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-pyasn1-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-pyasn1-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-pyasn1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-pyasn1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-pyasn1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-pyatspi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-pyatspi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-pyatspi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-requests-oauthlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-requests-oauthlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-requests-oauthlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-rpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-rpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-rpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-subprocess32_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-subprocess32_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python2-subprocess32_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-pip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-pip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-pip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-rpm-generators_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-rpm-generators_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-rpm-generators_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-rpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-rpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-rpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-setuptools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-setuptools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-setuptools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-wheel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-wheel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3-wheel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3_security_api_results.json
new file mode 100644
index 0000000..91faa7b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python3_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-27619","severity":"moderate","public_date":"2020-10-05T00:00:00Z","advisories":[],"bugzilla":"1889886","bugzilla_description":"CVE-2020-27619 python: Python 3 eval of http resources during test suite runs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-95","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14343","severity":"moderate","public_date":"2020-07-22T00:00:00Z","advisories":[],"bugzilla":"1860466","bugzilla_description":"CVE-2020-14343 PyYAML: incomplete fix for CVE-2020-1747","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14343.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-15801","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":[],"bugzilla":"1860242","bugzilla_description":"CVE-2020-15801 python: sys.path allowing code to be loaded from arbitrary locations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15801.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2020-14422","severity":"moderate","public_date":"2020-06-18T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285"],"bugzilla":"1854926","bugzilla_description":"CVE-2020-14422 python: DoS via inefficiency in IPv{4,6}Interface classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14422.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-20225","severity":"low","public_date":"2020-04-28T00:00:00Z","advisories":[],"bugzilla":"1835736","bugzilla_description":"CVE-2018-20225 python-pip: when --extra-index-url option is used and package does not already exist in the public index, the installation of malicious package with arbitrary version number is possible.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-348","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20225.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2020-7212","severity":null,"public_date":"2020-03-06T00:00:00Z","advisories":[],"bugzilla":"1812095","bugzilla_description":"CVE-2020-7212 python-urllib3: inefficient algorithm allows a DoS (CPU consumption) in _encode_invalid_chars function in util/url.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7212.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-1747","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1807367","bugzilla_description":"CVE-2020-1747 PyYAML: arbitrary command execution through python/object/new when FullLoader is used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1747.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-8492","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:3888"],"bugzilla":"1809065","bugzilla_description":"CVE-2020-8492 python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["python3-0:3.6.8-17.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8492.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-26116","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1883014","bugzilla_description":"CVE-2020-26116 python: CRLF injection via HTTP request method in httplib/http.client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26116.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-26137","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299"],"bugzilla":"1883632","bugzilla_description":"CVE-2020-26137 python-urllib3: CRLF injection via HTTP request method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["rh-python38-python-urllib3-0:1.25.7-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26137.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-8315","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1855039","bugzilla_description":"CVE-2020-8315 python: unsafe dll loading in getpathp.c on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8315.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-20907","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1856481","bugzilla_description":"CVE-2019-20907 python: infinite loop in the tarfile module via crafted TAR archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-835","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20907.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20477","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1806005","bugzilla_description":"CVE-2019-20477 PyYAML: command execution through python/object/apply constructor in FullLoader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20477.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-18874","severity":"moderate","public_date":"2019-11-07T00:00:00Z","advisories":["RHSA-2020:2583","RHSA-2020:4255","RHSA-2020:4299","RHSA-2020:4254","RHSA-2020:2593","RHSA-2020:2635"],"bugzilla":"1772014","bugzilla_description":"CVE-2019-18874 python-psutil: double free because of refcount mishandling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["rh-python38-python-psutil-0:5.6.4-5.el7","ansible-tower-36/ansible-runner-rhel7:1.4.4-2","python-psutil-0:5.6.6-1.el7ar","ansible-tower-37/ansible-runner-rhel7:1.4.6-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18874.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-17514","severity":null,"public_date":"2019-10-12T00:00:00Z","advisories":[],"bugzilla":"1824446","bugzilla_description":"CVE-2019-17514 python: potentially misleading information about whether sorting in library/glob.html","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17514.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-16935","severity":"moderate","public_date":"2019-09-21T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:3911","RHSA-2020:3888"],"bugzilla":"1763229","bugzilla_description":"CVE-2019-16935 python: XSS vulnerability in the documentation XML-RPC server in server_title field","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["python-0:2.7.5-89.el7","python3-0:3.6.8-17.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-18348","severity":"moderate","public_date":"2019-07-04T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1727276","bugzilla_description":"CVE-2019-18348 python: CRLF injection via the host part of the url passed to urlopen()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10160","severity":"important","public_date":"2019-06-03T00:00:00Z","advisories":["RHSA-2019:1587","RHSA-2019:1700","RHSA-2019:2437"],"bugzilla":"1718388","bugzilla_description":"CVE-2019-10160 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python27-python-0:2.7.16-6.el6","python27-python-0:2.7.16-6.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","python-0:2.7.5-80.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-11324","severity":"moderate","public_date":"2019-04-17T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:2804","RHSA-2020:1916","RHSA-2020:1605","RHBA-2020:2785","RHSA-2019:3590"],"bugzilla":"1702473","bugzilla_description":"CVE-2019-11324 python-urllib3: Certification mishandle when error should be thrown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-pip-0:9.0.3-7.el7_8","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20916","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1868135","bugzilla_description":"CVE-2019-20916 python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["python27-python-pip-0:8.1.2-6.el7","rh-python36-python-virtualenv-0:15.1.0-3.el6","python27-python-virtualenv-0:13.1.0-4.el7","rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-virtualenv-0:15.1.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20916.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-10906","severity":"important","public_date":"2019-04-06T00:00:00Z","advisories":["RHSA-2019:1237","RHSA-2019:1329","RHSA-2019:1152","RHSA-2019:3172"],"bugzilla":"1698839","bugzilla_description":"CVE-2019-10906 python-jinja2: str.format_map allows sandbox escape","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","rh-python36-python-jinja2-0:2.9.6-3.el6","rh-python36-python-jinja2-0:2.9.6-3.el7","rh-python35-python-jinja2-0:2.8.1-2.el7","python-jinja2-0:2.10.1-2.el8_0","rh-python35-python-jinja2-0:2.8.1-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-9948","severity":"moderate","public_date":"2019-03-23T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:1268","RHSA-2020:1462","RHSA-2019:3520","RHSA-2019:1700","RHSA-2020:1346","RHSA-2019:2030"],"bugzilla":"1695570","bugzilla_description":"CVE-2019-9948 python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-749","affected_packages":["python27:2.7-8010020190903182548.51c94b97","python-0:2.7.5-63.el7_4","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-6.el6","python27-python-0:2.7.16-6.el7","python3-0:3.6.8-15.1.el8","python-0:2.7.5-74.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9948.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-9947","severity":"moderate","public_date":"2019-03-23T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:1268","RHSA-2020:1462","RHSA-2019:3520","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:2030","RHSA-2019:1260"],"bugzilla":"1695572","bugzilla_description":"CVE-2019-9947 python: CRLF injection via the path part of the url passed to urlopen()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27:2.7-8010020190903182548.51c94b97","rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-4.el7","python3-0:3.6.8-15.1.el8","python-0:2.7.5-74.el7_5","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9947.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9740","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:1268","RHSA-2020:1462","RHSA-2019:3520","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:2030","RHSA-2019:1260"],"bugzilla":"1688169","bugzilla_description":"CVE-2019-9740 python: CRLF injection via the query part of the url passed to urlopen()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27:2.7-8010020190903182548.51c94b97","rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-4.el7","python3-0:3.6.8-15.1.el8","python-0:2.7.5-74.el7_5","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11236","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHBA-2020:2804","RHSA-2020:1605","RHSA-2020:0851","RHBA-2020:2785","RHSA-2019:2272","RHBA-2020:1540","RHSA-2019:3590","RHSA-2020:1916","RHSA-2020:2081"],"bugzilla":"1700824","bugzilla_description":"CVE-2019-11236 python-urllib3: CRLF injection due to not encoding the '\\r\\n' sequence leading to possible attack on internal service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.10.2-7.el7","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9674","severity":"low","public_date":"2019-03-11T00:00:00Z","advisories":[],"bugzilla":"1800749","bugzilla_description":"CVE-2019-9674 python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-409","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9674.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9636","severity":"important","public_date":"2019-03-06T00:00:00Z","advisories":["RHBA-2019:0763","RHSA-2019:2980","RHSA-2019:0806","RHSA-2019:1467","RHSA-2019:0981","RHSA-2019:0710","RHSA-2019:0765","RHSA-2019:0997","RHSA-2019:3170","RHBA-2019:0764","RHSA-2019:0902"],"bugzilla":"1688543","bugzilla_description":"CVE-2019-9636 python: Information Disclosure due to urlsplit improper NFKC normalization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python3-0:3.6.8-2.el8_0","python27-python-0:2.7.13-4.el6","rhvm-appliance-0:4.2-20190411.1.el7","python27-python-0:2.7.13-6.el7","python-0:2.7.5-59.el7_4","python-0:2.7.5-70.el7_5","rh-python36-python-0:3.6.3-4.el6","redhat-virtualization-host-0:4.2-20190411.1.el7_6","python27:2.7-8000020190410132513.c0efe978","rh-python35-python-0:3.5.1-12.el7","rh-python35-python-0:3.5.1-12.el6","python-0:2.7.5-77.el7_6","python-0:2.6.6-68.el6_10","rh-python36-python-0:3.6.3-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-7548","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:0984","RHSA-2019:0981"],"bugzilla":"1674059","bugzilla_description":"CVE-2019-7548 python-sqlalchemy: SQL Injection when the group_by parameter can be controlled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":["python27:2.7-8000020190410132513.c0efe978","python36:3.6-8000020190410133122.593c47b3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-7164","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:0984","RHSA-2019:0981"],"bugzilla":"1678520","bugzilla_description":"CVE-2019-7164 python-sqlalchemy: SQL Injection when the order_by parameter can be controlled","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python27:2.7-8000020190410132513.c0efe978","python36:3.6-8000020190410133122.593c47b3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-6446","severity":"moderate","public_date":"2019-01-16T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2019:3704"],"bugzilla":"1667950","bugzilla_description":"CVE-2019-6446 numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-20","affected_packages":["python27:2.7-8010020190903182548.51c94b97","numpy-1:1.14.3-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-5010","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:3520","RHSA-2019:3725","RHSA-2019:2030"],"bugzilla":"1666519","bugzilla_description":"CVE-2019-5010 python: NULL pointer dereference using a specially crafted X509 certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-86.el7","python3-0:3.6.8-15.1.el8","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20852","severity":"moderate","public_date":"2018-10-31T00:00:00Z","advisories":["RHBA-2020:1539","RHSA-2020:1132","RHSA-2020:1131","RHSA-2019:3948","RHSA-2020:1605","RHSA-2019:3725","RHSA-2020:1764","RHBA-2020:1540"],"bugzilla":"1740347","bugzilla_description":"CVE-2018-20852 python: Cookie domain check returns incorrect results","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","rh-python36-python-0:3.6.9-2.el6","python27-python-0:2.7.17-2.el6","python3-0:3.6.8-13.el7","python27-python-0:2.7.17-2.el7","python-0:2.7.5-88.el7","python3-0:3.6.8-23.el8","rh-python36-python-0:3.6.9-2.el7","python27:2.7-8020020200117110429.90f98d4f"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20852.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-14647","severity":"moderate","public_date":"2018-09-22T00:00:00Z","advisories":["RHSA-2020:1268","RHSA-2020:1462","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:2030","RHSA-2019:1260"],"bugzilla":"1631822","bugzilla_description":"CVE-2018-14647 python: Missing salt initialization in _elementtree.c module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665->CWE-335","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-4.el7","python-0:2.7.5-74.el7_5","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20406","severity":"low","public_date":"2018-09-21T00:00:00Z","advisories":["RHSA-2019:3725"],"bugzilla":"1664509","bugzilla_description":"CVE-2018-20406 python: Integer overflow in Modules/_pickle.c allows for memory exhaustion if serializing gigabytes of data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":["rh-python36-python-0:3.6.9-2.el6","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20406.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-1000802","severity":"moderate","public_date":"2018-08-29T00:00:00Z","advisories":[],"bugzilla":"1631420","bugzilla_description":"CVE-2018-1000802 python: Command injection in the shutil module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-16056","severity":"moderate","public_date":"2018-07-19T00:00:00Z","advisories":["RHSA-2020:2520","RHBA-2020:1539","RHSA-2020:1132","RHSA-2020:1131","RHSA-2019:3948","RHSA-2020:1605","RHSA-2019:3725","RHSA-2020:1764","RHBA-2020:1540"],"bugzilla":"1749839","bugzilla_description":"CVE-2019-16056 python: email.utils.parseaddr wrongly parses email addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","rh-python36-python-0:3.6.9-2.el6","python27-python-0:2.7.17-2.el6","python3-0:3.6.8-13.el7","python27-python-0:2.7.17-2.el7","python-0:2.7.5-88.el7","python-0:2.7.5-87.el7_7","python3-0:3.6.8-23.el8","rh-python36-python-0:3.6.9-2.el7","python27:2.7-8020020200117110429.90f98d4f"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-18074","severity":"low","public_date":"2018-06-29T00:00:00Z","advisories":["RHSA-2019:2035","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHBA-2020:1540"],"bugzilla":"1643829","bugzilla_description":"CVE-2018-18074 python-requests: Redirect from HTTPS to HTTP does not remove Authorization header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-requests-0:2.6.0-5.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18074.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2017-18342","severity":"moderate","public_date":"2018-06-27T00:00:00Z","advisories":[],"bugzilla":"1595743","bugzilla_description":"CVE-2017-18342 PyYAML: yaml.load() API could execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18342.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-20060","severity":"moderate","public_date":"2018-03-26T00:00:00Z","advisories":["RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHSA-2019:2272","RHBA-2020:1540"],"bugzilla":"1649153","bugzilla_description":"CVE-2018-20060 python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-urllib3-0:1.10.2-7.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1060","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3041","RHSA-2020:1268","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:1260"],"bugzilla":"1549191","bugzilla_description":"CVE-2018-1060 python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python27-python-0:2.7.16-4.el7","python-0:2.7.5-74.el7_5","python-0:2.7.5-76.el7","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1061","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3041","RHSA-2020:1268","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:1260"],"bugzilla":"1549192","bugzilla_description":"CVE-2018-1061 python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python27-python-0:2.7.16-4.el7","python-0:2.7.5-74.el7_5","python-0:2.7.5-76.el7","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-17522","severity":"moderate","public_date":"2017-12-14T00:00:00Z","advisories":[],"bugzilla":"1526176","bugzilla_description":"CVE-2017-17522 python: Command injection in Lib/webbrowser.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17522.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000030","severity":"low","public_date":"2017-09-20T00:00:00Z","advisories":[],"bugzilla":"1541558","bugzilla_description":"CVE-2018-1000030 python: Heap-Buffer-Overflow and Heap-Use-After-Free in Objects/fileobject.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000030.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2017-12852","severity":"low","public_date":"2017-08-15T00:00:00Z","advisories":[],"bugzilla":"1483686","bugzilla_description":"CVE-2017-12852 numpy: Missing input validation on empty list or ndarray in numpy.pad function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12852.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-1000158","severity":"moderate","public_date":"2017-06-13T00:00:00Z","advisories":[],"bugzilla":"1519595","bugzilla_description":"CVE-2017-1000158 python: Integer overflow in PyString_DecodeEscape results in heap-base buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2016-10745","severity":"important","public_date":"2016-12-29T00:00:00Z","advisories":["RHSA-2019:1022","RHSA-2019:3964","RHSA-2019:1237","RHSA-2019:4062","RHSA-2019:1260","RHSA-2019:3172"],"bugzilla":"1698345","bugzilla_description":"CVE-2016-10745 python-jinja2: Sandbox escape due to information disclosure via str.format","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","python27-python-jinja2-0:2.6-15.el7","python-jinja2-0:2.7.2-3.el7_4","python-jinja2-0:2.7.2-3.el7_5","python-jinja2-0:2.7.2-3.el7_6","rh-python35-python-jinja2-0:2.8.1-2.el7","rh-python35-python-jinja2-0:2.8.1-2.el6","python27-python-jinja2-0:2.6-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2016-1000110","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1630","RHSA-2016:1628","RHSA-2016:1629","RHSA-2016:1626","RHSA-2016:1627"],"bugzilla":"1357334","bugzilla_description":"CVE-2016-1000110 Python CGIHandler: sets environmental variable based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["python33-python-0:3.3.2-18.el6","rh-python34-python-0:3.4.2-13.el7","python27-python-0:2.7.8-16.el7","python27-python-0:2.7.8-18.el6","python-0:2.7.5-38.el7_2","rh-python34-python-0:3.4.2-14.el6","rh-python35-python-0:3.5.1-9.el7","python-0:2.6.6-66.el6_8","python33-python-0:3.3.2-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-0772","severity":"moderate","public_date":"2016-06-11T00:00:00Z","advisories":["RHSA-2016:1630","RHSA-2016:1628","RHSA-2016:1629","RHSA-2016:1626","RHSA-2016:1627"],"bugzilla":"1303647","bugzilla_description":"CVE-2016-0772 python: smtplib StartTLS stripping attack","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python33-python-0:3.3.2-18.el6","rh-python34-python-0:3.4.2-13.el7","python27-python-0:2.7.8-16.el7","python27-python-0:2.7.8-18.el6","python-0:2.7.5-38.el7_2","rh-python34-python-0:3.4.2-14.el6","rh-python35-python-0:3.5.1-9.el7","python-0:2.6.6-66.el6_8","python33-python-0:3.3.2-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-5636","severity":"low","public_date":"2016-01-21T00:00:00Z","advisories":["RHSA-2016:2586"],"bugzilla":"1345856","bugzilla_description":"CVE-2016-5636 python: Heap overflow in zipimporter module","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-190->CWE-122","affected_packages":["python-0:2.7.5-48.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5636.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2015-8557","severity":"moderate","public_date":"2015-09-28T00:00:00Z","advisories":[],"bugzilla":"1276321","bugzilla_description":"CVE-2015-8557 python-pygments: Shell injection in FontManager._get_nix_font_path","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8557.json"},{"CVE":"CVE-2014-9365","severity":"moderate","public_date":"2014-12-11T00:00:00Z","advisories":["RHSA-2017:1868","RHSA-2017:1162"],"bugzilla":"1173041","bugzilla_description":"CVE-2014-9365 python: failure to validate certificates in the HTTP client with TLS (PEP 476)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-345","affected_packages":["python27-python-0:2.7.13-3.el7","python27-python-0:2.7.13-3.el6","python-0:2.7.5-58.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2016-5699","severity":"moderate","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2016:1630","RHSA-2016:1628","RHSA-2016:1629","RHSA-2016:1626","RHSA-2016:1627"],"bugzilla":"1303699","bugzilla_description":"CVE-2016-5699 python: http protocol steam injection attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["python33-python-0:3.3.2-18.el6","rh-python34-python-0:3.4.2-13.el7","python27-python-0:2.7.8-16.el7","python27-python-0:2.7.8-18.el6","python-0:2.7.5-38.el7_2","rh-python34-python-0:3.4.2-14.el6","rh-python35-python-0:3.5.1-9.el7","python-0:2.6.6-66.el6_8","python33-python-0:3.3.2-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5699.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2014-4650","severity":"moderate","public_date":"2014-06-23T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1113527","bugzilla_description":"CVE-2014-4650 python: CGIHTTPServer module does not properly handle URL-encoded path separators in URLs","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-138","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4650.json"},{"CVE":"CVE-2014-7185","severity":"low","public_date":"2014-06-23T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1146026","bugzilla_description":"CVE-2014-7185 python: buffer() integer overflow leading to out of bounds read","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-190->CWE-125->CWE-200","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7185.json"},{"CVE":"CVE-2014-8583","severity":"moderate","public_date":"2014-06-17T00:00:00Z","advisories":[],"bugzilla":"1111034","bugzilla_description":"CVE-2014-8583 mod_wsgi: failure to handle errors when attempting to drop group privileges","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-271","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8583.json"},{"CVE":"CVE-2014-0240","severity":"important","public_date":"2014-05-21T00:00:00Z","advisories":["RHSA-2014:0788","RHSA-2014:1091","RHSA-2014:0789"],"bugzilla":"1101863","bugzilla_description":"CVE-2014-0240 mod_wsgi: possible privilege escalation in setuid() failure scenarios","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-271","affected_packages":["mod_wsgi-0:3.4-12.el7_0","python27-mod_wsgi-0:3.4-12.el6","python27-mod_wsgi-0:3.4-13.el7","python33-mod_wsgi-0:3.4-13.el7","python33-mod_wsgi-0:3.4-14.el6","mod_wsgi-0:3.2-6.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0240.json"},{"CVE":"CVE-2014-0242","severity":"moderate","public_date":"2014-05-21T00:00:00Z","advisories":["RHSA-2014:0788"],"bugzilla":"1101873","bugzilla_description":"CVE-2014-0242 mod_wsgi: information leak","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["mod_wsgi-0:3.2-6.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0242.json"},{"CVE":"CVE-2014-4616","severity":"moderate","public_date":"2014-05-19T00:00:00Z","advisories":["RHSA-2015:2101","RHEA-2014:1175","RHSA-2015:1064"],"bugzilla":"1112285","bugzilla_description":"CVE-2014-4616 python: missing boundary check in JSON module","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-129->CWE-119","affected_packages":["python-0:2.7.5-34.el7","python-simplejson-0:3.2.0-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4616.json"},{"CVE":"CVE-2014-2667","severity":"moderate","public_date":"2014-03-28T00:00:00Z","advisories":[],"bugzilla":"1082177","bugzilla_description":"CVE-2014-2667 python: os.makedirs(exist_ok=True) is not thread-safe in Python 3.x","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2667.json"},{"CVE":"CVE-2014-1858","severity":"low","public_date":"2014-02-05T00:00:00Z","advisories":[],"bugzilla":"1062009","bugzilla_description":"CVE-2014-1858 CVE-2014-1859 numpy: f2py insecure temporary file use","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1858.json"},{"CVE":"CVE-2014-1859","severity":"low","public_date":"2014-02-05T00:00:00Z","advisories":[],"bugzilla":"1062009","bugzilla_description":"CVE-2014-1858 CVE-2014-1859 numpy: f2py insecure temporary file use","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1859.json"},{"CVE":"CVE-2014-1912","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1062370","bugzilla_description":"CVE-2014-1912 python: buffer overflow in socket.recvfrom_into()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1912.json"},{"CVE":"CVE-2014-0012","severity":"moderate","public_date":"2014-01-11T00:00:00Z","advisories":[],"bugzilla":"1052102","bugzilla_description":"CVE-2014-0012 python-jinja2: FileSystemBytecodeCache insecure cache temporary file use, incorrect CVE-2014-1402 fix","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0012.json"},{"CVE":"CVE-2014-1402","severity":"moderate","public_date":"2014-01-09T00:00:00Z","advisories":["RHSA-2014:0748","RHSA-2014:0747"],"bugzilla":"1051421","bugzilla_description":"CVE-2014-1402 python-jinja2: FileSystemBytecodeCache insecure cache temporary file use","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":["python27-python-jinja2-0:2.6-10.el6","python33-python-jinja2-0:2.6-12.el7","python-jinja2-0:2.2.1-2.el6_5","python33-python-jinja2-0:2.6-11.el6","python27-python-jinja2-0:2.6-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1402.json"},{"CVE":"CVE-2013-7338","severity":"moderate","public_date":"2013-12-27T00:00:00Z","advisories":[],"bugzilla":"1078014","bugzilla_description":"CVE-2013-7338 python: malformed ZIP files could cause 100% CPU usage","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7338.json"},{"CVE":"CVE-2013-7040","severity":"moderate","public_date":"2013-12-09T00:00:00Z","advisories":[],"bugzilla":"1039915","bugzilla_description":"CVE-2013-7040 python: hash secret can be recovered remotely","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7040.json"},{"CVE":"CVE-2014-8991","severity":"low","public_date":"2013-10-09T00:00:00Z","advisories":[],"bugzilla":"1166137","bugzilla_description":"CVE-2014-8991 python-pip: local DoS vulnerability","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8991.json"},{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-4238","severity":"moderate","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2013:1582","RHSA-2013:1527"],"bugzilla":"996381","bugzilla_description":"CVE-2013-4238 python: hostname check bypassing vulnerability in SSL module","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["python-0:2.6.6-51.el6","rhev-hypervisor6-0:6.5-20131115.0.3.2.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4238.json"},{"CVE":"CVE-2013-5123","severity":"moderate","public_date":"2013-07-31T00:00:00Z","advisories":[],"bugzilla":"1066692","bugzilla_description":"CVE-2013-5123 python-pip: insecure software download with mirroring support","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5123.json"},{"CVE":"CVE-2013-1633","severity":"moderate","public_date":"2013-06-02T00:00:00Z","advisories":[],"bugzilla":"994182","bugzilla_description":"CVE-2013-1633 python-setuptools: easy_install insecure installation mechanism","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1633.json"},{"CVE":"CVE-2013-2099","severity":"low","public_date":"2013-05-15T00:00:00Z","advisories":["RHSA-2016:1166","RHBA-2016:1500","RHSA-2014:1690","RHSA-2015:0042","RHSA-2014:1263"],"bugzilla":"963260","bugzilla_description":"CVE-2013-2099 python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-backports-ssl_match_hostname-0:3.4.0.2-1.el6","python-pymongo-0:3.2-1.el7sat","python-pymongo-0:3.2-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json"},{"CVE":"CVE-2013-1753","severity":"moderate","public_date":"2012-09-25T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1064"],"bugzilla":"1046170","bugzilla_description":"CVE-2013-1753 python: XMLRPC library unrestricted decompression of HTTP responses using gzip enconding","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["python-0:2.7.5-34.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1753.json"},{"CVE":"CVE-2013-1752","severity":"moderate","public_date":"2012-09-25T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1046174","bugzilla_description":"CVE-2013-1752 python: multiple unbound readline() DoS flaws in python stdlib","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1752.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python_security_api_results.json
new file mode 100644
index 0000000..503d2e7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/python_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-27619","severity":"moderate","public_date":"2020-10-05T00:00:00Z","advisories":[],"bugzilla":"1889886","bugzilla_description":"CVE-2020-27619 python: Python 3 eval of http resources during test suite runs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-95","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24583","severity":"moderate","public_date":"2020-09-01T00:00:00Z","advisories":[],"bugzilla":"1874485","bugzilla_description":"CVE-2020-24583 django: incorrect permissions on intermediate-level directories on Python 3.7+","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-24584","severity":"moderate","public_date":"2020-09-01T00:00:00Z","advisories":[],"bugzilla":"1874492","bugzilla_description":"CVE-2020-24584 django: permission escalation in intermediate-level directories of the file system cache on Python 3.7+","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24584.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-25032","severity":"moderate","public_date":"2020-08-31T00:00:00Z","advisories":[],"bugzilla":"1876698","bugzilla_description":"CVE-2020-25032 python-flask-cors: allows ../ directory traversal to access private resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25032.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-14343","severity":"moderate","public_date":"2020-07-22T00:00:00Z","advisories":[],"bugzilla":"1860466","bugzilla_description":"CVE-2020-14343 PyYAML: incomplete fix for CVE-2020-1747","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14343.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-15801","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":[],"bugzilla":"1860242","bugzilla_description":"CVE-2020-15801 python: sys.path allowing code to be loaded from arbitrary locations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15801.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2020-11538","severity":"important","public_date":"2020-07-01T00:00:00Z","advisories":["RHSA-2020:3302","RHSA-2020:3299","RHSA-2020:3185"],"bugzilla":"1852814","bugzilla_description":"CVE-2020-11538 python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["python-pillow-0:5.1.1-11.el8_1","python-pillow-0:5.1.1-11.el8_0","python-pillow-0:5.1.1-12.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11538.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10994","severity":"low","public_date":"2020-06-25T00:00:00Z","advisories":[],"bugzilla":"1852820","bugzilla_description":"CVE-2020-10994 python-pillow: multiple out-of-bounds reads via a crafted JP2 file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10994.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-10177","severity":"low","public_date":"2020-06-25T00:00:00Z","advisories":[],"bugzilla":"1852824","bugzilla_description":"CVE-2020-10177 python-pillow: multiple out-of-bounds reads in libImaging/FliDecode.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10177.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-10378","severity":"low","public_date":"2020-06-25T00:00:00Z","advisories":[],"bugzilla":"1852832","bugzilla_description":"CVE-2020-10378 python-pillow: an out-of-bounds read in libImaging/PcxDecode.c can occur when reading PCX files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10378.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-10379","severity":"important","public_date":"2020-06-25T00:00:00Z","advisories":[],"bugzilla":"1852836","bugzilla_description":"CVE-2020-10379 python-pillow: two buffer overflows in libImaging/TiffDecode.c due to small buffers allocated in ImagingLibTiffDecode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10379.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14019","severity":"moderate","public_date":"2020-06-19T00:00:00Z","advisories":[],"bugzilla":"1854723","bugzilla_description":"CVE-2020-14019 python-rtslib: weak permissions for /etc/target/saveconfig.json","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14019.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"6.6"},{"CVE":"CVE-2020-14422","severity":"moderate","public_date":"2020-06-18T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285"],"bugzilla":"1854926","bugzilla_description":"CVE-2020-14422 python: DoS via inefficiency in IPv{4,6}Interface classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14422.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-13254","severity":"moderate","public_date":"2020-06-03T00:00:00Z","advisories":[],"bugzilla":"1843614","bugzilla_description":"CVE-2020-13254 django: potential data leakage via malformed memcached keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13254.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-13596","severity":"moderate","public_date":"2020-06-03T00:00:00Z","advisories":[],"bugzilla":"1843625","bugzilla_description":"CVE-2020-13596 django: possible XSS via admin ForeignKeyRawIdWidget","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-13757","severity":"moderate","public_date":"2020-05-27T00:00:00Z","advisories":["RHSA-2020:3541","RHSA-2020:3453"],"bugzilla":"1848507","bugzilla_description":"CVE-2020-13757 python-rsa: decryption of ciphertext leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400->CWE-327","affected_packages":["python-rsa-0:4.5-2.el7","python-rsa-0:4.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13757.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-11078","severity":"moderate","public_date":"2020-05-20T00:00:00Z","advisories":[],"bugzilla":"1845937","bugzilla_description":"CVE-2020-11078 python-httplib2: CRLF injection via an attacker controlled unescaped part of uri for httplib2.Http.request function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11078.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2013-7489","severity":"moderate","public_date":"2020-05-14T00:00:00Z","advisories":[],"bugzilla":"1850105","bugzilla_description":"CVE-2013-7489 python-beaker:  Deserialization of Untrusted Data which can lead to Arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7489.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"5.7"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-20225","severity":"low","public_date":"2020-04-28T00:00:00Z","advisories":[],"bugzilla":"1835736","bugzilla_description":"CVE-2018-20225 python-pip: when --extra-index-url option is used and package does not already exist in the public index, the installation of malicious package with arbitrary version number is possible.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-348","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20225.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2020-10108","severity":"important","public_date":"2020-03-11T00:00:00Z","advisories":["RHSA-2020:1561","RHSA-2020:1962"],"bugzilla":"1813439","bugzilla_description":"CVE-2020-10108 python-twisted: HTTP request smuggling when presented with two Content-Length headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-444","affected_packages":["python-twisted-web-0:8.2.0-6.el6_10","python-twisted-web-0:12.1.0-7.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10108.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-10109","severity":"important","public_date":"2020-03-11T00:00:00Z","advisories":["RHSA-2020:1561"],"bugzilla":"1813447","bugzilla_description":"CVE-2020-10109 python-twisted: HTTP request smuggling when presented with a Content-Length and a chunked Transfer-Encoding header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-444","affected_packages":["python-twisted-web-0:12.1.0-7.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10109.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-7212","severity":null,"public_date":"2020-03-06T00:00:00Z","advisories":[],"bugzilla":"1812095","bugzilla_description":"CVE-2020-7212 python-urllib3: inefficient algorithm allows a DoS (CPU consumption) in _encode_invalid_chars function in util/url.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7212.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-9402","severity":"moderate","public_date":"2020-03-04T00:00:00Z","advisories":[],"bugzilla":"1810088","bugzilla_description":"CVE-2020-9402 django: potential SQL injection via \"tolerance\" parameter in GIS functions and aggregates on Oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9402.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-1747","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1807367","bugzilla_description":"CVE-2020-1747 PyYAML: arbitrary command execution through python/object/new when FullLoader is used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1747.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-8492","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:3888"],"bugzilla":"1809065","bugzilla_description":"CVE-2020-8492 python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["python3-0:3.6.8-17.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8492.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-20478","severity":"moderate","public_date":"2020-02-19T00:00:00Z","advisories":[],"bugzilla":"1808088","bugzilla_description":"CVE-2019-20478 python-ruamel-yaml: code execution through load() method with an untrusted argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20478.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-26116","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1883014","bugzilla_description":"CVE-2020-26116 python: CRLF injection via HTTP request method in httplib/http.client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26116.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-26137","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299"],"bugzilla":"1883632","bugzilla_description":"CVE-2020-26137 python-urllib3: CRLF injection via HTTP request method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["rh-python38-python-urllib3-0:1.25.7-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26137.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-7471","severity":"important","public_date":"2020-02-03T00:00:00Z","advisories":[],"bugzilla":"1798515","bugzilla_description":"CVE-2020-7471 django: potential SQL injection via StringAgg(delimiter)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7471.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-5236","severity":"moderate","public_date":"2020-02-03T00:00:00Z","advisories":[],"bugzilla":"1831068","bugzilla_description":"CVE-2020-5236 waitress: header with invalid characters can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5236.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-8315","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1855039","bugzilla_description":"CVE-2020-8315 python: unsafe dll loading in getpathp.c on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8315.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-5390","severity":"important","public_date":"2020-01-13T00:00:00Z","advisories":[],"bugzilla":"1794740","bugzilla_description":"CVE-2020-5390 python-pysaml2: does not check that the signature in a SAML document is enveloped","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5390.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-5313","severity":"moderate","public_date":"2020-01-03T00:00:00Z","advisories":["RHSA-2020:3185","RHSA-2020:3887"],"bugzilla":"1789532","bugzilla_description":"CVE-2020-5313 python-pillow: out-of-bounds read in ImagingFliDecode when loading FLI images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["python-pillow-0:2.0.0-21.gitd1c6db8.el7","python-pillow-0:5.1.1-12.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5313.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-5312","severity":"important","public_date":"2020-01-03T00:00:00Z","advisories":["RHSA-2020:0580","RHSA-2020:0566","RHSA-2020:0898","RHSA-2020:0578"],"bugzilla":"1789533","bugzilla_description":"CVE-2020-5312 python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["python-imaging-0:1.1.6-20.el6_10","python-pillow-0:2.0.0-20.gitd1c6db8.el7_7","python-pillow-0:5.1.1-10.el8_1","python-pillow-0:5.1.1-10.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5312.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-5311","severity":"important","public_date":"2020-01-03T00:00:00Z","advisories":["RHSA-2020:0580","RHSA-2020:0566"],"bugzilla":"1789535","bugzilla_description":"CVE-2020-5311 python-pillow: out-of-bounds write in expandrow in libImaging/SgiRleDecode.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["python-pillow-0:5.1.1-10.el8_1","python-pillow-0:5.1.1-10.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5311.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-5310","severity":"important","public_date":"2020-01-03T00:00:00Z","advisories":[],"bugzilla":"1789538","bugzilla_description":"CVE-2020-5310 python-pillow: Integer overflow leading to buffer overflow in ImagingLibTiffDecode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5310.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-19911","severity":"moderate","public_date":"2020-01-03T00:00:00Z","advisories":[],"bugzilla":"1789540","bugzilla_description":"CVE-2019-19911 python-pillow: uncontrolled resource consumption in FpxImagePlugin.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19911.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16789","severity":"important","public_date":"2019-12-26T00:00:00Z","advisories":["RHSA-2020:0720"],"bugzilla":"1789807","bugzilla_description":"CVE-2019-16789 waitress: HTTP Request Smuggling through Invalid whitespace characters in headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["python-waitress-0:1.4.2-1.el8ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16789.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","cvss3_score":"8.2"},{"CVE":"CVE-2019-16786","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2020:0720"],"bugzilla":"1791415","bugzilla_description":"CVE-2019-16786 waitress: HTTP request smuggling through invalid Transfer-Encoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["python-waitress-0:1.4.2-1.el8ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16786.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2019-16785","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2020:0720"],"bugzilla":"1791420","bugzilla_description":"CVE-2019-16785 waitress: HTTP request smuggling through LF vs CRLF handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["python-waitress-0:1.4.2-1.el8ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16785.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2019-19844","severity":"critical","public_date":"2019-12-18T00:00:00Z","advisories":[],"bugzilla":"1788425","bugzilla_description":"CVE-2019-19844 Django: crafted email address allows account takeover","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19844.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-20907","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1856481","bugzilla_description":"CVE-2019-20907 python: infinite loop in the tarfile module via crafted TAR archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-835","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20907.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19118","severity":"moderate","public_date":"2019-12-02T00:00:00Z","advisories":[],"bugzilla":"1781269","bugzilla_description":"CVE-2019-19118 django: privilege escalation in the django admin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19118.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-20477","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1806005","bugzilla_description":"CVE-2019-20477 PyYAML: command execution through python/object/apply constructor in FullLoader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20477.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-18874","severity":"moderate","public_date":"2019-11-07T00:00:00Z","advisories":["RHSA-2020:2583","RHSA-2020:4255","RHSA-2020:4299","RHSA-2020:4254","RHSA-2020:2593","RHSA-2020:2635"],"bugzilla":"1772014","bugzilla_description":"CVE-2019-18874 python-psutil: double free because of refcount mishandling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["rh-python38-python-psutil-0:5.6.4-5.el7","ansible-tower-36/ansible-runner-rhel7:1.4.4-2","python-psutil-0:5.6.6-1.el7ar","ansible-tower-37/ansible-runner-rhel7:1.4.6-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18874.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-17626","severity":"important","public_date":"2019-10-16T00:00:00Z","advisories":["RHSA-2020:0201","RHSA-2020:0195","RHSA-2020:0197","RHSA-2020:0230"],"bugzilla":"1769661","bugzilla_description":"CVE-2019-17626 python-reportlab: code injection in colors.py allows attacker to execute code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-95","affected_packages":["python-reportlab-0:2.5-9.el7_7.1","python-reportlab-0:2.3-3.el6_10.1","python-reportlab-0:3.4.0-6.el8_0.2","python-reportlab-0:3.4.0-6.el8_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17626.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-17514","severity":null,"public_date":"2019-10-12T00:00:00Z","advisories":[],"bugzilla":"1824446","bugzilla_description":"CVE-2019-17514 python: potentially misleading information about whether sorting in library/glob.html","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17514.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-16865","severity":"moderate","public_date":"2019-10-04T00:00:00Z","advisories":["RHSA-2020:0580","RHSA-2020:0566","RHSA-2020:0578"],"bugzilla":"1774066","bugzilla_description":"CVE-2019-16865 python-pillow: reading specially crafted image files leads to allocation of large amounts of memory and denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["python-pillow-0:2.0.0-20.gitd1c6db8.el7_7","python-pillow-0:5.1.1-10.el8_1","python-pillow-0:5.1.1-10.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16865.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14853","severity":"low","public_date":"2019-09-26T00:00:00Z","advisories":[],"bugzilla":"1758704","bugzilla_description":"CVE-2019-14853 python-ecdsa: Unexpected and  undocumented exceptions during signature decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14853.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-14859","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":[],"bugzilla":"1760843","bugzilla_description":"CVE-2019-14859 python-ecdsa: DER encoding is not being verified in signatures","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14859.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-16935","severity":"moderate","public_date":"2019-09-21T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:3911","RHSA-2020:3888"],"bugzilla":"1763229","bugzilla_description":"CVE-2019-16935 python: XSS vulnerability in the documentation XML-RPC server in server_title field","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["python-0:2.7.5-89.el7","python3-0:3.6.8-17.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-15753","severity":"moderate","public_date":"2019-08-28T00:00:00Z","advisories":[],"bugzilla":"1747255","bugzilla_description":"CVE-2019-15753 python-os-vif: Hard-coded MAC aging time of 0 disables MAC learning in linuxbridge","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-200|CWE-406)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15753.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2019-14806","severity":"moderate","public_date":"2019-08-09T00:00:00Z","advisories":[],"bugzilla":"1771359","bugzilla_description":"CVE-2019-14806 python-werkzeug: insufficient debugger PIN randomness vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14806.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14232","severity":"moderate","public_date":"2019-08-01T08:00:00Z","advisories":["RHSA-2020:1324"],"bugzilla":"1734405","bugzilla_description":"CVE-2019-14232 Django: backtracking in a regular expression in django.utils.text.Truncator leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["python-django-0:2.1.11-1.el8ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14232.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-14233","severity":"moderate","public_date":"2019-08-01T08:00:00Z","advisories":["RHSA-2020:1324"],"bugzilla":"1734410","bugzilla_description":"CVE-2019-14233 Django: the behavior of the underlying HTMLParser leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["python-django-0:2.1.11-1.el8ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-14234","severity":"moderate","public_date":"2019-08-01T08:00:00Z","advisories":["RHSA-2020:1324"],"bugzilla":"1734417","bugzilla_description":"CVE-2019-14234 Django: SQL injection possibility in key and index lookups for JSONField/HStoreField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["python-django-0:2.1.11-1.el8ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14234.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-14235","severity":"moderate","public_date":"2019-08-01T08:00:00Z","advisories":["RHSA-2020:1324"],"bugzilla":"1734422","bugzilla_description":"CVE-2019-14235 Django: Potential memory exhaustion in django.utils.encoding.uri_to_iri()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["python-django-0:2.1.11-1.el8ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14235.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-12855","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1728206","bugzilla_description":"CVE-2019-12855 python-twisted: XMPP  support in words.protocols.jabber.xmlstream in Twisted does not verify certificates allowing for a MITM connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-18348","severity":"moderate","public_date":"2019-07-04T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1727276","bugzilla_description":"CVE-2019-18348 python: CRLF injection via the host part of the url passed to urlopen()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-12781","severity":"moderate","public_date":"2019-07-01T00:00:00Z","advisories":["RHSA-2020:1324"],"bugzilla":"1724497","bugzilla_description":"CVE-2019-12781 Django: Incorrect HTTP detection with reverse-proxy connecting via HTTPS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-358|CWE-444)","affected_packages":["python-django-0:2.1.11-1.el8ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12781.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-12387","severity":"moderate","public_date":"2019-06-10T00:00:00Z","advisories":["RHSA-2020:1091","RHSA-2019:3172"],"bugzilla":"1719501","bugzilla_description":"CVE-2019-12387 python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python-twisted-web-0:12.1.0-6.el7","python-twisted-0:16.4.1-12.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-12308","severity":"moderate","public_date":"2019-06-03T00:00:00Z","advisories":[],"bugzilla":"1715915","bugzilla_description":"CVE-2019-12308 django: missing URL validation by AdminURLFieldWidget leads to generation of clickable unsafe JavaScript link causing cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12308.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-10160","severity":"important","public_date":"2019-06-03T00:00:00Z","advisories":["RHSA-2019:1587","RHSA-2019:1700","RHSA-2019:2437"],"bugzilla":"1718388","bugzilla_description":"CVE-2019-10160 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python27-python-0:2.7.16-6.el6","python27-python-0:2.7.16-6.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","python-0:2.7.5-80.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-11324","severity":"moderate","public_date":"2019-04-17T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:2804","RHSA-2020:1916","RHSA-2020:1605","RHBA-2020:2785","RHSA-2019:3590"],"bugzilla":"1702473","bugzilla_description":"CVE-2019-11324 python-urllib3: Certification mishandle when error should be thrown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-pip-0:9.0.3-7.el7_8","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20916","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1868135","bugzilla_description":"CVE-2019-20916 python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["python27-python-pip-0:8.1.2-6.el7","rh-python36-python-virtualenv-0:15.1.0-3.el6","python27-python-virtualenv-0:13.1.0-4.el7","rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-virtualenv-0:15.1.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20916.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-10906","severity":"important","public_date":"2019-04-06T00:00:00Z","advisories":["RHSA-2019:1237","RHSA-2019:1329","RHSA-2019:1152","RHSA-2019:3172"],"bugzilla":"1698839","bugzilla_description":"CVE-2019-10906 python-jinja2: str.format_map allows sandbox escape","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","rh-python36-python-jinja2-0:2.9.6-3.el6","rh-python36-python-jinja2-0:2.9.6-3.el7","rh-python35-python-jinja2-0:2.8.1-2.el7","python-jinja2-0:2.10.1-2.el8_0","rh-python35-python-jinja2-0:2.8.1-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-9948","severity":"moderate","public_date":"2019-03-23T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:1268","RHSA-2020:1462","RHSA-2019:3520","RHSA-2019:1700","RHSA-2020:1346","RHSA-2019:2030"],"bugzilla":"1695570","bugzilla_description":"CVE-2019-9948 python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-749","affected_packages":["python27:2.7-8010020190903182548.51c94b97","python-0:2.7.5-63.el7_4","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-6.el6","python27-python-0:2.7.16-6.el7","python3-0:3.6.8-15.1.el8","python-0:2.7.5-74.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9948.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-9947","severity":"moderate","public_date":"2019-03-23T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:1268","RHSA-2020:1462","RHSA-2019:3520","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:2030","RHSA-2019:1260"],"bugzilla":"1695572","bugzilla_description":"CVE-2019-9947 python: CRLF injection via the path part of the url passed to urlopen()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27:2.7-8010020190903182548.51c94b97","rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-4.el7","python3-0:3.6.8-15.1.el8","python-0:2.7.5-74.el7_5","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9947.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9740","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:1268","RHSA-2020:1462","RHSA-2019:3520","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:2030","RHSA-2019:1260"],"bugzilla":"1688169","bugzilla_description":"CVE-2019-9740 python: CRLF injection via the query part of the url passed to urlopen()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27:2.7-8010020190903182548.51c94b97","rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-4.el7","python3-0:3.6.8-15.1.el8","python-0:2.7.5-74.el7_5","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11236","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHBA-2020:2804","RHSA-2020:1605","RHSA-2020:0851","RHBA-2020:2785","RHSA-2019:2272","RHBA-2020:1540","RHSA-2019:3590","RHSA-2020:1916","RHSA-2020:2081"],"bugzilla":"1700824","bugzilla_description":"CVE-2019-11236 python-urllib3: CRLF injection due to not encoding the '\\r\\n' sequence leading to possible attack on internal service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.10.2-7.el7","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9674","severity":"low","public_date":"2019-03-11T00:00:00Z","advisories":[],"bugzilla":"1800749","bugzilla_description":"CVE-2019-9674 python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-409","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9674.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9636","severity":"important","public_date":"2019-03-06T00:00:00Z","advisories":["RHBA-2019:0763","RHSA-2019:2980","RHSA-2019:0806","RHSA-2019:1467","RHSA-2019:0981","RHSA-2019:0710","RHSA-2019:0765","RHSA-2019:0997","RHSA-2019:3170","RHBA-2019:0764","RHSA-2019:0902"],"bugzilla":"1688543","bugzilla_description":"CVE-2019-9636 python: Information Disclosure due to urlsplit improper NFKC normalization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python3-0:3.6.8-2.el8_0","python27-python-0:2.7.13-4.el6","rhvm-appliance-0:4.2-20190411.1.el7","python27-python-0:2.7.13-6.el7","python-0:2.7.5-59.el7_4","python-0:2.7.5-70.el7_5","rh-python36-python-0:3.6.3-4.el6","redhat-virtualization-host-0:4.2-20190411.1.el7_6","python27:2.7-8000020190410132513.c0efe978","rh-python35-python-0:3.5.1-12.el7","rh-python35-python-0:3.5.1-12.el6","python-0:2.7.5-77.el7_6","python-0:2.6.6-68.el6_10","rh-python36-python-0:3.6.3-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-8341","severity":null,"public_date":"2019-02-14T00:00:00Z","advisories":[],"bugzilla":"1677653","bugzilla_description":"CVE-2019-8341 python-jinja2: command injection in function from_string","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8341.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","cvss3_score":"8.2"},{"CVE":"CVE-2019-6975","severity":"moderate","public_date":"2019-02-11T14:00:00Z","advisories":[],"bugzilla":"1673642","bugzilla_description":"CVE-2019-6975 python-django: memory exhaustion in django.utils.numberformat.format()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-8331","severity":"moderate","public_date":"2019-02-11T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2020:3936"],"bugzilla":"1686454","bugzilla_description":"CVE-2019-8331 bootstrap: XSS in the tooltip or popover data-template attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","ovirt-web-ui-0:1.6.0-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-7548","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:0984","RHSA-2019:0981"],"bugzilla":"1674059","bugzilla_description":"CVE-2019-7548 python-sqlalchemy: SQL Injection when the group_by parameter can be controlled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":["python27:2.7-8000020190410132513.c0efe978","python36:3.6-8000020190410133122.593c47b3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-7164","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:0984","RHSA-2019:0981"],"bugzilla":"1678520","bugzilla_description":"CVE-2019-7164 python-sqlalchemy: SQL Injection when the order_by parameter can be controlled","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python27:2.7-8000020190410132513.c0efe978","python36:3.6-8000020190410133122.593c47b3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-6690","severity":"moderate","public_date":"2019-01-23T00:00:00Z","advisories":[],"bugzilla":"1670364","bugzilla_description":"CVE-2019-6690 python-gnupg: improper input validation in gnupg.GPG.encrypt() and gnupg.GPG.decrypt()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6690.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-10138","severity":"moderate","public_date":"2019-01-17T00:00:00Z","advisories":["RHBA-2019:0944","RHSA-2019:1728"],"bugzilla":"1670573","bugzilla_description":"CVE-2019-10138 python-novajoin: novajoin API lacks access control","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["python-novajoin-0:1.1.1-3.el7ost","python-novajoin-0:1.1.1-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10138.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-6446","severity":"moderate","public_date":"2019-01-16T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2019:3704"],"bugzilla":"1667950","bugzilla_description":"CVE-2019-6446 numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-20","affected_packages":["python27:2.7-8010020190903182548.51c94b97","numpy-1:1.14.3-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-5010","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:3520","RHSA-2019:3725","RHSA-2019:2030"],"bugzilla":"1666519","bugzilla_description":"CVE-2019-5010 python: NULL pointer dereference using a specially crafted X509 certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-86.el7","python3-0:3.6.8-15.1.el8","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3498","severity":"low","public_date":"2019-01-07T00:00:00Z","advisories":[],"bugzilla":"1663722","bugzilla_description":"CVE-2019-3498 python-django: Content spoofing via URL path in default 404 page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-99","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3498.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-20852","severity":"moderate","public_date":"2018-10-31T00:00:00Z","advisories":["RHBA-2020:1539","RHSA-2020:1132","RHSA-2020:1131","RHSA-2019:3948","RHSA-2020:1605","RHSA-2019:3725","RHSA-2020:1764","RHBA-2020:1540"],"bugzilla":"1740347","bugzilla_description":"CVE-2018-20852 python: Cookie domain check returns incorrect results","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","rh-python36-python-0:3.6.9-2.el6","python27-python-0:2.7.17-2.el6","python3-0:3.6.8-13.el7","python27-python-0:2.7.17-2.el7","python-0:2.7.5-88.el7","python3-0:3.6.8-23.el8","rh-python36-python-0:3.6.9-2.el7","python27:2.7-8020020200117110429.90f98d4f"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20852.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-16984","severity":"low","public_date":"2018-10-01T00:00:00Z","advisories":[],"bugzilla":"1639398","bugzilla_description":"CVE-2018-16984 python-django: Password hash disclosure to \"view only\" admin users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16984.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2018-14647","severity":"moderate","public_date":"2018-09-22T00:00:00Z","advisories":["RHSA-2020:1268","RHSA-2020:1462","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:2030","RHSA-2019:1260"],"bugzilla":"1631822","bugzilla_description":"CVE-2018-14647 python: Missing salt initialization in _elementtree.c module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665->CWE-335","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-4.el7","python-0:2.7.5-74.el7_5","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20406","severity":"low","public_date":"2018-09-21T00:00:00Z","advisories":["RHSA-2019:3725"],"bugzilla":"1664509","bugzilla_description":"CVE-2018-20406 python: Integer overflow in Modules/_pickle.c allows for memory exhaustion if serializing gigabytes of data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":["rh-python36-python-0:3.6.9-2.el6","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20406.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-19787","severity":"moderate","public_date":"2018-09-09T00:00:00Z","advisories":[],"bugzilla":"1660235","bugzilla_description":"CVE-2018-19787 python-lxml: XSS in lxml.html.clean module in lxml/html/clean.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19787.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-1000805","severity":"critical","public_date":"2018-09-07T00:00:00Z","advisories":["RHBA-2018:3497","RHSA-2018:3470","RHSA-2018:3406","RHSA-2018:3347"],"bugzilla":"1637263","bugzilla_description":"CVE-2018-1000805 python-paramiko: Authentication bypass in auth_handler.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["redhat-virtualization-host-0:4.2-20181026.0.el7_6","python-paramiko-0:1.7.5-5.el6_10","python-paramiko-0:2.1.1-9.el7","rhvm-appliance-0:4.2-20181026.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-1000802","severity":"moderate","public_date":"2018-08-29T00:00:00Z","advisories":[],"bugzilla":"1631420","bugzilla_description":"CVE-2018-1000802 python: Command injection in the shutil module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-20676","severity":"moderate","public_date":"2018-08-10T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668082","bugzilla_description":"CVE-2018-20676 bootstrap: XSS in the tooltip data-viewport attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20676.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-20677","severity":"moderate","public_date":"2018-08-10T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668089","bugzilla_description":"CVE-2018-20677 bootstrap: XSS in the affix configuration target property","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14574","severity":"moderate","public_date":"2018-08-01T14:00:00Z","advisories":["RHSA-2019:0265"],"bugzilla":"1609031","bugzilla_description":"CVE-2018-14574 django: Open redirect possibility in CommonMiddleware","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["python-django-0:1.11.15-4.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14574.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-16056","severity":"moderate","public_date":"2018-07-19T00:00:00Z","advisories":["RHSA-2020:2520","RHBA-2020:1539","RHSA-2020:1132","RHSA-2020:1131","RHSA-2019:3948","RHSA-2020:1605","RHSA-2019:3725","RHSA-2020:1764","RHBA-2020:1540"],"bugzilla":"1749839","bugzilla_description":"CVE-2019-16056 python: email.utils.parseaddr wrongly parses email addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","rh-python36-python-0:3.6.9-2.el6","python27-python-0:2.7.17-2.el6","python3-0:3.6.8-13.el7","python27-python-0:2.7.17-2.el7","python-0:2.7.5-88.el7","python-0:2.7.5-87.el7_7","python3-0:3.6.8-23.el8","rh-python36-python-0:3.6.9-2.el7","python27:2.7-8020020200117110429.90f98d4f"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-10903","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2018:3600"],"bugzilla":"1602931","bugzilla_description":"CVE-2018-10903 python-cryptography: GCM tag forgery via truncated tag in finalize_with_tag API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["python-cryptography-0:2.1.4-3.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10903.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-18074","severity":"low","public_date":"2018-06-29T00:00:00Z","advisories":["RHSA-2019:2035","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHBA-2020:1540"],"bugzilla":"1643829","bugzilla_description":"CVE-2018-18074 python-requests: Redirect from HTTPS to HTTP does not remove Authorization header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-requests-0:2.6.0-5.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18074.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2017-18342","severity":"moderate","public_date":"2018-06-27T00:00:00Z","advisories":[],"bugzilla":"1595743","bugzilla_description":"CVE-2017-18342 PyYAML: yaml.load() API could execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18342.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14040","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601614","bugzilla_description":"CVE-2018-14040 bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14041","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2019:1456"],"bugzilla":"1601616","bugzilla_description":"CVE-2018-14041 bootstrap: Cross-site Scripting (XSS) in the data-target property of scrollspy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14041.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14042","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601617","bugzilla_description":"CVE-2018-14042 bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-1010083","severity":"moderate","public_date":"2018-04-26T00:00:00Z","advisories":[],"bugzilla":"1888007","bugzilla_description":"CVE-2019-1010083 python-flask: unexpected memory usage can lead to denial of service via crafted encoded JSON data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010083.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000872","severity":"low","public_date":"2018-04-24T00:00:00Z","advisories":[],"bugzilla":"1665592","bugzilla_description":"CVE-2018-1000872 python-pykmip: DoS due to undefined default timeout for all server sockets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000872.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000656","severity":"low","public_date":"2018-04-10T00:00:00Z","advisories":["RHSA-2020:0870"],"bugzilla":"1623131","bugzilla_description":"CVE-2018-1000656 python-flask: Denial of Service via crafted JSON file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["python-flask-1:0.10.1-5.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000656.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-20060","severity":"moderate","public_date":"2018-03-26T00:00:00Z","advisories":["RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHSA-2019:2272","RHBA-2020:1540"],"bugzilla":"1649153","bugzilla_description":"CVE-2018-20060 python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-urllib3-0:1.10.2-7.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1060","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3041","RHSA-2020:1268","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:1260"],"bugzilla":"1549191","bugzilla_description":"CVE-2018-1060 python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python27-python-0:2.7.16-4.el7","python-0:2.7.5-74.el7_5","python-0:2.7.5-76.el7","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1061","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3041","RHSA-2020:1268","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:1260"],"bugzilla":"1549192","bugzilla_description":"CVE-2018-1061 python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python27-python-0:2.7.16-4.el7","python-0:2.7.5-74.el7_5","python-0:2.7.5-76.el7","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-7750","severity":"critical","public_date":"2018-03-13T00:00:00Z","advisories":["RHSA-2018:1525","RHSA-2018:1328","RHSA-2018:0646","RHSA-2018:1972","RHSA-2018:1213","RHSA-2018:1125","RHSA-2018:1124","RHSA-2018:0591","RHSA-2018:1274"],"bugzilla":"1557130","bugzilla_description":"CVE-2018-7750 python-paramiko: Authentication bypass in transport.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["python-paramiko-0:1.7.5-4.el6_9","python-paramiko-0:2.1.1-4.el7","python-paramiko-0:1.7.5-4.el6_7","python-paramiko-0:1.7.5-4.el6_6","python-paramiko-0:1.7.5-4.el6_5","rhvm-appliance-0:4.2-20180504.0","python-paramiko-0:1.7.5-4.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-7536","severity":"moderate","public_date":"2018-03-06T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:0265","RHSA-2019:0051","RHSA-2019:0082"],"bugzilla":"1549777","bugzilla_description":"CVE-2018-7536 django: Catastrophic backtracking in regular expressions via 'urlize' and 'urlizetrunc'","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":["python-django-0:1.8.19-1.el7ost","python-django-0:1.11.11-1.el7sat","python-django-0:1.11.15-4.el7rhgs","python-django-0:1.11.11-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7536.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-7537","severity":"moderate","public_date":"2018-03-06T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:0265"],"bugzilla":"1549779","bugzilla_description":"CVE-2018-7537 django: Catastrophic backtracking in regular expressions via 'truncatechars_html' and 'truncatewords_html'","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":["python-django-0:1.11.11-1.el7sat","python-django-0:1.11.15-4.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7537.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-6188","severity":"moderate","public_date":"2018-02-05T13:23:00Z","advisories":["RHSA-2018:2927"],"bugzilla":"1538793","bugzilla_description":"CVE-2018-6188 django: Information leakage in AuthenticationForm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":["python-django-0:1.11.11-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6188.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-6594","severity":"moderate","public_date":"2018-02-03T00:00:00Z","advisories":[],"bugzilla":"1542313","bugzilla_description":"CVE-2018-6594 python-crypto: Weak ElGamal key parameters in PublicKey/ElGamal.py allow attackers to obtain sensitive information by reading ciphertext","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6594.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-17522","severity":"moderate","public_date":"2017-12-14T00:00:00Z","advisories":[],"bugzilla":"1526176","bugzilla_description":"CVE-2017-17522 python: Command injection in Lib/webbrowser.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17522.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-16228","severity":"moderate","public_date":"2017-10-29T00:00:00Z","advisories":[],"bugzilla":"1509303","bugzilla_description":"CVE-2017-16228 python-dulwich: Setting SSH arguments from untrusted URLs allows code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16228.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-10516","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1512102","bugzilla_description":"CVE-2016-10516 python-werkzeug: Cross-site scripting in render_full function in debug/tbtools.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["python-werkzeug-0:0.12.2-5.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2018-1000030","severity":"low","public_date":"2017-09-20T00:00:00Z","advisories":[],"bugzilla":"1541558","bugzilla_description":"CVE-2018-1000030 python: Heap-Buffer-Overflow and Heap-Use-After-Free in Objects/fileobject.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000030.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2017-1000433","severity":"low","public_date":"2017-09-10T00:00:00Z","advisories":[],"bugzilla":"1516162","bugzilla_description":"CVE-2017-1000433 python-pysaml2: Access restriction bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000433.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-12794","severity":"low","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1486451","bugzilla_description":"CVE-2017-12794 python-django: Possible XSS in traceback section of technical 500 debug page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12794.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2015-5081","severity":"moderate","public_date":"2017-08-24T00:00:00Z","advisories":[],"bugzilla":"1484978","bugzilla_description":"CVE-2015-5081 Django: CSRF around publishing of draft changes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5081.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-12852","severity":"low","public_date":"2017-08-15T00:00:00Z","advisories":[],"bugzilla":"1483686","bugzilla_description":"CVE-2017-12852 numpy: Missing input validation on empty list or ndarray in numpy.pad function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12852.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-11424","severity":"moderate","public_date":"2017-06-22T00:00:00Z","advisories":[],"bugzilla":"1482529","bugzilla_description":"CVE-2017-11424 python-jwt: Incorrect handling of PEM-encoded public keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11424.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-2810","severity":"low","public_date":"2017-06-13T00:00:00Z","advisories":[],"bugzilla":"1461297","bugzilla_description":"CVE-2017-2810 python-tablib: Databook loading functionality allows command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-1000158","severity":"moderate","public_date":"2017-06-13T00:00:00Z","advisories":[],"bugzilla":"1519595","bugzilla_description":"CVE-2017-1000158 python: Integer overflow in PyString_DecodeEscape results in heap-base buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-1000246","severity":"low","public_date":"2017-05-24T00:00:00Z","advisories":[],"bugzilla":"1524420","bugzilla_description":"CVE-2017-1000246 python-pysaml2: Reuse of AES initialization vector in AESCipher","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-7233","severity":"moderate","public_date":"2017-04-04T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2017:1445","RHSA-2017:3093","RHSA-2017:1470","RHSA-2017:1451","RHSA-2017:1462","RHSA-2017:1596"],"bugzilla":"1437234","bugzilla_description":"CVE-2017-7233 python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["python-django-0:1.8.18-1.el7ost","python-django-0:1.11.11-1.el7sat","python-django-0:1.6.11-7.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7234","severity":"moderate","public_date":"2017-04-04T00:00:00Z","advisories":[],"bugzilla":"1437236","bugzilla_description":"CVE-2017-7234 python-django: Open redirect vulnerability in django.views.static.serve()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7234.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-16012","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":["RHSA-2018:0501","RHSA-2020:0983"],"bugzilla":"1591854","bugzilla_description":"CVE-2017-16012 js-jquery: XSS in responses from cross-origin ajax requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-7400","severity":"low","public_date":"2017-03-03T00:00:00Z","advisories":["RHSA-2017:1739","RHSA-2017:1598"],"bugzilla":"1439626","bugzilla_description":"CVE-2017-7400 python-django-horizon: XSS in federation mappings UI","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["python-django-horizon-1:9.0.1-13.el7ost","python-django-horizon-1:10.0.3-6.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7400.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2017-2592","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2017:0435","RHSA-2017:0300"],"bugzilla":"1414698","bugzilla_description":"CVE-2017-2592 python-oslo-middleware: CatchErrors leaks sensitive values into error logs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["python-oslo-middleware-0:3.19.0-1.2.el7ost","python-oslo-middleware-0:3.7.0-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2592.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-10127","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":[],"bugzilla":"1411794","bugzilla_description":"CVE-2016-10127 python-pysaml2: Vulnerable to XML external entity attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10127.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-10745","severity":"important","public_date":"2016-12-29T00:00:00Z","advisories":["RHSA-2019:1022","RHSA-2019:3964","RHSA-2019:1237","RHSA-2019:4062","RHSA-2019:1260","RHSA-2019:3172"],"bugzilla":"1698345","bugzilla_description":"CVE-2016-10745 python-jinja2: Sandbox escape due to information disclosure via str.format","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","python27-python-jinja2-0:2.6-15.el7","python-jinja2-0:2.7.2-3.el7_4","python-jinja2-0:2.7.2-3.el7_5","python-jinja2-0:2.7.2-3.el7_6","rh-python35-python-jinja2-0:2.8.1-2.el7","rh-python35-python-jinja2-0:2.8.1-2.el6","python27-python-jinja2-0:2.6-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2016-9243","severity":"low","public_date":"2016-11-05T00:00:00Z","advisories":[],"bugzilla":"1393431","bugzilla_description":"CVE-2016-9243 python-cryptography: HKDF might return an empty byte-string","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9243.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-9013","severity":"moderate","public_date":"2016-11-01T00:00:00Z","advisories":[],"bugzilla":"1389414","bugzilla_description":"CVE-2016-9013 python-django: user with hardcoded password created when running tests on Oracle","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-798","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9013.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2016-9014","severity":"low","public_date":"2016-11-01T00:00:00Z","advisories":[],"bugzilla":"1389417","bugzilla_description":"CVE-2016-9014 python-django: DNS rebinding vulnerability when 'DEBUG=True'","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2016-10149","severity":"moderate","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0937","RHSA-2017:0936","RHSA-2017:0938"],"bugzilla":"1415710","bugzilla_description":"CVE-2016-10149 python-pysaml2: Entity expansion issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":["python-pysaml2-0:3.0.2-3.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10149.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-9189","severity":"moderate","public_date":"2016-10-03T00:00:00Z","advisories":[],"bugzilla":"1382000","bugzilla_description":"CVE-2016-9189 python-pillow: Integer overflows leading to memory disclosure in PyImaging_MapBuffer (Map.c)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9189.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-9190","severity":"moderate","public_date":"2016-10-03T00:00:00Z","advisories":[],"bugzilla":"1382006","bugzilla_description":"CVE-2016-9190 python-pillow: Missing check for negative image dimensions in ImagingNew (Storage.c)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9190.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-7401","severity":"moderate","public_date":"2016-09-26T00:00:00Z","advisories":["RHSA-2016:2042","RHSA-2016:2041","RHSA-2016:2043","RHSA-2016:2040","RHSA-2016:2039","RHSA-2016:2038"],"bugzilla":"1377376","bugzilla_description":"CVE-2016-7401 python-django: CSRF protection bypass on a site with Google Analytics","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["python-django-0:1.6.11-6.el7ost","python-django-0:1.6.11-6.el6ost","python-django-0:1.8.15-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7401.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-2183","severity":"moderate","public_date":"2016-08-24T00:00:00Z","advisories":["RHSA-2020:0451","RHSA-2020:3842","RHSA-2017:3240","RHSA-2019:1245","RHBA-2019:2581","RHSA-2017:0462","RHSA-2017:3113","RHSA-2017:3114","RHSA-2017:2710","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:3239","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:2709","RHSA-2017:2708","RHSA-2018:2123","RHSA-2019:2859"],"bugzilla":"1369383","bugzilla_description":"CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","openshift3/metrics-heapster:v3.11.141-2","python-0:2.7.5-69.el7_5","openshift3/ose-console:v3.11.141-2","openshift3/oauth-proxy:v3.11.170-5","openshift4/ose-console:v4.5.0-202009201759.p0","openshift3/ose-kube-rbac-proxy:v3.11.141-2","openshift3/ose-metrics-server:v3.11.141-2","java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8","openshift4/ose-oauth-proxy:v4.1.18-201909201915"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-7103","severity":"low","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2017:0161","RHSA-2016:2933","RHSA-2016:2932"],"bugzilla":"1360286","bugzilla_description":"CVE-2016-7103 jquery-ui: cross-site scripting in dialog closeText","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-XStatic-jquery-ui-0:1.12.0.1-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7103.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-6186","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1594","RHSA-2016:1595","RHSA-2016:1596"],"bugzilla":"1355663","bugzilla_description":"CVE-2016-6186 django: XSS in admin's add/change related popup","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-django-0:1.8.14-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-1000110","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1630","RHSA-2016:1628","RHSA-2016:1629","RHSA-2016:1626","RHSA-2016:1627"],"bugzilla":"1357334","bugzilla_description":"CVE-2016-1000110 Python CGIHandler: sets environmental variable based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["python33-python-0:3.3.2-18.el6","rh-python34-python-0:3.4.2-13.el7","python27-python-0:2.7.8-16.el7","python27-python-0:2.7.8-18.el6","python-0:2.7.5-38.el7_2","rh-python34-python-0:3.4.2-14.el6","rh-python35-python-0:3.5.1-9.el7","python-0:2.6.6-66.el6_8","python33-python-0:3.3.2-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-1000111","severity":"important","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1978","RHSA-2018:0273"],"bugzilla":"1357345","bugzilla_description":"CVE-2016-1000111 Python Twisted: sets environmental variable based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["python-twisted-web-0:8.2.0-5.el6_8","python-twisted-web-0:12.1.0-5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-10735","severity":"moderate","public_date":"2016-06-27T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668097","bugzilla_description":"CVE-2016-10735 bootstrap: XSS in the data-target attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-4428","severity":"important","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1271","RHSA-2016:1272","RHSA-2016:1270","RHSA-2016:1268","RHSA-2016:1269"],"bugzilla":"1343982","bugzilla_description":"CVE-2016-4428 python-django-horizon: XSS in client side template","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-79","affected_packages":["python-django-horizon-0:2014.2.3-9.el7ost","python-django-horizon-1:8.0.1-4.el7ost","python-django-horizon-0:2014.1.5-4.el6ost","python-django-horizon-0:2014.1.5-4.el7ost","python-django-horizon-0:2015.1.4-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4428.json"},{"CVE":"CVE-2016-0772","severity":"moderate","public_date":"2016-06-11T00:00:00Z","advisories":["RHSA-2016:1630","RHSA-2016:1628","RHSA-2016:1629","RHSA-2016:1626","RHSA-2016:1627"],"bugzilla":"1303647","bugzilla_description":"CVE-2016-0772 python: smtplib StartTLS stripping attack","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python33-python-0:3.3.2-18.el6","rh-python34-python-0:3.4.2-13.el7","python27-python-0:2.7.8-16.el7","python27-python-0:2.7.8-18.el6","python-0:2.7.5-38.el7_2","rh-python34-python-0:3.4.2-14.el6","rh-python35-python-0:3.5.1-9.el7","python-0:2.6.6-66.el6_8","python33-python-0:3.3.2-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-4009","severity":"moderate","public_date":"2016-04-14T00:00:00Z","advisories":[],"bugzilla":"1327134","bugzilla_description":"CVE-2016-4009 python-pillow: integer overflow in the ImagingResampleHorizontal function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4009.json"},{"CVE":"CVE-2016-3076","severity":"moderate","public_date":"2016-04-04T00:00:00Z","advisories":[],"bugzilla":"1321929","bugzilla_description":"CVE-2016-3076 python-pillow: buffer overflow in Jpeg2kEncode.c","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3076.json"},{"CVE":"CVE-2018-1000164","severity":"moderate","public_date":"2016-03-17T00:00:00Z","advisories":[],"bugzilla":"1564940","bugzilla_description":"CVE-2018-1000164 python-gunicorn: Improper neutralization of CRLF Sequences http/wsgi.py:process_headers() can allow an attacker to cause a server to return arbitrary HTTP headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-2166","severity":"moderate","public_date":"2016-03-09T00:00:00Z","advisories":["RHBA-2018:0337"],"bugzilla":"1320842","bugzilla_description":"CVE-2016-2166 qpid-proton: reactor sends  messages in clear if ssl is requested but not available","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-223","affected_packages":["qpid-proton-0:0.16.0-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2166.json"},{"CVE":"CVE-2016-2512","severity":"moderate","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2016:0506","RHSA-2016:0502","RHSA-2016:0503","RHSA-2016:0504","RHSA-2016:0505"],"bugzilla":"1311431","bugzilla_description":"CVE-2016-2512 python-django: Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-601","affected_packages":["python-django-0:1.6.11-5.el6ost","python-django-0:1.6.11-5.el7ost","python-django-0:1.8.11-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2512.json"},{"CVE":"CVE-2016-2513","severity":"moderate","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2016:0506","RHSA-2016:0502","RHSA-2016:0503","RHSA-2016:0504","RHSA-2016:0505"],"bugzilla":"1311438","bugzilla_description":"CVE-2016-2513 python-django: User enumeration through timing difference on password hasher work factor upgrade","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["python-django-0:1.6.11-5.el6ost","python-django-0:1.6.11-5.el7ost","python-django-0:1.8.11-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2513.json"},{"CVE":"CVE-2016-0740","severity":"moderate","public_date":"2016-02-04T00:00:00Z","advisories":[],"bugzilla":"1298874","bugzilla_description":"CVE-2016-0740 python-pillow: Integer overflow resulting in buffer overflow when reading invalid tiff file","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0740.json"},{"CVE":"CVE-2016-0775","severity":"moderate","public_date":"2016-02-04T00:00:00Z","advisories":[],"bugzilla":"1301621","bugzilla_description":"CVE-2016-0775 python-pillow: Buffer overflow in FliDecode.c","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0775.json"},{"CVE":"CVE-2016-2048","severity":"low","public_date":"2016-02-01T00:00:00Z","advisories":[],"bugzilla":"1302699","bugzilla_description":"CVE-2016-2048 python-django: user with \"change\" but not \"add\" permission can create objects for ModelAdmin","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2048.json"},{"CVE":"CVE-2016-5636","severity":"low","public_date":"2016-01-21T00:00:00Z","advisories":["RHSA-2016:2586"],"bugzilla":"1345856","bugzilla_description":"CVE-2016-5636 python: Heap overflow in zipimporter module","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-190->CWE-122","affected_packages":["python-0:2.7.5-48.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5636.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2013-7459","severity":"important","public_date":"2015-12-15T00:00:00Z","advisories":[],"bugzilla":"1409754","bugzilla_description":"CVE-2013-7459 pycrypto: Heap-buffer overflow in ALGobject structure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2015-5303","severity":"moderate","public_date":"2015-12-09T00:00:00Z","advisories":["RHSA-2015:2650"],"bugzilla":"1272297","bugzilla_description":"CVE-2015-5303 python-rdomanager-oscplugin: NeutronMetadataProxySharedSecret parameter uses default value","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["python-rdomanager-oscplugin-0:0.0.10-22.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5303.json"},{"CVE":"CVE-2015-8213","severity":"moderate","public_date":"2015-11-24T00:00:00Z","advisories":["RHSA-2016:0156","RHSA-2016:0360","RHSA-2016:0129","RHSA-2016:0157","RHSA-2016:0158"],"bugzilla":"1283553","bugzilla_description":"CVE-2015-8213 python-django: Information leak through date template filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["python-django-0:1.6.11-4.el7ost","python-django-0:1.6.11-4.el6ost","python-django-0:1.8.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8213.json"},{"CVE":"CVE-2015-8557","severity":"moderate","public_date":"2015-09-28T00:00:00Z","advisories":[],"bugzilla":"1276321","bugzilla_description":"CVE-2015-8557 python-pygments: Shell injection in FontManager._get_nix_font_path","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8557.json"},{"CVE":"CVE-2015-5963","severity":"moderate","public_date":"2015-08-18T00:00:00Z","advisories":["RHSA-2015:1894","RHSA-2015:1766","RHSA-2015:1876","RHSA-2015:1767"],"bugzilla":"1252890","bugzilla_description":"CVE-2015-5963 python-django: Denial-of-service possibility in logout() view by filling session store","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["python-django-0:1.6.11-3.el7ost","python-django-0:1.6.11-3.el6ost","python-django-0:1.8.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5963.json"},{"CVE":"CVE-2015-5964","severity":"moderate","public_date":"2015-08-18T00:00:00Z","advisories":["RHSA-2015:1894","RHSA-2015:1766","RHSA-2015:1767"],"bugzilla":"1252891","bugzilla_description":"CVE-2015-5964 python-django: Denial-of-service possibility in logout() view by filling session store","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["python-django-0:1.6.11-3.el7ost","python-django-0:1.6.11-3.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5964.json"},{"CVE":"CVE-2015-5159","severity":"low","public_date":"2015-07-21T00:00:00Z","advisories":[],"bugzilla":"1245200","bugzilla_description":"CVE-2015-5159 python-kdcproxy: Missing request size limit allows denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5159.json"},{"CVE":"CVE-2015-5143","severity":"moderate","public_date":"2015-07-08T00:00:00Z","advisories":["RHSA-2015:1678","RHSA-2015:1686"],"bugzilla":"1239010","bugzilla_description":"CVE-2015-5143 Django: possible DoS by filling session store","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["python-django-0:1.6.11-1.el6ost","python-django-0:1.6.11-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5143.json"},{"CVE":"CVE-2015-5144","severity":"moderate","public_date":"2015-07-08T00:00:00Z","advisories":[],"bugzilla":"1239011","bugzilla_description":"CVE-2015-5144 Django: possible header injection due to validators accepting newlines in input","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5144.json"},{"CVE":"CVE-2015-5145","severity":"moderate","public_date":"2015-07-08T00:00:00Z","advisories":[],"bugzilla":"1240526","bugzilla_description":"CVE-2015-5145 Django: DoS via incorrect URL validation","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5145.json"},{"CVE":"CVE-2015-9251","severity":"moderate","public_date":"2015-06-27T00:00:00Z","advisories":["RHSA-2020:0481","RHSA-2020:0729","RHSA-2020:3936","RHSA-2020:0983"],"bugzilla":"1399546","bugzilla_description":"CVE-2015-9251 js-jquery: Cross-site scripting via cross-domain ajax requests","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2015-3219","severity":"moderate","public_date":"2015-06-09T00:00:00Z","advisories":["RHSA-2015:1679"],"bugzilla":"1228534","bugzilla_description":"CVE-2015-3219 python-django-horizon: XSS in Heat stack creation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-django-horizon-0:2014.2.3-7.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3219.json"},{"CVE":"CVE-2015-3206","severity":"moderate","public_date":"2015-05-21T00:00:00Z","advisories":[],"bugzilla":"1223802","bugzilla_description":"CVE-2015-3206 python-kerberos: checkPassword() does not verify KDC authenticity","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-304","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3206.json"},{"CVE":"CVE-2015-3982","severity":"moderate","public_date":"2015-05-20T00:00:00Z","advisories":[],"bugzilla":"1221526","bugzilla_description":"CVE-2015-3982 django: incorrect session flushing in the cached_db backend","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-613","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3982.json"},{"CVE":"CVE-2015-3988","severity":"moderate","public_date":"2015-05-01T00:00:00Z","advisories":["RHSA-2015:1679"],"bugzilla":"1222871","bugzilla_description":"CVE-2015-3988 python-django-horizon: persistent XSS in Horizon metadata dashboard","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-django-horizon-0:2014.2.3-7.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3988.json"},{"CVE":"CVE-2015-1852","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1677","RHSA-2015:1685"],"bugzilla":"1209527","bugzilla_description":"CVE-2015-1852 OpenStack keystonemiddleware/keystoneclient: S3Token TLS cert verification option not honored","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-295","affected_packages":["python-keystoneclient-1:0.9.0-6.el6ost","python-keystonemiddleware-0:1.3.2-1.el7ost","python-keystoneclient-1:0.11.1-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1852.json"},{"CVE":"CVE-2015-2316","severity":"moderate","public_date":"2015-03-18T00:00:00Z","advisories":[],"bugzilla":"1202809","bugzilla_description":"CVE-2015-2316 Django: possible denial of service in strip_tags()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2316.json"},{"CVE":"CVE-2015-2317","severity":"low","public_date":"2015-03-18T00:00:00Z","advisories":[],"bugzilla":"1202818","bugzilla_description":"CVE-2015-2317 Django: possible XSS attack via user-supplied redirect URLs","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2317.json"},{"CVE":"CVE-2015-2296","severity":"moderate","public_date":"2015-03-14T00:00:00Z","advisories":[],"bugzilla":"1202904","bugzilla_description":"CVE-2015-2296 python-requests: session fixation and cookie stealing vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2296.json"},{"CVE":"CVE-2015-2241","severity":"moderate","public_date":"2015-03-09T00:00:00Z","advisories":[],"bugzilla":"1200922","bugzilla_description":"CVE-2015-2241 Django: XSS attack via properties in ModelAdmin.readonly_fields","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2241.json"},{"CVE":"CVE-2015-0219","severity":"moderate","public_date":"2015-01-13T00:00:00Z","advisories":[],"bugzilla":"1179672","bugzilla_description":"CVE-2015-0219 Django: WSGI header spoofing via underscore/dash conflation","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"(CWE-20|CWE-290)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0219.json"},{"CVE":"CVE-2015-0220","severity":"moderate","public_date":"2015-01-13T00:00:00Z","advisories":[],"bugzilla":"1179675","bugzilla_description":"CVE-2015-0220 Django: Mitigated possible XSS attack via user-supplied redirect URLs","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0220.json"},{"CVE":"CVE-2015-0221","severity":"moderate","public_date":"2015-01-13T00:00:00Z","advisories":[],"bugzilla":"1179679","bugzilla_description":"CVE-2015-0221 Django: denial of service attack against django.views.static.serve","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0221.json"},{"CVE":"CVE-2015-0222","severity":"moderate","public_date":"2015-01-13T00:00:00Z","advisories":[],"bugzilla":"1179685","bugzilla_description":"CVE-2015-0222 Django: database denial of service with ModelMultipleChoiceField","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0222.json"},{"CVE":"CVE-2014-9601","severity":"low","public_date":"2014-12-31T00:00:00Z","advisories":[],"bugzilla":"1179354","bugzilla_description":"CVE-2014-9601 python-pillow: potential denial-of-service during PNG decompression","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9601.json"},{"CVE":"CVE-2014-9365","severity":"moderate","public_date":"2014-12-11T00:00:00Z","advisories":["RHSA-2017:1868","RHSA-2017:1162"],"bugzilla":"1173041","bugzilla_description":"CVE-2014-9365 python: failure to validate certificates in the HTTP client with TLS (PEP 476)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-345","affected_packages":["python27-python-0:2.7.13-3.el7","python27-python-0:2.7.13-3.el6","python-0:2.7.5-58.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2014-8124","severity":"moderate","public_date":"2014-12-09T00:00:00Z","advisories":["RHSA-2015:0845","RHSA-2015:0839"],"bugzilla":"1169637","bugzilla_description":"CVE-2014-8124 python-django-horizon: denial of service via login page requests","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["python-django-horizon-0:2014.1.4-1.el7ost","python-django-openstack-auth-0:1.1.5-4.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8124.json"},{"CVE":"CVE-2016-5699","severity":"moderate","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2016:1630","RHSA-2016:1628","RHSA-2016:1629","RHSA-2016:1626","RHSA-2016:1627"],"bugzilla":"1303699","bugzilla_description":"CVE-2016-5699 python: http protocol steam injection attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["python33-python-0:3.3.2-18.el6","rh-python34-python-0:3.4.2-13.el7","python27-python-0:2.7.8-16.el7","python27-python-0:2.7.8-18.el6","python-0:2.7.5-38.el7_2","rh-python34-python-0:3.4.2-14.el6","rh-python35-python-0:3.5.1-9.el7","python-0:2.6.6-66.el6_8","python33-python-0:3.3.2-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5699.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2014-3606","severity":null,"public_date":"2014-11-12T00:00:00Z","advisories":[],"bugzilla":"1133306","bugzilla_description":"CVE-2014-3606 python-pillow: flaw in _unop()","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3606.json"},{"CVE":"CVE-2014-8165","severity":"moderate","public_date":"2014-09-30T00:00:00Z","advisories":["RHSA-2016:2607"],"bugzilla":"1073139","bugzilla_description":"CVE-2014-8165 powerpc-utils-python: arbitrary code execution due to unpickling untrusted input","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["powerpc-utils-python-0:1.2.1-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8165.json"},{"CVE":"CVE-2014-7143","severity":"moderate","public_date":"2014-09-17T00:00:00Z","advisories":[],"bugzilla":"1143802","bugzilla_description":"CVE-2014-7143 python-twisted-web: specified trustRoot not respected","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7143.json"},{"CVE":"CVE-2014-3598","severity":"moderate","public_date":"2014-09-01T00:00:00Z","advisories":[],"bugzilla":"1163441","bugzilla_description":"CVE-2014-3598 python-pillow: Jpeg2KImagePlugin infinite loop DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3598.json"},{"CVE":"CVE-2014-0480","severity":"moderate","public_date":"2014-08-20T00:00:00Z","advisories":[],"bugzilla":"1129950","bugzilla_description":"CVE-2014-0480 Django: reverse() can generate URLs pointing to other hosts, leading to phishing attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0480.json"},{"CVE":"CVE-2014-0481","severity":"moderate","public_date":"2014-08-20T00:00:00Z","advisories":[],"bugzilla":"1129952","bugzilla_description":"CVE-2014-0481 Django: file upload denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0481.json"},{"CVE":"CVE-2014-0482","severity":"moderate","public_date":"2014-08-20T00:00:00Z","advisories":[],"bugzilla":"1129954","bugzilla_description":"CVE-2014-0482 Django: RemoteUserMiddleware session hijacking","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0482.json"},{"CVE":"CVE-2014-0483","severity":"moderate","public_date":"2014-08-20T00:00:00Z","advisories":[],"bugzilla":"1129959","bugzilla_description":"CVE-2014-0483 Django: data leakage via querystring manipulation in admin","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0483.json"},{"CVE":"CVE-2014-3594","severity":"moderate","public_date":"2014-08-19T00:00:00Z","advisories":["RHSA-2014:1335","RHSA-2014:1336","RHSA-2014:1188"],"bugzilla":"1129774","bugzilla_description":"CVE-2014-3594 openstack-horizon: persistent XSS in Horizon Host Aggregates interface","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-django-horizon-0:2013.2.3-3.el6ost","python-django-horizon-0:2014.1.2-2.el7ost","python-django-horizon-0:2014.1.2-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3594.json"},{"CVE":"CVE-2014-3589","severity":"moderate","public_date":"2014-08-13T00:00:00Z","advisories":[],"bugzilla":"1130711","bugzilla_description":"CVE-2014-3589 python-pillow, python-imaging: DoS in IcnsImagePlugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3589.json"},{"CVE":"CVE-2014-7144","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1784","RHSA-2014:1783","RHSA-2015:0020"],"bugzilla":"1143808","bugzilla_description":"CVE-2014-7144 python-keystoneclient: TLS certificate verification disabled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":["python-keystoneclient-1:0.9.0-5.el7ost","python-keystoneclient-1:0.9.0-5.el6ost","python-keystoneclient-1:0.7.1-5.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7144.json"},{"CVE":"CVE-2014-3473","severity":"moderate","public_date":"2014-07-08T00:00:00Z","advisories":["RHSA-2014:1188","RHSA-2014:0939"],"bugzilla":"1116090","bugzilla_description":"CVE-2014-3473 CVE-2014-3474 CVE-2014-3475 CVE-2014-8578 openstack-horizon: multiple XSS flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-django-horizon-0:2013.2.3-3.el6ost","python-django-horizon-0:2014.1.1-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3473.json"},{"CVE":"CVE-2014-3474","severity":"moderate","public_date":"2014-07-08T00:00:00Z","advisories":["RHSA-2014:1188","RHSA-2014:0939"],"bugzilla":"1116090","bugzilla_description":"CVE-2014-3473 CVE-2014-3474 CVE-2014-3475 CVE-2014-8578 openstack-horizon: multiple XSS flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-django-horizon-0:2013.2.3-3.el6ost","python-django-horizon-0:2014.1.1-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3474.json"},{"CVE":"CVE-2014-3475","severity":"moderate","public_date":"2014-07-08T00:00:00Z","advisories":["RHSA-2014:1188","RHSA-2014:0939"],"bugzilla":"1116090","bugzilla_description":"CVE-2014-3473 CVE-2014-3474 CVE-2014-3475 CVE-2014-8578 openstack-horizon: multiple XSS flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-django-horizon-0:2013.2.3-3.el6ost","python-django-horizon-0:2014.1.1-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3475.json"},{"CVE":"CVE-2014-8578","severity":"moderate","public_date":"2014-07-08T00:00:00Z","advisories":["RHSA-2014:1188","RHSA-2014:0939"],"bugzilla":"1116090","bugzilla_description":"CVE-2014-3473 CVE-2014-3474 CVE-2014-3475 CVE-2014-8578 openstack-horizon: multiple XSS flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-django-horizon-0:2013.2.3-3.el6ost","python-django-horizon-0:2014.1.1-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8578.json"},{"CVE":"CVE-2014-4650","severity":"moderate","public_date":"2014-06-23T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1113527","bugzilla_description":"CVE-2014-4650 python: CGIHTTPServer module does not properly handle URL-encoded path separators in URLs","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-138","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4650.json"},{"CVE":"CVE-2014-7185","severity":"low","public_date":"2014-06-23T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1146026","bugzilla_description":"CVE-2014-7185 python: buffer() integer overflow leading to out of bounds read","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-190->CWE-125->CWE-200","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7185.json"},{"CVE":"CVE-2014-8583","severity":"moderate","public_date":"2014-06-17T00:00:00Z","advisories":[],"bugzilla":"1111034","bugzilla_description":"CVE-2014-8583 mod_wsgi: failure to handle errors when attempting to drop group privileges","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-271","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8583.json"},{"CVE":"CVE-2014-9720","severity":"moderate","public_date":"2014-05-26T00:00:00Z","advisories":[],"bugzilla":"1222816","bugzilla_description":"CVE-2014-9720 python-tornado: XSRF cookie allows side-channel attack against TLS (BREACH)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9720.json"},{"CVE":"CVE-2014-0240","severity":"important","public_date":"2014-05-21T00:00:00Z","advisories":["RHSA-2014:0788","RHSA-2014:1091","RHSA-2014:0789"],"bugzilla":"1101863","bugzilla_description":"CVE-2014-0240 mod_wsgi: possible privilege escalation in setuid() failure scenarios","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-271","affected_packages":["mod_wsgi-0:3.4-12.el7_0","python27-mod_wsgi-0:3.4-12.el6","python27-mod_wsgi-0:3.4-13.el7","python33-mod_wsgi-0:3.4-13.el7","python33-mod_wsgi-0:3.4-14.el6","mod_wsgi-0:3.2-6.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0240.json"},{"CVE":"CVE-2014-0242","severity":"moderate","public_date":"2014-05-21T00:00:00Z","advisories":["RHSA-2014:0788"],"bugzilla":"1101873","bugzilla_description":"CVE-2014-0242 mod_wsgi: information leak","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["mod_wsgi-0:3.2-6.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0242.json"},{"CVE":"CVE-2014-4615","severity":"important","public_date":"2014-05-20T00:00:00Z","advisories":["RHSA-2014:1050"],"bugzilla":"1112945","bugzilla_description":"CVE-2014-4615 pycadf: token leak to message queue","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":["openstack-ceilometer-0:2013.2.3-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4615.json"},{"CVE":"CVE-2014-4616","severity":"moderate","public_date":"2014-05-19T00:00:00Z","advisories":["RHSA-2015:2101","RHEA-2014:1175","RHSA-2015:1064"],"bugzilla":"1112285","bugzilla_description":"CVE-2014-4616 python: missing boundary check in JSON module","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-129->CWE-119","affected_packages":["python-0:2.7.5-34.el7","python-simplejson-0:3.2.0-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4616.json"},{"CVE":"CVE-2014-3146","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1092613","bugzilla_description":"CVE-2014-3146 python-lxml: clean_html input sanitization flaw","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3146.json"},{"CVE":"CVE-2014-0157","severity":"low","public_date":"2014-04-08T00:00:00Z","advisories":["RHSA-2014:0581"],"bugzilla":"1082858","bugzilla_description":"CVE-2014-0157 openstack-horizon: XSS in Horizon orchestration dashboard when using a malicious template","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-django-horizon-0:2013.2.3-1.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0157.json"},{"CVE":"CVE-2014-2667","severity":"moderate","public_date":"2014-03-28T00:00:00Z","advisories":[],"bugzilla":"1082177","bugzilla_description":"CVE-2014-2667 python: os.makedirs(exist_ok=True) is not thread-safe in Python 3.x","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2667.json"},{"CVE":"CVE-2014-0105","severity":"important","public_date":"2014-03-27T00:00:00Z","advisories":["RHSA-2014:0442","RHSA-2014:0382","RHSA-2014:0409"],"bugzilla":"1082165","bugzilla_description":"CVE-2014-0105 python-keystoneclient: Potential context confusion in Keystone middleware","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["python-keystoneclient-1:0.2.3-8.el6ost","python-keystoneclient-1:0.7.1-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0105.json"},{"CVE":"CVE-2016-2533","severity":"moderate","public_date":"2014-03-24T00:00:00Z","advisories":[],"bugzilla":"1304504","bugzilla_description":"CVE-2016-2533 python-pillow: Buffer overflow in PCD decoding","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2533.json"},{"CVE":"CVE-2014-1858","severity":"low","public_date":"2014-02-05T00:00:00Z","advisories":[],"bugzilla":"1062009","bugzilla_description":"CVE-2014-1858 CVE-2014-1859 numpy: f2py insecure temporary file use","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1858.json"},{"CVE":"CVE-2014-1859","severity":"low","public_date":"2014-02-05T00:00:00Z","advisories":[],"bugzilla":"1062009","bugzilla_description":"CVE-2014-1858 CVE-2014-1859 numpy: f2py insecure temporary file use","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1859.json"},{"CVE":"CVE-2014-1932","severity":"low","public_date":"2014-01-29T00:00:00Z","advisories":[],"bugzilla":"1063658","bugzilla_description":"CVE-2014-1932 python-pillow, python-imaging: insecure temporary file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1932.json"},{"CVE":"CVE-2014-1933","severity":"low","public_date":"2014-01-29T00:00:00Z","advisories":[],"bugzilla":"1063660","bugzilla_description":"CVE-2014-1933 python-pillow, python-imaging: temporary file name exposure in process list","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-214","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1933.json"},{"CVE":"CVE-2014-3007","severity":"moderate","public_date":"2014-01-29T00:00:00Z","advisories":[],"bugzilla":"1094101","bugzilla_description":"CVE-2014-3007 python-pillow, python-imaging: command injection issue","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3007.json"},{"CVE":"CVE-2014-1912","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1062370","bugzilla_description":"CVE-2014-1912 python: buffer overflow in socket.recvfrom_into()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1912.json"},{"CVE":"CVE-2014-0012","severity":"moderate","public_date":"2014-01-11T00:00:00Z","advisories":[],"bugzilla":"1052102","bugzilla_description":"CVE-2014-0012 python-jinja2: FileSystemBytecodeCache insecure cache temporary file use, incorrect CVE-2014-1402 fix","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0012.json"},{"CVE":"CVE-2014-1402","severity":"moderate","public_date":"2014-01-09T00:00:00Z","advisories":["RHSA-2014:0748","RHSA-2014:0747"],"bugzilla":"1051421","bugzilla_description":"CVE-2014-1402 python-jinja2: FileSystemBytecodeCache insecure cache temporary file use","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":["python27-python-jinja2-0:2.6-10.el6","python33-python-jinja2-0:2.6-12.el7","python-jinja2-0:2.2.1-2.el6_5","python33-python-jinja2-0:2.6-11.el6","python27-python-jinja2-0:2.6-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1402.json"},{"CVE":"CVE-2013-7338","severity":"moderate","public_date":"2013-12-27T00:00:00Z","advisories":[],"bugzilla":"1078014","bugzilla_description":"CVE-2013-7338 python: malformed ZIP files could cause 100% CPU usage","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7338.json"},{"CVE":"CVE-2014-1829","severity":"low","public_date":"2013-12-25T00:00:00Z","advisories":[],"bugzilla":"1046626","bugzilla_description":"CVE-2014-1829 python-requests: redirect can expose netrc password","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-285->CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1829.json"},{"CVE":"CVE-2014-1830","severity":"low","public_date":"2013-12-25T00:00:00Z","advisories":[],"bugzilla":"1144907","bugzilla_description":"CVE-2014-1830 python-requests: Proxy-Authorization header leak","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1830.json"},{"CVE":"CVE-2013-7040","severity":"moderate","public_date":"2013-12-09T00:00:00Z","advisories":[],"bugzilla":"1039915","bugzilla_description":"CVE-2013-7040 python: hash secret can be recovered remotely","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7040.json"},{"CVE":"CVE-2013-6858","severity":"moderate","public_date":"2013-11-23T00:00:00Z","advisories":["RHSA-2014:0365"],"bugzilla":"1034153","bugzilla_description":"CVE-2013-6858 openstack: horizon multiple XSS vulnerabilities.","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-django-horizon-0:2013.1.5-1.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6858.json"},{"CVE":"CVE-2013-6406","severity":null,"public_date":"2013-11-03T00:00:00Z","advisories":[],"bugzilla":"1035907","bugzilla_description":"CVE-2013-6406 OpenStack Horizon: Nova strings persistent XSS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6406.json"},{"CVE":"CVE-2013-1445","severity":"low","public_date":"2013-10-17T00:00:00Z","advisories":[],"bugzilla":"1020814","bugzilla_description":"CVE-2013-1445 python-crypto: PRNG not correctly reseeded in some situations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1445.json"},{"CVE":"CVE-2014-8991","severity":"low","public_date":"2013-10-09T00:00:00Z","advisories":[],"bugzilla":"1166137","bugzilla_description":"CVE-2014-8991 python-pip: local DoS vulnerability","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8991.json"},{"CVE":"CVE-2013-4471","severity":"moderate","public_date":"2013-10-08T00:00:00Z","advisories":[],"bugzilla":"1023586","bugzilla_description":"CVE-2013-4471 OpenStack: python-django-horizonpassword reset vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4471.json"},{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-4238","severity":"moderate","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2013:1582","RHSA-2013:1527"],"bugzilla":"996381","bugzilla_description":"CVE-2013-4238 python: hostname check bypassing vulnerability in SSL module","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["python-0:2.6.6-51.el6","rhev-hypervisor6-0:6.5-20131115.0.3.2.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4238.json"},{"CVE":"CVE-2013-5123","severity":"moderate","public_date":"2013-07-31T00:00:00Z","advisories":[],"bugzilla":"1066692","bugzilla_description":"CVE-2013-5123 python-pip: insecure software download with mirroring support","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5123.json"},{"CVE":"CVE-2013-4111","severity":"moderate","public_date":"2013-07-29T00:00:00Z","advisories":["RHSA-2013:1200"],"bugzilla":"989738","bugzilla_description":"CVE-2013-4111 OpenStack: python-glanceclient failing SSL certificate check","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":["python-glanceclient-1:0.9.0-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4111.json"},{"CVE":"CVE-2013-6396","severity":"moderate","public_date":"2013-07-10T00:00:00Z","advisories":[],"bugzilla":"1031652","bugzilla_description":"CVE-2013-6396 python-swiftclient: SSL certificate verification security issue","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6396.json"},{"CVE":"CVE-2013-2255","severity":"moderate","public_date":"2013-07-10T00:00:00Z","advisories":[],"bugzilla":"924514","bugzilla_description":"CVE-2013-2255 openstack-*: Inconsistent and non-validating HTTPS client","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2255.json"},{"CVE":"CVE-2013-2217","severity":"low","public_date":"2013-06-27T00:00:00Z","advisories":[],"bugzilla":"978696","bugzilla_description":"CVE-2013-2217 python-suds: Insecure temporary directory use when initializing file-based URL cache","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2217.json"},{"CVE":"CVE-2013-2166","severity":"important","public_date":"2013-06-19T00:00:00Z","advisories":["RHSA-2013:0992"],"bugzilla":"974271","bugzilla_description":"CVE-2013-2166 CVE-2013-2167 python-keystoneclient: middleware memcache encryption and signing bypass","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-345->CWE-349","affected_packages":["python-keystoneclient-1:0.2.3-5.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2166.json"},{"CVE":"CVE-2013-2167","severity":"important","public_date":"2013-06-19T00:00:00Z","advisories":["RHSA-2013:0992"],"bugzilla":"974271","bugzilla_description":"CVE-2013-2166 CVE-2013-2167 python-keystoneclient: middleware memcache encryption and signing bypass","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-345->CWE-349","affected_packages":["python-keystoneclient-1:0.2.3-5.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2167.json"},{"CVE":"CVE-2013-1909","severity":"moderate","public_date":"2013-06-13T00:00:00Z","advisories":["RHSA-2013:1024"],"bugzilla":"928530","bugzilla_description":"CVE-2013-1909 python-qpid: client does not validate qpid server TLS/SSL certificate","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["python-qpid-0:0.18-5.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1909.json"},{"CVE":"CVE-2013-1633","severity":"moderate","public_date":"2013-06-02T00:00:00Z","advisories":[],"bugzilla":"994182","bugzilla_description":"CVE-2013-1633 python-setuptools: easy_install insecure installation mechanism","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1633.json"},{"CVE":"CVE-2013-2104","severity":"moderate","public_date":"2013-05-28T00:00:00Z","advisories":["RHSA-2013:0944"],"bugzilla":"965852","bugzilla_description":"CVE-2013-2104 OpenStack Keystone: Missing expiration check in Keystone PKI token validation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-613","affected_packages":["python-keystoneclient-1:0.2.3-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2104.json"},{"CVE":"CVE-2013-2099","severity":"low","public_date":"2013-05-15T00:00:00Z","advisories":["RHSA-2016:1166","RHBA-2016:1500","RHSA-2014:1690","RHSA-2015:0042","RHSA-2014:1263"],"bugzilla":"963260","bugzilla_description":"CVE-2013-2099 python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-backports-ssl_match_hostname-0:3.4.0.2-1.el6","python-pymongo-0:3.2-1.el7sat","python-pymongo-0:3.2-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json"},{"CVE":"CVE-2013-2037","severity":"moderate","public_date":"2013-05-01T00:00:00Z","advisories":[],"bugzilla":"958638","bugzilla_description":"CVE-2013-2037 python-httplib2: ssl cert incorrect error handling","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2037.json"},{"CVE":"CVE-2013-4347","severity":"moderate","public_date":"2013-04-24T00:00:00Z","advisories":["RHSA-2015:1592","RHSA-2015:1591"],"bugzilla":"1007758","bugzilla_description":"CVE-2013-4347 python-oauth2: Uses poor PRNG in nonce","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-338","affected_packages":["python-oauth2-0:1.5.211-8.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4347.json"},{"CVE":"CVE-2013-1665","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0670","RHSA-2013:0658","RHSA-2013:0657","RHSA-2013:0596"],"bugzilla":"912982","bugzilla_description":"CVE-2013-1665 Python xml bindings: External entity expansion in Python XML libraries inflicts potential security flaws and DoS vulnerabilities","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["openstack-cinder-0:2012.2.3-4.el6ost","openstack-keystone-0:2012.2.3-3.el6ost","Django14-0:1.4.4-1.el6ost","openstack-nova-0:2012.2.3-4.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1665.json"},{"CVE":"CVE-2013-1664","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0670","RHSA-2013:0658","RHSA-2013:0657","RHSA-2013:0596"],"bugzilla":"913808","bugzilla_description":"CVE-2013-1664 Python xml bindings: Internal entity expansion in Python XML libraries inflicts DoS vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openstack-cinder-0:2012.2.3-4.el6ost","openstack-keystone-0:2012.2.3-3.el6ost","Django14-0:1.4.4-1.el6ost","openstack-nova-0:2012.2.3-4.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1664.json"},{"CVE":"CVE-2013-4346","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2015:1592","RHSA-2015:1591"],"bugzilla":"1007746","bugzilla_description":"CVE-2013-4346 python-oauth2: _check_signature() ignores the nonce value when validating signed urls","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-347","affected_packages":["python-oauth2-0:1.5.211-8.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4346.json"},{"CVE":"CVE-2012-6662","severity":"moderate","public_date":"2012-11-27T00:00:00Z","advisories":["RHSA-2015:0442","RHSA-2015:1462"],"bugzilla":"1166064","bugzilla_description":"CVE-2012-6662 jquery-ui: XSS vulnerability in default content in Tooltip widget","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:3.0.0-47.el6","ipa-0:4.1.0-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6662.json"},{"CVE":"CVE-2012-5474","severity":"low","public_date":"2012-11-13T00:00:00Z","advisories":[],"bugzilla":"873120","bugzilla_description":"CVE-2012-5474 OpenStack: Dashboard /etc/openstack-dashboard/local_settings secret key exposure","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5474.json"},{"CVE":"CVE-2013-1753","severity":"moderate","public_date":"2012-09-25T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1064"],"bugzilla":"1046170","bugzilla_description":"CVE-2013-1753 python: XMLRPC library unrestricted decompression of HTTP responses using gzip enconding","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["python-0:2.7.5-34.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1753.json"},{"CVE":"CVE-2013-1752","severity":"moderate","public_date":"2012-09-25T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1046174","bugzilla_description":"CVE-2013-1752 python: multiple unbound readline() DoS flaws in python stdlib","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1752.json"},{"CVE":"CVE-2012-3540","severity":"low","public_date":"2012-08-30T00:00:00Z","advisories":["RHSA-2012:1380"],"bugzilla":"852246","bugzilla_description":"CVE-2012-3540 OpenStack-Horizon: Open redirect through 'next' parameter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["python-django-horizon-0:2012.1.1-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3540.json"},{"CVE":"CVE-2012-3458","severity":"moderate","public_date":"2012-08-13T00:00:00Z","advisories":[],"bugzilla":"809267","bugzilla_description":"CVE-2012-3458 python-beaker: weak use of crypto can leak information to remote attackers","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3458.json"},{"CVE":"CVE-2012-4571","severity":"low","public_date":"2012-05-26T00:00:00Z","advisories":[],"bugzilla":"872260","bugzilla_description":"CVE-2012-4571 python-keyring: weak encryption in keyring","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4571.json"},{"CVE":"CVE-2012-2146","severity":"moderate","public_date":"2012-04-18T00:00:00Z","advisories":[],"bugzilla":"810013","bugzilla_description":"CVE-2012-2146 python-elixir: weak use of crypto can leak information","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2146.json"},{"CVE":"CVE-2012-2417","severity":"moderate","public_date":"2012-04-18T00:00:00Z","advisories":[],"bugzilla":"825162","bugzilla_description":"CVE-2012-2417 python-crypto: Insecure ElGamal key generation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2417.json"},{"CVE":"CVE-2012-2094","severity":"low","public_date":"2012-04-17T00:00:00Z","advisories":[],"bugzilla":"813391","bugzilla_description":"CVE-2012-2094 python-django-horizon: XSS vulnerability in Horizon log viewer","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2094.json"},{"CVE":"CVE-2012-0805","severity":"moderate","public_date":"2012-03-07T00:00:00Z","advisories":["RHSA-2012:0369"],"bugzilla":"783305","bugzilla_description":"CVE-2012-0805 python-sqlalchemy: SQL injection flaw due to not checking LIMIT input for correct type","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["python-sqlalchemy-0:0.5.5-3.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0805.json"},{"CVE":"CVE-2012-0845","severity":"moderate","public_date":"2012-02-12T00:00:00Z","advisories":["RHSA-2012:0744"],"bugzilla":"789790","bugzilla_description":"CVE-2012-0845 python: SimpleXMLRPCServer CPU usage DoS via malformed XML-RPC request","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["python-0:2.6.6-29.el6_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0845.json"},{"CVE":"CVE-2012-0878","severity":"moderate","public_date":"2012-02-06T00:00:00Z","advisories":["RHSA-2012:1206"],"bugzilla":"796790","bugzilla_description":"CVE-2012-0878 python-paste-script: Supplementary groups not dropped when started an application with \"paster serve\" as root","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["python-paste-script-0:1.7.3-5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0878.json"},{"CVE":"CVE-2012-1150","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":["RHSA-2012:0745","RHSA-2012:0744"],"bugzilla":"750555","bugzilla_description":"CVE-2012-1150 python: hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["python-0:2.6.6-29.el6_2.2","python-0:2.4.3-46.el5_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1150.json"},{"CVE":"CVE-2011-4944","severity":"low","public_date":"2011-11-30T00:00:00Z","advisories":["RHSA-2012:0745","RHSA-2012:0744"],"bugzilla":"758905","bugzilla_description":"CVE-2011-4944 python: distutils creates ~/.pypirc insecurely","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["python-0:2.6.6-29.el6_2.2","python-0:2.4.3-46.el5_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4944.json"},{"CVE":"CVE-2011-1521","severity":"moderate","public_date":"2011-03-24T00:00:00Z","advisories":["RHSA-2011:0554","RHSA-2011:0491","RHSA-2011:0492"],"bugzilla":"690560","bugzilla_description":"CVE-2011-1521 python (urllib, urllib2): Improper management of ftp:// and file:// URL schemes (Issue #11662)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["python-0:2.6.6-20.el6","python-0:2.3.4-14.10.el4","python-0:2.4.3-44.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1521.json"},{"CVE":"CVE-2011-4940","severity":"low","public_date":"2011-03-08T00:00:00Z","advisories":["RHSA-2012:0745","RHSA-2012:0744"],"bugzilla":"803500","bugzilla_description":"CVE-2011-4940 python: potential XSS in SimpleHTTPServer's list_directory()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-0:2.6.6-29.el6_2.2","python-0:2.4.3-46.el5_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4940.json"},{"CVE":"CVE-2012-2639","severity":"moderate","public_date":"2011-03-08T00:00:00Z","advisories":[],"bugzilla":"835496","bugzilla_description":"CVE-2012-2639 python (SimpleHTTPServer): XSS attacks against Internet Explorer 7 via UTF-7 encoding","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2639.json"},{"CVE":"CVE-2011-5244","severity":"moderate","public_date":"2011-03-04T00:00:00Z","advisories":[],"bugzilla":"878483","bugzilla_description":"CVE-2011-5244 t1lib: off-by-one errors in token and linetoken","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5244.json"},{"CVE":"CVE-2011-0705","severity":null,"public_date":"2011-02-11T00:00:00Z","advisories":[],"bugzilla":"696082","bugzilla_description":"CVE-2011-0705 Python: SimpleHTTPServer class directory traversal flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0705.json"},{"CVE":"CVE-2010-3492","severity":"low","public_date":"2010-09-09T00:00:00Z","advisories":[],"bugzilla":"638330","bugzilla_description":"CVE-2010-3492 python accept() implementation in async core is broken","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3492.json"},{"CVE":"CVE-2010-5312","severity":"moderate","public_date":"2010-09-03T00:00:00Z","advisories":["RHSA-2015:0442","RHSA-2015:1462"],"bugzilla":"1166041","bugzilla_description":"CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:3.0.0-47.el6","ipa-0:4.1.0-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5312.json"},{"CVE":"CVE-2010-3493","severity":"low","public_date":"2010-06-30T00:00:00Z","advisories":["RHSA-2011:0554","RHSA-2011:0491","RHSA-2011:0492"],"bugzilla":"632200","bugzilla_description":"CVE-2010-3493 Python: SMTP proxy RFC 2821 module DoS (uncaught exception) (Issue #9129)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["python-0:2.6.6-20.el6","python-0:2.3.4-14.10.el4","python-0:2.4.3-44.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3493.json"},{"CVE":"CVE-2010-2477","severity":"moderate","public_date":"2010-06-24T00:00:00Z","advisories":[],"bugzilla":"651633","bugzilla_description":"CVE-2010-2477 python-paste: multiple XSS vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2477.json"},{"CVE":"CVE-2009-4134","severity":"low","public_date":"2010-05-10T00:00:00Z","advisories":["RHSA-2011:0027","RHSA-2011:0260"],"bugzilla":"541698","bugzilla_description":"CVE-2009-4134 CVE-2010-1449 CVE-2010-1450 python: rgbimg: multiple security issues","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["python-0:2.3.4-14.9.el4","python-0:2.4.3-43.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4134.json"},{"CVE":"CVE-2010-1449","severity":"low","public_date":"2010-05-10T00:00:00Z","advisories":["RHSA-2011:0027","RHSA-2011:0260"],"bugzilla":"541698","bugzilla_description":"CVE-2009-4134 CVE-2010-1449 CVE-2010-1450 python: rgbimg: multiple security issues","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["python-0:2.3.4-14.9.el4","python-0:2.4.3-43.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1449.json"},{"CVE":"CVE-2010-1450","severity":"low","public_date":"2010-05-10T00:00:00Z","advisories":["RHSA-2011:0027","RHSA-2011:0260"],"bugzilla":"541698","bugzilla_description":"CVE-2009-4134 CVE-2010-1449 CVE-2010-1450 python: rgbimg: multiple security issues","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["python-0:2.3.4-14.9.el4","python-0:2.4.3-43.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1450.json"},{"CVE":"CVE-2010-1634","severity":"low","public_date":"2010-05-10T00:00:00Z","advisories":["RHSA-2011:0027","RHSA-2011:0491"],"bugzilla":"590690","bugzilla_description":"CVE-2010-1634 python: audioop: incorrect integer overflow checks","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["python-0:2.3.4-14.10.el4","python-0:2.4.3-43.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1634.json"},{"CVE":"CVE-2010-2089","severity":"low","public_date":"2010-01-11T00:00:00Z","advisories":["RHSA-2011:0027","RHSA-2011:0491"],"bugzilla":"598197","bugzilla_description":"CVE-2010-2089 Python: Memory corruption in audioop module","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["python-0:2.3.4-14.10.el4","python-0:2.4.3-43.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2089.json"},{"CVE":"CVE-2009-3720","severity":"moderate","public_date":"2009-01-17T00:00:00Z","advisories":["RHSA-2017:3239","RHSA-2011:0896","RHSA-2009:1625","RHSA-2010:0002","RHSA-2011:0491","RHSA-2011:0492","RHSA-2009:1572"],"bugzilla":"531697","bugzilla_description":"CVE-2009-3720 expat: buffer over-read and crash on XML with malformed UTF-8 sequences","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["expat-0:1.95.7-4.el4_8.2","expat-0:1.95.5-6.2","python-0:2.3.4-14.10.el4","expat-0:1.95.8-8.3.el5_4.2","python-0:2.4.3-44.el5","4Suite-0:0.11.1-15","PyXML-0:0.8.3-6.el4_8.2","4Suite-0:1.0-3.el4_8.1","PyXML-0:0.8.4-4.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3720.json"},{"CVE":"CVE-2008-4864","severity":"low","public_date":"2008-10-19T00:00:00Z","advisories":["RHSA-2009:1177","RHSA-2009:1176","RHSA-2009:1178"],"bugzilla":"469656","bugzilla_description":"CVE-2008-4864 python: imageop module multiple integer overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["python-0:2.4.3-24.el5_3.6","python-0:2.3.4-14.7.el4_8.2","python-0:2.2.3-6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4864.json"},{"CVE":"CVE-2008-5031","severity":"low","public_date":"2008-10-19T00:00:00Z","advisories":["RHSA-2009:1177","RHSA-2009:1176","RHSA-2009:1178"],"bugzilla":"470915","bugzilla_description":"CVE-2008-5031 python: stringobject, unicodeobject integer overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["python-0:2.4.3-24.el5_3.6","python-0:2.3.4-14.7.el4_8.2","python-0:2.2.3-6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5031.json"},{"CVE":"CVE-2008-5983","severity":"low","public_date":"2008-08-06T00:00:00Z","advisories":["RHSA-2011:0027"],"bugzilla":"482814","bugzilla_description":"CVE-2008-5983 python: untrusted python modules search path","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["python-0:2.4.3-43.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5983.json"},{"CVE":"CVE-2008-2315","severity":"low","public_date":"2008-07-31T00:00:00Z","advisories":["RHSA-2009:1177","RHSA-2009:1176","RHSA-2009:1178"],"bugzilla":"455008","bugzilla_description":"CVE-2008-2315 python: Multiple integer overflows in python core","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["python-0:2.4.3-24.el5_3.6","python-0:2.3.4-14.7.el4_8.2","python-0:2.2.3-6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2315.json"},{"CVE":"CVE-2008-3144","severity":"low","public_date":"2008-06-02T00:00:00Z","advisories":["RHSA-2009:1177","RHSA-2009:1176","RHSA-2009:1178"],"bugzilla":"455018","bugzilla_description":"CVE-2008-3144 python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["python-0:2.4.3-24.el5_3.6","python-0:2.3.4-14.7.el4_8.2","python-0:2.2.3-6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3144.json"},{"CVE":"CVE-2008-3142","severity":"low","public_date":"2008-04-11T00:00:00Z","advisories":["RHSA-2009:1177","RHSA-2009:1176","RHSA-2009:1178"],"bugzilla":"454990","bugzilla_description":"CVE-2008-3142 python: Multiple buffer overflows in unicode processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python-0:2.4.3-24.el5_3.6","python-0:2.3.4-14.7.el4_8.2","python-0:2.2.3-6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3142.json"},{"CVE":"CVE-2008-1721","severity":"low","public_date":"2008-04-09T00:00:00Z","advisories":["RHSA-2009:1177","RHSA-2009:1176"],"bugzilla":"442005","bugzilla_description":"CVE-2008-1721 python: integer signedness error in the zlib extension module","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python-0:2.4.3-24.el5_3.6","python-0:2.3.4-14.7.el4_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1721.json"},{"CVE":"CVE-2008-1887","severity":"moderate","public_date":"2008-04-08T00:00:00Z","advisories":["RHSA-2009:1177","RHSA-2009:1176","RHSA-2009:1178"],"bugzilla":"443810","bugzilla_description":"CVE-2008-1887 python: PyString_FromStringAndSize does not check for negative size values","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python-0:2.4.3-24.el5_3.6","python-0:2.3.4-14.7.el4_8.2","python-0:2.2.3-6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1887.json"},{"CVE":"CVE-2008-1679","severity":"low","public_date":"2008-03-29T00:00:00Z","advisories":["RHSA-2009:1177","RHSA-2009:1178"],"bugzilla":"441306","bugzilla_description":"CVE-2008-1679 python: imageop module integer overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["python-0:2.3.4-14.7.el4_8.2","python-0:2.2.3-6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1679.json"},{"CVE":"CVE-2011-1015","severity":"low","public_date":"2008-03-07T00:00:00Z","advisories":["RHSA-2011:0554","RHSA-2011:0491","RHSA-2011:0492"],"bugzilla":"680094","bugzilla_description":"CVE-2011-1015 python (CGIHTTPServer): CGI script source code disclosure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["python-0:2.6.6-20.el6","python-0:2.3.4-14.10.el4","python-0:2.4.3-44.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1015.json"},{"CVE":"CVE-2008-3143","severity":"low","public_date":"2008-02-14T00:00:00Z","advisories":["RHSA-2009:1177","RHSA-2009:1176","RHSA-2009:1178"],"bugzilla":"455013","bugzilla_description":"CVE-2008-3143 python: Multiple integer overflows discovered by Google","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["python-0:2.4.3-24.el5_3.6","python-0:2.3.4-14.7.el4_8.2","python-0:2.2.3-6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3143.json"},{"CVE":"CVE-2006-7228","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1077","RHSA-2007:1065","RHSA-2007:1076","RHSA-2007:1059","RHSA-2007:1068","RHSA-2007:1063","RHSA-2008:0546"],"bugzilla":"383371","bugzilla_description":"CVE-2006-7228 pcre integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["pcre-0:3.4-2.4","pcre-0:3.9-10.4","python-0:2.3.4-14.4.el4_6.1","pcre-0:6.6-2.el5_1.7","python-0:1.5.2-43.72.2","pcre-0:4.5-4.el4_6.6","php-0:4.1.2-2.20","python-0:2.2.3-6.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7228.json"},{"CVE":"CVE-2007-4965","severity":"moderate","public_date":"2007-09-16T00:00:00Z","advisories":["RHSA-2007:1076","RHSA-2008:0264","RHSA-2008:0629","RHSA-2009:1176","RHSA-2008:0525"],"bugzilla":"295971","bugzilla_description":"CVE-2007-4965 python imageop module heap corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python-0:2.4.3-24.el5_3.6","python-0:2.3.4-14.4.el4_6.1","python-0:2.2.3-6.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4965.json"},{"CVE":"CVE-2007-2052","severity":"low","public_date":"2007-04-02T00:00:00Z","advisories":["RHSA-2007:1077","RHSA-2007:1076","RHSA-2008:0264","RHSA-2008:0629","RHSA-2009:1176","RHSA-2008:0525"],"bugzilla":"235093","bugzilla_description":"CVE-2007-2052 python off-by-one locale.strxfrm() (possible memory disclosure)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["python-0:2.4.3-24.el5_3.6","python-0:2.3.4-14.4.el4_6.1","python-0:1.5.2-43.72.2","python-0:2.2.3-6.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2052.json"},{"CVE":"CVE-2006-4980","severity":"important","public_date":"2006-08-16T00:00:00Z","advisories":["RHSA-2006:0713","RHSA-2008:0264","RHSA-2008:0629","RHSA-2008:0525"],"bugzilla":"430641","bugzilla_description":"CVE-2006-4980 python repr unicode buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python-0:2.2.3-6.5","python-0:2.3.4-14.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4980.json"},{"CVE":"CVE-2005-2491","severity":"moderate","public_date":"2005-08-01T00:00:00Z","advisories":["RHSA-2005:358","RHSA-2005:761","RHSA-2006:0197"],"bugzilla":"430638","bugzilla_description":"CVE-2005-2491 pcre heap overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python-0:2.2.3-6.2","exim-0:4.43-1.RHEL4.5","python-0:2.3.4-14.2","pcre-0:3.9-10.2","pcre-0:4.5-3.2.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2491.json"},{"CVE":"CVE-2005-0088","severity":"moderate","public_date":"2005-02-10T00:00:00Z","advisories":["RHSA-2005:104","RHSA-2005:100"],"bugzilla":"1617450","bugzilla_description":"CVE-2005-0088 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mod_python-0:3.0.3-5.ent","mod_python-0:3.1.3-5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0088.json"},{"CVE":"CVE-2005-0089","severity":"important","public_date":"2005-02-03T00:00:00Z","advisories":["RHSA-2005:108","RHSA-2005:109"],"bugzilla":"1617451","bugzilla_description":"CVE-2005-0089 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python-0:2.2.3-6.1","python-0:2.3.4-14.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0089.json"},{"CVE":"CVE-2004-2680","severity":"low","public_date":"2004-04-16T00:00:00Z","advisories":[],"bugzilla":"231065","bugzilla_description":"CVE-2004-2680 mod_python arbitrary data disclosure flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-2680.json"},{"CVE":"CVE-2004-0096","severity":"moderate","public_date":"2004-01-22T00:00:00Z","advisories":["RHSA-2004:063","RHSA-2004:058"],"bugzilla":"430510","bugzilla_description":"CVE-2004-0096 mod_python remote DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mod_python-0:3.0.3-3.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0096.json"},{"CVE":"CVE-2003-0973","severity":"low","public_date":"2003-11-28T00:00:00Z","advisories":["RHSA-2004:063","RHSA-2004:058"],"bugzilla":"1617112","bugzilla_description":"CVE-2003-0973 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mod_python-0:3.0.3-3.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0973.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pytz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pytz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pytz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyusb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyusb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyusb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pywbem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pywbem_security_api_results.json
new file mode 100644
index 0000000..c9a717a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pywbem_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-6418","severity":"moderate","public_date":"2013-12-17T00:00:00Z","advisories":[],"bugzilla":"1039801","bugzilla_description":"CVE-2013-6418 pywbem: TOCTOU vulnerability in certificate validation","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6418.json"},{"CVE":"CVE-2013-6444","severity":"moderate","public_date":"2013-12-17T00:00:00Z","advisories":[],"bugzilla":"1044246","bugzilla_description":"CVE-2013-6444 pywbem: failure to check certificate hostname","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6444.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyxattr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyxattr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/pyxattr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qca-ossl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qca-ossl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qca-ossl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qca2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qca2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qca2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qclib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qclib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qclib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qdox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qdox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qdox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-guest-agent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-guest-agent_security_api_results.json
new file mode 100644
index 0000000..944ea29
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-guest-agent_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-12247","severity":null,"public_date":"2019-01-07T00:00:00Z","advisories":[],"bugzilla":"1712834","bugzilla_description":"CVE-2019-12247 QEMU: qemu-guest-agent: integer overflow while running guest-exec command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12247.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2018-12617","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1594054","bugzilla_description":"CVE-2018-12617 Qemu: qemu-guest-agent: Integer overflow causes segmentation fault in qmp_guest_file_read()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2018-5683","severity":"low","public_date":"2017-12-25T00:00:00Z","advisories":["RHSA-2018:2162","RHSA-2018:1104","RHSA-2018:1113","RHSA-2018:0816"],"bugzilla":"1530356","bugzilla_description":"CVE-2018-5683 Qemu: Out-of-bounds read in vga_draw_text routine","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7","qemu-kvm-10:1.5.3-156.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5683.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-18030","severity":"low","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1530360","bugzilla_description":"CVE-2017-18030 Qemu: Out-of-bounds access in cirrus_invalidate_region routine","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18030.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2015-5745","severity":"low","public_date":"2015-07-23T00:00:00Z","advisories":[],"bugzilla":"1251157","bugzilla_description":"CVE-2015-5745 kernel: qemu buffer overflow in virtio-serial","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5745.json"},{"CVE":"CVE-2015-4037","severity":"moderate","public_date":"2015-05-13T00:00:00Z","advisories":[],"bugzilla":"1222892","bugzilla_description":"CVE-2015-4037 qemu: insecure temporary file use in /net/slirp.c","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4037.json"},{"CVE":"CVE-2014-9766","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1311882","bugzilla_description":"CVE-2014-9766 pixman: integer overflow in create_bits function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9766.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-img-ma_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-img-ma_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-img-ma_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-img_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-img_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-img_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-common-ma_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-common-ma_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-common-ma_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-ma_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-ma_security_api_results.json
new file mode 100644
index 0000000..7733bce
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-ma_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-27661","severity":"low","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1890653","bugzilla_description":"CVE-2020-27661 QEMU: divide by zero in dwc2_handle_packet() in hw/usb/hcd-dwc2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27661.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-25624","severity":"moderate","public_date":"2020-09-11T00:00:00Z","advisories":[],"bugzilla":"1879801","bugzilla_description":"CVE-2020-25624 QEMU: usb: hcd-ohci: out-of-bound access issue while processing transfer descriptors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25624.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-25625","severity":"low","public_date":"2020-09-11T00:00:00Z","advisories":[],"bugzilla":"1879808","bugzilla_description":"CVE-2020-25625 QEMU: usb: hcd-ohci: infinite loop issue while processing transfer descriptors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25625.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2020-14364","severity":"important","public_date":"2020-08-24T12:00:00Z","advisories":["RHSA-2020:4049","RHSA-2020:4115","RHSA-2020:4048","RHSA-2020:4059","RHSA-2020:4047","RHSA-2020:4058","RHSA-2020:4079","RHSA-2020:4167","RHSA-2020:4056","RHSA-2020:4078","RHSA-2020:4111","RHSA-2020:4055","RHSA-2020:4176","RHSA-2020:4054","RHSA-2020:4053","RHSA-2020:4052","RHSA-2020:4162","RHSA-2020:4051","RHSA-2020:4172","RHSA-2020:4050","RHSA-2020:4291","RHSA-2020:4290"],"bugzilla":"1869201","bugzilla_description":"CVE-2020-14364 QEMU: usb: out-of-bounds r/w access issue while processing usb packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["qemu-kvm-10:1.5.3-105.el7_2.20","qemu-kvm-rhev-10:2.12.0-33.el7_7.12","qemu-kvm-10:1.5.3-175.el7_9.1","qemu-kvm-10:1.5.3-160.el7_6.8","qemu-kvm-10:1.5.3-141.el7_4.11","qemu-kvm-ma-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-18.el7_6.12","qemu-kvm-2:0.12.1.2-2.448.el6_6.9","virt:rhel-8000020200910175113.f8e95b4e","qemu-kvm-ma-10:2.12.0-18.el7_6.7","qemu-kvm-10:1.5.3-167.el7_7.7","qemu-kvm-2:0.12.1.2-2.506.el6_10.8","qemu-kvm-2:0.12.1.2-2.415.el6_5.21","qemu-kvm-ma-10:2.12.0-48.el7_9.1","virt:rhel-8020020200909224913.4cda2c84","qemu-kvm-rhev-10:2.12.0-48.el7_9.1","qemu-kvm-10:1.5.3-126.el7_3.18","redhat-virtualization-host-0:4.4.2-20200930.0.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14364.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-24352","severity":"low","public_date":"2020-08-14T00:00:00Z","advisories":[],"bugzilla":"1847584","bugzilla_description":"CVE-2020-24352 QEMU: out-of-bounds read/write in ati-vga device emulation in ati_2d_blt()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24352.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2020-17380","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1862167","bugzilla_description":"CVE-2020-17380 QEMU: heap buffer overflow in sdhci_sdma_transfer_multi_blocks() in hw/sd/sdhci.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17380.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2020-16092","severity":"low","public_date":"2020-07-27T00:00:00Z","advisories":[],"bugzilla":"1860283","bugzilla_description":"CVE-2020-16092 QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16092.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-15859","severity":"moderate","public_date":"2020-07-16T00:00:00Z","advisories":[],"bugzilla":"1859168","bugzilla_description":"CVE-2020-15859 QEMU: net: e1000e: use-after-free while sending packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15859.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-15863","severity":"low","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1853725","bugzilla_description":"CVE-2020-15863 QEMU: stack-based overflow in xgmac_enet_send() in hw/net/xgmac.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15863.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-25084","severity":"low","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1879652","bugzilla_description":"CVE-2020-25084 QEMU: usb: use-after-free issue while setting up packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25084.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-25085","severity":"moderate","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1879671","bugzilla_description":"CVE-2020-25085 QEMU: sdhci: out-of-bounds access issue while doing multi block SDMA","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25085.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-25741","severity":"low","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1881401","bugzilla_description":"CVE-2020-25741 QEMU: fdc: null pointer dereference during r/w data transfer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25741.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-25743","severity":"low","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1881409","bugzilla_description":"CVE-2020-25743 QEMU: ide: null pointer dereference while cancelling i/o operation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25743.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-25742","severity":"low","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1883178","bugzilla_description":"CVE-2020-25742 QEMU: scsi: lsi: null pointer dereference during memory move","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25742.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-15469","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1853154","bugzilla_description":"CVE-2020-15469 QEMU: MMIO ops null pointer dereference may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15469.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.3"},{"CVE":"CVE-2020-10761","severity":"moderate","public_date":"2020-06-08T00:00:00Z","advisories":["RHBA-2020:3172"],"bugzilla":"1843707","bugzilla_description":"CVE-2020-10761 QEMU: nbd: reachable assertion failure in nbd_negotiate_send_rep_verr via remote client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10761.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-13791","severity":"low","public_date":"2020-06-03T00:00:00Z","advisories":[],"bugzilla":"1843764","bugzilla_description":"CVE-2020-13791 QEMU: ati-vga: OOB access while reading PCI configuration may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13791.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2020-13800","severity":"low","public_date":"2020-06-03T00:00:00Z","advisories":[],"bugzilla":"1843771","bugzilla_description":"CVE-2020-13800 QEMU: ati-vga: infinite recursion in ati_mm_read/write calls may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13800.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2020-13754","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":[],"bugzilla":"1842363","bugzilla_description":"CVE-2020-13754 QEMU: msix: OOB access during mmio operations may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13754.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-10756","severity":"moderate","public_date":"2020-05-27T00:00:00Z","advisories":["RHSA-2020:3586","RHSA-2020:4059"],"bugzilla":"1835986","bugzilla_description":"CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["virt:rhel-8020020200909224913.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10756.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-13253","severity":"low","public_date":"2020-05-20T00:00:00Z","advisories":[],"bugzilla":"1838546","bugzilla_description":"CVE-2020-13253 QEMU: sd: OOB access could crash the guest resulting in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13253.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2020-13361","severity":"low","public_date":"2020-05-15T00:00:00Z","advisories":[],"bugzilla":"1840980","bugzilla_description":"CVE-2020-13361 QEMU: es1370: OOB access due to incorrect frame count leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13361.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2020-13659","severity":"low","public_date":"2020-05-14T00:00:00Z","advisories":[],"bugzilla":"1842496","bugzilla_description":"CVE-2020-13659 QEMU: exec: address_space_map returns NULL without setting length to zero may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13659.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2020-13765","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":[],"bugzilla":"1842912","bugzilla_description":"CVE-2020-13765 QEMU: loader: OOB access while loading registered ROM may lead to code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13765.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-13362","severity":"low","public_date":"2020-05-07T00:00:00Z","advisories":[],"bugzilla":"1840999","bugzilla_description":"CVE-2020-13362 QEMU: megasas: OOB read access due to invalid index leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13362.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-11869","severity":"low","public_date":"2020-04-07T00:00:00Z","advisories":[],"bugzilla":"1809955","bugzilla_description":"CVE-2020-11869 qemu: integer overflow in ati_2d_blt() in hw/display/ati-2d.c could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->(CWE-125|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11869.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2020-10702","severity":"low","public_date":"2020-04-02T00:00:00Z","advisories":["RHBA-2020:3172"],"bugzilla":"1809948","bugzilla_description":"CVE-2020-10702 qemu: weak signature generation in Pointer Authentication support for ARM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10702.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-1983","severity":"moderate","public_date":"2020-04-02T00:00:00Z","advisories":["RHBA-2020:3172","RHSA-2020:4079","RHSA-2020:3053","RHSA-2020:4290"],"bugzilla":"1829825","bugzilla_description":"CVE-2020-1983 QEMU: slirp: use-after-free in ip_reass() function in ip_input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["qemu-kvm-10:1.5.3-175.el7_9.1","container-tools:rhel8-8020120200601155013.ffd2803a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1983.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-8608","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:2774","RHSA-2020:2730","RHSA-2020:2773","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:2342","RHSA-2020:1352","RHBA-2020:0527","RHSA-2020:1351","RHSA-2020:1208","RHSA-2020:0889","RHSA-2020:1209","RHSA-2020:2844","RHSA-2020:1379","RHSA-2020:1403","RHSA-2020:3040","RHSA-2020:1292"],"bugzilla":"1798453","bugzilla_description":"CVE-2020-8608 QEMU: Slirp: potential OOB access due to unsafe snprintf() usages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-160.el7_6.7","virt:rhel-8020020200601195459.4cda2c84","slirp4netns-0:0.3.0-8.el7_7","qemu-kvm-ma-10:2.12.0-33.el7_7.3","slirp4netns-0:0.4.2-4.git21fdece.el8","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-10:1.5.3-167.el7_7.6","qemu-kvm-10:1.5.3-173.el7_8.1","virt:rhel-8000020200526192422.f8e95b4e","qemu-kvm-2:0.12.1.2-2.506.el6_10.7","qemu-kvm-ma-10:2.12.0-44.el7_8.1","container-tools:rhel8-8010120200326094405.f8993c42"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-1711","severity":"important","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:0773","RHSA-2020:1300","RHSA-2020:1352","RHSA-2020:2472","RHSA-2020:1296","RHSA-2020:1505","RHSA-2020:0669","RHSA-2020:1150","RHSA-2020:0731","RHSA-2020:1358","RHSA-2020:0730","RHSA-2020:1216"],"bugzilla":"1794290","bugzilla_description":"CVE-2020-1711 QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["virt:rhel-8000020200331183759.f8e95b4e","qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-ma-10:2.10.0-21.el7_5.5","qemu-kvm-ma-10:2.12.0-33.el7_7.3","virt:rhel-8010020200304114113.c27ad7f8","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","qemu-kvm-ma-10:2.12.0-18.el7_6.5","qemu-kvm-ma-10:2.12.0-44.el7","qemu-kvm-rhev-10:2.12.0-44.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1711.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.0"},{"CVE":"CVE-2020-14415","severity":"low","public_date":"2020-01-20T00:00:00Z","advisories":[],"bugzilla":"1848117","bugzilla_description":"CVE-2020-14415 QEMU: division by zero in oss_write() in audio/ossaudio.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14415.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-7039","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:2730","RHSA-2020:1344","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:1360","RHSA-2020:2342","RHSA-2020:1352","RHSA-2020:1351","RHSA-2020:1296","RHSA-2020:0889","RHSA-2020:0775","RHSA-2020:1116","RHSA-2020:1358","RHSA-2020:0348","RHBA-2020:0390","RHSA-2020:1150"],"bugzilla":"1791551","bugzilla_description":"CVE-2020-7039 QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-173.el7","slirp4netns-0:0.3.0-8.el7_7","container-tools:1.0-8010020200206144344.c294d161","qemu-kvm-ma-10:2.12.0-33.el7_7.3","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","virt:rhel-8000020200305185300.f8e95b4e","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-ma-10:2.12.0-44.el7","qemu-kvm-rhev-10:2.12.0-44.el7","container-tools:rhel8-8010120200116121758.53d07e52","qemu-kvm-10:1.5.3-167.el7_7.6","slirp4netns-0:0.4.2-3.git21fdece.el8","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","virt:rhel-8010020200304114113.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7039.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-7211","severity":"low","public_date":"2019-12-30T00:00:00Z","advisories":["RHBA-2020:0390"],"bugzilla":"1792130","bugzilla_description":"CVE-2020-7211 QEMU: Slirp: potential directory traversal using relative paths via tftp server on Windows host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["slirp4netns-0:0.4.2-3.git21fdece.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7211.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2020-12829","severity":"moderate","public_date":"2019-12-23T00:00:00Z","advisories":[],"bugzilla":"1808510","bugzilla_description":"CVE-2020-12829 qemu: OOB read and write due to integer overflow in sm501_2d_operation() in hw/display/sm501.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->(CWE-125|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12829.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-12067","severity":"low","public_date":"2019-10-09T00:00:00Z","advisories":[],"bugzilla":"1759820","bugzilla_description":"CVE-2019-12067 QEMU: NULL dereference in ahci_commit_buf() leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12067.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2017-8284","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1769670","bugzilla_description":"CVE-2017-8284 QEMU: privilege escalation via disas_insn function in TCG mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8284.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2019-20382","severity":"low","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2020:2774","RHSA-2020:3267","RHSA-2020:4167","RHSA-2020:3906","RHSA-2020:3907"],"bugzilla":"1810390","bugzilla_description":"CVE-2019-20382 QEMU: vnc: memory leakage upon disconnect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401->CWE-772","affected_packages":["qemu-kvm-ma-10:2.12.0-48.el7","qemu-kvm-10:1.5.3-175.el7","virt:rhel-8020020200601195459.4cda2c84","qemu-kvm-rhev-10:2.12.0-48.el7_9.1","qemu-kvm-rhev-10:2.12.0-18.el7_6.12","qemu-kvm-rhev-10:2.12.0-48.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20382.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2019-20808","severity":"low","public_date":"2019-09-13T00:00:00Z","advisories":[],"bugzilla":"1841136","bugzilla_description":"CVE-2019-20808 QEMU: out-of-bounds read in ati_cursor_define() function in hw/display/ati.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20808.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2019-15890","severity":"moderate","public_date":"2019-08-25T00:00:00Z","advisories":["RHBA-2020:3172","RHSA-2020:0889","RHSA-2020:0775","RHSA-2020:0348"],"bugzilla":"1749716","bugzilla_description":"CVE-2019-15890 QEMU: Slirp: use-after-free during packet reassembly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["container-tools:rhel8-8010120200116121758.53d07e52","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","slirp4netns-0:0.3.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15890.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2019-12068","severity":"low","public_date":"2019-08-14T00:00:00Z","advisories":[],"bugzilla":"1773749","bugzilla_description":"CVE-2019-12068 qemu: scsi: lsi: potential infinite loop when executing script in lsi_execute_script","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12068.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-15034","severity":"important","public_date":"2019-08-12T00:00:00Z","advisories":[],"bugzilla":"1812659","bugzilla_description":"CVE-2019-15034 qemu: hw/display/bochs-display.c does not ensure a sufficient PCI config space allocation leading to a buffer overflow involving the PCIe extended config space","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15034.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2019-14378","severity":"important","public_date":"2019-07-28T00:00:00Z","advisories":["RHBA-2019:3723","RHSA-2019:3742","RHSA-2020:2126","RHSA-2019:3787","RHSA-2020:0366","RHSA-2019:3403","RHSA-2019:4344","RHSA-2020:2342","RHSA-2019:3179","RHSA-2020:2065","RHSA-2020:0889","RHSA-2019:3494","RHSA-2020:0775","RHSA-2020:1216","RHSA-2019:3968"],"bugzilla":"1734745","bugzilla_description":"CVE-2019-14378 QEMU: slirp: heap buffer overflow during packet reassembly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["container-tools:rhel8-8010020190927090915.4985cc55","container-tools:1.0-8010020190927091243.4985cc55","qemu-kvm-10:1.5.3-160.el7_6.6","qemu-kvm-10:1.5.3-167.el7_7.4","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","qemu-kvm-ma-10:2.12.0-33.el7_7.1","slirp4netns-0:0.3.0-8.el7_7","qemu-kvm-rhev-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","qemu-kvm-ma-10:2.12.0-18.el7_6.6","qemu-kvm-rhev-10:2.12.0-44.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14378.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-13164","severity":"low","public_date":"2019-06-28T00:00:00Z","advisories":[],"bugzilla":"1722559","bugzilla_description":"CVE-2019-13164 Qemu: qemu-bridge-helper ACL can be bypassed when names are too long","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-12929","severity":"low","public_date":"2019-06-06T00:00:00Z","advisories":[],"bugzilla":"1724809","bugzilla_description":"CVE-2019-12929 QEMU: guest agent guest_exec command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12929.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-12928","severity":"low","public_date":"2019-06-05T00:00:00Z","advisories":[],"bugzilla":"1724812","bugzilla_description":"CVE-2019-12928 QEMU: QMP migrate command execution issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-12155","severity":"low","public_date":"2019-04-25T00:00:00Z","advisories":["RHBA-2019:3723","RHSA-2019:3742","RHSA-2019:3787","RHSA-2019:2892","RHSA-2019:4344","RHSA-2019:3179","RHSA-2019:3345","RHSA-2019:2607","RHSA-2020:1216"],"bugzilla":"1712670","bugzilla_description":"CVE-2019-12155 QEMU: qxl: null pointer dereference while releasing spice resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["qemu-kvm-10:1.5.3-167.el7_7.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.5","qemu-kvm-rhev-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-44.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12155.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2019-8934","severity":"low","public_date":"2019-02-02T00:00:00Z","advisories":[],"bugzilla":"1668022","bugzilla_description":"CVE-2019-8934 QEMU: ppc64: sPAPR emulator leaks the host hardware identity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8934.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2019-6501","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:2166","RHSA-2019:2425"],"bugzilla":"1668160","bugzilla_description":"CVE-2019-6501 QEMU: scsi-generic: possible OOB access while handling inquiry request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-ma-10:2.12.0-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6501.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2019-12247","severity":null,"public_date":"2019-01-07T00:00:00Z","advisories":[],"bugzilla":"1712834","bugzilla_description":"CVE-2019-12247 QEMU: qemu-guest-agent: integer overflow while running guest-exec command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12247.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2019-5008","severity":"low","public_date":"2019-01-04T00:00:00Z","advisories":[],"bugzilla":"1705915","bugzilla_description":"CVE-2019-5008 QEMU: NULL pointer dereference in hw/sparc64/sun4u.c leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5008.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2018-20815","severity":"important","public_date":"2018-12-14T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:1881","RHSA-2019:1175","RHSA-2019:1743","RHSA-2019:1723","RHSA-2019:1667","RHSA-2019:2507","RHSA-2019:1968"],"bugzilla":"1693101","bugzilla_description":"CVE-2018-20815 QEMU: device_tree: heap buffer overflow while loading device tree blob","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-ma-10:2.12.0-18.el7_6.4","virt:rhel-8000020190510171727.55190bc5","qemu-kvm-rhev-10:2.12.0-18.el7_6.6","qemu-kvm-rhev-10:2.12.0-18.el7_6.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16872","severity":"low","public_date":"2018-12-13T00:00:00Z","advisories":[],"bugzilla":"1656114","bugzilla_description":"CVE-2018-16872 QEMU: usb-mtp: path traversal by host filesystem manipulation in Media Transfer Protocol (MTP)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16872.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-20123","severity":"low","public_date":"2018-12-12T00:00:00Z","advisories":[],"bugzilla":"1658963","bugzilla_description":"CVE-2018-20123 QEMU: pvrdma: memory leakage in device hotplug","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20123.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2018-20191","severity":"low","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1660314","bugzilla_description":"CVE-2018-20191 QEMU: pvrdma: uar_read leads to NULL dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20191.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2018-20124","severity":"moderate","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1660372","bugzilla_description":"CVE-2018-20124 QEMU: rdma: OOB access when building scatter-gather array","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20124.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-20125","severity":"low","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1660747","bugzilla_description":"CVE-2018-20125 QEMU: pvrdma: null dereference or excessive memory allocation when creating QP/CQ","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2018-20126","severity":"low","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1660751","bugzilla_description":"CVE-2018-20126 QEMU: pvrdma: memory leakage when creating cq/qp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2018-20216","severity":"low","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1660753","bugzilla_description":"CVE-2018-20216 QEMU: pvrdma: infinite loop in pvrdma_qp_send/recv","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20216.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2018-16867","severity":"important","public_date":"2018-12-03T00:00:00Z","advisories":[],"bugzilla":"1654885","bugzilla_description":"CVE-2018-16867 QEMU: dev-mtp: path traversal in usb_mtp_write_data of the Media Transfer Protocol (MTP)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16867.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-19489","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":[],"bugzilla":"1653156","bugzilla_description":"CVE-2018-19489 QEMU: 9pfs: crash due to race condition in renaming files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-19364","severity":"low","public_date":"2018-11-07T00:00:00Z","advisories":[],"bugzilla":"1643252","bugzilla_description":"CVE-2018-19364 Qemu: 9pfs: Use-after-free due to race condition while updating fid path","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19364.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-16847","severity":"important","public_date":"2018-11-01T00:00:00Z","advisories":[],"bugzilla":"1644052","bugzilla_description":"CVE-2018-16847 QEMU: nvme: Out-of-bounds r/w buffer access in cmb operations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16847.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-18849","severity":"moderate","public_date":"2018-10-25T00:00:00Z","advisories":[],"bugzilla":"1644973","bugzilla_description":"CVE-2018-18849 QEMU: lsi53c895a: OOB msg buffer access leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18849.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-18954","severity":"low","public_date":"2018-10-22T00:00:00Z","advisories":[],"bugzilla":"1526029","bugzilla_description":"CVE-2018-18954 QEMU: ppc64: Out-of-bounds r/w stack access in pnv_lpc_do_eccb","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18954.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2018-19665","severity":"moderate","public_date":"2018-10-18T00:00:00Z","advisories":[],"bugzilla":"1607652","bugzilla_description":"CVE-2018-19665 Qemu: bt: Integer overflow in Bluetooth routines allows memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19665.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-18438","severity":null,"public_date":"2018-10-11T00:00:00Z","advisories":[],"bugzilla":"1609015","bugzilla_description":"CVE-2018-18438 Qemu: Integer overflow in ccid_card_vscard_read() allows memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18438.json"},{"CVE":"CVE-2018-10839","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":["RHSA-2019:2892"],"bugzilla":"1581013","bugzilla_description":"CVE-2018-10839 QEMU: ne2000: integer overflow leads to buffer overflow issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["qemu-kvm-2:0.12.1.2-2.506.el6_10.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-17958","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:2425"],"bugzilla":"1636712","bugzilla_description":"CVE-2018-17958 QEMU: rtl8139: integer overflow leads to buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17958.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-17962","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":["RHSA-2019:2892"],"bugzilla":"1636773","bugzilla_description":"CVE-2018-17962 QEMU: pcnet: integer overflow leads to buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["qemu-kvm-2:0.12.1.2-2.506.el6_10.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17962.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-15746","severity":"low","public_date":"2018-08-13T00:00:00Z","advisories":["RHSA-2019:2425","RHSA-2020:3906","RHSA-2020:3907"],"bugzilla":"1615637","bugzilla_description":"CVE-2018-15746 QEMU: seccomp: blacklist is not applied to all threads","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-ma-10:2.12.0-48.el7","qemu-kvm-10:1.5.3-175.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15746.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-12617","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1594054","bugzilla_description":"CVE-2018-12617 Qemu: qemu-guest-agent: Integer overflow causes segmentation fault in qmp_guest_file_read()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2018-11806","severity":"important","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2019:2892","RHSA-2018:2822","RHSA-2018:2887","RHSA-2018:2762","RHSA-2018:2462"],"bugzilla":"1586245","bugzilla_description":"CVE-2018-11806 QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.6","qemu-kvm-rhev-10:2.10.0-21.el7_5.7","qemu-kvm-10:1.5.3-156.el7_5.5","qemu-kvm-2:0.12.1.2-2.506.el6_10.5","qemu-kvm-ma-10:2.10.0-21.el7_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11806.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2018-17963","severity":"moderate","public_date":"2018-05-21T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:2166","RHSA-2019:2425"],"bugzilla":"1636777","bugzilla_description":"CVE-2018-17963 QEMU: net: ignore packets with large size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-ma-10:2.12.0-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17963.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-7858","severity":"moderate","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2018:2162","RHSA-2018:1646","RHSA-2018:1416","RHSA-2018:1644","RHSA-2018:1369","RHSA-2018:1645","RHSA-2018:1643"],"bugzilla":"1553402","bugzilla_description":"CVE-2018-7858 QEMU: cirrus: OOB access when updating VGA display","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.2","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","qemu-kvm-10:1.5.3-156.el7_5.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7858.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2018-7550","severity":"moderate","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:1646","RHSA-2018:1644","RHSA-2018:1369","RHSA-2018:1645","RHSA-2018:1643","RHSA-2018:2462"],"bugzilla":"1549798","bugzilla_description":"CVE-2018-7550 QEMU: i386: multiboot OOB access while loading kernel image","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.2","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","qemu-kvm-10:1.5.3-156.el7_5.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7550.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2017-15124","severity":"low","public_date":"2017-12-18T00:00:00Z","advisories":["RHSA-2018:3062","RHSA-2018:1104","RHSA-2018:1113","RHSA-2018:0816"],"bugzilla":"1525195","bugzilla_description":"CVE-2017-15124 Qemu: memory exhaustion through framebuffer update request message in VNC server","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["qemu-kvm-ma-10:2.12.0-18.el7","qemu-kvm-rhev-10:2.10.0-21.el7","qemu-kvm-10:1.5.3-156.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15124.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2017-15118","severity":"important","public_date":"2017-11-28T00:00:00Z","advisories":["RHSA-2018:1104","RHSA-2018:1113"],"bugzilla":"1516922","bugzilla_description":"CVE-2017-15118 Qemu: stack buffer overflow in NBD server triggered via long export name","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"8.3"},{"CVE":"CVE-2017-15119","severity":"moderate","public_date":"2017-11-28T00:00:00Z","advisories":["RHSA-2018:1104","RHSA-2018:1113"],"bugzilla":"1516925","bugzilla_description":"CVE-2017-15119 qemu: DoS via large option request","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15119.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2017-17381","severity":"low","public_date":"2017-11-24T00:00:00Z","advisories":[],"bugzilla":"1520782","bugzilla_description":"CVE-2017-17381 Qemu: virtio: divide by zero exception while updating rings","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17381.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2017-15268","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":["RHSA-2018:1104","RHSA-2018:1113","RHSA-2018:0816"],"bugzilla":"1496879","bugzilla_description":"CVE-2017-15268 QEMU: I/O: potential memory exhaustion via websock connection to VNC","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7","qemu-kvm-10:1.5.3-156.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15268.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-tools-ma_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-tools-ma_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-tools-ma_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm_security_api_results.json
new file mode 100644
index 0000000..1dd7b30
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qemu-kvm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-27661","severity":"low","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1890653","bugzilla_description":"CVE-2020-27661 QEMU: divide by zero in dwc2_handle_packet() in hw/usb/hcd-dwc2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27661.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-25624","severity":"moderate","public_date":"2020-09-11T00:00:00Z","advisories":[],"bugzilla":"1879801","bugzilla_description":"CVE-2020-25624 QEMU: usb: hcd-ohci: out-of-bound access issue while processing transfer descriptors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25624.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-25625","severity":"low","public_date":"2020-09-11T00:00:00Z","advisories":[],"bugzilla":"1879808","bugzilla_description":"CVE-2020-25625 QEMU: usb: hcd-ohci: infinite loop issue while processing transfer descriptors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25625.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2020-14364","severity":"important","public_date":"2020-08-24T12:00:00Z","advisories":["RHSA-2020:4049","RHSA-2020:4115","RHSA-2020:4048","RHSA-2020:4059","RHSA-2020:4047","RHSA-2020:4058","RHSA-2020:4079","RHSA-2020:4167","RHSA-2020:4056","RHSA-2020:4078","RHSA-2020:4111","RHSA-2020:4055","RHSA-2020:4176","RHSA-2020:4054","RHSA-2020:4053","RHSA-2020:4052","RHSA-2020:4162","RHSA-2020:4051","RHSA-2020:4172","RHSA-2020:4050","RHSA-2020:4291","RHSA-2020:4290"],"bugzilla":"1869201","bugzilla_description":"CVE-2020-14364 QEMU: usb: out-of-bounds r/w access issue while processing usb packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["qemu-kvm-10:1.5.3-105.el7_2.20","qemu-kvm-rhev-10:2.12.0-33.el7_7.12","qemu-kvm-10:1.5.3-175.el7_9.1","qemu-kvm-10:1.5.3-160.el7_6.8","qemu-kvm-10:1.5.3-141.el7_4.11","qemu-kvm-ma-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-18.el7_6.12","qemu-kvm-2:0.12.1.2-2.448.el6_6.9","virt:rhel-8000020200910175113.f8e95b4e","qemu-kvm-ma-10:2.12.0-18.el7_6.7","qemu-kvm-10:1.5.3-167.el7_7.7","qemu-kvm-2:0.12.1.2-2.506.el6_10.8","qemu-kvm-2:0.12.1.2-2.415.el6_5.21","qemu-kvm-ma-10:2.12.0-48.el7_9.1","virt:rhel-8020020200909224913.4cda2c84","qemu-kvm-rhev-10:2.12.0-48.el7_9.1","qemu-kvm-10:1.5.3-126.el7_3.18","redhat-virtualization-host-0:4.4.2-20200930.0.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14364.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-24352","severity":"low","public_date":"2020-08-14T00:00:00Z","advisories":[],"bugzilla":"1847584","bugzilla_description":"CVE-2020-24352 QEMU: out-of-bounds read/write in ati-vga device emulation in ati_2d_blt()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24352.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2020-17380","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1862167","bugzilla_description":"CVE-2020-17380 QEMU: heap buffer overflow in sdhci_sdma_transfer_multi_blocks() in hw/sd/sdhci.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17380.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2020-16092","severity":"low","public_date":"2020-07-27T00:00:00Z","advisories":[],"bugzilla":"1860283","bugzilla_description":"CVE-2020-16092 QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16092.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-15859","severity":"moderate","public_date":"2020-07-16T00:00:00Z","advisories":[],"bugzilla":"1859168","bugzilla_description":"CVE-2020-15859 QEMU: net: e1000e: use-after-free while sending packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15859.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-15863","severity":"low","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1853725","bugzilla_description":"CVE-2020-15863 QEMU: stack-based overflow in xgmac_enet_send() in hw/net/xgmac.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15863.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-25084","severity":"low","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1879652","bugzilla_description":"CVE-2020-25084 QEMU: usb: use-after-free issue while setting up packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25084.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-25085","severity":"moderate","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1879671","bugzilla_description":"CVE-2020-25085 QEMU: sdhci: out-of-bounds access issue while doing multi block SDMA","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25085.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-25741","severity":"low","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1881401","bugzilla_description":"CVE-2020-25741 QEMU: fdc: null pointer dereference during r/w data transfer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25741.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-25743","severity":"low","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1881409","bugzilla_description":"CVE-2020-25743 QEMU: ide: null pointer dereference while cancelling i/o operation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25743.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-25742","severity":"low","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1883178","bugzilla_description":"CVE-2020-25742 QEMU: scsi: lsi: null pointer dereference during memory move","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25742.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-15469","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1853154","bugzilla_description":"CVE-2020-15469 QEMU: MMIO ops null pointer dereference may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15469.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.3"},{"CVE":"CVE-2020-10761","severity":"moderate","public_date":"2020-06-08T00:00:00Z","advisories":["RHBA-2020:3172"],"bugzilla":"1843707","bugzilla_description":"CVE-2020-10761 QEMU: nbd: reachable assertion failure in nbd_negotiate_send_rep_verr via remote client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10761.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-13791","severity":"low","public_date":"2020-06-03T00:00:00Z","advisories":[],"bugzilla":"1843764","bugzilla_description":"CVE-2020-13791 QEMU: ati-vga: OOB access while reading PCI configuration may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13791.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2020-13800","severity":"low","public_date":"2020-06-03T00:00:00Z","advisories":[],"bugzilla":"1843771","bugzilla_description":"CVE-2020-13800 QEMU: ati-vga: infinite recursion in ati_mm_read/write calls may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13800.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2020-13754","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":[],"bugzilla":"1842363","bugzilla_description":"CVE-2020-13754 QEMU: msix: OOB access during mmio operations may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13754.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-10756","severity":"moderate","public_date":"2020-05-27T00:00:00Z","advisories":["RHSA-2020:3586","RHSA-2020:4059"],"bugzilla":"1835986","bugzilla_description":"CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["virt:rhel-8020020200909224913.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10756.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-13253","severity":"low","public_date":"2020-05-20T00:00:00Z","advisories":[],"bugzilla":"1838546","bugzilla_description":"CVE-2020-13253 QEMU: sd: OOB access could crash the guest resulting in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13253.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2020-13361","severity":"low","public_date":"2020-05-15T00:00:00Z","advisories":[],"bugzilla":"1840980","bugzilla_description":"CVE-2020-13361 QEMU: es1370: OOB access due to incorrect frame count leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13361.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2020-13659","severity":"low","public_date":"2020-05-14T00:00:00Z","advisories":[],"bugzilla":"1842496","bugzilla_description":"CVE-2020-13659 QEMU: exec: address_space_map returns NULL without setting length to zero may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13659.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2020-13765","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":[],"bugzilla":"1842912","bugzilla_description":"CVE-2020-13765 QEMU: loader: OOB access while loading registered ROM may lead to code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13765.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-13362","severity":"low","public_date":"2020-05-07T00:00:00Z","advisories":[],"bugzilla":"1840999","bugzilla_description":"CVE-2020-13362 QEMU: megasas: OOB read access due to invalid index leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13362.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-10717","severity":"low","public_date":"2020-04-30T00:00:00Z","advisories":["RHBA-2020:3172"],"bugzilla":"1827808","bugzilla_description":"CVE-2020-10717 QEMU: virtiofsd: guest may open maximum file descriptor to cause DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10717.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2020-11869","severity":"low","public_date":"2020-04-07T00:00:00Z","advisories":[],"bugzilla":"1809955","bugzilla_description":"CVE-2020-11869 qemu: integer overflow in ati_2d_blt() in hw/display/ati-2d.c could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->(CWE-125|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11869.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2020-10702","severity":"low","public_date":"2020-04-02T00:00:00Z","advisories":["RHBA-2020:3172"],"bugzilla":"1809948","bugzilla_description":"CVE-2020-10702 qemu: weak signature generation in Pointer Authentication support for ARM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10702.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-1983","severity":"moderate","public_date":"2020-04-02T00:00:00Z","advisories":["RHBA-2020:3172","RHSA-2020:4079","RHSA-2020:3053","RHSA-2020:4290"],"bugzilla":"1829825","bugzilla_description":"CVE-2020-1983 QEMU: slirp: use-after-free in ip_reass() function in ip_input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["qemu-kvm-10:1.5.3-175.el7_9.1","container-tools:rhel8-8020120200601155013.ffd2803a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1983.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-11102","severity":"important","public_date":"2020-02-11T00:00:00Z","advisories":[],"bugzilla":"1821180","bugzilla_description":"CVE-2020-11102 QEMU: tulip: OOB access in tulip_copy_tx_buffers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11102.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-8608","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:2774","RHSA-2020:2730","RHSA-2020:2773","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:2342","RHSA-2020:1352","RHBA-2020:0527","RHSA-2020:1351","RHSA-2020:1208","RHSA-2020:0889","RHSA-2020:1209","RHSA-2020:2844","RHSA-2020:1379","RHSA-2020:1403","RHSA-2020:3040","RHSA-2020:1292"],"bugzilla":"1798453","bugzilla_description":"CVE-2020-8608 QEMU: Slirp: potential OOB access due to unsafe snprintf() usages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-160.el7_6.7","virt:rhel-8020020200601195459.4cda2c84","slirp4netns-0:0.3.0-8.el7_7","qemu-kvm-ma-10:2.12.0-33.el7_7.3","slirp4netns-0:0.4.2-4.git21fdece.el8","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-10:1.5.3-167.el7_7.6","qemu-kvm-10:1.5.3-173.el7_8.1","virt:rhel-8000020200526192422.f8e95b4e","qemu-kvm-2:0.12.1.2-2.506.el6_10.7","qemu-kvm-ma-10:2.12.0-44.el7_8.1","container-tools:rhel8-8010120200326094405.f8993c42"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-1711","severity":"important","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:0773","RHSA-2020:1300","RHSA-2020:1352","RHSA-2020:2472","RHSA-2020:1296","RHSA-2020:1505","RHSA-2020:0669","RHSA-2020:1150","RHSA-2020:0731","RHSA-2020:1358","RHSA-2020:0730","RHSA-2020:1216"],"bugzilla":"1794290","bugzilla_description":"CVE-2020-1711 QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["virt:rhel-8000020200331183759.f8e95b4e","qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-ma-10:2.10.0-21.el7_5.5","qemu-kvm-ma-10:2.12.0-33.el7_7.3","virt:rhel-8010020200304114113.c27ad7f8","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","qemu-kvm-ma-10:2.12.0-18.el7_6.5","qemu-kvm-ma-10:2.12.0-44.el7","qemu-kvm-rhev-10:2.12.0-44.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1711.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.0"},{"CVE":"CVE-2020-14415","severity":"low","public_date":"2020-01-20T00:00:00Z","advisories":[],"bugzilla":"1848117","bugzilla_description":"CVE-2020-14415 QEMU: division by zero in oss_write() in audio/ossaudio.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14415.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-7039","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:2730","RHSA-2020:1344","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:1360","RHSA-2020:2342","RHSA-2020:1352","RHSA-2020:1351","RHSA-2020:1296","RHSA-2020:0889","RHSA-2020:0775","RHSA-2020:1116","RHSA-2020:1358","RHSA-2020:0348","RHBA-2020:0390","RHSA-2020:1150"],"bugzilla":"1791551","bugzilla_description":"CVE-2020-7039 QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-173.el7","slirp4netns-0:0.3.0-8.el7_7","container-tools:1.0-8010020200206144344.c294d161","qemu-kvm-ma-10:2.12.0-33.el7_7.3","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","virt:rhel-8000020200305185300.f8e95b4e","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-ma-10:2.12.0-44.el7","qemu-kvm-rhev-10:2.12.0-44.el7","container-tools:rhel8-8010120200116121758.53d07e52","qemu-kvm-10:1.5.3-167.el7_7.6","slirp4netns-0:0.4.2-3.git21fdece.el8","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","virt:rhel-8010020200304114113.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7039.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-7211","severity":"low","public_date":"2019-12-30T00:00:00Z","advisories":["RHBA-2020:0390"],"bugzilla":"1792130","bugzilla_description":"CVE-2020-7211 QEMU: Slirp: potential directory traversal using relative paths via tftp server on Windows host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["slirp4netns-0:0.4.2-3.git21fdece.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7211.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2020-12829","severity":"moderate","public_date":"2019-12-23T00:00:00Z","advisories":[],"bugzilla":"1808510","bugzilla_description":"CVE-2020-12829 qemu: OOB read and write due to integer overflow in sm501_2d_operation() in hw/display/sm501.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->(CWE-125|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12829.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-12067","severity":"low","public_date":"2019-10-09T00:00:00Z","advisories":[],"bugzilla":"1759820","bugzilla_description":"CVE-2019-12067 QEMU: NULL dereference in ahci_commit_buf() leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12067.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2017-8284","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1769670","bugzilla_description":"CVE-2017-8284 QEMU: privilege escalation via disas_insn function in TCG mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8284.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2019-20382","severity":"low","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2020:2774","RHSA-2020:3267","RHSA-2020:4167","RHSA-2020:3906","RHSA-2020:3907"],"bugzilla":"1810390","bugzilla_description":"CVE-2019-20382 QEMU: vnc: memory leakage upon disconnect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401->CWE-772","affected_packages":["qemu-kvm-ma-10:2.12.0-48.el7","qemu-kvm-10:1.5.3-175.el7","virt:rhel-8020020200601195459.4cda2c84","qemu-kvm-rhev-10:2.12.0-48.el7_9.1","qemu-kvm-rhev-10:2.12.0-18.el7_6.12","qemu-kvm-rhev-10:2.12.0-48.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20382.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2019-20808","severity":"low","public_date":"2019-09-13T00:00:00Z","advisories":[],"bugzilla":"1841136","bugzilla_description":"CVE-2019-20808 QEMU: out-of-bounds read in ati_cursor_define() function in hw/display/ati.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20808.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2019-15890","severity":"moderate","public_date":"2019-08-25T00:00:00Z","advisories":["RHBA-2020:3172","RHSA-2020:0889","RHSA-2020:0775","RHSA-2020:0348"],"bugzilla":"1749716","bugzilla_description":"CVE-2019-15890 QEMU: Slirp: use-after-free during packet reassembly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["container-tools:rhel8-8010120200116121758.53d07e52","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","slirp4netns-0:0.3.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15890.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2019-12068","severity":"low","public_date":"2019-08-14T00:00:00Z","advisories":[],"bugzilla":"1773749","bugzilla_description":"CVE-2019-12068 qemu: scsi: lsi: potential infinite loop when executing script in lsi_execute_script","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12068.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-15034","severity":"important","public_date":"2019-08-12T00:00:00Z","advisories":[],"bugzilla":"1812659","bugzilla_description":"CVE-2019-15034 qemu: hw/display/bochs-display.c does not ensure a sufficient PCI config space allocation leading to a buffer overflow involving the PCIe extended config space","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15034.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2019-14378","severity":"important","public_date":"2019-07-28T00:00:00Z","advisories":["RHBA-2019:3723","RHSA-2019:3742","RHSA-2020:2126","RHSA-2019:3787","RHSA-2020:0366","RHSA-2019:3403","RHSA-2019:4344","RHSA-2020:2342","RHSA-2019:3179","RHSA-2020:2065","RHSA-2020:0889","RHSA-2019:3494","RHSA-2020:0775","RHSA-2020:1216","RHSA-2019:3968"],"bugzilla":"1734745","bugzilla_description":"CVE-2019-14378 QEMU: slirp: heap buffer overflow during packet reassembly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["container-tools:rhel8-8010020190927090915.4985cc55","container-tools:1.0-8010020190927091243.4985cc55","qemu-kvm-10:1.5.3-160.el7_6.6","qemu-kvm-10:1.5.3-167.el7_7.4","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","qemu-kvm-ma-10:2.12.0-33.el7_7.1","slirp4netns-0:0.3.0-8.el7_7","qemu-kvm-rhev-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","qemu-kvm-ma-10:2.12.0-18.el7_6.6","qemu-kvm-rhev-10:2.12.0-44.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14378.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-13164","severity":"low","public_date":"2019-06-28T00:00:00Z","advisories":[],"bugzilla":"1722559","bugzilla_description":"CVE-2019-13164 Qemu: qemu-bridge-helper ACL can be bypassed when names are too long","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-12929","severity":"low","public_date":"2019-06-06T00:00:00Z","advisories":[],"bugzilla":"1724809","bugzilla_description":"CVE-2019-12929 QEMU: guest agent guest_exec command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12929.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-12928","severity":"low","public_date":"2019-06-05T00:00:00Z","advisories":[],"bugzilla":"1724812","bugzilla_description":"CVE-2019-12928 QEMU: QMP migrate command execution issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-12126","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646781","bugzilla_description":"CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12130","severity":"important","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646784","bugzilla_description":"CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385->CWE-226","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-12127","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1667782","bugzilla_description":"CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11091","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1705312","bugzilla_description":"CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-12155","severity":"low","public_date":"2019-04-25T00:00:00Z","advisories":["RHBA-2019:3723","RHSA-2019:3742","RHSA-2019:3787","RHSA-2019:2892","RHSA-2019:4344","RHSA-2019:3179","RHSA-2019:3345","RHSA-2019:2607","RHSA-2020:1216"],"bugzilla":"1712670","bugzilla_description":"CVE-2019-12155 QEMU: qxl: null pointer dereference while releasing spice resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["qemu-kvm-10:1.5.3-167.el7_7.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.5","qemu-kvm-rhev-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-44.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12155.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2019-9824","severity":"low","public_date":"2019-03-01T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:1650","RHSA-2019:2078","RHSA-2019:2425","RHSA-2019:3345"],"bugzilla":"1678515","bugzilla_description":"CVE-2019-9824 QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.4","qemu-kvm-10:1.5.3-167.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9824.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2019-3812","severity":"moderate","public_date":"2019-02-18T03:22:00Z","advisories":[],"bugzilla":"1665792","bugzilla_description":"CVE-2019-3812 qemu: Out-of-bounds read in hw/i2c/i2c-ddc.c allows for memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3812.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-8934","severity":"low","public_date":"2019-02-02T00:00:00Z","advisories":[],"bugzilla":"1668022","bugzilla_description":"CVE-2019-8934 QEMU: ppc64: sPAPR emulator leaks the host hardware identity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8934.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2019-6778","severity":"important","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2019:2892","RHSA-2019:2425","RHSA-2019:1883","RHSA-2019:1968"],"bugzilla":"1664205","bugzilla_description":"CVE-2019-6778 QEMU: slirp: heap buffer overflow in tcp_emu()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-10:1.5.3-160.el7_6.3","qemu-kvm-2:0.12.1.2-2.506.el6_10.5","qemu-kvm-rhev-10:2.12.0-18.el7_6.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6778.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-6501","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:2166","RHSA-2019:2425"],"bugzilla":"1668160","bugzilla_description":"CVE-2019-6501 QEMU: scsi-generic: possible OOB access while handling inquiry request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-ma-10:2.12.0-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6501.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2019-12247","severity":null,"public_date":"2019-01-07T00:00:00Z","advisories":[],"bugzilla":"1712834","bugzilla_description":"CVE-2019-12247 QEMU: qemu-guest-agent: integer overflow while running guest-exec command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12247.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2019-5008","severity":"low","public_date":"2019-01-04T00:00:00Z","advisories":[],"bugzilla":"1705915","bugzilla_description":"CVE-2019-5008 QEMU: NULL pointer dereference in hw/sparc64/sun4u.c leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5008.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2018-20815","severity":"important","public_date":"2018-12-14T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:1881","RHSA-2019:1175","RHSA-2019:1743","RHSA-2019:1723","RHSA-2019:1667","RHSA-2019:2507","RHSA-2019:1968"],"bugzilla":"1693101","bugzilla_description":"CVE-2018-20815 QEMU: device_tree: heap buffer overflow while loading device tree blob","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-ma-10:2.12.0-18.el7_6.4","virt:rhel-8000020190510171727.55190bc5","qemu-kvm-rhev-10:2.12.0-18.el7_6.6","qemu-kvm-rhev-10:2.12.0-18.el7_6.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16872","severity":"low","public_date":"2018-12-13T00:00:00Z","advisories":[],"bugzilla":"1656114","bugzilla_description":"CVE-2018-16872 QEMU: usb-mtp: path traversal by host filesystem manipulation in Media Transfer Protocol (MTP)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16872.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-20123","severity":"low","public_date":"2018-12-12T00:00:00Z","advisories":[],"bugzilla":"1658963","bugzilla_description":"CVE-2018-20123 QEMU: pvrdma: memory leakage in device hotplug","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20123.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2018-20191","severity":"low","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1660314","bugzilla_description":"CVE-2018-20191 QEMU: pvrdma: uar_read leads to NULL dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20191.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2018-20124","severity":"moderate","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1660372","bugzilla_description":"CVE-2018-20124 QEMU: rdma: OOB access when building scatter-gather array","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20124.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-20125","severity":"low","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1660747","bugzilla_description":"CVE-2018-20125 QEMU: pvrdma: null dereference or excessive memory allocation when creating QP/CQ","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2018-20126","severity":"low","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1660751","bugzilla_description":"CVE-2018-20126 QEMU: pvrdma: memory leakage when creating cq/qp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2018-20216","severity":"low","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1660753","bugzilla_description":"CVE-2018-20216 QEMU: pvrdma: infinite loop in pvrdma_qp_send/recv","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20216.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2018-16867","severity":"important","public_date":"2018-12-03T00:00:00Z","advisories":[],"bugzilla":"1654885","bugzilla_description":"CVE-2018-16867 QEMU: dev-mtp: path traversal in usb_mtp_write_data of the Media Transfer Protocol (MTP)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16867.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-19489","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":[],"bugzilla":"1653156","bugzilla_description":"CVE-2018-19489 QEMU: 9pfs: crash due to race condition in renaming files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-19364","severity":"low","public_date":"2018-11-07T00:00:00Z","advisories":[],"bugzilla":"1643252","bugzilla_description":"CVE-2018-19364 Qemu: 9pfs: Use-after-free due to race condition while updating fid path","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19364.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-16847","severity":"important","public_date":"2018-11-01T00:00:00Z","advisories":[],"bugzilla":"1644052","bugzilla_description":"CVE-2018-16847 QEMU: nvme: Out-of-bounds r/w buffer access in cmb operations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16847.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-18849","severity":"moderate","public_date":"2018-10-25T00:00:00Z","advisories":[],"bugzilla":"1644973","bugzilla_description":"CVE-2018-18849 QEMU: lsi53c895a: OOB msg buffer access leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18849.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-18954","severity":"low","public_date":"2018-10-22T00:00:00Z","advisories":[],"bugzilla":"1526029","bugzilla_description":"CVE-2018-18954 QEMU: ppc64: Out-of-bounds r/w stack access in pnv_lpc_do_eccb","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18954.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2018-19665","severity":"moderate","public_date":"2018-10-18T00:00:00Z","advisories":[],"bugzilla":"1607652","bugzilla_description":"CVE-2018-19665 Qemu: bt: Integer overflow in Bluetooth routines allows memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19665.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-18438","severity":null,"public_date":"2018-10-11T00:00:00Z","advisories":[],"bugzilla":"1609015","bugzilla_description":"CVE-2018-18438 Qemu: Integer overflow in ccid_card_vscard_read() allows memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18438.json"},{"CVE":"CVE-2018-10839","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":["RHSA-2019:2892"],"bugzilla":"1581013","bugzilla_description":"CVE-2018-10839 QEMU: ne2000: integer overflow leads to buffer overflow issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["qemu-kvm-2:0.12.1.2-2.506.el6_10.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-17958","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:2425"],"bugzilla":"1636712","bugzilla_description":"CVE-2018-17958 QEMU: rtl8139: integer overflow leads to buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17958.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-17962","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":["RHSA-2019:2892"],"bugzilla":"1636773","bugzilla_description":"CVE-2018-17962 QEMU: pcnet: integer overflow leads to buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["qemu-kvm-2:0.12.1.2-2.506.el6_10.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17962.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-15746","severity":"low","public_date":"2018-08-13T00:00:00Z","advisories":["RHSA-2019:2425","RHSA-2020:3906","RHSA-2020:3907"],"bugzilla":"1615637","bugzilla_description":"CVE-2018-15746 QEMU: seccomp: blacklist is not applied to all threads","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-ma-10:2.12.0-48.el7","qemu-kvm-10:1.5.3-175.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15746.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-12617","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1594054","bugzilla_description":"CVE-2018-12617 Qemu: qemu-guest-agent: Integer overflow causes segmentation fault in qmp_guest_file_read()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2018-11806","severity":"important","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2019:2892","RHSA-2018:2822","RHSA-2018:2887","RHSA-2018:2762","RHSA-2018:2462"],"bugzilla":"1586245","bugzilla_description":"CVE-2018-11806 QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.6","qemu-kvm-rhev-10:2.10.0-21.el7_5.7","qemu-kvm-10:1.5.3-156.el7_5.5","qemu-kvm-2:0.12.1.2-2.506.el6_10.5","qemu-kvm-ma-10:2.10.0-21.el7_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11806.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-17963","severity":"moderate","public_date":"2018-05-21T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:2166","RHSA-2019:2425"],"bugzilla":"1636777","bugzilla_description":"CVE-2018-17963 QEMU: net: ignore packets with large size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-ma-10:2.12.0-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17963.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-7858","severity":"moderate","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2018:2162","RHSA-2018:1646","RHSA-2018:1416","RHSA-2018:1644","RHSA-2018:1369","RHSA-2018:1645","RHSA-2018:1643"],"bugzilla":"1553402","bugzilla_description":"CVE-2018-7858 QEMU: cirrus: OOB access when updating VGA display","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.2","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","qemu-kvm-10:1.5.3-156.el7_5.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7858.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2018-7550","severity":"moderate","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:1646","RHSA-2018:1644","RHSA-2018:1369","RHSA-2018:1645","RHSA-2018:1643","RHSA-2018:2462"],"bugzilla":"1549798","bugzilla_description":"CVE-2018-7550 QEMU: i386: multiboot OOB access while loading kernel image","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.2","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","qemu-kvm-10:1.5.3-156.el7_5.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7550.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-5683","severity":"low","public_date":"2017-12-25T00:00:00Z","advisories":["RHSA-2018:2162","RHSA-2018:1104","RHSA-2018:1113","RHSA-2018:0816"],"bugzilla":"1530356","bugzilla_description":"CVE-2018-5683 Qemu: Out-of-bounds read in vga_draw_text routine","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7","qemu-kvm-10:1.5.3-156.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5683.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-15124","severity":"low","public_date":"2017-12-18T00:00:00Z","advisories":["RHSA-2018:3062","RHSA-2018:1104","RHSA-2018:1113","RHSA-2018:0816"],"bugzilla":"1525195","bugzilla_description":"CVE-2017-15124 Qemu: memory exhaustion through framebuffer update request message in VNC server","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["qemu-kvm-ma-10:2.12.0-18.el7","qemu-kvm-rhev-10:2.10.0-21.el7","qemu-kvm-10:1.5.3-156.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15124.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2017-15118","severity":"important","public_date":"2017-11-28T00:00:00Z","advisories":["RHSA-2018:1104","RHSA-2018:1113"],"bugzilla":"1516922","bugzilla_description":"CVE-2017-15118 Qemu: stack buffer overflow in NBD server triggered via long export name","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"8.3"},{"CVE":"CVE-2017-15119","severity":"moderate","public_date":"2017-11-28T00:00:00Z","advisories":["RHSA-2018:1104","RHSA-2018:1113"],"bugzilla":"1516925","bugzilla_description":"CVE-2017-15119 qemu: DoS via large option request","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15119.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2017-17381","severity":"low","public_date":"2017-11-24T00:00:00Z","advisories":[],"bugzilla":"1520782","bugzilla_description":"CVE-2017-17381 Qemu: virtio: divide by zero exception while updating rings","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17381.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2017-16845","severity":"low","public_date":"2017-11-15T00:00:00Z","advisories":[],"bugzilla":"1514148","bugzilla_description":"CVE-2017-16845 Qemu: ps2: information leakage via post_load routine","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16845.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-15289","severity":"moderate","public_date":"2017-10-11T00:00:00Z","advisories":["RHSA-2018:0516","RHSA-2017:3470","RHSA-2017:3471","RHSA-2017:3474","RHSA-2017:3472","RHSA-2017:3473","RHSA-2017:3368","RHSA-2017:3369","RHSA-2017:3466"],"bugzilla":"1501290","bugzilla_description":"CVE-2017-15289 Qemu: cirrus: OOB access issue in mode4and5 write functions","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-10:1.5.3-141.el7_4.4","qemu-kvm-2:0.12.1.2-2.503.el6_9.5","qemu-kvm-rhev-10:2.9.0-16.el7_4.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15289.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-15038","severity":"low","public_date":"2017-10-04T00:00:00Z","advisories":[],"bugzilla":"1499110","bugzilla_description":"CVE-2017-15038 Qemu: 9p: virtfs: information disclosure when reading extended attributes","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15038.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.0"},{"CVE":"CVE-2017-15268","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":["RHSA-2018:1104","RHSA-2018:1113","RHSA-2018:0816"],"bugzilla":"1496879","bugzilla_description":"CVE-2017-15268 QEMU: I/O: potential memory exhaustion via websock connection to VNC","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7","qemu-kvm-10:1.5.3-156.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15268.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-18043","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1536377","bugzilla_description":"CVE-2017-18043 Qemu: integer overflow in ROUND_UP macro could result in DoS","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18043.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2017-14167","severity":"moderate","public_date":"2017-09-05T00:00:00Z","advisories":["RHSA-2017:3470","RHSA-2017:3471","RHSA-2017:3474","RHSA-2017:3472","RHSA-2017:3473","RHSA-2017:3368","RHSA-2017:3369","RHSA-2017:3466"],"bugzilla":"1489375","bugzilla_description":"CVE-2017-14167 Qemu: i386: multiboot OOB access while loading kernel image","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["qemu-kvm-10:1.5.3-141.el7_4.4","qemu-kvm-rhev-10:2.9.0-16.el7_4.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.9"},{"CVE":"CVE-2017-13672","severity":"low","public_date":"2017-08-24T00:00:00Z","advisories":["RHSA-2018:2162","RHSA-2018:1104","RHSA-2018:1113","RHSA-2018:0816"],"bugzilla":"1486560","bugzilla_description":"CVE-2017-13672 QEMU: vga: OOB read access during display update","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7","qemu-kvm-10:1.5.3-156.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13672.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-13673","severity":"low","public_date":"2017-08-24T00:00:00Z","advisories":["RHSA-2018:1104","RHSA-2018:1113"],"bugzilla":"1486588","bugzilla_description":"CVE-2017-13673 QEMU: VGA: reachable assert failure during display update","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13673.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-13711","severity":"low","public_date":"2017-08-03T00:00:00Z","advisories":["RHSA-2018:1104","RHSA-2018:1113","RHSA-2018:0816"],"bugzilla":"1486400","bugzilla_description":"CVE-2017-13711 QEMU: Slirp: use-after-free when sending response","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7","qemu-kvm-10:1.5.3-156.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13711.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2017-11434","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1472611","bugzilla_description":"CVE-2017-11434 Qemu: slirp: out-of-bounds read while parsing dhcp options","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11434.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-11334","severity":"moderate","public_date":"2017-07-13T00:00:00Z","advisories":["RHSA-2017:3470","RHSA-2017:3471","RHSA-2017:3474","RHSA-2017:3472","RHSA-2017:3473","RHSA-2017:3369","RHSA-2017:3466"],"bugzilla":"1471638","bugzilla_description":"CVE-2017-11334 Qemu: exec: oob access during dma operation","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.9.0-16.el7_4.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11334.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2017-12809","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1483534","bugzilla_description":"CVE-2017-12809 Qemu: ide: flushing of empty CDROM drives leads to NULL dereference","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12809.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2017-10911","severity":"low","public_date":"2017-06-20T00:00:00Z","advisories":[],"bugzilla":"1458870","bugzilla_description":"CVE-2017-10911 xsa216 xen: blkif responses leak backend stack data (XSA-216)","cvss_score":1.4,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10911.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.0"},{"CVE":"CVE-2017-10664","severity":"moderate","public_date":"2017-06-11T00:00:00Z","advisories":["RHSA-2017:3470","RHSA-2017:3471","RHSA-2017:2390","RHSA-2017:3474","RHSA-2017:3472","RHSA-2017:3473","RHSA-2017:2445","RHSA-2017:3466"],"bugzilla":"1466190","bugzilla_description":"CVE-2017-10664 Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-248","affected_packages":["qemu-kvm-10:1.5.3-141.el7_4.1","qemu-kvm-rhev-10:2.9.0-16.el7_4.11","qemu-kvm-rhev-10:2.9.0-16.el7_4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-7539","severity":"moderate","public_date":"2017-06-02T00:00:00Z","advisories":["RHSA-2017:3470","RHSA-2017:2628","RHSA-2017:3471","RHSA-2017:3474","RHSA-2017:3472","RHSA-2017:3473","RHSA-2017:3466"],"bugzilla":"1473622","bugzilla_description":"CVE-2017-7539 Qemu: qemu-nbd crashes due to undefined I/O coroutine","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["qemu-kvm-rhev-10:2.9.0-16.el7_4.11","qemu-kvm-rhev-10:2.9.0-16.el7_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-9524","severity":"moderate","public_date":"2017-05-26T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:1682","RHSA-2017:1681"],"bugzilla":"1460170","bugzilla_description":"CVE-2017-9524 Qemu: nbd: segmentation fault due to client non-negotiation","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["qemu-kvm-10:1.5.3-126.el7_3.10","qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.6.0-28.el7_3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9524.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-7493","severity":"moderate","public_date":"2017-05-16T00:00:00Z","advisories":[],"bugzilla":"1451709","bugzilla_description":"CVE-2017-7493 Qemu: 9pfs: guest privilege escalation in virtfs mapped-file mode","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7493.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-10806","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1468496","bugzilla_description":"CVE-2017-10806 Qemu: usb-redirect: stack buffer overflow in debug logging","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10806.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-9503","severity":"low","public_date":"2017-05-10T00:00:00Z","advisories":[],"bugzilla":"1459477","bugzilla_description":"CVE-2017-9503 Qemu: scsi: megasas: null pointer dereference while processing megasas command","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9503.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2017-8309","severity":"low","public_date":"2017-04-28T00:00:00Z","advisories":["RHSA-2017:2408"],"bugzilla":"1446517","bugzilla_description":"CVE-2017-8309 Qemu: audio: host memory leakage via capture buffer","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8309.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-8379","severity":"low","public_date":"2017-04-28T00:00:00Z","advisories":["RHSA-2017:2408"],"bugzilla":"1446547","bugzilla_description":"CVE-2017-8379 Qemu: input: host memory lekage via keyboard events","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8379.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-8112","severity":"low","public_date":"2017-04-25T00:00:00Z","advisories":[],"bugzilla":"1445621","bugzilla_description":"CVE-2017-8112 Qemu: scsi: vmw_pvscsi: infinite loop in pvscsi_log2","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8112.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-8380","severity":"low","public_date":"2017-04-24T00:00:00Z","advisories":[],"bugzilla":"1446577","bugzilla_description":"CVE-2017-8380 Qemu: scsi: megasas: out-of-bounds read in megasas_mmio_write","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8380.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7471","severity":"important","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443401","bugzilla_description":"CVE-2017-7471 Qemu: 9p: virtfs allows guest to change filesystem attributes on host","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7471.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2017-8086","severity":"low","public_date":"2017-04-10T00:00:00Z","advisories":[],"bugzilla":"1444781","bugzilla_description":"CVE-2017-8086 Qemu: 9pfs: host memory leakage via v9pfs_list_xattr","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8086.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-7377","severity":"low","public_date":"2017-03-28T00:00:00Z","advisories":[],"bugzilla":"1437871","bugzilla_description":"CVE-2017-7377 Qemu: 9pfs: host memory leakage via v9fs_create","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7377.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-9373","severity":"low","public_date":"2017-03-16T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1458270","bugzilla_description":"CVE-2017-9373 Qemu: ide: ahci host memory leakage during hotunplug","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9373.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-7980","severity":"important","public_date":"2017-03-15T00:00:00Z","advisories":["RHSA-2017:0984","RHSA-2017:0983","RHSA-2017:1206","RHSA-2017:1205","RHSA-2017:0988","RHSA-2017:0980","RHSA-2017:1430","RHSA-2017:1441","RHSA-2017:0982","RHSA-2017:0981"],"bugzilla":"1444371","bugzilla_description":"CVE-2017-7980 Qemu: display: cirrus: OOB r/w access issues in bitblt routines","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-10:1.5.3-126.el7_3.9","qemu-kvm-rhev-10:2.6.0-28.el7_3.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7980.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2016-9603","severity":"important","public_date":"2017-03-14T00:00:00Z","advisories":["RHSA-2017:0984","RHSA-2017:0983","RHSA-2017:1206","RHSA-2017:0985","RHSA-2017:1205","RHSA-2017:0988","RHSA-2017:0987","RHSA-2017:0980","RHSA-2017:1441","RHSA-2017:0982","RHSA-2017:0981"],"bugzilla":"1430056","bugzilla_description":"CVE-2016-9603 Qemu: cirrus: heap buffer overflow via vnc connection","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["qemu-kvm-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-rhev-10:2.6.0-28.el7_3.9","qemu-kvm-10:1.5.3-126.el7_3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9603.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2017-7718","severity":"moderate","public_date":"2017-03-14T00:00:00Z","advisories":["RHSA-2017:0984","RHSA-2017:0983","RHSA-2017:1206","RHSA-2017:1205","RHSA-2017:0988","RHSA-2017:0980","RHSA-2017:1431","RHSA-2017:1430","RHSA-2017:1441","RHSA-2017:0982","RHSA-2017:0981"],"bugzilla":"1443441","bugzilla_description":"CVE-2017-7718 Qemu: display: cirrus: OOB read access issue","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-10:1.5.3-126.el7_3.9","qemu-kvm-rhev-10:2.6.0-28.el7_3.10","qemu-kvm-rhev-10:2.6.0-28.el7_3.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7718.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-2620","severity":"important","public_date":"2017-02-21T00:00:00Z","advisories":["RHSA-2017:0334","RHSA-2017:0328","RHSA-2017:0329","RHSA-2017:0351","RHSA-2017:0350","RHSA-2017:0331","RHSA-2017:0352","RHSA-2017:0396","RHSA-2017:0330","RHSA-2017:0454","RHSA-2017:0333","RHSA-2017:0332"],"bugzilla":"1420484","bugzilla_description":"CVE-2017-2620 Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.6.0-28.el7_3.6","qemu-kvm-rhev-2:0.12.1.2-2.491.el6_8.7","kvm-0:83-277.el5_11","qemu-kvm-2:0.12.1.2-2.491.el6_8.7","qemu-kvm-10:1.5.3-126.el7_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2620.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2017-6414","severity":"low","public_date":"2017-02-21T00:00:00Z","advisories":["RHSA-2017:2408"],"bugzilla":"1427833","bugzilla_description":"CVE-2017-6414 Qemu: libcacard: host memory leakage while creating new APDU","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6414.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-6058","severity":"moderate","public_date":"2017-02-16T00:00:00Z","advisories":[],"bugzilla":"1423358","bugzilla_description":"CVE-2017-6058 Qemu: net: vmxnet3: OOB NetRxPkt::ehdr_buf access when doing vlan stripping","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6058.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-5973","severity":"low","public_date":"2017-02-13T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1421626","bugzilla_description":"CVE-2017-5973 Qemu: usb: infinite loop while doing control transfer in xhci_kick_epctx","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5973.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-9310","severity":"low","public_date":"2017-02-10T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1452620","bugzilla_description":"CVE-2017-9310 Qemu: net: infinite loop in e1000e NIC emulation","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9310.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-9374","severity":"low","public_date":"2017-02-08T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1459132","bugzilla_description":"CVE-2017-9374 Qemu: usb: ehci host memory leakage during hotunplug","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9374.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-6505","severity":"low","public_date":"2017-02-07T00:00:00Z","advisories":[],"bugzilla":"1429432","bugzilla_description":"CVE-2017-6505 Qemu: usb: an infinite loop issue in ohci_service_ed_list","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6505.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-9330","severity":"low","public_date":"2017-02-07T00:00:00Z","advisories":[],"bugzilla":"1457697","bugzilla_description":"CVE-2017-9330 Qemu: usb: ohci: infinite loop due to incorrect return value","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9330.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-5898","severity":"moderate","public_date":"2017-02-03T00:00:00Z","advisories":["RHSA-2017:2392","RHSA-2017:1856"],"bugzilla":"1419699","bugzilla_description":"CVE-2017-5898 Qemu: usb: integer overflow in emulated_apdu_from_guest","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":["qemu-kvm-rhev-10:2.9.0-14.el7","qemu-kvm-10:1.5.3-141.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5898.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-2630","severity":"important","public_date":"2017-02-03T00:00:00Z","advisories":["RHSA-2017:2392"],"bugzilla":"1422415","bugzilla_description":"CVE-2017-2630 Qemu: nbd: oob stack write in client routine drop_sync","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2630.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2017-9375","severity":"low","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1458744","bugzilla_description":"CVE-2017-9375 Qemu: usb: xhci infinite recursive call via xhci_kick_ep","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9375.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-5987","severity":"low","public_date":"2017-01-31T00:00:00Z","advisories":[],"bugzilla":"1421995","bugzilla_description":"CVE-2017-5987 Qemu: sd: infinite loop issue in multi block transfers","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5987.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-5667","severity":"moderate","public_date":"2017-01-30T00:00:00Z","advisories":[],"bugzilla":"1417559","bugzilla_description":"CVE-2017-5667 Qemu: sd: sdhci OOB access during multi block SDMA transfer","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5667.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-18030","severity":"low","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1530360","bugzilla_description":"CVE-2017-18030 Qemu: Out-of-bounds access in cirrus_invalidate_region routine","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18030.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-2615","severity":"important","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0334","RHSA-2017:0328","RHSA-2017:0329","RHSA-2017:0309","RHSA-2017:0350","RHSA-2017:0331","RHSA-2017:0396","RHSA-2017:0330","RHSA-2017:0454","RHSA-2017:0333","RHSA-2017:0344","RHSA-2017:0332"],"bugzilla":"1418200","bugzilla_description":"CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt copy backward mode","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.6.0-28.el7_3.6","qemu-kvm-rhev-2:0.12.1.2-2.491.el6_8.6","qemu-kvm-rhev-2:0.12.1.2-2.491.el6_8.7","kvm-0:83-277.el5_11","qemu-kvm-2:0.12.1.2-2.491.el6_8.6","qemu-kvm-10:1.5.3-126.el7_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2615.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2017-5857","severity":"low","public_date":"2017-01-23T00:00:00Z","advisories":[],"bugzilla":"1418382","bugzilla_description":"CVE-2017-5857 Qemu: display: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5857.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-9060","severity":"low","public_date":"2017-01-22T00:00:00Z","advisories":[],"bugzilla":"1452597","bugzilla_description":"CVE-2017-9060 Qemu: virtio-gpu: host memory leakage in Virtio GPU device","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9060.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9602","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":[],"bugzilla":"1413929","bugzilla_description":"CVE-2016-9602 Qemu: 9p: virtfs allows guest to access host filesystem","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9602.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2017-5525","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1414108","bugzilla_description":"CVE-2017-5525 Qemu: audio: memory leakage in ac97 device","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5525.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2017-5526","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1414209","bugzilla_description":"CVE-2017-5526 Qemu: audio: memory leakage in es1370 device","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5526.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2017-5579","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1416157","bugzilla_description":"CVE-2017-5579 Qemu: serial: host memory leakage 16550A UART emulation","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5579.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2017-5931","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":[],"bugzilla":"1420092","bugzilla_description":"CVE-2017-5931 Qemu: virtio: integer overflow in handling virtio-crypto requests","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5931.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-6000","severity":"low","public_date":"2017-01-04T00:00:00Z","advisories":[],"bugzilla":"1422656","bugzilla_description":"REJECTED CVE-2017-6000 Qemu: crypto: memory leakage in qcrypto_ivgen_essiv_init","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6000.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-5552","severity":"low","public_date":"2017-01-03T00:00:00Z","advisories":[],"bugzilla":"1415281","bugzilla_description":"CVE-2017-5552 Qemu: display: virtio-gpu-3d: memory leakage in virgl_resource_attach_backing","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5552.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-5578","severity":"low","public_date":"2017-01-03T00:00:00Z","advisories":[],"bugzilla":"1415795","bugzilla_description":"CVE-2017-5578 Qemu: display: virtio-gpu: host memory leakage in virtio_gpu_resource_attach_backing","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5578.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-5856","severity":"low","public_date":"2017-01-02T00:00:00Z","advisories":[],"bugzilla":"1418342","bugzilla_description":"CVE-2017-5856 Qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5856.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-10155","severity":"low","public_date":"2016-12-22T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1415199","bugzilla_description":"CVE-2016-10155 Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10155.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2016-10028","severity":"moderate","public_date":"2016-12-11T00:00:00Z","advisories":[],"bugzilla":"1406367","bugzilla_description":"CVE-2016-10028 Qemu: display: virtio-gpu-3d: OOB access while reading virgl capabilities","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10028.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2016-9637","severity":"important","public_date":"2016-12-06T00:00:00Z","advisories":["RHSA-2016:2963"],"bugzilla":"1397043","bugzilla_description":"CVE-2016-9637 XSA199 Xen: qemu ioport out-of-bounds array access (XSA-199)","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-125","affected_packages":["xen-0:3.0.3-148.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9637.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2017-2633","severity":"moderate","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:1206","RHSA-2017:1205","RHSA-2017:1856","RHSA-2017:1441"],"bugzilla":"1425939","bugzilla_description":"CVE-2017-2633 Qemu: VNC: memory corruption due to unchecked resolution limit","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-120","affected_packages":["qemu-kvm-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-10:1.5.3-141.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2633.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2016-9776","severity":"low","public_date":"2016-11-29T00:00:00Z","advisories":[],"bugzilla":"1400829","bugzilla_description":"CVE-2016-9776 Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9776.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9912","severity":"low","public_date":"2016-11-28T00:00:00Z","advisories":[],"bugzilla":"1402284","bugzilla_description":"CVE-2016-9912 Qemu: display: virtio-gpu: memory leakage when destroying gpu resource","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9912.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9923","severity":"low","public_date":"2016-11-24T00:00:00Z","advisories":[],"bugzilla":"1402967","bugzilla_description":"CVE-2016-9923 Qemu: char: use-after-free issue during hotplug and unplugging device","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9923.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2016-9381","severity":"important","public_date":"2016-11-22T00:00:00Z","advisories":[],"bugzilla":"1392938","bugzilla_description":"CVE-2016-9381 xsa197 xen: qemu incautious about shared ring processing (XSA-197)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9381.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9913","severity":"low","public_date":"2016-11-21T00:00:00Z","advisories":[],"bugzilla":"1402276","bugzilla_description":"CVE-2016-9913 CVE-2016-9914 CVE-2016-9915 CVE-2016-9916 Qemu: 9pfs: memory leakage via proxy/handle callbacks","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9913.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9914","severity":"low","public_date":"2016-11-21T00:00:00Z","advisories":[],"bugzilla":"1402276","bugzilla_description":"CVE-2016-9913 CVE-2016-9914 CVE-2016-9915 CVE-2016-9916 Qemu: 9pfs: memory leakage via proxy/handle callbacks","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9914.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9915","severity":"low","public_date":"2016-11-21T00:00:00Z","advisories":[],"bugzilla":"1402276","bugzilla_description":"CVE-2016-9913 CVE-2016-9914 CVE-2016-9915 CVE-2016-9916 Qemu: 9pfs: memory leakage via proxy/handle callbacks","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9915.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9916","severity":"low","public_date":"2016-11-21T00:00:00Z","advisories":[],"bugzilla":"1402276","bugzilla_description":"CVE-2016-9913 CVE-2016-9914 CVE-2016-9915 CVE-2016-9916 Qemu: 9pfs: memory leakage via proxy/handle callbacks","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9916.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9911","severity":"low","public_date":"2016-11-08T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1402272","bugzilla_description":"CVE-2016-9911 Qemu: usb: ehci: memory leakage in ehci_init_transfer","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9911.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9907","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1402265","bugzilla_description":"CVE-2016-9907 Qemu: usb: redirector: memory leakage when destroying redirector","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9907.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9845","severity":"low","public_date":"2016-11-01T00:00:00Z","advisories":[],"bugzilla":"1402245","bugzilla_description":"CVE-2016-9845 Qemu: display: virtio-gpu-3d: information leakage in virgl_cmd_get_capset_info","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9845.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2016-9846","severity":"low","public_date":"2016-11-01T00:00:00Z","advisories":[],"bugzilla":"1402255","bugzilla_description":"CVE-2016-9846 Qemu: display: virtio-gpu: memory leakage while updating cursor data","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9846.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9908","severity":"low","public_date":"2016-11-01T00:00:00Z","advisories":[],"bugzilla":"1402262","bugzilla_description":"CVE-2016-9908 Qemu: display: virtio-gpu: information leakage in virgl_cmd_get_capset","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9908.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2016-8910","severity":"low","public_date":"2016-10-21T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1388046","bugzilla_description":"CVE-2016-8910 Qemu: net: rtl8139: infinite loop while transmit in C+ mode","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8910.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-8909","severity":"low","public_date":"2016-10-20T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1388052","bugzilla_description":"CVE-2016-8909 Qemu: audio: intel-hda: infinite loop in processing dma buffer stream","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8909.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9921","severity":"low","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1334398","bugzilla_description":"CVE-2016-9921 CVE-2016-9922 Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9921.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9922","severity":"low","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1334398","bugzilla_description":"CVE-2016-9921 CVE-2016-9922 Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9922.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9104","severity":"low","public_date":"2016-10-13T00:00:00Z","advisories":[],"bugzilla":"1389686","bugzilla_description":"CVE-2016-9104 Qemu: 9pfs: integer overflow leading to OOB access","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9104.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-8667","severity":"low","public_date":"2016-10-12T00:00:00Z","advisories":[],"bugzilla":"1384874","bugzilla_description":"CVE-2016-8667 Qemu: hw: dma: divide by zero error in set_next_tick","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8667.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-8668","severity":"low","public_date":"2016-10-12T00:00:00Z","advisories":[],"bugzilla":"1384896","bugzilla_description":"CVE-2016-8668 Qemu: net: OOB buffer access in rocker switch emulation","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8668.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2016-8669","severity":"low","public_date":"2016-10-12T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1384909","bugzilla_description":"CVE-2016-8669 Qemu: char: divide by zero error in serial_update_parameters","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8669.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9105","severity":"low","public_date":"2016-10-12T00:00:00Z","advisories":[],"bugzilla":"1389702","bugzilla_description":"CVE-2016-9105 Qemu: 9pfs: memory leakage in v9fs_link","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9105.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9106","severity":"low","public_date":"2016-10-12T00:00:00Z","advisories":[],"bugzilla":"1389712","bugzilla_description":"CVE-2016-9106 Qemu: 9pfs: memory leakage in v9fs_write","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9106.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9102","severity":"low","public_date":"2016-10-10T00:00:00Z","advisories":[],"bugzilla":"1389550","bugzilla_description":"CVE-2016-9102 Qemu: 9pfs: memory leakage when creating extended attribute","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9102.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9101","severity":"low","public_date":"2016-10-08T00:00:00Z","advisories":[],"bugzilla":"1389538","bugzilla_description":"CVE-2016-9101 Qemu: net: eepro100 memory leakage at device unplug","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9101.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9103","severity":"low","public_date":"2016-10-08T00:00:00Z","advisories":[],"bugzilla":"1389642","bugzilla_description":"CVE-2016-9103 Qemu: 9pfs: information leakage via xattr","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9103.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2016-8576","severity":"low","public_date":"2016-10-06T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1333425","bugzilla_description":"CVE-2016-8576 Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8576.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7909","severity":"low","public_date":"2016-09-30T00:00:00Z","advisories":[],"bugzilla":"1329538","bugzilla_description":"CVE-2016-7909 Qemu: net: pcnet: infinite loop in pcnet_rdra_addr()","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7909.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-8577","severity":"low","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1383285","bugzilla_description":"CVE-2016-8577 Qemu: 9pfs: host memory leakage in v9fs_read","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8577.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-8578","severity":"low","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1383291","bugzilla_description":"CVE-2016-8578 Qemu: 9pfs: potential NULL dereferencein 9pfs routines","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8578.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7995","severity":"low","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1382668","bugzilla_description":"CVE-2016-7995 Qemu: usb: hcd-ehci: memory leak in ehci_process_itd","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7995.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7161","severity":"moderate","public_date":"2016-09-23T00:00:00Z","advisories":[],"bugzilla":"1379297","bugzilla_description":"CVE-2016-7161 Qemu: net: xilinx_ethlite: heap buffer overflow in eth_rx","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7161.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2016-7907","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1327206","bugzilla_description":"CVE-2016-7907 Qemu: net: inifinte loop in imx_fec_do_tx() function","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7907.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7908","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1327465","bugzilla_description":"CVE-2016-7908 Qemu: net: Infinite loop in mcf_fec_do_tx()","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7908.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7994","severity":"low","public_date":"2016-09-19T00:00:00Z","advisories":[],"bugzilla":"1382666","bugzilla_description":"CVE-2016-7994 Qemu: virtio-gpu: memory leak in virtio_gpu_resource_create_2d","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7994.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7422","severity":"low","public_date":"2016-09-15T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1376755","bugzilla_description":"CVE-2016-7422 Qemu: virtio: null pointer dereference in virtqueu_map_desc","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7422.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.6"},{"CVE":"CVE-2016-7423","severity":"moderate","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1376776","bugzilla_description":"CVE-2016-7423 Qemu: scsi: mptsas: OOB access when freeing MPTSASRequest object","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7423.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-7466","severity":"low","public_date":"2016-09-13T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1377837","bugzilla_description":"CVE-2016-7466 Qemu: usb: xhci memory leakage during device unplug","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7466.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7170","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1374702","bugzilla_description":"CVE-2016-7170 Qemu: vmware_vga: OOB stack memory access when processing svga command","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7170.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2016-7421","severity":"low","public_date":"2016-09-07T00:00:00Z","advisories":[],"bugzilla":"1376731","bugzilla_description":"CVE-2016-7421 Qemu: scsi: pvscsi: infinite loop when processing IO requests","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7421.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7156","severity":"low","public_date":"2016-09-03T00:00:00Z","advisories":[],"bugzilla":"1373478","bugzilla_description":"CVE-2016-7156 Qemu: scsi: pvscsi: infintie loop when building SG list","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7156.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.6"},{"CVE":"CVE-2016-7155","severity":"moderate","public_date":"2016-08-31T00:00:00Z","advisories":[],"bugzilla":"1373462","bugzilla_description":"CVE-2016-7155 Qemu: scsi: pvscsi: OOB read and infinite loop while setting descriptor rings","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7155.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-7157","severity":"low","public_date":"2016-08-31T00:00:00Z","advisories":[],"bugzilla":"1373504","bugzilla_description":"CVE-2016-7157 Qemu: scsi: mptsas: invalid memory access while building configuration pages","cvss_score":2.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7157.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2016-7116","severity":"low","public_date":"2016-08-11T00:00:00Z","advisories":[],"bugzilla":"1346349","bugzilla_description":"CVE-2016-7116 Qemu: 9p: directory traversal flaw in 9p virtio backend","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7116.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-6836","severity":"low","public_date":"2016-08-11T00:00:00Z","advisories":[],"bugzilla":"1366369","bugzilla_description":"CVE-2016-6836 Qemu: net: vmxnet: Information leakage in vmxnet3_complete_packet","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6836.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2016-6833","severity":"low","public_date":"2016-08-09T00:00:00Z","advisories":[],"bugzilla":"1368980","bugzilla_description":"CVE-2016-6833 Qemu: net: vmxnet3: use-after-free while writing to device","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6833.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2016-6834","severity":"low","public_date":"2016-08-09T00:00:00Z","advisories":[],"bugzilla":"1368990","bugzilla_description":"CVE-2016-6834 Qemu: net: vmxnet3: an infinite loop during packet fragmentation","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6834.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2016-6835","severity":"moderate","public_date":"2016-08-09T00:00:00Z","advisories":["RHSA-2017:2392"],"bugzilla":"1369012","bugzilla_description":"CVE-2016-6835 Qemu: net: vmxnet: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6835.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2016-6888","severity":"low","public_date":"2016-08-09T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1369031","bugzilla_description":"CVE-2016-6888 Qemu: net: vmxnet: integer overflow in packet initialisation","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6888.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2016-5403","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":["RHSA-2016:1585","RHSA-2016:1652","RHSA-2016:1586","RHSA-2016:1606","RHSA-2016:1607","RHSA-2016:1943","RHSA-2016:1756","RHSA-2016:1653","RHSA-2016:1763","RHSA-2016:1654","RHSA-2016:1655"],"bugzilla":"1358359","bugzilla_description":"CVE-2016-5403 Qemu: virtio: unbounded memory allocation on host via guest leading to DoS","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["qemu-kvm-rhev-10:2.3.0-31.el7_2.21","qemu-kvm-10:1.5.3-105.el7_2.7","qemu-kvm-rhev-2:0.12.1.2-2.491.el6_8.3","kvm-0:83-276.el5_11","qemu-kvm-2:0.12.1.2-2.491.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5403.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2016-6490","severity":"low","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361427","bugzilla_description":"CVE-2016-6490 Qemu: virtio: infinite loop in virtqueue_pop","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6490.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.4"},{"CVE":"CVE-2016-6351","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1360599","bugzilla_description":"CVE-2016-6351 Qemu: scsi: esp: OOB write access in esp_do_dma","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6351.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2016-5337","severity":"low","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343909","bugzilla_description":"CVE-2016-5337 Qemu: scsi: megasas: information leakage in megasas_ctrl_get_info","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5337.json"},{"CVE":"CVE-2016-5238","severity":"moderate","public_date":"2016-05-31T00:00:00Z","advisories":[],"bugzilla":"1341931","bugzilla_description":"CVE-2016-5238 Qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5238.json"},{"CVE":"CVE-2016-4454","severity":"moderate","public_date":"2016-05-30T00:00:00Z","advisories":[],"bugzilla":"1336429","bugzilla_description":"CVE-2016-4454 Qemu: display: vmsvga: out-of-bounds read in vmsvga_fifo_read_raw() routine","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4454.json"},{"CVE":"CVE-2016-4453","severity":"low","public_date":"2016-05-30T00:00:00Z","advisories":[],"bugzilla":"1336650","bugzilla_description":"CVE-2016-4453 Qemu: display: vmsvga: infinite loop in vmsvga_fifo_run() routine","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4453.json"},{"CVE":"CVE-2016-5338","severity":"moderate","public_date":"2016-05-30T00:00:00Z","advisories":[],"bugzilla":"1343323","bugzilla_description":"CVE-2016-5338 Qemu: scsi: esp: OOB r/w access while processing ESP_FIFO","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5338.json"},{"CVE":"CVE-2016-5107","severity":"moderate","public_date":"2016-05-25T00:00:00Z","advisories":[],"bugzilla":"1336461","bugzilla_description":"CVE-2016-5107 Qemu: scsi: megasas: out-of-bounds read in megasas_lookup_frame() function","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5107.json"},{"CVE":"CVE-2016-5106","severity":"moderate","public_date":"2016-05-25T00:00:00Z","advisories":[],"bugzilla":"1339578","bugzilla_description":"CVE-2016-5106 Qemu: scsi: megasas: out-of-bounds write while setting controller properties","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5106.json"},{"CVE":"CVE-2016-5105","severity":"low","public_date":"2016-05-25T00:00:00Z","advisories":[],"bugzilla":"1339583","bugzilla_description":"CVE-2016-5105 Qemu: scsi: megasas: stack information leakage while reading configuration","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5105.json"},{"CVE":"CVE-2016-4964","severity":"low","public_date":"2016-05-24T00:00:00Z","advisories":[],"bugzilla":"1339155","bugzilla_description":"CVE-2016-4964 Qemu: scsi: mptsas infinite loop in mptsas_fetch_requests","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4964.json"},{"CVE":"CVE-2016-5126","severity":"moderate","public_date":"2016-05-24T00:00:00Z","advisories":["RHSA-2016:1606","RHSA-2016:1607","RHSA-2016:1756","RHSA-2016:1653","RHSA-2016:1763","RHSA-2016:1654","RHSA-2016:1655"],"bugzilla":"1340924","bugzilla_description":"CVE-2016-5126 Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-120","affected_packages":["qemu-kvm-rhev-10:2.3.0-31.el7_2.21","qemu-kvm-10:1.5.3-105.el7_2.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5126.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2016-4952","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":[],"bugzilla":"1334384","bugzilla_description":"CVE-2016-4952 Qemu: scsi: pvscsi: out-of-bounds access issue in pvsci_ring_init_msg/data routines","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4952.json"},{"CVE":"CVE-2014-3672","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":[],"bugzilla":"1339123","bugzilla_description":"CVE-2014-3672 xen: Unrestricted qemu logging","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3672.json"},{"CVE":"CVE-2016-4439","severity":"moderate","public_date":"2016-05-19T00:00:00Z","advisories":[],"bugzilla":"1337502","bugzilla_description":"CVE-2016-4439 Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4439.json"},{"CVE":"CVE-2016-4441","severity":"moderate","public_date":"2016-05-19T00:00:00Z","advisories":[],"bugzilla":"1337505","bugzilla_description":"CVE-2016-4441 Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4441.json"},{"CVE":"CVE-2016-10029","severity":"moderate","public_date":"2016-05-19T00:00:00Z","advisories":[],"bugzilla":"1406390","bugzilla_description":"CVE-2016-10029 Qemu: display: virtio-gpu: out of bounds read in virtio_gpu_set_scanout","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10029.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2016-3712","severity":"moderate","public_date":"2016-05-09T00:00:00Z","advisories":["RHSA-2017:0621","RHSA-2016:2585"],"bugzilla":"1318712","bugzilla_description":"CVE-2016-3712 qemu-kvm: Out-of-bounds read when creating weird vga screen surface","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-2:0.12.1.2-2.503.el6","qemu-kvm-10:1.5.3-126.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3712.json"},{"CVE":"CVE-2016-3710","severity":"important","public_date":"2016-05-09T00:00:00Z","advisories":["RHSA-2016:1000","RHSA-2016:1001","RHSA-2016:1002","RHSA-2016:1943","RHSA-2016:0997","RHSA-2016:1019","RHSA-2016:0724","RHSA-2016:0999","RHSA-2016:0725","RHSA-2016:1224"],"bugzilla":"1331401","bugzilla_description":"CVE-2016-3710 qemu: incorrect banked access bounds checking in vga module","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["qemu-kvm-rhev-10:2.3.0-31.el7_2.13","kvm-0:83-276.el5_11","qemu-kvm-10:1.5.3-105.el7_2.4","qemu-kvm-2:0.12.1.2-2.491.el6_8.1","qemu-kvm-rhev-2:0.12.1.2-2.491.el6_8.1","qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3710.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2016-4037","severity":"low","public_date":"2016-04-18T00:00:00Z","advisories":[],"bugzilla":"1325129","bugzilla_description":"CVE-2016-4037 Qemu: usb: Infinite loop vulnerability in usb_ehci using siTD process","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4037.json"},{"CVE":"CVE-2016-4020","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392","RHSA-2017:1856"],"bugzilla":"1313686","bugzilla_description":"CVE-2016-4020 Qemu: i386: leakage of stack memory to guest in kvmvapic.c","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7","qemu-kvm-10:1.5.3-141.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4020.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.4"},{"CVE":"CVE-2016-4001","severity":"moderate","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1325884","bugzilla_description":"CVE-2016-4001 Qemu: net: buffer overflow in stellaris_enet emulator","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4001.json"},{"CVE":"CVE-2016-4002","severity":"moderate","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1326082","bugzilla_description":"CVE-2016-4002 Qemu: net: buffer overflow in MIPSnet emulator","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4002.json"},{"CVE":"CVE-2016-2857","severity":"low","public_date":"2016-02-17T00:00:00Z","advisories":["RHSA-2017:0334","RHSA-2016:2706","RHSA-2017:0083","RHSA-2016:2671","RHSA-2016:2670","RHSA-2017:0309","RHSA-2016:2705","RHSA-2016:2704","RHSA-2017:0350","RHSA-2017:0344"],"bugzilla":"1296567","bugzilla_description":"CVE-2016-2857 Qemu: net: out of bounds read in net_checksum_calculate()","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-rhev-10:2.6.0-27.el7","qemu-kvm-rhev-10:2.6.0-28.el7_3.6","qemu-kvm-rhev-2:0.12.1.2-2.491.el6_8.6","qemu-kvm-rhev-2:0.12.1.2-2.491.el6_8.7","qemu-kvm-10:1.5.3-126.el7_3.3","qemu-kvm-2:0.12.1.2-2.491.el6_8.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2857.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L","cvss3_score":"4.7"},{"CVE":"CVE-2016-2391","severity":"low","public_date":"2016-02-16T00:00:00Z","advisories":[],"bugzilla":"1304794","bugzilla_description":"CVE-2016-2391 Qemu: usb: multiple eof_timers in ohci module leads to null pointer dereference","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2391.json"},{"CVE":"CVE-2016-2392","severity":"low","public_date":"2016-02-11T00:00:00Z","advisories":[],"bugzilla":"1302299","bugzilla_description":"CVE-2016-2392 Qemu: usb: null pointer dereference in remote NDIS control message handling","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2392.json"},{"CVE":"CVE-2016-2538","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1303120","bugzilla_description":"CVE-2016-2538 Qemu: usb: integer overflow in remote NDIS control message handling","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2538.json"},{"CVE":"CVE-2016-2841","severity":"low","public_date":"2016-02-02T00:00:00Z","advisories":[],"bugzilla":"1303106","bugzilla_description":"CVE-2016-2841 Qemu: net: ne2000: infinite loop in ne2000_receive","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2841.json"},{"CVE":"CVE-2016-2198","severity":"low","public_date":"2016-01-29T00:00:00Z","advisories":[],"bugzilla":"1301643","bugzilla_description":"CVE-2016-2198 Qemu: usb: ehci null pointer dereference in ehci_caps_write","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2198.json"},{"CVE":"CVE-2016-2197","severity":"low","public_date":"2016-01-28T00:00:00Z","advisories":[],"bugzilla":"1302057","bugzilla_description":"CVE-2016-2197 Qemu: ide: ahci null pointer dereference when using FIS CLB engines","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2197.json"},{"CVE":"CVE-2015-8817","severity":"low","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2016:2706","RHSA-2016:2671","RHSA-2016:2670","RHSA-2016:2705","RHSA-2016:2704"],"bugzilla":"1300771","bugzilla_description":"CVE-2015-8817 CVE-2015-8818 Qemu: OOB access in address_space_rw leads to segmentation fault","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.6.0-27.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8817.json"},{"CVE":"CVE-2015-8818","severity":"low","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2016:2706","RHSA-2016:2671","RHSA-2016:2670","RHSA-2016:2705","RHSA-2016:2704"],"bugzilla":"1300771","bugzilla_description":"CVE-2015-8817 CVE-2015-8818 Qemu: OOB access in address_space_rw leads to segmentation fault","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.6.0-27.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8818.json"},{"CVE":"CVE-2016-2858","severity":"low","public_date":"2016-01-22T00:00:00Z","advisories":[],"bugzilla":"1314676","bugzilla_description":"CVE-2016-2858 Qemu: rng-random: arbitrary stack based allocation leading to corruption","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2858.json"},{"CVE":"CVE-2016-1981","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:2585"],"bugzilla":"1298570","bugzilla_description":"CVE-2016-1981 Qemu: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["qemu-kvm-10:1.5.3-126.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1981.json"},{"CVE":"CVE-2016-1568","severity":"important","public_date":"2016-01-08T00:00:00Z","advisories":["RHSA-2016:0087","RHSA-2016:0088","RHSA-2016:0084","RHSA-2016:0086"],"bugzilla":"1288532","bugzilla_description":"CVE-2016-1568 Qemu: ide: ahci use-after-free vulnerability in aio port commands","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["qemu-kvm-rhev-10:2.3.0-31.el7_2.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1568.json"},{"CVE":"CVE-2016-1714","severity":"important","public_date":"2016-01-05T00:00:00Z","advisories":["RHSA-2016:0087","RHSA-2016:0088","RHSA-2016:0083","RHSA-2016:0084","RHSA-2016:0085","RHSA-2016:0086","RHSA-2016:0081","RHSA-2016:0082"],"bugzilla":"1296060","bugzilla_description":"CVE-2016-1714 Qemu: nvram: OOB r/w access in processing firmware configurations","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-2:0.12.1.2-2.479.el6_7.4","qemu-kvm-rhev-10:2.3.0-31.el7_2.7","qemu-kvm-10:1.5.3-105.el7_2.3","qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1714.json"},{"CVE":"CVE-2015-8743","severity":"low","public_date":"2015-12-30T00:00:00Z","advisories":[],"bugzilla":"1264929","bugzilla_description":"CVE-2015-8743 Qemu: net: ne2000: OOB memory access in ioport r/w functions","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8743.json"},{"CVE":"CVE-2015-8666","severity":"low","public_date":"2015-12-24T00:00:00Z","advisories":[],"bugzilla":"1283722","bugzilla_description":"CVE-2015-8666 Qemu: acpi: heap based buffer overrun during VM migration","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8666.json"},{"CVE":"CVE-2015-8701","severity":"low","public_date":"2015-12-23T00:00:00Z","advisories":[],"bugzilla":"1286971","bugzilla_description":"CVE-2015-8701 Qemu: net: rocker: stack buffer overflow(off-by-one) in tx_consume routine","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8701.json"},{"CVE":"CVE-2015-8613","severity":"low","public_date":"2015-12-21T00:00:00Z","advisories":[],"bugzilla":"1284008","bugzilla_description":"CVE-2015-8613 Qemu: scsi: stack based buffer overflow in megasas_ctrl_get_info","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8613.json"},{"CVE":"CVE-2016-1922","severity":"low","public_date":"2015-12-18T00:00:00Z","advisories":[],"bugzilla":"1283934","bugzilla_description":"CVE-2016-1922 Qemu: i386: null pointer dereference in vapic_write()","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1922.json"},{"CVE":"CVE-2015-8619","severity":"low","public_date":"2015-12-17T00:00:00Z","advisories":[],"bugzilla":"1283926","bugzilla_description":"CVE-2015-8619 Qemu: hmp: stack based OOB write in hmp_sendkey routine","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8619.json"},{"CVE":"CVE-2015-8556","severity":"important","public_date":"2015-12-14T00:00:00Z","advisories":[],"bugzilla":"1292211","bugzilla_description":"CVE-2015-8556 Qemu: virtfs: local privilege escalation via virtfs-proxy-helper","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8556.json"},{"CVE":"CVE-2015-8558","severity":"low","public_date":"2015-12-10T00:00:00Z","advisories":[],"bugzilla":"1277983","bugzilla_description":"CVE-2015-8558 Qemu: usb: infinite loop in ehci_advance_state results in DoS","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8558.json"},{"CVE":"CVE-2015-8504","severity":"moderate","public_date":"2015-12-03T00:00:00Z","advisories":[],"bugzilla":"1289541","bugzilla_description":"CVE-2015-8504 Qemu: ui: vnc: avoid floating point exception","cvss_score":6.3,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8504.json"},{"CVE":"CVE-2015-8567","severity":"low","public_date":"2015-12-02T00:00:00Z","advisories":[],"bugzilla":"1289816","bugzilla_description":"CVE-2015-8567 CVE-2015-8568 Qemu: net: vmxnet3: host memory leakage","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8567.json"},{"CVE":"CVE-2015-8568","severity":"low","public_date":"2015-12-02T00:00:00Z","advisories":[],"bugzilla":"1289816","bugzilla_description":"CVE-2015-8567 CVE-2015-8568 Qemu: net: vmxnet3: host memory leakage","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8568.json"},{"CVE":"CVE-2015-7504","severity":"important","public_date":"2015-11-30T00:00:00Z","advisories":["RHSA-2015:2694","RHSA-2015:2695","RHSA-2015:2696"],"bugzilla":"1261461","bugzilla_description":"CVE-2015-7504 Qemu: net: pcnet: heap overflow vulnerability in pcnet_receive","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["qemu-kvm-2:0.12.1.2-2.479.el6_7.3","qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7504.json"},{"CVE":"CVE-2015-7512","severity":"important","public_date":"2015-11-30T00:00:00Z","advisories":["RHSA-2015:2694","RHSA-2015:2695","RHSA-2015:2696"],"bugzilla":"1285061","bugzilla_description":"CVE-2015-7512 Qemu: net: pcnet: buffer overflow in non-loopback mode","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["qemu-kvm-2:0.12.1.2-2.479.el6_7.3","qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7512.json"},{"CVE":"CVE-2015-8345","severity":"moderate","public_date":"2015-11-20T00:00:00Z","advisories":[],"bugzilla":"1285213","bugzilla_description":"CVE-2015-8345 Qemu: net: eepro100: infinite loop in processing command block list","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8345.json"},{"CVE":"CVE-2015-7549","severity":"low","public_date":"2015-10-24T00:00:00Z","advisories":[],"bugzilla":"1291137","bugzilla_description":"CVE-2015-7549 Qemu: pci: null pointer dereference issue","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7549.json"},{"CVE":"CVE-2015-8744","severity":"low","public_date":"2015-10-12T00:00:00Z","advisories":[],"bugzilla":"1270871","bugzilla_description":"CVE-2015-8744 Qemu: net: vmxnet3: incorrect l2 header validation leads to a crash via assert(2) call","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8744.json"},{"CVE":"CVE-2015-8745","severity":"low","public_date":"2015-10-12T00:00:00Z","advisories":[],"bugzilla":"1270876","bugzilla_description":"CVE-2015-8745 Qemu: net: vmxnet3: reading IMR registers leads to a crash via assert(2) call","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8745.json"},{"CVE":"CVE-2015-7295","severity":"moderate","public_date":"2015-09-18T00:00:00Z","advisories":[],"bugzilla":"1264381","bugzilla_description":"CVE-2015-7295 Qemu: net: virtio-net possible remote DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7295.json"},{"CVE":"CVE-2015-5278","severity":"moderate","public_date":"2015-09-15T00:00:00Z","advisories":[],"bugzilla":"1256661","bugzilla_description":"CVE-2015-5278 qemu: Infinite loop in ne2000_receive() function","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5278.json"},{"CVE":"CVE-2015-5279","severity":"important","public_date":"2015-09-15T00:00:00Z","advisories":["RHSA-2015:1924","RHSA-2015:1925","RHSA-2015:2065","RHSA-2015:1896","RHSA-2015:1923"],"bugzilla":"1256672","bugzilla_description":"CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["kvm-0:83-274.el5_11","qemu-kvm-2:0.12.1.2-2.479.el6_7.2","xen-0:3.0.3-147.el5_11","qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5279.json"},{"CVE":"CVE-2015-6855","severity":"low","public_date":"2015-09-09T00:00:00Z","advisories":[],"bugzilla":"1260080","bugzilla_description":"CVE-2015-6855 Qemu: ide: divide by zero issue","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6855.json"},{"CVE":"CVE-2015-6815","severity":"low","public_date":"2015-09-05T00:00:00Z","advisories":[],"bugzilla":"1260076","bugzilla_description":"CVE-2015-6815 qemu: net: e1000: infinite loop issue","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6815.json"},{"CVE":"CVE-2015-5225","severity":"important","public_date":"2015-08-22T00:00:00Z","advisories":["RHSA-2015:1837","RHSA-2015:1772"],"bugzilla":"1255896","bugzilla_description":"CVE-2015-5225 Qemu: ui: vnc: heap memory corruption in vnc_refresh_server_surface","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.1.2-23.el7_1.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5225.json"},{"CVE":"CVE-2015-5165","severity":"moderate","public_date":"2015-08-03T00:00:00Z","advisories":["RHSA-2015:1739","RHSA-2015:1718","RHSA-2015:1793","RHSA-2015:1683","RHSA-2015:1674","RHSA-2015:1740","RHSA-2015:1833"],"bugzilla":"1248760","bugzilla_description":"CVE-2015-5165 Qemu: rtl8139 uninitialized heap memory information leakage to guest (XSA-140)","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":["qemu-kvm-2:0.12.1.2-2.479.el6_7.1","qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.1","qemu-kvm-10:1.5.3-86.el7_1.6","qemu-kvm-rhev-10:2.1.2-23.el7_1.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5165.json"},{"CVE":"CVE-2015-5166","severity":"moderate","public_date":"2015-08-03T00:00:00Z","advisories":[],"bugzilla":"1248997","bugzilla_description":"CVE-2015-5166 Qemu: BlockBackend object use after free issue (XSA-139)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5166.json"},{"CVE":"CVE-2015-5154","severity":"important","public_date":"2015-07-27T00:00:00Z","advisories":["RHSA-2015:1512","RHSA-2015:1508","RHSA-2015:1507"],"bugzilla":"1243563","bugzilla_description":"CVE-2015-5154 qemu: ide: atapi: heap overflow during I/O buffer memory access","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["qemu-kvm-10:1.5.3-86.el7_1.5","qemu-kvm-rhev-10:2.1.2-23.el7_1.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5154.json"},{"CVE":"CVE-2015-5745","severity":"low","public_date":"2015-07-23T00:00:00Z","advisories":[],"bugzilla":"1251157","bugzilla_description":"CVE-2015-5745 kernel: qemu buffer overflow in virtio-serial","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5745.json"},{"CVE":"CVE-2015-5158","severity":"moderate","public_date":"2015-07-22T00:00:00Z","advisories":[],"bugzilla":"1244332","bugzilla_description":"CVE-2015-5158 Qemu: scsi stack buffer overflow","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5158.json"},{"CVE":"CVE-2015-3214","severity":"moderate","public_date":"2015-06-16T00:00:00Z","advisories":["RHSA-2015:1512","RHSA-2015:1508","RHSA-2015:1507"],"bugzilla":"1229640","bugzilla_description":"CVE-2015-3214 qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["qemu-kvm-10:1.5.3-86.el7_1.5","qemu-kvm-rhev-10:2.1.2-23.el7_1.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3214.json"},{"CVE":"CVE-2015-3209","severity":"important","public_date":"2015-06-10T00:00:00Z","advisories":["RHSA-2015:1189","RHSA-2015:1089","RHSA-2015:1088","RHSA-2015:1087"],"bugzilla":"1225882","bugzilla_description":"CVE-2015-3209 qemu: pcnet: multi-tmd buffer overflow in the tx path","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["kvm-0:83-273.el5_11","qemu-kvm-2:0.12.1.2-2.448.el6_6.4","qemu-kvm-rhev-2:0.12.1.2-2.448.el6_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3209.json"},{"CVE":"CVE-2015-3456","severity":"important","public_date":"2015-05-13T00:00:00Z","advisories":["RHSA-2015:0999","RHSA-2015:0998","RHSA-2015:1004","RHSA-2015:1003","RHSA-2015:1002","RHSA-2015:1001","RHSA-2015:1011","RHSA-2015:1000","RHSA-2015:1031"],"bugzilla":"1218611","bugzilla_description":"CVE-2015-3456 qemu: fdc: out-of-bounds fifo buffer memory access","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["qemu-kvm-rhev-10:2.1.2-23.el7_1.3","qemu-kvm-10:1.5.3-86.el7_1.2","kvm-0:83-272.el5_11","qemu-kvm-2:0.12.1.2-2.448.el6_6.3","qemu-kvm-rhev-2:0.12.1.2-2.448.el6_6.3","rhev-hypervisor7-0:7.1-20150512.1.el7ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.15","rhev-hypervisor6-0:6.6-20150512.0.el6ev","xen-0:3.0.3-146.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3456.json"},{"CVE":"CVE-2015-4037","severity":"moderate","public_date":"2015-05-13T00:00:00Z","advisories":[],"bugzilla":"1222892","bugzilla_description":"CVE-2015-4037 qemu: insecure temporary file use in /net/slirp.c","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4037.json"},{"CVE":"CVE-2015-1779","severity":"moderate","public_date":"2015-03-23T00:00:00Z","advisories":["RHSA-2015:1931","RHSA-2015:1943"],"bugzilla":"1199572","bugzilla_description":"CVE-2015-1779 qemu: vnc: insufficient resource limiting in VNC websockets decoder","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-770","affected_packages":["qemu-kvm-rhev-10:2.1.2-23.el7_1.10","qemu-kvm-10:1.5.3-86.el7_1.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1779.json"},{"CVE":"CVE-2014-8106","severity":"important","public_date":"2014-12-04T00:00:00Z","advisories":["RHSA-2015:0867","RHSA-2015:0349","RHSA-2015:0624","RHSA-2015:0643","RHSA-2015:0795","RHSA-2015:0891","RHSA-2015:0868"],"bugzilla":"1169454","bugzilla_description":"CVE-2014-8106 qemu: cirrus: insufficient blit region checks","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-20->CWE-119","affected_packages":["qemu-kvm-2:0.12.1.2-2.448.el6_6.2","qemu-kvm-10:1.5.3-86.el7","qemu-kvm-rhev-10:2.1.2-23.el7","qemu-kvm-rhev-2:0.12.1.2-2.448.el6_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8106.json"},{"CVE":"CVE-2014-7840","severity":"moderate","public_date":"2014-11-12T00:00:00Z","advisories":["RHSA-2015:0349","RHSA-2015:0624"],"bugzilla":"1163075","bugzilla_description":"CVE-2014-7840 qemu: insufficient parameter validation during ram load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-122","affected_packages":["qemu-kvm-10:1.5.3-86.el7","qemu-kvm-rhev-10:2.1.2-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7840.json"},{"CVE":"CVE-2014-9718","severity":"moderate","public_date":"2014-10-31T00:00:00Z","advisories":[],"bugzilla":"1204919","bugzilla_description":"CVE-2014-9718 Qemu: PRDT overflow from guest to host","cvss_score":4.6,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9718.json"},{"CVE":"CVE-2014-7815","severity":"moderate","public_date":"2014-10-27T00:00:00Z","advisories":["RHSA-2015:0349","RHSA-2015:0624"],"bugzilla":"1157641","bugzilla_description":"CVE-2014-7815 qemu: vnc: insufficient bits_per_pixel from the client sanitization","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["qemu-kvm-10:1.5.3-86.el7","qemu-kvm-rhev-10:2.1.2-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7815.json"},{"CVE":"CVE-2014-3689","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1153035","bugzilla_description":"CVE-2014-3689 qemu: vmware_vga: insufficient parameter validation in rectangle functions","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3689.json"},{"CVE":"CVE-2014-9766","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1311882","bugzilla_description":"CVE-2014-9766 pixman: integer overflow in create_bits function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9766.json"},{"CVE":"CVE-2014-3640","severity":"low","public_date":"2014-09-17T00:00:00Z","advisories":["RHSA-2015:0349","RHSA-2015:0624"],"bugzilla":"1144818","bugzilla_description":"CVE-2014-3640 qemu: slirp: NULL pointer deref in sosendto()","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["qemu-kvm-10:1.5.3-86.el7","qemu-kvm-rhev-10:2.1.2-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3640.json"},{"CVE":"CVE-2014-3615","severity":"low","public_date":"2014-09-05T00:00:00Z","advisories":["RHSA-2014:1669","RHSA-2014:1941","RHSA-2014:1670"],"bugzilla":"1139115","bugzilla_description":"CVE-2014-3615 Qemu: information leakage when guest sets high resolution","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:N","CWE":"CWE-200","affected_packages":["qemu-kvm-rhev-10:1.5.3-60.el7_0.10","qemu-kvm-10:1.5.3-60.el7_0.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3615.json"},{"CVE":"CVE-2014-5388","severity":"low","public_date":"2014-08-19T00:00:00Z","advisories":[],"bugzilla":"1132956","bugzilla_description":"CVE-2014-5388 Qemu: out of bounds memory access","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:N","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5388.json"},{"CVE":"CVE-2014-5263","severity":"low","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1126543","bugzilla_description":"CVE-2014-5263 qemu: missing field list terminator in vmstate_xhci_event","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5263.json"},{"CVE":"CVE-2015-5239","severity":"moderate","public_date":"2014-06-30T00:00:00Z","advisories":[],"bugzilla":"1257735","bugzilla_description":"CVE-2015-5239 qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg()","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5239.json"},{"CVE":"CVE-2014-3471","severity":"moderate","public_date":"2014-06-23T00:00:00Z","advisories":[],"bugzilla":"1112271","bugzilla_description":"CVE-2014-3471 Qemu: hw: pci: use after free triggered via guest","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3471.json"},{"CVE":"CVE-2014-3461","severity":"moderate","public_date":"2014-05-12T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1096821","bugzilla_description":"CVE-2014-3461 Qemu: usb: fix up post load checks","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3461.json"},{"CVE":"CVE-2014-0222","severity":"moderate","public_date":"2014-05-12T00:00:00Z","advisories":["RHSA-2014:1268","RHSA-2014:1168","RHSA-2014:1187","RHSA-2014:1076","RHSA-2014:1075","RHSA-2014:0927"],"bugzilla":"1097216","bugzilla_description":"CVE-2014-0222 Qemu: qcow1: validate L2 table size to avoid integer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-119","affected_packages":["rhev-hypervisor6-0:6.5-20140821.1.el6ev","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.14","qemu-kvm-2:0.12.1.2-2.415.el6_5.14","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0222.json"},{"CVE":"CVE-2014-0223","severity":"moderate","public_date":"2014-05-12T00:00:00Z","advisories":["RHSA-2014:1268","RHSA-2014:1168","RHSA-2014:1187","RHSA-2014:1076","RHSA-2014:1075","RHSA-2014:0927"],"bugzilla":"1097222","bugzilla_description":"CVE-2014-0223 Qemu: qcow1: validate image size to avoid out-of-bounds memory access","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-119","affected_packages":["rhev-hypervisor6-0:6.5-20140821.1.el6ev","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.14","qemu-kvm-2:0.12.1.2-2.415.el6_5.14","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0223.json"},{"CVE":"CVE-2014-0182","severity":"moderate","public_date":"2014-04-17T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1088986","bugzilla_description":"CVE-2014-0182 qemu: virtio: out-of-bounds buffer write on state load with invalid config_len","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0182.json"},{"CVE":"CVE-2014-2894","severity":"moderate","public_date":"2014-04-14T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0704"],"bugzilla":"1087971","bugzilla_description":"CVE-2014-2894 QEMU: out of bounds buffer accesses, guest triggerable via IDE SMART","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","qemu-kvm-10:1.5.3-60.el7_0.2","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2894.json"},{"CVE":"CVE-2014-0150","severity":"moderate","public_date":"2014-04-11T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1078846","bugzilla_description":"CVE-2014-0150 qemu: virtio-net: buffer overflow in virtio_net_handle_mac() function","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0150.json"},{"CVE":"CVE-2013-4544","severity":"moderate","public_date":"2014-04-04T00:00:00Z","advisories":[],"bugzilla":"1087513","bugzilla_description":"CVE-2013-4544 Qemu: vmxnet3: bounds checking buffer overrun","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4544.json"},{"CVE":"CVE-2014-0142","severity":"low","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1078201","bugzilla_description":"CVE-2014-0142 qemu: crash by possible division by zero","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-369","affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0142.json"},{"CVE":"CVE-2014-0148","severity":"low","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1078212","bugzilla_description":"CVE-2014-0148 Qemu: vhdx: bounds checking for block_size and logical_sector_size","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0148.json"},{"CVE":"CVE-2014-0146","severity":"low","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1078232","bugzilla_description":"CVE-2014-0146 Qemu: qcow2: NULL dereference in qcow2_open() error path","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0146.json"},{"CVE":"CVE-2014-0147","severity":"moderate","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1078848","bugzilla_description":"CVE-2014-0147 Qemu: block: possible crash due signed types or logic error","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0147.json"},{"CVE":"CVE-2014-0145","severity":"moderate","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1078885","bugzilla_description":"CVE-2014-0145 Qemu: prevent possible buffer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0145.json"},{"CVE":"CVE-2014-0143","severity":"moderate","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1079140","bugzilla_description":"CVE-2014-0143 Qemu: block: multiple integer overflow flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0143.json"},{"CVE":"CVE-2014-0144","severity":"moderate","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1079240","bugzilla_description":"CVE-2014-0144 Qemu: block: missing input validation","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0144.json"},{"CVE":"CVE-2013-4148","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1066334","bugzilla_description":"CVE-2013-4148 qemu: virtio-net: buffer overflow on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4148.json"},{"CVE":"CVE-2013-4149","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:1268","RHSA-2014:0927"],"bugzilla":"1066337","bugzilla_description":"CVE-2013-4149 qemu: virtio-net: out-of-bounds buffer write on load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4149.json"},{"CVE":"CVE-2013-4150","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:1268","RHSA-2014:0927"],"bugzilla":"1066340","bugzilla_description":"CVE-2013-4150 qemu: virtio-net: out-of-bounds buffer write on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-787","affected_packages":["qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4150.json"},{"CVE":"CVE-2013-4151","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1066342","bugzilla_description":"CVE-2013-4151 qemu: virtio: out-of-bounds buffer write on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4151.json"},{"CVE":"CVE-2013-4526","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066345","bugzilla_description":"CVE-2013-4526 qemu: ahci: fix buffer overrun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4526.json"},{"CVE":"CVE-2013-4527","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:1268","RHSA-2014:0927"],"bugzilla":"1066347","bugzilla_description":"CVE-2013-4527 qemu: hpet: buffer overrun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4527.json"},{"CVE":"CVE-2013-4529","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:1268","RHSA-2014:0927"],"bugzilla":"1066353","bugzilla_description":"CVE-2013-4529 qemu: hw/pci/pcie_aer.c: buffer overrun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4529.json"},{"CVE":"CVE-2013-4530","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066354","bugzilla_description":"CVE-2013-4530 qemu: pl022: fix buffer overun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4530.json"},{"CVE":"CVE-2013-4531","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066357","bugzilla_description":"CVE-2013-4531 qemu: target-arm/machine.c: fix buffer overflow on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4531.json"},{"CVE":"CVE-2013-4532","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066358","bugzilla_description":"CVE-2013-4532 qemu: stellaris_enet: buffer overrun on incoming migration","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4532.json"},{"CVE":"CVE-2013-6399","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1066361","bugzilla_description":"CVE-2013-6399 qemu: virtio: buffer overrun on incoming migration","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6399.json"},{"CVE":"CVE-2013-4542","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1066382","bugzilla_description":"CVE-2013-4542 qemu: virtio-scsi: buffer overrun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4542.json"},{"CVE":"CVE-2013-4541","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1066384","bugzilla_description":"CVE-2013-4541 qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4541.json"},{"CVE":"CVE-2013-4540","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066386","bugzilla_description":"CVE-2013-4540 qemu: zaurus: buffer overrun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4540.json"},{"CVE":"CVE-2013-4539","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066387","bugzilla_description":"CVE-2013-4539 qemu: tsc210x: buffer overrun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4539.json"},{"CVE":"CVE-2013-4538","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066393","bugzilla_description":"CVE-2013-4538 qemu: ssd0323: fix buffer overun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4538.json"},{"CVE":"CVE-2013-4537","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066394","bugzilla_description":"CVE-2013-4537 qemu: ssi-sd: buffer overrun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4537.json"},{"CVE":"CVE-2013-4535","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1066401","bugzilla_description":"CVE-2013-4535 CVE-2013-4536 qemu: virtio: insufficient validation of num_sg when mapping","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4535.json"},{"CVE":"CVE-2013-4536","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1066401","bugzilla_description":"CVE-2013-4535 CVE-2013-4536 qemu: virtio: insufficient validation of num_sg when mapping","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4536.json"},{"CVE":"CVE-2013-4533","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066404","bugzilla_description":"CVE-2013-4533 qemu: pxa2xx: buffer overrun on incoming migration","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4533.json"},{"CVE":"CVE-2013-4534","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066405","bugzilla_description":"CVE-2013-4534 qemu: openpic: buffer overrun on incoming migration","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4534.json"},{"CVE":"CVE-2013-4375","severity":"moderate","public_date":"2013-10-10T00:00:00Z","advisories":[],"bugzilla":"1012587","bugzilla_description":"CVE-2013-4375 xen: qemu disk backend (qdisk) resource leak (XSA-71)","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4375.json"},{"CVE":"CVE-2013-4344","severity":"important","public_date":"2013-10-02T00:00:00Z","advisories":["RHSA-2013:1527","RHSA-2013:1754","RHSA-2013:1553"],"bugzilla":"1007330","bugzilla_description":"CVE-2013-4344 qemu: buffer overflow in scsi_target_emulate_report_luns","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6","rhev-hypervisor6-0:6.5-20131115.0.3.2.el6_5","qemu-kvm-rhev-2:0.12.1.2-2.415.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4344.json"},{"CVE":"CVE-2013-2231","severity":"important","public_date":"2013-07-22T00:00:00Z","advisories":["RHSA-2013:1100","RHSA-2013:1101"],"bugzilla":"980757","bugzilla_description":"CVE-2013-2231 qemu: qemu-ga win32 service unquoted search path","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-428","affected_packages":["virtio-win-0:1.6.5-6.el6_4","qemu-kvm-2:0.12.1.2-2.355.el6_4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2231.json"},{"CVE":"CVE-2013-4377","severity":"moderate","public_date":"2013-07-11T00:00:00Z","advisories":[],"bugzilla":"1012633","bugzilla_description":"CVE-2013-4377 qemu: hot-unplugging virtio devices in guest can crash host qemu process","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4377.json"},{"CVE":"CVE-2013-2007","severity":"moderate","public_date":"2013-05-06T00:00:00Z","advisories":["RHSA-2013:0896"],"bugzilla":"956082","bugzilla_description":"CVE-2013-2007 qemu: guest agent creates files with insecure permissions in deamon mode","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.355.el6_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2007.json"},{"CVE":"CVE-2013-2016","severity":"important","public_date":"2013-04-25T00:00:00Z","advisories":[],"bugzilla":"957155","bugzilla_description":"CVE-2013-2016 qemu: virtio: out-of-bounds config space access","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2016.json"},{"CVE":"CVE-2013-1922","severity":"moderate","public_date":"2013-04-15T00:00:00Z","advisories":[],"bugzilla":"923219","bugzilla_description":"CVE-2013-1922 qemu, qemu-kvm, kvm: qemu-nbd block format auto-detection vulnerability","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1922.json"},{"CVE":"CVE-2012-6075","severity":"important","public_date":"2012-12-16T00:00:00Z","advisories":["RHSA-2013:0639","RHSA-2013:0609","RHSA-2013:0608","RHSA-2013:0636","RHSA-2013:0599","RHSA-2013:0610"],"bugzilla":"889301","bugzilla_description":"CVE-2012-6075 qemu: e1000 driver buffer overflow when processing large packets when SBP and LPE flags are disabled","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","qemu-kvm-rhev-2:0.12.1.2-2.355.el6_4.2","xen-0:3.0.3-142.el5_9.2","qemu-kvm-2:0.12.1.2-2.355.el6_4.2","kvm-0:83-262.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6075.json"},{"CVE":"CVE-2012-3515","severity":"important","public_date":"2012-09-05T00:00:00Z","advisories":["RHSA-2012:1262","RHSA-2012:1234","RHSA-2012:1233","RHSA-2012:1236","RHSA-2012:1235","RHSA-2012:1325"],"bugzilla":"851252","bugzilla_description":"CVE-2012-3515 qemu: VT100 emulation vulnerability","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-839->CWE-119","affected_packages":["rhev-hypervisor6-0:6.3-20120926.0.el6_3","kvm-0:83-249.el5_8.5","qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2","xen-0:3.0.3-135.el5_8.5","qemu-kvm-2:0.12.1.2-2.295.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3515.json"},{"CVE":"CVE-2012-2652","severity":"moderate","public_date":"2012-05-28T00:00:00Z","advisories":[],"bugzilla":"824919","bugzilla_description":"CVE-2012-2652 qemu: vulnerable to temporary file symlink attacks","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2652.json"},{"CVE":"CVE-2012-0029","severity":"important","public_date":"2012-01-23T00:00:00Z","advisories":["RHSA-2012:0109","RHSA-2012:0050","RHSA-2012:0051","RHSA-2012:0370","RHSA-2012:0168"],"bugzilla":"772075","bugzilla_description":"CVE-2012-0029 qemu: e1000: process_tx_desc legacy mode packets heap overflow","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["kvm-0:83-239.el5_7.1","qemu-kvm-2:0.12.1.2-2.209.el6_2.4","xen-0:3.0.3-135.el5_8.2","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0029.json"},{"CVE":"CVE-2011-4111","severity":"important","public_date":"2011-11-28T00:00:00Z","advisories":["RHSA-2011:1777","RHSA-2011:1801"],"bugzilla":"751310","bugzilla_description":"CVE-2011-4111 qemu: ccid: buffer overflow in handling of VSC_ATR message","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.209.el6_2.1","qemu-kvm-2:0.12.1.2-2.160.el6_1.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4111.json"},{"CVE":"CVE-2011-3346","severity":"moderate","public_date":"2011-09-07T00:00:00Z","advisories":["RHSA-2011:1401"],"bugzilla":"736038","bugzilla_description":"CVE-2011-3346 qemu: local DoS with SCSI CD-ROM","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["xen-0:3.0.3-132.el5_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3346.json"},{"CVE":"CVE-2011-2527","severity":"moderate","public_date":"2011-07-09T00:00:00Z","advisories":["RHSA-2011:1531"],"bugzilla":"720773","bugzilla_description":"CVE-2011-2527 qemu: when started as root, extra groups are not dropped correctly","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.209.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2527.json"},{"CVE":"CVE-2011-2212","severity":"important","public_date":"2011-07-05T00:00:00Z","advisories":["RHSA-2011:0919"],"bugzilla":"713589","bugzilla_description":"CVE-2011-2212 qemu-kvm: virtqueue: too-large indirect descriptor buffer overflow","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["qemu-kvm-2:0.12.1.2-2.160.el6_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2212.json"},{"CVE":"CVE-2011-1751","severity":"important","public_date":"2011-05-18T00:00:00Z","advisories":["RHSA-2011:0534"],"bugzilla":"699773","bugzilla_description":"CVE-2011-1751 qemu: acpi_piix4: missing hotplug check during device removal","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-672->CWE-119","affected_packages":["qemu-kvm-2:0.12.1.2-2.160.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1751.json"},{"CVE":"CVE-2011-2512","severity":"important","public_date":"2011-05-08T00:00:00Z","advisories":["RHSA-2011:0919"],"bugzilla":"717399","bugzilla_description":"CVE-2011-2512 qemu-kvm: OOB memory access caused by negative vq notifies","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.160.el6_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2512.json"},{"CVE":"CVE-2011-1750","severity":"important","public_date":"2011-03-30T00:00:00Z","advisories":["RHSA-2011:0534"],"bugzilla":"698906","bugzilla_description":"CVE-2011-1750 virtio-blk: heap buffer overflow caused by unaligned requests","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-228->CWE-122","affected_packages":["qemu-kvm-2:0.12.1.2-2.160.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1750.json"},{"CVE":"CVE-2011-0011","severity":"moderate","public_date":"2011-01-07T00:00:00Z","advisories":["RHSA-2011:0345"],"bugzilla":"668589","bugzilla_description":"CVE-2011-0011 qemu-kvm: Setting VNC password to empty string silently disables all authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.113.el6_0.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0011.json"},{"CVE":"CVE-2010-2784","severity":"important","public_date":"2010-07-28T00:00:00Z","advisories":["RHSA-2010:0627","RHSA-2010:0622"],"bugzilla":"619411","bugzilla_description":"CVE-2010-2784 qemu: insufficient constraints checking in exec.c:subpage_register()","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["kvm-0:83-164.el5_5.21","rhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2784.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qgnomeplatform_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qgnomeplatform_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qgnomeplatform_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qimageblitz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qimageblitz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qimageblitz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qjson_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qjson_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qjson_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qpdf-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qpdf-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qpdf-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qperf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qperf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qperf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qrencode-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qrencode-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qrencode-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-odbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-odbc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-odbc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-postgresql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-postgresql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-postgresql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-settings_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-settings_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-settings_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-x11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-x11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt-x11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-MySQL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-MySQL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-MySQL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-ODBC_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-ODBC_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-ODBC_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-PostgreSQL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-PostgreSQL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-PostgreSQL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3_security_api_results.json
new file mode 100644
index 0000000..cae826a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt3_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12267","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":[],"bugzilla":"1837471","bugzilla_description":"CVE-2020-12267 qt: use-after-free related to QTextMarkdownImporter::insertBlock","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12267.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-10040","severity":"low","public_date":"2016-12-24T00:00:00Z","advisories":[],"bugzilla":"1409597","bugzilla_description":"CVE-2016-10040 qt: stack overflow in QXmlSimpleReader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-9541","severity":"moderate","public_date":"2015-07-24T00:00:00Z","advisories":[],"bugzilla":"1801369","bugzilla_description":"CVE-2015-9541 qt: XML entity expansion vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9541.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-1858","severity":"moderate","public_date":"2015-03-11T00:00:00Z","advisories":[],"bugzilla":"1210673","bugzilla_description":"CVE-2015-1858 qt: segmentation fault in qbmphandler.cpp","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122->CWE-125->CWE-787->CWE-805","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1858.json"},{"CVE":"CVE-2015-1859","severity":"moderate","public_date":"2015-03-11T00:00:00Z","advisories":[],"bugzilla":"1210674","bugzilla_description":"CVE-2015-1859 qt: segmentation fault in qicohandler.cpp","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122->CWE-125->CWE-787->CWE-805","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1859.json"},{"CVE":"CVE-2015-1860","severity":"moderate","public_date":"2015-03-11T00:00:00Z","advisories":[],"bugzilla":"1210675","bugzilla_description":"CVE-2015-1860 qt: segmentation fault in qgifhandler.cpp","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122->CWE-125->CWE-787->CWE-805","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1860.json"},{"CVE":"CVE-2015-0295","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1197273","bugzilla_description":"CVE-2015-0295 QT: BMP image handler crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0295.json"},{"CVE":"CVE-2014-0190","severity":"low","public_date":"2014-04-14T00:00:00Z","advisories":[],"bugzilla":"1088142","bugzilla_description":"CVE-2014-0190 qt: NULL pointer dereference flaw in QGIFFormat::fillRect","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0190.json"},{"CVE":"CVE-2013-0254","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":["RHSA-2013:0669"],"bugzilla":"907425","bugzilla_description":"CVE-2013-0254 qt: QSharedMemory class created shared memory segments with insecure permissions","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qt-1:4.6.2-26.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0254.json"},{"CVE":"CVE-2012-6093","severity":"low","public_date":"2013-01-02T00:00:00Z","advisories":[],"bugzilla":"891955","bugzilla_description":"CVE-2012-6093 qt: QSslSocket might report inappropriate errors when certificate verification fails","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6093.json"},{"CVE":"CVE-2012-5624","severity":"low","public_date":"2012-11-30T00:00:00Z","advisories":[],"bugzilla":"883415","bugzilla_description":"CVE-2012-5624 Qt: QML XmlHttpRequest insecure redirection","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5624.json"},{"CVE":"CVE-2011-3922","severity":"moderate","public_date":"2012-01-06T00:00:00Z","advisories":["RHSA-2012:0880"],"bugzilla":"772125","bugzilla_description":"CVE-2011-3922 qt: Stack-based buffer overflow in embedded harfbuzz code","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["qt-1:4.6.2-24.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3922.json"},{"CVE":"CVE-2011-3193","severity":"moderate","public_date":"2011-07-19T00:00:00Z","advisories":["RHSA-2011:1323","RHSA-2011:1324","RHSA-2011:1325","RHSA-2011:1326","RHSA-2011:1327","RHSA-2011:1328"],"bugzilla":"733118","bugzilla_description":"CVE-2011-3193 qt/harfbuzz buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qt-1:4.6.2-17.el6_1.1","pango-0:1.14.9-8.el5_7.3","qt4-0:4.2.1-1.el5_7.1","frysk-0:0.0.1.2007.08.03-8.el4","evolution28-pango-0:1.14.9-13.el4_11","qt-1:4.6.2-20.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3193.json"},{"CVE":"CVE-2011-3194","severity":"moderate","public_date":"2010-09-18T00:00:00Z","advisories":["RHSA-2011:1323","RHSA-2011:1328"],"bugzilla":"733119","bugzilla_description":"CVE-2011-3194 qt buffer overflow in greyscale images","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qt-1:4.6.2-17.el6_1.1","qt-1:4.6.2-20.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3194.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-designer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-designer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-designer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-doctools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-doctools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-doctools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-linguist_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-linguist_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-linguist_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qt3d-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qt3d-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qt3d-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qt3d_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qt3d_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qt3d_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-odbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-odbc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-odbc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-postgresql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-postgresql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase-postgresql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase_security_api_results.json
new file mode 100644
index 0000000..6e43e74
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtbase_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-17507","severity":"moderate","public_date":"2020-08-12T00:00:00Z","advisories":[],"bugzilla":"1868532","bugzilla_description":"CVE-2020-17507 qt: buffer over-read in read_xbm_body in gui/image/qxbmhandler.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17507.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-13962","severity":"moderate","public_date":"2020-06-09T00:00:00Z","advisories":[],"bugzilla":"1849734","bugzilla_description":"CVE-2020-13962 qt5: incorrectly calls SSL_shutdown() in OpenSSL mid-handshake causing denial of service in TLS applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13962.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-0569","severity":"moderate","public_date":"2020-02-07T00:00:00Z","advisories":["RHSA-2020:4025"],"bugzilla":"1800600","bugzilla_description":"CVE-2020-0569 qt: files placed by attacker can influence the working directory and lead to malicious code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":["qt5-qtbase-0:5.9.7-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0569.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2020-0570","severity":"moderate","public_date":"2020-02-07T00:00:00Z","advisories":["RHSA-2020:4025"],"bugzilla":"1800604","bugzilla_description":"CVE-2020-0570 qt: files placed by attacker can influence the working directory and lead to malicious code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":["qt5-qtbase-0:5.9.7-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0570.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-18281","severity":"low","public_date":"2019-10-23T00:00:00Z","advisories":[],"bugzilla":"1764742","bugzilla_description":"CVE-2019-18281 qt5-qtbase: Out-of-bounds access in generateDirectionalRuns() function in qtextengine.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18281.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-19870","severity":"low","public_date":"2018-12-06T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2019:3390"],"bugzilla":"1658996","bugzilla_description":"CVE-2018-19870 qt5-qtbase: QImage allocation failure in qgifhandler","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["qt-1:4.8.7-8.el7","qt5-qtbase-0:5.9.7-2.el7","qt5-qtbase-0:5.11.1-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19873","severity":"low","public_date":"2018-12-06T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2019:3390"],"bugzilla":"1658998","bugzilla_description":"CVE-2018-19873 qt5-qtbase: QBmpHandler segmentation fault on malformed BMP file","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["qt-1:4.8.7-8.el7","qt5-qtbase-0:5.9.7-2.el7","qt5-qtbase-0:5.11.1-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19873.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15518","severity":"moderate","public_date":"2018-08-13T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2019:3390"],"bugzilla":"1659000","bugzilla_description":"CVE-2018-15518 qt5-qtbase: Double free in QXmlStreamReader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["qt-1:4.8.7-8.el7","qt5-qtbase-0:5.9.7-2.el7","qt5-qtbase-0:5.11.1-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15518.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10040","severity":"low","public_date":"2016-12-24T00:00:00Z","advisories":[],"bugzilla":"1409597","bugzilla_description":"CVE-2016-10040 qt: stack overflow in QXmlSimpleReader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtcanvas3d_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtcanvas3d_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtcanvas3d_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtconnectivity-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtconnectivity-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtconnectivity-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtconnectivity_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtconnectivity_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtconnectivity_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtdeclarative-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtdeclarative-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtdeclarative-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtdeclarative_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtdeclarative_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtdeclarative_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtdoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtdoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtdoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtenginio-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtenginio-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtenginio-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtenginio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtenginio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtenginio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtgraphicaleffects_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtgraphicaleffects_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtgraphicaleffects_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtimageformats_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtimageformats_security_api_results.json
new file mode 100644
index 0000000..5597f58
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtimageformats_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19871","severity":"low","public_date":"2018-08-24T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2020:1665"],"bugzilla":"1661465","bugzilla_description":"CVE-2018-19871 qt5-qtimageformats: QTgaFile CPU exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["qt-1:4.8.7-8.el7","qt5-qtimageformats-0:5.12.5-1.el8","qt5-qtimageformats-0:5.9.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19871.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtlocation-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtlocation-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtlocation-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtlocation_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtlocation_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtlocation_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtmultimedia-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtmultimedia-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtmultimedia-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtmultimedia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtmultimedia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtmultimedia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtquickcontrols2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtquickcontrols2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtquickcontrols2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtquickcontrols_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtquickcontrols_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtquickcontrols_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtscript-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtscript-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtscript-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtscript_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtscript_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtscript_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsensors-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsensors-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsensors-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsensors_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsensors_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsensors_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtserialbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtserialbus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtserialbus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtserialport-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtserialport-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtserialport-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtserialport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtserialport_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtserialport_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsvg-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsvg-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsvg-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsvg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsvg_security_api_results.json
new file mode 100644
index 0000000..01df515
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtsvg_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19869","severity":"low","public_date":"2018-07-30T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2020:1665"],"bugzilla":"1661460","bugzilla_description":"CVE-2018-19869 qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["qt-1:4.8.7-8.el7","qt5-qtsvg-0:5.12.5-1.el8","qt5-qtsvg-0:5.9.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19869.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-libs-designer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-libs-designer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-libs-designer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-libs-designercomponents_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-libs-designercomponents_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-libs-designercomponents_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-libs-help_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-libs-help_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools-libs-help_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttranslations_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttranslations_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qttranslations_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwayland_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwayland_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwayland_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebchannel-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebchannel-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebchannel-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebchannel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebchannel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebchannel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebsockets-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebsockets-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebsockets-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebsockets_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebsockets_security_api_results.json
new file mode 100644
index 0000000..19d2f5f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtwebsockets_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-21035","severity":"moderate","public_date":"2018-09-23T00:00:00Z","advisories":[],"bugzilla":"1810964","bugzilla_description":"CVE-2018-21035 qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages therefore attacker can cause DOS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-21035.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtx11extras-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtx11extras-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtx11extras-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtx11extras_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtx11extras_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtx11extras_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtxmlpatterns-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtxmlpatterns-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtxmlpatterns-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtxmlpatterns_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtxmlpatterns_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-qtxmlpatterns_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-rpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-rpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt5-rpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt_security_api_results.json
new file mode 100644
index 0000000..9693ba7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/qt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13920","severity":"moderate","public_date":"2020-09-10T00:00:00Z","advisories":[],"bugzilla":"1880101","bugzilla_description":"CVE-2020-13920 activemq: improper authentication allows MITM attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13920.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-17507","severity":"moderate","public_date":"2020-08-12T00:00:00Z","advisories":[],"bugzilla":"1868532","bugzilla_description":"CVE-2020-17507 qt: buffer over-read in read_xbm_body in gui/image/qxbmhandler.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17507.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-13932","severity":"moderate","public_date":"2020-07-20T00:00:00Z","advisories":[],"bugzilla":"1858946","bugzilla_description":"CVE-2020-13932 activemq: remote XSS in web console diagram plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13932.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-13962","severity":"moderate","public_date":"2020-06-09T00:00:00Z","advisories":[],"bugzilla":"1849734","bugzilla_description":"CVE-2020-13962 qt5: incorrectly calls SSL_shutdown() in OpenSSL mid-handshake causing denial of service in TLS applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13962.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1941","severity":"moderate","public_date":"2020-05-14T00:00:00Z","advisories":[],"bugzilla":"1848045","bugzilla_description":"CVE-2020-1941 activemq: Cross-site scripting in webconsole admin GUI","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1941.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N","cvss3_score":"7.3"},{"CVE":"CVE-2020-12267","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":[],"bugzilla":"1837471","bugzilla_description":"CVE-2020-12267 qt: use-after-free related to QTextMarkdownImporter::insertBlock","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12267.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-0569","severity":"moderate","public_date":"2020-02-07T00:00:00Z","advisories":["RHSA-2020:4025"],"bugzilla":"1800600","bugzilla_description":"CVE-2020-0569 qt: files placed by attacker can influence the working directory and lead to malicious code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":["qt5-qtbase-0:5.9.7-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0569.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2020-0570","severity":"moderate","public_date":"2020-02-07T00:00:00Z","advisories":["RHSA-2020:4025"],"bugzilla":"1800604","bugzilla_description":"CVE-2020-0570 qt: files placed by attacker can influence the working directory and lead to malicious code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":["qt5-qtbase-0:5.9.7-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0570.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-18281","severity":"low","public_date":"2019-10-23T00:00:00Z","advisories":[],"bugzilla":"1764742","bugzilla_description":"CVE-2019-18281 qt5-qtbase: Out-of-bounds access in generateDirectionalRuns() function in qtextengine.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18281.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-11777","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":[],"bugzilla":"1879743","bugzilla_description":"CVE-2019-11777 org.eclipse.paho.client.mqttv3: Improper hostname validation in the MQTT library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11777.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-0222","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:0922","RHSA-2020:1445"],"bugzilla":"1696012","bugzilla_description":"CVE-2019-0222 activemq: Corrupt MQTT frame can cause broker shutdown","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0222.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-19870","severity":"low","public_date":"2018-12-06T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2019:3390"],"bugzilla":"1658996","bugzilla_description":"CVE-2018-19870 qt5-qtbase: QImage allocation failure in qgifhandler","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["qt-1:4.8.7-8.el7","qt5-qtbase-0:5.9.7-2.el7","qt5-qtbase-0:5.11.1-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19873","severity":"low","public_date":"2018-12-06T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2019:3390"],"bugzilla":"1658998","bugzilla_description":"CVE-2018-19873 qt5-qtbase: QBmpHandler segmentation fault on malformed BMP file","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["qt-1:4.8.7-8.el7","qt5-qtbase-0:5.9.7-2.el7","qt5-qtbase-0:5.11.1-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19873.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19872","severity":"moderate","public_date":"2018-12-04T00:00:00Z","advisories":["RHSA-2020:1172","RHSA-2020:1665"],"bugzilla":"1691636","bugzilla_description":"CVE-2018-19872 qt: Malformed PPM image causing division by zero and crash in qppmhandler.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["qt-1:4.8.7-8.el7","qt5-0:5.12.5-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19872.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2018-21035","severity":"moderate","public_date":"2018-09-23T00:00:00Z","advisories":[],"bugzilla":"1810964","bugzilla_description":"CVE-2018-21035 qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages therefore attacker can cause DOS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-21035.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-19871","severity":"low","public_date":"2018-08-24T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2020:1665"],"bugzilla":"1661465","bugzilla_description":"CVE-2018-19871 qt5-qtimageformats: QTgaFile CPU exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["qt-1:4.8.7-8.el7","qt5-qtimageformats-0:5.12.5-1.el8","qt5-qtimageformats-0:5.9.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19871.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15518","severity":"moderate","public_date":"2018-08-13T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2019:3390"],"bugzilla":"1659000","bugzilla_description":"CVE-2018-15518 qt5-qtbase: Double free in QXmlStreamReader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["qt-1:4.8.7-8.el7","qt5-qtbase-0:5.9.7-2.el7","qt5-qtbase-0:5.11.1-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15518.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-19869","severity":"low","public_date":"2018-07-30T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2020:1665"],"bugzilla":"1661460","bugzilla_description":"CVE-2018-19869 qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["qt-1:4.8.7-8.el7","qt5-qtsvg-0:5.12.5-1.el8","qt5-qtsvg-0:5.9.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19869.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9147","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1454655","bugzilla_description":"CVE-2017-9147 libtiff: Out of bounds read in _TIFFVGetField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9147.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10040","severity":"low","public_date":"2016-12-24T00:00:00Z","advisories":[],"bugzilla":"1409597","bugzilla_description":"CVE-2016-10040 qt: stack overflow in QXmlSimpleReader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-9541","severity":"moderate","public_date":"2015-07-24T00:00:00Z","advisories":[],"bugzilla":"1801369","bugzilla_description":"CVE-2015-9541 qt: XML entity expansion vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9541.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-1858","severity":"moderate","public_date":"2015-03-11T00:00:00Z","advisories":[],"bugzilla":"1210673","bugzilla_description":"CVE-2015-1858 qt: segmentation fault in qbmphandler.cpp","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122->CWE-125->CWE-787->CWE-805","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1858.json"},{"CVE":"CVE-2015-1859","severity":"moderate","public_date":"2015-03-11T00:00:00Z","advisories":[],"bugzilla":"1210674","bugzilla_description":"CVE-2015-1859 qt: segmentation fault in qicohandler.cpp","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122->CWE-125->CWE-787->CWE-805","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1859.json"},{"CVE":"CVE-2015-1860","severity":"moderate","public_date":"2015-03-11T00:00:00Z","advisories":[],"bugzilla":"1210675","bugzilla_description":"CVE-2015-1860 qt: segmentation fault in qgifhandler.cpp","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122->CWE-125->CWE-787->CWE-805","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1860.json"},{"CVE":"CVE-2015-0295","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1197273","bugzilla_description":"CVE-2015-0295 QT: BMP image handler crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0295.json"},{"CVE":"CVE-2014-0190","severity":"low","public_date":"2014-04-14T00:00:00Z","advisories":[],"bugzilla":"1088142","bugzilla_description":"CVE-2014-0190 qt: NULL pointer dereference flaw in QGIFFormat::fillRect","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0190.json"},{"CVE":"CVE-2014-5033","severity":"important","public_date":"2014-03-24T00:00:00Z","advisories":["RHSA-2014:1359"],"bugzilla":"1094890","bugzilla_description":"CVE-2014-5033 polkit-qt: insecure calling of polkit","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-362","affected_packages":["polkit-qt-0:0.103.0-10.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5033.json"},{"CVE":"CVE-2013-0254","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":["RHSA-2013:0669"],"bugzilla":"907425","bugzilla_description":"CVE-2013-0254 qt: QSharedMemory class created shared memory segments with insecure permissions","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qt-1:4.6.2-26.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0254.json"},{"CVE":"CVE-2012-6093","severity":"low","public_date":"2013-01-02T00:00:00Z","advisories":[],"bugzilla":"891955","bugzilla_description":"CVE-2012-6093 qt: QSslSocket might report inappropriate errors when certificate verification fails","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6093.json"},{"CVE":"CVE-2012-5624","severity":"low","public_date":"2012-11-30T00:00:00Z","advisories":[],"bugzilla":"883415","bugzilla_description":"CVE-2012-5624 Qt: QML XmlHttpRequest insecure redirection","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5624.json"},{"CVE":"CVE-2011-3922","severity":"moderate","public_date":"2012-01-06T00:00:00Z","advisories":["RHSA-2012:0880"],"bugzilla":"772125","bugzilla_description":"CVE-2011-3922 qt: Stack-based buffer overflow in embedded harfbuzz code","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["qt-1:4.6.2-24.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3922.json"},{"CVE":"CVE-2011-3193","severity":"moderate","public_date":"2011-07-19T00:00:00Z","advisories":["RHSA-2011:1323","RHSA-2011:1324","RHSA-2011:1325","RHSA-2011:1326","RHSA-2011:1327","RHSA-2011:1328"],"bugzilla":"733118","bugzilla_description":"CVE-2011-3193 qt/harfbuzz buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qt-1:4.6.2-17.el6_1.1","pango-0:1.14.9-8.el5_7.3","qt4-0:4.2.1-1.el5_7.1","frysk-0:0.0.1.2007.08.03-8.el4","evolution28-pango-0:1.14.9-13.el4_11","qt-1:4.6.2-20.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3193.json"},{"CVE":"CVE-2011-3194","severity":"moderate","public_date":"2010-09-18T00:00:00Z","advisories":["RHSA-2011:1323","RHSA-2011:1328"],"bugzilla":"733119","bugzilla_description":"CVE-2011-3194 qt buffer overflow in greyscale images","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qt-1:4.6.2-17.el6_1.1","qt-1:4.6.2-20.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3194.json"},{"CVE":"CVE-2010-5076","severity":"low","public_date":"2010-07-14T00:00:00Z","advisories":["RHSA-2012:0880"],"bugzilla":"630063","bugzilla_description":"CVE-2010-5076 Qt: QSslSocket incorrect handling of IP wildcards in certificate Common Name","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["qt-1:4.6.2-24.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5076.json"},{"CVE":"CVE-2010-2621","severity":"low","public_date":"2010-06-29T00:00:00Z","advisories":[],"bugzilla":"611086","bugzilla_description":"CVE-2010-2621 Qt (QSslSocketBackendPrivate): DoS (infinite loop) via malformed request","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P/","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2621.json"},{"CVE":"CVE-2010-1392","severity":null,"public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596382","bugzilla_description":"CVE-2010-1392 WebKit: use-after-free vulnerabiity when rendering HTML buttons","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1392.json"},{"CVE":"CVE-2010-1119","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596386","bugzilla_description":"CVE-2010-1119 WebKit: use-after-free vulnerability in handling of attribute manipulation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1119.json"},{"CVE":"CVE-2010-1396","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596397","bugzilla_description":"CVE-2010-1396 WebKit: use-after-free vulnerability in handling the removal of container elements (ZDI-CAN-688)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1396.json"},{"CVE":"CVE-2010-1397","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596401","bugzilla_description":"CVE-2010-1397 WebKit: use-after-free vulnerabiity when rendering a selection when the layout changes (ZDI-CAN-632)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1397.json"},{"CVE":"CVE-2010-1398","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596403","bugzilla_description":"CVE-2010-1398 WebKit: memory corruption flaw in handling of ordered list insertions (ZDI-CAN-686)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1398.json"},{"CVE":"CVE-2010-1399","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596408","bugzilla_description":"CVE-2010-1399 WebKit: uninitialized memory access vulnerability in handling of selection changes on form input elements (ZDI-CAN-687)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1399.json"},{"CVE":"CVE-2010-1400","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596424","bugzilla_description":"CVE-2010-1400 WebKit: use-after-free vulnerability in handling of caption elements","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1400.json"},{"CVE":"CVE-2010-1401","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596425","bugzilla_description":"CVE-2010-1401 WebKit: use-after-free vulnerability in handling of the ':first-letter' pseudo-element in CSS (ZDI-CAN-689)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1401.json"},{"CVE":"CVE-2010-1402","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596429","bugzilla_description":"CVE-2010-1402 WebKit: double-free vulnerability in handling of event listeners in SVG documents (ZDI-CAN-704)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1402.json"},{"CVE":"CVE-2010-1403","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596432","bugzilla_description":"CVE-2010-1403 WebKit: uninitialized memory access vulnerability in handling of 'use' elements in SVG documents (ZDI-CAN-702)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1403.json"},{"CVE":"CVE-2010-1404","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596437","bugzilla_description":"CVE-2010-1404 WebKit: use-after-free vulnerability in handling of SVG documents with multiple 'use' elements (ZDI-CAN-711)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1404.json"},{"CVE":"CVE-2010-1410","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596452","bugzilla_description":"CVE-2010-1410 WebKit: memory corruption vulnerability in handling of nested 'use' elements in SVG documents","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1410.json"},{"CVE":"CVE-2010-1749","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596454","bugzilla_description":"CVE-2010-1749 WebKit: use-after-free vulnerability in handling of CSS run-ins","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1749.json"},{"CVE":"CVE-2010-1405","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596456","bugzilla_description":"CVE-2010-1405 WebKit: use-after-free vulnerability in handling of HTML elements with custom vertical positioning","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1405.json"},{"CVE":"CVE-2010-1412","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596458","bugzilla_description":"CVE-2010-1412 WebKit: use-after-free vulnerability in handling of hover events","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1412.json"},{"CVE":"CVE-2010-1414","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596459","bugzilla_description":"CVE-2010-1414 WebKit: use-after-free vulnerability in handling of the removeChild DOM method","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1414.json"},{"CVE":"CVE-2010-1415","severity":null,"public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596460","bugzilla_description":"CVE-2010-1415 WebKit: API abuse vulnerability in handling of libxml contexts","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1415.json"},{"CVE":"CVE-2010-1417","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596471","bugzilla_description":"CVE-2010-1417 WebKit: memory corruption vulnerability in rendering of certain CSS-styled HTML content","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1417.json"},{"CVE":"CVE-2010-1419","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596478","bugzilla_description":"CVE-2010-1419 WebKit: use-after-free vulnerability in handling of certain drag and drop operations","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1419.json"},{"CVE":"CVE-2010-1758","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596479","bugzilla_description":"CVE-2010-1758 WebKit: use-after-free vulnerability in handling of DOM Range objects","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1758.json"},{"CVE":"CVE-2010-1759","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596485","bugzilla_description":"CVE-2010-1759 WebKit: use-after-free vulnerability in handling of the Node.normalize method","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1759.json"},{"CVE":"CVE-2010-1770","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596487","bugzilla_description":"CVE-2010-1770 WebKit: type checking vulnerability in handling of text nodes (ZDI-CAN-765)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1770.json"},{"CVE":"CVE-2010-1387","severity":null,"public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596493","bugzilla_description":"CVE-2010-1387 WebKit: use-after-free vulnerability in JavaScriptCore during page transitions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1387.json"},{"CVE":"CVE-2010-1766","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596494","bugzilla_description":"CVE-2010-1766 WebKit: off-by-one memory corruption flaw WebSocketHandshake::readServerHandshake()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1766.json"},{"CVE":"CVE-2010-1771","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596497","bugzilla_description":"CVE-2010-1771 WebKit: use-after-free vulnerability in font handling","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1771.json"},{"CVE":"CVE-2010-1772","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596498","bugzilla_description":"CVE-2010-1772 WebKit: use-after-free vulnerability in handling of geolocation events","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1772.json"},{"CVE":"CVE-2010-1773","severity":"low","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596500","bugzilla_description":"CVE-2010-1773 WebKit: off-by-one memory read out of bounds vulnerability in handling of HTML lists","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-193->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1773.json"},{"CVE":"CVE-2010-1774","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596501","bugzilla_description":"CVE-2010-1774 WebKit: out-of-bounds memory access vulnerability in handling of HTML tables","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1774.json"},{"CVE":"CVE-2007-4137","severity":"important","public_date":"2007-09-03T00:00:00Z","advisories":["RHSA-2007:0883"],"bugzilla":"269001","bugzilla_description":"CVE-2007-4137 QT off by one buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["qt-1:3.3.6-23.el5","qt-1:3.3.3-13.RHEL4","qt-1:2.3.1-14.EL2","qt-1:3.1.2-17.RHEL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4137.json"},{"CVE":"CVE-2007-3388","severity":"important","public_date":"2007-07-27T00:00:00Z","advisories":["RHSA-2007:0721"],"bugzilla":"248417","bugzilla_description":"CVE-2007-3388 qt3 format string flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["qt-1:3.3.3-11.RHEL4","qt-1:3.3.6-21.el5","qt-1:3.1.2-16.RHEL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3388.json"},{"CVE":"CVE-2007-0242","severity":"moderate","public_date":"2007-03-29T00:00:00Z","advisories":["RHSA-2011:1324","RHSA-2007:0883","RHSA-2007:0909"],"bugzilla":"234633","bugzilla_description":"CVE-2007-0242 QT UTF8 improper character expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["qt-1:3.3.6-23.el5","kdelibs-6:3.3.1-9.el4","kdelibs-6:3.5.4-13.el5","qt-1:3.3.3-13.RHEL4","qt-1:2.3.1-14.EL2","qt-1:3.1.2-17.RHEL3","qt4-0:4.2.1-1.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0242.json"},{"CVE":"CVE-2006-4811","severity":"critical","public_date":"2006-10-13T23:06:00Z","advisories":["RHSA-2006:0725","RHSA-2006:0720"],"bugzilla":"1618204","bugzilla_description":"CVE-2006-4811 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdelibs-6:3.1.3-6.12","qt-1:3.1.2-14.RHEL3","kdelibs-6:3.3.1-6.RHEL4","qt-1:2.3.1-12.EL2","kdelibs-6:2.2.2-21.EL2","qt-1:3.3.3-10.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4811.json"},{"CVE":"CVE-2004-0691","severity":"important","public_date":"2004-08-18T00:00:00Z","advisories":["RHSA-2004:414"],"bugzilla":"1617252","bugzilla_description":"CVE-2004-0691 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["qt-1:3.1.2-13.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0691.json"},{"CVE":"CVE-2004-0692","severity":"moderate","public_date":"2004-08-18T00:00:00Z","advisories":["RHSA-2004:478","RHSA-2004:479","RHSA-2004:414"],"bugzilla":"1617253","bugzilla_description":"CVE-2004-0692 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["qt-1:3.1.2-13.4","XFree86-0:4.3.0-69.EL"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0692.json"},{"CVE":"CVE-2004-0693","severity":"moderate","public_date":"2004-08-18T00:00:00Z","advisories":["RHSA-2004:414"],"bugzilla":"1617254","bugzilla_description":"CVE-2004-0693 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["qt-1:3.1.2-13.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0693.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/quagga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/quagga_security_api_results.json
new file mode 100644
index 0000000..56b5f3b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/quagga_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-5378","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":[],"bugzilla":"1542972","bugzilla_description":"CVE-2018-5378 quagga: bgpd does not properly bounds check the data sent with a NOTIFY allowing leak of sensitive data or crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5378.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-5379","severity":"important","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:0377"],"bugzilla":"1542985","bugzilla_description":"CVE-2018-5379 quagga: Double free vulnerability in bgpd when processing certain forms of UPDATE message allowing to crash or potentially execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["quagga-0:0.99.22.4-5.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-5380","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":[],"bugzilla":"1542990","bugzilla_description":"CVE-2018-5380 quagga: bgpd can overrun internal BGP code-to-string conversion tables potentially allowing crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5380.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-5381","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":[],"bugzilla":"1542992","bugzilla_description":"CVE-2018-5381 quagga: Infinite loop issue triggered by invalid OPEN message allows denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-228->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5381.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-16227","severity":"moderate","public_date":"2017-10-02T00:00:00Z","advisories":[],"bugzilla":"1509291","bugzilla_description":"CVE-2017-16227 quagga: Incorrect AS_PATH size calculation for long paths","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16227.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-3224","severity":"moderate","public_date":"2017-07-27T00:00:00Z","advisories":[],"bugzilla":"1472873","bugzilla_description":"CVE-2017-3224 quagga: OSPF implementation improperly determines LSA recency (VU#793496)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-354","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3224.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-5495","severity":"moderate","public_date":"2017-01-23T00:00:00Z","advisories":["RHSA-2017:0794"],"bugzilla":"1416013","bugzilla_description":"CVE-2017-5495 quagga: Telnet interface input buffer allocates unbounded amounts of memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["quagga-0:0.99.15-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5495.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-1245","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2017:0794"],"bugzilla":"1386109","bugzilla_description":"CVE-2016-1245 quagga: Buffer Overflow in IPv6 RA handling","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["quagga-0:0.99.15-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4036","severity":"low","public_date":"2016-08-23T00:00:00Z","advisories":[],"bugzilla":"1370416","bugzilla_description":"CVE-2016-4036 quagga: Wrong permissions allowing information leak","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4036.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-4049","severity":"moderate","public_date":"2016-04-27T00:00:00Z","advisories":["RHSA-2017:0794"],"bugzilla":"1331372","bugzilla_description":"CVE-2016-4049 quagga: denial of service vulnerability in BGP routing daemon","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.99.15-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4049.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-2342","severity":"moderate","public_date":"2016-03-09T00:00:00Z","advisories":["RHSA-2017:0794"],"bugzilla":"1316571","bugzilla_description":"CVE-2016-2342 quagga: VPNv4 NLRI parser memcpys to stack on unchecked length","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["quagga-0:0.99.15-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2342.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2013-6051","severity":"moderate","public_date":"2013-11-25T00:00:00Z","advisories":[],"bugzilla":"1043370","bugzilla_description":"CVE-2013-6051 quagga: bgp crash when receiving bgp updates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6051.json"},{"CVE":"CVE-2013-0149","severity":"moderate","public_date":"2013-08-01T00:00:00Z","advisories":[],"bugzilla":"991457","bugzilla_description":"CVE-2013-0149 quagga (ospfd): Possibility to use invalid / duplicate LSA information (VU#229804)","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0149.json"},{"CVE":"CVE-2013-2236","severity":"low","public_date":"2013-07-02T00:00:00Z","advisories":["RHSA-2017:0794"],"bugzilla":"981124","bugzilla_description":"CVE-2013-2236 Quagga: OSPFD Potential remote code exec (stack based buffer overflow)","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["quagga-0:0.99.15-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2236.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2012-5521","severity":"low","public_date":"2012-11-13T00:00:00Z","advisories":[],"bugzilla":"876197","bugzilla_description":"CVE-2012-5521 quagga (ospf6d): Assertion failure when removing routes (retrieving information which route to remove)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5521.json"},{"CVE":"CVE-2012-1820","severity":"low","public_date":"2012-06-03T00:00:00Z","advisories":["RHSA-2012:1259"],"bugzilla":"817580","bugzilla_description":"CVE-2012-1820 quagga (bgpd): Assertion failure by processing BGP OPEN message with malformed ORF capability TLV (VU#962587)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1820.json"},{"CVE":"CVE-2012-0255","severity":"low","public_date":"2012-03-28T00:00:00Z","advisories":["RHSA-2012:1259"],"bugzilla":"802781","bugzilla_description":"CVE-2012-0255 quagga (bgpd): Assertion failure by processing malformed AS4 capability in BGP OPEN message","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0255.json"},{"CVE":"CVE-2012-0249","severity":"low","public_date":"2012-03-28T00:00:00Z","advisories":["RHSA-2012:1258","RHSA-2012:1259"],"bugzilla":"802827","bugzilla_description":"CVE-2012-0249 quagga (ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0249.json"},{"CVE":"CVE-2012-0250","severity":"low","public_date":"2012-03-28T00:00:00Z","advisories":["RHSA-2012:1258","RHSA-2012:1259"],"bugzilla":"802829","bugzilla_description":"CVE-2012-0250 quagga (ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0250.json"},{"CVE":"CVE-2011-3323","severity":"low","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:1258","RHSA-2012:1259"],"bugzilla":"738393","bugzilla_description":"CVE-2011-3323 Quagga (ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3323.json"},{"CVE":"CVE-2011-3324","severity":"low","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:1258","RHSA-2012:1259"],"bugzilla":"738394","bugzilla_description":"CVE-2011-3324 Quagga (ospf6d): Denial of service by decoding malformed Database Description packet headers","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3324.json"},{"CVE":"CVE-2011-3325","severity":"low","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:1258","RHSA-2012:1259"],"bugzilla":"738396","bugzilla_description":"CVE-2011-3325 Quagga (ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3325.json"},{"CVE":"CVE-2011-3326","severity":"low","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:1258","RHSA-2012:1259"],"bugzilla":"738398","bugzilla_description":"CVE-2011-3326 Quagga (ospfd): Denial of service by decoding Link State Update LSAs of unknown type","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3326.json"},{"CVE":"CVE-2011-3327","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:1258","RHSA-2012:1259"],"bugzilla":"738400","bugzilla_description":"CVE-2011-3327 Quagga (bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-7.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3327.json"},{"CVE":"CVE-2010-1674","severity":"low","public_date":"2011-03-21T00:00:00Z","advisories":["RHSA-2011:0406","RHSA-2012:1258"],"bugzilla":"654603","bugzilla_description":"CVE-2010-1674 quagga: DoS (crash) by processing malformed extended community attribute in a route","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.98.6-7.el5_8.1","quagga-0:0.99.15-5.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1674.json"},{"CVE":"CVE-2010-1675","severity":"moderate","public_date":"2011-03-21T00:00:00Z","advisories":["RHSA-2011:0406"],"bugzilla":"654614","bugzilla_description":"CVE-2010-1675 quagga: BGP session reset by processing BGP Update message with malformed AS-path attributes","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.99.15-5.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1675.json"},{"CVE":"CVE-2010-2948","severity":"moderate","public_date":"2010-08-19T00:00:00Z","advisories":["RHSA-2010:0945","RHSA-2010:0785"],"bugzilla":"626783","bugzilla_description":"CVE-2010-2948 Quagga (bgpd): Stack buffer overflow by processing certain Route-Refresh messages","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["quagga-0:0.98.3-4.el4_8.1","quagga-0:0.98.6-5.el5_5.2","quagga-0:0.99.15-5.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2948.json"},{"CVE":"CVE-2010-2949","severity":"low","public_date":"2010-08-19T00:00:00Z","advisories":["RHSA-2010:0945"],"bugzilla":"626795","bugzilla_description":"CVE-2010-2949 Quagga (bgpd): DoS (crash) while processing certain BGP update AS path messages","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.99.15-5.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2949.json"},{"CVE":"CVE-2007-4826","severity":"low","public_date":"2007-09-07T00:00:00Z","advisories":["RHSA-2010:0785"],"bugzilla":"285691","bugzilla_description":"CVE-2007-4826 quagga bgpd DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["quagga-0:0.98.3-4.el4_8.1","quagga-0:0.98.6-5.el5_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4826.json"},{"CVE":"CVE-2007-1995","severity":"moderate","public_date":"2007-04-08T00:00:00Z","advisories":["RHSA-2007:0389"],"bugzilla":"240478","bugzilla_description":"CVE-2007-1995 Quagga bgpd DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["quagga-0:0.96.2-12.3E","quagga-0:0.98.6-2.1.0.1.el5","quagga-0:0.98.3-2.4.0.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1995.json"},{"CVE":"CVE-2006-2223","severity":"moderate","public_date":"2006-05-03T00:00:00Z","advisories":["RHSA-2006:0525","RHSA-2006:0533"],"bugzilla":"1618091","bugzilla_description":"CVE-2006-2223 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["quagga-0:0.98.3-2.4E","quagga-0:0.96.2-11.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2223.json"},{"CVE":"CVE-2006-2224","severity":"moderate","public_date":"2006-05-03T00:00:00Z","advisories":["RHSA-2006:0525","RHSA-2006:0533"],"bugzilla":"1618092","bugzilla_description":"CVE-2006-2224 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["quagga-0:0.98.3-2.4E","quagga-0:0.96.2-11.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2224.json"},{"CVE":"CVE-2006-2276","severity":"moderate","public_date":"2006-03-29T00:00:00Z","advisories":["RHSA-2006:0525","RHSA-2006:0533"],"bugzilla":"1618099","bugzilla_description":"CVE-2006-2276 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["quagga-0:0.98.3-2.4E","quagga-0:0.96.2-11.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2276.json"},{"CVE":"CVE-2003-0858","severity":"low","public_date":"2003-11-12T00:00:00Z","advisories":["RHSA-2003:307","RHSA-2003:315","RHSA-2003:305"],"bugzilla":"1617096","bugzilla_description":"CVE-2003-0858 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["quagga-0:0.96.2-8.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0858.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/quota-nls_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/quota-nls_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/quota-nls_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/quota_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/quota_security_api_results.json
new file mode 100644
index 0000000..96541a2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/quota_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3417","severity":"low","public_date":"2009-04-22T00:00:00Z","advisories":["RHSA-2013:0120"],"bugzilla":"566717","bugzilla_description":"CVE-2012-3417 quota: incorrect use of tcp_wrappers","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["quota-1:3.13-8.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3417.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/radvd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/radvd_security_api_results.json
new file mode 100644
index 0000000..bde65fb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/radvd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-3601","severity":"low","public_date":"2011-10-04T00:00:00Z","advisories":[],"bugzilla":"743748","bugzilla_description":"CVE-2011-3601 radvd: privilege escalation flaw in process_ra()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3601.json"},{"CVE":"CVE-2011-3602","severity":"low","public_date":"2011-10-04T00:00:00Z","advisories":[],"bugzilla":"743749","bugzilla_description":"CVE-2011-3602 radvd: arbitrary file overwrite flaw in set_interface_var()","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3602.json"},{"CVE":"CVE-2011-3603","severity":"moderate","public_date":"2011-10-04T00:00:00Z","advisories":[],"bugzilla":"743752","bugzilla_description":"CVE-2011-3603 radvd: daemon would not fail on privsep_init() causing it to run with full root privileges","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3603.json"},{"CVE":"CVE-2011-3604","severity":"moderate","public_date":"2011-10-04T00:00:00Z","advisories":[],"bugzilla":"743756","bugzilla_description":"CVE-2011-3604 radvd: numerous buffer overread flaws in process_ra() may lead to crash","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3604.json"},{"CVE":"CVE-2011-3605","severity":"low","public_date":"2011-10-04T00:00:00Z","advisories":[],"bugzilla":"743758","bugzilla_description":"CVE-2011-3605 radvd: temporary denial of service flaw in process_rs()","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3605.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/raptor2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/raptor2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/raptor2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rarian-compat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rarian-compat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rarian-compat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rarian_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rarian_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rarian_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rasdaemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rasdaemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rasdaemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rasqal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rasqal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rasqal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rcs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rcs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rcs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdist_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdist_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdist_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdma-core-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdma-core-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdma-core-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdma-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdma-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rdma-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/readline-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/readline-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/readline-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/readline_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/readline_security_api_results.json
new file mode 100644
index 0000000..67bbc12
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/readline_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7091","severity":"low","public_date":"2016-05-24T00:00:00Z","advisories":["RHSA-2016:2593"],"bugzilla":"1339935","bugzilla_description":"CVE-2016-7091 sudo: Possible info leak via INPUTRC","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["sudo-0:1.8.6p7-20.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7091.json"},{"CVE":"CVE-2014-2524","severity":"low","public_date":"2014-03-14T00:00:00Z","advisories":[],"bugzilla":"1077023","bugzilla_description":"CVE-2014-2524 readline: insecure temporary file use in _rl_tropen()","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2524.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/realmd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/realmd_security_api_results.json
new file mode 100644
index 0000000..eb671b7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/realmd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-2704","severity":"moderate","public_date":"2015-02-18T00:00:00Z","advisories":["RHSA-2015:2184"],"bugzilla":"1205752","bugzilla_description":"CVE-2015-2704 realmd: untrusted data is used when configuring sssd.conf and/or smb.conf","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-345","affected_packages":["realmd-0:0.16.1-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2704.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rear_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rear_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rear_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/recode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/recode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/recode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redfish-finder_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redfish-finder_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redfish-finder_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-access-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-access-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-access-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-access-plugin-ipa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-access-plugin-ipa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-access-plugin-ipa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-bookmarks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-bookmarks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-bookmarks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-indexhtml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-indexhtml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-indexhtml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-logos_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-logos_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-logos_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-cxx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-cxx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-cxx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-desktop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-desktop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-desktop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-languages_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-languages_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-languages_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-printing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-printing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-printing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-submod-multimedia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-submod-multimedia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-submod-multimedia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-submod-security_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-submod-security_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb-submod-security_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-lsb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-menus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-menus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-menus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-computenode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-computenode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-computenode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-eula_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-eula_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-eula_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-workstation_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-workstation_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-release-workstation_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-rpm-config_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-rpm-config_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-rpm-config_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-support-lib-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-support-lib-python_security_api_results.json
new file mode 100644
index 0000000..ed88128
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-support-lib-python_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-1752","severity":"moderate","public_date":"2012-09-25T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1046174","bugzilla_description":"CVE-2013-1752 python: multiple unbound readline() DoS flaws in python stdlib","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1752.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-support-tool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-support-tool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-support-tool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-upgrade-dracut-plymouth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-upgrade-dracut-plymouth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-upgrade-dracut-plymouth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-upgrade-dracut_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-upgrade-dracut_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-upgrade-dracut_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-upgrade-tool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-upgrade-tool_security_api_results.json
new file mode 100644
index 0000000..4c8e97e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redhat-upgrade-tool_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-3585","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHBA-2015:2395","RHBA-2014:1396"],"bugzilla":"1126002","bugzilla_description":"CVE-2014-3585 redhat-upgrade-tool: does not check GPG signatures on package installation","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-347","affected_packages":["redhat-upgrade-tool-2:0.9.3-1.el7","redhat-upgrade-tool-1:0.7.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3585.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redland-virtuoso_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redland-virtuoso_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redland-virtuoso_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redland_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redland_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/redland_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/regexp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/regexp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/regexp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/relaxngDatatype_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/relaxngDatatype_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/relaxngDatatype_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resource-agents-aliyun_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resource-agents-aliyun_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resource-agents-aliyun_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resource-agents-gcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resource-agents-gcp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resource-agents-gcp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resource-agents_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resource-agents_security_api_results.json
new file mode 100644
index 0000000..b9a75a3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resource-agents_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-3389","severity":"low","public_date":"2010-09-30T00:00:00Z","advisories":["RHSA-2011:1000","RHSA-2011:0264","RHSA-2011:1580"],"bugzilla":"639044","bugzilla_description":"CVE-2010-3389 rgmanager: insecure library loading vulnerability","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rgmanager-0:1.9.88-2.el4","rgmanager-0:2.0.52-21.el5","resource-agents-0:3.9.2-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3389.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rest_security_api_results.json
new file mode 100644
index 0000000..4e563ed
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rest_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13956","severity":"moderate","public_date":"2020-10-08T00:00:00Z","advisories":[],"bugzilla":"1886587","bugzilla_description":"CVE-2020-13956 apache-httpclient: incorrect handling of malformed authority component in request URIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13956.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-24750","severity":"important","public_date":"2020-09-18T00:00:00Z","advisories":["RHSA-2020:4173"],"bugzilla":"1882310","bugzilla_description":"CVE-2020-24750 jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-25633","severity":"moderate","public_date":"2020-09-04T00:00:00Z","advisories":[],"bugzilla":"1879042","bugzilla_description":"CVE-2020-25633 resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25633.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-10746","severity":"important","public_date":"2020-09-03T00:00:00Z","advisories":["RHSA-2020:3626"],"bugzilla":"1835922","bugzilla_description":"CVE-2020-10746 Infinispan: REST and HotRod APIs unsecured locally by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10746.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2020-8911","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869800","bugzilla_description":"CVE-2020-8911 aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8911.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2020-8912","severity":"low","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869801","bugzilla_description":"CVE-2020-8912 aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8912.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-14326","severity":"important","public_date":"2020-07-09T00:00:00Z","advisories":["RHSA-2020:3248"],"bugzilla":"1855826","bugzilla_description":"CVE-2020-14326 RESTEasy: Caching routes in RootNode may result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-407","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14326.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10771","severity":"moderate","public_date":"2020-06-04T00:00:00Z","advisories":[],"bugzilla":"1846293","bugzilla_description":"CVE-2020-10771 Infinispan: Actions with effects should not be permitted via GET requests using REST API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10771.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2020-8203","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:3807","RHSA-2020:3370"],"bugzilla":"1857412","bugzilla_description":"CVE-2020-8203 nodejs-lodash: prototype pollution in zipObjectDeep function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","distributed-tracing/jaeger-query-rhel7:1.17.6-1","ovirt-web-ui-0:1.6.4-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2020-1695","severity":"moderate","public_date":"2020-04-15T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:2112","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:2905","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHSA-2020:2513"],"bugzilla":"1730462","bugzilla_description":"CVE-2020-1695 resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1695.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-10688","severity":"moderate","public_date":"2020-02-18T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:2333","RHSA-2020:2905","RHSA-2020:3806","RHSA-2020:2515","RHSA-2020:2512","RHSA-2020:2513"],"bugzilla":"1814974","bugzilla_description":"CVE-2020-10688 RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10688.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-19352","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:1942"],"bugzilla":"1793281","bugzilla_description":"CVE-2019-19352 operator-framework/presto: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift4/ose-metering-presto:v4.4.0-202004261927"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19352.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-25649","severity":"important","public_date":"2020-01-09T00:00:00Z","advisories":["RHSA-2020:4312"],"bugzilla":"1887664","bugzilla_description":"CVE-2020-25649 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25649.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-15224","severity":"important","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743940","bugzilla_description":"CVE-2019-15224 rubygem-rest-client: code-execution backdoor insterted by third party","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-348","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-16843","severity":"moderate","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2018:3681","RHSA-2018:3680","RHSA-2018:3653"],"bugzilla":"1644511","bugzilla_description":"CVE-2018-16843 nginx: Excessive memory consumption via flaw in HTTP/2 implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nginx110-nginx-1:1.10.2-8.el6.1","rh-nginx110-nginx-1:1.10.2-8.el7.1","rh-nginx112-nginx-1:1.12.1-2.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16487","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":[],"bugzilla":"1671878","bugzilla_description":"CVE-2018-16487 lodash: Prototype pollution in utilities function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16487.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-1051","severity":"moderate","public_date":"2018-01-18T00:00:00Z","advisories":[],"bugzilla":"1535411","bugzilla_description":"CVE-2018-1051 resteasy: Unsafe unmarshalling in YamlProvider allows code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1051.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12629","severity":"critical","public_date":"2017-10-12T00:00:00Z","advisories":["RHSA-2020:2561","RHSA-2018:0005","RHSA-2018:0002","RHSA-2017:3452","RHSA-2017:3244","RHSA-2017:3123","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:3451","RHSA-2017:3124"],"bugzilla":"1501529","bugzilla_description":"CVE-2017-12629 Solr: Code execution via entity expansion","cvss_score":10.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-138","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-lucene-solr-0:5.3.1-4.redhat_2.1.ep7.el6","eap7-lucene-solr-0:5.3.1-4.redhat_2.1.ep7.el7","rh-java-common-lucene5-0:5.4.1-2.4.el7","rh-java-common-lucene5-0:5.4.1-2.4.el6","rh-java-common-lucene-0:4.8.0-6.9.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6","rh-java-common-lucene-0:4.8.0-6.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-14949","severity":"moderate","public_date":"2017-10-02T00:00:00Z","advisories":[],"bugzilla":"1520471","bugzilla_description":"CVE-2017-14949 restlet: XXE vulnerability in XML extension allows remote attackers to access arbitrary files via a crafted REST API HTTP request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14949.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.0"},{"CVE":"CVE-2017-14868","severity":"moderate","public_date":"2017-09-27T00:00:00Z","advisories":[],"bugzilla":"1498760","bugzilla_description":"CVE-2017-14868 restlet: XML external entity injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14868.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-7561","severity":"moderate","public_date":"2017-08-22T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2018:0005","RHSA-2018:0478","RHSA-2018:0479","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2018:0481"],"bugzilla":"1483823","bugzilla_description":"CVE-2017-7561 resteasy: Vary header not added by CORS filter leading to cache poisoning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7561.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-7492","severity":"moderate","public_date":"2017-05-08T00:00:00Z","advisories":[],"bugzilla":"1448753","bugzilla_description":"REJECTED CVE-2017-7492 SourceProvider in RestEasy-jaxrs is vulnerable to XXE","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7492.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-2638","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1097"],"bugzilla":"1428564","bugzilla_description":"CVE-2017-2638 infinispan: auth bypass in REST api","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-9606","severity":"moderate","public_date":"2016-12-15T00:00:00Z","advisories":["RHSA-2018:2913","RHSA-2017:1260","RHSA-2017:1253","RHSA-2018:2909","RHSA-2017:1255","RHSA-2017:1254","RHSA-2017:1675","RHSA-2017:1411","RHSA-2017:1256","RHSA-2017:1410","RHSA-2017:1676","RHSA-2017:1412","RHSA-2017:1409"],"bugzilla":"1400644","bugzilla_description":"CVE-2016-9606 Resteasy: Yaml unmarshalling vulnerable to RCE","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["resteasy-0:2.3.19-1.Final_redhat_1.1.ep6.el5","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","jboss-ec2-eap-0:7.5.15-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-7050","severity":"important","public_date":"2016-09-23T00:00:00Z","advisories":["RHSA-2016:2604"],"bugzilla":"1378613","bugzilla_description":"CVE-2016-7050 RESTEasy:SerializableProvider enabled by default and deserializes untrusted data","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["resteasy-base-0:3.0.6-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7050.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2016-6345","severity":"low","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372117","bugzilla_description":"CVE-2016-6345 RESTEasy: Insufficient use of random values in RESTEasy async jobs could lead to loss of data confidentiality","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-6346","severity":"moderate","public_date":"2016-09-01T00:00:00Z","advisories":["RHSA-2019:1222","RHSA-2018:0005","RHSA-2017:1675","RHSA-2017:1676","RHSA-2017:0517","RHSA-2017:0827","RHSA-2018:0002","RHSA-2017:0826","RHSA-2017:0829","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:0828","RHSA-2018:2143"],"bugzilla":"1372120","bugzilla_description":"CVE-2016-6346 RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6347","severity":"moderate","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372124","bugzilla_description":"CVE-2016-6347 RESTEasy: Use of the default exception handler in RESTEasy can lead to reflected XSS attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-6348","severity":"low","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372129","bugzilla_description":"CVE-2016-6348 RESTEasy: Use of JacksonJsonpInterceptor in RESTEasy can lead to Cross Site Script Inclusion attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2015-1820","severity":"moderate","public_date":"2015-03-24T00:00:00Z","advisories":[],"bugzilla":"1205291","bugzilla_description":"CVE-2015-1820 rubygem-rest-client: session fixation vulnerability Set-Cookie headers present in an HTTP 30x redirection responses","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1820.json"},{"CVE":"CVE-2015-3448","severity":"low","public_date":"2015-01-12T00:00:00Z","advisories":[],"bugzilla":"1240982","bugzilla_description":"CVE-2015-3448 rubygem-rest-client: unsanitized application logging","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3448.json"},{"CVE":"CVE-2014-7839","severity":"moderate","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2015:0218","RHSA-2015:0217","RHSA-2015:1009","RHSA-2015:0216","RHSA-2015:0215","RHSA-2015:0851","RHSA-2015:0675","RHSA-2015:0850","RHSA-2015:0773"],"bugzilla":"1165328","bugzilla_description":"CVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7839.json"},{"CVE":"CVE-2015-2675","severity":"low","public_date":"2014-09-03T00:00:00Z","advisories":["RHSA-2015:2237"],"bugzilla":"1199049","bugzilla_description":"CVE-2015-2675 rest: memory corruption when using oauth because of implicit declaration of rest_proxy_call_get_url","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-704","affected_packages":["rest-0:0.7.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2675.json"},{"CVE":"CVE-2014-3490","severity":"moderate","public_date":"2014-07-23T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0125","RHSA-2015:0234","RHSA-2014:1039","RHSA-2014:1904","RHSA-2014:1040","RHSA-2014:1298","RHSA-2014:1011"],"bugzilla":"1107901","bugzilla_description":"CVE-2014-3490 RESTEasy: XXE via parameter entities","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-base-0:2.3.5-3.el7_0","resteasy-0:2.3.8-5.SP1_redhat_1.1.ep6.el7","resteasy-0:2.3.8-5.SP1_redhat_1.1.ep6.el5","resteasy-0:2.3.8-5.SP1_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3490.json"},{"CVE":"CVE-2014-1868","severity":"moderate","public_date":"2014-02-09T00:00:00Z","advisories":[],"bugzilla":"1065199","bugzilla_description":"CVE-2014-1868 Restlet: DoS due to XML entity expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1868.json"},{"CVE":"CVE-2013-4271","severity":"important","public_date":"2013-09-07T00:00:00Z","advisories":["RHSA-2013:1410","RHSA-2013:1862"],"bugzilla":"999735","bugzilla_description":"CVE-2013-4271 Restlet: remote code execution due to insecure deserialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4271.json"},{"CVE":"CVE-2013-4221","severity":"important","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1410","RHSA-2013:1862"],"bugzilla":"995275","bugzilla_description":"CVE-2013-4221 Restlet: remote code execution due to insecure XML deserialization","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4221.json"},{"CVE":"CVE-2012-2656","severity":"moderate","public_date":"2012-05-29T00:00:00Z","advisories":[],"bugzilla":"999809","bugzilla_description":"CVE-2012-2656 Restlet: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2656.json"},{"CVE":"CVE-2011-5245","severity":"moderate","public_date":"2011-12-30T00:00:00Z","advisories":["RHSA-2012:0519","RHSA-2012:1056","RHSA-2012:1058","RHSA-2012:0441","RHSA-2012:1057","RHSA-2012:0421","RHSA-2012:1059","RHSA-2012:1125","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"785631","bugzilla_description":"CVE-2011-5245 CVE-2012-0818 RESTEasy: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el4","org.ovirt.engine-root-0:3.0.3_0001-3","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el6","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5245.json"},{"CVE":"CVE-2012-0818","severity":"moderate","public_date":"2011-12-30T00:00:00Z","advisories":["RHSA-2013:1263","RHSA-2012:0519","RHSA-2012:1056","RHSA-2012:1058","RHSA-2012:0441","RHSA-2012:1057","RHSA-2012:0421","RHSA-2012:1059","RHSA-2012:1125","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"785631","bugzilla_description":"CVE-2011-5245 CVE-2012-0818 RESTEasy: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el4","org.ovirt.engine-root-0:3.0.3_0001-3","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el6","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0818.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-atom-provider_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-atom-provider_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-atom-provider_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jackson-provider_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jackson-provider_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jackson-provider_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jaxb-provider_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jaxb-provider_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jaxb-provider_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jaxrs-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jaxrs-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jaxrs-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jaxrs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jaxrs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jaxrs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jettison-provider_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jettison-provider_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/resteasy-base-jettison-provider_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rfkill_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rfkill_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rfkill_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhdb-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhdb-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhdb-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhino_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhino_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhino_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-check_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-check_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-check_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-client-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-client-tools_security_api_results.json
new file mode 100644
index 0000000..d2d5fe3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-client-tools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-1777","severity":"moderate","public_date":"2015-03-04T00:00:00Z","advisories":[],"bugzilla":"1198740","bugzilla_description":"CVE-2015-1777 rhn-setup: rhnreg_ks fails to properly validate SSL/TLS certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1777.json"},{"CVE":"CVE-2010-1439","severity":"moderate","public_date":"2010-06-01T00:00:00Z","advisories":["RHSA-2010:0449"],"bugzilla":"585386","bugzilla_description":"CVE-2010-1439 rhn-client-tools: authorized information disclosure","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhn-client-tools-0:0.4.20-33.el5_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1439.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-setup-gnome_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-setup-gnome_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-setup-gnome_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-setup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-setup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhn-setup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhnlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhnlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhnlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhnsd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhnsd_security_api_results.json
new file mode 100644
index 0000000..554aa42
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhnsd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-7560","severity":"low","public_date":"2017-08-22T00:00:00Z","advisories":[],"bugzilla":"1480550","bugzilla_description":"CVE-2017-7560 rhnsd: World-writable PID files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7560.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhsm-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhsm-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhsm-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhythmbox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhythmbox_security_api_results.json
new file mode 100644
index 0000000..a269b79
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rhythmbox_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3355","severity":"low","public_date":"2011-03-06T00:00:00Z","advisories":[],"bugzilla":"835076","bugzilla_description":"CVE-2012-3355 rhythmbox (context plug-in): Insecure temporary directory use by loading template files for 'Album', 'Lyrics', and 'Artist' tabs","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3355.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rmt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rmt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rmt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rng-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rng-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rng-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rngom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rngom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rngom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rootfiles_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rootfiles_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rootfiles_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rp-pppoe_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rp-pppoe_security_api_results.json
new file mode 100644
index 0000000..af9a35a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rp-pppoe_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8597","severity":"important","public_date":"2020-02-03T00:00:00Z","advisories":["RHSA-2020:0630","RHSA-2020:0631","RHSA-2020:0634","RHSA-2020:0633"],"bugzilla":"1800727","bugzilla_description":"CVE-2020-8597 ppp: Buffer overflow in the eap_request and eap_response functions in eap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["ppp-0:2.4.7-26.el8_1","ppp-0:2.4.7-26.el8_0","ppp-0:2.4.5-11.el6_10","ppp-0:2.4.5-34.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpcbind_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpcbind_security_api_results.json
new file mode 100644
index 0000000..03ff8b1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpcbind_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-8779","severity":"important","public_date":"2017-05-03T00:00:00Z","advisories":["RHSA-2017:1262","RHBA-2017:1497","RHSA-2017:1263","RHSA-2017:1395","RHSA-2017:1268","RHSA-2017:1267"],"bugzilla":"1448124","bugzilla_description":"CVE-2017-8779 rpcbind, libtirpc, libntirpc: Memory leak when failing to parse XDR strings or bytearrays","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rpcbind-0:0.2.0-13.el6_9","libntirpc-0:1.4.3-4.el7rhgs","libtirpc-0:0.2.4-0.8.el7_3","libntirpc-0:1.4.3-2.el7","libntirpc-0:1.4.3-4.el6rhs","libtirpc-0:0.2.1-13.el6_9","rpcbind-0:0.2.0-38.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-7236","severity":"moderate","public_date":"2015-08-06T00:00:00Z","advisories":["RHSA-2016:0005"],"bugzilla":"1264345","bugzilla_description":"CVE-2015-7236 rpcbind: Use-after-free vulnerability in PMAP_CALLIT","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["rpcbind-0:0.2.0-33.el7_2","rpcbind-0:0.2.0-11.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7236.json"},{"CVE":"CVE-2012-3541","severity":"moderate","public_date":"2014-07-08T00:00:00Z","advisories":[],"bugzilla":"852282","bugzilla_description":"CVE-2012-3541 rpcbind: -h fails to control access to rpcbind","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3541.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-build-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-build-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-build-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-build_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-build_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-build_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-sign_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-sign_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm-sign_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm_security_api_results.json
new file mode 100644
index 0000000..1cb8284
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10360","severity":"low","public_date":"2018-06-09T00:00:00Z","advisories":["RHSA-2020:2521","RHBA-2020:1539","RHSA-2020:1022","RHSA-2020:2838","RHSA-2020:2768","RHBA-2020:1540"],"bugzilla":"1590000","bugzilla_description":"CVE-2018-10360 file: out-of-bounds read via a crafted ELF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","file-0:5.11-35.el7_6.1","file-0:5.11-35.el7_7.1","file-0:5.11-33.el7_4.1","file-0:5.11-36.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10360.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-1000249","severity":"important","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1488053","bugzilla_description":"CVE-2017-1000249 file: Stack-based buffer overflow in do_bid_note()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000249.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7500","severity":"moderate","public_date":"2017-07-03T00:00:00Z","advisories":[],"bugzilla":"1450369","bugzilla_description":"CVE-2017-7500 rpm: Following symlinks to directories when installing packages allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7500.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2017-7501","severity":"moderate","public_date":"2017-07-03T00:00:00Z","advisories":[],"bugzilla":"1452133","bugzilla_description":"CVE-2017-7501 rpm: Following symlinks to files when installing packages allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7501.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2017-2623","severity":"moderate","public_date":"2017-03-02T00:00:00Z","advisories":["RHSA-2017:0444"],"bugzilla":"1422157","bugzilla_description":"CVE-2017-2623 rpm-ostree, rpm-ostree-client: fails to check gpg package signatures when layering","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["rpm-ostree-0:2017.1-5.atomic.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2015-8865","severity":"low","public_date":"2016-02-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323118","bugzilla_description":"CVE-2015-8865 file: Buffer over-write in finfo_open with malformed magic file","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2014-9620","severity":"low","public_date":"2015-01-03T00:00:00Z","advisories":["RHSA-2016:0760"],"bugzilla":"1180639","bugzilla_description":"CVE-2014-9620 file: limit the number of ELF notes processed","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9620.json"},{"CVE":"CVE-2014-9621","severity":"low","public_date":"2015-01-03T00:00:00Z","advisories":[],"bugzilla":"1180642","bugzilla_description":"CVE-2014-9621 file: limit string printing to 100 chars","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9621.json"},{"CVE":"CVE-2014-9653","severity":"low","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2015:2155"],"bugzilla":"1190116","bugzilla_description":"CVE-2014-9653 file: malformed elf file causes access to uninitialized memory","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9653.json"},{"CVE":"CVE-2013-6435","severity":"important","public_date":"2014-12-09T00:00:00Z","advisories":["RHSA-2014:1976","RHSA-2014:1975","RHSA-2014:1974"],"bugzilla":"1039811","bugzilla_description":"CVE-2013-6435 rpm: race condition during the installation process","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-367","affected_packages":["rpm-0:4.8.0-38.el6_6","rpm-0:4.11.1-18.el7_0","rpm-0:4.4.2.3-36.el5_11","rpm-0:4.4.2.3-34.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6435.json"},{"CVE":"CVE-2014-8118","severity":"important","public_date":"2014-12-09T00:00:00Z","advisories":["RHSA-2014:1976"],"bugzilla":"1168715","bugzilla_description":"CVE-2014-8118 rpm: integer overflow and stack overflow in CPIO header parsing","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-190->CWE-121","affected_packages":["rpm-0:4.11.1-18.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8118.json"},{"CVE":"CVE-2014-9652","severity":"low","public_date":"2014-11-11T00:00:00Z","advisories":["RHSA-2015:2155","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1188599","bugzilla_description":"CVE-2014-9652 file: out of bounds read in mconvert()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9652.json"},{"CVE":"CVE-2014-3587","severity":"moderate","public_date":"2014-08-21T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1128587","bugzilla_description":"CVE-2014-3587 file: incomplete fix for CVE-2012-1571 in cdf_read_property_info","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["php53-0:5.3.3-24.el5","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3587.json"},{"CVE":"CVE-2014-0207","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1091842","bugzilla_description":"CVE-2014-0207 file: cdf_read_short_sector insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0207.json"},{"CVE":"CVE-2014-0236","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":[],"bugzilla":"1098209","bugzilla_description":"CVE-2014-0236 file: root_storage NULL pointer deference flaw in CDF parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0236.json"},{"CVE":"CVE-2014-3538","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1098222","bugzilla_description":"CVE-2014-3538 file: unrestricted regular expression matching","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.1","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3538.json"},{"CVE":"CVE-2014-3480","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1104858","bugzilla_description":"CVE-2014-3480 file: cdf_count_chain insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3480.json"},{"CVE":"CVE-2014-3478","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1104863","bugzilla_description":"CVE-2014-3478 file: mconvert incorrect handling of truncated pascal string size","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3478.json"},{"CVE":"CVE-2014-3479","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1104869","bugzilla_description":"CVE-2014-3479 file: cdf_check_stream_offset insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3479.json"},{"CVE":"CVE-2014-3487","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1107544","bugzilla_description":"CVE-2014-3487 file: cdf_read_property_info insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3487.json"},{"CVE":"CVE-2014-0238","severity":"moderate","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1098155","bugzilla_description":"CVE-2014-0238 file: CDF property info parsing nelements infinite loop","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0238.json"},{"CVE":"CVE-2014-0237","severity":"moderate","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1098193","bugzilla_description":"CVE-2014-0237 file: cdf_unpack_summary_info() excessive looping DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0237.json"},{"CVE":"CVE-2014-1943","severity":"moderate","public_date":"2014-02-10T00:00:00Z","advisories":["RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1065836","bugzilla_description":"CVE-2014-1943 file: unrestricted recursion in handling of indirect type rules","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1943.json"},{"CVE":"CVE-2014-2270","severity":"moderate","public_date":"2013-12-20T00:00:00Z","advisories":["RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1072220","bugzilla_description":"CVE-2014-2270 file: out-of-bounds access in search rules with offsets from input file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2270.json"},{"CVE":"CVE-2014-5461","severity":"moderate","public_date":"2013-04-17T00:00:00Z","advisories":[],"bugzilla":"1132304","bugzilla_description":"CVE-2014-5461 lua: overflow flaw in vararg functions","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5461.json"},{"CVE":"CVE-2012-3500","severity":null,"public_date":"2012-08-31T00:00:00Z","advisories":[],"bugzilla":"848022","bugzilla_description":"CVE-2012-3500 rpmdevtools: TOCTOU race condition in annotate-output","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3500.json"},{"CVE":"CVE-2012-0815","severity":"important","public_date":"2012-04-03T00:00:00Z","advisories":["RHSA-2012:0451"],"bugzilla":"744104","bugzilla_description":"CVE-2012-0815 rpm: incorrect handling of negated offsets in headerVerifyInfo()","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-839->CWE-119","affected_packages":["rpm-0:4.8.0-16.el6_1.2","rpm-0:4.8.0-12.el6_0.2","rpm-0:4.4.2.3-22.el5_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0815.json"},{"CVE":"CVE-2012-0060","severity":"important","public_date":"2012-04-03T00:00:00Z","advisories":["RHSA-2012:0451"],"bugzilla":"744858","bugzilla_description":"CVE-2012-0060 rpm: insufficient validation of region tags","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["rpm-0:4.8.0-16.el6_1.2","rpm-0:4.8.0-12.el6_0.2","rpm-0:4.4.2.3-22.el5_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0060.json"},{"CVE":"CVE-2012-0061","severity":"important","public_date":"2012-04-03T00:00:00Z","advisories":["RHSA-2012:0451"],"bugzilla":"798585","bugzilla_description":"CVE-2012-0061 rpm: improper validation of header contents total size in headerLoad()","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["rpm-0:4.8.0-16.el6_1.2","rpm-0:4.8.0-12.el6_0.2","rpm-0:4.4.2.3-22.el5_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0061.json"},{"CVE":"CVE-2012-1571","severity":"low","public_date":"2012-02-16T00:00:00Z","advisories":["RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"805197","bugzilla_description":"CVE-2012-1571 file: out of bounds read in CDF parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php53-0:5.3.3-23.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1571.json"},{"CVE":"CVE-2013-7345","severity":"moderate","public_date":"2011-12-31T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2014:1765"],"bugzilla":"1079846","bugzilla_description":"CVE-2013-7345 file: extensive backtracking in awk rule regular expression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["php-0:5.4.16-23.el7_0","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7345.json"},{"CVE":"CVE-2011-3378","severity":"important","public_date":"2011-09-27T00:00:00Z","advisories":["RHSA-2011:1349"],"bugzilla":"741606","bugzilla_description":"CVE-2011-3378 rpm: crashes and overflows on malformed header","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["rpm-0:4.8.0-12.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3378.json"},{"CVE":"CVE-2010-2059","severity":"moderate","public_date":"2010-06-01T00:00:00Z","advisories":["RHSA-2010:0679","RHSA-2010:0678"],"bugzilla":"598775","bugzilla_description":"CVE-2010-2059 rpm: fails to drop SUID/SGID bits on package upgrade","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["rpm-0:4.3.3-33_nonptl.el4_8.1","rpm-0:4.4.2.3-20.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2059.json"},{"CVE":"CVE-2005-4889","severity":"moderate","public_date":"2010-06-01T00:00:00Z","advisories":["RHSA-2010:0678"],"bugzilla":"625756","bugzilla_description":"CVE-2005-4889 rpm: fails to drop SUID/SGID bits on package removal","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["rpm-0:4.3.3-33_nonptl.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4889.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpmdevtools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpmdevtools_security_api_results.json
new file mode 100644
index 0000000..69d4e65
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpmdevtools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3500","severity":null,"public_date":"2012-08-31T00:00:00Z","advisories":[],"bugzilla":"848022","bugzilla_description":"CVE-2012-3500 rpmdevtools: TOCTOU race condition in annotate-output","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3500.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpmemd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpmemd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpmemd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpmlint_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpmlint_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rpmlint_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rrdtool-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rrdtool-perl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rrdtool-perl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rrdtool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rrdtool_security_api_results.json
new file mode 100644
index 0000000..8996edb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rrdtool_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-2131","severity":null,"public_date":"2013-04-18T00:00:00Z","advisories":[],"bugzilla":"969296","bugzilla_description":"CVE-2013-2131 rrdtool: crashes on format string exploit","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2131.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsh-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsh-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsh-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsh_security_api_results.json
new file mode 100644
index 0000000..acdab3c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsh_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11254","severity":"moderate","public_date":"2020-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:0933","RHSA-2020:2479","RHSA-2020:2413"],"bugzilla":"1819486","bugzilla_description":"CVE-2019-11254 kubernetes: Denial of service in API server via crafted YAML payloads by authorized users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-hyperkube:v4.5.0-202007100518.p0","openshift4/ose-oauth-server-rhel7:v4.5.0-202007012112.p0","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift4/ose-openshift-apiserver-rhel7:v4.3.9-202003230345"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11254.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-8552","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:2992","RHBA-2020:0930","RHBA-2020:2215","RHSA-2020:1527","RHSA-2020:0933","RHSA-2020:1526","RHBA-2020:0929","RHSA-2020:2306"],"bugzilla":"1797909","bugzilla_description":"CVE-2020-8552 kubernetes: Use of unbounded 'client' label in apiserver_request_total allows for memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift4/ose-openshift-apiserver-rhel7:v4.2.34-202005252115","atomic-openshift-metrics-server-0:3.11.219-1.git.1.6fe54fb.el7","atomic-enterprise-service-catalog-1:3.11.219-1.git.1.717017c.el7","atomic-openshift-0:3.11.219-1.git.0.0c21387.el7","openshift4/ose-hyperkube:v4.2.29-202004140532","openshift-0:4.2.29-202004110432.git.0.f7d02c8.el8","openshift4/ose-service-catalog:v4.3.9-202003230345","openshift4/ose-openshift-apiserver-rhel7:v4.3.9-202003230345"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8552.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-8551","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:1277","RHSA-2020:1276"],"bugzilla":"1816403","bugzilla_description":"CVE-2020-8551 kubernetes: crafted requests to kubelet API allow for memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.3.10-202003300855.git.0.da48c1d.el7","openshift4/ose-hyperkube:v4.3.10-202003311925"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8551.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-1741","severity":"low","public_date":"2020-03-13T00:00:00Z","advisories":["RHSA-2020:3541"],"bugzilla":"1802381","bugzilla_description":"CVE-2020-1741 openshift-ansible: cors allowed origin allows changing url protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185","affected_packages":["openshift-ansible-0:3.11.272-1.git.0.79ab6e9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1741.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-8945","severity":"moderate","public_date":"2020-01-16T00:00:00Z","advisories":["RHSA-2020:2027","RHSA-2020:2992","RHSA-2020:1234","RHSA-2020:3167","RHSA-2020:1231","RHSA-2020:1396","RHSA-2020:1230","RHSA-2020:0679","RHSA-2020:0934","RHSA-2020:1402","RHSA-2020:0863","RHSA-2020:0697","RHSA-2020:0689","RHSA-2020:1940","RHSA-2020:2413","RHSA-2020:2117","RHBA-2020:1255","RHSA-2020:0928","RHSA-2020:1937","RHSA-2020:2927"],"bugzilla":"1795838","bugzilla_description":"CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["atomic-openshift-0:3.11.248-1.git.0.92ee8ac.el7","openshift-clients-0:4.2.32-202005020632.git.1.1b0fab9.el8","skopeo-1:0.1.32-7.git1715c90.rhaos4.2.el8","podman-0:1.6.4-10.rhaos4.3.el8","openshift4/ose-docker-builder:v4.3.7-202003161611","skopeo-1:0.1.40-7.el7_8","podman-0:1.6.4-18.el7_8","openshift4/ose-cli:v4.3.7-202003161611","openshift4/ose-cli-artifacts:v4.3.7-202003161611","openshift4/ose-openshift-controller-manager-rhel7:v4.2.34-202005252115","cri-o-0:1.16.4-1.dev.rhaos4.3.git9238eee.el7","openshift4/ose-openshift-controller-manager-rhel7:v4.3.9-202003230345","cri-o-0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7","openshift-0:4.3.10-202003300855.git.0.da48c1d.el8","docker-2:1.13.1-161.git64e9980.el7_8","skopeo-1:0.1.40-4.rhaos.el8","machine-config-daemon-0:4.3.10-202003300415.git.0.56d6ae0.el8","buildah-0:1.11.6-8.el7_8","skopeo-1:0.1.32-6.git1715c90.el8_0","openshift4/ose-cluster-policy-controller-rhel7:v4.4.0-202004261927","openshift4/ose-docker-builder:v4.2.28-202004061218","openshift-clients-0:4.3.10-202003300001.git.0.e43c148.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8945.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3889","severity":"moderate","public_date":"2019-07-08T00:00:00Z","advisories":["RHSA-2020:0795","RHSA-2019:3722","RHSA-2019:3770"],"bugzilla":"1693499","bugzilla_description":"CVE-2019-3889 atomic-openshift: reflected XSS in authentication flow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["openshift4/ose-hypershift:v4.1.22-201910291109","openshift4/ose-oauth-server-rhel7:v4.2.4-201911050122","atomic-openshift-0:3.11.188-1.git.0.db0eaa8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3889.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2017-18367","severity":"moderate","public_date":"2019-04-24T00:00:00Z","advisories":["RHSA-2019:4090","RHSA-2019:4087","RHSA-2020:2479"],"bugzilla":"1706826","bugzilla_description":"CVE-2017-18367 libseccomp-golang: mishandling of multiple argument rules leading to a bypass of intended access restrictions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["openshift4/ose-hypershift:v4.1.27-201912030019","openshift4/ose-cli:v4.1.27-201912030019","openshift4/ose-node:v4.1.27-201912030019","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift-0:4.1.27-201912021146.git.0.a40116f.el8_0","openshift4/ose-cli-artifacts:v4.1.27-201912030019","openshift4/ose-hyperkube:v4.1.27-201912030019"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2004-0175","severity":"low","public_date":"2000-09-01T00:00:00Z","advisories":["RHSA-2005:567","RHSA-2005:562","RHSA-2005:495","RHSA-2005:165","RHSA-2005:481","RHSA-2005:074","RHSA-2005:106"],"bugzilla":"1617166","bugzilla_description":"CVE-2004-0175 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["krb5-0:1.2.7-47","krb5-0:1.3.4-17","openssh-0:3.6.1p2-33.30.4","rsh-0:0.17-25.3","rsh-0:0.17-17.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0175.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsync_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsync_security_api_results.json
new file mode 100644
index 0000000..7318353
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsync_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14387","severity":"important","public_date":"2020-09-03T18:10:00Z","advisories":[],"bugzilla":"1875549","bugzilla_description":"CVE-2020-14387 rsync: rsync-ssl does not verify the hostname in the server certificate when using openssl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14387.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2018-5764","severity":"moderate","public_date":"2018-01-17T00:00:00Z","advisories":[],"bugzilla":"1536661","bugzilla_description":"CVE-2018-5764 rsync: sanitization bypass in parse_argument in options.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5764.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-17433","severity":"moderate","public_date":"2017-12-04T00:00:00Z","advisories":[],"bugzilla":"1522874","bugzilla_description":"CVE-2017-17433 rsync: recv_files function metadata handling allows for access restriction bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17433.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-17434","severity":"moderate","public_date":"2017-12-04T00:00:00Z","advisories":[],"bugzilla":"1522875","bugzilla_description":"CVE-2017-17434 rsync: daemon does not check for fnamecmp filenames allowing for access restriction bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17434.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-16548","severity":"moderate","public_date":"2017-10-31T00:00:00Z","advisories":[],"bugzilla":"1511411","bugzilla_description":"CVE-2017-16548 rsync: Heap-based buffer over-read in receive_xattr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-170","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-15994","severity":"moderate","public_date":"2017-10-24T00:00:00Z","advisories":[],"bugzilla":"1515735","bugzilla_description":"CVE-2017-15994 rsync: Mishandles archaic checksums","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15994.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2014-9512","severity":"moderate","public_date":"2015-12-21T00:00:00Z","advisories":[],"bugzilla":"1293854","bugzilla_description":"CVE-2014-9512 rsync: Transferring file outside destination path via just-sent symlink","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9512.json"},{"CVE":"CVE-2014-2855","severity":"moderate","public_date":"2014-04-13T00:00:00Z","advisories":[],"bugzilla":"1087841","bugzilla_description":"CVE-2014-2855 rsync: CPU consumption denial of service when authenticating with a non-existent username","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2855.json"},{"CVE":"CVE-2011-1097","severity":"moderate","public_date":"2011-03-26T00:00:00Z","advisories":["RHSA-2011:0390"],"bugzilla":"675036","bugzilla_description":"CVE-2011-1097 rsync: Incremental file-list corruption due to temporary file_extra_cnt increments","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["rsync-0:3.0.6-5.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1097.json"},{"CVE":"CVE-2007-6200","severity":"moderate","public_date":"2007-11-28T00:00:00Z","advisories":["RHSA-2011:0999"],"bugzilla":"407171","bugzilla_description":"CVE-2007-6200 rsync excluded content access restrictions bypass via symlinks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["rsync-0:3.0.6-4.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6200.json"},{"CVE":"CVE-2004-0792","severity":"moderate","public_date":"2004-08-12T00:00:00Z","advisories":["RHSA-2004:436"],"bugzilla":"1617292","bugzilla_description":"CVE-2004-0792 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rsync-0:2.5.7-5.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0792.json"},{"CVE":"CVE-2004-0426","severity":"important","public_date":"2004-04-26T00:00:00Z","advisories":["RHSA-2004:192"],"bugzilla":"1617206","bugzilla_description":"CVE-2004-0426 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rsync-0:2.5.7-4.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0426.json"},{"CVE":"CVE-2003-0962","severity":"critical","public_date":"2003-12-04T00:00:00Z","advisories":["RHSA-2003:399","RHSA-2003:398"],"bugzilla":"1617105","bugzilla_description":"CVE-2003-0962 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rsync-0:2.5.7-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0962.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-gnutls_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-gnutls_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-gnutls_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-gssapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-gssapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-gssapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-kafka_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-kafka_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-kafka_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-mmjsonparse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-mmjsonparse_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-mmjsonparse_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-pgsql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-pgsql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-pgsql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-relp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-relp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog-relp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog_security_api_results.json
new file mode 100644
index 0000000..926d366
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rsyslog_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17042","severity":"moderate","public_date":"2019-10-01T00:00:00Z","advisories":["RHBA-2020:1539","RHSA-2020:1000","RHSA-2020:1702","RHBA-2020:1540"],"bugzilla":"1766700","bugzilla_description":"CVE-2019-17042 rsyslog: heap-based overflow in contrib/pmcisconames/pmcisconames.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","rsyslog-0:8.24.0-52.el7","rsyslog-0:8.1911.0-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17041","severity":"moderate","public_date":"2019-09-30T00:00:00Z","advisories":["RHBA-2020:1539","RHSA-2020:1000","RHSA-2020:1702","RHBA-2020:1540"],"bugzilla":"1766693","bugzilla_description":"CVE-2019-17041 rsyslog: heap-based overflow in contrib/pmaixforwardedfrom/pmaixforwardedfrom.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","rsyslog-0:8.24.0-52.el7","rsyslog-0:8.1911.0-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17041.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17040","severity":"moderate","public_date":"2019-09-24T00:00:00Z","advisories":[],"bugzilla":"1766641","bugzilla_description":"CVE-2019-17040 rsyslog: out-of-bounds read in contrib/pmdb2diag/pmdb2diag.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-12588","severity":"moderate","public_date":"2017-08-02T00:00:00Z","advisories":[],"bugzilla":"1481335","bugzilla_description":"CVE-2017-12588 rsyslog: multiple format string vulnerabilities in zmq3 modules","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-134","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12588.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.9"},{"CVE":"CVE-2018-16881","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHBA-2019:2501","RHSA-2019:2110","RHSA-2019:2439","RHSA-2019:2437"],"bugzilla":"1658366","bugzilla_description":"CVE-2018-16881 rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190","affected_packages":["rsyslog-0:8.24.0-41.el7_7","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","rsyslog-0:8.24.0-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16881.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-3243","severity":"low","public_date":"2015-06-18T00:00:00Z","advisories":[],"bugzilla":"1232826","bugzilla_description":"CVE-2015-3243 rsyslog: some log files are created world-readable","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732->CWE-532","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3243.json"},{"CVE":"CVE-2014-3683","severity":"important","public_date":"2014-10-02T00:00:00Z","advisories":[],"bugzilla":"1149081","bugzilla_description":"CVE-2014-3683 rsyslog: integer overflow in PRI parsing","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3683.json"},{"CVE":"CVE-2014-3634","severity":"important","public_date":"2014-09-30T00:00:00Z","advisories":["RHSA-2014:1654","RHSA-2014:1397","RHSA-2014:1671"],"bugzilla":"1142373","bugzilla_description":"CVE-2014-3634 rsyslog: remote syslog PRI vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-129->CWE-119","affected_packages":["rsyslog-0:5.8.10-9.el6_6","rsyslog7-0:7.4.10-3.el6_6","rsyslog5-0:5.8.12-5.el5_11","rsyslog-0:7.4.7-7.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3634.json"},{"CVE":"CVE-2013-4758","severity":"moderate","public_date":"2013-07-05T00:00:00Z","advisories":[],"bugzilla":"981719","bugzilla_description":"CVE-2013-4758 rsyslog: double free flaw in ElasticSearch plugin","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4758.json"},{"CVE":"CVE-2011-3200","severity":"moderate","public_date":"2011-09-01T00:00:00Z","advisories":["RHSA-2011:1247"],"bugzilla":"727644","bugzilla_description":"CVE-2011-3200 rsyslog: parseLegacySyslogMsg off-by-two buffer overflow","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rsyslog-0:4.6.2-3.el6_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3200.json"},{"CVE":"CVE-2011-1488","severity":"low","public_date":"2011-02-25T00:00:00Z","advisories":[],"bugzilla":"694122","bugzilla_description":"CVE-2011-1488 rsyslog: Memory leak when $RepeatedMsgReduction turned on","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1488.json"},{"CVE":"CVE-2011-1489","severity":"low","public_date":"2011-02-25T00:00:00Z","advisories":[],"bugzilla":"694126","bugzilla_description":"CVE-2011-1489 CVE-2011-1490 rsyslog: Memory leak when multiple rulesets used","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1489.json"},{"CVE":"CVE-2011-1490","severity":"low","public_date":"2011-02-25T00:00:00Z","advisories":[],"bugzilla":"694126","bugzilla_description":"CVE-2011-1489 CVE-2011-1490 rsyslog: Memory leak when multiple rulesets used","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1490.json"},{"CVE":"CVE-2011-4623","severity":"moderate","public_date":"2011-02-09T00:00:00Z","advisories":["RHSA-2012:0796"],"bugzilla":"769822","bugzilla_description":"CVE-2011-4623 rsyslog: DoS due integer signedness error while extending rsyslog counted string buffer","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rsyslog-0:5.8.10-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4623.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rtkit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rtkit_security_api_results.json
new file mode 100644
index 0000000..7a22f06
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rtkit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4326","severity":"important","public_date":"2013-09-18T00:00:00Z","advisories":["RHSA-2013:1282"],"bugzilla":"1006677","bugzilla_description":"CVE-2013-4326 rtkit: insecure calling of polkit","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["rtkit-0:0.5-2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4326.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ruby-irb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ruby-irb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ruby-irb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ruby-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ruby-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ruby-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ruby_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ruby_security_api_results.json
new file mode 100644
index 0000000..284040c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/ruby_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8264","severity":"important","public_date":"2020-10-07T00:00:00Z","advisories":[],"bugzilla":"1886554","bugzilla_description":"CVE-2020-8264 rubygem-actionpack: possible XSS vulnerability in Action Pack in development mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8264.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"7.7"},{"CVE":"CVE-2020-25613","severity":"moderate","public_date":"2020-09-29T00:00:00Z","advisories":[],"bugzilla":"1883623","bugzilla_description":"CVE-2020-25613 ruby: potential HTTP request smuggling in WEBrick","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25613.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-26159","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1884111","bugzilla_description":"CVE-2020-26159 oniguruma: Buffer overflow in concat_opt_exact_str could result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26159.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2020-15169","severity":"moderate","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877566","bugzilla_description":"CVE-2020-15169 rubygem-activeview: Cross-site scripting in translation helpers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15169.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-8185","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1852380","bugzilla_description":"CVE-2020-8185 rubygem-rails: untrusted users able to run pending migrations in production","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8185.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-8184","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1849141","bugzilla_description":"CVE-2020-8184 rubygem-rack: percent-encoded cookies can be used to overwrite existing prefixed cookie names","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-807","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8184.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-7663","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":[],"bugzilla":"1845978","bugzilla_description":"CVE-2020-7663 rubygem-websocket-extensions: ReDoS vulnerability in Sec-WebSocket-Extensions parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-185->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-11077","severity":"moderate","public_date":"2020-05-21T00:00:00Z","advisories":[],"bugzilla":"1842534","bugzilla_description":"CVE-2020-11077 rubygem-puma: HTTP Smuggling through a proxy via Transfer-Encoding Header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11077.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2020-11076","severity":"moderate","public_date":"2020-05-21T00:00:00Z","advisories":[],"bugzilla":"1842539","bugzilla_description":"CVE-2020-11076 rubygem-puma: HTTP Smuggling via an invalid Transfer-Encoding Header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11076.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-8164","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1842634","bugzilla_description":"CVE-2020-8164 rubygem-actionpack: possible strong parameters bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8164.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-8162","severity":"important","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1843005","bugzilla_description":"CVE-2020-8162 rubygem-activestorage: circumvention of file size limits in ActiveStorage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8162.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-8165","severity":"important","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1843072","bugzilla_description":"CVE-2020-8165 rubygem-activesupport: potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8165.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-8167","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1843084","bugzilla_description":"CVE-2020-8167 rubygem-actionview: CSRF vulnerability in rails-ujs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8167.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-8166","severity":"low","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1843152","bugzilla_description":"CVE-2020-8166 rubygem-actionpack: ability to forge per-form CSRF tokens given a global CSRF token","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8166.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-8163","severity":"important","public_date":"2020-05-15T00:00:00Z","advisories":[],"bugzilla":"1848724","bugzilla_description":"CVE-2020-8163 rubygem-rails: potential remote code execution of user-provided local names","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8163.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-8161","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":[],"bugzilla":"1838281","bugzilla_description":"CVE-2020-8161 rubygem-rack: directory traversal in Rack::Directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8161.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-8159","severity":"important","public_date":"2020-05-06T00:00:00Z","advisories":[],"bugzilla":"1835655","bugzilla_description":"CVE-2020-8159 rubygem-actionpack-page_caching: allows an attacker to write arbitrary files to a web server, which could result in remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8159.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-10716","severity":"low","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:1454"],"bugzilla":"1827300","bugzilla_description":"CVE-2020-10716 rubygem-foreman_ansible: \"User input\" entry from Job Invocation may contain sensitive data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["tfm-rubygem-foreman_ansible-0:4.0.3.5-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10716.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2020-10933","severity":"moderate","public_date":"2020-03-31T00:00:00Z","advisories":[],"bugzilla":"1833291","bugzilla_description":"CVE-2020-10933 ruby: BasicSocket#read_nonblock method leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10933.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-10663","severity":"moderate","public_date":"2020-03-19T00:00:00Z","advisories":["RHSA-2020:2462","RHSA-2020:2473","RHSA-2020:2670"],"bugzilla":"1827500","bugzilla_description":"CVE-2020-10663 rubygem-json: Unsafe Object Creation Vulnerability in JSON","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-94","affected_packages":["pcs-0:0.10.1-4.el8_0.5","pcs-0:0.10.2-4.el8_1.1","pcs-0:0.10.4-6.el8_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-5267","severity":"moderate","public_date":"2020-03-19T00:00:00Z","advisories":[],"bugzilla":"1831528","bugzilla_description":"CVE-2020-5267 rubygem-actionview: views that use the `j` or `escape_javascript` methods are susceptible to XSS attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5267.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-5249","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1816181","bugzilla_description":"CVE-2020-5249 rubygem-puma: attacker is able to use carriage return character to insert malicious content (HTTP Response Splitting), this could lead to XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5249.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-5247","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1816187","bugzilla_description":"CVE-2020-5247 rubygem-puma: attacker is able to use newline characters to insert malicious content (HTTP Response Splitting), this could lead to XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5247.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-5217","severity":"moderate","public_date":"2020-01-22T00:00:00Z","advisories":[],"bugzilla":"1801264","bugzilla_description":"CVE-2020-5217 rubygem-secure_headers: directive injection when using dynamic overrides with user input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-95->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5217.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.8"},{"CVE":"CVE-2020-5216","severity":"moderate","public_date":"2020-01-22T00:00:00Z","advisories":[],"bugzilla":"1801286","bugzilla_description":"CVE-2020-5216 rubygem-secure_headers: limited header injection when using dynamic overrides with user input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5216.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.8"},{"CVE":"CVE-2019-16782","severity":"moderate","public_date":"2019-12-18T00:00:00Z","advisories":["RHSA-2020:2480"],"bugzilla":"1789100","bugzilla_description":"CVE-2019-16782 rubygem-rack: hijack sessions by using timing attacks targeting the session id","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["cfme-gemset-0:5.11.6.0-1.el8cf","cfme-amazon-smartstate-0:5.11.6.0-1.el8cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-16770","severity":"moderate","public_date":"2019-12-05T00:00:00Z","advisories":[],"bugzilla":"1831297","bugzilla_description":"CVE-2019-16770 rubygem-puma: keepalive requests from poorly-behaved client leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16770.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16255","severity":"moderate","public_date":"2019-11-26T00:00:00Z","advisories":[],"bugzilla":"1793683","bugzilla_description":"CVE-2019-16255 ruby: Code injection via command argument of Shell#test / Shell#[]","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16255.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-19012","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":[],"bugzilla":"1802051","bugzilla_description":"CVE-2019-19012 oniguruma: integer overflow in search_in_range function in regexec.c leads to out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19012.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19203","severity":"moderate","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1802061","bugzilla_description":"CVE-2019-19203 oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19204","severity":"moderate","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1802068","bugzilla_description":"CVE-2019-19204 oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19204.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16254","severity":"low","public_date":"2019-10-25T00:00:00Z","advisories":[],"bugzilla":"1789556","bugzilla_description":"CVE-2019-16254 ruby: HTTP response splitting in WEBrick (Additional fix)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16254.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-15587","severity":"moderate","public_date":"2019-10-10T00:00:00Z","advisories":[],"bugzilla":"1774081","bugzilla_description":"CVE-2019-15587 rubygem-loofah: XXS when a crafted SVG element is republished","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15587.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-16201","severity":"moderate","public_date":"2019-10-01T00:00:00Z","advisories":[],"bugzilla":"1773728","bugzilla_description":"CVE-2019-16201 ruby: regular expression denial of service vulnerability of WEBrick's Digest access authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16201.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15845","severity":"moderate","public_date":"2019-10-01T00:00:00Z","advisories":[],"bugzilla":"1789407","bugzilla_description":"CVE-2019-15845 ruby: NUL injection vulnerability of File.fnmatch and File.fnmatch?","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-626->CWE-41","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-8130","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":[],"bugzilla":"1816270","bugzilla_description":"CVE-2020-8130 rake: OS Command Injection via egrep in Rake::FileList","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8130.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-15224","severity":"important","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743940","bugzilla_description":"CVE-2019-15224 rubygem-rest-client: code-execution backdoor insterted by third party","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-348","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-19246","severity":"low","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1777537","bugzilla_description":"CVE-2019-19246 oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2019-16162","severity":"moderate","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1781304","bugzilla_description":"CVE-2019-16162 onigmo: out-of-bounds read in next_state_val() in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16162.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16163","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1768997","bugzilla_description":"CVE-2019-16163 oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16163.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-16161","severity":"low","public_date":"2019-07-28T00:00:00Z","advisories":[],"bugzilla":"1769042","bugzilla_description":"CVE-2019-16161 onigmo: NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16161.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10198","severity":"moderate","public_date":"2019-07-12T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1729130","bugzilla_description":"CVE-2019-10198 foreman: authorization bypasses in foreman-tasks leading to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tfm-rubygem-foreman-tasks-0:0.15.11.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-13225","severity":"moderate","public_date":"2019-06-27T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1728965","bugzilla_description":"CVE-2019-13225 oniguruma: NULL pointer dereference in match_at() in regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-13224","severity":"moderate","public_date":"2019-06-27T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1728970","bugzilla_description":"CVE-2019-13224 oniguruma: Use-after-free in onig_new_deluxe() in regext.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-11027","severity":"moderate","public_date":"2019-06-10T00:00:00Z","advisories":[],"bugzilla":"1719494","bugzilla_description":"CVE-2019-11027 rubygem-ruby-openid: Unknown remotely exploitable flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11027.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-10842","severity":"important","public_date":"2019-03-27T00:00:00Z","advisories":[],"bugzilla":"1697482","bugzilla_description":"CVE-2019-10842 rubygem-bootstrap-sass: backdoor code allows arbitrary code execution when downloaded from rubygems.org","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10842.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-5420","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1689154","bugzilla_description":"CVE-2019-5420 rubygem-rails: Weak secret token leading to possible code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-338","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5420.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-5418","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:0796","RHSA-2019:1149","RHSA-2019:1147","RHSA-2019:1289"],"bugzilla":"1689159","bugzilla_description":"CVE-2019-5418 rubygem-actionpack: render file directory traversal in Action View","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["cfme-gemset-0:5.9.9.3-1.el7cf","rh-ror42-rubygem-actionpack-1:4.2.6-5.el6","rh-ror42-rubygem-actionpack-1:4.2.6-5.el7","rh-ror50-rubygem-actionpack-1:5.0.1-2.el6","rh-ror50-rubygem-actionpack-1:5.0.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5418.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-5419","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:0796","RHSA-2019:1149","RHSA-2019:1147","RHSA-2019:1289"],"bugzilla":"1689160","bugzilla_description":"CVE-2019-5419 rubygem-actionpack: denial of service vulnerability in Action View","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["cfme-gemset-0:5.9.9.3-1.el7cf","rh-ror42-rubygem-actionpack-1:4.2.6-5.el6","rh-ror42-rubygem-actionpack-1:4.2.6-5.el7","rh-ror50-rubygem-actionpack-1:5.0.1-2.el6","rh-ror50-rubygem-actionpack-1:5.0.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5419.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-8320","severity":"moderate","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHBA-2019:3384","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692512","bugzilla_description":"CVE-2019-8320 rubygems: Delete directory using symlink when decompressing tar","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-8321","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692514","bugzilla_description":"CVE-2019-8321 rubygems: Escape sequence injection vulnerability in verbose","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8321.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8322","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692516","bugzilla_description":"CVE-2019-8322 rubygems: Escape sequence injection vulnerability in gem owner","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8322.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8323","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692519","bugzilla_description":"CVE-2019-8323 rubygems: Escape sequence injection vulnerability in API response handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8324","severity":"important","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHSA-2019:1972","RHSA-2020:2769","RHSA-2019:1151","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692520","bugzilla_description":"CVE-2019-8324 rubygems: Installing a malicious gem may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby:2.5-8000020190524123348.55190bc5","ruby-0:2.0.0.648-35.el7_6","ruby-0:2.4.6-91.el7cf","rh-ruby23-ruby-0:2.3.8-70.el6","rh-ruby23-ruby-0:2.3.8-70.el7","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-8325","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692522","bugzilla_description":"CVE-2019-8325 rubygems: Escape sequence injection vulnerability in errors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8325.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-16476","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:0600"],"bugzilla":"1659223","bugzilla_description":"CVE-2018-16476 activejob: Information Exposure through deserialization using GlobalId","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["cfme-gemset-0:5.9.9.1-1.el7cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16476.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-16470","severity":"moderate","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1646814","bugzilla_description":"CVE-2018-16470 rubygem-rack: Buffer size in multipart parser allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rubygem-rack-1:1.6.4-3.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16471","severity":"moderate","public_date":"2018-11-06T00:00:00Z","advisories":[],"bugzilla":"1646818","bugzilla_description":"CVE-2018-16471 rubygem-rack: Cross-site scripting (XSS) via `scheme` method on `Rack::Request`","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16471.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-16468","severity":"moderate","public_date":"2018-10-27T00:00:00Z","advisories":[],"bugzilla":"1646715","bugzilla_description":"CVE-2018-16468 rubygem-loofah: XXS when a crafted SVG element is republished","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-16395","severity":"important","public_date":"2018-10-17T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2018:3738","RHSA-2019:2565","RHSA-2018:3731","RHSA-2018:3730","RHSA-2019:1948"],"bugzilla":"1643086","bugzilla_description":"CVE-2018-16395 ruby: OpenSSL::X509::Name equality check does not work correctly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["ruby-0:2.0.0.648-34.el7_6","ruby-0:2.0.0.648-34.el7_5","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-34.el7_4","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16395.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-16396","severity":"moderate","public_date":"2018-10-17T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2019:2028","RHSA-2020:2839","RHSA-2020:2769","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1643089","bugzilla_description":"CVE-2018-16396 ruby: Tainted flags are not propagated in Array#pack and String#unpack with some directives","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-37.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-38.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16396.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-18385","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":[],"bugzilla":"1640723","bugzilla_description":"CVE-2018-18385 rubygem-asciidoctor: Infinite loop in the #next_block method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18385.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14643","severity":"critical","public_date":"2018-09-20T00:00:00Z","advisories":["RHSA-2018:2733"],"bugzilla":"1629063","bugzilla_description":"CVE-2018-14643 smart_proxy_dynflow: Authentication bypass in Foreman remote execution feature","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rubygem-smart_proxy_dynflow-0:0.1.10.2-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14643.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-3760","severity":"important","public_date":"2018-06-20T00:00:00Z","advisories":["RHSA-2018:2745","RHSA-2018:2245","RHSA-2018:2244","RHSA-2018:2561"],"bugzilla":"1593058","bugzilla_description":"CVE-2018-3760 rubygem-sprockets: Path traversal in forbidden_request?() can allow remote attackers to read arbitrary files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["rh-ror42-rubygem-sprockets-0:3.2.0-5.el6","rh-ror50-rubygem-sprockets-0:3.7.1-2.el7","rh-ror50-rubygem-sprockets-0:3.7.1-2.el6","rh-ror42-rubygem-sprockets-0:3.2.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3760.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-12029","severity":"important","public_date":"2018-06-05T00:00:00Z","advisories":[],"bugzilla":"1592612","bugzilla_description":"CVE-2018-12029 passenger: CHMOD race condition in nginx_module/ngx_http_passenger_module.c allows for local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12029.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-12026","severity":"important","public_date":"2018-06-05T00:00:00Z","advisories":[],"bugzilla":"1592616","bugzilla_description":"CVE-2018-12026 passenger: SpawningKit allows malicious applications to replace files and directories allowing for arbitrary reads and writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12026.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-12027","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":[],"bugzilla":"1592619","bugzilla_description":"CVE-2018-12027 passenger: Insecure permissions in SpawningKit can allow for redirection of traffic under certain configurations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12027.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2018-12028","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":[],"bugzilla":"1592621","bugzilla_description":"CVE-2018-12028 passenger: Improper access control in SpawningKit can allow malicious child processes to kill arbitrary processes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12028.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-1000544","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2018:3466"],"bugzilla":"1593001","bugzilla_description":"CVE-2018-1000544 rubyzip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-22|CWE-59)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000544.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-12615","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":[],"bugzilla":"1594361","bugzilla_description":"CVE-2018-12615 passenger: privilege lowering in switchGroup() in agent/ExecHelper/ExecHelperMain.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12615.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14040","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601614","bugzilla_description":"CVE-2018-14040 bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14041","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2019:1456"],"bugzilla":"1601616","bugzilla_description":"CVE-2018-14041 bootstrap: Cross-site Scripting (XSS) in the data-target property of scrollspy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14041.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14042","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601617","bugzilla_description":"CVE-2018-14042 bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-3881","severity":"moderate","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1651826","bugzilla_description":"CVE-2019-3881 rubygem-bundler: Insecure permissions on directory in /tmp/ allows for execution of malicious code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3881.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-11627","severity":"moderate","public_date":"2018-05-22T00:00:00Z","advisories":["RHSA-2019:0212","RHSA-2019:0315"],"bugzilla":"1585218","bugzilla_description":"CVE-2018-11627 rubygem-sinatra: XSS in the 400 Bad Request page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-6914","severity":"low","public_date":"2018-03-28T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1561947","bugzilla_description":"CVE-2018-6914 ruby: Unintentional file and directory creation with directory traversal in tempfile and tmpdir","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6914.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-8779","severity":"low","public_date":"2018-03-28T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1561948","bugzilla_description":"CVE-2018-8779 ruby: Unintentional socket creation by poisoned NULL byte in UNIXServer and UNIXSocket","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-626","affected_packages":["rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-8780","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1561949","bugzilla_description":"CVE-2018-8780 ruby: Unintentional directory traversal by poisoned NULL byte in Dir","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-626->CWE-22","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-8777","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1561950","bugzilla_description":"CVE-2018-8777 ruby: DoS by large request in WEBrick","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8777.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-17742","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:2288","RHSA-2020:2212","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730","RHSA-2020:1963"],"bugzilla":"1561952","bugzilla_description":"CVE-2017-17742 ruby: HTTP response splitting in WEBrick","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["ruby-0:2.0.0.648-37.el7_6","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","ruby-0:2.0.0.648-36.el7_4","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_5","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17742.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-8778","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:2288","RHSA-2020:2212","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730","RHSA-2020:1963"],"bugzilla":"1561953","bugzilla_description":"CVE-2018-8778 ruby: Buffer under-read in String#unpack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["ruby-0:2.0.0.648-37.el7_6","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","ruby-0:2.0.0.648-36.el7_4","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_5","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-3741","severity":"moderate","public_date":"2018-03-21T00:00:00Z","advisories":[],"bugzilla":"1568842","bugzilla_description":"CVE-2018-3741 rubygem-rails-html-sanitizer: non-whitelisted attributes are present in sanitized output when input with specially-crafted HTML fragments leading to XSS vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3741.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-8048","severity":"moderate","public_date":"2018-03-15T00:00:00Z","advisories":[],"bugzilla":"1559071","bugzilla_description":"CVE-2018-8048 rubygem-loofah: XSS vulnerability due to unescaped comments within attributes by libxml2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-7212","severity":"low","public_date":"2018-02-18T00:00:00Z","advisories":[],"bugzilla":"1802282","bugzilla_description":"CVE-2018-7212 rubygem-sinatra: path traversal via backslash characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7212.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000073","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547418","bugzilla_description":"CVE-2018-1000073 rubygems: Path traversal when writing to a symlinked basedir outside of the root","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000073.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000074","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547419","bugzilla_description":"CVE-2018-1000074 rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000074.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-1000075","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547420","bugzilla_description":"CVE-2018-1000075 rubygems: Infinite loop vulnerability due to negative size in tar header causes Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000075.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000076","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547421","bugzilla_description":"CVE-2018-1000076 rubygems: Improper verification of signatures in tarball allows to install mis-signed gem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000076.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000077","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547422","bugzilla_description":"CVE-2018-1000077 rubygems: Missing URL validation on spec home attribute allows malicious gem to set an invalid homepage URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000077.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000078","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547425","bugzilla_description":"CVE-2018-1000078 rubygems: XSS vulnerability in homepage attribute when displayed via gem server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-1000079","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547426","bugzilla_description":"CVE-2018-1000079 rubygems: Path traversal issue during gem installation allows to write to arbitrary filesystem locations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000079.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-17790","severity":"low","public_date":"2017-12-19T00:00:00Z","advisories":["RHSA-2018:0378","RHSA-2018:0584","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1528218","bugzilla_description":"CVE-2017-17790 ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6","rh-ruby24-ruby-0:2.4.3-90.el6","rh-ruby24-ruby-0:2.4.3-90.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-17405","severity":"important","public_date":"2017-12-14T00:00:00Z","advisories":["RHSA-2018:0378","RHSA-2018:0584","RHSA-2018:0585","RHSA-2019:2806","RHSA-2018:0583"],"bugzilla":"1526189","bugzilla_description":"CVE-2017-17405 ruby: Command injection vulnerability in Net::FTP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-30.el7_3","ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6","rh-ruby24-ruby-0:2.4.3-90.el6","rh-ruby24-ruby-0:2.4.3-90.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-17042","severity":"moderate","public_date":"2017-11-24T00:00:00Z","advisories":[],"bugzilla":"1519065","bugzilla_description":"CVE-2017-17042 rubygem-yard: (lib/yard/core_ext/file.rb) is vulnerable to directory traversal attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-16516","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":[],"bugzilla":"1524439","bugzilla_description":"CVE-2017-16516 rubygem-yajl-ruby: Yajl::Parser.new.parse incorrect parsing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16355","severity":"moderate","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1513377","bugzilla_description":"CVE-2017-16355 passenger: arbitrary file read via REVISION symlink","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16355.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-0903","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1500488","bugzilla_description":"CVE-2017-0903 rubygems: Unsafe object deserialization through YAML formatted gem specifications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0903.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-14033","severity":"moderate","public_date":"2017-09-14T00:00:00Z","advisories":["RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1491866","bugzilla_description":"CVE-2017-14033 ruby: Buffer underrun in OpenSSL ASN1 decode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14033.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10784","severity":"moderate","public_date":"2017-09-14T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1492012","bugzilla_description":"CVE-2017-10784 ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-0898","severity":"moderate","public_date":"2017-09-14T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1492015","bugzilla_description":"CVE-2017-0898 ruby: Buffer underrun vulnerability in Kernel.sprintf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0898.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-0901","severity":"moderate","public_date":"2017-09-01T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487587","bugzilla_description":"CVE-2017-0901 rubygems: Arbitrary file overwrite due to incorrect validation of specification name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0901.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-0900","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487588","bugzilla_description":"CVE-2017-0900 rubygems: No size limit in summary length of gem spec","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-0902","severity":"moderate","public_date":"2017-08-31T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487589","bugzilla_description":"CVE-2017-0902 rubygems: DNS hijacking vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0902.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-0899","severity":"low","public_date":"2017-08-31T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487590","bugzilla_description":"CVE-2017-0899 rubygems: Escape sequence in the \"summary\" field of gemspec","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0899.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-16932","severity":"moderate","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1517316","bugzilla_description":"CVE-2017-16932 libxml2: Infinite recursion in parameter entities","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16932.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-11465","severity":"low","public_date":"2017-07-13T00:00:00Z","advisories":[],"bugzilla":"1473720","bugzilla_description":"CVE-2017-11465 ruby: Invalid read/write in parser_yyerror function in UTF-8 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11465.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7540","severity":"important","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1473243","bugzilla_description":"CVE-2017-7540 rubygem-safemode: Bypassing the whitelist of safe commands via block_pass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7540.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-9096","severity":"low","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1461846","bugzilla_description":"CVE-2015-9096 ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-16931","severity":"moderate","public_date":"2017-06-05T00:00:00Z","advisories":[],"bugzilla":"1517307","bugzilla_description":"CVE-2017-16931 libxml2: Mishandling parameter-entity references","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16931.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-9227","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466739","bugzilla_description":"CVE-2017-9227 oniguruma: Out-of-bounds stack read in mbc_enc_len() during regular expression searching","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9227.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9228","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466740","bugzilla_description":"CVE-2017-9228 oniguruma: Out-of-bounds heap write in bitset_set_range()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9228.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9229","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466746","bugzilla_description":"CVE-2017-9229 oniguruma: Invalid pointer dereference in left_adjust_char_head()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9229.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-9224","severity":"moderate","public_date":"2017-05-22T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466730","bugzilla_description":"CVE-2017-9224 oniguruma: Out-of-bounds stack read in match_at() during regular expression searching","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-9225","severity":"moderate","public_date":"2017-05-22T00:00:00Z","advisories":[],"bugzilla":"1466733","bugzilla_description":"CVE-2017-9225 oniguruma: Out-of-bounds stack write in onigenc_unicode_get_case_fold_codes_by_str() during regular expression compilation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9226","severity":"moderate","public_date":"2017-05-18T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466736","bugzilla_description":"CVE-2017-9226 oniguruma: Heap buffer overflow in next_state_val() during regular expression compilation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9226.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-2292","severity":"important","public_date":"2017-05-11T00:00:00Z","advisories":[],"bugzilla":"1470086","bugzilla_description":"CVE-2017-2292 mcollective: RCE via YAML deserialization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2292.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-2667","severity":"moderate","public_date":"2017-03-27T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1436262","bugzilla_description":"CVE-2017-2667 rubygem-hammer_cli: no verification of API server's SSL certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2667.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-16012","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":["RHSA-2018:0501","RHSA-2020:0983"],"bugzilla":"1591854","bugzilla_description":"CVE-2017-16012 js-jquery: XSS in responses from cross-origin ajax requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-14064","severity":"low","public_date":"2017-03-02T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487552","bugzilla_description":"CVE-2017-14064 ruby: Arbitrary heap exposure during a JSON.generate call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-6181","severity":"moderate","public_date":"2017-02-20T00:00:00Z","advisories":[],"bugzilla":"1443435","bugzilla_description":"CVE-2017-6181 ruby: Stack overflow in parse_char_class() in Onigmo","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5946","severity":"moderate","public_date":"2017-02-04T00:00:00Z","advisories":[],"bugzilla":"1427937","bugzilla_description":"CVE-2017-5946 rubygem-rubyzip: Directory traversal in the Zip::File component","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5946.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-7060","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:0256"],"bugzilla":"1379909","bugzilla_description":"CVE-2016-7060 Red Hat QCI: qci exposes password in web UI when they should be masked","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":"CWE-200","affected_packages":["tfm-rubygem-fusor_ui-0:1.0.9.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7060.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.9"},{"CVE":"CVE-2016-10345","severity":"moderate","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1445306","bugzilla_description":"CVE-2016-10345 passenger: File overwrite vulnerability in passenger-install-nginx-module","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10345.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-8613","severity":"moderate","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1387232","bugzilla_description":"CVE-2016-8613 foreman: Stored XSS vulnerability in remote execution plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["tfm-rubygem-foreman_remote_execution-0:1.3.7.2-1.fm1_15.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8613.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2016-7954","severity":"moderate","public_date":"2016-10-04T00:00:00Z","advisories":[],"bugzilla":"1381951","bugzilla_description":"CVE-2016-7954 rubygem-bundler: Code execution via gem name collision in bundler","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7954.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.9"},{"CVE":"CVE-2016-7798","severity":"moderate","public_date":"2016-09-19T00:00:00Z","advisories":[],"bugzilla":"1381526","bugzilla_description":"CVE-2016-7798 ruby: IV Reuse in GCM Mode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10173","severity":"moderate","public_date":"2016-08-22T00:00:00Z","advisories":[],"bugzilla":"1417578","bugzilla_description":"CVE-2016-10173 rubygem-archive-tar-minitar: Directory traversal during archive extraction","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10173.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-6316","severity":"moderate","public_date":"2016-08-11T00:00:00Z","advisories":["RHSA-2016:1855","RHSA-2016:1856","RHSA-2016:1857","RHSA-2016:1858"],"bugzilla":"1365008","bugzilla_description":"CVE-2016-6316 rubygem-actionview: cross-site scripting flaw in Action View","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rh-ror41-rubygem-actionview-0:4.1.5-6.el7","ruby193-rubygem-actionpack-1:3.2.8-20.el7","rh-ror42-rubygem-actionview-0:4.2.6-3.el7","rh-ror41-rubygem-actionview-0:4.1.5-6.el6","ruby193-rubygem-actionpack-1:3.2.8-20.el6","ror40-rubygem-actionpack-1:4.0.2-8.el7","ror40-rubygem-actionpack-1:4.0.2-8.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6316.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-6317","severity":"moderate","public_date":"2016-08-11T00:00:00Z","advisories":["RHSA-2016:1855"],"bugzilla":"1365017","bugzilla_description":"CVE-2016-6317 rubygem-activerecord: unsafe query generation in Active Record","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["rh-ror42-rubygem-activerecord-1:4.2.6-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6317.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-2788","severity":"moderate","public_date":"2016-08-09T00:00:00Z","advisories":[],"bugzilla":"1365799","bugzilla_description":"CVE-2016-2788 mcollective: Improper validation of fields in MCollective pings","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2788.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-7103","severity":"low","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2017:0161","RHSA-2016:2933","RHSA-2016:2932"],"bugzilla":"1360286","bugzilla_description":"CVE-2016-7103 jquery-ui: cross-site scripting in dialog closeText","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-XStatic-jquery-ui-0:1.12.0.1-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7103.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-2339","severity":"moderate","public_date":"2016-06-14T00:00:00Z","advisories":[],"bugzilla":"1412678","bugzilla_description":"CVE-2016-2339 ruby: Fiddle::Function.new heap buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2339.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-2337","severity":"moderate","public_date":"2016-06-14T00:00:00Z","advisories":[],"bugzilla":"1412680","bugzilla_description":"CVE-2016-2337 ruby: TclTkIp ip_cancel_eval type confusion vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2337.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-2336","severity":"important","public_date":"2016-06-14T00:00:00Z","advisories":[],"bugzilla":"1412683","bugzilla_description":"CVE-2016-2336 ruby: WIN32OLE ole_invoke and ole_query_interface type confusion vulnerabilities","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2336.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-2097","severity":"important","public_date":"2016-02-29T00:00:00Z","advisories":["RHSA-2016:0454","RHSA-2016:0455","RHSA-2016:0456"],"bugzilla":"1310043","bugzilla_description":"CVE-2016-2097 rubygem-actionview, rubygem-actionpack: directory traversal in Action View, incomplete CVE-2016-0752 fix","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-22","affected_packages":["ror40-rubygem-actionpack-1:4.0.2-7.el6","ror40-rubygem-actionpack-1:4.0.2-7.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el6","rh-ror41-rubygem-actionview-0:4.1.5-5.el6","rh-ror41-rubygem-actionview-0:4.1.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2097.json"},{"CVE":"CVE-2016-2098","severity":"important","public_date":"2016-02-29T00:00:00Z","advisories":["RHSA-2016:0454","RHSA-2016:0455","RHSA-2016:0456"],"bugzilla":"1310054","bugzilla_description":"CVE-2016-2098 rubygem-actionview, rubygem-actionpack: code injection vulnerability in Action View","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-94","affected_packages":["ror40-rubygem-actionpack-1:4.0.2-7.el6","ror40-rubygem-actionpack-1:4.0.2-7.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el6","rh-ror41-rubygem-actionview-0:4.1.5-5.el6","rh-ror41-rubygem-actionview-0:4.1.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2098.json"},{"CVE":"CVE-2015-7576","severity":"low","public_date":"2016-01-25T00:00:00Z","advisories":["RHSA-2016:0296","RHSA-2016:0454","RHSA-2016:0455"],"bugzilla":"1301933","bugzilla_description":"CVE-2015-7576 rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["ror40-rubygem-actionpack-1:4.0.2-7.el6","rh-ror41-rubygem-actionpack-1:4.1.5-3.el7","ror40-rubygem-actionpack-1:4.0.2-7.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el6","rh-ror41-rubygem-actionpack-1:4.1.5-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7576.json"},{"CVE":"CVE-2016-0751","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHSA-2016:0296","RHSA-2016:0454","RHSA-2016:0455"],"bugzilla":"1301946","bugzilla_description":"CVE-2016-0751 rubygem-actionpack: possible object leak and denial of service attack in Action Pack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["ror40-rubygem-actionpack-1:4.0.2-7.el6","rh-ror41-rubygem-actionpack-1:4.1.5-3.el7","ror40-rubygem-actionpack-1:4.0.2-7.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el6","rh-ror41-rubygem-actionpack-1:4.1.5-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0751.json"},{"CVE":"CVE-2015-7577","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHSA-2016:0296","RHSA-2016:0454","RHSA-2016:0455"],"bugzilla":"1301957","bugzilla_description":"CVE-2015-7577 rubygem-activerecord: Nested attributes rejection proc bypass in Active Record","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ror40-rubygem-activerecord-1:4.0.2-6.el7","ror40-rubygem-activerecord-1:4.0.2-6.el6","ruby193-rubygem-activerecord-1:3.2.8-11.el7","ruby193-rubygem-activerecord-1:3.2.8-11.el6","rh-ror41-rubygem-activerecord-1:4.1.5-2.el6","rh-ror41-rubygem-activerecord-1:4.1.5-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7577.json"},{"CVE":"CVE-2016-0752","severity":"important","public_date":"2016-01-25T00:00:00Z","advisories":["RHSA-2016:0296","RHSA-2016:0454","RHSA-2016:0455"],"bugzilla":"1301963","bugzilla_description":"CVE-2016-0752 rubygem-actionview, rubygem-actionpack: directory traversal flaw in Action View","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-22","affected_packages":["ror40-rubygem-actionpack-1:4.0.2-7.el6","rh-ror41-rubygem-actionpack-1:4.1.5-3.el7","ror40-rubygem-actionpack-1:4.0.2-7.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el7","rh-ror41-rubygem-actionview-0:4.1.5-4.el6","ruby193-rubygem-actionpack-1:3.2.8-16.el6","rh-ror41-rubygem-actionview-0:4.1.5-4.el7","rh-ror41-rubygem-actionpack-1:4.1.5-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0752.json"},{"CVE":"CVE-2016-0753","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHSA-2016:0296"],"bugzilla":"1301973","bugzilla_description":"CVE-2016-0753 rubygem-activemodel, rubygem-activerecord: possible input validation circumvention in Active Model","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["rh-ror41-rubygem-activemodel-0:4.1.5-2.el6","rh-ror41-rubygem-activemodel-0:4.1.5-2.el7","rh-ror41-rubygem-activerecord-1:4.1.5-2.el6","rh-ror41-rubygem-activerecord-1:4.1.5-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0753.json"},{"CVE":"CVE-2015-7581","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHSA-2016:0296","RHSA-2016:0454"],"bugzilla":"1301981","bugzilla_description":"CVE-2015-7581 rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["ror40-rubygem-actionpack-1:4.0.2-7.el6","rh-ror41-rubygem-actionpack-1:4.1.5-3.el7","ror40-rubygem-actionpack-1:4.0.2-7.el7","rh-ror41-rubygem-actionpack-1:4.1.5-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7581.json"},{"CVE":"CVE-2017-17718","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2020:1454"],"bugzilla":"1527048","bugzilla_description":"CVE-2017-17718 rubygem-net-ldap: Missing SSL Certificate Validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["tfm-rubygem-net-ldap-0:0.16.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17718.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2015-9097","severity":"low","public_date":"2015-12-11T00:00:00Z","advisories":[],"bugzilla":"1293598","bugzilla_description":"CVE-2015-9097 rubygem-mail: SMTP injection via recipient email addresses","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9097.json"},{"CVE":"CVE-2015-7519","severity":"moderate","public_date":"2015-12-07T00:00:00Z","advisories":[],"bugzilla":"1290405","bugzilla_description":"CVE-2015-7519 passenger: Header overwriting issue allowing user impersonation","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7519.json"},{"CVE":"CVE-2015-5274","severity":"important","public_date":"2015-09-16T00:00:00Z","advisories":["RHSA-2015:1808"],"bugzilla":"1262518","bugzilla_description":"CVE-2015-5274 OpenShift 2.2: API command injection vulnerability","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["rubygem-openshift-origin-console-0:1.34.1.3-1.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5274.json"},{"CVE":"CVE-2013-2103","severity":"moderate","public_date":"2015-07-23T00:00:00Z","advisories":[],"bugzilla":"964013","bugzilla_description":"CVE-2013-2103 OpenShift cartridge: remote URL retrieval","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2103.json"},{"CVE":"CVE-2014-10077","severity":"low","public_date":"2015-07-20T00:00:00Z","advisories":[],"bugzilla":"1647431","bugzilla_description":"CVE-2014-10077 rubygem-i18n: denial of service in Hash#slice in lib/i18n/core_ext/hash.rb","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-10077.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-9251","severity":"moderate","public_date":"2015-06-27T00:00:00Z","advisories":["RHSA-2020:0481","RHSA-2020:0729","RHSA-2020:3936","RHSA-2020:0983"],"bugzilla":"1399546","bugzilla_description":"CVE-2015-9251 js-jquery: Cross-site scripting via cross-domain ajax requests","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2015-3225","severity":"moderate","public_date":"2015-06-16T00:00:00Z","advisories":["RHBA-2018:0337","RHSA-2015:2290"],"bugzilla":"1232292","bugzilla_description":"CVE-2015-3225 rubygem-rack: Potential Denial of Service Vulnerability in Rack normalize_params()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["rubygem-rack-1:1.6.4-2.el7sat","pcs-0:0.9.143-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3225.json"},{"CVE":"CVE-2015-3227","severity":"moderate","public_date":"2015-06-16T00:00:00Z","advisories":[],"bugzilla":"1232302","bugzilla_description":"CVE-2015-3227 rubygem-activesupport: Possible Denial of Service attack in Active Support in merge_element()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3227.json"},{"CVE":"CVE-2015-3226","severity":"moderate","public_date":"2015-06-16T00:00:00Z","advisories":[],"bugzilla":"1232310","bugzilla_description":"CVE-2015-3226 rubygem-activesupport: XSS Vulnerability in ActiveSupport::JSON.encode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3226.json"},{"CVE":"CVE-2015-1840","severity":"moderate","public_date":"2015-06-16T00:00:00Z","advisories":[],"bugzilla":"1233334","bugzilla_description":"CVE-2015-1840 rubygem-jquery-rails: CSRF Vulnerability in jquery-ujs and jquery-rails","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-212->CWE-201->CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1840.json"},{"CVE":"CVE-2015-4411","severity":"low","public_date":"2015-06-04T00:00:00Z","advisories":[],"bugzilla":"1229706","bugzilla_description":"CVE-2015-4411 rubygem-moped: Denial of Service with crafted ObjectId string (incomplete fix for CVE-2015-4410)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4411.json"},{"CVE":"CVE-2015-4412","severity":"low","public_date":"2015-06-04T00:00:00Z","advisories":[],"bugzilla":"1229750","bugzilla_description":"CVE-2015-4412 rubygem-bson: data injection vulnerability through a crafted ObjectId","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4412.json"},{"CVE":"CVE-2015-4410","severity":"low","public_date":"2015-06-04T00:00:00Z","advisories":[],"bugzilla":"1229757","bugzilla_description":"CVE-2015-4410 rubygem-moped: Denial of Service with crafted ObjectId string","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4410.json"},{"CVE":"CVE-2018-1000119","severity":"moderate","public_date":"2015-05-25T00:00:00Z","advisories":["RHSA-2018:1060"],"bugzilla":"1534027","bugzilla_description":"CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["pcs-0:0.9.162-5.el7_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000119.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-4020","severity":"important","public_date":"2015-05-18T00:00:00Z","advisories":[],"bugzilla":"1250109","bugzilla_description":"CVE-2015-4020 rubygems: incomplete fix for CVE-2015-3900","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-20->CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4020.json"},{"CVE":"CVE-2015-3900","severity":"important","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2015:1657"],"bugzilla":"1236116","bugzilla_description":"CVE-2015-3900 rubygems: DNS hijacking vulnerability in api_endpoint()","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-20->CWE-345","affected_packages":["rh-ruby22-ruby-0:2.2.2-12.el6","rh-ruby22-ruby-0:2.2.2-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3900.json"},{"CVE":"CVE-2013-2095","severity":"important","public_date":"2015-05-13T00:00:00Z","advisories":[],"bugzilla":"963079","bugzilla_description":"CVE-2013-2095 rubygem-openshift-origin-controller: cartridge_cache.rb URI.prase() command injection","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2095.json"},{"CVE":"CVE-2015-3199","severity":"low","public_date":"2015-05-11T00:00:00Z","advisories":[],"bugzilla":"1220853","bugzilla_description":"CVE-2015-3199 foreman_discovery: auto provision rule does not enforce host group association to org/location","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3199.json"},{"CVE":"CVE-2015-1855","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":[],"bugzilla":"1209981","bugzilla_description":"CVE-2015-1855 ruby: OpenSSL extension hostname matching implementation violates RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1855.json"},{"CVE":"CVE-2015-1820","severity":"moderate","public_date":"2015-03-24T00:00:00Z","advisories":[],"bugzilla":"1205291","bugzilla_description":"CVE-2015-1820 rubygem-rest-client: session fixation vulnerability Set-Cookie headers present in an HTTP 30x redirection responses","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1820.json"},{"CVE":"CVE-2014-0241","severity":"moderate","public_date":"2015-02-18T00:00:00Z","advisories":[],"bugzilla":"1099419","bugzilla_description":"CVE-2014-0241 rubygem-hammer_cli_foreman: /etc/hammer/cli.modules.d/foreman.yml is world-readable","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:N/A:N","CWE":"CWE-732->CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0241.json"},{"CVE":"CVE-2014-0135","severity":"moderate","public_date":"2015-02-06T00:00:00Z","advisories":["RHEA-2014:1175"],"bugzilla":"1076335","bugzilla_description":"CVE-2014-0135 rubygem-kafo: temporary file creation vulnerability when creating /tmp/default_values.yaml","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"(CWE-377|CWE-367|CWE-732)","affected_packages":["rubygem-kafo-0:0.6.4-2.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0135.json"},{"CVE":"CVE-2015-3448","severity":"low","public_date":"2015-01-12T00:00:00Z","advisories":[],"bugzilla":"1240982","bugzilla_description":"CVE-2015-3448 rubygem-rest-client: unsanitized application logging","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3448.json"},{"CVE":"CVE-2014-0163","severity":"important","public_date":"2014-12-03T00:00:00Z","advisories":[],"bugzilla":"1083858","bugzilla_description":"CVE-2014-0163 Openshift: Multiple shell command injection flaws","cvss_score":8.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0163.json"},{"CVE":"CVE-2014-9130","severity":"moderate","public_date":"2014-11-26T00:00:00Z","advisories":["RHSA-2015:0112","RHSA-2015:0100","RHSA-2015:0260"],"bugzilla":"1169369","bugzilla_description":"CVE-2014-9130 libyaml: assert failure when processing wrapped strings","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["libyaml-0:0.1.4-11.el7_0","libyaml-0:0.1.3-4.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9130.json"},{"CVE":"CVE-2014-7829","severity":"low","public_date":"2014-11-17T00:00:00Z","advisories":[],"bugzilla":"1164659","bugzilla_description":"CVE-2014-7829 rubygem-actionpack: incomplete fix for CVE-2014-7818, arbitrary file existence disclosure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-22->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7829.json"},{"CVE":"CVE-2014-8090","severity":"moderate","public_date":"2014-11-13T00:00:00Z","advisories":["RHSA-2014:1911","RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1159927","bugzilla_description":"CVE-2014-8090 ruby: REXML incomplete fix for CVE-2014-8080","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-776","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:1.8.7.374-3.el6_6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8090.json"},{"CVE":"CVE-2014-7818","severity":"low","public_date":"2014-10-31T00:00:00Z","advisories":[],"bugzilla":"1161499","bugzilla_description":"CVE-2014-7818 rubygem-actionpack: arbitrary file existence disclosure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-22->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7818.json"},{"CVE":"CVE-2014-7819","severity":"low","public_date":"2014-10-31T00:00:00Z","advisories":[],"bugzilla":"1161527","bugzilla_description":"CVE-2014-7819 rubygem-sprockets: arbitrary file existence disclosure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-22->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7819.json"},{"CVE":"CVE-2014-8080","severity":"moderate","public_date":"2014-10-27T00:00:00Z","advisories":["RHSA-2014:1911","RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1157709","bugzilla_description":"CVE-2014-8080 ruby: REXML billion laughs attack via parameter entity expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-776","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:1.8.7.374-3.el6_6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8080.json"},{"CVE":"CVE-2014-3712","severity":"low","public_date":"2014-10-22T00:00:00Z","advisories":[],"bugzilla":"1155708","bugzilla_description":"CVE-2014-3712 Katello: user parameters passed to to_sym","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-20->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3712.json"},{"CVE":"CVE-2014-7967","severity":"important","public_date":"2014-10-08T00:00:00Z","advisories":[],"bugzilla":"1150850","bugzilla_description":"CVE-2014-7967 v8: multiple unspecified issues fixed in Google Chrome 38.0.2125.101","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7967.json"},{"CVE":"CVE-2014-3188","severity":"important","public_date":"2014-09-22T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1150848","bugzilla_description":"CVE-2014-3188 v8: IPC and v8 issue fixed in Google Chrome 38.0.2125.101","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3188.json"},{"CVE":"CVE-2014-3195","severity":"moderate","public_date":"2014-09-18T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1150849","bugzilla_description":"CVE-2014-3195 v8: information leak fixed in Google Chrome 38.0.2125.101","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3195.json"},{"CVE":"CVE-2013-1945","severity":"low","public_date":"2014-09-17T00:00:00Z","advisories":[],"bugzilla":"950930","bugzilla_description":"CVE-2013-1945 ruby193: insecure LD_LIBRARY_PATH setting","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1945.json"},{"CVE":"CVE-2013-0196","severity":"moderate","public_date":"2014-09-05T00:00:00Z","advisories":["RHEA-2013:1031"],"bugzilla":"901364","bugzilla_description":"CVE-2013-0196 OpenShift Enterprise and Online vulnerable to CSRF attack with REST API","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["rubygem-openshift-origin-controller-0:1.9.14-1.2.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0196.json"},{"CVE":"CVE-2014-6071","severity":null,"public_date":"2014-09-02T00:00:00Z","advisories":[],"bugzilla":"1136683","bugzilla_description":"CVE-2014-6071 jQuery: cross-site scripting flaw","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6071.json"},{"CVE":"CVE-2014-6438","severity":"moderate","public_date":"2014-08-19T00:00:00Z","advisories":[],"bugzilla":"1490845","bugzilla_description":"CVE-2014-6438 ruby: Unsafe parsing of long strings via decode_www_form_component method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6438.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-3514","severity":"important","public_date":"2014-08-18T00:00:00Z","advisories":["RHSA-2014:1102"],"bugzilla":"1131240","bugzilla_description":"CVE-2014-3514 rubygem-activerecord: Strong Parameter bypass with create_with","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-88","affected_packages":["ror40-rubygem-activerecord-1:4.0.2-2.3.el6","ror40-rubygem-activerecord-1:4.0.2-2.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3514.json"},{"CVE":"CVE-2013-0334","severity":"moderate","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:2180"],"bugzilla":"1146335","bugzilla_description":"CVE-2013-0334 rubygem-bundler: 'bundle install' may install a gem from a source other than expected","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-345","affected_packages":["rubygem-bundler-0:1.7.8-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0334.json"},{"CVE":"CVE-2014-3592","severity":"moderate","public_date":"2014-08-13T00:00:00Z","advisories":[],"bugzilla":"1129846","bugzilla_description":"CVE-2014-3592 OpenShift Origin: XSS in team name","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3592.json"},{"CVE":"CVE-2014-5256","severity":"moderate","public_date":"2014-07-31T00:00:00Z","advisories":["RHSA-2014:1744"],"bugzilla":"1125464","bugzilla_description":"CVE-2014-5256 V8: Memory Corruption and Stack Overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["v8314-v8-1:3.14.5.10-6.el7","v8314-v8-1:3.14.5.10-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5256.json"},{"CVE":"CVE-2014-3251","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":[],"bugzilla":"1105713","bugzilla_description":"CVE-2014-3251 mcollective: aes_security.rb file creation vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-348","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3251.json"},{"CVE":"CVE-2014-3531","severity":"moderate","public_date":"2014-07-11T00:00:00Z","advisories":["RHEA-2014:1175"],"bugzilla":"1108745","bugzilla_description":"CVE-2014-3531 foreman: XSS with operating system name/description","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3531.json"},{"CVE":"CVE-2014-0175","severity":"important","public_date":"2014-07-10T00:00:00Z","advisories":["RHBA-2014:0487"],"bugzilla":"1086381","bugzilla_description":"CVE-2014-0175 mcollective: default password set at install","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-798","affected_packages":["ruby193-mcollective-0:2.4.1-5.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0175.json"},{"CVE":"CVE-2014-4975","severity":"low","public_date":"2014-07-09T00:00:00Z","advisories":["RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1118158","bugzilla_description":"CVE-2014-4975 ruby: off-by-one stack-based buffer overflow in the encodes() function","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-121","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4975.json"},{"CVE":"CVE-2014-3482","severity":"moderate","public_date":"2014-07-02T00:00:00Z","advisories":["RHSA-2014:0876"],"bugzilla":"1114425","bugzilla_description":"CVE-2014-3482 rubygem-activerecord: SQL injection vulnerability in 'bitstring' quoting","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-89","affected_packages":["ruby193-rubygem-activerecord-1:3.2.8-8.2.el6","ruby193-rubygem-activerecord-1:3.2.8-8.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3482.json"},{"CVE":"CVE-2014-3483","severity":"moderate","public_date":"2014-07-02T00:00:00Z","advisories":["RHSA-2014:0877"],"bugzilla":"1114427","bugzilla_description":"CVE-2014-3483 rubygem-activerecord: SQL injection vulnerability in 'range' quoting","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-89","affected_packages":["ror40-rubygem-activerecord-1:4.0.2-2.2.el7","ror40-rubygem-activerecord-1:4.0.2-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3483.json"},{"CVE":"CVE-2014-0007","severity":"critical","public_date":"2014-06-18T00:00:00Z","advisories":["RHEA-2014:1175","RHSA-2014:0770"],"bugzilla":"1105369","bugzilla_description":"CVE-2014-0007 foreman-proxy: smart-proxy remote command injection","cvss_score":10.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-78","affected_packages":["foreman-proxy-0:1.3.0-5.el6sat","foreman-proxy-0:1.6.0.30-1.el7sat","ruby193-foreman-proxy-0:1.1.10001-7.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0007.json"},{"CVE":"CVE-2014-3496","severity":"critical","public_date":"2014-06-17T00:00:00Z","advisories":["RHSA-2014:0762","RHSA-2014:0763","RHSA-2014:0764"],"bugzilla":"1110470","bugzilla_description":"CVE-2014-3496 OpenShift Origin: Command execution as root via downloadable cartridge source-url","cvss_score":10.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-78","affected_packages":["rubygem-openshift-origin-node-0:1.17.5.17-1.el6op","rubygem-openshift-origin-node-0:1.23.9.11-1.el6op","rubygem-openshift-origin-node-0:1.9.14.8-1.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3496.json"},{"CVE":"CVE-2014-3248","severity":"moderate","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1101346","bugzilla_description":"CVE-2014-3248 puppet: Ruby modules could be loaded from the current working directory","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3248.json"},{"CVE":"CVE-2014-3250","severity":"moderate","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1101347","bugzilla_description":"CVE-2014-3250 puppet: certificates could be honored even when revoked","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3250.json"},{"CVE":"CVE-2013-6470","severity":"moderate","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:0517"],"bugzilla":"1051994","bugzilla_description":"CVE-2013-6470 openstack foreman-installer: insecure defaults","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openstack-foreman-installer-0:1.0.12-1.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6470.json"},{"CVE":"CVE-2014-0233","severity":"important","public_date":"2014-05-21T00:00:00Z","advisories":["RHSA-2014:0530","RHSA-2014:0529"],"bugzilla":"1096955","bugzilla_description":"CVE-2014-0233 OpenShift: downloadable cartridge source url file command execution as root","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-73->CWE-78","affected_packages":["rubygem-openshift-origin-node-0:1.17.5.16-1.el6op","rubygem-openshift-origin-node-0:1.23.9.4-1.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0233.json"},{"CVE":"CVE-2014-0130","severity":"important","public_date":"2014-05-06T00:00:00Z","advisories":["RHSA-2014:1863","RHSA-2014:0510","RHSA-2014:0816"],"bugzilla":"1095105","bugzilla_description":"CVE-2014-0130 rubygem-actionpack: directory traversal issue","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-22","affected_packages":["ruby193-rubygem-actionpack-1:3.2.8-5.5.el6","ruby193-rubygem-actionpack-1:3.2.17-6.el6sam","ruby193-rubygem-actionpack-1:3.2.13-8.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0130.json"},{"CVE":"CVE-2014-0164","severity":"important","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2014:0461","RHSA-2014:0460"],"bugzilla":"1083847","bugzilla_description":"CVE-2014-0164 mcollective: world readable client config","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-732","affected_packages":["openshift-origin-broker-util-0:1.17.6.6-1.el6op","openshift-origin-broker-util-0:1.9.16-1.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0164.json"},{"CVE":"CVE-2014-0192","severity":"moderate","public_date":"2014-04-25T00:00:00Z","advisories":["RHEA-2014:1175"],"bugzilla":"1092354","bugzilla_description":"CVE-2014-0192 Foreman: provisioning templates are world accessible","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-285->CWE-305","affected_packages":["foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0192.json"},{"CVE":"CVE-2014-1736","severity":"moderate","public_date":"2014-04-24T00:00:00Z","advisories":[],"bugzilla":"1094858","bugzilla_description":"CVE-2014-1736 v8: integer overflow can lead to a remote denial of service","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1736.json"},{"CVE":"CVE-2014-2734","severity":"low","public_date":"2014-04-10T00:00:00Z","advisories":[],"bugzilla":"1091156","bugzilla_description":"CVE-2014-2734 ruby: SSL signature spoofing flaw","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2734.json"},{"CVE":"CVE-2014-3916","severity":"low","public_date":"2014-04-07T00:00:00Z","advisories":[],"bugzilla":"1164844","bugzilla_description":"CVE-2014-3916 ruby: DoS via long string in str_buf_cat()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3916.json"},{"CVE":"CVE-2014-1735","severity":"moderate","public_date":"2014-04-04T00:00:00Z","advisories":[],"bugzilla":"1091838","bugzilla_description":"CVE-2014-1735 v8: multiple vulnerabilities fixed in Google Chrome 34.0.1847.131","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1735.json"},{"CVE":"CVE-2014-1730","severity":"moderate","public_date":"2014-04-01T00:00:00Z","advisories":[],"bugzilla":"1091834","bugzilla_description":"CVE-2014-1730 v8: type confusion issue fixed in Google Chrome 34.0.1847.131","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1730.json"},{"CVE":"CVE-2014-3152","severity":"moderate","public_date":"2014-03-31T00:00:00Z","advisories":[],"bugzilla":"1101056","bugzilla_description":"CVE-2014-3152 v8: integer underflow fixed in Google Chrome 35.0.1916.114","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3152.json"},{"CVE":"CVE-2014-2525","severity":"important","public_date":"2014-03-27T00:00:00Z","advisories":["RHSA-2014:0355","RHSA-2014:0353","RHSA-2014:0364","RHSA-2014:0354","RHSA-2014:0415"],"bugzilla":"1078083","bugzilla_description":"CVE-2014-2525 libyaml: heap-based buffer overflow when parsing URLs","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libyaml-0:0.1.3-1.4.el6","ruby193-libyaml-0:0.1.4-5.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2525.json"},{"CVE":"CVE-2014-0089","severity":"moderate","public_date":"2014-03-24T00:00:00Z","advisories":["RHEA-2014:1175"],"bugzilla":"1071741","bugzilla_description":"CVE-2014-0089 Foreman: Stored Cross Site Scripting","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-79","affected_packages":["foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0089.json"},{"CVE":"CVE-2014-0090","severity":"low","public_date":"2014-03-24T00:00:00Z","advisories":["RHEA-2014:1175"],"bugzilla":"1072151","bugzilla_description":"CVE-2014-0090 Foreman: Session fixation","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":"CWE-384","affected_packages":["foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0090.json"},{"CVE":"CVE-2014-1716","severity":"moderate","public_date":"2014-03-20T00:00:00Z","advisories":[],"bugzilla":"1086112","bugzilla_description":"CVE-2014-1716 v8: cross-site scripting flaw in Runtime_SetPrototype()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1716.json"},{"CVE":"CVE-2014-1717","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1086113","bugzilla_description":"CVE-2014-1717 v8: numeric casting issues","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1717.json"},{"CVE":"CVE-2014-1705","severity":"moderate","public_date":"2014-03-14T00:00:00Z","advisories":[],"bugzilla":"1077141","bugzilla_description":"CVE-2014-1705 v8: ArrayBuffer memory corruption fixed in Chrome 33.0.1750.152","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1705.json"},{"CVE":"CVE-2014-1721","severity":"moderate","public_date":"2014-03-12T00:00:00Z","advisories":[],"bugzilla":"1086116","bugzilla_description":"CVE-2014-1721 v8: memory corruption issue fixed in Google Chrome 34.0.1847.116","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1721.json"},{"CVE":"CVE-2014-0036","severity":"moderate","public_date":"2014-03-05T00:00:00Z","advisories":[],"bugzilla":"1058595","bugzilla_description":"CVE-2014-0036 rubygem-rbovirt: unsafe use of rest-client","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0036.json"},{"CVE":"CVE-2014-1729","severity":"moderate","public_date":"2014-02-27T00:00:00Z","advisories":[],"bugzilla":"1086120","bugzilla_description":"CVE-2014-1729 v8: multiple unspecified vulnerabilities fixed in Google Chrome 34.0.1847.116","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1729.json"},{"CVE":"CVE-2014-0080","severity":"moderate","public_date":"2014-02-18T00:00:00Z","advisories":[],"bugzilla":"1065517","bugzilla_description":"CVE-2014-0080 rubygem-activerecord: PostgreSQL array data injection vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0080.json"},{"CVE":"CVE-2014-0081","severity":"moderate","public_date":"2014-02-18T00:00:00Z","advisories":["RHSA-2014:0215","RHSA-2014:0306"],"bugzilla":"1065520","bugzilla_description":"CVE-2014-0081 rubygem-actionpack: number_to_currency, number_to_percentage and number_to_human XSS vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ruby193-rubygem-actionpack-1:3.2.13-5.el6cf","ruby193-rubygem-actionpack-1:3.2.8-5.3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0081.json"},{"CVE":"CVE-2014-0082","severity":"moderate","public_date":"2014-02-18T00:00:00Z","advisories":["RHSA-2014:0215","RHSA-2014:0306"],"bugzilla":"1065538","bugzilla_description":"CVE-2014-0082 rubygem-actionpack: Action View string handling denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ruby193-rubygem-actionpack-1:3.2.13-5.el6cf","ruby193-rubygem-actionpack-1:3.2.8-5.3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0082.json"},{"CVE":"CVE-2013-6668","severity":"moderate","public_date":"2014-02-18T00:00:00Z","advisories":["RHSA-2014:1744","RHBA-2018:0337"],"bugzilla":"1074737","bugzilla_description":"CVE-2013-6668 v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.146","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["v8-1:3.14.5.10-19.el7sat","v8314-v8-1:3.14.5.10-6.el7","v8314-v8-1:3.14.5.10-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6668.json"},{"CVE":"CVE-2014-0084","severity":"low","public_date":"2014-02-14T00:00:00Z","advisories":["RHBA-2014:0487"],"bugzilla":"1065198","bugzilla_description":"CVE-2014-0084 rubygem-openshift-origin-node: cron.daily/cron.weekly denial of service","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["rubygem-openshift-origin-node-0:1.23.9.3-1.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0084.json"},{"CVE":"CVE-2014-0083","severity":"low","public_date":"2014-02-12T00:00:00Z","advisories":[],"bugzilla":"1065086","bugzilla_description":"CVE-2014-0083 rubygem-net-ldap: SSHA passwords generated by the net-ldap Ruby gem use a weak salt","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0083.json"},{"CVE":"CVE-2014-1831","severity":"low","public_date":"2014-01-28T00:00:00Z","advisories":[],"bugzilla":"1058992","bugzilla_description":"CVE-2014-1831 CVE-2014-1832 rubygem-passenger: insecure use of temporary files","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1831.json"},{"CVE":"CVE-2014-1832","severity":"low","public_date":"2014-01-28T00:00:00Z","advisories":[],"bugzilla":"1058992","bugzilla_description":"CVE-2014-1831 CVE-2014-1832 rubygem-passenger: insecure use of temporary files","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1832.json"},{"CVE":"CVE-2013-6393","severity":"moderate","public_date":"2014-01-27T00:00:00Z","advisories":["RHSA-2014:0355","RHSA-2014:0353","RHSA-2014:0364","RHSA-2014:0354","RHSA-2014:0415"],"bugzilla":"1033990","bugzilla_description":"CVE-2013-6393 libyaml: heap-based buffer overflow when parsing YAML tags","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libyaml-0:0.1.3-1.4.el6","ruby193-libyaml-0:0.1.4-5.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6393.json"},{"CVE":"CVE-2014-1704","severity":"low","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:1744","RHEA-2014:1175"],"bugzilla":"1077136","bugzilla_description":"CVE-2014-1704 v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.149","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["v8314-v8-1:3.14.5.10-6.el7","v8-1:3.14.5.10-11.el7sat","v8314-v8-1:3.14.5.10-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1704.json"},{"CVE":"CVE-2013-6650","severity":"moderate","public_date":"2014-01-08T00:00:00Z","advisories":["RHSA-2014:1744","RHEA-2014:1175"],"bugzilla":"1059070","bugzilla_description":"CVE-2013-6650 v8: incorrect handling of popular pages","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-480","affected_packages":["v8314-v8-1:3.14.5.10-6.el7","v8-1:3.14.5.10-11.el7sat","v8314-v8-1:3.14.5.10-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6650.json"},{"CVE":"CVE-2013-4969","severity":"low","public_date":"2013-12-26T00:00:00Z","advisories":[],"bugzilla":"1045212","bugzilla_description":"CVE-2013-4969 Puppet: Unsafe use of Temp files in File type","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4969.json"},{"CVE":"CVE-2013-6459","severity":"moderate","public_date":"2013-12-24T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1046642","bugzilla_description":"CVE-2013-6459 rubygem-will_paginate: XSS vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2013-6460","severity":"moderate","public_date":"2013-12-15T00:00:00Z","advisories":[],"bugzilla":"1046663","bugzilla_description":"CVE-2013-6460 rubygem-nokogiri: DoS while parsing XML documents","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6460.json"},{"CVE":"CVE-2013-6461","severity":"moderate","public_date":"2013-12-15T00:00:00Z","advisories":[],"bugzilla":"1046664","bugzilla_description":"CVE-2013-6461 rubygem-nokogiri: DoS while parsing XML entities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6461.json"},{"CVE":"CVE-2013-4492","severity":"moderate","public_date":"2013-12-04T00:00:00Z","advisories":["RHSA-2018:0380","RHBA-2015:1100"],"bugzilla":"1039435","bugzilla_description":"CVE-2013-4492 rubygem-i18n: cross-site scripting flaw in exception handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["httpd-configmap-generator-0:0.2.1-1.el7cf","cfme-gemset-0:5.4.0.5-1.el6cf","cfme-amazon-smartstate-0:5.9.0.22-1.el7cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4492.json"},{"CVE":"CVE-2013-6638","severity":"moderate","public_date":"2013-12-04T00:00:00Z","advisories":[],"bugzilla":"1039887","bugzilla_description":"CVE-2013-6638 v8: multiple buffer overflows in runtime.cc","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6638.json"},{"CVE":"CVE-2013-6639","severity":"moderate","public_date":"2013-12-04T00:00:00Z","advisories":["RHSA-2014:1744","RHEA-2014:1175"],"bugzilla":"1039888","bugzilla_description":"CVE-2013-6639 v8: DoS (out-of-bounds write) in DehoistArrayIndex function in hydrogen.cc","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["v8314-v8-1:3.14.5.10-6.el7","v8-1:3.14.5.10-11.el7sat","v8314-v8-1:3.14.5.10-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6639.json"},{"CVE":"CVE-2013-6640","severity":"moderate","public_date":"2013-12-04T00:00:00Z","advisories":["RHSA-2014:1744","RHEA-2014:1175"],"bugzilla":"1039889","bugzilla_description":"CVE-2013-6640 v8: DoS (out-of-bounds read) in DehoistArrayIndex function in hydrogen.cc","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["v8314-v8-1:3.14.5.10-6.el7","v8-1:3.14.5.10-11.el7sat","v8314-v8-1:3.14.5.10-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6640.json"},{"CVE":"CVE-2013-6417","severity":"important","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0469","RHSA-2014:0008","RHSA-2013:1794"],"bugzilla":"1036409","bugzilla_description":"CVE-2013-6417 rubygem-actionpack: unsafe query generation risk (incomplete fix for CVE-2013- 0155)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-89","affected_packages":["ruby193-rubygem-actionpack-1:3.2.13-6.el6cf","ruby193-rubygem-actionpack-1:3.2.8-5.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6417.json"},{"CVE":"CVE-2013-6414","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:1863","RHSA-2014:0008","RHSA-2013:1794"],"bugzilla":"1036483","bugzilla_description":"CVE-2013-6414 rubygem-actionpack: Action View DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["ruby193-rubygem-actionpack-1:3.2.8-5.1.el6","ruby193-rubygem-actionpack-1:3.2.17-6.el6sam"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6414.json"},{"CVE":"CVE-2013-6415","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:1863","RHSA-2014:0008","RHSA-2013:1794"],"bugzilla":"1036910","bugzilla_description":"CVE-2013-6415 rubygem-actionpack: number_to_currency XSS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ruby193-rubygem-actionpack-1:3.2.8-5.1.el6","ruby193-rubygem-actionpack-1:3.2.17-6.el6sam"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6415.json"},{"CVE":"CVE-2013-6416","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1036914","bugzilla_description":"CVE-2013-6416 rubygem-actionpack: simple_format XSS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6416.json"},{"CVE":"CVE-2013-4491","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:1863","RHSA-2014:0008","RHSA-2013:1794"],"bugzilla":"1036922","bugzilla_description":"CVE-2013-4491 rubygem-actionpack: i18n missing translation XSS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ruby193-rubygem-actionpack-1:3.2.8-5.1.el6","ruby193-rubygem-actionpack-1:3.2.17-6.el6sam"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4491.json"},{"CVE":"CVE-2013-4164","severity":"critical","public_date":"2013-11-22T00:00:00Z","advisories":["RHSA-2014:0215","RHSA-2013:1767","RHSA-2013:1764","RHSA-2014:0011","RHSA-2013:1763"],"bugzilla":"1033460","bugzilla_description":"CVE-2013-4164 ruby: heap overflow in floating point parsing","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-228->CWE-122","affected_packages":["ruby-0:1.8.7.352-13.el6","ruby-0:1.8.7.352-13.el6_2","ruby-0:1.8.7.352-13.el6_4","ruby-0:1.8.7.352-13.el6_3","ruby193-ruby-0:1.9.3.448-40.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4164.json"},{"CVE":"CVE-2014-0091","severity":"low","public_date":"2013-11-20T00:00:00Z","advisories":["RHEA-2014:1175"],"bugzilla":"1072738","bugzilla_description":"CVE-2014-0091 Foreman: Improper input validation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0091.json"},{"CVE":"CVE-2013-4389","severity":"low","public_date":"2013-10-16T00:00:00Z","advisories":["RHBA-2015:1100"],"bugzilla":"1013913","bugzilla_description":"CVE-2013-4389 rubygem-actionmailer: email address processing DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-134","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4389.json"},{"CVE":"CVE-2013-4386","severity":"moderate","public_date":"2013-10-07T00:00:00Z","advisories":["RHEA-2014:1175","RHSA-2013:1522"],"bugzilla":"1013076","bugzilla_description":"CVE-2013-4386 Foreman: host and host group parameter SQL injection","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-89","affected_packages":["ruby193-foreman-0:1.1.10014-1.3.el6ost","foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4386.json"},{"CVE":"CVE-2013-2919","severity":"important","public_date":"2013-10-01T00:00:00Z","advisories":[],"bugzilla":"1014863","bugzilla_description":"CVE-2013-2919 v8: remote denial of service via memory corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2919.json"},{"CVE":"CVE-2013-4363","severity":"moderate","public_date":"2013-09-15T00:00:00Z","advisories":[],"bugzilla":"1009720","bugzilla_description":"CVE-2013-4363 rubygems: version regex algorithmic complexity vulnerability, incomplete CVE-2013-4287 fix","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4363.json"},{"CVE":"CVE-2013-4287","severity":"moderate","public_date":"2013-09-09T00:00:00Z","advisories":["RHSA-2013:1427","RHSA-2013:1852","RHSA-2014:0207","RHSA-2013:1523","RHSA-2013:1441"],"bugzilla":"1002364","bugzilla_description":"CVE-2013-4287 rubygems: version regex algorithmic complexity vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407->CWE-400","affected_packages":["rubygems-0:1.3.7-4.el6_4","ruby193-rubygems-0:1.8.24-9.el6ost","rubygems-0:1.8.24-5.el6op","rubygems-0:1.8.23.2-1.el6","ruby193-ruby-0:1.9.3.448-40.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4287.json"},{"CVE":"CVE-2013-4180","severity":"low","public_date":"2013-09-03T00:00:00Z","advisories":["RHSA-2013:1196","RHEA-2014:1175"],"bugzilla":"989755","bugzilla_description":"CVE-2013-4180 Foreman: hosts_controller.rb power/ipmi_boot Symbol creation DoS","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-20->CWE-400","affected_packages":["ruby193-foreman-0:1.1.10014-1.2.el6ost","foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4180.json"},{"CVE":"CVE-2013-4182","severity":"important","public_date":"2013-09-03T00:00:00Z","advisories":["RHSA-2013:1196","RHEA-2014:1175"],"bugzilla":"990374","bugzilla_description":"CVE-2013-4182 foreman: app/controllers/api/v1/hosts_controller.rb API privilege escalation","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-862","affected_packages":["ruby193-foreman-0:1.1.10014-1.2.el6ost","foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4182.json"},{"CVE":"CVE-2013-4956","severity":"moderate","public_date":"2013-08-15T00:00:00Z","advisories":["RHSA-2013:1283","RHSA-2013:1284"],"bugzilla":"996855","bugzilla_description":"CVE-2013-4956 Puppet: Local Privilege Escalation/Arbitrary Code Execution","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["puppet-0:3.2.4-1.el6_4","ruby193-puppet-0:3.1.1-11.1.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4956.json"},{"CVE":"CVE-2013-4761","severity":"moderate","public_date":"2013-08-15T00:00:00Z","advisories":["RHSA-2013:1283","RHSA-2013:1284"],"bugzilla":"996856","bugzilla_description":"CVE-2013-4761 Puppet: resource_type service code execution","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["puppet-0:3.2.4-1.el6_4","ruby193-puppet-0:3.1.1-11.1.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4761.json"},{"CVE":"CVE-2013-2882","severity":"moderate","public_date":"2013-07-30T00:00:00Z","advisories":["RHEA-2014:1175","RHSA-2013:1201"],"bugzilla":"991116","bugzilla_description":"CVE-2013-2882 v8: remote DoS or unspecified other impact via type confusion","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ruby193-v8-1:3.14.5.10-2.el6","v8-1:3.14.5.10-11.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2882.json"},{"CVE":"CVE-2014-2538","severity":"moderate","public_date":"2013-07-09T00:00:00Z","advisories":[],"bugzilla":"1078612","bugzilla_description":"CVE-2014-2538 rubygem rack-ssl: URL error display XSS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2538.json"},{"CVE":"CVE-2013-4073","severity":"moderate","public_date":"2013-06-27T00:00:00Z","advisories":["RHSA-2013:1090","RHSA-2013:1137","RHSA-2013:1103"],"bugzilla":"979251","bugzilla_description":"CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby193-ruby-0:1.9.3.448-38.el6","ruby193-ruby-0:1.9.3.429-34.2.el6ost","ruby-0:1.8.5-31.el5_9","ruby-0:1.8.7.352-12.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4073.json"},{"CVE":"CVE-2013-4136","severity":"moderate","public_date":"2013-06-20T00:00:00Z","advisories":["RHSA-2013:1136"],"bugzilla":"985633","bugzilla_description":"CVE-2013-4136 rubygem-passenger: insecure temporary directory usage due to reuse of existing server instance directories","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ruby193-rubygem-passenger-0:3.0.21-3.el6op","rubygem-passenger-0:3.0.21-3.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4136.json"},{"CVE":"CVE-2013-3567","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:1283","RHSA-2013:1284"],"bugzilla":"974649","bugzilla_description":"CVE-2013-3567 puppet: remote code execution on master from unauthenticated clients","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["puppet-0:3.2.4-1.el6_4","ruby193-puppet-0:3.1.1-11.1.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3567.json"},{"CVE":"CVE-2013-2119","severity":"moderate","public_date":"2013-05-29T00:00:00Z","advisories":["RHSA-2013:1136"],"bugzilla":"892813","bugzilla_description":"CVE-2013-2119 rubygem-passenger: incorrect temporary file usage","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":["ruby193-rubygem-passenger-0:3.0.21-3.el6op","rubygem-passenger-0:3.0.21-3.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2119.json"},{"CVE":"CVE-2013-2065","severity":"low","public_date":"2013-05-14T00:00:00Z","advisories":[],"bugzilla":"962035","bugzilla_description":"CVE-2013-2065 Ruby: Object taint bypassing in DL and Fiddle","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2065.json"},{"CVE":"CVE-2013-2035","severity":"low","public_date":"2013-05-13T00:00:00Z","advisories":["RHSA-2014:1290","RHSA-2014:1291","RHSA-2014:1995","RHSA-2014:0245","RHSA-2014:0400","RHSA-2014:0254","RHSA-2014:0029","RHSA-2014:0401","RHSA-2013:1029","RHSA-2015:0034","RHSA-2014:1904","RHSA-2013:1786","RHSA-2013:1784","RHSA-2013:1785"],"bugzilla":"958618","bugzilla_description":"CVE-2013-2035 HawtJNI: predictable temporary file name leading to local arbitrary code execution","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-377","affected_packages":["jansi-0:1.9-5.redhat_3.1.ep6.el5","activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2035.json"},{"CVE":"CVE-2013-2060","severity":"important","public_date":"2013-05-06T00:00:00Z","advisories":[],"bugzilla":"960363","bugzilla_description":"CVE-2013-2060 OpenShift: Potential remote command execution vulnerability in download cart url","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2060.json"},{"CVE":"CVE-2013-1854","severity":"moderate","public_date":"2013-03-18T00:00:00Z","advisories":["RHSA-2014:1863","RHSA-2013:0699"],"bugzilla":"921329","bugzilla_description":"CVE-2013-1854 rubygem-activerecord: attribute_dos Symbol DoS vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["ruby193-rubygem-activerecord-1:3.2.8-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1854.json"},{"CVE":"CVE-2013-1855","severity":"moderate","public_date":"2013-03-18T00:00:00Z","advisories":["RHSA-2014:1863","RHSA-2013:0698"],"bugzilla":"921331","bugzilla_description":"CVE-2013-1855 rubygem-actionpack: css_sanitization: XSS vulnerability in sanitize_css","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rubygem-actionpack-1:3.0.13-8.el6op","ruby193-rubygem-actionpack-1:3.2.8-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1855.json"},{"CVE":"CVE-2013-1857","severity":"moderate","public_date":"2013-03-18T00:00:00Z","advisories":["RHSA-2014:1863","RHSA-2013:0698"],"bugzilla":"921335","bugzilla_description":"CVE-2013-1857 rubygem-actionpack: sanitize_protocol: XSS Vulnerability in the  helper of Ruby on Rails","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rubygem-actionpack-1:3.0.13-8.el6op","ruby193-rubygem-actionpack-1:3.2.8-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1857.json"},{"CVE":"CVE-2013-1821","severity":"moderate","public_date":"2013-02-22T00:00:00Z","advisories":["RHSA-2013:1185","RHSA-2013:0612","RHSA-2013:1028","RHSA-2013:0611","RHSA-2013:1147"],"bugzilla":"914716","bugzilla_description":"CVE-2013-1821 ruby: entity expansion DoS vulnerability in REXML","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ruby-0:1.8.5-29.el5_9","ruby-0:1.8.7.352-10.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1821.json"},{"CVE":"CVE-2012-6135","severity":"low","public_date":"2013-02-17T00:00:00Z","advisories":[],"bugzilla":"917925","bugzilla_description":"CVE-2012-6135 rubygem-passenger: untrusted apps Security check socket filenames reported by spawned application processes","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6135.json"},{"CVE":"CVE-2013-0269","severity":"moderate","public_date":"2013-02-11T00:00:00Z","advisories":["RHSA-2013:1185","RHSA-2013:0701","RHSA-2013:0686","RHSA-2013:1028","RHSA-2013:1147"],"bugzilla":"909029","bugzilla_description":"CVE-2013-0269 rubygem-json: Denial of Service and SQL Injection","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["rubygem-json-0:1.7.3-2.el6_3","ruby193-ruby-0:1.9.3.327-28.el6","rubygem-json-0:1.7.3-2.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0269.json"},{"CVE":"CVE-2013-0276","severity":"moderate","public_date":"2013-02-11T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2013:0686"],"bugzilla":"909528","bugzilla_description":"CVE-2013-0276 rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby193-rubygem-activemodel-0:3.2.8-2.el6","rubygem-activemodel-0:3.0.10-3.el6cf","rubygem-activemodel-0:3.0.13-3.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0276.json"},{"CVE":"CVE-2013-0277","severity":"critical","public_date":"2013-02-11T00:00:00Z","advisories":[],"bugzilla":"909633","bugzilla_description":"CVE-2013-0277 rubygem-activerecord: Serialized Attributes YAML Vulnerability with Rails 2.3 and 3.0","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0277.json"},{"CVE":"CVE-2013-0263","severity":"moderate","public_date":"2013-02-08T00:00:00Z","advisories":["RHSA-2013:0638","RHSA-2013:0686"],"bugzilla":"909071","bugzilla_description":"CVE-2013-0263 rubygem-rack: Timing attack in cookie sessions","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rubygem-rack-1:1.3.0-4.el6cf","rubygem-rack-1:1.3.0-4.el6op","ruby193-rubygem-rack-1:1.4.1-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0263.json"},{"CVE":"CVE-2013-0262","severity":"moderate","public_date":"2013-02-08T00:00:00Z","advisories":["RHSA-2013:0638"],"bugzilla":"909072","bugzilla_description":"CVE-2013-0262 rubygem-rack: Path sanitization information disclosure","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rubygem-rack-1:1.3.0-4.el6op","ruby193-rubygem-rack-1:1.4.1-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0262.json"},{"CVE":"CVE-2013-3221","severity":"low","public_date":"2013-02-07T00:00:00Z","advisories":[],"bugzilla":"954365","bugzilla_description":"CVE-2013-3221 rubygem-activerecord: Data-type injection attacks due absent database column data type (input vs stored value) check","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3221.json"},{"CVE":"CVE-2013-0256","severity":"moderate","public_date":"2013-02-06T00:00:00Z","advisories":["RHSA-2013:0728","RHSA-2013:0548","RHSA-2013:0701","RHSA-2013:0686"],"bugzilla":"907820","bugzilla_description":"CVE-2013-0256 rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rubygem-rdoc-0:3.8-9.el6op","ruby193-ruby-0:1.9.3.327-28.el6","rubygem-rdoc-0:3.8-6.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0256.json"},{"CVE":"CVE-2013-0333","severity":"critical","public_date":"2013-01-28T00:00:00Z","advisories":["RHSA-2013:0203","RHSA-2013:0202","RHSA-2013:0201"],"bugzilla":"903440","bugzilla_description":"CVE-2013-0333 rubygem-activesupport: json to yaml parsing","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["rubygem-activesupport-1:3.0.13-4.el6op","rubygem-activesupport-1:3.0.10-7.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0333.json"},{"CVE":"CVE-2013-0162","severity":"low","public_date":"2013-01-21T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2013:0548","RHSA-2013:0544"],"bugzilla":"892806","bugzilla_description":"CVE-2013-0162 rubygem-ruby_parser: incorrect temporary file usage","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op","rubygem-ruby_parser-0:2.0.4-6.el6cf","rubygem-ruby_parser-0:2.0.4-6.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0162.json"},{"CVE":"CVE-2013-1800","severity":"important","public_date":"2013-01-14T00:00:00Z","advisories":[],"bugzilla":"917236","bugzilla_description":"CVE-2013-1800 rubygem-crack: YAML parameter parsing vulnerability","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1800.json"},{"CVE":"CVE-2013-0155","severity":"important","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2013:0155","RHSA-2013:0154"],"bugzilla":"892866","bugzilla_description":"CVE-2013-0155 rubygem-actionpack, rubygem-activerecord: Unsafe Query Generation Risk in Ruby on Rails","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-89","affected_packages":["rubygem-actionpack-1:3.0.10-11.el6cf","ruby193-rubygem-actionpack-1:3.2.8-3.el6","rubygem-actionpack-1:3.0.13-4.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0155.json"},{"CVE":"CVE-2013-0156","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0153","RHSA-2013:0155","RHSA-2013:0154"],"bugzilla":"892870","bugzilla_description":"CVE-2013-0156 rubygem-activesupport: Multiple vulnerabilities in parameter parsing in ActionPack","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["ruby193-rubygem-activesupport-1:3.2.8-3.el6","rubygem-activesupport-1:3.0.13-2.el6op","rubygem-activesupport-1:3.0.10-5.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0156.json"},{"CVE":"CVE-2013-0183","severity":"moderate","public_date":"2013-01-07T00:00:00Z","advisories":["RHSA-2013:0548","RHSA-2013:0544"],"bugzilla":"895282","bugzilla_description":"CVE-2013-0183 rubygem-rack: receiving excessively long lines triggers out-of-memory error","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["rubygem-rack-1:1.3.0-3.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0183.json"},{"CVE":"CVE-2012-5664","severity":"moderate","public_date":"2012-12-21T00:00:00Z","advisories":[],"bugzilla":"889649","bugzilla_description":"CVE-2012-6496 rubygem-activerecord: find_by_* SQL Injection","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-89","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5664.json"},{"CVE":"CVE-2012-6496","severity":"moderate","public_date":"2012-12-21T00:00:00Z","advisories":["RHSA-2013:0155","RHSA-2013:0154","RHSA-2013:0220"],"bugzilla":"889649","bugzilla_description":"CVE-2012-6496 rubygem-activerecord: find_by_* SQL Injection","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-89","affected_packages":["ruby193-rubygem-activerecord-1:3.2.8-2.el6","rubygem-activerecord-1:3.0.10-8.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6496.json"},{"CVE":"CVE-2012-5604","severity":"important","public_date":"2012-12-04T00:00:00Z","advisories":[],"bugzilla":"882136","bugzilla_description":"CVE-2012-5604 rubygem-ldap_fluff: CloudForms authentication bypass when handling anonymous LDAP bind","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5604.json"},{"CVE":"CVE-2012-6662","severity":"moderate","public_date":"2012-11-27T00:00:00Z","advisories":["RHSA-2015:0442","RHSA-2015:1462"],"bugzilla":"1166064","bugzilla_description":"CVE-2012-6662 jquery-ui: XSS vulnerability in default content in Tooltip widget","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:3.0.0-47.el6","ipa-0:4.1.0-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6662.json"},{"CVE":"CVE-2012-4522","severity":"moderate","public_date":"2012-10-12T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2013:0129"],"bugzilla":"865940","bugzilla_description":"CVE-2012-4522 ruby: unintentional file creation caused by inserting an illegal NUL character","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-626","affected_packages":["ruby-0:1.8.5-27.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4522.json"},{"CVE":"CVE-2012-4481","severity":"low","public_date":"2012-10-05T00:00:00Z","advisories":["RHSA-2013:0129","RHSA-2013:0612"],"bugzilla":"863484","bugzilla_description":"CVE-2012-4481 ruby: Incomplete fix for CVE-2011-1005 for NameError#to_s method when used on objects","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby-0:1.8.7.352-10.el6_4","ruby-0:1.8.5-27.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4481.json"},{"CVE":"CVE-2012-4466","severity":"low","public_date":"2012-10-02T00:00:00Z","advisories":["RHSA-2013:0582"],"bugzilla":"862614","bugzilla_description":"CVE-2012-4466 ruby: safe level bypass via name_err_mesg_to_str()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4466.json"},{"CVE":"CVE-2012-4464","severity":"low","public_date":"2012-09-28T00:00:00Z","advisories":["RHSA-2013:0582"],"bugzilla":"862598","bugzilla_description":"CVE-2012-4464 ruby 1.9.3: Possibility to bypass Ruby's $SAFE (level 4) semantics","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4464.json"},{"CVE":"CVE-2012-3463","severity":"moderate","public_date":"2012-08-09T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"847196","bugzilla_description":"CVE-2012-3463 rubygem-actionpack: potential XSS vulnerability in select_tag prompt","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rubygem-actionpack-1:3.0.10-11.el6cf","rubygem-activerecord-1:3.0.13-5.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3463.json"},{"CVE":"CVE-2012-3464","severity":"moderate","public_date":"2012-08-09T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"847199","bugzilla_description":"CVE-2012-3464 rubygem-actionpack: potential XSS vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rubygem-actionpack-1:3.0.10-11.el6cf","rubygem-activerecord-1:3.0.13-5.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3464.json"},{"CVE":"CVE-2012-3465","severity":"moderate","public_date":"2012-08-09T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"847200","bugzilla_description":"CVE-2012-3465 rubygem-actionpack: XSS Vulnerability in strip_tags","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rubygem-actionpack-1:3.0.10-11.el6cf","rubygem-activerecord-1:3.0.13-5.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3465.json"},{"CVE":"CVE-2012-3424","severity":"low","public_date":"2012-07-26T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"843711","bugzilla_description":"CVE-2012-3424 rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rubygem-actionpack-1:3.0.10-11.el6cf","ruby193-rubygem-actionpack-1:3.2.8-3.el6","rubygem-actionpack-1:3.0.13-4.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3424.json"},{"CVE":"CVE-2012-2695","severity":"low","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"831573","bugzilla_description":"CVE-2012-2695 rubygem-activerecord: SQL injection when processing nested query paramaters (a different flaw than CVE-2012-2661)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-89","affected_packages":["rubygem-activerecord-1:3.0.13-5.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2695.json"},{"CVE":"CVE-2012-2694","severity":"low","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"831581","bugzilla_description":"CVE-2012-2694 rubygem-actionpack: Unsafe query generation (a different flaw than CVE-2012-2660)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-138->CWE-305","affected_packages":["rubygem-activerecord-1:3.0.13-5.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2694.json"},{"CVE":"CVE-2012-6685","severity":"moderate","public_date":"2012-06-06T00:00:00Z","advisories":["RHSA-2019:0212"],"bugzilla":"1178970","bugzilla_description":"CVE-2012-6685 rubygem-nokogiri: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["rubygem-nokogiri-0:1.8.2-1.el7cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6685.json"},{"CVE":"CVE-2012-2660","severity":"low","public_date":"2012-05-31T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"827353","bugzilla_description":"CVE-2012-2660 rubygem-actionpack: Unsafe query generation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rubygem-actionpack-1:3.0.10-10.el6cf","rubygem-actionpack-1:3.0.10-11.el6cf","rubygem-actionpack-1:3.0.13-4.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2660.json"},{"CVE":"CVE-2012-2661","severity":"low","public_date":"2012-05-31T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"827363","bugzilla_description":"CVE-2012-2661 rubygem-activerecord: SQL injection when processing nested query paramaters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rubygem-activerecord-1:3.0.13-5.el6op","rubygem-activerecord-1:3.0.10-6.el6cf","rubygem-activerecord-1:3.0.10-8.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2661.json"},{"CVE":"CVE-2012-6109","severity":"moderate","public_date":"2012-05-04T00:00:00Z","advisories":["RHSA-2013:0548","RHSA-2013:0544"],"bugzilla":"895277","bugzilla_description":"CVE-2012-6109 rubygem-rack: parsing Content-Disposition header DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["rubygem-rack-1:1.3.0-3.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6109.json"},{"CVE":"CVE-2013-0184","severity":"moderate","public_date":"2012-05-04T00:00:00Z","advisories":["RHSA-2013:0548","RHSA-2013:0544"],"bugzilla":"895384","bugzilla_description":"CVE-2013-0184 rubygem-rack: Rack::Auth::AbstractRequest DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["rubygem-rack-1:1.3.0-3.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0184.json"},{"CVE":"CVE-2012-2125","severity":"moderate","public_date":"2012-04-19T00:00:00Z","advisories":["RHSA-2013:1852","RHSA-2013:1203","RHSA-2013:1441"],"bugzilla":"814718","bugzilla_description":"CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rubygems-0:1.3.7-4.el6_4","rubygems-0:1.8.24-4.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2125.json"},{"CVE":"CVE-2012-2126","severity":"moderate","public_date":"2012-04-19T00:00:00Z","advisories":["RHSA-2013:1852","RHSA-2013:1203","RHSA-2013:1441"],"bugzilla":"814718","bugzilla_description":"CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rubygems-0:1.3.7-4.el6_4","rubygems-0:1.8.24-4.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2126.json"},{"CVE":"CVE-2012-2140","severity":"important","public_date":"2012-03-14T00:00:00Z","advisories":["RHSA-2012:1542"],"bugzilla":"816352","bugzilla_description":"CVE-2012-2140 rubygem-mail: arbitrary command execution when using exim or sendmail from commandline","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2140.json"},{"CVE":"CVE-2012-2139","severity":"low","public_date":"2012-03-14T00:00:00Z","advisories":["RHSA-2012:1542"],"bugzilla":"891762","bugzilla_description":"CVE-2012-2139 rubygem-mail: directory traversal","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2139.json"},{"CVE":"CVE-2012-1098","severity":"moderate","public_date":"2012-03-01T00:00:00Z","advisories":[],"bugzilla":"799275","bugzilla_description":"CVE-2012-1098 rubygem-activesupport: XSS in SafeBuffer#[] (unescaped safe buffers can be marked as safe)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1098.json"},{"CVE":"CVE-2012-1099","severity":"moderate","public_date":"2012-03-01T00:00:00Z","advisories":[],"bugzilla":"799276","bugzilla_description":"CVE-2012-1099 rubygem-actionpack: XSS in the 'select' helper","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1099.json"},{"CVE":"CVE-2012-6684","severity":"moderate","public_date":"2012-02-29T00:00:00Z","advisories":[],"bugzilla":"1179870","bugzilla_description":"CVE-2012-6684 rubygem-RedCloth: XSS vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6684.json"},{"CVE":"CVE-2011-4815","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":["RHSA-2012:0070","RHSA-2012:0069"],"bugzilla":"750564","bugzilla_description":"CVE-2011-4815 ruby: hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ruby-0:1.8.5-22.el5_7.1","ruby-0:1.8.1-18.el4","ruby-0:1.8.7.352-4.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4815.json"},{"CVE":"CVE-2011-5036","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":[],"bugzilla":"771149","bugzilla_description":"CVE-2011-5036 rubygem-rack: hash table collisions DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5036.json"},{"CVE":"CVE-2011-4319","severity":"moderate","public_date":"2011-11-18T00:00:00Z","advisories":[],"bugzilla":"755004","bugzilla_description":"CVE-2011-4319 rubygem-actionpack: XSS in the 'translate' helper method","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4319.json"},{"CVE":"CVE-2011-4121","severity":"important","public_date":"2011-11-03T00:00:00Z","advisories":[],"bugzilla":"751800","bugzilla_description":"CVE-2011-4121 ruby (openssl extension): Insecure way of creation exponent value by private RSA key generation","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4121.json"},{"CVE":"CVE-2011-3624","severity":"low","public_date":"2011-10-07T00:00:00Z","advisories":[],"bugzilla":"745636","bugzilla_description":"CVE-2011-3624 Ruby WEBrick::HTTPRequest X-Forwarded-* allows arbitrary data","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3624.json"},{"CVE":"CVE-2011-2686","severity":"low","public_date":"2011-07-02T00:00:00Z","advisories":[],"bugzilla":"722415","bugzilla_description":"CVE-2011-2686 CVE-2011-2705 CVE-2011-3009 ruby: Properly initialize the random number generator when forking new process","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2686.json"},{"CVE":"CVE-2011-2705","severity":"low","public_date":"2011-07-02T00:00:00Z","advisories":["RHSA-2011:1581"],"bugzilla":"722415","bugzilla_description":"CVE-2011-2686 CVE-2011-2705 CVE-2011-3009 ruby: Properly initialize the random number generator when forking new process","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["ruby-0:1.8.7.352-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2705.json"},{"CVE":"CVE-2011-3009","severity":"low","public_date":"2011-07-02T00:00:00Z","advisories":["RHSA-2012:0070","RHSA-2011:1581"],"bugzilla":"722415","bugzilla_description":"CVE-2011-2686 CVE-2011-2705 CVE-2011-3009 ruby: Properly initialize the random number generator when forking new process","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["ruby-0:1.8.5-22.el5_7.1","ruby-0:1.8.7.352-3.el6","ruby-0:1.8.1-18.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3009.json"},{"CVE":"CVE-2011-0188","severity":"moderate","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0909","RHSA-2011:0908","RHSA-2011:0910"],"bugzilla":"682332","bugzilla_description":"CVE-2011-0188 ruby: memory corruption in BigDecimal on 64bit platforms","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ruby-0:1.8.7.299-7.el6_1.1","ruby-0:1.8.1-16.el4","ruby-0:1.8.5-19.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0188.json"},{"CVE":"CVE-2011-1004","severity":"moderate","public_date":"2011-02-18T00:00:00Z","advisories":["RHSA-2011:0909","RHSA-2011:0910"],"bugzilla":"678913","bugzilla_description":"CVE-2011-1004 Ruby: Symlink race condition by removing directory trees in fileutils module","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["ruby-0:1.8.7.299-7.el6_1.1","ruby-0:1.8.5-19.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1004.json"},{"CVE":"CVE-2011-1005","severity":"low","public_date":"2011-02-18T00:00:00Z","advisories":["RHSA-2011:0909","RHSA-2011:0908","RHSA-2011:0910"],"bugzilla":"678920","bugzilla_description":"CVE-2011-1005 Ruby: Untrusted codes able to modify arbitrary strings","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby-0:1.8.7.299-7.el6_1.1","ruby-0:1.8.1-16.el4","ruby-0:1.8.5-19.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1005.json"},{"CVE":"CVE-2010-5312","severity":"moderate","public_date":"2010-09-03T00:00:00Z","advisories":["RHSA-2015:0442","RHSA-2015:1462"],"bugzilla":"1166041","bugzilla_description":"CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:3.0.0-47.el6","ipa-0:4.1.0-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5312.json"},{"CVE":"CVE-2010-0541","severity":"low","public_date":"2010-05-27T00:00:00Z","advisories":["RHSA-2011:0909","RHSA-2011:0908"],"bugzilla":"587731","bugzilla_description":"CVE-2010-0541 Ruby WEBrick javascript injection flaw","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby-0:1.8.1-16.el4","ruby-0:1.8.5-19.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0541.json"},{"CVE":"CVE-2009-4492","severity":"low","public_date":"2010-01-11T00:00:00Z","advisories":["RHSA-2011:0909","RHSA-2011:0908"],"bugzilla":"554485","bugzilla_description":"CVE-2009-4492 ruby WEBrick log escape sequence","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby-0:1.8.1-16.el4","ruby-0:1.8.5-19.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4492.json"},{"CVE":"CVE-2009-4124","severity":"moderate","public_date":"2009-12-07T00:00:00Z","advisories":[],"bugzilla":"959916","bugzilla_description":"CVE-2009-4124 ruby: Heap-based buffer overflow in the rb_str_justify() function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4124.json"},{"CVE":"CVE-2007-0469","severity":"low","public_date":"2009-07-21T00:00:00Z","advisories":[],"bugzilla":"513048","bugzilla_description":"CVE-2007-0469 RubyGems: Specially-crafted Gem archive can overwrite system files","cvss_score":5.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0469.json"},{"CVE":"CVE-2009-1904","severity":"moderate","public_date":"2009-06-10T00:00:00Z","advisories":["RHSA-2009:1140"],"bugzilla":"504958","bugzilla_description":"CVE-2009-1904 ruby: DoS vulnerability in BigDecimal","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ruby-0:1.8.1-7.el4_8.3","ruby-0:1.8.5-5.el5_3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1904.json"},{"CVE":"CVE-2009-5147","severity":"low","public_date":"2009-05-11T00:00:00Z","advisories":["RHSA-2018:0583"],"bugzilla":"1248935","bugzilla_description":"CVE-2009-5147 CVE-2015-7551 ruby: DL::dlopen could open a library with tainted library name","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-267","affected_packages":["rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby22-ruby-0:2.2.9-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5147.json"},{"CVE":"CVE-2015-7551","severity":"low","public_date":"2009-05-11T00:00:00Z","advisories":["RHSA-2018:0583"],"bugzilla":"1248935","bugzilla_description":"CVE-2009-5147 CVE-2015-7551 ruby: DL::dlopen could open a library with tainted library name","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-267","affected_packages":["rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby22-ruby-0:2.2.9-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7551.json"},{"CVE":"CVE-2009-0642","severity":"moderate","public_date":"2009-01-29T00:00:00Z","advisories":["RHSA-2009:1140"],"bugzilla":"486183","bugzilla_description":"CVE-2009-0642 ruby: Incorrect checks for validity of X.509 certificates","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby-0:1.8.1-7.el4_8.3","ruby-0:1.8.5-5.el5_3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0642.json"},{"CVE":"CVE-2008-4310","severity":"moderate","public_date":"2008-12-04T00:00:00Z","advisories":["RHSA-2008:0981"],"bugzilla":"470252","bugzilla_description":"CVE-2008-4310 ruby: Incomplete fix for CVE-2008-3656","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.6","ruby-0:1.8.1-7.el4_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4310.json"},{"CVE":"CVE-2008-3790","severity":"moderate","public_date":"2008-08-23T00:00:00Z","advisories":["RHSA-2008:0897"],"bugzilla":"460134","bugzilla_description":"CVE-2008-3790 ruby: DoS vulnerability in the REXML module","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.5","ruby-0:1.8.1-7.el4_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3790.json"},{"CVE":"CVE-2008-3443","severity":"moderate","public_date":"2008-08-14T00:00:00Z","advisories":["RHSA-2008:0896","RHSA-2008:0895","RHSA-2008:0897"],"bugzilla":"459266","bugzilla_description":"CVE-2008-3443 ruby: Memory allocation failure in Ruby regex engine (remotely exploitable DoS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.5","ruby-0:1.6.4-7.el2","ruby-0:1.8.1-7.el4_7.1","ruby-0:1.6.8-13.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3443.json"},{"CVE":"CVE-2008-3655","severity":"moderate","public_date":"2008-08-08T00:00:00Z","advisories":["RHSA-2008:0896","RHSA-2008:0895","RHSA-2008:0897"],"bugzilla":"458948","bugzilla_description":"CVE-2008-3655 ruby: multiple insufficient safe mode restrictions","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.5","ruby-0:1.6.4-7.el2","ruby-0:1.8.1-7.el4_7.1","ruby-0:1.6.8-13.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3655.json"},{"CVE":"CVE-2008-3656","severity":"moderate","public_date":"2008-08-08T00:00:00Z","advisories":["RHSA-2008:0897"],"bugzilla":"458953","bugzilla_description":"CVE-2008-3656 ruby: WEBrick DoS vulnerability (CPU consumption)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.5","ruby-0:1.8.1-7.el4_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3656.json"},{"CVE":"CVE-2008-3657","severity":"low","public_date":"2008-08-08T00:00:00Z","advisories":["RHSA-2008:0897"],"bugzilla":"458966","bugzilla_description":"CVE-2008-3657 ruby: missing \"taintness\" checks in dl module","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.5","ruby-0:1.8.1-7.el4_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3657.json"},{"CVE":"CVE-2008-3905","severity":"moderate","public_date":"2008-08-08T00:00:00Z","advisories":["RHSA-2008:0896","RHSA-2008:0897"],"bugzilla":"461495","bugzilla_description":"CVE-2008-3905 ruby: use of predictable source port and transaction id in DNS requests done by resolv.rb module","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.5","ruby-0:1.8.1-7.el4_7.1","ruby-0:1.6.8-13.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3905.json"},{"CVE":"CVE-2008-2376","severity":"moderate","public_date":"2008-07-01T00:00:00Z","advisories":["RHSA-2008:0562","RHSA-2008:0561"],"bugzilla":"453589","bugzilla_description":"CVE-2008-2376 ruby: integer overflows in rb_ary_fill() / Array#fill","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["ruby-0:1.8.5-5.el5_2.3","ruby-0:1.6.8-12.el3","ruby-0:1.6.4-6.el2","ruby-0:1.8.1-7.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2376.json"},{"CVE":"CVE-2008-2662","severity":"moderate","public_date":"2008-06-20T00:00:00Z","advisories":["RHSA-2008:0561"],"bugzilla":"450821","bugzilla_description":"CVE-2008-2662 ruby: Integer overflows in rb_str_buf_append()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["ruby-0:1.8.5-5.el5_2.3","ruby-0:1.8.1-7.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2662.json"},{"CVE":"CVE-2008-2663","severity":"moderate","public_date":"2008-06-20T00:00:00Z","advisories":["RHSA-2008:0562","RHSA-2008:0561"],"bugzilla":"450825","bugzilla_description":"CVE-2008-2663 ruby: Integer overflows in rb_ary_store()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["ruby-0:1.8.5-5.el5_2.3","ruby-0:1.6.8-12.el3","ruby-0:1.6.4-6.el2","ruby-0:1.8.1-7.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2663.json"},{"CVE":"CVE-2008-2664","severity":"low","public_date":"2008-06-20T00:00:00Z","advisories":["RHSA-2008:0562","RHSA-2008:0561"],"bugzilla":"450834","bugzilla_description":"CVE-2008-2664 ruby: Unsafe use of alloca in rb_str_format()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.3","ruby-0:1.6.8-12.el3","ruby-0:1.6.4-6.el2","ruby-0:1.8.1-7.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2664.json"},{"CVE":"CVE-2008-2725","severity":"moderate","public_date":"2008-06-20T00:00:00Z","advisories":["RHSA-2008:0562","RHSA-2008:0561"],"bugzilla":"451821","bugzilla_description":"CVE-2008-2725 ruby: integer overflow in rb_ary_splice/update/replace() - REALLOC_N","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["ruby-0:1.8.5-5.el5_2.3","ruby-0:1.6.8-12.el3","ruby-0:1.6.4-6.el2","ruby-0:1.8.1-7.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2725.json"},{"CVE":"CVE-2008-2726","severity":"moderate","public_date":"2008-06-20T00:00:00Z","advisories":["RHSA-2008:0562","RHSA-2008:0561"],"bugzilla":"451828","bugzilla_description":"CVE-2008-2726 ruby: integer overflow in rb_ary_splice/update/replace() - beg + rlen","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["ruby-0:1.8.5-5.el5_2.3","ruby-0:1.6.8-12.el3","ruby-0:1.6.4-6.el2","ruby-0:1.8.1-7.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2726.json"},{"CVE":"CVE-2008-1145","severity":"low","public_date":"2008-03-03T00:00:00Z","advisories":["RHSA-2008:0897"],"bugzilla":"435902","bugzilla_description":"CVE-2008-1145 ruby: webrick directory traversal","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.5","ruby-0:1.8.1-7.el4_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1145.json"},{"CVE":"CVE-2007-5770","severity":"moderate","public_date":"2007-10-08T00:00:00Z","advisories":["RHSA-2007:0961","RHSA-2007:0965"],"bugzilla":"362081","bugzilla_description":"CVE-2007-5770 ruby insufficient verification of SSL certificate in various net::* modules","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.1-7.EL4.8.1","ruby-0:1.8.5-5.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5770.json"},{"CVE":"CVE-2007-5162","severity":"moderate","public_date":"2007-09-27T00:00:00Z","advisories":["RHSA-2007:0961","RHSA-2007:0965"],"bugzilla":"313691","bugzilla_description":"CVE-2007-5162 ruby Net:HTTP insufficient verification of SSL certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.1-7.EL4.8.1","ruby-0:1.8.5-5.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5162.json"},{"CVE":"CVE-2007-1558","severity":"moderate","public_date":"2007-04-02T00:00:00Z","advisories":["RHSA-2009:1140","RHSA-2007:0385","RHSA-2007:0344","RHSA-2007:0353","RHSA-2007:0386","RHSA-2007:0401","RHSA-2007:0402"],"bugzilla":"241191","bugzilla_description":"CVE-2007-1558 fetchmail/mutt/evolution/...: APOP password disclosure vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:1.5.0.12-0.1.el4","evolution-0:2.0.2-35.0.2.el4","fetchmail-0:5.9.0-21.7.3.el2.1.6","mutt-5:1.4.1-5.el3","fetchmail-0:6.2.5-6.0.1.el4","ruby-0:1.8.1-7.el4_8.3","evolution-data-server-0:1.8.0-15.0.3.el5","thunderbird-0:1.5.0.12-1.el5","ruby-0:1.8.5-5.el5_3.7","fetchmail-0:6.3.6-1.0.1.el5","mutt-5:1.4.2.2-3.0.2.el5","mutt-5:1.4.1-12.0.3.el4","evolution-0:1.4.5-20.el3","seamonkey-0:1.0.9-0.1.el3","seamonkey-0:1.0.9-0.1.el2","fetchmail-0:6.2.0-3.el3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1558.json"},{"CVE":"CVE-2006-6303","severity":"low","public_date":"2006-12-04T00:00:00Z","advisories":["RHSA-2008:0562","RHSA-2007:0961"],"bugzilla":"218287","bugzilla_description":"CVE-2006-6303 ruby's cgi.rb vulnerable infinite loop DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["ruby-0:1.8.1-7.EL4.8.1","ruby-0:1.6.8-12.el3","ruby-0:1.6.4-6.el2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-6303.json"},{"CVE":"CVE-2006-5467","severity":"moderate","public_date":"2006-10-25T00:00:00Z","advisories":["RHSA-2006:0729"],"bugzilla":"212396","bugzilla_description":"CVE-2006-5467 Ruby CGI multipart parsing DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.6.4-2.AS21.4","ruby-0:1.6.8-9.EL3.8","ruby-0:1.8.1-7.EL4.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5467.json"},{"CVE":"CVE-2006-3694","severity":"moderate","public_date":"2006-07-11T00:00:00Z","advisories":["RHSA-2006:0604"],"bugzilla":"1618154","bugzilla_description":"CVE-2006-3694 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.1-7.EL4.6","ruby-0:1.6.8-9.EL3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3694.json"},{"CVE":"CVE-2005-2337","severity":"moderate","public_date":"2005-09-23T00:00:00Z","advisories":["RHSA-2005:799"],"bugzilla":"1617706","bugzilla_description":"CVE-2005-2337 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.1-7.EL4.2","ruby-0:1.6.8-9.EL3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2337.json"},{"CVE":"CVE-2006-1931","severity":"moderate","public_date":"2005-06-30T00:00:00Z","advisories":["RHSA-2006:0427"],"bugzilla":"1618072","bugzilla_description":"CVE-2006-1931 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.1-7.EL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1931.json"},{"CVE":"CVE-2005-1992","severity":"moderate","public_date":"2005-06-17T00:00:00Z","advisories":["RHSA-2005:543"],"bugzilla":"1617679","bugzilla_description":"CVE-2005-1992 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.1-7.EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1992.json"},{"CVE":"CVE-2004-0983","severity":null,"public_date":"2004-11-08T00:00:00Z","advisories":["RHSA-2004:635"],"bugzilla":"1617342","bugzilla_description":"CVE-2004-0983 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.6.8-9.EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0983.json"},{"CVE":"CVE-2004-0755","severity":"low","public_date":"2004-07-22T00:00:00Z","advisories":["RHSA-2004:441"],"bugzilla":"1617269","bugzilla_description":"CVE-2004-0755 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.6.8-9.EL3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0755.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-abrt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-abrt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-abrt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-bigdecimal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-bigdecimal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-bigdecimal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-bundler_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-bundler_security_api_results.json
new file mode 100644
index 0000000..7a7d9bd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-bundler_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-3881","severity":"moderate","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1651826","bugzilla_description":"CVE-2019-3881 rubygem-bundler: Insecure permissions on directory in /tmp/ allows for execution of malicious code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3881.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2016-7954","severity":"moderate","public_date":"2016-10-04T00:00:00Z","advisories":[],"bugzilla":"1381951","bugzilla_description":"CVE-2016-7954 rubygem-bundler: Code execution via gem name collision in bundler","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7954.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.9"},{"CVE":"CVE-2013-0334","severity":"moderate","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:2180"],"bugzilla":"1146335","bugzilla_description":"CVE-2013-0334 rubygem-bundler: 'bundle install' may install a gem from a source other than expected","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-345","affected_packages":["rubygem-bundler-0:1.7.8-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0334.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-io-console_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-io-console_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-io-console_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-json_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-json_security_api_results.json
new file mode 100644
index 0000000..ef689c4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-json_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10663","severity":"moderate","public_date":"2020-03-19T00:00:00Z","advisories":["RHSA-2020:2462","RHSA-2020:2473","RHSA-2020:2670"],"bugzilla":"1827500","bugzilla_description":"CVE-2020-10663 rubygem-json: Unsafe Object Creation Vulnerability in JSON","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-94","affected_packages":["pcs-0:0.10.1-4.el8_0.5","pcs-0:0.10.2-4.el8_1.1","pcs-0:0.10.4-6.el8_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2013-0269","severity":"moderate","public_date":"2013-02-11T00:00:00Z","advisories":["RHSA-2013:1185","RHSA-2013:0701","RHSA-2013:0686","RHSA-2013:1028","RHSA-2013:1147"],"bugzilla":"909029","bugzilla_description":"CVE-2013-0269 rubygem-json: Denial of Service and SQL Injection","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["rubygem-json-0:1.7.3-2.el6_3","ruby193-ruby-0:1.9.3.327-28.el6","rubygem-json-0:1.7.3-2.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0269.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-net-http-persistent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-net-http-persistent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-net-http-persistent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-psych_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-psych_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-psych_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-rdoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-rdoc_security_api_results.json
new file mode 100644
index 0000000..a85a07b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-rdoc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-0256","severity":"moderate","public_date":"2013-02-06T00:00:00Z","advisories":["RHSA-2013:0728","RHSA-2013:0548","RHSA-2013:0701","RHSA-2013:0686"],"bugzilla":"907820","bugzilla_description":"CVE-2013-0256 rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rubygem-rdoc-0:3.8-9.el6op","ruby193-ruby-0:1.9.3.327-28.el6","rubygem-rdoc-0:3.8-6.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0256.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-thor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-thor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygem-thor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygems_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygems_security_api_results.json
new file mode 100644
index 0000000..2644aea
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rubygems_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-8320","severity":"moderate","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHBA-2019:3384","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692512","bugzilla_description":"CVE-2019-8320 rubygems: Delete directory using symlink when decompressing tar","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-8321","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692514","bugzilla_description":"CVE-2019-8321 rubygems: Escape sequence injection vulnerability in verbose","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8321.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8322","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692516","bugzilla_description":"CVE-2019-8322 rubygems: Escape sequence injection vulnerability in gem owner","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8322.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8323","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692519","bugzilla_description":"CVE-2019-8323 rubygems: Escape sequence injection vulnerability in API response handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8324","severity":"important","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHSA-2019:1972","RHSA-2020:2769","RHSA-2019:1151","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692520","bugzilla_description":"CVE-2019-8324 rubygems: Installing a malicious gem may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby:2.5-8000020190524123348.55190bc5","ruby-0:2.0.0.648-35.el7_6","ruby-0:2.4.6-91.el7cf","rh-ruby23-ruby-0:2.3.8-70.el6","rh-ruby23-ruby-0:2.3.8-70.el7","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-8325","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692522","bugzilla_description":"CVE-2019-8325 rubygems: Escape sequence injection vulnerability in errors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8325.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000073","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547418","bugzilla_description":"CVE-2018-1000073 rubygems: Path traversal when writing to a symlinked basedir outside of the root","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000073.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000074","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547419","bugzilla_description":"CVE-2018-1000074 rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000074.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-1000075","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547420","bugzilla_description":"CVE-2018-1000075 rubygems: Infinite loop vulnerability due to negative size in tar header causes Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000075.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000076","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547421","bugzilla_description":"CVE-2018-1000076 rubygems: Improper verification of signatures in tarball allows to install mis-signed gem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000076.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000077","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547422","bugzilla_description":"CVE-2018-1000077 rubygems: Missing URL validation on spec home attribute allows malicious gem to set an invalid homepage URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000077.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000078","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547425","bugzilla_description":"CVE-2018-1000078 rubygems: XSS vulnerability in homepage attribute when displayed via gem server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-1000079","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547426","bugzilla_description":"CVE-2018-1000079 rubygems: Path traversal issue during gem installation allows to write to arbitrary filesystem locations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000079.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-0903","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1500488","bugzilla_description":"CVE-2017-0903 rubygems: Unsafe object deserialization through YAML formatted gem specifications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0903.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-0901","severity":"moderate","public_date":"2017-09-01T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487587","bugzilla_description":"CVE-2017-0901 rubygems: Arbitrary file overwrite due to incorrect validation of specification name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0901.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-0900","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487588","bugzilla_description":"CVE-2017-0900 rubygems: No size limit in summary length of gem spec","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-0902","severity":"moderate","public_date":"2017-08-31T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487589","bugzilla_description":"CVE-2017-0902 rubygems: DNS hijacking vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0902.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-0899","severity":"low","public_date":"2017-08-31T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487590","bugzilla_description":"CVE-2017-0899 rubygems: Escape sequence in the \"summary\" field of gemspec","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0899.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-4020","severity":"important","public_date":"2015-05-18T00:00:00Z","advisories":[],"bugzilla":"1250109","bugzilla_description":"CVE-2015-4020 rubygems: incomplete fix for CVE-2015-3900","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-20->CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4020.json"},{"CVE":"CVE-2015-3900","severity":"important","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2015:1657"],"bugzilla":"1236116","bugzilla_description":"CVE-2015-3900 rubygems: DNS hijacking vulnerability in api_endpoint()","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-20->CWE-345","affected_packages":["rh-ruby22-ruby-0:2.2.2-12.el6","rh-ruby22-ruby-0:2.2.2-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3900.json"},{"CVE":"CVE-2013-4363","severity":"moderate","public_date":"2013-09-15T00:00:00Z","advisories":[],"bugzilla":"1009720","bugzilla_description":"CVE-2013-4363 rubygems: version regex algorithmic complexity vulnerability, incomplete CVE-2013-4287 fix","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4363.json"},{"CVE":"CVE-2013-4287","severity":"moderate","public_date":"2013-09-09T00:00:00Z","advisories":["RHSA-2013:1427","RHSA-2013:1852","RHSA-2014:0207","RHSA-2013:1523","RHSA-2013:1441"],"bugzilla":"1002364","bugzilla_description":"CVE-2013-4287 rubygems: version regex algorithmic complexity vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407->CWE-400","affected_packages":["rubygems-0:1.3.7-4.el6_4","ruby193-rubygems-0:1.8.24-9.el6ost","rubygems-0:1.8.24-5.el6op","rubygems-0:1.8.23.2-1.el6","ruby193-ruby-0:1.9.3.448-40.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4287.json"},{"CVE":"CVE-2012-2125","severity":"moderate","public_date":"2012-04-19T00:00:00Z","advisories":["RHSA-2013:1852","RHSA-2013:1203","RHSA-2013:1441"],"bugzilla":"814718","bugzilla_description":"CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rubygems-0:1.3.7-4.el6_4","rubygems-0:1.8.24-4.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2125.json"},{"CVE":"CVE-2012-2126","severity":"moderate","public_date":"2012-04-19T00:00:00Z","advisories":["RHSA-2013:1852","RHSA-2013:1203","RHSA-2013:1441"],"bugzilla":"814718","bugzilla_description":"CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rubygems-0:1.3.7-4.el6_4","rubygems-0:1.8.24-4.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2126.json"},{"CVE":"CVE-2007-0469","severity":"low","public_date":"2009-07-21T00:00:00Z","advisories":[],"bugzilla":"513048","bugzilla_description":"CVE-2007-0469 RubyGems: Specially-crafted Gem archive can overwrite system files","cvss_score":5.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0469.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rusers-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rusers-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rusers-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rusers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rusers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rusers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rwho_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rwho_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/rwho_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-cmsfs-fuse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-cmsfs-fuse_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-cmsfs-fuse_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-cmsfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-cmsfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-cmsfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-cpuplugd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-cpuplugd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-cpuplugd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-hmcdrvfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-hmcdrvfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-hmcdrvfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-iucvterm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-iucvterm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-iucvterm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-mon_statd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-mon_statd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-mon_statd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-osasnmpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-osasnmpd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-osasnmpd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-zdsfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-zdsfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-zdsfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-ziomon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-ziomon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils-ziomon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/s390utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/saab-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/saab-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/saab-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sac_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sac_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sac_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-client-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-client-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-client-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-common-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-common-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-common-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-common-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-common-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-common-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-krb5-printing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-krb5-printing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-krb5-printing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-winbind-clients_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-winbind-clients_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-winbind-clients_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-winbind-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-winbind-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-winbind-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-winbind_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-winbind_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba-winbind_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba_security_api_results.json
new file mode 100644
index 0000000..4150e78
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samba_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-1472","severity":"critical","public_date":"2020-09-11T00:00:00Z","advisories":[],"bugzilla":"1879822","bugzilla_description":"CVE-2020-1472 Samba: Netlogon Elevation of Privilege Vulnerability (Zerologon)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1472.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-10730","severity":"moderate","public_date":"2020-07-02T00:00:00Z","advisories":["RHSA-2020:3119","RHSA-2020:3118"],"bugzilla":"1849489","bugzilla_description":"CVE-2020-10730 samba: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and paged_results","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["samba-0:4.11.6-107.el8rhgs","samba-0:4.11.6-107.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10730.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-10745","severity":"important","public_date":"2020-07-02T00:00:00Z","advisories":[],"bugzilla":"1849491","bugzilla_description":"CVE-2020-10745 samba: Parsing and packing of NBT and DNS packets can consume excessive CPU","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10745.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10760","severity":"moderate","public_date":"2020-07-02T00:00:00Z","advisories":[],"bugzilla":"1849509","bugzilla_description":"CVE-2020-10760 samba: LDAP Use-after-free in Samba AD DC Global Catalog with paged_results and VLV","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10760.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14303","severity":"important","public_date":"2020-07-02T00:00:00Z","advisories":[],"bugzilla":"1851298","bugzilla_description":"CVE-2020-14303 samba: Empty UDP packet DoS in Samba AD DC nbtd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14303.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10700","severity":"moderate","public_date":"2020-04-28T00:00:00Z","advisories":[],"bugzilla":"1825731","bugzilla_description":"CVE-2020-10700 samba: Use-after-free in Samba AD DC LDAP Server with ASQ","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10700.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-10704","severity":"important","public_date":"2020-04-28T00:00:00Z","advisories":[],"bugzilla":"1825734","bugzilla_description":"CVE-2020-10704 samba: LDAP Denial of Service (stack overflow) in Samba AD DC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10704.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14902","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1791201","bugzilla_description":"CVE-2019-14902 samba: Replication of ACLs set to inherit down a subtree on AD Directory not automatic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14902.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-19344","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1791204","bugzilla_description":"CVE-2019-19344 samba: Use after free during DNS zone scavenging in Samba AD DC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19344.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-14907","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:3981","RHSA-2020:0943","RHSA-2020:1878"],"bugzilla":"1791207","bugzilla_description":"CVE-2019-14907 samba: Crash after failed character conversion at log level 3 or above","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["samba-0:4.11.6-104.el7rhgs","samba-0:4.11.2-13.el8","samba-0:4.10.16-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14907.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-14861","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1778586","bugzilla_description":"CVE-2019-14861 samba: An authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14861.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-14870","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1778589","bugzilla_description":"CVE-2019-14870 samba: The DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14870.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-10218","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:0943","RHSA-2020:1084","RHSA-2020:1878"],"bugzilla":"1763137","bugzilla_description":"CVE-2019-10218 samba: smb client vulnerable to filenames containing path separators","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.11.6-104.el7rhgs","samba-0:4.10.4-10.el7","samba-0:4.11.2-13.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10218.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-14833","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":[],"bugzilla":"1764126","bugzilla_description":"CVE-2019-14833 samba: AD DC check password script does not receive full password when non-ASCII characters are used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14833.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-14847","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":[],"bugzilla":"1764142","bugzilla_description":"CVE-2019-14847 samba: samba AD DC LDAP denial of service via dirsync","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-10197","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2020:1084","RHSA-2020:1878","RHSA-2019:4023","RHSA-2019:3253"],"bugzilla":"1746225","bugzilla_description":"CVE-2019-10197 samba: Combination of parameters and permissions can allow user to escape from the share path definition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.9.8-110.el6rhs","samba-0:4.10.4-10.el7","samba-0:4.11.2-13.el8","samba-0:4.9.8-109.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-12435","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1711816","bugzilla_description":"CVE-2019-12435 samba: AD DC Denial of Service in DNS management server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-12436","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1711837","bugzilla_description":"CVE-2019-12436 samba: NULL pointer dereference in Samba LDAP server leading to crash and Dos","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-16860","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":[],"bugzilla":"1705877","bugzilla_description":"CVE-2018-16860 samba: S4U2Self with unkeyed checksum","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3870","severity":"moderate","public_date":"2019-04-09T00:00:00Z","advisories":[],"bugzilla":"1689010","bugzilla_description":"CVE-2019-3870 samba: World writable files in Samba AD DC private/ dir","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-3880","severity":"moderate","public_date":"2019-04-09T00:00:00Z","advisories":["RHSA-2019:2099","RHSA-2019:1967","RHSA-2019:1966","RHSA-2019:3582"],"bugzilla":"1691518","bugzilla_description":"CVE-2019-3880 samba: save registry file outside share as unprivileged user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.9.8-105.el7rhgs","samba-0:4.9.1-6.el7","samba-0:4.10.4-1.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3880.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2019-3824","severity":"moderate","public_date":"2019-02-25T00:00:00Z","advisories":[],"bugzilla":"1671845","bugzilla_description":"CVE-2019-3824 samba: Out of bound read in ldb_wildcard_compare in Samba AD DC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3824.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-16841","severity":"moderate","public_date":"2018-11-28T00:00:00Z","advisories":[],"bugzilla":"1642545","bugzilla_description":"CVE-2018-16841 samba: Double-free in Samba AD DC KDC with PKINIT","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16841.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2018-16853","severity":"important","public_date":"2018-11-28T00:00:00Z","advisories":[],"bugzilla":"1647246","bugzilla_description":"CVE-2018-16853 samba: S4U2Self crash with MIT KDC build","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16853.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14629","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1625449","bugzilla_description":"CVE-2018-14629 samba: Unprivileged adding of CNAME record causing loop in AD LDAP server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-16851","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1646377","bugzilla_description":"CVE-2018-16851 samba: NULL pointer de-reference in Samba AD DC LDAP server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16851.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-16852","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1646386","bugzilla_description":"CVE-2018-16852 samba: NULL pointer de-reference in Samba AD DC DNS management server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16852.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-16857","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1649278","bugzilla_description":"CVE-2018-16857 samba: Bad password count in AD DC not always effective","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16857.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-1139","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2018:2612","RHSA-2018:2613","RHSA-2018:3056"],"bugzilla":"1589651","bugzilla_description":"CVE-2018-1139 samba: Weak authentication protocol regression","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["samba-0:4.8.3-4.el7","samba-0:4.7.5-110.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1139.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-10918","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":[],"bugzilla":"1610640","bugzilla_description":"CVE-2018-10918 samba: DsCrackNames on a user without an SPN can trigger NULL-pointer de-reference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10918.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2018-10919","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":[],"bugzilla":"1610645","bugzilla_description":"CVE-2018-10919 samba: Confidential attribute disclosure via substring search","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10919.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-10858","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2018:3470","RHSA-2018:2612","RHSA-2018:2613","RHSA-2018:3056"],"bugzilla":"1612805","bugzilla_description":"CVE-2018-10858 samba: Insufficient input validation in libsmbclient","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["samba-0:4.8.3-4.el7","samba-0:4.7.5-110.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1050","severity":"low","public_date":"2018-03-13T00:00:00Z","advisories":["RHSA-2018:2612","RHSA-2018:2613","RHSA-2018:1860","RHSA-2018:1883","RHSA-2018:3056"],"bugzilla":"1538771","bugzilla_description":"CVE-2018-1050 samba: NULL pointer dereference in printer server process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["samba4-0:4.2.10-15.el6","samba-0:4.8.3-4.el7","samba-0:4.7.5-110.el7rhgs","samba-0:3.6.23-51.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1050.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1057","severity":"important","public_date":"2018-03-13T00:00:00Z","advisories":[],"bugzilla":"1553553","bugzilla_description":"CVE-2018-1057 samba: Authenticated users can change other users password in an AD DC configuration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1057.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2017-14746","severity":"important","public_date":"2017-11-21T00:00:00Z","advisories":["RHSA-2017:3261","RHSA-2017:3260","RHSA-2017:3278"],"bugzilla":"1511899","bugzilla_description":"CVE-2017-14746 samba: Use-after-free in processing SMB1 requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:4.6.3-9.el6rhs","samba-0:4.6.3-9.el7rhgs","samba-0:4.6.2-12.el7_4","samba4-0:4.2.10-12.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14746.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-15275","severity":"moderate","public_date":"2017-11-21T00:00:00Z","advisories":["RHSA-2017:3261","RHSA-2017:3260","RHSA-2017:3278"],"bugzilla":"1512465","bugzilla_description":"CVE-2017-15275 samba: Server heap-memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:4.6.3-9.el6rhs","samba-0:4.6.3-9.el7rhgs","samba-0:4.6.2-12.el7_4","samba4-0:4.2.10-12.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15275.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-15086","severity":"moderate","public_date":"2017-10-24T00:00:00Z","advisories":["RHSA-2017:3110"],"bugzilla":"1505785","bugzilla_description":"CVE-2017-15086 samba: SMB2 connections don't keep encryption across DFS redirects (incomplete fix of CVE-2017-12151)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["samba-0:4.6.3-8.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-15085","severity":"moderate","public_date":"2017-10-24T00:00:00Z","advisories":["RHSA-2017:3110"],"bugzilla":"1505787","bugzilla_description":"CVE-2017-15085 samba: Some code path don't enforce smb signing, when they should (incomplete fix of CVE-2017-12150)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["samba-0:4.6.3-8.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15085.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-15087","severity":"moderate","public_date":"2017-10-24T00:00:00Z","advisories":["RHSA-2017:3110"],"bugzilla":"1505788","bugzilla_description":"CVE-2017-15087 samba: Server memory information leak over SMB1 (incomplete fix for CVE-2017-12163)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["samba-0:4.6.3-8.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15087.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2017-12151","severity":"moderate","public_date":"2017-09-20T00:00:00Z","advisories":["RHSA-2017:2858","RHSA-2017:2790"],"bugzilla":"1488197","bugzilla_description":"CVE-2017-12151 samba: SMB2 connections don't keep encryption across DFS redirects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["samba-0:4.6.2-11.el7_4","samba-0:4.6.3-6.el7rhgs","samba-0:4.6.3-6.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12151.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-12150","severity":"moderate","public_date":"2017-09-20T00:00:00Z","advisories":["RHSA-2017:2789","RHSA-2017:2858","RHSA-2017:2790","RHSA-2017:2791"],"bugzilla":"1488400","bugzilla_description":"CVE-2017-12150 samba: Some code path don't enforce smb signing, when they should","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["samba4-0:4.2.10-11.el6_9","samba-0:4.6.2-11.el7_4","samba-0:4.6.3-6.el7rhgs","samba-0:3.6.23-45.el6_9","samba-0:4.6.3-6.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12150.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-12163","severity":"moderate","public_date":"2017-09-20T00:00:00Z","advisories":["RHSA-2017:2789","RHSA-2017:2858","RHSA-2017:2790","RHSA-2017:2791"],"bugzilla":"1491206","bugzilla_description":"CVE-2017-12163 Samba: Server memory information leak over SMB1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["samba4-0:4.2.10-11.el6_9","samba-0:4.6.2-11.el7_4","samba-0:4.6.3-6.el7rhgs","samba-0:3.6.23-45.el6_9","samba-0:4.6.3-6.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12163.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2017-11103","severity":"important","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469976","bugzilla_description":"CVE-2017-11103 krb5: Metadata taken from the unauthenticated plaintext","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11103.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-7494","severity":"important","public_date":"2017-05-24T00:00:00Z","advisories":["RHSA-2017:1390","RHSA-2017:1271","RHSA-2017:1270","RHSA-2017:1273","RHSA-2017:1272"],"bugzilla":"1450347","bugzilla_description":"CVE-2017-7494 samba: Loading shared modules from any path in the system leading to RCE (SambaCry)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:4.4.6-5.el6rhs","samba3x-0:3.6.23-14.el5_11","samba-0:3.6.23-43.el6_9","samba-0:3.6.23-32.el6_2","samba4-0:4.2.10-10.el6_9","samba-0:3.6.23-32.el6_4","samba-0:4.4.4-14.el7_3","samba-0:3.6.23-32.el6_5","samba-0:4.2.10-11.el7_2","samba-0:3.6.23-32.el6_6","samba-0:3.6.23-32.el6_7","samba-0:4.4.6-5.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7494.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-2619","severity":"moderate","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2017:2789","RHSA-2017:2338","RHSA-2017:2778","RHSA-2017:1265"],"bugzilla":"1429472","bugzilla_description":"CVE-2017-2619 samba: symlink race permits opening files outside share directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["samba-0:4.4.4-13.el7_3","samba-0:3.6.23-45.el6_9","samba-0:4.6.3-5.el6rhs","samba-0:4.6.3-4.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2619.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2017-9461","severity":"low","public_date":"2017-02-16T00:00:00Z","advisories":["RHSA-2017:2338","RHSA-2017:2778","RHSA-2017:1950"],"bugzilla":"1459464","bugzilla_description":"CVE-2017-9461 samba: fd_open_atomic infinite loop due to wrong handling of dangling symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["samba-0:4.6.2-8.el7","samba-0:4.6.3-5.el6rhs","samba-0:4.6.3-4.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9461.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-2123","severity":"critical","public_date":"2016-12-19T00:00:00Z","advisories":[],"bugzilla":"1392702","bugzilla_description":"CVE-2016-2123 samba: NDR Parsing ndr_pull_dnsp_name Heap-based Buffer Overflow Remote Code Execution Vulnerability (ZDI-CAN-3995)","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2123.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-2125","severity":"moderate","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:0744","RHSA-2017:0494","RHSA-2017:1265","RHSA-2017:0495","RHSA-2017:0662"],"bugzilla":"1403114","bugzilla_description":"CVE-2016-2125 samba: Unconditional privilege delegation to Kerberos servers in trusted realms","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["samba-0:3.6.23-41.el6","samba-0:4.4.6-4.el6rhs","samba-0:4.4.6-4.el7rhgs","samba-0:4.4.4-13.el7_3","samba4-0:4.2.10-9.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2125.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2016-2126","severity":"moderate","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:0744","RHSA-2017:0494","RHSA-2017:1265","RHSA-2017:0495","RHSA-2017:0662"],"bugzilla":"1403115","bugzilla_description":"CVE-2016-2126 samba: Flaws in Kerberos PAC validation can trigger privilege elevation","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["samba-0:3.6.23-41.el6","samba-0:4.4.6-4.el6rhs","samba-0:4.4.6-4.el7rhgs","samba-0:4.4.4-13.el7_3","samba4-0:4.2.10-9.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2126.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2016-2119","severity":"moderate","public_date":"2016-07-07T00:00:00Z","advisories":["RHSA-2016:1486","RHSA-2016:1487","RHSA-2016:1494"],"bugzilla":"1351955","bugzilla_description":"CVE-2016-2119 samba: Client side SMB2/3 required signing can be downgraded","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["samba-0:4.2.10-7.el7_2","samba-0:4.4.3-8.el6rhs","samba-0:4.4.3-8.el7rhgs","samba4-0:4.2.10-7.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2119.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-5370","severity":"critical","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0619","RHSA-2016:0612","RHSA-2016:0613","RHSA-2016:0624","RHSA-2016:0614","RHSA-2016:0620","RHSA-2016:0611"],"bugzilla":"1309987","bugzilla_description":"CVE-2015-5370 samba: crash in dcesrv_auth_bind_ack due to missing error check","cvss_score":8.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["samba4-0:4.2.10-6.el6_2","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba3x-0:3.6.23-12.el5_9","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:3.6.23-30.el6_6","samba3x-0:3.6.23-12.el5_11","samba-0:3.6.23-30.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:3.6.23-30.el6_2","samba-0:4.2.10-6.el7_2","samba-0:3.6.23-30.el6_4","samba-0:3.6.23-30.el6_5","samba-0:4.2.11-2.el7rhgs","samba-0:4.2.10-5.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5370.json"},{"CVE":"CVE-2016-2110","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0619","RHSA-2016:0623","RHSA-2016:0612","RHSA-2016:0613","RHSA-2016:0624","RHSA-2016:0625","RHSA-2016:0614","RHSA-2016:0620","RHSA-2016:0621","RHSA-2016:0611"],"bugzilla":"1311893","bugzilla_description":"CVE-2016-2110 samba: Man-in-the-middle attacks possible with NTLMSSP authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-300","affected_packages":["samba4-0:4.2.10-6.el6_2","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba3x-0:3.6.23-12.el5_9","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:3.6.23-30.el6_6","samba3x-0:3.6.23-12.el5_11","samba-0:3.6.23-30.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:3.6.23-30.el6_2","samba-0:4.2.10-6.el7_2","samba-0:3.6.23-30.el6_4","samba-0:3.6.23-30.el6_5","samba-0:3.0.33-3.41.el5_11","samba-0:4.2.11-2.el7rhgs","samba-0:3.0.33-3.40.el5_9","samba-0:4.2.10-5.ael7b_1","samba-0:3.0.33-3.37.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2110.json"},{"CVE":"CVE-2016-2111","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0619","RHSA-2016:0623","RHSA-2016:0612","RHSA-2016:0613","RHSA-2016:0624","RHSA-2016:0625","RHSA-2016:0614","RHSA-2016:0620","RHSA-2016:0621","RHSA-2016:0611"],"bugzilla":"1311902","bugzilla_description":"CVE-2016-2111 samba: Spoofing vulnerability when domain controller is configured","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-290","affected_packages":["samba4-0:4.2.10-6.el6_2","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba3x-0:3.6.23-12.el5_9","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:3.6.23-30.el6_6","samba3x-0:3.6.23-12.el5_11","samba-0:3.6.23-30.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:3.6.23-30.el6_2","samba-0:4.2.10-6.el7_2","samba-0:3.6.23-30.el6_4","samba-0:3.6.23-30.el6_5","samba-0:3.0.33-3.41.el5_11","samba-0:4.2.11-2.el7rhgs","samba-0:3.0.33-3.40.el5_9","samba-0:4.2.10-5.ael7b_1","samba-0:3.0.33-3.37.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2111.json"},{"CVE":"CVE-2016-2112","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0619","RHSA-2016:0612","RHSA-2016:0613","RHSA-2016:0624","RHSA-2016:0614","RHSA-2016:0620","RHSA-2016:0611"],"bugzilla":"1311903","bugzilla_description":"CVE-2016-2112 samba: Missing downgrade detection","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-300","affected_packages":["samba4-0:4.2.10-6.el6_2","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba3x-0:3.6.23-12.el5_9","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:3.6.23-30.el6_6","samba3x-0:3.6.23-12.el5_11","samba-0:3.6.23-30.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:3.6.23-30.el6_2","samba-0:4.2.10-6.el7_2","samba-0:3.6.23-30.el6_4","samba-0:3.6.23-30.el6_5","samba-0:4.2.11-2.el7rhgs","samba-0:4.2.10-5.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2112.json"},{"CVE":"CVE-2016-2113","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0612","RHSA-2016:0614","RHSA-2016:0620"],"bugzilla":"1311910","bugzilla_description":"CVE-2016-2113 samba: Server certificates not validated at client side","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-295","affected_packages":["samba4-0:4.2.10-6.el6_2","samba-0:4.2.11-2.el7rhgs","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:4.2.10-6.el7_2","samba-0:4.2.10-5.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2113.json"},{"CVE":"CVE-2016-2114","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0612","RHSA-2016:0614","RHSA-2016:0620"],"bugzilla":"1312082","bugzilla_description":"CVE-2016-2114 samba: Samba based active directory domain controller does not enforce smb signing","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-300","affected_packages":["samba4-0:4.2.10-6.el6_2","samba-0:4.2.11-2.el7rhgs","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:4.2.10-6.el7_2","samba-0:4.2.10-5.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2114.json"},{"CVE":"CVE-2016-2115","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0619","RHSA-2016:0612","RHSA-2016:0613","RHSA-2016:0624","RHSA-2016:0614","RHSA-2016:0620","RHSA-2016:0611"],"bugzilla":"1312084","bugzilla_description":"CVE-2016-2115 samba: Smb signing not required by default when smb client connection is used for ipc usage","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-300","affected_packages":["samba4-0:4.2.10-6.el6_2","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba3x-0:3.6.23-12.el5_9","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:3.6.23-30.el6_6","samba3x-0:3.6.23-12.el5_11","samba-0:3.6.23-30.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:3.6.23-30.el6_2","samba-0:4.2.10-6.el7_2","samba-0:3.6.23-30.el6_4","samba-0:3.6.23-30.el6_5","samba-0:4.2.11-2.el7rhgs","samba-0:4.2.10-5.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2115.json"},{"CVE":"CVE-2016-2118","severity":"important","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0619","RHSA-2016:0623","RHSA-2016:0612","RHSA-2016:0613","RHSA-2016:0624","RHSA-2016:0625","RHSA-2016:0614","RHSA-2016:0620","RHSA-2016:0621","RHSA-2016:0611"],"bugzilla":"1317990","bugzilla_description":"CVE-2016-2118 samba: SAMR and LSA man in the middle attacks","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-300","affected_packages":["samba4-0:4.2.10-6.el6_2","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba3x-0:3.6.23-12.el5_9","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:3.6.23-30.el6_6","samba3x-0:3.6.23-12.el5_11","samba-0:3.6.23-30.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:3.6.23-30.el6_2","samba-0:4.2.10-6.el7_2","samba-0:3.6.23-30.el6_4","samba-0:3.6.23-30.el6_5","samba-0:3.0.33-3.41.el5_11","samba-0:4.2.11-2.el7rhgs","samba-0:3.0.33-3.40.el5_9","samba-0:4.2.10-5.ael7b_1","samba-0:3.0.33-3.37.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2118.json"},{"CVE":"CVE-2016-0771","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1309978","bugzilla_description":"CVE-2016-0771 samba: Out-of-bounds read in internal DNS server","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0771.json"},{"CVE":"CVE-2015-7560","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0447","RHSA-2016:0448","RHSA-2016:0449"],"bugzilla":"1309992","bugzilla_description":"CVE-2015-7560 samba: Incorrect ACL get/set allowed on symlink path","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-284","affected_packages":["samba-0:3.6.23-25.el6_7","samba-0:4.2.3-12.el7_2","samba-0:4.2.4-15.el6rhs","samba-0:4.2.4-15.el7rhgs","samba4-0:4.0.0-68.el6_7.rc4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7560.json"},{"CVE":"CVE-2015-5299","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0010","RHSA-2016:0011","RHSA-2016:0015","RHSA-2016:0016","RHSA-2016:0006"],"bugzilla":"1276126","bugzilla_description":"CVE-2015-5299 Samba: Missing access control check in shadow copy code","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-862","affected_packages":["samba-0:4.1.17-16.el6rhs","samba-0:4.2.4-9.1.el7rhgs","samba4-0:4.0.0-67.el6_7.rc4","samba-0:3.6.23-24.el6_7","samba-0:4.2.3-11.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5299.json"},{"CVE":"CVE-2015-5330","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0010","RHSA-2016:0009","RHSA-2016:0014","RHSA-2016:0015","RHSA-2016:0016","RHSA-2016:0006"],"bugzilla":"1281326","bugzilla_description":"CVE-2015-5330 samba, libldb: remote memory read in the Samba LDAP server","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-135","affected_packages":["samba-0:4.1.17-16.el6rhs","libldb-0:1.1.20-3.el7rhgs","libldb-0:1.1.20-1.el7_2.2","libldb-0:1.1.13-3.el6_7.1","samba-0:4.2.4-9.1.el7rhgs","libldb-0:1.1.20-3.el6rhs","samba4-0:4.0.0-67.el6_7.rc4","samba-0:4.2.3-11.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5330.json"},{"CVE":"CVE-2015-7540","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0010","RHSA-2016:0015","RHBA-2015:2258"],"bugzilla":"1288451","bugzilla_description":"CVE-2015-7540 samba: DoS to AD-DC due to insufficient checking of asn1 memory allocation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["samba-0:4.1.17-16.el6rhs","samba-0:4.2.3-10.el7","samba4-0:4.0.0-67.el6_7.rc4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7540.json"},{"CVE":"CVE-2015-5252","severity":"low","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0010","RHSA-2016:0011","RHSA-2016:0015","RHSA-2016:0016","RHSA-2016:0006"],"bugzilla":"1290288","bugzilla_description":"CVE-2015-5252 samba: Insufficient symlink verification in smbd","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-41","affected_packages":["samba-0:4.1.17-16.el6rhs","samba-0:4.2.4-9.1.el7rhgs","samba4-0:4.0.0-67.el6_7.rc4","samba-0:3.6.23-24.el6_7","samba-0:4.2.3-11.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5252.json"},{"CVE":"CVE-2015-5296","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0010","RHSA-2016:0011","RHSA-2016:0015","RHSA-2016:0016","RHSA-2016:0006"],"bugzilla":"1290292","bugzilla_description":"CVE-2015-5296 samba: client requesting encryption vulnerable to downgrade attack","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-345","affected_packages":["samba-0:4.1.17-16.el6rhs","samba-0:4.2.4-9.1.el7rhgs","samba4-0:4.0.0-67.el6_7.rc4","samba-0:3.6.23-24.el6_7","samba-0:4.2.3-11.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5296.json"},{"CVE":"CVE-2015-8467","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1290294","bugzilla_description":"CVE-2015-8467 samba: Denial of service attack against Windows Active Directory server.","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8467.json"},{"CVE":"CVE-2015-0240","severity":"critical","public_date":"2015-02-23T00:00:00Z","advisories":["RHSA-2015:0249","RHSA-2015:0257","RHSA-2015:0256","RHSA-2015:0255","RHSA-2015:0254","RHSA-2015:0253","RHSA-2015:0252","RHSA-2015:0251","RHSA-2015:0250"],"bugzilla":"1191325","bugzilla_description":"CVE-2015-0240 samba: talloc free on uninitialized stack pointer in netlogon server could lead to remote-code execution","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["samba-0:3.6.9-171.el6_5","samba-0:3.6.9-151.el6_4.3","samba3x-0:3.6.23-9.el5_11","samba3x-0:3.6.6-0.131.el5_9","samba4-0:4.0.0-65.el6_5.rc4","samba4-0:4.0.0-66.el6_6.rc4","samba-0:3.5.10-119.el6_2","samba-0:3.6.509-169.6.el6rhs","samba-0:3.6.23-14.el6_6","samba4-0:4.0.0-57.el6_4.rc4","samba-0:3.6.9-167.10.3.el6rhs","samba-0:4.1.1-38.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0240.json"},{"CVE":"CVE-2014-8143","severity":"moderate","public_date":"2015-01-15T00:00:00Z","advisories":[],"bugzilla":"1181638","bugzilla_description":"CVE-2014-8143 samba: Privileges elevation to Active Directory Domain Controller","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8143.json"},{"CVE":"CVE-2014-3560","severity":"important","public_date":"2014-07-31T00:00:00Z","advisories":["RHSA-2014:1009","RHSA-2014:1008"],"bugzilla":"1126010","bugzilla_description":"CVE-2014-3560 samba: remote code execution in nmbd","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["samba4-0:4.0.0-63.el6_5.rc4","samba-0:4.1.1-37.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3560.json"},{"CVE":"CVE-2014-3493","severity":"low","public_date":"2014-06-23T00:00:00Z","advisories":["RHSA-2014:1009","RHSA-2014:0866","RHSA-2014:0867"],"bugzilla":"1108748","bugzilla_description":"CVE-2014-3493 samba: smbd unicode path names denial of service","cvss_score":2.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-172->CWE-393","affected_packages":["samba4-0:4.0.0-63.el6_5.rc4","samba-0:3.6.9-169.el6_5","samba-0:4.1.1-35.el7_0","samba3x-0:3.6.6-0.140.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3493.json"},{"CVE":"CVE-2014-0244","severity":"moderate","public_date":"2014-06-12T00:00:00Z","advisories":["RHSA-2014:1009","RHSA-2014:0866","RHSA-2014:0867"],"bugzilla":"1097815","bugzilla_description":"CVE-2014-0244 samba: nmbd denial of service","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["samba4-0:4.0.0-63.el6_5.rc4","samba-0:3.6.9-169.el6_5","samba-0:4.1.1-35.el7_0","samba3x-0:3.6.6-0.140.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0244.json"},{"CVE":"CVE-2014-0239","severity":"low","public_date":"2014-05-28T00:00:00Z","advisories":[],"bugzilla":"1101988","bugzilla_description":"CVE-2014-0239 samba: potential DoS in the internal DNS server","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0239.json"},{"CVE":"CVE-2014-0178","severity":"low","public_date":"2014-05-28T00:00:00Z","advisories":["RHSA-2014:1009","RHSA-2014:0867"],"bugzilla":"1101992","bugzilla_description":"CVE-2014-0178 samba: Uninitialized memory exposure","cvss_score":1.4,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-456->CWE-201","affected_packages":["samba4-0:4.0.0-63.el6_5.rc4","samba-0:4.1.1-35.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0178.json"},{"CVE":"CVE-2014-2830","severity":"moderate","public_date":"2014-04-08T00:00:00Z","advisories":[],"bugzilla":"1086224","bugzilla_description":"CVE-2014-2830 cifs-utils: stack-based buffer overflow flaw in pam_cifscreds","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2830.json"},{"CVE":"CVE-2013-6442","severity":"moderate","public_date":"2014-03-12T00:00:00Z","advisories":["RHSA-2014:0383"],"bugzilla":"1044099","bugzilla_description":"CVE-2013-6442 samba: smbcacls will delete ACL lists in certain circumstances","cvss_score":4.1,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["samba4-0:4.0.0-61.el6_5.rc4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6442.json"},{"CVE":"CVE-2013-4496","severity":"moderate","public_date":"2014-03-12T00:00:00Z","advisories":["RHSA-2014:0330","RHSA-2014:0383"],"bugzilla":"1072792","bugzilla_description":"CVE-2013-4496 samba: Password lockout not enforced for SAMR password changes","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["samba-0:3.6.9-168.el6_5","samba3x-0:3.6.6-0.139.el5_10","samba4-0:4.0.0-61.el6_5.rc4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4496.json"},{"CVE":"CVE-2013-4408","severity":"important","public_date":"2013-12-09T00:00:00Z","advisories":["RHSA-2013:1805","RHSA-2013:1806","RHSA-2014:0009"],"bugzilla":"1018032","bugzilla_description":"CVE-2013-4408 samba: Heap-based buffer overflow due to incorrect DCE-RPC fragment length field check","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-130->CWE-122","affected_packages":["samba3x-0:3.6.6-0.138.el5_10","samba4-0:4.0.0-60.el6_5.rc4","samba-0:3.6.9-167.5.1.el6rhs","samba-0:3.6.9-167.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4408.json"},{"CVE":"CVE-2013-4476","severity":"moderate","public_date":"2013-11-11T00:00:00Z","advisories":[],"bugzilla":"1024547","bugzilla_description":"CVE-2013-4476 samba: world-readable key.pem with Samba 4 AD DC","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4476.json"},{"CVE":"CVE-2013-4475","severity":"moderate","public_date":"2013-10-25T00:00:00Z","advisories":["RHSA-2013:1806","RHSA-2014:0009"],"bugzilla":"1024542","bugzilla_description":"CVE-2013-4475 samba: no access check verification on stream files","cvss_score":4.1,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["samba3x-0:3.6.6-0.138.el5_10","samba-0:3.6.9-167.5.1.el6rhs","samba-0:3.6.9-167.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4475.json"},{"CVE":"CVE-2013-4124","severity":"moderate","public_date":"2013-08-05T00:00:00Z","advisories":["RHSA-2014:0305","RHSA-2013:1542","RHSA-2013:1543","RHSA-2013:1310"],"bugzilla":"984401","bugzilla_description":"CVE-2013-4124 samba: DoS via integer overflow when reading an EA list","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["samba-0:3.0.33-3.40.el5_10","samba4-0:4.0.0-58.el6.rc4","samba3x-0:3.6.6-0.136.el5","samba-0:3.6.9-164.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4124.json"},{"CVE":"CVE-2013-1863","severity":"moderate","public_date":"2013-03-19T00:00:00Z","advisories":[],"bugzilla":"922008","bugzilla_description":"CVE-2013-1863 samba4: Samba 4.0 AD DC files (initially) created as world-writable if additional CIFS file shares are created on the AD DC","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1863.json"},{"CVE":"CVE-2013-0213","severity":"moderate","public_date":"2013-01-30T00:00:00Z","advisories":["RHSA-2014:0305","RHSA-2013:1542","RHSA-2013:1310"],"bugzilla":"905700","bugzilla_description":"CVE-2013-0213 samba: clickjacking vulnerability in SWAT","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["samba-0:3.0.33-3.40.el5_10","samba3x-0:3.6.6-0.136.el5","samba-0:3.6.9-164.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0213.json"},{"CVE":"CVE-2013-0214","severity":"moderate","public_date":"2013-01-30T00:00:00Z","advisories":["RHSA-2014:0305","RHSA-2013:1542","RHSA-2013:1310"],"bugzilla":"905704","bugzilla_description":"CVE-2013-0214 samba: cross-site request forgery vulnerability in SWAT","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["samba-0:3.0.33-3.40.el5_10","samba3x-0:3.6.6-0.136.el5","samba-0:3.6.9-164.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0214.json"},{"CVE":"CVE-2013-0172","severity":"moderate","public_date":"2013-01-15T00:00:00Z","advisories":[],"bugzilla":"895631","bugzilla_description":"CVE-2013-0172 samba4: may provide authenticated users with write access to LDAP directory objects when used as an AD DC","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0172.json"},{"CVE":"CVE-2013-0454","severity":"moderate","public_date":"2012-06-25T00:00:00Z","advisories":[],"bugzilla":"928419","bugzilla_description":"CVE-2013-0454 samba: the SMB2 server does not release unused shares","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0454.json"},{"CVE":"CVE-2012-6150","severity":"low","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2014:0330","RHSA-2014:0383"],"bugzilla":"1036897","bugzilla_description":"CVE-2012-6150 samba: pam_winbind fails open when non-existent group specified to require_membership_of","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["samba-0:3.6.9-168.el6_5","samba3x-0:3.6.6-0.139.el5_10","samba4-0:4.0.0-61.el6_5.rc4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6150.json"},{"CVE":"CVE-2012-2111","severity":"important","public_date":"2012-04-30T00:00:00Z","advisories":["RHSA-2012:0533"],"bugzilla":"813569","bugzilla_description":"CVE-2012-2111 samba: Incorrect permission checks when granting/removing privileges","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["samba3x-0:3.5.10-0.109.el5_8","samba-0:3.5.10-116.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2111.json"},{"CVE":"CVE-2012-1182","severity":"critical","public_date":"2012-04-10T00:00:00Z","advisories":["RHSA-2013:0515","RHSA-2013:0506","RHSA-2012:0465","RHSA-2012:0466","RHSA-2012:0478"],"bugzilla":"804093","bugzilla_description":"CVE-2012-1182 samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-122","affected_packages":["samba4-0:4.0.0-55.el6.rc4","samba-0:3.5.6-86.el6_1.5","openchange-0:1.0-4.el6","evolution-mapi-0:0.28.3-12.el6","samba-0:3.5.4-68.el6_0.3","samba-0:3.0.33-3.36.el4","samba-0:3.0.33-3.29.el5_6.5","samba3x-0:3.5.4-0.70.el5_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1182.json"},{"CVE":"CVE-2012-1586","severity":"low","public_date":"2012-03-21T00:00:00Z","advisories":["RHSA-2012:0902"],"bugzilla":"807252","bugzilla_description":"CVE-2012-1586 samba / cifs-utils: mount.cifs file existence disclosure vulnerability","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["cifs-utils-0:4.8.1-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1586.json"},{"CVE":"CVE-2012-0870","severity":"critical","public_date":"2012-02-21T00:00:00Z","advisories":["RHSA-2012:0332"],"bugzilla":"795509","bugzilla_description":"CVE-2012-0870 samba: Any Batched (\"AndX\") request processing infinite recursion and heap-based buffer overflow","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-674->CWE-119","affected_packages":["samba-0:3.0.33-3.29.el5_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0870.json"},{"CVE":"CVE-2012-0817","severity":"moderate","public_date":"2012-01-29T00:00:00Z","advisories":[],"bugzilla":"785746","bugzilla_description":"CVE-2012-0817 samba: DoS (smbd crash) due memory leak in management of fds for socket connections","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0817.json"},{"CVE":"CVE-2011-2724","severity":"low","public_date":"2011-07-29T00:00:00Z","advisories":["RHSA-2011:1220","RHSA-2011:1221"],"bugzilla":"726691","bugzilla_description":"CVE-2011-2724 samba, cifs-utils: mount.cifs incorrect fix for CVE-2010-0547","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["samba3x-0:3.5.4-0.83.el5_7.2","cifs-utils-0:4.8.1-2.el6_1.2","samba-0:3.5.6-86.el6_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2724.json"},{"CVE":"CVE-2011-2522","severity":"moderate","public_date":"2011-07-26T00:00:00Z","advisories":["RHSA-2011:1220","RHSA-2011:1221","RHSA-2011:1219"],"bugzilla":"721348","bugzilla_description":"CVE-2011-2522 samba (SWAT): Absent CSRF protection in various Samba web configuration formulars","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["samba-0:3.0.33-0.34.el4","samba3x-0:3.5.4-0.83.el5_7.2","samba-0:3.5.6-86.el6_1.4","samba-0:3.0.33-3.29.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2522.json"},{"CVE":"CVE-2011-2694","severity":"moderate","public_date":"2011-07-26T00:00:00Z","advisories":["RHSA-2011:1220","RHSA-2011:1221","RHSA-2011:1219"],"bugzilla":"722537","bugzilla_description":"CVE-2011-2694 samba (SWAT): XSS flaw in Change Password page","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["samba-0:3.0.33-0.34.el4","samba3x-0:3.5.4-0.83.el5_7.2","samba-0:3.5.6-86.el6_1.4","samba-0:3.0.33-3.29.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2694.json"},{"CVE":"CVE-2011-1678","severity":"low","public_date":"2011-03-03T00:00:00Z","advisories":["RHSA-2011:1220","RHSA-2011:1221","RHSA-2011:1219"],"bugzilla":"695925","bugzilla_description":"CVE-2011-1678 samba/cifs-utils: mount.cifs and umount.cifs fail to anticipate RLIMIT_FSIZE","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["samba-0:3.0.33-0.34.el4","samba3x-0:3.5.4-0.83.el5_7.2","cifs-utils-0:4.8.1-2.el6_1.2","samba-0:3.0.33-3.29.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1678.json"},{"CVE":"CVE-2011-0719","severity":"important","public_date":"2011-02-28T00:00:00Z","advisories":["RHSA-2011:0305","RHSA-2011:0306"],"bugzilla":"678328","bugzilla_description":"CVE-2011-0719 Samba unsafe fd_set usage","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["samba-0:3.0.33-3.29.el5_6.2","samba-0:3.0.33-0.30.el4","samba-0:3.5.4-68.el6_0.2","samba3x-0:3.5.4-0.70.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0719.json"},{"CVE":"CVE-2010-3069","severity":"critical","public_date":"2010-09-14T00:00:00Z","advisories":["RHSA-2010:0698","RHSA-2010:0697","RHSA-2010:0860"],"bugzilla":"630869","bugzilla_description":"CVE-2010-3069 Samba: Stack-based buffer overflow by processing specially-crafted SID records","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-129->CWE-121","affected_packages":["samba-0:3.0.33-3.29.el5_5.1","samba-0:3.0.9-1.3E.18","samba-0:3.0.33-0.19.el4_8.3","samba3x-0:3.3.8-0.52.el5_5.2","samba-0:3.5.4-68.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3069.json"},{"CVE":"CVE-2010-2063","severity":"critical","public_date":"2010-06-16T00:00:00Z","advisories":["RHSA-2010:0488"],"bugzilla":"601419","bugzilla_description":"CVE-2010-2063 samba: memory corruption vulnerability","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-228->CWE-119","affected_packages":["samba-0:3.0.33-3.7.el5_3.2","samba-0:3.0.33-3.15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2063.json"},{"CVE":"CVE-2011-3585","severity":"low","public_date":"2010-02-25T00:00:00Z","advisories":["RHSA-2011:1221","RHSA-2011:1219"],"bugzilla":"742907","bugzilla_description":"CVE-2011-3585 Samba mtab lock file race condition","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["samba-0:3.0.33-0.34.el4","samba-0:3.5.6-86.el6_1.4","samba-0:3.0.33-3.29.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3585.json"},{"CVE":"CVE-2010-0926","severity":"low","public_date":"2010-02-05T00:00:00Z","advisories":["RHSA-2012:0313"],"bugzilla":"562568","bugzilla_description":"CVE-2010-0926 samba: insecure \"wide links\" default","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["samba-0:3.0.33-3.37.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0926.json"},{"CVE":"CVE-2010-0547","severity":"low","public_date":"2010-01-26T00:00:00Z","advisories":["RHBA-2011:0054","RHSA-2011:1219"],"bugzilla":"562156","bugzilla_description":"CVE-2010-0547 samba: mount.cifs improper device name and mountpoint strings sanitization","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["samba-0:3.0.33-0.34.el4","samba3x-0:3.5.4-0.70.el5","samba-0:3.0.33-3.29.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0547.json"},{"CVE":"CVE-2010-0787","severity":"low","public_date":"2010-01-26T00:00:00Z","advisories":["RHBA-2011:0054","RHSA-2011:1219"],"bugzilla":"577277","bugzilla_description":"CVE-2010-0787 samba: Race condition by mount (mount.cifs) operations","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["samba-0:3.0.33-0.34.el4","samba3x-0:3.5.4-0.70.el5","samba-0:3.0.33-3.29.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0787.json"},{"CVE":"CVE-2009-2948","severity":"low","public_date":"2009-10-01T00:00:00Z","advisories":["RHSA-2009:1529","RHSA-2009:1585"],"bugzilla":"526074","bugzilla_description":"CVE-2009-2948 samba: information disclosure in suid mount.cifs","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["samba-0:3.0.33-3.15.el5_4","samba3x-0:3.3.8-0.46.el5","samba-0:3.0.33-0.18.el4_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2948.json"},{"CVE":"CVE-2009-2906","severity":"moderate","public_date":"2009-10-01T00:00:00Z","advisories":["RHSA-2009:1529","RHSA-2009:1528","RHSA-2009:1585"],"bugzilla":"526645","bugzilla_description":"CVE-2009-2906 samba: infinite loop flaw in smbd on unexpected oplock break notification reply","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["samba-0:3.0.33-3.15.el5_4","samba3x-0:3.3.8-0.46.el5","samba-0:3.0.33-0.18.el4_8","samba-0:3.0.9-1.3E.16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2906.json"},{"CVE":"CVE-2009-2813","severity":"low","public_date":"2009-09-10T00:00:00Z","advisories":["RHSA-2009:1529","RHSA-2009:1585"],"bugzilla":"523752","bugzilla_description":"CVE-2009-2813 Samba: Share restriction bypass via home-less directory user account(s)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["samba-0:3.0.33-3.15.el5_4","samba3x-0:3.3.8-0.46.el5","samba-0:3.0.33-0.18.el4_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2813.json"},{"CVE":"CVE-2009-1888","severity":"low","public_date":"2009-06-23T00:00:00Z","advisories":["RHSA-2009:1529","RHSA-2009:1585"],"bugzilla":"506996","bugzilla_description":"CVE-2009-1888 Samba improper file access","cvss_score":1.4,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["samba-0:3.0.33-3.15.el5_4","samba3x-0:3.3.8-0.46.el5","samba-0:3.0.33-0.18.el4_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1888.json"},{"CVE":"CVE-2008-1105","severity":"critical","public_date":"2008-05-28T00:00:00Z","advisories":["RHSA-2008:0289","RHSA-2008:0288","RHSA-2008:0290"],"bugzilla":"446724","bugzilla_description":"CVE-2008-1105 Samba client buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:2.2.12-1.21as.9.3","samba-0:3.0.10-2.el4_5.3","samba-0:3.0.25b-1.el4_6.5","samba-0:3.0.9-1.3E.15","samba-0:3.0.28-1.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1105.json"},{"CVE":"CVE-2007-6015","severity":"critical","public_date":"2007-12-10T15:00:00Z","advisories":["RHSA-2007:1114","RHSA-2007:1117"],"bugzilla":"396401","bugzilla_description":"CVE-2007-6015 samba: send_mailslot() buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.10-2.el4_5.2","samba-0:3.0.25b-1.el4_6.4","samba-0:3.0.9-1.3E.14.3","samba-0:3.0.25b-1.el5_1.4","samba-0:2.2.12-1.21as.8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6015.json"},{"CVE":"CVE-2007-4572","severity":"moderate","public_date":"2007-11-15T14:00:00Z","advisories":["RHSA-2007:1016","RHSA-2007:1013","RHSA-2007:1017"],"bugzilla":"294631","bugzilla_description":"CVE-2007-4572 samba buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.9-1.3E.14.1","samba-0:3.0.25b-1.el5_1.2","samba-0:3.0.25b-1.el4_6.2","samba-0:2.2.12-1.21as.8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4572.json"},{"CVE":"CVE-2007-5398","severity":"critical","public_date":"2007-11-15T14:00:00Z","advisories":["RHSA-2007:1034","RHSA-2007:1016","RHSA-2007:1013","RHSA-2007:1017"],"bugzilla":"358831","bugzilla_description":"CVE-2007-5398 Samba \"reply_netbios_packet()\" Buffer Overflow Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.9-1.3E.14.1","samba-0:3.0.25b-1.el5_1.2","samba-0:3.0.25b-1.el4_6.2","samba-0:3.0.10-2.el4_5.1","samba-0:2.2.12-1.21as.8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5398.json"},{"CVE":"CVE-2007-4138","severity":"moderate","public_date":"2007-09-11T00:00:00Z","advisories":["RHSA-2007:1016","RHSA-2007:1017"],"bugzilla":"286271","bugzilla_description":"CVE-2007-4138 samba incorrect primary group assignment for domain users using the rfc2307 or sfu winbind nss info plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.25b-1.el5_1.2","samba-0:3.0.25b-1.el4_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4138.json"},{"CVE":"CVE-2007-2446","severity":"critical","public_date":"2007-05-14T00:00:00Z","advisories":["RHSA-2007:0354"],"bugzilla":"239429","bugzilla_description":"CVE-2007-2446 samba heap overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.9-1.3E.13.2","samba-0:2.2.12-1.21as.6","samba-0:3.0.10-1.4E.12.2","samba-0:3.0.23c-2.el5.2.0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2446.json"},{"CVE":"CVE-2007-2447","severity":"important","public_date":"2007-05-14T00:00:00Z","advisories":["RHSA-2007:0354"],"bugzilla":"239774","bugzilla_description":"CVE-2007-2447 samba code injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.9-1.3E.13.2","samba-0:2.2.12-1.21as.6","samba-0:3.0.10-1.4E.12.2","samba-0:3.0.23c-2.el5.2.0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2447.json"},{"CVE":"CVE-2007-0452","severity":"moderate","public_date":"2007-02-05T00:00:00Z","advisories":["RHSA-2007:0061","RHSA-2007:0060"],"bugzilla":"1618269","bugzilla_description":"CVE-2007-0452 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.10-1.4E.11","samba-0:3.0.9-1.3E.12","samba-0:3.0.23c-2.el5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0452.json"},{"CVE":"CVE-2006-3403","severity":"important","public_date":"2006-07-10T00:00:00Z","advisories":["RHSA-2006:0591"],"bugzilla":"1618140","bugzilla_description":"CVE-2006-3403 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.9-1.3E.10","samba-0:3.0.10-1.4E.6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3403.json"},{"CVE":"CVE-2004-1154","severity":"important","public_date":"2004-12-16T00:00:00Z","advisories":["RHSA-2004:681","RHSA-2004:670","RHSA-2005:020"],"bugzilla":"1617382","bugzilla_description":"CVE-2004-1154 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.9-1.3E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1154.json"},{"CVE":"CVE-2004-0882","severity":"important","public_date":"2004-11-15T00:00:00Z","advisories":["RHSA-2004:632"],"bugzilla":"1617311","bugzilla_description":"CVE-2004-0882 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.7-1.3E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0882.json"},{"CVE":"CVE-2004-0930","severity":"moderate","public_date":"2004-11-08T00:00:00Z","advisories":["RHSA-2004:632"],"bugzilla":"1617324","bugzilla_description":"CVE-2004-0930 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.7-1.3E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0930.json"},{"CVE":"CVE-2004-0807","severity":"important","public_date":"2004-09-13T00:00:00Z","advisories":["RHSA-2004:467"],"bugzilla":"1617297","bugzilla_description":"CVE-2004-0807 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.7-1.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0807.json"},{"CVE":"CVE-2004-0808","severity":"important","public_date":"2004-09-13T00:00:00Z","advisories":["RHSA-2004:467"],"bugzilla":"1617298","bugzilla_description":"CVE-2004-0808 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.7-1.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0808.json"},{"CVE":"CVE-2004-0600","severity":"important","public_date":"2004-07-22T00:00:00Z","advisories":["RHSA-2004:259"],"bugzilla":"1617238","bugzilla_description":"CVE-2004-0600 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.4-6.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0600.json"},{"CVE":"CVE-2004-0686","severity":"moderate","public_date":"2004-07-22T00:00:00Z","advisories":["RHSA-2004:404","RHSA-2004:259"],"bugzilla":"1617250","bugzilla_description":"CVE-2004-0686 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.4-6.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0686.json"},{"CVE":"CVE-2004-0082","severity":"low","public_date":"2004-02-13T00:00:00Z","advisories":["RHSA-2004:064"],"bugzilla":"1617143","bugzilla_description":"CVE-2004-0082 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.2-6.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0082.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-devanagari-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-devanagari-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-devanagari-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-gujarati-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-gujarati-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-gujarati-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-malayalam-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-malayalam-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-malayalam-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-oriya-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-oriya-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-oriya-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-tamil-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-tamil-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/samyak-tamil-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-drivers-cameras_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-drivers-cameras_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-drivers-cameras_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-drivers-scanners_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-drivers-scanners_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-drivers-scanners_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends_security_api_results.json
new file mode 100644
index 0000000..a583fbe
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-backends_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12867","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":[],"bugzilla":"1848097","bugzilla_description":"CVE-2020-12867 sane-backends: NULL pointer dereference in sanei_epson_net_read function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12867.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2020-12866","severity":"moderate","public_date":"2020-05-17T00:00:00Z","advisories":[],"bugzilla":"1850549","bugzilla_description":"CVE-2020-12866 sane-backends: null pointer dereference in epsonds_net_read in epsonds-net.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12866.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2020-12861","severity":"important","public_date":"2020-05-17T00:00:00Z","advisories":["RHSA-2020:3045","RHSA-2020:2967","RHSA-2020:2902"],"bugzilla":"1850556","bugzilla_description":"CVE-2020-12861 sane-backends: Heap buffer overflow in epsonds_net_read in epsonds-net.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["sane-backends-0:1.0.27-19.el8_1.1","sane-backends-0:1.0.27-19.el8_2.1","sane-backends-0:1.0.27-19.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12861.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2020-12864","severity":"low","public_date":"2020-05-17T00:00:00Z","advisories":[],"bugzilla":"1850564","bugzilla_description":"CVE-2020-12864 sane-backends: Reading uninitialized data in epsonds_net_read in epsonds-net.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12864.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-12862","severity":"low","public_date":"2020-05-17T00:00:00Z","advisories":[],"bugzilla":"1850579","bugzilla_description":"CVE-2020-12862 sane-backends: Out-of-bounds read in decode_binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12862.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-12863","severity":"low","public_date":"2020-05-17T00:00:00Z","advisories":[],"bugzilla":"1850588","bugzilla_description":"CVE-2020-12863 sane-backends: Out-of-bounds read in esci2_check_header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12863.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-12865","severity":"important","public_date":"2020-05-17T00:00:00Z","advisories":["RHSA-2020:3045","RHSA-2020:2967","RHSA-2020:2902"],"bugzilla":"1850598","bugzilla_description":"CVE-2020-12865 sane-backends: Heap buffer overflow in esci2_img","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["sane-backends-0:1.0.27-19.el8_1.1","sane-backends-0:1.0.27-19.el8_2.1","sane-backends-0:1.0.27-19.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12865.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2017-6318","severity":"low","public_date":"2016-12-16T00:00:00Z","advisories":[],"bugzilla":"1428883","bugzilla_description":"CVE-2017-6318 sane-backends: SANE_NET_CONTROL_OPTION response packet may contain memory contents of the server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6318.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-frontends_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-frontends_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sane-frontends_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sassist_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sassist_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sassist_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/satyr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/satyr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/satyr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sbc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sbc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sbd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sbd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sbd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cim-client2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cim-client2_security_api_results.json
new file mode 100644
index 0000000..3347e49
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cim-client2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-2328","severity":"low","public_date":"2012-02-21T00:00:00Z","advisories":["RHSA-2012:0987"],"bugzilla":"819733","bugzilla_description":"CVE-2012-2328 sblim: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["sblim-cim-client2-0:2.1.3-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2328.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-fsvol_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-fsvol_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-fsvol_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-network_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-network_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-network_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-nfsv3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-nfsv3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-nfsv3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-nfsv4_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-nfsv4_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-nfsv4_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-params_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-params_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-params_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-sysfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-sysfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-sysfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-syslog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-syslog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-cmpi-syslog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-gather-provider_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-gather-provider_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-gather-provider_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-gather_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-gather_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-gather_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-indication_helper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-indication_helper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-indication_helper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-sfcb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-sfcb_security_api_results.json
new file mode 100644
index 0000000..3325277
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-sfcb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-6644","severity":"moderate","public_date":"2018-02-06T00:00:00Z","advisories":[],"bugzilla":"1543825","bugzilla_description":"CVE-2018-6644 sblim-sfcb: NULL pointer dereference (DoS) vulnerability via POST request to /cimom","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6644.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-5185","severity":"moderate","public_date":"2015-08-20T00:00:00Z","advisories":[],"bugzilla":"1255587","bugzilla_description":"CVE-2015-5185 sblim-sfcb: lookupProviders() null pointer dereference","cvss_score":2.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5185.json"},{"CVE":"CVE-2012-3381","severity":"low","public_date":"2012-07-06T00:00:00Z","advisories":[],"bugzilla":"838160","bugzilla_description":"CVE-2012-3381 sblim-sfcb: insecure LD_LIBRARY_PATH usage","cvss_score":3.0,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3381.json"},{"CVE":"CVE-2010-1937","severity":"critical","public_date":"2010-06-01T00:00:00Z","advisories":[],"bugzilla":"605342","bugzilla_description":"CVE-2010-1937 CVE-2010-2054 sblim-sfcb: multiple vulnerabilities fixed upstream in 1.3.8","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1937.json"},{"CVE":"CVE-2010-2054","severity":"critical","public_date":"2010-06-01T00:00:00Z","advisories":[],"bugzilla":"605342","bugzilla_description":"CVE-2010-1937 CVE-2010-2054 sblim-sfcb: multiple vulnerabilities fixed upstream in 1.3.8","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2054.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-sfcc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-sfcc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-sfcc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-smis-hba_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-smis-hba_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-smis-hba_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-wbemcli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-wbemcli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sblim-wbemcli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scannotation_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scannotation_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scannotation_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scap-security-guide-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scap-security-guide-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scap-security-guide-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scap-security-guide_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scap-security-guide_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scap-security-guide_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scap-workbench_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scap-workbench_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scap-workbench_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scipy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scipy_security_api_results.json
new file mode 100644
index 0000000..37832d3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scipy_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4251","severity":"moderate","public_date":"2013-10-10T00:00:00Z","advisories":[],"bugzilla":"916690","bugzilla_description":"CVE-2013-4251 scipy: weave /tmp and current directory issues","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4251.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scl-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scl-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scl-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/screen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/screen_security_api_results.json
new file mode 100644
index 0000000..9e0f475
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/screen_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9366","severity":"moderate","public_date":"2020-02-06T00:00:00Z","advisories":[],"bugzilla":"1801405","bugzilla_description":"CVE-2020-9366 screen: Out of bounds access when setting w_xtermosc after OSC 49","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9366.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2017-5618","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":[],"bugzilla":"1416704","bugzilla_description":"CVE-2017-5618 screen: Privilege escalation via unsafe logfile handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5618.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-6806","severity":"low","public_date":"2015-08-07T00:00:00Z","advisories":[],"bugzilla":"1258802","bugzilla_description":"CVE-2015-6806 screen: Stack overflow due to deep recursion causing process freeze","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6806.json"},{"CVE":"CVE-2013-1050","severity":"low","public_date":"2012-08-30T00:00:00Z","advisories":[],"bugzilla":"919612","bugzilla_description":"CVE-2013-1050 gnome-screensaver: fails to start automatically","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1050.json"},{"CVE":"CVE-2011-2187","severity":"moderate","public_date":"2011-05-10T00:00:00Z","advisories":[],"bugzilla":"703483","bugzilla_description":"CVE-2011-2187 xscreensaver: exits when activated (DPMSForceLevel)","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2187.json"},{"CVE":"CVE-2008-0887","severity":"moderate","public_date":"2008-04-02T08:00:00Z","advisories":["RHSA-2008:0197","RHSA-2008:0218"],"bugzilla":"435773","bugzilla_description":"CVE-2008-0887 gnome-screensaver using NIS auth will unlock if NIS goes away","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gnome-screensaver-0:2.16.1-5.el5_1.1","gnome-screensaver-0:2.16.1-8.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0887.json"},{"CVE":"CVE-2007-1859","severity":"important","public_date":"2007-05-03T00:00:00Z","advisories":["RHSA-2007:0322"],"bugzilla":"237003","bugzilla_description":"CVE-2007-1859 xscreensaver authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xscreensaver-1:4.18-5.rhel4.14","xscreensaver-1:4.10-21.el3","xscreensaver-1:3.33-4.rhel21.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1859.json"},{"CVE":"CVE-2006-4573","severity":"low","public_date":"2006-10-23T00:00:00Z","advisories":[],"bugzilla":"212056","bugzilla_description":"CVE-2006-4573 screen buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4573.json"},{"CVE":"CVE-2004-2655","severity":"moderate","public_date":"2004-05-12T00:00:00Z","advisories":["RHSA-2006:0498"],"bugzilla":"1617427","bugzilla_description":"CVE-2004-2655 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xscreensaver-1:4.10-20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-2655.json"},{"CVE":"CVE-2003-1294","severity":"low","public_date":"2003-11-28T00:00:00Z","advisories":["RHSA-2006:0498"],"bugzilla":"1617125","bugzilla_description":"CVE-2003-1294 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xscreensaver-1:4.10-20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-1294.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scrub_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scrub_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/scrub_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sdparm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sdparm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sdparm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seabios-bin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seabios-bin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seabios-bin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seahorse-nautilus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seahorse-nautilus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seahorse-nautilus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seahorse-sharing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seahorse-sharing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seahorse-sharing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seahorse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seahorse_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seahorse_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seavgabios-bin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seavgabios-bin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/seavgabios-bin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sed_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sed_security_api_results.json
new file mode 100644
index 0000000..a77d63f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sed_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2007-4639","severity":"moderate","public_date":"2007-08-29T00:00:00Z","advisories":["RHSA-2007:0895"],"bugzilla":"284521","bugzilla_description":"CVE-2007-4639 EnterpriseDB security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["EnterpriseDB-0:8.1.9.27-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4639.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-minimum_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-minimum_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-minimum_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-mls_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-mls_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-mls_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-targeted_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-targeted_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy-targeted_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy_security_api_results.json
new file mode 100644
index 0000000..ef79f3c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/selinux-policy_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-3170","severity":"low","public_date":"2015-05-05T00:00:00Z","advisories":[],"bugzilla":"1218672","bugzilla_description":"CVE-2015-3170 selinux-policy: policy package update causes denial of service","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3170.json"},{"CVE":"CVE-2014-3215","severity":"important","public_date":"2012-12-08T00:00:00Z","advisories":["RHSA-2015:0864","RHBA-2015:2161"],"bugzilla":"1095855","bugzilla_description":"CVE-2014-3215 policycoreutils: local privilege escalation via seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-270","affected_packages":["kernel-0:2.6.32-504.16.2.el6","libcap-ng-0:0.7.5-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3215.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sendmail-cf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sendmail-cf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sendmail-cf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sendmail_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sendmail_security_api_results.json
new file mode 100644
index 0000000..936cefa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sendmail_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-3956","severity":"low","public_date":"2014-05-21T00:00:00Z","advisories":[],"bugzilla":"1102174","bugzilla_description":"CVE-2014-3956 sendmail: Properly set the close-on-exec flag for file descriptors","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3956.json"},{"CVE":"CVE-2009-4565","severity":"low","public_date":"2009-12-30T00:00:00Z","advisories":["RHSA-2011:0262","RHSA-2010:0237"],"bugzilla":"552622","bugzilla_description":"CVE-2009-4565 sendmail: incorrect verification of SSL certificate with NUL in name","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["sendmail-0:8.13.1-6.el4","sendmail-0:8.13.8-8.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4565.json"},{"CVE":"CVE-2006-1173","severity":"important","public_date":"2006-06-14T01:06:00Z","advisories":["RHSA-2006:0515"],"bugzilla":"1618028","bugzilla_description":"CVE-2006-1173 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sendmail-0:8.13.1-3.RHEL4.5","sendmail-0:8.12.11-4.RHEL3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1173.json"},{"CVE":"CVE-2006-0058","severity":"critical","public_date":"2006-03-22T16:00:00Z","advisories":["RHSA-2006:0264","RHSA-2006:0265"],"bugzilla":"1617872","bugzilla_description":"CVE-2006-0058 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sendmail-0:8.13.1-3.RHEL4.3","sendmail-0:8.12.11-4.RHEL3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0058.json"},{"CVE":"CVE-2006-7176","severity":"low","public_date":"2005-10-26T00:00:00Z","advisories":["RHSA-2007:0252","RHSA-2010:0237"],"bugzilla":"238540","bugzilla_description":"CVE-2006-7176 sendmail allows external mail with from address xxx@localhost.localdomain","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sendmail-0:8.13.1-3.2.el4","sendmail-0:8.13.8-8.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7176.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/servicelog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/servicelog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/servicelog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setools-console_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setools-console_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setools-console_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setools-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setools-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setools-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setroubleshoot-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setroubleshoot-plugins_security_api_results.json
new file mode 100644
index 0000000..6424d9e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setroubleshoot-plugins_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-4444","severity":"important","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:1267","RHSA-2016:1293"],"bugzilla":"1332644","bugzilla_description":"CVE-2016-4444 setroubleshoot-plugins: insecure commands.getstatusoutput use in the allow_execmod plugin","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-plugins-0:3.0.40-3.1.el6_8","setroubleshoot-plugins-0:3.0.59-2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4444.json"},{"CVE":"CVE-2016-4446","severity":"important","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:1267","RHSA-2016:1293"],"bugzilla":"1339250","bugzilla_description":"CVE-2016-4446 setroubleshoot-plugins: insecure commands.getoutput use in the allow_execstack plugin","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-plugins-0:3.0.40-3.1.el6_8","setroubleshoot-plugins-0:3.0.59-2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4446.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setroubleshoot-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setroubleshoot-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setroubleshoot-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setroubleshoot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setroubleshoot_security_api_results.json
new file mode 100644
index 0000000..6c13ab0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setroubleshoot_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-4444","severity":"important","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:1267","RHSA-2016:1293"],"bugzilla":"1332644","bugzilla_description":"CVE-2016-4444 setroubleshoot-plugins: insecure commands.getstatusoutput use in the allow_execmod plugin","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-plugins-0:3.0.40-3.1.el6_8","setroubleshoot-plugins-0:3.0.59-2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4444.json"},{"CVE":"CVE-2016-4445","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":["RHBA-2015:2287","RHSA-2016:1267"],"bugzilla":"1339183","bugzilla_description":"CVE-2016-4445 setroubleshoot: insecure use of commands.getstatusoutput in sealert","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-0:3.0.47-12.el6_8","setroubleshoot-0:3.2.24-1.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4445.json"},{"CVE":"CVE-2016-4446","severity":"important","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:1267","RHSA-2016:1293"],"bugzilla":"1339250","bugzilla_description":"CVE-2016-4446 setroubleshoot-plugins: insecure commands.getoutput use in the allow_execstack plugin","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-plugins-0:3.0.40-3.1.el6_8","setroubleshoot-plugins-0:3.0.59-2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4446.json"},{"CVE":"CVE-2016-4989","severity":"important","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:1267","RHSA-2016:1293"],"bugzilla":"1346461","bugzilla_description":"CVE-2016-4989 setroubleshoot: command injection issues","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-0:3.0.47-12.el6_8","setroubleshoot-0:3.2.24-4.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4989.json"},{"CVE":"CVE-2015-1815","severity":"important","public_date":"2015-03-26T00:00:00Z","advisories":["RHSA-2015:0729"],"bugzilla":"1203352","bugzilla_description":"CVE-2015-1815 setroubleshoot: command injection via crafted file name","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["setroubleshoot-0:2.0.5-7.el5_11","setroubleshoot-0:3.0.47-6.el6_6.1","setroubleshoot-0:3.2.17-4.1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1815.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setserial_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setserial_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setserial_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setup_security_api_results.json
new file mode 100644
index 0000000..1b73c63
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setup_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-26160","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1883371","bugzilla_description":"CVE-2020-26160 jwt-go: access restriction bypass vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26160.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-14382","severity":"moderate","public_date":"2020-09-03T00:00:00Z","advisories":[],"bugzilla":"1874712","bugzilla_description":"CVE-2020-14382 cryptsetup: Out-of-bounds write when validating segments","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14382.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-12126","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646781","bugzilla_description":"CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12130","severity":"important","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646784","bugzilla_description":"CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385->CWE-226","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-12127","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1667782","bugzilla_description":"CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11091","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1705312","bugzilla_description":"CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-1113","severity":"low","public_date":"2018-04-24T00:00:00Z","advisories":["RHSA-2018:3249"],"bugzilla":"1571094","bugzilla_description":"CVE-2018-1113 setup: nologin listed in /etc/shells violates security expectations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["setup-0:2.8.71-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1113.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-1000018","severity":"moderate","public_date":"2018-01-24T00:00:00Z","advisories":[],"bugzilla":"1537904","bugzilla_description":"CVE-2018-1000018 ovirt-hosted-engine-setup: root password exposed in log file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000018.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-1633","severity":"moderate","public_date":"2013-06-02T00:00:00Z","advisories":[],"bugzilla":"994182","bugzilla_description":"CVE-2013-1633 python-setuptools: easy_install insecure installation mechanism","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1633.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setuptool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setuptool_security_api_results.json
new file mode 100644
index 0000000..df420ad
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/setuptool_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-1633","severity":"moderate","public_date":"2013-06-02T00:00:00Z","advisories":[],"bugzilla":"994182","bugzilla_description":"CVE-2013-1633 python-setuptools: easy_install insecure installation mechanism","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1633.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sg3_utils-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sg3_utils-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sg3_utils-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sg3_utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sg3_utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sg3_utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sgabios-bin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sgabios-bin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sgabios-bin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sgml-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sgml-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sgml-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sgpio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sgpio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sgpio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shadow-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shadow-utils_security_api_results.json
new file mode 100644
index 0000000..b4505aa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shadow-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-19882","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":[],"bugzilla":"1788452","bugzilla_description":"CVE-2019-19882 shadow-utils: local users can obtain root access because setuid programs are misconfigured","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-592","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19882.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-16588","severity":"low","public_date":"2018-09-06T00:00:00Z","advisories":[],"bugzilla":"1626123","bugzilla_description":"CVE-2018-16588 shadow-utils: useradd-mkdirs.patch creates intermediate directories with 0777","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16588.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-7169","severity":"moderate","public_date":"2017-11-14T00:00:00Z","advisories":[],"bugzilla":"1546241","bugzilla_description":"CVE-2018-7169 shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7169.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-12424","severity":"moderate","public_date":"2017-03-31T00:00:00Z","advisories":[],"bugzilla":"1478359","bugzilla_description":"CVE-2017-12424 shadow-utils: Buffer overflow via newusers tool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12424.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-2616","severity":"moderate","public_date":"2017-02-22T00:00:00Z","advisories":["RHSA-2017:0654","RHSA-2017:0907"],"bugzilla":"1418710","bugzilla_description":"CVE-2017-2616 util-linux: Sending SIGKILL to other processes with root privileges via su","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":["coreutils-0:8.4-46.el6","util-linux-0:2.23.2-33.el7_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6251","severity":"low","public_date":"2016-07-19T00:00:00Z","advisories":[],"bugzilla":"1358622","bugzilla_description":"REJECTED CVE-2016-6251 shadow-utils: Potentially unsafe use of getlogin","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6251.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2016-6252","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":[],"bugzilla":"1358625","bugzilla_description":"CVE-2016-6252 shadow-utils: Incorrect integer handling results in LPE","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6252.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2013-4235","severity":"low","public_date":"2015-02-06T00:00:00Z","advisories":[],"bugzilla":"884658","bugzilla_description":"CVE-2013-4235 shadow-utils: TOCTOU race conditions by copying and removing directory trees","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4235.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2006-1174","severity":"low","public_date":"2005-02-23T00:00:00Z","advisories":["RHSA-2007:0276","RHSA-2007:0431"],"bugzilla":"1618029","bugzilla_description":"CVE-2006-1174 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["shadow-utils-2:4.0.3-61.RHEL4","shadow-utils-2:4.0.3-29.RHEL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1174.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shared-desktop-ontologies-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shared-desktop-ontologies-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shared-desktop-ontologies-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shared-desktop-ontologies_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shared-desktop-ontologies_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shared-desktop-ontologies_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shared-mime-info_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shared-mime-info_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shared-mime-info_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-ia32_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-ia32_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-ia32_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-unsigned-ia32_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-unsigned-ia32_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-unsigned-ia32_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-unsigned-x64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-unsigned-x64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-unsigned-x64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-x64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-x64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shim-x64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shotwell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shotwell_security_api_results.json
new file mode 100644
index 0000000..460690e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/shotwell_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-1000024","severity":"moderate","public_date":"2017-07-07T00:00:00Z","advisories":[],"bugzilla":"1482558","bugzilla_description":"CVE-2017-1000024 shotwell: Information disclosure in the web publishing plugins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000024.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-1000033","severity":"low","public_date":"2015-09-02T00:00:00Z","advisories":[],"bugzilla":"1291361","bugzilla_description":"CVE-2016-1000033 shotwell: TLS certificates are not validated when publishing photos to external services","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000033.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/si-units_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/si-units_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/si-units_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sil-abyssinica-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sil-abyssinica-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sil-abyssinica-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sil-nuosu-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sil-nuosu-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sil-nuosu-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sil-padauk-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sil-padauk-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sil-padauk-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sip-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sip-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sip-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sip-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sip-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sip-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/skkdic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/skkdic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/skkdic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/slang_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/slang_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/slang_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/slapi-nis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/slapi-nis_security_api_results.json
new file mode 100644
index 0000000..c7885b8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/slapi-nis_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-0283","severity":"moderate","public_date":"2015-03-26T00:00:00Z","advisories":["RHSA-2015:0728"],"bugzilla":"1195729","bugzilla_description":"CVE-2015-0283 slapi-nis: infinite loop in getgrnam_r() and getgrgid_r()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["slapi-nis-0:0.54-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0283.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/slf4j_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/slf4j_security_api_results.json
new file mode 100644
index 0000000..c1c808d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/slf4j_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-8088","severity":"important","public_date":"2018-02-22T00:00:00Z","advisories":["RHSA-2018:2419","RHSA-2018:1448","RHSA-2018:1525","RHSA-2018:1449","RHSA-2018:1248","RHSA-2018:1447","RHSA-2018:1249","RHSA-2018:0630","RHSA-2018:2930","RHSA-2018:1323","RHSA-2018:1247","RHSA-2018:0592","RHSA-2018:0627","RHSA-2018:0628","RHSA-2020:2561","RHSA-2018:2669","RHSA-2019:2413","RHSA-2019:3140","RHSA-2018:0629","RHSA-2018:1575","RHSA-2018:1451","RHSA-2018:0582","RHSA-2018:2420","RHSA-2018:1251","RHSA-2018:2143","RHSA-2018:1450"],"bugzilla":"1548909","bugzilla_description":"CVE-2018-8088 slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el7","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el6","rhvm-appliance-0:4.2-20180504.0","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el5","rh-maven35-slf4j-0:1.7.25-1.3.el7","slf4j-0:1.7.4-4.el7_4","eap7-slf4j-0:1.7.22-3.redhat_2.1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6","eap7-slf4j-0:1.7.22-3.redhat_2.1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8088.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smartmontools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smartmontools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smartmontools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-anjalioldlipi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-anjalioldlipi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-anjalioldlipi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-dyuthi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-dyuthi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-dyuthi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-kalyani-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-kalyani-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-kalyani-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-meera-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-meera-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-meera-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-rachana-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-rachana-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-rachana-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-raghumalayalam-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-raghumalayalam-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-raghumalayalam-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-suruma-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-suruma-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/smc-suruma-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/snapper-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/snapper-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/snapper-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/snapper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/snapper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/snapper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/snappy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/snappy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/snappy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/socat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/socat_security_api_results.json
new file mode 100644
index 0000000..d98a11b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/socat_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-2217","severity":"moderate","public_date":"2016-02-01T00:00:00Z","advisories":[],"bugzilla":"1305437","bugzilla_description":"CVE-2016-2217 socat: Hard coded 1024 bit DH p parameter was not prime","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2217.json"},{"CVE":"CVE-2015-1379","severity":"low","public_date":"2015-01-24T00:00:00Z","advisories":[],"bugzilla":"1185711","bugzilla_description":"CVE-2015-1379 socat: possible DoS with fork","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-364","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1379.json"},{"CVE":"CVE-2014-0019","severity":"low","public_date":"2014-01-28T00:00:00Z","advisories":[],"bugzilla":"1057746","bugzilla_description":"CVE-2014-0019 socat: PROXY-CONNECT address overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0019.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/softhsm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/softhsm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/softhsm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/soprano-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/soprano-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/soprano-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/soprano_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/soprano_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/soprano_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sos-collector_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sos-collector_security_api_results.json
new file mode 100644
index 0000000..4fed653
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sos-collector_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-14650","severity":"moderate","public_date":"2018-09-27T00:00:00Z","advisories":["RHSA-2018:3663"],"bugzilla":"1633243","bugzilla_description":"CVE-2018-14650 sos-collector: incorrect permissions set on newly created files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["sos-collector-0:1.5-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14650.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"5.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sos_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sos_security_api_results.json
new file mode 100644
index 0000000..f293400
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sos_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-11793","severity":"moderate","public_date":"2019-03-04T00:00:00Z","advisories":[],"bugzilla":"1687364","bugzilla_description":"CVE-2018-11793 mesos: stack overflow vulnerability in parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11793.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-14650","severity":"moderate","public_date":"2018-09-27T00:00:00Z","advisories":["RHSA-2018:3663"],"bugzilla":"1633243","bugzilla_description":"CVE-2018-14650 sos-collector: incorrect permissions set on newly created files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["sos-collector-0:1.5-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14650.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-8023","severity":"moderate","public_date":"2018-09-21T00:00:00Z","advisories":[],"bugzilla":"1632810","bugzilla_description":"CVE-2018-8023 mesos: Exposure of HMAC value via timing vulnerability in  JWT validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2015-7529","severity":"moderate","public_date":"2015-12-01T00:00:00Z","advisories":["RHSA-2016:0188","RHSA-2016:0152"],"bugzilla":"1282542","bugzilla_description":"CVE-2015-7529 sos: Usage of predictable temporary files allows privilege escalation","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-377","affected_packages":["sos-0:3.2-28.el6_7.2","sos-0:3.2-35.el7_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7529.json"},{"CVE":"CVE-2015-3171","severity":"low","public_date":"2015-05-05T00:00:00Z","advisories":[],"bugzilla":"1218658","bugzilla_description":"CVE-2015-3171 sosreport: temporary file created with world-readable permissions","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3171.json"},{"CVE":"CVE-2014-3925","severity":"low","public_date":"2014-05-29T00:00:00Z","advisories":["RHBA-2014:1200"],"bugzilla":"1103324","bugzilla_description":"CVE-2014-3925 sos: does not indicate data sent is potentially sensitive on Red Hat Enterprise Linux 5","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["sos-0:1.7-9.73.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3925.json"},{"CVE":"CVE-2014-0246","severity":null,"public_date":"2014-05-27T00:00:00Z","advisories":[],"bugzilla":"1101393","bugzilla_description":"CVE-2014-0246 sos: md5 hash of GRUB password collected when running sosreport","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0246.json"},{"CVE":"CVE-2012-2664","severity":"low","public_date":"2012-02-14T00:00:00Z","advisories":["RHSA-2013:1121","RHSA-2012:0958"],"bugzilla":"826884","bugzilla_description":"CVE-2012-2664 sosreport does not blank root password in anaconda plugin","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["sos-0:1.7-9.62.el5_9.1","sos-0:2.2-29.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2664.json"},{"CVE":"CVE-2011-4083","severity":"low","public_date":"2011-12-06T00:00:00Z","advisories":["RHSA-2012:0153","RHSA-2011:1536"],"bugzilla":"749383","bugzilla_description":"CVE-2011-4083 sos: sosreport is gathering certificate-based RHN entitlement private keys","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["sos-0:1.7-9.62.el5","sos-0:2.2-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4083.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sound-theme-freedesktop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sound-theme-freedesktop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/sound-theme-freedesktop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/soundtouch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/soundtouch_security_api_results.json
new file mode 100644
index 0000000..aee2ac7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/security_api_results/soundtouch_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-17097","severity":"low","public_date":"2018-09-17T00:00:00Z","advisories":[],"bugzilla":"1631054","bugzilla_description":"CVE-2018-17097 soundtouch: Out-of-bounds heap write in WavOutFile::write()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17097.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17096","severity":"low","public_date":"2018-09-17T00:00:00Z","advisories":[],"bugzilla":"1631060","bugzilla_description":"CVE-2018-17096 soundtouch: Assertion failure in BPMDetect class in BPMDetect.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-17098","severity":"low","public_date":"2018-09-17T00:00:00Z","advisories":[],"bugzilla":"1631064","bugzilla_description":"CVE-2018-17098 soundtouch: Heap corruption in WavFileBase class in WavFile.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17098.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14044","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1601618","bugzilla_description":"CVE-2018-14044 soundtouch: Reachable assertion in RateTransposer::setChannels() causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14044.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-14045","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1601624","bugzilla_description":"CVE-2018-14045 soundtouch: Reachable assertion in FIRFilter.cpp causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14045.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000223","severity":"moderate","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1609193","bugzilla_description":"CVE-2018-1000223 soundtouch: Heap-based buffer overflow in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() potentially leading to code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000223.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-9260","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475756","bugzilla_description":"CVE-2017-9260 soundtouch: Heap-buffer over-read in the TDStretchSSE::calcCrossCorr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9260.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9259","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475757","bugzilla_description":"CVE-2017-9259 soundtouch: Memory allocation error in the TDStretch::acceptNewOverlapLength function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9259.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9258","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475758","bugzilla_description":"CVE-2017-9258 soundtouch: Infinite loop in the TDStretch::processSamples function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9258.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/table-1.csv b/tools/redhat_package_manifest_scraper/data/redhat7/table-1.csv
new file mode 100644
index 0000000..efe41e2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/table-1.csv
@@ -0,0 +1,4016 @@
+,Package,Core package?,License
+0,389-ds-base,No,GPLv3+
+1,389-ds-base-libs,No,GPLv3+
+2,abattis-cantarell-fonts,No,OFL
+3,abrt,No,GPLv2+
+4,abrt-addon-ccpp,Yes,GPLv2+
+5,abrt-addon-kerneloops,No,GPLv2+
+6,abrt-addon-pstoreoops,No,GPLv2+
+7,abrt-addon-python,Yes,GPLv2+
+8,abrt-addon-vmcore,No,GPLv2+
+9,abrt-addon-xorg,No,GPLv2+
+10,abrt-cli,Yes,GPLv2+
+11,abrt-console-notification,Yes,GPLv2+
+12,abrt-dbus,No,GPLv2+
+13,abrt-desktop,Yes,GPLv2+
+14,abrt-gui,Yes,GPLv2+
+15,abrt-gui-libs,No,GPLv2+
+16,abrt-java-connector,Yes,GPLv2+
+17,abrt-libs,No,GPLv2+
+18,abrt-python,No,GPLv2+
+19,abrt-tui,No,GPLv2+
+20,accountsservice,No,GPLv3+
+21,accountsservice-libs,No,GPLv3+
+22,acl,Yes,GPLv2+
+23,acpid,Yes,GPLv2+
+24,adcli,Yes,LGPLv2+
+25,adobe-mappings-cmap,No,BSD
+26,adobe-mappings-cmap-deprecated,No,BSD
+27,adobe-mappings-pdf,No,BSD
+28,adwaita-cursor-theme,No,LGPLv3+ or CC-BY-SA
+29,adwaita-gtk2-theme,No,LGPLv2+
+30,adwaita-icon-theme,No,LGPLv3+ or CC-BY-SA
+31,adwaita-qt,No,LGPLv2+
+32,adwaita-qt4,No,LGPLv2+
+33,adwaita-qt5,No,LGPLv2+
+34,agg,No,GPLv2+
+35,aic94xx-firmware,Yes,"Redistributable, no modification permitted"
+36,aide,Yes,GPLv2+
+37,akonadi,Yes,LGPLv2+
+38,akonadi-mysql,Yes,LGPLv2+
+39,alacarte,Yes,LGPLv2+
+40,alsa-firmware,Yes,GPL+ and BSD and GPLv2+ and GPLv2 and LGPLv2+
+41,alsa-lib,No,LGPLv2+
+42,alsa-lib-devel,Yes,LGPLv2+
+43,alsa-plugins-pulseaudio,Yes,LGPLv2+
+44,alsa-tools-firmware,No,GPLv2+
+45,alsa-utils,Yes,GPLv2+
+46,amanda,No,BSD and GPLv3+ and GPLv2+ and GPLv2
+47,amanda-client,Yes,BSD and GPLv3+ and GPLv2+ and GPLv2
+48,amanda-libs,No,BSD and GPLv3+ and GPLv2+ and GPLv2
+49,amanda-server,Yes,BSD and GPLv3+ and GPLv2+ and GPLv2
+50,anaconda,No,GPLv2+ and MIT
+51,anaconda-core,No,GPLv2+ and MIT
+52,anaconda-gui,No,GPLv2+ and MIT
+53,anaconda-tui,No,GPLv2+ and MIT
+54,anaconda-user-help,No,CC-BY-SA
+55,anaconda-widgets,No,GPLv2+ and MIT
+56,ant,Yes,ASL 2.0
+57,antlr-tool,No,Public Domain
+58,apache-commons-cli,No,ASL 2.0
+59,apache-commons-codec,No,ASL 2.0
+60,apache-commons-collections,No,ASL 2.0
+61,apache-commons-daemon,No,ASL 2.0
+62,apache-commons-dbcp,No,ASL 2.0
+63,apache-commons-io,No,ASL 2.0
+64,apache-commons-lang,No,ASL 2.0
+65,apache-commons-logging,No,ASL 2.0
+66,apache-commons-pool,No,ASL 2.0
+67,appstream-data,No,CC0 and CC-BY and CC-BY-SA and GFDL
+68,apr,No,ASL 2.0 and BSD with advertising and ISC and BSD
+69,apr-devel,No,ASL 2.0 and BSD with advertising and ISC and BSD
+70,apr-util,No,ASL 2.0
+71,apr-util-devel,No,ASL 2.0
+72,apr-util-openssl,No,ASL 2.0
+73,args4j,No,MIT and BSD
+74,ark,Yes,GPLv2+
+75,ark-libs,No,BSD and GPLv2+
+76,arptables,Yes,GPLv2+
+77,arpwatch,Yes,BSD with advertising
+78,at,Yes,GPLv3+ and GPLv2+ and ISC and MIT and Public Domain
+79,at-spi2-atk,Yes,LGPLv2+
+80,at-spi2-atk-devel,No,LGPLv2+
+81,at-spi2-core,Yes,LGPLv2+
+82,at-spi2-core-devel,No,LGPLv2+
+83,atk,No,LGPLv2+
+84,atk-devel,Yes,LGPLv2+
+85,atkmm,No,LGPLv2+
+86,atlas,Yes,BSD
+87,atlas-sse2,No,BSD
+88,atlas-sse3,No,BSD
+89,attica,No,LGPLv2+
+90,attica-devel,No,LGPLv2+
+91,attr,Yes,GPLv2+
+92,audispd-plugins,Yes,GPLv2+
+93,audit,Yes,GPLv2+
+94,audit-libs,No,LGPLv2+
+95,audit-libs-devel,Yes,LGPLv2+
+96,audit-libs-python,No,LGPLv2+
+97,augeas,Yes,LGPLv2+
+98,augeas-libs,No,LGPLv2+
+99,authconfig,No,GPLv2+
+100,authconfig-gtk,No,GPLv2+
+101,authd,Yes,GPLv2+
+102,autoconf,Yes,GPLv2+ and GFDL
+103,autoconf-archive,No,GPLv3+ with exceptions
+104,autofs,Yes,GPLv2+
+105,autogen-libopts,No,LGPLv3+
+106,automake,Yes,GPLv2+ and GFDL and Public Domain and MIT
+107,automoc,No,BSD
+108,avahi,Yes,LGPLv2+
+109,avahi-autoipd,No,LGPLv2+
+110,avahi-glib,No,LGPLv2+
+111,avahi-gobject,No,LGPLv2+
+112,avahi-libs,No,LGPLv2+
+113,avahi-ui-gtk3,No,LGPLv2+
+114,avalon-framework,No,ASL 2.0
+115,avalon-logkit,No,ASL 2.0
+116,babel,Yes,BSD
+117,babl,No,LGPLv3+ and GPLv3+
+118,bacula-client,Yes,AGPLv3 with exceptions
+119,bacula-common,No,AGPLv3 with exceptions
+120,bacula-libs,No,AGPLv3 with exceptions
+121,baobab,Yes,GPLv2+ and GFDL
+122,basesystem,Yes,Public Domain
+123,bash,Yes,GPLv3+
+124,bash-completion,Yes,GPLv2+
+125,bc,Yes,GPLv2+
+126,bcc,Yes,ASL 2.0
+127,bcc-tools,No,ASL 2.0
+128,bcel,No,ASL 2.0
+129,bea-stax,No,ASL 1.1 and ASL 2.0
+130,bea-stax-api,No,ASL 1.1 and ASL 2.0
+131,bind,Yes,MPLv2.0
+132,bind-chroot,Yes,MPLv2.0
+133,bind-dyndb-ldap,Yes,GPLv2+
+134,bind-export-libs,No,MPLv2.0
+135,bind-libs,No,MPLv2.0
+136,bind-libs-lite,No,MPLv2.0
+137,bind-license,No,MPLv2.0
+138,bind-pkcs11,No,MPLv2.0
+139,bind-pkcs11-libs,No,MPLv2.0
+140,bind-pkcs11-utils,No,MPLv2.0
+141,bind-utils,Yes,MPLv2.0
+142,binutils,Yes,GPLv3+
+143,binutils-devel,Yes,GPLv3+
+144,biosdevname,Yes,GPLv2
+145,bison,Yes,GPLv3+
+146,bitmap-fixed-fonts,Yes,GPLv2
+147,bitmap-lucida-typewriter-fonts,Yes,Lucida
+148,blas,No,BSD
+149,blivet3-data,No,LGPLv2+
+150,blktrace,Yes,GPLv2+
+151,bltk,Yes,BSD
+152,bluedevil,Yes,GPLv2+
+153,bluez,No,GPLv2+
+154,bluez-libs,No,GPLv2+
+155,bolt,No,LGPLv2+
+156,boost,No,Boost and MIT and Python
+157,boost-atomic,No,Boost and MIT and Python
+158,boost-chrono,No,Boost and MIT and Python
+159,boost-context,No,Boost and MIT and Python
+160,boost-date-time,No,Boost and MIT and Python
+161,boost-devel,Yes,Boost and MIT and Python
+162,boost-filesystem,No,Boost and MIT and Python
+163,boost-graph,No,Boost and MIT and Python
+164,boost-iostreams,No,Boost and MIT and Python
+165,boost-locale,No,Boost and MIT and Python
+166,boost-math,No,Boost and MIT and Python
+167,boost-program-options,No,Boost and MIT and Python
+168,boost-python,No,Boost and MIT and Python
+169,boost-random,No,Boost and MIT and Python
+170,boost-regex,No,Boost and MIT and Python
+171,boost-serialization,No,Boost and MIT and Python
+172,boost-signals,No,Boost and MIT and Python
+173,boost-system,No,Boost and MIT and Python
+174,boost-test,No,Boost and MIT and Python
+175,boost-thread,No,Boost and MIT and Python
+176,boost-timer,No,Boost and MIT and Python
+177,boost-wave,No,Boost and MIT and Python
+178,bpftool,Yes,GPLv2
+179,bpg-chveulebrivi-fonts,Yes,GPL+ with exceptions
+180,bpg-courier-fonts,Yes,GPL+ with exceptions
+181,bpg-fonts-common,No,GPL+ with exceptions
+182,bpg-glaho-fonts,Yes,GPL+ with exceptions
+183,brasero,Yes,GPLv3+
+184,brasero-libs,No,GPLv3+
+185,brasero-nautilus,Yes,GPLv3+
+186,bridge-utils,Yes,GPLv2+
+187,brlapi,No,LGPLv2+
+188,brltty,Yes,GPLv2+
+189,btrfs-progs,Yes,GPLv2
+190,byacc,Yes,Public Domain
+191,bzip2,Yes,BSD
+192,bzip2-devel,Yes,BSD
+193,bzip2-libs,No,BSD
+194,bzr,Yes,GPLv2+
+195,c-ares,No,MIT
+196,c-ares-devel,Yes,MIT
+197,ca-certificates,No,Public Domain
+198,cachefilesd,Yes,GPLv2+
+199,cairo,No,LGPLv2 or MPLv1.1
+200,cairo-devel,Yes,LGPLv2 or MPLv1.1
+201,cairo-gobject,No,LGPLv2 or MPLv1.1
+202,cairo-gobject-devel,No,LGPLv2 or MPLv1.1
+203,cairomm,No,LGPLv2+
+204,cal10n,No,MIT
+205,caribou,Yes,LGPLv2+
+206,caribou-gtk2-module,Yes,LGPLv2+
+207,caribou-gtk3-module,Yes,LGPLv2+
+208,cdparanoia,No,GPLv2 and LGPLv2
+209,cdparanoia-libs,No,LGPLv2
+210,cdrdao,No,GPLv2+
+211,celt051,No,BSD
+212,ceph-common,Yes,GPLv2
+213,certmonger,Yes,GPLv3+
+214,cgdcbxd,Yes,GPLv2
+215,check,No,LGPLv2+
+216,check-devel,No,LGPLv2+
+217,checkpolicy,No,GPLv2
+218,cheese,Yes,GPLv2+
+219,cheese-libs,No,GPLv2+
+220,chkconfig,Yes,GPLv2
+221,chrome-gnome-shell,No,GPLv3+
+222,chrony,Yes,GPLv2
+223,chrpath,Yes,GPL+
+224,cifs-utils,Yes,GPLv3
+225,cim-schema,No,DMTF
+226,cjkuni-ukai-fonts,Yes,Arphic
+227,cjkuni-uming-fonts,Yes,Arphic
+228,clevis,No,GPLv3+
+229,clevis-dracut,Yes,GPLv3+
+230,clevis-luks,No,GPLv3+
+231,clevis-systemd,No,GPLv3+
+232,clevis-udisks2,Yes,GPLv3+
+233,cloud-init,No,GPLv3
+234,cloud-utils-growpart,No,GPLv3
+235,clucene-core,No,LGPLv2+ or ASL 2.0
+236,clutter,No,LGPLv2+
+237,clutter-gst2,No,LGPLv2+
+238,clutter-gst3,No,LGPLv2+
+239,clutter-gtk,No,LGPLv2+
+240,cmake,Yes,BSD and MIT and zlib
+241,cmpi-bindings-pywbem,No,BSD
+242,cockpit,Yes,LGPLv2+
+243,cockpit-bridge,No,LGPLv2+
+244,cockpit-system,No,LGPLv2+
+245,cockpit-ws,No,LGPLv2+
+246,codemodel,No,CDDL and GPLv2
+247,cogl,No,LGPLv2+
+248,color-filesystem,No,Public Domain
+249,colord,Yes,GPLv2+ and LGPLv2+
+250,colord-gtk,No,LGPLv2+
+251,colord-kde,Yes,GPLv2+
+252,colord-libs,No,GPLv2+ and LGPLv2+
+253,compat-cheese314,Yes,GPLv2+
+254,compat-dapl,Yes,GPLv2 or BSD or CPL
+255,compat-db-headers,No,BSD
+256,compat-db47,Yes,BSD
+257,compat-exiv2-023,Yes,GPLv2+
+258,compat-exiv2-026,No,GPLv2+
+259,compat-gcc-44,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions
+260,compat-gcc-44-c++,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions
+261,compat-glade315,No,GPLv2+ and LGPLv2+
+262,compat-glibc,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+263,compat-glibc-headers,No,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+264,compat-gnome-desktop314,No,GPLv2+ and LGPLv2+
+265,compat-grilo02,No,LGPLv2+
+266,compat-libcap1,Yes,BSD-like and LGPL
+267,compat-libcogl-pango12,No,LGPLv2+
+268,compat-libcogl12,No,LGPLv2+
+269,compat-libcolord1,No,GPLv2+ and LGPLv2+
+270,compat-libf2c-34,Yes,GPLv2+ and GPLv2+ with exceptions
+271,compat-libgdata13,No,LGPLv2+
+272,compat-libgfortran-41,Yes,GPLv2+ with exceptions
+273,compat-libgnome-bluetooth11,No,LGPLv2+
+274,compat-libgnome-desktop3-7,No,GPLv2+ and LGPLv2+
+275,compat-libgweather3,No,GPLv2+
+276,compat-libical1,No,LGPLv2 or MPLv1.1
+277,compat-libmediaart0,No,LGPLv2+
+278,compat-libpackagekit-glib2-16,No,GPLv2+ and LGPLv2+
+279,compat-libtiff3,Yes,libtiff
+280,compat-libupower-glib1,No,GPLv2+
+281,compat-libxcb,No,MIT
+282,compat-openldap,Yes,OpenLDAP
+283,compat-openmpi16,No,BSD and MIT and Romio
+284,compat-opensm-libs,Yes,GPLv2 or BSD
+285,compat-poppler022,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+286,compat-poppler022-glib,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+287,compat-poppler022-qt,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+288,comps-extras,No,GPL+ and LGPLv2+ and CC-BY-SA
+289,conman,Yes,GPLv3+
+290,conntrack-tools,No,GPLv2
+291,control-center,Yes,GPLv2+ and CC-BY-SA
+292,control-center-filesystem,No,GPLv2+ and CC-BY-SA
+293,convmv,No,GPLv2 or GPLv3
+294,coolkey,Yes,LGPLv2
+295,copy-jdk-configs,No,BSD
+296,coreutils,Yes,GPLv3+
+297,cpio,Yes,GPLv3+
+298,cpp,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+299,cpuid,No,GPLv2+
+300,cracklib,No,LGPLv2+
+301,cracklib-dicts,No,LGPLv2+
+302,crash,Yes,GPLv3
+303,crash-gcore-command,Yes,GPLv2
+304,crash-ptdump-command,Yes,GPLv2
+305,crash-trace-command,Yes,GPLv2
+306,crda,Yes,ISC
+307,createrepo,No,GPLv2
+308,criu,No,GPLv2
+309,cronie,Yes,MIT and BSD and ISC and GPLv2+
+310,cronie-anacron,No,MIT and BSD and ISC and GPLv2+
+311,cronie-noanacron,No,MIT and BSD and ISC and GPLv2+
+312,crontabs,Yes,Public Domain and GPLv2
+313,crypto-utils,Yes,MIT and GPLv2+ and MPLv1.0
+314,cryptsetup,Yes,GPLv2+ and LGPLv2+
+315,cryptsetup-libs,No,GPLv2+ and LGPLv2+
+316,cryptsetup-python,No,GPLv2+ and LGPLv2+
+317,cryptsetup-reencrypt,Yes,GPLv2+ and LGPLv2+
+318,cscope,Yes,BSD and GPLv2+
+319,ctags,Yes,GPLv2+ and LGPLv2+ and Public Domain
+320,ctags-etags,Yes,GPLv2+ and LGPLv2+ and Public Domain
+321,culmus-aharoni-clm-fonts,Yes,GPLv2
+322,culmus-caladings-clm-fonts,Yes,GPLv2
+323,culmus-david-clm-fonts,Yes,GPLv2
+324,culmus-drugulin-clm-fonts,Yes,GPLv2
+325,culmus-ellinia-clm-fonts,Yes,GPLv2
+326,culmus-fonts-common,No,GPLv2
+327,culmus-frank-ruehl-clm-fonts,Yes,GPLv2
+328,culmus-hadasim-clm-fonts,Yes,GPLv2
+329,culmus-keteryg-fonts,Yes,GPLv2
+330,culmus-miriam-clm-fonts,Yes,GPLv2
+331,culmus-miriam-mono-clm-fonts,Yes,GPLv2
+332,culmus-nachlieli-clm-fonts,Yes,GPLv2
+333,culmus-simple-clm-fonts,Yes,GPLv2
+334,culmus-stamashkenaz-clm-fonts,Yes,GPLv2
+335,culmus-stamsefarad-clm-fonts,Yes,GPLv2
+336,culmus-yehuda-clm-fonts,Yes,GPLv2
+337,cups,Yes,GPLv2
+338,cups-client,No,GPLv2
+339,cups-devel,Yes,LGPLv2
+340,cups-filesystem,No,GPLv2
+341,cups-filters,No,GPLv2 and GPLv2+ and GPLv3 and GPLv3+ and LGPLv2+ and MIT
+342,cups-filters-libs,No,LGPLv2 and MIT
+343,cups-libs,No,LGPLv2 and zlib
+344,cups-lpd,Yes,GPLv2
+345,cups-pk-helper,Yes,GPLv2+
+346,curl,Yes,MIT
+347,custodia,No,GPLv3+
+348,cvs,Yes,BSD and GPL+ and GPLv2+ and LGPLv2+ and zlib and Public Domain
+349,cyrus-imapd,Yes,BSD
+350,cyrus-imapd-utils,Yes,BSD
+351,cyrus-sasl,No,BSD with advertising
+352,cyrus-sasl-devel,Yes,BSD with advertising
+353,cyrus-sasl-gssapi,No,BSD with advertising
+354,cyrus-sasl-lib,No,BSD with advertising
+355,cyrus-sasl-md5,No,BSD with advertising
+356,cyrus-sasl-plain,Yes,BSD with advertising
+357,cyrus-sasl-scram,No,BSD with advertising
+358,dapl,Yes,GPLv2 or BSD or CPL
+359,daxctl-libs,No,LGPLv2
+360,daxio,Yes,BSD
+361,dbus,Yes,(GPLv2+ or AFL) and GPLv2+
+362,dbus-devel,Yes,(GPLv2+ or AFL) and GPLv2+
+363,dbus-glib,No,AFL and GPLv2+
+364,dbus-glib-devel,Yes,AFL and GPLv2+
+365,dbus-libs,No,(GPLv2+ or AFL) and GPLv2+
+366,dbus-python,No,MIT
+367,dbus-x11,No,(GPLv2+ or AFL) and GPLv2+
+368,dbusmenu-qt,No,LGPLv2+
+369,dbxtool,Yes,GPLv2
+370,dconf,Yes,LGPLv2+ and GPLv2+ and GPLv3+
+371,dconf-editor,Yes,GPLv3+ and CC0
+372,dcraw,Yes,GPLv2+
+373,dejagnu,Yes,GPLv3+
+374,dejavu-fonts-common,No,Bitstream Vera and Public Domain
+375,dejavu-sans-fonts,Yes,Bitstream Vera and Public Domain
+376,dejavu-sans-mono-fonts,Yes,Bitstream Vera and Public Domain
+377,dejavu-serif-fonts,Yes,Bitstream Vera and Public Domain
+378,deltarpm,No,BSD
+379,desktop-file-utils,Yes,GPLv2+
+380,device-mapper,No,GPLv2
+381,device-mapper-event,No,GPLv2
+382,device-mapper-event-libs,No,LGPLv2
+383,device-mapper-libs,No,LGPLv2
+384,device-mapper-multipath,Yes,GPL+
+385,device-mapper-multipath-libs,No,GPL+
+386,device-mapper-persistent-data,Yes,GPLv3+
+387,dhclient,Yes,ISC
+388,dhcp,Yes,ISC
+389,dhcp-common,No,ISC
+390,dhcp-libs,No,ISC
+391,dialog,No,LGPLv2
+392,diffstat,Yes,MIT
+393,diffutils,No,GPLv3+
+394,dleyna-connector-dbus,No,LGPLv2
+395,dleyna-core,No,LGPLv2
+396,dleyna-server,No,LGPLv2
+397,dlm-devel,No,GPLv2 and GPLv2+ and LGPLv2+
+398,dlm-lib,No,GPLv2 and GPLv2+ and LGPLv2+
+399,dmidecode,No,GPLv2+
+400,dmraid,Yes,GPLv2+
+401,dmraid-events,No,GPLv2+
+402,dnsmasq,Yes,GPLv2 or GPLv3
+403,dnssec-trigger,Yes,BSD
+404,docbook-dtds,No,Copyright only
+405,docbook-simple,No,Freely redistributable without restriction
+406,docbook-slides,Yes,MIT
+407,docbook-style-dsssl,No,DMIT
+408,docbook-style-xsl,Yes,DMIT
+409,docbook-utils,Yes,GPLv2+
+410,docbook-utils-pdf,Yes,GPL+
+411,docbook5-schemas,Yes,Freely redistributable without restriction
+412,docbook5-style-xsl,Yes,MIT and MPLv1.1
+413,dom4j,No,BSD
+414,dos2unix,Yes,BSD
+415,dosfstools,Yes,GPLv3+
+416,dotconf,No,LGPLv2
+417,dovecot,Yes,MIT and LGPLv2
+418,dovecot-mysql,Yes,MIT and LGPLv2
+419,dovecot-pgsql,Yes,MIT and LGPLv2
+420,dovecot-pigeonhole,Yes,MIT and LGPLv2
+421,doxygen,Yes,GPL+
+422,dracut,No,GPLv2+ and LGPLv2+
+423,dracut-config-generic,Yes,GPLv2+ and LGPLv2+
+424,dracut-config-rescue,Yes,GPLv2+ and LGPLv2+
+425,dracut-fips,Yes,GPLv2+ and LGPLv2+
+426,dracut-fips-aesni,Yes,GPLv2+ and LGPLv2+
+427,dracut-network,Yes,GPLv2+ and LGPLv2+
+428,dropwatch,Yes,GPLv2+
+429,dstat,Yes,GPLv2
+430,dump,Yes,BSD
+431,dumpet,Yes,GPLv2+
+432,dvd+rw-tools,Yes,GPLv2
+433,dvgrab,Yes,GPLv2+
+434,dwz,No,GPLv2+ and GPLv3+
+435,dyninst,No,LGPLv2+
+436,e2fsprogs,Yes,GPLv2
+437,e2fsprogs-devel,Yes,GPLv2 and LGPLv2
+438,e2fsprogs-libs,No,GPLv2 and LGPLv2
+439,easymock2,No,ASL 2.0
+440,ebtables,Yes,GPLv2+
+441,ecj,No,EPL
+442,ed,Yes,"GPLv3+, GFDL"
+443,edac-utils,Yes,GPLv2+
+444,efax,Yes,GPLv2+
+445,efibootmgr,Yes,GPLv2+
+446,efivar,No,LGPLv2+
+447,efivar-libs,No,LGPLv2+
+448,ElectricFence,Yes,GPLv2
+449,elfutils,Yes,GPLv3+ and (GPLv2+ or LGPLv3+)
+450,elfutils-default-yama-scope,No,GPLv2+ or LGPLv3+
+451,elfutils-devel,Yes,GPLv2+ or LGPLv3+
+452,elfutils-libelf,No,GPLv2+ or LGPLv3+
+453,elfutils-libelf-devel,Yes,GPLv2+ or LGPLv3+
+454,elfutils-libs,No,GPLv2+ or LGPLv3+
+455,elinks,Yes,GPLv2
+456,emacs,Yes,GPLv3+
+457,emacs-auctex,Yes,GPLv3+ and GFDL
+458,emacs-common,No,GPLv3+ and GFDL and BSD
+459,emacs-filesystem,No,GPLv3+
+460,emacs-gnuplot,Yes,gnuplot and MIT
+461,emacs-nox,Yes,GPLv3+
+462,emacs-php-mode,Yes,GPLv3+
+463,empathy,Yes,GPLv2+
+464,enchant,No,LGPLv2+
+465,enscript,Yes,GPLv3+
+466,environment-modules,No,GPLv2+
+467,eog,Yes,GPLv2+ and GFDL
+468,esc,Yes,GPL+
+469,espeak,No,GPLv3+
+470,ethtool,Yes,GPLv2
+471,evince,Yes,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+472,evince-dvi,Yes,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+473,evince-libs,No,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+474,evince-nautilus,Yes,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+475,evolution-data-server,No,LGPLv2+
+476,evolution-data-server-devel,Yes,LGPLv2+
+477,evolution-data-server-langpacks,No,LGPLv2+
+478,exempi,No,BSD
+479,exiv2,No,GPLv2+
+480,exiv2-libs,No,GPLv2+
+481,expat,No,MIT
+482,expat-devel,Yes,MIT
+483,expect,Yes,Public Domain
+484,fabtests,No,GPLv2 or BSD
+485,farstream,No,LGPLv2+
+486,farstream02,No,LGPLv2+ and GPLv2+
+487,fcoe-utils,Yes,GPLv2
+488,fence-agents-all,Yes,GPLv2+ and LGPLv2+ and ASL 2.0
+489,fence-agents-amt-ws,No,ASL 2.0
+490,fence-agents-apc,No,GPLv2+ and LGPLv2+
+491,fence-agents-apc-snmp,No,GPLv2+ and LGPLv2+
+492,fence-agents-bladecenter,No,GPLv2+ and LGPLv2+
+493,fence-agents-brocade,No,GPLv2+ and LGPLv2+
+494,fence-agents-cisco-mds,No,GPLv2+ and LGPLv2+
+495,fence-agents-cisco-ucs,No,GPLv2+ and LGPLv2+
+496,fence-agents-common,No,GPLv2+ and LGPLv2+
+497,fence-agents-compute,No,GPLv2+ and LGPLv2+
+498,fence-agents-drac5,No,GPLv2+ and LGPLv2+
+499,fence-agents-eaton-snmp,No,GPLv2+ and LGPLv2+
+500,fence-agents-emerson,No,GPLv2+ and LGPLv2+
+501,fence-agents-eps,No,GPLv2+ and LGPLv2+
+502,fence-agents-heuristics-ping,No,GPLv2+ and LGPLv2+
+503,fence-agents-hpblade,No,GPLv2+ and LGPLv2+
+504,fence-agents-ibmblade,No,GPLv2+ and LGPLv2+
+505,fence-agents-ifmib,No,GPLv2+ and LGPLv2+
+506,fence-agents-ilo-moonshot,No,GPLv2+ and LGPLv2+
+507,fence-agents-ilo-mp,No,GPLv2+ and LGPLv2+
+508,fence-agents-ilo-ssh,No,GPLv2+ and LGPLv2+
+509,fence-agents-ilo2,No,GPLv2+ and LGPLv2+
+510,fence-agents-intelmodular,No,GPLv2+ and LGPLv2+
+511,fence-agents-ipdu,No,GPLv2+ and LGPLv2+
+512,fence-agents-ipmilan,No,GPLv2+ and LGPLv2+
+513,fence-agents-kdump,No,GPLv2+ and LGPLv2+
+514,fence-agents-lpar,No,GPLv2+ and LGPLv2+
+515,fence-agents-mpath,No,GPLv2+ and LGPLv2+
+516,fence-agents-redfish,No,GPLv2+ and LGPLv2+
+517,fence-agents-rhevm,No,GPLv2+ and LGPLv2+
+518,fence-agents-rsa,No,GPLv2+ and LGPLv2+
+519,fence-agents-rsb,No,GPLv2+ and LGPLv2+
+520,fence-agents-sbd,No,GPLv2+ and LGPLv2+
+521,fence-agents-scsi,No,GPLv2+ and LGPLv2+
+522,fence-agents-vmware-rest,No,GPLv2+ and LGPLv2+
+523,fence-agents-vmware-soap,No,GPLv2+ and LGPLv2+
+524,fence-agents-wti,No,GPLv2+ and LGPLv2+
+525,fence-agents-zvm,No,GPLv2+ and LGPLv2+
+526,fence-virt,No,GPLv2+
+527,fence-virtd,No,GPLv2+
+528,fence-virtd-libvirt,Yes,GPLv2+
+529,fence-virtd-multicast,Yes,GPLv2+
+530,fence-virtd-serial,Yes,GPLv2+
+531,festival,No,MIT and GPL+ and TCL
+532,festival-freebsoft-utils,No,GPLv2+
+533,festival-lib,No,MIT and GPL+ and TCL
+534,festival-speechtools-libs,No,MIT and GPL+ and TCL
+535,festvox-slt-arctic-hts,No,MIT and GPL+ and TCL
+536,fetchmail,Yes,GPL+ and Public Domain
+537,fftw,Yes,GPLv2+
+538,fftw-devel,Yes,GPLv2+
+539,fftw-libs,No,GPLv2+
+540,fftw-libs-double,No,GPLv2+
+541,fftw-libs-long,No,GPLv2+
+542,fftw-libs-single,No,GPLv2+
+543,fftw-static,Yes,GPLv2+
+544,file,Yes,BSD
+545,file-libs,No,BSD
+546,file-roller,Yes,GPLv2+
+547,file-roller-nautilus,Yes,GPLv2+
+548,filebench,No,CDDL
+549,filesystem,Yes,Public Domain
+550,findutils,No,GPLv3+
+551,finger,Yes,BSD
+552,finger-server,Yes,BSD
+553,fio,Yes,GPLv2
+554,fipscheck,No,BSD
+555,fipscheck-lib,No,BSD
+556,firefox,Yes,MPLv1.1 or GPLv2+ or LGPLv2+
+557,firewall-config,Yes,GPLv2+
+558,firewalld,Yes,GPLv2+
+559,firewalld-filesystem,No,GPLv2+
+560,firstboot,Yes,GPLv2+
+561,flac-libs,No,BSD and GPLv2+ and GFDL
+562,flatpak,Yes,LGPLv2+
+563,flatpak-libs,No,LGPLv2+
+564,flex,Yes,BSD and LGPLv2+
+565,flite,No,MIT
+566,fltk,No,LGPLv2+ with exceptions
+567,folks,No,LGPLv2+
+568,fontawesome-fonts,No,OFL
+569,fontconfig,No,MIT and Public Domain and UCD
+570,fontconfig-devel,Yes,MIT and Public Domain and UCD
+571,fontpackages-filesystem,No,Public Domain
+572,fonts-tweak-tool,Yes,LGPLv3+
+573,foomatic,Yes,GPLv2+
+574,foomatic-db,No,GPLv2+
+575,foomatic-db-filesystem,No,Public Domain
+576,foomatic-db-ppds,No,GPLv2+ and MIT
+577,foomatic-filters,Yes,GPLv2+
+578,fprintd,No,GPLv2+
+579,fprintd-pam,Yes,GPLv2+
+580,freeglut,No,MIT
+581,freeglut-devel,Yes,MIT
+582,freeipmi,Yes,GPLv3+
+583,freeipmi-bmc-watchdog,Yes,GPLv3+
+584,freeipmi-ipmidetectd,Yes,GPLv3+
+585,freeradius,Yes,GPLv2+ and LGPLv2+
+586,freerdp,Yes,ASL 2.0
+587,freerdp-libs,No,ASL 2.0
+588,freetype,No,(FTL or GPLv2+) and BSD and MIT and Public Domain and zlib with acknowledgement
+589,freetype-devel,Yes,(FTL or GPLv2+) and BSD and MIT and Public Domain and zlib with acknowledgement
+590,frei0r-plugins,No,GPLv2+
+591,fribidi,No,LGPLv2+ and UCD
+592,fribidi-devel,No,LGPLv2+ and UCD
+593,fros,No,GPLv2+
+594,ftp,Yes,BSD with advertising
+595,fuse,No,GPL+
+596,fuse-devel,Yes,LGPLv2+
+597,fuse-libs,No,LGPLv2+
+598,fuseiso,No,GPLv2+
+599,fwupd,Yes,LGPLv2+
+600,fwupdate,Yes,GPLv2+
+601,fwupdate-efi,No,GPLv2+
+602,fwupdate-libs,No,GPLv2+
+603,fxload,No,GPLv2+
+604,gamin,No,LGPLv2
+605,gavl,No,GPLv3+
+606,gawk,No,GPLv3+ and GPL and LGPLv3+ and LGPL and BSD
+607,gc,No,BSD
+608,gcc,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+609,gcc-c++,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+610,gcc-gfortran,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+611,gcc-gnat,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+612,gcc-objc,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+613,gcc-objc++,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+614,gconf-editor,Yes,GPLv2+ and GFDL
+615,GConf2,No,LGPLv2+ and GPLv2+
+616,gcr,No,LGPLv2+
+617,gcr-devel,No,LGPLv2+
+618,gd,No,MIT
+619,gdb,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and BSD and Public Domain
+620,gdb-gdbserver,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and BSD and Public Domain
+621,gdbm,No,GPLv3+
+622,gdbm-devel,No,GPLv3+
+623,gdisk,No,GPLv2
+624,gdk-pixbuf2,No,LGPLv2+
+625,gdk-pixbuf2-devel,No,LGPLv2+
+626,gdm,Yes,GPLv2+
+627,gedit,Yes,GPLv2+ and GFDL
+628,gedit-plugin-bookmarks,No,GPLv2+
+629,gedit-plugin-bracketcompletion,No,GPLv2+
+630,gedit-plugin-charmap,No,GPLv2+
+631,gedit-plugin-codecomment,No,GPLv2+
+632,gedit-plugin-colorpicker,No,GPLv2+
+633,gedit-plugin-colorschemer,No,GPLv2+
+634,gedit-plugin-commander,No,GPLv2+
+635,gedit-plugin-drawspaces,No,GPLv2+
+636,gedit-plugin-joinlines,No,GPLv2+
+637,gedit-plugin-multiedit,No,GPLv2+
+638,gedit-plugin-smartspaces,No,GPLv2+
+639,gedit-plugin-synctex,No,GPLv2+
+640,gedit-plugin-terminal,No,GPLv2+
+641,gedit-plugin-textsize,No,GPLv2+
+642,gedit-plugin-wordcompletion,No,GPLv2+
+643,gedit-plugins,Yes,GPLv2+
+644,gedit-plugins-data,No,GPLv2+
+645,gegl,No,LGPLv3+ and GPLv3+
+646,genisoimage,Yes,GPLv2
+647,genwqe-tools,Yes,ASL 2.0
+648,genwqe-zlib,No,ASL 2.0
+649,geoclue,No,LGPLv2
+650,geoclue2,No,GPLv2+
+651,geoclue2-libs,No,LGPLv2+
+652,geocode-glib,No,LGPLv2+
+653,geocode-glib-devel,No,LGPLv2+
+654,GeoIP,No,LGPLv2+ and GPLv2+ and CC-BY-SA
+655,geoipupdate,No,GPLv2
+656,geolite2-city,No,CC-BY-SA
+657,geolite2-country,No,CC-BY-SA
+658,geronimo-annotation,No,ASL 2.0
+659,geronimo-jms,No,ASL 2.0
+660,geronimo-jta,No,ASL 2.0
+661,gettext,Yes,GPLv3+ and LGPLv2+
+662,gettext-common-devel,No,GPLv3+
+663,gettext-devel,No,LGPLv2+ and GPLv3+
+664,gettext-libs,No,LGPLv2+ and GPLv3+
+665,gfs2-utils,Yes,GPLv2+ and LGPLv2+
+666,ghostscript,No,AGPLv3+
+667,ghostscript-chinese,Yes,GPLv2+
+668,ghostscript-cups,Yes,AGPLv3+
+669,ghostscript-fonts,No,GPLv2+ and Hershey and MIT and OFL and Public Domain
+670,giflib,No,MIT
+671,gimp,Yes,GPLv3+ and GPLv3
+672,gimp-data-extras,Yes,GPLv2+
+673,gimp-help,Yes,GFDL and GPLv2+
+674,gimp-libs,No,LGPLv3+
+675,git,Yes,GPLv2
+676,gjs,No,MIT and (MPLv1.1 or GPLv2+ or LGPLv2+)
+677,gl-manpages,No,MIT and Open Publication
+678,glade-libs,No,GPLv2+ and LGPLv2+
+679,glassfish-dtd-parser,No,CDDL 1.1 and GPLv2 with exceptions
+680,glassfish-fastinfoset,No,ASL 2.0
+681,glassfish-jaxb,No,CDDL and GPLv2 with exceptions
+682,glassfish-jaxb-api,No,CDDL or GPLv2 with exception
+683,glib-networking,Yes,LGPLv2+
+684,glib2,No,LGPLv2+
+685,glib2-devel,Yes,LGPLv2+
+686,glibc,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+687,glibc-common,No,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+688,glibc-devel,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+689,glibc-headers,No,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+690,glibc-utils,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+691,glibmm24,No,LGPLv2+
+692,glusterfs,No,GPLv2 or LGPLv3+
+693,glusterfs-api,No,GPLv2 or LGPLv3+
+694,glusterfs-cli,No,GPLv2 or LGPLv3+
+695,glusterfs-client-xlators,No,GPLv2 or LGPLv3+
+696,glusterfs-fuse,Yes,GPLv2 or LGPLv3+
+697,glusterfs-libs,No,GPLv2 or LGPLv3+
+698,glusterfs-rdma,Yes,GPLv2 or LGPLv3+
+699,glx-utils,Yes,MIT
+700,gmp,No,LGPLv3+ or GPLv2+
+701,gmp-devel,Yes,LGPLv3+ or GPLv2+
+702,gnome-abrt,No,GPLv2+
+703,gnome-bluetooth,Yes,GPLv2+
+704,gnome-bluetooth-libs,No,LGPLv2+
+705,gnome-boxes,Yes,LGPLv2+
+706,gnome-calculator,Yes,GPLv3+
+707,gnome-classic-session,Yes,GPLv2+
+708,gnome-clocks,Yes,GPLv2+
+709,gnome-color-manager,Yes,GPLv2+
+710,gnome-common,Yes,GPLv2+
+711,gnome-contacts,Yes,GPLv2+
+712,gnome-desktop3,No,GPLv2+ and LGPLv2+
+713,gnome-desktop3-devel,Yes,LGPLv2+
+714,gnome-dictionary,Yes,GPLv3+ and LGPLv2+ and GFDL
+715,gnome-disk-utility,Yes,GPLv2+
+716,gnome-font-viewer,Yes,GPLv2+
+717,gnome-getting-started-docs,Yes,CC-BY-SA
+718,gnome-icon-theme,Yes,LGPLv3+
+719,gnome-icon-theme-extras,Yes,CC-BY-SA
+720,gnome-icon-theme-legacy,No,LGPLv3+
+721,gnome-icon-theme-symbolic,Yes,CC-BY-SA
+722,gnome-initial-setup,Yes,GPLv2+
+723,gnome-keyring,No,GPLv2+ and LGPLv2+
+724,gnome-keyring-pam,No,LGPLv2+
+725,gnome-menus,No,LGPLv2+
+726,gnome-online-accounts,No,LGPLv2+
+727,gnome-online-accounts-devel,No,LGPLv2+
+728,gnome-online-miners,No,GPLv2+ and LGPLv2+ and MIT
+729,gnome-packagekit,Yes,GPLv2+
+730,gnome-packagekit-common,No,GPLv2+
+731,gnome-packagekit-installer,No,GPLv2+
+732,gnome-packagekit-updater,Yes,GPLv2+
+733,gnome-python2,No,LGPLv2+
+734,gnome-python2-bonobo,No,LGPLv2+
+735,gnome-python2-canvas,No,LGPLv2+
+736,gnome-python2-gconf,No,LGPLv2+
+737,gnome-python2-gnome,No,LGPLv2+
+738,gnome-python2-gnomevfs,No,LGPLv2+
+739,gnome-screenshot,Yes,GPLv2+
+740,gnome-session,Yes,GPLv2+
+741,gnome-session-xsession,Yes,GPLv2+
+742,gnome-settings-daemon,Yes,GPLv2+
+743,gnome-shell,Yes,GPLv2+
+744,gnome-shell-extension-alternate-tab,No,GPLv2+
+745,gnome-shell-extension-apps-menu,No,GPLv2+
+746,gnome-shell-extension-common,No,GPLv2+
+747,gnome-shell-extension-horizontal-workspaces,No,GPLv2+
+748,gnome-shell-extension-launch-new-instance,No,GPLv2+
+749,gnome-shell-extension-places-menu,No,GPLv2+
+750,gnome-shell-extension-top-icons,No,GPLv2+
+751,gnome-shell-extension-user-theme,No,GPLv2+
+752,gnome-shell-extension-window-list,No,GPLv2+
+753,gnome-software,Yes,GPLv2+
+754,gnome-system-log,Yes,GPLv2+ and GFDL
+755,gnome-system-monitor,Yes,GPLv2+
+756,gnome-terminal,Yes,GPLv3+ and GFDL
+757,gnome-terminal-nautilus,Yes,GPLv3+ and GFDL
+758,gnome-themes-standard,Yes,LGPLv2+
+759,gnome-tweak-tool,Yes,GPLv3 and CC0
+760,gnome-user-docs,Yes,CC-BY-SA
+761,gnome-vfs2,No,LGPLv2+ and GPLv2+
+762,gnome-video-effects,No,GPLv2
+763,gnome-weather,Yes,GPLv2+ and LGPLv2+ and MIT and CC-BY and CC-BY-SA
+764,gnote,Yes,GPLv3+
+765,gnu-free-fonts-common,No,GPLv3+ with exceptions
+766,gnu-free-mono-fonts,Yes,GPLv3+ with exceptions
+767,gnu-free-sans-fonts,Yes,GPLv3+ with exceptions
+768,gnu-free-serif-fonts,Yes,GPLv3+ with exceptions
+769,gnupg2,Yes,GPLv3+
+770,gnuplot,Yes,gnuplot and MIT
+771,gnuplot-common,No,gnuplot and MIT
+772,gnutls,No,GPLv3+ and LGPLv2+
+773,gnutls-c++,No,GPLv3+ and LGPLv2+
+774,gnutls-dane,No,GPLv3+ and LGPLv2+
+775,gnutls-devel,Yes,GPLv3+ and LGPLv2+
+776,gnutls-utils,No,GPLv3+
+777,gobject-introspection,No,"GPLv2+, LGPLv2+, MIT"
+778,gobject-introspection-devel,No,"GPLv2+, LGPLv2+, MIT"
+779,gom,No,LGPLv2+
+780,google-crosextra-caladea-fonts,Yes,ASL 2.0
+781,google-crosextra-carlito-fonts,Yes,OFL
+782,google-noto-emoji-color-fonts,No,OFL and ASL 2.0
+783,google-noto-emoji-fonts,Yes,OFL and ASL 2.0
+784,google-noto-fonts-common,No,ASL 2.0
+785,google-noto-sans-armenian-fonts,Yes,ASL 2.0
+786,google-noto-sans-devanagari-fonts,Yes,ASL 2.0
+787,google-noto-sans-devanagari-ui-fonts,Yes,ASL 2.0
+788,google-noto-sans-ethiopic-fonts,Yes,ASL 2.0
+789,google-noto-sans-fonts,Yes,ASL 2.0
+790,google-noto-sans-georgian-fonts,Yes,ASL 2.0
+791,google-noto-sans-hebrew-fonts,Yes,ASL 2.0
+792,google-noto-sans-khmer-fonts,Yes,ASL 2.0
+793,google-noto-sans-khmer-ui-fonts,Yes,ASL 2.0
+794,google-noto-sans-lao-fonts,Yes,ASL 2.0
+795,google-noto-sans-lao-ui-fonts,Yes,ASL 2.0
+796,google-noto-sans-tamil-fonts,Yes,ASL 2.0
+797,google-noto-sans-tamil-ui-fonts,Yes,ASL 2.0
+798,google-noto-sans-thai-fonts,Yes,ASL 2.0
+799,google-noto-sans-thai-ui-fonts,Yes,ASL 2.0
+800,google-noto-sans-ui-fonts,Yes,ASL 2.0
+801,google-noto-serif-armenian-fonts,Yes,ASL 2.0
+802,google-noto-serif-fonts,Yes,ASL 2.0
+803,google-noto-serif-georgian-fonts,Yes,ASL 2.0
+804,google-noto-serif-lao-fonts,Yes,ASL 2.0
+805,google-noto-serif-thai-fonts,Yes,ASL 2.0
+806,gperftools-libs,No,BSD
+807,gpgme,No,LGPLv2+
+808,gpm,Yes,GPLv2 and GPLv2+ with exceptions and GPLv3+ and Verbatim and Copyright only
+809,gpm-libs,No,GPLv2 and GPLv2+ with exceptions and GPLv3+ and Verbatim and Copyright only
+810,grantlee,No,LGPLv2+
+811,graphite2,No,(LGPLv2+ or GPLv2+ or MPL) and (Netscape or GPLv2+ or LGPLv2+)
+812,graphite2-devel,Yes,(LGPLv2+ or GPLv2+ or MPL) and (Netscape or GPLv2+ or LGPLv2+)
+813,graphviz,No,EPL
+814,graphviz-tcl,No,EPL
+815,grep,No,GPLv3+
+816,grilo,No,LGPLv2+
+817,grilo-plugins,No,LGPLv2+
+818,groff-base,No,GPLv3+ and GFDL and BSD and MIT
+819,grub2,Yes,GPLv3+
+820,grub2-common,No,GPLv3+
+821,grub2-efi-ia32,Yes,GPLv3+
+822,grub2-efi-ia32-modules,Yes,GPLv3+
+823,grub2-efi-x64,Yes,GPLv3+
+824,grub2-efi-x64-modules,Yes,GPLv3+
+825,grub2-pc,Yes,GPLv3+
+826,grub2-pc-modules,No,GPLv3+
+827,grub2-ppc64,Yes,GPLv3+
+828,grub2-ppc64-modules,Yes,GPLv3+
+829,grub2-ppc64le,Yes,GPLv3+
+830,grub2-ppc64le-modules,Yes,GPLv3+
+831,grub2-tools,No,GPLv3+
+832,grub2-tools-extra,No,GPLv3+
+833,grub2-tools-minimal,No,GPLv3+
+834,grubby,No,GPLv2+
+835,gsettings-desktop-schemas,No,LGPLv2+
+836,gsettings-desktop-schemas-devel,No,LGPLv2+
+837,gsl,No,GPLv3 and GFDL and BSD
+838,gsl-devel,Yes,GPLv3 and GFDL and BSD
+839,gsm,No,MIT
+840,gsound,No,LGPLv2
+841,gspell,No,LGPLv2+
+842,gssdp,No,LGPLv2+
+843,gssproxy,Yes,MIT
+844,gstreamer,No,LGPLv2+
+845,gstreamer-plugins-bad-free,Yes,LGPLv2+ and LGPLv2
+846,gstreamer-plugins-base,No,LGPLv2+
+847,gstreamer-plugins-good,Yes,LGPLv2+
+848,gstreamer-tools,No,LGPLv2+
+849,gstreamer1,No,LGPLv2+
+850,gstreamer1-devel,Yes,LGPLv2+
+851,gstreamer1-plugins-bad-free,Yes,LGPLv2+ and LGPLv2
+852,gstreamer1-plugins-base,No,LGPLv2+
+853,gstreamer1-plugins-base-devel,Yes,LGPLv2+
+854,gstreamer1-plugins-good,Yes,LGPLv2+
+855,gstreamer1-plugins-ugly-free,Yes,LGPLv2+ and LGPLv2
+856,gtk-update-icon-cache,No,LGPLv2+
+857,gtk-vnc2,No,LGPLv2+
+858,gtk2,No,LGPLv2+
+859,gtk2-devel,No,LGPLv2+
+860,gtk2-devel-docs,Yes,LGPLv2+
+861,gtk2-immodule-xim,Yes,LGPLv2+
+862,gtk3,No,LGPLv2+
+863,gtk3-devel,Yes,LGPLv2+
+864,gtk3-immodule-xim,Yes,LGPLv2+
+865,gtkmm24,No,LGPLv2+
+866,gtkmm30,No,LGPLv2+
+867,gtksourceview3,No,LGPLv2+
+868,gtkspell,No,GPLv2+
+869,gtkspell3,No,GPLv2+
+870,guava,No,ASL 2.0
+871,gubbi-fonts,Yes,OFL
+872,gucharmap,Yes,GPLv3+ and GFDL and MIT
+873,gucharmap-libs,No,GPLv3+ and GFDL and MIT
+874,gupnp,No,LGPLv2+
+875,gupnp-av,No,LGPLv2+
+876,gupnp-dlna,No,LGPLv2+
+877,gupnp-igd,No,LGPLv2+
+878,gutenprint,Yes,GPLv2+
+879,gutenprint-cups,Yes,GPLv2+
+880,gutenprint-plugin,Yes,GPLv2+
+881,gvfs,No,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+882,gvfs-afc,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+883,gvfs-afp,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+884,gvfs-archive,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+885,gvfs-client,No,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+886,gvfs-devel,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+887,gvfs-fuse,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+888,gvfs-goa,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+889,gvfs-gphoto2,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+890,gvfs-mtp,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+891,gvfs-smb,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+892,gvnc,No,LGPLv2+
+893,gwenview,Yes,GPLv2+
+894,gwenview-libs,No,IJG and LGPLv2+ and GPLv2+ and LGPLv2 or LGPLv3
+895,gzip,No,GPLv3+ and GFDL
+896,hamcrest,No,BSD
+897,haproxy,Yes,GPLv2+
+898,hardlink,Yes,GPL+
+899,harfbuzz,No,MIT
+900,harfbuzz-devel,No,MIT
+901,harfbuzz-icu,No,MIT
+902,hawkey,No,LGPLv2+
+903,hdparm,Yes,BSD
+904,hesiod,No,MIT
+905,hexedit,No,GPLv2+
+906,hicolor-icon-theme,No,GPL+
+907,highcontrast-qt5,No,GPLv2+ and MIT
+908,hivex,No,LGPLv2
+909,hmaccalc,Yes,BSD
+910,hostname,Yes,GPLv2+
+911,hpijs,Yes,BSD
+912,hplip,Yes,GPLv2+ and MIT
+913,hplip-common,No,GPLv2+
+914,hplip-gui,Yes,BSD
+915,hplip-libs,No,GPLv2+ and MIT
+916,hsakmt,No,MIT and GPLv2
+917,hsqldb,No,BSD
+918,http-parser,No,MIT
+919,httpcomponents-client,No,ASL 2.0
+920,httpcomponents-core,No,ASL 2.0 and CC-BY
+921,httpd,Yes,ASL 2.0
+922,httpd-devel,Yes,ASL 2.0
+923,httpd-manual,Yes,ASL 2.0
+924,httpd-tools,No,ASL 2.0
+925,hunspell,Yes,LGPLv2+ or GPLv2+ or MPLv1.1
+926,hunspell-af,No,LGPLv2+
+927,hunspell-ak,No,LGPLv3
+928,hunspell-am,No,GPL+
+929,hunspell-ar,No,GPLv2 or LGPLv2 or MPLv1.1
+930,hunspell-as,No,GPLv2+ or LGPLv2+ or MPLv1.1
+931,hunspell-ast,No,GPLv3+
+932,hunspell-az,No,GPLv2+
+933,hunspell-be,No,GPL+ and LGPLv2+
+934,hunspell-ber,No,GPL+ or LGPLv2+ or MPLv1.1
+935,hunspell-bg,No,GPLv2+ or LGPLv2+ or MPLv1.1
+936,hunspell-bn,No,GPLv2+
+937,hunspell-br,No,LGPLv2+
+938,hunspell-ca,No,GPLv2+
+939,hunspell-cop,No,GPLv3+
+940,hunspell-cs,No,GPL+
+941,hunspell-csb,No,GPLv2+
+942,hunspell-cv,No,LGPLv2+
+943,hunspell-cy,No,GPL+
+944,hunspell-da,No,GPLv2+
+945,hunspell-de,No,GPLv2 or GPLv3
+946,hunspell-devel,Yes,LGPLv2+ or GPLv2+ or MPLv1.1
+947,hunspell-dsb,No,GPLv2+
+948,hunspell-el,No,GPLv2+ or LGPLv2+ or MPLv1.1
+949,hunspell-en,Yes,LGPLv2+ and LGPLv2 and BSD
+950,hunspell-en-GB,No,LGPLv2+ and LGPLv2 and BSD
+951,hunspell-en-US,No,LGPLv2+ and LGPLv2 and BSD
+952,hunspell-eo,No,LGPLv3
+953,hunspell-es,No,LGPLv3+ or GPLv3+ or MPLv1.1
+954,hunspell-et,No,LGPLv2+ and LPPL
+955,hunspell-eu,No,GPLv2
+956,hunspell-fa,No,GPLv2+
+957,hunspell-fj,No,LGPLv2+ or GPLv2+ or MPLv1.1
+958,hunspell-fo,No,GPLv2+
+959,hunspell-fr,No,MPLv2.0
+960,hunspell-fur,No,GPLv2+
+961,hunspell-fy,No,LGPLv2+
+962,hunspell-ga,No,GPLv2+
+963,hunspell-gd,No,GPLv2+ and GPLv3+
+964,hunspell-gl,No,GPLv2
+965,hunspell-grc,No,GPL+ or LGPLv2+
+966,hunspell-gu,No,GPL+
+967,hunspell-gv,No,GPL+
+968,hunspell-haw,No,GPLv2+
+969,hunspell-he,No,AGPLv3
+970,hunspell-hi,No,GPLv2+
+971,hunspell-hil,No,GPLv3+
+972,hunspell-hr,No,LGPLv2+ or SISSL
+973,hunspell-hsb,No,GPLv2+
+974,hunspell-ht,No,GPLv3+
+975,hunspell-hu,No,LGPLv2+ or GPLv2+ or MPLv1.1
+976,hunspell-hy,No,GPLv2+
+977,hunspell-ia,No,LGPLv2+
+978,hunspell-id,No,GPLv2
+979,hunspell-is,No,GPLv2+
+980,hunspell-it,No,GPLv3+
+981,hunspell-kk,No,GPLv2+ or LGPLv2+ or MPLv1.1
+982,hunspell-km,No,GPLv3
+983,hunspell-kn,No,GPLv2+ or LGPLv2+ or MPLv1.1
+984,hunspell-ko,No,MPLv1.1 or GPLv2 or LGPLv2
+985,hunspell-ku,No,GPLv3 or LGPLv3 or MPLv1.1
+986,hunspell-ky,No,GPLv2+
+987,hunspell-la,No,GPLv2+ and LGPLv2+
+988,hunspell-lb,No,EUPL 1.1
+989,hunspell-ln,No,GPLv2+
+990,hunspell-lt,No,BSD
+991,hunspell-lv,No,LGPLv2+
+992,hunspell-mai,No,GPLv2+ or LGPLv2+ or MPLv1.1
+993,hunspell-mg,No,GPLv2+
+994,hunspell-mi,No,GPLv3+
+995,hunspell-mk,No,GPL+
+996,hunspell-ml,No,GPLv3+
+997,hunspell-mn,No,GPLv2 and LGPLv2+
+998,hunspell-mos,No,LGPLv3
+999,hunspell-mr,No,LGPLv2+
+1000,hunspell-ms,No,GFDL and GPL+
+1001,hunspell-mt,No,LGPLv2+
+1002,hunspell-nb,No,GPL+
+1003,hunspell-nds,No,GPLv2+
+1004,hunspell-ne,No,LGPLv2
+1005,hunspell-nl,No,BSD or CC-BY
+1006,hunspell-nn,No,GPL+
+1007,hunspell-nr,No,LGPLv2+
+1008,hunspell-nso,No,LGPLv2+
+1009,hunspell-ny,No,GPLv3+
+1010,hunspell-oc,No,GPLv3+
+1011,hunspell-om,No,LGPLv3+
+1012,hunspell-or,No,GPLv2+
+1013,hunspell-pa,No,GPLv2+
+1014,hunspell-pl,No,LGPLv2+ or GPL+ or MPLv1.1 or CC-BY-SA
+1015,hunspell-pt,No,((LGPLv3 or MPL) and LGPLv2) and (GPLv2 or LGPLv2 or MPLv1.1)
+1016,hunspell-qu,No,AGPLv3
+1017,hunspell-quh,No,GPLv2+
+1018,hunspell-ro,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1019,hunspell-ru,No,BSD
+1020,hunspell-rw,No,GPLv2+
+1021,hunspell-sc,No,AGPLv3+ and GPLv2
+1022,hunspell-se,No,GPLv3
+1023,hunspell-shs,No,GPLv2+
+1024,hunspell-si,No,GPLv2+
+1025,hunspell-sk,No,LGPLv2 or GPLv2 or MPLv1.1
+1026,hunspell-sl,No,GPL+ or LGPLv2+
+1027,hunspell-smj,No,GPLv3
+1028,hunspell-so,No,GPLv2+
+1029,hunspell-sq,No,GPLv2+
+1030,hunspell-sr,No,LGPLv3
+1031,hunspell-ss,No,LGPLv2+
+1032,hunspell-st,No,LGPLv2+
+1033,hunspell-sv,No,LGPLv3
+1034,hunspell-sw,No,LGPLv2+
+1035,hunspell-ta,No,GPLv2+
+1036,hunspell-te,No,GPL+
+1037,hunspell-tet,No,GPLv2+
+1038,hunspell-th,No,LGPLv2+
+1039,hunspell-ti,No,GPL+
+1040,hunspell-tk,No,GPLv2+
+1041,hunspell-tl,No,GPLv2+
+1042,hunspell-tn,No,GPLv2+
+1043,hunspell-tpi,No,GPLv3+
+1044,hunspell-ts,No,LGPLv2+
+1045,hunspell-uk,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1046,hunspell-ur,No,LGPLv2+
+1047,hunspell-uz,No,GPLv2+
+1048,hunspell-ve,No,LGPLv2+
+1049,hunspell-vi,No,GPL+
+1050,hunspell-wa,No,LGPLv2+
+1051,hunspell-xh,No,LGPLv2+
+1052,hunspell-yi,No,LGPLv2+ or GPLv2+ or MPLv1.1
+1053,hunspell-zu,No,GPLv3+
+1054,hwdata,No,GPLv2+
+1055,hwloc,Yes,BSD
+1056,hwloc-libs,No,BSD
+1057,hyperv-daemons,Yes,GPLv2
+1058,hyperv-daemons-license,No,GPLv2
+1059,hypervfcopyd,No,GPLv2
+1060,hypervkvpd,No,GPLv2
+1061,hypervvssd,No,GPLv2
+1062,hyphen,No,GPLv2 or LGPLv2+ or MPLv1.1
+1063,hyphen-af,No,LGPLv2+ and GPL+
+1064,hyphen-as,No,LGPLv3+
+1065,hyphen-be,No,GPL+ and LGPLv2+
+1066,hyphen-bg,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1067,hyphen-bn,No,LGPLv3+
+1068,hyphen-ca,No,GPLv3
+1069,hyphen-cs,No,GPL+
+1070,hyphen-cy,No,LPPL
+1071,hyphen-da,No,LGPLv2+
+1072,hyphen-de,No,LGPLv2+
+1073,hyphen-el,No,LGPLv2+
+1074,hyphen-en,No,GPLv2 or LGPLv2+ or MPLv1.1
+1075,hyphen-es,No,LGPLv2+
+1076,hyphen-et,No,LGPLv2+ and LPPL
+1077,hyphen-eu,No,LPPL
+1078,hyphen-fa,No,LPPL
+1079,hyphen-fo,No,GPL+
+1080,hyphen-fr,No,LGPLv2+
+1081,hyphen-ga,No,GPL+
+1082,hyphen-gl,No,GPLv3
+1083,hyphen-grc,No,LPPL
+1084,hyphen-gu,No,LGPLv3+
+1085,hyphen-hi,No,LGPLv3+
+1086,hyphen-hr,No,LGPLv2+ or SISSL
+1087,hyphen-hsb,No,LPPL
+1088,hyphen-hu,No,GPLv2
+1089,hyphen-ia,No,LPPL
+1090,hyphen-id,No,GPL+
+1091,hyphen-is,No,LGPLv2+ or SISSL
+1092,hyphen-it,No,LGPLv2+
+1093,hyphen-kn,No,LGPLv3+
+1094,hyphen-ku,No,LGPLv2+
+1095,hyphen-lt,No,LPPL
+1096,hyphen-lv,No,LGPLv2+
+1097,hyphen-mi,No,GPLv3+
+1098,hyphen-ml,No,LGPLv3+
+1099,hyphen-mn,No,LPPL
+1100,hyphen-mr,No,LGPLv3+
+1101,hyphen-nb,No,GPL+
+1102,hyphen-nl,No,GPLv2
+1103,hyphen-nn,No,GPL+
+1104,hyphen-or,No,LGPLv3+
+1105,hyphen-pa,No,LGPLv3+
+1106,hyphen-pl,No,LGPLv2+
+1107,hyphen-pt,No,GPL+
+1108,hyphen-ro,No,GPLv2+
+1109,hyphen-ru,No,LGPLv2+
+1110,hyphen-sa,No,LPPL
+1111,hyphen-sk,No,GPL+
+1112,hyphen-sl,No,LGPLv2+
+1113,hyphen-sr,No,LGPLv3
+1114,hyphen-sv,No,LGPLv2+ or GPLv2+
+1115,hyphen-ta,No,LGPLv3+
+1116,hyphen-te,No,LGPLv3+
+1117,hyphen-tk,No,Public Domain
+1118,hyphen-uk,No,GPLv2+
+1119,hyphen-zu,No,LGPLv2+ and GPL+
+1120,i2c-tools,Yes,GPLv2+
+1121,ibacm,Yes,GPLv2 or BSD
+1122,ibus,No,LGPLv2+
+1123,ibus-chewing,Yes,GPLv2+
+1124,ibus-gtk2,Yes,LGPLv2+
+1125,ibus-gtk3,Yes,LGPLv2+
+1126,ibus-hangul,Yes,GPLv2+
+1127,ibus-kkc,Yes,GPLv2+
+1128,ibus-libpinyin,Yes,GPLv2+
+1129,ibus-libs,No,LGPLv2+
+1130,ibus-m17n,Yes,GPLv2+
+1131,ibus-qt,Yes,GPLv2+
+1132,ibus-rawcode,Yes,GPLv2+
+1133,ibus-sayura,Yes,GPLv2+
+1134,ibus-setup,No,LGPLv2+
+1135,ibus-table,Yes,LGPLv2+
+1136,ibus-table-chinese,Yes,GPLv3+
+1137,ibus-typing-booster,Yes,GPLv3+
+1138,ibutils,Yes,GPLv2 or BSD
+1139,ibutils-libs,No,GPLv2 or BSD
+1140,icedax,No,GPLv2
+1141,icedtea-web,Yes,LGPLv2+ and GPLv2 with exceptions
+1142,icoutils,No,GPLv3+
+1143,ilmbase,No,BSD
+1144,im-chooser,No,GPLv2+ and LGPLv2+
+1145,im-chooser-common,No,GPLv2+ and LGPLv2+
+1146,ima-evm-utils,Yes,GPLv2
+1147,ImageMagick,Yes,ImageMagick
+1148,ImageMagick-c++,No,ImageMagick
+1149,ImageMagick-perl,Yes,ImageMagick
+1150,imake,Yes,MIT
+1151,imsettings,No,LGPLv2+
+1152,imsettings-gsettings,Yes,LGPLv2+
+1153,imsettings-libs,No,LGPLv2+
+1154,imsettings-qt,Yes,LGPLv2+
+1155,indent,Yes,GPLv3+
+1156,infiniband-diags,Yes,GPLv2 or BSD
+1157,infinipath-psm,No,BSD or GPLv2
+1158,info,No,GPLv3+
+1159,iniparser,No,MIT
+1160,initial-setup,Yes,GPLv2+
+1161,initial-setup-gui,Yes,GPLv2+
+1162,initscripts,Yes,GPLv2 and GPLv2+
+1163,inkscape,Yes,GPLv2+
+1164,insights-client,Yes,GPLv2+
+1165,intel-cmt-cat,Yes,BSD
+1166,intltool,Yes,GPLv2 with exceptions
+1167,iok,Yes,GPLv2+
+1168,iotop,Yes,GPLv2+
+1169,iowatcher,Yes,GPLv2
+1170,ipa-client,Yes,GPLv3+
+1171,ipa-client-common,No,GPLv3+
+1172,ipa-common,No,GPLv3+
+1173,ipa-gothic-fonts,Yes,IPA
+1174,ipa-mincho-fonts,Yes,IPA
+1175,ipa-pgothic-fonts,Yes,IPA
+1176,ipa-pmincho-fonts,Yes,IPA
+1177,ipa-python-compat,No,GPLv3+
+1178,ipa-server,Yes,GPLv3+
+1179,ipa-server-common,No,GPLv3+
+1180,ipa-server-dns,Yes,GPLv3+
+1181,ipa-server-trust-ad,Yes,GPLv3+
+1182,iperf3,Yes,BSD
+1183,ipmitool,Yes,BSD
+1184,iproute,Yes,GPLv2+ and Public Domain
+1185,iprutils,Yes,CPL
+1186,ipset,Yes,GPLv2
+1187,ipset-libs,No,GPLv2
+1188,ipset-service,No,GPLv2
+1189,ipsilon,No,GPLv3+ and MIT
+1190,ipsilon-authform,No,GPLv3+
+1191,ipsilon-authgssapi,No,GPLv3+
+1192,ipsilon-authldap,No,GPLv3+
+1193,ipsilon-base,No,GPLv3+
+1194,ipsilon-client,No,GPLv3+
+1195,ipsilon-filesystem,No,GPLv3+
+1196,ipsilon-infosssd,No,GPLv3+
+1197,ipsilon-persona,No,GPLv3+
+1198,ipsilon-saml2,No,GPLv3+
+1199,ipsilon-saml2-base,No,GPLv3+
+1200,ipsilon-tools-ipa,No,GPLv3+
+1201,iptables,Yes,GPLv2
+1202,iptables-devel,Yes,GPLv2
+1203,iptables-services,No,GPLv2
+1204,iptraf-ng,Yes,GPLv2+
+1205,iptstate,Yes,zlib
+1206,iputils,Yes,BSD and GPLv2+
+1207,ipvsadm,Yes,GPLv2+
+1208,ipxe-bootimgs,No,GPLv2 and BSD
+1209,ipxe-roms-qemu,No,GPLv2 and BSD
+1210,irqbalance,Yes,GPLv2
+1211,irssi,Yes,GPLv2+
+1212,iscsi-initiator-utils,Yes,GPLv2+
+1213,iscsi-initiator-utils-iscsiuio,No,BSD
+1214,isdn4k-utils,Yes,GPLv2+ and GPL+ and MIT and BSD and zlib
+1215,isns-utils,Yes,LGPLv2+
+1216,iso-codes,No,LGPLv2+
+1217,isomd5sum,No,GPLv2+
+1218,isorelax,No,MIT and ASL 1.1
+1219,istack-commons,No,CDDL and GPLv2 with exceptions
+1220,itstool,No,GPLv3+
+1221,ivtv-firmware,Yes,"Redistributable, no modification permitted"
+1222,iw,No,ISC
+1223,iwl100-firmware,Yes,"Redistributable, no modification permitted"
+1224,iwl1000-firmware,Yes,"Redistributable, no modification permitted"
+1225,iwl105-firmware,Yes,"Redistributable, no modification permitted"
+1226,iwl135-firmware,Yes,"Redistributable, no modification permitted"
+1227,iwl2000-firmware,Yes,"Redistributable, no modification permitted"
+1228,iwl2030-firmware,Yes,"Redistributable, no modification permitted"
+1229,iwl3160-firmware,Yes,"Redistributable, no modification permitted"
+1230,iwl3945-firmware,Yes,"Redistributable, no modification permitted"
+1231,iwl4965-firmware,Yes,"Redistributable, no modification permitted"
+1232,iwl5000-firmware,Yes,"Redistributable, no modification permitted"
+1233,iwl5150-firmware,Yes,"Redistributable, no modification permitted"
+1234,iwl6000-firmware,Yes,"Redistributable, no modification permitted"
+1235,iwl6000g2a-firmware,Yes,"Redistributable, no modification permitted"
+1236,iwl6000g2b-firmware,Yes,"Redistributable, no modification permitted"
+1237,iwl6050-firmware,Yes,"Redistributable, no modification permitted"
+1238,iwl7260-firmware,Yes,"Redistributable, no modification permitted"
+1239,iwpmd,Yes,GPLv2 or BSD
+1240,ixpdimm_sw,No,BSD
+1241,jackson,No,ASL 2.0 or LGPLv2
+1242,jakarta-commons-httpclient,No,ASL 2.0 and (ASL 2.0 or LGPLv2+)
+1243,jakarta-oro,No,ASL 1.1
+1244,jakarta-taglibs-standard,No,ASL 2.0
+1245,jansson,No,MIT
+1246,jasper-libs,No,JasPer
+1247,java-1.6.0-openjdk,Yes,"ASL 1.1, ASL 2.0, GPL+, GPLv2, GPLv2 with exceptions, LGPL+, LGPLv2, MPLv1.0, MPLv1.1, Public Domain, W3C"
+1248,java-1.6.0-openjdk-devel,Yes,"ASL 1.1, ASL 2.0, GPL+, GPLv2, GPLv2 with exceptions, LGPL+, LGPLv2, MPLv1.0, MPLv1.1, Public Domain, W3C"
+1249,java-1.7.0-openjdk,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv1.1 and MPLv2.0 and Public Domain and W3C and zlib
+1250,java-1.7.0-openjdk-devel,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv1.1 and MPLv2.0 and Public Domain and W3C and zlib
+1251,java-1.7.0-openjdk-headless,No,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv1.1 and MPLv2.0 and Public Domain and W3C and zlib
+1252,java-1.8.0-openjdk,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1253,java-1.8.0-openjdk-devel,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1254,java-1.8.0-openjdk-headless,No,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1255,java-11-openjdk,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1256,java-11-openjdk-devel,No,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1257,java-11-openjdk-headless,No,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1258,java-atk-wrapper,No,LGPLv2+
+1259,javamail,No,CDDL or GPLv2 with exceptions
+1260,javapackages-tools,Yes,BSD
+1261,javassist,No,MPLv1.1 or LGPLv2+ or ASL 2.0
+1262,jaxen,No,BSD
+1263,jbigkit-libs,No,GPLv2+
+1264,jboss-annotations-1.1-api,No,CDDL or GPLv2 with exceptions
+1265,jdom,No,ASL 1.1
+1266,jettison,No,ASL 2.0
+1267,jing,No,BSD
+1268,jline,No,BSD
+1269,jna,No,LGPLv2+ and ASL 2.0
+1270,joda-convert,No,ASL 2.0
+1271,joda-time,No,ASL 2.0
+1272,jomolhari-fonts,Yes,OFL
+1273,jose,No,ASL 2.0
+1274,js,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1275,json-c,No,MIT
+1276,json-glib,No,LGPLv2+
+1277,json-glib-devel,No,LGPLv2+
+1278,jsr-311,No,CDDL
+1279,jss,No,MPLv1.1 or GPLv2+ or LGPLv2+
+1280,junit,Yes,CPL
+1281,jvnet-parent,No,ASL 2.0
+1282,kabi-yum-plugins,Yes,GPLv2
+1283,kaccessible,No,LGPLv2+
+1284,kaccessible-libs,No,LGPLv2+
+1285,kacst-art-fonts,Yes,GPLv2
+1286,kacst-book-fonts,Yes,GPLv2
+1287,kacst-decorative-fonts,Yes,GPLv2
+1288,kacst-digital-fonts,Yes,GPLv2
+1289,kacst-farsi-fonts,Yes,GPLv2
+1290,kacst-fonts-common,No,GPLv2
+1291,kacst-letter-fonts,Yes,GPLv2
+1292,kacst-naskh-fonts,Yes,GPLv2
+1293,kacst-office-fonts,Yes,GPLv2
+1294,kacst-one-fonts,Yes,GPLv2
+1295,kacst-pen-fonts,Yes,GPLv2
+1296,kacst-poster-fonts,Yes,GPLv2
+1297,kacst-qurn-fonts,Yes,GPLv2
+1298,kacst-screen-fonts,Yes,GPLv2
+1299,kacst-title-fonts,Yes,GPLv2
+1300,kacst-titlel-fonts,Yes,GPLv2
+1301,kactivities,No,GPLv2+ and LGPLv2+
+1302,kamera,Yes,GPLv2
+1303,kate-part,No,LGPLv2
+1304,kbd,Yes,GPLv2+
+1305,kbd-legacy,No,GPLv2+
+1306,kbd-misc,No,GPLv2+
+1307,kcalc,Yes,GPLv2+
+1308,kcharselect,Yes,GPLv2+
+1309,kcm-gtk,Yes,GPLv2+
+1310,kcm_colors,No,GPLv2
+1311,kcm_touchpad,Yes,GPLv2
+1312,kcolorchooser,Yes,BSD
+1313,kde-base-artwork,Yes,LGPLv3+
+1314,kde-baseapps,Yes,GPLv2
+1315,kde-baseapps-libs,No,GPLv2
+1316,kde-filesystem,No,Public Domain
+1317,kde-l10n,No,LGPLv2
+1318,kde-plasma-networkmanagement,Yes,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and LGPLv2
+1319,kde-plasma-networkmanagement-libs,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and LGPLv2
+1320,kde-print-manager,Yes,GPLv2+
+1321,kde-runtime,Yes,LGPLv2+ and GPLv2+
+1322,kde-runtime-drkonqi,No,LGPLv2+ and GPLv2+
+1323,kde-runtime-libs,No,LGPLv2+ and GPLv2+
+1324,kde-settings,No,MIT
+1325,kde-settings-ksplash,No,MIT
+1326,kde-settings-plasma,No,MIT
+1327,kde-settings-pulseaudio,Yes,Public Domain
+1328,kde-style-oxygen,No,GPLv2
+1329,kde-workspace,Yes,GPLv2
+1330,kde-workspace-devel,Yes,GPLv2
+1331,kde-workspace-libs,No,GPLv2
+1332,kdeaccessibility,Yes,GPLv2
+1333,kdeadmin,Yes,GPLv2
+1334,kdegraphics-devel,Yes,GPLv2
+1335,kdegraphics-libs,No,GPLv2
+1336,kdegraphics-strigi-analyzer,Yes,LGPLv2+ and GPLv2
+1337,kdegraphics-thumbnailers,Yes,GPLv2+
+1338,kdelibs,Yes,LGPLv2+
+1339,kdelibs-common,No,LGPLv2+
+1340,kdelibs-devel,Yes,LGPLv2+
+1341,kdelibs-ktexteditor,No,LGPLv2+
+1342,kdenetwork-common,No,GPLv2
+1343,kdenetwork-devel,Yes,GPLv2
+1344,kdenetwork-kdnssd,Yes,GPLv2
+1345,kdenetwork-kget,Yes,GPLv2
+1346,kdenetwork-kget-libs,No,GPLv2
+1347,kdenetwork-kopete,No,GPLv2
+1348,kdenetwork-kopete-devel,No,GPLv2
+1349,kdenetwork-kopete-libs,No,GPLv2
+1350,kdenetwork-krdc,Yes,GPLv2
+1351,kdenetwork-krdc-devel,No,GPLv2
+1352,kdenetwork-krdc-libs,No,GPLv2
+1353,kdenetwork-krfb,Yes,GPLv2
+1354,kdenetwork-krfb-libs,No,GPLv2
+1355,kdepim,Yes,GPLv2
+1356,kdepim-devel,Yes,GPLv2
+1357,kdepim-libs,No,GPLv2
+1358,kdepim-runtime,No,GPLv2
+1359,kdepim-runtime-libs,No,GPLv2
+1360,kdepimlibs,No,LGPLv2+
+1361,kdepimlibs-akonadi,No,LGPLv2+
+1362,kdepimlibs-devel,Yes,LGPLv2+
+1363,kdepimlibs-kxmlrpcclient,No,BSD
+1364,kdeplasma-addons,Yes,GPLv2+
+1365,kdeplasma-addons-libs,No,GPLv2+
+1366,kdesdk-common,No,GPLv2+ and GFDL
+1367,kdesdk-devel,Yes,GPLv2+ and GFDL
+1368,kdesdk-kmtrace,No,GPLv2+ and GFDL
+1369,kdesdk-kmtrace-devel,No,GPLv2+ and GFDL
+1370,kdesdk-kmtrace-libs,No,GPLv2+ and GFDL
+1371,kdesdk-kompare,No,GPLv2+ and GFDL
+1372,kdesdk-kompare-devel,No,GPLv2+ and GFDL
+1373,kdesdk-kompare-libs,No,GPLv2+ and GFDL
+1374,kdesdk-okteta,No,GPLv2+ and GFDL
+1375,kdesdk-okteta-devel,No,GPLv2+ and GFDL
+1376,kdesdk-okteta-libs,No,GPLv2+ and GFDL
+1377,kdeutils-minimal,Yes,GPLv2
+1378,kdf,No,GPLv2+
+1379,keepalived,Yes,GPLv2+
+1380,kernel,No,GPLv2
+1381,kernel-abi-whitelists,No,GPLv2
+1382,kernel-bootwrapper,No,GPLv2
+1383,kernel-debug,No,GPLv2
+1384,kernel-debug-devel,No,GPLv2
+1385,kernel-devel,No,GPLv2
+1386,kernel-doc,No,GPLv2
+1387,kernel-headers,No,GPLv2
+1388,kernel-kdump,No,GPLv2
+1389,kernel-kdump-devel,No,GPLv2
+1390,kernel-tools,Yes,GPLv2
+1391,kernel-tools-libs,No,GPLv2
+1392,kexec-tools,Yes,GPLv2
+1393,keybinder3,No,MIT
+1394,keycloak-httpd-client-install,Yes,GPLv3
+1395,keyutils,No,GPLv2+ and LGPLv2+
+1396,keyutils-libs,No,GPLv2+ and LGPLv2+
+1397,keyutils-libs-devel,No,GPLv2+ and LGPLv2+
+1398,kgpg,Yes,GPLv2+
+1399,kgreeter-plugins,No,GPLv2
+1400,khmeros-base-fonts,Yes,LGPLv2+
+1401,khmeros-battambang-fonts,Yes,LGPLv2+
+1402,khmeros-bokor-fonts,Yes,LGPLv2+
+1403,khmeros-fonts-common,No,LGPLv2+
+1404,khmeros-handwritten-fonts,Yes,LGPLv2+
+1405,khmeros-metal-chrieng-fonts,Yes,LGPLv2+
+1406,khmeros-muol-fonts,Yes,LGPLv2+
+1407,khmeros-siemreap-fonts,Yes,LGPLv2+
+1408,khotkeys,No,GPLv2
+1409,khotkeys-libs,No,GPLv2
+1410,kinfocenter,No,GPLv2
+1411,kio_sysinfo,No,GPLv2+
+1412,kmag,No,GPLv2
+1413,kmenuedit,No,GPLv2
+1414,kmix,Yes,GPLv2+ and GFDL
+1415,kmod,No,GPLv2+
+1416,kmod-kvdo,Yes,GPLv2+
+1417,kmod-libs,No,LGPLv2+
+1418,kmod-oracleasm,No,GPLv2
+1419,konkretcmpi,No,MIT
+1420,konkretcmpi-python,No,MIT
+1421,konsole,Yes,GPLv2 and GFDL
+1422,konsole-part,No,GPLv2 and GFDL
+1423,kpartx,No,GPL+
+1424,kpatch,Yes,GPLv2
+1425,krb5-devel,Yes,MIT
+1426,krb5-libs,No,MIT
+1427,krb5-pkinit,Yes,MIT
+1428,krb5-server,Yes,MIT
+1429,krb5-server-ldap,Yes,MIT
+1430,krb5-workstation,Yes,MIT
+1431,kruler,Yes,GPLv2 and GFDL
+1432,ksaneplugin,Yes,LGPLv2+
+1433,ksc,Yes,GPLv2+
+1434,kscreen,No,GPLv2 or GPLv3
+1435,ksh,Yes,EPL
+1436,ksnapshot,Yes,GPLv2+
+1437,ksshaskpass,Yes,GPLv2
+1438,ksysguard,Yes,GPLv2
+1439,ksysguard-libs,No,GPLv2
+1440,ksysguardd,No,GPLv2
+1441,ktimer,No,GPLv2+
+1442,kurdit-unikurd-web-fonts,Yes,GPLv3
+1443,kwallet,Yes,GPLv2+
+1444,kwin,No,GPLv2
+1445,kwin-gles-libs,No,GPLv2
+1446,kwin-libs,No,GPLv2
+1447,kwrite,Yes,LGPLv2+
+1448,langtable,No,GPLv3+
+1449,langtable-data,No,GPLv3+ and MIT
+1450,langtable-python,No,GPLv3+
+1451,lapack,Yes,BSD
+1452,lasso,No,GPLv2+
+1453,lasso-python,No,GPLv2+
+1454,latencytop,Yes,GPLv2
+1455,latencytop-common,No,GPLv2
+1456,latencytop-tui,Yes,GPLv2
+1457,latrace,Yes,GPLv3+
+1458,lcms2,No,MIT
+1459,ldapjdk,Yes,MPLv1.1 or GPLv2+ or LGPLv2+
+1460,ldns,No,BSD
+1461,ledmon,Yes,GPLv2+
+1462,less,Yes,GPLv3+
+1463,lftp,Yes,GPLv3+
+1464,libacl,No,LGPLv2+
+1465,libacl-devel,Yes,LGPLv2+
+1466,libaio,Yes,LGPLv2+
+1467,libaio-devel,Yes,LGPLv2+
+1468,libao,No,GPLv2+
+1469,libappindicator-gtk3,Yes,LGPLv2 and LGPLv3
+1470,libappstream-glib,No,LGPLv2+
+1471,libarchive,No,BSD
+1472,libart_lgpl,No,LGPLv2+
+1473,libassuan,No,LGPLv2+ and GPLv3+
+1474,libasyncns,No,LGPLv2+
+1475,libatasmart,No,LGPLv2+
+1476,libatomic,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1477,libatomic-static,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1478,libattr,No,LGPLv2+
+1479,libattr-devel,Yes,LGPLv2+
+1480,libavc1394,No,GPLv2+ and LGPLv2+
+1481,libbasicobjects,No,GPLv3+
+1482,libblkid,No,LGPLv2+
+1483,libblkid-devel,Yes,LGPLv2+
+1484,libblockdev,No,LGPLv2+
+1485,libblockdev-crypto,No,LGPLv2+
+1486,libblockdev-fs,No,LGPLv2+
+1487,libblockdev-loop,No,LGPLv2+
+1488,libblockdev-lvm,No,LGPLv2+
+1489,libblockdev-mdraid,No,LGPLv2+
+1490,libblockdev-nvdimm,No,LGPLv2+
+1491,libblockdev-part,No,LGPLv2+
+1492,libblockdev-swap,No,LGPLv2+
+1493,libblockdev-utils,No,LGPLv2+
+1494,libbluedevil,No,LGPLv2+
+1495,libbluray,No,LGPLv2+
+1496,libbonobo,No,GPLv2+ and LGPLv2+
+1497,libbonoboui,No,LGPLv2+
+1498,libburn,No,GPLv2+
+1499,libbytesize,No,LGPLv2+
+1500,libcacard,No,GPLv2+ and LGPLv2+ and BSD
+1501,libcacard-tools,No,GPLv2+ and LGPLv2+ and BSD
+1502,libcanberra,No,LGPLv2+
+1503,libcanberra-devel,Yes,LGPLv2+
+1504,libcanberra-gtk2,Yes,LGPLv2+
+1505,libcanberra-gtk3,Yes,LGPLv2+
+1506,libcap,No,LGPLv2+
+1507,libcap-devel,Yes,LGPLv2+
+1508,libcap-ng,No,LGPLv2+
+1509,libcap-ng-devel,Yes,LGPLv2+
+1510,libcdio,No,GPLv3+
+1511,libcdio-paranoia,No,GPLv2+ and LGPLv2+
+1512,libcgroup,Yes,LGPLv2+
+1513,libcgroup-tools,Yes,LGPLv2+
+1514,libchamplain,No,LGPLv2+
+1515,libchamplain-gtk,No,LGPLv2+
+1516,libchewing,No,LGPLv2+
+1517,libcmpiCppImpl0,No,EPL
+1518,libcmpiutil,No,LGPLv2+
+1519,libcollection,No,LGPLv3+
+1520,libcom_err,No,MIT
+1521,libcom_err-devel,No,MIT
+1522,libconfig,No,LGPLv2+
+1523,libcroco,No,LGPLv2
+1524,libcryptui,No,LGPLv2+
+1525,libcurl,Yes,MIT
+1526,libcurl-devel,Yes,MIT
+1527,libcxl,No,ASL 2.0
+1528,libdaemon,No,LGPLv2+
+1529,libdb,No,BSD and LGPLv2 and Sleepycat
+1530,libdb-cxx,Yes,BSD and LGPLv2 and Sleepycat
+1531,libdb-devel,Yes,BSD and LGPLv2 and Sleepycat
+1532,libdb-utils,No,BSD and LGPLv2 and Sleepycat
+1533,libdbi,No,LGPLv2+
+1534,libdbi-dbd-mysql,Yes,LGPLv2+
+1535,libdbi-dbd-pgsql,Yes,LGPLv2+
+1536,libdbi-drivers,No,LGPLv2+
+1537,libdbusmenu,No,LGPLv3 or LGPLv2 and GPLv3
+1538,libdbusmenu-gtk3,No,LGPLv3 or LGPLv2 and GPLv3
+1539,libdhash,No,LGPLv3+
+1540,libdmapsharing,No,LGPLv2+
+1541,libdmx,No,MIT
+1542,libdnet,No,BSD
+1543,libdrm,No,MIT
+1544,libdrm-devel,Yes,MIT
+1545,libdv,No,LGPLv2+
+1546,libdvdnav,No,GPLv2+
+1547,libdvdread,No,GPLv2+
+1548,libdwarf,No,LGPLv2
+1549,libeasyfc,No,LGPLv3+
+1550,libeasyfc-gobject,No,LGPLv3+
+1551,libecap,No,BSD
+1552,libedit,No,BSD
+1553,libehca,Yes,GPLv2 or BSD
+1554,libepoxy,No,MIT
+1555,libepoxy-devel,No,MIT
+1556,liberation-fonts,No,Liberation
+1557,liberation-fonts-common,No,Liberation
+1558,liberation-mono-fonts,Yes,Liberation
+1559,liberation-narrow-fonts,Yes,Liberation
+1560,liberation-sans-fonts,Yes,Liberation
+1561,liberation-serif-fonts,Yes,Liberation
+1562,libesmtp,No,LGPLv2+
+1563,libestr,No,LGPLv2+
+1564,libevdev,No,MIT
+1565,libevent,No,BSD
+1566,libexif,No,LGPLv2+
+1567,libfabric,No,GPLv2 or BSD
+1568,libfastjson,No,MIT
+1569,libfdt,No,GPLv2+
+1570,libffi,No,MIT and Public Domain
+1571,libffi-devel,No,MIT and Public Domain
+1572,libfontenc,No,MIT
+1573,libfprint,No,LGPLv2+
+1574,libgcab1,No,LGPLv2+
+1575,libgcc,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1576,libgcrypt,No,LGPLv2+
+1577,libgcrypt-devel,Yes,LGPLv2+ and GPLv2+
+1578,libgdata,No,LGPLv2+
+1579,libgdata-devel,No,LGPLv2+
+1580,libgdither,No,GPLv2+
+1581,libgee,No,LGPLv2+
+1582,libgee06,No,LGPLv2+
+1583,libgexiv2,No,GPLv2+
+1584,libgfortran,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1585,libgfortran4,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1586,libgfortran5,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1587,libglade2,No,LGPLv2+
+1588,libglvnd,No,MIT
+1589,libglvnd-core-devel,No,MIT
+1590,libglvnd-devel,No,MIT
+1591,libglvnd-egl,No,MIT
+1592,libglvnd-gles,No,MIT
+1593,libglvnd-glx,No,MIT
+1594,libglvnd-opengl,No,MIT
+1595,libgnat,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1596,libgnat-devel,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1597,libgnome,No,LGPLv2+
+1598,libgnome-keyring,No,GPLv2+ and LGPLv2+
+1599,libgnome-keyring-devel,Yes,LGPLv2+
+1600,libgnomecanvas,No,LGPLv2+
+1601,libgnomekbd,No,LGPLv2+
+1602,libgnomeui,No,LGPLv2+
+1603,libgomp,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1604,libgovirt,No,LGPLv2+
+1605,libgpg-error,No,LGPLv2+
+1606,libgpg-error-devel,No,LGPLv2+
+1607,libgphoto2,No,GPLv2+ and GPLv2
+1608,libgpod,No,LGPLv2+
+1609,libgs,No,AGPLv3+
+1610,libgsf,No,LGPLv2
+1611,libgtop2,No,GPLv2+
+1612,libgudev1,No,LGPLv2+
+1613,libgudev1-devel,Yes,LGPLv2+
+1614,libguestfs,Yes,LGPLv2+
+1615,libguestfs-inspect-icons,Yes,LGPLv2+
+1616,libguestfs-java,Yes,LGPLv2+
+1617,libguestfs-tools,Yes,GPLv2+
+1618,libguestfs-tools-c,Yes,GPLv2+
+1619,libguestfs-winsupport,No,GPLv2+
+1620,libguestfs-xfs,No,LGPLv2+
+1621,libgusb,No,LGPLv2+
+1622,libgweather,No,GPLv2+
+1623,libgweather-devel,No,GPLv2+
+1624,libgxps,No,LGPLv2+
+1625,libhangul,No,LGPLv2+
+1626,libhbaapi,No,SNIA
+1627,libhbalinux,No,LGPLv2
+1628,libhif,No,LGPLv2+
+1629,libhugetlbfs,Yes,LGPLv2+
+1630,libhugetlbfs-devel,Yes,LGPLv2+
+1631,libhugetlbfs-utils,Yes,LGPLv2+
+1632,libibcommon,Yes,GPLv2 or BSD
+1633,libibmad,Yes,GPLv2 or BSD
+1634,libibumad,Yes,GPLv2 or BSD
+1635,libibverbs,Yes,GPLv2 or BSD
+1636,libibverbs-utils,Yes,GPLv2 or BSD
+1637,libica,No,CPL
+1638,libical,No,LGPLv2 or MPLv2.0
+1639,libical-devel,No,LGPLv2 or MPLv2.0
+1640,libICE,No,MIT
+1641,libICE-devel,Yes,MIT
+1642,libicu,No,MIT and UCD and Public Domain
+1643,libicu-devel,No,MIT and UCD and Public Domain
+1644,libIDL,No,LGPLv2+
+1645,libidn,No,LGPLv2+ and GPLv3+ and GFDL
+1646,libiec61883,No,LGPLv2+
+1647,libieee1284,No,GPLv2+
+1648,libieee1284-devel,No,GPLv2+
+1649,libimobiledevice,No,LGPLv2+
+1650,libindicator-gtk3,No,GPLv3
+1651,libini_config,No,LGPLv3+
+1652,libinput,No,MIT
+1653,libinvm-cim,No,BSD
+1654,libinvm-cli,No,BSD
+1655,libinvm-i18n,No,BSD
+1656,libiodbc,No,LGPLv2 or BSD
+1657,libipa_hbac,No,LGPLv3+
+1658,libiptcdata,No,LGPLv2+
+1659,libiscsi,No,LGPLv2+
+1660,libisofs,No,GPLv2+ and LGPLv2+
+1661,libitm,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1662,libitm-devel,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1663,libjose,No,ASL 2.0
+1664,libjpeg-turbo,Yes,IJG
+1665,libjpeg-turbo-devel,Yes,IJG
+1666,libkadm5,No,MIT
+1667,libkdcraw,No,GPLv2+ and LGPLv2 and GPLv3+
+1668,libkdcraw-devel,No,GPLv2+ and LGPLv2 and GPLv3+
+1669,libkexiv2,No,GPLv2+
+1670,libkexiv2-devel,No,GPLv2+
+1671,libkipi,No,GPLv2+
+1672,libkipi-devel,No,GPLv2+
+1673,libkkc,No,GPLv3+
+1674,libkkc-common,No,GPLv3+
+1675,libkkc-data,No,GPLv3+
+1676,libksane,No,LGPLv2+
+1677,libksane-devel,No,LGPLv2+
+1678,libkscreen,No,GPLv2+
+1679,libkworkspace,No,GPLv2
+1680,libldb,No,LGPLv3+
+1681,liblockfile,No,GPLv2+ and LGPLv2+
+1682,liblouis,No,LGPLv3+
+1683,liblouis-python,No,LGPLv3+
+1684,libluksmeta,No,LGPLv2+
+1685,libmatchbox,No,LGPLv2+
+1686,libmaxminddb,No,ASL 2.0 and BSD
+1687,libmbim,No,LGPLv2+
+1688,libmbim-utils,No,GPLv2+
+1689,libmediaart,No,LGPLv2+
+1690,libmemcached,Yes,BSD
+1691,libmicrohttpd,No,LGPLv2+
+1692,libmng,No,zlib
+1693,libmng-devel,No,zlib
+1694,libmnl,No,LGPLv2+
+1695,libmodman,No,LGPLv2+
+1696,libmount,No,LGPLv2+
+1697,libmpc,No,LGPLv3+ and GFDL
+1698,libmpcdec,No,BSD
+1699,libmsn,No,GPLv2
+1700,libmspack,No,LGPLv2
+1701,libmtp,No,LGPLv2+
+1702,libmusicbrainz5,No,LGPLv2
+1703,libndp,No,LGPLv2+
+1704,libnet,No,BSD
+1705,libnetfilter_conntrack,No,GPLv2+
+1706,libnetfilter_cthelper,No,GPLv2
+1707,libnetfilter_cttimeout,No,GPLv2+
+1708,libnetfilter_queue,No,GPLv2
+1709,libnfnetlink,No,GPLv2+
+1710,libnfsidmap,No,BSD
+1711,libnftnl,No,GPLv2+
+1712,libnice,No,LGPLv2 and MPLv1.1
+1713,libnl,No,LGPLv2
+1714,libnl-devel,Yes,LGPLv2
+1715,libnl3,No,LGPLv2
+1716,libnl3-cli,No,LGPLv2
+1717,libnm-gtk,No,GPLv2+
+1718,libnma,No,GPLv2+
+1719,libnotify,No,LGPLv2+
+1720,libnotify-devel,Yes,LGPLv2+
+1721,liboauth,No,MIT
+1722,liboauth-devel,No,MIT
+1723,libobjc,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1724,libocxl,Yes,ASL 2.0
+1725,libofa,No,GPLv2
+1726,libogg,No,BSD
+1727,libopenraw,No,LGPLv3+
+1728,libosinfo,No,LGPLv2+
+1729,libotf,No,LGPLv2+
+1730,libpaper,No,GPLv2
+1731,libpath_utils,No,LGPLv3+
+1732,libpcap,No,BSD with advertising
+1733,libpciaccess,No,MIT
+1734,libpeas,No,LGPLv2+
+1735,libpeas-gtk,No,LGPLv2+
+1736,libpeas-loader-python,No,LGPLv2+
+1737,libpfm,Yes,MIT
+1738,libpfm-devel,Yes,MIT
+1739,libpinyin,No,GPLv2+
+1740,libpinyin-data,No,GPLv2+
+1741,libpipeline,No,GPLv3+
+1742,libplist,No,LGPLv2+
+1743,libpmem,No,BSD
+1744,libpmemblk,No,BSD
+1745,libpmemlog,No,BSD
+1746,libpmemobj,No,BSD
+1747,libpmempool,No,BSD
+1748,libpng,No,zlib
+1749,libpng-devel,Yes,zlib
+1750,libpng12,Yes,zlib
+1751,libproxy,No,LGPLv2+
+1752,libproxy-mozjs,Yes,LGPLv2+
+1753,libpsm2,No,GPLv2 or BSD
+1754,libpurple,No,GPLv2+ and GPLv2 and MIT
+1755,libpwquality,No,BSD or GPLv2+
+1756,libqb,No,LGPLv2+
+1757,libqb-devel,No,LGPLv2+
+1758,libqmi,No,LGPLv2+
+1759,libqmi-utils,No,GPLv2+
+1760,libquadmath,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1761,libquadmath-devel,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1762,libquvi,No,LGPLv2+
+1763,libquvi-scripts,No,LGPLv2+
+1764,librabbitmq,No,MIT
+1765,librados2,No,LGPL-2.0
+1766,LibRaw,No,BSD and (CDDL or LGPLv2)
+1767,libraw1394,No,LGPLv2+
+1768,librbd1,No,LGPL-2.0
+1769,librdkafka,No,BSD
+1770,librdmacm,Yes,GPLv2 or BSD
+1771,librdmacm-utils,Yes,GPLv2 or BSD
+1772,libref_array,No,LGPLv3+
+1773,librelp,No,GPLv3+
+1774,librepo,No,LGPLv2+
+1775,libreport,No,GPLv2+
+1776,libreport-anaconda,No,GPLv2+
+1777,libreport-cli,Yes,GPLv2+
+1778,libreport-filesystem,No,GPLv2+
+1779,libreport-gtk,Yes,GPLv2+
+1780,libreport-plugin-bugzilla,No,GPLv2+
+1781,libreport-plugin-mailx,Yes,GPLv2+
+1782,libreport-plugin-reportuploader,No,GPLv2+
+1783,libreport-plugin-rhtsupport,No,GPLv2+
+1784,libreport-plugin-ureport,No,GPLv2+
+1785,libreport-python,No,GPLv2+
+1786,libreport-rhel,No,GPLv2+
+1787,libreport-rhel-anaconda-bugzilla,No,GPLv2+
+1788,libreport-web,No,GPLv2+
+1789,libreswan,Yes,GPLv2
+1790,librevenge,No,(LGPLv2+ or MPLv2.0) and BSD
+1791,librpmem,No,BSD
+1792,librsvg2,Yes,LGPLv2+
+1793,librsvg2-devel,Yes,LGPLv2+
+1794,librsvg2-tools,No,LGPLv2+
+1795,librtas,No,LGPL
+1796,libsamplerate,No,GPLv2+
+1797,libsane-hpaio,Yes,GPLv2+
+1798,libseccomp,No,LGPLv2
+1799,libsecret,No,LGPLv2+
+1800,libsecret-devel,No,LGPLv2+
+1801,libselinux,No,Public Domain
+1802,libselinux-devel,Yes,Public Domain
+1803,libselinux-python,No,Public Domain
+1804,libselinux-python3,No,Public Domain
+1805,libselinux-ruby,No,Public Domain
+1806,libselinux-utils,No,Public Domain
+1807,libsemanage,No,LGPLv2+
+1808,libsemanage-python,No,LGPLv2+
+1809,libsepol,No,LGPLv2+
+1810,libsepol-devel,No,LGPLv2+
+1811,libservicelog,No,LGPLv2
+1812,libshout,No,LGPLv2+
+1813,libsigc++20,No,LGPLv2+
+1814,libSM,No,MIT
+1815,libSM-devel,Yes,MIT
+1816,libsmartcols,No,LGPLv2+
+1817,libsmbclient,No,GPLv3+ and LGPLv3+
+1818,libsmbios,No,GPLv2+ or OSL 2.1
+1819,libsmi,No,GPLv2+ and BSD
+1820,libsndfile,No,LGPLv2+ and GPLv2+ and BSD
+1821,libsolv,No,BSD
+1822,libsoup,No,LGPLv2
+1823,libsoup-devel,Yes,LGPLv2
+1824,libspectre,No,GPLv2+
+1825,libspiro,No,GPLv2+
+1826,libsrtp,No,BSD
+1827,libss,No,MIT
+1828,libssh2,No,BSD
+1829,libsss_autofs,No,LGPLv3+
+1830,libsss_certmap,No,LGPLv3+
+1831,libsss_idmap,No,LGPLv3+
+1832,libsss_nss_idmap,No,LGPLv3+
+1833,libsss_simpleifp,No,GPLv3+
+1834,libsss_sudo,No,LGPLv3+
+1835,libstdc++,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1836,libstdc++-devel,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1837,libstdc++-docs,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1838,libstoragemgmt,Yes,LGPLv2+
+1839,libstoragemgmt-arcconf-plugin,Yes,LGPLv2+
+1840,libstoragemgmt-hpsa-plugin,Yes,LGPLv2+
+1841,libstoragemgmt-local-plugin,Yes,LGPLv2+
+1842,libstoragemgmt-megaraid-plugin,Yes,LGPLv2+
+1843,libstoragemgmt-nfs-plugin,Yes,LGPLv2+
+1844,libstoragemgmt-nfs-plugin-clibs,Yes,LGPLv2+
+1845,libstoragemgmt-nstor-plugin,Yes,LGPLv2+
+1846,libstoragemgmt-python,No,LGPLv2+
+1847,libstoragemgmt-python-clibs,No,LGPLv2+
+1848,libstoragemgmt-smis-plugin,Yes,LGPLv2+
+1849,libstoragemgmt-targetd-plugin,Yes,LGPLv2+
+1850,libstoragemgmt-udev,Yes,LGPLv2+
+1851,libsysfs,Yes,LGPLv2+
+1852,libtalloc,No,LGPLv3+
+1853,libtar,No,MIT
+1854,libtasn1,No,GPLv3+ and LGPLv2+
+1855,libtasn1-devel,No,GPLv3+ and LGPLv2+
+1856,libtdb,No,LGPLv3+
+1857,libteam,No,LGPLv2+
+1858,libtevent,No,LGPLv3+
+1859,libthai,No,LGPLv2+
+1860,libtheora,No,BSD
+1861,libtiff,No,libtiff
+1862,libtiff-devel,Yes,libtiff
+1863,libtimezonemap,No,GPLv3
+1864,libtirpc,No,SISSL and BSD
+1865,libtool,Yes,GPLv2+ and LGPLv2+ and GFDL
+1866,libtool-ltdl,No,LGPLv2+
+1867,libtool-ltdl-devel,No,LGPLv2+
+1868,libtranslit,No,GPLv3+
+1869,libtranslit-m17n,No,GPLv3+
+1870,libudisks2,No,LGPLv2+
+1871,libunistring,No,LGPLv3+
+1872,libunwind,No,BSD
+1873,libusal,No,GPLv2
+1874,libusb,No,LGPLv2+
+1875,libusbmuxd,No,LGPLv2+
+1876,libusbx,No,LGPLv2+
+1877,libusbx-devel,Yes,LGPLv2+
+1878,libuser,No,LGPLv2+
+1879,libuser-python,No,LGPLv2+
+1880,libusnic_verbs,Yes,GPLv2 or BSD
+1881,libutempter,No,LGPLv2+
+1882,libuuid,No,BSD
+1883,libuuid-devel,Yes,BSD
+1884,libv4l,No,LGPLv2+ and GPLv2
+1885,libva,No,MIT
+1886,libva-devel,Yes,MIT
+1887,libvdpau,No,MIT
+1888,libverto,No,MIT
+1889,libverto-devel,No,MIT
+1890,libverto-libevent,No,MIT
+1891,libverto-tevent,No,MIT
+1892,libvirt,Yes,LGPLv2+
+1893,libvirt-bash-completion,No,LGPLv2+
+1894,libvirt-cim,Yes,LGPLv2+
+1895,libvirt-client,Yes,LGPLv2+
+1896,libvirt-daemon,No,LGPLv2+
+1897,libvirt-daemon-config-network,No,LGPLv2+
+1898,libvirt-daemon-config-nwfilter,No,LGPLv2+
+1899,libvirt-daemon-driver-interface,No,LGPLv2+
+1900,libvirt-daemon-driver-lxc,No,LGPLv2+
+1901,libvirt-daemon-driver-network,No,LGPLv2+
+1902,libvirt-daemon-driver-nodedev,No,LGPLv2+
+1903,libvirt-daemon-driver-nwfilter,No,LGPLv2+
+1904,libvirt-daemon-driver-qemu,No,LGPLv2+
+1905,libvirt-daemon-driver-secret,No,LGPLv2+
+1906,libvirt-daemon-driver-storage,No,LGPLv2+
+1907,libvirt-daemon-driver-storage-core,No,LGPLv2+
+1908,libvirt-daemon-driver-storage-disk,No,LGPLv2+
+1909,libvirt-daemon-driver-storage-gluster,No,LGPLv2+
+1910,libvirt-daemon-driver-storage-iscsi,No,LGPLv2+
+1911,libvirt-daemon-driver-storage-logical,No,LGPLv2+
+1912,libvirt-daemon-driver-storage-mpath,No,LGPLv2+
+1913,libvirt-daemon-driver-storage-rbd,No,LGPLv2+
+1914,libvirt-daemon-driver-storage-scsi,No,LGPLv2+
+1915,libvirt-daemon-kvm,No,LGPLv2+
+1916,libvirt-devel,Yes,LGPLv2+
+1917,libvirt-docs,No,LGPLv2+
+1918,libvirt-gconfig,No,LGPLv2+
+1919,libvirt-glib,No,LGPLv2+
+1920,libvirt-gobject,No,LGPLv2+
+1921,libvirt-java,Yes,MIT
+1922,libvirt-java-devel,Yes,MIT
+1923,libvirt-libs,No,LGPLv2+
+1924,libvirt-python,No,LGPLv2+
+1925,libvirt-snmp,Yes,GPLv2+
+1926,libvisual,No,LGPLv2+
+1927,libvma,Yes,GPLv2 or BSD
+1928,libvmem,No,BSD
+1929,libvmmalloc,No,BSD
+1930,libvncserver,No,GPLv2+
+1931,libvorbis,No,BSD
+1932,libvpd,No,LGPLv2+
+1933,libvpx,No,BSD
+1934,libwacom,No,MIT
+1935,libwacom-data,No,MIT
+1936,libwayland-client,No,MIT
+1937,libwayland-cursor,No,MIT
+1938,libwayland-egl,No,MIT
+1939,libwayland-server,No,MIT
+1940,libwbclient,No,GPLv3+ and LGPLv3+
+1941,libwebp,No,BSD
+1942,libwinpr,No,ASL 2.0
+1943,libwmf,No,LGPLv2+ and GPLv2+ and GPL+
+1944,libwmf-lite,No,LGPLv2+ and GPLv2+ and GPL+
+1945,libwnck3,No,LGPLv2+
+1946,libwpd,No,LGPLv2+ or MPLv2.0
+1947,libwpg,No,LGPLv2+ or MPLv2.0
+1948,libwsman1,No,BSD
+1949,libwvstreams,No,LGPLv2+
+1950,libX11,No,MIT
+1951,libX11-common,No,MIT
+1952,libX11-devel,Yes,MIT
+1953,libXau,No,MIT
+1954,libXau-devel,Yes,MIT
+1955,libXaw,No,MIT
+1956,libXaw-devel,Yes,MIT
+1957,libxcb,No,MIT
+1958,libxcb-devel,No,MIT
+1959,libXcomposite,No,MIT
+1960,libXcomposite-devel,No,MIT
+1961,libXcursor,No,MIT
+1962,libXcursor-devel,No,MIT
+1963,libXdamage,No,MIT
+1964,libXdamage-devel,No,MIT
+1965,libXdmcp,No,MIT
+1966,libXevie,No,MIT
+1967,libXext,No,MIT
+1968,libXext-devel,Yes,MIT
+1969,libXfixes,No,MIT
+1970,libXfixes-devel,No,MIT
+1971,libXfont,No,MIT
+1972,libXfont2,No,MIT
+1973,libXft,No,MIT
+1974,libXft-devel,Yes,MIT
+1975,libXi,No,MIT
+1976,libXi-devel,Yes,MIT
+1977,libXinerama,No,MIT
+1978,libXinerama-devel,Yes,MIT
+1979,libxkbcommon,No,MIT
+1980,libxkbcommon-devel,No,MIT
+1981,libxkbcommon-x11,No,MIT
+1982,libxkbfile,No,MIT
+1983,libxkbfile-devel,No,MIT
+1984,libxklavier,No,LGPLv2+
+1985,libxml2,No,MIT
+1986,libxml2-devel,Yes,MIT
+1987,libxml2-python,No,MIT
+1988,libXmu,Yes,MIT
+1989,libXmu-devel,Yes,MIT
+1990,libXp,Yes,MIT
+1991,libXp-devel,No,MIT
+1992,libXpm,No,MIT
+1993,libXpm-devel,Yes,MIT
+1994,libXrandr,No,MIT
+1995,libXrandr-devel,Yes,MIT
+1996,libXrender,No,MIT
+1997,libXrender-devel,Yes,MIT
+1998,libXres,No,MIT
+1999,libXScrnSaver,No,MIT
+2000,libXScrnSaver-devel,No,MIT
+2001,libxshmfence,No,MIT
+2002,libxshmfence-devel,No,MIT
+2003,libxslt,No,MIT
+2004,libxslt-devel,Yes,MIT
+2005,libXt,No,MIT
+2006,libXt-devel,Yes,MIT
+2007,libXtst,No,MIT
+2008,libXtst-devel,Yes,MIT
+2009,libXv,No,MIT
+2010,libXv-devel,No,MIT
+2011,libXvMC,No,MIT
+2012,libXxf86dga,No,MIT
+2013,libXxf86misc,No,MIT
+2014,libXxf86misc-devel,No,MIT
+2015,libXxf86vm,No,MIT
+2016,libXxf86vm-devel,No,MIT
+2017,libyami,Yes,ASL 2.0
+2018,libyaml,No,MIT
+2019,libzapojit,No,LGPLv2+
+2020,libzfcphbaapi,Yes,CPL
+2021,libzip,No,BSD
+2022,linux-firmware,Yes,"GPL+ and GPLv2+ and MIT and Redistributable, no modification permitted"
+2023,linuxconsoletools,No,GPLv2+
+2024,linuxptp,Yes,GPLv2+
+2025,lklug-fonts,Yes,GPLv2
+2026,lksctp-tools,Yes,GPLv2 and GPLv2+ and LGPLv2 and MIT
+2027,lldpad,Yes,GPLv2
+2028,llvm-private,No,NCSA
+2029,lm_sensors,Yes,LGPLv2+ and GPLv3+ and GPLv2+ and Verbatim and Public Domain
+2030,lm_sensors-devel,No,LGPLv2+ and GPLv3+ and GPLv2+ and Verbatim and Public Domain
+2031,lm_sensors-libs,No,LGPLv2+ and GPLv3+ and GPLv2+ and Verbatim and Public Domain
+2032,lockdev,No,LGPLv2
+2033,log4cxx,No,ASL 2.0
+2034,log4j,No,ASL 2.0
+2035,logrotate,Yes,GPL+
+2036,logwatch,Yes,MIT
+2037,lohit-assamese-fonts,Yes,OFL
+2038,lohit-bengali-fonts,Yes,OFL
+2039,lohit-devanagari-fonts,Yes,OFL
+2040,lohit-gujarati-fonts,Yes,OFL
+2041,lohit-kannada-fonts,Yes,OFL
+2042,lohit-malayalam-fonts,Yes,OFL
+2043,lohit-marathi-fonts,Yes,OFL
+2044,lohit-nepali-fonts,Yes,OFL
+2045,lohit-oriya-fonts,Yes,OFL
+2046,lohit-punjabi-fonts,Yes,OFL
+2047,lohit-tamil-fonts,Yes,OFL
+2048,lohit-telugu-fonts,Yes,OFL
+2049,lorax,No,GPLv2+
+2050,lrzsz,Yes,GPLv2+
+2051,lshw,Yes,GPLv2
+2052,lsof,Yes,zlib and Sendmail and LGPLv2+
+2053,lsscsi,Yes,GPLv2+
+2054,lsvpd,No,GPLv2+
+2055,ltrace,Yes,GPLv2+
+2056,lua,No,MIT
+2057,luksmeta,Yes,LGPLv2+
+2058,lvm2,Yes,GPLv2
+2059,lvm2-libs,No,LGPLv2
+2060,lvm2-python-boom,Yes,GPLv2
+2061,lvm2-python-libs,No,LGPLv2
+2062,lz4,Yes,GPLv2+ and BSD
+2063,lzo,No,GPLv2+
+2064,lzo-minilzo,No,GPLv2+
+2065,lzop,No,GPLv2+
+2066,m17n-contrib,Yes,LGPLv2+
+2067,m17n-db,Yes,LGPLv2+
+2068,m17n-lib,No,LGPLv2+
+2069,m2crypto,No,MIT
+2070,m4,No,GPLv3+
+2071,madan-fonts,Yes,GPL+
+2072,mailcap,No,Public Domain and MIT
+2073,mailman,Yes,GPLv2+
+2074,mailx,No,BSD with advertising and MPLv1.1
+2075,make,Yes,GPLv2+
+2076,mallard-rng,No,MIT
+2077,man-db,Yes,GPLv2+ and GPLv3+
+2078,man-pages,Yes,GPL+ and GPLv2+ and BSD and MIT and Copyright only and IEEE
+2079,man-pages-cs,No,GPLv2 and GPLv3 and BSD
+2080,man-pages-es,No,GPL+ and GPLv2+ and LDP and IEEE
+2081,man-pages-es-extra,No,GPL+ and GPLv2+ and LDP and IEEE
+2082,man-pages-fr,No,GPL+ and GPLv2 and GPLv2+ and LGPLv2+ and GPLv3+ and ImageMagick and ISC and Public Domain and BSD and MIT and ASL 2.0 and and UCD and IBM and TCL and xinetd
+2083,man-pages-it,No,GPL+ and GPLv2 and GPLv2+ and LGPLV2+ and GPLv3+ and BSD and MIT and Copyright only and IEEE
+2084,man-pages-ja,No,BSD and GFDL and GPL+ and GPLv2+ and MIT and Copyright only and IEEE and ISC and GPLv2 and LGPLv2 and LGPLv2+ with exceptions and AML and Public Domain and LGPLv2+ and Artistic clarified and (GPLv2+ or Artistic) and GPLv3+ and Sendmail and BSD with advertising and GPLv2 with exceptions and xinetd
+2085,man-pages-ko,No,Copyright only
+2086,man-pages-overrides,Yes,GPL+ and GPLv2+ and BSD and MIT and Copyright only and IEEE
+2087,man-pages-pl,No,GPL+ and BSD and MIT and GFDL
+2088,man-pages-ru,No,GPL+ and BSD and MIT and GFDL
+2089,man-pages-zh-CN,No,GFDL
+2090,mariadb,Yes,GPLv2 with exceptions and LGPLv2 and BSD
+2091,mariadb-bench,Yes,GPLv2 with exceptions and LGPLv2 and BSD
+2092,mariadb-devel,Yes,GPLv2 with exceptions and LGPLv2 and BSD
+2093,mariadb-libs,No,GPLv2 with exceptions and LGPLv2 and BSD
+2094,mariadb-server,Yes,GPLv2 with exceptions and LGPLv2 and BSD
+2095,mariadb-test,No,GPLv2 with exceptions and LGPLv2 and BSD
+2096,marisa,No,BSD or LGPL
+2097,matchbox-window-manager,No,GPLv2+
+2098,mc,Yes,GPLv3+
+2099,mcelog,Yes,GPLv2
+2100,mcstrans,No,GPL+
+2101,mdadm,Yes,GPLv2+
+2102,meanwhile,No,LGPLv2+
+2103,media-player-info,No,BSD
+2104,memcached,Yes,BSD
+2105,memkind,No,BSD
+2106,memstomp,Yes,LGPLv3+ and GPLv2+
+2107,memtest86+,Yes,GPLv2
+2108,mercurial,Yes,GPLv2+
+2109,mesa-dri-drivers,Yes,MIT
+2110,mesa-filesystem,No,MIT
+2111,mesa-khr-devel,No,MIT
+2112,mesa-libEGL,No,MIT
+2113,mesa-libEGL-devel,No,MIT
+2114,mesa-libgbm,No,MIT
+2115,mesa-libGL,No,MIT
+2116,mesa-libGL-devel,Yes,MIT
+2117,mesa-libglapi,No,MIT
+2118,mesa-libGLES,Yes,MIT
+2119,mesa-libGLU,No,MIT
+2120,mesa-libGLU-devel,Yes,MIT
+2121,mesa-libGLw,No,MIT
+2122,mesa-libGLw-devel,Yes,MIT
+2123,mesa-libxatracker,No,MIT
+2124,mesa-private-llvm,No,NCSA
+2125,metacity,Yes,GPLv2+
+2126,mgetty,Yes,GPLv2+
+2127,microcode_ctl,Yes,"GPLv2+ and Redistributable, no modification permitted"
+2128,migrationtools,Yes,BSD
+2129,minicom,Yes,GPL+ and GPLv2+ and GPLv2 and LGPLv2+ Public Domain and Copyright only
+2130,mipv6-daemon,Yes,GPLv2
+2131,mkbootdisk,Yes,GPLv2+
+2132,mksh,Yes,MirOS and ISC and BSD
+2133,mlocate,Yes,GPLv2
+2134,mobile-broadband-provider-info,No,Public Domain
+2135,mod_auth_gssapi,No,MIT
+2136,mod_auth_kerb,No,BSD and MIT and ASL 2.0
+2137,mod_auth_mellon,Yes,GPLv2+
+2138,mod_auth_mellon-diagnostics,No,GPLv2+
+2139,mod_auth_openidc,Yes,ASL 2.0
+2140,mod_authnz_pam,No,ASL 2.0
+2141,mod_dav_svn,Yes,ASL 2.0
+2142,mod_fcgid,Yes,ASL 2.0
+2143,mod_intercept_form_submit,No,ASL 2.0
+2144,mod_lookup_identity,No,ASL 2.0
+2145,mod_nss,No,ASL 2.0
+2146,mod_revocator,No,ASL 2.0
+2147,mod_security,Yes,ASL 2.0
+2148,mod_security_crs,Yes,ASL 2.0
+2149,mod_session,Yes,ASL 2.0
+2150,mod_ssl,Yes,ASL 2.0
+2151,mod_wsgi,Yes,ASL 2.0
+2152,ModemManager,Yes,GPLv2+
+2153,ModemManager-glib,No,GPLv2+
+2154,mokutil,No,BSD
+2155,motif,Yes,LGPLv2+
+2156,motif-devel,Yes,LGPLv2+
+2157,mousetweaks,Yes,GPLv3 and GFDL
+2158,mozilla-filesystem,No,MPLv1.1
+2159,mozjs17,No,GPLv2+ or LGPLv2+ or MPLv1.1
+2160,mozjs24,No,MPLv2.0
+2161,mozjs52,No,MPLv2.0 and MPLv1.1 and BSD and GPLv2+ and GPLv3+ and LGPLv2.1 and LGPLv2.1+ and AFL and ASL 2.0
+2162,mpfr,No,LGPLv3+ and GPLv3+ and GFDL
+2163,mpfr-devel,Yes,LGPLv3+ and GPLv3+ and GFDL
+2164,mpg123-libs,No,LGPLv2+
+2165,mpich-3.0,No,MIT
+2166,mpich-3.0-devel,Yes,MIT
+2167,mpich-3.2,No,MIT
+2168,mpich-3.2-devel,Yes,MIT
+2169,mpitests-mpich,Yes,CPL and BSD
+2170,mpitests-mpich32,Yes,CPL and BSD
+2171,mpitests-mvapich2,Yes,CPL and BSD
+2172,mpitests-mvapich2-psm,Yes,CPL and BSD
+2173,mpitests-mvapich222,Yes,CPL and BSD
+2174,mpitests-mvapich222-psm,Yes,CPL and BSD
+2175,mpitests-mvapich222-psm2,Yes,CPL and BSD
+2176,mpitests-mvapich23,Yes,CPL and BSD
+2177,mpitests-mvapich23-psm,Yes,CPL and BSD
+2178,mpitests-mvapich23-psm2,Yes,CPL and BSD
+2179,mpitests-openmpi,Yes,CPL and BSD
+2180,mpitests-openmpi3,Yes,CPL and BSD
+2181,mrtg,Yes,GPLv2+
+2182,mstflint,Yes,GPLv2+ or BSD
+2183,msv-msv,No,BSD and ASL 1.1 and ASL 2.0 and Public Domain
+2184,msv-xsdlib,No,BSD and ASL 1.1
+2185,mt-st,Yes,GPL+
+2186,mtdev,No,MIT
+2187,mtools,Yes,GPLv3+
+2188,mtr,Yes,GPLv2+
+2189,mtx,Yes,GPLv2
+2190,mutt,Yes,GPLv2+ and Public Domain
+2191,mutter,No,GPLv2+
+2192,mvapich2-2.0,No,BSD and MIT
+2193,mvapich2-2.0-devel,Yes,BSD and MIT
+2194,mvapich2-2.0-doc,Yes,BSD and MIT
+2195,mvapich2-2.0-psm,No,BSD and MIT
+2196,mvapich2-2.0-psm-devel,Yes,BSD and MIT
+2197,mvapich2-2.2,No,BSD and MIT
+2198,mvapich2-2.2-devel,Yes,BSD and MIT
+2199,mvapich2-2.2-doc,Yes,BSD and MIT
+2200,mvapich2-2.2-psm,No,BSD and MIT
+2201,mvapich2-2.2-psm-devel,Yes,BSD and MIT
+2202,mvapich2-2.2-psm2,No,BSD and MIT
+2203,mvapich2-2.2-psm2-devel,Yes,BSD and MIT
+2204,mvapich23,No,BSD and MIT
+2205,mvapich23-devel,Yes,BSD and MIT
+2206,mvapich23-doc,Yes,BSD and MIT
+2207,mvapich23-psm,No,BSD and MIT
+2208,mvapich23-psm-devel,Yes,BSD and MIT
+2209,mvapich23-psm2,No,BSD and MIT
+2210,mvapich23-psm2-devel,Yes,BSD and MIT
+2211,mysql-connector-java,Yes,GPLv2 with exceptions
+2212,mysql-connector-odbc,Yes,GPLv2 with exceptions
+2213,MySQL-python,Yes,GPLv2+
+2214,nafees-web-naskh-fonts,Yes,Bitstream Vera
+2215,nano,Yes,GPLv3+
+2216,nasm,Yes,BSD
+2217,nautilus,Yes,GPLv3+
+2218,nautilus-extensions,No,LGPLv2+
+2219,nautilus-sendto,Yes,GPLv2+
+2220,navilu-fonts,Yes,OFL
+2221,nbdkit,No,BSD
+2222,nbdkit-plugin-python-common,No,BSD
+2223,nbdkit-plugin-python2,No,BSD
+2224,nbdkit-plugin-vddk,No,BSD
+2225,ncompress,Yes,Public Domain
+2226,ncurses,Yes,MIT
+2227,ncurses-base,No,MIT
+2228,ncurses-devel,Yes,MIT
+2229,ncurses-libs,No,MIT
+2230,ncurses-term,Yes,MIT
+2231,ndctl,No,GPLv2
+2232,ndctl-libs,No,LGPLv2
+2233,neon,No,LGPLv2+
+2234,nepomuk-core,No,LGPLv2 or LGPLv3
+2235,nepomuk-core-devel,No,LGPLv2 or LGPLv3
+2236,nepomuk-core-libs,No,LGPLv2 or LGPLv3
+2237,nepomuk-widgets,No,LGPLv2 or LGPLv3
+2238,net-snmp,Yes,BSD
+2239,net-snmp-agent-libs,No,BSD
+2240,net-snmp-devel,Yes,BSD
+2241,net-snmp-libs,No,BSD
+2242,net-snmp-utils,Yes,BSD
+2243,net-tools,Yes,GPLv2+
+2244,netcf-libs,No,LGPLv2+
+2245,netlabel_tools,Yes,GPLv2
+2246,netpbm,No,BSD and GPLv2 and IJG and MIT and Public Domain
+2247,netpbm-devel,No,BSD and GPLv2 and IJG and MIT and Public Domain
+2248,netpbm-progs,Yes,BSD and GPLv2 and IJG and MIT and Public Domain
+2249,netsniff-ng,Yes,GPLv2
+2250,nettle,No,LGPLv2+
+2251,nettle-devel,No,LGPLv2+
+2252,NetworkManager,Yes,GPLv2+
+2253,NetworkManager-adsl,Yes,GPLv2+
+2254,NetworkManager-bluetooth,Yes,GPLv2+
+2255,NetworkManager-config-server,Yes,GPLv2+
+2256,NetworkManager-glib,No,GPLv2+
+2257,NetworkManager-libnm,No,GPLv2+
+2258,NetworkManager-libreswan,No,GPLv2+
+2259,NetworkManager-libreswan-gnome,Yes,GPLv2+
+2260,NetworkManager-ppp,Yes,GPLv2+
+2261,NetworkManager-team,Yes,GPLv2+
+2262,NetworkManager-tui,Yes,GPLv2+
+2263,NetworkManager-wifi,Yes,GPLv2+
+2264,NetworkManager-wwan,Yes,GPLv2+
+2265,newt,No,LGPLv2
+2266,newt-python,No,LGPLv2
+2267,nfs-utils,Yes,MIT and GPLv2 and GPLv2+ and BSD
+2268,nfs4-acl-tools,Yes,BSD
+2269,nfsometer,Yes,GPLv2+
+2270,nfstest,Yes,GPLv2+
+2271,nftables,No,GPLv2
+2272,nhn-nanum-brush-fonts,Yes,OFL
+2273,nhn-nanum-fonts-common,No,OFL
+2274,nhn-nanum-gothic-fonts,Yes,OFL
+2275,nhn-nanum-myeongjo-fonts,Yes,OFL
+2276,nhn-nanum-pen-fonts,Yes,OFL
+2277,nm-connection-editor,Yes,GPLv2+
+2278,nmap,Yes,GPLv2 and LGPLv2+ and GPLv2+ and BSD
+2279,nmap-ncat,Yes,GPLv2 and LGPLv2+ and GPLv2+ and BSD
+2280,nscd,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+2281,nspr,No,MPLv2.0
+2282,nspr-devel,No,MPLv2.0
+2283,nss,No,MPLv2.0
+2284,nss-devel,Yes,MPLv2.0
+2285,nss-pam-ldapd,Yes,LGPLv2+
+2286,nss-pem,No,MPLv1.1
+2287,nss-softokn,No,MPLv2.0
+2288,nss-softokn-devel,No,MPLv2.0
+2289,nss-softokn-freebl,No,MPLv2.0
+2290,nss-softokn-freebl-devel,No,MPLv2.0
+2291,nss-sysinit,No,MPLv2.0
+2292,nss-tools,No,MPLv2.0
+2293,nss-util,No,MPLv2.0
+2294,nss-util-devel,No,MPLv2.0
+2295,nss_compat_ossl,No,MIT
+2296,ntp,Yes,(MIT and BSD and BSD with advertising) and GPLv2
+2297,ntpdate,Yes,(MIT and BSD and BSD with advertising) and GPLv2
+2298,ntsysv,Yes,GPLv2
+2299,numactl,Yes,GPLv2
+2300,numactl-devel,Yes,LGPLv2 and GPLv2
+2301,numactl-libs,No,LGPLv2 and GPLv2
+2302,numad,Yes,LGPLv2
+2303,numpy,Yes,BSD and Python
+2304,numpy-f2py,Yes,BSD and Python
+2305,nuxwdog,No,LGPLv2 and (GPL+ or Artistic)
+2306,nuxwdog-client-java,No,LGPLv2 and (GPL+ or Artistic)
+2307,nvme-cli,Yes,GPLv2+
+2308,nvmetcli,Yes,Apache License 2.0
+2309,obex-data-server,No,GPLv2+
+2310,obexd,No,GPLv2+
+2311,objectweb-asm,No,BSD
+2312,oddjob,Yes,BSD
+2313,oddjob-mkhomedir,Yes,BSD
+2314,okular,Yes,GPLv2
+2315,okular-devel,No,GPLv2
+2316,okular-libs,No,GPLv2
+2317,okular-part,No,GPLv2
+2318,opa-address-resolution,Yes,BSD or GPLv2
+2319,opa-basic-tools,No,BSD or GPLv2
+2320,opa-fastfabric,Yes,BSD or GPLv2
+2321,opa-fm,No,GPLv2 or BSD
+2322,opa-libopamgt,Yes,BSD or GPLv2
+2323,opal-prd,Yes,ASL 2.0
+2324,open-sans-fonts,Yes,ASL 2.0
+2325,open-vm-tools,Yes,GPLv2
+2326,open-vm-tools-desktop,Yes,GPLv2
+2327,opencc,No,ASL 2.0
+2328,opencryptoki,Yes,CPL
+2329,opencryptoki-ccatok,No,CPL
+2330,opencryptoki-ep11tok,No,CPL
+2331,opencryptoki-icatok,No,CPL
+2332,opencryptoki-icsftok,No,CPL
+2333,opencryptoki-libs,No,CPL
+2334,opencryptoki-swtok,No,CPL
+2335,opencryptoki-tpmtok,No,CPL
+2336,opendnssec,No,BSD
+2337,OpenEXR-libs,No,BSD
+2338,openhpi,Yes,BSD
+2339,openhpi-libs,No,BSD
+2340,OpenIPMI,Yes,LGPLv2+ and GPLv2+ or BSD
+2341,OpenIPMI-libs,No,LGPLv2+ and GPLv2+ or BSD
+2342,OpenIPMI-modalias,No,LGPLv2+ and GPLv2+ or BSD
+2343,OpenIPMI-perl,No,LGPLv2+ and GPLv2+ or BSD
+2344,openjade,No,BSD
+2345,openjpeg-libs,No,BSD
+2346,openjpeg2,No,BSD and MIT
+2347,openldap,No,OpenLDAP
+2348,openldap-clients,Yes,OpenLDAP
+2349,openldap-devel,Yes,OpenLDAP
+2350,openldap-servers,No,OpenLDAP
+2351,openlmi,Yes,LGPLv2+
+2352,openlmi-account,Yes,LGPLv2+
+2353,openlmi-account-doc,Yes,LGPLv2+
+2354,openlmi-fan,Yes,LGPLv2+
+2355,openlmi-fan-doc,Yes,LGPLv2+
+2356,openlmi-hardware,Yes,LGPLv2+
+2357,openlmi-hardware-doc,Yes,LGPLv2+
+2358,openlmi-indicationmanager-libs,No,LGPLv2+
+2359,openlmi-logicalfile,Yes,LGPLv2+
+2360,openlmi-logicalfile-doc,Yes,LGPLv2+
+2361,openlmi-networking,Yes,LGPLv2+
+2362,openlmi-networking-doc,Yes,LGPLv2+
+2363,openlmi-powermanagement,Yes,LGPLv2+
+2364,openlmi-powermanagement-doc,Yes,LGPLv2+
+2365,openlmi-providers,Yes,LGPLv2+
+2366,openlmi-providers-devel,Yes,LGPLv2+
+2367,openlmi-python-base,No,LGPLv2+
+2368,openlmi-python-providers,No,LGPLv2+
+2369,openlmi-realmd,Yes,LGPLv2+
+2370,openlmi-realmd-doc,Yes,LGPLv2+
+2371,openlmi-service,Yes,LGPLv2+
+2372,openlmi-service-doc,Yes,LGPLv2+
+2373,openlmi-software,Yes,LGPLv2+
+2374,openlmi-software-doc,Yes,LGPLv2+
+2375,openlmi-storage,Yes,LGPLv2+
+2376,openlmi-storage-doc,Yes,LGPLv2+
+2377,openlmi-tools,Yes,GPLv2+
+2378,openlmi-tools-doc,Yes,GPLv2+
+2379,openmpi,Yes,BSD and MIT and Romio
+2380,openmpi-devel,Yes,BSD and MIT and Romio
+2381,openmpi3,Yes,BSD and MIT and Romio
+2382,openmpi3-devel,Yes,BSD and MIT and Romio
+2383,openobex,No,GPLv2+ and LGPLv2+
+2384,opensc,Yes,LGPLv2+
+2385,openscap,Yes,LGPLv2+
+2386,openscap-containers,No,LGPLv2+
+2387,openscap-python,No,LGPLv2+
+2388,openscap-scanner,No,LGPLv2+
+2389,openscap-utils,Yes,LGPLv2+
+2390,openslp,No,BSD
+2391,openslp-server,Yes,BSD
+2392,opensm,Yes,GPLv2 or BSD
+2393,opensm-libs,No,GPLv2 or BSD
+2394,opensp,No,MIT
+2395,openssh,No,BSD
+2396,openssh-askpass,No,BSD
+2397,openssh-clients,Yes,BSD
+2398,openssh-keycat,Yes,BSD
+2399,openssh-server,Yes,BSD
+2400,openssl,No,OpenSSL
+2401,openssl-devel,Yes,OpenSSL
+2402,openssl-ibmca,Yes,ASL 2.0
+2403,openssl-libs,No,OpenSSL
+2404,openssl098e,Yes,OpenSSL
+2405,openwsman-client,Yes,BSD
+2406,openwsman-python,No,BSD
+2407,openwsman-server,Yes,BSD
+2408,oprofile,Yes,GPLv2+ and LGPLv2+
+2409,oprofile-gui,Yes,GPLv2+ and LGPLv2+
+2410,oprofile-jit,Yes,GPLv2+ and LGPLv2+
+2411,opus,No,BSD
+2412,ORBit2,No,LGPLv2+ and GPLv2+
+2413,orc,No,BSD
+2414,orca,Yes,LGPLv2+
+2415,ortp,No,LGPLv2+ and VSL
+2416,os-prober,No,GPLv2+ and GPL+
+2417,oscap-anaconda-addon,Yes,GPLv2+
+2418,osinfo-db,No,LGPLv2+
+2419,osinfo-db-tools,No,GPLv2+
+2420,overpass-fonts,Yes,OFL
+2421,OVMF,No,BSD and OpenSSL
+2422,oxygen-gtk,Yes,LGPLv2+
+2423,oxygen-gtk2,No,LGPLv2+
+2424,oxygen-gtk3,No,LGPLv2+
+2425,oxygen-icon-theme,No,LGPLv3+
+2426,p11-kit,No,BSD
+2427,p11-kit-devel,No,BSD
+2428,p11-kit-trust,No,BSD
+2429,PackageKit,No,GPLv2+ and LGPLv2+
+2430,PackageKit-command-not-found,Yes,GPLv2+ and LGPLv2+
+2431,PackageKit-glib,No,GPLv2+ and LGPLv2+
+2432,PackageKit-gstreamer-plugin,Yes,GPLv2+ and LGPLv2+
+2433,PackageKit-gtk3-module,Yes,GPLv2+ and LGPLv2+
+2434,PackageKit-yum,No,GPLv2+ and LGPLv2+
+2435,paflib,No,MIT
+2436,pakchois,No,LGPLv2+
+2437,paktype-naqsh-fonts,Yes,GPLv2 with exceptions
+2438,paktype-naskh-basic-fonts,Yes,GPLv2 with exceptions
+2439,paktype-tehreer-fonts,Yes,GPLv2 with exceptions
+2440,pam,No,BSD and GPLv2+
+2441,pam-devel,Yes,BSD and GPLv2+
+2442,pam_krb5,No,BSD or LGPLv2+
+2443,pam_pkcs11,No,LGPLv2+
+2444,pango,No,LGPLv2+
+2445,pango-devel,Yes,LGPLv2+
+2446,pangomm,No,LGPLv2+
+2447,papi,Yes,BSD
+2448,papi-devel,Yes,BSD
+2449,paps,Yes,LGPLv2+
+2450,paps-libs,No,LGPLv2+
+2451,paratype-pt-sans-fonts,Yes,OFL
+2452,parfait,Yes,ASL 2.0
+2453,parted,Yes,GPLv3+
+2454,passivetex,No,Copyright only
+2455,passwd,Yes,BSD or GPL+
+2456,patch,Yes,GPLv3+
+2457,patchutils,Yes,GPLv2+
+2458,pavucontrol,Yes,GPLv2+
+2459,pax,Yes,BSD
+2460,pciutils,Yes,GPLv2+
+2461,pciutils-libs,No,GPLv2+
+2462,pcp,Yes,GPLv2+ and LGPLv2+ and CC-BY
+2463,pcp-conf,No,LGPLv2+
+2464,pcp-doc,No,GPLv2+ and CC-BY
+2465,pcp-export-pcp2graphite,No,GPLv2+
+2466,pcp-gui,Yes,GPLv2+ and LGPLv2+ and LGPLv2+ with exceptions
+2467,pcp-libs,No,LGPLv2+
+2468,pcp-manager,No,GPLv2+
+2469,pcp-pmda-activemq,No,GPLv2+
+2470,pcp-pmda-apache,No,GPLv2+
+2471,pcp-pmda-bash,No,GPLv2+
+2472,pcp-pmda-bonding,No,GPLv2+
+2473,pcp-pmda-cisco,No,GPLv2+
+2474,pcp-pmda-dbping,No,GPLv2+
+2475,pcp-pmda-dm,No,GPLv2+
+2476,pcp-pmda-ds389,No,GPLv2+
+2477,pcp-pmda-ds389log,No,GPLv2+
+2478,pcp-pmda-elasticsearch,No,GPLv2+
+2479,pcp-pmda-gfs2,No,GPLv2+
+2480,pcp-pmda-gluster,No,GPLv2+
+2481,pcp-pmda-gpfs,No,GPLv2+
+2482,pcp-pmda-gpsd,No,GPLv2+
+2483,pcp-pmda-json,No,GPLv2+
+2484,pcp-pmda-lmsensors,No,GPLv2+
+2485,pcp-pmda-logger,No,GPLv2+
+2486,pcp-pmda-lustre,No,GPLv2+
+2487,pcp-pmda-lustrecomm,No,GPLv2+
+2488,pcp-pmda-mailq,No,GPLv2+
+2489,pcp-pmda-memcache,No,GPLv2+
+2490,pcp-pmda-mounts,No,GPLv2+
+2491,pcp-pmda-mysql,No,GPLv2+
+2492,pcp-pmda-named,No,GPLv2+
+2493,pcp-pmda-netfilter,No,GPLv2+
+2494,pcp-pmda-news,No,GPLv2+
+2495,pcp-pmda-nfsclient,No,GPLv2+
+2496,pcp-pmda-nginx,No,GPLv2+
+2497,pcp-pmda-nvidia-gpu,No,GPLv2+
+2498,pcp-pmda-pdns,No,GPLv2+
+2499,pcp-pmda-postfix,No,GPLv2+
+2500,pcp-pmda-postgresql,No,GPLv2+
+2501,pcp-pmda-roomtemp,No,GPLv2+
+2502,pcp-pmda-rpm,No,GPLv2+
+2503,pcp-pmda-sendmail,No,GPLv2+
+2504,pcp-pmda-shping,No,GPLv2+
+2505,pcp-pmda-summary,No,GPLv2+
+2506,pcp-pmda-trace,No,GPLv2+
+2507,pcp-pmda-unbound,No,GPLv2+
+2508,pcp-pmda-weblog,No,GPLv2+
+2509,pcp-pmda-zswap,No,GPLv2+
+2510,pcp-selinux,No,GPLv2+ and CC-BY
+2511,pcp-system-tools,No,GPLv2+
+2512,pcp-webapi,No,GPLv2+
+2513,pcp-zeroconf,Yes,GPLv2+
+2514,pcre,No,BSD
+2515,pcre-devel,Yes,BSD
+2516,pcre2,No,BSD
+2517,pcre2-utf16,No,BSD
+2518,pcsc-lite,No,BSD
+2519,pcsc-lite-ccid,Yes,LGPLv2+
+2520,pcsc-lite-libs,No,BSD
+2521,perf,Yes,GPLv2
+2522,perftest,Yes,GPLv2 or BSD
+2523,perl,Yes,(GPL+ or Artistic) and (GPLv2+ or Artistic) and Copyright Only and MIT and Public Domain and UCD
+2524,perl-Algorithm-Diff,No,GPL+ or Artistic
+2525,perl-App-cpanminus,Yes,GPL+ or Artistic
+2526,perl-Archive-Extract,No,GPL+ or Artistic
+2527,perl-Archive-Tar,No,GPL+ or Artistic
+2528,perl-Archive-Zip,No,GPL+ or Artistic
+2529,perl-Authen-SASL,No,GPL+ or Artistic
+2530,perl-autodie,No,GPL+ or Artistic
+2531,perl-B-Lint,No,GPL+ or Artistic
+2532,perl-Bit-Vector,No,(GPLv2+ or Artistic) and LGPLv2+
+2533,perl-Business-ISBN,No,GPL+ or Artistic
+2534,perl-Business-ISBN-Data,No,GPL+ or Artistic
+2535,perl-Carp,No,GPL+ or Artistic
+2536,perl-Carp-Clan,No,GPL+ or Artistic
+2537,perl-CGI,Yes,(GPL+ or Artistic) and Artistic 2.0
+2538,perl-CGI-Session,Yes,GPL+ or Artistic
+2539,perl-Class-ISA,No,GPL+ or Artistic
+2540,perl-Class-Load,No,GPL+ or Artistic
+2541,perl-Class-Singleton,No,GPL+ or Artistic
+2542,perl-Compress-Raw-Bzip2,No,GPL+ or Artistic
+2543,perl-Compress-Raw-Zlib,No,GPL+ or Artistic
+2544,perl-constant,No,GPL+ or Artistic
+2545,perl-Convert-ASN1,No,GPL+ or Artistic
+2546,perl-core,Yes,GPL+ or Artistic
+2547,perl-CPAN,Yes,GPL+ or Artistic
+2548,perl-CPAN-Meta,No,GPL+ or Artistic
+2549,perl-CPAN-Meta-Requirements,No,GPL+ or Artistic
+2550,perl-CPAN-Meta-YAML,No,GPL+ or Artistic
+2551,perl-CPANPLUS,Yes,GPL+ or Artistic
+2552,perl-CPANPLUS-Dist-Build,No,GPL+ or Artistic
+2553,perl-Crypt-OpenSSL-Bignum,No,GPL+ or Artistic
+2554,perl-Crypt-OpenSSL-Random,No,GPL+ or Artistic
+2555,perl-Crypt-OpenSSL-RSA,No,GPL+ or Artistic
+2556,perl-Crypt-SSLeay,Yes,GPL+ or Artistic
+2557,perl-Data-Dumper,No,GPL+ or Artistic
+2558,perl-Data-OptList,No,GPL+ or Artistic
+2559,perl-Date-Calc,Yes,GPL+ or Artistic
+2560,perl-Date-Manip,Yes,GPL+ or Artistic
+2561,perl-DateTime,Yes,(Artistic 2.0) and (GPL+ or Artistic)
+2562,perl-DateTime-Format-DateParse,Yes,GPL+ or Artistic
+2563,perl-DateTime-Locale,Yes,(GPL+ or Artistic) and MIT
+2564,perl-DateTime-TimeZone,Yes,(GPL+ or Artistic) and Public Domain
+2565,perl-DB_File,No,GPL+ or Artistic
+2566,perl-DBD-MySQL,Yes,GPL+ or Artistic
+2567,perl-DBD-Pg,Yes,GPLv2+ or Artistic
+2568,perl-DBD-SQLite,Yes,GPL+ or Artistic
+2569,perl-DBI,No,GPL+ or Artistic
+2570,perl-DBIx-Simple,No,Public Domain
+2571,perl-devel,Yes,GPL+ or Artistic
+2572,perl-Devel-Symdump,No,GPL+ or Artistic
+2573,perl-Digest,No,GPL+ or Artistic
+2574,perl-Digest-HMAC,No,GPL+ or Artistic
+2575,perl-Digest-MD5,No,GPL+ or Artistic
+2576,perl-Digest-SHA,No,GPL+ or Artistic
+2577,perl-Digest-SHA1,No,GPL+ or Artistic
+2578,perl-Encode,No,GPL+ or Artistic
+2579,perl-Encode-Detect,No,MPLv1.1 or GPLv2+ or LGPLv2+
+2580,perl-Encode-Locale,No,GPL+ or Artistic
+2581,perl-Env,No,GPL+ or Artistic
+2582,perl-Error,No,(GPL+ or Artistic) and MIT
+2583,perl-Exporter,No,GPL+ or Artistic
+2584,perl-ExtUtils-CBuilder,No,GPL+ or Artistic
+2585,perl-ExtUtils-Embed,No,GPL+ or Artistic
+2586,perl-ExtUtils-Install,No,GPL+ or Artistic
+2587,perl-ExtUtils-MakeMaker,Yes,GPL+ or Artistic
+2588,perl-ExtUtils-Manifest,No,GPL+ or Artistic
+2589,perl-ExtUtils-ParseXS,No,GPL+ or Artistic
+2590,perl-FCGI,No,OML
+2591,perl-File-CheckTree,No,GPL+ or Artistic
+2592,perl-File-Fetch,No,GPL+ or Artistic
+2593,perl-File-Listing,No,GPL+ or Artistic
+2594,perl-File-Path,No,GPL+ or Artistic
+2595,perl-File-Slurp,No,GPL+ or Artistic
+2596,perl-File-Temp,No,GPL+ or Artistic
+2597,perl-Filter,No,GPL+ or Artistic
+2598,perl-Font-AFM,No,GPL+ or Artistic) and Copyright only
+2599,perl-FreezeThaw,No,GPL+ or Artistic
+2600,perl-GD,No,GPL+ or Artistic
+2601,perl-Getopt-Long,No,GPLv2+ or Artistic
+2602,perl-gettext,Yes,GPL+ or Artistic
+2603,perl-Git,No,GPLv2
+2604,perl-GSSAPI,No,GPL+ or Artistic
+2605,perl-hivex,No,LGPLv2
+2606,perl-homedir,Yes,GPL+ or Artistic
+2607,perl-HTML-Format,No,GPL+ or Artistic
+2608,perl-HTML-Parser,No,GPL+ or Artistic
+2609,perl-HTML-Tagset,No,GPL+ or Artistic
+2610,perl-HTML-Tree,No,GPL+ or Artistic
+2611,perl-HTTP-Cookies,No,GPL+ or Artistic
+2612,perl-HTTP-Daemon,No,GPL+ or Artistic
+2613,perl-HTTP-Date,No,GPL+ or Artistic
+2614,perl-HTTP-Message,No,GPL+ or Artistic
+2615,perl-HTTP-Negotiate,No,GPL+ or Artistic
+2616,perl-HTTP-Tiny,No,GPL+ or Artistic
+2617,perl-IO-Compress,No,GPL+ or Artistic
+2618,perl-IO-HTML,No,GPL+ or Artistic
+2619,perl-IO-Socket-INET6,No,GPL+ or Artistic
+2620,perl-IO-Socket-IP,No,GPL+ or Artistic
+2621,perl-IO-Socket-SSL,No,GPL+ or Artistic
+2622,perl-IO-stringy,No,GPL+ or Artistic
+2623,perl-IO-Zlib,No,GPL+ or Artistic
+2624,perl-IPC-Cmd,No,GPL+ or Artistic
+2625,perl-JSON,No,GPL+ or Artistic
+2626,perl-JSON-PP,No,GPL+ or Artistic
+2627,perl-LDAP,Yes,GPL+ or Artistic
+2628,perl-libintl,No,LGPLv2+
+2629,perl-libs,No,GPL+ or Artistic
+2630,perl-libwww-perl,No,GPL+ or Artistic
+2631,perl-libxml-perl,No,(GPL+ or Artistic) and Public Domain
+2632,perl-List-MoreUtils,No,GPL+ or Artistic
+2633,perl-local-lib,No,GPL+ or Artistic
+2634,perl-Locale-Codes,No,GPL+ or Artistic
+2635,perl-Locale-Maketext,No,GPL+ or Artistic
+2636,perl-Locale-Maketext-Simple,No,MIT
+2637,perl-Log-Message,No,GPL+ or Artistic
+2638,perl-Log-Message-Simple,No,GPL+ or Artistic
+2639,perl-LWP-MediaTypes,No,(GPL+ or Artistic) and Public Domain
+2640,perl-LWP-Protocol-https,Yes,GPL+ or Artistic
+2641,perl-macros,No,GPL+ or Artistic
+2642,perl-Mail-DKIM,No,(GPL+ or Artistic) and GPL and Copyright Only
+2643,perl-Mail-SPF,No,BSD
+2644,perl-MailTools,No,GPL+ or Artistic
+2645,perl-Module-Build,No,GPL+ or Artistic
+2646,perl-Module-CoreList,No,GPL+ or Artistic
+2647,perl-Module-Implementation,No,Artistic 2.0
+2648,perl-Module-Load,No,GPL+ or Artistic
+2649,perl-Module-Load-Conditional,No,GPL+ or Artistic
+2650,perl-Module-Loaded,No,GPL+ or Artistic
+2651,perl-Module-Metadata,No,GPL+ or Artistic
+2652,perl-Module-Pluggable,No,GPL+ or Artistic
+2653,perl-Module-Runtime,No,GPL+ or Artistic
+2654,perl-Module-Signature,No,CC0 and (GPL+ or Artistic)
+2655,perl-Mozilla-CA,Yes,MPLv1.1 or LGPLv2+ or GPLv2+
+2656,perl-Mozilla-LDAP,Yes,GPLv2+ and LGPLv2+ and MPLv1.1
+2657,perl-Net-Daemon,No,GPL+ or Artistic
+2658,perl-Net-DNS,No,(GPL+ or Artistic) and BSD and ISC and MIT
+2659,perl-Net-HTTP,No,GPL+ or Artistic
+2660,perl-Net-LibIDN,No,GPL+ or Artistic
+2661,perl-Net-SMTP-SSL,No,GPL+ or Artistic
+2662,perl-Net-SSLeay,No,OpenSSL
+2663,perl-NetAddr-IP,No,GPLv2+ and (GPLv2+ or Artistic clarified)
+2664,perl-Newt,No,GPL+ or Artistic
+2665,perl-Object-Accessor,No,GPL+ or Artistic
+2666,perl-Package-Constants,No,GPL+ or Artistic
+2667,perl-Package-DeprecationManager,No,Artistic 2.0
+2668,perl-Package-Stash,No,GPL+ or Artistic
+2669,perl-Package-Stash-XS,No,GPL+ or Artistic
+2670,perl-PAR-Dist,No,GPL+ or Artistic
+2671,perl-Params-Check,No,GPL+ or Artistic
+2672,perl-Params-Util,No,GPL+ or Artistic
+2673,perl-Params-Validate,No,Artistic 2.0
+2674,perl-parent,No,GPL+ or Artistic
+2675,perl-Parse-CPAN-Meta,No,GPL+ or Artistic
+2676,perl-PathTools,No,(GPL+ or Artistic) and BSD
+2677,perl-PCP-PMDA,No,GPLv2+
+2678,perl-Perl-OSType,No,GPL+ or Artistic
+2679,perl-Perl4-CoreLibs,Yes,GPL+ or Artistic
+2680,perl-PlRPC,No,GPL+ or Artistic
+2681,perl-Pod-Checker,No,GPL+ or Artistic
+2682,perl-Pod-Coverage,No,GPL+ or Artistic
+2683,perl-Pod-Escapes,No,GPL+ or Artistic
+2684,perl-Pod-LaTeX,No,GPL+ or Artistic
+2685,perl-Pod-Parser,No,GPL+ or Artistic
+2686,perl-Pod-Perldoc,No,GPL+ or Artistic
+2687,perl-Pod-Plainer,No,GPL+ or Artistic
+2688,perl-Pod-Simple,No,GPL+ or Artistic
+2689,perl-Pod-Usage,No,GPL+ or Artistic
+2690,perl-podlators,No,GPL+ or Artistic
+2691,perl-Scalar-List-Utils,No,GPL+ or Artistic
+2692,perl-SGMLSpm,No,GPLv2+
+2693,perl-SNMP_Session,No,Artistic 2.0
+2694,perl-Socket,No,GPL+ or Artistic
+2695,perl-Socket6,No,BSD
+2696,perl-srpm-macros,No,GPLv3+
+2697,perl-Storable,No,GPL+ or Artistic
+2698,perl-String-ShellQuote,No,(GPL+ or Artistic) and GPLv2+
+2699,perl-Sub-Install,No,GPL+ or Artistic
+2700,perl-Sys-CPU,No,(GPL+ or Artistic) and (LGPLv3 or Artistic 2.0)
+2701,perl-Sys-Guestfs,No,LGPLv2+
+2702,perl-Sys-MemInfo,No,(GPLv1+ or Artistic) and LGPLv2+
+2703,perl-Sys-Syslog,No,GPL+ or Artistic
+2704,perl-Sys-Virt,Yes,GPLv2+ or Artistic
+2705,perl-Term-UI,No,GPL+ or Artistic
+2706,perl-TermReadKey,No,(Copyright only) and (Artistic or GPL+)
+2707,perl-Test-Harness,No,GPL+ or Artistic
+2708,perl-Test-Pod,Yes,GPL+ or Artistic
+2709,perl-Test-Pod-Coverage,Yes,GPL+ or Artistic
+2710,perl-Test-Simple,No,GPL+ or Artistic
+2711,perl-Text-Diff,No,(GPL+ or Artistic) and (GPLv2+ or Artistic) and MIT
+2712,perl-Text-ParseWords,No,GPL+ or Artistic
+2713,perl-Text-Soundex,No,Copyright only
+2714,perl-Text-Unidecode,No,GPL+ or Artistic
+2715,perl-Thread-Queue,No,GPL+ or Artistic
+2716,perl-threads,No,GPL+ or Artistic
+2717,perl-threads-shared,No,GPL+ or Artistic
+2718,perl-Time-HiRes,No,GPL+ or Artistic
+2719,perl-Time-Local,No,GPL+ or Artistic
+2720,perl-Time-Piece,No,GPL+ or Artistic
+2721,perl-TimeDate,No,GPL+ or Artistic
+2722,perl-Try-Tiny,No,MIT
+2723,perl-URI,No,GPL+ or Artistic
+2724,perl-version,No,GPL+ or Artistic
+2725,perl-Version-Requirements,No,GPL+ or Artistic
+2726,perl-WWW-RobotRules,No,GPL+ or Artistic
+2727,perl-XML-Dumper,Yes,GPL+ or Artistic
+2728,perl-XML-Filter-BufferText,No,GPL+ or Artistic
+2729,perl-XML-Grove,Yes,GPL+ or Artistic
+2730,perl-XML-LibXML,No,(GPL+ or Artistic) and MIT
+2731,perl-XML-NamespaceSupport,No,GPL+ or Artistic
+2732,perl-XML-Parser,No,GPL+ or Artistic
+2733,perl-XML-SAX,No,GPL+ or Artistic
+2734,perl-XML-SAX-Base,No,GPL+ or Artistic
+2735,perl-XML-SAX-Writer,No,GPL+ or Artistic
+2736,perl-XML-Simple,No,GPL+ or Artistic
+2737,perl-XML-Twig,Yes,GPL+ or Artistic
+2738,perl-XML-Writer,No,CC0
+2739,perl-XML-XPath,No,GPL+ or Artistic
+2740,perl-YAML,No,GPL+ or Artistic
+2741,perl-YAML-Tiny,No,GPL+ or Artistic
+2742,perltidy,Yes,GPLv2+
+2743,pexpect,Yes,MIT
+2744,phonon,No,LGPLv2+
+2745,phonon-backend-gstreamer,Yes,LGPLv2+
+2746,phonon-devel,No,LGPLv2+
+2747,php,Yes,PHP and Zend and BSD
+2748,php-cli,No,PHP and Zend and BSD
+2749,php-common,No,PHP and BSD and ASL 1.0
+2750,php-gd,Yes,PHP and BSD
+2751,php-ldap,Yes,PHP
+2752,php-mysql,Yes,PHP
+2753,php-odbc,Yes,PHP
+2754,php-pdo,Yes,PHP
+2755,php-pear,Yes,BSD and PHP and LGPLv2+
+2756,php-pecl-memcache,Yes,PHP
+2757,php-pgsql,Yes,PHP
+2758,php-process,No,PHP
+2759,php-recode,Yes,PHP
+2760,php-soap,Yes,PHP
+2761,php-xml,Yes,PHP
+2762,php-xmlrpc,Yes,PHP and BSD
+2763,pinentry,No,GPLv2+
+2764,pinentry-gtk,No,GPLv2+
+2765,pinentry-qt,Yes,GPLv2
+2766,pinentry-qt4,No,GPLv2 or GPLv3
+2767,pinfo,Yes,GPLv2
+2768,pixman,No,MIT
+2769,pixman-devel,No,MIT
+2770,pkgconfig,Yes,GPLv2+
+2771,pki-base,No,GPLv2
+2772,pki-base-java,No,GPLv2
+2773,pki-ca,No,GPLv2
+2774,pki-kra,No,GPLv2
+2775,pki-server,No,GPLv2
+2776,pki-symkey,No,GPLv2
+2777,pki-tools,No,GPLv2
+2778,plasma-scriptengine-python,Yes,GPLv2
+2779,plymouth,Yes,GPLv2+
+2780,plymouth-core-libs,No,GPLv2+
+2781,plymouth-graphics-libs,No,GPLv2+
+2782,plymouth-plugin-label,No,GPLv2+
+2783,plymouth-plugin-two-step,No,GPLv2+
+2784,plymouth-scripts,No,GPLv2+
+2785,plymouth-system-theme,Yes,GPLv2+
+2786,plymouth-theme-charge,No,GPLv2+
+2787,pm-utils,Yes,GPLv2
+2788,pmdk-convert,No,BSD
+2789,pmempool,No,BSD
+2790,pnm2ppa,Yes,GPLv2+ and GPLv2
+2791,po4a,No,GPL+
+2792,policycoreutils,Yes,GPLv2
+2793,policycoreutils-devel,No,GPLv2
+2794,policycoreutils-gui,Yes,GPLv2
+2795,policycoreutils-newrole,No,GPLv2
+2796,policycoreutils-python,No,GPLv2
+2797,policycoreutils-sandbox,No,GPLv2
+2798,polkit,No,LGPLv2+
+2799,polkit-devel,Yes,LGPLv2+
+2800,polkit-docs,No,LGPLv2+
+2801,polkit-kde,No,GPLv2+
+2802,polkit-pkla-compat,No,LGPLv2+
+2803,polkit-qt,No,GPLv2+
+2804,poppler,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+2805,poppler-data,No,BSD and GPLv2 and GPLv3+
+2806,poppler-glib,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+2807,poppler-qt,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+2808,poppler-utils,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+2809,popt,No,MIT
+2810,popt-devel,Yes,MIT
+2811,portreserve,No,GPLv2+
+2812,postfix,Yes,IBM and GPLv2+
+2813,postfix-perl-scripts,No,IBM and GPLv2+
+2814,postgresql,Yes,PostgreSQL
+2815,postgresql-contrib,Yes,PostgreSQL
+2816,postgresql-devel,Yes,PostgreSQL
+2817,postgresql-docs,No,PostgreSQL
+2818,postgresql-jdbc,Yes,BSD and ASL 2.0
+2819,postgresql-libs,No,PostgreSQL
+2820,postgresql-odbc,Yes,LGPLv2+
+2821,postgresql-plperl,Yes,PostgreSQL
+2822,postgresql-plpython,Yes,PostgreSQL
+2823,postgresql-pltcl,Yes,PostgreSQL
+2824,postgresql-server,Yes,PostgreSQL
+2825,postgresql-test,Yes,PostgreSQL
+2826,pothana2000-fonts,Yes,GPLv2+ with exceptions
+2827,powerpc-utils,No,GPLv2
+2828,powerpc-utils-python,No,CPL
+2829,powertop,Yes,GPLv2
+2830,ppc64-diag,Yes,GPLv2
+2831,ppc64-utils,Yes,GPLv2
+2832,ppp,Yes,BSD and LGPLv2+ and GPLv2+ and Public Domain
+2833,pptp,Yes,GPLv2+
+2834,prelink,Yes,GPLv2+
+2835,procmail,Yes,GPLv2+ or Artistic
+2836,procps-ng,Yes,GPL+ and GPLv2 and GPLv2+ and GPLv3+ and LGPLv2+
+2837,protobuf,No,BSD
+2838,protobuf-c,Yes,BSD
+2839,ps_mem,Yes,LGPLv2
+2840,psacct,Yes,GPLv3+
+2841,psmisc,No,GPLv2+
+2842,pth,No,LGPLv2+
+2843,pulseaudio,Yes,LGPLv2+
+2844,pulseaudio-gdm-hooks,No,LGPLv2+
+2845,pulseaudio-libs,No,LGPLv2+
+2846,pulseaudio-libs-devel,Yes,LGPLv2+
+2847,pulseaudio-libs-glib2,No,LGPLv2+
+2848,pulseaudio-module-bluetooth,No,LGPLv2+
+2849,pulseaudio-module-x11,Yes,LGPLv2+
+2850,pulseaudio-utils,Yes,LGPLv2+
+2851,pycairo,No,MPLv1.1 or LGPLv2
+2852,pygobject2,No,LGPLv2+
+2853,pygobject3-devel,Yes,LGPLv2+ and MIT
+2854,pygpgme,No,LGPLv2+
+2855,PyGreSQL,Yes,PostgreSQL or Python
+2856,pygtk2,No,LGPLv2+
+2857,pygtk2-libglade,No,LGPLv2+
+2858,pykde4,No,LGPLv2+
+2859,pykickstart,No,GPLv2
+2860,pyldb,No,LGPLv3+
+2861,pyliblzma,No,LGPLv3+
+2862,pyOpenSSL,No,ASL 2.0
+2863,pyorbit,No,LGPLv2+
+2864,PyPAM,Yes,LGPLv2
+2865,pyparsing,No,MIT
+2866,pyparted,No,GPLv2+
+2867,PyQt4,No,(GPLv3 or GPLv2 with exceptions) and BSD
+2868,PyQt4-devel,Yes,(GPLv3 or GPLv2 with exceptions) and BSD
+2869,pyserial,No,Python
+2870,pytalloc,No,LGPLv3+
+2871,python,Yes,Python
+2872,python-augeas,No,LGPLv2+
+2873,python-babel,No,BSD
+2874,python-backports,No,Public Domain
+2875,python-backports-ssl_match_hostname,No,Python
+2876,python-bcc,No,ASL 2.0
+2877,python-beaker,No,BSD and MIT
+2878,python-blivet,No,LGPLv2+
+2879,python-brlapi,No,LGPLv2+
+2880,python-cffi,No,MIT
+2881,python-chardet,No,LGPLv2
+2882,python-cherrypy,No,BSD
+2883,python-configobj,No,BSD
+2884,python-configshell,No,ASL 2.0
+2885,python-coverage,No,BSD and (MIT or GPLv2)
+2886,python-cpio,No,LGPLv2+
+2887,python-cups,No,GPLv2+
+2888,python-custodia,No,GPLv3+
+2889,python-dateutil,No,Python
+2890,python-decorator,No,BSD
+2891,python-deltarpm,No,BSD
+2892,python-devel,Yes,Python
+2893,python-di,No,GPLv2+
+2894,python-dmidecode,No,GPLv2
+2895,python-dns,No,MIT
+2896,python-docs,No,Python
+2897,python-docutils,No,Public Domain and BSD and Python and GPLv3+
+2898,python-enum34,No,BSD
+2899,python-ethtool,No,GPLv2
+2900,python-firewall,No,GPLv2+
+2901,python-gobject,No,LGPLv2+ and MIT
+2902,python-gobject-base,No,LGPLv2+ and MIT
+2903,python-gssapi,No,ISC
+2904,python-gudev,No,LGPLv3+
+2905,python-hwdata,No,GPLv2
+2906,python-idna,No,BSD and Python and Unicode
+2907,python-iniparse,No,MIT
+2908,python-inotify,No,MIT
+2909,python-ipaddr,Yes,ASL 2.0
+2910,python-ipaddress,No,Python
+2911,python-IPy,No,BSD
+2912,python-javapackages,No,BSD
+2913,python-jinja2,No,BSD
+2914,python-jsonpatch,No,BSD
+2915,python-jsonpointer,No,BSD
+2916,python-jwcrypto,No,LGPLv3+
+2917,python-kdcproxy,No,MIT
+2918,python-kerberos,No,ASL 2.0
+2919,python-kitchen,No,LGPLv2+
+2920,python-kmod,No,LGPLv2+
+2921,python-krbV,No,LGPLv2+
+2922,python-ldap,No,Python
+2923,python-libguestfs,No,LGPLv2+
+2924,python-libipa_hbac,No,LGPLv3+
+2925,python-libs,No,Python
+2926,python-libsss_nss_idmap,No,LGPLv3+
+2927,python-linux-procfs,No,GPLv2
+2928,python-lxml,No,BSD
+2929,python-magic,Yes,BSD
+2930,python-mako,No,(MIT and Python) and (BSD or GPLv2)
+2931,python-markupsafe,No,BSD
+2932,python-matplotlib,No,Python
+2933,python-meh,No,GPLv2+
+2934,python-meh-gui,No,GPLv2+
+2935,python-memcached,Yes,Python
+2936,python-netaddr,No,BSD
+2937,python-netifaces,No,MIT
+2938,python-nose,No,LGPLv2+ and Public Domain
+2939,python-nss,No,MPLv2.0 or GPLv2+ or LGPLv2+
+2940,python-ntplib,No,LGPLv2+
+2941,python-paramiko,No,LGPLv2+
+2942,python-paste,No,MIT and ZPLv2.0 and Python and Public Domain and (AFL or MIT) and (MIT or ASL 2.0)
+2943,python-pcp,No,GPLv2+
+2944,python-perf,No,GPLv2
+2945,python-pillow,No,MIT
+2946,python-ply,No,BSD
+2947,python-prettytable,No,BSD
+2948,python-psycopg2,Yes,LGPLv3+ with exceptions
+2949,python-pwquality,No,BSD or GPLv2+
+2950,python-pyblock,No,GPLv2 or GPLv3
+2951,python-pycparser,No,BSD
+2952,python-pycurl,No,LGPLv2+ or MIT
+2953,python-pyudev,No,LGPLv2+
+2954,python-qrcode-core,No,BSD
+2955,python-rados,No,LGPL-2.0
+2956,python-rbd,No,LGPL-2.0
+2957,python-reportlab,No,BSD
+2958,python-requests,No,ASL 2.0
+2959,python-rhsm,No,GPLv2
+2960,python-rhsm-certificates,No,GPLv2
+2961,python-rpm-macros,No,MIT
+2962,python-rtslib,No,ASL 2.0
+2963,python-schedutils,No,GPLv2
+2964,python-setproctitle,No,BSD
+2965,python-setuptools,Yes,Python or ZPLv2.0
+2966,python-six,No,MIT
+2967,python-slip,No,GPLv2+
+2968,python-slip-dbus,No,GPLv2+
+2969,python-smbc,Yes,GPLv2+
+2970,python-sqlalchemy,No,MIT
+2971,python-srpm-macros,No,MIT
+2972,python-sss,No,LGPLv3+
+2973,python-sss-murmur,No,LGPLv3+
+2974,python-sssdconfig,No,GPLv3+
+2975,python-suds,No,LGPLv3+
+2976,python-syspurpose,No,GPLv2
+2977,python-tdb,No,LGPLv3+
+2978,python-tempita,No,MIT
+2979,python-tevent,No,LGPLv3+
+2980,python-urlgrabber,No,LGPLv2+
+2981,python-urllib3,No,MIT
+2982,python-urwid,No,LGPLv2+
+2983,python-virtualenv,Yes,MIT
+2984,python-volume_key,Yes,GPLv2 and (MPLv1.1 or GPLv2 or LGPLv2)
+2985,python-yubico,No,BSD
+2986,python2-blivet3,No,LGPLv2+
+2987,python2-blockdev,No,LGPLv2+
+2988,python2-bytesize,No,LGPLv2+
+2989,python2-caribou,No,LGPLv2+
+2990,python2-cryptography,No,ASL 2.0 or BSD
+2991,python2-futures,No,Python
+2992,python2-hawkey,No,LGPLv2+
+2993,python2-ipaclient,No,GPLv3+
+2994,python2-ipalib,No,GPLv3+
+2995,python2-ipaserver,No,GPLv3+
+2996,python2-keycloak-httpd-client-install,No,GPLv3
+2997,python2-oauthlib,No,BSD
+2998,python2-pyasn1,No,BSD
+2999,python2-pyasn1-modules,No,BSD
+3000,python2-pyatspi,No,LGPLv2 and GPLv2
+3001,python2-requests-oauthlib,No,ISC
+3002,python2-rpm-macros,No,MIT
+3003,python2-subprocess32,No,Python
+3004,python3,No,Python
+3005,python3-libs,No,Python
+3006,python3-pip,No,MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
+3007,python3-rpm-generators,No,GPLv2+
+3008,python3-rpm-macros,No,MIT
+3009,python3-setuptools,No,MIT and (BSD or ASL 2.0)
+3010,python3-wheel,No,MIT
+3011,pytz,No,MIT
+3012,pyusb,No,BSD
+3013,pywbem,No,LGPLv2
+3014,pyxattr,No,LGPLv2+
+3015,PyYAML,No,MIT
+3016,qca-ossl,No,LGPLv2+
+3017,qca2,No,LGPLv2+
+3018,qclib,Yes,BSD
+3019,qdox,No,ASL 2.0
+3020,qemu-guest-agent,Yes,GPLv2
+3021,qemu-img,No,GPLv2 and GPLv2+ and CC-BY
+3022,qemu-img-ma,No,GPLv2 and GPLv2+ and CC-BY
+3023,qemu-kvm,Yes,GPLv2 and GPLv2+ and CC-BY
+3024,qemu-kvm-common,No,GPLv2 and GPLv2+ and CC-BY
+3025,qemu-kvm-common-ma,No,GPLv2 and GPLv2+ and CC-BY
+3026,qemu-kvm-ma,Yes,GPLv2 and GPLv2+ and CC-BY
+3027,qemu-kvm-tools,Yes,GPLv2 and GPLv2+ and CC-BY
+3028,qemu-kvm-tools-ma,Yes,GPLv2 and GPLv2+ and CC-BY
+3029,qgnomeplatform,Yes,LGPLv2+
+3030,qimageblitz,No,BSD and ImageMagick
+3031,qjson,No,GPLv2+
+3032,qpdf-libs,No,Artistic 2.0 and MIT
+3033,qperf,Yes,GPLv2 or BSD
+3034,qrencode-libs,No,LGPLv2+
+3035,qt,No,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+3036,qt-devel,Yes,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+3037,qt-mysql,Yes,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+3038,qt-odbc,Yes,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+3039,qt-postgresql,Yes,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+3040,qt-settings,No,MIT
+3041,qt-x11,No,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+3042,qt3,No,QPL or GPLv2 or GPLv3
+3043,qt3-devel,Yes,QPL or GPLv2 or GPLv3
+3044,qt3-MySQL,Yes,QPL or GPLv2 or GPLv3
+3045,qt3-ODBC,Yes,QPL or GPLv2 or GPLv3
+3046,qt3-PostgreSQL,Yes,QPL or GPLv2 or GPLv3
+3047,qt5-designer,No,LGPLv3 or LGPLv2
+3048,qt5-doctools,No,LGPLv3 or LGPLv2
+3049,qt5-linguist,No,LGPLv3 or LGPLv2
+3050,qt5-qt3d,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3051,qt5-qt3d-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3052,qt5-qtbase,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3053,qt5-qtbase-common,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3054,qt5-qtbase-devel,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3055,qt5-qtbase-gui,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3056,qt5-qtbase-mysql,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3057,qt5-qtbase-odbc,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3058,qt5-qtbase-postgresql,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3059,qt5-qtcanvas3d,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3060,qt5-qtconnectivity,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3061,qt5-qtconnectivity-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3062,qt5-qtdeclarative,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3063,qt5-qtdeclarative-devel,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3064,qt5-qtdoc,Yes,GFDL
+3065,qt5-qtenginio,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3066,qt5-qtenginio-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3067,qt5-qtgraphicaleffects,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3068,qt5-qtimageformats,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3069,qt5-qtlocation,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3070,qt5-qtlocation-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3071,qt5-qtmultimedia,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3072,qt5-qtmultimedia-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3073,qt5-qtquickcontrols,Yes,LGPLv2 or LGPLv3 and GFDL
+3074,qt5-qtquickcontrols2,Yes,GPLv2+ or LGPLv3 and GFDL
+3075,qt5-qtscript,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3076,qt5-qtscript-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3077,qt5-qtsensors,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3078,qt5-qtsensors-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3079,qt5-qtserialbus,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3080,qt5-qtserialport,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3081,qt5-qtserialport-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3082,qt5-qtsvg,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3083,qt5-qtsvg-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3084,qt5-qttools,No,LGPLv3 or LGPLv2
+3085,qt5-qttools-common,No,LGPLv3 or LGPLv2
+3086,qt5-qttools-devel,Yes,LGPLv3 or LGPLv2
+3087,qt5-qttools-libs-designer,No,LGPLv3 or LGPLv2
+3088,qt5-qttools-libs-designercomponents,No,LGPLv3 or LGPLv2
+3089,qt5-qttools-libs-help,No,LGPLv3 or LGPLv2
+3090,qt5-qttranslations,Yes,LGPLv2 with exceptions or GPLv3 with exceptions and GFDL
+3091,qt5-qtwayland,Yes,LGPLv3
+3092,qt5-qtwebchannel,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3093,qt5-qtwebchannel-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3094,qt5-qtwebsockets,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3095,qt5-qtwebsockets-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3096,qt5-qtx11extras,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3097,qt5-qtx11extras-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3098,qt5-qtxmlpatterns,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3099,qt5-qtxmlpatterns-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3100,qt5-rpm-macros,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3101,quagga,Yes,GPLv2+
+3102,quota,Yes,BSD and LGPLv2+ and GPLv2 and GPLv2+
+3103,quota-nls,No,BSD and LGPLv2+ and GPLv2 and GPLv2+
+3104,radvd,Yes,BSD with advertising
+3105,raptor2,No,GPLv2+ or LGPLv2+ or ASL 2.0
+3106,rarian,No,LGPLv2+
+3107,rarian-compat,No,GPLv2+
+3108,rasdaemon,Yes,GPLv2
+3109,rasqal,No,LGPLv2+ or ASL 2.0
+3110,rcs,Yes,GPLv3+
+3111,rdate,Yes,GPLv2+
+3112,rdist,Yes,BSD
+3113,rdma-core,Yes,GPLv2 or BSD
+3114,rdma-core-devel,Yes,GPLv2 or BSD
+3115,readline,No,GPLv3+
+3116,readline-devel,Yes,GPLv3+
+3117,realmd,Yes,LGPLv2+
+3118,rear,Yes,GPLv3
+3119,recode,No,GPLv2+
+3120,Red_Hat_Enterprise_Linux-Release_Notes-7-as-IN,No,CC-BY-SA
+3121,Red_Hat_Enterprise_Linux-Release_Notes-7-bn-IN,No,CC-BY-SA
+3122,Red_Hat_Enterprise_Linux-Release_Notes-7-de-DE,No,CC-BY-SA
+3123,Red_Hat_Enterprise_Linux-Release_Notes-7-en-US,Yes,CC-BY-SA
+3124,Red_Hat_Enterprise_Linux-Release_Notes-7-es-ES,No,CC-BY-SA
+3125,Red_Hat_Enterprise_Linux-Release_Notes-7-fr-FR,No,CC-BY-SA
+3126,Red_Hat_Enterprise_Linux-Release_Notes-7-gu-IN,No,CC-BY-SA
+3127,Red_Hat_Enterprise_Linux-Release_Notes-7-hi-IN,No,CC-BY-SA
+3128,Red_Hat_Enterprise_Linux-Release_Notes-7-it-IT,No,CC-BY-SA
+3129,Red_Hat_Enterprise_Linux-Release_Notes-7-ja-JP,No,CC-BY-SA
+3130,Red_Hat_Enterprise_Linux-Release_Notes-7-kn-IN,No,CC-BY-SA
+3131,Red_Hat_Enterprise_Linux-Release_Notes-7-ko-KR,No,CC-BY-SA
+3132,Red_Hat_Enterprise_Linux-Release_Notes-7-ml-IN,No,CC-BY-SA
+3133,Red_Hat_Enterprise_Linux-Release_Notes-7-mr-IN,No,CC-BY-SA
+3134,Red_Hat_Enterprise_Linux-Release_Notes-7-or-IN,No,CC-BY-SA
+3135,Red_Hat_Enterprise_Linux-Release_Notes-7-pa-IN,No,CC-BY-SA
+3136,Red_Hat_Enterprise_Linux-Release_Notes-7-pt-BR,No,CC-BY-SA
+3137,Red_Hat_Enterprise_Linux-Release_Notes-7-ru-RU,No,CC-BY-SA
+3138,Red_Hat_Enterprise_Linux-Release_Notes-7-ta-IN,No,CC-BY-SA
+3139,Red_Hat_Enterprise_Linux-Release_Notes-7-te-IN,No,CC-BY-SA
+3140,Red_Hat_Enterprise_Linux-Release_Notes-7-zh-CN,No,CC-BY-SA
+3141,Red_Hat_Enterprise_Linux-Release_Notes-7-zh-TW,No,CC-BY-SA
+3142,redfish-finder,No,GPLv2
+3143,redhat-access-gui,Yes,ASL 2.0
+3144,redhat-access-plugin-ipa,No,Apache License 2.0
+3145,redhat-bookmarks,No,GFDL
+3146,redhat-indexhtml,Yes,Distributable
+3147,redhat-logos,No,"Licensed only for approved usage, see COPYING for details."
+3148,redhat-lsb,Yes,GPLv2
+3149,redhat-lsb-core,Yes,GPLv2
+3150,redhat-lsb-cxx,No,GPLv2
+3151,redhat-lsb-desktop,No,GPLv2
+3152,redhat-lsb-languages,No,GPLv2
+3153,redhat-lsb-printing,No,GPLv2
+3154,redhat-lsb-submod-multimedia,No,GPLv2
+3155,redhat-lsb-submod-security,No,GPLv2
+3156,redhat-menus,No,GPL+
+3157,redhat-release-eula,Yes,n/a
+3158,redhat-release-server,Yes,GPLv2
+3159,redhat-rpm-config,Yes,GPL+
+3160,redhat-support-lib-python,No,ASL 2.0
+3161,redhat-support-tool,Yes,ASL 2.0
+3162,redhat-upgrade-dracut,Yes,GPLv2+
+3163,redhat-upgrade-dracut-plymouth,No,GPLv2+
+3164,redhat-upgrade-tool,Yes,GPLv2+
+3165,redland,No,LGPLv2+ or ASL 2.0
+3166,redland-virtuoso,No,LGPLv2+ or ASL 2.0
+3167,regexp,No,ASL 2.0
+3168,relaxngDatatype,No,BSD
+3169,rest,No,LGPLv2
+3170,resteasy-base-atom-provider,No,ASL 2.0 and CDDL
+3171,resteasy-base-client,No,ASL 2.0 and CDDL
+3172,resteasy-base-jackson-provider,No,ASL 2.0 and CDDL
+3173,resteasy-base-jaxb-provider,No,ASL 2.0 and CDDL
+3174,resteasy-base-jaxrs,No,ASL 2.0 and CDDL
+3175,resteasy-base-jaxrs-api,No,ASL 2.0 and CDDL
+3176,resteasy-base-jettison-provider,No,ASL 2.0 and CDDL
+3177,rfkill,Yes,ISC
+3178,rhdb-utils,Yes,GPLv2+
+3179,rhino,No,MPLv2.0
+3180,rhn-check,No,GPLv2
+3181,rhn-client-tools,No,GPLv2
+3182,rhn-setup,No,GPLv2
+3183,rhn-setup-gnome,Yes,GPLv2
+3184,rhnlib,No,GPLv2
+3185,rhnsd,Yes,GPLv2
+3186,rhsm-gtk,No,GPLv2
+3187,rhythmbox,Yes,GPLv2+ with exceptions and GFDL
+3188,rmt,No,CDDL
+3189,rng-tools,Yes,GPLv2+
+3190,rngom,No,MIT
+3191,rootfiles,Yes,Public Domain
+3192,rp-pppoe,Yes,GPLv2+
+3193,rpcbind,No,BSD
+3194,rpm,Yes,GPLv2+
+3195,rpm-build,Yes,GPLv2+
+3196,rpm-build-libs,No,GPLv2+ and LGPLv2+ with exceptions
+3197,rpm-devel,No,GPLv2+ and LGPLv2+ with exceptions
+3198,rpm-libs,No,GPLv2+ and LGPLv2+ with exceptions
+3199,rpm-python,No,GPLv2+
+3200,rpm-sign,Yes,GPLv2+
+3201,rpmdevtools,Yes,GPLv2+ and GPLv2
+3202,rpmemd,No,BSD
+3203,rpmlint,Yes,GPLv2
+3204,rrdtool,Yes,GPLv2+ with exceptions
+3205,rrdtool-perl,No,GPLv2+ with exceptions
+3206,rsh,Yes,BSD
+3207,rsh-server,Yes,BSD
+3208,rsync,Yes,GPLv3+
+3209,rsyslog,Yes,(GPLv3+ and ASL 2.0)
+3210,rsyslog-gnutls,Yes,(GPLv3+ and ASL 2.0)
+3211,rsyslog-gssapi,Yes,(GPLv3+ and ASL 2.0)
+3212,rsyslog-kafka,Yes,(GPLv3+ and ASL 2.0)
+3213,rsyslog-mmjsonparse,No,(GPLv3+ and ASL 2.0)
+3214,rsyslog-mysql,Yes,(GPLv3+ and ASL 2.0)
+3215,rsyslog-pgsql,Yes,(GPLv3+ and ASL 2.0)
+3216,rsyslog-relp,Yes,(GPLv3+ and ASL 2.0)
+3217,rtkit,No,GPLv3+ and BSD
+3218,ruby,Yes,(Ruby or BSD) and Public Domain
+3219,ruby-irb,Yes,(Ruby or BSD) and Public Domain
+3220,ruby-libs,No,Ruby or BSD
+3221,rubygem-abrt,Yes,MIT
+3222,rubygem-bigdecimal,No,GPL+ or Artistic
+3223,rubygem-bundler,Yes,MIT
+3224,rubygem-io-console,No,(Ruby or BSD) and Public Domain
+3225,rubygem-json,No,Ruby or GPLv2
+3226,rubygem-net-http-persistent,No,MIT
+3227,rubygem-psych,No,MIT
+3228,rubygem-rdoc,No,GPLv2 and Ruby and MIT
+3229,rubygem-thor,No,MIT
+3230,rubygems,No,Ruby or MIT
+3231,rusers,Yes,BSD
+3232,rusers-server,Yes,BSD
+3233,rwho,Yes,BSD and GPL+
+3234,s390utils,Yes,GPLv2 and GPLv2+ and CPL
+3235,s390utils-base,Yes,GPLv2 and GPLv2+ and CPL
+3236,s390utils-cmsfs,No,GPLv2
+3237,s390utils-cmsfs-fuse,Yes,GPLv2
+3238,s390utils-cpuplugd,No,GPLv2+
+3239,s390utils-hmcdrvfs,No,GPLv2
+3240,s390utils-iucvterm,No,GPLv2
+3241,s390utils-mon_statd,No,GPLv2
+3242,s390utils-osasnmpd,No,GPLv2+
+3243,s390utils-zdsfs,No,GPLv2
+3244,s390utils-ziomon,No,GPLv2
+3245,saab-fonts,Yes,GPLv2+ with exceptions
+3246,samba,Yes,GPLv3+ and LGPLv3+
+3247,samba-client,Yes,GPLv3+ and LGPLv3+
+3248,samba-client-libs,No,GPLv3+ and LGPLv3+
+3249,samba-common,No,GPLv3+ and LGPLv3+
+3250,samba-common-libs,No,GPLv3+ and LGPLv3+
+3251,samba-common-tools,No,GPLv3+ and LGPLv3+
+3252,samba-krb5-printing,Yes,GPLv3+ and LGPLv3+
+3253,samba-libs,No,GPLv3+ and LGPLv3+
+3254,samba-python,No,GPLv3+ and LGPLv3+
+3255,samba-winbind,Yes,GPLv3+ and LGPLv3+
+3256,samba-winbind-clients,Yes,GPLv3+ and LGPLv3+
+3257,samba-winbind-modules,No,GPLv3+ and LGPLv3+
+3258,samyak-devanagari-fonts,Yes,GPLv3+ with exceptions
+3259,samyak-fonts-common,No,GPLv3+ with exceptions
+3260,samyak-gujarati-fonts,Yes,GPLv3+ with exceptions
+3261,samyak-malayalam-fonts,Yes,GPLv3+ with exceptions
+3262,samyak-oriya-fonts,Yes,GPLv3+ with exceptions
+3263,samyak-tamil-fonts,Yes,GPLv3+ with exceptions
+3264,sane-backends,No,GPLv2+ and GPLv2+ with exceptions and Public Domain
+3265,sane-backends-devel,Yes,GPLv2+ and GPLv2+ with exceptions and Public Domain
+3266,sane-backends-drivers-cameras,No,GPLv2+ and GPLv2+ with exceptions and Public Domain
+3267,sane-backends-drivers-scanners,Yes,GPLv2+ and GPLv2+ with exceptions and Public Domain
+3268,sane-backends-libs,No,GPLv2+ and GPLv2+ with exceptions and Public Domain
+3269,sane-frontends,Yes,GPLv2+
+3270,sassist,No,MIT
+3271,satyr,No,GPLv2+
+3272,sbc,No,GPLv2 and LGPLv2+
+3273,sblim-cim-client2,Yes,EPL
+3274,sblim-cmpi-base,No,EPL
+3275,sblim-cmpi-fsvol,Yes,EPL
+3276,sblim-cmpi-network,Yes,EPL
+3277,sblim-cmpi-nfsv3,Yes,EPL
+3278,sblim-cmpi-nfsv4,Yes,EPL
+3279,sblim-cmpi-params,Yes,EPL
+3280,sblim-cmpi-sysfs,Yes,EPL
+3281,sblim-cmpi-syslog,Yes,EPL
+3282,sblim-gather,Yes,EPL
+3283,sblim-gather-provider,Yes,EPL
+3284,sblim-indication_helper,Yes,CPL
+3285,sblim-sfcb,Yes,EPL
+3286,sblim-sfcc,No,EPL
+3287,sblim-smis-hba,Yes,EPL
+3288,sblim-wbemcli,Yes,EPL
+3289,scannotation,No,ASL 2.0
+3290,scap-security-guide,Yes,BSD-3-Clause
+3291,scap-security-guide-doc,Yes,BSD-3-Clause
+3292,scap-workbench,Yes,GPLv3+
+3293,scipy,Yes,BSD and Boost and Public Domain
+3294,scl-utils,Yes,GPLv2+
+3295,screen,Yes,GPLv2+
+3296,scrub,Yes,GPLv2+
+3297,SDL,No,LGPLv2+
+3298,SDL-devel,Yes,LGPLv2+
+3299,sdparm,Yes,BSD
+3300,seabios-bin,No,LGPLv3
+3301,seahorse,Yes,GPLv2+ and LGPLv2+
+3302,seahorse-nautilus,Yes,GPLv2+
+3303,seahorse-sharing,Yes,GPLv2+ and LGPLv2+
+3304,seavgabios-bin,No,LGPLv3
+3305,sed,No,GPLv3+
+3306,selinux-policy,No,GPLv2+
+3307,selinux-policy-devel,No,GPLv2+
+3308,selinux-policy-minimum,No,GPLv2+
+3309,selinux-policy-mls,Yes,GPLv2+
+3310,selinux-policy-targeted,Yes,GPLv2+
+3311,sendmail,Yes,Sendmail
+3312,sendmail-cf,Yes,Sendmail
+3313,servicelog,Yes,GPLv2
+3314,setools-console,Yes,GPLv2
+3315,setools-libs,No,LGPLv2
+3316,setroubleshoot,Yes,GPLv2+
+3317,setroubleshoot-plugins,No,GPLv2+
+3318,setroubleshoot-server,No,GPLv2+
+3319,setserial,Yes,GPL+
+3320,setup,Yes,Public Domain
+3321,setuptool,Yes,GPLv2+
+3322,sg3_utils,Yes,GPLv2+ and BSD
+3323,sg3_utils-libs,Yes,GPLv2+ and BSD
+3324,sgabios-bin,No,ASL 2.0
+3325,sgml-common,No,GPL+
+3326,sgpio,Yes,GPLv2+
+3327,shadow-utils,Yes,BSD and GPLv2+
+3328,shared-desktop-ontologies,No,(BSD or CC-BY) and CC-BY and W3C
+3329,shared-desktop-ontologies-devel,No,(BSD or CC-BY) and CC-BY and W3C
+3330,shared-mime-info,No,GPLv2+
+3331,shim-ia32,Yes,BSD
+3332,shim-unsigned-ia32,Yes,BSD
+3333,shim-unsigned-x64,Yes,BSD
+3334,shim-x64,Yes,BSD
+3335,shotwell,Yes,LGPLv2+ and CC-BY-SA
+3336,si-units,No,BSD
+3337,sil-abyssinica-fonts,Yes,OFL
+3338,sil-nuosu-fonts,Yes,OFL
+3339,sil-padauk-fonts,Yes,OFL
+3340,sip,No,GPLv2 or GPLv3 and (GPLv3+ with exceptions)
+3341,sip-devel,No,GPLv2 or GPLv3 and (GPLv3+ with exceptions)
+3342,sip-macros,No,GPLv2 or GPLv3 and (GPLv3+ with exceptions)
+3343,skkdic,No,GPLv2+
+3344,slang,No,GPLv2+
+3345,slapi-nis,Yes,GPLv2
+3346,slf4j,No,MIT and ASL 2.0
+3347,SLOF,No,BSD
+3348,smartmontools,Yes,GPLv2+
+3349,smc-anjalioldlipi-fonts,Yes,GPL+
+3350,smc-dyuthi-fonts,Yes,GPLv3+ with exceptions
+3351,smc-fonts-common,No,GPLv3+ with exceptions and GPLv2+ with exceptions and GPLv2+ and GPLv2 and GPL+
+3352,smc-kalyani-fonts,Yes,GPLv3+ with exceptions
+3353,smc-meera-fonts,Yes,GPLv2+ with exceptions
+3354,smc-rachana-fonts,Yes,GPLv2+
+3355,smc-raghumalayalam-fonts,Yes,GPLv2
+3356,smc-suruma-fonts,Yes,GPLv3 with exceptions
+3357,snapper,Yes,GPLv2
+3358,snapper-libs,No,GPLv2
+3359,snappy,No,BSD
+3360,socat,Yes,GPLv2
+3361,softhsm,No,BSD
+3362,soprano,No,LGPLv2+
+3363,soprano-devel,No,LGPLv2+
+3364,sos,Yes,GPLv2+
+3365,sos-collector,Yes,GPLv2
+3366,sound-theme-freedesktop,No,GPLv2+ and LGPLv2+ and CC-BY-SA and CC-BY
+3367,soundtouch,No,LGPLv2+
+3368,sox,Yes,GPLv2+ and LGPLv2+ and MIT
+3369,spamassassin,Yes,ASL 2.0
+3370,spax,No,CDDL
+3371,speech-dispatcher,No,GPLv2+ and GPLv2
+3372,speech-dispatcher-python,No,GPLv2+
+3373,speex,No,BSD
+3374,spice-glib,No,LGPLv2+
+3375,spice-gtk3,No,LGPLv2+
+3376,spice-protocol,No,BSD and LGPLv2+
+3377,spice-server,No,LGPLv2+
+3378,spice-streaming-agent,Yes,ASL 2.0
+3379,spice-vdagent,Yes,GPLv3+
+3380,spice-xpi,Yes,MPLv1.1 or GPLv2+ or LGPLv2+
+3381,sqlite,No,Public Domain
+3382,sqlite-devel,Yes,Public Domain
+3383,squashfs-tools,Yes,GPLv2+
+3384,squid,Yes,GPLv2+ and (LGPLv2+ and MIT and BSD and Public Domain)
+3385,squid-migration-script,No,GPLv2+ and (LGPLv2+ and MIT and BSD and Public Domain)
+3386,srp_daemon,Yes,GPLv2 or BSD
+3387,sssd,Yes,GPLv3+
+3388,sssd-ad,No,GPLv3+
+3389,sssd-client,Yes,LGPLv3+
+3390,sssd-common,No,GPLv3+
+3391,sssd-common-pac,No,GPLv3+
+3392,sssd-dbus,Yes,GPLv3+
+3393,sssd-ipa,No,GPLv3+
+3394,sssd-kcm,Yes,GPLv3+
+3395,sssd-krb5,No,GPLv3+
+3396,sssd-krb5-common,No,GPLv3+
+3397,sssd-ldap,No,GPLv3+
+3398,sssd-libwbclient,No,GPLv3+ and LGPLv3+
+3399,sssd-polkit-rules,Yes,GPLv3+
+3400,sssd-proxy,No,GPLv3+
+3401,sssd-tools,Yes,GPLv3+
+3402,sssd-winbind-idmap,Yes,GPLv3+ and LGPLv3+
+3403,star,Yes,CDDL
+3404,startup-notification,No,LGPLv2
+3405,startup-notification-devel,Yes,LGPLv2
+3406,stax-ex,No,CDDL or GPLv2
+3407,stax2-api,No,BSD
+3408,stix-fonts,Yes,OFL
+3409,stix-math-fonts,No,OFL
+3410,strace,Yes,LGPL-2.1+ and GPL-2.0+
+3411,strace32,Yes,LGPL-2.1+ and GPL-2.0+
+3412,strigi-libs,No,LGPLv2+
+3413,strongimcv,Yes,GPLv2+
+3414,stunnel,Yes,GPLv2
+3415,subscription-manager,Yes,GPLv2
+3416,subscription-manager-gui,Yes,GPLv2
+3417,subscription-manager-initial-setup-addon,Yes,GPLv2
+3418,subscription-manager-migration,Yes,GPLv2
+3419,subscription-manager-migration-data,Yes,CC0
+3420,subscription-manager-plugin-container,Yes,GPLv2
+3421,subscription-manager-rhsm,No,GPLv2
+3422,subscription-manager-rhsm-certificates,No,GPLv2
+3423,subversion,Yes,ASL 2.0
+3424,subversion-gnome,Yes,ASL 2.0
+3425,subversion-libs,No,ASL 2.0
+3426,sudo,Yes,ISC
+3427,suitesparse,No,LGPLv2+ and GPLv2+
+3428,supermin-helper,No,GPLv2+
+3429,supermin5,No,GPLv2+
+3430,sushi,Yes,GPLv2+ with exceptions
+3431,svrcore,No,MPL2.0
+3432,sweeper,Yes,LGPLv2+
+3433,swig,Yes,GPLv3+ and BSD
+3434,symlinks,Yes,Copyright only
+3435,sysfsutils,No,GPLv2
+3436,syslinux,Yes,GPLv2+
+3437,syslinux-extlinux,No,GPLv2+
+3438,syslinux-tftpboot,Yes,GPLv2+
+3439,sysstat,Yes,GPLv2+
+3440,system-config-date,Yes,GPLv2+
+3441,system-config-date-docs,No,GPLv2+
+3442,system-config-firewall-base,Yes,GPLv2+
+3443,system-config-kdump,Yes,GPLv2+
+3444,system-config-keyboard,No,GPLv2+
+3445,system-config-keyboard-base,No,GPLv2+
+3446,system-config-kickstart,Yes,GPLv2+
+3447,system-config-language,No,GPLv2+
+3448,system-config-printer,Yes,GPLv2+
+3449,system-config-printer-libs,No,GPLv2+
+3450,system-config-printer-udev,Yes,GPLv2+
+3451,system-config-users,Yes,GPLv2+
+3452,system-config-users-docs,Yes,GPLv2+
+3453,system-storage-manager,Yes,GPLv2+
+3454,system-switch-java,Yes,GPLv2+ and BSD
+3455,systemd,Yes,LGPLv2+ and MIT and GPLv2+
+3456,systemd-devel,Yes,LGPLv2+ and MIT
+3457,systemd-libs,No,LGPLv2+ and MIT
+3458,systemd-python,No,LGPLv2+
+3459,systemd-sysv,No,LGPLv2+
+3460,systemtap,Yes,GPLv2+
+3461,systemtap-client,Yes,GPLv2+
+3462,systemtap-devel,No,GPLv2+
+3463,systemtap-initscript,Yes,GPLv2+
+3464,systemtap-runtime,Yes,GPLv2+
+3465,systemtap-sdt-devel,Yes,GPLv2+ and Public Domain
+3466,systemtap-server,Yes,GPLv2+
+3467,sysvinit-tools,No,GPLv2+
+3468,t1lib,No,LGPLv2+
+3469,taglib,No,LGPLv2
+3470,tagsoup,No,ASL 2.0 and (GPLv2+ or AFL)
+3471,talk,Yes,BSD
+3472,talk-server,Yes,BSD
+3473,tang,Yes,GPLv3+
+3474,tar,Yes,GPLv3+
+3475,targetcli,Yes,ASL 2.0
+3476,targetd,Yes,GPLv3
+3477,tbb,No,GPLv2 with exceptions
+3478,tbb-devel,Yes,GPLv2 with exceptions
+3479,tboot,Yes,BSD
+3480,tcl,No,TCL
+3481,tcl-devel,Yes,TCL
+3482,tcl-pgtcl,Yes,PostgreSQL
+3483,tcp_wrappers,Yes,BSD
+3484,tcp_wrappers-devel,Yes,BSD
+3485,tcp_wrappers-libs,No,BSD
+3486,tcpdump,Yes,BSD with advertising
+3487,tcsh,Yes,BSD
+3488,tdb-tools,No,LGPLv3+
+3489,teamd,Yes,LGPLv2+
+3490,telepathy-farstream,No,LGPLv2+
+3491,telepathy-filesystem,No,Public Domain
+3492,telepathy-gabble,No,LGPLv2+
+3493,telepathy-glib,No,LGPLv2+
+3494,telepathy-haze,No,GPLv2+
+3495,telepathy-logger,No,LGPLv2+
+3496,telepathy-mission-control,No,LGPLv2
+3497,telepathy-salut,No,LGPLv2+
+3498,telnet,Yes,BSD
+3499,telnet-server,Yes,BSD
+3500,tex-fonts-hebrew,Yes,GPL+ and LPPL
+3501,tex-preview,No,GPLv3+ and GFDL
+3502,texinfo,Yes,GPLv3+
+3503,texlive,Yes,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3504,texlive-ae,No,LPPL
+3505,texlive-algorithms,No,LGPLv2+
+3506,texlive-amscls,No,LPPL
+3507,texlive-amsfonts,No,OFSFLD
+3508,texlive-amsmath,No,LPPL
+3509,texlive-anysize,No,Public Domain
+3510,texlive-attachfile,No,LPPL 1.3
+3511,texlive-avantgar,No,GPL+
+3512,texlive-babel,No,LPPL
+3513,texlive-babelbib,No,LPPL
+3514,texlive-base,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3515,texlive-beamer,No,GPL+
+3516,texlive-bera,No,Bitstream vera
+3517,texlive-beton,No,LPPL
+3518,texlive-bibtex,No,Knuth
+3519,texlive-bibtex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3520,texlive-bookman,No,GPL+
+3521,texlive-booktabs,No,GPL+
+3522,texlive-breakurl,No,LPPL
+3523,texlive-caption,No,LPPL 1.3
+3524,texlive-carlisle,No,LPPL
+3525,texlive-charter,No,Copyright only
+3526,texlive-chngcntr,No,LPPL
+3527,texlive-cite,No,Copyright only
+3528,texlive-cm,No,Knuth
+3529,texlive-cm-lgc,Yes,GPL+
+3530,texlive-cm-super,No,GPL+
+3531,texlive-cmap,No,LPPL
+3532,texlive-cmextra,No,LPPL
+3533,texlive-collection-basic,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3534,texlive-collection-documentation-base,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3535,texlive-collection-fontsrecommended,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3536,texlive-collection-htmlxml,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3537,texlive-collection-latex,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3538,texlive-collection-latexrecommended,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3539,texlive-colortbl,No,LPPL
+3540,texlive-courier,No,GPL+
+3541,texlive-crop,No,LPPL
+3542,texlive-csquotes,No,LPPL
+3543,texlive-ctable,No,LPPL
+3544,texlive-currfile,No,LPPL 1.3
+3545,texlive-dvipdfm,No,LPPL
+3546,texlive-dvipdfm-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3547,texlive-dvipdfmx,No,GPL+
+3548,texlive-dvipdfmx-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3549,texlive-dvipdfmx-def,No,LPPL
+3550,texlive-dvipng,No,LGPLv2+
+3551,texlive-dvipng-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3552,texlive-dvips,No,GPL+
+3553,texlive-dvips-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3554,texlive-ec,No,ec
+3555,texlive-enctex,No,GPL+
+3556,texlive-enumitem,No,LPPL
+3557,texlive-eso-pic,No,LPPL 1.2
+3558,texlive-etex,No,Knuth
+3559,texlive-etex-pkg,No,LPPL
+3560,texlive-etoolbox,No,LPPL 1.3
+3561,texlive-euler,No,LPPL
+3562,texlive-euro,No,LPPL
+3563,texlive-eurosym,No,Eurosym
+3564,texlive-extsizes,No,LPPL
+3565,texlive-fancybox,No,LPPL 1.2
+3566,texlive-fancyhdr,No,LPPL
+3567,texlive-fancyref,No,GPL+
+3568,texlive-fancyvrb,No,LPPL
+3569,texlive-filecontents,No,LPPL
+3570,texlive-filehook,No,LPPL 1.3
+3571,texlive-fix2col,No,LPPL
+3572,texlive-float,No,LPPL
+3573,texlive-fontspec,No,LPPL 1.3
+3574,texlive-footmisc,No,LPPL 1.3
+3575,texlive-fp,No,LPPL
+3576,texlive-fpl,No,GPL+
+3577,texlive-geometry,No,LPPL
+3578,texlive-glyphlist,No,LPPL
+3579,texlive-graphics,No,LPPL
+3580,texlive-gsftopk,No,GPL+
+3581,texlive-gsftopk-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3582,texlive-helvetic,No,GPL+
+3583,texlive-hyperref,No,LPPL
+3584,texlive-hyph-utf8,No,Copyright only
+3585,texlive-hyphen-base,No,LPPL
+3586,texlive-ifetex,No,LPPL 1.3
+3587,texlive-ifluatex,No,LPPL 1.3
+3588,texlive-ifxetex,No,LPPL
+3589,texlive-index,No,LPPL
+3590,texlive-jadetex,No,MIT
+3591,texlive-jadetex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3592,texlive-jknapltx,No,GPL+
+3593,texlive-kastrup,No,LPPL
+3594,texlive-kerkis,Yes,LPPL
+3595,texlive-koma-script,No,LPPL
+3596,texlive-kpathsea,No,LGPLv2+
+3597,texlive-kpathsea-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3598,texlive-kpathsea-lib,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3599,texlive-l3experimental,No,LPPL 1.3
+3600,texlive-l3kernel,No,LPPL 1.3
+3601,texlive-l3packages,No,LPPL 1.3
+3602,texlive-latex,Yes,LPPL
+3603,texlive-latex-bin,No,LPPL
+3604,texlive-latex-bin-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3605,texlive-latex-fonts,No,LPPL
+3606,texlive-latexconfig,No,LPPL
+3607,texlive-listings,No,LPPL
+3608,texlive-lm,No,GFSL
+3609,texlive-lm-math,No,LPPL
+3610,texlive-ltxmisc,No,Public Domain
+3611,texlive-lua-alt-getopt,No,MIT
+3612,texlive-lualatex-math,No,LPPL 1.3
+3613,texlive-luaotfload,No,GPLv2+
+3614,texlive-luaotfload-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3615,texlive-luatex,No,GPLv2+
+3616,texlive-luatex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3617,texlive-luatexbase,No,Public Domain
+3618,texlive-makeindex,No,MakeIndex
+3619,texlive-makeindex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3620,texlive-marginnote,No,LPPL
+3621,texlive-marvosym,No,OFSFLD
+3622,texlive-mathpazo,No,GPL+
+3623,texlive-mdwtools,No,GPL+
+3624,texlive-memoir,No,LPPL
+3625,texlive-metafont,No,Knuth
+3626,texlive-metafont-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3627,texlive-metalogo,No,LPPL
+3628,texlive-mflogo,No,LPPL
+3629,texlive-mfnfss,No,LPPL
+3630,texlive-mfware,No,Knuth
+3631,texlive-mfware-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3632,texlive-mh,No,LPPL 1.3
+3633,texlive-microtype,No,LPPL
+3634,texlive-misc,No,LPPL
+3635,texlive-mparhack,No,GPL+
+3636,texlive-mptopdf,No,LPPL
+3637,texlive-mptopdf-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3638,texlive-ms,No,LPPL
+3639,texlive-multido,No,LPPL
+3640,texlive-natbib,No,LPPL
+3641,texlive-ncntrsbk,No,GPL+
+3642,texlive-ntgclass,No,LPPL
+3643,texlive-oberdiek,No,LPPL
+3644,texlive-palatino,No,GPL+
+3645,texlive-paralist,No,LPPL
+3646,texlive-parallel,No,LPPL
+3647,texlive-parskip,No,LPPL
+3648,texlive-passivetex,No,MIT
+3649,texlive-pdfpages,No,LPPL
+3650,texlive-pdftex,No,GPL+
+3651,texlive-pdftex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3652,texlive-pdftex-def,No,LPPL 1.3
+3653,texlive-pgf,No,LPPL 1.3
+3654,texlive-plain,No,LPPL
+3655,texlive-powerdot,No,LPPL 1.3
+3656,texlive-psfrag,No,psfrag
+3657,texlive-pslatex,No,LPPL
+3658,texlive-psnfss,No,LPPL
+3659,texlive-pspicture,No,LPPL
+3660,texlive-pst-3d,No,LPPL
+3661,texlive-pst-blur,No,LPPL
+3662,texlive-pst-coil,No,LPPL
+3663,texlive-pst-eps,No,LPPL
+3664,texlive-pst-fill,No,LPPL
+3665,texlive-pst-grad,No,LPPL
+3666,texlive-pst-math,No,LPPL
+3667,texlive-pst-node,No,LPPL
+3668,texlive-pst-plot,No,LPPL
+3669,texlive-pst-slpe,No,LPPL
+3670,texlive-pst-text,No,LPPL
+3671,texlive-pst-tree,No,LPPL
+3672,texlive-pstricks,No,LPPL 1.3
+3673,texlive-pstricks-add,No,LPPL
+3674,texlive-pxfonts,No,GPL+
+3675,texlive-qstest,No,LPPL
+3676,texlive-rcs,No,GPL+
+3677,texlive-rotating,No,LPPL
+3678,texlive-rsfs,No,rsfs
+3679,texlive-sansmath,No,Public Domain
+3680,texlive-sauerj,No,LPPL
+3681,texlive-scheme-basic,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3682,texlive-section,No,LPPL
+3683,texlive-seminar,No,LPPL 1.2
+3684,texlive-sepnum,No,LPPL
+3685,texlive-setspace,No,Copyright only
+3686,texlive-showexpl,No,LPPL
+3687,texlive-soul,No,LPPL
+3688,texlive-subfig,No,LPPL
+3689,texlive-symbol,No,GPL+
+3690,texlive-tetex,No,GPL+ and GPLv2+ and LPPL
+3691,texlive-tetex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3692,texlive-tex,No,Knuth
+3693,texlive-tex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3694,texlive-tex-gyre,No,GFSL
+3695,texlive-tex-gyre-math,No,LPPL
+3696,texlive-tex4ht,No,LPPL
+3697,texlive-tex4ht-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3698,texlive-texconfig,No,LPPL
+3699,texlive-texconfig-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3700,texlive-texlive.infra,No,LPPL
+3701,texlive-texlive.infra-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3702,texlive-textcase,No,LPPL
+3703,texlive-thumbpdf,No,LPPL
+3704,texlive-thumbpdf-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3705,texlive-times,No,GPL+
+3706,texlive-tipa,No,LPPL
+3707,texlive-tools,No,LPPL
+3708,texlive-txfonts,No,GPL+
+3709,texlive-type1cm,No,LPPL
+3710,texlive-typehtml,No,LPPL
+3711,texlive-ucs,No,LPPL 1.3
+3712,texlive-ulem,No,Copyright only
+3713,texlive-underscore,No,LPPL
+3714,texlive-unicode-math,No,LPPL 1.3
+3715,texlive-url,No,LPPL
+3716,texlive-utopia,No,Utopia
+3717,texlive-varwidth,No,LPPL
+3718,texlive-wasy,No,Public Domain
+3719,texlive-wasysym,No,LPPL
+3720,texlive-xcolor,No,LPPL
+3721,texlive-xdvi,No,MIT
+3722,texlive-xdvi-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3723,texlive-xkeyval,No,LPPL
+3724,texlive-xmltex,No,LPPL
+3725,texlive-xmltex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3726,texlive-xunicode,No,LPPL 1.3
+3727,texlive-zapfchan,No,GPL+
+3728,texlive-zapfding,No,GPL+
+3729,tftp,Yes,BSD
+3730,tftp-server,Yes,BSD
+3731,thai-scalable-fonts-common,No,GPLv2+ and Bitstream Vera
+3732,thai-scalable-garuda-fonts,Yes,GPLv2+ and Bitstream Vera
+3733,thai-scalable-kinnari-fonts,Yes,GPLv2+ and Bitstream Vera
+3734,thai-scalable-loma-fonts,Yes,GPLv2+ and Bitstream Vera
+3735,thai-scalable-norasi-fonts,Yes,GPLv2+ and Bitstream Vera
+3736,thai-scalable-purisa-fonts,Yes,GPLv2+ and Bitstream Vera
+3737,thai-scalable-sawasdee-fonts,Yes,GPLv2+ and Bitstream Vera
+3738,thai-scalable-tlwgmono-fonts,Yes,GPLv2+ and Bitstream Vera
+3739,thai-scalable-tlwgtypewriter-fonts,Yes,GPLv2+ and Bitstream Vera
+3740,thai-scalable-tlwgtypist-fonts,Yes,GPLv2+ and Bitstream Vera
+3741,thai-scalable-tlwgtypo-fonts,Yes,GPLv2+ and Bitstream Vera
+3742,thai-scalable-umpush-fonts,Yes,GPLv2+ and Bitstream Vera
+3743,thai-scalable-waree-fonts,Yes,GPLv2+ and Bitstream Vera
+3744,theora-tools,No,BSD
+3745,tibetan-machine-uni-fonts,Yes,GPLv3+ with exceptions
+3746,tigervnc,Yes,GPLv2+
+3747,tigervnc-icons,No,GPLv2+
+3748,tigervnc-license,No,GPLv2+
+3749,tigervnc-server,Yes,GPLv2+
+3750,tigervnc-server-minimal,No,GPLv2+
+3751,time,Yes,GPLv2+
+3752,tk,No,TCL
+3753,tk-devel,Yes,TCL
+3754,tmpwatch,Yes,GPLv2
+3755,tmux,Yes,ISC and BSD
+3756,tn5250,Yes,LGPLv2+
+3757,tncfhh,Yes,GPLv2
+3758,tncfhh-libs,No,GPLv2
+3759,tncfhh-utils,No,GPLv2
+3760,tog-pegasus,Yes,MIT
+3761,tog-pegasus-libs,No,MIT
+3762,tokyocabinet,No,LGPLv2+
+3763,tomcat,Yes,ASL 2.0
+3764,tomcat-admin-webapps,Yes,ASL 2.0
+3765,tomcat-el-2.2-api,No,ASL 2.0
+3766,tomcat-jsp-2.2-api,No,ASL 2.0
+3767,tomcat-lib,No,ASL 2.0
+3768,tomcat-servlet-3.0-api,No,ASL 2.0
+3769,tomcat-webapps,Yes,ASL 2.0
+3770,tomcatjss,No,LGPLv2+
+3771,totem,Yes,GPLv2+ with exceptions
+3772,totem-nautilus,Yes,GPLv2+ with exceptions
+3773,totem-pl-parser,No,LGPLv2+
+3774,tpm-quote-tools,Yes,BSD
+3775,tpm-tools,Yes,CPL
+3776,tpm2-abrmd,No,BSD
+3777,tpm2-tools,Yes,BSD
+3778,tpm2-tss,No,BSD and TCGL
+3779,tpm2-tss-devel,No,BSD and TCGL
+3780,trace-cmd,Yes,GPLv2 and LGPLv2+
+3781,traceroute,Yes,GPLv2+
+3782,tracker,No,GPLv2+
+3783,tree,Yes,GPLv2+
+3784,trousers,Yes,BSD
+3785,tss2,Yes,BSD
+3786,ttmkfdir,No,LGPLv2+
+3787,tuna,Yes,GPLv2
+3788,tuned,Yes,GPLv2+
+3789,tuned-profiles-cpu-partitioning,Yes,GPLv2+
+3790,tuned-utils,Yes,GPLv2+
+3791,txw2,No,CDDL and GPLv2 with exceptions
+3792,tzdata,No,Public Domain
+3793,tzdata-java,No,Public Domain
+3794,ucs-miscfixed-fonts,Yes,Public Domain
+3795,ucx,No,BSD
+3796,udftools,Yes,GPLv2+
+3797,udisks2,No,GPLv2+
+3798,udisks2-iscsi,Yes,LGPLv2+
+3799,udisks2-lsm,No,LGPLv2+
+3800,udisks2-lvm2,Yes,LGPLv2+
+3801,unbound,Yes,BSD
+3802,unbound-libs,No,BSD
+3803,unique3,No,LGPLv2+
+3804,unique3-devel,Yes,LGPLv2+
+3805,unit-api,No,BSD
+3806,units,Yes,GPLv3+
+3807,unixODBC,No,GPLv2+ and LGPLv2+
+3808,unixODBC-devel,Yes,GPLv2+ and LGPLv2+
+3809,unzip,Yes,BSD
+3810,uom-lib,No,BSD
+3811,uom-se,No,BSD
+3812,uom-systems,No,BSD
+3813,upower,No,GPLv2+
+3814,urlview,No,GPLv2+
+3815,urw-base35-bookman-fonts,No,AGPLv3
+3816,urw-base35-c059-fonts,No,AGPLv3
+3817,urw-base35-d050000l-fonts,No,AGPLv3
+3818,urw-base35-fonts,No,AGPLv3
+3819,urw-base35-fonts-common,No,AGPLv3
+3820,urw-base35-gothic-fonts,No,AGPLv3
+3821,urw-base35-nimbus-mono-ps-fonts,No,AGPLv3
+3822,urw-base35-nimbus-roman-fonts,No,AGPLv3
+3823,urw-base35-nimbus-sans-fonts,No,AGPLv3
+3824,urw-base35-p052-fonts,No,AGPLv3
+3825,urw-base35-standard-symbols-ps-fonts,No,AGPLv3
+3826,urw-base35-z003-fonts,No,AGPLv3
+3827,urw-fonts,No,GPL+
+3828,usb_modeswitch,Yes,GPLv2+
+3829,usb_modeswitch-data,Yes,GPLv2+
+3830,usbguard,Yes,GPLv2+
+3831,usbmuxd,No,GPLv3+ or GPLv2+
+3832,usbredir,No,LGPLv2+
+3833,usbutils,Yes,GPLv2+
+3834,usermode,No,GPLv2+
+3835,usermode-gtk,No,GPLv2+
+3836,usnic-tools,Yes,GPLv2 or BSD
+3837,ustr,No,MIT or LGPLv2+ or BSD
+3838,util-linux,Yes,GPLv2 and GPLv2+ and LGPLv2+ and BSD with advertising and Public Domain
+3839,uuid,No,MIT
+3840,uuidd,Yes,GPLv2
+3841,valgrind,Yes,GPLv2+
+3842,vdo,Yes,GPLv2
+3843,velocity,No,ASL 2.0
+3844,vemana2000-fonts,Yes,GPLv2+ with exceptions
+3845,vim-common,No,Vim
+3846,vim-enhanced,Yes,Vim
+3847,vim-filesystem,No,Vim
+3848,vim-minimal,Yes,Vim
+3849,vim-X11,Yes,Vim
+3850,vinagre,Yes,GPLv2+
+3851,vino,Yes,GPLv2+
+3852,virt-install,Yes,GPLv2+
+3853,virt-manager,Yes,GPLv2+
+3854,virt-manager-common,No,GPLv2+
+3855,virt-p2v-maker,No,GPLv2+
+3856,virt-top,Yes,GPLv2+
+3857,virt-v2v,No,GPLv2+
+3858,virt-viewer,Yes,GPLv2+
+3859,virt-what,Yes,GPLv2+
+3860,virt-who,Yes,GPLv2+
+3861,virtuoso-opensource,No,GPLv2 with exceptions
+3862,vlgothic-fonts,Yes,mplus and BSD
+3863,vlgothic-p-fonts,Yes,mplus and BSD
+3864,volume_key,Yes,GPLv2 and (MPLv1.1 or GPLv2 or LGPLv2)
+3865,volume_key-libs,No,GPLv2 and (MPLv1.1 or GPLv2 or LGPLv2)
+3866,vorbis-tools,No,GPLv2
+3867,vsftpd,Yes,GPLv2 with exceptions
+3868,vte-profile,No,GPLv3+
+3869,vte291,No,LGPLv2+
+3870,vte3,No,LGPLv2+
+3871,watchdog,Yes,GPLv2+
+3872,wavpack,No,BSD
+3873,wayland-devel,No,MIT
+3874,wayland-protocols-devel,Yes,MIT
+3875,webkitgtk3,No,LGPLv2+ and BSD
+3876,webkitgtk4,No,LGPLv2
+3877,webkitgtk4-devel,No,LGPLv2
+3878,webkitgtk4-jsc,No,LGPLv2
+3879,webkitgtk4-jsc-devel,No,LGPLv2
+3880,webrtc-audio-processing,No,BSD
+3881,wget,Yes,GPLv3+
+3882,which,Yes,GPLv3
+3883,whois,Yes,GPLv2+
+3884,wireshark,Yes,GPL+
+3885,wireshark-gnome,Yes,GPL+
+3886,wodim,Yes,GPLv2
+3887,words,Yes,Public Domain
+3888,wpa_supplicant,No,BSD
+3889,wqy-microhei-fonts,Yes,ASL 2.0 or GPLv3 with exceptions
+3890,wqy-zenhei-fonts,Yes,GPLv2 with exceptions
+3891,ws-jaxme,No,ASL 2.0
+3892,wsmancli,Yes,BSD
+3893,wvdial,Yes,LGPLv2+
+3894,x3270,No,BSD
+3895,x3270-text,Yes,BSD
+3896,x3270-x11,Yes,BSD
+3897,x86info,Yes,GPLv2
+3898,xalan-j2,No,ASL 2.0 and W3C
+3899,xcb-util,No,MIT
+3900,xcb-util-image,No,MIT
+3901,xcb-util-keysyms,No,MIT
+3902,xcb-util-renderutil,No,MIT
+3903,xcb-util-wm,No,MIT
+3904,xdelta,Yes,GPLv2
+3905,xdg-desktop-portal,No,LGPLv2+
+3906,xdg-desktop-portal-gtk,Yes,LGPLv2+
+3907,xdg-user-dirs,No,GPLv2+ and MIT
+3908,xdg-user-dirs-gtk,Yes,GPL+
+3909,xdg-utils,No,MIT
+3910,xerces-c,No,ASL 2.0
+3911,xerces-j2,No,ASL 2.0
+3912,xferstats,Yes,GPLv2+
+3913,xfsdump,Yes,GPL+
+3914,xfsprogs,Yes,GPL+ and LGPLv2+
+3915,xguest,Yes,GPLv2+
+3916,xinetd,Yes,xinetd
+3917,xkeyboard-config,No,MIT
+3918,xml-common,No,GPL+
+3919,xml-commons-apis,No,ASL 2.0 and W3C and Public Domain
+3920,xml-commons-resolver,No,ASL 2.0
+3921,xmlrpc-c,No,BSD and MIT and GPL+ and Public Domain
+3922,xmlrpc-c-client,No,BSD and MIT and GPL+ and Public Domain
+3923,xmlsec1,No,MIT
+3924,xmlsec1-openssl,No,MIT
+3925,xmlto,Yes,GPLv2+
+3926,xmlto-tex,Yes,GPLv2+
+3927,xmltoman,Yes,GPLv2+
+3928,xorg-x11-apps,Yes,MIT
+3929,xorg-x11-docs,Yes,MIT
+3930,xorg-x11-drivers,Yes,MIT
+3931,xorg-x11-drv-ati,No,MIT
+3932,xorg-x11-drv-dummy,No,MIT
+3933,xorg-x11-drv-evdev,Yes,MIT
+3934,xorg-x11-drv-fbdev,No,MIT
+3935,xorg-x11-drv-intel,No,MIT
+3936,xorg-x11-drv-keyboard,Yes,MIT
+3937,xorg-x11-drv-libinput,Yes,MIT
+3938,xorg-x11-drv-mouse,Yes,MIT
+3939,xorg-x11-drv-nouveau,No,MIT
+3940,xorg-x11-drv-openchrome,Yes,MIT
+3941,xorg-x11-drv-qxl,No,MIT
+3942,xorg-x11-drv-synaptics,No,MIT
+3943,xorg-x11-drv-v4l,No,MIT
+3944,xorg-x11-drv-vesa,No,MIT
+3945,xorg-x11-drv-vmmouse,No,MIT
+3946,xorg-x11-drv-vmware,No,MIT
+3947,xorg-x11-drv-void,No,MIT
+3948,xorg-x11-drv-wacom,No,GPLv2+
+3949,xorg-x11-font-utils,No,MIT
+3950,xorg-x11-fonts-100dpi,Yes,MIT and Lucida and Public Domain
+3951,xorg-x11-fonts-75dpi,Yes,MIT and Lucida and Public Domain
+3952,xorg-x11-fonts-cyrillic,Yes,MIT and Lucida and Public Domain
+3953,xorg-x11-fonts-ethiopic,Yes,MIT and Lucida and Public Domain
+3954,xorg-x11-fonts-ISO8859-1-100dpi,Yes,MIT and Lucida and Public Domain
+3955,xorg-x11-fonts-ISO8859-1-75dpi,Yes,MIT and Lucida and Public Domain
+3956,xorg-x11-fonts-ISO8859-14-100dpi,Yes,MIT and Lucida and Public Domain
+3957,xorg-x11-fonts-ISO8859-14-75dpi,Yes,MIT and Lucida and Public Domain
+3958,xorg-x11-fonts-ISO8859-15-75dpi,Yes,MIT and Lucida and Public Domain
+3959,xorg-x11-fonts-ISO8859-2-100dpi,Yes,MIT and Lucida and Public Domain
+3960,xorg-x11-fonts-ISO8859-2-75dpi,Yes,MIT and Lucida and Public Domain
+3961,xorg-x11-fonts-ISO8859-9-100dpi,Yes,MIT and Lucida and Public Domain
+3962,xorg-x11-fonts-ISO8859-9-75dpi,Yes,MIT and Lucida and Public Domain
+3963,xorg-x11-fonts-misc,Yes,MIT and Lucida and Public Domain
+3964,xorg-x11-fonts-Type1,Yes,MIT and Lucida and Public Domain
+3965,xorg-x11-proto-devel,Yes,MIT
+3966,xorg-x11-server-common,No,MIT
+3967,xorg-x11-server-utils,No,MIT
+3968,xorg-x11-server-Xephyr,No,MIT
+3969,xorg-x11-server-Xorg,Yes,MIT
+3970,xorg-x11-utils,Yes,MIT
+3971,xorg-x11-xauth,Yes,MIT
+3972,xorg-x11-xbitmaps,No,MIT
+3973,xorg-x11-xinit,Yes,MIT
+3974,xorg-x11-xkb-utils,No,MIT
+3975,xorriso,No,GPLv3+
+3976,xpp3,No,ASL 1.1
+3977,xrestop,Yes,GPLv2+
+3978,xsane-common,No,GPLv2+
+3979,xsane-gimp,Yes,GPLv2+
+3980,xsettings-kde,Yes,GPLv2+
+3981,xsom,No,CDDL or GPLv2 with exceptions
+3982,xterm,Yes,MIT
+3983,xulrunner,No,MPLv1.1 or GPLv2+ or LGPLv2+
+3984,xvattr,Yes,GPLv2+
+3985,xz,Yes,LGPLv2+
+3986,xz-devel,Yes,LGPLv2+
+3987,xz-libs,No,LGPLv2+
+3988,yaboot,Yes,GPLv2+
+3989,yajl,No,ISC
+3990,yelp,Yes,GPLv2+
+3991,yelp-libs,No,GPLv2+
+3992,yelp-tools,No,GPLv2+
+3993,yelp-xsl,No,LGPLv2+ and GPLv2+
+3994,yp-tools,No,GPLv2
+3995,ypbind,No,GPLv2
+3996,ypserv,No,GPLv2
+3997,yum,Yes,GPLv2+
+3998,yum-cron,No,GPLv2+
+3999,yum-langpacks,Yes,GPLv2+
+4000,yum-metadata-parser,No,GPLv2
+4001,yum-plugin-aliases,Yes,GPLv2+
+4002,yum-plugin-changelog,Yes,GPLv2+
+4003,yum-plugin-ovl,No,GPLv2+
+4004,yum-plugin-tmprepo,Yes,GPLv2+
+4005,yum-plugin-verify,Yes,GPLv2+
+4006,yum-plugin-versionlock,Yes,GPLv2+
+4007,yum-rhn-plugin,Yes,GPLv2
+4008,yum-utils,Yes,GPLv2+
+4009,zenity,No,LGPLv2+
+4010,zip,Yes,BSD
+4011,zlib,No,zlib and Boost
+4012,zlib-devel,Yes,zlib and Boost
+4013,zsh,Yes,MIT
+4014,zziplib,No,LGPLv2+ or MPLv1.1
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/table-2.csv b/tools/redhat_package_manifest_scraper/data/redhat7/table-2.csv
new file mode 100644
index 0000000..e1105fd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/table-2.csv
@@ -0,0 +1,48 @@
+,Package,Core package?,License
+0,awscli,Yes,ASL 2.0
+1,booth,No,GPLv2+
+2,booth-arbitrator,Yes,GPLv2+
+3,booth-core,No,GPLv2+
+4,booth-site,Yes,GPLv2+
+5,booth-test,No,GPLv2+
+6,clufter-bin,No,GPLv2+
+7,clufter-cli,No,GPLv2+
+8,clufter-common,No,GPLv2+
+9,clufter-lib-ccs,No,GPLv2+
+10,clufter-lib-general,No,GPLv2+
+11,clufter-lib-pcs,No,GPLv2+
+12,corosync,No,BSD
+13,corosync-qdevice,No,BSD
+14,corosync-qnetd,No,BSD
+15,corosynclib,No,BSD
+16,corosynclib-devel,No,BSD
+17,fence-agents-aliyun,Yes,GPLv2+ and LGPLv2+ and ASL 2.0 and BSD and MIT
+18,fence-agents-aws,Yes,GPLv2+ and LGPLv2+
+19,fence-agents-azure-arm,Yes,GPLv2+ and LGPLv2+
+20,fence-agents-gce,Yes,GPLv2+ and LGPLv2+ and ASL 2.0 and BSD and MIT
+21,omping,Yes,ISC
+22,pacemaker,Yes,GPLv2+ and LGPLv2+
+23,pacemaker-cli,No,GPLv2+ and LGPLv2+
+24,pacemaker-cluster-libs,No,GPLv2+ and LGPLv2+
+25,pacemaker-cts,No,GPLv2+ and LGPLv2+
+26,pacemaker-doc,Yes,CC-BY-SA-4.0
+27,pacemaker-libs,No,GPLv2+ and LGPLv2+
+28,pacemaker-libs-devel,No,GPLv2+ and LGPLv2+
+29,pacemaker-nagios-plugins-metadata,No,GPLv3
+30,pacemaker-remote,No,GPLv2+ and LGPLv2+
+31,pcs,Yes,GPLv2
+32,pcs-snmp,No,GPLv2 and BSD-2-Clause
+33,python-adal,No,MIT
+34,python-azure-sdk,No,MIT and ASL 2.0
+35,python-boto3,No,ASL 2.0
+36,python-clufter,No,GPLv2+ and GFDL
+37,python-isodate,No,BSD
+38,python-jwt,No,MIT
+39,python-msrest,No,MIT
+40,python-msrestazure,No,MIT and Python
+41,python-s3transfer,No,ASL 2.0
+42,resource-agents,No,GPLv2+ and LGPLv2+ and ASL 2.0
+43,resource-agents-aliyun,Yes,GPLv2+ and LGPLv2+ and ASL 2.0 and BSD and MIT
+44,resource-agents-gcp,No,GPLv2+ and LGPLv2+ and BSD and ASL 2.0 and MIT and Python
+45,sbd,Yes,GPLv2+
+46,spausedd,No,BSD
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/table-3.csv b/tools/redhat_package_manifest_scraper/data/redhat7/table-3.csv
new file mode 100644
index 0000000..8188869
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/table-3.csv
@@ -0,0 +1,4068 @@
+,Package,Core package?,License
+0,389-ds-base,No,GPLv3+
+1,389-ds-base-libs,No,GPLv3+
+2,abattis-cantarell-fonts,No,OFL
+3,abrt,No,GPLv2+
+4,abrt-addon-ccpp,Yes,GPLv2+
+5,abrt-addon-kerneloops,No,GPLv2+
+6,abrt-addon-pstoreoops,No,GPLv2+
+7,abrt-addon-python,Yes,GPLv2+
+8,abrt-addon-vmcore,No,GPLv2+
+9,abrt-addon-xorg,No,GPLv2+
+10,abrt-cli,Yes,GPLv2+
+11,abrt-console-notification,Yes,GPLv2+
+12,abrt-dbus,No,GPLv2+
+13,abrt-desktop,Yes,GPLv2+
+14,abrt-gui,Yes,GPLv2+
+15,abrt-gui-libs,No,GPLv2+
+16,abrt-java-connector,Yes,GPLv2+
+17,abrt-libs,No,GPLv2+
+18,abrt-python,No,GPLv2+
+19,abrt-tui,No,GPLv2+
+20,accountsservice,No,GPLv3+
+21,accountsservice-libs,No,GPLv3+
+22,acl,Yes,GPLv2+
+23,acpid,Yes,GPLv2+
+24,adcli,Yes,LGPLv2+
+25,adobe-mappings-cmap,No,BSD
+26,adobe-mappings-cmap-deprecated,No,BSD
+27,adobe-mappings-pdf,No,BSD
+28,adwaita-cursor-theme,No,LGPLv3+ or CC-BY-SA
+29,adwaita-gtk2-theme,No,LGPLv2+
+30,adwaita-icon-theme,No,LGPLv3+ or CC-BY-SA
+31,adwaita-qt,No,LGPLv2+
+32,adwaita-qt4,No,LGPLv2+
+33,adwaita-qt5,No,LGPLv2+
+34,agg,No,GPLv2+
+35,aic94xx-firmware,Yes,"Redistributable, no modification permitted"
+36,aide,Yes,GPLv2+
+37,akonadi,Yes,LGPLv2+
+38,akonadi-mysql,Yes,LGPLv2+
+39,alacarte,Yes,LGPLv2+
+40,alsa-firmware,Yes,GPL+ and BSD and GPLv2+ and GPLv2 and LGPLv2+
+41,alsa-lib,No,LGPLv2+
+42,alsa-lib-devel,Yes,LGPLv2+
+43,alsa-plugins-pulseaudio,Yes,LGPLv2+
+44,alsa-tools-firmware,No,GPLv2+
+45,alsa-utils,Yes,GPLv2+
+46,amanda,No,BSD and GPLv3+ and GPLv2+ and GPLv2
+47,amanda-client,Yes,BSD and GPLv3+ and GPLv2+ and GPLv2
+48,amanda-libs,No,BSD and GPLv3+ and GPLv2+ and GPLv2
+49,anaconda,No,GPLv2+ and MIT
+50,anaconda-core,No,GPLv2+ and MIT
+51,anaconda-gui,No,GPLv2+ and MIT
+52,anaconda-tui,No,GPLv2+ and MIT
+53,anaconda-user-help,No,CC-BY-SA
+54,anaconda-widgets,No,GPLv2+ and MIT
+55,ant,Yes,ASL 2.0
+56,antlr-tool,No,Public Domain
+57,apache-commons-cli,No,ASL 2.0
+58,apache-commons-codec,No,ASL 2.0
+59,apache-commons-collections,No,ASL 2.0
+60,apache-commons-daemon,No,ASL 2.0
+61,apache-commons-dbcp,No,ASL 2.0
+62,apache-commons-io,No,ASL 2.0
+63,apache-commons-lang,No,ASL 2.0
+64,apache-commons-logging,No,ASL 2.0
+65,apache-commons-pool,No,ASL 2.0
+66,appstream-data,No,CC0 and CC-BY and CC-BY-SA and GFDL
+67,apr,No,ASL 2.0 and BSD with advertising and ISC and BSD
+68,apr-devel,No,ASL 2.0 and BSD with advertising and ISC and BSD
+69,apr-util,No,ASL 2.0
+70,apr-util-devel,No,ASL 2.0
+71,apr-util-openssl,No,ASL 2.0
+72,args4j,No,MIT and BSD
+73,ark,Yes,GPLv2+
+74,ark-libs,No,BSD and GPLv2+
+75,arptables,Yes,GPLv2+
+76,arpwatch,Yes,BSD with advertising
+77,at,Yes,GPLv3+ and GPLv2+ and ISC and MIT and Public Domain
+78,at-spi2-atk,Yes,LGPLv2+
+79,at-spi2-atk-devel,No,LGPLv2+
+80,at-spi2-core,Yes,LGPLv2+
+81,at-spi2-core-devel,No,LGPLv2+
+82,atk,No,LGPLv2+
+83,atk-devel,Yes,LGPLv2+
+84,atkmm,No,LGPLv2+
+85,atlas,Yes,BSD
+86,atlas-sse2,No,BSD
+87,atlas-sse3,No,BSD
+88,attica,No,LGPLv2+
+89,attica-devel,No,LGPLv2+
+90,attr,Yes,GPLv2+
+91,audispd-plugins,Yes,GPLv2+
+92,audit,Yes,GPLv2+
+93,audit-libs,No,LGPLv2+
+94,audit-libs-devel,Yes,LGPLv2+
+95,audit-libs-python,No,LGPLv2+
+96,augeas,Yes,LGPLv2+
+97,augeas-libs,No,LGPLv2+
+98,authconfig,No,GPLv2+
+99,authconfig-gtk,No,GPLv2+
+100,authd,Yes,GPLv2+
+101,autoconf,Yes,GPLv2+ and GFDL
+102,autoconf-archive,No,GPLv3+ with exceptions
+103,autocorr-af,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+104,autocorr-bg,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+105,autocorr-ca,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+106,autocorr-cs,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+107,autocorr-da,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+108,autocorr-de,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+109,autocorr-en,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+110,autocorr-es,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+111,autocorr-fa,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+112,autocorr-fi,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+113,autocorr-fr,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+114,autocorr-ga,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+115,autocorr-hr,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+116,autocorr-hu,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+117,autocorr-is,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+118,autocorr-it,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+119,autocorr-ja,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+120,autocorr-ko,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+121,autocorr-lb,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+122,autocorr-lt,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+123,autocorr-mn,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+124,autocorr-nl,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+125,autocorr-pl,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+126,autocorr-pt,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+127,autocorr-ro,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+128,autocorr-ru,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+129,autocorr-sk,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+130,autocorr-sl,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+131,autocorr-sr,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+132,autocorr-sv,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+133,autocorr-tr,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+134,autocorr-vi,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+135,autocorr-zh,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+136,autofs,Yes,GPLv2+
+137,autogen-libopts,No,LGPLv3+
+138,automake,Yes,GPLv2+ and GFDL and Public Domain and MIT
+139,automoc,No,BSD
+140,avahi,Yes,LGPLv2+
+141,avahi-autoipd,No,LGPLv2+
+142,avahi-glib,No,LGPLv2+
+143,avahi-gobject,No,LGPLv2+
+144,avahi-libs,No,LGPLv2+
+145,avahi-ui-gtk3,No,LGPLv2+
+146,avalon-framework,No,ASL 2.0
+147,avalon-logkit,No,ASL 2.0
+148,babel,Yes,BSD
+149,babl,No,LGPLv3+ and GPLv3+
+150,bacula-client,Yes,AGPLv3 with exceptions
+151,bacula-common,No,AGPLv3 with exceptions
+152,bacula-libs,No,AGPLv3 with exceptions
+153,baobab,Yes,GPLv2+ and GFDL
+154,basesystem,Yes,Public Domain
+155,bash,Yes,GPLv3+
+156,bash-completion,Yes,GPLv2+
+157,bc,Yes,GPLv2+
+158,bcc,Yes,ASL 2.0
+159,bcc-tools,No,ASL 2.0
+160,bcel,No,ASL 2.0
+161,bea-stax,No,ASL 1.1 and ASL 2.0
+162,bea-stax-api,No,ASL 1.1 and ASL 2.0
+163,bind,Yes,MPLv2.0
+164,bind-chroot,Yes,MPLv2.0
+165,bind-dyndb-ldap,Yes,GPLv2+
+166,bind-export-libs,No,MPLv2.0
+167,bind-libs,No,MPLv2.0
+168,bind-libs-lite,No,MPLv2.0
+169,bind-license,No,MPLv2.0
+170,bind-pkcs11,No,MPLv2.0
+171,bind-pkcs11-libs,No,MPLv2.0
+172,bind-pkcs11-utils,No,MPLv2.0
+173,bind-utils,Yes,MPLv2.0
+174,binutils,Yes,GPLv3+
+175,binutils-devel,Yes,GPLv3+
+176,biosdevname,Yes,GPLv2
+177,bison,Yes,GPLv3+
+178,bitmap-fixed-fonts,Yes,GPLv2
+179,bitmap-lucida-typewriter-fonts,Yes,Lucida
+180,blas,No,BSD
+181,blivet3-data,No,LGPLv2+
+182,blktrace,Yes,GPLv2+
+183,bltk,Yes,BSD
+184,bluedevil,Yes,GPLv2+
+185,bluez,No,GPLv2+
+186,bluez-libs,No,GPLv2+
+187,bolt,No,LGPLv2+
+188,boost,No,Boost and MIT and Python
+189,boost-atomic,No,Boost and MIT and Python
+190,boost-chrono,No,Boost and MIT and Python
+191,boost-context,No,Boost and MIT and Python
+192,boost-date-time,No,Boost and MIT and Python
+193,boost-devel,Yes,Boost and MIT and Python
+194,boost-filesystem,No,Boost and MIT and Python
+195,boost-graph,No,Boost and MIT and Python
+196,boost-iostreams,No,Boost and MIT and Python
+197,boost-locale,No,Boost and MIT and Python
+198,boost-math,No,Boost and MIT and Python
+199,boost-program-options,No,Boost and MIT and Python
+200,boost-python,No,Boost and MIT and Python
+201,boost-random,No,Boost and MIT and Python
+202,boost-regex,No,Boost and MIT and Python
+203,boost-serialization,No,Boost and MIT and Python
+204,boost-signals,No,Boost and MIT and Python
+205,boost-system,No,Boost and MIT and Python
+206,boost-test,No,Boost and MIT and Python
+207,boost-thread,No,Boost and MIT and Python
+208,boost-timer,No,Boost and MIT and Python
+209,boost-wave,No,Boost and MIT and Python
+210,bpftool,Yes,GPLv2
+211,bpg-chveulebrivi-fonts,Yes,GPL+ with exceptions
+212,bpg-courier-fonts,Yes,GPL+ with exceptions
+213,bpg-fonts-common,No,GPL+ with exceptions
+214,bpg-glaho-fonts,Yes,GPL+ with exceptions
+215,brasero,Yes,GPLv3+
+216,brasero-libs,No,GPLv3+
+217,brasero-nautilus,Yes,GPLv3+
+218,bridge-utils,Yes,GPLv2+
+219,brlapi,No,LGPLv2+
+220,brltty,Yes,GPLv2+
+221,btrfs-progs,Yes,GPLv2
+222,byacc,Yes,Public Domain
+223,bzip2,Yes,BSD
+224,bzip2-devel,Yes,BSD
+225,bzip2-libs,No,BSD
+226,bzr,Yes,GPLv2+
+227,c-ares,No,MIT
+228,c-ares-devel,Yes,MIT
+229,ca-certificates,No,Public Domain
+230,cachefilesd,Yes,GPLv2+
+231,cairo,No,LGPLv2 or MPLv1.1
+232,cairo-devel,Yes,LGPLv2 or MPLv1.1
+233,cairo-gobject,No,LGPLv2 or MPLv1.1
+234,cairo-gobject-devel,No,LGPLv2 or MPLv1.1
+235,cairomm,No,LGPLv2+
+236,cal10n,No,MIT
+237,caribou,Yes,LGPLv2+
+238,caribou-gtk2-module,Yes,LGPLv2+
+239,caribou-gtk3-module,Yes,LGPLv2+
+240,cdparanoia,No,GPLv2 and LGPLv2
+241,cdparanoia-libs,No,LGPLv2
+242,cdrdao,No,GPLv2+
+243,celt051,No,BSD
+244,ceph-common,Yes,GPLv2
+245,certmonger,Yes,GPLv3+
+246,cgdcbxd,Yes,GPLv2
+247,check,No,LGPLv2+
+248,check-devel,No,LGPLv2+
+249,checkpolicy,No,GPLv2
+250,cheese,Yes,GPLv2+
+251,cheese-libs,No,GPLv2+
+252,chkconfig,Yes,GPLv2
+253,chrome-gnome-shell,No,GPLv3+
+254,chrony,Yes,GPLv2
+255,chrpath,Yes,GPL+
+256,cifs-utils,Yes,GPLv3
+257,cim-schema,No,DMTF
+258,cjkuni-ukai-fonts,Yes,Arphic
+259,cjkuni-uming-fonts,Yes,Arphic
+260,clevis,No,GPLv3+
+261,clevis-dracut,Yes,GPLv3+
+262,clevis-luks,No,GPLv3+
+263,clevis-systemd,No,GPLv3+
+264,clevis-udisks2,Yes,GPLv3+
+265,clucene-contribs-lib,No,LGPLv2+ or ASL 2.0
+266,clucene-core,No,LGPLv2+ or ASL 2.0
+267,clutter,No,LGPLv2+
+268,clutter-gst2,No,LGPLv2+
+269,clutter-gst3,No,LGPLv2+
+270,clutter-gtk,No,LGPLv2+
+271,cmake,Yes,BSD and MIT and zlib
+272,cmpi-bindings-pywbem,No,BSD
+273,cockpit,Yes,LGPLv2+
+274,cockpit-bridge,No,LGPLv2+
+275,cockpit-system,No,LGPLv2+
+276,cockpit-ws,No,LGPLv2+
+277,codemodel,No,CDDL and GPLv2
+278,cogl,No,LGPLv2+
+279,color-filesystem,No,Public Domain
+280,colord,Yes,GPLv2+ and LGPLv2+
+281,colord-gtk,No,LGPLv2+
+282,colord-kde,Yes,GPLv2+
+283,colord-libs,No,GPLv2+ and LGPLv2+
+284,compat-cheese314,Yes,GPLv2+
+285,compat-dapl,Yes,GPLv2 or BSD or CPL
+286,compat-db-headers,No,BSD
+287,compat-db47,Yes,BSD
+288,compat-exiv2-023,Yes,GPLv2+
+289,compat-exiv2-026,No,GPLv2+
+290,compat-gcc-44,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions
+291,compat-gcc-44-c++,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions
+292,compat-glade315,No,GPLv2+ and LGPLv2+
+293,compat-glibc,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+294,compat-glibc-headers,No,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+295,compat-gnome-desktop314,No,GPLv2+ and LGPLv2+
+296,compat-grilo02,No,LGPLv2+
+297,compat-libcap1,Yes,BSD-like and LGPL
+298,compat-libcogl-pango12,No,LGPLv2+
+299,compat-libcogl12,No,LGPLv2+
+300,compat-libcolord1,No,GPLv2+ and LGPLv2+
+301,compat-libf2c-34,Yes,GPLv2+ and GPLv2+ with exceptions
+302,compat-libgdata13,No,LGPLv2+
+303,compat-libgfortran-41,Yes,GPLv2+ with exceptions
+304,compat-libgnome-bluetooth11,No,LGPLv2+
+305,compat-libgnome-desktop3-7,No,GPLv2+ and LGPLv2+
+306,compat-libgweather3,No,GPLv2+
+307,compat-libical1,No,LGPLv2 or MPLv1.1
+308,compat-libmediaart0,No,LGPLv2+
+309,compat-libpackagekit-glib2-16,No,GPLv2+ and LGPLv2+
+310,compat-libtiff3,Yes,libtiff
+311,compat-libupower-glib1,No,GPLv2+
+312,compat-libxcb,No,MIT
+313,compat-openldap,Yes,OpenLDAP
+314,compat-openmpi16,No,BSD and MIT and Romio
+315,compat-opensm-libs,Yes,GPLv2 or BSD
+316,compat-poppler022,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+317,compat-poppler022-glib,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+318,compat-poppler022-qt,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+319,comps-extras,No,GPL+ and LGPLv2+ and CC-BY-SA
+320,conman,Yes,GPLv3+
+321,conntrack-tools,No,GPLv2
+322,control-center,Yes,GPLv2+ and CC-BY-SA
+323,control-center-filesystem,No,GPLv2+ and CC-BY-SA
+324,convmv,No,GPLv2 or GPLv3
+325,coolkey,Yes,LGPLv2
+326,copy-jdk-configs,No,BSD
+327,coreutils,Yes,GPLv3+
+328,cpio,Yes,GPLv3+
+329,cpp,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+330,cpuid,No,GPLv2+
+331,cracklib,No,LGPLv2+
+332,cracklib-dicts,No,LGPLv2+
+333,crash,Yes,GPLv3
+334,crash-gcore-command,Yes,GPLv2
+335,crash-ptdump-command,Yes,GPLv2
+336,crash-trace-command,Yes,GPLv2
+337,crda,Yes,ISC
+338,createrepo,No,GPLv2
+339,criu,No,GPLv2
+340,cronie,Yes,MIT and BSD and ISC and GPLv2+
+341,cronie-anacron,No,MIT and BSD and ISC and GPLv2+
+342,cronie-noanacron,No,MIT and BSD and ISC and GPLv2+
+343,crontabs,Yes,Public Domain and GPLv2
+344,crypto-utils,Yes,MIT and GPLv2+ and MPLv1.0
+345,cryptsetup,Yes,GPLv2+ and LGPLv2+
+346,cryptsetup-libs,No,GPLv2+ and LGPLv2+
+347,cryptsetup-python,No,GPLv2+ and LGPLv2+
+348,cryptsetup-reencrypt,Yes,GPLv2+ and LGPLv2+
+349,cscope,Yes,BSD and GPLv2+
+350,ctags,Yes,GPLv2+ and LGPLv2+ and Public Domain
+351,ctags-etags,Yes,GPLv2+ and LGPLv2+ and Public Domain
+352,culmus-aharoni-clm-fonts,Yes,GPLv2
+353,culmus-caladings-clm-fonts,Yes,GPLv2
+354,culmus-david-clm-fonts,Yes,GPLv2
+355,culmus-drugulin-clm-fonts,Yes,GPLv2
+356,culmus-ellinia-clm-fonts,Yes,GPLv2
+357,culmus-fonts-common,No,GPLv2
+358,culmus-frank-ruehl-clm-fonts,Yes,GPLv2
+359,culmus-hadasim-clm-fonts,Yes,GPLv2
+360,culmus-keteryg-fonts,Yes,GPLv2
+361,culmus-miriam-clm-fonts,Yes,GPLv2
+362,culmus-miriam-mono-clm-fonts,Yes,GPLv2
+363,culmus-nachlieli-clm-fonts,Yes,GPLv2
+364,culmus-simple-clm-fonts,Yes,GPLv2
+365,culmus-stamashkenaz-clm-fonts,Yes,GPLv2
+366,culmus-stamsefarad-clm-fonts,Yes,GPLv2
+367,culmus-yehuda-clm-fonts,Yes,GPLv2
+368,cups,Yes,GPLv2
+369,cups-client,No,GPLv2
+370,cups-devel,Yes,LGPLv2
+371,cups-filesystem,No,GPLv2
+372,cups-filters,No,GPLv2 and GPLv2+ and GPLv3 and GPLv3+ and LGPLv2+ and MIT
+373,cups-filters-libs,No,LGPLv2 and MIT
+374,cups-libs,No,LGPLv2 and zlib
+375,cups-lpd,Yes,GPLv2
+376,cups-pk-helper,Yes,GPLv2+
+377,curl,Yes,MIT
+378,custodia,No,GPLv3+
+379,cvs,Yes,BSD and GPL+ and GPLv2+ and LGPLv2+ and zlib and Public Domain
+380,cyrus-imapd,Yes,BSD
+381,cyrus-imapd-utils,Yes,BSD
+382,cyrus-sasl,No,BSD with advertising
+383,cyrus-sasl-devel,Yes,BSD with advertising
+384,cyrus-sasl-gssapi,No,BSD with advertising
+385,cyrus-sasl-lib,No,BSD with advertising
+386,cyrus-sasl-md5,No,BSD with advertising
+387,cyrus-sasl-plain,Yes,BSD with advertising
+388,cyrus-sasl-scram,No,BSD with advertising
+389,dapl,Yes,GPLv2 or BSD or CPL
+390,daxctl-libs,No,LGPLv2
+391,daxio,Yes,BSD
+392,dbus,Yes,(GPLv2+ or AFL) and GPLv2+
+393,dbus-devel,Yes,(GPLv2+ or AFL) and GPLv2+
+394,dbus-glib,No,AFL and GPLv2+
+395,dbus-glib-devel,Yes,AFL and GPLv2+
+396,dbus-libs,No,(GPLv2+ or AFL) and GPLv2+
+397,dbus-python,No,MIT
+398,dbus-x11,No,(GPLv2+ or AFL) and GPLv2+
+399,dbusmenu-qt,No,LGPLv2+
+400,dbxtool,Yes,GPLv2
+401,dconf,Yes,LGPLv2+ and GPLv2+ and GPLv3+
+402,dconf-editor,Yes,GPLv3+ and CC0
+403,dcraw,Yes,GPLv2+
+404,dejagnu,Yes,GPLv3+
+405,dejavu-fonts-common,No,Bitstream Vera and Public Domain
+406,dejavu-sans-fonts,Yes,Bitstream Vera and Public Domain
+407,dejavu-sans-mono-fonts,Yes,Bitstream Vera and Public Domain
+408,dejavu-serif-fonts,Yes,Bitstream Vera and Public Domain
+409,deltarpm,No,BSD
+410,desktop-file-utils,Yes,GPLv2+
+411,device-mapper,No,GPLv2
+412,device-mapper-event,No,GPLv2
+413,device-mapper-event-libs,No,LGPLv2
+414,device-mapper-libs,No,LGPLv2
+415,device-mapper-multipath,Yes,GPL+
+416,device-mapper-multipath-libs,No,GPL+
+417,device-mapper-persistent-data,Yes,GPLv3+
+418,dhclient,Yes,ISC
+419,dhcp,Yes,ISC
+420,dhcp-common,No,ISC
+421,dhcp-libs,No,ISC
+422,dialog,No,LGPLv2
+423,diffstat,Yes,MIT
+424,diffutils,No,GPLv3+
+425,dleyna-connector-dbus,No,LGPLv2
+426,dleyna-core,No,LGPLv2
+427,dleyna-server,No,LGPLv2
+428,dlm-lib,No,GPLv2 and GPLv2+ and LGPLv2+
+429,dmidecode,No,GPLv2+
+430,dmraid,Yes,GPLv2+
+431,dmraid-events,No,GPLv2+
+432,dnsmasq,Yes,GPLv2 or GPLv3
+433,dnssec-trigger,Yes,BSD
+434,docbook-dtds,No,Copyright only
+435,docbook-simple,No,Freely redistributable without restriction
+436,docbook-slides,Yes,MIT
+437,docbook-style-dsssl,No,DMIT
+438,docbook-style-xsl,Yes,DMIT
+439,docbook-utils,Yes,GPLv2+
+440,docbook-utils-pdf,Yes,GPL+
+441,docbook5-schemas,Yes,Freely redistributable without restriction
+442,docbook5-style-xsl,Yes,MIT and MPLv1.1
+443,dom4j,No,BSD
+444,dos2unix,Yes,BSD
+445,dosfstools,Yes,GPLv3+
+446,dotconf,No,LGPLv2
+447,dovecot,Yes,MIT and LGPLv2
+448,dovecot-mysql,Yes,MIT and LGPLv2
+449,dovecot-pgsql,Yes,MIT and LGPLv2
+450,dovecot-pigeonhole,Yes,MIT and LGPLv2
+451,doxygen,Yes,GPL+
+452,dracut,No,GPLv2+ and LGPLv2+
+453,dracut-config-generic,Yes,GPLv2+ and LGPLv2+
+454,dracut-config-rescue,Yes,GPLv2+ and LGPLv2+
+455,dracut-fips,Yes,GPLv2+ and LGPLv2+
+456,dracut-fips-aesni,Yes,GPLv2+ and LGPLv2+
+457,dracut-network,Yes,GPLv2+ and LGPLv2+
+458,dragon,Yes,(GPLv2 or GPLv3) and GFDL
+459,dropwatch,Yes,GPLv2+
+460,dstat,Yes,GPLv2
+461,dump,Yes,BSD
+462,dumpet,Yes,GPLv2+
+463,dvd+rw-tools,Yes,GPLv2
+464,dvgrab,Yes,GPLv2+
+465,dwz,No,GPLv2+ and GPLv3+
+466,dyninst,No,LGPLv2+
+467,e2fsprogs,Yes,GPLv2
+468,e2fsprogs-devel,Yes,GPLv2 and LGPLv2
+469,e2fsprogs-libs,No,GPLv2 and LGPLv2
+470,easymock2,No,ASL 2.0
+471,ebtables,Yes,GPLv2+
+472,ecj,No,EPL
+473,ed,Yes,"GPLv3+, GFDL"
+474,edac-utils,Yes,GPLv2+
+475,efax,Yes,GPLv2+
+476,efibootmgr,Yes,GPLv2+
+477,efivar,No,LGPLv2+
+478,efivar-libs,No,LGPLv2+
+479,ekiga,Yes,GPLv2+
+480,ElectricFence,Yes,GPLv2
+481,elfutils,Yes,GPLv3+ and (GPLv2+ or LGPLv3+)
+482,elfutils-default-yama-scope,No,GPLv2+ or LGPLv3+
+483,elfutils-devel,Yes,GPLv2+ or LGPLv3+
+484,elfutils-libelf,No,GPLv2+ or LGPLv3+
+485,elfutils-libelf-devel,Yes,GPLv2+ or LGPLv3+
+486,elfutils-libs,No,GPLv2+ or LGPLv3+
+487,elinks,Yes,GPLv2
+488,emacs,Yes,GPLv3+
+489,emacs-auctex,Yes,GPLv3+ and GFDL
+490,emacs-common,No,GPLv3+ and GFDL and BSD
+491,emacs-filesystem,No,GPLv3+
+492,emacs-gnuplot,Yes,gnuplot and MIT
+493,emacs-nox,Yes,GPLv3+
+494,emacs-php-mode,Yes,GPLv3+
+495,empathy,Yes,GPLv2+
+496,enchant,No,LGPLv2+
+497,enscript,Yes,GPLv3+
+498,environment-modules,No,GPLv2+
+499,eog,Yes,GPLv2+ and GFDL
+500,esc,Yes,GPL+
+501,espeak,No,GPLv3+
+502,ethtool,Yes,GPLv2
+503,evince,Yes,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+504,evince-dvi,Yes,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+505,evince-libs,No,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+506,evince-nautilus,Yes,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+507,evolution,Yes,GPLv2+ and GFDL
+508,evolution-data-server,No,LGPLv2+
+509,evolution-data-server-devel,Yes,LGPLv2+
+510,evolution-data-server-langpacks,No,LGPLv2+
+511,evolution-ews,Yes,LGPLv2
+512,evolution-ews-langpacks,No,LGPLv2
+513,evolution-help,Yes,GPLv2+ and GFDL
+514,evolution-langpacks,No,GPLv2+ and GFDL
+515,evolution-mapi,Yes,LGPLv2+
+516,evolution-mapi-langpacks,No,LGPLv2+
+517,exempi,No,BSD
+518,exiv2,No,GPLv2+
+519,exiv2-libs,No,GPLv2+
+520,expat,No,MIT
+521,expat-devel,Yes,MIT
+522,expect,Yes,Public Domain
+523,farstream,No,LGPLv2+
+524,farstream02,No,LGPLv2+ and GPLv2+
+525,fcoe-utils,Yes,GPLv2
+526,fence-agents-all,Yes,GPLv2+ and LGPLv2+ and ASL 2.0
+527,fence-agents-amt-ws,No,ASL 2.0
+528,fence-agents-apc,No,GPLv2+ and LGPLv2+
+529,fence-agents-apc-snmp,No,GPLv2+ and LGPLv2+
+530,fence-agents-bladecenter,No,GPLv2+ and LGPLv2+
+531,fence-agents-brocade,No,GPLv2+ and LGPLv2+
+532,fence-agents-cisco-mds,No,GPLv2+ and LGPLv2+
+533,fence-agents-cisco-ucs,No,GPLv2+ and LGPLv2+
+534,fence-agents-common,No,GPLv2+ and LGPLv2+
+535,fence-agents-compute,No,GPLv2+ and LGPLv2+
+536,fence-agents-drac5,No,GPLv2+ and LGPLv2+
+537,fence-agents-eaton-snmp,No,GPLv2+ and LGPLv2+
+538,fence-agents-emerson,No,GPLv2+ and LGPLv2+
+539,fence-agents-eps,No,GPLv2+ and LGPLv2+
+540,fence-agents-heuristics-ping,No,GPLv2+ and LGPLv2+
+541,fence-agents-hpblade,No,GPLv2+ and LGPLv2+
+542,fence-agents-ibmblade,No,GPLv2+ and LGPLv2+
+543,fence-agents-ifmib,No,GPLv2+ and LGPLv2+
+544,fence-agents-ilo-moonshot,No,GPLv2+ and LGPLv2+
+545,fence-agents-ilo-mp,No,GPLv2+ and LGPLv2+
+546,fence-agents-ilo-ssh,No,GPLv2+ and LGPLv2+
+547,fence-agents-ilo2,No,GPLv2+ and LGPLv2+
+548,fence-agents-intelmodular,No,GPLv2+ and LGPLv2+
+549,fence-agents-ipdu,No,GPLv2+ and LGPLv2+
+550,fence-agents-ipmilan,No,GPLv2+ and LGPLv2+
+551,fence-agents-kdump,No,GPLv2+ and LGPLv2+
+552,fence-agents-mpath,No,GPLv2+ and LGPLv2+
+553,fence-agents-redfish,No,GPLv2+ and LGPLv2+
+554,fence-agents-rhevm,No,GPLv2+ and LGPLv2+
+555,fence-agents-rsa,No,GPLv2+ and LGPLv2+
+556,fence-agents-rsb,No,GPLv2+ and LGPLv2+
+557,fence-agents-sbd,No,GPLv2+ and LGPLv2+
+558,fence-agents-scsi,No,GPLv2+ and LGPLv2+
+559,fence-agents-vmware-rest,No,GPLv2+ and LGPLv2+
+560,fence-agents-vmware-soap,No,GPLv2+ and LGPLv2+
+561,fence-agents-wti,No,GPLv2+ and LGPLv2+
+562,fence-virt,No,GPLv2+
+563,fence-virtd,No,GPLv2+
+564,fence-virtd-libvirt,Yes,GPLv2+
+565,fence-virtd-multicast,Yes,GPLv2+
+566,fence-virtd-serial,Yes,GPLv2+
+567,festival,No,MIT and GPL+ and TCL
+568,festival-freebsoft-utils,No,GPLv2+
+569,festival-lib,No,MIT and GPL+ and TCL
+570,festival-speechtools-libs,No,MIT and GPL+ and TCL
+571,festvox-slt-arctic-hts,No,MIT and GPL+ and TCL
+572,fetchmail,Yes,GPL+ and Public Domain
+573,fftw,Yes,GPLv2+
+574,fftw-devel,Yes,GPLv2+
+575,fftw-libs,No,GPLv2+
+576,fftw-libs-double,No,GPLv2+
+577,fftw-libs-long,No,GPLv2+
+578,fftw-libs-single,No,GPLv2+
+579,fftw-static,Yes,GPLv2+
+580,file,Yes,BSD
+581,file-libs,No,BSD
+582,file-roller,Yes,GPLv2+
+583,file-roller-nautilus,Yes,GPLv2+
+584,filebench,No,CDDL
+585,filesystem,Yes,Public Domain
+586,findutils,No,GPLv3+
+587,finger,Yes,BSD
+588,finger-server,Yes,BSD
+589,fio,Yes,GPLv2
+590,fipscheck,No,BSD
+591,fipscheck-lib,No,BSD
+592,firefox,Yes,MPLv1.1 or GPLv2+ or LGPLv2+
+593,firewall-config,Yes,GPLv2+
+594,firewalld,Yes,GPLv2+
+595,firewalld-filesystem,No,GPLv2+
+596,firstboot,Yes,GPLv2+
+597,flac-libs,No,BSD and GPLv2+ and GFDL
+598,flatpak,Yes,LGPLv2+
+599,flatpak-libs,No,LGPLv2+
+600,flex,Yes,BSD and LGPLv2+
+601,flite,No,MIT
+602,fltk,No,LGPLv2+ with exceptions
+603,flute,No,W3C and LGPLv2+
+604,folks,No,LGPLv2+
+605,fontawesome-fonts,No,OFL
+606,fontconfig,No,MIT and Public Domain and UCD
+607,fontconfig-devel,Yes,MIT and Public Domain and UCD
+608,fontpackages-filesystem,No,Public Domain
+609,fonts-tweak-tool,Yes,LGPLv3+
+610,foomatic-filters,No,GPLv2+
+611,fprintd,No,GPLv2+
+612,fprintd-pam,Yes,GPLv2+
+613,freeglut,No,MIT
+614,freeglut-devel,Yes,MIT
+615,freeipmi,Yes,GPLv3+
+616,freeipmi-bmc-watchdog,Yes,GPLv3+
+617,freeipmi-ipmidetectd,Yes,GPLv3+
+618,freeradius,Yes,GPLv2+ and LGPLv2+
+619,freerdp,Yes,ASL 2.0
+620,freerdp-libs,No,ASL 2.0
+621,freetype,No,(FTL or GPLv2+) and BSD and MIT and Public Domain and zlib with acknowledgement
+622,freetype-devel,Yes,(FTL or GPLv2+) and BSD and MIT and Public Domain and zlib with acknowledgement
+623,frei0r-plugins,No,GPLv2+
+624,fribidi,No,LGPLv2+ and UCD
+625,fribidi-devel,No,LGPLv2+ and UCD
+626,fros,No,GPLv2+
+627,ftp,Yes,BSD with advertising
+628,fuse,No,GPL+
+629,fuse-devel,Yes,LGPLv2+
+630,fuse-libs,No,LGPLv2+
+631,fuseiso,No,GPLv2+
+632,fwupd,Yes,LGPLv2+
+633,fwupdate,Yes,GPLv2+
+634,fwupdate-efi,No,GPLv2+
+635,fwupdate-libs,No,GPLv2+
+636,fxload,No,GPLv2+
+637,gamin,No,LGPLv2
+638,gavl,No,GPLv3+
+639,gawk,No,GPLv3+ and GPL and LGPLv3+ and LGPL and BSD
+640,gc,No,BSD
+641,gcc,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+642,gcc-c++,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+643,gcc-gfortran,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+644,gcc-gnat,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+645,gcc-objc,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+646,gcc-objc++,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+647,gconf-editor,Yes,GPLv2+ and GFDL
+648,GConf2,No,LGPLv2+ and GPLv2+
+649,gcr,No,LGPLv2+
+650,gcr-devel,No,LGPLv2+
+651,gd,No,MIT
+652,gdb,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and BSD and Public Domain
+653,gdb-gdbserver,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and BSD and Public Domain
+654,gdbm,No,GPLv3+
+655,gdbm-devel,No,GPLv3+
+656,gdisk,No,GPLv2
+657,gdk-pixbuf2,No,LGPLv2+
+658,gdk-pixbuf2-devel,No,LGPLv2+
+659,gdm,Yes,GPLv2+
+660,gedit,Yes,GPLv2+ and GFDL
+661,gedit-plugin-bookmarks,No,GPLv2+
+662,gedit-plugin-bracketcompletion,No,GPLv2+
+663,gedit-plugin-charmap,No,GPLv2+
+664,gedit-plugin-codecomment,No,GPLv2+
+665,gedit-plugin-colorpicker,No,GPLv2+
+666,gedit-plugin-colorschemer,No,GPLv2+
+667,gedit-plugin-commander,No,GPLv2+
+668,gedit-plugin-drawspaces,No,GPLv2+
+669,gedit-plugin-joinlines,No,GPLv2+
+670,gedit-plugin-multiedit,No,GPLv2+
+671,gedit-plugin-smartspaces,No,GPLv2+
+672,gedit-plugin-synctex,No,GPLv2+
+673,gedit-plugin-terminal,No,GPLv2+
+674,gedit-plugin-textsize,No,GPLv2+
+675,gedit-plugin-wordcompletion,No,GPLv2+
+676,gedit-plugins,Yes,GPLv2+
+677,gedit-plugins-data,No,GPLv2+
+678,gegl,No,LGPLv3+ and GPLv3+
+679,genisoimage,Yes,GPLv2
+680,geoclue,No,LGPLv2
+681,geoclue2,No,GPLv2+
+682,geoclue2-libs,No,LGPLv2+
+683,geocode-glib,No,LGPLv2+
+684,geocode-glib-devel,No,LGPLv2+
+685,GeoIP,No,LGPLv2+ and GPLv2+ and CC-BY-SA
+686,geoipupdate,No,GPLv2
+687,geolite2-city,No,CC-BY-SA
+688,geolite2-country,No,CC-BY-SA
+689,geronimo-annotation,No,ASL 2.0
+690,geronimo-jms,No,ASL 2.0
+691,geronimo-jta,No,ASL 2.0
+692,gettext,Yes,GPLv3+ and LGPLv2+
+693,gettext-common-devel,No,GPLv3+
+694,gettext-devel,No,LGPLv2+ and GPLv3+
+695,gettext-libs,No,LGPLv2+ and GPLv3+
+696,gfs2-utils,Yes,GPLv2+ and LGPLv2+
+697,ghostscript,No,AGPLv3+
+698,ghostscript-chinese,Yes,GPLv2+
+699,ghostscript-cups,Yes,AGPLv3+
+700,ghostscript-fonts,No,GPLv2+ and Hershey and MIT and OFL and Public Domain
+701,giflib,No,MIT
+702,gimp,Yes,GPLv3+ and GPLv3
+703,gimp-data-extras,Yes,GPLv2+
+704,gimp-help,Yes,GFDL and GPLv2+
+705,gimp-libs,No,LGPLv3+
+706,git,Yes,GPLv2
+707,gjs,No,MIT and (MPLv1.1 or GPLv2+ or LGPLv2+)
+708,gl-manpages,No,MIT and Open Publication
+709,glade-libs,No,GPLv2+ and LGPLv2+
+710,glassfish-dtd-parser,No,CDDL 1.1 and GPLv2 with exceptions
+711,glassfish-fastinfoset,No,ASL 2.0
+712,glassfish-jaxb,No,CDDL and GPLv2 with exceptions
+713,glassfish-jaxb-api,No,CDDL or GPLv2 with exception
+714,glib-networking,Yes,LGPLv2+
+715,glib2,No,LGPLv2+
+716,glib2-devel,Yes,LGPLv2+
+717,glibc,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+718,glibc-common,No,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+719,glibc-devel,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+720,glibc-headers,No,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+721,glibc-utils,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+722,glibmm24,No,LGPLv2+
+723,glusterfs,No,GPLv2 or LGPLv3+
+724,glusterfs-api,No,GPLv2 or LGPLv3+
+725,glusterfs-cli,No,GPLv2 or LGPLv3+
+726,glusterfs-client-xlators,No,GPLv2 or LGPLv3+
+727,glusterfs-fuse,Yes,GPLv2 or LGPLv3+
+728,glusterfs-libs,No,GPLv2 or LGPLv3+
+729,glusterfs-rdma,Yes,GPLv2 or LGPLv3+
+730,glx-utils,Yes,MIT
+731,gmp,No,LGPLv3+ or GPLv2+
+732,gmp-devel,Yes,LGPLv3+ or GPLv2+
+733,gnome-abrt,No,GPLv2+
+734,gnome-bluetooth,Yes,GPLv2+
+735,gnome-bluetooth-libs,No,LGPLv2+
+736,gnome-boxes,Yes,LGPLv2+
+737,gnome-calculator,Yes,GPLv3+
+738,gnome-classic-session,Yes,GPLv2+
+739,gnome-clocks,Yes,GPLv2+
+740,gnome-color-manager,Yes,GPLv2+
+741,gnome-common,Yes,GPLv2+
+742,gnome-contacts,Yes,GPLv2+
+743,gnome-desktop3,No,GPLv2+ and LGPLv2+
+744,gnome-desktop3-devel,Yes,LGPLv2+
+745,gnome-dictionary,Yes,GPLv3+ and LGPLv2+ and GFDL
+746,gnome-disk-utility,Yes,GPLv2+
+747,gnome-documents,Yes,GPLv2+
+748,gnome-documents-libs,No,GPLv2+
+749,gnome-font-viewer,Yes,GPLv2+
+750,gnome-getting-started-docs,Yes,CC-BY-SA
+751,gnome-icon-theme,Yes,LGPLv3+
+752,gnome-icon-theme-extras,Yes,CC-BY-SA
+753,gnome-icon-theme-legacy,No,LGPLv3+
+754,gnome-icon-theme-symbolic,Yes,CC-BY-SA
+755,gnome-initial-setup,Yes,GPLv2+
+756,gnome-keyring,No,GPLv2+ and LGPLv2+
+757,gnome-keyring-pam,No,LGPLv2+
+758,gnome-menus,No,LGPLv2+
+759,gnome-online-accounts,No,LGPLv2+
+760,gnome-online-accounts-devel,No,LGPLv2+
+761,gnome-online-miners,No,GPLv2+ and LGPLv2+ and MIT
+762,gnome-packagekit,Yes,GPLv2+
+763,gnome-packagekit-common,No,GPLv2+
+764,gnome-packagekit-installer,No,GPLv2+
+765,gnome-packagekit-updater,Yes,GPLv2+
+766,gnome-python2,No,LGPLv2+
+767,gnome-python2-bonobo,No,LGPLv2+
+768,gnome-python2-canvas,No,LGPLv2+
+769,gnome-python2-gconf,No,LGPLv2+
+770,gnome-python2-gnome,No,LGPLv2+
+771,gnome-python2-gnomevfs,No,LGPLv2+
+772,gnome-screenshot,Yes,GPLv2+
+773,gnome-session,Yes,GPLv2+
+774,gnome-session-xsession,Yes,GPLv2+
+775,gnome-settings-daemon,Yes,GPLv2+
+776,gnome-shell,Yes,GPLv2+
+777,gnome-shell-extension-alternate-tab,No,GPLv2+
+778,gnome-shell-extension-apps-menu,No,GPLv2+
+779,gnome-shell-extension-common,No,GPLv2+
+780,gnome-shell-extension-horizontal-workspaces,No,GPLv2+
+781,gnome-shell-extension-launch-new-instance,No,GPLv2+
+782,gnome-shell-extension-places-menu,No,GPLv2+
+783,gnome-shell-extension-top-icons,No,GPLv2+
+784,gnome-shell-extension-user-theme,No,GPLv2+
+785,gnome-shell-extension-window-list,No,GPLv2+
+786,gnome-software,Yes,GPLv2+
+787,gnome-system-log,Yes,GPLv2+ and GFDL
+788,gnome-system-monitor,Yes,GPLv2+
+789,gnome-terminal,Yes,GPLv3+ and GFDL
+790,gnome-terminal-nautilus,Yes,GPLv3+ and GFDL
+791,gnome-themes-standard,Yes,LGPLv2+
+792,gnome-tweak-tool,Yes,GPLv3 and CC0
+793,gnome-user-docs,Yes,CC-BY-SA
+794,gnome-vfs2,No,LGPLv2+ and GPLv2+
+795,gnome-video-effects,No,GPLv2
+796,gnome-weather,Yes,GPLv2+ and LGPLv2+ and MIT and CC-BY and CC-BY-SA
+797,gnote,Yes,GPLv3+
+798,gnu-free-fonts-common,No,GPLv3+ with exceptions
+799,gnu-free-mono-fonts,Yes,GPLv3+ with exceptions
+800,gnu-free-sans-fonts,Yes,GPLv3+ with exceptions
+801,gnu-free-serif-fonts,Yes,GPLv3+ with exceptions
+802,gnupg2,Yes,GPLv3+
+803,gnuplot,Yes,gnuplot and MIT
+804,gnuplot-common,No,gnuplot and MIT
+805,gnutls,No,GPLv3+ and LGPLv2+
+806,gnutls-c++,No,GPLv3+ and LGPLv2+
+807,gnutls-dane,No,GPLv3+ and LGPLv2+
+808,gnutls-devel,Yes,GPLv3+ and LGPLv2+
+809,gnutls-utils,No,GPLv3+
+810,gobject-introspection,No,"GPLv2+, LGPLv2+, MIT"
+811,gobject-introspection-devel,No,"GPLv2+, LGPLv2+, MIT"
+812,gom,No,LGPLv2+
+813,google-crosextra-caladea-fonts,Yes,ASL 2.0
+814,google-crosextra-carlito-fonts,Yes,OFL
+815,google-noto-emoji-color-fonts,No,OFL and ASL 2.0
+816,google-noto-emoji-fonts,Yes,OFL and ASL 2.0
+817,google-noto-fonts-common,No,ASL 2.0
+818,google-noto-sans-armenian-fonts,Yes,ASL 2.0
+819,google-noto-sans-devanagari-fonts,Yes,ASL 2.0
+820,google-noto-sans-devanagari-ui-fonts,Yes,ASL 2.0
+821,google-noto-sans-ethiopic-fonts,Yes,ASL 2.0
+822,google-noto-sans-fonts,Yes,ASL 2.0
+823,google-noto-sans-georgian-fonts,Yes,ASL 2.0
+824,google-noto-sans-hebrew-fonts,Yes,ASL 2.0
+825,google-noto-sans-khmer-fonts,Yes,ASL 2.0
+826,google-noto-sans-khmer-ui-fonts,Yes,ASL 2.0
+827,google-noto-sans-lao-fonts,Yes,ASL 2.0
+828,google-noto-sans-lao-ui-fonts,Yes,ASL 2.0
+829,google-noto-sans-tamil-fonts,Yes,ASL 2.0
+830,google-noto-sans-tamil-ui-fonts,Yes,ASL 2.0
+831,google-noto-sans-thai-fonts,Yes,ASL 2.0
+832,google-noto-sans-thai-ui-fonts,Yes,ASL 2.0
+833,google-noto-sans-ui-fonts,Yes,ASL 2.0
+834,google-noto-serif-armenian-fonts,Yes,ASL 2.0
+835,google-noto-serif-fonts,Yes,ASL 2.0
+836,google-noto-serif-georgian-fonts,Yes,ASL 2.0
+837,google-noto-serif-lao-fonts,Yes,ASL 2.0
+838,google-noto-serif-thai-fonts,Yes,ASL 2.0
+839,gperftools-libs,No,BSD
+840,gpgme,No,LGPLv2+
+841,gpm,Yes,GPLv2 and GPLv2+ with exceptions and GPLv3+ and Verbatim and Copyright only
+842,gpm-libs,No,GPLv2 and GPLv2+ with exceptions and GPLv3+ and Verbatim and Copyright only
+843,grantlee,No,LGPLv2+
+844,graphite2,No,(LGPLv2+ or GPLv2+ or MPL) and (Netscape or GPLv2+ or LGPLv2+)
+845,graphite2-devel,Yes,(LGPLv2+ or GPLv2+ or MPL) and (Netscape or GPLv2+ or LGPLv2+)
+846,graphviz,No,EPL
+847,graphviz-tcl,No,EPL
+848,grep,No,GPLv3+
+849,grilo,No,LGPLv2+
+850,grilo-plugins,No,LGPLv2+
+851,groff-base,No,GPLv3+ and GFDL and BSD and MIT
+852,grub2,Yes,GPLv3+
+853,grub2-common,No,GPLv3+
+854,grub2-efi-ia32,Yes,GPLv3+
+855,grub2-efi-ia32-modules,Yes,GPLv3+
+856,grub2-efi-x64,Yes,GPLv3+
+857,grub2-efi-x64-modules,Yes,GPLv3+
+858,grub2-pc,Yes,GPLv3+
+859,grub2-pc-modules,No,GPLv3+
+860,grub2-tools,No,GPLv3+
+861,grub2-tools-extra,No,GPLv3+
+862,grub2-tools-minimal,No,GPLv3+
+863,grubby,No,GPLv2+
+864,gsettings-desktop-schemas,No,LGPLv2+
+865,gsettings-desktop-schemas-devel,No,LGPLv2+
+866,gsl,No,GPLv3 and GFDL and BSD
+867,gsl-devel,Yes,GPLv3 and GFDL and BSD
+868,gsm,No,MIT
+869,gsound,No,LGPLv2
+870,gspell,No,LGPLv2+
+871,gssdp,No,LGPLv2+
+872,gssproxy,Yes,MIT
+873,gstreamer,No,LGPLv2+
+874,gstreamer-plugins-bad-free,Yes,LGPLv2+ and LGPLv2
+875,gstreamer-plugins-base,No,LGPLv2+
+876,gstreamer-plugins-good,Yes,LGPLv2+
+877,gstreamer-tools,No,LGPLv2+
+878,gstreamer1,No,LGPLv2+
+879,gstreamer1-devel,Yes,LGPLv2+
+880,gstreamer1-plugins-bad-free,Yes,LGPLv2+ and LGPLv2
+881,gstreamer1-plugins-bad-free-gtk,No,LGPLv2+ and LGPLv2
+882,gstreamer1-plugins-base,No,LGPLv2+
+883,gstreamer1-plugins-base-devel,Yes,LGPLv2+
+884,gstreamer1-plugins-good,Yes,LGPLv2+
+885,gstreamer1-plugins-ugly-free,Yes,LGPLv2+ and LGPLv2
+886,gtk-update-icon-cache,No,LGPLv2+
+887,gtk-vnc2,No,LGPLv2+
+888,gtk2,No,LGPLv2+
+889,gtk2-devel,No,LGPLv2+
+890,gtk2-devel-docs,Yes,LGPLv2+
+891,gtk2-immodule-xim,Yes,LGPLv2+
+892,gtk3,No,LGPLv2+
+893,gtk3-devel,Yes,LGPLv2+
+894,gtk3-immodule-xim,Yes,LGPLv2+
+895,gtkhtml3,No,LGPLv2+ and GPLv2
+896,gtkmm24,No,LGPLv2+
+897,gtkmm30,No,LGPLv2+
+898,gtksourceview3,No,LGPLv2+
+899,gtkspell,No,GPLv2+
+900,gtkspell3,No,GPLv2+
+901,guava,No,ASL 2.0
+902,gubbi-fonts,Yes,OFL
+903,gucharmap,Yes,GPLv3+ and GFDL and MIT
+904,gucharmap-libs,No,GPLv3+ and GFDL and MIT
+905,gupnp,No,LGPLv2+
+906,gupnp-av,No,LGPLv2+
+907,gupnp-dlna,No,LGPLv2+
+908,gupnp-igd,No,LGPLv2+
+909,gutenprint,Yes,GPLv2+
+910,gutenprint-cups,Yes,GPLv2+
+911,gutenprint-plugin,Yes,GPLv2+
+912,gvfs,No,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+913,gvfs-afc,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+914,gvfs-afp,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+915,gvfs-archive,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+916,gvfs-client,No,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+917,gvfs-devel,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+918,gvfs-fuse,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+919,gvfs-goa,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+920,gvfs-gphoto2,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+921,gvfs-mtp,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+922,gvfs-smb,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+923,gvnc,No,LGPLv2+
+924,gwenview,Yes,GPLv2+
+925,gwenview-libs,No,IJG and LGPLv2+ and GPLv2+ and LGPLv2 or LGPLv3
+926,gzip,No,GPLv3+ and GFDL
+927,hamcrest,No,BSD
+928,haproxy,Yes,GPLv2+
+929,hardlink,Yes,GPL+
+930,harfbuzz,No,MIT
+931,harfbuzz-devel,No,MIT
+932,harfbuzz-icu,No,MIT
+933,hawkey,No,LGPLv2+
+934,hdparm,Yes,BSD
+935,hesiod,No,MIT
+936,hexedit,No,GPLv2+
+937,hicolor-icon-theme,No,GPL+
+938,highcontrast-qt5,No,GPLv2+ and MIT
+939,highlight,No,GPLv3
+940,hivex,No,LGPLv2
+941,hmaccalc,Yes,BSD
+942,hostname,Yes,GPLv2+
+943,hpijs,Yes,BSD
+944,hplip,Yes,GPLv2+ and MIT
+945,hplip-common,No,GPLv2+
+946,hplip-gui,Yes,BSD
+947,hplip-libs,No,GPLv2+ and MIT
+948,hsakmt,No,MIT and GPLv2
+949,hsqldb,No,BSD
+950,http-parser,No,MIT
+951,httpcomponents-client,No,ASL 2.0
+952,httpcomponents-core,No,ASL 2.0 and CC-BY
+953,httpd,Yes,ASL 2.0
+954,httpd-devel,Yes,ASL 2.0
+955,httpd-manual,Yes,ASL 2.0
+956,httpd-tools,No,ASL 2.0
+957,hunspell,Yes,LGPLv2+ or GPLv2+ or MPLv1.1
+958,hunspell-af,No,LGPLv2+
+959,hunspell-ak,No,LGPLv3
+960,hunspell-am,No,GPL+
+961,hunspell-ar,No,GPLv2 or LGPLv2 or MPLv1.1
+962,hunspell-as,No,GPLv2+ or LGPLv2+ or MPLv1.1
+963,hunspell-ast,No,GPLv3+
+964,hunspell-az,No,GPLv2+
+965,hunspell-be,No,GPL+ and LGPLv2+
+966,hunspell-ber,No,GPL+ or LGPLv2+ or MPLv1.1
+967,hunspell-bg,No,GPLv2+ or LGPLv2+ or MPLv1.1
+968,hunspell-bn,No,GPLv2+
+969,hunspell-br,No,LGPLv2+
+970,hunspell-ca,No,GPLv2+
+971,hunspell-cop,No,GPLv3+
+972,hunspell-cs,No,GPL+
+973,hunspell-csb,No,GPLv2+
+974,hunspell-cv,No,LGPLv2+
+975,hunspell-cy,No,GPL+
+976,hunspell-da,No,GPLv2+
+977,hunspell-de,No,GPLv2 or GPLv3
+978,hunspell-devel,Yes,LGPLv2+ or GPLv2+ or MPLv1.1
+979,hunspell-dsb,No,GPLv2+
+980,hunspell-el,No,GPLv2+ or LGPLv2+ or MPLv1.1
+981,hunspell-en,Yes,LGPLv2+ and LGPLv2 and BSD
+982,hunspell-en-GB,No,LGPLv2+ and LGPLv2 and BSD
+983,hunspell-en-US,No,LGPLv2+ and LGPLv2 and BSD
+984,hunspell-eo,No,LGPLv3
+985,hunspell-es,No,LGPLv3+ or GPLv3+ or MPLv1.1
+986,hunspell-et,No,LGPLv2+ and LPPL
+987,hunspell-eu,No,GPLv2
+988,hunspell-fa,No,GPLv2+
+989,hunspell-fj,No,LGPLv2+ or GPLv2+ or MPLv1.1
+990,hunspell-fo,No,GPLv2+
+991,hunspell-fr,No,MPLv2.0
+992,hunspell-fur,No,GPLv2+
+993,hunspell-fy,No,LGPLv2+
+994,hunspell-ga,No,GPLv2+
+995,hunspell-gd,No,GPLv2+ and GPLv3+
+996,hunspell-gl,No,GPLv2
+997,hunspell-grc,No,GPL+ or LGPLv2+
+998,hunspell-gu,No,GPL+
+999,hunspell-gv,No,GPL+
+1000,hunspell-haw,No,GPLv2+
+1001,hunspell-he,No,AGPLv3
+1002,hunspell-hi,No,GPLv2+
+1003,hunspell-hil,No,GPLv3+
+1004,hunspell-hr,No,LGPLv2+ or SISSL
+1005,hunspell-hsb,No,GPLv2+
+1006,hunspell-ht,No,GPLv3+
+1007,hunspell-hu,No,LGPLv2+ or GPLv2+ or MPLv1.1
+1008,hunspell-hy,No,GPLv2+
+1009,hunspell-ia,No,LGPLv2+
+1010,hunspell-id,No,GPLv2
+1011,hunspell-is,No,GPLv2+
+1012,hunspell-it,No,GPLv3+
+1013,hunspell-kk,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1014,hunspell-km,No,GPLv3
+1015,hunspell-kn,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1016,hunspell-ko,No,MPLv1.1 or GPLv2 or LGPLv2
+1017,hunspell-ku,No,GPLv3 or LGPLv3 or MPLv1.1
+1018,hunspell-ky,No,GPLv2+
+1019,hunspell-la,No,GPLv2+ and LGPLv2+
+1020,hunspell-lb,No,EUPL 1.1
+1021,hunspell-ln,No,GPLv2+
+1022,hunspell-lt,No,BSD
+1023,hunspell-lv,No,LGPLv2+
+1024,hunspell-mai,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1025,hunspell-mg,No,GPLv2+
+1026,hunspell-mi,No,GPLv3+
+1027,hunspell-mk,No,GPL+
+1028,hunspell-ml,No,GPLv3+
+1029,hunspell-mn,No,GPLv2 and LGPLv2+
+1030,hunspell-mos,No,LGPLv3
+1031,hunspell-mr,No,LGPLv2+
+1032,hunspell-ms,No,GFDL and GPL+
+1033,hunspell-mt,No,LGPLv2+
+1034,hunspell-nb,No,GPL+
+1035,hunspell-nds,No,GPLv2+
+1036,hunspell-ne,No,LGPLv2
+1037,hunspell-nl,No,BSD or CC-BY
+1038,hunspell-nn,No,GPL+
+1039,hunspell-nr,No,LGPLv2+
+1040,hunspell-nso,No,LGPLv2+
+1041,hunspell-ny,No,GPLv3+
+1042,hunspell-oc,No,GPLv3+
+1043,hunspell-om,No,LGPLv3+
+1044,hunspell-or,No,GPLv2+
+1045,hunspell-pa,No,GPLv2+
+1046,hunspell-pl,No,LGPLv2+ or GPL+ or MPLv1.1 or CC-BY-SA
+1047,hunspell-pt,No,((LGPLv3 or MPL) and LGPLv2) and (GPLv2 or LGPLv2 or MPLv1.1)
+1048,hunspell-qu,No,AGPLv3
+1049,hunspell-quh,No,GPLv2+
+1050,hunspell-ro,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1051,hunspell-ru,No,BSD
+1052,hunspell-rw,No,GPLv2+
+1053,hunspell-sc,No,AGPLv3+ and GPLv2
+1054,hunspell-se,No,GPLv3
+1055,hunspell-shs,No,GPLv2+
+1056,hunspell-si,No,GPLv2+
+1057,hunspell-sk,No,LGPLv2 or GPLv2 or MPLv1.1
+1058,hunspell-sl,No,GPL+ or LGPLv2+
+1059,hunspell-smj,No,GPLv3
+1060,hunspell-so,No,GPLv2+
+1061,hunspell-sq,No,GPLv2+
+1062,hunspell-sr,No,LGPLv3
+1063,hunspell-ss,No,LGPLv2+
+1064,hunspell-st,No,LGPLv2+
+1065,hunspell-sv,No,LGPLv3
+1066,hunspell-sw,No,LGPLv2+
+1067,hunspell-ta,No,GPLv2+
+1068,hunspell-te,No,GPL+
+1069,hunspell-tet,No,GPLv2+
+1070,hunspell-th,No,LGPLv2+
+1071,hunspell-ti,No,GPL+
+1072,hunspell-tk,No,GPLv2+
+1073,hunspell-tl,No,GPLv2+
+1074,hunspell-tn,No,GPLv2+
+1075,hunspell-tpi,No,GPLv3+
+1076,hunspell-ts,No,LGPLv2+
+1077,hunspell-uk,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1078,hunspell-ur,No,LGPLv2+
+1079,hunspell-uz,No,GPLv2+
+1080,hunspell-ve,No,LGPLv2+
+1081,hunspell-vi,No,GPL+
+1082,hunspell-wa,No,LGPLv2+
+1083,hunspell-xh,No,LGPLv2+
+1084,hunspell-yi,No,LGPLv2+ or GPLv2+ or MPLv1.1
+1085,hunspell-zu,No,GPLv3+
+1086,hwdata,No,GPLv2+
+1087,hwloc,Yes,BSD
+1088,hwloc-libs,No,BSD
+1089,hyperv-daemons,Yes,GPLv2
+1090,hyperv-daemons-license,No,GPLv2
+1091,hypervfcopyd,No,GPLv2
+1092,hypervkvpd,No,GPLv2
+1093,hypervvssd,No,GPLv2
+1094,hyphen,No,GPLv2 or LGPLv2+ or MPLv1.1
+1095,hyphen-af,No,LGPLv2+ and GPL+
+1096,hyphen-as,No,LGPLv3+
+1097,hyphen-be,No,GPL+ and LGPLv2+
+1098,hyphen-bg,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1099,hyphen-bn,No,LGPLv3+
+1100,hyphen-ca,No,GPLv3
+1101,hyphen-cs,No,GPL+
+1102,hyphen-cy,No,LPPL
+1103,hyphen-da,No,LGPLv2+
+1104,hyphen-de,No,LGPLv2+
+1105,hyphen-el,No,LGPLv2+
+1106,hyphen-en,No,GPLv2 or LGPLv2+ or MPLv1.1
+1107,hyphen-es,No,LGPLv2+
+1108,hyphen-et,No,LGPLv2+ and LPPL
+1109,hyphen-eu,No,LPPL
+1110,hyphen-fa,No,LPPL
+1111,hyphen-fo,No,GPL+
+1112,hyphen-fr,No,LGPLv2+
+1113,hyphen-ga,No,GPL+
+1114,hyphen-gl,No,GPLv3
+1115,hyphen-grc,No,LPPL
+1116,hyphen-gu,No,LGPLv3+
+1117,hyphen-hi,No,LGPLv3+
+1118,hyphen-hr,No,LGPLv2+ or SISSL
+1119,hyphen-hsb,No,LPPL
+1120,hyphen-hu,No,GPLv2
+1121,hyphen-ia,No,LPPL
+1122,hyphen-id,No,GPL+
+1123,hyphen-is,No,LGPLv2+ or SISSL
+1124,hyphen-it,No,LGPLv2+
+1125,hyphen-kn,No,LGPLv3+
+1126,hyphen-ku,No,LGPLv2+
+1127,hyphen-lt,No,LPPL
+1128,hyphen-lv,No,LGPLv2+
+1129,hyphen-mi,No,GPLv3+
+1130,hyphen-ml,No,LGPLv3+
+1131,hyphen-mn,No,LPPL
+1132,hyphen-mr,No,LGPLv3+
+1133,hyphen-nb,No,GPL+
+1134,hyphen-nl,No,GPLv2
+1135,hyphen-nn,No,GPL+
+1136,hyphen-or,No,LGPLv3+
+1137,hyphen-pa,No,LGPLv3+
+1138,hyphen-pl,No,LGPLv2+
+1139,hyphen-pt,No,GPL+
+1140,hyphen-ro,No,GPLv2+
+1141,hyphen-ru,No,LGPLv2+
+1142,hyphen-sa,No,LPPL
+1143,hyphen-sk,No,GPL+
+1144,hyphen-sl,No,LGPLv2+
+1145,hyphen-sr,No,LGPLv3
+1146,hyphen-sv,No,LGPLv2+ or GPLv2+
+1147,hyphen-ta,No,LGPLv3+
+1148,hyphen-te,No,LGPLv3+
+1149,hyphen-tk,No,Public Domain
+1150,hyphen-uk,No,GPLv2+
+1151,hyphen-zu,No,LGPLv2+ and GPL+
+1152,i2c-tools,Yes,GPLv2+
+1153,ibacm,Yes,GPLv2 or BSD
+1154,ibus,No,LGPLv2+
+1155,ibus-chewing,Yes,GPLv2+
+1156,ibus-gtk2,Yes,LGPLv2+
+1157,ibus-gtk3,Yes,LGPLv2+
+1158,ibus-hangul,Yes,GPLv2+
+1159,ibus-kkc,Yes,GPLv2+
+1160,ibus-libpinyin,Yes,GPLv2+
+1161,ibus-libs,No,LGPLv2+
+1162,ibus-m17n,Yes,GPLv2+
+1163,ibus-qt,Yes,GPLv2+
+1164,ibus-rawcode,Yes,GPLv2+
+1165,ibus-sayura,Yes,GPLv2+
+1166,ibus-setup,No,LGPLv2+
+1167,ibus-table,Yes,LGPLv2+
+1168,ibus-table-chinese,Yes,GPLv3+
+1169,ibus-typing-booster,Yes,GPLv3+
+1170,ibutils,Yes,GPLv2 or BSD
+1171,ibutils-libs,No,GPLv2 or BSD
+1172,icedax,No,GPLv2
+1173,icedtea-web,Yes,LGPLv2+ and GPLv2 with exceptions
+1174,icoutils,No,GPLv3+
+1175,ilmbase,No,BSD
+1176,im-chooser,No,GPLv2+ and LGPLv2+
+1177,im-chooser-common,No,GPLv2+ and LGPLv2+
+1178,ima-evm-utils,Yes,GPLv2
+1179,ImageMagick,Yes,ImageMagick
+1180,ImageMagick-c++,No,ImageMagick
+1181,ImageMagick-perl,Yes,ImageMagick
+1182,imake,Yes,MIT
+1183,imsettings,No,LGPLv2+
+1184,imsettings-gsettings,Yes,LGPLv2+
+1185,imsettings-libs,No,LGPLv2+
+1186,imsettings-qt,Yes,LGPLv2+
+1187,indent,Yes,GPLv3+
+1188,infiniband-diags,Yes,GPLv2 or BSD
+1189,infinipath-psm,No,BSD or GPLv2
+1190,info,No,GPLv3+
+1191,iniparser,No,MIT
+1192,initial-setup,Yes,GPLv2+
+1193,initial-setup-gui,Yes,GPLv2+
+1194,initscripts,Yes,GPLv2 and GPLv2+
+1195,inkscape,Yes,GPLv2+
+1196,insights-client,Yes,GPLv2+
+1197,intel-cmt-cat,Yes,BSD
+1198,intltool,Yes,GPLv2 with exceptions
+1199,iok,Yes,GPLv2+
+1200,iotop,Yes,GPLv2+
+1201,iowatcher,Yes,GPLv2
+1202,ipa-client,Yes,GPLv3+
+1203,ipa-client-common,No,GPLv3+
+1204,ipa-common,No,GPLv3+
+1205,ipa-gothic-fonts,Yes,IPA
+1206,ipa-mincho-fonts,Yes,IPA
+1207,ipa-pgothic-fonts,Yes,IPA
+1208,ipa-pmincho-fonts,Yes,IPA
+1209,ipa-python-compat,No,GPLv3+
+1210,ipa-server,Yes,GPLv3+
+1211,ipa-server-common,No,GPLv3+
+1212,ipa-server-dns,Yes,GPLv3+
+1213,ipa-server-trust-ad,Yes,GPLv3+
+1214,iperf3,Yes,BSD
+1215,ipmitool,Yes,BSD
+1216,iproute,Yes,GPLv2+ and Public Domain
+1217,iprutils,Yes,CPL
+1218,ipset,Yes,GPLv2
+1219,ipset-libs,No,GPLv2
+1220,ipset-service,No,GPLv2
+1221,iptables,Yes,GPLv2
+1222,iptables-devel,Yes,GPLv2
+1223,iptables-services,No,GPLv2
+1224,iptraf-ng,Yes,GPLv2+
+1225,iptstate,Yes,zlib
+1226,iputils,Yes,BSD and GPLv2+
+1227,ipvsadm,Yes,GPLv2+
+1228,ipxe-roms-qemu,No,GPLv2 and BSD
+1229,irqbalance,Yes,GPLv2
+1230,irssi,Yes,GPLv2+
+1231,iscsi-initiator-utils,Yes,GPLv2+
+1232,iscsi-initiator-utils-iscsiuio,No,BSD
+1233,isdn4k-utils,Yes,GPLv2+ and GPL+ and MIT and BSD and zlib
+1234,isns-utils,Yes,LGPLv2+
+1235,iso-codes,No,LGPLv2+
+1236,isomd5sum,No,GPLv2+
+1237,isorelax,No,MIT and ASL 1.1
+1238,istack-commons,No,CDDL and GPLv2 with exceptions
+1239,itstool,No,GPLv3+
+1240,ivtv-firmware,Yes,"Redistributable, no modification permitted"
+1241,iw,No,ISC
+1242,iwl100-firmware,Yes,"Redistributable, no modification permitted"
+1243,iwl1000-firmware,Yes,"Redistributable, no modification permitted"
+1244,iwl105-firmware,Yes,"Redistributable, no modification permitted"
+1245,iwl135-firmware,Yes,"Redistributable, no modification permitted"
+1246,iwl2000-firmware,Yes,"Redistributable, no modification permitted"
+1247,iwl2030-firmware,Yes,"Redistributable, no modification permitted"
+1248,iwl3160-firmware,Yes,"Redistributable, no modification permitted"
+1249,iwl3945-firmware,Yes,"Redistributable, no modification permitted"
+1250,iwl4965-firmware,Yes,"Redistributable, no modification permitted"
+1251,iwl5000-firmware,Yes,"Redistributable, no modification permitted"
+1252,iwl5150-firmware,Yes,"Redistributable, no modification permitted"
+1253,iwl6000-firmware,Yes,"Redistributable, no modification permitted"
+1254,iwl6000g2a-firmware,Yes,"Redistributable, no modification permitted"
+1255,iwl6000g2b-firmware,Yes,"Redistributable, no modification permitted"
+1256,iwl6050-firmware,Yes,"Redistributable, no modification permitted"
+1257,iwl7260-firmware,Yes,"Redistributable, no modification permitted"
+1258,iwpmd,Yes,GPLv2 or BSD
+1259,ixpdimm_sw,No,BSD
+1260,jackson,No,ASL 2.0 or LGPLv2
+1261,jakarta-commons-httpclient,No,ASL 2.0 and (ASL 2.0 or LGPLv2+)
+1262,jakarta-oro,No,ASL 1.1
+1263,jakarta-taglibs-standard,No,ASL 2.0
+1264,jansson,No,MIT
+1265,jasper-libs,No,JasPer
+1266,java-1.6.0-openjdk,Yes,"ASL 1.1, ASL 2.0, GPL+, GPLv2, GPLv2 with exceptions, LGPL+, LGPLv2, MPLv1.0, MPLv1.1, Public Domain, W3C"
+1267,java-1.6.0-openjdk-devel,Yes,"ASL 1.1, ASL 2.0, GPL+, GPLv2, GPLv2 with exceptions, LGPL+, LGPLv2, MPLv1.0, MPLv1.1, Public Domain, W3C"
+1268,java-1.7.0-openjdk,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv1.1 and MPLv2.0 and Public Domain and W3C and zlib
+1269,java-1.7.0-openjdk-devel,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv1.1 and MPLv2.0 and Public Domain and W3C and zlib
+1270,java-1.7.0-openjdk-headless,No,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv1.1 and MPLv2.0 and Public Domain and W3C and zlib
+1271,java-1.8.0-openjdk,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1272,java-1.8.0-openjdk-devel,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1273,java-1.8.0-openjdk-headless,No,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1274,java-11-openjdk,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1275,java-11-openjdk-devel,No,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1276,java-11-openjdk-headless,No,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1277,java-atk-wrapper,No,LGPLv2+
+1278,javamail,No,CDDL or GPLv2 with exceptions
+1279,javapackages-tools,Yes,BSD
+1280,javassist,No,MPLv1.1 or LGPLv2+ or ASL 2.0
+1281,jaxen,No,BSD
+1282,jbigkit-libs,No,GPLv2+
+1283,jboss-annotations-1.1-api,No,CDDL or GPLv2 with exceptions
+1284,jdom,No,ASL 1.1
+1285,jettison,No,ASL 2.0
+1286,jing,No,BSD
+1287,jline,No,BSD
+1288,jna,No,LGPLv2+ and ASL 2.0
+1289,joda-convert,No,ASL 2.0
+1290,joda-time,No,ASL 2.0
+1291,jomolhari-fonts,Yes,OFL
+1292,jose,No,ASL 2.0
+1293,js,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1294,json-c,No,MIT
+1295,json-glib,No,LGPLv2+
+1296,json-glib-devel,No,LGPLv2+
+1297,jsr-311,No,CDDL
+1298,jss,No,MPLv1.1 or GPLv2+ or LGPLv2+
+1299,junit,Yes,CPL
+1300,jvnet-parent,No,ASL 2.0
+1301,k3b,Yes,GPLv2+
+1302,k3b-common,No,GPLv2+
+1303,k3b-libs,No,GPLv2+
+1304,kabi-yum-plugins,Yes,GPLv2
+1305,kaccessible,No,LGPLv2+
+1306,kaccessible-libs,No,LGPLv2+
+1307,kacst-art-fonts,Yes,GPLv2
+1308,kacst-book-fonts,Yes,GPLv2
+1309,kacst-decorative-fonts,Yes,GPLv2
+1310,kacst-digital-fonts,Yes,GPLv2
+1311,kacst-farsi-fonts,Yes,GPLv2
+1312,kacst-fonts-common,No,GPLv2
+1313,kacst-letter-fonts,Yes,GPLv2
+1314,kacst-naskh-fonts,Yes,GPLv2
+1315,kacst-office-fonts,Yes,GPLv2
+1316,kacst-one-fonts,Yes,GPLv2
+1317,kacst-pen-fonts,Yes,GPLv2
+1318,kacst-poster-fonts,Yes,GPLv2
+1319,kacst-qurn-fonts,Yes,GPLv2
+1320,kacst-screen-fonts,Yes,GPLv2
+1321,kacst-title-fonts,Yes,GPLv2
+1322,kacst-titlel-fonts,Yes,GPLv2
+1323,kactivities,No,GPLv2+ and LGPLv2+
+1324,kamera,Yes,GPLv2
+1325,kate-part,No,LGPLv2
+1326,kbd,Yes,GPLv2+
+1327,kbd-legacy,No,GPLv2+
+1328,kbd-misc,No,GPLv2+
+1329,kcalc,Yes,GPLv2+
+1330,kcharselect,Yes,GPLv2+
+1331,kcm-gtk,Yes,GPLv2+
+1332,kcm_colors,No,GPLv2
+1333,kcm_touchpad,Yes,GPLv2
+1334,kcolorchooser,Yes,BSD
+1335,kcoloredit,Yes,GPLv2+
+1336,kde-base-artwork,Yes,LGPLv3+
+1337,kde-baseapps,Yes,GPLv2
+1338,kde-baseapps-libs,No,GPLv2
+1339,kde-filesystem,No,Public Domain
+1340,kde-l10n,No,LGPLv2
+1341,kde-plasma-networkmanagement,Yes,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and LGPLv2
+1342,kde-plasma-networkmanagement-libs,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and LGPLv2
+1343,kde-print-manager,Yes,GPLv2+
+1344,kde-runtime,Yes,LGPLv2+ and GPLv2+
+1345,kde-runtime-drkonqi,No,LGPLv2+ and GPLv2+
+1346,kde-runtime-libs,No,LGPLv2+ and GPLv2+
+1347,kde-settings,No,MIT
+1348,kde-settings-ksplash,No,MIT
+1349,kde-settings-plasma,No,MIT
+1350,kde-settings-pulseaudio,Yes,Public Domain
+1351,kde-style-oxygen,No,GPLv2
+1352,kde-workspace,Yes,GPLv2
+1353,kde-workspace-devel,Yes,GPLv2
+1354,kde-workspace-libs,No,GPLv2
+1355,kdeaccessibility,Yes,GPLv2
+1356,kdeadmin,Yes,GPLv2
+1357,kdeartwork-screensavers,Yes,GPLv2 and LGPLv2+
+1358,kdegraphics-devel,Yes,GPLv2
+1359,kdegraphics-libs,No,GPLv2
+1360,kdegraphics-strigi-analyzer,Yes,LGPLv2+ and GPLv2
+1361,kdegraphics-thumbnailers,Yes,GPLv2+
+1362,kdelibs,Yes,LGPLv2+
+1363,kdelibs-common,No,LGPLv2+
+1364,kdelibs-devel,Yes,LGPLv2+
+1365,kdelibs-ktexteditor,No,LGPLv2+
+1366,kdenetwork-common,No,GPLv2
+1367,kdenetwork-devel,Yes,GPLv2
+1368,kdenetwork-kdnssd,Yes,GPLv2
+1369,kdenetwork-kget,Yes,GPLv2
+1370,kdenetwork-kget-libs,No,GPLv2
+1371,kdenetwork-kopete,No,GPLv2
+1372,kdenetwork-kopete-devel,No,GPLv2
+1373,kdenetwork-kopete-libs,No,GPLv2
+1374,kdenetwork-krdc,Yes,GPLv2
+1375,kdenetwork-krdc-devel,No,GPLv2
+1376,kdenetwork-krdc-libs,No,GPLv2
+1377,kdenetwork-krfb,Yes,GPLv2
+1378,kdenetwork-krfb-libs,No,GPLv2
+1379,kdepim,Yes,GPLv2
+1380,kdepim-devel,Yes,GPLv2
+1381,kdepim-libs,No,GPLv2
+1382,kdepim-runtime,No,GPLv2
+1383,kdepim-runtime-libs,No,GPLv2
+1384,kdepimlibs,No,LGPLv2+
+1385,kdepimlibs-akonadi,No,LGPLv2+
+1386,kdepimlibs-devel,Yes,LGPLv2+
+1387,kdepimlibs-kxmlrpcclient,No,BSD
+1388,kdeplasma-addons,Yes,GPLv2+
+1389,kdeplasma-addons-libs,No,GPLv2+
+1390,kdesdk-common,No,GPLv2+ and GFDL
+1391,kdesdk-devel,Yes,GPLv2+ and GFDL
+1392,kdesdk-kmtrace,No,GPLv2+ and GFDL
+1393,kdesdk-kmtrace-devel,No,GPLv2+ and GFDL
+1394,kdesdk-kmtrace-libs,No,GPLv2+ and GFDL
+1395,kdesdk-kompare,No,GPLv2+ and GFDL
+1396,kdesdk-kompare-devel,No,GPLv2+ and GFDL
+1397,kdesdk-kompare-libs,No,GPLv2+ and GFDL
+1398,kdesdk-okteta,No,GPLv2+ and GFDL
+1399,kdesdk-okteta-devel,No,GPLv2+ and GFDL
+1400,kdesdk-okteta-libs,No,GPLv2+ and GFDL
+1401,kdeutils-minimal,Yes,GPLv2
+1402,kdf,No,GPLv2+
+1403,keepalived,Yes,GPLv2+
+1404,kernel,No,GPLv2
+1405,kernel-abi-whitelists,No,GPLv2
+1406,kernel-debug,No,GPLv2
+1407,kernel-debug-devel,No,GPLv2
+1408,kernel-devel,No,GPLv2
+1409,kernel-doc,No,GPLv2
+1410,kernel-headers,No,GPLv2
+1411,kernel-tools,Yes,GPLv2
+1412,kernel-tools-libs,No,GPLv2
+1413,kexec-tools,Yes,GPLv2
+1414,keybinder3,No,MIT
+1415,keycloak-httpd-client-install,Yes,GPLv3
+1416,keyutils,No,GPLv2+ and LGPLv2+
+1417,keyutils-libs,No,GPLv2+ and LGPLv2+
+1418,keyutils-libs-devel,No,GPLv2+ and LGPLv2+
+1419,kgpg,Yes,GPLv2+
+1420,kgreeter-plugins,No,GPLv2
+1421,khmeros-base-fonts,Yes,LGPLv2+
+1422,khmeros-battambang-fonts,Yes,LGPLv2+
+1423,khmeros-bokor-fonts,Yes,LGPLv2+
+1424,khmeros-fonts-common,No,LGPLv2+
+1425,khmeros-handwritten-fonts,Yes,LGPLv2+
+1426,khmeros-metal-chrieng-fonts,Yes,LGPLv2+
+1427,khmeros-muol-fonts,Yes,LGPLv2+
+1428,khmeros-siemreap-fonts,Yes,LGPLv2+
+1429,khotkeys,No,GPLv2
+1430,khotkeys-libs,No,GPLv2
+1431,kiconedit,Yes,GPLv2+
+1432,kinfocenter,No,GPLv2
+1433,kio_sysinfo,No,GPLv2+
+1434,kmag,No,GPLv2
+1435,kmenuedit,No,GPLv2
+1436,kmix,Yes,GPLv2+ and GFDL
+1437,kmod,No,GPLv2+
+1438,kmod-kvdo,Yes,GPLv2+
+1439,kmod-libs,No,LGPLv2+
+1440,kolourpaint,Yes,BSD and LGPLv2+
+1441,kolourpaint-libs,No,LGPLv2
+1442,konkretcmpi,No,MIT
+1443,konkretcmpi-python,No,MIT
+1444,konsole,Yes,GPLv2 and GFDL
+1445,konsole-part,No,GPLv2 and GFDL
+1446,kpartx,No,GPL+
+1447,kpatch,Yes,GPLv2
+1448,krb5-devel,Yes,MIT
+1449,krb5-libs,No,MIT
+1450,krb5-pkinit,Yes,MIT
+1451,krb5-server,Yes,MIT
+1452,krb5-server-ldap,Yes,MIT
+1453,krb5-workstation,Yes,MIT
+1454,kruler,Yes,GPLv2 and GFDL
+1455,ksaneplugin,Yes,LGPLv2+
+1456,ksc,Yes,GPLv2+
+1457,kscreen,No,GPLv2 or GPLv3
+1458,ksh,Yes,EPL
+1459,ksnapshot,Yes,GPLv2+
+1460,ksshaskpass,Yes,GPLv2
+1461,ksysguard,Yes,GPLv2
+1462,ksysguard-libs,No,GPLv2
+1463,ksysguardd,No,GPLv2
+1464,ktimer,No,GPLv2+
+1465,kurdit-unikurd-web-fonts,Yes,GPLv3
+1466,kwallet,Yes,GPLv2+
+1467,kwin,No,GPLv2
+1468,kwin-gles-libs,No,GPLv2
+1469,kwin-libs,No,GPLv2
+1470,kwrite,Yes,LGPLv2+
+1471,langtable,No,GPLv3+
+1472,langtable-data,No,GPLv3+ and MIT
+1473,langtable-python,No,GPLv3+
+1474,lapack,Yes,BSD
+1475,lasso,No,GPLv2+
+1476,latencytop,Yes,GPLv2
+1477,latencytop-common,No,GPLv2
+1478,latencytop-tui,Yes,GPLv2
+1479,latrace,Yes,GPLv3+
+1480,lcms2,No,MIT
+1481,ldapjdk,Yes,MPLv1.1 or GPLv2+ or LGPLv2+
+1482,ldns,No,BSD
+1483,ledmon,Yes,GPLv2+
+1484,less,Yes,GPLv3+
+1485,lftp,Yes,GPLv3+
+1486,libabw,No,MPLv2.0
+1487,libacl,No,LGPLv2+
+1488,libacl-devel,Yes,LGPLv2+
+1489,libaio,Yes,LGPLv2+
+1490,libaio-devel,Yes,LGPLv2+
+1491,libao,No,GPLv2+
+1492,libappindicator-gtk3,Yes,LGPLv2 and LGPLv3
+1493,libappstream-glib,No,LGPLv2+
+1494,libarchive,No,BSD
+1495,libart_lgpl,No,LGPLv2+
+1496,libassuan,No,LGPLv2+ and GPLv3+
+1497,libasyncns,No,LGPLv2+
+1498,libatasmart,No,LGPLv2+
+1499,libatomic,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1500,libatomic-static,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1501,libattr,No,LGPLv2+
+1502,libattr-devel,Yes,LGPLv2+
+1503,libavc1394,No,GPLv2+ and LGPLv2+
+1504,libbase,No,LGPLv2
+1505,libbasicobjects,No,GPLv3+
+1506,libblkid,No,LGPLv2+
+1507,libblkid-devel,Yes,LGPLv2+
+1508,libblockdev,No,LGPLv2+
+1509,libblockdev-crypto,No,LGPLv2+
+1510,libblockdev-fs,No,LGPLv2+
+1511,libblockdev-loop,No,LGPLv2+
+1512,libblockdev-lvm,No,LGPLv2+
+1513,libblockdev-mdraid,No,LGPLv2+
+1514,libblockdev-nvdimm,No,LGPLv2+
+1515,libblockdev-part,No,LGPLv2+
+1516,libblockdev-swap,No,LGPLv2+
+1517,libblockdev-utils,No,LGPLv2+
+1518,libbluedevil,No,LGPLv2+
+1519,libbluray,No,LGPLv2+
+1520,libbonobo,No,GPLv2+ and LGPLv2+
+1521,libbonoboui,No,LGPLv2+
+1522,libburn,No,GPLv2+
+1523,libbytesize,No,LGPLv2+
+1524,libcacard,No,GPLv2+ and LGPLv2+ and BSD
+1525,libcacard-tools,No,GPLv2+ and LGPLv2+ and BSD
+1526,libcanberra,No,LGPLv2+
+1527,libcanberra-devel,Yes,LGPLv2+
+1528,libcanberra-gtk2,Yes,LGPLv2+
+1529,libcanberra-gtk3,Yes,LGPLv2+
+1530,libcap,No,LGPLv2+
+1531,libcap-devel,Yes,LGPLv2+
+1532,libcap-ng,No,LGPLv2+
+1533,libcap-ng-devel,Yes,LGPLv2+
+1534,libcdio,No,GPLv3+
+1535,libcdio-paranoia,No,GPLv2+ and LGPLv2+
+1536,libcdr,No,MPLv2.0 and Public Domain
+1537,libcgroup,Yes,LGPLv2+
+1538,libcgroup-tools,Yes,LGPLv2+
+1539,libchamplain,No,LGPLv2+
+1540,libchamplain-gtk,No,LGPLv2+
+1541,libchewing,No,LGPLv2+
+1542,libcmis,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1543,libcmpiCppImpl0,No,EPL
+1544,libcmpiutil,No,LGPLv2+
+1545,libcollection,No,LGPLv3+
+1546,libcom_err,No,MIT
+1547,libcom_err-devel,No,MIT
+1548,libconfig,No,LGPLv2+
+1549,libcroco,No,LGPLv2
+1550,libcryptui,No,LGPLv2+
+1551,libcurl,Yes,MIT
+1552,libcurl-devel,Yes,MIT
+1553,libdaemon,No,LGPLv2+
+1554,libdb,No,BSD and LGPLv2 and Sleepycat
+1555,libdb-cxx,Yes,BSD and LGPLv2 and Sleepycat
+1556,libdb-devel,Yes,BSD and LGPLv2 and Sleepycat
+1557,libdb-utils,No,BSD and LGPLv2 and Sleepycat
+1558,libdbi,No,LGPLv2+
+1559,libdbi-dbd-mysql,Yes,LGPLv2+
+1560,libdbi-dbd-pgsql,Yes,LGPLv2+
+1561,libdbi-drivers,No,LGPLv2+
+1562,libdbusmenu,No,LGPLv3 or LGPLv2 and GPLv3
+1563,libdbusmenu-gtk3,No,LGPLv3 or LGPLv2 and GPLv3
+1564,libdhash,No,LGPLv3+
+1565,libdmapsharing,No,LGPLv2+
+1566,libdmx,No,MIT
+1567,libdnet,No,BSD
+1568,libdrm,No,MIT
+1569,libdrm-devel,Yes,MIT
+1570,libdv,No,LGPLv2+
+1571,libdvdnav,No,GPLv2+
+1572,libdvdread,No,GPLv2+
+1573,libdwarf,No,LGPLv2
+1574,libeasyfc,No,LGPLv3+
+1575,libeasyfc-gobject,No,LGPLv3+
+1576,libecap,No,BSD
+1577,libedit,No,BSD
+1578,libepoxy,No,MIT
+1579,libepoxy-devel,No,MIT
+1580,liberation-fonts,No,Liberation
+1581,liberation-fonts-common,No,Liberation
+1582,liberation-mono-fonts,Yes,Liberation
+1583,liberation-narrow-fonts,Yes,Liberation
+1584,liberation-sans-fonts,Yes,Liberation
+1585,liberation-serif-fonts,Yes,Liberation
+1586,libesmtp,No,LGPLv2+
+1587,libestr,No,LGPLv2+
+1588,libetonyek,No,MPLv2.0
+1589,libevdev,No,MIT
+1590,libevent,No,BSD
+1591,libexif,No,LGPLv2+
+1592,libexttextcat,No,BSD
+1593,libfabric,No,GPLv2 or BSD
+1594,libfastjson,No,MIT
+1595,libffi,No,MIT and Public Domain
+1596,libffi-devel,No,MIT and Public Domain
+1597,libfontenc,No,MIT
+1598,libfonts,No,LGPLv2 and UCD
+1599,libformula,No,LGPLv2
+1600,libfprint,No,LGPLv2+
+1601,libfreehand,No,MPLv2.0
+1602,libgcab1,No,LGPLv2+
+1603,libgcc,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1604,libgcrypt,No,LGPLv2+
+1605,libgcrypt-devel,Yes,LGPLv2+ and GPLv2+
+1606,libgdata,No,LGPLv2+
+1607,libgdata-devel,No,LGPLv2+
+1608,libgdither,No,GPLv2+
+1609,libgee,No,LGPLv2+
+1610,libgee06,No,LGPLv2+
+1611,libgepub,No,LGPLv2+
+1612,libgexiv2,No,GPLv2+
+1613,libgfortran,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1614,libgfortran4,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1615,libgfortran5,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1616,libglade2,No,LGPLv2+
+1617,libGLEW,No,BSD and MIT
+1618,libglvnd,No,MIT
+1619,libglvnd-core-devel,No,MIT
+1620,libglvnd-devel,No,MIT
+1621,libglvnd-egl,No,MIT
+1622,libglvnd-gles,No,MIT
+1623,libglvnd-glx,No,MIT
+1624,libglvnd-opengl,No,MIT
+1625,libgnat,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1626,libgnat-devel,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1627,libgnome,No,LGPLv2+
+1628,libgnome-keyring,No,GPLv2+ and LGPLv2+
+1629,libgnome-keyring-devel,Yes,LGPLv2+
+1630,libgnomecanvas,No,LGPLv2+
+1631,libgnomekbd,No,LGPLv2+
+1632,libgnomeui,No,LGPLv2+
+1633,libgomp,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1634,libgovirt,No,LGPLv2+
+1635,libgpg-error,No,LGPLv2+
+1636,libgpg-error-devel,No,LGPLv2+
+1637,libgphoto2,No,GPLv2+ and GPLv2
+1638,libgpod,No,LGPLv2+
+1639,libgs,No,AGPLv3+
+1640,libgsf,No,LGPLv2
+1641,libgtop2,No,GPLv2+
+1642,libgudev1,No,LGPLv2+
+1643,libgudev1-devel,Yes,LGPLv2+
+1644,libguestfs,Yes,LGPLv2+
+1645,libguestfs-inspect-icons,Yes,LGPLv2+
+1646,libguestfs-java,Yes,LGPLv2+
+1647,libguestfs-tools,Yes,GPLv2+
+1648,libguestfs-tools-c,Yes,GPLv2+
+1649,libguestfs-xfs,No,LGPLv2+
+1650,libgusb,No,LGPLv2+
+1651,libgweather,No,GPLv2+
+1652,libgweather-devel,No,GPLv2+
+1653,libgxps,No,LGPLv2+
+1654,libhangul,No,LGPLv2+
+1655,libhbaapi,No,SNIA
+1656,libhbalinux,No,LGPLv2
+1657,libhif,No,LGPLv2+
+1658,libhugetlbfs,Yes,LGPLv2+
+1659,libhugetlbfs-devel,Yes,LGPLv2+
+1660,libhugetlbfs-utils,Yes,LGPLv2+
+1661,libibcommon,Yes,GPLv2 or BSD
+1662,libibmad,Yes,GPLv2 or BSD
+1663,libibumad,Yes,GPLv2 or BSD
+1664,libibverbs,Yes,GPLv2 or BSD
+1665,libibverbs-utils,Yes,GPLv2 or BSD
+1666,libical,No,LGPLv2 or MPLv2.0
+1667,libical-devel,No,LGPLv2 or MPLv2.0
+1668,libICE,No,MIT
+1669,libICE-devel,Yes,MIT
+1670,libicu,No,MIT and UCD and Public Domain
+1671,libicu-devel,No,MIT and UCD and Public Domain
+1672,libIDL,No,LGPLv2+
+1673,libidn,No,LGPLv2+ and GPLv3+ and GFDL
+1674,libiec61883,No,LGPLv2+
+1675,libieee1284,No,GPLv2+
+1676,libieee1284-devel,No,GPLv2+
+1677,libimobiledevice,No,LGPLv2+
+1678,libindicator-gtk3,No,GPLv3
+1679,libini_config,No,LGPLv3+
+1680,libinput,No,MIT
+1681,libinvm-cim,No,BSD
+1682,libinvm-cli,No,BSD
+1683,libinvm-i18n,No,BSD
+1684,libiodbc,No,LGPLv2 or BSD
+1685,libipa_hbac,No,LGPLv3+
+1686,libiptcdata,No,LGPLv2+
+1687,libiscsi,No,LGPLv2+
+1688,libisofs,No,GPLv2+ and LGPLv2+
+1689,libitm,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1690,libitm-devel,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1691,libjose,No,ASL 2.0
+1692,libjpeg-turbo,Yes,IJG
+1693,libjpeg-turbo-devel,Yes,IJG
+1694,libkadm5,No,MIT
+1695,libkcddb,No,LGPLv2+ and GPLv2+
+1696,libkdcraw,No,GPLv2+ and LGPLv2 and GPLv3+
+1697,libkdcraw-devel,No,GPLv2+ and LGPLv2 and GPLv3+
+1698,libkexiv2,No,GPLv2+
+1699,libkexiv2-devel,No,GPLv2+
+1700,libkipi,No,GPLv2+
+1701,libkipi-devel,No,GPLv2+
+1702,libkkc,No,GPLv3+
+1703,libkkc-common,No,GPLv3+
+1704,libkkc-data,No,GPLv3+
+1705,libksane,No,LGPLv2+
+1706,libksane-devel,No,LGPLv2+
+1707,libkscreen,No,GPLv2+
+1708,libkworkspace,No,GPLv2
+1709,liblangtag,No,(LGPLv3+ or MPLv2.0) and UCD
+1710,liblayout,No,LGPLv2+ and UCD
+1711,libldb,No,LGPLv3+
+1712,libloader,No,LGPLv2
+1713,liblockfile,No,GPLv2+ and LGPLv2+
+1714,liblouis,No,LGPLv3+
+1715,liblouis-python,No,LGPLv3+
+1716,libluksmeta,No,LGPLv2+
+1717,libmatchbox,No,LGPLv2+
+1718,libmaxminddb,No,ASL 2.0 and BSD
+1719,libmbim,No,LGPLv2+
+1720,libmbim-utils,No,GPLv2+
+1721,libmediaart,No,LGPLv2+
+1722,libmemcached,Yes,BSD
+1723,libmicrohttpd,No,LGPLv2+
+1724,libmng,No,zlib
+1725,libmng-devel,No,zlib
+1726,libmnl,No,LGPLv2+
+1727,libmodman,No,LGPLv2+
+1728,libmount,No,LGPLv2+
+1729,libmpc,No,LGPLv3+ and GFDL
+1730,libmpcdec,No,BSD
+1731,libmsn,No,GPLv2
+1732,libmspack,No,LGPLv2
+1733,libmspub,No,MPLv2.0
+1734,libmtp,No,LGPLv2+
+1735,libmusicbrainz,No,LGPLv2+
+1736,libmusicbrainz5,No,LGPLv2
+1737,libmwaw,No,LGPLv2+ or MPLv2.0
+1738,libmx,No,LGPLv2
+1739,libndp,No,LGPLv2+
+1740,libnet,No,BSD
+1741,libnetfilter_conntrack,No,GPLv2+
+1742,libnetfilter_cthelper,No,GPLv2
+1743,libnetfilter_cttimeout,No,GPLv2+
+1744,libnetfilter_queue,No,GPLv2
+1745,libnfnetlink,No,GPLv2+
+1746,libnfsidmap,No,BSD
+1747,libnftnl,No,GPLv2+
+1748,libnice,No,LGPLv2 and MPLv1.1
+1749,libnl,No,LGPLv2
+1750,libnl-devel,Yes,LGPLv2
+1751,libnl3,No,LGPLv2
+1752,libnl3-cli,No,LGPLv2
+1753,libnm-gtk,No,GPLv2+
+1754,libnma,No,GPLv2+
+1755,libnotify,No,LGPLv2+
+1756,libnotify-devel,Yes,LGPLv2+
+1757,libntlm,No,LGPLv2+
+1758,liboauth,No,MIT
+1759,liboauth-devel,No,MIT
+1760,libobjc,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1761,libodfgen,No,LGPLv2+ or MPLv2.0
+1762,libofa,No,GPLv2
+1763,libogg,No,BSD
+1764,libopenraw,No,LGPLv3+
+1765,liborcus,No,MPLv2.0
+1766,libosinfo,No,LGPLv2+
+1767,libotf,No,LGPLv2+
+1768,libpagemaker,No,MPLv2.0
+1769,libpaper,No,GPLv2
+1770,libpath_utils,No,LGPLv3+
+1771,libpcap,No,BSD with advertising
+1772,libpciaccess,No,MIT
+1773,libpeas,No,LGPLv2+
+1774,libpeas-gtk,No,LGPLv2+
+1775,libpeas-loader-python,No,LGPLv2+
+1776,libpfm,Yes,MIT
+1777,libpfm-devel,Yes,MIT
+1778,libpinyin,No,GPLv2+
+1779,libpinyin-data,No,GPLv2+
+1780,libpipeline,No,GPLv3+
+1781,libplist,No,LGPLv2+
+1782,libpmem,No,BSD
+1783,libpmemblk,No,BSD
+1784,libpmemlog,No,BSD
+1785,libpmemobj,No,BSD
+1786,libpmempool,No,BSD
+1787,libpng,No,zlib
+1788,libpng-devel,Yes,zlib
+1789,libpng12,Yes,zlib
+1790,libproxy,No,LGPLv2+
+1791,libproxy-mozjs,Yes,LGPLv2+
+1792,libpsm2,No,GPLv2 or BSD
+1793,libpurple,No,GPLv2+ and GPLv2 and MIT
+1794,libpwquality,No,BSD or GPLv2+
+1795,libqb,No,LGPLv2+
+1796,libqmi,No,LGPLv2+
+1797,libqmi-utils,No,GPLv2+
+1798,libquadmath,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1799,libquadmath-devel,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1800,libquvi,No,LGPLv2+
+1801,libquvi-scripts,No,LGPLv2+
+1802,librabbitmq,No,MIT
+1803,librados2,No,LGPL-2.0
+1804,LibRaw,No,BSD and (CDDL or LGPLv2)
+1805,libraw1394,No,LGPLv2+
+1806,librbd1,No,LGPL-2.0
+1807,librdkafka,No,BSD
+1808,librdmacm,Yes,GPLv2 or BSD
+1809,librdmacm-utils,Yes,GPLv2 or BSD
+1810,libref_array,No,LGPLv3+
+1811,librelp,No,GPLv3+
+1812,libreoffice-base,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1813,libreoffice-calc,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1814,libreoffice-core,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1815,libreoffice-data,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1816,libreoffice-draw,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1817,libreoffice-emailmerge,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1818,libreoffice-filters,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1819,libreoffice-graphicfilter,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1820,libreoffice-gtk2,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1821,libreoffice-gtk3,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1822,libreoffice-impress,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1823,libreoffice-langpack-en,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1824,libreoffice-math,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1825,libreoffice-ogltrans,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1826,libreoffice-opensymbol-fonts,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1827,libreoffice-pdfimport,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1828,libreoffice-pyuno,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1829,libreoffice-ure,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1830,libreoffice-ure-common,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1831,libreoffice-voikko,No,GPLv3+
+1832,libreoffice-wiki-publisher,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1833,libreoffice-writer,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1834,libreoffice-x11,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1835,libreoffice-xsltfilter,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1836,libreofficekit,No,MPLv2.0
+1837,librepo,No,LGPLv2+
+1838,libreport,No,GPLv2+
+1839,libreport-anaconda,No,GPLv2+
+1840,libreport-cli,Yes,GPLv2+
+1841,libreport-filesystem,No,GPLv2+
+1842,libreport-gtk,Yes,GPLv2+
+1843,libreport-plugin-bugzilla,No,GPLv2+
+1844,libreport-plugin-mailx,Yes,GPLv2+
+1845,libreport-plugin-reportuploader,No,GPLv2+
+1846,libreport-plugin-rhtsupport,No,GPLv2+
+1847,libreport-plugin-ureport,No,GPLv2+
+1848,libreport-python,No,GPLv2+
+1849,libreport-rhel,No,GPLv2+
+1850,libreport-rhel-anaconda-bugzilla,No,GPLv2+
+1851,libreport-web,No,GPLv2+
+1852,librepository,No,LGPLv2
+1853,libreswan,Yes,GPLv2
+1854,librevenge,No,(LGPLv2+ or MPLv2.0) and BSD
+1855,librpmem,No,BSD
+1856,librsvg2,Yes,LGPLv2+
+1857,librsvg2-devel,Yes,LGPLv2+
+1858,librsvg2-tools,No,LGPLv2+
+1859,libsamplerate,No,GPLv2+
+1860,libsane-hpaio,Yes,GPLv2+
+1861,libseccomp,No,LGPLv2
+1862,libsecret,No,LGPLv2+
+1863,libsecret-devel,No,LGPLv2+
+1864,libselinux,No,Public Domain
+1865,libselinux-devel,Yes,Public Domain
+1866,libselinux-python,No,Public Domain
+1867,libselinux-python3,No,Public Domain
+1868,libselinux-ruby,No,Public Domain
+1869,libselinux-utils,No,Public Domain
+1870,libsemanage,No,LGPLv2+
+1871,libsemanage-python,No,LGPLv2+
+1872,libsepol,No,LGPLv2+
+1873,libsepol-devel,No,LGPLv2+
+1874,libserializer,No,LGPLv2+
+1875,libsexy,No,LGPLv2+
+1876,libshout,No,LGPLv2+
+1877,libsigc++20,No,LGPLv2+
+1878,libSM,No,MIT
+1879,libSM-devel,Yes,MIT
+1880,libsmartcols,No,LGPLv2+
+1881,libsmbclient,No,GPLv3+ and LGPLv3+
+1882,libsmbios,No,GPLv2+ or OSL 2.1
+1883,libsmi,No,GPLv2+ and BSD
+1884,libsndfile,No,LGPLv2+ and GPLv2+ and BSD
+1885,libsolv,No,BSD
+1886,libsoup,No,LGPLv2
+1887,libsoup-devel,Yes,LGPLv2
+1888,libspectre,No,GPLv2+
+1889,libspiro,No,GPLv2+
+1890,libsrtp,No,BSD
+1891,libss,No,MIT
+1892,libssh2,No,BSD
+1893,libsss_autofs,No,LGPLv3+
+1894,libsss_certmap,No,LGPLv3+
+1895,libsss_idmap,No,LGPLv3+
+1896,libsss_nss_idmap,No,LGPLv3+
+1897,libsss_simpleifp,No,GPLv3+
+1898,libsss_sudo,No,LGPLv3+
+1899,libstaroffice,No,MPLv2.0 or LGPLv2+
+1900,libstdc++,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1901,libstdc++-devel,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1902,libstoragemgmt,Yes,LGPLv2+
+1903,libstoragemgmt-arcconf-plugin,Yes,LGPLv2+
+1904,libstoragemgmt-hpsa-plugin,Yes,LGPLv2+
+1905,libstoragemgmt-local-plugin,Yes,LGPLv2+
+1906,libstoragemgmt-megaraid-plugin,Yes,LGPLv2+
+1907,libstoragemgmt-nfs-plugin,Yes,LGPLv2+
+1908,libstoragemgmt-nfs-plugin-clibs,Yes,LGPLv2+
+1909,libstoragemgmt-nstor-plugin,Yes,LGPLv2+
+1910,libstoragemgmt-python,No,LGPLv2+
+1911,libstoragemgmt-python-clibs,No,LGPLv2+
+1912,libstoragemgmt-smis-plugin,Yes,LGPLv2+
+1913,libstoragemgmt-targetd-plugin,Yes,LGPLv2+
+1914,libstoragemgmt-udev,Yes,LGPLv2+
+1915,libsysfs,Yes,LGPLv2+
+1916,libtalloc,No,LGPLv3+
+1917,libtar,No,MIT
+1918,libtasn1,No,GPLv3+ and LGPLv2+
+1919,libtasn1-devel,No,GPLv3+ and LGPLv2+
+1920,libtdb,No,LGPLv3+
+1921,libteam,No,LGPLv2+
+1922,libtevent,No,LGPLv3+
+1923,libthai,No,LGPLv2+
+1924,libtheora,No,BSD
+1925,libtiff,No,libtiff
+1926,libtiff-devel,Yes,libtiff
+1927,libtimezonemap,No,GPLv3
+1928,libtirpc,No,SISSL and BSD
+1929,libtool,Yes,GPLv2+ and LGPLv2+ and GFDL
+1930,libtool-ltdl,No,LGPLv2+
+1931,libtranslit,No,GPLv3+
+1932,libtranslit-m17n,No,GPLv3+
+1933,libudisks2,No,LGPLv2+
+1934,libunistring,No,LGPLv3+
+1935,libunwind,No,BSD
+1936,libusal,No,GPLv2
+1937,libusb,No,LGPLv2+
+1938,libusbmuxd,No,LGPLv2+
+1939,libusbx,No,LGPLv2+
+1940,libusbx-devel,Yes,LGPLv2+
+1941,libuser,No,LGPLv2+
+1942,libuser-python,No,LGPLv2+
+1943,libusnic_verbs,Yes,GPLv2 or BSD
+1944,libutempter,No,LGPLv2+
+1945,libuuid,No,BSD
+1946,libuuid-devel,Yes,BSD
+1947,libv4l,No,LGPLv2+ and GPLv2
+1948,libva,No,MIT
+1949,libva-devel,Yes,MIT
+1950,libvdpau,No,MIT
+1951,libverto,No,MIT
+1952,libverto-devel,No,MIT
+1953,libverto-libevent,No,MIT
+1954,libverto-tevent,No,MIT
+1955,libvirt,Yes,LGPLv2+
+1956,libvirt-bash-completion,No,LGPLv2+
+1957,libvirt-cim,Yes,LGPLv2+
+1958,libvirt-client,Yes,LGPLv2+
+1959,libvirt-daemon,No,LGPLv2+
+1960,libvirt-daemon-config-network,No,LGPLv2+
+1961,libvirt-daemon-config-nwfilter,No,LGPLv2+
+1962,libvirt-daemon-driver-interface,No,LGPLv2+
+1963,libvirt-daemon-driver-lxc,No,LGPLv2+
+1964,libvirt-daemon-driver-network,No,LGPLv2+
+1965,libvirt-daemon-driver-nodedev,No,LGPLv2+
+1966,libvirt-daemon-driver-nwfilter,No,LGPLv2+
+1967,libvirt-daemon-driver-qemu,No,LGPLv2+
+1968,libvirt-daemon-driver-secret,No,LGPLv2+
+1969,libvirt-daemon-driver-storage,No,LGPLv2+
+1970,libvirt-daemon-driver-storage-core,No,LGPLv2+
+1971,libvirt-daemon-driver-storage-disk,No,LGPLv2+
+1972,libvirt-daemon-driver-storage-gluster,No,LGPLv2+
+1973,libvirt-daemon-driver-storage-iscsi,No,LGPLv2+
+1974,libvirt-daemon-driver-storage-logical,No,LGPLv2+
+1975,libvirt-daemon-driver-storage-mpath,No,LGPLv2+
+1976,libvirt-daemon-driver-storage-rbd,No,LGPLv2+
+1977,libvirt-daemon-driver-storage-scsi,No,LGPLv2+
+1978,libvirt-daemon-kvm,No,LGPLv2+
+1979,libvirt-devel,Yes,LGPLv2+
+1980,libvirt-gconfig,No,LGPLv2+
+1981,libvirt-glib,No,LGPLv2+
+1982,libvirt-gobject,No,LGPLv2+
+1983,libvirt-java,Yes,MIT
+1984,libvirt-java-devel,Yes,MIT
+1985,libvirt-libs,No,LGPLv2+
+1986,libvirt-python,No,LGPLv2+
+1987,libvirt-snmp,Yes,GPLv2+
+1988,libvisio,No,MPLv2.0
+1989,libvisual,No,LGPLv2+
+1990,libvma,Yes,GPLv2 or BSD
+1991,libvmem,No,BSD
+1992,libvmmalloc,No,BSD
+1993,libvncserver,No,GPLv2+
+1994,libvoikko,No,GPLv2+
+1995,libvorbis,No,BSD
+1996,libvpx,No,BSD
+1997,libwacom,No,MIT
+1998,libwacom-data,No,MIT
+1999,libwayland-client,No,MIT
+2000,libwayland-cursor,No,MIT
+2001,libwayland-egl,No,MIT
+2002,libwayland-server,No,MIT
+2003,libwbclient,No,GPLv3+ and LGPLv3+
+2004,libwebp,No,BSD
+2005,libwinpr,No,ASL 2.0
+2006,libwmf,No,LGPLv2+ and GPLv2+ and GPL+
+2007,libwmf-lite,No,LGPLv2+ and GPLv2+ and GPL+
+2008,libwnck3,No,LGPLv2+
+2009,libwpd,No,LGPLv2+ or MPLv2.0
+2010,libwpg,No,LGPLv2+ or MPLv2.0
+2011,libwps,No,LGPLv2+ or MPLv2.0
+2012,libwsman1,No,BSD
+2013,libwvstreams,No,LGPLv2+
+2014,libX11,No,MIT
+2015,libX11-common,No,MIT
+2016,libX11-devel,Yes,MIT
+2017,libXau,No,MIT
+2018,libXau-devel,Yes,MIT
+2019,libXaw,No,MIT
+2020,libXaw-devel,Yes,MIT
+2021,libxcb,No,MIT
+2022,libxcb-devel,No,MIT
+2023,libXcomposite,No,MIT
+2024,libXcomposite-devel,No,MIT
+2025,libXcursor,No,MIT
+2026,libXcursor-devel,No,MIT
+2027,libXdamage,No,MIT
+2028,libXdamage-devel,No,MIT
+2029,libXdmcp,No,MIT
+2030,libXevie,No,MIT
+2031,libXext,No,MIT
+2032,libXext-devel,Yes,MIT
+2033,libXfixes,No,MIT
+2034,libXfixes-devel,No,MIT
+2035,libXfont,No,MIT
+2036,libXfont2,No,MIT
+2037,libXft,No,MIT
+2038,libXft-devel,Yes,MIT
+2039,libXi,No,MIT
+2040,libXi-devel,Yes,MIT
+2041,libXinerama,No,MIT
+2042,libXinerama-devel,Yes,MIT
+2043,libxkbcommon,No,MIT
+2044,libxkbcommon-devel,No,MIT
+2045,libxkbcommon-x11,No,MIT
+2046,libxkbfile,No,MIT
+2047,libxkbfile-devel,No,MIT
+2048,libxklavier,No,LGPLv2+
+2049,libxml2,No,MIT
+2050,libxml2-devel,Yes,MIT
+2051,libxml2-python,No,MIT
+2052,libXmu,Yes,MIT
+2053,libXmu-devel,Yes,MIT
+2054,libXp,Yes,MIT
+2055,libXp-devel,No,MIT
+2056,libXpm,No,MIT
+2057,libXpm-devel,Yes,MIT
+2058,libXrandr,No,MIT
+2059,libXrandr-devel,Yes,MIT
+2060,libXrender,No,MIT
+2061,libXrender-devel,Yes,MIT
+2062,libXres,No,MIT
+2063,libXScrnSaver,No,MIT
+2064,libXScrnSaver-devel,No,MIT
+2065,libxshmfence,No,MIT
+2066,libxshmfence-devel,No,MIT
+2067,libxslt,No,MIT
+2068,libxslt-devel,Yes,MIT
+2069,libXt,No,MIT
+2070,libXt-devel,Yes,MIT
+2071,libXtst,No,MIT
+2072,libXtst-devel,Yes,MIT
+2073,libXv,No,MIT
+2074,libXv-devel,No,MIT
+2075,libXvMC,No,MIT
+2076,libXxf86dga,No,MIT
+2077,libXxf86misc,No,MIT
+2078,libXxf86misc-devel,No,MIT
+2079,libXxf86vm,No,MIT
+2080,libXxf86vm-devel,No,MIT
+2081,libyami,Yes,ASL 2.0
+2082,libyaml,No,MIT
+2083,libzapojit,No,LGPLv2+
+2084,libzip,No,BSD
+2085,libzmf,No,MPLv2.0
+2086,linux-firmware,Yes,"GPL+ and GPLv2+ and MIT and Redistributable, no modification permitted"
+2087,linuxconsoletools,No,GPLv2+
+2088,linuxptp,Yes,GPLv2+
+2089,lklug-fonts,Yes,GPLv2
+2090,lksctp-tools,Yes,GPLv2 and GPLv2+ and LGPLv2 and MIT
+2091,lldpad,Yes,GPLv2
+2092,llvm-private,No,NCSA
+2093,lm_sensors,Yes,LGPLv2+ and GPLv3+ and GPLv2+ and Verbatim and Public Domain
+2094,lm_sensors-devel,No,LGPLv2+ and GPLv3+ and GPLv2+ and Verbatim and Public Domain
+2095,lm_sensors-libs,No,LGPLv2+ and GPLv3+ and GPLv2+ and Verbatim and Public Domain
+2096,lockdev,No,LGPLv2
+2097,log4cxx,No,ASL 2.0
+2098,log4j,No,ASL 2.0
+2099,logrotate,Yes,GPL+
+2100,logwatch,Yes,MIT
+2101,lohit-assamese-fonts,Yes,OFL
+2102,lohit-bengali-fonts,Yes,OFL
+2103,lohit-devanagari-fonts,Yes,OFL
+2104,lohit-gujarati-fonts,Yes,OFL
+2105,lohit-kannada-fonts,Yes,OFL
+2106,lohit-malayalam-fonts,Yes,OFL
+2107,lohit-marathi-fonts,Yes,OFL
+2108,lohit-nepali-fonts,Yes,OFL
+2109,lohit-oriya-fonts,Yes,OFL
+2110,lohit-punjabi-fonts,Yes,OFL
+2111,lohit-tamil-fonts,Yes,OFL
+2112,lohit-telugu-fonts,Yes,OFL
+2113,lorax,No,GPLv2+
+2114,lpsolve,No,LGPLv2+
+2115,lrzsz,Yes,GPLv2+
+2116,lshw,Yes,GPLv2
+2117,lsof,Yes,zlib and Sendmail and LGPLv2+
+2118,lsscsi,Yes,GPLv2+
+2119,ltrace,Yes,GPLv2+
+2120,lua,No,MIT
+2121,luksmeta,Yes,LGPLv2+
+2122,lvm2,Yes,GPLv2
+2123,lvm2-libs,No,LGPLv2
+2124,lvm2-python-boom,Yes,GPLv2
+2125,lvm2-python-libs,No,LGPLv2
+2126,lz4,Yes,GPLv2+ and BSD
+2127,lzo,No,GPLv2+
+2128,lzo-minilzo,No,GPLv2+
+2129,lzop,No,GPLv2+
+2130,m17n-contrib,Yes,LGPLv2+
+2131,m17n-db,Yes,LGPLv2+
+2132,m17n-lib,No,LGPLv2+
+2133,m2crypto,No,MIT
+2134,m4,No,GPLv3+
+2135,madan-fonts,Yes,GPL+
+2136,mailcap,No,Public Domain and MIT
+2137,mailman,Yes,GPLv2+
+2138,mailx,No,BSD with advertising and MPLv1.1
+2139,make,Yes,GPLv2+
+2140,malaga-suomi-voikko,No,GPLv2+
+2141,mallard-rng,No,MIT
+2142,man-db,Yes,GPLv2+ and GPLv3+
+2143,man-pages,Yes,GPL+ and GPLv2+ and BSD and MIT and Copyright only and IEEE
+2144,man-pages-cs,No,GPLv2 and GPLv3 and BSD
+2145,man-pages-es,No,GPL+ and GPLv2+ and LDP and IEEE
+2146,man-pages-es-extra,No,GPL+ and GPLv2+ and LDP and IEEE
+2147,man-pages-fr,No,GPL+ and GPLv2 and GPLv2+ and LGPLv2+ and GPLv3+ and ImageMagick and ISC and Public Domain and BSD and MIT and ASL 2.0 and and UCD and IBM and TCL and xinetd
+2148,man-pages-it,No,GPL+ and GPLv2 and GPLv2+ and LGPLV2+ and GPLv3+ and BSD and MIT and Copyright only and IEEE
+2149,man-pages-ja,No,BSD and GFDL and GPL+ and GPLv2+ and MIT and Copyright only and IEEE and ISC and GPLv2 and LGPLv2 and LGPLv2+ with exceptions and AML and Public Domain and LGPLv2+ and Artistic clarified and (GPLv2+ or Artistic) and GPLv3+ and Sendmail and BSD with advertising and GPLv2 with exceptions and xinetd
+2150,man-pages-ko,No,Copyright only
+2151,man-pages-overrides,Yes,GPL+ and GPLv2+ and BSD and MIT and Copyright only and IEEE
+2152,man-pages-pl,No,GPL+ and BSD and MIT and GFDL
+2153,man-pages-ru,No,GPL+ and BSD and MIT and GFDL
+2154,man-pages-zh-CN,No,GFDL
+2155,mariadb,Yes,GPLv2 with exceptions and LGPLv2 and BSD
+2156,mariadb-bench,Yes,GPLv2 with exceptions and LGPLv2 and BSD
+2157,mariadb-devel,Yes,GPLv2 with exceptions and LGPLv2 and BSD
+2158,mariadb-libs,No,GPLv2 with exceptions and LGPLv2 and BSD
+2159,mariadb-server,Yes,GPLv2 with exceptions and LGPLv2 and BSD
+2160,marisa,No,BSD or LGPL
+2161,matchbox-window-manager,No,GPLv2+
+2162,mc,Yes,GPLv3+
+2163,mcelog,Yes,GPLv2
+2164,mcstrans,No,GPL+
+2165,mdadm,Yes,GPLv2+
+2166,meanwhile,No,LGPLv2+
+2167,media-player-info,No,BSD
+2168,memcached,Yes,BSD
+2169,memkind,No,BSD
+2170,memstomp,Yes,LGPLv3+ and GPLv2+
+2171,memtest86+,Yes,GPLv2
+2172,mercurial,Yes,GPLv2+
+2173,mesa-dri-drivers,Yes,MIT
+2174,mesa-filesystem,No,MIT
+2175,mesa-khr-devel,No,MIT
+2176,mesa-libEGL,No,MIT
+2177,mesa-libEGL-devel,No,MIT
+2178,mesa-libgbm,No,MIT
+2179,mesa-libGL,No,MIT
+2180,mesa-libGL-devel,Yes,MIT
+2181,mesa-libglapi,No,MIT
+2182,mesa-libGLES,Yes,MIT
+2183,mesa-libGLU,No,MIT
+2184,mesa-libGLU-devel,Yes,MIT
+2185,mesa-libGLw,No,MIT
+2186,mesa-libGLw-devel,Yes,MIT
+2187,mesa-libxatracker,No,MIT
+2188,mesa-private-llvm,No,NCSA
+2189,metacity,Yes,GPLv2+
+2190,mgetty,Yes,GPLv2+
+2191,microcode_ctl,Yes,"GPLv2+ and Redistributable, no modification permitted"
+2192,migrationtools,Yes,BSD
+2193,minicom,Yes,GPL+ and GPLv2+ and GPLv2 and LGPLv2+ Public Domain and Copyright only
+2194,mipv6-daemon,Yes,GPLv2
+2195,mkbootdisk,Yes,GPLv2+
+2196,mksh,Yes,MirOS and ISC and BSD
+2197,mlocate,Yes,GPLv2
+2198,mobile-broadband-provider-info,No,Public Domain
+2199,mod_auth_gssapi,No,MIT
+2200,mod_auth_kerb,No,BSD and MIT and ASL 2.0
+2201,mod_auth_mellon,Yes,GPLv2+
+2202,mod_auth_mellon-diagnostics,No,GPLv2+
+2203,mod_auth_openidc,Yes,ASL 2.0
+2204,mod_dav_svn,Yes,ASL 2.0
+2205,mod_fcgid,Yes,ASL 2.0
+2206,mod_lookup_identity,No,ASL 2.0
+2207,mod_nss,No,ASL 2.0
+2208,mod_revocator,No,ASL 2.0
+2209,mod_security,Yes,ASL 2.0
+2210,mod_security_crs,Yes,ASL 2.0
+2211,mod_session,Yes,ASL 2.0
+2212,mod_ssl,Yes,ASL 2.0
+2213,mod_wsgi,Yes,ASL 2.0
+2214,ModemManager,Yes,GPLv2+
+2215,ModemManager-glib,No,GPLv2+
+2216,mokutil,No,BSD
+2217,motif,Yes,LGPLv2+
+2218,motif-devel,Yes,LGPLv2+
+2219,mousetweaks,Yes,GPLv3 and GFDL
+2220,mozilla-filesystem,No,MPLv1.1
+2221,mozjs17,No,GPLv2+ or LGPLv2+ or MPLv1.1
+2222,mozjs24,No,MPLv2.0
+2223,mozjs52,No,MPLv2.0 and MPLv1.1 and BSD and GPLv2+ and GPLv3+ and LGPLv2.1 and LGPLv2.1+ and AFL and ASL 2.0
+2224,mpfr,No,LGPLv3+ and GPLv3+ and GFDL
+2225,mpfr-devel,Yes,LGPLv3+ and GPLv3+ and GFDL
+2226,mpg123-libs,No,LGPLv2+
+2227,mpich-3.0,No,MIT
+2228,mpich-3.0-devel,Yes,MIT
+2229,mpich-3.2,No,MIT
+2230,mpich-3.2-devel,Yes,MIT
+2231,mpitests-mpich,Yes,CPL and BSD
+2232,mpitests-mpich32,Yes,CPL and BSD
+2233,mpitests-mvapich2,Yes,CPL and BSD
+2234,mpitests-mvapich2-psm,Yes,CPL and BSD
+2235,mpitests-mvapich222,Yes,CPL and BSD
+2236,mpitests-mvapich222-psm,Yes,CPL and BSD
+2237,mpitests-mvapich222-psm2,Yes,CPL and BSD
+2238,mpitests-mvapich23,Yes,CPL and BSD
+2239,mpitests-mvapich23-psm,Yes,CPL and BSD
+2240,mpitests-mvapich23-psm2,Yes,CPL and BSD
+2241,mpitests-openmpi,Yes,CPL and BSD
+2242,mpitests-openmpi3,Yes,CPL and BSD
+2243,mrtg,Yes,GPLv2+
+2244,mstflint,Yes,GPLv2+ or BSD
+2245,msv-msv,No,BSD and ASL 1.1 and ASL 2.0 and Public Domain
+2246,msv-xsdlib,No,BSD and ASL 1.1
+2247,mtdev,No,MIT
+2248,mtools,Yes,GPLv3+
+2249,mtr,Yes,GPLv2+
+2250,mutt,Yes,GPLv2+ and Public Domain
+2251,mutter,No,GPLv2+
+2252,mvapich2-2.0,No,BSD and MIT
+2253,mvapich2-2.0-devel,Yes,BSD and MIT
+2254,mvapich2-2.0-doc,Yes,BSD and MIT
+2255,mvapich2-2.0-psm,No,BSD and MIT
+2256,mvapich2-2.0-psm-devel,Yes,BSD and MIT
+2257,mvapich2-2.2,No,BSD and MIT
+2258,mvapich2-2.2-devel,Yes,BSD and MIT
+2259,mvapich2-2.2-doc,Yes,BSD and MIT
+2260,mvapich2-2.2-psm,No,BSD and MIT
+2261,mvapich2-2.2-psm-devel,Yes,BSD and MIT
+2262,mvapich2-2.2-psm2,No,BSD and MIT
+2263,mvapich2-2.2-psm2-devel,Yes,BSD and MIT
+2264,mvapich23,No,BSD and MIT
+2265,mvapich23-devel,Yes,BSD and MIT
+2266,mvapich23-doc,Yes,BSD and MIT
+2267,mvapich23-psm,No,BSD and MIT
+2268,mvapich23-psm-devel,Yes,BSD and MIT
+2269,mvapich23-psm2,No,BSD and MIT
+2270,mvapich23-psm2-devel,Yes,BSD and MIT
+2271,mysql-connector-java,Yes,GPLv2 with exceptions
+2272,mysql-connector-odbc,Yes,GPLv2 with exceptions
+2273,MySQL-python,Yes,GPLv2+
+2274,mythes,No,BSD and MIT
+2275,mythes-bg,No,GPLv2+ or LGPLv2+ or MPLv1.1
+2276,mythes-ca,No,GPL+
+2277,mythes-cs,No,MIT
+2278,mythes-da,No,GPLv2 or LGPLv2 or MPLv1.1
+2279,mythes-de,No,LGPLv2+
+2280,mythes-el,No,GPLv2+
+2281,mythes-en,No,MIT and Public Domain and (GPL+ or Artistic)
+2282,mythes-es,No,LGPLv2+
+2283,mythes-fr,No,LGPLv2+
+2284,mythes-ga,No,GFDL
+2285,mythes-hu,No,GPLv2+ and (GPLv2+ or LGPLv2+ or MPLv1.1) and GPLv2 and (GPL+ or LGPLv2+ or MPLv1.1)
+2286,mythes-it,No,AGPLv3
+2287,mythes-lb,No,EUPL 1.1
+2288,mythes-lv,No,LGPLv2+
+2289,mythes-mi,No,Public Domain
+2290,mythes-nb,No,GPL+
+2291,mythes-ne,No,LGPLv2
+2292,mythes-nl,No,BSD or CC-BY
+2293,mythes-nn,No,GPL+
+2294,mythes-pl,No,LGPLv2
+2295,mythes-pt,No,GPLv2+
+2296,mythes-ro,No,GPLv2+
+2297,mythes-ru,No,LGPLv2+
+2298,mythes-sk,No,MIT
+2299,mythes-sl,No,LGPLv2+
+2300,mythes-sv,No,MIT
+2301,mythes-uk,No,(GPLv2+ or LGPLv2+) and (GPLv2+ or LGPLv2+ or MPLv1.1) and GPLv2+
+2302,nafees-web-naskh-fonts,Yes,Bitstream Vera
+2303,nano,Yes,GPLv3+
+2304,nasm,Yes,BSD
+2305,nautilus,Yes,GPLv3+
+2306,nautilus-extensions,No,LGPLv2+
+2307,nautilus-sendto,Yes,GPLv2+
+2308,navilu-fonts,Yes,OFL
+2309,ncompress,Yes,Public Domain
+2310,ncurses,Yes,MIT
+2311,ncurses-base,No,MIT
+2312,ncurses-devel,Yes,MIT
+2313,ncurses-libs,No,MIT
+2314,ncurses-term,Yes,MIT
+2315,ndctl,No,GPLv2
+2316,ndctl-libs,No,LGPLv2
+2317,neon,No,LGPLv2+
+2318,nepomuk-core,No,LGPLv2 or LGPLv3
+2319,nepomuk-core-devel,No,LGPLv2 or LGPLv3
+2320,nepomuk-core-libs,No,LGPLv2 or LGPLv3
+2321,nepomuk-widgets,No,LGPLv2 or LGPLv3
+2322,net-snmp,Yes,BSD
+2323,net-snmp-agent-libs,No,BSD
+2324,net-snmp-devel,Yes,BSD
+2325,net-snmp-libs,No,BSD
+2326,net-snmp-utils,Yes,BSD
+2327,net-tools,Yes,GPLv2+
+2328,netcf-libs,No,LGPLv2+
+2329,netlabel_tools,Yes,GPLv2
+2330,netpbm,No,BSD and GPLv2 and IJG and MIT and Public Domain
+2331,netpbm-devel,No,BSD and GPLv2 and IJG and MIT and Public Domain
+2332,netpbm-progs,Yes,BSD and GPLv2 and IJG and MIT and Public Domain
+2333,netsniff-ng,Yes,GPLv2
+2334,nettle,No,LGPLv2+
+2335,nettle-devel,No,LGPLv2+
+2336,NetworkManager,Yes,GPLv2+
+2337,NetworkManager-adsl,Yes,GPLv2+
+2338,NetworkManager-bluetooth,Yes,GPLv2+
+2339,NetworkManager-glib,No,GPLv2+
+2340,NetworkManager-libnm,No,GPLv2+
+2341,NetworkManager-libreswan,No,GPLv2+
+2342,NetworkManager-libreswan-gnome,Yes,GPLv2+
+2343,NetworkManager-ppp,Yes,GPLv2+
+2344,NetworkManager-team,Yes,GPLv2+
+2345,NetworkManager-tui,Yes,GPLv2+
+2346,NetworkManager-wifi,Yes,GPLv2+
+2347,NetworkManager-wwan,Yes,GPLv2+
+2348,newt,No,LGPLv2
+2349,newt-python,No,LGPLv2
+2350,nfs-utils,Yes,MIT and GPLv2 and GPLv2+ and BSD
+2351,nfs4-acl-tools,Yes,BSD
+2352,nfsometer,Yes,GPLv2+
+2353,nfstest,Yes,GPLv2+
+2354,nftables,No,GPLv2
+2355,nhn-nanum-brush-fonts,Yes,OFL
+2356,nhn-nanum-fonts-common,No,OFL
+2357,nhn-nanum-gothic-fonts,Yes,OFL
+2358,nhn-nanum-myeongjo-fonts,Yes,OFL
+2359,nhn-nanum-pen-fonts,Yes,OFL
+2360,nm-connection-editor,Yes,GPLv2+
+2361,nmap,Yes,GPLv2 and LGPLv2+ and GPLv2+ and BSD
+2362,nmap-ncat,Yes,GPLv2 and LGPLv2+ and GPLv2+ and BSD
+2363,nscd,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+2364,nspr,No,MPLv2.0
+2365,nspr-devel,No,MPLv2.0
+2366,nss,No,MPLv2.0
+2367,nss-devel,Yes,MPLv2.0
+2368,nss-pam-ldapd,Yes,LGPLv2+
+2369,nss-pem,No,MPLv1.1
+2370,nss-softokn,No,MPLv2.0
+2371,nss-softokn-devel,No,MPLv2.0
+2372,nss-softokn-freebl,No,MPLv2.0
+2373,nss-softokn-freebl-devel,No,MPLv2.0
+2374,nss-sysinit,No,MPLv2.0
+2375,nss-tools,No,MPLv2.0
+2376,nss-util,No,MPLv2.0
+2377,nss-util-devel,No,MPLv2.0
+2378,nss_compat_ossl,No,MIT
+2379,ntp,Yes,(MIT and BSD and BSD with advertising) and GPLv2
+2380,ntpdate,Yes,(MIT and BSD and BSD with advertising) and GPLv2
+2381,ntsysv,Yes,GPLv2
+2382,numactl,Yes,GPLv2
+2383,numactl-devel,Yes,LGPLv2 and GPLv2
+2384,numactl-libs,No,LGPLv2 and GPLv2
+2385,numad,Yes,LGPLv2
+2386,numpy,Yes,BSD and Python
+2387,numpy-f2py,Yes,BSD and Python
+2388,nuxwdog,No,LGPLv2 and (GPL+ or Artistic)
+2389,nuxwdog-client-java,No,LGPLv2 and (GPL+ or Artistic)
+2390,nvme-cli,Yes,GPLv2+
+2391,nvmetcli,Yes,Apache License 2.0
+2392,obex-data-server,No,GPLv2+
+2393,obexd,No,GPLv2+
+2394,objectweb-asm,No,BSD
+2395,oddjob,Yes,BSD
+2396,oddjob-mkhomedir,Yes,BSD
+2397,okular,Yes,GPLv2
+2398,okular-devel,No,GPLv2
+2399,okular-libs,No,GPLv2
+2400,okular-part,No,GPLv2
+2401,opa-address-resolution,Yes,BSD or GPLv2
+2402,opa-basic-tools,No,BSD or GPLv2
+2403,opa-fastfabric,Yes,BSD or GPLv2
+2404,opa-fm,No,GPLv2 or BSD
+2405,opa-libopamgt,Yes,BSD or GPLv2
+2406,opal,No,MPLv1.0
+2407,open-sans-fonts,Yes,ASL 2.0
+2408,open-vm-tools,Yes,GPLv2
+2409,open-vm-tools-desktop,Yes,GPLv2
+2410,opencc,No,ASL 2.0
+2411,openchange,No,GPLv3+ and Public Domain
+2412,opencryptoki,Yes,CPL
+2413,opencryptoki-icsftok,No,CPL
+2414,opencryptoki-libs,No,CPL
+2415,opencryptoki-swtok,No,CPL
+2416,opencryptoki-tpmtok,No,CPL
+2417,opendnssec,No,BSD
+2418,OpenEXR-libs,No,BSD
+2419,openhpi,Yes,BSD
+2420,openhpi-libs,No,BSD
+2421,OpenIPMI,Yes,LGPLv2+ and GPLv2+ or BSD
+2422,OpenIPMI-libs,No,LGPLv2+ and GPLv2+ or BSD
+2423,OpenIPMI-modalias,No,LGPLv2+ and GPLv2+ or BSD
+2424,OpenIPMI-perl,No,LGPLv2+ and GPLv2+ or BSD
+2425,openjade,No,BSD
+2426,openjpeg-libs,No,BSD
+2427,openjpeg2,No,BSD and MIT
+2428,openldap,No,OpenLDAP
+2429,openldap-clients,Yes,OpenLDAP
+2430,openldap-devel,Yes,OpenLDAP
+2431,openldap-servers,No,OpenLDAP
+2432,openlmi,Yes,LGPLv2+
+2433,openlmi-account,Yes,LGPLv2+
+2434,openlmi-account-doc,Yes,LGPLv2+
+2435,openlmi-fan,Yes,LGPLv2+
+2436,openlmi-fan-doc,Yes,LGPLv2+
+2437,openlmi-hardware,Yes,LGPLv2+
+2438,openlmi-hardware-doc,Yes,LGPLv2+
+2439,openlmi-indicationmanager-libs,No,LGPLv2+
+2440,openlmi-logicalfile,Yes,LGPLv2+
+2441,openlmi-logicalfile-doc,Yes,LGPLv2+
+2442,openlmi-networking,Yes,LGPLv2+
+2443,openlmi-networking-doc,Yes,LGPLv2+
+2444,openlmi-powermanagement,Yes,LGPLv2+
+2445,openlmi-powermanagement-doc,Yes,LGPLv2+
+2446,openlmi-providers,Yes,LGPLv2+
+2447,openlmi-providers-devel,Yes,LGPLv2+
+2448,openlmi-python-base,No,LGPLv2+
+2449,openlmi-python-providers,No,LGPLv2+
+2450,openlmi-realmd,Yes,LGPLv2+
+2451,openlmi-realmd-doc,Yes,LGPLv2+
+2452,openlmi-service,Yes,LGPLv2+
+2453,openlmi-service-doc,Yes,LGPLv2+
+2454,openlmi-software,Yes,LGPLv2+
+2455,openlmi-software-doc,Yes,LGPLv2+
+2456,openlmi-storage,Yes,LGPLv2+
+2457,openlmi-storage-doc,Yes,LGPLv2+
+2458,openlmi-tools,Yes,GPLv2+
+2459,openlmi-tools-doc,Yes,GPLv2+
+2460,openmpi,Yes,BSD and MIT and Romio
+2461,openmpi-devel,Yes,BSD and MIT and Romio
+2462,openmpi3,Yes,BSD and MIT and Romio
+2463,openmpi3-devel,Yes,BSD and MIT and Romio
+2464,openobex,No,GPLv2+ and LGPLv2+
+2465,opensc,Yes,LGPLv2+
+2466,openscap,Yes,LGPLv2+
+2467,openscap-containers,No,LGPLv2+
+2468,openscap-python,No,LGPLv2+
+2469,openscap-scanner,No,LGPLv2+
+2470,openscap-utils,Yes,LGPLv2+
+2471,openslp,No,BSD
+2472,openslp-server,Yes,BSD
+2473,opensm,Yes,GPLv2 or BSD
+2474,opensm-libs,No,GPLv2 or BSD
+2475,opensp,No,MIT
+2476,openssh,No,BSD
+2477,openssh-askpass,No,BSD
+2478,openssh-clients,Yes,BSD
+2479,openssh-keycat,Yes,BSD
+2480,openssh-server,Yes,BSD
+2481,openssl,No,OpenSSL
+2482,openssl-devel,Yes,OpenSSL
+2483,openssl-libs,No,OpenSSL
+2484,openssl098e,Yes,OpenSSL
+2485,openwsman-client,Yes,BSD
+2486,openwsman-python,No,BSD
+2487,openwsman-server,Yes,BSD
+2488,oprofile,Yes,GPLv2+ and LGPLv2+
+2489,oprofile-gui,Yes,GPLv2+ and LGPLv2+
+2490,oprofile-jit,Yes,GPLv2+ and LGPLv2+
+2491,opus,No,BSD
+2492,ORBit2,No,LGPLv2+ and GPLv2+
+2493,orc,No,BSD
+2494,orca,Yes,LGPLv2+
+2495,ortp,No,LGPLv2+ and VSL
+2496,os-prober,No,GPLv2+ and GPL+
+2497,oscap-anaconda-addon,Yes,GPLv2+
+2498,osinfo-db,No,LGPLv2+
+2499,osinfo-db-tools,No,GPLv2+
+2500,overpass-fonts,Yes,OFL
+2501,oxygen-gtk,Yes,LGPLv2+
+2502,oxygen-gtk2,No,LGPLv2+
+2503,oxygen-gtk3,No,LGPLv2+
+2504,oxygen-icon-theme,No,LGPLv3+
+2505,p11-kit,No,BSD
+2506,p11-kit-devel,No,BSD
+2507,p11-kit-trust,No,BSD
+2508,PackageKit,No,GPLv2+ and LGPLv2+
+2509,PackageKit-command-not-found,Yes,GPLv2+ and LGPLv2+
+2510,PackageKit-glib,No,GPLv2+ and LGPLv2+
+2511,PackageKit-gstreamer-plugin,Yes,GPLv2+ and LGPLv2+
+2512,PackageKit-gtk3-module,Yes,GPLv2+ and LGPLv2+
+2513,PackageKit-yum,No,GPLv2+ and LGPLv2+
+2514,pakchois,No,LGPLv2+
+2515,paktype-naqsh-fonts,Yes,GPLv2 with exceptions
+2516,paktype-naskh-basic-fonts,Yes,GPLv2 with exceptions
+2517,paktype-tehreer-fonts,Yes,GPLv2 with exceptions
+2518,pam,No,BSD and GPLv2+
+2519,pam-devel,Yes,BSD and GPLv2+
+2520,pam_krb5,No,BSD or LGPLv2+
+2521,pam_pkcs11,No,LGPLv2+
+2522,pango,No,LGPLv2+
+2523,pango-devel,Yes,LGPLv2+
+2524,pangomm,No,LGPLv2+
+2525,papi,Yes,BSD
+2526,papi-devel,Yes,BSD
+2527,paps,Yes,LGPLv2+
+2528,paps-libs,No,LGPLv2+
+2529,paratype-pt-sans-fonts,Yes,OFL
+2530,parfait,Yes,ASL 2.0
+2531,parted,Yes,GPLv3+
+2532,passivetex,No,Copyright only
+2533,passwd,Yes,BSD or GPL+
+2534,patch,Yes,GPLv3+
+2535,patchutils,Yes,GPLv2+
+2536,pavucontrol,Yes,GPLv2+
+2537,pax,Yes,BSD
+2538,pciutils,Yes,GPLv2+
+2539,pciutils-libs,No,GPLv2+
+2540,pcp,Yes,GPLv2+ and LGPLv2+ and CC-BY
+2541,pcp-conf,No,LGPLv2+
+2542,pcp-doc,No,GPLv2+ and CC-BY
+2543,pcp-export-pcp2graphite,No,GPLv2+
+2544,pcp-gui,Yes,GPLv2+ and LGPLv2+ and LGPLv2+ with exceptions
+2545,pcp-libs,No,LGPLv2+
+2546,pcp-manager,No,GPLv2+
+2547,pcp-pmda-activemq,No,GPLv2+
+2548,pcp-pmda-apache,No,GPLv2+
+2549,pcp-pmda-bash,No,GPLv2+
+2550,pcp-pmda-bonding,No,GPLv2+
+2551,pcp-pmda-cisco,No,GPLv2+
+2552,pcp-pmda-dbping,No,GPLv2+
+2553,pcp-pmda-dm,No,GPLv2+
+2554,pcp-pmda-ds389,No,GPLv2+
+2555,pcp-pmda-ds389log,No,GPLv2+
+2556,pcp-pmda-elasticsearch,No,GPLv2+
+2557,pcp-pmda-gfs2,No,GPLv2+
+2558,pcp-pmda-gluster,No,GPLv2+
+2559,pcp-pmda-gpfs,No,GPLv2+
+2560,pcp-pmda-gpsd,No,GPLv2+
+2561,pcp-pmda-json,No,GPLv2+
+2562,pcp-pmda-lmsensors,No,GPLv2+
+2563,pcp-pmda-logger,No,GPLv2+
+2564,pcp-pmda-lustre,No,GPLv2+
+2565,pcp-pmda-lustrecomm,No,GPLv2+
+2566,pcp-pmda-mailq,No,GPLv2+
+2567,pcp-pmda-memcache,No,GPLv2+
+2568,pcp-pmda-mounts,No,GPLv2+
+2569,pcp-pmda-mysql,No,GPLv2+
+2570,pcp-pmda-named,No,GPLv2+
+2571,pcp-pmda-netfilter,No,GPLv2+
+2572,pcp-pmda-news,No,GPLv2+
+2573,pcp-pmda-nfsclient,No,GPLv2+
+2574,pcp-pmda-nginx,No,GPLv2+
+2575,pcp-pmda-nvidia-gpu,No,GPLv2+
+2576,pcp-pmda-pdns,No,GPLv2+
+2577,pcp-pmda-postfix,No,GPLv2+
+2578,pcp-pmda-postgresql,No,GPLv2+
+2579,pcp-pmda-roomtemp,No,GPLv2+
+2580,pcp-pmda-rpm,No,GPLv2+
+2581,pcp-pmda-sendmail,No,GPLv2+
+2582,pcp-pmda-shping,No,GPLv2+
+2583,pcp-pmda-summary,No,GPLv2+
+2584,pcp-pmda-trace,No,GPLv2+
+2585,pcp-pmda-unbound,No,GPLv2+
+2586,pcp-pmda-weblog,No,GPLv2+
+2587,pcp-pmda-zswap,No,GPLv2+
+2588,pcp-selinux,No,GPLv2+ and CC-BY
+2589,pcp-system-tools,No,GPLv2+
+2590,pcp-webapi,No,GPLv2+
+2591,pcp-zeroconf,Yes,GPLv2+
+2592,pcre,No,BSD
+2593,pcre-devel,Yes,BSD
+2594,pcre2,No,BSD
+2595,pcre2-utf16,No,BSD
+2596,pcsc-lite,No,BSD
+2597,pcsc-lite-ccid,Yes,LGPLv2+
+2598,pcsc-lite-libs,No,BSD
+2599,pentaho-libxml,No,LGPLv2
+2600,pentaho-reporting-flow-engine,No,LGPLv2+
+2601,perf,Yes,GPLv2
+2602,perftest,Yes,GPLv2 or BSD
+2603,perl,Yes,(GPL+ or Artistic) and (GPLv2+ or Artistic) and Copyright Only and MIT and Public Domain and UCD
+2604,perl-Algorithm-Diff,No,GPL+ or Artistic
+2605,perl-App-cpanminus,Yes,GPL+ or Artistic
+2606,perl-Archive-Extract,No,GPL+ or Artistic
+2607,perl-Archive-Tar,No,GPL+ or Artistic
+2608,perl-Archive-Zip,No,GPL+ or Artistic
+2609,perl-Authen-SASL,No,GPL+ or Artistic
+2610,perl-autodie,No,GPL+ or Artistic
+2611,perl-B-Lint,No,GPL+ or Artistic
+2612,perl-Bit-Vector,No,(GPLv2+ or Artistic) and LGPLv2+
+2613,perl-Business-ISBN,No,GPL+ or Artistic
+2614,perl-Business-ISBN-Data,No,GPL+ or Artistic
+2615,perl-Carp,No,GPL+ or Artistic
+2616,perl-Carp-Clan,No,GPL+ or Artistic
+2617,perl-CGI,Yes,(GPL+ or Artistic) and Artistic 2.0
+2618,perl-CGI-Session,Yes,GPL+ or Artistic
+2619,perl-Class-ISA,No,GPL+ or Artistic
+2620,perl-Class-Load,No,GPL+ or Artistic
+2621,perl-Class-Singleton,No,GPL+ or Artistic
+2622,perl-Compress-Raw-Bzip2,No,GPL+ or Artistic
+2623,perl-Compress-Raw-Zlib,No,GPL+ or Artistic
+2624,perl-constant,No,GPL+ or Artistic
+2625,perl-Convert-ASN1,No,GPL+ or Artistic
+2626,perl-core,Yes,GPL+ or Artistic
+2627,perl-CPAN,Yes,GPL+ or Artistic
+2628,perl-CPAN-Meta,No,GPL+ or Artistic
+2629,perl-CPAN-Meta-Requirements,No,GPL+ or Artistic
+2630,perl-CPAN-Meta-YAML,No,GPL+ or Artistic
+2631,perl-CPANPLUS,Yes,GPL+ or Artistic
+2632,perl-CPANPLUS-Dist-Build,No,GPL+ or Artistic
+2633,perl-Crypt-OpenSSL-Bignum,No,GPL+ or Artistic
+2634,perl-Crypt-OpenSSL-Random,No,GPL+ or Artistic
+2635,perl-Crypt-OpenSSL-RSA,No,GPL+ or Artistic
+2636,perl-Crypt-SSLeay,Yes,GPL+ or Artistic
+2637,perl-Data-Dumper,No,GPL+ or Artistic
+2638,perl-Data-OptList,No,GPL+ or Artistic
+2639,perl-Date-Calc,Yes,GPL+ or Artistic
+2640,perl-Date-Manip,Yes,GPL+ or Artistic
+2641,perl-DateTime,Yes,(Artistic 2.0) and (GPL+ or Artistic)
+2642,perl-DateTime-Format-DateParse,Yes,GPL+ or Artistic
+2643,perl-DateTime-Locale,Yes,(GPL+ or Artistic) and MIT
+2644,perl-DateTime-TimeZone,Yes,(GPL+ or Artistic) and Public Domain
+2645,perl-DB_File,No,GPL+ or Artistic
+2646,perl-DBD-MySQL,Yes,GPL+ or Artistic
+2647,perl-DBD-Pg,Yes,GPLv2+ or Artistic
+2648,perl-DBD-SQLite,Yes,GPL+ or Artistic
+2649,perl-DBI,No,GPL+ or Artistic
+2650,perl-DBIx-Simple,No,Public Domain
+2651,perl-devel,Yes,GPL+ or Artistic
+2652,perl-Devel-Symdump,No,GPL+ or Artistic
+2653,perl-Digest,No,GPL+ or Artistic
+2654,perl-Digest-HMAC,No,GPL+ or Artistic
+2655,perl-Digest-MD5,No,GPL+ or Artistic
+2656,perl-Digest-SHA,No,GPL+ or Artistic
+2657,perl-Digest-SHA1,No,GPL+ or Artistic
+2658,perl-Encode,No,GPL+ or Artistic
+2659,perl-Encode-Detect,No,MPLv1.1 or GPLv2+ or LGPLv2+
+2660,perl-Encode-Locale,No,GPL+ or Artistic
+2661,perl-Env,No,GPL+ or Artistic
+2662,perl-Error,No,(GPL+ or Artistic) and MIT
+2663,perl-Exporter,No,GPL+ or Artistic
+2664,perl-ExtUtils-CBuilder,No,GPL+ or Artistic
+2665,perl-ExtUtils-Embed,No,GPL+ or Artistic
+2666,perl-ExtUtils-Install,No,GPL+ or Artistic
+2667,perl-ExtUtils-MakeMaker,Yes,GPL+ or Artistic
+2668,perl-ExtUtils-Manifest,No,GPL+ or Artistic
+2669,perl-ExtUtils-ParseXS,No,GPL+ or Artistic
+2670,perl-FCGI,No,OML
+2671,perl-File-CheckTree,No,GPL+ or Artistic
+2672,perl-File-Fetch,No,GPL+ or Artistic
+2673,perl-File-Listing,No,GPL+ or Artistic
+2674,perl-File-Path,No,GPL+ or Artistic
+2675,perl-File-Slurp,No,GPL+ or Artistic
+2676,perl-File-Temp,No,GPL+ or Artistic
+2677,perl-Filter,No,GPL+ or Artistic
+2678,perl-Font-AFM,No,GPL+ or Artistic) and Copyright only
+2679,perl-FreezeThaw,No,GPL+ or Artistic
+2680,perl-GD,No,GPL+ or Artistic
+2681,perl-Getopt-Long,No,GPLv2+ or Artistic
+2682,perl-gettext,Yes,GPL+ or Artistic
+2683,perl-Git,No,GPLv2
+2684,perl-GSSAPI,No,GPL+ or Artistic
+2685,perl-hivex,No,LGPLv2
+2686,perl-homedir,Yes,GPL+ or Artistic
+2687,perl-HTML-Format,No,GPL+ or Artistic
+2688,perl-HTML-Parser,No,GPL+ or Artistic
+2689,perl-HTML-Tagset,No,GPL+ or Artistic
+2690,perl-HTML-Tree,No,GPL+ or Artistic
+2691,perl-HTTP-Cookies,No,GPL+ or Artistic
+2692,perl-HTTP-Daemon,No,GPL+ or Artistic
+2693,perl-HTTP-Date,No,GPL+ or Artistic
+2694,perl-HTTP-Message,No,GPL+ or Artistic
+2695,perl-HTTP-Negotiate,No,GPL+ or Artistic
+2696,perl-HTTP-Tiny,No,GPL+ or Artistic
+2697,perl-IO-Compress,No,GPL+ or Artistic
+2698,perl-IO-HTML,No,GPL+ or Artistic
+2699,perl-IO-Socket-INET6,No,GPL+ or Artistic
+2700,perl-IO-Socket-IP,No,GPL+ or Artistic
+2701,perl-IO-Socket-SSL,No,GPL+ or Artistic
+2702,perl-IO-stringy,No,GPL+ or Artistic
+2703,perl-IO-Zlib,No,GPL+ or Artistic
+2704,perl-IPC-Cmd,No,GPL+ or Artistic
+2705,perl-JSON,No,GPL+ or Artistic
+2706,perl-JSON-PP,No,GPL+ or Artistic
+2707,perl-LDAP,Yes,GPL+ or Artistic
+2708,perl-libintl,No,LGPLv2+
+2709,perl-libs,No,GPL+ or Artistic
+2710,perl-libwww-perl,No,GPL+ or Artistic
+2711,perl-libxml-perl,No,(GPL+ or Artistic) and Public Domain
+2712,perl-List-MoreUtils,No,GPL+ or Artistic
+2713,perl-local-lib,No,GPL+ or Artistic
+2714,perl-Locale-Codes,No,GPL+ or Artistic
+2715,perl-Locale-Maketext,No,GPL+ or Artistic
+2716,perl-Locale-Maketext-Simple,No,MIT
+2717,perl-Log-Message,No,GPL+ or Artistic
+2718,perl-Log-Message-Simple,No,GPL+ or Artistic
+2719,perl-LWP-MediaTypes,No,(GPL+ or Artistic) and Public Domain
+2720,perl-LWP-Protocol-https,Yes,GPL+ or Artistic
+2721,perl-macros,No,GPL+ or Artistic
+2722,perl-Mail-DKIM,No,(GPL+ or Artistic) and GPL and Copyright Only
+2723,perl-Mail-SPF,No,BSD
+2724,perl-MailTools,No,GPL+ or Artistic
+2725,perl-Module-Build,No,GPL+ or Artistic
+2726,perl-Module-CoreList,No,GPL+ or Artistic
+2727,perl-Module-Implementation,No,Artistic 2.0
+2728,perl-Module-Load,No,GPL+ or Artistic
+2729,perl-Module-Load-Conditional,No,GPL+ or Artistic
+2730,perl-Module-Loaded,No,GPL+ or Artistic
+2731,perl-Module-Metadata,No,GPL+ or Artistic
+2732,perl-Module-Pluggable,No,GPL+ or Artistic
+2733,perl-Module-Runtime,No,GPL+ or Artistic
+2734,perl-Module-Signature,No,CC0 and (GPL+ or Artistic)
+2735,perl-Mozilla-CA,Yes,MPLv1.1 or LGPLv2+ or GPLv2+
+2736,perl-Mozilla-LDAP,Yes,GPLv2+ and LGPLv2+ and MPLv1.1
+2737,perl-Net-Daemon,No,GPL+ or Artistic
+2738,perl-Net-DNS,No,(GPL+ or Artistic) and BSD and ISC and MIT
+2739,perl-Net-HTTP,No,GPL+ or Artistic
+2740,perl-Net-LibIDN,No,GPL+ or Artistic
+2741,perl-Net-SMTP-SSL,No,GPL+ or Artistic
+2742,perl-Net-SSLeay,No,OpenSSL
+2743,perl-NetAddr-IP,No,GPLv2+ and (GPLv2+ or Artistic clarified)
+2744,perl-Newt,No,GPL+ or Artistic
+2745,perl-Object-Accessor,No,GPL+ or Artistic
+2746,perl-Package-Constants,No,GPL+ or Artistic
+2747,perl-Package-DeprecationManager,No,Artistic 2.0
+2748,perl-Package-Stash,No,GPL+ or Artistic
+2749,perl-Package-Stash-XS,No,GPL+ or Artistic
+2750,perl-PAR-Dist,No,GPL+ or Artistic
+2751,perl-Params-Check,No,GPL+ or Artistic
+2752,perl-Params-Util,No,GPL+ or Artistic
+2753,perl-Params-Validate,No,Artistic 2.0
+2754,perl-parent,No,GPL+ or Artistic
+2755,perl-Parse-CPAN-Meta,No,GPL+ or Artistic
+2756,perl-PathTools,No,(GPL+ or Artistic) and BSD
+2757,perl-PCP-PMDA,No,GPLv2+
+2758,perl-Perl-OSType,No,GPL+ or Artistic
+2759,perl-Perl4-CoreLibs,Yes,GPL+ or Artistic
+2760,perl-PlRPC,No,GPL+ or Artistic
+2761,perl-Pod-Checker,No,GPL+ or Artistic
+2762,perl-Pod-Coverage,No,GPL+ or Artistic
+2763,perl-Pod-Escapes,No,GPL+ or Artistic
+2764,perl-Pod-LaTeX,No,GPL+ or Artistic
+2765,perl-Pod-Parser,No,GPL+ or Artistic
+2766,perl-Pod-Perldoc,No,GPL+ or Artistic
+2767,perl-Pod-Plainer,No,GPL+ or Artistic
+2768,perl-Pod-Simple,No,GPL+ or Artistic
+2769,perl-Pod-Usage,No,GPL+ or Artistic
+2770,perl-podlators,No,GPL+ or Artistic
+2771,perl-Scalar-List-Utils,No,GPL+ or Artistic
+2772,perl-SGMLSpm,No,GPLv2+
+2773,perl-SNMP_Session,No,Artistic 2.0
+2774,perl-Socket,No,GPL+ or Artistic
+2775,perl-Socket6,No,BSD
+2776,perl-srpm-macros,No,GPLv3+
+2777,perl-Storable,No,GPL+ or Artistic
+2778,perl-String-ShellQuote,No,(GPL+ or Artistic) and GPLv2+
+2779,perl-Sub-Install,No,GPL+ or Artistic
+2780,perl-Sys-CPU,No,(GPL+ or Artistic) and (LGPLv3 or Artistic 2.0)
+2781,perl-Sys-Guestfs,No,LGPLv2+
+2782,perl-Sys-MemInfo,No,(GPLv1+ or Artistic) and LGPLv2+
+2783,perl-Sys-Syslog,No,GPL+ or Artistic
+2784,perl-Sys-Virt,Yes,GPLv2+ or Artistic
+2785,perl-Term-UI,No,GPL+ or Artistic
+2786,perl-TermReadKey,No,(Copyright only) and (Artistic or GPL+)
+2787,perl-Test-Harness,No,GPL+ or Artistic
+2788,perl-Test-Pod,Yes,GPL+ or Artistic
+2789,perl-Test-Pod-Coverage,Yes,GPL+ or Artistic
+2790,perl-Test-Simple,No,GPL+ or Artistic
+2791,perl-Text-Diff,No,(GPL+ or Artistic) and (GPLv2+ or Artistic) and MIT
+2792,perl-Text-ParseWords,No,GPL+ or Artistic
+2793,perl-Text-Soundex,No,Copyright only
+2794,perl-Text-Unidecode,No,GPL+ or Artistic
+2795,perl-Thread-Queue,No,GPL+ or Artistic
+2796,perl-threads,No,GPL+ or Artistic
+2797,perl-threads-shared,No,GPL+ or Artistic
+2798,perl-Time-HiRes,No,GPL+ or Artistic
+2799,perl-Time-Local,No,GPL+ or Artistic
+2800,perl-Time-Piece,No,GPL+ or Artistic
+2801,perl-TimeDate,No,GPL+ or Artistic
+2802,perl-Try-Tiny,No,MIT
+2803,perl-URI,No,GPL+ or Artistic
+2804,perl-version,No,GPL+ or Artistic
+2805,perl-Version-Requirements,No,GPL+ or Artistic
+2806,perl-WWW-RobotRules,No,GPL+ or Artistic
+2807,perl-XML-Dumper,Yes,GPL+ or Artistic
+2808,perl-XML-Filter-BufferText,No,GPL+ or Artistic
+2809,perl-XML-Grove,Yes,GPL+ or Artistic
+2810,perl-XML-LibXML,No,(GPL+ or Artistic) and MIT
+2811,perl-XML-NamespaceSupport,No,GPL+ or Artistic
+2812,perl-XML-Parser,No,GPL+ or Artistic
+2813,perl-XML-SAX,No,GPL+ or Artistic
+2814,perl-XML-SAX-Base,No,GPL+ or Artistic
+2815,perl-XML-SAX-Writer,No,GPL+ or Artistic
+2816,perl-XML-Twig,Yes,GPL+ or Artistic
+2817,perl-XML-Writer,No,CC0
+2818,perl-XML-XPath,No,GPL+ or Artistic
+2819,perl-YAML,No,GPL+ or Artistic
+2820,perl-YAML-Tiny,No,GPL+ or Artistic
+2821,perltidy,Yes,GPLv2+
+2822,pexpect,Yes,MIT
+2823,phonon,No,LGPLv2+
+2824,phonon-backend-gstreamer,Yes,LGPLv2+
+2825,phonon-devel,No,LGPLv2+
+2826,php,Yes,PHP and Zend and BSD
+2827,php-cli,No,PHP and Zend and BSD
+2828,php-common,No,PHP and BSD and ASL 1.0
+2829,php-gd,Yes,PHP and BSD
+2830,php-ldap,Yes,PHP
+2831,php-mysql,Yes,PHP
+2832,php-odbc,Yes,PHP
+2833,php-pdo,Yes,PHP
+2834,php-pear,Yes,BSD and PHP and LGPLv2+
+2835,php-pecl-memcache,Yes,PHP
+2836,php-pgsql,Yes,PHP
+2837,php-process,No,PHP
+2838,php-recode,Yes,PHP
+2839,php-soap,Yes,PHP
+2840,php-xml,Yes,PHP
+2841,php-xmlrpc,Yes,PHP and BSD
+2842,pidgin,Yes,GPLv2+ and GPLv2 and MIT
+2843,pidgin-sipe,Yes,GPLv2+
+2844,pinentry,No,GPLv2+
+2845,pinentry-gtk,No,GPLv2+
+2846,pinentry-qt,Yes,GPLv2
+2847,pinentry-qt4,No,GPLv2 or GPLv3
+2848,pinfo,Yes,GPLv2
+2849,pixman,No,MIT
+2850,pixman-devel,No,MIT
+2851,pkgconfig,Yes,GPLv2+
+2852,pki-base,No,GPLv2
+2853,pki-base-java,No,GPLv2
+2854,pki-ca,No,GPLv2
+2855,pki-kra,No,GPLv2
+2856,pki-server,No,GPLv2
+2857,pki-symkey,No,GPLv2
+2858,pki-tools,No,GPLv2
+2859,plasma-scriptengine-python,Yes,GPLv2
+2860,plymouth,Yes,GPLv2+
+2861,plymouth-core-libs,No,GPLv2+
+2862,plymouth-graphics-libs,No,GPLv2+
+2863,plymouth-plugin-label,No,GPLv2+
+2864,plymouth-plugin-two-step,No,GPLv2+
+2865,plymouth-scripts,No,GPLv2+
+2866,plymouth-system-theme,Yes,GPLv2+
+2867,plymouth-theme-charge,No,GPLv2+
+2868,pm-utils,Yes,GPLv2
+2869,pmdk-convert,No,BSD
+2870,pmempool,No,BSD
+2871,pnm2ppa,Yes,GPLv2+ and GPLv2
+2872,po4a,No,GPL+
+2873,policycoreutils,Yes,GPLv2
+2874,policycoreutils-devel,No,GPLv2
+2875,policycoreutils-gui,Yes,GPLv2
+2876,policycoreutils-newrole,No,GPLv2
+2877,policycoreutils-python,No,GPLv2
+2878,policycoreutils-sandbox,No,GPLv2
+2879,polkit,No,LGPLv2+
+2880,polkit-devel,Yes,LGPLv2+
+2881,polkit-docs,No,LGPLv2+
+2882,polkit-kde,No,GPLv2+
+2883,polkit-pkla-compat,No,LGPLv2+
+2884,polkit-qt,No,GPLv2+
+2885,poppler,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+2886,poppler-data,No,BSD and GPLv2 and GPLv3+
+2887,poppler-glib,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+2888,poppler-qt,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+2889,poppler-utils,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+2890,popt,No,MIT
+2891,popt-devel,Yes,MIT
+2892,portreserve,No,GPLv2+
+2893,postfix,Yes,IBM and GPLv2+
+2894,postfix-perl-scripts,No,IBM and GPLv2+
+2895,postgresql,Yes,PostgreSQL
+2896,postgresql-contrib,Yes,PostgreSQL
+2897,postgresql-devel,Yes,PostgreSQL
+2898,postgresql-jdbc,Yes,BSD and ASL 2.0
+2899,postgresql-libs,No,PostgreSQL
+2900,postgresql-odbc,Yes,LGPLv2+
+2901,postgresql-plperl,Yes,PostgreSQL
+2902,postgresql-plpython,Yes,PostgreSQL
+2903,postgresql-pltcl,Yes,PostgreSQL
+2904,postgresql-server,Yes,PostgreSQL
+2905,postgresql-test,Yes,PostgreSQL
+2906,pothana2000-fonts,Yes,GPLv2+ with exceptions
+2907,powertop,Yes,GPLv2
+2908,ppp,Yes,BSD and LGPLv2+ and GPLv2+ and Public Domain
+2909,pptp,Yes,GPLv2+
+2910,prelink,Yes,GPLv2+
+2911,procmail,Yes,GPLv2+ or Artistic
+2912,procps-ng,Yes,GPL+ and GPLv2 and GPLv2+ and GPLv3+ and LGPLv2+
+2913,protobuf,No,BSD
+2914,protobuf-c,Yes,BSD
+2915,ps_mem,Yes,LGPLv2
+2916,psacct,Yes,GPLv3+
+2917,psmisc,No,GPLv2+
+2918,pth,No,LGPLv2+
+2919,ptlib,No,MPLv1.0
+2920,pulseaudio,Yes,LGPLv2+
+2921,pulseaudio-gdm-hooks,No,LGPLv2+
+2922,pulseaudio-libs,No,LGPLv2+
+2923,pulseaudio-libs-devel,Yes,LGPLv2+
+2924,pulseaudio-libs-glib2,No,LGPLv2+
+2925,pulseaudio-module-bluetooth,No,LGPLv2+
+2926,pulseaudio-module-x11,Yes,LGPLv2+
+2927,pulseaudio-utils,Yes,LGPLv2+
+2928,purple-sipe,No,GPLv2+
+2929,pycairo,No,MPLv1.1 or LGPLv2
+2930,pygobject2,No,LGPLv2+
+2931,pygobject3-devel,Yes,LGPLv2+ and MIT
+2932,pygpgme,No,LGPLv2+
+2933,PyGreSQL,Yes,PostgreSQL or Python
+2934,pygtk2,No,LGPLv2+
+2935,pygtk2-libglade,No,LGPLv2+
+2936,pykde4,No,LGPLv2+
+2937,pykickstart,No,GPLv2
+2938,pyldb,No,LGPLv3+
+2939,pyliblzma,No,LGPLv3+
+2940,pyOpenSSL,No,ASL 2.0
+2941,pyorbit,No,LGPLv2+
+2942,PyPAM,Yes,LGPLv2
+2943,pyparsing,No,MIT
+2944,pyparted,No,GPLv2+
+2945,PyQt4,No,(GPLv3 or GPLv2 with exceptions) and BSD
+2946,PyQt4-devel,Yes,(GPLv3 or GPLv2 with exceptions) and BSD
+2947,pytalloc,No,LGPLv3+
+2948,python,Yes,Python
+2949,python-augeas,No,LGPLv2+
+2950,python-babel,No,BSD
+2951,python-backports,No,Public Domain
+2952,python-backports-ssl_match_hostname,No,Python
+2953,python-bcc,No,ASL 2.0
+2954,python-beaker,No,BSD and MIT
+2955,python-blivet,No,LGPLv2+
+2956,python-brlapi,No,LGPLv2+
+2957,python-cffi,No,MIT
+2958,python-chardet,No,LGPLv2
+2959,python-configobj,No,BSD
+2960,python-configshell,No,ASL 2.0
+2961,python-coverage,No,BSD and (MIT or GPLv2)
+2962,python-cpio,No,LGPLv2+
+2963,python-cups,No,GPLv2+
+2964,python-custodia,No,GPLv3+
+2965,python-dateutil,No,Python
+2966,python-decorator,No,BSD
+2967,python-deltarpm,No,BSD
+2968,python-devel,Yes,Python
+2969,python-di,No,GPLv2+
+2970,python-dmidecode,No,GPLv2
+2971,python-dns,No,MIT
+2972,python-enum34,No,BSD
+2973,python-ethtool,No,GPLv2
+2974,python-firewall,No,GPLv2+
+2975,python-gobject,No,LGPLv2+ and MIT
+2976,python-gobject-base,No,LGPLv2+ and MIT
+2977,python-gssapi,No,ISC
+2978,python-gudev,No,LGPLv3+
+2979,python-hwdata,No,GPLv2
+2980,python-idna,No,BSD and Python and Unicode
+2981,python-iniparse,No,MIT
+2982,python-inotify,No,MIT
+2983,python-ipaddr,Yes,ASL 2.0
+2984,python-ipaddress,No,Python
+2985,python-IPy,No,BSD
+2986,python-javapackages,No,BSD
+2987,python-jinja2,No,BSD
+2988,python-jsonpointer,No,BSD
+2989,python-jwcrypto,No,LGPLv3+
+2990,python-kdcproxy,No,MIT
+2991,python-kerberos,No,ASL 2.0
+2992,python-kitchen,No,LGPLv2+
+2993,python-kmod,No,LGPLv2+
+2994,python-krbV,No,LGPLv2+
+2995,python-ldap,No,Python
+2996,python-libguestfs,No,LGPLv2+
+2997,python-libipa_hbac,No,LGPLv3+
+2998,python-libs,No,Python
+2999,python-libsss_nss_idmap,No,LGPLv3+
+3000,python-linux-procfs,No,GPLv2
+3001,python-lxml,No,BSD
+3002,python-magic,Yes,BSD
+3003,python-mako,No,(MIT and Python) and (BSD or GPLv2)
+3004,python-markupsafe,No,BSD
+3005,python-matplotlib,No,Python
+3006,python-meh,No,GPLv2+
+3007,python-meh-gui,No,GPLv2+
+3008,python-memcached,Yes,Python
+3009,python-netaddr,No,BSD
+3010,python-netifaces,No,MIT
+3011,python-nose,No,LGPLv2+ and Public Domain
+3012,python-nss,No,MPLv2.0 or GPLv2+ or LGPLv2+
+3013,python-ntplib,No,LGPLv2+
+3014,python-paramiko,No,LGPLv2+
+3015,python-paste,No,MIT and ZPLv2.0 and Python and Public Domain and (AFL or MIT) and (MIT or ASL 2.0)
+3016,python-pcp,No,GPLv2+
+3017,python-perf,No,GPLv2
+3018,python-pillow,No,MIT
+3019,python-ply,No,BSD
+3020,python-psycopg2,Yes,LGPLv3+ with exceptions
+3021,python-pwquality,No,BSD or GPLv2+
+3022,python-pyblock,No,GPLv2 or GPLv3
+3023,python-pycparser,No,BSD
+3024,python-pycurl,No,LGPLv2+ or MIT
+3025,python-pyudev,No,LGPLv2+
+3026,python-qrcode-core,No,BSD
+3027,python-rados,No,LGPL-2.0
+3028,python-rbd,No,LGPL-2.0
+3029,python-reportlab,No,BSD
+3030,python-requests,No,ASL 2.0
+3031,python-rhsm,No,GPLv2
+3032,python-rhsm-certificates,No,GPLv2
+3033,python-rpm-macros,No,MIT
+3034,python-rtslib,No,ASL 2.0
+3035,python-schedutils,No,GPLv2
+3036,python-setproctitle,No,BSD
+3037,python-setuptools,Yes,Python or ZPLv2.0
+3038,python-six,No,MIT
+3039,python-slip,No,GPLv2+
+3040,python-slip-dbus,No,GPLv2+
+3041,python-smbc,Yes,GPLv2+
+3042,python-sqlalchemy,No,MIT
+3043,python-srpm-macros,No,MIT
+3044,python-sss,No,LGPLv3+
+3045,python-sss-murmur,No,LGPLv3+
+3046,python-sssdconfig,No,GPLv3+
+3047,python-suds,No,LGPLv3+
+3048,python-syspurpose,No,GPLv2
+3049,python-tdb,No,LGPLv3+
+3050,python-tempita,No,MIT
+3051,python-tevent,No,LGPLv3+
+3052,python-urlgrabber,No,LGPLv2+
+3053,python-urllib3,No,MIT
+3054,python-urwid,No,LGPLv2+
+3055,python-virtualenv,Yes,MIT
+3056,python-volume_key,Yes,GPLv2 and (MPLv1.1 or GPLv2 or LGPLv2)
+3057,python-yubico,No,BSD
+3058,python2-blivet3,No,LGPLv2+
+3059,python2-blockdev,No,LGPLv2+
+3060,python2-bytesize,No,LGPLv2+
+3061,python2-caribou,No,LGPLv2+
+3062,python2-cryptography,No,ASL 2.0 or BSD
+3063,python2-futures,No,Python
+3064,python2-hawkey,No,LGPLv2+
+3065,python2-ipaclient,No,GPLv3+
+3066,python2-ipalib,No,GPLv3+
+3067,python2-ipaserver,No,GPLv3+
+3068,python2-keycloak-httpd-client-install,No,GPLv3
+3069,python2-oauthlib,No,BSD
+3070,python2-pyasn1,No,BSD
+3071,python2-pyasn1-modules,No,BSD
+3072,python2-pyatspi,No,LGPLv2 and GPLv2
+3073,python2-requests-oauthlib,No,ISC
+3074,python2-rpm-macros,No,MIT
+3075,python2-subprocess32,No,Python
+3076,python3,No,Python
+3077,python3-libs,No,Python
+3078,python3-pip,No,MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
+3079,python3-rpm-generators,No,GPLv2+
+3080,python3-rpm-macros,No,MIT
+3081,python3-setuptools,No,MIT and (BSD or ASL 2.0)
+3082,python3-wheel,No,MIT
+3083,pytz,No,MIT
+3084,pyusb,No,BSD
+3085,pywbem,No,LGPLv2
+3086,pyxattr,No,LGPLv2+
+3087,PyYAML,No,MIT
+3088,qca-ossl,No,LGPLv2+
+3089,qca2,No,LGPLv2+
+3090,qdox,No,ASL 2.0
+3091,qemu-guest-agent,Yes,GPLv2
+3092,qemu-img,No,GPLv2 and GPLv2+ and CC-BY
+3093,qemu-kvm,Yes,GPLv2 and GPLv2+ and CC-BY
+3094,qemu-kvm-common,No,GPLv2 and GPLv2+ and CC-BY
+3095,qemu-kvm-tools,Yes,GPLv2 and GPLv2+ and CC-BY
+3096,qgnomeplatform,Yes,LGPLv2+
+3097,qimageblitz,No,BSD and ImageMagick
+3098,qjson,No,GPLv2+
+3099,qpdf-libs,No,Artistic 2.0 and MIT
+3100,qperf,Yes,GPLv2 or BSD
+3101,qrencode-libs,No,LGPLv2+
+3102,qt,No,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+3103,qt-devel,Yes,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+3104,qt-mysql,Yes,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+3105,qt-odbc,Yes,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+3106,qt-postgresql,Yes,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+3107,qt-settings,No,MIT
+3108,qt-x11,No,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+3109,qt3,No,QPL or GPLv2 or GPLv3
+3110,qt3-devel,Yes,QPL or GPLv2 or GPLv3
+3111,qt3-MySQL,Yes,QPL or GPLv2 or GPLv3
+3112,qt3-ODBC,Yes,QPL or GPLv2 or GPLv3
+3113,qt3-PostgreSQL,Yes,QPL or GPLv2 or GPLv3
+3114,qt5-designer,No,LGPLv3 or LGPLv2
+3115,qt5-doctools,No,LGPLv3 or LGPLv2
+3116,qt5-linguist,No,LGPLv3 or LGPLv2
+3117,qt5-qt3d,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3118,qt5-qt3d-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3119,qt5-qtbase,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3120,qt5-qtbase-common,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3121,qt5-qtbase-devel,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3122,qt5-qtbase-gui,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3123,qt5-qtbase-mysql,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3124,qt5-qtbase-odbc,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3125,qt5-qtbase-postgresql,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3126,qt5-qtcanvas3d,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3127,qt5-qtconnectivity,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3128,qt5-qtconnectivity-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3129,qt5-qtdeclarative,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3130,qt5-qtdeclarative-devel,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3131,qt5-qtdoc,Yes,GFDL
+3132,qt5-qtenginio,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3133,qt5-qtenginio-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3134,qt5-qtgraphicaleffects,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3135,qt5-qtimageformats,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3136,qt5-qtlocation,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3137,qt5-qtlocation-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3138,qt5-qtmultimedia,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3139,qt5-qtmultimedia-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3140,qt5-qtquickcontrols,Yes,LGPLv2 or LGPLv3 and GFDL
+3141,qt5-qtquickcontrols2,Yes,GPLv2+ or LGPLv3 and GFDL
+3142,qt5-qtscript,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3143,qt5-qtscript-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3144,qt5-qtsensors,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3145,qt5-qtsensors-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3146,qt5-qtserialbus,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3147,qt5-qtserialport,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3148,qt5-qtserialport-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3149,qt5-qtsvg,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3150,qt5-qtsvg-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3151,qt5-qttools,No,LGPLv3 or LGPLv2
+3152,qt5-qttools-common,No,LGPLv3 or LGPLv2
+3153,qt5-qttools-devel,Yes,LGPLv3 or LGPLv2
+3154,qt5-qttools-libs-designer,No,LGPLv3 or LGPLv2
+3155,qt5-qttools-libs-designercomponents,No,LGPLv3 or LGPLv2
+3156,qt5-qttools-libs-help,No,LGPLv3 or LGPLv2
+3157,qt5-qttranslations,Yes,LGPLv2 with exceptions or GPLv3 with exceptions and GFDL
+3158,qt5-qtwayland,Yes,LGPLv3
+3159,qt5-qtwebchannel,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3160,qt5-qtwebchannel-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3161,qt5-qtwebsockets,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3162,qt5-qtwebsockets-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3163,qt5-qtx11extras,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3164,qt5-qtx11extras-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3165,qt5-qtxmlpatterns,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3166,qt5-qtxmlpatterns-devel,Yes,LGPLv2 with exceptions or GPLv3 with exceptions
+3167,qt5-rpm-macros,No,LGPLv2 with exceptions or GPLv3 with exceptions
+3168,quagga,Yes,GPLv2+
+3169,quota,Yes,BSD and LGPLv2+ and GPLv2 and GPLv2+
+3170,quota-nls,No,BSD and LGPLv2+ and GPLv2 and GPLv2+
+3171,radvd,Yes,BSD with advertising
+3172,raptor2,No,GPLv2+ or LGPLv2+ or ASL 2.0
+3173,rarian,No,LGPLv2+
+3174,rarian-compat,No,GPLv2+
+3175,rasdaemon,Yes,GPLv2
+3176,rasqal,No,LGPLv2+ or ASL 2.0
+3177,rcs,Yes,GPLv3+
+3178,rdate,Yes,GPLv2+
+3179,rdist,Yes,BSD
+3180,rdma-core,Yes,GPLv2 or BSD
+3181,rdma-core-devel,Yes,GPLv2 or BSD
+3182,readline,No,GPLv3+
+3183,readline-devel,Yes,GPLv3+
+3184,realmd,Yes,LGPLv2+
+3185,rear,Yes,GPLv3
+3186,recode,No,GPLv2+
+3187,Red_Hat_Enterprise_Linux-Release_Notes-7-as-IN,No,CC-BY-SA
+3188,Red_Hat_Enterprise_Linux-Release_Notes-7-bn-IN,No,CC-BY-SA
+3189,Red_Hat_Enterprise_Linux-Release_Notes-7-de-DE,No,CC-BY-SA
+3190,Red_Hat_Enterprise_Linux-Release_Notes-7-en-US,Yes,CC-BY-SA
+3191,Red_Hat_Enterprise_Linux-Release_Notes-7-es-ES,No,CC-BY-SA
+3192,Red_Hat_Enterprise_Linux-Release_Notes-7-fr-FR,No,CC-BY-SA
+3193,Red_Hat_Enterprise_Linux-Release_Notes-7-gu-IN,No,CC-BY-SA
+3194,Red_Hat_Enterprise_Linux-Release_Notes-7-hi-IN,No,CC-BY-SA
+3195,Red_Hat_Enterprise_Linux-Release_Notes-7-it-IT,No,CC-BY-SA
+3196,Red_Hat_Enterprise_Linux-Release_Notes-7-ja-JP,No,CC-BY-SA
+3197,Red_Hat_Enterprise_Linux-Release_Notes-7-kn-IN,No,CC-BY-SA
+3198,Red_Hat_Enterprise_Linux-Release_Notes-7-ko-KR,No,CC-BY-SA
+3199,Red_Hat_Enterprise_Linux-Release_Notes-7-ml-IN,No,CC-BY-SA
+3200,Red_Hat_Enterprise_Linux-Release_Notes-7-mr-IN,No,CC-BY-SA
+3201,Red_Hat_Enterprise_Linux-Release_Notes-7-or-IN,No,CC-BY-SA
+3202,Red_Hat_Enterprise_Linux-Release_Notes-7-pa-IN,No,CC-BY-SA
+3203,Red_Hat_Enterprise_Linux-Release_Notes-7-pt-BR,No,CC-BY-SA
+3204,Red_Hat_Enterprise_Linux-Release_Notes-7-ru-RU,No,CC-BY-SA
+3205,Red_Hat_Enterprise_Linux-Release_Notes-7-ta-IN,No,CC-BY-SA
+3206,Red_Hat_Enterprise_Linux-Release_Notes-7-te-IN,No,CC-BY-SA
+3207,Red_Hat_Enterprise_Linux-Release_Notes-7-zh-CN,No,CC-BY-SA
+3208,Red_Hat_Enterprise_Linux-Release_Notes-7-zh-TW,No,CC-BY-SA
+3209,redfish-finder,No,GPLv2
+3210,redhat-access-gui,Yes,ASL 2.0
+3211,redhat-access-plugin-ipa,No,Apache License 2.0
+3212,redhat-bookmarks,No,GFDL
+3213,redhat-indexhtml,Yes,Distributable
+3214,redhat-logos,No,"Licensed only for approved usage, see COPYING for details."
+3215,redhat-lsb,Yes,GPLv2
+3216,redhat-lsb-core,Yes,GPLv2
+3217,redhat-lsb-cxx,No,GPLv2
+3218,redhat-lsb-desktop,No,GPLv2
+3219,redhat-lsb-languages,No,GPLv2
+3220,redhat-lsb-printing,No,GPLv2
+3221,redhat-lsb-submod-multimedia,No,GPLv2
+3222,redhat-lsb-submod-security,No,GPLv2
+3223,redhat-menus,No,GPL+
+3224,redhat-release-eula,Yes,n/a
+3225,redhat-release-workstation,Yes,GPLv2
+3226,redhat-rpm-config,Yes,GPL+
+3227,redhat-support-lib-python,No,ASL 2.0
+3228,redhat-support-tool,Yes,ASL 2.0
+3229,redhat-upgrade-dracut,Yes,GPLv2+
+3230,redhat-upgrade-dracut-plymouth,No,GPLv2+
+3231,redhat-upgrade-tool,Yes,GPLv2+
+3232,redland,No,LGPLv2+ or ASL 2.0
+3233,redland-virtuoso,No,LGPLv2+ or ASL 2.0
+3234,regexp,No,ASL 2.0
+3235,relaxngDatatype,No,BSD
+3236,rest,No,LGPLv2
+3237,resteasy-base-atom-provider,No,ASL 2.0 and CDDL
+3238,resteasy-base-client,No,ASL 2.0 and CDDL
+3239,resteasy-base-jackson-provider,No,ASL 2.0 and CDDL
+3240,resteasy-base-jaxb-provider,No,ASL 2.0 and CDDL
+3241,resteasy-base-jaxrs,No,ASL 2.0 and CDDL
+3242,resteasy-base-jaxrs-api,No,ASL 2.0 and CDDL
+3243,resteasy-base-jettison-provider,No,ASL 2.0 and CDDL
+3244,rfkill,Yes,ISC
+3245,rhdb-utils,Yes,GPLv2+
+3246,rhino,No,MPLv2.0
+3247,rhn-check,No,GPLv2
+3248,rhn-client-tools,No,GPLv2
+3249,rhn-setup,No,GPLv2
+3250,rhn-setup-gnome,Yes,GPLv2
+3251,rhnlib,No,GPLv2
+3252,rhnsd,Yes,GPLv2
+3253,rhsm-gtk,No,GPLv2
+3254,rhythmbox,Yes,GPLv2+ with exceptions and GFDL
+3255,rmt,No,CDDL
+3256,rng-tools,Yes,GPLv2+
+3257,rngom,No,MIT
+3258,rootfiles,Yes,Public Domain
+3259,rp-pppoe,Yes,GPLv2+
+3260,rpcbind,No,BSD
+3261,rpm,Yes,GPLv2+
+3262,rpm-build,Yes,GPLv2+
+3263,rpm-build-libs,No,GPLv2+ and LGPLv2+ with exceptions
+3264,rpm-devel,No,GPLv2+ and LGPLv2+ with exceptions
+3265,rpm-libs,No,GPLv2+ and LGPLv2+ with exceptions
+3266,rpm-python,No,GPLv2+
+3267,rpm-sign,Yes,GPLv2+
+3268,rpmdevtools,Yes,GPLv2+ and GPLv2
+3269,rpmemd,No,BSD
+3270,rpmlint,Yes,GPLv2
+3271,rrdtool,Yes,GPLv2+ with exceptions
+3272,rsh,Yes,BSD
+3273,rsh-server,Yes,BSD
+3274,rsync,Yes,GPLv3+
+3275,rsyslog,Yes,(GPLv3+ and ASL 2.0)
+3276,rsyslog-gnutls,Yes,(GPLv3+ and ASL 2.0)
+3277,rsyslog-gssapi,Yes,(GPLv3+ and ASL 2.0)
+3278,rsyslog-kafka,Yes,(GPLv3+ and ASL 2.0)
+3279,rsyslog-mmjsonparse,No,(GPLv3+ and ASL 2.0)
+3280,rsyslog-mysql,Yes,(GPLv3+ and ASL 2.0)
+3281,rsyslog-pgsql,Yes,(GPLv3+ and ASL 2.0)
+3282,rsyslog-relp,Yes,(GPLv3+ and ASL 2.0)
+3283,rtkit,No,GPLv3+ and BSD
+3284,ruby,Yes,(Ruby or BSD) and Public Domain
+3285,ruby-irb,Yes,(Ruby or BSD) and Public Domain
+3286,ruby-libs,No,Ruby or BSD
+3287,rubygem-abrt,Yes,MIT
+3288,rubygem-bigdecimal,No,GPL+ or Artistic
+3289,rubygem-bundler,Yes,MIT
+3290,rubygem-io-console,No,(Ruby or BSD) and Public Domain
+3291,rubygem-json,No,Ruby or GPLv2
+3292,rubygem-net-http-persistent,No,MIT
+3293,rubygem-psych,No,MIT
+3294,rubygem-rdoc,No,GPLv2 and Ruby and MIT
+3295,rubygem-thor,No,MIT
+3296,rubygems,No,Ruby or MIT
+3297,rusers,Yes,BSD
+3298,rusers-server,Yes,BSD
+3299,rwho,Yes,BSD and GPL+
+3300,saab-fonts,Yes,GPLv2+ with exceptions
+3301,sac,No,W3C
+3302,samba,Yes,GPLv3+ and LGPLv3+
+3303,samba-client,Yes,GPLv3+ and LGPLv3+
+3304,samba-client-libs,No,GPLv3+ and LGPLv3+
+3305,samba-common,No,GPLv3+ and LGPLv3+
+3306,samba-common-libs,No,GPLv3+ and LGPLv3+
+3307,samba-common-tools,No,GPLv3+ and LGPLv3+
+3308,samba-krb5-printing,Yes,GPLv3+ and LGPLv3+
+3309,samba-libs,No,GPLv3+ and LGPLv3+
+3310,samba-python,No,GPLv3+ and LGPLv3+
+3311,samba-winbind,Yes,GPLv3+ and LGPLv3+
+3312,samba-winbind-clients,Yes,GPLv3+ and LGPLv3+
+3313,samba-winbind-modules,No,GPLv3+ and LGPLv3+
+3314,samyak-devanagari-fonts,Yes,GPLv3+ with exceptions
+3315,samyak-fonts-common,No,GPLv3+ with exceptions
+3316,samyak-gujarati-fonts,Yes,GPLv3+ with exceptions
+3317,samyak-malayalam-fonts,Yes,GPLv3+ with exceptions
+3318,samyak-oriya-fonts,Yes,GPLv3+ with exceptions
+3319,samyak-tamil-fonts,Yes,GPLv3+ with exceptions
+3320,sane-backends,No,GPLv2+ and GPLv2+ with exceptions and Public Domain
+3321,sane-backends-devel,Yes,GPLv2+ and GPLv2+ with exceptions and Public Domain
+3322,sane-backends-drivers-cameras,No,GPLv2+ and GPLv2+ with exceptions and Public Domain
+3323,sane-backends-drivers-scanners,Yes,GPLv2+ and GPLv2+ with exceptions and Public Domain
+3324,sane-backends-libs,No,GPLv2+ and GPLv2+ with exceptions and Public Domain
+3325,sane-frontends,Yes,GPLv2+
+3326,sassist,No,MIT
+3327,satyr,No,GPLv2+
+3328,sbc,No,GPLv2 and LGPLv2+
+3329,sblim-cim-client2,Yes,EPL
+3330,sblim-cmpi-base,No,EPL
+3331,sblim-cmpi-fsvol,Yes,EPL
+3332,sblim-cmpi-network,Yes,EPL
+3333,sblim-cmpi-nfsv3,Yes,EPL
+3334,sblim-cmpi-nfsv4,Yes,EPL
+3335,sblim-cmpi-params,Yes,EPL
+3336,sblim-cmpi-sysfs,Yes,EPL
+3337,sblim-cmpi-syslog,Yes,EPL
+3338,sblim-gather,Yes,EPL
+3339,sblim-gather-provider,Yes,EPL
+3340,sblim-indication_helper,Yes,CPL
+3341,sblim-sfcb,Yes,EPL
+3342,sblim-sfcc,No,EPL
+3343,sblim-smis-hba,Yes,EPL
+3344,sblim-wbemcli,Yes,EPL
+3345,scannotation,No,ASL 2.0
+3346,scap-security-guide,Yes,BSD-3-Clause
+3347,scap-security-guide-doc,Yes,BSD-3-Clause
+3348,scap-workbench,Yes,GPLv3+
+3349,scipy,Yes,BSD and Boost and Public Domain
+3350,scl-utils,Yes,GPLv2+
+3351,screen,Yes,GPLv2+
+3352,scrub,Yes,GPLv2+
+3353,SDL,No,LGPLv2+
+3354,SDL-devel,Yes,LGPLv2+
+3355,sdparm,Yes,BSD
+3356,seabios-bin,No,LGPLv3
+3357,seahorse,Yes,GPLv2+ and LGPLv2+
+3358,seahorse-nautilus,Yes,GPLv2+
+3359,seahorse-sharing,Yes,GPLv2+ and LGPLv2+
+3360,seavgabios-bin,No,LGPLv3
+3361,sed,No,GPLv3+
+3362,selinux-policy,No,GPLv2+
+3363,selinux-policy-devel,No,GPLv2+
+3364,selinux-policy-minimum,No,GPLv2+
+3365,selinux-policy-mls,Yes,GPLv2+
+3366,selinux-policy-targeted,Yes,GPLv2+
+3367,sendmail,Yes,Sendmail
+3368,sendmail-cf,Yes,Sendmail
+3369,setools-console,Yes,GPLv2
+3370,setools-libs,No,LGPLv2
+3371,setroubleshoot,Yes,GPLv2+
+3372,setroubleshoot-plugins,No,GPLv2+
+3373,setroubleshoot-server,No,GPLv2+
+3374,setserial,Yes,GPL+
+3375,setup,Yes,Public Domain
+3376,setuptool,Yes,GPLv2+
+3377,sg3_utils,Yes,GPLv2+ and BSD
+3378,sg3_utils-libs,Yes,GPLv2+ and BSD
+3379,sgabios-bin,No,ASL 2.0
+3380,sgml-common,No,GPL+
+3381,sgpio,Yes,GPLv2+
+3382,shadow-utils,Yes,BSD and GPLv2+
+3383,shared-desktop-ontologies,No,(BSD or CC-BY) and CC-BY and W3C
+3384,shared-desktop-ontologies-devel,No,(BSD or CC-BY) and CC-BY and W3C
+3385,shared-mime-info,No,GPLv2+
+3386,shim-ia32,Yes,BSD
+3387,shim-unsigned-ia32,Yes,BSD
+3388,shim-unsigned-x64,Yes,BSD
+3389,shim-x64,Yes,BSD
+3390,shotwell,Yes,LGPLv2+ and CC-BY-SA
+3391,si-units,No,BSD
+3392,sil-abyssinica-fonts,Yes,OFL
+3393,sil-nuosu-fonts,Yes,OFL
+3394,sil-padauk-fonts,Yes,OFL
+3395,sip,No,GPLv2 or GPLv3 and (GPLv3+ with exceptions)
+3396,sip-devel,No,GPLv2 or GPLv3 and (GPLv3+ with exceptions)
+3397,sip-macros,No,GPLv2 or GPLv3 and (GPLv3+ with exceptions)
+3398,skkdic,No,GPLv2+
+3399,slang,No,GPLv2+
+3400,slapi-nis,Yes,GPLv2
+3401,slf4j,No,MIT and ASL 2.0
+3402,smartmontools,Yes,GPLv2+
+3403,smc-anjalioldlipi-fonts,Yes,GPL+
+3404,smc-dyuthi-fonts,Yes,GPLv3+ with exceptions
+3405,smc-fonts-common,No,GPLv3+ with exceptions and GPLv2+ with exceptions and GPLv2+ and GPLv2 and GPL+
+3406,smc-kalyani-fonts,Yes,GPLv3+ with exceptions
+3407,smc-meera-fonts,Yes,GPLv2+ with exceptions
+3408,smc-rachana-fonts,Yes,GPLv2+
+3409,smc-raghumalayalam-fonts,Yes,GPLv2
+3410,smc-suruma-fonts,Yes,GPLv3 with exceptions
+3411,snapper,Yes,GPLv2
+3412,snapper-libs,No,GPLv2
+3413,snappy,No,BSD
+3414,socat,Yes,GPLv2
+3415,softhsm,No,BSD
+3416,soprano,No,LGPLv2+
+3417,soprano-devel,No,LGPLv2+
+3418,sos,Yes,GPLv2+
+3419,sos-collector,Yes,GPLv2
+3420,sound-theme-freedesktop,No,GPLv2+ and LGPLv2+ and CC-BY-SA and CC-BY
+3421,soundtouch,No,LGPLv2+
+3422,sox,Yes,GPLv2+ and LGPLv2+ and MIT
+3423,spamassassin,Yes,ASL 2.0
+3424,spax,No,CDDL
+3425,speech-dispatcher,No,GPLv2+ and GPLv2
+3426,speech-dispatcher-python,No,GPLv2+
+3427,speex,No,BSD
+3428,spice-glib,No,LGPLv2+
+3429,spice-gtk3,No,LGPLv2+
+3430,spice-protocol,No,BSD and LGPLv2+
+3431,spice-server,No,LGPLv2+
+3432,spice-streaming-agent,Yes,ASL 2.0
+3433,spice-vdagent,Yes,GPLv3+
+3434,spice-xpi,Yes,MPLv1.1 or GPLv2+ or LGPLv2+
+3435,sqlite,No,Public Domain
+3436,sqlite-devel,Yes,Public Domain
+3437,squashfs-tools,Yes,GPLv2+
+3438,squid,Yes,GPLv2+ and (LGPLv2+ and MIT and BSD and Public Domain)
+3439,squid-migration-script,No,GPLv2+ and (LGPLv2+ and MIT and BSD and Public Domain)
+3440,srp_daemon,Yes,GPLv2 or BSD
+3441,sssd,Yes,GPLv3+
+3442,sssd-ad,No,GPLv3+
+3443,sssd-client,Yes,LGPLv3+
+3444,sssd-common,No,GPLv3+
+3445,sssd-common-pac,No,GPLv3+
+3446,sssd-dbus,Yes,GPLv3+
+3447,sssd-ipa,No,GPLv3+
+3448,sssd-kcm,Yes,GPLv3+
+3449,sssd-krb5,No,GPLv3+
+3450,sssd-krb5-common,No,GPLv3+
+3451,sssd-ldap,No,GPLv3+
+3452,sssd-libwbclient,No,GPLv3+ and LGPLv3+
+3453,sssd-polkit-rules,Yes,GPLv3+
+3454,sssd-proxy,No,GPLv3+
+3455,sssd-tools,Yes,GPLv3+
+3456,sssd-winbind-idmap,Yes,GPLv3+ and LGPLv3+
+3457,star,Yes,CDDL
+3458,startup-notification,No,LGPLv2
+3459,startup-notification-devel,Yes,LGPLv2
+3460,stax-ex,No,CDDL or GPLv2
+3461,stax2-api,No,BSD
+3462,stix-fonts,Yes,OFL
+3463,stix-math-fonts,No,OFL
+3464,strace,Yes,LGPL-2.1+ and GPL-2.0+
+3465,strigi-libs,No,LGPLv2+
+3466,strongimcv,Yes,GPLv2+
+3467,stunnel,Yes,GPLv2
+3468,subscription-manager,Yes,GPLv2
+3469,subscription-manager-gui,Yes,GPLv2
+3470,subscription-manager-initial-setup-addon,Yes,GPLv2
+3471,subscription-manager-migration,Yes,GPLv2
+3472,subscription-manager-migration-data,Yes,CC0
+3473,subscription-manager-plugin-container,Yes,GPLv2
+3474,subscription-manager-rhsm,No,GPLv2
+3475,subscription-manager-rhsm-certificates,No,GPLv2
+3476,subversion,Yes,ASL 2.0
+3477,subversion-gnome,Yes,ASL 2.0
+3478,subversion-libs,No,ASL 2.0
+3479,sudo,Yes,ISC
+3480,suitesparse,No,LGPLv2+ and GPLv2+
+3481,supermin-helper,No,GPLv2+
+3482,supermin5,No,GPLv2+
+3483,sushi,Yes,GPLv2+ with exceptions
+3484,svrcore,No,MPL2.0
+3485,sweeper,Yes,LGPLv2+
+3486,swig,Yes,GPLv3+ and BSD
+3487,symlinks,Yes,Copyright only
+3488,sysfsutils,No,GPLv2
+3489,syslinux,Yes,GPLv2+
+3490,syslinux-extlinux,No,GPLv2+
+3491,syslinux-tftpboot,Yes,GPLv2+
+3492,sysstat,Yes,GPLv2+
+3493,system-config-date,Yes,GPLv2+
+3494,system-config-date-docs,No,GPLv2+
+3495,system-config-firewall-base,Yes,GPLv2+
+3496,system-config-kdump,Yes,GPLv2+
+3497,system-config-keyboard,No,GPLv2+
+3498,system-config-keyboard-base,No,GPLv2+
+3499,system-config-kickstart,Yes,GPLv2+
+3500,system-config-language,No,GPLv2+
+3501,system-config-printer,Yes,GPLv2+
+3502,system-config-printer-libs,No,GPLv2+
+3503,system-config-printer-udev,Yes,GPLv2+
+3504,system-config-users,Yes,GPLv2+
+3505,system-config-users-docs,Yes,GPLv2+
+3506,system-storage-manager,Yes,GPLv2+
+3507,system-switch-java,Yes,GPLv2+ and BSD
+3508,systemd,Yes,LGPLv2+ and MIT and GPLv2+
+3509,systemd-devel,Yes,LGPLv2+ and MIT
+3510,systemd-libs,No,LGPLv2+ and MIT
+3511,systemd-python,No,LGPLv2+
+3512,systemd-sysv,No,LGPLv2+
+3513,systemtap,Yes,GPLv2+
+3514,systemtap-client,Yes,GPLv2+
+3515,systemtap-devel,No,GPLv2+
+3516,systemtap-initscript,Yes,GPLv2+
+3517,systemtap-runtime,Yes,GPLv2+
+3518,systemtap-sdt-devel,Yes,GPLv2+ and Public Domain
+3519,systemtap-server,Yes,GPLv2+
+3520,sysvinit-tools,No,GPLv2+
+3521,t1lib,No,LGPLv2+
+3522,taglib,No,LGPLv2
+3523,tagsoup,No,ASL 2.0 and (GPLv2+ or AFL)
+3524,talk,Yes,BSD
+3525,talk-server,Yes,BSD
+3526,tang,Yes,GPLv3+
+3527,tar,Yes,GPLv3+
+3528,targetcli,Yes,ASL 2.0
+3529,targetd,Yes,GPLv3
+3530,tbb,No,GPLv2 with exceptions
+3531,tbb-devel,Yes,GPLv2 with exceptions
+3532,tboot,Yes,BSD
+3533,tcl,No,TCL
+3534,tcl-devel,Yes,TCL
+3535,tcl-pgtcl,Yes,PostgreSQL
+3536,tcp_wrappers,Yes,BSD
+3537,tcp_wrappers-devel,Yes,BSD
+3538,tcp_wrappers-libs,No,BSD
+3539,tcpdump,Yes,BSD with advertising
+3540,tcsh,Yes,BSD
+3541,teamd,Yes,LGPLv2+
+3542,telepathy-farstream,No,LGPLv2+
+3543,telepathy-filesystem,No,Public Domain
+3544,telepathy-gabble,No,LGPLv2+
+3545,telepathy-glib,No,LGPLv2+
+3546,telepathy-haze,No,GPLv2+
+3547,telepathy-logger,No,LGPLv2+
+3548,telepathy-mission-control,No,LGPLv2
+3549,telepathy-salut,No,LGPLv2+
+3550,telnet,Yes,BSD
+3551,telnet-server,Yes,BSD
+3552,tex-fonts-hebrew,Yes,GPL+ and LPPL
+3553,tex-preview,No,GPLv3+ and GFDL
+3554,texinfo,Yes,GPLv3+
+3555,texlive,Yes,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3556,texlive-ae,No,LPPL
+3557,texlive-algorithms,No,LGPLv2+
+3558,texlive-amscls,No,LPPL
+3559,texlive-amsfonts,No,OFSFLD
+3560,texlive-amsmath,No,LPPL
+3561,texlive-anysize,No,Public Domain
+3562,texlive-attachfile,No,LPPL 1.3
+3563,texlive-avantgar,No,GPL+
+3564,texlive-babel,No,LPPL
+3565,texlive-babelbib,No,LPPL
+3566,texlive-base,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3567,texlive-beamer,No,GPL+
+3568,texlive-bera,No,Bitstream vera
+3569,texlive-beton,No,LPPL
+3570,texlive-bibtex,No,Knuth
+3571,texlive-bibtex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3572,texlive-bookman,No,GPL+
+3573,texlive-booktabs,No,GPL+
+3574,texlive-breakurl,No,LPPL
+3575,texlive-caption,No,LPPL 1.3
+3576,texlive-carlisle,No,LPPL
+3577,texlive-charter,No,Copyright only
+3578,texlive-chngcntr,No,LPPL
+3579,texlive-cite,No,Copyright only
+3580,texlive-cm,No,Knuth
+3581,texlive-cm-lgc,Yes,GPL+
+3582,texlive-cm-super,No,GPL+
+3583,texlive-cmap,No,LPPL
+3584,texlive-cmextra,No,LPPL
+3585,texlive-collection-basic,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3586,texlive-collection-documentation-base,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3587,texlive-collection-fontsrecommended,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3588,texlive-collection-htmlxml,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3589,texlive-collection-latex,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3590,texlive-collection-latexrecommended,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3591,texlive-colortbl,No,LPPL
+3592,texlive-courier,No,GPL+
+3593,texlive-crop,No,LPPL
+3594,texlive-csquotes,No,LPPL
+3595,texlive-ctable,No,LPPL
+3596,texlive-currfile,No,LPPL 1.3
+3597,texlive-dvipdfm,No,LPPL
+3598,texlive-dvipdfm-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3599,texlive-dvipdfmx,No,GPL+
+3600,texlive-dvipdfmx-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3601,texlive-dvipdfmx-def,No,LPPL
+3602,texlive-dvipng,No,LGPLv2+
+3603,texlive-dvipng-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3604,texlive-dvips,No,GPL+
+3605,texlive-dvips-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3606,texlive-ec,No,ec
+3607,texlive-enctex,No,GPL+
+3608,texlive-enumitem,No,LPPL
+3609,texlive-eso-pic,No,LPPL 1.2
+3610,texlive-etex,No,Knuth
+3611,texlive-etex-pkg,No,LPPL
+3612,texlive-etoolbox,No,LPPL 1.3
+3613,texlive-euler,No,LPPL
+3614,texlive-euro,No,LPPL
+3615,texlive-eurosym,No,Eurosym
+3616,texlive-extsizes,No,LPPL
+3617,texlive-fancybox,No,LPPL 1.2
+3618,texlive-fancyhdr,No,LPPL
+3619,texlive-fancyref,No,GPL+
+3620,texlive-fancyvrb,No,LPPL
+3621,texlive-filecontents,No,LPPL
+3622,texlive-filehook,No,LPPL 1.3
+3623,texlive-fix2col,No,LPPL
+3624,texlive-float,No,LPPL
+3625,texlive-fontspec,No,LPPL 1.3
+3626,texlive-footmisc,No,LPPL 1.3
+3627,texlive-fp,No,LPPL
+3628,texlive-fpl,No,GPL+
+3629,texlive-geometry,No,LPPL
+3630,texlive-glyphlist,No,LPPL
+3631,texlive-graphics,No,LPPL
+3632,texlive-gsftopk,No,GPL+
+3633,texlive-gsftopk-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3634,texlive-helvetic,No,GPL+
+3635,texlive-hyperref,No,LPPL
+3636,texlive-hyph-utf8,No,Copyright only
+3637,texlive-hyphen-base,No,LPPL
+3638,texlive-ifetex,No,LPPL 1.3
+3639,texlive-ifluatex,No,LPPL 1.3
+3640,texlive-ifxetex,No,LPPL
+3641,texlive-index,No,LPPL
+3642,texlive-jadetex,No,MIT
+3643,texlive-jadetex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3644,texlive-jknapltx,No,GPL+
+3645,texlive-kastrup,No,LPPL
+3646,texlive-kerkis,Yes,LPPL
+3647,texlive-koma-script,No,LPPL
+3648,texlive-kpathsea,No,LGPLv2+
+3649,texlive-kpathsea-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3650,texlive-kpathsea-lib,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3651,texlive-l3experimental,No,LPPL 1.3
+3652,texlive-l3kernel,No,LPPL 1.3
+3653,texlive-l3packages,No,LPPL 1.3
+3654,texlive-latex,Yes,LPPL
+3655,texlive-latex-bin,No,LPPL
+3656,texlive-latex-bin-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3657,texlive-latex-fonts,No,LPPL
+3658,texlive-latexconfig,No,LPPL
+3659,texlive-listings,No,LPPL
+3660,texlive-lm,No,GFSL
+3661,texlive-lm-math,No,LPPL
+3662,texlive-ltxmisc,No,Public Domain
+3663,texlive-lua-alt-getopt,No,MIT
+3664,texlive-lualatex-math,No,LPPL 1.3
+3665,texlive-luaotfload,No,GPLv2+
+3666,texlive-luaotfload-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3667,texlive-luatex,No,GPLv2+
+3668,texlive-luatex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3669,texlive-luatexbase,No,Public Domain
+3670,texlive-makeindex,No,MakeIndex
+3671,texlive-makeindex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3672,texlive-marginnote,No,LPPL
+3673,texlive-marvosym,No,OFSFLD
+3674,texlive-mathpazo,No,GPL+
+3675,texlive-mdwtools,No,GPL+
+3676,texlive-memoir,No,LPPL
+3677,texlive-metafont,No,Knuth
+3678,texlive-metafont-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3679,texlive-metalogo,No,LPPL
+3680,texlive-mflogo,No,LPPL
+3681,texlive-mfnfss,No,LPPL
+3682,texlive-mfware,No,Knuth
+3683,texlive-mfware-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3684,texlive-mh,No,LPPL 1.3
+3685,texlive-microtype,No,LPPL
+3686,texlive-misc,No,LPPL
+3687,texlive-mparhack,No,GPL+
+3688,texlive-mptopdf,No,LPPL
+3689,texlive-mptopdf-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3690,texlive-ms,No,LPPL
+3691,texlive-multido,No,LPPL
+3692,texlive-natbib,No,LPPL
+3693,texlive-ncntrsbk,No,GPL+
+3694,texlive-ntgclass,No,LPPL
+3695,texlive-oberdiek,No,LPPL
+3696,texlive-palatino,No,GPL+
+3697,texlive-paralist,No,LPPL
+3698,texlive-parallel,No,LPPL
+3699,texlive-parskip,No,LPPL
+3700,texlive-passivetex,No,MIT
+3701,texlive-pdfpages,No,LPPL
+3702,texlive-pdftex,No,GPL+
+3703,texlive-pdftex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3704,texlive-pdftex-def,No,LPPL 1.3
+3705,texlive-pgf,No,LPPL 1.3
+3706,texlive-plain,No,LPPL
+3707,texlive-powerdot,No,LPPL 1.3
+3708,texlive-psfrag,No,psfrag
+3709,texlive-pslatex,No,LPPL
+3710,texlive-psnfss,No,LPPL
+3711,texlive-pspicture,No,LPPL
+3712,texlive-pst-3d,No,LPPL
+3713,texlive-pst-blur,No,LPPL
+3714,texlive-pst-coil,No,LPPL
+3715,texlive-pst-eps,No,LPPL
+3716,texlive-pst-fill,No,LPPL
+3717,texlive-pst-grad,No,LPPL
+3718,texlive-pst-math,No,LPPL
+3719,texlive-pst-node,No,LPPL
+3720,texlive-pst-plot,No,LPPL
+3721,texlive-pst-slpe,No,LPPL
+3722,texlive-pst-text,No,LPPL
+3723,texlive-pst-tree,No,LPPL
+3724,texlive-pstricks,No,LPPL 1.3
+3725,texlive-pstricks-add,No,LPPL
+3726,texlive-pxfonts,No,GPL+
+3727,texlive-qstest,No,LPPL
+3728,texlive-rcs,No,GPL+
+3729,texlive-rotating,No,LPPL
+3730,texlive-rsfs,No,rsfs
+3731,texlive-sansmath,No,Public Domain
+3732,texlive-sauerj,No,LPPL
+3733,texlive-scheme-basic,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3734,texlive-section,No,LPPL
+3735,texlive-seminar,No,LPPL 1.2
+3736,texlive-sepnum,No,LPPL
+3737,texlive-setspace,No,Copyright only
+3738,texlive-showexpl,No,LPPL
+3739,texlive-soul,No,LPPL
+3740,texlive-subfig,No,LPPL
+3741,texlive-symbol,No,GPL+
+3742,texlive-tetex,No,GPL+ and GPLv2+ and LPPL
+3743,texlive-tetex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3744,texlive-tex,No,Knuth
+3745,texlive-tex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3746,texlive-tex-gyre,No,GFSL
+3747,texlive-tex-gyre-math,No,LPPL
+3748,texlive-tex4ht,No,LPPL
+3749,texlive-tex4ht-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3750,texlive-texconfig,No,LPPL
+3751,texlive-texconfig-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3752,texlive-texlive.infra,No,LPPL
+3753,texlive-texlive.infra-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3754,texlive-textcase,No,LPPL
+3755,texlive-thumbpdf,No,LPPL
+3756,texlive-thumbpdf-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3757,texlive-times,No,GPL+
+3758,texlive-tipa,No,LPPL
+3759,texlive-tools,No,LPPL
+3760,texlive-txfonts,No,GPL+
+3761,texlive-type1cm,No,LPPL
+3762,texlive-typehtml,No,LPPL
+3763,texlive-ucs,No,LPPL 1.3
+3764,texlive-ulem,No,Copyright only
+3765,texlive-underscore,No,LPPL
+3766,texlive-unicode-math,No,LPPL 1.3
+3767,texlive-url,No,LPPL
+3768,texlive-utopia,No,Utopia
+3769,texlive-varwidth,No,LPPL
+3770,texlive-wasy,No,Public Domain
+3771,texlive-wasysym,No,LPPL
+3772,texlive-xcolor,No,LPPL
+3773,texlive-xdvi,No,MIT
+3774,texlive-xdvi-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3775,texlive-xkeyval,No,LPPL
+3776,texlive-xmltex,No,LPPL
+3777,texlive-xmltex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3778,texlive-xunicode,No,LPPL 1.3
+3779,texlive-zapfchan,No,GPL+
+3780,texlive-zapfding,No,GPL+
+3781,tftp,Yes,BSD
+3782,tftp-server,Yes,BSD
+3783,thai-scalable-fonts-common,No,GPLv2+ and Bitstream Vera
+3784,thai-scalable-garuda-fonts,Yes,GPLv2+ and Bitstream Vera
+3785,thai-scalable-kinnari-fonts,Yes,GPLv2+ and Bitstream Vera
+3786,thai-scalable-loma-fonts,Yes,GPLv2+ and Bitstream Vera
+3787,thai-scalable-norasi-fonts,Yes,GPLv2+ and Bitstream Vera
+3788,thai-scalable-purisa-fonts,Yes,GPLv2+ and Bitstream Vera
+3789,thai-scalable-sawasdee-fonts,Yes,GPLv2+ and Bitstream Vera
+3790,thai-scalable-tlwgmono-fonts,Yes,GPLv2+ and Bitstream Vera
+3791,thai-scalable-tlwgtypewriter-fonts,Yes,GPLv2+ and Bitstream Vera
+3792,thai-scalable-tlwgtypist-fonts,Yes,GPLv2+ and Bitstream Vera
+3793,thai-scalable-tlwgtypo-fonts,Yes,GPLv2+ and Bitstream Vera
+3794,thai-scalable-umpush-fonts,Yes,GPLv2+ and Bitstream Vera
+3795,thai-scalable-waree-fonts,Yes,GPLv2+ and Bitstream Vera
+3796,theora-tools,No,BSD
+3797,thunderbird,Yes,MPLv1.1 or GPLv2+ or LGPLv2+
+3798,tibetan-machine-uni-fonts,Yes,GPLv3+ with exceptions
+3799,tigervnc,Yes,GPLv2+
+3800,tigervnc-icons,No,GPLv2+
+3801,tigervnc-license,No,GPLv2+
+3802,tigervnc-server,Yes,GPLv2+
+3803,tigervnc-server-minimal,No,GPLv2+
+3804,time,Yes,GPLv2+
+3805,tk,No,TCL
+3806,tk-devel,Yes,TCL
+3807,tmpwatch,Yes,GPLv2
+3808,tmux,Yes,ISC and BSD
+3809,tn5250,Yes,LGPLv2+
+3810,tncfhh,Yes,GPLv2
+3811,tncfhh-libs,No,GPLv2
+3812,tncfhh-utils,No,GPLv2
+3813,tog-pegasus,Yes,MIT
+3814,tog-pegasus-libs,No,MIT
+3815,tokyocabinet,No,LGPLv2+
+3816,tomcat,Yes,ASL 2.0
+3817,tomcat-admin-webapps,Yes,ASL 2.0
+3818,tomcat-el-2.2-api,No,ASL 2.0
+3819,tomcat-jsp-2.2-api,No,ASL 2.0
+3820,tomcat-lib,No,ASL 2.0
+3821,tomcat-servlet-3.0-api,No,ASL 2.0
+3822,tomcat-webapps,Yes,ASL 2.0
+3823,tomcatjss,No,LGPLv2+
+3824,totem,Yes,GPLv2+ with exceptions
+3825,totem-nautilus,Yes,GPLv2+ with exceptions
+3826,totem-pl-parser,No,LGPLv2+
+3827,tpm-quote-tools,Yes,BSD
+3828,tpm-tools,Yes,CPL
+3829,tpm2-abrmd,No,BSD
+3830,tpm2-tools,Yes,BSD
+3831,tpm2-tss,No,BSD and TCGL
+3832,tpm2-tss-devel,No,BSD and TCGL
+3833,trace-cmd,Yes,GPLv2 and LGPLv2+
+3834,traceroute,Yes,GPLv2+
+3835,tracker,No,GPLv2+
+3836,tree,Yes,GPLv2+
+3837,trousers,Yes,BSD
+3838,ttmkfdir,No,LGPLv2+
+3839,tuna,Yes,GPLv2
+3840,tuned,Yes,GPLv2+
+3841,tuned-profiles-cpu-partitioning,Yes,GPLv2+
+3842,tuned-utils,Yes,GPLv2+
+3843,txw2,No,CDDL and GPLv2 with exceptions
+3844,tzdata,No,Public Domain
+3845,tzdata-java,No,Public Domain
+3846,ucs-miscfixed-fonts,Yes,Public Domain
+3847,ucx,No,BSD
+3848,udftools,Yes,GPLv2+
+3849,udisks2,No,GPLv2+
+3850,udisks2-iscsi,Yes,LGPLv2+
+3851,udisks2-lsm,No,LGPLv2+
+3852,udisks2-lvm2,Yes,LGPLv2+
+3853,unbound,Yes,BSD
+3854,unbound-libs,No,BSD
+3855,unique3,No,LGPLv2+
+3856,unique3-devel,Yes,LGPLv2+
+3857,unit-api,No,BSD
+3858,units,Yes,GPLv3+
+3859,unixODBC,No,GPLv2+ and LGPLv2+
+3860,unixODBC-devel,Yes,GPLv2+ and LGPLv2+
+3861,unoconv,Yes,GPLv2
+3862,unzip,Yes,BSD
+3863,uom-lib,No,BSD
+3864,uom-se,No,BSD
+3865,uom-systems,No,BSD
+3866,upower,No,GPLv2+
+3867,urlview,No,GPLv2+
+3868,urw-base35-bookman-fonts,No,AGPLv3
+3869,urw-base35-c059-fonts,No,AGPLv3
+3870,urw-base35-d050000l-fonts,No,AGPLv3
+3871,urw-base35-fonts,No,AGPLv3
+3872,urw-base35-fonts-common,No,AGPLv3
+3873,urw-base35-gothic-fonts,No,AGPLv3
+3874,urw-base35-nimbus-mono-ps-fonts,No,AGPLv3
+3875,urw-base35-nimbus-roman-fonts,No,AGPLv3
+3876,urw-base35-nimbus-sans-fonts,No,AGPLv3
+3877,urw-base35-p052-fonts,No,AGPLv3
+3878,urw-base35-standard-symbols-ps-fonts,No,AGPLv3
+3879,urw-base35-z003-fonts,No,AGPLv3
+3880,urw-fonts,No,GPL+
+3881,usb_modeswitch,Yes,GPLv2+
+3882,usb_modeswitch-data,Yes,GPLv2+
+3883,usbguard,Yes,GPLv2+
+3884,usbmuxd,No,GPLv3+ or GPLv2+
+3885,usbredir,No,LGPLv2+
+3886,usbutils,Yes,GPLv2+
+3887,usermode,No,GPLv2+
+3888,usermode-gtk,No,GPLv2+
+3889,usnic-tools,Yes,GPLv2 or BSD
+3890,ustr,No,MIT or LGPLv2+ or BSD
+3891,util-linux,Yes,GPLv2 and GPLv2+ and LGPLv2+ and BSD with advertising and Public Domain
+3892,uuid,No,MIT
+3893,uuidd,Yes,GPLv2
+3894,valgrind,Yes,GPLv2+
+3895,vdo,Yes,GPLv2
+3896,velocity,No,ASL 2.0
+3897,vemana2000-fonts,Yes,GPLv2+ with exceptions
+3898,vim-common,No,Vim
+3899,vim-enhanced,Yes,Vim
+3900,vim-filesystem,No,Vim
+3901,vim-minimal,Yes,Vim
+3902,vim-X11,Yes,Vim
+3903,vinagre,Yes,GPLv2+
+3904,vino,Yes,GPLv2+
+3905,virt-install,Yes,GPLv2+
+3906,virt-manager,Yes,GPLv2+
+3907,virt-manager-common,No,GPLv2+
+3908,virt-top,Yes,GPLv2+
+3909,virt-viewer,Yes,GPLv2+
+3910,virt-what,Yes,GPLv2+
+3911,virt-who,Yes,GPLv2+
+3912,virtuoso-opensource,No,GPLv2 with exceptions
+3913,vlgothic-fonts,Yes,mplus and BSD
+3914,vlgothic-p-fonts,Yes,mplus and BSD
+3915,volume_key,Yes,GPLv2 and (MPLv1.1 or GPLv2 or LGPLv2)
+3916,volume_key-libs,No,GPLv2 and (MPLv1.1 or GPLv2 or LGPLv2)
+3917,vorbis-tools,No,GPLv2
+3918,vsftpd,Yes,GPLv2 with exceptions
+3919,vte-profile,No,GPLv3+
+3920,vte291,No,LGPLv2+
+3921,vte3,No,LGPLv2+
+3922,watchdog,Yes,GPLv2+
+3923,wavpack,No,BSD
+3924,wayland-devel,No,MIT
+3925,wayland-protocols-devel,Yes,MIT
+3926,webkitgtk3,No,LGPLv2+ and BSD
+3927,webkitgtk4,No,LGPLv2
+3928,webkitgtk4-devel,No,LGPLv2
+3929,webkitgtk4-jsc,No,LGPLv2
+3930,webkitgtk4-jsc-devel,No,LGPLv2
+3931,webrtc-audio-processing,No,BSD
+3932,wget,Yes,GPLv3+
+3933,which,Yes,GPLv3
+3934,whois,Yes,GPLv2+
+3935,wireshark,Yes,GPL+
+3936,wireshark-gnome,Yes,GPL+
+3937,wodim,Yes,GPLv2
+3938,words,Yes,Public Domain
+3939,wpa_supplicant,No,BSD
+3940,wqy-microhei-fonts,Yes,ASL 2.0 or GPLv3 with exceptions
+3941,wqy-unibit-fonts,No,GPLv2 with exceptions
+3942,wqy-zenhei-fonts,Yes,GPLv2 with exceptions
+3943,ws-jaxme,No,ASL 2.0
+3944,wsmancli,Yes,BSD
+3945,wvdial,Yes,LGPLv2+
+3946,x3270,No,BSD
+3947,x3270-text,Yes,BSD
+3948,x3270-x11,Yes,BSD
+3949,x86info,Yes,GPLv2
+3950,xalan-j2,No,ASL 2.0 and W3C
+3951,xcb-util,No,MIT
+3952,xcb-util-image,No,MIT
+3953,xcb-util-keysyms,No,MIT
+3954,xcb-util-renderutil,No,MIT
+3955,xcb-util-wm,No,MIT
+3956,xchat,Yes,GPLv2+
+3957,xdelta,Yes,GPLv2
+3958,xdg-desktop-portal,No,LGPLv2+
+3959,xdg-desktop-portal-gtk,Yes,LGPLv2+
+3960,xdg-user-dirs,No,GPLv2+ and MIT
+3961,xdg-user-dirs-gtk,Yes,GPL+
+3962,xdg-utils,No,MIT
+3963,xerces-c,No,ASL 2.0
+3964,xerces-j2,No,ASL 2.0
+3965,xferstats,Yes,GPLv2+
+3966,xfsdump,Yes,GPL+
+3967,xfsprogs,Yes,GPL+ and LGPLv2+
+3968,xguest,Yes,GPLv2+
+3969,xinetd,Yes,xinetd
+3970,xkeyboard-config,No,MIT
+3971,xml-common,No,GPL+
+3972,xml-commons-apis,No,ASL 2.0 and W3C and Public Domain
+3973,xml-commons-resolver,No,ASL 2.0
+3974,xmlrpc-c,No,BSD and MIT and GPL+ and Public Domain
+3975,xmlrpc-c-client,No,BSD and MIT and GPL+ and Public Domain
+3976,xmlsec1,No,MIT
+3977,xmlsec1-openssl,No,MIT
+3978,xmlto,Yes,GPLv2+
+3979,xmlto-tex,Yes,GPLv2+
+3980,xmltoman,Yes,GPLv2+
+3981,xorg-x11-apps,Yes,MIT
+3982,xorg-x11-docs,Yes,MIT
+3983,xorg-x11-drivers,Yes,MIT
+3984,xorg-x11-drv-ati,No,MIT
+3985,xorg-x11-drv-dummy,No,MIT
+3986,xorg-x11-drv-evdev,Yes,MIT
+3987,xorg-x11-drv-fbdev,No,MIT
+3988,xorg-x11-drv-intel,No,MIT
+3989,xorg-x11-drv-keyboard,Yes,MIT
+3990,xorg-x11-drv-libinput,Yes,MIT
+3991,xorg-x11-drv-mouse,Yes,MIT
+3992,xorg-x11-drv-nouveau,No,MIT
+3993,xorg-x11-drv-openchrome,Yes,MIT
+3994,xorg-x11-drv-qxl,No,MIT
+3995,xorg-x11-drv-synaptics,No,MIT
+3996,xorg-x11-drv-v4l,No,MIT
+3997,xorg-x11-drv-vesa,No,MIT
+3998,xorg-x11-drv-vmmouse,No,MIT
+3999,xorg-x11-drv-vmware,No,MIT
+4000,xorg-x11-drv-void,No,MIT
+4001,xorg-x11-drv-wacom,No,GPLv2+
+4002,xorg-x11-font-utils,No,MIT
+4003,xorg-x11-fonts-100dpi,Yes,MIT and Lucida and Public Domain
+4004,xorg-x11-fonts-75dpi,Yes,MIT and Lucida and Public Domain
+4005,xorg-x11-fonts-cyrillic,Yes,MIT and Lucida and Public Domain
+4006,xorg-x11-fonts-ethiopic,Yes,MIT and Lucida and Public Domain
+4007,xorg-x11-fonts-ISO8859-1-100dpi,Yes,MIT and Lucida and Public Domain
+4008,xorg-x11-fonts-ISO8859-1-75dpi,Yes,MIT and Lucida and Public Domain
+4009,xorg-x11-fonts-ISO8859-14-100dpi,Yes,MIT and Lucida and Public Domain
+4010,xorg-x11-fonts-ISO8859-14-75dpi,Yes,MIT and Lucida and Public Domain
+4011,xorg-x11-fonts-ISO8859-15-75dpi,Yes,MIT and Lucida and Public Domain
+4012,xorg-x11-fonts-ISO8859-2-100dpi,Yes,MIT and Lucida and Public Domain
+4013,xorg-x11-fonts-ISO8859-2-75dpi,Yes,MIT and Lucida and Public Domain
+4014,xorg-x11-fonts-ISO8859-9-100dpi,Yes,MIT and Lucida and Public Domain
+4015,xorg-x11-fonts-ISO8859-9-75dpi,Yes,MIT and Lucida and Public Domain
+4016,xorg-x11-fonts-misc,Yes,MIT and Lucida and Public Domain
+4017,xorg-x11-fonts-Type1,Yes,MIT and Lucida and Public Domain
+4018,xorg-x11-proto-devel,Yes,MIT
+4019,xorg-x11-server-common,No,MIT
+4020,xorg-x11-server-utils,No,MIT
+4021,xorg-x11-server-Xephyr,No,MIT
+4022,xorg-x11-server-Xorg,Yes,MIT
+4023,xorg-x11-utils,Yes,MIT
+4024,xorg-x11-xauth,Yes,MIT
+4025,xorg-x11-xbitmaps,No,MIT
+4026,xorg-x11-xinit,Yes,MIT
+4027,xorg-x11-xkb-utils,No,MIT
+4028,xorriso,No,GPLv3+
+4029,xpp3,No,ASL 1.1
+4030,xrestop,Yes,GPLv2+
+4031,xsane-common,No,GPLv2+
+4032,xsane-gimp,Yes,GPLv2+
+4033,xsettings-kde,Yes,GPLv2+
+4034,xsom,No,CDDL or GPLv2 with exceptions
+4035,xterm,Yes,MIT
+4036,xulrunner,No,MPLv1.1 or GPLv2+ or LGPLv2+
+4037,xvattr,Yes,GPLv2+
+4038,xz,Yes,LGPLv2+
+4039,xz-devel,Yes,LGPLv2+
+4040,xz-libs,No,LGPLv2+
+4041,yajl,No,ISC
+4042,yelp,Yes,GPLv2+
+4043,yelp-libs,No,GPLv2+
+4044,yelp-tools,No,GPLv2+
+4045,yelp-xsl,No,LGPLv2+ and GPLv2+
+4046,yp-tools,No,GPLv2
+4047,ypbind,No,GPLv2
+4048,ypserv,No,GPLv2
+4049,yum,Yes,GPLv2+
+4050,yum-cron,No,GPLv2+
+4051,yum-langpacks,Yes,GPLv2+
+4052,yum-metadata-parser,No,GPLv2
+4053,yum-plugin-aliases,Yes,GPLv2+
+4054,yum-plugin-changelog,Yes,GPLv2+
+4055,yum-plugin-ovl,No,GPLv2+
+4056,yum-plugin-tmprepo,Yes,GPLv2+
+4057,yum-plugin-verify,Yes,GPLv2+
+4058,yum-plugin-versionlock,Yes,GPLv2+
+4059,yum-rhn-plugin,Yes,GPLv2
+4060,yum-utils,Yes,GPLv2+
+4061,zenity,No,LGPLv2+
+4062,zip,Yes,BSD
+4063,zlib,No,zlib and Boost
+4064,zlib-devel,Yes,zlib and Boost
+4065,zsh,Yes,MIT
+4066,zziplib,No,LGPLv2+ or MPLv1.1
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/table-4.csv b/tools/redhat_package_manifest_scraper/data/redhat7/table-4.csv
new file mode 100644
index 0000000..0b8e694
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/table-4.csv
@@ -0,0 +1,3319 @@
+,Package,Core package?,License
+0,abattis-cantarell-fonts,No,OFL
+1,abrt,No,GPLv2+
+2,abrt-addon-ccpp,Yes,GPLv2+
+3,abrt-addon-kerneloops,No,GPLv2+
+4,abrt-addon-pstoreoops,No,GPLv2+
+5,abrt-addon-python,Yes,GPLv2+
+6,abrt-addon-vmcore,No,GPLv2+
+7,abrt-addon-xorg,No,GPLv2+
+8,abrt-cli,Yes,GPLv2+
+9,abrt-console-notification,Yes,GPLv2+
+10,abrt-dbus,No,GPLv2+
+11,abrt-desktop,Yes,GPLv2+
+12,abrt-gui,Yes,GPLv2+
+13,abrt-gui-libs,No,GPLv2+
+14,abrt-java-connector,Yes,GPLv2+
+15,abrt-libs,No,GPLv2+
+16,abrt-python,No,GPLv2+
+17,abrt-tui,No,GPLv2+
+18,accountsservice,No,GPLv3+
+19,accountsservice-libs,No,GPLv3+
+20,acl,Yes,GPLv2+
+21,acpid,Yes,GPLv2+
+22,adcli,Yes,LGPLv2+
+23,adobe-mappings-cmap,No,BSD
+24,adobe-mappings-cmap-deprecated,No,BSD
+25,adobe-mappings-pdf,No,BSD
+26,adwaita-cursor-theme,No,LGPLv3+ or CC-BY-SA
+27,adwaita-gtk2-theme,No,LGPLv2+
+28,adwaita-icon-theme,No,LGPLv3+ or CC-BY-SA
+29,adwaita-qt,No,LGPLv2+
+30,adwaita-qt4,No,LGPLv2+
+31,adwaita-qt5,No,LGPLv2+
+32,aic94xx-firmware,Yes,"Redistributable, no modification permitted"
+33,aide,Yes,GPLv2+
+34,akonadi,Yes,LGPLv2+
+35,akonadi-mysql,Yes,LGPLv2+
+36,alacarte,Yes,LGPLv2+
+37,alsa-firmware,Yes,GPL+ and BSD and GPLv2+ and GPLv2 and LGPLv2+
+38,alsa-lib,No,LGPLv2+
+39,alsa-plugins-pulseaudio,Yes,LGPLv2+
+40,alsa-tools-firmware,No,GPLv2+
+41,alsa-utils,Yes,GPLv2+
+42,amanda,No,BSD and GPLv3+ and GPLv2+ and GPLv2
+43,amanda-client,Yes,BSD and GPLv3+ and GPLv2+ and GPLv2
+44,amanda-libs,No,BSD and GPLv3+ and GPLv2+ and GPLv2
+45,anaconda,No,GPLv2+ and MIT
+46,anaconda-core,No,GPLv2+ and MIT
+47,anaconda-gui,No,GPLv2+ and MIT
+48,anaconda-tui,No,GPLv2+ and MIT
+49,anaconda-user-help,No,CC-BY-SA
+50,anaconda-widgets,No,GPLv2+ and MIT
+51,apache-commons-codec,No,ASL 2.0
+52,apache-commons-io,No,ASL 2.0
+53,apache-commons-lang,No,ASL 2.0
+54,apache-commons-logging,No,ASL 2.0
+55,appstream-data,No,CC0 and CC-BY and CC-BY-SA and GFDL
+56,apr,No,ASL 2.0 and BSD with advertising and ISC and BSD
+57,apr-util,No,ASL 2.0
+58,ark,Yes,GPLv2+
+59,ark-libs,No,BSD and GPLv2+
+60,arptables,Yes,GPLv2+
+61,arpwatch,Yes,BSD with advertising
+62,at,Yes,GPLv3+ and GPLv2+ and ISC and MIT and Public Domain
+63,at-spi2-atk,Yes,LGPLv2+
+64,at-spi2-core,Yes,LGPLv2+
+65,atk,No,LGPLv2+
+66,atkmm,No,LGPLv2+
+67,atlas,No,BSD
+68,atlas-sse2,No,BSD
+69,atlas-sse3,No,BSD
+70,attica,No,LGPLv2+
+71,attr,Yes,GPLv2+
+72,audispd-plugins,Yes,GPLv2+
+73,audit,Yes,GPLv2+
+74,audit-libs,No,LGPLv2+
+75,audit-libs-python,No,LGPLv2+
+76,augeas,Yes,LGPLv2+
+77,augeas-libs,No,LGPLv2+
+78,authconfig,No,GPLv2+
+79,authconfig-gtk,No,GPLv2+
+80,authd,Yes,GPLv2+
+81,autocorr-af,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+82,autocorr-bg,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+83,autocorr-ca,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+84,autocorr-cs,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+85,autocorr-da,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+86,autocorr-de,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+87,autocorr-en,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+88,autocorr-es,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+89,autocorr-fa,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+90,autocorr-fi,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+91,autocorr-fr,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+92,autocorr-ga,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+93,autocorr-hr,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+94,autocorr-hu,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+95,autocorr-is,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+96,autocorr-it,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+97,autocorr-ja,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+98,autocorr-ko,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+99,autocorr-lb,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+100,autocorr-lt,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+101,autocorr-mn,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+102,autocorr-nl,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+103,autocorr-pl,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+104,autocorr-pt,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+105,autocorr-ro,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+106,autocorr-ru,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+107,autocorr-sk,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+108,autocorr-sl,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+109,autocorr-sr,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+110,autocorr-sv,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+111,autocorr-tr,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+112,autocorr-vi,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+113,autocorr-zh,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+114,autofs,Yes,GPLv2+
+115,autogen-libopts,No,LGPLv3+
+116,avahi,Yes,LGPLv2+
+117,avahi-autoipd,No,LGPLv2+
+118,avahi-glib,No,LGPLv2+
+119,avahi-gobject,No,LGPLv2+
+120,avahi-libs,No,LGPLv2+
+121,avahi-ui-gtk3,No,LGPLv2+
+122,avalon-framework,No,ASL 2.0
+123,avalon-logkit,No,ASL 2.0
+124,babl,No,LGPLv3+ and GPLv3+
+125,bacula-client,Yes,AGPLv3 with exceptions
+126,bacula-common,No,AGPLv3 with exceptions
+127,bacula-libs,No,AGPLv3 with exceptions
+128,baobab,Yes,GPLv2+ and GFDL
+129,basesystem,Yes,Public Domain
+130,bash,Yes,GPLv3+
+131,bash-completion,Yes,GPLv2+
+132,bc,Yes,GPLv2+
+133,bcc,Yes,ASL 2.0
+134,bcc-tools,No,ASL 2.0
+135,bea-stax-api,No,ASL 1.1 and ASL 2.0
+136,bind-export-libs,No,MPLv2.0
+137,bind-libs,No,MPLv2.0
+138,bind-libs-lite,No,MPLv2.0
+139,bind-license,No,MPLv2.0
+140,bind-utils,Yes,MPLv2.0
+141,binutils,No,GPLv3+
+142,biosdevname,Yes,GPLv2
+143,bitmap-fixed-fonts,Yes,GPLv2
+144,bitmap-lucida-typewriter-fonts,Yes,Lucida
+145,blas,No,BSD
+146,blivet3-data,No,LGPLv2+
+147,blktrace,Yes,GPLv2+
+148,bltk,Yes,BSD
+149,bluedevil,Yes,GPLv2+
+150,bluez,No,GPLv2+
+151,bluez-libs,No,GPLv2+
+152,bolt,No,LGPLv2+
+153,boost-date-time,No,Boost and MIT and Python
+154,boost-filesystem,No,Boost and MIT and Python
+155,boost-iostreams,No,Boost and MIT and Python
+156,boost-program-options,No,Boost and MIT and Python
+157,boost-random,No,Boost and MIT and Python
+158,boost-regex,No,Boost and MIT and Python
+159,boost-signals,No,Boost and MIT and Python
+160,boost-system,No,Boost and MIT and Python
+161,boost-thread,No,Boost and MIT and Python
+162,bpftool,Yes,GPLv2
+163,bpg-chveulebrivi-fonts,Yes,GPL+ with exceptions
+164,bpg-courier-fonts,Yes,GPL+ with exceptions
+165,bpg-fonts-common,No,GPL+ with exceptions
+166,bpg-glaho-fonts,Yes,GPL+ with exceptions
+167,brasero,Yes,GPLv3+
+168,brasero-libs,No,GPLv3+
+169,brasero-nautilus,Yes,GPLv3+
+170,bridge-utils,Yes,GPLv2+
+171,brlapi,No,LGPLv2+
+172,brltty,Yes,GPLv2+
+173,btrfs-progs,Yes,GPLv2
+174,bzip2,Yes,BSD
+175,bzip2-libs,No,BSD
+176,c-ares,No,MIT
+177,ca-certificates,No,Public Domain
+178,cachefilesd,Yes,GPLv2+
+179,cairo,No,LGPLv2 or MPLv1.1
+180,cairo-gobject,No,LGPLv2 or MPLv1.1
+181,cairomm,No,LGPLv2+
+182,cal10n,No,MIT
+183,caribou,Yes,LGPLv2+
+184,caribou-gtk2-module,Yes,LGPLv2+
+185,caribou-gtk3-module,Yes,LGPLv2+
+186,cdparanoia,No,GPLv2 and LGPLv2
+187,cdparanoia-libs,No,LGPLv2
+188,cdrdao,No,GPLv2+
+189,celt051,No,BSD
+190,ceph-common,Yes,GPLv2
+191,certmonger,Yes,GPLv3+
+192,cgdcbxd,Yes,GPLv2
+193,check,No,LGPLv2+
+194,checkpolicy,No,GPLv2
+195,cheese,Yes,GPLv2+
+196,cheese-libs,No,GPLv2+
+197,chkconfig,Yes,GPLv2
+198,chrome-gnome-shell,No,GPLv3+
+199,chrony,Yes,GPLv2
+200,cifs-utils,Yes,GPLv3
+201,cim-schema,No,DMTF
+202,cjkuni-ukai-fonts,Yes,Arphic
+203,cjkuni-uming-fonts,Yes,Arphic
+204,clevis,No,GPLv3+
+205,clevis-dracut,Yes,GPLv3+
+206,clevis-luks,No,GPLv3+
+207,clevis-systemd,No,GPLv3+
+208,clevis-udisks2,Yes,GPLv3+
+209,clucene-contribs-lib,No,LGPLv2+ or ASL 2.0
+210,clucene-core,No,LGPLv2+ or ASL 2.0
+211,clutter,No,LGPLv2+
+212,clutter-gst2,No,LGPLv2+
+213,clutter-gst3,No,LGPLv2+
+214,clutter-gtk,No,LGPLv2+
+215,cmpi-bindings-pywbem,No,BSD
+216,cockpit,Yes,LGPLv2+
+217,cockpit-bridge,No,LGPLv2+
+218,cockpit-system,No,LGPLv2+
+219,cockpit-ws,No,LGPLv2+
+220,cogl,No,LGPLv2+
+221,color-filesystem,No,Public Domain
+222,colord,Yes,GPLv2+ and LGPLv2+
+223,colord-gtk,No,LGPLv2+
+224,colord-kde,Yes,GPLv2+
+225,colord-libs,No,GPLv2+ and LGPLv2+
+226,compat-cheese314,Yes,GPLv2+
+227,compat-db-headers,No,BSD
+228,compat-db47,Yes,BSD
+229,compat-exiv2-023,Yes,GPLv2+
+230,compat-exiv2-026,No,GPLv2+
+231,compat-glade315,No,GPLv2+ and LGPLv2+
+232,compat-glibc,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+233,compat-glibc-headers,No,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+234,compat-gnome-desktop314,No,GPLv2+ and LGPLv2+
+235,compat-grilo02,No,LGPLv2+
+236,compat-libcap1,Yes,BSD-like and LGPL
+237,compat-libcogl-pango12,No,LGPLv2+
+238,compat-libcogl12,No,LGPLv2+
+239,compat-libcolord1,No,GPLv2+ and LGPLv2+
+240,compat-libf2c-34,Yes,GPLv2+ and GPLv2+ with exceptions
+241,compat-libgdata13,No,LGPLv2+
+242,compat-libgfortran-41,Yes,GPLv2+ with exceptions
+243,compat-libgnome-bluetooth11,No,LGPLv2+
+244,compat-libgnome-desktop3-7,No,GPLv2+ and LGPLv2+
+245,compat-libgweather3,No,GPLv2+
+246,compat-libical1,No,LGPLv2 or MPLv1.1
+247,compat-libmediaart0,No,LGPLv2+
+248,compat-libpackagekit-glib2-16,No,GPLv2+ and LGPLv2+
+249,compat-libtiff3,Yes,libtiff
+250,compat-libupower-glib1,No,GPLv2+
+251,compat-libxcb,No,MIT
+252,compat-openldap,Yes,OpenLDAP
+253,compat-poppler022,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+254,compat-poppler022-glib,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+255,compat-poppler022-qt,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+256,comps-extras,No,GPL+ and LGPLv2+ and CC-BY-SA
+257,control-center,Yes,GPLv2+ and CC-BY-SA
+258,control-center-filesystem,No,GPLv2+ and CC-BY-SA
+259,convmv,No,GPLv2 or GPLv3
+260,coolkey,Yes,LGPLv2
+261,copy-jdk-configs,No,BSD
+262,coreutils,Yes,GPLv3+
+263,cpio,Yes,GPLv3+
+264,cpp,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+265,cpuid,No,GPLv2+
+266,cracklib,No,LGPLv2+
+267,cracklib-dicts,No,LGPLv2+
+268,crash,Yes,GPLv3
+269,crash-gcore-command,Yes,GPLv2
+270,crash-ptdump-command,Yes,GPLv2
+271,crash-trace-command,Yes,GPLv2
+272,crda,Yes,ISC
+273,createrepo,No,GPLv2
+274,cronie,Yes,MIT and BSD and ISC and GPLv2+
+275,cronie-anacron,No,MIT and BSD and ISC and GPLv2+
+276,cronie-noanacron,No,MIT and BSD and ISC and GPLv2+
+277,crontabs,Yes,Public Domain and GPLv2
+278,cryptsetup,Yes,GPLv2+ and LGPLv2+
+279,cryptsetup-libs,No,GPLv2+ and LGPLv2+
+280,cryptsetup-python,No,GPLv2+ and LGPLv2+
+281,cryptsetup-reencrypt,Yes,GPLv2+ and LGPLv2+
+282,ctags,No,GPLv2+ and LGPLv2+ and Public Domain
+283,ctags-etags,Yes,GPLv2+ and LGPLv2+ and Public Domain
+284,culmus-aharoni-clm-fonts,Yes,GPLv2
+285,culmus-caladings-clm-fonts,Yes,GPLv2
+286,culmus-david-clm-fonts,Yes,GPLv2
+287,culmus-drugulin-clm-fonts,Yes,GPLv2
+288,culmus-ellinia-clm-fonts,Yes,GPLv2
+289,culmus-fonts-common,No,GPLv2
+290,culmus-frank-ruehl-clm-fonts,Yes,GPLv2
+291,culmus-hadasim-clm-fonts,Yes,GPLv2
+292,culmus-keteryg-fonts,Yes,GPLv2
+293,culmus-miriam-clm-fonts,Yes,GPLv2
+294,culmus-miriam-mono-clm-fonts,Yes,GPLv2
+295,culmus-nachlieli-clm-fonts,Yes,GPLv2
+296,culmus-simple-clm-fonts,Yes,GPLv2
+297,culmus-stamashkenaz-clm-fonts,Yes,GPLv2
+298,culmus-stamsefarad-clm-fonts,Yes,GPLv2
+299,culmus-yehuda-clm-fonts,Yes,GPLv2
+300,cups,Yes,GPLv2
+301,cups-client,No,GPLv2
+302,cups-filesystem,No,GPLv2
+303,cups-filters,No,GPLv2 and GPLv2+ and GPLv3 and GPLv3+ and LGPLv2+ and MIT
+304,cups-filters-libs,No,LGPLv2 and MIT
+305,cups-libs,No,LGPLv2 and zlib
+306,cups-lpd,Yes,GPLv2
+307,cups-pk-helper,Yes,GPLv2+
+308,curl,Yes,MIT
+309,cyrus-sasl,No,BSD with advertising
+310,cyrus-sasl-gssapi,No,BSD with advertising
+311,cyrus-sasl-lib,No,BSD with advertising
+312,cyrus-sasl-md5,No,BSD with advertising
+313,cyrus-sasl-plain,Yes,BSD with advertising
+314,cyrus-sasl-scram,No,BSD with advertising
+315,daxctl-libs,No,LGPLv2
+316,daxio,Yes,BSD
+317,dbus,Yes,(GPLv2+ or AFL) and GPLv2+
+318,dbus-glib,No,AFL and GPLv2+
+319,dbus-libs,No,(GPLv2+ or AFL) and GPLv2+
+320,dbus-python,No,MIT
+321,dbus-x11,No,(GPLv2+ or AFL) and GPLv2+
+322,dbusmenu-qt,No,LGPLv2+
+323,dbxtool,Yes,GPLv2
+324,dconf,Yes,LGPLv2+ and GPLv2+ and GPLv3+
+325,dconf-editor,Yes,GPLv3+ and CC0
+326,dcraw,Yes,GPLv2+
+327,dejavu-fonts-common,No,Bitstream Vera and Public Domain
+328,dejavu-sans-fonts,Yes,Bitstream Vera and Public Domain
+329,dejavu-sans-mono-fonts,Yes,Bitstream Vera and Public Domain
+330,dejavu-serif-fonts,Yes,Bitstream Vera and Public Domain
+331,deltarpm,No,BSD
+332,desktop-file-utils,No,GPLv2+
+333,device-mapper,No,GPLv2
+334,device-mapper-event,No,GPLv2
+335,device-mapper-event-libs,No,LGPLv2
+336,device-mapper-libs,No,LGPLv2
+337,device-mapper-multipath,Yes,GPL+
+338,device-mapper-multipath-libs,No,GPL+
+339,device-mapper-persistent-data,Yes,GPLv3+
+340,dhclient,Yes,ISC
+341,dhcp-common,No,ISC
+342,dhcp-libs,No,ISC
+343,dialog,No,LGPLv2
+344,diffutils,No,GPLv3+
+345,dleyna-connector-dbus,No,LGPLv2
+346,dleyna-core,No,LGPLv2
+347,dleyna-server,No,LGPLv2
+348,dlm-lib,No,GPLv2 and GPLv2+ and LGPLv2+
+349,dmidecode,No,GPLv2+
+350,dmraid,Yes,GPLv2+
+351,dmraid-events,No,GPLv2+
+352,dnsmasq,No,GPLv2 or GPLv3
+353,dnssec-trigger,Yes,BSD
+354,docbook-dtds,No,Copyright only
+355,docbook-simple,No,Freely redistributable without restriction
+356,docbook-slides,Yes,MIT
+357,docbook-style-dsssl,No,DMIT
+358,docbook-style-xsl,Yes,DMIT
+359,docbook-utils,Yes,GPLv2+
+360,docbook-utils-pdf,Yes,GPL+
+361,docbook5-schemas,Yes,Freely redistributable without restriction
+362,docbook5-style-xsl,Yes,MIT and MPLv1.1
+363,dos2unix,Yes,BSD
+364,dosfstools,Yes,GPLv3+
+365,dotconf,No,LGPLv2
+366,dracut,No,GPLv2+ and LGPLv2+
+367,dracut-config-generic,Yes,GPLv2+ and LGPLv2+
+368,dracut-config-rescue,Yes,GPLv2+ and LGPLv2+
+369,dracut-fips,Yes,GPLv2+ and LGPLv2+
+370,dracut-fips-aesni,Yes,GPLv2+ and LGPLv2+
+371,dracut-network,Yes,GPLv2+ and LGPLv2+
+372,dragon,Yes,(GPLv2 or GPLv3) and GFDL
+373,dropwatch,Yes,GPLv2+
+374,dstat,Yes,GPLv2
+375,dumpet,Yes,GPLv2+
+376,dvd+rw-tools,Yes,GPLv2
+377,dvgrab,Yes,GPLv2+
+378,dwz,No,GPLv2+ and GPLv3+
+379,dyninst,No,LGPLv2+
+380,e2fsprogs,Yes,GPLv2
+381,e2fsprogs-libs,No,GPLv2 and LGPLv2
+382,ebtables,Yes,GPLv2+
+383,ed,Yes,"GPLv3+, GFDL"
+384,efax,Yes,GPLv2+
+385,efibootmgr,Yes,GPLv2+
+386,efivar,No,LGPLv2+
+387,efivar-libs,No,LGPLv2+
+388,ekiga,Yes,GPLv2+
+389,elfutils,Yes,GPLv3+ and (GPLv2+ or LGPLv3+)
+390,elfutils-default-yama-scope,No,GPLv2+ or LGPLv3+
+391,elfutils-libelf,No,GPLv2+ or LGPLv3+
+392,elfutils-libs,No,GPLv2+ or LGPLv3+
+393,elinks,Yes,GPLv2
+394,emacs,Yes,GPLv3+
+395,emacs-auctex,Yes,GPLv3+ and GFDL
+396,emacs-common,No,GPLv3+ and GFDL and BSD
+397,emacs-filesystem,No,GPLv3+
+398,emacs-gnuplot,Yes,gnuplot and MIT
+399,emacs-nox,Yes,GPLv3+
+400,emacs-php-mode,Yes,GPLv3+
+401,empathy,Yes,GPLv2+
+402,enchant,No,LGPLv2+
+403,enscript,Yes,GPLv3+
+404,eog,Yes,GPLv2+ and GFDL
+405,esc,Yes,GPL+
+406,espeak,No,GPLv3+
+407,ethtool,Yes,GPLv2
+408,evince,Yes,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+409,evince-dvi,Yes,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+410,evince-libs,No,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+411,evince-nautilus,Yes,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+412,evolution,Yes,GPLv2+ and GFDL
+413,evolution-data-server,No,LGPLv2+
+414,evolution-data-server-langpacks,No,LGPLv2+
+415,evolution-ews,Yes,LGPLv2
+416,evolution-ews-langpacks,No,LGPLv2
+417,evolution-help,Yes,GPLv2+ and GFDL
+418,evolution-langpacks,No,GPLv2+ and GFDL
+419,evolution-mapi,Yes,LGPLv2+
+420,evolution-mapi-langpacks,No,LGPLv2+
+421,exempi,No,BSD
+422,exiv2,No,GPLv2+
+423,exiv2-libs,No,GPLv2+
+424,expat,No,MIT
+425,expect,No,Public Domain
+426,farstream,No,LGPLv2+
+427,farstream02,No,LGPLv2+ and GPLv2+
+428,fcoe-utils,Yes,GPLv2
+429,fence-virtd,No,GPLv2+
+430,fence-virtd-libvirt,Yes,GPLv2+
+431,fence-virtd-multicast,Yes,GPLv2+
+432,fence-virtd-serial,Yes,GPLv2+
+433,festival,No,MIT and GPL+ and TCL
+434,festival-freebsoft-utils,No,GPLv2+
+435,festival-lib,No,MIT and GPL+ and TCL
+436,festival-speechtools-libs,No,MIT and GPL+ and TCL
+437,festvox-slt-arctic-hts,No,MIT and GPL+ and TCL
+438,fetchmail,Yes,GPL+ and Public Domain
+439,fftw-libs-double,No,GPLv2+
+440,file,Yes,BSD
+441,file-libs,No,BSD
+442,file-roller,Yes,GPLv2+
+443,file-roller-nautilus,Yes,GPLv2+
+444,filesystem,Yes,Public Domain
+445,findutils,No,GPLv3+
+446,finger,Yes,BSD
+447,finger-server,Yes,BSD
+448,fio,Yes,GPLv2
+449,fipscheck,No,BSD
+450,fipscheck-lib,No,BSD
+451,firefox,Yes,MPLv1.1 or GPLv2+ or LGPLv2+
+452,firewall-config,Yes,GPLv2+
+453,firewalld,Yes,GPLv2+
+454,firewalld-filesystem,No,GPLv2+
+455,firstboot,Yes,GPLv2+
+456,flac-libs,No,BSD and GPLv2+ and GFDL
+457,flatpak,No,LGPLv2+
+458,flatpak-libs,No,LGPLv2+
+459,flex,No,BSD and LGPLv2+
+460,flite,No,MIT
+461,fltk,No,LGPLv2+ with exceptions
+462,flute,No,W3C and LGPLv2+
+463,folks,No,LGPLv2+
+464,fontconfig,No,MIT and Public Domain and UCD
+465,fontpackages-filesystem,No,Public Domain
+466,fonts-tweak-tool,Yes,LGPLv3+
+467,fprintd,No,GPLv2+
+468,fprintd-pam,Yes,GPLv2+
+469,freeipmi,No,GPLv3+
+470,freerdp,Yes,ASL 2.0
+471,freerdp-libs,No,ASL 2.0
+472,freetype,No,(FTL or GPLv2+) and BSD and MIT and Public Domain and zlib with acknowledgement
+473,frei0r-plugins,No,GPLv2+
+474,fribidi,No,LGPLv2+ and UCD
+475,fros,No,GPLv2+
+476,ftp,Yes,BSD with advertising
+477,fuse,No,GPL+
+478,fuse-libs,No,LGPLv2+
+479,fuseiso,No,GPLv2+
+480,fwupd,Yes,LGPLv2+
+481,fwupdate,Yes,GPLv2+
+482,fwupdate-efi,No,GPLv2+
+483,fwupdate-libs,No,GPLv2+
+484,fxload,No,GPLv2+
+485,gamin,No,LGPLv2
+486,gavl,No,GPLv3+
+487,gawk,No,GPLv3+ and GPL and LGPLv3+ and LGPL and BSD
+488,gc,No,BSD
+489,gcc,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+490,gconf-editor,Yes,GPLv2+ and GFDL
+491,GConf2,No,LGPLv2+ and GPLv2+
+492,gcr,No,LGPLv2+
+493,gd,No,MIT
+494,gdb,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and BSD and Public Domain
+495,gdb-gdbserver,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and BSD and Public Domain
+496,gdbm,No,GPLv3+
+497,gdbm-devel,No,GPLv3+
+498,gdisk,No,GPLv2
+499,gdk-pixbuf2,No,LGPLv2+
+500,gdm,Yes,GPLv2+
+501,gedit,Yes,GPLv2+ and GFDL
+502,gedit-plugin-bookmarks,No,GPLv2+
+503,gedit-plugin-bracketcompletion,No,GPLv2+
+504,gedit-plugin-charmap,No,GPLv2+
+505,gedit-plugin-codecomment,No,GPLv2+
+506,gedit-plugin-colorpicker,No,GPLv2+
+507,gedit-plugin-colorschemer,No,GPLv2+
+508,gedit-plugin-commander,No,GPLv2+
+509,gedit-plugin-drawspaces,No,GPLv2+
+510,gedit-plugin-joinlines,No,GPLv2+
+511,gedit-plugin-multiedit,No,GPLv2+
+512,gedit-plugin-smartspaces,No,GPLv2+
+513,gedit-plugin-synctex,No,GPLv2+
+514,gedit-plugin-terminal,No,GPLv2+
+515,gedit-plugin-textsize,No,GPLv2+
+516,gedit-plugin-wordcompletion,No,GPLv2+
+517,gedit-plugins,Yes,GPLv2+
+518,gedit-plugins-data,No,GPLv2+
+519,gegl,No,LGPLv3+ and GPLv3+
+520,genisoimage,Yes,GPLv2
+521,geoclue,No,LGPLv2
+522,geoclue2,No,GPLv2+
+523,geoclue2-libs,No,LGPLv2+
+524,geocode-glib,No,LGPLv2+
+525,GeoIP,No,LGPLv2+ and GPLv2+ and CC-BY-SA
+526,geoipupdate,No,GPLv2
+527,geolite2-city,No,CC-BY-SA
+528,geolite2-country,No,CC-BY-SA
+529,geronimo-jms,No,ASL 2.0
+530,gettext,No,GPLv3+ and LGPLv2+
+531,gettext-libs,No,LGPLv2+ and GPLv3+
+532,gfs2-utils,Yes,GPLv2+ and LGPLv2+
+533,ghostscript,No,AGPLv3+
+534,ghostscript-chinese,Yes,GPLv2+
+535,ghostscript-cups,Yes,AGPLv3+
+536,ghostscript-fonts,No,GPLv2+ and Hershey and MIT and OFL and Public Domain
+537,giflib,No,MIT
+538,gimp,Yes,GPLv3+ and GPLv3
+539,gimp-data-extras,Yes,GPLv2+
+540,gimp-help,Yes,GFDL and GPLv2+
+541,gimp-libs,No,LGPLv3+
+542,gjs,No,MIT and (MPLv1.1 or GPLv2+ or LGPLv2+)
+543,glade-libs,No,GPLv2+ and LGPLv2+
+544,glib-networking,Yes,LGPLv2+
+545,glib2,No,LGPLv2+
+546,glibc,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+547,glibc-common,No,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+548,glibc-devel,No,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+549,glibc-headers,No,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+550,glibc-utils,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+551,glibmm24,No,LGPLv2+
+552,glusterfs,No,GPLv2 or LGPLv3+
+553,glusterfs-api,No,GPLv2 or LGPLv3+
+554,glusterfs-cli,No,GPLv2 or LGPLv3+
+555,glusterfs-client-xlators,No,GPLv2 or LGPLv3+
+556,glusterfs-fuse,Yes,GPLv2 or LGPLv3+
+557,glusterfs-libs,No,GPLv2 or LGPLv3+
+558,glx-utils,Yes,MIT
+559,gmp,No,LGPLv3+ or GPLv2+
+560,gnome-abrt,No,GPLv2+
+561,gnome-bluetooth,Yes,GPLv2+
+562,gnome-bluetooth-libs,No,LGPLv2+
+563,gnome-boxes,Yes,LGPLv2+
+564,gnome-calculator,Yes,GPLv3+
+565,gnome-classic-session,Yes,GPLv2+
+566,gnome-clocks,Yes,GPLv2+
+567,gnome-color-manager,Yes,GPLv2+
+568,gnome-contacts,Yes,GPLv2+
+569,gnome-desktop3,No,GPLv2+ and LGPLv2+
+570,gnome-dictionary,Yes,GPLv3+ and LGPLv2+ and GFDL
+571,gnome-disk-utility,Yes,GPLv2+
+572,gnome-documents,Yes,GPLv2+
+573,gnome-documents-libs,No,GPLv2+
+574,gnome-font-viewer,Yes,GPLv2+
+575,gnome-getting-started-docs,Yes,CC-BY-SA
+576,gnome-icon-theme,Yes,LGPLv3+
+577,gnome-icon-theme-extras,Yes,CC-BY-SA
+578,gnome-icon-theme-legacy,No,LGPLv3+
+579,gnome-icon-theme-symbolic,Yes,CC-BY-SA
+580,gnome-initial-setup,Yes,GPLv2+
+581,gnome-keyring,No,GPLv2+ and LGPLv2+
+582,gnome-keyring-pam,No,LGPLv2+
+583,gnome-menus,No,LGPLv2+
+584,gnome-online-accounts,No,LGPLv2+
+585,gnome-online-miners,No,GPLv2+ and LGPLv2+ and MIT
+586,gnome-packagekit,Yes,GPLv2+
+587,gnome-packagekit-common,No,GPLv2+
+588,gnome-packagekit-installer,No,GPLv2+
+589,gnome-packagekit-updater,Yes,GPLv2+
+590,gnome-python2,No,LGPLv2+
+591,gnome-python2-bonobo,No,LGPLv2+
+592,gnome-python2-canvas,No,LGPLv2+
+593,gnome-python2-gconf,No,LGPLv2+
+594,gnome-python2-gnome,No,LGPLv2+
+595,gnome-python2-gnomevfs,No,LGPLv2+
+596,gnome-screenshot,Yes,GPLv2+
+597,gnome-session,Yes,GPLv2+
+598,gnome-session-xsession,Yes,GPLv2+
+599,gnome-settings-daemon,Yes,GPLv2+
+600,gnome-shell,Yes,GPLv2+
+601,gnome-shell-extension-alternate-tab,No,GPLv2+
+602,gnome-shell-extension-apps-menu,No,GPLv2+
+603,gnome-shell-extension-common,No,GPLv2+
+604,gnome-shell-extension-horizontal-workspaces,No,GPLv2+
+605,gnome-shell-extension-launch-new-instance,No,GPLv2+
+606,gnome-shell-extension-places-menu,No,GPLv2+
+607,gnome-shell-extension-top-icons,No,GPLv2+
+608,gnome-shell-extension-user-theme,No,GPLv2+
+609,gnome-shell-extension-window-list,No,GPLv2+
+610,gnome-software,Yes,GPLv2+
+611,gnome-system-log,Yes,GPLv2+ and GFDL
+612,gnome-system-monitor,Yes,GPLv2+
+613,gnome-terminal,Yes,GPLv3+ and GFDL
+614,gnome-terminal-nautilus,Yes,GPLv3+ and GFDL
+615,gnome-themes-standard,Yes,LGPLv2+
+616,gnome-tweak-tool,Yes,GPLv3 and CC0
+617,gnome-user-docs,Yes,CC-BY-SA
+618,gnome-vfs2,No,LGPLv2+ and GPLv2+
+619,gnome-video-effects,No,GPLv2
+620,gnome-weather,Yes,GPLv2+ and LGPLv2+ and MIT and CC-BY and CC-BY-SA
+621,gnote,Yes,GPLv3+
+622,gnu-free-fonts-common,No,GPLv3+ with exceptions
+623,gnu-free-mono-fonts,Yes,GPLv3+ with exceptions
+624,gnu-free-sans-fonts,Yes,GPLv3+ with exceptions
+625,gnu-free-serif-fonts,Yes,GPLv3+ with exceptions
+626,gnupg2,Yes,GPLv3+
+627,gnuplot,No,gnuplot and MIT
+628,gnuplot-common,No,gnuplot and MIT
+629,gnutls,No,GPLv3+ and LGPLv2+
+630,gnutls-dane,No,GPLv3+ and LGPLv2+
+631,gnutls-utils,No,GPLv3+
+632,gobject-introspection,No,"GPLv2+, LGPLv2+, MIT"
+633,gom,No,LGPLv2+
+634,google-crosextra-caladea-fonts,Yes,ASL 2.0
+635,google-crosextra-carlito-fonts,Yes,OFL
+636,google-noto-emoji-color-fonts,No,OFL and ASL 2.0
+637,google-noto-emoji-fonts,Yes,OFL and ASL 2.0
+638,google-noto-fonts-common,No,ASL 2.0
+639,google-noto-sans-armenian-fonts,Yes,ASL 2.0
+640,google-noto-sans-devanagari-fonts,Yes,ASL 2.0
+641,google-noto-sans-devanagari-ui-fonts,Yes,ASL 2.0
+642,google-noto-sans-ethiopic-fonts,Yes,ASL 2.0
+643,google-noto-sans-fonts,Yes,ASL 2.0
+644,google-noto-sans-georgian-fonts,Yes,ASL 2.0
+645,google-noto-sans-hebrew-fonts,Yes,ASL 2.0
+646,google-noto-sans-khmer-fonts,Yes,ASL 2.0
+647,google-noto-sans-khmer-ui-fonts,Yes,ASL 2.0
+648,google-noto-sans-lao-fonts,Yes,ASL 2.0
+649,google-noto-sans-lao-ui-fonts,Yes,ASL 2.0
+650,google-noto-sans-tamil-fonts,Yes,ASL 2.0
+651,google-noto-sans-tamil-ui-fonts,Yes,ASL 2.0
+652,google-noto-sans-thai-fonts,Yes,ASL 2.0
+653,google-noto-sans-thai-ui-fonts,Yes,ASL 2.0
+654,google-noto-sans-ui-fonts,Yes,ASL 2.0
+655,google-noto-serif-armenian-fonts,Yes,ASL 2.0
+656,google-noto-serif-fonts,Yes,ASL 2.0
+657,google-noto-serif-georgian-fonts,Yes,ASL 2.0
+658,google-noto-serif-lao-fonts,Yes,ASL 2.0
+659,google-noto-serif-thai-fonts,Yes,ASL 2.0
+660,gperftools-libs,No,BSD
+661,gpgme,No,LGPLv2+
+662,gpm,Yes,GPLv2 and GPLv2+ with exceptions and GPLv3+ and Verbatim and Copyright only
+663,gpm-libs,No,GPLv2 and GPLv2+ with exceptions and GPLv3+ and Verbatim and Copyright only
+664,grantlee,No,LGPLv2+
+665,graphite2,No,(LGPLv2+ or GPLv2+ or MPL) and (Netscape or GPLv2+ or LGPLv2+)
+666,grep,No,GPLv3+
+667,grilo,No,LGPLv2+
+668,grilo-plugins,No,LGPLv2+
+669,groff-base,No,GPLv3+ and GFDL and BSD and MIT
+670,grub2,Yes,GPLv3+
+671,grub2-common,No,GPLv3+
+672,grub2-efi-ia32,Yes,GPLv3+
+673,grub2-efi-ia32-modules,Yes,GPLv3+
+674,grub2-efi-x64,Yes,GPLv3+
+675,grub2-efi-x64-modules,Yes,GPLv3+
+676,grub2-pc,Yes,GPLv3+
+677,grub2-pc-modules,No,GPLv3+
+678,grub2-tools,No,GPLv3+
+679,grub2-tools-extra,No,GPLv3+
+680,grub2-tools-minimal,No,GPLv3+
+681,grubby,No,GPLv2+
+682,gsettings-desktop-schemas,No,LGPLv2+
+683,gsl,No,GPLv3 and GFDL and BSD
+684,gsm,No,MIT
+685,gsound,No,LGPLv2
+686,gspell,No,LGPLv2+
+687,gssdp,No,LGPLv2+
+688,gssproxy,Yes,MIT
+689,gstreamer,No,LGPLv2+
+690,gstreamer-plugins-bad-free,Yes,LGPLv2+ and LGPLv2
+691,gstreamer-plugins-base,No,LGPLv2+
+692,gstreamer-plugins-good,Yes,LGPLv2+
+693,gstreamer-tools,No,LGPLv2+
+694,gstreamer1,No,LGPLv2+
+695,gstreamer1-plugins-bad-free,Yes,LGPLv2+ and LGPLv2
+696,gstreamer1-plugins-bad-free-gtk,No,LGPLv2+ and LGPLv2
+697,gstreamer1-plugins-base,No,LGPLv2+
+698,gstreamer1-plugins-good,Yes,LGPLv2+
+699,gstreamer1-plugins-ugly-free,Yes,LGPLv2+ and LGPLv2
+700,gtk-update-icon-cache,No,LGPLv2+
+701,gtk-vnc2,No,LGPLv2+
+702,gtk2,No,LGPLv2+
+703,gtk2-immodule-xim,Yes,LGPLv2+
+704,gtk3,No,LGPLv2+
+705,gtk3-immodule-xim,Yes,LGPLv2+
+706,gtkhtml3,No,LGPLv2+ and GPLv2
+707,gtkmm24,No,LGPLv2+
+708,gtkmm30,No,LGPLv2+
+709,gtksourceview3,No,LGPLv2+
+710,gtkspell,No,GPLv2+
+711,gtkspell3,No,GPLv2+
+712,guava,No,ASL 2.0
+713,gubbi-fonts,Yes,OFL
+714,gucharmap,Yes,GPLv3+ and GFDL and MIT
+715,gucharmap-libs,No,GPLv3+ and GFDL and MIT
+716,gupnp,No,LGPLv2+
+717,gupnp-av,No,LGPLv2+
+718,gupnp-dlna,No,LGPLv2+
+719,gupnp-igd,No,LGPLv2+
+720,gutenprint,Yes,GPLv2+
+721,gutenprint-cups,Yes,GPLv2+
+722,gutenprint-plugin,Yes,GPLv2+
+723,gvfs,No,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+724,gvfs-afc,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+725,gvfs-afp,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+726,gvfs-archive,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+727,gvfs-client,No,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+728,gvfs-fuse,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+729,gvfs-goa,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+730,gvfs-gphoto2,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+731,gvfs-mtp,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+732,gvfs-smb,Yes,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+733,gvnc,No,LGPLv2+
+734,gwenview,Yes,GPLv2+
+735,gwenview-libs,No,IJG and LGPLv2+ and GPLv2+ and LGPLv2 or LGPLv3
+736,gzip,No,GPLv3+ and GFDL
+737,hardlink,No,GPL+
+738,harfbuzz,No,MIT
+739,harfbuzz-icu,No,MIT
+740,hawkey,No,LGPLv2+
+741,hdparm,Yes,BSD
+742,hesiod,No,MIT
+743,hexedit,No,GPLv2+
+744,hicolor-icon-theme,No,GPL+
+745,highcontrast-qt5,No,GPLv2+ and MIT
+746,highlight,No,GPLv3
+747,hivex,No,LGPLv2
+748,hmaccalc,Yes,BSD
+749,hostname,Yes,GPLv2+
+750,hpijs,Yes,BSD
+751,hplip,Yes,GPLv2+ and MIT
+752,hplip-common,No,GPLv2+
+753,hplip-gui,Yes,BSD
+754,hplip-libs,No,GPLv2+ and MIT
+755,hsakmt,No,MIT and GPLv2
+756,http-parser,No,MIT
+757,hunspell,Yes,LGPLv2+ or GPLv2+ or MPLv1.1
+758,hunspell-af,No,LGPLv2+
+759,hunspell-ak,No,LGPLv3
+760,hunspell-am,No,GPL+
+761,hunspell-ar,No,GPLv2 or LGPLv2 or MPLv1.1
+762,hunspell-as,No,GPLv2+ or LGPLv2+ or MPLv1.1
+763,hunspell-ast,No,GPLv3+
+764,hunspell-az,No,GPLv2+
+765,hunspell-be,No,GPL+ and LGPLv2+
+766,hunspell-ber,No,GPL+ or LGPLv2+ or MPLv1.1
+767,hunspell-bg,No,GPLv2+ or LGPLv2+ or MPLv1.1
+768,hunspell-bn,No,GPLv2+
+769,hunspell-br,No,LGPLv2+
+770,hunspell-ca,No,GPLv2+
+771,hunspell-cop,No,GPLv3+
+772,hunspell-cs,No,GPL+
+773,hunspell-csb,No,GPLv2+
+774,hunspell-cv,No,LGPLv2+
+775,hunspell-cy,No,GPL+
+776,hunspell-da,No,GPLv2+
+777,hunspell-de,No,GPLv2 or GPLv3
+778,hunspell-dsb,No,GPLv2+
+779,hunspell-el,No,GPLv2+ or LGPLv2+ or MPLv1.1
+780,hunspell-en,Yes,LGPLv2+ and LGPLv2 and BSD
+781,hunspell-en-GB,No,LGPLv2+ and LGPLv2 and BSD
+782,hunspell-en-US,No,LGPLv2+ and LGPLv2 and BSD
+783,hunspell-eo,No,LGPLv3
+784,hunspell-es,No,LGPLv3+ or GPLv3+ or MPLv1.1
+785,hunspell-et,No,LGPLv2+ and LPPL
+786,hunspell-eu,No,GPLv2
+787,hunspell-fa,No,GPLv2+
+788,hunspell-fj,No,LGPLv2+ or GPLv2+ or MPLv1.1
+789,hunspell-fo,No,GPLv2+
+790,hunspell-fr,No,MPLv2.0
+791,hunspell-fur,No,GPLv2+
+792,hunspell-fy,No,LGPLv2+
+793,hunspell-ga,No,GPLv2+
+794,hunspell-gd,No,GPLv2+ and GPLv3+
+795,hunspell-gl,No,GPLv2
+796,hunspell-grc,No,GPL+ or LGPLv2+
+797,hunspell-gu,No,GPL+
+798,hunspell-gv,No,GPL+
+799,hunspell-haw,No,GPLv2+
+800,hunspell-he,No,AGPLv3
+801,hunspell-hi,No,GPLv2+
+802,hunspell-hil,No,GPLv3+
+803,hunspell-hr,No,LGPLv2+ or SISSL
+804,hunspell-hsb,No,GPLv2+
+805,hunspell-ht,No,GPLv3+
+806,hunspell-hu,No,LGPLv2+ or GPLv2+ or MPLv1.1
+807,hunspell-hy,No,GPLv2+
+808,hunspell-ia,No,LGPLv2+
+809,hunspell-id,No,GPLv2
+810,hunspell-is,No,GPLv2+
+811,hunspell-it,No,GPLv3+
+812,hunspell-kk,No,GPLv2+ or LGPLv2+ or MPLv1.1
+813,hunspell-km,No,GPLv3
+814,hunspell-kn,No,GPLv2+ or LGPLv2+ or MPLv1.1
+815,hunspell-ko,No,MPLv1.1 or GPLv2 or LGPLv2
+816,hunspell-ku,No,GPLv3 or LGPLv3 or MPLv1.1
+817,hunspell-ky,No,GPLv2+
+818,hunspell-la,No,GPLv2+ and LGPLv2+
+819,hunspell-lb,No,EUPL 1.1
+820,hunspell-ln,No,GPLv2+
+821,hunspell-lt,No,BSD
+822,hunspell-lv,No,LGPLv2+
+823,hunspell-mai,No,GPLv2+ or LGPLv2+ or MPLv1.1
+824,hunspell-mg,No,GPLv2+
+825,hunspell-mi,No,GPLv3+
+826,hunspell-mk,No,GPL+
+827,hunspell-ml,No,GPLv3+
+828,hunspell-mn,No,GPLv2 and LGPLv2+
+829,hunspell-mos,No,LGPLv3
+830,hunspell-mr,No,LGPLv2+
+831,hunspell-ms,No,GFDL and GPL+
+832,hunspell-mt,No,LGPLv2+
+833,hunspell-nb,No,GPL+
+834,hunspell-nds,No,GPLv2+
+835,hunspell-ne,No,LGPLv2
+836,hunspell-nl,No,BSD or CC-BY
+837,hunspell-nn,No,GPL+
+838,hunspell-nr,No,LGPLv2+
+839,hunspell-nso,No,LGPLv2+
+840,hunspell-ny,No,GPLv3+
+841,hunspell-oc,No,GPLv3+
+842,hunspell-om,No,LGPLv3+
+843,hunspell-or,No,GPLv2+
+844,hunspell-pa,No,GPLv2+
+845,hunspell-pl,No,LGPLv2+ or GPL+ or MPLv1.1 or CC-BY-SA
+846,hunspell-pt,No,((LGPLv3 or MPL) and LGPLv2) and (GPLv2 or LGPLv2 or MPLv1.1)
+847,hunspell-qu,No,AGPLv3
+848,hunspell-quh,No,GPLv2+
+849,hunspell-ro,No,GPLv2+ or LGPLv2+ or MPLv1.1
+850,hunspell-ru,No,BSD
+851,hunspell-rw,No,GPLv2+
+852,hunspell-sc,No,AGPLv3+ and GPLv2
+853,hunspell-se,No,GPLv3
+854,hunspell-shs,No,GPLv2+
+855,hunspell-si,No,GPLv2+
+856,hunspell-sk,No,LGPLv2 or GPLv2 or MPLv1.1
+857,hunspell-sl,No,GPL+ or LGPLv2+
+858,hunspell-smj,No,GPLv3
+859,hunspell-so,No,GPLv2+
+860,hunspell-sq,No,GPLv2+
+861,hunspell-sr,No,LGPLv3
+862,hunspell-ss,No,LGPLv2+
+863,hunspell-st,No,LGPLv2+
+864,hunspell-sv,No,LGPLv3
+865,hunspell-sw,No,LGPLv2+
+866,hunspell-ta,No,GPLv2+
+867,hunspell-te,No,GPL+
+868,hunspell-tet,No,GPLv2+
+869,hunspell-th,No,LGPLv2+
+870,hunspell-ti,No,GPL+
+871,hunspell-tk,No,GPLv2+
+872,hunspell-tl,No,GPLv2+
+873,hunspell-tn,No,GPLv2+
+874,hunspell-tpi,No,GPLv3+
+875,hunspell-ts,No,LGPLv2+
+876,hunspell-uk,No,GPLv2+ or LGPLv2+ or MPLv1.1
+877,hunspell-ur,No,LGPLv2+
+878,hunspell-uz,No,GPLv2+
+879,hunspell-ve,No,LGPLv2+
+880,hunspell-vi,No,GPL+
+881,hunspell-wa,No,LGPLv2+
+882,hunspell-xh,No,LGPLv2+
+883,hunspell-yi,No,LGPLv2+ or GPLv2+ or MPLv1.1
+884,hunspell-zu,No,GPLv3+
+885,hwdata,No,GPLv2+
+886,hyperv-daemons,Yes,GPLv2
+887,hyperv-daemons-license,No,GPLv2
+888,hypervfcopyd,No,GPLv2
+889,hypervkvpd,No,GPLv2
+890,hypervvssd,No,GPLv2
+891,hyphen,No,GPLv2 or LGPLv2+ or MPLv1.1
+892,hyphen-af,No,LGPLv2+ and GPL+
+893,hyphen-as,No,LGPLv3+
+894,hyphen-be,No,GPL+ and LGPLv2+
+895,hyphen-bg,No,GPLv2+ or LGPLv2+ or MPLv1.1
+896,hyphen-bn,No,LGPLv3+
+897,hyphen-ca,No,GPLv3
+898,hyphen-cs,No,GPL+
+899,hyphen-cy,No,LPPL
+900,hyphen-da,No,LGPLv2+
+901,hyphen-de,No,LGPLv2+
+902,hyphen-el,No,LGPLv2+
+903,hyphen-en,No,GPLv2 or LGPLv2+ or MPLv1.1
+904,hyphen-es,No,LGPLv2+
+905,hyphen-et,No,LGPLv2+ and LPPL
+906,hyphen-eu,No,LPPL
+907,hyphen-fa,No,LPPL
+908,hyphen-fo,No,GPL+
+909,hyphen-fr,No,LGPLv2+
+910,hyphen-ga,No,GPL+
+911,hyphen-gl,No,GPLv3
+912,hyphen-grc,No,LPPL
+913,hyphen-gu,No,LGPLv3+
+914,hyphen-hi,No,LGPLv3+
+915,hyphen-hr,No,LGPLv2+ or SISSL
+916,hyphen-hsb,No,LPPL
+917,hyphen-hu,No,GPLv2
+918,hyphen-ia,No,LPPL
+919,hyphen-id,No,GPL+
+920,hyphen-is,No,LGPLv2+ or SISSL
+921,hyphen-it,No,LGPLv2+
+922,hyphen-kn,No,LGPLv3+
+923,hyphen-ku,No,LGPLv2+
+924,hyphen-lt,No,LPPL
+925,hyphen-lv,No,LGPLv2+
+926,hyphen-mi,No,GPLv3+
+927,hyphen-ml,No,LGPLv3+
+928,hyphen-mn,No,LPPL
+929,hyphen-mr,No,LGPLv3+
+930,hyphen-nb,No,GPL+
+931,hyphen-nl,No,GPLv2
+932,hyphen-nn,No,GPL+
+933,hyphen-or,No,LGPLv3+
+934,hyphen-pa,No,LGPLv3+
+935,hyphen-pl,No,LGPLv2+
+936,hyphen-pt,No,GPL+
+937,hyphen-ro,No,GPLv2+
+938,hyphen-ru,No,LGPLv2+
+939,hyphen-sa,No,LPPL
+940,hyphen-sk,No,GPL+
+941,hyphen-sl,No,LGPLv2+
+942,hyphen-sr,No,LGPLv3
+943,hyphen-sv,No,LGPLv2+ or GPLv2+
+944,hyphen-ta,No,LGPLv3+
+945,hyphen-te,No,LGPLv3+
+946,hyphen-tk,No,Public Domain
+947,hyphen-uk,No,GPLv2+
+948,hyphen-zu,No,LGPLv2+ and GPL+
+949,i2c-tools,Yes,GPLv2+
+950,ibacm,No,GPLv2 or BSD
+951,ibus,No,LGPLv2+
+952,ibus-chewing,Yes,GPLv2+
+953,ibus-gtk2,Yes,LGPLv2+
+954,ibus-gtk3,Yes,LGPLv2+
+955,ibus-hangul,Yes,GPLv2+
+956,ibus-kkc,Yes,GPLv2+
+957,ibus-libpinyin,Yes,GPLv2+
+958,ibus-libs,No,LGPLv2+
+959,ibus-m17n,Yes,GPLv2+
+960,ibus-qt,Yes,GPLv2+
+961,ibus-rawcode,Yes,GPLv2+
+962,ibus-sayura,Yes,GPLv2+
+963,ibus-setup,No,LGPLv2+
+964,ibus-table,Yes,LGPLv2+
+965,ibus-table-chinese,Yes,GPLv3+
+966,ibus-typing-booster,Yes,GPLv3+
+967,icedax,No,GPLv2
+968,icedtea-web,Yes,LGPLv2+ and GPLv2 with exceptions
+969,icoutils,No,GPLv3+
+970,ilmbase,No,BSD
+971,im-chooser,No,GPLv2+ and LGPLv2+
+972,im-chooser-common,No,GPLv2+ and LGPLv2+
+973,ima-evm-utils,Yes,GPLv2
+974,ImageMagick,Yes,ImageMagick
+975,ImageMagick-c++,No,ImageMagick
+976,imsettings,No,LGPLv2+
+977,imsettings-gsettings,Yes,LGPLv2+
+978,imsettings-libs,No,LGPLv2+
+979,imsettings-qt,Yes,LGPLv2+
+980,infinipath-psm,No,BSD or GPLv2
+981,info,No,GPLv3+
+982,iniparser,No,MIT
+983,initial-setup,Yes,GPLv2+
+984,initial-setup-gui,Yes,GPLv2+
+985,initscripts,Yes,GPLv2 and GPLv2+
+986,inkscape,Yes,GPLv2+
+987,insights-client,Yes,GPLv2+
+988,iok,Yes,GPLv2+
+989,iotop,Yes,GPLv2+
+990,iowatcher,Yes,GPLv2
+991,ipa-client,Yes,GPLv3+
+992,ipa-client-common,No,GPLv3+
+993,ipa-common,No,GPLv3+
+994,ipa-gothic-fonts,Yes,IPA
+995,ipa-mincho-fonts,Yes,IPA
+996,ipa-pgothic-fonts,Yes,IPA
+997,ipa-pmincho-fonts,Yes,IPA
+998,ipa-python-compat,No,GPLv3+
+999,iperf3,Yes,BSD
+1000,iproute,Yes,GPLv2+ and Public Domain
+1001,iprutils,Yes,CPL
+1002,ipset,Yes,GPLv2
+1003,ipset-libs,No,GPLv2
+1004,ipset-service,No,GPLv2
+1005,iptables,Yes,GPLv2
+1006,iptables-services,No,GPLv2
+1007,iptraf-ng,Yes,GPLv2+
+1008,iptstate,Yes,zlib
+1009,iputils,Yes,BSD and GPLv2+
+1010,ipxe-roms-qemu,No,GPLv2 and BSD
+1011,irqbalance,Yes,GPLv2
+1012,irssi,Yes,GPLv2+
+1013,iscsi-initiator-utils,Yes,GPLv2+
+1014,iscsi-initiator-utils-iscsiuio,No,BSD
+1015,isdn4k-utils,Yes,GPLv2+ and GPL+ and MIT and BSD and zlib
+1016,iso-codes,No,LGPLv2+
+1017,isomd5sum,No,GPLv2+
+1018,ivtv-firmware,Yes,"Redistributable, no modification permitted"
+1019,iw,No,ISC
+1020,iwl100-firmware,Yes,"Redistributable, no modification permitted"
+1021,iwl1000-firmware,Yes,"Redistributable, no modification permitted"
+1022,iwl105-firmware,Yes,"Redistributable, no modification permitted"
+1023,iwl135-firmware,Yes,"Redistributable, no modification permitted"
+1024,iwl2000-firmware,Yes,"Redistributable, no modification permitted"
+1025,iwl2030-firmware,Yes,"Redistributable, no modification permitted"
+1026,iwl3160-firmware,Yes,"Redistributable, no modification permitted"
+1027,iwl3945-firmware,Yes,"Redistributable, no modification permitted"
+1028,iwl4965-firmware,Yes,"Redistributable, no modification permitted"
+1029,iwl5000-firmware,Yes,"Redistributable, no modification permitted"
+1030,iwl5150-firmware,Yes,"Redistributable, no modification permitted"
+1031,iwl6000-firmware,Yes,"Redistributable, no modification permitted"
+1032,iwl6000g2a-firmware,Yes,"Redistributable, no modification permitted"
+1033,iwl6000g2b-firmware,Yes,"Redistributable, no modification permitted"
+1034,iwl6050-firmware,Yes,"Redistributable, no modification permitted"
+1035,iwl7260-firmware,Yes,"Redistributable, no modification permitted"
+1036,ixpdimm_sw,No,BSD
+1037,jackson,No,ASL 2.0 or LGPLv2
+1038,jakarta-commons-httpclient,No,ASL 2.0 and (ASL 2.0 or LGPLv2+)
+1039,jansson,No,MIT
+1040,jasper-libs,No,JasPer
+1041,java-1.6.0-openjdk,Yes,"ASL 1.1, ASL 2.0, GPL+, GPLv2, GPLv2 with exceptions, LGPL+, LGPLv2, MPLv1.0, MPLv1.1, Public Domain, W3C"
+1042,java-1.6.0-openjdk-devel,No,"ASL 1.1, ASL 2.0, GPL+, GPLv2, GPLv2 with exceptions, LGPL+, LGPLv2, MPLv1.0, MPLv1.1, Public Domain, W3C"
+1043,java-1.7.0-openjdk,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv1.1 and MPLv2.0 and Public Domain and W3C and zlib
+1044,java-1.7.0-openjdk-headless,No,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv1.1 and MPLv2.0 and Public Domain and W3C and zlib
+1045,java-1.8.0-openjdk,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1046,java-1.8.0-openjdk-headless,No,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1047,java-11-openjdk,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1048,java-11-openjdk-headless,No,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1049,javamail,No,CDDL or GPLv2 with exceptions
+1050,javapackages-tools,No,BSD
+1051,javassist,No,MPLv1.1 or LGPLv2+ or ASL 2.0
+1052,jbigkit-libs,No,GPLv2+
+1053,jline,No,BSD
+1054,jna,No,LGPLv2+ and ASL 2.0
+1055,joda-convert,No,ASL 2.0
+1056,joda-time,No,ASL 2.0
+1057,jomolhari-fonts,Yes,OFL
+1058,jose,No,ASL 2.0
+1059,js,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1060,json-c,No,MIT
+1061,json-glib,No,LGPLv2+
+1062,jsr-311,No,CDDL
+1063,jss,No,MPLv1.1 or GPLv2+ or LGPLv2+
+1064,k3b,Yes,GPLv2+
+1065,k3b-common,No,GPLv2+
+1066,k3b-libs,No,GPLv2+
+1067,kabi-yum-plugins,Yes,GPLv2
+1068,kaccessible,No,LGPLv2+
+1069,kaccessible-libs,No,LGPLv2+
+1070,kacst-art-fonts,Yes,GPLv2
+1071,kacst-book-fonts,Yes,GPLv2
+1072,kacst-decorative-fonts,Yes,GPLv2
+1073,kacst-digital-fonts,Yes,GPLv2
+1074,kacst-farsi-fonts,Yes,GPLv2
+1075,kacst-fonts-common,No,GPLv2
+1076,kacst-letter-fonts,Yes,GPLv2
+1077,kacst-naskh-fonts,Yes,GPLv2
+1078,kacst-office-fonts,Yes,GPLv2
+1079,kacst-one-fonts,Yes,GPLv2
+1080,kacst-pen-fonts,Yes,GPLv2
+1081,kacst-poster-fonts,Yes,GPLv2
+1082,kacst-qurn-fonts,Yes,GPLv2
+1083,kacst-screen-fonts,Yes,GPLv2
+1084,kacst-title-fonts,Yes,GPLv2
+1085,kacst-titlel-fonts,Yes,GPLv2
+1086,kactivities,No,GPLv2+ and LGPLv2+
+1087,kamera,Yes,GPLv2
+1088,kate-part,No,LGPLv2
+1089,kbd,Yes,GPLv2+
+1090,kbd-legacy,No,GPLv2+
+1091,kbd-misc,No,GPLv2+
+1092,kcalc,Yes,GPLv2+
+1093,kcharselect,Yes,GPLv2+
+1094,kcm-gtk,Yes,GPLv2+
+1095,kcm_colors,No,GPLv2
+1096,kcm_touchpad,Yes,GPLv2
+1097,kcolorchooser,Yes,BSD
+1098,kcoloredit,Yes,GPLv2+
+1099,kde-base-artwork,Yes,LGPLv3+
+1100,kde-baseapps,Yes,GPLv2
+1101,kde-baseapps-libs,No,GPLv2
+1102,kde-filesystem,No,Public Domain
+1103,kde-l10n,No,LGPLv2
+1104,kde-plasma-networkmanagement,Yes,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and LGPLv2
+1105,kde-plasma-networkmanagement-libs,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and LGPLv2
+1106,kde-print-manager,Yes,GPLv2+
+1107,kde-runtime,Yes,LGPLv2+ and GPLv2+
+1108,kde-runtime-drkonqi,No,LGPLv2+ and GPLv2+
+1109,kde-runtime-libs,No,LGPLv2+ and GPLv2+
+1110,kde-settings,No,MIT
+1111,kde-settings-ksplash,No,MIT
+1112,kde-settings-plasma,No,MIT
+1113,kde-settings-pulseaudio,Yes,Public Domain
+1114,kde-style-oxygen,No,GPLv2
+1115,kde-workspace,Yes,GPLv2
+1116,kde-workspace-libs,No,GPLv2
+1117,kdeaccessibility,Yes,GPLv2
+1118,kdeadmin,Yes,GPLv2
+1119,kdeartwork-screensavers,Yes,GPLv2 and LGPLv2+
+1120,kdegraphics-strigi-analyzer,Yes,LGPLv2+ and GPLv2
+1121,kdegraphics-thumbnailers,Yes,GPLv2+
+1122,kdelibs,Yes,LGPLv2+
+1123,kdelibs-common,No,LGPLv2+
+1124,kdelibs-ktexteditor,No,LGPLv2+
+1125,kdenetwork-common,No,GPLv2
+1126,kdenetwork-kdnssd,Yes,GPLv2
+1127,kdenetwork-kget,Yes,GPLv2
+1128,kdenetwork-kget-libs,No,GPLv2
+1129,kdenetwork-krdc,Yes,GPLv2
+1130,kdenetwork-krdc-libs,No,GPLv2
+1131,kdenetwork-krfb,Yes,GPLv2
+1132,kdenetwork-krfb-libs,No,GPLv2
+1133,kdepim,Yes,GPLv2
+1134,kdepim-libs,No,GPLv2
+1135,kdepim-runtime,No,GPLv2
+1136,kdepim-runtime-libs,No,GPLv2
+1137,kdepimlibs,No,LGPLv2+
+1138,kdepimlibs-akonadi,No,LGPLv2+
+1139,kdepimlibs-kxmlrpcclient,No,BSD
+1140,kdeplasma-addons,Yes,GPLv2+
+1141,kdeplasma-addons-libs,No,GPLv2+
+1142,kdeutils-minimal,Yes,GPLv2
+1143,kdf,No,GPLv2+
+1144,kernel,No,GPLv2
+1145,kernel-abi-whitelists,No,GPLv2
+1146,kernel-debug,No,GPLv2
+1147,kernel-debug-devel,No,GPLv2
+1148,kernel-devel,No,GPLv2
+1149,kernel-doc,No,GPLv2
+1150,kernel-headers,No,GPLv2
+1151,kernel-tools,Yes,GPLv2
+1152,kernel-tools-libs,No,GPLv2
+1153,kexec-tools,Yes,GPLv2
+1154,keybinder3,No,MIT
+1155,keyutils,No,GPLv2+ and LGPLv2+
+1156,keyutils-libs,No,GPLv2+ and LGPLv2+
+1157,kgpg,Yes,GPLv2+
+1158,kgreeter-plugins,No,GPLv2
+1159,khmeros-base-fonts,Yes,LGPLv2+
+1160,khmeros-battambang-fonts,Yes,LGPLv2+
+1161,khmeros-bokor-fonts,Yes,LGPLv2+
+1162,khmeros-fonts-common,No,LGPLv2+
+1163,khmeros-handwritten-fonts,Yes,LGPLv2+
+1164,khmeros-metal-chrieng-fonts,Yes,LGPLv2+
+1165,khmeros-muol-fonts,Yes,LGPLv2+
+1166,khmeros-siemreap-fonts,Yes,LGPLv2+
+1167,khotkeys,No,GPLv2
+1168,khotkeys-libs,No,GPLv2
+1169,kiconedit,Yes,GPLv2+
+1170,kinfocenter,No,GPLv2
+1171,kio_sysinfo,No,GPLv2+
+1172,kmag,No,GPLv2
+1173,kmenuedit,No,GPLv2
+1174,kmix,Yes,GPLv2+ and GFDL
+1175,kmod,No,GPLv2+
+1176,kmod-kvdo,Yes,GPLv2+
+1177,kmod-libs,No,LGPLv2+
+1178,kolourpaint,Yes,BSD and LGPLv2+
+1179,kolourpaint-libs,No,LGPLv2
+1180,konkretcmpi,No,MIT
+1181,konsole,Yes,GPLv2 and GFDL
+1182,konsole-part,No,GPLv2 and GFDL
+1183,kpartx,No,GPL+
+1184,kpatch,Yes,GPLv2
+1185,krb5-libs,No,MIT
+1186,krb5-pkinit,Yes,MIT
+1187,krb5-workstation,Yes,MIT
+1188,kruler,Yes,GPLv2 and GFDL
+1189,ksaneplugin,Yes,LGPLv2+
+1190,kscreen,No,GPLv2 or GPLv3
+1191,ksh,Yes,EPL
+1192,ksnapshot,Yes,GPLv2+
+1193,ksshaskpass,Yes,GPLv2
+1194,ksysguard,Yes,GPLv2
+1195,ksysguard-libs,No,GPLv2
+1196,ksysguardd,No,GPLv2
+1197,ktimer,No,GPLv2+
+1198,kurdit-unikurd-web-fonts,Yes,GPLv3
+1199,kwallet,Yes,GPLv2+
+1200,kwin,No,GPLv2
+1201,kwin-libs,No,GPLv2
+1202,kwrite,Yes,LGPLv2+
+1203,langtable,No,GPLv3+
+1204,langtable-data,No,GPLv3+ and MIT
+1205,langtable-python,No,GPLv3+
+1206,lapack,No,BSD
+1207,latencytop,Yes,GPLv2
+1208,latencytop-common,No,GPLv2
+1209,latencytop-tui,Yes,GPLv2
+1210,latrace,Yes,GPLv3+
+1211,lcms2,No,MIT
+1212,ldapjdk,Yes,MPLv1.1 or GPLv2+ or LGPLv2+
+1213,ldns,No,BSD
+1214,ledmon,Yes,GPLv2+
+1215,less,Yes,GPLv3+
+1216,lftp,Yes,GPLv3+
+1217,libabw,No,MPLv2.0
+1218,libacl,No,LGPLv2+
+1219,libaio,Yes,LGPLv2+
+1220,libao,No,GPLv2+
+1221,libappindicator-gtk3,Yes,LGPLv2 and LGPLv3
+1222,libappstream-glib,No,LGPLv2+
+1223,libarchive,No,BSD
+1224,libart_lgpl,No,LGPLv2+
+1225,libassuan,No,LGPLv2+ and GPLv3+
+1226,libasyncns,No,LGPLv2+
+1227,libatasmart,No,LGPLv2+
+1228,libatomic,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1229,libattr,No,LGPLv2+
+1230,libavc1394,No,GPLv2+ and LGPLv2+
+1231,libbase,No,LGPLv2
+1232,libbasicobjects,No,GPLv3+
+1233,libblkid,No,LGPLv2+
+1234,libblockdev,No,LGPLv2+
+1235,libblockdev-crypto,No,LGPLv2+
+1236,libblockdev-fs,No,LGPLv2+
+1237,libblockdev-loop,No,LGPLv2+
+1238,libblockdev-lvm,No,LGPLv2+
+1239,libblockdev-mdraid,No,LGPLv2+
+1240,libblockdev-nvdimm,No,LGPLv2+
+1241,libblockdev-part,No,LGPLv2+
+1242,libblockdev-swap,No,LGPLv2+
+1243,libblockdev-utils,No,LGPLv2+
+1244,libbluedevil,No,LGPLv2+
+1245,libbluray,No,LGPLv2+
+1246,libbonobo,No,GPLv2+ and LGPLv2+
+1247,libbonoboui,No,LGPLv2+
+1248,libburn,No,GPLv2+
+1249,libbytesize,No,LGPLv2+
+1250,libcacard,No,GPLv2+ and LGPLv2+ and BSD
+1251,libcacard-tools,No,GPLv2+ and LGPLv2+ and BSD
+1252,libcanberra,No,LGPLv2+
+1253,libcanberra-gtk2,Yes,LGPLv2+
+1254,libcanberra-gtk3,Yes,LGPLv2+
+1255,libcap,No,LGPLv2+
+1256,libcap-ng,No,LGPLv2+
+1257,libcdio,No,GPLv3+
+1258,libcdio-paranoia,No,GPLv2+ and LGPLv2+
+1259,libcdr,No,MPLv2.0 and Public Domain
+1260,libcgroup,Yes,LGPLv2+
+1261,libcgroup-tools,Yes,LGPLv2+
+1262,libchamplain,No,LGPLv2+
+1263,libchamplain-gtk,No,LGPLv2+
+1264,libchewing,No,LGPLv2+
+1265,libcmis,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1266,libcmpiutil,No,LGPLv2+
+1267,libcollection,No,LGPLv3+
+1268,libcom_err,No,MIT
+1269,libconfig,No,LGPLv2+
+1270,libcroco,No,LGPLv2
+1271,libcryptui,No,LGPLv2+
+1272,libcurl,No,MIT
+1273,libdaemon,No,LGPLv2+
+1274,libdb,No,BSD and LGPLv2 and Sleepycat
+1275,libdb-devel,No,BSD and LGPLv2 and Sleepycat
+1276,libdb-utils,No,BSD and LGPLv2 and Sleepycat
+1277,libdbusmenu,No,LGPLv3 or LGPLv2 and GPLv3
+1278,libdbusmenu-gtk3,No,LGPLv3 or LGPLv2 and GPLv3
+1279,libdhash,No,LGPLv3+
+1280,libdmapsharing,No,LGPLv2+
+1281,libdmx,No,MIT
+1282,libdnet,No,BSD
+1283,libdrm,No,MIT
+1284,libdv,No,LGPLv2+
+1285,libdvdnav,No,GPLv2+
+1286,libdvdread,No,GPLv2+
+1287,libdwarf,No,LGPLv2
+1288,libeasyfc,No,LGPLv3+
+1289,libeasyfc-gobject,No,LGPLv3+
+1290,libedit,No,BSD
+1291,libepoxy,No,MIT
+1292,liberation-fonts,No,Liberation
+1293,liberation-fonts-common,No,Liberation
+1294,liberation-mono-fonts,Yes,Liberation
+1295,liberation-narrow-fonts,Yes,Liberation
+1296,liberation-sans-fonts,Yes,Liberation
+1297,liberation-serif-fonts,Yes,Liberation
+1298,libestr,No,LGPLv2+
+1299,libetonyek,No,MPLv2.0
+1300,libevdev,No,MIT
+1301,libevent,No,BSD
+1302,libexif,No,LGPLv2+
+1303,libexttextcat,No,BSD
+1304,libfabric,No,GPLv2 or BSD
+1305,libfastjson,No,MIT
+1306,libffi,No,MIT and Public Domain
+1307,libfontenc,No,MIT
+1308,libfonts,No,LGPLv2 and UCD
+1309,libformula,No,LGPLv2
+1310,libfprint,No,LGPLv2+
+1311,libfreehand,No,MPLv2.0
+1312,libgcab1,No,LGPLv2+
+1313,libgcc,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1314,libgcrypt,No,LGPLv2+
+1315,libgdata,No,LGPLv2+
+1316,libgdither,No,GPLv2+
+1317,libgee,No,LGPLv2+
+1318,libgee06,No,LGPLv2+
+1319,libgepub,No,LGPLv2+
+1320,libgexiv2,No,GPLv2+
+1321,libgfortran,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1322,libgfortran4,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1323,libgfortran5,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1324,libglade2,No,LGPLv2+
+1325,libGLEW,No,BSD and MIT
+1326,libglvnd,No,MIT
+1327,libglvnd-egl,No,MIT
+1328,libglvnd-gles,No,MIT
+1329,libglvnd-glx,No,MIT
+1330,libgnome,No,LGPLv2+
+1331,libgnome-keyring,No,GPLv2+ and LGPLv2+
+1332,libgnomecanvas,No,LGPLv2+
+1333,libgnomekbd,No,LGPLv2+
+1334,libgnomeui,No,LGPLv2+
+1335,libgomp,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1336,libgovirt,No,LGPLv2+
+1337,libgpg-error,No,LGPLv2+
+1338,libgphoto2,No,GPLv2+ and GPLv2
+1339,libgpod,No,LGPLv2+
+1340,libgs,No,AGPLv3+
+1341,libgsf,No,LGPLv2
+1342,libgtop2,No,GPLv2+
+1343,libgudev1,No,LGPLv2+
+1344,libguestfs,Yes,LGPLv2+
+1345,libguestfs-inspect-icons,Yes,LGPLv2+
+1346,libguestfs-java,Yes,LGPLv2+
+1347,libguestfs-tools,Yes,GPLv2+
+1348,libguestfs-tools-c,Yes,GPLv2+
+1349,libguestfs-xfs,No,LGPLv2+
+1350,libgusb,No,LGPLv2+
+1351,libgweather,No,GPLv2+
+1352,libgxps,No,LGPLv2+
+1353,libhangul,No,LGPLv2+
+1354,libhbaapi,No,SNIA
+1355,libhbalinux,No,LGPLv2
+1356,libhif,No,LGPLv2+
+1357,libibmad,No,GPLv2 or BSD
+1358,libibumad,No,GPLv2 or BSD
+1359,libibverbs,No,GPLv2 or BSD
+1360,libical,No,LGPLv2 or MPLv2.0
+1361,libICE,No,MIT
+1362,libicu,No,MIT and UCD and Public Domain
+1363,libIDL,No,LGPLv2+
+1364,libidn,No,LGPLv2+ and GPLv3+ and GFDL
+1365,libiec61883,No,LGPLv2+
+1366,libieee1284,No,GPLv2+
+1367,libimobiledevice,No,LGPLv2+
+1368,libindicator-gtk3,No,GPLv3
+1369,libini_config,No,LGPLv3+
+1370,libinput,No,MIT
+1371,libinvm-cim,No,BSD
+1372,libinvm-cli,No,BSD
+1373,libinvm-i18n,No,BSD
+1374,libiodbc,No,LGPLv2 or BSD
+1375,libipa_hbac,No,LGPLv3+
+1376,libiptcdata,No,LGPLv2+
+1377,libiscsi,No,LGPLv2+
+1378,libisofs,No,GPLv2+ and LGPLv2+
+1379,libitm,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1380,libjose,No,ASL 2.0
+1381,libjpeg-turbo,No,IJG
+1382,libkadm5,No,MIT
+1383,libkcddb,No,LGPLv2+ and GPLv2+
+1384,libkdcraw,No,GPLv2+ and LGPLv2 and GPLv3+
+1385,libkexiv2,No,GPLv2+
+1386,libkipi,No,GPLv2+
+1387,libkkc,No,GPLv3+
+1388,libkkc-common,No,GPLv3+
+1389,libkkc-data,No,GPLv3+
+1390,libksane,No,LGPLv2+
+1391,libkscreen,No,GPLv2+
+1392,libkworkspace,No,GPLv2
+1393,liblangtag,No,(LGPLv3+ or MPLv2.0) and UCD
+1394,liblayout,No,LGPLv2+ and UCD
+1395,libldb,No,LGPLv3+
+1396,libloader,No,LGPLv2
+1397,liblockfile,No,GPLv2+ and LGPLv2+
+1398,liblouis,No,LGPLv3+
+1399,liblouis-python,No,LGPLv3+
+1400,libluksmeta,No,LGPLv2+
+1401,libmatchbox,No,LGPLv2+
+1402,libmaxminddb,No,ASL 2.0 and BSD
+1403,libmbim,No,LGPLv2+
+1404,libmbim-utils,No,GPLv2+
+1405,libmediaart,No,LGPLv2+
+1406,libmicrohttpd,No,LGPLv2+
+1407,libmng,No,zlib
+1408,libmnl,No,LGPLv2+
+1409,libmodman,No,LGPLv2+
+1410,libmount,No,LGPLv2+
+1411,libmpc,No,LGPLv3+ and GFDL
+1412,libmpcdec,No,BSD
+1413,libmspack,No,LGPLv2
+1414,libmspub,No,MPLv2.0
+1415,libmtp,No,LGPLv2+
+1416,libmusicbrainz,No,LGPLv2+
+1417,libmusicbrainz5,No,LGPLv2
+1418,libmwaw,No,LGPLv2+ or MPLv2.0
+1419,libmx,No,LGPLv2
+1420,libndp,No,LGPLv2+
+1421,libnetfilter_conntrack,No,GPLv2+
+1422,libnetfilter_queue,No,GPLv2
+1423,libnfnetlink,No,GPLv2+
+1424,libnfsidmap,No,BSD
+1425,libnftnl,No,GPLv2+
+1426,libnice,No,LGPLv2 and MPLv1.1
+1427,libnl,No,LGPLv2
+1428,libnl3,No,LGPLv2
+1429,libnl3-cli,No,LGPLv2
+1430,libnm-gtk,No,GPLv2+
+1431,libnma,No,GPLv2+
+1432,libnotify,No,LGPLv2+
+1433,libntlm,No,LGPLv2+
+1434,liboauth,No,MIT
+1435,libodfgen,No,LGPLv2+ or MPLv2.0
+1436,libofa,No,GPLv2
+1437,libogg,No,BSD
+1438,libopenraw,No,LGPLv3+
+1439,liborcus,No,MPLv2.0
+1440,libosinfo,No,LGPLv2+
+1441,libotf,No,LGPLv2+
+1442,libpagemaker,No,MPLv2.0
+1443,libpaper,No,GPLv2
+1444,libpath_utils,No,LGPLv3+
+1445,libpcap,No,BSD with advertising
+1446,libpciaccess,No,MIT
+1447,libpeas,No,LGPLv2+
+1448,libpeas-gtk,No,LGPLv2+
+1449,libpeas-loader-python,No,LGPLv2+
+1450,libpfm,Yes,MIT
+1451,libpinyin,No,GPLv2+
+1452,libpinyin-data,No,GPLv2+
+1453,libpipeline,No,GPLv3+
+1454,libplist,No,LGPLv2+
+1455,libpmem,No,BSD
+1456,libpmemblk,No,BSD
+1457,libpmemlog,No,BSD
+1458,libpmemobj,No,BSD
+1459,libpmempool,No,BSD
+1460,libpng,No,zlib
+1461,libpng12,Yes,zlib
+1462,libproxy,No,LGPLv2+
+1463,libproxy-mozjs,Yes,LGPLv2+
+1464,libpsm2,No,GPLv2 or BSD
+1465,libpurple,No,GPLv2+ and GPLv2 and MIT
+1466,libpwquality,No,BSD or GPLv2+
+1467,libqb,No,LGPLv2+
+1468,libqmi,No,LGPLv2+
+1469,libqmi-utils,No,GPLv2+
+1470,libquadmath,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1471,libquvi,No,LGPLv2+
+1472,libquvi-scripts,No,LGPLv2+
+1473,librados2,No,LGPL-2.0
+1474,LibRaw,No,BSD and (CDDL or LGPLv2)
+1475,libraw1394,No,LGPLv2+
+1476,librbd1,No,LGPL-2.0
+1477,librdkafka,No,BSD
+1478,librdmacm,No,GPLv2 or BSD
+1479,libref_array,No,LGPLv3+
+1480,librelp,No,GPLv3+
+1481,libreoffice-base,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1482,libreoffice-calc,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1483,libreoffice-core,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1484,libreoffice-data,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1485,libreoffice-draw,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1486,libreoffice-emailmerge,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1487,libreoffice-filters,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1488,libreoffice-graphicfilter,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1489,libreoffice-gtk2,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1490,libreoffice-gtk3,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1491,libreoffice-impress,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1492,libreoffice-langpack-en,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1493,libreoffice-math,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1494,libreoffice-ogltrans,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1495,libreoffice-opensymbol-fonts,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1496,libreoffice-pdfimport,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1497,libreoffice-pyuno,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1498,libreoffice-ure,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1499,libreoffice-ure-common,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1500,libreoffice-voikko,No,GPLv3+
+1501,libreoffice-wiki-publisher,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1502,libreoffice-writer,Yes,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1503,libreoffice-x11,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1504,libreoffice-xsltfilter,No,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0 and CC0
+1505,libreofficekit,No,MPLv2.0
+1506,librepo,No,LGPLv2+
+1507,libreport,No,GPLv2+
+1508,libreport-anaconda,No,GPLv2+
+1509,libreport-cli,Yes,GPLv2+
+1510,libreport-filesystem,No,GPLv2+
+1511,libreport-gtk,Yes,GPLv2+
+1512,libreport-plugin-bugzilla,No,GPLv2+
+1513,libreport-plugin-mailx,Yes,GPLv2+
+1514,libreport-plugin-reportuploader,No,GPLv2+
+1515,libreport-plugin-rhtsupport,No,GPLv2+
+1516,libreport-plugin-ureport,No,GPLv2+
+1517,libreport-python,No,GPLv2+
+1518,libreport-rhel,No,GPLv2+
+1519,libreport-rhel-anaconda-bugzilla,No,GPLv2+
+1520,libreport-web,No,GPLv2+
+1521,librepository,No,LGPLv2
+1522,libreswan,Yes,GPLv2
+1523,librevenge,No,(LGPLv2+ or MPLv2.0) and BSD
+1524,librpmem,No,BSD
+1525,librsvg2,Yes,LGPLv2+
+1526,librsvg2-tools,No,LGPLv2+
+1527,libsamplerate,No,GPLv2+
+1528,libsane-hpaio,Yes,GPLv2+
+1529,libseccomp,No,LGPLv2
+1530,libsecret,No,LGPLv2+
+1531,libselinux,No,Public Domain
+1532,libselinux-python,No,Public Domain
+1533,libselinux-python3,No,Public Domain
+1534,libselinux-ruby,No,Public Domain
+1535,libselinux-utils,No,Public Domain
+1536,libsemanage,No,LGPLv2+
+1537,libsemanage-python,No,LGPLv2+
+1538,libsepol,No,LGPLv2+
+1539,libserializer,No,LGPLv2+
+1540,libsexy,No,LGPLv2+
+1541,libshout,No,LGPLv2+
+1542,libsigc++20,No,LGPLv2+
+1543,libSM,No,MIT
+1544,libsmartcols,No,LGPLv2+
+1545,libsmbclient,No,GPLv3+ and LGPLv3+
+1546,libsmbios,No,GPLv2+ or OSL 2.1
+1547,libsmi,No,GPLv2+ and BSD
+1548,libsndfile,No,LGPLv2+ and GPLv2+ and BSD
+1549,libsolv,No,BSD
+1550,libsoup,No,LGPLv2
+1551,libspectre,No,GPLv2+
+1552,libspiro,No,GPLv2+
+1553,libsrtp,No,BSD
+1554,libss,No,MIT
+1555,libssh2,No,BSD
+1556,libsss_autofs,No,LGPLv3+
+1557,libsss_certmap,No,LGPLv3+
+1558,libsss_idmap,No,LGPLv3+
+1559,libsss_nss_idmap,No,LGPLv3+
+1560,libsss_simpleifp,No,GPLv3+
+1561,libsss_sudo,No,LGPLv3+
+1562,libstaroffice,No,MPLv2.0 or LGPLv2+
+1563,libstdc++,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1564,libstoragemgmt,Yes,LGPLv2+
+1565,libstoragemgmt-arcconf-plugin,Yes,LGPLv2+
+1566,libstoragemgmt-hpsa-plugin,Yes,LGPLv2+
+1567,libstoragemgmt-local-plugin,Yes,LGPLv2+
+1568,libstoragemgmt-megaraid-plugin,Yes,LGPLv2+
+1569,libstoragemgmt-nfs-plugin,Yes,LGPLv2+
+1570,libstoragemgmt-nfs-plugin-clibs,Yes,LGPLv2+
+1571,libstoragemgmt-nstor-plugin,Yes,LGPLv2+
+1572,libstoragemgmt-python,No,LGPLv2+
+1573,libstoragemgmt-python-clibs,No,LGPLv2+
+1574,libstoragemgmt-smis-plugin,Yes,LGPLv2+
+1575,libstoragemgmt-targetd-plugin,Yes,LGPLv2+
+1576,libstoragemgmt-udev,Yes,LGPLv2+
+1577,libsysfs,Yes,LGPLv2+
+1578,libtalloc,No,LGPLv3+
+1579,libtar,No,MIT
+1580,libtasn1,No,GPLv3+ and LGPLv2+
+1581,libtdb,No,LGPLv3+
+1582,libteam,No,LGPLv2+
+1583,libtevent,No,LGPLv3+
+1584,libthai,No,LGPLv2+
+1585,libtheora,No,BSD
+1586,libtiff,No,libtiff
+1587,libtimezonemap,No,GPLv3
+1588,libtirpc,No,SISSL and BSD
+1589,libtool-ltdl,No,LGPLv2+
+1590,libtranslit,No,GPLv3+
+1591,libtranslit-m17n,No,GPLv3+
+1592,libudisks2,No,LGPLv2+
+1593,libunistring,No,LGPLv3+
+1594,libunwind,No,BSD
+1595,libusal,No,GPLv2
+1596,libusb,No,LGPLv2+
+1597,libusbmuxd,No,LGPLv2+
+1598,libusbx,No,LGPLv2+
+1599,libuser,No,LGPLv2+
+1600,libuser-python,No,LGPLv2+
+1601,libusnic_verbs,No,GPLv2 or BSD
+1602,libutempter,No,LGPLv2+
+1603,libuuid,No,BSD
+1604,libv4l,No,LGPLv2+ and GPLv2
+1605,libva,No,MIT
+1606,libva-devel,No,MIT
+1607,libvdpau,No,MIT
+1608,libverto,No,MIT
+1609,libverto-libevent,No,MIT
+1610,libverto-tevent,No,MIT
+1611,libvirt,Yes,LGPLv2+
+1612,libvirt-bash-completion,No,LGPLv2+
+1613,libvirt-cim,Yes,LGPLv2+
+1614,libvirt-client,Yes,LGPLv2+
+1615,libvirt-daemon,No,LGPLv2+
+1616,libvirt-daemon-config-network,No,LGPLv2+
+1617,libvirt-daemon-config-nwfilter,No,LGPLv2+
+1618,libvirt-daemon-driver-interface,No,LGPLv2+
+1619,libvirt-daemon-driver-lxc,No,LGPLv2+
+1620,libvirt-daemon-driver-network,No,LGPLv2+
+1621,libvirt-daemon-driver-nodedev,No,LGPLv2+
+1622,libvirt-daemon-driver-nwfilter,No,LGPLv2+
+1623,libvirt-daemon-driver-qemu,No,LGPLv2+
+1624,libvirt-daemon-driver-secret,No,LGPLv2+
+1625,libvirt-daemon-driver-storage,No,LGPLv2+
+1626,libvirt-daemon-driver-storage-core,No,LGPLv2+
+1627,libvirt-daemon-driver-storage-disk,No,LGPLv2+
+1628,libvirt-daemon-driver-storage-gluster,No,LGPLv2+
+1629,libvirt-daemon-driver-storage-iscsi,No,LGPLv2+
+1630,libvirt-daemon-driver-storage-logical,No,LGPLv2+
+1631,libvirt-daemon-driver-storage-mpath,No,LGPLv2+
+1632,libvirt-daemon-driver-storage-rbd,No,LGPLv2+
+1633,libvirt-daemon-driver-storage-scsi,No,LGPLv2+
+1634,libvirt-daemon-kvm,No,LGPLv2+
+1635,libvirt-gconfig,No,LGPLv2+
+1636,libvirt-glib,No,LGPLv2+
+1637,libvirt-gobject,No,LGPLv2+
+1638,libvirt-java,Yes,MIT
+1639,libvirt-libs,No,LGPLv2+
+1640,libvirt-python,No,LGPLv2+
+1641,libvirt-snmp,Yes,GPLv2+
+1642,libvisio,No,MPLv2.0
+1643,libvisual,No,LGPLv2+
+1644,libvmem,No,BSD
+1645,libvmmalloc,No,BSD
+1646,libvncserver,No,GPLv2+
+1647,libvoikko,No,GPLv2+
+1648,libvorbis,No,BSD
+1649,libvpx,No,BSD
+1650,libwacom,No,MIT
+1651,libwacom-data,No,MIT
+1652,libwayland-client,No,MIT
+1653,libwayland-cursor,No,MIT
+1654,libwayland-egl,No,MIT
+1655,libwayland-server,No,MIT
+1656,libwbclient,No,GPLv3+ and LGPLv3+
+1657,libwebp,No,BSD
+1658,libwinpr,No,ASL 2.0
+1659,libwmf,No,LGPLv2+ and GPLv2+ and GPL+
+1660,libwmf-lite,No,LGPLv2+ and GPLv2+ and GPL+
+1661,libwnck3,No,LGPLv2+
+1662,libwpd,No,LGPLv2+ or MPLv2.0
+1663,libwpg,No,LGPLv2+ or MPLv2.0
+1664,libwps,No,LGPLv2+ or MPLv2.0
+1665,libwsman1,No,BSD
+1666,libwvstreams,No,LGPLv2+
+1667,libX11,No,MIT
+1668,libX11-common,No,MIT
+1669,libX11-devel,No,MIT
+1670,libXau,No,MIT
+1671,libXau-devel,No,MIT
+1672,libXaw,No,MIT
+1673,libxcb,No,MIT
+1674,libxcb-devel,No,MIT
+1675,libXcomposite,No,MIT
+1676,libXcursor,No,MIT
+1677,libXdamage,No,MIT
+1678,libXdmcp,No,MIT
+1679,libXevie,No,MIT
+1680,libXext,No,MIT
+1681,libXfixes,No,MIT
+1682,libXfont,No,MIT
+1683,libXfont2,No,MIT
+1684,libXft,No,MIT
+1685,libXi,No,MIT
+1686,libXinerama,No,MIT
+1687,libxkbcommon,No,MIT
+1688,libxkbcommon-x11,No,MIT
+1689,libxkbfile,No,MIT
+1690,libxklavier,No,LGPLv2+
+1691,libxml2,No,MIT
+1692,libxml2-python,No,MIT
+1693,libXmu,Yes,MIT
+1694,libXp,Yes,MIT
+1695,libXpm,No,MIT
+1696,libXrandr,No,MIT
+1697,libXrender,No,MIT
+1698,libXres,No,MIT
+1699,libXScrnSaver,No,MIT
+1700,libxshmfence,No,MIT
+1701,libxslt,No,MIT
+1702,libXt,No,MIT
+1703,libXtst,No,MIT
+1704,libXv,No,MIT
+1705,libXvMC,No,MIT
+1706,libXxf86dga,No,MIT
+1707,libXxf86misc,No,MIT
+1708,libXxf86vm,No,MIT
+1709,libyami,Yes,ASL 2.0
+1710,libyaml,No,MIT
+1711,libzapojit,No,LGPLv2+
+1712,libzmf,No,MPLv2.0
+1713,linux-firmware,Yes,"GPL+ and GPLv2+ and MIT and Redistributable, no modification permitted"
+1714,linuxconsoletools,No,GPLv2+
+1715,linuxptp,Yes,GPLv2+
+1716,lklug-fonts,Yes,GPLv2
+1717,lksctp-tools,Yes,GPLv2 and GPLv2+ and LGPLv2 and MIT
+1718,lldpad,Yes,GPLv2
+1719,llvm-private,No,NCSA
+1720,lm_sensors-libs,No,LGPLv2+ and GPLv3+ and GPLv2+ and Verbatim and Public Domain
+1721,lockdev,No,LGPLv2
+1722,log4cxx,No,ASL 2.0
+1723,log4j,No,ASL 2.0
+1724,logrotate,Yes,GPL+
+1725,logwatch,Yes,MIT
+1726,lohit-assamese-fonts,Yes,OFL
+1727,lohit-bengali-fonts,Yes,OFL
+1728,lohit-devanagari-fonts,Yes,OFL
+1729,lohit-gujarati-fonts,Yes,OFL
+1730,lohit-kannada-fonts,Yes,OFL
+1731,lohit-malayalam-fonts,Yes,OFL
+1732,lohit-marathi-fonts,Yes,OFL
+1733,lohit-nepali-fonts,Yes,OFL
+1734,lohit-oriya-fonts,Yes,OFL
+1735,lohit-punjabi-fonts,Yes,OFL
+1736,lohit-tamil-fonts,Yes,OFL
+1737,lohit-telugu-fonts,Yes,OFL
+1738,lorax,No,GPLv2+
+1739,lpsolve,No,LGPLv2+
+1740,lrzsz,Yes,GPLv2+
+1741,lshw,Yes,GPLv2
+1742,lsof,Yes,zlib and Sendmail and LGPLv2+
+1743,lsscsi,No,GPLv2+
+1744,ltrace,Yes,GPLv2+
+1745,lua,No,MIT
+1746,luksmeta,Yes,LGPLv2+
+1747,lvm2,Yes,GPLv2
+1748,lvm2-libs,No,LGPLv2
+1749,lvm2-python-boom,Yes,GPLv2
+1750,lz4,No,GPLv2+ and BSD
+1751,lzo,No,GPLv2+
+1752,lzo-minilzo,No,GPLv2+
+1753,lzop,No,GPLv2+
+1754,m17n-contrib,Yes,LGPLv2+
+1755,m17n-db,Yes,LGPLv2+
+1756,m17n-lib,No,LGPLv2+
+1757,m2crypto,No,MIT
+1758,m4,No,GPLv3+
+1759,madan-fonts,Yes,GPL+
+1760,mailcap,No,Public Domain and MIT
+1761,mailx,No,BSD with advertising and MPLv1.1
+1762,make,No,GPLv2+
+1763,malaga-suomi-voikko,No,GPLv2+
+1764,man-db,Yes,GPLv2+ and GPLv3+
+1765,man-pages,Yes,GPL+ and GPLv2+ and BSD and MIT and Copyright only and IEEE
+1766,man-pages-cs,No,GPLv2 and GPLv3 and BSD
+1767,man-pages-es,No,GPL+ and GPLv2+ and LDP and IEEE
+1768,man-pages-es-extra,No,GPL+ and GPLv2+ and LDP and IEEE
+1769,man-pages-fr,No,GPL+ and GPLv2 and GPLv2+ and LGPLv2+ and GPLv3+ and ImageMagick and ISC and Public Domain and BSD and MIT and ASL 2.0 and and UCD and IBM and TCL and xinetd
+1770,man-pages-it,No,GPL+ and GPLv2 and GPLv2+ and LGPLV2+ and GPLv3+ and BSD and MIT and Copyright only and IEEE
+1771,man-pages-ja,No,BSD and GFDL and GPL+ and GPLv2+ and MIT and Copyright only and IEEE and ISC and GPLv2 and LGPLv2 and LGPLv2+ with exceptions and AML and Public Domain and LGPLv2+ and Artistic clarified and (GPLv2+ or Artistic) and GPLv3+ and Sendmail and BSD with advertising and GPLv2 with exceptions and xinetd
+1772,man-pages-ko,No,Copyright only
+1773,man-pages-overrides,Yes,GPL+ and GPLv2+ and BSD and MIT and Copyright only and IEEE
+1774,man-pages-pl,No,GPL+ and BSD and MIT and GFDL
+1775,man-pages-ru,No,GPL+ and BSD and MIT and GFDL
+1776,man-pages-zh-CN,No,GFDL
+1777,mariadb,No,GPLv2 with exceptions and LGPLv2 and BSD
+1778,mariadb-libs,No,GPLv2 with exceptions and LGPLv2 and BSD
+1779,mariadb-server,No,GPLv2 with exceptions and LGPLv2 and BSD
+1780,marisa,No,BSD or LGPL
+1781,matchbox-window-manager,No,GPLv2+
+1782,mcstrans,No,GPL+
+1783,mdadm,Yes,GPLv2+
+1784,meanwhile,No,LGPLv2+
+1785,media-player-info,No,BSD
+1786,memkind,No,BSD
+1787,memstomp,Yes,LGPLv3+ and GPLv2+
+1788,memtest86+,Yes,GPLv2
+1789,mesa-dri-drivers,Yes,MIT
+1790,mesa-filesystem,No,MIT
+1791,mesa-libEGL,No,MIT
+1792,mesa-libgbm,No,MIT
+1793,mesa-libGL,No,MIT
+1794,mesa-libglapi,No,MIT
+1795,mesa-libGLES,Yes,MIT
+1796,mesa-libGLU,No,MIT
+1797,mesa-libxatracker,No,MIT
+1798,mesa-private-llvm,No,NCSA
+1799,metacity,Yes,GPLv2+
+1800,microcode_ctl,Yes,"GPLv2+ and Redistributable, no modification permitted"
+1801,minicom,Yes,GPL+ and GPLv2+ and GPLv2 and LGPLv2+ Public Domain and Copyright only
+1802,mipv6-daemon,Yes,GPLv2
+1803,mkbootdisk,Yes,GPLv2+
+1804,mksh,Yes,MirOS and ISC and BSD
+1805,mlocate,Yes,GPLv2
+1806,mobile-broadband-provider-info,No,Public Domain
+1807,ModemManager,Yes,GPLv2+
+1808,ModemManager-glib,No,GPLv2+
+1809,mokutil,No,BSD
+1810,motif,Yes,LGPLv2+
+1811,mousetweaks,Yes,GPLv3 and GFDL
+1812,mozilla-filesystem,No,MPLv1.1
+1813,mozjs17,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1814,mozjs24,No,MPLv2.0
+1815,mozjs52,No,MPLv2.0 and MPLv1.1 and BSD and GPLv2+ and GPLv3+ and LGPLv2.1 and LGPLv2.1+ and AFL and ASL 2.0
+1816,mpfr,No,LGPLv3+ and GPLv3+ and GFDL
+1817,mpg123-libs,No,LGPLv2+
+1818,mrtg,Yes,GPLv2+
+1819,mtdev,No,MIT
+1820,mtools,Yes,GPLv3+
+1821,mtr,Yes,GPLv2+
+1822,mutt,Yes,GPLv2+ and Public Domain
+1823,mutter,No,GPLv2+
+1824,mythes,No,BSD and MIT
+1825,mythes-bg,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1826,mythes-ca,No,GPL+
+1827,mythes-cs,No,MIT
+1828,mythes-da,No,GPLv2 or LGPLv2 or MPLv1.1
+1829,mythes-de,No,LGPLv2+
+1830,mythes-el,No,GPLv2+
+1831,mythes-en,No,MIT and Public Domain and (GPL+ or Artistic)
+1832,mythes-es,No,LGPLv2+
+1833,mythes-fr,No,LGPLv2+
+1834,mythes-ga,No,GFDL
+1835,mythes-hu,No,GPLv2+ and (GPLv2+ or LGPLv2+ or MPLv1.1) and GPLv2 and (GPL+ or LGPLv2+ or MPLv1.1)
+1836,mythes-it,No,AGPLv3
+1837,mythes-lb,No,EUPL 1.1
+1838,mythes-lv,No,LGPLv2+
+1839,mythes-mi,No,Public Domain
+1840,mythes-nb,No,GPL+
+1841,mythes-ne,No,LGPLv2
+1842,mythes-nl,No,BSD or CC-BY
+1843,mythes-nn,No,GPL+
+1844,mythes-pl,No,LGPLv2
+1845,mythes-pt,No,GPLv2+
+1846,mythes-ro,No,GPLv2+
+1847,mythes-ru,No,LGPLv2+
+1848,mythes-sk,No,MIT
+1849,mythes-sl,No,LGPLv2+
+1850,mythes-sv,No,MIT
+1851,mythes-uk,No,(GPLv2+ or LGPLv2+) and (GPLv2+ or LGPLv2+ or MPLv1.1) and GPLv2+
+1852,nafees-web-naskh-fonts,Yes,Bitstream Vera
+1853,nano,Yes,GPLv3+
+1854,nautilus,Yes,GPLv3+
+1855,nautilus-extensions,No,LGPLv2+
+1856,nautilus-sendto,Yes,GPLv2+
+1857,navilu-fonts,Yes,OFL
+1858,ncompress,Yes,Public Domain
+1859,ncurses,Yes,MIT
+1860,ncurses-base,No,MIT
+1861,ncurses-libs,No,MIT
+1862,ncurses-term,Yes,MIT
+1863,ndctl,No,GPLv2
+1864,ndctl-libs,No,LGPLv2
+1865,neon,No,LGPLv2+
+1866,nepomuk-core,No,LGPLv2 or LGPLv3
+1867,nepomuk-core-libs,No,LGPLv2 or LGPLv3
+1868,nepomuk-widgets,No,LGPLv2 or LGPLv3
+1869,net-snmp,Yes,BSD
+1870,net-snmp-agent-libs,No,BSD
+1871,net-snmp-libs,No,BSD
+1872,net-snmp-utils,Yes,BSD
+1873,net-tools,Yes,GPLv2+
+1874,netcf-libs,No,LGPLv2+
+1875,netlabel_tools,Yes,GPLv2
+1876,netpbm,No,BSD and GPLv2 and IJG and MIT and Public Domain
+1877,netpbm-devel,No,BSD and GPLv2 and IJG and MIT and Public Domain
+1878,netpbm-progs,Yes,BSD and GPLv2 and IJG and MIT and Public Domain
+1879,netsniff-ng,Yes,GPLv2
+1880,nettle,No,LGPLv2+
+1881,NetworkManager,Yes,GPLv2+
+1882,NetworkManager-adsl,Yes,GPLv2+
+1883,NetworkManager-bluetooth,Yes,GPLv2+
+1884,NetworkManager-glib,No,GPLv2+
+1885,NetworkManager-libnm,No,GPLv2+
+1886,NetworkManager-libreswan,No,GPLv2+
+1887,NetworkManager-libreswan-gnome,Yes,GPLv2+
+1888,NetworkManager-ppp,Yes,GPLv2+
+1889,NetworkManager-team,Yes,GPLv2+
+1890,NetworkManager-tui,Yes,GPLv2+
+1891,NetworkManager-wifi,Yes,GPLv2+
+1892,NetworkManager-wwan,Yes,GPLv2+
+1893,newt,No,LGPLv2
+1894,newt-python,No,LGPLv2
+1895,nfs-utils,Yes,MIT and GPLv2 and GPLv2+ and BSD
+1896,nfs4-acl-tools,Yes,BSD
+1897,nftables,No,GPLv2
+1898,nhn-nanum-brush-fonts,Yes,OFL
+1899,nhn-nanum-fonts-common,No,OFL
+1900,nhn-nanum-gothic-fonts,Yes,OFL
+1901,nhn-nanum-myeongjo-fonts,Yes,OFL
+1902,nhn-nanum-pen-fonts,Yes,OFL
+1903,nm-connection-editor,Yes,GPLv2+
+1904,nmap,Yes,GPLv2 and LGPLv2+ and GPLv2+ and BSD
+1905,nmap-ncat,Yes,GPLv2 and LGPLv2+ and GPLv2+ and BSD
+1906,nscd,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+1907,nspr,No,MPLv2.0
+1908,nss,No,MPLv2.0
+1909,nss-pam-ldapd,Yes,LGPLv2+
+1910,nss-pem,No,MPLv1.1
+1911,nss-softokn,No,MPLv2.0
+1912,nss-softokn-freebl,No,MPLv2.0
+1913,nss-sysinit,No,MPLv2.0
+1914,nss-tools,No,MPLv2.0
+1915,nss-util,No,MPLv2.0
+1916,nss_compat_ossl,No,MIT
+1917,ntp,Yes,(MIT and BSD and BSD with advertising) and GPLv2
+1918,ntpdate,Yes,(MIT and BSD and BSD with advertising) and GPLv2
+1919,ntsysv,Yes,GPLv2
+1920,numactl-libs,No,LGPLv2 and GPLv2
+1921,numad,No,LGPLv2
+1922,numpy,No,BSD and Python
+1923,nvme-cli,Yes,GPLv2+
+1924,nvmetcli,Yes,Apache License 2.0
+1925,obex-data-server,No,GPLv2+
+1926,obexd,No,GPLv2+
+1927,objectweb-asm,No,BSD
+1928,oddjob,Yes,BSD
+1929,oddjob-mkhomedir,Yes,BSD
+1930,okular,Yes,GPLv2
+1931,okular-libs,No,GPLv2
+1932,okular-part,No,GPLv2
+1933,opa-address-resolution,No,BSD or GPLv2
+1934,opa-basic-tools,No,BSD or GPLv2
+1935,opa-fastfabric,No,BSD or GPLv2
+1936,opa-fm,No,GPLv2 or BSD
+1937,opa-libopamgt,No,BSD or GPLv2
+1938,opal,No,MPLv1.0
+1939,open-sans-fonts,Yes,ASL 2.0
+1940,open-vm-tools,Yes,GPLv2
+1941,open-vm-tools-desktop,Yes,GPLv2
+1942,opencc,No,ASL 2.0
+1943,openchange,No,GPLv3+ and Public Domain
+1944,opencryptoki,Yes,CPL
+1945,opencryptoki-icsftok,No,CPL
+1946,opencryptoki-libs,No,CPL
+1947,opencryptoki-swtok,No,CPL
+1948,opencryptoki-tpmtok,No,CPL
+1949,OpenEXR-libs,No,BSD
+1950,openjade,No,BSD
+1951,openjpeg-libs,No,BSD
+1952,openjpeg2,No,BSD and MIT
+1953,openldap,No,OpenLDAP
+1954,openldap-clients,Yes,OpenLDAP
+1955,openlmi,Yes,LGPLv2+
+1956,openlmi-account,Yes,LGPLv2+
+1957,openlmi-account-doc,Yes,LGPLv2+
+1958,openlmi-fan,Yes,LGPLv2+
+1959,openlmi-fan-doc,Yes,LGPLv2+
+1960,openlmi-hardware,Yes,LGPLv2+
+1961,openlmi-hardware-doc,Yes,LGPLv2+
+1962,openlmi-indicationmanager-libs,No,LGPLv2+
+1963,openlmi-logicalfile,Yes,LGPLv2+
+1964,openlmi-logicalfile-doc,Yes,LGPLv2+
+1965,openlmi-networking,Yes,LGPLv2+
+1966,openlmi-networking-doc,Yes,LGPLv2+
+1967,openlmi-powermanagement,Yes,LGPLv2+
+1968,openlmi-powermanagement-doc,Yes,LGPLv2+
+1969,openlmi-providers,Yes,LGPLv2+
+1970,openlmi-python-base,No,LGPLv2+
+1971,openlmi-python-providers,No,LGPLv2+
+1972,openlmi-realmd,Yes,LGPLv2+
+1973,openlmi-realmd-doc,Yes,LGPLv2+
+1974,openlmi-service,Yes,LGPLv2+
+1975,openlmi-service-doc,Yes,LGPLv2+
+1976,openlmi-software,Yes,LGPLv2+
+1977,openlmi-software-doc,Yes,LGPLv2+
+1978,openlmi-storage,Yes,LGPLv2+
+1979,openlmi-storage-doc,Yes,LGPLv2+
+1980,openlmi-tools,Yes,GPLv2+
+1981,openlmi-tools-doc,Yes,GPLv2+
+1982,openobex,No,GPLv2+ and LGPLv2+
+1983,opensc,Yes,LGPLv2+
+1984,openscap,Yes,LGPLv2+
+1985,openscap-containers,No,LGPLv2+
+1986,openscap-python,No,LGPLv2+
+1987,openscap-scanner,No,LGPLv2+
+1988,openscap-utils,Yes,LGPLv2+
+1989,openslp,No,BSD
+1990,openslp-server,Yes,BSD
+1991,opensp,No,MIT
+1992,openssh,No,BSD
+1993,openssh-askpass,No,BSD
+1994,openssh-clients,Yes,BSD
+1995,openssh-keycat,Yes,BSD
+1996,openssh-server,Yes,BSD
+1997,openssl,No,OpenSSL
+1998,openssl-libs,No,OpenSSL
+1999,openssl098e,Yes,OpenSSL
+2000,openwsman-client,Yes,BSD
+2001,openwsman-server,Yes,BSD
+2002,oprofile,Yes,GPLv2+ and LGPLv2+
+2003,oprofile-gui,Yes,GPLv2+ and LGPLv2+
+2004,oprofile-jit,Yes,GPLv2+ and LGPLv2+
+2005,opus,No,BSD
+2006,ORBit2,No,LGPLv2+ and GPLv2+
+2007,orc,No,BSD
+2008,orca,Yes,LGPLv2+
+2009,os-prober,No,GPLv2+ and GPL+
+2010,oscap-anaconda-addon,Yes,GPLv2+
+2011,osinfo-db,No,LGPLv2+
+2012,osinfo-db-tools,No,GPLv2+
+2013,overpass-fonts,Yes,OFL
+2014,oxygen-gtk,Yes,LGPLv2+
+2015,oxygen-gtk2,No,LGPLv2+
+2016,oxygen-gtk3,No,LGPLv2+
+2017,oxygen-icon-theme,No,LGPLv3+
+2018,p11-kit,No,BSD
+2019,p11-kit-trust,No,BSD
+2020,PackageKit,No,GPLv2+ and LGPLv2+
+2021,PackageKit-command-not-found,Yes,GPLv2+ and LGPLv2+
+2022,PackageKit-glib,No,GPLv2+ and LGPLv2+
+2023,PackageKit-gstreamer-plugin,Yes,GPLv2+ and LGPLv2+
+2024,PackageKit-gtk3-module,Yes,GPLv2+ and LGPLv2+
+2025,PackageKit-yum,No,GPLv2+ and LGPLv2+
+2026,pakchois,No,LGPLv2+
+2027,paktype-naqsh-fonts,Yes,GPLv2 with exceptions
+2028,paktype-naskh-basic-fonts,Yes,GPLv2 with exceptions
+2029,paktype-tehreer-fonts,Yes,GPLv2 with exceptions
+2030,pam,No,BSD and GPLv2+
+2031,pam_krb5,No,BSD or LGPLv2+
+2032,pam_pkcs11,No,LGPLv2+
+2033,pango,No,LGPLv2+
+2034,pangomm,No,LGPLv2+
+2035,papi,Yes,BSD
+2036,paps,Yes,LGPLv2+
+2037,paps-libs,No,LGPLv2+
+2038,paratype-pt-sans-fonts,Yes,OFL
+2039,parfait,Yes,ASL 2.0
+2040,parted,Yes,GPLv3+
+2041,passivetex,No,Copyright only
+2042,passwd,Yes,BSD or GPL+
+2043,patch,No,GPLv3+
+2044,pavucontrol,Yes,GPLv2+
+2045,pax,Yes,BSD
+2046,pciutils,Yes,GPLv2+
+2047,pciutils-libs,No,GPLv2+
+2048,pcp,Yes,GPLv2+ and LGPLv2+ and CC-BY
+2049,pcp-conf,No,LGPLv2+
+2050,pcp-doc,No,GPLv2+ and CC-BY
+2051,pcp-export-pcp2graphite,No,GPLv2+
+2052,pcp-gui,Yes,GPLv2+ and LGPLv2+ and LGPLv2+ with exceptions
+2053,pcp-libs,No,LGPLv2+
+2054,pcp-manager,No,GPLv2+
+2055,pcp-pmda-activemq,No,GPLv2+
+2056,pcp-pmda-apache,No,GPLv2+
+2057,pcp-pmda-bash,No,GPLv2+
+2058,pcp-pmda-bonding,No,GPLv2+
+2059,pcp-pmda-cisco,No,GPLv2+
+2060,pcp-pmda-dbping,No,GPLv2+
+2061,pcp-pmda-dm,No,GPLv2+
+2062,pcp-pmda-ds389,No,GPLv2+
+2063,pcp-pmda-ds389log,No,GPLv2+
+2064,pcp-pmda-elasticsearch,No,GPLv2+
+2065,pcp-pmda-gfs2,No,GPLv2+
+2066,pcp-pmda-gluster,No,GPLv2+
+2067,pcp-pmda-gpfs,No,GPLv2+
+2068,pcp-pmda-gpsd,No,GPLv2+
+2069,pcp-pmda-json,No,GPLv2+
+2070,pcp-pmda-lmsensors,No,GPLv2+
+2071,pcp-pmda-logger,No,GPLv2+
+2072,pcp-pmda-lustre,No,GPLv2+
+2073,pcp-pmda-lustrecomm,No,GPLv2+
+2074,pcp-pmda-mailq,No,GPLv2+
+2075,pcp-pmda-memcache,No,GPLv2+
+2076,pcp-pmda-mounts,No,GPLv2+
+2077,pcp-pmda-mysql,No,GPLv2+
+2078,pcp-pmda-named,No,GPLv2+
+2079,pcp-pmda-netfilter,No,GPLv2+
+2080,pcp-pmda-news,No,GPLv2+
+2081,pcp-pmda-nfsclient,No,GPLv2+
+2082,pcp-pmda-nginx,No,GPLv2+
+2083,pcp-pmda-nvidia-gpu,No,GPLv2+
+2084,pcp-pmda-pdns,No,GPLv2+
+2085,pcp-pmda-postfix,No,GPLv2+
+2086,pcp-pmda-postgresql,No,GPLv2+
+2087,pcp-pmda-roomtemp,No,GPLv2+
+2088,pcp-pmda-rpm,No,GPLv2+
+2089,pcp-pmda-sendmail,No,GPLv2+
+2090,pcp-pmda-shping,No,GPLv2+
+2091,pcp-pmda-summary,No,GPLv2+
+2092,pcp-pmda-trace,No,GPLv2+
+2093,pcp-pmda-unbound,No,GPLv2+
+2094,pcp-pmda-weblog,No,GPLv2+
+2095,pcp-pmda-zswap,No,GPLv2+
+2096,pcp-selinux,No,GPLv2+ and CC-BY
+2097,pcp-system-tools,No,GPLv2+
+2098,pcp-webapi,No,GPLv2+
+2099,pcp-zeroconf,Yes,GPLv2+
+2100,pcre,No,BSD
+2101,pcre2,No,BSD
+2102,pcre2-utf16,No,BSD
+2103,pcsc-lite,No,BSD
+2104,pcsc-lite-ccid,Yes,LGPLv2+
+2105,pcsc-lite-libs,No,BSD
+2106,pentaho-libxml,No,LGPLv2
+2107,pentaho-reporting-flow-engine,No,LGPLv2+
+2108,perf,Yes,GPLv2
+2109,perl,Yes,(GPL+ or Artistic) and (GPLv2+ or Artistic) and Copyright Only and MIT and Public Domain and UCD
+2110,perl-Algorithm-Diff,No,GPL+ or Artistic
+2111,perl-App-cpanminus,Yes,GPL+ or Artistic
+2112,perl-Archive-Extract,No,GPL+ or Artistic
+2113,perl-Archive-Tar,No,GPL+ or Artistic
+2114,perl-Archive-Zip,No,GPL+ or Artistic
+2115,perl-Authen-SASL,No,GPL+ or Artistic
+2116,perl-autodie,No,GPL+ or Artistic
+2117,perl-B-Lint,No,GPL+ or Artistic
+2118,perl-Bit-Vector,No,(GPLv2+ or Artistic) and LGPLv2+
+2119,perl-Business-ISBN,No,GPL+ or Artistic
+2120,perl-Business-ISBN-Data,No,GPL+ or Artistic
+2121,perl-Carp,No,GPL+ or Artistic
+2122,perl-Carp-Clan,No,GPL+ or Artistic
+2123,perl-CGI,No,(GPL+ or Artistic) and Artistic 2.0
+2124,perl-Class-Load,No,GPL+ or Artistic
+2125,perl-Class-Singleton,No,GPL+ or Artistic
+2126,perl-Compress-Raw-Bzip2,No,GPL+ or Artistic
+2127,perl-Compress-Raw-Zlib,No,GPL+ or Artistic
+2128,perl-constant,No,GPL+ or Artistic
+2129,perl-Convert-ASN1,No,GPL+ or Artistic
+2130,perl-core,Yes,GPL+ or Artistic
+2131,perl-CPAN,No,GPL+ or Artistic
+2132,perl-CPAN-Meta,No,GPL+ or Artistic
+2133,perl-CPAN-Meta-Requirements,No,GPL+ or Artistic
+2134,perl-CPAN-Meta-YAML,No,GPL+ or Artistic
+2135,perl-CPANPLUS,No,GPL+ or Artistic
+2136,perl-CPANPLUS-Dist-Build,No,GPL+ or Artistic
+2137,perl-Crypt-SSLeay,Yes,GPL+ or Artistic
+2138,perl-Data-Dumper,No,GPL+ or Artistic
+2139,perl-Data-OptList,No,GPL+ or Artistic
+2140,perl-Date-Calc,Yes,GPL+ or Artistic
+2141,perl-Date-Manip,Yes,GPL+ or Artistic
+2142,perl-DateTime,Yes,(Artistic 2.0) and (GPL+ or Artistic)
+2143,perl-DateTime-Format-DateParse,Yes,GPL+ or Artistic
+2144,perl-DateTime-Locale,Yes,(GPL+ or Artistic) and MIT
+2145,perl-DateTime-TimeZone,Yes,(GPL+ or Artistic) and Public Domain
+2146,perl-DB_File,No,GPL+ or Artistic
+2147,perl-DBD-MySQL,No,GPL+ or Artistic
+2148,perl-DBD-Pg,No,GPLv2+ or Artistic
+2149,perl-DBD-SQLite,Yes,GPL+ or Artistic
+2150,perl-DBI,No,GPL+ or Artistic
+2151,perl-DBIx-Simple,No,Public Domain
+2152,perl-devel,No,GPL+ or Artistic
+2153,perl-Digest,No,GPL+ or Artistic
+2154,perl-Digest-HMAC,No,GPL+ or Artistic
+2155,perl-Digest-MD5,No,GPL+ or Artistic
+2156,perl-Digest-SHA,No,GPL+ or Artistic
+2157,perl-Digest-SHA1,No,GPL+ or Artistic
+2158,perl-Encode,No,GPL+ or Artistic
+2159,perl-Encode-Locale,No,GPL+ or Artistic
+2160,perl-Env,No,GPL+ or Artistic
+2161,perl-Exporter,No,GPL+ or Artistic
+2162,perl-ExtUtils-CBuilder,No,GPL+ or Artistic
+2163,perl-ExtUtils-Embed,No,GPL+ or Artistic
+2164,perl-ExtUtils-Install,No,GPL+ or Artistic
+2165,perl-ExtUtils-MakeMaker,No,GPL+ or Artistic
+2166,perl-ExtUtils-Manifest,No,GPL+ or Artistic
+2167,perl-ExtUtils-ParseXS,No,GPL+ or Artistic
+2168,perl-FCGI,No,OML
+2169,perl-File-CheckTree,No,GPL+ or Artistic
+2170,perl-File-Fetch,No,GPL+ or Artistic
+2171,perl-File-Listing,No,GPL+ or Artistic
+2172,perl-File-Path,No,GPL+ or Artistic
+2173,perl-File-Temp,No,GPL+ or Artistic
+2174,perl-Filter,No,GPL+ or Artistic
+2175,perl-Font-AFM,No,GPL+ or Artistic) and Copyright only
+2176,perl-Getopt-Long,No,GPLv2+ or Artistic
+2177,perl-gettext,Yes,GPL+ or Artistic
+2178,perl-GSSAPI,No,GPL+ or Artistic
+2179,perl-hivex,No,LGPLv2
+2180,perl-homedir,Yes,GPL+ or Artistic
+2181,perl-HTML-Format,No,GPL+ or Artistic
+2182,perl-HTML-Parser,No,GPL+ or Artistic
+2183,perl-HTML-Tagset,No,GPL+ or Artistic
+2184,perl-HTML-Tree,No,GPL+ or Artistic
+2185,perl-HTTP-Cookies,No,GPL+ or Artistic
+2186,perl-HTTP-Daemon,No,GPL+ or Artistic
+2187,perl-HTTP-Date,No,GPL+ or Artistic
+2188,perl-HTTP-Message,No,GPL+ or Artistic
+2189,perl-HTTP-Negotiate,No,GPL+ or Artistic
+2190,perl-HTTP-Tiny,No,GPL+ or Artistic
+2191,perl-IO-Compress,No,GPL+ or Artistic
+2192,perl-IO-HTML,No,GPL+ or Artistic
+2193,perl-IO-Socket-INET6,No,GPL+ or Artistic
+2194,perl-IO-Socket-IP,No,GPL+ or Artistic
+2195,perl-IO-Socket-SSL,No,GPL+ or Artistic
+2196,perl-IO-stringy,No,GPL+ or Artistic
+2197,perl-IO-Zlib,No,GPL+ or Artistic
+2198,perl-IPC-Cmd,No,GPL+ or Artistic
+2199,perl-JSON,No,GPL+ or Artistic
+2200,perl-JSON-PP,No,GPL+ or Artistic
+2201,perl-LDAP,Yes,GPL+ or Artistic
+2202,perl-libintl,No,LGPLv2+
+2203,perl-libs,No,GPL+ or Artistic
+2204,perl-libwww-perl,No,GPL+ or Artistic
+2205,perl-libxml-perl,No,(GPL+ or Artistic) and Public Domain
+2206,perl-List-MoreUtils,No,GPL+ or Artistic
+2207,perl-local-lib,No,GPL+ or Artistic
+2208,perl-Locale-Codes,No,GPL+ or Artistic
+2209,perl-Locale-Maketext,No,GPL+ or Artistic
+2210,perl-Locale-Maketext-Simple,No,MIT
+2211,perl-Log-Message,No,GPL+ or Artistic
+2212,perl-Log-Message-Simple,No,GPL+ or Artistic
+2213,perl-LWP-MediaTypes,No,(GPL+ or Artistic) and Public Domain
+2214,perl-macros,No,GPL+ or Artistic
+2215,perl-Module-Build,No,GPL+ or Artistic
+2216,perl-Module-CoreList,No,GPL+ or Artistic
+2217,perl-Module-Implementation,No,Artistic 2.0
+2218,perl-Module-Load,No,GPL+ or Artistic
+2219,perl-Module-Load-Conditional,No,GPL+ or Artistic
+2220,perl-Module-Loaded,No,GPL+ or Artistic
+2221,perl-Module-Metadata,No,GPL+ or Artistic
+2222,perl-Module-Pluggable,No,GPL+ or Artistic
+2223,perl-Module-Runtime,No,GPL+ or Artistic
+2224,perl-Module-Signature,No,CC0 and (GPL+ or Artistic)
+2225,perl-Mozilla-CA,No,MPLv1.1 or LGPLv2+ or GPLv2+
+2226,perl-Mozilla-LDAP,Yes,GPLv2+ and LGPLv2+ and MPLv1.1
+2227,perl-Net-Daemon,No,GPL+ or Artistic
+2228,perl-Net-HTTP,No,GPL+ or Artistic
+2229,perl-Net-LibIDN,No,GPL+ or Artistic
+2230,perl-Net-SSLeay,No,OpenSSL
+2231,perl-Object-Accessor,No,GPL+ or Artistic
+2232,perl-Package-Constants,No,GPL+ or Artistic
+2233,perl-Package-DeprecationManager,No,Artistic 2.0
+2234,perl-Package-Stash,No,GPL+ or Artistic
+2235,perl-Package-Stash-XS,No,GPL+ or Artistic
+2236,perl-PAR-Dist,No,GPL+ or Artistic
+2237,perl-Params-Check,No,GPL+ or Artistic
+2238,perl-Params-Util,No,GPL+ or Artistic
+2239,perl-Params-Validate,No,Artistic 2.0
+2240,perl-parent,No,GPL+ or Artistic
+2241,perl-Parse-CPAN-Meta,No,GPL+ or Artistic
+2242,perl-PathTools,No,(GPL+ or Artistic) and BSD
+2243,perl-PCP-PMDA,No,GPLv2+
+2244,perl-Perl-OSType,No,GPL+ or Artistic
+2245,perl-Perl4-CoreLibs,Yes,GPL+ or Artistic
+2246,perl-PlRPC,No,GPL+ or Artistic
+2247,perl-Pod-Checker,No,GPL+ or Artistic
+2248,perl-Pod-Escapes,No,GPL+ or Artistic
+2249,perl-Pod-LaTeX,No,GPL+ or Artistic
+2250,perl-Pod-Parser,No,GPL+ or Artistic
+2251,perl-Pod-Perldoc,No,GPL+ or Artistic
+2252,perl-Pod-Simple,No,GPL+ or Artistic
+2253,perl-Pod-Usage,No,GPL+ or Artistic
+2254,perl-podlators,No,GPL+ or Artistic
+2255,perl-Scalar-List-Utils,No,GPL+ or Artistic
+2256,perl-SGMLSpm,No,GPLv2+
+2257,perl-SNMP_Session,No,Artistic 2.0
+2258,perl-Socket,No,GPL+ or Artistic
+2259,perl-Socket6,No,BSD
+2260,perl-srpm-macros,No,GPLv3+
+2261,perl-Storable,No,GPL+ or Artistic
+2262,perl-String-ShellQuote,No,(GPL+ or Artistic) and GPLv2+
+2263,perl-Sub-Install,No,GPL+ or Artistic
+2264,perl-Sys-CPU,No,(GPL+ or Artistic) and (LGPLv3 or Artistic 2.0)
+2265,perl-Sys-Guestfs,No,LGPLv2+
+2266,perl-Sys-MemInfo,No,(GPLv1+ or Artistic) and LGPLv2+
+2267,perl-Sys-Syslog,No,GPL+ or Artistic
+2268,perl-Sys-Virt,Yes,GPLv2+ or Artistic
+2269,perl-Term-UI,No,GPL+ or Artistic
+2270,perl-Test-Harness,No,GPL+ or Artistic
+2271,perl-Test-Simple,No,GPL+ or Artistic
+2272,perl-Text-Diff,No,(GPL+ or Artistic) and (GPLv2+ or Artistic) and MIT
+2273,perl-Text-ParseWords,No,GPL+ or Artistic
+2274,perl-Text-Soundex,No,Copyright only
+2275,perl-Text-Unidecode,No,GPL+ or Artistic
+2276,perl-Thread-Queue,No,GPL+ or Artistic
+2277,perl-threads,No,GPL+ or Artistic
+2278,perl-threads-shared,No,GPL+ or Artistic
+2279,perl-Time-HiRes,No,GPL+ or Artistic
+2280,perl-Time-Local,No,GPL+ or Artistic
+2281,perl-Time-Piece,No,GPL+ or Artistic
+2282,perl-TimeDate,No,GPL+ or Artistic
+2283,perl-Try-Tiny,No,MIT
+2284,perl-URI,No,GPL+ or Artistic
+2285,perl-version,No,GPL+ or Artistic
+2286,perl-Version-Requirements,No,GPL+ or Artistic
+2287,perl-WWW-RobotRules,No,GPL+ or Artistic
+2288,perl-XML-Dumper,Yes,GPL+ or Artistic
+2289,perl-XML-Filter-BufferText,No,GPL+ or Artistic
+2290,perl-XML-Grove,Yes,GPL+ or Artistic
+2291,perl-XML-NamespaceSupport,No,GPL+ or Artistic
+2292,perl-XML-Parser,No,GPL+ or Artistic
+2293,perl-XML-SAX-Base,No,GPL+ or Artistic
+2294,perl-XML-SAX-Writer,No,GPL+ or Artistic
+2295,perl-XML-Twig,Yes,GPL+ or Artistic
+2296,perl-XML-Writer,No,CC0
+2297,perl-XML-XPath,No,GPL+ or Artistic
+2298,perl-YAML,No,GPL+ or Artistic
+2299,perl-YAML-Tiny,No,GPL+ or Artistic
+2300,pexpect,No,MIT
+2301,phonon,No,LGPLv2+
+2302,phonon-backend-gstreamer,Yes,LGPLv2+
+2303,pidgin,Yes,GPLv2+ and GPLv2 and MIT
+2304,pidgin-sipe,Yes,GPLv2+
+2305,pinentry,No,GPLv2+
+2306,pinentry-gtk,No,GPLv2+
+2307,pinentry-qt,Yes,GPLv2
+2308,pinentry-qt4,No,GPLv2 or GPLv3
+2309,pinfo,Yes,GPLv2
+2310,pixman,No,MIT
+2311,pkgconfig,No,GPLv2+
+2312,plasma-scriptengine-python,Yes,GPLv2
+2313,plymouth,Yes,GPLv2+
+2314,plymouth-core-libs,No,GPLv2+
+2315,plymouth-graphics-libs,No,GPLv2+
+2316,plymouth-plugin-label,No,GPLv2+
+2317,plymouth-plugin-two-step,No,GPLv2+
+2318,plymouth-scripts,No,GPLv2+
+2319,plymouth-system-theme,Yes,GPLv2+
+2320,plymouth-theme-charge,No,GPLv2+
+2321,pm-utils,Yes,GPLv2
+2322,pmdk-convert,No,BSD
+2323,pmempool,No,BSD
+2324,pnm2ppa,Yes,GPLv2+ and GPLv2
+2325,po4a,No,GPL+
+2326,policycoreutils,Yes,GPLv2
+2327,policycoreutils-devel,No,GPLv2
+2328,policycoreutils-gui,Yes,GPLv2
+2329,policycoreutils-newrole,No,GPLv2
+2330,policycoreutils-python,No,GPLv2
+2331,policycoreutils-sandbox,No,GPLv2
+2332,polkit,No,LGPLv2+
+2333,polkit-kde,No,GPLv2+
+2334,polkit-pkla-compat,No,LGPLv2+
+2335,polkit-qt,No,GPLv2+
+2336,poppler,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+2337,poppler-data,No,BSD and GPLv2 and GPLv3+
+2338,poppler-glib,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+2339,poppler-qt,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+2340,poppler-utils,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+2341,popt,No,MIT
+2342,postfix,Yes,IBM and GPLv2+
+2343,postfix-perl-scripts,No,IBM and GPLv2+
+2344,postgresql-jdbc,No,BSD and ASL 2.0
+2345,postgresql-libs,No,PostgreSQL
+2346,pothana2000-fonts,Yes,GPLv2+ with exceptions
+2347,powertop,Yes,GPLv2
+2348,ppp,Yes,BSD and LGPLv2+ and GPLv2+ and Public Domain
+2349,pptp,Yes,GPLv2+
+2350,prelink,Yes,GPLv2+
+2351,procmail,Yes,GPLv2+ or Artistic
+2352,procps-ng,Yes,GPL+ and GPLv2 and GPLv2+ and GPLv3+ and LGPLv2+
+2353,protobuf,No,BSD
+2354,ps_mem,Yes,LGPLv2
+2355,psacct,Yes,GPLv3+
+2356,psmisc,No,GPLv2+
+2357,pth,No,LGPLv2+
+2358,ptlib,No,MPLv1.0
+2359,pulseaudio,Yes,LGPLv2+
+2360,pulseaudio-gdm-hooks,No,LGPLv2+
+2361,pulseaudio-libs,No,LGPLv2+
+2362,pulseaudio-libs-glib2,No,LGPLv2+
+2363,pulseaudio-module-bluetooth,No,LGPLv2+
+2364,pulseaudio-module-x11,Yes,LGPLv2+
+2365,pulseaudio-utils,Yes,LGPLv2+
+2366,purple-sipe,No,GPLv2+
+2367,pycairo,No,MPLv1.1 or LGPLv2
+2368,pygobject2,No,LGPLv2+
+2369,pygpgme,No,LGPLv2+
+2370,pygtk2,No,LGPLv2+
+2371,pygtk2-libglade,No,LGPLv2+
+2372,pykde4,No,LGPLv2+
+2373,pykickstart,No,GPLv2
+2374,pyldb,No,LGPLv3+
+2375,pyliblzma,No,LGPLv3+
+2376,pyOpenSSL,No,ASL 2.0
+2377,pyorbit,No,LGPLv2+
+2378,PyPAM,Yes,LGPLv2
+2379,pyparsing,No,MIT
+2380,pyparted,No,GPLv2+
+2381,PyQt4,No,(GPLv3 or GPLv2 with exceptions) and BSD
+2382,pytalloc,No,LGPLv3+
+2383,python,No,Python
+2384,python-augeas,No,LGPLv2+
+2385,python-backports,No,Public Domain
+2386,python-backports-ssl_match_hostname,No,Python
+2387,python-bcc,No,ASL 2.0
+2388,python-beaker,No,BSD and MIT
+2389,python-blivet,No,LGPLv2+
+2390,python-brlapi,No,LGPLv2+
+2391,python-cffi,No,MIT
+2392,python-chardet,No,LGPLv2
+2393,python-configobj,No,BSD
+2394,python-configshell,No,ASL 2.0
+2395,python-coverage,No,BSD and (MIT or GPLv2)
+2396,python-cpio,No,LGPLv2+
+2397,python-cups,No,GPLv2+
+2398,python-custodia,No,GPLv3+
+2399,python-dateutil,No,Python
+2400,python-decorator,No,BSD
+2401,python-deltarpm,No,BSD
+2402,python-di,No,GPLv2+
+2403,python-dmidecode,No,GPLv2
+2404,python-dns,No,MIT
+2405,python-enum34,No,BSD
+2406,python-ethtool,No,GPLv2
+2407,python-firewall,No,GPLv2+
+2408,python-gobject,No,LGPLv2+ and MIT
+2409,python-gobject-base,No,LGPLv2+ and MIT
+2410,python-gssapi,No,ISC
+2411,python-gudev,No,LGPLv3+
+2412,python-hwdata,No,GPLv2
+2413,python-idna,No,BSD and Python and Unicode
+2414,python-iniparse,No,MIT
+2415,python-inotify,No,MIT
+2416,python-ipaddr,Yes,ASL 2.0
+2417,python-ipaddress,No,Python
+2418,python-IPy,No,BSD
+2419,python-javapackages,No,BSD
+2420,python-jsonpointer,No,BSD
+2421,python-jwcrypto,No,LGPLv3+
+2422,python-kdcproxy,No,MIT
+2423,python-kerberos,No,ASL 2.0
+2424,python-kitchen,No,LGPLv2+
+2425,python-kmod,No,LGPLv2+
+2426,python-krbV,No,LGPLv2+
+2427,python-ldap,No,Python
+2428,python-libguestfs,No,LGPLv2+
+2429,python-libipa_hbac,No,LGPLv3+
+2430,python-libs,No,Python
+2431,python-linux-procfs,No,GPLv2
+2432,python-lxml,No,BSD
+2433,python-magic,No,BSD
+2434,python-mako,No,(MIT and Python) and (BSD or GPLv2)
+2435,python-markupsafe,No,BSD
+2436,python-meh,No,GPLv2+
+2437,python-meh-gui,No,GPLv2+
+2438,python-netaddr,No,BSD
+2439,python-netifaces,No,MIT
+2440,python-nose,No,LGPLv2+ and Public Domain
+2441,python-nss,No,MPLv2.0 or GPLv2+ or LGPLv2+
+2442,python-ntplib,No,LGPLv2+
+2443,python-paramiko,No,LGPLv2+
+2444,python-paste,No,MIT and ZPLv2.0 and Python and Public Domain and (AFL or MIT) and (MIT or ASL 2.0)
+2445,python-pcp,No,GPLv2+
+2446,python-perf,No,GPLv2
+2447,python-pillow,No,MIT
+2448,python-ply,No,BSD
+2449,python-psycopg2,No,LGPLv3+ with exceptions
+2450,python-pwquality,No,BSD or GPLv2+
+2451,python-pyblock,No,GPLv2 or GPLv3
+2452,python-pycparser,No,BSD
+2453,python-pycurl,No,LGPLv2+ or MIT
+2454,python-pyudev,No,LGPLv2+
+2455,python-qrcode-core,No,BSD
+2456,python-rados,No,LGPL-2.0
+2457,python-rbd,No,LGPL-2.0
+2458,python-reportlab,No,BSD
+2459,python-requests,No,ASL 2.0
+2460,python-rhsm,No,GPLv2
+2461,python-rhsm-certificates,No,GPLv2
+2462,python-rtslib,No,ASL 2.0
+2463,python-schedutils,No,GPLv2
+2464,python-setuptools,No,Python or ZPLv2.0
+2465,python-six,No,MIT
+2466,python-slip,No,GPLv2+
+2467,python-slip-dbus,No,GPLv2+
+2468,python-smbc,Yes,GPLv2+
+2469,python-srpm-macros,No,MIT
+2470,python-sss,No,LGPLv3+
+2471,python-sss-murmur,No,LGPLv3+
+2472,python-sssdconfig,No,GPLv3+
+2473,python-suds,No,LGPLv3+
+2474,python-syspurpose,No,GPLv2
+2475,python-tdb,No,LGPLv3+
+2476,python-tempita,No,MIT
+2477,python-urlgrabber,No,LGPLv2+
+2478,python-urllib3,No,MIT
+2479,python-urwid,No,LGPLv2+
+2480,python-volume_key,Yes,GPLv2 and (MPLv1.1 or GPLv2 or LGPLv2)
+2481,python-yubico,No,BSD
+2482,python2-blivet3,No,LGPLv2+
+2483,python2-blockdev,No,LGPLv2+
+2484,python2-bytesize,No,LGPLv2+
+2485,python2-caribou,No,LGPLv2+
+2486,python2-cryptography,No,ASL 2.0 or BSD
+2487,python2-futures,No,Python
+2488,python2-hawkey,No,LGPLv2+
+2489,python2-ipaclient,No,GPLv3+
+2490,python2-ipalib,No,GPLv3+
+2491,python2-pyasn1,No,BSD
+2492,python2-pyasn1-modules,No,BSD
+2493,python2-pyatspi,No,LGPLv2 and GPLv2
+2494,python2-subprocess32,No,Python
+2495,python3,No,Python
+2496,python3-libs,No,Python
+2497,python3-pip,No,MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
+2498,python3-rpm-generators,No,GPLv2+
+2499,python3-rpm-macros,No,MIT
+2500,python3-setuptools,No,MIT and (BSD or ASL 2.0)
+2501,python3-wheel,No,MIT
+2502,pytz,No,MIT
+2503,pyusb,No,BSD
+2504,pywbem,No,LGPLv2
+2505,pyxattr,No,LGPLv2+
+2506,PyYAML,No,MIT
+2507,qca2,No,LGPLv2+
+2508,qemu-guest-agent,Yes,GPLv2
+2509,qemu-img,No,GPLv2 and GPLv2+ and CC-BY
+2510,qemu-kvm,Yes,GPLv2 and GPLv2+ and CC-BY
+2511,qemu-kvm-common,No,GPLv2 and GPLv2+ and CC-BY
+2512,qemu-kvm-tools,Yes,GPLv2 and GPLv2+ and CC-BY
+2513,qgnomeplatform,Yes,LGPLv2+
+2514,qimageblitz,No,BSD and ImageMagick
+2515,qjson,No,GPLv2+
+2516,qpdf-libs,No,Artistic 2.0 and MIT
+2517,qrencode-libs,No,LGPLv2+
+2518,qt,No,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+2519,qt-mysql,No,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+2520,qt-settings,No,MIT
+2521,qt-x11,No,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+2522,qt3,No,QPL or GPLv2 or GPLv3
+2523,qt5-qtbase,No,LGPLv2 with exceptions or GPLv3 with exceptions
+2524,qt5-qtbase-common,No,LGPLv2 with exceptions or GPLv3 with exceptions
+2525,qt5-qtbase-gui,No,LGPLv2 with exceptions or GPLv3 with exceptions
+2526,quota,Yes,BSD and LGPLv2+ and GPLv2 and GPLv2+
+2527,quota-nls,No,BSD and LGPLv2+ and GPLv2 and GPLv2+
+2528,radvd,No,BSD with advertising
+2529,raptor2,No,GPLv2+ or LGPLv2+ or ASL 2.0
+2530,rarian,No,LGPLv2+
+2531,rarian-compat,No,GPLv2+
+2532,rasqal,No,LGPLv2+ or ASL 2.0
+2533,rdate,Yes,GPLv2+
+2534,rdma-core,Yes,GPLv2 or BSD
+2535,readline,No,GPLv3+
+2536,realmd,Yes,LGPLv2+
+2537,rear,Yes,GPLv3
+2538,Red_Hat_Enterprise_Linux-Release_Notes-7-as-IN,No,CC-BY-SA
+2539,Red_Hat_Enterprise_Linux-Release_Notes-7-bn-IN,No,CC-BY-SA
+2540,Red_Hat_Enterprise_Linux-Release_Notes-7-de-DE,No,CC-BY-SA
+2541,Red_Hat_Enterprise_Linux-Release_Notes-7-en-US,Yes,CC-BY-SA
+2542,Red_Hat_Enterprise_Linux-Release_Notes-7-es-ES,No,CC-BY-SA
+2543,Red_Hat_Enterprise_Linux-Release_Notes-7-fr-FR,No,CC-BY-SA
+2544,Red_Hat_Enterprise_Linux-Release_Notes-7-gu-IN,No,CC-BY-SA
+2545,Red_Hat_Enterprise_Linux-Release_Notes-7-hi-IN,No,CC-BY-SA
+2546,Red_Hat_Enterprise_Linux-Release_Notes-7-it-IT,No,CC-BY-SA
+2547,Red_Hat_Enterprise_Linux-Release_Notes-7-ja-JP,No,CC-BY-SA
+2548,Red_Hat_Enterprise_Linux-Release_Notes-7-kn-IN,No,CC-BY-SA
+2549,Red_Hat_Enterprise_Linux-Release_Notes-7-ko-KR,No,CC-BY-SA
+2550,Red_Hat_Enterprise_Linux-Release_Notes-7-ml-IN,No,CC-BY-SA
+2551,Red_Hat_Enterprise_Linux-Release_Notes-7-mr-IN,No,CC-BY-SA
+2552,Red_Hat_Enterprise_Linux-Release_Notes-7-or-IN,No,CC-BY-SA
+2553,Red_Hat_Enterprise_Linux-Release_Notes-7-pa-IN,No,CC-BY-SA
+2554,Red_Hat_Enterprise_Linux-Release_Notes-7-pt-BR,No,CC-BY-SA
+2555,Red_Hat_Enterprise_Linux-Release_Notes-7-ru-RU,No,CC-BY-SA
+2556,Red_Hat_Enterprise_Linux-Release_Notes-7-ta-IN,No,CC-BY-SA
+2557,Red_Hat_Enterprise_Linux-Release_Notes-7-te-IN,No,CC-BY-SA
+2558,Red_Hat_Enterprise_Linux-Release_Notes-7-zh-CN,No,CC-BY-SA
+2559,Red_Hat_Enterprise_Linux-Release_Notes-7-zh-TW,No,CC-BY-SA
+2560,redfish-finder,No,GPLv2
+2561,redhat-access-gui,Yes,ASL 2.0
+2562,redhat-bookmarks,No,GFDL
+2563,redhat-indexhtml,Yes,Distributable
+2564,redhat-logos,No,"Licensed only for approved usage, see COPYING for details."
+2565,redhat-lsb-core,Yes,GPLv2
+2566,redhat-lsb-submod-security,No,GPLv2
+2567,redhat-menus,No,GPL+
+2568,redhat-release-client,Yes,GPLv2
+2569,redhat-release-eula,Yes,n/a
+2570,redhat-rpm-config,No,GPL+
+2571,redhat-support-lib-python,No,ASL 2.0
+2572,redhat-support-tool,Yes,ASL 2.0
+2573,redhat-upgrade-dracut,Yes,GPLv2+
+2574,redhat-upgrade-dracut-plymouth,No,GPLv2+
+2575,redhat-upgrade-tool,Yes,GPLv2+
+2576,redland,No,LGPLv2+ or ASL 2.0
+2577,redland-virtuoso,No,LGPLv2+ or ASL 2.0
+2578,rest,No,LGPLv2
+2579,rfkill,Yes,ISC
+2580,rhino,No,MPLv2.0
+2581,rhn-check,No,GPLv2
+2582,rhn-client-tools,No,GPLv2
+2583,rhn-setup,No,GPLv2
+2584,rhn-setup-gnome,Yes,GPLv2
+2585,rhnlib,No,GPLv2
+2586,rhnsd,Yes,GPLv2
+2587,rhsm-gtk,No,GPLv2
+2588,rhythmbox,Yes,GPLv2+ with exceptions and GFDL
+2589,rng-tools,Yes,GPLv2+
+2590,rootfiles,Yes,Public Domain
+2591,rp-pppoe,Yes,GPLv2+
+2592,rpcbind,No,BSD
+2593,rpm,Yes,GPLv2+
+2594,rpm-build,No,GPLv2+
+2595,rpm-build-libs,No,GPLv2+ and LGPLv2+ with exceptions
+2596,rpm-libs,No,GPLv2+ and LGPLv2+ with exceptions
+2597,rpm-python,No,GPLv2+
+2598,rpmdevtools,No,GPLv2+ and GPLv2
+2599,rpmemd,No,BSD
+2600,rsh,Yes,BSD
+2601,rsh-server,Yes,BSD
+2602,rsync,Yes,GPLv3+
+2603,rsyslog,Yes,(GPLv3+ and ASL 2.0)
+2604,rsyslog-gnutls,Yes,(GPLv3+ and ASL 2.0)
+2605,rsyslog-gssapi,Yes,(GPLv3+ and ASL 2.0)
+2606,rsyslog-kafka,Yes,(GPLv3+ and ASL 2.0)
+2607,rsyslog-mmjsonparse,No,(GPLv3+ and ASL 2.0)
+2608,rsyslog-relp,Yes,(GPLv3+ and ASL 2.0)
+2609,rtkit,No,GPLv3+ and BSD
+2610,ruby,Yes,(Ruby or BSD) and Public Domain
+2611,ruby-irb,Yes,(Ruby or BSD) and Public Domain
+2612,ruby-libs,No,Ruby or BSD
+2613,rubygem-abrt,Yes,MIT
+2614,rubygem-bigdecimal,No,GPL+ or Artistic
+2615,rubygem-bundler,Yes,MIT
+2616,rubygem-io-console,No,(Ruby or BSD) and Public Domain
+2617,rubygem-json,No,Ruby or GPLv2
+2618,rubygem-net-http-persistent,No,MIT
+2619,rubygem-psych,No,MIT
+2620,rubygem-rdoc,No,GPLv2 and Ruby and MIT
+2621,rubygem-thor,No,MIT
+2622,rubygems,No,Ruby or MIT
+2623,rusers,Yes,BSD
+2624,rusers-server,Yes,BSD
+2625,rwho,Yes,BSD and GPL+
+2626,saab-fonts,Yes,GPLv2+ with exceptions
+2627,sac,No,W3C
+2628,samba-client,Yes,GPLv3+ and LGPLv3+
+2629,samba-client-libs,No,GPLv3+ and LGPLv3+
+2630,samba-common,No,GPLv3+ and LGPLv3+
+2631,samba-common-libs,No,GPLv3+ and LGPLv3+
+2632,samba-common-tools,No,GPLv3+ and LGPLv3+
+2633,samba-krb5-printing,Yes,GPLv3+ and LGPLv3+
+2634,samba-libs,No,GPLv3+ and LGPLv3+
+2635,samba-winbind,Yes,GPLv3+ and LGPLv3+
+2636,samba-winbind-clients,Yes,GPLv3+ and LGPLv3+
+2637,samba-winbind-modules,No,GPLv3+ and LGPLv3+
+2638,samyak-devanagari-fonts,Yes,GPLv3+ with exceptions
+2639,samyak-fonts-common,No,GPLv3+ with exceptions
+2640,samyak-gujarati-fonts,Yes,GPLv3+ with exceptions
+2641,samyak-malayalam-fonts,Yes,GPLv3+ with exceptions
+2642,samyak-oriya-fonts,Yes,GPLv3+ with exceptions
+2643,samyak-tamil-fonts,Yes,GPLv3+ with exceptions
+2644,sane-backends,No,GPLv2+ and GPLv2+ with exceptions and Public Domain
+2645,sane-backends-drivers-scanners,Yes,GPLv2+ and GPLv2+ with exceptions and Public Domain
+2646,sane-backends-libs,No,GPLv2+ and GPLv2+ with exceptions and Public Domain
+2647,sane-frontends,Yes,GPLv2+
+2648,sassist,No,MIT
+2649,satyr,No,GPLv2+
+2650,sbc,No,GPLv2 and LGPLv2+
+2651,sblim-cim-client2,Yes,EPL
+2652,sblim-cmpi-base,No,EPL
+2653,sblim-cmpi-fsvol,Yes,EPL
+2654,sblim-cmpi-network,Yes,EPL
+2655,sblim-cmpi-nfsv3,Yes,EPL
+2656,sblim-cmpi-nfsv4,Yes,EPL
+2657,sblim-cmpi-params,Yes,EPL
+2658,sblim-cmpi-sysfs,Yes,EPL
+2659,sblim-cmpi-syslog,Yes,EPL
+2660,sblim-gather,Yes,EPL
+2661,sblim-gather-provider,Yes,EPL
+2662,sblim-indication_helper,Yes,CPL
+2663,sblim-sfcb,Yes,EPL
+2664,sblim-sfcc,No,EPL
+2665,sblim-smis-hba,Yes,EPL
+2666,sblim-wbemcli,Yes,EPL
+2667,scap-security-guide,Yes,BSD-3-Clause
+2668,scap-security-guide-doc,Yes,BSD-3-Clause
+2669,scap-workbench,Yes,GPLv3+
+2670,scl-utils,Yes,GPLv2+
+2671,scrub,No,GPLv2+
+2672,SDL,No,LGPLv2+
+2673,sdparm,Yes,BSD
+2674,seabios-bin,No,LGPLv3
+2675,seahorse,Yes,GPLv2+ and LGPLv2+
+2676,seahorse-nautilus,Yes,GPLv2+
+2677,seahorse-sharing,Yes,GPLv2+ and LGPLv2+
+2678,seavgabios-bin,No,LGPLv3
+2679,sed,No,GPLv3+
+2680,selinux-policy,No,GPLv2+
+2681,selinux-policy-devel,No,GPLv2+
+2682,selinux-policy-minimum,No,GPLv2+
+2683,selinux-policy-mls,Yes,GPLv2+
+2684,selinux-policy-targeted,Yes,GPLv2+
+2685,setools-console,Yes,GPLv2
+2686,setools-libs,No,LGPLv2
+2687,setroubleshoot,Yes,GPLv2+
+2688,setroubleshoot-plugins,No,GPLv2+
+2689,setroubleshoot-server,No,GPLv2+
+2690,setserial,Yes,GPL+
+2691,setup,Yes,Public Domain
+2692,setuptool,Yes,GPLv2+
+2693,sg3_utils,Yes,GPLv2+ and BSD
+2694,sg3_utils-libs,Yes,GPLv2+ and BSD
+2695,sgabios-bin,No,ASL 2.0
+2696,sgml-common,No,GPL+
+2697,sgpio,Yes,GPLv2+
+2698,shadow-utils,Yes,BSD and GPLv2+
+2699,shared-desktop-ontologies,No,(BSD or CC-BY) and CC-BY and W3C
+2700,shared-mime-info,No,GPLv2+
+2701,shim-ia32,Yes,BSD
+2702,shim-unsigned-ia32,Yes,BSD
+2703,shim-unsigned-x64,Yes,BSD
+2704,shim-x64,Yes,BSD
+2705,shotwell,Yes,LGPLv2+ and CC-BY-SA
+2706,si-units,No,BSD
+2707,sil-abyssinica-fonts,Yes,OFL
+2708,sil-nuosu-fonts,Yes,OFL
+2709,sil-padauk-fonts,Yes,OFL
+2710,sip,No,GPLv2 or GPLv3 and (GPLv3+ with exceptions)
+2711,skkdic,No,GPLv2+
+2712,slang,No,GPLv2+
+2713,slf4j,No,MIT and ASL 2.0
+2714,smartmontools,Yes,GPLv2+
+2715,smc-anjalioldlipi-fonts,Yes,GPL+
+2716,smc-dyuthi-fonts,Yes,GPLv3+ with exceptions
+2717,smc-fonts-common,No,GPLv3+ with exceptions and GPLv2+ with exceptions and GPLv2+ and GPLv2 and GPL+
+2718,smc-kalyani-fonts,Yes,GPLv3+ with exceptions
+2719,smc-meera-fonts,Yes,GPLv2+ with exceptions
+2720,smc-rachana-fonts,Yes,GPLv2+
+2721,smc-raghumalayalam-fonts,Yes,GPLv2
+2722,smc-suruma-fonts,Yes,GPLv3 with exceptions
+2723,snappy,No,BSD
+2724,socat,Yes,GPLv2
+2725,soprano,No,LGPLv2+
+2726,sos,Yes,GPLv2+
+2727,sos-collector,Yes,GPLv2
+2728,sound-theme-freedesktop,No,GPLv2+ and LGPLv2+ and CC-BY-SA and CC-BY
+2729,soundtouch,No,LGPLv2+
+2730,sox,Yes,GPLv2+ and LGPLv2+ and MIT
+2731,spax,No,CDDL
+2732,speech-dispatcher,No,GPLv2+ and GPLv2
+2733,speech-dispatcher-python,No,GPLv2+
+2734,speex,No,BSD
+2735,spice-glib,No,LGPLv2+
+2736,spice-gtk3,No,LGPLv2+
+2737,spice-protocol,No,BSD and LGPLv2+
+2738,spice-server,No,LGPLv2+
+2739,spice-streaming-agent,Yes,ASL 2.0
+2740,spice-vdagent,Yes,GPLv3+
+2741,spice-xpi,Yes,MPLv1.1 or GPLv2+ or LGPLv2+
+2742,sqlite,No,Public Domain
+2743,squashfs-tools,Yes,GPLv2+
+2744,sssd,Yes,GPLv3+
+2745,sssd-ad,No,GPLv3+
+2746,sssd-client,Yes,LGPLv3+
+2747,sssd-common,No,GPLv3+
+2748,sssd-common-pac,No,GPLv3+
+2749,sssd-dbus,Yes,GPLv3+
+2750,sssd-ipa,No,GPLv3+
+2751,sssd-kcm,Yes,GPLv3+
+2752,sssd-krb5,No,GPLv3+
+2753,sssd-krb5-common,No,GPLv3+
+2754,sssd-ldap,No,GPLv3+
+2755,sssd-libwbclient,No,GPLv3+ and LGPLv3+
+2756,sssd-polkit-rules,Yes,GPLv3+
+2757,sssd-proxy,No,GPLv3+
+2758,sssd-tools,Yes,GPLv3+
+2759,sssd-winbind-idmap,Yes,GPLv3+ and LGPLv3+
+2760,star,Yes,CDDL
+2761,startup-notification,No,LGPLv2
+2762,stax2-api,No,BSD
+2763,stix-fonts,Yes,OFL
+2764,stix-math-fonts,No,OFL
+2765,strace,Yes,LGPL-2.1+ and GPL-2.0+
+2766,strigi-libs,No,LGPLv2+
+2767,strongimcv,Yes,GPLv2+
+2768,stunnel,Yes,GPLv2
+2769,subscription-manager,Yes,GPLv2
+2770,subscription-manager-gui,Yes,GPLv2
+2771,subscription-manager-initial-setup-addon,Yes,GPLv2
+2772,subscription-manager-migration,Yes,GPLv2
+2773,subscription-manager-migration-data,Yes,CC0
+2774,subscription-manager-plugin-container,Yes,GPLv2
+2775,subscription-manager-rhsm,No,GPLv2
+2776,subscription-manager-rhsm-certificates,No,GPLv2
+2777,sudo,Yes,ISC
+2778,suitesparse,No,LGPLv2+ and GPLv2+
+2779,supermin-helper,No,GPLv2+
+2780,supermin5,No,GPLv2+
+2781,sushi,Yes,GPLv2+ with exceptions
+2782,sweeper,Yes,LGPLv2+
+2783,syslinux,No,GPLv2+
+2784,syslinux-extlinux,No,GPLv2+
+2785,sysstat,Yes,GPLv2+
+2786,system-config-date,Yes,GPLv2+
+2787,system-config-date-docs,No,GPLv2+
+2788,system-config-firewall-base,Yes,GPLv2+
+2789,system-config-kdump,Yes,GPLv2+
+2790,system-config-keyboard,No,GPLv2+
+2791,system-config-keyboard-base,No,GPLv2+
+2792,system-config-kickstart,Yes,GPLv2+
+2793,system-config-language,No,GPLv2+
+2794,system-config-printer,Yes,GPLv2+
+2795,system-config-printer-libs,No,GPLv2+
+2796,system-config-printer-udev,Yes,GPLv2+
+2797,system-config-users,Yes,GPLv2+
+2798,system-config-users-docs,Yes,GPLv2+
+2799,system-switch-java,Yes,GPLv2+ and BSD
+2800,systemd,Yes,LGPLv2+ and MIT and GPLv2+
+2801,systemd-libs,No,LGPLv2+ and MIT
+2802,systemd-python,No,LGPLv2+
+2803,systemd-sysv,No,LGPLv2+
+2804,systemtap,No,GPLv2+
+2805,systemtap-client,Yes,GPLv2+
+2806,systemtap-devel,No,GPLv2+
+2807,systemtap-initscript,Yes,GPLv2+
+2808,systemtap-runtime,Yes,GPLv2+
+2809,systemtap-sdt-devel,No,GPLv2+ and Public Domain
+2810,sysvinit-tools,No,GPLv2+
+2811,t1lib,No,LGPLv2+
+2812,taglib,No,LGPLv2
+2813,tagsoup,No,ASL 2.0 and (GPLv2+ or AFL)
+2814,talk,Yes,BSD
+2815,talk-server,Yes,BSD
+2816,tar,Yes,GPLv3+
+2817,targetcli,Yes,ASL 2.0
+2818,tbb,No,GPLv2 with exceptions
+2819,tboot,Yes,BSD
+2820,tcl,No,TCL
+2821,tcp_wrappers,Yes,BSD
+2822,tcp_wrappers-libs,No,BSD
+2823,tcpdump,Yes,BSD with advertising
+2824,tcsh,Yes,BSD
+2825,teamd,Yes,LGPLv2+
+2826,telepathy-farstream,No,LGPLv2+
+2827,telepathy-filesystem,No,Public Domain
+2828,telepathy-gabble,No,LGPLv2+
+2829,telepathy-glib,No,LGPLv2+
+2830,telepathy-haze,No,GPLv2+
+2831,telepathy-logger,No,LGPLv2+
+2832,telepathy-mission-control,No,LGPLv2
+2833,telepathy-salut,No,LGPLv2+
+2834,telnet,Yes,BSD
+2835,telnet-server,Yes,BSD
+2836,tex-fonts-hebrew,Yes,GPL+ and LPPL
+2837,tex-preview,No,GPLv3+ and GFDL
+2838,texinfo,Yes,GPLv3+
+2839,texlive,Yes,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2840,texlive-ae,No,LPPL
+2841,texlive-algorithms,No,LGPLv2+
+2842,texlive-amscls,No,LPPL
+2843,texlive-amsfonts,No,OFSFLD
+2844,texlive-amsmath,No,LPPL
+2845,texlive-anysize,No,Public Domain
+2846,texlive-attachfile,No,LPPL 1.3
+2847,texlive-avantgar,No,GPL+
+2848,texlive-babel,No,LPPL
+2849,texlive-babelbib,No,LPPL
+2850,texlive-base,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2851,texlive-beamer,No,GPL+
+2852,texlive-bera,No,Bitstream vera
+2853,texlive-beton,No,LPPL
+2854,texlive-bibtex,No,Knuth
+2855,texlive-bibtex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2856,texlive-bookman,No,GPL+
+2857,texlive-booktabs,No,GPL+
+2858,texlive-breakurl,No,LPPL
+2859,texlive-caption,No,LPPL 1.3
+2860,texlive-carlisle,No,LPPL
+2861,texlive-charter,No,Copyright only
+2862,texlive-chngcntr,No,LPPL
+2863,texlive-cite,No,Copyright only
+2864,texlive-cm,No,Knuth
+2865,texlive-cm-lgc,Yes,GPL+
+2866,texlive-cm-super,No,GPL+
+2867,texlive-cmap,No,LPPL
+2868,texlive-cmextra,No,LPPL
+2869,texlive-collection-basic,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2870,texlive-collection-documentation-base,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2871,texlive-collection-fontsrecommended,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2872,texlive-collection-htmlxml,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2873,texlive-collection-latex,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2874,texlive-collection-latexrecommended,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2875,texlive-colortbl,No,LPPL
+2876,texlive-courier,No,GPL+
+2877,texlive-crop,No,LPPL
+2878,texlive-csquotes,No,LPPL
+2879,texlive-ctable,No,LPPL
+2880,texlive-currfile,No,LPPL 1.3
+2881,texlive-dvipdfm,No,LPPL
+2882,texlive-dvipdfm-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2883,texlive-dvipdfmx,No,GPL+
+2884,texlive-dvipdfmx-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2885,texlive-dvipdfmx-def,No,LPPL
+2886,texlive-dvipng,No,LGPLv2+
+2887,texlive-dvipng-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2888,texlive-dvips,No,GPL+
+2889,texlive-dvips-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2890,texlive-ec,No,ec
+2891,texlive-enctex,No,GPL+
+2892,texlive-enumitem,No,LPPL
+2893,texlive-eso-pic,No,LPPL 1.2
+2894,texlive-etex,No,Knuth
+2895,texlive-etex-pkg,No,LPPL
+2896,texlive-etoolbox,No,LPPL 1.3
+2897,texlive-euler,No,LPPL
+2898,texlive-euro,No,LPPL
+2899,texlive-eurosym,No,Eurosym
+2900,texlive-extsizes,No,LPPL
+2901,texlive-fancybox,No,LPPL 1.2
+2902,texlive-fancyhdr,No,LPPL
+2903,texlive-fancyref,No,GPL+
+2904,texlive-fancyvrb,No,LPPL
+2905,texlive-filecontents,No,LPPL
+2906,texlive-filehook,No,LPPL 1.3
+2907,texlive-fix2col,No,LPPL
+2908,texlive-float,No,LPPL
+2909,texlive-fontspec,No,LPPL 1.3
+2910,texlive-footmisc,No,LPPL 1.3
+2911,texlive-fp,No,LPPL
+2912,texlive-fpl,No,GPL+
+2913,texlive-geometry,No,LPPL
+2914,texlive-glyphlist,No,LPPL
+2915,texlive-graphics,No,LPPL
+2916,texlive-gsftopk,No,GPL+
+2917,texlive-gsftopk-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2918,texlive-helvetic,No,GPL+
+2919,texlive-hyperref,No,LPPL
+2920,texlive-hyph-utf8,No,Copyright only
+2921,texlive-hyphen-base,No,LPPL
+2922,texlive-ifetex,No,LPPL 1.3
+2923,texlive-ifluatex,No,LPPL 1.3
+2924,texlive-ifxetex,No,LPPL
+2925,texlive-index,No,LPPL
+2926,texlive-jadetex,No,MIT
+2927,texlive-jadetex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2928,texlive-jknapltx,No,GPL+
+2929,texlive-kastrup,No,LPPL
+2930,texlive-kerkis,Yes,LPPL
+2931,texlive-koma-script,No,LPPL
+2932,texlive-kpathsea,No,LGPLv2+
+2933,texlive-kpathsea-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2934,texlive-kpathsea-lib,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2935,texlive-l3experimental,No,LPPL 1.3
+2936,texlive-l3kernel,No,LPPL 1.3
+2937,texlive-l3packages,No,LPPL 1.3
+2938,texlive-latex,Yes,LPPL
+2939,texlive-latex-bin,No,LPPL
+2940,texlive-latex-bin-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2941,texlive-latex-fonts,No,LPPL
+2942,texlive-latexconfig,No,LPPL
+2943,texlive-listings,No,LPPL
+2944,texlive-lm,No,GFSL
+2945,texlive-lm-math,No,LPPL
+2946,texlive-ltxmisc,No,Public Domain
+2947,texlive-lua-alt-getopt,No,MIT
+2948,texlive-lualatex-math,No,LPPL 1.3
+2949,texlive-luaotfload,No,GPLv2+
+2950,texlive-luaotfload-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2951,texlive-luatex,No,GPLv2+
+2952,texlive-luatex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2953,texlive-luatexbase,No,Public Domain
+2954,texlive-makeindex,No,MakeIndex
+2955,texlive-makeindex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2956,texlive-marginnote,No,LPPL
+2957,texlive-marvosym,No,OFSFLD
+2958,texlive-mathpazo,No,GPL+
+2959,texlive-mdwtools,No,GPL+
+2960,texlive-memoir,No,LPPL
+2961,texlive-metafont,No,Knuth
+2962,texlive-metafont-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2963,texlive-metalogo,No,LPPL
+2964,texlive-mflogo,No,LPPL
+2965,texlive-mfnfss,No,LPPL
+2966,texlive-mfware,No,Knuth
+2967,texlive-mfware-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2968,texlive-mh,No,LPPL 1.3
+2969,texlive-microtype,No,LPPL
+2970,texlive-misc,No,LPPL
+2971,texlive-mparhack,No,GPL+
+2972,texlive-mptopdf,No,LPPL
+2973,texlive-mptopdf-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2974,texlive-ms,No,LPPL
+2975,texlive-multido,No,LPPL
+2976,texlive-natbib,No,LPPL
+2977,texlive-ncntrsbk,No,GPL+
+2978,texlive-ntgclass,No,LPPL
+2979,texlive-oberdiek,No,LPPL
+2980,texlive-palatino,No,GPL+
+2981,texlive-paralist,No,LPPL
+2982,texlive-parallel,No,LPPL
+2983,texlive-parskip,No,LPPL
+2984,texlive-passivetex,No,MIT
+2985,texlive-pdfpages,No,LPPL
+2986,texlive-pdftex,No,GPL+
+2987,texlive-pdftex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+2988,texlive-pdftex-def,No,LPPL 1.3
+2989,texlive-pgf,No,LPPL 1.3
+2990,texlive-plain,No,LPPL
+2991,texlive-powerdot,No,LPPL 1.3
+2992,texlive-psfrag,No,psfrag
+2993,texlive-pslatex,No,LPPL
+2994,texlive-psnfss,No,LPPL
+2995,texlive-pspicture,No,LPPL
+2996,texlive-pst-3d,No,LPPL
+2997,texlive-pst-blur,No,LPPL
+2998,texlive-pst-coil,No,LPPL
+2999,texlive-pst-eps,No,LPPL
+3000,texlive-pst-fill,No,LPPL
+3001,texlive-pst-grad,No,LPPL
+3002,texlive-pst-math,No,LPPL
+3003,texlive-pst-node,No,LPPL
+3004,texlive-pst-plot,No,LPPL
+3005,texlive-pst-slpe,No,LPPL
+3006,texlive-pst-text,No,LPPL
+3007,texlive-pst-tree,No,LPPL
+3008,texlive-pstricks,No,LPPL 1.3
+3009,texlive-pstricks-add,No,LPPL
+3010,texlive-pxfonts,No,GPL+
+3011,texlive-qstest,No,LPPL
+3012,texlive-rcs,No,GPL+
+3013,texlive-rotating,No,LPPL
+3014,texlive-rsfs,No,rsfs
+3015,texlive-sansmath,No,Public Domain
+3016,texlive-sauerj,No,LPPL
+3017,texlive-scheme-basic,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3018,texlive-section,No,LPPL
+3019,texlive-seminar,No,LPPL 1.2
+3020,texlive-sepnum,No,LPPL
+3021,texlive-setspace,No,Copyright only
+3022,texlive-showexpl,No,LPPL
+3023,texlive-soul,No,LPPL
+3024,texlive-subfig,No,LPPL
+3025,texlive-symbol,No,GPL+
+3026,texlive-tetex,No,GPL+ and GPLv2+ and LPPL
+3027,texlive-tetex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3028,texlive-tex,No,Knuth
+3029,texlive-tex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3030,texlive-tex-gyre,No,GFSL
+3031,texlive-tex-gyre-math,No,LPPL
+3032,texlive-tex4ht,No,LPPL
+3033,texlive-tex4ht-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3034,texlive-texconfig,No,LPPL
+3035,texlive-texconfig-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3036,texlive-texlive.infra,No,LPPL
+3037,texlive-texlive.infra-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3038,texlive-textcase,No,LPPL
+3039,texlive-thumbpdf,No,LPPL
+3040,texlive-thumbpdf-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3041,texlive-times,No,GPL+
+3042,texlive-tipa,No,LPPL
+3043,texlive-tools,No,LPPL
+3044,texlive-txfonts,No,GPL+
+3045,texlive-type1cm,No,LPPL
+3046,texlive-typehtml,No,LPPL
+3047,texlive-ucs,No,LPPL 1.3
+3048,texlive-ulem,No,Copyright only
+3049,texlive-underscore,No,LPPL
+3050,texlive-unicode-math,No,LPPL 1.3
+3051,texlive-url,No,LPPL
+3052,texlive-utopia,No,Utopia
+3053,texlive-varwidth,No,LPPL
+3054,texlive-wasy,No,Public Domain
+3055,texlive-wasysym,No,LPPL
+3056,texlive-xcolor,No,LPPL
+3057,texlive-xdvi,No,MIT
+3058,texlive-xdvi-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3059,texlive-xkeyval,No,LPPL
+3060,texlive-xmltex,No,LPPL
+3061,texlive-xmltex-bin,No,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3062,texlive-xunicode,No,LPPL 1.3
+3063,texlive-zapfchan,No,GPL+
+3064,texlive-zapfding,No,GPL+
+3065,tftp,Yes,BSD
+3066,thai-scalable-fonts-common,No,GPLv2+ and Bitstream Vera
+3067,thai-scalable-garuda-fonts,Yes,GPLv2+ and Bitstream Vera
+3068,thai-scalable-kinnari-fonts,Yes,GPLv2+ and Bitstream Vera
+3069,thai-scalable-loma-fonts,Yes,GPLv2+ and Bitstream Vera
+3070,thai-scalable-norasi-fonts,Yes,GPLv2+ and Bitstream Vera
+3071,thai-scalable-purisa-fonts,Yes,GPLv2+ and Bitstream Vera
+3072,thai-scalable-sawasdee-fonts,Yes,GPLv2+ and Bitstream Vera
+3073,thai-scalable-tlwgmono-fonts,Yes,GPLv2+ and Bitstream Vera
+3074,thai-scalable-tlwgtypewriter-fonts,Yes,GPLv2+ and Bitstream Vera
+3075,thai-scalable-tlwgtypist-fonts,Yes,GPLv2+ and Bitstream Vera
+3076,thai-scalable-tlwgtypo-fonts,Yes,GPLv2+ and Bitstream Vera
+3077,thai-scalable-umpush-fonts,Yes,GPLv2+ and Bitstream Vera
+3078,thai-scalable-waree-fonts,Yes,GPLv2+ and Bitstream Vera
+3079,theora-tools,No,BSD
+3080,thunderbird,Yes,MPLv1.1 or GPLv2+ or LGPLv2+
+3081,tibetan-machine-uni-fonts,Yes,GPLv3+ with exceptions
+3082,tigervnc,Yes,GPLv2+
+3083,tigervnc-icons,No,GPLv2+
+3084,tigervnc-license,No,GPLv2+
+3085,tigervnc-server,Yes,GPLv2+
+3086,tigervnc-server-minimal,No,GPLv2+
+3087,time,Yes,GPLv2+
+3088,tmpwatch,Yes,GPLv2
+3089,tmux,Yes,ISC and BSD
+3090,tn5250,Yes,LGPLv2+
+3091,tncfhh,Yes,GPLv2
+3092,tog-pegasus,Yes,MIT
+3093,tog-pegasus-libs,No,MIT
+3094,tokyocabinet,No,LGPLv2+
+3095,tomcat-servlet-3.0-api,No,ASL 2.0
+3096,totem,Yes,GPLv2+ with exceptions
+3097,totem-nautilus,Yes,GPLv2+ with exceptions
+3098,totem-pl-parser,No,LGPLv2+
+3099,tpm-quote-tools,Yes,BSD
+3100,tpm-tools,Yes,CPL
+3101,tpm2-abrmd,No,BSD
+3102,tpm2-tools,Yes,BSD
+3103,tpm2-tss,No,BSD and TCGL
+3104,tpm2-tss-devel,No,BSD and TCGL
+3105,trace-cmd,Yes,GPLv2 and LGPLv2+
+3106,traceroute,Yes,GPLv2+
+3107,tracker,No,GPLv2+
+3108,trousers,Yes,BSD
+3109,ttmkfdir,No,LGPLv2+
+3110,tuna,Yes,GPLv2
+3111,tuned,Yes,GPLv2+
+3112,tuned-profiles-cpu-partitioning,Yes,GPLv2+
+3113,tuned-utils,Yes,GPLv2+
+3114,tzdata,No,Public Domain
+3115,tzdata-java,No,Public Domain
+3116,ucs-miscfixed-fonts,Yes,Public Domain
+3117,ucx,No,BSD
+3118,udftools,Yes,GPLv2+
+3119,udisks2,No,GPLv2+
+3120,udisks2-iscsi,Yes,LGPLv2+
+3121,udisks2-lsm,No,LGPLv2+
+3122,udisks2-lvm2,Yes,LGPLv2+
+3123,unbound,No,BSD
+3124,unbound-libs,No,BSD
+3125,unique3,No,LGPLv2+
+3126,unit-api,No,BSD
+3127,unixODBC,No,GPLv2+ and LGPLv2+
+3128,unoconv,Yes,GPLv2
+3129,unzip,Yes,BSD
+3130,uom-lib,No,BSD
+3131,uom-se,No,BSD
+3132,uom-systems,No,BSD
+3133,upower,No,GPLv2+
+3134,urlview,No,GPLv2+
+3135,urw-base35-bookman-fonts,No,AGPLv3
+3136,urw-base35-c059-fonts,No,AGPLv3
+3137,urw-base35-d050000l-fonts,No,AGPLv3
+3138,urw-base35-fonts,No,AGPLv3
+3139,urw-base35-fonts-common,No,AGPLv3
+3140,urw-base35-gothic-fonts,No,AGPLv3
+3141,urw-base35-nimbus-mono-ps-fonts,No,AGPLv3
+3142,urw-base35-nimbus-roman-fonts,No,AGPLv3
+3143,urw-base35-nimbus-sans-fonts,No,AGPLv3
+3144,urw-base35-p052-fonts,No,AGPLv3
+3145,urw-base35-standard-symbols-ps-fonts,No,AGPLv3
+3146,urw-base35-z003-fonts,No,AGPLv3
+3147,urw-fonts,No,GPL+
+3148,usb_modeswitch,Yes,GPLv2+
+3149,usb_modeswitch-data,Yes,GPLv2+
+3150,usbguard,Yes,GPLv2+
+3151,usbmuxd,No,GPLv3+ or GPLv2+
+3152,usbredir,No,LGPLv2+
+3153,usbutils,Yes,GPLv2+
+3154,usermode,No,GPLv2+
+3155,usermode-gtk,No,GPLv2+
+3156,usnic-tools,No,GPLv2 or BSD
+3157,ustr,No,MIT or LGPLv2+ or BSD
+3158,util-linux,Yes,GPLv2 and GPLv2+ and LGPLv2+ and BSD with advertising and Public Domain
+3159,uuidd,Yes,GPLv2
+3160,valgrind,Yes,GPLv2+
+3161,vdo,Yes,GPLv2
+3162,vemana2000-fonts,Yes,GPLv2+ with exceptions
+3163,vim-common,No,Vim
+3164,vim-enhanced,Yes,Vim
+3165,vim-filesystem,No,Vim
+3166,vim-minimal,Yes,Vim
+3167,vim-X11,Yes,Vim
+3168,vinagre,Yes,GPLv2+
+3169,vino,Yes,GPLv2+
+3170,virt-install,Yes,GPLv2+
+3171,virt-manager,Yes,GPLv2+
+3172,virt-manager-common,No,GPLv2+
+3173,virt-top,Yes,GPLv2+
+3174,virt-viewer,Yes,GPLv2+
+3175,virt-what,Yes,GPLv2+
+3176,virt-who,Yes,GPLv2+
+3177,virtuoso-opensource,No,GPLv2 with exceptions
+3178,vlgothic-fonts,Yes,mplus and BSD
+3179,vlgothic-p-fonts,Yes,mplus and BSD
+3180,volume_key,Yes,GPLv2 and (MPLv1.1 or GPLv2 or LGPLv2)
+3181,volume_key-libs,No,GPLv2 and (MPLv1.1 or GPLv2 or LGPLv2)
+3182,vorbis-tools,No,GPLv2
+3183,vte-profile,No,GPLv3+
+3184,vte291,No,LGPLv2+
+3185,vte3,No,LGPLv2+
+3186,wavpack,No,BSD
+3187,wayland-devel,No,MIT
+3188,wayland-protocols-devel,Yes,MIT
+3189,webkitgtk3,No,LGPLv2+ and BSD
+3190,webkitgtk4,No,LGPLv2
+3191,webkitgtk4-jsc,No,LGPLv2
+3192,webrtc-audio-processing,No,BSD
+3193,wget,Yes,GPLv3+
+3194,which,Yes,GPLv3
+3195,whois,Yes,GPLv2+
+3196,wireshark,Yes,GPL+
+3197,wireshark-gnome,Yes,GPL+
+3198,wodim,Yes,GPLv2
+3199,words,Yes,Public Domain
+3200,wpa_supplicant,No,BSD
+3201,wqy-microhei-fonts,Yes,ASL 2.0 or GPLv3 with exceptions
+3202,wqy-unibit-fonts,No,GPLv2 with exceptions
+3203,wqy-zenhei-fonts,Yes,GPLv2 with exceptions
+3204,wsmancli,Yes,BSD
+3205,wvdial,Yes,LGPLv2+
+3206,x3270,No,BSD
+3207,x3270-text,Yes,BSD
+3208,x3270-x11,Yes,BSD
+3209,x86info,Yes,GPLv2
+3210,xalan-j2,No,ASL 2.0 and W3C
+3211,xcb-util,No,MIT
+3212,xcb-util-image,No,MIT
+3213,xcb-util-keysyms,No,MIT
+3214,xcb-util-renderutil,No,MIT
+3215,xcb-util-wm,No,MIT
+3216,xchat,Yes,GPLv2+
+3217,xdg-desktop-portal,No,LGPLv2+
+3218,xdg-desktop-portal-gtk,Yes,LGPLv2+
+3219,xdg-user-dirs,No,GPLv2+ and MIT
+3220,xdg-user-dirs-gtk,Yes,GPL+
+3221,xdg-utils,No,MIT
+3222,xerces-j2,No,ASL 2.0
+3223,xfsdump,Yes,GPL+
+3224,xfsprogs,Yes,GPL+ and LGPLv2+
+3225,xguest,Yes,GPLv2+
+3226,xinetd,Yes,xinetd
+3227,xkeyboard-config,No,MIT
+3228,xml-common,No,GPL+
+3229,xml-commons-apis,No,ASL 2.0 and W3C and Public Domain
+3230,xml-commons-resolver,No,ASL 2.0
+3231,xmlrpc-c,No,BSD and MIT and GPL+ and Public Domain
+3232,xmlrpc-c-client,No,BSD and MIT and GPL+ and Public Domain
+3233,xmlsec1,No,MIT
+3234,xmlsec1-openssl,No,MIT
+3235,xmlto,Yes,GPLv2+
+3236,xmlto-tex,Yes,GPLv2+
+3237,xmltoman,Yes,GPLv2+
+3238,xorg-x11-apps,Yes,MIT
+3239,xorg-x11-drivers,Yes,MIT
+3240,xorg-x11-drv-ati,No,MIT
+3241,xorg-x11-drv-dummy,No,MIT
+3242,xorg-x11-drv-evdev,Yes,MIT
+3243,xorg-x11-drv-fbdev,No,MIT
+3244,xorg-x11-drv-intel,No,MIT
+3245,xorg-x11-drv-keyboard,Yes,MIT
+3246,xorg-x11-drv-libinput,Yes,MIT
+3247,xorg-x11-drv-mouse,Yes,MIT
+3248,xorg-x11-drv-nouveau,No,MIT
+3249,xorg-x11-drv-openchrome,Yes,MIT
+3250,xorg-x11-drv-qxl,No,MIT
+3251,xorg-x11-drv-synaptics,No,MIT
+3252,xorg-x11-drv-v4l,No,MIT
+3253,xorg-x11-drv-vesa,No,MIT
+3254,xorg-x11-drv-vmmouse,No,MIT
+3255,xorg-x11-drv-vmware,No,MIT
+3256,xorg-x11-drv-void,No,MIT
+3257,xorg-x11-drv-wacom,No,GPLv2+
+3258,xorg-x11-font-utils,No,MIT
+3259,xorg-x11-fonts-100dpi,Yes,MIT and Lucida and Public Domain
+3260,xorg-x11-fonts-75dpi,Yes,MIT and Lucida and Public Domain
+3261,xorg-x11-fonts-cyrillic,Yes,MIT and Lucida and Public Domain
+3262,xorg-x11-fonts-ethiopic,Yes,MIT and Lucida and Public Domain
+3263,xorg-x11-fonts-ISO8859-1-100dpi,Yes,MIT and Lucida and Public Domain
+3264,xorg-x11-fonts-ISO8859-1-75dpi,Yes,MIT and Lucida and Public Domain
+3265,xorg-x11-fonts-ISO8859-14-100dpi,Yes,MIT and Lucida and Public Domain
+3266,xorg-x11-fonts-ISO8859-14-75dpi,Yes,MIT and Lucida and Public Domain
+3267,xorg-x11-fonts-ISO8859-15-75dpi,Yes,MIT and Lucida and Public Domain
+3268,xorg-x11-fonts-ISO8859-2-100dpi,Yes,MIT and Lucida and Public Domain
+3269,xorg-x11-fonts-ISO8859-2-75dpi,Yes,MIT and Lucida and Public Domain
+3270,xorg-x11-fonts-ISO8859-9-100dpi,Yes,MIT and Lucida and Public Domain
+3271,xorg-x11-fonts-ISO8859-9-75dpi,Yes,MIT and Lucida and Public Domain
+3272,xorg-x11-fonts-misc,Yes,MIT and Lucida and Public Domain
+3273,xorg-x11-fonts-Type1,Yes,MIT and Lucida and Public Domain
+3274,xorg-x11-proto-devel,No,MIT
+3275,xorg-x11-server-common,No,MIT
+3276,xorg-x11-server-utils,No,MIT
+3277,xorg-x11-server-Xephyr,No,MIT
+3278,xorg-x11-server-Xorg,Yes,MIT
+3279,xorg-x11-utils,Yes,MIT
+3280,xorg-x11-xauth,Yes,MIT
+3281,xorg-x11-xbitmaps,No,MIT
+3282,xorg-x11-xinit,Yes,MIT
+3283,xorg-x11-xkb-utils,No,MIT
+3284,xorriso,No,GPLv3+
+3285,xrestop,Yes,GPLv2+
+3286,xsane-common,No,GPLv2+
+3287,xsane-gimp,Yes,GPLv2+
+3288,xsettings-kde,Yes,GPLv2+
+3289,xterm,Yes,MIT
+3290,xulrunner,No,MPLv1.1 or GPLv2+ or LGPLv2+
+3291,xvattr,Yes,GPLv2+
+3292,xz,Yes,LGPLv2+
+3293,xz-libs,No,LGPLv2+
+3294,yajl,No,ISC
+3295,yelp,Yes,GPLv2+
+3296,yelp-libs,No,GPLv2+
+3297,yelp-xsl,No,LGPLv2+ and GPLv2+
+3298,yp-tools,No,GPLv2
+3299,ypbind,No,GPLv2
+3300,ypserv,No,GPLv2
+3301,yum,Yes,GPLv2+
+3302,yum-cron,No,GPLv2+
+3303,yum-langpacks,Yes,GPLv2+
+3304,yum-metadata-parser,No,GPLv2
+3305,yum-plugin-aliases,Yes,GPLv2+
+3306,yum-plugin-changelog,Yes,GPLv2+
+3307,yum-plugin-ovl,No,GPLv2+
+3308,yum-plugin-tmprepo,Yes,GPLv2+
+3309,yum-plugin-verify,Yes,GPLv2+
+3310,yum-plugin-versionlock,Yes,GPLv2+
+3311,yum-rhn-plugin,Yes,GPLv2
+3312,yum-utils,Yes,GPLv2+
+3313,zenity,No,LGPLv2+
+3314,zip,Yes,BSD
+3315,zlib,No,zlib and Boost
+3316,zsh,Yes,MIT
+3317,zziplib,No,LGPLv2+ or MPLv1.1
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/table-5.csv b/tools/redhat_package_manifest_scraper/data/redhat7/table-5.csv
new file mode 100644
index 0000000..d618be8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/table-5.csv
@@ -0,0 +1,2325 @@
+,Package,Core package?,License
+0,abrt,No,GPLv2+
+1,abrt-addon-ccpp,Yes,GPLv2+
+2,abrt-addon-kerneloops,No,GPLv2+
+3,abrt-addon-pstoreoops,No,GPLv2+
+4,abrt-addon-python,Yes,GPLv2+
+5,abrt-addon-vmcore,No,GPLv2+
+6,abrt-addon-xorg,No,GPLv2+
+7,abrt-cli,Yes,GPLv2+
+8,abrt-console-notification,Yes,GPLv2+
+9,abrt-dbus,No,GPLv2+
+10,abrt-java-connector,Yes,GPLv2+
+11,abrt-libs,No,GPLv2+
+12,abrt-python,No,GPLv2+
+13,abrt-tui,No,GPLv2+
+14,acl,Yes,GPLv2+
+15,acpid,Yes,GPLv2+
+16,adcli,Yes,LGPLv2+
+17,adobe-mappings-cmap,No,BSD
+18,adobe-mappings-cmap-deprecated,No,BSD
+19,adobe-mappings-pdf,No,BSD
+20,adwaita-cursor-theme,No,LGPLv3+ or CC-BY-SA
+21,adwaita-icon-theme,No,LGPLv3+ or CC-BY-SA
+22,aic94xx-firmware,Yes,"Redistributable, no modification permitted"
+23,alsa-firmware,Yes,GPL+ and BSD and GPLv2+ and GPLv2 and LGPLv2+
+24,alsa-lib,No,LGPLv2+
+25,alsa-tools-firmware,No,GPLv2+
+26,anaconda,No,GPLv2+ and MIT
+27,anaconda-core,No,GPLv2+ and MIT
+28,anaconda-gui,No,GPLv2+ and MIT
+29,anaconda-tui,No,GPLv2+ and MIT
+30,anaconda-user-help,No,CC-BY-SA
+31,anaconda-widgets,No,GPLv2+ and MIT
+32,apache-commons-codec,No,ASL 2.0
+33,apache-commons-io,No,ASL 2.0
+34,apache-commons-lang,No,ASL 2.0
+35,apache-commons-logging,No,ASL 2.0
+36,at,Yes,GPLv3+ and GPLv2+ and ISC and MIT and Public Domain
+37,at-spi2-atk,No,LGPLv2+
+38,at-spi2-core,No,LGPLv2+
+39,atk,No,LGPLv2+
+40,atkmm,No,LGPLv2+
+41,atlas,Yes,BSD
+42,atlas-sse2,No,BSD
+43,atlas-sse3,No,BSD
+44,attica,No,LGPLv2+
+45,attr,Yes,GPLv2+
+46,audispd-plugins,Yes,GPLv2+
+47,audit,Yes,GPLv2+
+48,audit-libs,No,LGPLv2+
+49,audit-libs-python,No,LGPLv2+
+50,augeas,Yes,LGPLv2+
+51,augeas-libs,No,LGPLv2+
+52,authconfig,No,GPLv2+
+53,authd,Yes,GPLv2+
+54,autoconf,No,GPLv2+ and GFDL
+55,autofs,Yes,GPLv2+
+56,autogen-libopts,No,LGPLv3+
+57,automake,No,GPLv2+ and GFDL and Public Domain and MIT
+58,avahi,No,LGPLv2+
+59,avahi-autoipd,No,LGPLv2+
+60,avahi-glib,No,LGPLv2+
+61,avahi-libs,No,LGPLv2+
+62,avalon-framework,No,ASL 2.0
+63,avalon-logkit,No,ASL 2.0
+64,basesystem,Yes,Public Domain
+65,bash,Yes,GPLv3+
+66,bash-completion,Yes,GPLv2+
+67,bc,Yes,GPLv2+
+68,bcc,Yes,ASL 2.0
+69,bcc-tools,No,ASL 2.0
+70,bea-stax-api,No,ASL 1.1 and ASL 2.0
+71,bind-export-libs,No,MPLv2.0
+72,bind-libs,No,MPLv2.0
+73,bind-libs-lite,No,MPLv2.0
+74,bind-license,No,MPLv2.0
+75,bind-utils,Yes,MPLv2.0
+76,binutils,No,GPLv3+
+77,biosdevname,Yes,GPLv2
+78,bitmap-fixed-fonts,Yes,GPLv2
+79,bitmap-lucida-typewriter-fonts,Yes,Lucida
+80,blas,No,BSD
+81,blivet3-data,No,LGPLv2+
+82,blktrace,Yes,GPLv2+
+83,bluez-libs,No,GPLv2+
+84,boost-date-time,No,Boost and MIT and Python
+85,boost-filesystem,No,Boost and MIT and Python
+86,boost-iostreams,No,Boost and MIT and Python
+87,boost-program-options,No,Boost and MIT and Python
+88,boost-random,No,Boost and MIT and Python
+89,boost-regex,No,Boost and MIT and Python
+90,boost-serialization,No,Boost and MIT and Python
+91,boost-system,No,Boost and MIT and Python
+92,boost-thread,No,Boost and MIT and Python
+93,bpftool,Yes,GPLv2
+94,bpg-chveulebrivi-fonts,Yes,GPL+ with exceptions
+95,bpg-courier-fonts,Yes,GPL+ with exceptions
+96,bpg-fonts-common,No,GPL+ with exceptions
+97,bpg-glaho-fonts,Yes,GPL+ with exceptions
+98,bridge-utils,Yes,GPLv2+
+99,brlapi,No,LGPLv2+
+100,brltty,Yes,GPLv2+
+101,btrfs-progs,Yes,GPLv2
+102,bzip2,Yes,BSD
+103,bzip2-libs,No,BSD
+104,c-ares,No,MIT
+105,ca-certificates,No,Public Domain
+106,cachefilesd,Yes,GPLv2+
+107,cairo,No,LGPLv2 or MPLv1.1
+108,cairo-gobject,No,LGPLv2 or MPLv1.1
+109,cairomm,No,LGPLv2+
+110,cal10n,No,MIT
+111,cdparanoia-libs,No,LGPLv2
+112,ceph-common,Yes,GPLv2
+113,certmonger,Yes,GPLv3+
+114,cgdcbxd,Yes,GPLv2
+115,checkpolicy,No,GPLv2
+116,chkconfig,Yes,GPLv2
+117,chrony,Yes,GPLv2
+118,cifs-utils,Yes,GPLv3
+119,cim-schema,No,DMTF
+120,cjkuni-ukai-fonts,Yes,Arphic
+121,cjkuni-uming-fonts,Yes,Arphic
+122,clevis,No,GPLv3+
+123,clevis-dracut,Yes,GPLv3+
+124,clevis-luks,No,GPLv3+
+125,clevis-systemd,No,GPLv3+
+126,clevis-udisks2,Yes,GPLv3+
+127,clucene-core,No,LGPLv2+ or ASL 2.0
+128,cmpi-bindings-pywbem,No,BSD
+129,cockpit,Yes,LGPLv2+
+130,cockpit-bridge,No,LGPLv2+
+131,cockpit-system,No,LGPLv2+
+132,cockpit-ws,No,LGPLv2+
+133,colord-libs,No,GPLv2+ and LGPLv2+
+134,compat-dapl,Yes,GPLv2 or BSD or CPL
+135,compat-db-headers,No,BSD
+136,compat-db47,Yes,BSD
+137,compat-exiv2-023,Yes,GPLv2+
+138,compat-exiv2-026,No,GPLv2+
+139,compat-glade315,No,GPLv2+ and LGPLv2+
+140,compat-glibc,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+141,compat-glibc-headers,No,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+142,compat-gnome-desktop314,No,GPLv2+ and LGPLv2+
+143,compat-grilo02,No,LGPLv2+
+144,compat-libcap1,Yes,BSD-like and LGPL
+145,compat-libcolord1,No,GPLv2+ and LGPLv2+
+146,compat-libf2c-34,Yes,GPLv2+ and GPLv2+ with exceptions
+147,compat-libgfortran-41,Yes,GPLv2+ with exceptions
+148,compat-libgnome-bluetooth11,No,LGPLv2+
+149,compat-libical1,No,LGPLv2 or MPLv1.1
+150,compat-libmediaart0,No,LGPLv2+
+151,compat-libpackagekit-glib2-16,No,GPLv2+ and LGPLv2+
+152,compat-libtiff3,Yes,libtiff
+153,compat-libupower-glib1,No,GPLv2+
+154,compat-libxcb,No,MIT
+155,compat-openldap,Yes,OpenLDAP
+156,compat-openmpi16,No,BSD and MIT and Romio
+157,compat-opensm-libs,Yes,GPLv2 or BSD
+158,compat-poppler022,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+159,compat-poppler022-qt,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+160,conman,Yes,GPLv3+
+161,convmv,No,GPLv2 or GPLv3
+162,copy-jdk-configs,No,BSD
+163,coreutils,Yes,GPLv3+
+164,cpio,Yes,GPLv3+
+165,cpp,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+166,cpuid,No,GPLv2+
+167,cracklib,No,LGPLv2+
+168,cracklib-dicts,No,LGPLv2+
+169,crash,Yes,GPLv3
+170,crash-gcore-command,Yes,GPLv2
+171,crash-ptdump-command,Yes,GPLv2
+172,crash-trace-command,Yes,GPLv2
+173,crda,Yes,ISC
+174,createrepo,No,GPLv2
+175,cronie,Yes,MIT and BSD and ISC and GPLv2+
+176,cronie-anacron,No,MIT and BSD and ISC and GPLv2+
+177,cronie-noanacron,No,MIT and BSD and ISC and GPLv2+
+178,crontabs,Yes,Public Domain and GPLv2
+179,crypto-utils,Yes,MIT and GPLv2+ and MPLv1.0
+180,cryptsetup,Yes,GPLv2+ and LGPLv2+
+181,cryptsetup-libs,No,GPLv2+ and LGPLv2+
+182,cryptsetup-python,No,GPLv2+ and LGPLv2+
+183,cryptsetup-reencrypt,Yes,GPLv2+ and LGPLv2+
+184,culmus-aharoni-clm-fonts,Yes,GPLv2
+185,culmus-caladings-clm-fonts,Yes,GPLv2
+186,culmus-david-clm-fonts,Yes,GPLv2
+187,culmus-drugulin-clm-fonts,Yes,GPLv2
+188,culmus-ellinia-clm-fonts,Yes,GPLv2
+189,culmus-fonts-common,No,GPLv2
+190,culmus-frank-ruehl-clm-fonts,Yes,GPLv2
+191,culmus-hadasim-clm-fonts,Yes,GPLv2
+192,culmus-keteryg-fonts,Yes,GPLv2
+193,culmus-miriam-clm-fonts,Yes,GPLv2
+194,culmus-miriam-mono-clm-fonts,Yes,GPLv2
+195,culmus-nachlieli-clm-fonts,Yes,GPLv2
+196,culmus-simple-clm-fonts,Yes,GPLv2
+197,culmus-stamashkenaz-clm-fonts,Yes,GPLv2
+198,culmus-stamsefarad-clm-fonts,Yes,GPLv2
+199,culmus-yehuda-clm-fonts,Yes,GPLv2
+200,cups,No,GPLv2
+201,cups-client,No,GPLv2
+202,cups-filesystem,No,GPLv2
+203,cups-filters,No,GPLv2 and GPLv2+ and GPLv3 and GPLv3+ and LGPLv2+ and MIT
+204,cups-filters-libs,No,LGPLv2 and MIT
+205,cups-libs,No,LGPLv2 and zlib
+206,cups-lpd,Yes,GPLv2
+207,curl,Yes,MIT
+208,cyrus-sasl,No,BSD with advertising
+209,cyrus-sasl-gssapi,No,BSD with advertising
+210,cyrus-sasl-lib,No,BSD with advertising
+211,cyrus-sasl-md5,No,BSD with advertising
+212,cyrus-sasl-plain,Yes,BSD with advertising
+213,dapl,Yes,GPLv2 or BSD or CPL
+214,daxctl-libs,No,LGPLv2
+215,daxio,Yes,BSD
+216,dbus,Yes,(GPLv2+ or AFL) and GPLv2+
+217,dbus-glib,No,AFL and GPLv2+
+218,dbus-libs,No,(GPLv2+ or AFL) and GPLv2+
+219,dbus-python,No,MIT
+220,dbus-x11,No,(GPLv2+ or AFL) and GPLv2+
+221,dbusmenu-qt,No,LGPLv2+
+222,dbxtool,Yes,GPLv2
+223,dconf,No,LGPLv2+ and GPLv2+ and GPLv3+
+224,dejavu-fonts-common,No,Bitstream Vera and Public Domain
+225,dejavu-sans-fonts,Yes,Bitstream Vera and Public Domain
+226,dejavu-sans-mono-fonts,Yes,Bitstream Vera and Public Domain
+227,dejavu-serif-fonts,Yes,Bitstream Vera and Public Domain
+228,deltarpm,No,BSD
+229,desktop-file-utils,No,GPLv2+
+230,device-mapper,No,GPLv2
+231,device-mapper-event,No,GPLv2
+232,device-mapper-event-libs,No,LGPLv2
+233,device-mapper-libs,No,LGPLv2
+234,device-mapper-multipath,Yes,GPL+
+235,device-mapper-multipath-libs,No,GPL+
+236,device-mapper-persistent-data,Yes,GPLv3+
+237,dhclient,Yes,ISC
+238,dhcp-common,No,ISC
+239,dhcp-libs,No,ISC
+240,diffutils,No,GPLv3+
+241,dlm-lib,No,GPLv2 and GPLv2+ and LGPLv2+
+242,dmidecode,No,GPLv2+
+243,dmraid,Yes,GPLv2+
+244,dmraid-events,No,GPLv2+
+245,dnsmasq,No,GPLv2 or GPLv3
+246,docbook-dtds,No,Copyright only
+247,docbook-style-xsl,No,DMIT
+248,dos2unix,Yes,BSD
+249,dosfstools,Yes,GPLv3+
+250,dracut,No,GPLv2+ and LGPLv2+
+251,dracut-config-generic,Yes,GPLv2+ and LGPLv2+
+252,dracut-config-rescue,Yes,GPLv2+ and LGPLv2+
+253,dracut-fips,Yes,GPLv2+ and LGPLv2+
+254,dracut-fips-aesni,Yes,GPLv2+ and LGPLv2+
+255,dracut-network,Yes,GPLv2+ and LGPLv2+
+256,dstat,Yes,GPLv2
+257,dump,Yes,BSD
+258,dumpet,Yes,GPLv2+
+259,dwz,No,GPLv2+ and GPLv3+
+260,dyninst,No,LGPLv2+
+261,e2fsprogs,Yes,GPLv2
+262,e2fsprogs-libs,No,GPLv2 and LGPLv2
+263,ebtables,No,GPLv2+
+264,ed,Yes,"GPLv3+, GFDL"
+265,edac-utils,Yes,GPLv2+
+266,efax,Yes,GPLv2+
+267,efibootmgr,Yes,GPLv2+
+268,efivar,No,LGPLv2+
+269,efivar-libs,No,LGPLv2+
+270,elfutils,Yes,GPLv3+ and (GPLv2+ or LGPLv3+)
+271,elfutils-default-yama-scope,No,GPLv2+ or LGPLv3+
+272,elfutils-libelf,No,GPLv2+ or LGPLv3+
+273,elfutils-libs,No,GPLv2+ or LGPLv3+
+274,elinks,Yes,GPLv2
+275,emacs-filesystem,No,GPLv3+
+276,enchant,No,LGPLv2+
+277,environment-modules,No,GPLv2+
+278,ethtool,Yes,GPLv2
+279,exiv2,No,GPLv2+
+280,exiv2-libs,No,GPLv2+
+281,expat,No,MIT
+282,expect,Yes,Public Domain
+283,fabtests,No,GPLv2 or BSD
+284,fcoe-utils,Yes,GPLv2
+285,fence-agents-all,Yes,GPLv2+ and LGPLv2+ and ASL 2.0
+286,fence-agents-amt-ws,No,ASL 2.0
+287,fence-agents-apc,No,GPLv2+ and LGPLv2+
+288,fence-agents-apc-snmp,No,GPLv2+ and LGPLv2+
+289,fence-agents-bladecenter,No,GPLv2+ and LGPLv2+
+290,fence-agents-brocade,No,GPLv2+ and LGPLv2+
+291,fence-agents-cisco-mds,No,GPLv2+ and LGPLv2+
+292,fence-agents-cisco-ucs,No,GPLv2+ and LGPLv2+
+293,fence-agents-common,No,GPLv2+ and LGPLv2+
+294,fence-agents-compute,No,GPLv2+ and LGPLv2+
+295,fence-agents-drac5,No,GPLv2+ and LGPLv2+
+296,fence-agents-eaton-snmp,No,GPLv2+ and LGPLv2+
+297,fence-agents-emerson,No,GPLv2+ and LGPLv2+
+298,fence-agents-eps,No,GPLv2+ and LGPLv2+
+299,fence-agents-heuristics-ping,No,GPLv2+ and LGPLv2+
+300,fence-agents-hpblade,No,GPLv2+ and LGPLv2+
+301,fence-agents-ibmblade,No,GPLv2+ and LGPLv2+
+302,fence-agents-ifmib,No,GPLv2+ and LGPLv2+
+303,fence-agents-ilo-moonshot,No,GPLv2+ and LGPLv2+
+304,fence-agents-ilo-mp,No,GPLv2+ and LGPLv2+
+305,fence-agents-ilo-ssh,No,GPLv2+ and LGPLv2+
+306,fence-agents-ilo2,No,GPLv2+ and LGPLv2+
+307,fence-agents-intelmodular,No,GPLv2+ and LGPLv2+
+308,fence-agents-ipdu,No,GPLv2+ and LGPLv2+
+309,fence-agents-ipmilan,No,GPLv2+ and LGPLv2+
+310,fence-agents-kdump,No,GPLv2+ and LGPLv2+
+311,fence-agents-mpath,No,GPLv2+ and LGPLv2+
+312,fence-agents-redfish,No,GPLv2+ and LGPLv2+
+313,fence-agents-rhevm,No,GPLv2+ and LGPLv2+
+314,fence-agents-rsa,No,GPLv2+ and LGPLv2+
+315,fence-agents-rsb,No,GPLv2+ and LGPLv2+
+316,fence-agents-sbd,No,GPLv2+ and LGPLv2+
+317,fence-agents-scsi,No,GPLv2+ and LGPLv2+
+318,fence-agents-vmware-rest,No,GPLv2+ and LGPLv2+
+319,fence-agents-vmware-soap,No,GPLv2+ and LGPLv2+
+320,fence-agents-wti,No,GPLv2+ and LGPLv2+
+321,fence-virt,No,GPLv2+
+322,fetchmail,Yes,GPL+ and Public Domain
+323,fftw,Yes,GPLv2+
+324,fftw-devel,Yes,GPLv2+
+325,fftw-libs,No,GPLv2+
+326,fftw-libs-double,No,GPLv2+
+327,fftw-libs-long,No,GPLv2+
+328,fftw-libs-single,No,GPLv2+
+329,fftw-static,Yes,GPLv2+
+330,file,Yes,BSD
+331,file-libs,No,BSD
+332,filesystem,Yes,Public Domain
+333,findutils,No,GPLv3+
+334,finger,Yes,BSD
+335,finger-server,Yes,BSD
+336,fio,Yes,GPLv2
+337,fipscheck,No,BSD
+338,fipscheck-lib,No,BSD
+339,firewalld,Yes,GPLv2+
+340,firewalld-filesystem,No,GPLv2+
+341,flac-libs,No,BSD and GPLv2+ and GFDL
+342,fontconfig,No,MIT and Public Domain and UCD
+343,fontpackages-filesystem,No,Public Domain
+344,foomatic-filters,No,GPLv2+
+345,fprintd,No,GPLv2+
+346,fprintd-pam,Yes,GPLv2+
+347,freeipmi,Yes,GPLv3+
+348,freeipmi-bmc-watchdog,Yes,GPLv3+
+349,freeipmi-ipmidetectd,Yes,GPLv3+
+350,freetype,No,(FTL or GPLv2+) and BSD and MIT and Public Domain and zlib with acknowledgement
+351,fribidi,No,LGPLv2+ and UCD
+352,fros,No,GPLv2+
+353,ftp,Yes,BSD with advertising
+354,fuse,No,GPL+
+355,fuse-libs,No,LGPLv2+
+356,fwupd,Yes,LGPLv2+
+357,fwupdate,Yes,GPLv2+
+358,fwupdate-efi,No,GPLv2+
+359,fwupdate-libs,No,GPLv2+
+360,fxload,No,GPLv2+
+361,gamin,No,LGPLv2
+362,gawk,No,GPLv3+ and GPL and LGPLv3+ and LGPL and BSD
+363,gcc,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+364,gcc-gfortran,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+365,GConf2,No,LGPLv2+ and GPLv2+
+366,gcr,No,LGPLv2+
+367,gd,No,MIT
+368,gdb,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and BSD and Public Domain
+369,gdb-gdbserver,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and BSD and Public Domain
+370,gdbm,No,GPLv3+
+371,gdbm-devel,No,GPLv3+
+372,gdisk,No,GPLv2
+373,gdk-pixbuf2,No,LGPLv2+
+374,genisoimage,Yes,GPLv2
+375,geoclue,No,LGPLv2
+376,geoclue2,No,GPLv2+
+377,GeoIP,No,LGPLv2+ and GPLv2+ and CC-BY-SA
+378,geoipupdate,No,GPLv2
+379,geolite2-city,No,CC-BY-SA
+380,geolite2-country,No,CC-BY-SA
+381,geronimo-jms,No,ASL 2.0
+382,geronimo-jta,No,ASL 2.0
+383,gettext,No,GPLv3+ and LGPLv2+
+384,gettext-libs,No,LGPLv2+ and GPLv3+
+385,gfs2-utils,Yes,GPLv2+ and LGPLv2+
+386,ghostscript,No,AGPLv3+
+387,ghostscript-chinese,Yes,GPLv2+
+388,ghostscript-cups,No,AGPLv3+
+389,ghostscript-fonts,No,GPLv2+ and Hershey and MIT and OFL and Public Domain
+390,giflib,No,MIT
+391,glade-libs,No,GPLv2+ and LGPLv2+
+392,glib-networking,No,LGPLv2+
+393,glib2,No,LGPLv2+
+394,glibc,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+395,glibc-common,No,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+396,glibc-devel,No,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+397,glibc-headers,No,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+398,glibc-utils,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+399,glibmm24,No,LGPLv2+
+400,glusterfs,No,GPLv2 or LGPLv3+
+401,glusterfs-api,No,GPLv2 or LGPLv3+
+402,glusterfs-client-xlators,No,GPLv2 or LGPLv3+
+403,glusterfs-fuse,Yes,GPLv2 or LGPLv3+
+404,glusterfs-libs,No,GPLv2 or LGPLv3+
+405,glusterfs-rdma,Yes,GPLv2 or LGPLv3+
+406,gmp,No,LGPLv3+ or GPLv2+
+407,gnome-bluetooth-libs,No,LGPLv2+
+408,gnome-icon-theme,No,LGPLv3+
+409,gnome-icon-theme-symbolic,No,CC-BY-SA
+410,gnome-user-docs,No,CC-BY-SA
+411,gnu-free-fonts-common,No,GPLv3+ with exceptions
+412,gnu-free-mono-fonts,Yes,GPLv3+ with exceptions
+413,gnu-free-sans-fonts,Yes,GPLv3+ with exceptions
+414,gnu-free-serif-fonts,Yes,GPLv3+ with exceptions
+415,gnupg2,Yes,GPLv3+
+416,gnuplot,Yes,gnuplot and MIT
+417,gnuplot-common,No,gnuplot and MIT
+418,gnutls,No,GPLv3+ and LGPLv2+
+419,gnutls-dane,No,GPLv3+ and LGPLv2+
+420,gnutls-utils,No,GPLv3+
+421,gobject-introspection,No,"GPLv2+, LGPLv2+, MIT"
+422,google-crosextra-caladea-fonts,Yes,ASL 2.0
+423,google-crosextra-carlito-fonts,Yes,OFL
+424,google-noto-emoji-fonts,Yes,OFL and ASL 2.0
+425,google-noto-fonts-common,No,ASL 2.0
+426,google-noto-sans-armenian-fonts,Yes,ASL 2.0
+427,google-noto-sans-devanagari-fonts,Yes,ASL 2.0
+428,google-noto-sans-devanagari-ui-fonts,Yes,ASL 2.0
+429,google-noto-sans-ethiopic-fonts,Yes,ASL 2.0
+430,google-noto-sans-fonts,Yes,ASL 2.0
+431,google-noto-sans-georgian-fonts,Yes,ASL 2.0
+432,google-noto-sans-hebrew-fonts,Yes,ASL 2.0
+433,google-noto-sans-khmer-fonts,Yes,ASL 2.0
+434,google-noto-sans-khmer-ui-fonts,Yes,ASL 2.0
+435,google-noto-sans-lao-fonts,Yes,ASL 2.0
+436,google-noto-sans-lao-ui-fonts,Yes,ASL 2.0
+437,google-noto-sans-tamil-fonts,Yes,ASL 2.0
+438,google-noto-sans-tamil-ui-fonts,Yes,ASL 2.0
+439,google-noto-sans-thai-fonts,Yes,ASL 2.0
+440,google-noto-sans-thai-ui-fonts,Yes,ASL 2.0
+441,google-noto-sans-ui-fonts,Yes,ASL 2.0
+442,google-noto-serif-armenian-fonts,Yes,ASL 2.0
+443,google-noto-serif-fonts,Yes,ASL 2.0
+444,google-noto-serif-georgian-fonts,Yes,ASL 2.0
+445,google-noto-serif-lao-fonts,Yes,ASL 2.0
+446,google-noto-serif-thai-fonts,Yes,ASL 2.0
+447,gpgme,No,LGPLv2+
+448,gpm,Yes,GPLv2 and GPLv2+ with exceptions and GPLv3+ and Verbatim and Copyright only
+449,gpm-libs,No,GPLv2 and GPLv2+ with exceptions and GPLv3+ and Verbatim and Copyright only
+450,graphite2,No,(LGPLv2+ or GPLv2+ or MPL) and (Netscape or GPLv2+ or LGPLv2+)
+451,graphviz,No,EPL
+452,graphviz-tcl,No,EPL
+453,grep,No,GPLv3+
+454,groff-base,No,GPLv3+ and GFDL and BSD and MIT
+455,grub2,Yes,GPLv3+
+456,grub2-common,No,GPLv3+
+457,grub2-efi-ia32,Yes,GPLv3+
+458,grub2-efi-ia32-modules,Yes,GPLv3+
+459,grub2-efi-x64,Yes,GPLv3+
+460,grub2-efi-x64-modules,Yes,GPLv3+
+461,grub2-pc,Yes,GPLv3+
+462,grub2-pc-modules,No,GPLv3+
+463,grub2-tools,No,GPLv3+
+464,grub2-tools-extra,No,GPLv3+
+465,grub2-tools-minimal,No,GPLv3+
+466,grubby,No,GPLv2+
+467,gsettings-desktop-schemas,No,LGPLv2+
+468,gsl,No,GPLv3 and GFDL and BSD
+469,gsl-devel,Yes,GPLv3 and GFDL and BSD
+470,gsm,No,MIT
+471,gssdp,No,LGPLv2+
+472,gssproxy,Yes,MIT
+473,gstreamer,No,LGPLv2+
+474,gstreamer-plugins-base,No,LGPLv2+
+475,gstreamer-plugins-good,No,LGPLv2+
+476,gstreamer-tools,No,LGPLv2+
+477,gstreamer1,No,LGPLv2+
+478,gstreamer1-plugins-bad-free,No,LGPLv2+ and LGPLv2
+479,gstreamer1-plugins-base,No,LGPLv2+
+480,gtk-update-icon-cache,No,LGPLv2+
+481,gtk2,No,LGPLv2+
+482,gtk3,No,LGPLv2+
+483,gtkmm24,No,LGPLv2+
+484,gtkmm30,No,LGPLv2+
+485,guava,No,ASL 2.0
+486,gubbi-fonts,Yes,OFL
+487,gupnp,No,LGPLv2+
+488,gupnp-igd,No,LGPLv2+
+489,gzip,No,GPLv3+ and GFDL
+490,hardlink,Yes,GPL+
+491,harfbuzz,No,MIT
+492,harfbuzz-icu,No,MIT
+493,hawkey,No,LGPLv2+
+494,hdparm,Yes,BSD
+495,hesiod,No,MIT
+496,hicolor-icon-theme,No,GPL+
+497,hmaccalc,No,BSD
+498,hostname,Yes,GPLv2+
+499,hsakmt,No,MIT and GPLv2
+500,http-parser,No,MIT
+501,hunspell,Yes,LGPLv2+ or GPLv2+ or MPLv1.1
+502,hunspell-af,No,LGPLv2+
+503,hunspell-ak,No,LGPLv3
+504,hunspell-am,No,GPL+
+505,hunspell-ar,No,GPLv2 or LGPLv2 or MPLv1.1
+506,hunspell-as,No,GPLv2+ or LGPLv2+ or MPLv1.1
+507,hunspell-ast,No,GPLv3+
+508,hunspell-az,No,GPLv2+
+509,hunspell-be,No,GPL+ and LGPLv2+
+510,hunspell-ber,No,GPL+ or LGPLv2+ or MPLv1.1
+511,hunspell-bg,No,GPLv2+ or LGPLv2+ or MPLv1.1
+512,hunspell-bn,No,GPLv2+
+513,hunspell-br,No,LGPLv2+
+514,hunspell-ca,No,GPLv2+
+515,hunspell-cop,No,GPLv3+
+516,hunspell-cs,No,GPL+
+517,hunspell-csb,No,GPLv2+
+518,hunspell-cv,No,LGPLv2+
+519,hunspell-cy,No,GPL+
+520,hunspell-da,No,GPLv2+
+521,hunspell-de,No,GPLv2 or GPLv3
+522,hunspell-dsb,No,GPLv2+
+523,hunspell-el,No,GPLv2+ or LGPLv2+ or MPLv1.1
+524,hunspell-en,Yes,LGPLv2+ and LGPLv2 and BSD
+525,hunspell-en-GB,No,LGPLv2+ and LGPLv2 and BSD
+526,hunspell-en-US,No,LGPLv2+ and LGPLv2 and BSD
+527,hunspell-eo,No,LGPLv3
+528,hunspell-es,No,LGPLv3+ or GPLv3+ or MPLv1.1
+529,hunspell-et,No,LGPLv2+ and LPPL
+530,hunspell-eu,No,GPLv2
+531,hunspell-fa,No,GPLv2+
+532,hunspell-fj,No,LGPLv2+ or GPLv2+ or MPLv1.1
+533,hunspell-fo,No,GPLv2+
+534,hunspell-fr,No,MPLv2.0
+535,hunspell-fur,No,GPLv2+
+536,hunspell-fy,No,LGPLv2+
+537,hunspell-ga,No,GPLv2+
+538,hunspell-gd,No,GPLv2+ and GPLv3+
+539,hunspell-gl,No,GPLv2
+540,hunspell-grc,No,GPL+ or LGPLv2+
+541,hunspell-gu,No,GPL+
+542,hunspell-gv,No,GPL+
+543,hunspell-haw,No,GPLv2+
+544,hunspell-he,No,AGPLv3
+545,hunspell-hi,No,GPLv2+
+546,hunspell-hil,No,GPLv3+
+547,hunspell-hr,No,LGPLv2+ or SISSL
+548,hunspell-hsb,No,GPLv2+
+549,hunspell-ht,No,GPLv3+
+550,hunspell-hu,No,LGPLv2+ or GPLv2+ or MPLv1.1
+551,hunspell-hy,No,GPLv2+
+552,hunspell-ia,No,LGPLv2+
+553,hunspell-id,No,GPLv2
+554,hunspell-is,No,GPLv2+
+555,hunspell-it,No,GPLv3+
+556,hunspell-kk,No,GPLv2+ or LGPLv2+ or MPLv1.1
+557,hunspell-km,No,GPLv3
+558,hunspell-kn,No,GPLv2+ or LGPLv2+ or MPLv1.1
+559,hunspell-ko,No,MPLv1.1 or GPLv2 or LGPLv2
+560,hunspell-ku,No,GPLv3 or LGPLv3 or MPLv1.1
+561,hunspell-ky,No,GPLv2+
+562,hunspell-la,No,GPLv2+ and LGPLv2+
+563,hunspell-lb,No,EUPL 1.1
+564,hunspell-ln,No,GPLv2+
+565,hunspell-lt,No,BSD
+566,hunspell-lv,No,LGPLv2+
+567,hunspell-mai,No,GPLv2+ or LGPLv2+ or MPLv1.1
+568,hunspell-mg,No,GPLv2+
+569,hunspell-mi,No,GPLv3+
+570,hunspell-mk,No,GPL+
+571,hunspell-ml,No,GPLv3+
+572,hunspell-mn,No,GPLv2 and LGPLv2+
+573,hunspell-mos,No,LGPLv3
+574,hunspell-mr,No,LGPLv2+
+575,hunspell-ms,No,GFDL and GPL+
+576,hunspell-mt,No,LGPLv2+
+577,hunspell-nb,No,GPL+
+578,hunspell-nds,No,GPLv2+
+579,hunspell-ne,No,LGPLv2
+580,hunspell-nl,No,BSD or CC-BY
+581,hunspell-nn,No,GPL+
+582,hunspell-nr,No,LGPLv2+
+583,hunspell-nso,No,LGPLv2+
+584,hunspell-ny,No,GPLv3+
+585,hunspell-oc,No,GPLv3+
+586,hunspell-om,No,LGPLv3+
+587,hunspell-or,No,GPLv2+
+588,hunspell-pa,No,GPLv2+
+589,hunspell-pl,No,LGPLv2+ or GPL+ or MPLv1.1 or CC-BY-SA
+590,hunspell-pt,No,((LGPLv3 or MPL) and LGPLv2) and (GPLv2 or LGPLv2 or MPLv1.1)
+591,hunspell-qu,No,AGPLv3
+592,hunspell-quh,No,GPLv2+
+593,hunspell-ro,No,GPLv2+ or LGPLv2+ or MPLv1.1
+594,hunspell-ru,No,BSD
+595,hunspell-rw,No,GPLv2+
+596,hunspell-sc,No,AGPLv3+ and GPLv2
+597,hunspell-se,No,GPLv3
+598,hunspell-shs,No,GPLv2+
+599,hunspell-si,No,GPLv2+
+600,hunspell-sk,No,LGPLv2 or GPLv2 or MPLv1.1
+601,hunspell-sl,No,GPL+ or LGPLv2+
+602,hunspell-smj,No,GPLv3
+603,hunspell-so,No,GPLv2+
+604,hunspell-sq,No,GPLv2+
+605,hunspell-sr,No,LGPLv3
+606,hunspell-ss,No,LGPLv2+
+607,hunspell-st,No,LGPLv2+
+608,hunspell-sv,No,LGPLv3
+609,hunspell-sw,No,LGPLv2+
+610,hunspell-ta,No,GPLv2+
+611,hunspell-te,No,GPL+
+612,hunspell-tet,No,GPLv2+
+613,hunspell-th,No,LGPLv2+
+614,hunspell-ti,No,GPL+
+615,hunspell-tk,No,GPLv2+
+616,hunspell-tl,No,GPLv2+
+617,hunspell-tn,No,GPLv2+
+618,hunspell-tpi,No,GPLv3+
+619,hunspell-ts,No,LGPLv2+
+620,hunspell-uk,No,GPLv2+ or LGPLv2+ or MPLv1.1
+621,hunspell-ur,No,LGPLv2+
+622,hunspell-uz,No,GPLv2+
+623,hunspell-ve,No,LGPLv2+
+624,hunspell-vi,No,GPL+
+625,hunspell-wa,No,LGPLv2+
+626,hunspell-xh,No,LGPLv2+
+627,hunspell-yi,No,LGPLv2+ or GPLv2+ or MPLv1.1
+628,hunspell-zu,No,GPLv3+
+629,hwdata,No,GPLv2+
+630,hwloc-libs,No,BSD
+631,hyperv-daemons,Yes,GPLv2
+632,hyperv-daemons-license,No,GPLv2
+633,hypervfcopyd,No,GPLv2
+634,hypervkvpd,No,GPLv2
+635,hypervvssd,No,GPLv2
+636,hyphen,No,GPLv2 or LGPLv2+ or MPLv1.1
+637,hyphen-af,No,LGPLv2+ and GPL+
+638,hyphen-as,No,LGPLv3+
+639,hyphen-be,No,GPL+ and LGPLv2+
+640,hyphen-bg,No,GPLv2+ or LGPLv2+ or MPLv1.1
+641,hyphen-bn,No,LGPLv3+
+642,hyphen-ca,No,GPLv3
+643,hyphen-cs,No,GPL+
+644,hyphen-cy,No,LPPL
+645,hyphen-da,No,LGPLv2+
+646,hyphen-de,No,LGPLv2+
+647,hyphen-el,No,LGPLv2+
+648,hyphen-en,No,GPLv2 or LGPLv2+ or MPLv1.1
+649,hyphen-es,No,LGPLv2+
+650,hyphen-et,No,LGPLv2+ and LPPL
+651,hyphen-eu,No,LPPL
+652,hyphen-fa,No,LPPL
+653,hyphen-fo,No,GPL+
+654,hyphen-fr,No,LGPLv2+
+655,hyphen-ga,No,GPL+
+656,hyphen-gl,No,GPLv3
+657,hyphen-grc,No,LPPL
+658,hyphen-gu,No,LGPLv3+
+659,hyphen-hi,No,LGPLv3+
+660,hyphen-hr,No,LGPLv2+ or SISSL
+661,hyphen-hsb,No,LPPL
+662,hyphen-hu,No,GPLv2
+663,hyphen-ia,No,LPPL
+664,hyphen-id,No,GPL+
+665,hyphen-is,No,LGPLv2+ or SISSL
+666,hyphen-it,No,LGPLv2+
+667,hyphen-kn,No,LGPLv3+
+668,hyphen-ku,No,LGPLv2+
+669,hyphen-lt,No,LPPL
+670,hyphen-lv,No,LGPLv2+
+671,hyphen-mi,No,GPLv3+
+672,hyphen-ml,No,LGPLv3+
+673,hyphen-mn,No,LPPL
+674,hyphen-mr,No,LGPLv3+
+675,hyphen-nb,No,GPL+
+676,hyphen-nl,No,GPLv2
+677,hyphen-nn,No,GPL+
+678,hyphen-or,No,LGPLv3+
+679,hyphen-pa,No,LGPLv3+
+680,hyphen-pl,No,LGPLv2+
+681,hyphen-pt,No,GPL+
+682,hyphen-ro,No,GPLv2+
+683,hyphen-ru,No,LGPLv2+
+684,hyphen-sa,No,LPPL
+685,hyphen-sk,No,GPL+
+686,hyphen-sl,No,LGPLv2+
+687,hyphen-sr,No,LGPLv3
+688,hyphen-sv,No,LGPLv2+ or GPLv2+
+689,hyphen-ta,No,LGPLv3+
+690,hyphen-te,No,LGPLv3+
+691,hyphen-tk,No,Public Domain
+692,hyphen-uk,No,GPLv2+
+693,hyphen-zu,No,LGPLv2+ and GPL+
+694,i2c-tools,Yes,GPLv2+
+695,ibacm,Yes,GPLv2 or BSD
+696,ibutils,Yes,GPLv2 or BSD
+697,ibutils-libs,No,GPLv2 or BSD
+698,icoutils,No,GPLv3+
+699,ilmbase,No,BSD
+700,ima-evm-utils,Yes,GPLv2
+701,infiniband-diags,Yes,GPLv2 or BSD
+702,infinipath-psm,No,BSD or GPLv2
+703,info,No,GPLv3+
+704,iniparser,No,MIT
+705,initial-setup,Yes,GPLv2+
+706,initscripts,Yes,GPLv2 and GPLv2+
+707,insights-client,Yes,GPLv2+
+708,intel-cmt-cat,Yes,BSD
+709,iotop,Yes,GPLv2+
+710,iowatcher,Yes,GPLv2
+711,ipa-client,Yes,GPLv3+
+712,ipa-client-common,No,GPLv3+
+713,ipa-common,No,GPLv3+
+714,ipa-gothic-fonts,Yes,IPA
+715,ipa-mincho-fonts,Yes,IPA
+716,ipa-pgothic-fonts,Yes,IPA
+717,ipa-pmincho-fonts,Yes,IPA
+718,ipa-python-compat,No,GPLv3+
+719,iperf3,Yes,BSD
+720,ipmitool,Yes,BSD
+721,iproute,Yes,GPLv2+ and Public Domain
+722,iprutils,Yes,CPL
+723,ipset,No,GPLv2
+724,ipset-libs,No,GPLv2
+725,ipset-service,No,GPLv2
+726,iptables,Yes,GPLv2
+727,iptables-services,No,GPLv2
+728,iputils,Yes,BSD and GPLv2+
+729,irqbalance,Yes,GPLv2
+730,irssi,Yes,GPLv2+
+731,iscsi-initiator-utils,Yes,GPLv2+
+732,iscsi-initiator-utils-iscsiuio,No,BSD
+733,isdn4k-utils,Yes,GPLv2+ and GPL+ and MIT and BSD and zlib
+734,iso-codes,No,LGPLv2+
+735,isomd5sum,No,GPLv2+
+736,ivtv-firmware,Yes,"Redistributable, no modification permitted"
+737,iw,No,ISC
+738,iwl100-firmware,Yes,"Redistributable, no modification permitted"
+739,iwl1000-firmware,Yes,"Redistributable, no modification permitted"
+740,iwl105-firmware,Yes,"Redistributable, no modification permitted"
+741,iwl135-firmware,Yes,"Redistributable, no modification permitted"
+742,iwl2000-firmware,Yes,"Redistributable, no modification permitted"
+743,iwl2030-firmware,Yes,"Redistributable, no modification permitted"
+744,iwl3160-firmware,Yes,"Redistributable, no modification permitted"
+745,iwl3945-firmware,Yes,"Redistributable, no modification permitted"
+746,iwl4965-firmware,Yes,"Redistributable, no modification permitted"
+747,iwl5000-firmware,Yes,"Redistributable, no modification permitted"
+748,iwl5150-firmware,Yes,"Redistributable, no modification permitted"
+749,iwl6000-firmware,Yes,"Redistributable, no modification permitted"
+750,iwl6000g2a-firmware,Yes,"Redistributable, no modification permitted"
+751,iwl6000g2b-firmware,Yes,"Redistributable, no modification permitted"
+752,iwl6050-firmware,Yes,"Redistributable, no modification permitted"
+753,iwl7260-firmware,Yes,"Redistributable, no modification permitted"
+754,iwpmd,Yes,GPLv2 or BSD
+755,ixpdimm_sw,No,BSD
+756,jackson,No,ASL 2.0 or LGPLv2
+757,jansson,No,MIT
+758,jasper-libs,No,JasPer
+759,java-1.6.0-openjdk,Yes,"ASL 1.1, ASL 2.0, GPL+, GPLv2, GPLv2 with exceptions, LGPL+, LGPLv2, MPLv1.0, MPLv1.1, Public Domain, W3C"
+760,java-1.6.0-openjdk-devel,No,"ASL 1.1, ASL 2.0, GPL+, GPLv2, GPLv2 with exceptions, LGPL+, LGPLv2, MPLv1.0, MPLv1.1, Public Domain, W3C"
+761,java-1.7.0-openjdk,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv1.1 and MPLv2.0 and Public Domain and W3C and zlib
+762,java-1.7.0-openjdk-headless,No,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv1.1 and MPLv2.0 and Public Domain and W3C and zlib
+763,java-1.8.0-openjdk,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+764,java-1.8.0-openjdk-headless,No,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+765,java-11-openjdk,Yes,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+766,java-11-openjdk-headless,No,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+767,javamail,No,CDDL or GPLv2 with exceptions
+768,javapackages-tools,No,BSD
+769,javassist,No,MPLv1.1 or LGPLv2+ or ASL 2.0
+770,jbigkit-libs,No,GPLv2+
+771,jline,No,BSD
+772,joda-convert,No,ASL 2.0
+773,joda-time,No,ASL 2.0
+774,jomolhari-fonts,Yes,OFL
+775,jose,No,ASL 2.0
+776,js,No,GPLv2+ or LGPLv2+ or MPLv1.1
+777,json-c,No,MIT
+778,json-glib,No,LGPLv2+
+779,jsr-311,No,CDDL
+780,jss,No,MPLv1.1 or GPLv2+ or LGPLv2+
+781,kabi-yum-plugins,Yes,GPLv2
+782,kacst-art-fonts,Yes,GPLv2
+783,kacst-book-fonts,Yes,GPLv2
+784,kacst-decorative-fonts,Yes,GPLv2
+785,kacst-digital-fonts,Yes,GPLv2
+786,kacst-farsi-fonts,Yes,GPLv2
+787,kacst-fonts-common,No,GPLv2
+788,kacst-letter-fonts,Yes,GPLv2
+789,kacst-naskh-fonts,Yes,GPLv2
+790,kacst-office-fonts,Yes,GPLv2
+791,kacst-one-fonts,Yes,GPLv2
+792,kacst-pen-fonts,Yes,GPLv2
+793,kacst-poster-fonts,Yes,GPLv2
+794,kacst-qurn-fonts,Yes,GPLv2
+795,kacst-screen-fonts,Yes,GPLv2
+796,kacst-title-fonts,Yes,GPLv2
+797,kacst-titlel-fonts,Yes,GPLv2
+798,kactivities,No,GPLv2+ and LGPLv2+
+799,kate-part,No,LGPLv2
+800,kbd,Yes,GPLv2+
+801,kbd-legacy,No,GPLv2+
+802,kbd-misc,No,GPLv2+
+803,kde-filesystem,No,Public Domain
+804,kde-l10n,No,LGPLv2
+805,kde-runtime,No,LGPLv2+ and GPLv2+
+806,kde-runtime-drkonqi,No,LGPLv2+ and GPLv2+
+807,kde-runtime-libs,No,LGPLv2+ and GPLv2+
+808,kde-settings,No,MIT
+809,kdelibs,No,LGPLv2+
+810,kdelibs-common,No,LGPLv2+
+811,kdelibs-ktexteditor,No,LGPLv2+
+812,kdepimlibs,No,LGPLv2+
+813,kdepimlibs-kxmlrpcclient,No,BSD
+814,kernel,No,GPLv2
+815,kernel-abi-whitelists,No,GPLv2
+816,kernel-debug,No,GPLv2
+817,kernel-debug-devel,No,GPLv2
+818,kernel-devel,No,GPLv2
+819,kernel-doc,No,GPLv2
+820,kernel-headers,No,GPLv2
+821,kernel-tools,Yes,GPLv2
+822,kernel-tools-libs,No,GPLv2
+823,kexec-tools,Yes,GPLv2
+824,keybinder3,No,MIT
+825,keyutils,No,GPLv2+ and LGPLv2+
+826,keyutils-libs,No,GPLv2+ and LGPLv2+
+827,khmeros-base-fonts,Yes,LGPLv2+
+828,khmeros-battambang-fonts,Yes,LGPLv2+
+829,khmeros-bokor-fonts,Yes,LGPLv2+
+830,khmeros-fonts-common,No,LGPLv2+
+831,khmeros-handwritten-fonts,Yes,LGPLv2+
+832,khmeros-metal-chrieng-fonts,Yes,LGPLv2+
+833,khmeros-muol-fonts,Yes,LGPLv2+
+834,khmeros-siemreap-fonts,Yes,LGPLv2+
+835,kmod,No,GPLv2+
+836,kmod-kvdo,Yes,GPLv2+
+837,kmod-libs,No,LGPLv2+
+838,konkretcmpi,No,MIT
+839,kpartx,No,GPL+
+840,kpatch,Yes,GPLv2
+841,krb5-libs,No,MIT
+842,krb5-pkinit,Yes,MIT
+843,krb5-workstation,Yes,MIT
+844,ksh,Yes,EPL
+845,kurdit-unikurd-web-fonts,Yes,GPLv3
+846,langtable,No,GPLv3+
+847,langtable-data,No,GPLv3+ and MIT
+848,langtable-python,No,GPLv3+
+849,lapack,Yes,BSD
+850,latencytop,Yes,GPLv2
+851,latencytop-common,No,GPLv2
+852,latencytop-tui,Yes,GPLv2
+853,latrace,Yes,GPLv3+
+854,lcms2,No,MIT
+855,ldapjdk,Yes,MPLv1.1 or GPLv2+ or LGPLv2+
+856,ldns,No,BSD
+857,ledmon,Yes,GPLv2+
+858,less,Yes,GPLv3+
+859,lftp,Yes,GPLv3+
+860,libacl,No,LGPLv2+
+861,libaio,Yes,LGPLv2+
+862,libao,No,GPLv2+
+863,libappstream-glib,No,LGPLv2+
+864,libarchive,No,BSD
+865,libassuan,No,LGPLv2+ and GPLv3+
+866,libasyncns,No,LGPLv2+
+867,libatasmart,No,LGPLv2+
+868,libatomic,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+869,libattr,No,LGPLv2+
+870,libavc1394,No,GPLv2+ and LGPLv2+
+871,libbasicobjects,No,GPLv3+
+872,libblkid,No,LGPLv2+
+873,libblockdev,No,LGPLv2+
+874,libblockdev-crypto,No,LGPLv2+
+875,libblockdev-fs,No,LGPLv2+
+876,libblockdev-loop,No,LGPLv2+
+877,libblockdev-lvm,No,LGPLv2+
+878,libblockdev-mdraid,No,LGPLv2+
+879,libblockdev-nvdimm,No,LGPLv2+
+880,libblockdev-part,No,LGPLv2+
+881,libblockdev-swap,No,LGPLv2+
+882,libblockdev-utils,No,LGPLv2+
+883,libbytesize,No,LGPLv2+
+884,libcanberra,No,LGPLv2+
+885,libcanberra-gtk3,No,LGPLv2+
+886,libcap,No,LGPLv2+
+887,libcap-ng,No,LGPLv2+
+888,libcgroup,Yes,LGPLv2+
+889,libcgroup-tools,Yes,LGPLv2+
+890,libcollection,No,LGPLv3+
+891,libcom_err,No,MIT
+892,libconfig,No,LGPLv2+
+893,libcroco,No,LGPLv2
+894,libcurl,No,MIT
+895,libdaemon,No,LGPLv2+
+896,libdb,No,BSD and LGPLv2 and Sleepycat
+897,libdb-devel,No,BSD and LGPLv2 and Sleepycat
+898,libdb-utils,No,BSD and LGPLv2 and Sleepycat
+899,libdbi,No,LGPLv2+
+900,libdbi-dbd-mysql,Yes,LGPLv2+
+901,libdbi-dbd-pgsql,Yes,LGPLv2+
+902,libdbi-drivers,No,LGPLv2+
+903,libdhash,No,LGPLv3+
+904,libdnet,No,BSD
+905,libdrm,No,MIT
+906,libdv,No,LGPLv2+
+907,libdvdnav,No,GPLv2+
+908,libdvdread,No,GPLv2+
+909,libdwarf,No,LGPLv2
+910,libedit,No,BSD
+911,libepoxy,No,MIT
+912,liberation-fonts,No,Liberation
+913,liberation-fonts-common,No,Liberation
+914,liberation-mono-fonts,Yes,Liberation
+915,liberation-narrow-fonts,Yes,Liberation
+916,liberation-sans-fonts,Yes,Liberation
+917,liberation-serif-fonts,Yes,Liberation
+918,libesmtp,No,LGPLv2+
+919,libestr,No,LGPLv2+
+920,libevent,No,BSD
+921,libfabric,No,GPLv2 or BSD
+922,libfastjson,No,MIT
+923,libffi,No,MIT and Public Domain
+924,libfontenc,No,MIT
+925,libfprint,No,LGPLv2+
+926,libgcab1,No,LGPLv2+
+927,libgcc,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+928,libgcrypt,No,LGPLv2+
+929,libgfortran,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+930,libgfortran4,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+931,libgfortran5,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+932,libglade2,No,LGPLv2+
+933,libglvnd,No,MIT
+934,libglvnd-egl,No,MIT
+935,libglvnd-gles,No,MIT
+936,libglvnd-glx,No,MIT
+937,libgnomekbd,No,LGPLv2+
+938,libgomp,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+939,libgpg-error,No,LGPLv2+
+940,libgs,No,AGPLv3+
+941,libgudev1,No,LGPLv2+
+942,libgusb,No,LGPLv2+
+943,libhbaapi,No,SNIA
+944,libhbalinux,No,LGPLv2
+945,libibcommon,Yes,GPLv2 or BSD
+946,libibmad,Yes,GPLv2 or BSD
+947,libibumad,Yes,GPLv2 or BSD
+948,libibverbs,Yes,GPLv2 or BSD
+949,libibverbs-utils,Yes,GPLv2 or BSD
+950,libical,No,LGPLv2 or MPLv2.0
+951,libICE,No,MIT
+952,libicu,No,MIT and UCD and Public Domain
+953,libidn,No,LGPLv2+ and GPLv3+ and GFDL
+954,libiec61883,No,LGPLv2+
+955,libimobiledevice,No,LGPLv2+
+956,libini_config,No,LGPLv3+
+957,libinvm-cim,No,BSD
+958,libinvm-cli,No,BSD
+959,libinvm-i18n,No,BSD
+960,libiodbc,No,LGPLv2 or BSD
+961,libipa_hbac,No,LGPLv3+
+962,libitm,Yes,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+963,libjose,No,ASL 2.0
+964,libjpeg-turbo,No,IJG
+965,libkadm5,No,MIT
+966,libldb,No,LGPLv3+
+967,libluksmeta,No,LGPLv2+
+968,libmaxminddb,No,ASL 2.0 and BSD
+969,libmbim,No,LGPLv2+
+970,libmbim-utils,No,GPLv2+
+971,libmicrohttpd,No,LGPLv2+
+972,libmng,No,zlib
+973,libmnl,No,LGPLv2+
+974,libmodman,No,LGPLv2+
+975,libmount,No,LGPLv2+
+976,libmpc,No,LGPLv3+ and GFDL
+977,libmpcdec,No,BSD
+978,libmspack,No,LGPLv2
+979,libndp,No,LGPLv2+
+980,libnetfilter_conntrack,No,GPLv2+
+981,libnetfilter_queue,No,GPLv2
+982,libnfnetlink,No,GPLv2+
+983,libnfsidmap,No,BSD
+984,libnftnl,No,GPLv2+
+985,libnice,No,LGPLv2 and MPLv1.1
+986,libnl,No,LGPLv2
+987,libnl3,No,LGPLv2
+988,libnl3-cli,No,LGPLv2
+989,libnm-gtk,No,GPLv2+
+990,libnma,No,GPLv2+
+991,libnotify,No,LGPLv2+
+992,libogg,No,BSD
+993,libpaper,No,GPLv2
+994,libpath_utils,No,LGPLv3+
+995,libpcap,No,BSD with advertising
+996,libpciaccess,No,MIT
+997,libpfm,Yes,MIT
+998,libpipeline,No,GPLv3+
+999,libplist,No,LGPLv2+
+1000,libpmem,No,BSD
+1001,libpmemblk,No,BSD
+1002,libpmemlog,No,BSD
+1003,libpmemobj,No,BSD
+1004,libpmempool,No,BSD
+1005,libpng,No,zlib
+1006,libpng12,Yes,zlib
+1007,libproxy,No,LGPLv2+
+1008,libpsm2,No,GPLv2 or BSD
+1009,libpwquality,No,BSD or GPLv2+
+1010,libqb,No,LGPLv2+
+1011,libqmi,No,LGPLv2+
+1012,libqmi-utils,No,GPLv2+
+1013,libquadmath,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1014,libquadmath-devel,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1015,librabbitmq,No,MIT
+1016,librados2,No,LGPL-2.0
+1017,libraw1394,No,LGPLv2+
+1018,librbd1,No,LGPL-2.0
+1019,librdkafka,No,BSD
+1020,librdmacm,Yes,GPLv2 or BSD
+1021,librdmacm-utils,Yes,GPLv2 or BSD
+1022,libref_array,No,LGPLv3+
+1023,librelp,No,GPLv3+
+1024,libreport,No,GPLv2+
+1025,libreport-anaconda,No,GPLv2+
+1026,libreport-cli,Yes,GPLv2+
+1027,libreport-filesystem,No,GPLv2+
+1028,libreport-gtk,No,GPLv2+
+1029,libreport-plugin-bugzilla,No,GPLv2+
+1030,libreport-plugin-mailx,Yes,GPLv2+
+1031,libreport-plugin-reportuploader,No,GPLv2+
+1032,libreport-plugin-rhtsupport,No,GPLv2+
+1033,libreport-plugin-ureport,No,GPLv2+
+1034,libreport-python,No,GPLv2+
+1035,libreport-rhel,No,GPLv2+
+1036,libreport-rhel-anaconda-bugzilla,No,GPLv2+
+1037,libreport-web,No,GPLv2+
+1038,librpmem,No,BSD
+1039,librsvg2,No,LGPLv2+
+1040,librsvg2-tools,No,LGPLv2+
+1041,libseccomp,No,LGPLv2
+1042,libsecret,No,LGPLv2+
+1043,libselinux,No,Public Domain
+1044,libselinux-python,No,Public Domain
+1045,libselinux-python3,No,Public Domain
+1046,libselinux-ruby,No,Public Domain
+1047,libselinux-utils,No,Public Domain
+1048,libsemanage,No,LGPLv2+
+1049,libsemanage-python,No,LGPLv2+
+1050,libsepol,No,LGPLv2+
+1051,libshout,No,LGPLv2+
+1052,libsigc++20,No,LGPLv2+
+1053,libSM,No,MIT
+1054,libsmartcols,No,LGPLv2+
+1055,libsmbclient,No,GPLv3+ and LGPLv3+
+1056,libsmbios,No,GPLv2+ or OSL 2.1
+1057,libsndfile,No,LGPLv2+ and GPLv2+ and BSD
+1058,libsolv,No,BSD
+1059,libsoup,No,LGPLv2
+1060,libsrtp,No,BSD
+1061,libss,No,MIT
+1062,libssh2,No,BSD
+1063,libsss_autofs,No,LGPLv3+
+1064,libsss_certmap,No,LGPLv3+
+1065,libsss_idmap,No,LGPLv3+
+1066,libsss_nss_idmap,No,LGPLv3+
+1067,libsss_simpleifp,No,GPLv3+
+1068,libsss_sudo,No,LGPLv3+
+1069,libstdc++,No,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1070,libstoragemgmt,Yes,LGPLv2+
+1071,libstoragemgmt-arcconf-plugin,Yes,LGPLv2+
+1072,libstoragemgmt-hpsa-plugin,Yes,LGPLv2+
+1073,libstoragemgmt-local-plugin,Yes,LGPLv2+
+1074,libstoragemgmt-megaraid-plugin,Yes,LGPLv2+
+1075,libstoragemgmt-nfs-plugin,Yes,LGPLv2+
+1076,libstoragemgmt-nfs-plugin-clibs,Yes,LGPLv2+
+1077,libstoragemgmt-nstor-plugin,Yes,LGPLv2+
+1078,libstoragemgmt-python,No,LGPLv2+
+1079,libstoragemgmt-python-clibs,No,LGPLv2+
+1080,libstoragemgmt-smis-plugin,Yes,LGPLv2+
+1081,libstoragemgmt-targetd-plugin,Yes,LGPLv2+
+1082,libstoragemgmt-udev,Yes,LGPLv2+
+1083,libsysfs,Yes,LGPLv2+
+1084,libtalloc,No,LGPLv3+
+1085,libtar,No,MIT
+1086,libtasn1,No,GPLv3+ and LGPLv2+
+1087,libtdb,No,LGPLv3+
+1088,libteam,No,LGPLv2+
+1089,libtevent,No,LGPLv3+
+1090,libthai,No,LGPLv2+
+1091,libtheora,No,BSD
+1092,libtiff,No,libtiff
+1093,libtimezonemap,No,GPLv3
+1094,libtirpc,No,SISSL and BSD
+1095,libtool-ltdl,No,LGPLv2+
+1096,libudisks2,No,LGPLv2+
+1097,libunistring,No,LGPLv3+
+1098,libusal,No,GPLv2
+1099,libusb,No,LGPLv2+
+1100,libusbmuxd,No,LGPLv2+
+1101,libusbx,No,LGPLv2+
+1102,libuser,No,LGPLv2+
+1103,libuser-python,No,LGPLv2+
+1104,libusnic_verbs,Yes,GPLv2 or BSD
+1105,libutempter,No,LGPLv2+
+1106,libuuid,No,BSD
+1107,libv4l,No,LGPLv2+ and GPLv2
+1108,libva,No,MIT
+1109,libvdpau,No,MIT
+1110,libverto,No,MIT
+1111,libverto-libevent,No,MIT
+1112,libverto-tevent,No,MIT
+1113,libvirt-bash-completion,No,LGPLv2+
+1114,libvirt-client,No,LGPLv2+
+1115,libvirt-libs,No,LGPLv2+
+1116,libvisual,No,LGPLv2+
+1117,libvma,Yes,GPLv2 or BSD
+1118,libvmem,No,BSD
+1119,libvmmalloc,No,BSD
+1120,libvorbis,No,BSD
+1121,libwayland-client,No,MIT
+1122,libwayland-cursor,No,MIT
+1123,libwayland-egl,No,MIT
+1124,libwayland-server,No,MIT
+1125,libwbclient,No,GPLv3+ and LGPLv3+
+1126,libwebp,No,BSD
+1127,libwsman1,No,BSD
+1128,libwvstreams,No,LGPLv2+
+1129,libX11,No,MIT
+1130,libX11-common,No,MIT
+1131,libXau,No,MIT
+1132,libXaw,No,MIT
+1133,libxcb,No,MIT
+1134,libXcomposite,No,MIT
+1135,libXcursor,No,MIT
+1136,libXdamage,No,MIT
+1137,libXdmcp,No,MIT
+1138,libXevie,No,MIT
+1139,libXext,No,MIT
+1140,libXfixes,No,MIT
+1141,libXfont,No,MIT
+1142,libXfont2,No,MIT
+1143,libXft,No,MIT
+1144,libXi,No,MIT
+1145,libXinerama,No,MIT
+1146,libxkbcommon,No,MIT
+1147,libxkbfile,No,MIT
+1148,libxklavier,No,LGPLv2+
+1149,libxml2,No,MIT
+1150,libxml2-python,No,MIT
+1151,libXmu,Yes,MIT
+1152,libXp,Yes,MIT
+1153,libXpm,No,MIT
+1154,libXrandr,No,MIT
+1155,libXrender,No,MIT
+1156,libXScrnSaver,No,MIT
+1157,libxshmfence,No,MIT
+1158,libxslt,No,MIT
+1159,libXt,No,MIT
+1160,libXtst,No,MIT
+1161,libXv,No,MIT
+1162,libXxf86misc,No,MIT
+1163,libXxf86vm,No,MIT
+1164,libyaml,No,MIT
+1165,linux-firmware,Yes,"GPL+ and GPLv2+ and MIT and Redistributable, no modification permitted"
+1166,linuxconsoletools,No,GPLv2+
+1167,linuxptp,Yes,GPLv2+
+1168,lklug-fonts,Yes,GPLv2
+1169,lksctp-tools,No,GPLv2 and GPLv2+ and LGPLv2 and MIT
+1170,lldpad,Yes,GPLv2
+1171,llvm-private,No,NCSA
+1172,lm_sensors,Yes,LGPLv2+ and GPLv3+ and GPLv2+ and Verbatim and Public Domain
+1173,lm_sensors-libs,No,LGPLv2+ and GPLv3+ and GPLv2+ and Verbatim and Public Domain
+1174,lockdev,No,LGPLv2
+1175,log4j,No,ASL 2.0
+1176,logrotate,Yes,GPL+
+1177,logwatch,Yes,MIT
+1178,lohit-assamese-fonts,Yes,OFL
+1179,lohit-bengali-fonts,Yes,OFL
+1180,lohit-devanagari-fonts,Yes,OFL
+1181,lohit-gujarati-fonts,Yes,OFL
+1182,lohit-kannada-fonts,Yes,OFL
+1183,lohit-malayalam-fonts,Yes,OFL
+1184,lohit-marathi-fonts,Yes,OFL
+1185,lohit-nepali-fonts,Yes,OFL
+1186,lohit-oriya-fonts,Yes,OFL
+1187,lohit-punjabi-fonts,Yes,OFL
+1188,lohit-tamil-fonts,Yes,OFL
+1189,lohit-telugu-fonts,Yes,OFL
+1190,lorax,No,GPLv2+
+1191,lrzsz,Yes,GPLv2+
+1192,lshw,Yes,GPLv2
+1193,lsof,Yes,zlib and Sendmail and LGPLv2+
+1194,lsscsi,Yes,GPLv2+
+1195,ltrace,Yes,GPLv2+
+1196,lua,No,MIT
+1197,luksmeta,Yes,LGPLv2+
+1198,lvm2,Yes,GPLv2
+1199,lvm2-libs,No,LGPLv2
+1200,lvm2-python-boom,Yes,GPLv2
+1201,lz4,No,GPLv2+ and BSD
+1202,lzo,No,GPLv2+
+1203,m2crypto,No,MIT
+1204,m4,No,GPLv3+
+1205,madan-fonts,Yes,GPL+
+1206,mailcap,No,Public Domain and MIT
+1207,mailx,No,BSD with advertising and MPLv1.1
+1208,make,No,GPLv2+
+1209,man-db,Yes,GPLv2+ and GPLv3+
+1210,man-pages,Yes,GPL+ and GPLv2+ and BSD and MIT and Copyright only and IEEE
+1211,man-pages-cs,No,GPLv2 and GPLv3 and BSD
+1212,man-pages-es,No,GPL+ and GPLv2+ and LDP and IEEE
+1213,man-pages-es-extra,No,GPL+ and GPLv2+ and LDP and IEEE
+1214,man-pages-fr,No,GPL+ and GPLv2 and GPLv2+ and LGPLv2+ and GPLv3+ and ImageMagick and ISC and Public Domain and BSD and MIT and ASL 2.0 and and UCD and IBM and TCL and xinetd
+1215,man-pages-it,No,GPL+ and GPLv2 and GPLv2+ and LGPLV2+ and GPLv3+ and BSD and MIT and Copyright only and IEEE
+1216,man-pages-ja,No,BSD and GFDL and GPL+ and GPLv2+ and MIT and Copyright only and IEEE and ISC and GPLv2 and LGPLv2 and LGPLv2+ with exceptions and AML and Public Domain and LGPLv2+ and Artistic clarified and (GPLv2+ or Artistic) and GPLv3+ and Sendmail and BSD with advertising and GPLv2 with exceptions and xinetd
+1217,man-pages-ko,No,Copyright only
+1218,man-pages-overrides,Yes,GPL+ and GPLv2+ and BSD and MIT and Copyright only and IEEE
+1219,man-pages-pl,No,GPL+ and BSD and MIT and GFDL
+1220,man-pages-ru,No,GPL+ and BSD and MIT and GFDL
+1221,man-pages-zh-CN,No,GFDL
+1222,mariadb,Yes,GPLv2 with exceptions and LGPLv2 and BSD
+1223,mariadb-libs,No,GPLv2 with exceptions and LGPLv2 and BSD
+1224,mc,Yes,GPLv3+
+1225,mcelog,Yes,GPLv2
+1226,mcstrans,No,GPL+
+1227,mdadm,Yes,GPLv2+
+1228,media-player-info,No,BSD
+1229,memkind,No,BSD
+1230,memstomp,Yes,LGPLv3+ and GPLv2+
+1231,memtest86+,Yes,GPLv2
+1232,mesa-dri-drivers,No,MIT
+1233,mesa-filesystem,No,MIT
+1234,mesa-libEGL,No,MIT
+1235,mesa-libgbm,No,MIT
+1236,mesa-libGL,No,MIT
+1237,mesa-libglapi,No,MIT
+1238,mesa-libGLU,No,MIT
+1239,mesa-private-llvm,No,NCSA
+1240,mgetty,Yes,GPLv2+
+1241,microcode_ctl,Yes,"GPLv2+ and Redistributable, no modification permitted"
+1242,minicom,Yes,GPL+ and GPLv2+ and GPLv2 and LGPLv2+ Public Domain and Copyright only
+1243,mkbootdisk,Yes,GPLv2+
+1244,mksh,Yes,MirOS and ISC and BSD
+1245,mlocate,Yes,GPLv2
+1246,mobile-broadband-provider-info,No,Public Domain
+1247,ModemManager,Yes,GPLv2+
+1248,ModemManager-glib,No,GPLv2+
+1249,mokutil,No,BSD
+1250,motif,Yes,LGPLv2+
+1251,mozjs17,No,GPLv2+ or LGPLv2+ or MPLv1.1
+1252,mpfr,No,LGPLv3+ and GPLv3+ and GFDL
+1253,mpich-3.0,No,MIT
+1254,mpich-3.0-devel,Yes,MIT
+1255,mpich-3.2,No,MIT
+1256,mpich-3.2-devel,Yes,MIT
+1257,mpitests-mpich,Yes,CPL and BSD
+1258,mpitests-mpich32,Yes,CPL and BSD
+1259,mpitests-mvapich2,Yes,CPL and BSD
+1260,mpitests-mvapich2-psm,Yes,CPL and BSD
+1261,mpitests-mvapich222,Yes,CPL and BSD
+1262,mpitests-mvapich222-psm,Yes,CPL and BSD
+1263,mpitests-mvapich222-psm2,Yes,CPL and BSD
+1264,mpitests-mvapich23,Yes,CPL and BSD
+1265,mpitests-mvapich23-psm,Yes,CPL and BSD
+1266,mpitests-mvapich23-psm2,Yes,CPL and BSD
+1267,mpitests-openmpi,Yes,CPL and BSD
+1268,mpitests-openmpi3,Yes,CPL and BSD
+1269,mstflint,Yes,GPLv2+ or BSD
+1270,mtools,Yes,GPLv3+
+1271,mtr,Yes,GPLv2+
+1272,mutt,Yes,GPLv2+ and Public Domain
+1273,mvapich2-2.0,No,BSD and MIT
+1274,mvapich2-2.0-devel,Yes,BSD and MIT
+1275,mvapich2-2.0-doc,Yes,BSD and MIT
+1276,mvapich2-2.0-psm,No,BSD and MIT
+1277,mvapich2-2.0-psm-devel,Yes,BSD and MIT
+1278,mvapich2-2.2,No,BSD and MIT
+1279,mvapich2-2.2-devel,Yes,BSD and MIT
+1280,mvapich2-2.2-doc,Yes,BSD and MIT
+1281,mvapich2-2.2-psm,No,BSD and MIT
+1282,mvapich2-2.2-psm-devel,Yes,BSD and MIT
+1283,mvapich2-2.2-psm2,No,BSD and MIT
+1284,mvapich2-2.2-psm2-devel,Yes,BSD and MIT
+1285,mvapich23,No,BSD and MIT
+1286,mvapich23-devel,Yes,BSD and MIT
+1287,mvapich23-doc,Yes,BSD and MIT
+1288,mvapich23-psm,No,BSD and MIT
+1289,mvapich23-psm-devel,Yes,BSD and MIT
+1290,mvapich23-psm2,No,BSD and MIT
+1291,mvapich23-psm2-devel,Yes,BSD and MIT
+1292,mysql-connector-java,Yes,GPLv2 with exceptions
+1293,mysql-connector-odbc,Yes,GPLv2 with exceptions
+1294,MySQL-python,Yes,GPLv2+
+1295,nafees-web-naskh-fonts,Yes,Bitstream Vera
+1296,nano,Yes,GPLv3+
+1297,navilu-fonts,Yes,OFL
+1298,ncompress,Yes,Public Domain
+1299,ncurses,Yes,MIT
+1300,ncurses-base,No,MIT
+1301,ncurses-libs,No,MIT
+1302,ncurses-term,Yes,MIT
+1303,ndctl,No,GPLv2
+1304,ndctl-libs,No,LGPLv2
+1305,nepomuk-core,No,LGPLv2 or LGPLv3
+1306,nepomuk-core-libs,No,LGPLv2 or LGPLv3
+1307,net-snmp,Yes,BSD
+1308,net-snmp-agent-libs,No,BSD
+1309,net-snmp-libs,No,BSD
+1310,net-snmp-utils,Yes,BSD
+1311,net-tools,Yes,GPLv2+
+1312,netpbm,No,BSD and GPLv2 and IJG and MIT and Public Domain
+1313,netpbm-devel,No,BSD and GPLv2 and IJG and MIT and Public Domain
+1314,netpbm-progs,No,BSD and GPLv2 and IJG and MIT and Public Domain
+1315,nettle,No,LGPLv2+
+1316,NetworkManager,Yes,GPLv2+
+1317,NetworkManager-adsl,Yes,GPLv2+
+1318,NetworkManager-bluetooth,Yes,GPLv2+
+1319,NetworkManager-glib,No,GPLv2+
+1320,NetworkManager-libnm,No,GPLv2+
+1321,NetworkManager-ppp,Yes,GPLv2+
+1322,NetworkManager-team,Yes,GPLv2+
+1323,NetworkManager-tui,Yes,GPLv2+
+1324,NetworkManager-wifi,Yes,GPLv2+
+1325,NetworkManager-wwan,Yes,GPLv2+
+1326,newt,No,LGPLv2
+1327,newt-python,No,LGPLv2
+1328,nfs-utils,Yes,MIT and GPLv2 and GPLv2+ and BSD
+1329,nfs4-acl-tools,Yes,BSD
+1330,nftables,No,GPLv2
+1331,nhn-nanum-brush-fonts,Yes,OFL
+1332,nhn-nanum-fonts-common,No,OFL
+1333,nhn-nanum-gothic-fonts,Yes,OFL
+1334,nhn-nanum-myeongjo-fonts,Yes,OFL
+1335,nhn-nanum-pen-fonts,Yes,OFL
+1336,nm-connection-editor,No,GPLv2+
+1337,nmap-ncat,No,GPLv2 and LGPLv2+ and GPLv2+ and BSD
+1338,nscd,Yes,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+
+1339,nspr,No,MPLv2.0
+1340,nss,No,MPLv2.0
+1341,nss-pam-ldapd,Yes,LGPLv2+
+1342,nss-pem,No,MPLv1.1
+1343,nss-softokn,No,MPLv2.0
+1344,nss-softokn-freebl,No,MPLv2.0
+1345,nss-sysinit,No,MPLv2.0
+1346,nss-tools,No,MPLv2.0
+1347,nss-util,No,MPLv2.0
+1348,nss_compat_ossl,No,MIT
+1349,ntp,Yes,(MIT and BSD and BSD with advertising) and GPLv2
+1350,ntpdate,Yes,(MIT and BSD and BSD with advertising) and GPLv2
+1351,ntsysv,Yes,GPLv2
+1352,numactl,No,GPLv2
+1353,numactl-devel,No,LGPLv2 and GPLv2
+1354,numactl-libs,No,LGPLv2 and GPLv2
+1355,numad,No,LGPLv2
+1356,numpy,Yes,BSD and Python
+1357,numpy-f2py,No,BSD and Python
+1358,nvme-cli,Yes,GPLv2+
+1359,nvmetcli,Yes,Apache License 2.0
+1360,objectweb-asm,No,BSD
+1361,oddjob,Yes,BSD
+1362,oddjob-mkhomedir,Yes,BSD
+1363,opa-address-resolution,Yes,BSD or GPLv2
+1364,opa-basic-tools,No,BSD or GPLv2
+1365,opa-fastfabric,Yes,BSD or GPLv2
+1366,opa-fm,No,GPLv2 or BSD
+1367,opa-libopamgt,Yes,BSD or GPLv2
+1368,open-sans-fonts,Yes,ASL 2.0
+1369,open-vm-tools,Yes,GPLv2
+1370,open-vm-tools-desktop,Yes,GPLv2
+1371,OpenEXR-libs,No,BSD
+1372,openhpi,Yes,BSD
+1373,openhpi-libs,No,BSD
+1374,OpenIPMI,Yes,LGPLv2+ and GPLv2+ or BSD
+1375,OpenIPMI-libs,No,LGPLv2+ and GPLv2+ or BSD
+1376,OpenIPMI-modalias,No,LGPLv2+ and GPLv2+ or BSD
+1377,OpenIPMI-perl,No,LGPLv2+ and GPLv2+ or BSD
+1378,openjpeg-libs,No,BSD
+1379,openjpeg2,No,BSD and MIT
+1380,openldap,No,OpenLDAP
+1381,openldap-clients,Yes,OpenLDAP
+1382,openlmi,Yes,LGPLv2+
+1383,openlmi-account,Yes,LGPLv2+
+1384,openlmi-account-doc,Yes,LGPLv2+
+1385,openlmi-fan,Yes,LGPLv2+
+1386,openlmi-fan-doc,Yes,LGPLv2+
+1387,openlmi-hardware,Yes,LGPLv2+
+1388,openlmi-hardware-doc,Yes,LGPLv2+
+1389,openlmi-indicationmanager-libs,No,LGPLv2+
+1390,openlmi-logicalfile,Yes,LGPLv2+
+1391,openlmi-logicalfile-doc,Yes,LGPLv2+
+1392,openlmi-networking,Yes,LGPLv2+
+1393,openlmi-networking-doc,Yes,LGPLv2+
+1394,openlmi-powermanagement,Yes,LGPLv2+
+1395,openlmi-powermanagement-doc,Yes,LGPLv2+
+1396,openlmi-providers,Yes,LGPLv2+
+1397,openlmi-python-base,No,LGPLv2+
+1398,openlmi-python-providers,No,LGPLv2+
+1399,openlmi-realmd,Yes,LGPLv2+
+1400,openlmi-realmd-doc,Yes,LGPLv2+
+1401,openlmi-service,Yes,LGPLv2+
+1402,openlmi-service-doc,Yes,LGPLv2+
+1403,openlmi-software,Yes,LGPLv2+
+1404,openlmi-software-doc,Yes,LGPLv2+
+1405,openlmi-storage,Yes,LGPLv2+
+1406,openlmi-storage-doc,Yes,LGPLv2+
+1407,openlmi-tools,Yes,GPLv2+
+1408,openlmi-tools-doc,Yes,GPLv2+
+1409,openmpi,Yes,BSD and MIT and Romio
+1410,openmpi-devel,Yes,BSD and MIT and Romio
+1411,openmpi3,Yes,BSD and MIT and Romio
+1412,openmpi3-devel,Yes,BSD and MIT and Romio
+1413,openscap,No,LGPLv2+
+1414,openscap-containers,No,LGPLv2+
+1415,openscap-python,No,LGPLv2+
+1416,openscap-scanner,No,LGPLv2+
+1417,openscap-utils,No,LGPLv2+
+1418,openslp,No,BSD
+1419,openslp-server,Yes,BSD
+1420,opensm,Yes,GPLv2 or BSD
+1421,opensm-libs,No,GPLv2 or BSD
+1422,openssh,No,BSD
+1423,openssh-clients,Yes,BSD
+1424,openssh-keycat,Yes,BSD
+1425,openssh-server,Yes,BSD
+1426,openssl,No,OpenSSL
+1427,openssl-libs,No,OpenSSL
+1428,openssl098e,Yes,OpenSSL
+1429,openwsman-client,Yes,BSD
+1430,openwsman-python,No,BSD
+1431,openwsman-server,Yes,BSD
+1432,oprofile,Yes,GPLv2+ and LGPLv2+
+1433,oprofile-jit,Yes,GPLv2+ and LGPLv2+
+1434,opus,No,BSD
+1435,orc,No,BSD
+1436,os-prober,No,GPLv2+ and GPL+
+1437,oscap-anaconda-addon,Yes,GPLv2+
+1438,overpass-fonts,Yes,OFL
+1439,oxygen-icon-theme,No,LGPLv3+
+1440,p11-kit,No,BSD
+1441,p11-kit-trust,No,BSD
+1442,PackageKit-glib,No,GPLv2+ and LGPLv2+
+1443,paktype-naqsh-fonts,Yes,GPLv2 with exceptions
+1444,paktype-naskh-basic-fonts,Yes,GPLv2 with exceptions
+1445,paktype-tehreer-fonts,Yes,GPLv2 with exceptions
+1446,pam,No,BSD and GPLv2+
+1447,pam_krb5,No,BSD or LGPLv2+
+1448,pango,No,LGPLv2+
+1449,pangomm,No,LGPLv2+
+1450,papi,Yes,BSD
+1451,paratype-pt-sans-fonts,Yes,OFL
+1452,parfait,Yes,ASL 2.0
+1453,parted,Yes,GPLv3+
+1454,passwd,Yes,BSD or GPL+
+1455,patch,No,GPLv3+
+1456,pax,Yes,BSD
+1457,pciutils,Yes,GPLv2+
+1458,pciutils-libs,No,GPLv2+
+1459,pcp,Yes,GPLv2+ and LGPLv2+ and CC-BY
+1460,pcp-conf,No,LGPLv2+
+1461,pcp-doc,No,GPLv2+ and CC-BY
+1462,pcp-export-pcp2graphite,No,GPLv2+
+1463,pcp-libs,No,LGPLv2+
+1464,pcp-manager,No,GPLv2+
+1465,pcp-pmda-activemq,No,GPLv2+
+1466,pcp-pmda-apache,No,GPLv2+
+1467,pcp-pmda-bash,No,GPLv2+
+1468,pcp-pmda-bonding,No,GPLv2+
+1469,pcp-pmda-cisco,No,GPLv2+
+1470,pcp-pmda-dbping,No,GPLv2+
+1471,pcp-pmda-dm,No,GPLv2+
+1472,pcp-pmda-ds389,No,GPLv2+
+1473,pcp-pmda-ds389log,No,GPLv2+
+1474,pcp-pmda-elasticsearch,No,GPLv2+
+1475,pcp-pmda-gfs2,No,GPLv2+
+1476,pcp-pmda-gluster,No,GPLv2+
+1477,pcp-pmda-gpfs,No,GPLv2+
+1478,pcp-pmda-gpsd,No,GPLv2+
+1479,pcp-pmda-json,No,GPLv2+
+1480,pcp-pmda-lmsensors,No,GPLv2+
+1481,pcp-pmda-logger,No,GPLv2+
+1482,pcp-pmda-lustre,No,GPLv2+
+1483,pcp-pmda-lustrecomm,No,GPLv2+
+1484,pcp-pmda-mailq,No,GPLv2+
+1485,pcp-pmda-memcache,No,GPLv2+
+1486,pcp-pmda-mounts,No,GPLv2+
+1487,pcp-pmda-mysql,No,GPLv2+
+1488,pcp-pmda-named,No,GPLv2+
+1489,pcp-pmda-netfilter,No,GPLv2+
+1490,pcp-pmda-news,No,GPLv2+
+1491,pcp-pmda-nfsclient,No,GPLv2+
+1492,pcp-pmda-nginx,No,GPLv2+
+1493,pcp-pmda-nvidia-gpu,No,GPLv2+
+1494,pcp-pmda-pdns,No,GPLv2+
+1495,pcp-pmda-postfix,No,GPLv2+
+1496,pcp-pmda-postgresql,No,GPLv2+
+1497,pcp-pmda-roomtemp,No,GPLv2+
+1498,pcp-pmda-rpm,No,GPLv2+
+1499,pcp-pmda-sendmail,No,GPLv2+
+1500,pcp-pmda-shping,No,GPLv2+
+1501,pcp-pmda-summary,No,GPLv2+
+1502,pcp-pmda-trace,No,GPLv2+
+1503,pcp-pmda-unbound,No,GPLv2+
+1504,pcp-pmda-weblog,No,GPLv2+
+1505,pcp-pmda-zswap,No,GPLv2+
+1506,pcp-selinux,No,GPLv2+ and CC-BY
+1507,pcp-system-tools,No,GPLv2+
+1508,pcp-webapi,No,GPLv2+
+1509,pcp-zeroconf,Yes,GPLv2+
+1510,pcre,No,BSD
+1511,pcsc-lite-libs,No,BSD
+1512,perf,Yes,GPLv2
+1513,perftest,Yes,GPLv2 or BSD
+1514,perl,Yes,(GPL+ or Artistic) and (GPLv2+ or Artistic) and Copyright Only and MIT and Public Domain and UCD
+1515,perl-Algorithm-Diff,No,GPL+ or Artistic
+1516,perl-App-cpanminus,Yes,GPL+ or Artistic
+1517,perl-Archive-Extract,No,GPL+ or Artistic
+1518,perl-Archive-Tar,No,GPL+ or Artistic
+1519,perl-Archive-Zip,No,GPL+ or Artistic
+1520,perl-Authen-SASL,No,GPL+ or Artistic
+1521,perl-autodie,No,GPL+ or Artistic
+1522,perl-B-Lint,No,GPL+ or Artistic
+1523,perl-Bit-Vector,No,(GPLv2+ or Artistic) and LGPLv2+
+1524,perl-Business-ISBN,No,GPL+ or Artistic
+1525,perl-Business-ISBN-Data,No,GPL+ or Artistic
+1526,perl-Carp,No,GPL+ or Artistic
+1527,perl-Carp-Clan,No,GPL+ or Artistic
+1528,perl-CGI,No,(GPL+ or Artistic) and Artistic 2.0
+1529,perl-Class-ISA,No,GPL+ or Artistic
+1530,perl-Class-Load,No,GPL+ or Artistic
+1531,perl-Class-Singleton,No,GPL+ or Artistic
+1532,perl-Compress-Raw-Bzip2,No,GPL+ or Artistic
+1533,perl-Compress-Raw-Zlib,No,GPL+ or Artistic
+1534,perl-constant,No,GPL+ or Artistic
+1535,perl-Convert-ASN1,No,GPL+ or Artistic
+1536,perl-core,Yes,GPL+ or Artistic
+1537,perl-CPAN,No,GPL+ or Artistic
+1538,perl-CPAN-Meta,No,GPL+ or Artistic
+1539,perl-CPAN-Meta-Requirements,No,GPL+ or Artistic
+1540,perl-CPAN-Meta-YAML,No,GPL+ or Artistic
+1541,perl-CPANPLUS,No,GPL+ or Artistic
+1542,perl-CPANPLUS-Dist-Build,No,GPL+ or Artistic
+1543,perl-Crypt-SSLeay,Yes,GPL+ or Artistic
+1544,perl-Data-Dumper,No,GPL+ or Artistic
+1545,perl-Data-OptList,No,GPL+ or Artistic
+1546,perl-Date-Calc,Yes,GPL+ or Artistic
+1547,perl-Date-Manip,Yes,GPL+ or Artistic
+1548,perl-DateTime,Yes,(Artistic 2.0) and (GPL+ or Artistic)
+1549,perl-DateTime-Format-DateParse,Yes,GPL+ or Artistic
+1550,perl-DateTime-Locale,Yes,(GPL+ or Artistic) and MIT
+1551,perl-DateTime-TimeZone,Yes,(GPL+ or Artistic) and Public Domain
+1552,perl-DB_File,No,GPL+ or Artistic
+1553,perl-DBD-MySQL,Yes,GPL+ or Artistic
+1554,perl-DBD-Pg,Yes,GPLv2+ or Artistic
+1555,perl-DBD-SQLite,Yes,GPL+ or Artistic
+1556,perl-DBI,No,GPL+ or Artistic
+1557,perl-DBIx-Simple,No,Public Domain
+1558,perl-devel,No,GPL+ or Artistic
+1559,perl-Digest,No,GPL+ or Artistic
+1560,perl-Digest-HMAC,No,GPL+ or Artistic
+1561,perl-Digest-MD5,No,GPL+ or Artistic
+1562,perl-Digest-SHA,No,GPL+ or Artistic
+1563,perl-Digest-SHA1,No,GPL+ or Artistic
+1564,perl-Encode,No,GPL+ or Artistic
+1565,perl-Encode-Locale,No,GPL+ or Artistic
+1566,perl-Env,No,GPL+ or Artistic
+1567,perl-Exporter,No,GPL+ or Artistic
+1568,perl-ExtUtils-CBuilder,No,GPL+ or Artistic
+1569,perl-ExtUtils-Embed,No,GPL+ or Artistic
+1570,perl-ExtUtils-Install,No,GPL+ or Artistic
+1571,perl-ExtUtils-MakeMaker,No,GPL+ or Artistic
+1572,perl-ExtUtils-Manifest,No,GPL+ or Artistic
+1573,perl-ExtUtils-ParseXS,No,GPL+ or Artistic
+1574,perl-FCGI,No,OML
+1575,perl-File-CheckTree,No,GPL+ or Artistic
+1576,perl-File-Fetch,No,GPL+ or Artistic
+1577,perl-File-Listing,No,GPL+ or Artistic
+1578,perl-File-Path,No,GPL+ or Artistic
+1579,perl-File-Temp,No,GPL+ or Artistic
+1580,perl-Filter,No,GPL+ or Artistic
+1581,perl-Font-AFM,No,GPL+ or Artistic) and Copyright only
+1582,perl-Getopt-Long,No,GPLv2+ or Artistic
+1583,perl-gettext,Yes,GPL+ or Artistic
+1584,perl-GSSAPI,No,GPL+ or Artistic
+1585,perl-homedir,Yes,GPL+ or Artistic
+1586,perl-HTML-Format,No,GPL+ or Artistic
+1587,perl-HTML-Parser,No,GPL+ or Artistic
+1588,perl-HTML-Tagset,No,GPL+ or Artistic
+1589,perl-HTML-Tree,No,GPL+ or Artistic
+1590,perl-HTTP-Cookies,No,GPL+ or Artistic
+1591,perl-HTTP-Daemon,No,GPL+ or Artistic
+1592,perl-HTTP-Date,No,GPL+ or Artistic
+1593,perl-HTTP-Message,No,GPL+ or Artistic
+1594,perl-HTTP-Negotiate,No,GPL+ or Artistic
+1595,perl-HTTP-Tiny,No,GPL+ or Artistic
+1596,perl-IO-Compress,No,GPL+ or Artistic
+1597,perl-IO-HTML,No,GPL+ or Artistic
+1598,perl-IO-Socket-IP,No,GPL+ or Artistic
+1599,perl-IO-Socket-SSL,No,GPL+ or Artistic
+1600,perl-IO-stringy,No,GPL+ or Artistic
+1601,perl-IO-Zlib,No,GPL+ or Artistic
+1602,perl-IPC-Cmd,No,GPL+ or Artistic
+1603,perl-JSON,No,GPL+ or Artistic
+1604,perl-JSON-PP,No,GPL+ or Artistic
+1605,perl-LDAP,Yes,GPL+ or Artistic
+1606,perl-libs,No,GPL+ or Artistic
+1607,perl-libwww-perl,No,GPL+ or Artistic
+1608,perl-libxml-perl,No,(GPL+ or Artistic) and Public Domain
+1609,perl-List-MoreUtils,No,GPL+ or Artistic
+1610,perl-local-lib,No,GPL+ or Artistic
+1611,perl-Locale-Codes,No,GPL+ or Artistic
+1612,perl-Locale-Maketext,No,GPL+ or Artistic
+1613,perl-Locale-Maketext-Simple,No,MIT
+1614,perl-Log-Message,No,GPL+ or Artistic
+1615,perl-Log-Message-Simple,No,GPL+ or Artistic
+1616,perl-LWP-MediaTypes,No,(GPL+ or Artistic) and Public Domain
+1617,perl-macros,No,GPL+ or Artistic
+1618,perl-Module-Build,No,GPL+ or Artistic
+1619,perl-Module-CoreList,No,GPL+ or Artistic
+1620,perl-Module-Implementation,No,Artistic 2.0
+1621,perl-Module-Load,No,GPL+ or Artistic
+1622,perl-Module-Load-Conditional,No,GPL+ or Artistic
+1623,perl-Module-Loaded,No,GPL+ or Artistic
+1624,perl-Module-Metadata,No,GPL+ or Artistic
+1625,perl-Module-Pluggable,No,GPL+ or Artistic
+1626,perl-Module-Runtime,No,GPL+ or Artistic
+1627,perl-Module-Signature,No,CC0 and (GPL+ or Artistic)
+1628,perl-Mozilla-CA,No,MPLv1.1 or LGPLv2+ or GPLv2+
+1629,perl-Mozilla-LDAP,Yes,GPLv2+ and LGPLv2+ and MPLv1.1
+1630,perl-Net-Daemon,No,GPL+ or Artistic
+1631,perl-Net-HTTP,No,GPL+ or Artistic
+1632,perl-Net-LibIDN,No,GPL+ or Artistic
+1633,perl-Net-SSLeay,No,OpenSSL
+1634,perl-Newt,No,GPL+ or Artistic
+1635,perl-Object-Accessor,No,GPL+ or Artistic
+1636,perl-Package-Constants,No,GPL+ or Artistic
+1637,perl-Package-DeprecationManager,No,Artistic 2.0
+1638,perl-Package-Stash,No,GPL+ or Artistic
+1639,perl-Package-Stash-XS,No,GPL+ or Artistic
+1640,perl-PAR-Dist,No,GPL+ or Artistic
+1641,perl-Params-Check,No,GPL+ or Artistic
+1642,perl-Params-Util,No,GPL+ or Artistic
+1643,perl-Params-Validate,No,Artistic 2.0
+1644,perl-parent,No,GPL+ or Artistic
+1645,perl-Parse-CPAN-Meta,No,GPL+ or Artistic
+1646,perl-PathTools,No,(GPL+ or Artistic) and BSD
+1647,perl-PCP-PMDA,No,GPLv2+
+1648,perl-Perl-OSType,No,GPL+ or Artistic
+1649,perl-Perl4-CoreLibs,Yes,GPL+ or Artistic
+1650,perl-PlRPC,No,GPL+ or Artistic
+1651,perl-Pod-Checker,No,GPL+ or Artistic
+1652,perl-Pod-Escapes,No,GPL+ or Artistic
+1653,perl-Pod-LaTeX,No,GPL+ or Artistic
+1654,perl-Pod-Parser,No,GPL+ or Artistic
+1655,perl-Pod-Perldoc,No,GPL+ or Artistic
+1656,perl-Pod-Plainer,No,GPL+ or Artistic
+1657,perl-Pod-Simple,No,GPL+ or Artistic
+1658,perl-Pod-Usage,No,GPL+ or Artistic
+1659,perl-podlators,No,GPL+ or Artistic
+1660,perl-Scalar-List-Utils,No,GPL+ or Artistic
+1661,perl-Socket,No,GPL+ or Artistic
+1662,perl-srpm-macros,No,GPLv3+
+1663,perl-Storable,No,GPL+ or Artistic
+1664,perl-Sub-Install,No,GPL+ or Artistic
+1665,perl-Sys-CPU,No,(GPL+ or Artistic) and (LGPLv3 or Artistic 2.0)
+1666,perl-Sys-MemInfo,No,(GPLv1+ or Artistic) and LGPLv2+
+1667,perl-Sys-Syslog,No,GPL+ or Artistic
+1668,perl-Term-UI,No,GPL+ or Artistic
+1669,perl-Test-Harness,No,GPL+ or Artistic
+1670,perl-Test-Simple,No,GPL+ or Artistic
+1671,perl-Text-Diff,No,(GPL+ or Artistic) and (GPLv2+ or Artistic) and MIT
+1672,perl-Text-ParseWords,No,GPL+ or Artistic
+1673,perl-Text-Soundex,No,Copyright only
+1674,perl-Text-Unidecode,No,GPL+ or Artistic
+1675,perl-Thread-Queue,No,GPL+ or Artistic
+1676,perl-threads,No,GPL+ or Artistic
+1677,perl-threads-shared,No,GPL+ or Artistic
+1678,perl-Time-HiRes,No,GPL+ or Artistic
+1679,perl-Time-Local,No,GPL+ or Artistic
+1680,perl-Time-Piece,No,GPL+ or Artistic
+1681,perl-TimeDate,No,GPL+ or Artistic
+1682,perl-Try-Tiny,No,MIT
+1683,perl-URI,No,GPL+ or Artistic
+1684,perl-version,No,GPL+ or Artistic
+1685,perl-Version-Requirements,No,GPL+ or Artistic
+1686,perl-WWW-RobotRules,No,GPL+ or Artistic
+1687,perl-XML-Dumper,Yes,GPL+ or Artistic
+1688,perl-XML-Filter-BufferText,No,GPL+ or Artistic
+1689,perl-XML-Grove,Yes,GPL+ or Artistic
+1690,perl-XML-LibXML,No,(GPL+ or Artistic) and MIT
+1691,perl-XML-NamespaceSupport,No,GPL+ or Artistic
+1692,perl-XML-Parser,No,GPL+ or Artistic
+1693,perl-XML-SAX,No,GPL+ or Artistic
+1694,perl-XML-SAX-Base,No,GPL+ or Artistic
+1695,perl-XML-SAX-Writer,No,GPL+ or Artistic
+1696,perl-XML-Twig,Yes,GPL+ or Artistic
+1697,perl-YAML,No,GPL+ or Artistic
+1698,perl-YAML-Tiny,No,GPL+ or Artistic
+1699,pexpect,Yes,MIT
+1700,phonon,No,LGPLv2+
+1701,phonon-backend-gstreamer,No,LGPLv2+
+1702,pinentry,No,GPLv2+
+1703,pinfo,Yes,GPLv2
+1704,pixman,No,MIT
+1705,pkgconfig,No,GPLv2+
+1706,plymouth,Yes,GPLv2+
+1707,plymouth-core-libs,No,GPLv2+
+1708,plymouth-graphics-libs,No,GPLv2+
+1709,plymouth-plugin-label,No,GPLv2+
+1710,plymouth-plugin-two-step,No,GPLv2+
+1711,plymouth-scripts,No,GPLv2+
+1712,pm-utils,Yes,GPLv2
+1713,pmdk-convert,No,BSD
+1714,pmempool,No,BSD
+1715,po4a,No,GPL+
+1716,policycoreutils,Yes,GPLv2
+1717,policycoreutils-newrole,No,GPLv2
+1718,policycoreutils-python,No,GPLv2
+1719,polkit,No,LGPLv2+
+1720,polkit-pkla-compat,No,LGPLv2+
+1721,polkit-qt,No,GPLv2+
+1722,poppler,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+1723,poppler-data,No,BSD and GPLv2 and GPLv3+
+1724,poppler-qt,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+1725,poppler-utils,No,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+1726,popt,No,MIT
+1727,postfix,Yes,IBM and GPLv2+
+1728,postfix-perl-scripts,No,IBM and GPLv2+
+1729,postgresql,Yes,PostgreSQL
+1730,postgresql-jdbc,Yes,BSD and ASL 2.0
+1731,postgresql-libs,No,PostgreSQL
+1732,postgresql-odbc,Yes,LGPLv2+
+1733,pothana2000-fonts,Yes,GPLv2+ with exceptions
+1734,powertop,Yes,GPLv2
+1735,ppp,Yes,BSD and LGPLv2+ and GPLv2+ and Public Domain
+1736,pptp,Yes,GPLv2+
+1737,prelink,Yes,GPLv2+
+1738,procmail,Yes,GPLv2+ or Artistic
+1739,procps-ng,Yes,GPL+ and GPLv2 and GPLv2+ and GPLv3+ and LGPLv2+
+1740,protobuf,No,BSD
+1741,ps_mem,Yes,LGPLv2
+1742,psacct,Yes,GPLv3+
+1743,psmisc,No,GPLv2+
+1744,pth,No,LGPLv2+
+1745,pulseaudio-libs,No,LGPLv2+
+1746,pulseaudio-libs-glib2,No,LGPLv2+
+1747,pycairo,No,MPLv1.1 or LGPLv2
+1748,pygobject2,No,LGPLv2+
+1749,pygpgme,No,LGPLv2+
+1750,PyGreSQL,Yes,PostgreSQL or Python
+1751,pygtk2,No,LGPLv2+
+1752,pygtk2-libglade,No,LGPLv2+
+1753,pykickstart,No,GPLv2
+1754,pyldb,No,LGPLv3+
+1755,pyliblzma,No,LGPLv3+
+1756,pyOpenSSL,No,ASL 2.0
+1757,PyPAM,Yes,LGPLv2
+1758,pyparsing,No,MIT
+1759,pyparted,No,GPLv2+
+1760,pytalloc,No,LGPLv3+
+1761,python,No,Python
+1762,python-augeas,No,LGPLv2+
+1763,python-backports,No,Public Domain
+1764,python-backports-ssl_match_hostname,No,Python
+1765,python-bcc,No,ASL 2.0
+1766,python-beaker,No,BSD and MIT
+1767,python-blivet,No,LGPLv2+
+1768,python-cffi,No,MIT
+1769,python-chardet,No,LGPLv2
+1770,python-configobj,No,BSD
+1771,python-configshell,No,ASL 2.0
+1772,python-coverage,No,BSD and (MIT or GPLv2)
+1773,python-cpio,No,LGPLv2+
+1774,python-custodia,No,GPLv3+
+1775,python-dateutil,No,Python
+1776,python-decorator,No,BSD
+1777,python-deltarpm,No,BSD
+1778,python-devel,No,Python
+1779,python-di,No,GPLv2+
+1780,python-dmidecode,No,GPLv2
+1781,python-dns,No,MIT
+1782,python-enum34,No,BSD
+1783,python-ethtool,No,GPLv2
+1784,python-firewall,No,GPLv2+
+1785,python-gobject,No,LGPLv2+ and MIT
+1786,python-gobject-base,No,LGPLv2+ and MIT
+1787,python-gssapi,No,ISC
+1788,python-gudev,No,LGPLv3+
+1789,python-hwdata,No,GPLv2
+1790,python-idna,No,BSD and Python and Unicode
+1791,python-iniparse,No,MIT
+1792,python-inotify,No,MIT
+1793,python-ipaddr,No,ASL 2.0
+1794,python-ipaddress,No,Python
+1795,python-IPy,No,BSD
+1796,python-javapackages,No,BSD
+1797,python-jsonpointer,No,BSD
+1798,python-jwcrypto,No,LGPLv3+
+1799,python-kdcproxy,No,MIT
+1800,python-kerberos,No,ASL 2.0
+1801,python-kitchen,No,LGPLv2+
+1802,python-kmod,No,LGPLv2+
+1803,python-krbV,No,LGPLv2+
+1804,python-ldap,No,Python
+1805,python-libipa_hbac,No,LGPLv3+
+1806,python-libs,No,Python
+1807,python-linux-procfs,No,GPLv2
+1808,python-lxml,No,BSD
+1809,python-magic,No,BSD
+1810,python-mako,No,(MIT and Python) and (BSD or GPLv2)
+1811,python-markupsafe,No,BSD
+1812,python-meh,No,GPLv2+
+1813,python-meh-gui,No,GPLv2+
+1814,python-netaddr,No,BSD
+1815,python-netifaces,No,MIT
+1816,python-nose,No,LGPLv2+ and Public Domain
+1817,python-nss,No,MPLv2.0 or GPLv2+ or LGPLv2+
+1818,python-ntplib,No,LGPLv2+
+1819,python-paramiko,No,LGPLv2+
+1820,python-paste,No,MIT and ZPLv2.0 and Python and Public Domain and (AFL or MIT) and (MIT or ASL 2.0)
+1821,python-pcp,No,GPLv2+
+1822,python-perf,No,GPLv2
+1823,python-ply,No,BSD
+1824,python-psycopg2,Yes,LGPLv3+ with exceptions
+1825,python-pwquality,No,BSD or GPLv2+
+1826,python-pyblock,No,GPLv2 or GPLv3
+1827,python-pycparser,No,BSD
+1828,python-pycurl,No,LGPLv2+ or MIT
+1829,python-pyudev,No,LGPLv2+
+1830,python-qrcode-core,No,BSD
+1831,python-rados,No,LGPL-2.0
+1832,python-rbd,No,LGPL-2.0
+1833,python-requests,No,ASL 2.0
+1834,python-rhsm,No,GPLv2
+1835,python-rhsm-certificates,No,GPLv2
+1836,python-rpm-macros,No,MIT
+1837,python-rtslib,No,ASL 2.0
+1838,python-schedutils,No,GPLv2
+1839,python-setuptools,No,Python or ZPLv2.0
+1840,python-six,No,MIT
+1841,python-slip,No,GPLv2+
+1842,python-slip-dbus,No,GPLv2+
+1843,python-srpm-macros,No,MIT
+1844,python-sss,No,LGPLv3+
+1845,python-sss-murmur,No,LGPLv3+
+1846,python-sssdconfig,No,GPLv3+
+1847,python-suds,No,LGPLv3+
+1848,python-syspurpose,No,GPLv2
+1849,python-tdb,No,LGPLv3+
+1850,python-tempita,No,MIT
+1851,python-urlgrabber,No,LGPLv2+
+1852,python-urllib3,No,MIT
+1853,python-urwid,No,LGPLv2+
+1854,python-volume_key,Yes,GPLv2 and (MPLv1.1 or GPLv2 or LGPLv2)
+1855,python-yubico,No,BSD
+1856,python2-blivet3,No,LGPLv2+
+1857,python2-blockdev,No,LGPLv2+
+1858,python2-bytesize,No,LGPLv2+
+1859,python2-cryptography,No,ASL 2.0 or BSD
+1860,python2-futures,No,Python
+1861,python2-hawkey,No,LGPLv2+
+1862,python2-ipaclient,No,GPLv3+
+1863,python2-ipalib,No,GPLv3+
+1864,python2-pyasn1,No,BSD
+1865,python2-pyasn1-modules,No,BSD
+1866,python2-rpm-macros,No,MIT
+1867,python2-subprocess32,No,Python
+1868,python3,No,Python
+1869,python3-libs,No,Python
+1870,python3-pip,No,MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
+1871,python3-rpm-generators,No,GPLv2+
+1872,python3-rpm-macros,No,MIT
+1873,python3-setuptools,No,MIT and (BSD or ASL 2.0)
+1874,python3-wheel,No,MIT
+1875,pytz,No,MIT
+1876,pyusb,No,BSD
+1877,pywbem,No,LGPLv2
+1878,pyxattr,No,LGPLv2+
+1879,PyYAML,No,MIT
+1880,qca2,No,LGPLv2+
+1881,qemu-guest-agent,Yes,GPLv2
+1882,qpdf-libs,No,Artistic 2.0 and MIT
+1883,qperf,Yes,GPLv2 or BSD
+1884,qrencode-libs,No,LGPLv2+
+1885,qt,No,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+1886,qt-settings,No,MIT
+1887,qt-x11,No,(LGPLv2 with exceptions or GPLv3 with exceptions) and ASL 2.0 and BSD and FTL and MIT
+1888,qt3,No,QPL or GPLv2 or GPLv3
+1889,quota,Yes,BSD and LGPLv2+ and GPLv2 and GPLv2+
+1890,quota-nls,No,BSD and LGPLv2+ and GPLv2 and GPLv2+
+1891,raptor2,No,GPLv2+ or LGPLv2+ or ASL 2.0
+1892,rasdaemon,Yes,GPLv2
+1893,rasqal,No,LGPLv2+ or ASL 2.0
+1894,rdate,Yes,GPLv2+
+1895,rdist,Yes,BSD
+1896,rdma-core,Yes,GPLv2 or BSD
+1897,rdma-core-devel,No,GPLv2 or BSD
+1898,readline,No,GPLv3+
+1899,realmd,Yes,LGPLv2+
+1900,rear,Yes,GPLv3
+1901,Red_Hat_Enterprise_Linux-Release_Notes-7-as-IN,No,CC-BY-SA
+1902,Red_Hat_Enterprise_Linux-Release_Notes-7-bn-IN,No,CC-BY-SA
+1903,Red_Hat_Enterprise_Linux-Release_Notes-7-de-DE,No,CC-BY-SA
+1904,Red_Hat_Enterprise_Linux-Release_Notes-7-en-US,Yes,CC-BY-SA
+1905,Red_Hat_Enterprise_Linux-Release_Notes-7-es-ES,No,CC-BY-SA
+1906,Red_Hat_Enterprise_Linux-Release_Notes-7-fr-FR,No,CC-BY-SA
+1907,Red_Hat_Enterprise_Linux-Release_Notes-7-gu-IN,No,CC-BY-SA
+1908,Red_Hat_Enterprise_Linux-Release_Notes-7-hi-IN,No,CC-BY-SA
+1909,Red_Hat_Enterprise_Linux-Release_Notes-7-it-IT,No,CC-BY-SA
+1910,Red_Hat_Enterprise_Linux-Release_Notes-7-ja-JP,No,CC-BY-SA
+1911,Red_Hat_Enterprise_Linux-Release_Notes-7-kn-IN,No,CC-BY-SA
+1912,Red_Hat_Enterprise_Linux-Release_Notes-7-ko-KR,No,CC-BY-SA
+1913,Red_Hat_Enterprise_Linux-Release_Notes-7-ml-IN,No,CC-BY-SA
+1914,Red_Hat_Enterprise_Linux-Release_Notes-7-mr-IN,No,CC-BY-SA
+1915,Red_Hat_Enterprise_Linux-Release_Notes-7-or-IN,No,CC-BY-SA
+1916,Red_Hat_Enterprise_Linux-Release_Notes-7-pa-IN,No,CC-BY-SA
+1917,Red_Hat_Enterprise_Linux-Release_Notes-7-pt-BR,No,CC-BY-SA
+1918,Red_Hat_Enterprise_Linux-Release_Notes-7-ru-RU,No,CC-BY-SA
+1919,Red_Hat_Enterprise_Linux-Release_Notes-7-ta-IN,No,CC-BY-SA
+1920,Red_Hat_Enterprise_Linux-Release_Notes-7-te-IN,No,CC-BY-SA
+1921,Red_Hat_Enterprise_Linux-Release_Notes-7-zh-CN,No,CC-BY-SA
+1922,Red_Hat_Enterprise_Linux-Release_Notes-7-zh-TW,No,CC-BY-SA
+1923,redfish-finder,No,GPLv2
+1924,redhat-indexhtml,Yes,Distributable
+1925,redhat-logos,No,"Licensed only for approved usage, see COPYING for details."
+1926,redhat-lsb,No,GPLv2
+1927,redhat-lsb-core,Yes,GPLv2
+1928,redhat-lsb-cxx,No,GPLv2
+1929,redhat-lsb-desktop,No,GPLv2
+1930,redhat-lsb-languages,No,GPLv2
+1931,redhat-lsb-printing,No,GPLv2
+1932,redhat-lsb-submod-multimedia,No,GPLv2
+1933,redhat-lsb-submod-security,No,GPLv2
+1934,redhat-menus,No,GPL+
+1935,redhat-release-computenode,Yes,GPLv2
+1936,redhat-release-eula,Yes,n/a
+1937,redhat-rpm-config,No,GPL+
+1938,redhat-support-lib-python,No,ASL 2.0
+1939,redhat-support-tool,Yes,ASL 2.0
+1940,redhat-upgrade-dracut,Yes,GPLv2+
+1941,redhat-upgrade-dracut-plymouth,No,GPLv2+
+1942,redhat-upgrade-tool,Yes,GPLv2+
+1943,redland,No,LGPLv2+ or ASL 2.0
+1944,redland-virtuoso,No,LGPLv2+ or ASL 2.0
+1945,rest,No,LGPLv2
+1946,rfkill,Yes,ISC
+1947,rhino,No,MPLv2.0
+1948,rhn-check,No,GPLv2
+1949,rhn-client-tools,No,GPLv2
+1950,rhn-setup,No,GPLv2
+1951,rhnlib,No,GPLv2
+1952,rhnsd,Yes,GPLv2
+1953,rmt,No,CDDL
+1954,rng-tools,Yes,GPLv2+
+1955,rootfiles,Yes,Public Domain
+1956,rp-pppoe,Yes,GPLv2+
+1957,rpcbind,No,BSD
+1958,rpm,Yes,GPLv2+
+1959,rpm-build,No,GPLv2+
+1960,rpm-build-libs,No,GPLv2+ and LGPLv2+ with exceptions
+1961,rpm-libs,No,GPLv2+ and LGPLv2+ with exceptions
+1962,rpm-python,No,GPLv2+
+1963,rpmdevtools,No,GPLv2+ and GPLv2
+1964,rpmemd,No,BSD
+1965,rrdtool,Yes,GPLv2+ with exceptions
+1966,rsh,Yes,BSD
+1967,rsh-server,Yes,BSD
+1968,rsync,Yes,GPLv3+
+1969,rsyslog,Yes,(GPLv3+ and ASL 2.0)
+1970,rsyslog-gnutls,Yes,(GPLv3+ and ASL 2.0)
+1971,rsyslog-gssapi,Yes,(GPLv3+ and ASL 2.0)
+1972,rsyslog-kafka,Yes,(GPLv3+ and ASL 2.0)
+1973,rsyslog-mmjsonparse,No,(GPLv3+ and ASL 2.0)
+1974,rsyslog-relp,Yes,(GPLv3+ and ASL 2.0)
+1975,ruby,Yes,(Ruby or BSD) and Public Domain
+1976,ruby-irb,Yes,(Ruby or BSD) and Public Domain
+1977,ruby-libs,No,Ruby or BSD
+1978,rubygem-abrt,Yes,MIT
+1979,rubygem-bigdecimal,No,GPL+ or Artistic
+1980,rubygem-bundler,Yes,MIT
+1981,rubygem-io-console,No,(Ruby or BSD) and Public Domain
+1982,rubygem-json,No,Ruby or GPLv2
+1983,rubygem-net-http-persistent,No,MIT
+1984,rubygem-psych,No,MIT
+1985,rubygem-rdoc,No,GPLv2 and Ruby and MIT
+1986,rubygem-thor,No,MIT
+1987,rubygems,No,Ruby or MIT
+1988,rusers,Yes,BSD
+1989,rusers-server,Yes,BSD
+1990,rwho,Yes,BSD and GPL+
+1991,saab-fonts,Yes,GPLv2+ with exceptions
+1992,samba-client,Yes,GPLv3+ and LGPLv3+
+1993,samba-client-libs,No,GPLv3+ and LGPLv3+
+1994,samba-common,No,GPLv3+ and LGPLv3+
+1995,samba-common-libs,No,GPLv3+ and LGPLv3+
+1996,samba-common-tools,No,GPLv3+ and LGPLv3+
+1997,samba-libs,No,GPLv3+ and LGPLv3+
+1998,samba-winbind,Yes,GPLv3+ and LGPLv3+
+1999,samba-winbind-clients,Yes,GPLv3+ and LGPLv3+
+2000,samba-winbind-modules,No,GPLv3+ and LGPLv3+
+2001,samyak-devanagari-fonts,Yes,GPLv3+ with exceptions
+2002,samyak-fonts-common,No,GPLv3+ with exceptions
+2003,samyak-gujarati-fonts,Yes,GPLv3+ with exceptions
+2004,samyak-malayalam-fonts,Yes,GPLv3+ with exceptions
+2005,samyak-oriya-fonts,Yes,GPLv3+ with exceptions
+2006,samyak-tamil-fonts,Yes,GPLv3+ with exceptions
+2007,sassist,No,MIT
+2008,satyr,No,GPLv2+
+2009,sblim-cim-client2,Yes,EPL
+2010,sblim-cmpi-base,No,EPL
+2011,sblim-cmpi-fsvol,Yes,EPL
+2012,sblim-cmpi-network,Yes,EPL
+2013,sblim-cmpi-nfsv3,Yes,EPL
+2014,sblim-cmpi-nfsv4,Yes,EPL
+2015,sblim-cmpi-params,Yes,EPL
+2016,sblim-cmpi-sysfs,Yes,EPL
+2017,sblim-cmpi-syslog,Yes,EPL
+2018,sblim-gather,Yes,EPL
+2019,sblim-gather-provider,Yes,EPL
+2020,sblim-indication_helper,Yes,CPL
+2021,sblim-sfcb,Yes,EPL
+2022,sblim-sfcc,No,EPL
+2023,sblim-smis-hba,Yes,EPL
+2024,sblim-wbemcli,Yes,EPL
+2025,scap-security-guide,No,BSD-3-Clause
+2026,scap-security-guide-doc,No,BSD-3-Clause
+2027,scipy,Yes,BSD and Boost and Public Domain
+2028,scl-utils,Yes,GPLv2+
+2029,screen,Yes,GPLv2+
+2030,scrub,Yes,GPLv2+
+2031,SDL,No,LGPLv2+
+2032,sdparm,Yes,BSD
+2033,sed,No,GPLv3+
+2034,selinux-policy,No,GPLv2+
+2035,selinux-policy-minimum,No,GPLv2+
+2036,selinux-policy-mls,Yes,GPLv2+
+2037,selinux-policy-targeted,Yes,GPLv2+
+2038,setools-libs,No,LGPLv2
+2039,setserial,Yes,GPL+
+2040,setup,Yes,Public Domain
+2041,setuptool,Yes,GPLv2+
+2042,sg3_utils,Yes,GPLv2+ and BSD
+2043,sg3_utils-libs,Yes,GPLv2+ and BSD
+2044,sgml-common,No,GPL+
+2045,sgpio,Yes,GPLv2+
+2046,shadow-utils,Yes,BSD and GPLv2+
+2047,shared-desktop-ontologies,No,(BSD or CC-BY) and CC-BY and W3C
+2048,shared-mime-info,No,GPLv2+
+2049,shim-ia32,Yes,BSD
+2050,shim-unsigned-ia32,Yes,BSD
+2051,shim-unsigned-x64,Yes,BSD
+2052,shim-x64,Yes,BSD
+2053,si-units,No,BSD
+2054,sil-abyssinica-fonts,Yes,OFL
+2055,sil-nuosu-fonts,Yes,OFL
+2056,sil-padauk-fonts,Yes,OFL
+2057,slang,No,GPLv2+
+2058,slf4j,No,MIT and ASL 2.0
+2059,smartmontools,Yes,GPLv2+
+2060,smc-anjalioldlipi-fonts,Yes,GPL+
+2061,smc-dyuthi-fonts,Yes,GPLv3+ with exceptions
+2062,smc-fonts-common,No,GPLv3+ with exceptions and GPLv2+ with exceptions and GPLv2+ and GPLv2 and GPL+
+2063,smc-kalyani-fonts,Yes,GPLv3+ with exceptions
+2064,smc-meera-fonts,Yes,GPLv2+ with exceptions
+2065,smc-rachana-fonts,Yes,GPLv2+
+2066,smc-raghumalayalam-fonts,Yes,GPLv2
+2067,smc-suruma-fonts,Yes,GPLv3 with exceptions
+2068,snapper,Yes,GPLv2
+2069,snapper-libs,No,GPLv2
+2070,snappy,No,BSD
+2071,soprano,No,LGPLv2+
+2072,sos,Yes,GPLv2+
+2073,sos-collector,Yes,GPLv2
+2074,sound-theme-freedesktop,No,GPLv2+ and LGPLv2+ and CC-BY-SA and CC-BY
+2075,soundtouch,No,LGPLv2+
+2076,sox,Yes,GPLv2+ and LGPLv2+ and MIT
+2077,spax,No,CDDL
+2078,speex,No,BSD
+2079,sqlite,No,Public Domain
+2080,squashfs-tools,Yes,GPLv2+
+2081,srp_daemon,Yes,GPLv2 or BSD
+2082,sssd,Yes,GPLv3+
+2083,sssd-ad,No,GPLv3+
+2084,sssd-client,Yes,LGPLv3+
+2085,sssd-common,No,GPLv3+
+2086,sssd-common-pac,No,GPLv3+
+2087,sssd-dbus,Yes,GPLv3+
+2088,sssd-ipa,No,GPLv3+
+2089,sssd-kcm,Yes,GPLv3+
+2090,sssd-krb5,No,GPLv3+
+2091,sssd-krb5-common,No,GPLv3+
+2092,sssd-ldap,No,GPLv3+
+2093,sssd-libwbclient,No,GPLv3+ and LGPLv3+
+2094,sssd-polkit-rules,Yes,GPLv3+
+2095,sssd-proxy,No,GPLv3+
+2096,sssd-tools,Yes,GPLv3+
+2097,sssd-winbind-idmap,Yes,GPLv3+ and LGPLv3+
+2098,star,Yes,CDDL
+2099,startup-notification,No,LGPLv2
+2100,stax2-api,No,BSD
+2101,stix-fonts,Yes,OFL
+2102,strace,Yes,LGPL-2.1+ and GPL-2.0+
+2103,strigi-libs,No,LGPLv2+
+2104,subscription-manager,Yes,GPLv2
+2105,subscription-manager-migration,Yes,GPLv2
+2106,subscription-manager-migration-data,Yes,CC0
+2107,subscription-manager-plugin-container,Yes,GPLv2
+2108,subscription-manager-rhsm,No,GPLv2
+2109,subscription-manager-rhsm-certificates,No,GPLv2
+2110,sudo,Yes,ISC
+2111,suitesparse,No,LGPLv2+ and GPLv2+
+2112,swig,No,GPLv3+ and BSD
+2113,symlinks,Yes,Copyright only
+2114,sysfsutils,No,GPLv2
+2115,syslinux,No,GPLv2+
+2116,sysstat,Yes,GPLv2+
+2117,system-config-firewall-base,Yes,GPLv2+
+2118,system-storage-manager,Yes,GPLv2+
+2119,system-switch-java,Yes,GPLv2+ and BSD
+2120,systemd,Yes,LGPLv2+ and MIT and GPLv2+
+2121,systemd-libs,No,LGPLv2+ and MIT
+2122,systemd-python,No,LGPLv2+
+2123,systemd-sysv,No,LGPLv2+
+2124,systemtap,No,GPLv2+
+2125,systemtap-client,Yes,GPLv2+
+2126,systemtap-devel,No,GPLv2+
+2127,systemtap-initscript,Yes,GPLv2+
+2128,systemtap-runtime,Yes,GPLv2+
+2129,systemtap-sdt-devel,No,GPLv2+ and Public Domain
+2130,sysvinit-tools,No,GPLv2+
+2131,taglib,No,LGPLv2
+2132,talk,Yes,BSD
+2133,talk-server,Yes,BSD
+2134,tar,Yes,GPLv3+
+2135,targetcli,Yes,ASL 2.0
+2136,tbb,No,GPLv2 with exceptions
+2137,tboot,Yes,BSD
+2138,tcl,No,TCL
+2139,tcl-pgtcl,Yes,PostgreSQL
+2140,tcp_wrappers,Yes,BSD
+2141,tcp_wrappers-libs,No,BSD
+2142,tcpdump,Yes,BSD with advertising
+2143,tcsh,Yes,BSD
+2144,teamd,Yes,LGPLv2+
+2145,telnet,Yes,BSD
+2146,telnet-server,Yes,BSD
+2147,tftp,Yes,BSD
+2148,thai-scalable-fonts-common,No,GPLv2+ and Bitstream Vera
+2149,thai-scalable-garuda-fonts,Yes,GPLv2+ and Bitstream Vera
+2150,thai-scalable-kinnari-fonts,Yes,GPLv2+ and Bitstream Vera
+2151,thai-scalable-loma-fonts,Yes,GPLv2+ and Bitstream Vera
+2152,thai-scalable-norasi-fonts,Yes,GPLv2+ and Bitstream Vera
+2153,thai-scalable-purisa-fonts,Yes,GPLv2+ and Bitstream Vera
+2154,thai-scalable-sawasdee-fonts,Yes,GPLv2+ and Bitstream Vera
+2155,thai-scalable-tlwgmono-fonts,Yes,GPLv2+ and Bitstream Vera
+2156,thai-scalable-tlwgtypewriter-fonts,Yes,GPLv2+ and Bitstream Vera
+2157,thai-scalable-tlwgtypist-fonts,Yes,GPLv2+ and Bitstream Vera
+2158,thai-scalable-tlwgtypo-fonts,Yes,GPLv2+ and Bitstream Vera
+2159,thai-scalable-umpush-fonts,Yes,GPLv2+ and Bitstream Vera
+2160,thai-scalable-waree-fonts,Yes,GPLv2+ and Bitstream Vera
+2161,theora-tools,No,BSD
+2162,tibetan-machine-uni-fonts,Yes,GPLv3+ with exceptions
+2163,tigervnc-license,No,GPLv2+
+2164,tigervnc-server-minimal,No,GPLv2+
+2165,time,Yes,GPLv2+
+2166,tk,No,TCL
+2167,tmpwatch,Yes,GPLv2
+2168,tmux,Yes,ISC and BSD
+2169,tog-pegasus,Yes,MIT
+2170,tog-pegasus-libs,No,MIT
+2171,tokyocabinet,No,LGPLv2+
+2172,tomcat-servlet-3.0-api,No,ASL 2.0
+2173,totem-pl-parser,No,LGPLv2+
+2174,tpm2-abrmd,No,BSD
+2175,tpm2-tools,No,BSD
+2176,tpm2-tss,No,BSD and TCGL
+2177,tpm2-tss-devel,No,BSD and TCGL
+2178,trace-cmd,Yes,GPLv2 and LGPLv2+
+2179,traceroute,Yes,GPLv2+
+2180,tree,Yes,GPLv2+
+2181,trousers,No,BSD
+2182,ttmkfdir,No,LGPLv2+
+2183,tuned,Yes,GPLv2+
+2184,tuned-profiles-cpu-partitioning,Yes,GPLv2+
+2185,tuned-utils,Yes,GPLv2+
+2186,tzdata,No,Public Domain
+2187,tzdata-java,No,Public Domain
+2188,ucs-miscfixed-fonts,Yes,Public Domain
+2189,ucx,No,BSD
+2190,udftools,Yes,GPLv2+
+2191,udisks2,No,GPLv2+
+2192,udisks2-iscsi,Yes,LGPLv2+
+2193,udisks2-lsm,No,LGPLv2+
+2194,udisks2-lvm2,Yes,LGPLv2+
+2195,unbound-libs,No,BSD
+2196,unit-api,No,BSD
+2197,units,Yes,GPLv3+
+2198,unixODBC,No,GPLv2+ and LGPLv2+
+2199,unzip,Yes,BSD
+2200,uom-lib,No,BSD
+2201,uom-se,No,BSD
+2202,uom-systems,No,BSD
+2203,upower,No,GPLv2+
+2204,urlview,No,GPLv2+
+2205,urw-base35-bookman-fonts,No,AGPLv3
+2206,urw-base35-c059-fonts,No,AGPLv3
+2207,urw-base35-d050000l-fonts,No,AGPLv3
+2208,urw-base35-fonts,No,AGPLv3
+2209,urw-base35-fonts-common,No,AGPLv3
+2210,urw-base35-gothic-fonts,No,AGPLv3
+2211,urw-base35-nimbus-mono-ps-fonts,No,AGPLv3
+2212,urw-base35-nimbus-roman-fonts,No,AGPLv3
+2213,urw-base35-nimbus-sans-fonts,No,AGPLv3
+2214,urw-base35-p052-fonts,No,AGPLv3
+2215,urw-base35-standard-symbols-ps-fonts,No,AGPLv3
+2216,urw-base35-z003-fonts,No,AGPLv3
+2217,urw-fonts,No,GPL+
+2218,usb_modeswitch,Yes,GPLv2+
+2219,usb_modeswitch-data,Yes,GPLv2+
+2220,usbguard,Yes,GPLv2+
+2221,usbmuxd,No,GPLv3+ or GPLv2+
+2222,usbutils,Yes,GPLv2+
+2223,usermode,No,GPLv2+
+2224,usermode-gtk,No,GPLv2+
+2225,usnic-tools,Yes,GPLv2 or BSD
+2226,ustr,No,MIT or LGPLv2+ or BSD
+2227,util-linux,Yes,GPLv2 and GPLv2+ and LGPLv2+ and BSD with advertising and Public Domain
+2228,uuidd,Yes,GPLv2
+2229,valgrind,Yes,GPLv2+
+2230,vdo,Yes,GPLv2
+2231,vemana2000-fonts,Yes,GPLv2+ with exceptions
+2232,vim-common,No,Vim
+2233,vim-enhanced,Yes,Vim
+2234,vim-filesystem,No,Vim
+2235,vim-minimal,Yes,Vim
+2236,virt-what,Yes,GPLv2+
+2237,virtuoso-opensource,No,GPLv2 with exceptions
+2238,vlgothic-fonts,Yes,mplus and BSD
+2239,vlgothic-p-fonts,Yes,mplus and BSD
+2240,volume_key,Yes,GPLv2 and (MPLv1.1 or GPLv2 or LGPLv2)
+2241,volume_key-libs,No,GPLv2 and (MPLv1.1 or GPLv2 or LGPLv2)
+2242,watchdog,Yes,GPLv2+
+2243,wavpack,No,BSD
+2244,webkitgtk3,No,LGPLv2+ and BSD
+2245,webkitgtk4,No,LGPLv2
+2246,webkitgtk4-jsc,No,LGPLv2
+2247,wget,Yes,GPLv3+
+2248,which,Yes,GPLv3
+2249,whois,Yes,GPLv2+
+2250,wodim,Yes,GPLv2
+2251,words,Yes,Public Domain
+2252,wpa_supplicant,No,BSD
+2253,wqy-microhei-fonts,Yes,ASL 2.0 or GPLv3 with exceptions
+2254,wqy-zenhei-fonts,Yes,GPLv2 with exceptions
+2255,wsmancli,Yes,BSD
+2256,wvdial,Yes,LGPLv2+
+2257,x86info,Yes,GPLv2
+2258,xalan-j2,No,ASL 2.0 and W3C
+2259,xcb-util,No,MIT
+2260,xdelta,Yes,GPLv2
+2261,xdg-user-dirs,No,GPLv2+ and MIT
+2262,xdg-utils,No,MIT
+2263,xerces-j2,No,ASL 2.0
+2264,xfsdump,Yes,GPL+
+2265,xfsprogs,Yes,GPL+ and LGPLv2+
+2266,xinetd,Yes,xinetd
+2267,xkeyboard-config,No,MIT
+2268,xml-common,No,GPL+
+2269,xml-commons-apis,No,ASL 2.0 and W3C and Public Domain
+2270,xml-commons-resolver,No,ASL 2.0
+2271,xmlrpc-c,No,BSD and MIT and GPL+ and Public Domain
+2272,xmlrpc-c-client,No,BSD and MIT and GPL+ and Public Domain
+2273,xmlsec1,No,MIT
+2274,xmlsec1-openssl,No,MIT
+2275,xorg-x11-apps,Yes,MIT
+2276,xorg-x11-font-utils,No,MIT
+2277,xorg-x11-fonts-100dpi,Yes,MIT and Lucida and Public Domain
+2278,xorg-x11-fonts-75dpi,Yes,MIT and Lucida and Public Domain
+2279,xorg-x11-fonts-cyrillic,Yes,MIT and Lucida and Public Domain
+2280,xorg-x11-fonts-ethiopic,Yes,MIT and Lucida and Public Domain
+2281,xorg-x11-fonts-ISO8859-1-100dpi,Yes,MIT and Lucida and Public Domain
+2282,xorg-x11-fonts-ISO8859-1-75dpi,Yes,MIT and Lucida and Public Domain
+2283,xorg-x11-fonts-ISO8859-14-100dpi,Yes,MIT and Lucida and Public Domain
+2284,xorg-x11-fonts-ISO8859-14-75dpi,Yes,MIT and Lucida and Public Domain
+2285,xorg-x11-fonts-ISO8859-15-75dpi,Yes,MIT and Lucida and Public Domain
+2286,xorg-x11-fonts-ISO8859-2-100dpi,Yes,MIT and Lucida and Public Domain
+2287,xorg-x11-fonts-ISO8859-2-75dpi,Yes,MIT and Lucida and Public Domain
+2288,xorg-x11-fonts-ISO8859-9-100dpi,Yes,MIT and Lucida and Public Domain
+2289,xorg-x11-fonts-ISO8859-9-75dpi,Yes,MIT and Lucida and Public Domain
+2290,xorg-x11-fonts-misc,Yes,MIT and Lucida and Public Domain
+2291,xorg-x11-fonts-Type1,Yes,MIT and Lucida and Public Domain
+2292,xorg-x11-server-utils,No,MIT
+2293,xorg-x11-xauth,No,MIT
+2294,xorg-x11-xbitmaps,No,MIT
+2295,xorg-x11-xinit,No,MIT
+2296,xorg-x11-xkb-utils,No,MIT
+2297,xorriso,No,GPLv3+
+2298,xterm,Yes,MIT
+2299,xz,Yes,LGPLv2+
+2300,xz-libs,No,LGPLv2+
+2301,yajl,No,ISC
+2302,yelp,No,GPLv2+
+2303,yelp-libs,No,GPLv2+
+2304,yelp-xsl,No,LGPLv2+ and GPLv2+
+2305,yp-tools,No,GPLv2
+2306,ypbind,No,GPLv2
+2307,ypserv,No,GPLv2
+2308,yum,Yes,GPLv2+
+2309,yum-cron,No,GPLv2+
+2310,yum-langpacks,Yes,GPLv2+
+2311,yum-metadata-parser,No,GPLv2
+2312,yum-plugin-aliases,Yes,GPLv2+
+2313,yum-plugin-changelog,Yes,GPLv2+
+2314,yum-plugin-ovl,No,GPLv2+
+2315,yum-plugin-tmprepo,Yes,GPLv2+
+2316,yum-plugin-verify,Yes,GPLv2+
+2317,yum-plugin-versionlock,Yes,GPLv2+
+2318,yum-rhn-plugin,Yes,GPLv2
+2319,yum-utils,Yes,GPLv2+
+2320,zenity,No,LGPLv2+
+2321,zip,Yes,BSD
+2322,zlib,No,zlib and Boost
+2323,zsh,Yes,MIT
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/table-6.csv b/tools/redhat_package_manifest_scraper/data/redhat7/table-6.csv
new file mode 100644
index 0000000..4423dff
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/table-6.csv
@@ -0,0 +1,17 @@
+,Package,License
+0,dptfxtract,Intel
+1,java-1.7.1-ibm,IBM Binary Code License
+2,java-1.7.1-ibm-demo,IBM Binary Code License
+3,java-1.7.1-ibm-devel,IBM Binary Code License
+4,java-1.7.1-ibm-jdbc,IBM Binary Code License
+5,java-1.7.1-ibm-plugin,IBM Binary Code License
+6,java-1.7.1-ibm-src,IBM Binary Code License
+7,java-1.8.0-ibm,IBM Binary Code License
+8,java-1.8.0-ibm-demo,IBM Binary Code License
+9,java-1.8.0-ibm-devel,IBM Binary Code License
+10,java-1.8.0-ibm-jdbc,IBM Binary Code License
+11,java-1.8.0-ibm-plugin,IBM Binary Code License
+12,java-1.8.0-ibm-src,IBM Binary Code License
+13,libdfp,LGPLv2.1
+14,libdfp-devel,LGPLv2.1
+15,virtio-win,Red Hat Proprietary and GPLv2
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/table-7.csv b/tools/redhat_package_manifest_scraper/data/redhat7/table-7.csv
new file mode 100644
index 0000000..5edd8a7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/table-7.csv
@@ -0,0 +1,15 @@
+,Package,License
+0,dptfxtract,Intel
+1,java-1.7.1-ibm,IBM Binary Code License
+2,java-1.7.1-ibm-demo,IBM Binary Code License
+3,java-1.7.1-ibm-devel,IBM Binary Code License
+4,java-1.7.1-ibm-jdbc,IBM Binary Code License
+5,java-1.7.1-ibm-plugin,IBM Binary Code License
+6,java-1.7.1-ibm-src,IBM Binary Code License
+7,java-1.8.0-ibm,IBM Binary Code License
+8,java-1.8.0-ibm-demo,IBM Binary Code License
+9,java-1.8.0-ibm-devel,IBM Binary Code License
+10,java-1.8.0-ibm-jdbc,IBM Binary Code License
+11,java-1.8.0-ibm-plugin,IBM Binary Code License
+12,java-1.8.0-ibm-src,IBM Binary Code License
+13,virtio-win,Red Hat Proprietary and GPLv2
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/table-8.csv b/tools/redhat_package_manifest_scraper/data/redhat7/table-8.csv
new file mode 100644
index 0000000..5edd8a7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/table-8.csv
@@ -0,0 +1,15 @@
+,Package,License
+0,dptfxtract,Intel
+1,java-1.7.1-ibm,IBM Binary Code License
+2,java-1.7.1-ibm-demo,IBM Binary Code License
+3,java-1.7.1-ibm-devel,IBM Binary Code License
+4,java-1.7.1-ibm-jdbc,IBM Binary Code License
+5,java-1.7.1-ibm-plugin,IBM Binary Code License
+6,java-1.7.1-ibm-src,IBM Binary Code License
+7,java-1.8.0-ibm,IBM Binary Code License
+8,java-1.8.0-ibm-demo,IBM Binary Code License
+9,java-1.8.0-ibm-devel,IBM Binary Code License
+10,java-1.8.0-ibm-jdbc,IBM Binary Code License
+11,java-1.8.0-ibm-plugin,IBM Binary Code License
+12,java-1.8.0-ibm-src,IBM Binary Code License
+13,virtio-win,Red Hat Proprietary and GPLv2
diff --git a/tools/redhat_package_manifest_scraper/data/redhat7/table-9.csv b/tools/redhat_package_manifest_scraper/data/redhat7/table-9.csv
new file mode 100644
index 0000000..9070e60
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat7/table-9.csv
@@ -0,0 +1,10 @@
+,Package,License
+0,dptfxtract,Intel
+1,java-1.7.1-ibm,IBM Binary Code License
+2,java-1.7.1-ibm-demo,IBM Binary Code License
+3,java-1.7.1-ibm-devel,IBM Binary Code License
+4,java-1.7.1-ibm-src,IBM Binary Code License
+5,java-1.8.0-ibm,IBM Binary Code License
+6,java-1.8.0-ibm-demo,IBM Binary Code License
+7,java-1.8.0-ibm-devel,IBM Binary Code License
+8,java-1.8.0-ibm-src,IBM Binary Code License
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/all_redhat8_rpm_package_manifest.csv b/tools/redhat_package_manifest_scraper/data/redhat8/all_redhat8_rpm_package_manifest.csv
new file mode 100644
index 0000000..29a09f4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/all_redhat8_rpm_package_manifest.csv
@@ -0,0 +1,6957 @@
+389-ds
+389-ds-base
+389-ds-base-devel
+389-ds-base-legacy-tools
+389-ds-base-libs
+389-ds-base-snmp
+aajohan-comfortaa-fonts
+abattis-cantarell-fonts
+abrt
+abrt-addon-ccpp
+abrt-addon-coredump-helper
+abrt-addon-kerneloops
+abrt-addon-pstoreoops
+abrt-addon-vmcore
+abrt-addon-xorg
+abrt-cli
+abrt-cli-ng
+abrt-console-notification
+abrt-dbus
+abrt-desktop
+abrt-gui
+abrt-gui-libs
+abrt-java-connector
+abrt-libs
+abrt-plugin-machine-id
+abrt-plugin-sosreport
+abrt-tui
+accountsservice
+accountsservice-devel
+accountsservice-libs
+acl
+acpica-tools
+acpid
+adcli
+adcli-doc
+adobe-mappings-cmap
+adobe-mappings-cmap-deprecated
+adobe-mappings-pdf
+adwaita-cursor-theme
+adwaita-gtk2-theme
+adwaita-icon-theme
+adwaita-qt
+aide
+alsa-firmware
+alsa-lib
+alsa-lib-devel
+alsa-plugins-arcamav
+alsa-plugins-maemo
+alsa-plugins-oss
+alsa-plugins-pulseaudio
+alsa-plugins-samplerate
+alsa-plugins-speex
+alsa-plugins-upmix
+alsa-plugins-usbstream
+alsa-plugins-vdownmix
+alsa-tools-firmware
+alsa-ucm
+alsa-utils
+alsa-utils-alsabat
+amanda
+amanda-client
+amanda-libs
+amanda-server
+anaconda
+anaconda-core
+anaconda-dracut
+anaconda-gui
+anaconda-install-env-deps
+anaconda-tui
+anaconda-user-help
+anaconda-widgets
+annobin
+ansible-freeipa
+ant
+ant-antlr
+ant-apache-bcel
+ant-apache-bsf
+ant-apache-log4j
+ant-apache-oro
+ant-apache-regexp
+ant-apache-resolver
+ant-apache-xalan2
+ant-commons-logging
+ant-commons-net
+ant-contrib
+ant-contrib-javadoc
+ant-javadoc
+ant-javamail
+ant-jdepend
+ant-jmf
+ant-jsch
+ant-junit
+ant-lib
+antlr-C++
+antlr-javadoc
+antlr-manual
+antlr-tool
+ant-manual
+ant-swing
+ant-testutil
+ant-xz
+aopalliance
+aopalliance-javadoc
+apache-commons-beanutils
+apache-commons-beanutils-javadoc
+apache-commons-cli
+apache-commons-cli-javadoc
+apache-commons-codec
+apache-commons-codec-javadoc
+apache-commons-collections
+apache-commons-collections-javadoc
+apache-commons-collections-testframework
+apache-commons-compress
+apache-commons-compress-javadoc
+apache-commons-exec
+apache-commons-exec-javadoc
+apache-commons-io
+apache-commons-io-javadoc
+apache-commons-jxpath
+apache-commons-jxpath-javadoc
+apache-commons-lang
+apache-commons-lang3
+apache-commons-lang3-javadoc
+apache-commons-lang-javadoc
+apache-commons-logging
+apache-commons-logging-javadoc
+apache-commons-net
+apache-commons-net-javadoc
+apache-commons-parent
+apache-ivy
+apache-ivy-javadoc
+apache-parent
+apache-resource-bundles
+apcu-panel
+appstream-data
+apr
+apr-devel
+apr-util
+apr-util-bdb
+apr-util-devel
+apr-util-ldap
+apr-util-mysql
+apr-util-odbc
+apr-util-openssl
+apr-util-pgsql
+apr-util-sqlite
+aqute-bnd
+aqute-bnd-javadoc
+aqute-bndlib
+arpwatch
+asciidoc
+asciidoc-doc
+aspell
+aspell-devel
+aspell-en
+aspnetcore-runtime-3.0
+aspnetcore-runtime-3.1
+aspnetcore-targeting-pack-3.0
+aspnetcore-targeting-pack-3.1
+assertj-core
+assertj-core-javadoc
+at
+atinject
+atinject-javadoc
+atinject-tck
+atk
+atk-devel
+atkmm
+atkmm-devel
+atkmm-doc
+atlas
+atlas-corei2
+atlas-corei2-devel
+atlas-devel
+atlas-z10
+atlas-z10-devel
+atlas-z196
+atlas-z196-devel
+at-spi2-atk
+at-spi2-atk-devel
+at-spi2-core
+at-spi2-core-devel
+attr
+audispd-plugins
+audispd-plugins-zos
+audit
+audit-libs
+audit-libs-devel
+augeas
+augeas-devel
+augeas-libs
+authd
+authselect
+authselect-compat
+authselect-libs
+autoconf
+autoconf213
+autoconf-archive
+autocorr-af
+autocorr-bg
+autocorr-ca
+autocorr-cs
+autocorr-da
+autocorr-de
+autocorr-en
+autocorr-es
+autocorr-fa
+autocorr-fi
+autocorr-fr
+autocorr-ga
+autocorr-hr
+autocorr-hu
+autocorr-is
+autocorr-it
+autocorr-ja
+autocorr-ko
+autocorr-lb
+autocorr-lt
+autocorr-mn
+autocorr-nl
+autocorr-pl
+autocorr-pt
+autocorr-ro
+autocorr-ru
+autocorr-sk
+autocorr-sl
+autocorr-sr
+autocorr-sv
+autocorr-tr
+autocorr-vi
+autocorr-zh
+autofs
+autogen
+autogen-libopts
+automake
+autotrace
+avahi
+avahi-autoipd
+avahi-compat-howl
+avahi-compat-howl-devel
+avahi-compat-libdns_sd
+avahi-compat-libdns_sd-devel
+avahi-devel
+avahi-glib
+avahi-gobject
+avahi-libs
+avahi-ui-gtk3
+awscli
+babel
+babl
+babl-devel
+babl-devel-docs
+bacula-client
+bacula-common
+bacula-console
+bacula-director
+bacula-libs
+bacula-libs-sql
+bacula-logwatch
+bacula-storage
+baobab
+basesystem
+bash
+bash-completion
+bash-doc
+bc
+bcc
+bcc-devel
+bcc-doc
+bcc-tools
+bcel
+bcel-javadoc
+bea-stax-api
+beust-jcommander
+beust-jcommander-javadoc
+bind
+bind-chroot
+bind-devel
+bind-dyndb-ldap
+bind-export-devel
+bind-export-libs
+bind-libs
+bind-libs-lite
+bind-license
+bind-lite-devel
+bind-pkcs11
+bind-pkcs11-devel
+bind-pkcs11-libs
+bind-pkcs11-utils
+bind-sdb
+bind-sdb-chroot
+bind-utils
+binutils
+binutils-devel
+biosdevname
+bison
+bison-devel
+bison-runtime
+bitmap-console-fonts
+bitmap-fangsongti-fonts
+bitmap-fixed-fonts
+bitmap-fonts-compat
+bitmap-lucida-typewriter-fonts
+blas
+blas64
+blas-devel
+blivet-data
+blktrace
+bluez
+bluez-cups
+bluez-hid2hci
+bluez-libs
+bluez-libs-devel
+bluez-obexd
+bnd-maven-plugin
+bogofilter
+bolt
+boom-boot
+boom-boot-conf
+boom-boot-grub2
+boost
+boost-atomic
+boost-build
+boost-chrono
+boost-container
+boost-context
+boost-coroutine
+boost-date-time
+boost-devel
+boost-doc
+boost-examples
+boost-fiber
+boost-filesystem
+boost-graph
+boost-graph-mpich
+boost-graph-openmpi
+boost-iostreams
+boost-jam
+boost-locale
+boost-log
+boost-math
+boost-mpich
+boost-mpich-devel
+boost-mpich-python3
+boost-numpy3
+boost-openmpi
+boost-openmpi-devel
+boost-openmpi-python3
+boost-program-options
+boost-python3
+boost-python3-devel
+boost-random
+boost-regex
+boost-serialization
+boost-signals
+boost-stacktrace
+boost-static
+boost-system
+boost-test
+boost-thread
+boost-timer
+boost-type_erasure
+boost-wave
+booth
+booth-arbitrator
+booth-core
+booth-site
+booth-test
+bpftool
+bpftrace
+bpg-algeti-fonts
+bpg-chveulebrivi-fonts
+bpg-classic-fonts
+bpg-courier-fonts
+bpg-courier-s-fonts
+bpg-dedaena-block-fonts
+bpg-dejavu-sans-fonts
+bpg-elite-fonts
+bpg-excelsior-caps-fonts
+bpg-excelsior-condenced-fonts
+bpg-excelsior-fonts
+bpg-fonts-common
+bpg-glaho-fonts
+bpg-gorda-fonts
+bpg-ingiri-fonts
+bpg-irubaqidze-fonts
+bpg-mikhail-stephan-fonts
+bpg-mrgvlovani-caps-fonts
+bpg-mrgvlovani-fonts
+bpg-nateli-caps-fonts
+bpg-nateli-condenced-fonts
+bpg-nateli-fonts
+bpg-nino-medium-cond-fonts
+bpg-nino-medium-fonts
+bpg-sans-fonts
+bpg-sans-medium-fonts
+bpg-sans-modern-fonts
+bpg-sans-regular-fonts
+bpg-serif-fonts
+bpg-serif-modern-fonts
+bpg-ucnobi-fonts
+brasero
+brasero-devel
+brasero-libs
+brasero-nautilus
+brlapi
+brlapi-devel
+brlapi-java
+brltty
+brltty-at-spi2
+brltty-docs
+brltty-dracut
+brltty-espeak-ng
+brltty-xw
+brotli
+brotli-devel
+bsdtar
+bsf
+bsf-javadoc
+bsh
+bsh-javadoc
+bsh-manual
+bubblewrap
+buildah
+buildah-tests
+byacc
+byaccj
+byteman
+byteman-javadoc
+bzip2
+bzip2-devel
+bzip2-libs
+c2esp
+ca-certificates
+cachefilesd
+cairo
+cairo-devel
+cairo-gobject
+cairo-gobject-devel
+cairomm
+cairomm-devel
+cairomm-doc
+cal10n
+cal10n-javadoc
+c-ares
+c-ares-devel
+cargo
+cargo-doc
+cdi-api
+cdi-api-javadoc
+cdparanoia
+cdparanoia-devel
+cdparanoia-libs
+cdrdao
+celt051
+celt051-devel
+certmonger
+cgdcbxd
+cglib
+cglib-javadoc
+check
+check-devel
+checkpolicy
+cheese
+cheese-libs
+chkconfig
+chrome-gnome-shell
+chrony
+chrpath
+cifs-utils
+cim-schema
+cjose
+cjose-devel
+clang
+clang-analyzer
+clang-devel
+clang-libs
+clang-tools-extra
+cldr-emoji-annotation
+clevis
+clevis-dracut
+clevis-luks
+clevis-systemd
+clevis-udisks2
+clippy
+cloud-init
+cloud-utils-growpart
+clucene-contribs-lib
+clucene-core
+clucene-core-devel
+clufter-bin
+clufter-cli
+clufter-common
+clufter-lib-ccs
+clufter-lib-general
+clufter-lib-pcs
+clutter
+clutter-devel
+clutter-doc
+clutter-gst2
+clutter-gst3
+clutter-gst3-devel
+clutter-gtk
+clutter-gtk-devel
+cmake
+cmake-data
+cmake-doc
+cmake-filesystem
+cmake-gui
+cmake-rpm-macros
+cmirror
+cockpit
+cockpit-bridge
+cockpit-composer
+cockpit-dashboard
+cockpit-doc
+cockpit-machines
+cockpit-packagekit
+cockpit-pcp
+cockpit-podman
+cockpit-session-recording
+cockpit-storaged
+cockpit-system
+cockpit-ws
+codemodel
+cogl
+cogl-devel
+cogl-doc
+colord
+colord-devel
+colord-devel-docs
+colord-gtk
+colord-gtk-devel
+colord-libs
+color-filesystem
+compat-exiv2-026
+compat-guile18
+compat-guile18-devel
+compat-libgfortran-48
+compat-libpthread-nonshared
+compat-libtiff3
+compat-openssl10
+compiler-rt
+composer-cli
+conmon
+conntrack-tools
+container-exception-logger
+containernetworking-plugins
+containers-common
+container-selinux
+container-tools
+convmv
+copy-jdk-configs
+coreutils
+coreutils-common
+coreutils-single
+corosync
+corosynclib
+corosynclib-devel
+corosync-qdevice
+corosync-qnetd
+corosync-vqsim
+cpio
+cpp
+cppcheck
+cppunit
+cppunit-devel
+cppunit-doc
+cracklib
+cracklib-devel
+cracklib-dicts
+crash
+crash-devel
+crash-gcore-command
+crash-ptdump-command
+crash-trace-command
+crda
+createrepo_c
+createrepo_c-devel
+createrepo_c-libs
+crit
+criu
+cronie
+cronie-anacron
+cronie-noanacron
+crontabs
+crypto-policies
+cryptsetup
+cryptsetup-devel
+cryptsetup-libs
+cryptsetup-reencrypt
+cscope
+ctags
+ctags-etags
+ctdb
+ctdb-tests
+culmus-aharoni-clm-fonts
+culmus-caladings-clm-fonts
+culmus-david-clm-fonts
+culmus-drugulin-clm-fonts
+culmus-ellinia-clm-fonts
+culmus-fonts-common
+culmus-frank-ruehl-clm-fonts
+culmus-hadasim-clm-fonts
+culmus-keteryg-fonts
+culmus-miriam-clm-fonts
+culmus-miriam-mono-clm-fonts
+culmus-nachlieli-clm-fonts
+culmus-shofar-fonts
+culmus-simple-clm-fonts
+culmus-stamashkenaz-clm-fonts
+culmus-stamsefarad-clm-fonts
+culmus-yehuda-clm-fonts
+CUnit
+CUnit-devel
+cups
+cups-client
+cups-devel
+cups-filesystem
+cups-filters
+cups-filters-devel
+cups-filters-libs
+cups-ipptool
+cups-libs
+cups-lpd
+cups-pk-helper
+curl
+custodia
+cyrus-imapd
+cyrus-imapd-utils
+cyrus-imapd-vzic
+cyrus-sasl
+cyrus-sasl-devel
+cyrus-sasl-gs2
+cyrus-sasl-gssapi
+cyrus-sasl-ldap
+cyrus-sasl-lib
+cyrus-sasl-md5
+cyrus-sasl-ntlm
+cyrus-sasl-plain
+cyrus-sasl-scram
+cyrus-sasl-sql
+daxctl
+daxctl-devel
+daxctl-libs
+daxio
+dblatex
+dbus
+dbus-c++
+dbus-c++-devel
+dbus-c++-glib
+dbus-common
+dbus-daemon
+dbus-devel
+dbus-glib
+dbus-glib-devel
+dbus-libs
+dbus-tools
+dbus-x11
+dbxtool
+dconf
+dconf-devel
+dconf-editor
+dcraw
+dejagnu
+dejavu-fonts-common
+dejavu-sans-fonts
+dejavu-sans-mono-fonts
+dejavu-serif-fonts
+delve
+desktop-file-utils
+devhelp
+devhelp-devel
+devhelp-libs
+device-mapper
+device-mapper-devel
+device-mapper-event
+device-mapper-event-devel
+device-mapper-event-libs
+device-mapper-libs
+device-mapper-multipath
+device-mapper-multipath-devel
+device-mapper-multipath-libs
+device-mapper-persistent-data
+dhcp-client
+dhcp-common
+dhcp-libs
+dhcp-relay
+dhcp-server
+dialog
+diffstat
+diffutils
+directory-maven-plugin
+directory-maven-plugin-javadoc
+dirsplit
+djvulibre
+djvulibre-devel
+djvulibre-libs
+dleyna-connector-dbus
+dleyna-core
+dleyna-renderer
+dleyna-server
+dlm
+dlm-lib
+dmidecode
+dnf
+dnf-automatic
+dnf-data
+dnf-plugins-core
+dnf-plugin-spacewalk
+dnf-plugin-subscription-manager
+dnsmasq
+dnsmasq-utils
+dnssec-trigger
+dnssec-trigger-panel
+docbook2X
+docbook5-schemas
+docbook-dtds
+docbook-style-dsssl
+docbook-style-xsl
+docbook-utils
+dos2unix
+dosfstools
+dotconf
+dotconf-devel
+dotnet
+dotnet-apphost-pack-3.0
+dotnet-apphost-pack-3.1
+dotnet-host
+dotnet-host-fxr-2.1
+dotnet-hostfxr-3.0
+dotnet-hostfxr-3.1
+dotnet-runtime-2.1
+dotnet-runtime-3.0
+dotnet-runtime-3.1
+dotnet-sdk-2.1
+dotnet-sdk-2.1.5xx
+dotnet-sdk-3.0
+dotnet-sdk-3.1
+dotnet-targeting-pack-3.0
+dotnet-targeting-pack-3.1
+dotnet-templates-3.0
+dotnet-templates-3.1
+dovecot
+dovecot-devel
+dovecot-mysql
+dovecot-pgsql
+dovecot-pigeonhole
+doxygen
+doxygen-doxywizard
+doxygen-latex
+dpdk
+dpdk-devel
+dpdk-doc
+dpdk-tools
+dptfxtract
+dracut
+dracut-caps
+dracut-config-generic
+dracut-config-rescue
+dracut-live
+dracut-network
+dracut-squash
+dracut-tools
+driverctl
+dropwatch
+drpm
+drpm-devel
+dtc
+dump
+dvd+rw-tools
+dwarves
+dwz
+dyninst
+dyninst-devel
+dyninst-doc
+dyninst-static
+dyninst-testsuite
+e2fsprogs
+e2fsprogs-devel
+e2fsprogs-libs
+easymock
+easymock-javadoc
+ed
+edk2-aarch64
+edk2-ovmf
+ee4j-parent
+efibootmgr
+efi-filesystem
+efi-srpm-macros
+efivar
+efivar-libs
+eglexternalplatform-devel
+egl-wayland
+eigen3-devel
+elfutils
+elfutils-debuginfod-client
+elfutils-debuginfod-client-devel
+elfutils-default-yama-scope
+elfutils-devel
+elfutils-devel-static
+elfutils-libelf
+elfutils-libelf-devel
+elfutils-libelf-devel-static
+elfutils-libs
+elinks
+emacs
+emacs-common
+emacs-filesystem
+emacs-lucid
+emacs-nox
+emacs-terminal
+enca
+enca-devel
+enchant
+enchant2
+enchant2-devel
+enchant-devel
+enscript
+environment-modules
+eog
+esc
+espeak-ng
+ethtool
+evemu
+evemu-libs
+evince
+evince-browser-plugin
+evince-libs
+evince-nautilus
+evolution
+evolution-bogofilter
+evolution-data-server
+evolution-data-server-devel
+evolution-data-server-doc
+evolution-data-server-langpacks
+evolution-data-server-perl
+evolution-data-server-tests
+evolution-devel
+evolution-ews
+evolution-ews-langpacks
+evolution-help
+evolution-langpacks
+evolution-mapi
+evolution-mapi-langpacks
+evolution-pst
+evolution-spamassassin
+exchange-bmc-os-info
+exec-maven-plugin
+exec-maven-plugin-javadoc
+execstack
+exempi
+exempi-devel
+exiv2
+exiv2-devel
+exiv2-doc
+exiv2-libs
+expat
+expat-devel
+expect
+fabtests
+fapolicyd
+farstream02
+fcoe-utils
+felix-osgi-compendium
+felix-osgi-compendium-javadoc
+felix-osgi-core
+felix-osgi-core-javadoc
+felix-osgi-foundation
+felix-osgi-foundation-javadoc
+felix-parent
+felix-utils
+felix-utils-javadoc
+fence-agents-aliyun
+fence-agents-all
+fence-agents-amt-ws
+fence-agents-apc
+fence-agents-apc-snmp
+fence-agents-aws
+fence-agents-azure-arm
+fence-agents-bladecenter
+fence-agents-brocade
+fence-agents-cisco-mds
+fence-agents-cisco-ucs
+fence-agents-common
+fence-agents-compute
+fence-agents-drac5
+fence-agents-eaton-snmp
+fence-agents-emerson
+fence-agents-eps
+fence-agents-gce
+fence-agents-heuristics-ping
+fence-agents-hpblade
+fence-agents-ibmblade
+fence-agents-ifmib
+fence-agents-ilo2
+fence-agents-ilo-moonshot
+fence-agents-ilo-mp
+fence-agents-ilo-ssh
+fence-agents-intelmodular
+fence-agents-ipdu
+fence-agents-ipmilan
+fence-agents-kdump
+fence-agents-lpar
+fence-agents-mpath
+fence-agents-redfish
+fence-agents-rhevm
+fence-agents-rsa
+fence-agents-rsb
+fence-agents-sbd
+fence-agents-scsi
+fence-agents-virsh
+fence-agents-vmware-rest
+fence-agents-vmware-soap
+fence-agents-wti
+fence-agents-zvm
+fence-virt
+fence-virtd
+fence-virtd-libvirt
+fence-virtd-multicast
+fence-virtd-serial
+fence-virtd-tcp
+fetchmail
+fftw
+fftw-devel
+fftw-doc
+fftw-libs
+fftw-libs-double
+fftw-libs-long
+fftw-libs-quad
+fftw-libs-single
+fftw-static
+file
+file-devel
+file-libs
+file-roller
+filesystem
+findutils
+fio
+fipscheck
+fipscheck-devel
+fipscheck-lib
+firefox
+firewall-applet
+firewall-config
+firewalld
+firewalld-filesystem
+flac
+flac-devel
+flac-libs
+flatpak
+flatpak-builder
+flatpak-libs
+flatpak-selinux
+flatpak-session-helper
+flex
+flex-devel
+flex-doc
+flite
+flite-devel
+fltk
+fltk-devel
+flute
+fontawesome-fonts
+fontawesome-fonts-web
+fontconfig
+fontconfig-devel
+fontconfig-devel-doc
+fontforge
+fontpackages-devel
+fontpackages-filesystem
+fonts-tweak-tool
+foomatic
+foomatic-db
+foomatic-db-filesystem
+foomatic-db-ppds
+forge-parent
+fprintd
+fprintd-pam
+freeglut
+freeglut-devel
+freeipmi
+freeipmi-bmc-watchdog
+freeipmi-devel
+freeipmi-ipmidetectd
+freeipmi-ipmiseld
+freeradius
+freeradius-devel
+freeradius-doc
+freeradius-krb5
+freeradius-ldap
+freeradius-mysql
+freeradius-perl
+freeradius-postgresql
+freeradius-rest
+freeradius-sqlite
+freeradius-unixODBC
+freeradius-utils
+freerdp
+freerdp-devel
+freerdp-libs
+freetype
+freetype-devel
+frei0r-devel
+frei0r-plugins
+frei0r-plugins-opencv
+fribidi
+fribidi-devel
+frr
+frr-contrib
+ftp
+fuse
+fuse3
+fuse3-devel
+fuse3-libs
+fuse-common
+fuse-devel
+fuse-libs
+fuse-overlayfs
+fusesource-pom
+fuse-sshfs
+fwupd
+fwupdate
+fwupdate-efi
+fwupdate-libs
+fxload
+galera
+gamin
+gamin-devel
+gavl
+gawk
+gc
+gcc
+gcc-c++
+gcc-gdb-plugin
+gcc-gfortran
+gcc-offload-nvptx
+gcc-plugin-devel
+gcc-toolset-9
+gcc-toolset-9-annobin
+gcc-toolset-9-binutils
+gcc-toolset-9-binutils-devel
+gcc-toolset-9-build
+gcc-toolset-9-dwz
+gcc-toolset-9-dyninst
+gcc-toolset-9-dyninst-devel
+gcc-toolset-9-dyninst-doc
+gcc-toolset-9-dyninst-static
+gcc-toolset-9-dyninst-testsuite
+gcc-toolset-9-elfutils
+gcc-toolset-9-elfutils-devel
+gcc-toolset-9-elfutils-libelf
+gcc-toolset-9-elfutils-libelf-devel
+gcc-toolset-9-elfutils-libs
+gcc-toolset-9-gcc
+gcc-toolset-9-gcc-c++
+gcc-toolset-9-gcc-gdb-plugin
+gcc-toolset-9-gcc-gfortran
+gcc-toolset-9-gcc-plugin-devel
+gcc-toolset-9-gdb
+gcc-toolset-9-gdb-doc
+gcc-toolset-9-gdb-gdbserver
+gcc-toolset-9-libasan-devel
+gcc-toolset-9-libatomic-devel
+gcc-toolset-9-libitm-devel
+gcc-toolset-9-liblsan-devel
+gcc-toolset-9-libquadmath-devel
+gcc-toolset-9-libstdc++-devel
+gcc-toolset-9-libstdc++-docs
+gcc-toolset-9-libtsan-devel
+gcc-toolset-9-libubsan-devel
+gcc-toolset-9-ltrace
+gcc-toolset-9-make
+gcc-toolset-9-make-devel
+gcc-toolset-9-perftools
+gcc-toolset-9-runtime
+gcc-toolset-9-strace
+gcc-toolset-9-systemtap
+gcc-toolset-9-systemtap-client
+gcc-toolset-9-systemtap-devel
+gcc-toolset-9-systemtap-initscript
+gcc-toolset-9-systemtap-runtime
+gcc-toolset-9-systemtap-sdt-devel
+gcc-toolset-9-systemtap-server
+gcc-toolset-9-toolchain
+gcc-toolset-9-valgrind
+gcc-toolset-9-valgrind-devel
+gc-devel
+GConf2
+GConf2-devel
+gcr
+gcr-devel
+gd
+gdb
+gdb-doc
+gdb-gdbserver
+gdb-headless
+gdbm
+gdbm-devel
+gdbm-libs
+gd-devel
+gdisk
+gdk-pixbuf2
+gdk-pixbuf2-devel
+gdk-pixbuf2-modules
+gdk-pixbuf2-xlib
+gdk-pixbuf2-xlib-devel
+gdm
+gedit
+gedit-plugin-bookmarks
+gedit-plugin-bracketcompletion
+gedit-plugin-codecomment
+gedit-plugin-colorpicker
+gedit-plugin-colorschemer
+gedit-plugin-commander
+gedit-plugin-drawspaces
+gedit-plugin-findinfiles
+gedit-plugin-joinlines
+gedit-plugin-multiedit
+gedit-plugins
+gedit-plugins-data
+gedit-plugin-smartspaces
+gedit-plugin-terminal
+gedit-plugin-textsize
+gedit-plugin-translate
+gedit-plugin-wordcompletion
+gegl
+gegl04
+gegl04-devel
+genisoimage
+genwqe-tools
+genwqe-vpd
+genwqe-zlib
+genwqe-zlib-devel
+geoclue2
+geoclue2-demos
+geoclue2-devel
+geoclue2-libs
+geocode-glib
+geocode-glib-devel
+geoipupdate
+geolite2-city
+geolite2-country
+geronimo-annotation
+geronimo-annotation-javadoc
+geronimo-jms
+geronimo-jms-javadoc
+geronimo-jpa
+geronimo-jpa-javadoc
+geronimo-parent-poms
+gettext
+gettext-common-devel
+gettext-devel
+gettext-libs
+gfbgraph
+gflags
+gflags-devel
+gfs2-utils
+ghc-srpm-macros
+ghostscript
+ghostscript-doc
+ghostscript-tools-dvipdf
+ghostscript-tools-fonts
+ghostscript-tools-printing
+ghostscript-x11
+giflib
+giflib-devel
+gimp
+gimp-devel
+gimp-devel-tools
+gimp-libs
+git
+git-all
+git-clang-format
+git-core
+git-core-doc
+git-daemon
+git-email
+git-gui
+git-instaweb
+gitk
+git-subtree
+git-svn
+gitweb
+gjs
+gjs-devel
+glade-devel
+glade-libs
+glassfish-annotation-api
+glassfish-annotation-api-javadoc
+glassfish-el
+glassfish-el-api
+glassfish-el-javadoc
+glassfish-fastinfoset
+glassfish-jaxb-api
+glassfish-jaxb-core
+glassfish-jaxb-runtime
+glassfish-jaxb-txw2
+glassfish-jsp-api
+glassfish-jsp-api-javadoc
+glassfish-legal
+glassfish-master-pom
+glassfish-servlet-api
+glassfish-servlet-api-javadoc
+glew-devel
+glib2
+glib2-devel
+glib2-doc
+glib2-fam
+glib2-static
+glib2-tests
+glibc
+glibc-all-langpacks
+glibc-benchtests
+glibc-common
+glibc-devel
+glibc-headers
+glibc-langpack-aa
+glibc-langpack-af
+glibc-langpack-agr
+glibc-langpack-ak
+glibc-langpack-am
+glibc-langpack-an
+glibc-langpack-anp
+glibc-langpack-ar
+glibc-langpack-as
+glibc-langpack-ast
+glibc-langpack-ayc
+glibc-langpack-az
+glibc-langpack-be
+glibc-langpack-bem
+glibc-langpack-ber
+glibc-langpack-bg
+glibc-langpack-bhb
+glibc-langpack-bho
+glibc-langpack-bi
+glibc-langpack-bn
+glibc-langpack-bo
+glibc-langpack-br
+glibc-langpack-brx
+glibc-langpack-bs
+glibc-langpack-byn
+glibc-langpack-ca
+glibc-langpack-ce
+glibc-langpack-chr
+glibc-langpack-cmn
+glibc-langpack-crh
+glibc-langpack-cs
+glibc-langpack-csb
+glibc-langpack-cv
+glibc-langpack-cy
+glibc-langpack-da
+glibc-langpack-de
+glibc-langpack-doi
+glibc-langpack-dsb
+glibc-langpack-dv
+glibc-langpack-dz
+glibc-langpack-el
+glibc-langpack-en
+glibc-langpack-eo
+glibc-langpack-es
+glibc-langpack-et
+glibc-langpack-eu
+glibc-langpack-fa
+glibc-langpack-ff
+glibc-langpack-fi
+glibc-langpack-fil
+glibc-langpack-fo
+glibc-langpack-fr
+glibc-langpack-fur
+glibc-langpack-fy
+glibc-langpack-ga
+glibc-langpack-gd
+glibc-langpack-gez
+glibc-langpack-gl
+glibc-langpack-gu
+glibc-langpack-gv
+glibc-langpack-ha
+glibc-langpack-hak
+glibc-langpack-he
+glibc-langpack-hi
+glibc-langpack-hif
+glibc-langpack-hne
+glibc-langpack-hr
+glibc-langpack-hsb
+glibc-langpack-ht
+glibc-langpack-hu
+glibc-langpack-hy
+glibc-langpack-ia
+glibc-langpack-id
+glibc-langpack-ig
+glibc-langpack-ik
+glibc-langpack-is
+glibc-langpack-it
+glibc-langpack-iu
+glibc-langpack-ja
+glibc-langpack-ka
+glibc-langpack-kab
+glibc-langpack-kk
+glibc-langpack-kl
+glibc-langpack-km
+glibc-langpack-kn
+glibc-langpack-ko
+glibc-langpack-kok
+glibc-langpack-ks
+glibc-langpack-ku
+glibc-langpack-kw
+glibc-langpack-ky
+glibc-langpack-lb
+glibc-langpack-lg
+glibc-langpack-li
+glibc-langpack-lij
+glibc-langpack-ln
+glibc-langpack-lo
+glibc-langpack-lt
+glibc-langpack-lv
+glibc-langpack-lzh
+glibc-langpack-mag
+glibc-langpack-mai
+glibc-langpack-mfe
+glibc-langpack-mg
+glibc-langpack-mhr
+glibc-langpack-mi
+glibc-langpack-miq
+glibc-langpack-mjw
+glibc-langpack-mk
+glibc-langpack-ml
+glibc-langpack-mn
+glibc-langpack-mni
+glibc-langpack-mr
+glibc-langpack-ms
+glibc-langpack-mt
+glibc-langpack-my
+glibc-langpack-nan
+glibc-langpack-nb
+glibc-langpack-nds
+glibc-langpack-ne
+glibc-langpack-nhn
+glibc-langpack-niu
+glibc-langpack-nl
+glibc-langpack-nn
+glibc-langpack-nr
+glibc-langpack-nso
+glibc-langpack-oc
+glibc-langpack-om
+glibc-langpack-or
+glibc-langpack-os
+glibc-langpack-pa
+glibc-langpack-pap
+glibc-langpack-pl
+glibc-langpack-ps
+glibc-langpack-pt
+glibc-langpack-quz
+glibc-langpack-raj
+glibc-langpack-ro
+glibc-langpack-ru
+glibc-langpack-rw
+glibc-langpack-sa
+glibc-langpack-sah
+glibc-langpack-sat
+glibc-langpack-sc
+glibc-langpack-sd
+glibc-langpack-se
+glibc-langpack-sgs
+glibc-langpack-shn
+glibc-langpack-shs
+glibc-langpack-si
+glibc-langpack-sid
+glibc-langpack-sk
+glibc-langpack-sl
+glibc-langpack-sm
+glibc-langpack-so
+glibc-langpack-sq
+glibc-langpack-sr
+glibc-langpack-ss
+glibc-langpack-st
+glibc-langpack-sv
+glibc-langpack-sw
+glibc-langpack-szl
+glibc-langpack-ta
+glibc-langpack-tcy
+glibc-langpack-te
+glibc-langpack-tg
+glibc-langpack-th
+glibc-langpack-the
+glibc-langpack-ti
+glibc-langpack-tig
+glibc-langpack-tk
+glibc-langpack-tl
+glibc-langpack-tn
+glibc-langpack-to
+glibc-langpack-tpi
+glibc-langpack-tr
+glibc-langpack-ts
+glibc-langpack-tt
+glibc-langpack-ug
+glibc-langpack-uk
+glibc-langpack-unm
+glibc-langpack-ur
+glibc-langpack-uz
+glibc-langpack-ve
+glibc-langpack-vi
+glibc-langpack-wa
+glibc-langpack-wae
+glibc-langpack-wal
+glibc-langpack-wo
+glibc-langpack-xh
+glibc-langpack-yi
+glibc-langpack-yo
+glibc-langpack-yue
+glibc-langpack-yuw
+glibc-langpack-zh
+glibc-langpack-zu
+glibc-locale-source
+glibc-minimal-langpack
+glibc-nss-devel
+glibc-static
+glibc-utils
+glibmm24
+glibmm24-devel
+glibmm24-doc
+glib-networking
+gl-manpages
+glm-devel
+glm-doc
+glog
+glog-devel
+glusterfs
+glusterfs-api
+glusterfs-api-devel
+glusterfs-cli
+glusterfs-client-xlators
+glusterfs-devel
+glusterfs-fuse
+glusterfs-libs
+glusterfs-rdma
+glx-utils
+gmock
+gmock-devel
+gmp
+gmp-c++
+gmp-devel
+gnome-abrt
+gnome-autoar
+gnome-backgrounds
+gnome-backgrounds-extras
+gnome-bluetooth
+gnome-bluetooth-libs
+gnome-bluetooth-libs-devel
+gnome-boxes
+gnome-calculator
+gnome-characters
+gnome-classic-session
+gnome-color-manager
+gnome-common
+gnome-control-center
+gnome-control-center-filesystem
+gnome-desktop3
+gnome-desktop3-devel
+gnome-disk-utility
+gnome-font-viewer
+gnome-getting-started-docs
+gnome-getting-started-docs-cs
+gnome-getting-started-docs-de
+gnome-getting-started-docs-es
+gnome-getting-started-docs-fr
+gnome-getting-started-docs-gl
+gnome-getting-started-docs-hu
+gnome-getting-started-docs-it
+gnome-getting-started-docs-pl
+gnome-getting-started-docs-pt_BR
+gnome-getting-started-docs-ru
+gnome-initial-setup
+gnome-keyring
+gnome-keyring-pam
+gnome-logs
+gnome-menus
+gnome-menus-devel
+gnome-online-accounts
+gnome-online-accounts-devel
+gnome-online-miners
+gnome-photos
+gnome-photos-tests
+gnome-remote-desktop
+gnome-screenshot
+gnome-session
+gnome-session-wayland-session
+gnome-session-xsession
+gnome-settings-daemon
+gnome-shell
+gnome-shell-extension-apps-menu
+gnome-shell-extension-auto-move-windows
+gnome-shell-extension-common
+gnome-shell-extension-dash-to-dock
+gnome-shell-extension-desktop-icons
+gnome-shell-extension-disable-screenshield
+gnome-shell-extension-drive-menu
+gnome-shell-extension-horizontal-workspaces
+gnome-shell-extension-launch-new-instance
+gnome-shell-extension-native-window-placement
+gnome-shell-extension-no-hot-corner
+gnome-shell-extension-panel-favorites
+gnome-shell-extension-places-menu
+gnome-shell-extension-screenshot-window-sizer
+gnome-shell-extension-systemMonitor
+gnome-shell-extension-top-icons
+gnome-shell-extension-updates-dialog
+gnome-shell-extension-user-theme
+gnome-shell-extension-window-grouper
+gnome-shell-extension-window-list
+gnome-shell-extension-windowsNavigator
+gnome-shell-extension-workspace-indicator
+gnome-software
+gnome-software-editor
+gnome-system-monitor
+gnome-terminal
+gnome-terminal-nautilus
+gnome-themes-standard
+gnome-tweaks
+gnome-user-docs
+gnome-video-effects
+gnu-efi
+gnu-efi-devel
+gnu-free-fonts-common
+gnu-free-mono-fonts
+gnu-free-sans-fonts
+gnu-free-serif-fonts
+gnupg2
+gnupg2-smime
+gnuplot
+gnuplot-common
+gnuplot-doc
+gnutls
+gnutls-c++
+gnutls-dane
+gnutls-devel
+gnutls-utils
+gobject-introspection
+gobject-introspection-devel
+go-compilers-golang-compiler
+golang
+golang-bin
+golang-docs
+golang-misc
+golang-race
+golang-src
+golang-tests
+gom
+google-crosextra-caladea-fonts
+google-crosextra-carlito-fonts
+google-droid-kufi-fonts
+google-droid-sans-fonts
+google-droid-sans-mono-fonts
+google-droid-serif-fonts
+google-guice
+google-guice-javadoc
+google-noto-cjk-fonts-common
+google-noto-emoji-color-fonts
+google-noto-emoji-fonts
+google-noto-fonts-common
+google-noto-kufi-arabic-fonts
+google-noto-mono-fonts
+google-noto-naskh-arabic-fonts
+google-noto-naskh-arabic-ui-fonts
+google-noto-nastaliq-urdu-fonts
+google-noto-sans-armenian-fonts
+google-noto-sans-avestan-fonts
+google-noto-sans-balinese-fonts
+google-noto-sans-bamum-fonts
+google-noto-sans-batak-fonts
+google-noto-sans-bengali-fonts
+google-noto-sans-bengali-ui-fonts
+google-noto-sans-brahmi-fonts
+google-noto-sans-buginese-fonts
+google-noto-sans-buhid-fonts
+google-noto-sans-canadian-aboriginal-fonts
+google-noto-sans-carian-fonts
+google-noto-sans-cham-fonts
+google-noto-sans-cherokee-fonts
+google-noto-sans-cjk-jp-fonts
+google-noto-sans-cjk-ttc-fonts
+google-noto-sans-coptic-fonts
+google-noto-sans-cuneiform-fonts
+google-noto-sans-cypriot-fonts
+google-noto-sans-deseret-fonts
+google-noto-sans-devanagari-fonts
+google-noto-sans-devanagari-ui-fonts
+google-noto-sans-egyptian-hieroglyphs-fonts
+google-noto-sans-ethiopic-fonts
+google-noto-sans-fonts
+google-noto-sans-georgian-fonts
+google-noto-sans-glagolitic-fonts
+google-noto-sans-gothic-fonts
+google-noto-sans-gujarati-fonts
+google-noto-sans-gujarati-ui-fonts
+google-noto-sans-gurmukhi-fonts
+google-noto-sans-gurmukhi-ui-fonts
+google-noto-sans-hanunoo-fonts
+google-noto-sans-hebrew-fonts
+google-noto-sans-imperial-aramaic-fonts
+google-noto-sans-inscriptional-pahlavi-fonts
+google-noto-sans-inscriptional-parthian-fonts
+google-noto-sans-javanese-fonts
+google-noto-sans-kaithi-fonts
+google-noto-sans-kannada-fonts
+google-noto-sans-kannada-ui-fonts
+google-noto-sans-kayah-li-fonts
+google-noto-sans-kharoshthi-fonts
+google-noto-sans-khmer-fonts
+google-noto-sans-khmer-ui-fonts
+google-noto-sans-lao-fonts
+google-noto-sans-lao-ui-fonts
+google-noto-sans-lepcha-fonts
+google-noto-sans-limbu-fonts
+google-noto-sans-linear-b-fonts
+google-noto-sans-lisu-fonts
+google-noto-sans-lycian-fonts
+google-noto-sans-lydian-fonts
+google-noto-sans-malayalam-fonts
+google-noto-sans-malayalam-ui-fonts
+google-noto-sans-mandaic-fonts
+google-noto-sans-meetei-mayek-fonts
+google-noto-sans-mongolian-fonts
+google-noto-sans-myanmar-fonts
+google-noto-sans-myanmar-ui-fonts
+google-noto-sans-new-tai-lue-fonts
+google-noto-sans-nko-fonts
+google-noto-sans-ogham-fonts
+google-noto-sans-ol-chiki-fonts
+google-noto-sans-old-italic-fonts
+google-noto-sans-old-persian-fonts
+google-noto-sans-old-south-arabian-fonts
+google-noto-sans-old-turkic-fonts
+google-noto-sans-oriya-fonts
+google-noto-sans-oriya-ui-fonts
+google-noto-sans-osmanya-fonts
+google-noto-sans-phags-pa-fonts
+google-noto-sans-phoenician-fonts
+google-noto-sans-rejang-fonts
+google-noto-sans-runic-fonts
+google-noto-sans-samaritan-fonts
+google-noto-sans-saurashtra-fonts
+google-noto-sans-shavian-fonts
+google-noto-sans-sinhala-fonts
+google-noto-sans-sundanese-fonts
+google-noto-sans-syloti-nagri-fonts
+google-noto-sans-symbols-fonts
+google-noto-sans-syriac-eastern-fonts
+google-noto-sans-syriac-estrangela-fonts
+google-noto-sans-syriac-western-fonts
+google-noto-sans-tagalog-fonts
+google-noto-sans-tagbanwa-fonts
+google-noto-sans-tai-le-fonts
+google-noto-sans-tai-tham-fonts
+google-noto-sans-tai-viet-fonts
+google-noto-sans-tamil-fonts
+google-noto-sans-tamil-ui-fonts
+google-noto-sans-telugu-fonts
+google-noto-sans-telugu-ui-fonts
+google-noto-sans-thaana-fonts
+google-noto-sans-thai-fonts
+google-noto-sans-thai-ui-fonts
+google-noto-sans-tibetan-fonts
+google-noto-sans-tifinagh-fonts
+google-noto-sans-ugaritic-fonts
+google-noto-sans-ui-fonts
+google-noto-sans-vai-fonts
+google-noto-sans-yi-fonts
+google-noto-serif-armenian-fonts
+google-noto-serif-bengali-fonts
+google-noto-serif-cjk-ttc-fonts
+google-noto-serif-devanagari-fonts
+google-noto-serif-fonts
+google-noto-serif-georgian-fonts
+google-noto-serif-gujarati-fonts
+google-noto-serif-kannada-fonts
+google-noto-serif-khmer-fonts
+google-noto-serif-lao-fonts
+google-noto-serif-malayalam-fonts
+google-noto-serif-tamil-fonts
+google-noto-serif-telugu-fonts
+google-noto-serif-thai-fonts
+google-roboto-slab-fonts
+go-srpm-macros
+go-toolset
+gperf
+gpgme
+gpgme-devel
+gpgmepp
+gpgmepp-devel
+gpm
+gpm-devel
+gpm-libs
+grafana
+grafana-azure-monitor
+grafana-cloudwatch
+grafana-elasticsearch
+grafana-graphite
+grafana-influxdb
+grafana-loki
+grafana-mssql
+grafana-mysql
+grafana-opentsdb
+grafana-pcp
+grafana-postgres
+grafana-prometheus
+grafana-stackdriver
+graphite2
+graphite2-devel
+graphviz
+graphviz-devel
+graphviz-doc
+graphviz-gd
+graphviz-python3
+grep
+grilo
+grilo-devel
+grilo-plugins
+groff
+groff-base
+grub2-common
+grub2-efi-aa64
+grub2-efi-aa64-cdboot
+grub2-efi-aa64-modules
+grub2-efi-ia32
+grub2-efi-ia32-cdboot
+grub2-efi-ia32-modules
+grub2-efi-x64
+grub2-efi-x64-cdboot
+grub2-efi-x64-modules
+grub2-pc
+grub2-pc-modules
+grub2-ppc64le
+grub2-ppc64le-modules
+grub2-tools
+grub2-tools-efi
+grub2-tools-extra
+grub2-tools-minimal
+grubby
+gsettings-desktop-schemas
+gsettings-desktop-schemas-devel
+gsl
+gsl-devel
+gsm
+gsm-devel
+gsound
+gspell
+gspell-devel
+gspell-doc
+gssdp
+gssdp-devel
+gssdp-docs
+gssntlmssp
+gssproxy
+gstreamer1
+gstreamer1-devel
+gstreamer1-plugins-bad-free
+gstreamer1-plugins-bad-free-devel
+gstreamer1-plugins-base
+gstreamer1-plugins-base-devel
+gstreamer1-plugins-good
+gstreamer1-plugins-good-gtk
+gstreamer1-plugins-ugly-free
+gtest
+gtest-devel
+gtk2
+gtk2-devel
+gtk2-devel-docs
+gtk2-immodules
+gtk2-immodule-xim
+gtk3
+gtk3-devel
+gtk3-immodule-xim
+gtk-doc
+gtkmm24
+gtkmm24-devel
+gtkmm24-docs
+gtkmm30
+gtkmm30-devel
+gtkmm30-doc
+gtksourceview3
+gtksourceview3-devel
+gtkspell
+gtkspell3
+gtkspell3-devel
+gtkspell-devel
+gtk-update-icon-cache
+gtk-vnc2
+guava
+guava20
+guava20-javadoc
+guava20-testlib
+gubbi-fonts
+guice-assistedinject
+guice-bom
+guice-extensions
+guice-grapher
+guice-jmx
+guice-jndi
+guice-multibindings
+guice-parent
+guice-servlet
+guice-testlib
+guice-throwingproviders
+guile
+guile-devel
+gupnp
+gupnp-av
+gupnp-devel
+gupnp-dlna
+gupnp-igd
+gupnp-igd-devel
+gutenprint
+gutenprint-cups
+gutenprint-doc
+gutenprint-libs
+gutenprint-libs-ui
+gutenprint-plugin
+gvfs
+gvfs-afc
+gvfs-afp
+gvfs-archive
+gvfs-client
+gvfs-devel
+gvfs-fuse
+gvfs-goa
+gvfs-gphoto2
+gvfs-mtp
+gvfs-smb
+gvnc
+gzip
+hamcrest
+hamcrest-core
+hamcrest-demo
+hamcrest-javadoc
+haproxy
+hardlink
+harfbuzz
+harfbuzz-devel
+harfbuzz-icu
+hawtjni
+hawtjni-javadoc
+hawtjni-runtime
+hdparm
+help2man
+hesiod
+hesiod-devel
+hexchat
+hexchat-devel
+hexedit
+hicolor-icon-theme
+highlight
+highlight-gui
+hivex
+hivex-devel
+hostname
+hplip
+hplip-common
+hplip-gui
+hplip-libs
+hspell
+httpcomponents-client
+httpcomponents-client-cache
+httpcomponents-client-javadoc
+httpcomponents-core
+httpcomponents-core-javadoc
+httpcomponents-project
+httpd
+httpd-devel
+httpd-filesystem
+httpd-manual
+httpd-tools
+http-parser
+http-parser-devel
+hunspell
+hunspell-af
+hunspell-ak
+hunspell-am
+hunspell-ar
+hunspell-as
+hunspell-ast
+hunspell-az
+hunspell-be
+hunspell-ber
+hunspell-bg
+hunspell-bn
+hunspell-br
+hunspell-ca
+hunspell-cop
+hunspell-cs
+hunspell-csb
+hunspell-cv
+hunspell-cy
+hunspell-da
+hunspell-de
+hunspell-devel
+hunspell-dsb
+hunspell-el
+hunspell-en
+hunspell-en-GB
+hunspell-en-US
+hunspell-eo
+hunspell-es
+hunspell-es-AR
+hunspell-es-BO
+hunspell-es-CL
+hunspell-es-CO
+hunspell-es-CR
+hunspell-es-CU
+hunspell-es-DO
+hunspell-es-EC
+hunspell-es-ES
+hunspell-es-GT
+hunspell-es-HN
+hunspell-es-MX
+hunspell-es-NI
+hunspell-es-PA
+hunspell-es-PE
+hunspell-es-PR
+hunspell-es-PY
+hunspell-es-SV
+hunspell-es-US
+hunspell-es-UY
+hunspell-es-VE
+hunspell-et
+hunspell-eu
+hunspell-fa
+hunspell-fj
+hunspell-fo
+hunspell-fr
+hunspell-fur
+hunspell-fy
+hunspell-ga
+hunspell-gd
+hunspell-gl
+hunspell-grc
+hunspell-gu
+hunspell-gv
+hunspell-haw
+hunspell-he
+hunspell-hi
+hunspell-hil
+hunspell-hr
+hunspell-hsb
+hunspell-ht
+hunspell-hu
+hunspell-hy
+hunspell-ia
+hunspell-id
+hunspell-is
+hunspell-it
+hunspell-kk
+hunspell-km
+hunspell-kn
+hunspell-ko
+hunspell-ku
+hunspell-ky
+hunspell-la
+hunspell-lb
+hunspell-ln
+hunspell-lt
+hunspell-lv
+hunspell-mai
+hunspell-mg
+hunspell-mi
+hunspell-mk
+hunspell-ml
+hunspell-mn
+hunspell-mos
+hunspell-mr
+hunspell-ms
+hunspell-mt
+hunspell-nb
+hunspell-nds
+hunspell-ne
+hunspell-nl
+hunspell-nn
+hunspell-nr
+hunspell-nso
+hunspell-ny
+hunspell-oc
+hunspell-om
+hunspell-or
+hunspell-pa
+hunspell-pl
+hunspell-pt
+hunspell-qu
+hunspell-quh
+hunspell-ro
+hunspell-ru
+hunspell-rw
+hunspell-sc
+hunspell-se
+hunspell-shs
+hunspell-si
+hunspell-sk
+hunspell-sl
+hunspell-smj
+hunspell-so
+hunspell-sq
+hunspell-sr
+hunspell-ss
+hunspell-st
+hunspell-sv
+hunspell-sw
+hunspell-ta
+hunspell-te
+hunspell-tet
+hunspell-th
+hunspell-ti
+hunspell-tk
+hunspell-tl
+hunspell-tn
+hunspell-tpi
+hunspell-ts
+hunspell-uk
+hunspell-ur
+hunspell-uz
+hunspell-ve
+hunspell-vi
+hunspell-wa
+hunspell-xh
+hunspell-yi
+hunspell-zu
+hwdata
+hwloc
+hwloc-devel
+hwloc-gui
+hwloc-libs
+hwloc-plugins
+hyperv-daemons
+hyperv-daemons-license
+hypervfcopyd
+hypervkvpd
+hyperv-tools
+hypervvssd
+hyphen
+hyphen-af
+hyphen-as
+hyphen-be
+hyphen-bg
+hyphen-bn
+hyphen-ca
+hyphen-cs
+hyphen-cy
+hyphen-da
+hyphen-de
+hyphen-devel
+hyphen-el
+hyphen-en
+hyphen-es
+hyphen-et
+hyphen-eu
+hyphen-fa
+hyphen-fo
+hyphen-fr
+hyphen-ga
+hyphen-gl
+hyphen-grc
+hyphen-gu
+hyphen-hi
+hyphen-hr
+hyphen-hsb
+hyphen-hu
+hyphen-ia
+hyphen-id
+hyphen-is
+hyphen-it
+hyphen-kn
+hyphen-ku
+hyphen-lt
+hyphen-lv
+hyphen-mi
+hyphen-ml
+hyphen-mn
+hyphen-mr
+hyphen-nb
+hyphen-nl
+hyphen-nn
+hyphen-or
+hyphen-pa
+hyphen-pl
+hyphen-pt
+hyphen-ro
+hyphen-ru
+hyphen-sa
+hyphen-sk
+hyphen-sl
+hyphen-sr
+hyphen-sv
+hyphen-ta
+hyphen-te
+hyphen-tk
+hyphen-uk
+hyphen-zu
+i2c-tools
+i2c-tools-perl
+ibacm
+ibus
+ibus-devel
+ibus-devel-docs
+ibus-gtk2
+ibus-gtk3
+ibus-hangul
+ibus-kkc
+ibus-libpinyin
+ibus-libs
+ibus-libzhuyin
+ibus-m17n
+ibus-sayura
+ibus-setup
+ibus-table
+ibus-table-chinese
+ibus-table-chinese-array
+ibus-table-chinese-cangjie
+ibus-table-chinese-cantonese
+ibus-table-chinese-easy
+ibus-table-chinese-erbi
+ibus-table-chinese-quick
+ibus-table-chinese-scj
+ibus-table-chinese-stroke5
+ibus-table-chinese-wu
+ibus-table-chinese-wubi-haifeng
+ibus-table-chinese-wubi-jidian
+ibus-table-chinese-yong
+ibus-typing-booster
+ibus-wayland
+icedax
+icedtea-web
+icedtea-web-javadoc
+icoutils
+icu
+idm
+idn2
+iio-sensor-proxy
+ilmbase
+ilmbase-devel
+ima-evm-utils
+ima-evm-utils-devel
+imake
+infiniband-diags
+info
+initial-setup
+initial-setup-gui
+initscripts
+inkscape
+inkscape-docs
+inkscape-view
+insights-client
+integritysetup
+intel-cmt-cat
+intel-gpu-tools
+intltool
+iotop
+iowatcher
+ipa-client
+ipa-client-common
+ipa-client-samba
+ipa-common
+ipa-healthcheck
+ipa-healthcheck-core
+ipa-idoverride-memberof-plugin
+ipa-python-compat
+ipa-server
+ipa-server-common
+ipa-server-dns
+ipa-server-trust-ad
+ipcalc
+iperf3
+ipmievd
+ipmitool
+iproute
+iproute-devel
+iproute-tc
+iprutils
+ipset
+ipset-devel
+ipset-libs
+ipset-service
+iptables
+iptables-arptables
+iptables-devel
+iptables-ebtables
+iptables-libs
+iptables-services
+iptables-utils
+iptraf-ng
+iptstate
+iputils
+iputils-ninfod
+ipvsadm
+ipxe-bootimgs
+ipxe-roms
+ipxe-roms-qemu
+irqbalance
+irssi
+irssi-devel
+iscsi-initiator-utils
+iscsi-initiator-utils-iscsiuio
+isl
+isl-devel
+isns-utils
+isns-utils-devel
+isns-utils-libs
+iso-codes
+iso-codes-devel
+isomd5sum
+isorelax
+isorelax-javadoc
+istack-commons
+istack-commons-runtime
+istack-commons-tools
+itstool
+ivy-local
+iw
+iwl1000-firmware
+iwl100-firmware
+iwl105-firmware
+iwl135-firmware
+iwl2000-firmware
+iwl2030-firmware
+iwl3160-firmware
+iwl3945-firmware
+iwl4965-firmware
+iwl5000-firmware
+iwl5150-firmware
+iwl6000-firmware
+iwl6000g2a-firmware
+iwl6000g2b-firmware
+iwl6050-firmware
+iwl7260-firmware
+iwpmd
+jackson-annotations
+jackson-core
+jackson-databind
+jackson-jaxrs-json-provider
+jackson-jaxrs-providers
+jackson-module-jaxb-annotations
+jaf
+jaf-javadoc
+jakarta-commons-httpclient
+jakarta-commons-httpclient-demo
+jakarta-commons-httpclient-javadoc
+jakarta-commons-httpclient-manual
+jakarta-oro
+jakarta-oro-javadoc
+jansi
+jansi-javadoc
+jansi-native
+jansi-native-javadoc
+jansson
+jansson-devel
+jasper-devel
+jasper-libs
+java-11-openjdk
+java-11-openjdk-demo
+java-11-openjdk-devel
+java-11-openjdk-headless
+java-11-openjdk-javadoc
+java-11-openjdk-javadoc-zip
+java-11-openjdk-jmods
+java-11-openjdk-src
+java-1.8.0-ibm
+java-1.8.0-ibm-demo
+java-1.8.0-ibm-devel
+java-1.8.0-ibm-headless
+java-1.8.0-ibm-jdbc
+java-1.8.0-ibm-plugin
+java-1.8.0-ibm-src
+java-1.8.0-ibm-webstart
+java-1.8.0-openjdk
+java-1.8.0-openjdk-accessibility
+java-1.8.0-openjdk-demo
+java-1.8.0-openjdk-devel
+java-1.8.0-openjdk-headless
+java-1.8.0-openjdk-javadoc
+java-1.8.0-openjdk-javadoc-zip
+java-1.8.0-openjdk-src
+java-atk-wrapper
+javacc
+javacc-demo
+javacc-javadoc
+javacc-manual
+javacc-maven-plugin
+javacc-maven-plugin-javadoc
+java_cup
+java_cup-javadoc
+java_cup-manual
+javamail
+javamail-javadoc
+javapackages-filesystem
+javapackages-local
+javapackages-runtime
+javapackages-tools
+javassist
+javassist-javadoc
+jaxen
+jaxen-demo
+jaxen-javadoc
+jbig2dec-libs
+jbigkit-devel
+jbigkit-libs
+jboss-annotations-1.2-api
+jboss-interceptors-1.2-api
+jboss-interceptors-1.2-api-javadoc
+jboss-jaxrs-2.0-api
+jboss-logging
+jboss-logging-tools
+jboss-parent
+jcl-over-slf4j
+jdeparser
+jdepend
+jdepend-demo
+jdependency
+jdependency-javadoc
+jdepend-javadoc
+jdom
+jdom2
+jdom2-javadoc
+jdom-demo
+jdom-javadoc
+jflex
+jflex-javadoc
+jimtcl
+jimtcl-devel
+jline
+jline-javadoc
+jmc
+jmc-core
+jmc-core-javadoc
+jna
+jolokia-jvm-agent
+jomolhari-fonts
+jose
+jq
+jsch
+jsch-javadoc
+json-c
+json-c-devel
+json-c-doc
+json-glib
+json-glib-devel
+jsoup
+jsoup-javadoc
+jsr-305
+jsr-305-javadoc
+jss
+jss-javadoc
+js-uglify
+jtidy
+jtidy-javadoc
+Judy
+julietaula-montserrat-fonts
+jul-to-slf4j
+junit
+junit-javadoc
+junit-manual
+jvnet-parent
+jzlib
+jzlib-demo
+jzlib-javadoc
+kabi-dw
+kacst-art-fonts
+kacst-book-fonts
+kacst-decorative-fonts
+kacst-digital-fonts
+kacst-farsi-fonts
+kacst-fonts-common
+kacst-letter-fonts
+kacst-naskh-fonts
+kacst-office-fonts
+kacst-one-fonts
+kacst-pen-fonts
+kacst-poster-fonts
+kacst-qurn-fonts
+kacst-screen-fonts
+kacst-title-fonts
+kacst-titlel-fonts
+kbd
+kbd-legacy
+kbd-misc
+kdump-anaconda-addon
+keepalived
+kernel
+kernel-abi-whitelists
+kernel-core
+kernel-cross-headers
+kernel-debug
+kernel-debug-core
+kernel-debug-devel
+kernel-debug-modules
+kernel-debug-modules-extra
+kernel-devel
+kernel-doc
+kernel-headers
+kernel-modules
+kernel-modules-extra
+kernel-rpm-macros
+kernelshark
+kernel-tools
+kernel-tools-libs
+kernel-tools-libs-devel
+kernel-zfcpdump
+kernel-zfcpdump-core
+kernel-zfcpdump-devel
+kernel-zfcpdump-modules
+kernel-zfcpdump-modules-extra
+kexec-tools
+keybinder3
+keybinder3-devel
+keybinder3-doc
+keycloak-httpd-client-install
+keyutils
+keyutils-libs
+keyutils-libs-devel
+khmeros-base-fonts
+khmeros-battambang-fonts
+khmeros-bokor-fonts
+khmeros-fonts-common
+khmeros-handwritten-fonts
+khmeros-metal-chrieng-fonts
+khmeros-muol-fonts
+khmeros-siemreap-fonts
+kmod
+kmod-devel
+kmod-kvdo
+kmod-libs
+koan
+kpartx
+kpatch
+krb5-devel
+krb5-libs
+krb5-pkinit
+krb5-server
+krb5-server-ldap
+krb5-workstation
+ksc
+ksh
+kurdit-unikurd-web-fonts
+kyotocabinet-libs
+ladspa
+ladspa-devel
+lame-devel
+lame-libs
+langpacks-af
+langpacks-am
+langpacks-ar
+langpacks-as
+langpacks-ast
+langpacks-be
+langpacks-bg
+langpacks-bn
+langpacks-br
+langpacks-bs
+langpacks-ca
+langpacks-cs
+langpacks-cy
+langpacks-da
+langpacks-de
+langpacks-el
+langpacks-en
+langpacks-en_GB
+langpacks-es
+langpacks-et
+langpacks-eu
+langpacks-fa
+langpacks-fi
+langpacks-fr
+langpacks-ga
+langpacks-gl
+langpacks-gu
+langpacks-he
+langpacks-hi
+langpacks-hr
+langpacks-hu
+langpacks-ia
+langpacks-id
+langpacks-is
+langpacks-it
+langpacks-ja
+langpacks-kk
+langpacks-kn
+langpacks-ko
+langpacks-lt
+langpacks-lv
+langpacks-mai
+langpacks-mk
+langpacks-ml
+langpacks-mr
+langpacks-ms
+langpacks-nb
+langpacks-ne
+langpacks-nl
+langpacks-nn
+langpacks-nr
+langpacks-nso
+langpacks-or
+langpacks-pa
+langpacks-pl
+langpacks-pt
+langpacks-pt_BR
+langpacks-ro
+langpacks-ru
+langpacks-si
+langpacks-sk
+langpacks-sl
+langpacks-sq
+langpacks-sr
+langpacks-ss
+langpacks-sv
+langpacks-ta
+langpacks-te
+langpacks-th
+langpacks-tn
+langpacks-tr
+langpacks-ts
+langpacks-uk
+langpacks-ur
+langpacks-ve
+langpacks-vi
+langpacks-xh
+langpacks-zh_CN
+langpacks-zh_TW
+langpacks-zu
+langtable
+langtable-data
+lapack
+lapack64
+lapack-devel
+lapack-static
+lasso
+latex2html
+lato-fonts
+lcms2
+lcms2-devel
+ldapjdk
+ldapjdk-javadoc
+ldb-tools
+ldns
+ldns-devel
+ledmon
+lemon
+lensfun
+lensfun-devel
+leptonica
+leptonica-devel
+less
+lftp
+lftp-scripts
+liba52
+libabw
+libacl
+libacl-devel
+libaec
+libaec-devel
+libaio
+libaio-devel
+libao
+libao-devel
+libappindicator-gtk3
+libappindicator-gtk3-devel
+libappstream-glib
+libappstream-glib-devel
+libarchive
+libarchive-devel
+libasan
+libassuan
+libassuan-devel
+libasyncns
+libasyncns-devel
+libatasmart
+libatasmart-devel
+libatomic
+libatomic_ops
+libatomic_ops-devel
+libatomic-static
+libattr
+libattr-devel
+libavc1394
+libbabeltrace
+libbase
+libbasicobjects
+libbasicobjects-devel
+libblkid
+libblkid-devel
+libblockdev
+libblockdev-crypto
+libblockdev-dm
+libblockdev-fs
+libblockdev-kbd
+libblockdev-loop
+libblockdev-lvm
+libblockdev-lvm-dbus
+libblockdev-mdraid
+libblockdev-mpath
+libblockdev-nvdimm
+libblockdev-part
+libblockdev-plugins-all
+libblockdev-s390
+libblockdev-swap
+libblockdev-utils
+libblockdev-vdo
+libbluray
+libbpf
+libbpf-devel
+libbpf-static
+libburn
+libburn-devel
+libbytesize
+libcacard
+libcacard-devel
+libcanberra
+libcanberra-devel
+libcanberra-gtk2
+libcanberra-gtk3
+libcap
+libcap-devel
+libcap-ng
+libcap-ng-devel
+libcap-ng-utils
+libcdio
+libcdio-devel
+libcdio-paranoia
+libcdio-paranoia-devel
+libcdr
+libcephfs2
+libcephfs-devel
+libcgroup
+libcgroup-pam
+libcgroup-tools
+libchamplain
+libchamplain-devel
+libchamplain-gtk
+libcmis
+libcmocka
+libcmocka-devel
+libcmpiCppImpl0
+libcollection
+libcollection-devel
+libcom_err
+libcom_err-devel
+libcomps
+libcomps-devel
+libconfig
+libconfig-devel
+libcroco
+libcroco-devel
+libcurl
+libcurl-devel
+libcurl-minimal
+libcxl
+libcxl-devel
+libdaemon
+libdaemon-devel
+libdap
+libdap-devel
+libdatrie
+libdatrie-devel
+libdazzle
+libdb
+libdb-cxx
+libdb-cxx-devel
+libdb-devel
+libdb-devel-doc
+libdb-sql
+libdb-sql-devel
+libdbusmenu
+libdbusmenu-devel
+libdbusmenu-doc
+libdbusmenu-gtk3
+libdbusmenu-gtk3-devel
+libdb-utils
+libdc1394
+libdhash
+libdmapsharing
+libdmmp
+libdmx
+libdnet
+libdnet-devel
+libdnf
+libdrm
+libdrm-devel
+libdv
+libdv-devel
+libdvdnav
+libdvdread
+libdvdread-devel
+libdwarf
+libdwarf-devel
+libdwarf-static
+libdwarf-tools
+libdwarves1
+libeasyfc
+libeasyfc-gobject
+libecap
+libecap-devel
+libedit
+libedit-devel
+libEMF
+libEMF-devel
+libeot
+libepoxy
+libepoxy-devel
+libepubgen
+liberation-fonts
+liberation-fonts-common
+liberation-mono-fonts
+liberation-narrow-fonts
+liberation-sans-fonts
+liberation-serif-fonts
+libertas-sd8686-firmware
+libertas-sd8787-firmware
+libertas-usb8388-firmware
+libertas-usb8388-olpc-firmware
+libestr
+libetonyek
+libetonyek-devel
+libev
+libevdev
+libevdev-devel
+libev-devel
+libevent
+libevent-devel
+libevent-doc
+libev-libevent-devel
+libev-source
+libexif
+libexif-devel
+libexttextcat
+libfabric
+libfabric-devel
+libfastjson
+libfdisk
+libfdisk-devel
+libfdt
+libfdt-devel
+libffi
+libffi-devel
+libfontenc
+libfontenc-devel
+libfonts
+libformula
+libfprint
+libfreehand
+libgcab1
+libgcc
+libgcrypt
+libgcrypt-devel
+libgdata
+libgdata-devel
+libgdither
+libgee
+libgee-devel
+libgexiv2
+libgexiv2-devel
+libgfortran
+libgit2
+libgit2-devel
+libgit2-glib
+libgit2-glib-devel
+libGLEW
+libglvnd
+libglvnd-core-devel
+libglvnd-devel
+libglvnd-egl
+libglvnd-gles
+libglvnd-glx
+libglvnd-opengl
+libgnomekbd
+libgnomekbd-devel
+libgomp
+libgomp-offload-nvptx
+libgovirt
+libgpg-error
+libgpg-error-devel
+libgphoto2
+libgphoto2-devel
+libgpod
+libgpod-devel
+libgpod-doc
+libgs
+libgs-devel
+libgsf
+libgsf-devel
+libgtop2
+libgtop2-devel
+libgudev
+libgudev-devel
+libguestfs
+libguestfs-bash-completion
+libguestfs-benchmarking
+libguestfs-devel
+libguestfs-gfs2
+libguestfs-gobject
+libguestfs-gobject-devel
+libguestfs-inspect-icons
+libguestfs-java
+libguestfs-java-devel
+libguestfs-javadoc
+libguestfs-man-pages-ja
+libguestfs-man-pages-uk
+libguestfs-rescue
+libguestfs-rsync
+libguestfs-tools
+libguestfs-tools-c
+libguestfs-winsupport
+libguestfs-xfs
+libgusb
+libgusb-devel
+libgweather
+libgweather-devel
+libgxps
+libgxps-devel
+libhangul
+libhbaapi
+libhbaapi-devel
+libhbalinux
+libhbalinux-devel
+libhugetlbfs
+libhugetlbfs-devel
+libhugetlbfs-utils
+libi2c
+libibumad
+libibverbs
+libibverbs-utils
+libica
+libica-devel
+libical
+libical-devel
+libICE
+libICE-devel
+libicu
+libicu-devel
+libicu-doc
+libIDL
+libIDL-devel
+libidn
+libidn2
+libidn2-devel
+libidn-devel
+libiec61883
+libiec61883-devel
+libieee1284
+libieee1284-devel
+libijs
+libimobiledevice
+libimobiledevice-devel
+libindicator-gtk3
+libindicator-gtk3-devel
+libini_config
+libini_config-devel
+libinput
+libinput-devel
+libinput-utils
+libipa_hbac
+libipt
+libiptcdata
+libiscsi
+libiscsi-devel
+libiscsi-utils
+libisoburn
+libisoburn-devel
+libisofs
+libisofs-devel
+libitm
+libitm-devel
+libjose
+libjose-devel
+libjpeg-turbo
+libjpeg-turbo-devel
+libjpeg-turbo-utils
+libkadm5
+libkcapi
+libkcapi-hmaccalc
+libkeepalive
+libkkc
+libkkc-common
+libkkc-data
+libknet1
+libknet1-compress-bzip2-plugin
+libknet1-compress-lz4-plugin
+libknet1-compress-lzma-plugin
+libknet1-compress-lzo2-plugin
+libknet1-compress-plugins-all
+libknet1-compress-zlib-plugin
+libknet1-crypto-nss-plugin
+libknet1-crypto-openssl-plugin
+libknet1-crypto-plugins-all
+libknet1-devel
+libknet1-plugins-all
+libksba
+libksba-devel
+liblangtag
+liblangtag-data
+liblangtag-devel
+liblangtag-doc
+liblangtag-gobject
+liblayout
+libldb
+libldb-devel
+libloader
+liblockfile
+liblockfile-devel
+liblognorm
+liblognorm-doc
+liblouis
+liblsan
+libluksmeta
+libluksmeta-devel
+libmad
+libmad-devel
+libmalaga
+libmatchbox
+libmaxminddb
+libmaxminddb-devel
+libmbim
+libmbim-utils
+libmcpp
+libmediaart
+libmemcached
+libmemcached-devel
+libmemcached-libs
+libmetalink
+libmicrohttpd
+libmicrohttpd-devel
+libmicrohttpd-doc
+libmng
+libmng-devel
+libmnl
+libmnl-devel
+libmodman
+libmodulemd
+libmodulemd1
+libmodulemd-devel
+libmount
+libmount-devel
+libmpc
+libmpcdec
+libmpcdec-devel
+libmpc-devel
+libmspack
+libmspack-devel
+libmspub
+libmtp
+libmtp-devel
+libmusicbrainz5
+libmusicbrainz5-devel
+libmwaw
+libndp
+libnet
+libnet-devel
+libnetfilter_conntrack
+libnetfilter_conntrack-devel
+libnetfilter_cthelper
+libnetfilter_cttimeout
+libnetfilter_queue
+libnetfilter_queue-devel
+libnfnetlink
+libnfnetlink-devel
+libnfsidmap
+libnfsidmap-devel
+libnftnl
+libnftnl-devel
+libnghttp2
+libnghttp2-devel
+libnice
+libnice-devel
+libnice-gstreamer1
+libnl3
+libnl3-cli
+libnl3-devel
+libnl3-doc
+libnma
+libnma-devel
+libnotify
+libnotify-devel
+libnozzle1
+libnsl
+libnsl2
+libnsl2-devel
+liboauth
+liboauth-devel
+libocxl
+libocxl-devel
+libocxl-docs
+libodfgen
+libodfgen-devel
+libogg
+libogg-devel
+libogg-devel-docs
+liboggz
+libomp
+libomp-devel
+libomp-test
+libopenraw
+libopenraw-devel
+libopenraw-gnome
+libopenraw-gnome-devel
+liborcus
+libosinfo
+libotf
+libpagemaker
+libpaper
+libpaper-devel
+libpath_utils
+libpath_utils-devel
+libpcap
+libpcap-devel
+libpciaccess
+libpciaccess-devel
+libpeas
+libpeas-devel
+libpeas-gtk
+libpeas-loader-python3
+libpfm
+libpfm-devel
+libpfm-static
+libpinyin
+libpinyin-data
+libpipeline
+libpkgconf
+libplist
+libplist-devel
+libpmem
+libpmemblk
+libpmemblk-debug
+libpmemblk-devel
+libpmem-debug
+libpmem-devel
+libpmemlog
+libpmemlog-debug
+libpmemlog-devel
+libpmemobj
+libpmemobj-debug
+libpmemobj++-devel
+libpmemobj-devel
+libpmemobj++-doc
+libpmempool
+libpmempool-debug
+libpmempool-devel
+libpng
+libpng12
+libpng15
+libpng-devel
+libpq
+libpq-devel
+libproxy
+libproxy-bin
+libproxy-devel
+libproxy-gnome
+libproxy-networkmanager
+libproxy-webkitgtk4
+libpsl
+libpsm2
+libpsm2-compat
+libpsm2-devel
+libpst-libs
+libpurple
+libpurple-devel
+libpwquality
+libpwquality-devel
+libqb
+libqb-devel
+libqhull
+libqhull_p
+libqhull_r
+libqmi
+libqmi-utils
+libquadmath
+libquadmath-devel
+libquvi
+libquvi-devel
+libquvi-scripts
+libqxp
+librabbitmq
+librabbitmq-devel
+librados2
+librados-devel
+libradosstriper1
+libradosstriper-devel
+LibRaw
+libraw1394
+libraw1394-devel
+LibRaw-devel
+librbd1
+librbd-devel
+librdkafka
+librdkafka-devel
+librdmacm
+librdmacm-utils
+libref_array
+libref_array-devel
+librelp
+libreoffice-base
+libreoffice-calc
+libreoffice-core
+libreoffice-data
+libreoffice-draw
+libreoffice-emailmerge
+libreoffice-filters
+libreoffice-gdb-debug-support
+libreoffice-graphicfilter
+libreoffice-gtk2
+libreoffice-gtk3
+libreoffice-help-ar
+libreoffice-help-bg
+libreoffice-help-bn
+libreoffice-help-ca
+libreoffice-help-cs
+libreoffice-help-da
+libreoffice-help-de
+libreoffice-help-dz
+libreoffice-help-el
+libreoffice-help-en
+libreoffice-help-es
+libreoffice-help-et
+libreoffice-help-eu
+libreoffice-help-fi
+libreoffice-help-fr
+libreoffice-help-gl
+libreoffice-help-gu
+libreoffice-help-he
+libreoffice-help-hi
+libreoffice-help-hr
+libreoffice-help-hu
+libreoffice-help-id
+libreoffice-help-it
+libreoffice-help-ja
+libreoffice-help-ko
+libreoffice-help-lt
+libreoffice-help-lv
+libreoffice-help-nb
+libreoffice-help-nl
+libreoffice-help-nn
+libreoffice-help-pl
+libreoffice-help-pt-BR
+libreoffice-help-pt-PT
+libreoffice-help-ro
+libreoffice-help-ru
+libreoffice-help-si
+libreoffice-help-sk
+libreoffice-help-sl
+libreoffice-help-sv
+libreoffice-help-ta
+libreoffice-help-tr
+libreoffice-help-uk
+libreoffice-help-zh-Hans
+libreoffice-help-zh-Hant
+libreoffice-impress
+libreofficekit
+libreoffice-langpack-af
+libreoffice-langpack-ar
+libreoffice-langpack-as
+libreoffice-langpack-bg
+libreoffice-langpack-bn
+libreoffice-langpack-br
+libreoffice-langpack-ca
+libreoffice-langpack-cs
+libreoffice-langpack-cy
+libreoffice-langpack-da
+libreoffice-langpack-de
+libreoffice-langpack-dz
+libreoffice-langpack-el
+libreoffice-langpack-en
+libreoffice-langpack-es
+libreoffice-langpack-et
+libreoffice-langpack-eu
+libreoffice-langpack-fa
+libreoffice-langpack-fi
+libreoffice-langpack-fr
+libreoffice-langpack-ga
+libreoffice-langpack-gl
+libreoffice-langpack-gu
+libreoffice-langpack-he
+libreoffice-langpack-hi
+libreoffice-langpack-hr
+libreoffice-langpack-hu
+libreoffice-langpack-id
+libreoffice-langpack-it
+libreoffice-langpack-ja
+libreoffice-langpack-kk
+libreoffice-langpack-kn
+libreoffice-langpack-ko
+libreoffice-langpack-lt
+libreoffice-langpack-lv
+libreoffice-langpack-mai
+libreoffice-langpack-ml
+libreoffice-langpack-mr
+libreoffice-langpack-nb
+libreoffice-langpack-nl
+libreoffice-langpack-nn
+libreoffice-langpack-nr
+libreoffice-langpack-nso
+libreoffice-langpack-or
+libreoffice-langpack-pa
+libreoffice-langpack-pl
+libreoffice-langpack-pt-BR
+libreoffice-langpack-pt-PT
+libreoffice-langpack-ro
+libreoffice-langpack-ru
+libreoffice-langpack-si
+libreoffice-langpack-sk
+libreoffice-langpack-sl
+libreoffice-langpack-sr
+libreoffice-langpack-ss
+libreoffice-langpack-st
+libreoffice-langpack-sv
+libreoffice-langpack-ta
+libreoffice-langpack-te
+libreoffice-langpack-th
+libreoffice-langpack-tn
+libreoffice-langpack-tr
+libreoffice-langpack-ts
+libreoffice-langpack-uk
+libreoffice-langpack-ve
+libreoffice-langpack-xh
+libreoffice-langpack-zh-Hans
+libreoffice-langpack-zh-Hant
+libreoffice-langpack-zu
+libreoffice-math
+libreoffice-ogltrans
+libreoffice-opensymbol-fonts
+libreoffice-pdfimport
+libreoffice-pyuno
+libreoffice-sdk
+libreoffice-sdk-doc
+libreoffice-ure
+libreoffice-ure-common
+libreoffice-voikko
+libreoffice-wiki-publisher
+libreoffice-writer
+libreoffice-x11
+libreoffice-xsltfilter
+librepo
+libreport
+libreport-anaconda
+libreport-cli
+libreport-filesystem
+libreport-gtk
+libreport-newt
+libreport-plugin-bugzilla
+libreport-plugin-kerneloops
+libreport-plugin-logger
+libreport-plugin-mailx
+libreport-plugin-reportuploader
+libreport-plugin-rhtsupport
+libreport-plugin-ureport
+libreport-rhel
+libreport-rhel-anaconda-bugzilla
+libreport-rhel-bugzilla
+libreport-web
+librepository
+libreswan
+librevenge
+librevenge-devel
+librevenge-gdb
+librhsm
+librpmem
+librpmem-debug
+librpmem-devel
+librsvg2
+librsvg2-devel
+librsvg2-tools
+librtas
+librtas-devel
+librx
+librx-devel
+libsamplerate
+libsamplerate-devel
+libsane-hpaio
+libsass
+libsass-devel
+libseccomp
+libseccomp-devel
+libsecret
+libsecret-devel
+libselinux
+libselinux-devel
+libselinux-python
+libselinux-ruby
+libselinux-utils
+libsemanage
+libsepol
+libsepol-devel
+libsepol-static
+libserf
+libserializer
+libservicelog
+libservicelog-devel
+libshout
+libshout-devel
+libsigc++20
+libsigc++20-devel
+libsigc++20-doc
+libsigsegv
+libsigsegv-devel
+libSM
+libsmartcols
+libsmartcols-devel
+libsmbclient
+libsmbclient-devel
+libsmbios
+libSM-devel
+libsmi
+libsndfile
+libsndfile-devel
+libsolv
+libsoup
+libsoup-devel
+libspectre
+libspectre-devel
+libspiro
+libsrtp
+libsrtp-devel
+libss
+libssh
+libssh-config
+libssh-devel
+libsss_autofs
+libsss_certmap
+libsss_idmap
+libsss_nss_idmap
+libsss_nss_idmap-devel
+libsss_simpleifp
+libsss_sudo
+libstaroffice
+libstdc++
+libstdc++-devel
+libstdc++-docs
+libstdc++-static
+libstemmer
+libstemmer-devel
+libstoragemgmt
+libstoragemgmt-arcconf-plugin
+libstoragemgmt-hpsa-plugin
+libstoragemgmt-local-plugin
+libstoragemgmt-megaraid-plugin
+libstoragemgmt-nfs-plugin
+libstoragemgmt-nfs-plugin-clibs
+libstoragemgmt-nstor-plugin
+libstoragemgmt-smis-plugin
+libstoragemgmt-udev
+libsysfs
+libsysfs-devel
+libtalloc
+libtalloc-devel
+libtar
+libtasn1
+libtasn1-devel
+libtasn1-tools
+libtdb
+libtdb-devel
+libteam
+libteam-doc
+libtevent
+libtevent-devel
+libthai
+libthai-devel
+libtheora
+libtheora-devel
+libtiff
+libtiff-devel
+libtiff-tools
+libtimezonemap
+libtirpc
+libtirpc-devel
+libtool
+libtool-ltdl
+libtool-ltdl-devel
+libtsan
+libubsan
+libucil
+libucil-devel
+libudisks2
+libunicap
+libunicap-devel
+libuninameslist
+libunistring
+libunistring-devel
+liburing
+libusal
+libusb
+libusb-devel
+libusbmuxd
+libusbmuxd-devel
+libusbx
+libusbx-devel
+libusbx-devel-doc
+libuser
+libutempter
+libutempter-devel
+libuuid
+libuuid-devel
+libuv
+libv4l
+libv4l-devel
+libva
+libva-devel
+libvarlink
+libvarlink-devel
+libvarlink-util
+libvdpau
+libvdpau-devel
+libverto
+libverto-devel
+libverto-libevent
+libvirt
+libvirt-admin
+libvirt-bash-completion
+libvirt-client
+libvirt-daemon
+libvirt-daemon-config-network
+libvirt-daemon-config-nwfilter
+libvirt-daemon-driver-interface
+libvirt-daemon-driver-network
+libvirt-daemon-driver-nodedev
+libvirt-daemon-driver-nwfilter
+libvirt-daemon-driver-qemu
+libvirt-daemon-driver-secret
+libvirt-daemon-driver-storage
+libvirt-daemon-driver-storage-core
+libvirt-daemon-driver-storage-disk
+libvirt-daemon-driver-storage-gluster
+libvirt-daemon-driver-storage-iscsi
+libvirt-daemon-driver-storage-logical
+libvirt-daemon-driver-storage-mpath
+libvirt-daemon-driver-storage-rbd
+libvirt-daemon-driver-storage-scsi
+libvirt-daemon-kvm
+libvirt-dbus
+libvirt-devel
+libvirt-docs
+libvirt-gconfig
+libvirt-glib
+libvirt-gobject
+libvirt-libs
+libvirt-lock-sanlock
+libvirt-nss
+libvisio
+libvisio-devel
+libvisual
+libvisual-devel
+libvma
+libvmem
+libvmem-debug
+libvmem-devel
+libvmmalloc
+libvmmalloc-debug
+libvmmalloc-devel
+libvncserver
+libvncserver-devel
+libvoikko
+libvorbis
+libvorbis-devel
+libvorbis-devel-docs
+libvpd
+libvpd-devel
+libvpx
+libvpx-devel
+libwacom
+libwacom-data
+libwacom-devel
+libwayland-client
+libwayland-cursor
+libwayland-egl
+libwayland-server
+libwbclient
+libwbclient-devel
+libwebp
+libwebp-devel
+libwinpr
+libwinpr-devel
+libwmf
+libwmf-devel
+libwmf-lite
+libwnck3
+libwnck3-devel
+libwpd
+libwpd-devel
+libwpd-doc
+libwpg
+libwpg-devel
+libwpg-doc
+libwps
+libwps-devel
+libwps-doc
+libwsman1
+libwsman-devel
+libX11
+libX11-common
+libX11-devel
+libX11-xcb
+libXau
+libXau-devel
+libXaw
+libXaw-devel
+libxcb
+libxcb-devel
+libXcomposite
+libXcomposite-devel
+libxcrypt
+libxcrypt-devel
+libxcrypt-static
+libXcursor
+libXcursor-devel
+libXdamage
+libXdamage-devel
+libXdmcp
+libXdmcp-devel
+libXext
+libXext-devel
+libXfixes
+libXfixes-devel
+libXfont2
+libXfont2-devel
+libXft
+libXft-devel
+libXi
+libXi-devel
+libXinerama
+libXinerama-devel
+libxkbcommon
+libxkbcommon-devel
+libxkbcommon-x11
+libxkbcommon-x11-devel
+libxkbfile
+libxkbfile-devel
+libxklavier
+libxklavier-devel
+libxml2
+libxml2-devel
+libXmu
+libXmu-devel
+libXNVCtrl
+libXNVCtrl-devel
+libXp
+libXp-devel
+libXpm
+libXpm-devel
+libXrandr
+libXrandr-devel
+libXrender
+libXrender-devel
+libXres
+libXres-devel
+libXScrnSaver
+libXScrnSaver-devel
+libxshmfence
+libxshmfence-devel
+libxslt
+libxslt-devel
+libXt
+libXt-devel
+libXtst
+libXtst-devel
+libXv
+libXv-devel
+libXvMC
+libXvMC-devel
+libXxf86dga
+libXxf86dga-devel
+libXxf86misc
+libXxf86misc-devel
+libXxf86vm
+libXxf86vm-devel
+libyami
+libyaml
+libyaml-devel
+libyang
+libzfcphbaapi
+libzfcphbaapi-docs
+libzhuyin
+libzip
+libzip-devel
+libzip-tools
+libzmf
+libzstd
+libzstd-devel
+linuxconsoletools
+linuxdoc-tools
+linux-firmware
+linuxptp
+lklug-fonts
+lksctp-tools
+lksctp-tools-devel
+lksctp-tools-doc
+lld
+lldb
+lldb-devel
+lld-devel
+lld-libs
+lldpad
+lldpd
+lldpd-devel
+lld-test
+llvm
+llvm-devel
+llvm-doc
+llvm-googletest
+llvm-libs
+llvm-static
+llvm-test
+llvm-toolset
+lmdb-libs
+lm_sensors
+lm_sensors-devel
+lm_sensors-libs
+lm_sensors-sensord
+lockdev
+lockdev-devel
+log4j12
+log4j12-javadoc
+log4j-over-slf4j
+logrotate
+logwatch
+lohit-assamese-fonts
+lohit-bengali-fonts
+lohit-devanagari-fonts
+lohit-gujarati-fonts
+lohit-gurmukhi-fonts
+lohit-kannada-fonts
+lohit-malayalam-fonts
+lohit-marathi-fonts
+lohit-nepali-fonts
+lohit-odia-fonts
+lohit-tamil-fonts
+lohit-telugu-fonts
+lorax
+lorax-composer
+lorax-lmc-novirt
+lorax-lmc-virt
+lorax-templates-generic
+lorax-templates-rhel
+lpsolve
+lrzsz
+lshw
+lshw-gui
+lsof
+lsscsi
+lsvpd
+ltrace
+lttng-ust
+lttng-ust-devel
+lua
+lua-devel
+lua-expat
+lua-filesystem
+lua-guestfs
+lua-json
+lua-libs
+lua-lpeg
+lua-lunit
+lua-posix
+lua-socket
+luksmeta
+lvm2
+lvm2-dbusd
+lvm2-devel
+lvm2-libs
+lvm2-lockd
+lynx
+lz4
+lz4-devel
+lz4-libs
+lzo
+lzo-devel
+lzo-minilzo
+lzop
+m17n-db
+m17n-lib
+m4
+madan-fonts
+mailcap
+mailman
+mailx
+make
+make-devel
+malaga
+malaga-suomi-voikko
+mallard-rng
+man-db
+man-db-cron
+man-pages
+man-pages-overrides
+mariadb
+mariadb-backup
+mariadb-common
+mariadb-connector-c
+mariadb-connector-c-config
+mariadb-connector-c-devel
+mariadb-connector-odbc
+mariadb-devel
+mariadb-embedded
+mariadb-embedded-devel
+mariadb-errmsg
+mariadb-gssapi-server
+mariadb-java-client
+mariadb-oqgraph-engine
+mariadb-server
+mariadb-server-galera
+mariadb-server-utils
+mariadb-test
+marisa
+matchbox-window-manager
+maven
+maven2-javadoc
+maven-antrun-plugin
+maven-antrun-plugin-javadoc
+maven-archiver
+maven-archiver-javadoc
+maven-artifact
+maven-artifact-manager
+maven-artifact-resolver
+maven-artifact-resolver-javadoc
+maven-artifact-transfer
+maven-artifact-transfer-javadoc
+maven-assembly-plugin
+maven-assembly-plugin-javadoc
+maven-cal10n-plugin
+maven-clean-plugin
+maven-clean-plugin-javadoc
+maven-common-artifact-filters
+maven-common-artifact-filters-javadoc
+maven-compiler-plugin
+maven-compiler-plugin-javadoc
+maven-dependency-analyzer
+maven-dependency-analyzer-javadoc
+maven-dependency-plugin
+maven-dependency-plugin-javadoc
+maven-dependency-tree
+maven-dependency-tree-javadoc
+maven-doxia
+maven-doxia-core
+maven-doxia-javadoc
+maven-doxia-logging-api
+maven-doxia-module-apt
+maven-doxia-module-confluence
+maven-doxia-module-docbook-simple
+maven-doxia-module-fml
+maven-doxia-module-latex
+maven-doxia-module-rtf
+maven-doxia-modules
+maven-doxia-module-twiki
+maven-doxia-module-xdoc
+maven-doxia-module-xhtml
+maven-doxia-sink-api
+maven-doxia-sitetools
+maven-doxia-sitetools-javadoc
+maven-doxia-test-docs
+maven-doxia-tests
+maven-enforcer
+maven-enforcer-api
+maven-enforcer-javadoc
+maven-enforcer-plugin
+maven-enforcer-rules
+maven-failsafe-plugin
+maven-file-management
+maven-file-management-javadoc
+maven-filtering
+maven-filtering-javadoc
+maven-hawtjni-plugin
+maven-install-plugin
+maven-install-plugin-javadoc
+maven-invoker
+maven-invoker-javadoc
+maven-invoker-plugin
+maven-invoker-plugin-javadoc
+maven-jar-plugin
+maven-jar-plugin-javadoc
+maven-javadoc
+maven-lib
+maven-local
+maven-model
+maven-monitor
+maven-openjdk11
+maven-openjdk8
+maven-parent
+maven-plugin-annotations
+maven-plugin-build-helper
+maven-plugin-build-helper-javadoc
+maven-plugin-bundle
+maven-plugin-bundle-javadoc
+maven-plugin-descriptor
+maven-plugin-plugin
+maven-plugin-registry
+maven-plugins-pom
+maven-plugin-testing
+maven-plugin-testing-harness
+maven-plugin-testing-javadoc
+maven-plugin-testing-tools
+maven-plugin-tools
+maven-plugin-tools-annotations
+maven-plugin-tools-ant
+maven-plugin-tools-api
+maven-plugin-tools-beanshell
+maven-plugin-tools-generators
+maven-plugin-tools-java
+maven-plugin-tools-javadoc
+maven-plugin-tools-javadocs
+maven-plugin-tools-model
+maven-profile
+maven-project
+maven-remote-resources-plugin
+maven-remote-resources-plugin-javadoc
+maven-reporting-api
+maven-reporting-api-javadoc
+maven-reporting-impl
+maven-reporting-impl-javadoc
+maven-resolver
+maven-resolver-api
+maven-resolver-connector-basic
+maven-resolver-impl
+maven-resolver-javadoc
+maven-resolver-spi
+maven-resolver-test-util
+maven-resolver-transport-classpath
+maven-resolver-transport-file
+maven-resolver-transport-http
+maven-resolver-transport-wagon
+maven-resolver-util
+maven-resources-plugin
+maven-resources-plugin-javadoc
+maven-script
+maven-script-ant
+maven-script-beanshell
+maven-script-interpreter
+maven-script-interpreter-javadoc
+maven-settings
+maven-shade-plugin
+maven-shade-plugin-javadoc
+maven-shared
+maven-shared-incremental
+maven-shared-incremental-javadoc
+maven-shared-io
+maven-shared-io-javadoc
+maven-shared-utils
+maven-shared-utils-javadoc
+maven-source-plugin
+maven-source-plugin-javadoc
+maven-surefire
+maven-surefire-javadoc
+maven-surefire-plugin
+maven-surefire-provider-junit
+maven-surefire-provider-testng
+maven-surefire-report-parser
+maven-surefire-report-plugin
+maven-test-tools
+maven-toolchain
+maven-verifier
+maven-verifier-javadoc
+maven-wagon
+maven-wagon-file
+maven-wagon-ftp
+maven-wagon-http
+maven-wagon-http-lightweight
+maven-wagon-http-shared
+maven-wagon-javadoc
+maven-wagon-provider-api
+maven-wagon-providers
+mc
+mcelog
+mcpp
+mcstrans
+mdadm
+meanwhile
+mecab
+mecab-ipadic
+mecab-ipadic-EUCJP
+media-player-info
+memcached
+memkind
+memkind-devel
+memtest86+
+mercurial
+mercurial-hgk
+mesa-dri-drivers
+mesa-filesystem
+mesa-libEGL
+mesa-libEGL-devel
+mesa-libgbm
+mesa-libgbm-devel
+mesa-libGL
+mesa-libglapi
+mesa-libGL-devel
+mesa-libGLU
+mesa-libGLU-devel
+mesa-libGLw
+mesa-libGLw-devel
+mesa-libOSMesa
+mesa-libOSMesa-devel
+mesa-libxatracker
+mesa-vdpau-drivers
+mesa-vulkan-devel
+mesa-vulkan-drivers
+meson
+metacity
+metis
+metis-devel
+microcode_ctl
+microdnf
+mingw32-binutils
+mingw32-bzip2
+mingw32-bzip2-static
+mingw32-cairo
+mingw32-cpp
+mingw32-crt
+mingw32-expat
+mingw32-filesystem
+mingw32-fontconfig
+mingw32-freetype
+mingw32-freetype-static
+mingw32-gcc
+mingw32-gcc-c++
+mingw32-gettext
+mingw32-gettext-static
+mingw32-glib2
+mingw32-glib2-static
+mingw32-gstreamer1
+mingw32-harfbuzz
+mingw32-harfbuzz-static
+mingw32-headers
+mingw32-icu
+mingw32-libffi
+mingw32-libjpeg-turbo
+mingw32-libjpeg-turbo-static
+mingw32-libpng
+mingw32-libpng-static
+mingw32-libtiff
+mingw32-libtiff-static
+mingw32-openssl
+mingw32-pcre
+mingw32-pcre-static
+mingw32-pixman
+mingw32-pkg-config
+mingw32-readline
+mingw32-spice-vdagent
+mingw32-sqlite
+mingw32-sqlite-static
+mingw32-termcap
+mingw32-win-iconv
+mingw32-win-iconv-static
+mingw32-winpthreads
+mingw32-winpthreads-static
+mingw32-zlib
+mingw32-zlib-static
+mingw64-binutils
+mingw64-bzip2
+mingw64-bzip2-static
+mingw64-cairo
+mingw64-cpp
+mingw64-crt
+mingw64-expat
+mingw64-filesystem
+mingw64-fontconfig
+mingw64-freetype
+mingw64-freetype-static
+mingw64-gcc
+mingw64-gcc-c++
+mingw64-gettext
+mingw64-gettext-static
+mingw64-glib2
+mingw64-glib2-static
+mingw64-gstreamer1
+mingw64-harfbuzz
+mingw64-harfbuzz-static
+mingw64-headers
+mingw64-icu
+mingw64-libffi
+mingw64-libjpeg-turbo
+mingw64-libjpeg-turbo-static
+mingw64-libpng
+mingw64-libpng-static
+mingw64-libtiff
+mingw64-libtiff-static
+mingw64-openssl
+mingw64-pcre
+mingw64-pcre-static
+mingw64-pixman
+mingw64-pkg-config
+mingw64-readline
+mingw64-spice-vdagent
+mingw64-sqlite
+mingw64-sqlite-static
+mingw64-termcap
+mingw64-win-iconv
+mingw64-win-iconv-static
+mingw64-winpthreads
+mingw64-winpthreads-static
+mingw64-zlib
+mingw64-zlib-static
+mingw-binutils-generic
+mingw-filesystem-base
+minicom
+mksh
+mlocate
+mobile-broadband-provider-info
+mockito
+mockito-javadoc
+mod_auth_gssapi
+mod_auth_mellon
+mod_auth_mellon-diagnostics
+mod_authnz_pam
+mod_auth_openidc
+mod_dav_svn
+modello
+modello-javadoc
+ModemManager
+ModemManager-devel
+ModemManager-glib
+ModemManager-glib-devel
+mod_fcgid
+mod_http2
+mod_intercept_form_submit
+mod_ldap
+mod_lookup_identity
+mod_md
+mod_proxy_html
+mod_security
+mod_security_crs
+mod_security-mlogc
+mod_session
+mod_ssl
+Module
+mojo-parent
+mokutil
+motif
+motif-devel
+motif-static
+mousetweaks
+mozilla-filesystem
+mozjs52
+mozjs52-devel
+mozjs60
+mozjs60-devel
+mozvoikko
+mpfr
+mpfr-devel
+mpg123
+mpg123-devel
+mpg123-libs
+mpg123-plugins-pulseaudio
+mpich
+mpich-devel
+mpitests-mpich
+mpitests-mvapich2
+mpitests-mvapich2-psm2
+mpitests-openmpi
+mrtg
+mstflint
+mtdev
+mtdev-devel
+mtools
+mtr
+mtr-gtk
+mt-st
+mtx
+multilib-rpm-config
+munge
+munge-devel
+munge-libs
+munge-maven-plugin
+munge-maven-plugin-javadoc
+mutt
+mutter
+mutter-devel
+mvapich2
+mvapich2-psm2
+mysql
+mysql-common
+mysql-devel
+mysql-errmsg
+mysql-libs
+mysql-server
+mysql-test
+mythes
+mythes-bg
+mythes-ca
+mythes-cs
+mythes-da
+mythes-de
+mythes-devel
+mythes-el
+mythes-en
+mythes-es
+mythes-fr
+mythes-ga
+mythes-hu
+mythes-it
+mythes-lb
+mythes-lv
+mythes-mi
+mythes-nb
+mythes-ne
+mythes-nl
+mythes-nn
+mythes-pl
+mythes-pt
+mythes-ro
+mythes-ru
+mythes-sk
+mythes-sl
+mythes-sv
+mythes-uk
+nafees-web-naskh-fonts
+nano
+nasm
+nautilus
+nautilus-devel
+nautilus-extensions
+nautilus-sendto
+navilu-fonts
+nbdkit
+nbdkit-bash-completion
+nbdkit-basic-plugins
+nbdkit-devel
+nbdkit-example-plugins
+nbdkit-plugin-gzip
+nbdkit-plugin-python3
+nbdkit-plugin-python-common
+nbdkit-plugin-vddk
+nbdkit-plugin-xz
+ncompress
+ncurses
+ncurses-base
+ncurses-c++-libs
+ncurses-compat-libs
+ncurses-devel
+ncurses-libs
+ncurses-term
+ndctl
+ndctl-devel
+ndctl-libs
+neon
+neon-devel
+netcf
+netcf-devel
+netcf-libs
+netconsole-service
+netlabel_tools
+netpbm
+netpbm-devel
+netpbm-doc
+netpbm-progs
+net-snmp
+net-snmp-agent-libs
+net-snmp-devel
+net-snmp-libs
+net-snmp-utils
+netstandard-targeting-pack-2.1
+nettle
+nettle-devel
+net-tools
+NetworkManager
+NetworkManager-adsl
+network-manager-applet
+NetworkManager-bluetooth
+NetworkManager-cloud-setup
+NetworkManager-config-connectivity-redhat
+NetworkManager-config-server
+NetworkManager-dispatcher-routing-rules
+NetworkManager-libnm
+NetworkManager-libnm-devel
+NetworkManager-libreswan
+NetworkManager-libreswan-gnome
+NetworkManager-ovs
+NetworkManager-ppp
+NetworkManager-team
+NetworkManager-tui
+NetworkManager-wifi
+NetworkManager-wwan
+network-scripts
+network-scripts-ppp
+network-scripts-team
+newt
+newt-devel
+nfs4-acl-tools
+nfs-utils
+nftables
+nghttp2
+nginx
+nginx-all-modules
+nginx-filesystem
+nginx-mod-http-image-filter
+nginx-mod-http-perl
+nginx-mod-http-xslt-filter
+nginx-mod-mail
+nginx-mod-stream
+ninja-build
+nkf
+nmap
+nmap-ncat
+nm-connection-editor
+nmstate
+nodejs
+nodejs-devel
+nodejs-docs
+nodejs-nodemon
+nodejs-packaging
+npm
+npth
+nscd
+nspr
+nspr-devel
+nss
+nss-altfiles
+nss_db
+nss-devel
+nss_hesiod
+nss_nis
+nss-pam-ldapd
+nss-softokn
+nss-softokn-devel
+nss-softokn-freebl
+nss-softokn-freebl-devel
+nss-sysinit
+nss-tools
+nss-util
+nss-util-devel
+nss_wrapper
+ntpstat
+ntsysv
+numactl
+numactl-devel
+numactl-libs
+numad
+numatop
+nvme-cli
+nvmetcli
+objectweb-asm
+objectweb-asm-javadoc
+objectweb-pom
+objenesis
+objenesis-javadoc
+ocaml
+ocaml-camlp4
+ocaml-camlp4-devel
+ocaml-compiler-libs
+ocaml-cppo
+ocaml-extlib
+ocaml-extlib-devel
+ocaml-findlib
+ocaml-findlib-devel
+ocaml-hivex
+ocaml-hivex-devel
+ocaml-labltk
+ocaml-labltk-devel
+ocaml-libguestfs
+ocaml-libguestfs-devel
+ocaml-ocamlbuild
+ocaml-ocamlbuild-devel
+ocaml-ocamldoc
+ocaml-runtime
+ocaml-srpm-macros
+oci-systemd-hook
+oci-umount
+ocl-icd
+ocl-icd-devel
+oddjob
+oddjob-mkhomedir
+omping
+ongres-scram
+ongres-scram-client
+oniguruma
+oniguruma-devel
+opa-address-resolution
+opa-basic-tools
+opa-fastfabric
+opa-fm
+opal-firmware
+opa-libopamgt
+opal-prd
+opal-utils
+openal-soft
+openal-soft-devel
+openblas
+openblas-devel
+openblas-openmp
+openblas-openmp64
+openblas-openmp64_
+openblas-Rblas
+openblas-serial64
+openblas-serial64_
+openblas-srpm-macros
+openblas-static
+openblas-threads
+openblas-threads64
+openblas-threads64_
+openchange
+opencl-filesystem
+opencl-headers
+opencryptoki
+opencryptoki-ccatok
+opencryptoki-devel
+opencryptoki-ep11tok
+opencryptoki-icatok
+opencryptoki-icsftok
+opencryptoki-libs
+opencryptoki-swtok
+opencryptoki-tpmtok
+opencv-contrib
+opencv-core
+opencv-devel
+opendnssec
+OpenEXR-devel
+OpenEXR-libs
+openhpi
+openhpi-libs
+OpenIPMI
+OpenIPMI-devel
+OpenIPMI-lanserv
+OpenIPMI-libs
+OpenIPMI-perl
+openjade
+openjpeg2
+openjpeg2-devel
+openjpeg2-devel-docs
+openjpeg2-tools
+openldap
+openldap-clients
+openldap-devel
+openmpi
+openmpi-devel
+open-sans-fonts
+opensc
+openscap
+openscap-devel
+openscap-engine-sce
+openscap-engine-sce-devel
+openscap-python3
+openscap-scanner
+openscap-utils
+openslp
+opensm
+opensm-devel
+opensm-libs
+opensp
+opensp-devel
+openssh
+openssh-askpass
+openssh-cavs
+openssh-clients
+openssh-keycat
+openssh-ldap
+openssh-server
+openssl
+openssl-devel
+openssl-ibmca
+openssl-ibmpkcs11
+openssl-libs
+openssl-perl
+openssl-pkcs11
+open-vm-tools
+open-vm-tools-desktop
+openwsman-client
+openwsman-python3
+openwsman-server
+opus
+opus-devel
+orc
+orca
+orc-compiler
+orc-devel
+osad
+oscap-anaconda-addon
+osgi-annotation
+osgi-annotation-javadoc
+osgi-compendium
+osgi-compendium-javadoc
+osgi-core
+osgi-core-javadoc
+osinfo-db
+osinfo-db-tools
+os-maven-plugin
+os-maven-plugin-javadoc
+os-prober
+ostree
+ostree-devel
+ostree-grub2
+ostree-libs
+overpass-fonts
+overpass-mono-fonts
+owasp-java-encoder
+owasp-java-encoder-javadoc
+p11-kit
+p11-kit-devel
+p11-kit-server
+p11-kit-trust
+pacemaker
+pacemaker-cli
+pacemaker-cluster-libs
+pacemaker-cts
+pacemaker-doc
+pacemaker-libs
+pacemaker-libs-devel
+pacemaker-nagios-plugins-metadata
+pacemaker-remote
+pacemaker-schemas
+Package
+PackageKit
+PackageKit-command-not-found
+PackageKit-cron
+PackageKit-glib
+PackageKit-glib-devel
+PackageKit-gstreamer-plugin
+PackageKit-gtk3-module
+pakchois
+paktype-naqsh-fonts
+paktype-naskh-basic-fonts
+paktype-tehreer-fonts
+pam
+pam_cifscreds
+pam-devel
+pam_ssh_agent_auth
+pandoc
+pandoc-common
+pango
+pango-devel
+pangomm
+pangomm-devel
+pangomm-doc
+papi
+papi-devel
+papi-libs
+papi-testsuite
+paps
+paps-libs
+paratype-pt-sans-caption-fonts
+paratype-pt-sans-fonts
+parfait
+parfait-examples
+parfait-javadoc
+parted
+parted-devel
+passwd
+patch
+patchutils
+pavucontrol
+pcaudiolib
+pciutils
+pciutils-devel
+pciutils-libs
+pcp
+pcp-conf
+pcp-devel
+pcp-doc
+pcp-export-pcp2elasticsearch
+pcp-export-pcp2graphite
+pcp-export-pcp2influxdb
+pcp-export-pcp2json
+pcp-export-pcp2spark
+pcp-export-pcp2xml
+pcp-export-pcp2zabbix
+pcp-export-zabbix-agent
+pcp-gui
+pcp-import-collectl2pcp
+pcp-import-ganglia2pcp
+pcp-import-iostat2pcp
+pcp-import-mrtg2pcp
+pcp-import-sar2pcp
+pcp-libs
+pcp-libs-devel
+pcp-manager
+pcp-parfait-agent
+pcp-pmda-activemq
+pcp-pmda-apache
+pcp-pmda-bash
+pcp-pmda-bcc
+pcp-pmda-bind2
+pcp-pmda-bonding
+pcp-pmda-bpftrace
+pcp-pmda-cifs
+pcp-pmda-cisco
+pcp-pmda-dbping
+pcp-pmda-dm
+pcp-pmda-docker
+pcp-pmda-ds389
+pcp-pmda-ds389log
+pcp-pmda-elasticsearch
+pcp-pmda-gfs2
+pcp-pmda-gluster
+pcp-pmda-gpfs
+pcp-pmda-gpsd
+pcp-pmda-haproxy
+pcp-pmda-infiniband
+pcp-pmda-json
+pcp-pmda-libvirt
+pcp-pmda-lio
+pcp-pmda-lmsensors
+pcp-pmda-logger
+pcp-pmda-lustre
+pcp-pmda-lustrecomm
+pcp-pmda-mailq
+pcp-pmda-memcache
+pcp-pmda-mic
+pcp-pmda-mounts
+pcp-pmda-mssql
+pcp-pmda-mysql
+pcp-pmda-named
+pcp-pmda-netcheck
+pcp-pmda-netfilter
+pcp-pmda-news
+pcp-pmda-nfsclient
+pcp-pmda-nginx
+pcp-pmda-nvidia-gpu
+pcp-pmda-openmetrics
+pcp-pmda-oracle
+pcp-pmda-pdns
+pcp-pmda-perfevent
+pcp-pmda-podman
+pcp-pmda-postfix
+pcp-pmda-postgresql
+pcp-pmda-redis
+pcp-pmda-roomtemp
+pcp-pmda-rpm
+pcp-pmda-rsyslog
+pcp-pmda-samba
+pcp-pmda-sendmail
+pcp-pmda-shping
+pcp-pmda-slurm
+pcp-pmda-smart
+pcp-pmda-snmp
+pcp-pmda-summary
+pcp-pmda-systemd
+pcp-pmda-trace
+pcp-pmda-unbound
+pcp-pmda-vmware
+pcp-pmda-weblog
+pcp-pmda-zimbra
+pcp-pmda-zswap
+pcp-selinux
+pcp-system-tools
+pcp-testsuite
+pcp-zeroconf
+pcre
+pcre2
+pcre2-devel
+pcre2-utf16
+pcre2-utf32
+pcre-cpp
+pcre-devel
+pcre-static
+pcre-utf16
+pcre-utf32
+pcs
+pcsc-lite
+pcsc-lite-ccid
+pcsc-lite-devel
+pcsc-lite-doc
+pcsc-lite-libs
+pcs-snmp
+pentaho-libxml
+pentaho-reporting-flow-engine
+perf
+perftest
+peripety
+perl
+perl-Algorithm-Diff
+perl-AnyEvent
+perl-App-cpanminus
+perl-Archive-Tar
+perl-Archive-Zip
+perl-Attribute-Handlers
+perl-Authen-SASL
+perl-autodie
+perl-B-Debug
+perl-B-Hooks-EndOfScope
+perl-bignum
+perl-Bit-Vector
+perl-B-Lint
+perl-Canary-Stability
+perl-Capture-Tiny
+perl-Carp
+perl-Carp-Clan
+perl-CGI
+perl-Class-Accessor
+perl-Class-Data-Inheritable
+perl-Class-Factory-Util
+perl-Class-Inspector
+perl-Class-ISA
+perl-Class-Method-Modifiers
+perl-Class-Singleton
+perl-Class-Tiny
+perl-Class-XSAccessor
+perl-Clone
+perl-common-sense
+perl-Compress-Bzip2
+perl-Compress-Raw-Bzip2
+perl-Compress-Raw-Zlib
+perl-Config-AutoConf
+perl-Config-Perl-V
+perl-constant
+perl-Convert-ASN1
+perl-core
+perl-CPAN
+perl-CPAN-DistnameInfo
+perl-CPAN-Meta
+perl-CPAN-Meta-Check
+perl-CPAN-Meta-Requirements
+perl-CPAN-Meta-YAML
+perl-Crypt-OpenSSL-Bignum
+perl-Crypt-OpenSSL-Random
+perl-Crypt-OpenSSL-RSA
+perl-Data-Dump
+perl-Data-Dumper
+perl-Data-OptList
+perl-Data-Section
+perl-Data-UUID
+perl-Date-Calc
+perl-Date-ISO8601
+perl-Date-Manip
+perl-DateTime
+perl-DateTime-Format-Builder
+perl-DateTime-Format-HTTP
+perl-DateTime-Format-ISO8601
+perl-DateTime-Format-Mail
+perl-DateTime-Format-Strptime
+perl-DateTime-Locale
+perl-DateTime-TimeZone
+perl-DateTime-TimeZone-SystemV
+perl-DateTime-TimeZone-Tzfile
+perl-DBD-MySQL
+perl-DBD-Pg
+perl-DBD-SQLite
+perl-DB_File
+perl-DBI
+perl-devel
+perl-Devel-CallChecker
+perl-Devel-Caller
+perl-Devel-CheckLib
+perl-Devel-GlobalDestruction
+perl-Devel-LexAlias
+perl-Devel-Peek
+perl-Devel-PPPort
+perl-Devel-SelfStubber
+perl-Devel-Size
+perl-Devel-StackTrace
+perl-Devel-Symdump
+perl-Digest
+perl-Digest-CRC
+perl-Digest-HMAC
+perl-Digest-MD5
+perl-Digest-SHA
+perl-Digest-SHA1
+perl-Dist-CheckConflicts
+perl-DynaLoader-Functions
+perl-Encode
+perl-Encode-Detect
+perl-Encode-devel
+perl-Encode-Locale
+perl-encoding
+perl-Env
+perl-Errno
+perl-Error
+perl-Eval-Closure
+perl-Exception-Class
+perl-experimental
+perl-Exporter
+perl-Exporter-Tiny
+perl-ExtUtils-CBuilder
+perl-ExtUtils-Command
+perl-ExtUtils-Embed
+perl-ExtUtils-Install
+perl-ExtUtils-MakeMaker
+perl-ExtUtils-Manifest
+perl-ExtUtils-Miniperl
+perl-ExtUtils-MM-Utils
+perl-ExtUtils-ParseXS
+perl-FCGI
+perl-Fedora-VSP
+perl-File-BaseDir
+perl-File-chdir
+perl-File-CheckTree
+perl-File-Copy-Recursive
+perl-File-DesktopEntry
+perl-File-Fetch
+perl-File-Find-Object
+perl-File-Find-Rule
+perl-File-HomeDir
+perl-File-Listing
+perl-File-MimeInfo
+perl-File-Path
+perl-File-pushd
+perl-File-ReadBackwards
+perl-File-Remove
+perl-File-ShareDir
+perl-File-Slurp
+perl-File-Temp
+perl-File-Which
+perl-Filter
+perl-Filter-Simple
+perl-generators
+perl-Getopt-Long
+perl-Git
+perl-Git-SVN
+perl-GSSAPI
+perl-hivex
+perl-homedir
+perl-HTML-Parser
+perl-HTML-Tagset
+perl-HTML-Tree
+perl-HTTP-Cookies
+perl-HTTP-Daemon
+perl-HTTP-Date
+perl-HTTP-Message
+perl-HTTP-Negotiate
+perl-HTTP-Tiny
+perl-Importer
+perl-Import-Into
+perl-inc-latest
+perl-interpreter
+perl-IO
+perl-IO-All
+perl-IO-Compress
+perl-IO-HTML
+perl-IO-Multiplex
+perl-IO-Socket-INET6
+perl-IO-Socket-IP
+perl-IO-Socket-SSL
+perl-IO-String
+perl-IO-stringy
+perl-IO-Tty
+perl-IO-Zlib
+perl-IPC-Cmd
+perl-IPC-Run
+perl-IPC-Run3
+perl-IPC-System-Simple
+perl-IPC-SysV
+perl-JSON
+perl-JSON-PP
+perl-JSON-XS
+perl-LDAP
+perl-libintl-perl
+perl-libnet
+perl-libnetcfg
+perl-libs
+perl-libwww-perl
+perl-libxml-perl
+perl-List-MoreUtils
+perl-List-MoreUtils-XS
+perl-Locale-Codes
+perl-Locale-gettext
+perl-Locale-Maketext
+perl-Locale-Maketext-Simple
+perl-local-lib
+perl-LWP-MediaTypes
+perl-LWP-Protocol-https
+perl-macros
+perl-Mail-DKIM
+perl-Mail-SPF
+perl-MailTools
+perl-Math-BigInt
+perl-Math-BigInt-FastCalc
+perl-Math-BigRat
+perl-Math-Complex
+perl-Memoize
+perl-MIME-Base64
+perl-MIME-Charset
+perl-MIME-Types
+perl-Module-Build
+perl-Module-CoreList
+perl-Module-CoreList-tools
+perl-Module-CPANfile
+perl-Module-Implementation
+perl-Module-Install
+perl-Module-Install-AuthorTests
+perl-Module-Install-ReadmeFromPod
+perl-Module-Load
+perl-Module-Load-Conditional
+perl-Module-Loaded
+perl-Module-Metadata
+perl-Module-Pluggable
+perl-Module-Runtime
+perl-Module-ScanDeps
+perl-Mozilla-CA
+perl-Mozilla-LDAP
+perl-MRO-Compat
+perl-namespace-autoclean
+perl-namespace-clean
+perl-NetAddr-IP
+perl-Net-DNS
+perl-Net-HTTP
+perl-Net-Ping
+perl-Net-Server
+perl-Net-SMTP-SSL
+perl-Net-SSLeay
+perl-NKF
+perl-NTLM
+perl-Number-Compare
+perl-open
+perl-Package-DeprecationManager
+perl-Package-Generator
+perl-Package-Stash
+perl-Package-Stash-XS
+perl-PadWalker
+perl-Params-Check
+perl-Params-Classify
+perl-Params-Util
+perl-Params-Validate
+perl-Params-ValidationCompiler
+perl-parent
+perl-Parse-PMFile
+perl-Parse-Yapp
+perl-Path-Tiny
+perl-PathTools
+perl-PCP-LogImport
+perl-PCP-LogSummary
+perl-PCP-MMV
+perl-PCP-PMDA
+perl-Perl-Destruct-Level
+perl-perlfaq
+perl-PerlIO-utf8_strict
+perl-PerlIO-via-QuotedPrint
+perl-Perl-OSType
+perl-Pod-Checker
+perl-Pod-Coverage
+perl-Pod-Escapes
+perl-Pod-Html
+perl-Pod-LaTeX
+perl-podlators
+perl-Pod-Markdown
+perl-Pod-Parser
+perl-Pod-Perldoc
+perl-Pod-Plainer
+perl-Pod-Simple
+perl-Pod-Usage
+perl-prefork
+perl-Readonly
+perl-Ref-Util
+perl-Ref-Util-XS
+perl-Role-Tiny
+perl-Scalar-List-Utils
+perl-Scope-Guard
+perl-SelfLoader
+perl-SGMLSpm
+perl-SNMP_Session
+perl-Socket
+perl-Socket6
+perl-Software-License
+perl-Specio
+perl-srpm-macros
+perl-Storable
+perl-String-CRC32
+perl-String-ShellQuote
+perl-Sub-Exporter
+perl-Sub-Exporter-Progressive
+perl-Sub-Identify
+perl-Sub-Info
+perl-Sub-Install
+perl-Sub-Name
+perl-Sub-Uplevel
+perl-SUPER
+perl-Switch
+perl-Sys-CPU
+perl-Sys-Guestfs
+perl-Sys-MemInfo
+perl-Sys-Syslog
+perl-Sys-Virt
+perl-Taint-Runtime
+perl-Term-ANSIColor
+perl-Term-Cap
+perl-TermReadKey
+perl-Term-Size-Any
+perl-Term-Size-Perl
+perl-Term-Table
+perl-Test
+perl-Test2-Suite
+perl-Test-Deep
+perl-Test-Differences
+perl-Test-Exception
+perl-Test-Fatal
+perl-Test-Harness
+perl-Test-LongString
+perl-Test-NoWarnings
+perl-Test-Pod
+perl-Test-Pod-Coverage
+perl-Test-Requires
+perl-tests
+perl-Test-Simple
+perl-Test-Taint
+perl-Test-Warn
+perl-Test-Warnings
+perl-Text-Balanced
+perl-Text-CharWidth
+perl-Text-Diff
+perl-Text-Glob
+perl-Text-ParseWords
+perl-Text-Soundex
+perl-Text-Tabs+Wrap
+perl-Text-Template
+perl-Text-Unidecode
+perl-Text-WrapI18N
+perl-Thread-Queue
+perl-threads
+perl-threads-shared
+perltidy
+perl-Tie-IxHash
+perl-TimeDate
+perl-Time-HiRes
+perl-Time-Local
+perl-Time-Piece
+perl-Tk
+perl-Tk-devel
+perl-Try-Tiny
+perl-Types-Serialiser
+perl-Unicode-Collate
+perl-Unicode-EastAsianWidth
+perl-Unicode-LineBreak
+perl-Unicode-Normalize
+perl-Unicode-UTF8
+perl-Unix-Syslog
+perl-URI
+perl-utils
+perl-Variable-Magic
+perl-version
+perl-WWW-RobotRules
+perl-XML-Catalog
+perl-XML-DOM
+perl-XML-LibXML
+perl-XML-NamespaceSupport
+perl-XML-Parser
+perl-XML-RegExp
+perl-XML-SAX
+perl-XML-SAX-Base
+perl-XML-Simple
+perl-XML-TokeParser
+perl-XML-Twig
+perl-XML-XPath
+perl-YAML
+perl-YAML-LibYAML
+perl-YAML-Syck
+perl-YAML-Tiny
+pesign
+pgaudit
+php
+php-bcmath
+php-cli
+php-common
+php-dba
+php-dbg
+php-devel
+php-embedded
+php-enchant
+php-fpm
+php-gd
+php-gmp
+php-intl
+php-json
+php-ldap
+php-mbstring
+php-mysqlnd
+php-odbc
+php-opcache
+php-pdo
+php-pear
+php-pecl-apcu
+php-pecl-apcu-devel
+php-pecl-rrd
+php-pecl-xdebug
+php-pecl-zip
+php-pgsql
+php-process
+php-recode
+php-snmp
+php-soap
+php-xml
+php-xmlrpc
+pidgin
+pidgin-devel
+pidgin-sipe
+pigz
+pinentry
+pinentry-emacs
+pinentry-gnome3
+pinentry-gtk
+pinfo
+pipewire
+pipewire-devel
+pipewire-doc
+pipewire-libs
+pipewire-utils
+pixman
+pixman-devel
+pkgconf
+pkgconf-m4
+pkgconf-pkg-config
+pki-base
+pki-base-java
+pki-ca
+pki-core
+pki-deps
+pki-kra
+pki-server
+pki-servlet-4.0-api
+pki-servlet-engine
+pki-symkey
+pki-tools
+platform-python
+platform-python-coverage
+platform-python-debug
+platform-python-devel
+platform-python-pip
+platform-python-setuptools
+plexus-ant-factory
+plexus-ant-factory-javadoc
+plexus-archiver
+plexus-archiver-javadoc
+plexus-bsh-factory
+plexus-bsh-factory-javadoc
+plexus-build-api
+plexus-build-api-javadoc
+plexus-cipher
+plexus-cipher-javadoc
+plexus-classworlds
+plexus-classworlds-javadoc
+plexus-cli
+plexus-cli-javadoc
+plexus-compiler
+plexus-compiler-extras
+plexus-compiler-javadoc
+plexus-compiler-pom
+plexus-component-api
+plexus-component-api-javadoc
+plexus-component-factories-pom
+plexus-components-pom
+plexus-containers
+plexus-containers-component-annotations
+plexus-containers-component-javadoc
+plexus-containers-component-metadata
+plexus-containers-container-default
+plexus-containers-javadoc
+plexus-i18n
+plexus-i18n-javadoc
+plexus-interactivity
+plexus-interactivity-api
+plexus-interactivity-javadoc
+plexus-interactivity-jline
+plexus-interpolation
+plexus-interpolation-javadoc
+plexus-io
+plexus-io-javadoc
+plexus-languages
+plexus-languages-javadoc
+plexus-pom
+plexus-resources
+plexus-resources-javadoc
+plexus-sec-dispatcher
+plexus-sec-dispatcher-javadoc
+plexus-utils
+plexus-utils-javadoc
+plexus-velocity
+plexus-velocity-javadoc
+plotutils
+plotutils-devel
+plymouth
+plymouth-core-libs
+plymouth-graphics-libs
+plymouth-plugin-fade-throbber
+plymouth-plugin-label
+plymouth-plugin-script
+plymouth-plugin-space-flares
+plymouth-plugin-throbgress
+plymouth-plugin-two-step
+plymouth-scripts
+plymouth-system-theme
+plymouth-theme-charge
+plymouth-theme-fade-in
+plymouth-theme-script
+plymouth-theme-solar
+plymouth-theme-spinfinity
+plymouth-theme-spinner
+pmdk-convert
+pmempool
+pmix
+pmreorder
+pnm2ppa
+po4a
+podman
+podman-docker
+podman-remote
+podman-tests
+policycoreutils
+policycoreutils-dbus
+policycoreutils-devel
+policycoreutils-gui
+policycoreutils-newrole
+policycoreutils-python-utils
+policycoreutils-restorecond
+policycoreutils-sandbox
+polkit
+polkit-devel
+polkit-docs
+polkit-libs
+polkit-pkla-compat
+poppler
+poppler-cpp
+poppler-cpp-devel
+poppler-data
+poppler-devel
+poppler-glib
+poppler-glib-devel
+poppler-qt5
+poppler-qt5-devel
+poppler-utils
+popt
+popt-devel
+portreserve
+postfix
+postfix-cdb
+postfix-ldap
+postfix-mysql
+postfix-pcre
+postfix-perl-scripts
+postfix-pgsql
+postfix-sqlite
+postgres-decoderbufs
+postgresql
+postgresql-contrib
+postgresql-docs
+postgresql-jdbc
+postgresql-jdbc-javadoc
+postgresql-odbc
+postgresql-odbc-tests
+postgresql-plperl
+postgresql-plpython3
+postgresql-pltcl
+postgresql-server
+postgresql-server-devel
+postgresql-static
+postgresql-test
+postgresql-test-rpm-macros
+postgresql-upgrade
+postgresql-upgrade-devel
+potrace
+powermock-api-easymock
+powermock-api-mockito
+powermock-api-support
+powermock-common
+powermock-core
+powermock-javadoc
+powermock-junit4
+powermock-reflect
+powermock-testng
+powerpc-utils
+powerpc-utils-core
+powertop
+ppc64-diag
+ppp
+ppp-devel
+pps-tools-devel
+pptp
+prefixdevname
+procmail
+procps-ng
+procps-ng-i18n
+prometheus-jmx-exporter
+protobuf
+protobuf-c
+protobuf-c-compiler
+protobuf-c-devel
+protobuf-compiler
+protobuf-devel
+protobuf-lite
+psacct
+ps_mem
+psmisc
+pstoedit
+ptscotch-mpich
+ptscotch-mpich-devel
+ptscotch-mpich-devel-parmetis
+ptscotch-openmpi
+ptscotch-openmpi-devel
+publicsuffix-list
+publicsuffix-list-dafsa
+pulseaudio
+pulseaudio-libs
+pulseaudio-libs-devel
+pulseaudio-libs-glib2
+pulseaudio-module-bluetooth
+pulseaudio-module-x11
+pulseaudio-utils
+purple-sipe
+pygobject2
+pygobject2-codegen
+pygobject2-devel
+pygobject2-doc
+pygobject3-devel
+pygtk2
+pygtk2-codegen
+pygtk2-devel
+pygtk2-doc
+pykickstart
+python2
+python27
+python2-attrs
+python2-babel
+python2-backports
+python2-backports-ssl_match_hostname
+python2-bson
+python2-cairo
+python2-cairo-devel
+python2-chardet
+python2-coverage
+python2-Cython
+python2-debug
+python2-devel
+python2-dns
+python2-docs
+python2-docs-info
+python2-docutils
+python2-funcsigs
+python2-idna
+python2-ipaddress
+python2-iso8601
+python2-jinja2
+python2-libs
+python2-lxml
+python2-markupsafe
+python2-mock
+python2-nose
+python2-numpy
+python2-numpy-doc
+python2-numpy-f2py
+python2-pip
+python2-pip-wheel
+python2-pluggy
+python2-psycopg2
+python2-psycopg2-debug
+python2-psycopg2-tests
+python2-py
+python2-pygments
+python2-pymongo
+python2-pymongo-gridfs
+python2-PyMySQL
+python2-pysocks
+python2-pytest
+python2-pytest-mock
+python2-pytz
+python2-pyyaml
+python2-requests
+python2-rpm-macros
+python2-scipy
+python2-scour
+python2-setuptools
+python2-setuptools_scm
+python2-setuptools-wheel
+python2-six
+python2-sqlalchemy
+python2-test
+python2-tkinter
+python2-tools
+python2-urllib3
+python2-virtualenv
+python2-wheel
+python2-wheel-wheel
+python36
+python36-debug
+python36-devel
+python36-rpm-macros
+python38
+python38-asn1crypto
+python38-atomicwrites
+python38-attrs
+python38-babel
+python38-cffi
+python38-chardet
+python38-cryptography
+python38-Cython
+python38-debug
+python38-devel
+python38-idle
+python38-idna
+python38-jinja2
+python38-libs
+python38-lxml
+python38-markupsafe
+python38-mod_wsgi
+python38-more-itertools
+python38-numpy
+python38-numpy-doc
+python38-numpy-f2py
+python38-packaging
+python38-pip
+python38-pip-wheel
+python38-pluggy
+python38-ply
+python38-psutil
+python38-psycopg2
+python38-psycopg2-doc
+python38-psycopg2-tests
+python38-py
+python38-pycparser
+python38-PyMySQL
+python38-pyparsing
+python38-pysocks
+python38-pytest
+python38-pytz
+python38-pyyaml
+python38-requests
+python38-rpm-macros
+python38-scipy
+python38-setuptools
+python38-setuptools-wheel
+python38-six
+python38-test
+python38-tkinter
+python38-urllib3
+python38-wcwidth
+python38-wheel
+python38-wheel-wheel
+python3-abrt
+python3-abrt-addon
+python3-abrt-container-addon
+python3-abrt-doc
+python3-argcomplete
+python3-argh
+python3-asn1crypto
+python3-attrs
+python3-audit
+python3-augeas
+python3-avahi
+python3-azure-sdk
+python3-babel
+python3-bcc
+python3-bind
+python3-blivet
+python3-blockdev
+python3-boom
+python3-boto3
+python3-botocore
+python3-brlapi
+python3-bson
+python3-bytesize
+python3-cairo
+python3-cffi
+python3-chardet
+python3-clang
+python3-click
+python3-clufter
+python3-configobj
+python3-configshell
+python3-coverage
+python3-cpio
+python3-createrepo_c
+python3-criu
+python3-cryptography
+python3-cups
+python3-custodia
+python3-Cython
+python3-dateutil
+python3-dbus
+python3-dbus-client-gen
+python3-dbus-python-client-gen
+python3-dbus-signature-pyparsing
+python3-decorator
+python3-distro
+python3-dmidecode
+python3-dnf
+python3-dnf-plugin-post-transaction-actions
+python3-dnf-plugins-core
+python3-dnf-plugin-spacewalk
+python3-dnf-plugin-versionlock
+python3-dns
+python3-docs
+python3-docutils
+python3-enchant
+python3-ethtool
+python3-evdev
+python3-fasteners
+python3-firewall
+python3-flask
+python3-gevent
+python3-gflags
+python3-gobject
+python3-gobject-base
+python3-google-api-client
+python3-gpg
+python3-greenlet
+python3-greenlet-devel
+python3-gssapi
+python3-hawkey
+python3-hivex
+python3-html5lib
+python3-httplib2
+python3-humanize
+python3-hwdata
+python3-hypothesis
+python3-idle
+python3-idna
+python3-imagesize
+python3-iniparse
+python3-inotify
+python3-into-dbus-python
+python3-ipaclient
+python3-ipalib
+python3-ipaserver
+python3-iscsi-initiator-utils
+python3-iso8601
+python3-itsdangerous
+python3-jabberpy
+python3-javapackages
+python3-jinja2
+python3-jmespath
+python3-jsonpatch
+python3-jsonpointer
+python3-jsonschema
+python3-justbases
+python3-justbytes
+python3-jwcrypto
+python3-jwt
+python3-kdcproxy
+python3-keycloak-httpd-client-install
+python3-kickstart
+python3-kmod
+python3-koan
+python3-langtable
+python3-ldap
+python3-ldb
+python3-lesscpy
+python3-lib389
+python3-libcomps
+python3-libdnf
+python3-libguestfs
+python3-libipa_hbac
+python3-libnl3
+python3-libnmstate
+python3-libpfm
+python3-libproxy
+python3-librepo
+python3-libreport
+python3-libs
+python3-libselinux
+python3-libsemanage
+python3-libsss_nss_idmap
+python3-libstoragemgmt
+python3-libstoragemgmt-clibs
+python3-libuser
+python3-libvirt
+python3-libvoikko
+python3-libxml2
+python3-linux-procfs
+python3-lit
+python3-lldb
+python3-louis
+python3-lxml
+python3-magic
+python3-mako
+python3-markdown
+python3-markupsafe
+python3-meh
+python3-meh-gui
+python3-mock
+python3-mod_wsgi
+python3-mpich
+python3-netaddr
+python3-netifaces
+python3-networkx
+python3-networkx-core
+python3-newt
+python3-nftables
+python3-nose
+python3-nss
+python3-ntplib
+python3-numpy
+python3-numpy-f2py
+python3-oauth2client
+python3-oauthlib
+python3-openipmi
+python3-openmpi
+python3-ordered-set
+python3-osa-common
+python3-osad
+python3-packaging
+python3-pcp
+python3-perf
+python3-pexpect
+python3-pid
+python3-pillow
+python3-pip
+python3-pip-wheel
+python3-pki
+python3-pluggy
+python3-ply
+python3-policycoreutils
+python3-prettytable
+python3-productmd
+python3-protobuf
+python3-psutil
+python3-psycopg2
+python3-ptyprocess
+python3-pwquality
+python3-py
+python3-pyasn1
+python3-pyasn1-modules
+python3-pyatspi
+python3-pycparser
+python3-pycurl
+python3-pydbus
+python3-pygments
+python3-pymongo
+python3-pymongo-gridfs
+python3-PyMySQL
+python3-pyOpenSSL
+python3-pyparsing
+python3-pyparted
+python3-pyqt5-sip
+python3-pyserial
+python3-pysocks
+python3-pytest
+python3-pytoml
+python3-pytz
+python3-pyudev
+python3-pyusb
+python3-pywbem
+python3-pyxattr
+python3-pyxdg
+python3-pyyaml
+python3-qrcode
+python3-qrcode-core
+python3-qt5
+python3-qt5-base
+python3-qt5-devel
+python3-reportlab
+python3-requests
+python3-requests-file
+python3-requests-ftp
+python3-requests-oauthlib
+python3-rhncfg
+python3-rhncfg-actions
+python3-rhncfg-client
+python3-rhncfg-management
+python3-rhn-check
+python3-rhn-client-tools
+python3-rhnlib
+python3-rhnpush
+python3-rhn-setup
+python3-rhn-setup-gnome
+python3-rhn-virtualization-common
+python3-rhn-virtualization-host
+python3-rpm
+python3-rpmfluff
+python3-rpm-generators
+python3-rpm-macros
+python3-rrdtool
+python3-rtslib
+python3-s3transfer
+python3-samba
+python3-samba-test
+python3-sanlock
+python3-schedutils
+python3-scipy
+python3-scons
+python3-semantic_version
+python3-setools
+python3-setuptools
+python3-setuptools_scm
+python3-setuptools-wheel
+python3-simpleline
+python3-sip-devel
+python3-six
+python3-slip
+python3-slip-dbus
+python3-snowballstemmer
+python3-spacewalk-abrt
+python3-spacewalk-backend-libs
+python3-spacewalk-koan
+python3-spacewalk-oscap
+python3-spacewalk-usix
+python3-speechd
+python3-sphinx
+python3-sphinxcontrib-websupport
+python3-sphinx_rtd_theme
+python3-sphinx-theme-alabaster
+python3-sqlalchemy
+python3-sss
+python3-sssdconfig
+python3-sss-murmur
+python3-subscription-manager-rhsm
+python3-suds
+python3-sure
+python3-sushy
+python3-syspurpose
+python3-systemd
+python3-talloc
+python3-tbb
+python3-tdb
+python3-test
+python3-tevent
+python3-tkinter
+python3-unbound
+python3-unittest2
+python3-uritemplate
+python3-urllib3
+python3-urwid
+python3-varlink
+python3-virtualenv
+python3-webencodings
+python3-werkzeug
+python3-wheel
+python3-wheel-wheel
+python3-whoosh
+python3-yubico
+python-cups-doc
+python-nose-docs
+python-nss-doc
+python-podman-api
+python-psycopg2-doc
+python-pymongo-doc
+python-qt5-rpm-macros
+python-rpm-macros
+python-sphinx-locale
+python-sqlalchemy-doc
+python-srpm-macros
+python-virtualenv-doc
+qclib
+qclib-devel
+qdox
+qdox-javadoc
+qemu-guest-agent
+qemu-img
+qemu-kvm
+qemu-kvm-block-curl
+qemu-kvm-block-gluster
+qemu-kvm-block-iscsi
+qemu-kvm-block-rbd
+qemu-kvm-block-ssh
+qemu-kvm-common
+qemu-kvm-core
+qemu-kvm-tests
+qgnomeplatform
+qgpgme
+qhull-devel
+qpdf
+qpdf-doc
+qpdf-libs
+qperf
+qrencode
+qrencode-devel
+qrencode-libs
+qt5-assistant
+qt5-designer
+qt5-devel
+qt5-doctools
+qt5-linguist
+qt5-qdbusviewer
+qt5-qt3d
+qt5-qt3d-devel
+qt5-qt3d-examples
+qt5-qtbase
+qt5-qtbase-common
+qt5-qtbase-devel
+qt5-qtbase-examples
+qt5-qtbase-gui
+qt5-qtbase-mysql
+qt5-qtbase-odbc
+qt5-qtbase-postgresql
+qt5-qtbase-private-devel
+qt5-qtbase-static
+qt5-qtcanvas3d
+qt5-qtcanvas3d-examples
+qt5-qtconnectivity
+qt5-qtconnectivity-devel
+qt5-qtconnectivity-examples
+qt5-qtdeclarative
+qt5-qtdeclarative-devel
+qt5-qtdeclarative-examples
+qt5-qtdeclarative-static
+qt5-qtdoc
+qt5-qtgraphicaleffects
+qt5-qtimageformats
+qt5-qtlocation
+qt5-qtlocation-devel
+qt5-qtlocation-examples
+qt5-qtmultimedia
+qt5-qtmultimedia-devel
+qt5-qtmultimedia-examples
+qt5-qtquickcontrols
+qt5-qtquickcontrols2
+qt5-qtquickcontrols2-devel
+qt5-qtquickcontrols2-examples
+qt5-qtquickcontrols-examples
+qt5-qtscript
+qt5-qtscript-devel
+qt5-qtscript-examples
+qt5-qtsensors
+qt5-qtsensors-devel
+qt5-qtsensors-examples
+qt5-qtserialbus
+qt5-qtserialbus-examples
+qt5-qtserialport
+qt5-qtserialport-devel
+qt5-qtserialport-examples
+qt5-qtsvg
+qt5-qtsvg-devel
+qt5-qtsvg-examples
+qt5-qttools
+qt5-qttools-common
+qt5-qttools-devel
+qt5-qttools-examples
+qt5-qttools-libs-designer
+qt5-qttools-libs-designercomponents
+qt5-qttools-libs-help
+qt5-qttools-static
+qt5-qttranslations
+qt5-qtwayland
+qt5-qtwayland-devel
+qt5-qtwayland-examples
+qt5-qtwebchannel
+qt5-qtwebchannel-devel
+qt5-qtwebchannel-examples
+qt5-qtwebsockets
+qt5-qtwebsockets-devel
+qt5-qtwebsockets-examples
+qt5-qtx11extras
+qt5-qtx11extras-devel
+qt5-qtxmlpatterns
+qt5-qtxmlpatterns-devel
+qt5-qtxmlpatterns-examples
+qt5-rpm-macros
+qt5-srpm-macros
+quota
+quota-doc
+quota-nld
+quota-nls
+quota-rpc
+quota-warnquota
+radvd
+raptor2
+raptor2-devel
+rarian
+rarian-compat
+rasdaemon
+rasqal
+rasqal-devel
+rdma-core
+rdma-core-devel
+re2c
+readline
+readline-devel
+readonly-root
+realmd
+rear
+recode
+recode-devel
+redfish-finder
+redhat-backgrounds
+redhat-indexhtml
+redhat-logos
+redhat-logos-httpd
+redhat-logos-ipa
+redhat-lsb
+redhat-lsb-core
+redhat-lsb-cxx
+redhat-lsb-desktop
+redhat-lsb-languages
+redhat-lsb-printing
+redhat-lsb-submod-multimedia
+redhat-lsb-submod-security
+redhat-menus
+redhat-release
+redhat-release-eula
+redhat-rpm-config
+redhat-support-lib-python
+redhat-support-tool
+redis
+redis-devel
+redis-doc
+redland
+redland-devel
+regexp
+regexp-javadoc
+relaxngDatatype
+resource-agents
+resource-agents-aliyun
+resource-agents-gcp
+rest
+resteasy
+rhel-system-roles
+rhncfg
+rhncfg-actions
+rhncfg-client
+rhncfg-management
+rhn-check
+rhn-client-tools
+rhn-custom-info
+rhnlib
+rhnpush
+rhnsd
+rhn-setup
+rhn-setup-gnome
+rhn-tools
+rhn-virtualization-host
+rhsm-gtk
+rhsm-icons
+rhythmbox
+rls
+rmt
+rng-tools
+rootfiles
+rpcbind
+rpcgen
+rpcsvc-proto-devel
+rpm
+rpm-apidocs
+rpm-build
+rpm-build-libs
+rpm-cron
+rpm-devel
+rpmdevtools
+rpmemd
+rpm-libs
+rpmlint
+rpm-mpi-hooks
+rpm-ostree
+rpm-ostree-libs
+rpm-plugin-ima
+rpm-plugin-prioreset
+rpm-plugin-selinux
+rpm-plugin-syslog
+rpm-plugin-systemd-inhibit
+rpm-sign
+rrdtool
+rrdtool-devel
+rrdtool-doc
+rrdtool-lua
+rrdtool-perl
+rrdtool-ruby
+rrdtool-tcl
+rsync
+rsync-daemon
+rsyslog
+rsyslog-crypto
+rsyslog-doc
+rsyslog-elasticsearch
+rsyslog-gnutls
+rsyslog-gssapi
+rsyslog-kafka
+rsyslog-mmaudit
+rsyslog-mmjsonparse
+rsyslog-mmkubernetes
+rsyslog-mmnormalize
+rsyslog-mmsnmptrapd
+rsyslog-mysql
+rsyslog-pgsql
+rsyslog-relp
+rsyslog-snmp
+rtkit
+ruby
+ruby-devel
+ruby-doc
+rubygem-abrt
+rubygem-abrt-doc
+rubygem-bigdecimal
+rubygem-bson
+rubygem-bson-doc
+rubygem-bundler
+rubygem-bundler-doc
+rubygem-did_you_mean
+rubygem-diff-lcs
+rubygem-io-console
+rubygem-irb
+rubygem-json
+rubygem-minitest
+rubygem-mongo
+rubygem-mongo-doc
+rubygem-mysql2
+rubygem-mysql2-doc
+rubygem-net-telnet
+rubygem-openssl
+rubygem-pg
+rubygem-pg-doc
+rubygem-power_assert
+rubygem-psych
+rubygem-rake
+rubygem-rdoc
+rubygem-rspec
+rubygem-rspec-core
+rubygem-rspec-expectations
+rubygem-rspec-mocks
+rubygem-rspec-support
+rubygems
+rubygems-devel
+rubygem-test-unit
+rubygem-xmlrpc
+ruby-hivex
+ruby-irb
+ruby-libguestfs
+ruby-libs
+runc
+rust
+rust-analysis
+rust-debugger-common
+rust-doc
+rustfmt
+rust-gdb
+rust-lldb
+rust-src
+rust-srpm-macros
+rust-std-static
+rust-toolset
+s390utils
+s390utils-base
+s390utils-cmsfs
+s390utils-cmsfs-fuse
+s390utils-cpacfstatsd
+s390utils-cpuplugd
+s390utils-devel
+s390utils-hmcdrvfs
+s390utils-iucvterm
+s390utils-mon_statd
+s390utils-osasnmpd
+s390utils-zdsfs
+s390utils-ziomon
+saab-fonts
+sac
+samba
+samba-client
+samba-client-libs
+samba-common
+samba-common-libs
+samba-common-tools
+samba-krb5-printing
+samba-libs
+samba-pidl
+samba-test
+samba-test-libs
+samba-winbind
+samba-winbind-clients
+samba-winbind-krb5-locator
+samba-winbind-modules
+samyak-devanagari-fonts
+samyak-fonts-common
+samyak-gujarati-fonts
+samyak-malayalam-fonts
+samyak-odia-fonts
+samyak-tamil-fonts
+sane-backends
+sane-backends-daemon
+sane-backends-devel
+sane-backends-doc
+sane-backends-drivers-cameras
+sane-backends-drivers-scanners
+sane-backends-libs
+sane-frontends
+sanlk-reset
+sanlock
+sanlock-devel
+sanlock-lib
+sassist
+satellite-5-client
+satyr
+sbc
+sbd
+sblim-cmpi-base
+sblim-cmpi-devel
+sblim-indication_helper
+sblim-sfcb
+sblim-sfcc
+sblim-sfcc-devel
+sblim-sfcCommon
+sblim-wbemcli
+scala
+scala-apidoc
+scala-swing
+scap-security-guide
+scap-security-guide-doc
+scap-workbench
+scl-utils
+scl-utils-build
+scotch
+scotch-devel
+scrub
+SDL
+SDL2
+SDL2-devel
+SDL2-static
+SDL-devel
+seabios
+seabios-bin
+seahorse
+seavgabios-bin
+sed
+selinux-policy
+selinux-policy-devel
+selinux-policy-doc
+selinux-policy-minimum
+selinux-policy-mls
+selinux-policy-sandbox
+selinux-policy-targeted
+sendmail
+sendmail-cf
+sendmail-doc
+sendmail-milter
+sendmail-milter-devel
+servicelog
+setools
+setools-console
+setools-console-analyses
+setools-gui
+setroubleshoot
+setroubleshoot-plugins
+setroubleshoot-server
+setserial
+setup
+sg3_utils
+sg3_utils-devel
+sg3_utils-libs
+sgabios
+sgabios-bin
+sgml-common
+sgpio
+shadow-utils
+shared-mime-info
+sharutils
+shim-aa64
+shim-ia32
+shim-unsigned-aarch64
+shim-unsigned-x64
+shim-x64
+sil-abyssinica-fonts
+sil-nuosu-fonts
+sil-padauk-book-fonts
+sil-padauk-fonts
+sil-scheherazade-fonts
+sip
+sisu
+sisu-inject
+sisu-javadoc
+sisu-mojos
+sisu-mojos-javadoc
+sisu-plexus
+si-units
+si-units-javadoc
+skkdic
+skopeo
+skopeo-tests
+slang
+slang-devel
+slapi-nis
+slf4j
+slf4j-ext
+slf4j-javadoc
+slf4j-jcl
+slf4j-jdk14
+slf4j-log4j12
+slf4j-manual
+slf4j-sources
+slirp4netns
+SLOF
+smartmontools
+smc-anjalioldlipi-fonts
+smc-dyuthi-fonts
+smc-fonts-common
+smc-kalyani-fonts
+smc-meera-fonts
+smc-rachana-fonts
+smc-raghumalayalam-fonts
+smc-suruma-fonts
+smc-tools
+snappy
+snappy-devel
+socat
+socket_wrapper
+softhsm
+softhsm-devel
+sombok
+sombok-devel
+sonatype-oss-parent
+sonatype-plugins-parent
+sos
+sos-audit
+sos-collector
+sound-theme-freedesktop
+soundtouch
+soundtouch-devel
+source-highlight
+spacewalk-abrt
+spacewalk-client-cert
+spacewalk-koan
+spacewalk-oscap
+spacewalk-remote-utils
+spacewalk-usix
+spamassassin
+sparsehash-devel
+spausedd
+spax
+spec-version-maven-plugin
+spec-version-maven-plugin-javadoc
+speech-dispatcher
+speech-dispatcher-devel
+speech-dispatcher-doc
+speech-dispatcher-espeak-ng
+speex
+speex-devel
+speexdsp
+speexdsp-devel
+spice-client-win-x64
+spice-client-win-x86
+spice-glib
+spice-glib-devel
+spice-gtk
+spice-gtk3
+spice-gtk3-devel
+spice-gtk3-vala
+spice-gtk-tools
+spice-parent
+spice-protocol
+spice-qxl-wddm-dod
+spice-qxl-xddm
+spice-server
+spice-server-devel
+spice-streaming-agent
+spice-vdagent
+spice-vdagent-win-x64
+spice-vdagent-win-x86
+spirv-tools
+spirv-tools-devel
+spirv-tools-libs
+splix
+sqlite
+sqlite-devel
+sqlite-doc
+sqlite-libs
+squashfs-tools
+squid
+srp_daemon
+sscg
+sssd
+sssd-ad
+sssd-client
+sssd-common
+sssd-common-pac
+sssd-dbus
+sssd-ipa
+sssd-kcm
+sssd-krb5
+sssd-krb5-common
+sssd-ldap
+sssd-libwbclient
+sssd-nfs-idmap
+sssd-polkit-rules
+sssd-proxy
+sssd-tools
+sssd-winbind-idmap
+star
+startup-notification
+startup-notification-devel
+stax-ex
+stix-fonts
+stix-math-fonts
+strace
+stratis-cli
+stratisd
+stunnel
+subscription-manager
+subscription-manager-cockpit
+subscription-manager-initial-setup-addon
+subscription-manager-migration
+subscription-manager-migration-data
+subscription-manager-plugin-ostree
+subscription-manager-rhsm-certificates
+subversion
+subversion-devel
+subversion-gnome
+subversion-javahl
+subversion-libs
+subversion-perl
+subversion-tools
+sudo
+suitesparse
+suitesparse-devel
+SuperLU
+SuperLU-devel
+supermin
+supermin-devel
+sushi
+swig
+swig-doc
+swig-gdb
+switcheroo-control
+symlinks
+sysfsutils
+syslinux
+syslinux-extlinux
+syslinux-extlinux-nonlinux
+syslinux-nonlinux
+syslinux-tftpboot
+sysstat
+system-config-printer-libs
+system-config-printer-udev
+systemd
+systemd-container
+systemd-devel
+systemd-journal-remote
+systemd-libs
+systemd-pam
+systemd-tests
+systemd-udev
+system-storage-manager
+systemtap
+systemtap-client
+systemtap-devel
+systemtap-exporter
+systemtap-initscript
+systemtap-runtime
+systemtap-runtime-java
+systemtap-runtime-python3
+systemtap-runtime-virtguest
+systemtap-runtime-virthost
+systemtap-sdt-devel
+systemtap-server
+taglib
+taglib-devel
+tagsoup
+tang
+tar
+targetcli
+target-restore
+tbb
+tbb-devel
+tbb-doc
+tboot
+tcl
+tcl-brlapi
+tcl-devel
+tcl-doc
+tcpdump
+tcsh
+tdb-tools
+teamd
+teckit
+telnet
+telnet-server
+testng
+testng-javadoc
+tex-fonts-hebrew
+texi2html
+texinfo
+texinfo-tex
+texlive
+texlive-adjustbox
+texlive-ae
+texlive-algorithms
+texlive-amscls
+texlive-amsfonts
+texlive-amsmath
+texlive-anyfontsize
+texlive-anysize
+texlive-appendix
+texlive-arabxetex
+texlive-arphic
+texlive-attachfile
+texlive-avantgar
+texlive-awesomebox
+texlive-babel
+texlive-babelbib
+texlive-babel-english
+texlive-base
+texlive-beamer
+texlive-bera
+texlive-beton
+texlive-bibtex
+texlive-bibtopic
+texlive-bidi
+texlive-bigfoot
+texlive-bookman
+texlive-booktabs
+texlive-breakurl
+texlive-breqn
+texlive-caption
+texlive-capt-of
+texlive-carlisle
+texlive-changebar
+texlive-changepage
+texlive-charter
+texlive-chngcntr
+texlive-cite
+texlive-cjk
+texlive-classpack
+texlive-cm
+texlive-cmap
+texlive-cmextra
+texlive-cm-lgc
+texlive-cm-super
+texlive-cns
+texlive-collectbox
+texlive-collection-basic
+texlive-collection-fontsrecommended
+texlive-collection-htmlxml
+texlive-collection-latex
+texlive-collection-latexrecommended
+texlive-collection-xetex
+texlive-colortbl
+texlive-courier
+texlive-crop
+texlive-csquotes
+texlive-ctable
+texlive-ctablestack
+texlive-currfile
+texlive-datetime
+texlive-dvipdfmx
+texlive-dvipng
+texlive-dvips
+texlive-dvisvgm
+texlive-ec
+texlive-eepic
+texlive-enctex
+texlive-enumitem
+texlive-environ
+texlive-epsf
+texlive-epstopdf
+texlive-eqparbox
+texlive-eso-pic
+texlive-etex
+texlive-etex-pkg
+texlive-etoolbox
+texlive-euenc
+texlive-euler
+texlive-euro
+texlive-eurosym
+texlive-extsizes
+texlive-fancybox
+texlive-fancyhdr
+texlive-fancyref
+texlive-fancyvrb
+texlive-filecontents
+texlive-filehook
+texlive-finstrut
+texlive-fix2col
+texlive-fixlatvian
+texlive-float
+texlive-fmtcount
+texlive-fncychap
+texlive-fontawesome
+texlive-fontbook
+texlive-fontspec
+texlive-fonts-tlwg
+texlive-fontware
+texlive-fontwrap
+texlive-footmisc
+texlive-fp
+texlive-fpl
+texlive-framed
+texlive-garuda-c90
+texlive-geometry
+texlive-glyphlist
+texlive-graphics
+texlive-graphics-cfg
+texlive-graphics-def
+texlive-gsftopk
+texlive-helvetic
+texlive-hyperref
+texlive-hyphenat
+texlive-hyphen-base
+texlive-hyph-utf8
+texlive-ifetex
+texlive-ifluatex
+texlive-ifmtarg
+texlive-ifoddpage
+texlive-iftex
+texlive-ifxetex
+texlive-import
+texlive-index
+texlive-jadetex
+texlive-jknapltx
+texlive-kastrup
+texlive-kerkis
+texlive-knuth-lib
+texlive-knuth-local
+texlive-koma-script
+texlive-kpathsea
+texlive-l3experimental
+texlive-l3kernel
+texlive-l3packages
+texlive-lastpage
+texlive-latex
+texlive-latex2man
+texlive-latexconfig
+texlive-latex-fonts
+texlive-lettrine
+texlive-lib
+texlive-lib-devel
+texlive-linegoal
+texlive-lineno
+texlive-listings
+texlive-lm
+texlive-lm-math
+texlive-ltabptch
+texlive-ltxmisc
+texlive-lua-alt-getopt
+texlive-lualatex-math
+texlive-lualibs
+texlive-luaotfload
+texlive-luatex
+texlive-luatex85
+texlive-luatexbase
+texlive-makecmds
+texlive-makeindex
+texlive-manfnt-font
+texlive-marginnote
+texlive-marvosym
+texlive-mathpazo
+texlive-mathspec
+texlive-mathtools
+texlive-mdwtools
+texlive-memoir
+texlive-metafont
+texlive-metalogo
+texlive-metapost
+texlive-mflogo
+texlive-mflogo-font
+texlive-mfnfss
+texlive-mfware
+texlive-microtype
+texlive-mnsymbol
+texlive-mparhack
+texlive-mptopdf
+texlive-ms
+texlive-multido
+texlive-multirow
+texlive-natbib
+texlive-ncctools
+texlive-ncntrsbk
+texlive-needspace
+texlive-norasi-c90
+texlive-ntgclass
+texlive-oberdiek
+texlive-overpic
+texlive-palatino
+texlive-paralist
+texlive-parallel
+texlive-parskip
+texlive-passivetex
+texlive-pdfpages
+texlive-pdftex
+texlive-pgf
+texlive-philokalia
+texlive-placeins
+texlive-plain
+texlive-polyglossia
+texlive-powerdot
+texlive-preprint
+texlive-psfrag
+texlive-pslatex
+texlive-psnfss
+texlive-pspicture
+texlive-pst-3d
+texlive-pst-blur
+texlive-pst-coil
+texlive-pst-eps
+texlive-pst-fill
+texlive-pst-grad
+texlive-pst-math
+texlive-pst-node
+texlive-pst-plot
+texlive-pstricks
+texlive-pstricks-add
+texlive-pst-slpe
+texlive-pst-text
+texlive-pst-tree
+texlive-ptext
+texlive-pxfonts
+texlive-qstest
+texlive-rcs
+texlive-realscripts
+texlive-rsfs
+texlive-sansmath
+texlive-sauerj
+texlive-scheme-basic
+texlive-section
+texlive-sectsty
+texlive-seminar
+texlive-sepnum
+texlive-setspace
+texlive-showexpl
+texlive-soul
+texlive-stmaryrd
+texlive-subfig
+texlive-subfigure
+texlive-svn-prov
+texlive-symbol
+texlive-t2
+texlive-tabu
+texlive-tabulary
+texlive-tetex
+texlive-tex
+texlive-tex4ht
+texlive-texconfig
+texlive-tex-gyre
+texlive-tex-gyre-math
+texlive-tex-ini-files
+texlive-texlive-common-doc
+texlive-texlive-docindex
+texlive-texlive-en
+texlive-texlive.infra
+texlive-texlive-msg-translations
+texlive-texlive-scripts
+texlive-textcase
+texlive-textpos
+texlive-threeparttable
+texlive-thumbpdf
+texlive-times
+texlive-tipa
+texlive-titlesec
+texlive-titling
+texlive-tocloft
+texlive-tools
+texlive-trimspaces
+texlive-txfonts
+texlive-type1cm
+texlive-typehtml
+texlive-ucharclasses
+texlive-ucs
+texlive-uhc
+texlive-ulem
+texlive-underscore
+texlive-unicode-data
+texlive-unicode-math
+texlive-unisugar
+texlive-updmap-map
+texlive-upquote
+texlive-url
+texlive-utopia
+texlive-varwidth
+texlive-wadalab
+texlive-was
+texlive-wasy
+texlive-wasy2-ps
+texlive-wasysym
+texlive-wrapfig
+texlive-xcolor
+texlive-xdvi
+texlive-xecjk
+texlive-xecolor
+texlive-xecyr
+texlive-xeindex
+texlive-xepersian
+texlive-xesearch
+texlive-xetex
+texlive-xetexconfig
+texlive-xetexfontinfo
+texlive-xetex-itrans
+texlive-xetex-pstricks
+texlive-xetex-tibetan
+texlive-xifthen
+texlive-xkeyval
+texlive-xltxtra
+texlive-xmltex
+texlive-xmltexconfig
+texlive-xstring
+texlive-xtab
+texlive-xunicode
+texlive-zapfchan
+texlive-zapfding
+tftp
+tftp-server
+thai-scalable-fonts-common
+thai-scalable-garuda-fonts
+thai-scalable-kinnari-fonts
+thai-scalable-laksaman-fonts
+thai-scalable-loma-fonts
+thai-scalable-norasi-fonts
+thai-scalable-purisa-fonts
+thai-scalable-sawasdee-fonts
+thai-scalable-tlwgmono-fonts
+thai-scalable-tlwgtypewriter-fonts
+thai-scalable-tlwgtypist-fonts
+thai-scalable-tlwgtypo-fonts
+thai-scalable-umpush-fonts
+thai-scalable-waree-fonts
+theora-tools
+thunderbird
+tibetan-machine-uni-fonts
+tigervnc
+tigervnc-icons
+tigervnc-license
+tigervnc-server
+tigervnc-server-applet
+tigervnc-server-minimal
+tigervnc-server-module
+time
+timedatex
+tinycdb
+tinycdb-devel
+tinyxml2
+tinyxml2-devel
+tix
+tix-devel
+tk
+tk-devel
+tlog
+tmpwatch
+tmux
+tog-pegasus
+tog-pegasus-devel
+tog-pegasus-libs
+tokyocabinet
+tokyocabinet-devel
+tomcatjss
+toolbox
+torque
+torque-devel
+torque-libs
+totem
+totem-nautilus
+totem-pl-parser
+tpm2-abrmd
+tpm2-abrmd-devel
+tpm2-abrmd-selinux
+tpm2-tools
+tpm2-tss
+tpm2-tss-devel
+tpm-quote-tools
+tpm-tools
+tpm-tools-devel
+tpm-tools-pkcs11
+trace-cmd
+traceroute
+tracker
+tracker-miners
+transfig
+tree
+trousers
+trousers-devel
+trousers-lib
+tss2
+tss2-devel
+ttmkfdir
+tuna
+tuned
+tuned-gtk
+tuned-profiles-atomic
+tuned-profiles-compat
+tuned-profiles-cpu-partitioning
+tuned-profiles-mssql
+tuned-profiles-oracle
+tuned-utils
+tuned-utils-systemtap
+turbojpeg
+turbojpeg-devel
+twolame-libs
+tzdata
+tzdata-java
+ucs-miscfixed-fonts
+ucx
+udica
+udisks2
+udisks2-iscsi
+udisks2-lvm2
+uglify-js
+uid_wrapper
+unbound
+unbound-devel
+unbound-libs
+unicode-ucd
+unit-api
+unit-api-javadoc
+units
+unixODBC
+unixODBC-devel
+unzip
+uom-lib
+uom-lib-javadoc
+uom-parent
+uom-se
+uom-se-javadoc
+uom-systems
+uom-systems-javadoc
+upower
+upower-devel
+upower-devel-docs
+urlview
+urw-base35-bookman-fonts
+urw-base35-c059-fonts
+urw-base35-d050000l-fonts
+urw-base35-fonts
+urw-base35-fonts-common
+urw-base35-fonts-devel
+urw-base35-gothic-fonts
+urw-base35-nimbus-mono-ps-fonts
+urw-base35-nimbus-roman-fonts
+urw-base35-nimbus-sans-fonts
+urw-base35-p052-fonts
+urw-base35-standard-symbols-ps-fonts
+urw-base35-z003-fonts
+usbguard
+usbguard-dbus
+usbguard-tools
+usb_modeswitch
+usb_modeswitch-data
+usbmuxd
+usbredir
+usbredir-devel
+usbutils
+usermode
+usermode-gtk
+userspace-rcu
+userspace-rcu-devel
+ustr
+utf8proc
+uthash-devel
+util-linux
+util-linux-user
+uuid
+uuidd
+uuid-devel
+vala
+vala-devel
+valgrind
+valgrind-devel
+varnish
+varnish-devel
+varnish-docs
+varnish-modules
+vdo
+velocity
+velocity-demo
+velocity-javadoc
+velocity-manual
+veritysetup
+vhostmd
+vim-common
+vim-enhanced
+vim-filesystem
+vim-minimal
+vim-X11
+vinagre
+vino
+virt
+virt-devel
+virt-dib
+virt-install
+virtio-win
+virt-manager
+virt-manager-common
+virt-p2v-maker
+virt-top
+virt-v2v
+virt-viewer
+virt-what
+virt-who
+vm-dump-metrics
+vm-dump-metrics-devel
+voikko-tools
+volume_key
+volume_key-devel
+volume_key-libs
+vorbis-tools
+vsftpd
+vte291
+vte291-devel
+vte-profile
+vulkan-headers
+vulkan-loader
+vulkan-loader-devel
+vulkan-tools
+vulkan-validation-layers
+WALinuxAgent
+watchdog
+wavpack
+wavpack-devel
+wayland-devel
+wayland-protocols-devel
+web-assets-devel
+web-assets-filesystem
+webkit2gtk3
+webkit2gtk3-devel
+webkit2gtk3-jsc
+webkit2gtk3-jsc-devel
+webkit2gtk3-plugin-process-gtk2
+webrtc-audio-processing
+weld-parent
+wget
+which
+whois
+whois-nls
+wireshark
+wireshark-cli
+wireshark-devel
+wodim
+woff2
+words
+wpa_supplicant
+wqy-microhei-fonts
+wqy-unibit-fonts
+wsmancli
+x3270
+x3270-text
+x3270-x11
+xalan-j2
+xalan-j2-demo
+xalan-j2-javadoc
+xalan-j2-manual
+xalan-j2-xsltc
+Xaw3d
+Xaw3d-devel
+xbean
+xbean-javadoc
+xcb-proto
+xcb-util
+xcb-util-devel
+xcb-util-image
+xcb-util-image-devel
+xcb-util-keysyms
+xcb-util-keysyms-devel
+xcb-util-renderutil
+xcb-util-renderutil-devel
+xcb-util-wm
+xcb-util-wm-devel
+xdelta
+xdg-desktop-portal
+xdg-desktop-portal-gtk
+xdg-user-dirs
+xdg-user-dirs-gtk
+xdg-utils
+xerces-j2
+xerces-j2-demo
+xerces-j2-javadoc
+xfsdump
+xfsprogs
+xfsprogs-devel
+xhtml1-dtds
+xinetd
+xkeyboard-config
+xkeyboard-config-devel
+xml-common
+xml-commons-apis
+xml-commons-apis-javadoc
+xml-commons-apis-manual
+xml-commons-resolver
+xml-commons-resolver-javadoc
+xmlrpc-c
+xmlrpc-c-c++
+xmlrpc-c-client
+xmlrpc-c-client++
+xmlrpc-c-devel
+xmlsec1
+xmlsec1-devel
+xmlsec1-gcrypt
+xmlsec1-gnutls
+xmlsec1-gnutls-devel
+xmlsec1-nss
+xmlsec1-openssl
+xmlsec1-openssl-devel
+xmlstreambuffer
+xmlto
+xmltoman
+xmlunit
+xmlunit-javadoc
+xmvn
+xmvn-api
+xmvn-bisect
+xmvn-connector-aether
+xmvn-connector-ivy
+xmvn-core
+xmvn-install
+xmvn-javadoc
+xmvn-minimal
+xmvn-mojo
+xmvn-parent-pom
+xmvn-resolve
+xmvn-subst
+xmvn-tools-pom
+xorg-sgml-doctools
+xorg-x11-apps
+xorg-x11-docs
+xorg-x11-drivers
+xorg-x11-drv-ati
+xorg-x11-drv-dummy
+xorg-x11-drv-evdev
+xorg-x11-drv-evdev-devel
+xorg-x11-drv-fbdev
+xorg-x11-drv-intel
+xorg-x11-drv-libinput
+xorg-x11-drv-libinput-devel
+xorg-x11-drv-nouveau
+xorg-x11-drv-qxl
+xorg-x11-drv-v4l
+xorg-x11-drv-vesa
+xorg-x11-drv-vmware
+xorg-x11-drv-wacom
+xorg-x11-drv-wacom-devel
+xorg-x11-drv-wacom-serial-support
+xorg-x11-fonts-100dpi
+xorg-x11-fonts-75dpi
+xorg-x11-fonts-cyrillic
+xorg-x11-fonts-ethiopic
+xorg-x11-fonts-ISO8859-1-100dpi
+xorg-x11-fonts-ISO8859-14-100dpi
+xorg-x11-fonts-ISO8859-14-75dpi
+xorg-x11-fonts-ISO8859-15-100dpi
+xorg-x11-fonts-ISO8859-15-75dpi
+xorg-x11-fonts-ISO8859-1-75dpi
+xorg-x11-fonts-ISO8859-2-100dpi
+xorg-x11-fonts-ISO8859-2-75dpi
+xorg-x11-fonts-ISO8859-9-100dpi
+xorg-x11-fonts-ISO8859-9-75dpi
+xorg-x11-fonts-misc
+xorg-x11-fonts-Type1
+xorg-x11-font-utils
+xorg-x11-proto-devel
+xorg-x11-server-common
+xorg-x11-server-devel
+xorg-x11-server-utils
+xorg-x11-server-Xdmx
+xorg-x11-server-Xephyr
+xorg-x11-server-Xnest
+xorg-x11-server-Xorg
+xorg-x11-server-Xspice
+xorg-x11-server-Xvfb
+xorg-x11-server-Xwayland
+xorg-x11-util-macros
+xorg-x11-utils
+xorg-x11-xauth
+xorg-x11-xbitmaps
+xorg-x11-xinit
+xorg-x11-xinit-session
+xorg-x11-xkb-utils
+xorg-x11-xkb-utils-devel
+xorg-x11-xtrans-devel
+xorriso
+xrestop
+xsane
+xsane-common
+xsane-gimp
+xsom
+xterm
+xterm-resize
+xz
+xz-devel
+xz-java
+xz-java-javadoc
+xz-libs
+xz-lzma-compat
+yajl
+yajl-devel
+yasm
+yelp
+yelp-devel
+yelp-libs
+yelp-tools
+yelp-xsl
+ypbind
+ypserv
+yp-tools
+yum
+yum-utils
+zenity
+zip
+zlib
+zlib-devel
+zlib-static
+zsh
+zsh-html
+zstd
+zziplib
+zziplib-devel
+zziplib-utils
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-legacy-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-legacy-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-legacy-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-snmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-snmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base-snmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base_security_api_results.json
new file mode 100644
index 0000000..88b41f6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds-base_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14824","severity":"important","public_date":"2019-11-04T09:14:00Z","advisories":["RHSA-2019:3401","RHSA-2020:0464","RHSA-2019:3981"],"bugzilla":"1747448","bugzilla_description":"CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["389-ds:1.4-8000020191107193846.187e9a3f","389-ds:1.4-8010020190903200205.eb48df33","389-ds-base-0:1.3.9.1-12.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14824.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10171","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:1789"],"bugzilla":"1722081","bugzilla_description":"CVE-2019-10171 389-ds-base: Insufficient fix for CVE-2018-14648 denial of service in RHEL-7.5","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["389-ds-base-0:1.3.7.5-30.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10171.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3883","severity":"moderate","public_date":"2019-04-12T00:00:00Z","advisories":["RHSA-2019:3401","RHSA-2019:1896"],"bugzilla":"1693612","bugzilla_description":"CVE-2019-3883 389-ds-base: DoS via hanging secured connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["389-ds-base-0:1.3.8.4-25.1.el7_6","389-ds:1.4-8010020190903200205.eb48df33"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3883.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-10224","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:3401"],"bugzilla":"1677147","bugzilla_description":"CVE-2019-10224 389-ds-base: using dscreate in verbose mode results in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["389-ds:1.4-8010020190903200205.eb48df33"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10224.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-14648","severity":"moderate","public_date":"2018-09-21T00:00:00Z","advisories":["RHSA-2018:3507","RHSA-2018:3127"],"bugzilla":"1630668","bugzilla_description":"CVE-2018-14648 389-ds-base: Mishandled search requests in servers/slapd/search.c:do_search() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["389-ds-base-0:1.3.8.4-15.el7","389-ds-base-0:1.3.7.5-29.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14648.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14624","severity":"moderate","public_date":"2018-08-31T00:36:00Z","advisories":["RHSA-2018:2757"],"bugzilla":"1619450","bugzilla_description":"CVE-2018-14624 389-ds-base: Server crash through modify command with large DN","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["389-ds-base-0:1.3.7.5-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14638","severity":"moderate","public_date":"2018-08-30T00:00:00Z","advisories":["RHSA-2018:2757"],"bugzilla":"1626079","bugzilla_description":"CVE-2018-14638 389-ds-base: Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["389-ds-base-0:1.3.7.5-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10935","severity":"moderate","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2757"],"bugzilla":"1613606","bugzilla_description":"CVE-2018-10935 389-ds-base: ldapsearch with server side sort allows users to cause a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["389-ds-base-0:1.3.7.5-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10935.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-10871","severity":"moderate","public_date":"2018-06-18T00:00:00Z","advisories":["RHSA-2019:3401"],"bugzilla":"1591480","bugzilla_description":"CVE-2018-10871 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-312","affected_packages":["389-ds:1.4-8010020190903200205.eb48df33"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10871.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2018-10850","severity":"moderate","public_date":"2018-06-06T00:00:00Z","advisories":["RHSA-2018:2757"],"bugzilla":"1588056","bugzilla_description":"CVE-2018-10850 389-ds-base: race condition on reference counter leads to DoS using persistent search","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["389-ds-base-0:1.3.7.5-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10850.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-1089","severity":"important","public_date":"2018-05-07T15:00:00Z","advisories":["RHSA-2018:1380","RHSA-2018:1364"],"bugzilla":"1559802","bugzilla_description":"CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["389-ds-base-0:1.2.11.15-95.el6_9","389-ds-base-0:1.3.7.5-21.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1054","severity":"important","public_date":"2018-03-05T00:00:00Z","advisories":["RHSA-2018:0515","RHSA-2018:0414"],"bugzilla":"1537314","bugzilla_description":"CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["389-ds-base-0:1.2.11.15-94.el6_9","389-ds-base-0:1.3.6.1-28.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15135","severity":"moderate","public_date":"2018-01-22T00:00:00Z","advisories":["RHSA-2018:0515","RHSA-2018:0414"],"bugzilla":"1525628","bugzilla_description":"CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["389-ds-base-0:1.2.11.15-94.el6_9","389-ds-base-0:1.3.6.1-28.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15135.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2017-15134","severity":"important","public_date":"2018-01-22T00:00:00Z","advisories":["RHSA-2018:0163"],"bugzilla":"1531573","bugzilla_description":"CVE-2017-15134 389-ds-base: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["389-ds-base-0:1.3.6.1-26.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15134.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7551","severity":"moderate","public_date":"2017-07-31T00:00:00Z","advisories":["RHSA-2017:2569"],"bugzilla":"1477669","bugzilla_description":"CVE-2017-7551 389-ds-base: Password brute-force possible for locked account due to different return codes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":["389-ds-base-0:1.3.6.1-19.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7551.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-2668","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":["RHSA-2017:0920","RHSA-2017:0893"],"bugzilla":"1436575","bugzilla_description":"CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["389-ds-base-0:1.2.11.15-91.el6_9","389-ds-base-0:1.3.5.10-20.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2668.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5405","severity":"low","public_date":"2016-10-26T00:00:00Z","advisories":["RHSA-2016:2594","RHSA-2016:2765"],"bugzilla":"1358865","bugzilla_description":"CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["389-ds-base-0:1.3.5.10-11.el7","389-ds-base-0:1.2.11.15-84.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-2591","severity":"low","public_date":"2016-09-13T00:00:00Z","advisories":[],"bugzilla":"1381481","bugzilla_description":"CVE-2017-2591 389-ds-base: Heap buffer overflow in uiduniq.c","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2591.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-4992","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:2594","RHSA-2016:2765"],"bugzilla":"1347760","bugzilla_description":"CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-209","affected_packages":["389-ds-base-0:1.3.5.10-11.el7","389-ds-base-0:1.2.11.15-84.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5416","severity":"moderate","public_date":"2016-05-25T00:00:00Z","advisories":["RHSA-2016:2594","RHSA-2016:2765"],"bugzilla":"1349540","bugzilla_description":"CVE-2016-5416 389-ds-base: ACI readable by anonymous user","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["389-ds-base-0:1.3.5.10-11.el7","389-ds-base-0:1.2.11.15-84.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5416.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-0741","severity":"important","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2016:0204"],"bugzilla":"1299416","bugzilla_description":"CVE-2016-0741 389-ds-base: worker threads do not detect abnormally closed connections causing DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-772->CWE-835","affected_packages":["389-ds-base-0:1.3.4.0-26.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0741.json"},{"CVE":"CVE-2015-3230","severity":"moderate","public_date":"2015-06-09T00:00:00Z","advisories":["RHBA-2015:1554"],"bugzilla":"1232096","bugzilla_description":"CVE-2015-3230 389-ds-base: nsSSL3Ciphers preference not enforced server side (regression)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-665->CWE-327","affected_packages":["389-ds-base-0:1.3.3.1-20.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3230.json"},{"CVE":"CVE-2015-1854","severity":"important","public_date":"2015-04-28T00:00:00Z","advisories":["RHSA-2015:0895"],"bugzilla":"1209573","bugzilla_description":"CVE-2015-1854 389-ds-base: access control bypass with modrdn","cvss_score":4.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-697->CWE-863","affected_packages":["389-ds-base-0:1.3.3.1-16.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1854.json"},{"CVE":"CVE-2014-8105","severity":"important","public_date":"2015-03-05T00:00:00Z","advisories":["RHSA-2015:0416","RHSA-2015:0628"],"bugzilla":"1167858","bugzilla_description":"CVE-2014-8105 389-ds-base: information disclosure through 'cn=changelog' subtree","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-862->CWE-200","affected_packages":["389-ds-base-0:1.3.3.1-13.el7","389-ds-base-0:1.2.11.15-50.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8105.json"},{"CVE":"CVE-2014-8112","severity":"low","public_date":"2015-03-05T00:00:00Z","advisories":["RHSA-2015:0416"],"bugzilla":"1172729","bugzilla_description":"CVE-2014-8112 389-ds-base: password hashing bypassed when \"nsslapd-unhashed-pw-switch\" is set to off","cvss_score":1.4,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-522","affected_packages":["389-ds-base-0:1.3.3.1-13.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8112.json"},{"CVE":"CVE-2014-3562","severity":"important","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2014:1032","RHSA-2014:1031"],"bugzilla":"1123477","bugzilla_description":"CVE-2014-3562 389-ds: unauthenticated information disclosure","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-862->CWE-201","affected_packages":["389-ds-base-0:1.3.1.6-26.el7_0","redhat-ds-base-0:8.2.11-15.el5dsrv","389-ds-base-0:1.2.11.15-34.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3562.json"},{"CVE":"CVE-2014-0132","severity":"important","public_date":"2014-03-13T00:00:00Z","advisories":["RHSA-2014:0292"],"bugzilla":"1074845","bugzilla_description":"CVE-2014-0132 389-ds: flaw in parsing authzid can lead to privilege escalation","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-290","affected_packages":["389-ds-base-0:1.2.11.15-32.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0132.json"},{"CVE":"CVE-2013-4485","severity":"important","public_date":"2013-11-21T00:00:00Z","advisories":["RHSA-2013:1753","RHSA-2013:1752"],"bugzilla":"1024552","bugzilla_description":"CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-30.el6_5","redhat-ds-base-0:8.2.11-14.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4485.json"},{"CVE":"CVE-2013-4283","severity":"important","public_date":"2013-08-28T00:00:00Z","advisories":["RHSA-2013:1182"],"bugzilla":"999634","bugzilla_description":"CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-22.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4283.json"},{"CVE":"CVE-2013-2219","severity":"moderate","public_date":"2013-07-29T00:00:00Z","advisories":["RHSA-2013:1119","RHSA-2013:1116"],"bugzilla":"979508","bugzilla_description":"CVE-2013-2219 Directory Server: ACLs inoperative in some search scenarios","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["redhat-ds-base-0:8.2.11-13.el5dsrv","389-ds-base-0:1.2.11.15-20.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2219.json"},{"CVE":"CVE-2013-1897","severity":"low","public_date":"2013-03-28T00:00:00Z","advisories":["RHSA-2013:0742"],"bugzilla":"928105","bugzilla_description":"CVE-2013-1897 389-ds: unintended information exposure when rootdse is enabled","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-14.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1897.json"},{"CVE":"CVE-2013-0336","severity":"moderate","public_date":"2013-03-27T00:00:00Z","advisories":[],"bugzilla":"913751","bugzilla_description":"CVE-2013-0336 389-ds-base: DoS when connecting with a missing username/dn","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0336.json"},{"CVE":"CVE-2013-0312","severity":"moderate","public_date":"2013-03-11T00:00:00Z","advisories":["RHSA-2013:0628"],"bugzilla":"912964","bugzilla_description":"CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-12.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0312.json"},{"CVE":"CVE-2012-2678","severity":"moderate","public_date":"2012-06-20T00:00:00Z","advisories":["RHSA-2012:0997","RHSA-2012:1041"],"bugzilla":"829933","bugzilla_description":"CVE-2012-2678 rhds/389: plaintext password disclosure flaw","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.10.2-18.el6_3","redhat-ds-base-0:8.2.10-3.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2678.json"},{"CVE":"CVE-2012-2746","severity":"low","public_date":"2012-05-10T00:00:00Z","advisories":["RHSA-2012:0997","RHSA-2012:1041"],"bugzilla":"833482","bugzilla_description":"CVE-2012-2746 rhds/389: plaintext password disclosure in audit log","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.10.2-18.el6_3","redhat-ds-base-0:8.2.10-3.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2746.json"},{"CVE":"CVE-2012-4450","severity":"moderate","public_date":"2012-04-16T00:00:00Z","advisories":["RHSA-2013:0503"],"bugzilla":"860603","bugzilla_description":"CVE-2012-4450 389-ds-base: Change on SLAPI_MODRDN_NEWSUPERIOR is not evaluated in ACL (ACL rules bypass possible)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-11.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4450.json"},{"CVE":"CVE-2012-0833","severity":"low","public_date":"2012-01-05T00:00:00Z","advisories":["RHSA-2012:0813","RHSA-2013:0549"],"bugzilla":"787014","bugzilla_description":"CVE-2012-0833 389: denial of service when using certificate groups","cvss_score":1.4,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["389-ds-base-0:1.2.10.2-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0833.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds_security_api_results.json
new file mode 100644
index 0000000..88b41f6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/389-ds_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14824","severity":"important","public_date":"2019-11-04T09:14:00Z","advisories":["RHSA-2019:3401","RHSA-2020:0464","RHSA-2019:3981"],"bugzilla":"1747448","bugzilla_description":"CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["389-ds:1.4-8000020191107193846.187e9a3f","389-ds:1.4-8010020190903200205.eb48df33","389-ds-base-0:1.3.9.1-12.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14824.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10171","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:1789"],"bugzilla":"1722081","bugzilla_description":"CVE-2019-10171 389-ds-base: Insufficient fix for CVE-2018-14648 denial of service in RHEL-7.5","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["389-ds-base-0:1.3.7.5-30.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10171.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3883","severity":"moderate","public_date":"2019-04-12T00:00:00Z","advisories":["RHSA-2019:3401","RHSA-2019:1896"],"bugzilla":"1693612","bugzilla_description":"CVE-2019-3883 389-ds-base: DoS via hanging secured connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["389-ds-base-0:1.3.8.4-25.1.el7_6","389-ds:1.4-8010020190903200205.eb48df33"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3883.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-10224","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:3401"],"bugzilla":"1677147","bugzilla_description":"CVE-2019-10224 389-ds-base: using dscreate in verbose mode results in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["389-ds:1.4-8010020190903200205.eb48df33"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10224.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-14648","severity":"moderate","public_date":"2018-09-21T00:00:00Z","advisories":["RHSA-2018:3507","RHSA-2018:3127"],"bugzilla":"1630668","bugzilla_description":"CVE-2018-14648 389-ds-base: Mishandled search requests in servers/slapd/search.c:do_search() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["389-ds-base-0:1.3.8.4-15.el7","389-ds-base-0:1.3.7.5-29.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14648.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14624","severity":"moderate","public_date":"2018-08-31T00:36:00Z","advisories":["RHSA-2018:2757"],"bugzilla":"1619450","bugzilla_description":"CVE-2018-14624 389-ds-base: Server crash through modify command with large DN","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["389-ds-base-0:1.3.7.5-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14638","severity":"moderate","public_date":"2018-08-30T00:00:00Z","advisories":["RHSA-2018:2757"],"bugzilla":"1626079","bugzilla_description":"CVE-2018-14638 389-ds-base: Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["389-ds-base-0:1.3.7.5-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10935","severity":"moderate","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2757"],"bugzilla":"1613606","bugzilla_description":"CVE-2018-10935 389-ds-base: ldapsearch with server side sort allows users to cause a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["389-ds-base-0:1.3.7.5-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10935.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-10871","severity":"moderate","public_date":"2018-06-18T00:00:00Z","advisories":["RHSA-2019:3401"],"bugzilla":"1591480","bugzilla_description":"CVE-2018-10871 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-312","affected_packages":["389-ds:1.4-8010020190903200205.eb48df33"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10871.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2018-10850","severity":"moderate","public_date":"2018-06-06T00:00:00Z","advisories":["RHSA-2018:2757"],"bugzilla":"1588056","bugzilla_description":"CVE-2018-10850 389-ds-base: race condition on reference counter leads to DoS using persistent search","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["389-ds-base-0:1.3.7.5-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10850.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-1089","severity":"important","public_date":"2018-05-07T15:00:00Z","advisories":["RHSA-2018:1380","RHSA-2018:1364"],"bugzilla":"1559802","bugzilla_description":"CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["389-ds-base-0:1.2.11.15-95.el6_9","389-ds-base-0:1.3.7.5-21.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1054","severity":"important","public_date":"2018-03-05T00:00:00Z","advisories":["RHSA-2018:0515","RHSA-2018:0414"],"bugzilla":"1537314","bugzilla_description":"CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["389-ds-base-0:1.2.11.15-94.el6_9","389-ds-base-0:1.3.6.1-28.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15135","severity":"moderate","public_date":"2018-01-22T00:00:00Z","advisories":["RHSA-2018:0515","RHSA-2018:0414"],"bugzilla":"1525628","bugzilla_description":"CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["389-ds-base-0:1.2.11.15-94.el6_9","389-ds-base-0:1.3.6.1-28.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15135.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2017-15134","severity":"important","public_date":"2018-01-22T00:00:00Z","advisories":["RHSA-2018:0163"],"bugzilla":"1531573","bugzilla_description":"CVE-2017-15134 389-ds-base: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["389-ds-base-0:1.3.6.1-26.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15134.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7551","severity":"moderate","public_date":"2017-07-31T00:00:00Z","advisories":["RHSA-2017:2569"],"bugzilla":"1477669","bugzilla_description":"CVE-2017-7551 389-ds-base: Password brute-force possible for locked account due to different return codes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":["389-ds-base-0:1.3.6.1-19.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7551.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-2668","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":["RHSA-2017:0920","RHSA-2017:0893"],"bugzilla":"1436575","bugzilla_description":"CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["389-ds-base-0:1.2.11.15-91.el6_9","389-ds-base-0:1.3.5.10-20.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2668.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5405","severity":"low","public_date":"2016-10-26T00:00:00Z","advisories":["RHSA-2016:2594","RHSA-2016:2765"],"bugzilla":"1358865","bugzilla_description":"CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["389-ds-base-0:1.3.5.10-11.el7","389-ds-base-0:1.2.11.15-84.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-2591","severity":"low","public_date":"2016-09-13T00:00:00Z","advisories":[],"bugzilla":"1381481","bugzilla_description":"CVE-2017-2591 389-ds-base: Heap buffer overflow in uiduniq.c","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2591.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-4992","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:2594","RHSA-2016:2765"],"bugzilla":"1347760","bugzilla_description":"CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-209","affected_packages":["389-ds-base-0:1.3.5.10-11.el7","389-ds-base-0:1.2.11.15-84.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5416","severity":"moderate","public_date":"2016-05-25T00:00:00Z","advisories":["RHSA-2016:2594","RHSA-2016:2765"],"bugzilla":"1349540","bugzilla_description":"CVE-2016-5416 389-ds-base: ACI readable by anonymous user","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["389-ds-base-0:1.3.5.10-11.el7","389-ds-base-0:1.2.11.15-84.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5416.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-0741","severity":"important","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2016:0204"],"bugzilla":"1299416","bugzilla_description":"CVE-2016-0741 389-ds-base: worker threads do not detect abnormally closed connections causing DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-772->CWE-835","affected_packages":["389-ds-base-0:1.3.4.0-26.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0741.json"},{"CVE":"CVE-2015-3230","severity":"moderate","public_date":"2015-06-09T00:00:00Z","advisories":["RHBA-2015:1554"],"bugzilla":"1232096","bugzilla_description":"CVE-2015-3230 389-ds-base: nsSSL3Ciphers preference not enforced server side (regression)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-665->CWE-327","affected_packages":["389-ds-base-0:1.3.3.1-20.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3230.json"},{"CVE":"CVE-2015-1854","severity":"important","public_date":"2015-04-28T00:00:00Z","advisories":["RHSA-2015:0895"],"bugzilla":"1209573","bugzilla_description":"CVE-2015-1854 389-ds-base: access control bypass with modrdn","cvss_score":4.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-697->CWE-863","affected_packages":["389-ds-base-0:1.3.3.1-16.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1854.json"},{"CVE":"CVE-2014-8105","severity":"important","public_date":"2015-03-05T00:00:00Z","advisories":["RHSA-2015:0416","RHSA-2015:0628"],"bugzilla":"1167858","bugzilla_description":"CVE-2014-8105 389-ds-base: information disclosure through 'cn=changelog' subtree","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-862->CWE-200","affected_packages":["389-ds-base-0:1.3.3.1-13.el7","389-ds-base-0:1.2.11.15-50.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8105.json"},{"CVE":"CVE-2014-8112","severity":"low","public_date":"2015-03-05T00:00:00Z","advisories":["RHSA-2015:0416"],"bugzilla":"1172729","bugzilla_description":"CVE-2014-8112 389-ds-base: password hashing bypassed when \"nsslapd-unhashed-pw-switch\" is set to off","cvss_score":1.4,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-522","affected_packages":["389-ds-base-0:1.3.3.1-13.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8112.json"},{"CVE":"CVE-2014-3562","severity":"important","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2014:1032","RHSA-2014:1031"],"bugzilla":"1123477","bugzilla_description":"CVE-2014-3562 389-ds: unauthenticated information disclosure","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-862->CWE-201","affected_packages":["389-ds-base-0:1.3.1.6-26.el7_0","redhat-ds-base-0:8.2.11-15.el5dsrv","389-ds-base-0:1.2.11.15-34.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3562.json"},{"CVE":"CVE-2014-0132","severity":"important","public_date":"2014-03-13T00:00:00Z","advisories":["RHSA-2014:0292"],"bugzilla":"1074845","bugzilla_description":"CVE-2014-0132 389-ds: flaw in parsing authzid can lead to privilege escalation","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-290","affected_packages":["389-ds-base-0:1.2.11.15-32.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0132.json"},{"CVE":"CVE-2013-4485","severity":"important","public_date":"2013-11-21T00:00:00Z","advisories":["RHSA-2013:1753","RHSA-2013:1752"],"bugzilla":"1024552","bugzilla_description":"CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-30.el6_5","redhat-ds-base-0:8.2.11-14.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4485.json"},{"CVE":"CVE-2013-4283","severity":"important","public_date":"2013-08-28T00:00:00Z","advisories":["RHSA-2013:1182"],"bugzilla":"999634","bugzilla_description":"CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-22.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4283.json"},{"CVE":"CVE-2013-2219","severity":"moderate","public_date":"2013-07-29T00:00:00Z","advisories":["RHSA-2013:1119","RHSA-2013:1116"],"bugzilla":"979508","bugzilla_description":"CVE-2013-2219 Directory Server: ACLs inoperative in some search scenarios","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["redhat-ds-base-0:8.2.11-13.el5dsrv","389-ds-base-0:1.2.11.15-20.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2219.json"},{"CVE":"CVE-2013-1897","severity":"low","public_date":"2013-03-28T00:00:00Z","advisories":["RHSA-2013:0742"],"bugzilla":"928105","bugzilla_description":"CVE-2013-1897 389-ds: unintended information exposure when rootdse is enabled","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-14.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1897.json"},{"CVE":"CVE-2013-0336","severity":"moderate","public_date":"2013-03-27T00:00:00Z","advisories":[],"bugzilla":"913751","bugzilla_description":"CVE-2013-0336 389-ds-base: DoS when connecting with a missing username/dn","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0336.json"},{"CVE":"CVE-2013-0312","severity":"moderate","public_date":"2013-03-11T00:00:00Z","advisories":["RHSA-2013:0628"],"bugzilla":"912964","bugzilla_description":"CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-12.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0312.json"},{"CVE":"CVE-2012-2678","severity":"moderate","public_date":"2012-06-20T00:00:00Z","advisories":["RHSA-2012:0997","RHSA-2012:1041"],"bugzilla":"829933","bugzilla_description":"CVE-2012-2678 rhds/389: plaintext password disclosure flaw","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.10.2-18.el6_3","redhat-ds-base-0:8.2.10-3.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2678.json"},{"CVE":"CVE-2012-2746","severity":"low","public_date":"2012-05-10T00:00:00Z","advisories":["RHSA-2012:0997","RHSA-2012:1041"],"bugzilla":"833482","bugzilla_description":"CVE-2012-2746 rhds/389: plaintext password disclosure in audit log","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.10.2-18.el6_3","redhat-ds-base-0:8.2.10-3.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2746.json"},{"CVE":"CVE-2012-4450","severity":"moderate","public_date":"2012-04-16T00:00:00Z","advisories":["RHSA-2013:0503"],"bugzilla":"860603","bugzilla_description":"CVE-2012-4450 389-ds-base: Change on SLAPI_MODRDN_NEWSUPERIOR is not evaluated in ACL (ACL rules bypass possible)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-11.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4450.json"},{"CVE":"CVE-2012-0833","severity":"low","public_date":"2012-01-05T00:00:00Z","advisories":["RHSA-2012:0813","RHSA-2013:0549"],"bugzilla":"787014","bugzilla_description":"CVE-2012-0833 389: denial of service when using certificate groups","cvss_score":1.4,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["389-ds-base-0:1.2.10.2-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0833.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/CUnit-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/CUnit-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/CUnit-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/CUnit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/CUnit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/CUnit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/GConf2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/GConf2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/GConf2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/GConf2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/GConf2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/GConf2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Judy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Judy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Judy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/LibRaw-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/LibRaw-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/LibRaw-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/LibRaw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/LibRaw_security_api_results.json
new file mode 100644
index 0000000..157d038
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/LibRaw_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24889","severity":"moderate","public_date":"2020-08-20T00:00:00Z","advisories":[],"bugzilla":"1882339","bugzilla_description":"CVE-2020-24889 libraw: buffer overflow vulnerability in LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24889.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-24890","severity":"moderate","public_date":"2020-08-20T00:00:00Z","advisories":[],"bugzilla":"1882344","bugzilla_description":"CVE-2020-24890 libraw: null pointer dereference in parse_tiff_ifd in src/metadata/tiff.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24890.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-15503","severity":"moderate","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1853477","bugzilla_description":"CVE-2020-15503 LibRaw: lack of thumbnail size range check can lead to buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15503.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15365","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1852093","bugzilla_description":"CVE-2020-15365 LibRaw: out-of-bounds write in parse_exif function in metadata/exif_gps.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15365.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20364","severity":"low","public_date":"2018-12-21T00:00:00Z","advisories":[],"bugzilla":"1663961","bugzilla_description":"CVE-2018-20364 libraw: NULL pointer dereference in LibRaw::copy_bayer resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20364.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20365","severity":"moderate","public_date":"2018-12-21T00:00:00Z","advisories":[],"bugzilla":"1663964","bugzilla_description":"CVE-2018-20365 libraw: Heap-based buffer overflow in LibRaw::raw2image() resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20365.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20363","severity":"low","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1663960","bugzilla_description":"CVE-2018-20363 libraw: NULL pointer dereference in LibRaw::raw2image resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20363.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20337","severity":"moderate","public_date":"2018-12-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1661555","bugzilla_description":"CVE-2018-20337 LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["LibRaw-0:0.19.5-1.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20337.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5819","severity":"low","public_date":"2018-12-13T00:00:00Z","advisories":["RHBA-2019:2044"],"bugzilla":"1661604","bugzilla_description":"CVE-2018-5819 LibRaw: DoS in parse_sinar_ia function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["LibRaw-0:0.19.2-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5819.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5818","severity":"low","public_date":"2018-12-13T00:00:00Z","advisories":["RHBA-2019:2044"],"bugzilla":"1661608","bugzilla_description":"CVE-2018-5818 LibRaw: DoS in parse_rollei function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["LibRaw-0:0.19.2-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5818.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5817","severity":"low","public_date":"2018-12-13T00:00:00Z","advisories":[],"bugzilla":"1661612","bugzilla_description":"CVE-2018-5817 LibRaw: DoS in unpacked_load_raw function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5817.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5815","severity":"moderate","public_date":"2018-07-22T00:00:00Z","advisories":[],"bugzilla":"1610151","bugzilla_description":"CVE-2018-5815 LibRaw: Integer overflow in internal/dcraw_common.cpp:parse_qt() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-5816","severity":"moderate","public_date":"2018-07-22T00:00:00Z","advisories":[],"bugzilla":"1610156","bugzilla_description":"CVE-2018-5816 LibRaw: Integer overflow in internal/dcraw_common.cpp:identify() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-5813","severity":"low","public_date":"2018-07-19T00:00:00Z","advisories":[],"bugzilla":"1609954","bugzilla_description":"CVE-2018-5813 libRaw: infinite loop in the parse_minolta function in dcraw/dcraw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5813.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5807","severity":"low","public_date":"2018-05-30T00:00:00Z","advisories":[],"bugzilla":"1610469","bugzilla_description":"CVE-2018-5807 LibRaw: out-of-bounds read in samsung_load_raw in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5807.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-5810","severity":"moderate","public_date":"2018-05-30T00:00:00Z","advisories":[],"bugzilla":"1610479","bugzilla_description":"CVE-2018-5810 libRaw: heap-based buffer overflow in rollei_load_raw in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5810.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-5811","severity":"moderate","public_date":"2018-05-30T00:00:00Z","advisories":[],"bugzilla":"1610483","bugzilla_description":"CVE-2018-5811 LibRaw: out-of-bounds read in nikon_coolscan_load_raw in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5811.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-5812","severity":"moderate","public_date":"2018-05-30T00:00:00Z","advisories":[],"bugzilla":"1610486","bugzilla_description":"CVE-2018-5812 libRaw: NULL pointer dereference in nikon_coolscan_load_raw in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5812.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5808","severity":"important","public_date":"2018-05-30T00:00:00Z","advisories":[],"bugzilla":"1661518","bugzilla_description":"CVE-2018-5808 LibRaw: stack-based buffer overflow in find_green() leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5808.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-5809","severity":"important","public_date":"2018-05-30T00:00:00Z","advisories":[],"bugzilla":"1661520","bugzilla_description":"CVE-2018-5809 LibRaw: stack-based buffer overflow in LibRaw::parse_exif() and subsequently execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5809.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-10528","severity":"moderate","public_date":"2018-04-27T00:00:00Z","advisories":[],"bugzilla":"1574313","bugzilla_description":"CVE-2018-10528 LibRaw: Stack-based buffer overflow in libraw_cxx.cpp:utf2char() allows for potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10528.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10529","severity":"low","public_date":"2018-04-27T00:00:00Z","advisories":[],"bugzilla":"1574325","bugzilla_description":"CVE-2018-10529 LibRaw: Out-of-bounds read in X3F property table list functionality in libraw_x3f.cpp and libraw_cxx.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10529.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5804","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":[],"bugzilla":"1591879","bugzilla_description":"CVE-2018-5804 LibRaw: type confusion error in identify() function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5805","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1591887","bugzilla_description":"CVE-2018-5805 LibRaw: Stack-based buffer overflow in quicktake_100_load_raw() function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5805.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-5806","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1591897","bugzilla_description":"CVE-2018-5806 LibRaw: NULL pointer dereference in leaf_hdr_load_raw() function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5806.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5800","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1553332","bugzilla_description":"CVE-2018-5800 LibRaw: Heap-based buffer overflow in LibRaw::kodak_ycbcr_load_raw function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5800.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5801","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1553334","bugzilla_description":"CVE-2018-5801 LibRaw: NULL pointer dereference in LibRaw::unpack function src/libraw_cxx.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5801.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5802","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1553335","bugzilla_description":"CVE-2018-5802 LibRaw: Out-of-bounds read in kodak_radc_load_raw function internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5802.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16909","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":[],"bugzilla":"1524859","bugzilla_description":"CVE-2017-16909 libraw: Heap-buffer overflow in the LibRaw::panasonic_load_raw() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16909.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16910","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":[],"bugzilla":"1524860","bugzilla_description":"CVE-2017-16910 libraw: Invalid read memory access in the LibRaw::xtrans_interpolate() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16910.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14348","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1492121","bugzilla_description":"CVE-2017-14348 libraw: Heap-based 1 byte buffer over-write in processCanonCameraInfo function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14348.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14608","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1499687","bugzilla_description":"CVE-2017-14608 libraw: Out-of-bounds read in the kodak_65000_load_raw function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14608.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14265","severity":"low","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1494405","bugzilla_description":"CVE-2017-14265 libraw: Stack based buffer overflow in the xtrans_interpolate function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14265.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13735","severity":"low","public_date":"2017-08-22T00:00:00Z","advisories":[],"bugzilla":"1488476","bugzilla_description":"CVE-2017-13735 libraw: Floating point exception in kodak_radc_load_raw function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6886","severity":"low","public_date":"2017-05-11T00:00:00Z","advisories":[],"bugzilla":"1451640","bugzilla_description":"CVE-2017-6886 libraw: Memory corruption in the parse_tiff_ifd()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6886.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6887","severity":"low","public_date":"2017-05-11T00:00:00Z","advisories":[],"bugzilla":"1451642","bugzilla_description":"CVE-2017-6887 libraw: Boundary error in the parse_tiff_ifd()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6887.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8366","severity":"moderate","public_date":"2015-11-30T00:00:00Z","advisories":[],"bugzilla":"1287056","bugzilla_description":"CVE-2015-8366 LibRaw: Index overflow in smal_decode_segment","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8366.json"},{"CVE":"CVE-2015-8367","severity":"low","public_date":"2015-11-30T00:00:00Z","advisories":[],"bugzilla":"1287076","bugzilla_description":"CVE-2015-8367 LibRaw: Memory objects are not intialized properly","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8367.json"},{"CVE":"CVE-2015-3885","severity":"low","public_date":"2015-05-11T00:00:00Z","advisories":[],"bugzilla":"1221249","bugzilla_description":"CVE-2015-3885 dcraw: input sanitization flaw leading to buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-190->CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3885.json"},{"CVE":"CVE-2013-1438","severity":"low","public_date":"2013-08-28T00:00:00Z","advisories":[],"bugzilla":"1002714","bugzilla_description":"CVE-2013-1438 CVE-2013-1439 LibRaw: multiple denial of service flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1438.json"},{"CVE":"CVE-2013-1439","severity":"low","public_date":"2013-08-28T00:00:00Z","advisories":[],"bugzilla":"1002714","bugzilla_description":"CVE-2013-1438 CVE-2013-1439 LibRaw: multiple denial of service flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1439.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager-glib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager-glib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager-glib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ModemManager_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Module_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Module_security_api_results.json
new file mode 100644
index 0000000..0ba4100
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Module_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15250","severity":"low","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1887810","bugzilla_description":"CVE-2020-15250 junit4: TemporaryFolder is shared between all users across system which could result in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15250.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2016-9590","severity":"moderate","public_date":"2017-01-12T00:00:00Z","advisories":["RHSA-2017:0359","RHSA-2017:0361","RHSA-2017:0200"],"bugzilla":"1410293","bugzilla_description":"CVE-2016-9590 puppet-swift: installs config file with world readable permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openstack-puppet-modules-1:8.1.10-2.el7ost","openstack-puppet-modules-1:7.1.5-2.el7ost","puppet-swift-0:9.4.3-3.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9590.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2015-3406","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209911","bugzilla_description":"CVE-2015-3406 perl-Module-Signature: unsigned files interpreted as signed in some circumstances","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3406.json"},{"CVE":"CVE-2015-3407","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209915","bugzilla_description":"CVE-2015-3407 perl-Module-Signature: arbitrary code execution during test phase","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3407.json"},{"CVE":"CVE-2015-3408","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209917","bugzilla_description":"CVE-2015-3408 perl-Module-Signature: arbitrary code execution when verifying module signatures","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3408.json"},{"CVE":"CVE-2015-3409","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209918","bugzilla_description":"CVE-2015-3409 perl-Module-Signature: arbitrary modules loading in some circumstances","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3409.json"},{"CVE":"CVE-2015-1842","severity":"important","public_date":"2015-03-10T00:00:00Z","advisories":["RHSA-2015:0789","RHSA-2015:0832","RHSA-2015:0831","RHSA-2015:0830","RHSA-2015:0791"],"bugzilla":"1201875","bugzilla_description":"CVE-2015-1842 openstack-puppet-modules: pacemaker configured with default password","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-798","affected_packages":["openstack-foreman-installer-0:3.0.22-1.el7ost","openstack-puppet-modules-0:2014.2.13-2.el7ost","openstack-puppet-modules-0:2014.1.2-1.el6ost","openstack-foreman-installer-0:2.0.34-1.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1842.json"},{"CVE":"CVE-2013-1437","severity":"low","public_date":"2013-08-21T00:00:00Z","advisories":[],"bugzilla":"996281","bugzilla_description":"CVE-2013-1437 perl-Module-Metadata: incorrectly documents that it does not execute unsafe code","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1437.json"},{"CVE":"CVE-2015-0250","severity":"moderate","public_date":"2012-07-25T00:00:00Z","advisories":["RHSA-2015:2560","RHSA-2016:0041","RHSA-2016:0042","RHSA-2015:2559"],"bugzilla":"1203762","bugzilla_description":"CVE-2015-0250 batik: XML External Entity (XXE) injection in SVG parsing","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0250.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-adsl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-adsl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-adsl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-bluetooth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-bluetooth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-bluetooth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-cloud-setup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-cloud-setup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-cloud-setup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-config-connectivity-redhat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-config-connectivity-redhat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-config-connectivity-redhat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-config-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-config-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-config-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-dispatcher-routing-rules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-dispatcher-routing-rules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-dispatcher-routing-rules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libnm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libnm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libnm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libnm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libnm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libnm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libreswan-gnome_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libreswan-gnome_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libreswan-gnome_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libreswan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libreswan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-libreswan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-ovs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-ovs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-ovs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-ppp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-ppp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-ppp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-team_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-team_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-team_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-tui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-tui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-tui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-wifi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-wifi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-wifi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-wwan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-wwan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager-wwan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager_security_api_results.json
new file mode 100644
index 0000000..5b58c39
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/NetworkManager_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10754","severity":"moderate","public_date":"2020-05-29T04:41:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4003","RHSA-2020:3011"],"bugzilla":"1841041","bugzilla_description":"CVE-2020-10754 NetworkManager: user configuration not honoured leaving the connection unauthenticated via insecure defaults","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287->CWE-306","affected_packages":["NetworkManager-1:1.18.8-1.el7","redhat-coreos-43.82.202007300301.0","NetworkManager-1:1.22.8-5.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10754.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-15688","severity":"important","public_date":"2018-10-26T00:00:00Z","advisories":["RHSA-2019:0049","RHSA-2018:3665"],"bugzilla":"1639067","bugzilla_description":"CVE-2018-15688 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-190->CWE-122","affected_packages":["NetworkManager-1:1.12.0-8.el7_6","systemd-0:219-62.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15688.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-1000135","severity":"moderate","public_date":"2018-03-20T00:00:00Z","advisories":[],"bugzilla":"1558238","bugzilla_description":"CVE-2018-1000135 NetworkManager: Information exposure in DNS resolver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000135.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-0764","severity":"low","public_date":"2016-04-02T00:00:00Z","advisories":["RHSA-2016:2581"],"bugzilla":"1324025","bugzilla_description":"CVE-2016-0764 NetworkManager: Race condition allowing info leak","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-362","affected_packages":["NetworkManager-1:1.4.0-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0764.json"},{"CVE":"CVE-2015-2924","severity":"low","public_date":"2015-04-02T00:00:00Z","advisories":["RHSA-2015:2315"],"bugzilla":"1209902","bugzilla_description":"CVE-2015-2924 NetworkManager: denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-358","affected_packages":["NetworkManager-1:1.0.6-27.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2924.json"},{"CVE":"CVE-2015-0272","severity":"moderate","public_date":"2015-02-23T00:00:00Z","advisories":["RHSA-2015:2315"],"bugzilla":"1192132","bugzilla_description":"CVE-2015-0272 NetworkManager: remote DoS using IPv6 RA with bogus MTU","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["NetworkManager-1:1.0.6-27.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0272.json"},{"CVE":"CVE-2012-1096","severity":"low","public_date":"2012-02-29T00:00:00Z","advisories":[],"bugzilla":"769807","bugzilla_description":"CVE-2012-1096 NetworkManager, wpa_supplicant: Improper x509v3 certificate and key file paths sanitization","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1096.json"},{"CVE":"CVE-2012-2736","severity":"low","public_date":"2012-01-15T00:00:00Z","advisories":[],"bugzilla":"782627","bugzilla_description":"CVE-2012-2736 NetworkManager: creating new WPA-secured wireless network results in insecure network being created instead","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2736.json"},{"CVE":"CVE-2011-3364","severity":"important","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2011:1338"],"bugzilla":"737338","bugzilla_description":"CVE-2011-3364 NetworkManager: Console user can escalate to root via newlines in ifcfg-rh connection name","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["NetworkManager-1:0.8.1-9.el6_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3364.json"},{"CVE":"CVE-2011-2176","severity":"moderate","public_date":"2011-06-08T00:00:00Z","advisories":["RHSA-2011:0930"],"bugzilla":"709662","bugzilla_description":"CVE-2011-2176 NetworkManager: Did not honour PolicyKit auth_admin action element by creation of Ad-Hoc wireless networks","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["NetworkManager-1:0.8.1-9.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2176.json"},{"CVE":"CVE-2009-4145","severity":"moderate","public_date":"2009-12-10T00:00:00Z","advisories":["RHSA-2010:0108"],"bugzilla":"546117","bugzilla_description":"CVE-2009-4145 NetworkManager: information disclosure by nm-connection-editor","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["NetworkManager-1:0.7.0-9.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4145.json"},{"CVE":"CVE-2009-4144","severity":"moderate","public_date":"2009-12-08T00:00:00Z","advisories":["RHSA-2010:0108"],"bugzilla":"546795","bugzilla_description":"CVE-2009-4144 NetworkManager: WPA enterprise network not verified when certificate is removed","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["NetworkManager-1:0.7.0-9.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4144.json"},{"CVE":"CVE-2009-0365","severity":"moderate","public_date":"2009-03-03T00:00:00Z","advisories":["RHSA-2009:0361","RHSA-2009:0362"],"bugzilla":"487722","bugzilla_description":"CVE-2009-0365 NetworkManager: GetSecrets disclosure","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["NetworkManager-0:0.3.1-5.el4","NetworkManager-1:0.7.0-4.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0365.json"},{"CVE":"CVE-2009-0578","severity":"moderate","public_date":"2009-03-03T00:00:00Z","advisories":["RHSA-2009:0361"],"bugzilla":"487752","bugzilla_description":"CVE-2009-0578 NetworkManager: local users can modify the connection settings","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["NetworkManager-1:0.7.0-4.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0578.json"},{"CVE":"CVE-2006-7246","severity":"moderate","public_date":"2006-05-10T00:00:00Z","advisories":[],"bugzilla":"756418","bugzilla_description":"CVE-2006-7246 NetworkManager, wpa_supplicant (WPA-Enterprise): Verify that the certificate is from trusted CA and matches the specified subject","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7246.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenEXR-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenEXR-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenEXR-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenEXR-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenEXR-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenEXR-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-lanserv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-lanserv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-lanserv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-perl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI-perl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI_security_api_results.json
new file mode 100644
index 0000000..038cb32
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/OpenIPMI_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4786","severity":"moderate","public_date":"2013-07-08T00:00:00Z","advisories":[],"bugzilla":"1326638","bugzilla_description":"CVE-2013-4786 OpenIPMI, freeipmi: Leakage of password hashes via RAKP authentication","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4786.json"},{"CVE":"CVE-2011-4339","severity":"moderate","public_date":"2011-12-13T00:00:00Z","advisories":["RHSA-2011:1814","RHSA-2013:0123"],"bugzilla":"742837","bugzilla_description":"CVE-2011-4339 OpenIPMI: IPMI event daemon creates PID file with world writeable permissions","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["OpenIPMI-0:2.0.16-16.el5","ipmitool-0:1.8.11-12.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4339.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-command-not-found_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-command-not-found_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-command-not-found_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-cron_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-cron_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-cron_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-glib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-glib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-glib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-gstreamer-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-gstreamer-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-gstreamer-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-gtk3-module_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-gtk3-module_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit-gtk3-module_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit_security_api_results.json
new file mode 100644
index 0000000..f02cb18
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/PackageKit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16121","severity":"low","public_date":"2020-09-24T00:00:00Z","advisories":[],"bugzilla":"1884560","bugzilla_description":"CVE-2020-16121 PackageKit: local attacker could use this issue to learn the MIME type of any file on the system","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16121.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-16122","severity":"moderate","public_date":"2020-09-24T00:00:00Z","advisories":[],"bugzilla":"1884562","bugzilla_description":"CVE-2020-16122 PackageKit: local user could possibly use this issue to install untrusted packages","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16122.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-1106","severity":"moderate","public_date":"2018-04-23T14:00:00Z","advisories":["RHSA-2018:1224"],"bugzilla":"1565992","bugzilla_description":"CVE-2018-1106 PackageKit: authentication bypass allows to install signed packages without administrator privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["PackageKit-0:1.1.5-2.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1106.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2013-1764","severity":"low","public_date":"2013-07-30T00:00:00Z","advisories":[],"bugzilla":"1090771","bugzilla_description":"CVE-2013-1764 PackageKit: downgrade packages when using the Zypper backend","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1764.json"},{"CVE":"CVE-2011-2515","severity":"low","public_date":"2011-07-01T00:00:00Z","advisories":[],"bugzilla":"717566","bugzilla_description":"CVE-2011-2515 PackageKit: installs unsigned RPM packages as though they were signed","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2515.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Package_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Package_security_api_results.json
new file mode 100644
index 0000000..f02cb18
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Package_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16121","severity":"low","public_date":"2020-09-24T00:00:00Z","advisories":[],"bugzilla":"1884560","bugzilla_description":"CVE-2020-16121 PackageKit: local attacker could use this issue to learn the MIME type of any file on the system","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16121.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-16122","severity":"moderate","public_date":"2020-09-24T00:00:00Z","advisories":[],"bugzilla":"1884562","bugzilla_description":"CVE-2020-16122 PackageKit: local user could possibly use this issue to install untrusted packages","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16122.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-1106","severity":"moderate","public_date":"2018-04-23T14:00:00Z","advisories":["RHSA-2018:1224"],"bugzilla":"1565992","bugzilla_description":"CVE-2018-1106 PackageKit: authentication bypass allows to install signed packages without administrator privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["PackageKit-0:1.1.5-2.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1106.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2013-1764","severity":"low","public_date":"2013-07-30T00:00:00Z","advisories":[],"bugzilla":"1090771","bugzilla_description":"CVE-2013-1764 PackageKit: downgrade packages when using the Zypper backend","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1764.json"},{"CVE":"CVE-2011-2515","severity":"low","public_date":"2011-07-01T00:00:00Z","advisories":[],"bugzilla":"717566","bugzilla_description":"CVE-2011-2515 PackageKit: installs unsigned RPM packages as though they were signed","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2515.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL2-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL2-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL2-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL_security_api_results.json
new file mode 100644
index 0000000..ad7c9f0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SDL_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14906","severity":"important","public_date":"2019-11-25T00:00:00Z","advisories":["RHSA-2019:4024"],"bugzilla":"1777372","bugzilla_description":"CVE-2019-14906 SDL: CVE-2019-13616 not fixed in Red Hat Enterprise Linux 7 erratum RHSA-2019:3950","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-787|CWE-125)","affected_packages":["SDL-0:1.2.15-15.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-13616","severity":"important","public_date":"2019-07-30T00:00:00Z","advisories":["RHSA-2019:3951","RHSA-2020:0293","RHSA-2019:3950"],"bugzilla":"1747237","bugzilla_description":"CVE-2019-13616 SDL: heap-based buffer overflow in SDL blit functions in video/SDL_blit*.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-787|CWE-125)","affected_packages":["SDL-0:1.2.15-14.el7_7","SDL-0:1.2.15-36.el8_1","SDL-0:1.2.15-33.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13616.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-13626","severity":"moderate","public_date":"2019-07-17T00:00:00Z","advisories":[],"bugzilla":"1731101","bugzilla_description":"CVE-2019-13626 SDL: integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c leads to heap-based buffer over-read in Fill_IMA_ADPCM_block","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13626.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-12221","severity":"low","public_date":"2019-05-20T00:00:00Z","advisories":[],"bugzilla":"1732250","bugzilla_description":"CVE-2019-12221 SDL: null-pointer dereference in function SDL_free_REAL in stdlib/SDL_malloc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12221.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-12216","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":[],"bugzilla":"1732252","bugzilla_description":"CVE-2019-12216 SDL: heap-based buffer overflow in function SDL2_image function IMG_LoadPCX_RW in IMG_pcx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12216.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-12217","severity":"low","public_date":"2019-05-20T00:00:00Z","advisories":[],"bugzilla":"1732254","bugzilla_description":"CVE-2019-12217 SDL: null-pointer dereference in function stdio_read in file/SDL_rwops.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12217.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-12218","severity":"low","public_date":"2019-05-20T00:00:00Z","advisories":[],"bugzilla":"1732256","bugzilla_description":"CVE-2019-12218 SDL: null-pointer dereference in function IMG_LoadPCX_RW in IMG_pcx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12218.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-12219","severity":"low","public_date":"2019-05-20T00:00:00Z","advisories":[],"bugzilla":"1732258","bugzilla_description":"CVE-2019-12219 SDL: invalid free error in function SDL_SetError_REAL","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12219.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-12220","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":[],"bugzilla":"1732260","bugzilla_description":"CVE-2019-12220 SDL: out-of-bounds read in function SDL_FreePalette_REAL in video/SDL_pixels.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12220.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-12222","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":[],"bugzilla":"1732262","bugzilla_description":"CVE-2019-12222 SDL: out-of-bounds read in function SDL_InvalidateMap in video/SDL_pixels.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12222.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-7638","severity":"moderate","public_date":"2019-02-08T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1677143","bugzilla_description":"CVE-2019-7638 SDL: heap-based buffer over-read in Map1toN in video/SDL_pixels.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7638.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-7574","severity":"low","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1676749","bugzilla_description":"CVE-2019-7574 SDL: heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7574.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-7637","severity":"moderate","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1677151","bugzilla_description":"CVE-2019-7637 SDL: heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7637.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-7636","severity":"moderate","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1677156","bugzilla_description":"CVE-2019-7636 SDL: heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7636.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-7635","severity":"low","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1677158","bugzilla_description":"CVE-2019-7635 SDL: heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7635.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-7577","severity":"low","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1676509","bugzilla_description":"CVE-2019-7577 SDL: buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7577.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-7575","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1676743","bugzilla_description":"CVE-2019-7575 SDL: heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7575.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-7573","severity":"low","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1676751","bugzilla_description":"CVE-2019-7573 SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7573.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-7572","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1676753","bugzilla_description":"CVE-2019-7572 SDL: buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7572.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-7578","severity":"low","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1676781","bugzilla_description":"CVE-2019-7578 SDL: heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7578.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-7576","severity":"low","public_date":"2019-02-05T00:00:00Z","advisories":["RHSA-2020:3868"],"bugzilla":"1676755","bugzilla_description":"CVE-2019-7576 SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["SDL-0:1.2.15-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7576.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2017-2888","severity":"important","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1500623","bugzilla_description":"CVE-2017-2888 SDL: Integer overflow while creating a new RGB surface","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2888.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SLOF_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SLOF_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SLOF_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SuperLU-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SuperLU-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SuperLU-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SuperLU_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SuperLU_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/SuperLU_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/WALinuxAgent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/WALinuxAgent_security_api_results.json
new file mode 100644
index 0000000..2dc5df3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/WALinuxAgent_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-0804","severity":"moderate","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2019:1527"],"bugzilla":"1684181","bugzilla_description":"CVE-2019-0804 WALinuxAgent: swapfile created with weak permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["WALinuxAgent-0:2.2.32-1.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"5.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Xaw3d-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Xaw3d-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Xaw3d-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Xaw3d_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Xaw3d_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/Xaw3d_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aajohan-comfortaa-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aajohan-comfortaa-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aajohan-comfortaa-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abattis-cantarell-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abattis-cantarell-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abattis-cantarell-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-ccpp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-ccpp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-ccpp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-coredump-helper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-coredump-helper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-coredump-helper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-kerneloops_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-kerneloops_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-kerneloops_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-pstoreoops_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-pstoreoops_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-pstoreoops_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-vmcore_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-vmcore_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-vmcore_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-xorg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-xorg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-addon-xorg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-cli-ng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-cli-ng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-cli-ng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-console-notification_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-console-notification_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-console-notification_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-dbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-dbus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-dbus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-desktop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-desktop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-desktop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-gui-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-gui-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-gui-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-java-connector_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-java-connector_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-java-connector_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-plugin-machine-id_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-plugin-machine-id_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-plugin-machine-id_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-plugin-sosreport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-plugin-sosreport_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-plugin-sosreport_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-tui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-tui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt-tui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt_security_api_results.json
new file mode 100644
index 0000000..b4c3da5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/abrt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5273","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2015:2505"],"bugzilla":"1262252","bugzilla_description":"CVE-2015-5273 abrt: Insecure temporary directory usage in abrt-action-install-debuginfo-to-abrt-cache","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["abrt-0:2.1.11-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5273.json"},{"CVE":"CVE-2015-5287","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2015:2505"],"bugzilla":"1266837","bugzilla_description":"CVE-2015-5287 abrt: incorrect permissions on /var/spool/abrt","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["abrt-0:2.1.11-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5287.json"},{"CVE":"CVE-2015-3159","severity":"important","public_date":"2015-04-29T00:00:00Z","advisories":["RHSA-2015:1210","RHSA-2015:1083"],"bugzilla":"1216962","bugzilla_description":"CVE-2015-3159 abrt: missing process environment sanitizaton in abrt-action-install-debuginfo-to-abrt-cache","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:N","CWE":"CWE-20","affected_packages":["abrt-0:2.0.8-26.el6_6.1","abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3159.json"},{"CVE":"CVE-2015-3151","severity":"important","public_date":"2015-04-22T00:00:00Z","advisories":["RHSA-2015:1083"],"bugzilla":"1214451","bugzilla_description":"CVE-2015-3151 abrt: directory traversals in several D-Bus methods implemented by abrt-dbus","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:N","CWE":"CWE-22","affected_packages":["abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3151.json"},{"CVE":"CVE-2015-3150","severity":"important","public_date":"2015-04-22T00:00:00Z","advisories":["RHSA-2015:1083"],"bugzilla":"1214457","bugzilla_description":"CVE-2015-3150 abrt: abrt-dbus does not guard against crafted problem directory path arguments","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:N","CWE":"CWE-20","affected_packages":["abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3150.json"},{"CVE":"CVE-2015-3142","severity":"low","public_date":"2015-04-17T00:00:00Z","advisories":["RHSA-2015:1210","RHSA-2015:1083"],"bugzilla":"1212818","bugzilla_description":"CVE-2015-3142 abrt: abrt-hook-ccpp writes core dumps to existing files owned by others","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-282->CWE-200","affected_packages":["abrt-0:2.0.8-26.el6_6.1","abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3142.json"},{"CVE":"CVE-2015-1869","severity":"important","public_date":"2015-04-17T00:00:00Z","advisories":["RHSA-2015:1210","RHSA-2015:1083"],"bugzilla":"1212861","bugzilla_description":"CVE-2015-1869 abrt: default event scripts follow symbolic links","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-59","affected_packages":["abrt-0:2.0.8-26.el6_6.1","abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1869.json"},{"CVE":"CVE-2015-1870","severity":"low","public_date":"2015-04-17T00:00:00Z","advisories":["RHSA-2015:1210","RHSA-2015:1083"],"bugzilla":"1212868","bugzilla_description":"CVE-2015-1870 abrt: default abrt event scripts lead to information disclosure","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["abrt-0:2.0.8-26.el6_6.1","abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1870.json"},{"CVE":"CVE-2015-3147","severity":"low","public_date":"2015-04-17T00:00:00Z","advisories":["RHSA-2015:1210","RHSA-2015:1083"],"bugzilla":"1212953","bugzilla_description":"CVE-2015-3147 abrt: does not validate contents of uploaded problem reports","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-283","affected_packages":["abrt-0:2.0.8-26.el6_6.1","abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3147.json"},{"CVE":"CVE-2015-1862","severity":"important","public_date":"2015-04-14T00:00:00Z","advisories":[],"bugzilla":"1211223","bugzilla_description":"CVE-2015-1862 abrt: local privilege escalation through kernel.core_pattern","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1862.json"},{"CVE":"CVE-2015-3315","severity":"important","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:1210","RHSA-2015:1083"],"bugzilla":"1211835","bugzilla_description":"CVE-2015-3315 abrt: Various race-conditions and symlink issues found in abrt","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-362->CWE-59","affected_packages":["abrt-0:2.0.8-26.el6_6.1","abrt-0:2.1.11-22.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3315.json"},{"CVE":"CVE-2013-4209","severity":"low","public_date":"2013-09-06T00:00:00Z","advisories":[],"bugzilla":"991604","bugzilla_description":"CVE-2013-4209 ABRT: (substantially) limited leak of unauthorized information","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4209.json"},{"CVE":"CVE-2012-5659","severity":"important","public_date":"2013-01-30T00:00:00Z","advisories":["RHSA-2013:0215"],"bugzilla":"854011","bugzilla_description":"CVE-2012-5659 abrt: Arbitrary Python code execution due improper sanitization of the PYTHONPATH environment variable by installing debuginfo packages into cache","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["abrt-0:2.0.8-6.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5659.json"},{"CVE":"CVE-2012-5660","severity":"moderate","public_date":"2013-01-30T00:00:00Z","advisories":["RHSA-2013:0215"],"bugzilla":"887866","bugzilla_description":"CVE-2012-5660 abrt: Race condition in abrt-action-install-debuginfo","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["abrt-0:2.0.8-6.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5660.json"},{"CVE":"CVE-2012-1106","severity":"low","public_date":"2012-02-06T00:00:00Z","advisories":["RHSA-2012:0841"],"bugzilla":"785163","bugzilla_description":"CVE-2012-1106 abrt: Setuid process core dump archived with unsafe GID permissions","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["abrt-0:2.0.8-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1106.json"},{"CVE":"CVE-2011-4088","severity":"low","public_date":"2011-11-18T00:00:00Z","advisories":["RHSA-2012:0841"],"bugzilla":"749854","bugzilla_description":"CVE-2011-4088 abrt: may leak some personal information to bugzilla with some certain applications","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["abrt-0:2.0.8-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4088.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/accountsservice-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/accountsservice-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/accountsservice-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/accountsservice-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/accountsservice-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/accountsservice-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/accountsservice_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/accountsservice_security_api_results.json
new file mode 100644
index 0000000..7052de9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/accountsservice_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-14036","severity":"moderate","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1601019","bugzilla_description":"CVE-2018-14036 accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14036.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2012-6655","severity":"low","public_date":"2012-09-17T00:00:00Z","advisories":[],"bugzilla":"1130538","bugzilla_description":"CVE-2012-6655 accountsservice: local encrypted password disclosure when changing password","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6655.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/acl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/acl_security_api_results.json
new file mode 100644
index 0000000..fe98cef
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/acl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-3183","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:2943","RHSA-2018:2942","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002"],"bugzilla":"1639268","bugzilla_description":"CVE-2018-3183 OpenJDK: Unrestricted access to scripting engine (Scripting, 8202936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-11-openjdk-1:11.0.1.13-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-3169","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639293","bugzilla_description":"CVE-2018-3169 OpenJDK: Improper field access checks (Hotspot, 8199226)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3214","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639301","bugzilla_description":"CVE-2018-3214 OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3139","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639442","bugzilla_description":"CVE-2018-3139 OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3139.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3180","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639484","bugzilla_description":"CVE-2018-3180 OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-3136","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639755","bugzilla_description":"CVE-2018-3136 OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3149","severity":"important","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639834","bugzilla_description":"CVE-2018-3149 OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3149.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3209","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3003","RHSA-2018:3002"],"bugzilla":"1639904","bugzilla_description":"CVE-2018-3209 Oracle JDK: unspecified vulnerability fixed in 8u191 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3209.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3211","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3003","RHSA-2018:3002"],"bugzilla":"1639906","bugzilla_description":"CVE-2018-3211 Oracle JDK: unspecified vulnerability fixed in 8u191 and 11.0.1 (Serviceability)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.6"},{"CVE":"CVE-2018-2952","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:2283","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2241","RHSA-2018:2253","RHSA-2018:2242","RHSA-2018:2286"],"bugzilla":"1600925","bugzilla_description":"CVE-2018-2952 OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2952.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2938","severity":"important","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602141","bugzilla_description":"CVE-2018-2938 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, and 8u181 (Java DB)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2938.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2018-2964","severity":"critical","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2256","RHSA-2018:2253"],"bugzilla":"1602142","bugzilla_description":"CVE-2018-2964 Oracle JDK: unspecified vulnerability fixed in 8u181 and 10.0.2 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2964.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2941","severity":"critical","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2256","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2253"],"bugzilla":"1602143","bugzilla_description":"CVE-2018-2941 Oracle JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2941.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2942","severity":"critical","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602144","bugzilla_description":"CVE-2018-2942 Oracle JDK: unspecified vulnerability fixed in 7u191 and 8u181 (Windows DLL)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2973","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2253"],"bugzilla":"1602145","bugzilla_description":"CVE-2018-2973 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-2940","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2253"],"bugzilla":"1602146","bugzilla_description":"CVE-2018-2940 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2940.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-2814","severity":"critical","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1270","RHSA-2018:1206","RHSA-2018:1191","RHSA-2018:1204","RHSA-2018:1205","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567121","bugzilla_description":"CVE-2018-2814 OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2794","severity":"important","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567126","bugzilla_description":"CVE-2018-2794 OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2794.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-2795","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567351","bugzilla_description":"CVE-2018-2795 OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2815","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1270","RHSA-2018:1206","RHSA-2018:1191","RHSA-2018:1204","RHSA-2018:1205","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567537","bugzilla_description":"CVE-2018-2815 OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2799","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567542","bugzilla_description":"CVE-2018-2799 OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2799.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2798","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567543","bugzilla_description":"CVE-2018-2798 OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2797","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567545","bugzilla_description":"CVE-2018-2797 OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2796","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567546","bugzilla_description":"CVE-2018-2796 OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2800","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568163","bugzilla_description":"CVE-2018-2800 OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-2790","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568515","bugzilla_description":"CVE-2018-2790 OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-2811","severity":"important","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1204","RHSA-2018:1202"],"bugzilla":"1569203","bugzilla_description":"CVE-2018-2811 Oracle JDK: unspecified vulnerability fixed in 8u171 and 10.0.1 (Install)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2811.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-2783","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1203","RHSA-2018:0100","RHSA-2018:0099"],"bugzilla":"1569204","bugzilla_description":"CVE-2018-2783 Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-13785","severity":"low","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1599943","bugzilla_description":"CVE-2018-13785 libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-369","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-2678","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534263","bugzilla_description":"CVE-2018-2678 OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2678.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2677","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534288","bugzilla_description":"CVE-2018-2677 OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2663","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534296","bugzilla_description":"CVE-2018-2663 OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2663.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2579","severity":"low","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534298","bugzilla_description":"CVE-2018-2579 OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-567","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2579.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2588","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534299","bugzilla_description":"CVE-2018-2588 OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-90","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-2602","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534525","bugzilla_description":"CVE-2018-2602 OpenJDK: loading of classes from untrusted locations (I18n, 8182601)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2018-2599","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534543","bugzilla_description":"CVE-2018-2599 OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2599.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2603","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534553","bugzilla_description":"CVE-2018-2603 OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2603.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2629","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0100","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534625","bugzilla_description":"CVE-2018-2629 OpenJDK: GSS context use-after-free (JGSS, 8186212)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2618","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534762","bugzilla_description":"CVE-2018-2618 OpenJDK: insufficient strength of key agreement (JCE, 8185292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-2641","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534766","bugzilla_description":"CVE-2018-2641 OpenJDK: GTK library loading use-after-free (AWT, 8185325)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-2582","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0521","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534768","bugzilla_description":"CVE-2018-2582 OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-2634","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534943","bugzilla_description":"CVE-2018-2634 OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-2637","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534970","bugzilla_description":"CVE-2018-2637 OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-2633","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535036","bugzilla_description":"CVE-2018-2633 OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2018-2638","severity":"critical","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535350","bugzilla_description":"CVE-2018-2638 Oracle JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2639","severity":"critical","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535351","bugzilla_description":"CVE-2018-2639 Oracle JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2627","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535352","bugzilla_description":"CVE-2018-2627 Oracle JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Installer)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2657","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0458","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:1463"],"bugzilla":"1535353","bugzilla_description":"CVE-2018-2657 Oracle JDK: unspecified vulnerability fixed in 6u181 and 7u171 (Serialization)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2657.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2581","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:1812","RHSA-2018:0100","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535354","bugzilla_description":"CVE-2018-2581 Oracle JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2581.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-10285","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501868","bugzilla_description":"CVE-2017-10285 OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10346","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501873","bugzilla_description":"CVE-2017-10346 OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10388","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502038","bugzilla_description":"CVE-2017-10388 OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10274","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3047"],"bugzilla":"1502053","bugzilla_description":"CVE-2017-10274 OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10349","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502611","bugzilla_description":"CVE-2017-10349 OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10349.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10357","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502614","bugzilla_description":"CVE-2017-10357 OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10357.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10348","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502629","bugzilla_description":"CVE-2017-10348 OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10347","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502632","bugzilla_description":"CVE-2017-10347 OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10350","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502640","bugzilla_description":"CVE-2017-10350 OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10350.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10281","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502649","bugzilla_description":"CVE-2017-10281 OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10281.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10295","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502687","bugzilla_description":"CVE-2017-10295 OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10295.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-10345","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502858","bugzilla_description":"CVE-2017-10345 OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-10355","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502869","bugzilla_description":"CVE-2017-10355 OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10355.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10356","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1503169","bugzilla_description":"CVE-2017-10356 OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10356.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2017-10309","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267"],"bugzilla":"1503319","bugzilla_description":"CVE-2017-10309 Oracle JDK: unspecified vulnerability fixed in 8u151 and 9.0.1 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10309.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2017-10293","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3047"],"bugzilla":"1503320","bugzilla_description":"CVE-2017-10293 Oracle JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10293.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-10107","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471266","bugzilla_description":"CVE-2017-10107 OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10107.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10089","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471270","bugzilla_description":"CVE-2017-10089 OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10090","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1791"],"bugzilla":"1471517","bugzilla_description":"CVE-2017-10090 OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10090.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10087","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471521","bugzilla_description":"CVE-2017-10087 OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10110","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471523","bugzilla_description":"CVE-2017-10110 OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10111","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:1790"],"bugzilla":"1471526","bugzilla_description":"CVE-2017-10111 OpenJDK: incorrect range checks in LambdaFormEditor (Libraries, 8184185)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10101","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471527","bugzilla_description":"CVE-2017-10101 OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10096","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471528","bugzilla_description":"CVE-2017-10096 OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10074","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471534","bugzilla_description":"CVE-2017-10074 OpenJDK: integer overflows in range check loop predicates (Hotspot, 8173770)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10067","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471535","bugzilla_description":"CVE-2017-10067 OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10109","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471670","bugzilla_description":"CVE-2017-10109 OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10081","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471711","bugzilla_description":"CVE-2017-10081 OpenJDK: incorrect bracket processing in function signature handling (Hotspot, 8170966)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10081.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-10193","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:3392","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471715","bugzilla_description":"CVE-2017-10193 OpenJDK: incorrect key size constraint check (Security, 8179101)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-10116","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471738","bugzilla_description":"CVE-2017-10116 OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2017-10115","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471851","bugzilla_description":"CVE-2017-10115 OpenJDK: DSA implementation timing attack (JCE, 8175106)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10135","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471871","bugzilla_description":"CVE-2017-10135 OpenJDK: PKCS#8 implementation timing attack (JCE, 8176760)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10135.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-10108","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471888","bugzilla_description":"CVE-2017-10108 OpenJDK: unbounded memory allocation in BasicAttribute deserialization (Serialization, 8174105)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10108.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10053","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471889","bugzilla_description":"CVE-2017-10053 OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10078","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2469","RHSA-2017:1790","RHSA-2017:3453"],"bugzilla":"1471898","bugzilla_description":"CVE-2017-10078 OpenJDK: Nashorn incompletely blocking access to Java APIs (Scripting, 8171539)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-10198","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:3392","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1472320","bugzilla_description":"CVE-2017-10198 OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-10102","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472345","bugzilla_description":"CVE-2017-10102 OpenJDK: incorrect handling of references in DGC (RMI, 8163958)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-10118","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1790","RHSA-2017:1791"],"bugzilla":"1472470","bugzilla_description":"CVE-2017-10118 OpenJDK: ECDSA implementation timing attack (JCE, 8175110)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10176","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1790","RHSA-2017:1791"],"bugzilla":"1472476","bugzilla_description":"CVE-2017-10176 OpenJDK: incorrect handling of certain EC points (Security, 8178135)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10086","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1790","RHSA-2017:1791"],"bugzilla":"1472657","bugzilla_description":"CVE-2017-10086 Oracle JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10114","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1790","RHSA-2017:1791"],"bugzilla":"1472662","bugzilla_description":"CVE-2017-10114 Oracle JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10114.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10125","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":[],"bugzilla":"1472664","bugzilla_description":"CVE-2017-10125 Oracle JDK: unspecified vulnerability fixed in 7u151 and 8u141 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2017-10243","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472666","bugzilla_description":"CVE-2017-10243 OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10243.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-10105","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472667","bugzilla_description":"CVE-2017-10105 Oracle JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3511","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1221"],"bugzilla":"1443007","bugzilla_description":"CVE-2017-3511 OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-3509","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443052","bugzilla_description":"CVE-2017-3509 OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2017-3544","severity":"low","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443068","bugzilla_description":"CVE-2017-3544 OpenJDK: newline injection in the SMTP client (Networking, 8171533)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3539","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443097","bugzilla_description":"CVE-2017-3539 OpenJDK: MD5 allowed for jar verification (Security, 8171121)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3526","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108"],"bugzilla":"1443252","bugzilla_description":"CVE-2017-3526 OpenJDK: incomplete XML parse tree size enforcement (JAXP, 8169011)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3512","severity":"critical","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443455","bugzilla_description":"CVE-2017-3512 OpenJDK: window framing issues on MacOSX (AWT, 8165626)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3514","severity":"critical","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443469","bugzilla_description":"CVE-2017-3514 OpenJDK: peering issues on Windows (AWT, 8167110)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3533","severity":"low","public_date":"2017-02-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443083","bugzilla_description":"CVE-2017-3533 OpenJDK: newline injection in the FTP client (Networking, 8170222)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3272","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413554","bugzilla_description":"CVE-2017-3272 OpenJDK: insufficient protected field access checks in atomic field updaters (Libraries, 8165344)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3289","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413562","bugzilla_description":"CVE-2017-3289 OpenJDK: insecure class construction (Hotspot, 8167104)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3253","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413583","bugzilla_description":"CVE-2017-3253 OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-3261","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413653","bugzilla_description":"CVE-2017-3261 OpenJDK: integer overflow in SocketOutputStream boundary check (Networking, 8164147)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3231","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413717","bugzilla_description":"CVE-2017-3231 OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3231.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5547","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413764","bugzilla_description":"CVE-2016-5547 OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5547.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5552","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413882","bugzilla_description":"CVE-2016-5552 OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5552.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3252","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413906","bugzilla_description":"CVE-2017-3252 OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3252.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5546","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413911","bugzilla_description":"CVE-2016-5546 OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5546.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-5548","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413920","bugzilla_description":"CVE-2016-5548 OpenJDK: DSA implementation timing attack (Libraries, 8168728)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-5549","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413923","bugzilla_description":"CVE-2016-5549 OpenJDK: ECDSA implementation timing attack (Libraries, 8168724)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-3241","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413955","bugzilla_description":"CVE-2017-3241 OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3241.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3262","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0175"],"bugzilla":"1414162","bugzilla_description":"CVE-2017-3262 Oracle JDK: unspecified vulnerability fixed in 8u121 (Java Mission Control)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3262.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3259","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1414163","bugzilla_description":"CVE-2017-3259 Oracle JDK: unspecified vulnerability fixed in 6u141, 7u131, and 8u121 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3259.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-8328","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0175"],"bugzilla":"1414164","bugzilla_description":"CVE-2016-8328 Oracle JDK: unspecified vulnerability fixed in 8u121 (Java Mission Control)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8328.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-5582","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2658","RHSA-2016:2090"],"bugzilla":"1385402","bugzilla_description":"CVE-2016-5582 OpenJDK: incomplete type checks of System.arraycopy arguments (Hotspot, 8160591)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-5573","severity":"important","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385544","bugzilla_description":"CVE-2016-5573 OpenJDK: insufficient checks of JDWP packets (Hotspot, 8159519)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5573.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5554","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385714","bugzilla_description":"CVE-2016-5554 OpenJDK: insufficient classloader consistency checks in ClassLoaderWithRepository (JMX, 8157739)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5554.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5542","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385723","bugzilla_description":"CVE-2016-5542 OpenJDK: missing algorithm restrictions for jar verification (Libraries, 8155973)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5597","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1386103","bugzilla_description":"CVE-2016-5597 OpenJDK: exposure of server authentication credentials to proxy (Networking, 8160838)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-319","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5597.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5568","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1386112","bugzilla_description":"CVE-2016-5568 OpenJDK: incorrect menu handling on Windows (AWT, 8158993)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5568.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-5556","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2016:2659","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1386408","bugzilla_description":"CVE-2016-5556 Oracle JDK: unspecified vulnerability fixed in 6u131, 7u121, and 8u111 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5556.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-9843","severity":"low","public_date":"2016-09-29T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402351","bugzilla_description":"CVE-2016-9843 zlib: Big-endian out-of-bounds pointer","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9840","severity":"low","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402345","bugzilla_description":"CVE-2016-9840 zlib: Out-of-bounds pointer arithmetic in inftrees.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9841","severity":"low","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402346","bugzilla_description":"CVE-2016-9841 zlib: Out-of-bounds pointer arithmetic in inffast.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9842","severity":"low","public_date":"2016-09-06T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402348","bugzilla_description":"CVE-2016-9842 zlib: Undefined left shift of negative number","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10165","severity":"moderate","public_date":"2016-08-15T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2017:2999","RHSA-2017:3046","RHSA-2016:2658","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1367357","bugzilla_description":"CVE-2016-10165 lcms2: Out-of-bounds read in Type_MLU_Read()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2016-3606","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1356963","bugzilla_description":"CVE-2016-3606 OpenJDK: insufficient bytecode verification (Hotspot, 8155981)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3598","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2017:1216","RHSA-2016:1504","RHSA-2016:1587","RHSA-2016:1588","RHSA-2016:1589","RHSA-2016:1458"],"bugzilla":"1356971","bugzilla_description":"CVE-2016-3598 OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3598.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3587","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1458"],"bugzilla":"1356987","bugzilla_description":"CVE-2016-3587 OpenJDK: insufficient protection of MethodHandle.invokeBasic() (Hotspot, 8154475)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3587.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3610","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1504","RHSA-2016:1458"],"bugzilla":"1356994","bugzilla_description":"CVE-2016-3610 OpenJDK: insufficient value count check in MethodHandles.filterReturnValue() (Libraries, 8158571)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3500","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357008","bugzilla_description":"CVE-2016-3500 OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3508","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357015","bugzilla_description":"CVE-2016-3508 OpenJDK: missing entity replacement limits (JAXP, 8149962)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3458","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357494","bugzilla_description":"CVE-2016-3458 OpenJDK: insufficient restrictions on the use of custom ValueHandler (CORBA, 8079718)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-3550","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357506","bugzilla_description":"CVE-2016-3550 OpenJDK: integer overflows in bytecode streams (Hotspot, 8152479)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3550.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-3485","severity":"low","public_date":"2016-07-19T00:00:00Z","advisories":[],"bugzilla":"1357516","bugzilla_description":"CVE-2016-3485 OpenJDK: weak authentication secret in Pipe implementation on Windows (Networking, 8145446)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3485.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2016-3552","severity":"important","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475"],"bugzilla":"1358167","bugzilla_description":"CVE-2016-3552 Oracle JDK: unspecified vulnerability fixed in 8u101 (Install)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3552.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2016-3511","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2017:1216","RHSA-2016:1587","RHSA-2016:1588","RHSA-2016:1589"],"bugzilla":"1358168","bugzilla_description":"CVE-2016-3511 Oracle JDK: unspecified vulnerability fixed in 7u111 and 8u101 (Deployment)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-3503","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1477"],"bugzilla":"1358169","bugzilla_description":"CVE-2016-3503 Oracle JDK: unspecified vulnerability fixed in 6u121, 7u111, and 8u101 (Install)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3503.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-3498","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476"],"bugzilla":"1358170","bugzilla_description":"CVE-2016-3498 Oracle JDK: unspecified vulnerability fixed in 7u111 and 8u101 (JavaFX)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3498.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-0686","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327743","bugzilla_description":"CVE-2016-0686 OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0686.json"},{"CVE":"CVE-2016-0687","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327749","bugzilla_description":"CVE-2016-0687 OpenJDK: insufficient byte type checks (Hotspot, 8132051)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0687.json"},{"CVE":"CVE-2016-0695","severity":"low","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:0677"],"bugzilla":"1328022","bugzilla_description":"CVE-2016-0695 OpenJDK: insufficient DSA key parameters checks (Security, 8138593)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0695.json"},{"CVE":"CVE-2016-3425","severity":"moderate","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:0677"],"bugzilla":"1328040","bugzilla_description":"CVE-2016-3425 OpenJDK: incorrect handling of surrogate pairs in XML attribute values (JAXP, 8143167)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3425.json"},{"CVE":"CVE-2016-3426","severity":"low","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328059","bugzilla_description":"CVE-2016-3426 OpenJDK: non-constant time GCM authentication tag comparison (JCE, 8143945)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3426.json"},{"CVE":"CVE-2016-3427","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328210","bugzilla_description":"CVE-2016-3427 OpenJDK: unrestricted deserialization of authentication credentials (JMX, 8144430)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3427.json"},{"CVE":"CVE-2016-3443","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328618","bugzilla_description":"CVE-2016-3443 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3443.json"},{"CVE":"CVE-2016-3449","severity":"important","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328619","bugzilla_description":"CVE-2016-3449 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3449.json"},{"CVE":"CVE-2016-3422","severity":"moderate","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328620","bugzilla_description":"CVE-2016-3422 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3422.json"},{"CVE":"CVE-2016-0636","severity":"critical","public_date":"2016-03-23T00:00:00Z","advisories":["RHSA-2016:0513","RHSA-2016:0514","RHSA-2016:0515","RHSA-2016:0516","RHSA-2016:0511","RHSA-2016:0512"],"bugzilla":"1320650","bugzilla_description":"CVE-2016-0636 OpenJDK: missing type safety checks for MethodHandle calls across class loaders, incorrect CVE-2013-5838 fix (Hotspot, 8151666)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["java-1.7.0-oracle-1:1.7.0.99-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.77-0.b03.el6_7","java-1.7.0-oracle-1:1.7.0.99-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.77-0.b03.el7_2","java-1.8.0-oracle-1:1.8.0.77-1jpp.1.el6_7","java-1.7.0-openjdk-1:1.7.0.99-2.6.5.0.el6_7","java-1.7.0-openjdk-1:1.7.0.99-2.6.5.0.el7_2","java-1.7.0-oracle-1:1.7.0.99-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.77-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.99-2.6.5.0.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0636.json"},{"CVE":"CVE-2016-0494","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298906","bugzilla_description":"CVE-2016-0494 ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0494.json"},{"CVE":"CVE-2016-0475","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0050","RHSA-2016:0049"],"bugzilla":"1298949","bugzilla_description":"CVE-2016-0475 OpenJDK: PBE incorrect key lengths (Libraries, 8138589)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0475.json"},{"CVE":"CVE-2016-0402","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298957","bugzilla_description":"CVE-2016-0402 OpenJDK: URL deserialization inconsistencies (Networking, 8059054)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0402.json"},{"CVE":"CVE-2016-0448","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299073","bugzilla_description":"CVE-2016-0448 OpenJDK: logging of RMI connection secrets (JMX, 8130710)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0448.json"},{"CVE":"CVE-2016-0466","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299385","bugzilla_description":"CVE-2016-0466 OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0466.json"},{"CVE":"CVE-2016-0483","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299441","bugzilla_description":"CVE-2016-0483 OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0483.json"},{"CVE":"CVE-2015-7575","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0012","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0007","RHSA-2016:0008","RHSA-2016:0049"],"bugzilla":"1289841","bugzilla_description":"CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.2","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","nss-0:3.19.1-19.el7_2","gnutls-0:3.3.8-14.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","gnutls-0:2.8.5-19.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","nss-0:3.19.1-8.el6_7","openssl-1:1.0.1e-51.el7_2.2","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json"},{"CVE":"CVE-2015-8126","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8126.json"},{"CVE":"CVE-2015-8472","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8472.json"},{"CVE":"CVE-2015-4806","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1233687","bugzilla_description":"CVE-2015-4806 OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4806.json"},{"CVE":"CVE-2015-4835","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273022","bugzilla_description":"CVE-2015-4835 OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4835.json"},{"CVE":"CVE-2015-4881","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921"],"bugzilla":"1273027","bugzilla_description":"CVE-2015-4881 OpenJDK: missing type checks in IIOPInputStream (CORBA, 8076392)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4881.json"},{"CVE":"CVE-2015-4843","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273053","bugzilla_description":"CVE-2015-4843 OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4843.json"},{"CVE":"CVE-2015-4883","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273304","bugzilla_description":"CVE-2015-4883 OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4883.json"},{"CVE":"CVE-2015-4860","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273308","bugzilla_description":"CVE-2015-4860 OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4860.json"},{"CVE":"CVE-2015-4805","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273311","bugzilla_description":"CVE-2015-4805 OpenJDK: missing checks for proper initialization in ObjectStreamClass (Serialization, 8103671)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-665","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4805.json"},{"CVE":"CVE-2015-4844","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273318","bugzilla_description":"CVE-2015-4844 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4844.json"},{"CVE":"CVE-2015-4868","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:1919"],"bugzilla":"1273328","bugzilla_description":"CVE-2015-4868 OpenJDK: CRL checking flaw (Libraries, 8081744)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4868.json"},{"CVE":"CVE-2015-4840","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273338","bugzilla_description":"CVE-2015-4840 OpenJDK: OOB access in CMS code (2D, 8086092)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4840.json"},{"CVE":"CVE-2015-4882","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273414","bugzilla_description":"CVE-2015-4882 OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4882.json"},{"CVE":"CVE-2015-4842","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273425","bugzilla_description":"CVE-2015-4842 OpenJDK: leak of user.dir location (JAXP, 8078427)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4842.json"},{"CVE":"CVE-2015-4734","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273430","bugzilla_description":"CVE-2015-4734 OpenJDK: kerberos realm name leak (JGSS, 8048030)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4734.json"},{"CVE":"CVE-2015-4903","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273496","bugzilla_description":"CVE-2015-4903 OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4903.json"},{"CVE":"CVE-2015-4803","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273637","bugzilla_description":"CVE-2015-4803 OpenJDK: inefficient use of hash tables and lists during XML parsing (JAXP, 8068842)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4803.json"},{"CVE":"CVE-2015-4893","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273638","bugzilla_description":"CVE-2015-4893 OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4893.json"},{"CVE":"CVE-2015-4911","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921"],"bugzilla":"1273645","bugzilla_description":"CVE-2015-4911 OpenJDK: incomplete supportDTD enforcement (JAXP, 8130078)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4911.json"},{"CVE":"CVE-2015-4872","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273734","bugzilla_description":"CVE-2015-4872 OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4872.json"},{"CVE":"CVE-2015-4901","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926"],"bugzilla":"1273856","bugzilla_description":"CVE-2015-4901 Oracle JDK: unspecified vulnerability fixed in 8u65 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4901.json"},{"CVE":"CVE-2015-4810","severity":"important","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:2506"],"bugzilla":"1273858","bugzilla_description":"CVE-2015-4810 Oracle JDK: unspecified vulnerability fixed in 7u91 and 8u65 (Deployment)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4810.json"},{"CVE":"CVE-2015-4871","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:2509","RHSA-2015:1927","RHSA-2016:0053","RHSA-2015:2506"],"bugzilla":"1273859","bugzilla_description":"CVE-2015-4871 OpenJDK: protected methods can be used as interface methods via DirectMethodHandle (Libraries)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4871.json"},{"CVE":"CVE-2015-4902","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:2506"],"bugzilla":"1273860","bugzilla_description":"CVE-2015-4902 Oracle JDK: unspecified vulnerability fixed in 6u105, 7u91 and 8u65 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4902.json"},{"CVE":"CVE-2015-4906","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926"],"bugzilla":"1273861","bugzilla_description":"CVE-2015-4906 Oracle JDK: unspecified vulnerability fixed in 8u65 (JavaFX)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4906.json"},{"CVE":"CVE-2015-4916","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926"],"bugzilla":"1273862","bugzilla_description":"CVE-2015-4916 Oracle JDK: unspecified vulnerability fixed in 8u65 (JavaFX)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4916.json"},{"CVE":"CVE-2015-4908","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926"],"bugzilla":"1273863","bugzilla_description":"CVE-2015-4908 Oracle JDK: unspecified vulnerability fixed in 8u65 (JavaFX)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4908.json"},{"CVE":"CVE-2015-2601","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242019","bugzilla_description":"CVE-2015-2601 OpenJDK: non-constant time comparisons in crypto code (JCE, 8074865)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2601.json"},{"CVE":"CVE-2015-2659","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1228","RHSA-2015:1241"],"bugzilla":"1242144","bugzilla_description":"CVE-2015-2659 OpenJDK: GCM cipher issue causing JVM crash (Security, 8067648)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2659.json"},{"CVE":"CVE-2015-2628","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242232","bugzilla_description":"CVE-2015-2628 OpenJDK: IIOPInputStream type confusion vulnerability (CORBA, 8076376)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2628.json"},{"CVE":"CVE-2015-4731","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242234","bugzilla_description":"CVE-2015-4731 OpenJDK: improper permission checks in MBeanServerInvocationHandler (JMX, 8076397)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4731.json"},{"CVE":"CVE-2015-4732","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242240","bugzilla_description":"CVE-2015-4732 OpenJDK: insufficient context checks during object deserialization (Libraries, 8076405)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-567","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4732.json"},{"CVE":"CVE-2015-4733","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242275","bugzilla_description":"CVE-2015-4733 OpenJDK: RemoteObjectInvocationHandler allows calling finalize() (RMI, 8076409)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4733.json"},{"CVE":"CVE-2015-4748","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242281","bugzilla_description":"CVE-2015-4748 OpenJDK: incorrect OCSP nextUpdate checking (Libraries, 8075374)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-299","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4748.json"},{"CVE":"CVE-2015-2621","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242372","bugzilla_description":"CVE-2015-2621 OpenJDK: incorrect code permission checks in RMIConnectionImpl (JMX, 8075853)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2621.json"},{"CVE":"CVE-2015-4749","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242379","bugzilla_description":"CVE-2015-4749 OpenJDK: DnsClient fails to release request information after error (JNDI, 8075378)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4749.json"},{"CVE":"CVE-2015-2632","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242394","bugzilla_description":"CVE-2015-2632 ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190->CWE-125","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2632.json"},{"CVE":"CVE-2015-4760","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242447","bugzilla_description":"CVE-2015-4760 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8071715)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4760.json"},{"CVE":"CVE-2015-2613","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1242456","bugzilla_description":"CVE-2015-2613 NSS / JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2613.json"},{"CVE":"CVE-2015-2590","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1243139","bugzilla_description":"CVE-2015-2590 OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2590.json"},{"CVE":"CVE-2015-2638","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243283","bugzilla_description":"CVE-2015-2638 Oracle JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2638.json"},{"CVE":"CVE-2015-4736","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243284","bugzilla_description":"CVE-2015-4736 Oracle JDK: unspecified vulnerability fixed in 7u85 and 8u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4736.json"},{"CVE":"CVE-2015-2597","severity":"important","public_date":"2015-07-14T00:00:00Z","advisories":[],"bugzilla":"1243285","bugzilla_description":"CVE-2015-2597 Oracle JDK: unspecified vulnerability fixed in 7u85 and 8u51 (Install)","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2597.json"},{"CVE":"CVE-2015-2619","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243286","bugzilla_description":"CVE-2015-2619 Oracle JDK: unspecified vulnerability fixed in 7u85 and 8u51 (2D)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2619.json"},{"CVE":"CVE-2015-2637","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243287","bugzilla_description":"CVE-2015-2637 Oracle JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2637.json"},{"CVE":"CVE-2015-2596","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1242"],"bugzilla":"1243288","bugzilla_description":"CVE-2015-2596 Oracle JDK: unspecified vulnerability fixed in 7u85 (Hotspot)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2596.json"},{"CVE":"CVE-2015-4729","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243290","bugzilla_description":"CVE-2015-4729 Oracle JDK: unspecified vulnerability fixed in 7u85 and 8u51 (Deployment)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4729.json"},{"CVE":"CVE-2015-2627","severity":"low","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243291","bugzilla_description":"CVE-2015-2627 Oracle JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (Install)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2627.json"},{"CVE":"CVE-2015-2664","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1243300","bugzilla_description":"CVE-2015-2664 Oracle JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (Deployment)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2664.json"},{"CVE":"CVE-2015-4000","severity":"moderate","public_date":"2015-05-20T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2016:2056","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2016:1624","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1197","RHSA-2015:1230","RHSA-2015:1185","RHSA-2015:1072"],"bugzilla":"1223211","bugzilla_description":"CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","nss-0:3.19.1-3.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","nss-0:3.19.1-3.ael7b_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","openssl-0:1.0.1e-30.el6_6.9","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","openssl-1:1.0.1e-42.ael7b_1.6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.8.0-openjdk-1:1.8.0.51-1.b16.ael7b_1","openssl-0:0.9.8e-36.el5_11","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-0478","severity":"low","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1210355","bugzilla_description":"CVE-2015-0478 OpenJDK: insufficient hardening of RSA-CRT implementation (JCE, 8071726)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0478.json"},{"CVE":"CVE-2015-0469","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1210829","bugzilla_description":"CVE-2015-0469 ICU: layout engine glyphStorage off-by-one (OpenJDK 2D, 8067699)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-122","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0469.json"},{"CVE":"CVE-2015-0460","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211285","bugzilla_description":"CVE-2015-0460 OpenJDK: incorrect handling of phantom references (Hotspot, 8071931)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0460.json"},{"CVE":"CVE-2015-0477","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211299","bugzilla_description":"CVE-2015-0477 OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0477.json"},{"CVE":"CVE-2015-0470","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0809"],"bugzilla":"1211387","bugzilla_description":"CVE-2015-0470 OpenJDK: incorrect handling of default methods (Hotspot, 8065366)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0470.json"},{"CVE":"CVE-2015-0488","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211543","bugzilla_description":"CVE-2015-0488 OpenJDK: certificate options parsing uncaught exception (JSSE, 8068720)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-248","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0488.json"},{"CVE":"CVE-2015-0459","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211768","bugzilla_description":"CVE-2015-0459 Oracle JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0459.json"},{"CVE":"CVE-2015-0491","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211769","bugzilla_description":"CVE-2015-0491 Oracle JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0491.json"},{"CVE":"CVE-2015-0492","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0857"],"bugzilla":"1211770","bugzilla_description":"CVE-2015-0492 Oracle JDK: unspecified vulnerability fixed in 7u79 and 8u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0492.json"},{"CVE":"CVE-2015-0458","severity":"important","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211771","bugzilla_description":"CVE-2015-0458 Oracle JDK: unspecified vulnerability fixed in 6u95, 7u79 and 8u45 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0458.json"},{"CVE":"CVE-2015-0484","severity":"important","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0857"],"bugzilla":"1211773","bugzilla_description":"CVE-2015-0484 Oracle JDK: unspecified vulnerability fixed in 7u79 and 8u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0484.json"},{"CVE":"CVE-2015-0486","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854"],"bugzilla":"1211774","bugzilla_description":"CVE-2015-0486 Oracle JDK: unspecified vulnerability fixed in 8u45 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0486.json"},{"CVE":"CVE-2015-2808","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1207101","bugzilla_description":"CVE-2015-2808 SSL/TLS: \"Invariance Weakness\" vulnerability in RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2808.json"},{"CVE":"CVE-2015-0383","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1123870","bugzilla_description":"CVE-2015-0383 OpenJDK: insecure hsperfdata temporary file handling (Hotspot, 8050807)","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0383.json"},{"CVE":"CVE-2014-6601","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183020","bugzilla_description":"CVE-2014-6601 OpenJDK: class verifier insufficient invokespecial calls verification (Hotspot, 8058982)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6601.json"},{"CVE":"CVE-2015-0412","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183021","bugzilla_description":"CVE-2015-0412 OpenJDK: insufficient code privileges checks (JAX-WS, 8054367)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0412.json"},{"CVE":"CVE-2015-0408","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183023","bugzilla_description":"CVE-2015-0408 OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0408.json"},{"CVE":"CVE-2015-0395","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183031","bugzilla_description":"CVE-2015-0395 OpenJDK: phantom references handling issue in garbage collector (Hotspot, 8047125)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0395.json"},{"CVE":"CVE-2015-0400","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1183039","bugzilla_description":"CVE-2015-0400 OpenJDK: NTLM authentication data disclosure via redirect to proxy (Libraries, 8048035)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0400.json"},{"CVE":"CVE-2015-0407","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183043","bugzilla_description":"CVE-2015-0407 OpenJDK: directory information leak via file chooser (Swing, 8055304)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0407.json"},{"CVE":"CVE-2015-0410","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183044","bugzilla_description":"CVE-2015-0410 OpenJDK: DER decoder infinite loop  (Security, 8059485)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0410.json"},{"CVE":"CVE-2014-6593","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183049","bugzilla_description":"CVE-2014-6593 OpenJDK: incorrect tracking of ChangeCipherSpec during SSL/TLS handshake (JSSE, 8057555)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6593.json"},{"CVE":"CVE-2014-6585","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183645","bugzilla_description":"CVE-2014-6585 ICU: font parsing OOB read (OpenJDK 2D, 8055489)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6585.json"},{"CVE":"CVE-2014-6591","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183646","bugzilla_description":"CVE-2014-6591 ICU: font parsing OOB read (OpenJDK 2D, 8056276)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6591.json"},{"CVE":"CVE-2014-6549","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0134","RHSA-2015:0133"],"bugzilla":"1183660","bugzilla_description":"CVE-2014-6549 OpenJDK: incorrect class loader permission check in ClassLoader getParent() (Libraries, 8055314)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6549.json"},{"CVE":"CVE-2015-0437","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069"],"bugzilla":"1183670","bugzilla_description":"CVE-2015-0437 OpenJDK: code generation issue (Hotspot, 8064524)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0437.json"},{"CVE":"CVE-2014-6587","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183715","bugzilla_description":"CVE-2014-6587 OpenJDK: MulticastSocket NULL pointer dereference (Libraries, 8056264)","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6587.json"},{"CVE":"CVE-2015-0403","severity":"important","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0134","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086"],"bugzilla":"1184275","bugzilla_description":"CVE-2015-0403 Oracle JDK: unspecified vulnerability fixed in 6u91, 7u75 and 8u31 (Deployment)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0403.json"},{"CVE":"CVE-2015-0421","severity":"important","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080"],"bugzilla":"1184276","bugzilla_description":"CVE-2015-0421 Oracle JDK: unspecified vulnerability fixed in 8u31 (Install)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0421.json"},{"CVE":"CVE-2015-0406","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0134","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086"],"bugzilla":"1184277","bugzilla_description":"CVE-2015-0406 Oracle JDK: unspecified vulnerability fixed in 6u91, 7u75 and 8u31 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0406.json"},{"CVE":"CVE-2015-0413","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0079"],"bugzilla":"1184278","bugzilla_description":"CVE-2015-0413 Oracle JDK: unspecified vulnerability fixed in 7u75 and 8u31 (Serviceability)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0413.json"},{"CVE":"CVE-2015-2625","severity":"low","public_date":"2014-11-02T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1241965","bugzilla_description":"CVE-2015-2625 OpenJDK: name for reverse DNS lookup used in certificate identity check (JSSE, 8067694)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2625.json"},{"CVE":"CVE-2014-6512","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1071210","bugzilla_description":"CVE-2014-6512 OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-345","affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6512.json"},{"CVE":"CVE-2014-6513","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1150118","bugzilla_description":"CVE-2014-6513 OpenJDK: splash image handling memory corruption (AWT, 8042609)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6513.json"},{"CVE":"CVE-2014-6506","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150155","bugzilla_description":"CVE-2014-6506 OpenJDK: insufficient permission checks when setting resource bundle on system logger (Libraries, 8041564)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6506.json"},{"CVE":"CVE-2014-6504","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1150182","bugzilla_description":"CVE-2014-6504 OpenJDK: incorrect optimization of range checks in C2 compiler (Hotspot, 8022783)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6504.json"},{"CVE":"CVE-2014-6519","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1150273","bugzilla_description":"CVE-2014-6519 OpenJDK: missing BootstrapMethods bounds check (Hotspot, 8041717)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6519.json"},{"CVE":"CVE-2014-6531","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150651","bugzilla_description":"CVE-2014-6531 OpenJDK: insufficient ResourceBundle name check (Libraries, 8044274)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6531.json"},{"CVE":"CVE-2014-6502","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150669","bugzilla_description":"CVE-2014-6502 OpenJDK: LogRecord use of incorrect CL when loading ResourceBundle (Libraries, 8042797)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6502.json"},{"CVE":"CVE-2014-6457","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151046","bugzilla_description":"CVE-2014-6457 OpenJDK: Triple Handshake attack against TLS/SSL connections (JSSE, 8037066)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6457.json"},{"CVE":"CVE-2014-6558","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151063","bugzilla_description":"CVE-2014-6558 OpenJDK: CipherInputStream incorrect exception handling (Security, 8037846)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6558.json"},{"CVE":"CVE-2014-6517","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1151364","bugzilla_description":"CVE-2014-6517 OpenJDK: StAX parser parameter entity XXE (JAXP, 8039533)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6517.json"},{"CVE":"CVE-2014-6511","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151517","bugzilla_description":"CVE-2014-6511 ICU: Layout Engine ContextualSubstitution missing boundary checks (JDK 2D, 8041540)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6511.json"},{"CVE":"CVE-2014-6562","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1636"],"bugzilla":"1151988","bugzilla_description":"CVE-2014-6562 OpenJDK: incorrect handling of zip entries with NUL in name (Libraries, 8048025)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6562.json"},{"CVE":"CVE-2014-6468","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1636"],"bugzilla":"1152049","bugzilla_description":"CVE-2014-6468 OpenJDK: insufficient SharedArchiveFile checks (Hotspot, 8044269)","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6468.json"},{"CVE":"CVE-2014-6532","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152756","bugzilla_description":"CVE-2014-6532 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6532.json"},{"CVE":"CVE-2014-6503","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152757","bugzilla_description":"CVE-2014-6503 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6503.json"},{"CVE":"CVE-2014-6456","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1657","RHSA-2014:1876","RHSA-2014:1880"],"bugzilla":"1152758","bugzilla_description":"CVE-2014-6456 Oracle JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6456.json"},{"CVE":"CVE-2014-6492","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152759","bugzilla_description":"CVE-2014-6492 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6492.json"},{"CVE":"CVE-2014-6493","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152760","bugzilla_description":"CVE-2014-6493 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6493.json"},{"CVE":"CVE-2014-4288","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152761","bugzilla_description":"CVE-2014-4288 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4288.json"},{"CVE":"CVE-2014-6466","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152762","bugzilla_description":"CVE-2014-6466 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6466.json"},{"CVE":"CVE-2014-6458","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152763","bugzilla_description":"CVE-2014-6458 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6458.json"},{"CVE":"CVE-2014-6476","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1657","RHSA-2014:1876","RHSA-2014:1880"],"bugzilla":"1152765","bugzilla_description":"CVE-2014-6476 Oracle JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6476.json"},{"CVE":"CVE-2014-6515","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1876","RHSA-2015:0264","RHSA-2014:1880"],"bugzilla":"1152766","bugzilla_description":"CVE-2014-6515 Oracle JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6515.json"},{"CVE":"CVE-2014-6527","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1882","RHSA-2014:1657","RHSA-2014:1876","RHSA-2014:1880"],"bugzilla":"1152767","bugzilla_description":"CVE-2014-6527 Oracle JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6527.json"},{"CVE":"CVE-2014-3566","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2015:1546","RHSA-2015:1545","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2014:1881","RHSA-2014:1880","RHSA-2015:0080","RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2014:1920","RHSA-2015:0067","RHSA-2015:0012","RHSA-2015:0011","RHSA-2015:0264","RHSA-2015:0010","RHSA-2015:0086","RHSA-2015:0085","RHBA-2014:1857"],"bugzilla":"1152789","bugzilla_description":"CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-636|CWE-757)","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","openshift-origin-node-proxy-0:1.16.4.2-1.el6op","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","openshift-origin-node-proxy-0:1.22.3.4-1.el6op","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json"},{"CVE":"CVE-2014-4262","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1075795","bugzilla_description":"CVE-2014-4262 OpenJDK: AtomicReferenceFieldUpdater missing primitive type check (Libraries, 8039520)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4262.json"},{"CVE":"CVE-2014-4244","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119475","bugzilla_description":"CVE-2014-4244 OpenJDK: RSA blinding issues (Security, 8031346)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4244.json"},{"CVE":"CVE-2014-4263","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119476","bugzilla_description":"CVE-2014-4263 OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4263.json"},{"CVE":"CVE-2014-4221","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:1042"],"bugzilla":"1119483","bugzilla_description":"CVE-2014-4221 OpenJDK: MethodHandles.Lookup insufficient modifiers checks (Libraries, 8035788)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4221.json"},{"CVE":"CVE-2014-4219","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119596","bugzilla_description":"CVE-2014-4219 OpenJDK: Bytecode verification does not prevent ctor calls to this() and super() (Hotspot, 8035119)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4219.json"},{"CVE":"CVE-2014-2490","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907"],"bugzilla":"1119597","bugzilla_description":"CVE-2014-2490 OpenJDK: Event logger format string vulnerability (Hotspot, 8037076)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-134","affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2490.json"},{"CVE":"CVE-2014-4216","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907"],"bugzilla":"1119600","bugzilla_description":"CVE-2014-4216 OpenJDK: Incorrect generic signature attribute parsing (Hotspot, 8037076)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4216.json"},{"CVE":"CVE-2014-4223","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890"],"bugzilla":"1119602","bugzilla_description":"CVE-2014-4223 OpenJDK: Incorrect handling of invocations with exhausted ranks (Libraries, 8035793)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4223.json"},{"CVE":"CVE-2014-4209","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119608","bugzilla_description":"CVE-2014-4209 OpenJDK: SubjectDelegator protection insufficient (JMX, 8029755)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4209.json"},{"CVE":"CVE-2014-4218","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119611","bugzilla_description":"CVE-2014-4218 OpenJDK: Clone interfaces passed to proxy methods (Libraries, 8035009)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4218.json"},{"CVE":"CVE-2014-4252","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:1036","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119613","bugzilla_description":"CVE-2014-4252 OpenJDK: Prevent instantiation of service with non-public constructor (Security, 8035004)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4252.json"},{"CVE":"CVE-2014-4266","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:0889","RHSA-2014:0890","RHSA-2014:0907","RHSA-2014:1042"],"bugzilla":"1119615","bugzilla_description":"CVE-2014-4266 OpenJDK: InfoBuilder incorrect return values (Serviceability, 8033301)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4266.json"},{"CVE":"CVE-2014-4268","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":[],"bugzilla":"1119616","bugzilla_description":"CVE-2014-4268 OpenJDK: Missing file choser access restrictions (Swing, 8035699)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4268.json"},{"CVE":"CVE-2014-4264","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902"],"bugzilla":"1119622","bugzilla_description":"CVE-2014-4264 OpenJDK: Incorrect TLS/EC management (Security, 8031340)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4264.json"},{"CVE":"CVE-2014-2483","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:0889","RHSA-2014:0890"],"bugzilla":"1119626","bugzilla_description":"CVE-2014-2483 OpenJDK: Restrict use of privileged annotations (Libraries, 8034985)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5","java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2483.json"},{"CVE":"CVE-2014-4227","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119912","bugzilla_description":"CVE-2014-4227 Oracle JDK: unspecified vulnerability fixed in 6u81, 7u65 and 8u11 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4227.json"},{"CVE":"CVE-2014-4265","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0908","RHSA-2014:0902","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1119913","bugzilla_description":"CVE-2014-4265 Oracle JDK: unspecified vulnerability fixed in 6u81, 7u65 and 8u11 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10","java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4265.json"},{"CVE":"CVE-2014-4220","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:1042"],"bugzilla":"1119914","bugzilla_description":"CVE-2014-4220 Oracle JDK: unspecified vulnerability fixed in 7u65 and 8u11 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4220.json"},{"CVE":"CVE-2014-4208","severity":"low","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2014:0902","RHSA-2014:1041","RHSA-2014:1042"],"bugzilla":"1119915","bugzilla_description":"CVE-2014-4208 Oracle JDK: unspecified vulnerability fixed in 7u65 and 8u11 (Deployment)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4208.json"},{"CVE":"CVE-2014-4247","severity":"critical","public_date":"2014-07-15T00:00:00Z","advisories":[],"bugzilla":"1119918","bugzilla_description":"CVE-2014-4247 Oracle JDK: unspecified vulnerability fixed in 8u11 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4247.json"},{"CVE":"CVE-2015-3149","severity":"low","public_date":"2014-04-20T00:00:00Z","advisories":["RHSA-2015:1228"],"bugzilla":"1213365","bugzilla_description":"CVE-2015-3149 OpenJDK8: insecure hsperfdata temporary file handling, CVE-2015-0383 regression (Hotspot)","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":["java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3149.json"},{"CVE":"CVE-2014-2398","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1086632","bugzilla_description":"CVE-2014-2398 OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2398.json"},{"CVE":"CVE-2014-0453","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1086645","bugzilla_description":"CVE-2014-0453 OpenJDK: RSA unpadding timing issues (Security, 8027766)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0453.json"},{"CVE":"CVE-2014-0429","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087409","bugzilla_description":"CVE-2014-0429 OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0429.json"},{"CVE":"CVE-2014-0457","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087411","bugzilla_description":"CVE-2014-0457 OpenJDK: ServiceLoader Exception handling security bypass (Libraries, 8031394)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0457.json"},{"CVE":"CVE-2014-0456","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0675","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0406"],"bugzilla":"1087413","bugzilla_description":"CVE-2014-0456 OpenJDK: System.arraycopy() element race condition (Hotspot, 8029858)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0456.json"},{"CVE":"CVE-2014-2421","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087417","bugzilla_description":"CVE-2014-2421 OpenJDK: JPEG decoder input stream handling (2D, 8029854)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2421.json"},{"CVE":"CVE-2014-2397","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0675","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0406"],"bugzilla":"1087423","bugzilla_description":"CVE-2014-2397 OpenJDK: classfile parser invalid BootstrapMethods attribute length (Hotspot, 8034926)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2397.json"},{"CVE":"CVE-2014-0455","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087424","bugzilla_description":"CVE-2014-0455 OpenJDK: MethodHandle variable argument lists handling (Libraries, 8029844)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0455.json"},{"CVE":"CVE-2014-0461","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087426","bugzilla_description":"CVE-2014-0461 OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0461.json"},{"CVE":"CVE-2014-2412","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087427","bugzilla_description":"CVE-2014-2412 OpenJDK: AWT thread context handling (AWT, 8025010)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2412.json"},{"CVE":"CVE-2014-0451","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087428","bugzilla_description":"CVE-2014-0451 OpenJDK: AWT incorrect FlavorMap seperation (AWT, 8026797)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0451.json"},{"CVE":"CVE-2014-0458","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087430","bugzilla_description":"CVE-2014-0458 OpenJDK: Activation framework default command map caching (JAX-WS, 8025152)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0458.json"},{"CVE":"CVE-2014-2414","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087431","bugzilla_description":"CVE-2014-2414 OpenJDK: incorrect caching of data initialized via TCCL (JAXB, 8025030)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2414.json"},{"CVE":"CVE-2014-2423","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087434","bugzilla_description":"CVE-2014-2423 OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026188)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2423.json"},{"CVE":"CVE-2014-0452","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508"],"bugzilla":"1087436","bugzilla_description":"CVE-2014-0452 OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026801)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0452.json"},{"CVE":"CVE-2014-2402","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087438","bugzilla_description":"CVE-2014-2402 OpenJDK: Incorrect NIO channel separation (Libraries, 8026716)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2402.json"},{"CVE":"CVE-2014-0446","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087439","bugzilla_description":"CVE-2014-0446 OpenJDK: Protect logger handlers (Libraries, 8029740)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0446.json"},{"CVE":"CVE-2014-0454","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087440","bugzilla_description":"CVE-2014-0454 OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0454.json"},{"CVE":"CVE-2014-2427","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087441","bugzilla_description":"CVE-2014-2427 OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2427.json"},{"CVE":"CVE-2014-0460","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1087442","bugzilla_description":"CVE-2014-0460 OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0460.json"},{"CVE":"CVE-2014-2403","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0675","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0406"],"bugzilla":"1087443","bugzilla_description":"CVE-2014-2403 OpenJDK: JAXP CharInfo file access restriction (JAXP, 8029282)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2403.json"},{"CVE":"CVE-2014-0459","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0705","RHSA-2014:0406"],"bugzilla":"1087444","bugzilla_description":"CVE-2014-0459 lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0459.json"},{"CVE":"CVE-2014-2413","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0675","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0406"],"bugzilla":"1087446","bugzilla_description":"CVE-2014-2413 OpenJDK: method handle call hierachy bypass (Libraries, 8032686)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2413.json"},{"CVE":"CVE-2014-0432","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0412","RHSA-2014:0413"],"bugzilla":"1088023","bugzilla_description":"CVE-2014-0432 Oracle JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Libraries)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0432.json"},{"CVE":"CVE-2014-0448","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0486","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705"],"bugzilla":"1088024","bugzilla_description":"CVE-2014-0448 Oracle JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0448.json"},{"CVE":"CVE-2014-2428","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1088025","bugzilla_description":"CVE-2014-2428 Oracle JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2428.json"},{"CVE":"CVE-2014-2422","severity":"important","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0412","RHSA-2014:0413"],"bugzilla":"1088026","bugzilla_description":"CVE-2014-2422 Oracle JDK: unspecified vulnerability fixed in 7u55 and 8u5 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2422.json"},{"CVE":"CVE-2014-2409","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1088027","bugzilla_description":"CVE-2014-2409 Oracle JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2409.json"},{"CVE":"CVE-2014-0449","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1088028","bugzilla_description":"CVE-2014-0449 Oracle JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0449.json"},{"CVE":"CVE-2014-2401","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1088030","bugzilla_description":"CVE-2014-2401 Oracle JDK: unspecified vulnerability fixed in 5.0u75, 6u75, 7u55 and 8u5 (2D)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2401.json"},{"CVE":"CVE-2014-2420","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1088031","bugzilla_description":"CVE-2014-2420 Oracle JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2420.json"},{"CVE":"CVE-2014-0463","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088039","bugzilla_description":"Oracle JDK: unspecified vulnerabilities fixed in 8u5 (JavaFX, Scripting)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0463.json"},{"CVE":"CVE-2014-0464","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088039","bugzilla_description":"Oracle JDK: unspecified vulnerabilities fixed in 8u5 (JavaFX, Scripting)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0464.json"},{"CVE":"CVE-2014-2410","severity":"critical","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088039","bugzilla_description":"Oracle JDK: unspecified vulnerabilities fixed in 8u5 (JavaFX, Scripting)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2410.json"},{"CVE":"CVE-2014-1876","severity":"low","public_date":"2014-02-03T00:00:00Z","advisories":["RHSA-2014:0685","RHSA-2014:0982","RHSA-2014:0675","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0407","RHSA-2014:0408","RHSA-2014:0705","RHSA-2014:0406","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1060907","bugzilla_description":"CVE-2014-1876 OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1876.json"},{"CVE":"CVE-2013-4578","severity":"low","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1031471","bugzilla_description":"CVE-2013-4578 OpenJDK: jarsigner does not detect unsigned bytecode injected into signed jars","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4578.json"},{"CVE":"CVE-2014-0428","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051519","bugzilla_description":"CVE-2014-0428 OpenJDK: insufficient security checks in IIOP streams (CORBA, 8025767)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0428.json"},{"CVE":"CVE-2014-0422","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051528","bugzilla_description":"CVE-2014-0422 OpenJDK: insufficient package access checks in the Naming component (JNDI, 8025758)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0422.json"},{"CVE":"CVE-2013-5893","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0026","RHSA-2014:0027","RHSA-2014:0030"],"bugzilla":"1051549","bugzilla_description":"CVE-2013-5893 OpenJDK: JVM method processing issues (Libraries, 8029507)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5893.json"},{"CVE":"CVE-2014-0373","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051699","bugzilla_description":"CVE-2014-0373 OpenJDK: SnmpStatusException handling issues (Serviceability, 7068126)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0373.json"},{"CVE":"CVE-2013-5878","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051823","bugzilla_description":"CVE-2013-5878 OpenJDK: null xmlns handling issue (Security, 8025026)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5878.json"},{"CVE":"CVE-2013-5884","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051911","bugzilla_description":"CVE-2013-5884 OpenJDK: insufficient security checks in CORBA stub factories (CORBA, 8026193)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5884.json"},{"CVE":"CVE-2014-0416","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051912","bugzilla_description":"CVE-2014-0416 OpenJDK: insecure subject principals set handling (JAAS, 8024306)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0416.json"},{"CVE":"CVE-2014-0376","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1051923","bugzilla_description":"CVE-2014-0376 OpenJDK: document builder missing security checks (JAXP, 8027201, 8025018)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0376.json"},{"CVE":"CVE-2013-5907","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052915","bugzilla_description":"CVE-2013-5907 ICU: Layout Engine LookupProcessor insufficient input checks (JDK 2D, 8025034)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5907.json"},{"CVE":"CVE-2014-0368","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052919","bugzilla_description":"CVE-2014-0368 OpenJDK: insufficient Socket checkListen checks (Networking, 8011786)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0368.json"},{"CVE":"CVE-2013-5910","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052942","bugzilla_description":"CVE-2013-5910 OpenJDK: XML canonicalizer mutable strings passed to untrusted code (Security, 8026417)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5910.json"},{"CVE":"CVE-2014-0411","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1053010","bugzilla_description":"CVE-2014-0411 OpenJDK: TLS/SSL handshake timing issues (JSSE, 8023069)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0411.json"},{"CVE":"CVE-2014-0423","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1053066","bugzilla_description":"CVE-2014-0423 OpenJDK: XXE issue in decoder (Beans, 8023245)","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0423.json"},{"CVE":"CVE-2013-5896","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1053266","bugzilla_description":"CVE-2013-5896 OpenJDK: com.sun.corba.se. should be restricted package (CORBA, 8025022)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5896.json"},{"CVE":"CVE-2014-0408","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053286","bugzilla_description":"CVE-2014-0408 OpenJDK: JObjC code issues (Hotspot, 8021266)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0408.json"},{"CVE":"CVE-2014-0410","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053495","bugzilla_description":"CVE-2014-0410 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0410.json"},{"CVE":"CVE-2014-0415","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053496","bugzilla_description":"CVE-2014-0415 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0415.json"},{"CVE":"CVE-2014-0385","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053498","bugzilla_description":"CVE-2014-0385 Oracle JDK: unspecified vulnerability fixed in 7u51 (Install)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0385.json"},{"CVE":"CVE-2013-5889","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053499","bugzilla_description":"CVE-2013-5889 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5889.json"},{"CVE":"CVE-2014-0417","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053501","bugzilla_description":"CVE-2014-0417 Oracle JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0417.json"},{"CVE":"CVE-2014-0387","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053502","bugzilla_description":"CVE-2014-0387 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0387.json"},{"CVE":"CVE-2014-0424","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053504","bugzilla_description":"CVE-2014-0424 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0424.json"},{"CVE":"CVE-2013-5904","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0030"],"bugzilla":"1053506","bugzilla_description":"CVE-2013-5904 Oracle JDK: unspecified vulnerability fixed in 7u51 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5904.json"},{"CVE":"CVE-2014-0403","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053507","bugzilla_description":"CVE-2014-0403 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0403.json"},{"CVE":"CVE-2014-0375","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053508","bugzilla_description":"CVE-2014-0375 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0375.json"},{"CVE":"CVE-2013-5905","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2014:0030"],"bugzilla":"1053509","bugzilla_description":"CVE-2013-5905 Oracle JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (Install)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5905.json"},{"CVE":"CVE-2013-5906","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2014:0030"],"bugzilla":"1053510","bugzilla_description":"CVE-2013-5906 Oracle JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (Install)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5906.json"},{"CVE":"CVE-2013-5902","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2014:0030"],"bugzilla":"1053512","bugzilla_description":"CVE-2013-5902 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5902.json"},{"CVE":"CVE-2014-0418","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2014:0030"],"bugzilla":"1053513","bugzilla_description":"CVE-2014-0418 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0418.json"},{"CVE":"CVE-2013-5887","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053515","bugzilla_description":"CVE-2013-5887 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5887.json"},{"CVE":"CVE-2013-5899","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053516","bugzilla_description":"CVE-2013-5899 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5899.json"},{"CVE":"CVE-2013-5888","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053517","bugzilla_description":"CVE-2013-5888 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5888.json"},{"CVE":"CVE-2013-5898","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0705","RHSA-2014:0030"],"bugzilla":"1053518","bugzilla_description":"CVE-2013-5898 Oracle JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5898.json"},{"CVE":"CVE-2013-5870","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0030"],"bugzilla":"1053540","bugzilla_description":"CVE-2013-5870 CVE-2013-5895 CVE-2014-0382 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5870.json"},{"CVE":"CVE-2013-5895","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0030"],"bugzilla":"1053540","bugzilla_description":"CVE-2013-5870 CVE-2013-5895 CVE-2014-0382 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5895.json"},{"CVE":"CVE-2014-0382","severity":"important","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0030"],"bugzilla":"1053540","bugzilla_description":"CVE-2013-5870 CVE-2013-5895 CVE-2014-0382 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0382.json"},{"CVE":"CVE-2013-6954","severity":"low","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1045561","bugzilla_description":"CVE-2013-6954 libpng: unhandled zero-length PLTE chunk or NULL palette","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6954.json"},{"CVE":"CVE-2013-6629","severity":"moderate","public_date":"2013-11-12T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2013:1803","RHSA-2013:1804","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1031734","bugzilla_description":"CVE-2013-6629 libjpeg: information leak (read of uninitialized memory)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","libjpeg-0:6b-38","libjpeg-turbo-0:1.2.1-3.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6629.json"},{"CVE":"CVE-2013-5803","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018713","bugzilla_description":"CVE-2013-5803 OpenJDK: insufficient checks of KDC replies (JGSS, 8014341)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5803.json"},{"CVE":"CVE-2013-5772","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018717","bugzilla_description":"CVE-2013-5772 OpenJDK: insufficient html escaping in jhat (jhat, 8011081)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5772.json"},{"CVE":"CVE-2013-5797","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018720","bugzilla_description":"CVE-2013-5797 OpenJDK: insufficient escaping of window title string (Javadoc, 8016675)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5797.json"},{"CVE":"CVE-2013-5784","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018727","bugzilla_description":"CVE-2013-5784 OpenJDK: insufficient InterfaceImplementor security checks (Scripting, 8017299)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5784.json"},{"CVE":"CVE-2013-5790","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447"],"bugzilla":"1018736","bugzilla_description":"CVE-2013-5790 OpenJDK: insufficient security checks (Beans, 8012071)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5790.json"},{"CVE":"CVE-2013-5849","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018750","bugzilla_description":"CVE-2013-5849 OpenJDK: insufficient DataFlavor security checks (AWT, 8012277)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5849.json"},{"CVE":"CVE-2013-5800","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1507","RHSA-2013:1447"],"bugzilla":"1018755","bugzilla_description":"CVE-2013-5800 OpenJDK: default keytab path information leak (JGSS, 8022931)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5800.json"},{"CVE":"CVE-2013-5805","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1018761","bugzilla_description":"CVE-2013-5805 CVE-2013-5806 OpenJDK: insufficient access checks in MacOS code (Swing, 8021275, 8021282)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5805.json"},{"CVE":"CVE-2013-5806","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1018761","bugzilla_description":"CVE-2013-5805 CVE-2013-5806 OpenJDK: insufficient access checks in MacOS code (Swing, 8021275, 8021282)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5806.json"},{"CVE":"CVE-2013-5780","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018785","bugzilla_description":"CVE-2013-5780 OpenJDK: key data leak via toString() methods (Libraries, 8011071)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5780.json"},{"CVE":"CVE-2013-5840","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018831","bugzilla_description":"CVE-2013-5840 OpenJDK: getDeclaringClass() information leak (Libraries, 8014349)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5840.json"},{"CVE":"CVE-2013-5820","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018972","bugzilla_description":"CVE-2013-5820 OpenJDK: insufficient security checks (JAXWS, 8017505)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5820.json"},{"CVE":"CVE-2013-5851","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1507","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018977","bugzilla_description":"CVE-2013-5851 OpenJDK: XML stream factory finder information leak (JAXP, 8013502)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5851.json"},{"CVE":"CVE-2013-5778","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1018984","bugzilla_description":"CVE-2013-5778 OpenJDK: image conversion out of bounds read (2D, 8014102)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5778.json"},{"CVE":"CVE-2013-5782","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019108","bugzilla_description":"CVE-2013-5782 OpenJDK: Incorrect awt_getPixelByte/awt_getPixelShort/awt_setPixelByte/awt_setPixelShort image raster checks (2D, 8014093)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5782.json"},{"CVE":"CVE-2013-5830","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019110","bugzilla_description":"CVE-2013-5830 OpenJDK: checkPackageAccess missing security check (Libraries, 8017291)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5830.json"},{"CVE":"CVE-2013-5809","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019113","bugzilla_description":"CVE-2013-5809 OpenJDK: JPEGImageReader and JPEGImageWriter missing band size checks (2D, 8013510)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5809.json"},{"CVE":"CVE-2013-5829","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019115","bugzilla_description":"CVE-2013-5829 OpenJDK: Java2d Disposer security bypass (2D, 8017287)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5829.json"},{"CVE":"CVE-2013-5814","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019117","bugzilla_description":"CVE-2013-5814 OpenJDK: RMIConnection stub missing permission check (CORBA, 8011157)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5814.json"},{"CVE":"CVE-2013-5817","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019118","bugzilla_description":"CVE-2013-5817 OpenJDK: VersionHelper12 does not honor modifyThreadGroup restriction (JNDI, 8013739)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5817.json"},{"CVE":"CVE-2013-5842","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019123","bugzilla_description":"CVE-2013-5842 OpenJDK: ObjectInputStream/ObjectOutputStream missing checks (Libraries, 8014987)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5842.json"},{"CVE":"CVE-2013-5850","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019127","bugzilla_description":"CVE-2013-5850 OpenJDK: Missing CORBA security checks (Libraries, 8017196)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5850.json"},{"CVE":"CVE-2013-5802","severity":"important","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019130","bugzilla_description":"CVE-2013-5802 OpenJDK: javax.xml.transform.TransformerFactory does not properly honor XMLConstants.FEATURE_SECURE_PROCESSING (JAXP, 8012425)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5802.json"},{"CVE":"CVE-2013-5804","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019131","bugzilla_description":"CVE-2013-5804 OpenJDK: javac does not ignore certain ignorable characters (Javadoc, 8016653)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5804.json"},{"CVE":"CVE-2013-3829","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019133","bugzilla_description":"CVE-2013-3829 OpenJDK: java.util.TimeZone does not restrict setting of default time zone (Libraries, 8001029)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3829.json"},{"CVE":"CVE-2013-5783","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019137","bugzilla_description":"CVE-2013-5783 OpenJDK: JTable not properly performing certain access checks (Swing, 8013744)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5783.json"},{"CVE":"CVE-2013-5825","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019139","bugzilla_description":"CVE-2013-5825 OpenJDK: XML parsing Denial of Service (JAXP, 8014530)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5825.json"},{"CVE":"CVE-2013-5823","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019145","bugzilla_description":"CVE-2013-5823 OpenJDK: com.sun.org.apache.xml.internal.security.utils.UnsyncByteArrayOutputStream Denial of Service (Security, 8021290)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5823.json"},{"CVE":"CVE-2013-5774","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1505","RHSA-2013:1447","RHSA-2013:1793"],"bugzilla":"1019147","bugzilla_description":"CVE-2013-5774 OpenJDK: Inet6Address class IPv6 address processing errors (Libraries, 8015743)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5774.json"},{"CVE":"CVE-2013-4002","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0269","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2015:0773","RHSA-2013:1081","RHSA-2013:1060","RHSA-2014:0414","RHSA-2014:1823","RHSA-2014:1822","RHSA-2014:1821","RHSA-2013:1505","RHSA-2013:1447","RHSA-2014:1319","RHSA-2013:1059","RHSA-2014:1818"],"bugzilla":"1019176","bugzilla_description":"CVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP, 8017298)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","xerces-j2-0:2.7.1-12.7.el6_5","xerces-j2-0:2.11.0-17.el7_0","java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4002.json"},{"CVE":"CVE-2013-5838","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2013:1507","RHSA-2013:1447"],"bugzilla":"1019300","bugzilla_description":"CVE-2013-5838 OpenJDK: Vulnerability in Libraries component (Libraries, 7023639)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5838.json"},{"CVE":"CVE-2013-5824","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019691","bugzilla_description":"CVE-2013-5824 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5824.json"},{"CVE":"CVE-2013-5788","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1507"],"bugzilla":"1019692","bugzilla_description":"CVE-2013-5788 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5788.json"},{"CVE":"CVE-2013-5787","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019693","bugzilla_description":"CVE-2013-5787 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5787.json"},{"CVE":"CVE-2013-5789","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019697","bugzilla_description":"CVE-2013-5789 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5789.json"},{"CVE":"CVE-2013-5843","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019701","bugzilla_description":"CVE-2013-5843 Oracle JDK: unspecified vulnerability fixed in 7u45 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5843.json"},{"CVE":"CVE-2013-5832","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019702","bugzilla_description":"CVE-2013-5832 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5832.json"},{"CVE":"CVE-2013-5852","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2014:0414"],"bugzilla":"1019705","bugzilla_description":"CVE-2013-5852 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5852.json"},{"CVE":"CVE-2013-5812","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019706","bugzilla_description":"CVE-2013-5812 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5812.json"},{"CVE":"CVE-2013-5801","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2013:1509","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019710","bugzilla_description":"CVE-2013-5801 Oracle JDK: unspecified vulnerability fixed in 7u45 (2D)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.5.0-ibm-1:1.5.0.16.4-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5801.json"},{"CVE":"CVE-2013-5776","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019712","bugzilla_description":"CVE-2013-5776 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5776.json"},{"CVE":"CVE-2013-5818","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019713","bugzilla_description":"CVE-2013-5818 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5818.json"},{"CVE":"CVE-2013-5819","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019715","bugzilla_description":"CVE-2013-5819 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5819.json"},{"CVE":"CVE-2013-5831","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019716","bugzilla_description":"CVE-2013-5831 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5831.json"},{"CVE":"CVE-2013-5848","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440","RHSA-2013:1508","RHSA-2014:0414","RHSA-2013:1507","RHSA-2013:1793"],"bugzilla":"1019720","bugzilla_description":"CVE-2013-5848 Oracle JDK: unspecified vulnerability fixed in 7u45 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5848.json"},{"CVE":"CVE-2013-5775","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440"],"bugzilla":"1019722","bugzilla_description":"CVE-2013-5846 CVE-2013-5810 CVE-2013-5844 CVE-2013-5777 CVE-2013-5775 CVE-2013-5854 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5775.json"},{"CVE":"CVE-2013-5777","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440"],"bugzilla":"1019722","bugzilla_description":"CVE-2013-5846 CVE-2013-5810 CVE-2013-5844 CVE-2013-5777 CVE-2013-5775 CVE-2013-5854 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5777.json"},{"CVE":"CVE-2013-5810","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440"],"bugzilla":"1019722","bugzilla_description":"CVE-2013-5846 CVE-2013-5810 CVE-2013-5844 CVE-2013-5777 CVE-2013-5775 CVE-2013-5854 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5810.json"},{"CVE":"CVE-2013-5844","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440"],"bugzilla":"1019722","bugzilla_description":"CVE-2013-5846 CVE-2013-5810 CVE-2013-5844 CVE-2013-5777 CVE-2013-5775 CVE-2013-5854 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5844.json"},{"CVE":"CVE-2013-5846","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440"],"bugzilla":"1019722","bugzilla_description":"CVE-2013-5846 CVE-2013-5810 CVE-2013-5844 CVE-2013-5777 CVE-2013-5775 CVE-2013-5854 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5846.json"},{"CVE":"CVE-2013-5854","severity":"critical","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1440"],"bugzilla":"1019722","bugzilla_description":"CVE-2013-5846 CVE-2013-5810 CVE-2013-5844 CVE-2013-5777 CVE-2013-5775 CVE-2013-5854 Oracle JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5854.json"},{"CVE":"CVE-2013-1571","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"973474","bugzilla_description":"CVE-2013-1571 OpenJDK: Frame injection in generated HTML (Javadoc, 8012375)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1571.json"},{"CVE":"CVE-2013-2470","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975099","bugzilla_description":"CVE-2013-2470 OpenJDK: ImagingLib byte lookup processing (2D, 8011243)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2470.json"},{"CVE":"CVE-2013-2471","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975102","bugzilla_description":"CVE-2013-2471 OpenJDK: Incorrect IntegerComponentRaster size checks (2D, 8011248)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2471.json"},{"CVE":"CVE-2013-2472","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975107","bugzilla_description":"CVE-2013-2472 OpenJDK: Incorrect ShortBandedRaster size checks (2D, 8011253)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2472.json"},{"CVE":"CVE-2013-2473","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975110","bugzilla_description":"CVE-2013-2473 OpenJDK: Incorrect ByteBandedRaster size checks (2D, 8011257)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2473.json"},{"CVE":"CVE-2013-2463","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975115","bugzilla_description":"CVE-2013-2463 OpenJDK: Incorrect image attribute verification (2D, 8012438)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2463.json"},{"CVE":"CVE-2013-2465","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975118","bugzilla_description":"CVE-2013-2465 OpenJDK: Incorrect image channel verification (2D, 8012597)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2465.json"},{"CVE":"CVE-2013-2469","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975120","bugzilla_description":"CVE-2013-2469 OpenJDK: Incorrect image layout verification (2D, 8012601)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2469.json"},{"CVE":"CVE-2013-2459","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975121","bugzilla_description":"CVE-2013-2459 OpenJDK: Various AWT integer overflow checks (AWT, 8009071)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2459.json"},{"CVE":"CVE-2013-2460","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975122","bugzilla_description":"CVE-2013-2460 OpenJDK: tracing insufficient access checks (Serviceability, 8010209)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2460.json"},{"CVE":"CVE-2013-2445","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:0963","RHSA-2013:1014"],"bugzilla":"975124","bugzilla_description":"CVE-2013-2445 OpenJDK: Better handling of memory allocation errors (Hotspot, 7158805)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2445.json"},{"CVE":"CVE-2013-2448","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975125","bugzilla_description":"CVE-2013-2448 OpenJDK: Better access restrictions (Sound, 8006328)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2448.json"},{"CVE":"CVE-2013-2461","severity":"important","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:0963","RHSA-2013:1014"],"bugzilla":"975126","bugzilla_description":"CVE-2013-2461 OpenJDK: Missing check for valid DOMCanonicalizationMethod canonicalization algorithm (Libraries, 8014281)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2461.json"},{"CVE":"CVE-2013-2407","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975127","bugzilla_description":"CVE-2013-2407 OpenJDK: Integrate Apache Santuario, rework class loader (Libraries, 6741606, 8008744)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2407.json"},{"CVE":"CVE-2013-2454","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975129","bugzilla_description":"CVE-2013-2454 OpenJDK: SerialJavaObject package restriction (JDBC, 8009554)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2454.json"},{"CVE":"CVE-2013-2458","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975130","bugzilla_description":"CVE-2013-2458 OpenJDK: Method handles (Libraries, 8009424)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2458.json"},{"CVE":"CVE-2013-2444","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975131","bugzilla_description":"CVE-2013-2444 OpenJDK: Resource denial of service (AWT, 8001038)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2444.json"},{"CVE":"CVE-2013-2446","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975132","bugzilla_description":"CVE-2013-2446 OpenJDK: output stream access restrictions (CORBA, 8000642)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2446.json"},{"CVE":"CVE-2013-2457","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975133","bugzilla_description":"CVE-2013-2457 OpenJDK: Proper class checking (JMX, 8008120)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2457.json"},{"CVE":"CVE-2013-2453","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975134","bugzilla_description":"CVE-2013-2453 OpenJDK: MBeanServer Introspector package access (JMX, 8008124)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2453.json"},{"CVE":"CVE-2013-2443","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975137","bugzilla_description":"CVE-2013-2443 OpenJDK: AccessControlContext check order issue (Libraries, 8001330)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2443.json"},{"CVE":"CVE-2013-2452","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975138","bugzilla_description":"CVE-2013-2452 OpenJDK: Unique VMIDs (Libraries, 8001033)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2452.json"},{"CVE":"CVE-2013-2455","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975139","bugzilla_description":"CVE-2013-2455 OpenJDK: getEnclosing* checks (Libraries, 8007812)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2455.json"},{"CVE":"CVE-2013-2447","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975140","bugzilla_description":"CVE-2013-2447 OpenJDK: Prevent revealing the local address (Networking, 8001318)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2447.json"},{"CVE":"CVE-2013-2450","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975141","bugzilla_description":"CVE-2013-2450 OpenJDK: ObjectStreamClass circular reference denial of service (Serialization, 8000638)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2450.json"},{"CVE":"CVE-2013-2456","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975142","bugzilla_description":"CVE-2013-2456 OpenJDK: ObjectOutputStream access checks (Serialization, 8008132)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2456.json"},{"CVE":"CVE-2013-2412","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975144","bugzilla_description":"CVE-2013-2412 OpenJDK: JConsole SSL support (Serviceability, 8003703)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2412.json"},{"CVE":"CVE-2013-2449","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2013:0957","RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975145","bugzilla_description":"CVE-2013-2449 OpenJDK: GnomeFileTypeDetector path access check (Libraries, 8004288)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2449.json"},{"CVE":"CVE-2013-2451","severity":"low","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975146","bugzilla_description":"CVE-2013-2451 OpenJDK: exclusive port binding (Networking, 7170730)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2451.json"},{"CVE":"CVE-2013-1500","severity":"low","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:0958","RHSA-2014:0414","RHSA-2013:0957","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1014","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975148","bugzilla_description":"CVE-2013-1500 OpenJDK: Insecure shared memory permissions (2D, 8001034)","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.41.1.11.11.90.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.25-2.3.10.4.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.62.1.11.11.90.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1500.json"},{"CVE":"CVE-2013-2464","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1081","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975757","bugzilla_description":"CVE-2013-2464 Oracle JDK: unspecified vulnerability fixed in 7u25 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2464.json"},{"CVE":"CVE-2013-2468","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975761","bugzilla_description":"CVE-2013-2468 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2468.json"},{"CVE":"CVE-2013-2466","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975764","bugzilla_description":"CVE-2013-2466 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2466.json"},{"CVE":"CVE-2013-3743","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1081","RHSA-2013:1456","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975767","bugzilla_description":"CVE-2013-3743 Oracle JDK: unspecified vulnerability fixed in 6u51 and 5u51 (AWT)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3743.json"},{"CVE":"CVE-2013-2462","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975769","bugzilla_description":"CVE-2013-2462 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2462.json"},{"CVE":"CVE-2013-2442","severity":"important","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975770","bugzilla_description":"CVE-2013-2442 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2442.json"},{"CVE":"CVE-2013-2467","severity":"important","public_date":"2013-06-18T00:00:00Z","advisories":[],"bugzilla":"975772","bugzilla_description":"CVE-2013-2467 Oracle JDK: unspecified vulnerability fixed in 5u51 (Install)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2467.json"},{"CVE":"CVE-2013-2437","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2014:0414","RHSA-2013:1060","RHSA-2013:1456","RHSA-2013:0963","RHSA-2013:1455","RHSA-2013:1059"],"bugzilla":"975773","bugzilla_description":"CVE-2013-2437 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2437.json"},{"CVE":"CVE-2013-2400","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975774","bugzilla_description":"CVE-2013-2400 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2400.json"},{"CVE":"CVE-2013-3744","severity":"moderate","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:1060","RHSA-2013:0963"],"bugzilla":"975775","bugzilla_description":"CVE-2013-3744 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.25-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3744.json"},{"CVE":"CVE-2013-0401","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"920245","bugzilla_description":"CVE-2013-0401 OpenJDK: sun.awt.datatransfer.ClassLoaderObjectInputStream class may incorrectly invoke the system class loader (CanSecWest 2013, AWT, 8009305)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0401.json"},{"CVE":"CVE-2013-1488","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"920247","bugzilla_description":"CVE-2013-1488 OpenJDK: JDBC driver manager improper toString calls (CanSecWest 2013, Libraries, 8009814)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1488.json"},{"CVE":"CVE-2013-1537","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952387","bugzilla_description":"CVE-2013-1537 OpenJDK: remote code loading enabled by default (RMI, 8001040)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1537.json"},{"CVE":"CVE-2013-2415","severity":"low","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952389","bugzilla_description":"CVE-2013-2415 OpenJDK: temporary files created with insecure permissions (JAX-WS, 8003542)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2415.json"},{"CVE":"CVE-2013-2423","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0751"],"bugzilla":"952398","bugzilla_description":"CVE-2013-2423 OpenJDK: incorrect setter access checks in MethodHandles (Hostspot, 8009677)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2423.json"},{"CVE":"CVE-2013-2424","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952509","bugzilla_description":"CVE-2013-2424 OpenJDK: MBeanInstantiator insufficient class access checks (JMX, 8006435)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2424.json"},{"CVE":"CVE-2013-2429","severity":"important","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952521","bugzilla_description":"CVE-2013-2429 OpenJDK: JPEGImageWriter state corruption (ImageIO, 8007918)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2429.json"},{"CVE":"CVE-2013-2430","severity":"important","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952524","bugzilla_description":"CVE-2013-2430 OpenJDK: JPEGImageReader state corruption (ImageIO, 8007667)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2430.json"},{"CVE":"CVE-2013-2436","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0751"],"bugzilla":"952550","bugzilla_description":"CVE-2013-2436 OpenJDK: Wrapper.convert insufficient type checks (Libraries, 8009049)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2436.json"},{"CVE":"CVE-2013-2420","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952638","bugzilla_description":"CVE-2013-2420 OpenJDK: image processing vulnerability (2D, 8007617)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2420.json"},{"CVE":"CVE-2013-1558","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952640","bugzilla_description":"CVE-2013-1558 OpenJDK: java.beans.ThreadGroupContext missing restrictions (Beans, 7200507)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1558.json"},{"CVE":"CVE-2013-2422","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952642","bugzilla_description":"CVE-2013-2422 OpenJDK: MethodUtil trampoline class incorrect restrictions (Libraries, 8009857)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2422.json"},{"CVE":"CVE-2013-2431","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952645","bugzilla_description":"CVE-2013-2431 OpenJDK: Hotspot intrinsic frames vulnerability (Hotspot, 8004336)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2431.json"},{"CVE":"CVE-2013-1518","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952646","bugzilla_description":"CVE-2013-1518 OpenJDK: JAXP missing security restrictions (JAXP, 6657673)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1518.json"},{"CVE":"CVE-2013-1557","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952648","bugzilla_description":"CVE-2013-1557 OpenJDK: LogStream.setDefaultStream() missing security restrictions (RMI, 8001329)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1557.json"},{"CVE":"CVE-2013-2421","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952649","bugzilla_description":"CVE-2013-2421 OpenJDK: Hotspot MethodHandle lookup error (Hotspot, 8009699)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2421.json"},{"CVE":"CVE-2013-2426","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0752","RHSA-2013:0770","RHSA-2013:0751"],"bugzilla":"952653","bugzilla_description":"CVE-2013-2426 OpenJDK: ConcurrentHashMap incorrectly calls defaultReadObject() method (Libraries, 8009063)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2426.json"},{"CVE":"CVE-2013-2419","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952656","bugzilla_description":"CVE-2013-2419 ICU: Layout Engine font processing errors (JDK 2D, 8001031)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2419.json"},{"CVE":"CVE-2013-2417","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952657","bugzilla_description":"CVE-2013-2417 OpenJDK: Network InetAddress serialization information disclosure (Networking, 8000724)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2417.json"},{"CVE":"CVE-2013-2383","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952708","bugzilla_description":"CVE-2013-2383 ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004986)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2383.json"},{"CVE":"CVE-2013-2384","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952709","bugzilla_description":"CVE-2013-2384 ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004987)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2384.json"},{"CVE":"CVE-2013-1569","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952711","bugzilla_description":"CVE-2013-1569 ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004994)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1569.json"},{"CVE":"CVE-2013-1561","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"953135","bugzilla_description":"Oracle JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1561.json"},{"CVE":"CVE-2013-1564","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"953135","bugzilla_description":"Oracle JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1564.json"},{"CVE":"CVE-2013-2414","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"953135","bugzilla_description":"Oracle JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2414.json"},{"CVE":"CVE-2013-2427","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"953135","bugzilla_description":"Oracle JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2427.json"},{"CVE":"CVE-2013-2428","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"953135","bugzilla_description":"Oracle JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2428.json"},{"CVE":"CVE-2013-2438","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822"],"bugzilla":"953135","bugzilla_description":"Oracle JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2438.json"},{"CVE":"CVE-2013-1540","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953166","bugzilla_description":"CVE-2013-1540 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1540.json"},{"CVE":"CVE-2013-1563","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953172","bugzilla_description":"CVE-2013-1563 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Install)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1563.json"},{"CVE":"CVE-2013-2394","severity":"important","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953265","bugzilla_description":"CVE-2013-2394 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (2D)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2394.json"},{"CVE":"CVE-2013-2416","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822"],"bugzilla":"953266","bugzilla_description":"CVE-2013-2416 Oracle JDK: unspecified vulnerability fixed in 7u21 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2416.json"},{"CVE":"CVE-2013-2418","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953267","bugzilla_description":"CVE-2013-2418 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2418.json"},{"CVE":"CVE-2013-2425","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"953268","bugzilla_description":"CVE-2013-2425 Oracle JDK: unspecified vulnerability fixed in 7u21 (Install)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2425.json"},{"CVE":"CVE-2013-2432","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953269","bugzilla_description":"CVE-2013-2432 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2432.json"},{"CVE":"CVE-2013-2433","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953270","bugzilla_description":"CVE-2013-2433 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2433.json"},{"CVE":"CVE-2013-2434","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0822"],"bugzilla":"953272","bugzilla_description":"CVE-2013-2434 Oracle JDK: unspecified vulnerability fixed in 7u21 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2434.json"},{"CVE":"CVE-2013-2435","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953273","bugzilla_description":"CVE-2013-2435 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2435.json"},{"CVE":"CVE-2013-2439","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0757","RHSA-2013:0758"],"bugzilla":"953274","bugzilla_description":"CVE-2013-2439 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Install)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2439.json"},{"CVE":"CVE-2013-2440","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"953275","bugzilla_description":"CVE-2013-2440 Oracle JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2440.json"},{"CVE":"CVE-2013-0402","severity":"critical","public_date":"2013-03-06T00:00:00Z","advisories":["RHSA-2013:0757"],"bugzilla":"920246","bugzilla_description":"CVE-2013-0402 Oracle JDK: unspecified JavaFX buffer overflow leading to JVM compromise (CanSecWest 2013, JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0402.json"},{"CVE":"CVE-2013-1491","severity":"critical","public_date":"2013-03-06T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"920248","bugzilla_description":"CVE-2013-1491 Oracle JDK: unspecified sanbox bypass (CanSecWest 2013, 2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1491.json"},{"CVE":"CVE-2013-0809","severity":"critical","public_date":"2013-03-04T00:00:00Z","advisories":["RHSA-2013:0603","RHSA-2013:0625","RHSA-2013:0602","RHSA-2013:0624","RHSA-2013:0605","RHSA-2013:0604","RHSA-2013:0626","RHSA-2013:1456","RHSA-2013:0601","RHSA-2013:0600","RHSA-2013:1455"],"bugzilla":"917550","bugzilla_description":"CVE-2013-0809 OpenJDK: Specially crafted sample model integer overflow (2D, 8007014)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.36.1.11.9.el5_9","java-1.7.0-oracle-1:1.7.0.17-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.57.1.11.9.el6_4","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el6_4","java-1.6.0-sun-1:1.6.0.43-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0809.json"},{"CVE":"CVE-2013-1493","severity":"critical","public_date":"2013-03-04T00:00:00Z","advisories":["RHSA-2013:0603","RHSA-2013:0625","RHSA-2013:0602","RHSA-2013:0624","RHSA-2013:0605","RHSA-2013:0604","RHSA-2013:0626","RHSA-2013:1456","RHSA-2013:0601","RHSA-2013:0600","RHSA-2013:1455"],"bugzilla":"917553","bugzilla_description":"CVE-2013-1493 OpenJDK: CMM malformed raster memory corruption (2D, 8007675)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.36.1.11.9.el5_9","java-1.7.0-oracle-1:1.7.0.17-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.57.1.11.9.el6_4","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el6_4","java-1.6.0-sun-1:1.6.0.43-1jpp.1.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.8.0.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1493.json"},{"CVE":"CVE-2013-1486","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0532","RHSA-2013:1456","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531"],"bugzilla":"913014","bugzilla_description":"CVE-2013-1486 OpenJDK: MBeanServer insufficient privilege restrictions (JMX, 8006446)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el6_3","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1486.json"},{"CVE":"CVE-2013-1484","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0532","RHSA-2013:0275"],"bugzilla":"913021","bugzilla_description":"CVE-2013-1484 OpenJDK: MethodHandleProxies insufficient privilege checks (Libraries, 8004937)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1484.json"},{"CVE":"CVE-2013-1485","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0532","RHSA-2013:0275"],"bugzilla":"913025","bugzilla_description":"CVE-2013-1485 OpenJDK: MethodHandles insufficient privilege checks (Libraries, 8006439)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1485.json"},{"CVE":"CVE-2013-1487","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0532","RHSA-2013:1456","RHSA-2013:1455","RHSA-2013:0531"],"bugzilla":"913030","bugzilla_description":"CVE-2013-1487 Oracle JDK: unspecified vulnerability fixed in 6u41 and 7u15 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el6_3","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1487.json"},{"CVE":"CVE-2013-0169","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0636","RHSA-2013:0823","RHSA-2013:0833","RHSA-2013:0855","RHSA-2013:0822","RHSA-2013:0587","RHSA-2013:0532","RHSA-2013:1456","RHSA-2014:0416","RHSA-2013:0782","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"907589","bugzilla_description":"CVE-2013-0169 SSL/TLS: CBC padding timing attack (lucky-13)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3","spice-client-msi-0:3.3-12","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el5_9","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0169.json"},{"CVE":"CVE-2013-0440","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"859140","bugzilla_description":"CVE-2013-0440 OpenJDK: CPU consumption DoS via repeated SSL ClientHello packets (JSSE, 7192393)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0440.json"},{"CVE":"CVE-2013-1475","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0247","RHSA-2012:1485","RHSA-2013:0236","RHSA-2013:0246","RHSA-2012:1465","RHSA-2013:0237","RHSA-2012:1467","RHSA-2012:1466","RHSA-2013:0245"],"bugzilla":"860652","bugzilla_description":"CVE-2013-1475 OpenJDK: IIOP type reuse sandbox bypass (CORBA, 8000540, SE-2012-01 Issue 50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1475.json"},{"CVE":"CVE-2013-0424","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906813","bugzilla_description":"CVE-2013-0424 OpenJDK: RMI CGIHandler XSS issue (RMI, 6563318)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0424.json"},{"CVE":"CVE-2013-0435","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906892","bugzilla_description":"CVE-2013-0435 OpenJDK: com.sun.xml.internal.* not restricted packages (JAX-WS, 7201068)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0435.json"},{"CVE":"CVE-2013-1478","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906894","bugzilla_description":"CVE-2013-1478 OpenJDK: image parser insufficient raster parameter checks (2D, 8001972)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1478.json"},{"CVE":"CVE-2013-0442","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906899","bugzilla_description":"CVE-2013-0442 OpenJDK: insufficient privilege checking issue (AWT, 7192977)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0442.json"},{"CVE":"CVE-2013-0445","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906900","bugzilla_description":"CVE-2013-0445 OpenJDK: insufficient privilege checking issue (AWT, 8001057)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0445.json"},{"CVE":"CVE-2013-1480","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906904","bugzilla_description":"CVE-2013-1480 OpenJDK: image parser insufficient raster parameter checks (AWT, 8002325)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1480.json"},{"CVE":"CVE-2013-0450","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"906911","bugzilla_description":"CVE-2013-0450 OpenJDK: RequiredModelMBean missing access control context checks (JMX, 8000537)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0450.json"},{"CVE":"CVE-2012-1541","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906914","bugzilla_description":"CVE-2012-1541 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1541.json"},{"CVE":"CVE-2013-0446","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906916","bugzilla_description":"CVE-2013-0446 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0446.json"},{"CVE":"CVE-2012-3342","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906917","bugzilla_description":"CVE-2012-3342 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3342.json"},{"CVE":"CVE-2013-0419","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906918","bugzilla_description":"CVE-2013-0419 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0419.json"},{"CVE":"CVE-2013-0423","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906921","bugzilla_description":"CVE-2013-0423 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0423.json"},{"CVE":"CVE-2013-0351","severity":"important","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906923","bugzilla_description":"CVE-2013-0351 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0351.json"},{"CVE":"CVE-2013-0430","severity":"low","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0236","RHSA-2013:0237"],"bugzilla":"906930","bugzilla_description":"CVE-2013-0430 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Install)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0430.json"},{"CVE":"CVE-2013-0449","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0237"],"bugzilla":"906932","bugzilla_description":"CVE-2013-0449 Oracle JDK: unspecified vulnerability fixed in 7u13 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0449.json"},{"CVE":"CVE-2013-1473","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906933","bugzilla_description":"CVE-2013-1473 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1473.json"},{"CVE":"CVE-2013-0448","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0237"],"bugzilla":"906934","bugzilla_description":"CVE-2013-0448 Oracle JDK: unspecified vulnerability fixed in 7u13 (Libraries)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0448.json"},{"CVE":"CVE-2013-0438","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"906935","bugzilla_description":"CVE-2013-0438 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0438.json"},{"CVE":"CVE-2013-1479","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0237"],"bugzilla":"907190","bugzilla_description":"CVE-2013-1479 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (JavaFX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1479.json"},{"CVE":"CVE-2013-0428","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907207","bugzilla_description":"CVE-2013-0428 OpenJDK: reflection API incorrect checks for proxy classes (Libraries, 7197546, SE-2012-01 Issue 29)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0428.json"},{"CVE":"CVE-2013-0444","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0237"],"bugzilla":"907218","bugzilla_description":"CVE-2013-0444 OpenJDK: MethodFinder insufficient checks for cached results (Beans, 7200493)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0444.json"},{"CVE":"CVE-2013-0432","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907219","bugzilla_description":"CVE-2013-0432 OpenJDK: insufficient clipboard access premission checks (AWT, 7186952)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0432.json"},{"CVE":"CVE-2013-0437","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0237"],"bugzilla":"907222","bugzilla_description":"CVE-2013-0437 Oracle JDK: unspecified vulnerability fixed in 7u13 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0437.json"},{"CVE":"CVE-2012-3213","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"907223","bugzilla_description":"CVE-2012-3213 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Scripting)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3213.json"},{"CVE":"CVE-2013-1481","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:1455"],"bugzilla":"907224","bugzilla_description":"CVE-2013-1481 Oracle JDK: unspecified vulnerability fixed in 6u39 (Sound)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1481.json"},{"CVE":"CVE-2013-0409","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0236","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455"],"bugzilla":"907226","bugzilla_description":"CVE-2013-0409 Oracle JDK: unspecified vulnerability fixed in 6u39 and 7u13 (JMX)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0409.json"},{"CVE":"CVE-2013-0443","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907340","bugzilla_description":"CVE-2013-0443 OpenJDK: insufficient Diffie-Hellman public key checks (JSSE, 7192392)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0443.json"},{"CVE":"CVE-2013-0425","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907344","bugzilla_description":"CVE-2013-0425 OpenJDK: logging insufficient access control checks (Libraries, 6664509)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0425.json"},{"CVE":"CVE-2013-0426","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907346","bugzilla_description":"CVE-2013-0426 OpenJDK: logging insufficient access control checks (Libraries, 6664528)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0426.json"},{"CVE":"CVE-2013-0434","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907453","bugzilla_description":"CVE-2013-0434 OpenJDK: loadPropertyFile missing restrictions (JAXP, 8001235)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0434.json"},{"CVE":"CVE-2013-0427","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907455","bugzilla_description":"CVE-2013-0427 OpenJDK: invalid threads subject to interrupts (Libraries, 6776941)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0427.json"},{"CVE":"CVE-2013-0433","severity":"moderate","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907456","bugzilla_description":"CVE-2013-0433 OpenJDK: InetSocketAddress serialization issue (Networking, 7201071)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0433.json"},{"CVE":"CVE-2013-1476","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0624","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907457","bugzilla_description":"CVE-2013-1476 OpenJDK: missing ValueHandlerImpl class constructor access restriction (CORBA, 8000631)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1476.json"},{"CVE":"CVE-2013-0441","severity":"critical","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0625","RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:1456","RHSA-2013:0237","RHSA-2013:1455","RHSA-2013:0245"],"bugzilla":"907458","bugzilla_description":"CVE-2013-0441 OpenJDK: missing serialization restriction (CORBA, 7201066)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0441.json"},{"CVE":"CVE-2013-0429","severity":"important","public_date":"2013-02-01T00:00:00Z","advisories":["RHSA-2013:0247","RHSA-2013:0236","RHSA-2013:0246","RHSA-2013:0237","RHSA-2013:0245"],"bugzilla":"907460","bugzilla_description":"CVE-2013-0429 OpenJDK: PresentationManager incorrectly shared (CORBA, 7141694)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.33.1.11.6.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.54.1.11.6.el6_3","java-1.6.0-sun-1:1.6.0.39-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0429.json"},{"CVE":"CVE-2013-0431","severity":"moderate","public_date":"2013-01-27T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0247","RHSA-2013:0237"],"bugzilla":"906447","bugzilla_description":"CVE-2013-0431 OpenJDK: JMX Introspector missing package access check (JMX, 8000539, SE-2012-01 Issue 52)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el6_3","java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.5.3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0431.json"},{"CVE":"CVE-2013-1489","severity":"low","public_date":"2013-01-27T00:00:00Z","advisories":["RHSA-2013:0237"],"bugzilla":"906449","bugzilla_description":"CVE-2013-1489 Oracle JDK 7: bypass of the security level setting in browser plugin (Deployment, SE-2012-01 Issue 53)","cvss_score":null,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.13-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1489.json"},{"CVE":"CVE-2013-1490","severity":null,"public_date":"2013-01-27T00:00:00Z","advisories":[],"bugzilla":"906450","bugzilla_description":"CVE-2013-1490 JDK: complete Java security sandbox bypass (Issue 51)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1490.json"},{"CVE":"CVE-2012-3174","severity":"critical","public_date":"2013-01-13T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0165","RHSA-2013:0156"],"bugzilla":"894934","bugzilla_description":"CVE-2012-3174 OpenJDK: MethodHandles incorrect permission checks (Libraries, 8004933)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1","java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3174.json"},{"CVE":"CVE-2013-0422","severity":"critical","public_date":"2013-01-10T00:00:00Z","advisories":["RHSA-2013:0626","RHSA-2013:0165","RHSA-2013:0156"],"bugzilla":"894172","bugzilla_description":"CVE-2013-0422 OpenJDK: MethodHandles.Lookup incorrect permission checks, Java 7 0day (Libraries, 8006017)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.11-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1","java-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0422.json"},{"CVE":"CVE-2012-3216","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865346","bugzilla_description":"CVE-2012-3216 OpenJDK: java.io.FilePermission information leak (Libraries, 6631398)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3216.json"},{"CVE":"CVE-2012-5068","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865348","bugzilla_description":"CVE-2012-5068 OpenJDK: RhinoScriptEngine security bypass (Scripting, 7143535)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5068.json"},{"CVE":"CVE-2012-5070","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865350","bugzilla_description":"CVE-2012-5070 OpenJDK: EnvHelp information disclosure (JMX, 7158796)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5070.json"},{"CVE":"CVE-2012-5076","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865352","bugzilla_description":"CVE-2012-5076 OpenJDK: com.sun.org.glassfish.* not restricted packages (JAX-WS, 7163198)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5076.json"},{"CVE":"CVE-2012-5077","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2012:1467"],"bugzilla":"865354","bugzilla_description":"CVE-2012-5077 OpenJDK: SecureRandom mulitple seeders information disclosure (Security, 7167656)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5077.json"},{"CVE":"CVE-2012-5073","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865357","bugzilla_description":"CVE-2012-5073 OpenJDK: LogManager security bypass (Libraries, 7169884)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5073.json"},{"CVE":"CVE-2012-5074","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865359","bugzilla_description":"CVE-2012-5074 OpenJDK: com.sun.org.glassfish.* not restricted packages (JAX-WS, 7169887)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5074.json"},{"CVE":"CVE-2012-5075","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865363","bugzilla_description":"CVE-2012-5075 OpenJDK: RMIConnectionImpl information disclosure (JMX, 7169888)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5075.json"},{"CVE":"CVE-2012-5072","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865365","bugzilla_description":"CVE-2012-5072 OpenJDK: AccessController.doPrivilegedWithCombiner() information disclosure (Security, 7172522)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5072.json"},{"CVE":"CVE-2012-5081","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865370","bugzilla_description":"CVE-2012-5081 OpenJDK: JSSE denial of service (JSSE, 7186286)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5081.json"},{"CVE":"CVE-2012-5086","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2012:1467"],"bugzilla":"865428","bugzilla_description":"CVE-2012-5086 OpenJDK: XMLDecoder sandbox restriction bypass (Beans, 7195917)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5086.json"},{"CVE":"CVE-2012-5087","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865434","bugzilla_description":"CVE-2012-5087 OpenJDK: PropertyElementHandler insufficient access checks (Beans, 7195549)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5087.json"},{"CVE":"CVE-2012-5088","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1386","RHSA-2012:1467"],"bugzilla":"865471","bugzilla_description":"CVE-2012-5088 OpenJDK: MethodHandle insufficient access control checks (Libraries, 7196190)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5088.json"},{"CVE":"CVE-2012-5084","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865511","bugzilla_description":"CVE-2012-5084 OpenJDK: DefaultFormatter insufficient data validation (Swing, 7195194)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5084.json"},{"CVE":"CVE-2012-5089","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865514","bugzilla_description":"CVE-2012-5089 OpenJDK: RMIConnectionImpl insufficient access control checks (JMX, 7198296)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5089.json"},{"CVE":"CVE-2012-5071","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865519","bugzilla_description":"CVE-2012-5071 OpenJDK: DescriptorSupport insufficient package access checks (JMX, 7192975)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5071.json"},{"CVE":"CVE-2012-5069","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865531","bugzilla_description":"CVE-2012-5069 OpenJDK: Executors state handling issues (Concurrency, 7189103)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5069.json"},{"CVE":"CVE-2012-5085","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2013:0625","RHSA-2012:1392","RHSA-2013:0624","RHSA-2012:1384","RHSA-2013:0626","RHSA-2012:1386","RHSA-2012:1385"],"bugzilla":"865541","bugzilla_description":"CVE-2012-5085 OpenJDK: disable Gopher support by default (Gopher, 7189567)","cvss_score":null,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.7.0-ibm-1:1.7.0.4.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.0-1jpp.3.el6_4","java-1.5.0-ibm-1:1.5.0.16.0-1jpp.1.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5085.json"},{"CVE":"CVE-2012-5079","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1485","RHSA-2012:1385","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"865568","bugzilla_description":"CVE-2012-5079 OpenJDK: ServiceLoader reject not subtype classes without instantiating (Libraries, 7195919)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5079.json"},{"CVE":"CVE-2012-1531","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1485","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"867185","bugzilla_description":"CVE-2012-1531 Oracle JDK: unspecified vulnerability (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1531.json"},{"CVE":"CVE-2012-1532","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2013:1456","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"867186","bugzilla_description":"CVE-2012-1532 Oracle JDK: unspecified vulnerability (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1532.json"},{"CVE":"CVE-2012-1533","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2013:1456","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"867187","bugzilla_description":"CVE-2012-1533 Oracle JDK: unspecified vulnerability (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1533.json"},{"CVE":"CVE-2012-3143","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"867189","bugzilla_description":"CVE-2012-3143 Oracle JDK: unspecified vulnerability (JMX)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3143.json"},{"CVE":"CVE-2012-3159","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2013:1456","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"867190","bugzilla_description":"CVE-2012-3159 Oracle JDK: unspecified vulnerability (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3159.json"},{"CVE":"CVE-2012-5067","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1467"],"bugzilla":"867192","bugzilla_description":"CVE-2012-5067 Oracle JDK: unspecified vulnerability (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5067.json"},{"CVE":"CVE-2012-5083","severity":"critical","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1485","RHSA-2013:1456","RHSA-2012:1465","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"867193","bugzilla_description":"CVE-2012-5083 Oracle JDK: unspecified vulnerability (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.4.2-ibm-0:1.4.2.13.14-1jpp.1.el5_8","java-1.5.0-ibm-1:1.5.0.15.0-1jpp.1.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5083.json"},{"CVE":"CVE-2012-4416","severity":"low","public_date":"2012-09-07T00:00:00Z","advisories":["RHSA-2012:1391","RHSA-2012:1392","RHSA-2012:1384","RHSA-2012:1386","RHSA-2012:1385"],"bugzilla":"856124","bugzilla_description":"CVE-2012-4416 OpenJDK: uninitialized Array JVM memory disclosure (Hotspot, 7198606)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.9-2.3.3.el6_3.1","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.10.el5_8","java-1.7.0-oracle-1:1.7.0.9-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.50.1.11.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4416.json"},{"CVE":"CVE-2012-4420","severity":null,"public_date":"2012-09-07T00:00:00Z","advisories":[],"bugzilla":"856588","bugzilla_description":"CVE-2012-4420 java-1.7.0-openjdk: JVM heap memory disclosure","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4420.json"},{"CVE":"CVE-2012-1682","severity":"critical","public_date":"2012-08-30T00:00:00Z","advisories":["RHSA-2012:1221","RHSA-2012:1223","RHSA-2013:1456","RHSA-2012:1289","RHSA-2012:1222","RHSA-2012:1225","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"853097","bugzilla_description":"CVE-2012-1682 OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.49.1.11.4.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.9.el5_8","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1682.json"},{"CVE":"CVE-2012-3136","severity":"critical","public_date":"2012-08-30T00:00:00Z","advisories":["RHSA-2012:1223","RHSA-2012:1289","RHSA-2012:1225"],"bugzilla":"853138","bugzilla_description":"CVE-2012-3136 OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3136.json"},{"CVE":"CVE-2012-0547","severity":"low","public_date":"2012-08-30T00:00:00Z","advisories":["RHSA-2012:1392","RHSA-2012:1221","RHSA-2012:1223","RHSA-2013:1456","RHSA-2012:1289","RHSA-2012:1222","RHSA-2012:1225","RHSA-2013:1455","RHSA-2012:1466"],"bugzilla":"853228","bugzilla_description":"CVE-2012-0547 OpenJDK: AWT hardening fixes (AWT, 7163201)","cvss_score":null,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.49.1.11.4.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.28.1.10.9.el5_8","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-sun-1:1.6.0.37-1jpp.1.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3","java-1.6.0-ibm-1:1.6.0.12.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0547.json"},{"CVE":"CVE-2012-4681","severity":"critical","public_date":"2012-08-27T00:00:00Z","advisories":["RHSA-2012:1223","RHSA-2012:1289","RHSA-2012:1225"],"bugzilla":"852051","bugzilla_description":"CVE-2012-4681 OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3","java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4681.json"},{"CVE":"CVE-2012-1711","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:0730"],"bugzilla":"829354","bugzilla_description":"CVE-2012-1711 OpenJDK: improper protection of CORBA data models (CORBA, 7079902)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1711.json"},{"CVE":"CVE-2012-1717","severity":"low","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:1332","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829358","bugzilla_description":"CVE-2012-1717 OpenJDK: insecure temporary file permissions (JRE, 7143606)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1717.json"},{"CVE":"CVE-2012-1716","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829360","bugzilla_description":"CVE-2012-1716 OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1716.json"},{"CVE":"CVE-2012-1713","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:1332","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829361","bugzilla_description":"CVE-2012-1713 OpenJDK: fontmanager layout lookup code memory corruption (2D, 7143617)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1713.json"},{"CVE":"CVE-2012-1719","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:1332","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829371","bugzilla_description":"CVE-2012-1719 OpenJDK: mutable repository identifiers in generated stub code (CORBA, 7143851)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1719.json"},{"CVE":"CVE-2012-1718","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:1243","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1332","RHSA-2012:0730","RHSA-2012:1467","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829372","bugzilla_description":"CVE-2012-1718 OpenJDK: CRL and certificate extensions handling improvements (Security, 7143872)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.7.0-ibm-1:1.7.0.3.0-1jpp.2.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.4.2-ibm-sap-0:1.4.2.13.13.sap-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.13-1jpp.1.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1718.json"},{"CVE":"CVE-2012-1723","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:0730"],"bugzilla":"829373","bugzilla_description":"CVE-2012-1723 OpenJDK: insufficient field accessibility checks (HotSpot, 7152811)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1723.json"},{"CVE":"CVE-2012-1724","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2012:0730"],"bugzilla":"829374","bugzilla_description":"CVE-2012-1724 OpenJDK: XML parsing infinite loop (JAXP, 7157609)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1724.json"},{"CVE":"CVE-2012-1725","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:0734","RHSA-2012:1019","RHSA-2012:0729","RHSA-2013:1456","RHSA-2012:1245","RHSA-2012:1289","RHSA-2012:0730","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"829376","bugzilla_description":"CVE-2012-1725 OpenJDK: insufficient invokespecial <init> verification (HotSpot, 7160757)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.5.0-ibm-1:1.5.0.14.0-1jpp.1.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.48.1.11.3.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-openjdk-1:1.6.0.0-1.27.1.10.8.el5_8","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1725.json"},{"CVE":"CVE-2012-1726","severity":"important","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:1009","RHSA-2012:1019","RHSA-2012:1289"],"bugzilla":"829377","bugzilla_description":"CVE-2012-1726 OpenJDK: java.lang.invoke.MethodHandles.Lookup does not honor access modes (Libraries, 7165628)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1726.json"},{"CVE":"CVE-2012-1721","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:0734","RHSA-2012:1019","RHSA-2013:1456","RHSA-2012:1289","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"831353","bugzilla_description":"CVE-2012-1721 Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1721.json"},{"CVE":"CVE-2012-1722","severity":"critical","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:0734","RHSA-2012:1019","RHSA-2013:1456","RHSA-2012:1289","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"831354","bugzilla_description":"CVE-2012-1722 Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1722.json"},{"CVE":"CVE-2012-0551","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:0734","RHSA-2012:1019","RHSA-2013:1456","RHSA-2012:1289","RHSA-2013:1455","RHSA-2012:1238"],"bugzilla":"831355","bugzilla_description":"CVE-2012-0551 Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.33-1jpp.1.el6_2","java-1.7.0-oracle-1:1.7.0.5-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3","java-1.6.0-ibm-1:1.6.0.11.0-1jpp.1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0551.json"},{"CVE":"CVE-2015-0480","severity":"low","public_date":"2005-01-04T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211504","bugzilla_description":"CVE-2015-0480 OpenJDK: jar directory traversal issues (Tools, 8064601)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0480.json"},{"CVE":"CVE-2005-1080","severity":"low","public_date":"2005-01-04T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"606442","bugzilla_description":"CVE-2005-1080 jar: directory traversal vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1080.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/acpica-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/acpica-tools_security_api_results.json
new file mode 100644
index 0000000..b9b119a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/acpica-tools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-13693","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1485346","bugzilla_description":"CVE-2017-13693 kernel: ACPI operand cache leak in dsutils.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13693.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-13695","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1485349","bugzilla_description":"CVE-2017-13695 kernel: ACPI operand cache leak in nseval.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13695.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-13694","severity":"moderate","public_date":"2017-06-23T00:00:00Z","advisories":[],"bugzilla":"1485348","bugzilla_description":"CVE-2017-13694 kernel: ACPI node and node_ext cache leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13694.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/acpid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/acpid_security_api_results.json
new file mode 100644
index 0000000..1a640cb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/acpid_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-4578","severity":"low","public_date":"2011-07-30T00:00:00Z","advisories":[],"bugzilla":"760984","bugzilla_description":"CVE-2011-4578 acpid: Unsafe umask for actions executed by acpid","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4578.json"},{"CVE":"CVE-2011-1159","severity":"low","public_date":"2011-01-19T00:00:00Z","advisories":[],"bugzilla":"688698","bugzilla_description":"CVE-2011-1159 acpid: blocked writes can lead to acpid daemon hang","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1159.json"},{"CVE":"CVE-2009-4033","severity":"important","public_date":"2009-12-07T00:00:00Z","advisories":["RHSA-2009:1642"],"bugzilla":"542926","bugzilla_description":"CVE-2009-4033 acpid: log file created with random permissions","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["acpid-0:1.0.4-9.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4033.json"},{"CVE":"CVE-2009-0798","severity":"moderate","public_date":"2009-04-21T00:00:00Z","advisories":["RHSA-2009:0474"],"bugzilla":"494443","bugzilla_description":"CVE-2009-0798 acpid: too many open files DoS","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/AU:N/C:N/I:N/A:P","CWE":null,"affected_packages":["acpid-0:1.0.1-3","acpid-0:1.0.2-4","acpid-0:1.0.4-7.el5_3.1","acpid-0:1.0.3-2.el4_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0798.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adcli-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adcli-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adcli-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adcli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adcli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adcli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adobe-mappings-cmap-deprecated_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adobe-mappings-cmap-deprecated_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adobe-mappings-cmap-deprecated_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adobe-mappings-cmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adobe-mappings-cmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adobe-mappings-cmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adobe-mappings-pdf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adobe-mappings-pdf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adobe-mappings-pdf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-cursor-theme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-cursor-theme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-cursor-theme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-gtk2-theme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-gtk2-theme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-gtk2-theme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-icon-theme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-icon-theme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-icon-theme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-qt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-qt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/adwaita-qt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aide_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aide_security_api_results.json
new file mode 100644
index 0000000..2cebac6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aide_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2007-3849","severity":"moderate","public_date":"2007-09-04T00:00:00Z","advisories":["RHSA-2007:0539"],"bugzilla":"236923","bugzilla_description":"CVE-2007-3849 Rebase aide to 0.13.1","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["aide-0:0.13.1-2.0.4.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3849.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-lib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-lib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-lib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-lib_security_api_results.json
new file mode 100644
index 0000000..ffa1290
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-lib_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2005-0087","severity":"moderate","public_date":"2005-02-15T00:00:00Z","advisories":["RHSA-2005:033"],"bugzilla":"1617449","bugzilla_description":"CVE-2005-0087 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["alsa-lib-0:1.0.6-5.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0087.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-arcamav_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-arcamav_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-arcamav_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-maemo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-maemo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-maemo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-oss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-oss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-oss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-pulseaudio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-pulseaudio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-pulseaudio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-samplerate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-samplerate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-samplerate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-speex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-speex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-speex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-upmix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-upmix_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-upmix_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-usbstream_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-usbstream_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-usbstream_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-vdownmix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-vdownmix_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-plugins-vdownmix_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-tools-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-tools-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-tools-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-ucm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-ucm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-ucm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-utils-alsabat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-utils-alsabat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-utils-alsabat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/alsa-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda_security_api_results.json
new file mode 100644
index 0000000..4c57020
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/amanda_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10730","severity":"low","public_date":"2016-01-15T00:00:00Z","advisories":[],"bugzilla":"1647090","bugzilla_description":"CVE-2016-10730 amanda: Privilege escalation in amstar and amgtar via --*tar-path option","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10730.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2016-10729","severity":"low","public_date":"2016-01-11T00:00:00Z","advisories":[],"bugzilla":"1647084","bugzilla_description":"CVE-2016-10729 amanda: Privilege escalation in runtar via --rsh-command option","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10729.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.2"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-dracut_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-dracut_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-dracut_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-install-env-deps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-install-env-deps_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-install-env-deps_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-tui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-tui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-tui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-user-help_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-user-help_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-user-help_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-widgets_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-widgets_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda-widgets_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda_security_api_results.json
new file mode 100644
index 0000000..de41c58
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/anaconda_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-2314","severity":"low","public_date":"2012-05-04T00:00:00Z","advisories":[],"bugzilla":"819031","bugzilla_description":"CVE-2012-2314 anaconda: Weak permissions by writing password configuration file in bootloader configuration module","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2314.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/annobin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/annobin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/annobin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ansible-freeipa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ansible-freeipa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ansible-freeipa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-antlr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-antlr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-antlr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-bcel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-bcel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-bcel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-bsf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-bsf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-bsf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-log4j_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-log4j_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-log4j_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-oro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-oro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-oro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-regexp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-regexp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-regexp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-resolver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-resolver_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-resolver_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-xalan2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-xalan2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-apache-xalan2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-commons-logging_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-commons-logging_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-commons-logging_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-commons-net_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-commons-net_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-commons-net_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-contrib-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-contrib-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-contrib-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-contrib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-contrib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-contrib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-javamail_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-javamail_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-javamail_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-jdepend_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-jdepend_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-jdepend_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-jmf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-jmf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-jmf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-jsch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-jsch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-jsch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-junit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-junit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-junit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-manual_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-manual_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-manual_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-swing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-swing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-swing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-testutil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-testutil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-testutil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-xz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-xz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant-xz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant_security_api_results.json
new file mode 100644
index 0000000..f717911
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ant_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15250","severity":"low","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1887810","bugzilla_description":"CVE-2020-15250 junit4: TemporaryFolder is shared between all users across system which could result in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15250.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2020-12695","severity":"moderate","public_date":"2020-06-08T00:00:00Z","advisories":[],"bugzilla":"1846006","bugzilla_description":"CVE-2020-12695 hostapd: UPnP SUBSCRIBE misbehavior in WPS AP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-400|CWE-918)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12695.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1945","severity":"moderate","public_date":"2020-05-13T00:00:00Z","advisories":["RHSA-2020:2618"],"bugzilla":"1837444","bugzilla_description":"CVE-2020-1945 ant: insecure temporary file vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1945.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.7"},{"CVE":"CVE-2019-10064","severity":"moderate","public_date":"2020-02-27T00:00:00Z","advisories":[],"bugzilla":"1811069","bugzilla_description":"CVE-2019-10064 hostapd: Not preventig the use of low quality PRNG in EAP mode leads to insufficient entropy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10064.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16275","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":[],"bugzilla":"1767023","bugzilla_description":"CVE-2019-16275 wpa_supplicant: AP mode PMF disconnection protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16275.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-15133","severity":"low","public_date":"2019-08-17T00:00:00Z","advisories":[],"bugzilla":"1771309","bugzilla_description":"CVE-2019-15133 giflib: divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15133.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2019-13377","severity":"moderate","public_date":"2019-08-03T00:00:00Z","advisories":[],"bugzilla":"1737665","bugzilla_description":"CVE-2019-13377 wpa_supplicant: Timing-based side-channel attack against WPA3's Dragonfly handshake when using Brainpool curves","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13377.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-11555","severity":"moderate","public_date":"2019-04-18T00:00:00Z","advisories":[],"bugzilla":"1703417","bugzilla_description":"CVE-2019-11555 wpa_supplicant: NULL pointer dereference due to improper fragmentation reassembly state validation in EAP-pwd implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11555.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-9494","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699141","bugzilla_description":"CVE-2019-9494 wpa_supplicant: SAE Timing-based and Cache-based side-channel attack against WPA3's Dragonfly handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9494.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9495","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699149","bugzilla_description":"CVE-2019-9495 wpa_supplicant: EAP-pwd cache side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9495.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9496","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699153","bugzilla_description":"CVE-2019-9496 hostapd: SAE confirm missing state validation in hostapd/AP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-642","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9496.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9497","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699164","bugzilla_description":"CVE-2019-9497 wpa_supplicant: EAP-pwd server not checking for reflection attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9497.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-9498","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699168","bugzilla_description":"CVE-2019-9498 wpa_supplicant: EAP-pwd server missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9498.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-9499","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699170","bugzilla_description":"CVE-2019-9499 wpa_supplicant: EAP-pwd peer missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9499.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-14526","severity":"moderate","public_date":"2018-08-08T00:00:00Z","advisories":["RHSA-2018:3107"],"bugzilla":"1614520","bugzilla_description":"CVE-2018-14526 wpa_supplicant: Unauthenticated EAPOL-Key decryption in wpa_supplicant","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["wpa_supplicant-1:2.6-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14526.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2018-11489","severity":"low","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1583399","bugzilla_description":"CVE-2018-11489 giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11490","severity":"low","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1583400","bugzilla_description":"CVE-2018-11490 giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13077","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2911","RHSA-2017:2907"],"bugzilla":"1491692","bugzilla_description":"CVE-2017-13077 wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1","wpa_supplicant-1:0.7.3-9.el6_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13077.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13078","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2911","RHSA-2017:2907"],"bugzilla":"1491693","bugzilla_description":"CVE-2017-13078 wpa_supplicant: Reinstallation of the group key in the 4-way handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1","wpa_supplicant-1:0.7.3-9.el6_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13078.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13079","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1491694","bugzilla_description":"CVE-2017-13079 wpa_supplicant: Reinstallation of the integrity group key in the 4-way handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13079.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13080","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2911","RHSA-2017:2907"],"bugzilla":"1491696","bugzilla_description":"CVE-2017-13080 wpa_supplicant: Reinstallation of the group key in the group key handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1","wpa_supplicant-1:0.7.3-9.el6_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13080.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13081","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1491697","bugzilla_description":"CVE-2017-13081 wpa_supplicant: Reinstallation of the integrity group key in the group key handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13081.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13082","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2907"],"bugzilla":"1491698","bugzilla_description":"CVE-2017-13082 wpa_supplicant: Accepting a retransmitted FT Reassociation Request and reinstalling the pairwise key while processing it","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13082.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13084","severity":"low","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1500301","bugzilla_description":"CVE-2017-13084 wpa_supplicant: reinstallation of the STK key in the PeerKey handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13084.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13086","severity":"low","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2907"],"bugzilla":"1500302","bugzilla_description":"CVE-2017-13086 wpa_supplicant: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13086.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13087","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2911","RHSA-2017:2907"],"bugzilla":"1500303","bugzilla_description":"CVE-2017-13087 wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1","wpa_supplicant-1:0.7.3-9.el6_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13087.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13088","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2907"],"bugzilla":"1500304","bugzilla_description":"CVE-2017-13088 wpa_supplicant: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13088.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2016-4476","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1332422","bugzilla_description":"CVE-2016-4476 wpa_supplicant, hostapd: denial of service via crafted WPA/WPA2 passphrase parameter","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4476.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-4477","severity":"moderate","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1332423","bugzilla_description":"CVE-2016-4477 wpa_supplicant: local configuration update allows privilege escalation","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4477.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-3977","severity":"low","public_date":"2016-04-04T00:00:00Z","advisories":[],"bugzilla":"1325771","bugzilla_description":"CVE-2016-3977 giflib: heap buffer overflow in gif2rgb","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3977.json"},{"CVE":"CVE-2016-3177","severity":"low","public_date":"2016-03-15T00:00:00Z","advisories":[],"bugzilla":"1314438","bugzilla_description":"CVE-2016-3177 giflib: Use-after-free in gifcolor utility","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3177.json"},{"CVE":"CVE-2016-10743","severity":"moderate","public_date":"2016-02-19T00:00:00Z","advisories":[],"bugzilla":"1811037","bugzilla_description":"CVE-2016-10743 hostapd: Not preventig the use of low quality PRNG leads to insufficient entropy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10743.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2015-7555","severity":"moderate","public_date":"2015-12-21T00:00:00Z","advisories":[],"bugzilla":"1290785","bugzilla_description":"CVE-2015-7555 giflib: Heap-based buffer overflow in giffix utility","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7555.json"},{"CVE":"CVE-2015-5310","severity":"low","public_date":"2015-11-10T00:00:00Z","advisories":[],"bugzilla":"1277857","bugzilla_description":"CVE-2015-5310 wpa_supplicant: unauthorized WNM Sleep Mode GTK control","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5310.json"},{"CVE":"CVE-2015-5316","severity":"low","public_date":"2015-11-10T00:00:00Z","advisories":[],"bugzilla":"1277865","bugzilla_description":"CVE-2015-5316 wpa_supplicant: EAP-pwd peer error path failure on unexpected Confirm message","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5316.json"},{"CVE":"CVE-2015-5315","severity":"low","public_date":"2015-11-10T00:00:00Z","advisories":[],"bugzilla":"1278377","bugzilla_description":"CVE-2015-5315 wpa_supplicant: EAP-pwd missing last fragment length validation","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5315.json"},{"CVE":"CVE-2015-8041","severity":"low","public_date":"2015-07-08T00:00:00Z","advisories":[],"bugzilla":"1241905","bugzilla_description":"CVE-2015-8041 hostapd and wpa_supplicant: Incomplete WPS and P2P NFC NDEF record payload length validation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190->(CWE-125|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8041.json"},{"CVE":"CVE-2015-4143","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1219449","bugzilla_description":"CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 wpa_supplicant and hostapd: EAP-pwd missing payload length validation","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4143.json"},{"CVE":"CVE-2015-4144","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1219449","bugzilla_description":"CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 wpa_supplicant and hostapd: EAP-pwd missing payload length validation","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4144.json"},{"CVE":"CVE-2015-4145","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1219449","bugzilla_description":"CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 wpa_supplicant and hostapd: EAP-pwd missing payload length validation","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4145.json"},{"CVE":"CVE-2015-4146","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1219449","bugzilla_description":"CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 wpa_supplicant and hostapd: EAP-pwd missing payload length validation","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4146.json"},{"CVE":"CVE-2015-4141","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1221172","bugzilla_description":"CVE-2015-4141 wpa_supplicant and hostapd: WPS UPnP vulnerability with HTTP chunked transfer encoding","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->(CWE-121|CWE-122)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4141.json"},{"CVE":"CVE-2015-4142","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":["RHSA-2015:1439","RHSA-2015:1090"],"bugzilla":"1221178","bugzilla_description":"CVE-2015-4142 wpa_supplicant and hostapd: integer underflow in AP mode WMM Action frame processing","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["wpa_supplicant-1:0.7.3-6.el6","wpa_supplicant-1:2.0-17.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4142.json"},{"CVE":"CVE-2015-1863","severity":"important","public_date":"2015-04-22T00:00:00Z","advisories":["RHSA-2015:1090"],"bugzilla":"1211191","bugzilla_description":"CVE-2015-1863 wpa_supplicant: P2P SSID processing vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-20->CWE-122","affected_packages":["wpa_supplicant-1:2.0-17.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1863.json"},{"CVE":"CVE-2015-0210","severity":null,"public_date":"2015-01-28T00:00:00Z","advisories":[],"bugzilla":"1178921","bugzilla_description":"CVE-2015-0210 wpa_supplicant: broken certificate subject check","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0210.json"},{"CVE":"CVE-2014-3686","severity":"moderate","public_date":"2014-10-10T00:00:00Z","advisories":["RHSA-2014:1956"],"bugzilla":"1151259","bugzilla_description":"CVE-2014-3686 wpa_supplicant and hostapd: wpa_cli and hostapd_cli remote command execution issue","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":["wpa_supplicant-1:2.0-13.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3686.json"},{"CVE":"CVE-2013-6433","severity":"low","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:0516"],"bugzilla":"1039812","bugzilla_description":"CVE-2013-6433 openstack-quantum/openstack-neutron: rootwrap sudo config allows potential privilege escalation","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["openstack-neutron-0:2013.2.3-7.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6433.json"},{"CVE":"CVE-2014-4615","severity":"important","public_date":"2014-05-20T00:00:00Z","advisories":["RHSA-2014:1050"],"bugzilla":"1112945","bugzilla_description":"CVE-2014-4615 pycadf: token leak to message queue","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":["openstack-ceilometer-0:2013.2.3-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4615.json"},{"CVE":"CVE-2014-0056","severity":"moderate","public_date":"2014-03-28T00:00:00Z","advisories":["RHSA-2014:0516"],"bugzilla":"1063141","bugzilla_description":"CVE-2014-0056 openstack-neutron: insufficient authorization checks when creating ports","cvss_score":4.1,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:N","CWE":"CWE-285","affected_packages":["openstack-neutron-0:2013.2.3-7.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0056.json"},{"CVE":"CVE-2013-4509","severity":"low","public_date":"2013-10-25T00:00:00Z","advisories":[],"bugzilla":"1027028","bugzilla_description":"CVE-2013-4509 ibus: visible password entry flaw","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4509.json"},{"CVE":"CVE-2012-5476","severity":"low","public_date":"2012-11-13T00:00:00Z","advisories":[],"bugzilla":"873524","bugzilla_description":"CVE-2012-5476 OpenStack: Quantum /etc/quantum/quantum.conf secret password and token exposure","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5476.json"},{"CVE":"CVE-2012-4445","severity":"moderate","public_date":"2012-10-08T00:00:00Z","advisories":[],"bugzilla":"859918","bugzilla_description":"CVE-2012-4445 hostapd, wpa_supplicant: DoS (abort) by processing certain fragmented EAP-TLS messages","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4445.json"},{"CVE":"CVE-2012-2098","severity":"low","public_date":"2012-05-23T00:00:00Z","advisories":[],"bugzilla":"810406","bugzilla_description":"CVE-2012-2098 apache-commons-compress: denial of service flaw when compressing certain files","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2098.json"},{"CVE":"CVE-2012-1096","severity":"low","public_date":"2012-02-29T00:00:00Z","advisories":[],"bugzilla":"769807","bugzilla_description":"CVE-2012-1096 NetworkManager, wpa_supplicant: Improper x509v3 certificate and key file paths sanitization","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1096.json"},{"CVE":"CVE-2008-2383","severity":"important","public_date":"2008-12-29T00:00:00Z","advisories":["RHSA-2009:0018","RHSA-2009:0019"],"bugzilla":"478888","bugzilla_description":"CVE-2008-2383 xterm: arbitrary command injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["hanterm-xf-1:2.0.5-5.AS21.2","xterm-0:215-5.el5_2.2","xterm-0:179-11.EL3","xterm-0:192-8.el4_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2383.json"},{"CVE":"CVE-2006-7246","severity":"moderate","public_date":"2006-05-10T00:00:00Z","advisories":[],"bugzilla":"756418","bugzilla_description":"CVE-2006-7246 NetworkManager, wpa_supplicant (WPA-Enterprise): Verify that the certificate is from trusted CA and matches the specified subject","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7246.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-C++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-C++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-C++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-manual_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-manual_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-manual_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-tool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-tool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/antlr-tool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aopalliance-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aopalliance-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aopalliance-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aopalliance_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aopalliance_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aopalliance_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-beanutils-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-beanutils-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-beanutils-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-beanutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-beanutils_security_api_results.json
new file mode 100644
index 0000000..cddb46b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-beanutils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-10086","severity":"important","public_date":"2019-08-15T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2321","RHSA-2020:3587","RHSA-2020:2333","RHSA-2020:2740","RHSA-2020:1454","RHSA-2020:0057","RHSA-2019:4317","RHSA-2020:0194","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:0899","RHSA-2020:0811","RHSA-2020:1308","RHSA-2020:0951","RHBA-2020:0496","RHSA-2020:0805","RHSA-2020:0804","RHSA-2020:2619","RHSA-2020:0806","RHSA-2020:3192"],"bugzilla":"1767483","bugzilla_description":"CVE-2019-10086 apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-java-common-apache-commons-beanutils-0:1.8.3-14.14.el6","rh-maven35-apache-commons-beanutils-0:1.9.3-2.3.el7","rh-java-common-apache-commons-beanutils-0:1.8.3-14.15.el7","apache-commons-beanutils-0:1.8.3-15.el7_7","candlepin-0:2.5.22-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-cli-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-cli-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-cli-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-codec-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-codec-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-codec-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-codec_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-codec_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-codec_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-collections-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-collections-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-collections-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-collections-testframework_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-collections-testframework_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-collections-testframework_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-collections_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-collections_security_api_results.json
new file mode 100644
index 0000000..bed35cd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-collections_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-7501","severity":"critical","public_date":"2015-11-06T00:00:00Z","advisories":["RHSA-2016:1773","RHSA-2016:0040","RHSA-2015:2578","RHSA-2015:2534","RHSA-2015:2556","RHSA-2015:2557","RHSA-2015:2579","RHSA-2015:2535","RHSA-2015:2514","RHSA-2015:2536","RHSA-2015:2559","RHSA-2015:2537","RHSA-2015:2538","RHSA-2015:2516","RHSA-2015:2539","RHSA-2015:2517","RHSA-2015:2670","RHSA-2015:2671","RHSA-2020:4274","RHSA-2015:2521","RHSA-2015:2522","RHSA-2015:2500","RHSA-2015:2501","RHSA-2015:2523","RHSA-2015:2502","RHSA-2015:2524","RHSA-2015:2547","RHSA-2015:2548","RHSA-2015:2560","RHSA-2015:2540","RHSA-2015:2541","RHSA-2015:2542","RHSA-2016:0118"],"bugzilla":"1279330","bugzilla_description":"CVE-2015-7501 apache-commons-collections: InvokerTransformer code execution during deserialisation","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502->CWE-284","affected_packages":["jboss-ec2-eap-0:7.5.5-3.Final_redhat_3.ep6.el6","apache-commons-collections-0:3.2.1-22.el7_2","jakarta-commons-collections-0:3.2.1-3.5.el6_7","jenkins-0:1.651.2-1.el6op","rh-maven35-apache-commons-collections4-0:4.0-7.3.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el6","jakarta-commons-collections-0:3.2.1-5.ep5.el4","jakarta-commons-collections-0:3.2.1-5.ep5.el5","jakarta-commons-collections-0:3.2.1-5.ep5.el6","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el7","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el5","jakarta-commons-collections-0:3.2-2jpp.4","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7501.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-compress-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-compress-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-compress-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-compress_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-compress_security_api_results.json
new file mode 100644
index 0000000..22580bb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-compress_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-12402","severity":"important","public_date":"2019-08-27T00:00:00Z","advisories":[],"bugzilla":"1764640","bugzilla_description":"CVE-2019-12402 apache-commons-compress: Infinite loop in name encoding algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12402.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-11771","severity":"moderate","public_date":"2018-08-17T00:00:00Z","advisories":["RHSA-2020:0983"],"bugzilla":"1618573","bugzilla_description":"CVE-2018-11771 apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11771.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1324","severity":"moderate","public_date":"2018-03-16T00:00:00Z","advisories":[],"bugzilla":"1557542","bugzilla_description":"CVE-2018-1324 apache-commons-compress:  Infinite loop via extra field parser in ZipFile and ZipArchiveInputStream classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-exec-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-exec-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-exec-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-exec_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-exec_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-exec_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-io-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-io-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-io-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-io_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-io_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-io_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-jxpath-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-jxpath-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-jxpath-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-jxpath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-jxpath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-jxpath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang3-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang3-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang3-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-lang_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-logging-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-logging-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-logging-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-logging_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-logging_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-logging_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-net-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-net-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-net-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-net_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-net_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-net_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-commons-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-ivy-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-ivy-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-ivy-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-ivy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-ivy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-ivy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-resource-bundles_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-resource-bundles_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apache-resource-bundles_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apcu-panel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apcu-panel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apcu-panel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/appstream-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/appstream-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/appstream-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-bdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-bdb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-bdb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-ldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-ldap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-ldap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-odbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-odbc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-odbc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-openssl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-openssl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-openssl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-pgsql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-pgsql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-pgsql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-sqlite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-sqlite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util-sqlite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util_security_api_results.json
new file mode 100644
index 0000000..e17a170
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr-util_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-12618","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":[],"bugzilla":"1506532","bugzilla_description":"CVE-2017-12618 apr-util: Out-of-bounds access in corrupted SDBM database","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12618.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6312","severity":"moderate","public_date":"2016-08-04T00:00:00Z","advisories":[],"bugzilla":"1364122","bugzilla_description":"CVE-2016-6312 apr-util, httpd: Billion laughs attack regression","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6312.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2010-1623","severity":"moderate","public_date":"2010-10-01T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2010:0950","RHSA-2011:0897"],"bugzilla":"640281","bugzilla_description":"CVE-2010-1623 apr-util: high memory consumption in apr_brigade_split_line()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["apr-util-0:1.3.9-3.el6_0.1","httpd22-0:2.2.17-14.ep5.el4","apr-util-0:0.9.4-22.el4_8.3","apr-util-0:1.2.7-11.el5_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1623.json"},{"CVE":"CVE-2009-0023","severity":"moderate","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107","RHSA-2009:1160"],"bugzilla":"503928","bugzilla_description":"CVE-2009-0023 apr-util heap buffer underwrite","cvss_score":4.3,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0023.json"},{"CVE":"CVE-2009-1955","severity":"moderate","public_date":"2009-06-01T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107","RHSA-2009:1160"],"bugzilla":"504555","bugzilla_description":"CVE-2009-1955 apr-util billion laughs attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1955.json"},{"CVE":"CVE-2009-1956","severity":"moderate","public_date":"2009-04-24T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107"],"bugzilla":"504390","bugzilla_description":"CVE-2009-1956 apr-util single NULL byte buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1956.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr_security_api_results.json
new file mode 100644
index 0000000..bd38de6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/apr_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-11100","severity":"critical","public_date":"2020-04-02T13:00:00Z","advisories":["RHSA-2020:1288","RHSA-2020:1287","RHSA-2020:1289","RHSA-2020:1936","RHSA-2020:1290"],"bugzilla":"1819111","bugzilla_description":"CVE-2020-11100 haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-787","affected_packages":["haproxy-0:1.8.23-3.el7","rh-haproxy18-haproxy-0:1.8.17-1.el7.1","haproxy-0:2.0.13-3.el8","haproxy-0:1.8.15-5.el8_0.1","haproxy-0:1.8.15-6.el8_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11100.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-19330","severity":"moderate","public_date":"2019-11-25T00:00:00Z","advisories":["RHSA-2020:1287","RHSA-2020:2265","RHSA-2020:1936","RHSA-2020:1725"],"bugzilla":"1777584","bugzilla_description":"CVE-2019-19330 haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["haproxy-0:1.8.23-3.el7","haproxy-0:1.8.23-3.el8","haproxy-0:2.0.13-3.el8","rh-haproxy18-haproxy-0:1.8.24-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19330.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-18277","severity":"moderate","public_date":"2019-09-13T00:00:00Z","advisories":["RHSA-2020:1287","RHSA-2020:2265","RHSA-2020:1936","RHSA-2020:1725"],"bugzilla":"1759697","bugzilla_description":"CVE-2019-18277 haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["haproxy-0:1.8.23-3.el7","haproxy-0:1.8.23-3.el8","haproxy-0:2.0.13-3.el8","rh-haproxy18-haproxy-0:1.8.24-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18277.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-14241","severity":"important","public_date":"2019-07-22T00:00:00Z","advisories":[],"bugzilla":"1733583","bugzilla_description":"CVE-2019-14241 haproxy: DoS via vectors realted to htx_manage_client_side_cookies in proto_htx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14241.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11323","severity":"moderate","public_date":"2019-04-14T00:00:00Z","advisories":[],"bugzilla":"1709229","bugzilla_description":"CVE-2019-11323 haproxy: weak HMAC keys used to TLS session resumption after reload with rotated keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-20615","severity":"important","public_date":"2019-01-08T00:00:00Z","advisories":["RHSA-2019:0275","RHSA-2019:0547","RHSA-2019:0548","RHBA-2019:0326"],"bugzilla":"1663060","bugzilla_description":"CVE-2018-20615 haproxy: Mishandling of priority flag in short HEADERS frame by HTTP/2 decoder allows for crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["haproxy-0:1.8.17-3.el7","rh-haproxy18-haproxy-0:1.8.4-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20102","severity":"moderate","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2019:0547","RHSA-2019:1436","RHBA-2019:0326"],"bugzilla":"1658874","bugzilla_description":"CVE-2018-20102 haproxy: Out-of-bounds read in dns.c:dns_validate_dns_response() allows for memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["haproxy-0:1.8.17-3.el7","rh-haproxy18-haproxy-0:1.8.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-20103","severity":"important","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2019:1436","RHBA-2019:0326"],"bugzilla":"1658876","bugzilla_description":"CVE-2018-20103 haproxy: Infinite recursion via crafted packet allows stack exhaustion and denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["haproxy-0:1.8.17-3.el7","rh-haproxy18-haproxy-0:1.8.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20103.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14645","severity":"important","public_date":"2018-09-20T12:00:00Z","advisories":["RHSA-2018:2882","RHSA-2018:2709","RHBA-2019:0028"],"bugzilla":"1630048","bugzilla_description":"CVE-2018-14645 haproxy: Out-of-bounds read in HPACK decoder","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-haproxy18-haproxy-0:1.8.4-3.el7","haproxy-0:1.8.14-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-11469","severity":"moderate","public_date":"2018-05-25T00:00:00Z","advisories":["RHSA-2019:1436"],"bugzilla":"1582635","bugzilla_description":"CVE-2018-11469 haproxy: Information disclosure in check_request_for_cacheability function in proto_http.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-haproxy18-haproxy-0:1.8.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11469.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-10184","severity":"important","public_date":"2018-04-19T00:00:00Z","advisories":["RHSA-2018:1372"],"bugzilla":"1569297","bugzilla_description":"CVE-2018-10184 haproxy: Heap buffer overflow in mux_h2.c:h2_process_demux() can allow attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-haproxy18-haproxy-0:1.8.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10184.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2017-12613","severity":"important","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2018:0316","RHSA-2017:3270","RHSA-2018:0465","RHSA-2017:3475","RHSA-2018:0466","RHSA-2018:1253","RHSA-2017:3476","RHSA-2017:3477"],"bugzilla":"1506523","bugzilla_description":"CVE-2017-12613 apr: Out-of-bounds array deref in apr_time_exp*() functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["apr-0:1.4.8-3.el7_3.1","apr-0:1.4.8-3.el7_2.1","apr-0:1.3.9-5.el6_6.1","apr-0:1.4.8-3.el7_4.1","apr-0:1.3.9-5.el6_7.1","apr-0:1.3.9-5.el6_5.1","httpd24-apr-0:1.5.1-1.el6.1","apr-0:1.3.9-5.el6_9.1","apr-0:1.3.9-5.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12613.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2017-12618","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":[],"bugzilla":"1506532","bugzilla_description":"CVE-2017-12618 apr-util: Out-of-bounds access in corrupted SDBM database","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12618.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6312","severity":"moderate","public_date":"2016-08-04T00:00:00Z","advisories":[],"bugzilla":"1364122","bugzilla_description":"CVE-2016-6312 apr-util, httpd: Billion laughs attack regression","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6312.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5360","severity":"moderate","public_date":"2016-06-09T00:00:00Z","advisories":[],"bugzilla":"1346181","bugzilla_description":"CVE-2016-5360 haproxy: denial of service via reqdeny","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5360.json"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2016-3711","severity":"low","public_date":"2016-03-17T00:00:00Z","advisories":["RHSA-2016:1064"],"bugzilla":"1322718","bugzilla_description":"CVE-2016-3711 haproxy: Setting cookie containing internal IP address of a pod","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3711.json"},{"CVE":"CVE-2015-3281","severity":"important","public_date":"2015-07-07T00:00:00Z","advisories":["RHSA-2015:1741","RHSA-2015:2666"],"bugzilla":"1239072","bugzilla_description":"CVE-2015-3281 haproxy: information leak in buffer_slow_realign()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-119","affected_packages":["haproxy-0:1.5.4-4.el7_1.1","haproxy-0:1.5.4-2.el6_7.1","haproxy15side-0:1.5.4-2.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3281.json"},{"CVE":"CVE-2013-0163","severity":"low","public_date":"2014-09-05T00:00:00Z","advisories":[],"bugzilla":"892909","bugzilla_description":"CVE-2013-0163 OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0163.json"},{"CVE":"CVE-2014-6269","severity":"moderate","public_date":"2014-08-05T00:00:00Z","advisories":["RHSA-2014:1292"],"bugzilla":"1136552","bugzilla_description":"CVE-2014-6269 haproxy: remote client denial of service vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["haproxy-0:1.5.2-3.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6269.json"},{"CVE":"CVE-2013-2175","severity":"moderate","public_date":"2013-06-17T00:00:00Z","advisories":["RHSA-2013:1120","RHSA-2013:1204"],"bugzilla":"974259","bugzilla_description":"CVE-2013-2175 haproxy: http_get_hdr()/get_ip_from_hdr2() MAX_HDR_HISTORY handling denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["haproxy-0:1.4.22-5.el6_4","haproxy-0:1.4.22-6.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2175.json"},{"CVE":"CVE-2013-1912","severity":"moderate","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0729","RHSA-2013:0868"],"bugzilla":"947581","bugzilla_description":"CVE-2013-1912 haproxy: rewrite rules flaw can lead to arbitrary code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["haproxy-0:1.4.22-5.el6op","haproxy-0:1.4.22-4.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1912.json"},{"CVE":"CVE-2013-0169","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0636","RHSA-2013:0823","RHSA-2013:0833","RHSA-2013:0855","RHSA-2013:0822","RHSA-2013:0587","RHSA-2013:0532","RHSA-2013:1456","RHSA-2014:0416","RHSA-2013:0782","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"907589","bugzilla_description":"CVE-2013-0169 SSL/TLS: CBC padding timing attack (lucky-13)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3","spice-client-msi-0:3.3-12","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el5_9","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0169.json"},{"CVE":"CVE-2012-0840","severity":"moderate","public_date":"2012-01-05T00:00:00Z","advisories":[],"bugzilla":"781606","bugzilla_description":"CVE-2012-0840 apr: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0840.json"},{"CVE":"CVE-2011-1928","severity":"low","public_date":"2011-05-19T00:00:00Z","advisories":["RHSA-2011:0844"],"bugzilla":"706203","bugzilla_description":"CVE-2011-1928 apr: DoS flaw in apr_fnmatch() due to fix for CVE-2011-0419","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["apr-0:1.3.9-3.el6_1.2","apr-0:0.9.4-26.el4","apr-0:1.2.7-11.el5_6.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1928.json"},{"CVE":"CVE-2011-0419","severity":"moderate","public_date":"2011-05-10T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2011:0507","RHSA-2011:0897"],"bugzilla":"703390","bugzilla_description":"CVE-2011-0419 apr: unconstrained recursion in apr_fnmatch","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["apr-0:1.2.7-11.el5_6.4","apr-0:0.9.4-25.el4","apr-0:1.3.9-3.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0419.json"},{"CVE":"CVE-2010-1623","severity":"moderate","public_date":"2010-10-01T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2010:0950","RHSA-2011:0897"],"bugzilla":"640281","bugzilla_description":"CVE-2010-1623 apr-util: high memory consumption in apr_brigade_split_line()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["apr-util-0:1.3.9-3.el6_0.1","httpd22-0:2.2.17-14.ep5.el4","apr-util-0:0.9.4-22.el4_8.3","apr-util-0:1.2.7-11.el5_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1623.json"},{"CVE":"CVE-2009-0023","severity":"moderate","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107","RHSA-2009:1160"],"bugzilla":"503928","bugzilla_description":"CVE-2009-0023 apr-util heap buffer underwrite","cvss_score":4.3,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0023.json"},{"CVE":"CVE-2009-1955","severity":"moderate","public_date":"2009-06-01T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107","RHSA-2009:1160"],"bugzilla":"504555","bugzilla_description":"CVE-2009-1955 apr-util billion laughs attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1955.json"},{"CVE":"CVE-2009-1956","severity":"moderate","public_date":"2009-04-24T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107"],"bugzilla":"504390","bugzilla_description":"CVE-2009-1956 apr-util single NULL byte buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1956.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aqute-bnd-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aqute-bnd-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aqute-bnd-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aqute-bnd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aqute-bnd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aqute-bnd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aqute-bndlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aqute-bndlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aqute-bndlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/arpwatch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/arpwatch_security_api_results.json
new file mode 100644
index 0000000..7435537
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/arpwatch_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-2653","severity":"moderate","public_date":"2012-05-24T00:00:00Z","advisories":[],"bugzilla":"825328","bugzilla_description":"CVE-2012-2653 arpwatch: fails to drop supplementary groups","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2653.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/asciidoc-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/asciidoc-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/asciidoc-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/asciidoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/asciidoc_security_api_results.json
new file mode 100644
index 0000000..b7c4329
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/asciidoc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-18385","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":[],"bugzilla":"1640723","bugzilla_description":"CVE-2018-18385 rubygem-asciidoctor: Infinite loop in the #next_block method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18385.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspell-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspell-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspell-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspell-en_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspell-en_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspell-en_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspell_security_api_results.json
new file mode 100644
index 0000000..8681742
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspell_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-20433","severity":"moderate","public_date":"2019-08-17T00:00:00Z","advisories":[],"bugzilla":"1764299","bugzilla_description":"CVE-2019-20433 aspell: UCS-2 and UCS-4 null-terminated string handling OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-170->CWE-135->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20433.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2019-17544","severity":"low","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1765752","bugzilla_description":"CVE-2019-17544 aspell: stack-based buffer over-read in acommon::unescape in common/getdata.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17544.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.6"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-runtime-3.0_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-runtime-3.0_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-runtime-3.0_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-runtime-3.1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-runtime-3.1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-runtime-3.1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-targeting-pack-3.0_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-targeting-pack-3.0_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-targeting-pack-3.0_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-targeting-pack-3.1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-targeting-pack-3.1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/aspnetcore-targeting-pack-3.1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/assertj-core-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/assertj-core-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/assertj-core-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/assertj-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/assertj-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/assertj-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-atk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-atk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-atk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-atk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-atk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-atk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-core-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-core-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-core-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at-spi2-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at_security_api_results.json
new file mode 100644
index 0000000..70dddac
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/at_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15157","severity":"moderate","public_date":"2020-10-15T00:00:00Z","advisories":[],"bugzilla":"1888248","bugzilla_description":"CVE-2020-15157 containerd: credentials leak during image pull","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15157.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-8563","severity":"moderate","public_date":"2020-10-14T00:00:00Z","advisories":[],"bugzilla":"1886635","bugzilla_description":"CVE-2020-8563 kubernetes: Secret leaks in kube-controller-manager when using vSphere Provider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8563.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2020-8564","severity":"moderate","public_date":"2020-10-14T00:00:00Z","advisories":[],"bugzilla":"1886637","bugzilla_description":"CVE-2020-8564 kubernetes: Docker config secrets leaked when file is malformed and loglevel >= 4","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8564.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-8565","severity":"moderate","public_date":"2020-10-14T00:00:00Z","advisories":[],"bugzilla":"1886638","bugzilla_description":"CVE-2020-8565 kubernetes: Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8565.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-8566","severity":"moderate","public_date":"2020-10-14T00:00:00Z","advisories":[],"bugzilla":"1886640","bugzilla_description":"CVE-2020-8566 kubernetes: Ceph RBD adminSecrets exposed in logs when loglevel >= 4","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8566.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-13943","severity":"moderate","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1887648","bugzilla_description":"CVE-2020-13943 tomcat: Apache Tomcat HTTP/2 Request mix-up","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13943.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-26945","severity":"moderate","public_date":"2020-10-10T00:00:00Z","advisories":[],"bugzilla":"1887257","bugzilla_description":"CVE-2020-26945 mybatis: mishandles deserialization of object streams which could result in remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26945.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-8264","severity":"important","public_date":"2020-10-07T00:00:00Z","advisories":[],"bugzilla":"1886554","bugzilla_description":"CVE-2020-8264 rubygem-actionpack: possible XSS vulnerability in Action Pack in development mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8264.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"7.7"},{"CVE":"CVE-2020-7743","severity":"moderate","public_date":"2020-10-07T00:00:00Z","advisories":[],"bugzilla":"1887999","bugzilla_description":"CVE-2020-7743 mathjs: prototype pollution via the deepExtend function that runs upon configuration updates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7743.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-10763","severity":"moderate","public_date":"2020-09-30T00:00:00Z","advisories":["RHSA-2020:4143"],"bugzilla":"1845387","bugzilla_description":"CVE-2020-10763 heketi: gluster-block volume password details available in logs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["heketi-0:9.0.0-9.5.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10763.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-25644","severity":"important","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4257","RHSA-2020:4256"],"bugzilla":"1885485","bugzilla_description":"CVE-2020-25644 wildfly-openssl: memory leak per HTTP session creation in WildFly OpenSSL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el8eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el6eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el7eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25644.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24750","severity":"important","public_date":"2020-09-18T00:00:00Z","advisories":["RHSA-2020:4173"],"bugzilla":"1882310","bugzilla_description":"CVE-2020-24750 jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-26160","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1883371","bugzilla_description":"CVE-2020-26160 jwt-go: access restriction bypass vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26160.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-1968","severity":"low","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877458","bugzilla_description":"CVE-2020-1968 openssl: Information exposure when DH secret are reused across multiple TLS connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-15169","severity":"moderate","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877566","bugzilla_description":"CVE-2020-15169 rubygem-activeview: Cross-site scripting in translation helpers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15169.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-14384","severity":"important","public_date":"2020-09-03T00:00:00Z","advisories":["RHSA-2020:3731","RHSA-2020:3730"],"bugzilla":"1875176","bugzilla_description":"CVE-2020-14384 jbossweb: Incomplete fix of CVE-2020-13935 for WebSocket in JBossWeb could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jbossweb-0:7.5.31-3.Final_redhat_3.1.ep6.el7","jbossweb-0:7.5.31-3.Final_redhat_3.1.ep6.el5","jbossweb-0:7.5.31-3.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14384.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14380","severity":"important","public_date":"2020-08-31T02:44:00Z","advisories":[],"bugzilla":"1873926","bugzilla_description":"CVE-2020-14380 Satellite: Local user impersonation by Single sign-on (SSO) user leads to account takeover","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14380.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24616","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872707","bugzilla_description":"CVE-2020-24616 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24616.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14364","severity":"important","public_date":"2020-08-24T12:00:00Z","advisories":["RHSA-2020:4049","RHSA-2020:4115","RHSA-2020:4048","RHSA-2020:4059","RHSA-2020:4047","RHSA-2020:4058","RHSA-2020:4079","RHSA-2020:4167","RHSA-2020:4056","RHSA-2020:4078","RHSA-2020:4111","RHSA-2020:4055","RHSA-2020:4176","RHSA-2020:4054","RHSA-2020:4053","RHSA-2020:4052","RHSA-2020:4162","RHSA-2020:4051","RHSA-2020:4172","RHSA-2020:4050","RHSA-2020:4291","RHSA-2020:4290"],"bugzilla":"1869201","bugzilla_description":"CVE-2020-14364 QEMU: usb: out-of-bounds r/w access issue while processing usb packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["qemu-kvm-10:1.5.3-105.el7_2.20","qemu-kvm-rhev-10:2.12.0-33.el7_7.12","qemu-kvm-10:1.5.3-175.el7_9.1","qemu-kvm-10:1.5.3-160.el7_6.8","qemu-kvm-10:1.5.3-141.el7_4.11","qemu-kvm-ma-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-18.el7_6.12","qemu-kvm-2:0.12.1.2-2.448.el6_6.9","virt:rhel-8000020200910175113.f8e95b4e","qemu-kvm-ma-10:2.12.0-18.el7_6.7","qemu-kvm-10:1.5.3-167.el7_7.7","qemu-kvm-2:0.12.1.2-2.506.el6_10.8","qemu-kvm-2:0.12.1.2-2.415.el6_5.21","qemu-kvm-ma-10:2.12.0-48.el7_9.1","virt:rhel-8020020200909224913.4cda2c84","qemu-kvm-rhev-10:2.12.0-48.el7_9.1","qemu-kvm-10:1.5.3-126.el7_3.18","redhat-virtualization-host-0:4.4.2-20200930.0.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14364.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-10758","severity":"important","public_date":"2020-08-18T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3496","RHSA-2020:3497","RHSA-2020:3495","RHSA-2020:3539"],"bugzilla":"1843849","bugzilla_description":"CVE-2020-10758 keycloak: DoS by sending multiple simultaneous requests with a Content-Length header value greater than actual byte count of request body","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el6sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el7sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10758.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14352","severity":"important","public_date":"2020-08-13T00:00:00Z","advisories":["RHSA-2020:3749","RHBA-2020:3609","RHSA-2020:3658","RHSA-2020:3756"],"bugzilla":"1866498","bugzilla_description":"CVE-2020-14352 librepo: missing path validation in repomd.xml may lead to directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["librepo-0:1.9.2-2.el8_0","librepo-0:1.10.3-4.el8_1","redhat-coreos-43.82.202009181853.0","librepo-0:1.11.0-3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14352.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2020-8911","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869800","bugzilla_description":"CVE-2020-8911 aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8911.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2020-8912","severity":"low","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869801","bugzilla_description":"CVE-2020-8912 aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8912.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-1710","severity":"important","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3461","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3539","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:3637"],"bugzilla":"1793970","bugzilla_description":"CVE-2020-1710 EAP: field-name is not parsed in accordance to RFC7230","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-74->CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1710.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-16117","severity":"low","public_date":"2020-07-30T00:00:00Z","advisories":[],"bugzilla":"1862125","bugzilla_description":"CVE-2020-16117 evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16117.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-10713","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:4115","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3273","RHSA-2020:3271","RHSA-2020:4172","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1825243","bugzilla_description":"CVE-2020-10713 grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787->CWE-78","affected_packages":["grub2-1:2.02-0.86.el7_8","fwupd-0:1.1.4-7.el8_2","fwupdate-0:12-6.el7_8","grub2-1:2.02-87.el8_2","shim-0:15-14.el8_2","shim-0:15-7.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10713.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-14334","severity":"important","public_date":"2020-07-28T13:30:00Z","advisories":["RHSA-2020:4127"],"bugzilla":"1858284","bugzilla_description":"CVE-2020-14334 foreman: unauthorized cache read on RPM-based installations through local user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["foreman-0:1.24.1.28-3.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14334.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10731","severity":"important","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3410","RHSA-2020:3199","RHSA-2020:3406"],"bugzilla":"1831544","bugzilla_description":"CVE-2020-10731 openstack-tripleo-heat-templates: No sVirt protection for OSP16 VMs due to disabled SELinux","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284->CWE-1220","affected_packages":["openstack-tripleo-heat-templates-0:11.3.2-0.20200405044628.ec9970c.el8ost","openstack-tripleo-heat-templates-0:10.6.3-0.20200113185561.cf467ea.el8ost","openstack-tripleo-heat-templates-0:11.3.2-0.20200616081532.396affd.el8ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10731.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.9"},{"CVE":"CVE-2020-10715","severity":"low","public_date":"2020-07-27T00:00:00Z","advisories":["RHSA-2020:2992"],"bugzilla":"1767665","bugzilla_description":"CVE-2020-10715 openshift/console: text injection on error page via crafted url","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-web-console-0:3.11.248-1.git.1.cc96c2d.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10715.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-8557","severity":"moderate","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3520","RHSA-2020:3809","RHSA-2020:3808","RHSA-2020:3580","RHSA-2020:3519","RHSA-2020:3579"],"bugzilla":"1835977","bugzilla_description":"CVE-2020-8557 kubernetes: Node disk DOS by writing to container /etc/hosts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.3.37-202009120213.p0.git.0.dffefe4.el8","openshift4/ose-hyperkube:v4.4.0-202008250319.p0","openshift4/ose-hyperkube:v4.3.37-202009151447.p0","openshift4/ose-hyperkube:v4.5.0-202008130146.p0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8557.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-8559","severity":"moderate","public_date":"2020-07-15T00:00:00Z","advisories":[],"bugzilla":"1851422","bugzilla_description":"CVE-2020-8559 kubernetes: compromised node could escalate to cluster level privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-13935","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3303","RHSA-2020:4004","RHSA-2020:3382","RHSA-2020:3383","RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306","RHSA-2020:3305"],"bugzilla":"1857024","bugzilla_description":"CVE-2020-13935 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","tomcat-0:7.0.76-15.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el6","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-13934","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306"],"bugzilla":"1857040","bugzilla_description":"CVE-2020-13934 tomcat: OutOfMemoryException caused by HTTP/2 connection leak could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13934.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-14336","severity":"low","public_date":"2020-07-13T00:00:00Z","advisories":[],"bugzilla":"1858981","bugzilla_description":"CVE-2020-14336 openshift: restricted SCC allows pods to craft custom network packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14336.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2020-8558","severity":"moderate","public_date":"2020-07-08T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:2992","RHSA-2020:2927","RHSA-2020:3184","RHSA-2020:2926","RHSA-2020:3183","RHSA-2020:2413"],"bugzilla":"1843358","bugzilla_description":"CVE-2020-8558 kubernetes: node localhost services reachable via martian packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","atomic-openshift-0:3.11.248-1.git.0.92ee8ac.el7","openshift4/ose-hyperkube:v4.4.0-202007120152.p0","openshift4/ose-console:v4.5.0-202007012112.p0","openshift4/ose-hyperkube:v4.3.31-202007272153.p0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8558.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-14313","severity":"moderate","public_date":"2020-07-06T00:00:00Z","advisories":["RHSA-2020:3525"],"bugzilla":"1853026","bugzilla_description":"CVE-2020-14313 quay: build triggers can disclose robot account names and existence of private repos within namespaces","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["quay/quay-rhel8-operator:v3.3.1-4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14313.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-14928","severity":"low","public_date":"2020-07-04T00:00:00Z","advisories":[],"bugzilla":"1857470","bugzilla_description":"CVE-2020-14928 evolution-data-server: Response Injection via STARTTLS in SMTP and POP3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14928.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14306","severity":"important","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:2795"],"bugzilla":"1850380","bugzilla_description":"CVE-2020-14306 openshift-service-mesh/istio-rhel8-operator: control plane can deploy gateway image to any namespace","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["servicemesh-operator-0:1.1.4-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14306.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-8022","severity":"moderate","public_date":"2020-06-29T00:00:00Z","advisories":[],"bugzilla":"1852863","bugzilla_description":"CVE-2020-8022 tomcat: /usr/lib/tmpfiles.d/tomcat.conf is group-writable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8022.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2020-11996","severity":"moderate","public_date":"2020-06-25T00:00:00Z","advisories":[],"bugzilla":"1851420","bugzilla_description":"CVE-2020-11996 tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11996.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14316","severity":"important","public_date":"2020-06-23T00:00:00Z","advisories":["RHSA-2020:3194"],"bugzilla":"1848951","bugzilla_description":"CVE-2020-14316 kubevirt: VMIs can be used to access host files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.0-71","container-native-virtualization/virt-api:v2.4.0-58"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14316.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.9"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17566","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1848617","bugzilla_description":"CVE-2019-17566 batik: SSRF via \"xlink:href\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17566.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-8184","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1849141","bugzilla_description":"CVE-2020-8184 rubygem-rack: percent-encoded cookies can be used to overwrite existing prefixed cookie names","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-807","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8184.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-15780","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3218","RHSA-2020:3219","RHSA-2020:3228"],"bugzilla":"1852962","bugzilla_description":"CVE-2020-15780 kernel: lockdown: bypass through ACPI write via acpi_configfs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-193.14.3.rt13.67.el8_2","kernel-0:4.18.0-80.27.2.el8_0","kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.14.3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15780.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-14195","severity":"important","public_date":"2020-06-14T00:00:00Z","advisories":["RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848958","bugzilla_description":"CVE-2020-14195 jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14195.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10752","severity":"moderate","public_date":"2020-06-10T00:00:00Z","advisories":[],"bugzilla":"1839942","bugzilla_description":"CVE-2020-10752 openshift/openshift-apiserver: oauthtokens leaked to logs on panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10752.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-5411","severity":"important","public_date":"2020-06-10T00:00:00Z","advisories":[],"bugzilla":"1862601","bugzilla_description":"CVE-2020-5411 spring-batch-core: Jackson configuration allows code execution with unknown serialization gadgets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5411.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-0543","severity":"moderate","public_date":"2020-06-09T17:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1827165","bugzilla_description":"CVE-2020-0543 hw: Special Register Buffer Data Sampling (SRBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0543.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-10766","severity":"important","public_date":"2020-06-09T17:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845840","bugzilla_description":"CVE-2020-10766 kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10766.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10767","severity":"important","public_date":"2020-06-09T14:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845867","bugzilla_description":"CVE-2020-10767 kernel: Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10767.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10768","severity":"important","public_date":"2020-06-09T14:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845868","bugzilla_description":"CVE-2020-10768 kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10768.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-7921","severity":"moderate","public_date":"2020-06-05T00:00:00Z","advisories":[],"bugzilla":"1848563","bugzilla_description":"CVE-2020-7921 mongodb: Improper serialization permits bypass of IP based authentication restrictions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7921.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-10757","severity":"important","public_date":"2020-06-04T09:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHBA-2020:3180","RHSA-2020:3598","RHSA-2020:3221","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:3041"],"bugzilla":"1842525","bugzilla_description":"CVE-2020-10757 kernel: kernel: DAX hugepages not considered during mremap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-1062.33.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10757.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-12049","severity":"important","public_date":"2020-06-04T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3014","RHSA-2020:2894","RHSA-2020:3298","RHSA-2020:3044"],"bugzilla":"1849041","bugzilla_description":"CVE-2020-12049 dbus: denial of service via file descriptor leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-43.82.202007300301.0","dbus-1:1.12.8-10.el8_2","dbus-1:1.12.8-10.el8_1","dbus-1:1.10.24-14.el7_8","dbus-1:1.12.8-8.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12049.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-13777","severity":"important","public_date":"2020-06-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2639","RHSA-2020:2637","RHSA-2020:2638"],"bugzilla":"1843723","bugzilla_description":"CVE-2020-13777 gnutls: session resumption works without master key allowing MITM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["gnutls-0:3.6.8-9.el8_1","redhat-coreos-43.82.202007300301.0","gnutls-0:3.6.5-3.el8_0","gnutls-0:3.6.8-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13777.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-8555","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":["RHSA-2020:2594","RHSA-2020:2440","RHSA-2020:2441","RHSA-2020:2448","RHSA-2020:2449","RHSA-2020:2479"],"bugzilla":"1821583","bugzilla_description":"CVE-2020-8555 kubernetes: Server side request forgery (SSRF) in kube-controller-manager allows users to leak secret information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openshift4/ose-hyperkube:v4.3.25-202006081335","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift4/ose-hyperkube:v4.4.0-202006080610","openshift-0:4.3.25-202006060952.git.1.96c30f6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8555.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2020-10749","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:2684","RHSA-2020:2443","RHSA-2020:2592","RHSA-2020:3194","RHSA-2020:2403"],"bugzilla":"1833220","bugzilla_description":"CVE-2020-10749 containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["openshift4/ose-multus-cni:v4.5.0-202007012112.p0","containernetworking-plugins-0:0.8.3-3.el7_8","containernetworking-plugins-0:0.8.6-1.rhaos4.3.el7","openshift4/ose-container-networking-plugins-rhel7:v4.5.0-202007012112.p0","container-native-virtualization/kubevirt-ssp-operator:v2.4.0-71","container-native-virtualization/virt-api:v2.4.0-58"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10749.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.0"},{"CVE":"CVE-2020-10754","severity":"moderate","public_date":"2020-05-29T04:41:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4003","RHSA-2020:3011"],"bugzilla":"1841041","bugzilla_description":"CVE-2020-10754 NetworkManager: user configuration not honoured leaving the connection unauthenticated via insecure defaults","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287->CWE-306","affected_packages":["NetworkManager-1:1.18.8-1.el7","redhat-coreos-43.82.202007300301.0","NetworkManager-1:1.22.8-5.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10754.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-9484","severity":"important","public_date":"2020-05-20T00:00:00Z","advisories":["RHSA-2020:3017","RHSA-2020:2530","RHSA-2020:2487","RHSA-2020:2509","RHSA-2020:2483","RHSA-2020:2529","RHSA-2020:2506"],"bugzilla":"1838332","bugzilla_description":"CVE-2020-9484 tomcat: deserialization flaw in session persistence storage leading to RCE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["tomcat-0:7.0.76-12.el7_8","tomcat6-0:6.0.24-115.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9484.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-14060","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848960","bugzilla_description":"CVE-2020-14060 jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14060.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14062","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848962","bugzilla_description":"CVE-2020-14062 jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14062.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14061","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848966","bugzilla_description":"CVE-2020-14061 jackson-databind: serialization in weblogic/oracle-aqjms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14061.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-10722","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:4114","RHSA-2020:2297","RHSA-2020:2298","RHSA-2020:2683","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828867","bugzilla_description":"CVE-2020-10722 dpdk: librte_vhost Integer overflow in vhost_user_set_log_base()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["dpdk-0:18.11.8-1.el7_8","openvswitch-0:2.9.0-130.el7fdp","openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10722.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10723","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:4114","RHSA-2020:2297","RHSA-2020:2298","RHSA-2020:2683","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828874","bugzilla_description":"CVE-2020-10723 dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["dpdk-0:18.11.8-1.el7_8","openvswitch-0:2.9.0-130.el7fdp","openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10723.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10724","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2297","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828884","bugzilla_description":"CVE-2020-10724 dpdk: librte_vhost Missing inputs validation in Vhost-crypto","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10724.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2020-10725","severity":"important","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2295","RHBA-2020:2409"],"bugzilla":"1828894","bugzilla_description":"CVE-2020-10725 dpdk: librte_vhost Malicious guest could cause segfault by sending invalid Virtio descriptor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["redhat-coreos-45.82.202007062333-0","openvswitch2.13-0:2.13.0-25.el8fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10725.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2020-10726","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2295","RHBA-2020:2409"],"bugzilla":"1828898","bugzilla_description":"CVE-2020-10726 dpdk: librte_vhost VHOST_USER_GET_INFLIGHT_FD message flooding to result in a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-45.82.202007062333-0","openvswitch2.13-0:2.13.0-25.el8fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10726.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-8164","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1842634","bugzilla_description":"CVE-2020-8164 rubygem-actionpack: possible strong parameters bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8164.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-8165","severity":"important","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1843072","bugzilla_description":"CVE-2020-8165 rubygem-activesupport: potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8165.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-8167","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1843084","bugzilla_description":"CVE-2020-8167 rubygem-actionview: CSRF vulnerability in rails-ujs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8167.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-8166","severity":"low","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1843152","bugzilla_description":"CVE-2020-8166 rubygem-actionpack: ability to forge per-form CSRF tokens given a global CSRF token","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8166.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-8163","severity":"important","public_date":"2020-05-15T00:00:00Z","advisories":[],"bugzilla":"1848724","bugzilla_description":"CVE-2020-8163 rubygem-rails: potential remote code execution of user-provided local names","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8163.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12888","severity":"important","public_date":"2020-05-14T00:00:00Z","advisories":["RHSA-2020:2664","RHSA-2020:2851","RHSA-2020:3016","RHSA-2020:2665","RHSA-2020:3222","RHSA-2020:3230","RHSA-2020:3010","RHSA-2020:2831","RHSA-2020:2854","RHSA-2020:2832","RHSA-2020:3019","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1836244","bugzilla_description":"CVE-2020-12888 Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["kernel-0:3.10.0-693.71.2.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-957.56.1.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-1062.30.1.el7","kernel-0:3.10.0-1127.13.1.el7","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-327.89.1.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:3.10.0-1127.13.1.rt56.1110.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12888.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-10711","severity":"important","public_date":"2020-05-12T12:00:00Z","advisories":["RHSA-2020:2103","RHSA-2020:2125","RHSA-2020:2104","RHSA-2020:2214","RHSA-2020:2522","RHSA-2020:2203","RHSA-2020:2277","RHSA-2020:2289","RHSA-2020:2102","RHSA-2020:2242","RHSA-2020:2199","RHSA-2020:2285","RHSA-2020:2519","RHSA-2020:2429","RHBA-2020:3180","RHSA-2020:2085","RHSA-2020:2082","RHSA-2020:2291","RHSA-2020:2171"],"bugzilla":"1825116","bugzilla_description":"CVE-2020-10711 Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-514.76.1.el7","kernel-0:4.18.0-193.1.2.el8_2","kernel-rt-1:3.10.0-693.67.1.rt56.665.el6rt","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:3.10.0-327.88.1.el7","kernel-0:2.6.32-754.29.2.el6","kernel-rt-0:3.10.0-1127.8.2.rt56.1103.el7","kernel-0:3.10.0-1062.26.1.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-957.54.1.el7","kernel-rt-0:4.18.0-193.1.2.rt13.53.el8_2","kernel-0:3.10.0-1127.8.2.el7","kernel-0:3.10.0-693.67.1.el7","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10711.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-14900","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:2112","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3585","RHSA-2020:3461","RHSA-2020:3462","RHSA-2020:4252","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:3637"],"bugzilla":"1666499","bugzilla_description":"CVE-2019-14900 hibernate: SQL injection issue in Hibernate ORM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14900.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-1718","severity":"important","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:2112","RHSA-2020:2905","RHSA-2020:3197","RHSA-2020:2252","RHSA-2020:3196","RHSA-2020:2107","RHSA-2020:2108","RHSA-2020:2106"],"bugzilla":"1796756","bugzilla_description":"CVE-2020-1718 keycloak: security issue on reset credential flow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1718.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-1758","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:2112","RHSA-2020:2107","RHSA-2020:2108","RHSA-2020:2106"],"bugzilla":"1812514","bugzilla_description":"CVE-2020-1758 keycloak: improper verification of certificate with host mismatch could result in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":["rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1758.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-12825","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:3654","RHBA-2020:3609","RHSA-2020:4072"],"bugzilla":"1835377","bugzilla_description":"CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["redhat-coreos-43.82.202009181853.0","libcroco-0:0.6.12-4.el8_2.1","libcroco-0:0.6.12-6.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-8161","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":[],"bugzilla":"1838281","bugzilla_description":"CVE-2020-8161 rubygem-rack: directory traversal in Rack::Directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8161.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-1714","severity":"important","public_date":"2020-05-11T00:00:00Z","advisories":["RHSA-2020:3017","RHSA-2020:3675","RHSA-2020:2905","RHSA-2020:4252","RHSA-2020:2816","RHSA-2020:2813","RHSA-2020:2814","RHSA-2020:3678"],"bugzilla":"1705975","bugzilla_description":"CVE-2020-1714 keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["keycloak-adapter-sso7_4-eap6-0:9.0.4-1.redhat_00001.1.ep6.el7","eap7-keycloak-adapter-sso7_4-0:9.0.4-1.redhat_00001.1.el7eap","keycloak-adapter-sso7_4-eap6-0:9.0.4-1.redhat_00001.1.ep6.el6","eap7-keycloak-adapter-sso7_4-0:9.0.4-1.redhat_00001.1.el8eap","eap7-keycloak-adapter-sso7_4-0:9.0.4-1.redhat_00001.1.el6eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1714.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1724","severity":"low","public_date":"2020-05-07T00:00:00Z","advisories":["RHSA-2020:2112","RHSA-2020:2905","RHSA-2020:2252","RHSA-2020:2107","RHSA-2020:2108","RHSA-2020:2106"],"bugzilla":"1800527","bugzilla_description":"CVE-2020-1724 keycloak: problem with privacy after user logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":["rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1724.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-10693","severity":"moderate","public_date":"2020-05-05T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3461","RHSA-2020:3462","RHSA-2020:4252","RHSA-2020:3806","RHSA-2020:3638","RHSA-2020:3539","RHSA-2020:3639","RHSA-2020:3637"],"bugzilla":"1805501","bugzilla_description":"CVE-2020-10693 hibernate-validator: Improper input validation in the interpolation of constraint error messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10693.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-12657","severity":"important","public_date":"2020-05-05T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2428","RHSA-2020:2429","RHSA-2020:2427","RHSA-2020:2669","RHSA-2020:2567","RHSA-2020:2667"],"bugzilla":"1832866","bugzilla_description":"CVE-2020-12657 kernel: use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-147.20.1.el8_1","kernel-rt-0:4.18.0-193.6.3.rt13.59.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.6.3.el8_2","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12657.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-10706","severity":"moderate","public_date":"2020-04-30T00:00:00Z","advisories":[],"bugzilla":"1819011","bugzilla_description":"CVE-2020-10706 openshift/openshift-apiserver: oauth tokens not encrypted when enabling encryption of data at rest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-312","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10706.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11884","severity":"important","public_date":"2020-04-28T18:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2102","RHSA-2020:2199","RHSA-2020:2429"],"bugzilla":"1828149","bugzilla_description":"CVE-2020-11884 Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1251","affected_packages":["kernel-0:4.18.0-193.1.2.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11884.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-12243","severity":"moderate","public_date":"2020-04-28T00:00:00Z","advisories":["RHSA-2020:4041"],"bugzilla":"1833535","bugzilla_description":"CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openldap-0:2.4.44-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12243.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8203","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:3807","RHSA-2020:3370"],"bugzilla":"1857412","bugzilla_description":"CVE-2020-8203 nodejs-lodash: prototype pollution in zipObjectDeep function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","distributed-tracing/jaeger-query-rhel7:1.17.6-1","ovirt-web-ui-0:1.6.4-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2020-10716","severity":"low","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:1454"],"bugzilla":"1827300","bugzilla_description":"CVE-2020-10716 rubygem-foreman_ansible: \"User input\" entry from Job Invocation may contain sensitive data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["tfm-rubygem-foreman_ansible-0:4.0.3.5-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10716.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2020-1967","severity":"important","public_date":"2020-04-21T00:00:00Z","advisories":[],"bugzilla":"1823670","bugzilla_description":"CVE-2020-1967 openssl: Segmentation fault in SSL_check_chain causes denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1967.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10712","severity":"important","public_date":"2020-04-21T00:00:00Z","advisories":["RHSA-2020:2026","RHSA-2020:2136","RHSA-2020:2009"],"bugzilla":"1825161","bugzilla_description":"CVE-2020-10712 openshift/cluster-image-registry-operator: secrets disclosed in logs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["openshift4/ose-cluster-image-registry-operator:v4.4.0-202005121717","openshift4/ose-cluster-image-registry-operator:v4.2.32-202005050921","openshift4/ose-cluster-image-registry-operator:v4.3.19-202005041055"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10712.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L","cvss3_score":"7.0"},{"CVE":"CVE-2020-11620","severity":"important","public_date":"2020-04-07T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:3192"],"bugzilla":"1826798","bugzilla_description":"CVE-2020-11620 jackson-databind: Serialization gadgets in commons-jelly:commons-jelly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11620.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11619","severity":"important","public_date":"2020-04-06T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1826805","bugzilla_description":"CVE-2020-11619 jackson-databind: Serialization gadgets in org.springframework:spring-aop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11113","severity":"important","public_date":"2020-03-28T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3817","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821315","bugzilla_description":"CVE-2020-11113 jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11113.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11254","severity":"moderate","public_date":"2020-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:0933","RHSA-2020:2479","RHSA-2020:2413"],"bugzilla":"1819486","bugzilla_description":"CVE-2019-11254 kubernetes: Denial of service in API server via crafted YAML payloads by authorized users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-hyperkube:v4.5.0-202007100518.p0","openshift4/ose-oauth-server-rhel7:v4.5.0-202007012112.p0","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift4/ose-openshift-apiserver-rhel7:v4.3.9-202003230345"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11254.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-11501","severity":"moderate","public_date":"2020-03-27T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1998"],"bugzilla":"1821896","bugzilla_description":"CVE-2020-11501 gnutls: DTLS client hello contains a random value of all zeroes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["gnutls-0:3.6.8-10.el8_2","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11501.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-10696","severity":"important","public_date":"2020-03-26T00:00:00Z","advisories":["RHSA-2020:1926","RHSA-2020:1396","RHSA-2020:1449","RHSA-2020:1931","RHSA-2020:1932","RHSA-2020:1401","RHSA-2020:2116","RHSA-2020:2117"],"bugzilla":"1817651","bugzilla_description":"CVE-2020-10696 buildah: Crafted input tar file may lead to local file overwrite during image build process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["buildah-0:1.11.6-11.el7_8","podman-0:1.0.2-4.dev.git96ccc2e.rhaos4.1.el8","podman-0:1.6.4-10.rhaos4.3.el8","podman-0:1.6.4-18.el7_8","container-tools:2.0-8020020200420175838.28c38760","podman-0:1.4.2-6.rhaos4.2.el8","container-tools:1.0-8020020200420104655.28c38760","container-tools:rhel8-8020020200420180128.28c38760"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10696.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-1764","severity":"important","public_date":"2020-03-25T18:00:00Z","advisories":["RHSA-2020:0975"],"bugzilla":"1810383","bugzilla_description":"CVE-2020-1764 kiali: JWT cookie uses default signing key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-321","affected_packages":["openshift-service-mesh/kiali-rhel7-operator:1.0.12-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1764.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2020-1762","severity":"moderate","public_date":"2020-03-25T18:00:00Z","advisories":["RHSA-2020:0972"],"bugzilla":"1810387","bugzilla_description":"CVE-2020-1762 kiali: ignoring JWT claim fields","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613->CWE-384","affected_packages":["kiali-0:v1.0.10.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1762.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-11112","severity":"important","public_date":"2020-03-25T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821311","bugzilla_description":"CVE-2020-11112 jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11112.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11111","severity":"important","public_date":"2020-03-24T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821304","bugzilla_description":"CVE-2020-11111 jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11111.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8552","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:2992","RHBA-2020:0930","RHBA-2020:2215","RHSA-2020:1527","RHSA-2020:0933","RHSA-2020:1526","RHBA-2020:0929","RHSA-2020:2306"],"bugzilla":"1797909","bugzilla_description":"CVE-2020-8552 kubernetes: Use of unbounded 'client' label in apiserver_request_total allows for memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift4/ose-openshift-apiserver-rhel7:v4.2.34-202005252115","atomic-openshift-metrics-server-0:3.11.219-1.git.1.6fe54fb.el7","atomic-enterprise-service-catalog-1:3.11.219-1.git.1.717017c.el7","atomic-openshift-0:3.11.219-1.git.0.0c21387.el7","openshift4/ose-hyperkube:v4.2.29-202004140532","openshift-0:4.2.29-202004110432.git.0.f7d02c8.el8","openshift4/ose-service-catalog:v4.3.9-202003230345","openshift4/ose-openshift-apiserver-rhel7:v4.3.9-202003230345"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8552.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-1744","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:0947","RHSA-2020:2905","RHSA-2020:2252","RHSA-2020:0946","RHSA-2020:0945","RHSA-2020:0951"],"bugzilla":"1805792","bugzilla_description":"CVE-2020-1744 keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-sso7-keycloak-0:4.8.18-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.18-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.18-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1744.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-8551","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:1277","RHSA-2020:1276"],"bugzilla":"1816403","bugzilla_description":"CVE-2020-8551 kubernetes: crafted requests to kubelet API allow for memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.3.10-202003300855.git.0.da48c1d.el7","openshift4/ose-hyperkube:v4.3.10-202003311925"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8551.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-10968","severity":"important","public_date":"2020-03-22T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819208","bugzilla_description":"CVE-2020-10968 jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-5267","severity":"moderate","public_date":"2020-03-19T00:00:00Z","advisories":[],"bugzilla":"1831528","bugzilla_description":"CVE-2020-5267 rubygem-actionview: views that use the `j` or `escape_javascript` methods are susceptible to XSS attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5267.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-10673","severity":"important","public_date":"2020-03-18T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3585","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815470","bugzilla_description":"CVE-2020-10673 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10672","severity":"important","public_date":"2020-03-15T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815495","bugzilla_description":"CVE-2020-10672 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-1953","severity":"important","public_date":"2020-03-13T00:00:00Z","advisories":["RHSA-2020:2751","RHSA-2020:3133","RHSA-2020:3192"],"bugzilla":"1815212","bugzilla_description":"CVE-2020-1953 apache-commons-configuration: uncontrolled class instantiation when loading YAML files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1953.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2020-7598","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:3247","RHSA-2020:2852","RHSA-2020:2992","RHSA-2020:2362","RHSA-2020:2848","RHSA-2020:3042","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:3084"],"bugzilla":"1813344","bugzilla_description":"CVE-2020-7598 nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","kiali-0:v1.0.11.redhat1-1.el7","rh-nodejs12-nodejs-0:12.18.2-1.el7","servicemesh-grafana-0:6.2.2-36.el8","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:12-8010020200630154708.c27ad7f8","nodejs:10-8020020200617141353.4cda2c84","nodejs:10-8010020200617134056.c27ad7f8","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7598.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-1749","severity":"moderate","public_date":"2020-03-04T01:29:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1809833","bugzilla_description":"CVE-2020-1749 kernel: some ipv6 protocols not encrypted over ipsec tunnel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1749.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-11252","severity":"moderate","public_date":"2020-03-04T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:2413"],"bugzilla":"1860158","bugzilla_description":"CVE-2019-11252 kubernetes: credential leak in kube-controller-manager via error messages in mount failure logs and events for AzureFile and CephFS volumes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":["openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-hyperkube:v4.5.0-202007100518.p0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11252.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-10969","severity":"important","public_date":"2020-03-03T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819212","bugzilla_description":"CVE-2020-10969 jackson-databind: Serialization gadgets in javax.swing.JEditorPane","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10969.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8840","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816330","bugzilla_description":"CVE-2020-8840 jackson-databind: Lacks certain xbean-reflect/JNDI blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9546","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816332","bugzilla_description":"CVE-2020-9546 jackson-databind: Serialization gadgets in shaded-hikari-config","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9546.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9547","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816337","bugzilla_description":"CVE-2020-9547 jackson-databind: Serialization gadgets in ibatis-sqlmap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9547.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9548","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816340","bugzilla_description":"CVE-2020-9548 jackson-databind: Serialization gadgets in anteros-core","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9548.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-1745","severity":"important","public_date":"2020-02-26T00:00:00Z","advisories":["RHSA-2020:2059","RHSA-2020:2367","RHSA-2020:2511","RHSA-2020:2058","RHSA-2020:2333","RHSA-2020:0812","RHSA-2020:0813","RHSA-2020:3779","RHSA-2020:0962","RHSA-2020:2515","RHSA-2020:0961","RHSA-2020:2512","RHSA-2020:2513","RHSA-2020:0952","RHSA-2020:2905","RHSA-2020:2060","RHSA-2020:2061","RHSA-2020:3192"],"bugzilla":"1807305","bugzilla_description":"CVE-2020-1745 undertow: AJP File Read/Inclusion Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["eap7-undertow-0:2.0.28-4.SP1_redhat_00002.1.el6eap","eap7-undertow-0:2.0.28-4.SP1_redhat_00002.1.el7eap","eap7-undertow-0:2.0.28-4.SP1_redhat_00002.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1745.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2020-2732","severity":"moderate","public_date":"2020-02-24T18:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2102","RHSA-2020:4062","RHSA-2020:2171","RHSA-2020:4060"],"bugzilla":"1805135","bugzilla_description":"CVE-2020-2732 Kernel: kvm: nVMX: L2 guest may trick the L0 hypervisor to access sensitive L1 resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-193.1.2.el8_2","kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-rt-0:4.18.0-193.1.2.rt13.53.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2732.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.8"},{"CVE":"CVE-2020-1935","severity":"low","public_date":"2020-02-24T00:00:00Z","advisories":["RHSA-2020:2367","RHSA-2020:3303","RHSA-2020:1521","RHSA-2020:1520","RHSA-2020:3305"],"bugzilla":"1806835","bugzilla_description":"CVE-2020-1935 tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-17569","severity":"low","public_date":"2020-02-24T00:00:00Z","advisories":["RHSA-2020:1521","RHSA-2020:1520"],"bugzilla":"1806849","bugzilla_description":"CVE-2019-17569 tomcat: Regression in handling of Transfer-Encoding header allows for HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17569.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1938","severity":"important","public_date":"2020-02-20T00:00:00Z","advisories":["RHSA-2020:2840","RHSA-2020:2367","RHSA-2020:2783","RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:0860","RHSA-2020:1520","RHSA-2020:2781","RHSA-2020:2780","RHSA-2020:0855","RHSA-2020:0912","RHSA-2020:1479","RHSA-2020:1478","RHSA-2020:2779"],"bugzilla":"1806398","bugzilla_description":"CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["tomcat-0:7.0.76-11.el7_7","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el7","tomcat6-0:6.0.24-114.el6_10","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el6","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el5","tomcat-0:7.0.76-10.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1938.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2019-20478","severity":"moderate","public_date":"2020-02-19T00:00:00Z","advisories":[],"bugzilla":"1808088","bugzilla_description":"CVE-2019-20478 python-ruamel-yaml: code execution through load() method with an untrusted argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20478.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-1761","severity":"moderate","public_date":"2020-02-11T00:00:00Z","advisories":[],"bugzilla":"1813788","bugzilla_description":"CVE-2020-1761 openshift/console: access token stored in browser local storage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1761.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2020-1712","severity":"important","public_date":"2020-02-05T09:00:00Z","advisories":["RHSA-2020:0575","RHSA-2020:0564","RHBA-2020:0614"],"bugzilla":"1794578","bugzilla_description":"CVE-2020-1712 systemd: use-after-free when asynchronous polkit queries are performed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["systemd-0:239-18.el8_1.4","systemd-0:239-13.el8_0.7","redhat-coreos-42.81.20200224.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1712.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-8124","severity":"moderate","public_date":"2020-02-04T00:00:00Z","advisories":["RHSA-2020:0972"],"bugzilla":"1800774","bugzilla_description":"CVE-2020-8124 npmjs-url-parse: Improper validation of protocol of the returned URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["jaeger-0:v1.13.1.redhat6-1.el7","kiali-0:v1.0.10.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8124.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-3016","severity":"low","public_date":"2020-01-30T18:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3010"],"bugzilla":"1792167","bugzilla_description":"CVE-2019-3016 kernel: kvm: Information leak within a KVM guest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-200","affected_packages":["redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3016.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-18634","severity":"important","public_date":"2020-01-30T00:00:00Z","advisories":["RHSA-2020:0540","RHSA-2020:0487","RHBA-2020:0523","RHSA-2020:0509","RHSA-2020:0726"],"bugzilla":"1796944","bugzilla_description":"CVE-2019-18634 sudo: Stack based buffer overflow when pwfeedback is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["redhat-coreos-42.81.20200217.0","sudo-0:1.8.25p1-8.el8_1.1","sudo-0:1.8.25p1-4.el8_0.3","sudo-0:1.8.6p3-29.el6_10.3","sudo-0:1.8.23-4.el7_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18634.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-20445","severity":"important","public_date":"2020-01-29T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:0497","RHSA-2020:2333","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:0811","RHSA-2020:0605","RHSA-2020:0951","RHSA-2020:1445","RHSA-2020:0601","RHSA-2020:0567","RHSA-2020:0805","RHSA-2020:0606","RHSA-2020:0804","RHSA-2020:0939","RHSA-2020:0806","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1798509","bugzilla_description":"CVE-2019-20445 netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el6eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el7eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20445.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20444","severity":"important","public_date":"2020-01-29T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:0497","RHSA-2020:2333","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:0811","RHSA-2020:0605","RHSA-2020:0951","RHSA-2020:1445","RHSA-2020:0601","RHSA-2020:0567","RHSA-2020:0805","RHSA-2020:0606","RHSA-2020:0804","RHSA-2020:0939","RHSA-2020:0806","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1798524","bugzilla_description":"CVE-2019-20444 netty: HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el6eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el7eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20444.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-7955","severity":"moderate","public_date":"2020-01-29T00:00:00Z","advisories":[],"bugzilla":"1805875","bugzilla_description":"CVE-2020-7955 consul: Missing access control in HTTP API endpoints","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7955.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-7219","severity":"moderate","public_date":"2020-01-28T00:00:00Z","advisories":[],"bugzilla":"1805866","bugzilla_description":"CVE-2020-7219 consul: HTTP/RPC Services Allow Unbounded Resource Usage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7219.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7919","severity":"important","public_date":"2020-01-28T00:00:00Z","advisories":[],"bugzilla":"1808041","bugzilla_description":"CVE-2020-7919 golang: Integer overflow on 32bit architectures via crafted certificate allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7919.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-0548","severity":"low","public_date":"2020-01-27T13:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1788786","bugzilla_description":"CVE-2020-0548 hw: Vector Register Data Sampling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-200","affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0548.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2020-0549","severity":"moderate","public_date":"2020-01-27T13:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1788788","bugzilla_description":"CVE-2020-0549 hw: L1D Cache Eviction Sampling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-200","affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0549.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-12653","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHSA-2020:3432","RHSA-2020:3224","RHSA-2020:3389","RHSA-2020:3221","RHSA-2020:3232","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:2832","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1831868","bugzilla_description":"CVE-2020-12653 kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in drivers/net/wireless/marvell/mwifiex/scan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-rt-1:3.10.0-693.72.1.rt56.672.el6rt","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","kernel-0:3.10.0-327.90.2.el7","kernel-0:3.10.0-693.72.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:3.10.0-1062.31.2.el7","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12653.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12654","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHSA-2020:3432","RHSA-2020:3224","RHSA-2020:3389","RHSA-2020:3221","RHSA-2020:3232","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:2832","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1832530","bugzilla_description":"CVE-2020-12654 kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-1:3.10.0-693.72.1.rt56.672.el6rt","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","kernel-0:3.10.0-327.90.2.el7","kernel-0:3.10.0-693.72.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:3.10.0-1062.31.2.el7","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12654.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-7238","severity":"important","public_date":"2020-01-26T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:0497","RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:0811","RHSA-2020:0605","RHSA-2020:0951","RHSA-2020:1445","RHSA-2020:0601","RHSA-2020:0567","RHSA-2020:0805","RHSA-2020:0606","RHSA-2020:0804","RHSA-2020:0939","RHSA-2020:0806","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1796225","bugzilla_description":"CVE-2020-7238 netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el6eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el7eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7238.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-19355","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:0683","RHSA-2020:1280","RHSA-2020:1545"],"bugzilla":"1793277","bugzilla_description":"CVE-2019-19355 openshift/ocp-release-operator-sdk: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift4/ose-ansible-operator:v4.2.27-202003301126","openshift4/ose-ansible-operator:v4.3.5-202003020549","openshift4/ose-ansible-operator:v4.1.41-202004151639"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19355.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-19350","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1793283","bugzilla_description":"CVE-2019-19350 openshift/ansible-service-broker: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19350.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-19349","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1793284","bugzilla_description":"CVE-2019-19349 operator-framework/operator-metering: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19349.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-1705","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:0866","RHBA-2020:1278"],"bugzilla":"1793304","bugzilla_description":"CVE-2020-1705 openshift/template-service-broker-operator: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift4/ose-template-service-broker-operator:v4.3.7-202003161611","openshift4/ose-template-service-broker-operator:v4.2.27-202003301126"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1705.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-1704","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:2369"],"bugzilla":"1793305","bugzilla_description":"CVE-2020-1704 openshift-service-mesh/kiali-rhel7-operator: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift-service-mesh/kiali-rhel7-operator:1.12.12-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1704.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-1742","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1803608","bugzilla_description":"CVE-2020-1742 nmstate/kubernetes-nmstate-handler: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1742.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-10695","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1817530","bugzilla_description":"CVE-2020-10695 containers/redhat-sso-7: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10695.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-8945","severity":"moderate","public_date":"2020-01-16T00:00:00Z","advisories":["RHSA-2020:2027","RHSA-2020:2992","RHSA-2020:1234","RHSA-2020:3167","RHSA-2020:1231","RHSA-2020:1396","RHSA-2020:1230","RHSA-2020:0679","RHSA-2020:0934","RHSA-2020:1402","RHSA-2020:0863","RHSA-2020:0697","RHSA-2020:0689","RHSA-2020:1940","RHSA-2020:2413","RHSA-2020:2117","RHBA-2020:1255","RHSA-2020:0928","RHSA-2020:1937","RHSA-2020:2927"],"bugzilla":"1795838","bugzilla_description":"CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["atomic-openshift-0:3.11.248-1.git.0.92ee8ac.el7","openshift-clients-0:4.2.32-202005020632.git.1.1b0fab9.el8","skopeo-1:0.1.32-7.git1715c90.rhaos4.2.el8","podman-0:1.6.4-10.rhaos4.3.el8","openshift4/ose-docker-builder:v4.3.7-202003161611","skopeo-1:0.1.40-7.el7_8","podman-0:1.6.4-18.el7_8","openshift4/ose-cli:v4.3.7-202003161611","openshift4/ose-cli-artifacts:v4.3.7-202003161611","openshift4/ose-openshift-controller-manager-rhel7:v4.2.34-202005252115","cri-o-0:1.16.4-1.dev.rhaos4.3.git9238eee.el7","openshift4/ose-openshift-controller-manager-rhel7:v4.3.9-202003230345","cri-o-0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7","openshift-0:4.3.10-202003300855.git.0.da48c1d.el8","docker-2:1.13.1-161.git64e9980.el7_8","skopeo-1:0.1.40-4.rhaos.el8","machine-config-daemon-0:4.3.10-202003300415.git.0.56d6ae0.el8","buildah-0:1.11.6-8.el7_8","skopeo-1:0.1.32-6.git1715c90.el8_0","openshift4/ose-cluster-policy-controller-rhel7:v4.4.0-202004261927","openshift4/ose-docker-builder:v4.2.28-202004061218","openshift-clients-0:4.3.10-202003300001.git.0.e43c148.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8945.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1002104","severity":"low","public_date":"2020-01-15T00:00:00Z","advisories":[],"bugzilla":"1814953","bugzilla_description":"CVE-2018-1002104 kubernetes/ingress-nginx: /metrics endpoint exposed publicly by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002104.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-7053","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1795624","bugzilla_description":"CVE-2020-7053 kernel: use-after-free in i915_ppgtt_close in drivers/gpu/drm/i915/i915_gem_gtt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7053.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-25649","severity":"important","public_date":"2020-01-09T00:00:00Z","advisories":["RHSA-2020:4312"],"bugzilla":"1887664","bugzilla_description":"CVE-2020-25649 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25649.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-1925","severity":"moderate","public_date":"2020-01-08T00:00:00Z","advisories":[],"bugzilla":"1790309","bugzilla_description":"CVE-2020-1925 olingo-odata: Server side request forgery in AsyncResponseWrapperImpl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1925.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-20330","severity":"important","public_date":"2020-01-02T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:0939","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:0951","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1793154","bugzilla_description":"CVE-2019-20330 jackson-databind: lacks certain net.sf.ehcache blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20330.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-19922","severity":"low","public_date":"2019-12-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1493","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1792512","bugzilla_description":"CVE-2019-19922 kernel: when cpu.cfs_quota_us is used allows attackers to cause a denial of service against non-cpu-bound applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19922.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-17571","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2638"],"bugzilla":"1785616","bugzilla_description":"CVE-2019-17571 log4j: deserialization of untrusted data in SocketServer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-19232","severity":"moderate","public_date":"2019-12-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1804"],"bugzilla":"1786704","bugzilla_description":"CVE-2019-19232 sudo: attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["redhat-coreos-43.82.202007300301.0","sudo-0:1.8.29-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19232.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17563","severity":"low","public_date":"2019-12-18T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:4004","RHSA-2020:0860","RHSA-2020:1520"],"bugzilla":"1785711","bugzilla_description":"CVE-2019-17563 tomcat: session fixation when using FORM authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":["tomcat-0:7.0.76-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17563.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16782","severity":"moderate","public_date":"2019-12-18T00:00:00Z","advisories":["RHSA-2020:2480"],"bugzilla":"1789100","bugzilla_description":"CVE-2019-16782 rubygem-rack: hijack sessions by using timing attacks targeting the session id","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["cfme-gemset-0:5.11.6.0-1.el8cf","cfme-amazon-smartstate-0:5.11.6.0-1.el8cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-18801","severity":"critical","public_date":"2019-12-10T18:00:00Z","advisories":["RHSA-2019:4222"],"bugzilla":"1773444","bugzilla_description":"CVE-2019-18801 envoy: an untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":["kiali-0:v1.0.8.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18801.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-18802","severity":"important","public_date":"2019-12-10T18:00:00Z","advisories":["RHSA-2019:4222"],"bugzilla":"1773447","bugzilla_description":"CVE-2019-18802 envoy: malformed request header may cause bypass of route matchers resulting in escalation of privileges or information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kiali-0:v1.0.8.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-18838","severity":"important","public_date":"2019-12-10T18:00:00Z","advisories":["RHSA-2019:4222"],"bugzilla":"1773449","bugzilla_description":"CVE-2019-18838 envoy: malformed HTTP request without the Host header may cause abnormal termination of the Envoy process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["kiali-0:v1.0.8.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13734","severity":"important","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2019:4238","RHSA-2020:2014","RHSA-2020:0273","RHSA-2020:0229","RHBA-2020:0460","RHSA-2020:0227"],"bugzilla":"1781980","bugzilla_description":"CVE-2019-13734 sqlite: fts3: improve shadow table corruption detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sqlite-0:3.26.0-4.el8_0","chromium-browser-0:79.0.3945.79-1.el6_10","sqlite-0:3.26.0-4.el8_1","redhat-coreos-42.81.20200210.0","sqlite-0:3.7.17-8.el7_7.1","sqlite-0:3.7.17-8.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13734.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10720","severity":"moderate","public_date":"2019-12-09T14:23:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:2854","RHSA-2019:3309"],"bugzilla":"1781204","bugzilla_description":"CVE-2020-10720 kernel: use-after-free read in napi_gro_frags() in the Linux kernel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-19725","severity":"important","public_date":"2019-12-09T00:00:00Z","advisories":[],"bugzilla":"1784740","bugzilla_description":"CVE-2019-19725 sysstat: double free in check_file_actlst() in sa_common.c may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19725.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-1551","severity":"low","public_date":"2019-12-06T00:00:00Z","advisories":[],"bugzilla":"1780995","bugzilla_description":"CVE-2019-1551 openssl: Integer overflow in RSAZ modular exponentiation on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1551.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-19532","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1781821","bugzilla_description":"CVE-2019-19532 kernel: malicious USB devices can lead to multiple out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19532.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-1002102","severity":"low","public_date":"2019-12-03T00:00:00Z","advisories":[],"bugzilla":"1784602","bugzilla_description":"CVE-2018-1002102 kubernetes: improper validation of URL redirection in the Kubernetes API server allows an attacker-controlled Kubelet to redirect API server requests from streaming endpoints","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2019-14837","severity":"important","public_date":"2019-12-02T00:00:00Z","advisories":["RHSA-2019:4042","RHSA-2019:4045","RHSA-2019:4040","RHSA-2019:4041"],"bugzilla":"1730227","bugzilla_description":"CVE-2019-14837 keycloak: keycloak uses hardcoded open dummy domain for new accounts enabling information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-547","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14837.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2019-19768","severity":"important","public_date":"2019-11-29T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:2214","RHSA-2020:2522","RHSA-2020:2203","RHSA-2020:2277","RHSA-2020:2289","RHSA-2020:2242","RHSA-2020:2199","RHSA-2020:2285","RHSA-2020:2519","RHSA-2020:1966","RHSA-2020:1769","RHSA-2020:1567","RHBA-2020:3180","RHSA-2020:2085","RHSA-2020:2082","RHSA-2020:2291"],"bugzilla":"1786164","bugzilla_description":"CVE-2019-19768 kernel: use-after-free in __blk_add_trace in kernel/trace/blktrace.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-514.76.1.el7","kernel-rt-1:3.10.0-693.67.1.rt56.665.el6rt","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.18.1.el8_0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:3.10.0-327.88.1.el7","kernel-rt-0:3.10.0-1127.8.2.rt56.1103.el7","kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-193.el8","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1127.8.2.el7","kernel-0:3.10.0-693.67.1.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19768.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-18660","severity":"moderate","public_date":"2019-11-28T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:1372","RHSA-2020:0174","RHBA-2020:1450","RHSA-2020:2429","RHSA-2020:2933","RHSA-2020:1016","RHSA-2020:1984"],"bugzilla":"1777825","bugzilla_description":"CVE-2019-18660 kernel: powerpc: incomplete Spectre-RSB mitigation leads to information exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","kernel-0:2.6.32-754.31.1.el6","kernel-0:3.10.0-957.56.1.el7","redhat-coreos-42.81.20200407.0","kernel-0:3.10.0-1127.el7","kernel-alt-0:4.14.0-115.17.1.el7a","kernel-0:3.10.0-1062.21.1.el7","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18660.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2020-1728","severity":"low","public_date":"2019-11-27T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:4213","RHSA-2020:3496","RHSA-2020:3497","RHSA-2020:3495","RHSA-2020:4252","RHSA-2020:3539"],"bugzilla":"1800585","bugzilla_description":"CVE-2020-1728 keycloak: security headers missing on REST endpoints","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el6sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el7sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1728.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-10195","severity":"moderate","public_date":"2019-11-26T00:00:00Z","advisories":["RHBA-2019:4268","RHSA-2020:0378","RHSA-2020:1269"],"bugzilla":"1726223","bugzilla_description":"CVE-2019-10195 ipa: Batch API logging user passwords to /var/log/httpd/error_log","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532->CWE-200","affected_packages":["idm:DL1-8010020191127093529.6573b795","ipa-0:4.6.5-11.el7_7.4","idm:DL1-8000020200217171713.2874843d"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2020-10690","severity":"low","public_date":"2019-11-25T12:53:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1817141","bugzilla_description":"CVE-2020-10690 kernel: use-after-free in cdev_put() when a PTP device is removed while it's chardev is open","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10690.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-14895","severity":"important","public_date":"2019-11-25T08:29:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0661","RHSA-2020:0374","RHSA-2020:1493","RHSA-2020:0592","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:0653","RHSA-2020:0543","RHSA-2020:0664","RHSA-2020:0831","RHSA-2020:0609"],"bugzilla":"1774870","bugzilla_description":"CVE-2019-14895 kernel: heap-based buffer overflow in mwifiex_process_country_ie() function in drivers/net/wireless/marvell/mwifiex/sta_ioctl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:3.10.0-693.64.1.el7","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-0:3.10.0-514.73.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-0:3.10.0-957.46.1.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:4.18.0-80.16.1.el8_0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14895.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-14901","severity":"important","public_date":"2019-11-22T00:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0374","RHSA-2020:1493","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:0204"],"bugzilla":"1773519","bugzilla_description":"CVE-2019-14901 kernel: heap overflow in marvell/mwifiex/tdls.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-400|CWE-122)","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14901.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-19074","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774933","bugzilla_description":"CVE-2019-19074 kernel: a memory leak in the ath9k management function in allows local DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19073","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774937","bugzilla_description":"CVE-2019-19073 kernel: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel (DOS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19073.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-19067","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774968","bugzilla_description":"CVE-2019-19067 kernel: Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c allow for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19067.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-19065","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775000","bugzilla_description":"CVE-2019-19065 kernel: A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19065.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19059","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775042","bugzilla_description":"CVE-2019-19059 kernel: Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19059.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19058","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775047","bugzilla_description":"CVE-2019-19058 kernel: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19058.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19057","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775050","bugzilla_description":"CVE-2019-19057 kernel: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19057.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-12418","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:0860","RHSA-2020:1520"],"bugzilla":"1785699","bugzilla_description":"CVE-2019-12418 tomcat: local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12418.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-14898","severity":"moderate","public_date":"2019-11-20T00:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0374","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1774671","bugzilla_description":"CVE-2019-14898 kernel: incomplete fix  for race condition between mmget_not_zero()/get_task_mm() and core dumping in CVE-2019-11599","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-667","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14898.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-19126","severity":"low","public_date":"2019-11-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3861","RHSA-2020:1828"],"bugzilla":"1774681","bugzilla_description":"CVE-2019-19126 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glibc-0:2.17-317.el7","glibc-0:2.28-101.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-19045","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774983","bugzilla_description":"CVE-2019-19045 kernel: dos in mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19045.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.5"},{"CVE":"CVE-2019-19047","severity":"low","public_date":"2019-11-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774991","bugzilla_description":"CVE-2019-19047 kernel: dos in mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19047.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19338","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHSA-2020:1465","RHSA-2020:0839","RHSA-2020:0834","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1781514","bugzilla_description":"CVE-2019-19338 Kernel: KVM: export MSR_IA32_TSX_CTRL to guest - incomplete fix for TAA (CVE-2019-11135)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-203","affected_packages":["kernel-0:3.10.0-957.48.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-1062.18.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19338.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-12207","severity":"important","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3941","RHSA-2019:3843","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0026","RHSA-2020:0028","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3916","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1646768","bugzilla_description":"CVE-2018-12207 hw: Machine Check Error on Page Size Change (IFU)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-0154","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3840","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837"],"bugzilla":"1724393","bugzilla_description":"CVE-2019-0154 hw: Intel GPU Denial Of Service while accessing MMIO in lower power state","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0154.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-0155","severity":"important","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3887","RHSA-2019:3877","RHSA-2019:3870","RHSA-2019:3871","RHSA-2019:3872","RHSA-2019:3883","RHSA-2019:3873","RHBA-2019:3919","RHSA-2020:0204","RHSA-2019:3908","RHSA-2019:3878","RHSA-2019:3889"],"bugzilla":"1724398","bugzilla_description":"CVE-2019-0155 hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-1:3.10.0-693.60.3.rt56.655.el6rt","kernel-0:3.10.0-693.60.3.el7","kernel-0:2.6.32-754.24.3.el6","kernel-0:3.10.0-862.43.3.el7","kernel-0:3.10.0-514.70.3.el7","kernel-0:3.10.0-327.82.2.el7","kernel-rt-0:3.10.0-1062.4.3.rt56.1029.el7","kernel-0:3.10.0-1062.4.3.el7","kernel-0:4.18.0-147.0.3.el8_1","redhat-coreos-42.81.20191119.1","kernel-0:3.10.0-957.38.3.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.3.rt24.95.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0155.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-14818","severity":"moderate","public_date":"2019-11-12T15:00:00Z","advisories":["RHSA-2020:0166","RHSA-2020:0165","RHSA-2020:0168","RHSA-2020:0172","RHBA-2020:0062","RHSA-2020:0171","RHSA-2020:1735","RHSA-2020:1226"],"bugzilla":"1737327","bugzilla_description":"CVE-2019-14818 dpdk: possible memory leak leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openvswitch-0:2.9.0-124.el7fdp","dpdk-0:18.11.5-1.el7_8","openvswitch2.12-0:2.12.0-12.el7fdp","dpdk-0:19.11-4.el8","openvswitch2.12-0:2.12.0-12.el8fdp","openvswitch2.11-0:2.11.0-35.el7fdp","redhat-coreos-43.81.202001142154.0","openvswitch2.11-0:2.11.0-35.el8fdp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19807","severity":"important","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1786078","bugzilla_description":"CVE-2019-19807 kernel: use-after-free in sound/core/timer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","kernel-rt-0:3.10.0-1160.rt56.1131.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19807.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19534","severity":"moderate","public_date":"2019-11-04T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1783540","bugzilla_description":"CVE-2019-19534 kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772->CWE-200","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19534.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-10218","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:0943","RHSA-2020:1084","RHSA-2020:1878"],"bugzilla":"1763137","bugzilla_description":"CVE-2019-10218 samba: smb client vulnerable to filenames containing path separators","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.11.6-104.el7rhgs","samba-0:4.10.4-10.el7","samba-0:4.11.2-13.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10218.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-14833","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":[],"bugzilla":"1764126","bugzilla_description":"CVE-2019-14833 samba: AD DC check password script does not receive full password when non-ASCII characters are used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14833.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-14847","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":[],"bugzilla":"1764142","bugzilla_description":"CVE-2019-14847 samba: samba AD DC LDAP denial of service via dirsync","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-8726","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876612","bugzilla_description":"CVE-2019-8726 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8726.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8735","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876614","bugzilla_description":"CVE-2019-8735 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8735.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8768","severity":"low","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876616","bugzilla_description":"CVE-2019-8768 webkitgtk: Browsing history could not be deleted","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8768.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-1750","severity":"moderate","public_date":"2019-10-28T00:00:00Z","advisories":["RHSA-2020:1939","RHSA-2020:2595","RHSA-2020:2439"],"bugzilla":"1808130","bugzilla_description":"CVE-2020-1750 machine-config-operator-container: mmap stressor makes the cluster unresponsive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift4/ose-machine-config-operator:v4.2.36-202006230600.p0","openshift4/ose-machine-config-operator:v4.4.0-202005011342","openshift4/ose-machine-config-operator:v4.3.25-202006081335"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-14834","severity":"low","public_date":"2019-10-23T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1715","RHSA-2020:3878"],"bugzilla":"1764425","bugzilla_description":"CVE-2019-14834 dnsmasq: memory leak in the create_helper() function in /src/helper.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-43.82.202007300301.0","dnsmasq-0:2.79-11.el8","dnsmasq-0:2.76-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14834.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-18282","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1796360","bugzilla_description":"CVE-2019-18282 kernel: The flow_dissector feature allows device tracking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18282.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-17666","severity":"important","public_date":"2019-10-18T00:00:00Z","advisories":["RHSA-2020:0661","RHSA-2020:1353","RHSA-2020:0740","RHSA-2020:1465","RHSA-2020:1473","RHSA-2020:0834","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:1347","RHSA-2020:0543","RHSA-2020:1524","RHSA-2020:0831","RHSA-2020:0839"],"bugzilla":"1763690","bugzilla_description":"CVE-2019-17666 kernel: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel lacks a certain upper-bound check, leading to a buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-0:3.10.0-957.48.1.el7","kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.65.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:3.10.0-514.74.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-rt-1:3.10.0-693.65.1.rt56.663.el6rt","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:2.6.32-754.29.1.el6","kernel-0:3.10.0-1062.18.1.el7","kernel-0:4.18.0-80.16.1.el8_0","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17666.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2019-17596","severity":"moderate","public_date":"2019-10-17T00:00:00Z","advisories":["RHSA-2020:0101","RHSA-2020:0329"],"bugzilla":"1763310","bugzilla_description":"CVE-2019-17596 golang: invalid public key causes panic in dsa.Verify","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14287","severity":"important","public_date":"2019-10-14T15:00:00Z","advisories":["RHSA-2019:3754","RHSA-2019:3204","RHSA-2019:3941","RHSA-2019:3755","RHSA-2019:3205","RHSA-2020:0388","RHSA-2019:3694","RHSA-2019:3278","RHSA-2019:3895","RHSA-2019:3197","RHSA-2019:4191","RHSA-2019:3916","RHSA-2019:3219","RHSA-2019:3209","RHBA-2019:3248","RHBA-2019:3303"],"bugzilla":"1760531","bugzilla_description":"CVE-2019-14287 sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":["redhat-virtualization-host-0:4.2-20191022.0.el7_6","sudo-0:1.7.2p1-31.el5_11.1","sudo-0:1.8.23-3.el7_6.1","sudo-0:1.8.25p1-4.el8_0.2","sudo-0:1.8.6p3-29.el6_10.2","sudo-0:1.8.6p7-17.el7_2.2","sudo-0:1.8.19p2-12.el7_4.1","sudo-0:1.8.6p3-12.el6_5.2","redhat-coreos-42.81.20191107.0","sudo-0:1.8.19p2-14.el7_5.1","sudo-0:1.8.6p7-23.el7_3.2","sudo-0:1.8.6p3-15.el6_6.2","sudo-0:1.8.25p1-8.el8_1","sudo-0:1.8.23-4.el7_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14287.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-14820","severity":"low","public_date":"2019-10-14T00:00:00Z","advisories":["RHSA-2019:3049","RHSA-2019:3045","RHSA-2020:2067","RHSA-2019:3046","RHSA-2019:3048","RHSA-2019:3044","RHSA-2019:3050"],"bugzilla":"1649870","bugzilla_description":"CVE-2019-14820 keycloak: adapter endpoints are exposed via arbitrary URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["keycloak-adapter-sso7_3-eap6-0:4.8.13-1.Final_redhat_00001.1.ep6.el6","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","eap7-keycloak-adapter-sso7_3-0:4.8.13-1.Final_redhat_00001.1.el8eap","keycloak-adapter-sso7_3-eap6-0:4.8.13-1.Final_redhat_00001.1.ep6.el7","eap7-keycloak-adapter-sso7_3-0:4.8.13-1.Final_redhat_00001.1.el6eap","eap7-keycloak-adapter-sso7_3-0:4.8.13-1.Final_redhat_00001.1.el7eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14820.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-14832","severity":"moderate","public_date":"2019-10-14T00:00:00Z","advisories":["RHSA-2020:2366","RHSA-2019:3045","RHSA-2020:2067","RHSA-2019:3046","RHSA-2019:3044","RHSA-2019:3050"],"bugzilla":"1749487","bugzilla_description":"CVE-2019-14832 keycloak: cross-realm user access auth bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14832.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-17531","severity":"moderate","public_date":"2019-10-12T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2019:4192","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1775293","bugzilla_description":"CVE-2019-17531 jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.8.el7","pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17531.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-14838","severity":"moderate","public_date":"2019-10-11T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2020:2067","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4045","RHSA-2019:3082","RHSA-2019:3083","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0728"],"bugzilla":"1751227","bugzilla_description":"CVE-2019-14838 wildfly-core: Incorrect privileges for 'Monitor', 'Auditor' and 'Deployer' user by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","eap7-wildfly-0:7.2.4-2.SP1_redhat_00001.1.el8eap","eap7-wildfly-0:7.2.4-2.SP1_redhat_00001.1.el7eap","eap7-wildfly-0:7.2.4-2.SP1_redhat_00001.1.el6eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2019-15587","severity":"moderate","public_date":"2019-10-10T00:00:00Z","advisories":[],"bugzilla":"1774081","bugzilla_description":"CVE-2019-15587 rubygem-loofah: XXS when a crafted SVG element is republished","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15587.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-14845","severity":"moderate","public_date":"2019-10-07T00:00:00Z","advisories":["RHSA-2019:4237","RHSA-2019:4101"],"bugzilla":"1754662","bugzilla_description":"CVE-2019-14845 openshift: Container image TLS verification bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-494","affected_packages":["openshift4/ose-docker-builder:v4.1.28-201912100143","openshift4/ose-docker-builder:v4.2.10-201912022352"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14845.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2019-14854","severity":"moderate","public_date":"2019-10-07T00:00:00Z","advisories":["RHSA-2019:4091","RHSA-2019:4081","RHSA-2019:4075","RHSA-2019:4098"],"bugzilla":"1758953","bugzilla_description":"CVE-2019-14854 library-go: Secret data written to static pod logs when operator set at Debug level or higher","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["openshift4/ose-cluster-kube-apiserver-operator:v4.2.9-201911261133","openshift4/ose-cluster-kube-scheduler-operator:v4.1.27-201912030019","openshift4/ose-cluster-kube-controller-manager-operator:v4.2.10-201912022352","openshift4/ose-cluster-kube-apiserver-operator:v4.1.26-201911260202"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14854.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-17110","severity":"moderate","public_date":"2019-10-07T00:00:00Z","advisories":[],"bugzilla":"1759118","bugzilla_description":"CVE-2019-17110 kube-state-metrics: new feature exposing annotations as metrics can lead to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-19055","severity":"moderate","public_date":"2019-10-05T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775074","bugzilla_description":"CVE-2019-19055 kernel: memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c allows DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19055.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-16994","severity":"low","public_date":"2019-09-30T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1759681","bugzilla_description":"CVE-2019-16994 kernel: Memory leak in sit_init_net() in net/ipv6/sit.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16994.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-11253","severity":"important","public_date":"2019-09-28T00:00:00Z","advisories":["RHSA-2020:2796","RHSA-2020:2863","RHEA-2019:3809","RHSA-2020:2861","RHSA-2020:2795","RHSA-2019:3239","RHSA-2019:3811","RHSA-2020:2870","RHSA-2019:3905","RHSA-2019:3132","RHSA-2020:2799"],"bugzilla":"1757701","bugzilla_description":"CVE-2019-11253 kubernetes: YAML parsing vulnerable to \"Billion Laughs\" attack, allowing for remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["servicemesh-grafana-0:6.2.2-38.el8","servicemesh-grafana-0:6.4.3-11.el8","atomic-openshift-0:3.10.181-1.git.0.3ab4b3d.el7","openshift-0:4.1.20-201910101746.git.0.a80aad5.el8","servicemesh-cni-0:1.1.4-2.el8","servicemesh-0:1.0.2-3.el8","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","servicemesh-prometheus-0:2.7.2-36.el8","atomic-openshift-0:3.11.154-1.git.0.7a097ad.el7","servicemesh-prometheus-0:2.7.2-25.el8","servicemesh-cni-0:1.0.11-1.el8","servicemesh-operator-0:1.1.4-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16942","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758187","bugzilla_description":"CVE-2019-16942 jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16943","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758191","bugzilla_description":"CVE-2019-16943 jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16943.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14844","severity":"important","public_date":"2019-09-26T00:00:00Z","advisories":[],"bugzilla":"1753589","bugzilla_description":"CVE-2019-14844 krb5: reversed strlcpy() allows client to crash the KDC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14844.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-14850","severity":"low","public_date":"2019-09-20T00:00:00Z","advisories":["RHSA-2020:1167"],"bugzilla":"1757258","bugzilla_description":"CVE-2019-14850 nbdkit: denial of service due to premature opening of back-end connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406","affected_packages":["nbdkit-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14850.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-14893","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758182","bugzilla_description":"CVE-2019-14893 jackson-databind: Serialization gadgets in classes of the xalan package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-17053","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1758242","bugzilla_description":"CVE-2019-17053 kernel: unprivileged users able to create RAW sockets in AF_IEEE802154 network protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-17055","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0790","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1758248","bugzilla_description":"CVE-2019-17055 kernel: unprivileged users able to create RAW sockets in AF_ISDN network protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:2.6.32-754.28.1.el6","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17055.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-14892","severity":"moderate","public_date":"2019-09-19T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758171","bugzilla_description":"CVE-2019-14892 jackson-databind: Serialization gadgets in classes of the commons-configuration package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14892.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-11251","severity":"moderate","public_date":"2019-09-18T00:00:00Z","advisories":["RHSA-2019:3811","RHSA-2019:3266","RHSA-2019:3267","RHSA-2019:3905"],"bugzilla":"1753495","bugzilla_description":"CVE-2019-11251 kubernetes: `kubectl cp` allows for arbitrary file write via double symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["openshift4/ose-cli:v4.1.21-201910230924","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","atomic-openshift-0:3.11.154-1.git.0.7a097ad.el7","openshift-0:4.1.21-201910220952.git.0.493dbf6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-14821","severity":"important","public_date":"2019-09-17T17:00:00Z","advisories":["RHSA-2020:2851","RHSA-2019:4256","RHSA-2019:4154","RHSA-2020:0027","RHSA-2019:3978","RHSA-2019:3979","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1746708","bugzilla_description":"CVE-2019-14821 Kernel: KVM: OOB memory access via mmio ring buffer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.7.1.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:2.6.32-754.25.1.el6","kernel-rt-0:3.10.0-1062.7.1.rt56.1030.el7","kernel-alt-0:4.14.0-115.16.1.el7a","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14821.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-14826","severity":"low","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1746944","bugzilla_description":"CVE-2019-14826 ipa: Session not terminated after logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14826.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"1.8"},{"CVE":"CVE-2019-14835","severity":"important","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2019:2854","RHSA-2019:2865","RHSA-2019:2864","RHSA-2019:2863","RHSA-2019:2830","RHSA-2019:2862","RHBA-2019:3151","RHSA-2019:2869","RHSA-2019:2924","RHSA-2019:2901","RHSA-2019:2900","RHSA-2019:2867","RHSA-2019:2889","RHSA-2019:2899","RHSA-2019:2866","RHSA-2019:2829","RHSA-2019:2828","RHSA-2019:2827"],"bugzilla":"1750727","bugzilla_description":"CVE-2019-14835 kernel: vhost-net: guest to host kernel escape during migration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["redhat-coreos-42.80.20191022.0","redhat-virtualization-host-0:4.2-20190919.0.el7_6","kernel-0:2.6.32-754.23.1.el6","kernel-rt-0:3.10.0-1062.1.2.rt56.1025.el7","kernel-0:3.10.0-1062.1.2.el7","kernel-0:3.10.0-862.41.2.el7","kernel-0:3.10.0-693.59.1.el7","kernel-0:3.10.0-514.69.1.el7","kernel-0:3.10.0-327.82.1.el7","kernel-0:4.18.0-80.11.2.el8_0","kernel-0:2.6.32-504.81.2.el6","kernel-0:2.6.32-431.96.2.el6","kernel-0:3.10.0-957.35.2.el7","kernel-alt-0:4.14.0-115.13.1.el7a","kernel-rt-0:4.18.0-80.11.2.rt9.157.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14835.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-14843","severity":"important","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2974","RHSA-2019:2973","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4045","RHSA-2019:4040","RHSA-2019:4041"],"bugzilla":"1752980","bugzilla_description":"CVE-2019-14843 wildfly-security-manager: security manager authorization bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-592","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","eap7-wildfly-elytron-0:1.6.4-3.Final_redhat_00002.1.el7eap","eap7-wildfly-elytron-0:1.6.4-3.Final_redhat_00002.1.el8eap","eap7-wildfly-elytron-0:1.6.4-3.Final_redhat_00002.1.el6eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17267","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758167","bugzilla_description":"CVE-2019-17267 jackson-databind: Serialization gadgets in classes of the ehcache package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17267.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16335","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0729","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755831","bugzilla_description":"CVE-2019-16335 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16335.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14540","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755849","bugzilla_description":"CVE-2019-14540 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14540.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14822","severity":"moderate","public_date":"2019-09-13T07:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1880","RHSA-2020:3978"],"bugzilla":"1717958","bugzilla_description":"CVE-2019-14822 ibus: missing authorization allows local attacker to access the input bus of another user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["ibus-0:1.5.19-11.el8","ibus-0:1.5.17-11.el7","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14822.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-15031","severity":"moderate","public_date":"2019-09-13T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2020:1372","RHBA-2020:1450"],"bugzilla":"1760063","bugzilla_description":"CVE-2019-15031 kernel: powerpc: local user can read vector registers of other users' processes via an interrupt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","redhat-coreos-42.81.20200407.0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15031.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-5481","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792"],"bugzilla":"1749402","bugzilla_description":"CVE-2019-5481 curl: double free due to subsequent call of realloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5481.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2019-5482","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792","RHSA-2020:3916"],"bugzilla":"1749652","bugzilla_description":"CVE-2019-5482 curl: heap buffer overflow in function tftp_receive_packet()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-59.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5482.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-1547","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752090","bugzilla_description":"CVE-2019-1547 openssl: side-channel weak encryption vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-602","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-1549","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752095","bugzilla_description":"CVE-2019-1549 openssl: information disclosure in fork()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-1563","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752100","bugzilla_description":"CVE-2019-1563 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-19077","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775724","bugzilla_description":"CVE-2019-19077 kernel: memory leak in bnxt_re_create_srq function in drivers/infiniband/hw/bnxt_re/ib_verbs.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19077.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-16234","severity":"low","public_date":"2019-09-09T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1760441","bugzilla_description":"CVE-2019-16234 kernel: null pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16234.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-15030","severity":"moderate","public_date":"2019-09-06T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2020:1372","RHBA-2020:1450"],"bugzilla":"1759313","bugzilla_description":"CVE-2019-15030 kernel: powerpc: local user can read vector registers of other users' processes via a Facility Unavailable exception","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","redhat-coreos-42.81.20200407.0","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15030.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-15916","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:0740","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1750813","bugzilla_description":"CVE-2019-15916 kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15916.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15903","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3193"],"bugzilla":"1752592","bugzilla_description":"CVE-2019-15903 expat: heap-based buffer over-read via crafted XML input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-125)","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","thunderbird-0:68.2.0-1.el7_7","expat-0:2.1.0-12.el7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15903.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15921","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1760958","bugzilla_description":"CVE-2019-15921 kernel: memory leak in genl_register_family() in net/netlink/genetlink.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15921.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-15924","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1763869","bugzilla_description":"CVE-2019-15924 kernel: null pointer dereference in drivers/net/ethernet/intel/fm10k/fm10k_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15924.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15718","severity":"moderate","public_date":"2019-09-03T15:00:00Z","advisories":["RHSA-2019:3941","RHSA-2019:3592","RHBA-2019:3303"],"bugzilla":"1746057","bugzilla_description":"CVE-2019-15718 systemd: systemd-resolved allows unprivileged users to configure DNS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["redhat-coreos-42.81.20191107.0","systemd-0:239-18.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15718.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-10197","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2020:1084","RHSA-2020:1878","RHSA-2019:4023","RHSA-2019:3253"],"bugzilla":"1746225","bugzilla_description":"CVE-2019-10197 samba: Combination of parameters and permissions can allow user to escape from the share path definition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.9.8-110.el6rhs","samba-0:4.10.4-10.el7","samba-0:4.11.2-13.el8","samba-0:4.9.8-109.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-8130","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":[],"bugzilla":"1816270","bugzilla_description":"CVE-2020-8130 rake: OS Command Injection via egrep in Rake::FileList","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8130.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-8666","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876630","bugzilla_description":"CVE-2019-8666 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8666.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8671","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876632","bugzilla_description":"CVE-2019-8671 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8671.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8672","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876634","bugzilla_description":"CVE-2019-8672 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8673","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876643","bugzilla_description":"CVE-2019-8673 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8676","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876644","bugzilla_description":"CVE-2019-8676 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8676.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8677","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876645","bugzilla_description":"CVE-2019-8677 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8677.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8679","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876647","bugzilla_description":"CVE-2019-8679 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8679.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8681","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876650","bugzilla_description":"CVE-2019-8681 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8681.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8686","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876653","bugzilla_description":"CVE-2019-8686 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8686.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8687","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876655","bugzilla_description":"CVE-2019-8687 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8687.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8689","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876657","bugzilla_description":"CVE-2019-8689 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8689.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8690","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876664","bugzilla_description":"CVE-2019-8690 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8690.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-14814","severity":"moderate","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1744130","bugzilla_description":"CVE-2019-14814 kernel: heap overflow in mwifiex_set_uap_rates() function of Marvell Wifi Driver leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-14815","severity":"moderate","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHSA-2020:1070","RHBA-2020:0460","RHSA-2020:1016"],"bugzilla":"1744137","bugzilla_description":"CVE-2019-14815 kernel: heap-overflow in mwifiex_set_wmm_params() function of Marvell WiFi driver leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-1127.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-14816","severity":"important","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0661","RHSA-2020:1266","RHSA-2020:0374","RHSA-2020:1353","RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:1347","RHSA-2020:0653","RHSA-2020:0664","RHSA-2020:0204"],"bugzilla":"1744149","bugzilla_description":"CVE-2019-14816 kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.65.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-514.73.1.el7","kernel-rt-1:3.10.0-693.65.1.rt56.663.el6rt","kernel-0:3.10.0-957.46.1.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-862.51.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14816.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-10219","severity":"moderate","public_date":"2019-08-28T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445"],"bugzilla":"1738673","bugzilla_description":"CVE-2019-10219 hibernate-validator: safeHTML validator allows XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10219.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-15666","severity":"moderate","public_date":"2019-08-27T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1747334","bugzilla_description":"CVE-2019-15666 kernel: out-of-bounds array access in __xfrm_policy_unlink","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15666.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-5094","severity":"moderate","public_date":"2019-08-27T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4011","RHSA-2020:1913"],"bugzilla":"1768555","bugzilla_description":"CVE-2019-5094 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["redhat-coreos-43.82.202007300301.0","e2fsprogs-0:1.42.9-19.el7","e2fsprogs-0:1.45.4-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5094.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-14867","severity":"important","public_date":"2019-08-26T00:00:00Z","advisories":["RHBA-2019:4268","RHSA-2020:0378","RHSA-2020:1269"],"bugzilla":"1766920","bugzilla_description":"CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-94|CWE-400)","affected_packages":["idm:DL1-8010020191127093529.6573b795","ipa-0:4.6.5-11.el7_7.4","idm:DL1-8000020200217171713.2874843d"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14867.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-15090","severity":"low","public_date":"2019-08-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1743526","bugzilla_description":"CVE-2019-15090 kernel: An out-of-bounds read in drivers/scsi/qedi/qedi_dbg.c leading to crash or information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15090.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-15099","severity":"low","public_date":"2019-08-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1493","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1743560","bugzilla_description":"CVE-2019-15099 kernel: a NULL pointer dereference in drivers/net/wireless/ath/ath10k/usb.c leads to a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15099.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-10225","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743073","bugzilla_description":"CVE-2019-10225 atomic-openshift: The basic-user RBAC role allow leaking of GlusterFS StorageClass restuserkey value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-15224","severity":"important","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743940","bugzilla_description":"CVE-2019-15224 rubygem-rest-client: code-execution backdoor insterted by third party","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-348","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-20908","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3218","RHSA-2020:3219","RHSA-2020:3228"],"bugzilla":"1852942","bugzilla_description":"CVE-2019-20908 kernel: lockdown: bypass through ACPI write via efivar_ssdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-193.14.3.rt13.67.el8_2","kernel-0:4.18.0-80.27.2.el8_0","kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.14.3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20908.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-15719","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":["RHBA-2019:3674","RHBA-2019:3303"],"bugzilla":"1853350","bugzilla_description":"CVE-2020-15719 openldap: Certificate validation incorrectly matches name against CN-ID","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":["openldap-0:2.4.46-10.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15719.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-20969","severity":"important","public_date":"2019-08-16T00:00:00Z","advisories":["RHSA-2019:2964","RHSA-2019:2798","RHSA-2019:3757","RHSA-2019:4061","RHSA-2019:3758"],"bugzilla":"1746672","bugzilla_description":"CVE-2018-20969 patch: do_ed_script in pch.c does not block strings beginning with a ! character","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["patch-0:2.7.6-9.el8_0","patch-0:2.7.1-11.el7_6","patch-0:2.7.1-11.el7_5","patch-0:2.7.1-11.el7_4","patch-0:2.7.1-12.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20969.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10086","severity":"important","public_date":"2019-08-15T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2321","RHSA-2020:3587","RHSA-2020:2333","RHSA-2020:2740","RHSA-2020:1454","RHSA-2020:0057","RHSA-2019:4317","RHSA-2020:0194","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:0899","RHSA-2020:0811","RHSA-2020:1308","RHSA-2020:0951","RHBA-2020:0496","RHSA-2020:0805","RHSA-2020:0804","RHSA-2020:2619","RHSA-2020:0806","RHSA-2020:3192"],"bugzilla":"1767483","bugzilla_description":"CVE-2019-10086 apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-java-common-apache-commons-beanutils-0:1.8.3-14.14.el6","rh-maven35-apache-commons-beanutils-0:1.9.3-2.3.el7","rh-java-common-apache-commons-beanutils-0:1.8.3-14.15.el7","apache-commons-beanutils-0:1.8.3-15.el7_7","candlepin-0:2.5.22-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9513","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:3041","RHSA-2019:2692","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1735741","bugzilla_description":"CVE-2019-9513 HTTP/2: flood using PRIORITY frames results in excessive resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","rh-nginx112-nginx-1:1.12.1-3.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","kiali-0:v1.0.6.redhat1-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9515","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:2861","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3892","RHSA-2019:2766","RHSA-2020:2067","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4352","RHSA-2019:4045","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2020:3196","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2925"],"bugzilla":"1735745","bugzilla_description":"CVE-2019-9515 HTTP/2: flood using SETTINGS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","nodejs:10-8000020190911085529.f8e95b4e","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","skydive-0:0.20.5-2.el7ost","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9518","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:3892","RHSA-2020:0727","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:3196","RHSA-2019:4352","RHSA-2019:2955","RHSA-2019:2939","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2925"],"bugzilla":"1735749","bugzilla_description":"CVE-2019-9518 HTTP/2: flood using empty frames results in excessive resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nodejs:10-8000020190911085529.f8e95b4e","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11250","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:4087","RHSA-2019:4052"],"bugzilla":"1740434","bugzilla_description":"CVE-2019-11250 kubernetes: Bearer tokens written to logs at high verbosity levels (>= 7)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["atomic-openshift-0:3.11.157-1.git.0.dfe38da.el7","openshift-0:4.1.27-201912021146.git.0.a40116f.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11250.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-9511","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3932","RHSA-2019:2799","RHSA-2020:2067","RHSA-2019:2775","RHSA-2019:3041","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4021","RHSA-2019:2692","RHSA-2020:1445","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2020:3192","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741860","bugzilla_description":"CVE-2019-9511 HTTP/2: large amount of data requests leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","kiali-0:v1.0.6.redhat1-1.el7","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9516","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741864","bugzilla_description":"CVE-2019-9516 HTTP/2: 0-length headers lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9517","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:2893","RHSA-2019:3932","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2955","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741868","bugzilla_description":"CVE-2019-9517 HTTP/2: request for large response leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","httpd:2.4-8000020190829150747.f8e95b4e","nodejs:10-8000020190911085529.f8e95b4e","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9517.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15058","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":[],"bugzilla":"1816324","bugzilla_description":"CVE-2019-15058 stbi: heap-based buffer overflow in stbi__tga_load function in stb_image.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15058.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2019-9506","severity":"important","public_date":"2019-08-10T09:00:00Z","advisories":["RHSA-2019:3217","RHSA-2019:3089","RHSA-2020:1460","RHSA-2019:2975","RHSA-2019:3076","RHSA-2019:3055","RHSA-2019:3187","RHSA-2019:3220","RHSA-2019:3231","RHSA-2019:3165","RHSA-2020:0204","RHSA-2019:3218","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1727857","bugzilla_description":"CVE-2019-9506 hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["kernel-alt-0:4.14.0-115.14.1.el7a","kernel-0:3.10.0-957.38.1.el7","kernel-0:3.10.0-862.43.1.el7","kernel-0:3.10.0-514.70.1.el7","kernel-0:3.10.0-693.60.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","kernel-rt-1:3.10.0-693.60.1.rt56.654.el6rt","redhat-coreos-42.81.20191107.0","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:3.10.0-327.86.1.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.0"},{"CVE":"CVE-2019-14825","severity":"low","public_date":"2019-08-09T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1739485","bugzilla_description":"CVE-2019-14825 katello: registry credentials are captured in plain text during repository discovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["katello-0:3.12.0-2.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14825.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2019-10744","severity":"important","public_date":"2019-08-09T00:00:00Z","advisories":["RHSA-2020:2819","RHSA-2019:3024","RHSA-2020:2362"],"bugzilla":"1739497","bugzilla_description":"CVE-2019-10744 nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ovirt-web-ui-0:1.6.0-1.el7ev","servicemesh-grafana-0:6.2.2-36.el8","jaeger-0:v1.13.1.redhat7-1.el7","distributed-tracing/jaeger-query-rhel7:1.17.2-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10744.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2019-10223","severity":"moderate","public_date":"2019-08-09T00:00:00Z","advisories":[],"bugzilla":"1740431","bugzilla_description":"CVE-2019-10223 kube-state-metrics: annotations exposed as metrics in combination with `kubectl` can allow for exposure of secrets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10223.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-11248","severity":"moderate","public_date":"2019-08-07T00:00:00Z","advisories":[],"bugzilla":"1738368","bugzilla_description":"CVE-2019-11248 kubernetes: /debug/pprof endpoint exposed on kubelet's healthz port","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11248.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-1125","severity":"moderate","public_date":"2019-08-06T17:00:00Z","advisories":["RHSA-2019:2476","RHSA-2019:2696","RHSA-2019:2695","RHSA-2019:2473","RHSA-2019:2975","RHSA-2019:2600","RHSA-2019:2411","RHSA-2019:2730","RHSA-2019:3220","RHSA-2019:3011","RHBA-2019:3151","RHSA-2019:2900","RHSA-2019:2405","RHSA-2019:2899","RHSA-2019:2609","RHBA-2019:3248"],"bugzilla":"1724389","bugzilla_description":"CVE-2019-1125 kernel: hw: Spectre SWAPGS gadget vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":["kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0","redhat-virtualization-host-0:4.2-20191022.0.el7_6","kernel-0:3.10.0-957.38.1.el7","kernel-0:3.10.0-862.43.1.el7","redhat-coreos-42.80.20191022.0","kernel-0:2.6.32-431.96.1.el6","kernel-0:2.6.32-754.18.2.el6","kernel-0:4.18.0-80.7.2.el8_0","kernel-0:2.6.32-504.80.2.el6","kernel-0:3.10.0-514.69.1.el7","kernel-0:3.10.0-327.82.1.el7","kernel-rt-0:3.10.0-1062.1.1.rt56.1024.el7","kernel-0:3.10.0-693.58.1.el7","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:3.10.0-1062.1.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-19527","severity":"moderate","public_date":"2019-08-06T00:00:00Z","advisories":["RHSA-2020:4236","RHSA-2020:1378","RHSA-2020:3221","RHSA-2020:1372","RHSA-2020:3220","RHBA-2020:1450"],"bugzilla":"1783498","bugzilla_description":"CVE-2019-19527 kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-147.8.1.rt24.101.el8_1","kernel-0:3.10.0-1062.36.1.el7","kernel-0:4.18.0-147.8.1.el8_1","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","redhat-coreos-42.81.20200407.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19527.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-11247","severity":"moderate","public_date":"2019-08-05T00:00:00Z","advisories":["RHBA-2019:2816","RHSA-2019:2769","RHSA-2019:2504","RHSA-2019:2690"],"bugzilla":"1732192","bugzilla_description":"CVE-2019-11247 kubernetes: API server allows access to cluster-scoped custom resources as if resources were namespaced","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["openshift-0:4.1.10-201908060758.git.0.d81afa6.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","atomic-openshift-0:3.11.146-1.git.0.4aab273.el7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11247.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-11249","severity":"moderate","public_date":"2019-08-05T00:00:00Z","advisories":["RHSA-2019:3239","RHSA-2019:3811","RHBA-2019:2794","RHBA-2019:2816"],"bugzilla":"1737651","bugzilla_description":"CVE-2019-11249 kubernetes: Incomplete fixes for CVE-2019-1002101 and CVE-2019-11246, kubectl cp potential directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["atomic-openshift-0:3.10.181-1.git.0.3ab4b3d.el7","openshift-0:4.1.16-201909090609.git.0.2f97059.el8","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","atomic-openshift-0:3.11.146-1.git.0.4aab273.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11249.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-16167","severity":"low","public_date":"2019-08-03T00:00:00Z","advisories":[],"bugzilla":"1768970","bugzilla_description":"CVE-2019-16167 sysstat: memory corruption due to an integer overflow in remap_struct in sa_common.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16167.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15221","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1070","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1749974","bugzilla_description":"CVE-2019-15221 kernel: Null pointer dereference in the sound/usb/line6/pcm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","kernel-rt-0:3.10.0-1127.rt56.1093.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15221.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15223","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1749976","bugzilla_description":"CVE-2019-15223 kernel: Null pointer dereference in the sound/usb/line6/driver.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15223.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-14439","severity":"moderate","public_date":"2019-07-30T00:00:00Z","advisories":["RHSA-2019:3200","RHSA-2020:0983"],"bugzilla":"1752962","bugzilla_description":"CVE-2019-14439 jackson-databind: Polymorphic typing issue related to logback/JNDI","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14439.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-10207","severity":"moderate","public_date":"2019-07-29T13:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1733874","bugzilla_description":"CVE-2019-10207 kernel: null-pointer dereference in hci_uart_set_flow_control","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-13638","severity":"important","public_date":"2019-07-29T00:00:00Z","advisories":["RHSA-2019:2964","RHSA-2019:2798","RHSA-2019:3757","RHSA-2019:4061","RHSA-2019:3758"],"bugzilla":"1733916","bugzilla_description":"CVE-2019-13638 patch: OS shell command injection when processing crafted patch files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["patch-0:2.7.6-9.el8_0","patch-0:2.7.1-11.el7_6","patch-0:2.7.1-11.el7_5","patch-0:2.7.1-11.el7_4","patch-0:2.7.1-12.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13638.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-20633","severity":"low","public_date":"2019-07-28T00:00:00Z","advisories":[],"bugzilla":"1818934","bugzilla_description":"CVE-2019-20633 patch: double free in another_hunk function in pch.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20633.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13057","severity":"moderate","public_date":"2019-07-25T00:00:00Z","advisories":[],"bugzilla":"1730472","bugzilla_description":"CVE-2019-13057 openldap: Information disclosure issue in slapd component","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13057.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10184","severity":"low","public_date":"2019-07-24T00:00:00Z","advisories":["RHSA-2019:3045","RHSA-2020:0727","RHSA-2019:3046","RHSA-2019:2935","RHSA-2019:2998","RHSA-2019:3044","RHSA-2019:2938","RHSA-2020:0983","RHSA-2019:2937","RHSA-2019:3050","RHSA-2019:2936"],"bugzilla":"1713068","bugzilla_description":"CVE-2019-10184 undertow: Information leak in requests for directories without trailing slashes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10184.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-13565","severity":"moderate","public_date":"2019-07-24T00:00:00Z","advisories":[],"bugzilla":"1730477","bugzilla_description":"CVE-2019-13565 openldap: ACL restrictions bypass due to sasl_ssf value being set permanently","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13565.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-13636","severity":"moderate","public_date":"2019-07-24T00:00:00Z","advisories":["RHSA-2020:1852"],"bugzilla":"1732781","bugzilla_description":"CVE-2019-13636 patch: the following of symlinks in inp.c and util.c is mishandled in cases other than input files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["patch-0:2.7.6-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-14379","severity":"important","public_date":"2019-07-23T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:2743","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2020:0727","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1737517","bugzilla_description":"CVE-2019-14379 jackson-databind: default typing mishandling leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","rh-maven35-jackson-databind-0:2.7.6-2.7.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-13648","severity":"moderate","public_date":"2019-07-19T00:00:00Z","advisories":["RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:3019"],"bugzilla":"1735630","bugzilla_description":"CVE-2019-13648 kernel: denial of service in arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c via sigreturn() system call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-1062.30.1.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1127.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13648.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-13272","severity":"important","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2809","RHBA-2019:3151","RHSA-2019:2411","RHSA-2019:2405"],"bugzilla":"1730895","bugzilla_description":"CVE-2019-13272 kernel: broken permission and object lifetime handling for PTRACE_TRACEME","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":["kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.7.2.el8_0","kernel-alt-0:4.14.0-115.12.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13272.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10638","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1729931","bugzilla_description":"CVE-2019-10638 Kernel: net: weak IP ID generation leads to remote device tracking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331->CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-10639","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:2522","RHBA-2020:3180","RHSA-2020:1070","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1729933","bugzilla_description":"CVE-2019-10639 Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-193.el8","kernel-rt-0:3.10.0-1127.rt56.1093.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-1010305","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:1686","RHBA-2020:3180","RHSA-2020:3848"],"bugzilla":"1730568","bugzilla_description":"CVE-2019-1010305 libmspack: buffer overflow in function chmd_read_headers()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["libmspack-0:0.5-0.8.alpha.el7","libmspack-0:0.7-0.3.alpha.el8.4","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010305.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-10198","severity":"moderate","public_date":"2019-07-12T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1729130","bugzilla_description":"CVE-2019-10198 foreman: authorization bypasses in foreman-tasks leading to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tfm-rubygem-foreman-tasks-0:0.15.11.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10200","severity":"moderate","public_date":"2019-07-12T00:00:00Z","advisories":[],"bugzilla":"1730161","bugzilla_description":"CVE-2019-10200 openshift: Users with permission to schedule pods on master nodes can access credentials for AWS IAM roles","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10200.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-10213","severity":"moderate","public_date":"2019-07-12T00:00:00Z","advisories":["RHSA-2019:4088","RHSA-2019:2791","RHSA-2019:4082"],"bugzilla":"1734615","bugzilla_description":"CVE-2019-10213 openshift: Secret data written to pod logs when operator set at Debug level or higher","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["openshift4/ose-console-operator:v4.1.16-201909100604","openshift4/ose-cluster-authentication-operator:v4.1.26-201911260202","openshift4/ose-cluster-config-operator:v4.1.26-201911260202","openshift4/ose-cluster-openshift-apiserver-operator:v4.1.27-201912030019","openshift4/ose-cluster-kube-apiserver-operator:v4.1.26-201911260202"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10213.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-10176","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":["RHSA-2019:2792","RHSA-2019:4053","RHBA-2019:2922"],"bugzilla":"1712569","bugzilla_description":"CVE-2019-10176 atomic-openshift: CSRF tokens not refreshing while user is logged in and are exposed in the URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":["openshift4/ose-console:v4.1.16-201909100604","openshift3/ose-console:v3.11.157-1","openshift4/ose-pod:v4.2.0-201910101614"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-3889","severity":"moderate","public_date":"2019-07-08T00:00:00Z","advisories":["RHSA-2020:0795","RHSA-2019:3722","RHSA-2019:3770"],"bugzilla":"1693499","bugzilla_description":"CVE-2019-3889 atomic-openshift: reflected XSS in authentication flow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["openshift4/ose-hypershift:v4.1.22-201910291109","openshift4/ose-oauth-server-rhel7:v4.2.4-201911050122","atomic-openshift-0:3.11.188-1.git.0.db0eaa8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3889.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2019-13233","severity":"moderate","public_date":"2019-07-04T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1727756","bugzilla_description":"CVE-2019-13233 kernel: use-after-free in arch/x86/lib/insn-eval.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13233.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2019-10137","severity":"important","public_date":"2019-07-01T00:00:00Z","advisories":["RHSA-2019:1663"],"bugzilla":"1702604","bugzilla_description":"CVE-2019-10137 spacewalk-proxy: Path traversal in proxy authentication cache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["spacewalk-proxy-0:2.5.0-8.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-10136","severity":"low","public_date":"2019-07-01T00:00:00Z","advisories":["RHSA-2019:1661"],"bugzilla":"1708696","bugzilla_description":"CVE-2019-10136 spacewalk: Insecure computation of authentication signatures during user authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["spacewalk-backend-0:2.5.3-177.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-13164","severity":"low","public_date":"2019-06-28T00:00:00Z","advisories":[],"bugzilla":"1722559","bugzilla_description":"CVE-2019-13164 Qemu: qemu-bridge-helper ACL can be bypassed when names are too long","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-12817","severity":"important","public_date":"2019-06-24T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2703"],"bugzilla":"1720616","bugzilla_description":"CVE-2019-12817 kernel: ppc: unrelated processes being able to read/write to each other's virtual memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->(CWE-125|CWE-787)","affected_packages":["redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12817.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-20843","severity":"moderate","public_date":"2019-06-24T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1723723","bugzilla_description":"CVE-2018-20843 expat: large number of colons in input makes parser consume high amount of resources, leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["expat-0:2.1.0-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11246","severity":"moderate","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:1633","RHSA-2019:1632","RHSA-2019:1852"],"bugzilla":"1721704","bugzilla_description":"CVE-2019-11246 kubernetes: Incomplete fix for CVE-2019-1002101 allows for arbitrary file write via `kubectl cp`","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["atomic-openshift-0:3.9.89-1.git.0.9454f2a.el7","atomic-openshift-0:3.10.149-1.git.0.05de590.el7","atomic-openshift-0:3.11.117-1.git.0.14e54a3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-10072","severity":"moderate","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3929"],"bugzilla":"1723708","bugzilla_description":"CVE-2019-10072 tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10072.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-12384","severity":"important","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:1820","RHSA-2019:3200","RHSA-2019:2720","RHSA-2019:4352","RHSA-2019:3297","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1725807","bugzilla_description":"CVE-2019-12384 jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","pki-deps:10.6-8000020190807021343.f8e95b4e","rh-maven35-jackson-databind-0:2.7.6-2.6.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12384.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-10166","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720114","bugzilla_description":"CVE-2019-10166 libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10166.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10161","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1578","RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720115","bugzilla_description":"CVE-2019-10161 libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","libvirt-0:0.10.2-64.el6_10.2","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10167","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720117","bugzilla_description":"CVE-2019-10167 libvirt: arbitrary command execution via virConnectGetDomainCapabilities API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-284|CWE-250)","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10168","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720118","bugzilla_description":"CVE-2019-10168 libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-284|CWE-250)","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10168.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-12435","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1711816","bugzilla_description":"CVE-2019-12435 samba: AD DC Denial of Service in DNS management server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-12436","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1711837","bugzilla_description":"CVE-2019-12436 samba: NULL pointer dereference in Samba LDAP server leading to crash and Dos","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-11477","severity":"important","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719123","bugzilla_description":"CVE-2019-11477 Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11478","severity":"moderate","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719128","bugzilla_description":"CVE-2019-11478 Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11478.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11479","severity":"moderate","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719129","bugzilla_description":"CVE-2019-11479 kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11479.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-12749","severity":"important","public_date":"2019-06-11T00:00:00Z","advisories":["RHSA-2019:2870","RHSA-2020:4032","RHSA-2019:2868","RHSA-2019:3707","RHBA-2019:3303","RHSA-2019:1726"],"bugzilla":"1719344","bugzilla_description":"CVE-2019-12749 dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["dbus-1:1.2.24-9.el6_6","dbus-1:1.12.8-9.el8","redhat-coreos-42.81.20191107.0","dbus-1:1.10.24-15.el7","dbus-1:1.2.24-11.el6_10","dbus-1:1.2.24-9.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12749.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-12387","severity":"moderate","public_date":"2019-06-10T00:00:00Z","advisories":["RHSA-2020:1091","RHSA-2019:3172"],"bugzilla":"1719501","bugzilla_description":"CVE-2019-12387 python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python-twisted-web-0:12.1.0-6.el7","python-twisted-0:16.4.1-12.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10165","severity":"low","public_date":"2019-06-07T00:00:00Z","advisories":["RHSA-2019:1591"],"bugzilla":"1719092","bugzilla_description":"CVE-2019-10165 openshift: OAuth access tokens written in plaintext to API server audit logs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["openshift4/ose-cluster-openshift-apiserver-operator:v4.1.3-201906191409","openshift4/ose-cluster-kube-apiserver-operator:v4.1.3-201906191409"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.3"},{"CVE":"CVE-2019-12795","severity":"low","public_date":"2019-06-05T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1726505","bugzilla_description":"CVE-2019-12795 gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["gvfs-0:1.36.2-6.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12795.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-12814","severity":"moderate","public_date":"2019-06-04T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2938","RHSA-2019:2937","RHSA-2019:2804","RHSA-2019:2936"],"bugzilla":"1725795","bugzilla_description":"CVE-2019-12814 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-16871","severity":"moderate","public_date":"2019-06-03T02:23:00Z","advisories":["RHSA-2019:2696","RHBA-2020:3180","RHSA-2019:1891","RHSA-2020:0740","RHSA-2019:1873","RHSA-2019:2730","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1655162","bugzilla_description":"CVE-2018-16871 kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-957.27.2.el7","kernel-0:4.18.0-193.el8","kernel-0:3.10.0-693.58.1.el7","redhat-coreos-43.82.202007300301.0","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16871.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10160","severity":"important","public_date":"2019-06-03T00:00:00Z","advisories":["RHSA-2019:1587","RHSA-2019:1700","RHSA-2019:2437"],"bugzilla":"1718388","bugzilla_description":"CVE-2019-10160 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python27-python-0:2.7.16-6.el6","python27-python-0:2.7.16-6.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","python-0:2.7.5-80.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-10126","severity":"important","public_date":"2019-05-31T00:00:00Z","advisories":["RHSA-2020:2289","RHSA-2019:3089","RHSA-2020:0174","RHSA-2019:3076","RHSA-2019:3055","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1716992","bugzilla_description":"CVE-2019-10126 kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10126.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-3846","severity":"important","public_date":"2019-05-30T12:53:00Z","advisories":["RHSA-2020:2289","RHSA-2019:3089","RHBA-2019:3151","RHSA-2020:0174","RHSA-2019:2741","RHSA-2019:2703","RHSA-2019:3076","RHSA-2019:3055"],"bugzilla":"1713059","bugzilla_description":"CVE-2019-3846 kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3846.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-10150","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHSA-2019:3007","RHSA-2019:3811","RHSA-2019:2989","RHSA-2019:3143"],"bugzilla":"1713433","bugzilla_description":"CVE-2019-10150 atomic-openshift: OpenShift builds don't verify SSH Host Keys for the git repository","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","atomic-openshift-0:3.10.175-1.git.0.f9f0e81.el7","openshift4/ose-docker-builder:v4.1.20-201910102034"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10150.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2019-12447","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728562","bugzilla_description":"CVE-2019-12447 gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-12448","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728564","bugzilla_description":"CVE-2019-12448 gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-364","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12448.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-12449","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728567","bugzilla_description":"CVE-2019-12449 gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12449.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-12382","severity":"moderate","public_date":"2019-05-24T00:00:00Z","advisories":["RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303"],"bugzilla":"1715554","bugzilla_description":"CVE-2019-12382 kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253->CWE-476","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12382.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-11245","severity":"moderate","public_date":"2019-05-24T00:00:00Z","advisories":[],"bugzilla":"1715726","bugzilla_description":"CVE-2019-11245 kubernetes: container uid changes to root after first restart","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11245.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.9"},{"CVE":"CVE-2019-12450","severity":"moderate","public_date":"2019-05-23T00:00:00Z","advisories":["RHSA-2019:3530","RHSA-2020:3978","RHBA-2019:3303"],"bugzilla":"1719141","bugzilla_description":"CVE-2019-12450 glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["glib2-0:2.56.1-7.el7","redhat-coreos-42.81.20191107.0","glib2-0:2.56.4-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.6"},{"CVE":"CVE-2019-5436","severity":"low","public_date":"2019-05-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1020","RHBA-2020:1539","RHSA-2020:1792","RHSA-2019:1543","RHSA-2020:2505","RHBA-2020:1540"],"bugzilla":"1710620","bugzilla_description":"CVE-2019-5436 curl: TFTP receive heap buffer overflow in tftp_receive_packet() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","curl-0:7.29.0-54.el7_7.3","redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-57.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5436.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-6237","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876880","bugzilla_description":"CVE-2019-6237 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6237.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8571","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876881","bugzilla_description":"CVE-2019-8571 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8583","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876882","bugzilla_description":"CVE-2019-8583 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8584","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876883","bugzilla_description":"CVE-2019-8584 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8584.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8586","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876884","bugzilla_description":"CVE-2019-8586 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8587","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876887","bugzilla_description":"CVE-2019-8587 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8587.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8594","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876891","bugzilla_description":"CVE-2019-8594 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8594.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8595","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876892","bugzilla_description":"CVE-2019-8595 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8595.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8596","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876893","bugzilla_description":"CVE-2019-8596 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8597","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876894","bugzilla_description":"CVE-2019-8597 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8601","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876895","bugzilla_description":"CVE-2019-8601 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8607","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876897","bugzilla_description":"CVE-2019-8607 webkitgtk: Out-of-bounds read leading to memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8607.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-8608","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876898","bugzilla_description":"CVE-2019-8608 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8609","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876899","bugzilla_description":"CVE-2019-8609 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8609.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8610","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876900","bugzilla_description":"CVE-2019-8610 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8610.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8615","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877045","bugzilla_description":"CVE-2019-8615 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8615.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8611","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877046","bugzilla_description":"CVE-2019-8611 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8611.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8619","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877047","bugzilla_description":"CVE-2019-8619 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8622","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877048","bugzilla_description":"CVE-2019-8622 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8622.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8623","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877049","bugzilla_description":"CVE-2019-8623 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8623.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10139","severity":"moderate","public_date":"2019-05-17T00:00:00Z","advisories":["RHSA-2019:2433","RHSA-2019:2437"],"bugzilla":"1709829","bugzilla_description":"CVE-2019-10139 cockpit-ovirt: admin and appliance passwords saved in plain text variable file during HE deployment","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","cockpit-ovirt-0:0.13.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-12126","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646781","bugzilla_description":"CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12130","severity":"important","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646784","bugzilla_description":"CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385->CWE-226","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-12127","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1667782","bugzilla_description":"CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11091","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1705312","bugzilla_description":"CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2018-16860","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":[],"bugzilla":"1705877","bugzilla_description":"CVE-2018-16860 samba: S4U2Self with unkeyed checksum","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11085","severity":"important","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:1891","RHBA-2019:3151","RHSA-2019:1873","RHSA-2020:0609","RHSA-2020:0592","RHSA-2019:1971","RHSA-2020:0543","RHSA-2019:1959"],"bugzilla":"1710405","bugzilla_description":"CVE-2019-11085 kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-250","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.64.1.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-862.48.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11085.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-12086","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2020:1454","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3044","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2020:3192","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1713468","bugzilla_description":"CVE-2019-12086 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-11833","severity":"moderate","public_date":"2019-05-11T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1712072","bugzilla_description":"CVE-2019-11833 kernel: fs/ext4/extents.c leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11833.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-11884","severity":"moderate","public_date":"2019-05-10T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1709837","bugzilla_description":"CVE-2019-11884 kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11884.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"6.8"},{"CVE":"CVE-2019-18408","severity":"important","public_date":"2019-05-10T00:00:00Z","advisories":["RHSA-2020:0271","RHSA-2020:0203","RHSA-2020:0246","RHBA-2020:0395"],"bugzilla":"1769979","bugzilla_description":"CVE-2019-18408 libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-8.el8_1","libarchive-0:3.1.2-14.el7_7","libarchive-0:3.3.2-4.el8_0","redhat-coreos-42.81.20200203.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18408.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11810","severity":"moderate","public_date":"2019-05-07T00:00:00Z","advisories":["RHSA-2020:0036","RHSA-2019:3217","RHSA-2019:2029","RHBA-2019:3151","RHSA-2019:1971","RHSA-2019:2736","RHSA-2019:2043","RHSA-2019:1959","RHSA-2019:2837"],"bugzilla":"1709164","bugzilla_description":"CVE-2019-11810 kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.14.1.el7a","kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:2.6.32-754.22.1.el6","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.46.1.el7","kernel-0:3.10.0-957.35.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11810.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-11811","severity":"moderate","public_date":"2019-05-07T00:00:00Z","advisories":["RHSA-2019:1891","RHSA-2020:0036","RHSA-2019:4057","RHSA-2019:4058","RHBA-2019:3151","RHSA-2019:1873","RHSA-2019:1971","RHSA-2019:1959","RHSA-2020:2854"],"bugzilla":"1709180","bugzilla_description":"CVE-2019-11811 kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.61.1.el7","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-862.46.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11811.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-3843","severity":"moderate","public_date":"2019-04-25T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1794"],"bugzilla":"1684607","bugzilla_description":"CVE-2019-3843 systemd: services with DynamicUser can create SUID/SGID binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["systemd-0:239-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-3844","severity":"moderate","public_date":"2019-04-25T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1794"],"bugzilla":"1684610","bugzilla_description":"CVE-2019-3844 systemd: services with DynamicUser can get new privileges and create SGID binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-268","affected_packages":["systemd-0:239-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3844.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-3900","severity":"important","public_date":"2019-04-25T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:1973","RHSA-2019:4058","RHSA-2019:3220","RHSA-2019:2043","RHSA-2019:3967","RHSA-2019:3836","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1698757","bugzilla_description":"CVE-2019-3900 Kernel: vhost_net: infinite loop while receiving packets leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-957.38.1.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:3.10.0-693.61.1.el7","redhat-coreos-42.81.20191107.0","kernel-alt-0:4.14.0-115.10.1.el7a","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.44.2.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2017-18367","severity":"moderate","public_date":"2019-04-24T00:00:00Z","advisories":["RHSA-2019:4090","RHSA-2019:4087","RHSA-2020:2479"],"bugzilla":"1706826","bugzilla_description":"CVE-2017-18367 libseccomp-golang: mishandling of multiple argument rules leading to a bypass of intended access restrictions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["openshift4/ose-hypershift:v4.1.27-201912030019","openshift4/ose-cli:v4.1.27-201912030019","openshift4/ose-node:v4.1.27-201912030019","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift-0:4.1.27-201912021146.git.0.a40116f.el8_0","openshift4/ose-cli-artifacts:v4.1.27-201912030019","openshift4/ose-hyperkube:v4.1.27-201912030019"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-3868","severity":"moderate","public_date":"2019-04-23T16:59:00Z","advisories":["RHSA-2020:2366","RHSA-2019:0856","RHSA-2019:2998","RHSA-2019:1140","RHSA-2019:0868","RHSA-2019:0857"],"bugzilla":"1679144","bugzilla_description":"CVE-2019-3868 keycloak: session hijack using the user access token","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-sso7-keycloak-0:3.4.17-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.17-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3868.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-0223","severity":"moderate","public_date":"2019-04-23T00:00:00Z","advisories":["RHSA-2019:1398","RHSA-2019:2782","RHSA-2019:2781","RHSA-2019:2777","RHSA-2019:1400","RHSA-2019:1399","RHSA-2019:0886","RHSA-2019:2779","RHSA-2019:2778","RHSA-2019:2780"],"bugzilla":"1702439","bugzilla_description":"CVE-2019-0223 qpid-proton: TLS Man in the Middle Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-300","affected_packages":["qpid-proton-0:0.27.0-3.el7","qpid-proton-0:0.27.0-3.el6","qpid-proton-0:0.9-22.el5","qpid-proton-0:0.28.0-1.el8","qpid-proton-0:0.28.0-1.el7","qpid-proton-0:0.16.0-14.el7sat","qpid-proton-0:0.16.0-14.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0223.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-11487","severity":"important","public_date":"2019-04-22T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:3266","RHBA-2019:3151","RHSA-2020:3230","RHSA-2020:0839","RHSA-2020:0174","RHSA-2019:2741","RHSA-2020:0834","RHSA-2019:2703","RHSA-2020:4182"],"bugzilla":"1703063","bugzilla_description":"CVE-2019-11487 kernel: Count overflow in FUSE request leading to use-after-free issues.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.71.2.el7","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-1:3.10.0-693.71.2.rt56.670.el6rt","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:2.6.32-754.35.1.el6","kernel-0:3.10.0-1062.18.1.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-11244","severity":"low","public_date":"2019-04-22T00:00:00Z","advisories":["RHSA-2019:3942","RHSA-2020:0074","RHSA-2020:0020"],"bugzilla":"1703209","bugzilla_description":"CVE-2019-11244 kubernetes: Schema info written with world-writeable permissions when cached","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7","openshift4/ose-cli:v4.1.24-201911120311","openshift-0:4.1.24-201911080309.git.0.c41acf2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11244.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-11243","severity":"low","public_date":"2019-04-22T00:00:00Z","advisories":[],"bugzilla":"1703218","bugzilla_description":"CVE-2019-11243 kubernetes: Authentication information exposure in rest.AnonymousClientConfig()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11243.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-11599","severity":"moderate","public_date":"2019-04-19T00:00:00Z","advisories":["RHSA-2020:0100","RHSA-2020:0179","RHSA-2019:2029","RHSA-2019:2043","RHSA-2020:0103","RHSA-2020:0543","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1705937","bugzilla_description":"CVE-2019-11599 kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-667","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.62.1.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-957.43.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-rt-1:3.10.0-693.62.1.rt56.659.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11599.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-18805","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0740","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1771496","bugzilla_description":"CVE-2019-18805 kernel: integer overflow in tcp_ack_update_rtt in net/ipv4/tcp_input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18805.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-0231","severity":"moderate","public_date":"2019-04-14T00:00:00Z","advisories":["RHSA-2020:1454","RHSA-2020:0899","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1700016","bugzilla_description":"CVE-2019-0231 mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["candlepin-0:2.9.25-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0231.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-0221","severity":"low","public_date":"2019-04-13T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2019:3931","RHSA-2020:0860","RHSA-2019:3929"],"bugzilla":"1713275","bugzilla_description":"CVE-2019-0221 tomcat: XSS in SSI printenv","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0221.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-11459","severity":"low","public_date":"2019-04-13T00:00:00Z","advisories":["RHSA-2020:1074","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1716295","bugzilla_description":"CVE-2019-11459 evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["evince-0:3.28.4-3.el8","evince-0:3.28.2-9.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11459.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-3891","severity":"moderate","public_date":"2019-04-10T15:00:00Z","advisories":["RHSA-2019:1222"],"bugzilla":"1693867","bugzilla_description":"CVE-2019-3891 candlepin: credentials exposure through log files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["candlepin-0:2.5.15-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3891.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-9494","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699141","bugzilla_description":"CVE-2019-9494 wpa_supplicant: SAE Timing-based and Cache-based side-channel attack against WPA3's Dragonfly handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9494.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9495","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699149","bugzilla_description":"CVE-2019-9495 wpa_supplicant: EAP-pwd cache side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9495.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9497","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699164","bugzilla_description":"CVE-2019-9497 wpa_supplicant: EAP-pwd server not checking for reflection attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9497.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-9498","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699168","bugzilla_description":"CVE-2019-9498 wpa_supplicant: EAP-pwd server missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9498.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-9499","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699170","bugzilla_description":"CVE-2019-9499 wpa_supplicant: EAP-pwd peer missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9499.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-0232","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:1712","RHSA-2019:3929"],"bugzilla":"1701056","bugzilla_description":"CVE-2019-0232 tomcat: Remote Code Execution on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0232.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2005-3590","severity":"low","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1706046","bugzilla_description":"CVE-2005-3590 glibc: buffer overflow in getgrouplist function leading to corrupted memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3590.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-11070","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1709289","bugzilla_description":"CVE-2019-11070 webkitgtk: HTTP proxy setting deanonymization information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11070.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-8506","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719199","bugzilla_description":"CVE-2019-8506 webkitgtk: malicous web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8518","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719206","bugzilla_description":"CVE-2019-8518 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8523","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719208","bugzilla_description":"CVE-2019-8523 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8524","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719209","bugzilla_description":"CVE-2019-8524 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8524.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8535","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719210","bugzilla_description":"CVE-2019-8535 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8535.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8536","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719213","bugzilla_description":"CVE-2019-8536 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8536.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8544","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719224","bugzilla_description":"CVE-2019-8544 webkitgtk: malicious crafted web content leads to arbitrary we content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8558","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719231","bugzilla_description":"CVE-2019-8558 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8558.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8559","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719235","bugzilla_description":"CVE-2019-8559 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8559.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8563","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719237","bugzilla_description":"CVE-2019-8563 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-3893","severity":"moderate","public_date":"2019-04-09T03:01:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1696400","bugzilla_description":"CVE-2019-3893 foreman: Recover of plaintext password or token for the compute resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["foreman-0:1.22.0.32-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.9"},{"CVE":"CVE-2019-3870","severity":"moderate","public_date":"2019-04-09T00:00:00Z","advisories":[],"bugzilla":"1689010","bugzilla_description":"CVE-2019-3870 samba: World writable files in Samba AD DC private/ dir","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-3880","severity":"moderate","public_date":"2019-04-09T00:00:00Z","advisories":["RHSA-2019:2099","RHSA-2019:1967","RHSA-2019:1966","RHSA-2019:3582"],"bugzilla":"1691518","bugzilla_description":"CVE-2019-3880 samba: save registry file outside share as unprivileged user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.9.8-105.el7rhgs","samba-0:4.9.1-6.el7","samba-0:4.10.4-1.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3880.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2019-10906","severity":"important","public_date":"2019-04-06T00:00:00Z","advisories":["RHSA-2019:1237","RHSA-2019:1329","RHSA-2019:1152","RHSA-2019:3172"],"bugzilla":"1698839","bugzilla_description":"CVE-2019-10906 python-jinja2: str.format_map allows sandbox escape","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","rh-python36-python-jinja2-0:2.9.6-3.el6","rh-python36-python-jinja2-0:2.9.6-3.el7","rh-python35-python-jinja2-0:2.8.1-2.el7","python-jinja2-0:2.10.1-2.el8_0","rh-python35-python-jinja2-0:2.8.1-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2019-3887","severity":"important","public_date":"2019-04-05T16:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2703"],"bugzilla":"1695044","bugzilla_description":"CVE-2019-3887 Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3887.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-4300","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1695929","bugzilla_description":"CVE-2018-4300 cups: Session cookie generated by the CUPS web interface is easy to guess","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4300.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"7.3"},{"CVE":"CVE-2019-3882","severity":"moderate","public_date":"2019-04-02T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1689426","bugzilla_description":"CVE-2019-3882 kernel: denial of service vector through vfio DMA mappings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-3884","severity":"low","public_date":"2019-03-29T00:00:00Z","advisories":[],"bugzilla":"1693905","bugzilla_description":"CVE-2019-3884 atomic-openshift: cross-namespace owner references can trigger deletions of valid children","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3884.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2018-12183","severity":"moderate","public_date":"2019-03-29T00:00:00Z","advisories":[],"bugzilla":"1694077","bugzilla_description":"CVE-2018-12183 edk2: stack overflow in DxeCore leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12183.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-1002101","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":["RHBA-2019:0620","RHBA-2019:0619","RHBA-2019:0636"],"bugzilla":"1685213","bugzilla_description":"CVE-2019-1002101 kubernetes: Mishandling of symlinks allows for arbitrary file write via `kubectl cp`","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["atomic-openshift-0:3.10.127-1.git.0.dab74c6.el7","atomic-openshift-0:3.11.98-1.git.0.0cbaff3.el7","atomic-openshift-0:3.9.74-1.git.0.78e56ea.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1002101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-9946","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":["RHBA-2019:0862"],"bugzilla":"1692712","bugzilla_description":"CVE-2019-9946 kubernetes: Incorrect rule injection in CNI portmap plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":["containernetworking-plugins-0:0.7.5-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9946.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-12182","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":[],"bugzilla":"1694081","bugzilla_description":"CVE-2018-12182 edk2: insufficient memory write in SMM service leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-3876","severity":"moderate","public_date":"2019-03-27T00:24:00Z","advisories":["RHSA-2019:1851"],"bugzilla":"1691107","bugzilla_description":"CVE-2019-3876 web-console: XSS in OAuth server /oauth/token/request endpoint","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-0:3.11.129-1.git.0.bd4f2d5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3876.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3829","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2019:3600","RHBA-2019:3303"],"bugzilla":"1677048","bugzilla_description":"CVE-2019-3829 gnutls: use-after-free/double-free in certificate verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gnutls-0:3.6.8-8.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3829.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-3836","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2019:3600","RHBA-2019:3303"],"bugzilla":"1678411","bugzilla_description":"CVE-2019-3836 gnutls: invalid pointer access upon receiving async handshake messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["gnutls-0:3.6.8-8.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3836.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-12179","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":[],"bugzilla":"1694072","bugzilla_description":"CVE-2018-12179 edk2: improper configuration insystem firmware leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12179.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-3869","severity":"moderate","public_date":"2019-03-26T00:00:00Z","advisories":["RHSA-2019:0796"],"bugzilla":"1688508","bugzilla_description":"CVE-2019-3869 Tower: credentials leaked through environment variables","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-214","affected_packages":["ansible-tower-0:3.4.3-1.el7at"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-0199","severity":"important","public_date":"2019-03-25T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2020:2366","RHSA-2019:3929"],"bugzilla":"1693325","bugzilla_description":"CVE-2019-0199 tomcat: Apache Tomcat HTTP/2 DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0199.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10063","severity":"important","public_date":"2019-03-22T00:00:00Z","advisories":["RHSA-2019:1024","RHSA-2019:1143"],"bugzilla":"1695973","bugzilla_description":"CVE-2019-10063 flatpak: Sandbox bypass via IOCSTI (incomplete fix for CVE-2017-5226)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["flatpak-0:1.0.2-5.el7_6","flatpak-0:1.0.6-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10063.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11840","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":["RHBA-2020:0063"],"bugzilla":"1691529","bugzilla_description":"CVE-2019-11840 golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["openshift-0:4.3.0-202001131753.git.0.0aee6a8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-3874","severity":"moderate","public_date":"2019-03-19T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1686373","bugzilla_description":"CVE-2019-3874 kernel: SCTP socket buffer memory leak leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3874.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-9893","severity":"moderate","public_date":"2019-03-14T00:00:00Z","advisories":["RHSA-2019:3624","RHBA-2019:3303"],"bugzilla":"1690897","bugzilla_description":"CVE-2019-9893 libseccomp: incorrect generation of syscall filters in libseccomp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["redhat-coreos-42.81.20191107.0","libseccomp-0:2.4.1-1.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3855","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687303","bugzilla_description":"CVE-2019-3855 libssh2: Integer overflow in transport read resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3856","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687304","bugzilla_description":"CVE-2019-3856 libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3856.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3857","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687305","bugzilla_description":"CVE-2019-3857 libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3857.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3858","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687306","bugzilla_description":"CVE-2019-3858 libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3859","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687307","bugzilla_description":"CVE-2019-3859 libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3859.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3860","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687310","bugzilla_description":"CVE-2019-3860 libssh2: Out-of-bounds reads with specially crafted SFTP packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3861","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687311","bugzilla_description":"CVE-2019-3861 libssh2: Out-of-bounds reads with specially crafted SSH packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3861.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3862","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:1884"],"bugzilla":"1687312","bugzilla_description":"CVE-2019-3862 libssh2: Out-of-bounds memory comparison with specially crafted message channel request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["libssh2-0:1.4.3-12.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3862.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3863","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687313","bugzilla_description":"CVE-2019-3863 libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3816","severity":"important","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2019:0972","RHSA-2019:0638"],"bugzilla":"1667070","bugzilla_description":"CVE-2019-3816 openwsman: Disclosure of arbitrary files outside of the registered URIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openwsman-0:2.6.3-6.git4391e5c.el7_6","openwsman-0:2.6.5-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-3833","severity":"moderate","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2020:3940"],"bugzilla":"1674478","bugzilla_description":"CVE-2019-3833 openwsman: Infinite loop in process_connection() allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openwsman-0:2.6.3-7.git4391e5c.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3833.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-8936","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":[],"bugzilla":"1686605","bugzilla_description":"CVE-2019-8936 ntp: Crafted null dereference attack in authenticated mode 6 packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-9924","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":["RHSA-2020:1113","RHSA-2020:3474","RHBA-2020:1539","RHSA-2020:3592","RHSA-2020:3803","RHBA-2020:1540"],"bugzilla":"1691774","bugzilla_description":"CVE-2019-9924 bash: BASH_CMD is writable in restricted bash shells","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","bash-0:4.2.46-34.el7","bash-0:4.2.46-32.el7_6","bash-0:4.2.46-34.el7_7","bash-0:4.2.46-30.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9924.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9636","severity":"important","public_date":"2019-03-06T00:00:00Z","advisories":["RHBA-2019:0763","RHSA-2019:2980","RHSA-2019:0806","RHSA-2019:1467","RHSA-2019:0981","RHSA-2019:0710","RHSA-2019:0765","RHSA-2019:0997","RHSA-2019:3170","RHBA-2019:0764","RHSA-2019:0902"],"bugzilla":"1688543","bugzilla_description":"CVE-2019-9636 python: Information Disclosure due to urlsplit improper NFKC normalization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python3-0:3.6.8-2.el8_0","python27-python-0:2.7.13-4.el6","rhvm-appliance-0:4.2-20190411.1.el7","python27-python-0:2.7.13-6.el7","python-0:2.7.5-59.el7_4","python-0:2.7.5-70.el7_5","rh-python36-python-0:3.6.3-4.el6","redhat-virtualization-host-0:4.2-20190411.1.el7_6","python27:2.7-8000020190410132513.c0efe978","rh-python35-python-0:3.5.1-12.el7","rh-python35-python-0:3.5.1-12.el6","python-0:2.7.5-77.el7_6","python-0:2.6.6-68.el6_10","rh-python36-python-0:3.6.3-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-1543","severity":"low","public_date":"2019-03-06T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1695954","bugzilla_description":"CVE-2019-1543 openssl: ChaCha20-Poly1305 with long nonces","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-12439","severity":"moderate","public_date":"2019-03-01T00:00:00Z","advisories":["RHSA-2019:1833"],"bugzilla":"1695963","bugzilla_description":"CVE-2019-12439 bubblewrap: temporary directory misuse as mount point","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["bubblewrap-0:0.3.3-2.el7at"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12439.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-1002100","severity":"moderate","public_date":"2019-02-28T00:00:00Z","advisories":["RHSA-2019:3239","RHSA-2019:1851"],"bugzilla":"1683190","bugzilla_description":"CVE-2019-1002100 kube-apiserver: DoS with crafted patch of type json-patch","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":["atomic-openshift-0:3.10.181-1.git.0.3ab4b3d.el7","atomic-openshift-0:3.11.129-1.git.0.bd4f2d5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1002100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9213","severity":"important","public_date":"2019-02-27T00:00:00Z","advisories":["RHSA-2019:1479","RHBA-2019:3151","RHSA-2019:0831","RHSA-2019:1480"],"bugzilla":"1686136","bugzilla_description":"CVE-2019-9213 kernel: lack of check for mmap minimum address in expand_downwards in mm/mmap.c leads to NULL pointer dereferences exploit on non-SMAP platforms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:4.18.0-80.4.2.el8_0","redhat-coreos-42.80.20191022.0","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9213.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-12178","severity":"important","public_date":"2019-02-26T00:00:00Z","advisories":[],"bugzilla":"1683326","bugzilla_description":"CVE-2018-12178 edk2: improper DNS packet size check","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12178.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"7.2"},{"CVE":"CVE-2018-12180","severity":"important","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:0809","RHSA-2019:1116","RHSA-2019:0968"],"bugzilla":"1683372","bugzilla_description":"CVE-2018-12180 edk2: Buffer Overflow in BlockIo service for RAM disk","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7_6.1","redhat-virtualization-host-0:4.3-20190418.0.el7_6","edk2-0:20180508gitee3198e672e2-9.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"8.3"},{"CVE":"CVE-2019-1559","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:2304","RHSA-2019:2439","RHSA-2019:3929","RHSA-2019:2437","RHSA-2019:2471"],"bugzilla":"1683804","bugzilla_description":"CVE-2019-1559 openssl: 0-byte record padding oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-0:1.0.1e-58.el6_10","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-9500","severity":"important","public_date":"2019-02-19T00:00:00Z","advisories":["RHSA-2019:3217","RHSA-2019:2600","RHSA-2019:4168","RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2945","RHSA-2019:2703","RHSA-2019:2609","RHSA-2019:4171"],"bugzilla":"1701224","bugzilla_description":"CVE-2019-9500 kernel: brcmfmac heap buffer overflow in brcmf_wowl_nd_results","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-alt-0:4.14.0-115.14.1.el7a","kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","kernel-rt-0:3.10.0-1062.1.1.rt56.1024.el7","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0","kernel-0:3.10.0-1062.1.1.el7","kernel-0:3.10.0-957.41.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9503","severity":"moderate","public_date":"2019-02-19T00:00:00Z","advisories":["RHSA-2020:2522","RHBA-2019:3151","RHSA-2019:2741","RHSA-2020:1070","RHSA-2019:2703","RHSA-2020:1016"],"bugzilla":"1701842","bugzilla_description":"CVE-2019-9503 kernel: brcmfmac frame validation bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9503.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-6454","severity":"important","public_date":"2019-02-18T00:00:00Z","advisories":["RHSA-2019:0990","RHSA-2019:0461","RHSA-2019:0368","RHBA-2019:3151","RHSA-2019:1322","RHSA-2019:0457","RHSA-2019:1502","RHSA-2019:2805"],"bugzilla":"1667032","bugzilla_description":"CVE-2019-6454 systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["systemd-0:219-62.el7_6.5","rhvm-appliance-0:4.2-20190224.0.el7","systemd-0:219-42.el7_4.16","redhat-coreos-42.80.20191022.0","systemd-0:239-13.el8_0.3","systemd-0:219-57.el7_5.6","systemd-0:219-30.el7_3.14","redhat-virtualization-host-0:4.2-20190219.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6454.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-8980","severity":"moderate","public_date":"2019-02-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1679972","bugzilla_description":"CVE-2019-8980 kernel: memory leak in the kernel_read_file function in fs/exec.c allows to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8980.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-3890","severity":"moderate","public_date":"2019-02-15T00:00:00Z","advisories":["RHSA-2019:3699","RHSA-2020:1080"],"bugzilla":"1678313","bugzilla_description":"CVE-2019-3890 evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-online-accounts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-295|CWE-296)","affected_packages":["evolution-data-server-0:3.28.5-11.el8","evolution-ews-0:3.28.5-5.el7","evolution-data-server-0:3.28.5-4.el7","evolution-ews-0:3.28.5-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2019-3831","severity":"moderate","public_date":"2019-02-14T00:00:00Z","advisories":["RHSA-2019:0457","RHSA-2019:0458"],"bugzilla":"1677108","bugzilla_description":"CVE-2019-3831 vdsm: privilege escalation to root via systemd_run","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["vdsm-0:4.20.47-1.el7ev","redhat-virtualization-host-0:4.2-20190219.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3831.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-8308","severity":"important","public_date":"2019-02-11T18:47:00Z","advisories":["RHSA-2019:0375"],"bugzilla":"1675070","bugzilla_description":"CVE-2019-8308 flatpak: potential /proc based sandbox escape","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["flatpak-0:1.0.2-4.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8308.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2019-5736","severity":"important","public_date":"2019-02-11T13:22:00Z","advisories":["RHSA-2019:0401","RHSA-2019:0303","RHSA-2019:0304","RHSA-2019:0975","RHSA-2019:0408"],"bugzilla":"1664908","bugzilla_description":"CVE-2019-5736 runc: Execution of malicious containers allows for container escape and access to host filesystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["runc-0:1.0.0-59.dev.git2abd837.el7","container-tools:rhel8-8000020190416221845.2ffa3d27","docker-2:1.13.1-91.git07f3374.el7","docker-2:1.12.6-79.git5680db5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5736.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2019-8331","severity":"moderate","public_date":"2019-02-11T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2020:3936"],"bugzilla":"1686454","bugzilla_description":"CVE-2019-8331 bootstrap: XSS in the tooltip or popover data-template attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","ovirt-web-ui-0:1.6.0-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-7222","severity":"low","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1671930","bugzilla_description":"CVE-2019-7222 Kernel: KVM: leak of uninitialized stack contents to guest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7222.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2018-16890","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670252","bugzilla_description":"CVE-2018-16890 curl: NTLM type-2 heap out-of-bounds buffer read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-190","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-3822","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670254","bugzilla_description":"CVE-2019-3822 curl: NTLMv2 type-3 header stack buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-3823","severity":"low","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670256","bugzilla_description":"CVE-2019-3823 curl: SMTP end-of-response out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-3825","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1672825","bugzilla_description":"CVE-2019-3825 gdm: lock screen bypass when timed login is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["gdm-1:3.28.3-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3825.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2018-16838","severity":"low","public_date":"2019-02-04T00:00:00Z","advisories":["RHSA-2019:2177","RHSA-2019:3651","RHSA-2019:2437","RHBA-2019:3303"],"bugzilla":"1640820","bugzilla_description":"CVE-2018-16838 sssd: improper implementation of GPOs due to too restrictive permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["redhat-coreos-42.81.20191107.0","sssd-0:1.16.4-21.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","sssd-0:2.2.0-19.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-3813","severity":"important","public_date":"2019-01-28T18:00:00Z","advisories":["RHSA-2019:0231","RHSA-2019:0232","RHSA-2019:0457"],"bugzilla":"1665371","bugzilla_description":"CVE-2019-3813 spice: Off-by-one error in array access in spice/server/memslot.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["spice-0:0.14.0-6.el7_6.1","redhat-virtualization-host-0:4.2-20190219.0.el7_6","spice-server-0:0.12.4-16.el6_10.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3813.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-3630","severity":"moderate","public_date":"2019-01-26T00:00:00Z","advisories":[],"bugzilla":"1683653","bugzilla_description":"CVE-2018-3630 ovmf: Logic error in FV parsing in MdeModulePkg\\Core\\Pei\\FwVol\\FwVol.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3630.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2019-6486","severity":"moderate","public_date":"2019-01-24T00:00:00Z","advisories":[],"bugzilla":"1668972","bugzilla_description":"CVE-2019-6486 golang: crypto/elliptic implementations of P-521 and P-384 elliptic curves allow for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-18508","severity":"moderate","public_date":"2019-01-22T00:00:00Z","advisories":["RHSA-2019:1951"],"bugzilla":"1671310","bugzilla_description":"CVE-2018-18508 nss: NULL pointer dereference in several CMS functions resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3817","severity":"moderate","public_date":"2019-01-21T00:00:00Z","advisories":["RHSA-2019:3898","RHBA-2020:0062","RHSA-2019:3583"],"bugzilla":"1668005","bugzilla_description":"CVE-2019-3817 libcomps: use after free when merging two objmrtrees","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.81.202001142154.0","libcomps-0:0.1.8-13.el7","libcomps-0:0.1.11-2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1000020","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1672888","bugzilla_description":"CVE-2019-1000020 libarchive: Infinite recursion in archive_read_support_format_iso9660.c resulting in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1000020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-1000019","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1672892","bugzilla_description":"CVE-2019-1000019 libarchive: Out of bounds read in archive_read_support_format_7zip.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1000019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3772","severity":"moderate","public_date":"2019-01-14T00:00:00Z","advisories":[],"bugzilla":"1670590","bugzilla_description":"CVE-2019-3772 spring-integration: XML External Entity Injection (XXE) when receiving XML data from untrusted sources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-3774","severity":"moderate","public_date":"2019-01-14T00:00:00Z","advisories":[],"bugzilla":"1670597","bugzilla_description":"CVE-2019-3774 spring-batch: XML External Entity Injection (XXE) when receiving XML data from untrusted sources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3774.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-16886","severity":"moderate","public_date":"2019-01-11T22:05:00Z","advisories":["RHSA-2019:1352"],"bugzilla":"1651034","bugzilla_description":"CVE-2018-16886 etcd: Improper Authentication in auth/store.go:AuthInfoFromTLS() via gRPC-gateway","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["etcd-0:3.2.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16886.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-3459","severity":"moderate","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1663176","bugzilla_description":"CVE-2019-3459 kernel: Heap address information leak while using L2CAP_GET_CONF_OPT","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-3460","severity":"moderate","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1663179","bugzilla_description":"CVE-2019-3460 kernel: Heap address information leak while using L2CAP_PARSE_CONF_RSP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-16889","severity":"moderate","public_date":"2019-01-10T00:00:00Z","advisories":["RHSA-2019:2541","RHSA-2019:2538"],"bugzilla":"1665334","bugzilla_description":"CVE-2018-16889 ceph: debug logging for v4 auth does not sanitize encryption keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["ceph-2:12.2.12-45.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16889.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-16864","severity":"important","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:0342","RHSA-2019:0361","RHSA-2019:0049","RHSA-2019:2402","RHSA-2019:0204","RHSA-2019:0271"],"bugzilla":"1653855","bugzilla_description":"CVE-2018-16864 systemd: stack overflow when calling syslog from a command with long cmdline","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["systemd-0:219-30.el7_3.13","systemd-0:219-57.el7_5.5","rhvm-appliance-0:4.2-20190129.0.el7","systemd-0:219-62.el7_6.2","systemd-0:219-42.el7_4.13","redhat-virtualization-host-0:4.2-20190129.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2018-16865","severity":"important","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:0342","RHSA-2019:0361","RHSA-2019:0049","RHSA-2019:2402","RHSA-2019:0204","RHSA-2019:0271"],"bugzilla":"1653861","bugzilla_description":"CVE-2018-16865 systemd: stack overflow when receiving many journald entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["systemd-0:219-30.el7_3.13","systemd-0:219-57.el7_5.5","rhvm-appliance-0:4.2-20190129.0.el7","systemd-0:219-62.el7_6.2","systemd-0:219-42.el7_4.13","redhat-virtualization-host-0:4.2-20190129.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16866","severity":"moderate","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:3222","RHSA-2020:0593","RHSA-2020:1264","RHSA-2019:2091"],"bugzilla":"1653867","bugzilla_description":"CVE-2018-16866 systemd: out-of-bounds read when parsing a crafted syslog message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":["systemd-0:219-57.el7_5.9","systemd-0:219-62.el7_6.11","systemd-0:219-67.el7","systemd-0:219-42.el7_4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16866.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-0542","severity":"moderate","public_date":"2019-01-09T00:00:00Z","advisories":["RHSA-2019:2552","RHSA-2019:2551","RHBA-2019:0959","RHSA-2019:1422"],"bugzilla":"1668531","bugzilla_description":"CVE-2019-0542 xterm.js: Mishandling of special characters allows for remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["atomic-openshift-web-console-0:3.11.104-1.git.1.3c3a7f2.el7","atomic-openshift-web-console-0:3.10.163-1.git.1.c3a2131.el7","openshift3/ose-console:v3.11.98-6","atomic-openshift-web-console-0:3.9.99-1.git.1.49cd7e9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16846","severity":"moderate","public_date":"2019-01-07T00:00:00Z","advisories":["RHSA-2019:2541","RHSA-2019:2538"],"bugzilla":"1644461","bugzilla_description":"CVE-2018-16846 ceph: ListBucket max-keys has no defined limit in the RGW codebase","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["ceph-2:12.2.12-45.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-5489","severity":"important","public_date":"2019-01-06T00:00:00Z","advisories":["RHSA-2019:2473","RHSA-2019:4255","RHSA-2019:2029","RHSA-2019:4057","RHSA-2019:4058","RHSA-2019:4159","RHSA-2019:4164","RHSA-2019:4056","RHSA-2019:2043","RHSA-2020:0204","RHSA-2019:2809","RHSA-2019:2808","RHSA-2019:3967","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:2837","RHSA-2019:3309"],"bugzilla":"1664110","bugzilla_description":"CVE-2019-5489 Kernel: page cache side channel attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:2.6.18-439.el5","kernel-0:2.6.32-431.97.1.el6","kernel-0:2.6.32-754.18.2.el6","kernel-0:3.10.0-327.83.1.el7","kernel-0:2.6.32-504.82.1.el6","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:3.10.0-957.35.1.el7","kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.61.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.12.1.el7a","kernel-0:3.10.0-862.44.2.el7","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-514.71.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-20784","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:1971","RHSA-2019:1959"],"bugzilla":"1680540","bugzilla_description":"CVE-2018-20784 kernel: infinite loop in update_blocked_averages() in kernel/sched/fair.c leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.7.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-20483","severity":"moderate","public_date":"2018-12-26T00:00:00Z","advisories":["RHSA-2019:3701","RHBA-2019:3303"],"bugzilla":"1662705","bugzilla_description":"CVE-2018-20483 wget: Information exposure in set_file_metadata function in xattr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20483.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-20337","severity":"moderate","public_date":"2018-12-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1661555","bugzilla_description":"CVE-2018-20337 LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["LibRaw-0:0.19.5-1.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20337.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1002101","severity":"moderate","public_date":"2018-12-17T00:00:00Z","advisories":[],"bugzilla":"1659877","bugzilla_description":"CVE-2018-1002101 kubernetes: Improper input validation while setting up volume mounts on Windows nodes allows for command injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002101.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16873","severity":"moderate","public_date":"2018-12-13T20:00:00Z","advisories":[],"bugzilla":"1657563","bugzilla_description":"CVE-2018-16873 golang: \"go get\" command vulnerable to RCE via import of malicious package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16873.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16875","severity":"moderate","public_date":"2018-12-13T20:00:00Z","advisories":[],"bugzilla":"1657565","bugzilla_description":"CVE-2018-16875 golang: crypto/x509 allows for denial of service via crafted TLS client certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16875.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3804","severity":"moderate","public_date":"2018-12-13T00:00:00Z","advisories":["RHSA-2019:0482","RHSA-2019:1571","RHSA-2019:1569"],"bugzilla":"1663567","bugzilla_description":"CVE-2019-3804 cockpit: Crash when parsing invalid base64 headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["rhvm-appliance-0:4.3-20190605.0.el7","cockpit-0:173.2-1.el7","redhat-virtualization-host-0:4.3-20190610.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14623","severity":"low","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1623719","bugzilla_description":"CVE-2018-14623 katello: SQL inject in errata-related REST API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89->CWE-209","affected_packages":["katello-0:3.4.5-15.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-19985","severity":"low","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1666106","bugzilla_description":"CVE-2018-19985 kernel: oob memory read in hso_probe in drivers/net/usb/hso.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19985.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-4700","severity":"moderate","public_date":"2018-12-07T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1649347","bugzilla_description":"CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4700.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"7.3"},{"CVE":"CVE-2018-20169","severity":"moderate","public_date":"2018-12-05T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:2770","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:2777"],"bugzilla":"1660385","bugzilla_description":"CVE-2018-20169 kernel: usb: missing size check in the __usb_get_extra_descriptor() leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-rt-1:3.10.0-693.69.1.rt56.667.el6rt","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-693.69.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20169.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-19824","severity":"moderate","public_date":"2018-12-04T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2703"],"bugzilla":"1655816","bugzilla_description":"CVE-2018-19824 kernel: Use-after-free in sound/usb/card.c:usb_audio_probe()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19824.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2018-1002105","severity":"critical","public_date":"2018-12-03T17:00:00Z","advisories":["RHSA-2018:3549","RHSA-2018:3537","RHSA-2018:3624","RHSA-2018:3754","RHSA-2018:3742","RHSA-2018:3752","RHSA-2018:3598","RHSA-2018:2908","RHSA-2018:3551","RHSA-2018:2906"],"bugzilla":"1648138","bugzilla_description":"CVE-2018-1002105 kubernetes: authentication/authorization bypass in the handling of non-101 responses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["atomic-openshift-0:3.4.1.44.57-1.git.0.a631031.el7","atomic-openshift-0:3.8.44-1.git.0.9be0abd.el7","atomic-openshift-0:3.10.72-1.git.0.3cb2fdc.el7","atomic-openshift-0:3.2.1.34-2.git.20.6367d5d.el7","atomic-openshift-0:3.5.5.31.80-1.git.0.c4a0780.el7","atomic-openshift-0:3.7.72-1.git.0.925b9cd.el7","atomic-openshift-0:3.11.43-1.git.0.647ac05.el7","atomic-openshift-0:3.9.51-1.git.0.dc3a40b.el7","atomic-openshift-0:3.3.1.46.45-1.git.0.2ce596e.el7","atomic-openshift-0:3.6.173.0.140-1.git.0.9686d52.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-19788","severity":"moderate","public_date":"2018-12-03T00:00:00Z","advisories":["RHSA-2019:2046","RHSA-2019:3232"],"bugzilla":"1655925","bugzilla_description":"CVE-2018-19788 polkit: Improper handling of user with uid > INT_MAX leading to authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["polkit-0:0.112-22.el7","polkit-0:0.112-18.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19788.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16868","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1654929","bugzilla_description":"CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16868.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-16869","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1654930","bugzilla_description":"CVE-2018-16869 nettle: Leaky data conversion exposing a manager oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16869.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-12404","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":["RHSA-2019:2237"],"bugzilla":"1657913","bugzilla_description":"CVE-2018-12404 nss: Cache side-channel variant of the Bleichenbacher attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-16490","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1672396","bugzilla_description":"CVE-2018-16490 nodejs-mpath: prototype pollution in Object.prototype","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16490.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2018-18311","severity":"important","public_date":"2018-11-29T00:00:00Z","advisories":["RHSA-2019:0001","RHSA-2019:0010","RHSA-2019:2400","RHSA-2019:1942","RHSA-2019:1790","RHSA-2019:0109"],"bugzilla":"1646730","bugzilla_description":"CVE-2018-18311 perl: Integer overflow leading to buffer overflow in Perl_my_setenv()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["rh-perl524-perl-4:5.24.0-381.el6","perl-4:5.16.3-294.el7_6","rh-perl524-perl-4:5.24.0-381.el7","perl-4:5.16.3-292.el7_5.1","perl-4:5.16.3-292.el7_4.1","rh-perl526-perl-4:5.26.3-405.el7","perl-4:5.16.3-291.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14637","severity":"moderate","public_date":"2018-11-27T20:23:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1627851","bugzilla_description":"CVE-2018-14637 keycloak: expiration not validated in SAML broker consumer endpoint","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287->CWE-285","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-19591","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1653993","bugzilla_description":"CVE-2018-19591 glibc: file descriptor leak in if_nametoindex() in sysdeps/unix/sysv/linux/if_index.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19591.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16884","severity":"important","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:2696","RHSA-2019:1891","RHSA-2019:1873","RHSA-2019:2730","RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:2854","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1660375","bugzilla_description":"CVE-2018-16884 kernel: nfs: use-after-free in svc_process_common()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-693.58.1.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16884.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-20534","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":["RHBA-2020:0062","RHSA-2019:2290","RHSA-2019:3583"],"bugzilla":"1665538","bugzilla_description":"CVE-2018-20534 libsolv: illegal address access in pool_whatprovides in src/pool.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libsolv-0:0.7.4-3.el8","libsolv-0:0.6.34-4.el7","redhat-coreos-43.81.202001142154.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20534.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19416","severity":"low","public_date":"2018-11-21T00:00:00Z","advisories":[],"bugzilla":"1652728","bugzilla_description":"CVE-2018-19416 sysstat: Out-of-bounds read in remap_struct function in sa_common.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19416.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-19517","severity":"low","public_date":"2018-11-21T00:00:00Z","advisories":[],"bugzilla":"1679544","bugzilla_description":"CVE-2018-19517 sysstat: Out of bounds read in remap_struct function in sa_common.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19517.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000877","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1663887","bugzilla_description":"CVE-2018-1000877 libarchive: Double free in RAR decoder resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000877.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1000878","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1663889","bugzilla_description":"CVE-2018-1000878 libarchive: Use after free in RAR decoder resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000878.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-19360","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666482","bugzilla_description":"CVE-2018-19360 jackson-databind: improper polymorphic deserialization in axis2-transport-jms class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19360.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19361","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666484","bugzilla_description":"CVE-2018-19361 jackson-databind: improper polymorphic deserialization in openjpa class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19361.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19362","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666489","bugzilla_description":"CVE-2018-19362 jackson-databind: improper polymorphic deserialization in jboss-common-core class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-20685","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1665785","bugzilla_description":"CVE-2018-20685 openssh: scp client improper directory name validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20685.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-6109","severity":"low","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666119","bugzilla_description":"CVE-2019-6109 openssh: Missing character encoding in progress display allows for spoofing of scp client output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-6111","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666127","bugzilla_description":"CVE-2019-6111 openssh: Improper validation of object names allows malicious server to overwrite files via scp client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-14658","severity":"moderate","public_date":"2018-11-13T17:38:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625409","bugzilla_description":"CVE-2018-14658 keycloak: Open Redirect in Login and Logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14658.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14655","severity":"moderate","public_date":"2018-11-13T17:37:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625396","bugzilla_description":"CVE-2018-14655 keycloak: XSS-Vulnerability with response_mode=form_post","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14655.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2018-14657","severity":"low","public_date":"2018-11-13T17:37:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625404","bugzilla_description":"CVE-2018-14657 keycloak: brute force protection not working for the entire login workflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14657.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-1000845","severity":null,"public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1661252","bugzilla_description":"CVE-2018-1000845 avahi: DNS amplification and reflection to spoofed addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000845.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14667","severity":"critical","public_date":"2018-11-06T18:44:00Z","advisories":["RHSA-2018:3581","RHSA-2018:3519","RHSA-2018:3518","RHSA-2018:3517"],"bugzilla":"1639139","bugzilla_description":"CVE-2018-14667 RichFaces: Expression Language injection via UserResource allows for unauthenticated remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["richfaces-0:3.3.1-6.SP3_patch_03.ep5.el6","richfaces-0:3.3.1-9.SP3_patch_03.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14667.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-16470","severity":"moderate","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1646814","bugzilla_description":"CVE-2018-16470 rubygem-rack: Buffer size in multipart parser allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rubygem-rack-1:1.6.4-3.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16471","severity":"moderate","public_date":"2018-11-06T00:00:00Z","advisories":[],"bugzilla":"1646818","bugzilla_description":"CVE-2018-16471 rubygem-rack: Cross-site scripting (XSS) via `scheme` method on `Rack::Request`","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16471.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-19854","severity":"moderate","public_date":"2018-11-03T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1656986","bugzilla_description":"CVE-2018-19854 kernel: Information Disclosure in crypto_report_one in crypto/crypto_user.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19854.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-16472","severity":"moderate","public_date":"2018-11-02T00:00:00Z","advisories":[],"bugzilla":"1649118","bugzilla_description":"CVE-2018-16472 nodejs-cached-path-relative: prototype pollution due to injected properties on Object.prototype","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16472.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-5407","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3932","RHSA-2019:0483","RHSA-2019:2125","RHSA-2019:3929","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1645695","bugzilla_description":"CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7_6.1","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-18751","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":["RHSA-2019:3643","RHSA-2020:2485","RHSA-2020:2846","RHSA-2020:1138","RHBA-2019:3303"],"bugzilla":"1647043","bugzilla_description":"CVE-2018-18751 gettext: double free in default_add_message in read-catalog.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-42.81.20191107.0","gettext-0:0.19.8.1-17.el8","gettext-0:0.19.8.1-3.el7","gettext-0:0.19.8.1-3.el7_6","gettext-0:0.19.8.1-3.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18751.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-19210","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":[],"bugzilla":"1649385","bugzilla_description":"CVE-2018-19210 libtiff: NULL pointer dereference in TIFFWriteDirectorySec function in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19210.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16468","severity":"moderate","public_date":"2018-10-27T00:00:00Z","advisories":[],"bugzilla":"1646715","bugzilla_description":"CVE-2018-16468 rubygem-loofah: XXS when a crafted SVG element is republished","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-15688","severity":"important","public_date":"2018-10-26T00:00:00Z","advisories":["RHSA-2019:0049","RHSA-2018:3665"],"bugzilla":"1639067","bugzilla_description":"CVE-2018-15688 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-190->CWE-122","affected_packages":["NetworkManager-1:1.12.0-8.el7_6","systemd-0:219-62.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15688.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-0735","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1644356","bugzilla_description":"CVE-2018-0735 openssl: timing side channel attack in the ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-18661","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1644448","bugzilla_description":"CVE-2018-18661 libtiff: tiff2bw tool failed memory allocation leads to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18661.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15750","severity":"moderate","public_date":"2018-10-25T00:00:00Z","advisories":[],"bugzilla":"1644484","bugzilla_description":"CVE-2018-15750 salt: Directory traversal in salt-api allows remote attackers to identitfy arbitrary files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-15751","severity":"critical","public_date":"2018-10-25T00:00:00Z","advisories":[],"bugzilla":"1644489","bugzilla_description":"CVE-2018-15751 salt: Remote command execution and incorrect access control when using salt-api","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15751.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-1000873","severity":"moderate","public_date":"2018-10-24T00:00:00Z","advisories":[],"bugzilla":"1665601","bugzilla_description":"CVE-2018-1000873 jackson-modules-java8: DoS due to an Improper Input Validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000873.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-0734","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:3700","RHSA-2019:3932","RHSA-2019:2304","RHSA-2019:3933","RHSA-2019:3935","RHBA-2019:3303"],"bugzilla":"1644364","bugzilla_description":"CVE-2018-0734 openssl: timing side channel attack in the DSA signature algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-16887","severity":"moderate","public_date":"2018-10-11T00:00:00Z","advisories":["RHSA-2019:1222"],"bugzilla":"1645190","bugzilla_description":"CVE-2018-16887 katello: stored XSS in subscriptions and repositories pages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["katello-0:3.10.0-0.6.rc1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16887.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-14664","severity":"moderate","public_date":"2018-10-10T00:00:00Z","advisories":["RHSA-2019:1222"],"bugzilla":"1638130","bugzilla_description":"CVE-2018-14664 foreman: Persisted XSS on all pages that use breadcrumbs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["foreman-0:1.20.1.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2018-11784","severity":"moderate","public_date":"2018-10-03T00:00:00Z","advisories":["RHSA-2019:0485","RHSA-2019:0130","RHSA-2019:0131","RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1636512","bugzilla_description":"CVE-2018-11784 tomcat: Open redirect in default servlet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-99","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7_6","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-17795","severity":"low","public_date":"2018-10-02T00:00:00Z","advisories":[],"bugzilla":"1635091","bugzilla_description":"CVE-2018-17795 libtiff: Heap-based buffer overflow in tiff2pdf.c:t2p_write_pdf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-17846","severity":"moderate","public_date":"2018-10-01T00:00:00Z","advisories":[],"bugzilla":"1639109","bugzilla_description":"CVE-2018-17846 golang-org-x-net-html: infinite loop during html.Parse() via inSelectIM and inSelectInTableIM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17847","severity":"moderate","public_date":"2018-10-01T00:00:00Z","advisories":[],"bugzilla":"1639116","bugzilla_description":"CVE-2018-17847 golang-org-x-net-html: index out of range in (*nodeStack).pop in node.go causes runtime panic during html.Parse() call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17848","severity":"moderate","public_date":"2018-10-01T00:00:00Z","advisories":[],"bugzilla":"1639124","bugzilla_description":"CVE-2018-17848 golang-org-x-net-html: index out of range in (*insertionModeStack).pop in node.go causes runtime panic during html.Parse() call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17848.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17142","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":[],"bugzilla":"1633022","bugzilla_description":"CVE-2018-17142 golang-org-x-net-html: Runtime panic in html.Parse() via crafted html","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17142.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17143","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":[],"bugzilla":"1633036","bugzilla_description":"CVE-2018-17143 golang-org-x-net-html: Runtime panic in html.Parse() via crafted html","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17143.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17075","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":[],"bugzilla":"1633041","bugzilla_description":"CVE-2018-17075 golang-org-x-net-html: Mishandle of \"in frameset\" causes runtime panic in html.Parse() via crafted html","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17204","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0053","RHSA-2019:0081","RHSA-2018:3500"],"bugzilla":"1632522","bugzilla_description":"CVE-2018-17204 openvswitch: Mishandle of group mods in lib/ofp-util.c:parse_group_prop_ntr_selection_method() allows for assertion failure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openvswitch-0:2.9.0-83.el7fdp.1","openvswitch-0:2.9.0-70.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.7"},{"CVE":"CVE-2018-17205","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0053","RHSA-2019:0081","RHSA-2018:3500"],"bugzilla":"1632525","bugzilla_description":"CVE-2018-17205 openvswitch: Error during bundle commit in ofproto/ofproto.c:ofproto_rule_insert__() allows for crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openvswitch-0:2.9.0-83.el7fdp.1","openvswitch-0:2.9.0-70.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17205.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-17206","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0053","RHSA-2019:0081","RHSA-2018:3500"],"bugzilla":"1632528","bugzilla_description":"CVE-2018-17206 openvswitch: Buffer over-read in lib/ofp-actions.c:decode_bundle()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openvswitch-0:2.9.0-83.el7fdp.1","openvswitch-0:2.9.0-70.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17206.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-14643","severity":"critical","public_date":"2018-09-20T00:00:00Z","advisories":["RHSA-2018:2733"],"bugzilla":"1629063","bugzilla_description":"CVE-2018-14643 smart_proxy_dynflow: Authentication bypass in Foreman remote execution feature","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rubygem-smart_proxy_dynflow-0:0.1.10.2-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14643.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-17100","severity":"low","public_date":"2018-09-16T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1631069","bugzilla_description":"CVE-2018-17100 libtiff: Integer overflow in multiply_ms in tools/ppm2tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17100.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-17101","severity":"low","public_date":"2018-09-16T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1631078","bugzilla_description":"CVE-2018-17101 libtiff: Two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17101.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-17000","severity":"low","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1630004","bugzilla_description":"CVE-2018-17000 libtiff: NULL pointer dereference in function _TIFFmemcmp at tif_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17000.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-16981","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":[],"bugzilla":"1639548","bugzilla_description":"CVE-2018-16981 stbi: Heap-based buffer overflow in stb_image.h:stbi__out_gif_code() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-6251","severity":"moderate","public_date":"2018-09-11T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1667409","bugzilla_description":"CVE-2019-6251 webkitgtk: processing maliciously crafted web content lead to URI spoofing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-1000805","severity":"critical","public_date":"2018-09-07T00:00:00Z","advisories":["RHBA-2018:3497","RHSA-2018:3470","RHSA-2018:3406","RHSA-2018:3347"],"bugzilla":"1637263","bugzilla_description":"CVE-2018-1000805 python-paramiko: Authentication bypass in auth_handler.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["redhat-virtualization-host-0:4.2-20181026.0.el7_6","python-paramiko-0:1.7.5-5.el6_10","python-paramiko-0:2.1.1-9.el7","rhvm-appliance-0:4.2-20181026.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-14632","severity":"important","public_date":"2018-09-06T00:00:00Z","advisories":["RHBA-2018:2652","RHSA-2018:2654","RHSA-2018:2908","RHSA-2018:2709","RHSA-2018:2906"],"bugzilla":"1625885","bugzilla_description":"CVE-2018-14632 atomic-openshift: oc patch with json causes masterapi service crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["atomic-openshift-0:3.10.66-1.git.0.91d1e89.el7","atomic-openshift-0:3.11.16-1.git.0.b48b8f8.el7","atomic-openshift-0:3.7.72-1.git.0.925b9cd.el7","atomic-openshift-0:3.6.173.0.130-1.git.0.8d78a39.el7","atomic-openshift-0:3.9.51-1.git.0.dc3a40b.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-16861","severity":"moderate","public_date":"2018-09-04T00:00:00Z","advisories":["RHSA-2019:1222"],"bugzilla":"1645201","bugzilla_description":"CVE-2018-16861 foreman: stored XSS in success notification after entity creation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["foreman-0:1.20.1.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16861.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2018-19871","severity":"low","public_date":"2018-08-24T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2020:1665"],"bugzilla":"1661465","bugzilla_description":"CVE-2018-19871 qt5-qtimageformats: QTgaFile CPU exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["qt-1:4.8.7-8.el7","qt5-qtimageformats-0:5.12.5-1.el8","qt5-qtimageformats-0:5.9.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19871.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10917","severity":"moderate","public_date":"2018-08-14T21:50:00Z","advisories":["RHSA-2019:1222"],"bugzilla":"1598928","bugzilla_description":"CVE-2018-10917 pulp: Improper path parsing leads to overwriting of iso repositories","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["pulp-0:2.18.1.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10917.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-20676","severity":"moderate","public_date":"2018-08-10T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668082","bugzilla_description":"CVE-2018-20676 bootstrap: XSS in the tooltip data-viewport attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20676.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-20677","severity":"moderate","public_date":"2018-08-10T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668089","bugzilla_description":"CVE-2018-20677 bootstrap: XSS in the affix configuration target property","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-10915","severity":"important","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2557","RHSA-2018:2511","RHSA-2018:2566","RHSA-2018:2643","RHSA-2018:2565"],"bugzilla":"1609891","bugzilla_description":"CVE-2018-10915 postgresql: Certain host connection parameters defeat client-side security defenses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665->(CWE-200|CWE-89)","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","postgresql-0:9.2.24-1.el7_5","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rhvm-appliance-0:4.2-20180828.0.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10915.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2018-10925","severity":"important","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566","RHSA-2018:2565"],"bugzilla":"1612619","bugzilla_description":"CVE-2018-10925 postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-10931","severity":"critical","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:2372"],"bugzilla":"1613861","bugzilla_description":"CVE-2018-10931 cobbler: CobblerXMLRPCInterface exports all its methods over XMLRPC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-749","affected_packages":["cobbler-0:2.0.7-44.1.el6sat","cobbler-0:2.0.7-68.1.el6sat","cobbler-0:2.0.7-73.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10931.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-15209","severity":"moderate","public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1614051","bugzilla_description":"CVE-2018-15209 libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16335","severity":"moderate","public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1624981","bugzilla_description":"CVE-2018-16335 libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16335.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14718","severity":"important","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666415","bugzilla_description":"CVE-2018-14718 jackson-databind: arbitrary code execution in slf4j-ext class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14718.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14719","severity":"important","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666418","bugzilla_description":"CVE-2018-14719 jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14719.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14720","severity":"moderate","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:4037","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:1140"],"bugzilla":"1666423","bugzilla_description":"CVE-2018-14720 jackson-databind: exfiltration/XXE in some JDK classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-611","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14720.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-14721","severity":"moderate","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:4037","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:1140"],"bugzilla":"1666428","bugzilla_description":"CVE-2018-14721 jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14721.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-8034","severity":"low","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2019:0451","RHSA-2019:0130","RHSA-2019:0131","RHSA-2019:0450","RHSA-2019:2205","RHSA-2019:3892","RHSA-2019:1159","RHSA-2019:1162","RHSA-2019:1529","RHSA-2019:1161","RHSA-2019:1160"],"bugzilla":"1607580","bugzilla_description":"CVE-2018-8034 tomcat: Host name verification missing in WebSocket client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","jbossweb-0:7.5.30-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8034.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-8037","severity":"important","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1607582","bugzilla_description":"CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2018-1336","severity":"important","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2945","RHSA-2018:2921","RHSA-2018:3768","RHSA-2018:2701","RHEA-2018:2189","RHSA-2018:2700","RHEA-2018:2188","RHSA-2018:2939","RHSA-2018:2743","RHSA-2018:2930","RHSA-2018:2742","RHSA-2018:2741","RHSA-2018:2740"],"bugzilla":"1607591","bugzilla_description":"CVE-2018-1336 tomcat: A bug in the UTF-8 decoder can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["jbossweb-0:7.5.29-1.Final_redhat_1.1.ep6.el5","tomcat8-0:8.0.36-33.ep7.el7","tomcat8-0:8.0.36-33.ep7.el6","tomcat-0:7.0.76-8.el7_5","tomcat7-0:7.0.70-29.ep7.el6","tomcat7-0:7.0.70-29.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1336.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-8020","severity":"important","public_date":"2018-07-21T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2018:2469"],"bugzilla":"1581569","bugzilla_description":"CVE-2018-8020 tomcat-native: Mishandled OCSP responses can allow clients to authenticate with revoked certificates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tomcat-native-0:1.2.17-17.redhat_17.ep7.el6","tomcat-native-0:1.2.17-17.redhat_17.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-8019","severity":"moderate","public_date":"2018-07-21T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2018:2469"],"bugzilla":"1583998","bugzilla_description":"CVE-2018-8019 tomcat-native: Mishandled OCSP invalid response","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tomcat-native-0:1.2.17-17.redhat_17.ep7.el6","tomcat-native-0:1.2.17-17.redhat_17.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-10869","severity":"important","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2018:2373"],"bugzilla":"1593780","bugzilla_description":"CVE-2018-10869 redhat-certification: /download allows to download any file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["redhat-certification-0:5.16-20180809.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-10870","severity":"critical","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2018:2373"],"bugzilla":"1593803","bugzilla_description":"CVE-2018-10870 redhat-certification: rhcertStore.py:__saveResultsFile allows to write any file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["redhat-certification-0:5.16-20180809.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10870.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-14373","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609400","bugzilla_description":"CVE-2018-14373 libtiff: NULL dereference in TIFFFindField in tif_dirinfo.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14373.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14374","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609406","bugzilla_description":"CVE-2018-14374 libtiff: NULL dereference in unixErrorHandler in tif_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14374.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14375","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609411","bugzilla_description":"CVE-2018-14375 libtiff: NULL dereference in TIFFRGBAImageOK in tif_getimage.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14375.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14378","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609417","bugzilla_description":"CVE-2018-14378 libtiff: NULL dereference in TIFFWriteBufferSetup in tif_write.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14378.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-6470","severity":"moderate","public_date":"2018-07-14T00:00:00Z","advisories":["RHSA-2019:3525","RHSA-2019:2060"],"bugzilla":"1708641","bugzilla_description":"CVE-2019-6470 dhcp: double-deletion of the released addresses in the dhcpv6 code leading to crash and possible DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["dhcp-12:4.3.6-34.el8","dhcp-12:4.2.5-77.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-10894","severity":"moderate","public_date":"2018-07-09T00:00:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2019:0877","RHSA-2018:3595"],"bugzilla":"1599434","bugzilla_description":"CVE-2018-10894 keycloak: auth permitted with expired certs in SAML client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10894.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-10885","severity":"moderate","public_date":"2018-07-04T00:00:00Z","advisories":[],"bugzilla":"1597090","bugzilla_description":"CVE-2018-10885 atomic-openshift: Malicious network-policy can cause Openshift Routing DoS when using ovs-networkpolicy plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10885.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-12900","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2019:2053","RHSA-2019:3419"],"bugzilla":"1595575","bugzilla_description":"CVE-2018-12900 libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libtiff-0:4.0.3-32.el7","libtiff-0:4.0.9-15.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12900.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10863","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1594122","bugzilla_description":"CVE-2018-10863 redhat-certification: directory listing in /rhcert-transfer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-10898","severity":"important","public_date":"2018-06-22T00:00:00Z","advisories":["RHSA-2018:2214"],"bugzilla":"1600360","bugzilla_description":"CVE-2018-10898 openstack-tripleo-heat-templates: Default ODL deployment uses hard coded administrative credentials","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-798","affected_packages":["openstack-tripleo-heat-templates-0:8.0.2-43.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10898.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-10864","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":["RHSA-2018:2373"],"bugzilla":"1593627","bugzilla_description":"CVE-2018-10864 redhat-certification: resource consumption in DocumentBase:loadFiltered","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-certification-0:5.16-20180809.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10864.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10865","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593631","bugzilla_description":"CVE-2018-10865 redhat-certification: \"restart\" a node without authorization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2018-10866","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593632","bugzilla_description":"CVE-2018-10866 redhat-certification: remove a \"system\" file without authorization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10866.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-10867","severity":"moderate","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593764","bugzilla_description":"CVE-2018-10867 redhat-certification: /uploads/results page allows to remove files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10867.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-3897","severity":"moderate","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593768","bugzilla_description":"CVE-2019-3897 redhat-certification: /rhcert allows to download any file under /var/www/rhcert directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-10868","severity":"moderate","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593776","bugzilla_description":"CVE-2018-10868 redhat-certification: billion laugh attack when getting the status of a host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10868.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10841","severity":"important","public_date":"2018-06-20T10:00:00Z","advisories":["RHSA-2018:1954","RHSA-2018:1955"],"bugzilla":"1582043","bugzilla_description":"CVE-2018-10841 glusterfs: access trusted peer group via remote-host command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["glusterfs-0:3.8.4-54.11.el6","glusterfs-0:3.8.4-54.10.el7","glusterfs-0:3.8.4-54.11.el6rhs","glusterfs-0:3.8.4-54.10.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10841.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2018-14404","severity":"moderate","public_date":"2018-06-18T00:00:00Z","advisories":["RHBA-2020:3180","RHBA-2020:1539","RHSA-2020:1827","RHSA-2019:1543","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1595985","bugzilla_description":"CVE-2018-14404 libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4","redhat-coreos-43.82.202007300301.0","libxml2-0:2.9.7-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-12440","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":[],"bugzilla":"1591911","bugzilla_description":"CVE-2018-12440 netty-tcnative-boringssl-static: memory-cache side-channel attack on DSA signatures","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12440.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-12023","severity":"important","public_date":"2018-06-08T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1671096","bugzilla_description":"CVE-2018-12023 jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-16005","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588846","bugzilla_description":"CVE-2017-16005 nodejs-http-signature: HTTP header forgery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-0161","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2019:2125","RHSA-2019:2437"],"bugzilla":"1694065","bugzilla_description":"CVE-2019-0161 edk2: stack overflow in XHCI causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-400","affected_packages":["redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2018-11235","severity":"important","public_date":"2018-05-30T00:00:00Z","advisories":["RHSA-2018:1957","RHSA-2018:2147"],"bugzilla":"1583862","bugzilla_description":"CVE-2018-11235 git: arbitrary code execution when recursively cloning a malicious repository","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-git29-git-0:2.9.3-4.el7","rh-git29-git-0:2.9.3-4.el6","git-0:1.8.3.1-14.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11235.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12533","severity":"critical","public_date":"2018-05-30T00:00:00Z","advisories":["RHSA-2018:2930","RHSA-2018:2663","RHSA-2018:2664"],"bugzilla":"1584490","bugzilla_description":"CVE-2018-12533 RichFaces: Injection of arbitrary EL expressions allows remote code execution via org.richfaces.renderkit.html.Paint2DResource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["richfaces-0:3.3.1-7.SP3_patch_02.ep5.el5","richfaces-0:3.3.1-4.SP3_patch_02.ep5.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-14040","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601614","bugzilla_description":"CVE-2018-14040 bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14041","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2019:1456"],"bugzilla":"1601616","bugzilla_description":"CVE-2018-14041 bootstrap: Cross-site Scripting (XSS) in the data-target property of scrollspy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14041.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14042","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601617","bugzilla_description":"CVE-2018-14042 bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12022","severity":"important","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1671097","bugzilla_description":"CVE-2018-12022 jackson-databind: improper polymorphic deserialization of types from Jodd-db library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-10843","severity":"important","public_date":"2018-05-24T00:00:00Z","advisories":["RHSA-2018:2013"],"bugzilla":"1579096","bugzilla_description":"CVE-2018-10843 source-to-image: Builder images with assembler-user LABEL set to root allows attackers to execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.9.31-1.git.0.ef9737b.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2018-8013","severity":"moderate","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1581725","bugzilla_description":"CVE-2018-8013 batik: information disclosure when deserializing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8013.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-11627","severity":"moderate","public_date":"2018-05-22T00:00:00Z","advisories":["RHSA-2019:0212","RHSA-2019:0315"],"bugzilla":"1585218","bugzilla_description":"CVE-2018-11627 rubygem-sinatra: XSS in the 400 Bad Request page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-8014","severity":"moderate","public_date":"2018-05-17T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2019:0451","RHSA-2019:0450","RHSA-2019:2205","RHSA-2018:3768","RHSA-2018:2469","RHSA-2019:1529"],"bugzilla":"1579611","bugzilla_description":"CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","tomcat8-0:8.0.36-31.ep7.el7","tomcat7-0:7.0.70-27.ep7.el7","tomcat7-0:7.0.70-27.ep7.el6","tomcat8-0:8.0.36-31.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2018-11237","severity":"moderate","public_date":"2018-05-17T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1581274","bugzilla_description":"CVE-2018-11237 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11237.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-12422","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":[],"bugzilla":"1592624","bugzilla_description":"CVE-2018-12422 evolution-data-server: Unsafe use of strcat allows buffer overflow in addressbook/backends/ldap/e-book-backend-ldap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-11307","severity":"important","public_date":"2018-05-10T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1677341","bugzilla_description":"CVE-2018-11307 jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11307.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-1259","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:3768","RHSA-2018:1809"],"bugzilla":"1578902","bugzilla_description":"CVE-2018-1259 spring-data-commons: XXE with Spring Data’s XMLBeam integration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1259.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-1087","severity":"important","public_date":"2018-05-08T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1347","RHSA-2018:1710","RHSA-2018:1348","RHSA-2018:1524","RHSA-2018:1711","RHSA-2018:1345","RHSA-2018:1355"],"bugzilla":"1566837","bugzilla_description":"CVE-2018-1087 Kernel: KVM: error in exception handling leads to wrong debug stack value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.25.4.el7","redhat-virtualization-host-0:3.6-20180521.0","kernel-0:3.10.0-862.2.3.el7","rhev-hypervisor7-0:7.3-20180521.1.el7ev","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","rhev-hypervisor7-0:7.3-20180521.1.el6ev","kernel-0:3.10.0-327.66.3.el7","kernel-0:3.10.0-514.48.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1087.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-8897","severity":"moderate","public_date":"2018-05-08T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1319","RHSA-2018:1349","RHSA-2018:1347","RHSA-2018:1710","RHSA-2018:1348","RHSA-2018:1524","RHSA-2018:1711","RHSA-2018:1345","RHSA-2018:1346","RHSA-2018:1354","RHSA-2018:1355","RHSA-2018:1352","RHSA-2018:1353","RHSA-2018:1350","RHSA-2018:1351"],"bugzilla":"1567074","bugzilla_description":"CVE-2018-8897 Kernel: error in exception handling leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.25.4.el7","redhat-virtualization-host-0:3.6-20180521.0","kernel-0:2.6.32-696.28.1.el6","kernel-0:2.6.18-431.el5","kernel-0:2.6.32-504.68.2.el6","kernel-rt-1:3.10.0-693.25.4.rt56.613.el6rt","kernel-0:3.10.0-514.48.3.el7","kernel-0:2.6.32-358.88.2.el6","kernel-0:2.6.32-573.55.2.el6","kernel-0:2.6.32-431.89.2.el6","kernel-0:3.10.0-862.2.3.el7","rhev-hypervisor7-0:7.3-20180521.1.el7ev","kernel-0:2.6.18-348.39.2.el5","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","rhev-hypervisor7-0:7.3-20180521.1.el6ev","kernel-0:3.10.0-327.66.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8897.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1102","severity":"critical","public_date":"2018-04-27T00:00:00Z","advisories":["RHSA-2018:1239","RHSA-2018:1229","RHSA-2018:1237","RHSA-2018:1227","RHSA-2019:0036","RHSA-2018:1235","RHSA-2018:1233","RHSA-2018:1231","RHSA-2018:1243","RHSA-2018:1241"],"bugzilla":"1562246","bugzilla_description":"CVE-2018-1102 source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.3.1.46.39-2.git.3.cc57f5b.el7","atomic-openshift-0:3.9.25-1.git.0.6bc473e.el7","atomic-openshift-0:3.1.1.11-4.git.3.12809c8.el7","source-to-image-0:1.1.13-1.el7","atomic-openshift-0:3.2.1.34-2.git.3.aad33c3.el7","atomic-openshift-0:3.7.44-1.git.0.6b061d4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.9"},{"CVE":"CVE-2018-1067","severity":"moderate","public_date":"2018-04-25T17:51:00Z","advisories":["RHSA-2020:2562","RHSA-2018:1248","RHSA-2018:1249","RHSA-2019:0877","RHSA-2018:2643","RHSA-2018:1247","RHSA-2018:1251"],"bugzilla":"1550671","bugzilla_description":"CVE-2018-1067 undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-113","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:4.2-20180828.0.el7","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-10237","severity":"moderate","public_date":"2018-04-25T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:3149","RHSA-2020:2562","RHSA-2018:2428","RHSA-2018:2425","RHSA-2018:2743","RHSA-2018:2423","RHSA-2019:2858","RHSA-2018:2643","RHSA-2018:2742","RHSA-2018:2424","RHSA-2018:2741","RHSA-2018:2740","RHSA-2018:2598"],"bugzilla":"1573391","bugzilla_description":"CVE-2018-10237 guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rhvm-appliance-0:4.2-20180828.0.el7","opendaylight-0:8.3.0-3.el7ost","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10237.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15138","severity":"moderate","public_date":"2018-04-11T00:00:00Z","advisories":["RHBA-2018:0489"],"bugzilla":"1566212","bugzilla_description":"CVE-2017-15138 atomic-openshift: cluster-reader can escalate to creating builds via webhooks in any project","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["atomic-openshift-0:3.9.14-1.git.0.4efa2ca.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15138.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2018-1275","severity":"critical","public_date":"2018-04-09T19:00:00Z","advisories":["RHSA-2018:1320","RHSA-2018:2939"],"bugzilla":"1565307","bugzilla_description":"CVE-2018-1275 spring-framework: Address partial fix for CVE-2018-1270","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1275.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-1000156","severity":"important","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:2096","RHSA-2018:2097","RHSA-2018:2094","RHSA-2018:2095","RHSA-2018:2092","RHSA-2018:2093","RHSA-2018:2091","RHSA-2018:1200","RHSA-2018:1199"],"bugzilla":"1564326","bugzilla_description":"CVE-2018-1000156 patch: Malicious patch files cause ed to execute arbitrary commands","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["patch-0:2.6-8.el6_9","patch-0:2.7.1-10.el7_2","patch-0:2.6-8.el6_4","patch-0:2.7.1-10.el7_4","patch-0:2.7.1-10.el7_3","patch-0:2.6-8.el6_6","patch-0:2.6-8.el6_5","patch-0:2.7.1-10.el7_5","patch-0:2.6-8.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000156.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-1270","severity":"critical","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:2939"],"bugzilla":"1564405","bugzilla_description":"CVE-2018-1270 spring-framework: Possible RCE via spring messaging","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1270.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-1272","severity":"low","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:2669","RHSA-2018:1320"],"bugzilla":"1564408","bugzilla_description":"CVE-2018-1272 spring-framework: Multipart content pollution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1274","severity":"important","public_date":"2018-04-04T00:00:00Z","advisories":[],"bugzilla":"1565926","bugzilla_description":"CVE-2018-1274 spring-data-commons: Unlimited path depth in PropertyPath.java allow remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-9251","severity":"low","public_date":"2018-04-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1827"],"bugzilla":"1565318","bugzilla_description":"CVE-2018-9251 libxml2: infinite loop in xz_decomp function in xzlib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["redhat-coreos-43.82.202007300301.0","libxml2-0:2.9.7-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2018-1096","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":["RHSA-2018:2927"],"bugzilla":"1561061","bugzilla_description":"CVE-2018-1096 foreman: SQL injection due to improper handling of the widget id parameter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":["foreman-0:1.18.0.37-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-15137","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":["RHBA-2018:0489"],"bugzilla":"1566191","bugzilla_description":"CVE-2017-15137 atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tag","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.9.14-1.git.0.4efa2ca.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-1273","severity":"critical","public_date":"2018-03-27T00:00:00Z","advisories":[],"bugzilla":"1565923","bugzilla_description":"CVE-2018-1273 spring-data-commons: Improper neutralization of special elements allow remote attackers to execute code via crafted requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1273.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-1090","severity":"moderate","public_date":"2018-03-23T00:00:00Z","advisories":["RHSA-2018:2927"],"bugzilla":"1560035","bugzilla_description":"CVE-2018-1090 pulp: sensitive credentials revealed through the API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["pulp-0:2.16.4.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1090.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2018-1002100","severity":"moderate","public_date":"2018-03-17T00:00:00Z","advisories":["RHBA-2018:1796"],"bugzilla":"1564305","bugzilla_description":"CVE-2018-1002100 kubernetes: Kubectl copy doesn't check for paths outside of it's destination directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.9.30-1.git.0.dec1ba7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-8048","severity":"moderate","public_date":"2018-03-15T00:00:00Z","advisories":[],"bugzilla":"1559071","bugzilla_description":"CVE-2018-8048 rubygem-loofah: XSS vulnerability due to unescaped comments within attributes by libxml2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-12196","severity":"moderate","public_date":"2018-03-12T15:56:00Z","advisories":["RHSA-2018:0480","RHSA-2020:2561","RHSA-2018:2405","RHSA-2018:1525","RHSA-2020:2562","RHSA-2018:0478","RHSA-2018:3768","RHSA-2018:0479","RHSA-2018:0481"],"bugzilla":"1503055","bugzilla_description":"CVE-2017-12196 undertow: Client can use bogus uri in Digest authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rhvm-appliance-0:4.2-20180504.0","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-1002101","severity":"important","public_date":"2018-03-12T00:00:00Z","advisories":["RHSA-2018:0475"],"bugzilla":"1525130","bugzilla_description":"CVE-2017-1002101 kubernetes: Volume security can be sidestepped with innocent emptyDir and subpath","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1002101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2018-1098","severity":"moderate","public_date":"2018-03-07T00:00:00Z","advisories":[],"bugzilla":"1552714","bugzilla_description":"CVE-2018-1098 etcd: Cross-site request forgery via crafted local POST forms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1098.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1099","severity":"moderate","public_date":"2018-03-07T00:00:00Z","advisories":[],"bugzilla":"1552717","bugzilla_description":"CVE-2018-1099 etcd: DNS rebinding vulnerability in etcd server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1099.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-7536","severity":"moderate","public_date":"2018-03-06T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:0265","RHSA-2019:0051","RHSA-2019:0082"],"bugzilla":"1549777","bugzilla_description":"CVE-2018-7536 django: Catastrophic backtracking in regular expressions via 'urlize' and 'urlizetrunc'","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":["python-django-0:1.8.19-1.el7ost","python-django-0:1.11.11-1.el7sat","python-django-0:1.11.15-4.el7rhgs","python-django-0:1.11.11-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7536.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-7537","severity":"moderate","public_date":"2018-03-06T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:0265"],"bugzilla":"1549779","bugzilla_description":"CVE-2018-7537 django: Catastrophic backtracking in regular expressions via 'truncatechars_html' and 'truncatewords_html'","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":["python-django-0:1.11.11-1.el7sat","python-django-0:1.11.15-4.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7537.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-1002102","severity":"moderate","public_date":"2018-03-06T00:00:00Z","advisories":["RHSA-2018:0475"],"bugzilla":"1551818","bugzilla_description":"CVE-2017-1002102 kubernetes: Malicious containers can delete any file from the node","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1002102.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-1058","severity":"moderate","public_date":"2018-03-01T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1547044","bugzilla_description":"CVE-2018-1058 postgresql: Uncontrolled search path element in pg_dump and other client applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1058.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-15136","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":[],"bugzilla":"1540343","bugzilla_description":"CVE-2017-15136 katello: system registration hostname hijacking results in inability to access updates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2018-7489","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":["RHSA-2018:2938","RHSA-2019:3149","RHSA-2018:1448","RHSA-2018:1449","RHSA-2020:2562","RHSA-2018:1447","RHSA-2018:2939","RHSA-2018:2090","RHSA-2019:2858","RHSA-2018:1786","RHSA-2018:1451","RHSA-2018:2089","RHSA-2018:2088","RHSA-2018:1450"],"bugzilla":"1549276","bugzilla_description":"CVE-2018-7489 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-7456","severity":"low","public_date":"2018-02-24T00:00:00Z","advisories":["RHSA-2019:2053","RHSA-2019:2051"],"bugzilla":"1556708","bugzilla_description":"CVE-2018-7456 libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["compat-libtiff3-0:3.9.4-12.el7","libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1305","severity":"moderate","public_date":"2018-02-23T00:00:00Z","advisories":["RHSA-2019:2205","RHSA-2018:0465","RHSA-2018:0466","RHSA-2018:1320","RHSA-2018:2939"],"bugzilla":"1548282","bugzilla_description":"CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["tomcat-0:7.0.76-9.el7","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1305.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-8088","severity":"important","public_date":"2018-02-22T00:00:00Z","advisories":["RHSA-2018:2419","RHSA-2018:1448","RHSA-2018:1525","RHSA-2018:1449","RHSA-2018:1248","RHSA-2018:1447","RHSA-2018:1249","RHSA-2018:0630","RHSA-2018:2930","RHSA-2018:1323","RHSA-2018:1247","RHSA-2018:0592","RHSA-2018:0627","RHSA-2018:0628","RHSA-2020:2561","RHSA-2018:2669","RHSA-2019:2413","RHSA-2019:3140","RHSA-2018:0629","RHSA-2018:1575","RHSA-2018:1451","RHSA-2018:0582","RHSA-2018:2420","RHSA-2018:1251","RHSA-2018:2143","RHSA-2018:1450"],"bugzilla":"1548909","bugzilla_description":"CVE-2018-8088 slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el7","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el6","rhvm-appliance-0:4.2-20180504.0","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el5","rh-maven35-slf4j-0:1.7.25-1.3.el7","slf4j-0:1.7.4-4.el7_4","eap7-slf4j-0:1.7.22-3.redhat_2.1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6","eap7-slf4j-0:1.7.22-3.redhat_2.1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8088.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-7212","severity":"low","public_date":"2018-02-18T00:00:00Z","advisories":[],"bugzilla":"1802282","bugzilla_description":"CVE-2018-7212 rubygem-sinatra: path traversal via backslash characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7212.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-10713","severity":"low","public_date":"2018-02-13T00:00:00Z","advisories":["RHSA-2019:2033"],"bugzilla":"1545405","bugzilla_description":"CVE-2016-10713 patch: Out-of-bounds access in pch_write_line function in pch.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["patch-0:2.7.1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10713.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15709","severity":"low","public_date":"2018-02-13T00:00:00Z","advisories":[],"bugzilla":"1548057","bugzilla_description":"CVE-2017-15709 activemq-openwire-generator: Information Exposure in ActiveMQ","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15709.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2017-15089","severity":"important","public_date":"2018-02-12T15:00:00Z","advisories":["RHSA-2018:0480","RHSA-2020:2561","RHSA-2018:0478","RHSA-2018:0479","RHSA-2018:0501","RHSA-2019:1326","RHSA-2018:0294","RHSA-2018:0481"],"bugzilla":"1503610","bugzilla_description":"CVE-2017-15089 infinispan: Unsafe deserialization of malicious object injected into data cache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-1097","severity":"moderate","public_date":"2018-02-10T00:00:00Z","advisories":["RHSA-2018:2927"],"bugzilla":"1561723","bugzilla_description":"CVE-2018-1097 foreman: Ovirt admin password exposed by foreman API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["foreman-0:1.18.0.37-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1097.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2018-1053","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1539619","bugzilla_description":"CVE-2018-1053 postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-6188","severity":"moderate","public_date":"2018-02-05T13:23:00Z","advisories":["RHSA-2018:2927"],"bugzilla":"1538793","bugzilla_description":"CVE-2018-6188 django: Information leakage in AuthenticationForm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":["python-django-0:1.11.11-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6188.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-12174","severity":"important","public_date":"2018-02-05T00:00:00Z","advisories":["RHSA-2018:0270","RHSA-2018:0271","RHSA-2018:0480","RHSA-2020:2561","RHSA-2018:0478","RHSA-2018:0269","RHSA-2018:0479","RHSA-2018:0268","RHSA-2018:0275","RHSA-2018:0481"],"bugzilla":"1498378","bugzilla_description":"CVE-2017-12174 artemis/hornetq: memory exhaustion via UDP and JGroups discovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12174.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1041","severity":"moderate","public_date":"2018-02-05T00:00:00Z","advisories":["RHSA-2018:0270","RHSA-2018:0271","RHSA-2018:0269","RHSA-2018:0268","RHSA-2018:0275"],"bugzilla":"1530457","bugzilla_description":"CVE-2018-1041 jboss-remoting: High CPU Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1041.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10690","severity":"moderate","public_date":"2018-02-05T00:00:00Z","advisories":["RHSA-2018:2927"],"bugzilla":"1566764","bugzilla_description":"CVE-2017-10690 puppet: Environment leakage in puppet-agent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":["puppet-agent-0:5.5.0-2.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10690.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-11236","severity":"moderate","public_date":"2018-02-04T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1581269","bugzilla_description":"CVE-2018-11236 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-121","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-6951","severity":"low","public_date":"2018-02-03T00:00:00Z","advisories":[],"bugzilla":"1545046","bugzilla_description":"CVE-2018-6951 patch: NULL pointer dereference in pch.c:intuit_diff_type() causes a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6951.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6952","severity":"low","public_date":"2018-02-03T00:00:00Z","advisories":["RHSA-2019:2033"],"bugzilla":"1545053","bugzilla_description":"CVE-2018-6952 patch: Double free of memory in pch.c:another_hunk() causes a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["patch-0:2.7.1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6952.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6551","severity":"moderate","public_date":"2018-02-02T00:00:00Z","advisories":[],"bugzilla":"1542119","bugzilla_description":"CVE-2018-6551 glibc: integer overflow in malloc functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6551.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-15698","severity":"moderate","public_date":"2018-01-31T00:00:00Z","advisories":["RHSA-2018:0465","RHSA-2018:0466"],"bugzilla":"1540824","bugzilla_description":"CVE-2017-15698 tomcat-native: Mishandling of client certificates can allow for OCSP check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-299","affected_packages":["tomcat-native-0:1.2.8-11.redhat_11.ep7.el6","tomcat-native-0:1.2.8-11.redhat_11.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-15706","severity":"low","public_date":"2018-01-31T00:00:00Z","advisories":[],"bugzilla":"1540828","bugzilla_description":"CVE-2017-15706 tomcat: Incorrect documentation of CGI Servlet search algorithm may lead to misconfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-1304","severity":"moderate","public_date":"2018-01-31T00:00:00Z","advisories":["RHSA-2019:2205","RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1447","RHSA-2018:0465","RHSA-2018:0466","RHSA-2018:1451","RHSA-2018:1320","RHSA-2018:1450","RHSA-2018:2939"],"bugzilla":"1548289","bugzilla_description":"CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["tomcat-0:7.0.76-9.el7","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","jbossweb-0:7.5.28-1.Final_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1199","severity":"important","public_date":"2018-01-29T00:00:00Z","advisories":["RHSA-2018:2405"],"bugzilla":"1540030","bugzilla_description":"CVE-2018-1199 spring-framework: Improper URL path validation allows for bypassing of security checks on static resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1199.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-6560","severity":"moderate","public_date":"2018-01-29T00:00:00Z","advisories":["RHSA-2018:2766"],"bugzilla":"1542207","bugzilla_description":"CVE-2018-6560 flatpak: sandbox escape in D-Bus filtering by a crafted authentication handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":["flatpak-0:0.8.8-4.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6560.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-5784","severity":"low","public_date":"2018-01-18T00:00:00Z","advisories":[],"bugzilla":"1537740","bugzilla_description":"CVE-2018-5784 libtiff: uncontrolled resource consumption in TIFFSetDirectory function in tif_dir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5784.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5968","severity":"moderate","public_date":"2018-01-18T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2019:3149","RHSA-2018:1525","RHSA-2018:0478","RHSA-2018:0479","RHSA-2019:2858","RHSA-2018:0481"],"bugzilla":"1538332","bugzilla_description":"CVE-2018-5968 jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rhvm-appliance-0:4.2-20180504.0","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5968.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-1048","severity":"moderate","public_date":"2018-01-15T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2018:0478","RHSA-2018:0479","RHSA-2018:0481"],"bugzilla":"1534343","bugzilla_description":"CVE-2018-1048 undertow: ALLOW_ENCODED_SLASH option not taken into account in the AjpRequestParser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"8.6"},{"CVE":"CVE-2018-1000001","severity":"important","public_date":"2018-01-11T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1533836","bugzilla_description":"CVE-2018-1000001 glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000001.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2017-12189","severity":"important","public_date":"2018-01-03T00:00:00Z","advisories":["RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003"],"bugzilla":"1499631","bugzilla_description":"CVE-2017-12189 jboss: unsafe chown of server.log in jboss init script allows privilege escalation (Incomplete fix for CVE-2016-8656)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12189.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-17942","severity":"low","public_date":"2017-12-28T00:00:00Z","advisories":[],"bugzilla":"1529524","bugzilla_description":"CVE-2017-17942 libtiff: Heap-based buffer overflow in PackBitsEncode function in tif_packbits.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-18269","severity":"moderate","public_date":"2017-12-24T00:00:00Z","advisories":[],"bugzilla":"1580924","bugzilla_description":"CVE-2017-18269 glibc: memory corruption in memcpy-sse2-unaligned.S","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18269.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-17840","severity":"moderate","public_date":"2017-12-22T00:00:00Z","advisories":[],"bugzilla":"1529176","bugzilla_description":"CVE-2017-17840 iscsi-initiator-utils: Heap-based buffer overflow in process_iscsid_broadcast()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-16997","severity":"moderate","public_date":"2017-12-17T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1526865","bugzilla_description":"CVE-2017-16997 glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-470","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16997.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-1047","severity":"moderate","public_date":"2017-12-17T00:00:00Z","advisories":["RHSA-2018:2938","RHSA-2018:1248","RHSA-2018:1249","RHSA-2018:1247","RHSA-2018:1251"],"bugzilla":"1528361","bugzilla_description":"CVE-2018-1047 undertow: Path traversal in ServletResourceManager class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-22","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1047.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"8.6"},{"CVE":"CVE-2017-7559","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2018:1322","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1481665","bugzilla_description":"CVE-2017-7559 undertow: HTTP Request smuggling vulnerability (incomplete fix of CVE-2017-2666)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7559.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-12165","severity":"low","public_date":"2017-12-13T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2018:1322","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1490301","bugzilla_description":"CVE-2017-12165 undertow: improper whitespace parsing leading to potential HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12165.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2017-17485","severity":"important","public_date":"2017-12-12T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2018:1448","RHSA-2019:3892","RHSA-2019:1797","RHSA-2018:1449","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2018:0116","RHSA-2018:0480","RHSA-2018:2930","RHSA-2019:2858","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1528565","bugzilla_description":"CVE-2017-17485 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","rh-eclipse46-jackson-databind-0:2.6.3-2.6.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-1000408","severity":"low","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1522828","bugzilla_description":"CVE-2017-1000408 glibc: Memory leak reachable via LD_HWCAP_MASK","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000408.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000409","severity":"moderate","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1522830","bugzilla_description":"CVE-2017-1000409 glibc: Buffer overflow triggerable via LD_LIBRARY_PATH","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000409.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-7545","severity":"moderate","public_date":"2017-11-30T16:00:00Z","advisories":["RHSA-2017:3354","RHSA-2017:3355"],"bugzilla":"1474822","bugzilla_description":"CVE-2017-7545 jbpmmigration: XXE vulnerability in XmlUtils","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7545.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-17095","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":[],"bugzilla":"1524284","bugzilla_description":"CVE-2017-17095 libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-12195","severity":"moderate","public_date":"2017-11-28T00:00:00Z","advisories":["RHSA-2017:3188","RHSA-2017:3389"],"bugzilla":"1501986","bugzilla_description":"CVE-2017-12195 OpenShift Enterprise 3: authentication bypass for elasticsearch with external routes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["openshift-elasticsearch-plugin-0:2.4.4.17__redhat_1-3.el7","openshift-elasticsearch-plugin-0:2.4.1.11__redhat_1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-18197","severity":"moderate","public_date":"2017-11-22T00:00:00Z","advisories":[],"bugzilla":"1550353","bugzilla_description":"CVE-2017-18197 jgraphx: XML External Entity (XXE) vulnerability in mxGraphViewImageReader.java:convert()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-16539","severity":"moderate","public_date":"2017-11-03T00:00:00Z","advisories":[],"bugzilla":"1516205","bugzilla_description":"CVE-2017-16539 docker: The DefaultLinuxSpec function does not block /proc/scsi pathnames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15095","severity":"important","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:3149","RHSA-2017:3190","RHSA-2018:1448","RHSA-2019:3892","RHSA-2018:1449","RHSA-2018:0577","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2017:3189","RHSA-2018:0480","RHSA-2019:2858","RHSA-2018:0576","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1506612","bugzilla_description":"CVE-2017-15095 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","rh-eclipse47-jackson-databind-0:2.7.6-3.3.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","rh-eclipse46-jackson-databind-0:2.6.3-2.4.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-16232","severity":"low","public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1516189","bugzilla_description":"CVE-2017-16232 libtiff: Memory leaks in tif_open.c, tif_lzw.c, and tif_aux.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15100","severity":"moderate","public_date":"2017-10-31T00:00:00Z","advisories":["RHSA-2018:2927"],"bugzilla":"1508551","bugzilla_description":"CVE-2017-15100 foreman: Stored XSS in fact name or value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["foreman-0:1.18.0.37-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-17426","severity":"moderate","public_date":"2017-10-31T00:00:00Z","advisories":[],"bugzilla":"1524530","bugzilla_description":"CVE-2017-17426 glibc: Integer overflow with enabled tcache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17426.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10516","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1512102","bugzilla_description":"CVE-2016-10516 python-werkzeug: Cross-site scripting in render_full function in debug/tbtools.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["python-werkzeug-0:0.12.2-5.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2017-15804","severity":"moderate","public_date":"2017-10-21T00:00:00Z","advisories":["RHSA-2018:1879","RHSA-2018:0805"],"bugzilla":"1505298","bugzilla_description":"CVE-2017-15804 glibc: Buffer overflow during unescaping of user names with the ~ operator","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7","glibc-0:2.12-1.212.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-15671","severity":"low","public_date":"2017-10-20T00:00:00Z","advisories":[],"bugzilla":"1504806","bugzilla_description":"CVE-2017-15671 glibc: Memory leak in glob with GLOB_TILDE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15671.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17740","severity":"moderate","public_date":"2017-10-20T00:00:00Z","advisories":[],"bugzilla":"1527076","bugzilla_description":"CVE-2017-17740 openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15670","severity":"moderate","public_date":"2017-10-19T00:00:00Z","advisories":["RHSA-2018:1879","RHSA-2018:0805"],"bugzilla":"1504804","bugzilla_description":"CVE-2017-15670 glibc: Buffer overflow in glob with GLOB_TILDE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7","glibc-0:2.12-1.212.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15670.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-12159","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1484111","bugzilla_description":"CVE-2017-12159 keycloak: CSRF token fixation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-12160","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1484154","bugzilla_description":"CVE-2017-12160 keycloak: resource privilege extension via access token in oauth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-12158","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1489161","bugzilla_description":"CVE-2017-12158 keycloak: reflected XSS using HOST header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-12197","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1503103","bugzilla_description":"CVE-2017-12197 libpam4j: Account check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-12629","severity":"critical","public_date":"2017-10-12T00:00:00Z","advisories":["RHSA-2020:2561","RHSA-2018:0005","RHSA-2018:0002","RHSA-2017:3452","RHSA-2017:3244","RHSA-2017:3123","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:3451","RHSA-2017:3124"],"bugzilla":"1501529","bugzilla_description":"CVE-2017-12629 Solr: Code execution via entity expansion","cvss_score":10.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-138","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-lucene-solr-0:5.3.1-4.redhat_2.1.ep7.el6","eap7-lucene-solr-0:5.3.1-4.redhat_2.1.ep7.el7","rh-java-common-lucene5-0:5.4.1-2.4.el7","rh-java-common-lucene5-0:5.4.1-2.4.el6","rh-java-common-lucene-0:4.8.0-6.9.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6","rh-java-common-lucene-0:4.8.0-6.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-6485","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1542102","bugzilla_description":"CVE-2018-6485 glibc: Integer overflow in posix_memalign in memalign functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6485.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-14992","severity":"moderate","public_date":"2017-10-03T00:00:00Z","advisories":[],"bugzilla":"1510348","bugzilla_description":"CVE-2017-14992 docker: Lack of content verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-2582","severity":"moderate","public_date":"2017-09-26T00:00:00Z","advisories":["RHSA-2019:0136","RHSA-2019:0137","RHSA-2017:3220","RHSA-2017:3218","RHSA-2017:2811","RHSA-2017:3219","RHSA-2017:3216","RHSA-2017:2810","RHSA-2017:3217","RHSA-2018:2743","RHSA-2017:2808","RHSA-2018:2742","RHSA-2017:2809","RHSA-2018:2741","RHSA-2019:0139","RHSA-2018:2740"],"bugzilla":"1410481","bugzilla_description":"CVE-2017-2582 picketlink, keycloak: SAML request parser replaces special strings with system properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["jboss-ec2-eap-0:7.5.18-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-7536","severity":"moderate","public_date":"2017-09-26T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2018:3817","RHSA-2017:3141","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:2811","RHSA-2017:3458","RHSA-2017:2810","RHSA-2018:2743","RHSA-2017:2808","RHSA-2018:2742","RHSA-2017:2809","RHSA-2018:2741","RHSA-2018:2740"],"bugzilla":"1465573","bugzilla_description":"CVE-2017-7536 hibernate-validator: Privilege escalation when running under the security manager","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","rhvm-appliance-0:20171102.0-1","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2017-12617","severity":"important","public_date":"2017-09-21T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2018:0270","RHSA-2018:0271","RHSA-2017:3080","RHSA-2018:0269","RHSA-2018:0465","RHSA-2018:0268","RHSA-2018:0466","RHSA-2018:0275","RHSA-2017:3113","RHSA-2018:2939","RHSA-2017:3114"],"bugzilla":"1494283","bugzilla_description":"CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat6-0:6.0.41-19_patch_04.ep6.el7","tomcat7-0:7.0.54-28_patch_05.ep6.el7","tomcat6-0:6.0.41-19_patch_04.ep6.el6","tomcat7-0:7.0.54-28_patch_05.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","tomcat6-0:6.0.24-111.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12617.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12155","severity":"moderate","public_date":"2017-09-19T00:00:00Z","advisories":["RHSA-2018:1627","RHSA-2018:0602","RHSA-2018:1593"],"bugzilla":"1489360","bugzilla_description":"CVE-2017-12155 openstack-tripleo-heat-templates: Ceph client keyring is world-readable when deployed by director","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["openstack-tripleo-heat-templates-0:5.3.10-1.el7ost","openstack-tripleo-heat-templates-0:7.0.9-8.el7ost","puppet-tripleo-0:5.6.8-6.el7ost","puppet-tripleo-0:6.5.10-3.el7ost","openstack-tripleo-heat-templates-0:6.2.12-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12155.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cvss3_score":"8.4"},{"CVE":"CVE-2017-12615","severity":"important","public_date":"2017-09-19T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:3080","RHSA-2018:0465","RHSA-2018:0466","RHSA-2017:3113","RHSA-2017:3114"],"bugzilla":"1493220","bugzilla_description":"CVE-2017-12615 tomcat: Remote Code Execution via JSP Upload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat6-0:6.0.41-19_patch_04.ep6.el7","tomcat7-0:7.0.54-28_patch_05.ep6.el7","tomcat6-0:6.0.41-19_patch_04.ep6.el6","tomcat7-0:7.0.54-28_patch_05.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","tomcat6-0:6.0.24-111.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12616","severity":"moderate","public_date":"2017-09-19T00:00:00Z","advisories":["RHSA-2018:0465","RHSA-2018:0466"],"bugzilla":"1493222","bugzilla_description":"CVE-2017-12616 tomcat: Information Disclosure when using VirtualDirContext","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12616.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-14503","severity":"low","public_date":"2017-09-16T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1494449","bugzilla_description":"CVE-2017-14503 libarchive: Out-of-bounds read in lha_read_data_none","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14503.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12167","severity":"moderate","public_date":"2017-09-14T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1491612","bugzilla_description":"CVE-2017-12167 EAP-7: Wrong privileges on multiple property files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-16138","severity":"moderate","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1500700","bugzilla_description":"CVE-2017-16138 nodejs-mime: Regular expression Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16138.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-16137","severity":"moderate","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1500705","bugzilla_description":"CVE-2017-16137 nodejs-debug: Regular expression Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-14623","severity":"moderate","public_date":"2017-08-24T00:00:00Z","advisories":[],"bugzilla":"1493998","bugzilla_description":"CVE-2017-14623 gopkg.in-ldap.v2: Authentication bypass via empty password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7561","severity":"moderate","public_date":"2017-08-22T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2018:0005","RHSA-2018:0478","RHSA-2018:0479","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2018:0481"],"bugzilla":"1483823","bugzilla_description":"CVE-2017-7561 resteasy: Vary header not added by CORS filter leading to cache poisoning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7561.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-13726","severity":"low","public_date":"2017-08-21T00:00:00Z","advisories":[],"bugzilla":"1488886","bugzilla_description":"CVE-2017-13726 libtiff: Reachable assertion abort in the function TIFFWriteDirectorySec()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13726.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13727","severity":"low","public_date":"2017-08-21T00:00:00Z","advisories":[],"bugzilla":"1488887","bugzilla_description":"CVE-2017-13727 libtiff: Reachable assertion abort in the function TIFFWriteDirectoryTagSubifd()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13727.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7674","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:1802","RHSA-2017:1801"],"bugzilla":"1480618","bugzilla_description":"CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat-0:7.0.76-3.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7674.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-7675","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":[],"bugzilla":"1480626","bugzilla_description":"CVE-2017-7675 tomcat: Security Constraint Bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7675.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-12944","severity":"low","public_date":"2017-08-06T00:00:00Z","advisories":[],"bugzilla":"1487202","bugzilla_description":"CVE-2017-12944 libtiff: Mishandled memory allocation for short files in the TIFFReadDirEntryArray function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12944.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14159","severity":"low","public_date":"2017-07-28T00:00:00Z","advisories":[],"bugzilla":"1488751","bugzilla_description":"CVE-2017-14159 openldap: Privilege escalation via PID file manipulation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14159.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-11613","severity":null,"public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475530","bugzilla_description":"CVE-2017-11613 libtiff: Memory leak via corrupt td_imagelength in TIFFOpen function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11613.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7525","severity":"important","public_date":"2017-07-14T00:00:00Z","advisories":["RHSA-2018:1449","RHSA-2017:3141","RHSA-2017:2477","RHSA-2017:1840","RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2637","RHSA-2017:2638","RHSA-2018:0294","RHSA-2019:3149","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:2547","RHSA-2017:3458","RHSA-2017:2546","RHSA-2017:1835","RHSA-2017:1834","RHSA-2017:1837","RHSA-2017:1836","RHSA-2019:0910","RHSA-2019:2858","RHSA-2017:1839","RHSA-2018:0342","RHSA-2018:1450"],"bugzilla":"1462702","bugzilla_description":"CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["devtoolset-4-jackson-databind-0:2.5.0-2.4.el6","openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-eclipse46-jackson-databind-0:2.6.3-2.3.el7","devtoolset-4-jackson-databind-0:2.5.0-2.4.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:20171102.0-1","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7525.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-11335","severity":"moderate","public_date":"2017-07-14T00:00:00Z","advisories":[],"bugzilla":"1474356","bugzilla_description":"CVE-2017-11335 libtiff: Heap-based buffer overflow in tiff2pdf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11335.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-9935","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469725","bugzilla_description":"CVE-2017-9935 libtiff: Heap-based buffer overflow in t2p_write_pdf function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9935.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9936","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469728","bugzilla_description":"CVE-2017-9936 libtiff: memory leak in tif_jbig.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9936.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9937","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469732","bugzilla_description":"CVE-2017-9937 libtiff: memory malloc failure in tif_jbig.c could cause DOS.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9937.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10688","severity":"low","public_date":"2017-06-29T00:00:00Z","advisories":[],"bugzilla":"1470241","bugzilla_description":"CVE-2017-10688 libtiff: Assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10688.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9233","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1462729","bugzilla_description":"CVE-2017-9233 expat: Inifinite loop due to invalid XML in external entity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2014-9984","severity":"critical","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1463288","bugzilla_description":"CVE-2014-9984 glibc: nscd buffer manipulation vulnerability could lead to code execution or crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9984.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-9780","severity":"moderate","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1465025","bugzilla_description":"CVE-2017-9780 flatpak: Privilege escalation via setuid/world-writable file permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9780.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-2595","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:1550","RHSA-2017:3456","RHSA-2017:1552","RHSA-2017:1551","RHSA-2017:1411","RHSA-2017:3454","RHSA-2017:1410","RHSA-2017:3455","RHSA-2017:1412","RHSA-2017:3458","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1409"],"bugzilla":"1413028","bugzilla_description":"CVE-2017-2595 wildfly: Arbitrary file read via path traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2595.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2017-2666","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:1412","RHSA-2017:3458","RHSA-2017:1409","RHSA-2017:3456","RHSA-2017:1411","RHSA-2017:3454","RHSA-2017:1410","RHSA-2017:3455"],"bugzilla":"1436163","bugzilla_description":"CVE-2017-2666 undertow: HTTP Request smuggling vulnerability due to permitting invalid characters in HTTP requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2666.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-2670","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:1412","RHSA-2017:3458","RHSA-2018:0501","RHSA-2017:3244","RHSA-2017:1409","RHSA-2017:3456","RHSA-2017:1411","RHSA-2017:3454","RHSA-2017:1410","RHSA-2017:3455"],"bugzilla":"1438885","bugzilla_description":"CVE-2017-2670 undertow: IO thread DoS via unclean Websocket closing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2670.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5664","severity":"important","public_date":"2017-06-06T00:00:00Z","advisories":["RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:3080","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2637","RHSA-2017:2638","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:1809"],"bugzilla":"1459158","bugzilla_description":"CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["tomcat-0:7.0.69-12.el7_3","tomcat8-0:8.0.36-24.ep7.el7","tomcat7-0:7.0.70-22.ep7.el6","tomcat8-0:8.0.36-24.ep7.el6","jbossweb-0:7.5.24-1.Final_redhat_1.1.ep6.el7","tomcat7-0:7.0.70-22.ep7.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el6","tomcat6-0:6.0.24-111.el6_9","tomcat6-0:6.0.41-17_patch_04.ep6.el7","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","tomcat6-0:6.0.41-17_patch_04.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-7470","severity":"moderate","public_date":"2017-05-18T00:00:00Z","advisories":["RHSA-2017:1259"],"bugzilla":"1439622","bugzilla_description":"CVE-2017-7470 spacewalk-backend: spacewalk-channel can be used by non-admin or disabled users for performing administrative tasks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["spacewalk-backend-0:2.0.3-45.el6sat","spacewalk-backend-0:2.3.3-49.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-9083","severity":"low","public_date":"2017-05-18T00:00:00Z","advisories":[],"bugzilla":"1453198","bugzilla_description":"CVE-2017-9083 poppler: Null pointer dereference in the JPXStream::readUByte function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9083.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9147","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1454655","bugzilla_description":"CVE-2017-9147 libtiff: Out of bounds read in _TIFFVGetField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9147.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7464","severity":"moderate","public_date":"2017-05-11T00:00:00Z","advisories":[],"bugzilla":"1439520","bugzilla_description":"CVE-2017-7464 JBoss: JAXP in EAP 7.0 allows info disclosure via XXE","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7464.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H","cvss3_score":"8.7"},{"CVE":"CVE-2017-8804","severity":"moderate","public_date":"2017-05-08T00:00:00Z","advisories":[],"bugzilla":"1448794","bugzilla_description":"CVE-2017-8804 glibc: memory leak in sunrpc when decoding malformed XDR","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-9117","severity":"moderate","public_date":"2017-05-07T00:00:00Z","advisories":[],"bugzilla":"1456756","bugzilla_description":"CVE-2017-9117 libtiff: Heap-based buffer over-read in bmp2tiff","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9117.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6512","severity":"low","public_date":"2017-05-02T00:00:00Z","advisories":[],"bugzilla":"1457832","bugzilla_description":"CVE-2017-6512 perl-File-Path: rmtree/remove_tree race condition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6512.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-9403","severity":"low","public_date":"2017-04-20T00:00:00Z","advisories":[],"bugzilla":"1458902","bugzilla_description":"CVE-2017-9403 libtiff: Memory leak in TIFFReadDirEntryLong8Array","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9403.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9404","severity":"low","public_date":"2017-04-20T00:00:00Z","advisories":[],"bugzilla":"1458904","bugzilla_description":"CVE-2017-9404 libtiff: Memory leak in OJPEGReadHeaderInfoSecTablesQTable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9404.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16881","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHBA-2019:2501","RHSA-2019:2110","RHSA-2019:2439","RHSA-2019:2437"],"bugzilla":"1658366","bugzilla_description":"CVE-2018-16881 rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190","affected_packages":["rsyslog-0:8.24.0-41.el7_7","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","rsyslog-0:8.24.0-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16881.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-7465","severity":"important","public_date":"2017-04-11T00:00:00Z","advisories":["RHSA-2020:2563"],"bugzilla":"1439980","bugzilla_description":"CVE-2017-7465 JBoss: JAXP in EAP 7.0 allows RCE via XSL","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7465.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2017-7697","severity":"low","public_date":"2017-04-11T00:00:00Z","advisories":[],"bugzilla":"1441641","bugzilla_description":"CVE-2017-7697 libsamplerate: Buffer overflow in calc_output_single","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7697.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5647","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:3080","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494"],"bugzilla":"1441205","bugzilla_description":"CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat8-0:8.0.36-24.ep7.el7","tomcat7-0:7.0.70-22.ep7.el6","tomcat8-0:8.0.36-24.ep7.el6","tomcat7-0:7.0.70-22.ep7.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el6","tomcat6-0:6.0.24-111.el6_9","tomcat6-0:6.0.41-17_patch_04.ep6.el7","tomcat6-0:6.0.41-17_patch_04.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-5648","severity":"moderate","public_date":"2017-04-10T00:00:00Z","advisories":["RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:1809"],"bugzilla":"1441223","bugzilla_description":"CVE-2017-5648 tomcat: Calls to application listeners did not use the appropriate facade object","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat-0:7.0.69-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5648.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2017-5651","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":[],"bugzilla":"1441226","bugzilla_description":"CVE-2017-5651 tomcat: Incorrect handling of send file processing could result into adding Processort to the cache twice","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5651.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-5650","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":[],"bugzilla":"1441230","bugzilla_description":"CVE-2017-5650 tomcat: Handling of HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5650.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5662","severity":"moderate","public_date":"2017-04-10T00:00:00Z","advisories":["RHSA-2017:2547","RHSA-2018:0319","RHSA-2017:2546"],"bugzilla":"1443592","bugzilla_description":"CVE-2017-5662 batik: XML external entity processing vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5662.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-7595","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441248","bugzilla_description":"CVE-2017-7595 libtiff: Divide-by-zero in JPEGSetupEncode (tiff_jpeg.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7595.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7596","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441250","bugzilla_description":"CVE-2017-7596 libtiff: Float out of range issue in tif_dir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7596.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7597","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441252","bugzilla_description":"CVE-2017-7597 libtiff: Float out of range issue in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7597.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7598","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441254","bugzilla_description":"CVE-2017-7598 libtiff: Divide-by-zero in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7598.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7599","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441259","bugzilla_description":"CVE-2017-7599 libtiff: Unsigned short out of range in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7599.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7600","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441260","bugzilla_description":"CVE-2017-7600 libtiff: Unsigned char out of range in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7600.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7601","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441261","bugzilla_description":"CVE-2017-7601 libtiff: Signed integer overflow in tif_jpeg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7601.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7602","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441263","bugzilla_description":"CVE-2017-7602 libtiff: Signed integer overflow in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7602.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12132","severity":"low","public_date":"2017-04-07T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1477529","bugzilla_description":"CVE-2017-12132 glibc: Fragmentation attacks possible when EDNS0 is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12132.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.0"},{"CVE":"CVE-2017-7233","severity":"moderate","public_date":"2017-04-04T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2017:1445","RHSA-2017:3093","RHSA-2017:1470","RHSA-2017:1451","RHSA-2017:1462","RHSA-2017:1596"],"bugzilla":"1437234","bugzilla_description":"CVE-2017-7233 python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["python-django-0:1.8.18-1.el7ost","python-django-0:1.11.11-1.el7sat","python-django-0:1.6.11-7.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-2672","severity":"moderate","public_date":"2017-04-04T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1439537","bugzilla_description":"CVE-2017-2672 foreman: Image password leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-312","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2672.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-5645","severity":"important","public_date":"2017-04-02T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2635","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1417","RHSA-2017:1801","RHSA-2017:2637","RHSA-2017:2638","RHSA-2017:2808","RHSA-2017:2809"],"bugzilla":"1443635","bugzilla_description":"CVE-2017-5645 log4j: Socket receiver deserialization vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-java-common-log4j-0:1.2.17-15.15.el6","log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7","rh-java-common-log4j-0:1.2.17-15.15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3204","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":[],"bugzilla":"1439748","bugzilla_description":"CVE-2017-3204 golang-googlecode-go-crypto: Go SSH library does not verify host keys by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-11671","severity":"low","public_date":"2017-03-25T00:00:00Z","advisories":["RHSA-2018:0849"],"bugzilla":"1475733","bugzilla_description":"CVE-2017-11671 gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gcc-0:4.8.5-28.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11671.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9589","severity":"moderate","public_date":"2017-03-22T00:00:00Z","advisories":["RHSA-2017:0830","RHSA-2017:0873","RHSA-2017:0832","RHSA-2017:3458","RHSA-2017:0876","RHSA-2017:0831","RHSA-2017:0834","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:0872","RHSA-2017:3455"],"bugzilla":"1404782","bugzilla_description":"CVE-2016-9589 wildfly: ParseState headerValuesCache can be exploited to fill heap with garbage","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9589.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-16012","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":["RHSA-2018:0501","RHSA-2020:0983"],"bugzilla":"1591854","bugzilla_description":"CVE-2017-16012 js-jquery: XSS in responses from cross-origin ajax requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2016-8747","severity":"moderate","public_date":"2017-03-13T00:00:00Z","advisories":[],"bugzilla":"1432006","bugzilla_description":"CVE-2016-8747 tomcat: Information leak between requests on the same connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8747.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-2623","severity":"moderate","public_date":"2017-03-02T00:00:00Z","advisories":["RHSA-2017:0444"],"bugzilla":"1422157","bugzilla_description":"CVE-2017-2623 rpm-ostree, rpm-ostree-client: fails to check gpg package signatures when layering","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["rpm-ostree-0:2017.1-5.atomic.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-1000048","severity":"moderate","public_date":"2017-03-01T00:00:00Z","advisories":["RHSA-2017:2672"],"bugzilla":"1427872","bugzilla_description":"CVE-2017-1000048 nodejs-qs: Prototype override protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs6-nodejs-qs-0:6.2.3-1.el7","rh-nodejs6-nodejs-qs-0:6.2.3-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-1000056","severity":"moderate","public_date":"2017-03-01T00:00:00Z","advisories":[],"bugzilla":"1486336","bugzilla_description":"CVE-2017-1000056 kubernetes: Privilege escalation in the PodSecurityPolicy admission plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-9970","severity":"moderate","public_date":"2017-02-20T00:00:00Z","advisories":["RHSA-2017:2547","RHSA-2017:2811","RHSA-2017:2546","RHSA-2017:2810","RHSA-2017:2904","RHSA-2017:3141","RHSA-2017:2808","RHSA-2017:2809","RHSA-2017:2905","RHSA-2017:2906","RHSA-2018:0294"],"bugzilla":"1455566","bugzilla_description":"CVE-2014-9970 jasypt: Vulnerable to timing attack against the password hash comparison","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6","rhvm-appliance-0:20171102.0-1","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9970.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2017-2621","severity":"moderate","public_date":"2017-02-15T00:00:00Z","advisories":["RHSA-2017:1464","RHSA-2017:1243"],"bugzilla":"1420990","bugzilla_description":"CVE-2017-2621 openstack-heat: /var/log/heat/ is world readable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["openstack-heat-1:6.1.0-3.el7ost","openstack-heat-1:7.0.2-4.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2621.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3163","severity":"moderate","public_date":"2017-02-15T00:00:00Z","advisories":["RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1447","RHSA-2018:1451","RHSA-2018:1450"],"bugzilla":"1454783","bugzilla_description":"CVE-2017-3163 solr: Directory traversal via Index Replication HTTP API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3163.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-12133","severity":"low","public_date":"2017-02-08T00:00:00Z","advisories":[],"bugzilla":"1478288","bugzilla_description":"CVE-2017-12133 glibc: Use-after-free read access in clntudp_call in sunrpc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12133.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-9578","severity":"moderate","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:0549","RHSA-2017:0254","RHSA-2017:0253","RHSA-2017:0552"],"bugzilla":"1399566","bugzilla_description":"CVE-2016-9578 spice: Remote DoS via crafted message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-770","affected_packages":["spice-server-0:0.12.4-13.el6_8.2","spice-0:0.12.4-20.el7_3","rhevm-appliance-0:20170307.0-1","redhat-virtualization-host-0:4.0-20170307.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9578.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9577","severity":"moderate","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:0549","RHSA-2017:0254","RHSA-2017:0253","RHSA-2017:0552"],"bugzilla":"1401603","bugzilla_description":"CVE-2016-9577 spice: Buffer overflow in main_channel_alloc_msg_rcv_buf when reading large messages","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-20->CWE-122","affected_packages":["spice-server-0:0.12.4-13.el6_8.2","spice-0:0.12.4-20.el7_3","rhevm-appliance-0:20170307.0-1","redhat-virtualization-host-0:4.0-20170307.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-10228","severity":"low","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1428290","bugzilla_description":"CVE-2016-10228 glibc: iconv program can hang when invoked with the -c option","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10228.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8627","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:0171","RHSA-2017:0170","RHSA-2017:0250","RHSA-2017:0173","RHSA-2017:0172","RHSA-2017:3456","RHSA-2017:0245","RHSA-2017:3454","RHSA-2017:0244","RHSA-2017:3455","RHSA-2017:0247","RHSA-2017:0246","RHSA-2017:3458"],"bugzilla":"1388240","bugzilla_description":"CVE-2016-8627 admin-cli: Potential EAP resource starvation DOS attack via GET requests for server log files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-5563","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1416109","bugzilla_description":"CVE-2017-5563 libtiff: Heap-buffer overflow in LZWEncode tif_lzw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5563.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5225","severity":"moderate","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1412716","bugzilla_description":"CVE-2017-5225 libtiff: Heap-buffer overflow in tools/tiffcp via crafted BitsPerSample value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5225.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9962","severity":"important","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:0116","RHSA-2017:0127","RHSA-2017:0123"],"bugzilla":"1409531","bugzilla_description":"CVE-2016-9962 docker: insecure opening of file-descriptor allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["runc-0:1.0.0-1.rc2.el7","docker-2:1.12.5-14.el7","docker-latest-0:1.12.5-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9962.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7592","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441240","bugzilla_description":"CVE-2017-7592 libtiff: Left shift of unsigned char without a cast","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-704","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7592.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7593","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441246","bugzilla_description":"CVE-2017-7593 libtiff: tif_rawdata not properly initialized in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7593.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7594","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441247","bugzilla_description":"CVE-2017-7594 libtiff: Memory leak in OJPEGReadHeaderInfoSecTablesDcTable function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7594.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7060","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:0256"],"bugzilla":"1379909","bugzilla_description":"CVE-2016-7060 Red Hat QCI: qci exposes password in web UI when they should be masked","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":"CWE-200","affected_packages":["tfm-rubygem-fusor_ui-0:1.0.9.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7060.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.9"},{"CVE":"CVE-2016-10745","severity":"important","public_date":"2016-12-29T00:00:00Z","advisories":["RHSA-2019:1022","RHSA-2019:3964","RHSA-2019:1237","RHSA-2019:4062","RHSA-2019:1260","RHSA-2019:3172"],"bugzilla":"1698345","bugzilla_description":"CVE-2016-10745 python-jinja2: Sandbox escape due to information disclosure via str.format","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","python27-python-jinja2-0:2.6-15.el7","python-jinja2-0:2.7.2-3.el7_4","python-jinja2-0:2.7.2-3.el7_5","python-jinja2-0:2.7.2-3.el7_6","rh-python35-python-jinja2-0:2.8.1-2.el7","rh-python35-python-jinja2-0:2.8.1-2.el6","python27-python-jinja2-0:2.6-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2016-10094","severity":"moderate","public_date":"2016-12-20T00:00:00Z","advisories":[],"bugzilla":"1410119","bugzilla_description":"CVE-2016-10094 libtiff: Off-by-one error in t2p_readwrite_pdf_image_tile() causing heap buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10094.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9606","severity":"moderate","public_date":"2016-12-15T00:00:00Z","advisories":["RHSA-2018:2913","RHSA-2017:1260","RHSA-2017:1253","RHSA-2018:2909","RHSA-2017:1255","RHSA-2017:1254","RHSA-2017:1675","RHSA-2017:1411","RHSA-2017:1256","RHSA-2017:1410","RHSA-2017:1676","RHSA-2017:1412","RHSA-2017:1409"],"bugzilla":"1400644","bugzilla_description":"CVE-2016-9606 Resteasy: Yaml unmarshalling vulnerable to RCE","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["resteasy-0:2.3.19-1.Final_redhat_1.1.ep6.el5","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","jboss-ec2-eap-0:7.5.15-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-8745","severity":"important","public_date":"2016-12-12T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:0935","RHSA-2017:0527"],"bugzilla":"1403824","bugzilla_description":"CVE-2016-8745 tomcat: information disclosure due to incorrect Processor sharing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat-0:7.0.69-11.el7_3","tomcat6-0:6.0.24-105.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-8651","severity":"low","public_date":"2016-12-07T00:00:00Z","advisories":["RHSA-2016:2915"],"bugzilla":"1397987","bugzilla_description":"CVE-2016-8651 OpenShift Enterprise 3: Pulling of any image is possible with it manifest","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.1.1.10-1.git.0.efeef8d.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8651.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-10095","severity":null,"public_date":"2016-12-04T00:00:00Z","advisories":[],"bugzilla":"1410063","bugzilla_description":"CVE-2016-10095 libtiff: Stack-based buffer overflow in _TIFFVGetField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10095.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-10092","severity":"moderate","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1410067","bugzilla_description":"CVE-2016-10092 libtiff: Heap-based buffer overflow in _TIFFFax3fillruns","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10092.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10270","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438441","bugzilla_description":"CVE-2016-10270 libtiff: Heap-based buffer overflow in tiff_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10270.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10269","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438443","bugzilla_description":"CVE-2016-10269 libtiff: Heap-based buffer overflow in tiff_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10269.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10267","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438449","bugzilla_description":"CVE-2016-10267 libtiff: Divide-by-zero in tif_ojpeg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10267.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10271","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438453","bugzilla_description":"CVE-2016-10271 libtiff: Heap-based buffer overflow in tif_fax3.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10271.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10272","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438458","bugzilla_description":"CVE-2016-10272 libtiff: Heap-based buffer overflow in tif_next.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10272.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10268","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1438447","bugzilla_description":"CVE-2016-10268 libtiff: Integer underflow in tiffcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10268.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10266","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1438472","bugzilla_description":"CVE-2016-10266 libtiff: Divide-by-zero in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10266.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10093","severity":"moderate","public_date":"2016-11-27T00:00:00Z","advisories":[],"bugzilla":"1410116","bugzilla_description":"CVE-2016-10093 libtiff: Integer overflow in DECLAREreadFunc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10093.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6817","severity":"important","public_date":"2016-11-22T00:00:00Z","advisories":[],"bugzilla":"1397474","bugzilla_description":"CVE-2016-6817 tomcat: Infinite loop in HTTP/2 header parser","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6816","severity":"moderate","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0247","RHSA-2017:0456","RHSA-2017:0246","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:0935","RHSA-2017:0527","RHSA-2017:0250","RHSA-2017:0245","RHSA-2017:0244"],"bugzilla":"1397484","bugzilla_description":"CVE-2016-6816 tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-444","affected_packages":["tomcat-0:7.0.69-11.el7_3","tomcat6-0:6.0.24-105.el6_8","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","jbossweb-0:7.5.20-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-8735","severity":"important","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457"],"bugzilla":"1397485","bugzilla_description":"CVE-2016-8735 tomcat: Remote code execution vulnerability in JmxRemoteLifecycleListener","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-9453","severity":"moderate","public_date":"2016-11-18T00:00:00Z","advisories":[],"bugzilla":"1397723","bugzilla_description":"CVE-2016-9453 libtiff: Out-of-bounds access in t2p_readwrite_pdf_image_tile()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9453.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9448","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1397734","bugzilla_description":"CVE-2016-9448 libtiff: Null pointer dereference in TIFFFetchNormalTag() (regression of CVE-2016-9297)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9063","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396540","bugzilla_description":"CVE-2016-9063 firefox: Possible integer overflow to fix inside XML_Parse in Expat","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9063.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9532","severity":"low","public_date":"2016-11-11T00:00:00Z","advisories":[],"bugzilla":"1397726","bugzilla_description":"CVE-2016-9532 libtiff: Multiple uint32 overflows leading to heap buffer over-read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9532.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7061","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":["RHSA-2017:0171","RHSA-2017:0170","RHSA-2017:0250","RHSA-2017:0173","RHSA-2017:0172","RHSA-2017:3456","RHSA-2017:0245","RHSA-2017:3454","RHSA-2017:0244","RHSA-2017:3455","RHSA-2017:0247","RHSA-2017:0246","RHSA-2017:3458"],"bugzilla":"1380852","bugzilla_description":"CVE-2016-7061 EAP: Sensitive data can be exposed at the server level in domain mode","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-9273","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1395164","bugzilla_description":"CVE-2016-9273 libtiff: Out-of-bounds heap read in cpStrips","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9273.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9297","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1395264","bugzilla_description":"CVE-2016-9297 libtiff: Out-of-bounds heap read in _TIFFPrintField (tif_print.c:127)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-170","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9297.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9535","severity":"moderate","public_date":"2016-11-04T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397755","bugzilla_description":"CVE-2016-9535 libtiff: Predictor heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8634","severity":"moderate","public_date":"2016-11-03T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1391520","bugzilla_description":"CVE-2016-8634 foreman: Stored XSS in org/loc wizard","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-79","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-9185","severity":"low","public_date":"2016-11-03T00:00:00Z","advisories":["RHSA-2017:1456","RHSA-2017:1450","RHSA-2017:1464"],"bugzilla":"1391895","bugzilla_description":"CVE-2016-9185 openstack-heat: Template source URL allows network port scan","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["openstack-heat-0:2015.1.4-3.el7ost","openstack-heat-1:5.0.3-2.el7ost","openstack-heat-1:6.1.0-3.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9185.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-8631","severity":"moderate","public_date":"2016-11-01T00:00:00Z","advisories":["RHSA-2016:2696"],"bugzilla":"1390735","bugzilla_description":"CVE-2016-8631 OSE 3: Router sometimes selects new routes over old routes when determining claimed hostnames","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.3.1.4-1.git.0.7c8657c.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8631.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-8704","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390510","bugzilla_description":"CVE-2016-8704 memcached: Server append/prepend remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-8705","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390511","bugzilla_description":"CVE-2016-8705 memcached: Server update remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-6797","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:2247"],"bugzilla":"1390493","bugzilla_description":"CVE-2016-6797 tomcat: unrestricted access to global resources","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.70-16.ep7.el6","tomcat8-0:8.0.36-17.ep7.el6","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-6796","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1550","RHSA-2017:1552","RHSA-2017:2247","RHSA-2017:1551"],"bugzilla":"1390515","bugzilla_description":"CVE-2016-6796 tomcat: security manager bypass via JSP Servlet config parameters","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","jbossweb-0:7.5.23-1.Final_redhat_1.1.ep6.el7","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-6794","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:2247"],"bugzilla":"1390520","bugzilla_description":"CVE-2016-6794 tomcat: system property disclosure","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.70-16.ep7.el6","tomcat8-0:8.0.36-17.ep7.el6","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6794.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5018","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1550","RHSA-2017:1552","RHSA-2017:2247","RHSA-2017:1551"],"bugzilla":"1390525","bugzilla_description":"CVE-2016-5018 tomcat: security manager bypass via IntrospectHelper utility function","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","jbossweb-0:7.5.23-1.Final_redhat_1.1.ep6.el7","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5018.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-0762","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:2247"],"bugzilla":"1390526","bugzilla_description":"CVE-2016-0762 tomcat: timing attack in Realm implementation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.70-16.ep7.el6","tomcat8-0:8.0.36-17.ep7.el6","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-5405","severity":"low","public_date":"2016-10-26T00:00:00Z","advisories":["RHSA-2016:2594","RHSA-2016:2765"],"bugzilla":"1358865","bugzilla_description":"CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["389-ds-base-0:1.3.5.10-11.el7","389-ds-base-0:1.2.11.15-84.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2016-5652","severity":"moderate","public_date":"2016-10-25T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1389222","bugzilla_description":"CVE-2016-5652 libtiff: tiff2pdf JPEG Compression Tables Heap Buffer Overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-5875","severity":"important","public_date":"2016-10-25T00:00:00Z","advisories":[],"bugzilla":"1389228","bugzilla_description":"CVE-2016-5875 libtiff: PixarLogDecode Heap Buffer Overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5875.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-8331","severity":"moderate","public_date":"2016-10-25T00:00:00Z","advisories":[],"bugzilla":"1389229","bugzilla_description":"CVE-2016-8331 libtiff: FAX IFD Entry Parsing Type Confusion","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-8613","severity":"moderate","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1387232","bugzilla_description":"CVE-2016-8613 foreman: Stored XSS vulnerability in remote execution plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["tfm-rubygem-foreman_remote_execution-0:1.3.7.2-1.fm1_15.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8613.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2016-7078","severity":"low","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1386244","bugzilla_description":"CVE-2016-7078 foreman: Information leak through organizations and locations feature","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-285","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-7077","severity":"low","public_date":"2016-10-17T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1385777","bugzilla_description":"CVE-2016-7077 foreman: Foreman information leak through unauthorized multiple_checkboxes helper","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-285","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7077.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9539","severity":"moderate","public_date":"2016-10-14T00:00:00Z","advisories":[],"bugzilla":"1397767","bugzilla_description":"CVE-2016-9539 libtiff: Out-of-bounds read in readContigTilesIntoBuffer()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9539.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5425","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2016:2046"],"bugzilla":"1362545","bugzilla_description":"CVE-2016-5425 tomcat: Local privilege escalation via systemd-tmpfiles service","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":["tomcat-0:7.0.54-8.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5425.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6325","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2017:0456","RHSA-2016:2045","RHSA-2017:0455","RHSA-2017:0457"],"bugzilla":"1367447","bugzilla_description":"CVE-2016-6325 tomcat: tomcat writable config files allow privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6325.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-7075","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2016:2064"],"bugzilla":"1384112","bugzilla_description":"CVE-2016-7075 OpenShift 3: API server does not validate client-provided intermediate certificates correctly","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:C/A:N","CWE":"CWE-295","affected_packages":["atomic-openshift-0:3.1.1.8-1.git.0.d469026.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-8657","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2017:0827","RHSA-2017:0826","RHSA-2017:0829","RHSA-2017:0828","RHSA-2018:1609"],"bugzilla":"1400343","bugzilla_description":"CVE-2016-8657 jboss: jbossas writable config files allow privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-732","affected_packages":["jbossas-0:5.2.0-23.ep5.el5","jbossas-0:5.2.0-23.ep5.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9538","severity":"moderate","public_date":"2016-10-08T00:00:00Z","advisories":[],"bugzilla":"1397765","bugzilla_description":"CVE-2016-9538 libtiff: Integer overflow leads to reading undefined buffer in readContigStripsIntoBuffer()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9538.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9540","severity":"moderate","public_date":"2016-10-08T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397768","bugzilla_description":"CVE-2016-9540 libtiff: cpStripToTile heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9540.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9534","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397751","bugzilla_description":"CVE-2016-9534 libtiff: TIFFFlushData1 heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9534.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9536","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397758","bugzilla_description":"CVE-2016-9536 libtiff: t2p_process_jpeg_strip heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9537","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397760","bugzilla_description":"CVE-2016-9537 libtiff: Out-of-bounds write vulnerabilities in tools/tiffcrop.c","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9537.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9533","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397769","bugzilla_description":"CVE-2016-9533 libtiff: PixarLog horizontalDifference heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9533.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-4978","severity":"moderate","public_date":"2016-09-23T00:00:00Z","advisories":["RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1447","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:3458","RHSA-2017:1835","RHSA-2017:1834","RHSA-2017:1837","RHSA-2017:1836","RHSA-2018:1451","RHSA-2018:1450"],"bugzilla":"1379207","bugzilla_description":"CVE-2016-4978 Apache ActiveMQ Artemis: Deserialization of untrusted input vulnerability","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el7","hornetq-0:2.3.25-26.SP24_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.6"},{"CVE":"CVE-2016-7046","severity":"important","public_date":"2016-09-15T00:00:00Z","advisories":["RHSA-2016:2640","RHSA-2016:2642","RHSA-2017:3458","RHSA-2016:2641","RHSA-2017:3456","RHSA-2016:2657","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1376646","bugzilla_description":"CVE-2016-7046 undertow: Long URL proxy request lead to java.nio.BufferOverflowException and DoS","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-119","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.3-3.GA_redhat_2.ep7.el6","eap7-jboss-ec2-eap-0:7.0.3-3.GA_redhat_2.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7046.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-1240","severity":"important","public_date":"2016-09-15T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457"],"bugzilla":"1376712","bugzilla_description":"CVE-2016-1240 tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1240.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8656","severity":"important","public_date":"2016-09-15T00:00:00Z","advisories":["RHSA-2017:0246","RHSA-2017:0832","RHSA-2017:3458","RHSA-2017:0831","RHSA-2017:0834","RHSA-2017:0250","RHSA-2017:0245","RHSA-2017:3454","RHSA-2018:1609","RHSA-2017:0244","RHSA-2017:3455"],"bugzilla":"1400344","bugzilla_description":"CVE-2016-8656 jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":["jbossas-0:5.2.0-23.ep5.el5","eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8656.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-5418","severity":"important","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844","RHSA-2016:1852","RHSA-2016:1853"],"bugzilla":"1362601","bugzilla_description":"CVE-2016-5418 libarchive: Archive Entry with type 1 (hardlink), but has a non-zero data size file overwrite","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-20->CWE-22","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2","atomic-openshift-0:3.1.1.7-1.git.0.65f396b.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5418.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-4993","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2016:1838","RHSA-2016:1839","RHSA-2017:3456","RHSA-2016:1840","RHSA-2016:1841","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1344321","bugzilla_description":"CVE-2016-4993 eap: HTTP header injection / response splitting","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-113","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-6345","severity":"low","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372117","bugzilla_description":"CVE-2016-6345 RESTEasy: Insufficient use of random values in RESTEasy async jobs could lead to loss of data confidentiality","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-6346","severity":"moderate","public_date":"2016-09-01T00:00:00Z","advisories":["RHSA-2019:1222","RHSA-2018:0005","RHSA-2017:1675","RHSA-2017:1676","RHSA-2017:0517","RHSA-2017:0827","RHSA-2018:0002","RHSA-2017:0826","RHSA-2017:0829","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:0828","RHSA-2018:2143"],"bugzilla":"1372120","bugzilla_description":"CVE-2016-6346 RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6347","severity":"moderate","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372124","bugzilla_description":"CVE-2016-6347 RESTEasy: Use of the default exception handler in RESTEasy can lead to reflected XSS attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-6348","severity":"low","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372129","bugzilla_description":"CVE-2016-6348 RESTEasy: Use of JacksonJsonpInterceptor in RESTEasy can lead to Cross Site Script Inclusion attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-2183","severity":"moderate","public_date":"2016-08-24T00:00:00Z","advisories":["RHSA-2020:0451","RHSA-2020:3842","RHSA-2017:3240","RHSA-2019:1245","RHBA-2019:2581","RHSA-2017:0462","RHSA-2017:3113","RHSA-2017:3114","RHSA-2017:2710","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:3239","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:2709","RHSA-2017:2708","RHSA-2018:2123","RHSA-2019:2859"],"bugzilla":"1369383","bugzilla_description":"CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","openshift3/metrics-heapster:v3.11.141-2","python-0:2.7.5-69.el7_5","openshift3/ose-console:v3.11.141-2","openshift3/oauth-proxy:v3.11.170-5","openshift4/ose-console:v4.5.0-202009201759.p0","openshift3/ose-kube-rbac-proxy:v3.11.141-2","openshift3/ose-metrics-server:v3.11.141-2","java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8","openshift4/ose-oauth-proxy:v4.1.18-201909201915"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-3110","severity":"moderate","public_date":"2016-08-22T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:1650","RHSA-2016:2055","RHSA-2016:2054","RHSA-2016:1648","RHSA-2016:1649"],"bugzilla":"1326320","bugzilla_description":"CVE-2016-3110 mod_cluster: remotely Segfault Apache http server","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["mod_cluster-0:1.2.13-1.Final_redhat_1.1.ep6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3110.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2016-4973","severity":"moderate","public_date":"2016-08-17T00:00:00Z","advisories":[],"bugzilla":"1324759","bugzilla_description":"CVE-2016-4973 gcc: Targets using libssp for SSP are missing -D_FORTIFY_SOURCE functionality","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4973.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2016-6319","severity":"moderate","public_date":"2016-08-09T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1365815","bugzilla_description":"CVE-2016-6319 foreman: Persistent XSS in Foreman remote execution plugin","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-79","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6319.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-6323","severity":"low","public_date":"2016-08-04T00:00:00Z","advisories":[],"bugzilla":"1383297","bugzilla_description":"CVE-2016-6323 glibc: Missing unwind info in __startcontext causes infinite loop in _Unwind_Backtrace","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5417","severity":"low","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1362534","bugzilla_description":"CVE-2016-5417 glibc: per-thread memory leak in __res_vinit with IPv6 nameservers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5417.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-5406","severity":"moderate","public_date":"2016-07-26T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2016:1838","RHSA-2016:1839","RHSA-2017:3456","RHSA-2016:1840","RHSA-2016:1841","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1359014","bugzilla_description":"CVE-2016-5406 EAP7 Privilege escalation when managing domain including earlier version slaves","cvss_score":7.0,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:C/A:C","CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5406.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7103","severity":"low","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2017:0161","RHSA-2016:2933","RHSA-2016:2932"],"bugzilla":"1360286","bugzilla_description":"CVE-2016-7103 jquery-ui: cross-site scripting in dialog closeText","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-XStatic-jquery-ui-0:1.12.0.1-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7103.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5386","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1538"],"bugzilla":"1353798","bugzilla_description":"CVE-2016-5386 Go: sets environmental variable  based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["golang-0:1.6.3-1.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5386.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-5388","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2016:2045","RHSA-2016:1624","RHSA-2016:1635","RHSA-2016:1636"],"bugzilla":"1353809","bugzilla_description":"CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.59-51_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-5392","severity":"important","public_date":"2016-07-14T00:00:00Z","advisories":["RHSA-2016:1427"],"bugzilla":"1356195","bugzilla_description":"CVE-2016-5392 Kubernetes: disclosure of information in multi tenant environments via watch-cache list","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:C/I:N/A:N","CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.2.1.7-1.git.0.2702170.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5392.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-6223","severity":"moderate","public_date":"2016-07-10T00:00:00Z","advisories":[],"bugzilla":"1356867","bugzilla_description":"CVE-2016-6223 libtiff: Out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6223.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-1000027","severity":"moderate","public_date":"2016-07-08T00:00:00Z","advisories":[],"bugzilla":"1357929","bugzilla_description":"CVE-2016-1000027 spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000027.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-5007","severity":"moderate","public_date":"2016-07-07T00:00:00Z","advisories":[],"bugzilla":"1353902","bugzilla_description":"CVE-2016-5007 spring: Path matching inconsistency","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-41","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5007.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-6311","severity":"moderate","public_date":"2016-07-03T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1362735","bugzilla_description":"CVE-2016-6311 EAP7: Internal IP address disclosed on redirect when request header Host field is not set","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-6131","severity":null,"public_date":"2016-06-29T00:00:00Z","advisories":[],"bugzilla":"1352068","bugzilla_description":"CVE-2016-6131 gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10735","severity":"moderate","public_date":"2016-06-27T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668097","bugzilla_description":"CVE-2016-10735 bootstrap: XSS in the data-target attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-2141","severity":"critical","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:1330","RHSA-2016:2035","RHSA-2016:1374","RHSA-2016:1331","RHSA-2016:1332","RHSA-2016:1376","RHSA-2016:1333","RHSA-2016:1432","RHSA-2016:1328","RHSA-2016:1329","RHSA-2016:1439","RHSA-2016:1345","RHSA-2016:1334","RHSA-2016:1433","RHSA-2016:1389","RHSA-2016:1346","RHSA-2016:1434","RHSA-2016:1347","RHSA-2016:1435"],"bugzilla":"1313589","bugzilla_description":"CVE-2016-2141 JGroups: Authorization bypass","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["jgroups-1:3.2.16-1.Final_redhat_1.1.ep6.el6","jgroups-1:3.2.16-1.Final_redhat_1.1.ep6.el5","jgroups-1:3.2.16-1.Final_redhat_1.1.ep6.el7","jgroups-1:2.6.22-2.ep5.el5","eap7-jgroups-0:3.6.8-3.Final_redhat_3.1.ep7.el7","jgroups-1:2.6.22-2.ep5.el6","eap7-jgroups-0:3.6.8-3.Final_redhat_3.1.ep7.el6","jboss-ec2-eap-0:7.5.9-2.Final_redhat_2.ep6.el6","jgroups-1:2.6.22-2.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2141.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-4995","severity":"low","public_date":"2016-06-22T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1348939","bugzilla_description":"CVE-2016-4995 foreman: Information disclosure in provisioning template previews","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4995.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-4996","severity":"moderate","public_date":"2016-06-22T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1349136","bugzilla_description":"CVE-2016-4996 foreman: inside discovery-debug, the root password is displayed in plaintext","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-532","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4996.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-3092","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:2068","RHSA-2017:0456","RHSA-2017:0455","RHSA-2016:2069","RHSA-2017:0457","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:2071","RHSA-2016:2070","RHSA-2016:2072","RHSA-2016:2599"],"bugzilla":"1349468","bugzilla_description":"CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","jboss-ec2-eap-0:7.5.11-1.Final_redhat_1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3092.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-1000023","severity":"moderate","public_date":"2016-06-20T00:00:00Z","advisories":["RHSA-2016:1583","RHSA-2016:1582","RHSA-2016:1605"],"bugzilla":"1348509","bugzilla_description":"CVE-2016-1000023 nodejs-minimatch: Regular expression denial-of-service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["nodejs-minimatch-0:3.0.2-1.el7","rh-nodejs4-nodejs-minimatch-0:3.0.2-1.el7","nodejs010-nodejs-minimatch-0:3.0.2-1.el6","rh-nodejs4-nodejs-minimatch-0:3.0.2-1.el6","nodejs010-nodejs-minimatch-0:3.0.2-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-1000022","severity":"moderate","public_date":"2016-06-16T00:00:00Z","advisories":["RHSA-2016:1605"],"bugzilla":"1347677","bugzilla_description":"CVE-2016-1000022 nodejs-negotiator: Regular expression denial-of-service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["nodejs-negotiator-0:0.6.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000022.json"},{"CVE":"CVE-2016-5322","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346683","bugzilla_description":"CVE-2016-5322 libtiff: Out-of-bounds read in extractContigSamplesBytes() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5322.json"},{"CVE":"CVE-2016-5320","severity":"important","public_date":"2016-06-15T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1346687","bugzilla_description":"CVE-2016-5320 libtiff: Out-of-bounds write in PixarLogDecode() function in tif_pixarlog.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-5317","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346689","bugzilla_description":"CVE-2016-5317 libtiff: Out-of-bounds write in PixarLogDecode() function in libtiff.so","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5317.json"},{"CVE":"CVE-2016-5316","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346690","bugzilla_description":"CVE-2016-5316 libtiff: Out-of-bounds read in PixarLogCleanup() function in tif_pixarlog.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5316.json"},{"CVE":"CVE-2016-5315","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346694","bugzilla_description":"CVE-2016-5315 libtiff: Out-of-bounds read in setByteArray() function in tif_dir.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5315.json"},{"CVE":"CVE-2016-5321","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346695","bugzilla_description":"CVE-2016-5321 libtiff: tiffcrop readSeparateTilesIntoBuffer() memory corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5321.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-5323","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346696","bugzilla_description":"CVE-2016-5323 libtiff: more tiffcrop readSeparateTilesIntoBuffer() memory corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-5314","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346697","bugzilla_description":"CVE-2016-5314 libtiff: Out-of-bounds write in PixarLogDecode() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5314.json"},{"CVE":"CVE-2016-4970","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":["RHSA-2017:1097","RHSA-2020:3192","RHSA-2017:0179"],"bugzilla":"1343616","bugzilla_description":"CVE-2016-4970 netty: Infinite loop vulnerability when handling renegotiation using SslProvider.OpenSsl","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4970.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5300","severity":"moderate","public_date":"2016-06-04T00:00:00Z","advisories":[],"bugzilla":"1343085","bugzilla_description":"CVE-2016-5300 expat: Little entropy used for hash initialization","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5300.json"},{"CVE":"CVE-2016-4475","severity":"moderate","public_date":"2016-06-02T00:00:00Z","advisories":["RHBA-2016:1615"],"bugzilla":"1342439","bugzilla_description":"CVE-2016-4475 foreman: API and UI actions/URLs not limited to the orgs/locations assigned","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-284","affected_packages":["foreman-0:1.11.0.51-1.el6sat","foreman-0:1.11.0.51-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4475.json"},{"CVE":"CVE-2016-5102","severity":"moderate","public_date":"2016-05-30T00:00:00Z","advisories":[],"bugzilla":"1343407","bugzilla_description":"CVE-2016-5102 libtiff: Buffer overflow in readgifimage()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5102.json"},{"CVE":"CVE-2016-4451","severity":"moderate","public_date":"2016-05-25T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1339889","bugzilla_description":"CVE-2016-4451 foreman: privilege escalation through Organization and Locations API","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-284","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4451.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2016-7091","severity":"low","public_date":"2016-05-24T00:00:00Z","advisories":["RHSA-2016:2593"],"bugzilla":"1339935","bugzilla_description":"CVE-2016-7091 sudo: Possible info leak via INPUTRC","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["sudo-0:1.8.6p7-20.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7091.json"},{"CVE":"CVE-2016-3703","severity":"moderate","public_date":"2016-05-19T00:00:00Z","advisories":["RHSA-2016:1095","RHSA-2016:1094"],"bugzilla":"1330233","bugzilla_description":"CVE-2016-3703 OpenShift Enterprise 3: Untrusted content loaded via the API proxy can access web console credentials on the same domain","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-285","affected_packages":["atomic-openshift-0:3.1.1.6-8.git.64.80b61da.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3703.json"},{"CVE":"CVE-2016-4429","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1337136","bugzilla_description":"CVE-2016-4429 glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4429.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-0718","severity":"moderate","public_date":"2016-05-17T00:00:00Z","advisories":["RHSA-2016:2824","RHSA-2018:2486"],"bugzilla":"1296102","bugzilla_description":"CVE-2016-0718 expat: Out-of-bounds heap read on crafted input causing crash","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["expat-0:2.0.1-13.el6_8","expat-0:2.1.0-10.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0718.json"},{"CVE":"CVE-2016-3072","severity":"important","public_date":"2016-05-16T00:00:00Z","advisories":["RHSA-2016:1083"],"bugzilla":"1322050","bugzilla_description":"CVE-2016-3072 Katello: Authenticated sql injection via sort_by and sort_order request parameter","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-89","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3072.json"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2016-8639","severity":"moderate","public_date":"2016-05-12T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1393291","bugzilla_description":"CVE-2016-8639 foreman: Stored XSS via organization/location with HTML in name","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-79","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-11023","severity":"low","public_date":"2016-05-11T00:00:00Z","advisories":[],"bugzilla":"1819845","bugzilla_description":"CVE-2016-11023 odata4j:  allows ExecuteCountQueryCommand.java SQL injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-11024","severity":"low","public_date":"2016-05-11T00:00:00Z","advisories":[],"bugzilla":"1819846","bugzilla_description":"CVE-2016-11024 odata4j:  allows ExecuteJPQLQueryCommand.java SQL injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-11024.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-10727","severity":"moderate","public_date":"2016-05-10T00:00:00Z","advisories":["RHBA-2016:2206"],"bugzilla":"1609916","bugzilla_description":"CVE-2016-10727 evolution-data-server: IMAPx Component Information Disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393->CWE-201","affected_packages":["evolution-data-server-0:3.12.11-37.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10727.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-3728","severity":"moderate","public_date":"2016-05-05T00:00:00Z","advisories":["RHBA-2016:1501"],"bugzilla":"1333378","bugzilla_description":"CVE-2016-3728 foreman: Missing input validation in Smart Proxy allows RCE via TFTP file variant parameter","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["foreman-0:1.11.0.49-1.el6sat","foreman-0:1.11.0.49-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3728.json"},{"CVE":"CVE-2016-4492","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333377","bugzilla_description":"CVE-2016-4492 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4493","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333383","bugzilla_description":"CVE-2016-4493 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4493.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4491","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1333371","bugzilla_description":"CVE-2016-4491 gcc: Stack overflow due to infinite recursion in d_print_comp","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2016-10739","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":["RHSA-2019:3513","RHSA-2019:2118","RHBA-2019:3303"],"bugzilla":"1347549","bugzilla_description":"CVE-2016-10739 glibc: getaddrinfo should reject IP addresses with trailing characters","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","glibc-0:2.17-292.el7","glibc-0:2.28-72.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10739.json"},{"CVE":"CVE-2016-3706","severity":"low","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1330887","bugzilla_description":"CVE-2016-3706 glibc: stack (frame) overflow in getaddrinfo() when called with AF_INET, AF_INET6 (incomplete fix for CVE-2013-4458)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3706.json"},{"CVE":"CVE-2016-5318","severity":"moderate","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1344068","bugzilla_description":"CVE-2016-5318 libtiff: Stack-based buffer overflow in thumbnail's _TIFFVGetField function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5318.json"},{"CVE":"CVE-2016-5319","severity":"moderate","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1344069","bugzilla_description":"CVE-2016-5319 libtiff: Heap-based buffer overflow in bmp2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5319.json"},{"CVE":"CVE-2016-3704","severity":"moderate","public_date":"2016-04-25T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1330264","bugzilla_description":"CVE-2016-3704 pulp: Unsafe use of bash $RANDOM for NSS DB password and seed","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-330","affected_packages":["pulp-0:2.13.4.6-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-3696","severity":"low","public_date":"2016-04-20T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1328930","bugzilla_description":"CVE-2016-3696 pulp: Leakage of CA key in pulp-qpid-ssl-cfg","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["pulp-0:2.13.4.6-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3696.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-1000031","severity":"moderate","public_date":"2016-04-20T00:00:00Z","advisories":[],"bugzilla":"1393454","bugzilla_description":"CVE-2016-1000031 Apache Commons FileUpload: DiskFileItem file manipulation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000031.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-3693","severity":"moderate","public_date":"2016-04-14T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1327471","bugzilla_description":"CVE-2016-3693 foreman: inspect in a provisioning template exposes sensitive controller information","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":["foreman-0:1.15.6.34-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3693.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-3107","severity":"moderate","public_date":"2016-04-13T00:00:00Z","advisories":["RHBA-2016:1501"],"bugzilla":"1325930","bugzilla_description":"CVE-2016-3107 pulp: Node certificate containing private key stored in world-readable file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["pulp-0:2.8.3.3-1.el6sat","pulp-0:2.8.3.3-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3107.json"},{"CVE":"CVE-2016-3108","severity":"moderate","public_date":"2016-04-13T00:00:00Z","advisories":["RHBA-2016:1501"],"bugzilla":"1325934","bugzilla_description":"CVE-2016-3108 pulp: Insecure temporary file used when generating certificate for Pulp Nodes","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:C/A:N","CWE":"CWE-377","affected_packages":["pulp-0:2.8.3.3-1.el6sat","pulp-0:2.8.3.3-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3108.json"},{"CVE":"CVE-2016-3112","severity":"moderate","public_date":"2016-04-13T00:00:00Z","advisories":["RHBA-2016:1501"],"bugzilla":"1326242","bugzilla_description":"CVE-2016-3112 pulp: Agent certificate containing private key is stored in world-readable file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["pulp-0:2.8.3.3-1.el6sat","pulp-0:2.8.3.3-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3112.json"},{"CVE":"CVE-2016-3111","severity":"low","public_date":"2016-04-13T00:00:00Z","advisories":["RHBA-2016:1501"],"bugzilla":"1326251","bugzilla_description":"CVE-2016-3111 pulp: Race condition when generating RSA keys for authenticating messages between server and consumers","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-362","affected_packages":["pulp-0:2.8.3.3-1.el6sat","pulp-0:2.8.3.3-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3111.json"},{"CVE":"CVE-2016-3990","severity":"important","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1326246","bugzilla_description":"CVE-2016-3990 libtiff: out-of-bounds write in horizontalDifference8()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3990.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3991","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1326249","bugzilla_description":"CVE-2016-3991 libtiff: out-of-bounds write in loadImage() function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3991.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2015-8868","severity":"moderate","public_date":"2016-04-11T00:00:00Z","advisories":["RHSA-2016:2580"],"bugzilla":"1326225","bugzilla_description":"CVE-2015-8868 poppler: heap buffer overflow in ExponentialFunction","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["poppler-0:0.26.5-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8868.json"},{"CVE":"CVE-2016-3633","severity":"low","public_date":"2016-04-11T00:00:00Z","advisories":[],"bugzilla":"1326255","bugzilla_description":"CVE-2016-3633 libtiff: out-of-bounds read in the _setrow function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3633.json"},{"CVE":"CVE-2016-3623","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325089","bugzilla_description":"CVE-2016-3623 libtiff: divide by zero in the rgb2ycybr tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3623.json"},{"CVE":"CVE-2016-3624","severity":"low","public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325090","bugzilla_description":"CVE-2016-3624 libtiff: out of bounds write in the rgb2ycybr tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3624.json"},{"CVE":"CVE-2016-3625","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325091","bugzilla_description":"CVE-2016-3625 libtiff: out of bounds read in the tiff2bw tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3625.json"},{"CVE":"CVE-2016-3945","severity":"moderate","public_date":"2016-04-08T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1325093","bugzilla_description":"CVE-2016-3945 libtiff: out-of-bounds write in the tiff2rgba tool","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3945.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3632","severity":"moderate","public_date":"2016-04-08T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1325095","bugzilla_description":"CVE-2016-3632 libtiff: out-of-bounds write in _TIFFVGetField function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3632.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3658","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1326257","bugzilla_description":"CVE-2016-3658 libtiff: out-of-bounds read in the TIFFWriteDirectoryTagLongLong8Array function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3658.json"},{"CVE":"CVE-2016-3634","severity":"low","public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1326267","bugzilla_description":"CVE-2016-3634 libtiff: out-of-bounds read in the tagCompare function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3634.json"},{"CVE":"CVE-2016-3619","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316569","bugzilla_description":"CVE-2016-3619 libtiff: bmp2tiff DumpModeEncode OOB read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3619.json"},{"CVE":"CVE-2016-3620","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316859","bugzilla_description":"CVE-2016-3620 libtiff: Out-of-bound read in ZIPEncode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3620.json"},{"CVE":"CVE-2016-3631","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316872","bugzilla_description":"CVE-2016-3631 libtiff: thumbnail tool out-of-bounds read vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3631.json"},{"CVE":"CVE-2016-3621","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1324822","bugzilla_description":"CVE-2016-3621 libtiff: out of bounds read in the bmp2tiff tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3621.json"},{"CVE":"CVE-2016-3622","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1324823","bugzilla_description":"CVE-2016-3622 libtiff: Division by zero in fpAcc function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3622.json"},{"CVE":"CVE-2016-4489","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333336","bugzilla_description":"CVE-2016-4489 gcc: Invalid write due to integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4490","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333366","bugzilla_description":"CVE-2016-4490 gcc: Write access violation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-3097","severity":"moderate","public_date":"2016-03-31T00:00:00Z","advisories":["RHSA-2016:1484"],"bugzilla":"1322747","bugzilla_description":"CVE-2016-3097 spacewalk-java: Multiple XSS flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["spacewalk-java-0:2.3.8-147.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3097.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-4487","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333330","bugzilla_description":"CVE-2016-4487 gcc: Invalid write due to a use-after-free to array btypevec","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4488","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333332","bugzilla_description":"CVE-2016-4488 gcc: Invalid write due to a use-after-free to array ktypevec","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3186","severity":"moderate","public_date":"2016-03-30T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1319666","bugzilla_description":"CVE-2016-3186 libtiff: buffer overflow in gif2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3186.json"},{"CVE":"CVE-2016-3079","severity":"moderate","public_date":"2016-03-29T00:00:00Z","advisories":["RHSA-2016:0590"],"bugzilla":"1320940","bugzilla_description":"CVE-2016-3079 spacewalk-java: Multiple XSS issues in WebUI","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["spacewalk-java-0:2.3.8-134.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3079.json"},{"CVE":"CVE-2016-3080","severity":"moderate","public_date":"2016-03-29T00:00:00Z","advisories":["RHSA-2016:1484"],"bugzilla":"1320942","bugzilla_description":"CVE-2016-3080 spacewalk-monitoring: XSS issue in monitoring probe","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["spacewalk-java-0:2.3.8-147.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3080.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-3075","severity":"low","public_date":"2016-03-29T00:00:00Z","advisories":["RHSA-2016:2573"],"bugzilla":"1321866","bugzilla_description":"CVE-2016-3075 glibc: Stack overflow in nss_dns_getnetbyname_r","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:P/I:P/A:C","CWE":"CWE-121","affected_packages":["glibc-0:2.17-157.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-1234","severity":"moderate","public_date":"2016-03-07T00:00:00Z","advisories":[],"bugzilla":"1315647","bugzilla_description":"CVE-2016-1234 glibc: Stack-based buffer overflow in glob with GLOB_ALTDIRFUNC and crafted directory","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1234.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-2103","severity":"moderate","public_date":"2016-02-29T00:00:00Z","advisories":["RHSA-2016:0590"],"bugzilla":"1305681","bugzilla_description":"CVE-2016-2103 Satellite 5: multiple stored XSS vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["spacewalk-java-0:2.3.8-134.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2103.json"},{"CVE":"CVE-2016-2104","severity":"moderate","public_date":"2016-02-24T00:00:00Z","advisories":["RHSA-2016:0590"],"bugzilla":"1305677","bugzilla_description":"CVE-2016-2104 Satellite 5: stored and reflected XSS vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["spacewalk-java-0:2.3.8-134.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2104.json"},{"CVE":"CVE-2015-5174","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2045","RHSA-2016:1432","RHSA-2015:2660","RHBA-2016:0090","RHSA-2015:2661","RHSA-2016:1433","RHSA-2016:2599","RHSA-2016:1434","RHSA-2016:1435","RHSA-2015:2659"],"bugzilla":"1265698","bugzilla_description":"CVE-2015-5174 tomcat: URL Normalization issue","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.54-21_patch_05.ep6.el5","tomcat7-0:7.0.54-21_patch_05.ep6.el7","tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-21_patch_05.ep6.el6","tomcat7-0:7.0.59-42_patch_01.ep7.el6","tomcat8-0:8.0.18-52_patch_01.ep7.el6","jboss-ec2-eap-0:7.5.9-2.Final_redhat_2.ep6.el6","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5174.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-5351","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311076","bugzilla_description":"CVE-2015-5351 tomcat: CSRF token leak","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-352","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5351.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-0714","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311082","bugzilla_description":"CVE-2016-0714 tomcat: Security Manager bypass via persistence mechanisms","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-290","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0714.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2015-5346","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087"],"bugzilla":"1311085","bugzilla_description":"CVE-2015-5346 tomcat: Session fixation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-0706","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311087","bugzilla_description":"CVE-2016-0706 tomcat: security manager bypass via StatusManagerServlet","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-287","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-5345","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311089","bugzilla_description":"CVE-2015-5345 tomcat: directory disclosure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-552","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-0763","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311093","bugzilla_description":"CVE-2016-0763 tomcat: security manager bypass via setGlobalContext()","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0763.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-2094","severity":"moderate","public_date":"2016-02-17T00:00:00Z","advisories":["RHSA-2016:0595","RHSA-2016:0596","RHSA-2016:0597","RHSA-2016:0598","RHSA-2016:0599"],"bugzilla":"1308465","bugzilla_description":"CVE-2016-2094 EAP: HTTPS NIO connector uses no timeout when reading SSL handshake from client","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-358","affected_packages":["jboss-ec2-eap-0:7.5.7-2.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2094.json"},{"CVE":"CVE-2016-2142","severity":"moderate","public_date":"2016-02-17T00:00:00Z","advisories":["RHSA-2016:1038"],"bugzilla":"1311220","bugzilla_description":"CVE-2016-2142 openshift: Bind password for AD account is stored in world readable file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["atomic-openshift-0:3.1.1.6-6.git.43.f583589.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2142.json"},{"CVE":"CVE-2016-2226","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1333322","bugzilla_description":"CVE-2016-2226 gcc: Exploitable buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-2217","severity":"moderate","public_date":"2016-02-01T00:00:00Z","advisories":[],"bugzilla":"1305437","bugzilla_description":"CVE-2016-2217 socat: Hard coded 1024 bit DH p parameter was not prime","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2217.json"},{"CVE":"CVE-2015-5295","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0440","RHSA-2016:0441","RHSA-2016:0442","RHSA-2016:0266"],"bugzilla":"1298295","bugzilla_description":"CVE-2015-5295 openstack-heat: Vulnerability in Heat template validation leading to DoS","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":["openstack-heat-0:2014.2.3-11.el7ost","openstack-heat-0:2014.1.5-7.el6ost","openstack-heat-0:2014.1.5-7.el7ost","openstack-heat-0:2015.1.2-9.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5295.json"},{"CVE":"CVE-2017-17718","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2020:1454"],"bugzilla":"1527048","bugzilla_description":"CVE-2017-17718 rubygem-net-ldap: Missing SSL Certificate Validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["tfm-rubygem-net-ldap-0:0.16.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17718.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2015-8607","severity":"moderate","public_date":"2016-01-11T00:00:00Z","advisories":[],"bugzilla":"1293272","bugzilla_description":"CVE-2015-8607 perl-PathTools: Taint propagation flaw in canonpath()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8607.json"},{"CVE":"CVE-2015-6644","severity":"moderate","public_date":"2016-01-01T00:00:00Z","advisories":["RHSA-2017:2811","RHSA-2018:2927","RHSA-2017:1832","RHSA-2017:2810","RHSA-2017:2808","RHSA-2017:2809"],"bugzilla":"1444015","bugzilla_description":"CVE-2015-6644 bouncycastle: Information disclosure in GCMBlockCipher","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6644.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2015-8560","severity":"moderate","public_date":"2015-12-12T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1291227","bugzilla_description":"CVE-2015-8560 cups-filters: foomatic-rip did not consider semicolon as illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8560.json"},{"CVE":"CVE-2015-5254","severity":"moderate","public_date":"2015-12-08T00:00:00Z","advisories":["RHSA-2016:2035","RHSA-2016:2036","RHSA-2016:0489"],"bugzilla":"1291292","bugzilla_description":"CVE-2015-5254 JMS ObjectMessage: unsafe deserialization","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["activemq-0:5.9.0-6.redhat.611454.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5254.json"},{"CVE":"CVE-2015-7544","severity":"important","public_date":"2015-12-07T00:00:00Z","advisories":["RHSA-2016:0426"],"bugzilla":"1269588","bugzilla_description":"CVE-2015-7544 redhat-support-plugin-rhev: Remote code execution by SuperUser role on hosts in RHEV","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":["redhat-support-plugin-rhev-0:3.6.0-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7544.json"},{"CVE":"CVE-2015-5304","severity":"moderate","public_date":"2015-12-02T00:00:00Z","advisories":["RHSA-2015:2540","RHSA-2015:2541","RHSA-2015:2542","RHSA-2015:2538","RHSA-2015:2539"],"bugzilla":"1273046","bugzilla_description":"CVE-2015-5304 JBoss EAP: missing authorization check for Monitor/Deployer/Auditor role when shutting down server","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-862","affected_packages":["jboss-ec2-eap-0:7.5.5-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5304.json"},{"CVE":"CVE-2015-7528","severity":"moderate","public_date":"2015-11-27T00:00:00Z","advisories":["RHSA-2015:2544","RHSA-2015:2615"],"bugzilla":"1286745","bugzilla_description":"CVE-2015-7528 OpenShift: pod log location must validate container if provided","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":["openshift-0:3.0.2.0-0.git.38.7576bc5.el7ose","atomic-openshift-0:3.1.0.4-1.git.15.5e061c3.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7528.json"},{"CVE":"CVE-2015-7518","severity":"moderate","public_date":"2015-11-26T00:00:00Z","advisories":["RHSA-2016:0174"],"bugzilla":"1285728","bugzilla_description":"CVE-2015-7518 foreman: Stored XSS vulnerability in smart class parameters/variables","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["foreman-0:1.7.2.53-1.el6_6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7518.json"},{"CVE":"CVE-2015-8327","severity":"moderate","public_date":"2015-11-26T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1287523","bugzilla_description":"CVE-2015-8327 cups-filters: foomatic-rip did not consider the back tick as an illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8327.json"},{"CVE":"CVE-2015-5329","severity":"moderate","public_date":"2015-11-11T00:00:00Z","advisories":["RHSA-2015:2650"],"bugzilla":"1281777","bugzilla_description":"CVE-2015-5329 openstack-tripleo-heat-templates: Using hardcoded rabbitmq credentials regardless of supplied values","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-798","affected_packages":["openstack-tripleo-heat-templates-0:0.8.6-94.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5329.json"},{"CVE":"CVE-2015-7501","severity":"critical","public_date":"2015-11-06T00:00:00Z","advisories":["RHSA-2016:1773","RHSA-2016:0040","RHSA-2015:2578","RHSA-2015:2534","RHSA-2015:2556","RHSA-2015:2557","RHSA-2015:2579","RHSA-2015:2535","RHSA-2015:2514","RHSA-2015:2536","RHSA-2015:2559","RHSA-2015:2537","RHSA-2015:2538","RHSA-2015:2516","RHSA-2015:2539","RHSA-2015:2517","RHSA-2015:2670","RHSA-2015:2671","RHSA-2020:4274","RHSA-2015:2521","RHSA-2015:2522","RHSA-2015:2500","RHSA-2015:2501","RHSA-2015:2523","RHSA-2015:2502","RHSA-2015:2524","RHSA-2015:2547","RHSA-2015:2548","RHSA-2015:2560","RHSA-2015:2540","RHSA-2015:2541","RHSA-2015:2542","RHSA-2016:0118"],"bugzilla":"1279330","bugzilla_description":"CVE-2015-7501 apache-commons-collections: InvokerTransformer code execution during deserialisation","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502->CWE-284","affected_packages":["jboss-ec2-eap-0:7.5.5-3.Final_redhat_3.ep6.el6","apache-commons-collections-0:3.2.1-22.el7_2","jakarta-commons-collections-0:3.2.1-3.5.el6_7","jenkins-0:1.651.2-1.el6op","rh-maven35-apache-commons-collections4-0:4.0-7.3.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el6","jakarta-commons-collections-0:3.2.1-5.ep5.el4","jakarta-commons-collections-0:3.2.1-5.ep5.el5","jakarta-commons-collections-0:3.2.1-5.ep5.el6","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el7","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el5","jakarta-commons-collections-0:3.2-2jpp.4","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7501.json"},{"CVE":"CVE-2015-5178","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:1904","RHSA-2015:1905","RHSA-2015:1906","RHSA-2015:1907"],"bugzilla":"1250552","bugzilla_description":"CVE-2015-5178 JBoss AS/WildFly: missing X-Frame-Options header leading to clickjacking","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["jboss-as-console-0:2.5.10-4.Final_redhat_2.1.ep6.el5","jboss-ec2-eap-0:7.5.4-1.Final_redhat_4.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5178.json"},{"CVE":"CVE-2015-5188","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:1904","RHSA-2015:1905","RHSA-2015:1906","RHSA-2015:1907"],"bugzilla":"1252885","bugzilla_description":"CVE-2015-5188 JBoss EAP: CSRF vulnerability in EAP & WildFly Web Console","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-352","affected_packages":["jboss-ec2-eap-0:7.5.4-1.Final_redhat_4.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5188.json"},{"CVE":"CVE-2015-5220","severity":"important","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:1904","RHSA-2015:1905","RHSA-2015:1906","RHSA-2015:1907","RHSA-2016:1519"],"bugzilla":"1255597","bugzilla_description":"CVE-2015-5220 OOME from EAP 6 http management console","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-770","affected_packages":["jboss-ec2-eap-0:7.5.4-1.Final_redhat_4.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5220.json"},{"CVE":"CVE-2015-5271","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1862"],"bugzilla":"1261697","bugzilla_description":"CVE-2015-5271 openstack-tripleo-heat-templates: unsafe pipeline ordering of swift staticweb middleware","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-285","affected_packages":["openstack-tripleo-heat-templates-0:0.8.6-71.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5271.json"},{"CVE":"CVE-2015-8776","severity":"moderate","public_date":"2015-09-20T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300299","bugzilla_description":"CVE-2015-8776 glibc: Segmentation fault caused by passing out-of-range data to strftime()","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2015-5282","severity":"moderate","public_date":"2015-09-17T00:00:00Z","advisories":["RHBA-2016:1501"],"bugzilla":"1264221","bugzilla_description":"CVE-2015-5282 foreman: XSS in hidden parameter value switcher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["foreman-0:1.11.0.49-1.el6sat","foreman-0:1.11.0.49-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5282.json"},{"CVE":"CVE-2015-5244","severity":"moderate","public_date":"2015-09-15T00:00:00Z","advisories":[],"bugzilla":"1259216","bugzilla_description":"CVE-2015-5244 mod_nss: incorrect ciphersuite parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5244.json"},{"CVE":"CVE-2015-6748","severity":"moderate","public_date":"2015-08-27T00:00:00Z","advisories":["RHSA-2015:2560","RHSA-2015:2559"],"bugzilla":"1258310","bugzilla_description":"CVE-2015-6748 jsoup: XSS vulnerability related to incomplete tags at EOF","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6748.json"},{"CVE":"CVE-2015-5233","severity":"moderate","public_date":"2015-08-27T00:00:00Z","advisories":["RHSA-2015:2622"],"bugzilla":"1262443","bugzilla_description":"CVE-2015-5233 foreman: reports show/destroy not restricted by host authorization","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:P","CWE":"CWE-284","affected_packages":["foreman-0:1.7.2.49-1.el6_6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5233.json"},{"CVE":"CVE-2015-5694","severity":"low","public_date":"2015-07-28T00:00:00Z","advisories":[],"bugzilla":"1245241","bugzilla_description":"CVE-2015-5695 openstack-designate: Infinite loop with large resource record sets","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5694.json"},{"CVE":"CVE-2015-5695","severity":"low","public_date":"2015-07-28T00:00:00Z","advisories":[],"bugzilla":"1245241","bugzilla_description":"CVE-2015-5695 openstack-designate: Infinite loop with large resource record sets","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5695.json"},{"CVE":"CVE-2015-3278","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":[],"bugzilla":"1238326","bugzilla_description":"CVE-2015-3278 nss_compat_ossl: incorrect multi-keyword mode cipherstring parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3278.json"},{"CVE":"CVE-2015-5152","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":["RHBA-2016:1501"],"bugzilla":"1243571","bugzilla_description":"CVE-2015-5152 Foreman: API permits HTTP requests when require_ssl is enabled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-319","affected_packages":["foreman-0:1.11.0.49-1.el6sat","foreman-0:1.11.0.49-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5152.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atinject-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atinject-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atinject-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atinject-tck_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atinject-tck_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atinject-tck_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atinject_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atinject_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atinject_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atkmm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atkmm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atkmm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atkmm-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atkmm-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atkmm-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atkmm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atkmm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atkmm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-corei2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-corei2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-corei2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-corei2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-corei2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-corei2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z10-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z10-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z10-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z10_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z10_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z10_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z196-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z196-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z196-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z196_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z196_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas-z196_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/atlas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/attr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/attr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/attr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audispd-plugins-zos_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audispd-plugins-zos_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audispd-plugins-zos_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audispd-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audispd-plugins_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audispd-plugins_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audit-libs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audit-libs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audit-libs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audit-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audit-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audit-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audit_security_api_results.json
new file mode 100644
index 0000000..9df0204
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/audit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5186","severity":"moderate","public_date":"2015-08-13T00:00:00Z","advisories":[],"bugzilla":"1251621","bugzilla_description":"CVE-2015-5186 Audit: log terminal emulator escape sequences handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-138","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5186.json"},{"CVE":"CVE-2014-0058","severity":"low","public_date":"2014-02-24T00:00:00Z","advisories":["RHSA-2014:1995","RHSA-2014:0895","RHSA-2015:1009","RHSA-2014:1290","RHSA-2014:0205","RHSA-2014:0910","RHSA-2014:0204","RHSA-2015:0034","RHSA-2014:1291"],"bugzilla":"1063641","bugzilla_description":"CVE-2014-0058 Red Hat JBoss EAP6: Plain text password logging during security audit","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["jboss-as-web-0:7.3.1-4.Final_redhat_4.1.ep6.el6","jboss-as-web-0:7.3.1-4.Final_redhat_4.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0058.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/augeas-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/augeas-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/augeas-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/augeas-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/augeas-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/augeas-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/augeas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/augeas_security_api_results.json
new file mode 100644
index 0000000..1cd3417
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/augeas_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-7555","severity":"important","public_date":"2017-08-17T00:00:00Z","advisories":["RHSA-2017:2788","RHSA-2019:2403"],"bugzilla":"1478373","bugzilla_description":"CVE-2017-7555 augeas: Improper handling of escaped strings leading to memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-122","affected_packages":["augeas-0:1.4.0-2.el7_4.1","augeas-0:1.4.0-2.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7555.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2013-6412","severity":"moderate","public_date":"2013-11-25T00:00:00Z","advisories":["RHSA-2014:0044"],"bugzilla":"1034261","bugzilla_description":"CVE-2013-6412 augeas: incorrect permissions set on newly created files","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["augeas-0:1.0.0-5.el6_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6412.json"},{"CVE":"CVE-2012-6607","severity":null,"public_date":"2013-11-21T00:00:00Z","advisories":[],"bugzilla":"1034243","bugzilla_description":"CVE-2012-6607 augeas: symlink attack on a .augsave file","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6607.json"},{"CVE":"CVE-2012-0786","severity":"low","public_date":"2012-08-11T00:00:00Z","advisories":["RHSA-2013:1537"],"bugzilla":"772257","bugzilla_description":"CVE-2012-0786 augeas: susceptible to symlink attack","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["augeas-0:1.0.0-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0786.json"},{"CVE":"CVE-2012-0787","severity":"low","public_date":"2012-07-19T00:00:00Z","advisories":["RHSA-2013:1537"],"bugzilla":"772261","bugzilla_description":"CVE-2012-0787 augeas: susceptible to mountpoint attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["augeas-0:1.0.0-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0787.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authd_security_api_results.json
new file mode 100644
index 0000000..f58392b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-4982","severity":"low","public_date":"2016-06-13T00:00:00Z","advisories":[],"bugzilla":"1346051","bugzilla_description":"CVE-2016-4982 authd insecure /etc/ident.key file creation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4982.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authselect-compat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authselect-compat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authselect-compat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authselect-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authselect-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authselect-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authselect_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authselect_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/authselect_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autoconf-archive_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autoconf-archive_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autoconf-archive_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autoconf213_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autoconf213_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autoconf213_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autoconf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autoconf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autoconf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-af_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-af_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-af_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-bg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-bg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-bg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-cs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-cs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-cs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-da_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-da_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-da_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-de_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-de_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-de_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-en_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-en_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-en_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-es_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-es_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-es_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-fa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-fa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-fa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-fi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-fi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-fi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-fr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-fr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-fr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ga_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ga_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-hr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-hr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-hr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-hu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-hu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-hu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-is_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-is_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-is_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-it_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-it_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-it_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ja_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ja_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ja_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-lb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-lb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-lb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-lt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-lt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-lt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-mn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-mn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-mn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-nl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-nl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-nl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-pl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-pl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-pl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-pt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-pt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-pt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ru_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ru_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-ru_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-sv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-tr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-tr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-tr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-vi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-vi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-vi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-zh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-zh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autocorr-zh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autofs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autofs_security_api_results.json
new file mode 100644
index 0000000..3519955
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autofs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-8169","severity":"moderate","public_date":"2015-03-02T00:00:00Z","advisories":["RHSA-2015:1344","RHSA-2015:2417"],"bugzilla":"1192565","bugzilla_description":"CVE-2014-8169 autofs: priv escalation via interpreter load path for program based automount maps","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-426","affected_packages":["autofs-1:5.0.5-113.el6","autofs-1:5.0.7-54.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8169.json"},{"CVE":"CVE-2012-2697","severity":"low","public_date":"2013-01-07T00:00:00Z","advisories":["RHSA-2013:0132"],"bugzilla":"831772","bugzilla_description":"CVE-2012-2697 autofs: denial of service when using an LDAP-based automount map","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["autofs-1:5.0.1-0.rc2.177.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2697.json"},{"CVE":"CVE-2007-6285","severity":"important","public_date":"2007-12-20T00:00:00Z","advisories":["RHSA-2007:1177","RHSA-2007:1176"],"bugzilla":"426218","bugzilla_description":"CVE-2007-6285 autofs default doesn't set nodev in /net","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["autofs5-1:5.0.1-0.rc2.55.el4_6.2","autofs-1:5.0.1-0.rc2.55.el5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6285.json"},{"CVE":"CVE-2007-5964","severity":"important","public_date":"2007-12-12T12:00:00Z","advisories":["RHSA-2007:1129","RHSA-2007:1128"],"bugzilla":"410031","bugzilla_description":"CVE-2007-5964 autofs defaults don't restrict suid in /net","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["autofs5-1:5.0.1-0.rc2.55.el4_6.1","autofs-1:5.0.1-0.rc2.55.el5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5964.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autogen-libopts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autogen-libopts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autogen-libopts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autogen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autogen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autogen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/automake_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/automake_security_api_results.json
new file mode 100644
index 0000000..ae5124f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/automake_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3386","severity":"low","public_date":"2012-07-09T00:00:00Z","advisories":["RHSA-2013:0526","RHSA-2014:1243"],"bugzilla":"838286","bugzilla_description":"CVE-2012-3386 automake: locally exploitable \"make distcheck\" bug","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-732","affected_packages":["automake-0:1.9.6-3.el5","automake-0:1.11.1-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3386.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autotrace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autotrace_security_api_results.json
new file mode 100644
index 0000000..63618c8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/autotrace_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-9151","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9151.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9152","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9152.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9153","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9153.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9154","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9154.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9155","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9155.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9156","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9156.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9157","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9157.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9158","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9158.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9159","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9159.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9160","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9160.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9161","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9162","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9162.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9163","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9163.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9164","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9165","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9165.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9166","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9166.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9167","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9168","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9168.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9169","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9169.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9170","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9170.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9171","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9171.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9172","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9172.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9173","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9173.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9174","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9174.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9175","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9175.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9176","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9176.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9177","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9177.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9178","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9178.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9179","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9179.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9180","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9180.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9181","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9181.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9182","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9183","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9183.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9184","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9184.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9185","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9185.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9186","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9186.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9187","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9187.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9188","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9188.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9189","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9189.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9190","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9190.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9191","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9191.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9192","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9192.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9193","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9193.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9194","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9194.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9195","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9195.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9196","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9196.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9197","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9197.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9198","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9199","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9200","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1454714","bugzilla_description":"CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9200.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7392","severity":"moderate","public_date":"2016-09-10T00:00:00Z","advisories":[],"bugzilla":"1375255","bugzilla_description":"CVE-2016-7392 autotrace: Out of bounds write when converting bmp image","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7392.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2013-1953","severity":"low","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"951257","bugzilla_description":"CVE-2013-1953 autotrace: buffer overflow when parsing BMP files","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1953.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-autoipd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-autoipd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-autoipd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-howl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-howl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-howl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-howl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-howl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-howl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-libdns_sd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-libdns_sd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-libdns_sd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-libdns_sd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-libdns_sd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-compat-libdns_sd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-gobject_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-gobject_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-gobject_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-ui-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-ui-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi-ui-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi_security_api_results.json
new file mode 100644
index 0000000..b4f58aa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/avahi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1000845","severity":null,"public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1661252","bugzilla_description":"CVE-2018-1000845 avahi: DNS amplification and reflection to spoofed addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000845.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-6519","severity":"low","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2020:1176"],"bugzilla":"1426712","bugzilla_description":"CVE-2017-6519 avahi: Multicast DNS responds to unicast queries outside of local network","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["avahi-0:0.6.31-20.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6519.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2011-0634","severity":"moderate","public_date":"2011-01-04T00:00:00Z","advisories":[],"bugzilla":"667187","bugzilla_description":"CVE-2011-1002 avahi: daemon infinite loop triggered by an empty UDP packet (CVE-2010-2244 fix regression)","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0634.json"},{"CVE":"CVE-2011-1002","severity":"moderate","public_date":"2011-01-04T00:00:00Z","advisories":["RHSA-2011:0436","RHSA-2011:0779"],"bugzilla":"667187","bugzilla_description":"CVE-2011-1002 avahi: daemon infinite loop triggered by an empty UDP packet (CVE-2010-2244 fix regression)","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["avahi-0:0.6.16-10.el5_6","avahi-0:0.6.25-11.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1002.json"},{"CVE":"CVE-2010-2244","severity":"moderate","public_date":"2010-06-23T00:00:00Z","advisories":["RHSA-2010:0528"],"bugzilla":"607293","bugzilla_description":"CVE-2010-2244 avahi: assertion failure after receiving a packet with corrupted checksum","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["avahi-0:0.6.16-9.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2244.json"},{"CVE":"CVE-2009-0758","severity":"low","public_date":"2009-03-01T00:00:00Z","advisories":["RHSA-2010:0528"],"bugzilla":"488314","bugzilla_description":"CVE-2009-0758 avahi: remote DoS via legacy unicast mDNS queries","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["avahi-0:0.6.16-9.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0758.json"},{"CVE":"CVE-2008-5081","severity":"moderate","public_date":"2008-12-12T00:00:00Z","advisories":["RHSA-2009:0013"],"bugzilla":"475964","bugzilla_description":"CVE-2008-5081 avahi: avahi-daemon DoS (application abort) via packet with source port 0","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["avahi-0:0.6.16-1.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5081.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/awscli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/awscli_security_api_results.json
new file mode 100644
index 0000000..c5ea3b5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/awscli_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-15869","severity":"moderate","public_date":"2018-08-14T00:00:00Z","advisories":[],"bugzilla":"1623095","bugzilla_description":"CVE-2018-15869 awscli: Allows loading of an undesired AMI by setting similar image properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babl-devel-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babl-devel-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babl-devel-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/babl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-console_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-console_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-console_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-director_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-director_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-director_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-libs-sql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-libs-sql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-libs-sql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-logwatch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-logwatch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-logwatch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-storage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-storage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bacula-storage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/baobab_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/baobab_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/baobab_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/basesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/basesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/basesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bash-completion_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bash-completion_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bash-completion_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bash-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bash-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bash-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bash_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bash_security_api_results.json
new file mode 100644
index 0000000..6bd7ea5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bash_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-18276","severity":"low","public_date":"2019-07-01T00:00:00Z","advisories":[],"bugzilla":"1778309","bugzilla_description":"CVE-2019-18276 bash: when effective UID is not equal to its real UID the saved UID is not dropped","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18276.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2012-6711","severity":"moderate","public_date":"2019-06-18T00:00:00Z","advisories":[],"bugzilla":"1721071","bugzilla_description":"CVE-2012-6711 bash: heap-based buffer overflow during echo of unsupported characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6711.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-9924","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":["RHSA-2020:1113","RHSA-2020:3474","RHBA-2020:1539","RHSA-2020:3592","RHSA-2020:3803","RHBA-2020:1540"],"bugzilla":"1691774","bugzilla_description":"CVE-2019-9924 bash: BASH_CMD is writable in restricted bash shells","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","bash-0:4.2.46-34.el7","bash-0:4.2.46-32.el7_6","bash-0:4.2.46-34.el7_7","bash-0:4.2.46-30.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9924.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-5932","severity":"important","public_date":"2017-01-20T00:00:00Z","advisories":[],"bugzilla":"1420674","bugzilla_description":"CVE-2017-5932 bash: Code execution in bash autocompletion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5932.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9401","severity":"low","public_date":"2016-11-17T00:00:00Z","advisories":["RHSA-2017:1931","RHSA-2017:0725"],"bugzilla":"1396383","bugzilla_description":"CVE-2016-9401 bash: popd controlled free","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["bash-0:4.2.46-28.el7","bash-0:4.1.2-48.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9401.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7543","severity":"moderate","public_date":"2016-09-16T00:00:00Z","advisories":["RHSA-2017:1931","RHSA-2017:0725"],"bugzilla":"1379630","bugzilla_description":"CVE-2016-7543 bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["bash-0:4.2.46-28.el7","bash-0:4.1.2-48.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-0634","severity":"moderate","public_date":"2015-10-16T00:00:00Z","advisories":["RHSA-2017:1931","RHSA-2017:0725"],"bugzilla":"1377613","bugzilla_description":"CVE-2016-0634 bash: Arbitrary code execution via malicious hostname","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["bash-0:4.2.46-28.el7","bash-0:4.1.2-48.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0634.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.9"},{"CVE":"CVE-2014-6278","severity":null,"public_date":"2014-09-29T00:00:00Z","advisories":[],"bugzilla":"1147414","bugzilla_description":"CVE-2014-6278 bash: incorrect parsing of function definitions with nested command substitutions","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6278.json"},{"CVE":"CVE-2014-6277","severity":null,"public_date":"2014-09-27T00:00:00Z","advisories":[],"bugzilla":"1147189","bugzilla_description":"CVE-2014-6277 bash: uninitialized here document closing delimiter pointer use","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6277.json"},{"CVE":"CVE-2014-7187","severity":"moderate","public_date":"2014-09-26T00:00:00Z","advisories":["RHSA-2014:1312","RHSA-2014:1311","RHSA-2014:1354","RHSA-2014:1306","RHSA-2014:1865"],"bugzilla":"1146804","bugzilla_description":"CVE-2014-7187 bash: off-by-one error in deeply nested flow control constructs","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":["bash-0:3.2-32.el5_9.3","bash-0:3.2-33.el5_11.1.sjis.2","bash-0:4.2.45-5.el7_0.4","rhev-hypervisor6-0:6.5-20140930.1.el6ev","bash-0:4.1.2-15.el6_5.2","bash-0:3.2-32.el5_9.3.sjis.1","bash-0:3.2-33.el5_11.4","bash-0:4.1.2-15.el6_5.1.sjis.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7187.json"},{"CVE":"CVE-2014-7186","severity":"moderate","public_date":"2014-09-25T00:00:00Z","advisories":["RHSA-2014:1312","RHSA-2014:1311","RHSA-2014:1354","RHSA-2014:1306","RHSA-2014:1865"],"bugzilla":"1146791","bugzilla_description":"CVE-2014-7186 bash: parser can allow out-of-bounds memory access while handling redir_stack","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["bash-0:3.2-32.el5_9.3","bash-0:3.2-33.el5_11.1.sjis.2","bash-0:4.2.45-5.el7_0.4","rhev-hypervisor6-0:6.5-20140930.1.el6ev","bash-0:4.1.2-15.el6_5.2","bash-0:3.2-32.el5_9.3.sjis.1","bash-0:3.2-33.el5_11.4","bash-0:4.1.2-15.el6_5.1.sjis.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7186.json"},{"CVE":"CVE-2014-6271","severity":"critical","public_date":"2014-09-24T00:00:00Z","advisories":["RHSA-2014:1354","RHSA-2014:1294","RHSA-2014:1293","RHSA-2014:1295"],"bugzilla":"1141597","bugzilla_description":"CVE-2014-6271 bash: specially-crafted environment variables can be used to inject shell commands","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":["bash-0:3.0-27.el4.2","bash-0:3.2-33.el5_11.1.sjis.1","bash-0:3.2-33.el5.1","bash-0:4.2.45-5.el7_0.2","rhev-hypervisor6-0:6.5-20140930.1.el6ev","bash-0:4.1.2-15.el6_5.1","bash-0:4.1.2-15.el6_5.1.sjis.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6271.json"},{"CVE":"CVE-2014-7169","severity":"important","public_date":"2014-09-24T00:00:00Z","advisories":["RHSA-2014:1312","RHSA-2014:1311","RHSA-2014:1354","RHSA-2014:1306","RHSA-2014:1865"],"bugzilla":"1146319","bugzilla_description":"CVE-2014-7169 bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-228","affected_packages":["bash-0:3.2-32.el5_9.3","bash-0:3.2-33.el5_11.1.sjis.2","bash-0:4.2.45-5.el7_0.4","rhev-hypervisor6-0:6.5-20140930.1.el6ev","bash-0:4.1.2-15.el6_5.2","bash-0:3.2-32.el5_9.3.sjis.1","bash-0:3.2-33.el5_11.4","bash-0:4.1.2-15.el6_5.1.sjis.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7169.json"},{"CVE":"CVE-2012-3410","severity":"low","public_date":"2012-07-10T00:00:00Z","advisories":[],"bugzilla":"840091","bugzilla_description":"CVE-2012-3410 bash: Stack-based buffer overflow (crash) when expanding /dev/fd file names","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3410.json"},{"CVE":"CVE-2008-5374","severity":"low","public_date":"2008-08-13T00:00:00Z","advisories":["RHSA-2011:1073","RHSA-2011:0261"],"bugzilla":"475474","bugzilla_description":"CVE-2008-5374 bash: Insecure temporary file use in aliasconv.sh, aliasconv.bash, cshtobash (symlink attack)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bash-0:3.0-27.el4","bash-0:3.2-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5374.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bc_security_api_results.json
new file mode 100644
index 0000000..357292a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-1968","severity":"low","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877458","bugzilla_description":"CVE-2020-1968 openssl: Information exposure when DH secret are reused across multiple TLS connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-13692","severity":"important","public_date":"2020-06-04T00:00:00Z","advisories":["RHSA-2020:3005","RHSA-2020:3248","RHSA-2020:3675","RHSA-2020:3285","RHSA-2020:3176","RHSA-2020:3286","RHSA-2020:3283","RHSA-2020:3284","RHSA-2020:3209","RHSA-2020:3678"],"bugzilla":"1852985","bugzilla_description":"CVE-2020-13692 postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["postgresql-jdbc-0:9.2.1002-8.el7_8","postgresql-jdbc-0:8.4.704-4.el6_10","postgresql-jdbc-0:42.2.3-3.el8_0","postgresql-jdbc-0:42.2.3-3.el8_1","postgresql-jdbc-0:42.2.3-3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13692.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2020-8555","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":["RHSA-2020:2594","RHSA-2020:2440","RHSA-2020:2441","RHSA-2020:2448","RHSA-2020:2449","RHSA-2020:2479"],"bugzilla":"1821583","bugzilla_description":"CVE-2020-8555 kubernetes: Server side request forgery (SSRF) in kube-controller-manager allows users to leak secret information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openshift4/ose-hyperkube:v4.3.25-202006081335","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift4/ose-hyperkube:v4.4.0-202006080610","openshift-0:4.3.25-202006060952.git.1.96c30f6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8555.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2020-12825","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:3654","RHBA-2020:3609","RHSA-2020:4072"],"bugzilla":"1835377","bugzilla_description":"CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["redhat-coreos-43.82.202009181853.0","libcroco-0:0.6.12-4.el8_2.1","libcroco-0:0.6.12-6.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-11254","severity":"moderate","public_date":"2020-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:0933","RHSA-2020:2479","RHSA-2020:2413"],"bugzilla":"1819486","bugzilla_description":"CVE-2019-11254 kubernetes: Denial of service in API server via crafted YAML payloads by authorized users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-hyperkube:v4.5.0-202007100518.p0","openshift4/ose-oauth-server-rhel7:v4.5.0-202007012112.p0","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift4/ose-openshift-apiserver-rhel7:v4.3.9-202003230345"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11254.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-6096","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1820331","bugzilla_description":"CVE-2020-6096 glibc: signed comparison vulnerability in the ARMv7 memcpy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6096.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10029","severity":"moderate","public_date":"2020-02-12T00:00:00Z","advisories":[],"bugzilla":"1810670","bugzilla_description":"CVE-2020-10029 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10029.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2020-1751","severity":"moderate","public_date":"2020-01-20T00:00:00Z","advisories":[],"bugzilla":"1810719","bugzilla_description":"CVE-2020-1751 glibc: array overflow in backtrace functions for powerpc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1751.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-1752","severity":"moderate","public_date":"2020-01-17T00:00:00Z","advisories":[],"bugzilla":"1810718","bugzilla_description":"CVE-2020-1752 glibc: use-after-free in glob() function when expanding ~user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1752.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-2920","severity":"low","public_date":"2019-11-19T00:00:00Z","advisories":[],"bugzilla":"1774049","bugzilla_description":"CVE-2019-2920 mysql-connector-odbc: An unauthenticated attacker with network access can, via multiple protocols compromise MySQL Connectors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2920.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-19126","severity":"low","public_date":"2019-11-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3861","RHSA-2020:1828"],"bugzilla":"1774681","bugzilla_description":"CVE-2019-19126 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glibc-0:2.17-317.el7","glibc-0:2.28-101.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1010025","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":[],"bugzilla":"1737445","bugzilla_description":"CVE-2019-1010025 glibc: information disclosure of heap addresses of pthread_created thread","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010025.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-1010023","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":[],"bugzilla":"1773916","bugzilla_description":"CVE-2019-1010023 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010023.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-1010024","severity":"moderate","public_date":"2019-07-15T00:00:00Z","advisories":[],"bugzilla":"1773927","bugzilla_description":"CVE-2019-1010024 glibc: ASLR bypass using cache of thread stack and heap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010024.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-10132","severity":"important","public_date":"2019-05-21T12:00:00Z","advisories":["RHSA-2019:1264","RHSA-2019:1268","RHSA-2019:1455"],"bugzilla":"1706067","bugzilla_description":"CVE-2019-10132 libvirt: wrong permissions in systemd admin-sock due to missing SocketMode parameter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["virt:rhel-8000020190516125745.55190bc5","virt:8.0.0-8000020190530233731.55190bc5","libvirt-0:4.5.0-10.el7_6.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12126","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646781","bugzilla_description":"CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12130","severity":"important","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646784","bugzilla_description":"CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385->CWE-226","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-12127","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1667782","bugzilla_description":"CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11091","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1705312","bugzilla_description":"CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2017-18367","severity":"moderate","public_date":"2019-04-24T00:00:00Z","advisories":["RHSA-2019:4090","RHSA-2019:4087","RHSA-2020:2479"],"bugzilla":"1706826","bugzilla_description":"CVE-2017-18367 libseccomp-golang: mishandling of multiple argument rules leading to a bypass of intended access restrictions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["openshift4/ose-hypershift:v4.1.27-201912030019","openshift4/ose-cli:v4.1.27-201912030019","openshift4/ose-node:v4.1.27-201912030019","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift-0:4.1.27-201912021146.git.0.a40116f.el8_0","openshift4/ose-cli-artifacts:v4.1.27-201912030019","openshift4/ose-hyperkube:v4.1.27-201912030019"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-3868","severity":"moderate","public_date":"2019-04-23T16:59:00Z","advisories":["RHSA-2020:2366","RHSA-2019:0856","RHSA-2019:2998","RHSA-2019:1140","RHSA-2019:0868","RHSA-2019:0857"],"bugzilla":"1679144","bugzilla_description":"CVE-2019-3868 keycloak: session hijack using the user access token","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-sso7-keycloak-0:3.4.17-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.17-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3868.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2005-3590","severity":"low","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1706046","bugzilla_description":"CVE-2005-3590 glibc: buffer overflow in getgrouplist function leading to corrupted memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3590.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-0211","severity":"important","public_date":"2019-04-01T00:00:00Z","advisories":["RHSA-2019:0980","RHSA-2019:1297","RHSA-2019:1296","RHSA-2019:1543","RHSA-2019:0746"],"bugzilla":"1694980","bugzilla_description":"CVE-2019-0211 httpd: privilege escalation from modules scripts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["httpd24-httpd-0:2.4.34-7.el7.1","httpd:2.4-8000020190405071959.55190bc5","httpd24-httpd-0:2.4.34-7.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-0215","severity":"important","public_date":"2019-04-01T00:00:00Z","advisories":["RHSA-2019:0980"],"bugzilla":"1695025","bugzilla_description":"CVE-2019-0215 httpd: mod_ssl: access control bypass when using per-location client certification authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["httpd:2.4-8000020190405071959.55190bc5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0215.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2009-5155","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1683683","bugzilla_description":"CVE-2009-5155 glibc: parse_reg_exp in posix/regcomp.c misparses alternatives leading to denial of service or trigger incorrect result","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1010022","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1731964","bugzilla_description":"CVE-2019-1010022 glibc: stack guard protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-119->CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-3855","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687303","bugzilla_description":"CVE-2019-3855 libssh2: Integer overflow in transport read resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3856","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687304","bugzilla_description":"CVE-2019-3856 libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3856.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3857","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687305","bugzilla_description":"CVE-2019-3857 libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3857.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3863","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687313","bugzilla_description":"CVE-2019-3863 libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-8324","severity":"important","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHSA-2019:1972","RHSA-2020:2769","RHSA-2019:1151","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692520","bugzilla_description":"CVE-2019-8324 rubygems: Installing a malicious gem may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby:2.5-8000020190524123348.55190bc5","ruby-0:2.0.0.648-35.el7_6","ruby-0:2.4.6-91.el7cf","rh-ruby23-ruby-0:2.3.8-70.el6","rh-ruby23-ruby-0:2.3.8-70.el7","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-9192","severity":null,"public_date":"2019-02-26T00:00:00Z","advisories":[],"bugzilla":"1684374","bugzilla_description":"CVE-2019-9192 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9192.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2019-7309","severity":"low","public_date":"2019-02-02T00:00:00Z","advisories":[],"bugzilla":"1672232","bugzilla_description":"CVE-2019-7309 glibc: memcmp function incorrectly returns zero","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7309.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-3817","severity":"moderate","public_date":"2019-01-21T00:00:00Z","advisories":["RHSA-2019:3898","RHBA-2020:0062","RHSA-2019:3583"],"bugzilla":"1668005","bugzilla_description":"CVE-2019-3817 libcomps: use after free when merging two objmrtrees","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.81.202001142154.0","libcomps-0:0.1.8-13.el7","libcomps-0:0.1.11-2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20796","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":[],"bugzilla":"1683150","bugzilla_description":"CVE-2018-20796 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9169","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":[],"bugzilla":"1684057","bugzilla_description":"CVE-2019-9169 glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-6488","severity":"moderate","public_date":"2019-01-16T00:00:00Z","advisories":[],"bugzilla":"1667931","bugzilla_description":"CVE-2019-6488 glibc: Incorrect attempt to use a 64-bit register for size_t in assembly codes results in segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-20815","severity":"important","public_date":"2018-12-14T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:1881","RHSA-2019:1175","RHSA-2019:1743","RHSA-2019:1723","RHSA-2019:1667","RHSA-2019:2507","RHSA-2019:1968"],"bugzilla":"1693101","bugzilla_description":"CVE-2018-20815 QEMU: device_tree: heap buffer overflow while loading device tree blob","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-ma-10:2.12.0-18.el7_6.4","virt:rhel-8000020190510171727.55190bc5","qemu-kvm-rhev-10:2.12.0-18.el7_6.6","qemu-kvm-rhev-10:2.12.0-18.el7_6.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-14637","severity":"moderate","public_date":"2018-11-27T20:23:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1627851","bugzilla_description":"CVE-2018-14637 keycloak: expiration not validated in SAML broker consumer endpoint","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287->CWE-285","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-19591","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1653993","bugzilla_description":"CVE-2018-19591 glibc: file descriptor leak in if_nametoindex() in sysdeps/unix/sysv/linux/if_index.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19591.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14658","severity":"moderate","public_date":"2018-11-13T17:38:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625409","bugzilla_description":"CVE-2018-14658 keycloak: Open Redirect in Login and Logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14658.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14655","severity":"moderate","public_date":"2018-11-13T17:37:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625396","bugzilla_description":"CVE-2018-14655 keycloak: XSS-Vulnerability with response_mode=form_post","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14655.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2018-14657","severity":"low","public_date":"2018-11-13T17:37:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625404","bugzilla_description":"CVE-2018-14657 keycloak: brute force protection not working for the entire login workflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14657.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-11784","severity":"moderate","public_date":"2018-10-03T00:00:00Z","advisories":["RHSA-2019:0485","RHSA-2019:0130","RHSA-2019:0131","RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1636512","bugzilla_description":"CVE-2018-11784 tomcat: Open redirect in default servlet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-99","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7_6","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-10936","severity":"low","public_date":"2018-08-27T00:00:00Z","advisories":[],"bugzilla":"1622225","bugzilla_description":"CVE-2018-10936 PostgreSQL: Postgres JDBC driver does not perform host name validation by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-15857","severity":"moderate","public_date":"2018-07-30T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623022","bugzilla_description":"CVE-2018-15857 libxkbcommon: Invalid free in ExprAppendMultiKeysymList resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14348","severity":"moderate","public_date":"2018-07-25T00:00:00Z","advisories":["RHSA-2019:2047"],"bugzilla":"1611119","bugzilla_description":"CVE-2018-14348 libcgroup: cgrulesengd creates log files with insecure permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libcgroup-0:0.41-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14348.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-15858","severity":"low","public_date":"2018-07-23T00:00:00Z","advisories":[],"bugzilla":"1623024","bugzilla_description":"CVE-2018-15858 libxkbcommon: NULL pointer dereference when handling invalid aliases in CopyKeyAliasesToKeymap resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15858.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8034","severity":"low","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2019:0451","RHSA-2019:0130","RHSA-2019:0131","RHSA-2019:0450","RHSA-2019:2205","RHSA-2019:3892","RHSA-2019:1159","RHSA-2019:1162","RHSA-2019:1529","RHSA-2019:1161","RHSA-2019:1160"],"bugzilla":"1607580","bugzilla_description":"CVE-2018-8034 tomcat: Host name verification missing in WebSocket client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","jbossweb-0:7.5.30-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8034.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-8037","severity":"important","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1607582","bugzilla_description":"CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2018-10894","severity":"moderate","public_date":"2018-07-09T00:00:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2019:0877","RHSA-2018:3595"],"bugzilla":"1599434","bugzilla_description":"CVE-2018-10894 keycloak: auth permitted with expired certs in SAML client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10894.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-8014","severity":"moderate","public_date":"2018-05-17T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2019:0451","RHSA-2019:0450","RHSA-2019:2205","RHSA-2018:3768","RHSA-2018:2469","RHSA-2019:1529"],"bugzilla":"1579611","bugzilla_description":"CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","tomcat8-0:8.0.36-31.ep7.el7","tomcat7-0:7.0.70-27.ep7.el7","tomcat7-0:7.0.70-27.ep7.el6","tomcat8-0:8.0.36-31.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2018-11237","severity":"moderate","public_date":"2018-05-17T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1581274","bugzilla_description":"CVE-2018-11237 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11237.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-1313","severity":"important","public_date":"2018-05-05T00:00:00Z","advisories":[],"bugzilla":"1575639","bugzilla_description":"CVE-2018-1313 derby: Externally-controlled input vulnerability allows remote attacker to boot a database under attacker's control","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1313.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-1102","severity":"critical","public_date":"2018-04-27T00:00:00Z","advisories":["RHSA-2018:1239","RHSA-2018:1229","RHSA-2018:1237","RHSA-2018:1227","RHSA-2019:0036","RHSA-2018:1235","RHSA-2018:1233","RHSA-2018:1231","RHSA-2018:1243","RHSA-2018:1241"],"bugzilla":"1562246","bugzilla_description":"CVE-2018-1102 source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.3.1.46.39-2.git.3.cc57f5b.el7","atomic-openshift-0:3.9.25-1.git.0.6bc473e.el7","atomic-openshift-0:3.1.1.11-4.git.3.12809c8.el7","source-to-image-0:1.1.13-1.el7","atomic-openshift-0:3.2.1.34-2.git.3.aad33c3.el7","atomic-openshift-0:3.7.44-1.git.0.6b061d4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.9"},{"CVE":"CVE-2018-15856","severity":"low","public_date":"2018-03-12T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623018","bugzilla_description":"CVE-2018-15856 libxkbcommon: Infinite loop when reaching EOL unexpectedly resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15856.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15855","severity":"low","public_date":"2018-03-11T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623013","bugzilla_description":"CVE-2018-15855 libxkbcommon: NULL pointer dereference when handling xkb_geometry","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15855.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15853","severity":"low","public_date":"2018-03-10T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623009","bugzilla_description":"CVE-2018-15853 libxkbcommon: Endless recursion in xkbcomp/expr.c resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15853.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15854","severity":"low","public_date":"2018-03-10T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623012","bugzilla_description":"CVE-2018-15854 libxkbcommon: NULL pointer dereference resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15854.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7485","severity":"moderate","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2019:2336"],"bugzilla":"1549636","bugzilla_description":"CVE-2018-7485 unixODBC: Insecure buffer copy in SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["unixODBC-0:2.3.1-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2017-18198","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:3246"],"bugzilla":"1549644","bugzilla_description":"CVE-2017-18198 libcdio: Heap-based buffer over-read in print_iso9660_recurse function in iso-info.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libcdio-0:0.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2017-18199","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:3246"],"bugzilla":"1549701","bugzilla_description":"CVE-2017-18199 libcdio: NULL pointer dereference in realloc_symlink in rock.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libcdio-0:0.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2017-18201","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:3246"],"bugzilla":"1549707","bugzilla_description":"CVE-2017-18201 libcdio: Double free in get_cdtext_generic() in lib/driver/_cdio_generic.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libcdio-0:0.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18201.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-11236","severity":"moderate","public_date":"2018-02-04T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1581269","bugzilla_description":"CVE-2018-11236 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-121","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-6551","severity":"moderate","public_date":"2018-02-02T00:00:00Z","advisories":[],"bugzilla":"1542119","bugzilla_description":"CVE-2018-6551 glibc: integer overflow in malloc functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6551.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000001","severity":"important","public_date":"2018-01-11T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1533836","bugzilla_description":"CVE-2018-1000001 glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000001.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-7409","severity":"moderate","public_date":"2018-01-02T00:00:00Z","advisories":["RHSA-2019:2336"],"bugzilla":"1548305","bugzilla_description":"CVE-2018-7409 unixODBC: Buffer overflow in unicode_to_ansi_copy() can lead to crash or other unspecified impact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["unixODBC-0:2.3.1-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7409.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-18269","severity":"moderate","public_date":"2017-12-24T00:00:00Z","advisories":[],"bugzilla":"1580924","bugzilla_description":"CVE-2017-18269 glibc: memory corruption in memcpy-sse2-unaligned.S","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18269.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-16997","severity":"moderate","public_date":"2017-12-17T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1526865","bugzilla_description":"CVE-2017-16997 glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-470","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16997.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-1000408","severity":"low","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1522828","bugzilla_description":"CVE-2017-1000408 glibc: Memory leak reachable via LD_HWCAP_MASK","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000408.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000409","severity":"moderate","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1522830","bugzilla_description":"CVE-2017-1000409 glibc: Buffer overflow triggerable via LD_LIBRARY_PATH","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000409.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-17426","severity":"moderate","public_date":"2017-10-31T00:00:00Z","advisories":[],"bugzilla":"1524530","bugzilla_description":"CVE-2017-17426 glibc: Integer overflow with enabled tcache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17426.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-15859","severity":"low","public_date":"2017-10-30T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623026","bugzilla_description":"CVE-2018-15859 libxkbcommon: NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15859.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15804","severity":"moderate","public_date":"2017-10-21T00:00:00Z","advisories":["RHSA-2018:1879","RHSA-2018:0805"],"bugzilla":"1505298","bugzilla_description":"CVE-2017-15804 glibc: Buffer overflow during unescaping of user names with the ~ operator","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7","glibc-0:2.12-1.212.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-15671","severity":"low","public_date":"2017-10-20T00:00:00Z","advisories":[],"bugzilla":"1504806","bugzilla_description":"CVE-2017-15671 glibc: Memory leak in glob with GLOB_TILDE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15671.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15670","severity":"moderate","public_date":"2017-10-19T00:00:00Z","advisories":["RHSA-2018:1879","RHSA-2018:0805"],"bugzilla":"1504804","bugzilla_description":"CVE-2017-15670 glibc: Buffer overflow in glob with GLOB_TILDE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7","glibc-0:2.12-1.212.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15670.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-12159","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1484111","bugzilla_description":"CVE-2017-12159 keycloak: CSRF token fixation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-12160","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1484154","bugzilla_description":"CVE-2017-12160 keycloak: resource privilege extension via access token in oauth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-12158","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1489161","bugzilla_description":"CVE-2017-12158 keycloak: reflected XSS using HOST header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-12197","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1503103","bugzilla_description":"CVE-2017-12197 libpam4j: Account check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-6485","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1542102","bugzilla_description":"CVE-2018-6485 glibc: Integer overflow in posix_memalign in memalign functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6485.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-15861","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623028","bugzilla_description":"CVE-2018-15861 libxkbcommon: NULL pointer dereference in ExprResolveLhs resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15861.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15862","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623029","bugzilla_description":"CVE-2018-15862 libxkbcommon: NULL pointer dereference in LookupModMask resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15863","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623030","bugzilla_description":"CVE-2018-15863 libxkbcommon: NULL pointer dereference in ResolveStateAndPredicate resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15863.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15864","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623033","bugzilla_description":"CVE-2018-15864 libxkbcommon: NULL pointer dereference in resolve_keysym resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000366","severity":"important","public_date":"2017-06-19T00:00:00Z","advisories":["RHSA-2017:1567","RHSA-2017:1479","RHSA-2017:1480","RHSA-2017:1481"],"bugzilla":"1452543","bugzilla_description":"CVE-2017-1000366 glibc: heap/stack gap jumping via unbounded stack allocations","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6_9.2","glibc-0:2.5-123.el5_11.4","glibc-0:2.17-157.el7_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000366.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2014-9984","severity":"critical","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1463288","bugzilla_description":"CVE-2014-9984 glibc: nscd buffer manipulation vulnerability could lead to code execution or crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9984.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-8834","severity":"low","public_date":"2017-06-07T00:00:00Z","advisories":[],"bugzilla":"1463306","bugzilla_description":"CVE-2017-8834 libcroco: Memory allocation failure in the cr_tknzr_parse_comment function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8834.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8871","severity":"low","public_date":"2017-06-07T00:00:00Z","advisories":[],"bugzilla":"1463307","bugzilla_description":"CVE-2017-8871 libcroco: Infinite loop in the cr_parser_parse_selector_core function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8871.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8804","severity":"moderate","public_date":"2017-05-08T00:00:00Z","advisories":[],"bugzilla":"1448794","bugzilla_description":"CVE-2017-8804 glibc: memory leak in sunrpc when decoding malformed XDR","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7960","severity":"low","public_date":"2017-04-16T00:00:00Z","advisories":[],"bugzilla":"1445314","bugzilla_description":"CVE-2017-7960 libcroco: Out-of-bounds read due to missing index check in cr-input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7960.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7961","severity":"low","public_date":"2017-04-16T00:00:00Z","advisories":[],"bugzilla":"1450068","bugzilla_description":"CVE-2017-7961 libcroco: Undefined behavior issue in cr_tknzr_parse_rgb function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7961.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12132","severity":"low","public_date":"2017-04-07T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1477529","bugzilla_description":"CVE-2017-12132 glibc: Fragmentation attacks possible when EDNS0 is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12132.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.0"},{"CVE":"CVE-2014-9970","severity":"moderate","public_date":"2017-02-20T00:00:00Z","advisories":["RHSA-2017:2547","RHSA-2017:2811","RHSA-2017:2546","RHSA-2017:2810","RHSA-2017:2904","RHSA-2017:3141","RHSA-2017:2808","RHSA-2017:2809","RHSA-2017:2905","RHSA-2017:2906","RHSA-2018:0294"],"bugzilla":"1455566","bugzilla_description":"CVE-2014-9970 jasypt: Vulnerable to timing attack against the password hash comparison","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6","rhvm-appliance-0:20171102.0-1","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9970.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2017-12133","severity":"low","public_date":"2017-02-08T00:00:00Z","advisories":[],"bugzilla":"1478288","bugzilla_description":"CVE-2017-12133 glibc: Use-after-free read access in clntudp_call in sunrpc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12133.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-2614","severity":"important","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:0257"],"bugzilla":"1417702","bugzilla_description":"CVE-2017-2614 rhev-m-4: Fails to validate existing expired passwords when changing a password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ovirt-engine-extension-aaa-jdbc-0:1.1.3-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2614.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.8"},{"CVE":"CVE-2016-10228","severity":"low","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1428290","bugzilla_description":"CVE-2016-10228 glibc: iconv program can hang when invoked with the -c option","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10228.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8610","severity":"moderate","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:0286","RHSA-2017:0574"],"bugzilla":"1384743","bugzilla_description":"CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","openssl-0:1.0.1e-48.el6_8.4","gnutls-0:2.12.23-21.el6","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6304","severity":"important","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2016:2802","RHSA-2017:2493","RHSA-2017:2494","RHSA-2016:1940"],"bugzilla":"1377600","bugzilla_description":"CVE-2016-6304 openssl: OCSP Status Request extension unbounded memory growth","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-0:1.0.1e-16.el6_5.17","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-42.el6_7.6","openssl-0:1.0.1e-48.el6_8.3","openssl-0:1.0.0-27.el6_4.6","openssl-0:1.0.1e-30.el6_6.13","openssl-0:1.0.0-20.el6_2.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6323","severity":"low","public_date":"2016-08-04T00:00:00Z","advisories":[],"bugzilla":"1383297","bugzilla_description":"CVE-2016-6323 glibc: Missing unwind info in __startcontext causes infinite loop in _Unwind_Backtrace","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5417","severity":"low","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1362534","bugzilla_description":"CVE-2016-5417 glibc: per-thread memory leak in __res_vinit with IPv6 nameservers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5417.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-5387","severity":"important","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1650","RHSA-2016:1420","RHSA-2016:1421","RHSA-2016:1624","RHSA-2016:1635","RHSA-2016:1625","RHSA-2016:1636","RHSA-2016:1648","RHSA-2016:1649","RHSA-2016:1851","RHSA-2016:1422"],"bugzilla":"1353755","bugzilla_description":"CVE-2016-5387 Apache HTTPD: sets environmental variable based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd-0:2.2.26-54.ep6.el6","httpd24-httpd-0:2.4.18-11.el6","httpd24-httpd-0:2.4.18-11.el7","httpd-0:2.4.6-40.el7_2.4","httpd-0:2.2.3-92.el5_11","jbcs-httpd24-httpd-0:2.4.6-77.SP1.jbcs.el7","jbcs-httpd24-httpd-0:2.4.6-77.SP1.jbcs.el6","httpd-0:2.2.15-54.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-4979","severity":"moderate","public_date":"2016-07-05T00:00:00Z","advisories":["RHSA-2016:1420"],"bugzilla":"1352476","bugzilla_description":"CVE-2016-4979 httpd: X509 client certificate authentication bypass using HTTP/2","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["httpd24-httpd-0:2.4.18-11.el6","httpd24-httpd-0:2.4.18-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4979.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2016-2178","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1343400","bugzilla_description":"CVE-2016-2178 openssl: Non-constant time codepath followed for certain operations in DSA implementation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2178.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2016-4429","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1337136","bugzilla_description":"CVE-2016-4429 glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4429.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-2177","severity":"low","public_date":"2016-05-05T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1341705","bugzilla_description":"CVE-2016-2177 openssl: Possible integer overflow vulnerabilities in codebase","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2177.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-10739","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":["RHSA-2019:3513","RHSA-2019:2118","RHBA-2019:3303"],"bugzilla":"1347549","bugzilla_description":"CVE-2016-10739 glibc: getaddrinfo should reject IP addresses with trailing characters","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","glibc-0:2.17-292.el7","glibc-0:2.28-72.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10739.json"},{"CVE":"CVE-2016-3706","severity":"low","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1330887","bugzilla_description":"CVE-2016-3706 glibc: stack (frame) overflow in getaddrinfo() when called with AF_INET, AF_INET6 (incomplete fix for CVE-2013-4458)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3706.json"},{"CVE":"CVE-2016-3075","severity":"low","public_date":"2016-03-29T00:00:00Z","advisories":["RHSA-2016:2573"],"bugzilla":"1321866","bugzilla_description":"CVE-2016-3075 glibc: Stack overflow in nss_dns_getnetbyname_r","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:P/I:P/A:C","CWE":"CWE-121","affected_packages":["glibc-0:2.17-157.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-1234","severity":"moderate","public_date":"2016-03-07T00:00:00Z","advisories":[],"bugzilla":"1315647","bugzilla_description":"CVE-2016-1234 glibc: Stack-based buffer overflow in glob with GLOB_ALTDIRFUNC and crafted directory","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1234.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2015-7547","severity":"critical","public_date":"2016-02-16T00:00:00Z","advisories":["RHSA-2016:0175","RHSA-2016:0176","RHSA-2016:0277","RHSA-2016:0225"],"bugzilla":"1293532","bugzilla_description":"CVE-2015-7547 glibc: getaddrinfo stack-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.12-1.132.el6_5.7","glibc-0:2.12-1.107.el6_4.9","glibc-0:2.12-1.149.el6_6.11","glibc-0:2.17-79.ael7b_1.4","glibc-0:2.12-1.166.el6_7.7","glibc-0:2.12-1.47.el6_2.17","rhev-hypervisor7-0:7.2-20160105.2.el7ev","glibc-0:2.17-106.el7_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7547.json"},{"CVE":"CVE-2015-7528","severity":"moderate","public_date":"2015-11-27T00:00:00Z","advisories":["RHSA-2015:2544","RHSA-2015:2615"],"bugzilla":"1286745","bugzilla_description":"CVE-2015-7528 OpenShift: pod log location must validate container if provided","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":["openshift-0:3.0.2.0-0.git.38.7576bc5.el7ose","atomic-openshift-0:3.1.0.4-1.git.15.5e061c3.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7528.json"},{"CVE":"CVE-2015-8776","severity":"moderate","public_date":"2015-09-20T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300299","bugzilla_description":"CVE-2015-8776 glibc: Segmentation fault caused by passing out-of-range data to strftime()","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2015-5277","severity":"important","public_date":"2015-09-14T00:00:00Z","advisories":["RHSA-2015:2172","RHSA-2015:2589"],"bugzilla":"1262914","bugzilla_description":"CVE-2015-5277 glibc: data corruption while reading the NSS files database","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["glibc-0:2.17-106.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5277.json"},{"CVE":"CVE-2015-8777","severity":"low","public_date":"2015-09-05T00:00:00Z","advisories":["RHSA-2017:1916"],"bugzilla":"1260581","bugzilla_description":"CVE-2015-8777 glibc: LD_POINTER_GUARD in the environment is not sanitized","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8777.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-5229","severity":"low","public_date":"2015-08-21T00:00:00Z","advisories":["RHSA-2016:0176","RHBA-2015:1465"],"bugzilla":"1256285","bugzilla_description":"CVE-2015-5229 glibc: calloc may return non-zero memory","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.166.el6_7.1","glibc-0:2.17-106.el7_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5229.json"},{"CVE":"CVE-2015-5180","severity":"low","public_date":"2015-08-07T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1249603","bugzilla_description":"CVE-2015-5180 glibc: DNS resolver NULL pointer dereference with crafted record type","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5180.json"},{"CVE":"CVE-2015-1781","severity":"moderate","public_date":"2015-04-21T00:00:00Z","advisories":["RHSA-2015:0863","RHSA-2015:2199","RHSA-2015:2589"],"bugzilla":"1199525","bugzilla_description":"CVE-2015-1781 glibc: buffer overflow in gethostbyname_r() and related functions with misaligned buffer","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-131->CWE-119","affected_packages":["glibc-0:2.12-1.149.el6_6.7","glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1781.json"},{"CVE":"CVE-2015-8778","severity":"moderate","public_date":"2015-04-10T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300303","bugzilla_description":"CVE-2015-8778 glibc: Integer overflow in hcreate and hcreate_r","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2015-8985","severity":"low","public_date":"2015-02-28T00:00:00Z","advisories":[],"bugzilla":"1197798","bugzilla_description":"CVE-2015-8985 glibc: potential denial of service in pop_fail_stack()","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8985.json"},{"CVE":"CVE-2015-0886","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1197815","bugzilla_description":"CVE-2015-0886 jBCrypt: integer overflow in the crypt_raw method","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0886.json"},{"CVE":"CVE-2015-8984","severity":"low","public_date":"2015-02-26T00:00:00Z","advisories":[],"bugzilla":"1197730","bugzilla_description":"CVE-2015-8984 glibc: potential denial of service in internal_fnmatch()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8984.json"},{"CVE":"CVE-2014-8121","severity":"low","public_date":"2015-02-23T00:00:00Z","advisories":["RHSA-2015:0327"],"bugzilla":"1165192","bugzilla_description":"CVE-2014-8121 glibc: Unexpected closing of nss_files databases after lookups causes denial of service","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["glibc-0:2.17-78.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8121.json"},{"CVE":"CVE-2015-8983","severity":"moderate","public_date":"2015-02-22T00:00:00Z","advisories":[],"bugzilla":"1195762","bugzilla_description":"CVE-2015-8983 glibc: _IO_wstr_overflow integer overflow","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8983.json"},{"CVE":"CVE-2015-8982","severity":"low","public_date":"2015-02-13T00:00:00Z","advisories":[],"bugzilla":"1192525","bugzilla_description":"CVE-2015-8982 glibc: multiple overflows in strxfrm()","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8982.json"},{"CVE":"CVE-2015-8779","severity":"moderate","public_date":"2015-01-29T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300312","bugzilla_description":"CVE-2015-8779 glibc: Unbounded stack allocation in catopen function","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8779.json"},{"CVE":"CVE-2015-0235","severity":"critical","public_date":"2015-01-27T00:00:00Z","advisories":["RHSA-2015:0092","RHSA-2015:0090","RHSA-2015:0126","RHSA-2015:0101","RHSA-2015:0099"],"bugzilla":"1183461","bugzilla_description":"CVE-2015-0235 glibc: __nss_hostname_digits_dots() heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-131->CWE-122","affected_packages":["glibc-0:2.5-123.el5_11.1","glibc-0:2.5-58.el5_6.6","rhev-hypervisor6-0:6.6-20150123.1.el6ev","glibc-0:2.12-1.47.el6_2.15","glibc-0:2.12-1.107.el6_4.7","glibc-0:2.12-1.149.el6_6.5","glibc-0:2.12-1.132.el6_5.5","glibc-0:2.3.4-2.57.el4.2","glibc-0:2.17-55.el7_0.5","glibc-0:2.5-107.el5_9.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0235.json"},{"CVE":"CVE-2013-7424","severity":"moderate","public_date":"2015-01-27T00:00:00Z","advisories":["RHSA-2014:1391","RHSA-2015:1627"],"bugzilla":"1186614","bugzilla_description":"CVE-2013-7424 glibc: Invalid-free when using getaddrinfo()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-123.el5_11.3","glibc-0:2.12-1.149.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7424.json"},{"CVE":"CVE-2014-7817","severity":"moderate","public_date":"2014-11-20T00:00:00Z","advisories":["RHSA-2015:0016","RHSA-2014:2023"],"bugzilla":"1157689","bugzilla_description":"CVE-2014-7817 glibc: command execution in wordexp() with WRDE_NOCMD specified","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-440","affected_packages":["glibc-0:2.12-1.149.el6_6.4","glibc-0:2.17-55.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7817.json"},{"CVE":"CVE-2014-9402","severity":"low","public_date":"2014-11-20T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1175369","bugzilla_description":"CVE-2014-9402 glibc: denial of service in getnetbyname function","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9402.json"},{"CVE":"CVE-2014-6040","severity":"moderate","public_date":"2014-08-28T00:00:00Z","advisories":["RHSA-2015:0327","RHSA-2015:0016"],"bugzilla":"1135841","bugzilla_description":"CVE-2014-6040 glibc: crash in code page decoding functions (IBM933, IBM935, IBM937, IBM939, IBM1364)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":["glibc-0:2.17-78.el7","glibc-0:2.12-1.149.el6_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6040.json"},{"CVE":"CVE-2014-5119","severity":"important","public_date":"2014-07-14T00:00:00Z","advisories":["RHSA-2014:1118","RHSA-2014:1110"],"bugzilla":"1119128","bugzilla_description":"CVE-2014-5119 glibc: off-by-one error leading to a heap-based buffer overflow flaw in __gconv_translit_find()","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-193->CWE-626->CWE-122","affected_packages":["glibc-0:2.17-55.el7_0.1","glibc-0:2.12-1.132.el6_5.4","glibc-0:2.5-118.el5_10.3","glibc-0:2.5-107.el5_9.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5119.json"},{"CVE":"CVE-2014-0475","severity":"moderate","public_date":"2014-07-09T00:00:00Z","advisories":["RHSA-2014:1110"],"bugzilla":"1102353","bugzilla_description":"CVE-2014-0475 glibc: directory traversal in LC_* locale handling","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-22","affected_packages":["glibc-0:2.17-55.el7_0.1","glibc-0:2.12-1.132.el6_5.4","glibc-0:2.5-118.el5_10.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0475.json"},{"CVE":"CVE-2014-4043","severity":"low","public_date":"2014-06-11T00:00:00Z","advisories":[],"bugzilla":"1109263","bugzilla_description":"CVE-2014-4043 glibc: posix_spawn_file_actions_addopen fails to copy the path argument","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4043.json"},{"CVE":"CVE-2014-9761","severity":"moderate","public_date":"2014-05-19T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300310","bugzilla_description":"CVE-2014-9761 glibc: Unbounded stack allocation in nan* functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9761.json"},{"CVE":"CVE-2015-1472","severity":"low","public_date":"2014-02-21T00:00:00Z","advisories":["RHSA-2015:2199","RHSA-2015:2589"],"bugzilla":"1188235","bugzilla_description":"CVE-2015-1472 glibc: heap buffer overflow in glibc swscanf","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-122","affected_packages":["glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1472.json"},{"CVE":"CVE-2015-1473","severity":"low","public_date":"2014-02-21T00:00:00Z","advisories":["RHSA-2015:2199","RHSA-2015:2589"],"bugzilla":"1209105","bugzilla_description":"CVE-2015-1473 glibc: Stack-overflow in glibc swscanf","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1473.json"},{"CVE":"CVE-2013-7172","severity":"moderate","public_date":"2013-12-17T00:00:00Z","advisories":[],"bugzilla":"1044846","bugzilla_description":"CVE-2013-7172 libiodbc: insecure RPATH in certain binaries","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7172.json"},{"CVE":"CVE-2013-4458","severity":"low","public_date":"2013-10-22T00:00:00Z","advisories":["RHSA-2014:1391"],"bugzilla":"1022280","bugzilla_description":"CVE-2013-4458 glibc: Stack (frame) overflow in getaddrinfo() when called with AF_INET6","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.12-1.149.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4458.json"},{"CVE":"CVE-2013-7423","severity":"moderate","public_date":"2013-09-12T00:00:00Z","advisories":["RHSA-2015:0863","RHSA-2015:2199","RHSA-2016:1207","RHSA-2015:2589"],"bugzilla":"1187109","bugzilla_description":"CVE-2013-7423 glibc: getaddrinfo() writes DNS queries to random file descriptors under high load","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-362->CWE-201","affected_packages":["glibc-0:2.12-1.132.el6_5.8","glibc-0:2.12-1.149.el6_6.7","glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7423.json"},{"CVE":"CVE-2013-4332","severity":"moderate","public_date":"2013-08-20T00:00:00Z","advisories":["RHSA-2013:1605","RHSA-2013:1411"],"bugzilla":"1007545","bugzilla_description":"CVE-2013-4332 glibc: three integer overflows in memory allocator","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.5-118.el5_10.2","glibc-0:2.12-1.132.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4332.json"},{"CVE":"CVE-2013-4237","severity":"moderate","public_date":"2013-08-11T00:00:00Z","advisories":["RHSA-2014:1391"],"bugzilla":"995839","bugzilla_description":"CVE-2013-4237 glibc: Buffer overwrite when using readdir_r on file systems returning file names longer than NAME_MAX characters","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["glibc-0:2.12-1.149.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4237.json"},{"CVE":"CVE-2013-2207","severity":"moderate","public_date":"2013-07-16T00:00:00Z","advisories":[],"bugzilla":"976408","bugzilla_description":"CVE-2013-2207 glibc (pt_chown): Improper pseudotty ownership and permissions changes when granting access to the slave pseudoterminal","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2207.json"},{"CVE":"CVE-2013-4788","severity":"low","public_date":"2013-07-15T00:00:00Z","advisories":[],"bugzilla":"985625","bugzilla_description":"CVE-2013-4788 glibc: PTR_MANGLE does not initialize to a random value for the pointer guard when compiling static executables","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4788.json"},{"CVE":"CVE-2013-1914","severity":"low","public_date":"2013-04-03T00:00:00Z","advisories":["RHSA-2013:1605","RHSA-2013:0769"],"bugzilla":"947882","bugzilla_description":"CVE-2013-1914 glibc: Stack (frame) overflow in getaddrinfo() when processing entry mapping to long list of address structures","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.132.el6","glibc-0:2.5-107.el5_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1914.json"},{"CVE":"CVE-2013-0242","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":["RHSA-2013:1605","RHSA-2013:0769"],"bugzilla":"905874","bugzilla_description":"CVE-2013-0242 glibc: Buffer overrun (DoS) in regexp matcher by processing multibyte characters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.132.el6","glibc-0:2.5-107.el5_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0242.json"},{"CVE":"CVE-2014-3215","severity":"important","public_date":"2012-12-08T00:00:00Z","advisories":["RHSA-2015:0864","RHBA-2015:2161"],"bugzilla":"1095855","bugzilla_description":"CVE-2014-3215 policycoreutils: local privilege escalation via seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-270","affected_packages":["kernel-0:2.6.32-504.16.2.el6","libcap-ng-0:0.7.5-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3215.json"},{"CVE":"CVE-2012-4424","severity":"moderate","public_date":"2012-09-06T00:00:00Z","advisories":[],"bugzilla":"858238","bugzilla_description":"CVE-2012-4424 glibc: alloca() stack overflow in the strcoll() interface","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4424.json"},{"CVE":"CVE-2012-4412","severity":"moderate","public_date":"2012-09-05T00:00:00Z","advisories":[],"bugzilla":"855385","bugzilla_description":"CVE-2012-4412 glibc: strcoll() integer overflow leading to buffer overflow","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4412.json"},{"CVE":"CVE-2012-3480","severity":"moderate","public_date":"2012-08-12T00:00:00Z","advisories":["RHSA-2012:1207","RHSA-2012:1208","RHSA-2012:1262","RHSA-2012:1325"],"bugzilla":"847715","bugzilla_description":"CVE-2012-3480 glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-121","affected_packages":["glibc-0:2.12-1.80.el6_3.5","rhev-hypervisor6-0:6.3-20120926.0.el6_3","glibc-0:2.5-81.el5_8.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3480.json"},{"CVE":"CVE-2012-3406","severity":"moderate","public_date":"2012-07-11T00:00:00Z","advisories":["RHSA-2012:1098","RHSA-2012:1097","RHSA-2012:1185","RHSA-2012:1200"],"bugzilla":"826943","bugzilla_description":"CVE-2012-3406 glibc: printf() unbound alloca() usage in case of positional parameters + many format specs","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.3-20120815.0.el6_3","glibc-0:2.12-1.80.el6_3.3","glibc-0:2.5-81.el5_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3406.json"},{"CVE":"CVE-2012-3404","severity":"moderate","public_date":"2012-07-11T00:00:00Z","advisories":["RHSA-2012:1098","RHSA-2012:1200"],"bugzilla":"833703","bugzilla_description":"CVE-2012-3404 glibc: incorrect size calculation in formatted printing can lead to FORTIFY_SOURCE format string protection bypass","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.3-20120815.0.el6_3","glibc-0:2.12-1.80.el6_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3404.json"},{"CVE":"CVE-2012-3405","severity":"moderate","public_date":"2012-07-11T00:00:00Z","advisories":["RHSA-2012:1098","RHSA-2012:1200"],"bugzilla":"833704","bugzilla_description":"CVE-2012-3405 glibc: incorrect use of extend_alloca() in formatted printing can lead to FORTIFY_SOURCE format string protection bypass","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.3-20120815.0.el6_3","glibc-0:2.12-1.80.el6_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3405.json"},{"CVE":"CVE-2012-2657","severity":"low","public_date":"2012-05-29T00:00:00Z","advisories":[],"bugzilla":"826262","bugzilla_description":"CVE-2012-2657 unixodbc: buffer overflow due to improper checking of FILESDN= input","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2657.json"},{"CVE":"CVE-2012-2658","severity":"low","public_date":"2012-05-29T00:00:00Z","advisories":[],"bugzilla":"826263","bugzilla_description":"CVE-2012-2658 unixodbc: buffer overflow due to improper checking of DRIVER= input","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2658.json"},{"CVE":"CVE-2012-6656","severity":"moderate","public_date":"2012-05-23T00:00:00Z","advisories":[],"bugzilla":"1135840","bugzilla_description":"CVE-2012-6656 glibc: crash in IBM930 decoding","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6656.json"},{"CVE":"CVE-2012-1618","severity":null,"public_date":"2012-03-25T00:00:00Z","advisories":[],"bugzilla":"807394","bugzilla_description":"CVE-2012-1618 postgresql-jdbc: SQL injection due improper escaping of JDBC statement parameters","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1618.json"},{"CVE":"CVE-2011-4099","severity":"low","public_date":"2011-07-16T00:00:00Z","advisories":["RHSA-2011:1694"],"bugzilla":"722694","bugzilla_description":"CVE-2011-4099 capsh: does not chdir after chroot","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["libcap-0:2.16-5.5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4099.json"},{"CVE":"CVE-2011-4609","severity":"low","public_date":"2011-05-05T00:00:00Z","advisories":["RHSA-2012:0058","RHSA-2012:0125","RHSA-2012:0126"],"bugzilla":"767299","bugzilla_description":"CVE-2011-4609 glibc: svc_run() produces high cpu usage when accept() fails with EMFILE error","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.47.el6_2.5","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4609.json"},{"CVE":"CVE-2012-6686","severity":"moderate","public_date":"2011-04-13T00:00:00Z","advisories":["RHBA-2013:0022","RHBA-2012:0763"],"bugzilla":"1009643","bugzilla_description":"CVE-2012-6686 CVE-2013-4357 glibc: stack overflow in getaddrinfo()'s use of alloca()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.5-107","glibc-0:2.12-1.80.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6686.json"},{"CVE":"CVE-2013-4357","severity":"moderate","public_date":"2011-04-13T00:00:00Z","advisories":[],"bugzilla":"1009643","bugzilla_description":"CVE-2012-6686 CVE-2013-4357 glibc: stack overflow in getaddrinfo()'s use of alloca()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4357.json"},{"CVE":"CVE-2011-1145","severity":"low","public_date":"2011-03-09T00:00:00Z","advisories":[],"bugzilla":"684036","bugzilla_description":"CVE-2011-1145 unixODBC: possible buffer overrun in SQLDriverConnect()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1145.json"},{"CVE":"CVE-2011-1006","severity":"important","public_date":"2011-03-03T00:00:00Z","advisories":["RHSA-2011:0320"],"bugzilla":"678107","bugzilla_description":"CVE-2011-1006 libcgroup: Heap-based buffer overflow by converting list of controllers for given task into an array of strings","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["libcgroup-0:0.36.1-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1006.json"},{"CVE":"CVE-2011-1089","severity":"low","public_date":"2011-03-03T00:00:00Z","advisories":["RHSA-2012:0125","RHSA-2012:0126","RHSA-2011:1526"],"bugzilla":"688980","bugzilla_description":"CVE-2011-1089 glibc: Suid mount helpers fail to anticipate RLIMIT_FSIZE","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["glibc-0:2.12-1.47.el6","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1089.json"},{"CVE":"CVE-2011-1022","severity":"low","public_date":"2011-02-18T00:00:00Z","advisories":["RHSA-2011:0320"],"bugzilla":"680409","bugzilla_description":"CVE-2011-1022 libcgroup: Uncheck origin of NETLINK messages","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["libcgroup-0:0.36.1-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1022.json"},{"CVE":"CVE-2011-5320","severity":"low","public_date":"2011-01-22T00:00:00Z","advisories":[],"bugzilla":"1196745","bugzilla_description":"CVE-2011-5320 glibc: scanf implementation crashes on certain inputs","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5320.json"},{"CVE":"CVE-2011-1658","severity":"low","public_date":"2011-01-12T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413"],"bugzilla":"694873","bugzilla_description":"CVE-2011-1658 glibc: ld.so insecure handling of privileged programs' RPATHs with $ORIGIN","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1658.json"},{"CVE":"CVE-2011-0536","severity":"important","public_date":"2011-01-11T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413"],"bugzilla":"667974","bugzilla_description":"CVE-2011-0536 glibc: CVE-2010-3847 fix causes linker to search CWD when running privileged program with $ORIGIN in R*PATH","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0536.json"},{"CVE":"CVE-2010-4051","severity":null,"public_date":"2010-12-07T00:00:00Z","advisories":[],"bugzilla":"645859","bugzilla_description":"CVE-2010-4051 CVE-2010-4052 glibc: De-recursivise regular expression engine","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4051.json"},{"CVE":"CVE-2010-4052","severity":null,"public_date":"2010-12-07T00:00:00Z","advisories":[],"bugzilla":"645859","bugzilla_description":"CVE-2010-4051 CVE-2010-4052 glibc: De-recursivise regular expression engine","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4052.json"},{"CVE":"CVE-2012-0864","severity":"moderate","public_date":"2010-11-17T00:00:00Z","advisories":["RHSA-2012:0393","RHSA-2012:0397","RHSA-2012:0531","RHSA-2012:0488"],"bugzilla":"794766","bugzilla_description":"CVE-2012-0864 glibc: FORTIFY_SOURCE format string protection bypass via \"nargs\" integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.12-1.47.el6_2.9","rhev-hypervisor6-0:6.2-20120423.1.el6_2","glibc-0:2.5-81.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0864.json"},{"CVE":"CVE-2010-3856","severity":"important","public_date":"2010-10-22T00:00:00Z","advisories":["RHSA-2010:0872","RHSA-2010:0793"],"bugzilla":"645672","bugzilla_description":"CVE-2010-3856 glibc: ld.so arbitrary DSO loading via LD_AUDIT in setuid/setgid programs","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["glibc-0:2.12-1.7.el6_0.3","glibc-0:2.5-49.el5_5.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3856.json"},{"CVE":"CVE-2010-3847","severity":"important","public_date":"2010-10-18T00:00:00Z","advisories":["RHSA-2010:0787","RHSA-2010:0872"],"bugzilla":"643306","bugzilla_description":"CVE-2010-3847 glibc: ld.so insecure handling of $ORIGIN in LD_AUDIT for setuid/setgid programs","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["glibc-0:2.12-1.7.el6_0.3","glibc-0:2.5-49.el5_5.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3847.json"},{"CVE":"CVE-2010-4756","severity":"low","public_date":"2010-10-07T00:00:00Z","advisories":[],"bugzilla":"681681","bugzilla_description":"CVE-2010-4756 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4756.json"},{"CVE":"CVE-2011-1095","severity":"low","public_date":"2010-08-11T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413","RHSA-2012:0125"],"bugzilla":"625893","bugzilla_description":"CVE-2011-1095 glibc: insufficient quoting in the locale command output","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1095.json"},{"CVE":"CVE-2011-1071","severity":"low","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413","RHSA-2012:0125"],"bugzilla":"681054","bugzilla_description":"CVE-2011-1071 CVE-2011-1659 glibc: fnmatch() alloca()-based memory corruption flaw","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1071.json"},{"CVE":"CVE-2011-1659","severity":"low","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413","RHSA-2012:0125"],"bugzilla":"681054","bugzilla_description":"CVE-2011-1071 CVE-2011-1659 glibc: fnmatch() alloca()-based memory corruption flaw","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1659.json"},{"CVE":"CVE-2010-0296","severity":"low","public_date":"2010-05-25T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2012:0125"],"bugzilla":"559579","bugzilla_description":"CVE-2010-0296 glibc: Improper encoding of names with certain special character in utilities for writing to mtab table","cvss_score":4.3,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0296.json"},{"CVE":"CVE-2010-0830","severity":"low","public_date":"2010-05-25T00:00:00Z","advisories":["RHSA-2012:0125","RHSA-2012:0126"],"bugzilla":"599056","bugzilla_description":"CVE-2010-0830 glibc: ld.so d_tag signedness error in elf_get_dynamic_info","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0830.json"},{"CVE":"CVE-2010-0015","severity":"low","public_date":"2009-12-10T00:00:00Z","advisories":[],"bugzilla":"555573","bugzilla_description":"CVE-2010-0015 glibc NIS password hash disclosure","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0015.json"},{"CVE":"CVE-2009-3736","severity":"moderate","public_date":"2009-11-16T00:00:00Z","advisories":["RHSA-2009:1646","RHSA-2010:0039"],"bugzilla":"537941","bugzilla_description":"CVE-2009-3736 libtool: libltdl may load and execute code from a library in the current directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libtool-0:1.5.6-5.el4_8","gcc-0:4.1.2-46.el5_4.2","libtool-0:1.4.3-7","gcc-0:3.2.3-60","gcc-0:3.4.6-11.el4_8.1","libtool-0:1.5.22-7.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3736.json"},{"CVE":"CVE-2009-5064","severity":"low","public_date":"2009-10-26T00:00:00Z","advisories":["RHSA-2012:0125","RHSA-2012:0126","RHSA-2011:1526"],"bugzilla":"692393","bugzilla_description":"CVE-2009-5064 glibc: ldd unexpected code execution issue","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.47.el6","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5064.json"},{"CVE":"CVE-2009-5029","severity":"moderate","public_date":"2009-06-01T00:00:00Z","advisories":["RHSA-2012:0058","RHSA-2012:0125","RHSA-2012:0126"],"bugzilla":"761245","bugzilla_description":"CVE-2009-5029 glibc: __tzfile_read integer overflow to buffer overflow","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.12-1.47.el6_2.5","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5029.json"},{"CVE":"CVE-2006-7254","severity":"moderate","public_date":"2006-03-31T00:00:00Z","advisories":[],"bugzilla":"1698738","bugzilla_description":"CVE-2006-7254 glibc: Not closing unhadleable client sockets due to nscd daemon leads to DoS.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7254.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2005-2933","severity":"moderate","public_date":"2005-10-04T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2005:850","RHSA-2006:0501","RHSA-2006:0276","RHSA-2005:848"],"bugzilla":"1617767","bugzilla_description":"CVE-2005-2933 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-30.ent","imap-1:2002d-12","libc-client-0:2002e-14","php-0:4.3.9-3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2933.json"},{"CVE":"CVE-2004-0968","severity":"low","public_date":"2004-09-30T00:00:00Z","advisories":["RHSA-2005:261","RHSA-2004:586"],"bugzilla":"1617335","bugzilla_description":"CVE-2004-0968 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.3.2-95.30"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0968.json"},{"CVE":"CVE-2004-1453","severity":"low","public_date":"2004-08-17T00:00:00Z","advisories":["RHSA-2005:256","RHSA-2005:261"],"bugzilla":"1617412","bugzilla_description":"CVE-2004-1453 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.3.2-95.33"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1453.json"},{"CVE":"CVE-2003-0859","severity":"low","public_date":"2003-11-12T00:00:00Z","advisories":["RHSA-2003:334","RHSA-2003:325"],"bugzilla":"1617097","bugzilla_description":"CVE-2003-0859 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.3.2-95.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0859.json"},{"CVE":"CVE-1999-0199","severity":null,"public_date":"1999-11-09T00:00:00Z","advisories":[],"bugzilla":"1885775","bugzilla_description":"CVE-1999-0199 glibc: manual/search.texi lacks a statement about the unspecified tdelete return value upon deletion of a tree's root","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1053","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-1999-0199.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcel-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcel-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcel-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bcel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bea-stax-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bea-stax-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bea-stax-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/beust-jcommander-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/beust-jcommander-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/beust-jcommander-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/beust-jcommander_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/beust-jcommander_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/beust-jcommander_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-chroot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-chroot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-chroot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-dyndb-ldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-dyndb-ldap_security_api_results.json
new file mode 100644
index 0000000..724e4ab
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-dyndb-ldap_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3429","severity":"important","public_date":"2012-08-01T00:00:00Z","advisories":["RHSA-2012:1139"],"bugzilla":"842466","bugzilla_description":"CVE-2012-3429 bind-dyndb-ldap: named DoS via DNS query with $ in name","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-dyndb-ldap-0:1.1.0-0.9.b1.el6_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3429.json"},{"CVE":"CVE-2012-2134","severity":"important","public_date":"2012-04-24T00:00:00Z","advisories":["RHSA-2012:0683"],"bugzilla":"815846","bugzilla_description":"CVE-2012-2134 bind-dyndb-ldap: Bind DoS (named hang) by processing DNS query for zone served by bind-dyndb-ldap","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-dyndb-ldap-0:0.2.0-7.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2134.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-export-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-export-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-export-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-export-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-export-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-export-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-libs-lite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-libs-lite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-libs-lite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-license_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-license_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-license_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-lite-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-lite-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-lite-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-pkcs11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-sdb-chroot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-sdb-chroot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-sdb-chroot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-sdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-sdb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-sdb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind_security_api_results.json
new file mode 100644
index 0000000..59e1e94
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bind_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24750","severity":"important","public_date":"2020-09-18T00:00:00Z","advisories":["RHSA-2020:4173"],"bugzilla":"1882310","bugzilla_description":"CVE-2020-24750 jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-24616","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872707","bugzilla_description":"CVE-2020-24616 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24616.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8620","severity":"moderate","public_date":"2020-08-20T00:00:00Z","advisories":[],"bugzilla":"1869468","bugzilla_description":"CVE-2020-8620 bind: A specially crafted large TCP payload can trigger an assertion failure in tcpdns.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8620.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8621","severity":"moderate","public_date":"2020-08-20T00:00:00Z","advisories":[],"bugzilla":"1869471","bugzilla_description":"CVE-2020-8621 bind: Attempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8621.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8622","severity":"moderate","public_date":"2020-08-20T00:00:00Z","advisories":["RHSA-2020:4183"],"bugzilla":"1869473","bugzilla_description":"CVE-2020-8622 bind: truncated TSIG response can lead to an assertion failure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["bind-32:9.8.2-0.68.rc1.el6_10.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8622.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-8623","severity":"moderate","public_date":"2020-08-20T00:00:00Z","advisories":[],"bugzilla":"1869477","bugzilla_description":"CVE-2020-8623 bind: remotely triggerable assertion failure in pk11.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8623.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8624","severity":"moderate","public_date":"2020-08-20T00:00:00Z","advisories":[],"bugzilla":"1869480","bugzilla_description":"CVE-2020-8624 bind: incorrect enforcement of update-policy rules of type \"subdomain\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8624.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-8618","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1847242","bugzilla_description":"CVE-2020-8618 bind: A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8618.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-8619","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1847244","bugzilla_description":"CVE-2020-8619 bind: asterisk character in an empty non-terminal can cause an assertion failure in rbtdb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14195","severity":"important","public_date":"2020-06-14T00:00:00Z","advisories":["RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848958","bugzilla_description":"CVE-2020-14195 jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14195.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8616","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3379","RHSA-2020:2345","RHSA-2020:3378","RHSA-2020:2344","RHSA-2020:3433","RHSA-2020:3475","RHSA-2020:2383","RHSA-2020:3470","RHSA-2020:3272","RHSA-2020:3471","RHSA-2020:2338","RHSA-2020:2404"],"bugzilla":"1836118","bugzilla_description":"CVE-2020-8616 bind: BIND does not sufficiently limit the number of fetches performed when processing referrals","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["bind-32:9.8.2-0.30.rc1.el6_6.11","bind-32:9.9.4-50.el7_3.4","bind-32:9.9.4-74.el7_6.4","bind-32:9.11.4-26.P2.el8_1.3","bind-32:9.9.4-29.el7_2.9","bind-32:9.8.2-0.68.rc1.el6_10.7","bind-32:9.8.2-0.23.rc1.el6_5.9","bind-32:9.11.4-19.P2.el8_0","bind-32:9.11.4-16.P2.el7_8.6","bind-32:9.11.13-5.el8_2","bind-32:9.9.4-51.el7_4.4","bind-32:9.11.4-9.P2.el7_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8616.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2020-8617","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3379","RHSA-2020:2345","RHSA-2020:2893","RHSA-2020:3378","RHSA-2020:2344","RHSA-2020:3433","RHSA-2020:3475","RHSA-2020:2383","RHSA-2020:3470","RHSA-2020:3471","RHSA-2020:2338","RHSA-2020:2404"],"bugzilla":"1836124","bugzilla_description":"CVE-2020-8617 bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["bind-32:9.8.2-0.30.rc1.el6_6.11","bind-32:9.9.4-50.el7_3.4","bind-32:9.9.4-74.el7_6.4","bind-32:9.11.4-26.P2.el8_1.3","bind-32:9.9.4-29.el7_2.9","bind-32:9.8.2-0.68.rc1.el6_10.7","bind-32:9.8.2-0.23.rc1.el6_5.9","bind-32:9.11.4-19.P2.el8_0","bind-32:9.11.4-16.P2.el7_8.6","bind-32:9.11.13-5.el8_2","bind-32:9.9.4-51.el7_4.4","bind-32:9.11.4-9.P2.el7_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8617.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14060","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848960","bugzilla_description":"CVE-2020-14060 jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14060.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14062","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848962","bugzilla_description":"CVE-2020-14062 jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14062.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14061","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848966","bugzilla_description":"CVE-2020-14061 jackson-databind: serialization in weblogic/oracle-aqjms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14061.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11620","severity":"important","public_date":"2020-04-07T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:3192"],"bugzilla":"1826798","bugzilla_description":"CVE-2020-11620 jackson-databind: Serialization gadgets in commons-jelly:commons-jelly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11620.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11619","severity":"important","public_date":"2020-04-06T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1826805","bugzilla_description":"CVE-2020-11619 jackson-databind: Serialization gadgets in org.springframework:spring-aop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11113","severity":"important","public_date":"2020-03-28T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3817","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821315","bugzilla_description":"CVE-2020-11113 jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11113.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11112","severity":"important","public_date":"2020-03-25T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821311","bugzilla_description":"CVE-2020-11112 jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11112.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11111","severity":"important","public_date":"2020-03-24T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821304","bugzilla_description":"CVE-2020-11111 jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11111.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10968","severity":"important","public_date":"2020-03-22T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819208","bugzilla_description":"CVE-2020-10968 jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10673","severity":"important","public_date":"2020-03-18T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3585","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815470","bugzilla_description":"CVE-2020-10673 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10672","severity":"important","public_date":"2020-03-15T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815495","bugzilla_description":"CVE-2020-10672 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10969","severity":"important","public_date":"2020-03-03T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819212","bugzilla_description":"CVE-2020-10969 jackson-databind: Serialization gadgets in javax.swing.JEditorPane","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10969.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8840","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816330","bugzilla_description":"CVE-2020-8840 jackson-databind: Lacks certain xbean-reflect/JNDI blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9546","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816332","bugzilla_description":"CVE-2020-9546 jackson-databind: Serialization gadgets in shaded-hikari-config","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9546.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9547","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816337","bugzilla_description":"CVE-2020-9547 jackson-databind: Serialization gadgets in ibatis-sqlmap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9547.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9548","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816340","bugzilla_description":"CVE-2020-9548 jackson-databind: Serialization gadgets in anteros-core","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9548.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-25649","severity":"important","public_date":"2020-01-09T00:00:00Z","advisories":["RHSA-2020:4312"],"bugzilla":"1887664","bugzilla_description":"CVE-2020-25649 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25649.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20330","severity":"important","public_date":"2020-01-02T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:0939","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:0951","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1793154","bugzilla_description":"CVE-2019-20330 jackson-databind: lacks certain net.sf.ehcache blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20330.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-6477","severity":"moderate","public_date":"2019-11-20T00:00:00Z","advisories":["RHSA-2020:1845","RHSA-2020:1061"],"bugzilla":"1773617","bugzilla_description":"CVE-2019-6477 bind: TCP Pipelining doesn't limit TCP clients on a single connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["bind-32:9.11.4-16.P2.el7","bind-32:9.11.13-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-6475","severity":"moderate","public_date":"2019-10-16T00:00:00Z","advisories":[],"bugzilla":"1762914","bugzilla_description":"CVE-2019-6475 bind: A flaw in mirror zone validity checking can allow zone data to be spoofed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6475.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-6476","severity":"moderate","public_date":"2019-10-16T00:00:00Z","advisories":[],"bugzilla":"1762957","bugzilla_description":"CVE-2019-6476 bind: An error in QNAME minimization code can cause BIND to exit with an assertion failure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6476.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-17531","severity":"moderate","public_date":"2019-10-12T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2019:4192","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1775293","bugzilla_description":"CVE-2019-17531 jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.8.el7","pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17531.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-16942","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758187","bugzilla_description":"CVE-2019-16942 jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16943","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758191","bugzilla_description":"CVE-2019-16943 jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16943.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14893","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758182","bugzilla_description":"CVE-2019-14893 jackson-databind: Serialization gadgets in classes of the xalan package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14892","severity":"moderate","public_date":"2019-09-19T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758171","bugzilla_description":"CVE-2019-14892 jackson-databind: Serialization gadgets in classes of the commons-configuration package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14892.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-17267","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758167","bugzilla_description":"CVE-2019-17267 jackson-databind: Serialization gadgets in classes of the ehcache package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17267.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16335","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0729","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755831","bugzilla_description":"CVE-2019-16335 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16335.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14540","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755849","bugzilla_description":"CVE-2019-14540 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14540.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14439","severity":"moderate","public_date":"2019-07-30T00:00:00Z","advisories":["RHSA-2019:3200","RHSA-2020:0983"],"bugzilla":"1752962","bugzilla_description":"CVE-2019-14439 jackson-databind: Polymorphic typing issue related to logback/JNDI","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14439.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14379","severity":"important","public_date":"2019-07-23T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:2743","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2020:0727","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1737517","bugzilla_description":"CVE-2019-14379 jackson-databind: default typing mishandling leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","rh-maven35-jackson-databind-0:2.7.6-2.7.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-12384","severity":"important","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:1820","RHSA-2019:3200","RHSA-2019:2720","RHSA-2019:4352","RHSA-2019:3297","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1725807","bugzilla_description":"CVE-2019-12384 jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","pki-deps:10.6-8000020190807021343.f8e95b4e","rh-maven35-jackson-databind-0:2.7.6-2.6.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12384.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-6471","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:1714"],"bugzilla":"1721780","bugzilla_description":"CVE-2019-6471 bind: Race condition when discarding malformed packets can cause bind to exit with assertion failure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-32:9.11.4-17.P2.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6471.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-12814","severity":"moderate","public_date":"2019-06-04T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2938","RHSA-2019:2937","RHSA-2019:2804","RHSA-2019:2936"],"bugzilla":"1725795","bugzilla_description":"CVE-2019-12814 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-6469","severity":"moderate","public_date":"2019-05-30T00:00:00Z","advisories":[],"bugzilla":"1715352","bugzilla_description":"CVE-2019-6469 bind: an error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failure leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6469.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-12086","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2020:1454","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3044","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2020:3192","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1713468","bugzilla_description":"CVE-2019-12086 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-5743","severity":"important","public_date":"2019-04-24T00:00:00Z","advisories":["RHSA-2019:1145","RHSA-2019:2698","RHSA-2019:2977","RHSA-2019:1492","RHSA-2019:1294"],"bugzilla":"1702541","bugzilla_description":"CVE-2018-5743 bind: Limiting simultaneous TCP clients is ineffective","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-32:9.9.4-61.el7_5.2","bind-32:9.8.2-0.68.rc1.el6_10.3","bind-32:9.9.4-74.el7_6.1","bind-32:9.11.4-17.P2.el8_0","bind-32:9.9.4-51.el7_4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5743.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2019-6467","severity":"moderate","public_date":"2019-04-24T00:00:00Z","advisories":[],"bugzilla":"1702545","bugzilla_description":"CVE-2019-6467 bind: flaw in nxredirect can cause assertion failure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6467.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-6468","severity":"moderate","public_date":"2019-04-24T00:00:00Z","advisories":[],"bugzilla":"1702642","bugzilla_description":"CVE-2019-6468 bind: named can exit with an assertion failure if nxdomain-redirect is used.","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-5744","severity":"important","public_date":"2019-02-21T00:00:00Z","advisories":[],"bugzilla":"1679299","bugzilla_description":"CVE-2018-5744 bind: A specially crafted packet can cause named to leak memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5744.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5745","severity":"low","public_date":"2019-02-21T00:00:00Z","advisories":["RHSA-2019:3552","RHSA-2020:1061"],"bugzilla":"1679303","bugzilla_description":"CVE-2018-5745 bind: An assertion failure if a trust anchor rolls over to an unsupported key algorithm when using managed-keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["bind-32:9.11.4-26.P2.el8","bind-32:9.11.4-16.P2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-6465","severity":"low","public_date":"2019-02-21T00:00:00Z","advisories":["RHSA-2019:3552","RHSA-2020:1061"],"bugzilla":"1679304","bugzilla_description":"CVE-2019-6465 bind: Controls for zone transfers may not be properly applied to DLZs if the zones are writable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["bind-32:9.11.4-26.P2.el8","bind-32:9.11.4-16.P2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6465.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-5742","severity":"moderate","public_date":"2018-12-18T13:59:00Z","advisories":["RHSA-2019:0194"],"bugzilla":"1655844","bugzilla_description":"CVE-2018-5742 bind: Crash from assertion error when debug log level is 10 and log entries meet buffer boundary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["bind-32:9.9.4-73.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5742.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-19360","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666482","bugzilla_description":"CVE-2018-19360 jackson-databind: improper polymorphic deserialization in axis2-transport-jms class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19360.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19361","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666484","bugzilla_description":"CVE-2018-19361 jackson-databind: improper polymorphic deserialization in openjpa class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19361.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19362","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666489","bugzilla_description":"CVE-2018-19362 jackson-databind: improper polymorphic deserialization in jboss-common-core class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-1000873","severity":"moderate","public_date":"2018-10-24T00:00:00Z","advisories":[],"bugzilla":"1665601","bugzilla_description":"CVE-2018-1000873 jackson-modules-java8: DoS due to an Improper Input Validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000873.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-5741","severity":"moderate","public_date":"2018-09-20T00:00:00Z","advisories":["RHSA-2019:2057"],"bugzilla":"1631131","bugzilla_description":"CVE-2018-5741 bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["bind-32:9.11.4-9.P2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5741.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-5740","severity":"important","public_date":"2018-08-08T21:30:00Z","advisories":["RHSA-2018:2570","RHSA-2018:2571"],"bugzilla":"1613595","bugzilla_description":"CVE-2018-5740 bind: processing of certain records when \"deny-answer-aliases\" is in use may trigger an assert leading to a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["bind-32:9.9.4-61.el7_5.1","bind-32:9.8.2-0.68.rc1.el6_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14718","severity":"important","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666415","bugzilla_description":"CVE-2018-14718 jackson-databind: arbitrary code execution in slf4j-ext class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14718.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14719","severity":"important","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666418","bugzilla_description":"CVE-2018-14719 jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14719.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14720","severity":"moderate","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:4037","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:1140"],"bugzilla":"1666423","bugzilla_description":"CVE-2018-14720 jackson-databind: exfiltration/XXE in some JDK classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-611","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14720.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-14721","severity":"moderate","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:4037","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:1140"],"bugzilla":"1666428","bugzilla_description":"CVE-2018-14721 jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14721.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-5738","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":[],"bugzilla":"1589616","bugzilla_description":"CVE-2018-5738 bind: Improper handling of configuration allows all clients to perform recursive queries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-12023","severity":"important","public_date":"2018-06-08T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1671096","bugzilla_description":"CVE-2018-12023 jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-12022","severity":"important","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1671097","bugzilla_description":"CVE-2018-12022 jackson-databind: improper polymorphic deserialization of types from Jodd-db library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-5736","severity":"moderate","public_date":"2018-05-18T00:00:00Z","advisories":[],"bugzilla":"1578591","bugzilla_description":"CVE-2018-5736 bind: Multiple transfers of a zone in quick succession can cause an assertion failure in rbtdb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-5737","severity":"moderate","public_date":"2018-05-18T00:00:00Z","advisories":[],"bugzilla":"1578593","bugzilla_description":"CVE-2018-5737 bind: Interaction between NSEC aggresive negative caching and the serve-stale feature can cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-11307","severity":"important","public_date":"2018-05-10T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1677341","bugzilla_description":"CVE-2018-11307 jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11307.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-5734","severity":"important","public_date":"2018-02-28T00:00:00Z","advisories":[],"bugzilla":"1550602","bugzilla_description":"CVE-2018-5734 bind: A malformed request can trigger an assertion failure in badcache.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5734.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7489","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":["RHSA-2018:2938","RHSA-2019:3149","RHSA-2018:1448","RHSA-2018:1449","RHSA-2020:2562","RHSA-2018:1447","RHSA-2018:2939","RHSA-2018:2090","RHSA-2019:2858","RHSA-2018:1786","RHSA-2018:1451","RHSA-2018:2089","RHSA-2018:2088","RHSA-2018:1450"],"bugzilla":"1549276","bugzilla_description":"CVE-2018-7489 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-5735","severity":"important","public_date":"2018-02-19T00:00:00Z","advisories":[],"bugzilla":"1551511","bugzilla_description":"CVE-2018-5735 bind: Assertion failure in validator.c due to incorrect handling of DNSSEC validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000057","severity":"low","public_date":"2018-02-05T00:00:00Z","advisories":[],"bugzilla":"1542718","bugzilla_description":"CVE-2018-1000057 jenkins-plugin-credentials-binding: improper masking of the secret provided to the build in rare circumstances","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000057.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-5968","severity":"moderate","public_date":"2018-01-18T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2019:3149","RHSA-2018:1525","RHSA-2018:0478","RHSA-2018:0479","RHSA-2019:2858","RHSA-2018:0481"],"bugzilla":"1538332","bugzilla_description":"CVE-2018-5968 jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rhvm-appliance-0:4.2-20180504.0","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5968.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3145","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0487","RHSA-2018:0102","RHSA-2018:0488","RHSA-2018:0101"],"bugzilla":"1534812","bugzilla_description":"CVE-2017-3145 bind: Improper fetch cleanup sequencing in the resolver can cause named to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["bind-32:9.8.2-0.62.rc1.el6_9.5","bind-32:9.8.2-0.30.rc1.el6_6.10","bind-32:9.9.4-29.el7_2.8","bind-32:9.9.4-50.el7_3.3","bind-32:9.8.2-0.23.rc1.el6_5.8","bind-32:9.8.2-0.37.rc1.el6_7.12","bind-32:9.8.2-0.17.rc1.el6_4.13","bind-32:9.9.4-51.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3145.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-17485","severity":"important","public_date":"2017-12-12T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2018:1448","RHSA-2019:3892","RHSA-2019:1797","RHSA-2018:1449","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2018:0116","RHSA-2018:0480","RHSA-2018:2930","RHSA-2019:2858","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1528565","bugzilla_description":"CVE-2017-17485 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","rh-eclipse46-jackson-databind-0:2.6.3-2.6.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-15095","severity":"important","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:3149","RHSA-2017:3190","RHSA-2018:1448","RHSA-2019:3892","RHSA-2018:1449","RHSA-2018:0577","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2017:3189","RHSA-2018:0480","RHSA-2019:2858","RHSA-2018:0576","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1506612","bugzilla_description":"CVE-2017-15095 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","rh-eclipse47-jackson-databind-0:2.7.6-3.3.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","rh-eclipse46-jackson-databind-0:2.6.3-2.4.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-7525","severity":"important","public_date":"2017-07-14T00:00:00Z","advisories":["RHSA-2018:1449","RHSA-2017:3141","RHSA-2017:2477","RHSA-2017:1840","RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2637","RHSA-2017:2638","RHSA-2018:0294","RHSA-2019:3149","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:2547","RHSA-2017:3458","RHSA-2017:2546","RHSA-2017:1835","RHSA-2017:1834","RHSA-2017:1837","RHSA-2017:1836","RHSA-2019:0910","RHSA-2019:2858","RHSA-2017:1839","RHSA-2018:0342","RHSA-2018:1450"],"bugzilla":"1462702","bugzilla_description":"CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["devtoolset-4-jackson-databind-0:2.5.0-2.4.el6","openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-eclipse46-jackson-databind-0:2.6.3-2.3.el7","devtoolset-4-jackson-databind-0:2.5.0-2.4.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:20171102.0-1","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7525.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3142","severity":"moderate","public_date":"2017-06-29T00:00:00Z","advisories":["RHSA-2017:1679","RHSA-2017:1680"],"bugzilla":"1466189","bugzilla_description":"CVE-2017-3142 bind: An error in TSIG authentication can permit unauthorized zone transfers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["bind-32:9.8.2-0.62.rc1.el6_9.4","bind-32:9.9.4-50.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3142.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3143","severity":"important","public_date":"2017-06-29T00:00:00Z","advisories":["RHSA-2017:1679","RHSA-2017:1680"],"bugzilla":"1466193","bugzilla_description":"CVE-2017-3143 bind: An error in TSIG authentication can permit unauthorized dynamic updates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["bind-32:9.8.2-0.62.rc1.el6_9.4","bind-32:9.9.4-50.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3143.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-3140","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1461302","bugzilla_description":"CVE-2017-3140 bind: Error processing RPZ rules leads to endless loop while handling query","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3140.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-3141","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1461310","bugzilla_description":"CVE-2017-3141 bind: BIND installer on Windows uses an unquoted service path which allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3141.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2017-3139","severity":"important","public_date":"2017-05-08T00:00:00Z","advisories":["RHSA-2017:1582","RHSA-2017:1202"],"bugzilla":"1447743","bugzilla_description":"CVE-2017-3139 bind: assertion failure in DNSSEC validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-32:9.8.2-0.62.rc1.el6_9.2","bind-32:9.7.3-8.P3.el6_2.9","bind-32:9.8.2-0.37.rc1.el6_7.11","bind-32:9.8.2-0.23.rc1.el6_5.7","bind-32:9.8.2-0.17.rc1.el6_4.12","bind-32:9.8.2-0.30.rc1.el6_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3139.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8779","severity":"important","public_date":"2017-05-03T00:00:00Z","advisories":["RHSA-2017:1262","RHBA-2017:1497","RHSA-2017:1263","RHSA-2017:1395","RHSA-2017:1268","RHSA-2017:1267"],"bugzilla":"1448124","bugzilla_description":"CVE-2017-8779 rpcbind, libtirpc, libntirpc: Memory leak when failing to parse XDR strings or bytearrays","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rpcbind-0:0.2.0-13.el6_9","libntirpc-0:1.4.3-4.el7rhgs","libtirpc-0:0.2.4-0.8.el7_3","libntirpc-0:1.4.3-2.el7","libntirpc-0:1.4.3-4.el6rhs","libtirpc-0:0.2.1-13.el6_9","rpcbind-0:0.2.0-38.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3136","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":["RHSA-2017:1105","RHSA-2017:1095"],"bugzilla":"1441125","bugzilla_description":"CVE-2017-3136 bind: Incorrect error handling causes assertion failure when using DNS64 with \"break-dnssec yes;\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["bind-32:9.8.2-0.62.rc1.el6_9.1","bind-32:9.9.4-38.el7_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3137","severity":"important","public_date":"2017-04-12T00:00:00Z","advisories":["RHSA-2017:1105","RHSA-2017:1095","RHSA-2017:1583","RHSA-2017:1582"],"bugzilla":"1441133","bugzilla_description":"CVE-2017-3137 bind: Processing a response containing CNAME or DNAME with unusual order can crash resolver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["bind-32:9.9.4-29.el7_2.6","bind-32:9.8.2-0.62.rc1.el6_9.1","bind-32:9.7.3-8.P3.el6_2.9","bind-32:9.8.2-0.37.rc1.el6_7.11","bind-32:9.8.2-0.23.rc1.el6_5.7","bind-32:9.9.4-38.el7_3.3","bind-32:9.8.2-0.17.rc1.el6_4.12","bind-32:9.8.2-0.30.rc1.el6_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3138","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441137","bugzilla_description":"CVE-2017-3138 bind: REQUIRE assertion failure when null command string on control channel is received","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3138.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3135","severity":"moderate","public_date":"2017-02-08T00:00:00Z","advisories":["RHSA-2017:0276"],"bugzilla":"1420193","bugzilla_description":"CVE-2017-3135 bind: Assertion failure when using DNS64 and RPZ Can Lead to Crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.9.4-38.el7_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3135.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9131","severity":"important","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:0062","RHSA-2017:1583"],"bugzilla":"1411348","bugzilla_description":"CVE-2016-9131 bind: assertion failure while processing response to an ANY query","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-32:9.9.4-29.el7_2.6","bind-32:9.9.4-38.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9131.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9147","severity":"important","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:0063","RHSA-2017:0062","RHSA-2017:1583","RHSA-2017:0064","RHSA-2017:1582"],"bugzilla":"1411367","bugzilla_description":"CVE-2016-9147 bind: assertion failure while handling a query response containing inconsistent DNSSEC information","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind97-32:9.7.0-21.P2.el5_11.10","bind-32:9.9.4-29.el7_2.6","bind-32:9.8.2-0.47.rc1.el6_8.4","bind-30:9.3.6-25.P1.el5_11.12","bind-32:9.7.3-8.P3.el6_2.9","bind-32:9.8.2-0.37.rc1.el6_7.11","bind-32:9.8.2-0.23.rc1.el6_5.7","bind-32:9.9.4-38.el7_3.1","bind-32:9.8.2-0.17.rc1.el6_4.12","bind-32:9.8.2-0.30.rc1.el6_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9147.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9444","severity":"important","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:0062","RHSA-2017:1583"],"bugzilla":"1411377","bugzilla_description":"CVE-2016-9444 bind: assertion failure while handling an unusually-formed DS record response","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-32:9.9.4-29.el7_2.6","bind-32:9.9.4-38.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9444.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9778","severity":"important","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1411387","bugzilla_description":"CVE-2016-9778 bind: assertion failure while handling certain queries using the nxdomain-redirect feature","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-8864","severity":"important","public_date":"2016-11-01T00:00:00Z","advisories":["RHSA-2016:2871","RHSA-2016:2141","RHSA-2016:2142","RHSA-2016:2615","RHSA-2017:1583"],"bugzilla":"1389652","bugzilla_description":"CVE-2016-8864 bind: assertion failure while handling responses containing a DNAME answer","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.8.2-0.47.rc1.el6_8.3","bind-32:9.8.2-0.17.rc1.el6_4.10","bind-32:9.9.4-29.el7_2.6","bind-32:9.8.2-0.30.rc1.el6_6.7","bind-32:9.8.2-0.23.rc1.el6_5.5","bind-30:9.3.6-25.P1.el5_11.11","bind97-32:9.7.0-21.P2.el5_11.9","bind-32:9.7.3-8.P3.el6_2.6","bind-32:9.8.2-0.37.rc1.el6_7.9","bind-32:9.9.4-38.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8864.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-2848","severity":"important","public_date":"2016-10-20T00:00:00Z","advisories":["RHSA-2016:2099","RHSA-2016:2093","RHSA-2016:2094"],"bugzilla":"1385450","bugzilla_description":"CVE-2016-2848 bind: assertion failure triggered by a packet with malformed options","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["bind-32:9.8.2-0.30.rc1.el6_6.6","bind-32:9.8.2-0.47.rc1.el6_8.2","bind-32:9.8.2-0.37.rc1.el6_7.8","bind-30:9.3.6-25.P1.el5_11.10","bind-32:9.8.2-0.23.rc1.el6_5.4","bind97-32:9.7.0-21.P2.el5_11.8","bind-32:9.7.3-8.P3.el6_2.5","bind-32:9.8.2-0.17.rc1.el6_4.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2848.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-2776","severity":"important","public_date":"2016-09-27T00:00:00Z","advisories":["RHSA-2016:2099","RHSA-2016:1944","RHSA-2016:1945"],"bugzilla":"1378380","bugzilla_description":"CVE-2016-2776 bind: assertion failure in buffer.c while building responses to a specifically constructed request","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["bind-30:9.3.6-25.P1.el5_11.9","bind-32:9.8.2-0.47.rc1.el6_8.1","bind-32:9.8.2-0.30.rc1.el6_6.6","bind-32:9.8.2-0.37.rc1.el6_7.8","bind-32:9.8.2-0.23.rc1.el6_5.4","bind97-32:9.7.0-21.P2.el5_11.7","bind-32:9.7.3-8.P3.el6_2.5","bind-32:9.9.4-29.el7_2.4","bind-32:9.8.2-0.17.rc1.el6_4.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-2775","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHBA-2017:1767","RHBA-2017:0651","RHSA-2017:2533"],"bugzilla":"1357803","bugzilla_description":"CVE-2016-2775 bind: Too long query name causes segmentation fault in lwresd","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["bind-32:9.9.4-50.el7","bind-32:9.9.4-29.el7_2.7","bind-32:9.9.4-50.el7_3.2","bind-32:9.8.2-0.62.rc1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2775.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6170","severity":"low","public_date":"2016-07-04T00:00:00Z","advisories":[],"bugzilla":"1353563","bugzilla_description":"CVE-2016-6170 bind: Improper restriction of zone size limit","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6170.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-1285","severity":"important","public_date":"2016-03-09T00:00:00Z","advisories":["RHSA-2016:0562","RHSA-2016:0458","RHSA-2016:0601","RHSA-2016:0459"],"bugzilla":"1315674","bugzilla_description":"CVE-2016-1285 bind: malformed packet sent to rndc can trigger assertion failure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["bind-32:9.8.2-0.37.rc1.el6_7.7","bind-30:9.3.6-25.P1.el5_11.8","bind-32:9.8.2-0.30.rc1.el6_6.5","bind97-32:9.7.0-21.P2.el5_11.6","bind-32:9.8.2-0.23.rc1.el6_5.3","bind-32:9.7.3-8.P3.el6_2.4","bind-32:9.8.2-0.17.rc1.el6_4.8","bind-32:9.9.4-29.el7_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1285.json"},{"CVE":"CVE-2016-1286","severity":"important","public_date":"2016-03-09T00:00:00Z","advisories":["RHSA-2016:0562","RHSA-2016:0458","RHSA-2016:0601","RHSA-2016:0459"],"bugzilla":"1315680","bugzilla_description":"CVE-2016-1286 bind: malformed signature records for DNAME records can trigger assertion failure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["bind-32:9.8.2-0.37.rc1.el6_7.7","bind-30:9.3.6-25.P1.el5_11.8","bind-32:9.8.2-0.30.rc1.el6_6.5","bind97-32:9.7.0-21.P2.el5_11.6","bind-32:9.8.2-0.23.rc1.el6_5.3","bind-32:9.7.3-8.P3.el6_2.4","bind-32:9.8.2-0.17.rc1.el6_4.8","bind-32:9.9.4-29.el7_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1286.json"},{"CVE":"CVE-2016-2088","severity":"important","public_date":"2016-03-09T00:00:00Z","advisories":[],"bugzilla":"1315690","bugzilla_description":"CVE-2016-2088 bind: malformed packet containing multiple cookie options can trigger assertion failure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2088.json"},{"CVE":"CVE-2015-8704","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0073","RHSA-2016:0074"],"bugzilla":"1299364","bugzilla_description":"CVE-2015-8704 bind: specific APL data could trigger an INSIST in apl_42.c","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["bind-32:9.8.2-0.37.rc1.el6_7.6","bind97-32:9.7.0-21.P2.el5_11.5","bind-32:9.9.4-29.el7_2.2","bind-30:9.3.6-25.P1.el5_11.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8704.json"},{"CVE":"CVE-2015-8705","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1299367","bugzilla_description":"CVE-2015-8705 bind: crash when converting OPT resource records and ECS options to text format","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8705.json"},{"CVE":"CVE-2015-8000","severity":"important","public_date":"2015-12-15T00:00:00Z","advisories":["RHSA-2016:0078","RHSA-2016:0079","RHSA-2015:2655","RHSA-2015:2656","RHSA-2015:2658"],"bugzilla":"1291176","bugzilla_description":"CVE-2015-8000 bind: responses with a malformed class attribute can trigger an assertion failure in db.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["bind-32:9.8.2-0.37.rc1.el6_7.5","bind-32:9.8.2-0.30.rc1.el6_6.4","bind-32:9.8.2-0.23.rc1.el6_5.2","bind97-32:9.7.0-21.P2.el5_11.4","bind-32:9.8.2-0.17.rc1.el6_4.7","bind-32:9.9.4-29.el7_2.1","bind-30:9.3.6-25.P1.el5_11.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8000.json"},{"CVE":"CVE-2015-8461","severity":"moderate","public_date":"2015-12-15T00:00:00Z","advisories":[],"bugzilla":"1291186","bugzilla_description":"CVE-2015-8461 bind: race condition when handling socket errors can lead to an assertion failure in resolver.c","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8461.json"},{"CVE":"CVE-2015-5986","severity":"moderate","public_date":"2015-09-02T00:00:00Z","advisories":[],"bugzilla":"1259085","bugzilla_description":"CVE-2015-5986 Bind: fromwire_openpgpkey() incorrect boundary check Denial of Service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5986.json"},{"CVE":"CVE-2015-5722","severity":"important","public_date":"2015-09-02T00:00:00Z","advisories":["RHSA-2015:1705","RHSA-2015:1706","RHSA-2016:0078","RHSA-2015:1707","RHSA-2016:0079"],"bugzilla":"1259087","bugzilla_description":"CVE-2015-5722 bind: malformed DNSSEC key failed assertion denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["bind-32:9.8.2-0.30.rc1.el6_6.4","bind-32:9.9.4-18.ael7b_1.5","bind97-32:9.7.0-21.P2.el5_11.3","bind-32:9.8.2-0.23.rc1.el6_5.2","bind-32:9.8.2-0.37.rc1.el6_7.4","bind-32:9.8.2-0.17.rc1.el6_4.7","bind-30:9.3.6-25.P1.el5_11.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5722.json"},{"CVE":"CVE-2015-7236","severity":"moderate","public_date":"2015-08-06T00:00:00Z","advisories":["RHSA-2016:0005"],"bugzilla":"1264345","bugzilla_description":"CVE-2015-7236 rpcbind: Use-after-free vulnerability in PMAP_CALLIT","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["rpcbind-0:0.2.0-33.el7_2","rpcbind-0:0.2.0-11.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7236.json"},{"CVE":"CVE-2015-5477","severity":"important","public_date":"2015-07-28T00:00:00Z","advisories":["RHSA-2015:1515","RHSA-2015:1514","RHSA-2016:0078","RHSA-2015:1513","RHSA-2016:0079"],"bugzilla":"1247361","bugzilla_description":"CVE-2015-5477 bind: TKEY query handling flaw leading to denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-456->CWE-617","affected_packages":["bind97-32:9.7.0-21.P2.el5_11.2","bind-32:9.8.2-0.30.rc1.el6_6.4","bind-32:9.8.2-0.37.rc1.el6_7.2","bind-32:9.8.2-0.23.rc1.el6_5.2","bind-30:9.3.6-25.P1.el5_11.3","bind-32:9.8.2-0.17.rc1.el6_4.7","bind-32:9.9.4-18.el7_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5477.json"},{"CVE":"CVE-2015-4620","severity":"important","public_date":"2015-07-07T00:00:00Z","advisories":["RHSA-2015:1443","RHSA-2015:1471"],"bugzilla":"1237258","bugzilla_description":"CVE-2015-4620 bind: abort DoS caused by uninitialized value use in isselfsigned()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-456->CWE-617","affected_packages":["bind-32:9.8.2-0.37.rc1.el6_7.1","bind-32:9.9.4-18.el7_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4620.json"},{"CVE":"CVE-2015-1349","severity":"moderate","public_date":"2015-02-20T00:00:00Z","advisories":["RHSA-2015:0672"],"bugzilla":"1193820","bugzilla_description":"CVE-2015-1349 bind: issue in trust anchor management can cause named to crash","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":["bind-32:9.8.2-0.30.rc1.el6_6.2","bind-32:9.9.4-18.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1349.json"},{"CVE":"CVE-2014-8500","severity":"important","public_date":"2014-12-08T00:00:00Z","advisories":["RHSA-2014:1984","RHSA-2016:0078","RHSA-2014:1985"],"bugzilla":"1171912","bugzilla_description":"CVE-2014-8500 bind: delegation handling denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["bind97-32:9.7.0-21.P2.el5_11.1","bind-32:9.8.2-0.23.rc1.el6_5.2","bind-32:9.8.2-0.30.rc1.el6_6.1","bind-32:9.9.4-14.el7_0.1","bind-30:9.3.6-25.P1.el5_11.2","bind-32:9.8.2-0.17.rc1.el6_4.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8500.json"},{"CVE":"CVE-2014-8680","severity":"moderate","public_date":"2014-12-08T00:00:00Z","advisories":[],"bugzilla":"1171919","bugzilla_description":"CVE-2014-8680 bind: flaws in GeoIP leading to a denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8680.json"},{"CVE":"CVE-2012-3541","severity":"moderate","public_date":"2014-07-08T00:00:00Z","advisories":[],"bugzilla":"852282","bugzilla_description":"CVE-2012-3541 rpcbind: -h fails to control access to rpcbind","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3541.json"},{"CVE":"CVE-2014-3859","severity":"important","public_date":"2014-06-11T00:00:00Z","advisories":[],"bugzilla":"1108544","bugzilla_description":"CVE-2014-3859 bind: assertion failure during EDNS option processing","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3859.json"},{"CVE":"CVE-2014-3214","severity":"important","public_date":"2014-05-08T00:00:00Z","advisories":[],"bugzilla":"1096016","bugzilla_description":"CVE-2014-3214 bind: assertion failure when using prefetch","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3214.json"},{"CVE":"CVE-2014-0591","severity":"moderate","public_date":"2014-01-13T00:00:00Z","advisories":["RHSA-2014:1244","RHSA-2014:0043"],"bugzilla":"1051717","bugzilla_description":"CVE-2014-0591 bind: named crash when handling malformed NSEC3-signed zones","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.8.2-0.23.rc1.el6_5.1","bind97-32:9.7.0-21.P2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0591.json"},{"CVE":"CVE-2013-6230","severity":"moderate","public_date":"2013-11-06T00:00:00Z","advisories":[],"bugzilla":"1027689","bugzilla_description":"CVE-2013-6230 bind: localnets ACL bypass caused by WinSock API bug","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6230.json"},{"CVE":"CVE-2013-5661","severity":"low","public_date":"2013-09-09T00:00:00Z","advisories":[],"bugzilla":"1038750","bugzilla_description":"CVE-2013-5661 DNS response rate limiting can simplify cache poisoning attacks","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5661.json"},{"CVE":"CVE-2013-4854","severity":"important","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1115","RHSA-2013:1114"],"bugzilla":"988999","bugzilla_description":"CVE-2013-4854 bind: named crash with an assertion failure on parsing malformed rdata","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.8.2-0.17.rc1.el6_4.5","bind97-32:9.7.0-17.P2.el5_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4854.json"},{"CVE":"CVE-2013-3919","severity":"important","public_date":"2013-06-04T00:00:00Z","advisories":[],"bugzilla":"970905","bugzilla_description":"CVE-2013-3919 bind: Querying a recursive resolver for a malformed zone causes named to crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3919.json"},{"CVE":"CVE-2013-2266","severity":"important","public_date":"2013-03-26T00:00:00Z","advisories":["RHSA-2013:0690","RHSA-2013:0689"],"bugzilla":"928027","bugzilla_description":"CVE-2013-2266 bind: libdns regular expressions excessive resource consumption DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.8.2-0.17.rc1.el6_4.4","bind97-32:9.7.0-17.P2.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2266.json"},{"CVE":"CVE-2012-5689","severity":"moderate","public_date":"2013-01-24T00:00:00Z","advisories":["RHSA-2013:0550"],"bugzilla":"903417","bugzilla_description":"CVE-2012-5689 bind: denial of service when processing queries and with both DNS64 and RPZ enabled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.8.2-0.17.rc1.el6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5689.json"},{"CVE":"CVE-2012-5688","severity":"important","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2012:1549"],"bugzilla":"883533","bugzilla_description":"CVE-2012-5688 bind: DoS on servers using DNS64","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.8.2-0.10.rc1.el6_3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5688.json"},{"CVE":"CVE-2012-5166","severity":"important","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1364","RHSA-2012:1363","RHSA-2012:1365"],"bugzilla":"864273","bugzilla_description":"CVE-2012-5166 bind: Specially crafted DNS data can cause a lockup in named","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-30:9.3.6-20.P1.el5_8.5","bind97-32:9.7.0-10.P2.el5_8.4","bind-32:9.8.2-0.10.rc1.el6_3.5","bind-20:9.2.4-41.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5166.json"},{"CVE":"CVE-2012-4244","severity":"important","public_date":"2012-09-12T00:00:00Z","advisories":["RHSA-2012:1267","RHSA-2012:1365","RHSA-2012:1266","RHSA-2012:1268"],"bugzilla":"856754","bugzilla_description":"CVE-2012-4244 bind: specially crafted resource record causes named to exit","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind97-32:9.7.0-10.P2.el5_8.3","bind-30:9.3.6-20.P1.el5_8.4","bind-20:9.2.4-41.el4","bind-32:9.8.2-0.10.rc1.el6_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4244.json"},{"CVE":"CVE-2012-3429","severity":"important","public_date":"2012-08-01T00:00:00Z","advisories":["RHSA-2012:1139"],"bugzilla":"842466","bugzilla_description":"CVE-2012-3429 bind-dyndb-ldap: named DoS via DNS query with $ in name","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-dyndb-ldap-0:1.1.0-0.9.b1.el6_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3429.json"},{"CVE":"CVE-2012-3868","severity":"important","public_date":"2012-07-24T00:00:00Z","advisories":[],"bugzilla":"842895","bugzilla_description":"CVE-2012-3868 bind: high TCP query load can trigger memory leak","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3868.json"},{"CVE":"CVE-2012-3817","severity":"important","public_date":"2012-07-24T00:00:00Z","advisories":["RHSA-2012:1122","RHSA-2012:1123"],"bugzilla":"842897","bugzilla_description":"CVE-2012-3817 bind: heavy DNSSEC validation load can cause assertion failure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind97-32:9.7.0-10.P2.el5_8.2","bind-30:9.3.6-20.P1.el5_8.2","bind-32:9.8.2-0.10.rc1.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3817.json"},{"CVE":"CVE-2012-1667","severity":"important","public_date":"2012-06-04T00:00:00Z","advisories":["RHSA-2012:0716","RHSA-2012:0717","RHSA-2012:1110"],"bugzilla":"828078","bugzilla_description":"CVE-2012-1667 bind: handling of zero length rdata can cause named to terminate unexpectedly","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["bind97-32:9.7.0-10.P2.el5_8.1","bind-30:9.3.6-20.P1.el5_8.1","bind-32:9.7.3-8.P3.el6_2.3","bind-20:9.2.4-39.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1667.json"},{"CVE":"CVE-2012-2134","severity":"important","public_date":"2012-04-24T00:00:00Z","advisories":["RHSA-2012:0683"],"bugzilla":"815846","bugzilla_description":"CVE-2012-2134 bind-dyndb-ldap: Bind DoS (named hang) by processing DNS query for zone served by bind-dyndb-ldap","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-dyndb-ldap-0:0.2.0-7.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2134.json"},{"CVE":"CVE-2012-1033","severity":"low","public_date":"2012-02-07T00:00:00Z","advisories":["RHSA-2012:0716","RHSA-2012:0717"],"bugzilla":"788650","bugzilla_description":"CVE-2012-1033 bind: deleted domain name resolving flaw","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bind97-32:9.7.0-10.P2.el5_8.1","bind-30:9.3.6-20.P1.el5_8.1","bind-32:9.7.3-8.P3.el6_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1033.json"},{"CVE":"CVE-2011-4313","severity":"important","public_date":"2011-11-16T00:00:00Z","advisories":["RHSA-2011:1496","RHSA-2011:1458","RHSA-2011:1459"],"bugzilla":"754398","bugzilla_description":"CVE-2011-4313 bind: Remote denial of service against recursive servers via logging negative cache entry","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind97-32:9.7.0-6.P2.el5_7.4","bind-30:9.3.6-16.P1.el5_7.1","bind-32:9.7.3-2.el6_1.P3.3","bind-20:9.2.4-38.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4313.json"},{"CVE":"CVE-2011-2464","severity":"important","public_date":"2011-07-05T00:00:00Z","advisories":["RHSA-2011:0926"],"bugzilla":"718966","bugzilla_description":"CVE-2011-2464 bind: Specially constructed packet will cause named to exit","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.7.3-2.el6_1.P3.2","bind97-32:9.7.0-6.P2.el5_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2464.json"},{"CVE":"CVE-2011-2465","severity":"important","public_date":"2011-07-05T00:00:00Z","advisories":[],"bugzilla":"718971","bugzilla_description":"CVE-2011-2465 bind: Remote Crash with Certain RPZ Configurations","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2465.json"},{"CVE":"CVE-2011-1910","severity":"important","public_date":"2011-05-26T00:00:00Z","advisories":["RHSA-2011:0845"],"bugzilla":"708301","bugzilla_description":"CVE-2011-1910 bind: Large RRSIG RRsets and Negative Caching can crash named","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-32:9.7.3-2.el6_1.P1.1","bind97-32:9.7.0-6.P2.el5_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1910.json"},{"CVE":"CVE-2011-1907","severity":"important","public_date":"2011-05-05T00:00:00Z","advisories":[],"bugzilla":"702701","bugzilla_description":"CVE-2011-1907 bind: RRSIG queries can trigger server crash when using Response Policy Zones (RPZ)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1907.json"},{"CVE":"CVE-2011-0414","severity":"moderate","public_date":"2011-02-22T00:00:00Z","advisories":[],"bugzilla":"679496","bugzilla_description":"CVE-2011-0414 bind: named lockup with IXFR or DDNS update and a high query rate","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0414.json"},{"CVE":"CVE-2010-3613","severity":"important","public_date":"2010-12-01T00:00:00Z","advisories":["RHSA-2010:0976","RHSA-2010:0975","RHSA-2010:1000"],"bugzilla":"658974","bugzilla_description":"CVE-2010-3613 bind: failure to clear existing RRSIG records when a NO DATA is negatively cached could DoS named","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-30:9.3.6-4.P1.el5_5.3","bind-20:9.2.4-30.el4_8.6","bind-32:9.7.0-5.P2.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3613.json"},{"CVE":"CVE-2010-3614","severity":"low","public_date":"2010-12-01T00:00:00Z","advisories":["RHSA-2010:0976","RHSA-2010:0975"],"bugzilla":"658977","bugzilla_description":"CVE-2010-3614 bind: key algorithm rollover may mark secure answers as insecure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bind-30:9.3.6-4.P1.el5_5.3","bind-32:9.7.0-5.P2.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3614.json"},{"CVE":"CVE-2010-0218","severity":null,"public_date":"2010-09-28T00:00:00Z","advisories":[],"bugzilla":"640696","bugzilla_description":"CVE-2010-0218 Bind: Unitended availability of cache data.","cvss_score":null,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:N/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0218.json"},{"CVE":"CVE-2010-3762","severity":"moderate","public_date":"2010-09-28T00:00:00Z","advisories":["RHSA-2010:0976"],"bugzilla":"640730","bugzilla_description":"CVE-2010-3762 Bind: DoS (assertion failure) via a DNS query with bad signatures","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-30:9.3.6-4.P1.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3762.json"},{"CVE":"CVE-2010-0213","severity":"moderate","public_date":"2010-07-15T00:00:00Z","advisories":[],"bugzilla":"616706","bugzilla_description":"CVE-2010-0213 BIND: DoS (infinite loop of RRSIGs queries to authoritative servers) via certain RRSIG query","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0213.json"},{"CVE":"CVE-2010-0097","severity":"moderate","public_date":"2010-01-19T00:00:00Z","advisories":["RHSA-2010:0062"],"bugzilla":"554851","bugzilla_description":"CVE-2010-0097 BIND DNSSEC NSEC/NSEC3 validation code could cause bogus NXDOMAIN responses","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bind-30:9.3.6-4.P1.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0097.json"},{"CVE":"CVE-2010-0290","severity":"moderate","public_date":"2010-01-19T00:00:00Z","advisories":["RHSA-2010:0062"],"bugzilla":"557121","bugzilla_description":"CVE-2010-0290 BIND upstream fix for CVE-2009-4022 is incomplete","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bind-30:9.3.6-4.P1.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0290.json"},{"CVE":"CVE-2010-0382","severity":"moderate","public_date":"2010-01-19T00:00:00Z","advisories":["RHSA-2010:0062"],"bugzilla":"557983","bugzilla_description":"CVE-2010-0382 bind: out-of-bailiwick data vulnerability due to regression while fixing CVE-2009-4022","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bind-30:9.3.6-4.P1.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0382.json"},{"CVE":"CVE-2009-4022","severity":"moderate","public_date":"2009-11-23T00:00:00Z","advisories":["RHSA-2009:1620"],"bugzilla":"538744","bugzilla_description":"CVE-2009-4022 bind: cache poisoning using not validated DNSSEC responses","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bind-30:9.3.6-4.P1.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4022.json"},{"CVE":"CVE-2009-0696","severity":"important","public_date":"2009-07-28T00:00:00Z","advisories":["RHSA-2009:1180","RHSA-2009:1181","RHSA-2009:1179"],"bugzilla":"514292","bugzilla_description":"CVE-2009-0696 bind: DoS (assertion failure) via nsupdate packets","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["bind-20:9.2.4-25.el3","bind-30:9.3.4-10.P1.el5_3.3","bind-20:9.2.4-30.el4_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0696.json"},{"CVE":"CVE-2009-0025","severity":"moderate","public_date":"2009-01-07T00:00:00Z","advisories":["RHSA-2009:0020"],"bugzilla":"478984","bugzilla_description":"CVE-2009-0025 bind: DSA_do_verify() returns check issue","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["bind-0:9.2.1-11.el2","bind-20:9.2.4-30.el4_7.1","bind-30:9.3.4-6.0.3.P1.el5_2","bind-20:9.2.4-23.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0025.json"},{"CVE":"CVE-2008-1447","severity":"important","public_date":"2008-07-08T18:00:00Z","advisories":["RHSA-2008:0533","RHSA-2008:0789"],"bugzilla":"449345","bugzilla_description":"CVE-2008-1447 bind: implement source UDP port randomization (CERT VU#800113)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-0:9.2.1-10.el2","dnsmasq-0:2.45-1.el5_2.1","bind-20:9.2.4-22.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1447.json"},{"CVE":"CVE-2008-0122","severity":"low","public_date":"2008-01-14T00:00:00Z","advisories":["RHSA-2008:0300"],"bugzilla":"429149","bugzilla_description":"CVE-2008-0122 libbind off-by-one buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["bind-30:9.3.4-6.P1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0122.json"},{"CVE":"CVE-2007-6283","severity":"moderate","public_date":"2007-12-13T00:00:00Z","advisories":["RHSA-2008:0300"],"bugzilla":"419421","bugzilla_description":"CVE-2007-6283 bind: /etc/rndc.key has 644 permissions by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-30:9.3.4-6.P1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6283.json"},{"CVE":"CVE-2007-2926","severity":"moderate","public_date":"2007-07-23T00:00:00Z","advisories":["RHSA-2007:0740"],"bugzilla":"248851","bugzilla_description":"CVE-2007-2926 bind cryptographically weak query ids","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-0:9.2.1-9.el2","bind-20:9.2.4-27.0.1.el4","bind-20:9.2.4-21.el3","bind-30:9.3.3-9.0.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2926.json"},{"CVE":"CVE-2007-0494","severity":"moderate","public_date":"2007-01-25T00:00:00Z","advisories":["RHSA-2007:0044","RHSA-2007:0057"],"bugzilla":"225268","bugzilla_description":"CVE-2007-0494 BIND dnssec denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-0:9.2.1-8.EL2","bind-20:9.2.4-20.EL3","bind-30:9.3.3-8.el5","bind-20:9.2.4-24.EL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0494.json"},{"CVE":"CVE-2007-0493","severity":"important","public_date":"2007-01-25T00:00:00Z","advisories":["RHSA-2007:0057"],"bugzilla":"230003","bugzilla_description":"CVE-2007-0493 bind use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["bind-30:9.3.3-8.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0493.json"},{"CVE":"CVE-2006-0987","severity":"moderate","public_date":"2006-03-03T00:00:00Z","advisories":[],"bugzilla":"873618","bugzilla_description":"CVE-2006-0987 bind: DDoS (traffic amplification) via DNS queries with spoofed IP addresses due to additional information delegation to arbitrary IP addresses","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0987.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/binutils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/binutils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/binutils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/binutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/binutils_security_api_results.json
new file mode 100644
index 0000000..a2b1e1f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/binutils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17450","severity":"low","public_date":"2019-10-08T00:00:00Z","advisories":[],"bugzilla":"1771677","bugzilla_description":"CVE-2019-17450 binutils: denial of service via crafted ELF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-17451","severity":"low","public_date":"2019-10-07T00:00:00Z","advisories":["RHSA-2020:1797"],"bugzilla":"1771668","bugzilla_description":"CVE-2019-17451 binutils: integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["binutils-0:2.30-73.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17451.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-10086","severity":"important","public_date":"2019-08-15T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2321","RHSA-2020:3587","RHSA-2020:2333","RHSA-2020:2740","RHSA-2020:1454","RHSA-2020:0057","RHSA-2019:4317","RHSA-2020:0194","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:0899","RHSA-2020:0811","RHSA-2020:1308","RHSA-2020:0951","RHBA-2020:0496","RHSA-2020:0805","RHSA-2020:0804","RHSA-2020:2619","RHSA-2020:0806","RHSA-2020:3192"],"bugzilla":"1767483","bugzilla_description":"CVE-2019-10086 apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-java-common-apache-commons-beanutils-0:1.8.3-14.14.el6","rh-maven35-apache-commons-beanutils-0:1.9.3-2.3.el7","rh-java-common-apache-commons-beanutils-0:1.8.3-14.15.el7","apache-commons-beanutils-0:1.8.3-15.el7_7","candlepin-0:2.5.22-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-14250","severity":"low","public_date":"2019-08-09T00:00:00Z","advisories":[],"bugzilla":"1739490","bugzilla_description":"CVE-2019-14250 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14250.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-14444","severity":"low","public_date":"2019-07-25T00:00:00Z","advisories":[],"bugzilla":"1740469","bugzilla_description":"CVE-2019-14444 binutils: integer overflow in function apply_relocation in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14444.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-1010204","severity":"low","public_date":"2019-07-24T00:00:00Z","advisories":["RHSA-2020:1797"],"bugzilla":"1735604","bugzilla_description":"CVE-2019-1010204 binutils: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read in gold/fileread.cc and elfcpp/elfcpp_file.h leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-20|CWE-125)","affected_packages":["binutils-0:2.30-73.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010204.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-12972","severity":"low","public_date":"2019-06-17T00:00:00Z","advisories":[],"bugzilla":"1831873","bugzilla_description":"CVE-2019-12972 binutils: out-of-bounds read in setup_group in bfd/elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12972.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-9077","severity":"moderate","public_date":"2019-02-20T00:00:00Z","advisories":[],"bugzilla":"1680675","bugzilla_description":"CVE-2019-9077 binutils: heap-based buffer overflow in function process_mips_specific in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9077.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9072","severity":null,"public_date":"2019-02-19T00:00:00Z","advisories":[],"bugzilla":"1680660","bugzilla_description":"CVE-2019-9072 binutils: excessive memory allocation in function setup_group in elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9072.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-9073","severity":null,"public_date":"2019-02-19T00:00:00Z","advisories":[],"bugzilla":"1680662","bugzilla_description":"CVE-2019-9073 binutils: excessive memory allocation in function _bfd_elf_slurp_version_tables in elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9073.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-9074","severity":"moderate","public_date":"2019-02-19T00:00:00Z","advisories":[],"bugzilla":"1680665","bugzilla_description":"CVE-2019-9074 binutils: out-of-bound read in function bfd_getl32 in libbfd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9074.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9075","severity":"moderate","public_date":"2019-02-19T00:00:00Z","advisories":[],"bugzilla":"1680669","bugzilla_description":"CVE-2019-9075 binutils: heap-based buffer overflow in function _bfd_archive_64_bit_slurp_armap in archive64.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9075.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9076","severity":null,"public_date":"2019-02-19T00:00:00Z","advisories":[],"bugzilla":"1680672","bugzilla_description":"CVE-2019-9076 binutils: excessive memory allocation in function elf_read_notes in elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9076.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-9070","severity":"low","public_date":"2019-02-18T00:00:00Z","advisories":[],"bugzilla":"1680651","bugzilla_description":"CVE-2019-9070 binutils: heap-based buffer over-read in function d_expression_1 in cp-demangle.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9070.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2019-9071","severity":"low","public_date":"2019-02-18T00:00:00Z","advisories":[],"bugzilla":"1680657","bugzilla_description":"CVE-2019-9071 binutils: stack consumption in function d_count_templates_scopes in cp-demangle.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9071.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20623","severity":"moderate","public_date":"2018-12-31T00:00:00Z","advisories":[],"bugzilla":"1664700","bugzilla_description":"CVE-2018-20623 binutils: Use-after-free in the error function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20623.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20651","severity":"low","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1664703","bugzilla_description":"CVE-2018-20651 binutils: NULL pointer dereference in elf_link_add_object_symbols function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20651.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20712","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1668269","bugzilla_description":"CVE-2018-20712 libiberty: heap-based buffer over-read in d_expression_1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20712.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-20673","severity":"moderate","public_date":"2018-12-27T00:00:00Z","advisories":[],"bugzilla":"1664709","bugzilla_description":"CVE-2018-20673 libiberty: Integer overflow in demangle_template() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20673.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20671","severity":"moderate","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1664712","bugzilla_description":"CVE-2018-20671 binutils: Integer overflow in load_specific_debug_section function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20671.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20657","severity":"low","public_date":"2018-12-18T00:00:00Z","advisories":["RHSA-2019:3352"],"bugzilla":"1664708","bugzilla_description":"CVE-2018-20657 libiberty: Memory leak in demangle_template function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["gdb-0:8.2-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000876","severity":"moderate","public_date":"2018-12-16T00:00:00Z","advisories":["RHSA-2019:2075"],"bugzilla":"1664699","bugzilla_description":"CVE-2018-1000876 binutils: integer overflow leads to heap-based buffer overflow in objdump","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["binutils-0:2.27-41.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000876.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-20002","severity":"low","public_date":"2018-12-07T00:00:00Z","advisories":[],"bugzilla":"1661534","bugzilla_description":"CVE-2018-20002 binutils: memory leak in _bfd_generic_read_minisymbols function in syms.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20002.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19931","severity":"low","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1658947","bugzilla_description":"CVE-2018-19931 binutils: Heap-based buffer overflow in bfd_elf32_swap_phdr_in function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19931.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19932","severity":"low","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1658949","bugzilla_description":"CVE-2018-19932 binutils: Integer overflow due to the IS_CONTAINED_BY_LMA macro resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19932.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18700","severity":"low","public_date":"2018-10-22T00:00:00Z","advisories":[],"bugzilla":"1646535","bugzilla_description":"CVE-2018-18700 binutils: Recursive Stack Overflow within function d_name, d_encoding, and d_local_name in cp-demangle.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18700.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-18701","severity":"low","public_date":"2018-10-21T00:00:00Z","advisories":[],"bugzilla":"1646529","bugzilla_description":"CVE-2018-18701 binutils: infinite recursion in next_is_type_qual and cplus_demangle_type functions in cp-demangle.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18701.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-18605","severity":"low","public_date":"2018-10-21T00:00:00Z","advisories":[],"bugzilla":"1647403","bugzilla_description":"CVE-2018-18605 binutils: heap-based buffer over-read in sec_merge_hash_lookup in merge.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18605.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18606","severity":"low","public_date":"2018-10-21T00:00:00Z","advisories":[],"bugzilla":"1647415","bugzilla_description":"CVE-2018-18606 binutils: NULL pointer dereference in _bfd_add_merge_section in merge_strings function in merge.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18606.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18607","severity":"low","public_date":"2018-10-21T00:00:00Z","advisories":[],"bugzilla":"1647421","bugzilla_description":"CVE-2018-18607 binutils: NULL pointer dereference in elf_link_input_bfd in elflink.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18607.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18484","severity":"low","public_date":"2018-10-17T00:00:00Z","advisories":[],"bugzilla":"1645958","bugzilla_description":"CVE-2018-18484 binutils: Stack exhaustion in cp-demangle.c allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18484.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-18309","severity":"low","public_date":"2018-10-13T00:00:00Z","advisories":[],"bugzilla":"1639911","bugzilla_description":"CVE-2018-18309 binutils: invalid memory address dereference in read_reloc in reloc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18309.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17794","severity":"low","public_date":"2018-10-02T00:00:00Z","advisories":[],"bugzilla":"1635082","bugzilla_description":"CVE-2018-17794 binutils: NULL pointer dereference in libiberty/cplus-dem.c:work_stuff_copy_to_from() via crafted input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17794.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17358","severity":"low","public_date":"2018-09-19T00:00:00Z","advisories":[],"bugzilla":"1632908","bugzilla_description":"CVE-2018-17358 binutils: invalid memory access in _bfd_stab_section_find_nearest_line in syms.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17358.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17359","severity":null,"public_date":"2018-09-19T00:00:00Z","advisories":[],"bugzilla":"1632914","bugzilla_description":"CVE-2018-17359 binutils: invalid memory access in bfd_zalloc in opncls.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17359.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-17360","severity":"low","public_date":"2018-09-19T00:00:00Z","advisories":[],"bugzilla":"1632921","bugzilla_description":"CVE-2018-17360 binutils: heap-based buffer over-read in bfd_getl32 in libbfd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17360.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17985","severity":"low","public_date":"2018-09-17T00:00:00Z","advisories":[],"bugzilla":"1652723","bugzilla_description":"CVE-2018-17985 binutils: Stack consumption problem caused by the cplus_demangle_type","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17985.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-14038","severity":null,"public_date":"2018-07-12T00:00:00Z","advisories":[],"bugzilla":"1686781","bugzilla_description":"CVE-2018-14038 libbfd: remote dos via crafted file in function aout_32_swap_std_reloc_out in aoutx.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14038.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-13033","severity":"low","public_date":"2018-07-01T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1597436","bugzilla_description":"CVE-2018-13033 binutils: Uncontrolled Resource Consumption in execution of nm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13033.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-10534","severity":"low","public_date":"2018-04-24T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1574696","bugzilla_description":"CVE-2018-10534 binutils: out of bounds memory write in peXXigen.c files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10534.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-10535","severity":"low","public_date":"2018-04-24T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1574697","bugzilla_description":"CVE-2018-10535 binutils: NULL pointer dereference in elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-10372","severity":"low","public_date":"2018-04-14T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1573356","bugzilla_description":"CVE-2018-10372 binutils: Heap-base buffer over-read in dwarf.c:process_cu_tu_index() allows for denial of service via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10372.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10373","severity":"low","public_date":"2018-04-14T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1573365","bugzilla_description":"CVE-2018-10373 binutils: NULL pointer dereference in dwarf2.c:concat_filename() allows for denial of service via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10373.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12641","severity":"low","public_date":"2018-04-13T00:00:00Z","advisories":["RHSA-2019:2075"],"bugzilla":"1594410","bugzilla_description":"CVE-2018-12641 binutils: Stack Exhaustion in the demangling functions provided by libiberty","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["binutils-0:2.27-41.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12641.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12697","severity":"low","public_date":"2018-04-11T00:00:00Z","advisories":["RHSA-2019:2075"],"bugzilla":"1595417","bugzilla_description":"CVE-2018-12697 binutils: NULL pointer dereference in work_stuff_copy_to_from in cplus-dem.c.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["binutils-0:2.27-41.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12697.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12698","severity":"low","public_date":"2018-04-11T00:00:00Z","advisories":[],"bugzilla":"1595419","bugzilla_description":"CVE-2018-12698 binutils: excessive memory consumption in demangle_template in cplus-dem.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12698.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12699","severity":"low","public_date":"2018-04-11T00:00:00Z","advisories":[],"bugzilla":"1595427","bugzilla_description":"CVE-2018-12699 binutils: heap-based buffer overflow in finish_stab in stabs.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12699.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12700","severity":"low","public_date":"2018-04-11T00:00:00Z","advisories":[],"bugzilla":"1595437","bugzilla_description":"CVE-2018-12700 binutils: Stack Exhaustion in debug_write_type in debug.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12700.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12934","severity":"low","public_date":"2018-04-11T00:00:00Z","advisories":[],"bugzilla":"1597853","bugzilla_description":"CVE-2018-12934 binutils: Uncontrolled Resource Consumption in remember_Ktype in cplus-dem.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12934.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-9996","severity":null,"public_date":"2018-04-09T00:00:00Z","advisories":[],"bugzilla":"1566788","bugzilla_description":"CVE-2018-9996 binutils: Stack-overflow in libiberty/cplus-dem.c causes crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9996.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9138","severity":"low","public_date":"2018-03-27T00:00:00Z","advisories":[],"bugzilla":"1564291","bugzilla_description":"CVE-2018-9138 binutils: Stack Exhaustion in the the C++ demangling functions provided by libiberty","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9138.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7643","severity":"low","public_date":"2018-03-01T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1553119","bugzilla_description":"CVE-2018-7643 binutils: Integer overflow in the display_debug_ranges function resulting in crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7643.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7568","severity":"low","public_date":"2018-02-26T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1551771","bugzilla_description":"CVE-2018-7568 binutils: integer overflow via an ELF file with corrupt dwarf1 debug information in libbfd library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7568.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7569","severity":"low","public_date":"2018-02-26T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1551778","bugzilla_description":"CVE-2018-7569 binutils: integer underflow or overflow via an ELF file with a corrupt DWARF FORM block in libbfd library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7569.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7570","severity":"low","public_date":"2018-02-26T00:00:00Z","advisories":[],"bugzilla":"1551785","bugzilla_description":"CVE-2018-7570 binutils: NULL pointer dereference the assign_file_positions_for_non_load_sections function in libbfd library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7570.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7642","severity":"low","public_date":"2018-02-24T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1553115","bugzilla_description":"CVE-2018-7642 binutils: NULL pointer dereference in swap_std_reloc_in function in aoutx.h resulting in crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7642.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8945","severity":"low","public_date":"2018-02-07T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1560827","bugzilla_description":"CVE-2018-8945 binutils: Crash in elf.c:bfd_section_from_shdr() with crafted executable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8945.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6759","severity":"low","public_date":"2018-02-06T00:00:00Z","advisories":[],"bugzilla":"1543244","bugzilla_description":"CVE-2018-6759 binutils: Unchecked strnlen in opncls.c:bfd_get_debug_link_info_1() can allow lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6759.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-6872","severity":"low","public_date":"2018-02-05T00:00:00Z","advisories":[],"bugzilla":"1543969","bugzilla_description":"CVE-2018-6872 binutils: out of bounds read in elf_parse_notes function in elf.c file in libbfd library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6872.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6543","severity":"moderate","public_date":"2018-02-01T00:00:00Z","advisories":[],"bugzilla":"1542275","bugzilla_description":"CVE-2018-6543 binutils:  integer overflow in load_specific_debug_section function in objdump.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-6323","severity":"low","public_date":"2018-01-25T00:00:00Z","advisories":[],"bugzilla":"1539886","bugzilla_description":"CVE-2018-6323 binutils: Integer overflow in elf_object_p function in elfcode.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6323.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7208","severity":"low","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2018:3032"],"bugzilla":"1546622","bugzilla_description":"CVE-2018-7208 binutils: Improper bounds check in coffgen.c:coff_pointerize_aux() allows for denial of service when parsing a crafted COFF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["binutils-0:2.27-34.base.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7208.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17126","severity":"low","public_date":"2017-11-28T00:00:00Z","advisories":[],"bugzilla":"1524498","bugzilla_description":"CVE-2017-17126 binutils: Invalid memory access in the load_debug_section function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17121","severity":"low","public_date":"2017-11-28T00:00:00Z","advisories":[],"bugzilla":"1524501","bugzilla_description":"CVE-2017-17121 binutils: Memory access violation via a crafted COFF binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17121.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17122","severity":"low","public_date":"2017-11-28T00:00:00Z","advisories":[],"bugzilla":"1524505","bugzilla_description":"CVE-2017-17122 binutils: Excessive memory allocation in the dump_relocs_in_section function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17122.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17123","severity":"low","public_date":"2017-11-28T00:00:00Z","advisories":[],"bugzilla":"1524509","bugzilla_description":"CVE-2017-17123 binutils: NULL pointer dereference in the coff_slurp_reloc_table function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17123.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17124","severity":"low","public_date":"2017-11-28T00:00:00Z","advisories":[],"bugzilla":"1524510","bugzilla_description":"CVE-2017-17124 binutils: Heap buffer overflow in the _bfd_coff_read_string_table function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17124.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17125","severity":"low","public_date":"2017-11-15T00:00:00Z","advisories":[],"bugzilla":"1524511","bugzilla_description":"CVE-2017-17125 binutils: Buffer over-read in the _bfd_elf_get_symbol_version_string function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17080","severity":"low","public_date":"2017-11-11T00:00:00Z","advisories":[],"bugzilla":"1524478","bugzilla_description":"CVE-2017-17080 binutils: Heap-based buffer over-read in bfd_getl32","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17080.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16828","severity":"low","public_date":"2017-11-02T00:00:00Z","advisories":[],"bugzilla":"1518591","bugzilla_description":"CVE-2017-16828 binutils: Integer overflow in the display_debug_frames function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16828.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16830","severity":"low","public_date":"2017-11-02T00:00:00Z","advisories":[],"bugzilla":"1518594","bugzilla_description":"CVE-2017-16830 binutils: Segmentation fault in the print_gnu_property_note function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16830.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16831","severity":"low","public_date":"2017-11-02T00:00:00Z","advisories":[],"bugzilla":"1518595","bugzilla_description":"CVE-2017-16831 binutils: Integer overflow in coffgen.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16831.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16826","severity":"low","public_date":"2017-10-31T00:00:00Z","advisories":[],"bugzilla":"1518589","bugzilla_description":"CVE-2017-16826 binutils: Invalid memory access in the coff_slurp_line_table function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16826.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16832","severity":"low","public_date":"2017-10-31T00:00:00Z","advisories":[],"bugzilla":"1518596","bugzilla_description":"CVE-2017-16832 binutils: Segmentation fault in the pe_bfd_read_buildid function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16832.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15996","severity":"low","public_date":"2017-10-27T00:00:00Z","advisories":[],"bugzilla":"1515742","bugzilla_description":"CVE-2017-15996 binutils: Excessive memory allocation in elfcomm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15996.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15938","severity":"low","public_date":"2017-10-24T00:00:00Z","advisories":[],"bugzilla":"1515721","bugzilla_description":"CVE-2017-15938 binutils: Invalid memory read in find_abstract_instance_name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15938.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16827","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":[],"bugzilla":"1518590","bugzilla_description":"CVE-2017-16827 binutils: Invalid free in the aout_get_external_symbols function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16827.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16829","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":[],"bugzilla":"1518592","bugzilla_description":"CVE-2017-16829 binutils: Out-of-bounds read in the _bfd_elf_parse_gnu_properties function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16829.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14934","severity":"low","public_date":"2017-09-27T00:00:00Z","advisories":[],"bugzilla":"1500332","bugzilla_description":"CVE-2017-14934 binutils: Infinite loop in process_debug_info","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14934.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14933","severity":"low","public_date":"2017-09-26T00:00:00Z","advisories":[],"bugzilla":"1500331","bugzilla_description":"CVE-2017-14933 binutils: Infinite loop in read_formatted_entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14933.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15225","severity":"low","public_date":"2017-09-26T00:00:00Z","advisories":[],"bugzilla":"1500679","bugzilla_description":"CVE-2017-15225 binutils: Memory leak in _bfd_dwarf2_cleanup_debug_info","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15225.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14932","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1500330","bugzilla_description":"CVE-2017-14932 binutils: Infinite loop in the decode_line_info","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14932.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15020","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1500372","bugzilla_description":"CVE-2017-15020 binutils: Heap-based buffer overflow in parse_die","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15020.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15023","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1500374","bugzilla_description":"CVE-2017-15023 binutils: NULL pointer dereference in read_formatted_entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15023.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15022","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1500376","bugzilla_description":"CVE-2017-15022 binutils: NULL pointer dereference in dwarf2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15022.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15939","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1510338","bugzilla_description":"CVE-2017-15939 binutils: NULL pointer dereference in the concat_filename","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15939.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15021","severity":"low","public_date":"2017-09-24T00:00:00Z","advisories":[],"bugzilla":"1500377","bugzilla_description":"CVE-2017-15021 binutils: Heap-based buffer over-read in bfd_get_debug_link_info_1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15021.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14930","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500327","bugzilla_description":"CVE-2017-14930 binutils: Memory leak in decode_line_info","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14930.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14729","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1500233","bugzilla_description":"CVE-2017-14729 binutils: Heap buffer overflow in the *_get_synthetic_symtab functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14729.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15025","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1500375","bugzilla_description":"CVE-2017-15025 binutils: Divide-by-zero in decode_line_info","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15025.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15024","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1500378","bugzilla_description":"CVE-2017-15024 binutils: Infinite recursion in find_abstract_instance_name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15024.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14938","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1500339","bugzilla_description":"CVE-2017-14938 binutils: Excessive memory allocation in _bfd_elf_slurp_version_tables","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14938.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14939","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1500340","bugzilla_description":"CVE-2017-14939 binutils: Heap-based buffer over-read in the decode_line_info","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14939.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14940","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1500341","bugzilla_description":"CVE-2017-14940 binutils: NULL pointer dereference in the scan_unit_for_symbols","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14940.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14974","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1500342","bugzilla_description":"CVE-2017-14974 binutils: NULL pointer dereference in the *_get_synthetic_symtab functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14974.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14745","severity":"low","public_date":"2017-09-18T00:00:00Z","advisories":[],"bugzilla":"1500245","bugzilla_description":"CVE-2017-14745 binutils: Integer overflow in the *_get_synthetic_symtab functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14745.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14529","severity":"low","public_date":"2017-09-17T00:00:00Z","advisories":[],"bugzilla":"1499309","bugzilla_description":"CVE-2017-14529 binutils: heap-based buffer over-read in bfd_getl16 function in peXXigen.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14529.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14128","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":[],"bugzilla":"1489061","bugzilla_description":"CVE-2017-14128 binutils: Heap-based buffer over-read in the decode_line_info function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14128.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14130","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":[],"bugzilla":"1489067","bugzilla_description":"CVE-2017-14130 binutils: Heap-based buffer over-read in the _bfd_elf_parse_attributes function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14129","severity":"low","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1489062","bugzilla_description":"CVE-2017-14129 binutils: Heap-based buffer over-read in the read_section function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14129.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13757","severity":"low","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1487760","bugzilla_description":"CVE-2017-13757 binutils: heap-based buffer over-read in elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13757.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14333","severity":"low","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1492129","bugzilla_description":"CVE-2017-14333 binutils: Insuficient input validation in process_version_sections function in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14333.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13716","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1487302","bugzilla_description":"CVE-2017-13716 binutils: Memory leak with the C++ symbol demangler routine in libiberty","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13716.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12967","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1484526","bugzilla_description":"CVE-2017-12967 binutils: Stack-based buffer over-read in getsym function in tekhex.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12967.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13710","severity":"low","public_date":"2017-08-14T00:00:00Z","advisories":[],"bugzilla":"1487294","bugzilla_description":"CVE-2017-13710 binutils: NULL pointer dereference in the setup_group function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13710.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12799","severity":"low","public_date":"2017-08-10T00:00:00Z","advisories":[],"bugzilla":"1480342","bugzilla_description":"CVE-2017-12799 binutils: Heap-based 1 byte buffer over-write in elf_read_notes function in bfd/elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12799.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12459","severity":"moderate","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1483583","bugzilla_description":"CVE-2017-12459 binutils: out of bounds heap write in bfd_mach_o_read_symtab_strtab function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12459.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-12449","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1483594","bugzilla_description":"CVE-2017-12449 binutils: out of bounds heap read in _bfd_vms_save_sized_string function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12449.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12455","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1483599","bugzilla_description":"CVE-2017-12455 binutils: out of bounds heap read in evax_bfd_print_emh function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12455.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12457","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1483601","bugzilla_description":"CVE-2017-12457 binutils: NULL pointer dereference in bfd_make_section_with_flags function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12457.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12458","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1483602","bugzilla_description":"CVE-2017-12458 binutils: out of bounds heap read in nlm_swap_auxiliary_headers_in function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12458.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12450","severity":"moderate","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1483582","bugzilla_description":"CVE-2017-12450 binutils: out of bounds heap write in alpha_vms_object_p function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-12452","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1483596","bugzilla_description":"CVE-2017-12452 binutils: out of bounds heap read in bfd_mach_o_i386_canonicalize_one_reloc function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12452.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12453","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1483597","bugzilla_description":"CVE-2017-12453 binutils: out of bounds heap read in __bfd_vms_slurp_eeom function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12453.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12454","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1483598","bugzilla_description":"CVE-2017-12454 binutils: Arbitrary memory read in _bfd_vms_slurp_egs function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12454.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12456","severity":"low","public_date":"2017-07-21T00:00:00Z","advisories":[],"bugzilla":"1483600","bugzilla_description":"CVE-2017-12456 binutils: out of bounds heap read in read_symbol_stabs_debugging_inf function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12448","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1483581","bugzilla_description":"CVE-2017-12448 binutils: heap use after free in bfd_cache_close function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-12451","severity":"low","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1483595","bugzilla_description":"CVE-2017-12451 binutils: out of bounds stack read in _bfd_xcoff_read_ar_hdr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12451.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9744","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469591","bugzilla_description":"CVE-2017-9744 binutils: Address violation in sh_elf_set_mach_from_flags function when disassembling a corrupt SH binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9744.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9745","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469603","bugzilla_description":"CVE-2017-9745 binutils: Heap buffer over-read in _bfd_vms_slurp_etir function when handling VMS alpha binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9745.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9746","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469608","bugzilla_description":"CVE-2017-9746 binutils: Heap buffer over-read in disassemble_bytes function when disassembling a corrupt binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9746.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9747","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469611","bugzilla_description":"CVE-2017-9747 binutils: Stack-based buffer over-read in ieee_archive_p function while disassembling corrupt IEEE binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9747.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9748","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469616","bugzilla_description":"CVE-2017-9748 binutils: Stack-based buffer over-read in ieee_object_p function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9748.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9749","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469619","bugzilla_description":"CVE-2017-9749 binutils: Global buffer over-read in *regs* macros when disassembling corrupt bfin binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9749.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9750","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469635","bugzilla_description":"CVE-2017-9750 binutils: Global buffer over-read in opcodes/rx-decode.opc when disassembling a corrupt RX binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9750.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9751","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469639","bugzilla_description":"CVE-2017-9751 binutils: Stack-based buffer over-read in opcodes/rl78-decode.opc when disassembling a corrupt RL78 binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9751.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9752","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469643","bugzilla_description":"CVE-2017-9752 binutils: Heap buffer over-read in f_bfd_vms_get_value function when processing a corrupt Alpha VMA binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9752.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9753","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469646","bugzilla_description":"CVE-2017-9753 binutils: Address violation in versados_mkobject function when disassembling a corrupt versados binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9753.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9754","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469649","bugzilla_description":"CVE-2017-9754 binutils: Stack-based buffer over-read in process_otr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9754.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9755","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469657","bugzilla_description":"CVE-2017-9755 binutils: Global buffer over-read in opcodes/i386-dis.c while checking invalid registers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9756","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469663","bugzilla_description":"CVE-2017-9756 binutils: Address violation in aarch64_ext_ldst_reglist function when disassembling corrupt aarch64 binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9756.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9955","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469748","bugzilla_description":"CVE-2017-9955 binutils: heap buffer over-read in get_build_id function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9955.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9954","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469752","bugzilla_description":"CVE-2017-9954 binutils: stack-based buffer over-read in getvalue function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9954.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9742","severity":"low","public_date":"2017-06-19T00:00:00Z","advisories":[],"bugzilla":"1469284","bugzilla_description":"CVE-2017-9742 binutils: Global buffer over-read in print_insn_score16 function while disassembling corrupt score binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9742.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9743","severity":"low","public_date":"2017-06-18T00:00:00Z","advisories":[],"bugzilla":"1469520","bugzilla_description":"CVE-2017-9743 binutils: Global buffer over-read in print_insn_score32 function while disassembling corrupt score binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9743.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9038","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1452167","bugzilla_description":"CVE-2017-9038 binutils: Heap-buffer overflow in the byte_get_little_endian","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9038.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9039","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1452168","bugzilla_description":"CVE-2017-9039 binutils: Memory consumption via many program headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9039.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9040","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1452169","bugzilla_description":"CVE-2017-9040 binutils: NULL pointer dereference in the process_mips_specific_function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9040.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9041","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1452171","bugzilla_description":"CVE-2017-9041 binutils: Heap buffer overflow in the process_mips_specific function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9041.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9042","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1452173","bugzilla_description":"CVE-2017-9042 binutils: Invalid variable type in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9042.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9043","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1452175","bugzilla_description":"CVE-2017-9043 binutils: Shift exponent too large for type unsigned long in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9043.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9044","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1452176","bugzilla_description":"CVE-2017-9044 binutils: Out-of-bounds read in the print_symbol_for_build_attribute function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9044.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8421","severity":"low","public_date":"2017-04-27T00:00:00Z","advisories":[],"bugzilla":"1449555","bugzilla_description":"CVE-2017-8421 binutils: Memory exhaustion in objdump via a crafted PE file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8421.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8392","severity":"low","public_date":"2017-04-22T00:00:00Z","advisories":[],"bugzilla":"1449540","bugzilla_description":"CVE-2017-8392 binutils: NULL pointer dereference in the _bfd_dwarf2_find_nearest_line function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8392.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8393","severity":"low","public_date":"2017-04-22T00:00:00Z","advisories":[],"bugzilla":"1449542","bugzilla_description":"CVE-2017-8393 binutils: Out-of-bounds read due to wrong assumption for objcopy and strip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8393.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8394","severity":"low","public_date":"2017-04-22T00:00:00Z","advisories":[],"bugzilla":"1449546","bugzilla_description":"CVE-2017-8394 binutils: NULL pointer dereference in the _bfd_elf_large_com_section","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8394.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8395","severity":"low","public_date":"2017-04-22T00:00:00Z","advisories":[],"bugzilla":"1449548","bugzilla_description":"CVE-2017-8395 binutils: Out-of-bounds write in the _bfd_generic_get_section_contents function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8395.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8396","severity":"low","public_date":"2017-04-22T00:00:00Z","advisories":[],"bugzilla":"1449550","bugzilla_description":"CVE-2017-8396 binutils: Out-of-bounds read in the existing reloc offset range tests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8396.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8397","severity":"low","public_date":"2017-04-22T00:00:00Z","advisories":[],"bugzilla":"1449552","bugzilla_description":"CVE-2017-8397 binutils: Out-of-bounds read and write while processing binary containing reloc(s) with negative addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8397.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8398","severity":"low","public_date":"2017-04-22T00:00:00Z","advisories":[],"bugzilla":"1449553","bugzilla_description":"CVE-2017-8398 binutils: Out-of-bounds read while dumping the debug information from a corrupt binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8398.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7614","severity":"low","public_date":"2017-04-05T00:00:00Z","advisories":[],"bugzilla":"1440837","bugzilla_description":"CVE-2017-7614 binutils: NULL pointer dereference in bfd_elf_final_link function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7614.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7210","severity":"low","public_date":"2017-02-14T00:00:00Z","advisories":[],"bugzilla":"1435634","bugzilla_description":"CVE-2017-7210 binutils: Heap-based buffer over-reads in objdump","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7210.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6969","severity":"low","public_date":"2017-02-14T00:00:00Z","advisories":[],"bugzilla":"1435648","bugzilla_description":"CVE-2017-6969 binutils: Heap-based buffer over-read in readelf when processing corrupt RL78 binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6969.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7209","severity":"low","public_date":"2017-02-13T00:00:00Z","advisories":[],"bugzilla":"1435632","bugzilla_description":"CVE-2017-7209 binutils: Null pointer dereference in dump_section_as_bytes function in readelf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6965","severity":"moderate","public_date":"2017-02-13T00:00:00Z","advisories":[],"bugzilla":"1435640","bugzilla_description":"CVE-2017-6965 binutils: Heap-based buffer overflow in target_specific_reloc_handling in readelf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6965.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-6966","severity":"moderate","public_date":"2017-02-13T00:00:00Z","advisories":[],"bugzilla":"1435646","bugzilla_description":"CVE-2017-6966 binutils: Use-after-free in target_specific_reloc_handling in readelf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6966.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-18483","severity":"low","public_date":"2017-01-17T00:00:00Z","advisories":[],"bugzilla":"1645957","bugzilla_description":"CVE-2018-18483 binutils: Integer overflow in cplus-dem.c:get_count() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18483.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-7304","severity":"low","public_date":"2016-12-06T00:00:00Z","advisories":[],"bugzilla":"1440833","bugzilla_description":"CVE-2017-7304 binutils: Out-of-bounds read in copy_special_section_fields function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7304.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7301","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1440829","bugzilla_description":"CVE-2017-7301 binutils: Off-by-one error in aout_link_add_symbols function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7301.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7302","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1440830","bugzilla_description":"CVE-2017-7302 binutils: Out-of-bounds read in wap_std_reloc_out function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7302.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7303","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1440832","bugzilla_description":"CVE-2017-7303 binutils: Out-of-bounds read in find_link function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7303.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7227","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1435303","bugzilla_description":"CVE-2017-7227 binutils: Heap-based buffer overflow in ld due to missing null termination","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-170","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7227.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7299","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1440826","bugzilla_description":"CVE-2017-7299 binutils: Out-of-bounds read in bfd_elf_final_link function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7299.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7300","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1440828","bugzilla_description":"CVE-2017-7300 binutils: Heap-buffer overflow in aout_link_add_symbols function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7300.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7223","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":[],"bugzilla":"1435244","bugzilla_description":"CVE-2017-7223 binutils: Global buffer overflow when attempting to unget EOF character","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7223.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7224","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":[],"bugzilla":"1435247","bugzilla_description":"CVE-2017-7224 binutils: Invalid write in find_nearest_line function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7224.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7225","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":[],"bugzilla":"1435287","bugzilla_description":"CVE-2017-7225 binutils: Null pointer dereference and invalid write in find_nearest_line function in addr2line","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7225.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7226","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":[],"bugzilla":"1435300","bugzilla_description":"CVE-2017-7226 binutils: Heap-based buffer over-read in pe_ILF_object_p function in libbfd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-6131","severity":null,"public_date":"2016-06-29T00:00:00Z","advisories":[],"bugzilla":"1352068","bugzilla_description":"CVE-2016-6131 gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-4492","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333377","bugzilla_description":"CVE-2016-4492 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4493","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333383","bugzilla_description":"CVE-2016-4493 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4493.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4491","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1333371","bugzilla_description":"CVE-2016-4491 gcc: Stack overflow due to infinite recursion in d_print_comp","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2016-4489","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333336","bugzilla_description":"CVE-2016-4489 gcc: Invalid write due to integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4490","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333366","bugzilla_description":"CVE-2016-4490 gcc: Write access violation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4487","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333330","bugzilla_description":"CVE-2016-4487 gcc: Invalid write due to a use-after-free to array btypevec","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4488","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333332","bugzilla_description":"CVE-2016-4488 gcc: Invalid write due to a use-after-free to array ktypevec","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-2226","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1333322","bugzilla_description":"CVE-2016-2226 gcc: Exploitable buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8538","severity":"low","public_date":"2015-12-07T00:00:00Z","advisories":[],"bugzilla":"1291299","bugzilla_description":"CVE-2015-8538 libdwarf: Out-of-bounds read in dwarf_leb.c","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8538.json"},{"CVE":"CVE-2014-9939","severity":"low","public_date":"2015-07-31T00:00:00Z","advisories":[],"bugzilla":"1250129","bugzilla_description":"CVE-2014-9939 binutils: buffer overflow in ihex.c","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9939.json"},{"CVE":"CVE-2014-8737","severity":"moderate","public_date":"2014-11-04T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162655","bugzilla_description":"CVE-2014-8737 binutils: directory traversal vulnerability","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8737.json"},{"CVE":"CVE-2014-8738","severity":"low","public_date":"2014-11-02T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162666","bugzilla_description":"CVE-2014-8738 binutils: out of bounds memory write","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-787","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8738.json"},{"CVE":"CVE-2014-8503","severity":"low","public_date":"2014-10-30T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162607","bugzilla_description":"CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-121","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8503.json"},{"CVE":"CVE-2014-8502","severity":"low","public_date":"2014-10-28T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162594","bugzilla_description":"CVE-2014-8502 binutils: heap overflow in objdump when parsing a crafted ELF/PE binary file (incomplete fix for CVE-2014-8485)","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-122","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8502.json"},{"CVE":"CVE-2014-8504","severity":"low","public_date":"2014-10-27T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162621","bugzilla_description":"CVE-2014-8504 binutils: stack overflow in the SREC parser","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-121","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8504.json"},{"CVE":"CVE-2014-8501","severity":"low","public_date":"2014-10-26T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162570","bugzilla_description":"CVE-2014-8501 binutils: out-of-bounds write when parsing specially crafted PE executable","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-787","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8501.json"},{"CVE":"CVE-2014-8485","severity":"moderate","public_date":"2014-10-24T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1157276","bugzilla_description":"CVE-2014-8485 binutils: lack of range checking leading to controlled write in _bfd_elf_setup_sections()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-822","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8485.json"},{"CVE":"CVE-2014-8484","severity":"moderate","public_date":"2014-10-20T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1156272","bugzilla_description":"CVE-2014-8484 binutils: invalid read flaw in libbfd","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-839","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8484.json"},{"CVE":"CVE-2012-3509","severity":"moderate","public_date":"2012-08-29T00:00:00Z","advisories":[],"bugzilla":"849693","bugzilla_description":"CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3509.json"},{"CVE":"CVE-2005-1704","severity":"low","public_date":"2005-05-25T00:00:00Z","advisories":["RHBA-2005:675","RHSA-2005:763","RHSA-2005:673","RHSA-2006:0368","RHSA-2005:709","RHSA-2006:0354","RHSA-2005:801","RHSA-2005:659"],"bugzilla":"1617660","bugzilla_description":"CVE-2005-1704 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.63","binutils-0:2.14.90.0.4-39","elfutils-0:0.94.1-2","binutils-0:2.15.92.0.2-15","elfutils-0:0.97.1-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1704.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/biosdevname_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/biosdevname_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/biosdevname_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bison-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bison-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bison-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bison-runtime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bison-runtime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bison-runtime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bison_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bison_security_api_results.json
new file mode 100644
index 0000000..cebd741
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bison_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24979","severity":"moderate","public_date":"2020-09-04T00:00:00Z","advisories":[],"bugzilla":"1877772","bugzilla_description":"CVE-2020-24979 bison: Buffer overflow in src/symtab.c via crafted input file redefining the EOF token can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24979.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-24980","severity":"moderate","public_date":"2020-09-04T00:00:00Z","advisories":[],"bugzilla":"1877779","bugzilla_description":"CVE-2020-24980 bison: Assertion failure in src/parse-gram.c could result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24980.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-24240","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1872737","bugzilla_description":"CVE-2020-24240 bison: use-after-free via crafted input file containing a NULL byte can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24240.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-14150","severity":"moderate","public_date":"2020-04-05T00:00:00Z","advisories":[],"bugzilla":"1847608","bugzilla_description":"CVE-2020-14150 bison: allows attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-617)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14150.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-console-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-console-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-console-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-fangsongti-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-fangsongti-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-fangsongti-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-fixed-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-fixed-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-fixed-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-fonts-compat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-fonts-compat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-fonts-compat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-lucida-typewriter-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-lucida-typewriter-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bitmap-lucida-typewriter-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blas-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blas-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blas-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blas64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blas64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blas64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blivet-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blivet-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blivet-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blktrace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blktrace_security_api_results.json
new file mode 100644
index 0000000..d70c1fb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/blktrace_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10689","severity":"low","public_date":"2018-05-02T00:00:00Z","advisories":["RHSA-2019:2162"],"bugzilla":"1575119","bugzilla_description":"CVE-2018-10689 blktrace: buffer overflow in the dev_map_read function in btt/devmap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["blktrace-0:1.0.5-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10689.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-cups_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-cups_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-cups_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-hid2hci_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-hid2hci_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-hid2hci_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-libs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-libs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-libs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-obexd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-obexd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez-obexd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez_security_api_results.json
new file mode 100644
index 0000000..ba49af8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bluez_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9770","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1879820","bugzilla_description":"CVE-2020-9770 bluez: BLESA bluetooth attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9770.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2020-27153","severity":"moderate","public_date":"2020-09-06T00:00:00Z","advisories":[],"bugzilla":"1884817","bugzilla_description":"CVE-2020-27153 bluez: double free in gatttool client disconnect callback handler in src/shared/att.c could lead to DoS or RCE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27153.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10134","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1832216","bugzilla_description":"CVE-2020-10134 bluetooth: Method Confusion Pairing Vulnerability in LE Secure Connections and BR/EDR Secure Simple Pairing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-223|CWE-356)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10134.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2020-0556","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:4001"],"bugzilla":"1814293","bugzilla_description":"CVE-2020-0556 bluez: Improper access control in subsystem could result in privilege escalation and DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-400|CWE-266)","affected_packages":["bluez-0:5.44-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0556.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2018-10910","severity":"low","public_date":"2018-07-20T18:50:00Z","advisories":["RHSA-2020:1101","RHSA-2020:1912"],"bugzilla":"1606203","bugzilla_description":"CVE-2018-10910 bluez: failure in disabling Bluetooth discoverability in certain cases may lead to the unauthorized pairing of Bluetooth devices","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["bluez-0:5.50-3.el8","bluez-0:5.44-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10910.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-1000250","severity":"moderate","public_date":"2017-09-12T00:00:00Z","advisories":["RHSA-2017:2685"],"bugzilla":"1489446","bugzilla_description":"CVE-2017-1000250 bluez: Out-of-bounds heap read in service_search_attr_req function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["bluez-0:5.44-4.el7_4","bluez-0:4.66-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000250.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-9797","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401520","bugzilla_description":"CVE-2016-9797 bluez: buffer over-read in l2cap_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9797.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9798","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401522","bugzilla_description":"CVE-2016-9798 bluez: use-after-free in conf_opt()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9798.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9799","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401524","bugzilla_description":"CVE-2016-9799 bluez: buffer overflow in pklg_read_hci()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9799.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9800","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401527","bugzilla_description":"CVE-2016-9800 bluez: buffer overflow in pin_code_reply_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9800.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9801","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401538","bugzilla_description":"CVE-2016-9801 bluez: buffer overflow in set_ext_ctrl()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9801.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9802","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401541","bugzilla_description":"CVE-2016-9802 bluez: buffer over-read in l2cap_packet()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9802.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9803","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401543","bugzilla_description":"CVE-2016-9803 bluez: out-of-bounds read in le_meta_ev_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9803.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9804","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401544","bugzilla_description":"CVE-2016-9804 bluez: buffer overflow in commands_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9918","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1403881","bugzilla_description":"CVE-2016-9918 bluez: Out of bounds stack read in packet_hexdump()","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9918.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-9917","severity":"low","public_date":"2016-11-14T00:00:00Z","advisories":[],"bugzilla":"1403879","bugzilla_description":"CVE-2016-9917 bluez: Heap-based buffer overflow vulnerability in read_n()","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9917.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-7837","severity":"low","public_date":"2016-09-10T00:00:00Z","advisories":[],"bugzilla":"1425117","bugzilla_description":"CVE-2016-7837 bluez: Buffer overflow in parse_line function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2006-6899","severity":"moderate","public_date":"2006-12-28T00:00:00Z","advisories":["RHSA-2007:0065"],"bugzilla":"1618254","bugzilla_description":"CVE-2006-6899 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bluez-utils-0:2.10-2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-6899.json"},{"CVE":"CVE-2006-0670","severity":"low","public_date":"2006-02-05T00:00:00Z","advisories":[],"bugzilla":"187945","bugzilla_description":"CVE-2006-0670 bluez-hcidump Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0670.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bnd-maven-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bnd-maven-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bnd-maven-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bogofilter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bogofilter_security_api_results.json
new file mode 100644
index 0000000..c4d0a50
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bogofilter_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-6354","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":[],"bugzilla":"1360743","bugzilla_description":"CVE-2016-6354 flex: buffer overflow in generated code (yy_get_next_buffer)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6354.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bolt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bolt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bolt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boom-boot-conf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boom-boot-conf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boom-boot-conf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boom-boot-grub2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boom-boot-grub2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boom-boot-grub2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boom-boot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boom-boot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boom-boot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-atomic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-atomic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-atomic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-build_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-build_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-build_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-chrono_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-chrono_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-chrono_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-container_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-container_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-container_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-context_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-context_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-context_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-coroutine_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-coroutine_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-coroutine_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-date-time_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-date-time_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-date-time_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-fiber_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-fiber_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-fiber_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-graph-mpich_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-graph-mpich_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-graph-mpich_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-graph-openmpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-graph-openmpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-graph-openmpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-graph_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-graph_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-graph_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-iostreams_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-iostreams_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-iostreams_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-jam_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-jam_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-jam_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-locale_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-locale_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-locale_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-log_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-log_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-log_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-math_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-math_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-math_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-mpich-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-mpich-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-mpich-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-mpich-python3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-mpich-python3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-mpich-python3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-mpich_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-mpich_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-mpich_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-numpy3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-numpy3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-numpy3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-openmpi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-openmpi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-openmpi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-openmpi-python3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-openmpi-python3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-openmpi-python3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-openmpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-openmpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-openmpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-program-options_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-program-options_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-program-options_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-python3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-python3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-python3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-python3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-python3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-python3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-random_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-random_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-random_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-regex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-regex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-regex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-serialization_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-serialization_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-serialization_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-signals_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-signals_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-signals_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-stacktrace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-stacktrace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-stacktrace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-system_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-system_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-system_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-thread_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-thread_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-thread_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-timer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-timer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-timer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-type_erasure_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-type_erasure_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-type_erasure_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-wave_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-wave_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost-wave_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost_security_api_results.json
new file mode 100644
index 0000000..da1e650
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/boost_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-0252","severity":"low","public_date":"2013-02-01T00:00:00Z","advisories":[],"bugzilla":"907481","bugzilla_description":"CVE-2013-0252 boost: Certain invalid UTF-8 sequences accepted as valid","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0252.json"},{"CVE":"CVE-2012-2677","severity":"moderate","public_date":"2012-06-05T00:00:00Z","advisories":["RHSA-2013:0668"],"bugzilla":"828856","bugzilla_description":"CVE-2012-2677 boost: ordered_malloc() overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["boost-0:1.33.1-16.el5_9","boost-0:1.41.0-15.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2677.json"},{"CVE":"CVE-2008-0171","severity":"low","public_date":"2008-01-11T00:00:00Z","advisories":["RHSA-2012:0305"],"bugzilla":"428316","bugzilla_description":"CVE-2008-0171 boost regular expression memory corruption flaws","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["boost-0:1.33.1-15.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0171.json"},{"CVE":"CVE-2008-0172","severity":"low","public_date":"2008-01-11T00:00:00Z","advisories":["RHSA-2012:0305"],"bugzilla":"428320","bugzilla_description":"CVE-2008-0172 boost regular expression NULL dereference flaw","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["boost-0:1.33.1-15.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0172.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-arbitrator_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-arbitrator_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-arbitrator_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-site_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-site_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-site_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/booth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpftool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpftool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpftool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpftrace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpftrace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpftrace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-algeti-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-algeti-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-algeti-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-chveulebrivi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-chveulebrivi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-chveulebrivi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-classic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-classic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-classic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-courier-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-courier-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-courier-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-courier-s-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-courier-s-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-courier-s-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-dedaena-block-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-dedaena-block-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-dedaena-block-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-dejavu-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-dejavu-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-dejavu-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-elite-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-elite-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-elite-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-excelsior-caps-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-excelsior-caps-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-excelsior-caps-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-excelsior-condenced-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-excelsior-condenced-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-excelsior-condenced-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-excelsior-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-excelsior-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-excelsior-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-glaho-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-glaho-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-glaho-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-gorda-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-gorda-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-gorda-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-ingiri-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-ingiri-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-ingiri-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-irubaqidze-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-irubaqidze-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-irubaqidze-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-mikhail-stephan-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-mikhail-stephan-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-mikhail-stephan-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-mrgvlovani-caps-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-mrgvlovani-caps-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-mrgvlovani-caps-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-mrgvlovani-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-mrgvlovani-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-mrgvlovani-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nateli-caps-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nateli-caps-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nateli-caps-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nateli-condenced-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nateli-condenced-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nateli-condenced-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nateli-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nateli-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nateli-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nino-medium-cond-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nino-medium-cond-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nino-medium-cond-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nino-medium-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nino-medium-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-nino-medium-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-medium-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-medium-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-medium-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-modern-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-modern-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-modern-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-regular-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-regular-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-sans-regular-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-serif-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-serif-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-serif-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-serif-modern-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-serif-modern-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-serif-modern-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-ucnobi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-ucnobi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bpg-ucnobi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero-nautilus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero-nautilus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero-nautilus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brasero_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brlapi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brlapi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brlapi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brlapi-java_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brlapi-java_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brlapi-java_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brlapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brlapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brlapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-at-spi2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-at-spi2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-at-spi2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-dracut_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-dracut_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-dracut_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-espeak-ng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-espeak-ng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-espeak-ng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-xw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-xw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty-xw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty_security_api_results.json
new file mode 100644
index 0000000..fabbd44
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brltty_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2008-3279","severity":"low","public_date":"2008-06-12T00:00:00Z","advisories":["RHSA-2010:0181"],"bugzilla":"457942","bugzilla_description":"CVE-2008-3279 brltty: insecure relative RPATH","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["brltty-0:3.7.2-4.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3279.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brotli-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brotli-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brotli-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brotli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brotli_security_api_results.json
new file mode 100644
index 0000000..2ad1baf
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/brotli_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8927","severity":"moderate","public_date":"2020-08-27T00:00:00Z","advisories":[],"bugzilla":"1879225","bugzilla_description":"CVE-2020-8927 brotli: buffer overflow when input chunk is larger than 2GiB","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8927.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsdtar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsdtar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsdtar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsf-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsf-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsf-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsh-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsh-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsh-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsh-manual_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsh-manual_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsh-manual_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsh_security_api_results.json
new file mode 100644
index 0000000..92a0af9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bsh_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-2510","severity":"important","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2035","RHSA-2016:0540","RHSA-2016:1376","RHSA-2016:1135","RHSA-2016:0539","RHSA-2019:1545"],"bugzilla":"1310647","bugzilla_description":"CVE-2016-2510 bsh2: remote code execution via deserialization","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2510.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bubblewrap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bubblewrap_security_api_results.json
new file mode 100644
index 0000000..db470f2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bubblewrap_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-5291","severity":"moderate","public_date":"2020-03-31T00:00:00Z","advisories":[],"bugzilla":"1823504","bugzilla_description":"CVE-2020-5291 bubblewrap: privilege escalation in some kernel configurations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5291.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N","cvss3_score":"7.2"},{"CVE":"CVE-2019-12439","severity":"moderate","public_date":"2019-03-01T00:00:00Z","advisories":["RHSA-2019:1833"],"bugzilla":"1695963","bugzilla_description":"CVE-2019-12439 bubblewrap: temporary directory misuse as mount point","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["bubblewrap-0:0.3.3-2.el7at"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12439.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/buildah-tests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/buildah-tests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/buildah-tests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/buildah_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/buildah_security_api_results.json
new file mode 100644
index 0000000..39676b6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/buildah_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10696","severity":"important","public_date":"2020-03-26T00:00:00Z","advisories":["RHSA-2020:1926","RHSA-2020:1396","RHSA-2020:1449","RHSA-2020:1931","RHSA-2020:1932","RHSA-2020:1401","RHSA-2020:2116","RHSA-2020:2117"],"bugzilla":"1817651","bugzilla_description":"CVE-2020-10696 buildah: Crafted input tar file may lead to local file overwrite during image build process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["buildah-0:1.11.6-11.el7_8","podman-0:1.0.2-4.dev.git96ccc2e.rhaos4.1.el8","podman-0:1.6.4-10.rhaos4.3.el8","podman-0:1.6.4-18.el7_8","container-tools:2.0-8020020200420175838.28c38760","podman-0:1.4.2-6.rhaos4.2.el8","container-tools:1.0-8020020200420104655.28c38760","container-tools:rhel8-8020020200420180128.28c38760"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10696.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-1702","severity":"low","public_date":"2020-01-20T00:00:00Z","advisories":["RHSA-2020:1650","RHSA-2020:1234","RHSA-2020:1937","RHSA-2020:2681","RHBA-2020:0492","RHSA-2020:2218","RHSA-2020:2116","RHSA-2020:1227"],"bugzilla":"1792796","bugzilla_description":"CVE-2020-1702 containers/image: Container images read entire image manifest into memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["cri-o-0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7","buildah-0:1.11.6-11.el7_8","podman-0:1.6.4-16.el7_8","openshift4/ose-pod:v4.3.2-202002112006","skopeo-1:0.1.40-11.el7_8","cri-o-0:1.11.16-0.9.dev.rhaos3.11.git6d43aae.el7","docker-2:1.13.1-161.git64e9980.el7_8","container-tools:rhel8-8020020200324071414.0d58ad57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1702.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2020-8945","severity":"moderate","public_date":"2020-01-16T00:00:00Z","advisories":["RHSA-2020:2027","RHSA-2020:2992","RHSA-2020:1234","RHSA-2020:3167","RHSA-2020:1231","RHSA-2020:1396","RHSA-2020:1230","RHSA-2020:0679","RHSA-2020:0934","RHSA-2020:1402","RHSA-2020:0863","RHSA-2020:0697","RHSA-2020:0689","RHSA-2020:1940","RHSA-2020:2413","RHSA-2020:2117","RHBA-2020:1255","RHSA-2020:0928","RHSA-2020:1937","RHSA-2020:2927"],"bugzilla":"1795838","bugzilla_description":"CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["atomic-openshift-0:3.11.248-1.git.0.92ee8ac.el7","openshift-clients-0:4.2.32-202005020632.git.1.1b0fab9.el8","skopeo-1:0.1.32-7.git1715c90.rhaos4.2.el8","podman-0:1.6.4-10.rhaos4.3.el8","openshift4/ose-docker-builder:v4.3.7-202003161611","skopeo-1:0.1.40-7.el7_8","podman-0:1.6.4-18.el7_8","openshift4/ose-cli:v4.3.7-202003161611","openshift4/ose-cli-artifacts:v4.3.7-202003161611","openshift4/ose-openshift-controller-manager-rhel7:v4.2.34-202005252115","cri-o-0:1.16.4-1.dev.rhaos4.3.git9238eee.el7","openshift4/ose-openshift-controller-manager-rhel7:v4.3.9-202003230345","cri-o-0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7","openshift-0:4.3.10-202003300855.git.0.da48c1d.el8","docker-2:1.13.1-161.git64e9980.el7_8","skopeo-1:0.1.40-4.rhaos.el8","machine-config-daemon-0:4.3.10-202003300415.git.0.56d6ae0.el8","buildah-0:1.11.6-8.el7_8","skopeo-1:0.1.32-6.git1715c90.el8_0","openshift4/ose-cluster-policy-controller-rhel7:v4.4.0-202004261927","openshift4/ose-docker-builder:v4.2.28-202004061218","openshift-clients-0:4.3.10-202003300001.git.0.e43c148.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8945.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byacc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byacc_security_api_results.json
new file mode 100644
index 0000000..8c79546
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byacc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2008-3196","severity":"low","public_date":"2008-07-08T00:00:00Z","advisories":[],"bugzilla":"455031","bugzilla_description":"CVE-2008-3196 byacc: Potential out of bounds of allocated stack access","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3196.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byaccj_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byaccj_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byaccj_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byteman-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byteman-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byteman-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byteman_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byteman_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/byteman_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bzip2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bzip2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bzip2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bzip2-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bzip2-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bzip2-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bzip2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bzip2_security_api_results.json
new file mode 100644
index 0000000..f673c54
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/bzip2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-12900","severity":"low","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1724459","bugzilla_description":"CVE-2019-12900 bzip2: out-of-bounds write in function BZ2_decompress","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12900.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-5399","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:2598"],"bugzilla":"1358395","bugzilla_description":"CVE-2016-5399 php: Improper error handling in bzread()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-390","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php-0:5.4.16-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5399.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-3189","severity":"low","public_date":"2016-06-20T00:00:00Z","advisories":[],"bugzilla":"1319648","bugzilla_description":"CVE-2016-3189 bzip2: heap use after free in bzip2recover","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3189.json"},{"CVE":"CVE-2010-0405","severity":"important","public_date":"2010-09-20T00:00:00Z","advisories":["RHSA-2010:0858","RHSA-2010:0703"],"bugzilla":"627882","bugzilla_description":"CVE-2010-0405 bzip2: integer overflow flaw in BZ2_decompress","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["bzip2-0:1.0.3-6.el5_5","bzip2-0:1.0.5-7.el6_0","bzip2-0:1.0.2-14.EL3","bzip2-0:1.0.2-16.el4_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0405.json"},{"CVE":"CVE-2008-1372","severity":"moderate","public_date":"2008-03-18T00:00:00Z","advisories":["RHSA-2008:0893"],"bugzilla":"438118","bugzilla_description":"CVE-2008-1372 bzip2: crash on malformed archive file","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bzip2-0:1.0.2-12.EL3","bzip2-0:1.0.3-4.el5_2","bzip2-0:1.0.1-5.EL2.1","bzip2-0:1.0.2-14.el4_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1372.json"},{"CVE":"CVE-2005-0758","severity":"low","public_date":"2005-04-22T00:00:00Z","advisories":["RHSA-2005:357","RHSA-2005:474"],"bugzilla":"1617573","bugzilla_description":"CVE-2005-0758 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-12.rhel3","gzip-0:1.3.3-15.rhel4","bzip2-0:1.0.2-11.EL3.4","bzip2-0:1.0.2-13.EL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0758.json"},{"CVE":"CVE-2005-0953","severity":"low","public_date":"2005-03-30T00:00:00Z","advisories":["RHSA-2005:474"],"bugzilla":"1617590","bugzilla_description":"CVE-2005-0953 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bzip2-0:1.0.2-11.EL3.4","bzip2-0:1.0.2-13.EL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0953.json"},{"CVE":"CVE-2005-1260","severity":"low","public_date":"2005-02-15T00:00:00Z","advisories":["RHSA-2005:474"],"bugzilla":"1617617","bugzilla_description":"CVE-2005-1260 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bzip2-0:1.0.2-11.EL3.4","bzip2-0:1.0.2-13.EL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1260.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/c-ares-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/c-ares-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/c-ares-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/c-ares_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/c-ares_security_api_results.json
new file mode 100644
index 0000000..4df7285
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/c-ares_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14354","severity":"moderate","public_date":"2020-08-02T00:00:00Z","advisories":[],"bugzilla":"1866838","bugzilla_description":"CVE-2020-14354 c-ares: ares_destroy() with pending ares_getaddrinfo() leads to Use-After-Free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14354.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2017-1000381","severity":"moderate","public_date":"2017-06-20T00:00:00Z","advisories":["RHSA-2017:2908"],"bugzilla":"1463132","bugzilla_description":"CVE-2017-1000381 c-ares: NAPTR parser out of bounds access","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-nodejs6-nodejs-0:6.11.3-2.el6","rh-nodejs6-nodejs-0:6.11.3-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000381.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-5180","severity":"moderate","public_date":"2016-09-29T00:00:00Z","advisories":["RHSA-2017:0002"],"bugzilla":"1380463","bugzilla_description":"CVE-2016-5180 c-ares: Single byte out of buffer write","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-122","affected_packages":["rh-nodejs4-nodejs-0:4.6.2-4.el6","rh-nodejs4-nodejs-0:4.6.2-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/c2esp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/c2esp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/c2esp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ca-certificates_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ca-certificates_security_api_results.json
new file mode 100644
index 0000000..e93685f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ca-certificates_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-0743","severity":"important","public_date":"2013-01-03T00:00:00Z","advisories":["RHSA-2013:0213"],"bugzilla":"890605","bugzilla_description":"nss: Dis-trust TURKTRUST mis-issued *.google.com certificate","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["nss-0:3.13.6-2.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0743.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cachefilesd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cachefilesd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cachefilesd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo-gobject-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo-gobject-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo-gobject-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo-gobject_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo-gobject_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo-gobject_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo_security_api_results.json
new file mode 100644
index 0000000..85f7497
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairo_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-6461","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1669629","bugzilla_description":"CVE-2019-6461 cairo: assertion problem in _cairo_arc_in_direction in cairo-arc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6461.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2019-6462","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1671399","bugzilla_description":"CVE-2019-6462 cairo: infinite loop in the function _arc_error_normalized in the file cairo-arc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6462.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2018-19876","severity":"low","public_date":"2018-11-13T00:00:00Z","advisories":[],"bugzilla":"1661454","bugzilla_description":"CVE-2018-19876 cairo: Invalid free in cairo_ft_apply_variations() resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19876.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-18064","severity":"moderate","public_date":"2018-10-08T00:00:00Z","advisories":[],"bugzilla":"1637792","bugzilla_description":"CVE-2018-18064 cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-9814","severity":"low","public_date":"2017-06-21T00:00:00Z","advisories":[],"bugzilla":"1472788","bugzilla_description":"CVE-2017-9814 cairo: Out-of-bounds read due to mishandling of unexpected malloc(0) call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7475","severity":"low","public_date":"2017-04-23T00:00:00Z","advisories":[],"bugzilla":"1447949","bugzilla_description":"CVE-2017-7475 cairo: NULL pointer dereference with a crafted font file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7475.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9082","severity":"low","public_date":"2016-10-05T00:00:00Z","advisories":[],"bugzilla":"1312337","bugzilla_description":"CVE-2016-9082 cairo: Out of bounds read in read_png/write_png in cairo-png.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9082.json"},{"CVE":"CVE-2016-3190","severity":"moderate","public_date":"2016-03-10T00:00:00Z","advisories":["RHBA-2015:2116"],"bugzilla":"1318977","bugzilla_description":"CVE-2016-3190 cairo: out of bounds read in fill_xrgb32_lerp_opaque_spans","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-839->(CWE-125|CWE-787)","affected_packages":["cairo-0:1.14.2-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3190.json"},{"CVE":"CVE-2014-1528","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":[],"bugzilla":"1096585","bugzilla_description":"CVE-2014-1528 Mozilla: Out-of-bounds write in Cairo (MFSA 2014-41)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1528.json"},{"CVE":"CVE-2014-5116","severity":null,"public_date":"2014-02-14T00:00:00Z","advisories":[],"bugzilla":"1124500","bugzilla_description":"CVE-2014-5116 cairo: NULL pointer dereference in cairo_image_surface_get_data()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5116.json"},{"CVE":"CVE-2007-5503","severity":"important","public_date":"2007-11-29T00:00:00Z","advisories":["RHSA-2007:1078"],"bugzilla":"387431","bugzilla_description":"CVE-2007-5503 cairo integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["cairo-0:1.2.4-3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5503.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairomm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairomm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairomm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairomm-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairomm-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairomm-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairomm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairomm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cairomm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cal10n-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cal10n-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cal10n-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cal10n_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cal10n_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cal10n_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cargo-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cargo-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cargo-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cargo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cargo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cargo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdi-api-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdi-api-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdi-api-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdi-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdi-api_security_api_results.json
new file mode 100644
index 0000000..6fc6db0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdi-api_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-26160","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1883371","bugzilla_description":"CVE-2020-26160 jwt-go: access restriction bypass vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26160.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdparanoia-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdparanoia-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdparanoia-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdparanoia-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdparanoia-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdparanoia-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdparanoia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdparanoia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdparanoia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdrdao_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdrdao_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cdrdao_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/celt051-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/celt051-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/celt051-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/celt051_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/celt051_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/celt051_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/certmonger_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/certmonger_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/certmonger_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cgdcbxd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cgdcbxd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cgdcbxd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cglib-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cglib-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cglib-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cglib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cglib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cglib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/check-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/check-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/check-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/check_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/check_security_api_results.json
new file mode 100644
index 0000000..711f6e9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/check_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-10782","severity":"moderate","public_date":"2020-01-27T00:00:00Z","advisories":[],"bugzilla":"1796858","bugzilla_description":"CVE-2019-10782 checkstyle: XML External Entity Injection due to an incomplete fix for CVE-2019-9658","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-14955","severity":"moderate","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1497971","bugzilla_description":"CVE-2017-14955 check-mk: Mishandles certain errors within the failed-login save feature because of a race condition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14955.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-11507","severity":"moderate","public_date":"2017-07-06T00:00:00Z","advisories":[],"bugzilla":"1524949","bugzilla_description":"CVE-2017-11507 check-mk: Stored XSS vulnerability using the internal server error handler","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2014-5338","severity":"important","public_date":"2014-05-05T00:00:00Z","advisories":["RHSA-2015:1495"],"bugzilla":"1132337","bugzilla_description":"CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["check-mk-0:1.2.6p1-3.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5338.json"},{"CVE":"CVE-2014-5339","severity":"important","public_date":"2014-05-05T00:00:00Z","advisories":["RHSA-2015:1495"],"bugzilla":"1132337","bugzilla_description":"CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["check-mk-0:1.2.6p1-3.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5339.json"},{"CVE":"CVE-2014-5340","severity":"important","public_date":"2014-05-05T00:00:00Z","advisories":["RHSA-2015:1495"],"bugzilla":"1132337","bugzilla_description":"CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["check-mk-0:1.2.6p1-3.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5340.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/checkpolicy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/checkpolicy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/checkpolicy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cheese-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cheese-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cheese-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cheese_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cheese_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cheese_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chkconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chkconfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chkconfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chrome-gnome-shell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chrome-gnome-shell_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chrome-gnome-shell_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chrony_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chrony_security_api_results.json
new file mode 100644
index 0000000..7ab951c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chrony_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14367","severity":"moderate","public_date":"2020-08-19T17:10:00Z","advisories":[],"bugzilla":"1870298","bugzilla_description":"CVE-2020-14367 chrony: Insecure writing to PID file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59->CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14367.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2016-1567","severity":"low","public_date":"2016-01-20T00:00:00Z","advisories":[],"bugzilla":"1297472","bugzilla_description":"CVE-2016-1567 chrony: missing key check allows impersonation between authenticated peers (VU#357792)","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-304","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1567.json"},{"CVE":"CVE-2015-1853","severity":"moderate","public_date":"2015-04-07T00:00:00Z","advisories":["RHSA-2015:2241"],"bugzilla":"1209572","bugzilla_description":"CVE-2015-1853 chrony: authentication doesn't protect symmetric associations against DoS attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-345","affected_packages":["chrony-0:2.1.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1853.json"},{"CVE":"CVE-2015-1821","severity":"moderate","public_date":"2015-04-07T00:00:00Z","advisories":["RHSA-2015:2241"],"bugzilla":"1209631","bugzilla_description":"CVE-2015-1821 chrony: Heap out of bound write in address filter","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"(CWE-122|CWE-787)","affected_packages":["chrony-0:2.1.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1821.json"},{"CVE":"CVE-2015-1822","severity":"moderate","public_date":"2015-04-07T00:00:00Z","advisories":["RHSA-2015:2241"],"bugzilla":"1209632","bugzilla_description":"CVE-2015-1822 chrony: uninitialized pointer in cmdmon reply slots","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":["chrony-0:2.1.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1822.json"},{"CVE":"CVE-2014-0021","severity":"low","public_date":"2014-01-16T00:00:00Z","advisories":[],"bugzilla":"1054790","bugzilla_description":"CVE-2014-0021 chrony: DDoS via amplification in cmdmon protocol","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0021.json"},{"CVE":"CVE-2012-4502","severity":"moderate","public_date":"2013-08-09T00:00:00Z","advisories":[],"bugzilla":"846392","bugzilla_description":"CVE-2012-4502 CVE-2012-4503 chrony: Two security flaws fixed in chrony-1.29 release","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4502.json"},{"CVE":"CVE-2012-4503","severity":"moderate","public_date":"2013-08-09T00:00:00Z","advisories":[],"bugzilla":"846392","bugzilla_description":"CVE-2012-4502 CVE-2012-4503 chrony: Two security flaws fixed in chrony-1.29 release","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4503.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chrpath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chrpath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/chrpath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cifs-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cifs-utils_security_api_results.json
new file mode 100644
index 0000000..56acca3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cifs-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14342","severity":"low","public_date":"2020-09-03T00:00:00Z","advisories":[],"bugzilla":"1860884","bugzilla_description":"CVE-2020-14342 cifs-utils: shell command injection in mount.cifs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14342.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2014-2830","severity":"moderate","public_date":"2014-04-08T00:00:00Z","advisories":[],"bugzilla":"1086224","bugzilla_description":"CVE-2014-2830 cifs-utils: stack-based buffer overflow flaw in pam_cifscreds","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2830.json"},{"CVE":"CVE-2012-1586","severity":"low","public_date":"2012-03-21T00:00:00Z","advisories":["RHSA-2012:0902"],"bugzilla":"807252","bugzilla_description":"CVE-2012-1586 samba / cifs-utils: mount.cifs file existence disclosure vulnerability","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["cifs-utils-0:4.8.1-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1586.json"},{"CVE":"CVE-2011-2724","severity":"low","public_date":"2011-07-29T00:00:00Z","advisories":["RHSA-2011:1220","RHSA-2011:1221"],"bugzilla":"726691","bugzilla_description":"CVE-2011-2724 samba, cifs-utils: mount.cifs incorrect fix for CVE-2010-0547","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["samba3x-0:3.5.4-0.83.el5_7.2","cifs-utils-0:4.8.1-2.el6_1.2","samba-0:3.5.6-86.el6_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2724.json"},{"CVE":"CVE-2011-1678","severity":"low","public_date":"2011-03-03T00:00:00Z","advisories":["RHSA-2011:1220","RHSA-2011:1221","RHSA-2011:1219"],"bugzilla":"695925","bugzilla_description":"CVE-2011-1678 samba/cifs-utils: mount.cifs and umount.cifs fail to anticipate RLIMIT_FSIZE","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["samba-0:3.0.33-0.34.el4","samba3x-0:3.5.4-0.83.el5_7.2","cifs-utils-0:4.8.1-2.el6_1.2","samba-0:3.0.33-3.29.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1678.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cim-schema_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cim-schema_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cim-schema_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cjose-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cjose-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cjose-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cjose_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cjose_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cjose_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-analyzer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-analyzer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-analyzer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-tools-extra_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-tools-extra_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang-tools-extra_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clang_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cldr-emoji-annotation_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cldr-emoji-annotation_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cldr-emoji-annotation_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-dracut_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-dracut_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-dracut_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-luks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-luks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-luks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-systemd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-systemd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-systemd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-udisks2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-udisks2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis-udisks2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clevis_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clippy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clippy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clippy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cloud-init_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cloud-init_security_api_results.json
new file mode 100644
index 0000000..42799e2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cloud-init_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8632","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3898"],"bugzilla":"1798728","bugzilla_description":"CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["cloud-init-0:19.4-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8632.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8631","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3898"],"bugzilla":"1798731","bugzilla_description":"CVE-2020-8631 cloud-init: Use of random.choice when generating random password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["cloud-init-0:19.4-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8631.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-0816","severity":"moderate","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:0597"],"bugzilla":"1680165","bugzilla_description":"CVE-2019-0816 cloud-init: extra ssh keys added to authorized_keys on the Azure platform","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["cloud-init-0:18.2-1.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-10896","severity":"low","public_date":"2018-07-06T00:00:00Z","advisories":["RHSA-2020:3644","RHSA-2020:3050","RHSA-2020:3898"],"bugzilla":"1598831","bugzilla_description":"CVE-2018-10896 cloud-init: default configuration disabled deletion of SSH host keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-321","affected_packages":["cloud-init-0:18.5-12.el8_2.3","cloud-init-0:19.4-7.el7","cloud-init-0:19.4-1.el8.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10896.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2012-6639","severity":"important","public_date":"2014-01-07T00:00:00Z","advisories":[],"bugzilla":"1073591","bugzilla_description":"CVE-2012-6639 cloud-init: insecure transmission of EC2 instance data can lead to root privilege escalation","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6639.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cloud-utils-growpart_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cloud-utils-growpart_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cloud-utils-growpart_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clucene-contribs-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clucene-contribs-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clucene-contribs-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clucene-core-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clucene-core-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clucene-core-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clucene-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clucene-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clucene-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-bin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-bin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-bin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-lib-ccs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-lib-ccs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-lib-ccs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-lib-general_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-lib-general_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-lib-general_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-lib-pcs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-lib-pcs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clufter-lib-pcs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gst2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gst2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gst2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gst3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gst3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gst3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gst3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gst3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gst3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gtk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gtk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gtk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter_security_api_results.json
new file mode 100644
index 0000000..41e47aa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/clutter_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-15058","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":[],"bugzilla":"1816324","bugzilla_description":"CVE-2019-15058 stbi: heap-based buffer overflow in stbi__tga_load function in stb_image.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15058.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2018-16981","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":[],"bugzilla":"1639548","bugzilla_description":"CVE-2018-16981 stbi: Heap-based buffer overflow in stb_image.h:stbi__out_gif_code() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2015-3213","severity":"moderate","public_date":"2015-06-02T00:00:00Z","advisories":["RHSA-2015:1510"],"bugzilla":"1227098","bugzilla_description":"CVE-2015-3213 Gnome clutter: screenlock bypass by performing certain mouse gestures","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-460->CWE-305","affected_packages":["clutter-0:1.14.4-12.el7_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3213.json"},{"CVE":"CVE-2013-2190","severity":"low","public_date":"2013-06-18T00:00:00Z","advisories":[],"bugzilla":"980111","bugzilla_description":"CVE-2013-2190 clutter: Improper translation of hierarchy events (gnome-shell crash after system resume)","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2190.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-rpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-rpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake-rpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmake_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmirror_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmirror_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cmirror_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-bridge_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-bridge_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-bridge_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-composer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-composer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-composer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-dashboard_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-dashboard_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-dashboard_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-machines_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-machines_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-machines_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-packagekit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-packagekit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-packagekit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-pcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-pcp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-pcp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-podman_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-podman_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-podman_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-session-recording_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-session-recording_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-session-recording_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-storaged_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-storaged_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-storaged_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-system_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-system_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-system_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-ws_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-ws_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit-ws_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit_security_api_results.json
new file mode 100644
index 0000000..f9476f4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cockpit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-8203","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:3807","RHSA-2020:3370"],"bugzilla":"1857412","bugzilla_description":"CVE-2020-8203 nodejs-lodash: prototype pollution in zipObjectDeep function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","distributed-tracing/jaeger-query-rhel7:1.17.6-1","ovirt-web-ui-0:1.6.4-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10139","severity":"moderate","public_date":"2019-05-17T00:00:00Z","advisories":["RHSA-2019:2433","RHSA-2019:2437"],"bugzilla":"1709829","bugzilla_description":"CVE-2019-10139 cockpit-ovirt: admin and appliance passwords saved in plain text variable file during HE deployment","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","cockpit-ovirt-0:0.13.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2019-3804","severity":"moderate","public_date":"2018-12-13T00:00:00Z","advisories":["RHSA-2019:0482","RHSA-2019:1571","RHSA-2019:1569"],"bugzilla":"1663567","bugzilla_description":"CVE-2019-3804 cockpit: Crash when parsing invalid base64 headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["rhvm-appliance-0:4.3-20190605.0.el7","cockpit-0:173.2-1.el7","redhat-virtualization-host-0:4.3-20190610.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/codemodel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/codemodel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/codemodel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cogl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cogl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cogl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cogl-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cogl-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cogl-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cogl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cogl_security_api_results.json
new file mode 100644
index 0000000..af463c0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cogl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-15058","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":[],"bugzilla":"1816324","bugzilla_description":"CVE-2019-15058 stbi: heap-based buffer overflow in stbi__tga_load function in stb_image.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15058.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2018-16981","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":[],"bugzilla":"1639548","bugzilla_description":"CVE-2018-16981 stbi: Heap-based buffer overflow in stb_image.h:stbi__out_gif_code() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/color-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/color-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/color-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-devel-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-devel-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-devel-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-gtk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-gtk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-gtk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/colord_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-exiv2-026_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-exiv2-026_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-exiv2-026_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-guile18-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-guile18-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-guile18-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-guile18_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-guile18_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-guile18_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-libgfortran-48_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-libgfortran-48_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-libgfortran-48_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-libpthread-nonshared_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-libpthread-nonshared_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-libpthread-nonshared_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-libtiff3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-libtiff3_security_api_results.json
new file mode 100644
index 0000000..052a54a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-libtiff3_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19210","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":[],"bugzilla":"1649385","bugzilla_description":"CVE-2018-19210 libtiff: NULL pointer dereference in TIFFWriteDirectorySec function in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19210.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18661","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1644448","bugzilla_description":"CVE-2018-18661 libtiff: tiff2bw tool failed memory allocation leads to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18661.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17795","severity":"low","public_date":"2018-10-02T00:00:00Z","advisories":[],"bugzilla":"1635091","bugzilla_description":"CVE-2018-17795 libtiff: Heap-based buffer overflow in tiff2pdf.c:t2p_write_pdf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-17100","severity":"low","public_date":"2018-09-16T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1631069","bugzilla_description":"CVE-2018-17100 libtiff: Integer overflow in multiply_ms in tools/ppm2tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17100.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-17101","severity":"low","public_date":"2018-09-16T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1631078","bugzilla_description":"CVE-2018-17101 libtiff: Two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17101.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-17000","severity":"low","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1630004","bugzilla_description":"CVE-2018-17000 libtiff: NULL pointer dereference in function _TIFFmemcmp at tif_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17000.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-15209","severity":"moderate","public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1614051","bugzilla_description":"CVE-2018-15209 libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16335","severity":"moderate","public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1624981","bugzilla_description":"CVE-2018-16335 libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16335.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14373","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609400","bugzilla_description":"CVE-2018-14373 libtiff: NULL dereference in TIFFFindField in tif_dirinfo.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14373.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14374","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609406","bugzilla_description":"CVE-2018-14374 libtiff: NULL dereference in unixErrorHandler in tif_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14374.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14375","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609411","bugzilla_description":"CVE-2018-14375 libtiff: NULL dereference in TIFFRGBAImageOK in tif_getimage.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14375.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14378","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609417","bugzilla_description":"CVE-2018-14378 libtiff: NULL dereference in TIFFWriteBufferSetup in tif_write.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14378.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12900","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2019:2053","RHSA-2019:3419"],"bugzilla":"1595575","bugzilla_description":"CVE-2018-12900 libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libtiff-0:4.0.3-32.el7","libtiff-0:4.0.9-15.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12900.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-7456","severity":"low","public_date":"2018-02-24T00:00:00Z","advisories":["RHSA-2019:2053","RHSA-2019:2051"],"bugzilla":"1556708","bugzilla_description":"CVE-2018-7456 libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["compat-libtiff3-0:3.9.4-12.el7","libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5784","severity":"low","public_date":"2018-01-18T00:00:00Z","advisories":[],"bugzilla":"1537740","bugzilla_description":"CVE-2018-5784 libtiff: uncontrolled resource consumption in TIFFSetDirectory function in tif_dir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5784.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17942","severity":"low","public_date":"2017-12-28T00:00:00Z","advisories":[],"bugzilla":"1529524","bugzilla_description":"CVE-2017-17942 libtiff: Heap-based buffer overflow in PackBitsEncode function in tif_packbits.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-17095","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":[],"bugzilla":"1524284","bugzilla_description":"CVE-2017-17095 libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16232","severity":"low","public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1516189","bugzilla_description":"CVE-2017-16232 libtiff: Memory leaks in tif_open.c, tif_lzw.c, and tif_aux.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13726","severity":"low","public_date":"2017-08-21T00:00:00Z","advisories":[],"bugzilla":"1488886","bugzilla_description":"CVE-2017-13726 libtiff: Reachable assertion abort in the function TIFFWriteDirectorySec()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13726.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13727","severity":"low","public_date":"2017-08-21T00:00:00Z","advisories":[],"bugzilla":"1488887","bugzilla_description":"CVE-2017-13727 libtiff: Reachable assertion abort in the function TIFFWriteDirectoryTagSubifd()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13727.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12944","severity":"low","public_date":"2017-08-06T00:00:00Z","advisories":[],"bugzilla":"1487202","bugzilla_description":"CVE-2017-12944 libtiff: Mishandled memory allocation for short files in the TIFFReadDirEntryArray function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12944.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11613","severity":null,"public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475530","bugzilla_description":"CVE-2017-11613 libtiff: Memory leak via corrupt td_imagelength in TIFFOpen function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11613.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11335","severity":"moderate","public_date":"2017-07-14T00:00:00Z","advisories":[],"bugzilla":"1474356","bugzilla_description":"CVE-2017-11335 libtiff: Heap-based buffer overflow in tiff2pdf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11335.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-9935","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469725","bugzilla_description":"CVE-2017-9935 libtiff: Heap-based buffer overflow in t2p_write_pdf function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9935.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9936","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469728","bugzilla_description":"CVE-2017-9936 libtiff: memory leak in tif_jbig.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9936.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9937","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469732","bugzilla_description":"CVE-2017-9937 libtiff: memory malloc failure in tif_jbig.c could cause DOS.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9937.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10688","severity":"low","public_date":"2017-06-29T00:00:00Z","advisories":[],"bugzilla":"1470241","bugzilla_description":"CVE-2017-10688 libtiff: Assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10688.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9147","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1454655","bugzilla_description":"CVE-2017-9147 libtiff: Out of bounds read in _TIFFVGetField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9147.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9117","severity":"moderate","public_date":"2017-05-07T00:00:00Z","advisories":[],"bugzilla":"1456756","bugzilla_description":"CVE-2017-9117 libtiff: Heap-based buffer over-read in bmp2tiff","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9117.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9403","severity":"low","public_date":"2017-04-20T00:00:00Z","advisories":[],"bugzilla":"1458902","bugzilla_description":"CVE-2017-9403 libtiff: Memory leak in TIFFReadDirEntryLong8Array","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9403.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9404","severity":"low","public_date":"2017-04-20T00:00:00Z","advisories":[],"bugzilla":"1458904","bugzilla_description":"CVE-2017-9404 libtiff: Memory leak in OJPEGReadHeaderInfoSecTablesQTable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9404.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7595","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441248","bugzilla_description":"CVE-2017-7595 libtiff: Divide-by-zero in JPEGSetupEncode (tiff_jpeg.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7595.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7596","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441250","bugzilla_description":"CVE-2017-7596 libtiff: Float out of range issue in tif_dir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7596.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7597","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441252","bugzilla_description":"CVE-2017-7597 libtiff: Float out of range issue in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7597.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7598","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441254","bugzilla_description":"CVE-2017-7598 libtiff: Divide-by-zero in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7598.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7599","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441259","bugzilla_description":"CVE-2017-7599 libtiff: Unsigned short out of range in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7599.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7600","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441260","bugzilla_description":"CVE-2017-7600 libtiff: Unsigned char out of range in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7600.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7601","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441261","bugzilla_description":"CVE-2017-7601 libtiff: Signed integer overflow in tif_jpeg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7601.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7602","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441263","bugzilla_description":"CVE-2017-7602 libtiff: Signed integer overflow in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7602.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5563","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1416109","bugzilla_description":"CVE-2017-5563 libtiff: Heap-buffer overflow in LZWEncode tif_lzw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5563.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5225","severity":"moderate","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1412716","bugzilla_description":"CVE-2017-5225 libtiff: Heap-buffer overflow in tools/tiffcp via crafted BitsPerSample value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5225.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-7592","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441240","bugzilla_description":"CVE-2017-7592 libtiff: Left shift of unsigned char without a cast","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-704","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7592.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7593","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441246","bugzilla_description":"CVE-2017-7593 libtiff: tif_rawdata not properly initialized in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7593.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7594","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441247","bugzilla_description":"CVE-2017-7594 libtiff: Memory leak in OJPEGReadHeaderInfoSecTablesDcTable function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7594.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10094","severity":"moderate","public_date":"2016-12-20T00:00:00Z","advisories":[],"bugzilla":"1410119","bugzilla_description":"CVE-2016-10094 libtiff: Off-by-one error in t2p_readwrite_pdf_image_tile() causing heap buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10094.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10095","severity":null,"public_date":"2016-12-04T00:00:00Z","advisories":[],"bugzilla":"1410063","bugzilla_description":"CVE-2016-10095 libtiff: Stack-based buffer overflow in _TIFFVGetField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10095.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-10092","severity":"moderate","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1410067","bugzilla_description":"CVE-2016-10092 libtiff: Heap-based buffer overflow in _TIFFFax3fillruns","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10092.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10270","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438441","bugzilla_description":"CVE-2016-10270 libtiff: Heap-based buffer overflow in tiff_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10270.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10269","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438443","bugzilla_description":"CVE-2016-10269 libtiff: Heap-based buffer overflow in tiff_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10269.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10267","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438449","bugzilla_description":"CVE-2016-10267 libtiff: Divide-by-zero in tif_ojpeg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10267.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10271","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438453","bugzilla_description":"CVE-2016-10271 libtiff: Heap-based buffer overflow in tif_fax3.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10271.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10272","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438458","bugzilla_description":"CVE-2016-10272 libtiff: Heap-based buffer overflow in tif_next.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10272.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10268","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1438447","bugzilla_description":"CVE-2016-10268 libtiff: Integer underflow in tiffcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10268.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10266","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1438472","bugzilla_description":"CVE-2016-10266 libtiff: Divide-by-zero in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10266.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10093","severity":"moderate","public_date":"2016-11-27T00:00:00Z","advisories":[],"bugzilla":"1410116","bugzilla_description":"CVE-2016-10093 libtiff: Integer overflow in DECLAREreadFunc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10093.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9453","severity":"moderate","public_date":"2016-11-18T00:00:00Z","advisories":[],"bugzilla":"1397723","bugzilla_description":"CVE-2016-9453 libtiff: Out-of-bounds access in t2p_readwrite_pdf_image_tile()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9453.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9448","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1397734","bugzilla_description":"CVE-2016-9448 libtiff: Null pointer dereference in TIFFFetchNormalTag() (regression of CVE-2016-9297)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9532","severity":"low","public_date":"2016-11-11T00:00:00Z","advisories":[],"bugzilla":"1397726","bugzilla_description":"CVE-2016-9532 libtiff: Multiple uint32 overflows leading to heap buffer over-read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9532.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9273","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1395164","bugzilla_description":"CVE-2016-9273 libtiff: Out-of-bounds heap read in cpStrips","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9273.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9297","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1395264","bugzilla_description":"CVE-2016-9297 libtiff: Out-of-bounds heap read in _TIFFPrintField (tif_print.c:127)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-170","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9297.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9535","severity":"moderate","public_date":"2016-11-04T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397755","bugzilla_description":"CVE-2016-9535 libtiff: Predictor heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-5652","severity":"moderate","public_date":"2016-10-25T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1389222","bugzilla_description":"CVE-2016-5652 libtiff: tiff2pdf JPEG Compression Tables Heap Buffer Overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-5875","severity":"important","public_date":"2016-10-25T00:00:00Z","advisories":[],"bugzilla":"1389228","bugzilla_description":"CVE-2016-5875 libtiff: PixarLogDecode Heap Buffer Overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5875.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-8331","severity":"moderate","public_date":"2016-10-25T00:00:00Z","advisories":[],"bugzilla":"1389229","bugzilla_description":"CVE-2016-8331 libtiff: FAX IFD Entry Parsing Type Confusion","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-9539","severity":"moderate","public_date":"2016-10-14T00:00:00Z","advisories":[],"bugzilla":"1397767","bugzilla_description":"CVE-2016-9539 libtiff: Out-of-bounds read in readContigTilesIntoBuffer()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9539.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9538","severity":"moderate","public_date":"2016-10-08T00:00:00Z","advisories":[],"bugzilla":"1397765","bugzilla_description":"CVE-2016-9538 libtiff: Integer overflow leads to reading undefined buffer in readContigStripsIntoBuffer()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9538.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9540","severity":"moderate","public_date":"2016-10-08T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397768","bugzilla_description":"CVE-2016-9540 libtiff: cpStripToTile heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9540.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9534","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397751","bugzilla_description":"CVE-2016-9534 libtiff: TIFFFlushData1 heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9534.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9536","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397758","bugzilla_description":"CVE-2016-9536 libtiff: t2p_process_jpeg_strip heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9537","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397760","bugzilla_description":"CVE-2016-9537 libtiff: Out-of-bounds write vulnerabilities in tools/tiffcrop.c","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9537.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9533","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397769","bugzilla_description":"CVE-2016-9533 libtiff: PixarLog horizontalDifference heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9533.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6223","severity":"moderate","public_date":"2016-07-10T00:00:00Z","advisories":[],"bugzilla":"1356867","bugzilla_description":"CVE-2016-6223 libtiff: Out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6223.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-5322","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346683","bugzilla_description":"CVE-2016-5322 libtiff: Out-of-bounds read in extractContigSamplesBytes() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5322.json"},{"CVE":"CVE-2016-5320","severity":"important","public_date":"2016-06-15T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1346687","bugzilla_description":"CVE-2016-5320 libtiff: Out-of-bounds write in PixarLogDecode() function in tif_pixarlog.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-5317","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346689","bugzilla_description":"CVE-2016-5317 libtiff: Out-of-bounds write in PixarLogDecode() function in libtiff.so","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5317.json"},{"CVE":"CVE-2016-5316","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346690","bugzilla_description":"CVE-2016-5316 libtiff: Out-of-bounds read in PixarLogCleanup() function in tif_pixarlog.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5316.json"},{"CVE":"CVE-2016-5315","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346694","bugzilla_description":"CVE-2016-5315 libtiff: Out-of-bounds read in setByteArray() function in tif_dir.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5315.json"},{"CVE":"CVE-2016-5321","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346695","bugzilla_description":"CVE-2016-5321 libtiff: tiffcrop readSeparateTilesIntoBuffer() memory corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5321.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-5323","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346696","bugzilla_description":"CVE-2016-5323 libtiff: more tiffcrop readSeparateTilesIntoBuffer() memory corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-5314","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346697","bugzilla_description":"CVE-2016-5314 libtiff: Out-of-bounds write in PixarLogDecode() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5314.json"},{"CVE":"CVE-2016-5102","severity":"moderate","public_date":"2016-05-30T00:00:00Z","advisories":[],"bugzilla":"1343407","bugzilla_description":"CVE-2016-5102 libtiff: Buffer overflow in readgifimage()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5102.json"},{"CVE":"CVE-2016-5318","severity":"moderate","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1344068","bugzilla_description":"CVE-2016-5318 libtiff: Stack-based buffer overflow in thumbnail's _TIFFVGetField function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5318.json"},{"CVE":"CVE-2016-5319","severity":"moderate","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1344069","bugzilla_description":"CVE-2016-5319 libtiff: Heap-based buffer overflow in bmp2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5319.json"},{"CVE":"CVE-2016-3990","severity":"important","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1326246","bugzilla_description":"CVE-2016-3990 libtiff: out-of-bounds write in horizontalDifference8()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3990.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3991","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1326249","bugzilla_description":"CVE-2016-3991 libtiff: out-of-bounds write in loadImage() function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3991.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-3633","severity":"low","public_date":"2016-04-11T00:00:00Z","advisories":[],"bugzilla":"1326255","bugzilla_description":"CVE-2016-3633 libtiff: out-of-bounds read in the _setrow function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3633.json"},{"CVE":"CVE-2016-3623","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325089","bugzilla_description":"CVE-2016-3623 libtiff: divide by zero in the rgb2ycybr tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3623.json"},{"CVE":"CVE-2016-3624","severity":"low","public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325090","bugzilla_description":"CVE-2016-3624 libtiff: out of bounds write in the rgb2ycybr tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3624.json"},{"CVE":"CVE-2016-3625","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325091","bugzilla_description":"CVE-2016-3625 libtiff: out of bounds read in the tiff2bw tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3625.json"},{"CVE":"CVE-2016-3945","severity":"moderate","public_date":"2016-04-08T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1325093","bugzilla_description":"CVE-2016-3945 libtiff: out-of-bounds write in the tiff2rgba tool","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3945.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3632","severity":"moderate","public_date":"2016-04-08T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1325095","bugzilla_description":"CVE-2016-3632 libtiff: out-of-bounds write in _TIFFVGetField function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3632.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3658","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1326257","bugzilla_description":"CVE-2016-3658 libtiff: out-of-bounds read in the TIFFWriteDirectoryTagLongLong8Array function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3658.json"},{"CVE":"CVE-2016-3634","severity":"low","public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1326267","bugzilla_description":"CVE-2016-3634 libtiff: out-of-bounds read in the tagCompare function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3634.json"},{"CVE":"CVE-2016-3619","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316569","bugzilla_description":"CVE-2016-3619 libtiff: bmp2tiff DumpModeEncode OOB read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3619.json"},{"CVE":"CVE-2016-3620","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316859","bugzilla_description":"CVE-2016-3620 libtiff: Out-of-bound read in ZIPEncode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3620.json"},{"CVE":"CVE-2016-3631","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316872","bugzilla_description":"CVE-2016-3631 libtiff: thumbnail tool out-of-bounds read vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3631.json"},{"CVE":"CVE-2016-3621","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1324822","bugzilla_description":"CVE-2016-3621 libtiff: out of bounds read in the bmp2tiff tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3621.json"},{"CVE":"CVE-2016-3622","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1324823","bugzilla_description":"CVE-2016-3622 libtiff: Division by zero in fpAcc function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3622.json"},{"CVE":"CVE-2016-3186","severity":"moderate","public_date":"2016-03-30T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1319666","bugzilla_description":"CVE-2016-3186 libtiff: buffer overflow in gif2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3186.json"},{"CVE":"CVE-2015-8870","severity":"moderate","public_date":"2015-01-28T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1402778","bugzilla_description":"CVE-2015-8870 libtiff: Integer overflow in tools/bmp2tiff.c","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-190","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-openssl10_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-openssl10_security_api_results.json
new file mode 100644
index 0000000..db3c262
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compat-openssl10_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-1968","severity":"low","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877458","bugzilla_description":"CVE-2020-1968 openssl: Information exposure when DH secret are reused across multiple TLS connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-1967","severity":"important","public_date":"2020-04-21T00:00:00Z","advisories":[],"bugzilla":"1823670","bugzilla_description":"CVE-2020-1967 openssl: Segmentation fault in SSL_check_chain causes denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1967.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1551","severity":"low","public_date":"2019-12-06T00:00:00Z","advisories":[],"bugzilla":"1780995","bugzilla_description":"CVE-2019-1551 openssl: Integer overflow in RSAZ modular exponentiation on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1551.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-1547","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752090","bugzilla_description":"CVE-2019-1547 openssl: side-channel weak encryption vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-602","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-1563","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752100","bugzilla_description":"CVE-2019-1563 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-1543","severity":"low","public_date":"2019-03-06T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1695954","bugzilla_description":"CVE-2019-1543 openssl: ChaCha20-Poly1305 with long nonces","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-1559","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:2304","RHSA-2019:2439","RHSA-2019:3929","RHSA-2019:2437","RHSA-2019:2471"],"bugzilla":"1683804","bugzilla_description":"CVE-2019-1559 openssl: 0-byte record padding oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-0:1.0.1e-58.el6_10","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-5407","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3932","RHSA-2019:0483","RHSA-2019:2125","RHSA-2019:3929","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1645695","bugzilla_description":"CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7_6.1","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-0735","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1644356","bugzilla_description":"CVE-2018-0735 openssl: timing side channel attack in the ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0734","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:3700","RHSA-2019:3932","RHSA-2019:2304","RHSA-2019:3933","RHSA-2019:3935","RHBA-2019:3303"],"bugzilla":"1644364","bugzilla_description":"CVE-2018-0734 openssl: timing side channel attack in the DSA signature algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compiler-rt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compiler-rt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/compiler-rt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/composer-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/composer-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/composer-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/conmon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/conmon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/conmon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/conntrack-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/conntrack-tools_security_api_results.json
new file mode 100644
index 0000000..6fa8bb5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/conntrack-tools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-6496","severity":"moderate","public_date":"2014-03-24T00:00:00Z","advisories":[],"bugzilla":"1253755","bugzilla_description":"CVE-2015-6496 conntrackd crash on unexpected network traffic","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6496.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/container-exception-logger_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/container-exception-logger_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/container-exception-logger_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/container-selinux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/container-selinux_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/container-selinux_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/container-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/container-tools_security_api_results.json
new file mode 100644
index 0000000..dd7a2c4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/container-tools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14370","severity":"moderate","public_date":"2020-09-22T00:00:00Z","advisories":[],"bugzilla":"1874268","bugzilla_description":"CVE-2020-14370 podman: environment variables leak between containers when started via Varlink or Docker-compatible REST API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14370.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-10749","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:2684","RHSA-2020:2443","RHSA-2020:2592","RHSA-2020:3194","RHSA-2020:2403"],"bugzilla":"1833220","bugzilla_description":"CVE-2020-10749 containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["openshift4/ose-multus-cni:v4.5.0-202007012112.p0","containernetworking-plugins-0:0.8.3-3.el7_8","containernetworking-plugins-0:0.8.6-1.rhaos4.3.el7","openshift4/ose-container-networking-plugins-rhel7:v4.5.0-202007012112.p0","container-native-virtualization/kubevirt-ssp-operator:v2.4.0-71","container-native-virtualization/virt-api:v2.4.0-58"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10749.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.0"},{"CVE":"CVE-2020-10756","severity":"moderate","public_date":"2020-05-27T00:00:00Z","advisories":["RHSA-2020:3586","RHSA-2020:4059"],"bugzilla":"1835986","bugzilla_description":"CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["virt:rhel-8020020200909224913.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10756.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-1983","severity":"moderate","public_date":"2020-04-02T00:00:00Z","advisories":["RHBA-2020:3172","RHSA-2020:4079","RHSA-2020:3053","RHSA-2020:4290"],"bugzilla":"1829825","bugzilla_description":"CVE-2020-1983 QEMU: slirp: use-after-free in ip_reass() function in ip_input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["qemu-kvm-10:1.5.3-175.el7_9.1","container-tools:rhel8-8020120200601155013.ffd2803a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1983.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-10696","severity":"important","public_date":"2020-03-26T00:00:00Z","advisories":["RHSA-2020:1926","RHSA-2020:1396","RHSA-2020:1449","RHSA-2020:1931","RHSA-2020:1932","RHSA-2020:1401","RHSA-2020:2116","RHSA-2020:2117"],"bugzilla":"1817651","bugzilla_description":"CVE-2020-10696 buildah: Crafted input tar file may lead to local file overwrite during image build process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["buildah-0:1.11.6-11.el7_8","podman-0:1.0.2-4.dev.git96ccc2e.rhaos4.1.el8","podman-0:1.6.4-10.rhaos4.3.el8","podman-0:1.6.4-18.el7_8","container-tools:2.0-8020020200420175838.28c38760","podman-0:1.4.2-6.rhaos4.2.el8","container-tools:1.0-8020020200420104655.28c38760","container-tools:rhel8-8020020200420180128.28c38760"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10696.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-1726","severity":"low","public_date":"2020-02-11T00:00:00Z","advisories":["RHSA-2020:1650","RHSA-2020:0680"],"bugzilla":"1801152","bugzilla_description":"CVE-2020-1726 podman: incorrectly allows existing files in volumes to be overwritten by a container when it is created","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["podman-0:1.6.4-7.el8","container-tools:rhel8-8020020200324071414.0d58ad57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1726.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-8608","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:2774","RHSA-2020:2730","RHSA-2020:2773","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:2342","RHSA-2020:1352","RHBA-2020:0527","RHSA-2020:1351","RHSA-2020:1208","RHSA-2020:0889","RHSA-2020:1209","RHSA-2020:2844","RHSA-2020:1379","RHSA-2020:1403","RHSA-2020:3040","RHSA-2020:1292"],"bugzilla":"1798453","bugzilla_description":"CVE-2020-8608 QEMU: Slirp: potential OOB access due to unsafe snprintf() usages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-160.el7_6.7","virt:rhel-8020020200601195459.4cda2c84","slirp4netns-0:0.3.0-8.el7_7","qemu-kvm-ma-10:2.12.0-33.el7_7.3","slirp4netns-0:0.4.2-4.git21fdece.el8","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-10:1.5.3-167.el7_7.6","qemu-kvm-10:1.5.3-173.el7_8.1","virt:rhel-8000020200526192422.f8e95b4e","qemu-kvm-2:0.12.1.2-2.506.el6_10.7","qemu-kvm-ma-10:2.12.0-44.el7_8.1","container-tools:rhel8-8010120200326094405.f8993c42"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-1702","severity":"low","public_date":"2020-01-20T00:00:00Z","advisories":["RHSA-2020:1650","RHSA-2020:1234","RHSA-2020:1937","RHSA-2020:2681","RHBA-2020:0492","RHSA-2020:2218","RHSA-2020:2116","RHSA-2020:1227"],"bugzilla":"1792796","bugzilla_description":"CVE-2020-1702 containers/image: Container images read entire image manifest into memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["cri-o-0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7","buildah-0:1.11.6-11.el7_8","podman-0:1.6.4-16.el7_8","openshift4/ose-pod:v4.3.2-202002112006","skopeo-1:0.1.40-11.el7_8","cri-o-0:1.11.16-0.9.dev.rhaos3.11.git6d43aae.el7","docker-2:1.13.1-161.git64e9980.el7_8","container-tools:rhel8-8020020200324071414.0d58ad57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1702.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2020-8945","severity":"moderate","public_date":"2020-01-16T00:00:00Z","advisories":["RHSA-2020:2027","RHSA-2020:2992","RHSA-2020:1234","RHSA-2020:3167","RHSA-2020:1231","RHSA-2020:1396","RHSA-2020:1230","RHSA-2020:0679","RHSA-2020:0934","RHSA-2020:1402","RHSA-2020:0863","RHSA-2020:0697","RHSA-2020:0689","RHSA-2020:1940","RHSA-2020:2413","RHSA-2020:2117","RHBA-2020:1255","RHSA-2020:0928","RHSA-2020:1937","RHSA-2020:2927"],"bugzilla":"1795838","bugzilla_description":"CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["atomic-openshift-0:3.11.248-1.git.0.92ee8ac.el7","openshift-clients-0:4.2.32-202005020632.git.1.1b0fab9.el8","skopeo-1:0.1.32-7.git1715c90.rhaos4.2.el8","podman-0:1.6.4-10.rhaos4.3.el8","openshift4/ose-docker-builder:v4.3.7-202003161611","skopeo-1:0.1.40-7.el7_8","podman-0:1.6.4-18.el7_8","openshift4/ose-cli:v4.3.7-202003161611","openshift4/ose-cli-artifacts:v4.3.7-202003161611","openshift4/ose-openshift-controller-manager-rhel7:v4.2.34-202005252115","cri-o-0:1.16.4-1.dev.rhaos4.3.git9238eee.el7","openshift4/ose-openshift-controller-manager-rhel7:v4.3.9-202003230345","cri-o-0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7","openshift-0:4.3.10-202003300855.git.0.da48c1d.el8","docker-2:1.13.1-161.git64e9980.el7_8","skopeo-1:0.1.40-4.rhaos.el8","machine-config-daemon-0:4.3.10-202003300415.git.0.56d6ae0.el8","buildah-0:1.11.6-8.el7_8","skopeo-1:0.1.32-6.git1715c90.el8_0","openshift4/ose-cluster-policy-controller-rhel7:v4.4.0-202004261927","openshift4/ose-docker-builder:v4.2.28-202004061218","openshift-clients-0:4.3.10-202003300001.git.0.e43c148.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8945.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7039","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:2730","RHSA-2020:1344","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:1360","RHSA-2020:2342","RHSA-2020:1352","RHSA-2020:1351","RHSA-2020:1296","RHSA-2020:0889","RHSA-2020:0775","RHSA-2020:1116","RHSA-2020:1358","RHSA-2020:0348","RHBA-2020:0390","RHSA-2020:1150"],"bugzilla":"1791551","bugzilla_description":"CVE-2020-7039 QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-173.el7","slirp4netns-0:0.3.0-8.el7_7","container-tools:1.0-8010020200206144344.c294d161","qemu-kvm-ma-10:2.12.0-33.el7_7.3","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","virt:rhel-8000020200305185300.f8e95b4e","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-ma-10:2.12.0-44.el7","qemu-kvm-rhev-10:2.12.0-44.el7","container-tools:rhel8-8010120200116121758.53d07e52","qemu-kvm-10:1.5.3-167.el7_7.6","slirp4netns-0:0.4.2-3.git21fdece.el8","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","virt:rhel-8010020200304114113.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7039.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-7211","severity":"low","public_date":"2019-12-30T00:00:00Z","advisories":["RHBA-2020:0390"],"bugzilla":"1792130","bugzilla_description":"CVE-2020-7211 QEMU: Slirp: potential directory traversal using relative paths via tftp server on Windows host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["slirp4netns-0:0.4.2-3.git21fdece.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7211.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-19921","severity":"moderate","public_date":"2019-12-21T00:00:00Z","advisories":["RHSA-2020:1650","RHSA-2020:1485","RHSA-2020:0695","RHSA-2020:0942","RHSA-2020:0688"],"bugzilla":"1796107","bugzilla_description":"CVE-2019-19921 runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-41","affected_packages":["runc-0:1.0.0-66.rc8.el7_7","runc-0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0","runc-0:1.0.0-66.rc10.rhaos4.3.el7_8","container-tools:rhel8-8020020200324071414.0d58ad57","runc-0:1.0.0-63.rc10.rhaos4.2.gitdc9208a.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19921.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-16884","severity":"moderate","public_date":"2019-09-22T00:00:00Z","advisories":["RHSA-2019:3940","RHSA-2020:1234","RHSA-2019:4269","RHBA-2020:1232","RHSA-2019:4074"],"bugzilla":"1757214","bugzilla_description":"CVE-2019-16884 runc: AppArmor/SELinux bypass with malicious image that specifies a volume at /proc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-41","affected_packages":["docker-2:1.13.1-161.git64e9980.el7_8","runc-0:1.0.0-62.rc8.rhaos4.1.git3cbe540.el8","runc-0:1.0.0-67.rc10.el7_8","container-tools:rhel8-8010020191126140055.c294d161","runc-0:1.0.0-63.rc8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16884.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10214","severity":"moderate","public_date":"2019-09-09T00:00:00Z","advisories":["RHSA-2019:3403","RHSA-2019:3007","RHSA-2019:2825","RHSA-2019:2989","RHSA-2019:3494","RHSA-2019:3812","RHSA-2019:2817"],"bugzilla":"1732508","bugzilla_description":"CVE-2019-10214 containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["container-tools:rhel8-8010020190927090915.4985cc55","cri-o-0:1.9.16-5.git858756d.el7","container-tools:1.0-8010020190927091243.4985cc55","cri-o-0:1.13.11-0.7.dev.rhaos4.1.git9cb8f2f.el8","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","cri-o-0:1.10.6-2.rhaos3.10.git56d7d9a.el7","openshift4/ose-docker-builder:v4.1.20-201910102034"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10214.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-15890","severity":"moderate","public_date":"2019-08-25T00:00:00Z","advisories":["RHBA-2020:3172","RHSA-2020:0889","RHSA-2020:0775","RHSA-2020:0348"],"bugzilla":"1749716","bugzilla_description":"CVE-2019-15890 QEMU: Slirp: use-after-free during packet reassembly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["container-tools:rhel8-8010120200116121758.53d07e52","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","slirp4netns-0:0.3.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15890.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2019-18466","severity":"moderate","public_date":"2019-08-22T00:00:00Z","advisories":["RHSA-2019:4269","RHSA-2020:1227"],"bugzilla":"1744588","bugzilla_description":"CVE-2019-18466 podman: resolving symlink in host filesystem leads to unexpected results of copy operation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["podman-0:1.6.4-16.el7_8","container-tools:rhel8-8010020191126140055.c294d161"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18466.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14378","severity":"important","public_date":"2019-07-28T00:00:00Z","advisories":["RHBA-2019:3723","RHSA-2019:3742","RHSA-2020:2126","RHSA-2019:3787","RHSA-2020:0366","RHSA-2019:3403","RHSA-2019:4344","RHSA-2020:2342","RHSA-2019:3179","RHSA-2020:2065","RHSA-2020:0889","RHSA-2019:3494","RHSA-2020:0775","RHSA-2020:1216","RHSA-2019:3968"],"bugzilla":"1734745","bugzilla_description":"CVE-2019-14378 QEMU: slirp: heap buffer overflow during packet reassembly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["container-tools:rhel8-8010020190927090915.4985cc55","container-tools:1.0-8010020190927091243.4985cc55","qemu-kvm-10:1.5.3-160.el7_6.6","qemu-kvm-10:1.5.3-167.el7_7.4","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","qemu-kvm-ma-10:2.12.0-33.el7_7.1","slirp4netns-0:0.3.0-8.el7_7","qemu-kvm-rhev-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","qemu-kvm-ma-10:2.12.0-18.el7_6.6","qemu-kvm-rhev-10:2.12.0-44.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14378.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-10152","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHSA-2019:1907"],"bugzilla":"1715667","bugzilla_description":"CVE-2019-10152 podman: Improper symlink resolution allows access to host files when executing `podman cp` on running containers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59->CWE-22","affected_packages":["podman-0:1.4.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10152.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9946","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":["RHBA-2019:0862"],"bugzilla":"1692712","bugzilla_description":"CVE-2019-9946 kubernetes: Incorrect rule injection in CNI portmap plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":["containernetworking-plugins-0:0.7.5-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9946.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-5736","severity":"important","public_date":"2019-02-11T13:22:00Z","advisories":["RHSA-2019:0401","RHSA-2019:0303","RHSA-2019:0304","RHSA-2019:0975","RHSA-2019:0408"],"bugzilla":"1664908","bugzilla_description":"CVE-2019-5736 runc: Execution of malicious containers allows for container escape and access to host filesystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["runc-0:1.0.0-59.dev.git2abd837.el7","container-tools:rhel8-8000020190416221845.2ffa3d27","docker-2:1.13.1-91.git07f3374.el7","docker-2:1.12.6-79.git5680db5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5736.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/containernetworking-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/containernetworking-plugins_security_api_results.json
new file mode 100644
index 0000000..3348250
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/containernetworking-plugins_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-10749","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:2684","RHSA-2020:2443","RHSA-2020:2592","RHSA-2020:3194","RHSA-2020:2403"],"bugzilla":"1833220","bugzilla_description":"CVE-2020-10749 containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["openshift4/ose-multus-cni:v4.5.0-202007012112.p0","containernetworking-plugins-0:0.8.3-3.el7_8","containernetworking-plugins-0:0.8.6-1.rhaos4.3.el7","openshift4/ose-container-networking-plugins-rhel7:v4.5.0-202007012112.p0","container-native-virtualization/kubevirt-ssp-operator:v2.4.0-71","container-native-virtualization/virt-api:v2.4.0-58"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10749.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.0"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9946","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":["RHBA-2019:0862"],"bugzilla":"1692712","bugzilla_description":"CVE-2019-9946 kubernetes: Incorrect rule injection in CNI portmap plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":["containernetworking-plugins-0:0.7.5-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9946.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/containers-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/containers-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/containers-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/convmv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/convmv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/convmv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/copy-jdk-configs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/copy-jdk-configs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/copy-jdk-configs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/coreutils-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/coreutils-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/coreutils-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/coreutils-single_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/coreutils-single_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/coreutils-single_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/coreutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/coreutils_security_api_results.json
new file mode 100644
index 0000000..72b74ed
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/coreutils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-17942","severity":"low","public_date":"2018-09-19T00:00:00Z","advisories":[],"bugzilla":"1635896","bugzilla_description":"CVE-2018-17942 gnulib: heap-based buffer overflow in convert_to_decimal function in vasnprintf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1063","severity":"low","public_date":"2018-02-28T00:00:00Z","advisories":["RHSA-2018:0913"],"bugzilla":"1550122","bugzilla_description":"CVE-2018-1063 policycoreutils: Relabelling of symbolic links in /tmp and /var/tmp change the context of their target instead","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59->CWE-282","affected_packages":["policycoreutils-0:2.5-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1063.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.9"},{"CVE":"CVE-2017-18018","severity":"moderate","public_date":"2017-12-20T00:00:00Z","advisories":[],"bugzilla":"1532284","bugzilla_description":"CVE-2017-18018 coreutils: race condition vulnerability in chown and chgrp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18018.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2017-7476","severity":"important","public_date":"2017-04-27T00:00:00Z","advisories":[],"bugzilla":"1445185","bugzilla_description":"CVE-2017-7476 gnulib: Out-of-bounds write by setting a large TZ variable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7476.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-2616","severity":"moderate","public_date":"2017-02-22T00:00:00Z","advisories":["RHSA-2017:0654","RHSA-2017:0907"],"bugzilla":"1418710","bugzilla_description":"CVE-2017-2616 util-linux: Sending SIGKILL to other processes with root privileges via su","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":["coreutils-0:8.4-46.el6","util-linux-0:2.23.2-33.el7_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-7545","severity":"important","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:0535","RHSA-2017:0536","RHSA-2016:2702"],"bugzilla":"1378577","bugzilla_description":"CVE-2016-7545 policycoreutils: SELinux sandbox escape via TIOCSTI ioctl","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["policycoreutils-0:2.0.83-30.1.el6_8","policycoreutils-0:2.2.5-21.el7_2","policycoreutils-0:2.5-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7545.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2016-2781","severity":"moderate","public_date":"2016-02-28T00:00:00Z","advisories":[],"bugzilla":"1312863","bugzilla_description":"CVE-2016-2781 coreutils: Non-privileged session can escape to the parent session in chroot","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2781.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2015-4041","severity":"low","public_date":"2015-04-27T00:00:00Z","advisories":[],"bugzilla":"1223813","bugzilla_description":"CVE-2015-4041 coreutils: heap buffer overflow in sort(1) keycompare_mb()","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4041.json"},{"CVE":"CVE-2015-4042","severity":"low","public_date":"2015-04-27T00:00:00Z","advisories":[],"bugzilla":"1223817","bugzilla_description":"CVE-2015-4042 coreutils: possible buffer overflow in keycompare_mb()","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4042.json"},{"CVE":"CVE-2015-1865","severity":"low","public_date":"2015-04-14T00:00:00Z","advisories":[],"bugzilla":"1211300","bugzilla_description":"CVE-2015-1865 coreutils: \"time of check to time of use\" race condition fts.c","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1865.json"},{"CVE":"CVE-2014-9471","severity":"low","public_date":"2014-02-25T00:00:00Z","advisories":[],"bugzilla":"1167548","bugzilla_description":"CVE-2014-9471 coreutils: memory corruption flaw in parse_datetime()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9471.json"},{"CVE":"CVE-2013-0221","severity":"low","public_date":"2013-01-15T00:00:00Z","advisories":["RHSA-2013:1652"],"bugzilla":"903464","bugzilla_description":"CVE-2013-0221 coreutils: segfault in \"sort -d\" and \"sort -M\" with long line input","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-391->CWE-665","affected_packages":["coreutils-0:8.4-31.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0221.json"},{"CVE":"CVE-2013-0223","severity":"low","public_date":"2013-01-15T00:00:00Z","advisories":["RHSA-2013:1652"],"bugzilla":"903466","bugzilla_description":"CVE-2013-0223 coreutils: segfault in \"join -i\" with long line input","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-391->CWE-665","affected_packages":["coreutils-0:8.4-31.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0223.json"},{"CVE":"CVE-2013-0222","severity":"low","public_date":"2012-12-31T00:00:00Z","advisories":["RHSA-2013:1652"],"bugzilla":"903465","bugzilla_description":"CVE-2013-0222 coreutils: segfault in uniq with long line input","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-391->CWE-665","affected_packages":["coreutils-0:8.4-31.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0222.json"},{"CVE":"CVE-2014-3215","severity":"important","public_date":"2012-12-08T00:00:00Z","advisories":["RHSA-2015:0864","RHBA-2015:2161"],"bugzilla":"1095855","bugzilla_description":"CVE-2014-3215 policycoreutils: local privilege escalation via seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-270","affected_packages":["kernel-0:2.6.32-504.16.2.el6","libcap-ng-0:0.7.5-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3215.json"},{"CVE":"CVE-2011-1011","severity":"important","public_date":"2011-02-22T00:00:00Z","advisories":["RHSA-2011:0414"],"bugzilla":"633544","bugzilla_description":"CVE-2011-1011 policycoreutils: insecure temporary directory handling in seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["policycoreutils-0:2.0.83-19.8.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1011.json"},{"CVE":"CVE-2008-1946","severity":"low","public_date":"2008-07-24T00:00:00Z","advisories":["RHSA-2008:0780"],"bugzilla":"446488","bugzilla_description":"CVE-2008-1946 /etc/pam.d/su is wrong in RHEL-4.6","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["coreutils-0:5.2.1-31.8.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1946.json"},{"CVE":"CVE-2005-4890","severity":"important","public_date":"2004-07-26T00:00:00Z","advisories":[],"bugzilla":"710208","bugzilla_description":"CVE-2005-4890 coreutils: tty hijacking possible in \"su\" via TIOCSTI ioctl","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4890.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync-qdevice_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync-qdevice_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync-qdevice_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync-qnetd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync-qnetd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync-qnetd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync-vqsim_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync-vqsim_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync-vqsim_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync_security_api_results.json
new file mode 100644
index 0000000..c221a46
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosync_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1084","severity":"important","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2018:1169"],"bugzilla":"1552830","bugzilla_description":"CVE-2018-1084 corosync: Integer overflow in exec/totemcrypto.c:authenticate_nss_2_3() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["corosync-0:2.4.3-2.el7_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1084.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2013-0250","severity":"moderate","public_date":"2013-01-18T00:00:00Z","advisories":[],"bugzilla":"906834","bugzilla_description":"corosync 2.x: Remote DoS due improper HMAC initialization","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0250.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosynclib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosynclib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosynclib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosynclib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosynclib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/corosynclib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cpio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cpio_security_api_results.json
new file mode 100644
index 0000000..ba15fc1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cpio_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14866","severity":"moderate","public_date":"2019-08-30T00:00:00Z","advisories":["RHSA-2020:3908"],"bugzilla":"1765511","bugzilla_description":"CVE-2019-14866 cpio: improper input validation when writing tar header fields leads to unexpect tar generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["cpio-0:2.11-28.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14866.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-7516","severity":"moderate","public_date":"2017-06-05T00:00:00Z","advisories":[],"bugzilla":"1539685","bugzilla_description":"CVE-2017-7516 cpio: --no-absolute-filenames bypass via symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7516.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-2037","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1300207","bugzilla_description":"CVE-2016-2037 cpio: out of bounds write","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2015-1197","severity":"low","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1179773","bugzilla_description":"CVE-2015-1197 cpio: directory traversal through symlinks","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1197.json"},{"CVE":"CVE-2014-9112","severity":"moderate","public_date":"2014-11-23T00:00:00Z","advisories":["RHSA-2015:2108"],"bugzilla":"1167571","bugzilla_description":"CVE-2014-9112 cpio: heap-based buffer overflow flaw in list_file()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["cpio-0:2.11-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9112.json"},{"CVE":"CVE-2010-0624","severity":"moderate","public_date":"2010-03-10T00:00:00Z","advisories":["RHSA-2010:0145","RHSA-2010:0144","RHSA-2010:0143","RHSA-2010:0142","RHSA-2010:0141"],"bugzilla":"564368","bugzilla_description":"CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially-crafted archive","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["cpio-0:2.5-6.RHEL3","tar-0:1.14-13.el4_8.1","tar-0:1.13.25-16.RHEL3","cpio-0:2.6-23.el5_4.1","tar-2:1.15.1-23.0.1.el5_4.2","cpio-0:2.5-16.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0624.json"},{"CVE":"CVE-2007-4476","severity":"low","public_date":"2007-08-17T00:00:00Z","advisories":["RHSA-2010:0144","RHSA-2010:0141"],"bugzilla":"280961","bugzilla_description":"CVE-2007-4476 tar/cpio stack crashing in safer_name_suffix","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tar-0:1.14-13.el4_8.1","cpio-0:2.6-23.el5_4.1","tar-2:1.15.1-23.0.1.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4476.json"},{"CVE":"CVE-2005-4268","severity":"low","public_date":"2005-11-07T00:00:00Z","advisories":["RHSA-2007:0245","RHSA-2010:0145"],"bugzilla":"229191","bugzilla_description":"CVE-2005-4268 cpio large filesize buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cpio-0:2.5-6.RHEL3","cpio-0:2.5-13.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4268.json"},{"CVE":"CVE-2005-1111","severity":"moderate","public_date":"2005-04-13T00:00:00Z","advisories":["RHSA-2005:378","RHSA-2005:806"],"bugzilla":"1617604","bugzilla_description":"CVE-2005-1111 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cpio-0:2.5-4.RHEL3","cpio-0:2.5-8.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1111.json"},{"CVE":"CVE-1999-1572","severity":"low","public_date":"1996-07-16T00:00:00Z","advisories":["RHSA-2005:806","RHSA-2005:073","RHSA-2005:080"],"bugzilla":"1616458","bugzilla_description":"CVE-1999-1572 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cpio-0:2.5-7.EL4.1","cpio-0:2.5-3e.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-1999-1572.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cpp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cpp_security_api_results.json
new file mode 100644
index 0000000..2b0ab82
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cpp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14274","severity":"moderate","public_date":"2019-07-26T00:00:00Z","advisories":[],"bugzilla":"1740464","bugzilla_description":"CVE-2019-14274 mcpp: heap based buffer overflow in function do_msg() in support.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14274.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-6285","severity":"low","public_date":"2019-01-14T00:00:00Z","advisories":[],"bugzilla":"1668104","bugzilla_description":"CVE-2019-6285 yaml-cpp: DoS in SingleDocParser::HandleFlowSequence funtion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-20710","severity":null,"public_date":"2019-01-14T00:00:00Z","advisories":[],"bugzilla":"1686723","bugzilla_description":"CVE-2018-20710 yaml-cpp: remote dos via crafted YAML file in function SingleDocParser::HandleFlowSequence","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20710.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-6292","severity":"low","public_date":"2019-01-02T00:00:00Z","advisories":[],"bugzilla":"1668108","bugzilla_description":"CVE-2019-6292 yaml-cpp: DoS in singledocparser.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6292.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20573","severity":"low","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1665567","bugzilla_description":"CVE-2018-20573 yaml-cpp: DoS in Scanner::EnsureTokensInQueue function in yaml-cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20573.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-20574","severity":"low","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1665571","bugzilla_description":"CVE-2018-20574 yaml-cpp: DoS in SingleDocParser::HandleFlowMap function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20574.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-11692","severity":"moderate","public_date":"2017-07-28T00:00:00Z","advisories":[],"bugzilla":"1477074","bugzilla_description":"CVE-2017-11692 yaml-cpp: assertion failure in Token& Scanner::peek function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11692.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-5950","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":[],"bugzilla":"1439662","bugzilla_description":"CVE-2017-5950 yaml-cpp: Stack overflow in HandleNode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5950.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-0224","severity":"moderate","public_date":"2015-01-27T00:00:00Z","advisories":["RHBA-2016:1500","RHSA-2015:0662","RHSA-2015:0661","RHSA-2015:0660","RHSA-2015:0708","RHSA-2015:0707"],"bugzilla":"1186302","bugzilla_description":"CVE-2015-0224 qpid-cpp: AMQP 0-10 protocol sequence-set maximal range DoS (incomplete CVE-2015-0203 fix)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["qpid-cpp-0:0.22-51.el7","qpid-cpp-0:0.18-38.el6","qpid-cpp-0:0.18-38.el7","qpid-cpp-mrg-0:0.18-38.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0224.json"},{"CVE":"CVE-2015-0223","severity":"moderate","public_date":"2015-01-27T00:00:00Z","advisories":["RHBA-2016:1500","RHSA-2015:0662","RHSA-2015:0661","RHSA-2015:0660","RHSA-2015:0708","RHSA-2015:0707"],"bugzilla":"1186308","bugzilla_description":"CVE-2015-0223 qpid-cpp: anonymous access to qpidd cannot be prevented","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qpid-cpp-0:0.22-51.el7","qpid-cpp-0:0.18-38.el6","qpid-cpp-0:0.18-38.el7","qpid-cpp-mrg-0:0.18-38.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0223.json"},{"CVE":"CVE-2015-0203","severity":"moderate","public_date":"2015-01-13T00:00:00Z","advisories":["RHBA-2016:1500","RHSA-2015:0662","RHSA-2015:0661","RHSA-2015:0660","RHSA-2015:0708","RHSA-2015:0707"],"bugzilla":"1181721","bugzilla_description":"CVE-2015-0203 qpid-cpp: 3 qpidd DoS issues in AMQP 0-10 protocol handling","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["qpid-cpp-0:0.22-51.el7","qpid-cpp-0:0.18-38.el6","qpid-cpp-0:0.18-38.el7","qpid-cpp-mrg-0:0.18-38.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0203.json"},{"CVE":"CVE-2014-3629","severity":"low","public_date":"2014-11-07T00:00:00Z","advisories":[],"bugzilla":"1164848","bugzilla_description":"CVE-2014-3629 qpid-cpp: XXE vulnerability causes outgoing HTTP connections","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3629.json"},{"CVE":"CVE-2014-0212","severity":"moderate","public_date":"2013-06-19T00:00:00Z","advisories":[],"bugzilla":"1073285","bugzilla_description":"CVE-2014-0212 qpid-cpp: on-demand ACL policy loading enables a denial of service by consuming all available file descriptors","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0212.json"},{"CVE":"CVE-2012-4446","severity":"moderate","public_date":"2013-03-06T00:00:00Z","advisories":["RHSA-2013:0562","RHSA-2013:0561"],"bugzilla":"851355","bugzilla_description":"CVE-2012-4446 qpid-cpp: qpid authentication bypass","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["qpid-cpp-0:0.18-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4446.json"},{"CVE":"CVE-2012-4458","severity":"moderate","public_date":"2013-03-05T00:00:00Z","advisories":["RHSA-2013:0562","RHSA-2013:0561"],"bugzilla":"861234","bugzilla_description":"CVE-2012-4458 qpid-cpp: long arrays of zero-width types cause a denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["qpid-cpp-0:0.18-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4458.json"},{"CVE":"CVE-2012-4459","severity":"moderate","public_date":"2013-03-05T00:00:00Z","advisories":["RHSA-2013:0562","RHSA-2013:0561"],"bugzilla":"861241","bugzilla_description":"CVE-2012-4459 qpid-cpp: crash due to qpid::framing::Buffer::checkAvailable() wraparound","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["qpid-cpp-0:0.18-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4459.json"},{"CVE":"CVE-2012-4460","severity":"moderate","public_date":"2013-03-05T00:00:00Z","advisories":[],"bugzilla":"861242","bugzilla_description":"CVE-2012-4460 qpid-cpp: lack of bounds checking in qpid::framing::Buffer can lead to DoS if asserts are enabled","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4460.json"},{"CVE":"CVE-2012-3467","severity":"moderate","public_date":"2012-06-22T00:00:00Z","advisories":["RHSA-2012:1277","RHSA-2012:1279"],"bugzilla":"836276","bugzilla_description":"CVE-2012-3467 qpid-cpp-server-cluster: unauthorized broker access caused by the use of NullAuthenticator catch-up shadow connections","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["qpid-cpp-0:0.14-22.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3467.json"},{"CVE":"CVE-2011-3620","severity":"moderate","public_date":"2012-04-30T00:00:00Z","advisories":["RHSA-2012:0528","RHSA-2012:0529"],"bugzilla":"747078","bugzilla_description":"CVE-2011-3620 qpid-cpp: cluster authentication ignores cluster-* settings","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qpid-cpp-0:0.14-14.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3620.json"},{"CVE":"CVE-2012-2145","severity":"moderate","public_date":"2012-04-24T00:00:00Z","advisories":["RHSA-2012:1277","RHSA-2012:1269"],"bugzilla":"817175","bugzilla_description":"CVE-2012-2145 qpid-cpp: not closing incomplete connections exhausts file descriptors, leading to DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["qpid-cpp-0:0.14-22.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2145.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppcheck_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppcheck_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppcheck_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppunit-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppunit-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppunit-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppunit-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppunit-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppunit-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppunit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppunit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cppunit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cracklib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cracklib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cracklib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cracklib-dicts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cracklib-dicts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cracklib-dicts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cracklib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cracklib_security_api_results.json
new file mode 100644
index 0000000..bf0f557
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cracklib_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-6318","severity":"low","public_date":"2016-08-16T00:00:00Z","advisories":[],"bugzilla":"1364944","bugzilla_description":"CVE-2016-6318 cracklib: Stack-based buffer overflow when parsing large GECOS field","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6318.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-gcore-command_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-gcore-command_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-gcore-command_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-ptdump-command_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-ptdump-command_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-ptdump-command_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-trace-command_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-trace-command_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash-trace-command_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash_security_api_results.json
new file mode 100644
index 0000000..c2f8cc0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crash_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3509","severity":"moderate","public_date":"2012-08-29T00:00:00Z","advisories":[],"bugzilla":"849693","bugzilla_description":"CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3509.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crda_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crda_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crda_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/createrepo_c-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/createrepo_c-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/createrepo_c-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/createrepo_c-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/createrepo_c-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/createrepo_c-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/createrepo_c_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/createrepo_c_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/createrepo_c_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/criu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/criu_security_api_results.json
new file mode 100644
index 0000000..b7705d6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/criu_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5228","severity":"moderate","public_date":"2015-08-25T00:00:00Z","advisories":[],"bugzilla":"1255782","bugzilla_description":"CVE-2015-5228 criu: arbitrary file creation and chown","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5228.json"},{"CVE":"CVE-2015-5231","severity":"low","public_date":"2015-08-25T00:00:00Z","advisories":[],"bugzilla":"1256728","bugzilla_description":"CVE-2015-5231 criu: service daemon allows to bypass ptrace policy","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5231.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cronie-anacron_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cronie-anacron_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cronie-anacron_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cronie-noanacron_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cronie-noanacron_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cronie-noanacron_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cronie_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cronie_security_api_results.json
new file mode 100644
index 0000000..2a6ce69
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cronie_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9704","severity":"low","public_date":"2019-03-08T00:00:00Z","advisories":[],"bugzilla":"1687688","bugzilla_description":"CVE-2019-9704 vixie-cron: calloc return value resulting in remote dos","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9704.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-9705","severity":"moderate","public_date":"2019-03-08T00:00:00Z","advisories":[],"bugzilla":"1687694","bugzilla_description":"CVE-2019-9705 vixie-cron: memory consumption DoS via a large crontab file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9705.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-9706","severity":"moderate","public_date":"2019-03-08T00:00:00Z","advisories":[],"bugzilla":"1687706","bugzilla_description":"CVE-2019-9706 vixie-cron: use-after-free  resulting in dos","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9706.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2012-6097","severity":"low","public_date":"2012-10-22T00:00:00Z","advisories":[],"bugzilla":"893661","bugzilla_description":"CVE-2012-6097 cronie: fd leak in 1.4.8","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6097.json"},{"CVE":"CVE-2010-0424","severity":"low","public_date":"2010-02-18T00:00:00Z","advisories":["RHSA-2012:0304"],"bugzilla":"565809","bugzilla_description":"CVE-2010-0424 vixie-cron, cronie: Race condition by setting timestamp of user's crontab file, when editing the file","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["vixie-cron-4:4.1-81.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0424.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crontabs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crontabs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crontabs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crypto-policies_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crypto-policies_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/crypto-policies_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup-reencrypt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup-reencrypt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup-reencrypt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup_security_api_results.json
new file mode 100644
index 0000000..f554963
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cryptsetup_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14382","severity":"moderate","public_date":"2020-09-03T00:00:00Z","advisories":[],"bugzilla":"1874712","bugzilla_description":"CVE-2020-14382 cryptsetup: Out-of-bounds write when validating segments","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14382.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cscope_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cscope_security_api_results.json
new file mode 100644
index 0000000..0a5e32d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cscope_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2004-2541","severity":"moderate","public_date":"2009-04-30T00:00:00Z","advisories":["RHSA-2009:1102","RHSA-2009:1101"],"bugzilla":"490667","bugzilla_description":"CVE-2004-2541, CVE-2009-0148 cscope: multiple buffer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cscope-0:15.5-15.1.el5_3.1","cscope-0:15.5-16.RHEL3","cscope-0:15.5-10.RHEL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-2541.json"},{"CVE":"CVE-2009-0148","severity":"moderate","public_date":"2009-04-30T00:00:00Z","advisories":["RHSA-2009:1102","RHSA-2009:1101"],"bugzilla":"490667","bugzilla_description":"CVE-2004-2541, CVE-2009-0148 cscope: multiple buffer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cscope-0:15.5-15.1.el5_3.1","cscope-0:15.5-16.RHEL3","cscope-0:15.5-10.RHEL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0148.json"},{"CVE":"CVE-2006-4262","severity":"low","public_date":"2006-08-20T00:00:00Z","advisories":["RHSA-2009:1101"],"bugzilla":"203645","bugzilla_description":"CVE-2006-4262 cscope: multiple buffer overflows","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cscope-0:15.5-16.RHEL3","cscope-0:15.5-10.RHEL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4262.json"},{"CVE":"CVE-2009-1577","severity":"moderate","public_date":"2006-04-22T00:00:00Z","advisories":["RHSA-2009:1101"],"bugzilla":"499174","bugzilla_description":"CVE-2009-1577 cscope: putstring buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cscope-0:15.5-16.RHEL3","cscope-0:15.5-10.RHEL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1577.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctags-etags_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctags-etags_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctags-etags_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctags_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctags_security_api_results.json
new file mode 100644
index 0000000..8dd6c0a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctags_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-7204","severity":"moderate","public_date":"2014-03-25T00:00:00Z","advisories":[],"bugzilla":"1147339","bugzilla_description":"CVE-2014-7204 ctags: possible denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7204.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctdb-tests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctdb-tests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctdb-tests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctdb_security_api_results.json
new file mode 100644
index 0000000..4f44a8b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ctdb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4159","severity":"low","public_date":"2013-10-30T00:00:00Z","advisories":[],"bugzilla":"986773","bugzilla_description":"CVE-2013-4159 ctdb: /tmp file vulnerability issues","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4159.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-aharoni-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-aharoni-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-aharoni-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-caladings-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-caladings-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-caladings-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-david-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-david-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-david-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-drugulin-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-drugulin-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-drugulin-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-ellinia-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-ellinia-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-ellinia-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-frank-ruehl-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-frank-ruehl-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-frank-ruehl-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-hadasim-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-hadasim-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-hadasim-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-keteryg-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-keteryg-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-keteryg-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-miriam-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-miriam-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-miriam-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-miriam-mono-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-miriam-mono-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-miriam-mono-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-nachlieli-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-nachlieli-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-nachlieli-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-shofar-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-shofar-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-shofar-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-simple-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-simple-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-simple-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-stamashkenaz-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-stamashkenaz-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-stamashkenaz-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-stamsefarad-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-stamsefarad-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-stamsefarad-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-yehuda-clm-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-yehuda-clm-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/culmus-yehuda-clm-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filters-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filters-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filters-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filters-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filters-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filters-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filters_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filters_security_api_results.json
new file mode 100644
index 0000000..0f13677
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-filters_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-8560","severity":"moderate","public_date":"2015-12-12T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1291227","bugzilla_description":"CVE-2015-8560 cups-filters: foomatic-rip did not consider semicolon as illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8560.json"},{"CVE":"CVE-2015-8327","severity":"moderate","public_date":"2015-11-26T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1287523","bugzilla_description":"CVE-2015-8327 cups-filters: foomatic-rip did not consider the back tick as an illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8327.json"},{"CVE":"CVE-2015-3279","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:2360"],"bugzilla":"1238990","bugzilla_description":"CVE-2015-3279 cups-filters: texttopdf integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["cups-filters-0:1.0.35-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3279.json"},{"CVE":"CVE-2015-3258","severity":"moderate","public_date":"2015-06-26T00:00:00Z","advisories":["RHSA-2015:2360"],"bugzilla":"1235385","bugzilla_description":"CVE-2015-3258 cups-filters: texttopdf heap-based buffer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-122->CWE-125->CWE-787","affected_packages":["cups-filters-0:1.0.35-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3258.json"},{"CVE":"CVE-2015-2265","severity":"important","public_date":"2015-02-26T00:00:00Z","advisories":[],"bugzilla":"1199130","bugzilla_description":"CVE-2015-2265 cups-filters: remote command execution in remove_bad_chars() (incomplete fix for CVE-2014-2707)","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2265.json"},{"CVE":"CVE-2014-4338","severity":"moderate","public_date":"2014-04-25T00:00:00Z","advisories":["RHSA-2014:1795"],"bugzilla":"1091568","bugzilla_description":"CVE-2014-4338 cups-filters: unsupported BrowseAllow value lets cups-browsed accept from all hosts","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["cups-filters-0:1.0.35-15.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4338.json"},{"CVE":"CVE-2014-4336","severity":"important","public_date":"2014-04-23T00:00:00Z","advisories":[],"bugzilla":"1091565","bugzilla_description":"CVE-2014-4336 cups-filters: incomplete fix for CVE-2014-2707","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4336.json"},{"CVE":"CVE-2014-4337","severity":"moderate","public_date":"2014-04-23T00:00:00Z","advisories":["RHSA-2014:1795"],"bugzilla":"1111510","bugzilla_description":"CVE-2014-4337 cups-filters: cups-browsed DoS via process_browse_data() OOB read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-filters-0:1.0.35-15.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4337.json"},{"CVE":"CVE-2014-2707","severity":"important","public_date":"2014-04-01T00:00:00Z","advisories":[],"bugzilla":"1083326","bugzilla_description":"CVE-2014-2707 cups-filters: remote command injection in cups-browsed","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2707.json"},{"CVE":"CVE-2013-6475","severity":"moderate","public_date":"2014-03-11T00:00:00Z","advisories":[],"bugzilla":"1027550","bugzilla_description":"CVE-2013-6475 cups-filters: possible heap-based buffer overflows due to the use of gmalloc","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6475.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-ipptool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-ipptool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-ipptool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-lpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-lpd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-lpd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-pk-helper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-pk-helper_security_api_results.json
new file mode 100644
index 0000000..99ae3a5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups-pk-helper_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-4510","severity":"moderate","public_date":"2012-10-12T00:00:00Z","advisories":[],"bugzilla":"864515","bugzilla_description":"CVE-2012-4510 cups-pk-helper: Insecure wrapping of cupsGetFile() and cupsPutFile() methods","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:N","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4510.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups_security_api_results.json
new file mode 100644
index 0000000..3ecc5c1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cups_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-3898","severity":"low","public_date":"2020-04-20T00:00:00Z","advisories":[],"bugzilla":"1823964","bugzilla_description":"CVE-2020-3898 cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3898.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-8675","severity":"low","public_date":"2019-08-14T17:00:00Z","advisories":["RHSA-2020:3864","RHSA-2020:1765"],"bugzilla":"1738455","bugzilla_description":"CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["cups-1:1.6.3-51.el7","cups-1:2.2.6-33.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8675.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2019-8696","severity":"low","public_date":"2019-08-14T17:00:00Z","advisories":["RHSA-2020:3864","RHSA-2020:1765"],"bugzilla":"1738497","bugzilla_description":"CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["cups-1:1.6.3-51.el7","cups-1:2.2.6-33.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8696.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2018-4300","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1695929","bugzilla_description":"CVE-2018-4300 cups: Session cookie generated by the CUPS web interface is easy to guess","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4300.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"7.3"},{"CVE":"CVE-2018-4700","severity":"moderate","public_date":"2018-12-07T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1649347","bugzilla_description":"CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4700.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"7.3"},{"CVE":"CVE-2018-4180","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1607282","bugzilla_description":"CVE-2018-4180 cups: Local privilege escalation to root due to insecure environment variable handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-642","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4180.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-4182","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1607283","bugzilla_description":"CVE-2018-4182 cups: Sandbox bypass due to insecure error handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-4183","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1607284","bugzilla_description":"CVE-2018-4183 cups: Sandbox bypass due to profile misconfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4183.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-6553","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1607285","bugzilla_description":"CVE-2018-6553 cups: AppArmor cupsd Sandbox Bypass Due to Use of Hard Links","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6553.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-4181","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1607291","bugzilla_description":"CVE-2018-4181 cups: Manipulation of cupsd.conf by a local attacker resulting in limited reads of arbitrary files as root","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4181.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-18190","severity":"moderate","public_date":"2018-02-16T00:00:00Z","advisories":["RHSA-2020:3864"],"bugzilla":"1546395","bugzilla_description":"CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["cups-1:1.6.3-51.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18190.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2017-15400","severity":"important","public_date":"2017-10-27T00:00:00Z","advisories":[],"bugzilla":"1607288","bugzilla_description":"CVE-2017-15400 cups: Insufficient restriction of IPP filters allows a remote attacker to execute commands with the privilege level of cups daemon","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15400.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-18248","severity":"low","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1561296","bugzilla_description":"CVE-2017-18248 cups: Invalid usernames handled in scheduler/ipp.c:add_job() allow remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18248.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2015-8560","severity":"moderate","public_date":"2015-12-12T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1291227","bugzilla_description":"CVE-2015-8560 cups-filters: foomatic-rip did not consider semicolon as illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8560.json"},{"CVE":"CVE-2015-8327","severity":"moderate","public_date":"2015-11-26T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1287523","bugzilla_description":"CVE-2015-8327 cups-filters: foomatic-rip did not consider the back tick as an illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8327.json"},{"CVE":"CVE-2015-3279","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:2360"],"bugzilla":"1238990","bugzilla_description":"CVE-2015-3279 cups-filters: texttopdf integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["cups-filters-0:1.0.35-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3279.json"},{"CVE":"CVE-2015-3258","severity":"moderate","public_date":"2015-06-26T00:00:00Z","advisories":["RHSA-2015:2360"],"bugzilla":"1235385","bugzilla_description":"CVE-2015-3258 cups-filters: texttopdf heap-based buffer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-122->CWE-125->CWE-787","affected_packages":["cups-filters-0:1.0.35-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3258.json"},{"CVE":"CVE-2015-1158","severity":"important","public_date":"2015-06-10T00:00:00Z","advisories":["RHSA-2015:1123"],"bugzilla":"1221641","bugzilla_description":"CVE-2015-1158 cups: incorrect string reference counting (VU#810572)","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["cups-1:1.4.2-67.el6_6.1","cups-1:1.6.3-17.el7_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1158.json"},{"CVE":"CVE-2015-1159","severity":"moderate","public_date":"2015-06-10T00:00:00Z","advisories":["RHSA-2015:1123"],"bugzilla":"1221642","bugzilla_description":"CVE-2015-1159 cups: cross-site scripting flaw in CUPS web UI (VU#810572)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["cups-1:1.4.2-67.el6_6.1","cups-1:1.6.3-17.el7_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1159.json"},{"CVE":"CVE-2014-8166","severity":"low","public_date":"2015-03-24T00:00:00Z","advisories":[],"bugzilla":"1084577","bugzilla_description":"CVE-2014-8166 cups: code execution via unescape ANSI escape sequences","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8166.json"},{"CVE":"CVE-2015-2265","severity":"important","public_date":"2015-02-26T00:00:00Z","advisories":[],"bugzilla":"1199130","bugzilla_description":"CVE-2015-2265 cups-filters: remote command execution in remove_bad_chars() (incomplete fix for CVE-2014-2707)","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2265.json"},{"CVE":"CVE-2014-9679","severity":"moderate","public_date":"2015-02-10T00:00:00Z","advisories":["RHSA-2015:1123"],"bugzilla":"1191588","bugzilla_description":"CVE-2014-9679 cups: cupsRasterReadPixels buffer overflow","cvss_score":4.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-119","affected_packages":["cups-1:1.4.2-67.el6_6.1","cups-1:1.6.3-17.el7_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9679.json"},{"CVE":"CVE-2014-5029","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:1388","RHBA-2015:0386"],"bugzilla":"1122600","bugzilla_description":"CVE-2014-5029 cups: Incomplete fix for CVE-2014-3537","cvss_score":5.0,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:P/A:N","CWE":"CWE-59","affected_packages":["cups-1:1.4.2-67.el6","cups-1:1.6.3-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5029.json"},{"CVE":"CVE-2014-5030","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:1388","RHBA-2015:0386"],"bugzilla":"1128764","bugzilla_description":"CVE-2014-5030 cups: allows local users to read arbitrary files via a symlink attack","cvss_score":5.0,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:P/A:N","CWE":"CWE-59","affected_packages":["cups-1:1.4.2-67.el6","cups-1:1.6.3-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5030.json"},{"CVE":"CVE-2014-5031","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:1388","RHBA-2015:0386"],"bugzilla":"1128767","bugzilla_description":"CVE-2014-5031 cups: world-readable permissions","cvss_score":5.0,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:P/A:N","CWE":"CWE-59","affected_packages":["cups-1:1.4.2-67.el6","cups-1:1.6.3-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5031.json"},{"CVE":"CVE-2014-3537","severity":"moderate","public_date":"2014-07-14T00:00:00Z","advisories":["RHSA-2014:1388","RHBA-2015:0386"],"bugzilla":"1115576","bugzilla_description":"CVE-2014-3537 cups: insufficient checking leads to privilege escalation","cvss_score":5.0,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:P/A:N","CWE":"CWE-59","affected_packages":["cups-1:1.4.2-67.el6","cups-1:1.6.3-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3537.json"},{"CVE":"CVE-2014-4338","severity":"moderate","public_date":"2014-04-25T00:00:00Z","advisories":["RHSA-2014:1795"],"bugzilla":"1091568","bugzilla_description":"CVE-2014-4338 cups-filters: unsupported BrowseAllow value lets cups-browsed accept from all hosts","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["cups-filters-0:1.0.35-15.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4338.json"},{"CVE":"CVE-2014-4336","severity":"important","public_date":"2014-04-23T00:00:00Z","advisories":[],"bugzilla":"1091565","bugzilla_description":"CVE-2014-4336 cups-filters: incomplete fix for CVE-2014-2707","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4336.json"},{"CVE":"CVE-2014-4337","severity":"moderate","public_date":"2014-04-23T00:00:00Z","advisories":["RHSA-2014:1795"],"bugzilla":"1111510","bugzilla_description":"CVE-2014-4337 cups-filters: cups-browsed DoS via process_browse_data() OOB read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-filters-0:1.0.35-15.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4337.json"},{"CVE":"CVE-2014-2707","severity":"important","public_date":"2014-04-01T00:00:00Z","advisories":[],"bugzilla":"1083326","bugzilla_description":"CVE-2014-2707 cups-filters: remote command injection in cups-browsed","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2707.json"},{"CVE":"CVE-2013-6475","severity":"moderate","public_date":"2014-03-11T00:00:00Z","advisories":[],"bugzilla":"1027550","bugzilla_description":"CVE-2013-6475 cups-filters: possible heap-based buffer overflows due to the use of gmalloc","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6475.json"},{"CVE":"CVE-2014-2856","severity":"moderate","public_date":"2014-01-30T00:00:00Z","advisories":["RHSA-2014:1388","RHBA-2015:0386"],"bugzilla":"1087122","bugzilla_description":"CVE-2014-2856 cups: cross-site scripting flaw fixed in the 1.7.2 release","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["cups-1:1.4.2-67.el6","cups-1:1.6.3-17.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2856.json"},{"CVE":"CVE-2013-6891","severity":"low","public_date":"2013-12-19T00:00:00Z","advisories":[],"bugzilla":"1051645","bugzilla_description":"CVE-2013-6891 cups: lppasswd vulnerability allows data access to unprivileged user","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6891.json"},{"CVE":"CVE-2012-6094","severity":"moderate","public_date":"2012-12-21T00:00:00Z","advisories":[],"bugzilla":"891942","bugzilla_description":"CVE-2012-6094 cups: 'Listen localhost:631' option not honoured correctly on IPv6-enabled systems when systemd used for CUPS socket activation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6094.json"},{"CVE":"CVE-2012-5519","severity":"moderate","public_date":"2012-11-08T00:00:00Z","advisories":["RHSA-2013:0580"],"bugzilla":"875898","bugzilla_description":"CVE-2012-5519 cups: privilege escalation for users of the CUPS SystemGroup group","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":["cups-1:1.3.7-30.el5_9.3","cups-1:1.4.2-50.el6_4.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5519.json"},{"CVE":"CVE-2012-4510","severity":"moderate","public_date":"2012-10-12T00:00:00Z","advisories":[],"bugzilla":"864515","bugzilla_description":"CVE-2012-4510 cups-pk-helper: Insecure wrapping of cupsGetFile() and cupsPutFile() methods","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:N","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4510.json"},{"CVE":"CVE-2011-2896","severity":"moderate","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181","RHSA-2011:1635","RHSA-2012:0302"],"bugzilla":"727800","bugzilla_description":"CVE-2011-2896 David Koblas' GIF decoder LZW decoder buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gimp-2:2.6.9-4.el6_3.3","cups-1:1.3.7-30.el5","gimp-2:2.2.13-2.0.7.el5_8.5","cups-1:1.4.2-44.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2896.json"},{"CVE":"CVE-2011-3170","severity":"moderate","public_date":"2011-08-04T00:00:00Z","advisories":[],"bugzilla":"732106","bugzilla_description":"CVE-2011-3170 cups: gif_read_lzw() does not properly handle first code word in an LZW stream, which may lead to arbitrary code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3170.json"},{"CVE":"CVE-2010-2941","severity":"important","public_date":"2010-10-28T00:00:00Z","advisories":["RHSA-2010:0811","RHSA-2010:0866"],"bugzilla":"624438","bugzilla_description":"CVE-2010-2941 cups: cupsd memory corruption vulnerability","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.3.7-18.el5_5.8","cups-1:1.4.2-35.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2941.json"},{"CVE":"CVE-2010-3702","severity":"important","public_date":"2010-09-24T00:00:00Z","advisories":["RHSA-2010:0749","RHSA-2010:0859","RHSA-2010:0755","RHSA-2010:0754","RHSA-2010:0753","RHSA-2010:0752","RHSA-2010:0751","RHSA-2010:0750","RHSA-2012:1201"],"bugzilla":"595245","bugzilla_description":"CVE-2010-3702 xpdf: uninitialized Gfx::parser pointer dereference","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["kdegraphics-7:3.5.4-17.el5_5.1","poppler-0:0.12.4-3.el6_0.1","cups-1:1.1.22-0.rc1.9.32.el4_8.10","cups-1:1.1.17-13.3.70","kdegraphics-7:3.3.1-18.el4_8.1","tetex-0:3.0-33.15.el5_8.1","gpdf-0:2.8.2-7.7.2.el4_8.7","poppler-0:0.5.4-4.4.el5_5.14","xpdf-1:2.02-19.el3","xpdf-1:3.00-24.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3702.json"},{"CVE":"CVE-2010-3704","severity":"important","public_date":"2010-09-24T00:00:00Z","advisories":["RHSA-2010:0749","RHSA-2010:0859","RHSA-2010:0753","RHSA-2010:0752","RHSA-2010:0751","RHSA-2012:1201"],"bugzilla":"638960","bugzilla_description":"CVE-2010-3704 xpdf: array indexing error in FoFiType1::parse()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["kdegraphics-7:3.5.4-17.el5_5.1","poppler-0:0.12.4-3.el6_0.1","kdegraphics-7:3.3.1-18.el4_8.1","tetex-0:3.0-33.15.el5_8.1","gpdf-0:2.8.2-7.7.2.el4_8.7","poppler-0:0.5.4-4.4.el5_5.14","xpdf-1:3.00-24.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3704.json"},{"CVE":"CVE-2010-0542","severity":"important","public_date":"2010-06-17T00:00:00Z","advisories":["RHSA-2010:0490"],"bugzilla":"587746","bugzilla_description":"CVE-2010-0542 CUPS: texttops unchecked memory allocation failure leading to NULL pointer dereference","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["cups-1:1.1.22-0.rc1.9.32.el4_8.6","cups-1:1.3.7-18.el5_5.4","cups-1:1.1.17-13.3.65"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0542.json"},{"CVE":"CVE-2010-0540","severity":"moderate","public_date":"2010-06-15T00:00:00Z","advisories":["RHSA-2010:0490"],"bugzilla":"588805","bugzilla_description":"CVE-2010-0540 CUPS administrator web interface CSRF","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-352","affected_packages":["cups-1:1.1.22-0.rc1.9.32.el4_8.6","cups-1:1.3.7-18.el5_5.4","cups-1:1.1.17-13.3.65"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0540.json"},{"CVE":"CVE-2010-2431","severity":"low","public_date":"2010-06-15T00:00:00Z","advisories":["RHSA-2010:0811"],"bugzilla":"605397","bugzilla_description":"CVE-2010-2431 cups: latent privilege escalation vulnerability","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.3.7-18.el5_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2431.json"},{"CVE":"CVE-2010-1748","severity":"moderate","public_date":"2010-06-14T00:00:00Z","advisories":["RHSA-2010:0490"],"bugzilla":"591983","bugzilla_description":"CVE-2010-1748 cups: web interface memory disclosure","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.32.el4_8.6","cups-1:1.3.7-18.el5_5.4","cups-1:1.1.17-13.3.65"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1748.json"},{"CVE":"CVE-2010-0302","severity":"moderate","public_date":"2010-03-03T00:00:00Z","advisories":["RHSA-2010:0129"],"bugzilla":"557775","bugzilla_description":"CVE-2010-0302 cups Incomplete fix for CVE-2009-3553","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.3.7-11.el5_4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0302.json"},{"CVE":"CVE-2010-2432","severity":null,"public_date":"2010-03-03T00:00:00Z","advisories":[],"bugzilla":"607211","bugzilla_description":"CVE-2010-2432 cups: DoS (infinite loop) via HTTP_UNAUTHORIZED responses STR #3518","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2432.json"},{"CVE":"CVE-2009-2820","severity":"moderate","public_date":"2009-11-09T00:00:00Z","advisories":["RHSA-2009:1595"],"bugzilla":"529833","bugzilla_description":"CVE-2009-2820 cups: Several XSS flaws in forms processed by CUPS web interface","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["cups-1:1.3.7-11.el5_4.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2820.json"},{"CVE":"CVE-2009-3608","severity":"important","public_date":"2009-10-14T00:00:00Z","advisories":["RHSA-2009:1504","RHSA-2009:1503","RHSA-2010:0400","RHSA-2009:1502","RHSA-2009:1513","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"526637","bugzilla_description":"CVE-2009-3608 xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["xpdf-1:3.00-22.el4_8.1","kdegraphics-7:3.3.1-15.el4_8.2","cups-1:1.3.7-11.el5_4.3","poppler-0:0.5.4-4.4.el5_4.11","gpdf-0:2.8.2-7.7.2.el4_8.5","tetex-0:3.0-33.8.el5_5.5","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3608.json"},{"CVE":"CVE-2009-3609","severity":"low","public_date":"2009-10-14T00:00:00Z","advisories":["RHSA-2009:1504","RHSA-2009:1503","RHSA-2010:0755","RHSA-2010:0401","RHSA-2009:1500","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:1502","RHSA-2009:1513","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"526893","bugzilla_description":"CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["tetex-0:2.0.2-22.0.1.EL4.16","xpdf-1:3.00-22.el4_8.1","cups-1:1.1.22-0.rc1.9.32.el4_8.10","kdegraphics-7:3.3.1-15.el4_8.2","cups-1:1.3.7-11.el5_4.3","tetex-0:1.0.7-67.19","poppler-0:0.5.4-4.4.el5_4.11","gpdf-0:2.8.2-7.7.2.el4_8.5","tetex-0:3.0-33.8.el5_5.5","xpdf-1:2.02-17.el3","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3609.json"},{"CVE":"CVE-2009-1196","severity":"important","public_date":"2009-06-02T00:00:00Z","advisories":["RHSA-2009:1083"],"bugzilla":"497135","bugzilla_description":"CVE-2009-1196 cups: DoS (stop, crash) by  renewing CUPS browse packets","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.1.17-13.3.62","cups-1:1.1.22-0.rc1.9.32.el4_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1196.json"},{"CVE":"CVE-2009-0949","severity":"important","public_date":"2009-06-02T00:00:00Z","advisories":["RHSA-2009:1083","RHSA-2009:1082"],"bugzilla":"500972","bugzilla_description":"CVE-2009-0949 cups: IPP_TAG_UNSUPPORTED handling NULL pointer dereference DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["cups-1:1.1.17-13.3.62","cups-1:1.1.22-0.rc1.9.32.el4_8.3","cups-1:1.3.7-8.el5_3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0949.json"},{"CVE":"CVE-2009-0791","severity":"moderate","public_date":"2009-05-19T00:00:00Z","advisories":["RHSA-2009:0480","RHSA-2009:1503","RHSA-2009:1083","RHSA-2010:0401","RHSA-2009:1500","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:1502","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"491840","bugzilla_description":"CVE-2009-0791 xpdf: multiple integer overflows","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.17-13.3.62","tetex-0:2.0.2-22.0.1.EL4.16","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:3.00-22.el4_8.1","kdegraphics-7:3.3.1-15.el4_8.2","cups-1:1.1.22-0.rc1.9.32.el4_8.3","tetex-0:1.0.7-67.19","gpdf-0:2.8.2-7.7.2.el4_8.5","tetex-0:3.0-33.8.el5_5.5","xpdf-1:2.02-17.el3","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0791.json"},{"CVE":"CVE-2009-3553","severity":"moderate","public_date":"2009-05-15T00:00:00Z","advisories":["RHSA-2009:1595"],"bugzilla":"530111","bugzilla_description":"CVE-2009-3553 cups: Use-after-free (crash) due improper reference counting in abstract file descriptors handling interface","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["cups-1:1.3.7-11.el5_4.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3553.json"},{"CVE":"CVE-2009-0163","severity":"moderate","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0428"],"bugzilla":"490596","bugzilla_description":"CVE-2009-0163 cups: Integer overflow in the TIFF image filter","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","cups-1:1.1.17-13.3.58","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0163.json"},{"CVE":"CVE-2009-0164","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":[],"bugzilla":"490597","bugzilla_description":"CVE-2009-0164 cups: insufficient checking of the HTTP Host: header","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0164.json"},{"CVE":"CVE-2009-0146","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490612","bugzilla_description":"CVE-2009-0146 xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0146.json"},{"CVE":"CVE-2009-0195","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490612","bugzilla_description":"CVE-2009-0146 xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0195.json"},{"CVE":"CVE-2009-0147","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490614","bugzilla_description":"CVE-2009-0147 xpdf: Multiple integer overflows in JBIG2 decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0147.json"},{"CVE":"CVE-2009-0166","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490625","bugzilla_description":"CVE-2009-0166 xpdf: Freeing of potentially uninitialized memory in JBIG2 decoder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0166.json"},{"CVE":"CVE-2009-0799","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495886","bugzilla_description":"CVE-2009-0799 PDF JBIG2 decoder OOB read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0799.json"},{"CVE":"CVE-2009-0800","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495887","bugzilla_description":"CVE-2009-0800 PDF JBIG2 multiple input validation flaws","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0800.json"},{"CVE":"CVE-2009-1179","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495889","bugzilla_description":"CVE-2009-1179 PDF JBIG2 integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1179.json"},{"CVE":"CVE-2009-1180","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495892","bugzilla_description":"CVE-2009-1180 PDF JBIG2 invalid free()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1180.json"},{"CVE":"CVE-2009-1181","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495894","bugzilla_description":"CVE-2009-1181 PDF JBIG2 NULL dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1181.json"},{"CVE":"CVE-2009-1182","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495896","bugzilla_description":"CVE-2009-1182 PDF JBIG2 MMR decoder buffer overflows","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1182.json"},{"CVE":"CVE-2009-1183","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495899","bugzilla_description":"CVE-2009-1183 PDF JBIG2 MMR infinite loop DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1183.json"},{"CVE":"CVE-2009-0577","severity":"important","public_date":"2009-02-17T00:00:00Z","advisories":["RHSA-2009:0308"],"bugzilla":"486052","bugzilla_description":"CVE-2009-0577 cups-CVE-2008-3640.patch has been corrupted.","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.17-13.3.56"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0577.json"},{"CVE":"CVE-2008-5183","severity":"moderate","public_date":"2008-11-15T00:00:00Z","advisories":["RHSA-2008:1029"],"bugzilla":"473901","bugzilla_description":"CVE-2008-5183 cups: DoS (daemon crash) caused by the large number of subscriptions","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.2.4-11.18.el5_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5183.json"},{"CVE":"CVE-2008-5286","severity":"moderate","public_date":"2008-10-16T00:00:00Z","advisories":["RHSA-2008:1028"],"bugzilla":"473905","bugzilla_description":"CVE-2008-5286 cups: Incomplete fix for CVE-2008-1722","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.55"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5286.json"},{"CVE":"CVE-2008-3639","severity":"important","public_date":"2008-10-09T00:00:00Z","advisories":["RHSA-2008:0937"],"bugzilla":"464710","bugzilla_description":"CVE-2008-3639 CUPS: SGI image parser heap-based buffer overflow","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.1","cups-1:1.2.4-11.18.el5_2.2","cups-1:1.1.17-13.3.54"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3639.json"},{"CVE":"CVE-2008-3640","severity":"important","public_date":"2008-10-09T00:00:00Z","advisories":["RHSA-2008:0937"],"bugzilla":"464713","bugzilla_description":"CVE-2008-3640 CUPS: texttops integer overflow","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.1","cups-1:1.2.4-11.18.el5_2.2","cups-1:1.1.17-13.3.54"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3640.json"},{"CVE":"CVE-2008-3641","severity":"important","public_date":"2008-10-09T00:00:00Z","advisories":["RHSA-2008:0937"],"bugzilla":"464716","bugzilla_description":"CVE-2008-3641 CUPS: HP/GL reader insufficient bounds checking","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.1","cups-1:1.2.4-11.18.el5_2.2","cups-1:1.1.17-13.3.54"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3641.json"},{"CVE":"CVE-2008-1722","severity":"moderate","public_date":"2008-04-08T00:00:00Z","advisories":["RHSA-2008:0498"],"bugzilla":"441692","bugzilla_description":"CVE-2008-1722 cups: integer overflow in the image filter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["cups-1:1.2.4-11.18.el5_2.1","cups-1:1.1.22-0.rc1.9.20.2.el4_6.8","cups-1:1.1.17-13.3.53"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1722.json"},{"CVE":"CVE-2008-1373","severity":"moderate","public_date":"2008-04-01T14:00:00Z","advisories":["RHSA-2008:0192","RHSA-2008:0206"],"bugzilla":"438303","bugzilla_description":"CVE-2008-1373 cups: overflow in gif image filter","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.17-13.3.52","cups-1:1.2.4-11.14.el5_1.6","cups-1:1.1.22-0.rc1.9.20.2.el4_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1373.json"},{"CVE":"CVE-2008-1374","severity":"moderate","public_date":"2008-04-01T14:00:00Z","advisories":["RHSA-2008:0206"],"bugzilla":"438336","bugzilla_description":"CVE-2008-1374 cups: incomplete fix for CVE-2004-0888 / CVE-2005-0206","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.17-13.3.52","cups-1:1.1.22-0.rc1.9.20.2.el4_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1374.json"},{"CVE":"CVE-2008-0047","severity":"moderate","public_date":"2008-03-18T00:00:00Z","advisories":["RHSA-2008:0192"],"bugzilla":"436153","bugzilla_description":"CVE-2008-0047 cups: heap based buffer overflow in cgiCompileSearch()","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["cups-1:1.2.4-11.14.el5_1.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0047.json"},{"CVE":"CVE-2008-0053","severity":"moderate","public_date":"2008-03-18T00:00:00Z","advisories":["RHSA-2008:0192","RHSA-2008:0206"],"bugzilla":"438117","bugzilla_description":"CVE-2008-0053 cups: buffer overflows in HP-GL/2 filter","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.17-13.3.52","cups-1:1.2.4-11.14.el5_1.6","cups-1:1.1.22-0.rc1.9.20.2.el4_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0053.json"},{"CVE":"CVE-2008-0596","severity":"moderate","public_date":"2008-02-25T00:00:00Z","advisories":["RHSA-2008:0153","RHSA-2008:0161"],"bugzilla":"433825","bugzilla_description":"CVE-2008-0596 cups: memory leak handling IPP browse requests","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["cups-1:1.1.17-13.3.51","cups-1:1.1.22-0.rc1.9.20.2.el4_6.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0596.json"},{"CVE":"CVE-2008-0597","severity":"moderate","public_date":"2008-02-25T00:00:00Z","advisories":["RHSA-2008:0153","RHSA-2008:0161"],"bugzilla":"433847","bugzilla_description":"CVE-2008-0597 cups: dereference of free'd memory handling IPP browse requests","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.1.17-13.3.51","cups-1:1.1.22-0.rc1.9.20.2.el4_6.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0597.json"},{"CVE":"CVE-2008-0882","severity":"important","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0157"],"bugzilla":"433758","bugzilla_description":"CVE-2008-0882 cups: double free vulnerability in process_browse_data()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.2.4-11.14.el5_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0882.json"},{"CVE":"CVE-2007-4352","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1022","RHSA-2007:1021","RHSA-2007:1027","RHSA-2007:1026","RHSA-2007:1025","RHSA-2007:1024","RHSA-2007:1029","RHSA-2007:1030"],"bugzilla":"345101","bugzilla_description":"CVE-2007-4352 xpdf memory corruption in DCTStream::readProgressiveDataUnit()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","kdegraphics-7:3.3.1-6.el4_5","xpdf-1:2.02-11.el3","xpdf-1:3.00-14.el4","gpdf-0:2.8.2-7.7.1","cups-1:1.2.4-11.14.el5_1.3","tetex-0:2.0.2-22.0.1.EL4.10","tetex-0:3.0-33.2.el5_1.2","poppler-0:0.5.4-4.3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4352.json"},{"CVE":"CVE-2007-5392","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1022","RHSA-2007:1021","RHSA-2007:1027","RHSA-2007:1026","RHSA-2007:1025","RHSA-2007:1024","RHSA-2007:1029","RHSA-2007:1030"],"bugzilla":"345111","bugzilla_description":"CVE-2007-5392 xpdf buffer overflow in DCTStream::reset()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","kdegraphics-7:3.3.1-6.el4_5","xpdf-1:2.02-11.el3","xpdf-1:3.00-14.el4","gpdf-0:2.8.2-7.7.1","cups-1:1.2.4-11.14.el5_1.3","tetex-0:2.0.2-22.0.1.EL4.10","tetex-0:3.0-33.2.el5_1.2","poppler-0:0.5.4-4.3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5392.json"},{"CVE":"CVE-2007-5393","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1023","RHSA-2007:1022","RHSA-2007:1021","RHSA-2007:1031","RHSA-2007:1027","RHSA-2007:1026","RHSA-2007:1025","RHSA-2007:1024","RHSA-2007:1029","RHSA-2007:1028","RHSA-2007:1030","RHSA-2007:1051"],"bugzilla":"345121","bugzilla_description":"CVE-2007-5393 xpdf buffer overflow in CCITTFaxStream::lookChar()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tetex-0:1.0.7-38.5E.12","xpdf-1:2.02-11.el3","gpdf-0:2.8.2-7.7.1","cups-1:1.2.4-11.14.el5_1.3","cups-1:1.1.17-13.3.46","poppler-0:0.5.4-4.3.el5_1","cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","kdegraphics-7:3.3.1-6.el4_5","xpdf-1:3.00-14.el4","xpdf-1:0.92-19.el2","tetex-0:2.0.2-22.0.1.EL4.10","tetex-0:3.0-33.2.el5_1.2","kdegraphics-7:3.5.4-5.el5_1","tetex-0:1.0.7-67.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5393.json"},{"CVE":"CVE-2007-4351","severity":"important","public_date":"2007-10-31T00:00:00Z","advisories":["RHSA-2007:1023","RHSA-2007:1022","RHSA-2007:1020"],"bugzilla":"345091","bugzilla_description":"CVE-2007-4351 cups boundary error","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","cups-1:1.1.17-13.3.46","cups-1:1.2.4-11.14.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4351.json"},{"CVE":"CVE-2007-3387","severity":"important","public_date":"2007-07-28T00:00:00Z","advisories":["RHSA-2007:0729","RHSA-2007:0730","RHSA-2007:0732","RHSA-2007:0731","RHSA-2007:0720","RHSA-2007:0735"],"bugzilla":"248194","bugzilla_description":"CVE-2007-3387 xpdf integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["xpdf-1:3.00-12.RHEL4","tetex-0:1.0.7-38.5E.11","cups-1:1.1.22-0.rc1.9.20.2","gpdf-0:2.8.2-7.7","cups-1:1.1.17-13.3.45","cups-1:1.2.4-11.5.3.el5","tetex-0:2.0.2-22.0.1.EL4.8","kdegraphics-7:3.5.4-2.el5","kdegraphics-7:3.3.1-4.RHEL4","tetex-0:3.0-33.1.el5","poppler-0:0.5.4-4.1.el5","xpdf-1:2.02-10.RHEL3","tetex-0:1.0.7-67.10","xpdf-1:0.92-18.RHEL2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3387.json"},{"CVE":"CVE-2007-4045","severity":"low","public_date":"2007-07-20T00:00:00Z","advisories":["RHSA-2007:1023","RHSA-2007:1022"],"bugzilla":"250161","bugzilla_description":"CVE-2007-4045 Incomplete fix for CVE-2007-0720 CUPS denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","cups-1:1.1.17-13.3.46"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4045.json"},{"CVE":"CVE-2007-0720","severity":"moderate","public_date":"2006-11-13T00:00:00Z","advisories":["RHSA-2007:0123"],"bugzilla":"1618271","bugzilla_description":"CVE-2007-0720 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.18","cups-1:1.2.4-11.5.1.el5","cups-1:1.1.17-13.3.42"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0720.json"},{"CVE":"CVE-2005-3624","severity":"important","public_date":"2006-01-03T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2006:0177","RHSA-2006:0163","RHSA-2005:868"],"bugzilla":"1617826","bugzilla_description":"CVE-2005-3624 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.4","tetex-0:1.0.7-67.9","cups-1:1.1.17-13.3.36","cups-1:1.1.22-0.rc1.9.10","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3624.json"},{"CVE":"CVE-2005-3625","severity":"important","public_date":"2006-01-03T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2006:0177","RHSA-2006:0163","RHSA-2005:868"],"bugzilla":"1617827","bugzilla_description":"CVE-2005-3625 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.4","tetex-0:1.0.7-67.9","cups-1:1.1.17-13.3.36","cups-1:1.1.22-0.rc1.9.10","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3625.json"},{"CVE":"CVE-2005-3626","severity":"important","public_date":"2006-01-03T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2006:0177","RHSA-2006:0163","RHSA-2005:868"],"bugzilla":"1617828","bugzilla_description":"CVE-2005-3626 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.4","tetex-0:1.0.7-67.9","cups-1:1.1.17-13.3.36","cups-1:1.1.22-0.rc1.9.10","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3626.json"},{"CVE":"CVE-2005-3627","severity":"important","public_date":"2006-01-03T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2006:0177","RHSA-2006:0163","RHSA-2005:868"],"bugzilla":"1617829","bugzilla_description":"CVE-2005-3627 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.4","tetex-0:1.0.7-67.9","cups-1:1.1.17-13.3.36","cups-1:1.1.22-0.rc1.9.10","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3627.json"},{"CVE":"CVE-2005-3191","severity":"important","public_date":"2005-12-06T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2005:878","RHSA-2005:867","RHSA-2005:868"],"bugzilla":"1617796","bugzilla_description":"CVE-2005-3191 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.3","cups-1:1.1.22-0.rc1.9.9","tetex-0:1.0.7-67.9","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7","cups-1:1.1.17-13.3.34"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3191.json"},{"CVE":"CVE-2005-3192","severity":"important","public_date":"2005-12-06T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2005:878","RHSA-2005:867","RHSA-2005:868"],"bugzilla":"1617797","bugzilla_description":"CVE-2005-3192 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.3","cups-1:1.1.22-0.rc1.9.9","tetex-0:1.0.7-67.9","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7","cups-1:1.1.17-13.3.34"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3192.json"},{"CVE":"CVE-2005-3193","severity":"important","public_date":"2005-12-06T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2005:878","RHSA-2005:867","RHSA-2005:868"],"bugzilla":"1617798","bugzilla_description":"CVE-2005-3193 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.3","cups-1:1.1.22-0.rc1.9.9","tetex-0:1.0.7-67.9","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7","cups-1:1.1.17-13.3.34"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3193.json"},{"CVE":"CVE-2005-3628","severity":"important","public_date":"2005-12-06T00:00:00Z","advisories":["RHSA-2006:0160","RHSA-2005:840","RHSA-2005:878","RHSA-2005:867","RHSA-2005:868"],"bugzilla":"1617830","bugzilla_description":"CVE-2005-3628 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.10","gpdf-0:2.8.2-7.3","cups-1:1.1.22-0.rc1.9.9","tetex-0:1.0.7-67.9","xpdf-1:2.02-9.8","kdegraphics-7:3.3.1-3.6","tetex-0:2.0.2-22.EL4.7","cups-1:1.1.17-13.3.34"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3628.json"},{"CVE":"CVE-2005-2097","severity":"important","public_date":"2005-08-09T00:00:00Z","advisories":["RHSA-2005:670","RHSA-2005:708","RHSA-2005:671","RHSA-2005:706"],"bugzilla":"1617684","bugzilla_description":"CVE-2005-2097 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-11.8","gpdf-0:2.8.2-4.4","cups-1:1.1.17-13.3.31","kdegraphics-7:3.3.1-3.4","cups-1:1.1.22-0.rc1.9.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2097.json"},{"CVE":"CVE-2005-0064","severity":"important","public_date":"2005-01-18T00:00:00Z","advisories":["RHSA-2005:049","RHSA-2005:059","RHSA-2005:026","RHSA-2005:034","RHSA-2005:057","RHSA-2005:066","RHSA-2005:053"],"bugzilla":"1617441","bugzilla_description":"CVE-2005-0064 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gpdf-0:2.8.2-4.3","cups-1:1.1.17-13.3.24","xpdf-1:3.00-11.5","tetex-0:2.0.2-22.EL4.4","xpdf-1:2.02-9.5","cups-1:1.1.22-0.rc1.9.6","kdegraphics-7:3.3.1-3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0064.json"},{"CVE":"CVE-2005-2874","severity":"moderate","public_date":"2005-01-07T00:00:00Z","advisories":["RHSA-2005:772"],"bugzilla":"1617763","bugzilla_description":"CVE-2005-2874 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2874.json"},{"CVE":"CVE-2004-1125","severity":"moderate","public_date":"2004-12-21T00:00:00Z","advisories":["RHSA-2005:026","RHSA-2005:034","RHSA-2005:354","RHSA-2005:013","RHSA-2005:057","RHSA-2005:066","RHSA-2005:053","RHSA-2005:018"],"bugzilla":"1617371","bugzilla_description":"CVE-2004-1125 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gpdf-0:2.8.2-4.3","xpdf-1:2.02-9.4","xpdf-1:3.00-11.5","tetex-0:2.0.2-22.EL4.4","cups-1:1.1.17-13.3.22","tetex-0:1.0.7-67.7","cups-1:1.1.22-0.rc1.9.6","kdegraphics-7:3.3.1-3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1125.json"},{"CVE":"CVE-2004-1267","severity":"important","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:013","RHSA-2005:053"],"bugzilla":"1617400","bugzilla_description":"CVE-2004-1267 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.22","cups-1:1.1.22-0.rc1.9.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1267.json"},{"CVE":"CVE-2004-1268","severity":"important","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:013","RHSA-2005:053"],"bugzilla":"1617401","bugzilla_description":"CVE-2004-1268 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.22","cups-1:1.1.22-0.rc1.9.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1268.json"},{"CVE":"CVE-2004-1269","severity":"important","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:013","RHSA-2005:053"],"bugzilla":"1617402","bugzilla_description":"CVE-2004-1269 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.22","cups-1:1.1.22-0.rc1.9.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1269.json"},{"CVE":"CVE-2004-1270","severity":"important","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:013","RHSA-2005:053"],"bugzilla":"1617403","bugzilla_description":"CVE-2004-1270 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.22","cups-1:1.1.22-0.rc1.9.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1270.json"},{"CVE":"CVE-2004-0888","severity":"important","public_date":"2004-10-21T00:00:00Z","advisories":["RHSA-2005:354","RHSA-2004:592","RHSA-2005:066","RHSA-2004:543"],"bugzilla":"1617315","bugzilla_description":"CVE-2004-0888 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.16","xpdf-1:2.02-9.3","tetex-0:1.0.7-67.7","kdegraphics-7:3.3.1-3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0888.json"},{"CVE":"CVE-2005-0206","severity":"important","public_date":"2004-10-20T00:00:00Z","advisories":["RHSA-2005:213","RHSA-2005:034","RHSA-2005:057","RHSA-2005:132","RHSA-2005:053"],"bugzilla":"1617493","bugzilla_description":"CVE-2005-0206 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gpdf-0:2.8.2-4.3","cups-1:1.1.17-13.3.27","xpdf-1:3.00-11.5","xpdf-1:2.02-9.6","cups-1:1.1.22-0.rc1.9.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0206.json"},{"CVE":"CVE-2004-0923","severity":null,"public_date":"2004-09-30T00:00:00Z","advisories":["RHSA-2004:543"],"bugzilla":"1617323","bugzilla_description":"CVE-2004-0923 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0923.json"},{"CVE":"CVE-2004-0558","severity":null,"public_date":"2004-08-21T00:00:00Z","advisories":["RHSA-2004:449"],"bugzilla":"1617230","bugzilla_description":"CVE-2004-0558 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0558.json"},{"CVE":"CVE-2004-2154","severity":"moderate","public_date":"2004-05-05T00:00:00Z","advisories":["RHSA-2005:571"],"bugzilla":"1617422","bugzilla_description":"CVE-2004-2154 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.17-13.3.29"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-2154.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/curl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/curl_security_api_results.json
new file mode 100644
index 0000000..67d19b0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/curl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8231","severity":"low","public_date":"2020-08-19T00:00:00Z","advisories":[],"bugzilla":"1868032","bugzilla_description":"CVE-2020-8231 curl: Expired pointer dereference via multi API with `CURLOPT_CONNECT_ONLY` option set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8231.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-8177","severity":"moderate","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1847915","bugzilla_description":"CVE-2020-8177 curl: Incorrect argument check can allow remote servers to overwrite local files","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8177.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-8169","severity":"moderate","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1847916","bugzilla_description":"CVE-2020-8169 libcurl: partial password leak over DNS on HTTP redirect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8169.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-15601","severity":"low","public_date":"2020-01-06T00:00:00Z","advisories":[],"bugzilla":"1794143","bugzilla_description":"CVE-2019-15601 curl: improper input validation allows users to create a 'FILE:' URL that can make the client access a remote file using SMB","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15601.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-5481","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792"],"bugzilla":"1749402","bugzilla_description":"CVE-2019-5481 curl: double free due to subsequent call of realloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5481.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2019-5482","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792","RHSA-2020:3916"],"bugzilla":"1749652","bugzilla_description":"CVE-2019-5482 curl: heap buffer overflow in function tftp_receive_packet()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-59.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5482.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-5443","severity":"important","public_date":"2019-06-25T00:00:00Z","advisories":[],"bugzilla":"1772100","bugzilla_description":"CVE-2019-5443 curl: Windows OpenSSL engine code injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5443.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-5435","severity":"low","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1710609","bugzilla_description":"CVE-2019-5435 curl: Integer overflows in curl_url_set() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-5436","severity":"low","public_date":"2019-05-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1020","RHBA-2020:1539","RHSA-2020:1792","RHSA-2019:1543","RHSA-2020:2505","RHBA-2020:1540"],"bugzilla":"1710620","bugzilla_description":"CVE-2019-5436 curl: TFTP receive heap buffer overflow in tftp_receive_packet() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","curl-0:7.29.0-54.el7_7.3","redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-57.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5436.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16890","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670252","bugzilla_description":"CVE-2018-16890 curl: NTLM type-2 heap out-of-bounds buffer read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-190","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-3822","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670254","bugzilla_description":"CVE-2019-3822 curl: NTLMv2 type-3 header stack buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-3823","severity":"low","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670256","bugzilla_description":"CVE-2019-3823 curl: SMTP end-of-response out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-20483","severity":"moderate","public_date":"2018-12-26T00:00:00Z","advisories":["RHSA-2019:3701","RHBA-2019:3303"],"bugzilla":"1662705","bugzilla_description":"CVE-2018-20483 wget: Information exposure in set_file_metadata function in xattr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20483.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-16839","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":["RHSA-2019:1543"],"bugzilla":"1642201","bugzilla_description":"CVE-2018-16839 curl: Integer overflow leading to heap-based buffer overflow in Curl_sasl_create_plain_message()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-16840","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":["RHSA-2019:1543"],"bugzilla":"1642203","bugzilla_description":"CVE-2018-16840 curl: Use-after-free when closing \"easy\" handle in Curl_close()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16840.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-16842","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":["RHSA-2019:1543","RHSA-2019:2181"],"bugzilla":"1644124","bugzilla_description":"CVE-2018-16842 curl: Heap-based buffer over-read in the curl tool warning formatting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["curl-0:7.29.0-54.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2018-14618","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2019:1880","RHSA-2018:3558"],"bugzilla":"1622707","bugzilla_description":"CVE-2018-14618 curl: NTLM password overflow via integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-0500","severity":"moderate","public_date":"2018-07-11T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1597101","bugzilla_description":"CVE-2018-0500 curl: Heap-based buffer overflow in Curl_smtp_escape_eob() when uploading data over SMTP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000300","severity":"important","public_date":"2018-05-16T00:00:00Z","advisories":[],"bugzilla":"1575533","bugzilla_description":"CVE-2018-1000300 curl: FTP shutdown response heap-based buffer overflow can potentially lead to RCE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000300.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000301","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1575536","bugzilla_description":"CVE-2018-1000301 curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000301.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-1000120","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1552628","bugzilla_description":"CVE-2018-1000120 curl: FTP path trickery leads to NIL byte out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000120.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-1000121","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1552631","bugzilla_description":"CVE-2018-1000121 curl: LDAP NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000121.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000122","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1553398","bugzilla_description":"CVE-2018-1000122 curl: RTSP RTP buffer over-read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000122.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000005","severity":"low","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2019:1543"],"bugzilla":"1536013","bugzilla_description":"CVE-2018-1000005 curl: Out-of-bounds read in code handling HTTP/2 trailers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-1000007","severity":"moderate","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1537125","bugzilla_description":"CVE-2018-1000007 curl: HTTP authentication leak in redirects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000007.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-8816","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1515757","bugzilla_description":"CVE-2017-8816 curl: NTLM buffer overflow via integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8817","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1515760","bugzilla_description":"CVE-2017-8817 curl: FTP wildcard out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-8818","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":[],"bugzilla":"1517691","bugzilla_description":"CVE-2017-8818 curl: Out-of-bound access in SSL related cleanup code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-1000257","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2017:3263","RHSA-2018:2486"],"bugzilla":"1503705","bugzilla_description":"CVE-2017-1000257 curl: IMAP FETCH response out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-42.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-1000254","severity":"moderate","public_date":"2017-10-04T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1495541","bugzilla_description":"CVE-2017-1000254 curl: FTP PWD response parser out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-1000101","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1478309","bugzilla_description":"CVE-2017-1000101 curl: URL globbing out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2017-1000100","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1478310","bugzilla_description":"CVE-2017-1000100 curl: TFTP sends more than buffer size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-1000099","severity":"moderate","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1478316","bugzilla_description":"CVE-2017-1000099 curl: FILE buffer read out of bounds","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000099.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-9502","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1461321","bugzilla_description":"CVE-2017-9502 curl: URL file scheme drive letter buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9502.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7468","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443381","bugzilla_description":"CVE-2017-7468 curl: TLS session resumption client cert bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-7407","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1439190","bugzilla_description":"CVE-2017-7407 curl: --write-out out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7407.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2017-2628","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":["RHSA-2017:0847"],"bugzilla":"1422464","bugzilla_description":"CVE-2017-2628 curl: negotiate not treated as connection-oriented (incomplete fix for CVE-2015-3148)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["curl-0:7.19.7-53.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2628.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-2629","severity":"moderate","public_date":"2017-02-22T00:00:00Z","advisories":[],"bugzilla":"1425746","bugzilla_description":"CVE-2017-2629 curl: SSL_VERIFYSTATUS ignored","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9594","severity":"moderate","public_date":"2016-12-23T00:00:00Z","advisories":[],"bugzilla":"1408385","bugzilla_description":"CVE-2016-9594 curl: Unitialized random","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9594.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-9586","severity":"low","public_date":"2016-12-21T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1406712","bugzilla_description":"CVE-2016-9586 curl: printf floating point buffer overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9586.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-8615","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388370","bugzilla_description":"CVE-2016-8615 curl: Cookie injection for other servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-99","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8616","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388371","bugzilla_description":"CVE-2016-8616 curl: Case insensitive password comparison","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8616.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-8617","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388377","bugzilla_description":"CVE-2016-8617 curl: Out-of-bounds write via unchecked multiplication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-787","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8618","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388378","bugzilla_description":"CVE-2016-8618 curl: Double-free in curl_maprintf","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8619","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388379","bugzilla_description":"CVE-2016-8619 curl: Double-free in krb5 code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8619.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8620","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1388382","bugzilla_description":"CVE-2016-8620 curl: Glob parser write/read out of bounds","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-120","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8620.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-8621","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388385","bugzilla_description":"CVE-2016-8621 curl: curl_getdate out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8621.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8622","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388386","bugzilla_description":"CVE-2016-8622 curl: URL unescape heap overflow via integer truncation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-190->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-8623","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388388","bugzilla_description":"CVE-2016-8623 curl: Use-after-free via shared cookies","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8623.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8624","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388390","bugzilla_description":"CVE-2016-8624 curl: Invalid URL parsing with '#'","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8625","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388392","bugzilla_description":"CVE-2016-8625 curl: IDNA 2003 makes curl use wrong host","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8625.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-7167","severity":"low","public_date":"2016-09-14T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2017:2016","RHSA-2018:2486"],"bugzilla":"1375906","bugzilla_description":"CVE-2016-7167 curl: escape and unescape integer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["curl-0:7.29.0-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2016-7141","severity":"low","public_date":"2016-09-05T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1373229","bugzilla_description":"CVE-2016-7141 curl: Incorrect reuse of client certificates","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7141.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-5419","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1362183","bugzilla_description":"CVE-2016-5419 curl: TLS session resumption client cert bypass","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5419.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-5420","severity":"low","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1362190","bugzilla_description":"CVE-2016-5420 curl: Re-using connection with wrong client cert","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5420.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-5421","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1362199","bugzilla_description":"CVE-2016-5421 curl: Use of connection struct after free","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5421.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-3739","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1335430","bugzilla_description":"CVE-2016-3739 curl: TLS certificate name check bypass with mbedTLS and PolarSSL","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3739.json"},{"CVE":"CVE-2016-0755","severity":"low","public_date":"2016-01-27T00:00:00Z","advisories":[],"bugzilla":"1302263","bugzilla_description":"CVE-2016-0755 curl: NTLM credentials not-checked for proxy connection re-use","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0755.json"},{"CVE":"CVE-2015-3237","severity":"moderate","public_date":"2015-06-17T00:00:00Z","advisories":[],"bugzilla":"1233814","bugzilla_description":"CVE-2015-3237 curl: SMB send off unrelated memory contents","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3237.json"},{"CVE":"CVE-2015-3236","severity":"low","public_date":"2015-06-17T00:00:00Z","advisories":[],"bugzilla":"1233816","bugzilla_description":"CVE-2015-3236 curl: lingering HTTP credentials in connection re-use","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3236.json"},{"CVE":"CVE-2015-3153","severity":"moderate","public_date":"2015-04-29T00:00:00Z","advisories":[],"bugzilla":"1217341","bugzilla_description":"CVE-2015-3153 curl: sensitive HTTP server headers also sent to proxies","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3153.json"},{"CVE":"CVE-2015-3143","severity":"moderate","public_date":"2015-04-22T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1213306","bugzilla_description":"CVE-2015-3143 curl: re-using authenticated connection when unauthenticated","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3143.json"},{"CVE":"CVE-2015-3144","severity":"low","public_date":"2015-04-22T00:00:00Z","advisories":[],"bugzilla":"1213335","bugzilla_description":"CVE-2015-3144 curl: host name out of boundary memory access","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-129->CWE-131->CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3144.json"},{"CVE":"CVE-2015-3145","severity":"low","public_date":"2015-04-22T00:00:00Z","advisories":[],"bugzilla":"1213347","bugzilla_description":"CVE-2015-3145 curl: cookie parser out of boundary memory access","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-129->CWE-131->CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3145.json"},{"CVE":"CVE-2015-3148","severity":"moderate","public_date":"2015-04-22T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1213351","bugzilla_description":"CVE-2015-3148 curl: Negotiate not treated as connection-oriented","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3148.json"},{"CVE":"CVE-2014-8150","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1178692","bugzilla_description":"CVE-2014-8150 curl: URL request injection vulnerability in parseurlandfillconn()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-113","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8150.json"},{"CVE":"CVE-2014-8151","severity":"low","public_date":"2015-01-08T00:00:00Z","advisories":[],"bugzilla":"1178698","bugzilla_description":"CVE-2014-8151 curl: certificate check bypass when built with DarwinSSL as TLS backend","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-697->CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8151.json"},{"CVE":"CVE-2014-3707","severity":"moderate","public_date":"2014-11-05T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1154941","bugzilla_description":"CVE-2014-3707 curl: incorrect handle duplication after COPYPOSTFIELDS","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"(CWE-125|CWE-416)","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3707.json"},{"CVE":"CVE-2014-3613","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1136154","bugzilla_description":"CVE-2014-3613 curl: incorrect handling of IP addresses in cookie domain","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20->CWE-284","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3613.json"},{"CVE":"CVE-2014-3620","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":[],"bugzilla":"1138846","bugzilla_description":"CVE-2014-3620 curl: cookies accepted for TLDs","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3620.json"},{"CVE":"CVE-2014-0138","severity":"moderate","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0561"],"bugzilla":"1079148","bugzilla_description":"CVE-2014-0138 curl: wrong re-use of connections in libcurl","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["curl-0:7.19.7-37.el6_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0138.json"},{"CVE":"CVE-2014-0139","severity":"low","public_date":"2014-03-26T00:00:00Z","advisories":[],"bugzilla":"1079149","bugzilla_description":"CVE-2014-0139 curl: IP address wildcard certificate validation issue in libcurl","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0139.json"},{"CVE":"CVE-2014-0015","severity":"moderate","public_date":"2014-01-29T00:00:00Z","advisories":["RHSA-2014:0561"],"bugzilla":"1053903","bugzilla_description":"CVE-2014-0015 curl: re-use of wrong HTTP NTLM connection in libcurl","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["curl-0:7.19.7-37.el6_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0015.json"},{"CVE":"CVE-2013-6422","severity":"low","public_date":"2013-12-17T00:00:00Z","advisories":[],"bugzilla":"1037918","bugzilla_description":"CVE-2013-6422 curl: TLS/SSL certificate name check disabled with peer verification when using GnuTLS","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6422.json"},{"CVE":"CVE-2013-4545","severity":"low","public_date":"2013-11-15T00:00:00Z","advisories":[],"bugzilla":"1029159","bugzilla_description":"CVE-2013-4545 curl: TLS/SSL certificate name check disabled with peer verification","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4545.json"},{"CVE":"CVE-2013-2174","severity":"moderate","public_date":"2013-06-22T00:00:00Z","advisories":["RHSA-2013:0983"],"bugzilla":"965640","bugzilla_description":"CVE-2013-2174 curl: Loop counter error, leading to heap-based buffer overflow when decoding certain URLs","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["curl-0:7.15.5-17.el5_9","curl-0:7.19.7-37.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2174.json"},{"CVE":"CVE-2013-1944","severity":"moderate","public_date":"2013-04-12T00:00:00Z","advisories":["RHSA-2013:0771"],"bugzilla":"950577","bugzilla_description":"CVE-2013-1944 curl: Cookie domain suffix match vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["curl-0:7.19.7-36.el6_4","curl-0:7.15.5-16.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1944.json"},{"CVE":"CVE-2013-0249","severity":"moderate","public_date":"2013-02-06T00:00:00Z","advisories":[],"bugzilla":"906779","bugzilla_description":"CVE-2013-0249 curl: Stack-based buffer overflow when negotiating SASL DIGEST-MD5 authentication with IMAP, POP3 and SMTP protocols","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0249.json"},{"CVE":"CVE-2012-0036","severity":"moderate","public_date":"2012-01-24T00:00:00Z","advisories":[],"bugzilla":"773457","bugzilla_description":"CVE-2012-0036 curl: URL sanitization vulnerability","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0036.json"},{"CVE":"CVE-2011-2192","severity":"moderate","public_date":"2011-06-23T00:00:00Z","advisories":["RHSA-2011:0918"],"bugzilla":"711454","bugzilla_description":"CVE-2011-2192 curl: Improper delegation of client credentials during GSS negotiation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["curl-0:7.15.5-9.el5_6.3","curl-0:7.19.7-26.el6_1.1","curl-0:7.12.1-17.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2192.json"},{"CVE":"CVE-2010-0734","severity":"moderate","public_date":"2010-02-09T00:00:00Z","advisories":["RHSA-2010:0329","RHSA-2010:0273"],"bugzilla":"563220","bugzilla_description":"CVE-2010-0734 curl: zlib-compression causes curl to pass more than CURL_MAX_WRITE_SIZE bytes to write callback","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["curl-0:7.12.1-11.1.el4_8.3","curl-0:7.10.6-11.rhel3","curl-0:7.15.5-9.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0734.json"},{"CVE":"CVE-2009-2417","severity":"moderate","public_date":"2009-08-12T00:00:00Z","advisories":["RHSA-2009:1209"],"bugzilla":"516181","bugzilla_description":"CVE-2009-2417 curl: incorrect verification of SSL certificate with NUL in name","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["curl-0:7.12.1-11.1.el4_8.1","curl-0:7.15.5-2.1.el5_3.5","curl-0:7.10.6-10.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2417.json"},{"CVE":"CVE-2009-0037","severity":"moderate","public_date":"2009-03-03T00:00:00Z","advisories":["RHSA-2009:0341"],"bugzilla":"485271","bugzilla_description":"CVE-2009-0037 curl: local file access via unsafe redirects","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["curl-0:7.10.6-9.rhel3","curl-0:7.8-3.rhel2","curl-0:7.12.1-11.1.el4_7.1","curl-0:7.15.5-2.1.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0037.json"},{"CVE":"CVE-2005-4077","severity":"moderate","public_date":"2005-12-07T00:00:00Z","advisories":["RHSA-2005:875"],"bugzilla":"1617850","bugzilla_description":"CVE-2005-4077 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["curl-0:7.12.1-8.rhel4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4077.json"},{"CVE":"CVE-2005-3185","severity":"important","public_date":"2005-10-12T00:00:00Z","advisories":["RHSA-2005:807","RHSA-2005:812"],"bugzilla":"1617794","bugzilla_description":"CVE-2005-3185 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["curl-0:7.10.6-7.rhel3","wget-0:1.10.2-0.40E","wget-0:1.10.2-0.30E","curl-0:7.12.1-6.rhel4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3185.json"},{"CVE":"CVE-2005-0490","severity":"low","public_date":"2005-02-21T00:00:00Z","advisories":["RHSA-2005:340"],"bugzilla":"1617532","bugzilla_description":"CVE-2005-0490 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["curl-0:7.12.1-5.rhel4","curl-0:7.10.6-6.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0490.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/custodia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/custodia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/custodia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-imapd-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-imapd-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-imapd-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-imapd-vzic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-imapd-vzic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-imapd-vzic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-imapd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-imapd_security_api_results.json
new file mode 100644
index 0000000..356f16f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-imapd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-19783","severity":"moderate","public_date":"2019-12-19T00:00:00Z","advisories":[],"bugzilla":"1786756","bugzilla_description":"CVE-2019-19783 cyrus-imapd: lmtpd component created mailboxes with administrator privileges if the \"fileinto\" was used, bypassing ACL checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19783.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-18928","severity":"moderate","public_date":"2019-11-14T00:00:00Z","advisories":[],"bugzilla":"1775177","bugzilla_description":"CVE-2019-18928 cyrus-imapd: privilege escalation in HTTP request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-11356","severity":"important","public_date":"2019-06-04T00:00:00Z","advisories":["RHSA-2019:1771"],"bugzilla":"1717828","bugzilla_description":"CVE-2019-11356 cyrus-imapd: buffer overflow in CalDAV request handling triggered by a long iCalendar property name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["cyrus-imapd-0:3.0.7-15.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11356.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-14230","severity":"moderate","public_date":"2017-08-31T00:00:00Z","advisories":[],"bugzilla":"1491236","bugzilla_description":"CVE-2017-14230 cyrus-imapd: Off-by-one error in prefix calculation in the mboxlist_do_find function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14230.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2015-8077","severity":"moderate","public_date":"2015-10-26T00:00:00Z","advisories":[],"bugzilla":"1278374","bugzilla_description":"CVE-2015-8077 cyrus-imapd: Integer overflow in range checks","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8077.json"},{"CVE":"CVE-2015-8078","severity":"moderate","public_date":"2015-10-26T00:00:00Z","advisories":[],"bugzilla":"1278380","bugzilla_description":"CVE-2015-8078 cyrus-imapd: Integer overflow in index_urlfetch","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8078.json"},{"CVE":"CVE-2015-8076","severity":"low","public_date":"2015-06-18T00:00:00Z","advisories":[],"bugzilla":"1267869","bugzilla_description":"CVE-2015-8076 cyrus-imapd: Out of bounds heap read in index_urlfetch","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"(CWE-125|CWE-122)->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8076.json"},{"CVE":"CVE-2011-3372","severity":"moderate","public_date":"2011-10-05T00:00:00Z","advisories":["RHSA-2011:1508"],"bugzilla":"740822","bugzilla_description":"CVE-2011-3372 cyrus-imapd: nntpd authentication bypass","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["cyrus-imapd-0:2.3.7-12.el5_7.2","cyrus-imapd-0:2.2.12-17.el4","cyrus-imapd-0:2.3.16-6.el6_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3372.json"},{"CVE":"CVE-2011-3208","severity":"important","public_date":"2011-09-08T00:00:00Z","advisories":["RHSA-2011:1317"],"bugzilla":"734926","bugzilla_description":"CVE-2011-3208 cyrus-imapd: nntpd buffer overflow in split_wildmats()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cyrus-imapd-0:2.3.7-12.el5_7.1","cyrus-imapd-0:2.2.12-16.el4","cyrus-imapd-0:2.3.16-6.el6_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3208.json"},{"CVE":"CVE-2011-1926","severity":"moderate","public_date":"2011-03-25T00:00:00Z","advisories":["RHSA-2011:0859"],"bugzilla":"705288","bugzilla_description":"CVE-2011-1926 cyrus-imapd: STARTTLS plaintext command injection","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["cyrus-imapd-0:2.2.12-15.el4","cyrus-imapd-0:2.3.16-6.el6_1.2","cyrus-imapd-0:2.3.7-7.el5_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1926.json"},{"CVE":"CVE-2009-3235","severity":"important","public_date":"2009-09-14T00:00:00Z","advisories":["RHSA-2009:1459"],"bugzilla":"523910","bugzilla_description":"CVE-2009-3235 cyrus-impad: CMU sieve buffer overflows","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["cyrus-imapd-0:2.3.7-7.el5_4.3","cyrus-imapd-0:2.2.12-10.el4_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3235.json"},{"CVE":"CVE-2009-2632","severity":"important","public_date":"2009-09-07T00:00:00Z","advisories":["RHSA-2009:1459"],"bugzilla":"521010","bugzilla_description":"CVE-2009-2632 cyrus-imapd: buffer overflow in cyrus sieve","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["cyrus-imapd-0:2.3.7-7.el5_4.3","cyrus-imapd-0:2.2.12-10.el4_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2632.json"},{"CVE":"CVE-2009-0688","severity":"important","public_date":"2008-05-15T00:00:00Z","advisories":["RHSA-2009:1116"],"bugzilla":"487251","bugzilla_description":"CVE-2009-0688 cyrus-sasl: sasl_encode64() does not reliably null-terminate its output","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["cyrus-imapd-0:2.2.12-10.el4_8.1","cyrus-imapd-0:2.3.7-2.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0688.json"},{"CVE":"CVE-2011-3481","severity":"moderate","public_date":"2005-12-17T00:00:00Z","advisories":["RHSA-2011:1508"],"bugzilla":"738391","bugzilla_description":"CVE-2011-3481 cyrus-imapd: NULL pointer dereference via crafted References header in email","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["cyrus-imapd-0:2.3.7-12.el5_7.2","cyrus-imapd-0:2.2.12-17.el4","cyrus-imapd-0:2.3.16-6.el6_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3481.json"},{"CVE":"CVE-2005-0546","severity":"moderate","public_date":"2005-02-14T00:00:00Z","advisories":["RHSA-2005:408"],"bugzilla":"1617539","bugzilla_description":"CVE-2005-0546 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cyrus-imapd-0:2.2.12-3.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0546.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-gs2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-gs2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-gs2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-gssapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-gssapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-gssapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-ldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-ldap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-ldap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-md5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-md5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-md5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-ntlm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-ntlm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-ntlm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-plain_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-plain_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-plain_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-scram_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-scram_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-scram_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-sql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-sql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl-sql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl_security_api_results.json
new file mode 100644
index 0000000..47c7336
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/cyrus-sasl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-19906","severity":"moderate","public_date":"2019-11-28T00:00:00Z","advisories":[],"bugzilla":"1791854","bugzilla_description":"CVE-2019-19906 cyrus-sasl: denial of service in _sasl_add_string function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19906.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2013-4122","severity":"moderate","public_date":"2013-07-12T00:00:00Z","advisories":[],"bugzilla":"984669","bugzilla_description":"CVE-2013-4122 cyrus-sasl: NULL pointer dereference (DoS) when glibc v.2.17 or FIPS-140 enabled Linux system used","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4122.json"},{"CVE":"CVE-2006-1721","severity":"moderate","public_date":"2005-05-15T00:00:00Z","advisories":["RHSA-2007:0795","RHSA-2007:0878"],"bugzilla":"189814","bugzilla_description":"CVE-2006-1721 cyrus-sasl digest-md5 DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cyrus-sasl-0:2.1.19-14","cyrus-sasl-0:2.1.15-15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1721.json"},{"CVE":"CVE-2004-0884","severity":"important","public_date":"2004-10-07T00:00:00Z","advisories":["RHSA-2004:546"],"bugzilla":"1617313","bugzilla_description":"CVE-2004-0884 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cyrus-sasl-0:2.1.15-10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0884.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxctl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxctl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxctl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxctl-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxctl-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxctl-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxctl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxctl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxctl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/daxio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dblatex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dblatex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dblatex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-c++-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-c++-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-c++-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-c++-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-c++-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-c++-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-c++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-c++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-c++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-daemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-daemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-daemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-glib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-glib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-glib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-glib_security_api_results.json
new file mode 100644
index 0000000..7471bb5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-glib_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-0292","severity":"important","public_date":"2013-02-14T00:00:00Z","advisories":["RHSA-2013:0568"],"bugzilla":"911658","bugzilla_description":"CVE-2013-0292 dbus-glib: Local privilege escalation due improper filtering of message sender when NameOwnerChanged signal received","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["dbus-glib-0:0.73-11.el5_9","dbus-glib-0:0.86-6.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0292.json"},{"CVE":"CVE-2010-1172","severity":"moderate","public_date":"2010-08-10T00:00:00Z","advisories":["RHSA-2010:0616"],"bugzilla":"585394","bugzilla_description":"CVE-2010-1172 dbus-glib: property access not validated","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P/","CWE":null,"affected_packages":["dbus-glib-0:0.73-10.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1172.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-x11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-x11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus-x11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus_security_api_results.json
new file mode 100644
index 0000000..2cca7c3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbus_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12049","severity":"important","public_date":"2020-06-04T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3014","RHSA-2020:2894","RHSA-2020:3298","RHSA-2020:3044"],"bugzilla":"1849041","bugzilla_description":"CVE-2020-12049 dbus: denial of service via file descriptor leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-43.82.202007300301.0","dbus-1:1.12.8-10.el8_2","dbus-1:1.12.8-10.el8_1","dbus-1:1.10.24-14.el7_8","dbus-1:1.12.8-8.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12049.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-16782","severity":"moderate","public_date":"2019-12-18T00:00:00Z","advisories":["RHSA-2020:2480"],"bugzilla":"1789100","bugzilla_description":"CVE-2019-16782 rubygem-rack: hijack sessions by using timing attacks targeting the session id","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["cfme-gemset-0:5.11.6.0-1.el8cf","cfme-amazon-smartstate-0:5.11.6.0-1.el8cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-12749","severity":"important","public_date":"2019-06-11T00:00:00Z","advisories":["RHSA-2019:2870","RHSA-2020:4032","RHSA-2019:2868","RHSA-2019:3707","RHBA-2019:3303","RHSA-2019:1726"],"bugzilla":"1719344","bugzilla_description":"CVE-2019-12749 dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["dbus-1:1.2.24-9.el6_6","dbus-1:1.12.8-9.el8","redhat-coreos-42.81.20191107.0","dbus-1:1.10.24-15.el7","dbus-1:1.2.24-11.el6_10","dbus-1:1.2.24-9.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12749.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16470","severity":"moderate","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1646814","bugzilla_description":"CVE-2018-16470 rubygem-rack: Buffer size in multipart parser allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rubygem-rack-1:1.6.4-3.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-0245","severity":"low","public_date":"2015-02-09T00:00:00Z","advisories":[],"bugzilla":"1186775","bugzilla_description":"CVE-2015-0245 dbus: denial of service in dbus systemd activation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0245.json"},{"CVE":"CVE-2014-7824","severity":"low","public_date":"2014-11-10T00:00:00Z","advisories":[],"bugzilla":"1173555","bugzilla_description":"CVE-2014-7824 dbus: local denial of service via incomplete fix for CVE-2014-3636","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7824.json"},{"CVE":"CVE-2014-3635","severity":"moderate","public_date":"2014-09-16T00:00:00Z","advisories":[],"bugzilla":"1140523","bugzilla_description":"CVE-2014-3635 dbus: heap-based buffer overflow flaw in file descriptor passing","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3635.json"},{"CVE":"CVE-2014-3636","severity":"low","public_date":"2014-09-16T00:00:00Z","advisories":[],"bugzilla":"1140525","bugzilla_description":"CVE-2014-3636 dbus: denial of service by queuing or splitting file descriptors","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3636.json"},{"CVE":"CVE-2014-3637","severity":"low","public_date":"2014-09-16T00:00:00Z","advisories":[],"bugzilla":"1140527","bugzilla_description":"CVE-2014-3637 dbus: denial of service by creating unkillable D-Bus connections","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3637.json"},{"CVE":"CVE-2014-3638","severity":"low","public_date":"2014-09-16T00:00:00Z","advisories":[],"bugzilla":"1140529","bugzilla_description":"CVE-2014-3638 dbus: denial of service in method call handling","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3638.json"},{"CVE":"CVE-2014-3639","severity":"low","public_date":"2014-09-16T00:00:00Z","advisories":[],"bugzilla":"1140532","bugzilla_description":"CVE-2014-3639 dbus: denial of service flaw in incomplete connection handling","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3639.json"},{"CVE":"CVE-2014-3532","severity":"moderate","public_date":"2014-07-02T00:00:00Z","advisories":[],"bugzilla":"1114414","bugzilla_description":"CVE-2014-3532 dbus: denial of service in file descriptor passing feature","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3532.json"},{"CVE":"CVE-2014-3533","severity":"moderate","public_date":"2014-07-02T00:00:00Z","advisories":[],"bugzilla":"1114416","bugzilla_description":"CVE-2014-3533 dbus: denial of service when forwarding invalid file descriptors","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3533.json"},{"CVE":"CVE-2014-3477","severity":"moderate","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1104791","bugzilla_description":"CVE-2014-3477 dbus: denial of service flaw in dbus-daemon","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3477.json"},{"CVE":"CVE-2013-2168","severity":"moderate","public_date":"2013-06-13T00:00:00Z","advisories":[],"bugzilla":"974109","bugzilla_description":"CVE-2013-2168 dbus: Crash of system services that use libdbus (DoS) due to non-portable use of va_list in UNIX format string wrapper","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2168.json"},{"CVE":"CVE-2013-0292","severity":"important","public_date":"2013-02-14T00:00:00Z","advisories":["RHSA-2013:0568"],"bugzilla":"911658","bugzilla_description":"CVE-2013-0292 dbus-glib: Local privilege escalation due improper filtering of message sender when NameOwnerChanged signal received","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["dbus-glib-0:0.73-11.el5_9","dbus-glib-0:0.86-6.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0292.json"},{"CVE":"CVE-2012-3524","severity":"important","public_date":"2012-09-12T00:00:00Z","advisories":["RHSA-2012:1261"],"bugzilla":"847402","bugzilla_description":"CVE-2012-3524 dbus: privilege escalation when libdbus is used in setuid/setgid application","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["dbus-1:1.2.24-7.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3524.json"},{"CVE":"CVE-2011-2533","severity":"low","public_date":"2011-06-10T00:00:00Z","advisories":[],"bugzilla":"715540","bugzilla_description":"CVE-2011-2533 dbus: Possibility of symlink attack in /tmp during compilation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2533.json"},{"CVE":"CVE-2011-2200","severity":"moderate","public_date":"2011-06-09T00:00:00Z","advisories":["RHSA-2011:1132"],"bugzilla":"712676","bugzilla_description":"CVE-2011-2200 dbus: Local DoS via messages with non-native byte order","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["dbus-1:1.2.24-5.el6_1","dbus-0:1.1.2-16.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2200.json"},{"CVE":"CVE-2010-4352","severity":"moderate","public_date":"2010-12-11T00:00:00Z","advisories":["RHSA-2011:0376"],"bugzilla":"663673","bugzilla_description":"CVE-2010-4352 D-BUS: Stack overflow by validating message with excessive number of nested variants","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["dbus-1:1.2.24-4.el6_0","dbus-0:1.1.2-15.el5_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4352.json"},{"CVE":"CVE-2010-1172","severity":"moderate","public_date":"2010-08-10T00:00:00Z","advisories":["RHSA-2010:0616"],"bugzilla":"585394","bugzilla_description":"CVE-2010-1172 dbus-glib: property access not validated","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P/","CWE":null,"affected_packages":["dbus-glib-0:0.73-10.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1172.json"},{"CVE":"CVE-2009-1189","severity":"moderate","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2010:0018"],"bugzilla":"496672","bugzilla_description":"CVE-2009-1189 dbus: invalid fix for CVE-2008-3834","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["dbus-0:1.1.2-12.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1189.json"},{"CVE":"CVE-2008-4311","severity":"moderate","public_date":"2008-12-05T00:00:00Z","advisories":[],"bugzilla":"469151","bugzilla_description":"CVE-2008-4311 dbus: incorrect use of [send|receive]_requested_reply policy rule attribute in system.conf","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4311.json"},{"CVE":"CVE-2008-3834","severity":"moderate","public_date":"2008-09-27T00:00:00Z","advisories":["RHSA-2009:0008"],"bugzilla":"464674","bugzilla_description":"CVE-2008-3834 dbus denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dbus-0:1.0.0-7.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3834.json"},{"CVE":"CVE-2008-0595","severity":"moderate","public_date":"2008-02-27T00:00:00Z","advisories":["RHSA-2008:0159"],"bugzilla":"432419","bugzilla_description":"CVE-2008-0595 dbus security policy circumvention","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dbus-0:1.0.0-6.3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0595.json"},{"CVE":"CVE-2006-6107","severity":"moderate","public_date":"2006-12-12T00:00:00Z","advisories":["RHSA-2007:0008"],"bugzilla":"219665","bugzilla_description":"CVE-2006-6107 D-Bus denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dbus-0:0.22-12.EL.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-6107.json"},{"CVE":"CVE-2005-0201","severity":"low","public_date":"2005-01-31T00:00:00Z","advisories":["RHSA-2005:102"],"bugzilla":"1617489","bugzilla_description":"CVE-2005-0201 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dbus-0:0.22-12.EL.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0201.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbxtool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbxtool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dbxtool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dconf-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dconf-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dconf-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dconf-editor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dconf-editor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dconf-editor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dconf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dconf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dconf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dcraw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dcraw_security_api_results.json
new file mode 100644
index 0000000..0aff6e2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dcraw_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19565","severity":"low","public_date":"2018-11-23T00:00:00Z","advisories":[],"bugzilla":"1656776","bugzilla_description":"CVE-2018-19565 dcraw: Buffer over-read in crop_masked_pixels resulting in denial of service or information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19565.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-19566","severity":"low","public_date":"2018-11-23T00:00:00Z","advisories":[],"bugzilla":"1656778","bugzilla_description":"CVE-2018-19566 dcraw: Heap buffer over-read in parse_tiff_ifd resulting in a denial of service or information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19566.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-19567","severity":"low","public_date":"2018-11-23T00:00:00Z","advisories":[],"bugzilla":"1656779","bugzilla_description":"CVE-2018-19567 dcraw: A floating point exception in parse_tiff_ifd resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19567.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19568","severity":"low","public_date":"2018-11-23T00:00:00Z","advisories":[],"bugzilla":"1656780","bugzilla_description":"CVE-2018-19568 dcraw: A floating point exception in kodak_radc_load_raw resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19568.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19655","severity":"low","public_date":"2018-08-18T00:00:00Z","advisories":[],"bugzilla":"1656773","bugzilla_description":"CVE-2018-19655 dcraw: Stack-based buffer overflow in the find_green() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19655.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5804","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":[],"bugzilla":"1591879","bugzilla_description":"CVE-2018-5804 LibRaw: type confusion error in identify() function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5805","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1591887","bugzilla_description":"CVE-2018-5805 LibRaw: Stack-based buffer overflow in quicktake_100_load_raw() function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5805.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-5806","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1591897","bugzilla_description":"CVE-2018-5806 LibRaw: NULL pointer dereference in leaf_hdr_load_raw() function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5806.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5800","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1553332","bugzilla_description":"CVE-2018-5800 LibRaw: Heap-based buffer overflow in LibRaw::kodak_ycbcr_load_raw function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5800.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5801","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1553334","bugzilla_description":"CVE-2018-5801 LibRaw: NULL pointer dereference in LibRaw::unpack function src/libraw_cxx.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5801.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5802","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":["RHSA-2018:3065"],"bugzilla":"1553335","bugzilla_description":"CVE-2018-5802 LibRaw: Out-of-bounds read in kodak_radc_load_raw function internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libkdcraw-0:4.10.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5802.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16909","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":[],"bugzilla":"1524859","bugzilla_description":"CVE-2017-16909 libraw: Heap-buffer overflow in the LibRaw::panasonic_load_raw() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16909.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16910","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":[],"bugzilla":"1524860","bugzilla_description":"CVE-2017-16910 libraw: Invalid read memory access in the LibRaw::xtrans_interpolate() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16910.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14348","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1492121","bugzilla_description":"CVE-2017-14348 libraw: Heap-based 1 byte buffer over-write in processCanonCameraInfo function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14348.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14608","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1499687","bugzilla_description":"CVE-2017-14608 libraw: Out-of-bounds read in the kodak_65000_load_raw function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14608.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14265","severity":"low","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1494405","bugzilla_description":"CVE-2017-14265 libraw: Stack based buffer overflow in the xtrans_interpolate function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14265.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13735","severity":"low","public_date":"2017-08-22T00:00:00Z","advisories":[],"bugzilla":"1488476","bugzilla_description":"CVE-2017-13735 libraw: Floating point exception in kodak_radc_load_raw function in internal/dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8366","severity":"moderate","public_date":"2015-11-30T00:00:00Z","advisories":[],"bugzilla":"1287056","bugzilla_description":"CVE-2015-8366 LibRaw: Index overflow in smal_decode_segment","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8366.json"},{"CVE":"CVE-2015-8367","severity":"low","public_date":"2015-11-30T00:00:00Z","advisories":[],"bugzilla":"1287076","bugzilla_description":"CVE-2015-8367 LibRaw: Memory objects are not intialized properly","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8367.json"},{"CVE":"CVE-2015-3885","severity":"low","public_date":"2015-05-11T00:00:00Z","advisories":[],"bugzilla":"1221249","bugzilla_description":"CVE-2015-3885 dcraw: input sanitization flaw leading to buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-190->CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3885.json"},{"CVE":"CVE-2013-1438","severity":"low","public_date":"2013-08-28T00:00:00Z","advisories":[],"bugzilla":"1002714","bugzilla_description":"CVE-2013-1438 CVE-2013-1439 LibRaw: multiple denial of service flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1438.json"},{"CVE":"CVE-2013-1439","severity":"low","public_date":"2013-08-28T00:00:00Z","advisories":[],"bugzilla":"1002714","bugzilla_description":"CVE-2013-1438 CVE-2013-1439 LibRaw: multiple denial of service flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1439.json"},{"CVE":"CVE-2013-2126","severity":"moderate","public_date":"2013-05-24T00:00:00Z","advisories":[],"bugzilla":"968385","bugzilla_description":"CVE-2013-2126 LibRaw: double-free flaw when handling damaged full-color in Foveon and sRAW files","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2126.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejagnu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejagnu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejagnu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-sans-mono-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-sans-mono-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-sans-mono-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-serif-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-serif-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dejavu-serif-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/delve_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/delve_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/delve_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/desktop-file-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/desktop-file-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/desktop-file-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/devhelp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/devhelp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/devhelp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/devhelp-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/devhelp-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/devhelp-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/devhelp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/devhelp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/devhelp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-event-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-event-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-event-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-event-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-event-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-event-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-event_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-event_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-event_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-multipath-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-multipath-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-multipath-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-multipath-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-multipath-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-multipath-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-multipath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-multipath_security_api_results.json
new file mode 100644
index 0000000..4f302cc
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-multipath_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2009-0115","severity":"moderate","public_date":"2009-03-24T00:00:00Z","advisories":["RHSA-2009:0411"],"bugzilla":"493330","bugzilla_description":"CVE-2009-0115 device-mapper-multipath: insecure permissions on multipathd.sock","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["device-mapper-multipath-0:0.4.5-31.el4_7.1","device-mapper-multipath-0:0.4.7-23.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0115.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-persistent-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-persistent-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper-persistent-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper_security_api_results.json
new file mode 100644
index 0000000..4f302cc
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/device-mapper_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2009-0115","severity":"moderate","public_date":"2009-03-24T00:00:00Z","advisories":["RHSA-2009:0411"],"bugzilla":"493330","bugzilla_description":"CVE-2009-0115 device-mapper-multipath: insecure permissions on multipathd.sock","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["device-mapper-multipath-0:0.4.5-31.el4_7.1","device-mapper-multipath-0:0.4.7-23.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0115.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-relay_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-relay_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-relay_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dhcp-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dialog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dialog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dialog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/diffstat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/diffstat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/diffstat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/diffutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/diffutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/diffutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/directory-maven-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/directory-maven-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/directory-maven-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/directory-maven-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/directory-maven-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/directory-maven-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dirsplit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dirsplit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dirsplit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/djvulibre-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/djvulibre-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/djvulibre-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/djvulibre-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/djvulibre-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/djvulibre-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/djvulibre_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/djvulibre_security_api_results.json
new file mode 100644
index 0000000..4488806
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/djvulibre_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-6535","severity":"moderate","public_date":"2013-03-19T00:00:00Z","advisories":[],"bugzilla":"1043821","bugzilla_description":"CVE-2012-6535 djvulibre: DoS or arbitrary code execution via specially crafted DjVu file","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6535.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-connector-dbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-connector-dbus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-connector-dbus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-renderer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-renderer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-renderer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dleyna-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dlm-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dlm-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dlm-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dlm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dlm_security_api_results.json
new file mode 100644
index 0000000..d50660d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dlm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2007-3380","severity":"important","public_date":"2007-06-26T00:00:00Z","advisories":["RHBA-2007:0861","RHSA-2007:0940"],"bugzilla":"1618315","bugzilla_description":"CVE-2007-3380 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kernel-0:2.6.18-8.1.15.el5","dlm-kernel-0:2.6.9-46.16.0.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3380.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dmidecode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dmidecode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dmidecode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-automatic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-automatic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-automatic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-plugin-spacewalk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-plugin-spacewalk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-plugin-spacewalk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-plugin-subscription-manager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-plugin-subscription-manager_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-plugin-subscription-manager_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-plugins-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-plugins-core_security_api_results.json
new file mode 100644
index 0000000..1a72d33
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf-plugins-core_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10897","severity":"important","public_date":"2018-07-11T00:00:00Z","advisories":["RHSA-2018:2284","RHSA-2018:2626","RHSA-2018:2285"],"bugzilla":"1600221","bugzilla_description":"CVE-2018-10897 yum-utils: reposync: improper path validation may lead to directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["yum-utils-0:1.1.30-42.el6_10","yum-utils-0:1.1.31-46.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf_security_api_results.json
new file mode 100644
index 0000000..1a72d33
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnf_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10897","severity":"important","public_date":"2018-07-11T00:00:00Z","advisories":["RHSA-2018:2284","RHSA-2018:2626","RHSA-2018:2285"],"bugzilla":"1600221","bugzilla_description":"CVE-2018-10897 yum-utils: reposync: improper path validation may lead to directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["yum-utils-0:1.1.30-42.el6_10","yum-utils-0:1.1.31-46.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnsmasq-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnsmasq-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnsmasq-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnsmasq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnsmasq_security_api_results.json
new file mode 100644
index 0000000..08dc5eb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnsmasq_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14312","severity":"moderate","public_date":"2020-06-30T00:00:00Z","advisories":[],"bugzilla":"1851342","bugzilla_description":"CVE-2020-14312 dnsmasq: insecure default configuration makes it an open resolver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14312.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-14834","severity":"low","public_date":"2019-10-23T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1715","RHSA-2020:3878"],"bugzilla":"1764425","bugzilla_description":"CVE-2019-14834 dnsmasq: memory leak in the create_helper() function in /src/helper.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-43.82.202007300301.0","dnsmasq-0:2.79-11.el8","dnsmasq-0:2.76-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14834.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-14513","severity":"low","public_date":"2019-08-09T00:00:00Z","advisories":["RHBA-2017:2117"],"bugzilla":"1739422","bugzilla_description":"CVE-2019-14513 dnsmasq: Improper bounds checking leads to a buffer overread","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["dnsmasq-0:2.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-15107","severity":"moderate","public_date":"2018-01-19T00:00:00Z","advisories":[],"bugzilla":"1510570","bugzilla_description":"CVE-2017-15107 dnsmasq: Improper validation of wildcard synthesized NSEC records","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15107.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-14491","severity":"critical","public_date":"2017-10-02T00:00:00Z","advisories":["RHSA-2017:2837","RHSA-2017:2838","RHSA-2017:2836","RHSA-2017:2839","RHSA-2017:2840","RHSA-2017:2841"],"bugzilla":"1495409","bugzilla_description":"CVE-2017-14491 dnsmasq: heap overflow in the code responsible for building DNS replies","cvss_score":10.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["dnsmasq-0:2.45-2.el5_9.1","dnsmasq-0:2.48-14.el6_6.1","dnsmasq-0:2.48-13.el6_4.1","dnsmasq-0:2.48-13.el6_5.1","dnsmasq-0:2.48-16.el6_7.1","dnsmasq-0:2.66-21.el7_3.2","dnsmasq-0:2.45-2.el5_11.1","dnsmasq-0:2.76-2.el7_4.2","dnsmasq-0:2.48-18.el6_9","dnsmasq-0:2.66-14.el7_2.2","dnsmasq-0:2.48-5.el6_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14491.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-14492","severity":"critical","public_date":"2017-10-02T00:00:00Z","advisories":["RHSA-2017:2837","RHSA-2017:2836"],"bugzilla":"1495410","bugzilla_description":"CVE-2017-14492 dnsmasq: heap overflow in the IPv6 router advertisement code","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["dnsmasq-0:2.66-21.el7_3.2","dnsmasq-0:2.76-2.el7_4.2","dnsmasq-0:2.66-14.el7_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14492.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-14493","severity":"critical","public_date":"2017-10-02T00:00:00Z","advisories":["RHSA-2017:2837","RHSA-2017:2836"],"bugzilla":"1495411","bugzilla_description":"CVE-2017-14493 dnsmasq: stack buffer overflow in the DHCPv6 code","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["dnsmasq-0:2.66-21.el7_3.2","dnsmasq-0:2.76-2.el7_4.2","dnsmasq-0:2.66-14.el7_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14493.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-14494","severity":"important","public_date":"2017-10-02T00:00:00Z","advisories":["RHSA-2017:2837","RHSA-2017:2836"],"bugzilla":"1495412","bugzilla_description":"CVE-2017-14494 dnsmasq: information leak in the DHCPv6 relay code","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:N/A:N","CWE":"CWE-125","affected_packages":["dnsmasq-0:2.66-21.el7_3.2","dnsmasq-0:2.76-2.el7_4.2","dnsmasq-0:2.66-14.el7_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14494.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-14495","severity":"important","public_date":"2017-10-02T00:00:00Z","advisories":["RHSA-2017:2836"],"bugzilla":"1495415","bugzilla_description":"CVE-2017-14495 dnsmasq: memory exhaustion vulnerability in the EDNS0 code","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":["dnsmasq-0:2.76-2.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14495.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-14496","severity":"important","public_date":"2017-10-02T00:00:00Z","advisories":["RHSA-2017:2836"],"bugzilla":"1495416","bugzilla_description":"CVE-2017-14496 dnsmasq: integer underflow leading to buffer over-read in the EDNS0 code","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-190->CWE-125","affected_packages":["dnsmasq-0:2.76-2.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14496.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-13704","severity":"important","public_date":"2017-08-21T00:00:00Z","advisories":[],"bugzilla":"1495510","bugzilla_description":"CVE-2017-13704 dnsmasq: Size parameter overflow via large DNS query","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-8899","severity":"low","public_date":"2015-11-14T00:00:00Z","advisories":[],"bugzilla":"1343072","bugzilla_description":"CVE-2015-8899 dnsmasq: Denial-of-service when empty address from DNS overlays A record from hosts","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8899.json"},{"CVE":"CVE-2015-3294","severity":"moderate","public_date":"2015-04-23T00:00:00Z","advisories":[],"bugzilla":"1215747","bugzilla_description":"CVE-2015-3294 dnsmasq: unchecked return value of the setup_reply() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-252","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3294.json"},{"CVE":"CVE-2013-0198","severity":"low","public_date":"2013-01-11T00:00:00Z","advisories":[],"bugzilla":"894486","bugzilla_description":"CVE-2013-0198 dnsmasq: Incomplete fix for the CVE-2012-3411 issue","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0198.json"},{"CVE":"CVE-2012-3411","severity":"moderate","public_date":"2012-07-09T00:00:00Z","advisories":["RHSA-2013:0579","RHSA-2013:0276","RHSA-2013:0277"],"bugzilla":"833033","bugzilla_description":"CVE-2012-3411 libvirt+dnsmasq: DNS configured to answer DNS queries from non-virtual networks","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-18.el6","rhev-hypervisor6-0:6.4-20130221.0.el6","dnsmasq-0:2.48-13.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3411.json"},{"CVE":"CVE-2009-2957","severity":"important","public_date":"2009-08-31T00:00:00Z","advisories":["RHSA-2009:1238"],"bugzilla":"519020","bugzilla_description":"CVE-2009-2957, CVE-2009-2958 dnsmasq: multiple vulnerabilities in TFTP server","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["dnsmasq-0:2.45-1.1.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2957.json"},{"CVE":"CVE-2009-2958","severity":"important","public_date":"2009-08-31T00:00:00Z","advisories":["RHSA-2009:1238"],"bugzilla":"519020","bugzilla_description":"CVE-2009-2957, CVE-2009-2958 dnsmasq: multiple vulnerabilities in TFTP server","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["dnsmasq-0:2.45-1.1.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2958.json"},{"CVE":"CVE-2008-1447","severity":"important","public_date":"2008-07-08T18:00:00Z","advisories":["RHSA-2008:0533","RHSA-2008:0789"],"bugzilla":"449345","bugzilla_description":"CVE-2008-1447 bind: implement source UDP port randomization (CERT VU#800113)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bind-0:9.2.1-10.el2","dnsmasq-0:2.45-1.el5_2.1","bind-20:9.2.4-22.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1447.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnssec-trigger-panel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnssec-trigger-panel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnssec-trigger-panel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnssec-trigger_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnssec-trigger_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dnssec-trigger_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-dtds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-dtds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-dtds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-style-dsssl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-style-dsssl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-style-dsssl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-style-xsl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-style-xsl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-style-xsl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook2X_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook2X_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook2X_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook5-schemas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook5-schemas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/docbook5-schemas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dos2unix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dos2unix_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dos2unix_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dosfstools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dosfstools_security_api_results.json
new file mode 100644
index 0000000..7c7b9cd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dosfstools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-8872","severity":"moderate","public_date":"2016-05-14T00:00:00Z","advisories":[],"bugzilla":"1336739","bugzilla_description":"CVE-2015-8872 dosfstools: Off-by-2 error leading to corruption in FAT12","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8872.json"},{"CVE":"CVE-2016-4804","severity":"low","public_date":"2016-05-14T00:00:00Z","advisories":[],"bugzilla":"1336745","bugzilla_description":"CVE-2016-4804 dosfstools: Heap-buffer-overflows in read_fat() and get_fat() functions","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4804.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotconf-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotconf-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotconf-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotconf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotconf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotconf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-apphost-pack-3.0_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-apphost-pack-3.0_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-apphost-pack-3.0_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-apphost-pack-3.1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-apphost-pack-3.1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-apphost-pack-3.1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-host-fxr-2.1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-host-fxr-2.1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-host-fxr-2.1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-host_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-host_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-host_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-hostfxr-3.0_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-hostfxr-3.0_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-hostfxr-3.0_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-hostfxr-3.1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-hostfxr-3.1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-hostfxr-3.1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-runtime-2.1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-runtime-2.1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-runtime-2.1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-runtime-3.0_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-runtime-3.0_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-runtime-3.0_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-runtime-3.1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-runtime-3.1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-runtime-3.1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-2.1.5xx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-2.1.5xx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-2.1.5xx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-2.1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-2.1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-2.1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-3.0_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-3.0_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-3.0_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-3.1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-3.1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-sdk-3.1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-targeting-pack-3.0_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-targeting-pack-3.0_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-targeting-pack-3.0_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-targeting-pack-3.1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-targeting-pack-3.1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-targeting-pack-3.1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-templates-3.0_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-templates-3.0_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-templates-3.0_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-templates-3.1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-templates-3.1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet-templates-3.1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet_security_api_results.json
new file mode 100644
index 0000000..35f8894
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dotnet_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8231","severity":"low","public_date":"2020-08-19T00:00:00Z","advisories":[],"bugzilla":"1868032","bugzilla_description":"CVE-2020-8231 curl: Expired pointer dereference via multi API with `CURLOPT_CONNECT_ONLY` option set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8231.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-1597","severity":"important","public_date":"2020-08-11T17:21:00Z","advisories":["RHSA-2020:3421","RHSA-2020:3422"],"bugzilla":"1861110","bugzilla_description":"CVE-2020-1597 dotnet: ASP.NET Core Resource Consumption Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-dotnet31-dotnet-0:3.1.107-1.el7","dotnet3.1-0:3.1.107-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1147","severity":"critical","public_date":"2020-07-14T17:00:00Z","advisories":["RHSA-2020:2938","RHSA-2020:2939","RHSA-2020:2937","RHSA-2020:2989","RHSA-2020:2954","RHSA-2020:2988"],"bugzilla":"1856929","bugzilla_description":"CVE-2020-1147 dotnet: XML source markup processing remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-dotnet21-0:2.1-19.el7","dotnet3.1-0:3.1.106-1.el8_2","dotnet-0:2.1.516-1.el8_1","dotnet-0:2.1.516-1.el8_2","rh-dotnet31-dotnet-0:3.1.106-1.el7","dotnet-0:2.1.516-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1147.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-1045","severity":"important","public_date":"2020-07-01T00:00:00Z","advisories":["RHSA-2020:3699","RHSA-2020:3697"],"bugzilla":"1873451","bugzilla_description":"CVE-2020-1045 dotnet: ASP.NET cookie prefix spoofing vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-807","affected_packages":["dotnet3.1-0:3.1.108-2.el8_2","rh-dotnet31-dotnet-0:3.1.108-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1045.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-8177","severity":"moderate","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1847915","bugzilla_description":"CVE-2020-8177 curl: Incorrect argument check can allow remote servers to overwrite local files","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8177.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-8169","severity":"moderate","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1847916","bugzilla_description":"CVE-2020-8169 libcurl: partial password leak over DNS on HTTP redirect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8169.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-1108","severity":"important","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:2475","RHSA-2020:2146","RHSA-2020:2476","RHSA-2020:2143","RHSA-2020:2471","RHSA-2020:2450","RHSA-2020:2250","RHSA-2020:2249"],"bugzilla":"1827643","bugzilla_description":"CVE-2020-1108 dotnet: Denial of service via untrusted input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190","affected_packages":["rh-dotnet21-0:2.1-17.el7","rh-dotnet31-dotnet-0:3.1.105-1.el7","dotnet-0:2.1.514-2.el8_2","dotnet3.1-0:3.1.104-2.el8_2","dotnet-0:2.1.515-1.el8_2","dotnet3.1-0:3.1.105-2.el8_2","rh-dotnet31-dotnet-0:3.1.104-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1108.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1161","severity":"important","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:2250","RHSA-2020:2249"],"bugzilla":"1827645","bugzilla_description":"CVE-2020-1161 dotnet: Denial of service due to infinite loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["dotnet3.1-0:3.1.104-2.el8_2","rh-dotnet31-dotnet-0:3.1.104-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1161.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1066","severity":"important","public_date":"2020-05-12T00:00:00Z","advisories":[],"bugzilla":"1851857","bugzilla_description":"CVE-2020-1066 .NET: local elevation of privilege","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1066.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-0602","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0134","RHSA-2020:0130"],"bugzilla":"1789623","bugzilla_description":"CVE-2020-0602 dotnet: Denial of service via backpressure issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["dotnet3.0-0:3.0.102-2.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0602.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-0603","severity":"critical","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0134","RHSA-2020:0130"],"bugzilla":"1789624","bugzilla_description":"CVE-2020-0603 dotnet: Memory Corruption in SignalR","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["dotnet3.0-0:3.0.102-2.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0603.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-0605","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1789625","bugzilla_description":"CVE-2020-0605 dotnet: Bypass of WPF XAML payload prevention","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0605.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-0606","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1789626","bugzilla_description":"CVE-2020-0606 dotnet: Malfunctioning StickyNotes annotation XML files malicious execution prevetion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0606.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-15601","severity":"low","public_date":"2020-01-06T00:00:00Z","advisories":[],"bugzilla":"1794143","bugzilla_description":"CVE-2019-15601 curl: improper input validation allows users to create a 'FILE:' URL that can make the client access a remote file using SMB","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15601.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-5481","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792"],"bugzilla":"1749402","bugzilla_description":"CVE-2019-5481 curl: double free due to subsequent call of realloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5481.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2019-5482","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792","RHSA-2020:3916"],"bugzilla":"1749652","bugzilla_description":"CVE-2019-5482 curl: heap buffer overflow in function tftp_receive_packet()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-59.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5482.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-1301","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2019:2732","RHSA-2019:2731"],"bugzilla":"1750793","bugzilla_description":"CVE-2019-1301 dotnet: System.Net.Sockets.dll Socket.ConnectAsync Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-dotnet21-0:2.1-12.el7","dotnet-0:2.1.509-1.el8_0","rh-dotnet22-0:2.2-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1301.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-5443","severity":"important","public_date":"2019-06-25T00:00:00Z","advisories":[],"bugzilla":"1772100","bugzilla_description":"CVE-2019-5443 curl: Windows OpenSSL engine code injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5443.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-5435","severity":"low","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1710609","bugzilla_description":"CVE-2019-5435 curl: Integer overflows in curl_url_set() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-5436","severity":"low","public_date":"2019-05-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1020","RHBA-2020:1539","RHSA-2020:1792","RHSA-2019:1543","RHSA-2020:2505","RHBA-2020:1540"],"bugzilla":"1710620","bugzilla_description":"CVE-2019-5436 curl: TFTP receive heap buffer overflow in tftp_receive_packet() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","curl-0:7.29.0-54.el7_7.3","redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-57.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5436.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-0980","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:1259","RHSA-2019:1236"],"bugzilla":"1705502","bugzilla_description":"CVE-2019-0980 dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835->CWE-400","affected_packages":["rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7","dotnet-0:2.1.507-2.el8_0","rh-dotnet22-0:2.2-7.el7","rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7","rh-dotnet21-0:2.1-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0980.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-0981","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:1259","RHSA-2019:1236"],"bugzilla":"1705504","bugzilla_description":"CVE-2019-0981 dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7","dotnet-0:2.1.507-2.el8_0","rh-dotnet22-0:2.2-7.el7","rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7","rh-dotnet21-0:2.1-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-0820","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:1259","RHSA-2019:1236"],"bugzilla":"1705506","bugzilla_description":"CVE-2019-0820 dotnet: timeouts for regular expressions are not enforced","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-dotnetcore11-dotnetcore-0:1.1.13-1.el7","dotnet-0:2.1.507-2.el8_0","rh-dotnet22-0:2.2-7.el7","rh-dotnetcore10-dotnetcore-0:1.0.16-1.el7","rh-dotnet21-0:2.1-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0820.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-0864","severity":"low","public_date":"2019-05-14T00:00:00Z","advisories":[],"bugzilla":"1712336","bugzilla_description":"CVE-2019-0864 dotnet: improper handling of objects in heap memory causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0864.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-0757","severity":"important","public_date":"2019-03-12T17:33:00Z","advisories":["RHSA-2019:1259","RHSA-2019:0544"],"bugzilla":"1685475","bugzilla_description":"CVE-2019-0757 dotnet: NuGet Tampering Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["rh-dotnetcore10-dotnetcore-0:1.0.15-1.el7","rh-dotnet21-0:2.1-8.el7","dotnet-0:2.1.507-2.el8_0","rh-dotnet22-0:2.2-4.el7","rh-dotnetcore11-dotnetcore-0:1.1.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0757.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-0657","severity":"moderate","public_date":"2019-02-12T00:00:00Z","advisories":["RHSA-2019:0349"],"bugzilla":"1673891","bugzilla_description":"CVE-2019-0657 dotnet: Domain-spoofing attack in System.Uri","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-dotnet21-0:2.1-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0657.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-16890","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670252","bugzilla_description":"CVE-2018-16890 curl: NTLM type-2 heap out-of-bounds buffer read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-190","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-3822","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670254","bugzilla_description":"CVE-2019-3822 curl: NTLMv2 type-3 header stack buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-3823","severity":"low","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670256","bugzilla_description":"CVE-2019-3823 curl: SMTP end-of-response out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-0545","severity":"moderate","public_date":"2019-01-08T00:00:00Z","advisories":["RHSA-2019:0040"],"bugzilla":"1660632","bugzilla_description":"CVE-2019-0545 .NET Core: NCL - SocketsHttpHandler mishandling 1xx response as a final response leads to info disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-dotnet21-dotnet-0:2.1.503-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0545.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-0564","severity":"moderate","public_date":"2019-01-08T00:00:00Z","advisories":["RHSA-2019:0040"],"bugzilla":"1660634","bugzilla_description":"CVE-2019-0564 Asp.NET Core: Kestrel - WebSocket DoS via CancellationToken (CoreFX and ASP.NET)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-dotnet21-dotnet-0:2.1.503-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0564.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-0548","severity":"moderate","public_date":"2019-01-08T00:00:00Z","advisories":["RHSA-2019:0040"],"bugzilla":"1660636","bugzilla_description":"CVE-2019-0548 Asp.NET Core: AspNetCoreModule WebSocket DOS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-dotnet21-dotnet-0:2.1.503-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-8416","severity":"moderate","public_date":"2018-11-13T00:00:00Z","advisories":["RHSA-2018:3676"],"bugzilla":"1649693","bugzilla_description":"CVE-2018-8416 .NET Core: Arbitrary file and directory creation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-dotnet21-dotnet-0:2.1.500-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8416.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-16839","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":["RHSA-2019:1543"],"bugzilla":"1642201","bugzilla_description":"CVE-2018-16839 curl: Integer overflow leading to heap-based buffer overflow in Curl_sasl_create_plain_message()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-16840","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":["RHSA-2019:1543"],"bugzilla":"1642203","bugzilla_description":"CVE-2018-16840 curl: Use-after-free when closing \"easy\" handle in Curl_close()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16840.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-16842","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":["RHSA-2019:1543","RHSA-2019:2181"],"bugzilla":"1644124","bugzilla_description":"CVE-2018-16842 curl: Heap-based buffer over-read in the curl tool warning formatting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["curl-0:7.29.0-54.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2018-8292","severity":"moderate","public_date":"2018-10-09T00:00:00Z","advisories":["RHSA-2018:2902"],"bugzilla":"1636274","bugzilla_description":"CVE-2018-8292 .NET Core: information disclosure due to authentication information exposed in a redirect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["rh-dotnetcore10-dotnetcore-0:1.0.13-1.el7","rh-dotnetcore11-dotnetcore-0:1.1.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8292.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-8421","severity":"moderate","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1629953","bugzilla_description":"CVE-2018-8421 .NET: RCE when processing untrusted input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8421.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-8409","severity":"low","public_date":"2018-09-11T00:00:00Z","advisories":[],"bugzilla":"1626263","bugzilla_description":"CVE-2018-8409 .NET: Resource loop in ReadAsync when it is being cancelled while producer allocates memory using GetMemory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8409.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2018-14618","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2019:1880","RHSA-2018:3558"],"bugzilla":"1622707","bugzilla_description":"CVE-2018-14618 curl: NTLM password overflow via integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-0500","severity":"moderate","public_date":"2018-07-11T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1597101","bugzilla_description":"CVE-2018-0500 curl: Heap-based buffer overflow in Curl_smtp_escape_eob() when uploading data over SMTP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-8356","severity":"moderate","public_date":"2018-07-10T00:00:00Z","advisories":[],"bugzilla":"1600323","bugzilla_description":"CVE-2018-8356 .NET Core: incorrect certificates validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8356.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000300","severity":"important","public_date":"2018-05-16T00:00:00Z","advisories":[],"bugzilla":"1575533","bugzilla_description":"CVE-2018-1000300 curl: FTP shutdown response heap-based buffer overflow can potentially lead to RCE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000300.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000301","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1575536","bugzilla_description":"CVE-2018-1000301 curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000301.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-0765","severity":"important","public_date":"2018-05-08T00:00:00Z","advisories":[],"bugzilla":"1576631","bugzilla_description":"CVE-2018-0765 dotnet: Improper processing of XML documents can allow a remote attacker to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0765.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1039","severity":"important","public_date":"2018-05-08T00:00:00Z","advisories":[],"bugzilla":"1576633","bugzilla_description":"CVE-2018-1039 dotnet: Device Guard security bypass can allow for privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1039.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-1000120","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1552628","bugzilla_description":"CVE-2018-1000120 curl: FTP path trickery leads to NIL byte out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000120.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-1000121","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1552631","bugzilla_description":"CVE-2018-1000121 curl: LDAP NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000121.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000122","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1553398","bugzilla_description":"CVE-2018-1000122 curl: RTSP RTP buffer over-read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000122.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-0875","severity":"low","public_date":"2018-03-13T16:00:00Z","advisories":["RHSA-2018:0522"],"bugzilla":"1552060","bugzilla_description":"CVE-2018-0875 .NET Core: Hash Collision Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-dotnet20-dotnet-0:2.0.6-1.el7","rh-dotnetcore10-dotnetcore-0:1.0.10-1.el7","rh-dotnetcore11-dotnetcore-0:1.1.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0875.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-1000005","severity":"low","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2019:1543"],"bugzilla":"1536013","bugzilla_description":"CVE-2018-1000005 curl: Out-of-bounds read in code handling HTTP/2 trailers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-1000007","severity":"moderate","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1537125","bugzilla_description":"CVE-2018-1000007 curl: HTTP authentication leak in redirects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000007.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-0786","severity":"moderate","public_date":"2018-01-08T00:00:00Z","advisories":[],"bugzilla":"1533725","bugzilla_description":"CVE-2018-0786 ASP.NET: Incorrect certificate validation can allow attackers to bypass security checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-8816","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1515757","bugzilla_description":"CVE-2017-8816 curl: NTLM buffer overflow via integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8817","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1515760","bugzilla_description":"CVE-2017-8817 curl: FTP wildcard out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-8818","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":[],"bugzilla":"1517691","bugzilla_description":"CVE-2017-8818 curl: Out-of-bound access in SSL related cleanup code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-0764","severity":"moderate","public_date":"2017-11-17T00:00:00Z","advisories":["RHSA-2018:0379"],"bugzilla":"1533730","bugzilla_description":"CVE-2018-0764 .NET Core: Improper processing of XML documents can cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-dotnet20-dotnet-0:2.0.5-1.el7","rh-dotnetcore11-dotnetcore-0:1.1.6-1.el7","rh-dotnetcore10-dotnetcore-0:1.0.9-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0764.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-11770","severity":"low","public_date":"2017-11-14T22:00:00Z","advisories":["RHSA-2017:3248"],"bugzilla":"1512992","bugzilla_description":"CVE-2017-11770 .NET Core: DoS via bad certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-dotnetcore11-dotnetcore-0:1.1.5-1.el7","rh-dotnetcore10-dotnetcore-0:1.0.8-1.el7","rh-dotnet20-dotnet-0:2.0.3-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11770.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-8700","severity":"moderate","public_date":"2017-11-14T22:00:00Z","advisories":[],"bugzilla":"1512998","bugzilla_description":"CVE-2017-8700 ASP.NET: CORS not properly applied","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8700.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","cvss3_score":"8.7"},{"CVE":"CVE-2017-8585","severity":"low","public_date":"2017-11-14T12:00:00Z","advisories":["RHSA-2017:3248"],"bugzilla":"1512982","bugzilla_description":"CVE-2017-8585 .NET Core: DoS via invalid culture","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-dotnetcore11-dotnetcore-0:1.1.5-1.el7","rh-dotnetcore10-dotnetcore-0:1.0.8-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8585.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-11883","severity":"important","public_date":"2017-11-14T00:00:00Z","advisories":[],"bugzilla":"1513363","bugzilla_description":"CVE-2017-11883 ASP.NET Core: DoS due to improper handling of web requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11883.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-1000257","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2017:3263","RHSA-2018:2486"],"bugzilla":"1503705","bugzilla_description":"CVE-2017-1000257 curl: IMAP FETCH response out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-42.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-1000254","severity":"moderate","public_date":"2017-10-04T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1495541","bugzilla_description":"CVE-2017-1000254 curl: FTP PWD response parser out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-1000101","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1478309","bugzilla_description":"CVE-2017-1000101 curl: URL globbing out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2017-1000100","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1478310","bugzilla_description":"CVE-2017-1000100 curl: TFTP sends more than buffer size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-1000099","severity":"moderate","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1478316","bugzilla_description":"CVE-2017-1000099 curl: FILE buffer read out of bounds","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000099.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-9502","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1461321","bugzilla_description":"CVE-2017-9502 curl: URL file scheme drive letter buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9502.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7468","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443381","bugzilla_description":"CVE-2017-7468 curl: TLS session resumption client cert bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-7407","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1439190","bugzilla_description":"CVE-2017-7407 curl: --write-out out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7407.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2017-2629","severity":"moderate","public_date":"2017-02-22T00:00:00Z","advisories":[],"bugzilla":"1425746","bugzilla_description":"CVE-2017-2629 curl: SSL_VERIFYSTATUS ignored","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9594","severity":"moderate","public_date":"2016-12-23T00:00:00Z","advisories":[],"bugzilla":"1408385","bugzilla_description":"CVE-2016-9594 curl: Unitialized random","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9594.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-9586","severity":"low","public_date":"2016-12-21T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1406712","bugzilla_description":"CVE-2016-9586 curl: printf floating point buffer overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9586.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-8615","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388370","bugzilla_description":"CVE-2016-8615 curl: Cookie injection for other servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-99","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8616","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388371","bugzilla_description":"CVE-2016-8616 curl: Case insensitive password comparison","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8616.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-8617","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388377","bugzilla_description":"CVE-2016-8617 curl: Out-of-bounds write via unchecked multiplication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-787","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8618","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388378","bugzilla_description":"CVE-2016-8618 curl: Double-free in curl_maprintf","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8619","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388379","bugzilla_description":"CVE-2016-8619 curl: Double-free in krb5 code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8619.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8620","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1388382","bugzilla_description":"CVE-2016-8620 curl: Glob parser write/read out of bounds","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-120","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8620.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-8621","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388385","bugzilla_description":"CVE-2016-8621 curl: curl_getdate out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8621.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8622","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388386","bugzilla_description":"CVE-2016-8622 curl: URL unescape heap overflow via integer truncation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-190->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-8623","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388388","bugzilla_description":"CVE-2016-8623 curl: Use-after-free via shared cookies","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8623.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8624","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388390","bugzilla_description":"CVE-2016-8624 curl: Invalid URL parsing with '#'","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8625","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388392","bugzilla_description":"CVE-2016-8625 curl: IDNA 2003 makes curl use wrong host","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8625.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-7167","severity":"low","public_date":"2016-09-14T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2017:2016","RHSA-2018:2486"],"bugzilla":"1375906","bugzilla_description":"CVE-2016-7167 curl: escape and unescape integer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["curl-0:7.29.0-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2016-7141","severity":"low","public_date":"2016-09-05T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1373229","bugzilla_description":"CVE-2016-7141 curl: Incorrect reuse of client certificates","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7141.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-5419","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1362183","bugzilla_description":"CVE-2016-5419 curl: TLS session resumption client cert bypass","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5419.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-5420","severity":"low","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1362190","bugzilla_description":"CVE-2016-5420 curl: Re-using connection with wrong client cert","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5420.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-5421","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1362199","bugzilla_description":"CVE-2016-5421 curl: Use of connection struct after free","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5421.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-pgsql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-pgsql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-pgsql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-pigeonhole_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-pigeonhole_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot-pigeonhole_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot_security_api_results.json
new file mode 100644
index 0000000..840f324
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dovecot_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12100","severity":"important","public_date":"2020-08-12T12:00:00Z","advisories":["RHSA-2020:3617","RHSA-2020:3713","RHSA-2020:3735","RHSA-2020:3736"],"bugzilla":"1866309","bugzilla_description":"CVE-2020-12100 dovecot: Resource exhaustion via deeply nested MIME parts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["dovecot-1:2.3.8-2.el8_2.2","dovecot-1:2.2.36-10.el8_1.2","dovecot-1:2.2.36-6.el7_8.1","dovecot-1:2.2.36-5.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12100.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12673","severity":"important","public_date":"2020-08-12T12:00:00Z","advisories":["RHSA-2020:3617","RHSA-2020:3713","RHSA-2020:3735","RHSA-2020:3736"],"bugzilla":"1866313","bugzilla_description":"CVE-2020-12673 dovecot: Out of bound reads in dovecot NTLM implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["dovecot-1:2.3.8-2.el8_2.2","dovecot-1:2.2.36-10.el8_1.2","dovecot-1:2.2.36-6.el7_8.1","dovecot-1:2.2.36-5.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12674","severity":"important","public_date":"2020-08-12T12:00:00Z","advisories":["RHSA-2020:3617","RHSA-2020:3713","RHSA-2020:3735","RHSA-2020:3736"],"bugzilla":"1866317","bugzilla_description":"CVE-2020-12674 dovecot: Crash due to assert in RPA implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["dovecot-1:2.3.8-2.el8_2.2","dovecot-1:2.2.36-10.el8_1.2","dovecot-1:2.2.36-6.el7_8.1","dovecot-1:2.2.36-5.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12674.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10957","severity":"important","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2901"],"bugzilla":"1834317","bugzilla_description":"CVE-2020-10957 dovecot: malformed NOOP commands leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["dovecot-1:2.3.8-2.el8_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10957.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10958","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1834323","bugzilla_description":"CVE-2020-10958 dovecot: command followed by sufficient number of newlines leads to use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10958.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-10967","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1834326","bugzilla_description":"CVE-2020-10967 dovecot: sending mail with empty quoted localpart leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10967.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-7046","severity":"important","public_date":"2020-02-12T00:00:00Z","advisories":[],"bugzilla":"1800491","bugzilla_description":"CVE-2020-7046 dovecot: Attacker can cause submission-login and lmtp processes to be exhausted leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7046.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7957","severity":"low","public_date":"2020-02-12T00:00:00Z","advisories":[],"bugzilla":"1800502","bugzilla_description":"CVE-2020-7957 dovecot: specially crafted email can cause mailbox to have permanently unaccessible mail","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7957.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-19722","severity":"moderate","public_date":"2019-12-13T00:00:00Z","advisories":[],"bugzilla":"1782785","bugzilla_description":"CVE-2019-19722 dovecot: null pointer dereference in push notification driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19722.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11500","severity":"important","public_date":"2019-08-28T12:00:00Z","advisories":["RHSA-2019:2885","RHSA-2019:2836","RHSA-2019:2822"],"bugzilla":"1741141","bugzilla_description":"CVE-2019-11500 dovecot: improper NULL byte handling in IMAP and ManageSieve protocol parsers leads to out of bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["dovecot-1:2.2.36-3.el7_7.1","dovecot-1:2.0.9-22.el6_10.1","dovecot-1:2.2.36-5.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11499","severity":"moderate","public_date":"2019-04-30T00:00:00Z","advisories":[],"bugzilla":"1709240","bugzilla_description":"CVE-2019-11499 dovecot: unacceptable authentication message in AUTH PLAIN over TLS leads to crash and possible DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11499.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11494","severity":"moderate","public_date":"2019-04-30T00:00:00Z","advisories":[],"bugzilla":"1709244","bugzilla_description":"CVE-2019-11494 dovecot: premature disconnection from client during AUTH command leads to crash and possible DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11494.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10691","severity":"moderate","public_date":"2019-04-18T00:00:00Z","advisories":[],"bugzilla":"1701216","bugzilla_description":"CVE-2019-10691 dovecot: Mishandling invalid UTF-8 characters by JSON encoder leading to possible DoS attack.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-228","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10691.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-7524","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":["RHSA-2020:1062"],"bugzilla":"1696152","bugzilla_description":"CVE-2019-7524 dovecot: Buffer overflow in indexer-worker process results in privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120->CWE-284","affected_packages":["dovecot-1:2.2.36-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7524.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3814","severity":"moderate","public_date":"2019-02-05T00:00:00Z","advisories":["RHSA-2019:3467","RHSA-2020:1062"],"bugzilla":"1673415","bugzilla_description":"CVE-2019-3814 dovecot: Improper certificate validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["dovecot-1:2.2.36-10.el8","dovecot-1:2.2.36-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2017-15130","severity":"low","public_date":"2018-02-28T00:00:00Z","advisories":[],"bugzilla":"1532356","bugzilla_description":"CVE-2017-15130 dovecot: TLS SNI config lookups are inefficient and can be used for DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15130.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-14461","severity":"moderate","public_date":"2018-02-28T00:00:00Z","advisories":[],"bugzilla":"1549483","bugzilla_description":"CVE-2017-14461 dovecot: Information Leak Vulnerability in rfc822_parse_domain leading to denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14461.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15132","severity":"moderate","public_date":"2018-01-09T00:00:00Z","advisories":[],"bugzilla":"1532768","bugzilla_description":"CVE-2017-15132 dovecot: Auth leaks memory if SASL authentication is aborted","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15132.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-2669","severity":"low","public_date":"2017-04-10T00:00:00Z","advisories":[],"bugzilla":"1438676","bugzilla_description":"CVE-2017-2669 dovecot: Dovecot DoS when passdb dict was used for authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2669.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-8652","severity":"moderate","public_date":"2016-11-29T00:00:00Z","advisories":[],"bugzilla":"1401024","bugzilla_description":"CVE-2016-8652 dovecot: Remote crash when auth-policy component is activated","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2016-4983","severity":"low","public_date":"2016-06-13T00:00:00Z","advisories":[],"bugzilla":"1346055","bugzilla_description":"CVE-2016-4983 dovecot insecure SSL/TLS key and certificate file creation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4983.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2015-3420","severity":"low","public_date":"2015-04-26T00:00:00Z","advisories":[],"bugzilla":"1216057","bugzilla_description":"CVE-2015-3420 dovecot: SSL/TLS handshake failures leading to a crash of the login process.","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3420.json"},{"CVE":"CVE-2014-3430","severity":"moderate","public_date":"2014-05-09T00:00:00Z","advisories":["RHSA-2014:0790"],"bugzilla":"1096402","bugzilla_description":"CVE-2014-3430 dovecot: denial of service through maxxing out SSL connections","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["dovecot-1:2.0.9-7.el6_5.1","dovecot-1:2.2.10-4.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3430.json"},{"CVE":"CVE-2013-6171","severity":"low","public_date":"2013-11-03T00:00:00Z","advisories":[],"bugzilla":"1028589","bugzilla_description":"CVE-2013-6171 dovecot: passdb checkpassword authentication local bypass","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6171.json"},{"CVE":"CVE-2013-2111","severity":"moderate","public_date":"2013-05-20T00:00:00Z","advisories":[],"bugzilla":"966029","bugzilla_description":"CVE-2013-2111 dovecot: DoS (daemon hang) when parsing invalid IMAP APPEND command parameters","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2111.json"},{"CVE":"CVE-2012-5620","severity":null,"public_date":"2012-10-05T00:00:00Z","advisories":[],"bugzilla":"883060","bugzilla_description":"CVE-2012-5620 dovecot: DoS when handling a search for multiple keywords","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5620.json"},{"CVE":"CVE-2011-4318","severity":"low","public_date":"2011-11-17T00:00:00Z","advisories":["RHSA-2013:0520"],"bugzilla":"754980","bugzilla_description":"CVE-2011-4318 dovecot: proxy destination host name not checked against SSL certificate name","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["dovecot-1:2.0.9-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4318.json"},{"CVE":"CVE-2011-1929","severity":"moderate","public_date":"2011-05-11T00:00:00Z","advisories":["RHSA-2011:1187"],"bugzilla":"706286","bugzilla_description":"CVE-2011-1929 dovecot: potential crash when parsing header names that contain NUL characters","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["dovecot-1:2.0.9-2.el6_1.1","dovecot-0:0.99.11-10.EL4","dovecot-0:1.0.7-7.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1929.json"},{"CVE":"CVE-2011-2166","severity":"low","public_date":"2011-05-11T00:00:00Z","advisories":["RHSA-2013:0520"],"bugzilla":"709095","bugzilla_description":"CVE-2011-2166 dovecot: authenticated remote bypass of intended access restrictions","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["dovecot-1:2.0.9-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2166.json"},{"CVE":"CVE-2011-2167","severity":"low","public_date":"2011-05-11T00:00:00Z","advisories":["RHSA-2013:0520"],"bugzilla":"709097","bugzilla_description":"CVE-2011-2167 dovecot: directory traversal due to not obeying chroot directive","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["dovecot-1:2.0.9-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2167.json"},{"CVE":"CVE-2010-3780","severity":"moderate","public_date":"2010-10-06T00:00:00Z","advisories":["RHSA-2011:0600"],"bugzilla":"641276","bugzilla_description":"CVE-2010-3780 Dovecot: Busy master process, receiving a lot of SIGCHLD signals rapidly while logging, could die","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P/","CWE":null,"affected_packages":["dovecot-1:2.0.9-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3780.json"},{"CVE":"CVE-2010-3779","severity":"low","public_date":"2010-10-06T00:00:00Z","advisories":[],"bugzilla":"641287","bugzilla_description":"CVE-2010-3779 Dovecot: Admin permissions granted to the owner of each mailbox in a non-public namespace","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3779.json"},{"CVE":"CVE-2010-3706","severity":"low","public_date":"2010-10-01T00:00:00Z","advisories":[],"bugzilla":"640401","bugzilla_description":"CVE-2010-3706 Dovecot: Failed to update ACL cache for mailboxes stored in private namespace","cvss_score":3.2,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3706.json"},{"CVE":"CVE-2010-3707","severity":"low","public_date":"2010-10-01T00:00:00Z","advisories":["RHSA-2011:0600"],"bugzilla":"640410","bugzilla_description":"CVE-2010-3707 Dovecot: Failed to properly update ACL cache, when multiple rules defined rights for one subject","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["dovecot-1:2.0.9-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3707.json"},{"CVE":"CVE-2010-3304","severity":"low","public_date":"2010-07-24T00:00:00Z","advisories":[],"bugzilla":"746270","bugzilla_description":"CVE-2010-3304 dovecot: INBOX ACLs to newly created mailboxes propagation, possibly leading to weak ACLs","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3304.json"},{"CVE":"CVE-2009-3897","severity":"low","public_date":"2009-11-20T00:00:00Z","advisories":[],"bugzilla":"746266","bugzilla_description":"CVE-2009-3897 dovecot: Insecure permissions set for certain directories at installation time","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3897.json"},{"CVE":"CVE-2008-4577","severity":"low","public_date":"2008-10-05T00:00:00Z","advisories":["RHSA-2009:0205"],"bugzilla":"467436","bugzilla_description":"CVE-2008-4577 dovecot: incorrect handling of negative rights in the ACL plugin","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["dovecot-0:1.0.7-7.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4577.json"},{"CVE":"CVE-2008-4870","severity":"low","public_date":"2008-03-06T00:00:00Z","advisories":["RHSA-2009:0205"],"bugzilla":"469659","bugzilla_description":"CVE-2008-4870 dovecot: ssl_key_password disclosure due to an insecure dovecot.conf permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dovecot-0:1.0.7-7.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4870.json"},{"CVE":"CVE-2008-1199","severity":"low","public_date":"2008-03-04T00:00:00Z","advisories":["RHSA-2008:0297"],"bugzilla":"436927","bugzilla_description":"CVE-2008-1199 dovecot: insecure mail_extra_groups option","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["dovecot-0:1.0.7-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1199.json"},{"CVE":"CVE-2007-6598","severity":"low","public_date":"2007-12-29T00:00:00Z","advisories":["RHSA-2008:0297"],"bugzilla":"427575","bugzilla_description":"CVE-2007-6598 dovecot LDAP+auth cache user login mixup","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dovecot-0:1.0.7-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6598.json"},{"CVE":"CVE-2007-4211","severity":"low","public_date":"2007-08-01T00:00:00Z","advisories":["RHSA-2008:0297"],"bugzilla":"251007","bugzilla_description":"CVE-2007-4211 Dovecot possible privilege ascalation in ACL plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dovecot-0:1.0.7-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4211.json"},{"CVE":"CVE-2007-2231","severity":"low","public_date":"2007-03-28T00:00:00Z","advisories":["RHSA-2008:0297"],"bugzilla":"238439","bugzilla_description":"CVE-2007-2231 Directory traversal in dovecot with zlib plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["dovecot-0:1.0.7-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2231.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/doxygen-doxywizard_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/doxygen-doxywizard_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/doxygen-doxywizard_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/doxygen-latex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/doxygen-latex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/doxygen-latex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/doxygen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/doxygen_security_api_results.json
new file mode 100644
index 0000000..cddc1d0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/doxygen_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10245","severity":"low","public_date":"2019-05-24T00:00:00Z","advisories":["RHSA-2020:1034"],"bugzilla":"1714190","bugzilla_description":"CVE-2016-10245 doxygen: cross-site scripting in templates/html/search_opensearch.php","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["doxygen-1:1.8.5-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk_security_api_results.json
new file mode 100644
index 0000000..9210220
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dpdk_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14374","severity":"important","public_date":"2020-09-28T15:00:00Z","advisories":[],"bugzilla":"1879466","bugzilla_description":"CVE-2020-14374 dpdk: remote Code Execution in vhost_crypto (VM Escape)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14374.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-14375","severity":"important","public_date":"2020-09-28T15:00:00Z","advisories":[],"bugzilla":"1879468","bugzilla_description":"CVE-2020-14375 dpdk: time-of-check time-of-use vulnerabilities throughout vhost_crypto.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14375.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-14376","severity":"important","public_date":"2020-09-28T15:00:00Z","advisories":[],"bugzilla":"1879470","bugzilla_description":"CVE-2020-14376 dpdk: buffer overflow copying iv_data from guest to host (prepare_sym_cipher_op & prepare_sym_chain_op)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14376.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-14377","severity":"important","public_date":"2020-09-28T15:00:00Z","advisories":[],"bugzilla":"1879472","bugzilla_description":"CVE-2020-14377 dpdk: write_back_data buffer over read (cipher->para.dst_data_len & desc->len)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14377.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-14378","severity":"low","public_date":"2020-09-28T15:00:00Z","advisories":[],"bugzilla":"1879473","bugzilla_description":"CVE-2020-14378 dpdk: partial Denial of Service due to Integer Underflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14378.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2020-10722","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:4114","RHSA-2020:2297","RHSA-2020:2298","RHSA-2020:2683","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828867","bugzilla_description":"CVE-2020-10722 dpdk: librte_vhost Integer overflow in vhost_user_set_log_base()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["dpdk-0:18.11.8-1.el7_8","openvswitch-0:2.9.0-130.el7fdp","openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10722.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10723","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:4114","RHSA-2020:2297","RHSA-2020:2298","RHSA-2020:2683","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828874","bugzilla_description":"CVE-2020-10723 dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["dpdk-0:18.11.8-1.el7_8","openvswitch-0:2.9.0-130.el7fdp","openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10723.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10724","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2297","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828884","bugzilla_description":"CVE-2020-10724 dpdk: librte_vhost Missing inputs validation in Vhost-crypto","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10724.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2020-10725","severity":"important","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2295","RHBA-2020:2409"],"bugzilla":"1828894","bugzilla_description":"CVE-2020-10725 dpdk: librte_vhost Malicious guest could cause segfault by sending invalid Virtio descriptor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["redhat-coreos-45.82.202007062333-0","openvswitch2.13-0:2.13.0-25.el8fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10725.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2020-10726","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2295","RHBA-2020:2409"],"bugzilla":"1828898","bugzilla_description":"CVE-2020-10726 dpdk: librte_vhost VHOST_USER_GET_INFLIGHT_FD message flooding to result in a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-45.82.202007062333-0","openvswitch2.13-0:2.13.0-25.el8fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10726.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-14818","severity":"moderate","public_date":"2019-11-12T15:00:00Z","advisories":["RHSA-2020:0166","RHSA-2020:0165","RHSA-2020:0168","RHSA-2020:0172","RHBA-2020:0062","RHSA-2020:0171","RHSA-2020:1735","RHSA-2020:1226"],"bugzilla":"1737327","bugzilla_description":"CVE-2019-14818 dpdk: possible memory leak leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openvswitch-0:2.9.0-124.el7fdp","dpdk-0:18.11.5-1.el7_8","openvswitch2.12-0:2.12.0-12.el7fdp","dpdk-0:19.11-4.el8","openvswitch2.12-0:2.12.0-12.el8fdp","openvswitch2.11-0:2.11.0-35.el7fdp","redhat-coreos-43.81.202001142154.0","openvswitch2.11-0:2.11.0-35.el8fdp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1059","severity":"moderate","public_date":"2018-04-23T00:00:00Z","advisories":["RHSA-2018:2524","RHSA-2018:2038","RHSA-2018:2102","RHSA-2018:1267"],"bugzilla":"1544298","bugzilla_description":"CVE-2018-1059 dpdk: Information exposure in unchecked guest physical to host virtual address translations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openvswitch-0:2.9.0-19.el7fdp","dpdk-0:17.11-11.el7","openvswitch-0:2.9.0-19.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1059.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-2074","severity":"important","public_date":"2016-03-28T00:00:00Z","advisories":["RHSA-2016:0524","RHSA-2016:0537","RHSA-2016:0615","RHSA-2016:0523"],"bugzilla":"1318553","bugzilla_description":"CVE-2016-2074 openvswitch: MPLS buffer overflow vulnerability","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["openvswitch-dpdk-0:2.4.0-0.10346.git97bab959.3.el7_2","openvswitch-0:2.4.0-2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2074.json"},{"CVE":"CVE-2015-1142857","severity":"low","public_date":"2015-12-03T00:00:00Z","advisories":[],"bugzilla":"1295480","bugzilla_description":"kernel: net: ethernet flow control vulnerability in SRIOV devices","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1142857.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dptfxtract_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dptfxtract_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dptfxtract_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-caps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-caps_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-caps_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-config-generic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-config-generic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-config-generic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-config-rescue_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-config-rescue_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-config-rescue_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-live_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-live_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-live_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-network_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-network_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-network_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-squash_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-squash_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-squash_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut_security_api_results.json
new file mode 100644
index 0000000..561da51
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dracut_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2016-4484","severity":"moderate","public_date":"2016-11-14T00:00:00Z","advisories":[],"bugzilla":"1395134","bugzilla_description":"CVE-2016-4484 dracut: Brute force attack on LUKS password decryption via initramfs","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4484.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2016-8637","severity":"moderate","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1392056","bugzilla_description":"CVE-2016-8637 dracut: Local information disclosure of initramfs when early cpio is used","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8637.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2012-4453","severity":"moderate","public_date":"2012-09-27T00:00:00Z","advisories":["RHSA-2013:1674"],"bugzilla":"859448","bugzilla_description":"CVE-2012-4453 dracut: Creates initramfs images with world-readable permissions (information disclosure)","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":["dracut-0:004-336.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4453.json"},{"CVE":"CVE-2010-4176","severity":"moderate","public_date":"2010-11-19T00:00:00Z","advisories":[],"bugzilla":"654489","bugzilla_description":"CVE-2010-4176  dracut: /dev/systty permissions could allow remote users to snoop on local users","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4176.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/driverctl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/driverctl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/driverctl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dropwatch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dropwatch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dropwatch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/drpm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/drpm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/drpm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/drpm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/drpm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/drpm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dtc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dtc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dtc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dump_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dump_security_api_results.json
new file mode 100644
index 0000000..83d85b3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dump_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19325","severity":"low","public_date":"2020-03-16T00:00:00Z","advisories":[],"bugzilla":"1817479","bugzilla_description":"CVE-2018-19325 tcpdump: heap-based buffer over-read in the EXTRACT_32BITS function due to improper serviceId sanitization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19325.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-14882","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760430","bugzilla_description":"CVE-2018-14882 tcpdump: Buffer over-read in function rpl_dio_printopt in print-icmp6.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14882.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16300","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760445","bugzilla_description":"CVE-2018-16300 tcpdump: Resource exhaustion in bgp_attr_print() function in print-bgp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16300.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14469","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760447","bugzilla_description":"CVE-2018-14469 tcpdump: Buffer over-read in ikev1_n_print() function in print-isakmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14469.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14465","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760449","bugzilla_description":"CVE-2018-14465 tcpdump: Buffer over-read in rsvp_obj_print() function in print-rsvp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14465.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14463","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760453","bugzilla_description":"CVE-2018-14463 tcpdump: Buffer over-read in vrrp_print() function in print-vrrp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14463.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14462","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760455","bugzilla_description":"CVE-2018-14462 tcpdump: Buffer over-read in icmp_print() function in print-icmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14462.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14879","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760457","bugzilla_description":"CVE-2018-14879 tcpdump: Out of bounds read/write in in get_next_file() in tcpdump.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14879.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16229","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760458","bugzilla_description":"CVE-2018-16229 tcpdump: Buffer over-read in dccp_print_option() function in print-dccp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16229.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16227","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760461","bugzilla_description":"CVE-2018-16227 tcpdump: Buffer over-read in print-802_11.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16227.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14881","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760463","bugzilla_description":"CVE-2018-14881 tcpdump: Buffer over-read in bgp_capabilities_print() function in print-bgp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14881.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14468","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760464","bugzilla_description":"CVE-2018-14468 tcpdump: Buffer over-read in mfr_print() function in print-fr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14468.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14880","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760468","bugzilla_description":"CVE-2018-14880 tcpdump: Buffer over-read in ospf6_print_lshdr() function in print-ospf6.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14880.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10103","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760504","bugzilla_description":"CVE-2018-10103 tcpdump: SMB data printing mishandled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10103.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-10105","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760505","bugzilla_description":"CVE-2018-10105 tcpdump: SMB data printing mishandled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10105.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-14461","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760506","bugzilla_description":"CVE-2018-14461 tcpdump: Buffer over-read in ldp_tlv_print() function in print-ldp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14461.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14464","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760507","bugzilla_description":"CVE-2018-14464 tcpdump: Buffer over-read in lmp_print_data_link_subobjs() function in print-lmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14464.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14466","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760509","bugzilla_description":"CVE-2018-14466 tcpdump: Buffer over-read in print-icmp6.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14466.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14467","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760512","bugzilla_description":"CVE-2018-14467 tcpdump: Buffer over-read in bgp_capabilities_print() in print-bgp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14467.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14470","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760513","bugzilla_description":"CVE-2018-14470 tcpdump: Buffer over-read in babel_print_v2() in print-babel.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14470.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16228","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760514","bugzilla_description":"CVE-2018-16228 tcpdump: Access to uninitialized buffer in print_prefix() function in print-hncp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16228.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16230","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760516","bugzilla_description":"CVE-2018-16230 tcpdump: Buffer over-read in bgp_attr_print() function in print-bgp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16230.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16451","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760517","bugzilla_description":"CVE-2018-16451 tcpdump: Buffer over-read in print_trans() function in print-smb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16451.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16452","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760518","bugzilla_description":"CVE-2018-16452 tcpdump: Resource exhaustion in smb_fdata() funtion in smbutil.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16452.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15166","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760520","bugzilla_description":"CVE-2019-15166 tcpdump: Buffer overflow in lmp_print_data_link_subobjs() in print-lmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15166.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1010220","severity":null,"public_date":"2019-08-01T00:00:00Z","advisories":[],"bugzilla":"1735549","bugzilla_description":"CVE-2019-1010220 tcpdump: buffer over-read in function print_prefix in print-hncp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010220.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-19519","severity":"low","public_date":"2018-12-03T00:00:00Z","advisories":["RHSA-2019:3976","RHSA-2020:1604"],"bugzilla":"1655374","bugzilla_description":"CVE-2018-19519 tcpdump: Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-4.el7_7.1","tcpdump-14:4.9.2-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19519.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-16808","severity":"low","public_date":"2017-11-13T00:00:00Z","advisories":[],"bugzilla":"1516994","bugzilla_description":"CVE-2017-16808 tcpdump: heap-based buffer over-read in aoe_print in print-aoe.c and lookup_emem in addrtoname.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16808.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12893","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490539","bugzilla_description":"CVE-2017-12893 tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12894","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490540","bugzilla_description":"CVE-2017-12894 tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12894.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12895","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490541","bugzilla_description":"CVE-2017-12895 tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12895.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12896","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490543","bugzilla_description":"CVE-2017-12896 tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12896.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12897","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490545","bugzilla_description":"CVE-2017-12897 tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12898","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490546","bugzilla_description":"CVE-2017-12898 tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12898.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12899","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490547","bugzilla_description":"CVE-2017-12899 tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12899.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12900","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490548","bugzilla_description":"CVE-2017-12900 tcpdump: Buffer over-read in util-print.c:tok2strbuf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12901","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490549","bugzilla_description":"CVE-2017-12901 tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12901.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12902","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490550","bugzilla_description":"CVE-2017-12902 tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12902.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12985","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490551","bugzilla_description":"CVE-2017-12985 tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12985.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12986","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490552","bugzilla_description":"CVE-2017-12986 tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12986.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12987","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490553","bugzilla_description":"CVE-2017-12987 tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12987.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12988","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490554","bugzilla_description":"CVE-2017-12988 tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12988.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12989","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490555","bugzilla_description":"CVE-2017-12989 tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12989.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12990","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490556","bugzilla_description":"CVE-2017-12990 tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12990.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12991","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490557","bugzilla_description":"CVE-2017-12991 tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12991.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12992","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490558","bugzilla_description":"CVE-2017-12992 tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12993","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490559","bugzilla_description":"CVE-2017-12993 tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12994","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490560","bugzilla_description":"CVE-2017-12994 tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12994.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12995","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490561","bugzilla_description":"CVE-2017-12995 tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12995.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12996","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490562","bugzilla_description":"CVE-2017-12996 tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12996.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12997","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490564","bugzilla_description":"CVE-2017-12997 tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12997.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12998","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490565","bugzilla_description":"CVE-2017-12998 tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12998.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12999","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490566","bugzilla_description":"CVE-2017-12999 tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13000","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490567","bugzilla_description":"CVE-2017-13000 tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13001","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490568","bugzilla_description":"CVE-2017-13001 tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13001.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13002","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490569","bugzilla_description":"CVE-2017-13002 tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13002.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13003","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490570","bugzilla_description":"CVE-2017-13003 tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13003.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13004","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490571","bugzilla_description":"CVE-2017-13004 tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13005","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490572","bugzilla_description":"CVE-2017-13005 tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13006","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490573","bugzilla_description":"CVE-2017-13006 tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13006.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13007","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490574","bugzilla_description":"CVE-2017-13007 tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13007.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13008","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490575","bugzilla_description":"CVE-2017-13008 tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13008.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13009","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490576","bugzilla_description":"CVE-2017-13009 tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13009.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13010","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490577","bugzilla_description":"CVE-2017-13010 tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13011","severity":"moderate","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490578","bugzilla_description":"CVE-2017-13011 tcpdump: Buffer overflow in util-print.c:bittok2str_internal()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13011.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13012","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490579","bugzilla_description":"CVE-2017-13012 tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13013","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490580","bugzilla_description":"CVE-2017-13013 tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13013.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13014","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490581","bugzilla_description":"CVE-2017-13014 tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13015","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490582","bugzilla_description":"CVE-2017-13015 tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13015.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13016","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490583","bugzilla_description":"CVE-2017-13016 tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13016.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13017","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490584","bugzilla_description":"CVE-2017-13017 tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13017.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13018","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490585","bugzilla_description":"CVE-2017-13018 tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13018.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13019","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490586","bugzilla_description":"CVE-2017-13019 tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13020","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490587","bugzilla_description":"CVE-2017-13020 tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13021","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490588","bugzilla_description":"CVE-2017-13021 tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13021.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13022","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490589","bugzilla_description":"CVE-2017-13022 tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13023","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490590","bugzilla_description":"CVE-2017-13023 tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13024","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490591","bugzilla_description":"CVE-2017-13024 tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13024.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13025","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490592","bugzilla_description":"CVE-2017-13025 tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13025.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13026","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490593","bugzilla_description":"CVE-2017-13026 tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13026.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13027","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490594","bugzilla_description":"CVE-2017-13027 tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13027.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13028","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490595","bugzilla_description":"CVE-2017-13028 tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13028.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13029","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490596","bugzilla_description":"CVE-2017-13029 tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13029.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13030","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490597","bugzilla_description":"CVE-2017-13030 tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13030.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13031","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490598","bugzilla_description":"CVE-2017-13031 tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13031.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13032","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490599","bugzilla_description":"CVE-2017-13032 tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13032.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13033","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490600","bugzilla_description":"CVE-2017-13033 tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13033.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13034","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490601","bugzilla_description":"CVE-2017-13034 tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13034.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13035","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490602","bugzilla_description":"CVE-2017-13035 tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13035.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13036","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490603","bugzilla_description":"CVE-2017-13036 tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13036.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13037","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490604","bugzilla_description":"CVE-2017-13037 tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13038","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490605","bugzilla_description":"CVE-2017-13038 tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13038.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13039","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490606","bugzilla_description":"CVE-2017-13039 tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13039.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13040","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490607","bugzilla_description":"CVE-2017-13040 tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13041","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490608","bugzilla_description":"CVE-2017-13041 tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13041.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13042","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490609","bugzilla_description":"CVE-2017-13042 tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13043","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490610","bugzilla_description":"CVE-2017-13043 tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13043.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13044","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490611","bugzilla_description":"CVE-2017-13044 tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13044.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13045","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490612","bugzilla_description":"CVE-2017-13045 tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13045.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13046","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490613","bugzilla_description":"CVE-2017-13046 tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13046.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13047","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490614","bugzilla_description":"CVE-2017-13047 tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13047.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13048","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490615","bugzilla_description":"CVE-2017-13048 tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13049","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490616","bugzilla_description":"CVE-2017-13049 tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13049.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13050","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490617","bugzilla_description":"CVE-2017-13050 tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13050.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13051","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490618","bugzilla_description":"CVE-2017-13051 tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13051.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13052","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490619","bugzilla_description":"CVE-2017-13052 tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13052.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13053","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490620","bugzilla_description":"CVE-2017-13053 tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13054","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490621","bugzilla_description":"CVE-2017-13054 tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13055","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490622","bugzilla_description":"CVE-2017-13055 tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13055.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13687","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490623","bugzilla_description":"CVE-2017-13687 tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13687.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13688","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490624","bugzilla_description":"CVE-2017-13688 tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13688.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13689","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490625","bugzilla_description":"CVE-2017-13689 tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13689.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13690","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490626","bugzilla_description":"CVE-2017-13690 tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13690.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13725","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490627","bugzilla_description":"CVE-2017-13725 tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13725.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-11541","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1475352","bugzilla_description":"CVE-2017-11541 tcpdump: heap-based buffer over-read in the lldp_print","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11541.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-11542","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1475355","bugzilla_description":"CVE-2017-11542 tcpdump: heap-based buffer over-read in the pimv1_print","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-11543","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1475358","bugzilla_description":"CVE-2017-11543 tcpdump: buffer overflow in the sliplink_print function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11544","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1475359","bugzilla_description":"CVE-2017-11544 tcpdump: Segmentation Violation in the compressed_sl_print","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11544.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11108","severity":"low","public_date":"2017-07-07T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1472878","bugzilla_description":"CVE-2017-11108 tcpdump: Heap buffer overflow in the EXTRACT_16BITS function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11108.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7922","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7923","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7924","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7924.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7925","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7926","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7926.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7927","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7927.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7928","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7929","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7929.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7930","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7930.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7931","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7931.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7932","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7932.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7933","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7934","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7934.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7935","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7935.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7936","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7937","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7937.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7938","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7938.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7939","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7939.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7940","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7940.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7973","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7974","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7974.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7975","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7983","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7983.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7984","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7984.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7985","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7985.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7986","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7986.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7992","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7993","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-8574","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8574.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-8575","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8575.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5202","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5202.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5203","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5203.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5204","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5205","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5205.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5341","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5341.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5342","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5342.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5482","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5482.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5483","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5483.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5484","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5484.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5485","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5486","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-9797","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401520","bugzilla_description":"CVE-2016-9797 bluez: buffer over-read in l2cap_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9797.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9798","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401522","bugzilla_description":"CVE-2016-9798 bluez: use-after-free in conf_opt()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9798.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9800","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401527","bugzilla_description":"CVE-2016-9800 bluez: buffer overflow in pin_code_reply_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9800.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9801","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401538","bugzilla_description":"CVE-2016-9801 bluez: buffer overflow in set_ext_ctrl()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9801.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9803","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401543","bugzilla_description":"CVE-2016-9803 bluez: out-of-bounds read in le_meta_ev_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9803.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9804","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1401544","bugzilla_description":"CVE-2016-9804 bluez: buffer overflow in commands_dump()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9917","severity":"low","public_date":"2016-11-14T00:00:00Z","advisories":[],"bugzilla":"1403879","bugzilla_description":"CVE-2016-9917 bluez: Heap-based buffer overflow vulnerability in read_n()","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9917.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2015-3138","severity":"low","public_date":"2015-03-25T00:00:00Z","advisories":[],"bugzilla":"1212342","bugzilla_description":"CVE-2015-3138 tcpdump: denial of service in print-wb.c","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3138.json"},{"CVE":"CVE-2015-0261","severity":"moderate","public_date":"2015-03-09T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1201792","bugzilla_description":"CVE-2015-0261 tcpdump: IPv6 mobility printer mobility_opt_print() typecastimg/signedness error","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0261.json"},{"CVE":"CVE-2015-2153","severity":"moderate","public_date":"2015-03-09T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1201795","bugzilla_description":"CVE-2015-2153 tcpdump: tcp printer rpki_rtr_pdu_print() missing length check","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2153.json"},{"CVE":"CVE-2015-2154","severity":"low","public_date":"2015-03-09T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1201797","bugzilla_description":"CVE-2015-2154 tcpdump: ethernet printer osi_print_cksum() missing sanity checks out-of-bounds read","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2154.json"},{"CVE":"CVE-2015-2155","severity":"moderate","public_date":"2015-03-09T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1201798","bugzilla_description":"CVE-2015-2155 tcpdump: force printer vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2155.json"},{"CVE":"CVE-2014-9140","severity":"moderate","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1171182","bugzilla_description":"CVE-2014-9140 tcpdump: incorrect handling of PPP packets printing","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9140.json"},{"CVE":"CVE-2014-8767","severity":"low","public_date":"2014-11-13T00:00:00Z","advisories":[],"bugzilla":"1165160","bugzilla_description":"CVE-2014-8767 tcpdump: denial of service in verbose mode using malformed OLSR payload","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8767.json"},{"CVE":"CVE-2014-8768","severity":"low","public_date":"2014-11-13T00:00:00Z","advisories":[],"bugzilla":"1165161","bugzilla_description":"CVE-2014-8768 tcpdump: denial of service in verbose mode using malformed Geonet payload","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8768.json"},{"CVE":"CVE-2014-8769","severity":"low","public_date":"2014-11-13T00:00:00Z","advisories":[],"bugzilla":"1165162","bugzilla_description":"CVE-2014-8769 tcpdump: unreliable output using malformed AOVD payload","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8769.json"},{"CVE":"CVE-2014-4330","severity":"low","public_date":"2014-09-18T00:00:00Z","advisories":[],"bugzilla":"1139700","bugzilla_description":"CVE-2014-4330 perl-Data-Dumper: deep recursion stack overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4330.json"},{"CVE":"CVE-2014-4607","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":["RHSA-2014:0861"],"bugzilla":"1112418","bugzilla_description":"CVE-2014-4607 lzo: lzo1x_decompress_safe() integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["lzo-0:2.03-3.1.el6_5.1","lzo-0:2.06-6.el7_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4607.json"},{"CVE":"CVE-2007-3798","severity":"low","public_date":"2007-07-10T00:00:00Z","advisories":["RHSA-2007:0387","RHSA-2007:0368"],"bugzilla":"250275","bugzilla_description":"CVE-2007-3798 tcpdump BGP integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["tcpdump-14:3.9.4-11.el5","tcpdump-14:3.8.2-12.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3798.json"},{"CVE":"CVE-2007-1218","severity":"low","public_date":"2007-03-01T00:00:00Z","advisories":["RHSA-2007:0387","RHSA-2007:0368"],"bugzilla":"232347","bugzilla_description":"CVE-2007-1218 tcpdump denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.9.4-11.el5","tcpdump-14:3.8.2-12.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1218.json"},{"CVE":"CVE-2006-0670","severity":"low","public_date":"2006-02-05T00:00:00Z","advisories":[],"bugzilla":"187945","bugzilla_description":"CVE-2006-0670 bluez-hcidump Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0670.json"},{"CVE":"CVE-2005-1267","severity":"low","public_date":"2005-06-06T00:00:00Z","advisories":["RHSA-2005:505"],"bugzilla":"1617624","bugzilla_description":"CVE-2005-1267 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.8.2-10.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1267.json"},{"CVE":"CVE-2005-1278","severity":"moderate","public_date":"2005-04-26T00:00:00Z","advisories":["RHSA-2005:421","RHSA-2005:417"],"bugzilla":"1617628","bugzilla_description":"CVE-2005-1278 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.7.2-7.E3.5","tcpdump-14:3.8.2-9.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1278.json"},{"CVE":"CVE-2005-1279","severity":"moderate","public_date":"2005-04-26T00:00:00Z","advisories":["RHSA-2005:421","RHSA-2005:417"],"bugzilla":"1617629","bugzilla_description":"CVE-2005-1279 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.7.2-7.E3.5","tcpdump-14:3.8.2-9.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1279.json"},{"CVE":"CVE-2005-1280","severity":"moderate","public_date":"2005-04-26T00:00:00Z","advisories":["RHSA-2005:421","RHSA-2005:417"],"bugzilla":"1617630","bugzilla_description":"CVE-2005-1280 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.7.2-7.E3.5","tcpdump-14:3.8.2-9.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1280.json"},{"CVE":"CVE-2004-0183","severity":"low","public_date":"2004-03-29T00:00:00Z","advisories":["RHSA-2004:219"],"bugzilla":"1617174","bugzilla_description":"CVE-2004-0183 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.7.2-7.E3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0183.json"},{"CVE":"CVE-2004-0184","severity":"low","public_date":"2004-03-29T00:00:00Z","advisories":["RHSA-2004:219"],"bugzilla":"1617175","bugzilla_description":"CVE-2004-0184 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.7.2-7.E3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0184.json"},{"CVE":"CVE-2003-0989","severity":"moderate","public_date":"2004-01-14T00:00:00Z","advisories":["RHSA-2004:008","RHSA-2004:007"],"bugzilla":"1617118","bugzilla_description":"CVE-2003-0989 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.6.2-12.2.1AS.5","tcpdump-14:3.7.2-7.E3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0989.json"},{"CVE":"CVE-2004-0055","severity":"moderate","public_date":"2004-01-04T00:00:00Z","advisories":["RHSA-2004:008","RHSA-2004:007"],"bugzilla":"1617135","bugzilla_description":"CVE-2004-0055 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.6.2-12.2.1AS.5","tcpdump-14:3.7.2-7.E3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0055.json"},{"CVE":"CVE-2004-0057","severity":"moderate","public_date":"2004-01-04T00:00:00Z","advisories":["RHSA-2004:008","RHSA-2004:007"],"bugzilla":"1617136","bugzilla_description":"CVE-2004-0057 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.6.2-12.2.1AS.5","tcpdump-14:3.7.2-7.E3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0057.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dvd+rw-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dvd+rw-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dvd+rw-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dwarves_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dwarves_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dwarves_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dwz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dwz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dwz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-testsuite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-testsuite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst-testsuite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/dyninst_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/e2fsprogs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/e2fsprogs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/e2fsprogs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/e2fsprogs-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/e2fsprogs-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/e2fsprogs-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/e2fsprogs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/e2fsprogs_security_api_results.json
new file mode 100644
index 0000000..953f187
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/e2fsprogs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-5188","severity":"moderate","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:4011"],"bugzilla":"1790048","bugzilla_description":"CVE-2019-5188 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["e2fsprogs-0:1.42.9-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5188.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-5094","severity":"moderate","public_date":"2019-08-27T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4011","RHSA-2020:1913"],"bugzilla":"1768555","bugzilla_description":"CVE-2019-5094 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["redhat-coreos-43.82.202007300301.0","e2fsprogs-0:1.42.9-19.el7","e2fsprogs-0:1.45.4-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5094.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2015-1572","severity":"low","public_date":"2015-02-11T00:00:00Z","advisories":[],"bugzilla":"1193945","bugzilla_description":"CVE-2015-1572 e2fsprogs: potential buffer overflow in closefs() (incomplete CVE-2015-0247 fix)","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1572.json"},{"CVE":"CVE-2015-0247","severity":"moderate","public_date":"2015-02-05T00:00:00Z","advisories":[],"bugzilla":"1187032","bugzilla_description":"CVE-2015-0247 e2fsprogs: ext2fs_open2() missing first_meta_bg boundary check leading to heap buffer overflow (oCERT-015-002)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0247.json"},{"CVE":"CVE-2007-5497","severity":"moderate","public_date":"2007-12-05T00:00:00Z","advisories":["RHSA-2008:0003"],"bugzilla":"403441","bugzilla_description":"CVE-2007-5497 e2fsprogs multiple integer overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["e2fsprogs-0:1.35-12.11.el4_6.1","e2fsprogs-0:1.26-1.73","e2fsprogs-0:1.32-15.4","e2fsprogs-0:1.39-10.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5497.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/easymock-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/easymock-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/easymock-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/easymock_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/easymock_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/easymock_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ed_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ed_security_api_results.json
new file mode 100644
index 0000000..b42c56e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ed_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14584","severity":"moderate","public_date":"2020-10-16T00:00:00Z","advisories":[],"bugzilla":"1889486","bugzilla_description":"CVE-2019-14584 edk2: NULL pointer dereference in AuthenticodeVerify()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14584.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-25644","severity":"important","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4257","RHSA-2020:4256"],"bugzilla":"1885485","bugzilla_description":"CVE-2020-25644 wildfly-openssl: memory leak per HTTP session creation in WildFly OpenSSL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el8eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el6eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el7eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25644.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-26160","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1883371","bugzilla_description":"CVE-2020-26160 jwt-go: access restriction bypass vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26160.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-7733","severity":"low","public_date":"2020-09-12T00:00:00Z","advisories":[],"bugzilla":"1879733","bugzilla_description":"CVE-2020-7733 ua-parser-js: Regular expression denial of service via the regex","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7733.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14384","severity":"important","public_date":"2020-09-03T00:00:00Z","advisories":["RHSA-2020:3731","RHSA-2020:3730"],"bugzilla":"1875176","bugzilla_description":"CVE-2020-14384 jbossweb: Incomplete fix of CVE-2020-13935 for WebSocket in JBossWeb could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jbossweb-0:7.5.31-3.Final_redhat_3.1.ep6.el7","jbossweb-0:7.5.31-3.Final_redhat_3.1.ep6.el5","jbossweb-0:7.5.31-3.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14384.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14364","severity":"important","public_date":"2020-08-24T12:00:00Z","advisories":["RHSA-2020:4049","RHSA-2020:4115","RHSA-2020:4048","RHSA-2020:4059","RHSA-2020:4047","RHSA-2020:4058","RHSA-2020:4079","RHSA-2020:4167","RHSA-2020:4056","RHSA-2020:4078","RHSA-2020:4111","RHSA-2020:4055","RHSA-2020:4176","RHSA-2020:4054","RHSA-2020:4053","RHSA-2020:4052","RHSA-2020:4162","RHSA-2020:4051","RHSA-2020:4172","RHSA-2020:4050","RHSA-2020:4291","RHSA-2020:4290"],"bugzilla":"1869201","bugzilla_description":"CVE-2020-14364 QEMU: usb: out-of-bounds r/w access issue while processing usb packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["qemu-kvm-10:1.5.3-105.el7_2.20","qemu-kvm-rhev-10:2.12.0-33.el7_7.12","qemu-kvm-10:1.5.3-175.el7_9.1","qemu-kvm-10:1.5.3-160.el7_6.8","qemu-kvm-10:1.5.3-141.el7_4.11","qemu-kvm-ma-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-18.el7_6.12","qemu-kvm-2:0.12.1.2-2.448.el6_6.9","virt:rhel-8000020200910175113.f8e95b4e","qemu-kvm-ma-10:2.12.0-18.el7_6.7","qemu-kvm-10:1.5.3-167.el7_7.7","qemu-kvm-2:0.12.1.2-2.506.el6_10.8","qemu-kvm-2:0.12.1.2-2.415.el6_5.21","qemu-kvm-ma-10:2.12.0-48.el7_9.1","virt:rhel-8020020200909224913.4cda2c84","qemu-kvm-rhev-10:2.12.0-48.el7_9.1","qemu-kvm-10:1.5.3-126.el7_3.18","redhat-virtualization-host-0:4.4.2-20200930.0.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14364.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-10758","severity":"important","public_date":"2020-08-18T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3496","RHSA-2020:3497","RHSA-2020:3495","RHSA-2020:3539"],"bugzilla":"1843849","bugzilla_description":"CVE-2020-10758 keycloak: DoS by sending multiple simultaneous requests with a Content-Length header value greater than actual byte count of request body","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el6sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el7sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10758.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14352","severity":"important","public_date":"2020-08-13T00:00:00Z","advisories":["RHSA-2020:3749","RHBA-2020:3609","RHSA-2020:3658","RHSA-2020:3756"],"bugzilla":"1866498","bugzilla_description":"CVE-2020-14352 librepo: missing path validation in repomd.xml may lead to directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["librepo-0:1.9.2-2.el8_0","librepo-0:1.10.3-4.el8_1","redhat-coreos-43.82.202009181853.0","librepo-0:1.11.0-3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14352.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2020-8911","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869800","bugzilla_description":"CVE-2020-8911 aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8911.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2020-8912","severity":"low","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869801","bugzilla_description":"CVE-2020-8912 aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8912.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-13935","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3303","RHSA-2020:4004","RHSA-2020:3382","RHSA-2020:3383","RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306","RHSA-2020:3305"],"bugzilla":"1857024","bugzilla_description":"CVE-2020-13935 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","tomcat-0:7.0.76-15.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el6","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-13934","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306"],"bugzilla":"1857040","bugzilla_description":"CVE-2020-13934 tomcat: OutOfMemoryException caused by HTTP/2 connection leak could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13934.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-14560","severity":"moderate","public_date":"2020-07-01T00:00:00Z","advisories":[],"bugzilla":"1858038","bugzilla_description":"CVE-2019-14560 edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14560.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2020-15005","severity":"low","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1851026","bugzilla_description":"CVE-2020-15005 mediawiki: possible leak of private extension images into public cache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15005.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-10750","severity":"moderate","public_date":"2020-06-19T10:30:00Z","advisories":["RHSA-2020:2636"],"bugzilla":"1838401","bugzilla_description":"CVE-2020-10750 jaegertracing/jaeger: credentials leaked to container logs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532->CWE-200","affected_packages":["distributed-tracing/jaeger-all-in-one-rhel7:1.17.3-2","distributed-tracing/jaeger-ingester-rhel7:1.17.3-2","distributed-tracing/jaeger-collector-rhel7:1.17.3-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10750.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14147","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1848539","bugzilla_description":"CVE-2020-14147 redis: integer overflow in the getnum function in lua_struct.c could lead to a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14147.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2020-15780","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3218","RHSA-2020:3219","RHSA-2020:3228"],"bugzilla":"1852962","bugzilla_description":"CVE-2020-15780 kernel: lockdown: bypass through ACPI write via acpi_configfs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-193.14.3.rt13.67.el8_2","kernel-0:4.18.0-80.27.2.el8_0","kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.14.3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15780.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-0543","severity":"moderate","public_date":"2020-06-09T17:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1827165","bugzilla_description":"CVE-2020-0543 hw: Special Register Buffer Data Sampling (SRBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0543.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-10766","severity":"important","public_date":"2020-06-09T17:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845840","bugzilla_description":"CVE-2020-10766 kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10766.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10767","severity":"important","public_date":"2020-06-09T14:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845867","bugzilla_description":"CVE-2020-10767 kernel: Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10767.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10768","severity":"important","public_date":"2020-06-09T14:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845868","bugzilla_description":"CVE-2020-10768 kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10768.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10757","severity":"important","public_date":"2020-06-04T09:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHBA-2020:3180","RHSA-2020:3598","RHSA-2020:3221","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:3041"],"bugzilla":"1842525","bugzilla_description":"CVE-2020-10757 kernel: kernel: DAX hugepages not considered during mremap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-1062.33.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10757.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-12049","severity":"important","public_date":"2020-06-04T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3014","RHSA-2020:2894","RHSA-2020:3298","RHSA-2020:3044"],"bugzilla":"1849041","bugzilla_description":"CVE-2020-12049 dbus: denial of service via file descriptor leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-43.82.202007300301.0","dbus-1:1.12.8-10.el8_2","dbus-1:1.12.8-10.el8_1","dbus-1:1.10.24-14.el7_8","dbus-1:1.12.8-8.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12049.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-13777","severity":"important","public_date":"2020-06-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2639","RHSA-2020:2637","RHSA-2020:2638"],"bugzilla":"1843723","bugzilla_description":"CVE-2020-13777 gnutls: session resumption works without master key allowing MITM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["gnutls-0:3.6.8-9.el8_1","redhat-coreos-43.82.202007300301.0","gnutls-0:3.6.5-3.el8_0","gnutls-0:3.6.8-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13777.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-10754","severity":"moderate","public_date":"2020-05-29T04:41:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4003","RHSA-2020:3011"],"bugzilla":"1841041","bugzilla_description":"CVE-2020-10754 NetworkManager: user configuration not honoured leaving the connection unauthenticated via insecure defaults","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287->CWE-306","affected_packages":["NetworkManager-1:1.18.8-1.el7","redhat-coreos-43.82.202007300301.0","NetworkManager-1:1.22.8-5.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10754.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-10722","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:4114","RHSA-2020:2297","RHSA-2020:2298","RHSA-2020:2683","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828867","bugzilla_description":"CVE-2020-10722 dpdk: librte_vhost Integer overflow in vhost_user_set_log_base()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["dpdk-0:18.11.8-1.el7_8","openvswitch-0:2.9.0-130.el7fdp","openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10722.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10723","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:4114","RHSA-2020:2297","RHSA-2020:2298","RHSA-2020:2683","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828874","bugzilla_description":"CVE-2020-10723 dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["dpdk-0:18.11.8-1.el7_8","openvswitch-0:2.9.0-130.el7fdp","openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10723.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10724","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2297","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828884","bugzilla_description":"CVE-2020-10724 dpdk: librte_vhost Missing inputs validation in Vhost-crypto","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10724.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2020-10725","severity":"important","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2295","RHBA-2020:2409"],"bugzilla":"1828894","bugzilla_description":"CVE-2020-10725 dpdk: librte_vhost Malicious guest could cause segfault by sending invalid Virtio descriptor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["redhat-coreos-45.82.202007062333-0","openvswitch2.13-0:2.13.0-25.el8fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10725.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2020-10726","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2295","RHBA-2020:2409"],"bugzilla":"1828898","bugzilla_description":"CVE-2020-10726 dpdk: librte_vhost VHOST_USER_GET_INFLIGHT_FD message flooding to result in a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-45.82.202007062333-0","openvswitch2.13-0:2.13.0-25.el8fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10726.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-12888","severity":"important","public_date":"2020-05-14T00:00:00Z","advisories":["RHSA-2020:2664","RHSA-2020:2851","RHSA-2020:3016","RHSA-2020:2665","RHSA-2020:3222","RHSA-2020:3230","RHSA-2020:3010","RHSA-2020:2831","RHSA-2020:2854","RHSA-2020:2832","RHSA-2020:3019","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1836244","bugzilla_description":"CVE-2020-12888 Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["kernel-0:3.10.0-693.71.2.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-957.56.1.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-1062.30.1.el7","kernel-0:3.10.0-1127.13.1.el7","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-327.89.1.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:3.10.0-1127.13.1.rt56.1110.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12888.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-10711","severity":"important","public_date":"2020-05-12T12:00:00Z","advisories":["RHSA-2020:2103","RHSA-2020:2125","RHSA-2020:2104","RHSA-2020:2214","RHSA-2020:2522","RHSA-2020:2203","RHSA-2020:2277","RHSA-2020:2289","RHSA-2020:2102","RHSA-2020:2242","RHSA-2020:2199","RHSA-2020:2285","RHSA-2020:2519","RHSA-2020:2429","RHBA-2020:3180","RHSA-2020:2085","RHSA-2020:2082","RHSA-2020:2291","RHSA-2020:2171"],"bugzilla":"1825116","bugzilla_description":"CVE-2020-10711 Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-514.76.1.el7","kernel-0:4.18.0-193.1.2.el8_2","kernel-rt-1:3.10.0-693.67.1.rt56.665.el6rt","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:3.10.0-327.88.1.el7","kernel-0:2.6.32-754.29.2.el6","kernel-rt-0:3.10.0-1127.8.2.rt56.1103.el7","kernel-0:3.10.0-1062.26.1.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-957.54.1.el7","kernel-rt-0:4.18.0-193.1.2.rt13.53.el8_2","kernel-0:3.10.0-1127.8.2.el7","kernel-0:3.10.0-693.67.1.el7","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10711.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-1718","severity":"important","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:2112","RHSA-2020:2905","RHSA-2020:3197","RHSA-2020:2252","RHSA-2020:3196","RHSA-2020:2107","RHSA-2020:2108","RHSA-2020:2106"],"bugzilla":"1796756","bugzilla_description":"CVE-2020-1718 keycloak: security issue on reset credential flow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1718.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-1758","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:2112","RHSA-2020:2107","RHSA-2020:2108","RHSA-2020:2106"],"bugzilla":"1812514","bugzilla_description":"CVE-2020-1758 keycloak: improper verification of certificate with host mismatch could result in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":["rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1758.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-12825","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:3654","RHBA-2020:3609","RHSA-2020:4072"],"bugzilla":"1835377","bugzilla_description":"CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["redhat-coreos-43.82.202009181853.0","libcroco-0:0.6.12-4.el8_2.1","libcroco-0:0.6.12-6.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-1714","severity":"important","public_date":"2020-05-11T00:00:00Z","advisories":["RHSA-2020:3017","RHSA-2020:3675","RHSA-2020:2905","RHSA-2020:4252","RHSA-2020:2816","RHSA-2020:2813","RHSA-2020:2814","RHSA-2020:3678"],"bugzilla":"1705975","bugzilla_description":"CVE-2020-1714 keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["keycloak-adapter-sso7_4-eap6-0:9.0.4-1.redhat_00001.1.ep6.el7","eap7-keycloak-adapter-sso7_4-0:9.0.4-1.redhat_00001.1.el7eap","keycloak-adapter-sso7_4-eap6-0:9.0.4-1.redhat_00001.1.ep6.el6","eap7-keycloak-adapter-sso7_4-0:9.0.4-1.redhat_00001.1.el8eap","eap7-keycloak-adapter-sso7_4-0:9.0.4-1.redhat_00001.1.el6eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1714.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1724","severity":"low","public_date":"2020-05-07T00:00:00Z","advisories":["RHSA-2020:2112","RHSA-2020:2905","RHSA-2020:2252","RHSA-2020:2107","RHSA-2020:2108","RHSA-2020:2106"],"bugzilla":"1800527","bugzilla_description":"CVE-2020-1724 keycloak: problem with privacy after user logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":["rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.20-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1724.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-12657","severity":"important","public_date":"2020-05-05T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2428","RHSA-2020:2429","RHSA-2020:2427","RHSA-2020:2669","RHSA-2020:2567","RHSA-2020:2667"],"bugzilla":"1832866","bugzilla_description":"CVE-2020-12657 kernel: use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-147.20.1.el8_1","kernel-rt-0:4.18.0-193.6.3.rt13.59.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.6.3.el8_2","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12657.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11884","severity":"important","public_date":"2020-04-28T18:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2102","RHSA-2020:2199","RHSA-2020:2429"],"bugzilla":"1828149","bugzilla_description":"CVE-2020-11884 Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1251","affected_packages":["kernel-0:4.18.0-193.1.2.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11884.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-8203","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:3807","RHSA-2020:3370"],"bugzilla":"1857412","bugzilla_description":"CVE-2020-8203 nodejs-lodash: prototype pollution in zipObjectDeep function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","distributed-tracing/jaeger-query-rhel7:1.17.6-1","ovirt-web-ui-0:1.6.4-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11501","severity":"moderate","public_date":"2020-03-27T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1998"],"bugzilla":"1821896","bugzilla_description":"CVE-2020-11501 gnutls: DTLS client hello contains a random value of all zeroes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["gnutls-0:3.6.8-10.el8_2","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11501.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-1762","severity":"moderate","public_date":"2020-03-25T18:00:00Z","advisories":["RHSA-2020:0972"],"bugzilla":"1810387","bugzilla_description":"CVE-2020-1762 kiali: ignoring JWT claim fields","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613->CWE-384","affected_packages":["kiali-0:v1.0.10.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1762.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-10931","severity":"important","public_date":"2020-03-24T00:00:00Z","advisories":[],"bugzilla":"1816630","bugzilla_description":"CVE-2020-10931 memcached: mishandled memcpy into a stack-based buffer may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10931.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1744","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:0947","RHSA-2020:2905","RHSA-2020:2252","RHSA-2020:0946","RHSA-2020:0945","RHSA-2020:0951"],"bugzilla":"1805792","bugzilla_description":"CVE-2020-1744 keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-sso7-keycloak-0:4.8.18-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.18-1.Final_redhat_00001.1.el8sso","rh-sso7-keycloak-0:4.8.18-1.Final_redhat_00001.1.el7sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1744.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-10108","severity":"important","public_date":"2020-03-11T00:00:00Z","advisories":["RHSA-2020:1561","RHSA-2020:1962"],"bugzilla":"1813439","bugzilla_description":"CVE-2020-10108 python-twisted: HTTP request smuggling when presented with two Content-Length headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-444","affected_packages":["python-twisted-web-0:8.2.0-6.el6_10","python-twisted-web-0:12.1.0-7.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10108.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-10109","severity":"important","public_date":"2020-03-11T00:00:00Z","advisories":["RHSA-2020:1561"],"bugzilla":"1813447","bugzilla_description":"CVE-2020-10109 python-twisted: HTTP request smuggling when presented with a Content-Length and a chunked Transfer-Encoding header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-444","affected_packages":["python-twisted-web-0:12.1.0-7.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10109.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-7598","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:3247","RHSA-2020:2852","RHSA-2020:2992","RHSA-2020:2362","RHSA-2020:2848","RHSA-2020:3042","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:3084"],"bugzilla":"1813344","bugzilla_description":"CVE-2020-7598 nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","kiali-0:v1.0.11.redhat1-1.el7","rh-nodejs12-nodejs-0:12.18.2-1.el7","servicemesh-grafana-0:6.2.2-36.el8","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:12-8010020200630154708.c27ad7f8","nodejs:10-8020020200617141353.4cda2c84","nodejs:10-8010020200617134056.c27ad7f8","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7598.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-10534","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":[],"bugzilla":"1815173","bugzilla_description":"CVE-2020-10534 mediawiki: IP range evaluation issue allows blocked users regain escalated privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10534.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-1749","severity":"moderate","public_date":"2020-03-04T01:29:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1809833","bugzilla_description":"CVE-2020-1749 kernel: some ipv6 protocols not encrypted over ipsec tunnel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1749.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-10960","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1826076","bugzilla_description":"CVE-2020-10960 mediawiki: makeCollapsible allows applying event handler to any CSS selector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10960.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-1745","severity":"important","public_date":"2020-02-26T00:00:00Z","advisories":["RHSA-2020:2059","RHSA-2020:2367","RHSA-2020:2511","RHSA-2020:2058","RHSA-2020:2333","RHSA-2020:0812","RHSA-2020:0813","RHSA-2020:3779","RHSA-2020:0962","RHSA-2020:2515","RHSA-2020:0961","RHSA-2020:2512","RHSA-2020:2513","RHSA-2020:0952","RHSA-2020:2905","RHSA-2020:2060","RHSA-2020:2061","RHSA-2020:3192"],"bugzilla":"1807305","bugzilla_description":"CVE-2020-1745 undertow: AJP File Read/Inclusion Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["eap7-undertow-0:2.0.28-4.SP1_redhat_00002.1.el6eap","eap7-undertow-0:2.0.28-4.SP1_redhat_00002.1.el7eap","eap7-undertow-0:2.0.28-4.SP1_redhat_00002.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1745.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2020-2732","severity":"moderate","public_date":"2020-02-24T18:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2102","RHSA-2020:4062","RHSA-2020:2171","RHSA-2020:4060"],"bugzilla":"1805135","bugzilla_description":"CVE-2020-2732 Kernel: kvm: nVMX: L2 guest may trick the L0 hypervisor to access sensitive L1 resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-193.1.2.el8_2","kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-rt-0:4.18.0-193.1.2.rt13.53.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2732.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.8"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1938","severity":"important","public_date":"2020-02-20T00:00:00Z","advisories":["RHSA-2020:2840","RHSA-2020:2367","RHSA-2020:2783","RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:0860","RHSA-2020:1520","RHSA-2020:2781","RHSA-2020:2780","RHSA-2020:0855","RHSA-2020:0912","RHSA-2020:1479","RHSA-2020:1478","RHSA-2020:2779"],"bugzilla":"1806398","bugzilla_description":"CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["tomcat-0:7.0.76-11.el7_7","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el7","tomcat6-0:6.0.24-114.el6_10","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el6","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el5","tomcat-0:7.0.76-10.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1938.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2019-14586","severity":"moderate","public_date":"2020-02-16T00:00:00Z","advisories":[],"bugzilla":"1833340","bugzilla_description":"CVE-2019-14586 edk2: potential use-after-free due to the original configuration runtime memory is freed but it is still exposed to the OS runtime","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14586.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2019-14558","severity":"moderate","public_date":"2020-02-16T00:00:00Z","advisories":[],"bugzilla":"1833347","bugzilla_description":"CVE-2019-14558 edk2: potentially leaking of secret information due to uncleared memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14558.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-14587","severity":"moderate","public_date":"2020-02-16T00:00:00Z","advisories":[],"bugzilla":"1833352","bugzilla_description":"CVE-2019-14587 edk2: double-unmap issue in SdMmcCreateTrb function in MdeModulePkg/Bus/Pci/SdMmcPciHcDxe/SdMmcPciHci.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14587.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2020-1712","severity":"important","public_date":"2020-02-05T09:00:00Z","advisories":["RHSA-2020:0575","RHSA-2020:0564","RHBA-2020:0614"],"bugzilla":"1794578","bugzilla_description":"CVE-2020-1712 systemd: use-after-free when asynchronous polkit queries are performed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["systemd-0:239-18.el8_1.4","systemd-0:239-13.el8_0.7","redhat-coreos-42.81.20200224.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1712.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-14575","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":[],"bugzilla":"1736862","bugzilla_description":"CVE-2019-14575 edk2: DxeImageVerificationHandler() fails open in case of dbx signature check","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14575.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14559","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":[],"bugzilla":"1758601","bugzilla_description":"CVE-2019-14559 edk2: memory leak in ArpOnFrameRcvdDpc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14559.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-14563","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:1712"],"bugzilla":"1758620","bugzilla_description":"CVE-2019-14563 edk2: numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["edk2-0:20190829git37eef91017ad-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14563.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L","cvss3_score":"6.4"},{"CVE":"CVE-2020-8124","severity":"moderate","public_date":"2020-02-04T00:00:00Z","advisories":["RHSA-2020:0972"],"bugzilla":"1800774","bugzilla_description":"CVE-2020-8124 npmjs-url-parse: Improper validation of protocol of the returned URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["jaeger-0:v1.13.1.redhat6-1.el7","kiali-0:v1.0.10.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8124.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-3016","severity":"low","public_date":"2020-01-30T18:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3010"],"bugzilla":"1792167","bugzilla_description":"CVE-2019-3016 kernel: kvm: Information leak within a KVM guest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-200","affected_packages":["redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3016.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-18634","severity":"important","public_date":"2020-01-30T00:00:00Z","advisories":["RHSA-2020:0540","RHSA-2020:0487","RHBA-2020:0523","RHSA-2020:0509","RHSA-2020:0726"],"bugzilla":"1796944","bugzilla_description":"CVE-2019-18634 sudo: Stack based buffer overflow when pwfeedback is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["redhat-coreos-42.81.20200217.0","sudo-0:1.8.25p1-8.el8_1.1","sudo-0:1.8.25p1-4.el8_0.3","sudo-0:1.8.6p3-29.el6_10.3","sudo-0:1.8.23-4.el7_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18634.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-20445","severity":"important","public_date":"2020-01-29T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:0497","RHSA-2020:2333","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:0811","RHSA-2020:0605","RHSA-2020:0951","RHSA-2020:1445","RHSA-2020:0601","RHSA-2020:0567","RHSA-2020:0805","RHSA-2020:0606","RHSA-2020:0804","RHSA-2020:0939","RHSA-2020:0806","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1798509","bugzilla_description":"CVE-2019-20445 netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el6eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el7eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20445.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20444","severity":"important","public_date":"2020-01-29T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:0497","RHSA-2020:2333","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:0811","RHSA-2020:0605","RHSA-2020:0951","RHSA-2020:1445","RHSA-2020:0601","RHSA-2020:0567","RHSA-2020:0805","RHSA-2020:0606","RHSA-2020:0804","RHSA-2020:0939","RHSA-2020:0806","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1798524","bugzilla_description":"CVE-2019-20444 netty: HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el6eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el7eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20444.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-0548","severity":"low","public_date":"2020-01-27T13:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1788786","bugzilla_description":"CVE-2020-0548 hw: Vector Register Data Sampling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-200","affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0548.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2020-0549","severity":"moderate","public_date":"2020-01-27T13:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1788788","bugzilla_description":"CVE-2020-0549 hw: L1D Cache Eviction Sampling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-200","affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0549.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-12653","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHSA-2020:3432","RHSA-2020:3224","RHSA-2020:3389","RHSA-2020:3221","RHSA-2020:3232","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:2832","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1831868","bugzilla_description":"CVE-2020-12653 kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in drivers/net/wireless/marvell/mwifiex/scan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-rt-1:3.10.0-693.72.1.rt56.672.el6rt","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","kernel-0:3.10.0-327.90.2.el7","kernel-0:3.10.0-693.72.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:3.10.0-1062.31.2.el7","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12653.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12654","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHSA-2020:3432","RHSA-2020:3224","RHSA-2020:3389","RHSA-2020:3221","RHSA-2020:3232","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:2832","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1832530","bugzilla_description":"CVE-2020-12654 kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-1:3.10.0-693.72.1.rt56.672.el6rt","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","kernel-0:3.10.0-327.90.2.el7","kernel-0:3.10.0-693.72.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:3.10.0-1062.31.2.el7","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12654.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-7238","severity":"important","public_date":"2020-01-26T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:0497","RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:0811","RHSA-2020:0605","RHSA-2020:0951","RHSA-2020:1445","RHSA-2020:0601","RHSA-2020:0567","RHSA-2020:0805","RHSA-2020:0606","RHSA-2020:0804","RHSA-2020:0939","RHSA-2020:0806","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1796225","bugzilla_description":"CVE-2020-7238 netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el6eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el7eap","eap7-netty-0:4.1.45-1.Final_redhat_00001.1.el8eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7238.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-19345","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:0694","RHSA-2020:0617","RHSA-2020:0798"],"bugzilla":"1793296","bugzilla_description":"CVE-2019-19345 openshift/mediawiki-apb: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift3/mediawiki-apb:v3.11.188-4","openshift4/mediawiki-apb:v4.1.37-202003021622","openshift4/apb-base:v4.2.21-202002240343"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19345.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-1709","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:0694","RHSA-2020:0830","RHSA-2020:0799"],"bugzilla":"1793297","bugzilla_description":"CVE-2020-1709 openshift/mediawiki: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift3/mediawiki:v3.11.188-2","openshift4/mediawiki:v4.2.24-202003161048","openshift4/apb-base:v4.1.37-202003021622"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1709.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-10695","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1817530","bugzilla_description":"CVE-2020-10695 containers/redhat-sso-7: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10695.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-7053","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1795624","bugzilla_description":"CVE-2020-7053 kernel: use-after-free in i915_ppgtt_close in drivers/gpu/drm/i915/i915_gem_gtt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7053.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19922","severity":"low","public_date":"2019-12-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1493","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1792512","bugzilla_description":"CVE-2019-19922 kernel: when cpu.cfs_quota_us is used allows attackers to cause a denial of service against non-cpu-bound applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19922.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-17571","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2638"],"bugzilla":"1785616","bugzilla_description":"CVE-2019-17571 log4j: deserialization of untrusted data in SocketServer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-19232","severity":"moderate","public_date":"2019-12-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1804"],"bugzilla":"1786704","bugzilla_description":"CVE-2019-19232 sudo: attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["redhat-coreos-43.82.202007300301.0","sudo-0:1.8.29-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19232.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19708","severity":"moderate","public_date":"2019-12-11T00:00:00Z","advisories":[],"bugzilla":"1809045","bugzilla_description":"CVE-2019-19708 mediawiki: pasted content containing an element with a specific attribute allows for XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19708.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-18801","severity":"critical","public_date":"2019-12-10T18:00:00Z","advisories":["RHSA-2019:4222"],"bugzilla":"1773444","bugzilla_description":"CVE-2019-18801 envoy: an untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":["kiali-0:v1.0.8.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18801.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-18802","severity":"important","public_date":"2019-12-10T18:00:00Z","advisories":["RHSA-2019:4222"],"bugzilla":"1773447","bugzilla_description":"CVE-2019-18802 envoy: malformed request header may cause bypass of route matchers resulting in escalation of privileges or information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kiali-0:v1.0.8.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-18838","severity":"important","public_date":"2019-12-10T18:00:00Z","advisories":["RHSA-2019:4222"],"bugzilla":"1773449","bugzilla_description":"CVE-2019-18838 envoy: malformed HTTP request without the Host header may cause abnormal termination of the Envoy process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["kiali-0:v1.0.8.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13734","severity":"important","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2019:4238","RHSA-2020:2014","RHSA-2020:0273","RHSA-2020:0229","RHBA-2020:0460","RHSA-2020:0227"],"bugzilla":"1781980","bugzilla_description":"CVE-2019-13734 sqlite: fts3: improve shadow table corruption detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sqlite-0:3.26.0-4.el8_0","chromium-browser-0:79.0.3945.79-1.el6_10","sqlite-0:3.26.0-4.el8_1","redhat-coreos-42.81.20200210.0","sqlite-0:3.7.17-8.el7_7.1","sqlite-0:3.7.17-8.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13734.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10720","severity":"moderate","public_date":"2019-12-09T14:23:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:2854","RHSA-2019:3309"],"bugzilla":"1781204","bugzilla_description":"CVE-2020-10720 kernel: use-after-free read in napi_gro_frags() in the Linux kernel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-19532","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1781821","bugzilla_description":"CVE-2019-19532 kernel: malicious USB devices can lead to multiple out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19532.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-14837","severity":"important","public_date":"2019-12-02T00:00:00Z","advisories":["RHSA-2019:4042","RHSA-2019:4045","RHSA-2019:4040","RHSA-2019:4041"],"bugzilla":"1730227","bugzilla_description":"CVE-2019-14837 keycloak: keycloak uses hardcoded open dummy domain for new accounts enabling information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-547","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14837.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2019-19768","severity":"important","public_date":"2019-11-29T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:2214","RHSA-2020:2522","RHSA-2020:2203","RHSA-2020:2277","RHSA-2020:2289","RHSA-2020:2242","RHSA-2020:2199","RHSA-2020:2285","RHSA-2020:2519","RHSA-2020:1966","RHSA-2020:1769","RHSA-2020:1567","RHBA-2020:3180","RHSA-2020:2085","RHSA-2020:2082","RHSA-2020:2291"],"bugzilla":"1786164","bugzilla_description":"CVE-2019-19768 kernel: use-after-free in __blk_add_trace in kernel/trace/blktrace.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-514.76.1.el7","kernel-rt-1:3.10.0-693.67.1.rt56.665.el6rt","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.18.1.el8_0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:3.10.0-327.88.1.el7","kernel-rt-0:3.10.0-1127.8.2.rt56.1103.el7","kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-193.el8","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1127.8.2.el7","kernel-0:3.10.0-693.67.1.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19768.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-18660","severity":"moderate","public_date":"2019-11-28T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:1372","RHSA-2020:0174","RHBA-2020:1450","RHSA-2020:2429","RHSA-2020:2933","RHSA-2020:1016","RHSA-2020:1984"],"bugzilla":"1777825","bugzilla_description":"CVE-2019-18660 kernel: powerpc: incomplete Spectre-RSB mitigation leads to information exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","kernel-0:2.6.32-754.31.1.el6","kernel-0:3.10.0-957.56.1.el7","redhat-coreos-42.81.20200407.0","kernel-0:3.10.0-1127.el7","kernel-alt-0:4.14.0-115.17.1.el7a","kernel-0:3.10.0-1062.21.1.el7","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18660.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2020-1728","severity":"low","public_date":"2019-11-27T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:4213","RHSA-2020:3496","RHSA-2020:3497","RHSA-2020:3495","RHSA-2020:4252","RHSA-2020:3539"],"bugzilla":"1800585","bugzilla_description":"CVE-2020-1728 keycloak: security headers missing on REST endpoints","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el6sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el7sso","rh-sso7-keycloak-0:9.0.5-1.redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1728.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-10195","severity":"moderate","public_date":"2019-11-26T00:00:00Z","advisories":["RHBA-2019:4268","RHSA-2020:0378","RHSA-2020:1269"],"bugzilla":"1726223","bugzilla_description":"CVE-2019-10195 ipa: Batch API logging user passwords to /var/log/httpd/error_log","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532->CWE-200","affected_packages":["idm:DL1-8010020191127093529.6573b795","ipa-0:4.6.5-11.el7_7.4","idm:DL1-8000020200217171713.2874843d"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2020-10690","severity":"low","public_date":"2019-11-25T12:53:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1817141","bugzilla_description":"CVE-2020-10690 kernel: use-after-free in cdev_put() when a PTP device is removed while it's chardev is open","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10690.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-14895","severity":"important","public_date":"2019-11-25T08:29:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0661","RHSA-2020:0374","RHSA-2020:1493","RHSA-2020:0592","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:0653","RHSA-2020:0543","RHSA-2020:0664","RHSA-2020:0831","RHSA-2020:0609"],"bugzilla":"1774870","bugzilla_description":"CVE-2019-14895 kernel: heap-based buffer overflow in mwifiex_process_country_ie() function in drivers/net/wireless/marvell/mwifiex/sta_ioctl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:3.10.0-693.64.1.el7","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-0:3.10.0-514.73.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-0:3.10.0-957.46.1.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:4.18.0-80.16.1.el8_0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14895.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-14901","severity":"important","public_date":"2019-11-22T00:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0374","RHSA-2020:1493","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:0204"],"bugzilla":"1773519","bugzilla_description":"CVE-2019-14901 kernel: heap overflow in marvell/mwifiex/tdls.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-400|CWE-122)","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14901.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-19074","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774933","bugzilla_description":"CVE-2019-19074 kernel: a memory leak in the ath9k management function in allows local DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19073","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774937","bugzilla_description":"CVE-2019-19073 kernel: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel (DOS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19073.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-19067","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774968","bugzilla_description":"CVE-2019-19067 kernel: Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c allow for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19067.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-19065","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775000","bugzilla_description":"CVE-2019-19065 kernel: A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19065.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19059","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775042","bugzilla_description":"CVE-2019-19059 kernel: Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19059.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19058","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775047","bugzilla_description":"CVE-2019-19058 kernel: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19058.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19057","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775050","bugzilla_description":"CVE-2019-19057 kernel: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19057.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-14898","severity":"moderate","public_date":"2019-11-20T00:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0374","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1774671","bugzilla_description":"CVE-2019-14898 kernel: incomplete fix  for race condition between mmget_not_zero()/get_task_mm() and core dumping in CVE-2019-11599","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-667","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14898.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-19126","severity":"low","public_date":"2019-11-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3861","RHSA-2020:1828"],"bugzilla":"1774681","bugzilla_description":"CVE-2019-19126 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glibc-0:2.17-317.el7","glibc-0:2.28-101.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-19045","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774983","bugzilla_description":"CVE-2019-19045 kernel: dos in mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19045.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.5"},{"CVE":"CVE-2019-19047","severity":"low","public_date":"2019-11-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774991","bugzilla_description":"CVE-2019-19047 kernel: dos in mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19047.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19338","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHSA-2020:1465","RHSA-2020:0839","RHSA-2020:0834","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1781514","bugzilla_description":"CVE-2019-19338 Kernel: KVM: export MSR_IA32_TSX_CTRL to guest - incomplete fix for TAA (CVE-2019-11135)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-203","affected_packages":["kernel-0:3.10.0-957.48.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-1062.18.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19338.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-12207","severity":"important","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3941","RHSA-2019:3843","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0026","RHSA-2020:0028","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3916","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1646768","bugzilla_description":"CVE-2018-12207 hw: Machine Check Error on Page Size Change (IFU)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-0154","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3840","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837"],"bugzilla":"1724393","bugzilla_description":"CVE-2019-0154 hw: Intel GPU Denial Of Service while accessing MMIO in lower power state","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0154.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-0155","severity":"important","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3887","RHSA-2019:3877","RHSA-2019:3870","RHSA-2019:3871","RHSA-2019:3872","RHSA-2019:3883","RHSA-2019:3873","RHBA-2019:3919","RHSA-2020:0204","RHSA-2019:3908","RHSA-2019:3878","RHSA-2019:3889"],"bugzilla":"1724398","bugzilla_description":"CVE-2019-0155 hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-1:3.10.0-693.60.3.rt56.655.el6rt","kernel-0:3.10.0-693.60.3.el7","kernel-0:2.6.32-754.24.3.el6","kernel-0:3.10.0-862.43.3.el7","kernel-0:3.10.0-514.70.3.el7","kernel-0:3.10.0-327.82.2.el7","kernel-rt-0:3.10.0-1062.4.3.rt56.1029.el7","kernel-0:3.10.0-1062.4.3.el7","kernel-0:4.18.0-147.0.3.el8_1","redhat-coreos-42.81.20191119.1","kernel-0:3.10.0-957.38.3.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.3.rt24.95.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0155.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-14818","severity":"moderate","public_date":"2019-11-12T15:00:00Z","advisories":["RHSA-2020:0166","RHSA-2020:0165","RHSA-2020:0168","RHSA-2020:0172","RHBA-2020:0062","RHSA-2020:0171","RHSA-2020:1735","RHSA-2020:1226"],"bugzilla":"1737327","bugzilla_description":"CVE-2019-14818 dpdk: possible memory leak leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openvswitch-0:2.9.0-124.el7fdp","dpdk-0:18.11.5-1.el7_8","openvswitch2.12-0:2.12.0-12.el7fdp","dpdk-0:19.11-4.el8","openvswitch2.12-0:2.12.0-12.el8fdp","openvswitch2.11-0:2.11.0-35.el7fdp","redhat-coreos-43.81.202001142154.0","openvswitch2.11-0:2.11.0-35.el8fdp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19807","severity":"important","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1786078","bugzilla_description":"CVE-2019-19807 kernel: use-after-free in sound/core/timer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","kernel-rt-0:3.10.0-1160.rt56.1131.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19807.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19534","severity":"moderate","public_date":"2019-11-04T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1783540","bugzilla_description":"CVE-2019-19534 kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772->CWE-200","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19534.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-10218","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:0943","RHSA-2020:1084","RHSA-2020:1878"],"bugzilla":"1763137","bugzilla_description":"CVE-2019-10218 samba: smb client vulnerable to filenames containing path separators","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.11.6-104.el7rhgs","samba-0:4.10.4-10.el7","samba-0:4.11.2-13.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10218.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-14833","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":[],"bugzilla":"1764126","bugzilla_description":"CVE-2019-14833 samba: AD DC check password script does not receive full password when non-ASCII characters are used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14833.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-14847","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":[],"bugzilla":"1764142","bugzilla_description":"CVE-2019-14847 samba: samba AD DC LDAP denial of service via dirsync","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-8726","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876612","bugzilla_description":"CVE-2019-8726 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8726.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8735","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876614","bugzilla_description":"CVE-2019-8735 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8735.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8768","severity":"low","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876616","bugzilla_description":"CVE-2019-8768 webkitgtk: Browsing history could not be deleted","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8768.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-14834","severity":"low","public_date":"2019-10-23T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1715","RHSA-2020:3878"],"bugzilla":"1764425","bugzilla_description":"CVE-2019-14834 dnsmasq: memory leak in the create_helper() function in /src/helper.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-43.82.202007300301.0","dnsmasq-0:2.79-11.el8","dnsmasq-0:2.76-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14834.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-18282","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1796360","bugzilla_description":"CVE-2019-18282 kernel: The flow_dissector feature allows device tracking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18282.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-17666","severity":"important","public_date":"2019-10-18T00:00:00Z","advisories":["RHSA-2020:0661","RHSA-2020:1353","RHSA-2020:0740","RHSA-2020:1465","RHSA-2020:1473","RHSA-2020:0834","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:1347","RHSA-2020:0543","RHSA-2020:1524","RHSA-2020:0831","RHSA-2020:0839"],"bugzilla":"1763690","bugzilla_description":"CVE-2019-17666 kernel: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel lacks a certain upper-bound check, leading to a buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-0:3.10.0-957.48.1.el7","kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.65.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:3.10.0-514.74.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-rt-1:3.10.0-693.65.1.rt56.663.el6rt","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:2.6.32-754.29.1.el6","kernel-0:3.10.0-1062.18.1.el7","kernel-0:4.18.0-80.16.1.el8_0","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17666.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2019-17596","severity":"moderate","public_date":"2019-10-17T00:00:00Z","advisories":["RHSA-2020:0101","RHSA-2020:0329"],"bugzilla":"1763310","bugzilla_description":"CVE-2019-17596 golang: invalid public key causes panic in dsa.Verify","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14287","severity":"important","public_date":"2019-10-14T15:00:00Z","advisories":["RHSA-2019:3754","RHSA-2019:3204","RHSA-2019:3941","RHSA-2019:3755","RHSA-2019:3205","RHSA-2020:0388","RHSA-2019:3694","RHSA-2019:3278","RHSA-2019:3895","RHSA-2019:3197","RHSA-2019:4191","RHSA-2019:3916","RHSA-2019:3219","RHSA-2019:3209","RHBA-2019:3248","RHBA-2019:3303"],"bugzilla":"1760531","bugzilla_description":"CVE-2019-14287 sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":["redhat-virtualization-host-0:4.2-20191022.0.el7_6","sudo-0:1.7.2p1-31.el5_11.1","sudo-0:1.8.23-3.el7_6.1","sudo-0:1.8.25p1-4.el8_0.2","sudo-0:1.8.6p3-29.el6_10.2","sudo-0:1.8.6p7-17.el7_2.2","sudo-0:1.8.19p2-12.el7_4.1","sudo-0:1.8.6p3-12.el6_5.2","redhat-coreos-42.81.20191107.0","sudo-0:1.8.19p2-14.el7_5.1","sudo-0:1.8.6p7-23.el7_3.2","sudo-0:1.8.6p3-15.el6_6.2","sudo-0:1.8.25p1-8.el8_1","sudo-0:1.8.23-4.el7_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14287.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-14820","severity":"low","public_date":"2019-10-14T00:00:00Z","advisories":["RHSA-2019:3049","RHSA-2019:3045","RHSA-2020:2067","RHSA-2019:3046","RHSA-2019:3048","RHSA-2019:3044","RHSA-2019:3050"],"bugzilla":"1649870","bugzilla_description":"CVE-2019-14820 keycloak: adapter endpoints are exposed via arbitrary URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["keycloak-adapter-sso7_3-eap6-0:4.8.13-1.Final_redhat_00001.1.ep6.el6","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","eap7-keycloak-adapter-sso7_3-0:4.8.13-1.Final_redhat_00001.1.el8eap","keycloak-adapter-sso7_3-eap6-0:4.8.13-1.Final_redhat_00001.1.ep6.el7","eap7-keycloak-adapter-sso7_3-0:4.8.13-1.Final_redhat_00001.1.el6eap","eap7-keycloak-adapter-sso7_3-0:4.8.13-1.Final_redhat_00001.1.el7eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14820.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-14832","severity":"moderate","public_date":"2019-10-14T00:00:00Z","advisories":["RHSA-2020:2366","RHSA-2019:3045","RHSA-2020:2067","RHSA-2019:3046","RHSA-2019:3044","RHSA-2019:3050"],"bugzilla":"1749487","bugzilla_description":"CVE-2019-14832 keycloak: cross-realm user access auth bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14832.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-14838","severity":"moderate","public_date":"2019-10-11T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2020:2067","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4045","RHSA-2019:3082","RHSA-2019:3083","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0728"],"bugzilla":"1751227","bugzilla_description":"CVE-2019-14838 wildfly-core: Incorrect privileges for 'Monitor', 'Auditor' and 'Deployer' user by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","eap7-wildfly-0:7.2.4-2.SP1_redhat_00001.1.el8eap","eap7-wildfly-0:7.2.4-2.SP1_redhat_00001.1.el7eap","eap7-wildfly-0:7.2.4-2.SP1_redhat_00001.1.el6eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2019-14854","severity":"moderate","public_date":"2019-10-07T00:00:00Z","advisories":["RHSA-2019:4091","RHSA-2019:4081","RHSA-2019:4075","RHSA-2019:4098"],"bugzilla":"1758953","bugzilla_description":"CVE-2019-14854 library-go: Secret data written to static pod logs when operator set at Debug level or higher","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["openshift4/ose-cluster-kube-apiserver-operator:v4.2.9-201911261133","openshift4/ose-cluster-kube-scheduler-operator:v4.1.27-201912030019","openshift4/ose-cluster-kube-controller-manager-operator:v4.2.10-201912022352","openshift4/ose-cluster-kube-apiserver-operator:v4.1.26-201911260202"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14854.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-19055","severity":"moderate","public_date":"2019-10-05T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775074","bugzilla_description":"CVE-2019-19055 kernel: memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c allows DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19055.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-16994","severity":"low","public_date":"2019-09-30T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1759681","bugzilla_description":"CVE-2019-16994 kernel: Memory leak in sit_init_net() in net/ipv6/sit.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16994.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-14844","severity":"important","public_date":"2019-09-26T00:00:00Z","advisories":[],"bugzilla":"1753589","bugzilla_description":"CVE-2019-14844 krb5: reversed strlcpy() allows client to crash the KDC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14844.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16738","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":[],"bugzilla":"1755762","bugzilla_description":"CVE-2019-16738 mediawiki: suppressed username information disclosure via Special:Redirect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-14553","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":[],"bugzilla":"1758518","bugzilla_description":"CVE-2019-14553 edk2: invalid server certificate accepted in HTTPS-over-IPv6 boot","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14553.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14562","severity":"low","public_date":"2019-09-24T00:00:00Z","advisories":[],"bugzilla":"1869245","bugzilla_description":"CVE-2019-14562 edk2: DxeImageVerificationHandler integer overflow leads to endless loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14562.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2019-14850","severity":"low","public_date":"2019-09-20T00:00:00Z","advisories":["RHSA-2020:1167"],"bugzilla":"1757258","bugzilla_description":"CVE-2019-14850 nbdkit: denial of service due to premature opening of back-end connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406","affected_packages":["nbdkit-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14850.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-17053","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1758242","bugzilla_description":"CVE-2019-17053 kernel: unprivileged users able to create RAW sockets in AF_IEEE802154 network protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-17055","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0790","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1758248","bugzilla_description":"CVE-2019-17055 kernel: unprivileged users able to create RAW sockets in AF_ISDN network protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:2.6.32-754.28.1.el6","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17055.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-14821","severity":"important","public_date":"2019-09-17T17:00:00Z","advisories":["RHSA-2020:2851","RHSA-2019:4256","RHSA-2019:4154","RHSA-2020:0027","RHSA-2019:3978","RHSA-2019:3979","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1746708","bugzilla_description":"CVE-2019-14821 Kernel: KVM: OOB memory access via mmio ring buffer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.7.1.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:2.6.32-754.25.1.el6","kernel-rt-0:3.10.0-1062.7.1.rt56.1030.el7","kernel-alt-0:4.14.0-115.16.1.el7a","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14821.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-14826","severity":"low","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1746944","bugzilla_description":"CVE-2019-14826 ipa: Session not terminated after logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14826.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"1.8"},{"CVE":"CVE-2019-14835","severity":"important","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2019:2854","RHSA-2019:2865","RHSA-2019:2864","RHSA-2019:2863","RHSA-2019:2830","RHSA-2019:2862","RHBA-2019:3151","RHSA-2019:2869","RHSA-2019:2924","RHSA-2019:2901","RHSA-2019:2900","RHSA-2019:2867","RHSA-2019:2889","RHSA-2019:2899","RHSA-2019:2866","RHSA-2019:2829","RHSA-2019:2828","RHSA-2019:2827"],"bugzilla":"1750727","bugzilla_description":"CVE-2019-14835 kernel: vhost-net: guest to host kernel escape during migration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["redhat-coreos-42.80.20191022.0","redhat-virtualization-host-0:4.2-20190919.0.el7_6","kernel-0:2.6.32-754.23.1.el6","kernel-rt-0:3.10.0-1062.1.2.rt56.1025.el7","kernel-0:3.10.0-1062.1.2.el7","kernel-0:3.10.0-862.41.2.el7","kernel-0:3.10.0-693.59.1.el7","kernel-0:3.10.0-514.69.1.el7","kernel-0:3.10.0-327.82.1.el7","kernel-0:4.18.0-80.11.2.el8_0","kernel-0:2.6.32-504.81.2.el6","kernel-0:2.6.32-431.96.2.el6","kernel-0:3.10.0-957.35.2.el7","kernel-alt-0:4.14.0-115.13.1.el7a","kernel-rt-0:4.18.0-80.11.2.rt9.157.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14835.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-14843","severity":"important","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2974","RHSA-2019:2973","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4045","RHSA-2019:4040","RHSA-2019:4041"],"bugzilla":"1752980","bugzilla_description":"CVE-2019-14843 wildfly-security-manager: security manager authorization bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-592","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","eap7-wildfly-elytron-0:1.6.4-3.Final_redhat_00002.1.el7eap","eap7-wildfly-elytron-0:1.6.4-3.Final_redhat_00002.1.el8eap","eap7-wildfly-elytron-0:1.6.4-3.Final_redhat_00002.1.el6eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10959","severity":"moderate","public_date":"2019-09-14T00:00:00Z","advisories":[],"bugzilla":"1826079","bugzilla_description":"CVE-2020-10959 mediawiki: user content can redirect the logout button to different URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10959.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-14822","severity":"moderate","public_date":"2019-09-13T07:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1880","RHSA-2020:3978"],"bugzilla":"1717958","bugzilla_description":"CVE-2019-14822 ibus: missing authorization allows local attacker to access the input bus of another user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["ibus-0:1.5.19-11.el8","ibus-0:1.5.17-11.el7","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14822.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-15031","severity":"moderate","public_date":"2019-09-13T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2020:1372","RHBA-2020:1450"],"bugzilla":"1760063","bugzilla_description":"CVE-2019-15031 kernel: powerpc: local user can read vector registers of other users' processes via an interrupt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","redhat-coreos-42.81.20200407.0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15031.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-5481","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792"],"bugzilla":"1749402","bugzilla_description":"CVE-2019-5481 curl: double free due to subsequent call of realloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5481.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2019-5482","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792","RHSA-2020:3916"],"bugzilla":"1749652","bugzilla_description":"CVE-2019-5482 curl: heap buffer overflow in function tftp_receive_packet()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-59.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5482.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-1547","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752090","bugzilla_description":"CVE-2019-1547 openssl: side-channel weak encryption vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-602","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-1549","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752095","bugzilla_description":"CVE-2019-1549 openssl: information disclosure in fork()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-1563","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752100","bugzilla_description":"CVE-2019-1563 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-19077","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775724","bugzilla_description":"CVE-2019-19077 kernel: memory leak in bnxt_re_create_srq function in drivers/infiniband/hw/bnxt_re/ib_verbs.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19077.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-16234","severity":"low","public_date":"2019-09-09T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1760441","bugzilla_description":"CVE-2019-16234 kernel: null pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16234.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-15030","severity":"moderate","public_date":"2019-09-06T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2020:1372","RHBA-2020:1450"],"bugzilla":"1759313","bugzilla_description":"CVE-2019-15030 kernel: powerpc: local user can read vector registers of other users' processes via a Facility Unavailable exception","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","redhat-coreos-42.81.20200407.0","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15030.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-15916","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:0740","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1750813","bugzilla_description":"CVE-2019-15916 kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15916.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15921","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1760958","bugzilla_description":"CVE-2019-15921 kernel: memory leak in genl_register_family() in net/netlink/genetlink.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15921.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-15924","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1763869","bugzilla_description":"CVE-2019-15924 kernel: null pointer dereference in drivers/net/ethernet/intel/fm10k/fm10k_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15924.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15718","severity":"moderate","public_date":"2019-09-03T15:00:00Z","advisories":["RHSA-2019:3941","RHSA-2019:3592","RHBA-2019:3303"],"bugzilla":"1746057","bugzilla_description":"CVE-2019-15718 systemd: systemd-resolved allows unprivileged users to configure DNS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["redhat-coreos-42.81.20191107.0","systemd-0:239-18.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15718.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-10197","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2020:1084","RHSA-2020:1878","RHSA-2019:4023","RHSA-2019:3253"],"bugzilla":"1746225","bugzilla_description":"CVE-2019-10197 samba: Combination of parameters and permissions can allow user to escape from the share path definition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.9.8-110.el6rhs","samba-0:4.10.4-10.el7","samba-0:4.11.2-13.el8","samba-0:4.9.8-109.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-8666","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876630","bugzilla_description":"CVE-2019-8666 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8666.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8671","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876632","bugzilla_description":"CVE-2019-8671 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8671.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8672","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876634","bugzilla_description":"CVE-2019-8672 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8673","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876643","bugzilla_description":"CVE-2019-8673 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8676","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876644","bugzilla_description":"CVE-2019-8676 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8676.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8677","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876645","bugzilla_description":"CVE-2019-8677 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8677.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8679","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876647","bugzilla_description":"CVE-2019-8679 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8679.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8681","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876650","bugzilla_description":"CVE-2019-8681 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8681.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8686","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876653","bugzilla_description":"CVE-2019-8686 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8686.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8687","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876655","bugzilla_description":"CVE-2019-8687 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8687.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8689","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876657","bugzilla_description":"CVE-2019-8689 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8689.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8690","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876664","bugzilla_description":"CVE-2019-8690 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8690.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-14814","severity":"moderate","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1744130","bugzilla_description":"CVE-2019-14814 kernel: heap overflow in mwifiex_set_uap_rates() function of Marvell Wifi Driver leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-14815","severity":"moderate","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHSA-2020:1070","RHBA-2020:0460","RHSA-2020:1016"],"bugzilla":"1744137","bugzilla_description":"CVE-2019-14815 kernel: heap-overflow in mwifiex_set_wmm_params() function of Marvell WiFi driver leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-1127.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-14816","severity":"important","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0661","RHSA-2020:1266","RHSA-2020:0374","RHSA-2020:1353","RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:1347","RHSA-2020:0653","RHSA-2020:0664","RHSA-2020:0204"],"bugzilla":"1744149","bugzilla_description":"CVE-2019-14816 kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.65.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-514.73.1.el7","kernel-rt-1:3.10.0-693.65.1.rt56.663.el6rt","kernel-0:3.10.0-957.46.1.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-862.51.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14816.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-15666","severity":"moderate","public_date":"2019-08-27T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1747334","bugzilla_description":"CVE-2019-15666 kernel: out-of-bounds array access in __xfrm_policy_unlink","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15666.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-5094","severity":"moderate","public_date":"2019-08-27T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4011","RHSA-2020:1913"],"bugzilla":"1768555","bugzilla_description":"CVE-2019-5094 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["redhat-coreos-43.82.202007300301.0","e2fsprogs-0:1.42.9-19.el7","e2fsprogs-0:1.45.4-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5094.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-14867","severity":"important","public_date":"2019-08-26T00:00:00Z","advisories":["RHBA-2019:4268","RHSA-2020:0378","RHSA-2020:1269"],"bugzilla":"1766920","bugzilla_description":"CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-94|CWE-400)","affected_packages":["idm:DL1-8010020191127093529.6573b795","ipa-0:4.6.5-11.el7_7.4","idm:DL1-8000020200217171713.2874843d"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14867.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-14819","severity":"important","public_date":"2019-08-24T00:00:00Z","advisories":["RHSA-2019:2818"],"bugzilla":"1746238","bugzilla_description":"CVE-2019-14819 openshift-ansible: dockergc service account incorrectly associated with namespace during upgrade","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266->CWE-270","affected_packages":["openshift-ansible-0:3.11.146-1.git.0.fcedb45.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15090","severity":"low","public_date":"2019-08-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1743526","bugzilla_description":"CVE-2019-15090 kernel: An out-of-bounds read in drivers/scsi/qedi/qedi_dbg.c leading to crash or information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15090.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-15099","severity":"low","public_date":"2019-08-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1493","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1743560","bugzilla_description":"CVE-2019-15099 kernel: a NULL pointer dereference in drivers/net/wireless/ath/ath10k/usb.c leads to a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15099.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-15026","severity":"moderate","public_date":"2019-08-20T00:00:00Z","advisories":[],"bugzilla":"1753862","bugzilla_description":"CVE-2019-15026 memcached: stack-based buffer over-read in conn_to_str in memcached.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15026.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-20908","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3218","RHSA-2020:3219","RHSA-2020:3228"],"bugzilla":"1852942","bugzilla_description":"CVE-2019-20908 kernel: lockdown: bypass through ACPI write via efivar_ssdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-193.14.3.rt13.67.el8_2","kernel-0:4.18.0-80.27.2.el8_0","kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.14.3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20908.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-15719","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":["RHBA-2019:3674","RHBA-2019:3303"],"bugzilla":"1853350","bugzilla_description":"CVE-2020-15719 openldap: Certificate validation incorrectly matches name against CN-ID","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":["openldap-0:2.4.46-10.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15719.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9513","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:3041","RHSA-2019:2692","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1735741","bugzilla_description":"CVE-2019-9513 HTTP/2: flood using PRIORITY frames results in excessive resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","rh-nginx112-nginx-1:1.12.1-3.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","kiali-0:v1.0.6.redhat1-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9515","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:2861","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3892","RHSA-2019:2766","RHSA-2020:2067","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4352","RHSA-2019:4045","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2020:3196","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2925"],"bugzilla":"1735745","bugzilla_description":"CVE-2019-9515 HTTP/2: flood using SETTINGS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","nodejs:10-8000020190911085529.f8e95b4e","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","skydive-0:0.20.5-2.el7ost","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9511","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3932","RHSA-2019:2799","RHSA-2020:2067","RHSA-2019:2775","RHSA-2019:3041","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4021","RHSA-2019:2692","RHSA-2020:1445","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2020:3192","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741860","bugzilla_description":"CVE-2019-9511 HTTP/2: large amount of data requests leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","kiali-0:v1.0.6.redhat1-1.el7","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9506","severity":"important","public_date":"2019-08-10T09:00:00Z","advisories":["RHSA-2019:3217","RHSA-2019:3089","RHSA-2020:1460","RHSA-2019:2975","RHSA-2019:3076","RHSA-2019:3055","RHSA-2019:3187","RHSA-2019:3220","RHSA-2019:3231","RHSA-2019:3165","RHSA-2020:0204","RHSA-2019:3218","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1727857","bugzilla_description":"CVE-2019-9506 hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["kernel-alt-0:4.14.0-115.14.1.el7a","kernel-0:3.10.0-957.38.1.el7","kernel-0:3.10.0-862.43.1.el7","kernel-0:3.10.0-514.70.1.el7","kernel-0:3.10.0-693.60.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","kernel-rt-1:3.10.0-693.60.1.rt56.654.el6rt","redhat-coreos-42.81.20191107.0","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:3.10.0-327.86.1.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.0"},{"CVE":"CVE-2019-10744","severity":"important","public_date":"2019-08-09T00:00:00Z","advisories":["RHSA-2020:2819","RHSA-2019:3024","RHSA-2020:2362"],"bugzilla":"1739497","bugzilla_description":"CVE-2019-10744 nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ovirt-web-ui-0:1.6.0-1.el7ev","servicemesh-grafana-0:6.2.2-36.el8","jaeger-0:v1.13.1.redhat7-1.el7","distributed-tracing/jaeger-query-rhel7:1.17.2-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10744.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2019-1125","severity":"moderate","public_date":"2019-08-06T17:00:00Z","advisories":["RHSA-2019:2476","RHSA-2019:2696","RHSA-2019:2695","RHSA-2019:2473","RHSA-2019:2975","RHSA-2019:2600","RHSA-2019:2411","RHSA-2019:2730","RHSA-2019:3220","RHSA-2019:3011","RHBA-2019:3151","RHSA-2019:2900","RHSA-2019:2405","RHSA-2019:2899","RHSA-2019:2609","RHBA-2019:3248"],"bugzilla":"1724389","bugzilla_description":"CVE-2019-1125 kernel: hw: Spectre SWAPGS gadget vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":["kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0","redhat-virtualization-host-0:4.2-20191022.0.el7_6","kernel-0:3.10.0-957.38.1.el7","kernel-0:3.10.0-862.43.1.el7","redhat-coreos-42.80.20191022.0","kernel-0:2.6.32-431.96.1.el6","kernel-0:2.6.32-754.18.2.el6","kernel-0:4.18.0-80.7.2.el8_0","kernel-0:2.6.32-504.80.2.el6","kernel-0:3.10.0-514.69.1.el7","kernel-0:3.10.0-327.82.1.el7","kernel-rt-0:3.10.0-1062.1.1.rt56.1024.el7","kernel-0:3.10.0-693.58.1.el7","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:3.10.0-1062.1.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-19527","severity":"moderate","public_date":"2019-08-06T00:00:00Z","advisories":["RHSA-2020:4236","RHSA-2020:1378","RHSA-2020:3221","RHSA-2020:1372","RHSA-2020:3220","RHBA-2020:1450"],"bugzilla":"1783498","bugzilla_description":"CVE-2019-19527 kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-147.8.1.rt24.101.el8_1","kernel-0:3.10.0-1062.36.1.el7","kernel-0:4.18.0-147.8.1.el8_1","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","redhat-coreos-42.81.20200407.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19527.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-15221","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1070","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1749974","bugzilla_description":"CVE-2019-15221 kernel: Null pointer dereference in the sound/usb/line6/pcm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","kernel-rt-0:3.10.0-1127.rt56.1093.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15221.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15223","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1749976","bugzilla_description":"CVE-2019-15223 kernel: Null pointer dereference in the sound/usb/line6/driver.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15223.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-10181","severity":"moderate","public_date":"2019-07-31T13:42:00Z","advisories":["RHSA-2019:2003","RHSA-2019:2004"],"bugzilla":"1725928","bugzilla_description":"CVE-2019-10181 icedtea-web: unsigned code injection in a signed JAR file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["icedtea-web-0:1.7.1-2.el7_6","icedtea-web-0:1.7.1-17.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-10185","severity":"important","public_date":"2019-07-31T13:41:00Z","advisories":["RHSA-2019:2003","RHSA-2019:2004"],"bugzilla":"1724989","bugzilla_description":"CVE-2019-10185 icedtea-web: directory traversal in the nested jar auto-extraction leading to arbitrary file overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["icedtea-web-0:1.7.1-2.el7_6","icedtea-web-0:1.7.1-17.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L","cvss3_score":"8.2"},{"CVE":"CVE-2019-10182","severity":"important","public_date":"2019-07-31T13:40:00Z","advisories":["RHSA-2019:2003","RHSA-2019:2004"],"bugzilla":"1724958","bugzilla_description":"CVE-2019-10182 icedtea-web: path traversal while processing <jar/> elements of JNLP files results in arbitrary file overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22->CWE-94","affected_packages":["icedtea-web-0:1.7.1-2.el7_6","icedtea-web-0:1.7.1-17.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L","cvss3_score":"8.2"},{"CVE":"CVE-2019-10207","severity":"moderate","public_date":"2019-07-29T13:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1733874","bugzilla_description":"CVE-2019-10207 kernel: null-pointer dereference in hci_uart_set_flow_control","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-10184","severity":"low","public_date":"2019-07-24T00:00:00Z","advisories":["RHSA-2019:3045","RHSA-2020:0727","RHSA-2019:3046","RHSA-2019:2935","RHSA-2019:2998","RHSA-2019:3044","RHSA-2019:2938","RHSA-2020:0983","RHSA-2019:2937","RHSA-2019:3050","RHSA-2019:2936"],"bugzilla":"1713068","bugzilla_description":"CVE-2019-10184 undertow: Information leak in requests for directories without trailing slashes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10184.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-1010241","severity":"moderate","public_date":"2019-07-23T00:00:00Z","advisories":[],"bugzilla":"1732346","bugzilla_description":"CVE-2019-1010241 jenkins-plugin-credentials-binding: storing passwords in recoverable format leading to authenticated users being able to recover credentials","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010241.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-14379","severity":"important","public_date":"2019-07-23T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:2743","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2020:0727","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1737517","bugzilla_description":"CVE-2019-14379 jackson-databind: default typing mishandling leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","rh-maven35-jackson-databind-0:2.7.6-2.7.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-13648","severity":"moderate","public_date":"2019-07-19T00:00:00Z","advisories":["RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:3019"],"bugzilla":"1735630","bugzilla_description":"CVE-2019-13648 kernel: denial of service in arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c via sigreturn() system call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-1062.30.1.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1127.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13648.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-13272","severity":"important","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2809","RHBA-2019:3151","RHSA-2019:2411","RHSA-2019:2405"],"bugzilla":"1730895","bugzilla_description":"CVE-2019-13272 kernel: broken permission and object lifetime handling for PTRACE_TRACEME","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":["kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.7.2.el8_0","kernel-alt-0:4.14.0-115.12.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13272.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10638","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1729931","bugzilla_description":"CVE-2019-10638 Kernel: net: weak IP ID generation leads to remote device tracking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331->CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-10639","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:2522","RHBA-2020:3180","RHSA-2020:1070","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1729933","bugzilla_description":"CVE-2019-10639 Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-193.el8","kernel-rt-0:3.10.0-1127.rt56.1093.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-1010305","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:1686","RHBA-2020:3180","RHSA-2020:3848"],"bugzilla":"1730568","bugzilla_description":"CVE-2019-1010305 libmspack: buffer overflow in function chmd_read_headers()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["libmspack-0:0.5-0.8.alpha.el7","libmspack-0:0.7-0.3.alpha.el8.4","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010305.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-10213","severity":"moderate","public_date":"2019-07-12T00:00:00Z","advisories":["RHSA-2019:4088","RHSA-2019:2791","RHSA-2019:4082"],"bugzilla":"1734615","bugzilla_description":"CVE-2019-10213 openshift: Secret data written to pod logs when operator set at Debug level or higher","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["openshift4/ose-console-operator:v4.1.16-201909100604","openshift4/ose-cluster-authentication-operator:v4.1.26-201911260202","openshift4/ose-cluster-config-operator:v4.1.26-201911260202","openshift4/ose-cluster-openshift-apiserver-operator:v4.1.27-201912030019","openshift4/ose-cluster-kube-apiserver-operator:v4.1.26-201911260202"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10213.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-12855","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1728206","bugzilla_description":"CVE-2019-12855 python-twisted: XMPP  support in words.protocols.jabber.xmlstream in Twisted does not verify certificates allowing for a MITM connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-13233","severity":"moderate","public_date":"2019-07-04T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1727756","bugzilla_description":"CVE-2019-13233 kernel: use-after-free in arch/x86/lib/insn-eval.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13233.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2019-13164","severity":"low","public_date":"2019-06-28T00:00:00Z","advisories":[],"bugzilla":"1722559","bugzilla_description":"CVE-2019-13164 Qemu: qemu-bridge-helper ACL can be bypassed when names are too long","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-12817","severity":"important","public_date":"2019-06-24T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2703"],"bugzilla":"1720616","bugzilla_description":"CVE-2019-12817 kernel: ppc: unrelated processes being able to read/write to each other's virtual memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->(CWE-125|CWE-787)","affected_packages":["redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12817.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-10166","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720114","bugzilla_description":"CVE-2019-10166 libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10166.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10161","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1578","RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720115","bugzilla_description":"CVE-2019-10161 libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","libvirt-0:0.10.2-64.el6_10.2","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10167","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720117","bugzilla_description":"CVE-2019-10167 libvirt: arbitrary command execution via virConnectGetDomainCapabilities API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-284|CWE-250)","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10168","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720118","bugzilla_description":"CVE-2019-10168 libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-284|CWE-250)","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10168.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-12435","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1711816","bugzilla_description":"CVE-2019-12435 samba: AD DC Denial of Service in DNS management server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-12436","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1711837","bugzilla_description":"CVE-2019-12436 samba: NULL pointer dereference in Samba LDAP server leading to crash and Dos","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10192","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:2630","RHSA-2019:1860","RHSA-2019:2002","RHSA-2019:1819","RHSA-2019:2621","RHSA-2019:2506","RHSA-2019:2508","RHSA-2019:2628"],"bugzilla":"1723918","bugzilla_description":"CVE-2019-10192 redis: Heap buffer overflow in HyperLogLog triggered by malicious client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redis-0:3.2.8-4.el7ost","redis-0:3.0.6-5.el7ost","rh-redis32-redis-0:3.2.13-1.el7","rh-redis32-redis-0:3.2.13-1.el6","redis:5-8000020190711140130.f8e95b4e","rh-redis5-redis-0:5.0.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10192.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-10193","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:2002","RHSA-2019:1819"],"bugzilla":"1727668","bugzilla_description":"CVE-2019-10193 redis: Stack buffer overflow in HyperLogLog triggered by malicious client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["redis:5-8000020190711140130.f8e95b4e","rh-redis5-redis-0:5.0.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-11477","severity":"important","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719123","bugzilla_description":"CVE-2019-11477 Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11478","severity":"moderate","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719128","bugzilla_description":"CVE-2019-11478 Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11478.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11479","severity":"moderate","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719129","bugzilla_description":"CVE-2019-11479 kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11479.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-12749","severity":"important","public_date":"2019-06-11T00:00:00Z","advisories":["RHSA-2019:2870","RHSA-2020:4032","RHSA-2019:2868","RHSA-2019:3707","RHBA-2019:3303","RHSA-2019:1726"],"bugzilla":"1719344","bugzilla_description":"CVE-2019-12749 dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["dbus-1:1.2.24-9.el6_6","dbus-1:1.12.8-9.el8","redhat-coreos-42.81.20191107.0","dbus-1:1.10.24-15.el7","dbus-1:1.2.24-11.el6_10","dbus-1:1.2.24-9.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12749.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-12387","severity":"moderate","public_date":"2019-06-10T00:00:00Z","advisories":["RHSA-2020:1091","RHSA-2019:3172"],"bugzilla":"1719501","bugzilla_description":"CVE-2019-12387 python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python-twisted-web-0:12.1.0-6.el7","python-twisted-0:16.4.1-12.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-12795","severity":"low","public_date":"2019-06-05T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1726505","bugzilla_description":"CVE-2019-12795 gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["gvfs-0:1.36.2-6.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12795.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-12814","severity":"moderate","public_date":"2019-06-04T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2938","RHSA-2019:2937","RHSA-2019:2804","RHSA-2019:2936"],"bugzilla":"1725795","bugzilla_description":"CVE-2019-12814 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-16871","severity":"moderate","public_date":"2019-06-03T02:23:00Z","advisories":["RHSA-2019:2696","RHBA-2020:3180","RHSA-2019:1891","RHSA-2020:0740","RHSA-2019:1873","RHSA-2019:2730","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1655162","bugzilla_description":"CVE-2018-16871 kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-957.27.2.el7","kernel-0:4.18.0-193.el8","kernel-0:3.10.0-693.58.1.el7","redhat-coreos-43.82.202007300301.0","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16871.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10160","severity":"important","public_date":"2019-06-03T00:00:00Z","advisories":["RHSA-2019:1587","RHSA-2019:1700","RHSA-2019:2437"],"bugzilla":"1718388","bugzilla_description":"CVE-2019-10160 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python27-python-0:2.7.16-6.el6","python27-python-0:2.7.16-6.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","python-0:2.7.5-80.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-10126","severity":"important","public_date":"2019-05-31T00:00:00Z","advisories":["RHSA-2020:2289","RHSA-2019:3089","RHSA-2020:0174","RHSA-2019:3076","RHSA-2019:3055","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1716992","bugzilla_description":"CVE-2019-10126 kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10126.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-3846","severity":"important","public_date":"2019-05-30T12:53:00Z","advisories":["RHSA-2020:2289","RHSA-2019:3089","RHBA-2019:3151","RHSA-2020:0174","RHSA-2019:2741","RHSA-2019:2703","RHSA-2019:3076","RHSA-2019:3055"],"bugzilla":"1713059","bugzilla_description":"CVE-2019-3846 kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3846.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-12447","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728562","bugzilla_description":"CVE-2019-12447 gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-12448","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728564","bugzilla_description":"CVE-2019-12448 gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-364","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12448.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-12449","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728567","bugzilla_description":"CVE-2019-12449 gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12449.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-12382","severity":"moderate","public_date":"2019-05-24T00:00:00Z","advisories":["RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303"],"bugzilla":"1715554","bugzilla_description":"CVE-2019-12382 kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253->CWE-476","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12382.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-12450","severity":"moderate","public_date":"2019-05-23T00:00:00Z","advisories":["RHSA-2019:3530","RHSA-2020:3978","RHBA-2019:3303"],"bugzilla":"1719141","bugzilla_description":"CVE-2019-12450 glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["glib2-0:2.56.1-7.el7","redhat-coreos-42.81.20191107.0","glib2-0:2.56.4-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.6"},{"CVE":"CVE-2019-5436","severity":"low","public_date":"2019-05-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1020","RHBA-2020:1539","RHSA-2020:1792","RHSA-2019:1543","RHSA-2020:2505","RHBA-2020:1540"],"bugzilla":"1710620","bugzilla_description":"CVE-2019-5436 curl: TFTP receive heap buffer overflow in tftp_receive_packet() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","curl-0:7.29.0-54.el7_7.3","redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-57.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5436.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-10320","severity":"moderate","public_date":"2019-05-21T00:00:00Z","advisories":["RHSA-2019:1636","RHBA-2019:1605"],"bugzilla":"1714054","bugzilla_description":"CVE-2019-10320 jenkins-credentials-plugin: Certificate file read vulnerability in Credentials Plugin (SECURITY-1322)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["jenkins-2-plugins-0:3.11.1559667994-1.el7","jenkins-2-plugins-0:4.1.1561471763-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-6237","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876880","bugzilla_description":"CVE-2019-6237 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6237.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8571","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876881","bugzilla_description":"CVE-2019-8571 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8583","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876882","bugzilla_description":"CVE-2019-8583 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8584","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876883","bugzilla_description":"CVE-2019-8584 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8584.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8586","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876884","bugzilla_description":"CVE-2019-8586 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8587","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876887","bugzilla_description":"CVE-2019-8587 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8587.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8594","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876891","bugzilla_description":"CVE-2019-8594 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8594.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8595","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876892","bugzilla_description":"CVE-2019-8595 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8595.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8596","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876893","bugzilla_description":"CVE-2019-8596 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8597","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876894","bugzilla_description":"CVE-2019-8597 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8601","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876895","bugzilla_description":"CVE-2019-8601 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8607","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876897","bugzilla_description":"CVE-2019-8607 webkitgtk: Out-of-bounds read leading to memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8607.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-8608","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876898","bugzilla_description":"CVE-2019-8608 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8609","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876899","bugzilla_description":"CVE-2019-8609 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8609.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8610","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876900","bugzilla_description":"CVE-2019-8610 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8610.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8615","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877045","bugzilla_description":"CVE-2019-8615 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8615.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8611","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877046","bugzilla_description":"CVE-2019-8611 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8611.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8619","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877047","bugzilla_description":"CVE-2019-8619 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8622","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877048","bugzilla_description":"CVE-2019-8622 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8622.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8623","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877049","bugzilla_description":"CVE-2019-8623 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8623.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10139","severity":"moderate","public_date":"2019-05-17T00:00:00Z","advisories":["RHSA-2019:2433","RHSA-2019:2437"],"bugzilla":"1709829","bugzilla_description":"CVE-2019-10139 cockpit-ovirt: admin and appliance passwords saved in plain text variable file during HE deployment","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","cockpit-ovirt-0:0.13.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-12126","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646781","bugzilla_description":"CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12130","severity":"important","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646784","bugzilla_description":"CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385->CWE-226","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-12127","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1667782","bugzilla_description":"CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11091","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1705312","bugzilla_description":"CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2018-16860","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":[],"bugzilla":"1705877","bugzilla_description":"CVE-2018-16860 samba: S4U2Self with unkeyed checksum","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11085","severity":"important","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:1891","RHBA-2019:3151","RHSA-2019:1873","RHSA-2020:0609","RHSA-2020:0592","RHSA-2019:1971","RHSA-2020:0543","RHSA-2019:1959"],"bugzilla":"1710405","bugzilla_description":"CVE-2019-11085 kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-250","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.64.1.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-862.48.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11085.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-12086","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2020:1454","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3044","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2020:3192","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1713468","bugzilla_description":"CVE-2019-12086 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-11833","severity":"moderate","public_date":"2019-05-11T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1712072","bugzilla_description":"CVE-2019-11833 kernel: fs/ext4/extents.c leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11833.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-11884","severity":"moderate","public_date":"2019-05-10T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1709837","bugzilla_description":"CVE-2019-11884 kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11884.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"6.8"},{"CVE":"CVE-2019-18408","severity":"important","public_date":"2019-05-10T00:00:00Z","advisories":["RHSA-2020:0271","RHSA-2020:0203","RHSA-2020:0246","RHBA-2020:0395"],"bugzilla":"1769979","bugzilla_description":"CVE-2019-18408 libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-8.el8_1","libarchive-0:3.1.2-14.el7_7","libarchive-0:3.3.2-4.el8_0","redhat-coreos-42.81.20200203.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18408.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11810","severity":"moderate","public_date":"2019-05-07T00:00:00Z","advisories":["RHSA-2020:0036","RHSA-2019:3217","RHSA-2019:2029","RHBA-2019:3151","RHSA-2019:1971","RHSA-2019:2736","RHSA-2019:2043","RHSA-2019:1959","RHSA-2019:2837"],"bugzilla":"1709164","bugzilla_description":"CVE-2019-11810 kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.14.1.el7a","kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:2.6.32-754.22.1.el6","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.46.1.el7","kernel-0:3.10.0-957.35.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11810.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-11811","severity":"moderate","public_date":"2019-05-07T00:00:00Z","advisories":["RHSA-2019:1891","RHSA-2020:0036","RHSA-2019:4057","RHSA-2019:4058","RHBA-2019:3151","RHSA-2019:1873","RHSA-2019:1971","RHSA-2019:1959","RHSA-2020:2854"],"bugzilla":"1709180","bugzilla_description":"CVE-2019-11811 kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.61.1.el7","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-862.46.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11811.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-3843","severity":"moderate","public_date":"2019-04-25T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1794"],"bugzilla":"1684607","bugzilla_description":"CVE-2019-3843 systemd: services with DynamicUser can create SUID/SGID binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["systemd-0:239-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-3844","severity":"moderate","public_date":"2019-04-25T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1794"],"bugzilla":"1684610","bugzilla_description":"CVE-2019-3844 systemd: services with DynamicUser can get new privileges and create SGID binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-268","affected_packages":["systemd-0:239-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3844.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-3900","severity":"important","public_date":"2019-04-25T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:1973","RHSA-2019:4058","RHSA-2019:3220","RHSA-2019:2043","RHSA-2019:3967","RHSA-2019:3836","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1698757","bugzilla_description":"CVE-2019-3900 Kernel: vhost_net: infinite loop while receiving packets leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-957.38.1.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:3.10.0-693.61.1.el7","redhat-coreos-42.81.20191107.0","kernel-alt-0:4.14.0-115.10.1.el7a","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.44.2.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2019-3868","severity":"moderate","public_date":"2019-04-23T16:59:00Z","advisories":["RHSA-2020:2366","RHSA-2019:0856","RHSA-2019:2998","RHSA-2019:1140","RHSA-2019:0868","RHSA-2019:0857"],"bugzilla":"1679144","bugzilla_description":"CVE-2019-3868 keycloak: session hijack using the user access token","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-sso7-keycloak-0:3.4.17-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.17-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3868.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-0223","severity":"moderate","public_date":"2019-04-23T00:00:00Z","advisories":["RHSA-2019:1398","RHSA-2019:2782","RHSA-2019:2781","RHSA-2019:2777","RHSA-2019:1400","RHSA-2019:1399","RHSA-2019:0886","RHSA-2019:2779","RHSA-2019:2778","RHSA-2019:2780"],"bugzilla":"1702439","bugzilla_description":"CVE-2019-0223 qpid-proton: TLS Man in the Middle Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-300","affected_packages":["qpid-proton-0:0.27.0-3.el7","qpid-proton-0:0.27.0-3.el6","qpid-proton-0:0.9-22.el5","qpid-proton-0:0.28.0-1.el8","qpid-proton-0:0.28.0-1.el7","qpid-proton-0:0.16.0-14.el7sat","qpid-proton-0:0.16.0-14.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0223.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-11487","severity":"important","public_date":"2019-04-22T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:3266","RHBA-2019:3151","RHSA-2020:3230","RHSA-2020:0839","RHSA-2020:0174","RHSA-2019:2741","RHSA-2020:0834","RHSA-2019:2703","RHSA-2020:4182"],"bugzilla":"1703063","bugzilla_description":"CVE-2019-11487 kernel: Count overflow in FUSE request leading to use-after-free issues.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.71.2.el7","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-1:3.10.0-693.71.2.rt56.670.el6rt","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:2.6.32-754.35.1.el6","kernel-0:3.10.0-1062.18.1.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-11599","severity":"moderate","public_date":"2019-04-19T00:00:00Z","advisories":["RHSA-2020:0100","RHSA-2020:0179","RHSA-2019:2029","RHSA-2019:2043","RHSA-2020:0103","RHSA-2020:0543","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1705937","bugzilla_description":"CVE-2019-11599 kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-667","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.62.1.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-957.43.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-rt-1:3.10.0-693.62.1.rt56.659.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11599.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-18805","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0740","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1771496","bugzilla_description":"CVE-2019-18805 kernel: integer overflow in tcp_ack_update_rtt in net/ipv4/tcp_input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18805.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-11459","severity":"low","public_date":"2019-04-13T00:00:00Z","advisories":["RHSA-2020:1074","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1716295","bugzilla_description":"CVE-2019-11459 evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["evince-0:3.28.4-3.el8","evince-0:3.28.2-9.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11459.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-9494","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699141","bugzilla_description":"CVE-2019-9494 wpa_supplicant: SAE Timing-based and Cache-based side-channel attack against WPA3's Dragonfly handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9494.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9495","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699149","bugzilla_description":"CVE-2019-9495 wpa_supplicant: EAP-pwd cache side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9495.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9497","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699164","bugzilla_description":"CVE-2019-9497 wpa_supplicant: EAP-pwd server not checking for reflection attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9497.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-9498","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699168","bugzilla_description":"CVE-2019-9498 wpa_supplicant: EAP-pwd server missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9498.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-9499","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699170","bugzilla_description":"CVE-2019-9499 wpa_supplicant: EAP-pwd peer missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9499.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-11596","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:1576"],"bugzilla":"1706001","bugzilla_description":"CVE-2019-11596 memcached: null-pointer dereference in \"lru mode\" and \"lru temp_ttl\" causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["memcached-0:1.5.9-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11596.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11070","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1709289","bugzilla_description":"CVE-2019-11070 webkitgtk: HTTP proxy setting deanonymization information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11070.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-8506","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719199","bugzilla_description":"CVE-2019-8506 webkitgtk: malicous web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8518","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719206","bugzilla_description":"CVE-2019-8518 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8523","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719208","bugzilla_description":"CVE-2019-8523 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8524","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719209","bugzilla_description":"CVE-2019-8524 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8524.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8535","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719210","bugzilla_description":"CVE-2019-8535 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8535.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8536","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719213","bugzilla_description":"CVE-2019-8536 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8536.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8544","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719224","bugzilla_description":"CVE-2019-8544 webkitgtk: malicious crafted web content leads to arbitrary we content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8558","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719231","bugzilla_description":"CVE-2019-8558 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8558.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8559","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719235","bugzilla_description":"CVE-2019-8559 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8559.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8563","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719237","bugzilla_description":"CVE-2019-8563 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-3870","severity":"moderate","public_date":"2019-04-09T00:00:00Z","advisories":[],"bugzilla":"1689010","bugzilla_description":"CVE-2019-3870 samba: World writable files in Samba AD DC private/ dir","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-3880","severity":"moderate","public_date":"2019-04-09T00:00:00Z","advisories":["RHSA-2019:2099","RHSA-2019:1967","RHSA-2019:1966","RHSA-2019:3582"],"bugzilla":"1691518","bugzilla_description":"CVE-2019-3880 samba: save registry file outside share as unprivileged user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.9.8-105.el7rhgs","samba-0:4.9.1-6.el7","samba-0:4.10.4-1.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3880.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2019-3887","severity":"important","public_date":"2019-04-05T16:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2703"],"bugzilla":"1695044","bugzilla_description":"CVE-2019-3887 Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3887.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-4300","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1695929","bugzilla_description":"CVE-2018-4300 cups: Session cookie generated by the CUPS web interface is easy to guess","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4300.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"7.3"},{"CVE":"CVE-2019-3882","severity":"moderate","public_date":"2019-04-02T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1689426","bugzilla_description":"CVE-2019-3882 kernel: denial of service vector through vfio DMA mappings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-12183","severity":"moderate","public_date":"2019-03-29T00:00:00Z","advisories":[],"bugzilla":"1694077","bugzilla_description":"CVE-2018-12183 edk2: stack overflow in DxeCore leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12183.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-12182","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":[],"bugzilla":"1694081","bugzilla_description":"CVE-2018-12182 edk2: insufficient memory write in SMM service leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-3829","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2019:3600","RHBA-2019:3303"],"bugzilla":"1677048","bugzilla_description":"CVE-2019-3829 gnutls: use-after-free/double-free in certificate verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gnutls-0:3.6.8-8.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3829.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-3836","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2019:3600","RHBA-2019:3303"],"bugzilla":"1678411","bugzilla_description":"CVE-2019-3836 gnutls: invalid pointer access upon receiving async handshake messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["gnutls-0:3.6.8-8.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3836.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-12179","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":[],"bugzilla":"1694072","bugzilla_description":"CVE-2018-12179 edk2: improper configuration insystem firmware leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12179.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-3874","severity":"moderate","public_date":"2019-03-19T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1686373","bugzilla_description":"CVE-2019-3874 kernel: SCTP socket buffer memory leak leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3874.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-9893","severity":"moderate","public_date":"2019-03-14T00:00:00Z","advisories":["RHSA-2019:3624","RHBA-2019:3303"],"bugzilla":"1690897","bugzilla_description":"CVE-2019-9893 libseccomp: incorrect generation of syscall filters in libseccomp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["redhat-coreos-42.81.20191107.0","libseccomp-0:2.4.1-1.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3855","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687303","bugzilla_description":"CVE-2019-3855 libssh2: Integer overflow in transport read resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3856","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687304","bugzilla_description":"CVE-2019-3856 libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3856.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3857","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687305","bugzilla_description":"CVE-2019-3857 libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3857.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3858","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687306","bugzilla_description":"CVE-2019-3858 libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3859","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687307","bugzilla_description":"CVE-2019-3859 libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3859.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3860","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687310","bugzilla_description":"CVE-2019-3860 libssh2: Out-of-bounds reads with specially crafted SFTP packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3861","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687311","bugzilla_description":"CVE-2019-3861 libssh2: Out-of-bounds reads with specially crafted SSH packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3861.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3862","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:1884"],"bugzilla":"1687312","bugzilla_description":"CVE-2019-3862 libssh2: Out-of-bounds memory comparison with specially crafted message channel request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["libssh2-0:1.4.3-12.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3862.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3863","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687313","bugzilla_description":"CVE-2019-3863 libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3816","severity":"important","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2019:0972","RHSA-2019:0638"],"bugzilla":"1667070","bugzilla_description":"CVE-2019-3816 openwsman: Disclosure of arbitrary files outside of the registered URIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openwsman-0:2.6.3-6.git4391e5c.el7_6","openwsman-0:2.6.5-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-3833","severity":"moderate","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2020:3940"],"bugzilla":"1674478","bugzilla_description":"CVE-2019-3833 openwsman: Infinite loop in process_connection() allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openwsman-0:2.6.3-7.git4391e5c.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3833.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-8936","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":[],"bugzilla":"1686605","bugzilla_description":"CVE-2019-8936 ntp: Crafted null dereference attack in authenticated mode 6 packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-12181","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":["RHSA-2019:3338","RHSA-2019:2125"],"bugzilla":"1686783","bugzilla_description":"CVE-2018-12181 edk2: Stack buffer overflow with corrupted BMP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["edk2-0:20190308git89910a39dcfd-6.el8","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12181.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9924","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":["RHSA-2020:1113","RHSA-2020:3474","RHBA-2020:1539","RHSA-2020:3592","RHSA-2020:3803","RHBA-2020:1540"],"bugzilla":"1691774","bugzilla_description":"CVE-2019-9924 bash: BASH_CMD is writable in restricted bash shells","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","bash-0:4.2.46-34.el7","bash-0:4.2.46-32.el7_6","bash-0:4.2.46-34.el7_7","bash-0:4.2.46-30.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9924.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9636","severity":"important","public_date":"2019-03-06T00:00:00Z","advisories":["RHBA-2019:0763","RHSA-2019:2980","RHSA-2019:0806","RHSA-2019:1467","RHSA-2019:0981","RHSA-2019:0710","RHSA-2019:0765","RHSA-2019:0997","RHSA-2019:3170","RHBA-2019:0764","RHSA-2019:0902"],"bugzilla":"1688543","bugzilla_description":"CVE-2019-9636 python: Information Disclosure due to urlsplit improper NFKC normalization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python3-0:3.6.8-2.el8_0","python27-python-0:2.7.13-4.el6","rhvm-appliance-0:4.2-20190411.1.el7","python27-python-0:2.7.13-6.el7","python-0:2.7.5-59.el7_4","python-0:2.7.5-70.el7_5","rh-python36-python-0:3.6.3-4.el6","redhat-virtualization-host-0:4.2-20190411.1.el7_6","python27:2.7-8000020190410132513.c0efe978","rh-python35-python-0:3.5.1-12.el7","rh-python35-python-0:3.5.1-12.el6","python-0:2.7.5-77.el7_6","python-0:2.6.6-68.el6_10","rh-python36-python-0:3.6.3-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-1543","severity":"low","public_date":"2019-03-06T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1695954","bugzilla_description":"CVE-2019-1543 openssl: ChaCha20-Poly1305 with long nonces","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-9213","severity":"important","public_date":"2019-02-27T00:00:00Z","advisories":["RHSA-2019:1479","RHBA-2019:3151","RHSA-2019:0831","RHSA-2019:1480"],"bugzilla":"1686136","bugzilla_description":"CVE-2019-9213 kernel: lack of check for mmap minimum address in expand_downwards in mm/mmap.c leads to NULL pointer dereferences exploit on non-SMAP platforms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:4.18.0-80.4.2.el8_0","redhat-coreos-42.80.20191022.0","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9213.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-12178","severity":"important","public_date":"2019-02-26T00:00:00Z","advisories":[],"bugzilla":"1683326","bugzilla_description":"CVE-2018-12178 edk2: improper DNS packet size check","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12178.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"7.2"},{"CVE":"CVE-2018-12180","severity":"important","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:0809","RHSA-2019:1116","RHSA-2019:0968"],"bugzilla":"1683372","bugzilla_description":"CVE-2018-12180 edk2: Buffer Overflow in BlockIo service for RAM disk","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7_6.1","redhat-virtualization-host-0:4.3-20190418.0.el7_6","edk2-0:20180508gitee3198e672e2-9.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"8.3"},{"CVE":"CVE-2019-1559","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:2304","RHSA-2019:2439","RHSA-2019:3929","RHSA-2019:2437","RHSA-2019:2471"],"bugzilla":"1683804","bugzilla_description":"CVE-2019-1559 openssl: 0-byte record padding oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-0:1.0.1e-58.el6_10","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-0160","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3338","RHSA-2019:2125"],"bugzilla":"1691640","bugzilla_description":"CVE-2019-0160 edk2: Buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-121)","affected_packages":["edk2-0:20190308git89910a39dcfd-6.el8","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0160.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2019-9500","severity":"important","public_date":"2019-02-19T00:00:00Z","advisories":["RHSA-2019:3217","RHSA-2019:2600","RHSA-2019:4168","RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2945","RHSA-2019:2703","RHSA-2019:2609","RHSA-2019:4171"],"bugzilla":"1701224","bugzilla_description":"CVE-2019-9500 kernel: brcmfmac heap buffer overflow in brcmf_wowl_nd_results","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-alt-0:4.14.0-115.14.1.el7a","kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","kernel-rt-0:3.10.0-1062.1.1.rt56.1024.el7","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0","kernel-0:3.10.0-1062.1.1.el7","kernel-0:3.10.0-957.41.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9503","severity":"moderate","public_date":"2019-02-19T00:00:00Z","advisories":["RHSA-2020:2522","RHBA-2019:3151","RHSA-2019:2741","RHSA-2020:1070","RHSA-2019:2703","RHSA-2020:1016"],"bugzilla":"1701842","bugzilla_description":"CVE-2019-9503 kernel: brcmfmac frame validation bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9503.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-6454","severity":"important","public_date":"2019-02-18T00:00:00Z","advisories":["RHSA-2019:0990","RHSA-2019:0461","RHSA-2019:0368","RHBA-2019:3151","RHSA-2019:1322","RHSA-2019:0457","RHSA-2019:1502","RHSA-2019:2805"],"bugzilla":"1667032","bugzilla_description":"CVE-2019-6454 systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["systemd-0:219-62.el7_6.5","rhvm-appliance-0:4.2-20190224.0.el7","systemd-0:219-42.el7_4.16","redhat-coreos-42.80.20191022.0","systemd-0:239-13.el8_0.3","systemd-0:219-57.el7_5.6","systemd-0:219-30.el7_3.14","redhat-virtualization-host-0:4.2-20190219.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6454.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-8980","severity":"moderate","public_date":"2019-02-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1679972","bugzilla_description":"CVE-2019-8980 kernel: memory leak in the kernel_read_file function in fs/exec.c allows to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8980.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-3831","severity":"moderate","public_date":"2019-02-14T00:00:00Z","advisories":["RHSA-2019:0457","RHSA-2019:0458"],"bugzilla":"1677108","bugzilla_description":"CVE-2019-3831 vdsm: privilege escalation to root via systemd_run","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["vdsm-0:4.20.47-1.el7ev","redhat-virtualization-host-0:4.2-20190219.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3831.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-7222","severity":"low","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1671930","bugzilla_description":"CVE-2019-7222 Kernel: KVM: leak of uninitialized stack contents to guest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7222.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2018-16890","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670252","bugzilla_description":"CVE-2018-16890 curl: NTLM type-2 heap out-of-bounds buffer read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-190","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-3822","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670254","bugzilla_description":"CVE-2019-3822 curl: NTLMv2 type-3 header stack buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-3823","severity":"low","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670256","bugzilla_description":"CVE-2019-3823 curl: SMTP end-of-response out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-3825","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1672825","bugzilla_description":"CVE-2019-3825 gdm: lock screen bypass when timed login is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["gdm-1:3.28.3-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3825.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2018-16838","severity":"low","public_date":"2019-02-04T00:00:00Z","advisories":["RHSA-2019:2177","RHSA-2019:3651","RHSA-2019:2437","RHBA-2019:3303"],"bugzilla":"1640820","bugzilla_description":"CVE-2018-16838 sssd: improper implementation of GPOs due to too restrictive permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["redhat-coreos-42.81.20191107.0","sssd-0:1.16.4-21.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","sssd-0:2.2.0-19.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-3813","severity":"important","public_date":"2019-01-28T18:00:00Z","advisories":["RHSA-2019:0231","RHSA-2019:0232","RHSA-2019:0457"],"bugzilla":"1665371","bugzilla_description":"CVE-2019-3813 spice: Off-by-one error in array access in spice/server/memslot.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["spice-0:0.14.0-6.el7_6.1","redhat-virtualization-host-0:4.2-20190219.0.el7_6","spice-server-0:0.12.4-16.el6_10.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3813.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-3630","severity":"moderate","public_date":"2019-01-26T00:00:00Z","advisories":[],"bugzilla":"1683653","bugzilla_description":"CVE-2018-3630 ovmf: Logic error in FV parsing in MdeModulePkg\\Core\\Pei\\FwVol\\FwVol.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3630.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2018-18508","severity":"moderate","public_date":"2019-01-22T00:00:00Z","advisories":["RHSA-2019:1951"],"bugzilla":"1671310","bugzilla_description":"CVE-2018-18508 nss: NULL pointer dereference in several CMS functions resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3817","severity":"moderate","public_date":"2019-01-21T00:00:00Z","advisories":["RHSA-2019:3898","RHBA-2020:0062","RHSA-2019:3583"],"bugzilla":"1668005","bugzilla_description":"CVE-2019-3817 libcomps: use after free when merging two objmrtrees","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.81.202001142154.0","libcomps-0:0.1.8-13.el7","libcomps-0:0.1.11-2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1000020","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1672888","bugzilla_description":"CVE-2019-1000020 libarchive: Infinite recursion in archive_read_support_format_iso9660.c resulting in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1000020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-1000019","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1672892","bugzilla_description":"CVE-2019-1000019 libarchive: Out of bounds read in archive_read_support_format_7zip.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1000019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3459","severity":"moderate","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1663176","bugzilla_description":"CVE-2019-3459 kernel: Heap address information leak while using L2CAP_GET_CONF_OPT","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-3460","severity":"moderate","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1663179","bugzilla_description":"CVE-2019-3460 kernel: Heap address information leak while using L2CAP_PARSE_CONF_RSP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-16889","severity":"moderate","public_date":"2019-01-10T00:00:00Z","advisories":["RHSA-2019:2541","RHSA-2019:2538"],"bugzilla":"1665334","bugzilla_description":"CVE-2018-16889 ceph: debug logging for v4 auth does not sanitize encryption keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["ceph-2:12.2.12-45.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16889.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-16864","severity":"important","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:0342","RHSA-2019:0361","RHSA-2019:0049","RHSA-2019:2402","RHSA-2019:0204","RHSA-2019:0271"],"bugzilla":"1653855","bugzilla_description":"CVE-2018-16864 systemd: stack overflow when calling syslog from a command with long cmdline","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["systemd-0:219-30.el7_3.13","systemd-0:219-57.el7_5.5","rhvm-appliance-0:4.2-20190129.0.el7","systemd-0:219-62.el7_6.2","systemd-0:219-42.el7_4.13","redhat-virtualization-host-0:4.2-20190129.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2018-16865","severity":"important","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:0342","RHSA-2019:0361","RHSA-2019:0049","RHSA-2019:2402","RHSA-2019:0204","RHSA-2019:0271"],"bugzilla":"1653861","bugzilla_description":"CVE-2018-16865 systemd: stack overflow when receiving many journald entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["systemd-0:219-30.el7_3.13","systemd-0:219-57.el7_5.5","rhvm-appliance-0:4.2-20190129.0.el7","systemd-0:219-62.el7_6.2","systemd-0:219-42.el7_4.13","redhat-virtualization-host-0:4.2-20190129.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16866","severity":"moderate","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:3222","RHSA-2020:0593","RHSA-2020:1264","RHSA-2019:2091"],"bugzilla":"1653867","bugzilla_description":"CVE-2018-16866 systemd: out-of-bounds read when parsing a crafted syslog message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":["systemd-0:219-57.el7_5.9","systemd-0:219-62.el7_6.11","systemd-0:219-67.el7","systemd-0:219-42.el7_4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16866.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-16846","severity":"moderate","public_date":"2019-01-07T00:00:00Z","advisories":["RHSA-2019:2541","RHSA-2019:2538"],"bugzilla":"1644461","bugzilla_description":"CVE-2018-16846 ceph: ListBucket max-keys has no defined limit in the RGW codebase","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["ceph-2:12.2.12-45.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-5489","severity":"important","public_date":"2019-01-06T00:00:00Z","advisories":["RHSA-2019:2473","RHSA-2019:4255","RHSA-2019:2029","RHSA-2019:4057","RHSA-2019:4058","RHSA-2019:4159","RHSA-2019:4164","RHSA-2019:4056","RHSA-2019:2043","RHSA-2020:0204","RHSA-2019:2809","RHSA-2019:2808","RHSA-2019:3967","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:2837","RHSA-2019:3309"],"bugzilla":"1664110","bugzilla_description":"CVE-2019-5489 Kernel: page cache side channel attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:2.6.18-439.el5","kernel-0:2.6.32-431.97.1.el6","kernel-0:2.6.32-754.18.2.el6","kernel-0:3.10.0-327.83.1.el7","kernel-0:2.6.32-504.82.1.el6","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:3.10.0-957.35.1.el7","kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.61.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.12.1.el7a","kernel-0:3.10.0-862.44.2.el7","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-514.71.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-20784","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:1971","RHSA-2019:1959"],"bugzilla":"1680540","bugzilla_description":"CVE-2018-20784 kernel: infinite loop in update_blocked_averages() in kernel/sched/fair.c leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.7.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-20483","severity":"moderate","public_date":"2018-12-26T00:00:00Z","advisories":["RHSA-2019:3701","RHBA-2019:3303"],"bugzilla":"1662705","bugzilla_description":"CVE-2018-20483 wget: Information exposure in set_file_metadata function in xattr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20483.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-20337","severity":"moderate","public_date":"2018-12-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1661555","bugzilla_description":"CVE-2018-20337 LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["LibRaw-0:0.19.5-1.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20337.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-3804","severity":"moderate","public_date":"2018-12-13T00:00:00Z","advisories":["RHSA-2019:0482","RHSA-2019:1571","RHSA-2019:1569"],"bugzilla":"1663567","bugzilla_description":"CVE-2019-3804 cockpit: Crash when parsing invalid base64 headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["rhvm-appliance-0:4.3-20190605.0.el7","cockpit-0:173.2-1.el7","redhat-virtualization-host-0:4.3-20190610.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-19985","severity":"low","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1666106","bugzilla_description":"CVE-2018-19985 kernel: oob memory read in hso_probe in drivers/net/usb/hso.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19985.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-4700","severity":"moderate","public_date":"2018-12-07T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1649347","bugzilla_description":"CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4700.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"7.3"},{"CVE":"CVE-2018-20169","severity":"moderate","public_date":"2018-12-05T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:2770","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:2777"],"bugzilla":"1660385","bugzilla_description":"CVE-2018-20169 kernel: usb: missing size check in the __usb_get_extra_descriptor() leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-rt-1:3.10.0-693.69.1.rt56.667.el6rt","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-693.69.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20169.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-19824","severity":"moderate","public_date":"2018-12-04T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2703"],"bugzilla":"1655816","bugzilla_description":"CVE-2018-19824 kernel: Use-after-free in sound/usb/card.c:usb_audio_probe()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19824.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2018-19788","severity":"moderate","public_date":"2018-12-03T00:00:00Z","advisories":["RHSA-2019:2046","RHSA-2019:3232"],"bugzilla":"1655925","bugzilla_description":"CVE-2018-19788 polkit: Improper handling of user with uid > INT_MAX leading to authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["polkit-0:0.112-22.el7","polkit-0:0.112-18.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19788.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16868","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1654929","bugzilla_description":"CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16868.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-16869","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1654930","bugzilla_description":"CVE-2018-16869 nettle: Leaky data conversion exposing a manager oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16869.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-12404","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":["RHSA-2019:2237"],"bugzilla":"1657913","bugzilla_description":"CVE-2018-12404 nss: Cache side-channel variant of the Bleichenbacher attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-18311","severity":"important","public_date":"2018-11-29T00:00:00Z","advisories":["RHSA-2019:0001","RHSA-2019:0010","RHSA-2019:2400","RHSA-2019:1942","RHSA-2019:1790","RHSA-2019:0109"],"bugzilla":"1646730","bugzilla_description":"CVE-2018-18311 perl: Integer overflow leading to buffer overflow in Perl_my_setenv()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["rh-perl524-perl-4:5.24.0-381.el6","perl-4:5.16.3-294.el7_6","rh-perl524-perl-4:5.24.0-381.el7","perl-4:5.16.3-292.el7_5.1","perl-4:5.16.3-292.el7_4.1","rh-perl526-perl-4:5.26.3-405.el7","perl-4:5.16.3-291.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14637","severity":"moderate","public_date":"2018-11-27T20:23:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1627851","bugzilla_description":"CVE-2018-14637 keycloak: expiration not validated in SAML broker consumer endpoint","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287->CWE-285","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-16884","severity":"important","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:2696","RHSA-2019:1891","RHSA-2019:1873","RHSA-2019:2730","RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:2854","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1660375","bugzilla_description":"CVE-2018-16884 kernel: nfs: use-after-free in svc_process_common()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-693.58.1.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16884.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-20534","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":["RHBA-2020:0062","RHSA-2019:2290","RHSA-2019:3583"],"bugzilla":"1665538","bugzilla_description":"CVE-2018-20534 libsolv: illegal address access in pool_whatprovides in src/pool.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libsolv-0:0.7.4-3.el8","libsolv-0:0.6.34-4.el7","redhat-coreos-43.81.202001142154.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20534.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000877","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1663887","bugzilla_description":"CVE-2018-1000877 libarchive: Double free in RAR decoder resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000877.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1000878","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1663889","bugzilla_description":"CVE-2018-1000878 libarchive: Use after free in RAR decoder resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000878.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-20685","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1665785","bugzilla_description":"CVE-2018-20685 openssh: scp client improper directory name validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20685.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-6109","severity":"low","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666119","bugzilla_description":"CVE-2019-6109 openssh: Missing character encoding in progress display allows for spoofing of scp client output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-6111","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666127","bugzilla_description":"CVE-2019-6111 openssh: Improper validation of object names allows malicious server to overwrite files via scp client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-14658","severity":"moderate","public_date":"2018-11-13T17:38:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625409","bugzilla_description":"CVE-2018-14658 keycloak: Open Redirect in Login and Logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14658.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14655","severity":"moderate","public_date":"2018-11-13T17:37:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625396","bugzilla_description":"CVE-2018-14655 keycloak: XSS-Vulnerability with response_mode=form_post","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14655.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2018-14657","severity":"low","public_date":"2018-11-13T17:37:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2018:3595"],"bugzilla":"1625404","bugzilla_description":"CVE-2018-14657 keycloak: brute force protection not working for the entire login workflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14657.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-19044","severity":"moderate","public_date":"2018-11-08T00:00:00Z","advisories":["RHSA-2019:2285"],"bugzilla":"1651863","bugzilla_description":"CVE-2018-19044 keepalived: Improper pathname validation allows for overwrite of arbitrary filenames via symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["keepalived-0:1.3.5-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19044.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-19045","severity":"moderate","public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1651866","bugzilla_description":"CVE-2018-19045 keepalived: Insecure permissions when creating new temporary files allows for leaking of sensitive data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19045.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-19046","severity":"moderate","public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1651869","bugzilla_description":"CVE-2018-19046 keepalived: Insecure use of temporary files allows attackers read sensitive information from pre-existing files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19046.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-19115","severity":"important","public_date":"2018-11-08T00:00:00Z","advisories":["RHSA-2019:0022","RHSA-2019:1792","RHSA-2019:1945"],"bugzilla":"1651871","bugzilla_description":"CVE-2018-19115 keepalived: Heap-based buffer overflow when parsing HTTP status codes allows for denial of service or possibly arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["keepalived-0:1.3.5-1.el7_4.1","keepalived-0:1.3.5-8.el7_6","keepalived-0:1.3.5-7.el7_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-1000845","severity":null,"public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1661252","bugzilla_description":"CVE-2018-1000845 avahi: DNS amplification and reflection to spoofed addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000845.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-19854","severity":"moderate","public_date":"2018-11-03T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1656986","bugzilla_description":"CVE-2018-19854 kernel: Information Disclosure in crypto_report_one in crypto/crypto_user.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19854.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-16472","severity":"moderate","public_date":"2018-11-02T00:00:00Z","advisories":[],"bugzilla":"1649118","bugzilla_description":"CVE-2018-16472 nodejs-cached-path-relative: prototype pollution due to injected properties on Object.prototype","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16472.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-5407","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3932","RHSA-2019:0483","RHSA-2019:2125","RHSA-2019:3929","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1645695","bugzilla_description":"CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7_6.1","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-18751","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":["RHSA-2019:3643","RHSA-2020:2485","RHSA-2020:2846","RHSA-2020:1138","RHBA-2019:3303"],"bugzilla":"1647043","bugzilla_description":"CVE-2018-18751 gettext: double free in default_add_message in read-catalog.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-42.81.20191107.0","gettext-0:0.19.8.1-17.el8","gettext-0:0.19.8.1-3.el7","gettext-0:0.19.8.1-3.el7_6","gettext-0:0.19.8.1-3.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18751.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-15688","severity":"important","public_date":"2018-10-26T00:00:00Z","advisories":["RHSA-2019:0049","RHSA-2018:3665"],"bugzilla":"1639067","bugzilla_description":"CVE-2018-15688 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-190->CWE-122","affected_packages":["NetworkManager-1:1.12.0-8.el7_6","systemd-0:219-62.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15688.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-0735","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1644356","bugzilla_description":"CVE-2018-0735 openssl: timing side channel attack in the ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-3613","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641433","bugzilla_description":"CVE-2018-3613 edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3613.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5731","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641442","bugzilla_description":"CVE-2017-5731 edk2: Privilege escalation via processing of malformed files in TianoCompress.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5731.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5732","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641446","bugzilla_description":"CVE-2017-5732 edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5732.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5733","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641450","bugzilla_description":"CVE-2017-5733 edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5733.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5734","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641458","bugzilla_description":"CVE-2017-5734 edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5735","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641465","bugzilla_description":"CVE-2017-5735 edk2: Privilege escalation via heap-based buffer overflow in Decode() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-0734","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:3700","RHSA-2019:3932","RHSA-2019:2304","RHSA-2019:3933","RHSA-2019:3935","RHBA-2019:3303"],"bugzilla":"1644364","bugzilla_description":"CVE-2018-0734 openssl: timing side channel attack in the DSA signature algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-11784","severity":"moderate","public_date":"2018-10-03T00:00:00Z","advisories":["RHSA-2019:0485","RHSA-2019:0130","RHSA-2019:0131","RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1636512","bugzilla_description":"CVE-2018-11784 tomcat: Open redirect in default servlet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-99","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7_6","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-17204","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0053","RHSA-2019:0081","RHSA-2018:3500"],"bugzilla":"1632522","bugzilla_description":"CVE-2018-17204 openvswitch: Mishandle of group mods in lib/ofp-util.c:parse_group_prop_ntr_selection_method() allows for assertion failure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openvswitch-0:2.9.0-83.el7fdp.1","openvswitch-0:2.9.0-70.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.7"},{"CVE":"CVE-2018-17205","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0053","RHSA-2019:0081","RHSA-2018:3500"],"bugzilla":"1632525","bugzilla_description":"CVE-2018-17205 openvswitch: Error during bundle commit in ofproto/ofproto.c:ofproto_rule_insert__() allows for crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openvswitch-0:2.9.0-83.el7fdp.1","openvswitch-0:2.9.0-70.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17205.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-17206","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0053","RHSA-2019:0081","RHSA-2018:3500"],"bugzilla":"1632528","bugzilla_description":"CVE-2018-17206 openvswitch: Buffer over-read in lib/ofp-actions.c:decode_bundle()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openvswitch-0:2.9.0-83.el7fdp.1","openvswitch-0:2.9.0-70.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17206.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-0503","severity":"low","public_date":"2018-09-24T00:00:00Z","advisories":["RHSA-2019:3238","RHSA-2019:3142","RHSA-2019:3813"],"bugzilla":"1634161","bugzilla_description":"CVE-2018-0503 mediawiki: $wgRateLimits (rate limit / ping limiter) entry for 'user' overrides that for 'newbie'","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["mediawiki123-0:1.23.17-1.el7","mediawiki-0:1.27.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0503.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-0505","severity":"low","public_date":"2018-09-24T00:00:00Z","advisories":["RHSA-2019:3238","RHSA-2019:3142","RHSA-2019:3813"],"bugzilla":"1634166","bugzilla_description":"CVE-2018-0505 mediawiki: BotPassword can bypass CentralAuth's account lock","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["mediawiki123-0:1.23.17-1.el7","mediawiki-0:1.27.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0505.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-0504","severity":"low","public_date":"2018-09-24T00:00:00Z","advisories":["RHSA-2019:3238","RHSA-2019:3813"],"bugzilla":"1634168","bugzilla_description":"CVE-2018-0504 mediawiki: Information exposure when a log event is (partially) hidden","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["mediawiki123-0:1.23.17-1.el7","mediawiki-0:1.27.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0504.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-17336","severity":"moderate","public_date":"2018-09-22T00:00:00Z","advisories":["RHSA-2019:2178"],"bugzilla":"1632828","bugzilla_description":"CVE-2018-17336 udisks: Format string vulnerability in udisks_log in udiskslogging.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-134","affected_packages":["udisks2-0:2.7.3-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17336.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-17942","severity":"low","public_date":"2018-09-19T00:00:00Z","advisories":[],"bugzilla":"1635896","bugzilla_description":"CVE-2018-17942 gnulib: heap-based buffer overflow in convert_to_decimal function in vasnprintf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-6251","severity":"moderate","public_date":"2018-09-11T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1667409","bugzilla_description":"CVE-2019-6251 webkitgtk: processing maliciously crafted web content lead to URI spoofing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-1000805","severity":"critical","public_date":"2018-09-07T00:00:00Z","advisories":["RHBA-2018:3497","RHSA-2018:3470","RHSA-2018:3406","RHSA-2018:3347"],"bugzilla":"1637263","bugzilla_description":"CVE-2018-1000805 python-paramiko: Authentication bypass in auth_handler.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["redhat-virtualization-host-0:4.2-20181026.0.el7_6","python-paramiko-0:1.7.5-5.el6_10","python-paramiko-0:2.1.1-9.el7","rhvm-appliance-0:4.2-20181026.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-15909","severity":"important","public_date":"2018-08-28T00:00:00Z","advisories":["RHSA-2018:3650"],"bugzilla":"1621361","bugzilla_description":"CVE-2018-15909 ghostscript: shading_param incomplete type checking (699660)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["ghostscript-0:9.07-31.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15909.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16511","severity":"important","public_date":"2018-08-24T00:00:00Z","advisories":["RHSA-2018:3650"],"bugzilla":"1621359","bugzilla_description":"CVE-2018-16511 ghostscript: missing type check in type checker (699659)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-704","affected_packages":["ghostscript-0:9.07-31.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16509","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:3760","RHSA-2018:2918"],"bugzilla":"1619748","bugzilla_description":"CVE-2018-16509 ghostscript: /invalidaccess bypass after failed restore (699654)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-29.el7_5.2","ghostscript-0:8.70-24.el6_10.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16513","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":[],"bugzilla":"1619750","bugzilla_description":"CVE-2018-16513 ghostscript: setcolor missing type check (699655)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-15910","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:2918"],"bugzilla":"1619751","bugzilla_description":"CVE-2018-15910 ghostscript: LockDistillerParams type confusion (699656)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-704","affected_packages":["ghostscript-0:9.07-29.el7_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15910.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-15908","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:3650"],"bugzilla":"1619756","bugzilla_description":"CVE-2018-15908 ghostscript: .tempfile file permission issues (699657)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-31.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15908.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-10921","severity":"low","public_date":"2018-08-02T15:45:00Z","advisories":[],"bugzilla":"1610539","bugzilla_description":"CVE-2018-10921 ttembed: failure to check file bounds may lead to input file corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10921.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-10922","severity":"low","public_date":"2018-08-02T15:45:00Z","advisories":[],"bugzilla":"1610887","bugzilla_description":"CVE-2018-10922 ttembed: use of untrusted length field may lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-8034","severity":"low","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2019:0451","RHSA-2019:0130","RHSA-2019:0131","RHSA-2019:0450","RHSA-2019:2205","RHSA-2019:3892","RHSA-2019:1159","RHSA-2019:1162","RHSA-2019:1529","RHSA-2019:1161","RHSA-2019:1160"],"bugzilla":"1607580","bugzilla_description":"CVE-2018-8034 tomcat: Host name verification missing in WebSocket client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","jbossweb-0:7.5.30-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8034.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-8037","severity":"important","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1607582","bugzilla_description":"CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2018-1336","severity":"important","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2945","RHSA-2018:2921","RHSA-2018:3768","RHSA-2018:2701","RHEA-2018:2189","RHSA-2018:2700","RHEA-2018:2188","RHSA-2018:2939","RHSA-2018:2743","RHSA-2018:2930","RHSA-2018:2742","RHSA-2018:2741","RHSA-2018:2740"],"bugzilla":"1607591","bugzilla_description":"CVE-2018-1336 tomcat: A bug in the UTF-8 decoder can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["jbossweb-0:7.5.29-1.Final_redhat_1.1.ep6.el5","tomcat8-0:8.0.36-33.ep7.el7","tomcat8-0:8.0.36-33.ep7.el6","tomcat-0:7.0.76-8.el7_5","tomcat7-0:7.0.70-29.ep7.el6","tomcat7-0:7.0.70-29.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1336.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-8020","severity":"important","public_date":"2018-07-21T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2018:2469"],"bugzilla":"1581569","bugzilla_description":"CVE-2018-8020 tomcat-native: Mishandled OCSP responses can allow clients to authenticate with revoked certificates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tomcat-native-0:1.2.17-17.redhat_17.ep7.el6","tomcat-native-0:1.2.17-17.redhat_17.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-8019","severity":"moderate","public_date":"2018-07-21T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2018:2469"],"bugzilla":"1583998","bugzilla_description":"CVE-2018-8019 tomcat-native: Mishandled OCSP invalid response","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tomcat-native-0:1.2.17-17.redhat_17.ep7.el6","tomcat-native-0:1.2.17-17.redhat_17.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-10869","severity":"important","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2018:2373"],"bugzilla":"1593780","bugzilla_description":"CVE-2018-10869 redhat-certification: /download allows to download any file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["redhat-certification-0:5.16-20180809.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-10870","severity":"critical","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2018:2373"],"bugzilla":"1593803","bugzilla_description":"CVE-2018-10870 redhat-certification: rhcertStore.py:__saveResultsFile allows to write any file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["redhat-certification-0:5.16-20180809.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10870.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-6470","severity":"moderate","public_date":"2018-07-14T00:00:00Z","advisories":["RHSA-2019:3525","RHSA-2019:2060"],"bugzilla":"1708641","bugzilla_description":"CVE-2019-6470 dhcp: double-deletion of the released addresses in the dhcpv6 code leading to crash and possible DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["dhcp-12:4.3.6-34.el8","dhcp-12:4.2.5-77.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-10894","severity":"moderate","public_date":"2018-07-09T00:00:00Z","advisories":["RHSA-2018:3593","RHSA-2018:3592","RHSA-2019:0877","RHSA-2018:3595"],"bugzilla":"1599434","bugzilla_description":"CVE-2018-10894 keycloak: auth permitted with expired certs in SAML client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el6","rh-sso7-keycloak-0:3.4.14-1.Final_redhat_00001.1.jbcs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10894.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-1000601","severity":"moderate","public_date":"2018-06-25T00:00:00Z","advisories":[],"bugzilla":"1596122","bugzilla_description":"CVE-2018-1000601 jenkins-plugin-ssh-credentials: Arbitrary file read vulnerability in SSH Credentials Plugin with Credentials Binding Plugin (SECURITY-440)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000601.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-10863","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1594122","bugzilla_description":"CVE-2018-10863 redhat-certification: directory listing in /rhcert-transfer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-10864","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":["RHSA-2018:2373"],"bugzilla":"1593627","bugzilla_description":"CVE-2018-10864 redhat-certification: resource consumption in DocumentBase:loadFiltered","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-certification-0:5.16-20180809.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10864.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10865","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593631","bugzilla_description":"CVE-2018-10865 redhat-certification: \"restart\" a node without authorization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2018-10866","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593632","bugzilla_description":"CVE-2018-10866 redhat-certification: remove a \"system\" file without authorization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10866.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-10867","severity":"moderate","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593764","bugzilla_description":"CVE-2018-10867 redhat-certification: /uploads/results page allows to remove files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10867.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-3897","severity":"moderate","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593768","bugzilla_description":"CVE-2019-3897 redhat-certification: /rhcert allows to download any file under /var/www/rhcert directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-10868","severity":"moderate","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1593776","bugzilla_description":"CVE-2018-10868 redhat-certification: billion laugh attack when getting the status of a host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10868.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10841","severity":"important","public_date":"2018-06-20T10:00:00Z","advisories":["RHSA-2018:1954","RHSA-2018:1955"],"bugzilla":"1582043","bugzilla_description":"CVE-2018-10841 glusterfs: access trusted peer group via remote-host command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["glusterfs-0:3.8.4-54.11.el6","glusterfs-0:3.8.4-54.10.el7","glusterfs-0:3.8.4-54.11.el6rhs","glusterfs-0:3.8.4-54.10.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10841.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2018-14404","severity":"moderate","public_date":"2018-06-18T00:00:00Z","advisories":["RHBA-2020:3180","RHBA-2020:1539","RHSA-2020:1827","RHSA-2019:1543","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1595985","bugzilla_description":"CVE-2018-14404 libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4","redhat-coreos-43.82.202007300301.0","libxml2-0:2.9.7-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-11219","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1860","RHSA-2019:0052","RHSA-2019:0094"],"bugzilla":"1590062","bugzilla_description":"CVE-2018-11219 redis: Integer overflow in lua_struct.c:b_unpack()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["redis-0:3.2.8-3.el7ost","redis-0:3.0.6-4.el7ost","rh-redis32-redis-0:3.2.13-1.el7","rh-redis32-redis-0:3.2.13-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11219.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-11218","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1860","RHSA-2019:0052","RHSA-2019:0094"],"bugzilla":"1590067","bugzilla_description":"CVE-2018-11218 redis: Heap corruption in lua_cmsgpack.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redis-0:3.2.8-3.el7ost","redis-0:3.0.6-4.el7ost","rh-redis32-redis-0:3.2.13-1.el7","rh-redis32-redis-0:3.2.13-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11218.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-12326","severity":"low","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1860","RHSA-2019:0052","RHSA-2019:0094"],"bugzilla":"1594291","bugzilla_description":"CVE-2018-12326 redis: Code execution in redis-cli via crafted command line arguments","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["redis-0:3.2.8-3.el7ost","redis-0:3.0.6-4.el7ost","rh-redis32-redis-0:3.2.13-1.el7","rh-redis32-redis-0:3.2.13-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12326.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12453","severity":"moderate","public_date":"2018-06-10T00:00:00Z","advisories":[],"bugzilla":"1592892","bugzilla_description":"CVE-2018-12453 redis: type confusion in the xgroupCommand function in t_stream.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12453.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-16118","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588785","bugzilla_description":"CVE-2017-16118 nodejs-forwarded:  regular expression denial of service when parsing crafted user input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-0161","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2019:2125","RHSA-2019:2437"],"bugzilla":"1694065","bugzilla_description":"CVE-2019-0161 edk2: stack overflow in XHCI causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-400","affected_packages":["redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-1087","severity":"important","public_date":"2018-05-08T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1347","RHSA-2018:1710","RHSA-2018:1348","RHSA-2018:1524","RHSA-2018:1711","RHSA-2018:1345","RHSA-2018:1355"],"bugzilla":"1566837","bugzilla_description":"CVE-2018-1087 Kernel: KVM: error in exception handling leads to wrong debug stack value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.25.4.el7","redhat-virtualization-host-0:3.6-20180521.0","kernel-0:3.10.0-862.2.3.el7","rhev-hypervisor7-0:7.3-20180521.1.el7ev","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","rhev-hypervisor7-0:7.3-20180521.1.el6ev","kernel-0:3.10.0-327.66.3.el7","kernel-0:3.10.0-514.48.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1087.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-8897","severity":"moderate","public_date":"2018-05-08T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1319","RHSA-2018:1349","RHSA-2018:1347","RHSA-2018:1710","RHSA-2018:1348","RHSA-2018:1524","RHSA-2018:1711","RHSA-2018:1345","RHSA-2018:1346","RHSA-2018:1354","RHSA-2018:1355","RHSA-2018:1352","RHSA-2018:1353","RHSA-2018:1350","RHSA-2018:1351"],"bugzilla":"1567074","bugzilla_description":"CVE-2018-8897 Kernel: error in exception handling leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.25.4.el7","redhat-virtualization-host-0:3.6-20180521.0","kernel-0:2.6.32-696.28.1.el6","kernel-0:2.6.18-431.el5","kernel-0:2.6.32-504.68.2.el6","kernel-rt-1:3.10.0-693.25.4.rt56.613.el6rt","kernel-0:3.10.0-514.48.3.el7","kernel-0:2.6.32-358.88.2.el6","kernel-0:2.6.32-573.55.2.el6","kernel-0:2.6.32-431.89.2.el6","kernel-0:3.10.0-862.2.3.el7","rhev-hypervisor7-0:7.3-20180521.1.el7ev","kernel-0:2.6.18-348.39.2.el5","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","rhev-hypervisor7-0:7.3-20180521.1.el6ev","kernel-0:3.10.0-327.66.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8897.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1067","severity":"moderate","public_date":"2018-04-25T17:51:00Z","advisories":["RHSA-2020:2562","RHSA-2018:1248","RHSA-2018:1249","RHSA-2019:0877","RHSA-2018:2643","RHSA-2018:1247","RHSA-2018:1251"],"bugzilla":"1550671","bugzilla_description":"CVE-2018-1067 undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-113","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:4.2-20180828.0.el7","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-9251","severity":"low","public_date":"2018-04-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1827"],"bugzilla":"1565318","bugzilla_description":"CVE-2018-9251 libxml2: infinite loop in xz_decomp function in xzlib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["redhat-coreos-43.82.202007300301.0","libxml2-0:2.9.7-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2017-12196","severity":"moderate","public_date":"2018-03-12T15:56:00Z","advisories":["RHSA-2018:0480","RHSA-2020:2561","RHSA-2018:2405","RHSA-2018:1525","RHSA-2020:2562","RHSA-2018:0478","RHSA-2018:3768","RHSA-2018:0479","RHSA-2018:0481"],"bugzilla":"1503055","bugzilla_description":"CVE-2017-12196 undertow: Client can use bogus uri in Digest authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rhvm-appliance-0:4.2-20180504.0","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-1000115","severity":"moderate","public_date":"2018-03-02T00:00:00Z","advisories":["RHSA-2018:1627","RHSA-2018:2857","RHSA-2018:2331","RHBA-2018:2140","RHSA-2018:1593"],"bugzilla":"1551182","bugzilla_description":"CVE-2018-1000115 memcached: UDP server support allows spoofed traffic amplification DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-7489","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":["RHSA-2018:2938","RHSA-2019:3149","RHSA-2018:1448","RHSA-2018:1449","RHSA-2020:2562","RHSA-2018:1447","RHSA-2018:2939","RHSA-2018:2090","RHSA-2019:2858","RHSA-2018:1786","RHSA-2018:1451","RHSA-2018:2089","RHSA-2018:2088","RHSA-2018:1450"],"bugzilla":"1549276","bugzilla_description":"CVE-2018-7489 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-1000114","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":[],"bugzilla":"1549542","bugzilla_description":"CVE-2018-1000114 jenkins-plugin-promoted-builds: Promoted Builds Plugin allowed unauthorized users to run some promotion processes (SECURITY-746)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000114.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-8088","severity":"important","public_date":"2018-02-22T00:00:00Z","advisories":["RHSA-2018:2419","RHSA-2018:1448","RHSA-2018:1525","RHSA-2018:1449","RHSA-2018:1248","RHSA-2018:1447","RHSA-2018:1249","RHSA-2018:0630","RHSA-2018:2930","RHSA-2018:1323","RHSA-2018:1247","RHSA-2018:0592","RHSA-2018:0627","RHSA-2018:0628","RHSA-2020:2561","RHSA-2018:2669","RHSA-2019:2413","RHSA-2019:3140","RHSA-2018:0629","RHSA-2018:1575","RHSA-2018:1451","RHSA-2018:0582","RHSA-2018:2420","RHSA-2018:1251","RHSA-2018:2143","RHSA-2018:1450"],"bugzilla":"1548909","bugzilla_description":"CVE-2018-8088 slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el7","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el6","rhvm-appliance-0:4.2-20180504.0","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el5","rh-maven35-slf4j-0:1.7.25-1.3.el7","slf4j-0:1.7.4-4.el7_4","eap7-slf4j-0:1.7.22-3.redhat_2.1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6","eap7-slf4j-0:1.7.22-3.redhat_2.1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8088.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-3728","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:1264","RHSA-2018:1263"],"bugzilla":"1545893","bugzilla_description":"CVE-2018-3728 hoek: Prototype pollution in utilities function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rhmap46/redis:2.8.21-40"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3728.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2017-15089","severity":"important","public_date":"2018-02-12T15:00:00Z","advisories":["RHSA-2018:0480","RHSA-2020:2561","RHSA-2018:0478","RHSA-2018:0479","RHSA-2018:0501","RHSA-2019:1326","RHSA-2018:0294","RHSA-2018:0481"],"bugzilla":"1503610","bugzilla_description":"CVE-2017-15089 infinispan: Unsafe deserialization of malicious object injected into data cache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2017-12174","severity":"important","public_date":"2018-02-05T00:00:00Z","advisories":["RHSA-2018:0270","RHSA-2018:0271","RHSA-2018:0480","RHSA-2020:2561","RHSA-2018:0478","RHSA-2018:0269","RHSA-2018:0479","RHSA-2018:0268","RHSA-2018:0275","RHSA-2018:0481"],"bugzilla":"1498378","bugzilla_description":"CVE-2017-12174 artemis/hornetq: memory exhaustion via UDP and JGroups discovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12174.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1041","severity":"moderate","public_date":"2018-02-05T00:00:00Z","advisories":["RHSA-2018:0270","RHSA-2018:0271","RHSA-2018:0269","RHSA-2018:0268","RHSA-2018:0275"],"bugzilla":"1530457","bugzilla_description":"CVE-2018-1041 jboss-remoting: High CPU Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1041.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1000057","severity":"low","public_date":"2018-02-05T00:00:00Z","advisories":[],"bugzilla":"1542718","bugzilla_description":"CVE-2018-1000057 jenkins-plugin-credentials-binding: improper masking of the secret provided to the build in rare circumstances","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000057.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-15698","severity":"moderate","public_date":"2018-01-31T00:00:00Z","advisories":["RHSA-2018:0465","RHSA-2018:0466"],"bugzilla":"1540824","bugzilla_description":"CVE-2017-15698 tomcat-native: Mishandling of client certificates can allow for OCSP check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-299","affected_packages":["tomcat-native-0:1.2.8-11.redhat_11.ep7.el6","tomcat-native-0:1.2.8-11.redhat_11.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-1304","severity":"moderate","public_date":"2018-01-31T00:00:00Z","advisories":["RHSA-2019:2205","RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1447","RHSA-2018:0465","RHSA-2018:0466","RHSA-2018:1451","RHSA-2018:1320","RHSA-2018:1450","RHSA-2018:2939"],"bugzilla":"1548289","bugzilla_description":"CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["tomcat-0:7.0.76-9.el7","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","jbossweb-0:7.5.28-1.Final_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000018","severity":"moderate","public_date":"2018-01-24T00:00:00Z","advisories":[],"bugzilla":"1537904","bugzilla_description":"CVE-2018-1000018 ovirt-hosted-engine-setup: root password exposed in log file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000018.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-5968","severity":"moderate","public_date":"2018-01-18T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2019:3149","RHSA-2018:1525","RHSA-2018:0478","RHSA-2018:0479","RHSA-2019:2858","RHSA-2018:0481"],"bugzilla":"1538332","bugzilla_description":"CVE-2018-5968 jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rhvm-appliance-0:4.2-20180504.0","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5968.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-1048","severity":"moderate","public_date":"2018-01-15T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2018:0478","RHSA-2018:0479","RHSA-2018:0481"],"bugzilla":"1534343","bugzilla_description":"CVE-2018-1048 undertow: ALLOW_ENCODED_SLASH option not taken into account in the AjpRequestParser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"8.6"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2017-12189","severity":"important","public_date":"2018-01-03T00:00:00Z","advisories":["RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003"],"bugzilla":"1499631","bugzilla_description":"CVE-2017-12189 jboss: unsafe chown of server.log in jboss init script allows privilege escalation (Incomplete fix for CVE-2016-8656)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12189.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1047","severity":"moderate","public_date":"2017-12-17T00:00:00Z","advisories":["RHSA-2018:2938","RHSA-2018:1248","RHSA-2018:1249","RHSA-2018:1247","RHSA-2018:1251"],"bugzilla":"1528361","bugzilla_description":"CVE-2018-1047 undertow: Path traversal in ServletResourceManager class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-22","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1047.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"8.6"},{"CVE":"CVE-2017-7559","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2018:1322","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1481665","bugzilla_description":"CVE-2017-7559 undertow: HTTP Request smuggling vulnerability (incomplete fix of CVE-2017-2666)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7559.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-12165","severity":"low","public_date":"2017-12-13T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2018:1322","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1490301","bugzilla_description":"CVE-2017-12165 undertow: improper whitespace parsing leading to potential HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12165.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2017-17485","severity":"important","public_date":"2017-12-12T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2018:1448","RHSA-2019:3892","RHSA-2019:1797","RHSA-2018:1449","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2018:0116","RHSA-2018:0480","RHSA-2018:2930","RHSA-2019:2858","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1528565","bugzilla_description":"CVE-2017-17485 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","rh-eclipse46-jackson-databind-0:2.6.3-2.6.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12195","severity":"moderate","public_date":"2017-11-28T00:00:00Z","advisories":["RHSA-2017:3188","RHSA-2017:3389"],"bugzilla":"1501986","bugzilla_description":"CVE-2017-12195 OpenShift Enterprise 3: authentication bypass for elasticsearch with external routes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["openshift-elasticsearch-plugin-0:2.4.4.17__redhat_1-3.el7","openshift-elasticsearch-plugin-0:2.4.1.11__redhat_1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-15095","severity":"important","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:3149","RHSA-2017:3190","RHSA-2018:1448","RHSA-2019:3892","RHSA-2018:1449","RHSA-2018:0577","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2017:3189","RHSA-2018:0480","RHSA-2019:2858","RHSA-2018:0576","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1506612","bugzilla_description":"CVE-2017-15095 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","rh-eclipse47-jackson-databind-0:2.7.6-3.3.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","rh-eclipse46-jackson-databind-0:2.6.3-2.4.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12159","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1484111","bugzilla_description":"CVE-2017-12159 keycloak: CSRF token fixation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-12160","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1484154","bugzilla_description":"CVE-2017-12160 keycloak: resource privilege extension via access token in oauth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-12158","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1489161","bugzilla_description":"CVE-2017-12158 keycloak: reflected XSS using HOST header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-12197","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2904","RHSA-2017:2905","RHSA-2017:2906"],"bugzilla":"1503103","bugzilla_description":"CVE-2017-12197 libpam4j: Account check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-12629","severity":"critical","public_date":"2017-10-12T00:00:00Z","advisories":["RHSA-2020:2561","RHSA-2018:0005","RHSA-2018:0002","RHSA-2017:3452","RHSA-2017:3244","RHSA-2017:3123","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:3451","RHSA-2017:3124"],"bugzilla":"1501529","bugzilla_description":"CVE-2017-12629 Solr: Code execution via entity expansion","cvss_score":10.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-138","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-lucene-solr-0:5.3.1-4.redhat_2.1.ep7.el6","eap7-lucene-solr-0:5.3.1-4.redhat_2.1.ep7.el7","rh-java-common-lucene5-0:5.4.1-2.4.el7","rh-java-common-lucene5-0:5.4.1-2.4.el6","rh-java-common-lucene-0:4.8.0-6.9.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6","rh-java-common-lucene-0:4.8.0-6.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-2582","severity":"moderate","public_date":"2017-09-26T00:00:00Z","advisories":["RHSA-2019:0136","RHSA-2019:0137","RHSA-2017:3220","RHSA-2017:3218","RHSA-2017:2811","RHSA-2017:3219","RHSA-2017:3216","RHSA-2017:2810","RHSA-2017:3217","RHSA-2018:2743","RHSA-2017:2808","RHSA-2018:2742","RHSA-2017:2809","RHSA-2018:2741","RHSA-2019:0139","RHSA-2018:2740"],"bugzilla":"1410481","bugzilla_description":"CVE-2017-2582 picketlink, keycloak: SAML request parser replaces special strings with system properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["jboss-ec2-eap-0:7.5.18-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-7536","severity":"moderate","public_date":"2017-09-26T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2018:3817","RHSA-2017:3141","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:2811","RHSA-2017:3458","RHSA-2017:2810","RHSA-2018:2743","RHSA-2017:2808","RHSA-2018:2742","RHSA-2017:2809","RHSA-2018:2741","RHSA-2018:2740"],"bugzilla":"1465573","bugzilla_description":"CVE-2017-7536 hibernate-validator: Privilege escalation when running under the security manager","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","rhvm-appliance-0:20171102.0-1","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2017-12617","severity":"important","public_date":"2017-09-21T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2018:0270","RHSA-2018:0271","RHSA-2017:3080","RHSA-2018:0269","RHSA-2018:0465","RHSA-2018:0268","RHSA-2018:0466","RHSA-2018:0275","RHSA-2017:3113","RHSA-2018:2939","RHSA-2017:3114"],"bugzilla":"1494283","bugzilla_description":"CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat6-0:6.0.41-19_patch_04.ep6.el7","tomcat7-0:7.0.54-28_patch_05.ep6.el7","tomcat6-0:6.0.41-19_patch_04.ep6.el6","tomcat7-0:7.0.54-28_patch_05.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","tomcat6-0:6.0.24-111.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12617.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-14503","severity":"low","public_date":"2017-09-16T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1494449","bugzilla_description":"CVE-2017-14503 libarchive: Out-of-bounds read in lha_read_data_none","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14503.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12167","severity":"moderate","public_date":"2017-09-14T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2018:0005","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1491612","bugzilla_description":"CVE-2017-12167 EAP-7: Wrong privileges on multiple property files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-14108","severity":"low","public_date":"2017-09-02T00:00:00Z","advisories":[],"bugzilla":"1488335","bugzilla_description":"CVE-2017-14108 gedit: CPU consumption via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14108.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15047","severity":"low","public_date":"2017-08-31T00:00:00Z","advisories":[],"bugzilla":"1499152","bugzilla_description":"CVE-2017-15047 redis: Insufficient input validation in the clusterLoadConfig function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15047.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7561","severity":"moderate","public_date":"2017-08-22T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2018:0005","RHSA-2018:0478","RHSA-2018:0479","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2018:0481"],"bugzilla":"1483823","bugzilla_description":"CVE-2017-7561 resteasy: Vary header not added by CORS filter leading to cache poisoning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7561.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-9951","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1471970","bugzilla_description":"CVE-2017-9951 memcached: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9951.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-7525","severity":"important","public_date":"2017-07-14T00:00:00Z","advisories":["RHSA-2018:1449","RHSA-2017:3141","RHSA-2017:2477","RHSA-2017:1840","RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2637","RHSA-2017:2638","RHSA-2018:0294","RHSA-2019:3149","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:2547","RHSA-2017:3458","RHSA-2017:2546","RHSA-2017:1835","RHSA-2017:1834","RHSA-2017:1837","RHSA-2017:1836","RHSA-2019:0910","RHSA-2019:2858","RHSA-2017:1839","RHSA-2018:0342","RHSA-2018:1450"],"bugzilla":"1462702","bugzilla_description":"CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["devtoolset-4-jackson-databind-0:2.5.0-2.4.el6","openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-eclipse46-jackson-databind-0:2.6.3-2.3.el7","devtoolset-4-jackson-databind-0:2.5.0-2.4.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:20171102.0-1","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7525.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-2595","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:1550","RHSA-2017:3456","RHSA-2017:1552","RHSA-2017:1551","RHSA-2017:1411","RHSA-2017:3454","RHSA-2017:1410","RHSA-2017:3455","RHSA-2017:1412","RHSA-2017:3458","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1409"],"bugzilla":"1413028","bugzilla_description":"CVE-2017-2595 wildfly: Arbitrary file read via path traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2595.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2017-2666","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:1412","RHSA-2017:3458","RHSA-2017:1409","RHSA-2017:3456","RHSA-2017:1411","RHSA-2017:3454","RHSA-2017:1410","RHSA-2017:3455"],"bugzilla":"1436163","bugzilla_description":"CVE-2017-2666 undertow: HTTP Request smuggling vulnerability due to permitting invalid characters in HTTP requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2666.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-2670","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:1412","RHSA-2017:3458","RHSA-2018:0501","RHSA-2017:3244","RHSA-2017:1409","RHSA-2017:3456","RHSA-2017:1411","RHSA-2017:3454","RHSA-2017:1410","RHSA-2017:3455"],"bugzilla":"1438885","bugzilla_description":"CVE-2017-2670 undertow: IO thread DoS via unclean Websocket closing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2670.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5664","severity":"important","public_date":"2017-06-06T00:00:00Z","advisories":["RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:3080","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2637","RHSA-2017:2638","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:1809"],"bugzilla":"1459158","bugzilla_description":"CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["tomcat-0:7.0.69-12.el7_3","tomcat8-0:8.0.36-24.ep7.el7","tomcat7-0:7.0.70-22.ep7.el6","tomcat8-0:8.0.36-24.ep7.el6","jbossweb-0:7.5.24-1.Final_redhat_1.1.ep6.el7","tomcat7-0:7.0.70-22.ep7.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el6","tomcat6-0:6.0.24-111.el6_9","tomcat6-0:6.0.41-17_patch_04.ep6.el7","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","tomcat6-0:6.0.41-17_patch_04.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000127","severity":"moderate","public_date":"2017-04-27T00:00:00Z","advisories":["RHSA-2018:2290"],"bugzilla":"1555064","bugzilla_description":"CVE-2018-1000127 memcached: Integer Overflow in items.c:item_free()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["memcached-0:1.4.39-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000127.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-16881","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHBA-2019:2501","RHSA-2019:2110","RHSA-2019:2439","RHSA-2019:2437"],"bugzilla":"1658366","bugzilla_description":"CVE-2018-16881 rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190","affected_packages":["rsyslog-0:8.24.0-41.el7_7","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","rsyslog-0:8.24.0-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16881.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5645","severity":"important","public_date":"2017-04-02T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2635","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1417","RHSA-2017:1801","RHSA-2017:2637","RHSA-2017:2638","RHSA-2017:2808","RHSA-2017:2809"],"bugzilla":"1443635","bugzilla_description":"CVE-2017-5645 log4j: Socket receiver deserialization vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-java-common-log4j-0:1.2.17-15.15.el6","log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7","rh-java-common-log4j-0:1.2.17-15.15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-0367","severity":"low","public_date":"2017-03-26T00:00:00Z","advisories":[],"bugzilla":"1569791","bugzilla_description":"CVE-2017-0367 mediawiki: unsafe use of temporary directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9589","severity":"moderate","public_date":"2017-03-22T00:00:00Z","advisories":["RHSA-2017:0830","RHSA-2017:0873","RHSA-2017:0832","RHSA-2017:3458","RHSA-2017:0876","RHSA-2017:0831","RHSA-2017:0834","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:0872","RHSA-2017:3455"],"bugzilla":"1404782","bugzilla_description":"CVE-2016-9589 wildfly: ParseState headerValuesCache can be exploited to fill heap with garbage","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9589.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-9970","severity":"moderate","public_date":"2017-02-20T00:00:00Z","advisories":["RHSA-2017:2547","RHSA-2017:2811","RHSA-2017:2546","RHSA-2017:2810","RHSA-2017:2904","RHSA-2017:3141","RHSA-2017:2808","RHSA-2017:2809","RHSA-2017:2905","RHSA-2017:2906","RHSA-2018:0294"],"bugzilla":"1455566","bugzilla_description":"CVE-2014-9970 jasypt: Vulnerable to timing attack against the password hash comparison","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el7","rh-sso7-keycloak-0:2.5.14-1.Final_redhat_1.1.jbcs.el6","rhvm-appliance-0:20171102.0-1","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9970.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2017-3163","severity":"moderate","public_date":"2017-02-15T00:00:00Z","advisories":["RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1447","RHSA-2018:1451","RHSA-2018:1450"],"bugzilla":"1454783","bugzilla_description":"CVE-2017-3163 solr: Directory traversal via Index Replication HTTP API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3163.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-9578","severity":"moderate","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:0549","RHSA-2017:0254","RHSA-2017:0253","RHSA-2017:0552"],"bugzilla":"1399566","bugzilla_description":"CVE-2016-9578 spice: Remote DoS via crafted message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-770","affected_packages":["spice-server-0:0.12.4-13.el6_8.2","spice-0:0.12.4-20.el7_3","rhevm-appliance-0:20170307.0-1","redhat-virtualization-host-0:4.0-20170307.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9578.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9577","severity":"moderate","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:0549","RHSA-2017:0254","RHSA-2017:0253","RHSA-2017:0552"],"bugzilla":"1401603","bugzilla_description":"CVE-2016-9577 spice: Buffer overflow in main_channel_alloc_msg_rcv_buf when reading large messages","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-20->CWE-122","affected_packages":["spice-server-0:0.12.4-13.el6_8.2","spice-0:0.12.4-20.el7_3","rhevm-appliance-0:20170307.0-1","redhat-virtualization-host-0:4.0-20170307.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-0368","severity":"low","public_date":"2017-01-24T00:00:00Z","advisories":[],"bugzilla":"1569796","bugzilla_description":"CVE-2017-0368 mediawiki: Make rawHTML mode not apply to system messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0368.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-8627","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:0171","RHSA-2017:0170","RHSA-2017:0250","RHSA-2017:0173","RHSA-2017:0172","RHSA-2017:3456","RHSA-2017:0245","RHSA-2017:3454","RHSA-2017:0244","RHSA-2017:3455","RHSA-2017:0247","RHSA-2017:0246","RHSA-2017:3458"],"bugzilla":"1388240","bugzilla_description":"CVE-2016-8627 admin-cli: Potential EAP resource starvation DOS attack via GET requests for server log files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-5357","severity":"low","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1413901","bugzilla_description":"CVE-2017-5357 ed: Invalid free in regex.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5357.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9606","severity":"moderate","public_date":"2016-12-15T00:00:00Z","advisories":["RHSA-2018:2913","RHSA-2017:1260","RHSA-2017:1253","RHSA-2018:2909","RHSA-2017:1255","RHSA-2017:1254","RHSA-2017:1675","RHSA-2017:1411","RHSA-2017:1256","RHSA-2017:1410","RHSA-2017:1676","RHSA-2017:1412","RHSA-2017:1409"],"bugzilla":"1400644","bugzilla_description":"CVE-2016-9606 Resteasy: Yaml unmarshalling vulnerable to RCE","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["resteasy-0:2.3.19-1.Final_redhat_1.1.ep6.el5","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","jboss-ec2-eap-0:7.5.15-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-0366","severity":"low","public_date":"2016-11-27T00:00:00Z","advisories":[],"bugzilla":"1569788","bugzilla_description":"CVE-2017-0366 mediawiki: SVG filter evasion using default attribute values in DTD declaration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0366.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-6816","severity":"moderate","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0247","RHSA-2017:0456","RHSA-2017:0246","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:0935","RHSA-2017:0527","RHSA-2017:0250","RHSA-2017:0245","RHSA-2017:0244"],"bugzilla":"1397484","bugzilla_description":"CVE-2016-6816 tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-444","affected_packages":["tomcat-0:7.0.69-11.el7_3","tomcat6-0:6.0.24-105.el6_8","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","jbossweb-0:7.5.20-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-7061","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":["RHSA-2017:0171","RHSA-2017:0170","RHSA-2017:0250","RHSA-2017:0173","RHSA-2017:0172","RHSA-2017:3456","RHSA-2017:0245","RHSA-2017:3454","RHSA-2017:0244","RHSA-2017:3455","RHSA-2017:0247","RHSA-2017:0246","RHSA-2017:3458"],"bugzilla":"1380852","bugzilla_description":"CVE-2016-7061 EAP: Sensitive data can be exposed at the server level in domain mode","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el6","eap7-jboss-ec2-eap-0:7.0.4-5.GA_redhat_2.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2017-0362","severity":"low","public_date":"2016-11-04T00:00:00Z","advisories":[],"bugzilla":"1569737","bugzilla_description":"CVE-2017-0362 mediawiki: \"Mark all pages visited\" on the watchlist does not require a CSRF token","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-2121","severity":"low","public_date":"2016-11-01T00:00:00Z","advisories":["RHSA-2017:3226"],"bugzilla":"1390588","bugzilla_description":"CVE-2016-2121 redis: weak permissions on sensitive files","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["redis-0:3.0.6-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2121.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-8704","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390510","bugzilla_description":"CVE-2016-8704 memcached: Server append/prepend remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-8705","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390511","bugzilla_description":"CVE-2016-8705 memcached: Server update remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-8706","severity":"moderate","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2016:2819"],"bugzilla":"1390512","bugzilla_description":"CVE-2016-8706 memcached: SASL authentication remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["memcached-0:1.4.15-10.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-6796","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1550","RHSA-2017:1552","RHSA-2017:2247","RHSA-2017:1551"],"bugzilla":"1390515","bugzilla_description":"CVE-2016-6796 tomcat: security manager bypass via JSP Servlet config parameters","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","jbossweb-0:7.5.23-1.Final_redhat_1.1.ep6.el7","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-5018","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1550","RHSA-2017:1552","RHSA-2017:2247","RHSA-2017:1551"],"bugzilla":"1390525","bugzilla_description":"CVE-2016-5018 tomcat: security manager bypass via IntrospectHelper utility function","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","jbossweb-0:7.5.23-1.Final_redhat_1.1.ep6.el7","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5018.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-5405","severity":"low","public_date":"2016-10-26T00:00:00Z","advisories":["RHSA-2016:2594","RHSA-2016:2765"],"bugzilla":"1358865","bugzilla_description":"CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["389-ds-base-0:1.3.5.10-11.el7","389-ds-base-0:1.2.11.15-84.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2016-8657","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2017:0827","RHSA-2017:0826","RHSA-2017:0829","RHSA-2017:0828","RHSA-2018:1609"],"bugzilla":"1400343","bugzilla_description":"CVE-2016-8657 jboss: jbossas writable config files allow privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-732","affected_packages":["jbossas-0:5.2.0-23.ep5.el5","jbossas-0:5.2.0-23.ep5.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-8339","severity":"moderate","public_date":"2016-09-30T00:00:00Z","advisories":[],"bugzilla":"1381244","bugzilla_description":"CVE-2016-8339 redis: OOB write vulnerability in handling of client-output-buffer-limit option during the CONFIG SET command","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8339.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2016-4978","severity":"moderate","public_date":"2016-09-23T00:00:00Z","advisories":["RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1447","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:3458","RHSA-2017:1835","RHSA-2017:1834","RHSA-2017:1837","RHSA-2017:1836","RHSA-2018:1451","RHSA-2018:1450"],"bugzilla":"1379207","bugzilla_description":"CVE-2016-4978 Apache ActiveMQ Artemis: Deserialization of untrusted input vulnerability","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el7","hornetq-0:2.3.25-26.SP24_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.6"},{"CVE":"CVE-2016-7046","severity":"important","public_date":"2016-09-15T00:00:00Z","advisories":["RHSA-2016:2640","RHSA-2016:2642","RHSA-2017:3458","RHSA-2016:2641","RHSA-2017:3456","RHSA-2016:2657","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1376646","bugzilla_description":"CVE-2016-7046 undertow: Long URL proxy request lead to java.nio.BufferOverflowException and DoS","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-119","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.3-3.GA_redhat_2.ep7.el6","eap7-jboss-ec2-eap-0:7.0.3-3.GA_redhat_2.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7046.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-8656","severity":"important","public_date":"2016-09-15T00:00:00Z","advisories":["RHSA-2017:0246","RHSA-2017:0832","RHSA-2017:3458","RHSA-2017:0831","RHSA-2017:0834","RHSA-2017:0250","RHSA-2017:0245","RHSA-2017:3454","RHSA-2018:1609","RHSA-2017:0244","RHSA-2017:3455"],"bugzilla":"1400344","bugzilla_description":"CVE-2016-8656 jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":["jbossas-0:5.2.0-23.ep5.el5","eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","eap7-jboss-ec2-eap-0:7.0.5-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8656.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-4993","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2016:1838","RHSA-2016:1839","RHSA-2017:3456","RHSA-2016:1840","RHSA-2016:1841","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1344321","bugzilla_description":"CVE-2016-4993 eap: HTTP header injection / response splitting","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-113","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-0365","severity":"moderate","public_date":"2016-09-06T00:00:00Z","advisories":[],"bugzilla":"1569782","bugzilla_description":"CVE-2017-0365 mediawiki: XSS in SearchHighlighter::highlightText()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2016-6346","severity":"moderate","public_date":"2016-09-01T00:00:00Z","advisories":["RHSA-2019:1222","RHSA-2018:0005","RHSA-2017:1675","RHSA-2017:1676","RHSA-2017:0517","RHSA-2017:0827","RHSA-2018:0002","RHSA-2017:0826","RHSA-2017:0829","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:0828","RHSA-2018:2143"],"bugzilla":"1372120","bugzilla_description":"CVE-2016-6346 RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-3110","severity":"moderate","public_date":"2016-08-22T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:1650","RHSA-2016:2055","RHSA-2016:2054","RHSA-2016:1648","RHSA-2016:1649"],"bugzilla":"1326320","bugzilla_description":"CVE-2016-3110 mod_cluster: remotely Segfault Apache http server","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["mod_cluster-0:1.2.13-1.Final_redhat_1.1.ep6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3110.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2016-10517","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":[],"bugzilla":"1515245","bugzilla_description":"CVE-2016-10517 redis: cross-protocol attack using malicious HTTP request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10517.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2013-7458","severity":"low","public_date":"2016-07-28T00:00:00Z","advisories":[],"bugzilla":"1363670","bugzilla_description":"CVE-2013-7458 redis: world-readable ~/.rediscli_history","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7458.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2016-5406","severity":"moderate","public_date":"2016-07-26T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2016:1838","RHSA-2016:1839","RHSA-2017:3456","RHSA-2016:1840","RHSA-2016:1841","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1359014","bugzilla_description":"CVE-2016-5406 EAP7 Privilege escalation when managing domain including earlier version slaves","cvss_score":7.0,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:C/A:C","CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5406.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-1000111","severity":"important","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1978","RHSA-2018:0273"],"bugzilla":"1357345","bugzilla_description":"CVE-2016-1000111 Python Twisted: sets environmental variable based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["python-twisted-web-0:8.2.0-5.el6_8","python-twisted-web-0:12.1.0-5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-1000027","severity":"moderate","public_date":"2016-07-08T00:00:00Z","advisories":[],"bugzilla":"1357929","bugzilla_description":"CVE-2016-1000027 spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000027.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-5007","severity":"moderate","public_date":"2016-07-07T00:00:00Z","advisories":[],"bugzilla":"1353902","bugzilla_description":"CVE-2016-5007 spring: Path matching inconsistency","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-41","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5007.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-6311","severity":"moderate","public_date":"2016-07-03T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1362735","bugzilla_description":"CVE-2016-6311 EAP7: Internal IP address disclosed on redirect when request header Host field is not set","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-2141","severity":"critical","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:1330","RHSA-2016:2035","RHSA-2016:1374","RHSA-2016:1331","RHSA-2016:1332","RHSA-2016:1376","RHSA-2016:1333","RHSA-2016:1432","RHSA-2016:1328","RHSA-2016:1329","RHSA-2016:1439","RHSA-2016:1345","RHSA-2016:1334","RHSA-2016:1433","RHSA-2016:1389","RHSA-2016:1346","RHSA-2016:1434","RHSA-2016:1347","RHSA-2016:1435"],"bugzilla":"1313589","bugzilla_description":"CVE-2016-2141 JGroups: Authorization bypass","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["jgroups-1:3.2.16-1.Final_redhat_1.1.ep6.el6","jgroups-1:3.2.16-1.Final_redhat_1.1.ep6.el5","jgroups-1:3.2.16-1.Final_redhat_1.1.ep6.el7","jgroups-1:2.6.22-2.ep5.el5","eap7-jgroups-0:3.6.8-3.Final_redhat_3.1.ep7.el7","jgroups-1:2.6.22-2.ep5.el6","eap7-jgroups-0:3.6.8-3.Final_redhat_3.1.ep7.el6","jboss-ec2-eap-0:7.5.9-2.Final_redhat_2.ep6.el6","jgroups-1:2.6.22-2.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2141.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-3092","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:2068","RHSA-2017:0456","RHSA-2017:0455","RHSA-2016:2069","RHSA-2017:0457","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:2071","RHSA-2016:2070","RHSA-2016:2072","RHSA-2016:2599"],"bugzilla":"1349468","bugzilla_description":"CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","jboss-ec2-eap-0:7.5.11-1.Final_redhat_1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3092.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-10739","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":["RHSA-2019:3513","RHSA-2019:2118","RHBA-2019:3303"],"bugzilla":"1347549","bugzilla_description":"CVE-2016-10739 glibc: getaddrinfo should reject IP addresses with trailing characters","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","glibc-0:2.17-292.el7","glibc-0:2.28-72.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10739.json"},{"CVE":"CVE-2015-5174","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2045","RHSA-2016:1432","RHSA-2015:2660","RHBA-2016:0090","RHSA-2015:2661","RHSA-2016:1433","RHSA-2016:2599","RHSA-2016:1434","RHSA-2016:1435","RHSA-2015:2659"],"bugzilla":"1265698","bugzilla_description":"CVE-2015-5174 tomcat: URL Normalization issue","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.54-21_patch_05.ep6.el5","tomcat7-0:7.0.54-21_patch_05.ep6.el7","tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-21_patch_05.ep6.el6","tomcat7-0:7.0.59-42_patch_01.ep7.el6","tomcat8-0:8.0.18-52_patch_01.ep7.el6","jboss-ec2-eap-0:7.5.9-2.Final_redhat_2.ep6.el6","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5174.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-2094","severity":"moderate","public_date":"2016-02-17T00:00:00Z","advisories":["RHSA-2016:0595","RHSA-2016:0596","RHSA-2016:0597","RHSA-2016:0598","RHSA-2016:0599"],"bugzilla":"1308465","bugzilla_description":"CVE-2016-2094 EAP: HTTPS NIO connector uses no timeout when reading SSL handshake from client","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-358","affected_packages":["jboss-ec2-eap-0:7.5.7-2.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2094.json"},{"CVE":"CVE-2017-0361","severity":"moderate","public_date":"2016-01-29T00:00:00Z","advisories":[],"bugzilla":"1569705","bugzilla_description":"CVE-2017-0361 mediawiki: information disclosure in the api.log","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0361.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-6644","severity":"moderate","public_date":"2016-01-01T00:00:00Z","advisories":["RHSA-2017:2811","RHSA-2018:2927","RHSA-2017:1832","RHSA-2017:2810","RHSA-2017:2808","RHSA-2017:2809"],"bugzilla":"1444015","bugzilla_description":"CVE-2015-6644 bouncycastle: Information disclosure in GCMBlockCipher","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6644.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-5104","severity":"low","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1339988","bugzilla_description":"CVE-2016-5104 libimobiledevice: Sockets listening on INADDR_ANY","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5104.json"},{"CVE":"CVE-2017-0364","severity":"low","public_date":"2015-12-22T00:00:00Z","advisories":[],"bugzilla":"1569779","bugzilla_description":"CVE-2017-0364 mediawiki: redirects to any interwiki link in special search","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0364.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-5254","severity":"moderate","public_date":"2015-12-08T00:00:00Z","advisories":["RHSA-2016:2035","RHSA-2016:2036","RHSA-2016:0489"],"bugzilla":"1291292","bugzilla_description":"CVE-2015-5254 JMS ObjectMessage: unsafe deserialization","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["activemq-0:5.9.0-6.redhat.611454.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5254.json"},{"CVE":"CVE-2015-7544","severity":"important","public_date":"2015-12-07T00:00:00Z","advisories":["RHSA-2016:0426"],"bugzilla":"1269588","bugzilla_description":"CVE-2015-7544 redhat-support-plugin-rhev: Remote code execution by SuperUser role on hosts in RHEV","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":["redhat-support-plugin-rhev-0:3.6.0-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7544.json"},{"CVE":"CVE-2015-5304","severity":"moderate","public_date":"2015-12-02T00:00:00Z","advisories":["RHSA-2015:2540","RHSA-2015:2541","RHSA-2015:2542","RHSA-2015:2538","RHSA-2015:2539"],"bugzilla":"1273046","bugzilla_description":"CVE-2015-5304 JBoss EAP: missing authorization check for Monitor/Deployer/Auditor role when shutting down server","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-862","affected_packages":["jboss-ec2-eap-0:7.5.5-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5304.json"},{"CVE":"CVE-2015-8080","severity":"moderate","public_date":"2015-11-06T00:00:00Z","advisories":["RHSA-2016:0095","RHSA-2016:0096","RHSA-2016:0097"],"bugzilla":"1278965","bugzilla_description":"CVE-2015-8080 redis: Integer wraparound in lua_struct.c causing stack-based buffer overflow","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["redis-0:2.8.24-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8080.json"},{"CVE":"CVE-2015-7501","severity":"critical","public_date":"2015-11-06T00:00:00Z","advisories":["RHSA-2016:1773","RHSA-2016:0040","RHSA-2015:2578","RHSA-2015:2534","RHSA-2015:2556","RHSA-2015:2557","RHSA-2015:2579","RHSA-2015:2535","RHSA-2015:2514","RHSA-2015:2536","RHSA-2015:2559","RHSA-2015:2537","RHSA-2015:2538","RHSA-2015:2516","RHSA-2015:2539","RHSA-2015:2517","RHSA-2015:2670","RHSA-2015:2671","RHSA-2020:4274","RHSA-2015:2521","RHSA-2015:2522","RHSA-2015:2500","RHSA-2015:2501","RHSA-2015:2523","RHSA-2015:2502","RHSA-2015:2524","RHSA-2015:2547","RHSA-2015:2548","RHSA-2015:2560","RHSA-2015:2540","RHSA-2015:2541","RHSA-2015:2542","RHSA-2016:0118"],"bugzilla":"1279330","bugzilla_description":"CVE-2015-7501 apache-commons-collections: InvokerTransformer code execution during deserialisation","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502->CWE-284","affected_packages":["jboss-ec2-eap-0:7.5.5-3.Final_redhat_3.ep6.el6","apache-commons-collections-0:3.2.1-22.el7_2","jakarta-commons-collections-0:3.2.1-3.5.el6_7","jenkins-0:1.651.2-1.el6op","rh-maven35-apache-commons-collections4-0:4.0-7.3.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el6","jakarta-commons-collections-0:3.2.1-5.ep5.el4","jakarta-commons-collections-0:3.2.1-5.ep5.el5","jakarta-commons-collections-0:3.2.1-5.ep5.el6","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el7","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el5","jakarta-commons-collections-0:3.2-2jpp.4","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7501.json"},{"CVE":"CVE-2015-5178","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:1904","RHSA-2015:1905","RHSA-2015:1906","RHSA-2015:1907"],"bugzilla":"1250552","bugzilla_description":"CVE-2015-5178 JBoss AS/WildFly: missing X-Frame-Options header leading to clickjacking","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["jboss-as-console-0:2.5.10-4.Final_redhat_2.1.ep6.el5","jboss-ec2-eap-0:7.5.4-1.Final_redhat_4.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5178.json"},{"CVE":"CVE-2015-5188","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:1904","RHSA-2015:1905","RHSA-2015:1906","RHSA-2015:1907"],"bugzilla":"1252885","bugzilla_description":"CVE-2015-5188 JBoss EAP: CSRF vulnerability in EAP & WildFly Web Console","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-352","affected_packages":["jboss-ec2-eap-0:7.5.4-1.Final_redhat_4.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5188.json"},{"CVE":"CVE-2015-5220","severity":"important","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:1904","RHSA-2015:1905","RHSA-2015:1906","RHSA-2015:1907","RHSA-2016:1519"],"bugzilla":"1255597","bugzilla_description":"CVE-2015-5220 OOME from EAP 6 http management console","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-770","affected_packages":["jboss-ec2-eap-0:7.5.4-1.Final_redhat_4.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5220.json"},{"CVE":"CVE-2015-5234","severity":"moderate","public_date":"2015-09-02T00:00:00Z","advisories":["RHSA-2016:0778","RHBA-2015:2457"],"bugzilla":"1233667","bugzilla_description":"CVE-2015-5234 icedtea-web: unexpected permanent authorization of unsigned applets","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-138","affected_packages":["icedtea-web-0:1.6.2-1.el6","icedtea-web-0:1.6.1-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5234.json"},{"CVE":"CVE-2015-5235","severity":"moderate","public_date":"2015-09-02T00:00:00Z","advisories":["RHSA-2016:0778","RHBA-2015:2457"],"bugzilla":"1233697","bugzilla_description":"CVE-2015-5235 icedtea-web: applet origin spoofing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-345","affected_packages":["icedtea-web-0:1.6.2-1.el6","icedtea-web-0:1.6.1-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5235.json"},{"CVE":"CVE-2015-5222","severity":"important","public_date":"2015-08-19T00:00:00Z","advisories":["RHSA-2015:1650"],"bugzilla":"1255120","bugzilla_description":"CVE-2015-5222 OpenShift3: Exec operations should be forbidden to privileged pods such as builder pods","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-862","affected_packages":["openshift-0:3.0.1.0-1.git.527.f8d5fed.el7ose"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5222.json"},{"CVE":"CVE-2017-0363","severity":"moderate","public_date":"2015-08-14T00:00:00Z","advisories":[],"bugzilla":"1569749","bugzilla_description":"CVE-2017-0363 mediawiki: open redirect to external sites","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0363.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-0369","severity":"moderate","public_date":"2015-08-06T00:00:00Z","advisories":[],"bugzilla":"1569800","bugzilla_description":"CVE-2017-0369 mediawiki: Improper Access Control to protected pages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0369.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2013-1793","severity":"moderate","public_date":"2015-07-23T00:00:00Z","advisories":[],"bugzilla":"916767","bugzilla_description":"CVE-2013-1793 openstack-utils: openstack-db insecure password creation for services","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1793.json"},{"CVE":"CVE-2015-3158","severity":"moderate","public_date":"2015-06-05T00:00:00Z","advisories":["RHSA-2015:1669","RHSA-2015:1673","RHSA-2015:1672","RHSA-2015:1671","RHSA-2015:1670"],"bugzilla":"1216123","bugzilla_description":"CVE-2015-3158 PicketLink: PicketLink IDP ignores role based authorization","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.3-1.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3158.json"},{"CVE":"CVE-2015-4335","severity":"important","public_date":"2015-06-04T00:00:00Z","advisories":["RHSA-2015:1676"],"bugzilla":"1228327","bugzilla_description":"CVE-2015-4335 redis: Lua sandbox escape and arbitrary code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["redis-0:2.8.21-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4335.json"},{"CVE":"CVE-2015-4411","severity":"low","public_date":"2015-06-04T00:00:00Z","advisories":[],"bugzilla":"1229706","bugzilla_description":"CVE-2015-4411 rubygem-moped: Denial of Service with crafted ObjectId string (incomplete fix for CVE-2015-4410)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4411.json"},{"CVE":"CVE-2015-4410","severity":"low","public_date":"2015-06-04T00:00:00Z","advisories":[],"bugzilla":"1229757","bugzilla_description":"CVE-2015-4410 rubygem-moped: Denial of Service with crafted ObjectId string","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4410.json"},{"CVE":"CVE-2015-2156","severity":"low","public_date":"2015-05-09T00:00:00Z","advisories":[],"bugzilla":"1222923","bugzilla_description":"CVE-2015-2156 netty: HttpOnly cookie bypass","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2156.json"},{"CVE":"CVE-2015-0298","severity":"important","public_date":"2015-05-05T00:00:00Z","advisories":["RHEA-2015:0955","RHEA-2015:0944","RHSA-2015:1642","RHEA-2015:0945","RHSA-2015:1641","RHSA-2015:0848","RHSA-2015:0847","RHSA-2015:0846"],"bugzilla":"1197769","bugzilla_description":"CVE-2015-0298 mod_cluster: JavaScript code injection is possible via MCMP mod_manager messages","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mod_cluster-0:1.3.1-5.Final_redhat_2.1.ep7.el7","mod_cluster-0:1.2.11-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0298.json"},{"CVE":"CVE-2015-1854","severity":"important","public_date":"2015-04-28T00:00:00Z","advisories":["RHSA-2015:0895"],"bugzilla":"1209573","bugzilla_description":"CVE-2015-1854 389-ds-base: access control bypass with modrdn","cvss_score":4.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-697->CWE-863","affected_packages":["389-ds-base-0:1.3.3.1-16.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1854.json"},{"CVE":"CVE-2014-8111","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:1642","RHSA-2015:1641","RHEA-2015:1770","RHSA-2015:0849","RHEA-2015:1771","RHSA-2015:0848","RHSA-2015:0847","RHSA-2015:0846"],"bugzilla":"1182591","bugzilla_description":"CVE-2014-8111 Tomcat mod_jk: information leak due to incorrect JkMount/JkUnmount directives processing","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["mod_jk-0:1.2.40-8.redhat_1.ep7.el6","mod_jk-0:1.2.40-3.redhat_2.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8111.json"},{"CVE":"CVE-2015-1849","severity":"low","public_date":"2015-03-23T00:00:00Z","advisories":["RHBA-2015:1073","RHEA-2015:1074","RHEA-2015:1075","RHEA-2015:1076","RHEA-2015:1077"],"bugzilla":"1208580","bugzilla_description":"CVE-2015-1849 JBoss EAP: LDAP bind password is being logged with TRACE log level","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.1-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1849.json"},{"CVE":"CVE-2014-3699","severity":"important","public_date":"2015-03-17T00:00:00Z","advisories":[],"bugzilla":"1152544","bugzilla_description":"CVE-2014-3699 eDeploy: Remote code execution due to cPickle deserialization of untrusted data","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3699.json"},{"CVE":"CVE-2014-3700","severity":"important","public_date":"2015-03-17T00:00:00Z","advisories":[],"bugzilla":"1152545","bugzilla_description":"CVE-2014-3700 eDeploy: Remote code execution due to eval() of untrusted data","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-95","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3700.json"},{"CVE":"CVE-2014-3701","severity":"critical","public_date":"2015-03-17T00:00:00Z","advisories":[],"bugzilla":"1152548","bugzilla_description":"CVE-2014-3701 eDeploy: Multiple tmp file race condition flaws","cvss_score":10.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3701.json"},{"CVE":"CVE-2014-3702","severity":"moderate","public_date":"2015-03-17T00:00:00Z","advisories":[],"bugzilla":"1153470","bugzilla_description":"CVE-2014-3702 eDeploy: Path traversal in the session parameter","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3702.json"},{"CVE":"CVE-2014-8174","severity":"low","public_date":"2015-03-17T00:00:00Z","advisories":[],"bugzilla":"1202972","bugzilla_description":"CVE-2014-8174 eDeploy enovance: use of HTTP to download sensitive files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-319","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8174.json"},{"CVE":"CVE-2014-3586","severity":"low","public_date":"2015-03-10T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0849","RHSA-2015:0848","RHSA-2015:0847","RHSA-2015:0846"],"bugzilla":"1126687","bugzilla_description":"CVE-2014-3586 JBoss AS CLI: Insecure default permissions on history file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["jboss-as-cli-0:7.5.0-8.Final_redhat_21.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3586.json"},{"CVE":"CVE-2014-3643","severity":"moderate","public_date":"2015-03-10T00:00:00Z","advisories":[],"bugzilla":"1143758","bugzilla_description":"CVE-2014-3643 jersey: XXE via parameter entities","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3643.json"},{"CVE":"CVE-2015-0271","severity":"important","public_date":"2015-03-05T00:00:00Z","advisories":["RHSA-2015:0645","RHSA-2015:0841","RHSA-2015:0840"],"bugzilla":"1193638","bugzilla_description":"CVE-2015-0271 OpenStack dashboard: log file arbitrary file retrieval","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-73->CWE-552","affected_packages":["redhat-access-plugin-openstack-0:5.0.1-0.el6ost","redhat-access-plugin-openstack-0:5.0.1-0.el7ost","redhat-access-plugin-openstack-0:6.0.3-0.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0271.json"},{"CVE":"CVE-2015-0254","severity":"important","public_date":"2015-02-27T00:00:00Z","advisories":["RHSA-2016:0121","RHSA-2016:0122","RHSA-2016:1376","RHSA-2016:0123","RHSA-2016:1838","RHSA-2016:1839","RHSA-2015:1695","RHSA-2016:0124","RHSA-2016:1840","RHSA-2016:1841","RHSA-2016:0125"],"bugzilla":"1198606","bugzilla_description":"CVE-2015-0254 jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["jakarta-taglibs-standard-0:1.1.1-11.7.el6_7","jboss-ec2-eap-0:7.5.6-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7","jakarta-taglibs-standard-0:1.1.2-14.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2015-1593","severity":"low","public_date":"2015-02-13T00:00:00Z","advisories":["RHSA-2015:1139","RHSA-2015:1138","RHSA-2015:1137","RHSA-2015:1221","RHSA-2019:3517","RHBA-2019:3303"],"bugzilla":"1192519","bugzilla_description":"CVE-2015-1593 kernel: Linux stack ASLR implementation Integer overflow","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190","affected_packages":["kernel-0:3.10.0-229.7.2.ael7b","redhat-coreos-42.81.20191107.0","kernel-rt-1:3.10.0-229.rt56.153.el6rt","kernel-0:4.18.0-147.el8","kernel-0:2.6.32-504.30.3.el6","kernel-rt-0:3.10.0-229.7.2.rt56.141.6.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1593.json"},{"CVE":"CVE-2014-0227","severity":"moderate","public_date":"2015-02-09T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0983","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:1088","RHSA-2014:1021","RHSA-2014:1087","RHSA-2014:1020","RHSA-2014:1086","RHSA-2015:0091","RHSA-2014:1019","RHSA-2015:0991","RHSA-2014:1904"],"bugzilla":"1109196","bugzilla_description":"CVE-2014-0227 Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-400","affected_packages":["tomcat6-0:6.0.24-83.el6_6","tomcat-0:7.0.54-2.el7_1","jbossweb-0:7.4.8-4.Final_redhat_4.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0227.json"},{"CVE":"CVE-2017-6056","severity":"important","public_date":"2015-02-06T00:00:00Z","advisories":["RHSA-2017:0517","RHSA-2017:0827","RHSA-2017:0826","RHSA-2017:0829","RHSA-2017:0828"],"bugzilla":"1422148","bugzilla_description":"CVE-2017-6056 tomcat: Infinite loop in the processing of https requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["jbossweb-0:7.5.21-2.Final_redhat_2.1.ep6.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-0370","severity":"low","public_date":"2014-11-22T00:00:00Z","advisories":[],"bugzilla":"1569804","bugzilla_description":"CVE-2017-0370 mediawiki: Improper URL sanitization in Spam blacklist","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0370.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2014-7839","severity":"moderate","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2015:0218","RHSA-2015:0217","RHSA-2015:1009","RHSA-2015:0216","RHSA-2015:0215","RHSA-2015:0851","RHSA-2015:0675","RHSA-2015:0850","RHSA-2015:0773"],"bugzilla":"1165328","bugzilla_description":"CVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7839.json"},{"CVE":"CVE-2014-3585","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHBA-2015:2395","RHBA-2014:1396"],"bugzilla":"1126002","bugzilla_description":"CVE-2014-3585 redhat-upgrade-tool: does not check GPG signatures on package installation","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-347","affected_packages":["redhat-upgrade-tool-2:0.9.3-1.el7","redhat-upgrade-tool-1:0.7.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3585.json"},{"CVE":"CVE-2014-7143","severity":"moderate","public_date":"2014-09-17T00:00:00Z","advisories":[],"bugzilla":"1143802","bugzilla_description":"CVE-2014-7143 python-twisted-web: specified trustRoot not respected","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7143.json"},{"CVE":"CVE-2014-3577","severity":"important","public_date":"2014-08-18T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2016:1773","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1082","RHSA-2014:1320","RHSA-2014:1166","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1146","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2016:1931","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1834","RHSA-2014:1833","RHSA-2015:1177","RHSA-2014:1836","RHSA-2015:1176","RHSA-2014:1835"],"bugzilla":"1129074","bugzilla_description":"CVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","httpcomponents-client-0:4.2.5-5.el7_0","org.ovirt.engine-root-0:3.5.0-29","jakarta-commons-httpclient-1:3.1-16.el7_0","thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1","jakarta-commons-httpclient-1:3.1-0.9.el6_5","jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2012-6153","severity":"important","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1320","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1098","RHSA-2014:1834","RHSA-2014:1833","RHSA-2014:1836","RHSA-2014:1835"],"bugzilla":"1129916","bugzilla_description":"CVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","devtoolset-2-httpcomponents-client-0:4.2.1-6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","org.ovirt.engine-root-0:3.5.0-29","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6153.json"},{"CVE":"CVE-2014-3562","severity":"important","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2014:1032","RHSA-2014:1031"],"bugzilla":"1123477","bugzilla_description":"CVE-2014-3562 389-ds: unauthenticated information disclosure","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-862->CWE-201","affected_packages":["389-ds-base-0:1.3.1.6-26.el7_0","redhat-ds-base-0:8.2.11-15.el5dsrv","389-ds-base-0:1.2.11.15-34.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3562.json"},{"CVE":"CVE-2014-3490","severity":"moderate","public_date":"2014-07-23T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0125","RHSA-2015:0234","RHSA-2014:1039","RHSA-2014:1904","RHSA-2014:1040","RHSA-2014:1298","RHSA-2014:1011"],"bugzilla":"1107901","bugzilla_description":"CVE-2014-3490 RESTEasy: XXE via parameter entities","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-base-0:2.3.5-3.el7_0","resteasy-0:2.3.8-5.SP1_redhat_1.1.ep6.el7","resteasy-0:2.3.8-5.SP1_redhat_1.1.ep6.el5","resteasy-0:2.3.8-5.SP1_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3490.json"},{"CVE":"CVE-2014-0230","severity":"low","public_date":"2014-07-19T00:00:00Z","advisories":["RHSA-2016:0595","RHSA-2016:0596","RHSA-2015:1622","RHSA-2015:1621","RHSA-2015:2659","RHSA-2015:2660","RHSA-2015:2661","RHEA-2015:1770","RHSA-2016:0597","RHEA-2015:1771","RHSA-2016:2599","RHSA-2016:0598","RHSA-2016:0599"],"bugzilla":"1191200","bugzilla_description":"CVE-2014-0230 tomcat: non-persistent DoS attack by feeding data by aborting an upload","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["tomcat8-0:8.0.18-25_patch_00.ep7.el6","jbossweb-0:7.5.15-1.Final_redhat_1.1.ep6.el5","jboss-ec2-eap-0:7.5.7-2.Final_redhat_3.ep6.el6","tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.59-26_patch_00.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0230.json"},{"CVE":"CVE-2014-3530","severity":"important","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2015:1888","RHSA-2014:0883","RHSA-2015:0091","RHSA-2014:0884","RHSA-2014:0898","RHSA-2014:0910","RHSA-2014:0885","RHSA-2014:0886","RHSA-2014:0897"],"bugzilla":"1112987","bugzilla_description":"CVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-611","affected_packages":["picketlink-federation-0:2.1.5-3_patch_01.ep5.el4","picketlink-federation-0:2.1.5-3_patch_01.ep5.el5","picketlink-federation-0:2.1.5-3_patch_01.el6_5","picketlink-federation-0:2.1.9-5.SP3_redhat_2.1.ep6.el5","picketlink-federation-0:2.1.9-5.SP3_redhat_2.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3530.json"},{"CVE":"CVE-2013-6495","severity":"moderate","public_date":"2014-07-10T00:00:00Z","advisories":["RHSA-2013:1209","RHSA-2013:1207","RHSA-2013:1208","RHSA-2013:1437"],"bugzilla":"1066794","bugzilla_description":"CVE-2013-6495 JBossWeb Bayeux: Reflected Cross-Site Scripting (XSS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["jbossweb-0:7.2.2-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6495.json"},{"CVE":"CVE-2014-3481","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0895","RHSA-2015:1009","RHSA-2015:0765","RHSA-2014:0799","RHSA-2015:0720","RHSA-2015:0675","RHSA-2014:0797","RHSA-2014:0798","RHSA-2014:1904"],"bugzilla":"1105242","bugzilla_description":"CVE-2014-3481 JBoss AS JAX-RS: Information disclosure via XML eXternal Entity (XXE)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["jboss-as-jaxrs-0:7.3.4-1.Final_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3481.json"},{"CVE":"CVE-2014-0059","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2014:0564","RHSA-2014:0895","RHSA-2014:0565","RHSA-2015:1009","RHSA-2014:0563","RHSA-2015:0851","RHSA-2015:0675","RHSA-2015:0850","RHSA-2014:1904"],"bugzilla":"1063642","bugzilla_description":"CVE-2014-0059 JBossSX/PicketBox: World readable audit.log file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":["picketbox-0:4.0.19-6.SP6_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0059.json"},{"CVE":"CVE-2014-0075","severity":"moderate","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:1149","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1072776","bugzilla_description":"CVE-2014-0075 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-400","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0075.json"},{"CVE":"CVE-2014-0096","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1088342","bugzilla_description":"CVE-2014-0096 Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0096.json"},{"CVE":"CVE-2014-0099","severity":"moderate","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:1149","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1102030","bugzilla_description":"CVE-2014-0099 Tomcat/JBossWeb: Request smuggling via malicious content length header","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-190->CWE-444","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0099.json"},{"CVE":"CVE-2014-0119","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:1034","RHSA-2014:1088","RHSA-2014:1087","RHSA-2014:1086","RHSA-2014:1038","RHSA-2014:0895","RHSA-2014:0843","RHSA-2014:0842"],"bugzilla":"1102038","bugzilla_description":"CVE-2014-0119 Tomcat/JBossWeb: XML parser hijack by malicious web application","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-470","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat6-0:6.0.24-78.el6_5","tomcat-0:7.0.42-8.el7_0","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0119.json"},{"CVE":"CVE-2014-0193","severity":"low","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2014:1019","RHSA-2014:0910","RHSA-2015:0234","RHSA-2014:0818","RHSA-2014:1351","RHSA-2014:1021","RHSA-2014:1020"],"bugzilla":"1092783","bugzilla_description":"CVE-2014-0193 netty: DoS via memory exhaustion during data aggregation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["netty-0:3.6.9-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0193.json"},{"CVE":"CVE-2014-0107","severity":"important","public_date":"2014-03-24T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:1290","RHSA-2014:0590","RHSA-2014:1291","RHSA-2015:1888","RHSA-2014:1351","RHSA-2014:0591","RHSA-2014:0454","RHSA-2014:1995","RHSA-2014:1059","RHSA-2014:0453","RHSA-2014:0348","RHSA-2014:1007","RHSA-2014:1369","RHSA-2014:0818","RHSA-2014:0819"],"bugzilla":"1080248","bugzilla_description":"CVE-2014-0107 Xalan-Java: insufficient constraints in secure processing feature","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el5","xalan-j2-0:2.7.0-6jpp.2","xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el6","xalan-j2-0:2.7.1-12_patch_08.ep5.el6","xalan-j2-0:2.7.1-12_patch_08.ep5.el4","xalan-j2-0:2.7.1-12_patch_08.ep5.el5","xalan-j2-0:2.7.0-9.9.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0107.json"},{"CVE":"CVE-2014-0003","severity":"important","public_date":"2014-02-28T00:00:00Z","advisories":["RHSA-2014:0245","RHSA-2014:0323","RHSA-2014:0452","RHSA-2014:0254","RHSA-2014:0459","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"1049692","bugzilla_description":"CVE-2014-0003 Camel: remote code execution via XSL","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0003.json"},{"CVE":"CVE-2013-4286","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0374","RHSA-2014:0344","RHSA-2014:0686","RHSA-2014:0345","RHSA-2014:0343","RHSA-2014:0458","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0511","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1069921","bugzilla_description":"CVE-2013-4286 tomcat: multiple content-length header poisoning flaws","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat-0:7.0.42-5.el7_0","tomcat6-0:6.0.37-27_patch_04.ep6.el6","jbossweb-0:7.3.1-1.Final_redhat_1.1.ep6.el5","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4286.json"},{"CVE":"CVE-2014-0058","severity":"low","public_date":"2014-02-24T00:00:00Z","advisories":["RHSA-2014:1995","RHSA-2014:0895","RHSA-2015:1009","RHSA-2014:1290","RHSA-2014:0205","RHSA-2014:0910","RHSA-2014:0204","RHSA-2015:0034","RHSA-2014:1291"],"bugzilla":"1063641","bugzilla_description":"CVE-2014-0058 Red Hat JBoss EAP6: Plain text password logging during security audit","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["jboss-as-web-0:7.3.1-4.Final_redhat_4.1.ep6.el6","jboss-as-web-0:7.3.1-4.Final_redhat_4.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0058.json"},{"CVE":"CVE-2014-0050","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0252","RHSA-2014:0253","RHSA-2014:0473","RHSA-2014:0400","RHSA-2014:0452","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0401","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1062337","bugzilla_description":"CVE-2014-0050 apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el6","tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0050.json"},{"CVE":"CVE-2013-6493","severity":"moderate","public_date":"2014-02-05T00:00:00Z","advisories":["RHBA-2014:1417"],"bugzilla":"1010958","bugzilla_description":"CVE-2013-6493 icedtea-web: insecure temporary file use flaw in LiveConnect implementation","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":["icedtea-web-0:1.5.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6493.json"},{"CVE":"CVE-2014-0018","severity":"low","public_date":"2014-01-11T00:00:00Z","advisories":["RHSA-2014:1995","RHSA-2015:1009","RHSA-2014:1290","RHSA-2014:0171","RHSA-2014:0172","RHSA-2014:1291","RHSA-2014:0170"],"bugzilla":"1052783","bugzilla_description":"CVE-2014-0018 jboss-as-server: Unchecked access to MSC Service Registry under JSM","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0018.json"},{"CVE":"CVE-2013-6440","severity":"moderate","public_date":"2013-12-11T00:00:00Z","advisories":["RHSA-2014:1995","RHSA-2014:0452","RHSA-2014:1290","RHSA-2014:0171","RHSA-2014:0172","RHSA-2014:1291","RHSA-2014:0170","RHSA-2014:0195"],"bugzilla":"1043332","bugzilla_description":"CVE-2013-6440 XMLTooling-J/OpenSAML Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6440.json"},{"CVE":"CVE-2013-4485","severity":"important","public_date":"2013-11-21T00:00:00Z","advisories":["RHSA-2013:1753","RHSA-2013:1752"],"bugzilla":"1024552","bugzilla_description":"CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["389-ds-base-0:1.2.11.15-30.el6_5","redhat-ds-base-0:8.2.11-14.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4485.json"},{"CVE":"CVE-2013-4517","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":["RHSA-2015:0851","RHSA-2015:0675","RHSA-2015:0850","RHSA-2014:0171","RHSA-2014:0172","RHSA-2014:0170","RHSA-2014:0582","RHSA-2014:0473","RHSA-2014:0195","RHSA-2014:0400","RHSA-2014:1728","RHSA-2014:1727","RHSA-2014:1726","RHSA-2014:1725"],"bugzilla":"1045257","bugzilla_description":"CVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature DoS Attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["xml-security-0:1.5.6-3.el6","xml-security-0:1.5.6-3.ep5.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el6","xml-security-0:1.5.6-3.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4517.json"},{"CVE":"CVE-2013-2186","severity":"important","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1429","RHSA-2013:1428","RHSA-2013:1448","RHSA-2016:0070","RHSA-2013:1430","RHSA-2013:1442"],"bugzilla":"974814","bugzilla_description":"CVE-2013-2186 Apache commons-fileupload: Arbitrary file upload via deserialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-626","affected_packages":["jakarta-commons-fileupload-1:1.1.1-7.7.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2186.json"},{"CVE":"CVE-2013-4330","severity":"important","public_date":"2013-09-30T00:00:00Z","advisories":["RHSA-2014:0124","RHSA-2014:0245","RHSA-2014:0254","RHSA-2013:1410","RHSA-2013:1862","RHSA-2014:0140"],"bugzilla":"1011726","bugzilla_description":"CVE-2013-4330 Camel: remote code execution via header field manipulation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4330.json"},{"CVE":"CVE-2013-4349","severity":"critical","public_date":"2013-09-16T00:00:00Z","advisories":[],"bugzilla":"1007960","bugzilla_description":"CVE-2013-4349 icedtea-web: CVE-2012-4540 issue not fixed in 1.4","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4349.json"},{"CVE":"CVE-2013-1921","severity":"low","public_date":"2013-09-04T00:00:00Z","advisories":["RHSA-2014:0029","RHSA-2013:1209","RHSA-2013:1207","RHSA-2013:1208","RHSA-2013:1437"],"bugzilla":"948106","bugzilla_description":"CVE-2013-1921 JBoss PicketBox: Insecure storage of masked passwords","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["picketbox-0:4.0.17-3.SP2_redhat_2.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1921.json"},{"CVE":"CVE-2013-2185","severity":"important","public_date":"2013-09-03T00:00:00Z","advisories":["RHSA-2013:1193","RHSA-2013:1194","RHSA-2013:1265"],"bugzilla":"974813","bugzilla_description":"CVE-2013-2185 Tomcat/JBossWeb: Arbitrary file upload via deserialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-626","affected_packages":["jbossweb-0:7.2.0-3.redhat_2.ep6.el6","jbossweb-0:7.2.0-3.redhat_2.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2185.json"},{"CVE":"CVE-2013-4152","severity":"moderate","public_date":"2013-08-22T00:00:00Z","advisories":["RHSA-2014:0212","RHSA-2014:0245","RHSA-2014:0400","RHSA-2014:0254","RHSA-2014:0401"],"bugzilla":"1000186","bugzilla_description":"CVE-2013-4152 Spring Framework: XML External Entity (XXE) injection flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4152.json"},{"CVE":"CVE-2013-2219","severity":"moderate","public_date":"2013-07-29T00:00:00Z","advisories":["RHSA-2013:1119","RHSA-2013:1116"],"bugzilla":"979508","bugzilla_description":"CVE-2013-2219 Directory Server: ACLs inoperative in some search scenarios","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["redhat-ds-base-0:8.2.11-13.el5dsrv","389-ds-base-0:1.2.11.15-20.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2219.json"},{"CVE":"CVE-2013-4112","severity":"low","public_date":"2013-07-11T00:00:00Z","advisories":["RHSA-2014:0029","RHSA-2013:1209","RHSA-2013:1207","RHSA-2013:1208","RHSA-2013:1437","RHSA-2013:1771"],"bugzilla":"983489","bugzilla_description":"CVE-2013-4112 JGroups: Authentication via cached credentials","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["jgroups-1:3.2.10-1.Final_redhat_2.2.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4112.json"},{"CVE":"CVE-2013-2142","severity":"low","public_date":"2013-05-31T00:00:00Z","advisories":[],"bugzilla":"970172","bugzilla_description":"CVE-2013-2142 libimobiledevice: Insecure temporary file use when both $XDG_CONFIG_HOME and $HOME are unset","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2142.json"},{"CVE":"CVE-2013-2035","severity":"low","public_date":"2013-05-13T00:00:00Z","advisories":["RHSA-2014:1290","RHSA-2014:1291","RHSA-2014:1995","RHSA-2014:0245","RHSA-2014:0400","RHSA-2014:0254","RHSA-2014:0029","RHSA-2014:0401","RHSA-2013:1029","RHSA-2015:0034","RHSA-2014:1904","RHSA-2013:1786","RHSA-2013:1784","RHSA-2013:1785"],"bugzilla":"958618","bugzilla_description":"CVE-2013-2035 HawtJNI: predictable temporary file name leading to local arbitrary code execution","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-377","affected_packages":["jansi-0:1.9-5.redhat_3.1.ep6.el5","activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2035.json"},{"CVE":"CVE-2013-7239","severity":"moderate","public_date":"2013-04-19T00:00:00Z","advisories":[],"bugzilla":"1047299","bugzilla_description":"CVE-2013-7239 memcached: SASL authentication allows wrong credentials to access memcache","cvss_score":4.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7239.json"},{"CVE":"CVE-2013-1927","severity":"moderate","public_date":"2013-04-17T00:00:00Z","advisories":["RHSA-2013:0753"],"bugzilla":"884705","bugzilla_description":"CVE-2013-1927 icedtea-web: GIFAR issue","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.2.3-2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1927.json"},{"CVE":"CVE-2013-1926","severity":"moderate","public_date":"2013-04-17T00:00:00Z","advisories":["RHSA-2013:0753"],"bugzilla":"916774","bugzilla_description":"CVE-2013-1926 icedtea-web: class loader sharing for applets with same codebase paths","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.2.3-2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1926.json"},{"CVE":"CVE-2013-0248","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"922146","bugzilla_description":"CVE-2013-0248 jakarta-commons-fileupload, apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0248.json"},{"CVE":"CVE-2012-5633","severity":"important","public_date":"2013-02-08T00:00:00Z","advisories":["RHSA-2013:0749","RHSA-2013:0649","RHSA-2013:0726","RHSA-2013:0258","RHSA-2013:0257","RHSA-2013:0645","RHSA-2013:0259","RHSA-2013:0743","RHSA-2013:0644","RHSA-2013:0256"],"bugzilla":"889008","bugzilla_description":"CVE-2012-5633 jbossws-cxf, apache-cxf: Bypass of security constraints on WS endpoints when using WSS4JInInterceptor","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["apache-cxf-0:2.2.12-10.patch_06.ep5.el4","apache-cxf-0:2.4.9-6.redhat_3.ep6.el6","apache-cxf-0:2.4.9-6.redhat_3.ep6.el5","apache-cxf-0:2.2.12-10.patch_06.ep5.el5","apache-cxf-0:2.2.12-10.patch_06.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5633.json"},{"CVE":"CVE-2013-0239","severity":"important","public_date":"2013-02-08T00:00:00Z","advisories":["RHSA-2013:0749","RHSA-2013:0649","RHSA-2013:0645","RHSA-2013:0644"],"bugzilla":"905722","bugzilla_description":"CVE-2013-0239 jbossws-cxf, apache-cxf: UsernameTokenPolicyValidator and UsernameTokenInterceptor allow empty passwords to authenticate","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["apache-cxf-0:2.4.9-6.redhat_3.ep6.el6","apache-cxf-0:2.4.9-6.redhat_3.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0239.json"},{"CVE":"CVE-2013-7290","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"1052863","bugzilla_description":"CVE-2013-7290 memcached: remote DoS (segmentation fault) via a request to delete a key","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7290.json"},{"CVE":"CVE-2013-7291","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"1052864","bugzilla_description":"CVE-2013-7291 memcached: remote DoS (crash) via a request that triggers \"unbounded key print\"","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7291.json"},{"CVE":"CVE-2013-0179","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"895054","bugzilla_description":"CVE-2013-0179 memcached: DoS due to buffer overrun when printing out keys to be deleted in verbose mode","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0179.json"},{"CVE":"CVE-2012-3546","severity":"important","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0195","RHSA-2013:0151","RHSA-2013:0162","RHSA-2013:0194","RHSA-2013:0197","RHSA-2013:0164","RHSA-2013:0196","RHSA-2013:0163","RHSA-2013:0191","RHSA-2013:0193","RHSA-2013:0192","RHSA-2013:0005","RHSA-2013:0147","RHSA-2013:0158","RHSA-2013:0235","RHSA-2013:0642","RHSA-2013:0004","RHSA-2013:0623","RHSA-2013:0221","RHSA-2013:0198","RHSA-2013:0146","RHSA-2013:0641","RHSA-2013:0157","RHSA-2013:0640"],"bugzilla":"883634","bugzilla_description":"CVE-2012-3546 Tomcat/JBoss Web: Bypass of security constraints","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-31_patch_08.ep5.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossas-0:4.3.0-11.GA_CP10_patch_02.2.ep1.el5","tomcat6-0:6.0.35-6_patch_02.ep6.el5","tomcat6-0:6.0.32-28_patch_08.ep5.el5","jbossas-0:4.3.0-11.GA_CP10_patch_02.1.ep1.el4","tomcat5-0:5.5.33-34_patch_08.ep5.el6","jbossweb-0:7.0.17-3.Final_redhat_2.ep6.el6","jbossweb-0:7.0.17-3.Final_redhat_2.ep6.el5","tomcat6-0:6.0.32-31_patch_08.ep5.el6","tomcat6-0:6.0.24-52.el6_4","tomcat6-0:6.0.35-25_patch_01.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3546.json"},{"CVE":"CVE-2012-4431","severity":"moderate","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0647","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0268","RHSA-2013:1437","RHSA-2013:1853","RHSA-2013:0265","RHSA-2013:0267","RHSA-2013:0266"],"bugzilla":"883636","bugzilla_description":"CVE-2012-4431 Tomcat/JBoss Web - Bypass of CSRF prevention filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["tomcat7-0:7.0.30-3_patch_02.ep6.el5","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","tomcat6-0:6.0.35-6_patch_06.ep6.el5","tomcat7-0:7.0.30-5_patch_02.ep6.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4431.json"},{"CVE":"CVE-2012-4540","severity":"critical","public_date":"2012-11-07T00:00:00Z","advisories":["RHSA-2012:1434"],"bugzilla":"869040","bugzilla_description":"CVE-2012-4540 icedtea-web: IcedTeaScriptableJavaObject::invoke off-by-one heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["icedtea-web-0:1.2.2-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4540.json"},{"CVE":"CVE-2012-5885","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5885.json"},{"CVE":"CVE-2012-5886","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5886.json"},{"CVE":"CVE-2012-5887","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5887.json"},{"CVE":"CVE-2012-5783","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2014:0224","RHSA-2013:0681","RHSA-2013:0680","RHSA-2013:0679","RHSA-2013:0270","RHSA-2017:0868","RHSA-2013:0763","RHSA-2013:1006","RHSA-2013:1853","RHSA-2013:0682","RHSA-2013:1147"],"bugzilla":"873317","bugzilla_description":"CVE-2012-5783 jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el4","jakarta-commons-httpclient-1:3.1-2_patch_01.ep5.el6","jakarta-commons-httpclient-1:3.0-7jpp.2","jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el5","jakarta-commons-httpclient-1:3.1-0.7.el6_3","redhat-support-plugin-rhev-0:3.3.0-14.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2013-1752","severity":"moderate","public_date":"2012-09-25T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1046174","bugzilla_description":"CVE-2013-1752 python: multiple unbound readline() DoS flaws in python stdlib","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1752.json"},{"CVE":"CVE-2012-6136","severity":"low","public_date":"2012-08-02T00:00:00Z","advisories":["RHBA-2013:0386"],"bugzilla":"918813","bugzilla_description":"CVE-2012-6136 tuned: insecure permissions of tuned.pid","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["tuned-0:0.2.19-11.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6136.json"},{"CVE":"CVE-2012-3422","severity":"important","public_date":"2012-07-31T00:00:00Z","advisories":["RHSA-2012:1132"],"bugzilla":"840592","bugzilla_description":"CVE-2012-3422 icedtea-web: getvalueforurl uninitialized instance pointer","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["icedtea-web-0:1.2.1-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3422.json"},{"CVE":"CVE-2012-3423","severity":"important","public_date":"2012-07-31T00:00:00Z","advisories":["RHSA-2012:1132"],"bugzilla":"841345","bugzilla_description":"CVE-2012-3423 icedtea-web: incorrect handling of not 0-terminated strings","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["icedtea-web-0:1.2.1-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3423.json"},{"CVE":"CVE-2012-3431","severity":"moderate","public_date":"2012-07-19T00:00:00Z","advisories":["RHSA-2012:1301"],"bugzilla":"843669","bugzilla_description":"CVE-2012-3431 Teiid: JDBC socket does not encrypt client login messages by default","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3431.json"},{"CVE":"CVE-2012-2678","severity":"moderate","public_date":"2012-06-20T00:00:00Z","advisories":["RHSA-2012:0997","RHSA-2012:1041"],"bugzilla":"829933","bugzilla_description":"CVE-2012-2678 rhds/389: plaintext password disclosure flaw","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.10.2-18.el6_3","redhat-ds-base-0:8.2.10-3.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2678.json"},{"CVE":"CVE-2012-2746","severity":"low","public_date":"2012-05-10T00:00:00Z","advisories":["RHSA-2012:0997","RHSA-2012:1041"],"bugzilla":"833482","bugzilla_description":"CVE-2012-2746 rhds/389: plaintext password disclosure in audit log","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["389-ds-base-0:1.2.10.2-18.el6_3","redhat-ds-base-0:8.2.10-3.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2746.json"},{"CVE":"CVE-2012-0213","severity":"moderate","public_date":"2012-05-09T00:00:00Z","advisories":["RHSA-2012:1232"],"bugzilla":"799078","bugzilla_description":"CVE-2012-0213 apache-poi, jakarta: JVM destabilization due to memory exhaustion when processing CDF/CFBF files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0213.json"},{"CVE":"CVE-2012-6684","severity":"moderate","public_date":"2012-02-29T00:00:00Z","advisories":[],"bugzilla":"1179870","bugzilla_description":"CVE-2012-6684 rubygem-RedCloth: XSS vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6684.json"},{"CVE":"CVE-2013-1820","severity":"low","public_date":"2012-02-26T00:00:00Z","advisories":[],"bugzilla":"918229","bugzilla_description":"CVE-2013-1820 tuned: insecure permissions of pmqos-static.pid","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1820.json"},{"CVE":"CVE-2011-3377","severity":"moderate","public_date":"2011-11-08T00:00:00Z","advisories":["RHSA-2011:1441"],"bugzilla":"742515","bugzilla_description":"CVE-2011-3377 IcedTea-Web: second-level domain subdomains and suffix domain SOP bypass","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.0.6-1.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3377.json"},{"CVE":"CVE-2011-3506","severity":"low","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2012:1125"],"bugzilla":"749078","bugzilla_description":"CVE-2011-3506 Oracle OpenSSO: unspecified vulnerability in the authentication component","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3506.json"},{"CVE":"CVE-2011-3517","severity":"low","public_date":"2011-10-18T00:00:00Z","advisories":["RHSA-2012:1125"],"bugzilla":"749079","bugzilla_description":"CVE-2011-3517 Oracle OpenSSO: unspecified vulnerability in the authentication component","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3517.json"},{"CVE":"CVE-2011-2894","severity":"important","public_date":"2011-09-09T00:00:00Z","advisories":["RHSA-2011:1334"],"bugzilla":"737611","bugzilla_description":"CVE-2011-2894 Spring Framework, Spring Security:  Chosen commands execution on the server (Framework) or authentication token bypass (Security) by objects de-serialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2894.json"},{"CVE":"CVE-2011-2731","severity":"moderate","public_date":"2011-09-09T00:00:00Z","advisories":[],"bugzilla":"737613","bugzilla_description":"CVE-2011-2731 Spring Security: Privilege escalation by using RunAsManager mechanism","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2731.json"},{"CVE":"CVE-2011-2732","severity":"moderate","public_date":"2011-09-09T00:00:00Z","advisories":[],"bugzilla":"737617","bugzilla_description":"CVE-2011-2732 Spring Security: Header injection flaw due improper use of 'spring-security-redirect' parameter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2732.json"},{"CVE":"CVE-2011-2513","severity":"low","public_date":"2011-07-20T00:00:00Z","advisories":["RHSA-2011:1100"],"bugzilla":"718164","bugzilla_description":"CVE-2011-2513 icedtea, icedtea-web: home directory path disclosure to untrusted applications","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.0.4-2.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2513.json"},{"CVE":"CVE-2011-2514","severity":"moderate","public_date":"2011-07-20T00:00:00Z","advisories":["RHSA-2011:1100"],"bugzilla":"718170","bugzilla_description":"CVE-2011-2514 icedtea-web: Java Web Start security warning dialog manipulation","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["icedtea-web-0:1.0.4-2.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2514.json"},{"CVE":"CVE-2011-4971","severity":"low","public_date":"2011-05-15T00:00:00Z","advisories":[],"bugzilla":"957964","bugzilla_description":"CVE-2011-4971 memcached: specially crafted packet segmentation fault","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4971.json"},{"CVE":"CVE-2011-4905","severity":"moderate","public_date":"2011-04-22T00:00:00Z","advisories":[],"bugzilla":"769770","bugzilla_description":"CVE-2011-4905 ActiveMQ: flaw within failover mechanism when handling openwire requests can lead to DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4905.json"},{"CVE":"CVE-2011-2087","severity":"moderate","public_date":"2011-03-23T00:00:00Z","advisories":[],"bugzilla":"723828","bugzilla_description":"CVE-2011-2087 struts: Multiple XSS flaws in component handlers in javatemplates plug-in","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2087.json"},{"CVE":"CVE-2011-1772","severity":"moderate","public_date":"2011-02-22T00:00:00Z","advisories":[],"bugzilla":"723827","bugzilla_description":"CVE-2011-1772 struts: Multiple XSS flaws in XWork","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1772.json"},{"CVE":"CVE-2011-2088","severity":"low","public_date":"2011-02-22T00:00:00Z","advisories":[],"bugzilla":"723829","bugzilla_description":"CVE-2011-2088 struts: Allows remote attackers to obtain potentially sensitive information via vectors involving an s:submit element","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2088.json"},{"CVE":"CVE-2008-2930","severity":"low","public_date":"2008-08-27T00:00:00Z","advisories":["RHSA-2008:0596","RHSA-2008:0858","RHSA-2008:0602"],"bugzilla":"454065","bugzilla_description":"CVE-2008-2930 Directory Server: temporary DoS via crafted pattern searches","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["redhat-ds-base-0:8.0.4-7.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2930.json"},{"CVE":"CVE-2008-3283","severity":"moderate","public_date":"2008-08-27T00:00:00Z","advisories":["RHSA-2008:0596","RHSA-2008:0858","RHSA-2008:0602"],"bugzilla":"458977","bugzilla_description":"CVE-2008-3283 Directory Server: multiple memory leaks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["redhat-ds-base-0:8.0.4-7.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3283.json"},{"CVE":"CVE-2009-0314","severity":"low","public_date":"2008-08-06T00:00:00Z","advisories":[],"bugzilla":"481556","bugzilla_description":"CVE-2009-0314 gedit: untrusted python modules search path","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0314.json"},{"CVE":"CVE-2008-3916","severity":"moderate","public_date":"2008-06-30T00:00:00Z","advisories":["RHSA-2008:0946"],"bugzilla":"462584","bugzilla_description":"CVE-2008-3916 ed: Heap-based buffer overflow (arb. code execution)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ed-0:0.2-39.el5_2","ed-0:0.2-33.30E.1","ed-0:0.2-21.1","ed-0:0.2-36.el4_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3916.json"},{"CVE":"CVE-2008-0892","severity":"important","public_date":"2008-04-15T00:00:00Z","advisories":["RHSA-2008:0201","RHSA-2008:0199"],"bugzilla":"437301","bugzilla_description":"CVE-2008-0892 Director Server: shell command injection in CGI replication monitor","cvss_score":7.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:C/I:C/A:C","CWE":"CWE-78","affected_packages":["redhat-ds-admin-0:8.0.0-6.el5dsrv","redhat-ds-admin-0:8.0.0-6.el4dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0892.json"},{"CVE":"CVE-2008-0893","severity":"moderate","public_date":"2008-04-15T00:00:00Z","advisories":["RHSA-2008:0201"],"bugzilla":"437320","bugzilla_description":"CVE-2008-0893 Directory Server: unrestricted access to CGI scripts","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["redhat-ds-admin-0:8.0.0-6.el5dsrv","redhat-ds-admin-0:8.0.0-6.el4dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0893.json"},{"CVE":"CVE-2008-0889","severity":"important","public_date":"2008-03-19T00:00:00Z","advisories":["RHSA-2008:0191"],"bugzilla":"436107","bugzilla_description":"CVE-2008-0889 directory server: insecure permissions on fedora/redhat-idm-console","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-732","affected_packages":["redhat-idm-console-0:1.0.0-22.el4idm","redhat-idm-console-0:1.0.0-17.el5idm"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0889.json"},{"CVE":"CVE-2007-4639","severity":"moderate","public_date":"2007-08-29T00:00:00Z","advisories":["RHSA-2007:0895"],"bugzilla":"284521","bugzilla_description":"CVE-2007-4639 EnterpriseDB security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["EnterpriseDB-0:8.1.9.27-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4639.json"},{"CVE":"CVE-2008-1677","severity":"critical","public_date":"2006-02-23T00:00:00Z","advisories":["RHSA-2008:0269","RHSA-2008:0268"],"bugzilla":"444712","bugzilla_description":"CVE-2008-1677 Directory Server: insufficient buffer size for search patterns","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["redhat-ds-base-0:8.0.3-16.el4dsrv","redhat-ds-base-0:8.0.3-16.el5dsrv"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1677.json"},{"CVE":"CVE-2005-1686","severity":"moderate","public_date":"2005-05-20T00:00:00Z","advisories":["RHSA-2005:499"],"bugzilla":"1617658","bugzilla_description":"CVE-2005-1686 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gedit-1:2.2.2-4.rhel3","gedit-1:2.8.1-4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1686.json"},{"CVE":"CVE-2004-0750","severity":"low","public_date":"2004-09-22T00:00:00Z","advisories":["RHSA-2004:434"],"bugzilla":"1617263","bugzilla_description":"CVE-2004-0750 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["redhat-config-nfs-0:1.0.13-6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0750.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/edk2-aarch64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/edk2-aarch64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/edk2-aarch64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/edk2-ovmf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/edk2-ovmf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/edk2-ovmf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ee4j-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ee4j-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ee4j-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efi-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efi-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efi-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efi-srpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efi-srpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efi-srpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efibootmgr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efibootmgr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efibootmgr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efivar-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efivar-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efivar-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efivar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efivar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/efivar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/egl-wayland_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/egl-wayland_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/egl-wayland_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/eglexternalplatform-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/eglexternalplatform-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/eglexternalplatform-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/eigen3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/eigen3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/eigen3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-debuginfod-client-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-debuginfod-client-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-debuginfod-client-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-debuginfod-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-debuginfod-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-debuginfod-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-default-yama-scope_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-default-yama-scope_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-default-yama-scope_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-devel-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-devel-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-devel-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libelf-devel-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libelf-devel-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libelf-devel-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libelf-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libelf-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libelf-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libelf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libelf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libelf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils_security_api_results.json
new file mode 100644
index 0000000..814431a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elfutils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-7149","severity":"low","public_date":"2019-01-18T00:00:00Z","advisories":["RHSA-2019:3575","RHSA-2019:2197"],"bugzilla":"1671443","bugzilla_description":"CVE-2019-7149 elfutils: heap-based buffer over-read in read_srclines in dwarf_getsrclines.c in libdw","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["elfutils-0:0.176-2.el7","elfutils-0:0.176-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7149.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-7665","severity":"low","public_date":"2019-01-12T00:00:00Z","advisories":["RHSA-2019:3575","RHSA-2019:2197"],"bugzilla":"1677538","bugzilla_description":"CVE-2019-7665 elfutils: heap-based buffer over-read in function elf32_xlatetom in elf32_xlatetom.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["elfutils-0:0.176-2.el7","elfutils-0:0.176-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7665.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-7148","severity":null,"public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1671439","bugzilla_description":"CVE-2019-7148 elfutils: excessive memory allocation in read_long_names in elf_begin.c in libelf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7148.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-7664","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2019:3575","RHSA-2019:2197"],"bugzilla":"1677536","bugzilla_description":"CVE-2019-7664 elfutils: out of bound write in elf_cvt_note in libelf/note_xlate.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["elfutils-0:0.176-2.el7","elfutils-0:0.176-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7664.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-7146","severity":"low","public_date":"2019-01-09T00:00:00Z","advisories":["RHSA-2019:3575"],"bugzilla":"1671432","bugzilla_description":"CVE-2019-7146 elfutils: buffer over-read in the ebl_object_note function in eblobjnote.c in libebl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["elfutils-0:0.176-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7146.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18520","severity":"low","public_date":"2018-10-17T00:00:00Z","advisories":["RHSA-2019:2197"],"bugzilla":"1646477","bugzilla_description":"CVE-2018-18520 elfutils: eu-size cannot handle recursive ar files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["elfutils-0:0.176-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18520.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18521","severity":"low","public_date":"2018-10-17T00:00:00Z","advisories":["RHSA-2019:2197"],"bugzilla":"1646482","bugzilla_description":"CVE-2018-18521 elfutils: Divide-by-zero in arlib_add_symbols function in arlib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["elfutils-0:0.176-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18521.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18310","severity":"low","public_date":"2018-10-10T00:00:00Z","advisories":["RHSA-2019:2197"],"bugzilla":"1642604","bugzilla_description":"CVE-2018-18310 elfutils: invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["elfutils-0:0.176-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18310.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-7150","severity":"low","public_date":"2018-10-10T00:00:00Z","advisories":["RHSA-2019:3575","RHSA-2019:2197"],"bugzilla":"1671446","bugzilla_description":"CVE-2019-7150 elfutils: segmentation fault in elf64_xlatetom in libelf/elf32_xlatetom.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["elfutils-0:0.176-2.el7","elfutils-0:0.176-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7150.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16062","severity":"low","public_date":"2018-08-17T00:00:00Z","advisories":["RHSA-2019:2197"],"bugzilla":"1623752","bugzilla_description":"CVE-2018-16062 elfutils: Heap-based buffer over-read in libdw/dwarf_getaranges.c:dwarf_getaranges() via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["elfutils-0:0.176-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16062.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16402","severity":"low","public_date":"2018-08-15T00:00:00Z","advisories":["RHSA-2020:1471","RHSA-2019:2197"],"bugzilla":"1625050","bugzilla_description":"CVE-2018-16402 elfutils: Double-free due to double decompression of sections in crafted ELF causes crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["elfutils-0:0.176-2.el7","elfutils-0:0.172-4.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16402.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16403","severity":"low","public_date":"2018-08-15T00:00:00Z","advisories":["RHSA-2019:2197"],"bugzilla":"1625055","bugzilla_description":"CVE-2018-16403 elfutils: Heap-based buffer over-read in libdw/dwarf_getabbrev.c and libwd/dwarf_hasattr.c causes crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122->CWE-125","affected_packages":["elfutils-0:0.176-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16403.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8769","severity":"low","public_date":"2018-03-18T00:00:00Z","advisories":[],"bugzilla":"1559241","bugzilla_description":"CVE-2018-8769 elfutils: buffer over-read in ebldynamictagname.c:ebl_dynamic_tag_name() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8769.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7607","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":[],"bugzilla":"1441613","bugzilla_description":"CVE-2017-7607 elfutils: Heap-buffer overflow in the handle_gnu_hash function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7607.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7608","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":[],"bugzilla":"1441624","bugzilla_description":"CVE-2017-7608 elfutils: Heap-buffer overflow in the ebl_object_note_type_name function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7608.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7609","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":[],"bugzilla":"1441625","bugzilla_description":"CVE-2017-7609 elfutils: Memory allocation failure in elf_compress.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7609.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7610","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":[],"bugzilla":"1441626","bugzilla_description":"CVE-2017-7610 elfutils: Heap-buffer overflow in the check_group function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7610.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7611","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":[],"bugzilla":"1441627","bugzilla_description":"CVE-2017-7611 elfutils: Heap-buffer overflow in the check_symtab_shndx function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7611.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7612","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":[],"bugzilla":"1441628","bugzilla_description":"CVE-2017-7612 elfutils: Heap-buffer overflow in the check_sysv_hash function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7612.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7613","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":[],"bugzilla":"1441629","bugzilla_description":"CVE-2017-7613 elfutils: elflint.c does not validate the number of sections and segments","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7613.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10255","severity":"low","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1435182","bugzilla_description":"CVE-2016-10255 elfutils: Memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10255.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10254","severity":"low","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1435183","bugzilla_description":"CVE-2016-10254 elfutils: Memory allocation failure in allocate_elf","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10254.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-9447","severity":"low","public_date":"2014-12-27T00:00:00Z","advisories":["RHEA-2015:1302","RHEA-2015:2126"],"bugzilla":"1178888","bugzilla_description":"CVE-2014-9447 elfutils: directory traversal in read_long_names()","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-73","affected_packages":["elfutils-0:0.161-3.el6","elfutils-0:0.163-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9447.json"},{"CVE":"CVE-2014-0172","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":["RHEA-2015:0369"],"bugzilla":"1085663","bugzilla_description":"CVE-2014-0172 elfutils: integer overflow, leading to a heap-based buffer overflow in libdw","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["elfutils-0:0.160-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0172.json"},{"CVE":"CVE-2005-1704","severity":"low","public_date":"2005-05-25T00:00:00Z","advisories":["RHBA-2005:675","RHSA-2005:763","RHSA-2005:673","RHSA-2006:0368","RHSA-2005:709","RHSA-2006:0354","RHSA-2005:801","RHSA-2005:659"],"bugzilla":"1617660","bugzilla_description":"CVE-2005-1704 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.63","binutils-0:2.14.90.0.4-39","elfutils-0:0.94.1-2","binutils-0:2.15.92.0.2-15","elfutils-0:0.97.1-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1704.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elinks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elinks_security_api_results.json
new file mode 100644
index 0000000..b5ab368
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/elinks_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-6709","severity":"moderate","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881399","bugzilla_description":"CVE-2012-6709 elinks/links: does not properly verify SSL certificates","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6709.json"},{"CVE":"CVE-2012-4545","severity":"moderate","public_date":"2012-10-30T00:00:00Z","advisories":["RHSA-2013:0250"],"bugzilla":"864566","bugzilla_description":"CVE-2012-4545 elinks: Improper delegation of client credentials during GSS negotiation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["elinks-0:0.12-0.21.pre5.el6_3","elinks-0:0.11.1-8.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4545.json"},{"CVE":"CVE-2007-2027","severity":"low","public_date":"2007-04-04T00:00:00Z","advisories":["RHSA-2009:1471"],"bugzilla":"235411","bugzilla_description":"CVE-2007-2027 elinks tries to load .po files from a non-absolute path","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["elinks-0:0.11.1-6.el5_4.1","elinks-0:0.9.2-4.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2027.json"},{"CVE":"CVE-2007-5034","severity":"moderate","public_date":"2007-02-24T00:00:00Z","advisories":["RHSA-2007:0933"],"bugzilla":"297611","bugzilla_description":"CVE-2007-5034 elinks reveals POST data to HTTPS proxy","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["elinks-0:0.11.1-5.1.0.1.el5","elinks-0:0.9.2-3.3.5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5034.json"},{"CVE":"CVE-2006-5925","severity":"critical","public_date":"2006-11-15T01:51:00Z","advisories":["RHSA-2006:0742"],"bugzilla":"1618231","bugzilla_description":"CVE-2006-5925 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["elinks-0:0.9.2-3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5925.json"},{"CVE":"CVE-2008-7224","severity":"important","public_date":"2006-07-29T00:00:00Z","advisories":["RHSA-2009:1471"],"bugzilla":"523258","bugzilla_description":"CVE-2008-7224 elinks: entity_cache static array buffer overflow (off-by-one)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":["elinks-0:0.11.1-6.el5_4.1","elinks-0:0.9.2-4.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-7224.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-lucid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-lucid_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-lucid_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-nox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-nox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-nox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-terminal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-terminal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs-terminal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs_security_api_results.json
new file mode 100644
index 0000000..37f7a6d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/emacs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-1000383","severity":"low","public_date":"2017-10-31T00:00:00Z","advisories":[],"bugzilla":"1508788","bugzilla_description":"CVE-2017-1000383 emacs: Ignores umask when creating a swap file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000383.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-14482","severity":"important","public_date":"2017-09-04T00:00:00Z","advisories":["RHSA-2017:2771"],"bugzilla":"1490409","bugzilla_description":"CVE-2017-14482 emacs: command injection flaw within \"enriched mode\" handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["emacs-1:24.3-20.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14482.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2014-3421","severity":"low","public_date":"2014-05-05T00:00:00Z","advisories":[],"bugzilla":"1095586","bugzilla_description":"CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 emacs: multiple temporary file issues","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3421.json"},{"CVE":"CVE-2014-3422","severity":"low","public_date":"2014-05-05T00:00:00Z","advisories":[],"bugzilla":"1095586","bugzilla_description":"CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 emacs: multiple temporary file issues","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3422.json"},{"CVE":"CVE-2014-3423","severity":"low","public_date":"2014-05-05T00:00:00Z","advisories":[],"bugzilla":"1095586","bugzilla_description":"CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 emacs: multiple temporary file issues","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3423.json"},{"CVE":"CVE-2014-3424","severity":"low","public_date":"2014-05-05T00:00:00Z","advisories":[],"bugzilla":"1095586","bugzilla_description":"CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 emacs: multiple temporary file issues","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3424.json"},{"CVE":"CVE-2012-3479","severity":"low","public_date":"2012-08-07T00:00:00Z","advisories":[],"bugzilla":"847698","bugzilla_description":"CVE-2012-3479 emacs: Evaluation of 'eval' forms in file-local variable sections, when 'enable-local-variables' set to ':safe'","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3479.json"},{"CVE":"CVE-2012-0035","severity":"low","public_date":"2012-01-09T00:00:00Z","advisories":[],"bugzilla":"773023","bugzilla_description":"CVE-2012-0035 emacs: CEDET global-ede-mode file loading vulnerability","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0035.json"},{"CVE":"CVE-2009-2688","severity":"low","public_date":"2009-06-25T00:00:00Z","advisories":[],"bugzilla":"511994","bugzilla_description":"CVE-2009-2688 xemacs: multiple integer overflow flaws","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2688.json"},{"CVE":"CVE-2008-4191","severity":"low","public_date":"2008-08-24T00:00:00Z","advisories":[],"bugzilla":"460435","bugzilla_description":"CVE-2008-4191 emacspeak: Insecure auxiliary /tmp file usage (symlink attack possible)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4191.json"},{"CVE":"CVE-2008-2142","severity":"low","public_date":"2008-05-09T00:00:00Z","advisories":[],"bugzilla":"446069","bugzilla_description":"CVE-2008-2142 emacs: fast-lock-mode arbitrary lisp code execution","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2142.json"},{"CVE":"CVE-2008-1694","severity":"low","public_date":"2008-04-11T00:00:00Z","advisories":[],"bugzilla":"208483","bugzilla_description":"CVE-2008-1694 emacs insecure /tmp file usage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1694.json"},{"CVE":"CVE-2005-0100","severity":"important","public_date":"2005-02-06T00:00:00Z","advisories":["RHSA-2005:133","RHSA-2005:112","RHSA-2005:134","RHSA-2005:110"],"bugzilla":"1617459","bugzilla_description":"CVE-2005-0100 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xemacs-0:21.4.15-10.EL.1","xemacs-0:21.4.13-8.ent.1","emacs-0:21.3-4.1","emacs-0:21.3-19.EL.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0100.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enca-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enca-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enca-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enchant_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enscript_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enscript_security_api_results.json
new file mode 100644
index 0000000..9ea4ebe
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/enscript_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2008-5078","severity":"moderate","public_date":"2008-12-15T00:00:00Z","advisories":["RHSA-2008:1021"],"bugzilla":"473958","bugzilla_description":"CVE-2008-5078 enscript: \"epsf\" special escape buffer overflows","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["enscript-0:1.6.1-24.7","enscript-0:1.6.1-33.el4_7.1","enscript-0:1.6.1-16.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5078.json"},{"CVE":"CVE-2008-4306","severity":"moderate","public_date":"2008-10-29T00:00:00Z","advisories":["RHSA-2008:1021","RHSA-2008:1016"],"bugzilla":"469311","bugzilla_description":"CVE-2008-4306 enscript: \"font\" special escape buffer overflows","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["enscript-0:1.6.1-24.7","enscript-0:1.6.4-4.1.1.el5_2","enscript-0:1.6.1-33.el4_7.1","enscript-0:1.6.1-16.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4306.json"},{"CVE":"CVE-2008-3863","severity":"moderate","public_date":"2008-10-22T00:00:00Z","advisories":["RHSA-2008:1021","RHSA-2008:1016"],"bugzilla":"466771","bugzilla_description":"CVE-2008-3863 enscript: \"setfilename\" special escape buffer overflow","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["enscript-0:1.6.1-24.7","enscript-0:1.6.4-4.1.1.el5_2","enscript-0:1.6.1-33.el4_7.1","enscript-0:1.6.1-16.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3863.json"},{"CVE":"CVE-2004-1184","severity":"low","public_date":"2005-01-20T00:00:00Z","advisories":["RHSA-2005:039","RHSA-2005:040"],"bugzilla":"1617391","bugzilla_description":"CVE-2004-1184 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["enscript-0:1.6.1-28.3","enscript-0:1.6.1-24.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1184.json"},{"CVE":"CVE-2004-1185","severity":"low","public_date":"2005-01-20T00:00:00Z","advisories":["RHSA-2005:039","RHSA-2005:040"],"bugzilla":"1617392","bugzilla_description":"CVE-2004-1185 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["enscript-0:1.6.1-28.3","enscript-0:1.6.1-24.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1185.json"},{"CVE":"CVE-2004-1186","severity":"low","public_date":"2005-01-20T00:00:00Z","advisories":["RHSA-2005:039","RHSA-2005:040"],"bugzilla":"1617393","bugzilla_description":"CVE-2004-1186 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["enscript-0:1.6.1-28.3","enscript-0:1.6.1-24.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1186.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/environment-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/environment-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/environment-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/eog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/eog_security_api_results.json
new file mode 100644
index 0000000..97bb320
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/eog_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-6855","severity":"low","public_date":"2016-08-19T00:00:00Z","advisories":[],"bugzilla":"1369087","bugzilla_description":"CVE-2016-6855 eog: Out-of-bounds write when passing invalid UTF-8 to GMarkup","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6855.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/esc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/esc_security_api_results.json
new file mode 100644
index 0000000..b755a02
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/esc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-26160","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1883371","bugzilla_description":"CVE-2020-26160 jwt-go: access restriction bypass vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26160.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5146","severity":"critical","public_date":"2018-03-16T00:00:00Z","advisories":["RHSA-2018:0649","RHSA-2018:0647","RHSA-2018:0549","RHSA-2018:0648","RHSA-2018:1058"],"bugzilla":"1557221","bugzilla_description":"CVE-2018-5146 Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvorbis-1:1.2.3-5.el6_9.1","libvorbis-1:1.3.3-8.el7.1","thunderbird-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el6_9","firefox-0:52.7.2-1.el6_9","firefox-0:52.7.2-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5146.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/espeak-ng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/espeak-ng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/espeak-ng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ethtool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ethtool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ethtool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evemu-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evemu-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evemu-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evemu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evemu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evemu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince-browser-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince-browser-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince-browser-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince-nautilus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince-nautilus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince-nautilus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince_security_api_results.json
new file mode 100644
index 0000000..eff8807
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evince_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-1010006","severity":"moderate","public_date":"2019-07-14T00:00:00Z","advisories":[],"bugzilla":"1730582","bugzilla_description":"CVE-2019-1010006 evince: buffer overflow in backend/tiff/tiff-document.c leads to DOS/possible code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120->(CWE-400|CWE-94)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010006.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11459","severity":"low","public_date":"2019-04-13T00:00:00Z","advisories":["RHSA-2020:1074","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1716295","bugzilla_description":"CVE-2019-11459 evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["evince-0:3.28.4-3.el8","evince-0:3.28.2-9.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11459.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000159","severity":"moderate","public_date":"2017-07-14T00:00:00Z","advisories":[],"bugzilla":"1521210","bugzilla_description":"CVE-2017-1000159 evince: Command injection when exporting to PDF","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000159.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-1000083","severity":"important","public_date":"2017-07-13T00:00:00Z","advisories":["RHSA-2017:2388"],"bugzilla":"1468488","bugzilla_description":"CVE-2017-1000083 evince: command injection via filename in tar-compressed comics archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["evince-0:3.22.1-5.2.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000083.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2017-9083","severity":"low","public_date":"2017-05-18T00:00:00Z","advisories":[],"bugzilla":"1453198","bugzilla_description":"CVE-2017-9083 poppler: Null pointer dereference in the JPXStream::readUByte function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9083.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2013-3718","severity":"moderate","public_date":"2013-05-30T00:00:00Z","advisories":[],"bugzilla":"1365025","bugzilla_description":"CVE-2013-3718 evince: Missing check of number of pages leads to segmentation fault","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3718.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2011-5244","severity":"moderate","public_date":"2011-03-04T00:00:00Z","advisories":[],"bugzilla":"878483","bugzilla_description":"CVE-2011-5244 t1lib: off-by-one errors in token and linetoken","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5244.json"},{"CVE":"CVE-2011-0433","severity":"moderate","public_date":"2011-01-30T00:00:00Z","advisories":["RHSA-2012:0062","RHSA-2012:1201","RHSA-2012:0137"],"bugzilla":"679732","bugzilla_description":"CVE-2011-0433 t1lib: Heap-based buffer overflow DVI file AFM font parser","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["texlive-0:2007-57.el6_2","tetex-0:3.0-33.15.el5_8.1","t1lib-0:5.1.2-6.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0433.json"},{"CVE":"CVE-2010-2640","severity":"moderate","public_date":"2011-01-05T00:00:00Z","advisories":["RHSA-2011:0009"],"bugzilla":"666313","bugzilla_description":"CVE-2010-2640 evince: Array index errror in DVI file PK font parser","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["evince-0:2.28.2-14.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2640.json"},{"CVE":"CVE-2010-2641","severity":"moderate","public_date":"2011-01-05T00:00:00Z","advisories":["RHSA-2011:0009"],"bugzilla":"666314","bugzilla_description":"CVE-2010-2641 evince: Array index errror in DVI file VF font parser","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["evince-0:2.28.2-14.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2641.json"},{"CVE":"CVE-2010-2642","severity":"moderate","public_date":"2011-01-05T00:00:00Z","advisories":["RHSA-2012:0062","RHSA-2012:1201","RHSA-2012:0137","RHSA-2011:0009"],"bugzilla":"666318","bugzilla_description":"CVE-2010-2642 t1lib: Heap based buffer overflow in DVI file AFM font parser","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["texlive-0:2007-57.el6_2","evince-0:2.28.2-14.el6_0.1","tetex-0:3.0-33.15.el5_8.1","t1lib-0:5.1.2-6.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2642.json"},{"CVE":"CVE-2010-2643","severity":"moderate","public_date":"2011-01-05T00:00:00Z","advisories":["RHSA-2011:0009"],"bugzilla":"666321","bugzilla_description":"CVE-2010-2643 evince: Integer overflow in DVI file TFM font parser","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["evince-0:2.28.2-14.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2643.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-bogofilter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-bogofilter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-bogofilter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-langpacks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-langpacks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-langpacks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-perl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-perl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-tests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-tests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server-tests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server_security_api_results.json
new file mode 100644
index 0000000..44dc6da
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-data-server_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16117","severity":"low","public_date":"2020-07-30T00:00:00Z","advisories":[],"bugzilla":"1862125","bugzilla_description":"CVE-2020-16117 evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16117.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-14928","severity":"low","public_date":"2020-07-04T00:00:00Z","advisories":[],"bugzilla":"1857470","bugzilla_description":"CVE-2020-14928 evolution-data-server: Response Injection via STARTTLS in SMTP and POP3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14928.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-3890","severity":"moderate","public_date":"2019-02-15T00:00:00Z","advisories":["RHSA-2019:3699","RHSA-2020:1080"],"bugzilla":"1678313","bugzilla_description":"CVE-2019-3890 evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-online-accounts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-295|CWE-296)","affected_packages":["evolution-data-server-0:3.28.5-11.el8","evolution-ews-0:3.28.5-5.el7","evolution-data-server-0:3.28.5-4.el7","evolution-ews-0:3.28.5-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2018-12422","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":[],"bugzilla":"1592624","bugzilla_description":"CVE-2018-12422 evolution-data-server: Unsafe use of strcat allows buffer overflow in addressbook/backends/ldap/e-book-backend-ldap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-10727","severity":"moderate","public_date":"2016-05-10T00:00:00Z","advisories":["RHBA-2016:2206"],"bugzilla":"1609916","bugzilla_description":"CVE-2016-10727 evolution-data-server: IMAPx Component Information Disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393->CWE-201","affected_packages":["evolution-data-server-0:3.12.11-37.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10727.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2011-3355","severity":"low","public_date":"2011-04-19T00:00:00Z","advisories":[],"bugzilla":"707848","bugzilla_description":"CVE-2011-3355 evolution: IMAP does non-SSL connection when storing to Sent folder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3355.json"},{"CVE":"CVE-2009-0582","severity":"moderate","public_date":"2009-03-12T00:00:00Z","advisories":["RHSA-2009:0355","RHSA-2009:0358","RHSA-2009:0354"],"bugzilla":"487685","bugzilla_description":"CVE-2009-0582 evolution-data-server: insufficient checking of NTLM authentication challenge packets","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["evolution28-evolution-data-server-0:1.8.0-37.el4_7.2","evolution-data-server-0:1.12.3-10.el5_3.3","evolution-0:1.4.5-25.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0582.json"},{"CVE":"CVE-2009-0587","severity":"low","public_date":"2009-03-12T00:00:00Z","advisories":["RHSA-2009:0355","RHSA-2009:0358","RHSA-2009:0354"],"bugzilla":"488226","bugzilla_description":"CVE-2009-0587 evolution-data-server: integer overflow in base64 encoding functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["evolution28-evolution-data-server-0:1.8.0-37.el4_7.2","evolution-data-server-0:1.12.3-10.el5_3.3","evolution-0:1.4.5-25.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0587.json"},{"CVE":"CVE-2009-0547","severity":"moderate","public_date":"2008-12-11T00:00:00Z","advisories":["RHSA-2009:0355","RHSA-2009:0354"],"bugzilla":"484925","bugzilla_description":"CVE-2009-0547 evolution-data-server: S/MIME signatures are considered to be valid even for modified messages (MITM)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["evolution28-evolution-data-server-0:1.8.0-37.el4_7.2","evolution-data-server-0:1.12.3-10.el5_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0547.json"},{"CVE":"CVE-2007-3257","severity":"important","public_date":"2007-06-14T00:00:00Z","advisories":["RHSA-2007:0509","RHSA-2007:0510"],"bugzilla":"244277","bugzilla_description":"CVE-2007-3257 evolution malicious server arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["evolution-0:2.0.2-35.0.4.el4","evolution-data-server-0:1.8.0-15.0.4.el5","evolution-0:1.4.5-21.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3257.json"},{"CVE":"CVE-2007-1558","severity":"moderate","public_date":"2007-04-02T00:00:00Z","advisories":["RHSA-2009:1140","RHSA-2007:0385","RHSA-2007:0344","RHSA-2007:0353","RHSA-2007:0386","RHSA-2007:0401","RHSA-2007:0402"],"bugzilla":"241191","bugzilla_description":"CVE-2007-1558 fetchmail/mutt/evolution/...: APOP password disclosure vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:1.5.0.12-0.1.el4","evolution-0:2.0.2-35.0.2.el4","fetchmail-0:5.9.0-21.7.3.el2.1.6","mutt-5:1.4.1-5.el3","fetchmail-0:6.2.5-6.0.1.el4","ruby-0:1.8.1-7.el4_8.3","evolution-data-server-0:1.8.0-15.0.3.el5","thunderbird-0:1.5.0.12-1.el5","ruby-0:1.8.5-5.el5_3.7","fetchmail-0:6.3.6-1.0.1.el5","mutt-5:1.4.2.2-3.0.2.el5","mutt-5:1.4.1-12.0.3.el4","evolution-0:1.4.5-20.el3","seamonkey-0:1.0.9-0.1.el3","seamonkey-0:1.0.9-0.1.el2","fetchmail-0:6.2.0-3.el3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1558.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-ews-langpacks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-ews-langpacks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-ews-langpacks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-ews_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-ews_security_api_results.json
new file mode 100644
index 0000000..bd4f5a4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-ews_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-3890","severity":"moderate","public_date":"2019-02-15T00:00:00Z","advisories":["RHSA-2019:3699","RHSA-2020:1080"],"bugzilla":"1678313","bugzilla_description":"CVE-2019-3890 evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-online-accounts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-295|CWE-296)","affected_packages":["evolution-data-server-0:3.28.5-11.el8","evolution-ews-0:3.28.5-5.el7","evolution-data-server-0:3.28.5-4.el7","evolution-ews-0:3.28.5-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-help_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-help_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-help_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-langpacks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-langpacks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-langpacks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-mapi-langpacks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-mapi-langpacks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-mapi-langpacks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-mapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-mapi_security_api_results.json
new file mode 100644
index 0000000..6439c64
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-mapi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-1182","severity":"critical","public_date":"2012-04-10T00:00:00Z","advisories":["RHSA-2013:0515","RHSA-2013:0506","RHSA-2012:0465","RHSA-2012:0466","RHSA-2012:0478"],"bugzilla":"804093","bugzilla_description":"CVE-2012-1182 samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-122","affected_packages":["samba4-0:4.0.0-55.el6.rc4","samba-0:3.5.6-86.el6_1.5","openchange-0:1.0-4.el6","evolution-mapi-0:0.28.3-12.el6","samba-0:3.5.4-68.el6_0.3","samba-0:3.0.33-3.36.el4","samba-0:3.0.33-3.29.el5_6.5","samba3x-0:3.5.4-0.70.el5_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1182.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-pst_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-pst_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-pst_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-spamassassin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-spamassassin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution-spamassassin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution_security_api_results.json
new file mode 100644
index 0000000..aa2c105
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/evolution_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16117","severity":"low","public_date":"2020-07-30T00:00:00Z","advisories":[],"bugzilla":"1862125","bugzilla_description":"CVE-2020-16117 evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16117.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-14928","severity":"low","public_date":"2020-07-04T00:00:00Z","advisories":[],"bugzilla":"1857470","bugzilla_description":"CVE-2020-14928 evolution-data-server: Response Injection via STARTTLS in SMTP and POP3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14928.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-11879","severity":"moderate","public_date":"2020-04-17T00:00:00Z","advisories":[],"bugzilla":"1867605","bugzilla_description":"CVE-2020-11879 evolution: attaching local filed/directories to composed email can lead to unintended information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11879.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-3890","severity":"moderate","public_date":"2019-02-15T00:00:00Z","advisories":["RHSA-2019:3699","RHSA-2020:1080"],"bugzilla":"1678313","bugzilla_description":"CVE-2019-3890 evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-online-accounts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-295|CWE-296)","affected_packages":["evolution-data-server-0:3.28.5-11.el8","evolution-ews-0:3.28.5-5.el7","evolution-data-server-0:3.28.5-4.el7","evolution-ews-0:3.28.5-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2018-15587","severity":"moderate","public_date":"2018-05-27T00:00:00Z","advisories":["RHSA-2020:1600","RHSA-2020:1080"],"bugzilla":"1677650","bugzilla_description":"CVE-2018-15587 evolution: specially crafted email leading to OpenPGP signatures being spoofed for arbitrary messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-290|CWE-347)","affected_packages":["evolution-0:3.28.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15587.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-12422","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":[],"bugzilla":"1592624","bugzilla_description":"CVE-2018-12422 evolution-data-server: Unsafe use of strcat allows buffer overflow in addressbook/backends/ldap/e-book-backend-ldap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-10727","severity":"moderate","public_date":"2016-05-10T00:00:00Z","advisories":["RHBA-2016:2206"],"bugzilla":"1609916","bugzilla_description":"CVE-2016-10727 evolution-data-server: IMAPx Component Information Disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393->CWE-201","affected_packages":["evolution-data-server-0:3.12.11-37.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10727.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2013-4166","severity":"low","public_date":"2013-07-22T00:00:00Z","advisories":["RHSA-2013:1540"],"bugzilla":"973728","bugzilla_description":"CVE-2013-4166 evolution: incorrect selection of recipient gpg public key for encrypted mail","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-697","affected_packages":["evolution-0:2.32.3-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4166.json"},{"CVE":"CVE-2012-1182","severity":"critical","public_date":"2012-04-10T00:00:00Z","advisories":["RHSA-2013:0515","RHSA-2013:0506","RHSA-2012:0465","RHSA-2012:0466","RHSA-2012:0478"],"bugzilla":"804093","bugzilla_description":"CVE-2012-1182 samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-122","affected_packages":["samba4-0:4.0.0-55.el6.rc4","samba-0:3.5.6-86.el6_1.5","openchange-0:1.0-4.el6","evolution-mapi-0:0.28.3-12.el6","samba-0:3.5.4-68.el6_0.3","samba-0:3.0.33-3.36.el4","samba-0:3.0.33-3.29.el5_6.5","samba3x-0:3.5.4-0.70.el5_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1182.json"},{"CVE":"CVE-2011-3201","severity":"low","public_date":"2011-08-25T00:00:00Z","advisories":["RHSA-2013:0516"],"bugzilla":"733504","bugzilla_description":"CVE-2011-3201 evolution: mailto URL scheme attachment header improper input validation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-356","affected_packages":["evolution-0:2.28.3-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3201.json"},{"CVE":"CVE-2011-3193","severity":"moderate","public_date":"2011-07-19T00:00:00Z","advisories":["RHSA-2011:1323","RHSA-2011:1324","RHSA-2011:1325","RHSA-2011:1326","RHSA-2011:1327","RHSA-2011:1328"],"bugzilla":"733118","bugzilla_description":"CVE-2011-3193 qt/harfbuzz buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qt-1:4.6.2-17.el6_1.1","pango-0:1.14.9-8.el5_7.3","qt4-0:4.2.1-1.el5_7.1","frysk-0:0.0.1.2007.08.03-8.el4","evolution28-pango-0:1.14.9-13.el4_11","qt-1:4.6.2-20.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3193.json"},{"CVE":"CVE-2011-2485","severity":"low","public_date":"2011-06-23T00:00:00Z","advisories":[],"bugzilla":"715337","bugzilla_description":"CVE-2011-2485 gdk-pixbuf: incorrect error detection in the GIF image loader","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2485.json"},{"CVE":"CVE-2011-3355","severity":"low","public_date":"2011-04-19T00:00:00Z","advisories":[],"bugzilla":"707848","bugzilla_description":"CVE-2011-3355 evolution: IMAP does non-SSL connection when storing to Sent folder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3355.json"},{"CVE":"CVE-2011-0064","severity":"critical","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0309"],"bugzilla":"678563","bugzilla_description":"CVE-2011-0064 pango: missing memory reallocation failure checking in hb_buffer_ensure","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["pango-0:1.28.1-3.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0064.json"},{"CVE":"CVE-2011-0020","severity":"moderate","public_date":"2011-01-18T00:00:00Z","advisories":["RHSA-2011:0180"],"bugzilla":"671122","bugzilla_description":"CVE-2011-0020 pango: Heap-based buffer overflow by rendering glyph box for certain FT_Bitmap objects","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P/","CWE":"CWE-122","affected_packages":["pango-0:1.14.9-8.el5_6.2","pango-0:1.28.1-3.el6_0.3","evolution28-pango-0:1.14.9-13.el4_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0020.json"},{"CVE":"CVE-2009-0582","severity":"moderate","public_date":"2009-03-12T00:00:00Z","advisories":["RHSA-2009:0355","RHSA-2009:0358","RHSA-2009:0354"],"bugzilla":"487685","bugzilla_description":"CVE-2009-0582 evolution-data-server: insufficient checking of NTLM authentication challenge packets","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["evolution28-evolution-data-server-0:1.8.0-37.el4_7.2","evolution-data-server-0:1.12.3-10.el5_3.3","evolution-0:1.4.5-25.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0582.json"},{"CVE":"CVE-2009-0587","severity":"low","public_date":"2009-03-12T00:00:00Z","advisories":["RHSA-2009:0355","RHSA-2009:0358","RHSA-2009:0354"],"bugzilla":"488226","bugzilla_description":"CVE-2009-0587 evolution-data-server: integer overflow in base64 encoding functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["evolution28-evolution-data-server-0:1.8.0-37.el4_7.2","evolution-data-server-0:1.12.3-10.el5_3.3","evolution-0:1.4.5-25.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0587.json"},{"CVE":"CVE-2009-0547","severity":"moderate","public_date":"2008-12-11T00:00:00Z","advisories":["RHSA-2009:0355","RHSA-2009:0354"],"bugzilla":"484925","bugzilla_description":"CVE-2009-0547 evolution-data-server: S/MIME signatures are considered to be valid even for modified messages (MITM)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["evolution28-evolution-data-server-0:1.8.0-37.el4_7.2","evolution-data-server-0:1.12.3-10.el5_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0547.json"},{"CVE":"CVE-2008-1108","severity":"critical","public_date":"2008-06-04T00:00:00Z","advisories":["RHSA-2008:0517","RHSA-2008:0516","RHSA-2008:0515","RHSA-2008:0514"],"bugzilla":"448540","bugzilla_description":"CVE-2008-1108 evolution: iCalendar buffer overflow via large timezone specification","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["evolution-0:1.4.5-22.el3","evolution28-0:2.8.0-53.el4_6.3","evolution-0:2.0.2-35.0.4.el4_6.2","evolution-0:2.0.2-35.0.4.el4_5.2","evolution-0:2.12.3-8.el5_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1108.json"},{"CVE":"CVE-2008-1109","severity":"important","public_date":"2008-06-04T00:00:00Z","advisories":["RHSA-2008:0515","RHSA-2008:0514"],"bugzilla":"448541","bugzilla_description":"CVE-2008-1109 evolution: iCalendar buffer overflow via large description parameter","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["evolution28-0:2.8.0-53.el4_6.3","evolution-0:2.12.3-8.el5_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1109.json"},{"CVE":"CVE-2008-0072","severity":"critical","public_date":"2008-03-05T00:00:00Z","advisories":["RHSA-2008:0178","RHSA-2008:0177"],"bugzilla":"435759","bugzilla_description":"CVE-2008-0072 Evolution format string flaw","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["evolution-0:2.8.0-40.el5_1.1","evolution-0:2.0.2-35.0.4.el4_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0072.json"},{"CVE":"CVE-2007-3257","severity":"important","public_date":"2007-06-14T00:00:00Z","advisories":["RHSA-2007:0509","RHSA-2007:0510"],"bugzilla":"244277","bugzilla_description":"CVE-2007-3257 evolution malicious server arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["evolution-0:2.0.2-35.0.4.el4","evolution-data-server-0:1.8.0-15.0.4.el5","evolution-0:1.4.5-21.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3257.json"},{"CVE":"CVE-2007-1558","severity":"moderate","public_date":"2007-04-02T00:00:00Z","advisories":["RHSA-2009:1140","RHSA-2007:0385","RHSA-2007:0344","RHSA-2007:0353","RHSA-2007:0386","RHSA-2007:0401","RHSA-2007:0402"],"bugzilla":"241191","bugzilla_description":"CVE-2007-1558 fetchmail/mutt/evolution/...: APOP password disclosure vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:1.5.0.12-0.1.el4","evolution-0:2.0.2-35.0.2.el4","fetchmail-0:5.9.0-21.7.3.el2.1.6","mutt-5:1.4.1-5.el3","fetchmail-0:6.2.5-6.0.1.el4","ruby-0:1.8.1-7.el4_8.3","evolution-data-server-0:1.8.0-15.0.3.el5","thunderbird-0:1.5.0.12-1.el5","ruby-0:1.8.5-5.el5_3.7","fetchmail-0:6.3.6-1.0.1.el5","mutt-5:1.4.2.2-3.0.2.el5","mutt-5:1.4.1-12.0.3.el4","evolution-0:1.4.5-20.el3","seamonkey-0:1.0.9-0.1.el3","seamonkey-0:1.0.9-0.1.el2","fetchmail-0:6.2.0-3.el3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1558.json"},{"CVE":"CVE-2007-1002","severity":"moderate","public_date":"2007-03-28T00:00:00Z","advisories":["RHSA-2007:0158"],"bugzilla":"233587","bugzilla_description":"CVE-2007-1002 evolution format string flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["evolution-0:2.8.0-33.0.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1002.json"},{"CVE":"CVE-2006-0040","severity":"moderate","public_date":"2006-03-01T00:00:00Z","advisories":[],"bugzilla":"183680","bugzilla_description":"CVE-2006-0040 DoS from large email","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0040.json"},{"CVE":"CVE-2005-2549","severity":"important","public_date":"2005-08-10T00:00:00Z","advisories":["RHSA-2005:267"],"bugzilla":"1617731","bugzilla_description":"CVE-2005-2549 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["evolution-0:1.4.5-16","evolution-0:2.0.2-16.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2549.json"},{"CVE":"CVE-2005-2550","severity":"moderate","public_date":"2005-08-10T00:00:00Z","advisories":["RHSA-2005:267"],"bugzilla":"1617732","bugzilla_description":"CVE-2005-2550 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["evolution-0:1.4.5-16","evolution-0:2.0.2-16.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2550.json"},{"CVE":"CVE-2005-0806","severity":"moderate","public_date":"2005-03-20T00:00:00Z","advisories":["RHSA-2005:397"],"bugzilla":"1617583","bugzilla_description":"CVE-2005-0806 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["evolution-0:2.0.2-16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0806.json"},{"CVE":"CVE-2005-0102","severity":"low","public_date":"2005-01-18T00:00:00Z","advisories":["RHSA-2005:397","RHSA-2005:238"],"bugzilla":"1617460","bugzilla_description":"CVE-2005-0102 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["evolution-0:1.4.5-14","evolution-0:2.0.2-16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0102.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exchange-bmc-os-info_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exchange-bmc-os-info_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exchange-bmc-os-info_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exec-maven-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exec-maven-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exec-maven-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exec-maven-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exec-maven-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exec-maven-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/execstack_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/execstack_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/execstack_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exempi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exempi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exempi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exempi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exempi_security_api_results.json
new file mode 100644
index 0000000..5de649e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exempi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-12648","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1594642","bugzilla_description":"CVE-2018-12648 exempi: NULL pointer dereference in WEBP_Support.hpp:WEBP::GetLE32() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-476|CWE-787|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12648.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18238","severity":"low","public_date":"2018-03-20T00:00:00Z","advisories":["RHSA-2019:2048"],"bugzilla":"1558715","bugzilla_description":"CVE-2017-18238 exempi: Infinite loop in TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTime_Support.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["exempi-0:2.2.0-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18238.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7728","severity":"low","public_date":"2018-02-22T00:00:00Z","advisories":[],"bugzilla":"1555155","bugzilla_description":"CVE-2018-7728 exempi: Heap-based buffer overflow in third-party/zuid/interfaces/MD5.cpp:MD5Update() allows for denial of service via crafted TIFF image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7728.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7729","severity":"low","public_date":"2018-02-22T00:00:00Z","advisories":[],"bugzilla":"1555160","bugzilla_description":"CVE-2018-7729 exempi: Stack-based buffer overflow in XMPFiles/source/FileHandlers/PostScript_Handler.cpp:PostScript_MetaHandler::ParsePSFile() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7729.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7730","severity":"low","public_date":"2018-02-22T00:00:00Z","advisories":["RHSA-2019:2048"],"bugzilla":"1555163","bugzilla_description":"CVE-2018-7730 exempi: Heap-based buffer overflow in PSD_MetaHandler::CacheFileData function in XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp allows for denial of service via crafted XLS file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["exempi-0:2.2.0-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7730.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7731","severity":"low","public_date":"2018-02-22T00:00:00Z","advisories":[],"bugzilla":"1555164","bugzilla_description":"CVE-2018-7731 exempi: NULL pointer dereference in XMPFiles/source/FormatSupport/WEBP_Support.cpp:WEBP::VP8XChunk allows for denial of service via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7731.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18236","severity":"low","public_date":"2017-08-30T00:00:00Z","advisories":["RHSA-2019:2048"],"bugzilla":"1559596","bugzilla_description":"CVE-2017-18236 exempi: Infinite loop in ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSupport/ASF_Support.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["exempi-0:2.2.0-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18236.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18233","severity":"low","public_date":"2017-08-11T00:00:00Z","advisories":["RHSA-2019:2048"],"bugzilla":"1559575","bugzilla_description":"CVE-2017-18233 exempi: Infinite Loop in Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-835","affected_packages":["exempi-0:2.2.0-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18233.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18235","severity":"low","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1559595","bugzilla_description":"CVE-2017-18235 exempi: assertion failure in VPXChunk class in XMPFiles/source/FormatSupport/WEBP_Support.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18235.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18237","severity":"low","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1559599","bugzilla_description":"CVE-2017-18237 exempi:  null pointer dereference in PostScript_Support::ConvertToDate function in XMPFiles/source/FormatSupport/PostScript_Support.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18237.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18234","severity":"low","public_date":"2017-03-25T00:00:00Z","advisories":["RHSA-2019:2048"],"bugzilla":"1559590","bugzilla_description":"CVE-2017-18234 exempi: Use after free via a PDF file containing JPEG data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-416","affected_packages":["exempi-0:2.2.0-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18234.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2_security_api_results.json
new file mode 100644
index 0000000..5128faa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/exiv2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17402","severity":"low","public_date":"2019-10-06T00:00:00Z","advisories":["RHSA-2020:4030"],"bugzilla":"1773683","bugzilla_description":"CVE-2019-17402 exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-3.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17402.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-20421","severity":"moderate","public_date":"2019-09-30T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1800472","bugzilla_description":"CVE-2019-20421 exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835->CWE-400","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20421.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14370","severity":"low","public_date":"2019-07-29T00:00:00Z","advisories":[],"bugzilla":"1747227","bugzilla_description":"CVE-2019-14370 exiv2: Out-of-bounds read in Exiv2::MrwImage::readMetadata() in mrwimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14370.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-14368","severity":"low","public_date":"2019-07-29T00:00:00Z","advisories":[],"bugzilla":"1747229","bugzilla_description":"CVE-2019-14368 exiv2: Heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14368.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-14369","severity":"low","public_date":"2019-07-29T00:00:00Z","advisories":[],"bugzilla":"1747231","bugzilla_description":"CVE-2019-14369 exiv2: Heap-based buffer over-read in Exiv2::PngImage::readMetadata() in pngimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14369.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-14982","severity":"low","public_date":"2019-07-14T00:00:00Z","advisories":[],"bugzilla":"1757909","bugzilla_description":"CVE-2019-14982 exiv2: integer overflow in the WebPImage::getHeaderOffset can lead to a out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14982.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-13504","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":[],"bugzilla":"1729034","bugzilla_description":"CVE-2019-13504 exiv2: out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13504.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-13108","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":[],"bugzilla":"1728481","bugzilla_description":"CVE-2019-13108 exiv2: integer overflow PngImage::readMetadata leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13108.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13109","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1728484","bugzilla_description":"CVE-2019-13109 exiv2: denial of service in PngImage::readMetadata","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13109.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13110","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":[],"bugzilla":"1728486","bugzilla_description":"CVE-2019-13110 exiv2: integer-overflow and out-of-bounds read in CiffDirectory::readDirectory leads to denail of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13110.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-13111","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1728488","bugzilla_description":"CVE-2019-13111 exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13111.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13112","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1728490","bugzilla_description":"CVE-2019-13112 exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13112.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13113","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1728492","bugzilla_description":"CVE-2019-13113 exiv2: invalid data location in CRW image file causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13113.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13114","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1728494","bugzilla_description":"CVE-2019-13114 exiv2: null-pointer dereference in http.c causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13114.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-9144","severity":"moderate","public_date":"2019-02-21T00:00:00Z","advisories":[],"bugzilla":"1683201","bugzilla_description":"CVE-2019-9144 exiv2: infinite recursion in BigTiffImage::printIFD in bigtiffimage.cpp causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9144.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9143","severity":"low","public_date":"2019-02-21T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1684381","bugzilla_description":"CVE-2019-9143 exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9143.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-20096","severity":"low","public_date":"2018-12-10T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1660423","bugzilla_description":"CVE-2018-20096 exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20096.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20097","severity":"low","public_date":"2018-12-10T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1660424","bugzilla_description":"CVE-2018-20097 exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20097.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20098","severity":"low","public_date":"2018-12-10T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1660425","bugzilla_description":"CVE-2018-20098 exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20098.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20099","severity":"low","public_date":"2018-12-10T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1660426","bugzilla_description":"CVE-2018-20099 exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20099.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19607","severity":"low","public_date":"2018-11-23T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1656195","bugzilla_description":"CVE-2018-19607 exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19607.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18915","severity":"low","public_date":"2018-11-02T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1646555","bugzilla_description":"CVE-2018-18915 exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18915.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17581","severity":"low","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1635045","bugzilla_description":"CVE-2018-17581 exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17581.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17282","severity":"low","public_date":"2018-09-20T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1632490","bugzilla_description":"CVE-2018-17282 exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17282.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17229","severity":"low","public_date":"2018-09-17T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1632481","bugzilla_description":"CVE-2018-17229 exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17229.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17230","severity":"low","public_date":"2018-09-17T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1632484","bugzilla_description":"CVE-2018-17230 exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17230.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19107","severity":"low","public_date":"2018-09-01T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1649094","bugzilla_description":"CVE-2018-19107 exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19107.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19535","severity":"low","public_date":"2018-09-01T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1656187","bugzilla_description":"CVE-2018-19535 exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19108","severity":"low","public_date":"2018-08-31T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1649101","bugzilla_description":"CVE-2018-19108 exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-835","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19108.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16336","severity":"low","public_date":"2018-08-13T00:00:00Z","advisories":[],"bugzilla":"1624977","bugzilla_description":"CVE-2018-16336 exiv2: heap-based buffer over-read via a crafted image file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16336.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14338","severity":"low","public_date":"2018-07-14T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1609396","bugzilla_description":"CVE-2018-14338 exiv2: buffer overflow in samples/geotag.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14338.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14046","severity":"low","public_date":"2018-07-08T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1601628","bugzilla_description":"CVE-2018-14046 exiv2: heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14046.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12264","severity":"low","public_date":"2018-06-11T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1590993","bugzilla_description":"CVE-2018-12264 exiv2: integer overflow in getData function in preview.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12264.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12265","severity":"low","public_date":"2018-06-11T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1590994","bugzilla_description":"CVE-2018-12265 exiv2: integer overflow in the LoaderExifJpeg class in preview.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12265.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11037","severity":"low","public_date":"2018-05-13T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1579544","bugzilla_description":"CVE-2018-11037 exiv2: information leak via a crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11037.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-10999","severity":"low","public_date":"2018-05-12T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1579488","bugzilla_description":"CVE-2018-10999 exiv2: heap-based buffer over-read in parseTXTChunk function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10999.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10958","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1578659","bugzilla_description":"CVE-2018-10958 exiv2: SIGABRT caused by memory allocation in types.cpp:Exiv2::Internal::PngChunk::zlibUncompress()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10958.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10998","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1579481","bugzilla_description":"CVE-2018-10998 exiv2: SIGABRT by triggering an incorrect Safe::add call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10998.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10780","severity":"low","public_date":"2018-05-05T00:00:00Z","advisories":[],"bugzilla":"1577319","bugzilla_description":"CVE-2018-10780 exiv2: heap-based buffer over-read in Exiv2::Image::byteSwap2 function in image.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10780.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11531","severity":"low","public_date":"2018-04-22T00:00:00Z","advisories":[],"bugzilla":"1584860","bugzilla_description":"CVE-2018-11531 exiv2: heap-based buffer overflow in getData in preview.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11531.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10772","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1594627","bugzilla_description":"CVE-2018-10772 exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-9303","severity":"low","public_date":"2018-04-04T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1566725","bugzilla_description":"CVE-2018-9303 exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9303.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9304","severity":"low","public_date":"2018-04-04T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1566731","bugzilla_description":"CVE-2018-9304 exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9304.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9305","severity":"low","public_date":"2018-04-04T00:00:00Z","advisories":["RHSA-2019:2101","RHSA-2020:1577"],"bugzilla":"1566735","bugzilla_description":"CVE-2018-9305 exiv2: out of bounds read in IptcData::printStructure in iptc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6","exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9305.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-9306","severity":null,"public_date":"2018-04-04T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1566737","bugzilla_description":"CVE-2018-9306 exiv2: out of bounds read in IptcData::printStructure in iptc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9306.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-9145","severity":"low","public_date":"2018-04-03T00:00:00Z","advisories":[],"bugzilla":"1564281","bugzilla_description":"CVE-2018-9145 exiv2: reachable assertion abort in the function Exiv2::DataBuf::DataBuf at include/exiv2/types.hpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9145.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9144","severity":"low","public_date":"2018-03-28T00:00:00Z","advisories":[],"bugzilla":"1564277","bugzilla_description":"CVE-2018-9144 exiv2: out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9144.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9146","severity":null,"public_date":"2018-03-28T00:00:00Z","advisories":[],"bugzilla":"1564284","bugzilla_description":"CVE-2018-9146 exiv2: out-of-bounds read in Exiv2::IptcData::printStructure in image.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9146.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8976","severity":"low","public_date":"2018-03-23T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1561213","bugzilla_description":"CVE-2018-8976 exiv2: out-of-bounds read in Exiv2::Internal::stringFormat image.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8976.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8977","severity":"low","public_date":"2018-03-23T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1561217","bugzilla_description":"CVE-2018-8977 exiv2: invalid memory access in Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8977.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-4868","severity":"low","public_date":"2018-02-01T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1531724","bugzilla_description":"CVE-2018-4868 exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4868.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-5772","severity":"low","public_date":"2018-01-18T00:00:00Z","advisories":[],"bugzilla":"1536904","bugzilla_description":"CVE-2018-5772 exiv2: Uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() can allow a remote attacker to cause a denial of service via a crafted tif file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5772.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17669","severity":"low","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1526052","bugzilla_description":"CVE-2017-17669 exiv2: Heap-based buffer over-read in PngChunk::keyTXTChunk function of pngchunk_int.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17669.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-17725","severity":"low","public_date":"2017-12-12T00:00:00Z","advisories":[],"bugzilla":"1545232","bugzilla_description":"CVE-2017-17725 exiv2: heap-based buffer over-read in Exiv2::getULong function in types.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17725.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-17724","severity":"low","public_date":"2017-12-10T00:00:00Z","advisories":["RHSA-2019:2101"],"bugzilla":"1545237","bugzilla_description":"CVE-2017-17724 exiv2: heap-buffer-overflow in Exiv2::IptcData::printStructure in src/iptc.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["exiv2-0:0.27.0-2.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17724.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-17722","severity":"low","public_date":"2017-12-10T00:00:00Z","advisories":[],"bugzilla":"1545246","bugzilla_description":"CVE-2017-17722 exiv2: reachable assertion in the readHeader function in bigtiffimage.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17722.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17723","severity":"low","public_date":"2017-12-10T00:00:00Z","advisories":[],"bugzilla":"1545249","bugzilla_description":"CVE-2017-17723 exiv2:  heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17723.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-18005","severity":"low","public_date":"2017-11-18T00:00:00Z","advisories":["RHSA-2020:1577"],"bugzilla":"1531171","bugzilla_description":"CVE-2017-18005 exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-476|CWE-617)","affected_packages":["exiv2-0:0.27.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-14857","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1500306","bugzilla_description":"CVE-2017-14857 exiv2: Invalid free in the Image class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14858","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500307","bugzilla_description":"CVE-2017-14858 exiv2: Heap-buffer overflow in the Exiv2::l2Data function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14858.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14865","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500309","bugzilla_description":"CVE-2017-14865 exiv2: Heap-based buffer overflow in the Exiv2::us2Data function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14865.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14866","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500310","bugzilla_description":"CVE-2017-14866 exiv2: Heap-based buffer overflow in the Exiv2::s2Data function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14866.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14859","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500315","bugzilla_description":"CVE-2017-14859 exiv2: Invalid memory address dereference in Exiv2::StringValueBase::read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14859.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14860","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500316","bugzilla_description":"CVE-2017-14860 exiv2: Heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14860.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14861","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500317","bugzilla_description":"CVE-2017-14861 exiv2: Stack consumption in the Exiv2::Internal::stringFormat function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14861.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14862","severity":"low","public_date":"2017-09-23T00:00:00Z","advisories":[],"bugzilla":"1500318","bugzilla_description":"CVE-2017-14862 exiv2: Invalid memory address dereference in the Exiv2::DataValue::read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14864","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1500308","bugzilla_description":"CVE-2017-14864 exiv2: Invalid memory address dereference in Exiv2::getULong","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14863","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1500319","bugzilla_description":"CVE-2017-14863 exiv2: NULL pointer dereference in the Exiv2::Image::printIFDStructure function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14863.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12955","severity":"low","public_date":"2017-08-17T00:00:00Z","advisories":[],"bugzilla":"1487207","bugzilla_description":"CVE-2017-12955 exiv2: Heap-based buffer overflow in basicio.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12955.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12956","severity":"low","public_date":"2017-08-17T00:00:00Z","advisories":[],"bugzilla":"1487208","bugzilla_description":"CVE-2017-12956 exiv2: Illegal address access in in Exiv2::FileIo::path[abi:cxx11]()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12956.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12957","severity":"low","public_date":"2017-08-17T00:00:00Z","advisories":[],"bugzilla":"1487210","bugzilla_description":"CVE-2017-12957 exiv2: Heap-based buffer over-read in Exiv2::Image::io function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12957.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11683","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475754","bugzilla_description":"CVE-2017-11683 exiv2: Reachable assertion in the Internal::TiffReader::visitDirectory function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11683.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11592","severity":"low","public_date":"2017-07-22T00:00:00Z","advisories":[],"bugzilla":"1475727","bugzilla_description":"CVE-2017-11592 exiv2: Mismatched memory management routines in the Exiv2::FileIo::seek function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11592.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11591","severity":"low","public_date":"2017-07-22T00:00:00Z","advisories":[],"bugzilla":"1475729","bugzilla_description":"CVE-2017-11591 exiv2: Floating point exception in the Exiv2::ValueType function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11591.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11553","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1475368","bugzilla_description":"CVE-2017-11553 exiv2: illegal address access in the extend_alias_table function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11553.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11338","severity":"low","public_date":"2017-07-14T00:00:00Z","advisories":[],"bugzilla":"1474325","bugzilla_description":"CVE-2017-11338 exiv2: Infinite loop in the Exiv2::Image::printIFDStructure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11338.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11339","severity":"moderate","public_date":"2017-07-14T00:00:00Z","advisories":[],"bugzilla":"1474329","bugzilla_description":"CVE-2017-11339 exiv2: Heap-based buffer overflow in the Image::printIFDStructure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11339.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-11340","severity":"low","public_date":"2017-07-14T00:00:00Z","advisories":[],"bugzilla":"1474334","bugzilla_description":"CVE-2017-11340 exiv2: Segmentation fault in the XmpParser::terminate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11340.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11336","severity":"low","public_date":"2017-07-13T00:00:00Z","advisories":[],"bugzilla":"1474316","bugzilla_description":"CVE-2017-11336 exiv2: Heap-based buffer over-read in the Image::printIFDStructure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11336.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11337","severity":"low","public_date":"2017-07-13T00:00:00Z","advisories":[],"bugzilla":"1474319","bugzilla_description":"CVE-2017-11337 exiv2: Invalid free in the Action::TaskFactory::cleanup","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11337.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9953","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469769","bugzilla_description":"CVE-2017-9953 exiv2: Segmentation fault in Image::printIFDStructure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9953.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000126","severity":"low","public_date":"2017-06-30T00:00:00Z","advisories":[],"bugzilla":"1524425","bugzilla_description":"CVE-2017-1000126 exiv2: Out-of-bounds read in webp parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000127","severity":"low","public_date":"2017-06-30T00:00:00Z","advisories":[],"bugzilla":"1524426","bugzilla_description":"CVE-2017-1000127 exiv2: Heap buffer overflow in tiff parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000128","severity":"low","public_date":"2017-06-30T00:00:00Z","advisories":[],"bugzilla":"1524427","bugzilla_description":"CVE-2017-1000128 exiv2: Out-of-bounds read in JPEG2000 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000128.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9239","severity":"low","public_date":"2017-05-25T00:00:00Z","advisories":[],"bugzilla":"1455859","bugzilla_description":"CVE-2017-9239 exiv2: Segmentation fault in TiffImageEntry::doWriteImage function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9239.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-9449","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":[],"bugzilla":"1178908","bugzilla_description":"CVE-2014-9449 exiv2: buffer overflow in RiffVideo::infoTagsHandler","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9449.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/expat-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/expat-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/expat-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/expat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/expat_security_api_results.json
new file mode 100644
index 0000000..db272b2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/expat_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-15903","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3193"],"bugzilla":"1752592","bugzilla_description":"CVE-2019-15903 expat: heap-based buffer over-read via crafted XML input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-125)","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","thunderbird-0:68.2.0-1.el7_7","expat-0:2.1.0-12.el7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15903.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-20843","severity":"moderate","public_date":"2019-06-24T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1723723","bugzilla_description":"CVE-2018-20843 expat: large number of colons in input makes parser consume high amount of resources, leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["expat-0:2.1.0-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-9233","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1462729","bugzilla_description":"CVE-2017-9233 expat: Inifinite loop due to invalid XML in external entity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-9063","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396540","bugzilla_description":"CVE-2016-9063 firefox: Possible integer overflow to fix inside XML_Parse in Expat","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9063.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-5300","severity":"moderate","public_date":"2016-06-04T00:00:00Z","advisories":[],"bugzilla":"1343085","bugzilla_description":"CVE-2016-5300 expat: Little entropy used for hash initialization","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5300.json"},{"CVE":"CVE-2016-0718","severity":"moderate","public_date":"2016-05-17T00:00:00Z","advisories":["RHSA-2016:2824","RHSA-2018:2486"],"bugzilla":"1296102","bugzilla_description":"CVE-2016-0718 expat: Out-of-bounds heap read on crafted input causing crash","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["expat-0:2.0.1-13.el6_8","expat-0:2.1.0-10.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0718.json"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2015-2716","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988","RHBA-2020:1539","RHSA-2020:1011","RHSA-2015:1012","RHSA-2020:2508","RHBA-2020:1540"],"bugzilla":"1220607","bugzilla_description":"CVE-2015-2716 expat: Integer overflow leading to buffer overflow in XML_GetBuffer()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","expat-0:2.1.0-11.el7_7","thunderbird-0:31.7.0-1.el6_6","firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1","expat-0:2.1.0-11.el7","thunderbird-0:31.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2716.json"},{"CVE":"CVE-2012-6702","severity":"moderate","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1319731","bugzilla_description":"CVE-2012-6702 expat: Using XML_Parse before rand() results into non-random output","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6702.json"},{"CVE":"CVE-2013-0340","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"1000109","bugzilla_description":"CVE-2013-0340 expat: internal entity expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0340.json"},{"CVE":"CVE-2013-0341","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"1000110","bugzilla_description":"expat: external entity expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0341.json"},{"CVE":"CVE-2012-0876","severity":"moderate","public_date":"2012-03-03T00:00:00Z","advisories":["RHSA-2017:3239","RHSA-2016:0062","RHSA-2016:2957","RHSA-2012:0731"],"bugzilla":"786617","bugzilla_description":"CVE-2012-0876 expat: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["expat-0:1.95.8-11.el5_8","expat-0:2.0.1-11.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0876.json"},{"CVE":"CVE-2012-1147","severity":"low","public_date":"2012-03-03T00:00:00Z","advisories":[],"bugzilla":"801634","bugzilla_description":"CVE-2012-1147 expat: resource leak in readfilemap.c","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1147.json"},{"CVE":"CVE-2012-1148","severity":"moderate","public_date":"2012-03-03T00:00:00Z","advisories":["RHSA-2016:2957","RHSA-2012:0731"],"bugzilla":"801648","bugzilla_description":"CVE-2012-1148 expat: Memory leak in poolGrow","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["expat-0:1.95.8-11.el5_8","expat-0:2.0.1-11.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1148.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2009-3560","severity":"moderate","public_date":"2009-12-02T00:00:00Z","advisories":["RHSA-2017:3239","RHSA-2011:0896","RHSA-2009:1625"],"bugzilla":"533174","bugzilla_description":"CVE-2009-3560 expat: buffer over-read and crash in big2_toUtf8() on XML with malformed UTF-8 sequences","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["expat-0:1.95.7-4.el4_8.2","expat-0:1.95.5-6.2","expat-0:1.95.8-8.3.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3560.json"},{"CVE":"CVE-2009-3720","severity":"moderate","public_date":"2009-01-17T00:00:00Z","advisories":["RHSA-2017:3239","RHSA-2011:0896","RHSA-2009:1625","RHSA-2010:0002","RHSA-2011:0491","RHSA-2011:0492","RHSA-2009:1572"],"bugzilla":"531697","bugzilla_description":"CVE-2009-3720 expat: buffer over-read and crash on XML with malformed UTF-8 sequences","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["expat-0:1.95.7-4.el4_8.2","expat-0:1.95.5-6.2","python-0:2.3.4-14.10.el4","expat-0:1.95.8-8.3.el5_4.2","python-0:2.4.3-44.el5","4Suite-0:0.11.1-15","PyXML-0:0.8.3-6.el4_8.2","4Suite-0:1.0-3.el4_8.1","PyXML-0:0.8.4-4.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3720.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/expect_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/expect_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/expect_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fabtests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fabtests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fabtests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fapolicyd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fapolicyd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fapolicyd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/farstream02_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/farstream02_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/farstream02_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fcoe-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fcoe-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fcoe-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-compendium-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-compendium-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-compendium-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-compendium_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-compendium_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-compendium_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-core-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-core-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-core-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-foundation-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-foundation-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-foundation-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-foundation_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-foundation_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-osgi-foundation_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-utils-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-utils-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-utils-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/felix-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-aliyun_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-aliyun_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-aliyun_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-all_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-all_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-all_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-amt-ws_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-amt-ws_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-amt-ws_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-apc-snmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-apc-snmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-apc-snmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-apc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-apc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-apc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-aws_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-aws_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-aws_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-azure-arm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-azure-arm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-azure-arm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-bladecenter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-bladecenter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-bladecenter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-brocade_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-brocade_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-brocade_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-cisco-mds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-cisco-mds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-cisco-mds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-cisco-ucs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-cisco-ucs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-cisco-ucs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-compute_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-compute_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-compute_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-drac5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-drac5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-drac5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-eaton-snmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-eaton-snmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-eaton-snmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-emerson_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-emerson_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-emerson_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-eps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-eps_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-eps_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-gce_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-gce_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-gce_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-heuristics-ping_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-heuristics-ping_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-heuristics-ping_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-hpblade_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-hpblade_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-hpblade_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ibmblade_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ibmblade_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ibmblade_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ifmib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ifmib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ifmib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo-moonshot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo-moonshot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo-moonshot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo-mp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo-mp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo-mp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo-ssh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo-ssh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo-ssh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ilo2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-intelmodular_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-intelmodular_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-intelmodular_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ipdu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ipdu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ipdu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ipmilan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ipmilan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-ipmilan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-kdump_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-kdump_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-kdump_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-lpar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-lpar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-lpar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-mpath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-mpath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-mpath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-redfish_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-redfish_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-redfish_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-rhevm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-rhevm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-rhevm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-rsa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-rsa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-rsa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-rsb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-rsb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-rsb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-sbd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-sbd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-sbd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-scsi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-scsi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-scsi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-virsh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-virsh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-virsh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-vmware-rest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-vmware-rest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-vmware-rest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-vmware-soap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-vmware-soap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-vmware-soap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-wti_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-wti_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-wti_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-zvm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-zvm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-agents-zvm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-libvirt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-libvirt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-libvirt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-multicast_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-multicast_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-multicast_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-serial_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-serial_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-serial_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-tcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-tcp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd-tcp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fence-virtd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fetchmail_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fetchmail_security_api_results.json
new file mode 100644
index 0000000..ba51b9f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fetchmail_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3482","severity":"low","public_date":"2012-08-13T00:00:00Z","advisories":[],"bugzilla":"847988","bugzilla_description":"CVE-2012-3482 fetchmail: DoS (crash) in the base64 decoder upon server NTLM protocol exchange abort right after the initial request","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3482.json"},{"CVE":"CVE-2011-1947","severity":"low","public_date":"2011-05-30T00:00:00Z","advisories":[],"bugzilla":"709284","bugzilla_description":"CVE-2011-1947 fetchmail: Application hang due unguarded blocking I/O in IMAP/POP3 STARTTLS initialization (fetchmail-SA-2011-01)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1947.json"},{"CVE":"CVE-2010-1167","severity":"low","public_date":"2010-04-18T00:00:00Z","advisories":[],"bugzilla":"583819","bugzilla_description":"CVE-2010-1167 fetchmail: denial of service in debug mode with multichar locales","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1167.json"},{"CVE":"CVE-2009-2666","severity":"moderate","public_date":"2009-08-05T00:00:00Z","advisories":["RHSA-2009:1427"],"bugzilla":"515804","bugzilla_description":"CVE-2009-2666 fetchmail: SSL null terminator bypass","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["fetchmail-0:6.2.0-3.el3.5","fetchmail-0:6.2.5-6.0.1.el4_8.1","fetchmail-0:6.3.6-1.1.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2666.json"},{"CVE":"CVE-2008-2711","severity":"low","public_date":"2008-06-13T00:00:00Z","advisories":["RHSA-2009:1427"],"bugzilla":"451758","bugzilla_description":"CVE-2008-2711 fetchmail: Crash in large log messages in verbose mode","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["fetchmail-0:6.2.0-3.el3.5","fetchmail-0:6.2.5-6.0.1.el4_8.1","fetchmail-0:6.3.6-1.1.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2711.json"},{"CVE":"CVE-2007-4565","severity":"low","public_date":"2007-08-28T00:00:00Z","advisories":["RHSA-2009:1427"],"bugzilla":"260601","bugzilla_description":"CVE-2007-4565 Fetchmail NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["fetchmail-0:6.2.0-3.el3.5","fetchmail-0:6.2.5-6.0.1.el4_8.1","fetchmail-0:6.3.6-1.1.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4565.json"},{"CVE":"CVE-2007-1558","severity":"moderate","public_date":"2007-04-02T00:00:00Z","advisories":["RHSA-2009:1140","RHSA-2007:0385","RHSA-2007:0344","RHSA-2007:0353","RHSA-2007:0386","RHSA-2007:0401","RHSA-2007:0402"],"bugzilla":"241191","bugzilla_description":"CVE-2007-1558 fetchmail/mutt/evolution/...: APOP password disclosure vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:1.5.0.12-0.1.el4","evolution-0:2.0.2-35.0.2.el4","fetchmail-0:5.9.0-21.7.3.el2.1.6","mutt-5:1.4.1-5.el3","fetchmail-0:6.2.5-6.0.1.el4","ruby-0:1.8.1-7.el4_8.3","evolution-data-server-0:1.8.0-15.0.3.el5","thunderbird-0:1.5.0.12-1.el5","ruby-0:1.8.5-5.el5_3.7","fetchmail-0:6.3.6-1.0.1.el5","mutt-5:1.4.2.2-3.0.2.el5","mutt-5:1.4.1-12.0.3.el4","evolution-0:1.4.5-20.el3","seamonkey-0:1.0.9-0.1.el3","seamonkey-0:1.0.9-0.1.el2","fetchmail-0:6.2.0-3.el3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1558.json"},{"CVE":"CVE-2006-5867","severity":"moderate","public_date":"2007-01-04T00:00:00Z","advisories":["RHSA-2007:0018"],"bugzilla":"221984","bugzilla_description":"CVE-2006-5867 fetchmail not enforcing TLS for POP3 properly","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["fetchmail-0:6.2.5-6.el4.5","fetchmail-0:5.9.0-21.7.3.el2.1.4","fetchmail-0:6.2.0-3.el3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5867.json"},{"CVE":"CVE-2005-4348","severity":"low","public_date":"2005-12-19T00:00:00Z","advisories":["RHSA-2007:0018"],"bugzilla":"1617856","bugzilla_description":"CVE-2005-4348 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["fetchmail-0:6.2.5-6.el4.5","fetchmail-0:5.9.0-21.7.3.el2.1.4","fetchmail-0:6.2.0-3.el3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4348.json"},{"CVE":"CVE-2005-2335","severity":"important","public_date":"2005-07-21T00:00:00Z","advisories":["RHSA-2005:640"],"bugzilla":"1617705","bugzilla_description":"CVE-2005-2335 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["fetchmail-0:6.2.5-6.el4.2","fetchmail-0:6.2.0-3.el3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2335.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-double_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-double_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-double_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-long_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-long_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-long_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-quad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-quad_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-quad_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-single_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-single_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs-single_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fftw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file-roller_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file-roller_security_api_results.json
new file mode 100644
index 0000000..104ff82
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file-roller_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-11736","severity":"low","public_date":"2020-04-12T00:00:00Z","advisories":[],"bugzilla":"1824985","bugzilla_description":"CVE-2020-11736 file-roller: directory traversal via directory symlink pointing outside of the target directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11736.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2019-16680","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":[],"bugzilla":"1767594","bugzilla_description":"CVE-2019-16680 file-roller: path traversal vulnerability via a specially crafted filename contained in malicious archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16680.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-7162","severity":"moderate","public_date":"2016-09-07T00:00:00Z","advisories":[],"bugzilla":"1374275","bugzilla_description":"CVE-2016-7162 file-roller: Path traversal vulnerability when opening crafted archive","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7162.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2013-4668","severity":"moderate","public_date":"2013-07-08T00:00:00Z","advisories":[],"bugzilla":"981471","bugzilla_description":"CVE-2013-4668 file-roller: path sanitization errors","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4668.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file_security_api_results.json
new file mode 100644
index 0000000..4a79f2a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/file_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-6829","severity":"moderate","public_date":"2020-06-02T12:00:00Z","advisories":["RHSA-2020:4076"],"bugzilla":"1826187","bugzilla_description":"CVE-2020-6829 nss: Side channel attack on ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6829.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12402","severity":"moderate","public_date":"2020-06-02T12:00:00Z","advisories":["RHSA-2020:4076","RHSA-2020:3280"],"bugzilla":"1826231","bugzilla_description":"CVE-2020-12402 nss: Side channel vulnerabilities during RSA key generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.53.1-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12402.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12399","severity":"moderate","public_date":"2020-05-21T00:00:00Z","advisories":[],"bugzilla":"1826177","bugzilla_description":"CVE-2020-12399 nss: Timing attack on DSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12399.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-11736","severity":"low","public_date":"2020-04-12T00:00:00Z","advisories":[],"bugzilla":"1824985","bugzilla_description":"CVE-2020-11736 file-roller: directory traversal via directory symlink pointing outside of the target directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11736.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2019-18218","severity":"moderate","public_date":"2019-08-26T00:00:00Z","advisories":[],"bugzilla":"1765272","bugzilla_description":"CVE-2019-18218 file: heap-based buffer overflow in cdf_read_property_info in cdf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18218.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-11719","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1951","RHSA-2020:4076"],"bugzilla":"1728436","bugzilla_description":"CVE-2019-11719 nss: Out-of-bounds read when importing curve25519 private key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11719.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11729","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:4190","RHSA-2019:1951"],"bugzilla":"1728437","bugzilla_description":"CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["nss-0:3.44.0-7.el7_7","nss-util-0:3.44.0-4.el7_7","nss-0:3.44.0-7.el8_0","nss-softokn-0:3.44.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11729.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13147","severity":null,"public_date":"2019-06-30T00:00:00Z","advisories":[],"bugzilla":"1726067","bugzilla_description":"CVE-2019-13147 audiofile: a NULL pointer dereference in ulaw2linear_buf in G711.cpp in libmodules.a leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13147.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-8905","severity":"low","public_date":"2019-02-18T00:00:00Z","advisories":[],"bugzilla":"1679181","bugzilla_description":"CVE-2019-8905 file: stack-based buffer over-read in do_core_note in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8905.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-8904","severity":"low","public_date":"2019-02-18T00:00:00Z","advisories":[],"bugzilla":"1679188","bugzilla_description":"CVE-2019-8904 file: stack-based buffer over-read in do_bid_note in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8904.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-3832","severity":"low","public_date":"2019-02-07T00:00:00Z","advisories":[],"bugzilla":"1677216","bugzilla_description":"CVE-2019-3832 libsndfile: incomplete fix for CVE-2018-19758 still allow to read beyond buffer limits","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3832.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-1003014","severity":"moderate","public_date":"2019-01-28T00:00:00Z","advisories":["RHBA-2019:0326"],"bugzilla":"1671324","bugzilla_description":"CVE-2019-1003014 jenkins-plugin-config-file-provider: Stored XSS vulnerability in Config File Provider Plugin (SECURITY-1253)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["jenkins-2-plugins-0:3.11.1549642489-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1003014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-8907","severity":"low","public_date":"2019-01-03T00:00:00Z","advisories":[],"bugzilla":"1679138","bugzilla_description":"CVE-2019-8907 file: do_core_note in readelf.c allows remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8907.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-8906","severity":"low","public_date":"2019-01-03T00:00:00Z","advisories":[],"bugzilla":"1679175","bugzilla_description":"CVE-2019-8906 file: out-of-bounds read in do_core_note in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8906.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-19661","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1659627","bugzilla_description":"CVE-2018-19661 libsndfile: buffer over-read in the function i2ulaw_array in ulaw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19661.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19662","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2020:1636","RHSA-2020:3922"],"bugzilla":"1659631","bugzilla_description":"CVE-2018-19662 libsndfile: buffer over-read in the function i2alaw_array in alaw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["libsndfile-0:1.0.28-10.el8","libsndfile-0:1.0.25-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19662.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19432","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":[],"bugzilla":"1652566","bugzilla_description":"CVE-2018-19432 libsndfile:  OOB read in sf_write_int in sndfile.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19432.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-19758","severity":"low","public_date":"2018-10-29T00:00:00Z","advisories":[],"bugzilla":"1659638","bugzilla_description":"CVE-2018-19758 libsndfile: heap-based buffer over-read at wav.c in wav_write_header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19758.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17095","severity":"moderate","public_date":"2018-09-16T00:00:00Z","advisories":["RHSA-2020:3877"],"bugzilla":"1631088","bugzilla_description":"CVE-2018-17095 audiofile: Heap-based buffer overflow in Expand3To4Module::run() when running sfconvert","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["audiofile-1:0.3.6-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17095.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-13440","severity":"low","public_date":"2018-07-07T00:00:00Z","advisories":["RHSA-2020:3877"],"bugzilla":"1600367","bugzilla_description":"CVE-2018-13440 audiofile: NULL pointer dereference in ModuleState::setup() in modules/ModuleState.cpp allows for denial of service via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["audiofile-1:0.3.6-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13440.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-13419","severity":"low","public_date":"2018-07-05T00:00:00Z","advisories":[],"bugzilla":"1599152","bugzilla_description":"CVE-2018-13419 libsndfile: Memory leak in common.c:psf_allocate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13419.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-13139","severity":"moderate","public_date":"2018-07-03T00:00:00Z","advisories":["RHSA-2020:1185","RHSA-2020:1636"],"bugzilla":"1598480","bugzilla_description":"CVE-2018-13139 libsndfile: stack-based buffer overflow in sndfile-deinterleave utility","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libsndfile-0:1.0.25-11.el7","libsndfile-0:1.0.28-10.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-10360","severity":"low","public_date":"2018-06-09T00:00:00Z","advisories":["RHSA-2020:2521","RHBA-2020:1539","RHSA-2020:1022","RHSA-2020:2838","RHSA-2020:2768","RHBA-2020:1540"],"bugzilla":"1590000","bugzilla_description":"CVE-2018-10360 file: out-of-bounds read via a crafted ELF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","file-0:5.11-35.el7_6.1","file-0:5.11-35.el7_7.1","file-0:5.11-33.el7_4.1","file-0:5.11-36.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10360.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-16680","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":[],"bugzilla":"1767594","bugzilla_description":"CVE-2019-16680 file-roller: path traversal vulnerability via a specially crafted filename contained in malicious archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16680.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-17456","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1524570","bugzilla_description":"CVE-2017-17456 libsndfile: SEGV on unknown address in the function d2alaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17457","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1524571","bugzilla_description":"CVE-2017-17457 libsndfile: SEGV on unknown address in the function d2ulaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17457.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16942","severity":"low","public_date":"2017-11-25T00:00:00Z","advisories":[],"bugzilla":"1517902","bugzilla_description":"CVE-2017-16942 libsndfile: divide-by-zero error in wav_w64_read_fmt_chunk()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-14634","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1499982","bugzilla_description":"CVE-2017-14634 libsndfile: Divide-by-zero in the double64_init() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14634.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14245","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1500006","bugzilla_description":"CVE-2017-14245 libsndfile: Out-of-bounds read in the function d2alaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14245.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14246","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1500007","bugzilla_description":"CVE-2017-14246 libsndfile: Out-of-bounds read in the function d2ulaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14246.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000249","severity":"important","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1488053","bugzilla_description":"CVE-2017-1000249 file: Stack-based buffer overflow in do_bid_note()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000249.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-12562","severity":"low","public_date":"2017-08-05T00:00:00Z","advisories":[],"bugzilla":"1483140","bugzilla_description":"CVE-2017-12562 libsndfile: Heap-based Buffer Overflow in psf_binheader_writef function in common.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12562.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6892","severity":"low","public_date":"2017-05-23T00:00:00Z","advisories":[],"bugzilla":"1463326","bugzilla_description":"CVE-2017-6892 libsndfile: Information disclosure via aiff_read_chanmap() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6892.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-6512","severity":"low","public_date":"2017-05-02T00:00:00Z","advisories":[],"bugzilla":"1457832","bugzilla_description":"CVE-2017-6512 perl-File-Path: rmtree/remove_tree race condition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6512.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-8361","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1449518","bugzilla_description":"CVE-2017-8361 libsndfile: Buffer overflow in the flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8361.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8362","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1449519","bugzilla_description":"CVE-2017-8362 libsndfile: Out-of-bounds read in the flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8362.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8365","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1449520","bugzilla_description":"CVE-2017-8365 libsndfile: Buffer over-read in the l2les_array function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8365.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8363","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1458694","bugzilla_description":"CVE-2017-8363 libsndfile: Heap buffer over-read in the flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8363.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7741","severity":"low","public_date":"2017-04-11T00:00:00Z","advisories":[],"bugzilla":"1442033","bugzilla_description":"CVE-2017-7741 libsndfile: Invalid memory write in flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7741.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7742","severity":"low","public_date":"2017-04-11T00:00:00Z","advisories":[],"bugzilla":"1442034","bugzilla_description":"CVE-2017-7742 libsndfile: Invalid memory read in flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7742.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7586","severity":"low","public_date":"2017-03-26T00:00:00Z","advisories":[],"bugzilla":"1440758","bugzilla_description":"CVE-2017-7586 libsndfile: Error in header_read() causing stack-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7586.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7585","severity":"low","public_date":"2017-03-24T00:00:00Z","advisories":[],"bugzilla":"1440756","bugzilla_description":"CVE-2017-7585 libsndfile: Stack-based buffer overflow in flac_buffer_copy()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7585.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6827","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432924","bugzilla_description":"CVE-2017-6827 audiofile: Heap-based buffer overflow in MSADPCM::initializeCoefficients","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6827.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6828","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432925","bugzilla_description":"CVE-2017-6828 audiofile: Heap-based buffer overflow in readValue","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6828.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6829","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432928","bugzilla_description":"CVE-2017-6829 audiofile: Global buffer overflow in decodeSample","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6829.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6830","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432929","bugzilla_description":"CVE-2017-6830 audiofile: Heap-based buffer overflow in alaw2linear_buf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6830.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6831","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432930","bugzilla_description":"CVE-2017-6831 audiofile: Heap-based buffer overflow in IMA::decodeBlockWAVE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6831.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6832","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432932","bugzilla_description":"CVE-2017-6832 audiofile: Heap-based buffer overflow in MSADPCM::decodeBlock","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6832.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6833","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432933","bugzilla_description":"CVE-2017-6833 audiofile: Divide-by-zero in BlockCodec::runPull","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6833.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6834","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432935","bugzilla_description":"CVE-2017-6834 audiofile: Heap-based buffer overflow in ulaw2linear_buf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6834.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6836","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432937","bugzilla_description":"CVE-2017-6836 audiofile: Heap-based buffer overflow in Expand3To4Module::run","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6836.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6835","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432939","bugzilla_description":"CVE-2017-6835 audiofile: Divide-by-zero in BlockCodec::reset1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6835.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6837","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432942","bugzilla_description":"CVE-2017-6837 audiofile: Index out of bounds for type int16_t","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6838","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432943","bugzilla_description":"CVE-2017-6838 audiofile: Signed integer overflow in sfconvert.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6838.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6839","severity":"low","public_date":"2017-02-26T00:00:00Z","advisories":[],"bugzilla":"1432944","bugzilla_description":"CVE-2017-6839 audiofile: Signed integer overflow in MSADPCM.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6839.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7162","severity":"moderate","public_date":"2016-09-07T00:00:00Z","advisories":[],"bugzilla":"1374275","bugzilla_description":"CVE-2016-7162 file-roller: Path traversal vulnerability when opening crafted archive","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7162.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-1000031","severity":"moderate","public_date":"2016-04-20T00:00:00Z","advisories":[],"bugzilla":"1393454","bugzilla_description":"CVE-2016-1000031 Apache Commons FileUpload: DiskFileItem file manipulation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000031.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2015-8865","severity":"low","public_date":"2016-02-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323118","bugzilla_description":"CVE-2015-8865 file: Buffer over-write in finfo_open with malformed magic file","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2015-5242","severity":"important","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1918"],"bugzilla":"1258743","bugzilla_description":"CVE-2015-5242 swiftonfile: use of insecure Python pickle for metadata serialization and storage","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["swiftonfile-0:1.13.1-6.el6rhs","swiftonfile-0:1.13.1-6.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5242.json"},{"CVE":"CVE-2015-7805","severity":"moderate","public_date":"2015-10-12T00:00:00Z","advisories":[],"bugzilla":"1277897","bugzilla_description":"CVE-2015-7805 libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7805.json"},{"CVE":"CVE-2015-7747","severity":"moderate","public_date":"2015-10-04T00:00:00Z","advisories":[],"bugzilla":"1269766","bugzilla_description":"CVE-2015-7747 audiofile: Buffer overflow when changing number of channels and sample format","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"(CWE-119|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7747.json"},{"CVE":"CVE-2015-5223","severity":"moderate","public_date":"2015-08-26T00:00:00Z","advisories":["RHSA-2015:1895","RHSA-2016:0328","RHSA-2016:0329"],"bugzilla":"1255622","bugzilla_description":"CVE-2015-5223 openstack-swift: Information leak via Swift tempurls","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openstack-swift-0:1.13.1-7.el6ost","openstack-swift-0:1.13.1-8.el6ost","openstack-swift-0:1.13.1-8.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5223.json"},{"CVE":"CVE-2014-8177","severity":"moderate","public_date":"2015-08-21T00:00:00Z","advisories":["RHSA-2015:1845","RHSA-2015:1846"],"bugzilla":"1257525","bugzilla_description":"CVE-2014-8177 gluster-swift metadata constraints are not correctly enforced","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["swiftonfile-0:1.13.1-5.el7rhgs","glusterfs-0:3.7.1-16.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8177.json"},{"CVE":"CVE-2015-8075","severity":"low","public_date":"2015-07-10T00:00:00Z","advisories":[],"bugzilla":"1277915","bugzilla_description":"CVE-2015-8075 libsndfile: Out of bounds memory access in psf_strlcpy_crlf","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8075.json"},{"CVE":"CVE-2015-4604","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213442","bugzilla_description":"CVE-2015-4604 CVE-2015-4605 php: denial of service when processing a crafted file with Fileinfo","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4604.json"},{"CVE":"CVE-2015-4605","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213442","bugzilla_description":"CVE-2015-4604 CVE-2015-4605 php: denial of service when processing a crafted file with Fileinfo","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4605.json"},{"CVE":"CVE-2014-9620","severity":"low","public_date":"2015-01-03T00:00:00Z","advisories":["RHSA-2016:0760"],"bugzilla":"1180639","bugzilla_description":"CVE-2014-9620 file: limit the number of ELF notes processed","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9620.json"},{"CVE":"CVE-2014-9621","severity":"low","public_date":"2015-01-03T00:00:00Z","advisories":[],"bugzilla":"1180642","bugzilla_description":"CVE-2014-9621 file: limit string printing to 100 chars","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9621.json"},{"CVE":"CVE-2014-9756","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":[],"bugzilla":"1177254","bugzilla_description":"libsndfile: division by zero leading to denial of service in psf_fwrite()","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9756.json"},{"CVE":"CVE-2014-9496","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":[],"bugzilla":"1178840","bugzilla_description":"CVE-2014-9496 libsndfile: 2 buffer overruns in sd2_parse_rsrc_fork()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9496.json"},{"CVE":"CVE-2014-8116","severity":"moderate","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2015:2155"],"bugzilla":"1171580","bugzilla_description":"CVE-2014-8116 file: multiple denial of service issues (resource consumption)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400->CWE-674","affected_packages":["file-0:5.11-31.el7","file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8116.json"},{"CVE":"CVE-2014-8117","severity":"moderate","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2015:2155"],"bugzilla":"1174606","bugzilla_description":"CVE-2014-8117 file: denial of service issue (resource consumption)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400->CWE-674","affected_packages":["file-0:5.11-31.el7","file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8117.json"},{"CVE":"CVE-2014-9653","severity":"low","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2015:2155"],"bugzilla":"1190116","bugzilla_description":"CVE-2014-9653 file: malformed elf file causes access to uninitialized memory","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9653.json"},{"CVE":"CVE-2014-9652","severity":"low","public_date":"2014-11-11T00:00:00Z","advisories":["RHSA-2015:2155","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1188599","bugzilla_description":"CVE-2014-9652 file: out of bounds read in mconvert()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9652.json"},{"CVE":"CVE-2014-3710","severity":"moderate","public_date":"2014-10-22T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1768","RHSA-2014:1767","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1155071","bugzilla_description":"CVE-2014-3710 file: out-of-bounds read in elf note headers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-40.el6_6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.3","php53-0:5.3.3-26.el5_11","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3710.json"},{"CVE":"CVE-2014-3587","severity":"moderate","public_date":"2014-08-21T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1128587","bugzilla_description":"CVE-2014-3587 file: incomplete fix for CVE-2012-1571 in cdf_read_property_info","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["php53-0:5.3.3-24.el5","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3587.json"},{"CVE":"CVE-2014-0207","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1091842","bugzilla_description":"CVE-2014-0207 file: cdf_read_short_sector insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0207.json"},{"CVE":"CVE-2014-0236","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":[],"bugzilla":"1098209","bugzilla_description":"CVE-2014-0236 file: root_storage NULL pointer deference flaw in CDF parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0236.json"},{"CVE":"CVE-2014-3538","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1098222","bugzilla_description":"CVE-2014-3538 file: unrestricted regular expression matching","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.1","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3538.json"},{"CVE":"CVE-2014-3480","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1104858","bugzilla_description":"CVE-2014-3480 file: cdf_count_chain insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3480.json"},{"CVE":"CVE-2014-3478","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1104863","bugzilla_description":"CVE-2014-3478 file: mconvert incorrect handling of truncated pascal string size","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3478.json"},{"CVE":"CVE-2014-3479","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1104869","bugzilla_description":"CVE-2014-3479 file: cdf_check_stream_offset insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3479.json"},{"CVE":"CVE-2014-3487","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1107544","bugzilla_description":"CVE-2014-3487 file: cdf_read_property_info insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3487.json"},{"CVE":"CVE-2014-0238","severity":"moderate","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1098155","bugzilla_description":"CVE-2014-0238 file: CDF property info parsing nelements infinite loop","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0238.json"},{"CVE":"CVE-2014-0237","severity":"moderate","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1098193","bugzilla_description":"CVE-2014-0237 file: cdf_unpack_summary_info() excessive looping DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0237.json"},{"CVE":"CVE-2014-1943","severity":"moderate","public_date":"2014-02-10T00:00:00Z","advisories":["RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1065836","bugzilla_description":"CVE-2014-1943 file: unrestricted recursion in handling of indirect type rules","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1943.json"},{"CVE":"CVE-2014-0050","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0252","RHSA-2014:0253","RHSA-2014:0473","RHSA-2014:0400","RHSA-2014:0452","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0401","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1062337","bugzilla_description":"CVE-2014-0050 apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el6","tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0050.json"},{"CVE":"CVE-2014-2270","severity":"moderate","public_date":"2013-12-20T00:00:00Z","advisories":["RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1072220","bugzilla_description":"CVE-2014-2270 file: out-of-bounds access in search rules with offsets from input file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2270.json"},{"CVE":"CVE-2013-2186","severity":"important","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1429","RHSA-2013:1428","RHSA-2013:1448","RHSA-2016:0070","RHSA-2013:1430","RHSA-2013:1442"],"bugzilla":"974814","bugzilla_description":"CVE-2013-2186 Apache commons-fileupload: Arbitrary file upload via deserialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-626","affected_packages":["jakarta-commons-fileupload-1:1.1.1-7.7.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2186.json"},{"CVE":"CVE-2013-4668","severity":"moderate","public_date":"2013-07-08T00:00:00Z","advisories":[],"bugzilla":"981471","bugzilla_description":"CVE-2013-4668 file-roller: path sanitization errors","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4668.json"},{"CVE":"CVE-2013-0248","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"922146","bugzilla_description":"CVE-2013-0248 jakarta-commons-fileupload, apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0248.json"},{"CVE":"CVE-2012-2451","severity":"low","public_date":"2012-05-02T00:00:00Z","advisories":[],"bugzilla":"818386","bugzilla_description":"CVE-2012-2451 perl-Config-IniFiles: insecure temporary file usage","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2451.json"},{"CVE":"CVE-2012-1571","severity":"low","public_date":"2012-02-16T00:00:00Z","advisories":["RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"805197","bugzilla_description":"CVE-2012-1571 file: out of bounds read in CDF parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php53-0:5.3.3-23.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1571.json"},{"CVE":"CVE-2013-7345","severity":"moderate","public_date":"2011-12-31T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2014:1765"],"bugzilla":"1079846","bugzilla_description":"CVE-2013-7345 file: extensive backtracking in awk rule regular expression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["php-0:5.4.16-23.el7_0","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7345.json"},{"CVE":"CVE-2011-2696","severity":"moderate","public_date":"2011-07-12T00:00:00Z","advisories":["RHSA-2011:1084"],"bugzilla":"721234","bugzilla_description":"CVE-2011-2696 libsndfile: Application crash due integer overflow by processing certain PAF audio files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["libsndfile-0:1.0.20-3.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2696.json"},{"CVE":"CVE-2011-1760","severity":"moderate","public_date":"2011-04-26T00:00:00Z","advisories":[],"bugzilla":"700883","bugzilla_description":"CVE-2011-1760 oprofile: Local privilege escalation via crafted opcontrol event parameter","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1760.json"},{"CVE":"CVE-2011-2471","severity":"moderate","public_date":"2011-04-26T00:00:00Z","advisories":[],"bugzilla":"712760","bugzilla_description":"CVE-2011-2471 oprofile: Local privilege escalation via shell metacharacters","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2471.json"},{"CVE":"CVE-2011-2472","severity":"moderate","public_date":"2011-04-26T00:00:00Z","advisories":[],"bugzilla":"712761","bugzilla_description":"CVE-2011-2472 oprofile: Directory traversal vulnerability in utils/opcontrol","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2472.json"},{"CVE":"CVE-2011-2473","severity":"moderate","public_date":"2011-04-26T00:00:00Z","advisories":[],"bugzilla":"712762","bugzilla_description":"CVE-2011-2473 oprofile: do_dump_data function symlink attack via opd_pipe","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2473.json"},{"CVE":"CVE-2008-5824","severity":"low","public_date":"2008-12-30T00:00:00Z","advisories":[],"bugzilla":"479966","bugzilla_description":"CVE-2008-5824 audiofile: heap-based overflow in Microsoft ADPCM compression module (app crash, arb. code execution)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5824.json"},{"CVE":"CVE-2007-2799","severity":"moderate","public_date":"2007-05-23T00:00:00Z","advisories":["RHSA-2007:0391"],"bugzilla":"241022","bugzilla_description":"CVE-2007-2799 file integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["file-0:4.10-3.0.2.el4","file-0:4.17-9.0.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2799.json"},{"CVE":"CVE-2007-1536","severity":"important","public_date":"2007-02-08T00:00:00Z","advisories":["RHSA-2007:0124"],"bugzilla":"233164","bugzilla_description":"CVE-2007-1536 file 4.20 fixes a heap overflow in that can result in arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["file-0:4.17-9.el5","file-0:4.10-3.EL4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1536.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/findutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/findutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/findutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fipscheck-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fipscheck-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fipscheck-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fipscheck-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fipscheck-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fipscheck-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fipscheck_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fipscheck_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fipscheck_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firefox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firefox_security_api_results.json
new file mode 100644
index 0000000..6c539af
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firefox_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15683","severity":"important","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4315","RHSA-2020:4311","RHSA-2020:4310","RHSA-2020:4317"],"bugzilla":"1889932","bugzilla_description":"CVE-2020-15683 Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:78.4.0-1.el8_2","firefox-0:78.4.0-1.el7_9","firefox-0:78.4.0-1.el8_1","firefox-0:78.4.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15683.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15999","severity":"moderate","public_date":"2020-10-19T00:00:00Z","advisories":[],"bugzilla":"1890210","bugzilla_description":"CVE-2020-15999 freetype: heap-based buffer overflow via malformed ttf files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15999.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15969","severity":"important","public_date":"2020-10-06T00:00:00Z","advisories":["RHSA-2020:4315","RHSA-2020:4235","RHSA-2020:4311","RHSA-2020:4310","RHSA-2020:4317"],"bugzilla":"1885885","bugzilla_description":"CVE-2020-15969 chromium-browser: Use after free in WebRTC","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:78.4.0-1.el8_2","firefox-0:78.4.0-1.el7_9","chromium-browser-0:86.0.4240.75-1.el6_10","firefox-0:78.4.0-1.el8_1","firefox-0:78.4.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15969.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15665","severity":"moderate","public_date":"2020-10-05T00:00:00Z","advisories":[],"bugzilla":"1885176","bugzilla_description":"CVE-2020-15665 firefox: Address bar not reset when choosing to stay on a page after the beforeunload dialog is shown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15665.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2020-15674","severity":"important","public_date":"2020-10-05T00:00:00Z","advisories":[],"bugzilla":"1885180","bugzilla_description":"CVE-2020-15674 firefox: memory safety bugs showing evidence of memory corruption leading to run arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15674.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15675","severity":"important","public_date":"2020-10-05T00:00:00Z","advisories":[],"bugzilla":"1885181","bugzilla_description":"CVE-2020-15675 firefox: Use-After-Free in WebGL could result in memory corruption and a potentially exploitable crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-120|CWE-416)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15675.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15677","severity":"moderate","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4158","RHSA-2020:4157","RHSA-2020:4156","RHSA-2020:4155","RHSA-2020:4163","RHSA-2020:3834","RHSA-2020:3835","RHSA-2020:3832","RHSA-2020:4080","RHSA-2020:3833"],"bugzilla":"1881664","bugzilla_description":"CVE-2020-15677 Mozilla: Download origin spoofing via redirect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["firefox-0:78.3.0-1.el8_1","firefox-0:78.3.0-1.el8_2","thunderbird-0:78.3.1-1.el8_0","firefox-0:78.3.0-1.el8_0","thunderbird-0:78.3.1-1.el8_1","thunderbird-0:78.3.1-1.el8_2","firefox-0:78.3.0-1.el6_10","thunderbird-0:78.3.1-1.el7_9","firefox-0:78.3.0-1.el7_9","thunderbird-0:78.3.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15676","severity":"moderate","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4158","RHSA-2020:4157","RHSA-2020:4156","RHSA-2020:4155","RHSA-2020:4163","RHSA-2020:3834","RHSA-2020:3835","RHSA-2020:3832","RHSA-2020:4080","RHSA-2020:3833"],"bugzilla":"1881665","bugzilla_description":"CVE-2020-15676 Mozilla: XSS when pasting attacker-controlled data into a contenteditable element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["firefox-0:78.3.0-1.el8_1","firefox-0:78.3.0-1.el8_2","thunderbird-0:78.3.1-1.el8_0","firefox-0:78.3.0-1.el8_0","thunderbird-0:78.3.1-1.el8_1","thunderbird-0:78.3.1-1.el8_2","firefox-0:78.3.0-1.el6_10","thunderbird-0:78.3.1-1.el7_9","firefox-0:78.3.0-1.el7_9","thunderbird-0:78.3.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15676.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15678","severity":"moderate","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4158","RHSA-2020:4157","RHSA-2020:4156","RHSA-2020:4155","RHSA-2020:4163","RHSA-2020:3834","RHSA-2020:3835","RHSA-2020:3832","RHSA-2020:4080","RHSA-2020:3833"],"bugzilla":"1881666","bugzilla_description":"CVE-2020-15678 Mozilla: When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:78.3.0-1.el8_1","firefox-0:78.3.0-1.el8_2","thunderbird-0:78.3.1-1.el8_0","firefox-0:78.3.0-1.el8_0","thunderbird-0:78.3.1-1.el8_1","thunderbird-0:78.3.1-1.el8_2","firefox-0:78.3.0-1.el6_10","thunderbird-0:78.3.1-1.el7_9","firefox-0:78.3.0-1.el7_9","thunderbird-0:78.3.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15678.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15673","severity":"important","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4158","RHSA-2020:4157","RHSA-2020:4156","RHSA-2020:4155","RHSA-2020:4163","RHSA-2020:3834","RHSA-2020:3835","RHSA-2020:3832","RHSA-2020:4080","RHSA-2020:3833"],"bugzilla":"1881667","bugzilla_description":"CVE-2020-15673 Mozilla: Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:78.3.0-1.el8_1","firefox-0:78.3.0-1.el8_2","thunderbird-0:78.3.1-1.el8_0","firefox-0:78.3.0-1.el8_0","thunderbird-0:78.3.1-1.el8_1","thunderbird-0:78.3.1-1.el8_2","firefox-0:78.3.0-1.el6_10","thunderbird-0:78.3.1-1.el7_9","firefox-0:78.3.0-1.el7_9","thunderbird-0:78.3.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15663","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872530","bugzilla_description":"CVE-2020-15663 Mozilla: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15663.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15664","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":["RHSA-2020:3643","RHSA-2020:3555","RHSA-2020:3632","RHSA-2020:3556","RHSA-2020:3633","RHSA-2020:3631","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:3634","RHSA-2020:3558"],"bugzilla":"1872531","bugzilla_description":"CVE-2020-15664 Mozilla: Attacker-induced prompt for extension installation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["thunderbird-0:68.12.0-1.el6_10","thunderbird-0:68.12.0-1.el7_8","firefox-0:68.12.0-1.el6_10","firefox-0:78.2.0-3.el8_0","thunderbird-0:68.12.0-1.el8_2","firefox-0:78.2.0-3.el8_1","thunderbird-0:68.12.0-1.el8_1","thunderbird-0:68.12.0-1.el8_0","firefox-0:68.12.0-1.el7_8","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15669","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":["RHSA-2020:3643","RHSA-2020:3555","RHSA-2020:3632","RHSA-2020:3556","RHSA-2020:3633","RHSA-2020:3631","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:3634","RHSA-2020:3558"],"bugzilla":"1872532","bugzilla_description":"CVE-2020-15669 Mozilla: Use-After-Free when aborting an operation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.12.0-1.el6_10","thunderbird-0:68.12.0-1.el7_8","firefox-0:68.12.0-1.el6_10","firefox-0:78.2.0-3.el8_0","thunderbird-0:68.12.0-1.el8_2","firefox-0:78.2.0-3.el8_1","thunderbird-0:68.12.0-1.el8_1","thunderbird-0:68.12.0-1.el8_0","firefox-0:68.12.0-1.el7_8","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15669.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15670","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872533","bugzilla_description":"CVE-2020-15670 Mozilla: Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15670.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15667","severity":"low","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1884474","bugzilla_description":"CVE-2020-15667 firefox: Invalid name length could result in a heap buffer overflow, leading to memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15667.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-15652","severity":"important","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3344","RHSA-2020:3345","RHSA-2020:3254","RHSA-2020:3342","RHSA-2020:3233","RHSA-2020:3343","RHSA-2020:3241","RHSA-2020:3253","RHSA-2020:3341","RHSA-2020:3229"],"bugzilla":"1861570","bugzilla_description":"CVE-2020-15652 Mozilla: Potential leak of redirect targets when loading scripts in a worker","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":["thunderbird-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el8_2","firefox-0:68.11.0-1.el8_1","firefox-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_0","firefox-0:68.11.0-1.el8_0","thunderbird-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_2","thunderbird-0:68.11.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15659","severity":"important","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3344","RHSA-2020:3345","RHSA-2020:3254","RHSA-2020:3342","RHSA-2020:3233","RHSA-2020:3343","RHSA-2020:3241","RHSA-2020:3253","RHSA-2020:3341","RHSA-2020:3229"],"bugzilla":"1861572","bugzilla_description":"CVE-2020-15659 Mozilla: Memory safety bugs fixed in Firefox 79 and Firefox ESR 68.11","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el8_2","firefox-0:68.11.0-1.el8_1","firefox-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_0","firefox-0:68.11.0-1.el8_0","thunderbird-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_2","thunderbird-0:68.11.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15659.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15655","severity":"important","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1861644","bugzilla_description":"CVE-2020-15655 Mozilla: Extension APIs could be used to bypass Same-Origin Policy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15655.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15653","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1861645","bugzilla_description":"CVE-2020-15653 Mozilla: Bypassing iframe sandbox when allowing popups","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15653.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15656","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1861646","bugzilla_description":"CVE-2020-15656 Mozilla: Type confusion for special arguments in IonMonkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15658","severity":"low","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1861647","bugzilla_description":"CVE-2020-15658 Mozilla: Overriding file type when saving to disk","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15658.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2020-15657","severity":"low","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1861648","bugzilla_description":"CVE-2020-15657 Mozilla: DLL hijacking due to incorrect loading path","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15657.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2020-15654","severity":"low","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1861649","bugzilla_description":"CVE-2020-15654 Mozilla: Custom cursor can overlay user interface","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15654.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2020-15649","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1870408","bugzilla_description":"CVE-2020-15649 Mozilla: Exfiltrating local files through malicious file picker application","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15649.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15650","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1870410","bugzilla_description":"CVE-2020-15650 Mozilla: Overwriting local files through malicious file picker application","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15650.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6514","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3377","RHSA-2020:3344","RHSA-2020:3345","RHSA-2020:3254","RHSA-2020:3342","RHSA-2020:3233","RHSA-2020:3343","RHSA-2020:3241","RHSA-2020:3253","RHSA-2020:3341","RHSA-2020:3229"],"bugzilla":"1857349","bugzilla_description":"CVE-2020-6514 chromium-browser: Inappropriate implementation in WebRTC","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el8_2","firefox-0:68.11.0-1.el8_1","firefox-0:68.11.0-1.el6_10","chromium-browser-0:84.0.4147.105-2.el6_10","thunderbird-0:68.11.0-1.el8_0","firefox-0:68.11.0-1.el8_0","thunderbird-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_2","thunderbird-0:68.11.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6514.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-12412","severity":"moderate","public_date":"2020-07-09T00:00:00Z","advisories":[],"bugzilla":"1855560","bugzilla_description":"CVE-2020-12412 firefox: address bar spoof using history navigation and blocked ports","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12412.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2020-15648","severity":"moderate","public_date":"2020-07-08T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1872537","bugzilla_description":"CVE-2020-15648 Mozilla: X-Frame-Options bypass using object or embed tags","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15648.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-12417","severity":"important","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2828","RHSA-2020:2906","RHSA-2020:2826","RHSA-2020:2827","RHSA-2020:2825"],"bugzilla":"1853014","bugzilla_description":"CVE-2020-12417 Mozilla: Memory corruption due to missing sign-extension for ValueTags on ARM64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["firefox-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","firefox-0:68.10.0-1.el7_8","thunderbird-0:68.10.0-1.el8_1","firefox-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el7_8","firefox-0:68.10.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12417.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12418","severity":"important","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2828","RHSA-2020:2906","RHSA-2020:2826","RHSA-2020:2827","RHSA-2020:2824","RHSA-2020:2825","RHSA-2020:2966"],"bugzilla":"1853015","bugzilla_description":"CVE-2020-12418 Mozilla: Information disclosure due to manipulated URL object","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["firefox-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","firefox-0:68.10.0-1.el7_8","thunderbird-0:68.10.0-1.el8_1","firefox-0:68.10.0-1.el6_10","thunderbird-0:68.10.0-1.el6_10","firefox-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el7_8","firefox-0:68.10.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12418.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12419","severity":"important","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2828","RHSA-2020:2906","RHSA-2020:2826","RHSA-2020:2827","RHSA-2020:2824","RHSA-2020:2825","RHSA-2020:2966"],"bugzilla":"1853016","bugzilla_description":"CVE-2020-12419 Mozilla: Use-after-free in nsGlobalWindowInner","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","firefox-0:68.10.0-1.el7_8","thunderbird-0:68.10.0-1.el8_1","firefox-0:68.10.0-1.el6_10","thunderbird-0:68.10.0-1.el6_10","firefox-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el7_8","firefox-0:68.10.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12419.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12420","severity":"important","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2828","RHSA-2020:2906","RHSA-2020:2826","RHSA-2020:2827","RHSA-2020:2824","RHSA-2020:2825","RHSA-2020:2966"],"bugzilla":"1853017","bugzilla_description":"CVE-2020-12420 Mozilla: Use-After-Free when trying to connect to a STUN server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","firefox-0:68.10.0-1.el7_8","thunderbird-0:68.10.0-1.el8_1","firefox-0:68.10.0-1.el6_10","thunderbird-0:68.10.0-1.el6_10","firefox-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el7_8","firefox-0:68.10.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12420.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12421","severity":"moderate","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2828","RHSA-2020:2906","RHSA-2020:2826","RHSA-2020:2827","RHSA-2020:2824","RHSA-2020:2825","RHSA-2020:2966"],"bugzilla":"1853018","bugzilla_description":"CVE-2020-12421 Mozilla: Add-On updates did not respect the same certificate trust rules as software updates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-296","affected_packages":["firefox-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","firefox-0:68.10.0-1.el7_8","thunderbird-0:68.10.0-1.el8_1","firefox-0:68.10.0-1.el6_10","thunderbird-0:68.10.0-1.el6_10","firefox-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el7_8","firefox-0:68.10.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12421.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-12423","severity":"moderate","public_date":"2020-06-30T00:00:00Z","advisories":[],"bugzilla":"1872536","bugzilla_description":"CVE-2020-12423 Mozilla: DLL Hijacking due to searching %PATH% for a library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12423.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12422","severity":"moderate","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1872538","bugzilla_description":"CVE-2020-12422 Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12422.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12424","severity":"low","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1872539","bugzilla_description":"CVE-2020-12424 Mozilla: WebRTC permission prompt could have been bypassed by a compromised content process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12424.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-12425","severity":"low","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1872540","bugzilla_description":"CVE-2020-12425 Mozilla: Out of bound read in Date.parse()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12425.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-12410","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2378","RHSA-2020:2379","RHSA-2020:2381","RHSA-2020:2382","RHSA-2020:2615","RHSA-2020:2616","RHSA-2020:2380","RHSA-2020:2613","RHSA-2020:2614","RHSA-2020:2611"],"bugzilla":"1843030","bugzilla_description":"CVE-2020-12410 Mozilla: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.9.0-1.el8_2","thunderbird-0:68.9.0-1.el6_10","firefox-0:68.9.0-1.el6_10","thunderbird-0:68.9.0-1.el8_0","thunderbird-0:68.9.0-1.el8_1","thunderbird-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el8_1","firefox-0:68.9.0-1.el8_0","firefox-0:68.9.0-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12410.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12406","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2378","RHSA-2020:2379","RHSA-2020:2381","RHSA-2020:2382","RHSA-2020:2615","RHSA-2020:2616","RHSA-2020:2380","RHSA-2020:2613","RHSA-2020:2614","RHSA-2020:2611"],"bugzilla":"1843312","bugzilla_description":"CVE-2020-12406 Mozilla: JavaScript Type confusion with NativeTypes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:68.9.0-1.el8_2","thunderbird-0:68.9.0-1.el6_10","firefox-0:68.9.0-1.el6_10","thunderbird-0:68.9.0-1.el8_0","thunderbird-0:68.9.0-1.el8_1","thunderbird-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el8_1","firefox-0:68.9.0-1.el8_0","firefox-0:68.9.0-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12406.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12405","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2378","RHSA-2020:2379","RHSA-2020:2381","RHSA-2020:2382","RHSA-2020:2615","RHSA-2020:2616","RHSA-2020:2380","RHSA-2020:2613","RHSA-2020:2614","RHSA-2020:2611"],"bugzilla":"1843313","bugzilla_description":"CVE-2020-12405 Mozilla: Use-after-free in SharedWorkerService","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.9.0-1.el8_2","thunderbird-0:68.9.0-1.el6_10","firefox-0:68.9.0-1.el6_10","thunderbird-0:68.9.0-1.el8_0","thunderbird-0:68.9.0-1.el8_1","thunderbird-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el8_1","firefox-0:68.9.0-1.el8_0","firefox-0:68.9.0-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12399","severity":"moderate","public_date":"2020-05-21T00:00:00Z","advisories":[],"bugzilla":"1826177","bugzilla_description":"CVE-2020-12399 nss: Timing attack on DSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12399.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12387","severity":"critical","public_date":"2020-05-05T00:00:00Z","advisories":["RHSA-2020:2037","RHSA-2020:2048","RHSA-2020:2049","RHSA-2020:2046","RHSA-2020:2036","RHSA-2020:2047","RHSA-2020:2033","RHSA-2020:2031","RHSA-2020:2032","RHSA-2020:2050"],"bugzilla":"1831761","bugzilla_description":"CVE-2020-12387 Mozilla: Use-after-free during worker shutdown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:68.8.0-1.el7_8","thunderbird-0:68.8.0-1.el8_0","firefox-0:68.8.0-1.el6_10","thunderbird-0:68.8.0-1.el7_8","firefox-0:68.8.0-1.el8_0","thunderbird-0:68.8.0-1.el8_2","firefox-0:68.8.0-1.el8_1","thunderbird-0:68.8.0-1.el6_10","firefox-0:68.8.0-1.el8_2","thunderbird-0:68.8.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6831","severity":"important","public_date":"2020-05-05T00:00:00Z","advisories":["RHSA-2020:2037","RHSA-2020:2048","RHSA-2020:2049","RHSA-2020:2046","RHSA-2020:2036","RHSA-2020:2047","RHSA-2020:2033","RHSA-2020:2064","RHSA-2020:2031","RHSA-2020:2032","RHSA-2020:2050"],"bugzilla":"1831763","bugzilla_description":"CVE-2020-6831 usrsctp: Buffer overflow in AUTH chunk input validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:68.8.0-1.el7_8","thunderbird-0:68.8.0-1.el8_0","chromium-browser-0:81.0.4044.138-1.el6_10","firefox-0:68.8.0-1.el6_10","thunderbird-0:68.8.0-1.el7_8","firefox-0:68.8.0-1.el8_0","thunderbird-0:68.8.0-1.el8_2","firefox-0:68.8.0-1.el8_1","thunderbird-0:68.8.0-1.el6_10","firefox-0:68.8.0-1.el8_2","thunderbird-0:68.8.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6831.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-12392","severity":"moderate","public_date":"2020-05-05T00:00:00Z","advisories":["RHSA-2020:2037","RHSA-2020:2048","RHSA-2020:2049","RHSA-2020:2046","RHSA-2020:2036","RHSA-2020:2047","RHSA-2020:2033","RHSA-2020:2031","RHSA-2020:2032","RHSA-2020:2050"],"bugzilla":"1831764","bugzilla_description":"CVE-2020-12392 Mozilla: Arbitrary local file access with 'Copy as cURL'","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["firefox-0:68.8.0-1.el7_8","thunderbird-0:68.8.0-1.el8_0","firefox-0:68.8.0-1.el6_10","thunderbird-0:68.8.0-1.el7_8","firefox-0:68.8.0-1.el8_0","thunderbird-0:68.8.0-1.el8_2","firefox-0:68.8.0-1.el8_1","thunderbird-0:68.8.0-1.el6_10","firefox-0:68.8.0-1.el8_2","thunderbird-0:68.8.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12392.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-12395","severity":"critical","public_date":"2020-05-05T00:00:00Z","advisories":["RHSA-2020:2037","RHSA-2020:2048","RHSA-2020:2049","RHSA-2020:2046","RHSA-2020:2036","RHSA-2020:2047","RHSA-2020:2033","RHSA-2020:2031","RHSA-2020:2032","RHSA-2020:2050"],"bugzilla":"1831765","bugzilla_description":"CVE-2020-12395 Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:68.8.0-1.el7_8","thunderbird-0:68.8.0-1.el8_0","firefox-0:68.8.0-1.el6_10","thunderbird-0:68.8.0-1.el7_8","firefox-0:68.8.0-1.el8_0","thunderbird-0:68.8.0-1.el8_2","firefox-0:68.8.0-1.el8_1","thunderbird-0:68.8.0-1.el6_10","firefox-0:68.8.0-1.el8_2","thunderbird-0:68.8.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12395.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-12388","severity":"critical","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1831944","bugzilla_description":"CVE-2020-12388 Mozilla: Sandbox escape with improperly guarded Access Tokens","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12388.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"10.0"},{"CVE":"CVE-2020-12389","severity":"important","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1831945","bugzilla_description":"CVE-2020-12389 Mozilla: Sandbox escape with improperly separated process types","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12389.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"10.0"},{"CVE":"CVE-2020-12393","severity":"moderate","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1831946","bugzilla_description":"CVE-2020-12393 Mozilla: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12393.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12390","severity":"moderate","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1834686","bugzilla_description":"CVE-2020-12390 Mozilla: Incorrect serialization of nsIPrincipal.origin for IPv6 addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12390.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-12391","severity":"moderate","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1834687","bugzilla_description":"CVE-2020-12391 Mozilla: Content-Security-Policy bypass using object elements","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12391.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-12394","severity":"low","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1834688","bugzilla_description":"CVE-2020-12394 Mozilla: URL spoofing in location bar when unfocussed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12394.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-12396","severity":"important","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1834689","bugzilla_description":"CVE-2020-12396 Mozilla: Memory safety bugs fixed in Firefox 76","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12396.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-6463","severity":"important","public_date":"2020-04-21T00:00:00Z","advisories":["RHSA-2020:3344","RHSA-2020:3345","RHSA-2020:1970","RHSA-2020:3254","RHSA-2020:3342","RHSA-2020:3233","RHSA-2020:3343","RHSA-2020:3241","RHSA-2020:3253","RHSA-2020:3341","RHSA-2020:3229"],"bugzilla":"1840893","bugzilla_description":"CVE-2020-6463 chromium-browser: Use after free in ANGLE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el8_2","firefox-0:68.11.0-1.el8_1","firefox-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_0","firefox-0:68.11.0-1.el8_0","thunderbird-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_2","chromium-browser-0:81.0.4044.122-1.el6_10","thunderbird-0:68.11.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6463.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6823","severity":"moderate","public_date":"2020-04-10T12:00:00Z","advisories":[],"bugzilla":"1821693","bugzilla_description":"CVE-2020-6823 Mozilla: Malicious Extension could obtain auth codes from OAuth login flows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6823.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-6824","severity":"moderate","public_date":"2020-04-10T12:00:00Z","advisories":[],"bugzilla":"1821695","bugzilla_description":"CVE-2020-6824 Mozilla: Generated passwords may be identical on the same site between separate private browsing sessions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6824.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2020-6826","severity":"important","public_date":"2020-04-10T12:00:00Z","advisories":[],"bugzilla":"1821696","bugzilla_description":"CVE-2020-6826 Mozilla: Memory safety bugs fixed in Firefox 75","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6826.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-6821","severity":"important","public_date":"2020-04-08T00:00:00Z","advisories":["RHSA-2020:1420","RHSA-2020:1496","RHSA-2020:1488","RHSA-2020:1495","RHSA-2020:1406","RHSA-2020:1429","RHSA-2020:1489","RHSA-2020:1404"],"bugzilla":"1821674","bugzilla_description":"CVE-2020-6821 Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["firefox-0:68.7.0-2.el7_8","thunderbird-0:68.7.0-1.el8_0","thunderbird-0:68.7.0-1.el8_1","firefox-0:68.7.0-2.el8_0","thunderbird-0:68.7.0-1.el6_10","firefox-0:68.7.0-2.el6_10","thunderbird-0:68.7.0-1.el7_8","firefox-0:68.7.0-2.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6821.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-6822","severity":"moderate","public_date":"2020-04-08T00:00:00Z","advisories":["RHSA-2020:1420","RHSA-2020:1496","RHSA-2020:1488","RHSA-2020:1495","RHSA-2020:1406","RHSA-2020:1429","RHSA-2020:1489","RHSA-2020:1404"],"bugzilla":"1821676","bugzilla_description":"CVE-2020-6822 Mozilla: Out of bounds write in GMPDecodeData when processing large images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["firefox-0:68.7.0-2.el7_8","thunderbird-0:68.7.0-1.el8_0","thunderbird-0:68.7.0-1.el8_1","firefox-0:68.7.0-2.el8_0","thunderbird-0:68.7.0-1.el6_10","firefox-0:68.7.0-2.el6_10","thunderbird-0:68.7.0-1.el7_8","firefox-0:68.7.0-2.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6822.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6825","severity":"important","public_date":"2020-04-08T00:00:00Z","advisories":["RHSA-2020:1420","RHSA-2020:1496","RHSA-2020:1488","RHSA-2020:1495","RHSA-2020:1406","RHSA-2020:1429","RHSA-2020:1489","RHSA-2020:1404"],"bugzilla":"1821682","bugzilla_description":"CVE-2020-6825 Mozilla: Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:68.7.0-2.el7_8","thunderbird-0:68.7.0-1.el8_0","thunderbird-0:68.7.0-1.el8_1","firefox-0:68.7.0-2.el8_0","thunderbird-0:68.7.0-1.el6_10","firefox-0:68.7.0-2.el6_10","thunderbird-0:68.7.0-1.el7_8","firefox-0:68.7.0-2.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-6828","severity":"important","public_date":"2020-04-08T00:00:00Z","advisories":[],"bugzilla":"1821967","bugzilla_description":"CVE-2020-6828 Mozilla: Preference overwrite via crafted Intent from malicious Android application","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-642","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6828.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-6827","severity":"important","public_date":"2020-04-08T00:00:00Z","advisories":[],"bugzilla":"1821968","bugzilla_description":"CVE-2020-6827 Mozilla: Custom Tabs in Firefox for Android could have the URI spoofed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6827.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2020-6819","severity":"critical","public_date":"2020-04-03T00:00:00Z","advisories":["RHSA-2020:1496","RHSA-2020:1488","RHSA-2020:1341","RHSA-2020:1495","RHSA-2020:1340","RHSA-2020:1339","RHSA-2020:1489","RHSA-2020:1338"],"bugzilla":"1820869","bugzilla_description":"CVE-2020-6819 Mozilla: Use-after-free while running the nsDocShell destructor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:68.6.1-1.el6_10","firefox-0:68.6.1-1.el8_1","firefox-0:68.6.1-1.el8_0","thunderbird-0:68.7.0-1.el8_0","thunderbird-0:68.7.0-1.el8_1","thunderbird-0:68.7.0-1.el6_10","firefox-0:68.6.1-1.el7_8","thunderbird-0:68.7.0-1.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6819.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6820","severity":"critical","public_date":"2020-04-03T00:00:00Z","advisories":["RHSA-2020:1496","RHSA-2020:1488","RHSA-2020:1341","RHSA-2020:1495","RHSA-2020:1340","RHSA-2020:1339","RHSA-2020:1489","RHSA-2020:1338"],"bugzilla":"1820878","bugzilla_description":"CVE-2020-6820 Mozilla: Use-after-free when handling a ReadableStream","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:68.6.1-1.el6_10","firefox-0:68.6.1-1.el8_1","firefox-0:68.6.1-1.el8_0","thunderbird-0:68.7.0-1.el8_0","thunderbird-0:68.7.0-1.el8_1","thunderbird-0:68.7.0-1.el6_10","firefox-0:68.6.1-1.el7_8","thunderbird-0:68.7.0-1.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6820.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6805","severity":"important","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812199","bugzilla_description":"CVE-2020-6805 Mozilla: Use-after-free when removing data about origins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6805.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6806","severity":"important","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812200","bugzilla_description":"CVE-2020-6806 Mozilla: BodyStream::OnInputStreamReady was missing protections against state confusion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6806.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6807","severity":"important","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812201","bugzilla_description":"CVE-2020-6807 Mozilla: Use-after-free in cubeb during stream destruction","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6807.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6811","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812202","bugzilla_description":"CVE-2020-6811 Mozilla: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-78","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6811.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-20503","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:1270","RHSA-2020:0820"],"bugzilla":"1812203","bugzilla_description":"CVE-2019-20503 usrsctp: Out of bounds reads in sctp_load_addresses_from_init()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","chromium-browser-0:80.0.3987.149-1.el6_10","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20503.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6812","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812204","bugzilla_description":"CVE-2020-6812 Mozilla: The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6814","severity":"important","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812205","bugzilla_description":"CVE-2020-6814 Mozilla: Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6814.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-6808","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":[],"bugzilla":"1829342","bugzilla_description":"CVE-2020-6808 Mozilla: URL Spoofing via javascript: URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6809","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":[],"bugzilla":"1829343","bugzilla_description":"CVE-2020-6809 Mozilla: Web Extensions with the all-urls permission could access local files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6809.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-6810","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":[],"bugzilla":"1829344","bugzilla_description":"CVE-2020-6810 Mozilla: Focusing a popup while in fullscreen could have obscured the fullscreen notification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6813","severity":"low","public_date":"2020-03-10T00:00:00Z","advisories":[],"bugzilla":"1829345","bugzilla_description":"CVE-2020-6813 Mozilla: @import statements in CSS could bypass the Content Security Policy nonce feature","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6813.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-6815","severity":"important","public_date":"2020-03-10T00:00:00Z","advisories":[],"bugzilla":"1829346","bugzilla_description":"CVE-2020-6815 Mozilla: Memory and script safety bugs fixed in Firefox 74","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6815.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-6796","severity":"important","public_date":"2020-02-11T00:00:00Z","advisories":["RHSA-2020:0520","RHSA-2020:0519","RHSA-2020:0521","RHSA-2020:0512"],"bugzilla":"1801916","bugzilla_description":"CVE-2020-6796 Mozilla: Missing bounds check on shared memory read in the parent process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["firefox-0:68.5.0-2.el8_0","firefox-0:68.5.0-2.el8_1","firefox-0:68.5.0-2.el7_7","firefox-0:68.5.0-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6796.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6797","severity":"moderate","public_date":"2020-02-11T00:00:00Z","advisories":[],"bugzilla":"1801917","bugzilla_description":"CVE-2020-6797 Mozilla: Extensions granted downloads.open permission could open arbitrary applications on Mac OSX","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6798","severity":"moderate","public_date":"2020-02-11T00:00:00Z","advisories":["RHSA-2020:0520","RHSA-2020:0574","RHSA-2020:0519","RHSA-2020:0577","RHSA-2020:0521","RHSA-2020:0576","RHSA-2020:0565","RHSA-2020:0512"],"bugzilla":"1801918","bugzilla_description":"CVE-2020-6798 Mozilla: Incorrect parsing of template tag could result in JavaScript injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["firefox-0:68.5.0-2.el8_0","firefox-0:68.5.0-2.el8_1","thunderbird-0:68.5.0-1.el8_1","thunderbird-0:68.5.0-1.el8_0","firefox-0:68.5.0-2.el7_7","thunderbird-0:68.5.0-1.el6_10","firefox-0:68.5.0-2.el6_10","thunderbird-0:68.5.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6799","severity":"moderate","public_date":"2020-02-11T00:00:00Z","advisories":[],"bugzilla":"1801919","bugzilla_description":"CVE-2020-6799 Mozilla: Arbitrary code execution when opening pdf links from other applications, when Firefox is configured as default pdf reader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6799.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6800","severity":"important","public_date":"2020-02-11T00:00:00Z","advisories":["RHSA-2020:0520","RHSA-2020:0574","RHSA-2020:0519","RHSA-2020:0577","RHSA-2020:0521","RHSA-2020:0576","RHSA-2020:0565","RHSA-2020:0512"],"bugzilla":"1801920","bugzilla_description":"CVE-2020-6800 Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:68.5.0-2.el8_0","firefox-0:68.5.0-2.el8_1","thunderbird-0:68.5.0-1.el8_1","thunderbird-0:68.5.0-1.el8_0","firefox-0:68.5.0-2.el7_7","thunderbird-0:68.5.0-1.el6_10","firefox-0:68.5.0-2.el6_10","thunderbird-0:68.5.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6800.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6801","severity":"important","public_date":"2020-02-11T00:00:00Z","advisories":[],"bugzilla":"1829100","bugzilla_description":"CVE-2020-6801 Mozilla: Memory safety bugs fixed in Firefox 73","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6801.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-20446","severity":"moderate","public_date":"2020-02-02T00:00:00Z","advisories":[],"bugzilla":"1797608","bugzilla_description":"CVE-2019-20446 librsvg: Resource exhaustion via crafted SVG file with nested patterns","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20446.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-17020","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1790800","bugzilla_description":"CVE-2019-17020 Mozilla: Content Security Policy bypass for XSL stylesheet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17020.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-6750","severity":"moderate","public_date":"2020-01-09T00:00:00Z","advisories":[],"bugzilla":"1790288","bugzilla_description":"CVE-2020-6750 glib: Mishandling of proxy_addr field in GSocketClient may lead to proxy being ignored","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-17026","severity":"critical","public_date":"2020-01-08T00:00:00Z","advisories":["RHSA-2020:0111","RHSA-2020:0123","RHSA-2020:0085","RHSA-2020:0120","RHSA-2020:0086","RHSA-2020:0295","RHSA-2020:0292","RHSA-2020:0127"],"bugzilla":"1789214","bugzilla_description":"CVE-2019-17026 Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:68.4.1-2.el6_10","firefox-0:68.4.1-1.el6_10","thunderbird-0:68.4.1-2.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.4.1-1.el8_1","thunderbird-0:68.4.1-2.el8_1","firefox-0:68.4.1-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17026.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-17015","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":[],"bugzilla":"1788722","bugzilla_description":"CVE-2019-17015 Mozilla: Memory corruption in parent process during new content process initialization on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17015.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-17016","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:0111","RHSA-2020:0123","RHSA-2020:0085","RHSA-2020:0120","RHSA-2020:0086","RHSA-2020:0295","RHSA-2020:0292","RHSA-2020:0127"],"bugzilla":"1788723","bugzilla_description":"CVE-2019-17016 Mozilla: Bypass of @namespace CSS sanitization during pasting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["thunderbird-0:68.4.1-2.el6_10","firefox-0:68.4.1-1.el6_10","thunderbird-0:68.4.1-2.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.4.1-1.el8_1","thunderbird-0:68.4.1-2.el8_1","firefox-0:68.4.1-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17016.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17017","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:0111","RHSA-2020:0123","RHSA-2020:0085","RHSA-2020:0120","RHSA-2020:0086","RHSA-2020:0295","RHSA-2020:0292","RHSA-2020:0127"],"bugzilla":"1788724","bugzilla_description":"CVE-2019-17017 Mozilla: Type Confusion in XPCVariant.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:68.4.1-2.el6_10","firefox-0:68.4.1-1.el6_10","thunderbird-0:68.4.1-2.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.4.1-1.el8_1","thunderbird-0:68.4.1-2.el8_1","firefox-0:68.4.1-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17017.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-17021","severity":"moderate","public_date":"2020-01-07T00:00:00Z","advisories":[],"bugzilla":"1788725","bugzilla_description":"CVE-2019-17021 Mozilla: Heap address disclosure in parent process during content process initialization on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17021.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17022","severity":"moderate","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:0111","RHSA-2020:0123","RHSA-2020:0085","RHSA-2020:0120","RHSA-2020:0086","RHSA-2020:0295","RHSA-2020:0292","RHSA-2020:0127"],"bugzilla":"1788726","bugzilla_description":"CVE-2019-17022 Mozilla: CSS sanitization does not escape HTML tags","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["thunderbird-0:68.4.1-2.el6_10","firefox-0:68.4.1-1.el6_10","thunderbird-0:68.4.1-2.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.4.1-1.el8_1","thunderbird-0:68.4.1-2.el8_1","firefox-0:68.4.1-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17024","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:0111","RHSA-2020:0123","RHSA-2020:0085","RHSA-2020:0120","RHSA-2020:0086","RHSA-2020:0295","RHSA-2020:0292","RHSA-2020:0127"],"bugzilla":"1788727","bugzilla_description":"CVE-2019-17024 Mozilla: Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.4.1-2.el6_10","firefox-0:68.4.1-1.el6_10","thunderbird-0:68.4.1-2.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.4.1-1.el8_1","thunderbird-0:68.4.1-2.el8_1","firefox-0:68.4.1-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17024.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-17008","severity":"important","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2019:4205","RHSA-2019:4107","RHSA-2019:4108","RHSA-2019:4148","RHSA-2020:0295","RHSA-2020:0292","RHSA-2019:4111","RHSA-2019:4195"],"bugzilla":"1779431","bugzilla_description":"CVE-2019-17008 Mozilla: Use-after-free in worker destruction","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.3.0-2.el8_1","thunderbird-0:68.3.0-3.el6_10","firefox-0:68.3.0-1.el7_7","thunderbird-0:68.3.0-1.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.3.0-1.el6_10","firefox-0:68.3.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17008.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13722","severity":"important","public_date":"2019-12-03T00:00:00Z","advisories":[],"bugzilla":"1779432","bugzilla_description":"CVE-2019-13722 Mozilla: Stack corruption due to incorrect number of arguments in WebRTC code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628->CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13722.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17009","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":[],"bugzilla":"1779433","bugzilla_description":"CVE-2019-17009 Mozilla: Updater temporary files accessible to unprivileged processes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17009.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17010","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2019:4205","RHSA-2019:4107","RHSA-2019:4108","RHSA-2019:4148","RHSA-2020:0295","RHSA-2020:0292","RHSA-2019:4111","RHSA-2019:4195"],"bugzilla":"1779434","bugzilla_description":"CVE-2019-17010 Mozilla: Use-after-free when performing device orientation checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.3.0-2.el8_1","thunderbird-0:68.3.0-3.el6_10","firefox-0:68.3.0-1.el7_7","thunderbird-0:68.3.0-1.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.3.0-1.el6_10","firefox-0:68.3.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17005","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2019:4205","RHSA-2019:4107","RHSA-2019:4108","RHSA-2019:4148","RHSA-2020:0295","RHSA-2020:0292","RHSA-2019:4111","RHSA-2019:4195"],"bugzilla":"1779435","bugzilla_description":"CVE-2019-17005 Mozilla: Buffer overflow in plain text serializer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.3.0-2.el8_1","thunderbird-0:68.3.0-3.el6_10","firefox-0:68.3.0-1.el7_7","thunderbird-0:68.3.0-1.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.3.0-1.el6_10","firefox-0:68.3.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17011","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2019:4205","RHSA-2019:4107","RHSA-2019:4108","RHSA-2019:4148","RHSA-2020:0295","RHSA-2020:0292","RHSA-2019:4111","RHSA-2019:4195"],"bugzilla":"1779436","bugzilla_description":"CVE-2019-17011 Mozilla: Use-after-free when retrieving a document in antitracking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.3.0-2.el8_1","thunderbird-0:68.3.0-3.el6_10","firefox-0:68.3.0-1.el7_7","thunderbird-0:68.3.0-1.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.3.0-1.el6_10","firefox-0:68.3.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17011.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17012","severity":"important","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2019:4205","RHSA-2019:4107","RHSA-2019:4108","RHSA-2019:4148","RHSA-2020:0295","RHSA-2020:0292","RHSA-2019:4111","RHSA-2019:4195"],"bugzilla":"1779437","bugzilla_description":"CVE-2019-17012 Mozilla: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.3.0-2.el8_1","thunderbird-0:68.3.0-3.el6_10","firefox-0:68.3.0-1.el7_7","thunderbird-0:68.3.0-1.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.3.0-1.el6_10","firefox-0:68.3.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17014","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":[],"bugzilla":"1779440","bugzilla_description":"CVE-2019-17014 Mozilla: Dragging and dropping a cross-origin resource, incorrectly loaded as an image, could result in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17013","severity":"important","public_date":"2019-12-03T00:00:00Z","advisories":[],"bugzilla":"1779441","bugzilla_description":"CVE-2019-17013 Mozilla: Memory safety bugs fixed in Firefox 71","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17013.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11745","severity":"important","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:0243","RHSA-2019:4190","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:4114","RHSA-2020:1461","RHSA-2019:4152","RHSA-2020:0466"],"bugzilla":"1774831","bugzilla_description":"CVE-2019-11745 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["nss-0:3.44.0-8.el8_0","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-7.el7_7","nss-softokn-0:3.14.3-23.el6_6","nss-0:3.44.0-9.el8_1","nss-softokn-0:3.44.0-6.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11757","severity":"important","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764438","bugzilla_description":"CVE-2019-11757 Mozilla: Use-after-free when creating index updates in IndexedDB","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11757.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11758","severity":"important","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764439","bugzilla_description":"CVE-2019-11758 Mozilla: Potentially exploitable crash due to 360 Total Security","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11758.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11759","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764440","bugzilla_description":"CVE-2019-11759 Mozilla: Stack buffer overflow in HKDF output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11759.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11760","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764441","bugzilla_description":"CVE-2019-11760 Mozilla: Stack buffer overflow in WebRTC networking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11760.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11761","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764442","bugzilla_description":"CVE-2019-11761 Mozilla: Unintended access to a privileged JSONView object","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-749","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11761.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-11762","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764443","bugzilla_description":"CVE-2019-11762 Mozilla: document.domain-based origin isolation has same-origin-property violation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11762.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11763","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764444","bugzilla_description":"CVE-2019-11763 Mozilla: Incorrect HTML parsing results in XSS bypass technique","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11763.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11764","severity":"critical","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764446","bugzilla_description":"CVE-2019-11764 Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11764.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11754","severity":"moderate","public_date":"2019-09-18T00:00:00Z","advisories":[],"bugzilla":"1753448","bugzilla_description":"CVE-2019-11754 Mozilla: Pointer Lock is enabled with no user notification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11754.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-15903","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3193"],"bugzilla":"1752592","bugzilla_description":"CVE-2019-15903 expat: heap-based buffer over-read via crafted XML input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-125)","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","thunderbird-0:68.2.0-1.el7_7","expat-0:2.1.0-12.el7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15903.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-11740","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748652","bugzilla_description":"CVE-2019-11740 Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11742","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748653","bugzilla_description":"CVE-2019-11742 Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11742.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11743","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748654","bugzilla_description":"CVE-2019-11743 Mozilla: Cross-origin access to unload event attributes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11743.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11744","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748655","bugzilla_description":"CVE-2019-11744 Mozilla: XSS by breaking out of title and textarea elements using innerHTML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11744.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11746","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748656","bugzilla_description":"CVE-2019-11746 Mozilla: Use-after-free while manipulating video","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11746.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11752","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748657","bugzilla_description":"CVE-2019-11752 Mozilla: Use-after-free while extracting a key value in IndexedDB","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11753","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1748659","bugzilla_description":"CVE-2019-11753 Mozilla: Privilege escalation with Mozilla Maintenance Service in custom Firefox installation location","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11753.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-9812","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2729"],"bugzilla":"1748660","bugzilla_description":"CVE-2019-9812 Mozilla: Sandbox escape through Firefox Sync","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["firefox-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11735","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2663"],"bugzilla":"1748661","bugzilla_description":"CVE-2019-11735 Mozilla: Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11736","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1748662","bugzilla_description":"CVE-2019-11736 Mozilla: File manipulation and privilege escalation in Mozilla Maintenance Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11738","severity":"low","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2663"],"bugzilla":"1748663","bugzilla_description":"CVE-2019-11738 Mozilla: Content security policy bypass through hash-based sources in directives","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2019-11747","severity":"low","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2663"],"bugzilla":"1748664","bugzilla_description":"CVE-2019-11747 Mozilla: 'Forget about this site' removes sites from pre-loaded HSTS list","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11747.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"3.4"},{"CVE":"CVE-2019-11748","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2663"],"bugzilla":"1748665","bugzilla_description":"CVE-2019-11748 Mozilla: Persistence of WebRTC permissions in a third party context","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11748.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11749","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2663"],"bugzilla":"1748666","bugzilla_description":"CVE-2019-11749 Mozilla: Camera information available without prompting using getUserMedia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11749.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-11750","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2663"],"bugzilla":"1748667","bugzilla_description":"CVE-2019-11750 Mozilla: Type confusion in Spidermonkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11751","severity":"critical","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1748668","bugzilla_description":"CVE-2019-11751 Mozilla: Malicious code execution through command line parameters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11751.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11741","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1748673","bugzilla_description":"CVE-2019-11741 Mozilla: Isolate addons.mozilla.org and accounts.firefox.com","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11741.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-5849","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1748674","bugzilla_description":"CVE-2019-5849 Mozilla: Out-of-bounds read in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5849.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11737","severity":"low","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1748675","bugzilla_description":"CVE-2019-11737 Mozilla: Content security policy directives ignore port and path if host is a wildcard","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-11734","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1748676","bugzilla_description":"CVE-2019-11734 Mozilla: Memory safety bugs fixed in Firefox 69","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11734.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-9382","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2018:3140","RHSA-2019:4254"],"bugzilla":"1763609","bugzilla_description":"CVE-2015-9382 freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["freetype-0:2.8-12.el7","freetype-0:2.3.11-19.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9382.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-9383","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1763613","bugzilla_description":"CVE-2015-9383 freetype: a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c may lead to a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9383.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-11733","severity":"moderate","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2729"],"bugzilla":"1745687","bugzilla_description":"CVE-2019-11733 firefox: stored passwords in 'Saved Logins' can be copied without master password entry","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-862|CWE-306)","affected_packages":["firefox-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11733.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11709","severity":"critical","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728430","bugzilla_description":"CVE-2019-11709 Mozilla: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11709.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11711","severity":"important","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728431","bugzilla_description":"CVE-2019-11711 Mozilla: Script injection within domain through inner window reuse","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11711.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11712","severity":"important","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728432","bugzilla_description":"CVE-2019-11712 Mozilla: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11712.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11713","severity":"important","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728433","bugzilla_description":"CVE-2019-11713 Mozilla: Use-after-free with HTTP/2 cached stream","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11713.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11715","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728434","bugzilla_description":"CVE-2019-11715 Mozilla: HTML parsing error can contribute to content XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11715.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11717","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728435","bugzilla_description":"CVE-2019-11717 Mozilla: Caret character improperly escaped in origins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11717.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11719","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1951","RHSA-2020:4076"],"bugzilla":"1728436","bugzilla_description":"CVE-2019-11719 nss: Out-of-bounds read when importing curve25519 private key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11719.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11729","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:4190","RHSA-2019:1951"],"bugzilla":"1728437","bugzilla_description":"CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["nss-0:3.44.0-7.el7_7","nss-util-0:3.44.0-4.el7_7","nss-0:3.44.0-7.el8_0","nss-softokn-0:3.44.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11729.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11730","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728438","bugzilla_description":"CVE-2019-11730 Mozilla: Same-origin policy treats all files in a directory as having the same-origin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11730.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-9811","severity":"important","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728439","bugzilla_description":"CVE-2019-9811 Mozilla: Sandbox escape via installation of malicious language pack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-807","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11714","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730980","bugzilla_description":"CVE-2019-11714 Mozilla: NeckoChild can trigger crash when accessed off of main thread","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-567","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11714.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2019-11716","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730981","bugzilla_description":"CVE-2019-11716 Mozilla: globalThis not enumerable until accessed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11716.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2019-11718","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730982","bugzilla_description":"CVE-2019-11718 Mozilla: Activity Stream writes unsanitized content to innerHTML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11718.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2019-11720","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730983","bugzilla_description":"CVE-2019-11720 Mozilla: Character encoding XSS vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11720.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2019-11721","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730984","bugzilla_description":"CVE-2019-11721 Mozilla: Domain spoofing through unicode latin 'kra' character","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11721.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2019-11723","severity":"low","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730985","bugzilla_description":"CVE-2019-11723 Mozilla: Cookie leakage during add-on fetching across private browsing boundaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11723.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2019-11724","severity":"low","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730986","bugzilla_description":"CVE-2019-11724 Mozilla: Retired site input.mozilla.org has remote troubleshooting permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11724.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2019-11725","severity":"low","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730987","bugzilla_description":"CVE-2019-11725 Mozilla: Websocket resources bypass safebrowsing protections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11725.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"3.4"},{"CVE":"CVE-2019-11728","severity":"low","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730989","bugzilla_description":"CVE-2019-11728 Mozilla: Port scanning through Alt-Svc header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11728.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"3.4"},{"CVE":"CVE-2019-11710","severity":"critical","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1730990","bugzilla_description":"CVE-2019-11710 Mozilla: Memory safety bugs fixed in Firefox 68","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11710.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-20843","severity":"moderate","public_date":"2019-06-24T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1723723","bugzilla_description":"CVE-2018-20843 expat: large number of colons in input makes parser consume high amount of resources, leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["expat-0:2.1.0-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11708","severity":"important","public_date":"2019-06-20T00:00:00Z","advisories":["RHSA-2019:1696","RHSA-2019:1604","RHSA-2019:1626","RHSA-2019:1603","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1722673","bugzilla_description":"CVE-2019-11708 Mozilla: Sandbox escape using Prompt:Open","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":["thunderbird-0:60.7.2-2.el7_6","firefox-0:60.7.2-1.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10","firefox-0:60.7.2-1.el6_10","firefox-0:60.7.2-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11707","severity":"critical","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:1696","RHSA-2019:1604","RHSA-2019:1626","RHSA-2019:1603","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1721789","bugzilla_description":"CVE-2019-11707 Mozilla: Type confusion in Array.pop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:60.7.2-2.el7_6","firefox-0:60.7.2-1.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10","firefox-0:60.7.2-1.el6_10","firefox-0:60.7.2-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11707.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11702","severity":"moderate","public_date":"2019-06-11T00:00:00Z","advisories":[],"bugzilla":"1721805","bugzilla_description":"CVE-2019-11702 Mozilla: IE protocols can be used to open known local files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11702.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-12450","severity":"moderate","public_date":"2019-05-23T00:00:00Z","advisories":["RHSA-2019:3530","RHSA-2020:3978","RHBA-2019:3303"],"bugzilla":"1719141","bugzilla_description":"CVE-2019-12450 glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["glib2-0:2.56.1-7.el7","redhat-coreos-42.81.20191107.0","glib2-0:2.56.4-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.6"},{"CVE":"CVE-2019-11691","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712617","bugzilla_description":"CVE-2019-11691 Mozilla: Use-after-free in XMLHttpRequest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11691.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11692","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712618","bugzilla_description":"CVE-2019-11692 Mozilla: Use-after-free removing listeners in the event listener manager","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11692.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11693","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712619","bugzilla_description":"CVE-2019-11693 Mozilla: Buffer overflow in WebGL bufferdata on Linux","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11693.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11694","severity":"moderate","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1712620","bugzilla_description":"CVE-2019-11694 Mozilla: Uninitialized memory leakage in Windows sandbox","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11694.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11698","severity":"moderate","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712621","bugzilla_description":"CVE-2019-11698 Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-9797","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712622","bugzilla_description":"CVE-2019-9797 Mozilla: Cross-origin theft of images with createImageBitmap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9800","severity":"critical","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712623","bugzilla_description":"CVE-2019-9800 Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9815","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1712624","bugzilla_description":"CVE-2019-9815 Mozilla: Disable hyperthreading on content JavaScript threads on macOS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9816","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267"],"bugzilla":"1712625","bugzilla_description":"CVE-2019-9816 Mozilla: Type confusion with object groups and UnboxedObjects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9817","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712626","bugzilla_description":"CVE-2019-9817 Mozilla: Stealing of cross-domain images using canvas","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9818","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1712627","bugzilla_description":"CVE-2019-9818 Mozilla: Use-after-free in crash generation server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9819","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712628","bugzilla_description":"CVE-2019-9819 Mozilla: Compartment mismatch with fetch API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-567","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9820","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712629","bugzilla_description":"CVE-2019-9820 Mozilla: Use-after-free of ChromeEventHandler by DocShell","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9820.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9821","severity":"low","public_date":"2019-05-21T00:00:00Z","advisories":[],"bugzilla":"1712749","bugzilla_description":"CVE-2019-9821 firefox: use-after-free in AssertWorkerThread leading to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9821.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-9810","severity":"critical","public_date":"2019-03-22T00:00:00Z","advisories":["RHSA-2019:0671","RHSA-2019:0672","RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966"],"bugzilla":"1692181","bugzilla_description":"CVE-2019-9810 Mozilla: IonMonkey MArraySlice has incorrect alias information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["firefox-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el6_10","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9813","severity":"critical","public_date":"2019-03-22T00:00:00Z","advisories":["RHSA-2019:0671","RHSA-2019:0672","RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966"],"bugzilla":"1692182","bugzilla_description":"CVE-2019-9813 Mozilla: Ionmonkey type confusion with __proto__ mutations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["firefox-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el6_10","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18506","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690673","bugzilla_description":"CVE-2018-18506 Mozilla: Proxy Auto-Configuration file can define localhost access to be proxied","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-9788","severity":"critical","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690674","bugzilla_description":"CVE-2019-9788 Mozilla: Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9788.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9790","severity":"critical","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690675","bugzilla_description":"CVE-2019-9790 Mozilla: Use-after-free when removing in-use DOM elements","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9791","severity":"critical","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690676","bugzilla_description":"CVE-2019-9791 Mozilla: Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9791.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9792","severity":"critical","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690677","bugzilla_description":"CVE-2019-9792 Mozilla: IonMonkey leaks JS_OPTIMIZED_OUT magic value to script","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-787","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9792.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9793","severity":"important","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690678","bugzilla_description":"CVE-2019-9793 Mozilla: Improper bounds checks when Spectre mitigations are disabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9793.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9794","severity":"important","public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1690679","bugzilla_description":"CVE-2019-9794 Mozilla: Command line arguments not discarded during execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9794.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9795","severity":"important","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690680","bugzilla_description":"CVE-2019-9795 Mozilla: Type-confusion in IonMonkey JIT compiler","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843->CWE-787","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9796","severity":"important","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690681","bugzilla_description":"CVE-2019-9796 Mozilla: Use-after-free with SMIL animation controller","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9801","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1690682","bugzilla_description":"CVE-2019-9801 Mozilla: Windows programs that are not 'URL Handlers' are exposed to web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9801.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-5798","severity":"moderate","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:0708","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1688200","bugzilla_description":"CVE-2019-5798 chromium-browser: Out of bounds read in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","chromium-browser-0:73.0.3683.75-1.el6_10","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-5785","severity":"important","public_date":"2019-02-12T00:00:00Z","advisories":["RHSA-2019:0374","RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0373","RHSA-2019:0681"],"bugzilla":"1676991","bugzilla_description":"CVE-2019-5785 mozilla: Integer overflow in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["thunderbird-0:60.6.1-1.el8","firefox-0:60.5.1-1.el7_6","firefox-0:60.5.1-1.el6_10","thunderbird-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-18511","severity":"moderate","public_date":"2019-02-12T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1676997","bugzilla_description":"CVE-2018-18511 mozilla: Cross-origin theft of images with ImageBitmapRenderingContext","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-18500","severity":"critical","public_date":"2019-01-29T00:00:00Z","advisories":["RHSA-2019:0269","RHSA-2019:0218","RHSA-2019:0219","RHSA-2019:0270"],"bugzilla":"1670631","bugzilla_description":"CVE-2018-18500 Mozilla: Use-after-free parsing HTML5 stream","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.5.0-2.el7","firefox-0:60.5.0-2.el6","thunderbird-0:60.5.0-1.el6_10","thunderbird-0:60.5.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18501","severity":"critical","public_date":"2019-01-29T00:00:00Z","advisories":["RHSA-2019:0269","RHSA-2019:0218","RHSA-2019:0219","RHSA-2019:0270"],"bugzilla":"1670632","bugzilla_description":"CVE-2018-18501 Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.5.0-2.el7","firefox-0:60.5.0-2.el6","thunderbird-0:60.5.0-1.el6_10","thunderbird-0:60.5.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18501.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18505","severity":"important","public_date":"2019-01-29T00:00:00Z","advisories":["RHSA-2019:0269","RHSA-2019:0218","RHSA-2019:0219","RHSA-2019:0270"],"bugzilla":"1670633","bugzilla_description":"CVE-2018-18505 Mozilla: Privilege escalation through IPC channel messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["firefox-0:60.5.0-2.el7","firefox-0:60.5.0-2.el6","thunderbird-0:60.5.0-1.el6_10","thunderbird-0:60.5.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18505.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9633","severity":"moderate","public_date":"2019-01-29T00:00:00Z","advisories":[],"bugzilla":"1687805","bugzilla_description":"CVE-2019-9633 glib: g_socket_client_connected_callback in gio/gsocketclient.c allows to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2019-7317","severity":"low","public_date":"2019-01-25T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:2737","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:1309","RHSA-2019:1308","RHSA-2019:2590"],"bugzilla":"1672409","bugzilla_description":"CVE-2019-7317 libpng: use-after-free in png_image_free in png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","thunderbird-0:60.7.0-1.el6_10","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","firefox-0:60.7.0-1.el7_6","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-6461","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1669629","bugzilla_description":"CVE-2019-6461 cairo: assertion problem in _cairo_arc_in_direction in cairo-arc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6461.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2019-6462","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1671399","bugzilla_description":"CVE-2019-6462 cairo: infinite loop in the function _arc_error_normalized in the file cairo-arc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6462.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2018-12405","severity":"critical","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2019:0160"],"bugzilla":"1658397","bugzilla_description":"CVE-2018-12405 Mozilla: Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18492","severity":"important","public_date":"2018-12-11T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2019:0160"],"bugzilla":"1658399","bugzilla_description":"CVE-2018-18492 Mozilla: Use-after-free with select element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18492.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-18493","severity":"important","public_date":"2018-12-11T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2019:0160"],"bugzilla":"1658400","bugzilla_description":"CVE-2018-18493 Mozilla: Buffer overflow in accelerated 2D canvas with Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18493.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-18494","severity":"important","public_date":"2018-12-11T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2019:0160"],"bugzilla":"1658401","bugzilla_description":"CVE-2018-18494 Mozilla: Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18494.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-18498","severity":"important","public_date":"2018-12-11T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2019:0160"],"bugzilla":"1658402","bugzilla_description":"CVE-2018-18498 Mozilla: Integer overflow when calculating buffer sizes for images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18498.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12406","severity":"critical","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1692732","bugzilla_description":"CVE-2018-12406 firefox: memory safety bugs showing evidence of memory corruption leading to run arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->(CWE-185|CWE-787|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12406.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12407","severity":"important","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1692795","bugzilla_description":"CVE-2018-12407 firefox: buffer overflow with ANGLE library when using VertexBuffer11 module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12407.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18497","severity":"moderate","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1696112","bugzilla_description":"CVE-2018-18497 firefox: WebExtensions can load arbitrary URLs through pipe separators","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-59|CWE-270|CWE-552)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18497.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-18495","severity":"moderate","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1696138","bugzilla_description":"CVE-2018-18495 firefox: WebExtension content scripts can be loaded in about: pages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-59|CWE-270|CWE-552)->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18495.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-18335","severity":"important","public_date":"2018-12-04T00:00:00Z","advisories":["RHSA-2018:3803"],"bugzilla":"1656549","bugzilla_description":"CVE-2018-18335 chromium-browser: Heap buffer overflow in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["chromium-browser-0:71.0.3578.80-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18335.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18356","severity":"important","public_date":"2018-12-04T00:00:00Z","advisories":["RHSA-2019:0374","RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0373","RHSA-2019:0681","RHSA-2018:3803"],"bugzilla":"1656570","bugzilla_description":"CVE-2018-18356 chromium-browser, mozilla: Use after free in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:60.6.1-1.el8","firefox-0:60.5.1-1.el7_6","firefox-0:60.5.1-1.el6_10","chromium-browser-0:71.0.3578.80-1.el6_10","thunderbird-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18356.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-18510","severity":"low","public_date":"2018-11-16T00:00:00Z","advisories":[],"bugzilla":"1704188","bugzilla_description":"CVE-2018-18510 firefox: The about:crashcontent and about:crashparent pages can be triggered by web content allowing for a non-persistent DoS attack.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-749","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18510.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-12389","severity":"low","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005","RHSA-2018:3532","RHSA-2018:3531"],"bugzilla":"1642179","bugzilla_description":"CVE-2018-12389 Mozilla: Memory safety bugs fixed in Firefox ESR 60.3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:60.3.0-1.el6","firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6","thunderbird-0:60.3.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12389.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12390","severity":"critical","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005","RHSA-2018:3532","RHSA-2018:3531"],"bugzilla":"1642180","bugzilla_description":"CVE-2018-12390 Mozilla: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:60.3.0-1.el6","firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6","thunderbird-0:60.3.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12390.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12391","severity":"important","public_date":"2018-10-23T00:00:00Z","advisories":[],"bugzilla":"1642181","bugzilla_description":"CVE-2018-12391 Mozilla: HTTP Live Stream audio data is accessible cross-origin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12391.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12392","severity":"important","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005","RHSA-2018:3532","RHSA-2018:3531"],"bugzilla":"1642182","bugzilla_description":"CVE-2018-12392 Mozilla: Crash with nested event loops","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-364","affected_packages":["thunderbird-0:60.3.0-1.el6","firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6","thunderbird-0:60.3.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12392.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12393","severity":"important","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005","RHSA-2018:3532","RHSA-2018:3531"],"bugzilla":"1642183","bugzilla_description":"CVE-2018-12393 Mozilla: Integer overflow during Unicode conversion while loading JavaScript","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["thunderbird-0:60.3.0-1.el6","firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6","thunderbird-0:60.3.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12393.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12395","severity":"moderate","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005"],"bugzilla":"1642185","bugzilla_description":"CVE-2018-12395 Mozilla: WebExtension bypass of domain restrictions through header rewriting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12395.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12396","severity":"moderate","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005"],"bugzilla":"1642186","bugzilla_description":"CVE-2018-12396 Mozilla: WebExtension content scripts can execute in disallowed contexts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12396.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12397","severity":"moderate","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005"],"bugzilla":"1642187","bugzilla_description":"CVE-2018-12397 Mozilla: WebExtension local file permission check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12397.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12403","severity":"low","public_date":"2018-10-23T00:00:00Z","advisories":[],"bugzilla":"1692373","bugzilla_description":"CVE-2018-12403 firefox: mixed content warning is not displayed when HTTPS page loads a favicon over HTTP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-356|CWE-290)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12403.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-12388","severity":"critical","public_date":"2018-10-23T00:00:00Z","advisories":[],"bugzilla":"1692663","bugzilla_description":"CVE-2018-12388 firefox: memory safety bugs showing evidence of memory corruption leading to run arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12399","severity":"low","public_date":"2018-10-23T00:00:00Z","advisories":[],"bugzilla":"1693614","bugzilla_description":"CVE-2018-12399 firefox: Spoofing of protocol registration notification bar","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-290|CWE-287)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12399.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-12398","severity":"moderate","public_date":"2018-10-23T00:00:00Z","advisories":[],"bugzilla":"1693621","bugzilla_description":"CVE-2018-12398 firefox: Content Security Policy bypass through stylesheet injection in resource URIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-79->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12398.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-12401","severity":"low","public_date":"2018-10-23T00:00:00Z","advisories":[],"bugzilla":"1693626","bugzilla_description":"CVE-2018-12401 firefox: special resource URI parsing leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12401.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-12402","severity":"moderate","public_date":"2018-10-23T00:00:00Z","advisories":[],"bugzilla":"1696127","bugzilla_description":"CVE-2018-12402 firefox: WebBrowserPersist uses incorrect origin information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12402.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-17466","severity":"important","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2018:3004","RHSA-2019:0160"],"bugzilla":"1640102","bugzilla_description":"CVE-2018-17466 chromium-browser, firefox: Memory corruption in Angle","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","chromium-browser-0:70.0.3538.67-1.el6_10","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17466.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18064","severity":"moderate","public_date":"2018-10-08T00:00:00Z","advisories":[],"bugzilla":"1637792","bugzilla_description":"CVE-2018-18064 cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-12386","severity":"critical","public_date":"2018-10-02T00:00:00Z","advisories":["RHSA-2018:2884","RHSA-2018:2881"],"bugzilla":"1635451","bugzilla_description":"CVE-2018-12386 Mozilla: type confusion in JavaScript","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843->(CWE-125|CWE-787)","affected_packages":["firefox-0:60.2.2-1.el7_5","firefox-0:60.2.2-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12386.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12387","severity":"critical","public_date":"2018-10-02T00:00:00Z","advisories":["RHSA-2018:2884","RHSA-2018:2881"],"bugzilla":"1635452","bugzilla_description":"CVE-2018-12387 Mozilla: stack out-of-bounds read in Array.prototype.push","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:60.2.2-1.el7_5","firefox-0:60.2.2-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12385","severity":"moderate","public_date":"2018-09-21T00:00:00Z","advisories":["RHSA-2018:2835","RHSA-2018:2834","RHSA-2018:3403","RHSA-2018:3458"],"bugzilla":"1632062","bugzilla_description":"CVE-2018-12385 Mozilla: Crash in TransportSecurityInfo due to cached data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-119","affected_packages":["firefox-0:60.2.1-1.el6","firefox-0:60.2.1-1.el7_5","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12385.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12375","severity":"important","public_date":"2018-09-05T00:00:00Z","advisories":[],"bugzilla":"1625524","bugzilla_description":"CVE-2018-12375 Mozilla: Memory safety bugs fixed in Firefox 62","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12375.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12376","severity":"critical","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1625525","bugzilla_description":"CVE-2018-12376 Mozilla: Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12377","severity":"important","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1625526","bugzilla_description":"CVE-2018-12377 Mozilla: Use-after-free in driver timers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12377.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12378","severity":"important","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1625527","bugzilla_description":"CVE-2018-12378 Mozilla: Use-after-free in IndexedDB","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12378.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12379","severity":"moderate","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1625528","bugzilla_description":"CVE-2018-12379 Mozilla: Out-of-bounds write with malicious MAR file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12381","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":[],"bugzilla":"1625529","bugzilla_description":"CVE-2018-12381 Mozilla: Dragging and dropping Outlook email message results in page navigation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12381.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-12382","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":[],"bugzilla":"1625530","bugzilla_description":"CVE-2018-12382 Mozilla: Addressbar spoofing with javascript URI on Firefox for Android","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12382.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-12383","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:2835","RHSA-2018:2834","RHSA-2018:3403","RHSA-2018:3458"],"bugzilla":"1625531","bugzilla_description":"CVE-2018-12383 Mozilla: Setting a master password post-Firefox 58 does not delete unencrypted previously stored passwords","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":["firefox-0:60.2.1-1.el6","firefox-0:60.2.1-1.el7_5","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12383.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-18499","severity":"important","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1849971","bugzilla_description":"CVE-2018-18499 Mozilla: Same-origin policy violation using meta refresh and performance.getEntries to steal cross-origin URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18499.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16428","severity":"low","public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1626145","bugzilla_description":"CVE-2018-16428 glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16428.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2018-16429","severity":"low","public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1626148","bugzilla_description":"CVE-2018-16429 glib2: Out-of-bounds read in g_markup_parse_context_parse() in gmarkup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16429.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2018-12358","severity":"important","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595023","bugzilla_description":"CVE-2018-12358 Mozilla: Same-origin bypass using service worker and redirection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12359","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595024","bugzilla_description":"CVE-2018-12359 Mozilla: Buffer overflow using computed size of canvas element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12359.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12360","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595025","bugzilla_description":"CVE-2018-12360 Mozilla: Use-after-free using focus()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12360.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12361","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595026","bugzilla_description":"CVE-2018-12361 Mozilla: Integer overflow in SwizzleData","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12361.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12362","severity":"important","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595027","bugzilla_description":"CVE-2018-12362 Mozilla: Integer overflow in SSSE3 scaler","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12363","severity":"important","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595028","bugzilla_description":"CVE-2018-12363 Mozilla: Use-after-free when appending DOM nodes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12363.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12364","severity":"important","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595029","bugzilla_description":"CVE-2018-12364 Mozilla: CSRF attacks through 307 redirects and NPAPI plugins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12364.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12365","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595030","bugzilla_description":"CVE-2018-12365 Mozilla: Compromised IPC child process can list local filenames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12366","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595031","bugzilla_description":"CVE-2018-12366 Mozilla: Invalid data handling during QCMS transformations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12366.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12367","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595032","bugzilla_description":"CVE-2018-12367 Mozilla: Timing attack mitigation of PerformanceNavigationTiming","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12368","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595033","bugzilla_description":"CVE-2018-12368 Mozilla: No warning when opening executable SettingContent-ms files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12368.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12369","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595034","bugzilla_description":"CVE-2018-12369 Mozilla: WebExtension security permission checks bypassed by embedded experiments","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12369.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12370","severity":"low","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595035","bugzilla_description":"CVE-2018-12370 Mozilla: SameSite cookie protections bypassed when exiting Reader View","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12370.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-12371","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595036","bugzilla_description":"CVE-2018-12371 Mozilla: Integer overflow in Skia library during edge builder allocation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12371.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5156","severity":"important","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2113","RHSA-2018:2112"],"bugzilla":"1595037","bugzilla_description":"CVE-2018-5156 Mozilla: Media recorder segmentation fault when track type is changed during capture","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5156.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5186","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595038","bugzilla_description":"CVE-2018-5186 Mozilla: Memory safety bugs fixed in Firefox 61","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5187","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595039","bugzilla_description":"CVE-2018-5187 Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5187.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5188","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595040","bugzilla_description":"CVE-2018-5188 Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5188.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-6126","severity":"important","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2018:1815","RHSA-2018:2113","RHSA-2018:2112"],"bugzilla":"1584035","bugzilla_description":"CVE-2018-6126 Skia: Heap buffer overflow rasterizing paths in SVG","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["chromium-browser-0:67.0.3396.62-2.el6_9","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6126.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5150","severity":"critical","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576250","bugzilla_description":"CVE-2018-5150 Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5150.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5151","severity":"critical","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576251","bugzilla_description":"CVE-2018-5151 Mozilla: Memory safety bugs fixed in Firefox 60","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5151.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5152","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576252","bugzilla_description":"CVE-2018-5152 Mozilla: WebExtensions information leak through webRequest API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5152.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5153","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576253","bugzilla_description":"CVE-2018-5153 Mozilla: Out-of-bounds read in mixed content websocket messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5153.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5154","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576255","bugzilla_description":"CVE-2018-5154 Mozilla: Use-after-free with SVG animations and clip paths","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5154.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5155","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576257","bugzilla_description":"CVE-2018-5155 Mozilla: Use-after-free with SVG animations and text paths","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5157","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576258","bugzilla_description":"CVE-2018-5157 Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5157.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5158","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576259","bugzilla_description":"CVE-2018-5158 Mozilla: Malicious PDF can inject JavaScript into PDF Viewer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-95","affected_packages":["firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5159","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576260","bugzilla_description":"CVE-2018-5159 Mozilla: Integer overflow and out-of-bounds write in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5160","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576261","bugzilla_description":"CVE-2018-5160 Mozilla: Uninitialized memory use by WebRTC encoder","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5163","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576262","bugzilla_description":"CVE-2018-5163 Mozilla: Replacing cached data in JavaScript Start-up Bytecode Cache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5163.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5164","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576263","bugzilla_description":"CVE-2018-5164 Mozilla: CSP not applied to all multipart content sent with multipart/x-mixed-replace","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5165","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576266","bugzilla_description":"CVE-2018-5165 Mozilla: Checkbox for enabling Flash protected mode is inverted in 32-bit Firefox","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5165.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-5166","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576267","bugzilla_description":"CVE-2018-5166 Mozilla: WebExtension host permission bypass through filterReponseData","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5166.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5167","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576268","bugzilla_description":"CVE-2018-5167 Mozilla: Improper linkification of chrome: and javascript: content in web console and JavaScript debugger","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5168","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576269","bugzilla_description":"CVE-2018-5168 Mozilla: Lightweight themes can be installed without user interaction","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5168.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5169","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576270","bugzilla_description":"CVE-2018-5169 Mozilla: Dragging and dropping link text onto home button can set home page to include chrome pages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5172","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576271","bugzilla_description":"CVE-2018-5172 Mozilla: Pasted script from clipboard can run in the Live Bookmarks page or PDF viewer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5172.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5173","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576272","bugzilla_description":"CVE-2018-5173 Mozilla: File name spoofing of Downloads panel with Unicode characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5173.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5174","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576274","bugzilla_description":"CVE-2018-5174 Mozilla: Windows Defender SmartScreen UI runs with less secure behavior for downloaded files in Windows 10 April 2018 Update","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5174.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5175","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576275","bugzilla_description":"CVE-2018-5175 Mozilla: Universal CSP bypass on sites using strict-dynamic in their policies","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5175.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5176","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576276","bugzilla_description":"CVE-2018-5176 Mozilla: JSON Viewer script injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5177","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576277","bugzilla_description":"CVE-2018-5177 Mozilla: Buffer overflow in XSLT during number formatting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5177.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5178","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576278","bugzilla_description":"CVE-2018-5178 Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5178.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5180","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576279","bugzilla_description":"CVE-2018-5180 Mozilla: heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5181","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576280","bugzilla_description":"CVE-2018-5181 Mozilla: Local file can be displayed in noopener tab through drag and drop of hyperlink","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-5182","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576281","bugzilla_description":"CVE-2018-5182 Mozilla: Local file can be displayed from hyperlink dragged and dropped on addressbar","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-5183","severity":"critical","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576283","bugzilla_description":"CVE-2018-5183 Mozilla: Backport critical security fixes in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5148","severity":"important","public_date":"2018-03-26T00:00:00Z","advisories":["RHSA-2018:1099","RHSA-2018:1098"],"bugzilla":"1560928","bugzilla_description":"CVE-2018-5148 firefox: Use-after-free in compositor potentially allows code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.7.3-1.el7_5","firefox-0:52.7.3-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5148.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5146","severity":"critical","public_date":"2018-03-16T00:00:00Z","advisories":["RHSA-2018:0649","RHSA-2018:0647","RHSA-2018:0549","RHSA-2018:0648","RHSA-2018:1058"],"bugzilla":"1557221","bugzilla_description":"CVE-2018-5146 Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvorbis-1:1.2.3-5.el6_9.1","libvorbis-1:1.3.3-8.el7.1","thunderbird-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el6_9","firefox-0:52.7.2-1.el6_9","firefox-0:52.7.2-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5146.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5125","severity":"critical","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0647","RHSA-2018:0527","RHSA-2018:0648"],"bugzilla":"1555127","bugzilla_description":"CVE-2018-5125 Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9","thunderbird-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5125.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5127","severity":"important","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0647","RHSA-2018:0527","RHSA-2018:0648"],"bugzilla":"1555128","bugzilla_description":"CVE-2018-5127 Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9","thunderbird-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5127.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5129","severity":"important","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0647","RHSA-2018:0527","RHSA-2018:0648"],"bugzilla":"1555129","bugzilla_description":"CVE-2018-5129 Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["firefox-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9","thunderbird-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5129.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5130","severity":"important","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0527"],"bugzilla":"1555130","bugzilla_description":"CVE-2018-5130 Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5130.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5131","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0527"],"bugzilla":"1555131","bugzilla_description":"CVE-2018-5131 Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":["firefox-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5131.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5144","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0647","RHSA-2018:0527","RHSA-2018:0648"],"bugzilla":"1555132","bugzilla_description":"CVE-2018-5144 Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["firefox-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9","thunderbird-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5144.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5145","severity":"critical","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0647","RHSA-2018:0527","RHSA-2018:0648"],"bugzilla":"1555133","bugzilla_description":"CVE-2018-5145 Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9","thunderbird-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5145.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-7999","severity":"low","public_date":"2018-03-05T00:00:00Z","advisories":[],"bugzilla":"1554380","bugzilla_description":"CVE-2018-7999 graphite2: NULL pointer dereference in Segment.cpp in libgraphite2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-5124","severity":"important","public_date":"2018-01-29T00:00:00Z","advisories":[],"bugzilla":"1540431","bugzilla_description":"CVE-2018-5124 firefox: Unsanitized output in browser UI can lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5124.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2018-5089","severity":"critical","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537417","bugzilla_description":"CVE-2018-5089 Mozilla: Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6 (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5091","severity":"critical","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122"],"bugzilla":"1537814","bugzilla_description":"CVE-2018-5091 Mozilla: Use-after-free with DTMF timers (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5091.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5095","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537817","bugzilla_description":"CVE-2018-5095 Mozilla: Integer overflow in Skia library during edge builder allocation (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5096","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537818","bugzilla_description":"CVE-2018-5096 Mozilla: Use-after-free while editing form elements (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5097","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537819","bugzilla_description":"CVE-2018-5097 Mozilla: Use-after-free when source document is manipulated during XSLT (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5097.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5098","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537820","bugzilla_description":"CVE-2018-5098 Mozilla: Use-after-free while manipulating form input elements (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5098.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5099","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537821","bugzilla_description":"CVE-2018-5099 Mozilla: Use-after-free with widget listener (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5099.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5102","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537822","bugzilla_description":"CVE-2018-5102 Mozilla: Use-after-free in HTML media elements (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5103","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537823","bugzilla_description":"CVE-2018-5103 Mozilla: Use-after-free during mouse event handling (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5103.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5104","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537824","bugzilla_description":"CVE-2018-5104 Mozilla: Use-after-free during font face manipulation (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5104.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5117","severity":"moderate","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537825","bugzilla_description":"CVE-2018-5117 Mozilla: URL spoofing with right-to-left text aligned left-to-right (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5117.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7843","severity":"important","public_date":"2017-12-04T00:00:00Z","advisories":["RHSA-2017:3382"],"bugzilla":"1518566","bugzilla_description":"CVE-2017-7843 Mozilla: Web worker in Private Browsing mode can write IndexedDB data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":["firefox-0:52.5.1-1.el7_4","firefox-0:52.5.1-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-7826","severity":"critical","public_date":"2017-11-15T00:00:00Z","advisories":["RHSA-2017:3372","RHSA-2017:3247"],"bugzilla":"1513308","bugzilla_description":"CVE-2017-7826 Mozilla: Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5 (MFSA 2017-25)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.5.0-1.el6_9","firefox-0:52.5.0-1.el7_4","thunderbird-0:52.5.0-1.el7_4","firefox-0:52.5.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7826.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7828","severity":"critical","public_date":"2017-11-15T00:00:00Z","advisories":["RHSA-2017:3372","RHSA-2017:3247"],"bugzilla":"1513310","bugzilla_description":"CVE-2017-7828 Mozilla: Use-after-free of PressShell while restyling layout (MFSA 2017-25)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.5.0-1.el6_9","firefox-0:52.5.0-1.el7_4","thunderbird-0:52.5.0-1.el7_4","firefox-0:52.5.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7828.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7830","severity":"important","public_date":"2017-11-15T00:00:00Z","advisories":["RHSA-2017:3372","RHSA-2017:3247"],"bugzilla":"1513311","bugzilla_description":"CVE-2017-7830 Mozilla: Cross-origin URL information leak through Resource Timing API (MFSA 2017-25)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["thunderbird-0:52.5.0-1.el6_9","firefox-0:52.5.0-1.el7_4","thunderbird-0:52.5.0-1.el7_4","firefox-0:52.5.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7830.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16541","severity":"moderate","public_date":"2017-11-03T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1510816","bugzilla_description":"CVE-2017-16541 Mozilla: Proxy bypass using automount and autofs","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16541.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-16231","severity":null,"public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1700392","bugzilla_description":"CVE-2017-16231 pcre: self-recursive call in match() in pcre_exec.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7793","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496649","bugzilla_description":"CVE-2017-7793 Mozilla: Use-after-free with Fetch API (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7793.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7810","severity":"critical","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496651","bugzilla_description":"CVE-2017-7810 Mozilla: Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4 (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-120|CWE-121|CWE-122)","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7814","severity":"moderate","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496652","bugzilla_description":"CVE-2017-7814 Mozilla: Blob and data URLs bypass phishing and malware protection warnings (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-494","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7818","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496653","bugzilla_description":"CVE-2017-7818 Mozilla: Use-after-free during ARIA array manipulation (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7819","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496654","bugzilla_description":"CVE-2017-7819 Mozilla: Use-after-free while resizing images in design mode (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7823","severity":"moderate","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496655","bugzilla_description":"CVE-2017-7823 Mozilla: CSP sandbox directive did not create a unique origin (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7824","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496656","bugzilla_description":"CVE-2017-7824 Mozilla: Buffer overflow when drawing and validating elements with ANGLE (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7824.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7825","severity":"moderate","public_date":"2017-09-28T00:00:00Z","advisories":[],"bugzilla":"1496657","bugzilla_description":"CVE-2017-7825 Mozilla: OS X fonts render some Tibetan and Arabic unicode characters as spaces (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7825.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7809","severity":"important","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479650","bugzilla_description":"CVE-2017-7809 Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7809.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7783","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479176","bugzilla_description":"CVE-2017-7783 Mozilla: DOS attack through long username in URL (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-7753","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479188","bugzilla_description":"CVE-2017-7753 Mozilla: Out-of-bounds read with cached style data and pseudo-elements (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7753.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7779","severity":"critical","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479191","bugzilla_description":"CVE-2017-7779 Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7780","severity":"critical","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479196","bugzilla_description":"CVE-2017-7780 Mozilla: Memory safety bugs fixed in Firefox 55 (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7784","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479201","bugzilla_description":"CVE-2017-7784 Mozilla: Use-after-free with image observers (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7785","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479203","bugzilla_description":"CVE-2017-7785 Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7786","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479205","bugzilla_description":"CVE-2017-7786 Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7787","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479206","bugzilla_description":"CVE-2017-7787 Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7787.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7788","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479207","bugzilla_description":"CVE-2017-7788 Mozilla: Sandboxed about:srcdoc frames do not inherit CSP directives (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7788.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7789","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479208","bugzilla_description":"CVE-2017-7789 Mozilla: Failure to enable HSTS when two STS headers are sent for a connection (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7789.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7791","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479209","bugzilla_description":"CVE-2017-7791 Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7791.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","cvss3_score":"9.3"},{"CVE":"CVE-2017-7792","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479210","bugzilla_description":"CVE-2017-7792 Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7792.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7794","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479211","bugzilla_description":"CVE-2017-7794 Mozilla: Linux file truncation via sandbox broker (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7794.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7797","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479212","bugzilla_description":"CVE-2017-7797 Mozilla: Response header name interning leaks across origins (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-7798","severity":"critical","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2456"],"bugzilla":"1479213","bugzilla_description":"CVE-2017-7798 Mozilla: XUL injection in the style editor in devtools (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["firefox-0:52.3.0-2.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7799","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479214","bugzilla_description":"CVE-2017-7799 Mozilla: Self-XSS XUL injection in about:webrtc (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7799.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7800","severity":"critical","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479218","bugzilla_description":"CVE-2017-7800 Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7801","severity":"critical","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479223","bugzilla_description":"CVE-2017-7801 Mozilla: Use-after-free with marquee during window resizing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7801.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7802","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479224","bugzilla_description":"CVE-2017-7802 Mozilla: Use-after-free resizing image elements (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7803","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479225","bugzilla_description":"CVE-2017-7803 Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7803.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7806","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479226","bugzilla_description":"CVE-2017-7806 Mozilla: Use-after-free in layer manager with SVG (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7806.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7807","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479227","bugzilla_description":"CVE-2017-7807 Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7808","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479228","bugzilla_description":"CVE-2017-7808 Mozilla: CSP information leak with frame-ancestors containing paths (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5472","severity":"critical","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461252","bugzilla_description":"CVE-2017-5472 Mozilla: Use-after-free using destroyed node when regenerating trees (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5472.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-7749","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461253","bugzilla_description":"CVE-2017-7749 Mozilla: Use-after-free during docshell reloading (MFSA 2017-16)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7749.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7750","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461254","bugzilla_description":"CVE-2017-7750 Mozilla: Use-after-free with track elements (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7751","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461255","bugzilla_description":"CVE-2017-7751 Mozilla: Use-after-free with content viewer listeners (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7751.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7752","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461256","bugzilla_description":"CVE-2017-7752 Mozilla: Use-after-free with IME input (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7754","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461257","bugzilla_description":"CVE-2017-7754 Mozilla: Out-of-bounds read in WebGL with ImageInfo object (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7754.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-7756","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461258","bugzilla_description":"CVE-2017-7756 Mozilla: Use-after-free and use-after-scope logging XHR header errors (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7756.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7757","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461259","bugzilla_description":"CVE-2017-7757 Mozilla: Use-after-free in IndexedDB (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7757.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7778","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1461260","bugzilla_description":"CVE-2017-7778 Mozilla: Vulnerabilities in the Graphite 2 library (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7758","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461261","bugzilla_description":"CVE-2017-7758 Mozilla: Out-of-bounds read in Opus encoder (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7758.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7764","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461262","bugzilla_description":"CVE-2017-7764 Mozilla: Domain spoofing with combination of Canadian Syllabics and other unicode blocks (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7764.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-5470","severity":"critical","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461264","bugzilla_description":"CVE-2017-5470 Mozilla: Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2 (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-9233","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1462729","bugzilla_description":"CVE-2017-9233 expat: Inifinite loop due to invalid XML in external entity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-7771","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472212","bugzilla_description":"CVE-2017-7771 graphite2: out of bounds read in \"graphite2::Pass::readPass\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7771.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-7772","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472213","bugzilla_description":"CVE-2017-7772 graphite2: heap-buffer-overflow write \"lz4::decompress\" (CVE-2017-7772)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7773","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472215","bugzilla_description":"CVE-2017-7773 graphite2: heap-buffer-overflow write \"lz4::decompress\" (src/Decompressor)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7773.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7774","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472219","bugzilla_description":"CVE-2017-7774 graphite2: out of bounds read \"graphite2::Silf::readGraphite\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7774.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-7775","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472221","bugzilla_description":"CVE-2017-7775 graphite2: assertion error \"size() > n\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7775.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7776","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472223","bugzilla_description":"CVE-2017-7776 graphite2: heap-buffer-overflow read \"graphite2::Silf::getClassGlyph\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-7777","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472225","bugzilla_description":"CVE-2017-7777 graphite2: use of uninitialized memory \"graphite2::GlyphCache::Loader::read_glyph\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7777.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-7762","severity":"moderate","public_date":"2017-04-20T00:00:00Z","advisories":["RHSA-2018:2113","RHSA-2018:2112"],"bugzilla":"1590493","bugzilla_description":"CVE-2017-7762 Mozilla: address bar username and password spoofing in reader mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":["firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5456","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106"],"bugzilla":"1443297","bugzilla_description":"CVE-2017-5456 Mozilla: Sandbox escape allowing local file system read access (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5456.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5442","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443298","bugzilla_description":"CVE-2017-5442 Mozilla: Use-after-free during style changes (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5442.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5443","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443299","bugzilla_description":"CVE-2017-5443 Mozilla: Out-of-bounds write during BinHex decoding (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5443.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5429","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443301","bugzilla_description":"CVE-2017-5429 Mozilla: Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and Firefox ESR 52.1 (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5429.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5464","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443303","bugzilla_description":"CVE-2017-5464 Mozilla: Memory corruption with accessibility and DOM manipulation (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5464.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5465","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443304","bugzilla_description":"CVE-2017-5465 Mozilla: Out-of-bounds read in ConvolvePixel (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5465.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5466","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443305","bugzilla_description":"CVE-2017-5466 Mozilla: Origin confusion when reloading isolated data:text/html URL (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5466.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5467","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443307","bugzilla_description":"CVE-2017-5467 Mozilla: Memory corruption when drawing Skia content (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5467.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5460","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443308","bugzilla_description":"CVE-2017-5460 Mozilla: Use-after-free in frame selection (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5448","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106"],"bugzilla":"1443310","bugzilla_description":"CVE-2017-5448 Mozilla: Out-of-bounds write in ClearKeyDecryptor (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","firefox-0:52.1.0-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5448.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5449","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443311","bugzilla_description":"CVE-2017-5449 Mozilla: Crash during bidirectional unicode manipulation with animation (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5449.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5446","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443312","bugzilla_description":"CVE-2017-5446 Mozilla: Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5447","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443313","bugzilla_description":"CVE-2017-5447 Mozilla: Out-of-bounds read during glyph processing (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5444","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443314","bugzilla_description":"CVE-2017-5444 Mozilla: Buffer overflow while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5444.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5445","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443315","bugzilla_description":"CVE-2017-5445 Mozilla: Uninitialized values used while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5445.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5468","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443316","bugzilla_description":"CVE-2017-5468 Mozilla: Incorrect ownership model for Private Browsing information (MFSA 2017-10)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5469","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443317","bugzilla_description":"CVE-2017-5469 Mozilla: Potential Buffer overflow in flex-generated code (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5469.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5440","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443322","bugzilla_description":"CVE-2017-5440 Mozilla: Use-after-free in txExecutionState destructor during XSLT processing (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5440.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5441","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443323","bugzilla_description":"CVE-2017-5441 Mozilla: Use-after-free with selection during scroll events (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5441.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5439","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443324","bugzilla_description":"CVE-2017-5439 Mozilla: Use-after-free in nsTArray Length() during XSLT processing (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5439.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5438","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443325","bugzilla_description":"CVE-2017-5438 Mozilla: Use-after-free in nsAutoPtr during XSLT processing (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5438.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5437","severity":null,"public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443326","bugzilla_description":"REJECTED CVE-2017-5437 Mozilla: Vulnerabilities in libevent library (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5437.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-5436","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443327","bugzilla_description":"CVE-2017-5436 Mozilla: Out-of-bounds write with malicious font in Graphite 2 (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5435","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443328","bugzilla_description":"CVE-2017-5435 Mozilla: Use-after-free during transaction processing in the editor (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5434","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443329","bugzilla_description":"CVE-2017-5434 Mozilla: Use-after-free during focus handling (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5434.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5433","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443330","bugzilla_description":"CVE-2017-5433 Mozilla: Use-after-free in SMIL animation functions (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5433.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5430","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106"],"bugzilla":"1443331","bugzilla_description":"CVE-2017-5430 Mozilla: Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1 (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5430.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5432","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443332","bugzilla_description":"CVE-2017-5432 Mozilla: Use-after-free in text input selection (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5432.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5459","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443333","bugzilla_description":"CVE-2017-5459 Mozilla: Buffer overflow in WebGL (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5455","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106"],"bugzilla":"1443334","bugzilla_description":"CVE-2017-5455 Mozilla: Sandbox escape through internal feed reader APIs (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5455.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5458","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443336","bugzilla_description":"CVE-2017-5458 Mozilla: Drag and drop of javascript: URLs can allow for self-XSS (MFSA 2017-11)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5454","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443338","bugzilla_description":"CVE-2017-5454 Mozilla: Sandbox escape allowing file system read access through file picker (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5454.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5451","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443340","bugzilla_description":"CVE-2017-5451 Mozilla: Addressbar spoofing with onblur event (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5451.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5453","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443343","bugzilla_description":"CVE-2017-5453 Mozilla: HTML injection into RSS Reader feed preview page through TITLE element (MFSA 2017-11)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5453.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-5428","severity":"critical","public_date":"2017-03-17T00:00:00Z","advisories":["RHSA-2017:0558"],"bugzilla":"1433202","bugzilla_description":"CVE-2017-5428 Mozilla: integer overflow in createImageBitmap() (MFSA 2017-08)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.0-5.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5428.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5400","severity":"critical","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429778","bugzilla_description":"CVE-2017-5400 Mozilla: asm.js JIT-spray bypass of ASLR and DEP (MFSA 2017-06)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5400.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5401","severity":"critical","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429779","bugzilla_description":"CVE-2017-5401 Mozilla: Memory Corruption when handling ErrorResult (MFSA 2017-06)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5401.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5402","severity":"critical","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429780","bugzilla_description":"CVE-2017-5402 Mozilla: Use-after-free working with events in FontFace objects (MFSA 2017-06)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5402.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5404","severity":"critical","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429781","bugzilla_description":"CVE-2017-5404 Mozilla: Use-after-free working with ranges in selections (MFSA 2017-06)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5407","severity":"moderate","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429782","bugzilla_description":"CVE-2017-5407 Mozilla: Pixel and history stealing via floating-point timing side channel with SVG filters (MFSA 2017-06)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5410","severity":"moderate","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429783","bugzilla_description":"CVE-2017-5410 Mozilla: Memory corruption during JavaScript garbage collection incremental sweeping (MFSA 2017-06)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5410.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-5408","severity":"moderate","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429784","bugzilla_description":"CVE-2017-5408 Mozilla: Cross-origin reading of video captions in violation of CORS (MFSA 2017-06)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5408.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5405","severity":"low","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429785","bugzilla_description":"CVE-2017-5405 Mozilla: FTP response codes can cause use of uninitialized values for ports (MFSA 2017-06)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-5398","severity":"critical","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429786","bugzilla_description":"CVE-2017-5398 Mozilla: Memory safety bugs fixed in Firefox 52 and Firefox ESR 45.8 (MFSA 2017-06)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5398.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5373","severity":"critical","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1415924","bugzilla_description":"CVE-2017-5373 Mozilla: Memory safety bugs fixed in Firefox 51 and Firefox ESR 45.7 (MFSA 2017-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5373.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5375","severity":"critical","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416271","bugzilla_description":"CVE-2017-5375 Mozilla: Excessive JIT code allocation allows bypass of ASLR and DEP (MFSA 2017-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5375.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5376","severity":"critical","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416272","bugzilla_description":"CVE-2017-5376 Mozilla: Use-after-free in XSL (MFSA 2017-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5378","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416273","bugzilla_description":"CVE-2017-5378 Mozilla: Pointer and frame data leakage of Javascript objects (MFSA 2017-02)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5378.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-5380","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416274","bugzilla_description":"CVE-2017-5380 Mozilla: Potential use-after-free during DOM manipulations (MFSA 2017-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5380.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-5390","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416279","bugzilla_description":"CVE-2017-5390 Mozilla: Insecure communication methods in Developer Tools JSON viewer (MFSA 2017-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5390.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-5396","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416280","bugzilla_description":"CVE-2017-5396 Mozilla: Use-after-free with Media Decoder (MFSA 2017-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5396.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-5383","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416281","bugzilla_description":"CVE-2017-5383 Mozilla: Location bar spoofing with unicode characters (MFSA 2017-02)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5383.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5386","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0190"],"bugzilla":"1416282","bugzilla_description":"CVE-2017-5386 Mozilla: WebExtensions can use data: protocol to affect other extensions (MFSA 2017-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","firefox-0:45.7.0-2.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5386.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-0381","severity":"low","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1413604","bugzilla_description":"CVE-2017-0381 opus: Memory corruption during media file and data processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0381.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9899","severity":"critical","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404083","bugzilla_description":"CVE-2016-9899 Mozilla: Use-after-free while manipulating DOM events and audio elements (MFSA 2016-94, MFSA 2016-95)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9899.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-9895","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404086","bugzilla_description":"CVE-2016-9895 Mozilla: CSP bypass using marquee tag (MFSA 2016-94, MFSA 2016-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9895.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-9897","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946"],"bugzilla":"1404087","bugzilla_description":"CVE-2016-9897 Mozilla: Memory corruption in libGLES (MFSA 2016-94, MFSA 2016-95)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9898","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946"],"bugzilla":"1404089","bugzilla_description":"CVE-2016-9898 Mozilla: Use-after-free in Editor while manipulating DOM subtrees (MFSA 2016-94, MFSA 2016-95)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9898.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9900","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404090","bugzilla_description":"CVE-2016-9900 Mozilla: Restricted external resources can be loaded by SVG images through data URLs (MFSA 2016-94, MFSA 2016-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9904","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946"],"bugzilla":"1404091","bugzilla_description":"CVE-2016-9904 Mozilla: Cross-origin information leak in shared atoms (MFSA 2016-94, MFSA 2016-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9904.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9905","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404094","bugzilla_description":"CVE-2016-9905 Mozilla: Crash in EnumerateSubDocuments (MFSA 2016-94, MFSA 2016-95)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9905.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9893","severity":"critical","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404096","bugzilla_description":"CVE-2016-9893 Mozilla: Memory safety bugs fixed in Firefox 50.1 and Firefox ESR 45.6 (MFSA 2016-95)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-9901","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404358","bugzilla_description":"CVE-2016-9901 Mozilla: Data from Pocket server improperly sanitized before execution (MFSA 2016-94, MFSA 2016-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9901.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9902","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404359","bugzilla_description":"CVE-2016-9902 Mozilla: Pocket extension does not validate the origin of events (MFSA 2016-94, MFSA 2016-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9902.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9079","severity":"critical","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2016:2850","RHSA-2016:2843"],"bugzilla":"1400376","bugzilla_description":"CVE-2016-9079 Mozilla: Firefox SVG Animation Remote Code Execution (MFSA 2016-92)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.5.1-1.el7_3","thunderbird-0:45.5.1-1.el5_11","firefox-0:45.5.1-1.el7_3","firefox-0:45.5.1-1.el5_11","firefox-0:45.5.1-1.el6_8","thunderbird-0:45.5.1-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9079.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5296","severity":"critical","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780"],"bugzilla":"1395055","bugzilla_description":"CVE-2016-5296 Mozilla: Heap-buffer-overflow WRITE in rasterize_edges_1 (MFSA 2016-89, MFSA 2016-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","firefox-0:45.5.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5296.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5297","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780"],"bugzilla":"1395058","bugzilla_description":"CVE-2016-5297 Mozilla: Incorrect argument length checking in Javascript (MFSA 2016-89, MFSA 2016-90)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","firefox-0:45.5.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5297.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9064","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780"],"bugzilla":"1395060","bugzilla_description":"CVE-2016-9064 Mozilla: Addons update must verify IDs match between current and new versions (MFSA 2016-89, MFSA 2016-90)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","firefox-0:45.5.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9066","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780"],"bugzilla":"1395061","bugzilla_description":"CVE-2016-9066 Mozilla: Integer overflow leading to a buffer overflow in nsScriptLoadHandler (MFSA 2016-89, MFSA 2016-90)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","firefox-0:45.5.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9066.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5291","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780"],"bugzilla":"1395065","bugzilla_description":"CVE-2016-5291 Mozilla: Same-origin policy violation using local HTML file and saved shortcut file (MFSA 2016-89, MFSA 2016-90)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","firefox-0:45.5.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5291.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5290","severity":"critical","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780","RHSA-2016:2825"],"bugzilla":"1395066","bugzilla_description":"CVE-2016-5290 Mozilla: Memory safety bugs fixed in Firefox 45.5 (MFSA 2016-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","thunderbird-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el7_3","thunderbird-0:45.5.0-1.el7_3","thunderbird-0:45.5.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5290.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5292","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395057","bugzilla_description":"CVE-2016-5292 Mozilla: URL parsing causes crash (MFSA 2016-89)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5292.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5289","severity":"critical","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395098","bugzilla_description":"CVE-2016-5289 Mozilla: Memory safety bugs fixed in Firefox 50 (MFSA 2016-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-9077","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395099","bugzilla_description":"CVE-2016-9077 Mozilla: Canvas filters allow feDisplacementMaps to be applied to cross-origin images, allowing timing attacks on them (MFSA 2016-89)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9077.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9071","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395100","bugzilla_description":"CVE-2016-9071 Mozilla: Probe browser history via HSTS/301 redirect + CSP (MFSA 2016-89)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9071.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-9075","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395101","bugzilla_description":"CVE-2016-9075 Mozilla: WebExtensions can access the mozAddonManager API and use it to gain elevated privileges (MFSA 2016-89)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9076","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396537","bugzilla_description":"CVE-2016-9076 firefox: select dropdown menu can be used for URL bar spoofing on e10s","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9076.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9067","severity":"important","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396539","bugzilla_description":"CVE-2016-9067 CVE-2016-9069 firefox: Heap use-after-free in nsINode::ReplaceOrInsertBefore","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2016-9069","severity":"important","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396539","bugzilla_description":"CVE-2016-9067 CVE-2016-9069 firefox: Heap use-after-free in nsINode::ReplaceOrInsertBefore","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9069.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2016-9063","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396540","bugzilla_description":"CVE-2016-9063 firefox: Possible integer overflow to fix inside XML_Parse in Expat","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9063.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9068","severity":"important","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396542","bugzilla_description":"CVE-2016-9068 firefox: Heap use-after-free in nsRefreshDriver","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9068.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2016-9073","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396545","bugzilla_description":"CVE-2016-9073 firefox: windows.create schema doesn't specify \"format\": \"relativeUrl\"","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9073.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-9070","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396549","bugzilla_description":"CVE-2016-9070 firefox: Sidebar bookmark can have reference to chrome window","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9070.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5287","severity":"important","public_date":"2016-10-20T00:00:00Z","advisories":[],"bugzilla":"1387586","bugzilla_description":"CVE-2016-5287 firefox: Crash in nsTArray_base","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5287.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5288","severity":"moderate","public_date":"2016-10-20T00:00:00Z","advisories":[],"bugzilla":"1387588","bugzilla_description":"CVE-2016-5288 firefox: Web content can read cache entries","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5288.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5261","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1361986","bugzilla_description":"CVE-2016-5261 Mozilla: Integer overflow and memory corruption in WebSocketChannel (MFSA 2016-75, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5250","severity":"moderate","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1361998","bugzilla_description":"CVE-2016-5250 Mozilla: Resource Timing API is storing resources sent by the previous page (MFSA 2016-84, MFSA 2016-86)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5250.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5257","severity":"critical","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912","RHSA-2016:1985"],"bugzilla":"1377543","bugzilla_description":"CVE-2016-5257 Mozilla: Memory safety bugs fixed in Firefox ESR 45.4 (MFSA 2016-85, MFSA 2016-86)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","thunderbird-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2","thunderbird-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5278","severity":"critical","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377549","bugzilla_description":"CVE-2016-5278 Mozilla: Heap-buffer-overflow in nsBMPEncoder::AddImageFrame (MFSA 2016-85, MFSA 2016-86)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5278.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5270","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377552","bugzilla_description":"CVE-2016-5270 Mozilla: Heap-buffer-overflow in nsCaseTransformTextRunFactory::TransformString (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5270.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5272","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377554","bugzilla_description":"CVE-2016-5272 Mozilla: Bad cast in nsImageGeometryMixin (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5276","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377557","bugzilla_description":"CVE-2016-5276 Mozilla: Heap-use-after-free in mozilla::a11y::DocAccessible::ProcessInvalidationList (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5274","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377558","bugzilla_description":"CVE-2016-5274 Mozilla: use-after-free in nsFrameManager::CaptureFrameState (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5277","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377559","bugzilla_description":"CVE-2016-5277 Mozilla: Heap-use-after-free in nsRefreshDriver::Tick (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5277.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5280","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377561","bugzilla_description":"CVE-2016-5280 Mozilla: Use-after-free in mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5280.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5281","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377563","bugzilla_description":"CVE-2016-5281 Mozilla: use-after-free in DOMSVGLength (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5281.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5284","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377565","bugzilla_description":"CVE-2016-5284 Mozilla: Add-on update site certificate pin expiration (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5284.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2827","severity":"low","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377660","bugzilla_description":"CVE-2016-2827 Mozilla: Out-of-bounds read in mozilla::net::IsValidReferrerPolicy (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2827.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5271","severity":"low","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377661","bugzilla_description":"CVE-2016-5271 Mozilla: Out-of-bounds read in PropertyProvider::GetSpacingInternal (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5271.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5256","severity":"critical","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377666","bugzilla_description":"CVE-2016-5256 Mozilla: Memory safety bugs fixed in Firefox 49 (MFSA 2016-85)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5256.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5275","severity":"critical","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377667","bugzilla_description":"CVE-2016-5275 Mozilla: global-buffer-overflow in mozilla::gfx::FilterSupport::ComputeSourceNeededRegions (MFSA 2016-85)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5275.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5273","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377669","bugzilla_description":"CVE-2016-5273 Mozilla: crash in mozilla::a11y::HyperTextAccessible::GetChildOffset (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5273.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5283","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377670","bugzilla_description":"CVE-2016-5283 Mozilla: iframe src fragment timing attack can reveal cross-origin data (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5279","severity":"moderate","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377673","bugzilla_description":"CVE-2016-5279 Mozilla: Full local path of files is available to web pages after drag and drop (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5279.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5282","severity":"moderate","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377675","bugzilla_description":"CVE-2016-5282 Mozilla: Don't allow content to request favicons from non-whitelisted schemes (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5282.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2830","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1342897","bugzilla_description":"CVE-2016-2830 Mozilla: Favicon network connection persists when page is closed (MFSA 2016-62)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2830.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-2836","severity":"critical","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551","RHSA-2016:1809"],"bugzilla":"1361974","bugzilla_description":"CVE-2016-2836 Mozilla: Miscellaneous memory safety hazards (rv:45.3) (MFSA 2016-62)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","thunderbird-0:45.3.0-1.el7_2","thunderbird-0:45.3.0-1.el5_11","thunderbird-0:45.3.0-1.el6_8","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2836.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-2835","severity":"critical","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361975","bugzilla_description":"CVE-2016-2835 Mozilla: Miscellaneous memory safety hazards (rv:48.0) (MFSA 2016-62)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2835.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-2838","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361976","bugzilla_description":"CVE-2016-2838 Mozilla: Buffer overflow rendering SVG with bidirectional content (MFSA 2016-64)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2839","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361977","bugzilla_description":"CVE-2016-2839 Mozilla: Cairo rendering crash due to memory allocation issue with FFMpeg 0.10 (MFSA 2016-65)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5251","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361978","bugzilla_description":"CVE-2016-5251 Mozilla: Location bar spoofing via data URLs with malformed/invalid mediatypes (MFSA 2016-66)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5252","severity":"important","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361979","bugzilla_description":"CVE-2016-5252 Mozilla: Stack underflow during 2D graphics rendering (MFSA 2016-67)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5252.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5254","severity":"low","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361980","bugzilla_description":"CVE-2016-5254 Mozilla: Use-after-free when using alt key and toplevel menus (MFSA 2016-70)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5255","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361981","bugzilla_description":"CVE-2016-5255 Mozilla: Crash in incremental garbage collection in JavaScript (MFSA 2016-71)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5255.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5258","severity":"critical","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361982","bugzilla_description":"CVE-2016-5258 Mozilla: Use-after-free in DTLS during WebRTC session shutdown (MFSA 2016-72)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5258.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5259","severity":"critical","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361984","bugzilla_description":"CVE-2016-5259 Mozilla: Use-after-free in service workers with nested sync events (MFSA 2016-73)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5259.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5260","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361985","bugzilla_description":"CVE-2016-5260 Mozilla: Form input type change from password to text can store plain text password in session restore file (MFSA 2016-74)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5260.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5262","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361987","bugzilla_description":"CVE-2016-5262 Mozilla: Scripts on marquee tag can execute in sandboxed iframes (MFSA 2016-76)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5262.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-2837","severity":"low","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361989","bugzilla_description":"CVE-2016-2837 Mozilla: Buffer overflow in ClearKey Content Decryption Module (CDM) during video playback (MFSA 2016-77)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2837.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5263","severity":"important","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361991","bugzilla_description":"CVE-2016-5263 Mozilla: Type confusion in display transformation (MFSA 2016-78)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5263.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5264","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361992","bugzilla_description":"CVE-2016-5264 Mozilla: Use-after-free when applying SVG effects (MFSA 2016-79)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5264.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5265","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361994","bugzilla_description":"CVE-2016-5265 Mozilla: Same-origin policy violation using local HTML file and saved shortcut file (MFSA 2016-80)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5265.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5266","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361995","bugzilla_description":"CVE-2016-5266 Mozilla: Information disclosure and local file manipulation through drag and drop (MFSA 2016-81)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5266.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5268","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361996","bugzilla_description":"CVE-2016-5268 Mozilla: Spoofing attack through text injection into internal error pages (MFSA 2016-83)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5268.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-2831","severity":"moderate","public_date":"2016-06-09T00:00:00Z","advisories":["RHSA-2016:1217"],"bugzilla":"1342898","bugzilla_description":"CVE-2016-2831 Mozilla: Entering fullscreen and persistent pointerlock without user permission (MFSA 2016-58)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2831.json"},{"CVE":"CVE-2016-2818","severity":"critical","public_date":"2016-06-08T00:00:00Z","advisories":["RHSA-2016:1392","RHSA-2016:1217"],"bugzilla":"1342887","bugzilla_description":"CVE-2016-2818 Mozilla: Miscellaneous memory safety hazards (rv:45.2) (MFSA 2016-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","thunderbird-0:45.2-1.el5_11","thunderbird-0:45.2-1.el7_2","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2","thunderbird-0:45.2-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2818.json"},{"CVE":"CVE-2016-2819","severity":"critical","public_date":"2016-06-08T00:00:00Z","advisories":["RHSA-2016:1217"],"bugzilla":"1342891","bugzilla_description":"CVE-2016-2819 Mozilla: Buffer overflow parsing HTML5 fragments (MFSA 2016-50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2819.json"},{"CVE":"CVE-2016-2821","severity":"moderate","public_date":"2016-06-08T00:00:00Z","advisories":["RHSA-2016:1217"],"bugzilla":"1342892","bugzilla_description":"CVE-2016-2821 Mozilla: Use-after-free deleting tables from a contenteditable document (MFSA 2016-51)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2821.json"},{"CVE":"CVE-2016-2822","severity":"moderate","public_date":"2016-06-08T00:00:00Z","advisories":["RHSA-2016:1217"],"bugzilla":"1342893","bugzilla_description":"CVE-2016-2822 Mozilla: Addressbar spoofing though the SELECT element (MFSA 2016-52)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2822.json"},{"CVE":"CVE-2016-2828","severity":"moderate","public_date":"2016-06-08T00:00:00Z","advisories":["RHSA-2016:1217"],"bugzilla":"1342895","bugzilla_description":"CVE-2016-2828 Mozilla: Use-after-free when textures are used in WebGL operations after recycle pool destruction (MFSA 2016-56)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2828.json"},{"CVE":"CVE-2016-2815","severity":"critical","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1342890","bugzilla_description":"CVE-2016-2815 Mozilla: Miscellaneous memory safety hazards (rv:47.0) (MFSA 2016-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2815.json"},{"CVE":"CVE-2016-2825","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1342894","bugzilla_description":"CVE-2016-2825 Mozilla: Partial same-origin-policy through setting location.host through data: URI (MFSA 2016-54)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2825.json"},{"CVE":"CVE-2016-2829","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1342896","bugzilla_description":"CVE-2016-2829 Mozilla: Incorrect icon displayed on permissions notifications (MFSA 2016-57)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2829.json"},{"CVE":"CVE-2016-2832","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1342899","bugzilla_description":"CVE-2016-2832 Mozilla: Information disclosure of disabled plugins through CSS pseudo-classes (MFSA 2016-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2832.json"},{"CVE":"CVE-2016-2833","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1342900","bugzilla_description":"CVE-2016-2833 Mozilla: Java applets bypass CSP protections (MFSA 2016-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2833.json"},{"CVE":"CVE-2016-5300","severity":"moderate","public_date":"2016-06-04T00:00:00Z","advisories":[],"bugzilla":"1343085","bugzilla_description":"CVE-2016-5300 expat: Little entropy used for hash initialization","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5300.json"},{"CVE":"CVE-2016-0718","severity":"moderate","public_date":"2016-05-17T00:00:00Z","advisories":["RHSA-2016:2824","RHSA-2018:2486"],"bugzilla":"1296102","bugzilla_description":"CVE-2016-0718 expat: Out-of-bounds heap read on crafted input causing crash","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["expat-0:2.0.1-13.el6_8","expat-0:2.1.0-10.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0718.json"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2016-2804","severity":"critical","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330260","bugzilla_description":"CVE-2016-2804 Mozilla: Miscellaneous memory safety hazards (rv:46.0) (MFSA 2016-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2804.json"},{"CVE":"CVE-2016-2805","severity":"critical","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:0695","RHSA-2016:1041"],"bugzilla":"1330266","bugzilla_description":"CVE-2016-2805 Mozilla: Miscellaneous memory safety hazards (rv:38.8) (MFSA 2016-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:38.8.0-1.el7_2","firefox-0:45.1.0-1.el6_7","thunderbird-0:38.8.0-2.el6_8","thunderbird-0:38.8.0-1.el5_11","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2805.json"},{"CVE":"CVE-2016-2806","severity":"critical","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:0695"],"bugzilla":"1330270","bugzilla_description":"CVE-2016-2806 Mozilla: Miscellaneous memory safety hazards (rv:46.0 / rv:45.1) (MFSA 2016-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.1.0-1.el6_7","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2806.json"},{"CVE":"CVE-2016-2807","severity":"critical","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:0695","RHSA-2016:1041"],"bugzilla":"1330271","bugzilla_description":"CVE-2016-2807 Mozilla: Miscellaneous memory safety hazards (rv:46.0 / rv:45.1 / rv:38.8) (MFSA 2016-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:38.8.0-1.el7_2","firefox-0:45.1.0-1.el6_7","thunderbird-0:38.8.0-2.el6_8","thunderbird-0:38.8.0-1.el5_11","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2807.json"},{"CVE":"CVE-2016-2809","severity":"moderate","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330272","bugzilla_description":"CVE-2016-2809 Mozilla: Privilege escalation through file deletion by Maintenance Service updater (MFSA 2016-40)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2809.json"},{"CVE":"CVE-2016-2810","severity":"moderate","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330274","bugzilla_description":"CVE-2016-2810 Mozilla: Content provider permission bypass allows malicious application to access data (MFSA 2016-41)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2810.json"},{"CVE":"CVE-2016-2811","severity":"important","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330275","bugzilla_description":"CVE-2016-2811 Mozilla: Use-after-free and buffer overflow in Service Workers (MFSA 2016-42)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2811.json"},{"CVE":"CVE-2016-2812","severity":"important","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330277","bugzilla_description":"CVE-2016-2812 Mozilla: Use-after-free and buffer overflow in Service Workers (MFSA 2016-42)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2812.json"},{"CVE":"CVE-2016-2813","severity":"important","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330278","bugzilla_description":"CVE-2016-2813 Mozilla: Disclosure of user actions through JavaScript with motion and orientation sensors (MFSA 2016-43)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2813.json"},{"CVE":"CVE-2016-2814","severity":"important","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:0695"],"bugzilla":"1330280","bugzilla_description":"CVE-2016-2814 Mozilla: Buffer overflow in libstagefright with CENC offsets (MFSA 2016-44)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.1.0-1.el6_7","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2814.json"},{"CVE":"CVE-2016-2816","severity":"moderate","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330282","bugzilla_description":"CVE-2016-2816 Mozilla: CSP not applied to pages sent with multipart/x-mixed-replace (MFSA 2016-45)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2816.json"},{"CVE":"CVE-2016-2817","severity":"moderate","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330285","bugzilla_description":"CVE-2016-2817 Mozilla: Elevation of privilege with chrome.tabs.update API in web extensions (MFSA 2016-46)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2817.json"},{"CVE":"CVE-2016-2808","severity":"important","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:0695"],"bugzilla":"1330286","bugzilla_description":"CVE-2016-2808 Mozilla: Write to invalid HashMap entry through JavaScript.watch() (MFSA 2016-47)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.1.0-1.el6_7","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2808.json"},{"CVE":"CVE-2016-2820","severity":"moderate","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1330287","bugzilla_description":"CVE-2016-2820 Mozilla: Firefox Health Reports could accept events from untrusted domains (MFSA 2016-48)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2820.json"},{"CVE":"CVE-2016-1952","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315566","bugzilla_description":"CVE-2016-1952 Mozilla: Miscellaneous memory safety hazards (rv:38.7) (MFSA 2016-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1952.json"},{"CVE":"CVE-2016-1953","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315567","bugzilla_description":"CVE-2016-1953 Mozilla: Miscellaneous memory safety hazards (rv:45.0) (MFSA 2016-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1953.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-1954","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315569","bugzilla_description":"CVE-2016-1954 Mozilla: Local file overwriting and potential privilege escalation through CSP reports (MFSA 2016-17)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1954.json"},{"CVE":"CVE-2016-1955","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315570","bugzilla_description":"CVE-2016-1955 Mozilla: CSP reports fail to strip location information for embedded iframe pages (MFSA 2016-18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1955.json"},{"CVE":"CVE-2016-1956","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315571","bugzilla_description":"CVE-2016-1956 Mozilla: Linux video memory DOS with Intel drivers (MFSA 2016-19)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1956.json"},{"CVE":"CVE-2016-1957","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315573","bugzilla_description":"CVE-2016-1957 Mozilla: Memory leak in libstagefright when deleting an array during MP4 processing (MFSA 2016-20)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1957.json"},{"CVE":"CVE-2016-1958","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373"],"bugzilla":"1315574","bugzilla_description":"CVE-2016-1958 Mozilla: Displayed page address can be overridden (MFSA 2016-21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1958.json"},{"CVE":"CVE-2016-1959","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315575","bugzilla_description":"CVE-2016-1959 Mozilla: Service Worker Manager out-of-bounds read in Service Worker Manager (MFSA 2016-22)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1959.json"},{"CVE":"CVE-2016-1960","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315576","bugzilla_description":"CVE-2016-1960 Mozilla: Use-after-free in HTML5 string parser (MFSA 2016-23)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1960.json"},{"CVE":"CVE-2016-1961","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315577","bugzilla_description":"CVE-2016-1961 Mozilla: Use-after-free in SetBody (MFSA 2016-24)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1961.json"},{"CVE":"CVE-2016-1962","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373"],"bugzilla":"1315578","bugzilla_description":"CVE-2016-1962 Mozilla: Use-after-free when using multiple WebRTC data channels (MFSA 2016-25)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1962.json"},{"CVE":"CVE-2016-1963","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315579","bugzilla_description":"CVE-2016-1963 Mozilla: Memory corruption when modifying a file being read by FileReader (MFSA 2016-26)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1963.json"},{"CVE":"CVE-2016-1964","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315774","bugzilla_description":"CVE-2016-1964 Mozilla: Use-after-free during XML transformations (MFSA 2016-27)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1964.json"},{"CVE":"CVE-2016-1965","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373"],"bugzilla":"1315775","bugzilla_description":"CVE-2016-1965 Mozilla: Addressbar spoofing though history navigation and Location protocol property (MFSA 2016-28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1965.json"},{"CVE":"CVE-2016-1967","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315776","bugzilla_description":"CVE-2016-1967 Mozilla: Same-origin policy violation using perfomance.getEntries and history navigation with session restore (MFSA 2016-29)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1967.json"},{"CVE":"CVE-2016-1968","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315777","bugzilla_description":"CVE-2016-1968 Mozilla: Buffer overflow in Brotli decompression (MFSA 2016-30)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1968.json"},{"CVE":"CVE-2016-1966","severity":"important","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315778","bugzilla_description":"CVE-2016-1966 Mozilla: Memory corruption with malicious NPAPI plugin (MFSA 2016-31)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1966.json"},{"CVE":"CVE-2016-1970","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315780","bugzilla_description":"CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975  CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1970.json"},{"CVE":"CVE-2016-1971","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315780","bugzilla_description":"CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975  CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1971.json"},{"CVE":"CVE-2016-1972","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315780","bugzilla_description":"CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975  CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1972.json"},{"CVE":"CVE-2016-1975","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315780","bugzilla_description":"CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975  CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1975.json"},{"CVE":"CVE-2016-1976","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315780","bugzilla_description":"CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975  CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1976.json"},{"CVE":"CVE-2016-1973","severity":"important","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373"],"bugzilla":"1315782","bugzilla_description":"CVE-2016-1973 Mozilla: Use-after-free in GetStaticInstance in WebRTC (MFSA 2016-33)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1973.json"},{"CVE":"CVE-2016-1974","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315785","bugzilla_description":"CVE-2016-1974 Mozilla: Out-of-bounds read in HTML parser following a failed allocation (MFSA 2016-34)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1974.json"},{"CVE":"CVE-2016-1977","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1977.json"},{"CVE":"CVE-2016-2790","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2790.json"},{"CVE":"CVE-2016-2791","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2791.json"},{"CVE":"CVE-2016-2792","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2792.json"},{"CVE":"CVE-2016-2793","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2793.json"},{"CVE":"CVE-2016-2794","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2794.json"},{"CVE":"CVE-2016-2795","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2795.json"},{"CVE":"CVE-2016-2796","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2796.json"},{"CVE":"CVE-2016-2797","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2797.json"},{"CVE":"CVE-2016-2798","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2798.json"},{"CVE":"CVE-2016-2799","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2799.json"},{"CVE":"CVE-2016-2800","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2800.json"},{"CVE":"CVE-2016-2801","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2801.json"},{"CVE":"CVE-2016-2802","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2802.json"},{"CVE":"CVE-2016-1969","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0197"],"bugzilla":"1317560","bugzilla_description":"CVE-2016-1969 mozilla: out-of-bounds write with malicious font in graphite2 (MFSA 2016-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["firefox-0:38.6.1-1.el6_7","firefox-0:38.6.1-1.el5_11","firefox-0:38.6.1-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1969.json"},{"CVE":"CVE-2016-10197","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418612","bugzilla_description":"CVE-2016-10197 libevent: Out-of-bounds read in search_make_new()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-1949","severity":"critical","public_date":"2016-02-11T00:00:00Z","advisories":[],"bugzilla":"1306856","bugzilla_description":"CVE-2016-1949 firefox: Same-origin-policy violation using Service Workers with plugins","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1949.json"},{"CVE":"CVE-2016-1521","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0197","RHSA-2016:0594","RHSA-2016:0258"],"bugzilla":"1305805","bugzilla_description":"CVE-2016-1521 graphite2: Out-of-bound read vulnerability triggered by crafted fonts","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:38.6.1-1.el6_7","graphite2-0:1.3.6-1.el7_2","thunderbird-0:38.6.0-1.el5_11","firefox-0:38.6.1-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.1-1.el7_2","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1521.json"},{"CVE":"CVE-2016-1522","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0197","RHSA-2016:0594","RHSA-2016:0258"],"bugzilla":"1305810","bugzilla_description":"CVE-2016-1522 graphite2: Null pointer dereference and out-of-bounds access vulnerabilities","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["firefox-0:38.6.1-1.el6_7","graphite2-0:1.3.6-1.el7_2","thunderbird-0:38.6.0-1.el5_11","firefox-0:38.6.1-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.1-1.el7_2","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1522.json"},{"CVE":"CVE-2016-1523","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0197","RHSA-2016:0594","RHSA-2016:0258"],"bugzilla":"1305813","bugzilla_description":"CVE-2016-1523 graphite2: Heap-based buffer overflow in context item handling functionality","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["firefox-0:38.6.1-1.el6_7","graphite2-0:1.3.6-1.el7_2","thunderbird-0:38.6.0-1.el5_11","firefox-0:38.6.1-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.1-1.el7_2","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1523.json"},{"CVE":"CVE-2016-1526","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0594","RHSA-2016:0695"],"bugzilla":"1308590","bugzilla_description":"CVE-2016-1526 graphite2: Out-of-bounds read vulnerability in TfUtil:LocaLookup","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["firefox-0:45.1.0-1.el6_7","graphite2-0:1.3.6-1.el7_2","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1526.json"},{"CVE":"CVE-2016-10195","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418608","bugzilla_description":"CVE-2016-10195 libevent: Stack-buffer overflow in the name_parse() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10196","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418611","bugzilla_description":"CVE-2016-10196 libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-1930","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":["RHSA-2016:0071","RHSA-2016:0258"],"bugzilla":"1301818","bugzilla_description":"CVE-2016-1930 Mozilla: Miscellaneous memory safety hazards (rv:38.6) (MFSA 2016-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.6.0-1.el7_2","thunderbird-0:38.6.0-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.0-1.el5_11","firefox-0:38.6.0-1.el6_7","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1930.json"},{"CVE":"CVE-2016-1931","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301819","bugzilla_description":"CVE-2016-1931 Mozilla: Miscellaneous memory safety hazards (rv:44.0) (MFSA 2016-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1931.json"},{"CVE":"CVE-2016-1933","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301820","bugzilla_description":"CVE-2016-1933 Mozilla: Out of Memory crash when parsing GIF format images (MFSA 2016-02)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1933.json"},{"CVE":"CVE-2016-1935","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":["RHSA-2016:0071","RHSA-2016:0258"],"bugzilla":"1301821","bugzilla_description":"CVE-2016-1935 Mozilla: Buffer overflow in WebGL after out of memory allocation (MFSA 2016-03)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.6.0-1.el7_2","thunderbird-0:38.6.0-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.0-1.el5_11","firefox-0:38.6.0-1.el6_7","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1935.json"},{"CVE":"CVE-2016-1939","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301822","bugzilla_description":"CVE-2016-1939 Mozilla: Firefox allows for control characters to be set in cookie names (MFSA 2016-04)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1939.json"},{"CVE":"CVE-2016-1937","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301823","bugzilla_description":"CVE-2016-1937 Mozilla: Missing delay following user click events in protocol handler dialog (MFSA 2016-06)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1937.json"},{"CVE":"CVE-2016-1944","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301825","bugzilla_description":"CVE-2016-1944 CVE-2016-1945 CVE-2016-1946 Mozilla: Unsafe memory manipulation found through code inspection (MFSA 2016-10)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1944.json"},{"CVE":"CVE-2016-1945","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301825","bugzilla_description":"CVE-2016-1944 CVE-2016-1945 CVE-2016-1946 Mozilla: Unsafe memory manipulation found through code inspection (MFSA 2016-10)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1945.json"},{"CVE":"CVE-2016-1946","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301825","bugzilla_description":"CVE-2016-1944 CVE-2016-1945 CVE-2016-1946 Mozilla: Unsafe memory manipulation found through code inspection (MFSA 2016-10)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1946.json"},{"CVE":"CVE-2016-1947","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301826","bugzilla_description":"CVE-2016-1947 Mozilla: Application Reputation service disabled in Firefox 43 (MFSA 2016-11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1947.json"},{"CVE":"CVE-2016-1943","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301827","bugzilla_description":"CVE-2016-1943 Mozilla: Addressbar spoofing attacks (MFSA 2016-09)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1943.json"},{"CVE":"CVE-2015-7201","severity":"critical","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0001","RHSA-2015:2657"],"bugzilla":"1291571","bugzilla_description":"CVE-2015-7201 Mozilla: Miscellaneous memory safety hazards (rv:38.5) (MFSA 2015-134)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:38.5.0-1.el6_7","thunderbird-0:38.5.0-1.el7_2","thunderbird-0:38.5.0-1.el5_11","firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7201.json"},{"CVE":"CVE-2015-7202","severity":"critical","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291577","bugzilla_description":"CVE-2015-7202 Mozilla: Miscellaneous memory safety hazards (rv:43.0) (MFSA 2015-134)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7202.json"},{"CVE":"CVE-2015-7204","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291578","bugzilla_description":"CVE-2015-7204 Mozilla: Crash with JavaScript variable assignment with unboxed objects (MFSA 2015-135)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7204.json"},{"CVE":"CVE-2015-7207","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291581","bugzilla_description":"CVE-2015-7207 Mozilla: Same-origin policy violation using perfomance.getEntries and history navigation (MFSA 2015-136)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7207.json"},{"CVE":"CVE-2015-7208","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291583","bugzilla_description":"CVE-2015-7208 Mozilla: Firefox allows for control characters to be set in cookies (MFSA 2015-137)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7208.json"},{"CVE":"CVE-2015-7210","severity":"critical","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2015:2657"],"bugzilla":"1291585","bugzilla_description":"CVE-2015-7210 Mozilla: Use-after-free in WebRTC when datachannel is used after being destroyed (MFSA 2015-138)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7210.json"},{"CVE":"CVE-2015-7212","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0001","RHSA-2015:2657"],"bugzilla":"1291587","bugzilla_description":"CVE-2015-7212 Mozilla: Integer overflow allocating extremely large textures (MFSA 2015-139)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["thunderbird-0:38.5.0-1.el6_7","thunderbird-0:38.5.0-1.el7_2","thunderbird-0:38.5.0-1.el5_11","firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7212.json"},{"CVE":"CVE-2015-7215","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291588","bugzilla_description":"CVE-2015-7215 Mozilla: Cross-origin information leak through web workers error events (MFSA 2015-140)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7215.json"},{"CVE":"CVE-2015-7211","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291589","bugzilla_description":"CVE-2015-7211 Mozilla: Hash in data: URI is incorrectly parsed (MFSA 2015-141)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7211.json"},{"CVE":"CVE-2015-7218","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291590","bugzilla_description":"CVE-2015-7218 CVE-2015-7219 Mozilla: DOS due to malformed frames in HTTP/2 (MFSA 2015-142)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7218.json"},{"CVE":"CVE-2015-7219","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291590","bugzilla_description":"CVE-2015-7218 CVE-2015-7219 Mozilla: DOS due to malformed frames in HTTP/2 (MFSA 2015-142)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7219.json"},{"CVE":"CVE-2015-7216","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291591","bugzilla_description":"CVE-2015-7216 CVE-2015-7217 Mozilla: Linux file chooser crashes on malformed JPEG2000 and TGA images due to flaws in underlying libraries (MFSA 2015-143)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7216.json"},{"CVE":"CVE-2015-7217","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291591","bugzilla_description":"CVE-2015-7216 CVE-2015-7217 Mozilla: Linux file chooser crashes on malformed JPEG2000 and TGA images due to flaws in underlying libraries (MFSA 2015-143)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7217.json"},{"CVE":"CVE-2015-7203","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291593","bugzilla_description":"CVE-2015-7203 CVE-2015-7220 CVE-2015-7221 Mozilla: Buffer overflows found through code inspection (MFSA 2015-144)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7203.json"},{"CVE":"CVE-2015-7220","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291593","bugzilla_description":"CVE-2015-7203 CVE-2015-7220 CVE-2015-7221 Mozilla: Buffer overflows found through code inspection (MFSA 2015-144)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7220.json"},{"CVE":"CVE-2015-7221","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291593","bugzilla_description":"CVE-2015-7203 CVE-2015-7220 CVE-2015-7221 Mozilla: Buffer overflows found through code inspection (MFSA 2015-144)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7221.json"},{"CVE":"CVE-2015-7205","severity":"important","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0001","RHSA-2015:2657"],"bugzilla":"1291595","bugzilla_description":"CVE-2015-7205 Mozilla: Underflow through code inspection (MFSA 2015-145)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:38.5.0-1.el6_7","thunderbird-0:38.5.0-1.el7_2","thunderbird-0:38.5.0-1.el5_11","firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7205.json"},{"CVE":"CVE-2015-7213","severity":"important","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0001","RHSA-2015:2657"],"bugzilla":"1291596","bugzilla_description":"CVE-2015-7213 Mozilla: Integer overflow in MP4 playback in 64-bit versions (MFSA 2015-146)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["thunderbird-0:38.5.0-1.el6_7","thunderbird-0:38.5.0-1.el7_2","thunderbird-0:38.5.0-1.el5_11","firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7213.json"},{"CVE":"CVE-2015-7222","severity":"important","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2015:2657"],"bugzilla":"1291597","bugzilla_description":"CVE-2015-7222 Mozilla: Integer underflow and buffer overflow processing MP4 metadata in libstagefright (MFSA 2015-147)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-119","affected_packages":["firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7222.json"},{"CVE":"CVE-2015-7223","severity":"critical","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291599","bugzilla_description":"CVE-2015-7223 Mozilla: Privilege escalation vulnerabilities in WebExtension APIs (MFSA 2015-148)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7223.json"},{"CVE":"CVE-2015-7214","severity":"important","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0001","RHSA-2015:2657"],"bugzilla":"1291600","bugzilla_description":"CVE-2015-7214 Mozilla: Cross-site reading attack through data: and view-source: URIs (MFSA 2015-149)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:38.5.0-1.el6_7","thunderbird-0:38.5.0-1.el7_2","thunderbird-0:38.5.0-1.el5_11","firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7214.json"},{"CVE":"CVE-2015-4513","severity":"critical","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277332","bugzilla_description":"CVE-2015-4513 Mozilla: Miscellaneous memory safety hazards (rv:38.4) (MFSA 2015-116)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4513.json"},{"CVE":"CVE-2015-4514","severity":"critical","public_date":"2015-11-04T00:00:00Z","advisories":[],"bugzilla":"1277334","bugzilla_description":"CVE-2015-4514 Mozilla: Miscellaneous memory safety hazards (rv:42.0) (MFSA 2015-116)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4514.json"},{"CVE":"CVE-2015-4515","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":[],"bugzilla":"1277337","bugzilla_description":"CVE-2015-4515 Mozilla: Information disclosure through NTLM authentication (MFSA 2015-117)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4515.json"},{"CVE":"CVE-2015-4518","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":[],"bugzilla":"1277339","bugzilla_description":"CVE-2015-4518 Mozilla: CSP bypass due to permissive Reader mode whitelist (MFSA 2015-118)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4518.json"},{"CVE":"CVE-2015-7187","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":[],"bugzilla":"1277342","bugzilla_description":"CVE-2015-7187 Mozilla: disabling scripts in Add-on SDK panels has no effect (MFSA 2015-121)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7187.json"},{"CVE":"CVE-2015-7188","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:1982"],"bugzilla":"1277343","bugzilla_description":"CVE-2015-7188 Mozilla: Trailing whitespace in IP address hostnames can bypass same-origin policy (MFSA 2015-122)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["firefox-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7188.json"},{"CVE":"CVE-2015-7189","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277344","bugzilla_description":"CVE-2015-7189 Mozilla: Buffer overflow during image interactions in canvas (MFSA 2015-123)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7189.json"},{"CVE":"CVE-2015-7193","severity":"important","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277346","bugzilla_description":"CVE-2015-7193 Mozilla: CORS preflight is bypassed when non-standard Content-Type headers are received (MFSA 2015-127)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7193.json"},{"CVE":"CVE-2015-7194","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:1982"],"bugzilla":"1277347","bugzilla_description":"CVE-2015-7194 Mozilla: Memory corruption in libjar through zip files (MFSA 2015-128)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7194.json"},{"CVE":"CVE-2015-7195","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":[],"bugzilla":"1277348","bugzilla_description":"CVE-2015-7195 Mozilla: Certain escaped characters in host of Location-header are being treated as non-escaped (MFSA 2015-129)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7195.json"},{"CVE":"CVE-2015-7196","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:1982"],"bugzilla":"1277349","bugzilla_description":"CVE-2015-7196 Mozilla: JavaScript garbage collection crash with Java applet (MFSA 2015-130)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7196.json"},{"CVE":"CVE-2015-7198","severity":"critical","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277350","bugzilla_description":"CVE-2015-7198 CVE-2015-7199 CVE-2015-7200 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7198.json"},{"CVE":"CVE-2015-7199","severity":"critical","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277350","bugzilla_description":"CVE-2015-7198 CVE-2015-7199 CVE-2015-7200 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7199.json"},{"CVE":"CVE-2015-7200","severity":"critical","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277350","bugzilla_description":"CVE-2015-7198 CVE-2015-7199 CVE-2015-7200 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7200.json"},{"CVE":"CVE-2015-7197","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277351","bugzilla_description":"CVE-2015-7197 Mozilla: Mixed content WebSocket policy bypass through workers (MFSA 2015-132)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7197.json"},{"CVE":"CVE-2015-7184","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":[],"bugzilla":"1272461","bugzilla_description":"CVE-2015-7184 firefox: cross-origin restriction bypass using Fetch","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7184.json"},{"CVE":"CVE-2015-9274","severity":"low","public_date":"2015-09-29T00:00:00Z","advisories":[],"bugzilla":"1652081","bugzilla_description":"CVE-2015-9274 harfbuzz: DoS due to GPOS and GSUB table mishandling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-4500","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265186","bugzilla_description":"CVE-2015-4500 Mozilla: Miscellaneous memory safety hazards (MFSA 2015-96)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-805","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4500.json"},{"CVE":"CVE-2015-4510","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265190","bugzilla_description":"CVE-2015-4510 Mozilla: Use-after-free with shared workers and IndexedDB (MFSA 2015-104)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4510.json"},{"CVE":"CVE-2015-4509","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265192","bugzilla_description":"CVE-2015-4509 Mozilla: Use-after-free while manipulating HTML media content (MFSA 2015-106)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4509.json"},{"CVE":"CVE-2015-7178","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265201","bugzilla_description":"CVE-2015-7178 CVE-2015-7179 Mozilla: Memory safety errors in libGLES in the ANGLE graphics library (MFSA 2015-113)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-805","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7178.json"},{"CVE":"CVE-2015-7179","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265201","bugzilla_description":"CVE-2015-7178 CVE-2015-7179 Mozilla: Memory safety errors in libGLES in the ANGLE graphics library (MFSA 2015-113)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-805","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7179.json"},{"CVE":"CVE-2015-4503","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265591","bugzilla_description":"CVE-2015-4503 Mozilla: Memory leak in mozTCPSocket to servers (MFSA 2015-97)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4503.json"},{"CVE":"CVE-2015-4504","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265596","bugzilla_description":"CVE-2015-4504 Mozilla: Out of bounds read in QCMS library with ICC V4 profile attributes (MFSA 2015-98)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4504.json"},{"CVE":"CVE-2015-4476","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265603","bugzilla_description":"CVE-2015-4476 Mozilla: Site attribute spoofing on Android by pasting URL with unknown scheme (MFSA 2015-99)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4476.json"},{"CVE":"CVE-2015-4505","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265610","bugzilla_description":"CVE-2015-4505 Mozilla: Arbitrary file manipulation by local user through Mozilla updater (MFSA 2015-100)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4505.json"},{"CVE":"CVE-2015-4506","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1834"],"bugzilla":"1265617","bugzilla_description":"CVE-2015-4506 Mozilla: Buffer overflow in libvpx while parsing vp9 format video (MFSA 2015-101)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["firefox-0:38.3.0-2.el5_11","firefox-0:38.3.0-2.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4506.json"},{"CVE":"CVE-2015-4507","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265621","bugzilla_description":"CVE-2015-4507 Mozilla: Crash when using debugger with SavedStacks in JavaScript (MFSA 2015-102)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4507.json"},{"CVE":"CVE-2015-4508","severity":"low","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265624","bugzilla_description":"CVE-2015-4508 Mozilla: URL spoofing in reader mode (MFSA 2015-103)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4508.json"},{"CVE":"CVE-2015-4511","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1834"],"bugzilla":"1265630","bugzilla_description":"CVE-2015-4511 Mozilla: Buffer overflow while decoding WebM video (MFSA 2015-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["firefox-0:38.3.0-2.el5_11","firefox-0:38.3.0-2.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4511.json"},{"CVE":"CVE-2015-4512","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265769","bugzilla_description":"CVE-2015-4512 Mozilla: Out-of-bounds read during 2D canvas display on Linux 16-bit color depth systems (MFSA 2015-107)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4512.json"},{"CVE":"CVE-2015-4502","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265771","bugzilla_description":"CVE-2015-4502 Mozilla: Scripted proxies can access inner window (MFSA 2015-108)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4502.json"},{"CVE":"CVE-2015-4516","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265775","bugzilla_description":"CVE-2015-4516 Mozilla: JavaScript immutable property enforcement can be bypassed (MFSA 2015-109)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4516.json"},{"CVE":"CVE-2015-4519","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265778","bugzilla_description":"CVE-2015-4519 Mozilla: Dragging and dropping images exposes final URL after redirects (MFSA 2015-110)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4519.json"},{"CVE":"CVE-2015-4520","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265781","bugzilla_description":"CVE-2015-4520 Mozilla: Errors in the handling of CORS preflight request headers (MFSA 2015-111)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-284","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4520.json"},{"CVE":"CVE-2015-4517","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4517.json"},{"CVE":"CVE-2015-4521","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4521.json"},{"CVE":"CVE-2015-4522","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4522.json"},{"CVE":"CVE-2015-7174","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7174.json"},{"CVE":"CVE-2015-7175","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7175.json"},{"CVE":"CVE-2015-7176","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7176.json"},{"CVE":"CVE-2015-7177","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7177.json"},{"CVE":"CVE-2015-7180","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7180.json"},{"CVE":"CVE-2015-7327","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265785","bugzilla_description":"CVE-2015-7327 Mozilla: Information disclosure via the High Resolution Time API (MFSA 2015-114)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7327.json"},{"CVE":"CVE-2015-4501","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1266098","bugzilla_description":"CVE-2015-4501 Mozilla: Miscellaneous memory safety hazards (MFSA 2015-96)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4501.json"},{"CVE":"CVE-2015-4497","severity":"critical","public_date":"2015-08-27T00:00:00Z","advisories":["RHSA-2015:1693"],"bugzilla":"1257276","bugzilla_description":"CVE-2015-4497 Mozilla: Use-after-free when resizing canvas element during restyling (MFSA 2015-94)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.2.1-1.el6_7","firefox-0:38.2.1-1.el5_11","firefox-0:38.2.1-1.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4497.json"},{"CVE":"CVE-2015-4498","severity":"important","public_date":"2015-08-27T00:00:00Z","advisories":["RHSA-2015:1693"],"bugzilla":"1257278","bugzilla_description":"CVE-2015-4498 Mozilla: Add-on notification bypass through data URLs (MFSA 2015-95)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.1-1.el6_7","firefox-0:38.2.1-1.el5_11","firefox-0:38.2.1-1.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4498.json"},{"CVE":"CVE-2015-6525","severity":"moderate","public_date":"2015-08-24T00:00:00Z","advisories":[],"bugzilla":"1256797","bugzilla_description":"CVE-2015-6525 libevent: multiple integer overflows in the evbuffer APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6525.json"},{"CVE":"CVE-2015-4496","severity":"critical","public_date":"2015-08-12T00:00:00Z","advisories":["RHSA-2015:0988"],"bugzilla":"1253550","bugzilla_description":"CVE-2015-4496 Mozilla: Integer overflows in libstagefright while processing MP4 video metadata (MFSA 2015-93)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4496.json"},{"CVE":"CVE-2015-4473","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1586"],"bugzilla":"1252271","bugzilla_description":"CVE-2015-4473 Mozilla: Miscellaneous memory safety hazards (rv:38.2) (MFSA 2015-79)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4473.json"},{"CVE":"CVE-2015-4474","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252273","bugzilla_description":"CVE-2015-4474 Mozilla: Miscellaneous memory safety hazards (rv:40.0) (MFSA 2015-79)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4474.json"},{"CVE":"CVE-2015-4475","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252276","bugzilla_description":"CVE-2015-4475 Mozilla: Out-of-bounds read with malformed MP3 file (MFSA 2015-80)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4475.json"},{"CVE":"CVE-2015-4477","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252277","bugzilla_description":"CVE-2015-4477 Mozilla: Use-after-free in MediaStream playback (MFSA 2015-81)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4477.json"},{"CVE":"CVE-2015-4478","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252282","bugzilla_description":"CVE-2015-4478 Mozilla: Redefinition of non-configurable JavaScript object properties (MFSA 2015-82)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4478.json"},{"CVE":"CVE-2015-4479","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252285","bugzilla_description":"CVE-2015-4479 CVE-2015-4480 CVE-2015-4493 Mozilla: Overflow issues in libstagefright (MFSA 2015-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-190|CWE-119)","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4479.json"},{"CVE":"CVE-2015-4480","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252285","bugzilla_description":"CVE-2015-4479 CVE-2015-4480 CVE-2015-4493 Mozilla: Overflow issues in libstagefright (MFSA 2015-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-190|CWE-119)","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4480.json"},{"CVE":"CVE-2015-4493","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252285","bugzilla_description":"CVE-2015-4479 CVE-2015-4480 CVE-2015-4493 Mozilla: Overflow issues in libstagefright (MFSA 2015-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-190|CWE-119)","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4493.json"},{"CVE":"CVE-2015-4483","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252288","bugzilla_description":"CVE-2015-4483 Mozilla: Feed: protocol with POST bypasses mixed content protections (MFSA 2015-86)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4483.json"},{"CVE":"CVE-2015-4484","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252289","bugzilla_description":"CVE-2015-4484 Mozilla: Crash when using shared memory in JavaScript (MFSA 2015-87)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4484.json"},{"CVE":"CVE-2015-4491","severity":"important","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1694","RHSA-2015:1586"],"bugzilla":"1252290","bugzilla_description":"CVE-2015-4491 Mozilla: Heap overflow in gdk-pixbuf when scaling bitmap images (MFSA 2015-88)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","gdk-pixbuf2-0:2.24.1-6.el6_7","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","gdk-pixbuf2-0:2.28.2-5.el7_1","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4491.json"},{"CVE":"CVE-2015-4485","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252292","bugzilla_description":"CVE-2015-4485 CVE-2015-4486 Mozilla: Buffer overflows on Libvpx when decoding WebM video (MFSA 2015-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4485.json"},{"CVE":"CVE-2015-4486","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252292","bugzilla_description":"CVE-2015-4485 CVE-2015-4486 Mozilla: Buffer overflows on Libvpx when decoding WebM video (MFSA 2015-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4486.json"},{"CVE":"CVE-2015-4487","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1586"],"bugzilla":"1252293","bugzilla_description":"CVE-2015-4487 CVE-2015-4488 CVE-2015-4489 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4487.json"},{"CVE":"CVE-2015-4488","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1586"],"bugzilla":"1252293","bugzilla_description":"CVE-2015-4487 CVE-2015-4488 CVE-2015-4489 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4488.json"},{"CVE":"CVE-2015-4489","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1586"],"bugzilla":"1252293","bugzilla_description":"CVE-2015-4487 CVE-2015-4488 CVE-2015-4489 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4489.json"},{"CVE":"CVE-2015-4490","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252294","bugzilla_description":"CVE-2015-4490 Mozilla: Mozilla Content Security Policy allows for asterisk wildcards in violation of CSP specification (MFSA 2015-91)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4490.json"},{"CVE":"CVE-2015-4492","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252295","bugzilla_description":"CVE-2015-4492 Mozilla: Use-after-free in XMLHttpRequest with shared workers (MFSA 2015-92)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4492.json"},{"CVE":"CVE-2015-4495","severity":"important","public_date":"2015-08-06T00:00:00Z","advisories":["RHSA-2015:1581"],"bugzilla":"1251318","bugzilla_description":"CVE-2015-4495 Mozilla: Same origin violation and local file stealing via PDF reader (MFSA 2015-78)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:38.1.1-1.el7_1","firefox-0:38.1.1-1.el5_11","firefox-0:38.1.1-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4495.json"},{"CVE":"CVE-2015-2724","severity":"important","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236947","bugzilla_description":"CVE-2015-2724 CVE-2015-2725 Mozilla: Miscellaneous memory safety hazards (rv:31.8 / rv:38.1) (MFSA 2015-59)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2724.json"},{"CVE":"CVE-2015-2725","severity":"important","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236947","bugzilla_description":"CVE-2015-2724 CVE-2015-2725 Mozilla: Miscellaneous memory safety hazards (rv:31.8 / rv:38.1) (MFSA 2015-59)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2725.json"},{"CVE":"CVE-2015-2726","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":[],"bugzilla":"1236948","bugzilla_description":"CVE-2015-2726 Mozilla: Miscellaneous memory safety hazards (rv:38.1) (MFSA 2015-59)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2726.json"},{"CVE":"CVE-2015-2727","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236950","bugzilla_description":"CVE-2015-2727 Mozilla: Local files or privileged URLs in pages can be opened into new tabs (MFSA 2015-60)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2727.json"},{"CVE":"CVE-2015-2728","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236951","bugzilla_description":"CVE-2015-2728 Mozilla: Type confusion in Indexed Database Manager (MFSA 2015-61)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2728.json"},{"CVE":"CVE-2015-2729","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236952","bugzilla_description":"CVE-2015-2729 Mozilla: Out-of-bound read while computing an oscillator rendering range in Web Audio (MFSA 2015-62)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2729.json"},{"CVE":"CVE-2015-2731","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236953","bugzilla_description":"CVE-2015-2731 Mozilla: Use-after-free in Content Policy due to microtask execution error (MFSA 2015-63)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2731.json"},{"CVE":"CVE-2015-2722","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236955","bugzilla_description":"CVE-2015-2722 CVE-2015-2733 Mozilla: Use-after-free in workers while using XMLHttpRequest (MFSA 2015-65)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2722.json"},{"CVE":"CVE-2015-2733","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236955","bugzilla_description":"CVE-2015-2722 CVE-2015-2733 Mozilla: Use-after-free in workers while using XMLHttpRequest (MFSA 2015-65)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2733.json"},{"CVE":"CVE-2015-2734","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2734.json"},{"CVE":"CVE-2015-2735","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2735.json"},{"CVE":"CVE-2015-2736","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2736.json"},{"CVE":"CVE-2015-2737","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2737.json"},{"CVE":"CVE-2015-2738","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2738.json"},{"CVE":"CVE-2015-2739","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2739.json"},{"CVE":"CVE-2015-2740","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2740.json"},{"CVE":"CVE-2015-2741","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236963","bugzilla_description":"CVE-2015-2741 Mozilla: Key pinning is ignored when overridable errors are encountered (MFSA 2015-67)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2741.json"},{"CVE":"CVE-2015-2743","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236964","bugzilla_description":"CVE-2015-2743 Mozilla: Privilege escalation through internal workers (MFSA 2015-69)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2743.json"},{"CVE":"CVE-2015-2708","severity":"critical","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988","RHSA-2015:1012"],"bugzilla":"1220597","bugzilla_description":"CVE-2015-2708 Mozilla: Miscellaneous memory safety hazards (rv:31.7) (MFSA 2015-46)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.7.0-1.el6_6","firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1","thunderbird-0:31.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2708.json"},{"CVE":"CVE-2015-2709","severity":"critical","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220599","bugzilla_description":"CVE-2015-2709 Mozilla: Miscellaneous memory safety hazards (rv:38.0) (MFSA 2015-46)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2709.json"},{"CVE":"CVE-2015-0797","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988"],"bugzilla":"1220600","bugzilla_description":"CVE-2015-0797 Mozilla: Buffer overflow parsing H.264 video with Linux Gstreamer (MFSA 2015-47)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0797.json"},{"CVE":"CVE-2015-2710","severity":"critical","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988","RHSA-2015:1012"],"bugzilla":"1220601","bugzilla_description":"CVE-2015-2710 Mozilla: Buffer overflow with SVG content and CSS (MFSA 2015-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["thunderbird-0:31.7.0-1.el6_6","firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1","thunderbird-0:31.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2710.json"},{"CVE":"CVE-2015-2711","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220603","bugzilla_description":"CVE-2015-2711 Mozilla: <meta name=\"referrer\"> is ignored for navigations from the context menu and via a middle-click (MFSA 2015-49)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2711.json"},{"CVE":"CVE-2015-2712","severity":"critical","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220604","bugzilla_description":"CVE-2015-2712 Mozilla: Out-of-bounds read and write in asm.js validation (MFSA 2015-50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2712.json"},{"CVE":"CVE-2015-2713","severity":"critical","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988","RHSA-2015:1012"],"bugzilla":"1220605","bugzilla_description":"CVE-2015-2713 Mozilla: Use-after-free during text processing with vertical text enabled (MFSA 2015-51)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:31.7.0-1.el6_6","firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1","thunderbird-0:31.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2713.json"},{"CVE":"CVE-2015-2715","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220606","bugzilla_description":"CVE-2015-2715 Mozilla: Use-after-free due to Media Decoder Thread creation during shutdown (MFSA 2015-53)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2715.json"},{"CVE":"CVE-2015-2716","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988","RHBA-2020:1539","RHSA-2020:1011","RHSA-2015:1012","RHSA-2020:2508","RHBA-2020:1540"],"bugzilla":"1220607","bugzilla_description":"CVE-2015-2716 expat: Integer overflow leading to buffer overflow in XML_GetBuffer()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","expat-0:2.1.0-11.el7_7","thunderbird-0:31.7.0-1.el6_6","firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1","expat-0:2.1.0-11.el7","thunderbird-0:31.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2716.json"},{"CVE":"CVE-2015-2717","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220608","bugzilla_description":"CVE-2015-2717 Mozilla: Buffer overflow and out-of-bounds read while parsing MP4 video metadata (MFSA 2015-55)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2717.json"},{"CVE":"CVE-2015-2718","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220609","bugzilla_description":"CVE-2015-2718 Mozilla: Untrusted site hosting trusted page can intercept webchannel responses (MFSA 2015-56)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2718.json"},{"CVE":"CVE-2015-2706","severity":"critical","public_date":"2015-04-20T00:00:00Z","advisories":[],"bugzilla":"1213935","bugzilla_description":"CVE-2015-2706 Mozilla: Memory corruption during failed plugin initialization (MFSA 2015-45)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2706.json"},{"CVE":"CVE-2015-0799","severity":"important","public_date":"2015-04-03T00:00:00Z","advisories":[],"bugzilla":"1208731","bugzilla_description":"CVE-2015-0799 Mozilla: Certificate verification bypass through the HTTP/2 Alt-Svc header (MFSA 2015-44)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0799.json"},{"CVE":"CVE-2015-0815","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:0766","RHSA-2015:0771"],"bugzilla":"1207068","bugzilla_description":"CVE-2015-0815 Mozilla: Miscellaneous memory safety hazards (rv:31.6) (MFSA 2015-30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["firefox-0:31.6.0-2.el5_11","thunderbird-0:31.6.0-1.ael7b_1","firefox-0:31.6.0-2.ael7b_1","firefox-0:31.6.0-2.el6_6","thunderbird-0:31.6.0-1.el6_6","thunderbird-0:31.6.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0815.json"},{"CVE":"CVE-2015-0814","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207070","bugzilla_description":"CVE-2015-0814 Mozilla: Miscellaneous memory safety hazards (rv:37.0) (MFSA 2015-30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0814.json"},{"CVE":"CVE-2015-0812","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207071","bugzilla_description":"CVE-2015-0812 Mozilla: Add-on lightweight theme installation approval bypassed through MITM attack (MFSA 2015-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0812.json"},{"CVE":"CVE-2015-0816","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:0766","RHSA-2015:0771"],"bugzilla":"1207072","bugzilla_description":"CVE-2015-0816 Mozilla: resource:// documents can load privileged pages (MFSA 2015-33)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:31.6.0-2.el5_11","thunderbird-0:31.6.0-1.ael7b_1","firefox-0:31.6.0-2.ael7b_1","firefox-0:31.6.0-2.el6_6","thunderbird-0:31.6.0-1.el6_6","thunderbird-0:31.6.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0816.json"},{"CVE":"CVE-2015-0811","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207073","bugzilla_description":"CVE-2015-0811 Mozilla: Out of bounds read in QCMS library (MFSA 2015-34)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0811.json"},{"CVE":"CVE-2015-0808","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207075","bugzilla_description":"CVE-2015-0808 Mozilla: Incorrect memory management for simple-type arrays in WebRTC (MFSA 2015-36)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0808.json"},{"CVE":"CVE-2015-0807","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:0766","RHSA-2015:0771"],"bugzilla":"1207076","bugzilla_description":"CVE-2015-0807 Mozilla: CORS requests should not follow 30x redirections after preflight (MFSA 2015-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-352","affected_packages":["firefox-0:31.6.0-2.el5_11","thunderbird-0:31.6.0-1.ael7b_1","firefox-0:31.6.0-2.ael7b_1","firefox-0:31.6.0-2.el6_6","thunderbird-0:31.6.0-1.el6_6","thunderbird-0:31.6.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0807.json"},{"CVE":"CVE-2015-0805","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207078","bugzilla_description":"CVE-2015-0805 CVE-2015-0806 Mozilla: Memory corruption crashes in Off Main Thread Compositing (MFSA 2015-38)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0805.json"},{"CVE":"CVE-2015-0806","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207078","bugzilla_description":"CVE-2015-0805 CVE-2015-0806 Mozilla: Memory corruption crashes in Off Main Thread Compositing (MFSA 2015-38)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0806.json"},{"CVE":"CVE-2015-0803","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207081","bugzilla_description":"CVE-2015-0803 CVE-2015-0804 Mozilla: Use-after-free due to type confusion flaws (MFSA 2015-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0803.json"},{"CVE":"CVE-2015-0804","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207081","bugzilla_description":"CVE-2015-0803 CVE-2015-0804 Mozilla: Use-after-free due to type confusion flaws (MFSA 2015-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0804.json"},{"CVE":"CVE-2015-0801","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:0766","RHSA-2015:0771"],"bugzilla":"1207084","bugzilla_description":"CVE-2015-0801 Mozilla: Same-origin bypass through anchor navigation (MFSA 2015-40)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-358","affected_packages":["firefox-0:31.6.0-2.el5_11","thunderbird-0:31.6.0-1.ael7b_1","firefox-0:31.6.0-2.ael7b_1","firefox-0:31.6.0-2.el6_6","thunderbird-0:31.6.0-1.el6_6","thunderbird-0:31.6.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0801.json"},{"CVE":"CVE-2015-0802","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207086","bugzilla_description":"CVE-2015-0802 Mozilla: Windows can retain access to privileged content on navigation to unprivileged pages (MFSA 2015-42)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0802.json"},{"CVE":"CVE-2015-0813","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:0766","RHSA-2015:0771"],"bugzilla":"1207088","bugzilla_description":"CVE-2015-0813 Mozilla: Use-after-free when using the Fluendo MP3 GStreamer plugin (MFSA 2015-31)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:31.6.0-2.el5_11","thunderbird-0:31.6.0-1.ael7b_1","firefox-0:31.6.0-2.ael7b_1","firefox-0:31.6.0-2.el6_6","thunderbird-0:31.6.0-1.el6_6","thunderbird-0:31.6.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0813.json"},{"CVE":"CVE-2015-0817","severity":"critical","public_date":"2015-03-21T00:00:00Z","advisories":["RHSA-2015:0718"],"bugzilla":"1204362","bugzilla_description":"CVE-2015-0817 Mozilla: Code execution through incorrect JavaScript bounds checking elimination (MFSA 2015-29)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:31.5.3-3.ael7b_1","firefox-0:31.5.3-1.el5_11","firefox-0:31.5.3-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0817.json"},{"CVE":"CVE-2015-0818","severity":"critical","public_date":"2015-03-21T00:00:00Z","advisories":["RHSA-2015:0718"],"bugzilla":"1204363","bugzilla_description":"CVE-2015-0818 Mozilla: Privilege escalation through SVG navigation (MFSA 2015-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:31.5.3-3.ael7b_1","firefox-0:31.5.3-1.el5_11","firefox-0:31.5.3-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0818.json"},{"CVE":"CVE-2012-6702","severity":"moderate","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1319731","bugzilla_description":"CVE-2012-6702 expat: Using XML_Parse before rand() results into non-random output","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6702.json"},{"CVE":"CVE-2015-0836","severity":"critical","public_date":"2015-02-24T00:00:00Z","advisories":["RHSA-2015:0642","RHSA-2015:0266","RHSA-2015:0265","RHSA-2015:0629"],"bugzilla":"1195605","bugzilla_description":"CVE-2015-0836 Mozilla: Miscellaneous memory safety hazards (rv:31.5) (MFSA 2015-11)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:31.5.0-2.ael7b_1","firefox-0:31.5.0-1.el5_11","firefox-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-1.el5_11","thunderbird-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0836.json"},{"CVE":"CVE-2015-0835","severity":"critical","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195609","bugzilla_description":"CVE-2015-0835 Mozilla: Miscellaneous memory safety hazards (rv:36.0) (MFSA 2015-11)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0835.json"},{"CVE":"CVE-2015-0832","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195610","bugzilla_description":"CVE-2015-0832 Mozilla: Appended period to hostnames can bypass HPKP and HSTS protections (MFSA 2015-13)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0832.json"},{"CVE":"CVE-2015-0830","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195613","bugzilla_description":"CVE-2015-0830 Mozilla: Malicious WebGL content crash when writing strings (MFSA 2015-14)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0830.json"},{"CVE":"CVE-2015-0834","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195616","bugzilla_description":"CVE-2015-0834 Mozilla: TLS TURN and STUN connections silently fail to simple TCP connections (MFSA 2015-15)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-319","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0834.json"},{"CVE":"CVE-2015-0831","severity":"critical","public_date":"2015-02-24T00:00:00Z","advisories":["RHSA-2015:0642","RHSA-2015:0266","RHSA-2015:0265","RHSA-2015:0629"],"bugzilla":"1195619","bugzilla_description":"CVE-2015-0831 Mozilla: Use-after-free in IndexedDB (MFSA 2015-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:31.5.0-2.ael7b_1","firefox-0:31.5.0-1.el5_11","firefox-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-1.el5_11","thunderbird-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0831.json"},{"CVE":"CVE-2015-0829","severity":"critical","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195620","bugzilla_description":"CVE-2015-0829 Mozilla: Buffer overflow in libstagefright during MP4 video playback (MFSA 2015-17)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0829.json"},{"CVE":"CVE-2015-0828","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195621","bugzilla_description":"CVE-2015-0828 Mozilla: Double-free when using non-default memory allocators with a zero-length XHR (MFSA 2015-18)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0828.json"},{"CVE":"CVE-2015-0827","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":["RHSA-2015:0642","RHSA-2015:0266","RHSA-2015:0265","RHSA-2015:0629"],"bugzilla":"1195623","bugzilla_description":"CVE-2015-0827 Mozilla: Out-of-bounds read and write while rendering SVG content (MFSA 2015-19)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:31.5.0-2.ael7b_1","firefox-0:31.5.0-1.el5_11","firefox-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-1.el5_11","thunderbird-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0827.json"},{"CVE":"CVE-2015-0826","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195629","bugzilla_description":"CVE-2015-0826 Mozilla: Buffer overflow during CSS restyling (MFSA 2015-20)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0826.json"},{"CVE":"CVE-2015-0825","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195631","bugzilla_description":"CVE-2015-0825 Mozilla: Buffer underflow during MP3 playback (MFSA 2015-21)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0825.json"},{"CVE":"CVE-2015-0824","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195633","bugzilla_description":"CVE-2015-0824 Mozilla: Crash using DrawTarget in Cairo graphics library (MFSA 2015-22)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0824.json"},{"CVE":"CVE-2015-0823","severity":"low","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195636","bugzilla_description":"CVE-2015-0823 Mozilla: Use-after-free in Developer Console date with OpenType Sanitiser (MFSA 2015-23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0823.json"},{"CVE":"CVE-2015-0822","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":["RHSA-2015:0642","RHSA-2015:0266","RHSA-2015:0265","RHSA-2015:0629"],"bugzilla":"1195638","bugzilla_description":"CVE-2015-0822 Mozilla: Reading of local files through manipulation of form autocomplete (MFSA 2015-24)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["firefox-0:31.5.0-2.ael7b_1","firefox-0:31.5.0-1.el5_11","firefox-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-1.el5_11","thunderbird-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0822.json"},{"CVE":"CVE-2015-0821","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195639","bugzilla_description":"CVE-2015-0821 Mozilla: Local files or privileged URLs in pages can be opened into new tabs (MFSA 2015-25)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0821.json"},{"CVE":"CVE-2015-0819","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195640","bugzilla_description":"CVE-2015-0819 Mozilla: UI Tour whitelisted sites in background tab can spoof foreground tabs (MFA 2015-26)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0819.json"},{"CVE":"CVE-2014-8635","severity":"critical","public_date":"2015-01-15T00:00:00Z","advisories":[],"bugzilla":"1180963","bugzilla_description":"CVE-2014-8635 Mozilla: Miscellaneous memory safety hazards (rv:35.0) (MFSA 2015-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8635.json"},{"CVE":"CVE-2014-8637","severity":"moderate","public_date":"2015-01-15T00:00:00Z","advisories":[],"bugzilla":"1180964","bugzilla_description":"CVE-2014-8637 Mozilla: Uninitialized memory use during bitmap rendering (MFSA 2015-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8637.json"},{"CVE":"CVE-2014-8640","severity":"low","public_date":"2015-01-15T00:00:00Z","advisories":[],"bugzilla":"1180970","bugzilla_description":"CVE-2014-8640 Mozilla: Read of uninitialized memory in Web Audio (MFSA 2015-05)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8640.json"},{"CVE":"CVE-2014-8642","severity":"moderate","public_date":"2015-01-15T00:00:00Z","advisories":[],"bugzilla":"1180974","bugzilla_description":"CVE-2014-8642 Mozilla: Delegated OCSP responder certificates failure with id-pkix-ocsp-nocheck extension (MFSA 2015-08)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8642.json"},{"CVE":"CVE-2014-8634","severity":"critical","public_date":"2015-01-13T00:00:00Z","advisories":["RHSA-2015:0047","RHSA-2015:0046"],"bugzilla":"1180962","bugzilla_description":"CVE-2014-8634 Mozilla: Miscellaneous memory safety hazards (rv:31.4) (MFSA 2015-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["thunderbird-0:31.4.0-1.el6_6","firefox-0:31.4.0-1.el6_6","thunderbird-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8634.json"},{"CVE":"CVE-2014-8638","severity":"moderate","public_date":"2015-01-13T00:00:00Z","advisories":["RHSA-2015:0047","RHSA-2015:0046"],"bugzilla":"1180966","bugzilla_description":"CVE-2014-8638 Mozilla: sendBeacon requests lack an Origin header (MFSA 2015-03)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-352","affected_packages":["thunderbird-0:31.4.0-1.el6_6","firefox-0:31.4.0-1.el6_6","thunderbird-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8638.json"},{"CVE":"CVE-2014-8639","severity":"moderate","public_date":"2015-01-13T00:00:00Z","advisories":["RHSA-2015:0047","RHSA-2015:0046"],"bugzilla":"1180967","bugzilla_description":"CVE-2014-8639 Mozilla: Cookie injection through Proxy Authenticate responses (MFSA 2015-04)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-88","affected_packages":["thunderbird-0:31.4.0-1.el6_6","firefox-0:31.4.0-1.el6_6","thunderbird-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8639.json"},{"CVE":"CVE-2014-8641","severity":"important","public_date":"2015-01-13T00:00:00Z","advisories":["RHSA-2015:0046"],"bugzilla":"1180973","bugzilla_description":"CVE-2014-8641 Mozilla: Read-after-free in WebRTC (MFSA 2015-06)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:31.4.0-1.el6_6","firefox-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8641.json"},{"CVE":"CVE-2014-6272","severity":"moderate","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1144646","bugzilla_description":"CVE-2014-6272 libevent: potential heap overflow in buffer/bufferevent APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6272.json"},{"CVE":"CVE-2014-8631","severity":"moderate","public_date":"2014-12-03T00:00:00Z","advisories":[],"bugzilla":"1169211","bugzilla_description":"CVE-2014-8631 CVE-2014-8632 Mozilla: Privileged access to security wrapped protected objects (MFSA 2014-91)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8631.json"},{"CVE":"CVE-2014-8632","severity":"moderate","public_date":"2014-12-03T00:00:00Z","advisories":[],"bugzilla":"1169211","bugzilla_description":"CVE-2014-8631 CVE-2014-8632 Mozilla: Privileged access to security wrapped protected objects (MFSA 2014-91)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8632.json"},{"CVE":"CVE-2014-1587","severity":"critical","public_date":"2014-12-02T00:00:00Z","advisories":["RHSA-2014:1924","RHSA-2014:1919"],"bugzilla":"1169201","bugzilla_description":"CVE-2014-1587 Mozilla: Miscellaneous memory safety hazards (rv:31.3) (MFSA 2014-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["firefox-0:31.3.0-3.el7_0","thunderbird-0:31.3.0-1.el5_11","firefox-0:31.3.0-4.el5_11","thunderbird-0:31.3.0-1.el6_6","firefox-0:31.3.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1587.json"},{"CVE":"CVE-2014-1588","severity":"critical","public_date":"2014-12-02T00:00:00Z","advisories":[],"bugzilla":"1169204","bugzilla_description":"CVE-2014-1588 Mozilla: Miscellaneous memory safety hazards (rv:34.0) (MFSA 2014-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1588.json"},{"CVE":"CVE-2014-1589","severity":"moderate","public_date":"2014-12-02T00:00:00Z","advisories":[],"bugzilla":"1169205","bugzilla_description":"CVE-2014-1589 Mozilla: XBL bindings accessible via improper CSS declarations (MFSA 2014-84)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1589.json"},{"CVE":"CVE-2014-1590","severity":"low","public_date":"2014-12-02T00:00:00Z","advisories":["RHSA-2014:1924","RHSA-2014:1919"],"bugzilla":"1169206","bugzilla_description":"CVE-2014-1590 Mozilla: XMLHttpRequest crashes with some input streams (MFSA 2014-85)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["firefox-0:31.3.0-3.el7_0","thunderbird-0:31.3.0-1.el5_11","firefox-0:31.3.0-4.el5_11","thunderbird-0:31.3.0-1.el6_6","firefox-0:31.3.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1590.json"},{"CVE":"CVE-2014-1591","severity":"moderate","public_date":"2014-12-02T00:00:00Z","advisories":[],"bugzilla":"1169207","bugzilla_description":"CVE-2014-1591 Mozilla: CSP leaks redirect data via violation reports (MFSA 2014-86)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1591.json"},{"CVE":"CVE-2014-1592","severity":"critical","public_date":"2014-12-02T00:00:00Z","advisories":["RHSA-2014:1924","RHSA-2014:1919"],"bugzilla":"1169208","bugzilla_description":"CVE-2014-1592 Mozilla: Use-after-free during HTML5 parsing (MFSA 2014-87)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:31.3.0-3.el7_0","thunderbird-0:31.3.0-1.el5_11","firefox-0:31.3.0-4.el5_11","thunderbird-0:31.3.0-1.el6_6","firefox-0:31.3.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1592.json"},{"CVE":"CVE-2014-1593","severity":"critical","public_date":"2014-12-02T00:00:00Z","advisories":["RHSA-2014:1924","RHSA-2014:1919"],"bugzilla":"1169209","bugzilla_description":"CVE-2014-1593 Mozilla: Buffer overflow while parsing media content (MFSA 2014-88)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["firefox-0:31.3.0-3.el7_0","thunderbird-0:31.3.0-1.el5_11","firefox-0:31.3.0-4.el5_11","thunderbird-0:31.3.0-1.el6_6","firefox-0:31.3.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1593.json"},{"CVE":"CVE-2014-1594","severity":"moderate","public_date":"2014-12-02T00:00:00Z","advisories":["RHSA-2014:1924","RHSA-2014:1919"],"bugzilla":"1169210","bugzilla_description":"CVE-2014-1594 Mozilla: Bad casting from the BasicThebesLayer to BasicContainerLayer (MFSA 2014-89)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-749","affected_packages":["firefox-0:31.3.0-3.el7_0","thunderbird-0:31.3.0-1.el5_11","firefox-0:31.3.0-4.el5_11","thunderbird-0:31.3.0-1.el6_6","firefox-0:31.3.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1594.json"},{"CVE":"CVE-2014-1574","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1647","RHSA-2014:1635"],"bugzilla":"1152356","bugzilla_description":"CVE-2014-1574 Mozilla: Miscellaneous memory safety hazards (rv:31.2) (MFSA 2014-74)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:31.2.0-3.el7_0","thunderbird-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11","thunderbird-0:31.2.0-2.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1574.json"},{"CVE":"CVE-2014-1575","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152357","bugzilla_description":"CVE-2014-1575 Mozilla: Miscellaneous memory safety hazards (rv:33.0) (MFSA 2014-74)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1575.json"},{"CVE":"CVE-2014-1576","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1635"],"bugzilla":"1152358","bugzilla_description":"CVE-2014-1576 Mozilla: Buffer overflow during CSS manipulation (MFSA 2014-75)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:31.2.0-3.el7_0","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1576.json"},{"CVE":"CVE-2014-1577","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1647","RHSA-2014:1635"],"bugzilla":"1152359","bugzilla_description":"CVE-2014-1577 Mozilla: Web Audio memory corruption issues with custom waveforms (MFSA 2014-76)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:31.2.0-3.el7_0","thunderbird-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11","thunderbird-0:31.2.0-2.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1577.json"},{"CVE":"CVE-2014-1578","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1647","RHSA-2014:1635"],"bugzilla":"1152361","bugzilla_description":"CVE-2014-1578 Mozilla: Out-of-bounds write with WebM video (MFSA 2014-77)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["firefox-0:31.2.0-3.el7_0","thunderbird-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11","thunderbird-0:31.2.0-2.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1578.json"},{"CVE":"CVE-2014-1580","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152362","bugzilla_description":"CVE-2014-1580 Mozilla: Further uninitialized memory use during GIF rendering (MFSA 2014-78)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1580.json"},{"CVE":"CVE-2014-1581","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1647","RHSA-2014:1635"],"bugzilla":"1152363","bugzilla_description":"CVE-2014-1581 Mozilla: Use-after-free interacting with text directionality (MFSA 2014-79)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:31.2.0-3.el7_0","thunderbird-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11","thunderbird-0:31.2.0-2.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1581.json"},{"CVE":"CVE-2014-1582","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152364","bugzilla_description":"CVE-2014-1582 CVE-2014-1584 Mozilla: Key pinning bypasses (MFSA 2014-80)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1582.json"},{"CVE":"CVE-2014-1584","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152364","bugzilla_description":"CVE-2014-1582 CVE-2014-1584 Mozilla: Key pinning bypasses (MFSA 2014-80)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1584.json"},{"CVE":"CVE-2014-1585","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152366","bugzilla_description":"CVE-2014-1585 CVE-2014-1586 Mozilla: Inconsistent video sharing within iframe (MFSA 2014-81)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1585.json"},{"CVE":"CVE-2014-1586","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152366","bugzilla_description":"CVE-2014-1585 CVE-2014-1586 Mozilla: Inconsistent video sharing within iframe (MFSA 2014-81)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1586.json"},{"CVE":"CVE-2014-1583","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1635"],"bugzilla":"1152683","bugzilla_description":"CVE-2014-1583 Mozilla: Accessing cross-origin objects via the Alarms API (MFSA 2014-82)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:31.2.0-3.el7_0","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1583.json"},{"CVE":"CVE-2014-9766","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1311882","bugzilla_description":"CVE-2014-9766 pixman: integer overflow in create_bits function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9766.json"},{"CVE":"CVE-2014-1562","severity":"critical","public_date":"2014-09-03T00:00:00Z","advisories":["RHSA-2014:1145","RHSA-2014:1144"],"bugzilla":"1135862","bugzilla_description":"CVE-2014-1562 Mozilla: Miscellaneous memory safety hazards (rv:rv:24.8) (MFSA 2014-67)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.8.0-1.el6_5","firefox-0:24.8.0-1.el7_0","thunderbird-0:24.8.0-1.el6_5","thunderbird-0:24.8.0-1.el5_10","firefox-0:24.8.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1562.json"},{"CVE":"CVE-2014-1553","severity":"critical","public_date":"2014-09-03T00:00:00Z","advisories":[],"bugzilla":"1135863","bugzilla_description":"CVE-2014-1553 CVE-2014-1554 Mozilla: Miscellaneous memory safety hazards (rv:32.0 / rv:31.1) (MFSA 2014-67)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1553.json"},{"CVE":"CVE-2014-1554","severity":"critical","public_date":"2014-09-03T00:00:00Z","advisories":[],"bugzilla":"1135863","bugzilla_description":"CVE-2014-1553 CVE-2014-1554 Mozilla: Miscellaneous memory safety hazards (rv:32.0 / rv:31.1) (MFSA 2014-67)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1554.json"},{"CVE":"CVE-2014-1563","severity":"critical","public_date":"2014-09-03T00:00:00Z","advisories":[],"bugzilla":"1135864","bugzilla_description":"CVE-2014-1563 Mozilla: Use-after-free during DOM interactions with SVG (MFSA 2014-68)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1563.json"},{"CVE":"CVE-2014-1564","severity":"moderate","public_date":"2014-09-03T00:00:00Z","advisories":[],"bugzilla":"1135865","bugzilla_description":"CVE-2014-1564 Mozilla: Uninitialized memory use during GIF rendering (MFSA 2014-69)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1564.json"},{"CVE":"CVE-2014-1565","severity":"moderate","public_date":"2014-09-03T00:00:00Z","advisories":[],"bugzilla":"1135868","bugzilla_description":"CVE-2014-1565 Mozilla: Out-of-bounds read in Web Audio audio timeline (MFSA 2014-70)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1565.json"},{"CVE":"CVE-2014-1567","severity":"critical","public_date":"2014-09-03T00:00:00Z","advisories":["RHSA-2014:1145","RHSA-2014:1144"],"bugzilla":"1135869","bugzilla_description":"CVE-2014-1567 Mozilla: Use-after-free setting text directionality (MFSA 2014-72)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.8.0-1.el6_5","firefox-0:24.8.0-1.el7_0","thunderbird-0:24.8.0-1.el6_5","thunderbird-0:24.8.0-1.el5_10","firefox-0:24.8.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1567.json"},{"CVE":"CVE-2014-1547","severity":"critical","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:0919","RHSA-2014:0918"],"bugzilla":"1121464","bugzilla_description":"CVE-2014-1547 Mozilla: Miscellaneous memory safety hazards (rv:24.7) (MFSA 2014-56)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.7.0-1.el5_10","thunderbird-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1547.json"},{"CVE":"CVE-2014-1548","severity":"critical","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121469","bugzilla_description":"CVE-2014-1548 Mozilla: Miscellaneous memory safety hazards (rv:31.0) (MFSA 2014-56)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1548.json"},{"CVE":"CVE-2014-1549","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121470","bugzilla_description":"CVE-2014-1549 Mozilla: Buffer overflow during Web Audio buffering for playback (MFSA 2014-57)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1549.json"},{"CVE":"CVE-2014-1550","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121472","bugzilla_description":"CVE-2014-1550 Mozilla: Use-after-free in Web Audio due to incorrect control message ordering (MFSA 2014-58)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1550.json"},{"CVE":"CVE-2014-1561","severity":"low","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121473","bugzilla_description":"CVE-2014-1561 Mozilla: Toolbar dialog customization event spoofing (MFSA 2014-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1561.json"},{"CVE":"CVE-2014-1555","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:0919","RHSA-2014:0918"],"bugzilla":"1121476","bugzilla_description":"CVE-2014-1555 Mozilla: Use-after-free with FireOnStateChange event (MFSA 2014-61)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:24.7.0-1.el5_10","thunderbird-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1555.json"},{"CVE":"CVE-2014-1556","severity":"critical","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:0919","RHSA-2014:0918"],"bugzilla":"1121478","bugzilla_description":"CVE-2014-1556 Mozilla: Exploitable WebGL crash with Cesium JavaScript library (MFSA 2014-62)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.7.0-1.el5_10","thunderbird-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1556.json"},{"CVE":"CVE-2014-1557","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:0919","RHSA-2014:0918"],"bugzilla":"1121479","bugzilla_description":"CVE-2014-1557 Mozilla: Crash in Skia library when scaling high quality images (MFSA 2014-64)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-672","affected_packages":["thunderbird-0:24.7.0-1.el5_10","thunderbird-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1557.json"},{"CVE":"CVE-2014-1558","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121480","bugzilla_description":"CVE-2014-1558 CVE-2014-1559 CVE-2014-1560 Mozilla: Certificate parsing broken by non-standard character encoding (MFSA 2014-65)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1558.json"},{"CVE":"CVE-2014-1559","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121480","bugzilla_description":"CVE-2014-1558 CVE-2014-1559 CVE-2014-1560 Mozilla: Certificate parsing broken by non-standard character encoding (MFSA 2014-65)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1559.json"},{"CVE":"CVE-2014-1560","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121480","bugzilla_description":"CVE-2014-1558 CVE-2014-1559 CVE-2014-1560 Mozilla: Certificate parsing broken by non-standard character encoding (MFSA 2014-65)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1560.json"},{"CVE":"CVE-2014-1552","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121481","bugzilla_description":"CVE-2014-1552 Mozilla: IFRAME sandbox same-origin access through redirect (MFSA 2014-66)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1552.json"},{"CVE":"CVE-2014-1533","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":["RHSA-2014:0741","RHSA-2014:0742"],"bugzilla":"1107399","bugzilla_description":"CVE-2014-1533 Mozilla: Miscellaneous memory safety hazards (rv:24.6) (MFSA 2014-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.6.0-1.el5_10","thunderbird-0:24.6.0-1.el6_5","thunderbird-0:24.6.0-1.el5_10","firefox-0:24.6.0-1.el7_0","firefox-0:24.6.0-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1533.json"},{"CVE":"CVE-2014-1534","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107403","bugzilla_description":"CVE-2014-1534 Mozilla: Miscellaneous memory safety hazards (rv:30.0) (MFSA 2014-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1534.json"},{"CVE":"CVE-2014-1536","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107419","bugzilla_description":"CVE-2014-1536 CVE-2014-1537 Mozilla: Use-after-free and out of bounds issues found using Address Sanitizer (MFSA 2014-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1536.json"},{"CVE":"CVE-2014-1537","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107419","bugzilla_description":"CVE-2014-1536 CVE-2014-1537 Mozilla: Use-after-free and out of bounds issues found using Address Sanitizer (MFSA 2014-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1537.json"},{"CVE":"CVE-2014-1538","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":["RHSA-2014:0741","RHSA-2014:0742"],"bugzilla":"1107421","bugzilla_description":"CVE-2014-1538 Mozilla: Use-after-free and out of bounds issues found using Address Sanitizer (MFSA 2014-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:24.6.0-1.el5_10","thunderbird-0:24.6.0-1.el6_5","thunderbird-0:24.6.0-1.el5_10","firefox-0:24.6.0-1.el7_0","firefox-0:24.6.0-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1538.json"},{"CVE":"CVE-2014-1540","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107423","bugzilla_description":"CVE-2014-1540 Mozilla: Use-after-free in Event Listener Manager (MFSA 2014-51)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1540.json"},{"CVE":"CVE-2014-1541","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":["RHSA-2014:0741","RHSA-2014:0742"],"bugzilla":"1107424","bugzilla_description":"CVE-2014-1541 Mozilla: Use-after-free with SMIL Animation Controller (MFSA 2014-52)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.6.0-1.el5_10","thunderbird-0:24.6.0-1.el6_5","thunderbird-0:24.6.0-1.el5_10","firefox-0:24.6.0-1.el7_0","firefox-0:24.6.0-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1541.json"},{"CVE":"CVE-2014-1542","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107425","bugzilla_description":"CVE-2014-1542 Mozilla: Buffer overflow in Web Audio Speex resampler (MFSA 2014-53)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1542.json"},{"CVE":"CVE-2014-1543","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1108682","bugzilla_description":"CVE-2014-1543 firefox: Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API (MFSA 2014-54)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1543.json"},{"CVE":"CVE-2014-1518","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092657","bugzilla_description":"CVE-2014-1518 Mozilla: Miscellaneous memory safety hazards (rv:24.5) (MFSA 2014-34)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1518.json"},{"CVE":"CVE-2014-1523","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092660","bugzilla_description":"CVE-2014-1523 Mozilla: Out of bounds read while decoding JPG images (MFSA-2014-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1523.json"},{"CVE":"CVE-2014-1524","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092663","bugzilla_description":"CVE-2014-1524 Mozilla: Buffer overflow when using non-XBL object as XBL (MFSA 2014-38)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1524.json"},{"CVE":"CVE-2014-1529","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092664","bugzilla_description":"CVE-2014-1529 Mozilla: Privilege escalation through Web Notification API (MFSA 2014-42)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1529.json"},{"CVE":"CVE-2014-1530","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092666","bugzilla_description":"CVE-2014-1530 Mozilla: Cross-site scripting (XSS) using history navigations (MFSA 2014-43)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1530.json"},{"CVE":"CVE-2014-1531","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092668","bugzilla_description":"CVE-2014-1531 Mozilla: Use-after-free in imgLoader while resizing images (MFSA 2014-44)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1531.json"},{"CVE":"CVE-2014-1532","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092670","bugzilla_description":"CVE-2014-1532 Mozilla: Use-after-free in nsHostResolver (MFSA 2014-46)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1532.json"},{"CVE":"CVE-2014-1522","severity":"important","public_date":"2014-04-29T00:00:00Z","advisories":[],"bugzilla":"1095066","bugzilla_description":"CVE-2014-1522 Mozilla: Web Audio memory corruption issues (MFSA 2014-36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1522.json"},{"CVE":"CVE-2014-1525","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":[],"bugzilla":"1095070","bugzilla_description":"CVE-2014-1525 Mozilla: Use-after-free in the Text Track Manager for HTML video (MFSA 2014-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1525.json"},{"CVE":"CVE-2014-1526","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":[],"bugzilla":"1095074","bugzilla_description":"CVE-2014-1526 Mozilla: Debugger can bypass XrayWrappers with JavaScript (MFSA 2014-47)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1526.json"},{"CVE":"CVE-2014-1528","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":[],"bugzilla":"1096585","bugzilla_description":"CVE-2014-1528 Mozilla: Out-of-bounds write in Cairo (MFSA 2014-41)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1528.json"},{"CVE":"CVE-2014-1493","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077013","bugzilla_description":"CVE-2014-1493 Mozilla: Miscellaneous memory safety hazards (rv:24.4) (MFSA 2014-15)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1493.json"},{"CVE":"CVE-2014-1494","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077014","bugzilla_description":"CVE-2014-1494 Mozilla: Miscellaneous memory safety hazards (rv:28.0) (MFSA 2014-15)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1494.json"},{"CVE":"CVE-2014-1496","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077015","bugzilla_description":"CVE-2014-1496 Mozilla: Files extracted during updates are not always read only (MFSA 2014-16)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1496.json"},{"CVE":"CVE-2014-1497","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077016","bugzilla_description":"CVE-2014-1497 Mozilla: Out of bounds read during WAV file decoding (MFSA 2014-17)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1497.json"},{"CVE":"CVE-2014-1498","severity":"low","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077018","bugzilla_description":"CVE-2014-1498 Mozilla: crypto.generateCRMFRequest does not validate type of key (MFSA 2014-18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1498.json"},{"CVE":"CVE-2014-1499","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077019","bugzilla_description":"CVE-2014-1499 Mozilla: Spoofing attack on WebRTC permission prompt (MFSA 2014-19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1499.json"},{"CVE":"CVE-2014-1500","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077020","bugzilla_description":"CVE-2014-1500 Mozilla: onbeforeunload and Javascript navigation DOS (MFSA 2014-20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1500.json"},{"CVE":"CVE-2014-1502","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077021","bugzilla_description":"CVE-2014-1502 Mozilla: WebGL content injection from one domain to rendering in another (MFSA 2014-22)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1502.json"},{"CVE":"CVE-2014-1504","severity":"low","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077022","bugzilla_description":"CVE-2014-1504 Mozilla: Content Security Policy for data: documents not preserved by session restore (MFSA 2014-23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1504.json"},{"CVE":"CVE-2014-1508","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077025","bugzilla_description":"CVE-2014-1508 Mozilla: Information disclosure through polygon rendering in MathML (MFSA 2014-26)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1508.json"},{"CVE":"CVE-2014-1509","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077028","bugzilla_description":"CVE-2014-1509 Mozilla: Memory corruption in Cairo during PDF font rendering (MFSA 2014-27)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1509.json"},{"CVE":"CVE-2014-1505","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077029","bugzilla_description":"CVE-2014-1505 Mozilla: SVG filters information disclosure through feDisplacementMap (MFSA 2014-28)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1505.json"},{"CVE":"CVE-2014-1510","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077490","bugzilla_description":"CVE-2014-1510 CVE-2014-1511 Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1510.json"},{"CVE":"CVE-2014-1511","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077490","bugzilla_description":"CVE-2014-1510 CVE-2014-1511 Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1511.json"},{"CVE":"CVE-2014-1512","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077491","bugzilla_description":"CVE-2014-1512 Mozilla: Use-after-free in TypeObject (MFSA 2014-30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1512.json"},{"CVE":"CVE-2014-1513","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077492","bugzilla_description":"CVE-2014-1513 Mozilla: Out-of-bounds read/write through neutering ArrayBuffer objects (MFSA 2014-31)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1513.json"},{"CVE":"CVE-2014-1514","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077494","bugzilla_description":"CVE-2014-1514 Mozilla: Out-of-bounds write through TypedArrayObject after neutering (MFSA 2014-32)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1514.json"},{"CVE":"CVE-2013-6674","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":["RHSA-2013:1823"],"bugzilla":"1063120","bugzilla_description":"CVE-2013-6674 CVE-2014-2018 Mozilla: Script execution in HTML mail replies (MFSA 2014-14)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6674.json"},{"CVE":"CVE-2014-2018","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1063120","bugzilla_description":"CVE-2013-6674 CVE-2014-2018 Mozilla: Script execution in HTML mail replies (MFSA 2014-14)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2018.json"},{"CVE":"CVE-2014-1477","severity":"critical","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060938","bugzilla_description":"CVE-2014-1477 Mozilla: Miscellaneous memory safety hazards (rv:24.3) (MFSA 2014-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1477.json"},{"CVE":"CVE-2014-1478","severity":"critical","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060939","bugzilla_description":"CVE-2014-1478 Mozilla: Miscellaneous memory safety hazards (rv:27.0) (MFSA 2014-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1478.json"},{"CVE":"CVE-2014-1479","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060940","bugzilla_description":"CVE-2014-1479 Mozilla: Clone protected content with XBL scopes (MFSA 2014-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1479.json"},{"CVE":"CVE-2014-1480","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060941","bugzilla_description":"CVE-2014-1480 Mozilla: UI selection timeout missing on download prompts (MFSA 2014-03)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1480.json"},{"CVE":"CVE-2014-1482","severity":"critical","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060942","bugzilla_description":"CVE-2014-1482 Mozilla: Incorrect use of discarded images by RasterImage (MFSA 2014-04)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1482.json"},{"CVE":"CVE-2014-1483","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060943","bugzilla_description":"CVE-2014-1483 Mozilla: Information disclosure with *FromPoint on iframes (MFSA 2014-05)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1483.json"},{"CVE":"CVE-2014-1485","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060944","bugzilla_description":"CVE-2014-1485 Mozilla: XSLT stylesheets treated as styles in Content Security Policy (MFSA 2014-07)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1485.json"},{"CVE":"CVE-2014-1486","severity":"critical","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060945","bugzilla_description":"CVE-2014-1486 Mozilla: Use-after-free with imgRequestProxy and image proccessing (MFSA 2014-08)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1486.json"},{"CVE":"CVE-2014-1487","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060947","bugzilla_description":"CVE-2014-1487 Mozilla: Cross-origin information leak through web workers (MFSA 2014-09)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-209","affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1487.json"},{"CVE":"CVE-2014-1489","severity":"low","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060948","bugzilla_description":"CVE-2014-1489 Mozilla: Firefox default start page UI content invokable by script (MFSA 2014-10)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1489.json"},{"CVE":"CVE-2014-1488","severity":"critical","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060949","bugzilla_description":"CVE-2014-1488 Mozilla: Crash when using web workers with asm.js (MFSA 2014-11)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1488.json"},{"CVE":"CVE-2014-1481","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060952","bugzilla_description":"CVE-2014-1481 Mozilla: Inconsistent JavaScript handling of access to Window objects (MFSA 2014-13)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1481.json"},{"CVE":"CVE-2014-8636","severity":"moderate","public_date":"2014-01-15T00:00:00Z","advisories":[],"bugzilla":"1180977","bugzilla_description":"CVE-2014-8636 Mozilla: XrayWrapper bypass through DOM objects (MFSA 2015-09)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8636.json"},{"CVE":"CVE-2013-5609","severity":"important","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039417","bugzilla_description":"CVE-2013-5609 Mozilla: Miscellaneous memory safety hazards (rv:24.2) (MFSA 2013-104)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5609.json"},{"CVE":"CVE-2013-5610","severity":"critical","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039418","bugzilla_description":"CVE-2013-5610 Mozilla: Miscellaneous memory safety hazards (rv:26.0) (MFSA 2013-104)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5610.json"},{"CVE":"CVE-2013-5611","severity":"moderate","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039419","bugzilla_description":"CVE-2013-5611 Mozilla: Application Installation doorhanger persists on navigation (MFSA 2013-105)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5611.json"},{"CVE":"CVE-2013-5612","severity":"moderate","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039420","bugzilla_description":"CVE-2013-5612 Mozilla: Character encoding cross-origin XSS attack (MFSA 2013-106)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5612.json"},{"CVE":"CVE-2013-5614","severity":"low","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039421","bugzilla_description":"CVE-2013-5614 Mozilla: Sandbox restrictions not applied to nested object elements (MFSA 2013-107)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5614.json"},{"CVE":"CVE-2013-5616","severity":"important","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039422","bugzilla_description":"CVE-2013-5616 Mozilla: Use-after-free in event listeners (MFSA 2013-108)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5616.json"},{"CVE":"CVE-2013-5618","severity":"important","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039423","bugzilla_description":"CVE-2013-5618 Mozilla: Use-after-free during Table Editing (MFSA 2013-109)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5618.json"},{"CVE":"CVE-2013-5619","severity":"moderate","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039424","bugzilla_description":"CVE-2013-5619 Mozilla: Potential overflow in JavaScript binary search algorithms (MFSA 2013-110)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5619.json"},{"CVE":"CVE-2013-6671","severity":"important","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039426","bugzilla_description":"CVE-2013-6671 Mozilla: Segmentation violation when replacing ordered list elements (MFSA 2013-111)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6671.json"},{"CVE":"CVE-2013-6672","severity":"low","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039427","bugzilla_description":"CVE-2013-6672 Mozilla: Linux clipboard information disclosure though selection paste (MFSA 2013-112)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6672.json"},{"CVE":"CVE-2013-6673","severity":"moderate","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039428","bugzilla_description":"CVE-2013-6673 Mozilla: Trust settings for built-in roots ignored during EV certificate validation (MFSA 2013-113)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6673.json"},{"CVE":"CVE-2013-5613","severity":"important","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039429","bugzilla_description":"CVE-2013-5613 Mozilla: Use-after-free in synthetic mouse movement (MFSA 2013-114)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5613.json"},{"CVE":"CVE-2013-5615","severity":"moderate","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039430","bugzilla_description":"CVE-2013-5615 Mozilla: GetElementIC typed array stubs can be generated outside observed typesets (MFSA 2013-115)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5615.json"},{"CVE":"CVE-2013-5590","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023835","bugzilla_description":"CVE-2013-5590 Mozilla: Miscellaneous memory safety hazards (rv:17.0.10) (MFSA 2013-93)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5590.json"},{"CVE":"CVE-2013-5593","severity":"moderate","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1023836","bugzilla_description":"CVE-2013-5593 Mozilla: Spoofing addressbar though SELECT element (MFSA 2013-94)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5593.json"},{"CVE":"CVE-2013-5595","severity":"moderate","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023839","bugzilla_description":"CVE-2013-5595 Mozilla: Improperly initialized memory and overflows in some JavaScript functions (MFSA 2013-96)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5595.json"},{"CVE":"CVE-2013-5596","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1023840","bugzilla_description":"CVE-2013-5596 Mozilla: Writing to cycle collected object during image decoding (MFSA 2013-97)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5596.json"},{"CVE":"CVE-2013-5597","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023841","bugzilla_description":"CVE-2013-5597 Mozilla: Use-after-free when updating offline cache (MFSA 2013-98)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5597.json"},{"CVE":"CVE-2013-5598","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1023842","bugzilla_description":"CVE-2013-5598 Mozilla: Security bypass of PDF.js checks using iframes (MFSA 2013-99)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5598.json"},{"CVE":"CVE-2013-5599","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023843","bugzilla_description":"CVE-2013-5599 CVE-2013-5600 CVE-2013-5601 Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5599.json"},{"CVE":"CVE-2013-5600","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023843","bugzilla_description":"CVE-2013-5599 CVE-2013-5600 CVE-2013-5601 Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5600.json"},{"CVE":"CVE-2013-5601","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023843","bugzilla_description":"CVE-2013-5599 CVE-2013-5600 CVE-2013-5601 Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5601.json"},{"CVE":"CVE-2013-5602","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023844","bugzilla_description":"CVE-2013-5602 Mozilla: Memory corruption in workers (MFSA 2013-101)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5602.json"},{"CVE":"CVE-2013-5603","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1023845","bugzilla_description":"CVE-2013-5603 Mozilla: Use-after-free in HTML document templates (MFSA 2013-102)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5603.json"},{"CVE":"CVE-2013-5591","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1023846","bugzilla_description":"CVE-2013-5591 Mozilla: Miscellaneous memory safety hazards (rv:25.0 / rv:124.1) (MFSA 2013-93)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5591.json"},{"CVE":"CVE-2013-5604","severity":"moderate","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023863","bugzilla_description":"CVE-2013-5604 Mozilla: Access violation with XSLT and uninitialized data (MFSA 2013-95)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5604.json"},{"CVE":"CVE-2013-1718","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009031","bugzilla_description":"CVE-2013-1718 Mozilla: Miscellaneous memory safety hazards (rv:17.0.9) (MFSA 2013-76)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1718.json"},{"CVE":"CVE-2013-1722","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009032","bugzilla_description":"CVE-2013-1722 Mozilla: Use-after-free in Animation Manager during stylesheet cloning (MFSA 2013-79)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1722.json"},{"CVE":"CVE-2013-1725","severity":"important","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009033","bugzilla_description":"CVE-2013-1725 Mozilla: Calling scope for new Javascript objects can lead to memory corruption (MFSA 2013-82)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1725.json"},{"CVE":"CVE-2013-1730","severity":"important","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009036","bugzilla_description":"CVE-2013-1730 Mozilla: Compartment mismatch re-attaching XBL-backed nodes (MFSA 2013-88)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1730.json"},{"CVE":"CVE-2013-1732","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009037","bugzilla_description":"CVE-2013-1732 Mozilla: Buffer overflow with multi-column, lists, and floats (MFSA 2013-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1732.json"},{"CVE":"CVE-2013-1735","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009039","bugzilla_description":"CVE-2013-1735 CVE-2013-1736 Mozilla: Memory corruption involving scrolling (MFSA 2013-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1735.json"},{"CVE":"CVE-2013-1736","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009039","bugzilla_description":"CVE-2013-1735 CVE-2013-1736 Mozilla: Memory corruption involving scrolling (MFSA 2013-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1736.json"},{"CVE":"CVE-2013-1737","severity":"moderate","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009041","bugzilla_description":"CVE-2013-1737 Mozilla: User-defined properties on DOM proxies get the wrong \"this\" object (MFSA 2013-91)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1737.json"},{"CVE":"CVE-2013-1719","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009211","bugzilla_description":"CVE-2013-1719 Mozilla: Miscellaneous memory safety hazards (rv:24.0) (MFSA 2013-76)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1719.json"},{"CVE":"CVE-2013-1720","severity":"moderate","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009212","bugzilla_description":"CVE-2013-1720 Mozilla: Improper state in HTML5 Tree Builder with templates (MFSA 2013-77)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1720.json"},{"CVE":"CVE-2013-1721","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009213","bugzilla_description":"CVE-2013-1721 Mozilla: Integer overflow in ANGLE library (MFSA 2013-78)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1721.json"},{"CVE":"CVE-2013-1723","severity":"moderate","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009214","bugzilla_description":"CVE-2013-1723 Mozilla: NativeKey continues handling key messages after widget is destroyed (MFSA 2013-80)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1723.json"},{"CVE":"CVE-2013-1724","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009216","bugzilla_description":"CVE-2013-1724 Mozilla: Use-after-free with select element (MFSA 2013-81)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1724.json"},{"CVE":"CVE-2013-1728","severity":"moderate","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009217","bugzilla_description":"CVE-2013-1728 Mozilla: Uninitialized data in IonMonkey (MFSA 2013-85)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1728.json"},{"CVE":"CVE-2013-1729","severity":"moderate","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009218","bugzilla_description":"CVE-2013-1729 Mozilla: WebGL Information disclosure through OS X NVIDIA graphic drivers (MFSA 2013-86)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1729.json"},{"CVE":"CVE-2013-1738","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009219","bugzilla_description":"CVE-2013-1738 Mozilla: GC hazard with default compartments and frame chain restoration (MFSA 2013-92)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1738.json"},{"CVE":"CVE-2013-1701","severity":"critical","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993598","bugzilla_description":"CVE-2013-1701 Mozilla: Miscellaneous memory safety hazards (rv:17.0.8) (MFSA 2013-63)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1701.json"},{"CVE":"CVE-2013-1709","severity":"moderate","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993600","bugzilla_description":"CVE-2013-1709 Mozilla: Document URI misrepresentation and masquerading (MFSA 2013-68)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1709.json"},{"CVE":"CVE-2013-1710","severity":"critical","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993602","bugzilla_description":"CVE-2013-1710 Mozilla: CRMF requests allow for code execution and XSS attacks (MFSA 2013-69)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-79","affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1710.json"},{"CVE":"CVE-2013-1713","severity":"moderate","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993603","bugzilla_description":"CVE-2013-1713 Mozilla: Wrong principal used for validating URI for some Javascript components (MFSA 2013-72)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1713.json"},{"CVE":"CVE-2013-1714","severity":"moderate","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993604","bugzilla_description":"CVE-2013-1714 Mozilla: Same-origin bypass with web workers and XMLHttpRequest (MFSA 2013-73)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1714.json"},{"CVE":"CVE-2013-1717","severity":"moderate","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993605","bugzilla_description":"CVE-2013-1717 Mozilla: Local Java applets may read contents of local file system (MFSA 2013-75)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1717.json"},{"CVE":"CVE-2013-1702","severity":"critical","public_date":"2013-08-06T00:00:00Z","advisories":[],"bugzilla":"994332","bugzilla_description":"CVE-2013-1702 Mozilla: Miscellaneous memory safety hazards (rv:23.0) (MFSA 2013-63)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1702.json"},{"CVE":"CVE-2013-1704","severity":"critical","public_date":"2013-08-06T00:00:00Z","advisories":[],"bugzilla":"994334","bugzilla_description":"CVE-2013-1704 Mozilla: Use after free mutating DOM during SetBody (MFSA 2013-64)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1704.json"},{"CVE":"CVE-2013-1705","severity":"critical","public_date":"2013-08-06T00:00:00Z","advisories":[],"bugzilla":"994335","bugzilla_description":"CVE-2013-1705 Mozilla: Buffer underflow when generating CRMF requests (MFSA 2013-65)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1705.json"},{"CVE":"CVE-2013-1708","severity":"low","public_date":"2013-08-06T00:00:00Z","advisories":[],"bugzilla":"994337","bugzilla_description":"CVE-2013-1708 Mozilla: Crash during WAV audio file decoding (MFSA 2013-67)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1708.json"},{"CVE":"CVE-2013-1711","severity":"moderate","public_date":"2013-08-06T00:00:00Z","advisories":[],"bugzilla":"994339","bugzilla_description":"CVE-2013-1711 Mozilla: Bypass of XrayWrappers using XBL Scopes (MFSA 2013-70)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1711.json"},{"CVE":"CVE-2013-1682","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977597","bugzilla_description":"CVE-2013-1682 Mozilla: Miscellaneous memory safety hazards (rv:17.0.7) (MFSA 2013-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1682.json"},{"CVE":"CVE-2013-1683","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977598","bugzilla_description":"CVE-2013-1683 Mozilla: Miscellaneous memory safety hazards (rv:22.0) (MFSA 2013-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1683.json"},{"CVE":"CVE-2013-1684","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977599","bugzilla_description":"CVE-2013-1684 CVE-2013-1685 CVE-2013-1686 Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1684.json"},{"CVE":"CVE-2013-1685","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977599","bugzilla_description":"CVE-2013-1684 CVE-2013-1685 CVE-2013-1686 Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1685.json"},{"CVE":"CVE-2013-1686","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977599","bugzilla_description":"CVE-2013-1684 CVE-2013-1685 CVE-2013-1686 Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1686.json"},{"CVE":"CVE-2013-1687","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977600","bugzilla_description":"CVE-2013-1687 Mozilla: Privileged content access and execution via XBL (MFSA 2013-51)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1687.json"},{"CVE":"CVE-2013-1688","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977601","bugzilla_description":"CVE-2013-1688 Mozilla: Arbitrary code execution within Profiler (MFSA 2013-52)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1688.json"},{"CVE":"CVE-2013-1690","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977602","bugzilla_description":"CVE-2013-1690 Mozilla: Execution of unmapped memory through onreadystatechange event (MFSA 2013-53)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1690.json"},{"CVE":"CVE-2013-1692","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977603","bugzilla_description":"CVE-2013-1692 Mozilla: Data in the body of XHR HEAD requests leads to CSRF attacks (MFSA 2013-54)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-352","affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1692.json"},{"CVE":"CVE-2013-1693","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977605","bugzilla_description":"CVE-2013-1693 Mozilla: SVG filters can lead to information disclosure (MFSA 2013-55)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1693.json"},{"CVE":"CVE-2013-1694","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977610","bugzilla_description":"CVE-2013-1694 Mozilla: PreserveWrapper has inconsistent behavior (MFSA 2013-56)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1694.json"},{"CVE":"CVE-2013-1695","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977611","bugzilla_description":"CVE-2013-1695 Mozilla: Sandbox restrictions not applied to nested frame elements (MFSA 2013-57)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1695.json"},{"CVE":"CVE-2013-1696","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977613","bugzilla_description":"CVE-2013-1696 Mozilla: X-Frame-Options ignored when using server push with multi-part responses (MFSA 2013-58)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1696.json"},{"CVE":"CVE-2013-1697","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977614","bugzilla_description":"CVE-2013-1697 Mozilla: XrayWrappers can be bypassed to run user defined methods in a privileged context (MFSA 2013-59)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1697.json"},{"CVE":"CVE-2013-1698","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977615","bugzilla_description":"CVE-2013-1698 Mozilla: getUserMedia permission dialog incorrectly displays location (MFSA 2013-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1698.json"},{"CVE":"CVE-2013-1699","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977621","bugzilla_description":"CVE-2013-1699 Mozilla: Homograph domain spoofing in .com, .net and .name (MFSA 2013-61)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1699.json"},{"CVE":"CVE-2013-0801","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962591","bugzilla_description":"CVE-2013-0801 Mozilla: Miscellaneous memory safety hazards (rv:17.0.6) (MFSA 2013-41)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0801.json"},{"CVE":"CVE-2013-1669","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":[],"bugzilla":"962594","bugzilla_description":"CVE-2013-1669 Mozilla: Miscellaneous memory safety hazards (rv:21.0) (MFSA 2013-41)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1669.json"},{"CVE":"CVE-2013-1670","severity":"moderate","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962596","bugzilla_description":"CVE-2013-1670 Mozilla: Privileged access for content level constructor (MFSA 2013-42)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1670.json"},{"CVE":"CVE-2013-1671","severity":"moderate","public_date":"2013-05-14T00:00:00Z","advisories":[],"bugzilla":"962597","bugzilla_description":"CVE-2013-1671 Mozilla: File input control has access to full path (MFSA 2013-43)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1671.json"},{"CVE":"CVE-2013-1674","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962598","bugzilla_description":"CVE-2013-1674 Mozilla: Use-after-free with video and onresize event (MFSA 2013-46)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1674.json"},{"CVE":"CVE-2013-1675","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962601","bugzilla_description":"CVE-2013-1675 Mozilla: Uninitialized functions in DOMSVGZoomEvent (MFSA 2013-47)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1675.json"},{"CVE":"CVE-2013-1676","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1676.json"},{"CVE":"CVE-2013-1677","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1677.json"},{"CVE":"CVE-2013-1678","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1678.json"},{"CVE":"CVE-2013-1679","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1679.json"},{"CVE":"CVE-2013-1680","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1680.json"},{"CVE":"CVE-2013-1681","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1681.json"},{"CVE":"CVE-2013-6167","severity":"moderate","public_date":"2013-04-03T00:00:00Z","advisories":[],"bugzilla":"1066219","bugzilla_description":"CVE-2013-6167 Mozilla: browser document.cookie DoS vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6167.json"},{"CVE":"CVE-2013-0788","severity":"critical","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0697","RHSA-2013:0696"],"bugzilla":"946927","bugzilla_description":"CVE-2013-0788 Mozilla: Miscellaneous memory safety hazards (rv:17.0.5) (MFSA 2013-30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.5-1.el5_9","firefox-0:17.0.5-1.el6_4","thunderbird-0:17.0.5-1.el6_4","firefox-0:17.0.5-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0788.json"},{"CVE":"CVE-2013-0789","severity":"critical","public_date":"2013-04-02T00:00:00Z","advisories":[],"bugzilla":"946928","bugzilla_description":"CVE-2013-0789 Mozilla: Miscellaneous memory safety hazards (rv:20.0) (MFSA 2013-30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0789.json"},{"CVE":"CVE-2013-0800","severity":"important","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0697","RHSA-2013:0696"],"bugzilla":"946929","bugzilla_description":"CVE-2013-0800 Mozilla: Out-of-bounds write in Cairo library (MFSA 2013-31)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["thunderbird-0:17.0.5-1.el5_9","firefox-0:17.0.5-1.el6_4","thunderbird-0:17.0.5-1.el6_4","firefox-0:17.0.5-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0800.json"},{"CVE":"CVE-2013-0796","severity":"critical","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0697","RHSA-2013:0696"],"bugzilla":"946931","bugzilla_description":"CVE-2013-0796 Mozilla: WebGL crash with Mesa graphics driver on Linux (MFSA 2013-35)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.5-1.el5_9","firefox-0:17.0.5-1.el6_4","thunderbird-0:17.0.5-1.el6_4","firefox-0:17.0.5-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0796.json"},{"CVE":"CVE-2013-0795","severity":"critical","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0697","RHSA-2013:0696"],"bugzilla":"946932","bugzilla_description":"CVE-2013-0795 Mozilla: Bypass of SOW protections allows cloning of protected nodes (MFSA 2013-36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.5-1.el5_9","firefox-0:17.0.5-1.el6_4","thunderbird-0:17.0.5-1.el6_4","firefox-0:17.0.5-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0795.json"},{"CVE":"CVE-2013-0793","severity":"moderate","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0697","RHSA-2013:0696"],"bugzilla":"946935","bugzilla_description":"CVE-2013-0793 Mozilla: Cross-site scripting (XSS) using timed history navigations (MFSA 2013-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["thunderbird-0:17.0.5-1.el5_9","firefox-0:17.0.5-1.el6_4","thunderbird-0:17.0.5-1.el6_4","firefox-0:17.0.5-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0793.json"},{"CVE":"CVE-2013-0792","severity":"moderate","public_date":"2013-04-02T00:00:00Z","advisories":[],"bugzilla":"946936","bugzilla_description":"CVE-2013-0792 Mozilla: Memory corruption while rendering grayscale PNG images (MFSA 2013-39)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0792.json"},{"CVE":"CVE-2013-0783","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0272","RHSA-2013:0271"],"bugzilla":"911836","bugzilla_description":"CVE-2013-0783 Mozilla: Miscellaneous memory safety hazards (rv:17.0.3) (MFSA 2013-21)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.3-1.el5_9","thunderbird-0:17.0.3-1.el6_3","thunderbird-0:17.0.3-1.el5_9","firefox-0:17.0.3-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0783.json"},{"CVE":"CVE-2013-0784","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911837","bugzilla_description":"CVE-2013-0784 Mozilla: Miscellaneous memory safety hazards (rv:19.0) (MFSA 2013-21)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0784.json"},{"CVE":"CVE-2013-0765","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911838","bugzilla_description":"CVE-2013-0765 Mozilla: Wrapped WebIDL objects can be wrapped again (MFSA 2013-23)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0765.json"},{"CVE":"CVE-2013-0773","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911839","bugzilla_description":"CVE-2013-0773 Mozilla: Web content bypass of COW and SOW security wrappers (MFSA 2013-24)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0773.json"},{"CVE":"CVE-2013-0772","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"911840","bugzilla_description":"CVE-2013-0772 Mozilla: Out-of-bounds read in image rendering (MFSA 2013-22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0772.json"},{"CVE":"CVE-2013-0774","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911842","bugzilla_description":"CVE-2013-0774 Mozilla: Privacy leak in JavaScript Workers (MFSA 2013-25)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0774.json"},{"CVE":"CVE-2013-0775","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0272","RHSA-2013:0271"],"bugzilla":"911843","bugzilla_description":"CVE-2013-0775 Mozilla: Use-after-free in nsImageLoadingContent (MFSA 2013-26)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.3-1.el5_9","thunderbird-0:17.0.3-1.el6_3","thunderbird-0:17.0.3-1.el5_9","firefox-0:17.0.3-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0775.json"},{"CVE":"CVE-2013-0776","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0272","RHSA-2013:0271"],"bugzilla":"911844","bugzilla_description":"CVE-2013-0776 Mozilla: Phishing on HTTPS connection through malicious proxy (MFSA 2013-27)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:17.0.3-1.el5_9","thunderbird-0:17.0.3-1.el6_3","thunderbird-0:17.0.3-1.el5_9","firefox-0:17.0.3-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0776.json"},{"CVE":"CVE-2013-0780","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0272","RHSA-2013:0271"],"bugzilla":"911865","bugzilla_description":"CVE-2013-0780 CVE-2013-0782 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:17.0.3-1.el5_9","thunderbird-0:17.0.3-1.el6_3","thunderbird-0:17.0.3-1.el5_9","firefox-0:17.0.3-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0780.json"},{"CVE":"CVE-2013-0782","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0272","RHSA-2013:0271"],"bugzilla":"911865","bugzilla_description":"CVE-2013-0780 CVE-2013-0782 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:17.0.3-1.el5_9","thunderbird-0:17.0.3-1.el6_3","thunderbird-0:17.0.3-1.el5_9","firefox-0:17.0.3-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0782.json"},{"CVE":"CVE-2013-0777","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911868","bugzilla_description":"CVE-2013-0777 CVE-2013-0778 CVE-2013-0779 CVE-2013-0781 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-125|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0777.json"},{"CVE":"CVE-2013-0778","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911868","bugzilla_description":"CVE-2013-0777 CVE-2013-0778 CVE-2013-0779 CVE-2013-0781 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-125|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0778.json"},{"CVE":"CVE-2013-0779","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911868","bugzilla_description":"CVE-2013-0777 CVE-2013-0778 CVE-2013-0779 CVE-2013-0781 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-125|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0779.json"},{"CVE":"CVE-2013-0781","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911868","bugzilla_description":"CVE-2013-0777 CVE-2013-0778 CVE-2013-0779 CVE-2013-0781 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-125|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0781.json"},{"CVE":"CVE-2013-0769","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891811","bugzilla_description":"CVE-2013-0769 Mozilla: Miscellaneous memory safety hazards (rv:10.0.12) (MFSA 2013-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0769.json"},{"CVE":"CVE-2013-0749","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891813","bugzilla_description":"CVE-2013-0749 CVE-2013-0770 Mozilla: Miscellaneous memory safety hazards (rv:18.0/rv:17.0.1) (MFSA 2013-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0749.json"},{"CVE":"CVE-2013-0770","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891813","bugzilla_description":"CVE-2013-0749 CVE-2013-0770 Mozilla: Miscellaneous memory safety hazards (rv:18.0/rv:17.0.1) (MFSA 2013-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0770.json"},{"CVE":"CVE-2013-0762","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891821","bugzilla_description":"CVE-2013-0762 CVE-2013-0766 CVE-2013-0767 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0762.json"},{"CVE":"CVE-2013-0766","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891821","bugzilla_description":"CVE-2013-0762 CVE-2013-0766 CVE-2013-0767 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0766.json"},{"CVE":"CVE-2013-0767","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891821","bugzilla_description":"CVE-2013-0762 CVE-2013-0766 CVE-2013-0767 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0767.json"},{"CVE":"CVE-2013-0760","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891822","bugzilla_description":"CVE-2013-0760 CVE-2013-0761 CVE-2013-0763 CVE-2013-0771 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0760.json"},{"CVE":"CVE-2013-0761","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891822","bugzilla_description":"CVE-2013-0760 CVE-2013-0761 CVE-2013-0763 CVE-2013-0771 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0761.json"},{"CVE":"CVE-2013-0763","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891822","bugzilla_description":"CVE-2013-0760 CVE-2013-0761 CVE-2013-0763 CVE-2013-0771 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0763.json"},{"CVE":"CVE-2013-0771","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891822","bugzilla_description":"CVE-2013-0760 CVE-2013-0761 CVE-2013-0763 CVE-2013-0771 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0771.json"},{"CVE":"CVE-2013-0768","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891823","bugzilla_description":"CVE-2013-0768 Mozilla: Buffer Overflow in Canvas (MFSA 2013-03)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0768.json"},{"CVE":"CVE-2013-0759","severity":"moderate","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891824","bugzilla_description":"CVE-2013-0759 Mozilla: URL spoofing in addressbar during page loads (MFSA 2013-04)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0759.json"},{"CVE":"CVE-2013-0744","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891825","bugzilla_description":"CVE-2013-0744 Mozilla: Use-after-free when displaying table with many columns and column groups (MFSA 2013-05)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0744.json"},{"CVE":"CVE-2013-0764","severity":"important","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892140","bugzilla_description":"CVE-2013-0764 Mozilla: Crash due to handling of SSL on threads (MFSA 2013-07)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0764.json"},{"CVE":"CVE-2013-0745","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892141","bugzilla_description":"CVE-2013-0745 Mozilla: AutoWrapperChanger fails to keep objects alive during garbage collection (MFSA 2013-08)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0745.json"},{"CVE":"CVE-2013-0746","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892142","bugzilla_description":"CVE-2013-0746 Mozilla: Compartment mismatch with quickstubs returned values (MFSA 2013-09)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0746.json"},{"CVE":"CVE-2013-0747","severity":"moderate","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892143","bugzilla_description":"CVE-2013-0747 Mozilla: Event manipulation in plugin handler to bypass same-origin policy (MFSA 2013-10)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0747.json"},{"CVE":"CVE-2013-0748","severity":"moderate","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892144","bugzilla_description":"CVE-2013-0748 Mozilla: Address space layout leaked in XBL objects (MFSA 2013-11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0748.json"},{"CVE":"CVE-2013-0750","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892145","bugzilla_description":"CVE-2013-0750 Mozilla: Buffer overflow in Javascript string concatenation (MFSA 2013-12)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0750.json"},{"CVE":"CVE-2013-0752","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892146","bugzilla_description":"CVE-2013-0752 Mozilla: Memory corruption in XBL with XML bindings containing SVG (MFSA 2013-13)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0752.json"},{"CVE":"CVE-2013-0757","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892147","bugzilla_description":"CVE-2013-0757 Mozilla: Chrome Object Wrapper (COW) bypass through changing prototype (MFSA 2013-14)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0757.json"},{"CVE":"CVE-2013-0758","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892148","bugzilla_description":"CVE-2013-0758 Mozilla: Chrome Object Wrapper (COW) bypass through plugin objects (MFSA 2013-15)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0758.json"},{"CVE":"CVE-2013-0753","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892149","bugzilla_description":"CVE-2013-0753 Mozilla: Use-after-free in serializeToStream (MFSA 2013-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0753.json"},{"CVE":"CVE-2013-0754","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892150","bugzilla_description":"CVE-2013-0754 Mozilla: Use-after-free in ListenerManager (MFSA 2013-17)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0754.json"},{"CVE":"CVE-2013-0755","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892854","bugzilla_description":"CVE-2013-0755 Mozilla: Use-after-free in Vibrate (MFSA 2013-18)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0755.json"},{"CVE":"CVE-2013-0756","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892858","bugzilla_description":"CVE-2013-0756 Mozilla: garbage collection flaw in Javascript Proxy objects (MFSA 2013-19)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0756.json"},{"CVE":"CVE-2012-6051","severity":"moderate","public_date":"2012-11-23T00:00:00Z","advisories":[],"bugzilla":"882910","bugzilla_description":"CVE-2012-6051 firefox, thunderbird, xulrunner: Google CityHash hash function collisions (oCERT-2012-001)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6051.json"},{"CVE":"CVE-2012-5843","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877613","bugzilla_description":"CVE-2012-5843 Mozilla: Miscellaneous memory safety hazards (rv:17.0) (MFSA 2012-91)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5843.json"},{"CVE":"CVE-2012-5842","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877614","bugzilla_description":"CVE-2012-5842 Mozilla: Miscellaneous memory safety hazards (rv:10.0.11) (MFSA 2012-91)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5842.json"},{"CVE":"CVE-2012-4202","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877615","bugzilla_description":"CVE-2012-4202 Mozilla: Buffer overflow while rendering GIF images (MFSA 2012-92)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4202.json"},{"CVE":"CVE-2012-4201","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877616","bugzilla_description":"CVE-2012-4201 Mozilla: evalInSanbox location context incorrectly applied (MFSA 2012-93)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4201.json"},{"CVE":"CVE-2012-5836","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877617","bugzilla_description":"CVE-2012-5836 Mozilla: Crash when combining SVG text on path with CSS (MFSA 2012-94)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5836.json"},{"CVE":"CVE-2012-4203","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877618","bugzilla_description":"CVE-2012-4203 Mozilla: Javascript: URLs run in privileged context on New Tab page (MFSA 2012-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4203.json"},{"CVE":"CVE-2012-4204","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877624","bugzilla_description":"CVE-2012-4204 Mozilla: Memory corruption in str_unescape (MFSA 2012-96)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4204.json"},{"CVE":"CVE-2012-4205","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877625","bugzilla_description":"CVE-2012-4205 Mozilla: XMLHttpRequest inherits incorrect principal within sandbox (MFSA 2012-97)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4205.json"},{"CVE":"CVE-2012-4208","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877627","bugzilla_description":"CVE-2012-4208 Mozilla: XrayWrappers exposes chrome-only properties when not in chrome compartment (MFSA 2012-99)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4208.json"},{"CVE":"CVE-2012-5841","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877628","bugzilla_description":"CVE-2012-5841 Mozilla: Improper security filtering for cross-origin wrappers (MFSA 2012-100)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5841.json"},{"CVE":"CVE-2012-4207","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877629","bugzilla_description":"CVE-2012-4207 Mozilla: Improper character decoding in HZ-GB-2312 charset (MFSA 2012-101)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4207.json"},{"CVE":"CVE-2012-5837","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877631","bugzilla_description":"CVE-2012-5837 Mozilla: Script entered into Developer Toolbar runs with chrome privileges (MFSA 2012-102)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5837.json"},{"CVE":"CVE-2012-4209","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877632","bugzilla_description":"CVE-2012-4209 Mozilla: Frames can shadow top.location (MFSA 2012-103)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4209.json"},{"CVE":"CVE-2012-4210","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1482"],"bugzilla":"877633","bugzilla_description":"CVE-2012-4210 Mozilla: CSS and HTML injection through Style Inspector (MFSA 2012-104)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4210.json"},{"CVE":"CVE-2012-4214","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4214.json"},{"CVE":"CVE-2012-4215","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4215.json"},{"CVE":"CVE-2012-4216","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4216.json"},{"CVE":"CVE-2012-5829","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5829.json"},{"CVE":"CVE-2012-5839","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5839.json"},{"CVE":"CVE-2012-5840","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5840.json"},{"CVE":"CVE-2012-5830","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877635","bugzilla_description":"CVE-2012-5830 CVE-2012-5833 CVE-2012-5835 Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5830.json"},{"CVE":"CVE-2012-5833","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877635","bugzilla_description":"CVE-2012-5830 CVE-2012-5833 CVE-2012-5835 Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5833.json"},{"CVE":"CVE-2012-5835","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877635","bugzilla_description":"CVE-2012-5830 CVE-2012-5833 CVE-2012-5835 Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5835.json"},{"CVE":"CVE-2012-4212","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877942","bugzilla_description":"CVE-2012-4212 CVE-2012-4213 CVE-2012-4217 CVE-2012-4218 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4212.json"},{"CVE":"CVE-2012-4213","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877942","bugzilla_description":"CVE-2012-4212 CVE-2012-4213 CVE-2012-4217 CVE-2012-4218 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4213.json"},{"CVE":"CVE-2012-4217","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877942","bugzilla_description":"CVE-2012-4212 CVE-2012-4213 CVE-2012-4217 CVE-2012-4218 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4217.json"},{"CVE":"CVE-2012-4218","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877942","bugzilla_description":"CVE-2012-4212 CVE-2012-4213 CVE-2012-4217 CVE-2012-4218 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4218.json"},{"CVE":"CVE-2012-5838","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877945","bugzilla_description":"CVE-2012-5838 Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5838.json"},{"CVE":"CVE-2012-4194","severity":"critical","public_date":"2012-10-26T00:00:00Z","advisories":["RHSA-2012:1407","RHSA-2012:1413"],"bugzilla":"869893","bugzilla_description":"CVE-2012-4194 CVE-2012-4195 CVE-2012-4196 Mozilla: Fixes for Location object issues (MFSA 2012-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.10-1.el6_3","firefox-0:10.0.10-1.el6_3","thunderbird-0:10.0.10-1.el5_8","firefox-0:10.0.10-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4194.json"},{"CVE":"CVE-2012-4195","severity":"critical","public_date":"2012-10-26T00:00:00Z","advisories":["RHSA-2012:1407","RHSA-2012:1413"],"bugzilla":"869893","bugzilla_description":"CVE-2012-4194 CVE-2012-4195 CVE-2012-4196 Mozilla: Fixes for Location object issues (MFSA 2012-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.10-1.el6_3","firefox-0:10.0.10-1.el6_3","thunderbird-0:10.0.10-1.el5_8","firefox-0:10.0.10-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4195.json"},{"CVE":"CVE-2012-4196","severity":"critical","public_date":"2012-10-26T00:00:00Z","advisories":["RHSA-2012:1407","RHSA-2012:1413"],"bugzilla":"869893","bugzilla_description":"CVE-2012-4194 CVE-2012-4195 CVE-2012-4196 Mozilla: Fixes for Location object issues (MFSA 2012-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.10-1.el6_3","firefox-0:10.0.10-1.el6_3","thunderbird-0:10.0.10-1.el5_8","firefox-0:10.0.10-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4196.json"},{"CVE":"CVE-2012-4192","severity":"critical","public_date":"2012-10-11T00:00:00Z","advisories":[],"bugzilla":"865283","bugzilla_description":"CVE-2012-4192 Mozilla: defaultValue security checks not applied (firefox-16) (MFSA 2012-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4192.json"},{"CVE":"CVE-2012-4191","severity":"critical","public_date":"2012-10-11T00:00:00Z","advisories":[],"bugzilla":"865286","bugzilla_description":"CVE-2012-4191 Mozilla: Miscellaneous memory safety hazards (rv:16.0.1) (MFSA 2012-88)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4191.json"},{"CVE":"CVE-2012-3982","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863614","bugzilla_description":"CVE-2012-3982 Mozilla: Miscellaneous memory safety hazards (rv:10.0.8) (MFSA 2012-74)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3982.json"},{"CVE":"CVE-2012-3983","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":[],"bugzilla":"863615","bugzilla_description":"CVE-2012-3983 Mozilla: Miscellaneous memory safety hazards (rv:16.0) (MFSA 2012-74)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3983.json"},{"CVE":"CVE-2012-3984","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":[],"bugzilla":"863616","bugzilla_description":"CVE-2012-3984 CVE-2012-5354 Mozilla: Select element persistance allows for attacks (MFSA 2012-75)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3984.json"},{"CVE":"CVE-2012-5354","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":[],"bugzilla":"863616","bugzilla_description":"CVE-2012-3984 CVE-2012-5354 Mozilla: Select element persistance allows for attacks (MFSA 2012-75)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5354.json"},{"CVE":"CVE-2012-3985","severity":"moderate","public_date":"2012-10-09T00:00:00Z","advisories":[],"bugzilla":"863617","bugzilla_description":"CVE-2012-3985 Mozilla: Continued access to initial origin after setting document.domain can lead to XSS attacks (MFSA 2012-76)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3985.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewall-applet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewall-applet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewall-applet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewall-config_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewall-config_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewall-config_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewalld-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewalld-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewalld-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewalld_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewalld_security_api_results.json
new file mode 100644
index 0000000..14bb8ea
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/firewalld_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-5410","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2016:2597"],"bugzilla":"1360135","bugzilla_description":"CVE-2016-5410 firewalld: Firewall configuration can be modified by any logged in user","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":["firewalld-0:0.4.3.2-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5410.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flac-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flac-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flac-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flac-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flac-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flac-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flac_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flac_security_api_results.json
new file mode 100644
index 0000000..c439354
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flac_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-6888","severity":"low","public_date":"2017-05-11T00:00:00Z","advisories":[],"bugzilla":"1573058","bugzilla_description":"CVE-2017-6888 flac: Memory leak in src/libFLAC/stream_decoder.c:read_metadata_vorbiscomment_()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6888.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2014-9028","severity":"important","public_date":"2014-11-25T00:00:00Z","advisories":["RHSA-2015:0767"],"bugzilla":"1167741","bugzilla_description":"CVE-2014-9028 flac: Heap buffer write overflow in read_residual_partitioned_rice_","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["flac-0:1.3.0-5.el7_1","flac-0:1.2.1-7.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9028.json"},{"CVE":"CVE-2014-8962","severity":"low","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2015:0767"],"bugzilla":"1167236","bugzilla_description":"CVE-2014-8962 flac: Buffer read overflow when processing ID3V2 metadata","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["flac-0:1.3.0-5.el7_1","flac-0:1.2.1-7.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8962.json"},{"CVE":"CVE-2007-6277","severity":"moderate","public_date":"2007-11-15T00:00:00Z","advisories":["RHSA-2007:0975"],"bugzilla":"415581","bugzilla_description":"CVE-2007-6277 libflac: Multiple security issues fixed in 1.2.1","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["flac-0:1.1.2-28.el5_0.1","flac-0:1.1.0-7.el4_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6277.json"},{"CVE":"CVE-2007-4619","severity":"important","public_date":"2007-10-11T00:00:00Z","advisories":["RHSA-2007:0975"],"bugzilla":"331991","bugzilla_description":"CVE-2007-4619 FLAC Integer overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["flac-0:1.1.2-28.el5_0.1","flac-0:1.1.0-7.el4_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4619.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-builder_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-builder_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-builder_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-selinux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-selinux_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-selinux_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-session-helper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-session-helper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak-session-helper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak_security_api_results.json
new file mode 100644
index 0000000..5596cb0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flatpak_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-10063","severity":"important","public_date":"2019-03-22T00:00:00Z","advisories":["RHSA-2019:1024","RHSA-2019:1143"],"bugzilla":"1695973","bugzilla_description":"CVE-2019-10063 flatpak: Sandbox bypass via IOCSTI (incomplete fix for CVE-2017-5226)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["flatpak-0:1.0.2-5.el7_6","flatpak-0:1.0.6-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10063.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8308","severity":"important","public_date":"2019-02-11T18:47:00Z","advisories":["RHSA-2019:0375"],"bugzilla":"1675070","bugzilla_description":"CVE-2019-8308 flatpak: potential /proc based sandbox escape","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["flatpak-0:1.0.2-4.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8308.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-6560","severity":"moderate","public_date":"2018-01-29T00:00:00Z","advisories":["RHSA-2018:2766"],"bugzilla":"1542207","bugzilla_description":"CVE-2018-6560 flatpak: sandbox escape in D-Bus filtering by a crafted authentication handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":["flatpak-0:0.8.8-4.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6560.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-9780","severity":"moderate","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1465025","bugzilla_description":"CVE-2017-9780 flatpak: Privilege escalation via setuid/world-writable file permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9780.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flex-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flex-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flex-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flex-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flex-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flex-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flex_security_api_results.json
new file mode 100644
index 0000000..632cd51
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flex_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-6293","severity":"low","public_date":"2019-01-09T00:00:00Z","advisories":[],"bugzilla":"1667864","bugzilla_description":"CVE-2019-6293 flex: Recursive calls in the function mark_beginning_as_normal resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6293.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6354","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":[],"bugzilla":"1360743","bugzilla_description":"CVE-2016-6354 flex: buffer overflow in generated code (yy_get_next_buffer)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6354.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flite-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flite-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flite-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flite_security_api_results.json
new file mode 100644
index 0000000..273361f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flite_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-0027","severity":"moderate","public_date":"2014-01-10T00:00:00Z","advisories":[],"bugzilla":"1048678","bugzilla_description":"CVE-2014-0027 flite: insecure temporary file use","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0027.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fltk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fltk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fltk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fltk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fltk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fltk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flute_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flute_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/flute_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontawesome-fonts-web_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontawesome-fonts-web_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontawesome-fonts-web_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontawesome-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontawesome-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontawesome-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontconfig-devel-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontconfig-devel-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontconfig-devel-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontconfig-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontconfig-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontconfig-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontconfig_security_api_results.json
new file mode 100644
index 0000000..ba2bd4b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontconfig_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-5384","severity":"moderate","public_date":"2016-08-05T00:00:00Z","advisories":["RHSA-2016:2601"],"bugzilla":"1350891","bugzilla_description":"CVE-2016-5384 fontconfig: Possible double free due to insufficiently validated cache files","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["fontconfig-0:2.10.95-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5384.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontforge_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontforge_security_api_results.json
new file mode 100644
index 0000000..9dbb8fa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontforge_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-5496","severity":"low","public_date":"2020-01-07T00:00:00Z","advisories":[],"bugzilla":"1788493","bugzilla_description":"CVE-2020-5496 fontforge: heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5496.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-5395","severity":"moderate","public_date":"2020-01-03T00:00:00Z","advisories":["RHSA-2020:3966","RHSA-2020:1921"],"bugzilla":"1790041","bugzilla_description":"CVE-2020-5395 fontforge: out-of-bounds write in SFD_GetFontMetaData function in sfd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["fontforge-0:20120731b-13.el7","fontforge-0:20170731-14.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5395.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-15785","severity":"low","public_date":"2019-09-11T00:00:00Z","advisories":[],"bugzilla":"1751048","bugzilla_description":"CVE-2019-15785 fontforge: buffer overflow in PrefsUI_LoadPrefs in prefs.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15785.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2017-17521","severity":"moderate","public_date":"2017-12-14T00:00:00Z","advisories":[],"bugzilla":"1526142","bugzilla_description":"CVE-2017-17521 fontforge: Command injetion in help function uiutil.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17521.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-11568","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1475384","bugzilla_description":"CVE-2017-11568 fontforge: Heap-buffer over-read in PSCharStringToSplines function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11568.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11569","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1475386","bugzilla_description":"CVE-2017-11569 fontforge: Heap-buffer over-read in readttfcopyrights function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11569.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11570","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1475388","bugzilla_description":"CVE-2017-11570 fontforge: Buffer over-read in umodenc function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11570.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11571","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1475389","bugzilla_description":"CVE-2017-11571 fontforge: Stack-buffer overflow in addnibble function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11571.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11572","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1475390","bugzilla_description":"CVE-2017-11572 fontforge: Heap-based buffer over-read in readcfftopidcts function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11572.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11573","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1475391","bugzilla_description":"CVE-2017-11573 fontforge: Buffer over-read in ValidatePostScriptFontName function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11573.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11574","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1475392","bugzilla_description":"CVE-2017-11574 fontforge: Heap-based buffer overflow in readcffset function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11574.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11575","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1475393","bugzilla_description":"CVE-2017-11575 fontforge: Buffer over-read in strnmatch function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11575.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11576","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1475396","bugzilla_description":"CVE-2017-11576 fontforge: Does not ensure a positive size in a weight vector memcpy call in readcfftopdict function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11576.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11577","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1475397","bugzilla_description":"CVE-2017-11577 fontforge: Buffer over-read in getsid function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11577.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2010-4259","severity":"low","public_date":"2010-12-01T00:00:00Z","advisories":[],"bugzilla":"659359","bugzilla_description":"CVE-2010-4259 FontForge: Stack-based buffer overflow by processing specially-crafted CHARSET_REGISTRY font file header","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4259.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontpackages-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontpackages-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontpackages-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontpackages-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontpackages-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fontpackages-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fonts-tweak-tool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fonts-tweak-tool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fonts-tweak-tool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic-db-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic-db-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic-db-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic-db-ppds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic-db-ppds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic-db-ppds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic-db_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic-db_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic-db_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic_security_api_results.json
new file mode 100644
index 0000000..fde8b02
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/foomatic_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-8560","severity":"moderate","public_date":"2015-12-12T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1291227","bugzilla_description":"CVE-2015-8560 cups-filters: foomatic-rip did not consider semicolon as illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8560.json"},{"CVE":"CVE-2015-8327","severity":"moderate","public_date":"2015-11-26T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1287523","bugzilla_description":"CVE-2015-8327 cups-filters: foomatic-rip did not consider the back tick as an illegal shell escape character","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8327.json"},{"CVE":"CVE-2010-5325","severity":"moderate","public_date":"2015-05-05T00:00:00Z","advisories":["RHSA-2016:0491"],"bugzilla":"1218297","bugzilla_description":"CVE-2010-5325 foomatic: potential remote arbitrary code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-131->CWE-122","affected_packages":["foomatic-0:4.0.4-5.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5325.json"},{"CVE":"CVE-2013-6500","severity":"moderate","public_date":"2015-02-04T00:00:00Z","advisories":[],"bugzilla":"995090","bugzilla_description":"CVE-2013-6500 foomatic (foomatic-extract-text): Arbitrary code execution due to insecure Perl module loading from CWD","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6500.json"},{"CVE":"CVE-2011-2923","severity":"low","public_date":"2011-07-28T00:00:00Z","advisories":[],"bugzilla":"726426","bugzilla_description":"CVE-2011-2923 CVE-2011-2924 foomatic: foomatic-rip (debug mode) insecure temporary file use in renderer command line by processing PostScript data","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2923.json"},{"CVE":"CVE-2011-2924","severity":"low","public_date":"2011-07-28T00:00:00Z","advisories":[],"bugzilla":"726426","bugzilla_description":"CVE-2011-2923 CVE-2011-2924 foomatic: foomatic-rip (debug mode) insecure temporary file use in renderer command line by processing PostScript data","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2924.json"},{"CVE":"CVE-2011-2697","severity":"moderate","public_date":"2011-06-07T00:00:00Z","advisories":["RHSA-2011:1109"],"bugzilla":"721001","bugzilla_description":"CVE-2011-2697 foomatic: Improper sanitization of command line option in foomatic-rip","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["foomatic-0:3.0.2-38.3.el5_7.1","foomatic-0:3.0.2-3.2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2697.json"},{"CVE":"CVE-2011-2964","severity":"moderate","public_date":"2011-06-07T00:00:00Z","advisories":["RHSA-2011:1110"],"bugzilla":"727016","bugzilla_description":"CVE-2011-2964 foomatic: Improper sanitization of command line option in foomatic-rip (foomatic.c)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["foomatic-0:4.0.4-1.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2964.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/forge-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/forge-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/forge-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fprintd-pam_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fprintd-pam_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fprintd-pam_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fprintd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fprintd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fprintd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeglut-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeglut-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeglut-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeglut_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeglut_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeglut_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-bmc-watchdog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-bmc-watchdog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-bmc-watchdog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-ipmidetectd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-ipmidetectd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-ipmidetectd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-ipmiseld_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-ipmiseld_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi-ipmiseld_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi_security_api_results.json
new file mode 100644
index 0000000..5b33abb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeipmi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4786","severity":"moderate","public_date":"2013-07-08T00:00:00Z","advisories":[],"bugzilla":"1326638","bugzilla_description":"CVE-2013-4786 OpenIPMI, freeipmi: Leakage of password hashes via RAKP authentication","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4786.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-krb5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-krb5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-krb5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-ldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-ldap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-ldap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-perl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-perl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-postgresql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-postgresql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-postgresql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-rest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-rest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-rest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-sqlite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-sqlite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-sqlite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-unixODBC_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-unixODBC_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-unixODBC_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius_security_api_results.json
new file mode 100644
index 0000000..525d59c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freeradius_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17185","severity":"moderate","public_date":"2019-11-14T00:00:00Z","advisories":["RHSA-2020:3984"],"bugzilla":"1816680","bugzilla_description":"CVE-2019-17185 freeradius: eap-pwd: DoS issues due to multithreaded BN_CTX access","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-567","affected_packages":["freeradius-0:3.0.13-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17185.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13456","severity":"moderate","public_date":"2019-08-03T00:00:00Z","advisories":["RHSA-2020:3984","RHSA-2020:1672"],"bugzilla":"1737663","bugzilla_description":"CVE-2019-13456 freeradius: eap-pwd: Information leak due to aborting when needing more than 10 iterations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["freeradius-0:3.0.13-15.el7","freeradius:3.0-8020020191122172113.31e953cd"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13456.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-10143","severity":"moderate","public_date":"2019-05-01T00:00:00Z","advisories":["RHSA-2020:3984","RHSA-2019:3353"],"bugzilla":"1705340","bugzilla_description":"CVE-2019-10143 freeradius: privilege escalation due to insecure logrotate configuration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-266|CWE-250)","affected_packages":["freeradius-0:3.0.13-15.el7","freeradius:3.0-8010020190614154208.16b3ab4d"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10143.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-11235","severity":"important","public_date":"2019-04-10T15:00:00Z","advisories":["RHSA-2019:1131","RHSA-2019:1142"],"bugzilla":"1695748","bugzilla_description":"CVE-2019-11235 freeradius: eap-pwd: authentication bypass via an invalid curve attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["freeradius-0:3.0.13-10.el7_6","freeradius:3.0-8000020190425181943.75ec4169"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11235.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2019-11234","severity":"moderate","public_date":"2019-04-10T15:00:00Z","advisories":["RHSA-2019:1131","RHSA-2019:1142"],"bugzilla":"1695783","bugzilla_description":"CVE-2019-11234 freeradius: eap-pwd: fake authentication using reflection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["freeradius-0:3.0.13-10.el7_6","freeradius:3.0-8000020190425181943.75ec4169"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11234.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2017-10978","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:1759","RHSA-2017:2389"],"bugzilla":"1468487","bugzilla_description":"CVE-2017-10978 freeradius: Out-of-bounds read/write due to improper output buffer size check in make_secret()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["freeradius-0:2.2.6-7.el6_9","freeradius-0:3.0.13-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10979","severity":"important","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:1759"],"bugzilla":"1468490","bugzilla_description":"CVE-2017-10979 freeradius: Out-of-bounds write in rad_coalesce()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["freeradius-0:2.2.6-7.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10979.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-10980","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:1759"],"bugzilla":"1468493","bugzilla_description":"CVE-2017-10980 freeradius: Memory leak in decode_tlv()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["freeradius-0:2.2.6-7.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10980.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10981","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:1759"],"bugzilla":"1468495","bugzilla_description":"CVE-2017-10981 freeradius: Memory leak in fr_dhcp_decode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["freeradius-0:2.2.6-7.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10982","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:1759"],"bugzilla":"1468498","bugzilla_description":"CVE-2017-10982 freeradius: Out-of-bounds read in fr_dhcp_decode_options()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freeradius-0:2.2.6-7.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10982.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10983","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:1759","RHSA-2017:2389"],"bugzilla":"1468503","bugzilla_description":"CVE-2017-10983 freeradius: Out-of-bounds read in fr_dhcp_decode() when decoding option 63","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freeradius-0:2.2.6-7.el6_9","freeradius-0:3.0.13-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10983.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10984","severity":"important","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:2389"],"bugzilla":"1468549","bugzilla_description":"CVE-2017-10984 freeradius: Out-of-bounds write in data2vp_wimax()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["freeradius-0:3.0.13-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10984.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-10985","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:2389"],"bugzilla":"1468550","bugzilla_description":"CVE-2017-10985 freeradius: Infinite loop and memory exhaustion with 'concat' attributes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["freeradius-0:3.0.13-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10985.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10986","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:2389"],"bugzilla":"1468551","bugzilla_description":"CVE-2017-10986 freeradius: Infinite read in dhcp_attr2vp()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freeradius-0:3.0.13-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10986.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10987","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:2389"],"bugzilla":"1468552","bugzilla_description":"CVE-2017-10987 freeradius: Buffer over-read in fr_dhcp_decode_suboptions()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freeradius-0:3.0.13-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10987.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-10988","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1468555","bugzilla_description":"CVE-2017-10988 freeradius: Incorrectly created 'signed' attributes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10988.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-9148","severity":"important","public_date":"2017-05-08T00:00:00Z","advisories":["RHSA-2017:1581"],"bugzilla":"1456697","bugzilla_description":"CVE-2017-9148 freeradius: TLS resumption authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["freeradius-0:3.0.4-8.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9148.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2015-4680","severity":"moderate","public_date":"2015-06-22T00:00:00Z","advisories":[],"bugzilla":"1234975","bugzilla_description":"CVE-2015-4680 freeradius: insufficent CRL application","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-299","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4680.json"},{"CVE":"CVE-2015-8762","severity":"moderate","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1218467","bugzilla_description":"CVE-2015-8762 CVE-2015-8763 CVE-2015-8764 freeradius: the EAP-PWD module performs insufficient validation on packets received from an EAP peer","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8762.json"},{"CVE":"CVE-2015-8763","severity":"moderate","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1218467","bugzilla_description":"CVE-2015-8762 CVE-2015-8763 CVE-2015-8764 freeradius: the EAP-PWD module performs insufficient validation on packets received from an EAP peer","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8763.json"},{"CVE":"CVE-2015-8764","severity":"moderate","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1218467","bugzilla_description":"CVE-2015-8762 CVE-2015-8763 CVE-2015-8764 freeradius: the EAP-PWD module performs insufficient validation on packets received from an EAP peer","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8764.json"},{"CVE":"CVE-2014-2015","severity":"moderate","public_date":"2014-02-12T00:00:00Z","advisories":["RHSA-2015:1287"],"bugzilla":"1066761","bugzilla_description":"CVE-2014-2015 freeradius: stack-based buffer overflow flaw in rlm_pap module","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["freeradius-0:2.2.6-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2015.json"},{"CVE":"CVE-2012-3547","severity":"moderate","public_date":"2012-09-10T00:00:00Z","advisories":["RHSA-2012:1327","RHSA-2012:1326"],"bugzilla":"852752","bugzilla_description":"CVE-2012-3547 freeradius: stack-based buffer overflow via long expiration date fields in client X509 certificates","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["freeradius-0:2.1.12-4.el6_3","freeradius2-0:2.1.12-4.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3547.json"},{"CVE":"CVE-2011-4966","severity":"low","public_date":"2011-11-14T00:00:00Z","advisories":["RHBA-2012:0881","RHSA-2013:0134"],"bugzilla":"879045","bugzilla_description":"CVE-2011-4966 freeradius: does not respect expired passwords when using the unix module","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["freeradius2-0:2.1.12-5.el5","freeradius-0:2.1.12-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4966.json"},{"CVE":"CVE-2011-2701","severity":"moderate","public_date":"2011-07-15T00:00:00Z","advisories":[],"bugzilla":"724815","bugzilla_description":"CVE-2011-2701 freeradius: OCSP does not verify status of certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2701.json"},{"CVE":"CVE-2010-3696","severity":"low","public_date":"2010-05-30T00:00:00Z","advisories":[],"bugzilla":"639390","bugzilla_description":"CVE-2010-3696 freeradius: DoS via certain DHCP requests","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3696.json"},{"CVE":"CVE-2010-3697","severity":null,"public_date":"2010-05-30T00:00:00Z","advisories":[],"bugzilla":"639397","bugzilla_description":"CVE-2010-3697 freeradius: crash when processing requests queued for more than 30 seconds","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3697.json"},{"CVE":"CVE-2009-3111","severity":"moderate","public_date":"2009-09-07T00:00:00Z","advisories":["RHSA-2009:1451"],"bugzilla":"521912","bugzilla_description":"CVE-2009-3111 FreeRADIUS: Missing check for Tunnel-Password attributes with zero length (DoS) -- re-appearance of CVE-2003-0967","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["freeradius-0:1.1.3-1.5.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3111.json"},{"CVE":"CVE-2007-2028","severity":"moderate","public_date":"2007-04-12T00:00:00Z","advisories":["RHSA-2007:0338"],"bugzilla":"1618307","bugzilla_description":"CVE-2007-2028 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-2.RHEL3.4","freeradius-0:1.1.3-1.2.el5","freeradius-0:1.0.1-3.RHEL4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2028.json"},{"CVE":"CVE-2006-1354","severity":"important","public_date":"2006-03-20T00:00:00Z","advisories":["RHSA-2006:0271"],"bugzilla":"1618034","bugzilla_description":"CVE-2006-1354 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-2.RHEL3.2","freeradius-0:1.0.1-3.RHEL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1354.json"},{"CVE":"CVE-2005-4744","severity":"low","public_date":"2005-09-09T00:00:00Z","advisories":["RHSA-2006:0271"],"bugzilla":"1617862","bugzilla_description":"CVE-2005-4744 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-2.RHEL3.2","freeradius-0:1.0.1-3.RHEL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4744.json"},{"CVE":"CVE-2005-1454","severity":"moderate","public_date":"2005-05-04T00:00:00Z","advisories":["RHSA-2005:524"],"bugzilla":"1617634","bugzilla_description":"CVE-2005-1454 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-1.1.RHEL3","freeradius-0:1.0.1-3.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1454.json"},{"CVE":"CVE-2005-1455","severity":"moderate","public_date":"2005-05-04T00:00:00Z","advisories":["RHSA-2005:524"],"bugzilla":"1617635","bugzilla_description":"CVE-2005-1455 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-1.1.RHEL3","freeradius-0:1.0.1-3.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1455.json"},{"CVE":"CVE-2004-0938","severity":null,"public_date":"2004-09-20T00:00:00Z","advisories":["RHSA-2004:609"],"bugzilla":"1617325","bugzilla_description":"CVE-2004-0938 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-1.RHEL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0938.json"},{"CVE":"CVE-2004-0960","severity":null,"public_date":"2004-09-20T00:00:00Z","advisories":["RHSA-2004:609"],"bugzilla":"1617333","bugzilla_description":"CVE-2004-0960 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-1.RHEL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0960.json"},{"CVE":"CVE-2004-0961","severity":null,"public_date":"2004-09-20T00:00:00Z","advisories":["RHSA-2004:609"],"bugzilla":"1617334","bugzilla_description":"CVE-2004-0961 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:1.0.1-1.RHEL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0961.json"},{"CVE":"CVE-2003-0967","severity":"moderate","public_date":"2003-11-20T00:00:00Z","advisories":["RHSA-2003:386"],"bugzilla":"1617109","bugzilla_description":"CVE-2003-0967 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freeradius-0:0.9.3-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0967.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freerdp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freerdp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freerdp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freerdp-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freerdp-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freerdp-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freerdp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freerdp_security_api_results.json
new file mode 100644
index 0000000..ac8d47b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freerdp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15103","severity":"moderate","public_date":"2020-07-20T00:00:00Z","advisories":[],"bugzilla":"1858909","bugzilla_description":"CVE-2020-15103 freerdp: integer overflow due to missing input sanitation in rdpegfx channel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15103.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2020-11098","severity":"low","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854843","bugzilla_description":"CVE-2020-11098 freerdp: out-of-bound read in glyph_cache_put","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-129->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11098.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-11096","severity":"low","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854847","bugzilla_description":"CVE-2020-11096 freerdp: out-of-bound read in update_read_cache_bitmap_v3_order","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-129->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11096.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-11095","severity":"moderate","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854850","bugzilla_description":"CVE-2020-11095 freerdp: out of bound reads resulting in accessing memory location  outside of static array PRIMARY_DRAWING_ORDER_FIELD_BYTES.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11095.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-4032","severity":"moderate","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854871","bugzilla_description":"CVE-2020-4032 freerdp: integer casting vulnerability in update_recv_secondary_order","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-681","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-4032.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-4033","severity":"low","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854876","bugzilla_description":"CVE-2020-4033 freerdp:  out-of-bounds read in RLEDECOMPRESS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-4033.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-4031","severity":"moderate","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854889","bugzilla_description":"CVE-2020-4031 freerdp: use-after-free in gdi_SelectObject","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-4031.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2020-4030","severity":"moderate","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854895","bugzilla_description":"CVE-2020-4030 freerdp: out of bounds read in TrioParse","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-4030.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-11099","severity":"moderate","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854899","bugzilla_description":"CVE-2020-11099 freerdp: out of bounds read in license_read_new_or_upgrade_license_packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11099.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-11097","severity":"moderate","public_date":"2020-06-22T00:00:00Z","advisories":[],"bugzilla":"1854910","bugzilla_description":"CVE-2020-11097 freerdp: out of bounds read in PRIMARY_DRAWING_ORDER_FIELD_BYTES","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-129->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11097.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-11085","severity":"low","public_date":"2020-05-29T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1844161","bugzilla_description":"CVE-2020-11085 freerdp: out-of-bounds read in cliprdr_read_format_list function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805->CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11085.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2020-11086","severity":"low","public_date":"2020-05-29T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1844166","bugzilla_description":"CVE-2020-11086 freerdp: out-of-bounds read in ntlm_read_ntlm_v2_client_challenge function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11086.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-11087","severity":"low","public_date":"2020-05-29T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1844171","bugzilla_description":"CVE-2020-11087 freerdp: out-of-bounds read in ntlm_read_AuthenticateMessage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11087.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-11088","severity":"low","public_date":"2020-05-29T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1844177","bugzilla_description":"CVE-2020-11088 freerdp: out-of-bounds read in ntlm_read_NegotiateMessage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11088.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-11089","severity":"low","public_date":"2020-05-29T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1844184","bugzilla_description":"CVE-2020-11089 freerdp: out-of-bounds read in irp functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11089.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2020-13396","severity":"moderate","public_date":"2020-05-22T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1841189","bugzilla_description":"CVE-2020-13396 freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13396.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-13397","severity":"moderate","public_date":"2020-05-22T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1841196","bugzilla_description":"CVE-2020-13397 freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13397.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2020-13398","severity":"important","public_date":"2020-05-22T00:00:00Z","advisories":["RHSA-2020:2406","RHSA-2020:2417","RHSA-2020:2407","RHSA-2020:2415","RHSA-2020:2405"],"bugzilla":"1841199","bugzilla_description":"CVE-2020-13398 freerdp: Out-of-bounds write in crypto_rsa_common in libfreerdp/crypto/crypto.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805->CWE-122->CWE-787","affected_packages":["freerdp-0:1.0.2-7.el6_10","freerdp-2:2.0.0-46.rc4.el8_2.2","freerdp-2:2.0.0-46.rc4.el8_1.2","freerdp-2:2.0.0-46.rc4.el8_0.2","freerdp-0:2.0.0-4.rc4.el7_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13398.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"8.3"},{"CVE":"CVE-2020-11047","severity":"moderate","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835762","bugzilla_description":"CVE-2020-11047 freerdp: out-of-bounds read in autodetect_recv_bandwidth_measure_results function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11047.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-11048","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835766","bugzilla_description":"CVE-2020-11048 freerdp: out-of-bounds read could result in aborting the session","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11048.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-11049","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835772","bugzilla_description":"CVE-2020-11049 freerdp: out-of-bound read of client memory that is then passed on to the protocol parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11049.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-11058","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835779","bugzilla_description":"CVE-2020-11058 freerdp: stream out-of-bounds seek in rdp_read_font_capability_set could lead to out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11058.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-11521","severity":"important","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:2334","RHSA-2020:2335","RHSA-2020:2354","RHSA-2020:2336"],"bugzilla":"1836214","bugzilla_description":"CVE-2020-11521 freerdp: Out-of-bounds write in planar.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.0.0-4.rc4.el7_8","freerdp-2:2.0.0-46.rc4.el8_0.1","freerdp-2:2.0.0-46.rc4.el8_2.1","freerdp-2:2.0.0-46.rc4.el8_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11521.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2020-11522","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1836223","bugzilla_description":"CVE-2020-11522 freerdp: out-of-bounds read in gdi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11522.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-11524","severity":"important","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:2334","RHSA-2020:2335","RHSA-2020:2354","RHSA-2020:2336"],"bugzilla":"1836226","bugzilla_description":"CVE-2020-11524 freerdp: Out-of-bounds write in interleaved.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.0.0-4.rc4.el7_8","freerdp-2:2.0.0-46.rc4.el8_0.1","freerdp-2:2.0.0-46.rc4.el8_2.1","freerdp-2:2.0.0-46.rc4.el8_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11524.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2020-11523","severity":"important","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:2334","RHSA-2020:2335","RHSA-2020:2354","RHSA-2020:2336"],"bugzilla":"1836234","bugzilla_description":"CVE-2020-11523 freerdp: Integer overflow in region.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["freerdp-0:2.0.0-4.rc4.el7_8","freerdp-2:2.0.0-46.rc4.el8_0.1","freerdp-2:2.0.0-46.rc4.el8_2.1","freerdp-2:2.0.0-46.rc4.el8_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11523.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2020-11525","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1836239","bugzilla_description":"CVE-2020-11525 freerdp: out-of-bounds read in bitmap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11525.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-11526","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1836247","bugzilla_description":"CVE-2020-11526 freerdp: Stream pointer out of bounds in update_recv_secondary_order could lead out of bounds read later","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11526.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-11017","severity":"moderate","public_date":"2020-04-09T00:00:00Z","advisories":[],"bugzilla":"1848000","bugzilla_description":"CVE-2020-11017 freerdp:  Double free in cliprdr_server_receive_capabilities could result in data corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11017.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-11018","severity":"moderate","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1848008","bugzilla_description":"CVE-2020-11018 freerdp: Out of bound read in cliprdr_server_receive_capabilities","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11018.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-11019","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1848012","bugzilla_description":"CVE-2020-11019 freerdp: Out of bound read in update_recv could result in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11019.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-11038","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1848018","bugzilla_description":"CVE-2020-11038 freerdp: Integer overflow in VIDEO channel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11038.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-11039","severity":"moderate","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1848022","bugzilla_description":"CVE-2020-11039 freerdp: Out of bound read/write in usb redirection channel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190->CWE-770->(CWE-125|CWE-787)","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11039.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"6.8"},{"CVE":"CVE-2020-11040","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1848029","bugzilla_description":"CVE-2020-11040 freerdp: Out of bound access in clear_decompress_subcode_rlex","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.7"},{"CVE":"CVE-2020-11041","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1848034","bugzilla_description":"CVE-2020-11041 freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-129->CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11041.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.7"},{"CVE":"CVE-2020-11043","severity":"low","public_date":"2020-04-09T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1848038","bugzilla_description":"CVE-2020-11043 freerdp: out of bound read in rfx_process_message_tileset","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-805->CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11043.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.7"},{"CVE":"CVE-2020-11042","severity":"moderate","public_date":"2020-03-31T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835382","bugzilla_description":"CVE-2020-11042 freerdp: out-of-bounds read in update_read_icon_info function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11042.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-11044","severity":"low","public_date":"2020-03-31T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835391","bugzilla_description":"CVE-2020-11044 freerdp: double free in update_read_cache_bitmap_v3_order function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11044.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-11045","severity":"low","public_date":"2020-03-30T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835399","bugzilla_description":"CVE-2020-11045 freerdp: out of bounds read in update_read_bitmap_data function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11045.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2020-11046","severity":"low","public_date":"2020-03-30T00:00:00Z","advisories":["RHSA-2020:4031"],"bugzilla":"1835403","bugzilla_description":"CVE-2020-11046 freerdp: out of bounds seek in update_read_synchronize function could lead out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":["freerdp-0:2.1.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11046.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2019-17177","severity":"low","public_date":"2019-10-04T00:00:00Z","advisories":[],"bugzilla":"1801722","bugzilla_description":"CVE-2019-17177 freerdp: supplied realloc pointer leads to memory leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17177.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-8784","severity":"moderate","public_date":"2018-10-22T00:00:00Z","advisories":[],"bugzilla":"1671356","bugzilla_description":"CVE-2018-8784 freerdp: Heap-based buffer overflow in zgfx_decompress_segment() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-8785","severity":"moderate","public_date":"2018-10-22T00:00:00Z","advisories":[],"bugzilla":"1671358","bugzilla_description":"CVE-2018-8785 freerdp: Heap-based buffer overflow in zgfx_decompress() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-8786","severity":"important","public_date":"2018-10-22T00:00:00Z","advisories":["RHSA-2019:0697"],"bugzilla":"1671359","bugzilla_description":"CVE-2018-8786 freerdp: Integer truncation leading to heap-based buffer overflow in update_read_bitmap_update() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["freerdp-0:1.0.2-15.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-8787","severity":"important","public_date":"2018-10-22T00:00:00Z","advisories":["RHSA-2019:0697"],"bugzilla":"1671361","bugzilla_description":"CVE-2018-8787 freerdp: Integer overflow leading to heap-based buffer overflow in gdi_Bitmap_Decompress() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["freerdp-0:1.0.2-15.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8787.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-8788","severity":"important","public_date":"2018-10-22T00:00:00Z","advisories":["RHSA-2019:0697"],"bugzilla":"1671363","bugzilla_description":"CVE-2018-8788 freerdp: Out-of-bounds write in nsc_rle_decode() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["freerdp-0:1.0.2-15.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8788.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-8789","severity":"moderate","public_date":"2018-10-22T00:00:00Z","advisories":[],"bugzilla":"1671367","bugzilla_description":"CVE-2018-8789 freerdp: Several out-of-bounds reads in NTLM authentication module resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8789.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000852","severity":"low","public_date":"2018-09-19T00:00:00Z","advisories":["RHSA-2019:2157"],"bugzilla":"1661640","bugzilla_description":"CVE-2018-1000852 freerdp: out of bounds read in drdynvc_process_capability_request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freerdp-0:2.0.0-1.rc4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000852.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-2834","severity":"moderate","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1475224","bugzilla_description":"CVE-2017-2834 freerdp: Out-of-bounds write in license_recv()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-129","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2834.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-2835","severity":"moderate","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1475233","bugzilla_description":"CVE-2017-2835 freerdp: Out-of-bounds write in rdp_recv_tpkt_pdu","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-129","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2835.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-2839","severity":"low","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1475234","bugzilla_description":"CVE-2017-2839 freerdp: Rdp Client License Read Challenge Packet Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-2838","severity":"low","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1475236","bugzilla_description":"CVE-2017-2838 freerdp: Rdp Client License Read Product Info Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-2837","severity":"low","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1475239","bugzilla_description":"CVE-2017-2837 freerdp: Rdp Client GCC Read Server Security Data Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2837.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-2836","severity":"low","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1475240","bugzilla_description":"CVE-2017-2836 freerdp: Rdp Client Read Server Proprietary Certificate Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2836.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2014-0250","severity":"moderate","public_date":"2014-05-28T00:00:00Z","advisories":[],"bugzilla":"998934","bugzilla_description":"CVE-2014-0250 freerdp: integer overflows in memory allocations in client/X11/xf_graphics.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0250.json"},{"CVE":"CVE-2014-0791","severity":"moderate","public_date":"2014-01-02T00:00:00Z","advisories":[],"bugzilla":"998941","bugzilla_description":"CVE-2014-0791 freerdp: integer overflow in heap allocation in license_read_scope_list()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0791.json"},{"CVE":"CVE-2013-4118","severity":"moderate","public_date":"2013-01-10T00:00:00Z","advisories":[],"bugzilla":"983078","bugzilla_description":"CVE-2013-4119 freerdp: Multiple security fixes in  versions after 1.1.0-beta1","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4118.json"},{"CVE":"CVE-2013-4119","severity":"moderate","public_date":"2013-01-10T00:00:00Z","advisories":[],"bugzilla":"983078","bugzilla_description":"CVE-2013-4119 freerdp: Multiple security fixes in  versions after 1.1.0-beta1","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4119.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freetype-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freetype-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freetype-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freetype_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freetype_security_api_results.json
new file mode 100644
index 0000000..b58890e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/freetype_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15999","severity":"moderate","public_date":"2020-10-19T00:00:00Z","advisories":[],"bugzilla":"1890210","bugzilla_description":"CVE-2020-15999 freetype: heap-based buffer overflow via malformed ttf files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15999.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-9381","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2018:3140","RHSA-2019:4254"],"bugzilla":"1752788","bugzilla_description":"CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["freetype-0:2.8-12.el7","freetype-0:2.3.11-19.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9381.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2015-9382","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2018:3140","RHSA-2019:4254"],"bugzilla":"1763609","bugzilla_description":"CVE-2015-9382 freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["freetype-0:2.8-12.el7","freetype-0:2.3.11-19.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9382.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-9383","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1763613","bugzilla_description":"CVE-2015-9383 freetype: a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c may lead to a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9383.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2015-9290","severity":"low","public_date":"2019-07-30T00:00:00Z","advisories":[],"bugzilla":"1741802","bugzilla_description":"CVE-2015-9290 freetype: buffer over-read in function T1_Get_Private_Dict in type1/t1parse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9290.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2018-6942","severity":"low","public_date":"2018-01-27T00:00:00Z","advisories":[],"bugzilla":"1544771","bugzilla_description":"CVE-2018-6942 freetype: NULL pointer dereference in the Ins_GETVARIATION() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8287","severity":"moderate","public_date":"2017-03-26T00:00:00Z","advisories":[],"bugzilla":"1446073","bugzilla_description":"CVE-2017-8287 freetype: heap-based buffer overflow related to the t1_builder_close_contour function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8287.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-8105","severity":"moderate","public_date":"2017-03-24T00:00:00Z","advisories":[],"bugzilla":"1446500","bugzilla_description":"CVE-2017-8105 freetype: heap-based buffer overflow related to the t1_decoder_parse_charstrings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8105.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-7857","severity":"moderate","public_date":"2017-03-08T00:00:00Z","advisories":[],"bugzilla":"1444898","bugzilla_description":"CVE-2017-7857 freetype: heap-based buffer overflow related to the TT_Get_MM_Var function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7858","severity":"moderate","public_date":"2017-03-07T00:00:00Z","advisories":[],"bugzilla":"1444904","bugzilla_description":"CVE-2017-7858 freetype: out-of-bounds write related to the TT_Get_MM_Var and sfnt_init_face functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7858.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7864","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":[],"bugzilla":"1444911","bugzilla_description":"CVE-2017-7864 freetype: heap-based buffer overflow related to the tt_size_reset function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-10328","severity":"moderate","public_date":"2016-12-23T00:00:00Z","advisories":[],"bugzilla":"1444895","bugzilla_description":"CVE-2016-10328 freetype: heap-based buffer overflow related to the cff_parser_run function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10328.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-10244","severity":"moderate","public_date":"2016-08-25T00:00:00Z","advisories":[],"bugzilla":"1429965","bugzilla_description":"CVE-2016-10244 freetype: parse_charstrings function in type1/t1load.c does not ensure that a font contains a glyph name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2014-9674","severity":"important","public_date":"2015-02-08T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191190","bugzilla_description":"CVE-2014-9674 freetype: multiple integer overflows Mac_Read_POST_Resource() leading to heap-based buffer overflows","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9674.json"},{"CVE":"CVE-2014-9675","severity":"low","public_date":"2015-02-08T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191192","bugzilla_description":"CVE-2014-9675 freetype: information leak in _bdf_add_property()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9675.json"},{"CVE":"CVE-2014-9656","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191078","bugzilla_description":"CVE-2014-9656 freetype: integer underflow in the tt_sbit_decoder_load_image()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9656.json"},{"CVE":"CVE-2014-9657","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191079","bugzilla_description":"CVE-2014-9657 freetype: off-by-one buffer over-read in tt_face_load_hdmx()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9657.json"},{"CVE":"CVE-2014-9658","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191080","bugzilla_description":"CVE-2014-9658 freetype: buffer over-read and integer underflow in tt_face_load_kern()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-190->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9658.json"},{"CVE":"CVE-2014-9659","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191081","bugzilla_description":"CVE-2014-9659 freetype: stack-based buffer overflow in cff/cf2intrp.c in the CFF CharString interpreter","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9659.json"},{"CVE":"CVE-2014-9660","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191082","bugzilla_description":"CVE-2014-9660 freetype: missing ENDCHAR NULL pointer dereference in the _bdf_parse_glyphs()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9660.json"},{"CVE":"CVE-2014-9661","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191083","bugzilla_description":"CVE-2014-9661 freetype: out of bounds read in Type42 font parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9661.json"},{"CVE":"CVE-2014-9662","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191084","bugzilla_description":"CVE-2014-9662 freetype: heap-based buffer overflow in cff/cf2ft.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9662.json"},{"CVE":"CVE-2014-9663","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191085","bugzilla_description":"CVE-2014-9663 freetype: out-of-bounds read in tt_cmap4_validate()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9663.json"},{"CVE":"CVE-2014-9664","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191086","bugzilla_description":"CVE-2014-9664 freetype: off-by-one buffer over-read in parse_charstrings() / t42_parse_charstrings()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9664.json"},{"CVE":"CVE-2014-9665","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191087","bugzilla_description":"CVE-2014-9665 freetype: integer overflow leading to heap-based buffer overflow in Load_SBit_Png()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9665.json"},{"CVE":"CVE-2014-9666","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191089","bugzilla_description":"CVE-2014-9666 freetype: integer overflow in tt_sbit_decoder_init() leading to out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9666.json"},{"CVE":"CVE-2014-9667","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191090","bugzilla_description":"CVE-2014-9667 freetype: integer overflow in tt_face_load_font_dir() leading to out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9667.json"},{"CVE":"CVE-2014-9668","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191091","bugzilla_description":"CVE-2014-9668 freetype: integer overflow in woff_open_font() leading to heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9668.json"},{"CVE":"CVE-2014-9669","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191092","bugzilla_description":"CVE-2014-9669 freetype: multiple integer overflows leading to buffer over-reads in cmap handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9669.json"},{"CVE":"CVE-2014-9670","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191093","bugzilla_description":"CVE-2014-9670 freetype: integer overflow in pcf_get_encodings() leading to NULL pointer dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-476","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9670.json"},{"CVE":"CVE-2014-9671","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191094","bugzilla_description":"CVE-2014-9671 freetype: integer overflow in pcf_get_properties() leading to NULL pointer dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-476","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9671.json"},{"CVE":"CVE-2014-9672","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191095","bugzilla_description":"CVE-2014-9672 freetype: Array index error in the parse_fond function in base/ftmac.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-129","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9672.json"},{"CVE":"CVE-2014-9673","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191096","bugzilla_description":"CVE-2014-9673 freetype: integer signedness error in Mac_Read_POST_Resource() leading to heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-122","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9673.json"},{"CVE":"CVE-2014-2240","severity":"important","public_date":"2014-03-07T00:00:00Z","advisories":[],"bugzilla":"1074646","bugzilla_description":"CVE-2014-2240 CVE-2014-2241 freetype: OOB stack-based read/write in cf2_hintmap_build()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2240.json"},{"CVE":"CVE-2014-2241","severity":"important","public_date":"2014-03-07T00:00:00Z","advisories":[],"bugzilla":"1074646","bugzilla_description":"CVE-2014-2240 CVE-2014-2241 freetype: OOB stack-based read/write in cf2_hintmap_build()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2241.json"},{"CVE":"CVE-2014-9745","severity":"low","public_date":"2014-02-14T00:00:00Z","advisories":[],"bugzilla":"1262377","bugzilla_description":"CVE-2014-9745 freetype: Infinite loop in parse_encoding in t1load.c","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9745.json"},{"CVE":"CVE-2014-9746","severity":"low","public_date":"2014-01-22T00:00:00Z","advisories":[],"bugzilla":"1262373","bugzilla_description":"CVE-2014-9746 CVE-2014-9747 freetype: Use of uninitialized memory","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9746.json"},{"CVE":"CVE-2014-9747","severity":"low","public_date":"2014-01-22T00:00:00Z","advisories":[],"bugzilla":"1262373","bugzilla_description":"CVE-2014-9746 CVE-2014-9747 freetype: Use of uninitialized memory","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9747.json"},{"CVE":"CVE-2012-5668","severity":"low","public_date":"2012-12-15T00:00:00Z","advisories":[],"bugzilla":"890087","bugzilla_description":"CVE-2012-5668 freetype: NULL Pointer Dereference in bdf_free_font (#37905)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5668.json"},{"CVE":"CVE-2012-5669","severity":"important","public_date":"2012-12-15T00:00:00Z","advisories":["RHSA-2013:0216"],"bugzilla":"890088","bugzilla_description":"CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.3.11-14.el6_3.1","freetype-0:2.2.1-32.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5669.json"},{"CVE":"CVE-2012-5670","severity":"important","public_date":"2012-12-15T00:00:00Z","advisories":[],"bugzilla":"890094","bugzilla_description":"CVE-2012-5670 freetype: Out-of-bounds write in _bdf_parse_glyphs() (#37907)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5670.json"},{"CVE":"CVE-2012-4190","severity":"important","public_date":"2012-10-11T00:00:00Z","advisories":[],"bugzilla":"872753","bugzilla_description":"CVE-2012-4190 freetype: memory corruption and application crash (reported against firefox on android)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4190.json"},{"CVE":"CVE-2012-1144","severity":"important","public_date":"2012-03-02T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800607","bugzilla_description":"CVE-2012-1144 freetype: insufficient checking of first outline point in TTF parser (#35689)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-122|CWE-787)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1144.json"},{"CVE":"CVE-2012-1142","severity":"important","public_date":"2012-03-01T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800604","bugzilla_description":"CVE-2012-1142 freetype: incorrect computation of number of glyphs in FNT_Face_Init() for FNT/FON files (#35659)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-122|CWE-787)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1142.json"},{"CVE":"CVE-2012-1139","severity":"low","public_date":"2012-02-28T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800598","bugzilla_description":"CVE-2012-1139 freetype: data buffer underflow in BDF parser _bdf_parse_glyphs() (#35656)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"(CWE-121|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1139.json"},{"CVE":"CVE-2012-1140","severity":"low","public_date":"2012-02-28T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800600","bugzilla_description":"CVE-2012-1140 freetype: multiple buffer over-read in PS parser conversion functions (#35657)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1140.json"},{"CVE":"CVE-2012-1141","severity":"low","public_date":"2012-02-28T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800602","bugzilla_description":"CVE-2012-1141 freetype: BDF parser _bdf_list_split() fails to properly initialize field array (#35658)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1141.json"},{"CVE":"CVE-2012-1143","severity":"low","public_date":"2012-02-28T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800606","bugzilla_description":"CVE-2012-1143 freetype: integer divide by zero in FT_DivFix() (#35660)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1143.json"},{"CVE":"CVE-2012-1135","severity":"low","public_date":"2012-02-27T00:00:00Z","advisories":[],"bugzilla":"800593","bugzilla_description":"CVE-2012-1135 freetype: heap off by one read in boundary check for NPUSHB and NPUSHW instructions in TTF BIC (#35640)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1135.json"},{"CVE":"CVE-2012-1136","severity":"important","public_date":"2012-02-27T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800594","bugzilla_description":"CVE-2012-1136 freetype: uninitialized pointer use in BDF parser _bdf_parse_glyphs() (#35641)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1136.json"},{"CVE":"CVE-2012-1137","severity":"low","public_date":"2012-02-27T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800595","bugzilla_description":"CVE-2012-1137 freetype: heap buffer off-by-one in BDF parsing _bdf_list_ensure() (#35643)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1137.json"},{"CVE":"CVE-2012-1138","severity":"low","public_date":"2012-02-27T00:00:00Z","advisories":[],"bugzilla":"800597","bugzilla_description":"CVE-2012-1138 freetype: heap OOB read in the MIRP instruction implementation in TTF BCI (#35646)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1138.json"},{"CVE":"CVE-2012-1131","severity":"low","public_date":"2012-02-26T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800589","bugzilla_description":"CVE-2012-1131 freetype: incorrect type cast allowing input sanity check bypass in ft_smooth_render_generic() (#35604)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-704->CWE-122","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1131.json"},{"CVE":"CVE-2012-1126","severity":"low","public_date":"2012-02-23T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800581","bugzilla_description":"CVE-2012-1126 freetype: heap buffer over-read in BDF parsing _bdf_is_atom() (#35597, #35598)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1126.json"},{"CVE":"CVE-2012-1127","severity":"low","public_date":"2012-02-23T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800583","bugzilla_description":"CVE-2012-1127 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#35599, #35600)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1127.json"},{"CVE":"CVE-2012-1128","severity":"low","public_date":"2012-02-23T00:00:00Z","advisories":[],"bugzilla":"800584","bugzilla_description":"CVE-2012-1128 freetype: NULL dereference in the SHZ instruction implementation in TTF BCI (#35601)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1128.json"},{"CVE":"CVE-2012-1129","severity":null,"public_date":"2012-02-23T00:00:00Z","advisories":[],"bugzilla":"800585","bugzilla_description":"CVE-2012-1129 freetype: heap off-by-one buffer underflow in Type42 parser t42_parse_sfnts() (#35602)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1129.json"},{"CVE":"CVE-2012-1130","severity":"low","public_date":"2012-02-23T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800587","bugzilla_description":"CVE-2012-1130 freetype: heap buffer over-read in PCF parser pcf_get_properties() (#35603)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1130.json"},{"CVE":"CVE-2012-1132","severity":"low","public_date":"2012-02-23T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800590","bugzilla_description":"CVE-2012-1132 freetype: heap buffer over-read in Type1 parser parse_subrs() (#35606)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1132.json"},{"CVE":"CVE-2012-1133","severity":"important","public_date":"2012-02-23T00:00:00Z","advisories":[],"bugzilla":"800591","bugzilla_description":"CVE-2012-1133 freetype: heap buffer underflow in BDF parser _bdf_parse_glyphs() (#35607)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-122|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1133.json"},{"CVE":"CVE-2012-1134","severity":"important","public_date":"2012-02-23T00:00:00Z","advisories":["RHSA-2012:0467"],"bugzilla":"800592","bugzilla_description":"CVE-2012-1134 freetype: limited heap buffer overflow in Type1 parser T1_Get_Private_Dict() (#35608)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-122|CWE-787)","affected_packages":["freetype-0:2.3.11-6.el6_2.9","freetype-0:2.2.1-31.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1134.json"},{"CVE":"CVE-2011-3439","severity":"important","public_date":"2011-11-10T00:00:00Z","advisories":["RHSA-2011:1455","RHSA-2012:0094"],"bugzilla":"753799","bugzilla_description":"CVE-2011-3439 freetype: Multiple security flaws when loading CID-keyed Type 1 fonts","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.1.9-21.el4","freetype-0:2.2.1-28.el5_7.2","freetype-0:2.3.11-6.el6_1.8","freetype-0:2.2.1-28.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3439.json"},{"CVE":"CVE-2011-3256","severity":"important","public_date":"2011-10-12T00:00:00Z","advisories":["RHSA-2011:1402","RHSA-2012:0094"],"bugzilla":"746226","bugzilla_description":"CVE-2011-3256 freetype: FT_Bitmap_New integer overflow, FreeType TT_Vary_Get_Glyph_Deltas improper input validation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["freetype-0:2.3.11-6.el6_1.7","freetype-0:2.2.1-28.el5_6.1","freetype-0:2.2.1-28.el5_7.1","freetype-0:2.1.9-20.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3256.json"},{"CVE":"CVE-2011-2895","severity":"important","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2011:1154","RHSA-2011:1155","RHSA-2011:1161","RHSA-2011:1834"],"bugzilla":"727624","bugzilla_description":"CVE-2011-2895 BSD compress LZW decoder buffer overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libXfont-0:1.2.2-1.0.3.el5_6","libXfont-0:1.4.1-2.el6_1","freetype-0:2.1.9-19.el4","xorg-x11-0:6.8.2-1.EL.69","libXfont-0:1.2.2-1.0.4.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2895.json"},{"CVE":"CVE-2011-3193","severity":"moderate","public_date":"2011-07-19T00:00:00Z","advisories":["RHSA-2011:1323","RHSA-2011:1324","RHSA-2011:1325","RHSA-2011:1326","RHSA-2011:1327","RHSA-2011:1328"],"bugzilla":"733118","bugzilla_description":"CVE-2011-3193 qt/harfbuzz buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qt-1:4.6.2-17.el6_1.1","pango-0:1.14.9-8.el5_7.3","qt4-0:4.2.1-1.el5_7.1","frysk-0:0.0.1.2007.08.03-8.el4","evolution28-pango-0:1.14.9-13.el4_11","qt-1:4.6.2-20.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3193.json"},{"CVE":"CVE-2011-0226","severity":"important","public_date":"2011-07-08T00:00:00Z","advisories":["RHSA-2011:1085"],"bugzilla":"722701","bugzilla_description":"CVE-2011-0226 freetype: postscript type1 font parsing vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.3.11-6.el6_1.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0226.json"},{"CVE":"CVE-2010-3855","severity":"important","public_date":"2010-10-11T00:00:00Z","advisories":["RHSA-2010:0889"],"bugzilla":"645275","bugzilla_description":"CVE-2010-3855 Freetype : Heap based buffer overflow in ft_var_readpackedpoints()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["freetype-0:2.2.1-28.el5_5.1","freetype-0:2.1.9-17.el4_8.1","freetype-0:2.3.11-6.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3855.json"},{"CVE":"CVE-2010-3311","severity":"important","public_date":"2010-09-30T00:00:00Z","advisories":["RHSA-2010:0737","RHSA-2010:0736","RHSA-2010:0864"],"bugzilla":"623625","bugzilla_description":"CVE-2010-3311 freetype: Input stream position error by processing Compact Font Format (CFF) font files","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["freetype-0:2.1.9-17.el4.8","freetype-0:2.1.4-18.el3","freetype-0:2.3.11-6.el6_0.1","freetype-0:2.2.1-28.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3311.json"},{"CVE":"CVE-2010-3054","severity":"low","public_date":"2010-08-13T00:00:00Z","advisories":["RHSA-2010:0737","RHSA-2010:0736"],"bugzilla":"625632","bugzilla_description":"CVE-2010-3054 freetype: DoS via nested \"seac\" calls","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["freetype-0:2.1.9-17.el4.8","freetype-0:2.1.4-18.el3","freetype-0:2.2.1-28.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3054.json"},{"CVE":"CVE-2010-1797","severity":"important","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2010:0607"],"bugzilla":"621144","bugzilla_description":"CVE-2010-1797 FreeType: Multiple stack overflows by processing CFF opcodes","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.2.1-26.el5_5","freetype-0:2.1.4-16.el3","freetype-0:2.1.9-15.el4.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1797.json"},{"CVE":"CVE-2010-2808","severity":"important","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2010:0737","RHSA-2010:0864"],"bugzilla":"621907","bugzilla_description":"CVE-2010-2808 FreeType: Stack-based buffer overflow by processing certain LWFN fonts","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["freetype-0:2.1.9-17.el4.8","freetype-0:2.3.11-6.el6_0.1","freetype-0:2.2.1-28.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2808.json"},{"CVE":"CVE-2010-2806","severity":"important","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2010:0737","RHSA-2010:0736","RHSA-2010:0864"],"bugzilla":"621980","bugzilla_description":"CVE-2010-2806 FreeType: Heap-based buffer overflow by processing FontType42 fonts with negative length of SFNT strings (FT bug #30656)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["freetype-0:2.1.9-17.el4.8","freetype-0:2.1.4-18.el3","freetype-0:2.3.11-6.el6_0.1","freetype-0:2.2.1-28.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2806.json"},{"CVE":"CVE-2010-2807","severity":"moderate","public_date":"2010-08-05T00:00:00Z","advisories":[],"bugzilla":"625627","bugzilla_description":"CVE-2010-2807 freetype: incorrect integer data types used during bounds checking","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2807.json"},{"CVE":"CVE-2010-2805","severity":"important","public_date":"2010-08-04T00:00:00Z","advisories":["RHSA-2010:0864"],"bugzilla":"625626","bugzilla_description":"CVE-2010-2805 freetype: FT_Stream_EnterFrame() does not properly validate certain position values","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P/","CWE":null,"affected_packages":["freetype-0:2.3.11-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2805.json"},{"CVE":"CVE-2010-2541","severity":"low","public_date":"2010-07-22T00:00:00Z","advisories":["RHSA-2010:0578","RHSA-2010:0577"],"bugzilla":"617342","bugzilla_description":"CVE-2010-2541 Freetype ftmulti buffer overflow","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.1.9-14.el4.8","freetype-0:2.2.1-25.el5_5","freetype-0:2.1.4-15.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2541.json"},{"CVE":"CVE-2010-2497","severity":"important","public_date":"2010-06-09T00:00:00Z","advisories":[],"bugzilla":"613154","bugzilla_description":"CVE-2010-2497 freetype: integer underflow vulnerability","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2497.json"},{"CVE":"CVE-2010-2498","severity":"important","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0578"],"bugzilla":"613160","bugzilla_description":"CVE-2010-2498 freetype: invalid free vulnerability with possible heap corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.1.9-14.el4.8","freetype-0:2.2.1-25.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2498.json"},{"CVE":"CVE-2010-2499","severity":"important","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0578"],"bugzilla":"613162","bugzilla_description":"CVE-2010-2499 freetype: buffer overflow vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.1.9-14.el4.8","freetype-0:2.2.1-25.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2499.json"},{"CVE":"CVE-2010-2500","severity":"important","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0578","RHSA-2010:0577"],"bugzilla":"613167","bugzilla_description":"CVE-2010-2500 freetype: integer overflow vulnerability in smooth/ftgrays.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["freetype-0:2.1.9-14.el4.8","freetype-0:2.2.1-25.el5_5","freetype-0:2.1.4-15.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2500.json"},{"CVE":"CVE-2010-2519","severity":"important","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0578"],"bugzilla":"613194","bugzilla_description":"CVE-2010-2519 freetype: heap buffer overflow vulnerability when processing certain font files","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["freetype-0:2.1.9-14.el4.8","freetype-0:2.2.1-25.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2519.json"},{"CVE":"CVE-2010-2527","severity":"low","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0578","RHSA-2010:0577"],"bugzilla":"614557","bugzilla_description":"CVE-2010-2527 Freetype demos multiple buffer overflows","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["freetype-0:2.1.9-14.el4.8","freetype-0:2.2.1-25.el5_5","freetype-0:2.1.4-15.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2527.json"},{"CVE":"CVE-2009-0946","severity":"important","public_date":"2009-03-20T00:00:00Z","advisories":["RHSA-2009:1062","RHSA-2009:1061","RHSA-2009:0329"],"bugzilla":"491384","bugzilla_description":"CVE-2009-0946 freetype: multiple integer overflows","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["freetype-0:2.0.3-17.el21","freetype-0:2.1.9-10.el4.7","freetype-0:2.2.1-21.el5_3","freetype-0:2.1.4-12.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0946.json"},{"CVE":"CVE-2008-1806","severity":"important","public_date":"2008-06-10T00:00:00Z","advisories":["RHSA-2008:0558","RHSA-2008:0556"],"bugzilla":"450768","bugzilla_description":"CVE-2008-1806 FreeType PFB integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["freetype-0:2.1.9-8.el4.6","freetype-0:2.2.1-20.el5_2","freetype-0:2.1.4-10.el3","freetype-0:2.0.3-15.el21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1806.json"},{"CVE":"CVE-2008-1807","severity":"important","public_date":"2008-06-10T00:00:00Z","advisories":["RHSA-2008:0558","RHSA-2008:0556"],"bugzilla":"450773","bugzilla_description":"CVE-2008-1807 FreeType invalid free() flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freetype-0:2.1.9-8.el4.6","freetype-0:2.2.1-20.el5_2","freetype-0:2.1.4-10.el3","freetype-0:2.0.3-15.el21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1807.json"},{"CVE":"CVE-2008-1808","severity":"important","public_date":"2008-06-10T00:00:00Z","advisories":["RHSA-2009:0329","RHSA-2008:0558","RHSA-2008:0556"],"bugzilla":"450774","bugzilla_description":"CVE-2008-1808 FreeType off-by-one flaws","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["freetype-0:2.1.9-10.el4.7","freetype-0:2.1.9-8.el4.6","freetype-0:2.2.1-20.el5_2","freetype-0:2.1.4-10.el3","freetype-0:2.0.3-15.el21","freetype-0:2.1.4-12.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1808.json"},{"CVE":"CVE-2007-2754","severity":"moderate","public_date":"2007-04-27T00:00:00Z","advisories":["RHSA-2009:1062","RHSA-2009:0329","RHSA-2007:0403"],"bugzilla":"240200","bugzilla_description":"CVE-2007-2754 freetype integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["freetype-0:2.1.4-7.el3","freetype-0:2.1.9-6.el4","freetype-0:2.0.3-10.el21","freetype-0:2.0.3-17.el21","freetype-0:2.1.9-10.el4.7","freetype-0:2.2.1-19.el5","freetype-0:2.1.4-12.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2754.json"},{"CVE":"CVE-2007-1351","severity":"important","public_date":"2007-04-03T00:00:00Z","advisories":["RHSA-2007:0132","RHSA-2007:0125","RHSA-2007:0126","RHSA-2007:0150"],"bugzilla":"235265","bugzilla_description":"CVE-2007-1351 Multiple font integer overflows (CVE-2007-1352)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freetype-0:2.2.1-17.el5","freetype-0:2.1.9-5.el4","XFree86-0:4.3.0-120.EL","xorg-x11-0:6.8.2-1.EL.13.37.7","freetype-0:2.1.4-6.el3","libXfont-0:1.2.2-1.0.2.el5","XFree86-0:4.1.0-82.EL"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1351.json"},{"CVE":"CVE-2006-3467","severity":"moderate","public_date":"2006-07-18T00:00:00Z","advisories":["RHSA-2006:0635","RHSA-2006:0634","RHSA-2006:0500"],"bugzilla":"487070","bugzilla_description":"CVE-2006-3467 freetype: integer overflow vulnerability due to incomplete fix for CVE-2006-1861","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["XFree86-0:4.3.0-111.EL","freetype-0:2.1.9-1.rhel4.4","freetype-0:2.1.4-4.0.rhel3.2","xorg-x11-0:6.8.2-1.EL.13.37"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3467.json"},{"CVE":"CVE-2006-0747","severity":"moderate","public_date":"2006-05-15T00:00:00Z","advisories":["RHSA-2006:0500"],"bugzilla":"1618019","bugzilla_description":"CVE-2006-0747 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freetype-0:2.1.9-1.rhel4.4","freetype-0:2.1.4-4.0.rhel3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0747.json"},{"CVE":"CVE-2006-2661","severity":"low","public_date":"2006-05-15T00:00:00Z","advisories":["RHSA-2006:0500"],"bugzilla":"1618110","bugzilla_description":"CVE-2006-2661 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["freetype-0:2.1.9-1.rhel4.4","freetype-0:2.1.4-4.0.rhel3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2661.json"},{"CVE":"CVE-2006-1861","severity":"moderate","public_date":"2006-05-15T00:00:00Z","advisories":["RHSA-2009:1062","RHSA-2006:0500","RHSA-2009:0329"],"bugzilla":"484437","bugzilla_description":"CVE-2006-1861 freetype: multiple integer overflow vulnerabilities","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["freetype-0:2.0.3-17.el21","freetype-0:2.1.9-10.el4.7","freetype-0:2.1.9-1.rhel4.4","freetype-0:2.1.4-4.0.rhel3.2","freetype-0:2.1.4-12.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1861.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frei0r-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frei0r-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frei0r-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frei0r-plugins-opencv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frei0r-plugins-opencv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frei0r-plugins-opencv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frei0r-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frei0r-plugins_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frei0r-plugins_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fribidi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fribidi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fribidi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fribidi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fribidi_security_api_results.json
new file mode 100644
index 0000000..d3599a3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fribidi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-18397","severity":"important","public_date":"2019-11-07T00:00:00Z","advisories":["RHSA-2019:4326","RHSA-2019:4361","RHSA-2020:0291"],"bugzilla":"1768750","bugzilla_description":"CVE-2019-18397 fribidi: buffer overflow in fribidi_get_par_embedding_levels_ex() in lib/fribidi-bidi.c leading to denial of service and possible code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-400","affected_packages":["fribidi-0:1.0.4-7.el8_1","fribidi-0:1.0.2-1.el7_7.1","fribidi-0:1.0.4-6.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18397.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frr-contrib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frr-contrib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frr-contrib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frr_security_api_results.json
new file mode 100644
index 0000000..e06c1d7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/frr_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12831","severity":"moderate","public_date":"2020-05-03T00:00:00Z","advisories":[],"bugzilla":"1830805","bugzilla_description":"CVE-2020-12831 frr: default permission issue eases information leaks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12831.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ftp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ftp_security_api_results.json
new file mode 100644
index 0000000..90f35a2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ftp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10916","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2020:1045"],"bugzilla":"1610349","bugzilla_description":"CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["lftp-0:4.4.8-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10916.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2015-1419","severity":null,"public_date":"2015-01-19T00:00:00Z","advisories":[],"bugzilla":"1187041","bugzilla_description":"CVE-2015-1419 vsftpd: access restrictions bypass","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1419.json"},{"CVE":"CVE-2011-2523","severity":"important","public_date":"2011-07-04T00:00:00Z","advisories":[],"bugzilla":"1778781","bugzilla_description":"CVE-2011-2523 vsftpd: backdoor which opens a shell on port 6200/tcp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2011-2199","severity":"moderate","public_date":"2011-06-10T00:00:00Z","advisories":[],"bugzilla":"713950","bugzilla_description":"CVE-2011-2199 tftp: buffer overflow when setting utimeout option","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2199.json"},{"CVE":"CVE-2011-0762","severity":"important","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0337"],"bugzilla":"681667","bugzilla_description":"CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["vsftpd-0:2.0.1-9.el4","vsftpd-0:2.0.5-16.el5_6.1","vsftpd-0:2.2.2-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0762.json"},{"CVE":"CVE-2010-2251","severity":"moderate","public_date":"2010-05-17T00:00:00Z","advisories":["RHSA-2010:0585"],"bugzilla":"591580","bugzilla_description":"CVE-2010-2251 lftp: multiple HTTP client download filename vulnerability [OCERT 2010-001]","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["lftp-0:3.7.11-4.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2251.json"},{"CVE":"CVE-2007-5962","severity":"low","public_date":"2008-05-21T00:00:00Z","advisories":["RHSA-2008:0295"],"bugzilla":"397011","bugzilla_description":"CVE-2007-5962 vsftpd: memory leak when deny_file option is set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["vsftpd-0:2.0.5-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5962.json"},{"CVE":"CVE-2007-2348","severity":"low","public_date":"2007-01-09T00:00:00Z","advisories":["RHSA-2009:1278"],"bugzilla":"236238","bugzilla_description":"CVE-2007-2348 lftp mirror --script does not escape names and targets of symbolic links","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["lftp-0:3.7.11-4.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2348.json"},{"CVE":"CVE-2008-2375","severity":"moderate","public_date":"2006-06-28T00:00:00Z","advisories":["RHSA-2008:0680","RHSA-2008:0579"],"bugzilla":"453376","bugzilla_description":"CVE-2008-2375 older vsftpd authentication memory leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["vsftpd-0:2.0.1-6.el4","vsftpd-0:1.2.1-3E.16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2375.json"},{"CVE":"CVE-2005-0372","severity":"moderate","public_date":"2005-02-14T00:00:00Z","advisories":["RHSA-2005:410"],"bugzilla":"1617512","bugzilla_description":"CVE-2005-0372 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gftp-1:2.0.17-5","gftp-1:2.0.14-4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0372.json"},{"CVE":"CVE-2003-0963","severity":"moderate","public_date":"2003-12-13T00:00:00Z","advisories":["RHSA-2003:403","RHSA-2003:404"],"bugzilla":"1617106","bugzilla_description":"CVE-2003-0963 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["lftp-0:2.6.3-5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0963.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-overlayfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-overlayfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-overlayfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-sshfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-sshfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse-sshfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse3-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse3-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse3-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse_security_api_results.json
new file mode 100644
index 0000000..2c48cc7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fuse_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10906","severity":"moderate","public_date":"2018-07-24T00:00:00Z","advisories":["RHSA-2018:3324"],"bugzilla":"1602996","bugzilla_description":"CVE-2018-10906 fuse: bypass of the \"user_allow_other\" restriction when SELinux is active","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["fuse-0:2.9.2-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10906.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-9878","severity":"moderate","public_date":"2016-12-21T00:00:00Z","advisories":["RHSA-2017:3115"],"bugzilla":"1408164","bugzilla_description":"CVE-2016-9878 Spring Framework: Directory Traversal in the Spring Framework ResourceServlet","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9878.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-1000229","severity":"moderate","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2017:0868"],"bugzilla":"1360275","bugzilla_description":"CVE-2016-1000229 swagger-ui: cross-site scripting in key names","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000229.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-1233","severity":"moderate","public_date":"2016-01-20T00:00:00Z","advisories":[],"bugzilla":"1301011","bugzilla_description":"CVE-2016-1233 fuse: udev rule creates world-writeable /dev/cuse","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1233.json"},{"CVE":"CVE-2015-5348","severity":"moderate","public_date":"2015-12-17T00:00:00Z","advisories":["RHSA-2016:2035"],"bugzilla":"1292849","bugzilla_description":"CVE-2015-5348 Camel: Java object deserialisation in Jetty/Servlet","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-5181","severity":"moderate","public_date":"2015-10-06T00:00:00Z","advisories":["RHSA-2015:2556","RHSA-2015:2557"],"bugzilla":"1248804","bugzilla_description":"CVE-2015-5181 A-MQ Console: script injection into queue name","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5181.json"},{"CVE":"CVE-2015-5182","severity":"moderate","public_date":"2015-10-06T00:00:00Z","advisories":[],"bugzilla":"1248809","bugzilla_description":"CVE-2015-5182 A-MQ Console: CSRF via form-based API call","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5182.json"},{"CVE":"CVE-2015-5183","severity":"low","public_date":"2015-10-06T00:00:00Z","advisories":["RHSA-2020:4154","RHSA-2018:2840"],"bugzilla":"1249182","bugzilla_description":"CVE-2015-5183 Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5183.json"},{"CVE":"CVE-2015-5184","severity":"low","public_date":"2015-10-06T00:00:00Z","advisories":["RHSA-2016:1424"],"bugzilla":"1249183","bugzilla_description":"CVE-2015-5184 Console: CORS headers set to allow all in Red Hat AMQ","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5184.json"},{"CVE":"CVE-2015-1926","severity":"moderate","public_date":"2015-07-30T00:00:00Z","advisories":[],"bugzilla":"1213007","bugzilla_description":"CVE-2015-1926 Portlet spec: Information disclosure via missing access restriction in resource dispatching","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1926.json"},{"CVE":"CVE-2015-0851","severity":"moderate","public_date":"2015-07-21T00:00:00Z","advisories":[],"bugzilla":"1248504","bugzilla_description":"CVE-2015-0851 xmltooling: incorrect processing of well-formed but invalid XML","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0851.json"},{"CVE":"CVE-2014-3576","severity":"moderate","public_date":"2015-07-17T00:00:00Z","advisories":["RHSA-2015:0137"],"bugzilla":"1198306","bugzilla_description":"CVE-2014-3576 ActiveMQ: DoS via unauthenticated remote shutdown command","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3576.json"},{"CVE":"CVE-2015-3253","severity":"important","public_date":"2015-07-16T00:00:00Z","advisories":["RHSA-2016:0066","RHSA-2016:1376","RHSA-2016:0118","RHSA-2015:2556","RHSA-2015:2557","RHSA-2015:2558","RHSA-2017:2486","RHSA-2017:2596"],"bugzilla":"1243934","bugzilla_description":"CVE-2015-3253 groovy: remote execution of untrusted code in class MethodClosure","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502->CWE-284","affected_packages":["groovy-0:1.8.9-8.el7_4","rh-maven33-groovy-0:1.8.9-7.19.el6","rh-maven33-groovy-0:1.8.9-7.19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"9.6"},{"CVE":"CVE-2015-3192","severity":"moderate","public_date":"2015-06-30T00:00:00Z","advisories":["RHSA-2016:2035","RHSA-2016:2036","RHSA-2016:1592","RHSA-2016:1593","RHSA-2016:1218","RHSA-2016:1219"],"bugzilla":"1239002","bugzilla_description":"CVE-2015-3192 Spring Framework: denial-of-service attack with XML input","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3192.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2014-8175","severity":"important","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2015:1177","RHSA-2015:1176"],"bugzilla":"1205112","bugzilla_description":"CVE-2014-8175 JBoss Fuse: insufficient access permissions checks when accessing Hawtio console","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8175.json"},{"CVE":"CVE-2015-1833","severity":"moderate","public_date":"2015-05-21T00:00:00Z","advisories":[],"bugzilla":"1223883","bugzilla_description":"CVE-2015-1833 jackrabbit: Jackrabbit WebDAV bundle susceptible to XXE/XEE attack","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1833.json"},{"CVE":"CVE-2015-3202","severity":"low","public_date":"2015-05-21T00:00:00Z","advisories":[],"bugzilla":"1224103","bugzilla_description":"CVE-2015-3202 fuse: incorrect filtering of environment variables leading to privilege escalation","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3202.json"},{"CVE":"CVE-2015-2156","severity":"low","public_date":"2015-05-09T00:00:00Z","advisories":[],"bugzilla":"1222923","bugzilla_description":"CVE-2015-2156 netty: HttpOnly cookie bypass","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2156.json"},{"CVE":"CVE-2015-3337","severity":"low","public_date":"2015-04-24T00:00:00Z","advisories":[],"bugzilla":"1216014","bugzilla_description":"CVE-2015-3337 elasticsearch: directory traversal flaw","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3337.json"},{"CVE":"CVE-2015-0899","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":[],"bugzilla":"1207099","bugzilla_description":"CVE-2015-0899 Apache Struts 1: input validation bypass in MultiPageValidator","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0899.json"},{"CVE":"CVE-2014-0219","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1095974","bugzilla_description":"CVE-2014-0219 Karaf: denial of service via shutdown port","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0219.json"},{"CVE":"CVE-2015-0264","severity":"moderate","public_date":"2015-03-17T00:00:00Z","advisories":["RHSA-2015:1538","RHSA-2015:2558","RHSA-2015:1041","RHSA-2015:1539"],"bugzilla":"1203341","bugzilla_description":"CVE-2015-0264 Camel: XXE via XPath expression evaluation","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0264.json"},{"CVE":"CVE-2015-0263","severity":"moderate","public_date":"2015-03-17T00:00:00Z","advisories":["RHSA-2015:1538","RHSA-2015:2558","RHSA-2015:1041","RHSA-2015:1539"],"bugzilla":"1203344","bugzilla_description":"CVE-2015-0263 Camel: XXE in via SAXSource expansion","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0263.json"},{"CVE":"CVE-2014-3643","severity":"moderate","public_date":"2015-03-10T00:00:00Z","advisories":[],"bugzilla":"1143758","bugzilla_description":"CVE-2014-3643 jersey: XXE via parameter entities","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3643.json"},{"CVE":"CVE-2015-1796","severity":"important","public_date":"2015-02-25T00:00:00Z","advisories":["RHSA-2015:1177","RHSA-2015:1176"],"bugzilla":"1196619","bugzilla_description":"CVE-2015-1796 OpenSAML Java: PKIX Trust Engines Exhibit Critical Flaw In Trusted Names Evaluation","cvss_score":6.3,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1796.json"},{"CVE":"CVE-2015-2080","severity":"important","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1196254","bugzilla_description":"CVE-2015-2080 jetty: remote unauthenticated credential exposure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2080.json"},{"CVE":"CVE-2015-1427","severity":"important","public_date":"2015-02-11T00:00:00Z","advisories":["RHSA-2017:0868"],"bugzilla":"1191969","bugzilla_description":"CVE-2015-1427 elasticsearch: remote code execution via Groovy sandbox bypass","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1427.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2015-0226","severity":"important","public_date":"2015-02-10T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2016:1376","RHSA-2015:0773","RHSA-2015:1177","RHSA-2015:1176","RHSA-2015:0849","RHSA-2015:0848","RHSA-2015:0847","RHSA-2015:0846"],"bugzilla":"1191446","bugzilla_description":"CVE-2015-0226 wss4j: Apache WSS4J is vulnerable to Bleichenbacher's attack (incomplete fix for CVE-2011-2487)","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:N/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0226.json"},{"CVE":"CVE-2015-0227","severity":"moderate","public_date":"2015-02-10T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0773","RHSA-2015:1177","RHSA-2015:1176","RHSA-2015:0849","RHSA-2015:0848","RHSA-2015:0847","RHSA-2015:0846"],"bugzilla":"1191451","bugzilla_description":"CVE-2015-0227 wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0227.json"},{"CVE":"CVE-2015-8837","severity":"low","public_date":"2015-02-07T00:00:00Z","advisories":[],"bugzilla":"863091","bugzilla_description":"CVE-2015-8837 fuseiso: Stack-based buffer overflow when scanning directory structure for absolute path entries","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8837.json"},{"CVE":"CVE-2015-8836","severity":"moderate","public_date":"2015-02-06T00:00:00Z","advisories":[],"bugzilla":"863102","bugzilla_description":"CVE-2015-8836 fuseiso: Integer overflow, leading to heap buffer overflow when reading certain ISO ZF blocks","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8836.json"},{"CVE":"CVE-2014-3600","severity":"moderate","public_date":"2015-02-05T00:00:00Z","advisories":["RHSA-2015:0138","RHSA-2015:0137"],"bugzilla":"1133649","bugzilla_description":"CVE-2014-3600 Apache ActiveMQ: XXE via XPath expression evaluation","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3600.json"},{"CVE":"CVE-2014-3612","severity":"important","public_date":"2015-02-05T00:00:00Z","advisories":["RHSA-2015:0138","RHSA-2015:0137"],"bugzilla":"1135912","bugzilla_description":"CVE-2014-3612 ActiveMQ JAAS: LDAPLoginModule allows empty password authentication","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3612.json"},{"CVE":"CVE-2014-8125","severity":"moderate","public_date":"2014-12-22T00:00:00Z","advisories":["RHSA-2015:0851","RHSA-2015:0850"],"bugzilla":"1169553","bugzilla_description":"CVE-2014-8125 jBPM: BPMN2 file processing XXE in Process Execution","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8125.json"},{"CVE":"CVE-2014-3627","severity":"moderate","public_date":"2014-11-21T00:00:00Z","advisories":[],"bugzilla":"1170479","bugzilla_description":"CVE-2014-3627 hadoop: file disclosure flaw","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3627.json"},{"CVE":"CVE-2014-8090","severity":"moderate","public_date":"2014-11-13T00:00:00Z","advisories":["RHSA-2014:1911","RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1159927","bugzilla_description":"CVE-2014-8090 ruby: REXML incomplete fix for CVE-2014-8080","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-776","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:1.8.7.374-3.el6_6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8090.json"},{"CVE":"CVE-2014-3625","severity":"moderate","public_date":"2014-11-11T00:00:00Z","advisories":["RHSA-2015:0236","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0234"],"bugzilla":"1165936","bugzilla_description":"CVE-2014-3625 Spring Framework: directory traversal flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3625.json"},{"CVE":"CVE-2014-8080","severity":"moderate","public_date":"2014-10-27T00:00:00Z","advisories":["RHSA-2014:1911","RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1157709","bugzilla_description":"CVE-2014-8080 ruby: REXML billion laughs attack via parameter entity expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-776","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:1.8.7.374-3.el6_6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8080.json"},{"CVE":"CVE-2014-3623","severity":"moderate","public_date":"2014-10-25T00:00:00Z","advisories":["RHSA-2015:0236","RHSA-2015:0851","RHSA-2015:0675","RHSA-2015:0850","RHSA-2014:2019","RHSA-2014:2020"],"bugzilla":"1157304","bugzilla_description":"CVE-2014-3623 Apache WSS4J / Apache CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3623.json"},{"CVE":"CVE-2014-3584","severity":"moderate","public_date":"2014-10-25T00:00:00Z","advisories":["RHSA-2014:0400"],"bugzilla":"1157330","bugzilla_description":"CVE-2014-3584 Apache CXF: Denial of Service (DoS) via invalid JAX-RS SAML tokens","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-130->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3584.json"},{"CVE":"CVE-2014-6439","severity":"low","public_date":"2014-10-01T00:00:00Z","advisories":[],"bugzilla":"1149945","bugzilla_description":"CVE-2014-6439 Elasticsearch: CSRF via insecure CORS default configuration","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-345->CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6439.json"},{"CVE":"CVE-2014-3578","severity":"moderate","public_date":"2014-09-05T00:00:00Z","advisories":["RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234"],"bugzilla":"1131882","bugzilla_description":"CVE-2014-3578 Spring Framework: Directory traversal","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3578.json"},{"CVE":"CVE-2014-3577","severity":"important","public_date":"2014-08-18T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2016:1773","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1082","RHSA-2014:1320","RHSA-2014:1166","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1146","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2016:1931","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1834","RHSA-2014:1833","RHSA-2015:1177","RHSA-2014:1836","RHSA-2015:1176","RHSA-2014:1835"],"bugzilla":"1129074","bugzilla_description":"CVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","httpcomponents-client-0:4.2.5-5.el7_0","org.ovirt.engine-root-0:3.5.0-29","jakarta-commons-httpclient-1:3.1-16.el7_0","thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1","jakarta-commons-httpclient-1:3.1-0.9.el6_5","jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2012-6153","severity":"important","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1320","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1098","RHSA-2014:1834","RHSA-2014:1833","RHSA-2014:1836","RHSA-2014:1835"],"bugzilla":"1129916","bugzilla_description":"CVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","devtoolset-2-httpcomponents-client-0:4.2.1-6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","org.ovirt.engine-root-0:3.5.0-29","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6153.json"},{"CVE":"CVE-2014-3603","severity":"important","public_date":"2014-08-13T00:00:00Z","advisories":[],"bugzilla":"1131823","bugzilla_description":"CVE-2014-3603 OpenSAML Java: HTTPS Connections Via HTTP Resources Do Not Perform Hostname Verification","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3603.json"},{"CVE":"CVE-2014-5075","severity":"moderate","public_date":"2014-08-05T00:00:00Z","advisories":["RHSA-2015:1176"],"bugzilla":"1127276","bugzilla_description":"CVE-2014-5075 smack: MitM vulnerability","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5075.json"},{"CVE":"CVE-2014-3518","severity":"important","public_date":"2014-07-16T00:00:00Z","advisories":["RHSA-2014:0887"],"bugzilla":"1112545","bugzilla_description":"CVE-2014-3518 JBoss EAP/AS 5: Remote code execution via unauthenticated JMX/RMI connector","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3518.json"},{"CVE":"CVE-2014-3558","severity":"low","public_date":"2014-07-16T00:00:00Z","advisories":["RHSA-2014:1288","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0125","RHSA-2015:0234","RHSA-2014:1287","RHSA-2014:1286","RHSA-2014:1285"],"bugzilla":"1120495","bugzilla_description":"CVE-2014-3558 Hibernate Validator: JSM bypass via ReflectionHelper","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3558.json"},{"CVE":"CVE-2014-4651","severity":"low","public_date":"2014-06-19T00:00:00Z","advisories":["RHSA-2015:1176"],"bugzilla":"1112877","bugzilla_description":"CVE-2014-4651 JClouds: predictable tmp file creation in ScriptBuilder Statements","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4651.json"},{"CVE":"CVE-2014-0225","severity":"moderate","public_date":"2014-05-28T00:00:00Z","advisories":["RHSA-2014:1351"],"bugzilla":"1110110","bugzilla_description":"CVE-2014-0225 Spring Framework: Information disclosure via SSRF","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0225.json"},{"CVE":"CVE-2014-3004","severity":"moderate","public_date":"2014-05-27T00:00:00Z","advisories":[],"bugzilla":"1108639","bugzilla_description":"CVE-2014-3004 castor: XML External Entity (XXE) attacks via a crafted XML document","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3004.json"},{"CVE":"CVE-2014-0193","severity":"low","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2014:1019","RHSA-2014:0910","RHSA-2015:0234","RHSA-2014:0818","RHSA-2014:1351","RHSA-2014:1021","RHSA-2014:1020"],"bugzilla":"1092783","bugzilla_description":"CVE-2014-0193 netty: DoS via memory exhaustion during data aggregation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["netty-0:3.6.9-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0193.json"},{"CVE":"CVE-2014-0109","severity":"moderate","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0799","RHSA-2015:0851","RHSA-2015:0850","RHSA-2014:0797","RHSA-2014:0798","RHSA-2014:1351"],"bugzilla":"1093526","bugzilla_description":"CVE-2014-0109 Apache CXF: HTML content posted to SOAP endpoint could cause OOM errors","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0109.json"},{"CVE":"CVE-2014-0110","severity":"moderate","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0799","RHSA-2015:0851","RHSA-2015:0850","RHSA-2014:0797","RHSA-2014:0798","RHSA-2014:1351"],"bugzilla":"1093527","bugzilla_description":"CVE-2014-0110 Apache CXF: Large invalid content could cause temporary space to fill","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0110.json"},{"CVE":"CVE-2014-0034","severity":"moderate","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0799","RHSA-2015:0851","RHSA-2015:0850","RHSA-2014:0797","RHSA-2014:0798","RHSA-2014:1351"],"bugzilla":"1093529","bugzilla_description":"CVE-2014-0034 Apache CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0034.json"},{"CVE":"CVE-2014-0035","severity":"low","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0799","RHSA-2015:0851","RHSA-2015:0850","RHSA-2014:0797","RHSA-2014:0798","RHSA-2014:1351"],"bugzilla":"1093530","bugzilla_description":"CVE-2014-0035 Apache CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0035.json"},{"CVE":"CVE-2014-0168","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:1351"],"bugzilla":"1084838","bugzilla_description":"CVE-2014-0168 Jolokia: cross-site request forgery (CSRF)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0168.json"},{"CVE":"CVE-2014-0114","severity":"important","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0498","RHSA-2014:0474","RHSA-2014:0497","RHSA-2018:2669","RHSA-2019:2995","RHSA-2014:0511","RHSA-2014:0500"],"bugzilla":"1091938","bugzilla_description":"CVE-2014-0114 Apache Struts 1: Class Loader manipulation via request parameters","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-470","affected_packages":["struts-0:1.2.9-4jpp.8.el5_10","struts-0:1.3.10-6.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0114.json"},{"CVE":"CVE-2014-0085","severity":"low","public_date":"2014-04-14T00:00:00Z","advisories":["RHSA-2014:0400","RHSA-2014:0401"],"bugzilla":"1067265","bugzilla_description":"CVE-2014-0085 Fuse: admin user cleartext password appears in logging","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0085.json"},{"CVE":"CVE-2014-0120","severity":"moderate","public_date":"2014-04-14T00:00:00Z","advisories":[],"bugzilla":"1072681","bugzilla_description":"CVE-2014-0120 hawtio-karaf-terminal: cross-site request forgery (CSRF)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0120.json"},{"CVE":"CVE-2014-0121","severity":"critical","public_date":"2014-04-14T00:00:00Z","advisories":[],"bugzilla":"1072716","bugzilla_description":"CVE-2014-0121 hawtio-karaf-terminal: remote code execution due to missing authentication","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0121.json"},{"CVE":"CVE-2014-2734","severity":"low","public_date":"2014-04-10T00:00:00Z","advisories":[],"bugzilla":"1091156","bugzilla_description":"CVE-2014-2734 ruby: SSL signature spoofing flaw","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2734.json"},{"CVE":"CVE-2014-0005","severity":"moderate","public_date":"2014-03-31T00:00:00Z","advisories":["RHSA-2014:0344","RHSA-2014:0345","RHSA-2015:1009","RHSA-2014:0343","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0234"],"bugzilla":"1049736","bugzilla_description":"CVE-2014-0005 PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0005.json"},{"CVE":"CVE-2014-0107","severity":"important","public_date":"2014-03-24T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:1290","RHSA-2014:0590","RHSA-2014:1291","RHSA-2015:1888","RHSA-2014:1351","RHSA-2014:0591","RHSA-2014:0454","RHSA-2014:1995","RHSA-2014:1059","RHSA-2014:0453","RHSA-2014:0348","RHSA-2014:1007","RHSA-2014:1369","RHSA-2014:0818","RHSA-2014:0819"],"bugzilla":"1080248","bugzilla_description":"CVE-2014-0107 Xalan-Java: insufficient constraints in secure processing feature","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el5","xalan-j2-0:2.7.0-6jpp.2","xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el6","xalan-j2-0:2.7.1-12_patch_08.ep5.el6","xalan-j2-0:2.7.1-12_patch_08.ep5.el4","xalan-j2-0:2.7.1-12_patch_08.ep5.el5","xalan-j2-0:2.7.0-9.9.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0107.json"},{"CVE":"CVE-2014-0074","severity":"important","public_date":"2014-03-04T00:00:00Z","advisories":["RHSA-2014:1369","RHSA-2014:1351"],"bugzilla":"1072603","bugzilla_description":"CVE-2014-0074 Apache Shiro: successful authentication without specifying user name or password","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0074.json"},{"CVE":"CVE-2014-0002","severity":"moderate","public_date":"2014-02-28T00:00:00Z","advisories":["RHSA-2014:0323","RHSA-2014:0452","RHSA-2014:0459","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"1049675","bugzilla_description":"CVE-2014-0002 Camel: XML eXternal Entity (XXE) flaw in XSLT component","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0002.json"},{"CVE":"CVE-2014-0003","severity":"important","public_date":"2014-02-28T00:00:00Z","advisories":["RHSA-2014:0245","RHSA-2014:0323","RHSA-2014:0452","RHSA-2014:0254","RHSA-2014:0459","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"1049692","bugzilla_description":"CVE-2014-0003 Camel: remote code execution via XSL","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0003.json"},{"CVE":"CVE-2014-0097","severity":"important","public_date":"2014-02-28T00:00:00Z","advisories":[],"bugzilla":"1075302","bugzilla_description":"CVE-2014-0097 Spring Framework: empty passwords may bypass authentication","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0097.json"},{"CVE":"CVE-2014-1904","severity":"moderate","public_date":"2014-02-13T00:00:00Z","advisories":["RHSA-2014:0400","RHSA-2014:0401"],"bugzilla":"1075296","bugzilla_description":"CVE-2014-1904 Spring Framework: cross-site scripting flaw when using Spring MVC","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1904.json"},{"CVE":"CVE-2014-0050","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0252","RHSA-2014:0253","RHSA-2014:0473","RHSA-2014:0400","RHSA-2014:0452","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0401","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1062337","bugzilla_description":"CVE-2014-0050 apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el6","tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0050.json"},{"CVE":"CVE-2014-0054","severity":"moderate","public_date":"2014-01-31T00:00:00Z","advisories":["RHSA-2014:0400","RHSA-2014:0401"],"bugzilla":"1075328","bugzilla_description":"CVE-2014-0054 Spring Framework: incomplete fix for CVE-2013-7315/CVE-2013-6429","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0054.json"},{"CVE":"CVE-2014-0364","severity":"moderate","public_date":"2014-01-31T00:00:00Z","advisories":["RHSA-2015:1176","RHSA-2014:0818","RHSA-2014:0819"],"bugzilla":"1093276","bugzilla_description":"CVE-2014-0364 smack: IQ response spoofing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0364.json"},{"CVE":"CVE-2013-6430","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0400","RHSA-2014:0401"],"bugzilla":"1039783","bugzilla_description":"CVE-2013-6430 Spring Framework: org.spring.web.util.JavaScriptUtils.javaScriptEscape insufficient escaping of characters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6430.json"},{"CVE":"CVE-2013-6429","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0400","RHSA-2014:0401"],"bugzilla":"1053290","bugzilla_description":"CVE-2013-6429 Spring Framework: XML External Entity (XXE) injection flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6429.json"},{"CVE":"CVE-2013-7285","severity":"important","public_date":"2013-12-22T00:00:00Z","advisories":["RHSA-2014:0323","RHSA-2014:1059","RHSA-2015:1009","RHSA-2014:0389","RHSA-2014:0452","RHSA-2014:0216","RHSA-2014:1007","RHSA-2014:0374","RHSA-2015:1888","RHSA-2014:0371","RHSA-2014:0294","RHSA-2014:0372"],"bugzilla":"1051277","bugzilla_description":"CVE-2013-7285 XStream: remote code execution due to insecure XML deserialization","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-94","affected_packages":["jasperreports-server-pro-0:5.5.0-6.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7285.json"},{"CVE":"CVE-2013-6440","severity":"moderate","public_date":"2013-12-11T00:00:00Z","advisories":["RHSA-2014:1995","RHSA-2014:0452","RHSA-2014:1290","RHSA-2014:0171","RHSA-2014:0172","RHSA-2014:1291","RHSA-2014:0170","RHSA-2014:0195"],"bugzilla":"1043332","bugzilla_description":"CVE-2013-6440 XMLTooling-J/OpenSAML Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6440.json"},{"CVE":"CVE-2014-3120","severity":"important","public_date":"2013-12-09T00:00:00Z","advisories":["RHSA-2014:1171","RHSA-2014:1170","RHSA-2014:1186"],"bugzilla":"1124252","bugzilla_description":"CVE-2014-3120 elasticsearch: remote code execution flaw via dynamic scripting","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-749","affected_packages":["katello-configure-0:1.4.5.1-3.el6sam"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3120.json"},{"CVE":"CVE-2013-4517","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":["RHSA-2015:0851","RHSA-2015:0675","RHSA-2015:0850","RHSA-2014:0171","RHSA-2014:0172","RHSA-2014:0170","RHSA-2014:0582","RHSA-2014:0473","RHSA-2014:0195","RHSA-2014:0400","RHSA-2014:1728","RHSA-2014:1727","RHSA-2014:1726","RHSA-2014:1725"],"bugzilla":"1045257","bugzilla_description":"CVE-2013-4517 Apache Santuario XML Security for Java: Java XML Signature DoS Attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["xml-security-0:1.5.6-3.el6","xml-security-0:1.5.6-3.ep5.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el6","xml-security-0:1.5.6-3.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4517.json"},{"CVE":"CVE-2013-4002","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0269","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2015:0773","RHSA-2013:1081","RHSA-2013:1060","RHSA-2014:0414","RHSA-2014:1823","RHSA-2014:1822","RHSA-2014:1821","RHSA-2013:1505","RHSA-2013:1447","RHSA-2014:1319","RHSA-2013:1059","RHSA-2014:1818"],"bugzilla":"1019176","bugzilla_description":"CVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP, 8017298)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","xerces-j2-0:2.7.1-12.7.el6_5","xerces-j2-0:2.11.0-17.el7_0","java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4002.json"},{"CVE":"CVE-2013-2186","severity":"important","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1429","RHSA-2013:1428","RHSA-2013:1448","RHSA-2016:0070","RHSA-2013:1430","RHSA-2013:1442"],"bugzilla":"974814","bugzilla_description":"CVE-2013-2186 Apache commons-fileupload: Arbitrary file upload via deserialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-626","affected_packages":["jakarta-commons-fileupload-1:1.1.1-7.7.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2186.json"},{"CVE":"CVE-2013-4330","severity":"important","public_date":"2013-09-30T00:00:00Z","advisories":["RHSA-2014:0124","RHSA-2014:0245","RHSA-2014:0254","RHSA-2013:1410","RHSA-2013:1862","RHSA-2014:0140"],"bugzilla":"1011726","bugzilla_description":"CVE-2013-4330 Camel: remote code execution via header field manipulation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4330.json"},{"CVE":"CVE-2013-2192","severity":"moderate","public_date":"2013-08-23T00:00:00Z","advisories":["RHSA-2014:0400","RHSA-2014:0037","RHSA-2014:0401"],"bugzilla":"1001326","bugzilla_description":"CVE-2013-2192 hadoop: man-in-the-middle vulnerability","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jasperreports-server-pro-0:5.5.0-4.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2192.json"},{"CVE":"CVE-2013-2193","severity":"moderate","public_date":"2013-08-23T00:00:00Z","advisories":[],"bugzilla":"1001464","bugzilla_description":"CVE-2013-2193 hbase: man-in-the-middle vulnerability","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2193.json"},{"CVE":"CVE-2013-4152","severity":"moderate","public_date":"2013-08-22T00:00:00Z","advisories":["RHSA-2014:0212","RHSA-2014:0245","RHSA-2014:0400","RHSA-2014:0254","RHSA-2014:0401"],"bugzilla":"1000186","bugzilla_description":"CVE-2013-4152 Spring Framework: XML External Entity (XXE) injection flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4152.json"},{"CVE":"CVE-2013-7397","severity":"important","public_date":"2013-07-30T00:00:00Z","advisories":["RHSA-2015:0851","RHSA-2015:0850","RHSA-2015:1551","RHSA-2015:1176"],"bugzilla":"1133769","bugzilla_description":"CVE-2013-7397 async-http-client: SSL/TLS certificate verification is disabled under certain conditions","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7397.json"},{"CVE":"CVE-2013-4073","severity":"moderate","public_date":"2013-06-27T00:00:00Z","advisories":["RHSA-2013:1090","RHSA-2013:1137","RHSA-2013:1103"],"bugzilla":"979251","bugzilla_description":"CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby193-ruby-0:1.9.3.448-38.el6","ruby193-ruby-0:1.9.3.429-34.2.el6ost","ruby-0:1.8.5-31.el5_9","ruby-0:1.8.7.352-12.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4073.json"},{"CVE":"CVE-2013-2160","severity":"moderate","public_date":"2013-06-26T00:00:00Z","advisories":["RHSA-2013:1185","RHSA-2013:1437","RHSA-2013:1028"],"bugzilla":"929197","bugzilla_description":"CVE-2013-2160 cxf, jbossws-cxf, apache-cxf: Multiple denial of service flaws in the StAX parser","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2160.json"},{"CVE":"CVE-2013-2172","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:1220","RHSA-2014:0212","RHSA-2014:0400","RHSA-2013:1209","RHSA-2013:1218","RHSA-2013:1207","RHSA-2014:1369","RHSA-2013:1219","RHSA-2013:1208","RHSA-2013:1217","RHSA-2013:1437","RHSA-2013:1853","RHSA-2013:1375"],"bugzilla":"999263","bugzilla_description":"CVE-2013-2172 Apache Santuario XML Security for Java: XML signature spoofing","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-290","affected_packages":["xml-security-0:1.5.1-3_patch01.ep5.el6","xml-security-0:1.5.1-3_patch01.ep5.el5","xml-security-0:1.5.1-3_patch01.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2172.json"},{"CVE":"CVE-2013-1768","severity":"important","public_date":"2013-06-12T00:00:00Z","advisories":["RHSA-2013:1185","RHSA-2013:1862"],"bugzilla":"984034","bugzilla_description":"CVE-2013-1768 openjpa: Remote arbitrary code execution by creating a serialized object and leveraging improperly secured server programs","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1768.json"},{"CVE":"CVE-2013-2035","severity":"low","public_date":"2013-05-13T00:00:00Z","advisories":["RHSA-2014:1290","RHSA-2014:1291","RHSA-2014:1995","RHSA-2014:0245","RHSA-2014:0400","RHSA-2014:0254","RHSA-2014:0029","RHSA-2014:0401","RHSA-2013:1029","RHSA-2015:0034","RHSA-2014:1904","RHSA-2013:1786","RHSA-2013:1784","RHSA-2013:1785"],"bugzilla":"958618","bugzilla_description":"CVE-2013-2035 HawtJNI: predictable temporary file name leading to local arbitrary code execution","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-377","affected_packages":["jansi-0:1.9-5.redhat_3.1.ep6.el5","activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2035.json"},{"CVE":"CVE-2012-4067","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"952855","bugzilla_description":"CVE-2012-4067 eucalyptus: Insecure XML Parsing Vulnerability in Walrus","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4067.json"},{"CVE":"CVE-2013-2296","severity":"low","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"952858","bugzilla_description":"CVE-2013-2296 eucalyptus: Missing Authorization Vulnerability in Walrus","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2296.json"},{"CVE":"CVE-2013-1879","severity":"moderate","public_date":"2013-03-21T00:00:00Z","advisories":["RHSA-2013:1029"],"bugzilla":"924446","bugzilla_description":"CVE-2013-1879 ActiveMQ: XSS vulnerability in scheduled.jsp","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1879.json"},{"CVE":"CVE-2013-1880","severity":"moderate","public_date":"2013-03-21T00:00:00Z","advisories":["RHSA-2013:1029"],"bugzilla":"924447","bugzilla_description":"CVE-2013-1880 ActiveMQ: XSS vulnerability in portfolioPublish demo application","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1880.json"},{"CVE":"CVE-2012-5575","severity":"important","public_date":"2013-03-08T00:00:00Z","advisories":["RHSA-2013:0839","RHSA-2013:0834","RHSA-2013:0833","RHSA-2013:0943","RHSA-2013:0874","RHSA-2013:0873","RHSA-2013:1437","RHSA-2013:0953","RHSA-2013:0876","RHSA-2013:1028","RHSA-2013:1006","RHSA-2013:0875"],"bugzilla":"880443","bugzilla_description":"CVE-2012-5575 jbossws-native, jbossws-cxf, apache-cxf: XML encryption backwards compatibility attacks","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:N/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5575.json"},{"CVE":"CVE-2013-0248","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"922146","bugzilla_description":"CVE-2013-0248 jakarta-commons-fileupload, apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0248.json"},{"CVE":"CVE-2013-1821","severity":"moderate","public_date":"2013-02-22T00:00:00Z","advisories":["RHSA-2013:1185","RHSA-2013:0612","RHSA-2013:1028","RHSA-2013:0611","RHSA-2013:1147"],"bugzilla":"914716","bugzilla_description":"CVE-2013-1821 ruby: entity expansion DoS vulnerability in REXML","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ruby-0:1.8.5-29.el5_9","ruby-0:1.8.7.352-10.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1821.json"},{"CVE":"CVE-2013-0269","severity":"moderate","public_date":"2013-02-11T00:00:00Z","advisories":["RHSA-2013:1185","RHSA-2013:0701","RHSA-2013:0686","RHSA-2013:1028","RHSA-2013:1147"],"bugzilla":"909029","bugzilla_description":"CVE-2013-0269 rubygem-json: Denial of Service and SQL Injection","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["rubygem-json-0:1.7.3-2.el6_3","ruby193-ruby-0:1.9.3.327-28.el6","rubygem-json-0:1.7.3-2.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0269.json"},{"CVE":"CVE-2014-0363","severity":"moderate","public_date":"2013-02-06T00:00:00Z","advisories":["RHSA-2015:1176","RHSA-2014:0818","RHSA-2014:0819"],"bugzilla":"1093273","bugzilla_description":"CVE-2014-0363 smack: incorrect X.509 certificate validation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0363.json"},{"CVE":"CVE-2013-1624","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2014:0400","RHSA-2015:1009","RHSA-2014:0401","RHSA-2014:0896","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"908428","bugzilla_description":"CVE-2013-1624 bouncycastle: TLS CBC padding timing attack","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1624.json"},{"CVE":"CVE-2013-7398","severity":"important","public_date":"2013-01-09T00:00:00Z","advisories":["RHSA-2015:0851","RHSA-2015:0850","RHSA-2015:1551","RHSA-2015:1176"],"bugzilla":"1133773","bugzilla_description":"CVE-2013-7398 async-http-client: missing hostname verification for SSL certificates","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7398.json"},{"CVE":"CVE-2012-6551","severity":"moderate","public_date":"2012-11-02T00:00:00Z","advisories":["RHSA-2013:1029"],"bugzilla":"955907","bugzilla_description":"CVE-2012-6551 activemq: DoS by resource consumption via HTTP requests to sample webapp","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6551.json"},{"CVE":"CVE-2013-3060","severity":"important","public_date":"2012-11-02T00:00:00Z","advisories":["RHSA-2013:1029","RHSA-2013:1221"],"bugzilla":"955908","bugzilla_description":"CVE-2013-3060 activemq: Unauthenticated access to web console","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3060.json"},{"CVE":"CVE-2012-6092","severity":"moderate","public_date":"2012-10-18T00:00:00Z","advisories":["RHSA-2013:1029"],"bugzilla":"955906","bugzilla_description":"CVE-2012-6092 activemq: Multiple XSS flaws in web demos","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6092.json"},{"CVE":"CVE-2015-0250","severity":"moderate","public_date":"2012-07-25T00:00:00Z","advisories":["RHSA-2015:2560","RHSA-2016:0041","RHSA-2016:0042","RHSA-2015:2559"],"bugzilla":"1203762","bugzilla_description":"CVE-2015-0250 batik: XML External Entity (XXE) injection in SVG parsing","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0250.json"},{"CVE":"CVE-2010-3879","severity":"low","public_date":"2010-11-02T00:00:00Z","advisories":["RHSA-2011:1083"],"bugzilla":"651183","bugzilla_description":"CVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["fuse-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3879.json"},{"CVE":"CVE-2011-0541","severity":"low","public_date":"2010-11-02T00:00:00Z","advisories":["RHSA-2011:1083"],"bugzilla":"651183","bugzilla_description":"CVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["fuse-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0541.json"},{"CVE":"CVE-2011-0542","severity":"low","public_date":"2010-11-02T00:00:00Z","advisories":["RHSA-2011:1083"],"bugzilla":"651183","bugzilla_description":"CVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["fuse-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0542.json"},{"CVE":"CVE-2011-0543","severity":"low","public_date":"2010-11-02T00:00:00Z","advisories":["RHSA-2011:1083"],"bugzilla":"651183","bugzilla_description":"CVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["fuse-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0543.json"},{"CVE":"CVE-2010-0789","severity":"low","public_date":"2010-01-26T00:00:00Z","advisories":[],"bugzilla":"577279","bugzilla_description":"CVE-2010-0789 fuse: Race condition by umount (fusermount) operations","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0789.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fusesource-pom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fusesource-pom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fusesource-pom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupd_security_api_results.json
new file mode 100644
index 0000000..31f3461
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10713","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:4115","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3273","RHSA-2020:3271","RHSA-2020:4172","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1825243","bugzilla_description":"CVE-2020-10713 grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787->CWE-78","affected_packages":["grub2-1:2.02-0.86.el7_8","fwupd-0:1.1.4-7.el8_2","fwupdate-0:12-6.el7_8","grub2-1:2.02-87.el8_2","shim-0:15-14.el8_2","shim-0:15-7.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10713.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-10759","severity":"low","public_date":"2020-06-05T00:00:00Z","advisories":[],"bugzilla":"1844316","bugzilla_description":"CVE-2020-10759 fwupd: Possible bypass in signature verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10759.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"5.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupdate-efi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupdate-efi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupdate-efi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupdate-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupdate-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupdate-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupdate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupdate_security_api_results.json
new file mode 100644
index 0000000..30d5eec
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fwupdate_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10713","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:4115","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3273","RHSA-2020:3271","RHSA-2020:4172","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1825243","bugzilla_description":"CVE-2020-10713 grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787->CWE-78","affected_packages":["grub2-1:2.02-0.86.el7_8","fwupd-0:1.1.4-7.el8_2","fwupdate-0:12-6.el7_8","grub2-1:2.02-87.el8_2","shim-0:15-14.el8_2","shim-0:15-7.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10713.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.2"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fxload_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fxload_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/fxload_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/galera_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/galera_security_api_results.json
new file mode 100644
index 0000000..1db632c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/galera_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14760","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890735","bugzilla_description":"CVE-2020-14760 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14760.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-14672","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890737","bugzilla_description":"CVE-2020-14672 mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14765","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890738","bugzilla_description":"CVE-2020-14765 mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14765.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14769","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890739","bugzilla_description":"CVE-2020-14769 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14769.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14771","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890740","bugzilla_description":"CVE-2020-14771 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14771.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-14773","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890742","bugzilla_description":"CVE-2020-14773 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14773.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14776","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890743","bugzilla_description":"CVE-2020-14776 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14776.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14777","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890744","bugzilla_description":"CVE-2020-14777 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14777.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14785","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890745","bugzilla_description":"CVE-2020-14785 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14785.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14786","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890746","bugzilla_description":"CVE-2020-14786 mysql: Server: PS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14786.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14789","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890747","bugzilla_description":"CVE-2020-14789 mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14789.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14790","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890748","bugzilla_description":"CVE-2020-14790 mysql: Server: PS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14790.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14791","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890749","bugzilla_description":"CVE-2020-14791 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14791.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-14793","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890750","bugzilla_description":"CVE-2020-14793 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14793.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14794","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890751","bugzilla_description":"CVE-2020-14794 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14794.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14799","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890752","bugzilla_description":"CVE-2020-14799 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14799.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14800","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890753","bugzilla_description":"CVE-2020-14800 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14800.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14804","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890754","bugzilla_description":"CVE-2020-14804 mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14804.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14809","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890755","bugzilla_description":"CVE-2020-14809 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14809.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14812","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890756","bugzilla_description":"CVE-2020-14812 mysql: Server: Locking unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14812.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14814","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890757","bugzilla_description":"CVE-2020-14814 mysql: Server: DML unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14814.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14821","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890758","bugzilla_description":"CVE-2020-14821 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14821.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14827","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890759","bugzilla_description":"CVE-2020-14827 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14827.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-14828","severity":"important","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890760","bugzilla_description":"CVE-2020-14828 mysql: Server: DML unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14828.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14829","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890761","bugzilla_description":"CVE-2020-14829 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14829.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14830","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890762","bugzilla_description":"CVE-2020-14830 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14830.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14836","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890763","bugzilla_description":"CVE-2020-14836 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14836.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14837","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890764","bugzilla_description":"CVE-2020-14837 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14837.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14838","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890765","bugzilla_description":"CVE-2020-14838 mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14838.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-14839","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890766","bugzilla_description":"CVE-2020-14839 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14839.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14844","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890767","bugzilla_description":"CVE-2020-14844 mysql: Server: PS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14844.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14845","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890768","bugzilla_description":"CVE-2020-14845 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14846","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890769","bugzilla_description":"CVE-2020-14846 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14846.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14848","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890770","bugzilla_description":"CVE-2020-14848 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14848.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14852","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890771","bugzilla_description":"CVE-2020-14852 mysql: Server: Charsets unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14852.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14860","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890772","bugzilla_description":"CVE-2020-14860 mysql: Server: Security: Roles unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14860.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-14861","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890773","bugzilla_description":"CVE-2020-14861 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14861.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14866","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890774","bugzilla_description":"CVE-2020-14866 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14866.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14867","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890775","bugzilla_description":"CVE-2020-14867 mysql: Server: DDL unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14867.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-14868","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890776","bugzilla_description":"CVE-2020-14868 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14868.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14869","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890777","bugzilla_description":"CVE-2020-14869 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14869.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14870","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890778","bugzilla_description":"CVE-2020-14870 mysql: Server: X Plugin unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14870.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14873","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890779","bugzilla_description":"CVE-2020-14873 mysql: Server: Logging unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14873.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-14878","severity":"important","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890780","bugzilla_description":"CVE-2020-14878 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14878.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2020-14888","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890781","bugzilla_description":"CVE-2020-14888 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14888.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14891","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890782","bugzilla_description":"CVE-2020-14891 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14891.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14893","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890783","bugzilla_description":"CVE-2020-14893 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14893.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14775","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890784","bugzilla_description":"CVE-2020-14775 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14775.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14539","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865945","bugzilla_description":"CVE-2020-14539 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14539.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14540","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865947","bugzilla_description":"CVE-2020-14540 mysql: Server: DML unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14540.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14547","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865948","bugzilla_description":"CVE-2020-14547 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14547.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14550","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2019:1258","RHSA-2019:2327","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865949","bugzilla_description":"CVE-2020-14550 mysql: C API unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mariadb-1:5.5.64-1.el7","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14550.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-14553","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865950","bugzilla_description":"CVE-2020-14553 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-14559","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865951","bugzilla_description":"CVE-2020-14559 mysql: Server: Information Schema unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-14567","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865952","bugzilla_description":"CVE-2020-14567 mysql: Server: Replication unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14567.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14568","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865953","bugzilla_description":"CVE-2020-14568 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14568.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14575","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865954","bugzilla_description":"CVE-2020-14575 mysql: Server: DML unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14575.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14576","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865955","bugzilla_description":"CVE-2020-14576 mysql: Server: UDF unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14576.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865956","bugzilla_description":"CVE-2020-14586 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14591","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":[],"bugzilla":"1865957","bugzilla_description":"CVE-2020-14591 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14591.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14597","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865958","bugzilla_description":"CVE-2020-14597 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14614","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865959","bugzilla_description":"CVE-2020-14614 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14614.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14619","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865960","bugzilla_description":"CVE-2020-14619 mysql: Server: Parser unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14620","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865961","bugzilla_description":"CVE-2020-14620 mysql: Server: DML unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14620.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14623","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865962","bugzilla_description":"CVE-2020-14623 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14623.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14624","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865963","bugzilla_description":"CVE-2020-14624 mysql: Server: JSON unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14624.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14631","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865964","bugzilla_description":"CVE-2020-14631 mysql: Server: Security: Audit unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14631.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14632","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865965","bugzilla_description":"CVE-2020-14632 mysql: Server: Options unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14632.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14633","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865966","bugzilla_description":"CVE-2020-14633 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14633.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-14634","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865967","bugzilla_description":"CVE-2020-14634 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14634.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-14641","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865968","bugzilla_description":"CVE-2020-14641 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14641.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.9"},{"CVE":"CVE-2020-14643","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865969","bugzilla_description":"CVE-2020-14643 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14643.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-14654","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865970","bugzilla_description":"CVE-2020-14654 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14654.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14656","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865971","bugzilla_description":"CVE-2020-14656 mysql: Server: Locking unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14663","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865972","bugzilla_description":"CVE-2020-14663 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14678","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865973","bugzilla_description":"CVE-2020-14678 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14678.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14680","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865974","bugzilla_description":"CVE-2020-14680 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14680.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14697","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865975","bugzilla_description":"CVE-2020-14697 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14697.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14702","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865976","bugzilla_description":"CVE-2020-14702 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14702.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14725","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865977","bugzilla_description":"CVE-2020-14725 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14725.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14651","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865982","bugzilla_description":"CVE-2020-14651 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14651.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-2759","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830048","bugzilla_description":"CVE-2020-2759 mysql: Server: Replication unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2759.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2761","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830049","bugzilla_description":"CVE-2020-2761 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2761.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2762","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830050","bugzilla_description":"CVE-2020-2762 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2763","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830051","bugzilla_description":"CVE-2020-2763 mysql: Server: Replication unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2763.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2765","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830052","bugzilla_description":"CVE-2020-2765 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2765.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2770","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830053","bugzilla_description":"CVE-2020-2770 mysql: Server: Logging unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2770.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2774","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830054","bugzilla_description":"CVE-2020-2774 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2774.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2779","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830055","bugzilla_description":"CVE-2020-2779 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2780","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830056","bugzilla_description":"CVE-2020-2780 mysql: Server: DML unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2790","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1830057","bugzilla_description":"CVE-2020-2790 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2804","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830058","bugzilla_description":"CVE-2020-2804 mysql: Server: Memcached unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-2812","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830059","bugzilla_description":"CVE-2020-2812 mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2814","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830060","bugzilla_description":"CVE-2020-2814 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2853","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830061","bugzilla_description":"CVE-2020-2853 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2853.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2892","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830062","bugzilla_description":"CVE-2020-2892 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2892.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2893","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830064","bugzilla_description":"CVE-2020-2893 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2895","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830066","bugzilla_description":"CVE-2020-2895 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2895.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2896","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830067","bugzilla_description":"CVE-2020-2896 mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2896.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2897","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830068","bugzilla_description":"CVE-2020-2897 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2898","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830069","bugzilla_description":"CVE-2020-2898 mysql: Server: Charsets unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2898.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2901","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830070","bugzilla_description":"CVE-2020-2901 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2901.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2903","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830071","bugzilla_description":"CVE-2020-2903 mysql: Server: Connection Handling unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2903.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2904","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830072","bugzilla_description":"CVE-2020-2904 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2904.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2921","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830073","bugzilla_description":"CVE-2020-2921 mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2921.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-2923","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830074","bugzilla_description":"CVE-2020-2923 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2924","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830075","bugzilla_description":"CVE-2020-2924 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2924.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2925","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830076","bugzilla_description":"CVE-2020-2925 mysql: Server: PS unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2926","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830077","bugzilla_description":"CVE-2020-2926 mysql: Server: Group Replication GCS unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2926.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-2928","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830078","bugzilla_description":"CVE-2020-2928 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2930","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830079","bugzilla_description":"CVE-2020-2930 mysql: Server: Parser unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2930.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-2806","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1830081","bugzilla_description":"CVE-2020-2806 mysql: Server: Compiling unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2806.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-2760","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830082","bugzilla_description":"CVE-2020-2760 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2760.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-2752","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1835849","bugzilla_description":"CVE-2020-2752 mysql: C API unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-2922","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2020:3732","RHSA-2020:4174","RHSA-2019:3708","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1835850","bugzilla_description":"CVE-2020-2922 mysql: C API unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","rh-mysql80-mysql-0:8.0.21-1.el7","mariadb-1:5.5.65-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2570","severity":"low","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1798559","bugzilla_description":"CVE-2020-2570 mysql: C API unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2570.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-2573","severity":"low","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1798576","bugzilla_description":"CVE-2020-2573 mysql: C API unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2573.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-2574","severity":"low","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1798587","bugzilla_description":"CVE-2020-2574 mysql: C API unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2574.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-2572","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1796879","bugzilla_description":"CVE-2020-2572 mysql: Server: Audit Plugin unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2572.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-2577","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796880","bugzilla_description":"CVE-2020-2577 mysql: InnoDB unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2579","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796881","bugzilla_description":"CVE-2020-2579 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2579.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2580","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796882","bugzilla_description":"CVE-2020-2580 mysql: Server: DDL unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2580.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2584","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796883","bugzilla_description":"CVE-2020-2584 mysql: Server: Options unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2584.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-2588","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796884","bugzilla_description":"CVE-2020-2588 mysql: Server: DML unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2589","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796885","bugzilla_description":"CVE-2020-2589 mysql: InnoDB unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2589.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2660","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796886","bugzilla_description":"CVE-2020-2660 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2660.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2679","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796887","bugzilla_description":"CVE-2020-2679 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2679.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2686","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796888","bugzilla_description":"CVE-2020-2686 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2686.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2694","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796889","bugzilla_description":"CVE-2020-2694 mysql: Server: Information Schema unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2694.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-2627","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796905","bugzilla_description":"CVE-2020-2627 mysql: Server: Parser unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2910","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764674","bugzilla_description":"CVE-2019-2910 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2910.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-2911","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764675","bugzilla_description":"CVE-2019-2911 mysql: Information Schema unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2911.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2019-2914","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764676","bugzilla_description":"CVE-2019-2914 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2914.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2922","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764677","bugzilla_description":"CVE-2019-2922 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2923","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764678","bugzilla_description":"CVE-2019-2923 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2924","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764679","bugzilla_description":"CVE-2019-2924 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2924.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2938","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764680","bugzilla_description":"CVE-2019-2938 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2938.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2946","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764681","bugzilla_description":"CVE-2019-2946 mysql: Server: PS unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2946.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2948","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764682","bugzilla_description":"CVE-2019-2948 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2948.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2950","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764683","bugzilla_description":"CVE-2019-2950 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2950.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2957","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764684","bugzilla_description":"CVE-2019-2957 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2957.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2960","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764685","bugzilla_description":"CVE-2019-2960 mysql: Server: Replication unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2960.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2963","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764686","bugzilla_description":"CVE-2019-2963 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2963.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2966","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764687","bugzilla_description":"CVE-2019-2966 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2966.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2967","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764688","bugzilla_description":"CVE-2019-2967 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2967.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2968","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764689","bugzilla_description":"CVE-2019-2968 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2968.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2969","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764690","bugzilla_description":"CVE-2019-2969 mysql: Client programs unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2969.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2019-2974","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764691","bugzilla_description":"CVE-2019-2974 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2974.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2982","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764692","bugzilla_description":"CVE-2019-2982 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2982.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2991","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764693","bugzilla_description":"CVE-2019-2991 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2991.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2993","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764694","bugzilla_description":"CVE-2019-2993 mysql: Server: C API unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2997","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764695","bugzilla_description":"CVE-2019-2997 mysql: Server: DDL unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2997.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2998","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764696","bugzilla_description":"CVE-2019-2998 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2998.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-3003","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764697","bugzilla_description":"CVE-2019-3003 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3003.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-3004","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764698","bugzilla_description":"CVE-2019-3004 mysql: Server: Parser unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3009","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764699","bugzilla_description":"CVE-2019-3009 mysql: Server: Connection unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3009.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-3011","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764700","bugzilla_description":"CVE-2019-3011 mysql: Server: C API unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3011.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3018","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764701","bugzilla_description":"CVE-2019-3018 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3018.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2730","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1731995","bugzilla_description":"CVE-2019-2730 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2730.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2019-2731","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1731996","bugzilla_description":"CVE-2019-2731 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2731.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-2737","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1731997","bugzilla_description":"CVE-2019-2737 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2738","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1731998","bugzilla_description":"CVE-2019-2738 mysql: Server: Compiling unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2739","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1731999","bugzilla_description":"CVE-2019-2739 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2739.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-2740","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1732000","bugzilla_description":"CVE-2019-2740 mysql: Server: XML unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2741","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732001","bugzilla_description":"CVE-2019-2741 mysql: Server: Audit Log unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2741.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2743","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732002","bugzilla_description":"CVE-2019-2743 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2743.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2746","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732003","bugzilla_description":"CVE-2019-2746 mysql: Server: Data Dictionary unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2746.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2747","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732004","bugzilla_description":"CVE-2019-2747 mysql: Server: GIS unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2747.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2752","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732005","bugzilla_description":"CVE-2019-2752 mysql: Server: Options unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2755","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732006","bugzilla_description":"CVE-2019-2755 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2755.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2757","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732007","bugzilla_description":"CVE-2019-2757 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2757.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2758","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1732008","bugzilla_description":"CVE-2019-2758 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2758.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2774","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732009","bugzilla_description":"CVE-2019-2774 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2774.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2778","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732010","bugzilla_description":"CVE-2019-2778 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-2780","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732011","bugzilla_description":"CVE-2019-2780 mysql: Server: Components / Services unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2784","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732012","bugzilla_description":"CVE-2019-2784 mysql: Server: DML unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2785","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732013","bugzilla_description":"CVE-2019-2785 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2789","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732015","bugzilla_description":"CVE-2019-2789 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2789.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2019-2791","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732016","bugzilla_description":"CVE-2019-2791 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2791.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-2795","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732017","bugzilla_description":"CVE-2019-2795 mysql: Server: Charsets unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2796","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732018","bugzilla_description":"CVE-2019-2796 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2797","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732019","bugzilla_description":"CVE-2019-2797 mysql: Client programs unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2797.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2019-2798","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732020","bugzilla_description":"CVE-2019-2798 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2800","severity":"important","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732021","bugzilla_description":"CVE-2019-2800 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-2801","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732022","bugzilla_description":"CVE-2019-2801 mysql: Server: FTS unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2801.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2802","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732023","bugzilla_description":"CVE-2019-2802 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2803","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732024","bugzilla_description":"CVE-2019-2803 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2803.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2805","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1732025","bugzilla_description":"CVE-2019-2805 mysql: Server: Parser unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2808","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732026","bugzilla_description":"CVE-2019-2808 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2810","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732027","bugzilla_description":"CVE-2019-2810 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2811","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732028","bugzilla_description":"CVE-2019-2811 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2812","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732029","bugzilla_description":"CVE-2019-2812 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2814","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732030","bugzilla_description":"CVE-2019-2814 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.2"},{"CVE":"CVE-2019-2815","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732031","bugzilla_description":"CVE-2019-2815 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2819","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732032","bugzilla_description":"CVE-2019-2819 mysql: Server: Security: Audit unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2822","severity":"important","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732033","bugzilla_description":"CVE-2019-2822 mysql: Shell: Admin / InnoDB Cluster unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2826","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732034","bugzilla_description":"CVE-2019-2826 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2826.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2830","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732035","bugzilla_description":"CVE-2019-2830 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2830.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2834","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732036","bugzilla_description":"CVE-2019-2834 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2834.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2879","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732037","bugzilla_description":"CVE-2019-2879 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2879.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3123","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":[],"bugzilla":"1702956","bugzilla_description":"CVE-2018-3123 mysql: Server: libmysqld unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3123.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2566","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":[],"bugzilla":"1702957","bugzilla_description":"CVE-2019-2566 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2566.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2580","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702958","bugzilla_description":"CVE-2019-2580 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2580.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2581","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702959","bugzilla_description":"CVE-2019-2581 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2581.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2584","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702960","bugzilla_description":"CVE-2019-2584 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2584.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2585","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702961","bugzilla_description":"CVE-2019-2585 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2585.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2587","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702962","bugzilla_description":"CVE-2019-2587 mysql: Server: Partition unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2587.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2589","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702963","bugzilla_description":"CVE-2019-2589 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2589.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2592","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702964","bugzilla_description":"CVE-2019-2592 mysql: Server: PS unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2592.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2593","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702965","bugzilla_description":"CVE-2019-2593 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2593.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2596","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702966","bugzilla_description":"CVE-2019-2596 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2596.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2606","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702967","bugzilla_description":"CVE-2019-2606 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2607","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702968","bugzilla_description":"CVE-2019-2607 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2607.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2614","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708","RHSA-2019:2327"],"bugzilla":"1702969","bugzilla_description":"CVE-2019-2614 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2614.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2617","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702970","bugzilla_description":"CVE-2019-2617 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2617.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2620","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702971","bugzilla_description":"CVE-2019-2620 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2620.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2623","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702972","bugzilla_description":"CVE-2019-2623 mysql: Server: Options unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2624","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702973","bugzilla_description":"CVE-2019-2624 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2625","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702974","bugzilla_description":"CVE-2019-2625 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2625.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2626","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702975","bugzilla_description":"CVE-2019-2626 mysql: Server: DDL unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2626.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2627","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708","RHSA-2019:2327"],"bugzilla":"1702976","bugzilla_description":"CVE-2019-2627 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2628","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1702977","bugzilla_description":"CVE-2019-2628 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2628.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2630","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702978","bugzilla_description":"CVE-2019-2630 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2630.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2631","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702979","bugzilla_description":"CVE-2019-2631 mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2631.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2632","severity":"important","public_date":"2019-04-16T00:00:00Z","advisories":[],"bugzilla":"1702980","bugzilla_description":"CVE-2019-2632 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-2635","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702981","bugzilla_description":"CVE-2019-2635 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2636","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702982","bugzilla_description":"CVE-2019-2636 mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2644","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702983","bugzilla_description":"CVE-2019-2644 mysql: Server: DDL unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2644.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2681","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702984","bugzilla_description":"CVE-2019-2681 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2681.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2683","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702985","bugzilla_description":"CVE-2019-2683 mysql: Server: Options unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2683.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2685","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702986","bugzilla_description":"CVE-2019-2685 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2685.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2686","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702987","bugzilla_description":"CVE-2019-2686 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2686.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2687","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702989","bugzilla_description":"CVE-2019-2687 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2687.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2688","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702990","bugzilla_description":"CVE-2019-2688 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2688.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2689","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702991","bugzilla_description":"CVE-2019-2689 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2689.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2691","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702992","bugzilla_description":"CVE-2019-2691 mysql: Server: Security: Roles unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2691.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2693","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702993","bugzilla_description":"CVE-2019-2693 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2693.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2694","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702994","bugzilla_description":"CVE-2019-2694 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2694.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2695","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702995","bugzilla_description":"CVE-2019-2695 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2695.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2634","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702997","bugzilla_description":"CVE-2019-2634 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2634.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-2420","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666738","bugzilla_description":"CVE-2019-2420 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2420.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2434","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666740","bugzilla_description":"CVE-2019-2434 mysql: Server: Parser unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2434.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2436","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666741","bugzilla_description":"CVE-2019-2436 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2455","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2018:2439","RHSA-2019:1258","RHSA-2019:2511"],"bugzilla":"1666742","bugzilla_description":"CVE-2019-2455 mysql: Server: Parser unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.60-1.el7_5","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2455.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2481","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2014:0702"],"bugzilla":"1666743","bugzilla_description":"CVE-2019-2481 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb-1:5.5.37-1.el7_0","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2481.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2482","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666744","bugzilla_description":"CVE-2019-2482 mysql: Server: PS unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2482.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2486","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666745","bugzilla_description":"CVE-2019-2486 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2494","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666746","bugzilla_description":"CVE-2019-2494 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2494.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2495","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666747","bugzilla_description":"CVE-2019-2495 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2495.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2502","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666748","bugzilla_description":"CVE-2019-2502 mysql: InnoDB unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2502.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2503","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:1258","RHSA-2019:2511","RHSA-2019:2327"],"bugzilla":"1666749","bugzilla_description":"CVE-2019-2503 mysql: Server: Connection Handling unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2503.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-2507","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666750","bugzilla_description":"CVE-2019-2507 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2510","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:1258","RHSA-2019:2511","RHSA-2019:3708"],"bugzilla":"1666751","bugzilla_description":"CVE-2019-2510 mysql: InnoDB unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","mariadb:10.3-8010020190902091509.cdc1202b","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2510.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2513","severity":"low","public_date":"2019-01-15T00:00:00Z","advisories":[],"bugzilla":"1666752","bugzilla_description":"CVE-2019-2513 mysql: Shell unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2513.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-2528","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666753","bugzilla_description":"CVE-2019-2528 mysql: Server: Partition unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2528.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2529","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2019:2327"],"bugzilla":"1666755","bugzilla_description":"CVE-2019-2529 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2529.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2530","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666756","bugzilla_description":"CVE-2019-2530 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2530.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2531","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666757","bugzilla_description":"CVE-2019-2531 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2531.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2532","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666758","bugzilla_description":"CVE-2019-2532 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2532.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2533","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666759","bugzilla_description":"CVE-2019-2533 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-2534","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666760","bugzilla_description":"CVE-2019-2534 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2534.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2019-2535","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666761","bugzilla_description":"CVE-2019-2535 mysql: Server: Options unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-2536","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666762","bugzilla_description":"CVE-2019-2536 mysql: Server: Packaging unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2019-2537","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:1258","RHSA-2019:2511","RHSA-2019:3708"],"bugzilla":"1666763","bugzilla_description":"CVE-2019-2537 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","mariadb:10.3-8010020190902091509.cdc1202b","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2537.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2539","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666764","bugzilla_description":"CVE-2019-2539 mysql: Server: Connection unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3276","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640307","bugzilla_description":"CVE-2018-3276 mysql: Server: Memcached unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3200","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640308","bugzilla_description":"CVE-2018-3200 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3200.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3137","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640309","bugzilla_description":"CVE-2018-3137 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3284","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640310","bugzilla_description":"CVE-2018-3284 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3284.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-3195","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640311","bugzilla_description":"CVE-2018-3195 mysql: Server: DDL unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3173","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640312","bugzilla_description":"CVE-2018-3173 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3173.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3212","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640314","bugzilla_description":"CVE-2018-3212 mysql: Server: Information Schema unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3212.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3279","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640315","bugzilla_description":"CVE-2018-3279 mysql: Server: Security: Roles unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3279.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3162","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640316","bugzilla_description":"CVE-2018-3162 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3162.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3247","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640317","bugzilla_description":"CVE-2018-3247 mysql: Server: Merge unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3247.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3156","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640318","bugzilla_description":"CVE-2018-3156 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3156.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3161","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640319","bugzilla_description":"CVE-2018-3161 mysql: Server: Partition unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3278","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640320","bugzilla_description":"CVE-2018-3278 mysql: Server: RBR unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3278.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3174","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640321","bugzilla_description":"CVE-2018-3174 mysql: Init script calling kill with root privileges using pid from pidfile owned by mysql user (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3174.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"1.9"},{"CVE":"CVE-2018-3282","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1640322","bugzilla_description":"CVE-2018-3282 mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3282.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3285","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640323","bugzilla_description":"CVE-2018-3285 mysql: Server: Windows unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3187","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640324","bugzilla_description":"CVE-2018-3187 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3187.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3277","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640325","bugzilla_description":"CVE-2018-3277 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3277.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3144","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640326","bugzilla_description":"CVE-2018-3144 mysql: Server: Security: Audit unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3144.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-3145","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640327","bugzilla_description":"CVE-2018-3145 mysql: Server: Parser unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3145.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3170","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640328","bugzilla_description":"CVE-2018-3170 mysql: Server: DDL unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3170.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3186","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640329","bugzilla_description":"CVE-2018-3186 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3182","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640330","bugzilla_description":"CVE-2018-3182 mysql: Server: DML unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3133","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640331","bugzilla_description":"CVE-2018-3133 mysql: Server: Parser unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3133.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3143","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640332","bugzilla_description":"CVE-2018-3143 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3143.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3283","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640333","bugzilla_description":"CVE-2018-3283 mysql: Server: Logging unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-3171","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640334","bugzilla_description":"CVE-2018-3171 mysql: Server: Partition unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3171.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-3251","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640335","bugzilla_description":"CVE-2018-3251 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3286","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640336","bugzilla_description":"CVE-2018-3286 mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3286.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-3185","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640337","bugzilla_description":"CVE-2018-3185 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3280","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640338","bugzilla_description":"CVE-2018-3280 mysql: Server: JSON unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3280.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3203","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640339","bugzilla_description":"CVE-2018-3203 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3203.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3155","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640340","bugzilla_description":"CVE-2018-3155 mysql: Server: Parser unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-3054","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602354","bugzilla_description":"CVE-2018-3054 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3056","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602355","bugzilla_description":"CVE-2018-3056 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-3058","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1602356","bugzilla_description":"CVE-2018-3058 mysql: MyISAM unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3058.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-3060","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1602357","bugzilla_description":"CVE-2018-3060 mysql: InnoDB unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3061","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602359","bugzilla_description":"CVE-2018-3061 mysql: Server: DML unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3062","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602360","bugzilla_description":"CVE-2018-3062 mysql: Server: Memcached unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3062.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-3063","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2019:2327"],"bugzilla":"1602363","bugzilla_description":"CVE-2018-3063 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3063.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3064","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1602364","bugzilla_description":"CVE-2018-3064 mysql: InnoDB unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-3065","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602365","bugzilla_description":"CVE-2018-3065 mysql: Server: DML unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3065.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3066","severity":"low","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1602366","bugzilla_description":"CVE-2018-3066 mysql: Server: Options unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3066.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-3067","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602368","bugzilla_description":"CVE-2018-3067 mysql: Server: Replication unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3070","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602369","bugzilla_description":"CVE-2018-3070 mysql: Client mysqldump unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3070.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-3071","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602370","bugzilla_description":"CVE-2018-3071 mysql: Audit Log unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3071.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3073","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602371","bugzilla_description":"CVE-2018-3073 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3073.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3074","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602372","bugzilla_description":"CVE-2018-3074 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-3075","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602374","bugzilla_description":"CVE-2018-3075 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3077","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602375","bugzilla_description":"CVE-2018-3077 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3077.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3078","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602376","bugzilla_description":"CVE-2018-3078 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3079","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602377","bugzilla_description":"CVE-2018-3079 mysql: InnoDB unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3079.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3080","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602378","bugzilla_description":"CVE-2018-3080 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3080.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3082","severity":"low","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602379","bugzilla_description":"CVE-2018-3082 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3082.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2018-3084","severity":"low","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602380","bugzilla_description":"CVE-2018-3084 mysql: Shell: Core / Client unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3084.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-3081","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1602424","bugzilla_description":"CVE-2018-3081 mysql: Client programs unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3081.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-2755","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568921","bugzilla_description":"CVE-2018-2755 mysql: Server: Replication unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-2758","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568922","bugzilla_description":"CVE-2018-2758 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2758.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2759","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568923","bugzilla_description":"CVE-2018-2759 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2759.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2761","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568924","bugzilla_description":"CVE-2018-2761 mysql: Client programs unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2761.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-2762","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568925","bugzilla_description":"CVE-2018-2762 mysql: Server: Connection unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-2766","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568926","bugzilla_description":"CVE-2018-2766 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2769","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568927","bugzilla_description":"CVE-2018-2769 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2769.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2771","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568931","bugzilla_description":"CVE-2018-2771 mysql: Server: Locking unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2771.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-2773","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568932","bugzilla_description":"CVE-2018-2773 mysql: pid file can be created in a world-writeable directory (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2773.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2018-2775","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568934","bugzilla_description":"CVE-2018-2775 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2775.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2776","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568936","bugzilla_description":"CVE-2018-2776 mysql: Group Replication GCS unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2777","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568937","bugzilla_description":"CVE-2018-2777 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2777.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2778","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568938","bugzilla_description":"CVE-2018-2778 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2779","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568940","bugzilla_description":"CVE-2018-2779 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2780","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568941","bugzilla_description":"CVE-2018-2780 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2781","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568942","bugzilla_description":"CVE-2018-2781 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2781.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2782","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568943","bugzilla_description":"CVE-2018-2782 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2782.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2784","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568944","bugzilla_description":"CVE-2018-2784 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2786","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568945","bugzilla_description":"CVE-2018-2786 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2787","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568946","bugzilla_description":"CVE-2018-2787 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2787.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2805","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1254"],"bugzilla":"1568948","bugzilla_description":"CVE-2018-2805 mysql: GIS Extension unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2810","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568949","bugzilla_description":"CVE-2018-2810 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2812","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568950","bugzilla_description":"CVE-2018-2812 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2813","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568951","bugzilla_description":"CVE-2018-2813 mysql: Server: DDL unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-2816","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568953","bugzilla_description":"CVE-2018-2816 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2817","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568954","bugzilla_description":"CVE-2018-2817 mysql: Server: DDL unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2818","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568955","bugzilla_description":"CVE-2018-2818 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2819","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568956","bugzilla_description":"CVE-2018-2819 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2839","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568957","bugzilla_description":"CVE-2018-2839 mysql: Server: DML unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2846","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568958","bugzilla_description":"CVE-2018-2846 mysql: Server: Performance Schema unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2767","severity":"low","public_date":"2018-04-08T00:00:00Z","advisories":["RHSA-2018:2439"],"bugzilla":"1564965","bugzilla_description":"CVE-2018-2767 mysql: use of SSL/TLS not enforced in libmysqld (Return of BACKRONYM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2767.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-2696","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1509475","bugzilla_description":"CVE-2018-2696 mysql: sha256_password authentication DoS via long password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2696.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2703","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1534139","bugzilla_description":"CVE-2018-2703 mysql: sha256_password authentication DoS via hash with large rounds value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2703.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2562","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2017:3442","RHSA-2018:0587"],"bugzilla":"1535484","bugzilla_description":"CVE-2018-2562 mysql: Server: Partition unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2562.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-2565","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535486","bugzilla_description":"CVE-2018-2565 mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2565.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2573","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535487","bugzilla_description":"CVE-2018-2573 mysql: Server: GIS unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2573.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2576","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535488","bugzilla_description":"CVE-2018-2576 mysql: Server: DML unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2576.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2583","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535490","bugzilla_description":"CVE-2018-2583 mysql: Stored Procedure unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2583.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-2586","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535491","bugzilla_description":"CVE-2018-2586 mysql: Server: DML unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2586.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2590","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535492","bugzilla_description":"CVE-2018-2590 mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2590.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2591","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2017:3442","RHSA-2018:0587"],"bugzilla":"1535493","bugzilla_description":"CVE-2018-2591 mysql: Server : Partition unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2591.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2600","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535496","bugzilla_description":"CVE-2018-2600 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2600.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2612","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535497","bugzilla_description":"CVE-2018-2612 mysql: InnoDB unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2612.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2622","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535499","bugzilla_description":"CVE-2018-2622 mysql: Server: DDL unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2640","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535500","bugzilla_description":"CVE-2018-2640 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2640.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2645","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535501","bugzilla_description":"CVE-2018-2645 mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.9"},{"CVE":"CVE-2018-2646","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535502","bugzilla_description":"CVE-2018-2646 mysql: Server: DML unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2646.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2647","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535503","bugzilla_description":"CVE-2018-2647 mysql: Server: Replication unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2665","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535504","bugzilla_description":"CVE-2018-2665 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2665.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2667","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535505","bugzilla_description":"CVE-2018-2667 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2667.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2668","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535506","bugzilla_description":"CVE-2018-2668 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2668.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10155","severity":"important","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503649","bugzilla_description":"CVE-2017-10155 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10165","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503651","bugzilla_description":"CVE-2017-10165 mysql: Server: Replication unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10167","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503653","bugzilla_description":"CVE-2017-10167 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10227","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503654","bugzilla_description":"CVE-2017-10227 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10227.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10268","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503656","bugzilla_description":"CVE-2017-10268 mysql: Server: Replication unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10268.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2017-10276","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503659","bugzilla_description":"CVE-2017-10276 mysql: Server: FTS unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10279","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503663","bugzilla_description":"CVE-2017-10279 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10279.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10283","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503664","bugzilla_description":"CVE-2017-10283 mysql: Server: Performance Schema unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-10284","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503665","bugzilla_description":"CVE-2017-10284 mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10284.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10286","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503669","bugzilla_description":"CVE-2017-10286 mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10286.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-10294","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503671","bugzilla_description":"CVE-2017-10294 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10294.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10296","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503673","bugzilla_description":"CVE-2017-10296 mysql: Server: DML unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10296.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10311","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503674","bugzilla_description":"CVE-2017-10311 mysql: Server: FTS unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10313","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503677","bugzilla_description":"CVE-2017-10313 mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10313.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10314","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503679","bugzilla_description":"CVE-2017-10314 mysql: Server: Memcached unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10314.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10320","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503681","bugzilla_description":"CVE-2017-10320 mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10365","severity":"low","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503682","bugzilla_description":"CVE-2017-10365 mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2017-10378","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503684","bugzilla_description":"CVE-2017-10378 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10378.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10379","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503685","bugzilla_description":"CVE-2017-10379 mysql: Client programs unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10384","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503686","bugzilla_description":"CVE-2017-10384 mysql: Server: DDL unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10384.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-15365","severity":"moderate","public_date":"2017-10-06T00:00:00Z","advisories":["RHSA-2019:1258"],"bugzilla":"1524234","bugzilla_description":"CVE-2017-15365 mariadb: Replication in sql/event_data_objects.cc occurs before ACL checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3529","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472682","bugzilla_description":"CVE-2017-3529 mysql: Server: UDF unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3529.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-3633","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472683","bugzilla_description":"CVE-2017-3633 mysql: Server: Memcached unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3634","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472684","bugzilla_description":"CVE-2017-3634 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3635","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1472685","bugzilla_description":"CVE-2017-3635 mysql: C API unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-3636","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2018:2439","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1472686","bugzilla_description":"CVE-2017-3636 mysql: Client programs unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3636.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-3637","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472687","bugzilla_description":"CVE-2017-3637 mysql: X Plugin unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-3638","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472688","bugzilla_description":"CVE-2017-3638 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3639","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472689","bugzilla_description":"CVE-2017-3639 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3640","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472692","bugzilla_description":"CVE-2017-3640 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3640.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3641","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2018:2439","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1472693","bugzilla_description":"CVE-2017-3641 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3642","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472695","bugzilla_description":"CVE-2017-3642 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3642.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3643","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472697","bugzilla_description":"CVE-2017-3643 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3643.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3644","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472698","bugzilla_description":"CVE-2017-3644 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3644.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3645","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472700","bugzilla_description":"CVE-2017-3645 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3646","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472701","bugzilla_description":"CVE-2017-3646 mysql: X Plugin unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3646.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3647","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472703","bugzilla_description":"CVE-2017-3647 mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3648","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472704","bugzilla_description":"CVE-2017-3648 mysql: Server: Charsets unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3648.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3649","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472705","bugzilla_description":"CVE-2017-3649 mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3649.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3650","severity":"low","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472706","bugzilla_description":"CVE-2017-3650 mysql: C API unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3650.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3651","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2016:2927","RHSA-2018:2439","RHSA-2017:2192","RHSA-2016:2928"],"bugzilla":"1472708","bugzilla_description":"CVE-2017-3651 mysql: Client mysqldump unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb101-mariadb-1:10.1.19-6.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-1:5.5.56-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3651.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3652","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472710","bugzilla_description":"CVE-2017-3652 mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2017-3653","severity":"low","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2018:2439","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1472711","bugzilla_description":"CVE-2017-3653 mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3653.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3308","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443358","bugzilla_description":"CVE-2017-3308 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3308.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3309","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443359","bugzilla_description":"CVE-2017-3309 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3309.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3329","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443360","bugzilla_description":"CVE-2017-3329 mysql: Server: Thread Pooling unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3329.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3331","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443362","bugzilla_description":"CVE-2017-3331 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3450","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443363","bugzilla_description":"CVE-2017-3450 mysql: Server: Memcached unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3450.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3452","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787"],"bugzilla":"1443364","bugzilla_description":"CVE-2017-3452 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3452.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3453","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443365","bugzilla_description":"CVE-2017-3453 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3453.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3454","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443366","bugzilla_description":"CVE-2017-3454 mysql: Server: InnoDB unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3454.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-3455","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443368","bugzilla_description":"CVE-2017-3455 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3455.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-3456","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443369","bugzilla_description":"CVE-2017-3456 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3456.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3457","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443371","bugzilla_description":"CVE-2017-3457 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3457.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3458","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443372","bugzilla_description":"CVE-2017-3458 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3459","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443374","bugzilla_description":"CVE-2017-3459 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3460","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443375","bugzilla_description":"CVE-2017-3460 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3461","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443376","bugzilla_description":"CVE-2017-3461 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3461.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3462","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443377","bugzilla_description":"CVE-2017-3462 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3462.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3463","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443378","bugzilla_description":"CVE-2017-3463 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3463.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3464","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443379","bugzilla_description":"CVE-2017-3464 mysql: Server: DDL unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3464.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3465","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443380","bugzilla_description":"CVE-2017-3465 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3465.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3467","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443382","bugzilla_description":"CVE-2017-3467 mysql: Server: C API unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3467.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3468","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443385","bugzilla_description":"CVE-2017-3468 mysql: Server: Security: Encryption unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3599","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443386","bugzilla_description":"CVE-2017-3599 mysql: integer underflow in get_56_lenc_string() leading to DoS (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3599.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3305","severity":"moderate","public_date":"2017-03-17T00:00:00Z","advisories":["RHSA-2017:2787"],"bugzilla":"1431690","bugzilla_description":"CVE-2017-3305 mysql: incorrect enforcement of ssl-mode=REQUIRED in MySQL 5.5 and 5.6","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3305.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2016-5483","severity":"moderate","public_date":"2017-03-09T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2016:2927","RHSA-2017:2192","RHSA-2016:2928","RHSA-2016:2131"],"bugzilla":"1433010","bugzilla_description":"CVE-2017-3600 mariadb, mysql: Incorrect input validation allowing code execution via mysqldump","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el6","rh-mysql56-mysql-0:5.6.37-5.el7","mariadb55-mariadb-0:5.5.53-1.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-1:5.5.56-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5483.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-3600","severity":"moderate","public_date":"2017-03-09T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2016:2927","RHSA-2017:2192","RHSA-2016:2928"],"bugzilla":"1433010","bugzilla_description":"CVE-2017-3600 mariadb, mysql: Incorrect input validation allowing code execution via mysqldump","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb101-mariadb-1:10.1.19-6.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-1:5.5.56-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3600.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-3302","severity":"low","public_date":"2017-01-27T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1422119","bugzilla_description":"CVE-2017-3302 mysql: prepared statement handle use-after-free after disconnect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-8318","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1414335","bugzilla_description":"CVE-2016-8318 mysql: Server: Security: Encryption  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8318.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2016-8327","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1414337","bugzilla_description":"CVE-2016-8327 mysql: Server: Replication  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8327.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3238","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414338","bugzilla_description":"CVE-2017-3238 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3238.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3243","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414340","bugzilla_description":"CVE-2017-3243 mysql: Server: Charsets unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3243.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3244","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414342","bugzilla_description":"CVE-2017-3244 mysql: Server: DML unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3251","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414343","bugzilla_description":"CVE-2017-3251 mysql: Server: Optimizer  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3256","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414345","bugzilla_description":"CVE-2017-3256 mysql: Server: Replication  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3256.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3257","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414350","bugzilla_description":"CVE-2017-3257 mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3258","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414351","bugzilla_description":"CVE-2017-3258 mysql: Server: DDL unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3258.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3273","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1414352","bugzilla_description":"CVE-2017-3273 mysql: Server: DDL  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3273.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3313","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414353","bugzilla_description":"CVE-2017-3313 mysql: Server: MyISAM unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-3317","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414355","bugzilla_description":"CVE-2017-3317 mysql: Logging unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.0"},{"CVE":"CVE-2017-3318","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414357","bugzilla_description":"CVE-2017-3318 mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3318.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2017-3319","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414358","bugzilla_description":"CVE-2017-3319 mysql: Server: X Plugin  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3319.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3320","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414360","bugzilla_description":"CVE-2017-3320 mysql: Server: Security: Encryption  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2017-3312","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414133","bugzilla_description":"CVE-2017-3312 mysql: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 fix (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3312.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-3265","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414423","bugzilla_description":"CVE-2017-3265 mysql: unsafe chmod/chown use in init script (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3265.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-3291","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414429","bugzilla_description":"CVE-2017-3291 mysql: unrestricted mysqld_safe's ledir (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3291.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-3492","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386554","bugzilla_description":"CVE-2016-3492 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3492.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3495","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386555","bugzilla_description":"CVE-2016-3495 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3495.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5507","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2749"],"bugzilla":"1386556","bugzilla_description":"CVE-2016-5507 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.34-2.el6","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5584","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386557","bugzilla_description":"CVE-2016-5584 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5584.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2016-5609","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386559","bugzilla_description":"CVE-2016-5609 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5609.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5612","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:1601"],"bugzilla":"1386561","bugzilla_description":"CVE-2016-5612 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5612.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5617","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2130","RHSA-2017:2192","RHSA-2018:0279","RHSA-2016:2749","RHSA-2018:0574"],"bugzilla":"1386564","bugzilla_description":"CVE-2016-5617 mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.34-2.el6","mariadb-1:5.5.56-2.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-6664","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2130","RHSA-2017:2192","RHSA-2018:0279","RHSA-2016:2749","RHSA-2018:0574"],"bugzilla":"1386564","bugzilla_description":"CVE-2016-5617 mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.34-2.el6","mariadb-1:5.5.56-2.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6664.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-5624","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928"],"bugzilla":"1386566","bugzilla_description":"CVE-2016-5624 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5625","severity":"important","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386567","bugzilla_description":"CVE-2016-5625 mysql: unspecified vulnerability in subcomponent: Server: Packaging (CPU October 2016)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5625.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-5626","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386568","bugzilla_description":"CVE-2016-5626 mysql: unspecified vulnerability in subcomponent: Server: GIS (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5626.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5627","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386570","bugzilla_description":"CVE-2016-5627 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5628","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386571","bugzilla_description":"CVE-2016-5628 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5628.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5629","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386572","bugzilla_description":"CVE-2016-5629 mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5630","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2927","RHSA-2016:1601"],"bugzilla":"1386573","bugzilla_description":"CVE-2016-5630 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5630.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5631","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386574","bugzilla_description":"CVE-2016-5631 mysql: unspecified vulnerability in subcomponent: Server: Memcached (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5631.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5632","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386575","bugzilla_description":"CVE-2016-5632 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5633","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386576","bugzilla_description":"CVE-2016-5633 mysql: unspecified vulnerability in subcomponent: Server: Performance Schema (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5634","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386579","bugzilla_description":"CVE-2016-5634 mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5635","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386580","bugzilla_description":"CVE-2016-5635 mysql: unspecified vulnerability in subcomponent: Server: Security: Audit (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-7440","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386584","bugzilla_description":"CVE-2016-7440 yaSSL: AES key leak via cache-bank timing side channel attack","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7440.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2016-8283","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386585","bugzilla_description":"CVE-2016-8283 mysql: unspecified vulnerability in subcomponent: Server: Types (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-8284","severity":"low","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386587","bugzilla_description":"CVE-2016-8284 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU October 2016)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8284.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"1.8"},{"CVE":"CVE-2016-8286","severity":"low","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386588","bugzilla_description":"CVE-2016-8286 mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8286.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-8287","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386589","bugzilla_description":"CVE-2016-8287 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU October 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8287.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.5"},{"CVE":"CVE-2016-8288","severity":"low","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386590","bugzilla_description":"CVE-2016-8288 mysql: unspecified vulnerability in subcomponent: Server: InnoDB Plugin (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8288.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-8289","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386591","bugzilla_description":"CVE-2016-8289 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8289.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-8290","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386592","bugzilla_description":"CVE-2016-8290 mysql: unspecified vulnerability in subcomponent: Server: Performance Schema (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8290.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2016-6662","severity":"important","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2059","RHSA-2016:2058","RHSA-2016:2130","RHSA-2016:2077","RHSA-2016:2131","RHSA-2017:0184","RHSA-2016:2060","RHSA-2016:2062","RHSA-2016:2061","RHSA-2016:2927","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1375198","bugzilla_description":"CVE-2016-6662 mysql: general_log can write to configuration files, leading to privilege escalation (CPU Oct 2016)","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-732","affected_packages":["mariadb-galera-1:5.5.42-1.2.el7ost","mariadb-galera-0:5.5.42-1.1.el6ost","mariadb55-mariadb-0:5.5.53-1.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","mysql-0:5.1.73-8.el6_8","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mysql56-mysql-0:5.6.34-2.el7","mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","rh-mariadb101-mariadb-1:10.1.19-6.el6","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-galera-1:5.5.42-5.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6662.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2016-5616","severity":"moderate","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2017:0184","RHSA-2016:2749"],"bugzilla":"1378936","bugzilla_description":"CVE-2016-5616 CVE-2016-6663 mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-362","affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","mysql-0:5.1.73-8.el6_8","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6663","severity":"moderate","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2017:0184","RHSA-2016:2749"],"bugzilla":"1378936","bugzilla_description":"CVE-2016-5616 CVE-2016-6663 mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-362","affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","mysql-0:5.1.73-8.el6_8","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6663.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-3424","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358199","bugzilla_description":"CVE-2016-3424 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3424.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-3440","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358200","bugzilla_description":"CVE-2016-3440 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3440.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3452","severity":"low","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1358201","bugzilla_description":"CVE-2016-3452 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3452.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-3459","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1601"],"bugzilla":"1358202","bugzilla_description":"CVE-2016-3459 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-3471","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1358203","bugzilla_description":"CVE-2016-3471 mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:P/I:P/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3471.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2016-3477","severity":"important","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358205","bugzilla_description":"CVE-2016-3477 mysql: unspecified vulnerability in subcomponent: Server: Parser (CPU July 2016)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-3486","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358206","bugzilla_description":"CVE-2016-3486 mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3501","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358207","bugzilla_description":"CVE-2016-3501 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3501.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3518","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358208","bugzilla_description":"CVE-2016-3518 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3521","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358209","bugzilla_description":"CVE-2016-3521 mysql: unspecified vulnerability in subcomponent: Server: Types (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3521.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3588","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358210","bugzilla_description":"CVE-2016-3588 mysql: unspecified vulnerability in subcomponent: Server: InnoDB  (CPU July 2016)","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-3614","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358211","bugzilla_description":"CVE-2016-3614 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3614.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-3615","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358212","bugzilla_description":"CVE-2016-3615 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU July 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-5436","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358213","bugzilla_description":"CVE-2016-5436 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5437","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358214","bugzilla_description":"CVE-2016-5437 mysql: unspecified vulnerability in subcomponent: Server: Log (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5437.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5439","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358216","bugzilla_description":"CVE-2016-5439 mysql: unspecified vulnerability in subcomponent: Server: Privileges (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5439.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5440","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358218","bugzilla_description":"CVE-2016-5440 mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5440.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5441","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358219","bugzilla_description":"CVE-2016-5441 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5441.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5442","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358221","bugzilla_description":"CVE-2016-5442 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption  (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5442.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5443","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358222","bugzilla_description":"CVE-2016-5443 mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5443.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-5444","severity":"low","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1358223","bugzilla_description":"CVE-2016-5444 mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5444.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-0639","severity":"critical","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1329238","bugzilla_description":"CVE-2016-0639 mysql: unspecified vulnerability in subcomponent: Server: Pluggable Authentication (CPU April 2016)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0639.json"},{"CVE":"CVE-2016-0640","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329239","bugzilla_description":"CVE-2016-0640 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0640.json"},{"CVE":"CVE-2016-0641","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329241","bugzilla_description":"CVE-2016-0641 mysql: unspecified vulnerability in subcomponent: Server: MyISAM (CPU April 2016)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0641.json"},{"CVE":"CVE-2016-0642","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1329243","bugzilla_description":"CVE-2016-0642 mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU April 2016)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:P/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0642.json"},{"CVE":"CVE-2016-0643","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329245","bugzilla_description":"CVE-2016-0643 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0643.json"},{"CVE":"CVE-2016-0644","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329247","bugzilla_description":"CVE-2016-0644 mysql: unspecified vulnerability in subcomponent: Server: DDL (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0644.json"},{"CVE":"CVE-2016-0646","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329248","bugzilla_description":"CVE-2016-0646 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0646.json"},{"CVE":"CVE-2016-0647","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329249","bugzilla_description":"CVE-2016-0647 mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0647.json"},{"CVE":"CVE-2016-0648","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329251","bugzilla_description":"CVE-2016-0648 mysql: unspecified vulnerability in subcomponent: Server: PS (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0648.json"},{"CVE":"CVE-2016-0649","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329252","bugzilla_description":"CVE-2016-0649 mysql: unspecified vulnerability in subcomponent: Server: PS (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0649.json"},{"CVE":"CVE-2016-0650","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329253","bugzilla_description":"CVE-2016-0650 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0650.json"},{"CVE":"CVE-2016-0651","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1329254","bugzilla_description":"CVE-2016-0651 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0651.json"},{"CVE":"CVE-2016-0652","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329255","bugzilla_description":"CVE-2016-0652 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0652.json"},{"CVE":"CVE-2016-0653","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329257","bugzilla_description":"CVE-2016-0653 mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0653.json"},{"CVE":"CVE-2016-0654","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329258","bugzilla_description":"CVE-2016-0654 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0654.json"},{"CVE":"CVE-2016-0655","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:0705"],"bugzilla":"1329259","bugzilla_description":"CVE-2016-0655 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0655.json"},{"CVE":"CVE-2016-0656","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329260","bugzilla_description":"CVE-2016-0656 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0656.json"},{"CVE":"CVE-2016-0657","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329261","bugzilla_description":"CVE-2016-0657 mysql: unspecified vulnerability in subcomponent: Server: JSON (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0657.json"},{"CVE":"CVE-2016-0658","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329263","bugzilla_description":"CVE-2016-0658 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0658.json"},{"CVE":"CVE-2016-0659","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329265","bugzilla_description":"CVE-2016-0659 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0659.json"},{"CVE":"CVE-2016-0661","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1329266","bugzilla_description":"CVE-2016-0661 mysql: unspecified vulnerability in subcomponent: Server: Options (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0661.json"},{"CVE":"CVE-2016-0662","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329267","bugzilla_description":"CVE-2016-0662 mysql: unspecified vulnerability in subcomponent: Server: Partition (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0662.json"},{"CVE":"CVE-2016-0663","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329268","bugzilla_description":"CVE-2016-0663 mysql: unspecified vulnerability in subcomponent: Server: Performance Schema (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0663.json"},{"CVE":"CVE-2016-0665","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1329269","bugzilla_description":"CVE-2016-0665 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0665.json"},{"CVE":"CVE-2016-0666","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329270","bugzilla_description":"CVE-2016-0666 mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0666.json"},{"CVE":"CVE-2016-0667","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329271","bugzilla_description":"CVE-2016-0667 mysql: unspecified vulnerability in subcomponent: Server: Locking (CPU April 2016)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0667.json"},{"CVE":"CVE-2016-0668","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:0705"],"bugzilla":"1329273","bugzilla_description":"CVE-2016-0668 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":1.7,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0668.json"},{"CVE":"CVE-2016-2047","severity":"moderate","public_date":"2015-11-30T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301874","bugzilla_description":"CVE-2016-2047 mysql: ssl-validate-cert incorrect hostname check","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2047.json"},{"CVE":"CVE-2015-4766","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1630"],"bugzilla":"1274748","bugzilla_description":"CVE-2015-4766 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4766.json"},{"CVE":"CVE-2015-4791","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274749","bugzilla_description":"CVE-2015-4791 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4791.json"},{"CVE":"CVE-2015-4792","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274752","bugzilla_description":"CVE-2015-4792 mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4792.json"},{"CVE":"CVE-2015-4800","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274754","bugzilla_description":"CVE-2015-4800 mysql: unspecified vulnerability related to Server:Optimizer (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4800.json"},{"CVE":"CVE-2015-4802","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274756","bugzilla_description":"CVE-2015-4802 mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4802.json"},{"CVE":"CVE-2015-4807","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274758","bugzilla_description":"CVE-2015-4807 mysql: unspecified vulnerability related to Server:Query Cache (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4807.json"},{"CVE":"CVE-2015-4815","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274759","bugzilla_description":"CVE-2015-4815 mysql: unspecified vulnerability related to Server:DDL (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4815.json"},{"CVE":"CVE-2015-4816","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1481","RHSA-2015:1629","RHSA-2015:1628","RHSA-2016:0534"],"bugzilla":"1274761","bugzilla_description":"CVE-2015-4816 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.45-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.49-1.el6","mysql55-mysql-0:5.5.45-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4816.json"},{"CVE":"CVE-2015-4819","severity":"low","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1481","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628","RHSA-2016:0534"],"bugzilla":"1274764","bugzilla_description":"CVE-2015-4819 mysql: unspecified vulnerability related to Client programs (CPU October 2015)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.45-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.49-1.el6","mysql55-mysql-0:5.5.45-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4819.json"},{"CVE":"CVE-2015-4826","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274766","bugzilla_description":"CVE-2015-4826 mysql: unspecified vulnerability related to Server:Types (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4826.json"},{"CVE":"CVE-2015-4830","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274767","bugzilla_description":"CVE-2015-4830 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4830.json"},{"CVE":"CVE-2015-4833","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1630"],"bugzilla":"1274770","bugzilla_description":"CVE-2015-4833 mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4833.json"},{"CVE":"CVE-2015-4836","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274771","bugzilla_description":"CVE-2015-4836 mysql: unspecified vulnerability related to Server:SP (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4836.json"},{"CVE":"CVE-2015-4858","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274773","bugzilla_description":"CVE-2015-4858 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4858.json"},{"CVE":"CVE-2015-4861","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274776","bugzilla_description":"CVE-2015-4861 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4861.json"},{"CVE":"CVE-2015-4862","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274778","bugzilla_description":"CVE-2015-4862 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4862.json"},{"CVE":"CVE-2015-4864","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1274779","bugzilla_description":"CVE-2015-4864 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4864.json"},{"CVE":"CVE-2015-4866","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1646"],"bugzilla":"1274780","bugzilla_description":"CVE-2015-4866 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4866.json"},{"CVE":"CVE-2015-4870","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274781","bugzilla_description":"CVE-2015-4870 mysql: unspecified vulnerability related to Server:Parser (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4870.json"},{"CVE":"CVE-2015-4879","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1481","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628","RHSA-2016:0534"],"bugzilla":"1274783","bugzilla_description":"CVE-2015-4879 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.45-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.49-1.el6","mysql55-mysql-0:5.5.45-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4879.json"},{"CVE":"CVE-2015-4890","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274785","bugzilla_description":"CVE-2015-4890 mysql: unspecified vulnerability related to Server:Replication (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4890.json"},{"CVE":"CVE-2015-4895","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2015:1630"],"bugzilla":"1274786","bugzilla_description":"CVE-2015-4895 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4895.json"},{"CVE":"CVE-2015-4904","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1630"],"bugzilla":"1274787","bugzilla_description":"CVE-2015-4904 mysql: unspecified vulnerability related to libmysqld (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4904.json"},{"CVE":"CVE-2015-4905","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274790","bugzilla_description":"CVE-2015-4905 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4905.json"},{"CVE":"CVE-2015-4910","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274792","bugzilla_description":"CVE-2015-4910 mysql: unspecified vulnerability related to Server:Memcached (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4910.json"},{"CVE":"CVE-2015-4913","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274794","bugzilla_description":"CVE-2015-4913 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4913.json"},{"CVE":"CVE-2015-4730","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1276265","bugzilla_description":"CVE-2015-4730 mysql: unspecified vulnerability related to Server:Types (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4730.json"},{"CVE":"CVE-2015-2582","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244768","bugzilla_description":"CVE-2015-2582 mysql: unspecified vulnerability related to Server:GIS (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2582.json"},{"CVE":"CVE-2015-2611","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244769","bugzilla_description":"CVE-2015-2611 mysql: unspecified vulnerability related to Server:DML (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2611.json"},{"CVE":"CVE-2015-2617","severity":"important","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244770","bugzilla_description":"CVE-2015-2617 mysql: unspecified vulnerability related to Server:Partition (CPU July 2015)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2617.json"},{"CVE":"CVE-2015-2620","severity":"low","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244771","bugzilla_description":"CVE-2015-2620 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU July 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2620.json"},{"CVE":"CVE-2015-2639","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244772","bugzilla_description":"CVE-2015-2639 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2639.json"},{"CVE":"CVE-2015-2641","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244773","bugzilla_description":"CVE-2015-2641 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2641.json"},{"CVE":"CVE-2015-2643","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244774","bugzilla_description":"CVE-2015-2643 mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2643.json"},{"CVE":"CVE-2015-2648","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244775","bugzilla_description":"CVE-2015-2648 mysql: unspecified vulnerability related to Server:DML (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2648.json"},{"CVE":"CVE-2015-2661","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244776","bugzilla_description":"CVE-2015-2661 mysql: unspecified vulnerability related to Client (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2661.json"},{"CVE":"CVE-2015-4737","severity":"low","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244778","bugzilla_description":"CVE-2015-4737 mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU July 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4737.json"},{"CVE":"CVE-2015-4752","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244779","bugzilla_description":"CVE-2015-4752 mysql: unspecified vulnerability related to Server:I_S (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4752.json"},{"CVE":"CVE-2015-4756","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244780","bugzilla_description":"CVE-2015-4756 mysql: unspecified vulnerability related to Server:InnoDB (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4756.json"},{"CVE":"CVE-2015-4757","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244781","bugzilla_description":"CVE-2015-4757 mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4757.json"},{"CVE":"CVE-2015-4761","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244782","bugzilla_description":"CVE-2015-4761 mysql: unspecified vulnerability related to Server:Memcached (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4761.json"},{"CVE":"CVE-2015-4767","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244784","bugzilla_description":"CVE-2015-4767 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4767.json"},{"CVE":"CVE-2015-4769","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244785","bugzilla_description":"CVE-2015-4769 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4769.json"},{"CVE":"CVE-2015-4771","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244786","bugzilla_description":"CVE-2015-4771 mysql: unspecified vulnerability related to Server:RBR (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4771.json"},{"CVE":"CVE-2015-4772","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244787","bugzilla_description":"CVE-2015-4772 mysql: unspecified vulnerability related to Server:Partition (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4772.json"},{"CVE":"CVE-2015-3152","severity":"moderate","public_date":"2015-04-29T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665"],"bugzilla":"1217506","bugzilla_description":"CVE-2015-3152 mysql: use of SSL/TLS can not be enforced in mysql client library (oCERT-2015-003, BACKRONYM)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3152.json"},{"CVE":"CVE-2015-0405","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212753","bugzilla_description":"CVE-2015-0405 mysql: unspecified vulnerability related to Server:XA (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0405.json"},{"CVE":"CVE-2015-0438","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212755","bugzilla_description":"CVE-2015-0438 mysql: unspecified vulnerability related to Server:Partition (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0438.json"},{"CVE":"CVE-2015-0498","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212757","bugzilla_description":"CVE-2015-0498 mysql: unspecified vulnerability related to Server:Replication (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0498.json"},{"CVE":"CVE-2015-0501","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212758","bugzilla_description":"CVE-2015-0501 mysql: unspecified vulnerability related to Server:Compiling (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0501.json"},{"CVE":"CVE-2015-0506","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212759","bugzilla_description":"CVE-2015-0506 mysql: unspecified vulnerability related to Server:InnoDB (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0506.json"},{"CVE":"CVE-2015-0511","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212760","bugzilla_description":"CVE-2015-0511 mysql: unspecified vulnerability related to Server:SP (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0511.json"},{"CVE":"CVE-2015-2568","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212763","bugzilla_description":"CVE-2015-2568 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2568.json"},{"CVE":"CVE-2015-0423","severity":"low","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212765","bugzilla_description":"CVE-2015-0423 mysql: unspecified vulnerability related to Server:Optimizer (CPU April 2015)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0423.json"},{"CVE":"CVE-2015-0439","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212767","bugzilla_description":"CVE-2015-0439 mysql: unspecified vulnerability related to Server:InnoDB (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0439.json"},{"CVE":"CVE-2015-0499","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212768","bugzilla_description":"CVE-2015-0499 mysql: unspecified vulnerability related to Server:Federated (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0499.json"},{"CVE":"CVE-2015-0503","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212769","bugzilla_description":"CVE-2015-0503 mysql: unspecified vulnerability related to Server:Partition (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0503.json"},{"CVE":"CVE-2015-0507","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212770","bugzilla_description":"CVE-2015-0507 mysql: unspecified vulnerability related to Server:Memcached (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0507.json"},{"CVE":"CVE-2015-2566","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212771","bugzilla_description":"CVE-2015-2566 mysql: unspecified vulnerability related to Server:DML (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2566.json"},{"CVE":"CVE-2015-2571","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212772","bugzilla_description":"CVE-2015-2571 mysql: unspecified vulnerability related to Server:Optimizer (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2571.json"},{"CVE":"CVE-2015-2576","severity":"low","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212774","bugzilla_description":"CVE-2015-2576 mysql-utilities: unspecified vulnerability related to Installation (CPU April 2015)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2576.json"},{"CVE":"CVE-2015-0433","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212776","bugzilla_description":"CVE-2015-0433 mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0433.json"},{"CVE":"CVE-2015-0441","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212777","bugzilla_description":"CVE-2015-0441 mysql: unspecified vulnerability related to Server:Security:Encryption (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0441.json"},{"CVE":"CVE-2015-0500","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212779","bugzilla_description":"CVE-2015-0500 mysql: unspecified vulnerability related to Server:Information Schema (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0500.json"},{"CVE":"CVE-2015-0505","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212780","bugzilla_description":"CVE-2015-0505 mysql: unspecified vulnerability related to Server:DDL (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0505.json"},{"CVE":"CVE-2015-0508","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212781","bugzilla_description":"CVE-2015-0508 mysql: unspecified vulnerability related to Server:InnoDB (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0508.json"},{"CVE":"CVE-2015-2567","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212782","bugzilla_description":"CVE-2015-2567 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2567.json"},{"CVE":"CVE-2015-2573","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212783","bugzilla_description":"CVE-2015-2573 mysql: unspecified vulnerability related to Server:DDL (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2573.json"},{"CVE":"CVE-2014-6568","severity":"low","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184552","bugzilla_description":"CVE-2014-6568 mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU Jan 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6568.json"},{"CVE":"CVE-2015-0374","severity":"low","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184553","bugzilla_description":"CVE-2015-0374 mysql: unspecified vulnerability related to Server:Security:Privileges:Foreign Key (CPU Jan 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0374.json"},{"CVE":"CVE-2015-0381","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184554","bugzilla_description":"CVE-2015-0381 mysql: unspecified vulnerability related to Server:Replication (CPU Jan 2015)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0381.json"},{"CVE":"CVE-2015-0382","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184555","bugzilla_description":"CVE-2015-0382 mysql: unspecified vulnerability related to Server:Replication (CPU Jan 2015)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0382.json"},{"CVE":"CVE-2015-0385","severity":"low","public_date":"2015-01-21T00:00:00Z","advisories":[],"bugzilla":"1184556","bugzilla_description":"CVE-2015-0385 mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU Jan 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0385.json"},{"CVE":"CVE-2015-0391","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHSA-2015:0117","RHSA-2015:0116","RHSA-2015:1628"],"bugzilla":"1184557","bugzilla_description":"CVE-2015-0391 mysql: unspecified vulnerability related to Server:DDL (CPU Jan 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0391.json"},{"CVE":"CVE-2015-0409","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":[],"bugzilla":"1184559","bugzilla_description":"CVE-2015-0409 mysql: unspecified vulnerability related to Server:Optimizer (CPU Jan 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0409.json"},{"CVE":"CVE-2015-0411","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184560","bugzilla_description":"CVE-2015-0411 mysql: unspecified vulnerability related to Server:Security:Encryption (CPU Jan 2015)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0411.json"},{"CVE":"CVE-2015-0432","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184561","bugzilla_description":"CVE-2015-0432 mysql: unspecified vulnerability related to Server:InnoDB:DDL:Foreign Key (CPU Jan 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0432.json"},{"CVE":"CVE-2015-7744","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301488","bugzilla_description":"CVE-2015-7744 yaSSL, wolfSSL: insufficient hardening of RSA-CRT implementation (Oracle MySQL CPU Jan 2016)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7744.json"},{"CVE":"CVE-2016-0502","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301489","bugzilla_description":"CVE-2016-0502 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0502.json"},{"CVE":"CVE-2016-0503","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301490","bugzilla_description":"CVE-2016-0503 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0503.json"},{"CVE":"CVE-2016-0504","severity":"important","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301491","bugzilla_description":"CVE-2016-0504 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0504.json"},{"CVE":"CVE-2016-0505","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301492","bugzilla_description":"CVE-2016-0505 mysql: unspecified vulnerability in subcomponent: Server: Options (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0505.json"},{"CVE":"CVE-2016-0546","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301493","bugzilla_description":"CVE-2016-0546 mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0546.json"},{"CVE":"CVE-2016-0594","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301494","bugzilla_description":"CVE-2016-0594 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0594.json"},{"CVE":"CVE-2016-0595","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301495","bugzilla_description":"CVE-2016-0595 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0595.json"},{"CVE":"CVE-2016-0596","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301496","bugzilla_description":"CVE-2016-0596 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0596.json"},{"CVE":"CVE-2016-0597","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301497","bugzilla_description":"CVE-2016-0597 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0597.json"},{"CVE":"CVE-2016-0598","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301498","bugzilla_description":"CVE-2016-0598 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0598.json"},{"CVE":"CVE-2016-0599","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301500","bugzilla_description":"CVE-2016-0599 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0599.json"},{"CVE":"CVE-2016-0600","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301501","bugzilla_description":"CVE-2016-0600 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0600.json"},{"CVE":"CVE-2016-0601","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301502","bugzilla_description":"CVE-2016-0601 mysql: unspecified vulnerability in subcomponent: Server: Partition (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0601.json"},{"CVE":"CVE-2016-0605","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301503","bugzilla_description":"CVE-2016-0605 mysql: unspecified vulnerability in subcomponent: Server: General (CPU January 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0605.json"},{"CVE":"CVE-2016-0606","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301504","bugzilla_description":"CVE-2016-0606 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0606.json"},{"CVE":"CVE-2016-0607","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301505","bugzilla_description":"CVE-2016-0607 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU January 2016)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0607.json"},{"CVE":"CVE-2016-0608","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301506","bugzilla_description":"CVE-2016-0608 mysql: unspecified vulnerability in subcomponent: Server: UDF (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0608.json"},{"CVE":"CVE-2016-0609","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301507","bugzilla_description":"CVE-2016-0609 mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU January 2016)","cvss_score":1.7,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0609.json"},{"CVE":"CVE-2016-0610","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:0705"],"bugzilla":"1301508","bugzilla_description":"CVE-2016-0610 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0610.json"},{"CVE":"CVE-2016-0611","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301509","bugzilla_description":"CVE-2016-0611 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0611.json"},{"CVE":"CVE-2016-0616","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301510","bugzilla_description":"CVE-2016-0616 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0616.json"},{"CVE":"CVE-2014-4287","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153461","bugzilla_description":"CVE-2014-4287 mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4287.json"},{"CVE":"CVE-2014-6463","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153462","bugzilla_description":"CVE-2014-6463 mysql: unspecified vulnerability related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML (CPU October 2014)","cvss_score":3.3,"cvss_scoring_vector":"AV:N/AC:L/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6463.json"},{"CVE":"CVE-2014-6464","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153463","bugzilla_description":"CVE-2014-6464 mysql: unspecified vulnerability related to SERVER:INNODB DML FOREIGN KEYS (CPU October 2014)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6464.json"},{"CVE":"CVE-2014-6469","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153464","bugzilla_description":"CVE-2014-6469 mysql: unspecified vulnerability related to SERVER:OPTIMIZER (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6469.json"},{"CVE":"CVE-2014-6478","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153466","bugzilla_description":"CVE-2014-6478 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6478.json"},{"CVE":"CVE-2014-6484","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153467","bugzilla_description":"CVE-2014-6484 mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6484.json"},{"CVE":"CVE-2014-6491","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153483","bugzilla_description":"CVE-2014-6491 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6491.json"},{"CVE":"CVE-2014-6494","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153484","bugzilla_description":"CVE-2014-6494 mysql: unspecified vulnerability related to CLIENT:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6494.json"},{"CVE":"CVE-2014-6495","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153485","bugzilla_description":"CVE-2014-6495 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6495.json"},{"CVE":"CVE-2014-6496","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153486","bugzilla_description":"CVE-2014-6496 mysql: unspecified vulnerability related to CLIENT:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6496.json"},{"CVE":"CVE-2014-6500","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153487","bugzilla_description":"CVE-2014-6500 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6500.json"},{"CVE":"CVE-2014-6505","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153489","bugzilla_description":"CVE-2014-6505 mysql: unspecified vulnerability related to SERVER:MEMORY STORAGE ENGINE (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6505.json"},{"CVE":"CVE-2014-6507","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153490","bugzilla_description":"CVE-2014-6507 mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6507.json"},{"CVE":"CVE-2014-6520","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153491","bugzilla_description":"CVE-2014-6520 mysql: unspecified vulnerability related to SERVER:DDL (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6520.json"},{"CVE":"CVE-2014-6530","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153493","bugzilla_description":"CVE-2014-6530 mysql: unspecified vulnerability related to CLIENT:MYSQLDUMP (CPU October 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6530.json"},{"CVE":"CVE-2014-6551","severity":"low","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153494","bugzilla_description":"CVE-2014-6551 mysql: unspecified vulnerability related to CLIENT:MYSQLADMIN (CPU October 2014)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6551.json"},{"CVE":"CVE-2014-6555","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153495","bugzilla_description":"CVE-2014-6555 mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6555.json"},{"CVE":"CVE-2014-6559","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153496","bugzilla_description":"CVE-2014-6559 mysql: unspecified vulnerability related to C API SSL CERTIFICATE HANDLING (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6559.json"},{"CVE":"CVE-2014-6564","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153497","bugzilla_description":"CVE-2014-6564 mysql: unspecified vulnerability related to SERVER:INNODB FULLTEXT SEARCH DML (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6564.json"},{"CVE":"CVE-2014-4274","severity":"moderate","public_date":"2014-07-31T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1126271","bugzilla_description":"CVE-2014-4274 mysql: unspecified MyISAM temporary file issue fixed in 5.5.39 and 5.6.20","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4274.json"},{"CVE":"CVE-2014-2494","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120382","bugzilla_description":"CVE-2014-2494 mysql: unspecified vulnerability related to ENARC (CPU July 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2494.json"},{"CVE":"CVE-2014-4207","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120383","bugzilla_description":"CVE-2014-4207 mysql: unspecified vulnerability related to SROPTZR (CPU July 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4207.json"},{"CVE":"CVE-2014-4243","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1859"],"bugzilla":"1120385","bugzilla_description":"CVE-2014-4243 mysql: unspecified vulnerability related to ENFED (CPU July 2014)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4243.json"},{"CVE":"CVE-2014-4258","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120387","bugzilla_description":"CVE-2014-4258 mysql: unspecified vulnerability related to SRINFOSC (CPU July 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4258.json"},{"CVE":"CVE-2014-4260","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120388","bugzilla_description":"CVE-2014-4260 mysql: unspecified vulnerability related to SRCHAR (CPU July 2014)","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4260.json"},{"CVE":"CVE-2012-5615","severity":"low","public_date":"2012-12-01T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"882608","bugzilla_description":"CVE-2012-5615 mysql: Remote Preauth User Enumeration flaw","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-209","affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5615.json"},{"CVE":"CVE-2005-0004","severity":"moderate","public_date":"2005-01-19T00:00:00Z","advisories":[],"bugzilla":"1386138","bugzilla_description":"CVE-2005-0004 mysql: CVE-2005-0004 mysqlaccess creates/overwrite files on the system","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0004.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H","cvss3_score":"7.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gamin-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gamin-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gamin-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gamin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gamin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gamin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gavl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gavl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gavl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gawk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gawk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gawk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gc_security_api_results.json
new file mode 100644
index 0000000..63d46d6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17451","severity":"low","public_date":"2019-10-07T00:00:00Z","advisories":["RHSA-2020:1797"],"bugzilla":"1771668","bugzilla_description":"CVE-2019-17451 binutils: integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["binutils-0:2.30-73.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17451.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-13627","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1764018","bugzilla_description":"CVE-2019-13627 libgcrypt: ECDSA timing attack allowing private key leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-15847","severity":"moderate","public_date":"2019-09-02T00:00:00Z","advisories":["RHSA-2020:2274","RHSA-2020:0924","RHSA-2020:1864"],"bugzilla":"1755523","bugzilla_description":"CVE-2019-15847 gcc: POWER9 \"DARN\" RNG intrinsic produces repeated output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":["devtoolset-8-gcc-0:8.3.1-3.2.el7","devtoolset-8-gcc-0:8.3.1-3.2.el6","devtoolset-9-gcc-0:9.3.1-2.el7","gcc-0:8.3.1-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14250","severity":"low","public_date":"2019-08-09T00:00:00Z","advisories":[],"bugzilla":"1739490","bugzilla_description":"CVE-2019-14250 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14250.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-12904","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730320","bugzilla_description":"CVE-2019-12904 Libgcrypt: physical addresses being available to other processes leads to a flush-and-reload side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12904.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-12972","severity":"low","public_date":"2019-06-17T00:00:00Z","advisories":[],"bugzilla":"1831873","bugzilla_description":"CVE-2019-12972 binutils: out-of-bounds read in setup_group in bfd/elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12972.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-12886","severity":"moderate","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1715823","bugzilla_description":"CVE-2018-12886 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12886.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-20712","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1668269","bugzilla_description":"CVE-2018-20712 libiberty: heap-based buffer over-read in d_expression_1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20712.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-20673","severity":"moderate","public_date":"2018-12-27T00:00:00Z","advisories":[],"bugzilla":"1664709","bugzilla_description":"CVE-2018-20673 libiberty: Integer overflow in demangle_template() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20673.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20657","severity":"low","public_date":"2018-12-18T00:00:00Z","advisories":["RHSA-2019:3352"],"bugzilla":"1664708","bugzilla_description":"CVE-2018-20657 libiberty: Memory leak in demangle_template function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["gdb-0:8.2-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000221","severity":"low","public_date":"2018-08-24T00:00:00Z","advisories":[],"bugzilla":"1622242","bugzilla_description":"CVE-2018-1000221 pkgconf: 1 byte out of bounds read for 0 length keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000221.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-6829","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1543437","bugzilla_description":"CVE-2018-6829 libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6829.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-5345","severity":"important","public_date":"2017-12-19T00:00:00Z","advisories":["RHSA-2018:0350"],"bugzilla":"1527296","bugzilla_description":"CVE-2018-5345 gcab: Extracting malformed .cab files causes stack smashing potentially leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["gcab-0:0.7-4.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5345.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-7700","severity":"low","public_date":"2017-08-31T00:00:00Z","advisories":[],"bugzilla":"1536198","bugzilla_description":"CVE-2015-7700 pngcrush: double-free in sPLT and png.c file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7700.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-0379","severity":"moderate","public_date":"2017-08-27T00:00:00Z","advisories":[],"bugzilla":"1485921","bugzilla_description":"CVE-2017-0379 libgcrypt: Missing input validation for X25519 curve","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0379.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-7526","severity":"moderate","public_date":"2017-06-29T00:00:00Z","advisories":[],"bugzilla":"1466265","bugzilla_description":"CVE-2017-7526 libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-9526","severity":"low","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1459887","bugzilla_description":"CVE-2017-9526 libgcrypt: Possible timing attack on EdDSA session key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-11671","severity":"low","public_date":"2017-03-25T00:00:00Z","advisories":["RHSA-2018:0849"],"bugzilla":"1475733","bugzilla_description":"CVE-2017-11671 gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gcc-0:4.8.5-28.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11671.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9427","severity":"moderate","public_date":"2016-08-21T00:00:00Z","advisories":[],"bugzilla":"1399674","bugzilla_description":"CVE-2016-9427 gc: Integer overflow in GC_MALLOC_ATOMIC","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9427.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-4973","severity":"moderate","public_date":"2016-08-17T00:00:00Z","advisories":[],"bugzilla":"1324759","bugzilla_description":"CVE-2016-4973 gcc: Targets using libssp for SSP are missing -D_FORTIFY_SOURCE functionality","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4973.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2016-6313","severity":"moderate","public_date":"2016-08-17T00:00:00Z","advisories":["RHSA-2016:2674"],"bugzilla":"1366105","bugzilla_description":"CVE-2016-6313 libgcrypt: PRNG output is predictable","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["libgcrypt-0:1.5.3-13.el7_3.1","libgcrypt-0:1.4.5-12.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6313.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-5386","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1538"],"bugzilla":"1353798","bugzilla_description":"CVE-2016-5386 Go: sets environmental variable  based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["golang-0:1.6.3-1.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5386.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-6131","severity":null,"public_date":"2016-06-29T00:00:00Z","advisories":[],"bugzilla":"1352068","bugzilla_description":"CVE-2016-6131 gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-4492","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333377","bugzilla_description":"CVE-2016-4492 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4493","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333383","bugzilla_description":"CVE-2016-4493 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4493.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4491","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1333371","bugzilla_description":"CVE-2016-4491 gcc: Stack overflow due to infinite recursion in d_print_comp","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2016-4489","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333336","bugzilla_description":"CVE-2016-4489 gcc: Invalid write due to integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4490","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333366","bugzilla_description":"CVE-2016-4490 gcc: Write access violation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4487","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333330","bugzilla_description":"CVE-2016-4487 gcc: Invalid write due to a use-after-free to array btypevec","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4488","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333332","bugzilla_description":"CVE-2016-4488 gcc: Invalid write due to a use-after-free to array ktypevec","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-7511","severity":"low","public_date":"2016-02-08T00:00:00Z","advisories":[],"bugzilla":"1306184","bugzilla_description":"CVE-2015-7511 libgcrypt: side-channel attack on ECDH with Weierstrass curves","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7511.json"},{"CVE":"CVE-2016-2226","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1333322","bugzilla_description":"CVE-2016-2226 gcc: Exploitable buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-3591","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198145","bugzilla_description":"CVE-2014-3591 libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3591.json"},{"CVE":"CVE-2015-0837","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198147","bugzilla_description":"CVE-2015-0837 libgcrypt: last-level cache side-channel attack","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0837.json"},{"CVE":"CVE-2015-5276","severity":"low","public_date":"2015-02-20T00:00:00Z","advisories":[],"bugzilla":"1262846","bugzilla_description":"CVE-2015-5276 gcc: Predictable randomness from std::random_device","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-665->CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5276.json"},{"CVE":"CVE-2015-2158","severity":"low","public_date":"2015-01-28T00:00:00Z","advisories":[],"bugzilla":"1198171","bugzilla_description":"CVE-2015-2158 pngcrush: pngcrush_measure_idat() off-by-one error","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2158.json"},{"CVE":"CVE-2014-5270","severity":"moderate","public_date":"2014-08-08T00:00:00Z","advisories":[],"bugzilla":"1128531","bugzilla_description":"CVE-2014-5270 libgcrypt: ELGAMAL side-channel attack","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5270.json"},{"CVE":"CVE-2014-5044","severity":"moderate","public_date":"2014-06-17T00:00:00Z","advisories":[],"bugzilla":"1122812","bugzilla_description":"CVE-2014-5044 gcc: integer overflow flaws in libgfortran","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5044.json"},{"CVE":"CVE-2013-4576","severity":"moderate","public_date":"2013-12-18T00:00:00Z","advisories":["RHSA-2014:0016"],"bugzilla":"1043327","bugzilla_description":"CVE-2013-4576 gnupg: RSA secret key recovery via acoustic cryptanalysis","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["gnupg-0:1.4.5-18.el5_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4576.json"},{"CVE":"CVE-2013-4242","severity":"moderate","public_date":"2013-07-22T00:00:00Z","advisories":["RHSA-2013:1458","RHSA-2013:1457"],"bugzilla":"988589","bugzilla_description":"CVE-2013-4242 GnuPG susceptible to Yarom/Falkner flush+reload cache side-channel attack","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libgcrypt-0:1.4.4-7.el5_10","libgcrypt-0:1.4.5-11.el6_4","gnupg-0:1.4.5-18.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4242.json"},{"CVE":"CVE-2012-3509","severity":"moderate","public_date":"2012-08-29T00:00:00Z","advisories":[],"bugzilla":"849693","bugzilla_description":"CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3509.json"},{"CVE":"CVE-2012-2673","severity":"moderate","public_date":"2012-06-05T00:00:00Z","advisories":["RHSA-2014:0149","RHSA-2014:0150","RHSA-2013:1500"],"bugzilla":"828878","bugzilla_description":"CVE-2012-2673 gc: malloc() and calloc() overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gc-0:7.1-12.2.el5sat","gc-0:7.1-12.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2673.json"},{"CVE":"CVE-2010-0831","severity":"low","public_date":"2010-06-06T00:00:00Z","advisories":["RHSA-2011:0025"],"bugzilla":"594497","bugzilla_description":"CVE-2010-0831 CVE-2010-2322 fastjar: directory traversal vulnerabilities","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gcc-0:4.1.2-50.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0831.json"},{"CVE":"CVE-2010-2322","severity":"low","public_date":"2010-06-06T00:00:00Z","advisories":["RHSA-2011:0025"],"bugzilla":"594497","bugzilla_description":"CVE-2010-0831 CVE-2010-2322 fastjar: directory traversal vulnerabilities","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gcc-0:4.1.2-50.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2322.json"},{"CVE":"CVE-2009-3736","severity":"moderate","public_date":"2009-11-16T00:00:00Z","advisories":["RHSA-2009:1646","RHSA-2010:0039"],"bugzilla":"537941","bugzilla_description":"CVE-2009-3736 libtool: libltdl may load and execute code from a library in the current directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libtool-0:1.5.6-5.el4_8","gcc-0:4.1.2-46.el5_4.2","libtool-0:1.4.3-7","gcc-0:3.2.3-60","gcc-0:3.4.6-11.el4_8.1","libtool-0:1.5.22-7.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3736.json"},{"CVE":"CVE-2006-3619","severity":"moderate","public_date":"2006-07-13T00:00:00Z","advisories":["RHSA-2007:0473","RHSA-2007:0220"],"bugzilla":"198912","bugzilla_description":"CVE-2006-3619 Directory traversal issue in fastjar","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gcc-0:3.2.3-59","gcc-0:3.4.6-8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3619.json"},{"CVE":"CVE-2002-2439","severity":"moderate","public_date":"2002-08-05T00:00:00Z","advisories":[],"bugzilla":"853906","bugzilla_description":"CVE-2002-2439 gcc: Integer overflow can occur during the computation of the memory region size for new[] operator","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2002-2439.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-c++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-c++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-c++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-gdb-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-gdb-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-gdb-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-gfortran_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-gfortran_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-gfortran_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-offload-nvptx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-offload-nvptx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-offload-nvptx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-plugin-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-plugin-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-plugin-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-annobin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-annobin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-annobin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-binutils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-binutils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-binutils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-binutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-binutils_security_api_results.json
new file mode 100644
index 0000000..bfd60e1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-binutils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17451","severity":"low","public_date":"2019-10-07T00:00:00Z","advisories":["RHSA-2020:1797"],"bugzilla":"1771668","bugzilla_description":"CVE-2019-17451 binutils: integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["binutils-0:2.30-73.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17451.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-12972","severity":"low","public_date":"2019-06-17T00:00:00Z","advisories":[],"bugzilla":"1831873","bugzilla_description":"CVE-2019-12972 binutils: out-of-bounds read in setup_group in bfd/elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12972.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-build_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-build_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-build_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dwz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dwz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dwz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-testsuite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-testsuite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst-testsuite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-dyninst_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-libelf-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-libelf-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-libelf-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-libelf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-libelf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-libelf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-elfutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-c++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-c++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-c++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-gdb-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-gdb-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-gdb-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-gfortran_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-gfortran_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-gfortran_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-plugin-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-plugin-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc-plugin-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gcc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gdb-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gdb-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gdb-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gdb-gdbserver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gdb-gdbserver_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gdb-gdbserver_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gdb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-gdb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libasan-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libasan-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libasan-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libatomic-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libatomic-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libatomic-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libitm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libitm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libitm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-liblsan-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-liblsan-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-liblsan-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libquadmath-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libquadmath-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libquadmath-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libstdc++-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libstdc++-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libstdc++-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libstdc++-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libstdc++-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libstdc++-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libtsan-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libtsan-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libtsan-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libubsan-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libubsan-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-libubsan-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-ltrace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-ltrace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-ltrace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-make-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-make-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-make-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-make_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-make_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-make_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-perftools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-perftools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-perftools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-runtime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-runtime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-runtime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-strace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-strace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-strace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-initscript_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-initscript_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-initscript_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-runtime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-runtime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-runtime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-sdt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-sdt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-sdt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-systemtap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-toolchain_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-toolchain_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-toolchain_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-valgrind-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-valgrind-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-valgrind-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-valgrind_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-valgrind_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9-valgrind_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9_security_api_results.json
new file mode 100644
index 0000000..bfd60e1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc-toolset-9_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17451","severity":"low","public_date":"2019-10-07T00:00:00Z","advisories":["RHSA-2020:1797"],"bugzilla":"1771668","bugzilla_description":"CVE-2019-17451 binutils: integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["binutils-0:2.30-73.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17451.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-12972","severity":"low","public_date":"2019-06-17T00:00:00Z","advisories":[],"bugzilla":"1831873","bugzilla_description":"CVE-2019-12972 binutils: out-of-bounds read in setup_group in bfd/elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12972.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc_security_api_results.json
new file mode 100644
index 0000000..17df854
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17451","severity":"low","public_date":"2019-10-07T00:00:00Z","advisories":["RHSA-2020:1797"],"bugzilla":"1771668","bugzilla_description":"CVE-2019-17451 binutils: integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["binutils-0:2.30-73.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17451.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-15847","severity":"moderate","public_date":"2019-09-02T00:00:00Z","advisories":["RHSA-2020:2274","RHSA-2020:0924","RHSA-2020:1864"],"bugzilla":"1755523","bugzilla_description":"CVE-2019-15847 gcc: POWER9 \"DARN\" RNG intrinsic produces repeated output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":["devtoolset-8-gcc-0:8.3.1-3.2.el7","devtoolset-8-gcc-0:8.3.1-3.2.el6","devtoolset-9-gcc-0:9.3.1-2.el7","gcc-0:8.3.1-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14250","severity":"low","public_date":"2019-08-09T00:00:00Z","advisories":[],"bugzilla":"1739490","bugzilla_description":"CVE-2019-14250 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14250.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-12972","severity":"low","public_date":"2019-06-17T00:00:00Z","advisories":[],"bugzilla":"1831873","bugzilla_description":"CVE-2019-12972 binutils: out-of-bounds read in setup_group in bfd/elf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12972.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-12886","severity":"moderate","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1715823","bugzilla_description":"CVE-2018-12886 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12886.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-20712","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1668269","bugzilla_description":"CVE-2018-20712 libiberty: heap-based buffer over-read in d_expression_1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20712.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-20673","severity":"moderate","public_date":"2018-12-27T00:00:00Z","advisories":[],"bugzilla":"1664709","bugzilla_description":"CVE-2018-20673 libiberty: Integer overflow in demangle_template() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20673.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20657","severity":"low","public_date":"2018-12-18T00:00:00Z","advisories":["RHSA-2019:3352"],"bugzilla":"1664708","bugzilla_description":"CVE-2018-20657 libiberty: Memory leak in demangle_template function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["gdb-0:8.2-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11671","severity":"low","public_date":"2017-03-25T00:00:00Z","advisories":["RHSA-2018:0849"],"bugzilla":"1475733","bugzilla_description":"CVE-2017-11671 gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gcc-0:4.8.5-28.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11671.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9427","severity":"moderate","public_date":"2016-08-21T00:00:00Z","advisories":[],"bugzilla":"1399674","bugzilla_description":"CVE-2016-9427 gc: Integer overflow in GC_MALLOC_ATOMIC","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9427.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-4973","severity":"moderate","public_date":"2016-08-17T00:00:00Z","advisories":[],"bugzilla":"1324759","bugzilla_description":"CVE-2016-4973 gcc: Targets using libssp for SSP are missing -D_FORTIFY_SOURCE functionality","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4973.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2016-5386","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1538"],"bugzilla":"1353798","bugzilla_description":"CVE-2016-5386 Go: sets environmental variable  based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["golang-0:1.6.3-1.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5386.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-6131","severity":null,"public_date":"2016-06-29T00:00:00Z","advisories":[],"bugzilla":"1352068","bugzilla_description":"CVE-2016-6131 gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-4492","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333377","bugzilla_description":"CVE-2016-4492 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4493","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333383","bugzilla_description":"CVE-2016-4493 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4493.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4491","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1333371","bugzilla_description":"CVE-2016-4491 gcc: Stack overflow due to infinite recursion in d_print_comp","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2016-4489","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333336","bugzilla_description":"CVE-2016-4489 gcc: Invalid write due to integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4490","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333366","bugzilla_description":"CVE-2016-4490 gcc: Write access violation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4487","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333330","bugzilla_description":"CVE-2016-4487 gcc: Invalid write due to a use-after-free to array btypevec","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4488","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333332","bugzilla_description":"CVE-2016-4488 gcc: Invalid write due to a use-after-free to array ktypevec","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-2226","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1333322","bugzilla_description":"CVE-2016-2226 gcc: Exploitable buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-5276","severity":"low","public_date":"2015-02-20T00:00:00Z","advisories":[],"bugzilla":"1262846","bugzilla_description":"CVE-2015-5276 gcc: Predictable randomness from std::random_device","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-665->CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5276.json"},{"CVE":"CVE-2014-5044","severity":"moderate","public_date":"2014-06-17T00:00:00Z","advisories":[],"bugzilla":"1122812","bugzilla_description":"CVE-2014-5044 gcc: integer overflow flaws in libgfortran","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5044.json"},{"CVE":"CVE-2012-3509","severity":"moderate","public_date":"2012-08-29T00:00:00Z","advisories":[],"bugzilla":"849693","bugzilla_description":"CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3509.json"},{"CVE":"CVE-2010-0831","severity":"low","public_date":"2010-06-06T00:00:00Z","advisories":["RHSA-2011:0025"],"bugzilla":"594497","bugzilla_description":"CVE-2010-0831 CVE-2010-2322 fastjar: directory traversal vulnerabilities","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gcc-0:4.1.2-50.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0831.json"},{"CVE":"CVE-2010-2322","severity":"low","public_date":"2010-06-06T00:00:00Z","advisories":["RHSA-2011:0025"],"bugzilla":"594497","bugzilla_description":"CVE-2010-0831 CVE-2010-2322 fastjar: directory traversal vulnerabilities","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gcc-0:4.1.2-50.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2322.json"},{"CVE":"CVE-2009-3736","severity":"moderate","public_date":"2009-11-16T00:00:00Z","advisories":["RHSA-2009:1646","RHSA-2010:0039"],"bugzilla":"537941","bugzilla_description":"CVE-2009-3736 libtool: libltdl may load and execute code from a library in the current directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libtool-0:1.5.6-5.el4_8","gcc-0:4.1.2-46.el5_4.2","libtool-0:1.4.3-7","gcc-0:3.2.3-60","gcc-0:3.4.6-11.el4_8.1","libtool-0:1.5.22-7.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3736.json"},{"CVE":"CVE-2006-3619","severity":"moderate","public_date":"2006-07-13T00:00:00Z","advisories":["RHSA-2007:0473","RHSA-2007:0220"],"bugzilla":"198912","bugzilla_description":"CVE-2006-3619 Directory traversal issue in fastjar","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gcc-0:3.2.3-59","gcc-0:3.4.6-8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3619.json"},{"CVE":"CVE-2002-2439","severity":"moderate","public_date":"2002-08-05T00:00:00Z","advisories":[],"bugzilla":"853906","bugzilla_description":"CVE-2002-2439 gcc: Integer overflow can occur during the computation of the memory region size for new[] operator","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2002-2439.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcr-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcr-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcr-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcr_security_api_results.json
new file mode 100644
index 0000000..fe0e53f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gcr_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-13627","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1764018","bugzilla_description":"CVE-2019-13627 libgcrypt: ECDSA timing attack allowing private key leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2019-12904","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730320","bugzilla_description":"CVE-2019-12904 Libgcrypt: physical addresses being available to other processes leads to a flush-and-reload side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12904.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-6829","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1543437","bugzilla_description":"CVE-2018-6829 libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6829.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2015-7700","severity":"low","public_date":"2017-08-31T00:00:00Z","advisories":[],"bugzilla":"1536198","bugzilla_description":"CVE-2015-7700 pngcrush: double-free in sPLT and png.c file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7700.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-0379","severity":"moderate","public_date":"2017-08-27T00:00:00Z","advisories":[],"bugzilla":"1485921","bugzilla_description":"CVE-2017-0379 libgcrypt: Missing input validation for X25519 curve","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0379.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-7526","severity":"moderate","public_date":"2017-06-29T00:00:00Z","advisories":[],"bugzilla":"1466265","bugzilla_description":"CVE-2017-7526 libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-9526","severity":"low","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1459887","bugzilla_description":"CVE-2017-9526 libgcrypt: Possible timing attack on EdDSA session key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-6313","severity":"moderate","public_date":"2016-08-17T00:00:00Z","advisories":["RHSA-2016:2674"],"bugzilla":"1366105","bugzilla_description":"CVE-2016-6313 libgcrypt: PRNG output is predictable","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["libgcrypt-0:1.5.3-13.el7_3.1","libgcrypt-0:1.4.5-12.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6313.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2015-7511","severity":"low","public_date":"2016-02-08T00:00:00Z","advisories":[],"bugzilla":"1306184","bugzilla_description":"CVE-2015-7511 libgcrypt: side-channel attack on ECDH with Weierstrass curves","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7511.json"},{"CVE":"CVE-2014-3591","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198145","bugzilla_description":"CVE-2014-3591 libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3591.json"},{"CVE":"CVE-2015-0837","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198147","bugzilla_description":"CVE-2015-0837 libgcrypt: last-level cache side-channel attack","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0837.json"},{"CVE":"CVE-2015-2158","severity":"low","public_date":"2015-01-28T00:00:00Z","advisories":[],"bugzilla":"1198171","bugzilla_description":"CVE-2015-2158 pngcrush: pngcrush_measure_idat() off-by-one error","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2158.json"},{"CVE":"CVE-2014-5270","severity":"moderate","public_date":"2014-08-08T00:00:00Z","advisories":[],"bugzilla":"1128531","bugzilla_description":"CVE-2014-5270 libgcrypt: ELGAMAL side-channel attack","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5270.json"},{"CVE":"CVE-2013-4576","severity":"moderate","public_date":"2013-12-18T00:00:00Z","advisories":["RHSA-2014:0016"],"bugzilla":"1043327","bugzilla_description":"CVE-2013-4576 gnupg: RSA secret key recovery via acoustic cryptanalysis","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["gnupg-0:1.4.5-18.el5_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4576.json"},{"CVE":"CVE-2013-4242","severity":"moderate","public_date":"2013-07-22T00:00:00Z","advisories":["RHSA-2013:1458","RHSA-2013:1457"],"bugzilla":"988589","bugzilla_description":"CVE-2013-4242 GnuPG susceptible to Yarom/Falkner flush+reload cache side-channel attack","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libgcrypt-0:1.4.4-7.el5_10","libgcrypt-0:1.4.5-11.el6_4","gnupg-0:1.4.5-18.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4242.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gd_security_api_results.json
new file mode 100644
index 0000000..0b56f28
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-14553","severity":"low","public_date":"2019-12-20T00:00:00Z","advisories":[],"bugzilla":"1600727","bugzilla_description":"CVE-2018-14553 gd: NULL pointer dereference in gdImageClone","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14553.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-1010180","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:1635"],"bugzilla":"1740615","bugzilla_description":"CVE-2019-1010180 gdb: buffer overflow while opening an ELF for debugging leads to Dos, information dislosure and code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["gdb-0:8.2-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010180.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2019-11038","severity":"low","public_date":"2019-06-18T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2019:2519"],"bugzilla":"1724149","bugzilla_description":"CVE-2019-11038 gd: Information disclosure in gdImageCreateFromXbm()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11038.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-3825","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1672825","bugzilla_description":"CVE-2019-3825 gdm: lock screen bypass when timed login is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["gdm-1:3.28.3-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3825.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2019-6978","severity":"low","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2722","RHSA-2020:3943"],"bugzilla":"1671390","bugzilla_description":"CVE-2019-6978 gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libwmf-0:0.2.8.4-44.el7","libwmf-0:0.2.9-8.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20712","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1668269","bugzilla_description":"CVE-2018-20712 libiberty: heap-based buffer over-read in d_expression_1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20712.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-20673","severity":"moderate","public_date":"2018-12-27T00:00:00Z","advisories":[],"bugzilla":"1664709","bugzilla_description":"CVE-2018-20673 libiberty: Integer overflow in demangle_template() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20673.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20657","severity":"low","public_date":"2018-12-18T00:00:00Z","advisories":["RHSA-2019:3352"],"bugzilla":"1664708","bugzilla_description":"CVE-2018-20657 libiberty: Memory leak in demangle_template function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["gdb-0:8.2-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-6977","severity":"moderate","public_date":"2018-12-09T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2019:2519"],"bugzilla":"1672207","bugzilla_description":"CVE-2019-6977 gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6977.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-14424","severity":"moderate","public_date":"2018-08-13T00:00:00Z","advisories":[],"bugzilla":"1606915","bugzilla_description":"CVE-2018-14424 gdm: use-after-free in the GDM daemon","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14424.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2018-10915","severity":"important","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2557","RHSA-2018:2511","RHSA-2018:2566","RHSA-2018:2643","RHSA-2018:2565"],"bugzilla":"1609891","bugzilla_description":"CVE-2018-10915 postgresql: Certain host connection parameters defeat client-side security defenses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665->(CWE-200|CWE-89)","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","postgresql-0:9.2.24-1.el7_5","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rhvm-appliance-0:4.2-20180828.0.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10915.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2018-10925","severity":"important","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566","RHSA-2018:2565"],"bugzilla":"1612619","bugzilla_description":"CVE-2018-10925 postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-1000222","severity":"moderate","public_date":"2018-07-15T00:00:00Z","advisories":[],"bugzilla":"1621953","bugzilla_description":"CVE-2018-1000222 gd: Double free in src/gd_bump.c:gdImageBmpPtr() via crafted JPEG","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000222.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14038","severity":null,"public_date":"2018-07-12T00:00:00Z","advisories":[],"bugzilla":"1686781","bugzilla_description":"CVE-2018-14038 libbfd: remote dos via crafted file in function aout_32_swap_std_reloc_out in aoutx.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14038.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-1058","severity":"moderate","public_date":"2018-03-01T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1547044","bugzilla_description":"CVE-2018-1058 postgresql: Uncontrolled search path element in pg_dump and other client applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1058.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-1053","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1539619","bugzilla_description":"CVE-2018-1053 postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-5711","severity":"low","public_date":"2017-11-25T00:00:00Z","advisories":["RHSA-2019:2519","RHSA-2018:1296"],"bugzilla":"1535246","bugzilla_description":"CVE-2018-5711 gd: Infinite loop in gdImageCreateFromGifCtx() in gd_gif_in.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5711.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-2862","severity":"moderate","public_date":"2017-08-30T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1488817","bugzilla_description":"CVE-2017-2862 gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["gdk-pixbuf2-0:2.36.12-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-6362","severity":"moderate","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1489842","bugzilla_description":"CVE-2017-6362 gd: Double free in the gdImagePngPtr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-12447","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1686828","bugzilla_description":"CVE-2017-12447 gdk-pixbuf: heap-based overflow caused by invalid palette size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12447.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-1000422","severity":"moderate","public_date":"2017-08-07T00:00:00Z","advisories":[],"bugzilla":"1531397","bugzilla_description":"CVE-2017-1000422 gdk-pixbuf: Integer overflow in io-gif.c:gif_get_lzw() can lead to memory corruption and potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-9778","severity":"low","public_date":"2017-06-15T00:00:00Z","advisories":[],"bugzilla":"1466255","bugzilla_description":"CVE-2017-9778 gdb: Malformed section in an ELF binary or a core file can cause memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9778.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12164","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1490417","bugzilla_description":"CVE-2017-12164 gdm: lock screen can be circumvented when autologin is set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12164.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2017-6313","severity":"moderate","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427217","bugzilla_description":"CVE-2017-6313 gdk-pixbuf: Integer underflow in io-icns.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-6314","severity":"low","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427218","bugzilla_description":"CVE-2017-6314 gdk-pixbuf: Infinite loop in io-tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6314.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6312","severity":"low","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427221","bugzilla_description":"CVE-2017-6312 gdk-pixbuf: Out-of-bounds read in io-ico.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6312.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6311","severity":"low","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1427222","bugzilla_description":"CVE-2017-6311 gdk-pixbuf: NULL pointer dereference in gdk-pixbuf-thumbnailer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6311.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10168","severity":"moderate","public_date":"2016-12-17T00:00:00Z","advisories":["RHSA-2017:3221","RHSA-2018:1296"],"bugzilla":"1418986","bugzilla_description":"CVE-2016-10168 gd: Integer overflow in gd_io.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-43.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10168.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-9933","severity":"low","public_date":"2016-12-08T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1404723","bugzilla_description":"CVE-2016-9933 php, gd: Stack overflow in gdImageFillToBorder on truecolor images","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9933.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9317","severity":"moderate","public_date":"2016-11-12T00:00:00Z","advisories":[],"bugzilla":"1417987","bugzilla_description":"CVE-2016-9317 gd: Missing check for oversized images in gdImageCreate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9317.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-6911","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":[],"bugzilla":"1388787","bugzilla_description":"CVE-2016-6911 gd, php: Missing check for OOB read in dynamicGetbuf()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6911.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-8670","severity":"moderate","public_date":"2016-10-10T00:00:00Z","advisories":[],"bugzilla":"1391068","bugzilla_description":"CVE-2016-8670 gd, php: Stack based buffer overflow in dynamicGetbuf","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8670.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-2870","severity":"moderate","public_date":"2016-09-07T00:00:00Z","advisories":[],"bugzilla":"1486735","bugzilla_description":"CVE-2017-2870 gdk-pixbuf2: Integer overflow in tiff_image_parse function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-7568","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":[],"bugzilla":"1380450","bugzilla_description":"CVE-2016-7568 gd, php: Integer overflow in gdImageWebpCtx","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7568.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2016-6912","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":[],"bugzilla":"1417977","bugzilla_description":"CVE-2016-6912 gd, php: Double free in gdImageWebpPtr()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6912.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-10167","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2017:3221","RHSA-2018:1296"],"bugzilla":"1418984","bugzilla_description":"CVE-2016-10167 gd: DoS vulnerability in gdImageCreateFromGd2Ctx()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-43.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-6906","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":[],"bugzilla":"1435313","bugzilla_description":"CVE-2016-6906 gd: Out-of-bounds read in read_image_tga function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10166","severity":"moderate","public_date":"2016-08-06T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2019:2519"],"bugzilla":"1418983","bugzilla_description":"CVE-2016-10166 gd: Unsigned integer underflow _gdContributionsAlloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10166.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-6352","severity":"moderate","public_date":"2016-07-13T00:00:00Z","advisories":[],"bugzilla":"1349751","bugzilla_description":"CVE-2016-6352 gdk-pixbuf: Out-of-bounds write in OneLine32() function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6352.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-6214","severity":"low","public_date":"2016-07-12T00:00:00Z","advisories":[],"bugzilla":"1356466","bugzilla_description":"CVE-2016-6214 gd: Buffer over-read issue when parsing crafted TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6214.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6207","severity":"moderate","public_date":"2016-07-07T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359800","bugzilla_description":"CVE-2016-6207 php,gd: Integer overflow error within _gdContributionsAlloc()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-6905","severity":"low","public_date":"2016-07-05T00:00:00Z","advisories":[],"bugzilla":"1356485","bugzilla_description":"CVE-2016-6905 gd: Out-of-bounds read in function read_image_tga in gd_tga.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6905.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6132","severity":"low","public_date":"2016-06-30T00:00:00Z","advisories":[],"bugzilla":"1352544","bugzilla_description":"CVE-2016-6132 gd: Buffer over-read issue when parsing crafted TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6131","severity":null,"public_date":"2016-06-29T00:00:00Z","advisories":[],"bugzilla":"1352068","bugzilla_description":"CVE-2016-6131 gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6128","severity":"low","public_date":"2016-06-27T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1351603","bugzilla_description":"CVE-2016-6128 gd: Invalid color index not properly handled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6128.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5766","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:2598"],"bugzilla":"1351068","bugzilla_description":"CVE-2016-5766 gd: Integer Overflow in _gd2GetHeader() resulting in heap overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php-0:5.4.16-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5767","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:2598"],"bugzilla":"1351069","bugzilla_description":"CVE-2016-5767 gd: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php-0:5.4.16-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5767.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-1000002","severity":"low","public_date":"2016-06-02T00:00:00Z","advisories":[],"bugzilla":"1391126","bugzilla_description":"CVE-2016-1000002 gdm: Information leak before screen lock","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000002.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2016-5116","severity":"moderate","public_date":"2016-05-29T00:00:00Z","advisories":[],"bugzilla":"1340856","bugzilla_description":"CVE-2016-5116 gd: Information leak due to stack overflow in gdCtxPrintf","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5116.json"},{"CVE":"CVE-2016-6161","severity":"moderate","public_date":"2016-05-08T00:00:00Z","advisories":[],"bugzilla":"1353550","bugzilla_description":"CVE-2016-6161 gd: Global out-of-bounds read when encoding gif from malformed gd2 input","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-4492","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333377","bugzilla_description":"CVE-2016-4492 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4493","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333383","bugzilla_description":"CVE-2016-4493 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4493.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4491","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1333371","bugzilla_description":"CVE-2016-4491 gcc: Stack overflow due to infinite recursion in d_print_comp","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2016-3074","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1321893","bugzilla_description":"CVE-2016-3074 php: Signedness vulnerability causing heap overflow in libgd","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3074.json"},{"CVE":"CVE-2016-4489","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333336","bugzilla_description":"CVE-2016-4489 gcc: Invalid write due to integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4490","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333366","bugzilla_description":"CVE-2016-4490 gcc: Write access violation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4487","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333330","bugzilla_description":"CVE-2016-4487 gcc: Invalid write due to a use-after-free to array btypevec","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4488","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333332","bugzilla_description":"CVE-2016-4488 gcc: Invalid write due to a use-after-free to array ktypevec","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-2226","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1333322","bugzilla_description":"CVE-2016-2226 gcc: Exploitable buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-7552","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHBA-2017:2100"],"bugzilla":"1378894","bugzilla_description":"CVE-2015-7552 gdk-pixbuf: Heap-based buffer overflow in the gdk_pixbuf_flip function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["gdk-pixbuf2-0:2.36.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7552.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-7496","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2017:2128"],"bugzilla":"1283279","bugzilla_description":"CVE-2015-7496 gdm: Crash when holding Escape in log screen","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-364","affected_packages":["gdm-1:3.22.3-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7496.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2015-8875","severity":"moderate","public_date":"2015-10-06T00:00:00Z","advisories":[],"bugzilla":"1337063","bugzilla_description":"CVE-2015-8875 gdk-pixbuf: Integer overflows in various pixops functions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8875.json"},{"CVE":"CVE-2015-7673","severity":"moderate","public_date":"2015-10-01T00:00:00Z","advisories":[],"bugzilla":"1261836","bugzilla_description":"CVE-2015-7673 gdk-pixbuf: Heap overflow and DoS vulnerability when scaling a TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7673.json"},{"CVE":"CVE-2015-7674","severity":"moderate","public_date":"2015-10-01T00:00:00Z","advisories":[],"bugzilla":"1268249","bugzilla_description":"CVE-2015-7674 gdk-pixbuf: Heap overflow when scaling a GIF file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7674.json"},{"CVE":"CVE-2015-4491","severity":"important","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1694","RHSA-2015:1586"],"bugzilla":"1252290","bugzilla_description":"CVE-2015-4491 Mozilla: Heap overflow in gdk-pixbuf when scaling bitmap images (MFSA 2015-88)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","gdk-pixbuf2-0:2.24.1-6.el6_7","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","gdk-pixbuf2-0:2.28.2-5.el7_1","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4491.json"},{"CVE":"CVE-2015-8877","severity":"low","public_date":"2015-07-13T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1338907","bugzilla_description":"CVE-2015-8877 gd: gdImageScaleTwoPass function in gd_interpolation.c uses inconsistent allocate and free approaches","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8877.json"},{"CVE":"CVE-2015-8874","severity":"low","public_date":"2015-06-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1336772","bugzilla_description":"CVE-2015-8874 gd: gdImageFillToBorder deep recursion leading to stack overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8874.json"},{"CVE":"CVE-2014-9709","severity":"low","public_date":"2014-12-13T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1188639","bugzilla_description":"CVE-2014-9709 gd: buffer read overflow in gd_gif_in.c","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-119","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9709.json"},{"CVE":"CVE-2014-3683","severity":"important","public_date":"2014-10-02T00:00:00Z","advisories":[],"bugzilla":"1149081","bugzilla_description":"CVE-2014-3683 rsyslog: integer overflow in PRI parsing","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3683.json"},{"CVE":"CVE-2014-3634","severity":"important","public_date":"2014-09-30T00:00:00Z","advisories":["RHSA-2014:1654","RHSA-2014:1397","RHSA-2014:1671"],"bugzilla":"1142373","bugzilla_description":"CVE-2014-3634 rsyslog: remote syslog PRI vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-129->CWE-119","affected_packages":["rsyslog-0:5.8.10-9.el6_6","rsyslog7-0:7.4.10-3.el6_6","rsyslog5-0:5.8.12-5.el5_11","rsyslog-0:7.4.7-7.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3634.json"},{"CVE":"CVE-2014-2497","severity":"low","public_date":"2014-03-13T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1076676","bugzilla_description":"CVE-2014-2497 gd: NULL pointer dereference in gdImageCreateFromXpm()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php53-0:5.3.3-24.el5","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2497.json"},{"CVE":"CVE-2013-7226","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7226.json"},{"CVE":"CVE-2013-7327","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7327.json"},{"CVE":"CVE-2013-7328","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7328.json"},{"CVE":"CVE-2014-2020","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2020.json"},{"CVE":"CVE-2013-7456","severity":"low","public_date":"2013-09-24T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1340433","bugzilla_description":"CVE-2013-7456 gd: incorrect boundary adjustment in _gdContributionsCalc","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7456.json"},{"CVE":"CVE-2013-4169","severity":"important","public_date":"2013-09-05T00:00:00Z","advisories":["RHSA-2013:1213"],"bugzilla":"988498","bugzilla_description":"CVE-2013-4169 gdm: TOCTTOU race condition on /tmp/.X11-unix","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"(CWE-367|CWE-377)->CWE-552","affected_packages":["gdm-1:2.16.0-59.el5_9.1","initscripts-0:8.45.42-2.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4169.json"},{"CVE":"CVE-2012-3509","severity":"moderate","public_date":"2012-08-29T00:00:00Z","advisories":[],"bugzilla":"849693","bugzilla_description":"CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3509.json"},{"CVE":"CVE-2013-7273","severity":"low","public_date":"2012-07-30T00:00:00Z","advisories":[],"bugzilla":"1050745","bugzilla_description":"CVE-2013-7273 gdm: local DoS possible when cancelling and disable-user-list=true when fallback greeter is used","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7273.json"},{"CVE":"CVE-2012-2370","severity":"low","public_date":"2012-03-25T00:00:00Z","advisories":["RHSA-2013:0135"],"bugzilla":"822468","bugzilla_description":"CVE-2012-2370 gdk-pixbuf: DoS (GLib error and application abort) due to an integer overflow in the XBM image file format loader","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["gtk2-0:2.10.4-29.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2370.json"},{"CVE":"CVE-2012-1177","severity":"moderate","public_date":"2012-03-12T00:00:00Z","advisories":[],"bugzilla":"803335","bugzilla_description":"CVE-2012-1177 libgdata: Absent validation of SSL certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1177.json"},{"CVE":"CVE-2011-2896","severity":"moderate","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181","RHSA-2011:1635","RHSA-2012:0302"],"bugzilla":"727800","bugzilla_description":"CVE-2011-2896 David Koblas' GIF decoder LZW decoder buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gimp-2:2.6.9-4.el6_3.3","cups-1:1.3.7-30.el5","gimp-2:2.2.13-2.0.7.el5_8.5","cups-1:1.4.2-44.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2896.json"},{"CVE":"CVE-2011-2485","severity":"low","public_date":"2011-06-23T00:00:00Z","advisories":[],"bugzilla":"715337","bugzilla_description":"CVE-2011-2485 gdk-pixbuf: incorrect error detection in the GIF image loader","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2485.json"},{"CVE":"CVE-2011-1709","severity":"moderate","public_date":"2011-05-31T00:00:00Z","advisories":[],"bugzilla":"709139","bugzilla_description":"CVE-2011-1709 gdm: URI scheme handling change in glib2 allows running default browser in GDM session","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1709.json"},{"CVE":"CVE-2011-4355","severity":"moderate","public_date":"2011-04-29T00:00:00Z","advisories":["RHSA-2013:0522"],"bugzilla":"703238","bugzilla_description":"CVE-2011-4355 gdb: object file .debug_gdb_scripts section improper input validation","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["gdb-0:7.2-60.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4355.json"},{"CVE":"CVE-2011-0727","severity":"important","public_date":"2011-03-28T00:00:00Z","advisories":["RHSA-2011:0395"],"bugzilla":"688323","bugzilla_description":"CVE-2011-0727 gdm: privilege escalation vulnerability","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["gdm-1:2.30.4-21.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0727.json"},{"CVE":"CVE-2009-3546","severity":"low","public_date":"2009-10-12T00:00:00Z","advisories":["RHSA-2010:0040","RHSA-2010:0003"],"bugzilla":"529213","bugzilla_description":"CVE-2009-3546 gd: insufficient input validation in _gdGetColors()","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","gd-0:2.0.33-9.4.el5_4.2","gd-0:2.0.28-5.4E.el4_8.1","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3546.json"},{"CVE":"CVE-2010-2387","severity":null,"public_date":"2009-02-15T00:00:00Z","advisories":[],"bugzilla":"889384","bugzilla_description":"CVE-2010-2387 gdm: logs user passwors that contain invalid UTF8-encoded characters, in debug mode","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2387.json"},{"CVE":"CVE-2007-3381","severity":"moderate","public_date":"2007-07-30T00:00:00Z","advisories":["RHSA-2007:0777"],"bugzilla":"247655","bugzilla_description":"CVE-2007-3381 Gdm denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdm-1:2.16.0-31.0.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3381.json"},{"CVE":"CVE-2007-3472","severity":"low","public_date":"2007-06-21T00:00:00Z","advisories":["RHSA-2008:0146"],"bugzilla":"276751","bugzilla_description":"CVE-2007-3472 libgd Integer overflow in TrueColor code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3472.json"},{"CVE":"CVE-2007-3473","severity":"low","public_date":"2007-06-21T00:00:00Z","advisories":["RHSA-2008:0146"],"bugzilla":"276791","bugzilla_description":"CVE-2007-3473 libgd NULL pointer dereference when reading a corrupt X bitmap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3473.json"},{"CVE":"CVE-2007-3475","severity":"low","public_date":"2007-06-21T00:00:00Z","advisories":["RHSA-2008:0146"],"bugzilla":"277181","bugzilla_description":"CVE-2007-3475 libgd Denial of service by GIF images without a global color map","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3475.json"},{"CVE":"CVE-2007-3476","severity":"moderate","public_date":"2007-06-21T00:00:00Z","advisories":["RHSA-2008:0146"],"bugzilla":"277201","bugzilla_description":"CVE-2007-3476 libgd Denial of service by corrupted GIF images","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3476.json"},{"CVE":"CVE-2007-2756","severity":"low","public_date":"2007-05-16T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2008:0146","RHSA-2007:0889"],"bugzilla":"242033","bugzilla_description":"CVE-2007-2756 gd / php-gd ImageCreateFromPng infinite loop caused by truncated PNG","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["php-0:5.1.6-15.el5","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:4.3.9-3.22.9","gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2756.json"},{"CVE":"CVE-2009-2697","severity":"low","public_date":"2007-05-11T00:00:00Z","advisories":["RHSA-2009:1364"],"bugzilla":"239818","bugzilla_description":"CVE-2009-2697 gdm not built with tcp_wrappers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gdm-1:2.16.0-56.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2697.json"},{"CVE":"CVE-2007-0455","severity":"low","public_date":"2007-01-26T00:00:00Z","advisories":["RHSA-2007:0153","RHSA-2008:0146","RHSA-2007:0162","RHSA-2007:0155"],"bugzilla":"224607","bugzilla_description":"CVE-2007-0455 gd: buffer overrun","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:5.1.6-3.el4s1.6","php-0:4.3.2-40.ent","gd-0:2.0.33-9.4.el5_1.1","php-0:5.1.6-11.el5","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0455.json"},{"CVE":"CVE-2006-4146","severity":"low","public_date":"2006-08-31T00:00:00Z","advisories":["RHSA-2007:0469","RHSA-2007:0229"],"bugzilla":"203875","bugzilla_description":"CVE-2006-4146 GDB buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.138.el3","gdb-0:6.3.0.0-1.143.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4146.json"},{"CVE":"CVE-2006-4484","severity":"moderate","public_date":"2006-07-16T00:00:00Z","advisories":["RHSA-2008:0146","RHSA-2006:0669","RHSA-2006:0688"],"bugzilla":"431568","bugzilla_description":"CVE-2006-4484 gd: GIF handling buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.18","php-0:5.1.4-1.el4s1.4","php-0:4.3.2-36.ent","gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4484.json"},{"CVE":"CVE-2006-1057","severity":"low","public_date":"2006-04-19T00:00:00Z","advisories":["RHSA-2007:0286"],"bugzilla":"1618026","bugzilla_description":"CVE-2006-1057 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdm-1:2.6.0.5-7.rhel4.15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1057.json"},{"CVE":"CVE-2007-5079","severity":"low","public_date":"2006-02-13T00:00:00Z","advisories":["RHSA-2010:0657"],"bugzilla":"181302","bugzilla_description":"CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gdm-1:2.6.0.5-7.rhel4.19.el4_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5079.json"},{"CVE":"CVE-2005-2975","severity":"important","public_date":"2005-11-15T14:00:00Z","advisories":["RHSA-2005:810","RHSA-2005:811"],"bugzilla":"1617771","bugzilla_description":"CVE-2005-2975 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-13.el3.3","gdk-pixbuf-1:0.22.0-17.el4.3","gtk2-0:2.2.4-19","gtk2-0:2.4.13-18"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2975.json"},{"CVE":"CVE-2005-2976","severity":"important","public_date":"2005-11-15T14:00:00Z","advisories":["RHSA-2005:810"],"bugzilla":"1617772","bugzilla_description":"CVE-2005-2976 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-13.el3.3","gdk-pixbuf-1:0.22.0-17.el4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2976.json"},{"CVE":"CVE-2005-3186","severity":"important","public_date":"2005-11-03T00:00:00Z","advisories":["RHSA-2005:810","RHSA-2005:811"],"bugzilla":"1617795","bugzilla_description":"CVE-2005-3186 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-13.el3.3","gdk-pixbuf-1:0.22.0-17.el4.3","gtk2-0:2.2.4-19","gtk2-0:2.4.13-18"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3186.json"},{"CVE":"CVE-2005-1704","severity":"low","public_date":"2005-05-25T00:00:00Z","advisories":["RHBA-2005:675","RHSA-2005:763","RHSA-2005:673","RHSA-2006:0368","RHSA-2005:709","RHSA-2006:0354","RHSA-2005:801","RHSA-2005:659"],"bugzilla":"1617660","bugzilla_description":"CVE-2005-1704 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.63","binutils-0:2.14.90.0.4-39","elfutils-0:0.94.1-2","binutils-0:2.15.92.0.2-15","elfutils-0:0.97.1-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1704.json"},{"CVE":"CVE-2005-1705","severity":"low","public_date":"2005-05-25T00:00:00Z","advisories":["RHBA-2005:675","RHSA-2005:709","RHSA-2005:801"],"bugzilla":"1617661","bugzilla_description":"CVE-2005-1705 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.63"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1705.json"},{"CVE":"CVE-2005-0891","severity":"important","public_date":"2005-03-26T00:00:00Z","advisories":["RHSA-2005:344","RHSA-2005:343"],"bugzilla":"1617587","bugzilla_description":"CVE-2005-0891 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gtk2-0:2.4.13-14","gtk2-0:2.2.4-15","gdk-pixbuf-1:0.22.0-16.el4","gdk-pixbuf-1:0.22.0-12.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0891.json"},{"CVE":"CVE-2004-0941","severity":"low","public_date":"2004-11-10T00:00:00Z","advisories":["RHSA-2004:638","RHSA-2006:0194"],"bugzilla":"175413","bugzilla_description":"CVE-2004-0941 gd: additional overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gd-0:1.8.4-12.3.1","gd-0:2.0.28-4.4E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0941.json"},{"CVE":"CVE-2004-0990","severity":"important","public_date":"2004-10-26T00:00:00Z","advisories":["RHSA-2004:638"],"bugzilla":"1617343","bugzilla_description":"CVE-2004-0990 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gd-0:1.8.4-12.3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0990.json"},{"CVE":"CVE-2004-0782","severity":"important","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617283","bugzilla_description":"CVE-2004-0782 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0782.json"},{"CVE":"CVE-2004-0783","severity":"important","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617284","bugzilla_description":"CVE-2004-0783 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0783.json"},{"CVE":"CVE-2004-0788","severity":"moderate","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617290","bugzilla_description":"CVE-2004-0788 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0788.json"},{"CVE":"CVE-2004-0753","severity":"moderate","public_date":"2004-08-20T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617266","bugzilla_description":"CVE-2004-0753 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0753.json"},{"CVE":"CVE-2004-0111","severity":"important","public_date":"2004-03-10T00:00:00Z","advisories":["RHSA-2004:102","RHSA-2004:103"],"bugzilla":"1617155","bugzilla_description":"CVE-2004-0111 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-6.1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0111.json"},{"CVE":"CVE-2011-2897","severity":"moderate","public_date":"2001-06-01T00:00:00Z","advisories":[],"bugzilla":"727081","bugzilla_description":"CVE-2011-2897 gdk-pixbuf: GIF loader buffer overflow when initializing decompression tables","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2897.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb-gdbserver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb-gdbserver_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb-gdbserver_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb-headless_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb-headless_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb-headless_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb_security_api_results.json
new file mode 100644
index 0000000..b6643ba
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-1010180","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:1635"],"bugzilla":"1740615","bugzilla_description":"CVE-2019-1010180 gdb: buffer overflow while opening an ELF for debugging leads to Dos, information dislosure and code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["gdb-0:8.2-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010180.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2018-20712","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1668269","bugzilla_description":"CVE-2018-20712 libiberty: heap-based buffer over-read in d_expression_1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20712.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-20673","severity":"moderate","public_date":"2018-12-27T00:00:00Z","advisories":[],"bugzilla":"1664709","bugzilla_description":"CVE-2018-20673 libiberty: Integer overflow in demangle_template() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20673.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20657","severity":"low","public_date":"2018-12-18T00:00:00Z","advisories":["RHSA-2019:3352"],"bugzilla":"1664708","bugzilla_description":"CVE-2018-20657 libiberty: Memory leak in demangle_template function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["gdb-0:8.2-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14038","severity":null,"public_date":"2018-07-12T00:00:00Z","advisories":[],"bugzilla":"1686781","bugzilla_description":"CVE-2018-14038 libbfd: remote dos via crafted file in function aout_32_swap_std_reloc_out in aoutx.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14038.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-9778","severity":"low","public_date":"2017-06-15T00:00:00Z","advisories":[],"bugzilla":"1466255","bugzilla_description":"CVE-2017-9778 gdb: Malformed section in an ELF binary or a core file can cause memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9778.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6131","severity":null,"public_date":"2016-06-29T00:00:00Z","advisories":[],"bugzilla":"1352068","bugzilla_description":"CVE-2016-6131 gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-4492","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333377","bugzilla_description":"CVE-2016-4492 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4493","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1333383","bugzilla_description":"CVE-2016-4493 gcc: Read access violations","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4493.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4491","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1333371","bugzilla_description":"CVE-2016-4491 gcc: Stack overflow due to infinite recursion in d_print_comp","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2016-4489","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333336","bugzilla_description":"CVE-2016-4489 gcc: Invalid write due to integer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4490","severity":"low","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1333366","bugzilla_description":"CVE-2016-4490 gcc: Write access violation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2016-4487","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333330","bugzilla_description":"CVE-2016-4487 gcc: Invalid write due to a use-after-free to array btypevec","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4488","severity":"low","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1333332","bugzilla_description":"CVE-2016-4488 gcc: Invalid write due to a use-after-free to array ktypevec","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-2226","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1333322","bugzilla_description":"CVE-2016-2226 gcc: Exploitable buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2012-3509","severity":"moderate","public_date":"2012-08-29T00:00:00Z","advisories":[],"bugzilla":"849693","bugzilla_description":"CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3509.json"},{"CVE":"CVE-2011-4355","severity":"moderate","public_date":"2011-04-29T00:00:00Z","advisories":["RHSA-2013:0522"],"bugzilla":"703238","bugzilla_description":"CVE-2011-4355 gdb: object file .debug_gdb_scripts section improper input validation","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["gdb-0:7.2-60.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4355.json"},{"CVE":"CVE-2006-4146","severity":"low","public_date":"2006-08-31T00:00:00Z","advisories":["RHSA-2007:0469","RHSA-2007:0229"],"bugzilla":"203875","bugzilla_description":"CVE-2006-4146 GDB buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.138.el3","gdb-0:6.3.0.0-1.143.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4146.json"},{"CVE":"CVE-2005-1704","severity":"low","public_date":"2005-05-25T00:00:00Z","advisories":["RHBA-2005:675","RHSA-2005:763","RHSA-2005:673","RHSA-2006:0368","RHSA-2005:709","RHSA-2006:0354","RHSA-2005:801","RHSA-2005:659"],"bugzilla":"1617660","bugzilla_description":"CVE-2005-1704 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.63","binutils-0:2.14.90.0.4-39","elfutils-0:0.94.1-2","binutils-0:2.15.92.0.2-15","elfutils-0:0.97.1-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1704.json"},{"CVE":"CVE-2005-1705","severity":"low","public_date":"2005-05-25T00:00:00Z","advisories":["RHBA-2005:675","RHSA-2005:709","RHSA-2005:801"],"bugzilla":"1617661","bugzilla_description":"CVE-2005-1705 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdb-0:6.3.0.0-1.63"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1705.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdbm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdbm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdbm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdbm-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdbm-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdbm-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdbm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdbm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdbm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdisk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdisk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdisk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-xlib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-xlib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-xlib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-xlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-xlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2-xlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2_security_api_results.json
new file mode 100644
index 0000000..530ec3e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdk-pixbuf2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-2862","severity":"moderate","public_date":"2017-08-30T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1488817","bugzilla_description":"CVE-2017-2862 gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["gdk-pixbuf2-0:2.36.12-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-12447","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1686828","bugzilla_description":"CVE-2017-12447 gdk-pixbuf: heap-based overflow caused by invalid palette size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12447.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-1000422","severity":"moderate","public_date":"2017-08-07T00:00:00Z","advisories":[],"bugzilla":"1531397","bugzilla_description":"CVE-2017-1000422 gdk-pixbuf: Integer overflow in io-gif.c:gif_get_lzw() can lead to memory corruption and potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-6313","severity":"moderate","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427217","bugzilla_description":"CVE-2017-6313 gdk-pixbuf: Integer underflow in io-icns.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-6314","severity":"low","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427218","bugzilla_description":"CVE-2017-6314 gdk-pixbuf: Infinite loop in io-tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6314.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6312","severity":"low","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427221","bugzilla_description":"CVE-2017-6312 gdk-pixbuf: Out-of-bounds read in io-ico.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6312.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6311","severity":"low","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1427222","bugzilla_description":"CVE-2017-6311 gdk-pixbuf: NULL pointer dereference in gdk-pixbuf-thumbnailer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6311.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-2870","severity":"moderate","public_date":"2016-09-07T00:00:00Z","advisories":[],"bugzilla":"1486735","bugzilla_description":"CVE-2017-2870 gdk-pixbuf2: Integer overflow in tiff_image_parse function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6352","severity":"moderate","public_date":"2016-07-13T00:00:00Z","advisories":[],"bugzilla":"1349751","bugzilla_description":"CVE-2016-6352 gdk-pixbuf: Out-of-bounds write in OneLine32() function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6352.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2015-7552","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHBA-2017:2100"],"bugzilla":"1378894","bugzilla_description":"CVE-2015-7552 gdk-pixbuf: Heap-based buffer overflow in the gdk_pixbuf_flip function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["gdk-pixbuf2-0:2.36.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7552.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8875","severity":"moderate","public_date":"2015-10-06T00:00:00Z","advisories":[],"bugzilla":"1337063","bugzilla_description":"CVE-2015-8875 gdk-pixbuf: Integer overflows in various pixops functions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8875.json"},{"CVE":"CVE-2015-7673","severity":"moderate","public_date":"2015-10-01T00:00:00Z","advisories":[],"bugzilla":"1261836","bugzilla_description":"CVE-2015-7673 gdk-pixbuf: Heap overflow and DoS vulnerability when scaling a TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7673.json"},{"CVE":"CVE-2015-7674","severity":"moderate","public_date":"2015-10-01T00:00:00Z","advisories":[],"bugzilla":"1268249","bugzilla_description":"CVE-2015-7674 gdk-pixbuf: Heap overflow when scaling a GIF file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7674.json"},{"CVE":"CVE-2015-4491","severity":"important","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1694","RHSA-2015:1586"],"bugzilla":"1252290","bugzilla_description":"CVE-2015-4491 Mozilla: Heap overflow in gdk-pixbuf when scaling bitmap images (MFSA 2015-88)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","gdk-pixbuf2-0:2.24.1-6.el6_7","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","gdk-pixbuf2-0:2.28.2-5.el7_1","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4491.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdm_security_api_results.json
new file mode 100644
index 0000000..91e900a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gdm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-3825","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1672825","bugzilla_description":"CVE-2019-3825 gdm: lock screen bypass when timed login is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["gdm-1:3.28.3-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3825.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2018-14424","severity":"moderate","public_date":"2018-08-13T00:00:00Z","advisories":[],"bugzilla":"1606915","bugzilla_description":"CVE-2018-14424 gdm: use-after-free in the GDM daemon","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14424.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2017-12164","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1490417","bugzilla_description":"CVE-2017-12164 gdm: lock screen can be circumvented when autologin is set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12164.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2016-1000002","severity":"low","public_date":"2016-06-02T00:00:00Z","advisories":[],"bugzilla":"1391126","bugzilla_description":"CVE-2016-1000002 gdm: Information leak before screen lock","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000002.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2015-7496","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2017:2128"],"bugzilla":"1283279","bugzilla_description":"CVE-2015-7496 gdm: Crash when holding Escape in log screen","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-364","affected_packages":["gdm-1:3.22.3-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7496.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2013-4169","severity":"important","public_date":"2013-09-05T00:00:00Z","advisories":["RHSA-2013:1213"],"bugzilla":"988498","bugzilla_description":"CVE-2013-4169 gdm: TOCTTOU race condition on /tmp/.X11-unix","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"(CWE-367|CWE-377)->CWE-552","affected_packages":["gdm-1:2.16.0-59.el5_9.1","initscripts-0:8.45.42-2.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4169.json"},{"CVE":"CVE-2013-7273","severity":"low","public_date":"2012-07-30T00:00:00Z","advisories":[],"bugzilla":"1050745","bugzilla_description":"CVE-2013-7273 gdm: local DoS possible when cancelling and disable-user-list=true when fallback greeter is used","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7273.json"},{"CVE":"CVE-2011-1709","severity":"moderate","public_date":"2011-05-31T00:00:00Z","advisories":[],"bugzilla":"709139","bugzilla_description":"CVE-2011-1709 gdm: URI scheme handling change in glib2 allows running default browser in GDM session","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1709.json"},{"CVE":"CVE-2011-0727","severity":"important","public_date":"2011-03-28T00:00:00Z","advisories":["RHSA-2011:0395"],"bugzilla":"688323","bugzilla_description":"CVE-2011-0727 gdm: privilege escalation vulnerability","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["gdm-1:2.30.4-21.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0727.json"},{"CVE":"CVE-2010-2387","severity":null,"public_date":"2009-02-15T00:00:00Z","advisories":[],"bugzilla":"889384","bugzilla_description":"CVE-2010-2387 gdm: logs user passwors that contain invalid UTF8-encoded characters, in debug mode","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2387.json"},{"CVE":"CVE-2007-3381","severity":"moderate","public_date":"2007-07-30T00:00:00Z","advisories":["RHSA-2007:0777"],"bugzilla":"247655","bugzilla_description":"CVE-2007-3381 Gdm denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdm-1:2.16.0-31.0.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3381.json"},{"CVE":"CVE-2009-2697","severity":"low","public_date":"2007-05-11T00:00:00Z","advisories":["RHSA-2009:1364"],"bugzilla":"239818","bugzilla_description":"CVE-2009-2697 gdm not built with tcp_wrappers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gdm-1:2.16.0-56.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2697.json"},{"CVE":"CVE-2006-1057","severity":"low","public_date":"2006-04-19T00:00:00Z","advisories":["RHSA-2007:0286"],"bugzilla":"1618026","bugzilla_description":"CVE-2006-1057 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdm-1:2.6.0.5-7.rhel4.15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1057.json"},{"CVE":"CVE-2007-5079","severity":"low","public_date":"2006-02-13T00:00:00Z","advisories":["RHSA-2010:0657"],"bugzilla":"181302","bugzilla_description":"CVE-2007-5079 gdm with xdmcp ignoring tcp_wrappers on x86_64","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gdm-1:2.6.0.5-7.rhel4.19.el4_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5079.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-bookmarks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-bookmarks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-bookmarks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-bracketcompletion_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-bracketcompletion_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-bracketcompletion_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-codecomment_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-codecomment_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-codecomment_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-colorpicker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-colorpicker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-colorpicker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-colorschemer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-colorschemer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-colorschemer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-commander_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-commander_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-commander_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-drawspaces_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-drawspaces_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-drawspaces_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-findinfiles_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-findinfiles_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-findinfiles_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-joinlines_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-joinlines_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-joinlines_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-multiedit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-multiedit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-multiedit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-smartspaces_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-smartspaces_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-smartspaces_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-terminal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-terminal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-terminal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-textsize_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-textsize_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-textsize_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-translate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-translate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-translate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-wordcompletion_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-wordcompletion_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugin-wordcompletion_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugins-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugins-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugins-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugins_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit-plugins_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit_security_api_results.json
new file mode 100644
index 0000000..fcc2e71
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gedit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-14108","severity":"low","public_date":"2017-09-02T00:00:00Z","advisories":[],"bugzilla":"1488335","bugzilla_description":"CVE-2017-14108 gedit: CPU consumption via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14108.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2009-0314","severity":"low","public_date":"2008-08-06T00:00:00Z","advisories":[],"bugzilla":"481556","bugzilla_description":"CVE-2009-0314 gedit: untrusted python modules search path","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0314.json"},{"CVE":"CVE-2005-1686","severity":"moderate","public_date":"2005-05-20T00:00:00Z","advisories":["RHSA-2005:499"],"bugzilla":"1617658","bugzilla_description":"CVE-2005-1686 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gedit-1:2.2.2-4.rhel3","gedit-1:2.8.1-4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1686.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gegl04-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gegl04-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gegl04-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gegl04_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gegl04_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gegl04_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gegl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gegl_security_api_results.json
new file mode 100644
index 0000000..1be925c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gegl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10111","severity":"low","public_date":"2018-04-14T00:00:00Z","advisories":[],"bugzilla":"1570185","bugzilla_description":"CVE-2018-10111 gegl: unbounded memory allocation in render_rectangle function in process/gegl-processor.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10111.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10112","severity":"moderate","public_date":"2018-04-14T00:00:00Z","advisories":[],"bugzilla":"1570188","bugzilla_description":"CVE-2018-10112 gegl: write access violation in gegl_tile_backend_swap_constructed function in buffer/gegl-tile-backend-swap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10112.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-10113","severity":"low","public_date":"2018-04-14T00:00:00Z","advisories":[],"bugzilla":"1570191","bugzilla_description":"CVE-2018-10113 gegl: unbounded memory allocation in process function in operations/external/ppm-load.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10113.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10114","severity":"moderate","public_date":"2018-04-14T00:00:00Z","advisories":[],"bugzilla":"1570192","bugzilla_description":"CVE-2018-10114 gegl: write access violation gegl_buffer_iterate_read_simple function in buffer/gegl-buffer-access.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10114.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2012-4433","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2012:1455"],"bugzilla":"856300","bugzilla_description":"CVE-2012-4433 gegl: Integer overflow, leading to heap-based buffer overflow by parsing PPM image headers","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["gegl-0:0.1.2-4.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4433.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genisoimage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genisoimage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genisoimage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-vpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-vpd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-vpd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-zlib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-zlib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-zlib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-zlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-zlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/genwqe-zlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2-demos_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2-demos_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2-demos_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoclue2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geocode-glib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geocode-glib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geocode-glib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geocode-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geocode-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geocode-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoipupdate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoipupdate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geoipupdate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geolite2-city_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geolite2-city_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geolite2-city_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geolite2-country_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geolite2-country_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geolite2-country_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-annotation-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-annotation-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-annotation-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-annotation_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-annotation_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-annotation_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jms-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jms-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jms-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jms_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jms_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jms_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jpa-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jpa-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jpa-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jpa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jpa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-jpa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-parent-poms_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-parent-poms_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/geronimo-parent-poms_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext-common-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext-common-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext-common-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext_security_api_results.json
new file mode 100644
index 0000000..7b26016
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gettext_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12825","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:3654","RHBA-2020:3609","RHSA-2020:4072"],"bugzilla":"1835377","bugzilla_description":"CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["redhat-coreos-43.82.202009181853.0","libcroco-0:0.6.12-4.el8_2.1","libcroco-0:0.6.12-6.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-18751","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":["RHSA-2019:3643","RHSA-2020:2485","RHSA-2020:2846","RHSA-2020:1138","RHBA-2019:3303"],"bugzilla":"1647043","bugzilla_description":"CVE-2018-18751 gettext: double free in default_add_message in read-catalog.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-42.81.20191107.0","gettext-0:0.19.8.1-17.el8","gettext-0:0.19.8.1-3.el7","gettext-0:0.19.8.1-3.el7_6","gettext-0:0.19.8.1-3.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18751.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gfbgraph_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gfbgraph_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gfbgraph_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gflags-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gflags-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gflags-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gflags_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gflags_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gflags_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gfs2-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gfs2-utils_security_api_results.json
new file mode 100644
index 0000000..04e5aab
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gfs2-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2008-6552","severity":"low","public_date":"2008-10-31T00:00:00Z","advisories":["RHSA-2009:1339","RHSA-2011:0264","RHSA-2011:0265","RHSA-2009:1337","RHSA-2009:1341"],"bugzilla":"519436","bugzilla_description":"CVE-2008-6552 cman, gfs2-utils, rgmanager: multiple insecure temporary file use issues","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:C","CWE":"CWE-377","affected_packages":["rgmanager-0:1.9.88-2.el4","ccs-0:1.0.13-2","rgmanager-0:2.0.52-1.el5","gfs2-utils-0:0.1.62-1.el5","cman-0:2.0.115-1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-6552.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghc-srpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghc-srpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghc-srpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-tools-dvipdf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-tools-dvipdf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-tools-dvipdf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-tools-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-tools-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-tools-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-tools-printing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-tools-printing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-tools-printing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-x11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-x11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript-x11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript_security_api_results.json
new file mode 100644
index 0000000..3b03e1d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ghostscript_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14373","severity":"moderate","public_date":"2020-09-02T07:00:00Z","advisories":[],"bugzilla":"1873239","bugzilla_description":"CVE-2020-14373 ghostscript: use-after-free vulnerability in igc_reloc_struct_ptr() could result in DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14373.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16290","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870149","bugzilla_description":"CVE-2020-16290 ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16290.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16298","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870152","bugzilla_description":"CVE-2020-16298 ghostscript: buffer overflow in mj_color_correct() in contrib/japanese/gdevmjc.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16298.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16310","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870159","bugzilla_description":"CVE-2020-16310 ghostscript: division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16310.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16307","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870162","bugzilla_description":"CVE-2020-16307 ghostscript: NULL pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c could result in a DoS via a crafted postscript file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16307.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16306","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870165","bugzilla_description":"CVE-2020-16306 ghostscript: NULL pointer dereference vulnerability in devices/gdevtsep.c could result in a DoS via a crafted postscript file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16306.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16301","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870167","bugzilla_description":"CVE-2020-16301 ghostscript: buffer overflow in okiibm_print_page1() in devices/gdevokii.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-805->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16301.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16300","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870169","bugzilla_description":"CVE-2020-16300 ghostscript: buffer overflow in tiff12_print_page() in devices/gdevtfnx.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-122->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16300.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16299","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870171","bugzilla_description":"CVE-2020-16299 ghostscript: division by zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16299.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16296","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870175","bugzilla_description":"CVE-2020-16296 ghostscript: buffer overflow in GetNumWrongData() in contrib/lips4/gdevlips.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16296.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16295","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870179","bugzilla_description":"CVE-2020-16295 ghostscript: NULL pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-369|CWE-476)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16295.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16297","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870227","bugzilla_description":"CVE-2020-16297 ghostscript: buffer overflow in FloydSteinbergDitheringC() in contrib/gdevbjca.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-805->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16297.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16294","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870229","bugzilla_description":"CVE-2020-16294 ghostscript: buffer overflow in epsc_print_page() in devices/gdevepsc.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-131->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16294.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16293","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870231","bugzilla_description":"CVE-2020-16293 ghostscript: NULL pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16293.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16292","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870237","bugzilla_description":"CVE-2020-16292 ghostscript: buffer overflow in mj_raster_cmd() in contrib/japanese/gdevmjc.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16292.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16291","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870240","bugzilla_description":"CVE-2020-16291 ghostscript: buffer overflow in contrib/gdevdj9.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-122->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16291.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16287","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870242","bugzilla_description":"CVE-2020-16287 ghostscript: buffer overflow in lprn_is_black() in contrib/lips4/gdevlprn.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682->CWE-122->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16287.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16289","severity":"low","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870244","bugzilla_description":"CVE-2020-16289 ghostscript: buffer overflow in cif_print_page() in devices/gdevcif.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16289.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16309","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870248","bugzilla_description":"CVE-2020-16309 ghostscript: buffer overflow in lxm5700m_print_page() in devices/gdevlxm.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16309.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-17538","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870249","bugzilla_description":"CVE-2020-17538 ghostscript: buffer overflow in GetNumSameData() in contrib/lips4/gdevlips.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17538.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16308","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870256","bugzilla_description":"CVE-2020-16308 ghostscript: buffer overflow in p_print_image() in devices/gdevcdj.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16308.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16305","severity":"low","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870257","bugzilla_description":"CVE-2020-16305 ghostscript: buffer overflow in pcx_write_rle() in contrib/japanese/gdev10v.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16305.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16303","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870258","bugzilla_description":"CVE-2020-16303 ghostscript: use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c could result in a privilege escalation via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16303.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-16304","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870262","bugzilla_description":"CVE-2020-16304 ghostscript: buffer overflow in image_render_color_thresh() in base/gxicolor.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16304.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16288","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870266","bugzilla_description":"CVE-2020-16288 ghostscript: buffer overflow in pj_common_print_page() in devices/gdevpjet.c could result in a DoS via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-805->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16288.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-16302","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870267","bugzilla_description":"CVE-2020-16302 ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a privilege escalation via a crafted PDF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-805->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16302.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-15900","severity":"important","public_date":"2020-07-27T00:00:00Z","advisories":[],"bugzilla":"1859492","bugzilla_description":"CVE-2020-15900 ghostscript: Memory Corruption in Ghostscript 9.52 (SAFER Sandbox Breakout)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15900.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-14869","severity":"important","public_date":"2019-11-14T13:00:00Z","advisories":["RHSA-2019:3888","RHSA-2020:0222","RHSA-2019:3890"],"bugzilla":"1768911","bugzilla_description":"CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys (701841)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.4","ghostscript-0:9.25-5.el8_1.1","ghostscript-0:9.25-2.el7_7.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-14813","severity":"important","public_date":"2019-08-28T12:00:00Z","advisories":["RHSA-2019:2586","RHSA-2019:2534","RHSA-2019:2591"],"bugzilla":"1743737","bugzilla_description":"CVE-2019-14813 ghostscript: Safer mode bypass by .forceput exposure in setsystemparams (701443)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.3","ghostscript-0:9.25-2.el7_7.2","3scale-amp26/zync:1.9-28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-14812","severity":"important","public_date":"2019-08-28T12:00:00Z","advisories":["RHSA-2019:2586","RHSA-2019:2534","RHSA-2019:2591"],"bugzilla":"1743754","bugzilla_description":"CVE-2019-14812 ghostscript: Safer mode bypass by .forceput exposure in setuserparams (701444)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.3","ghostscript-0:9.25-2.el7_7.2","3scale-amp26/zync:1.9-28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-14811","severity":"important","public_date":"2019-08-28T12:00:00Z","advisories":["RHSA-2019:2586","RHSA-2019:2534","RHSA-2019:2591"],"bugzilla":"1743757","bugzilla_description":"CVE-2019-14811 ghostscript: Safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator (701445)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.3","ghostscript-0:9.25-2.el7_7.2","3scale-amp26/zync:1.9-28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-14817","severity":"important","public_date":"2019-08-28T12:00:00Z","advisories":["RHSA-2019:2586","RHSA-2019:2534","RHSA-2019:2591"],"bugzilla":"1744042","bugzilla_description":"CVE-2019-14817 ghostscript: Safer mode bypass by .forceput exposure in .pdfexectoken and other procedures (701450)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.3","ghostscript-0:9.25-2.el7_7.2","3scale-amp26/zync:1.9-28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-10216","severity":"important","public_date":"2019-08-12T13:00:00Z","advisories":["RHSA-2019:2465","RHSA-2019:2462","RHSA-2019:2534"],"bugzilla":"1737080","bugzilla_description":"CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.2","ghostscript-0:9.25-2.el7_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10216.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3839","severity":"important","public_date":"2019-05-02T00:00:00Z","advisories":["RHSA-2019:1017","RHSA-2019:0971"],"bugzilla":"1673304","bugzilla_description":"CVE-2019-3839 ghostscript: missing attack vector protections for CVE-2019-6116","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.1","ghostscript-0:9.07-31.el7_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3838","severity":"important","public_date":"2019-03-21T12:00:00Z","advisories":["RHSA-2019:0971","RHSA-2019:0633"],"bugzilla":"1677581","bugzilla_description":"CVE-2019-3838 ghostscript: forceput in DefineResource is still accessible (700576)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.1","ghostscript-0:9.07-31.el7_6.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3835","severity":"important","public_date":"2019-03-21T12:00:00Z","advisories":["RHSA-2019:0971","RHSA-2019:0633"],"bugzilla":"1677588","bugzilla_description":"CVE-2019-3835 ghostscript: superexec operator is available (700585)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["ghostscript-0:9.25-2.el8_0.1","ghostscript-0:9.07-31.el7_6.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3835.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-6116","severity":"important","public_date":"2019-01-23T00:00:00Z","advisories":["RHSA-2019:0229"],"bugzilla":"1666636","bugzilla_description":"CVE-2019-6116 ghostscript: subroutines within pseudo-operators must themselves be pseudo-operators (700317)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-31.el7_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16863","severity":"important","public_date":"2018-12-03T00:00:00Z","advisories":["RHSA-2018:3761"],"bugzilla":"1652893","bugzilla_description":"CVE-2018-16863 ghostscript: incomplete fix for CVE-2018-16509","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":["ghostscript-0:9.07-31.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19475","severity":"important","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:0229"],"bugzilla":"1654459","bugzilla_description":"CVE-2018-19475 ghostscript: access bypass in psi/zdevice2.c (700153)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["ghostscript-0:9.07-31.el7_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19475.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19476","severity":"important","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:0229"],"bugzilla":"1654464","bugzilla_description":"CVE-2018-19476 ghostscript: access bypass in psi/zicc.c (700169)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["ghostscript-0:9.07-31.el7_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19476.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19477","severity":"important","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:0229"],"bugzilla":"1654468","bugzilla_description":"CVE-2018-19477 ghostscript: access bypass in psi/zfjbig2.c (700168)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["ghostscript-0:9.07-31.el7_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19134","severity":"important","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1655599","bugzilla_description":"CVE-2018-19134 ghostscript: Type confusion in setpattern (700141)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19134.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19478","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1655607","bugzilla_description":"CVE-2018-19478 ghostscript: Attempting to open a carefully crafted PDF file results in long-running computation (699856)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19478.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-19409","severity":"important","public_date":"2018-11-14T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1652583","bugzilla_description":"CVE-2018-19409 ghostscript: Improperly implemented security check in zsetdevice function in psi/zdevice.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19409.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-18284","severity":"important","public_date":"2018-10-12T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1642940","bugzilla_description":"CVE-2018-18284 ghostscript: 1Policy operator allows a sandbox protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18284.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-17961","severity":"important","public_date":"2018-10-10T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1642578","bugzilla_description":"CVE-2018-17961 ghostscript: Saved execution stacks can leak operator arrays (incomplete fix for CVE-2018-17183)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17961.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-18073","severity":"important","public_date":"2018-10-09T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1642584","bugzilla_description":"CVE-2018-18073 ghostscript: Saved execution stacks can leak operator arrays","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18073.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-17183","severity":"important","public_date":"2018-09-19T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1632471","bugzilla_description":"CVE-2018-17183 ghostscript: User-writable error exception table","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16802","severity":"important","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1627959","bugzilla_description":"CVE-2018-16802 ghostscript: Incorrect \"restoration of privilege\" checking when running out of stack during exception handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16542","severity":"important","public_date":"2018-09-06T00:00:00Z","advisories":["RHSA-2018:2918"],"bugzilla":"1621363","bugzilla_description":"CVE-2018-16542 ghostscript: .definemodifiedfont memory corruption if /typecheck is handled (699668)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-29.el7_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-15911","severity":"moderate","public_date":"2018-09-06T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1625832","bugzilla_description":"CVE-2018-15911 ghostscript: Uninitialized memory access in the aesdecode operator (699665)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15911.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16510","severity":"important","public_date":"2018-09-06T00:00:00Z","advisories":[],"bugzilla":"1625836","bugzilla_description":"CVE-2018-16510 ghostscript: Incorrect exec stack handling in the \"CS\" and \"SC\" PDF primitives (699671)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16510.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16539","severity":"moderate","public_date":"2018-09-06T00:00:00Z","advisories":["RHSA-2018:3650"],"bugzilla":"1625839","bugzilla_description":"CVE-2018-16539 ghostscript: incorrect access checking in temp file handling to disclose contents of files (699658)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["ghostscript-0:9.07-31.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-16540","severity":"important","public_date":"2018-09-06T00:00:00Z","advisories":["RHSA-2019:0229"],"bugzilla":"1625843","bugzilla_description":"CVE-2018-16540 ghostscript: use-after-free in copydevice handling (699661)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["ghostscript-0:9.07-31.el7_6.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16540.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16541","severity":"important","public_date":"2018-09-06T00:00:00Z","advisories":["RHSA-2018:3834"],"bugzilla":"1625846","bugzilla_description":"CVE-2018-16541 ghostscript: Incorrect free logic in pagedevice replacement (699664)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["ghostscript-0:9.07-31.el7_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16541.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16543","severity":"important","public_date":"2018-09-06T00:00:00Z","advisories":[],"bugzilla":"1625851","bugzilla_description":"CVE-2018-16543 ghostscript: gssetresolution and gsgetresolution memory corruption (699670)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-561","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16543.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16585","severity":"low","public_date":"2018-09-06T00:00:00Z","advisories":[],"bugzilla":"1626193","bugzilla_description":"CVE-2018-16585 ghostscript: .setdistillerkeys PostScript command is accepted even though it is not intended for use","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16585.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2018-15909","severity":"important","public_date":"2018-08-28T00:00:00Z","advisories":["RHSA-2018:3650"],"bugzilla":"1621361","bugzilla_description":"CVE-2018-15909 ghostscript: shading_param incomplete type checking (699660)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["ghostscript-0:9.07-31.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15909.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16511","severity":"important","public_date":"2018-08-24T00:00:00Z","advisories":["RHSA-2018:3650"],"bugzilla":"1621359","bugzilla_description":"CVE-2018-16511 ghostscript: missing type check in type checker (699659)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-704","affected_packages":["ghostscript-0:9.07-31.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16509","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:3760","RHSA-2018:2918"],"bugzilla":"1619748","bugzilla_description":"CVE-2018-16509 ghostscript: /invalidaccess bypass after failed restore (699654)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-29.el7_5.2","ghostscript-0:8.70-24.el6_10.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-16513","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":[],"bugzilla":"1619750","bugzilla_description":"CVE-2018-16513 ghostscript: setcolor missing type check (699655)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-15910","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:2918"],"bugzilla":"1619751","bugzilla_description":"CVE-2018-15910 ghostscript: LockDistillerParams type confusion (699656)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-704","affected_packages":["ghostscript-0:9.07-29.el7_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15910.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-15908","severity":"important","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:3650"],"bugzilla":"1619756","bugzilla_description":"CVE-2018-15908 ghostscript: .tempfile file permission issues (699657)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:9.07-31.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15908.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-10194","severity":"moderate","public_date":"2018-04-20T00:00:00Z","advisories":["RHSA-2018:2918"],"bugzilla":"1569108","bugzilla_description":"CVE-2018-10194 ghostscript: Stack-based out-of-bounds write in pdf_set_text_matrix function in gdevpdts.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["ghostscript-0:9.07-29.el7_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10194.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-11714","severity":"low","public_date":"2017-07-01T00:00:00Z","advisories":[],"bugzilla":"1476192","bugzilla_description":"CVE-2017-11714 ghostscript: Out of bounds read in igc_reloc_struct_ptr()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11714.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-9739","severity":"low","public_date":"2017-06-15T00:00:00Z","advisories":[],"bugzilla":"1475834","bugzilla_description":"CVE-2017-9739 ghostscript: Heap-buffer over-read in the Ins_JMPR function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9739.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9740","severity":"low","public_date":"2017-06-15T00:00:00Z","advisories":[],"bugzilla":"1475836","bugzilla_description":"CVE-2017-9740 ghostscript: Heap-buffer over-read in the xps_decode_font_char_imp function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9740.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9620","severity":"low","public_date":"2017-06-13T00:00:00Z","advisories":[],"bugzilla":"1475829","bugzilla_description":"CVE-2017-9620 ghostscript: Heap-buffer over-read in the xps_select_font_encoding function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9620.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9726","severity":"low","public_date":"2017-06-13T00:00:00Z","advisories":[],"bugzilla":"1475830","bugzilla_description":"CVE-2017-9726 ghostscript: Heap-buffer over-read in the Ins_MDRP function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9726.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9727","severity":"low","public_date":"2017-06-13T00:00:00Z","advisories":[],"bugzilla":"1475833","bugzilla_description":"CVE-2017-9727 ghostscript: Heap-buffer over-read in the gx_ttfReader__Read function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9727.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9610","severity":"low","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1475824","bugzilla_description":"CVE-2017-9610 ghostscript: Heap-buffer over-read in the xps_load_sfnt_name function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9610.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9611","severity":"low","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1475825","bugzilla_description":"CVE-2017-9611 ghostscript: Heap-buffer over-read in the Ins_MIRP function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9611.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9612","severity":"low","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1475826","bugzilla_description":"CVE-2017-9612 ghostscript: Use-after-free in the Ins_IP function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9612.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9618","severity":"low","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1475827","bugzilla_description":"CVE-2017-9618 ghostscript: Buffer overflow in the xps_load_sfnt_name function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9618.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9619","severity":"low","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1475828","bugzilla_description":"CVE-2017-9619 ghostscript: Segmentation fault in the xps_true_callback_glyph_name function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9619.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9835","severity":"low","public_date":"2017-06-06T00:00:00Z","advisories":[],"bugzilla":"1475837","bugzilla_description":"CVE-2017-9835 ghostscript: Heap-buffer over-read in the gs_alloc_ref_array function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9835.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9216","severity":"low","public_date":"2017-05-23T00:00:00Z","advisories":[],"bugzilla":"1456728","bugzilla_description":"CVE-2017-9216 jbig2dec: Null pointer dereference in jbig2_huffman_get()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9216.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9147","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1454655","bugzilla_description":"CVE-2017-9147 libtiff: Out of bounds read in _TIFFVGetField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9147.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8908","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1451247","bugzilla_description":"CVE-2017-8908 ghostscript: Out-of-bounds read in mark_line_tr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8908.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8291","severity":"important","public_date":"2017-04-26T00:00:00Z","advisories":["RHSA-2017:1230"],"bugzilla":"1446063","bugzilla_description":"CVE-2017-8291 ghostscript: corruption of operand stack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["ghostscript-0:9.07-20.el7_3.5","ghostscript-0:8.70-23.el6_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8291.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-7948","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1444944","bugzilla_description":"CVE-2017-7948 ghostscript: Integer overflow in the mark_curve function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7948.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7885","severity":"low","public_date":"2017-03-30T00:00:00Z","advisories":[],"bugzilla":"1444104","bugzilla_description":"CVE-2017-7885 jbig2dec: Integer overflow in jbig2_decode_symbol_dict","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7975","severity":"moderate","public_date":"2017-03-27T00:00:00Z","advisories":[],"bugzilla":"1443940","bugzilla_description":"CVE-2017-7975 jbig2dec: Integer overflow in jbig2_build_huffman_table allows OOB write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7976","severity":"low","public_date":"2017-03-24T00:00:00Z","advisories":[],"bugzilla":"1443897","bugzilla_description":"CVE-2017-7976 jbig2dec: Integer overflow in the jbig2_image_compose_function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7976.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7207","severity":"low","public_date":"2017-03-19T00:00:00Z","advisories":["RHSA-2017:2180"],"bugzilla":"1434353","bugzilla_description":"CVE-2017-7207 ghostscript: NULL pointer dereference in mem_get_bits_rectangle()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["ghostscript-0:9.07-28.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6196","severity":"low","public_date":"2017-02-20T00:00:00Z","advisories":[],"bugzilla":"1427440","bugzilla_description":"CVE-2017-6196 ghostscript: Multiple use-after-free vulnerabilities in gx_image_enum_begin function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6196.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5951","severity":"low","public_date":"2017-02-03T00:00:00Z","advisories":[],"bugzilla":"1441572","bugzilla_description":"CVE-2017-5951 ghostscript: NULL pointer dereference in the mem_get_bits_rectangle function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5951.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10317","severity":"low","public_date":"2016-12-31T00:00:00Z","advisories":[],"bugzilla":"1441575","bugzilla_description":"CVE-2016-10317 ghostscript: Heap-buffer overflow in the fill_threshold_buffer function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-9601","severity":"low","public_date":"2016-12-28T00:00:00Z","advisories":[],"bugzilla":"1410021","bugzilla_description":"CVE-2016-9601 ghostscript: Heap-buffer overflow due to Integer overflow in jbig2_image_new function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9601.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10217","severity":"low","public_date":"2016-12-27T00:00:00Z","advisories":[],"bugzilla":"1441564","bugzilla_description":"CVE-2016-10217 ghostscript: Use-after-free in the pdf14_open function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10217.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10219","severity":"low","public_date":"2016-12-23T00:00:00Z","advisories":[],"bugzilla":"1441569","bugzilla_description":"CVE-2016-10219 ghostscript: Divide-by-zero in the intersect function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10219.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10220","severity":"low","public_date":"2016-12-21T00:00:00Z","advisories":[],"bugzilla":"1441571","bugzilla_description":"CVE-2016-10220 ghostscript: NULL pointer dereference in the gs_makewordimagedevice function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10220.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10218","severity":"low","public_date":"2016-12-19T00:00:00Z","advisories":[],"bugzilla":"1441568","bugzilla_description":"CVE-2016-10218 ghostscript: NULL pointer dereference in the pfd14_pop_transparency_group function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10218.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8602","severity":"moderate","public_date":"2016-10-08T00:00:00Z","advisories":["RHSA-2017:0014","RHSA-2017:0013"],"bugzilla":"1383940","bugzilla_description":"CVE-2016-8602 ghostscript: check for sufficient params in .sethalftone5","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["ghostscript-0:9.07-20.el7_3.1","ghostscript-0:8.70-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8602.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2018-11645","severity":"low","public_date":"2016-10-05T00:00:00Z","advisories":["RHSA-2019:2281"],"bugzilla":"1585914","bugzilla_description":"CVE-2018-11645 ghostscript: status command permitted with -dSAFER in psi/zfile.c allowing attackers to identify the size and existence of files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["ghostscript-0:9.25-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-7979","severity":"moderate","public_date":"2016-10-04T00:00:00Z","advisories":["RHSA-2017:0014","RHSA-2017:0013"],"bugzilla":"1382305","bugzilla_description":"CVE-2016-7979 ghostscript: Type confusion in .initialize_dsc_parser allows remote code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["ghostscript-0:9.07-20.el7_3.1","ghostscript-0:8.70-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7979.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2016-7976","severity":"important","public_date":"2016-09-30T00:00:00Z","advisories":[],"bugzilla":"1382294","bugzilla_description":"CVE-2016-7976 ghostscript: various userparams allow %pipe% in paths, allowing remote shell","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7976.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2016-7978","severity":"moderate","public_date":"2016-09-30T00:00:00Z","advisories":["RHSA-2017:0013"],"bugzilla":"1382300","bugzilla_description":"CVE-2016-7978 ghostscript: reference leak in .setdevice allows use-after-free and remote code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["ghostscript-0:9.07-20.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2016-7977","severity":"moderate","public_date":"2016-09-28T00:00:00Z","advisories":["RHSA-2017:0014","RHSA-2017:0013"],"bugzilla":"1380415","bugzilla_description":"CVE-2016-7977 ghostscript: .libfile does not honor -dSAFER","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["ghostscript-0:9.07-20.el7_3.1","ghostscript-0:8.70-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7977.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2015-3228","severity":"low","public_date":"2015-07-23T00:00:00Z","advisories":[],"bugzilla":"1232805","bugzilla_description":"CVE-2015-3228 ghostscript-core: out-of-bounbds read and write in gs_ttf.ps","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3228.json"},{"CVE":"CVE-2013-5653","severity":"moderate","public_date":"2013-10-21T00:00:00Z","advisories":["RHSA-2017:0014","RHSA-2017:0013"],"bugzilla":"1380327","bugzilla_description":"CVE-2013-5653 ghostscript: getenv and filenameforall ignore -dSAFER","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["ghostscript-0:9.07-20.el7_3.1","ghostscript-0:8.70-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5653.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2012-4405","severity":"moderate","public_date":"2012-09-11T00:00:00Z","advisories":["RHSA-2012:1256"],"bugzilla":"854227","bugzilla_description":"CVE-2012-4405 ghostscript, argyllcms: Array index error leading to heap-based bufer OOB write","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["ghostscript-0:8.70-14.el5_8.1","ghostscript-0:8.70-14.el6_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4405.json"},{"CVE":"CVE-2012-1616","severity":"moderate","public_date":"2012-04-23T00:00:00Z","advisories":[],"bugzilla":"809697","bugzilla_description":"CVE-2012-1616 icclib: Use-after-free via crafted ICC profile files","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1616.json"},{"CVE":"CVE-2009-3743","severity":"moderate","public_date":"2010-08-24T00:00:00Z","advisories":["RHSA-2012:0095"],"bugzilla":"627902","bugzilla_description":"CVE-2009-3743 ghostscript: TrueType bytecode intepreter integer overflow or wraparound","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["ghostscript-0:8.70-11.el6_2.6","ghostscript-0:8.70-6.el5_7.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3743.json"},{"CVE":"CVE-2010-2055","severity":"moderate","public_date":"2010-05-26T00:00:00Z","advisories":["RHSA-2012:0095"],"bugzilla":"599564","bugzilla_description":"CVE-2010-2055 ghostscript: gs_init.ps searched in current directory despite -P-","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ghostscript-0:8.70-11.el6_2.6","ghostscript-0:8.70-6.el5_7.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2055.json"},{"CVE":"CVE-2010-4820","severity":"moderate","public_date":"2010-05-26T00:00:00Z","advisories":["RHSA-2012:0095","RHSA-2012:0096"],"bugzilla":"771853","bugzilla_description":"CVE-2010-4820 ghostscript: CWD included in the default library search path","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ghostscript-0:7.07-33.13.el4","ghostscript-0:8.70-11.el6_2.6","ghostscript-0:8.70-6.el5_7.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4820.json"},{"CVE":"CVE-2010-1869","severity":null,"public_date":"2010-05-11T00:00:00Z","advisories":[],"bugzilla":"582300","bugzilla_description":"CVE-2010-1869 ghostscript: PS parser buffer overflow in token scanner","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1869.json"},{"CVE":"CVE-2010-1628","severity":"important","public_date":"2010-05-11T00:00:00Z","advisories":[],"bugzilla":"592492","bugzilla_description":"CVE-2010-1628 ghostscript: internal stack overflow due to recursive calls","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1628.json"},{"CVE":"CVE-2010-4054","severity":"low","public_date":"2010-01-04T00:00:00Z","advisories":["RHSA-2012:0095","RHSA-2012:0096"],"bugzilla":"646086","bugzilla_description":"CVE-2010-4054 ghostscript: glyph data access improper input validation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["ghostscript-0:7.07-33.13.el4","ghostscript-0:8.70-11.el6_2.6","ghostscript-0:8.70-6.el5_7.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4054.json"},{"CVE":"CVE-2009-4897","severity":"important","public_date":"2009-06-08T00:00:00Z","advisories":[],"bugzilla":"613792","bugzilla_description":"CVE-2009-4897 ghostscript: long name buffer overflow (GS 8.64)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4897.json"},{"CVE":"CVE-2009-0792","severity":"moderate","public_date":"2009-04-08T00:00:00Z","advisories":["RHSA-2009:0421","RHSA-2009:0420"],"bugzilla":"491853","bugzilla_description":"CVE-2009-0792 ghostscript, argyllcms: Incomplete fix for CVE-2009-0583","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ghostscript-0:7.05-32.1.20","ghostscript-0:7.07-33.2.el4_7.8","ghostscript-0:8.15.2-9.4.el5_3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0792.json"},{"CVE":"CVE-2009-0196","severity":"moderate","public_date":"2009-04-08T00:00:00Z","advisories":["RHSA-2009:0421"],"bugzilla":"493379","bugzilla_description":"CVE-2009-0196 ghostscript: Missing boundary check in Ghostscript's jbig2dec library","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ghostscript-0:8.15.2-9.4.el5_3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0196.json"},{"CVE":"CVE-2009-0583","severity":"moderate","public_date":"2009-03-19T00:00:00Z","advisories":["RHSA-2009:0345"],"bugzilla":"487742","bugzilla_description":"CVE-2009-0583 ghostscript, argyllcms: Multiple integer overflows in the International Color Consortium Format Library","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["ghostscript-0:8.15.2-9.4.el5_3.4","ghostscript-0:7.07-33.2.el4_7.5","ghostscript-0:7.05-32.1.17"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0583.json"},{"CVE":"CVE-2009-0584","severity":"moderate","public_date":"2009-03-19T00:00:00Z","advisories":["RHSA-2009:0345"],"bugzilla":"487744","bugzilla_description":"CVE-2009-0584 ghostscript, argyllcms: Multiple insufficient upper-bounds checks on certain sizes in the International Color Consortium Format Library","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ghostscript-0:8.15.2-9.4.el5_3.4","ghostscript-0:7.07-33.2.el4_7.5","ghostscript-0:7.05-32.1.17"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0584.json"},{"CVE":"CVE-2008-6679","severity":"moderate","public_date":"2008-12-22T00:00:00Z","advisories":["RHSA-2009:0421"],"bugzilla":"493445","bugzilla_description":"CVE-2008-6679 ghostscript: Buffer overflow in BaseFont writer module for pdfwrite device","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:8.15.2-9.4.el5_3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-6679.json"},{"CVE":"CVE-2008-0411","severity":"important","public_date":"2008-02-27T00:00:00Z","advisories":["RHSA-2008:0155"],"bugzilla":"431536","bugzilla_description":"CVE-2008-0411 ghostscript: stack-based buffer overflow in .seticcspace operator","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["ghostscript-0:7.07-33.2.el4_6.1","ghostscript-0:8.15.2-9.1.el5_1.1","ghostscript-0:7.05-32.1.13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0411.json"},{"CVE":"CVE-2007-6725","severity":"moderate","public_date":"2007-02-19T00:00:00Z","advisories":["RHSA-2009:0421","RHSA-2009:0420"],"bugzilla":"493442","bugzilla_description":"CVE-2007-6725 ghostscript: DoS (crash) in CCITTFax decoding filter","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:7.05-32.1.20","ghostscript-0:7.07-33.2.el4_7.8","ghostscript-0:8.15.2-9.4.el5_3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6725.json"},{"CVE":"CVE-2004-0967","severity":"low","public_date":"2004-09-30T00:00:00Z","advisories":["RHSA-2005:081"],"bugzilla":"140074","bugzilla_description":"CVE-2004-0967 temporary file vulnerabilities in various ghostscript scripts.","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ghostscript-0:7.05-32.1.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0967.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/giflib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/giflib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/giflib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/giflib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/giflib_security_api_results.json
new file mode 100644
index 0000000..0298526
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/giflib_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-15133","severity":"low","public_date":"2019-08-17T00:00:00Z","advisories":[],"bugzilla":"1771309","bugzilla_description":"CVE-2019-15133 giflib: divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15133.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-11489","severity":"low","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1583399","bugzilla_description":"CVE-2018-11489 giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11490","severity":"low","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1583400","bugzilla_description":"CVE-2018-11490 giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-3977","severity":"low","public_date":"2016-04-04T00:00:00Z","advisories":[],"bugzilla":"1325771","bugzilla_description":"CVE-2016-3977 giflib: heap buffer overflow in gif2rgb","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3977.json"},{"CVE":"CVE-2016-3177","severity":"low","public_date":"2016-03-15T00:00:00Z","advisories":[],"bugzilla":"1314438","bugzilla_description":"CVE-2016-3177 giflib: Use-after-free in gifcolor utility","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3177.json"},{"CVE":"CVE-2015-7555","severity":"moderate","public_date":"2015-12-21T00:00:00Z","advisories":[],"bugzilla":"1290785","bugzilla_description":"CVE-2015-7555 giflib: Heap-based buffer overflow in giffix utility","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7555.json"},{"CVE":"CVE-2005-3350","severity":"important","public_date":"2005-11-03T00:00:00Z","advisories":["RHSA-2005:828","RHSA-2009:0444"],"bugzilla":"494823","bugzilla_description":"CVE-2005-3350 giflib/libunfig: memory corruption via a crafted GIF","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libungif-0:4.1.3-1.el4.2","giflib-0:4.1.3-7.1.el5_3.1","libungif-0:4.1.0-15.el3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3350.json"},{"CVE":"CVE-2005-2974","severity":"low","public_date":"2005-11-03T00:00:00Z","advisories":["RHSA-2005:828","RHSA-2009:0444"],"bugzilla":"494826","bugzilla_description":"CVE-2005-2974 giflib/libunfig: NULL pointer dereference crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libungif-0:4.1.3-1.el4.2","giflib-0:4.1.3-7.1.el5_3.1","libungif-0:4.1.0-15.el3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2974.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp-devel-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp-devel-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp-devel-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp_security_api_results.json
new file mode 100644
index 0000000..a268ff3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gimp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-12713","severity":"low","public_date":"2018-06-21T00:00:00Z","advisories":[],"bugzilla":"1595819","bugzilla_description":"CVE-2018-12713 gimp: predictable temporary file name in test-xcf.c unit test","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12713.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-17788","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1529141","bugzilla_description":"CVE-2017-17788 gimp: Stack-based buffer over-read in xcf_load_stream function in app/xcf/xcf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17788.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-17787","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1529143","bugzilla_description":"CVE-2017-17787 gimp: Heap-based buffer over-read in read_creator_block function in plug-ins/common/file-psp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17787.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-17784","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1529144","bugzilla_description":"CVE-2017-17784 gimp: Heap-based buffer over-read in load_image function in plug-ins/common/file-gbr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17784.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-17786","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1529145","bugzilla_description":"CVE-2017-17786 gimp: Heap-based buffer over-read in ReadImage function in plug-ins/common/file-tga.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17786.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-17789","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1529146","bugzilla_description":"CVE-2017-17789 gimp: Heap-based buffer overflow in read_channel_data function in plug-ins/common/file-psp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17789.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-17785","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1529147","bugzilla_description":"CVE-2017-17785 gimp: Heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17785.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-4994","severity":"moderate","public_date":"2016-06-20T00:00:00Z","advisories":["RHSA-2016:2589"],"bugzilla":"1348617","bugzilla_description":"CVE-2016-4994 gimp: Use-after-free vulnerabilities in the channel and layer properties parsing process","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["gimp-2:2.8.16-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4994.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2013-1913","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2013:1778"],"bugzilla":"947868","bugzilla_description":"CVE-2013-1913 gimp: xwd plugin g_new() integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["gimp-2:2.6.9-6.el6_5","gimp-2:2.2.13-3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1913.json"},{"CVE":"CVE-2013-1978","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2013:1778"],"bugzilla":"953902","bugzilla_description":"CVE-2013-1978 gimp: XWD plugin color map heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["gimp-2:2.6.9-6.el6_5","gimp-2:2.2.13-3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1978.json"},{"CVE":"CVE-2012-5576","severity":"moderate","public_date":"2012-11-02T00:00:00Z","advisories":["RHSA-2013:1778"],"bugzilla":"879302","bugzilla_description":"CVE-2012-5576 gimp (XWD plug-in): Stack-based buffer overflow when loading XWD file","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["gimp-2:2.6.9-6.el6_5","gimp-2:2.2.13-3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5576.json"},{"CVE":"CVE-2012-3402","severity":"moderate","public_date":"2012-08-20T00:00:00Z","advisories":["RHSA-2012:1181"],"bugzilla":"838941","bugzilla_description":"CVE-2012-3402 gimp (PSD plug-in): Heap-buffer overflow by decoding certain PSD headers","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["gimp-2:2.2.13-2.0.7.el5_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3402.json"},{"CVE":"CVE-2012-3403","severity":"moderate","public_date":"2012-08-20T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181"],"bugzilla":"839020","bugzilla_description":"CVE-2012-3403 gimp (CEL plug-in): heap buffer overflow when loading external palette files","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["gimp-2:2.6.9-4.el6_3.3","gimp-2:2.2.13-2.0.7.el5_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3403.json"},{"CVE":"CVE-2012-3481","severity":"moderate","public_date":"2012-08-20T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181"],"bugzilla":"847303","bugzilla_description":"CVE-2012-3481 Gimp (GIF plug-in): Heap-based buffer overflow by loading certain GIF images","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["gimp-2:2.6.9-4.el6_3.3","gimp-2:2.2.13-2.0.7.el5_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3481.json"},{"CVE":"CVE-2012-4245","severity":null,"public_date":"2012-08-16T00:00:00Z","advisories":[],"bugzilla":"855929","bugzilla_description":"CVE-2012-4245 gimp: arbitrary code execution without authentication in scriptfu network server","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4245.json"},{"CVE":"CVE-2012-3236","severity":null,"public_date":"2012-06-29T00:00:00Z","advisories":[],"bugzilla":"834627","bugzilla_description":"CVE-2012-3236 gimp: NULL pointer deref crash when reading FIT file with crafted XTENSION header","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3236.json"},{"CVE":"CVE-2012-2763","severity":"low","public_date":"2012-05-30T00:00:00Z","advisories":[],"bugzilla":"824541","bugzilla_description":"CVE-2012-2763 gimp: Heap-based buffer overflow in the script-fu console by sending overly long arguments to script-fu server","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2763.json"},{"CVE":"CVE-2011-2896","severity":"moderate","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181","RHSA-2011:1635","RHSA-2012:0302"],"bugzilla":"727800","bugzilla_description":"CVE-2011-2896 David Koblas' GIF decoder LZW decoder buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gimp-2:2.6.9-4.el6_3.3","cups-1:1.3.7-30.el5","gimp-2:2.2.13-2.0.7.el5_8.5","cups-1:1.4.2-44.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2896.json"},{"CVE":"CVE-2011-1178","severity":"moderate","public_date":"2011-05-23T00:00:00Z","advisories":["RHSA-2011:0837","RHSA-2011:0838"],"bugzilla":"689831","bugzilla_description":"CVE-2011-1178 Gimp: Integer overflow in the PCX image file plug-in","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["gimp-1:2.0.5-7.0.7.el4.1","gimp-2:2.2.13-2.0.7.el5_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1178.json"},{"CVE":"CVE-2011-1782","severity":"moderate","public_date":"2011-05-23T00:00:00Z","advisories":[],"bugzilla":"704512","bugzilla_description":"CVE-2011-1782 Gimp: Incomplete fix for CVE-2010-4543 PSP plug-in heap overflow issue","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1782.json"},{"CVE":"CVE-2010-4540","severity":"moderate","public_date":"2010-12-31T00:00:00Z","advisories":["RHSA-2011:0839","RHSA-2011:0838"],"bugzilla":"666793","bugzilla_description":"CVE-2010-4540 Gimp: Stack-based buffer overflow in Lighting plug-in","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["gimp-2:2.2.13-2.0.7.el5_6.2","gimp-2:2.6.9-4.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4540.json"},{"CVE":"CVE-2010-4541","severity":"moderate","public_date":"2010-12-31T00:00:00Z","advisories":["RHSA-2011:0839","RHSA-2011:0837","RHSA-2011:0838"],"bugzilla":"703403","bugzilla_description":"CVE-2010-4541 Gimp: Stack-based buffer overflow in SphereDesigner plug-in","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["gimp-1:2.0.5-7.0.7.el4.1","gimp-2:2.2.13-2.0.7.el5_6.2","gimp-2:2.6.9-4.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4541.json"},{"CVE":"CVE-2010-4542","severity":"moderate","public_date":"2010-12-31T00:00:00Z","advisories":["RHSA-2011:0839","RHSA-2011:0838"],"bugzilla":"703405","bugzilla_description":"CVE-2010-4542 Gimp: Stack-based buffer overflow in Gfig plug-in","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["gimp-2:2.2.13-2.0.7.el5_6.2","gimp-2:2.6.9-4.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4542.json"},{"CVE":"CVE-2010-4543","severity":"moderate","public_date":"2010-12-31T00:00:00Z","advisories":["RHSA-2011:0839","RHSA-2011:0837","RHSA-2011:0838"],"bugzilla":"703407","bugzilla_description":"CVE-2010-4543 Gimp: Heap-based buffer overflow in Paint Shop Pro (PSP) plug-in","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["gimp-1:2.0.5-7.0.7.el4.1","gimp-2:2.2.13-2.0.7.el5_6.2","gimp-2:2.6.9-4.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4543.json"},{"CVE":"CVE-2009-3909","severity":"moderate","public_date":"2009-11-17T00:00:00Z","advisories":["RHSA-2012:1181"],"bugzilla":"537370","bugzilla_description":"CVE-2009-3909 Gimp: Integer overflow in the PSD image file plugin","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["gimp-2:2.2.13-2.0.7.el5_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3909.json"},{"CVE":"CVE-2009-1570","severity":"moderate","public_date":"2009-11-12T00:00:00Z","advisories":["RHSA-2011:0837","RHSA-2011:0838"],"bugzilla":"537356","bugzilla_description":"CVE-2009-1570 Gimp: Integer overflow in the BMP image file plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["gimp-1:2.0.5-7.0.7.el4.1","gimp-2:2.2.13-2.0.7.el5_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1570.json"},{"CVE":"CVE-2006-4519","severity":"moderate","public_date":"2007-07-09T00:00:00Z","advisories":["RHSA-2007:0513"],"bugzilla":"247565","bugzilla_description":"CVE-2006-4519 GIMP multiple image loader integer overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["gimp-1:1.2.3-20.9.el3","gimp-1:2.0.5-7.0.7.el4","gimp-2:2.2.13-2.0.7.el5","gimp-1:1.2.1-7.8.el2_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4519.json"},{"CVE":"CVE-2007-3741","severity":"moderate","public_date":"2007-07-09T00:00:00Z","advisories":["RHSA-2007:0513"],"bugzilla":"248053","bugzilla_description":"CVE-2007-3741 Gimp image loader multiple input validation flaws","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["gimp-1:1.2.3-20.9.el3","gimp-1:2.0.5-7.0.7.el4","gimp-2:2.2.13-2.0.7.el5","gimp-1:1.2.1-7.8.el2_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3741.json"},{"CVE":"CVE-2007-2949","severity":"moderate","public_date":"2007-06-27T00:00:00Z","advisories":["RHSA-2007:0513"],"bugzilla":"244400","bugzilla_description":"CVE-2007-2949 Gimp PSD integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["gimp-1:1.2.3-20.9.el3","gimp-1:2.0.5-7.0.7.el4","gimp-2:2.2.13-2.0.7.el5","gimp-1:1.2.1-7.8.el2_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2949.json"},{"CVE":"CVE-2007-2356","severity":"moderate","public_date":"2007-04-27T00:00:00Z","advisories":["RHSA-2007:0343"],"bugzilla":"238420","bugzilla_description":"CVE-2007-2356 Stack overflow in gimp's sunras plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gimp-1:1.2.3-20.3.el3","gimp-1:2.0.5-6.2.el4","gimp-1:1.2.1-7.1.el2_1","gimp-2:2.2.13-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2356.json"},{"CVE":"CVE-2006-3404","severity":"moderate","public_date":"2006-07-06T00:00:00Z","advisories":["RHSA-2006:0598"],"bugzilla":"1618141","bugzilla_description":"CVE-2006-3404 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gimp-1:2.0.5-6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3404.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-all_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-all_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-all_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-clang-format_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-clang-format_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-clang-format_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-core-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-core-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-core-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-daemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-daemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-daemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-email_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-email_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-email_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-instaweb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-instaweb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-instaweb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-subtree_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-subtree_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-subtree_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-svn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-svn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git-svn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git_security_api_results.json
new file mode 100644
index 0000000..996a760
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/git_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8911","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869800","bugzilla_description":"CVE-2020-8911 aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8911.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2020-8912","severity":"low","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869801","bugzilla_description":"CVE-2020-8912 aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8912.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-10715","severity":"low","public_date":"2020-07-27T00:00:00Z","advisories":["RHSA-2020:2992"],"bugzilla":"1767665","bugzilla_description":"CVE-2020-10715 openshift/console: text injection on error page via crafted url","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-web-console-0:3.11.248-1.git.1.cc96c2d.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10715.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-8557","severity":"moderate","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3520","RHSA-2020:3809","RHSA-2020:3808","RHSA-2020:3580","RHSA-2020:3519","RHSA-2020:3579"],"bugzilla":"1835977","bugzilla_description":"CVE-2020-8557 kubernetes: Node disk DOS by writing to container /etc/hosts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.3.37-202009120213.p0.git.0.dffefe4.el8","openshift4/ose-hyperkube:v4.4.0-202008250319.p0","openshift4/ose-hyperkube:v4.3.37-202009151447.p0","openshift4/ose-hyperkube:v4.5.0-202008130146.p0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8557.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-8558","severity":"moderate","public_date":"2020-07-08T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:2992","RHSA-2020:2927","RHSA-2020:3184","RHSA-2020:2926","RHSA-2020:3183","RHSA-2020:2413"],"bugzilla":"1843358","bugzilla_description":"CVE-2020-8558 kubernetes: node localhost services reachable via martian packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","atomic-openshift-0:3.11.248-1.git.0.92ee8ac.el7","openshift4/ose-hyperkube:v4.4.0-202007120152.p0","openshift4/ose-console:v4.5.0-202007012112.p0","openshift4/ose-hyperkube:v4.3.31-202007272153.p0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8558.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-14298","severity":"important","public_date":"2020-06-23T19:00:00Z","advisories":["RHSA-2020:2653"],"bugzilla":"1848239","bugzilla_description":"CVE-2020-14298 docker: Security regression of CVE-2019-5736 due to inclusion of vulnerable runc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":["docker-2:1.13.1-162.git64e9980.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14298.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-14300","severity":"important","public_date":"2020-06-23T19:00:00Z","advisories":["RHSA-2020:2653"],"bugzilla":"1848829","bugzilla_description":"CVE-2020-14300 docker: Security regression of CVE-2016-9962 due to inclusion of vulnerable runc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":["docker-2:1.13.1-162.git64e9980.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14300.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-8555","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":["RHSA-2020:2594","RHSA-2020:2440","RHSA-2020:2441","RHSA-2020:2448","RHSA-2020:2449","RHSA-2020:2479"],"bugzilla":"1821583","bugzilla_description":"CVE-2020-8555 kubernetes: Server side request forgery (SSRF) in kube-controller-manager allows users to leak secret information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openshift4/ose-hyperkube:v4.3.25-202006081335","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift4/ose-hyperkube:v4.4.0-202006080610","openshift-0:4.3.25-202006060952.git.1.96c30f6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8555.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2020-10722","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:4114","RHSA-2020:2297","RHSA-2020:2298","RHSA-2020:2683","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828867","bugzilla_description":"CVE-2020-10722 dpdk: librte_vhost Integer overflow in vhost_user_set_log_base()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["dpdk-0:18.11.8-1.el7_8","openvswitch-0:2.9.0-130.el7fdp","openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10722.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10723","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:4114","RHSA-2020:2297","RHSA-2020:2298","RHSA-2020:2683","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828874","bugzilla_description":"CVE-2020-10723 dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["dpdk-0:18.11.8-1.el7_8","openvswitch-0:2.9.0-130.el7fdp","openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10723.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10724","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":["RHSA-2020:2297","RHSA-2020:2295","RHSA-2020:2296","RHBA-2020:2184"],"bugzilla":"1828884","bugzilla_description":"CVE-2020-10724 dpdk: librte_vhost Missing inputs validation in Vhost-crypto","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openvswitch2.13-0:2.13.0-25.el8fdp.1","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el7fdp","openvswitch2.11-0:2.11.0-54.20200327gita4efc59.el8fdp","redhat-coreos-43.81.202005180953.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10724.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11008","severity":"important","public_date":"2020-04-20T18:00:00Z","advisories":["RHSA-2020:1980","RHSA-2020:1979","RHSA-2020:3581","RHSA-2020:1978","RHSA-2020:1975","RHSA-2020:2337"],"bugzilla":"1826001","bugzilla_description":"CVE-2020-11008 git: Crafted URL containing new lines, empty host or lacks a scheme can cause credential leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["git-0:1.8.3.1-23.el7_7","git-0:1.8.3.1-23.el7_8","git-0:2.18.4-2.el8_2","git-0:2.18.4-1.el8_0","rh-git218-git-0:2.18.4-1.el7","git-0:2.18.4-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11008.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-5260","severity":"important","public_date":"2020-04-14T18:00:00Z","advisories":["RHSA-2020:3581","RHSA-2020:1518","RHSA-2020:1511","RHSA-2020:1503","RHSA-2020:1513"],"bugzilla":"1822020","bugzilla_description":"CVE-2020-5260 git: Crafted URL containing new lines can cause credential leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["git-0:2.18.2-2.el8_0","git-0:2.18.2-2.el8_1","git-0:1.8.3.1-23.el7_7","rh-git218-git-0:2.18.2-3.el7","git-0:1.8.3.1-22.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5260.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-11254","severity":"moderate","public_date":"2020-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:0933","RHSA-2020:2479","RHSA-2020:2413"],"bugzilla":"1819486","bugzilla_description":"CVE-2019-11254 kubernetes: Denial of service in API server via crafted YAML payloads by authorized users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-hyperkube:v4.5.0-202007100518.p0","openshift4/ose-oauth-server-rhel7:v4.5.0-202007012112.p0","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift4/ose-openshift-apiserver-rhel7:v4.3.9-202003230345"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11254.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-10696","severity":"important","public_date":"2020-03-26T00:00:00Z","advisories":["RHSA-2020:1926","RHSA-2020:1396","RHSA-2020:1449","RHSA-2020:1931","RHSA-2020:1932","RHSA-2020:1401","RHSA-2020:2116","RHSA-2020:2117"],"bugzilla":"1817651","bugzilla_description":"CVE-2020-10696 buildah: Crafted input tar file may lead to local file overwrite during image build process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["buildah-0:1.11.6-11.el7_8","podman-0:1.0.2-4.dev.git96ccc2e.rhaos4.1.el8","podman-0:1.6.4-10.rhaos4.3.el8","podman-0:1.6.4-18.el7_8","container-tools:2.0-8020020200420175838.28c38760","podman-0:1.4.2-6.rhaos4.2.el8","container-tools:1.0-8020020200420104655.28c38760","container-tools:rhel8-8020020200420180128.28c38760"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10696.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-8552","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:2992","RHBA-2020:0930","RHBA-2020:2215","RHSA-2020:1527","RHSA-2020:0933","RHSA-2020:1526","RHBA-2020:0929","RHSA-2020:2306"],"bugzilla":"1797909","bugzilla_description":"CVE-2020-8552 kubernetes: Use of unbounded 'client' label in apiserver_request_total allows for memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift4/ose-openshift-apiserver-rhel7:v4.2.34-202005252115","atomic-openshift-metrics-server-0:3.11.219-1.git.1.6fe54fb.el7","atomic-enterprise-service-catalog-1:3.11.219-1.git.1.717017c.el7","atomic-openshift-0:3.11.219-1.git.0.0c21387.el7","openshift4/ose-hyperkube:v4.2.29-202004140532","openshift-0:4.2.29-202004110432.git.0.f7d02c8.el8","openshift4/ose-service-catalog:v4.3.9-202003230345","openshift4/ose-openshift-apiserver-rhel7:v4.3.9-202003230345"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8552.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-8551","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:1277","RHSA-2020:1276"],"bugzilla":"1816403","bugzilla_description":"CVE-2020-8551 kubernetes: crafted requests to kubelet API allow for memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openshift-0:4.3.10-202003300855.git.0.da48c1d.el7","openshift4/ose-hyperkube:v4.3.10-202003311925"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8551.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-1741","severity":"low","public_date":"2020-03-13T00:00:00Z","advisories":["RHSA-2020:3541"],"bugzilla":"1802381","bugzilla_description":"CVE-2020-1741 openshift-ansible: cors allowed origin allows changing url protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185","affected_packages":["openshift-ansible-0:3.11.272-1.git.0.79ab6e9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1741.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-11252","severity":"moderate","public_date":"2020-03-04T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:2413"],"bugzilla":"1860158","bugzilla_description":"CVE-2019-11252 kubernetes: credential leak in kube-controller-manager via error messages in mount failure logs and events for AzureFile and CephFS volumes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":["openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-hyperkube:v4.5.0-202007100518.p0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11252.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14563","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:1712"],"bugzilla":"1758620","bugzilla_description":"CVE-2019-14563 edk2: numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["edk2-0:20190829git37eef91017ad-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14563.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L","cvss3_score":"6.4"},{"CVE":"CVE-2020-8608","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:2774","RHSA-2020:2730","RHSA-2020:2773","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:2342","RHSA-2020:1352","RHBA-2020:0527","RHSA-2020:1351","RHSA-2020:1208","RHSA-2020:0889","RHSA-2020:1209","RHSA-2020:2844","RHSA-2020:1379","RHSA-2020:1403","RHSA-2020:3040","RHSA-2020:1292"],"bugzilla":"1798453","bugzilla_description":"CVE-2020-8608 QEMU: Slirp: potential OOB access due to unsafe snprintf() usages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-160.el7_6.7","virt:rhel-8020020200601195459.4cda2c84","slirp4netns-0:0.3.0-8.el7_7","qemu-kvm-ma-10:2.12.0-33.el7_7.3","slirp4netns-0:0.4.2-4.git21fdece.el8","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-10:1.5.3-167.el7_7.6","qemu-kvm-10:1.5.3-173.el7_8.1","virt:rhel-8000020200526192422.f8e95b4e","qemu-kvm-2:0.12.1.2-2.506.el6_10.7","qemu-kvm-ma-10:2.12.0-44.el7_8.1","container-tools:rhel8-8010120200326094405.f8993c42"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-1702","severity":"low","public_date":"2020-01-20T00:00:00Z","advisories":["RHSA-2020:1650","RHSA-2020:1234","RHSA-2020:1937","RHSA-2020:2681","RHBA-2020:0492","RHSA-2020:2218","RHSA-2020:2116","RHSA-2020:1227"],"bugzilla":"1792796","bugzilla_description":"CVE-2020-1702 containers/image: Container images read entire image manifest into memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["cri-o-0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7","buildah-0:1.11.6-11.el7_8","podman-0:1.6.4-16.el7_8","openshift4/ose-pod:v4.3.2-202002112006","skopeo-1:0.1.40-11.el7_8","cri-o-0:1.11.16-0.9.dev.rhaos3.11.git6d43aae.el7","docker-2:1.13.1-161.git64e9980.el7_8","container-tools:rhel8-8020020200324071414.0d58ad57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1702.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2020-8945","severity":"moderate","public_date":"2020-01-16T00:00:00Z","advisories":["RHSA-2020:2027","RHSA-2020:2992","RHSA-2020:1234","RHSA-2020:3167","RHSA-2020:1231","RHSA-2020:1396","RHSA-2020:1230","RHSA-2020:0679","RHSA-2020:0934","RHSA-2020:1402","RHSA-2020:0863","RHSA-2020:0697","RHSA-2020:0689","RHSA-2020:1940","RHSA-2020:2413","RHSA-2020:2117","RHBA-2020:1255","RHSA-2020:0928","RHSA-2020:1937","RHSA-2020:2927"],"bugzilla":"1795838","bugzilla_description":"CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["atomic-openshift-0:3.11.248-1.git.0.92ee8ac.el7","openshift-clients-0:4.2.32-202005020632.git.1.1b0fab9.el8","skopeo-1:0.1.32-7.git1715c90.rhaos4.2.el8","podman-0:1.6.4-10.rhaos4.3.el8","openshift4/ose-docker-builder:v4.3.7-202003161611","skopeo-1:0.1.40-7.el7_8","podman-0:1.6.4-18.el7_8","openshift4/ose-cli:v4.3.7-202003161611","openshift4/ose-cli-artifacts:v4.3.7-202003161611","openshift4/ose-openshift-controller-manager-rhel7:v4.2.34-202005252115","cri-o-0:1.16.4-1.dev.rhaos4.3.git9238eee.el7","openshift4/ose-openshift-controller-manager-rhel7:v4.3.9-202003230345","cri-o-0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7","openshift-0:4.3.10-202003300855.git.0.da48c1d.el8","docker-2:1.13.1-161.git64e9980.el7_8","skopeo-1:0.1.40-4.rhaos.el8","machine-config-daemon-0:4.3.10-202003300415.git.0.56d6ae0.el8","buildah-0:1.11.6-8.el7_8","skopeo-1:0.1.32-6.git1715c90.el8_0","openshift4/ose-cluster-policy-controller-rhel7:v4.4.0-202004261927","openshift4/ose-docker-builder:v4.2.28-202004061218","openshift-clients-0:4.3.10-202003300001.git.0.e43c148.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8945.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7039","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:2730","RHSA-2020:1344","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:1360","RHSA-2020:2342","RHSA-2020:1352","RHSA-2020:1351","RHSA-2020:1296","RHSA-2020:0889","RHSA-2020:0775","RHSA-2020:1116","RHSA-2020:1358","RHSA-2020:0348","RHBA-2020:0390","RHSA-2020:1150"],"bugzilla":"1791551","bugzilla_description":"CVE-2020-7039 QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-173.el7","slirp4netns-0:0.3.0-8.el7_7","container-tools:1.0-8010020200206144344.c294d161","qemu-kvm-ma-10:2.12.0-33.el7_7.3","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","virt:rhel-8000020200305185300.f8e95b4e","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-ma-10:2.12.0-44.el7","qemu-kvm-rhev-10:2.12.0-44.el7","container-tools:rhel8-8010120200116121758.53d07e52","qemu-kvm-10:1.5.3-167.el7_7.6","slirp4netns-0:0.4.2-3.git21fdece.el8","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","virt:rhel-8010020200304114113.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7039.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-5313","severity":"moderate","public_date":"2020-01-03T00:00:00Z","advisories":["RHSA-2020:3185","RHSA-2020:3887"],"bugzilla":"1789532","bugzilla_description":"CVE-2020-5313 python-pillow: out-of-bounds read in ImagingFliDecode when loading FLI images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["python-pillow-0:2.0.0-21.gitd1c6db8.el7","python-pillow-0:5.1.1-12.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5313.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-5312","severity":"important","public_date":"2020-01-03T00:00:00Z","advisories":["RHSA-2020:0580","RHSA-2020:0566","RHSA-2020:0898","RHSA-2020:0578"],"bugzilla":"1789533","bugzilla_description":"CVE-2020-5312 python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["python-imaging-0:1.1.6-20.el6_10","python-pillow-0:2.0.0-20.gitd1c6db8.el7_7","python-pillow-0:5.1.1-10.el8_1","python-pillow-0:5.1.1-10.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5312.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-7211","severity":"low","public_date":"2019-12-30T00:00:00Z","advisories":["RHBA-2020:0390"],"bugzilla":"1792130","bugzilla_description":"CVE-2020-7211 QEMU: Slirp: potential directory traversal using relative paths via tftp server on Windows host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["slirp4netns-0:0.4.2-3.git21fdece.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7211.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-19921","severity":"moderate","public_date":"2019-12-21T00:00:00Z","advisories":["RHSA-2020:1650","RHSA-2020:1485","RHSA-2020:0695","RHSA-2020:0942","RHSA-2020:0688"],"bugzilla":"1796107","bugzilla_description":"CVE-2019-19921 runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-41","affected_packages":["runc-0:1.0.0-66.rc8.el7_7","runc-0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0","runc-0:1.0.0-66.rc10.rhaos4.3.el7_8","container-tools:rhel8-8020020200324071414.0d58ad57","runc-0:1.0.0-63.rc10.rhaos4.2.gitdc9208a.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19921.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-1387","severity":"important","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:0124","RHSA-2020:0002","RHSA-2019:4356","RHSA-2020:0228"],"bugzilla":"1781127","bugzilla_description":"CVE-2019-1387 git: Remote code execution in recursive clones with nested submodules","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-git218-git-0:2.18.2-1.el7","git-0:2.18.2-1.el8_0","git-0:2.18.2-1.el8_1","git-0:1.8.3.1-21.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1349","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:0002","RHSA-2019:4356","RHSA-2020:0228"],"bugzilla":"1781143","bugzilla_description":"CVE-2019-1349 git: Recursive submodule cloning allows using git directory twice with synonymous directory name written in .git/","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-git218-git-0:2.18.2-1.el7","git-0:2.18.2-1.el8_0","git-0:2.18.2-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1349.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1348","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:0002","RHSA-2019:4356","RHSA-2020:0228"],"bugzilla":"1781953","bugzilla_description":"CVE-2019-1348 git: Arbitrary path overwriting via export-marks in-stream command feature","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-git218-git-0:2.18.2-1.el7","git-0:2.18.2-1.el8_0","git-0:2.18.2-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1348.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-1350","severity":null,"public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1781958","bugzilla_description":"CVE-2019-1350 git: Incorrect quoting of command-line arguments allowed remote code execution during a recursive clone","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1350.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-1351","severity":null,"public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1781960","bugzilla_description":"CVE-2019-1351 git: Git mistakes some paths for relative paths allowing writing outside of the worktree while cloning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1351.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-1352","severity":"low","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:0002","RHSA-2019:4356","RHSA-2020:0228"],"bugzilla":"1781963","bugzilla_description":"CVE-2019-1352 git: Files inside the .git directory may be overwritten during cloning via NTFS Alternate Data Streams","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":["rh-git218-git-0:2.18.2-1.el7","git-0:2.18.2-1.el8_0","git-0:2.18.2-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1352.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1353","severity":"low","public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1781966","bugzilla_description":"CVE-2019-1353 git: NTFS protections inactive when running Git in the Windows Subsystem for Linux","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1353.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1354","severity":null,"public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1781968","bugzilla_description":"CVE-2019-1354 git: Git does not refuse to write out tracked files with backlashes in filenames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1354.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-19604","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1781971","bugzilla_description":"CVE-2019-19604 git: Recursive clone followed by a submodule update could execute code contained within repository without the user explicitly consent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-807","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19604.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-11255","severity":"moderate","public_date":"2019-11-15T00:00:00Z","advisories":["RHSA-2019:4225","RHSA-2019:4054","RHSA-2019:4099","RHSA-2019:4096"],"bugzilla":"1772727","bugzilla_description":"CVE-2019-11255 kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openshift4/ose-csi-external-provisioner-rhel7:v4.2.10-201912022352","openshift-external-storage-0:0.0.2-11.gitd3c94f0.el7","openshift-external-storage-0:0.0.2-10.gitd3c94f0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11255.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-14891","severity":"moderate","public_date":"2019-11-07T00:00:00Z","advisories":["RHSA-2020:2992","RHSA-2020:2776"],"bugzilla":"1772280","bugzilla_description":"CVE-2019-14891 cri-o: infra container reparented to systemd following OOM Killer killing it's conmon","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":["cri-o-0:1.14.12-24.dev.rhaos4.2.gita17905f.el7","cri-o-0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14891.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-16865","severity":"moderate","public_date":"2019-10-04T00:00:00Z","advisories":["RHSA-2020:0580","RHSA-2020:0566","RHSA-2020:0578"],"bugzilla":"1774066","bugzilla_description":"CVE-2019-16865 python-pillow: reading specially crafted image files leads to allocation of large amounts of memory and denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["python-pillow-0:2.0.0-20.gitd1c6db8.el7_7","python-pillow-0:5.1.1-10.el8_1","python-pillow-0:5.1.1-10.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16865.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10215","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":["RHSA-2019:3771"],"bugzilla":"1735506","bugzilla_description":"CVE-2019-10215 bootstrap3-typeahead.js: Cross-site scripting via highlighter() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["openshift4/ose-prometheus:v4.2.4-201911050122"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10215.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11253","severity":"important","public_date":"2019-09-28T00:00:00Z","advisories":["RHSA-2020:2796","RHSA-2020:2863","RHEA-2019:3809","RHSA-2020:2861","RHSA-2020:2795","RHSA-2019:3239","RHSA-2019:3811","RHSA-2020:2870","RHSA-2019:3905","RHSA-2019:3132","RHSA-2020:2799"],"bugzilla":"1757701","bugzilla_description":"CVE-2019-11253 kubernetes: YAML parsing vulnerable to \"Billion Laughs\" attack, allowing for remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["servicemesh-grafana-0:6.2.2-38.el8","servicemesh-grafana-0:6.4.3-11.el8","atomic-openshift-0:3.10.181-1.git.0.3ab4b3d.el7","openshift-0:4.1.20-201910101746.git.0.a80aad5.el8","servicemesh-cni-0:1.1.4-2.el8","servicemesh-0:1.0.2-3.el8","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","servicemesh-prometheus-0:2.7.2-36.el8","atomic-openshift-0:3.11.154-1.git.0.7a097ad.el7","servicemesh-prometheus-0:2.7.2-25.el8","servicemesh-cni-0:1.0.11-1.el8","servicemesh-operator-0:1.1.4-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-16884","severity":"moderate","public_date":"2019-09-22T00:00:00Z","advisories":["RHSA-2019:3940","RHSA-2020:1234","RHSA-2019:4269","RHBA-2020:1232","RHSA-2019:4074"],"bugzilla":"1757214","bugzilla_description":"CVE-2019-16884 runc: AppArmor/SELinux bypass with malicious image that specifies a volume at /proc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-41","affected_packages":["docker-2:1.13.1-161.git64e9980.el7_8","runc-0:1.0.0-62.rc8.rhaos4.1.git3cbe540.el8","runc-0:1.0.0-67.rc10.el7_8","container-tools:rhel8-8010020191126140055.c294d161","runc-0:1.0.0-63.rc8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16884.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11251","severity":"moderate","public_date":"2019-09-18T00:00:00Z","advisories":["RHSA-2019:3811","RHSA-2019:3266","RHSA-2019:3267","RHSA-2019:3905"],"bugzilla":"1753495","bugzilla_description":"CVE-2019-11251 kubernetes: `kubectl cp` allows for arbitrary file write via double symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["openshift4/ose-cli:v4.1.21-201910230924","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","atomic-openshift-0:3.11.154-1.git.0.7a097ad.el7","openshift-0:4.1.21-201910220952.git.0.493dbf6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-12278","severity":"low","public_date":"2019-09-18T00:00:00Z","advisories":[],"bugzilla":"1829397","bugzilla_description":"CVE-2020-12278 libgit2: files inside the .git directory may be overwritten during cloning via NTFS Alternate Data Streams","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12278.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-12279","severity":"low","public_date":"2019-09-18T00:00:00Z","advisories":[],"bugzilla":"1829407","bugzilla_description":"CVE-2020-12279 libgit2: NTFS protections inactive when running Git in the Windows Subsystem for Linux","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12279.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-10214","severity":"moderate","public_date":"2019-09-09T00:00:00Z","advisories":["RHSA-2019:3403","RHSA-2019:3007","RHSA-2019:2825","RHSA-2019:2989","RHSA-2019:3494","RHSA-2019:3812","RHSA-2019:2817"],"bugzilla":"1732508","bugzilla_description":"CVE-2019-10214 containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["container-tools:rhel8-8010020190927090915.4985cc55","cri-o-0:1.9.16-5.git858756d.el7","container-tools:1.0-8010020190927091243.4985cc55","cri-o-0:1.13.11-0.7.dev.rhaos4.1.git9cb8f2f.el8","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","cri-o-0:1.10.6-2.rhaos3.10.git56d7d9a.el7","openshift4/ose-docker-builder:v4.1.20-201910102034"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10214.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-14819","severity":"important","public_date":"2019-08-24T00:00:00Z","advisories":["RHSA-2019:2818"],"bugzilla":"1746238","bugzilla_description":"CVE-2019-14819 openshift-ansible: dockergc service account incorrectly associated with namespace during upgrade","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266->CWE-270","affected_packages":["openshift-ansible-0:3.11.146-1.git.0.fcedb45.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11250","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:4087","RHSA-2019:4052"],"bugzilla":"1740434","bugzilla_description":"CVE-2019-11250 kubernetes: Bearer tokens written to logs at high verbosity levels (>= 7)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["atomic-openshift-0:3.11.157-1.git.0.dfe38da.el7","openshift-0:4.1.27-201912021146.git.0.a40116f.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11250.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-11247","severity":"moderate","public_date":"2019-08-05T00:00:00Z","advisories":["RHBA-2019:2816","RHSA-2019:2769","RHSA-2019:2504","RHSA-2019:2690"],"bugzilla":"1732192","bugzilla_description":"CVE-2019-11247 kubernetes: API server allows access to cluster-scoped custom resources as if resources were namespaced","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["openshift-0:4.1.10-201908060758.git.0.d81afa6.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","atomic-openshift-0:3.11.146-1.git.0.4aab273.el7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11247.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-11249","severity":"moderate","public_date":"2019-08-05T00:00:00Z","advisories":["RHSA-2019:3239","RHSA-2019:3811","RHBA-2019:2794","RHBA-2019:2816"],"bugzilla":"1737651","bugzilla_description":"CVE-2019-11249 kubernetes: Incomplete fixes for CVE-2019-1002101 and CVE-2019-11246, kubectl cp potential directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["atomic-openshift-0:3.10.181-1.git.0.3ab4b3d.el7","openshift-0:4.1.16-201909090609.git.0.2f97059.el8","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","atomic-openshift-0:3.11.146-1.git.0.4aab273.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11249.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-3889","severity":"moderate","public_date":"2019-07-08T00:00:00Z","advisories":["RHSA-2020:0795","RHSA-2019:3722","RHSA-2019:3770"],"bugzilla":"1693499","bugzilla_description":"CVE-2019-3889 atomic-openshift: reflected XSS in authentication flow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["openshift4/ose-hypershift:v4.1.22-201910291109","openshift4/ose-oauth-server-rhel7:v4.2.4-201911050122","atomic-openshift-0:3.11.188-1.git.0.db0eaa8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3889.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2019-11246","severity":"moderate","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:1633","RHSA-2019:1632","RHSA-2019:1852"],"bugzilla":"1721704","bugzilla_description":"CVE-2019-11246 kubernetes: Incomplete fix for CVE-2019-1002101 allows for arbitrary file write via `kubectl cp`","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["atomic-openshift-0:3.9.89-1.git.0.9454f2a.el7","atomic-openshift-0:3.10.149-1.git.0.05de590.el7","atomic-openshift-0:3.11.117-1.git.0.14e54a3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-10150","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHSA-2019:3007","RHSA-2019:3811","RHSA-2019:2989","RHSA-2019:3143"],"bugzilla":"1713433","bugzilla_description":"CVE-2019-10150 atomic-openshift: OpenShift builds don't verify SSH Host Keys for the git repository","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","atomic-openshift-0:3.10.175-1.git.0.f9f0e81.el7","openshift4/ose-docker-builder:v4.1.20-201910102034"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10150.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2018-15664","severity":"moderate","public_date":"2019-05-23T00:00:00Z","advisories":["RHSA-2019:1910"],"bugzilla":"1714722","bugzilla_description":"CVE-2018-15664 docker: symlink-exchange race attacks in docker cp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-22|CWE-367)","affected_packages":["docker-2:1.13.1-102.git7f2769b.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15664.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-18367","severity":"moderate","public_date":"2019-04-24T00:00:00Z","advisories":["RHSA-2019:4090","RHSA-2019:4087","RHSA-2020:2479"],"bugzilla":"1706826","bugzilla_description":"CVE-2017-18367 libseccomp-golang: mishandling of multiple argument rules leading to a bypass of intended access restrictions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["openshift4/ose-hypershift:v4.1.27-201912030019","openshift4/ose-cli:v4.1.27-201912030019","openshift4/ose-node:v4.1.27-201912030019","atomic-openshift-0:3.11.232-1.git.0.a5bc32f.el7","openshift-0:4.1.27-201912021146.git.0.a40116f.el8_0","openshift4/ose-cli-artifacts:v4.1.27-201912030019","openshift4/ose-hyperkube:v4.1.27-201912030019"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11244","severity":"low","public_date":"2019-04-22T00:00:00Z","advisories":["RHSA-2019:3942","RHSA-2020:0074","RHSA-2020:0020"],"bugzilla":"1703209","bugzilla_description":"CVE-2019-11244 kubernetes: Schema info written with world-writeable permissions when cached","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7","openshift4/ose-cli:v4.1.24-201911120311","openshift-0:4.1.24-201911080309.git.0.c41acf2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11244.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-1002101","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":["RHBA-2019:0620","RHBA-2019:0619","RHBA-2019:0636"],"bugzilla":"1685213","bugzilla_description":"CVE-2019-1002101 kubernetes: Mishandling of symlinks allows for arbitrary file write via `kubectl cp`","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["atomic-openshift-0:3.10.127-1.git.0.dab74c6.el7","atomic-openshift-0:3.11.98-1.git.0.0cbaff3.el7","atomic-openshift-0:3.9.74-1.git.0.78e56ea.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1002101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-3876","severity":"moderate","public_date":"2019-03-27T00:24:00Z","advisories":["RHSA-2019:1851"],"bugzilla":"1691107","bugzilla_description":"CVE-2019-3876 web-console: XSS in OAuth server /oauth/token/request endpoint","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-0:3.11.129-1.git.0.bd4f2d5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3876.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-13139","severity":"moderate","public_date":"2019-03-26T00:00:00Z","advisories":["RHBA-2019:3092"],"bugzilla":"1732627","bugzilla_description":"CVE-2019-13139 docker: command injection due to a missing validation of the git ref command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["docker-2:1.13.1-104.git4ef4b30.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-11840","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":["RHBA-2020:0063"],"bugzilla":"1691529","bugzilla_description":"CVE-2019-11840 golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["openshift-0:4.3.0-202001131753.git.0.0aee6a8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-3816","severity":"important","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2019:0972","RHSA-2019:0638"],"bugzilla":"1667070","bugzilla_description":"CVE-2019-3816 openwsman: Disclosure of arbitrary files outside of the registered URIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openwsman-0:2.6.3-6.git4391e5c.el7_6","openwsman-0:2.6.5-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-3833","severity":"moderate","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2020:3940"],"bugzilla":"1674478","bugzilla_description":"CVE-2019-3833 openwsman: Infinite loop in process_connection() allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openwsman-0:2.6.3-7.git4391e5c.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3833.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12181","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":["RHSA-2019:3338","RHSA-2019:2125"],"bugzilla":"1686783","bugzilla_description":"CVE-2018-12181 edk2: Stack buffer overflow with corrupted BMP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["edk2-0:20190308git89910a39dcfd-6.el8","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12181.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-1002100","severity":"moderate","public_date":"2019-02-28T00:00:00Z","advisories":["RHSA-2019:3239","RHSA-2019:1851"],"bugzilla":"1683190","bugzilla_description":"CVE-2019-1002100 kube-apiserver: DoS with crafted patch of type json-patch","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":["atomic-openshift-0:3.10.181-1.git.0.3ab4b3d.el7","atomic-openshift-0:3.11.129-1.git.0.bd4f2d5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1002100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-12180","severity":"important","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:0809","RHSA-2019:1116","RHSA-2019:0968"],"bugzilla":"1683372","bugzilla_description":"CVE-2018-12180 edk2: Buffer Overflow in BlockIo service for RAM disk","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7_6.1","redhat-virtualization-host-0:4.3-20190418.0.el7_6","edk2-0:20180508gitee3198e672e2-9.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"8.3"},{"CVE":"CVE-2019-0160","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3338","RHSA-2019:2125"],"bugzilla":"1691640","bugzilla_description":"CVE-2019-0160 edk2: Buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-121)","affected_packages":["edk2-0:20190308git89910a39dcfd-6.el8","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0160.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2019-5736","severity":"important","public_date":"2019-02-11T13:22:00Z","advisories":["RHSA-2019:0401","RHSA-2019:0303","RHSA-2019:0304","RHSA-2019:0975","RHSA-2019:0408"],"bugzilla":"1664908","bugzilla_description":"CVE-2019-5736 runc: Execution of malicious containers allows for container escape and access to host filesystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["runc-0:1.0.0-59.dev.git2abd837.el7","container-tools:rhel8-8000020190416221845.2ffa3d27","docker-2:1.13.1-91.git07f3374.el7","docker-2:1.12.6-79.git5680db5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5736.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2019-3826","severity":"moderate","public_date":"2019-01-31T00:00:00Z","advisories":["RHBA-2019:0326"],"bugzilla":"1672865","bugzilla_description":"CVE-2019-3826 prometheus: Stored DOM cross-site scripting (XSS) attack via crafted URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["golang-github-prometheus-prometheus-0:3.11.82-1.git.5027.9d24833.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3826.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-1003010","severity":"low","public_date":"2019-01-28T00:00:00Z","advisories":["RHBA-2019:0326"],"bugzilla":"1670292","bugzilla_description":"CVE-2019-1003010 jenkins-plugin-git: CSRF vulnerability in Git Plugin (SECURITY-1095)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["jenkins-2-plugins-0:3.11.1549642489-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1003010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-0542","severity":"moderate","public_date":"2019-01-09T00:00:00Z","advisories":["RHSA-2019:2552","RHSA-2019:2551","RHBA-2019:0959","RHSA-2019:1422"],"bugzilla":"1668531","bugzilla_description":"CVE-2019-0542 xterm.js: Mishandling of special characters allows for remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["atomic-openshift-web-console-0:3.11.104-1.git.1.3c3a7f2.el7","atomic-openshift-web-console-0:3.10.163-1.git.1.c3a2131.el7","openshift3/ose-console:v3.11.98-6","atomic-openshift-web-console-0:3.9.99-1.git.1.49cd7e9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1002105","severity":"critical","public_date":"2018-12-03T17:00:00Z","advisories":["RHSA-2018:3549","RHSA-2018:3537","RHSA-2018:3624","RHSA-2018:3754","RHSA-2018:3742","RHSA-2018:3752","RHSA-2018:3598","RHSA-2018:2908","RHSA-2018:3551","RHSA-2018:2906"],"bugzilla":"1648138","bugzilla_description":"CVE-2018-1002105 kubernetes: authentication/authorization bypass in the handling of non-101 responses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["atomic-openshift-0:3.4.1.44.57-1.git.0.a631031.el7","atomic-openshift-0:3.8.44-1.git.0.9be0abd.el7","atomic-openshift-0:3.10.72-1.git.0.3cb2fdc.el7","atomic-openshift-0:3.2.1.34-2.git.20.6367d5d.el7","atomic-openshift-0:3.5.5.31.80-1.git.0.c4a0780.el7","atomic-openshift-0:3.7.72-1.git.0.925b9cd.el7","atomic-openshift-0:3.11.43-1.git.0.647ac05.el7","atomic-openshift-0:3.9.51-1.git.0.dc3a40b.el7","atomic-openshift-0:3.3.1.46.45-1.git.0.2ce596e.el7","atomic-openshift-0:3.6.173.0.140-1.git.0.9686d52.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-5407","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3932","RHSA-2019:0483","RHSA-2019:2125","RHSA-2019:3929","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1645695","bugzilla_description":"CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7_6.1","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-19486","severity":"important","public_date":"2018-10-24T00:00:00Z","advisories":["RHSA-2018:3800"],"bugzilla":"1653143","bugzilla_description":"CVE-2018-19486 git: Improper handling of PATH allows for commands to be executed from the current directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["rh-git218-git-0:2.18.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3613","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641433","bugzilla_description":"CVE-2018-3613 edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3613.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5731","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641442","bugzilla_description":"CVE-2017-5731 edk2: Privilege escalation via processing of malformed files in TianoCompress.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5731.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5732","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641446","bugzilla_description":"CVE-2017-5732 edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5732.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5733","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641450","bugzilla_description":"CVE-2017-5733 edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5733.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5734","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641458","bugzilla_description":"CVE-2017-5734 edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5735","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:2125"],"bugzilla":"1641465","bugzilla_description":"CVE-2017-5735 edk2: Privilege escalation via heap-based buffer overflow in Decode() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-17456","severity":"important","public_date":"2018-10-05T00:00:00Z","advisories":["RHSA-2018:3408","RHSA-2020:0316","RHSA-2018:3541"],"bugzilla":"1636619","bugzilla_description":"CVE-2018-17456 git: arbitrary code execution via .gitmodules","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["git-0:1.7.1-10.el6_10","rh-git29-git-0:2.9.3-7.el6","git-0:1.8.3.1-20.el7","rh-git29-git-0:2.9.3-6.el7","rh-git29-git-0:2.9.3-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17456.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-20699","severity":"low","public_date":"2018-10-04T00:00:00Z","advisories":["RHSA-2019:0487"],"bugzilla":"1666565","bugzilla_description":"CVE-2018-20699 docker: Memory exhaustion via large integer used with --cpuset-mems or --cpuset-cpus","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["docker-2:1.13.1-94.gitb2f74b2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20699.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.5"},{"CVE":"CVE-2018-14632","severity":"important","public_date":"2018-09-06T00:00:00Z","advisories":["RHBA-2018:2652","RHSA-2018:2654","RHSA-2018:2908","RHSA-2018:2709","RHSA-2018:2906"],"bugzilla":"1625885","bugzilla_description":"CVE-2018-14632 atomic-openshift: oc patch with json causes masterapi service crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["atomic-openshift-0:3.10.66-1.git.0.91d1e89.el7","atomic-openshift-0:3.11.16-1.git.0.b48b8f8.el7","atomic-openshift-0:3.7.72-1.git.0.925b9cd.el7","atomic-openshift-0:3.6.173.0.130-1.git.0.8d78a39.el7","atomic-openshift-0:3.9.51-1.git.0.dc3a40b.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-10932","severity":"low","public_date":"2018-08-10T16:01:00Z","advisories":["RHSA-2019:3673"],"bugzilla":"1614896","bugzilla_description":"CVE-2018-10932 lldptool: improper sanitization of shell-escape codes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["lldpad-0:1.0.1-13.git036e314.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10932.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-15501","severity":"low","public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1615585","bugzilla_description":"CVE-2018-15501 libgit2: out-of-bounds reads when processing smart-protocol ng packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15501.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-5383","severity":"important","public_date":"2018-07-23T00:00:00Z","advisories":["RHSA-2019:2169"],"bugzilla":"1614159","bugzilla_description":"CVE-2018-5383 kernel: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["linux-firmware-0:20190429-72.gitddde598.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5383.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-10892","severity":"moderate","public_date":"2018-07-05T00:00:00Z","advisories":["RHSA-2018:2482","RHBA-2018:2796"],"bugzilla":"1598581","bugzilla_description":"CVE-2018-10892 docker: container breakout without selinux in enforcing mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["docker-2:1.13.1-74.git6e3bb8e.el7","podman-0:0.9.2-5.git37a2afe.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10892.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-1000600","severity":"moderate","public_date":"2018-06-25T00:00:00Z","advisories":[],"bugzilla":"1596120","bugzilla_description":"CVE-2018-1000600 jenkins-plugin-github: CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials (SECURITY-915)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000600.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-0161","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2019:2125","RHSA-2019:2437"],"bugzilla":"1694065","bugzilla_description":"CVE-2019-0161 edk2: stack overflow in XHCI causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-400","affected_packages":["redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2018-1000182","severity":"moderate","public_date":"2018-06-04T00:00:00Z","advisories":[],"bugzilla":"1585987","bugzilla_description":"CVE-2018-1000182 jenkins-plugin-git: Server-side request forgery vulnerability (SECURITY-810)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2018-1000184","severity":"moderate","public_date":"2018-06-04T00:00:00Z","advisories":[],"bugzilla":"1585989","bugzilla_description":"CVE-2018-1000184 jenkins-plugin-github: Server-side request forgery vulnerability (SECURITY-799)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-918","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000184.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2018-1000183","severity":"moderate","public_date":"2018-06-04T00:00:00Z","advisories":[],"bugzilla":"1585992","bugzilla_description":"CVE-2018-1000183 jenkins-plugin-github: CSRF vulnerability and missing permission checks allowed capturing credentials (SECURITY-804)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-1000185","severity":"moderate","public_date":"2018-06-04T00:00:00Z","advisories":[],"bugzilla":"1585994","bugzilla_description":"CVE-2018-1000185 jenkins-plugin-github-branch-source: Server-side request forgery vulnerability (SECURITY-806)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-918","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2018-10856","severity":"moderate","public_date":"2018-05-31T00:00:00Z","advisories":["RHSA-2018:2037"],"bugzilla":"1592166","bugzilla_description":"CVE-2018-10856 podman: Containers run as non-root users do not drop capabilities","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["podman-0:0.6.1-3.git3e0ff12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10856.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-11235","severity":"important","public_date":"2018-05-30T00:00:00Z","advisories":["RHSA-2018:1957","RHSA-2018:2147"],"bugzilla":"1583862","bugzilla_description":"CVE-2018-11235 git: arbitrary code execution when recursively cloning a malicious repository","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-git29-git-0:2.9.3-4.el7","rh-git29-git-0:2.9.3-4.el6","git-0:1.8.3.1-14.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11235.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-11233","severity":"moderate","public_date":"2018-05-30T00:00:00Z","advisories":["RHSA-2018:2147"],"bugzilla":"1583888","bugzilla_description":"CVE-2018-11233 git: path sanity check in is_ntfs_dotgit() can read arbitrary memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-git29-git-0:2.9.3-4.el7","rh-git29-git-0:2.9.3-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-11439","severity":"low","public_date":"2018-05-27T00:00:00Z","advisories":["RHSA-2020:1175"],"bugzilla":"1584868","bugzilla_description":"CVE-2018-11439 taglib: heap-based buffer over-read via a crafted audio file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["taglib-0:1.8-8.20130218git.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11439.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10843","severity":"important","public_date":"2018-05-24T00:00:00Z","advisories":["RHSA-2018:2013"],"bugzilla":"1579096","bugzilla_description":"CVE-2018-10843 source-to-image: Builder images with assembler-user LABEL set to root allows attackers to execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.9.31-1.git.0.ef9737b.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2018-1102","severity":"critical","public_date":"2018-04-27T00:00:00Z","advisories":["RHSA-2018:1239","RHSA-2018:1229","RHSA-2018:1237","RHSA-2018:1227","RHSA-2019:0036","RHSA-2018:1235","RHSA-2018:1233","RHSA-2018:1231","RHSA-2018:1243","RHSA-2018:1241"],"bugzilla":"1562246","bugzilla_description":"CVE-2018-1102 source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.3.1.46.39-2.git.3.cc57f5b.el7","atomic-openshift-0:3.9.25-1.git.0.6bc473e.el7","atomic-openshift-0:3.1.1.11-4.git.3.12809c8.el7","source-to-image-0:1.1.13-1.el7","atomic-openshift-0:3.2.1.34-2.git.3.aad33c3.el7","atomic-openshift-0:3.7.44-1.git.0.6b061d4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.9"},{"CVE":"CVE-2018-1000400","severity":"moderate","public_date":"2018-04-27T00:00:00Z","advisories":["RHBA-2018:1796"],"bugzilla":"1578109","bugzilla_description":"CVE-2018-1000400 cri-o: capabilities are not dropped when switching to a non-root user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":["cri-o-0:1.9.12-1.gitfa11beb.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000400.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-15138","severity":"moderate","public_date":"2018-04-11T00:00:00Z","advisories":["RHBA-2018:0489"],"bugzilla":"1566212","bugzilla_description":"CVE-2017-15138 atomic-openshift: cluster-reader can escalate to creating builds via webhooks in any project","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["atomic-openshift-0:3.9.14-1.git.0.4efa2ca.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15138.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2017-15137","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":["RHBA-2018:0489"],"bugzilla":"1566191","bugzilla_description":"CVE-2017-15137 atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tag","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.9.14-1.git.0.4efa2ca.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-0739","severity":"moderate","public_date":"2018-03-27T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3090","RHSA-2019:1712","RHSA-2019:1711","RHSA-2018:3221"],"bugzilla":"1561266","bugzilla_description":"CVE-2018-0739 openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-400","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7","openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0739.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1085","severity":"important","public_date":"2018-03-23T00:00:00Z","advisories":["RHSA-2018:2013"],"bugzilla":"1557822","bugzilla_description":"CVE-2018-1085 openshift-ansible: Incorrectly quoted values in etcd.conf causes disabling of SSL client certificate authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["openshift-ansible-0:3.9.31-1.git.34.154617d.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1085.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2018-1002100","severity":"moderate","public_date":"2018-03-17T00:00:00Z","advisories":["RHBA-2018:1796"],"bugzilla":"1564305","bugzilla_description":"CVE-2018-1002100 kubernetes: Kubectl copy doesn't check for paths outside of it's destination directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.9.30-1.git.0.dec1ba7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-1002101","severity":"important","public_date":"2018-03-12T00:00:00Z","advisories":["RHSA-2018:0475"],"bugzilla":"1525130","bugzilla_description":"CVE-2017-1002101 kubernetes: Volume security can be sidestepped with innocent emptyDir and subpath","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1002101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2018-8098","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":[],"bugzilla":"1554366","bugzilla_description":"CVE-2018-8099 CVE-2018-8098 libgit2: denial of service (DoS) via crafted repository index files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8098.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-8099","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":[],"bugzilla":"1554366","bugzilla_description":"CVE-2018-8099 CVE-2018-8098 libgit2: denial of service (DoS) via crafted repository index files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8099.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-1002102","severity":"moderate","public_date":"2018-03-06T00:00:00Z","advisories":["RHSA-2018:0475"],"bugzilla":"1551818","bugzilla_description":"CVE-2017-1002102 kubernetes: Malicious containers can delete any file from the node","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["atomic-openshift-0:3.3.1.46.11-1.git.4.e236015.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1002102.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-1000110","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":[],"bugzilla":"1549538","bugzilla_description":"CVE-2018-1000110 jenkins-plugin-git: Disclosure of user names and node names to unauthorized users through post-commit hook URL in Git Plugin (SECURITY-723)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000021","severity":"moderate","public_date":"2018-01-06T00:00:00Z","advisories":[],"bugzilla":"1541854","bugzilla_description":"CVE-2018-1000021 git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000021.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2017-15298","severity":"low","public_date":"2017-10-12T00:00:00Z","advisories":[],"bugzilla":"1510455","bugzilla_description":"CVE-2017-15298 git: Mishandling layers of tree objects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15298.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14867","severity":"moderate","public_date":"2017-09-26T00:00:00Z","advisories":[],"bugzilla":"1496344","bugzilla_description":"CVE-2017-14867 git: cvsserver command injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14867.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-1000117","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2491","RHSA-2017:2484","RHSA-2017:2485","RHSA-2017:2675","RHSA-2017:2674"],"bugzilla":"1480386","bugzilla_description":"CVE-2017-1000117 git: Command injection via malicious ssh URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["git-0:1.8.3.1-12.el7_4","rh-git29-git-0:2.9.3-3.el6","rh-git29-git-0:2.9.3-3.el7","git-0:1.7.1-9.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000117.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-1000092","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":["RHBA-2017:2642"],"bugzilla":"1471053","bugzilla_description":"CVE-2017-1000092 jenkins-plugin-git: CSRF vulnerability allows capturing credentials (SECURITY-528)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":["jenkins-2-plugins-0:3.7.1502412812-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000092.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-11468","severity":"low","public_date":"2017-07-07T00:00:00Z","advisories":["RHSA-2017:2603"],"bugzilla":"1474893","bugzilla_description":"CVE-2017-11468 docker-distribution: Does not properly restrict the amount of content accepted from a user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["docker-distribution-0:2.6.2-1.git48294d9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-9263","severity":"moderate","public_date":"2017-05-26T00:00:00Z","advisories":["RHSA-2017:2727","RHSA-2017:2648","RHSA-2017:2418","RHSA-2017:2692","RHSA-2017:2665","RHSA-2017:2698","RHSA-2017:2553"],"bugzilla":"1457327","bugzilla_description":"CVE-2017-9263 openvswitch: Invalid processing of a malicious OpenFlow role status message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openvswitch-0:2.4.1-2.git20160727.el7ost","openvswitch-0:2.7.2-1.git20170719.el7fdp","openvswitch-0:2.5.0-15.git20160727.el7ost","openvswitch-0:2.6.1-13.git20161206.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9263.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9265","severity":"moderate","public_date":"2017-05-26T00:00:00Z","advisories":["RHSA-2017:2727","RHSA-2017:2648","RHSA-2017:2418","RHSA-2017:2692","RHSA-2017:2665","RHSA-2017:2698","RHSA-2017:2553"],"bugzilla":"1457335","bugzilla_description":"CVE-2017-9265 openvswitch: Buffer over-read while parsing the group mod OpenFlow message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["openvswitch-0:2.4.1-2.git20160727.el7ost","openvswitch-0:2.7.2-1.git20170719.el7fdp","openvswitch-0:2.5.0-15.git20160727.el7ost","openvswitch-0:2.6.1-13.git20161206.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9265.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-9214","severity":"moderate","public_date":"2017-05-20T00:00:00Z","advisories":["RHSA-2017:2727","RHSA-2017:2648","RHSA-2017:2418","RHSA-2017:2692","RHSA-2017:2665","RHSA-2017:2698","RHSA-2017:2553"],"bugzilla":"1456795","bugzilla_description":"CVE-2017-9214 openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["openvswitch-0:2.4.1-2.git20160727.el7ost","openvswitch-0:2.7.2-1.git20170719.el7fdp","openvswitch-0:2.5.0-15.git20160727.el7ost","openvswitch-0:2.6.1-13.git20161206.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8386","severity":"moderate","public_date":"2017-05-05T00:00:00Z","advisories":["RHSA-2017:2491","RHSA-2017:2004"],"bugzilla":"1450407","bugzilla_description":"CVE-2017-8386 git: Escape out of git-shell","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-git29-git-0:2.9.3-3.el6","rh-git29-git-0:2.9.3-3.el7","git-0:1.8.3.1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8386.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2017-1000242","severity":"low","public_date":"2017-04-27T00:00:00Z","advisories":[],"bugzilla":"1446495","bugzilla_description":"CVE-2017-1000242 jenkins-plugin-git-client: Storing sensitive information in world-readable temporary files (SECURITY-445)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000242.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-9264","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":["RHSA-2017:2727","RHSA-2017:2648","RHSA-2017:2418"],"bugzilla":"1457329","bugzilla_description":"CVE-2017-9264 openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["openvswitch-0:2.7.2-1.git20170719.el7fdp","openvswitch-0:2.6.1-13.git20161206.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9264.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-8651","severity":"low","public_date":"2016-12-07T00:00:00Z","advisories":["RHSA-2016:2915"],"bugzilla":"1397987","bugzilla_description":"CVE-2016-8651 OpenShift Enterprise 3: Pulling of any image is possible with it manifest","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.1.1.10-1.git.0.efeef8d.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8651.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-8631","severity":"moderate","public_date":"2016-11-01T00:00:00Z","advisories":["RHSA-2016:2696"],"bugzilla":"1390735","bugzilla_description":"CVE-2016-8631 OSE 3: Router sometimes selects new routes over old routes when determining claimed hostnames","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.3.1.4-1.git.0.7c8657c.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8631.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-8867","severity":"important","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2020:2653"],"bugzilla":"1390163","bugzilla_description":"CVE-2016-8867 docker: Ambient capability usage in containers","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["docker-2:1.13.1-162.git64e9980.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8867.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-7075","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2016:2064"],"bugzilla":"1384112","bugzilla_description":"CVE-2016-7075 OpenShift 3: API server does not validate client-provided intermediate certificates correctly","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:C/A:N","CWE":"CWE-295","affected_packages":["atomic-openshift-0:3.1.1.8-1.git.0.d469026.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-5418","severity":"important","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844","RHSA-2016:1852","RHSA-2016:1853"],"bugzilla":"1362601","bugzilla_description":"CVE-2016-5418 libarchive: Archive Entry with type 1 (hardlink), but has a non-zero data size file overwrite","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-20->CWE-22","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2","atomic-openshift-0:3.1.1.7-1.git.0.65f396b.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5418.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5392","severity":"important","public_date":"2016-07-14T00:00:00Z","advisories":["RHSA-2016:1427"],"bugzilla":"1356195","bugzilla_description":"CVE-2016-5392 Kubernetes: disclosure of information in multi tenant environments via watch-cache list","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:C/I:N/A:N","CWE":"CWE-20","affected_packages":["atomic-openshift-0:3.2.1.7-1.git.0.2702170.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5392.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-3703","severity":"moderate","public_date":"2016-05-19T00:00:00Z","advisories":["RHSA-2016:1095","RHSA-2016:1094"],"bugzilla":"1330233","bugzilla_description":"CVE-2016-3703 OpenShift Enterprise 3: Untrusted content loaded via the API proxy can access web console credentials on the same domain","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-285","affected_packages":["atomic-openshift-0:3.1.1.6-8.git.64.80b61da.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3703.json"},{"CVE":"CVE-2016-2074","severity":"important","public_date":"2016-03-28T00:00:00Z","advisories":["RHSA-2016:0524","RHSA-2016:0537","RHSA-2016:0615","RHSA-2016:0523"],"bugzilla":"1318553","bugzilla_description":"CVE-2016-2074 openvswitch: MPLS buffer overflow vulnerability","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["openvswitch-dpdk-0:2.4.0-0.10346.git97bab959.3.el7_2","openvswitch-0:2.4.0-2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2074.json"},{"CVE":"CVE-2016-2315","severity":"important","public_date":"2016-03-06T00:00:00Z","advisories":["RHSA-2016:0496","RHSA-2016:0497"],"bugzilla":"1317981","bugzilla_description":"CVE-2016-2315 CVE-2016-2324 git: path_name() integer truncation and overflow leading to buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-131->CWE-122->CWE-190->CWE-194","affected_packages":["git19-git-0:1.9.4-4.el7.1","git19-git-0:1.9.4-4.el6.1","git-0:1.7.1-4.el6_7.1","git-0:1.8.3.1-6.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2315.json"},{"CVE":"CVE-2016-2324","severity":"important","public_date":"2016-03-06T00:00:00Z","advisories":["RHSA-2016:0496","RHSA-2016:0497"],"bugzilla":"1317981","bugzilla_description":"CVE-2016-2315 CVE-2016-2324 git: path_name() integer truncation and overflow leading to buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-131->CWE-122->CWE-190->CWE-194","affected_packages":["git19-git-0:1.9.4-4.el7.1","git19-git-0:1.9.4-4.el6.1","git-0:1.7.1-4.el6_7.1","git-0:1.8.3.1-6.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2324.json"},{"CVE":"CVE-2016-2142","severity":"moderate","public_date":"2016-02-17T00:00:00Z","advisories":["RHSA-2016:1038"],"bugzilla":"1311220","bugzilla_description":"CVE-2016-2142 openshift: Bind password for AD account is stored in world readable file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["atomic-openshift-0:3.1.1.6-6.git.43.f583589.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2142.json"},{"CVE":"CVE-2016-1905","severity":"moderate","public_date":"2016-01-11T00:00:00Z","advisories":["RHSA-2016:0351","RHSA-2016:0070"],"bugzilla":"1297910","bugzilla_description":"CVE-2016-1905 Kubernetes api server: patch operation should use patched object to check admission control","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","CWE":"CWE-285","affected_packages":["openshift-0:3.0.2.0-0.git.45.423f434.el7ose"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1905.json"},{"CVE":"CVE-2016-1906","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0351","RHSA-2016:0070"],"bugzilla":"1297916","bugzilla_description":"CVE-2016-1906 Kubernetes api server: build config to a strategy that isn't allowed by policy","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-285","affected_packages":["openshift-0:3.0.2.0-0.git.45.423f434.el7ose"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1906.json"},{"CVE":"CVE-2015-7528","severity":"moderate","public_date":"2015-11-27T00:00:00Z","advisories":["RHSA-2015:2544","RHSA-2015:2615"],"bugzilla":"1286745","bugzilla_description":"CVE-2015-7528 OpenShift: pod log location must validate container if provided","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":["openshift-0:3.0.2.0-0.git.38.7576bc5.el7ose","atomic-openshift-0:3.1.0.4-1.git.15.5e061c3.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7528.json"},{"CVE":"CVE-2015-5305","severity":"moderate","public_date":"2015-10-27T00:00:00Z","advisories":["RHSA-2015:1945"],"bugzilla":"1273969","bugzilla_description":"CVE-2015-5305 Kubernetes: Missing name validation allows path traversal in etcd","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["openshift-0:3.0.2.0-0.git.20.656dc3e.el7ose"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5305.json"},{"CVE":"CVE-2015-7545","severity":"moderate","public_date":"2015-10-05T00:00:00Z","advisories":["RHSA-2015:2561","RHSA-2015:2515"],"bugzilla":"1269794","bugzilla_description":"CVE-2015-7545 git: arbitrary code execution via crafted URLs","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["git19-git-0:1.9.4-3.el6.1","git19-git-0:1.9.4-3.el7.1","git-0:1.8.3.1-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7545.json"},{"CVE":"CVE-2015-5250","severity":"moderate","public_date":"2015-09-03T00:00:00Z","advisories":["RHSA-2015:1736"],"bugzilla":"1259867","bugzilla_description":"CVE-2015-5250 OpenShift: Malformed JSON can cause API process crash","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["openshift-0:3.0.1.0-1.git.529.dcab62c.el7ose"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5250.json"},{"CVE":"CVE-2015-5222","severity":"important","public_date":"2015-08-19T00:00:00Z","advisories":["RHSA-2015:1650"],"bugzilla":"1255120","bugzilla_description":"CVE-2015-5222 OpenShift3: Exec operations should be forbidden to privileged pods such as builder pods","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-862","affected_packages":["openshift-0:3.0.1.0-1.git.527.f8d5fed.el7ose"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5222.json"},{"CVE":"CVE-2014-9390","severity":"low","public_date":"2014-12-18T00:00:00Z","advisories":[],"bugzilla":"1175960","bugzilla_description":"CVE-2014-9390 git: arbitrary command execution vulnerability on case-insensitive file systems","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-20->CWE-172->CWE-552->CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9390.json"},{"CVE":"CVE-2014-3583","severity":"low","public_date":"2014-10-12T00:00:00Z","advisories":["RHSA-2015:1858","RHSA-2015:1855"],"bugzilla":"1163555","bugzilla_description":"CVE-2014-3583 httpd: mod_proxy_fcgi handle_headers() buffer over read","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["mod_proxy_fcgi-0:2.4.10-5.20150415gitd45a11f.el6cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3583.json"},{"CVE":"CVE-2014-9938","severity":"moderate","public_date":"2014-04-22T00:00:00Z","advisories":["RHSA-2017:2004"],"bugzilla":"1434415","bugzilla_description":"CVE-2014-9938 git: git-prompt.sh does not sanitize branch names in $PS1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["git-0:1.8.3.1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9938.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2014-0040","severity":"low","public_date":"2014-01-09T00:00:00Z","advisories":["RHSA-2014:0579"],"bugzilla":"1059514","bugzilla_description":"CVE-2014-0040 OpenStack openstack-heat-templates: use of HTTP to download signing keys/code","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"(CWE-201|CWE-522)","affected_packages":["openstack-heat-templates-0:0-0.3.20140407git.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0040.json"},{"CVE":"CVE-2014-0041","severity":"low","public_date":"2014-01-09T00:00:00Z","advisories":["RHSA-2014:0579"],"bugzilla":"1059515","bugzilla_description":"CVE-2014-0041 OpenStack openstack-heat-templates: use of HTTPS url and sslverify=false","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":["openstack-heat-templates-0:0-0.3.20140407git.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0041.json"},{"CVE":"CVE-2014-0042","severity":"low","public_date":"2014-01-09T00:00:00Z","advisories":["RHSA-2014:0579"],"bugzilla":"1059520","bugzilla_description":"CVE-2014-0042 OpenStack openstack-heat-templates: setting gpgcheck=0 for signed packages","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-494","affected_packages":["openstack-heat-templates-0:0-0.3.20140407git.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0042.json"},{"CVE":"CVE-2013-0308","severity":"moderate","public_date":"2013-02-20T00:00:00Z","advisories":["RHSA-2013:0589"],"bugzilla":"909977","bugzilla_description":"CVE-2013-0308 git: Incorrect IMAP server's SSL x509.v3 certificate validation in git-imap-send command","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["git-0:1.7.1-3.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0308.json"},{"CVE":"CVE-2012-4518","severity":"low","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2013:0509"],"bugzilla":"865499","bugzilla_description":"CVE-2012-4518 ibacm: ibacm service files created with world writable permissions (DoS)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ibacm-0:1.0.8-0.git7a3adb7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4518.json"},{"CVE":"CVE-2012-4517","severity":"low","public_date":"2012-04-04T00:00:00Z","advisories":["RHSA-2013:0509"],"bugzilla":"865492","bugzilla_description":"CVE-2012-4517 ibacm: DoS (ibacm deamon crash) by joining responses for multicast destinations","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ibacm-0:1.0.8-0.git7a3adb7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4517.json"},{"CVE":"CVE-2010-3906","severity":"moderate","public_date":"2010-12-15T00:00:00Z","advisories":["RHSA-2010:1003"],"bugzilla":"663609","bugzilla_description":"CVE-2010-3906 Git (gitweb): XSS due to missing escaping of HTML element attributes","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["git-0:1.7.1-2.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3906.json"},{"CVE":"CVE-2010-2542","severity":"low","public_date":"2010-07-20T00:00:00Z","advisories":[],"bugzilla":"618108","bugzilla_description":"CVE-2010-2542 Git: Arbitrary code execution via specially-crafted .git file","cvss_score":3.0,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2542.json"},{"CVE":"CVE-2007-3920","severity":"low","public_date":"2007-10-19T00:00:00Z","advisories":["RHSA-2008:0485"],"bugzilla":"350271","bugzilla_description":"CVE-2007-3920 gnome-screensaver loses keyboard grab when running under compiz","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["compiz-0:0.0.13-0.37.20060817git.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3920.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gitk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gitk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gitk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gitweb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gitweb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gitweb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gjs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gjs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gjs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gjs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gjs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gjs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gl-manpages_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gl-manpages_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gl-manpages_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glade-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glade-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glade-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glade-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glade-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glade-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-annotation-api-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-annotation-api-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-annotation-api-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-annotation-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-annotation-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-annotation-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-el-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-el-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-el-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-el-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-el-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-el-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-el_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-el_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-el_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-fastinfoset_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-fastinfoset_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-fastinfoset_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-runtime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-runtime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-runtime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-txw2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-txw2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jaxb-txw2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jsp-api-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jsp-api-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jsp-api-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jsp-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jsp-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-jsp-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-legal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-legal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-legal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-master-pom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-master-pom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-master-pom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-servlet-api-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-servlet-api-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-servlet-api-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-servlet-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-servlet-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glassfish-servlet-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glew-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glew-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glew-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib-networking_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib-networking_security_api_results.json
new file mode 100644
index 0000000..8752c9b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib-networking_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13645","severity":"moderate","public_date":"2020-05-04T00:00:00Z","advisories":[],"bugzilla":"1842645","bugzilla_description":"CVE-2020-13645 glib-networking: GTlsClientConnection silently ignores unset server identity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13645.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-fam_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-fam_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-fam_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-tests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-tests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2-tests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2_security_api_results.json
new file mode 100644
index 0000000..6d26cca
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glib2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-6750","severity":"moderate","public_date":"2020-01-09T00:00:00Z","advisories":[],"bugzilla":"1790288","bugzilla_description":"CVE-2020-6750 glib: Mishandling of proxy_addr field in GSocketClient may lead to proxy being ignored","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13012","severity":"low","public_date":"2019-06-28T00:00:00Z","advisories":[],"bugzilla":"1728632","bugzilla_description":"CVE-2019-13012 glib2: insecure permissions for files and directories","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13012.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-12450","severity":"moderate","public_date":"2019-05-23T00:00:00Z","advisories":["RHSA-2019:3530","RHSA-2020:3978","RHBA-2019:3303"],"bugzilla":"1719141","bugzilla_description":"CVE-2019-12450 glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["glib2-0:2.56.1-7.el7","redhat-coreos-42.81.20191107.0","glib2-0:2.56.4-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.6"},{"CVE":"CVE-2019-9633","severity":"moderate","public_date":"2019-01-29T00:00:00Z","advisories":[],"bugzilla":"1687805","bugzilla_description":"CVE-2019-9633 glib: g_socket_client_connected_callback in gio/gsocketclient.c allows to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2018-16428","severity":"low","public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1626145","bugzilla_description":"CVE-2018-16428 glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16428.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2018-16429","severity":"low","public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1626148","bugzilla_description":"CVE-2018-16429 glib2: Out-of-bounds read in g_markup_parse_context_parse() in gmarkup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16429.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2017-16231","severity":null,"public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1700392","bugzilla_description":"CVE-2017-16231 pcre: self-recursive call in match() in pcre_exec.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11164","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":[],"bugzilla":"1470107","bugzilla_description":"CVE-2017-11164 pcre: OP_KETRMAX feature in the match function in pcre_exec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7244","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437364","bugzilla_description":"CVE-2017-7244 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7245","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437367","bugzilla_description":"CVE-2017-7245 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7246","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437369","bugzilla_description":"CVE-2017-7246 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-8399","severity":"moderate","public_date":"2017-03-10T00:00:00Z","advisories":[],"bugzilla":"1449629","bugzilla_description":"CVE-2017-8399 pcre2: Stack-based buffer overflow in pcre2_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7186","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1434504","bugzilla_description":"CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-6004","severity":"moderate","public_date":"2017-02-14T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1425365","bugzilla_description":"CVE-2017-6004 pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-9769","severity":"moderate","public_date":"2016-03-23T00:00:00Z","advisories":[],"bugzilla":"1320995","bugzilla_description":"CVE-2014-9769 pcre: incorrect nested table jumps when JIT is used (8.36/6)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9769.json"},{"CVE":"CVE-2016-3191","severity":"important","public_date":"2016-02-09T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1025"],"bugzilla":"1311503","bugzilla_description":"CVE-2016-3191 pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3191.json"},{"CVE":"CVE-2016-1283","severity":"important","public_date":"2016-01-04T00:00:00Z","advisories":["RHSA-2016:1132"],"bugzilla":"1295385","bugzilla_description":"CVE-2016-1283 pcre: heap buffer overflow in handling of duplicate named groups (8.39/14)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1283.json"},{"CVE":"CVE-2015-8383","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287614","bugzilla_description":"CVE-2015-8383 pcre: Buffer overflow caused by repeated conditional group (8.38/3)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8383.json"},{"CVE":"CVE-2015-3210","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3210.json"},{"CVE":"CVE-2015-8384","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8384.json"},{"CVE":"CVE-2015-8385","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287629","bugzilla_description":"CVE-2015-8385 pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8385.json"},{"CVE":"CVE-2015-8386","severity":"low","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287636","bugzilla_description":"CVE-2015-8386 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8386.json"},{"CVE":"CVE-2015-8387","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287646","bugzilla_description":"CVE-2015-8387 pcre: Integer overflow in subroutine calls (8.38/8)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8387.json"},{"CVE":"CVE-2015-8389","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287659","bugzilla_description":"CVE-2015-8389 pcre: infinite recursion in JIT compiler when processing certain patterns (8.38/21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8389.json"},{"CVE":"CVE-2015-8390","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287666","bugzilla_description":"CVE-2015-8390 pcre: uninitialized memory read triggered by malformed posix character class (8.38/22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8390.json"},{"CVE":"CVE-2015-8391","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287671","bugzilla_description":"CVE-2015-8391 pcre: inefficient posix character class syntax check (8.38/16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8391.json"},{"CVE":"CVE-2015-8392","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287690","bugzilla_description":"CVE-2015-8392 pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8392.json"},{"CVE":"CVE-2015-8393","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287695","bugzilla_description":"CVE-2015-8393 pcre: pcregrep -q is not always quiet (8.38/28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8393.json"},{"CVE":"CVE-2015-8394","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287702","bugzilla_description":"CVE-2015-8394 pcre: Integer overflow caused by missing check for certain conditions (8.38/31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8394.json"},{"CVE":"CVE-2015-8381","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8381.json"},{"CVE":"CVE-2015-8395","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8395.json"},{"CVE":"CVE-2015-5073","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5073.json"},{"CVE":"CVE-2015-8388","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8388.json"},{"CVE":"CVE-2015-3217","severity":"moderate","public_date":"2015-06-03T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1228283","bugzilla_description":"CVE-2015-3217 pcre: stack overflow caused by mishandled group empty match (8.38/11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3217.json"},{"CVE":"CVE-2015-8380","severity":null,"public_date":"2015-06-01T00:00:00Z","advisories":[],"bugzilla":"1285413","bugzilla_description":"CVE-2015-8380 pcre: OOB write when pcre_exec() is called with ovecsize of 1 (8.38/10)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8380.json"},{"CVE":"CVE-2015-2326","severity":"moderate","public_date":"2015-03-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1207202","bugzilla_description":"CVE-2015-2326 pcre: heap buffer over-read in pcre_compile2() (8.37/23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2326.json"},{"CVE":"CVE-2015-2328","severity":"moderate","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1285399","bugzilla_description":"CVE-2015-2328 pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2328.json"},{"CVE":"CVE-2015-2327","severity":"moderate","public_date":"2014-07-11T00:00:00Z","advisories":["RHBA-2015:2142","RHSA-2016:2750"],"bugzilla":"1285408","bugzilla_description":"CVE-2015-2327 pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2327.json"},{"CVE":"CVE-2008-4316","severity":"moderate","public_date":"2009-03-12T00:00:00Z","advisories":["RHSA-2009:0336"],"bugzilla":"474770","bugzilla_description":"CVE-2008-4316 glib2: integer overflows in the base64 handling functions (oCERT-2008-015)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["glib2-0:2.12.3-4.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4316.json"},{"CVE":"CVE-2012-0039","severity":"moderate","public_date":"2003-05-29T00:00:00Z","advisories":[],"bugzilla":"772720","bugzilla_description":"CVE-2012-0039 glib2: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0039.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-all-langpacks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-all-langpacks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-all-langpacks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-benchtests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-benchtests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-benchtests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-headers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-headers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-headers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-aa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-aa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-aa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-af_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-af_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-af_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-agr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-agr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-agr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ak_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ak_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ak_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-am_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-am_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-am_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-an_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-an_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-an_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-anp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-anp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-anp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-as_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-as_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-as_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ast_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ast_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ast_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ayc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ayc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ayc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-az_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-az_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-az_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-be_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-be_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-be_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ber_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ber_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ber_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bhb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bhb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bhb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bho_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bho_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bho_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-br_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-br_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-br_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-brx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-brx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-brx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-bs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-byn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-byn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-byn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ce_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ce_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ce_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-chr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-chr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-chr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cmn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cmn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cmn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-crh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-crh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-crh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-csb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-csb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-csb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-cy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-da_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-da_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-da_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-de_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-de_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-de_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-doi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-doi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-doi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-dsb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-dsb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-dsb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-dv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-dv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-dv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-dz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-dz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-dz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-el_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-el_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-el_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-en_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-en_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-en_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-eo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-eo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-eo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-es_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-es_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-es_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-et_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-et_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-et_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-eu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-eu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-eu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ff_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ff_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ff_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fur_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fur_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fur_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-fy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ga_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ga_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gez_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gez_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gez_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-gv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ha_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ha_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ha_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hak_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hak_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hak_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-he_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-he_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-he_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hif_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hif_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hif_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hne_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hne_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hne_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hsb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hsb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hsb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ht_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ht_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ht_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-hy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-id_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-id_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-id_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ik_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ik_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ik_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-is_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-is_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-is_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-it_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-it_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-it_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-iu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-iu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-iu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ja_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ja_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ja_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ka_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ka_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ka_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kab_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kab_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kab_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-km_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-km_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-km_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kok_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kok_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kok_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ku_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ku_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ku_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-kw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ky_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ky_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ky_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-li_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-li_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-li_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lij_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lij_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lij_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ln_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ln_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ln_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lzh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lzh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-lzh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mag_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mag_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mag_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mai_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mai_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mai_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mfe_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mfe_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mfe_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mhr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mhr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mhr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-miq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-miq_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-miq_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mjw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mjw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mjw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mni_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mni_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mni_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ms_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ms_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ms_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-mt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-my_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-my_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-my_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ne_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ne_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ne_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nhn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nhn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nhn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-niu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-niu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-niu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nso_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nso_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-nso_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-oc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-oc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-oc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-om_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-om_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-om_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-or_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-or_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-or_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-os_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-os_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-os_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ps_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ps_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-pt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-quz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-quz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-quz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-raj_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-raj_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-raj_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ru_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ru_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ru_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-rw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-rw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-rw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sah_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sah_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sah_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-se_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-se_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-se_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sgs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sgs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sgs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-shn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-shn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-shn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-shs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-shs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-shs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-si_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-si_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-si_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sid_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sid_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-so_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-so_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-so_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sq_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sq_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-st_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-st_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-st_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-sw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-szl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-szl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-szl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tcy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tcy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tcy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-te_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-te_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-te_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-th_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-th_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-th_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-the_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-the_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-the_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ti_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ti_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ti_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-to_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-to_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-to_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-tt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-uk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-uk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-uk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-unm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-unm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-unm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ur_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ur_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ur_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-uz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-uz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-uz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ve_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ve_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-ve_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-vi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-vi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-vi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wae_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wae_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wae_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-wo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-xh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-xh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-xh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yue_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yue_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yue_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yuw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yuw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-yuw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-zh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-zh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-zh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-zu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-zu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-langpack-zu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-locale-source_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-locale-source_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-locale-source_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-minimal-langpack_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-minimal-langpack_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-minimal-langpack_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-nss-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-nss-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-nss-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc_security_api_results.json
new file mode 100644
index 0000000..dbbf939
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-6096","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1820331","bugzilla_description":"CVE-2020-6096 glibc: signed comparison vulnerability in the ARMv7 memcpy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6096.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10029","severity":"moderate","public_date":"2020-02-12T00:00:00Z","advisories":[],"bugzilla":"1810670","bugzilla_description":"CVE-2020-10029 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10029.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2020-1751","severity":"moderate","public_date":"2020-01-20T00:00:00Z","advisories":[],"bugzilla":"1810719","bugzilla_description":"CVE-2020-1751 glibc: array overflow in backtrace functions for powerpc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1751.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-1752","severity":"moderate","public_date":"2020-01-17T00:00:00Z","advisories":[],"bugzilla":"1810718","bugzilla_description":"CVE-2020-1752 glibc: use-after-free in glob() function when expanding ~user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1752.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-19126","severity":"low","public_date":"2019-11-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3861","RHSA-2020:1828"],"bugzilla":"1774681","bugzilla_description":"CVE-2019-19126 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glibc-0:2.17-317.el7","glibc-0:2.28-101.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-1010025","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":[],"bugzilla":"1737445","bugzilla_description":"CVE-2019-1010025 glibc: information disclosure of heap addresses of pthread_created thread","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010025.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-1010023","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":[],"bugzilla":"1773916","bugzilla_description":"CVE-2019-1010023 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010023.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-1010024","severity":"moderate","public_date":"2019-07-15T00:00:00Z","advisories":[],"bugzilla":"1773927","bugzilla_description":"CVE-2019-1010024 glibc: ASLR bypass using cache of thread stack and heap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010024.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2005-3590","severity":"low","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1706046","bugzilla_description":"CVE-2005-3590 glibc: buffer overflow in getgrouplist function leading to corrupted memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3590.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2009-5155","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1683683","bugzilla_description":"CVE-2009-5155 glibc: parse_reg_exp in posix/regcomp.c misparses alternatives leading to denial of service or trigger incorrect result","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1010022","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1731964","bugzilla_description":"CVE-2019-1010022 glibc: stack guard protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-119->CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-9192","severity":null,"public_date":"2019-02-26T00:00:00Z","advisories":[],"bugzilla":"1684374","bugzilla_description":"CVE-2019-9192 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9192.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2019-7309","severity":"low","public_date":"2019-02-02T00:00:00Z","advisories":[],"bugzilla":"1672232","bugzilla_description":"CVE-2019-7309 glibc: memcmp function incorrectly returns zero","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7309.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20796","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":[],"bugzilla":"1683150","bugzilla_description":"CVE-2018-20796 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9169","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":[],"bugzilla":"1684057","bugzilla_description":"CVE-2019-9169 glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-6488","severity":"moderate","public_date":"2019-01-16T00:00:00Z","advisories":[],"bugzilla":"1667931","bugzilla_description":"CVE-2019-6488 glibc: Incorrect attempt to use a 64-bit register for size_t in assembly codes results in segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-19591","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1653993","bugzilla_description":"CVE-2018-19591 glibc: file descriptor leak in if_nametoindex() in sysdeps/unix/sysv/linux/if_index.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19591.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-11237","severity":"moderate","public_date":"2018-05-17T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1581274","bugzilla_description":"CVE-2018-11237 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11237.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-11236","severity":"moderate","public_date":"2018-02-04T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1581269","bugzilla_description":"CVE-2018-11236 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-121","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-6551","severity":"moderate","public_date":"2018-02-02T00:00:00Z","advisories":[],"bugzilla":"1542119","bugzilla_description":"CVE-2018-6551 glibc: integer overflow in malloc functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6551.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000001","severity":"important","public_date":"2018-01-11T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1533836","bugzilla_description":"CVE-2018-1000001 glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000001.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-18269","severity":"moderate","public_date":"2017-12-24T00:00:00Z","advisories":[],"bugzilla":"1580924","bugzilla_description":"CVE-2017-18269 glibc: memory corruption in memcpy-sse2-unaligned.S","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18269.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-16997","severity":"moderate","public_date":"2017-12-17T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1526865","bugzilla_description":"CVE-2017-16997 glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-470","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16997.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-1000408","severity":"low","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1522828","bugzilla_description":"CVE-2017-1000408 glibc: Memory leak reachable via LD_HWCAP_MASK","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000408.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000409","severity":"moderate","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1522830","bugzilla_description":"CVE-2017-1000409 glibc: Buffer overflow triggerable via LD_LIBRARY_PATH","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000409.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-17426","severity":"moderate","public_date":"2017-10-31T00:00:00Z","advisories":[],"bugzilla":"1524530","bugzilla_description":"CVE-2017-17426 glibc: Integer overflow with enabled tcache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17426.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-15804","severity":"moderate","public_date":"2017-10-21T00:00:00Z","advisories":["RHSA-2018:1879","RHSA-2018:0805"],"bugzilla":"1505298","bugzilla_description":"CVE-2017-15804 glibc: Buffer overflow during unescaping of user names with the ~ operator","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7","glibc-0:2.12-1.212.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15804.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-15671","severity":"low","public_date":"2017-10-20T00:00:00Z","advisories":[],"bugzilla":"1504806","bugzilla_description":"CVE-2017-15671 glibc: Memory leak in glob with GLOB_TILDE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15671.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15670","severity":"moderate","public_date":"2017-10-19T00:00:00Z","advisories":["RHSA-2018:1879","RHSA-2018:0805"],"bugzilla":"1504804","bugzilla_description":"CVE-2017-15670 glibc: Buffer overflow in glob with GLOB_TILDE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glibc-0:2.17-222.el7","glibc-0:2.12-1.212.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15670.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-6485","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":["RHSA-2018:3092"],"bugzilla":"1542102","bugzilla_description":"CVE-2018-6485 glibc: Integer overflow in posix_memalign in memalign functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["glibc-0:2.17-260.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6485.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-1000366","severity":"important","public_date":"2017-06-19T00:00:00Z","advisories":["RHSA-2017:1567","RHSA-2017:1479","RHSA-2017:1480","RHSA-2017:1481"],"bugzilla":"1452543","bugzilla_description":"CVE-2017-1000366 glibc: heap/stack gap jumping via unbounded stack allocations","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6_9.2","glibc-0:2.5-123.el5_11.4","glibc-0:2.17-157.el7_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000366.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2014-9984","severity":"critical","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1463288","bugzilla_description":"CVE-2014-9984 glibc: nscd buffer manipulation vulnerability could lead to code execution or crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9984.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-8804","severity":"moderate","public_date":"2017-05-08T00:00:00Z","advisories":[],"bugzilla":"1448794","bugzilla_description":"CVE-2017-8804 glibc: memory leak in sunrpc when decoding malformed XDR","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-12132","severity":"low","public_date":"2017-04-07T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1477529","bugzilla_description":"CVE-2017-12132 glibc: Fragmentation attacks possible when EDNS0 is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12132.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.0"},{"CVE":"CVE-2017-12133","severity":"low","public_date":"2017-02-08T00:00:00Z","advisories":[],"bugzilla":"1478288","bugzilla_description":"CVE-2017-12133 glibc: Use-after-free read access in clntudp_call in sunrpc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12133.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10228","severity":"low","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1428290","bugzilla_description":"CVE-2016-10228 glibc: iconv program can hang when invoked with the -c option","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10228.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6323","severity":"low","public_date":"2016-08-04T00:00:00Z","advisories":[],"bugzilla":"1383297","bugzilla_description":"CVE-2016-6323 glibc: Missing unwind info in __startcontext causes infinite loop in _Unwind_Backtrace","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5417","severity":"low","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1362534","bugzilla_description":"CVE-2016-5417 glibc: per-thread memory leak in __res_vinit with IPv6 nameservers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5417.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-4429","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1337136","bugzilla_description":"CVE-2016-4429 glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4429.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-10739","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":["RHSA-2019:3513","RHSA-2019:2118","RHBA-2019:3303"],"bugzilla":"1347549","bugzilla_description":"CVE-2016-10739 glibc: getaddrinfo should reject IP addresses with trailing characters","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","glibc-0:2.17-292.el7","glibc-0:2.28-72.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10739.json"},{"CVE":"CVE-2016-3706","severity":"low","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1330887","bugzilla_description":"CVE-2016-3706 glibc: stack (frame) overflow in getaddrinfo() when called with AF_INET, AF_INET6 (incomplete fix for CVE-2013-4458)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3706.json"},{"CVE":"CVE-2016-3075","severity":"low","public_date":"2016-03-29T00:00:00Z","advisories":["RHSA-2016:2573"],"bugzilla":"1321866","bugzilla_description":"CVE-2016-3075 glibc: Stack overflow in nss_dns_getnetbyname_r","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:P/I:P/A:C","CWE":"CWE-121","affected_packages":["glibc-0:2.17-157.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-1234","severity":"moderate","public_date":"2016-03-07T00:00:00Z","advisories":[],"bugzilla":"1315647","bugzilla_description":"CVE-2016-1234 glibc: Stack-based buffer overflow in glob with GLOB_ALTDIRFUNC and crafted directory","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1234.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2015-7547","severity":"critical","public_date":"2016-02-16T00:00:00Z","advisories":["RHSA-2016:0175","RHSA-2016:0176","RHSA-2016:0277","RHSA-2016:0225"],"bugzilla":"1293532","bugzilla_description":"CVE-2015-7547 glibc: getaddrinfo stack-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.12-1.132.el6_5.7","glibc-0:2.12-1.107.el6_4.9","glibc-0:2.12-1.149.el6_6.11","glibc-0:2.17-79.ael7b_1.4","glibc-0:2.12-1.166.el6_7.7","glibc-0:2.12-1.47.el6_2.17","rhev-hypervisor7-0:7.2-20160105.2.el7ev","glibc-0:2.17-106.el7_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7547.json"},{"CVE":"CVE-2015-8776","severity":"moderate","public_date":"2015-09-20T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300299","bugzilla_description":"CVE-2015-8776 glibc: Segmentation fault caused by passing out-of-range data to strftime()","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2015-5277","severity":"important","public_date":"2015-09-14T00:00:00Z","advisories":["RHSA-2015:2172","RHSA-2015:2589"],"bugzilla":"1262914","bugzilla_description":"CVE-2015-5277 glibc: data corruption while reading the NSS files database","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["glibc-0:2.17-106.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5277.json"},{"CVE":"CVE-2015-8777","severity":"low","public_date":"2015-09-05T00:00:00Z","advisories":["RHSA-2017:1916"],"bugzilla":"1260581","bugzilla_description":"CVE-2015-8777 glibc: LD_POINTER_GUARD in the environment is not sanitized","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8777.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-5229","severity":"low","public_date":"2015-08-21T00:00:00Z","advisories":["RHSA-2016:0176","RHBA-2015:1465"],"bugzilla":"1256285","bugzilla_description":"CVE-2015-5229 glibc: calloc may return non-zero memory","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.166.el6_7.1","glibc-0:2.17-106.el7_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5229.json"},{"CVE":"CVE-2015-5180","severity":"low","public_date":"2015-08-07T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1249603","bugzilla_description":"CVE-2015-5180 glibc: DNS resolver NULL pointer dereference with crafted record type","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5180.json"},{"CVE":"CVE-2015-1781","severity":"moderate","public_date":"2015-04-21T00:00:00Z","advisories":["RHSA-2015:0863","RHSA-2015:2199","RHSA-2015:2589"],"bugzilla":"1199525","bugzilla_description":"CVE-2015-1781 glibc: buffer overflow in gethostbyname_r() and related functions with misaligned buffer","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-131->CWE-119","affected_packages":["glibc-0:2.12-1.149.el6_6.7","glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1781.json"},{"CVE":"CVE-2015-8778","severity":"moderate","public_date":"2015-04-10T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300303","bugzilla_description":"CVE-2015-8778 glibc: Integer overflow in hcreate and hcreate_r","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2015-8985","severity":"low","public_date":"2015-02-28T00:00:00Z","advisories":[],"bugzilla":"1197798","bugzilla_description":"CVE-2015-8985 glibc: potential denial of service in pop_fail_stack()","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8985.json"},{"CVE":"CVE-2015-8984","severity":"low","public_date":"2015-02-26T00:00:00Z","advisories":[],"bugzilla":"1197730","bugzilla_description":"CVE-2015-8984 glibc: potential denial of service in internal_fnmatch()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8984.json"},{"CVE":"CVE-2014-8121","severity":"low","public_date":"2015-02-23T00:00:00Z","advisories":["RHSA-2015:0327"],"bugzilla":"1165192","bugzilla_description":"CVE-2014-8121 glibc: Unexpected closing of nss_files databases after lookups causes denial of service","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["glibc-0:2.17-78.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8121.json"},{"CVE":"CVE-2015-8983","severity":"moderate","public_date":"2015-02-22T00:00:00Z","advisories":[],"bugzilla":"1195762","bugzilla_description":"CVE-2015-8983 glibc: _IO_wstr_overflow integer overflow","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8983.json"},{"CVE":"CVE-2015-8982","severity":"low","public_date":"2015-02-13T00:00:00Z","advisories":[],"bugzilla":"1192525","bugzilla_description":"CVE-2015-8982 glibc: multiple overflows in strxfrm()","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8982.json"},{"CVE":"CVE-2015-8779","severity":"moderate","public_date":"2015-01-29T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300312","bugzilla_description":"CVE-2015-8779 glibc: Unbounded stack allocation in catopen function","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8779.json"},{"CVE":"CVE-2015-0235","severity":"critical","public_date":"2015-01-27T00:00:00Z","advisories":["RHSA-2015:0092","RHSA-2015:0090","RHSA-2015:0126","RHSA-2015:0101","RHSA-2015:0099"],"bugzilla":"1183461","bugzilla_description":"CVE-2015-0235 glibc: __nss_hostname_digits_dots() heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-131->CWE-122","affected_packages":["glibc-0:2.5-123.el5_11.1","glibc-0:2.5-58.el5_6.6","rhev-hypervisor6-0:6.6-20150123.1.el6ev","glibc-0:2.12-1.47.el6_2.15","glibc-0:2.12-1.107.el6_4.7","glibc-0:2.12-1.149.el6_6.5","glibc-0:2.12-1.132.el6_5.5","glibc-0:2.3.4-2.57.el4.2","glibc-0:2.17-55.el7_0.5","glibc-0:2.5-107.el5_9.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0235.json"},{"CVE":"CVE-2013-7424","severity":"moderate","public_date":"2015-01-27T00:00:00Z","advisories":["RHSA-2014:1391","RHSA-2015:1627"],"bugzilla":"1186614","bugzilla_description":"CVE-2013-7424 glibc: Invalid-free when using getaddrinfo()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-123.el5_11.3","glibc-0:2.12-1.149.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7424.json"},{"CVE":"CVE-2014-7817","severity":"moderate","public_date":"2014-11-20T00:00:00Z","advisories":["RHSA-2015:0016","RHSA-2014:2023"],"bugzilla":"1157689","bugzilla_description":"CVE-2014-7817 glibc: command execution in wordexp() with WRDE_NOCMD specified","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-440","affected_packages":["glibc-0:2.12-1.149.el6_6.4","glibc-0:2.17-55.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7817.json"},{"CVE":"CVE-2014-9402","severity":"low","public_date":"2014-11-20T00:00:00Z","advisories":["RHSA-2018:0805"],"bugzilla":"1175369","bugzilla_description":"CVE-2014-9402 glibc: denial of service in getnetbyname function","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["glibc-0:2.17-222.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9402.json"},{"CVE":"CVE-2014-6040","severity":"moderate","public_date":"2014-08-28T00:00:00Z","advisories":["RHSA-2015:0327","RHSA-2015:0016"],"bugzilla":"1135841","bugzilla_description":"CVE-2014-6040 glibc: crash in code page decoding functions (IBM933, IBM935, IBM937, IBM939, IBM1364)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":["glibc-0:2.17-78.el7","glibc-0:2.12-1.149.el6_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6040.json"},{"CVE":"CVE-2014-5119","severity":"important","public_date":"2014-07-14T00:00:00Z","advisories":["RHSA-2014:1118","RHSA-2014:1110"],"bugzilla":"1119128","bugzilla_description":"CVE-2014-5119 glibc: off-by-one error leading to a heap-based buffer overflow flaw in __gconv_translit_find()","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-193->CWE-626->CWE-122","affected_packages":["glibc-0:2.17-55.el7_0.1","glibc-0:2.12-1.132.el6_5.4","glibc-0:2.5-118.el5_10.3","glibc-0:2.5-107.el5_9.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5119.json"},{"CVE":"CVE-2014-0475","severity":"moderate","public_date":"2014-07-09T00:00:00Z","advisories":["RHSA-2014:1110"],"bugzilla":"1102353","bugzilla_description":"CVE-2014-0475 glibc: directory traversal in LC_* locale handling","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-22","affected_packages":["glibc-0:2.17-55.el7_0.1","glibc-0:2.12-1.132.el6_5.4","glibc-0:2.5-118.el5_10.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0475.json"},{"CVE":"CVE-2014-4043","severity":"low","public_date":"2014-06-11T00:00:00Z","advisories":[],"bugzilla":"1109263","bugzilla_description":"CVE-2014-4043 glibc: posix_spawn_file_actions_addopen fails to copy the path argument","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4043.json"},{"CVE":"CVE-2014-9761","severity":"moderate","public_date":"2014-05-19T00:00:00Z","advisories":["RHSA-2017:1916","RHSA-2017:0680"],"bugzilla":"1300310","bugzilla_description":"CVE-2014-9761 glibc: Unbounded stack allocation in nan* functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.209.el6","glibc-0:2.17-196.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9761.json"},{"CVE":"CVE-2015-1472","severity":"low","public_date":"2014-02-21T00:00:00Z","advisories":["RHSA-2015:2199","RHSA-2015:2589"],"bugzilla":"1188235","bugzilla_description":"CVE-2015-1472 glibc: heap buffer overflow in glibc swscanf","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-122","affected_packages":["glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1472.json"},{"CVE":"CVE-2015-1473","severity":"low","public_date":"2014-02-21T00:00:00Z","advisories":["RHSA-2015:2199","RHSA-2015:2589"],"bugzilla":"1209105","bugzilla_description":"CVE-2015-1473 glibc: Stack-overflow in glibc swscanf","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1473.json"},{"CVE":"CVE-2013-4458","severity":"low","public_date":"2013-10-22T00:00:00Z","advisories":["RHSA-2014:1391"],"bugzilla":"1022280","bugzilla_description":"CVE-2013-4458 glibc: Stack (frame) overflow in getaddrinfo() when called with AF_INET6","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.12-1.149.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4458.json"},{"CVE":"CVE-2013-7423","severity":"moderate","public_date":"2013-09-12T00:00:00Z","advisories":["RHSA-2015:0863","RHSA-2015:2199","RHSA-2016:1207","RHSA-2015:2589"],"bugzilla":"1187109","bugzilla_description":"CVE-2013-7423 glibc: getaddrinfo() writes DNS queries to random file descriptors under high load","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-362->CWE-201","affected_packages":["glibc-0:2.12-1.132.el6_5.8","glibc-0:2.12-1.149.el6_6.7","glibc-0:2.17-105.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7423.json"},{"CVE":"CVE-2013-4332","severity":"moderate","public_date":"2013-08-20T00:00:00Z","advisories":["RHSA-2013:1605","RHSA-2013:1411"],"bugzilla":"1007545","bugzilla_description":"CVE-2013-4332 glibc: three integer overflows in memory allocator","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.5-118.el5_10.2","glibc-0:2.12-1.132.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4332.json"},{"CVE":"CVE-2013-4237","severity":"moderate","public_date":"2013-08-11T00:00:00Z","advisories":["RHSA-2014:1391"],"bugzilla":"995839","bugzilla_description":"CVE-2013-4237 glibc: Buffer overwrite when using readdir_r on file systems returning file names longer than NAME_MAX characters","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["glibc-0:2.12-1.149.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4237.json"},{"CVE":"CVE-2013-2207","severity":"moderate","public_date":"2013-07-16T00:00:00Z","advisories":[],"bugzilla":"976408","bugzilla_description":"CVE-2013-2207 glibc (pt_chown): Improper pseudotty ownership and permissions changes when granting access to the slave pseudoterminal","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2207.json"},{"CVE":"CVE-2013-4788","severity":"low","public_date":"2013-07-15T00:00:00Z","advisories":[],"bugzilla":"985625","bugzilla_description":"CVE-2013-4788 glibc: PTR_MANGLE does not initialize to a random value for the pointer guard when compiling static executables","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4788.json"},{"CVE":"CVE-2013-1914","severity":"low","public_date":"2013-04-03T00:00:00Z","advisories":["RHSA-2013:1605","RHSA-2013:0769"],"bugzilla":"947882","bugzilla_description":"CVE-2013-1914 glibc: Stack (frame) overflow in getaddrinfo() when processing entry mapping to long list of address structures","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.132.el6","glibc-0:2.5-107.el5_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1914.json"},{"CVE":"CVE-2013-0242","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":["RHSA-2013:1605","RHSA-2013:0769"],"bugzilla":"905874","bugzilla_description":"CVE-2013-0242 glibc: Buffer overrun (DoS) in regexp matcher by processing multibyte characters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.132.el6","glibc-0:2.5-107.el5_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0242.json"},{"CVE":"CVE-2012-4424","severity":"moderate","public_date":"2012-09-06T00:00:00Z","advisories":[],"bugzilla":"858238","bugzilla_description":"CVE-2012-4424 glibc: alloca() stack overflow in the strcoll() interface","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4424.json"},{"CVE":"CVE-2012-4412","severity":"moderate","public_date":"2012-09-05T00:00:00Z","advisories":[],"bugzilla":"855385","bugzilla_description":"CVE-2012-4412 glibc: strcoll() integer overflow leading to buffer overflow","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4412.json"},{"CVE":"CVE-2012-3480","severity":"moderate","public_date":"2012-08-12T00:00:00Z","advisories":["RHSA-2012:1207","RHSA-2012:1208","RHSA-2012:1262","RHSA-2012:1325"],"bugzilla":"847715","bugzilla_description":"CVE-2012-3480 glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-121","affected_packages":["glibc-0:2.12-1.80.el6_3.5","rhev-hypervisor6-0:6.3-20120926.0.el6_3","glibc-0:2.5-81.el5_8.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3480.json"},{"CVE":"CVE-2012-3406","severity":"moderate","public_date":"2012-07-11T00:00:00Z","advisories":["RHSA-2012:1098","RHSA-2012:1097","RHSA-2012:1185","RHSA-2012:1200"],"bugzilla":"826943","bugzilla_description":"CVE-2012-3406 glibc: printf() unbound alloca() usage in case of positional parameters + many format specs","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.3-20120815.0.el6_3","glibc-0:2.12-1.80.el6_3.3","glibc-0:2.5-81.el5_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3406.json"},{"CVE":"CVE-2012-3404","severity":"moderate","public_date":"2012-07-11T00:00:00Z","advisories":["RHSA-2012:1098","RHSA-2012:1200"],"bugzilla":"833703","bugzilla_description":"CVE-2012-3404 glibc: incorrect size calculation in formatted printing can lead to FORTIFY_SOURCE format string protection bypass","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.3-20120815.0.el6_3","glibc-0:2.12-1.80.el6_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3404.json"},{"CVE":"CVE-2012-3405","severity":"moderate","public_date":"2012-07-11T00:00:00Z","advisories":["RHSA-2012:1098","RHSA-2012:1200"],"bugzilla":"833704","bugzilla_description":"CVE-2012-3405 glibc: incorrect use of extend_alloca() in formatted printing can lead to FORTIFY_SOURCE format string protection bypass","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.3-20120815.0.el6_3","glibc-0:2.12-1.80.el6_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3405.json"},{"CVE":"CVE-2012-6656","severity":"moderate","public_date":"2012-05-23T00:00:00Z","advisories":[],"bugzilla":"1135840","bugzilla_description":"CVE-2012-6656 glibc: crash in IBM930 decoding","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6656.json"},{"CVE":"CVE-2011-4609","severity":"low","public_date":"2011-05-05T00:00:00Z","advisories":["RHSA-2012:0058","RHSA-2012:0125","RHSA-2012:0126"],"bugzilla":"767299","bugzilla_description":"CVE-2011-4609 glibc: svc_run() produces high cpu usage when accept() fails with EMFILE error","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.47.el6_2.5","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4609.json"},{"CVE":"CVE-2012-6686","severity":"moderate","public_date":"2011-04-13T00:00:00Z","advisories":["RHBA-2013:0022","RHBA-2012:0763"],"bugzilla":"1009643","bugzilla_description":"CVE-2012-6686 CVE-2013-4357 glibc: stack overflow in getaddrinfo()'s use of alloca()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["glibc-0:2.5-107","glibc-0:2.12-1.80.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6686.json"},{"CVE":"CVE-2013-4357","severity":"moderate","public_date":"2011-04-13T00:00:00Z","advisories":[],"bugzilla":"1009643","bugzilla_description":"CVE-2012-6686 CVE-2013-4357 glibc: stack overflow in getaddrinfo()'s use of alloca()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4357.json"},{"CVE":"CVE-2011-1089","severity":"low","public_date":"2011-03-03T00:00:00Z","advisories":["RHSA-2012:0125","RHSA-2012:0126","RHSA-2011:1526"],"bugzilla":"688980","bugzilla_description":"CVE-2011-1089 glibc: Suid mount helpers fail to anticipate RLIMIT_FSIZE","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["glibc-0:2.12-1.47.el6","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1089.json"},{"CVE":"CVE-2011-5320","severity":"low","public_date":"2011-01-22T00:00:00Z","advisories":[],"bugzilla":"1196745","bugzilla_description":"CVE-2011-5320 glibc: scanf implementation crashes on certain inputs","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5320.json"},{"CVE":"CVE-2011-1658","severity":"low","public_date":"2011-01-12T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413"],"bugzilla":"694873","bugzilla_description":"CVE-2011-1658 glibc: ld.so insecure handling of privileged programs' RPATHs with $ORIGIN","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1658.json"},{"CVE":"CVE-2011-0536","severity":"important","public_date":"2011-01-11T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413"],"bugzilla":"667974","bugzilla_description":"CVE-2011-0536 glibc: CVE-2010-3847 fix causes linker to search CWD when running privileged program with $ORIGIN in R*PATH","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0536.json"},{"CVE":"CVE-2010-4051","severity":null,"public_date":"2010-12-07T00:00:00Z","advisories":[],"bugzilla":"645859","bugzilla_description":"CVE-2010-4051 CVE-2010-4052 glibc: De-recursivise regular expression engine","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4051.json"},{"CVE":"CVE-2010-4052","severity":null,"public_date":"2010-12-07T00:00:00Z","advisories":[],"bugzilla":"645859","bugzilla_description":"CVE-2010-4051 CVE-2010-4052 glibc: De-recursivise regular expression engine","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4052.json"},{"CVE":"CVE-2012-0864","severity":"moderate","public_date":"2010-11-17T00:00:00Z","advisories":["RHSA-2012:0393","RHSA-2012:0397","RHSA-2012:0531","RHSA-2012:0488"],"bugzilla":"794766","bugzilla_description":"CVE-2012-0864 glibc: FORTIFY_SOURCE format string protection bypass via \"nargs\" integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.12-1.47.el6_2.9","rhev-hypervisor6-0:6.2-20120423.1.el6_2","glibc-0:2.5-81.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0864.json"},{"CVE":"CVE-2010-3856","severity":"important","public_date":"2010-10-22T00:00:00Z","advisories":["RHSA-2010:0872","RHSA-2010:0793"],"bugzilla":"645672","bugzilla_description":"CVE-2010-3856 glibc: ld.so arbitrary DSO loading via LD_AUDIT in setuid/setgid programs","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["glibc-0:2.12-1.7.el6_0.3","glibc-0:2.5-49.el5_5.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3856.json"},{"CVE":"CVE-2010-3847","severity":"important","public_date":"2010-10-18T00:00:00Z","advisories":["RHSA-2010:0787","RHSA-2010:0872"],"bugzilla":"643306","bugzilla_description":"CVE-2010-3847 glibc: ld.so insecure handling of $ORIGIN in LD_AUDIT for setuid/setgid programs","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-426","affected_packages":["glibc-0:2.12-1.7.el6_0.3","glibc-0:2.5-49.el5_5.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3847.json"},{"CVE":"CVE-2010-4756","severity":"low","public_date":"2010-10-07T00:00:00Z","advisories":[],"bugzilla":"681681","bugzilla_description":"CVE-2010-4756 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4756.json"},{"CVE":"CVE-2011-1095","severity":"low","public_date":"2010-08-11T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413","RHSA-2012:0125"],"bugzilla":"625893","bugzilla_description":"CVE-2011-1095 glibc: insufficient quoting in the locale command output","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1095.json"},{"CVE":"CVE-2011-1071","severity":"low","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413","RHSA-2012:0125"],"bugzilla":"681054","bugzilla_description":"CVE-2011-1071 CVE-2011-1659 glibc: fnmatch() alloca()-based memory corruption flaw","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1071.json"},{"CVE":"CVE-2011-1659","severity":"low","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2011:0413","RHSA-2012:0125"],"bugzilla":"681054","bugzilla_description":"CVE-2011-1071 CVE-2011-1659 glibc: fnmatch() alloca()-based memory corruption flaw","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57","glibc-0:2.12-1.7.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1659.json"},{"CVE":"CVE-2010-0296","severity":"low","public_date":"2010-05-25T00:00:00Z","advisories":["RHSA-2011:0412","RHSA-2012:0125"],"bugzilla":"559579","bugzilla_description":"CVE-2010-0296 glibc: Improper encoding of names with certain special character in utilities for writing to mtab table","cvss_score":4.3,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-58.el5_6.2","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0296.json"},{"CVE":"CVE-2010-0830","severity":"low","public_date":"2010-05-25T00:00:00Z","advisories":["RHSA-2012:0125","RHSA-2012:0126"],"bugzilla":"599056","bugzilla_description":"CVE-2010-0830 glibc: ld.so d_tag signedness error in elf_get_dynamic_info","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0830.json"},{"CVE":"CVE-2010-0015","severity":"low","public_date":"2009-12-10T00:00:00Z","advisories":[],"bugzilla":"555573","bugzilla_description":"CVE-2010-0015 glibc NIS password hash disclosure","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0015.json"},{"CVE":"CVE-2009-5064","severity":"low","public_date":"2009-10-26T00:00:00Z","advisories":["RHSA-2012:0125","RHSA-2012:0126","RHSA-2011:1526"],"bugzilla":"692393","bugzilla_description":"CVE-2009-5064 glibc: ldd unexpected code execution issue","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["glibc-0:2.12-1.47.el6","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5064.json"},{"CVE":"CVE-2009-5029","severity":"moderate","public_date":"2009-06-01T00:00:00Z","advisories":["RHSA-2012:0058","RHSA-2012:0125","RHSA-2012:0126"],"bugzilla":"761245","bugzilla_description":"CVE-2009-5029 glibc: __tzfile_read integer overflow to buffer overflow","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["glibc-0:2.12-1.47.el6_2.5","glibc-0:2.5-65.el5_7.3","glibc-0:2.3.4-2.57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5029.json"},{"CVE":"CVE-2006-7254","severity":"moderate","public_date":"2006-03-31T00:00:00Z","advisories":[],"bugzilla":"1698738","bugzilla_description":"CVE-2006-7254 glibc: Not closing unhadleable client sockets due to nscd daemon leads to DoS.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7254.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2004-0968","severity":"low","public_date":"2004-09-30T00:00:00Z","advisories":["RHSA-2005:261","RHSA-2004:586"],"bugzilla":"1617335","bugzilla_description":"CVE-2004-0968 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.3.2-95.30"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0968.json"},{"CVE":"CVE-2004-1453","severity":"low","public_date":"2004-08-17T00:00:00Z","advisories":["RHSA-2005:256","RHSA-2005:261"],"bugzilla":"1617412","bugzilla_description":"CVE-2004-1453 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.3.2-95.33"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1453.json"},{"CVE":"CVE-2003-0859","severity":"low","public_date":"2003-11-12T00:00:00Z","advisories":["RHSA-2003:334","RHSA-2003:325"],"bugzilla":"1617097","bugzilla_description":"CVE-2003-0859 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["glibc-0:2.3.2-95.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0859.json"},{"CVE":"CVE-1999-0199","severity":null,"public_date":"1999-11-09T00:00:00Z","advisories":[],"bugzilla":"1885775","bugzilla_description":"CVE-1999-0199 glibc: manual/search.texi lacks a statement about the unspecified tdelete return value upon deletion of a tree's root","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1053","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-1999-0199.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibmm24-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibmm24-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibmm24-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibmm24-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibmm24-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibmm24-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibmm24_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibmm24_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glibmm24_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glm-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glm-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glm-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glog-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glog-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glog-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-api-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-api-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-api-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-client-xlators_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-client-xlators_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-client-xlators_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-fuse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-fuse_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-fuse_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-rdma_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-rdma_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs-rdma_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs_security_api_results.json
new file mode 100644
index 0000000..4f036b1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glusterfs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-14654","severity":"moderate","public_date":"2018-10-31T08:00:00Z","advisories":["RHSA-2018:3470","RHSA-2018:3432","RHSA-2018:3431"],"bugzilla":"1631576","bugzilla_description":"CVE-2018-14654 glusterfs: \"features/index\" translator can create arbitrary, empty files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["glusterfs-0:3.12.2-25.el7rhgs","glusterfs-0:3.12.2-25.el6","glusterfs-0:3.12.2-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14654.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-14651","severity":"important","public_date":"2018-10-31T08:00:00Z","advisories":["RHSA-2018:3432","RHSA-2018:3431"],"bugzilla":"1632557","bugzilla_description":"CVE-2018-14651 glusterfs: glusterfs server exploitable via symlinks to relative paths","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["glusterfs-0:3.12.2-25.el6rhs","glusterfs-0:3.12.2-25.el6","glusterfs-0:3.12.2-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14651.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-14652","severity":"moderate","public_date":"2018-10-31T08:00:00Z","advisories":["RHSA-2018:3470","RHSA-2018:3432","RHSA-2018:3431"],"bugzilla":"1632974","bugzilla_description":"CVE-2018-14652 glusterfs: Buffer overflow in \"features/locks\" translator allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["glusterfs-0:3.12.2-25.el7rhgs","glusterfs-0:3.12.2-25.el6","glusterfs-0:3.12.2-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-14653","severity":"moderate","public_date":"2018-10-31T08:00:00Z","advisories":["RHSA-2018:3470","RHSA-2018:3432","RHSA-2018:3431"],"bugzilla":"1633431","bugzilla_description":"CVE-2018-14653 glusterfs: Heap-based buffer overflow via \"gf_getspec_req\" RPC message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["glusterfs-0:3.12.2-25.el7rhgs","glusterfs-0:3.12.2-25.el6","glusterfs-0:3.12.2-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14653.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-14660","severity":"moderate","public_date":"2018-10-31T08:00:00Z","advisories":["RHSA-2018:3470","RHSA-2018:3432","RHSA-2018:3431"],"bugzilla":"1635926","bugzilla_description":"CVE-2018-14660 glusterfs: Repeat use of \"GF_META_LOCK_KEY\" xattr allows for memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["glusterfs-0:3.12.2-25.el7rhgs","glusterfs-0:3.12.2-25.el6","glusterfs-0:3.12.2-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14660.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-14659","severity":"moderate","public_date":"2018-10-31T08:00:00Z","advisories":["RHSA-2018:3470","RHSA-2018:3432","RHSA-2018:3431"],"bugzilla":"1635929","bugzilla_description":"CVE-2018-14659 glusterfs: Unlimited file creation via \"GF_XATTR_IOSTATS_DUMP_KEY\" xattr allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["glusterfs-0:3.12.2-25.el7rhgs","glusterfs-0:3.12.2-25.el6","glusterfs-0:3.12.2-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14659.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-14661","severity":"moderate","public_date":"2018-10-31T08:00:00Z","advisories":["RHSA-2018:3470","RHSA-2018:3432","RHSA-2018:3431"],"bugzilla":"1636880","bugzilla_description":"CVE-2018-14661 glusterfs: features/locks translator passes an user-controlled string to snprintf without a proper format string resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glusterfs-0:3.12.2-25.el7rhgs","glusterfs-0:3.12.2-25.el6","glusterfs-0:3.12.2-25.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14661.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-10904","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1601298","bugzilla_description":"CVE-2018-10904 glusterfs: Unsanitized file names in debug/io-stats translator can allow remote attackers to execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10904.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-10907","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1601642","bugzilla_description":"CVE-2018-10907 glusterfs: Stack-based buffer overflow in server-rpc-fops.c allows remote attackers to execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10907.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-10911","severity":"moderate","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470","RHSA-2018:2892","RHSA-2018:3242"],"bugzilla":"1601657","bugzilla_description":"CVE-2018-10911 glusterfs: Improper deserialization in dict.c:dict_unserialize() can allow attackers to read arbitrary memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-190->CWE-200","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10911.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-10914","severity":"moderate","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1607617","bugzilla_description":"CVE-2018-10914 glusterfs: remote denial of service of gluster volumes via posix_get_file_contents function in posix-helpers.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10914.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2018-10913","severity":"low","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1607618","bugzilla_description":"CVE-2018-10913 glusterfs:  Information Exposure in posix_get_file_contents function in posix-helpers.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10913.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2018-10923","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1610659","bugzilla_description":"CVE-2018-10923 glusterfs: I/O to arbitrary devices on storage server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2018-10924","severity":"moderate","public_date":"2018-09-04T05:30:00Z","advisories":[],"bugzilla":"1611785","bugzilla_description":"CVE-2018-10924 glusterfs: Denial-of-service via fsync(2) in Gluster FUSE client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10924.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10927","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1612658","bugzilla_description":"CVE-2018-10927 glusterfs: File status information leak and denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10927.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-10928","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1612659","bugzilla_description":"CVE-2018-10928 glusterfs: Improper resolution of symlinks allows for privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-10929","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1612660","bugzilla_description":"CVE-2018-10929 glusterfs: Arbitrary file creation on storage server allows for execution of arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10929.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-10930","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1612664","bugzilla_description":"CVE-2018-10930 glusterfs: Files can be renamed outside volume","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10930.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-10926","severity":"important","public_date":"2018-09-04T05:30:00Z","advisories":["RHSA-2018:2607","RHSA-2018:2608","RHSA-2018:3470"],"bugzilla":"1613143","bugzilla_description":"CVE-2018-10926 glusterfs: Device files can be created in arbitrary locations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["glusterfs-0:3.12.2-18.el6","glusterfs-0:3.12.2-18.el7","glusterfs-0:3.12.2-18.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10926.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2018-10841","severity":"important","public_date":"2018-06-20T10:00:00Z","advisories":["RHSA-2018:1954","RHSA-2018:1955"],"bugzilla":"1582043","bugzilla_description":"CVE-2018-10841 glusterfs: access trusted peer group via remote-host command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["glusterfs-0:3.8.4-54.11.el6","glusterfs-0:3.8.4-54.10.el7","glusterfs-0:3.8.4-54.11.el6rhs","glusterfs-0:3.8.4-54.10.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10841.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2018-1112","severity":"important","public_date":"2018-04-19T00:00:00Z","advisories":["RHSA-2018:1268","RHSA-2018:1269"],"bugzilla":"1570891","bugzilla_description":"CVE-2018-1112 glusterfs: auth.allow allows unauthenticated clients to mount gluster volumes (CVE-2018-1088 regression)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["glusterfs-0:3.8.4-54.9.el6","glusterfs-0:3.8.4-54.9.el6rhs","glusterfs-0:3.8.4-54.8.el7","glusterfs-0:3.8.4-54.8.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1112.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-1088","severity":"important","public_date":"2018-04-18T00:00:00Z","advisories":["RHSA-2018:1524","RHSA-2018:1136","RHSA-2018:1137","RHSA-2018:1275"],"bugzilla":"1558721","bugzilla_description":"CVE-2018-1088 glusterfs: Privilege escalation via gluster_shared_storage when snapshot scheduling is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["glusterfs-0:3.8.4-54.6.el7","glusterfs-0:3.8.4-54.7.el6rhs","glusterfs-0:3.8.4-54.6.el7rhgs","glusterfs-0:3.8.4-54.7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1088.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2017-15096","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":[],"bugzilla":"1504255","bugzilla_description":"CVE-2017-15096 glusterfs: Null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15096.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"1.8"},{"CVE":"CVE-2014-8177","severity":"moderate","public_date":"2015-08-21T00:00:00Z","advisories":["RHSA-2015:1845","RHSA-2015:1846"],"bugzilla":"1257525","bugzilla_description":"CVE-2014-8177 gluster-swift metadata constraints are not correctly enforced","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["swiftonfile-0:1.13.1-5.el7rhgs","glusterfs-0:3.7.1-16.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8177.json"},{"CVE":"CVE-2015-1856","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1681","RHSA-2015:1684","RHSA-2015:1845","RHSA-2015:1846"],"bugzilla":"1209994","bugzilla_description":"CVE-2015-1856 OpenStack Swift: unauthorized deletion of versioned Swift object","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["openstack-swift-0:1.13.1-6.el7ost","openstack-swift-0:2.2.0-4.el7ost","glusterfs-0:3.7.1-16.el6","openstack-swift-0:1.13.1-6.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1856.json"},{"CVE":"CVE-2015-1795","severity":"moderate","public_date":"2015-03-16T00:00:00Z","advisories":["RHSA-2017:0484","RHSA-2017:0486"],"bugzilla":"1200927","bugzilla_description":"CVE-2015-1795 glusterfs: glusterfs-server %pretrans rpm script temporary file issue","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":["glusterfs-0:3.8.4-18.el6rhs","glusterfs-0:3.8.4-18.el6","glusterfs-0:3.8.4-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1795.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2013-4186","severity":"important","public_date":"2015-02-18T00:00:00Z","advisories":[],"bugzilla":"990833","bugzilla_description":"CVE-2013-4186 Gluster: access trusted peer group via remote-host command","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4186.json"},{"CVE":"CVE-2014-3619","severity":"moderate","public_date":"2014-09-12T00:00:00Z","advisories":["RHBA-2015:0040","RHBA-2015:0038"],"bugzilla":"1138145","bugzilla_description":"CVE-2014-3619 glusterfs: fragment header infinite loop DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["glusterfs-0:3.6.0.42-1.el6","glusterfs-0:3.6.0.42-1.el6rhs","glusterfs-0:3.6.0.42-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3619.json"},{"CVE":"CVE-2012-5635","severity":"low","public_date":"2013-03-28T00:00:00Z","advisories":["RHSA-2013:0691"],"bugzilla":"886364","bugzilla_description":"CVE-2012-5635 GlusterFS: insecure temporary file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["glusterfs-0:3.3.0.7rhs-1.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5635.json"},{"CVE":"CVE-2012-4417","severity":"low","public_date":"2012-11-12T00:00:00Z","advisories":["RHSA-2012:1456"],"bugzilla":"856341","bugzilla_description":"CVE-2012-4417 GlusterFS: insecure temporary file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["glusterfs-0:3.3.0.5rhs-37.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4417.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glx-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glx-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/glx-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmock-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmock-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmock-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmock_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmock_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmock_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmp-c++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmp-c++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmp-c++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-abrt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-abrt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-abrt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-autoar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-autoar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-autoar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-backgrounds-extras_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-backgrounds-extras_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-backgrounds-extras_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-backgrounds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-backgrounds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-backgrounds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-bluetooth-libs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-bluetooth-libs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-bluetooth-libs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-bluetooth-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-bluetooth-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-bluetooth-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-bluetooth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-bluetooth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-bluetooth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-boxes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-boxes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-boxes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-calculator_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-calculator_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-calculator_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-characters_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-characters_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-characters_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-classic-session_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-classic-session_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-classic-session_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-color-manager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-color-manager_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-color-manager_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-control-center-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-control-center-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-control-center-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-control-center_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-control-center_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-control-center_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-desktop3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-desktop3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-desktop3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-desktop3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-desktop3_security_api_results.json
new file mode 100644
index 0000000..8171902
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-desktop3_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11460","severity":"moderate","public_date":"2019-04-13T00:00:00Z","advisories":[],"bugzilla":"1716284","bugzilla_description":"CVE-2019-11460 gnome-desktop: thumbnailer security bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-disk-utility_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-disk-utility_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-disk-utility_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-font-viewer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-font-viewer_security_api_results.json
new file mode 100644
index 0000000..2da3ba2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-font-viewer_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-19308","severity":"low","public_date":"2019-11-27T00:00:00Z","advisories":[],"bugzilla":"1777938","bugzilla_description":"CVE-2019-19308 gnome-font-viewer: NULL pointer dereference in text_to_glyphs in sushi-font-widget.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19308.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-cs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-cs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-cs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-de_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-de_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-de_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-es_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-es_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-es_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-fr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-fr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-fr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-gl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-gl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-gl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-hu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-hu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-hu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-it_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-it_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-it_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-pl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-pl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-pl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-pt_BR_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-pt_BR_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-pt_BR_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-ru_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-ru_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs-ru_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-getting-started-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-initial-setup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-initial-setup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-initial-setup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-keyring-pam_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-keyring-pam_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-keyring-pam_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-keyring_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-keyring_security_api_results.json
new file mode 100644
index 0000000..cdb012a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-keyring_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19358","severity":null,"public_date":"2018-07-06T00:00:00Z","advisories":[],"bugzilla":"1652194","bugzilla_description":"CVE-2018-19358 gnome-keyring: login credentials retrieval via a Secret Service API call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19358.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-20781","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1677288","bugzilla_description":"CVE-2018-20781 gnome-keyring: user's login credentials is kept in a session-child process resulting in exposed plaintext password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20781.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-logs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-logs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-logs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-menus-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-menus-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-menus-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-menus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-menus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-menus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-online-accounts-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-online-accounts-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-online-accounts-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-online-accounts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-online-accounts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-online-accounts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-online-miners_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-online-miners_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-online-miners_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-photos-tests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-photos-tests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-photos-tests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-photos_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-photos_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-photos_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-remote-desktop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-remote-desktop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-remote-desktop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-screenshot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-screenshot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-screenshot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-session-wayland-session_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-session-wayland-session_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-session-wayland-session_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-session-xsession_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-session-xsession_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-session-xsession_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-session_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-session_security_api_results.json
new file mode 100644
index 0000000..09c4137
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-session_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-11171","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1470706","bugzilla_description":"CVE-2017-11171 gnome-session: Bad reference counting in accept_ice_connection() permits resource exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11171.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-settings-daemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-settings-daemon_security_api_results.json
new file mode 100644
index 0000000..23bf8cc
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-settings-daemon_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14391","severity":"moderate","public_date":"2020-09-08T00:00:00Z","advisories":[],"bugzilla":"1873093","bugzilla_description":"CVE-2020-14391 gnome-settings-daemon: Red Hat Customer Portal password logged and passed as command line argument when user registers through GNOME control center","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14391.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-apps-menu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-apps-menu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-apps-menu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-auto-move-windows_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-auto-move-windows_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-auto-move-windows_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-dash-to-dock_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-dash-to-dock_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-dash-to-dock_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-desktop-icons_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-desktop-icons_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-desktop-icons_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-disable-screenshield_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-disable-screenshield_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-disable-screenshield_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-drive-menu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-drive-menu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-drive-menu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-horizontal-workspaces_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-horizontal-workspaces_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-horizontal-workspaces_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-launch-new-instance_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-launch-new-instance_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-launch-new-instance_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-native-window-placement_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-native-window-placement_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-native-window-placement_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-no-hot-corner_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-no-hot-corner_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-no-hot-corner_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-panel-favorites_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-panel-favorites_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-panel-favorites_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-places-menu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-places-menu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-places-menu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-screenshot-window-sizer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-screenshot-window-sizer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-screenshot-window-sizer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-systemMonitor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-systemMonitor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-systemMonitor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-top-icons_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-top-icons_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-top-icons_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-updates-dialog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-updates-dialog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-updates-dialog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-user-theme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-user-theme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-user-theme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-window-grouper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-window-grouper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-window-grouper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-window-list_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-window-list_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-window-list_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-windowsNavigator_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-windowsNavigator_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-windowsNavigator_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-workspace-indicator_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-workspace-indicator_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell-extension-workspace-indicator_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell_security_api_results.json
new file mode 100644
index 0000000..7a168aa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-shell_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-17489","severity":"low","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1868418","bugzilla_description":"CVE-2020-17489 gnome-shell: Password from logged-out user may be shown on login screen","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17489.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-3820","severity":"moderate","public_date":"2019-02-05T12:00:00Z","advisories":["RHBA-2020:1539","RHSA-2020:1021","RHBA-2020:1540"],"bugzilla":"1669391","bugzilla_description":"CVE-2019-3820 gnome-shell: partial lock screen bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","gnome-shell-0:3.28.3-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3820.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-8288","severity":"low","public_date":"2017-04-25T00:00:00Z","advisories":[],"bugzilla":"1446088","bugzilla_description":"CVE-2017-8288 gnome-shell: Mishandling extensions that fail to reload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8288.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2014-7300","severity":"low","public_date":"2014-09-27T00:00:00Z","advisories":["RHSA-2015:0535"],"bugzilla":"1147917","bugzilla_description":"CVE-2014-7300 gnome-shell: lockscreen bypass with printscreen key","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-285->CWE-770->CWE-305","affected_packages":["gnome-shell-0:3.8.4-45.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7300.json"},{"CVE":"CVE-2013-7220","severity":"moderate","public_date":"2013-11-14T00:00:00Z","advisories":[],"bugzilla":"1030431","bugzilla_description":"CVE-2013-7220 gnome-shell: blind command execution via activities search keyboard focus","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7220.json"},{"CVE":"CVE-2013-7221","severity":"moderate","public_date":"2013-11-14T00:00:00Z","advisories":[],"bugzilla":"1046839","bugzilla_description":"CVE-2013-7221 gnome-shell: run command dialog visible above screen locker","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7221.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-software-editor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-software-editor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-software-editor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-software_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-software_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-software_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-system-monitor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-system-monitor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-system-monitor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-terminal-nautilus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-terminal-nautilus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-terminal-nautilus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-terminal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-terminal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-terminal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-themes-standard_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-themes-standard_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-themes-standard_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-tweaks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-tweaks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-tweaks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-user-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-user-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-user-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-video-effects_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-video-effects_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnome-video-effects_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-efi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-efi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-efi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-efi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-efi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-efi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-mono-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-mono-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-mono-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-serif-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-serif-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnu-free-serif-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnupg2-smime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnupg2-smime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnupg2-smime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnupg2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnupg2_security_api_results.json
new file mode 100644
index 0000000..f6c3c01
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnupg2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-25125","severity":"moderate","public_date":"2020-09-04T00:00:00Z","advisories":[],"bugzilla":"1875675","bugzilla_description":"CVE-2020-25125 gnupg: AEAD preference list overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-129","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25125.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-14855","severity":"low","public_date":"2020-01-09T00:00:00Z","advisories":[],"bugzilla":"1770900","bugzilla_description":"CVE-2019-14855 gnupg2: OpenPGP Key Certification Forgeries with SHA-1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-13050","severity":"moderate","public_date":"2019-06-29T00:00:00Z","advisories":[],"bugzilla":"1726146","bugzilla_description":"CVE-2019-13050 GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13050.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000858","severity":"moderate","public_date":"2018-11-23T00:00:00Z","advisories":[],"bugzilla":"1663917","bugzilla_description":"CVE-2018-1000858 gnupg2: Cross site request forgery in dirmngr resulting in an information disclosure or denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-12020","severity":"important","public_date":"2018-06-08T00:00:00Z","advisories":["RHSA-2018:2180","RHSA-2018:2181"],"bugzilla":"1589620","bugzilla_description":"CVE-2018-12020 gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["gnupg2-0:2.0.14-9.el6_10","gnupg2-0:2.0.22-5.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-9234","severity":"low","public_date":"2018-03-19T00:00:00Z","advisories":[],"bugzilla":"1563930","bugzilla_description":"CVE-2018-9234 GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9234.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.2"},{"CVE":"CVE-2014-3591","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198145","bugzilla_description":"CVE-2014-3591 libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3591.json"},{"CVE":"CVE-2015-0837","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198147","bugzilla_description":"CVE-2015-0837 libgcrypt: last-level cache side-channel attack","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0837.json"},{"CVE":"CVE-2015-1606","severity":"low","public_date":"2015-02-13T00:00:00Z","advisories":[],"bugzilla":"1193008","bugzilla_description":"CVE-2015-1606 gnupg2: invalid memory read using a garbled keyring","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1606.json"},{"CVE":"CVE-2015-1607","severity":"low","public_date":"2015-02-13T00:00:00Z","advisories":[],"bugzilla":"1193009","bugzilla_description":"CVE-2015-1607 gnupg2: memcpy with overlapping ranges (keybox_search.c)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1607.json"},{"CVE":"CVE-2014-4617","severity":"moderate","public_date":"2014-06-20T00:00:00Z","advisories":[],"bugzilla":"1112509","bugzilla_description":"CVE-2014-4617 gnupg: infinite loop when decompressing data packets","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4617.json"},{"CVE":"CVE-2013-4402","severity":"moderate","public_date":"2013-10-05T00:00:00Z","advisories":["RHSA-2013:1458","RHSA-2013:1459"],"bugzilla":"1015685","bugzilla_description":"CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["gnupg2-0:2.0.10-6.el5_10","gnupg2-0:2.0.14-6.el6_4","gnupg-0:1.4.5-18.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4402.json"},{"CVE":"CVE-2013-4351","severity":"low","public_date":"2013-03-12T00:00:00Z","advisories":["RHSA-2013:1458","RHSA-2013:1459"],"bugzilla":"1010137","bugzilla_description":"CVE-2013-4351 gnupg: treats no-usage-permitted keys as all-usages-permitted","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["gnupg2-0:2.0.10-6.el5_10","gnupg2-0:2.0.14-6.el6_4","gnupg-0:1.4.5-18.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4351.json"},{"CVE":"CVE-2012-6085","severity":"low","public_date":"2012-12-29T00:00:00Z","advisories":["RHSA-2013:1458","RHSA-2013:1459"],"bugzilla":"891142","bugzilla_description":"CVE-2012-6085 GnuPG: read_block() corrupt key input validation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["gnupg2-0:2.0.10-6.el5_10","gnupg2-0:2.0.14-6.el6_4","gnupg-0:1.4.5-18.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6085.json"},{"CVE":"CVE-2010-2547","severity":"moderate","public_date":"2010-07-23T00:00:00Z","advisories":["RHSA-2010:0603"],"bugzilla":"618156","bugzilla_description":"CVE-2010-2547 GnuPG 2: use-after-free when importing certificate with many alternate names","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["gnupg2-0:2.0.10-3.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2547.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnuplot-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnuplot-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnuplot-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnuplot-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnuplot-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnuplot-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnuplot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnuplot_security_api_results.json
new file mode 100644
index 0000000..7cc2963
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnuplot_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-25559","severity":"moderate","public_date":"2020-09-16T00:00:00Z","advisories":[],"bugzilla":"1882320","bugzilla_description":"CVE-2020-25559 gnuplot: double free when executing print_set_output may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25559.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-25412","severity":"moderate","public_date":"2020-09-16T00:00:00Z","advisories":[],"bugzilla":"1882322","bugzilla_description":"CVE-2020-25412 gnuplot: out-of-bounds-write from strncpy() may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25412.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-19490","severity":null,"public_date":"2018-11-19T00:00:00Z","advisories":[],"bugzilla":"1656174","bugzilla_description":"CVE-2018-19490 gnuplot: heap-based buffer overflow in df_generate_ascii_array_entry","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19490.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19491","severity":null,"public_date":"2018-11-19T00:00:00Z","advisories":[],"bugzilla":"1656179","bugzilla_description":"CVE-2018-19491 gnuplot:  buffer overflow with an arbitrary amount of data in the PS_options","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19491.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19492","severity":null,"public_date":"2018-11-19T00:00:00Z","advisories":[],"bugzilla":"1656183","bugzilla_description":"CVE-2018-19492 gnuplot: buffer overflow in cairotrm_options function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9670","severity":"moderate","public_date":"2017-06-15T00:00:00Z","advisories":[],"bugzilla":"1462135","bugzilla_description":"CVE-2017-9670 gnuplot: Uninitialized stack variable in load_tic_series()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9670.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-c++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-c++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-c++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-dane_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-dane_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-dane_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls_security_api_results.json
new file mode 100644
index 0000000..c47fb86
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gnutls_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24659","severity":"moderate","public_date":"2020-09-04T00:00:00Z","advisories":[],"bugzilla":"1872021","bugzilla_description":"CVE-2020-24659 gnutls: Heap buffer overflow in handshake with no_renegotiation alert sent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24659.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-13777","severity":"important","public_date":"2020-06-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2639","RHSA-2020:2637","RHSA-2020:2638"],"bugzilla":"1843723","bugzilla_description":"CVE-2020-13777 gnutls: session resumption works without master key allowing MITM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["gnutls-0:3.6.8-9.el8_1","redhat-coreos-43.82.202007300301.0","gnutls-0:3.6.5-3.el8_0","gnutls-0:3.6.8-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13777.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-11501","severity":"moderate","public_date":"2020-03-27T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1998"],"bugzilla":"1821896","bugzilla_description":"CVE-2020-11501 gnutls: DTLS client hello contains a random value of all zeroes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["gnutls-0:3.6.8-10.el8_2","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11501.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-3829","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2019:3600","RHBA-2019:3303"],"bugzilla":"1677048","bugzilla_description":"CVE-2019-3829 gnutls: use-after-free/double-free in certificate verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gnutls-0:3.6.8-8.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3829.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-3836","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2019:3600","RHBA-2019:3303"],"bugzilla":"1678411","bugzilla_description":"CVE-2019-3836 gnutls: invalid pointer access upon receiving async handshake messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["gnutls-0:3.6.8-8.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3836.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-16868","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1654929","bugzilla_description":"CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16868.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-10844","severity":"moderate","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:3050"],"bugzilla":"1582571","bugzilla_description":"CVE-2018-10844 gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["gnutls-0:3.3.29-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10844.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-10845","severity":"moderate","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:3050"],"bugzilla":"1582572","bugzilla_description":"CVE-2018-10845 gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["gnutls-0:3.3.29-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10845.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-10846","severity":"moderate","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2018:3050"],"bugzilla":"1582574","bugzilla_description":"CVE-2018-10846 gnutls: \"Just in Time\" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["gnutls-0:3.3.29-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10846.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-7507","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:2292"],"bugzilla":"1454621","bugzilla_description":"CVE-2017-7507 gnutls: Crash upon receiving well-formed status_request extension","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7869","severity":"moderate","public_date":"2017-04-14T00:00:00Z","advisories":["RHSA-2017:2292"],"bugzilla":"1443033","bugzilla_description":"CVE-2017-7869 gnutls: Out-of-bounds write related to the cdk_pkt_read function (GNUTLS-SA-2017-3)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-5334","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:2292"],"bugzilla":"1411835","bugzilla_description":"CVE-2017-5334 gnutls: Double-free while decoding crafted X.509 certificates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5334.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-5337","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:2292","RHSA-2017:0574"],"bugzilla":"1411836","bugzilla_description":"CVE-2017-5337 gnutls: Heap read overflow in read-packet.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["gnutls-0:2.12.23-21.el6","gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5337.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-5335","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:2292","RHSA-2017:0574"],"bugzilla":"1412235","bugzilla_description":"CVE-2017-5335 gnutls: Out of memory while parsing crafted OpenPGP certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["gnutls-0:2.12.23-21.el6","gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5335.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5336","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:2292","RHSA-2017:0574"],"bugzilla":"1412236","bugzilla_description":"CVE-2017-5336 gnutls: Stack overflow in cdk_pk_get_keyid","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["gnutls-0:2.12.23-21.el6","gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5336.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8610","severity":"moderate","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:0286","RHSA-2017:0574"],"bugzilla":"1384743","bugzilla_description":"CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","openssl-0:1.0.1e-48.el6_8.4","gnutls-0:2.12.23-21.el6","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7444","severity":"low","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2017:2292"],"bugzilla":"1374266","bugzilla_description":"CVE-2016-7444 gnutls: Incorrect certificate validation when using OCSP responses (GNUTLS-SA-2016-3)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":["gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7444.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-2183","severity":"moderate","public_date":"2016-08-24T00:00:00Z","advisories":["RHSA-2020:0451","RHSA-2020:3842","RHSA-2017:3240","RHSA-2019:1245","RHBA-2019:2581","RHSA-2017:0462","RHSA-2017:3113","RHSA-2017:3114","RHSA-2017:2710","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:3239","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:2709","RHSA-2017:2708","RHSA-2018:2123","RHSA-2019:2859"],"bugzilla":"1369383","bugzilla_description":"CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","openshift3/metrics-heapster:v3.11.141-2","python-0:2.7.5-69.el7_5","openshift3/ose-console:v3.11.141-2","openshift3/oauth-proxy:v3.11.170-5","openshift4/ose-console:v4.5.0-202009201759.p0","openshift3/ose-kube-rbac-proxy:v3.11.141-2","openshift3/ose-metrics-server:v3.11.141-2","java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8","openshift4/ose-oauth-proxy:v4.1.18-201909201915"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-4456","severity":"moderate","public_date":"2016-06-06T00:00:00Z","advisories":[],"bugzilla":"1343505","bugzilla_description":"CVE-2016-4456 gnutls: Environment variable GNUTLS_KEYLOGFILE is obtained via insecure getenv()","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2016-4008","severity":"moderate","public_date":"2016-04-11T00:00:00Z","advisories":[],"bugzilla":"1325965","bugzilla_description":"CVE-2016-4008 libtasn1: infinite loop while parsing DER certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4008.json"},{"CVE":"CVE-2015-7575","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0012","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0007","RHSA-2016:0008","RHSA-2016:0049"],"bugzilla":"1289841","bugzilla_description":"CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.2","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","nss-0:3.19.1-19.el7_2","gnutls-0:3.3.8-14.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","gnutls-0:2.8.5-19.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","nss-0:3.19.1-8.el6_7","openssl-1:1.0.1e-51.el7_2.2","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json"},{"CVE":"CVE-2015-8313","severity":"low","public_date":"2015-12-01T00:00:00Z","advisories":[],"bugzilla":"1287572","bugzilla_description":"CVE-2015-8313 gnutls: First byte of the padding in CBC mode is not checked","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8313.json"},{"CVE":"CVE-2015-6251","severity":"moderate","public_date":"2015-08-10T00:00:00Z","advisories":[],"bugzilla":"1251902","bugzilla_description":"CVE-2015-6251 gnutls: double free flaw in certificate DN decoding (GNUTLS-SA-2015-3)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6251.json"},{"CVE":"CVE-2015-2721","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1664","RHSA-2015:1185"],"bugzilla":"1236967","bugzilla_description":"CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["nss-0:3.19.1-3.el6_6","nss-0:3.19.1-1.el5_11","nss-0:3.19.1-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2721.json"},{"CVE":"CVE-2015-3308","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":[],"bugzilla":"1212459","bugzilla_description":"CVE-2015-3308 gnutls: use-after-free flaw in CRL distribution points parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3308.json"},{"CVE":"CVE-2015-2808","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1207101","bugzilla_description":"CVE-2015-2808 SSL/TLS: \"Invariance Weakness\" vulnerability in RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2808.json"},{"CVE":"CVE-2015-0282","severity":"moderate","public_date":"2015-03-11T00:00:00Z","advisories":["RHSA-2015:1457"],"bugzilla":"1194371","bugzilla_description":"CVE-2015-0282 gnutls: RSA PKCS#1 signature verification forgery","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["gnutls-0:2.8.5-18.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0282.json"},{"CVE":"CVE-2015-0294","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":["RHSA-2015:1457"],"bugzilla":"1196323","bugzilla_description":"CVE-2015-0294 gnutls: certificate algorithm consistency checking issue","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-295","affected_packages":["gnutls-0:2.8.5-18.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0294.json"},{"CVE":"CVE-2014-8564","severity":"moderate","public_date":"2014-11-10T00:00:00Z","advisories":["RHSA-2014:1846"],"bugzilla":"1161443","bugzilla_description":"CVE-2014-8564 gnutls: Heap corruption when generating key ID for ECC (GNUTLS-SA-2014-5)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["gnutls-0:3.1.18-10.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8564.json"},{"CVE":"CVE-2014-3566","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2015:1546","RHSA-2015:1545","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2014:1881","RHSA-2014:1880","RHSA-2015:0080","RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2014:1920","RHSA-2015:0067","RHSA-2015:0012","RHSA-2015:0011","RHSA-2015:0264","RHSA-2015:0010","RHSA-2015:0086","RHSA-2015:0085","RHBA-2014:1857"],"bugzilla":"1152789","bugzilla_description":"CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-636|CWE-757)","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","openshift-origin-node-proxy-0:1.16.4.2-1.el6op","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","openshift-origin-node-proxy-0:1.22.3.4-1.el6op","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json"},{"CVE":"CVE-2014-4607","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":["RHSA-2014:0861"],"bugzilla":"1112418","bugzilla_description":"CVE-2014-4607 lzo: lzo1x_decompress_safe() integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["lzo-0:2.03-3.1.el6_5.1","lzo-0:2.06-6.el7_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4607.json"},{"CVE":"CVE-2014-3466","severity":"important","public_date":"2014-05-30T00:00:00Z","advisories":["RHSA-2014:0595","RHSA-2014:0684","RHSA-2014:0815","RHSA-2014:0594"],"bugzilla":"1101932","bugzilla_description":"CVE-2014-3466 gnutls: insufficient session id length check in _gnutls_read_server_hello (GNUTLS-SA-2014-3)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-130->CWE-119","affected_packages":["gnutls-0:2.8.5-14.el6_5","gnutls-0:3.1.18-9.el7_0","rhev-hypervisor6-0:6.5-20140624.0.el6ev","gnutls-0:1.4.1-16.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3466.json"},{"CVE":"CVE-2014-3467","severity":"moderate","public_date":"2014-05-25T00:00:00Z","advisories":["RHSA-2014:0596","RHSA-2014:0687","RHSA-2014:0815","RHSA-2014:0594"],"bugzilla":"1102022","bugzilla_description":"CVE-2014-3467 libtasn1: multiple boundary check issues","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libtasn1-0:2.3-6.el6_5","rhev-hypervisor6-0:6.5-20140624.0.el6ev","gnutls-0:1.4.1-16.el5_10","libtasn1-0:3.3-5.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3467.json"},{"CVE":"CVE-2014-3468","severity":"moderate","public_date":"2014-05-25T00:00:00Z","advisories":["RHSA-2014:0596","RHSA-2014:0687","RHSA-2014:0815","RHSA-2014:0594"],"bugzilla":"1102323","bugzilla_description":"CVE-2014-3468 libtasn1: asn1_get_bit_der() can return negative bit length","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-392->CWE-119","affected_packages":["libtasn1-0:2.3-6.el6_5","rhev-hypervisor6-0:6.5-20140624.0.el6ev","gnutls-0:1.4.1-16.el5_10","libtasn1-0:3.3-5.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3468.json"},{"CVE":"CVE-2014-3469","severity":"moderate","public_date":"2014-05-25T00:00:00Z","advisories":["RHSA-2014:0596","RHSA-2014:0687","RHSA-2014:0815","RHSA-2014:0594"],"bugzilla":"1102329","bugzilla_description":"CVE-2014-3469 libtasn1: asn1_read_value_type() NULL pointer dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["libtasn1-0:2.3-6.el6_5","rhev-hypervisor6-0:6.5-20140624.0.el6ev","gnutls-0:1.4.1-16.el5_10","libtasn1-0:3.3-5.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3469.json"},{"CVE":"CVE-2014-0092","severity":"important","public_date":"2014-03-03T00:00:00Z","advisories":["RHSA-2014:0246","RHSA-2014:0288","RHSA-2014:0247","RHSA-2014:0339"],"bugzilla":"1069865","bugzilla_description":"CVE-2014-0092 gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["gnutls-0:1.4.1-10.el5_9.3","gnutls-0:1.4.1-14.el5_10","gnutls-0:2.8.5-13.el6_5","rhev-hypervisor6-0:6.5-20140324.0.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0092.json"},{"CVE":"CVE-2014-1959","severity":"moderate","public_date":"2014-02-12T00:00:00Z","advisories":[],"bugzilla":"1065092","bugzilla_description":"CVE-2014-1959 gnutls: incorrect handling of V1 intermediate certificates (GNUTLS-SA-2014-1)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1959.json"},{"CVE":"CVE-2014-3465","severity":"moderate","public_date":"2014-01-31T00:00:00Z","advisories":["RHSA-2014:0684"],"bugzilla":"1101734","bugzilla_description":"CVE-2014-3465 gnutls: gnutls_x509_dn_oid_name NULL pointer dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["gnutls-0:3.1.18-9.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3465.json"},{"CVE":"CVE-2013-4487","severity":"moderate","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1025637","bugzilla_description":"CVE-2013-4487 gnutls: dane_query_tlsa() CVE-2013-4466 fix off-by-one","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4487.json"},{"CVE":"CVE-2013-4466","severity":"moderate","public_date":"2013-10-23T00:00:00Z","advisories":[],"bugzilla":"1022913","bugzilla_description":"CVE-2013-4466 gnutls: dane_query_tlsa() buffer overflow (GNUTLS-SA-2013-3)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4466.json"},{"CVE":"CVE-2007-6755","severity":"moderate","public_date":"2013-10-11T00:00:00Z","advisories":[],"bugzilla":"1046045","bugzilla_description":"CVE-2007-6755 Dual_EC_DRBG: weak pseudo random number generator","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6755.json"},{"CVE":"CVE-2013-2116","severity":"important","public_date":"2013-05-29T00:00:00Z","advisories":["RHSA-2013:1076","RHSA-2013:0883"],"bugzilla":"966754","bugzilla_description":"CVE-2013-2116 gnutls: out of bounds read in _gnutls_ciphertext2compressed (GNUTLS-SA-2013-2)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gnutls-0:1.4.1-10.el5_9.2","gnutls-0:2.8.5-10.el6_4.2","rhev-hypervisor6-0:6.4-20130709.0.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2116.json"},{"CVE":"CVE-2013-2566","severity":"moderate","public_date":"2013-03-15T00:00:00Z","advisories":[],"bugzilla":"921947","bugzilla_description":"CVE-2013-2566 SSL/TLS: Attack against RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2566.json"},{"CVE":"CVE-2013-1619","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0636","RHSA-2013:0588"],"bugzilla":"908238","bugzilla_description":"CVE-2013-1619 gnutls: TLS CBC padding timing attack (lucky-13)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gnutls-0:1.4.1-10.el5_9.1","rhev-hypervisor6-0:6.4-20130306.2.el6_4","gnutls-0:2.8.5-10.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1619.json"},{"CVE":"CVE-2012-4929","severity":"moderate","public_date":"2012-09-13T00:00:00Z","advisories":["RHSA-2013:0636","RHSA-2013:0587","RHSA-2014:0416"],"bugzilla":"857051","bugzilla_description":"CVE-2012-4929 SSL/TLS CRIME attack against HTTPS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4929.json"},{"CVE":"CVE-2012-1573","severity":"important","public_date":"2012-03-21T00:00:00Z","advisories":["RHSA-2012:0428","RHSA-2012:0429","RHSA-2012:0531","RHSA-2012:0488"],"bugzilla":"805432","bugzilla_description":"CVE-2012-1573 gnutls: TLS record handling issue (GNUTLS-SA-2012-2, MU-201202-01)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["gnutls-0:2.8.5-4.el6_2.2","rhev-hypervisor6-0:6.2-20120423.1.el6_2","gnutls-0:1.4.1-7.el5_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1573.json"},{"CVE":"CVE-2012-1569","severity":"important","public_date":"2012-03-19T00:00:00Z","advisories":["RHSA-2012:0427","RHSA-2012:0428","RHSA-2012:0531","RHSA-2012:0488"],"bugzilla":"804920","bugzilla_description":"CVE-2012-1569 libtasn1: DER decoding buffer overflow (GNUTLS-SA-2012-3, MU-201202-02)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtasn1-0:2.3-3.el6_2.1","rhev-hypervisor6-0:6.2-20120423.1.el6_2","gnutls-0:1.4.1-7.el5_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1569.json"},{"CVE":"CVE-2012-1663","severity":"moderate","public_date":"2012-02-19T00:00:00Z","advisories":[],"bugzilla":"803169","bugzilla_description":"CVE-2012-1663 gnutls: double-free vulnerability in libgnutls 3.0.x","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1663.json"},{"CVE":"CVE-2012-0390","severity":"moderate","public_date":"2012-01-05T00:00:00Z","advisories":[],"bugzilla":"772132","bugzilla_description":"CVE-2012-0390 gnutls: DTLS plaintext recovery attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0390.json"},{"CVE":"CVE-2011-4128","severity":"low","public_date":"2011-11-07T00:00:00Z","advisories":["RHSA-2012:0428","RHSA-2012:0429"],"bugzilla":"752308","bugzilla_description":"CVE-2011-4128 gnutls: buffer overflow in gnutls_session_get_data() (GNUTLS-SA-2011-2)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gnutls-0:2.8.5-4.el6_2.2","gnutls-0:1.4.1-7.el5_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4128.json"},{"CVE":"CVE-2011-3389","severity":"moderate","public_date":"2011-09-10T00:00:00Z","advisories":["RHSA-2011:1384","RHSA-2012:0508","RHSA-2011:1380","RHSA-2012:0034","RHSA-2012:0343","RHSA-2013:1455","RHSA-2012:0006"],"bugzilla":"737506","bugzilla_description":"CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2","java-1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3389.json"},{"CVE":"CVE-2010-0731","severity":"moderate","public_date":"2010-03-25T00:00:00Z","advisories":["RHSA-2010:0167"],"bugzilla":"573028","bugzilla_description":"CVE-2010-0731 gnutls: gnutls_x509_crt_get_serial incorrect serial decoding from ASN1 (BE64) [GNUTLS-SA-2010-1]","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["gnutls-0:1.0.20-4.el4_8.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0731.json"},{"CVE":"CVE-2014-8155","severity":"moderate","public_date":"2010-03-14T00:00:00Z","advisories":["RHSA-2015:1457"],"bugzilla":"1197995","bugzilla_description":"CVE-2014-8155 gnutls: gnutls does not perform date/time checks on CA certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-325","affected_packages":["gnutls-0:2.8.5-18.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8155.json"},{"CVE":"CVE-2009-3555","severity":"moderate","public_date":"2009-11-05T00:00:00Z","advisories":["RHSA-2009:1580","RHSA-2010:0408","RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2010:0786","RHSA-2010:0167","RHSA-2010:0166","RHSA-2010:0165","RHSA-2010:0440","RHSA-2010:0164","RHSA-2010:0163","RHSA-2010:0162","RHSA-2009:1579","RHSA-2009:1694","RHSA-2010:0807","RHSA-2010:0119","RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2011:0880","RHSA-2010:0155","RHSA-2010:0770","RHSA-2010:0011","RHSA-2015:1591","RHSA-2010:0130"],"bugzilla":"533125","bugzilla_description":"CVE-2009-3555 TLS: MITM attacks via session renegotiation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-300","affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","httpd-0:2.2.3-31.el5_4.2","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el5","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","openssl-0:0.9.8e-12.el5_4.6","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el4_8","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","rhev-hypervisor-0:5.4-2.1.12.1.el5_4rhev2_1","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5","openssl097a-0:0.9.7a-9.el5_4.2","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","httpd22-0:2.2.10-25.1.ep5.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","httpd-0:2.0.52-41.ent.6","gnutls-0:1.0.20-4.el4_8.7","httpd-0:2.2.10-11.ep5.el5","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","httpd-0:2.0.46-77.ent","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4","pulp-0:2.6.0.15-1.el7sat","openssl-0:0.9.7a-33.26"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3555.json"},{"CVE":"CVE-2009-2730","severity":"moderate","public_date":"2009-08-04T00:00:00Z","advisories":["RHSA-2009:1232"],"bugzilla":"516231","bugzilla_description":"CVE-2009-2730 gnutls: incorrect verification of SSL certificate with NUL in name (GNUTLS-SA-2009-4)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["gnutls-0:1.0.20-4.el4_8.3","gnutls-0:1.4.1-3.el5_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2730.json"},{"CVE":"CVE-2009-2409","severity":"moderate","public_date":"2009-07-29T00:00:00Z","advisories":["RHSA-2009:1184","RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1186","RHSA-2009:1207","RHSA-2009:1190","RHSA-2010:0166","RHSA-2009:1584","RHSA-2010:0054","RHSA-2009:1432","RHSA-2010:0163","RHSA-2009:1662"],"bugzilla":"510197","bugzilla_description":"CVE-2009-2409 deprecate MD2 in SSL cert validation (Kaminsky)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","seamonkey-0:1.0.9-0.45.el3","java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","nss-0:3.12.3.99.3-1.el4_8.2","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","openssl-0:0.9.8e-12.el5_4.1","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","openssl-0:0.9.7a-33.26","nss-0:3.12.3.99.3-1.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2409.json"},{"CVE":"CVE-2009-5138","severity":"moderate","public_date":"2009-01-09T00:00:00Z","advisories":["RHSA-2014:0247"],"bugzilla":"1069301","bugzilla_description":"CVE-2009-5138 gnutls: incorrect handling of V1 intermediate certificates","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["gnutls-0:1.4.1-14.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5138.json"},{"CVE":"CVE-2008-4989","severity":"moderate","public_date":"2008-11-10T00:00:00Z","advisories":["RHSA-2008:0982"],"bugzilla":"470079","bugzilla_description":"CVE-2008-4989 gnutls: certificate chain verification flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:1.4.1-3.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4989.json"},{"CVE":"CVE-2008-1948","severity":"critical","public_date":"2008-05-19T00:00:00Z","advisories":["RHSA-2008:0489","RHSA-2008:0492"],"bugzilla":"447461","bugzilla_description":"CVE-2008-1948 GNUTLS-SA-2008-1-1 GnuTLS buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:1.4.1-3.el5_1","gnutls-0:1.0.20-4.el4_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1948.json"},{"CVE":"CVE-2008-1949","severity":"important","public_date":"2008-05-19T00:00:00Z","advisories":["RHSA-2008:0489","RHSA-2008:0492"],"bugzilla":"447462","bugzilla_description":"CVE-2008-1949 GNUTLS-SA-2008-1-2 GnuTLS null-pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["gnutls-0:1.4.1-3.el5_1","gnutls-0:1.0.20-4.el4_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1949.json"},{"CVE":"CVE-2008-1950","severity":"important","public_date":"2008-05-19T00:00:00Z","advisories":["RHSA-2008:0489","RHSA-2008:0492"],"bugzilla":"447463","bugzilla_description":"CVE-2008-1950 GNUTLS-SA-2008-1-3 GnuTLS memory overread flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:1.4.1-3.el5_1","gnutls-0:1.0.20-4.el4_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1950.json"},{"CVE":"CVE-2006-4790","severity":"important","public_date":"2006-09-08T00:00:00Z","advisories":["RHSA-2006:0680"],"bugzilla":"1618201","bugzilla_description":"CVE-2006-4790 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:1.0.20-3.2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4790.json"},{"CVE":"CVE-2006-7239","severity":"low","public_date":"2006-08-12T00:00:00Z","advisories":["RHBA-2012:0319"],"bugzilla":"595229","bugzilla_description":"CVE-2006-7239 gnutls: unknown hash algorithm NULL pointer derefence [GNUTLS-SA-2006-2]","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["gnutls-0:1.4.1-7.el5_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7239.json"},{"CVE":"CVE-2006-0645","severity":"important","public_date":"2006-02-09T15:38:00Z","advisories":["RHSA-2006:0207"],"bugzilla":"184097","bugzilla_description":"CVE-2006-0645 - libtasn1 buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:1.0.20-3.2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0645.json"},{"CVE":"CVE-2005-1431","severity":"moderate","public_date":"2005-04-28T00:00:00Z","advisories":["RHSA-2005:430"],"bugzilla":"156856","bugzilla_description":"CVE-2005-1431 gnutls record packet parsing DoS [GNUTLS-SA-2005-1]","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:1.0.20-3.2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1431.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/go-compilers-golang-compiler_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/go-compilers-golang-compiler_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/go-compilers-golang-compiler_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/go-srpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/go-srpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/go-srpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/go-toolset_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/go-toolset_security_api_results.json
new file mode 100644
index 0000000..cdc0a72
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/go-toolset_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7919","severity":"important","public_date":"2020-01-28T00:00:00Z","advisories":[],"bugzilla":"1808041","bugzilla_description":"CVE-2020-7919 golang: Integer overflow on 32bit architectures via crafted certificate allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7919.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17596","severity":"moderate","public_date":"2019-10-17T00:00:00Z","advisories":["RHSA-2020:0101","RHSA-2020:0329"],"bugzilla":"1763310","bugzilla_description":"CVE-2019-17596 golang: invalid public key causes panic in dsa.Verify","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14809","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:3433"],"bugzilla":"1743129","bugzilla_description":"CVE-2019-14809 golang: malformed hosts in URLs leads to authorization bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-285","affected_packages":["go-toolset:rhel8-8010020190829001136.ccff3eb7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14809.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-9741","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:1300","RHSA-2019:1519"],"bugzilla":"1688230","bugzilla_description":"CVE-2019-9741 golang: CRLF injection in net/http","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["go-toolset:rhel8-8000020190509153318.b9255456"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9741.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-6486","severity":"moderate","public_date":"2019-01-24T00:00:00Z","advisories":[],"bugzilla":"1668972","bugzilla_description":"CVE-2019-6486 golang: crypto/elliptic implementations of P-521 and P-384 elliptic curves allow for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16873","severity":"moderate","public_date":"2018-12-13T20:00:00Z","advisories":[],"bugzilla":"1657563","bugzilla_description":"CVE-2018-16873 golang: \"go get\" command vulnerable to RCE via import of malicious package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16873.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16874","severity":"moderate","public_date":"2018-12-13T20:00:00Z","advisories":[],"bugzilla":"1657564","bugzilla_description":"CVE-2018-16874 golang: \"go get\" vulnerable to directory traversal via malicious package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16874.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-16875","severity":"moderate","public_date":"2018-12-13T20:00:00Z","advisories":[],"bugzilla":"1657565","bugzilla_description":"CVE-2018-16875 golang: crypto/x509 allows for denial of service via crafted TLS client certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16875.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gobject-introspection-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gobject-introspection-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gobject-introspection-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gobject-introspection_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gobject-introspection_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gobject-introspection_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-bin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-bin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-bin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-misc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-misc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-misc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-race_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-race_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-race_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-src_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-src_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-src_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-tests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-tests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang-tests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang_security_api_results.json
new file mode 100644
index 0000000..d85b473
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/golang_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8911","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869800","bugzilla_description":"CVE-2020-8911 aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8911.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2020-8912","severity":"low","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869801","bugzilla_description":"CVE-2020-8912 aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8912.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7919","severity":"important","public_date":"2020-01-28T00:00:00Z","advisories":[],"bugzilla":"1808041","bugzilla_description":"CVE-2020-7919 golang: Integer overflow on 32bit architectures via crafted certificate allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7919.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17596","severity":"moderate","public_date":"2019-10-17T00:00:00Z","advisories":["RHSA-2020:0101","RHSA-2020:0329"],"bugzilla":"1763310","bugzilla_description":"CVE-2019-17596 golang: invalid public key causes panic in dsa.Verify","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10215","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":["RHSA-2019:3771"],"bugzilla":"1735506","bugzilla_description":"CVE-2019-10215 bootstrap3-typeahead.js: Cross-site scripting via highlighter() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["openshift4/ose-prometheus:v4.2.4-201911050122"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10215.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14809","severity":"moderate","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:3433"],"bugzilla":"1743129","bugzilla_description":"CVE-2019-14809 golang: malformed hosts in URLs leads to authorization bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-285","affected_packages":["go-toolset:rhel8-8010020190829001136.ccff3eb7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14809.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-11840","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":["RHBA-2020:0063"],"bugzilla":"1691529","bugzilla_description":"CVE-2019-11840 golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["openshift-0:4.3.0-202001131753.git.0.0aee6a8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-9741","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:1300","RHSA-2019:1519"],"bugzilla":"1688230","bugzilla_description":"CVE-2019-9741 golang: CRLF injection in net/http","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["go-toolset:rhel8-8000020190509153318.b9255456"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9741.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-3826","severity":"moderate","public_date":"2019-01-31T00:00:00Z","advisories":["RHBA-2019:0326"],"bugzilla":"1672865","bugzilla_description":"CVE-2019-3826 prometheus: Stored DOM cross-site scripting (XSS) attack via crafted URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["golang-github-prometheus-prometheus-0:3.11.82-1.git.5027.9d24833.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3826.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-6486","severity":"moderate","public_date":"2019-01-24T00:00:00Z","advisories":[],"bugzilla":"1668972","bugzilla_description":"CVE-2019-6486 golang: crypto/elliptic implementations of P-521 and P-384 elliptic curves allow for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16873","severity":"moderate","public_date":"2018-12-13T20:00:00Z","advisories":[],"bugzilla":"1657563","bugzilla_description":"CVE-2018-16873 golang: \"go get\" command vulnerable to RCE via import of malicious package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16873.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16874","severity":"moderate","public_date":"2018-12-13T20:00:00Z","advisories":[],"bugzilla":"1657564","bugzilla_description":"CVE-2018-16874 golang: \"go get\" vulnerable to directory traversal via malicious package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16874.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-16875","severity":"moderate","public_date":"2018-12-13T20:00:00Z","advisories":[],"bugzilla":"1657565","bugzilla_description":"CVE-2018-16875 golang: crypto/x509 allows for denial of service via crafted TLS client certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16875.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-17846","severity":"moderate","public_date":"2018-10-01T00:00:00Z","advisories":[],"bugzilla":"1639109","bugzilla_description":"CVE-2018-17846 golang-org-x-net-html: infinite loop during html.Parse() via inSelectIM and inSelectInTableIM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17847","severity":"moderate","public_date":"2018-10-01T00:00:00Z","advisories":[],"bugzilla":"1639116","bugzilla_description":"CVE-2018-17847 golang-org-x-net-html: index out of range in (*nodeStack).pop in node.go causes runtime panic during html.Parse() call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17848","severity":"moderate","public_date":"2018-10-01T00:00:00Z","advisories":[],"bugzilla":"1639124","bugzilla_description":"CVE-2018-17848 golang-org-x-net-html: index out of range in (*insertionModeStack).pop in node.go causes runtime panic during html.Parse() call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17848.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17142","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":[],"bugzilla":"1633022","bugzilla_description":"CVE-2018-17142 golang-org-x-net-html: Runtime panic in html.Parse() via crafted html","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17142.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17143","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":[],"bugzilla":"1633036","bugzilla_description":"CVE-2018-17143 golang-org-x-net-html: Runtime panic in html.Parse() via crafted html","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17143.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17075","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":[],"bugzilla":"1633041","bugzilla_description":"CVE-2018-17075 golang-org-x-net-html: Mishandle of \"in frameset\" causes runtime panic in html.Parse() via crafted html","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-7187","severity":"moderate","public_date":"2018-02-16T00:00:00Z","advisories":[],"bugzilla":"1546386","bugzilla_description":"CVE-2018-7187 golang: arbitrary command execution via VCS path","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7187.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2018-6574","severity":"moderate","public_date":"2018-02-07T00:00:00Z","advisories":["RHSA-2018:0878","RHSA-2018:1304"],"bugzilla":"1543561","bugzilla_description":"CVE-2018-6574 golang: arbitrary code execution during \"go get\" via C compiler options","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["golang-0:1.9.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6574.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2017-15042","severity":"moderate","public_date":"2017-10-04T00:00:00Z","advisories":["RHSA-2018:0878","RHSA-2017:3463"],"bugzilla":"1498867","bugzilla_description":"CVE-2017-15042 golang: smtp.PlainAuth susceptible to man-in-the-middle password harvesting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["golang-0:1.9.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-15041","severity":"moderate","public_date":"2017-10-04T00:00:00Z","advisories":["RHSA-2018:0878","RHSA-2017:3463"],"bugzilla":"1498870","bugzilla_description":"CVE-2017-15041 golang: arbitrary code execution during \"go get\" or \"go get -d\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["golang-0:1.9.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15041.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8932","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2017:1859"],"bugzilla":"1455189","bugzilla_description":"CVE-2017-8932 golang: Elliptic curves carry propagation issue in x86-64 P-256","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":["golang-0:1.8.3-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8932.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-3204","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":[],"bugzilla":"1439748","bugzilla_description":"CVE-2017-3204 golang-googlecode-go-crypto: Go SSH library does not verify host keys by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-1000098","severity":"moderate","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:1859"],"bugzilla":"1401985","bugzilla_description":"CVE-2017-1000098 golang: net/http: multipart ReadForm close file after copy","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["golang-0:1.8.3-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000098.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-1000097","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":[],"bugzilla":"1404636","bugzilla_description":"CVE-2017-1000097 golang: User's trust preferences for root certificates were not honored","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000097.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5386","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1538"],"bugzilla":"1353798","bugzilla_description":"CVE-2016-5386 Go: sets environmental variable  based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["golang-0:1.6.3-1.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5386.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-3959","severity":"moderate","public_date":"2016-04-05T00:00:00Z","advisories":["RHSA-2016:1538"],"bugzilla":"1324343","bugzilla_description":"CVE-2016-3959 golang: infinite loop in several big integer routines","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["golang-0:1.6.3-1.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3959.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-8618","severity":"low","public_date":"2015-12-21T00:00:00Z","advisories":[],"bugzilla":"1293448","bugzilla_description":"CVE-2015-8618 golang: Carry propagation in Int.Exp Montgomery code in math/big library","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8618.json"},{"CVE":"CVE-2015-5739","severity":"moderate","public_date":"2015-07-29T00:00:00Z","advisories":["RHSA-2016:1538"],"bugzilla":"1250352","bugzilla_description":"CVE-2015-5739 CVE-2015-5740 CVE-2015-5741 golang: HTTP request smuggling in net/http library","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-444","affected_packages":["golang-0:1.6.3-1.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5739.json"},{"CVE":"CVE-2015-5740","severity":"moderate","public_date":"2015-07-29T00:00:00Z","advisories":["RHSA-2016:1538"],"bugzilla":"1250352","bugzilla_description":"CVE-2015-5739 CVE-2015-5740 CVE-2015-5741 golang: HTTP request smuggling in net/http library","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-444","affected_packages":["golang-0:1.6.3-1.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5740.json"},{"CVE":"CVE-2015-5741","severity":"moderate","public_date":"2015-07-29T00:00:00Z","advisories":["RHSA-2016:1538"],"bugzilla":"1250352","bugzilla_description":"CVE-2015-5739 CVE-2015-5740 CVE-2015-5741 golang: HTTP request smuggling in net/http library","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-444","affected_packages":["golang-0:1.6.3-1.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5741.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gom_security_api_results.json
new file mode 100644
index 0000000..0af9f36
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gom_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11840","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":["RHBA-2020:0063"],"bugzilla":"1691529","bugzilla_description":"CVE-2019-11840 golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["openshift-0:4.3.0-202001131753.git.0.0aee6a8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3204","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":[],"bugzilla":"1439748","bugzilla_description":"CVE-2017-3204 golang-googlecode-go-crypto: Go SSH library does not verify host keys by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-crosextra-caladea-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-crosextra-caladea-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-crosextra-caladea-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-crosextra-carlito-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-crosextra-carlito-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-crosextra-carlito-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-kufi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-kufi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-kufi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-sans-mono-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-sans-mono-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-sans-mono-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-serif-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-serif-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-droid-serif-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-guice-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-guice-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-guice-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-guice_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-guice_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-guice_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-cjk-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-cjk-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-cjk-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-emoji-color-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-emoji-color-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-emoji-color-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-emoji-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-emoji-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-emoji-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-kufi-arabic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-kufi-arabic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-kufi-arabic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-mono-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-mono-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-mono-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-naskh-arabic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-naskh-arabic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-naskh-arabic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-naskh-arabic-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-naskh-arabic-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-naskh-arabic-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-nastaliq-urdu-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-nastaliq-urdu-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-nastaliq-urdu-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-armenian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-armenian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-armenian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-avestan-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-avestan-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-avestan-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-balinese-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-balinese-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-balinese-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-bamum-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-bamum-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-bamum-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-batak-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-batak-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-batak-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-bengali-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-bengali-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-bengali-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-bengali-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-bengali-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-bengali-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-brahmi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-brahmi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-brahmi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-buginese-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-buginese-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-buginese-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-buhid-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-buhid-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-buhid-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-canadian-aboriginal-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-canadian-aboriginal-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-canadian-aboriginal-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-carian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-carian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-carian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cham-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cham-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cham-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cherokee-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cherokee-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cherokee-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cjk-jp-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cjk-jp-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cjk-jp-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cjk-ttc-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cjk-ttc-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cjk-ttc-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-coptic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-coptic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-coptic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cuneiform-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cuneiform-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cuneiform-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cypriot-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cypriot-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-cypriot-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-deseret-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-deseret-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-deseret-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-devanagari-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-devanagari-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-devanagari-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-devanagari-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-devanagari-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-devanagari-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-egyptian-hieroglyphs-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-egyptian-hieroglyphs-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-egyptian-hieroglyphs-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ethiopic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ethiopic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ethiopic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-georgian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-georgian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-georgian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-glagolitic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-glagolitic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-glagolitic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gothic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gothic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gothic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gujarati-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gujarati-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gujarati-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gujarati-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gujarati-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gujarati-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gurmukhi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gurmukhi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gurmukhi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gurmukhi-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gurmukhi-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-gurmukhi-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-hanunoo-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-hanunoo-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-hanunoo-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-hebrew-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-hebrew-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-hebrew-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-imperial-aramaic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-imperial-aramaic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-imperial-aramaic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-inscriptional-pahlavi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-inscriptional-pahlavi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-inscriptional-pahlavi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-inscriptional-parthian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-inscriptional-parthian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-inscriptional-parthian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-javanese-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-javanese-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-javanese-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kaithi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kaithi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kaithi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kannada-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kannada-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kannada-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kannada-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kannada-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kannada-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kayah-li-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kayah-li-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kayah-li-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kharoshthi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kharoshthi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-kharoshthi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-khmer-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-khmer-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-khmer-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-khmer-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-khmer-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-khmer-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lao-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lao-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lao-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lao-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lao-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lao-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lepcha-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lepcha-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lepcha-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-limbu-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-limbu-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-limbu-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-linear-b-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-linear-b-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-linear-b-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lisu-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lisu-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lisu-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lycian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lycian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lycian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lydian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lydian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-lydian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-malayalam-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-malayalam-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-malayalam-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-malayalam-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-malayalam-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-malayalam-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-mandaic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-mandaic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-mandaic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-meetei-mayek-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-meetei-mayek-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-meetei-mayek-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-mongolian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-mongolian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-mongolian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-myanmar-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-myanmar-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-myanmar-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-myanmar-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-myanmar-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-myanmar-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-new-tai-lue-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-new-tai-lue-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-new-tai-lue-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-nko-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-nko-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-nko-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ogham-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ogham-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ogham-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ol-chiki-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ol-chiki-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ol-chiki-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-italic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-italic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-italic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-persian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-persian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-persian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-south-arabian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-south-arabian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-south-arabian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-turkic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-turkic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-old-turkic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-oriya-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-oriya-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-oriya-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-oriya-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-oriya-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-oriya-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-osmanya-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-osmanya-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-osmanya-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-phags-pa-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-phags-pa-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-phags-pa-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-phoenician-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-phoenician-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-phoenician-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-rejang-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-rejang-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-rejang-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-runic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-runic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-runic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-samaritan-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-samaritan-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-samaritan-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-saurashtra-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-saurashtra-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-saurashtra-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-shavian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-shavian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-shavian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-sinhala-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-sinhala-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-sinhala-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-sundanese-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-sundanese-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-sundanese-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syloti-nagri-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syloti-nagri-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syloti-nagri-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-symbols-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-symbols-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-symbols-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syriac-eastern-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syriac-eastern-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syriac-eastern-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syriac-estrangela-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syriac-estrangela-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syriac-estrangela-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syriac-western-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syriac-western-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-syriac-western-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tagalog-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tagalog-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tagalog-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tagbanwa-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tagbanwa-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tagbanwa-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tai-le-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tai-le-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tai-le-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tai-tham-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tai-tham-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tai-tham-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tai-viet-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tai-viet-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tai-viet-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tamil-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tamil-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tamil-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tamil-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tamil-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tamil-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-telugu-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-telugu-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-telugu-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-telugu-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-telugu-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-telugu-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-thaana-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-thaana-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-thaana-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-thai-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-thai-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-thai-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-thai-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-thai-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-thai-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tibetan-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tibetan-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tibetan-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tifinagh-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tifinagh-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-tifinagh-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ugaritic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ugaritic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ugaritic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ui-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ui-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-ui-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-vai-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-vai-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-vai-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-yi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-yi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-sans-yi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-armenian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-armenian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-armenian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-bengali-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-bengali-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-bengali-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-cjk-ttc-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-cjk-ttc-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-cjk-ttc-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-devanagari-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-devanagari-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-devanagari-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-georgian-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-georgian-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-georgian-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-gujarati-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-gujarati-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-gujarati-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-kannada-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-kannada-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-kannada-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-khmer-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-khmer-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-khmer-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-lao-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-lao-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-lao-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-malayalam-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-malayalam-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-malayalam-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-tamil-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-tamil-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-tamil-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-telugu-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-telugu-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-telugu-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-thai-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-thai-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-noto-serif-thai-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-roboto-slab-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-roboto-slab-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/google-roboto-slab-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gperf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gperf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gperf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgme-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgme-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgme-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgme_security_api_results.json
new file mode 100644
index 0000000..b4199d7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgme_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-3564","severity":"low","public_date":"2014-07-30T00:00:00Z","advisories":[],"bugzilla":"1113267","bugzilla_description":"CVE-2014-3564 gpgme: heap-based buffer overflow in gpgsm status handler","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3564.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgmepp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgmepp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgmepp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgmepp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgmepp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpgmepp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpm-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpm-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpm-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gpm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-azure-monitor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-azure-monitor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-azure-monitor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-cloudwatch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-cloudwatch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-cloudwatch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-elasticsearch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-elasticsearch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-elasticsearch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-graphite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-graphite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-graphite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-influxdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-influxdb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-influxdb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-loki_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-loki_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-loki_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-mssql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-mssql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-mssql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-opentsdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-opentsdb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-opentsdb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-pcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-pcp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-pcp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-postgres_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-postgres_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-postgres_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-prometheus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-prometheus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-prometheus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-stackdriver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-stackdriver_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana-stackdriver_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana_security_api_results.json
new file mode 100644
index 0000000..838d9ef
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grafana_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15216","severity":"moderate","public_date":"2020-09-30T00:00:00Z","advisories":[],"bugzilla":"1884118","bugzilla_description":"CVE-2020-15216 goxmldsig: carefully crafted XML file could allow to bypass signature validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15216.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-7733","severity":"low","public_date":"2020-09-12T00:00:00Z","advisories":[],"bugzilla":"1879733","bugzilla_description":"CVE-2020-7733 ua-parser-js: Regular expression denial of service via the regex","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7733.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19499","severity":"moderate","public_date":"2020-08-27T00:00:00Z","advisories":[],"bugzilla":"1873615","bugzilla_description":"CVE-2019-19499 grafana: arbitrary file read via MySQL data source","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19499.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-7711","severity":"moderate","public_date":"2020-08-14T00:00:00Z","advisories":[],"bugzilla":"1871691","bugzilla_description":"CVE-2020-7711 goxmldsig:  sending malformed XML signatures could result in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7711.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8911","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869800","bugzilla_description":"CVE-2020-8911 aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8911.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2020-8912","severity":"low","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869801","bugzilla_description":"CVE-2020-8912 aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8912.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-15138","severity":"moderate","public_date":"2020-08-07T00:00:00Z","advisories":[],"bugzilla":"1867581","bugzilla_description":"CVE-2020-15138 nodejs-prismjs: xss vulnerability that allows attackers to execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15138.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L","cvss3_score":"7.5"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-15366","severity":"moderate","public_date":"2020-07-04T00:00:00Z","advisories":[],"bugzilla":"1857977","bugzilla_description":"CVE-2020-15366 nodejs-ajv: prototype pollution via crafted JSON schema in ajv.validate function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15366.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-13379","severity":"important","public_date":"2020-06-03T00:00:00Z","advisories":["RHSA-2020:2796","RHSA-2020:2676","RHSA-2020:2861","RHSA-2020:2641","RHSA-2020:2792"],"bugzilla":"1843640","bugzilla_description":"CVE-2020-13379 grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send HTTP requests to any URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-918->CWE-284->CWE-476","affected_packages":["servicemesh-grafana-0:6.2.2-38.el8","servicemesh-grafana-0:6.4.3-11.el8","openshift4/ose-grafana:v4.4.0-202006290400.p0","grafana-0:6.3.6-2.el8_2","grafana-0:6.2.2-6.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13379.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-7662","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2796","RHSA-2020:2861"],"bugzilla":"1845982","bugzilla_description":"CVE-2020-7662 npmjs-websocket-extensions: ReDoS vulnerability in Sec-WebSocket-Extensions parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["servicemesh-grafana-0:6.2.2-38.el8","servicemesh-grafana-0:6.4.3-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7662.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-18623","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":[],"bugzilla":"1850568","bugzilla_description":"CVE-2018-18623 grafana: XSS vulnerability via the \"Dashboard > Text Panel\" screen","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18623.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18624","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":[],"bugzilla":"1850572","bugzilla_description":"CVE-2018-18624 grafana: XSS vulnerability via a column style on the \"Dashboard > Table Panel\" screen","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18624.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18625","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":[],"bugzilla":"1850575","bugzilla_description":"CVE-2018-18625 grafana: XSS vulnerability via a link on the \"Dashboard > All Panels > General\" screen","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18625.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-13822","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":[],"bugzilla":"1848647","bugzilla_description":"CVE-2020-13822 nodejs-elliptic: improper encoding checks allows a certain degree of signature malleability in ECDSA signatures","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13822.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"7.7"},{"CVE":"CVE-2020-13430","severity":"moderate","public_date":"2020-05-24T00:00:00Z","advisories":["RHSA-2020:2796","RHSA-2020:2861"],"bugzilla":"1848108","bugzilla_description":"CVE-2020-13430 grafana: XSS via the OpenTSDB datasource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["servicemesh-grafana-0:6.2.2-38.el8","servicemesh-grafana-0:6.4.3-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13430.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-7676","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":[],"bugzilla":"1849206","bugzilla_description":"CVE-2020-7676 nodejs-angular: XSS due to regex-based HTML replacement","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7676.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-12666","severity":"moderate","public_date":"2020-05-06T00:00:00Z","advisories":["RHSA-2020:3369"],"bugzilla":"1850034","bugzilla_description":"CVE-2020-12666 macaron: open redirect in the static handler","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["servicemesh-grafana-0:6.4.3-13.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12666.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-16769","severity":"moderate","public_date":"2020-05-04T00:00:00Z","advisories":["RHSA-2020:2796"],"bugzilla":"1848092","bugzilla_description":"CVE-2019-16769 npm-serialize-javascript: XSS via unsafe characters in serialized regular expressions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["servicemesh-grafana-0:6.4.3-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16769.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-12052","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:2796","RHSA-2020:2861"],"bugzilla":"1848089","bugzilla_description":"CVE-2020-12052 grafana: XSS annotation popup vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["servicemesh-grafana-0:6.2.2-38.el8","servicemesh-grafana-0:6.4.3-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12052.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-8203","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:3807","RHSA-2020:3370"],"bugzilla":"1857412","bugzilla_description":"CVE-2020-8203 nodejs-lodash: prototype pollution in zipObjectDeep function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","distributed-tracing/jaeger-query-rhel7:1.17.6-1","ovirt-web-ui-0:1.6.4-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2020-12458","severity":"moderate","public_date":"2020-04-23T20:00:00Z","advisories":[],"bugzilla":"1827765","bugzilla_description":"CVE-2020-12458 grafana: information disclosure through world-readable /var/lib/grafana/grafana.db","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12458.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2020-12459","severity":"moderate","public_date":"2020-04-23T20:00:00Z","advisories":["RHSA-2020:2362"],"bugzilla":"1829724","bugzilla_description":"CVE-2020-12459 grafana: information disclosure through world-readable grafana configuration files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["servicemesh-grafana-0:6.2.2-36.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12459.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-12245","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:2796","RHSA-2020:2861"],"bugzilla":"1848643","bugzilla_description":"CVE-2020-12245 grafana: XSS via column.title or cellLinkTooltip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["servicemesh-grafana-0:6.2.2-38.el8","servicemesh-grafana-0:6.4.3-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12245.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2020-7660","severity":"moderate","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:2796","RHSA-2020:2861"],"bugzilla":"1844228","bugzilla_description":"CVE-2020-7660 npm-serialize-javascript: allows remote attackers to inject arbitrary code via the function deleteFunctions within index.js","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["servicemesh-grafana-0:6.2.2-38.el8","servicemesh-grafana-0:6.4.3-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7660.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11110","severity":"moderate","public_date":"2020-04-01T00:00:00Z","advisories":[],"bugzilla":"1861044","bugzilla_description":"CVE-2020-11110 grafana: stored XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11110.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-7598","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:3247","RHSA-2020:2852","RHSA-2020:2992","RHSA-2020:2362","RHSA-2020:2848","RHSA-2020:3042","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:3084"],"bugzilla":"1813344","bugzilla_description":"CVE-2020-7598 nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","kiali-0:v1.0.11.redhat1-1.el7","rh-nodejs12-nodejs-0:12.18.2-1.el7","servicemesh-grafana-0:6.2.2-36.el8","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:12-8010020200630154708.c27ad7f8","nodejs:10-8020020200617141353.4cda2c84","nodejs:10-8010020200617134056.c27ad7f8","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7598.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8823","severity":"moderate","public_date":"2020-02-08T00:00:00Z","advisories":[],"bugzilla":"1813969","bugzilla_description":"CVE-2020-8823 sockJS: function htmlfile is not checking the non-alphanumeric symbols which could result in reflected XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8823.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-8124","severity":"moderate","public_date":"2020-02-04T00:00:00Z","advisories":["RHSA-2020:0972"],"bugzilla":"1800774","bugzilla_description":"CVE-2020-8124 npmjs-url-parse: Improper validation of protocol of the returned URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["jaeger-0:v1.13.1.redhat6-1.el7","kiali-0:v1.0.10.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8124.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-7919","severity":"important","public_date":"2020-01-28T00:00:00Z","advisories":[],"bugzilla":"1808041","bugzilla_description":"CVE-2020-7919 golang: Integer overflow on 32bit architectures via crafted certificate allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7919.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8116","severity":"moderate","public_date":"2020-01-28T00:00:00Z","advisories":["RHSA-2020:4272"],"bugzilla":"1868196","bugzilla_description":"CVE-2020-8116 nodejs-dot-prop: prototype pollution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":["nodejs:12-8020020201007080935.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8116.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-10768","severity":"moderate","public_date":"2019-11-07T00:00:00Z","advisories":[],"bugzilla":"1813309","bugzilla_description":"CVE-2019-10768 AngularJS: Prototype pollution in merge function could result in code injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10768.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20922","severity":"moderate","public_date":"2019-11-04T00:00:00Z","advisories":[],"bugzilla":"1882256","bugzilla_description":"CVE-2019-20922 nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20922.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20920","severity":"moderate","public_date":"2019-11-04T00:00:00Z","advisories":[],"bugzilla":"1882260","bugzilla_description":"CVE-2019-20920 nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20920.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:L","cvss3_score":"8.1"},{"CVE":"CVE-2019-17596","severity":"moderate","public_date":"2019-10-17T00:00:00Z","advisories":["RHSA-2020:0101","RHSA-2020:0329"],"bugzilla":"1763310","bugzilla_description":"CVE-2019-17596 golang: invalid public key causes panic in dsa.Verify","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11253","severity":"important","public_date":"2019-09-28T00:00:00Z","advisories":["RHSA-2020:2796","RHSA-2020:2863","RHEA-2019:3809","RHSA-2020:2861","RHSA-2020:2795","RHSA-2019:3239","RHSA-2019:3811","RHSA-2020:2870","RHSA-2019:3905","RHSA-2019:3132","RHSA-2020:2799"],"bugzilla":"1757701","bugzilla_description":"CVE-2019-11253 kubernetes: YAML parsing vulnerable to \"Billion Laughs\" attack, allowing for remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["servicemesh-grafana-0:6.2.2-38.el8","servicemesh-grafana-0:6.4.3-11.el8","atomic-openshift-0:3.10.181-1.git.0.3ab4b3d.el7","openshift-0:4.1.20-201910101746.git.0.a80aad5.el8","servicemesh-cni-0:1.1.4-2.el8","servicemesh-0:1.0.2-3.el8","atomic-openshift-0:3.9.102-1.git.0.6411f52.el7","servicemesh-prometheus-0:2.7.2-36.el8","atomic-openshift-0:3.11.154-1.git.0.7a097ad.el7","servicemesh-prometheus-0:2.7.2-25.el8","servicemesh-cni-0:1.0.11-1.el8","servicemesh-operator-0:1.1.4-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15635","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1768007","bugzilla_description":"CVE-2019-15635 grafana: passwords for data sources are not encrypted","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.9"},{"CVE":"CVE-2019-15043","severity":"moderate","public_date":"2019-08-29T18:00:00Z","advisories":["RHSA-2020:1659"],"bugzilla":"1746945","bugzilla_description":"CVE-2019-15043 grafana: incorrect access control in snapshot HTTP API leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-284|CWE-200)","affected_packages":["grafana-0:6.3.6-1.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15043.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9515","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:2861","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3892","RHSA-2019:2766","RHSA-2020:2067","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4352","RHSA-2019:4045","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2020:3196","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2925"],"bugzilla":"1735745","bugzilla_description":"CVE-2019-9515 HTTP/2: flood using SETTINGS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","nodejs:10-8000020190911085529.f8e95b4e","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","skydive-0:0.20.5-2.el7ost","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10744","severity":"important","public_date":"2019-08-09T00:00:00Z","advisories":["RHSA-2020:2819","RHSA-2019:3024","RHSA-2020:2362"],"bugzilla":"1739497","bugzilla_description":"CVE-2019-10744 nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ovirt-web-ui-0:1.6.0-1.el7ev","servicemesh-grafana-0:6.2.2-36.el8","jaeger-0:v1.13.1.redhat7-1.el7","distributed-tracing/jaeger-query-rhel7:1.17.2-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10744.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2019-10192","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:2630","RHSA-2019:1860","RHSA-2019:2002","RHSA-2019:1819","RHSA-2019:2621","RHSA-2019:2506","RHSA-2019:2508","RHSA-2019:2628"],"bugzilla":"1723918","bugzilla_description":"CVE-2019-10192 redis: Heap buffer overflow in HyperLogLog triggered by malicious client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redis-0:3.2.8-4.el7ost","redis-0:3.0.6-5.el7ost","rh-redis32-redis-0:3.2.13-1.el7","rh-redis32-redis-0:3.2.13-1.el6","redis:5-8000020190711140130.f8e95b4e","rh-redis5-redis-0:5.0.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10192.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-10193","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:2002","RHSA-2019:1819"],"bugzilla":"1727668","bugzilla_description":"CVE-2019-10193 redis: Stack buffer overflow in HyperLogLog triggered by malicious client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["redis:5-8000020190711140130.f8e95b4e","rh-redis5-redis-0:5.0.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-19039","severity":"moderate","public_date":"2018-11-13T00:00:00Z","advisories":["RHSA-2019:0911","RHSA-2019:0747"],"bugzilla":"1649697","bugzilla_description":"CVE-2018-19039 grafana: File exfiltration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["grafana-0:4.3.2-4.el7cp","grafana-0:5.2.4-2.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19039.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-16487","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":[],"bugzilla":"1671878","bugzilla_description":"CVE-2018-16487 lodash: Prototype pollution in utilities function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16487.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-1000816","severity":"moderate","public_date":"2018-10-14T00:00:00Z","advisories":[],"bugzilla":"1661437","bugzilla_description":"CVE-2018-1000816 grafana: Cross site scripting in Influxdb and Graphite query editor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-17846","severity":"moderate","public_date":"2018-10-01T00:00:00Z","advisories":[],"bugzilla":"1639109","bugzilla_description":"CVE-2018-17846 golang-org-x-net-html: infinite loop during html.Parse() via inSelectIM and inSelectInTableIM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17847","severity":"moderate","public_date":"2018-10-01T00:00:00Z","advisories":[],"bugzilla":"1639116","bugzilla_description":"CVE-2018-17847 golang-org-x-net-html: index out of range in (*nodeStack).pop in node.go causes runtime panic during html.Parse() call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17848","severity":"moderate","public_date":"2018-10-01T00:00:00Z","advisories":[],"bugzilla":"1639124","bugzilla_description":"CVE-2018-17848 golang-org-x-net-html: index out of range in (*insertionModeStack).pop in node.go causes runtime panic during html.Parse() call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17848.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17142","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":[],"bugzilla":"1633022","bugzilla_description":"CVE-2018-17142 golang-org-x-net-html: Runtime panic in html.Parse() via crafted html","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17142.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17143","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":[],"bugzilla":"1633036","bugzilla_description":"CVE-2018-17143 golang-org-x-net-html: Runtime panic in html.Parse() via crafted html","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17143.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17075","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":[],"bugzilla":"1633041","bugzilla_description":"CVE-2018-17075 golang-org-x-net-html: Mishandle of \"in frameset\" causes runtime panic in html.Parse() via crafted html","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-15727","severity":"moderate","public_date":"2018-08-29T00:00:00Z","advisories":["RHSA-2018:3829","RHSA-2019:0019"],"bugzilla":"1624088","bugzilla_description":"CVE-2018-15727 grafana: authentication bypass  knowing only a username of an LDAP or OAuth user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["grafana-0:5.2.4-1.el7cp","grafana-0:4.6.4-1.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15727.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2018-12326","severity":"low","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1860","RHSA-2019:0052","RHSA-2019:0094"],"bugzilla":"1594291","bugzilla_description":"CVE-2018-12326 redis: Code execution in redis-cli via crafted command line arguments","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["redis-0:3.2.8-3.el7ost","redis-0:3.0.6-4.el7ost","rh-redis32-redis-0:3.2.13-1.el7","rh-redis32-redis-0:3.2.13-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12326.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12453","severity":"moderate","public_date":"2018-06-10T00:00:00Z","advisories":[],"bugzilla":"1592892","bugzilla_description":"CVE-2018-12453 redis: type confusion in the xgroupCommand function in t_stream.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12453.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-12099","severity":"moderate","public_date":"2018-05-08T00:00:00Z","advisories":[],"bugzilla":"1590017","bugzilla_description":"CVE-2018-12099 grafana: Cross-site Scripting (XSS) in dashboard links","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12099.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphite2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphite2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphite2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphite2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphite2_security_api_results.json
new file mode 100644
index 0000000..9527e2a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphite2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-7999","severity":"low","public_date":"2018-03-05T00:00:00Z","advisories":[],"bugzilla":"1554380","bugzilla_description":"CVE-2018-7999 graphite2: NULL pointer dereference in Segment.cpp in libgraphite2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-7778","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1461260","bugzilla_description":"CVE-2017-7778 Mozilla: Vulnerabilities in the Graphite 2 library (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7771","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472212","bugzilla_description":"CVE-2017-7771 graphite2: out of bounds read in \"graphite2::Pass::readPass\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7771.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-7772","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472213","bugzilla_description":"CVE-2017-7772 graphite2: heap-buffer-overflow write \"lz4::decompress\" (CVE-2017-7772)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7773","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472215","bugzilla_description":"CVE-2017-7773 graphite2: heap-buffer-overflow write \"lz4::decompress\" (src/Decompressor)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7773.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7774","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472219","bugzilla_description":"CVE-2017-7774 graphite2: out of bounds read \"graphite2::Silf::readGraphite\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7774.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-7775","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472221","bugzilla_description":"CVE-2017-7775 graphite2: assertion error \"size() > n\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7775.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7776","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472223","bugzilla_description":"CVE-2017-7776 graphite2: heap-buffer-overflow read \"graphite2::Silf::getClassGlyph\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-7777","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472225","bugzilla_description":"CVE-2017-7777 graphite2: use of uninitialized memory \"graphite2::GlyphCache::Loader::read_glyph\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7777.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-1521","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0197","RHSA-2016:0594","RHSA-2016:0258"],"bugzilla":"1305805","bugzilla_description":"CVE-2016-1521 graphite2: Out-of-bound read vulnerability triggered by crafted fonts","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:38.6.1-1.el6_7","graphite2-0:1.3.6-1.el7_2","thunderbird-0:38.6.0-1.el5_11","firefox-0:38.6.1-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.1-1.el7_2","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1521.json"},{"CVE":"CVE-2016-1522","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0197","RHSA-2016:0594","RHSA-2016:0258"],"bugzilla":"1305810","bugzilla_description":"CVE-2016-1522 graphite2: Null pointer dereference and out-of-bounds access vulnerabilities","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["firefox-0:38.6.1-1.el6_7","graphite2-0:1.3.6-1.el7_2","thunderbird-0:38.6.0-1.el5_11","firefox-0:38.6.1-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.1-1.el7_2","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1522.json"},{"CVE":"CVE-2016-1523","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0197","RHSA-2016:0594","RHSA-2016:0258"],"bugzilla":"1305813","bugzilla_description":"CVE-2016-1523 graphite2: Heap-based buffer overflow in context item handling functionality","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["firefox-0:38.6.1-1.el6_7","graphite2-0:1.3.6-1.el7_2","thunderbird-0:38.6.0-1.el5_11","firefox-0:38.6.1-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.1-1.el7_2","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1523.json"},{"CVE":"CVE-2016-1526","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0594","RHSA-2016:0695"],"bugzilla":"1308590","bugzilla_description":"CVE-2016-1526 graphite2: Out-of-bounds read vulnerability in TfUtil:LocaLookup","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["firefox-0:45.1.0-1.el6_7","graphite2-0:1.3.6-1.el7_2","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1526.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-gd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-gd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-gd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-python3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-python3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz-python3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz_security_api_results.json
new file mode 100644
index 0000000..e67332d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/graphviz_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11023","severity":"low","public_date":"2019-04-09T00:00:00Z","advisories":[],"bugzilla":"1699848","bugzilla_description":"CVE-2019-11023 graphviz: null pointer dereference in function agroot() in cgraph\\obj.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11023.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-9904","severity":"low","public_date":"2019-03-16T00:00:00Z","advisories":[],"bugzilla":"1691717","bugzilla_description":"CVE-2019-9904 graphviz: recursive function call in agclose in lib\\cgraph\\graph.c causing stack consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9904.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2018-10196","severity":"low","public_date":"2018-04-18T00:00:00Z","advisories":[],"bugzilla":"1579254","bugzilla_description":"CVE-2018-10196 graphviz: NULL pointer dereference in rebuild_vlis","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6161","severity":"moderate","public_date":"2016-05-08T00:00:00Z","advisories":[],"bugzilla":"1353550","bugzilla_description":"CVE-2016-6161 gd: Global out-of-bounds read when encoding gif from malformed gd2 input","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2014-9157","severity":"low","public_date":"2014-11-25T00:00:00Z","advisories":[],"bugzilla":"1167866","bugzilla_description":"CVE-2014-9157 graphviz: format string vulnerability in yyerror()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-134","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9157.json"},{"CVE":"CVE-2014-1235","severity":"low","public_date":"2014-01-08T00:00:00Z","advisories":[],"bugzilla":"1050871","bugzilla_description":"CVE-2014-1235 graphviz: buffer overflow in yyerror() due to improper fix for CVE-2014-0978","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1235.json"},{"CVE":"CVE-2014-1236","severity":"low","public_date":"2014-01-08T00:00:00Z","advisories":[],"bugzilla":"1050872","bugzilla_description":"CVE-2014-1236 graphviz: stack-based buffer overflow in chkNum()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1236.json"},{"CVE":"CVE-2014-0978","severity":"low","public_date":"2014-01-06T00:00:00Z","advisories":[],"bugzilla":"1049165","bugzilla_description":"CVE-2014-0978 graphviz: stack-based buffer overflow in yyerror()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0978.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grep_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grep_security_api_results.json
new file mode 100644
index 0000000..6f931df
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grep_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-1345","severity":"low","public_date":"2015-01-18T00:00:00Z","advisories":["RHSA-2015:1447","RHSA-2015:2111"],"bugzilla":"1183651","bugzilla_description":"CVE-2015-1345 grep: heap buffer overrun","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":["grep-0:2.20-3.el6","grep-0:2.20-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1345.json"},{"CVE":"CVE-2012-5667","severity":"low","public_date":"2012-12-22T00:00:00Z","advisories":["RHSA-2015:1447"],"bugzilla":"889935","bugzilla_description":"CVE-2012-5667 grep: Integer overflow leading to heap-based buffer-overflow when reading large lines","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["grep-0:2.20-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5667.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grilo-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grilo-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grilo-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grilo-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grilo-plugins_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grilo-plugins_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grilo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grilo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grilo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/groff-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/groff-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/groff-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/groff_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/groff_security_api_results.json
new file mode 100644
index 0000000..4bf9e1a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/groff_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2009-5080","severity":"low","public_date":"2009-08-14T00:00:00Z","advisories":[],"bugzilla":"720058","bugzilla_description":"CVE-2009-5080 groff: improper handling of failed attempts to create temporary directories in eqn2graph/pic2graph/grap2graph","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5080.json"},{"CVE":"CVE-2009-5044","severity":"low","public_date":"2009-07-24T00:00:00Z","advisories":[],"bugzilla":"709413","bugzilla_description":"CVE-2009-5044 groff: insecure temporary file handling in pdfroff","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5044.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-aa64-cdboot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-aa64-cdboot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-aa64-cdboot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-aa64-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-aa64-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-aa64-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-aa64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-aa64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-aa64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-ia32-cdboot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-ia32-cdboot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-ia32-cdboot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-ia32-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-ia32-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-ia32-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-ia32_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-ia32_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-ia32_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-x64-cdboot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-x64-cdboot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-x64-cdboot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-x64-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-x64-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-x64-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-x64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-x64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-efi-x64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-pc-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-pc-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-pc-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-pc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-pc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-pc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-ppc64le-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-ppc64le-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-ppc64le-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-ppc64le_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-ppc64le_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-ppc64le_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools-efi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools-efi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools-efi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools-extra_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools-extra_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools-extra_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools-minimal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools-minimal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools-minimal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grub2-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grubby_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grubby_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/grubby_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsettings-desktop-schemas-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsettings-desktop-schemas-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsettings-desktop-schemas-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsettings-desktop-schemas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsettings-desktop-schemas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsettings-desktop-schemas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsound_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsound_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gsound_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gspell-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gspell-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gspell-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gspell-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gspell-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gspell-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gspell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gspell_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gspell_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssdp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssdp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssdp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssdp-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssdp-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssdp-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssdp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssdp_security_api_results.json
new file mode 100644
index 0000000..ce0bc36
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssdp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12695","severity":"moderate","public_date":"2020-06-08T00:00:00Z","advisories":[],"bugzilla":"1846006","bugzilla_description":"CVE-2020-12695 hostapd: UPnP SUBSCRIBE misbehavior in WPS AP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-400|CWE-918)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12695.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssntlmssp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssntlmssp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssntlmssp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssproxy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssproxy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gssproxy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-bad-free-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-bad-free-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-bad-free-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-bad-free_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-bad-free_security_api_results.json
new file mode 100644
index 0000000..06eee23
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-bad-free_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-5843","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419592","bugzilla_description":"CVE-2017-5843 gstreamer-plugins-bad-free: Use after free in gst_mini_object_unref / gst_tag_list_unref / gst_mxf_demux_update_essence_tracks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9813","severity":"low","public_date":"2016-11-25T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401934","bugzilla_description":"CVE-2016-9813 gstreamer-plugins-bad-free: NULL pointer dereference in mpegts parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-476","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9812","severity":"low","public_date":"2016-11-24T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401930","bugzilla_description":"CVE-2016-9812 gstreamer1-plugins-bad-free: Out-of-bounds read in gst_mpegts_section_new","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9809","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021"],"bugzilla":"1401880","bugzilla_description":"CVE-2016-9809 gstreamer-plugins-bad-free: Off-by-one read in gst_h264_parse_set_caps","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":["gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9809.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9445","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021","RHSA-2016:2974"],"bugzilla":"1395767","bugzilla_description":"CVE-2016-9445 gstreamer-plugins-bad-free: Integer overflow when allocating render buffer in VMnc decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9445.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9446","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1397063","bugzilla_description":"CVE-2016-9446 gstreamer-plugins-bad-free: Missing initialization of allocated heap memory leads to information leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9447","severity":"moderate","public_date":"2016-11-14T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2016:2974"],"bugzilla":"1395126","bugzilla_description":"CVE-2016-9447 gstreamer-plugins-bad-free: Memory corruption flaw in NSF decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5848","severity":"low","public_date":"2016-01-30T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419583","bugzilla_description":"CVE-2017-5848 gstreamer-plugins-bad-free: Invalid memory read in gst_ps_demux_parse_psm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5848.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-base-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-base-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-base-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-base_security_api_results.json
new file mode 100644
index 0000000..fe12165
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-base_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9928","severity":"moderate","public_date":"2019-04-22T00:00:00Z","advisories":[],"bugzilla":"1724904","bugzilla_description":"CVE-2019-9928 GStreamer: heap-based buffer overflow in the RTSP connection parser via crafted server response leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5844","severity":"low","public_date":"2017-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419600","bugzilla_description":"CVE-2017-5844 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5844.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5842","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419591","bugzilla_description":"CVE-2017-5842 gstreamer-plugins-base: Out-of-bounds heap read in html_context_handle_element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5837","severity":"low","public_date":"2017-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419584","bugzilla_description":"CVE-2017-5837 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9811","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1401918","bugzilla_description":"CVE-2016-9811 gstreamer: Out of bounds heap read in windows_icon_typefind","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-5839","severity":"low","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419586","bugzilla_description":"CVE-2017-5839 gstreamer-plugins-base: Stack overflow in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5839.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-good-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-good-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-good-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-good_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-good_security_api_results.json
new file mode 100644
index 0000000..8ac937d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-good_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-5841","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419589","bugzilla_description":"CVE-2017-5841 gstreamer-plugins-good: Heap out-of-bounds read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10198","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419558","bugzilla_description":"CVE-2016-10198 gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10199","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419580","bugzilla_description":"CVE-2016-10199 gstreamer-plugins-good: Out of bounds read in qtdemux_tag_add_str_full","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9810","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1401913","bugzilla_description":"CVE-2016-9810 gstreamer: Invalid memory read in g_type_check_instance_is_fundamentally_a","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9807","severity":"low","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1401874","bugzilla_description":"CVE-2016-9807 gstreamer-plugins-good: Invalid memory read in flx_decode_chunks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9634","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9635","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9636","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9808","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5845","severity":"low","public_date":"2016-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419582","bugzilla_description":"CVE-2017-5845 gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5845.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5840","severity":"low","public_date":"2016-01-18T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419588","bugzilla_description":"CVE-2017-5840 gstreamer-plugins-good: Out of bounds heap read in qtdemux_parse_samples","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2014-4610","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":[],"bugzilla":"1112440","bugzilla_description":"CVE-2014-4610 ffmpeg: av_lzo1x_decode() integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4610.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-ugly-free_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-ugly-free_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1-plugins-ugly-free_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1_security_api_results.json
new file mode 100644
index 0000000..47d9dd2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gstreamer1_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9928","severity":"moderate","public_date":"2019-04-22T00:00:00Z","advisories":[],"bugzilla":"1724904","bugzilla_description":"CVE-2019-9928 GStreamer: heap-based buffer overflow in the RTSP connection parser via crafted server response leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5844","severity":"low","public_date":"2017-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419600","bugzilla_description":"CVE-2017-5844 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5844.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5841","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419589","bugzilla_description":"CVE-2017-5841 gstreamer-plugins-good: Heap out-of-bounds read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5842","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419591","bugzilla_description":"CVE-2017-5842 gstreamer-plugins-base: Out-of-bounds heap read in html_context_handle_element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5843","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419592","bugzilla_description":"CVE-2017-5843 gstreamer-plugins-bad-free: Use after free in gst_mini_object_unref / gst_tag_list_unref / gst_mxf_demux_update_essence_tracks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5837","severity":"low","public_date":"2017-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419584","bugzilla_description":"CVE-2017-5837 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10198","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419558","bugzilla_description":"CVE-2016-10198 gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10199","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419580","bugzilla_description":"CVE-2016-10199 gstreamer-plugins-good: Out of bounds read in qtdemux_tag_add_str_full","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9813","severity":"low","public_date":"2016-11-25T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401934","bugzilla_description":"CVE-2016-9813 gstreamer-plugins-bad-free: NULL pointer dereference in mpegts parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-476","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9812","severity":"low","public_date":"2016-11-24T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401930","bugzilla_description":"CVE-2016-9812 gstreamer1-plugins-bad-free: Out-of-bounds read in gst_mpegts_section_new","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9809","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021"],"bugzilla":"1401880","bugzilla_description":"CVE-2016-9809 gstreamer-plugins-bad-free: Off-by-one read in gst_h264_parse_set_caps","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":["gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9809.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9810","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1401913","bugzilla_description":"CVE-2016-9810 gstreamer: Invalid memory read in g_type_check_instance_is_fundamentally_a","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9811","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1401918","bugzilla_description":"CVE-2016-9811 gstreamer: Out of bounds heap read in windows_icon_typefind","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9807","severity":"low","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1401874","bugzilla_description":"CVE-2016-9807 gstreamer-plugins-good: Invalid memory read in flx_decode_chunks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9634","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9635","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9636","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9808","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9445","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021","RHSA-2016:2974"],"bugzilla":"1395767","bugzilla_description":"CVE-2016-9445 gstreamer-plugins-bad-free: Integer overflow when allocating render buffer in VMnc decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9445.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9446","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1397063","bugzilla_description":"CVE-2016-9446 gstreamer-plugins-bad-free: Missing initialization of allocated heap memory leads to information leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9447","severity":"moderate","public_date":"2016-11-14T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2016:2974"],"bugzilla":"1395126","bugzilla_description":"CVE-2016-9447 gstreamer-plugins-bad-free: Memory corruption flaw in NSF decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5848","severity":"low","public_date":"2016-01-30T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419583","bugzilla_description":"CVE-2017-5848 gstreamer-plugins-bad-free: Invalid memory read in gst_ps_demux_parse_psm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5848.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5845","severity":"low","public_date":"2016-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419582","bugzilla_description":"CVE-2017-5845 gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5845.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5840","severity":"low","public_date":"2016-01-18T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419588","bugzilla_description":"CVE-2017-5840 gstreamer-plugins-good: Out of bounds heap read in qtdemux_parse_samples","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5839","severity":"low","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419586","bugzilla_description":"CVE-2017-5839 gstreamer-plugins-base: Stack overflow in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5839.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5838","severity":"low","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419587","bugzilla_description":"CVE-2017-5838 gstreamer: Out-of-bounds read in gst_date_time_new_from_iso8601_string()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer1-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5838.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2014-4610","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":[],"bugzilla":"1112440","bugzilla_description":"CVE-2014-4610 ffmpeg: av_lzo1x_decode() integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4610.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtest-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtest-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtest-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk-update-icon-cache_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk-update-icon-cache_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk-update-icon-cache_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk-vnc2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk-vnc2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk-vnc2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-devel-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-devel-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-devel-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-immodule-xim_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-immodule-xim_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-immodule-xim_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-immodules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-immodules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2-immodules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2_security_api_results.json
new file mode 100644
index 0000000..d11d863
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7447","severity":"low","public_date":"2013-06-27T00:00:00Z","advisories":[],"bugzilla":"1306681","bugzilla_description":"CVE-2013-7447 gtk2, gtk3: Integer overflow in image handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7447.json"},{"CVE":"CVE-2012-2370","severity":"low","public_date":"2012-03-25T00:00:00Z","advisories":["RHSA-2013:0135"],"bugzilla":"822468","bugzilla_description":"CVE-2012-2370 gdk-pixbuf: DoS (GLib error and application abort) due to an integer overflow in the XBM image file format loader","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["gtk2-0:2.10.4-29.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2370.json"},{"CVE":"CVE-2011-2896","severity":"moderate","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181","RHSA-2011:1635","RHSA-2012:0302"],"bugzilla":"727800","bugzilla_description":"CVE-2011-2896 David Koblas' GIF decoder LZW decoder buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gimp-2:2.6.9-4.el6_3.3","cups-1:1.3.7-30.el5","gimp-2:2.2.13-2.0.7.el5_8.5","cups-1:1.4.2-44.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2896.json"},{"CVE":"CVE-2011-2485","severity":"low","public_date":"2011-06-23T00:00:00Z","advisories":[],"bugzilla":"715337","bugzilla_description":"CVE-2011-2485 gdk-pixbuf: incorrect error detection in the GIF image loader","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2485.json"},{"CVE":"CVE-2007-0010","severity":"moderate","public_date":"2007-01-10T00:00:00Z","advisories":["RHSA-2007:0019"],"bugzilla":"1618260","bugzilla_description":"CVE-2007-0010 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gtk2-0:2.4.13-22"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0010.json"},{"CVE":"CVE-2005-2975","severity":"important","public_date":"2005-11-15T14:00:00Z","advisories":["RHSA-2005:810","RHSA-2005:811"],"bugzilla":"1617771","bugzilla_description":"CVE-2005-2975 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-13.el3.3","gdk-pixbuf-1:0.22.0-17.el4.3","gtk2-0:2.2.4-19","gtk2-0:2.4.13-18"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2975.json"},{"CVE":"CVE-2005-3186","severity":"important","public_date":"2005-11-03T00:00:00Z","advisories":["RHSA-2005:810","RHSA-2005:811"],"bugzilla":"1617795","bugzilla_description":"CVE-2005-3186 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-13.el3.3","gdk-pixbuf-1:0.22.0-17.el4.3","gtk2-0:2.2.4-19","gtk2-0:2.4.13-18"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3186.json"},{"CVE":"CVE-2005-0891","severity":"important","public_date":"2005-03-26T00:00:00Z","advisories":["RHSA-2005:344","RHSA-2005:343"],"bugzilla":"1617587","bugzilla_description":"CVE-2005-0891 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gtk2-0:2.4.13-14","gtk2-0:2.2.4-15","gdk-pixbuf-1:0.22.0-16.el4","gdk-pixbuf-1:0.22.0-12.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0891.json"},{"CVE":"CVE-2004-0782","severity":"important","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617283","bugzilla_description":"CVE-2004-0782 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0782.json"},{"CVE":"CVE-2004-0783","severity":"important","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617284","bugzilla_description":"CVE-2004-0783 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0783.json"},{"CVE":"CVE-2004-0788","severity":"moderate","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617290","bugzilla_description":"CVE-2004-0788 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0788.json"},{"CVE":"CVE-2004-0753","severity":"moderate","public_date":"2004-08-20T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617266","bugzilla_description":"CVE-2004-0753 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0753.json"},{"CVE":"CVE-2011-2897","severity":"moderate","public_date":"2001-06-01T00:00:00Z","advisories":[],"bugzilla":"727081","bugzilla_description":"CVE-2011-2897 gdk-pixbuf: GIF loader buffer overflow when initializing decompression tables","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2897.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk3-immodule-xim_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk3-immodule-xim_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk3-immodule-xim_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk3_security_api_results.json
new file mode 100644
index 0000000..6da9745
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtk3_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9862","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879532","bugzilla_description":"CVE-2020-9862 webkitgtk: Command injection in web inspector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9862.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-9893","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879535","bugzilla_description":"CVE-2020-9893 webkitgtk: Use-after-free may lead to application termination or arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9893.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9894","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879536","bugzilla_description":"CVE-2020-9894 webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9894.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-9895","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879538","bugzilla_description":"CVE-2020-9895 webkitgtk: Use-after-free may lead to application termination or arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9895.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-9915","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879540","bugzilla_description":"CVE-2020-9915 webkitgtk: Access issue in content security policy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9915.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2020-9925","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879541","bugzilla_description":"CVE-2020-9925 webkitgtk: A logic issue may lead to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841->CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9925.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-9802","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879545","bugzilla_description":"CVE-2020-9802 webkitgtk: Logic issue may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9802.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9803","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879557","bugzilla_description":"CVE-2020-9803 webkitgtk: Memory corruption may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9805","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879559","bugzilla_description":"CVE-2020-9805 webkitgtk: Logic issue may lead to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841->CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9805.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-9806","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879563","bugzilla_description":"CVE-2020-9806 webkitgtk: Memory corruption may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9806.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9807","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879564","bugzilla_description":"CVE-2020-9807 webkitgtk: Memory corruption may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9807.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9843","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879566","bugzilla_description":"CVE-2020-9843 webkitgtk: Input validation issue may lead to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9843.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-9850","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879568","bugzilla_description":"CVE-2020-9850 webkitgtk: Logic issue may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9850.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-13753","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879570","bugzilla_description":"CVE-2020-13753 webkitgtk: Improper access management to CLONE_NEWUSER and the TIOCSTI ioctl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284->CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13753.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"10.0"},{"CVE":"CVE-2020-3885","severity":"low","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876462","bugzilla_description":"CVE-2020-3885 webkitgtk: Incorrect processing of file URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3885.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-3894","severity":"low","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876463","bugzilla_description":"CVE-2020-3894 webkitgtk: Race condition allows reading of restricted memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3894.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-3895","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876465","bugzilla_description":"CVE-2020-3895 webkitgtk: Memory corruption triggered by a malicious web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3895.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3897","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876468","bugzilla_description":"CVE-2020-3897 webkitgtk: Type confusion leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3897.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3899","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876470","bugzilla_description":"CVE-2020-3899 webkitgtk: Memory consumption issue leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3899.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3900","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876472","bugzilla_description":"CVE-2020-3900 webkitgtk: Memory corruption  triggered by a malicious web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3900.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3901","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876473","bugzilla_description":"CVE-2020-3901 webkitgtk: Type confusion leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3901.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3902","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876476","bugzilla_description":"CVE-2020-3902 webkitgtk: Input validation issue leading to cross-site script attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3902.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11793","severity":"moderate","public_date":"2020-04-16T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1829369","bugzilla_description":"CVE-2020-11793 webkitgtk: use-after-free via crafted web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11793.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10018","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1811721","bugzilla_description":"CVE-2020-10018 webkitgtk: Use-after-free issue in accessibility/AXObjectCache.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10018.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-3862","severity":"low","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876516","bugzilla_description":"CVE-2020-3862 webkitgtk: Denial of service via incorrect memory handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3862.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-3864","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876518","bugzilla_description":"CVE-2020-3864 webkitgtk: Non-unique security origin for DOM object contexts","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3864.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-3865","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876521","bugzilla_description":"CVE-2020-3865 webkitgtk: Incorrect security check for a top-level DOM object context","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3865.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3867","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876522","bugzilla_description":"CVE-2020-3867 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3867.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-3868","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876523","bugzilla_description":"CVE-2020-3868 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3868.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8846","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1816678","bugzilla_description":"CVE-2019-8846 webkitgtk: Use after free issue may lead to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8846.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-8835","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1816684","bugzilla_description":"CVE-2019-8835 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8835.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-8844","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1816686","bugzilla_description":"CVE-2019-8844 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8844.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-4761","severity":"moderate","public_date":"2020-01-22T00:00:00Z","advisories":[],"bugzilla":"1800137","bugzilla_description":"CVE-2016-4761 webkitgtk: use-after-free leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4761.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8710","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876536","bugzilla_description":"CVE-2019-8710 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8710.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8743","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876537","bugzilla_description":"CVE-2019-8743 webkitgtk: Multiple memory corruption  issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8743.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8764","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876540","bugzilla_description":"CVE-2019-8764 webkitgtk: Incorrect state  management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8764.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8765","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876542","bugzilla_description":"CVE-2019-8765 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8765.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8766","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876543","bugzilla_description":"CVE-2019-8766 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8766.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8782","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876545","bugzilla_description":"CVE-2019-8782 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8783","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876548","bugzilla_description":"CVE-2019-8783 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8783.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8808","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876549","bugzilla_description":"CVE-2019-8808 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8808.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8811","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876550","bugzilla_description":"CVE-2019-8811 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8811.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8812","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876552","bugzilla_description":"CVE-2019-8812 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8812.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8813","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876553","bugzilla_description":"CVE-2019-8813 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8813.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8814","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876554","bugzilla_description":"CVE-2019-8814 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8814.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8815","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876555","bugzilla_description":"CVE-2019-8815 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8815.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8816","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876556","bugzilla_description":"CVE-2019-8816 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8816.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8819","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876590","bugzilla_description":"CVE-2019-8819 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8819.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8820","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876591","bugzilla_description":"CVE-2019-8820 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8820.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8821","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876592","bugzilla_description":"CVE-2019-8821 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8821.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8822","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876593","bugzilla_description":"CVE-2019-8822 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8822.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8823","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876594","bugzilla_description":"CVE-2019-8823 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8823.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8625","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876607","bugzilla_description":"CVE-2019-8625 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8625.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8674","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876608","bugzilla_description":"CVE-2019-8674 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8674.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8707","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876609","bugzilla_description":"CVE-2019-8707 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8707.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8719","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876610","bugzilla_description":"CVE-2019-8719 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8719.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8720","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876611","bugzilla_description":"CVE-2019-8720 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8726","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876612","bugzilla_description":"CVE-2019-8726 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8726.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8733","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876613","bugzilla_description":"CVE-2019-8733 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8733.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8735","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876614","bugzilla_description":"CVE-2019-8735 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8735.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8763","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876615","bugzilla_description":"CVE-2019-8763 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8763.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8768","severity":"low","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876616","bugzilla_description":"CVE-2019-8768 webkitgtk: Browsing history could not be deleted","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8768.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8769","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876617","bugzilla_description":"CVE-2019-8769 webkitgtk: Websites could reveal browsing history","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8769.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-8771","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876619","bugzilla_description":"CVE-2019-8771 webkitgtk: Violation of iframe sandboxing policy","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8771.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-8644","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876626","bugzilla_description":"CVE-2019-8644 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8644.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8649","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876628","bugzilla_description":"CVE-2019-8649 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8649.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8658","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876629","bugzilla_description":"CVE-2019-8658 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8658.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8666","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876630","bugzilla_description":"CVE-2019-8666 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8666.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8669","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876631","bugzilla_description":"CVE-2019-8669 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8669.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8671","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876632","bugzilla_description":"CVE-2019-8671 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8671.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8672","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876634","bugzilla_description":"CVE-2019-8672 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8673","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876643","bugzilla_description":"CVE-2019-8673 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8676","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876644","bugzilla_description":"CVE-2019-8676 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8676.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8677","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876645","bugzilla_description":"CVE-2019-8677 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8677.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8678","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876646","bugzilla_description":"CVE-2019-8678 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8678.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8679","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876647","bugzilla_description":"CVE-2019-8679 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8679.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8680","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876648","bugzilla_description":"CVE-2019-8680 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8680.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8681","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876650","bugzilla_description":"CVE-2019-8681 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8681.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8683","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876651","bugzilla_description":"CVE-2019-8683 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8683.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8684","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876652","bugzilla_description":"CVE-2019-8684 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8684.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8686","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876653","bugzilla_description":"CVE-2019-8686 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8686.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8687","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876655","bugzilla_description":"CVE-2019-8687 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8687.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8688","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876656","bugzilla_description":"CVE-2019-8688 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8688.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8689","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876657","bugzilla_description":"CVE-2019-8689 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8689.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8690","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876664","bugzilla_description":"CVE-2019-8690 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8690.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-6237","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876880","bugzilla_description":"CVE-2019-6237 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6237.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8571","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876881","bugzilla_description":"CVE-2019-8571 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8583","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876882","bugzilla_description":"CVE-2019-8583 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8584","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876883","bugzilla_description":"CVE-2019-8584 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8584.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8586","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876884","bugzilla_description":"CVE-2019-8586 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8587","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876887","bugzilla_description":"CVE-2019-8587 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8587.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8594","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876891","bugzilla_description":"CVE-2019-8594 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8594.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8595","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876892","bugzilla_description":"CVE-2019-8595 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8595.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8596","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876893","bugzilla_description":"CVE-2019-8596 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8597","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876894","bugzilla_description":"CVE-2019-8597 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8601","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876895","bugzilla_description":"CVE-2019-8601 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8607","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876897","bugzilla_description":"CVE-2019-8607 webkitgtk: Out-of-bounds read leading to memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8607.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-8608","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876898","bugzilla_description":"CVE-2019-8608 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8609","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876899","bugzilla_description":"CVE-2019-8609 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8609.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8610","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876900","bugzilla_description":"CVE-2019-8610 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8610.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8615","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877045","bugzilla_description":"CVE-2019-8615 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8615.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8611","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877046","bugzilla_description":"CVE-2019-8611 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8611.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8619","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877047","bugzilla_description":"CVE-2019-8619 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8622","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877048","bugzilla_description":"CVE-2019-8622 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8622.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8623","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877049","bugzilla_description":"CVE-2019-8623 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8623.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11070","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1709289","bugzilla_description":"CVE-2019-11070 webkitgtk: HTTP proxy setting deanonymization information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11070.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-7285","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1718725","bugzilla_description":"CVE-2019-7285 webkitgtk: crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-7292","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1719131","bugzilla_description":"CVE-2019-7292 webkitgtk: arbitrary code execution via malicious web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7292.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8503","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1719147","bugzilla_description":"CVE-2019-8503 webkitgtk: logic issue leads to code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8503.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8506","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719199","bugzilla_description":"CVE-2019-8506 webkitgtk: malicous web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8515","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1719204","bugzilla_description":"CVE-2019-8515 webkitgtk: malicious crafted web content leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-8518","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719206","bugzilla_description":"CVE-2019-8518 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8523","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719208","bugzilla_description":"CVE-2019-8523 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8524","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719209","bugzilla_description":"CVE-2019-8524 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8524.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8535","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719210","bugzilla_description":"CVE-2019-8535 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8535.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8536","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719213","bugzilla_description":"CVE-2019-8536 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8536.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8544","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719224","bugzilla_description":"CVE-2019-8544 webkitgtk: malicious crafted web content leads to arbitrary we content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8558","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719231","bugzilla_description":"CVE-2019-8558 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8558.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8559","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719235","bugzilla_description":"CVE-2019-8559 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8559.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8563","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719237","bugzilla_description":"CVE-2019-8563 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8551","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1719238","bugzilla_description":"CVE-2019-8551 webkitgtk: malicious web content leads to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8551.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-6251","severity":"moderate","public_date":"2018-09-11T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1667409","bugzilla_description":"CVE-2019-6251 webkitgtk: processing maliciously crafted web content lead to URI spoofing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-11713","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588739","bugzilla_description":"CVE-2018-11713 webkitgtk: WebSockets don't use system proxy settings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11713.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-11712","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588742","bugzilla_description":"CVE-2018-11712 webkitgtk: Improper TLS certificate verification for WebSocket connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11712.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-4204","severity":"moderate","public_date":"2018-05-07T00:00:00Z","advisories":[],"bugzilla":"1577374","bugzilla_description":"CVE-2018-4204 webkitgtk: memory corruption processing maliciously crafted web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-4200","severity":"moderate","public_date":"2018-05-07T00:00:00Z","advisories":[],"bugzilla":"1577385","bugzilla_description":"CVE-2018-4200 webkitgtk: memory corruption processing maliciously crafted web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4200.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-4121","severity":"moderate","public_date":"2018-05-07T00:00:00Z","advisories":[],"bugzilla":"1577387","bugzilla_description":"CVE-2018-4121 webkitgtk: memory corruption processing maliciously crafted web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4121.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2017-13856","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1527747","bugzilla_description":"CVE-2017-13856 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13856.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-13866","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1527756","bugzilla_description":"CVE-2017-13866 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13866.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-13870","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1527757","bugzilla_description":"CVE-2017-13870 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13870.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-7156","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1527759","bugzilla_description":"CVE-2017-7156 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7156.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-7157","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1527760","bugzilla_description":"CVE-2017-7157 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7157.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2015-2330","severity":"moderate","public_date":"2015-03-17T00:00:00Z","advisories":[],"bugzilla":"1204653","bugzilla_description":"CVE-2015-2330 webkitgtk: TLS certificate late verification","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2330.json"},{"CVE":"CVE-2015-1209","severity":"important","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:0163"],"bugzilla":"1190123","bugzilla_description":"CVE-2015-1209 chromium-browser: use-after-free in DOM","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["chromium-browser-0:40.0.2214.111-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1209.json"},{"CVE":"CVE-2015-1212","severity":"important","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:0163"],"bugzilla":"1190158","bugzilla_description":"CVE-2015-1212 chromium-browser: various security fixes in Chrome 40.0.2214.111","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:40.0.2214.111-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1212.json"},{"CVE":"CVE-2013-2871","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186231","bugzilla_description":"CVE-2013-2871 webkitgtk: use-after-free vulnerability in the handling of input (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2871.json"},{"CVE":"CVE-2013-2875","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186232","bugzilla_description":"CVE-2013-2875 webkitgtk: out-of-bounds read in the SVG implementation (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2875.json"},{"CVE":"CVE-2013-2927","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186233","bugzilla_description":"CVE-2013-2927 webkitgtk: use-after-free in the HTMLFormElement::prepareForSubmission() (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2927.json"},{"CVE":"CVE-2014-1292","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186234","bugzilla_description":"CVE-2014-1292 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1292.json"},{"CVE":"CVE-2014-1297","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186236","bugzilla_description":"CVE-2014-1297 webkitgtk: improper WebProcess IPC messages validation (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1297.json"},{"CVE":"CVE-2014-1298","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186237","bugzilla_description":"CVE-2014-1298 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1298.json"},{"CVE":"CVE-2014-1299","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186238","bugzilla_description":"CVE-2014-1299 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1299.json"},{"CVE":"CVE-2014-1300","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186239","bugzilla_description":"CVE-2014-1300 webkitgtk: arbitrary code execution with root privileges (WSA-2015-0001)","cvss_score":7.3,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1300.json"},{"CVE":"CVE-2014-1303","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186241","bugzilla_description":"CVE-2014-1303 webkitgtk: heap-based buffer overflow (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1303.json"},{"CVE":"CVE-2014-1304","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186242","bugzilla_description":"CVE-2014-1304 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1304.json"},{"CVE":"CVE-2014-1305","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186243","bugzilla_description":"CVE-2014-1305 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1305.json"},{"CVE":"CVE-2014-1307","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186245","bugzilla_description":"CVE-2014-1307 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1307.json"},{"CVE":"CVE-2014-1308","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186246","bugzilla_description":"CVE-2014-1308 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1308.json"},{"CVE":"CVE-2014-1309","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186247","bugzilla_description":"CVE-2014-1309 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1309.json"},{"CVE":"CVE-2014-1311","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186248","bugzilla_description":"CVE-2014-1311 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1311.json"},{"CVE":"CVE-2014-1313","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186250","bugzilla_description":"CVE-2014-1313 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1313.json"},{"CVE":"CVE-2014-1323","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186251","bugzilla_description":"CVE-2014-1323 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1323.json"},{"CVE":"CVE-2014-1326","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186252","bugzilla_description":"CVE-2014-1326 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1326.json"},{"CVE":"CVE-2014-1329","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186253","bugzilla_description":"CVE-2014-1329 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1329.json"},{"CVE":"CVE-2014-1330","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186254","bugzilla_description":"CVE-2014-1330 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1330.json"},{"CVE":"CVE-2014-1331","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186255","bugzilla_description":"CVE-2014-1331 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1331.json"},{"CVE":"CVE-2014-1333","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186258","bugzilla_description":"CVE-2014-1333 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1333.json"},{"CVE":"CVE-2014-1334","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186259","bugzilla_description":"CVE-2014-1334 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1334.json"},{"CVE":"CVE-2014-1335","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186262","bugzilla_description":"CVE-2014-1335 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1335.json"},{"CVE":"CVE-2014-1336","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186263","bugzilla_description":"CVE-2014-1336 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1336.json"},{"CVE":"CVE-2014-1337","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186264","bugzilla_description":"CVE-2014-1337 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1337.json"},{"CVE":"CVE-2014-1338","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186265","bugzilla_description":"CVE-2014-1338 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1338.json"},{"CVE":"CVE-2014-1339","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186266","bugzilla_description":"CVE-2014-1339 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1339.json"},{"CVE":"CVE-2014-1341","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186267","bugzilla_description":"CVE-2014-1341 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1341.json"},{"CVE":"CVE-2014-1342","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186268","bugzilla_description":"CVE-2014-1342 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1342.json"},{"CVE":"CVE-2014-1343","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186269","bugzilla_description":"CVE-2014-1343 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1343.json"},{"CVE":"CVE-2014-1346","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186270","bugzilla_description":"CVE-2014-1346 webkitgtk: improper Unicode encoding interpretation (WSA-2015-0001)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1346.json"},{"CVE":"CVE-2014-1713","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186271","bugzilla_description":"CVE-2014-1713 webkitgtk: use-after-free in the AttributeSetter function (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1713.json"},{"CVE":"CVE-2014-1731","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186273","bugzilla_description":"CVE-2014-1731 webkitgtk: improper renderer state check in core/html/HTMLSelectElement.cpp (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1731.json"},{"CVE":"CVE-2014-7907","severity":"important","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2014:1894"],"bugzilla":"1165656","bugzilla_description":"CVE-2014-7907 chromium-browser: Use-after-free in blink","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["chromium-browser-0:39.0.2171.65-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7907.json"},{"CVE":"CVE-2014-7908","severity":"important","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2014:1894"],"bugzilla":"1165657","bugzilla_description":"CVE-2014-7908 chromium-browser: Integer overflow in media","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["chromium-browser-0:39.0.2171.65-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7908.json"},{"CVE":"CVE-2014-7910","severity":"moderate","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2014:1894"],"bugzilla":"1165662","bugzilla_description":"CVE-2014-7910 chromium-browser: Unspecified security issues","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:39.0.2171.65-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7910.json"},{"CVE":"CVE-2014-1344","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181090","bugzilla_description":"CVE-2014-1344 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1344.json"},{"CVE":"CVE-2014-1384","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181095","bugzilla_description":"CVE-2014-1384 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1384.json"},{"CVE":"CVE-2014-1385","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181096","bugzilla_description":"CVE-2014-1385 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1385.json"},{"CVE":"CVE-2014-1386","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181098","bugzilla_description":"CVE-2014-1386 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1386.json"},{"CVE":"CVE-2014-1387","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181099","bugzilla_description":"CVE-2014-1387 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1387.json"},{"CVE":"CVE-2014-1388","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181101","bugzilla_description":"CVE-2014-1388 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1388.json"},{"CVE":"CVE-2014-1389","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181102","bugzilla_description":"CVE-2014-1389 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1389.json"},{"CVE":"CVE-2014-1390","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181103","bugzilla_description":"CVE-2014-1390 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1390.json"},{"CVE":"CVE-2014-3194","severity":"critical","public_date":"2014-10-07T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1151383","bugzilla_description":"CVE-2014-3194 chromium: use-after-free issue in Web Workers fixed in Chrome 38.0.2125.101","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3194.json"},{"CVE":"CVE-2014-3192","severity":"critical","public_date":"2014-10-07T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1151395","bugzilla_description":"CVE-2014-3192 chromium: use-after-free in DOM, fixed in Chrome 38.0.2125.101","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3192.json"},{"CVE":"CVE-2014-3197","severity":"moderate","public_date":"2014-10-07T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1151422","bugzilla_description":"CVE-2014-3197 chromium: information leak in XSS Auditor fixed in Chrome 38.0.2125.101","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3197.json"},{"CVE":"CVE-2014-3200","severity":"critical","public_date":"2014-10-07T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1151425","bugzilla_description":"CVE-2014-3200 chromium: multiple unspecified issues fixed in Chrome 38.0.2125.101","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3200.json"},{"CVE":"CVE-2013-7447","severity":"low","public_date":"2013-06-27T00:00:00Z","advisories":[],"bugzilla":"1306681","bugzilla_description":"CVE-2013-7447 gtk2, gtk3: Integer overflow in image handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7447.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm24-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm24-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm24-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm24-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm24-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm24-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm24_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm24_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm24_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm30-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm30-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm30-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm30-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm30-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm30-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm30_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm30_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkmm30_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtksourceview3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtksourceview3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtksourceview3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtksourceview3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtksourceview3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtksourceview3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gtkspell_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava20-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava20-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava20-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava20-testlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava20-testlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava20-testlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava20_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava20_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava20_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava_security_api_results.json
new file mode 100644
index 0000000..5081f75
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guava_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10237","severity":"moderate","public_date":"2018-04-25T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:3149","RHSA-2020:2562","RHSA-2018:2428","RHSA-2018:2425","RHSA-2018:2743","RHSA-2018:2423","RHSA-2019:2858","RHSA-2018:2643","RHSA-2018:2742","RHSA-2018:2424","RHSA-2018:2741","RHSA-2018:2740","RHSA-2018:2598"],"bugzilla":"1573391","bugzilla_description":"CVE-2018-10237 guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rhvm-appliance-0:4.2-20180828.0.el7","opendaylight-0:8.3.0-3.el7ost","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10237.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gubbi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gubbi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gubbi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-assistedinject_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-assistedinject_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-assistedinject_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-bom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-bom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-bom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-extensions_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-extensions_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-extensions_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-grapher_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-grapher_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-grapher_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-jmx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-jmx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-jmx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-jndi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-jndi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-jndi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-multibindings_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-multibindings_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-multibindings_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-servlet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-servlet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-servlet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-testlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-testlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-testlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-throwingproviders_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-throwingproviders_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guice-throwingproviders_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guile-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guile-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guile-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guile_security_api_results.json
new file mode 100644
index 0000000..7e80b4c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/guile_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-8606","severity":"moderate","public_date":"2016-10-11T00:00:00Z","advisories":[],"bugzilla":"1383972","bugzilla_description":"CVE-2016-8606 guile: REPL server vulnerable to HTTP inter-protocol attacks","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2016-8605","severity":"low","public_date":"2016-10-10T00:00:00Z","advisories":[],"bugzilla":"1383966","bugzilla_description":"CVE-2016-8605 guile: Thread-unsafe umask modification","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8605.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2009-3736","severity":"moderate","public_date":"2009-11-16T00:00:00Z","advisories":["RHSA-2009:1646","RHSA-2010:0039"],"bugzilla":"537941","bugzilla_description":"CVE-2009-3736 libtool: libltdl may load and execute code from a library in the current directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libtool-0:1.5.6-5.el4_8","gcc-0:4.1.2-46.el5_4.2","libtool-0:1.4.3-7","gcc-0:3.2.3-60","gcc-0:3.4.6-11.el4_8.1","libtool-0:1.5.22-7.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3736.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-av_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-av_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-av_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-dlna_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-dlna_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-dlna_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-igd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-igd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-igd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-igd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-igd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp-igd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp_security_api_results.json
new file mode 100644
index 0000000..ce0bc36
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gupnp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12695","severity":"moderate","public_date":"2020-06-08T00:00:00Z","advisories":[],"bugzilla":"1846006","bugzilla_description":"CVE-2020-12695 hostapd: UPnP SUBSCRIBE misbehavior in WPS AP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-400|CWE-918)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12695.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-cups_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-cups_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-cups_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-libs-ui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-libs-ui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-libs-ui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gutenprint_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-afc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-afc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-afc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-afp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-afp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-afp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-archive_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-archive_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-archive_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-fuse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-fuse_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-fuse_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-goa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-goa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-goa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-gphoto2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-gphoto2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-gphoto2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-mtp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-mtp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-mtp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-smb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-smb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs-smb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs_security_api_results.json
new file mode 100644
index 0000000..66bb870
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvfs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-12795","severity":"low","public_date":"2019-06-05T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1726505","bugzilla_description":"CVE-2019-12795 gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["gvfs-0:1.36.2-6.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12795.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-12447","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728562","bugzilla_description":"CVE-2019-12447 gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-12448","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728564","bugzilla_description":"CVE-2019-12448 gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-364","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12448.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-12449","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728567","bugzilla_description":"CVE-2019-12449 gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12449.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-3827","severity":"moderate","public_date":"2018-12-27T00:00:00Z","advisories":["RHSA-2019:2145","RHSA-2019:1517"],"bugzilla":"1665578","bugzilla_description":"CVE-2019-3827 gvfs: Incorrect authorization in admin backend allows privileged users to read and modify arbitrary files without prompting for password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["gvfs-0:1.36.2-3.el7","gvfs-0:1.36.2-2.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3827.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvnc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvnc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gvnc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gzip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gzip_security_api_results.json
new file mode 100644
index 0000000..613514a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/gzip_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-2895","severity":"important","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2011:1154","RHSA-2011:1155","RHSA-2011:1161","RHSA-2011:1834"],"bugzilla":"727624","bugzilla_description":"CVE-2011-2895 BSD compress LZW decoder buffer overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libXfont-0:1.2.2-1.0.3.el5_6","libXfont-0:1.4.1-2.el6_1","freetype-0:2.1.9-19.el4","xorg-x11-0:6.8.2-1.EL.69","libXfont-0:1.2.2-1.0.4.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2895.json"},{"CVE":"CVE-2010-0001","severity":"moderate","public_date":"2010-01-20T00:00:00Z","advisories":["RHSA-2010:0061"],"bugzilla":"554418","bugzilla_description":"CVE-2010-0001 gzip: (64 bit) Integer underflow by decompressing LZW format files","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["gzip-0:1.3.3-15.rhel3","gzip-0:1.3.5-11.el5_4.1","gzip-0:1.3.3-18.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0001.json"},{"CVE":"CVE-2006-4335","severity":"low","public_date":"2006-12-02T00:00:00Z","advisories":["RHSA-2006:0667"],"bugzilla":"220595","bugzilla_description":"CVE-2006-4335 CVE-2006-4336 CVE-2006-4337 multiple vulnerabilities in lha","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-16.rhel4","gzip-0:1.3.3-13.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4335.json"},{"CVE":"CVE-2006-4336","severity":"low","public_date":"2006-12-02T00:00:00Z","advisories":["RHSA-2006:0667"],"bugzilla":"220595","bugzilla_description":"CVE-2006-4335 CVE-2006-4336 CVE-2006-4337 multiple vulnerabilities in lha","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-16.rhel4","gzip-0:1.3.3-13.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4336.json"},{"CVE":"CVE-2006-4337","severity":"low","public_date":"2006-12-02T00:00:00Z","advisories":["RHSA-2006:0667"],"bugzilla":"220595","bugzilla_description":"CVE-2006-4335 CVE-2006-4336 CVE-2006-4337 multiple vulnerabilities in lha","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-16.rhel4","gzip-0:1.3.3-13.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4337.json"},{"CVE":"CVE-2006-4334","severity":"low","public_date":"2006-09-19T00:00:00Z","advisories":["RHSA-2006:0667"],"bugzilla":"1618181","bugzilla_description":"CVE-2006-4334 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-16.rhel4","gzip-0:1.3.3-13.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4334.json"},{"CVE":"CVE-2006-4338","severity":"low","public_date":"2006-09-19T00:00:00Z","advisories":["RHSA-2006:0667"],"bugzilla":"1618182","bugzilla_description":"CVE-2006-4338 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-16.rhel4","gzip-0:1.3.3-13.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4338.json"},{"CVE":"CVE-2005-0758","severity":"low","public_date":"2005-04-22T00:00:00Z","advisories":["RHSA-2005:357","RHSA-2005:474"],"bugzilla":"1617573","bugzilla_description":"CVE-2005-0758 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-12.rhel3","gzip-0:1.3.3-15.rhel4","bzip2-0:1.0.2-11.EL3.4","bzip2-0:1.0.2-13.EL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0758.json"},{"CVE":"CVE-2005-1228","severity":"low","public_date":"2005-04-18T00:00:00Z","advisories":["RHSA-2005:357"],"bugzilla":"1617616","bugzilla_description":"CVE-2005-1228 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-12.rhel3","gzip-0:1.3.3-15.rhel4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1228.json"},{"CVE":"CVE-2005-0988","severity":"low","public_date":"2005-04-04T00:00:00Z","advisories":["RHSA-2005:357"],"bugzilla":"1617595","bugzilla_description":"CVE-2005-0988 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-12.rhel3","gzip-0:1.3.3-15.rhel4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0988.json"},{"CVE":"CVE-2003-0367","severity":"moderate","public_date":"2003-07-02T00:00:00Z","advisories":[],"bugzilla":"1850889","bugzilla_description":"CVE-2003-0367 gzip: symlink attack on temporary files leads to arbitrary file overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-20|CWE-377)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0367.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.2"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest-demo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest-demo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest-demo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hamcrest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/haproxy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/haproxy_security_api_results.json
new file mode 100644
index 0000000..8cbcdc4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/haproxy_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-11100","severity":"critical","public_date":"2020-04-02T13:00:00Z","advisories":["RHSA-2020:1288","RHSA-2020:1287","RHSA-2020:1289","RHSA-2020:1936","RHSA-2020:1290"],"bugzilla":"1819111","bugzilla_description":"CVE-2020-11100 haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-787","affected_packages":["haproxy-0:1.8.23-3.el7","rh-haproxy18-haproxy-0:1.8.17-1.el7.1","haproxy-0:2.0.13-3.el8","haproxy-0:1.8.15-5.el8_0.1","haproxy-0:1.8.15-6.el8_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11100.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-19330","severity":"moderate","public_date":"2019-11-25T00:00:00Z","advisories":["RHSA-2020:1287","RHSA-2020:2265","RHSA-2020:1936","RHSA-2020:1725"],"bugzilla":"1777584","bugzilla_description":"CVE-2019-19330 haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["haproxy-0:1.8.23-3.el7","haproxy-0:1.8.23-3.el8","haproxy-0:2.0.13-3.el8","rh-haproxy18-haproxy-0:1.8.24-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19330.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-18277","severity":"moderate","public_date":"2019-09-13T00:00:00Z","advisories":["RHSA-2020:1287","RHSA-2020:2265","RHSA-2020:1936","RHSA-2020:1725"],"bugzilla":"1759697","bugzilla_description":"CVE-2019-18277 haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated \"chunked\" value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["haproxy-0:1.8.23-3.el7","haproxy-0:1.8.23-3.el8","haproxy-0:2.0.13-3.el8","rh-haproxy18-haproxy-0:1.8.24-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18277.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-14241","severity":"important","public_date":"2019-07-22T00:00:00Z","advisories":[],"bugzilla":"1733583","bugzilla_description":"CVE-2019-14241 haproxy: DoS via vectors realted to htx_manage_client_side_cookies in proto_htx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14241.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11323","severity":"moderate","public_date":"2019-04-14T00:00:00Z","advisories":[],"bugzilla":"1709229","bugzilla_description":"CVE-2019-11323 haproxy: weak HMAC keys used to TLS session resumption after reload with rotated keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-20615","severity":"important","public_date":"2019-01-08T00:00:00Z","advisories":["RHSA-2019:0275","RHSA-2019:0547","RHSA-2019:0548","RHBA-2019:0326"],"bugzilla":"1663060","bugzilla_description":"CVE-2018-20615 haproxy: Mishandling of priority flag in short HEADERS frame by HTTP/2 decoder allows for crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["haproxy-0:1.8.17-3.el7","rh-haproxy18-haproxy-0:1.8.4-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20102","severity":"moderate","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2019:0547","RHSA-2019:1436","RHBA-2019:0326"],"bugzilla":"1658874","bugzilla_description":"CVE-2018-20102 haproxy: Out-of-bounds read in dns.c:dns_validate_dns_response() allows for memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["haproxy-0:1.8.17-3.el7","rh-haproxy18-haproxy-0:1.8.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-20103","severity":"important","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2019:1436","RHBA-2019:0326"],"bugzilla":"1658876","bugzilla_description":"CVE-2018-20103 haproxy: Infinite recursion via crafted packet allows stack exhaustion and denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["haproxy-0:1.8.17-3.el7","rh-haproxy18-haproxy-0:1.8.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20103.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14645","severity":"important","public_date":"2018-09-20T12:00:00Z","advisories":["RHSA-2018:2882","RHSA-2018:2709","RHBA-2019:0028"],"bugzilla":"1630048","bugzilla_description":"CVE-2018-14645 haproxy: Out-of-bounds read in HPACK decoder","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-haproxy18-haproxy-0:1.8.4-3.el7","haproxy-0:1.8.14-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-11469","severity":"moderate","public_date":"2018-05-25T00:00:00Z","advisories":["RHSA-2019:1436"],"bugzilla":"1582635","bugzilla_description":"CVE-2018-11469 haproxy: Information disclosure in check_request_for_cacheability function in proto_http.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-haproxy18-haproxy-0:1.8.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11469.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-10184","severity":"important","public_date":"2018-04-19T00:00:00Z","advisories":["RHSA-2018:1372"],"bugzilla":"1569297","bugzilla_description":"CVE-2018-10184 haproxy: Heap buffer overflow in mux_h2.c:h2_process_demux() can allow attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-haproxy18-haproxy-0:1.8.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10184.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2016-5360","severity":"moderate","public_date":"2016-06-09T00:00:00Z","advisories":[],"bugzilla":"1346181","bugzilla_description":"CVE-2016-5360 haproxy: denial of service via reqdeny","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5360.json"},{"CVE":"CVE-2016-3711","severity":"low","public_date":"2016-03-17T00:00:00Z","advisories":["RHSA-2016:1064"],"bugzilla":"1322718","bugzilla_description":"CVE-2016-3711 haproxy: Setting cookie containing internal IP address of a pod","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3711.json"},{"CVE":"CVE-2015-3281","severity":"important","public_date":"2015-07-07T00:00:00Z","advisories":["RHSA-2015:1741","RHSA-2015:2666"],"bugzilla":"1239072","bugzilla_description":"CVE-2015-3281 haproxy: information leak in buffer_slow_realign()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-119","affected_packages":["haproxy-0:1.5.4-4.el7_1.1","haproxy-0:1.5.4-2.el6_7.1","haproxy15side-0:1.5.4-2.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3281.json"},{"CVE":"CVE-2013-0163","severity":"low","public_date":"2014-09-05T00:00:00Z","advisories":[],"bugzilla":"892909","bugzilla_description":"CVE-2013-0163 OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0163.json"},{"CVE":"CVE-2014-6269","severity":"moderate","public_date":"2014-08-05T00:00:00Z","advisories":["RHSA-2014:1292"],"bugzilla":"1136552","bugzilla_description":"CVE-2014-6269 haproxy: remote client denial of service vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["haproxy-0:1.5.2-3.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6269.json"},{"CVE":"CVE-2013-2175","severity":"moderate","public_date":"2013-06-17T00:00:00Z","advisories":["RHSA-2013:1120","RHSA-2013:1204"],"bugzilla":"974259","bugzilla_description":"CVE-2013-2175 haproxy: http_get_hdr()/get_ip_from_hdr2() MAX_HDR_HISTORY handling denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["haproxy-0:1.4.22-5.el6_4","haproxy-0:1.4.22-6.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2175.json"},{"CVE":"CVE-2013-1912","severity":"moderate","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0729","RHSA-2013:0868"],"bugzilla":"947581","bugzilla_description":"CVE-2013-1912 haproxy: rewrite rules flaw can lead to arbitrary code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["haproxy-0:1.4.22-5.el6op","haproxy-0:1.4.22-4.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1912.json"},{"CVE":"CVE-2013-0169","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0636","RHSA-2013:0823","RHSA-2013:0833","RHSA-2013:0855","RHSA-2013:0822","RHSA-2013:0587","RHSA-2013:0532","RHSA-2013:1456","RHSA-2014:0416","RHSA-2013:0782","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"907589","bugzilla_description":"CVE-2013-0169 SSL/TLS: CBC padding timing attack (lucky-13)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3","spice-client-msi-0:3.3-12","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el5_9","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0169.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hardlink_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hardlink_security_api_results.json
new file mode 100644
index 0000000..8d0636d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hardlink_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-3630","severity":"moderate","public_date":"2011-10-15T00:00:00Z","advisories":[],"bugzilla":"746709","bugzilla_description":"CVE-2011-3630 hardlink: Multiple stack-based buffer overflows when run on a tree with deeply nested directories","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3630.json"},{"CVE":"CVE-2011-3631","severity":"low","public_date":"2011-10-15T00:00:00Z","advisories":[],"bugzilla":"746710","bugzilla_description":"CVE-2011-3631 hardlink: Multiple integer overflows, when adding string lengths","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3631.json"},{"CVE":"CVE-2011-3632","severity":"low","public_date":"2011-10-15T00:00:00Z","advisories":[],"bugzilla":"746713","bugzilla_description":"CVE-2011-3632 hardlink: Prone to symlink attacks","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3632.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/harfbuzz-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/harfbuzz-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/harfbuzz-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/harfbuzz-icu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/harfbuzz-icu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/harfbuzz-icu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/harfbuzz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/harfbuzz_security_api_results.json
new file mode 100644
index 0000000..91ebe26
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/harfbuzz_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-8947","severity":"moderate","public_date":"2016-01-24T00:00:00Z","advisories":["RHSA-2016:0072"],"bugzilla":"1301553","bugzilla_description":"CVE-2016-2052 CVE-2015-8947 chromium-browser: Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:48.0.2564.82-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8947.json"},{"CVE":"CVE-2016-2052","severity":"moderate","public_date":"2016-01-24T00:00:00Z","advisories":["RHSA-2016:0072"],"bugzilla":"1301553","bugzilla_description":"CVE-2016-2052 CVE-2015-8947 chromium-browser: Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:48.0.2564.82-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2052.json"},{"CVE":"CVE-2015-9274","severity":"low","public_date":"2015-09-29T00:00:00Z","advisories":[],"bugzilla":"1652081","bugzilla_description":"CVE-2015-9274 harfbuzz: DoS due to GPOS and GSUB table mishandling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hawtjni-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hawtjni-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hawtjni-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hawtjni-runtime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hawtjni-runtime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hawtjni-runtime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hawtjni_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hawtjni_security_api_results.json
new file mode 100644
index 0000000..a7100b7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hawtjni_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-2035","severity":"low","public_date":"2013-05-13T00:00:00Z","advisories":["RHSA-2014:1290","RHSA-2014:1291","RHSA-2014:1995","RHSA-2014:0245","RHSA-2014:0400","RHSA-2014:0254","RHSA-2014:0029","RHSA-2014:0401","RHSA-2013:1029","RHSA-2015:0034","RHSA-2014:1904","RHSA-2013:1786","RHSA-2013:1784","RHSA-2013:1785"],"bugzilla":"958618","bugzilla_description":"CVE-2013-2035 HawtJNI: predictable temporary file name leading to local arbitrary code execution","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-377","affected_packages":["jansi-0:1.9-5.redhat_3.1.ep6.el5","activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2035.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hdparm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hdparm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hdparm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/help2man_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/help2man_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/help2man_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hesiod-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hesiod-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hesiod-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hesiod_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hesiod_security_api_results.json
new file mode 100644
index 0000000..1df7174
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hesiod_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10152","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1332493","bugzilla_description":"CVE-2016-10152 hesiod: Use of hard-coded unsafe configuration if configuration file cannot be opened","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-547","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10152.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10151","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1332508","bugzilla_description":"CVE-2016-10151 hesiod: Weak SUID check allowing privilege elevation","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-547","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10151.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hexchat-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hexchat-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hexchat-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hexchat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hexchat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hexchat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hexedit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hexedit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hexedit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hicolor-icon-theme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hicolor-icon-theme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hicolor-icon-theme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/highlight-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/highlight-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/highlight-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/highlight_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/highlight_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/highlight_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hivex-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hivex-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hivex-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hivex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hivex_security_api_results.json
new file mode 100644
index 0000000..a8e7e3c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hivex_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-9273","severity":"moderate","public_date":"2014-10-29T00:00:00Z","advisories":["RHSA-2015:0301","RHSA-2015:1378"],"bugzilla":"1167756","bugzilla_description":"CVE-2014-9273 hivex: missing checks for small-sized files","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["hivex-0:1.3.10-5.7.el7","hivex-0:1.3.3-4.3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9273.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hostname_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hostname_security_api_results.json
new file mode 100644
index 0000000..de1a8f8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hostname_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-2099","severity":"low","public_date":"2013-05-15T00:00:00Z","advisories":["RHSA-2016:1166","RHBA-2016:1500","RHSA-2014:1690","RHSA-2015:0042","RHSA-2014:1263"],"bugzilla":"963260","bugzilla_description":"CVE-2013-2099 python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-backports-ssl_match_hostname-0:3.4.0.2-1.el6","python-pymongo-0:3.2-1.el7sat","python-pymongo-0:3.2-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip_security_api_results.json
new file mode 100644
index 0000000..db80e4d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hplip_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-0839","severity":"low","public_date":"2015-05-29T00:00:00Z","advisories":[],"bugzilla":"1227252","bugzilla_description":"CVE-2015-0839 hplip: hp-plugin verified binary download with short key ID","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0839.json"},{"CVE":"CVE-2013-6427","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1038434","bugzilla_description":"CVE-2013-6427 hplip: insecure auto update feature","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6427.json"},{"CVE":"CVE-2013-6402","severity":"low","public_date":"2013-10-09T00:00:00Z","advisories":[],"bugzilla":"1035243","bugzilla_description":"CVE-2013-6402 hplip: insecure temporary file handling in pkit.py","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6402.json"},{"CVE":"CVE-2013-4325","severity":"important","public_date":"2013-09-18T00:00:00Z","advisories":["RHSA-2013:1274"],"bugzilla":"1006674","bugzilla_description":"CVE-2013-4325 hplip: Insecure calling of polkit","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["hplip-0:3.12.4-4.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4325.json"},{"CVE":"CVE-2013-0200","severity":"low","public_date":"2013-02-21T00:00:00Z","advisories":["RHSA-2013:0500"],"bugzilla":"902163","bugzilla_description":"CVE-2013-0200 hplip: insecure temporary file handling flaws","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["hplip-0:3.12.4-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0200.json"},{"CVE":"CVE-2012-6108","severity":"low","public_date":"2012-11-27T00:00:00Z","advisories":[],"bugzilla":"894283","bugzilla_description":"CVE-2012-6108 hplip: default permissions for /var/log/hp are too open","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6108.json"},{"CVE":"CVE-2011-2722","severity":"low","public_date":"2011-07-13T00:00:00Z","advisories":["RHSA-2013:0500","RHSA-2013:0133"],"bugzilla":"725830","bugzilla_description":"CVE-2011-2722 hplip: insecure temporary file handling","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["hplip-0:3.12.4-4.el6","hplip3-0:3.9.8-15.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2722.json"},{"CVE":"CVE-2010-4267","severity":"moderate","public_date":"2011-01-10T00:00:00Z","advisories":["RHSA-2011:0154"],"bugzilla":"662740","bugzilla_description":"CVE-2010-4267 hplip: remote stack overflow vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["hplip3-0:3.9.8-11.el5_6.1","hplip-0:3.9.8-33.el6_0.1","hplip-0:1.6.7-6.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4267.json"},{"CVE":"CVE-2008-2940","severity":"moderate","public_date":"2008-08-12T00:00:00Z","advisories":["RHSA-2008:0818"],"bugzilla":"455235","bugzilla_description":"CVE-2008-2940 hpssd of hplip allows unprivileged user to trigger alert mail","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["hplip-0:1.6.7-4.1.el5_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2940.json"},{"CVE":"CVE-2008-2941","severity":"moderate","public_date":"2008-08-12T00:00:00Z","advisories":["RHSA-2008:0818"],"bugzilla":"457052","bugzilla_description":"CVE-2008-2941 hplip hpssd.py Denial-Of-Service parsing vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["hplip-0:1.6.7-4.1.el5_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2941.json"},{"CVE":"CVE-2007-5208","severity":"important","public_date":"2007-10-11T00:00:00Z","advisories":["RHSA-2007:0960"],"bugzilla":"319921","bugzilla_description":"CVE-2007-5208 hplip arbitrary command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["hplip-0:1.6.7-4.1.el5_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5208.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hspell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hspell_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hspell_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/http-parser-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/http-parser-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/http-parser-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/http-parser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/http-parser_security_api_results.json
new file mode 100644
index 0000000..cdad835
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/http-parser_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-15605","severity":"important","public_date":"2020-02-07T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:1510","RHSA-2020:0597","RHSA-2020:0708","RHSA-2020:0707","RHSA-2020:0602","RHSA-2020:0703","RHSA-2020:0598","RHSA-2020:0579"],"bugzilla":"1800364","bugzilla_description":"CVE-2019-15605 nodejs: HTTP request smuggling using malformed Transfer-Encoding header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["nodejs:12-8010020200220143053.c27ad7f8","http-parser-0:2.7.1-8.el7_7.2","rh-nodejs12-nodejs-0:12.16.1-1.el7","http-parser-0:2.8.0-2.el8_0.2","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","http-parser-0:2.8.0-5.el8_1.2","http-parser-0:2.7.1-5.el7_6.1","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15605.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2018-12121","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:3497","RHSA-2019:2258","RHSA-2019:1821","RHSA-2019:2939"],"bugzilla":"1661002","bugzilla_description":"CVE-2018-12121 nodejs: Denial of Service with large HTTP headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["http-parser-0:2.8.0-5.el8","http-parser-0:2.7.1-8.el7","rh-nodejs8-nodejs-0:8.16.0-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12121.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7159","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2018:2949","RHSA-2019:2258"],"bugzilla":"1561981","bugzilla_description":"CVE-2018-7159 nodejs: HTTP parser allowed for spaces inside Content-Length header values","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs8-nodejs-0:8.11.4-1.el7","http-parser-0:2.7.1-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-client-cache_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-client-cache_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-client-cache_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-client-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-client-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-client-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-client_security_api_results.json
new file mode 100644
index 0000000..b35d579
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-client_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-3577","severity":"important","public_date":"2014-08-18T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2016:1773","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1082","RHSA-2014:1320","RHSA-2014:1166","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1146","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2016:1931","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1834","RHSA-2014:1833","RHSA-2015:1177","RHSA-2014:1836","RHSA-2015:1176","RHSA-2014:1835"],"bugzilla":"1129074","bugzilla_description":"CVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","httpcomponents-client-0:4.2.5-5.el7_0","org.ovirt.engine-root-0:3.5.0-29","jakarta-commons-httpclient-1:3.1-16.el7_0","thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1","jakarta-commons-httpclient-1:3.1-0.9.el6_5","jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2012-6153","severity":"important","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1320","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1098","RHSA-2014:1834","RHSA-2014:1833","RHSA-2014:1836","RHSA-2014:1835"],"bugzilla":"1129916","bugzilla_description":"CVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","devtoolset-2-httpcomponents-client-0:4.2.1-6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","org.ovirt.engine-root-0:3.5.0-29","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6153.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-core-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-core-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-core-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-core_security_api_results.json
new file mode 100644
index 0000000..a209961
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-core_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5262","severity":"low","public_date":"2015-09-03T00:00:00Z","advisories":[],"bugzilla":"1261538","bugzilla_description":"CVE-2015-5262 jakarta-commons-httpclient, httpcomponents-core: missing HTTPS connection timeout","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5262.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-project_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-project_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpcomponents-project_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-manual_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-manual_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-manual_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd_security_api_results.json
new file mode 100644
index 0000000..f2e9559
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/httpd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-1968","severity":"low","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877458","bugzilla_description":"CVE-2020-1968 openssl: Information exposure when DH secret are reused across multiple TLS connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-8231","severity":"low","public_date":"2020-08-19T00:00:00Z","advisories":[],"bugzilla":"1868032","bugzilla_description":"CVE-2020-8231 curl: Expired pointer dereference via multi API with `CURLOPT_CONNECT_ONLY` option set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8231.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-11985","severity":"moderate","public_date":"2020-08-07T00:00:00Z","advisories":["RHBA-2015:2194","RHSA-2017:1161"],"bugzilla":"1866559","bugzilla_description":"CVE-2020-11985 httpd: IP address spoofing when proxying using mod_remoteip and mod_rewrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["httpd-0:2.4.6-40.el7","httpd24-httpd-0:2.4.25-9.el7","httpd24-httpd-0:2.4.25-9.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11985.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-9490","severity":"important","public_date":"2020-08-07T00:00:00Z","advisories":["RHSA-2020:3726","RHSA-2020:3714","RHSA-2020:3733","RHSA-2020:3734"],"bugzilla":"1866560","bugzilla_description":"CVE-2020-9490 httpd: Push diary crash on specifically crafted HTTP/2 header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd:2.4-8000020200825105249.f8e95b4e","httpd24-httpd-0:2.4.34-18.el7.1","httpd24-httpd-0:2.4.34-18.el6.1","httpd:2.4-8010020200824180659.c27ad7f8","httpd:2.4-8020020200824162909.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9490.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-11984","severity":"moderate","public_date":"2020-08-07T00:00:00Z","advisories":[],"bugzilla":"1866563","bugzilla_description":"CVE-2020-11984 httpd: mod_proxy_uwsgi buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11984.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-11993","severity":"moderate","public_date":"2020-08-07T00:00:00Z","advisories":[],"bugzilla":"1866564","bugzilla_description":"CVE-2020-11993 httpd: mod_http2 concurrent pool usage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11993.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8177","severity":"moderate","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1847915","bugzilla_description":"CVE-2020-8177 curl: Incorrect argument check can allow remote servers to overwrite local files","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8177.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-8169","severity":"moderate","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1847916","bugzilla_description":"CVE-2020-8169 libcurl: partial password leak over DNS on HTTP redirect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8169.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-11080","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:2852","RHSA-2020:2850","RHSA-2020:2784","RHSA-2020:2848","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:2646","RHSA-2020:2823","RHSA-2020:2644","RHSA-2020:2523","RHSA-2020:2524","RHSA-2020:2755","RHSA-2020:3042","RHSA-2020:3084"],"bugzilla":"1844929","bugzilla_description":"CVE-2020-11080 nghttp2: overly large SETTINGS frames can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["servicemesh-proxy-0:1.0.10-3.el8","nghttp2-0:1.33.0-3.el8_1.1","rh-nodejs10-nodejs-0:10.21.0-3.el7","nghttp2-0:1.33.0-3.el8_2.1","nodejs:12-8010020200630154708.c27ad7f8","httpd24-nghttp2-0:1.7.1-8.el7.1","nodejs:10-8010020200617134056.c27ad7f8","httpd24-nghttp2-0:1.7.1-8.el6.1","nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","rh-nodejs12-nodejs-0:12.18.2-1.el7","servicemesh-proxy-0:1.1.2-3.el8","nodejs:10-8020020200617141353.4cda2c84","nghttp2-0:1.33.0-1.el8_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11080.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1927","severity":"moderate","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:2263","RHSA-2020:3958","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1820761","bugzilla_description":"CVE-2020-1927 httpd: mod_rewrite configurations vulnerable to open redirect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["httpd-0:2.4.6-95.el7","httpd24-httpd-0:2.4.34-18.el6","httpd24-httpd-0:2.4.34-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1927.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-1934","severity":"low","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:3958","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1820772","bugzilla_description":"CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["httpd-0:2.4.6-95.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1934.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-15601","severity":"low","public_date":"2020-01-06T00:00:00Z","advisories":[],"bugzilla":"1794143","bugzilla_description":"CVE-2019-15601 curl: improper input validation allows users to create a 'FILE:' URL that can make the client access a remote file using SMB","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15601.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-5481","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792"],"bugzilla":"1749402","bugzilla_description":"CVE-2019-5481 curl: double free due to subsequent call of realloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5481.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2019-5482","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0250","RHSA-2020:1792","RHSA-2020:3916"],"bugzilla":"1749652","bugzilla_description":"CVE-2019-5482 curl: heap buffer overflow in function tftp_receive_packet()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-59.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5482.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-15903","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3193"],"bugzilla":"1752592","bugzilla_description":"CVE-2019-15903 expat: heap-based buffer over-read via crafted XML input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-125)","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","thunderbird-0:68.2.0-1.el7_7","expat-0:2.1.0-12.el7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15903.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-10092","severity":"low","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2019:4126","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1743956","bugzilla_description":"CVE-2019-10092 httpd: limited cross-site scripting in mod_proxy error page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["httpd24-httpd-0:2.4.34-15.el7","httpd24-httpd-0:2.4.34-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10092.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-10098","severity":"low","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2020:2263","RHSA-2020:3958","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1743959","bugzilla_description":"CVE-2019-10098 httpd: mod_rewrite potential open redirect","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.4.6-95.el7","httpd24-httpd-0:2.4.34-18.el6","httpd24-httpd-0:2.4.34-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10098.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-10081","severity":"moderate","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1743966","bugzilla_description":"CVE-2019-10081 httpd: memory corruption on early pushes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10081.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-10082","severity":"moderate","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1743974","bugzilla_description":"CVE-2019-10082 httpd: read-after-free in h2 connection shutdown","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10082.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-10097","severity":"moderate","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2019:4126","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1743996","bugzilla_description":"CVE-2019-10097 httpd: null-pointer dereference in mod_remoteip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-120|CWE-416)","affected_packages":["httpd24-httpd-0:2.4.34-15.el7","httpd24-httpd-0:2.4.34-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10097.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2019-9513","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:3041","RHSA-2019:2692","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1735741","bugzilla_description":"CVE-2019-9513 HTTP/2: flood using PRIORITY frames results in excessive resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","rh-nginx112-nginx-1:1.12.1-3.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","kiali-0:v1.0.6.redhat1-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9511","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3932","RHSA-2019:2799","RHSA-2020:2067","RHSA-2019:2775","RHSA-2019:3041","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4021","RHSA-2019:2692","RHSA-2020:1445","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2020:3192","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741860","bugzilla_description":"CVE-2019-9511 HTTP/2: large amount of data requests leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","kiali-0:v1.0.6.redhat1-1.el7","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9516","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741864","bugzilla_description":"CVE-2019-9516 HTTP/2: 0-length headers lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9517","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:2893","RHSA-2019:3932","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2955","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741868","bugzilla_description":"CVE-2019-9517 HTTP/2: request for large response leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","httpd:2.4-8000020190829150747.f8e95b4e","nodejs:10-8000020190911085529.f8e95b4e","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9517.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-5443","severity":"important","public_date":"2019-06-25T00:00:00Z","advisories":[],"bugzilla":"1772100","bugzilla_description":"CVE-2019-5443 curl: Windows OpenSSL engine code injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5443.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2018-20843","severity":"moderate","public_date":"2019-06-24T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1723723","bugzilla_description":"CVE-2018-20843 expat: large number of colons in input makes parser consume high amount of resources, leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["expat-0:2.1.0-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-13038","severity":"moderate","public_date":"2019-06-20T00:00:00Z","advisories":["RHSA-2020:1003","RHSA-2020:1660"],"bugzilla":"1725740","bugzilla_description":"CVE-2019-13038 mod_auth_mellon: Open Redirect via the login?ReturnTo= substring which could facilitate information theft","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["mod_auth_mellon-0:0.14.0-8.el7","mod_auth_mellon-0:0.14.0-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13038.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-5435","severity":"low","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1710609","bugzilla_description":"CVE-2019-5435 curl: Integer overflows in curl_url_set() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-5436","severity":"low","public_date":"2019-05-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1020","RHBA-2020:1539","RHSA-2020:1792","RHSA-2019:1543","RHSA-2020:2505","RHBA-2020:1540"],"bugzilla":"1710620","bugzilla_description":"CVE-2019-5436 curl: TFTP receive heap buffer overflow in tftp_receive_packet() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","curl-0:7.29.0-54.el7_7.3","redhat-coreos-43.82.202007300301.0","curl-0:7.29.0-57.el7","curl-0:7.61.1-12.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5436.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-0211","severity":"important","public_date":"2019-04-01T00:00:00Z","advisories":["RHSA-2019:0980","RHSA-2019:1297","RHSA-2019:1296","RHSA-2019:1543","RHSA-2019:0746"],"bugzilla":"1694980","bugzilla_description":"CVE-2019-0211 httpd: privilege escalation from modules scripts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["httpd24-httpd-0:2.4.34-7.el7.1","httpd:2.4-8000020190405071959.55190bc5","httpd24-httpd-0:2.4.34-7.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-0217","severity":"moderate","public_date":"2019-04-01T00:00:00Z","advisories":["RHSA-2019:2343","RHSA-2019:3436","RHSA-2019:3932","RHSA-2019:4126","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1695020","bugzilla_description":"CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["httpd:2.4-8010020190829143335.cdc1202b","httpd-0:2.4.6-90.el7","httpd24-httpd-0:2.4.34-15.el7","httpd24-httpd-0:2.4.34-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0217.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2019-0215","severity":"important","public_date":"2019-04-01T00:00:00Z","advisories":["RHSA-2019:0980"],"bugzilla":"1695025","bugzilla_description":"CVE-2019-0215 httpd: mod_ssl: access control bypass when using per-location client certification authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["httpd:2.4-8000020190405071959.55190bc5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0215.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-0196","severity":"low","public_date":"2019-04-01T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:3933","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3935"],"bugzilla":"1695030","bugzilla_description":"CVE-2019-0196 httpd: mod_http2: read-after-free on a string compare","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-0220","severity":"low","public_date":"2019-04-01T00:00:00Z","advisories":["RHSA-2019:2343","RHSA-2019:3436","RHSA-2020:0250","RHSA-2020:0251","RHSA-2019:4126"],"bugzilla":"1695036","bugzilla_description":"CVE-2019-0220 httpd: URL normalization inconsistency","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-41","affected_packages":["httpd:2.4-8010020190829143335.cdc1202b","httpd-0:2.4.6-90.el7","httpd24-httpd-0:2.4.34-15.el7","httpd24-httpd-0:2.4.34-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0220.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-3877","severity":"moderate","public_date":"2019-03-22T00:00:00Z","advisories":["RHSA-2019:3421","RHSA-2019:0766"],"bugzilla":"1691125","bugzilla_description":"CVE-2019-3877 mod_auth_mellon: open redirect in logout url when using URLs with backslashes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["mod_auth_mellon-0:0.14.0-2.el7_6.4","mod_auth_mellon-0:0.14.0-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3877.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.8"},{"CVE":"CVE-2018-16890","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670252","bugzilla_description":"CVE-2018-16890 curl: NTLM type-2 heap out-of-bounds buffer read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-190","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-3822","severity":"moderate","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670254","bugzilla_description":"CVE-2019-3822 curl: NTLMv2 type-3 header stack buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-3823","severity":"low","public_date":"2019-02-06T00:00:00Z","advisories":["RHSA-2019:3701","RHSA-2019:1543","RHBA-2019:3303"],"bugzilla":"1670256","bugzilla_description":"CVE-2019-3823 curl: SMTP end-of-response out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-0197","severity":"low","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:3933","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3935"],"bugzilla":"1695042","bugzilla_description":"CVE-2019-0197 httpd: mod_http2: possible crash on late upgrade","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2019-0190","severity":"important","public_date":"2019-01-22T00:00:00Z","advisories":[],"bugzilla":"1668488","bugzilla_description":"CVE-2019-0190 httpd: mod_ssl: infinite loop triggered by client-initiated renegotiation when using OpenSSL 1.1.1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0190.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-17199","severity":"moderate","public_date":"2019-01-22T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2020:1121","RHSA-2019:4126","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1668493","bugzilla_description":"CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":["httpd-0:2.4.6-93.el7","httpd24-httpd-0:2.4.34-15.el7","httpd24-httpd-0:2.4.34-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17199.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-17189","severity":"low","public_date":"2019-01-22T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:4126","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1668497","bugzilla_description":"CVE-2018-17189 httpd: mod_http2: DoS via slow, unneeded request bodies","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd24-httpd-0:2.4.34-15.el7","httpd24-httpd-0:2.4.34-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17189.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16839","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":["RHSA-2019:1543"],"bugzilla":"1642201","bugzilla_description":"CVE-2018-16839 curl: Integer overflow leading to heap-based buffer overflow in Curl_sasl_create_plain_message()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-16840","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":["RHSA-2019:1543"],"bugzilla":"1642203","bugzilla_description":"CVE-2018-16840 curl: Use-after-free when closing \"easy\" handle in Curl_close()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16840.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-16842","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":["RHSA-2019:1543","RHSA-2019:2181"],"bugzilla":"1644124","bugzilla_description":"CVE-2018-16842 curl: Heap-based buffer over-read in the curl tool warning formatting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["curl-0:7.29.0-54.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2018-11763","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3558"],"bugzilla":"1633399","bugzilla_description":"CVE-2018-11763 httpd: DoS for HTTP/2 connections by continuous SETTINGS frames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["httpd24-httpd-0:2.4.34-7.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11763.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14618","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2019:1880","RHSA-2018:3558"],"bugzilla":"1622707","bugzilla_description":"CVE-2018-14618 curl: NTLM password overflow via integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-4975","severity":"moderate","public_date":"2018-08-14T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2017:0906","RHSA-2018:2486","RHSA-2018:2186"],"bugzilla":"1375968","bugzilla_description":"CVE-2016-4975 httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["httpd-0:2.4.6-45.el7_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-1333","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3558"],"bugzilla":"1605048","bugzilla_description":"CVE-2018-1333 httpd: mod_http2: Too much time allocated to workers, possibly leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd24-httpd-0:2.4.34-7.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1333.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-8011","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1605052","bugzilla_description":"CVE-2018-8011 httpd: mod_md: NULL pointer dereference causing httpd child process crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8011.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-0500","severity":"moderate","public_date":"2018-07-11T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1597101","bugzilla_description":"CVE-2018-0500 curl: Heap-based buffer overflow in Curl_smtp_escape_eob() when uploading data over SMTP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000300","severity":"important","public_date":"2018-05-16T00:00:00Z","advisories":[],"bugzilla":"1575533","bugzilla_description":"CVE-2018-1000300 curl: FTP shutdown response heap-based buffer overflow can potentially lead to RCE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000300.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000301","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1575536","bugzilla_description":"CVE-2018-1000301 curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000301.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-3878","severity":"important","public_date":"2018-05-10T00:00:00Z","advisories":["RHSA-2019:0746","RHSA-2019:0985","RHSA-2019:0766"],"bugzilla":"1691126","bugzilla_description":"CVE-2019-3878 mod_auth_mellon: authentication bypass in ECP flow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["httpd24-mod_auth_mellon-0:0.13.1-2.el7.1","mod_auth_mellon-0:0.14.0-2.el7_6.4","mod_auth_mellon-0:0.14.0-3.el8_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3878.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2018-1000168","severity":"moderate","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366"],"bugzilla":"1565035","bugzilla_description":"CVE-2018-1000168 nghttp2: Null pointer dereference when too large ALTSVC frame is received","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000168.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15710","severity":"low","public_date":"2018-03-24T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2020:1121","RHSA-2019:0366","RHSA-2018:3558"],"bugzilla":"1560599","bugzilla_description":"CVE-2017-15710 httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language values","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["httpd-0:2.4.6-93.el7","httpd24-httpd-0:2.4.34-7.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15710.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15715","severity":"low","public_date":"2018-03-24T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3558","RHSA-2020:3958"],"bugzilla":"1560614","bugzilla_description":"CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["httpd24-httpd-0:2.4.34-7.el7","httpd-0:2.4.6-95.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15715.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-1283","severity":"moderate","public_date":"2018-03-21T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3558","RHSA-2020:3958"],"bugzilla":"1560395","bugzilla_description":"CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["httpd24-httpd-0:2.4.34-7.el7","httpd-0:2.4.6-95.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-1303","severity":"moderate","public_date":"2018-03-21T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3558","RHSA-2020:3958"],"bugzilla":"1560399","bugzilla_description":"CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-httpd-0:2.4.34-7.el7","httpd-0:2.4.6-95.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1303.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1302","severity":"low","public_date":"2018-03-21T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366"],"bugzilla":"1560625","bugzilla_description":"CVE-2018-1302 httpd: Use-after-free on HTTP/2 stream shutdown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-1312","severity":"low","public_date":"2018-03-21T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3558","RHSA-2019:1898"],"bugzilla":"1560634","bugzilla_description":"CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["httpd-0:2.4.6-89.el7_6.1","httpd24-httpd-0:2.4.34-7.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1312.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-1301","severity":"low","public_date":"2018-03-21T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2020:1121","RHSA-2019:0366","RHSA-2018:3558"],"bugzilla":"1560643","bugzilla_description":"CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd-0:2.4.6-93.el7","httpd24-httpd-0:2.4.34-7.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1301.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-1000120","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1552628","bugzilla_description":"CVE-2018-1000120 curl: FTP path trickery leads to NIL byte out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000120.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-1000121","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1552631","bugzilla_description":"CVE-2018-1000121 curl: LDAP NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000121.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000122","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1553398","bugzilla_description":"CVE-2018-1000122 curl: RTSP RTP buffer over-read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000122.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000005","severity":"low","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2019:1543"],"bugzilla":"1536013","bugzilla_description":"CVE-2018-1000005 curl: Out-of-bounds read in code handling HTTP/2 trailers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-1000007","severity":"moderate","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2020:0594","RHSA-2019:1543","RHSA-2018:3558","RHSA-2018:3157","RHSA-2020:0544"],"bugzilla":"1537125","bugzilla_description":"CVE-2018-1000007 curl: HTTP authentication leak in redirects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["httpd24-curl-0:7.61.1-1.el7","curl-0:7.29.0-46.el7_5.1","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-51.el7","curl-0:7.29.0-42.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000007.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-15111","severity":"low","public_date":"2018-01-05T00:00:00Z","advisories":["RHSA-2019:2137"],"bugzilla":"1511623","bugzilla_description":"CVE-2017-15111 keycloak-httpd-client-install: unsafe /tmp log file in --log-file option in keycloak_cli.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["keycloak-httpd-client-install-0:0.8-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15111.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2017-15112","severity":"low","public_date":"2018-01-05T00:00:00Z","advisories":["RHSA-2019:2137"],"bugzilla":"1511626","bugzilla_description":"CVE-2017-15112 keycloak-httpd-client-install: unsafe use of -p/--admin-password on command line","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["keycloak-httpd-client-install-0:0.8-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15112.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2017-8816","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1515757","bugzilla_description":"CVE-2017-8816 curl: NTLM buffer overflow via integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8817","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1515760","bugzilla_description":"CVE-2017-8817 curl: FTP wildcard out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-8818","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":[],"bugzilla":"1517691","bugzilla_description":"CVE-2017-8818 curl: Out-of-bound access in SSL related cleanup code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16231","severity":null,"public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1700392","bugzilla_description":"CVE-2017-16231 pcre: self-recursive call in match() in pcre_exec.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-1000257","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2017:3263","RHSA-2018:2486"],"bugzilla":"1503705","bugzilla_description":"CVE-2017-1000257 curl: IMAP FETCH response out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-42.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-12613","severity":"important","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2018:0316","RHSA-2017:3270","RHSA-2018:0465","RHSA-2017:3475","RHSA-2018:0466","RHSA-2018:1253","RHSA-2017:3476","RHSA-2017:3477"],"bugzilla":"1506523","bugzilla_description":"CVE-2017-12613 apr: Out-of-bounds array deref in apr_time_exp*() functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["apr-0:1.4.8-3.el7_3.1","apr-0:1.4.8-3.el7_2.1","apr-0:1.3.9-5.el6_6.1","apr-0:1.4.8-3.el7_4.1","apr-0:1.3.9-5.el6_7.1","apr-0:1.3.9-5.el6_5.1","httpd24-apr-0:1.5.1-1.el6.1","apr-0:1.3.9-5.el6_9.1","apr-0:1.3.9-5.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12613.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2017-12618","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":[],"bugzilla":"1506532","bugzilla_description":"CVE-2017-12618 apr-util: Out-of-bounds access in corrupted SDBM database","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12618.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-12171","severity":"moderate","public_date":"2017-10-19T00:00:00Z","advisories":["RHSA-2017:2972"],"bugzilla":"1493056","bugzilla_description":"CVE-2017-12171 httpd: # character matches all IPs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["httpd-0:2.2.15-60.el6_9.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12171.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-1000254","severity":"moderate","public_date":"2017-10-04T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1495541","bugzilla_description":"CVE-2017-1000254 curl: FTP PWD response parser out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-9798","severity":"moderate","public_date":"2017-09-18T00:00:00Z","advisories":["RHSA-2017:3195","RHSA-2017:3240","RHSA-2017:3193","RHSA-2017:3194","RHSA-2017:3475","RHSA-2017:2972","RHSA-2017:3476","RHSA-2017:2882","RHSA-2017:3113","RHSA-2017:3477","RHSA-2017:3114","RHSA-2017:3018","RHSA-2017:3239"],"bugzilla":"1490344","bugzilla_description":"CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method (Optionsbleed)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["httpd-0:2.2.15-60.el6_9.6","httpd-0:2.4.6-40.el7_2.6","httpd-0:2.2.15-47.el6_7.5","httpd-0:2.4.6-45.el7_3.5","httpd-0:2.2.26-57.ep6.el6","httpd-0:2.4.6-67.el7_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-1000101","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1478309","bugzilla_description":"CVE-2017-1000101 curl: URL globbing out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2017-1000100","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1478310","bugzilla_description":"CVE-2017-1000100 curl: TFTP sends more than buffer size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-1000099","severity":"moderate","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1478316","bugzilla_description":"CVE-2017-1000099 curl: FILE buffer read out of bounds","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000099.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-9788","severity":"important","public_date":"2017-07-11T00:00:00Z","advisories":["RHSA-2017:3195","RHSA-2017:3240","RHSA-2017:3193","RHSA-2017:3194","RHSA-2017:2483","RHSA-2017:2478","RHSA-2017:3113","RHSA-2017:3114","RHSA-2017:2710","RHSA-2017:2479","RHSA-2017:3239","RHSA-2017:2709","RHSA-2017:2708"],"bugzilla":"1470748","bugzilla_description":"CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["httpd24-httpd-0:2.4.25-9.el6.1","httpd-0:2.2.15-60.el6_9.5","httpd24-httpd-0:2.4.25-9.el7.1","httpd-0:2.4.6-67.el7_4.2","httpd-0:2.4.6-40.el7_2.6","httpd-0:2.2.15-47.el6_7.5","httpd-0:2.4.6-45.el7_3.5","httpd-0:2.2.26-57.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9788.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-9789","severity":"important","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1470750","bugzilla_description":"CVE-2017-9789 httpd: Read after free in mod_http2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9789.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-11164","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":[],"bugzilla":"1470107","bugzilla_description":"CVE-2017-11164 pcre: OP_KETRMAX feature in the match function in pcre_exec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-3167","severity":"moderate","public_date":"2017-06-20T00:00:00Z","advisories":["RHSA-2017:2479","RHSA-2017:3195","RHSA-2017:3193","RHSA-2017:3194","RHSA-2017:3475","RHSA-2017:2483","RHSA-2017:2478","RHSA-2017:3476","RHSA-2017:3477"],"bugzilla":"1463194","bugzilla_description":"CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["httpd24-httpd-0:2.4.25-9.el6.1","httpd-0:2.2.15-60.el6_9.5","httpd24-httpd-0:2.4.25-9.el7.1","httpd-0:2.4.6-67.el7_4.2","httpd-0:2.4.6-40.el7_2.6","httpd-0:2.2.15-47.el6_7.5","httpd-0:2.4.6-45.el7_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-3169","severity":"moderate","public_date":"2017-06-20T00:00:00Z","advisories":["RHSA-2017:2479","RHSA-2017:3195","RHSA-2017:3193","RHSA-2017:3194","RHSA-2017:3475","RHSA-2017:2483","RHSA-2017:2478","RHSA-2017:3476","RHSA-2017:3477"],"bugzilla":"1463197","bugzilla_description":"CVE-2017-3169 httpd: mod_ssl NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["httpd24-httpd-0:2.4.25-9.el6.1","httpd-0:2.2.15-60.el6_9.5","httpd24-httpd-0:2.4.25-9.el7.1","httpd-0:2.4.6-67.el7_4.2","httpd-0:2.4.6-40.el7_2.6","httpd-0:2.2.15-47.el6_7.5","httpd-0:2.4.6-45.el7_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7659","severity":"moderate","public_date":"2017-06-20T00:00:00Z","advisories":["RHSA-2017:2483"],"bugzilla":"1463199","bugzilla_description":"CVE-2017-7659 httpd: mod_http2 NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["httpd24-httpd-0:2.4.25-9.el6.1","httpd24-httpd-0:2.4.25-9.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7659.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7668","severity":"moderate","public_date":"2017-06-20T00:00:00Z","advisories":["RHSA-2017:2479","RHSA-2017:3193","RHSA-2017:3194","RHSA-2017:2483"],"bugzilla":"1463205","bugzilla_description":"CVE-2017-7668 httpd: ap_find_token() buffer overread","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["httpd24-httpd-0:2.4.25-9.el6.1","httpd24-httpd-0:2.4.25-9.el7.1","httpd-0:2.4.6-67.el7_4.2","httpd-0:2.4.6-40.el7_2.6","httpd-0:2.4.6-45.el7_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7668.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-7679","severity":"moderate","public_date":"2017-06-20T00:00:00Z","advisories":["RHSA-2017:2479","RHSA-2017:3195","RHSA-2017:3193","RHSA-2017:3194","RHSA-2017:3475","RHSA-2017:2483","RHSA-2017:2478","RHSA-2017:3476","RHSA-2017:3477"],"bugzilla":"1463207","bugzilla_description":"CVE-2017-7679 httpd: mod_mime buffer overread","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-httpd-0:2.4.25-9.el6.1","httpd-0:2.2.15-60.el6_9.5","httpd24-httpd-0:2.4.25-9.el7.1","httpd-0:2.4.6-67.el7_4.2","httpd-0:2.4.6-40.el7_2.6","httpd-0:2.2.15-47.el6_7.5","httpd-0:2.4.6-45.el7_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7679.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-9233","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1462729","bugzilla_description":"CVE-2017-9233 expat: Inifinite loop due to invalid XML in external entity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10140","severity":"moderate","public_date":"2017-06-11T00:00:00Z","advisories":["RHSA-2019:0366"],"bugzilla":"1464032","bugzilla_description":"CVE-2017-10140 libdb: Reads DB_CONFIG from the current working directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10140.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-7468","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443381","bugzilla_description":"CVE-2017-7468 curl: TLS session resumption client cert bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-7407","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1439190","bugzilla_description":"CVE-2017-7407 curl: --write-out out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7407.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2017-7244","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437364","bugzilla_description":"CVE-2017-7244 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7245","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437367","bugzilla_description":"CVE-2017-7245 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7246","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437369","bugzilla_description":"CVE-2017-7246 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-8399","severity":"moderate","public_date":"2017-03-10T00:00:00Z","advisories":[],"bugzilla":"1449629","bugzilla_description":"CVE-2017-8399 pcre2: Stack-based buffer overflow in pcre2_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7186","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1434504","bugzilla_description":"CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-2629","severity":"moderate","public_date":"2017-02-22T00:00:00Z","advisories":[],"bugzilla":"1425746","bugzilla_description":"CVE-2017-2629 curl: SSL_VERIFYSTATUS ignored","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-6004","severity":"moderate","public_date":"2017-02-14T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1425365","bugzilla_description":"CVE-2017-6004 pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9594","severity":"moderate","public_date":"2016-12-23T00:00:00Z","advisories":[],"bugzilla":"1408385","bugzilla_description":"CVE-2016-9594 curl: Unitialized random","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9594.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-9586","severity":"low","public_date":"2016-12-21T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1406712","bugzilla_description":"CVE-2016-9586 curl: printf floating point buffer overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9586.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-0736","severity":"moderate","public_date":"2016-12-20T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1161","RHSA-2017:0906"],"bugzilla":"1406744","bugzilla_description":"CVE-2016-0736 httpd: Padding Oracle in Apache mod_session_crypto","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["httpd24-httpd-0:2.4.25-9.el7","httpd24-httpd-0:2.4.25-9.el6","httpd-0:2.4.6-45.el7_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-2161","severity":"moderate","public_date":"2016-12-20T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1161","RHSA-2017:0906"],"bugzilla":"1406753","bugzilla_description":"CVE-2016-2161 httpd: DoS vulnerability in mod_auth_digest","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["httpd24-httpd-0:2.4.25-9.el7","httpd24-httpd-0:2.4.25-9.el6","httpd-0:2.4.6-45.el7_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-8743","severity":"moderate","public_date":"2016-12-20T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1721","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1161","RHSA-2017:0906"],"bugzilla":"1406822","bugzilla_description":"CVE-2016-8743 httpd: Apache HTTP Request Parsing Whitespace Defects","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-httpd-0:2.4.25-9.el7","httpd-0:2.2.15-60.el6_9.4","httpd24-httpd-0:2.4.25-9.el6","httpd-0:2.4.6-45.el7_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8743.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-8740","severity":"low","public_date":"2016-12-04T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1161"],"bugzilla":"1401528","bugzilla_description":"CVE-2016-8740 httpd: Incomplete handling of LimitRequestFields directive in mod_http2","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-770","affected_packages":["httpd24-httpd-0:2.4.25-9.el7","httpd24-httpd-0:2.4.25-9.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-9063","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396540","bugzilla_description":"CVE-2016-9063 firefox: Possible integer overflow to fix inside XML_Parse in Expat","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9063.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-8615","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388370","bugzilla_description":"CVE-2016-8615 curl: Cookie injection for other servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-99","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8617","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388377","bugzilla_description":"CVE-2016-8617 curl: Out-of-bounds write via unchecked multiplication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-787","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8618","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388378","bugzilla_description":"CVE-2016-8618 curl: Double-free in curl_maprintf","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8619","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388379","bugzilla_description":"CVE-2016-8619 curl: Double-free in krb5 code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8619.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8620","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1388382","bugzilla_description":"CVE-2016-8620 curl: Glob parser write/read out of bounds","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-120","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8620.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-8621","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388385","bugzilla_description":"CVE-2016-8621 curl: curl_getdate out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8621.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8622","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388386","bugzilla_description":"CVE-2016-8622 curl: URL unescape heap overflow via integer truncation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-190->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-8623","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388388","bugzilla_description":"CVE-2016-8623 curl: Use-after-free via shared cookies","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8623.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8624","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388390","bugzilla_description":"CVE-2016-8624 curl: Invalid URL parsing with '#'","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8625","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388392","bugzilla_description":"CVE-2016-8625 curl: IDNA 2003 makes curl use wrong host","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8625.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8610","severity":"moderate","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:0286","RHSA-2017:0574"],"bugzilla":"1384743","bugzilla_description":"CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","openssl-0:1.0.1e-48.el6_8.4","gnutls-0:2.12.23-21.el6","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6304","severity":"important","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2016:2802","RHSA-2017:2493","RHSA-2017:2494","RHSA-2016:1940"],"bugzilla":"1377600","bugzilla_description":"CVE-2016-6304 openssl: OCSP Status Request extension unbounded memory growth","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-0:1.0.1e-16.el6_5.17","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-42.el6_7.6","openssl-0:1.0.1e-48.el6_8.3","openssl-0:1.0.0-27.el6_4.6","openssl-0:1.0.1e-30.el6_6.13","openssl-0:1.0.0-20.el6_2.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7141","severity":"low","public_date":"2016-09-05T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1373229","bugzilla_description":"CVE-2016-7141 curl: Incorrect reuse of client certificates","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7141.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-6312","severity":"moderate","public_date":"2016-08-04T00:00:00Z","advisories":[],"bugzilla":"1364122","bugzilla_description":"CVE-2016-6312 apr-util, httpd: Billion laughs attack regression","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6312.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5419","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1362183","bugzilla_description":"CVE-2016-5419 curl: TLS session resumption client cert bypass","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5419.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-5420","severity":"low","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1362190","bugzilla_description":"CVE-2016-5420 curl: Re-using connection with wrong client cert","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5420.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-5421","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1362199","bugzilla_description":"CVE-2016-5421 curl: Use of connection struct after free","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5421.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-7152","severity":"low","public_date":"2016-08-03T00:00:00Z","advisories":[],"bugzilla":"1388003","bugzilla_description":"CVE-2016-7152 HTTPS: HEIST attack allows attackers to sniff TLS encrypted HTTP traffic","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7152.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-7153","severity":"low","public_date":"2016-08-03T00:00:00Z","advisories":[],"bugzilla":"1388005","bugzilla_description":"CVE-2016-7153 HTTP/2: HEIST attack allows attackers to sniff TLS encrypted HTTP/2 traffic","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7153.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5387","severity":"important","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1650","RHSA-2016:1420","RHSA-2016:1421","RHSA-2016:1624","RHSA-2016:1635","RHSA-2016:1625","RHSA-2016:1636","RHSA-2016:1648","RHSA-2016:1649","RHSA-2016:1851","RHSA-2016:1422"],"bugzilla":"1353755","bugzilla_description":"CVE-2016-5387 Apache HTTPD: sets environmental variable based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd-0:2.2.26-54.ep6.el6","httpd24-httpd-0:2.4.18-11.el6","httpd24-httpd-0:2.4.18-11.el7","httpd-0:2.4.6-40.el7_2.4","httpd-0:2.2.3-92.el5_11","jbcs-httpd24-httpd-0:2.4.6-77.SP1.jbcs.el7","jbcs-httpd24-httpd-0:2.4.6-77.SP1.jbcs.el6","httpd-0:2.2.15-54.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-4979","severity":"moderate","public_date":"2016-07-05T00:00:00Z","advisories":["RHSA-2016:1420"],"bugzilla":"1352476","bugzilla_description":"CVE-2016-4979 httpd: X509 client certificate authentication bypass using HTTP/2","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["httpd24-httpd-0:2.4.18-11.el6","httpd24-httpd-0:2.4.18-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4979.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2016-2178","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1343400","bugzilla_description":"CVE-2016-2178 openssl: Non-constant time codepath followed for certain operations in DSA implementation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2178.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2016-2177","severity":"low","public_date":"2016-05-05T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1341705","bugzilla_description":"CVE-2016-2177 openssl: Possible integer overflow vulnerabilities in codebase","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2177.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-1546","severity":"moderate","public_date":"2016-04-11T00:00:00Z","advisories":["RHSA-2017:1161"],"bugzilla":"1336350","bugzilla_description":"CVE-2016-1546 httpd: mod_http2 denial-of-service by thread starvation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd24-httpd-0:2.4.25-9.el7","httpd24-httpd-0:2.4.25-9.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1546.json"},{"CVE":"CVE-2014-9769","severity":"moderate","public_date":"2016-03-23T00:00:00Z","advisories":[],"bugzilla":"1320995","bugzilla_description":"CVE-2014-9769 pcre: incorrect nested table jumps when JIT is used (8.36/6)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9769.json"},{"CVE":"CVE-2016-1544","severity":"low","public_date":"2016-02-11T00:00:00Z","advisories":[],"bugzilla":"1308461","bugzilla_description":"CVE-2016-1544 nghttp2: out of memory error due to unlimited incoming HTTP header fields","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1544.json"},{"CVE":"CVE-2016-3191","severity":"important","public_date":"2016-02-09T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1025"],"bugzilla":"1311503","bugzilla_description":"CVE-2016-3191 pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3191.json"},{"CVE":"CVE-2016-0755","severity":"low","public_date":"2016-01-27T00:00:00Z","advisories":[],"bugzilla":"1302263","bugzilla_description":"CVE-2016-0755 curl: NTLM credentials not-checked for proxy connection re-use","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0755.json"},{"CVE":"CVE-2016-1283","severity":"important","public_date":"2016-01-04T00:00:00Z","advisories":["RHSA-2016:1132"],"bugzilla":"1295385","bugzilla_description":"CVE-2016-1283 pcre: heap buffer overflow in handling of duplicate named groups (8.39/14)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1283.json"},{"CVE":"CVE-2015-8383","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287614","bugzilla_description":"CVE-2015-8383 pcre: Buffer overflow caused by repeated conditional group (8.38/3)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8383.json"},{"CVE":"CVE-2015-3210","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3210.json"},{"CVE":"CVE-2015-8384","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8384.json"},{"CVE":"CVE-2015-8385","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287629","bugzilla_description":"CVE-2015-8385 pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8385.json"},{"CVE":"CVE-2015-8386","severity":"low","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287636","bugzilla_description":"CVE-2015-8386 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8386.json"},{"CVE":"CVE-2015-8387","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287646","bugzilla_description":"CVE-2015-8387 pcre: Integer overflow in subroutine calls (8.38/8)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8387.json"},{"CVE":"CVE-2015-8389","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287659","bugzilla_description":"CVE-2015-8389 pcre: infinite recursion in JIT compiler when processing certain patterns (8.38/21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8389.json"},{"CVE":"CVE-2015-8390","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287666","bugzilla_description":"CVE-2015-8390 pcre: uninitialized memory read triggered by malformed posix character class (8.38/22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8390.json"},{"CVE":"CVE-2015-8391","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287671","bugzilla_description":"CVE-2015-8391 pcre: inefficient posix character class syntax check (8.38/16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8391.json"},{"CVE":"CVE-2015-8392","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287690","bugzilla_description":"CVE-2015-8392 pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8392.json"},{"CVE":"CVE-2015-8393","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287695","bugzilla_description":"CVE-2015-8393 pcre: pcregrep -q is not always quiet (8.38/28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8393.json"},{"CVE":"CVE-2015-8394","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287702","bugzilla_description":"CVE-2015-8394 pcre: Integer overflow caused by missing check for certain conditions (8.38/31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8394.json"},{"CVE":"CVE-2015-8381","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8381.json"},{"CVE":"CVE-2015-8395","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8395.json"},{"CVE":"CVE-2015-3183","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2015:1668","RHSA-2015:1667","RHSA-2016:0061","RHSA-2015:2660","RHSA-2015:1666","RHSA-2016:0062","RHSA-2015:2661","RHSA-2016:2055","RHSA-2016:2054","RHSA-2015:2659"],"bugzilla":"1243887","bugzilla_description":"CVE-2015-3183 httpd: HTTP request smuggling attack against chunked request parser","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-172","affected_packages":["httpd-0:2.2.15-47.el6_7","httpd-0:2.2.26-54.ep6.el6","httpd24-httpd-0:2.4.12-4.el6.2","httpd-0:2.2.26-41.ep6.el5","httpd24-httpd-0:2.4.12-6.el7.1","httpd-0:2.4.6-31.ael7b_1.1","httpd-0:2.2.26-41.ep6.el6","httpd24-0:2.4.6-59.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-3185","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":["RHSA-2017:2710","RHSA-2015:1667","RHSA-2015:1666","RHSA-2017:2709","RHSA-2016:2957","RHSA-2017:2708"],"bugzilla":"1243888","bugzilla_description":"CVE-2015-3185 httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-287","affected_packages":["httpd24-httpd-0:2.4.12-4.el6.2","httpd24-httpd-0:2.4.12-6.el7.1","httpd-0:2.4.6-31.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-0253","severity":"low","public_date":"2015-07-15T00:00:00Z","advisories":["RHSA-2015:1666"],"bugzilla":"1243891","bugzilla_description":"CVE-2015-0253 httpd: NULL pointer dereference crash with ErrorDocument 400 pointing to a local URL-path","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["httpd24-httpd-0:2.4.12-4.el6.2","httpd24-httpd-0:2.4.12-6.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0253.json"},{"CVE":"CVE-2015-5073","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5073.json"},{"CVE":"CVE-2015-8388","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8388.json"},{"CVE":"CVE-2015-3217","severity":"moderate","public_date":"2015-06-03T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1228283","bugzilla_description":"CVE-2015-3217 pcre: stack overflow caused by mishandled group empty match (8.38/11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3217.json"},{"CVE":"CVE-2015-8380","severity":null,"public_date":"2015-06-01T00:00:00Z","advisories":[],"bugzilla":"1285413","bugzilla_description":"CVE-2015-8380 pcre: OOB write when pcre_exec() is called with ovecsize of 1 (8.38/10)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8380.json"},{"CVE":"CVE-2015-0228","severity":"low","public_date":"2015-03-10T00:00:00Z","advisories":["RHSA-2015:1666"],"bugzilla":"1202988","bugzilla_description":"CVE-2015-0228 httpd: Possible mod_lua crash due to websocket bug","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd24-httpd-0:2.4.12-4.el6.2","httpd24-httpd-0:2.4.12-6.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0228.json"},{"CVE":"CVE-2014-8109","severity":"low","public_date":"2014-11-12T00:00:00Z","advisories":[],"bugzilla":"1174077","bugzilla_description":"CVE-2014-8109 httpd: LuaAuthzProvider argument handling issue","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8109.json"},{"CVE":"CVE-2014-3583","severity":"low","public_date":"2014-10-12T00:00:00Z","advisories":["RHSA-2015:1858","RHSA-2015:1855"],"bugzilla":"1163555","bugzilla_description":"CVE-2014-3583 httpd: mod_proxy_fcgi handle_headers() buffer over read","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["mod_proxy_fcgi-0:2.4.10-5.20150415gitd45a11f.el6cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3583.json"},{"CVE":"CVE-2014-3581","severity":"low","public_date":"2014-09-08T00:00:00Z","advisories":["RHSA-2014:1972","RHSA-2015:0325","RHSA-2015:2660","RHSA-2015:2661","RHSA-2015:2659"],"bugzilla":"1149709","bugzilla_description":"CVE-2014-3581 httpd: NULL pointer dereference in mod_cache if Content-Type has empty value","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["httpd24-httpd-0:2.4.6-25.el7","httpd24-httpd-0:2.4.6-22.el6","httpd-0:2.4.6-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3581.json"},{"CVE":"CVE-2015-2328","severity":"moderate","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1285399","bugzilla_description":"CVE-2015-2328 pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2328.json"},{"CVE":"CVE-2014-0231","severity":"moderate","public_date":"2014-07-17T00:00:00Z","advisories":["RHSA-2014:0920","RHSA-2014:0921","RHSA-2014:1019","RHSA-2014:0922","RHSA-2014:1088","RHSA-2014:1021","RHSA-2014:1087","RHSA-2014:1020","RHSA-2014:1086"],"bugzilla":"1120596","bugzilla_description":"CVE-2014-0231 httpd: mod_cgid denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.2.3-87.el5_10","httpd-0:2.4.6-18.el7_0","httpd24-httpd-0:2.4.6-18.el6","httpd-0:2.2.15-31.el6_5","httpd-0:2.2.26-35.ep6.el5","httpd24-httpd-0:2.4.6-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0231.json"},{"CVE":"CVE-2014-0117","severity":"moderate","public_date":"2014-07-17T00:00:00Z","advisories":["RHSA-2014:0921","RHSA-2014:0922"],"bugzilla":"1120599","bugzilla_description":"CVE-2014-0117 httpd: mod_proxy denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.4.6-18.el7_0","httpd24-httpd-0:2.4.6-18.el6","httpd24-httpd-0:2.4.6-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0117.json"},{"CVE":"CVE-2014-0118","severity":"moderate","public_date":"2014-07-17T00:00:00Z","advisories":["RHSA-2014:0920","RHSA-2014:0921","RHSA-2014:1019","RHSA-2014:0922","RHSA-2014:1088","RHSA-2014:1021","RHSA-2014:1087","RHSA-2014:1020","RHSA-2014:1086"],"bugzilla":"1120601","bugzilla_description":"CVE-2014-0118 httpd: mod_deflate denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["httpd-0:2.2.3-87.el5_10","httpd-0:2.4.6-18.el7_0","httpd24-httpd-0:2.4.6-18.el6","httpd-0:2.2.15-31.el6_5","httpd-0:2.2.26-35.ep6.el5","httpd24-httpd-0:2.4.6-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0118.json"},{"CVE":"CVE-2014-0226","severity":"important","public_date":"2014-07-17T00:00:00Z","advisories":["RHSA-2014:0920","RHSA-2014:0921","RHSA-2014:1019","RHSA-2014:0922","RHSA-2014:1088","RHSA-2014:1021","RHSA-2014:1087","RHSA-2014:1020","RHSA-2014:1086"],"bugzilla":"1120603","bugzilla_description":"CVE-2014-0226 httpd: mod_status heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-662->CWE-122","affected_packages":["httpd-0:2.2.3-87.el5_10","httpd-0:2.4.6-18.el7_0","httpd24-httpd-0:2.4.6-18.el6","httpd-0:2.2.15-31.el6_5","httpd-0:2.2.26-35.ep6.el5","httpd24-httpd-0:2.4.6-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0226.json"},{"CVE":"CVE-2013-4352","severity":"moderate","public_date":"2014-07-17T00:00:00Z","advisories":["RHSA-2014:0921","RHSA-2014:0922"],"bugzilla":"1120604","bugzilla_description":"CVE-2013-4352 httpd: mod_cache NULL pointer dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["httpd-0:2.4.6-18.el7_0","httpd24-httpd-0:2.4.6-18.el6","httpd24-httpd-0:2.4.6-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4352.json"},{"CVE":"CVE-2014-3523","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2016:2957"],"bugzilla":"1121519","bugzilla_description":"CVE-2014-3523 httpd: WinNT MPM denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-2327","severity":"moderate","public_date":"2014-07-11T00:00:00Z","advisories":["RHBA-2015:2142","RHSA-2016:2750"],"bugzilla":"1285408","bugzilla_description":"CVE-2015-2327 pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2327.json"},{"CVE":"CVE-2014-0098","severity":"low","public_date":"2014-03-07T00:00:00Z","advisories":["RHSA-2014:0784","RHSA-2014:0783","RHSA-2014:0369","RHSA-2014:0825","RHSA-2014:0370","RHSA-2014:0826"],"bugzilla":"1077871","bugzilla_description":"CVE-2014-0098 httpd: mod_log_config does not properly handle logging certain cookies resulting in DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-228->CWE-125","affected_packages":["httpd-0:2.2.22-27.ep6.el6","httpd-0:2.2.22-27.ep6.el5","httpd-0:2.2.3-85.el5_10","httpd-0:2.2.15-30.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0098.json"},{"CVE":"CVE-2013-4492","severity":"moderate","public_date":"2013-12-04T00:00:00Z","advisories":["RHSA-2018:0380","RHBA-2015:1100"],"bugzilla":"1039435","bugzilla_description":"CVE-2013-4492 rubygem-i18n: cross-site scripting flaw in exception handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["httpd-configmap-generator-0:0.2.1-1.el7cf","cfme-gemset-0:5.4.0.5-1.el6cf","cfme-amazon-smartstate-0:5.9.0.22-1.el7cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4492.json"},{"CVE":"CVE-2013-7038","severity":"important","public_date":"2013-11-28T00:00:00Z","advisories":[],"bugzilla":"1039384","bugzilla_description":"CVE-2013-7038 libmicrohttpd: out-of-bounds read in MHD_http_unescape()","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7038.json"},{"CVE":"CVE-2013-7039","severity":"moderate","public_date":"2013-11-28T00:00:00Z","advisories":[],"bugzilla":"1039390","bugzilla_description":"CVE-2013-7039 libmicrohttpd: stack overflow in MHD_digest_auth_check()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7039.json"},{"CVE":"CVE-2013-5704","severity":"low","public_date":"2013-10-19T00:00:00Z","advisories":["RHSA-2014:1972","RHSA-2015:1249","RHSA-2015:0325","RHSA-2016:0061","RHSA-2015:2660","RHSA-2016:0062","RHSA-2015:2661","RHSA-2015:2659"],"bugzilla":"1082903","bugzilla_description":"CVE-2013-5704 httpd: bypass of mod_headers rules via chunked requests","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-287","affected_packages":["httpd24-httpd-0:2.4.6-25.el7","httpd-0:2.2.26-41.ep6.el5","httpd-0:2.2.15-45.el6","httpd-0:2.2.26-41.ep6.el6","httpd24-httpd-0:2.4.6-22.el6","httpd-0:2.4.6-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5704.json"},{"CVE":"CVE-2013-6438","severity":"moderate","public_date":"2013-10-03T00:00:00Z","advisories":["RHSA-2014:0784","RHSA-2014:0783","RHSA-2014:0369","RHSA-2014:0825","RHSA-2014:0370","RHSA-2014:0826"],"bugzilla":"1077867","bugzilla_description":"CVE-2013-6438 httpd: mod_dav denial of service via crafted DAV WRITE request","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":["httpd-0:2.2.22-27.ep6.el6","httpd-0:2.2.22-27.ep6.el5","httpd-0:2.2.3-85.el5_10","httpd-0:2.2.15-30.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6438.json"},{"CVE":"CVE-2013-3587","severity":"moderate","public_date":"2013-08-02T00:00:00Z","advisories":[],"bugzilla":"995168","bugzilla_description":"CVE-2013-3587 BREACH attack against HTTP compression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3587.json"},{"CVE":"CVE-2013-2249","severity":"moderate","public_date":"2013-07-22T00:00:00Z","advisories":[],"bugzilla":"987543","bugzilla_description":"CVE-2013-2249 httpd: mod_session_dbd session fixation flaw","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-384","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2249.json"},{"CVE":"CVE-2013-1896","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2013:1209","RHSA-2013:1207","RHSA-2013:1208","RHSA-2013:1133","RHSA-2013:1156","RHSA-2013:1134"],"bugzilla":"983549","bugzilla_description":"CVE-2013-1896 httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.2.3-82.el5_9","httpd-0:2.2.22-25.ep6.el6","httpd-0:2.2.22-25.ep6.el5","httpd-0:2.2.15-29.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1896.json"},{"CVE":"CVE-2013-1862","severity":"low","public_date":"2013-04-19T00:00:00Z","advisories":["RHSA-2013:0815","RHSA-2013:1209","RHSA-2013:1207","RHSA-2013:1208","RHSA-2013:1133","RHSA-2013:1134"],"bugzilla":"953729","bugzilla_description":"CVE-2013-1862 httpd: mod_rewrite allows terminal escape sequences to be written to the log file","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["httpd-0:2.2.15-28.el6_4","httpd-0:2.2.22-25.ep6.el6","httpd-0:2.2.22-25.ep6.el5","httpd-0:2.2.3-78.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1862.json"},{"CVE":"CVE-2012-3499","severity":"moderate","public_date":"2013-02-18T00:00:00Z","advisories":["RHSA-2013:0815","RHSA-2013:1011","RHSA-2013:1209","RHSA-2013:1207","RHSA-2013:1208","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"915883","bugzilla_description":"CVE-2012-3499 httpd: multiple XSS flaws due to unescaped hostnames","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["httpd-0:2.2.15-28.el6_4","httpd-0:2.2.22-25.ep6.el5","httpd-0:2.2.22-23.ep6.el5","httpd-0:2.2.3-78.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3499.json"},{"CVE":"CVE-2012-4558","severity":"moderate","public_date":"2013-02-18T00:00:00Z","advisories":["RHSA-2013:0815","RHSA-2013:1011","RHSA-2013:1209","RHSA-2013:1207","RHSA-2013:1208","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"915884","bugzilla_description":"CVE-2012-4558 httpd: XSS flaw in mod_proxy_balancer manager interface","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["httpd-0:2.2.15-28.el6_4","httpd-0:2.2.22-25.ep6.el5","httpd-0:2.2.22-23.ep6.el5","httpd-0:2.2.3-78.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4558.json"},{"CVE":"CVE-2012-3502","severity":"low","public_date":"2012-08-16T00:00:00Z","advisories":[],"bugzilla":"850776","bugzilla_description":"CVE-2012-3502 httpd (mod_proxy_ajp, mod_proxy_http): Information disclosure due improper management of back end server connection close within error handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3502.json"},{"CVE":"CVE-2008-0455","severity":"low","public_date":"2012-06-13T00:00:00Z","advisories":["RHSA-2013:0130","RHSA-2012:1591","RHSA-2012:1592","RHSA-2012:1594","RHSA-2013:0512"],"bugzilla":"850794","bugzilla_description":"CVE-2012-2687 CVE-2008-0455 httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["httpd-0:2.2.3-74.el5","httpd-0:2.2.15-26.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0455.json"},{"CVE":"CVE-2012-2687","severity":"low","public_date":"2012-06-13T00:00:00Z","advisories":["RHSA-2013:0130","RHSA-2012:1591","RHSA-2012:1592","RHSA-2012:1594","RHSA-2013:0512"],"bugzilla":"850794","bugzilla_description":"CVE-2012-2687 CVE-2008-0455 httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["httpd-0:2.2.3-74.el5","httpd-0:2.2.15-26.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2687.json"},{"CVE":"CVE-2012-0883","severity":"low","public_date":"2012-03-02T00:00:00Z","advisories":["RHSA-2012:1594"],"bugzilla":"813559","bugzilla_description":"CVE-2012-0883 httpd: insecure handling of LD_LIBRARY_PATH in envvars","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0883.json"},{"CVE":"CVE-2012-0053","severity":"moderate","public_date":"2012-01-23T00:00:00Z","advisories":["RHSA-2012:0128","RHSA-2012:0542","RHSA-2012:0323","RHSA-2012:0543"],"bugzilla":"785069","bugzilla_description":"CVE-2012-0053 httpd: cookie exposure due to error responses","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["httpd-0:2.2.3-63.el5_8.1","httpd-0:2.2.17-15.4.ep5.el5","httpd-0:2.2.17-15.4.ep5.el6","httpd-0:2.2.15-15.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0053.json"},{"CVE":"CVE-2012-0031","severity":"low","public_date":"2012-01-11T00:00:00Z","advisories":["RHSA-2012:0128","RHSA-2012:0542","RHSA-2012:0323","RHSA-2012:0543"],"bugzilla":"773744","bugzilla_description":"CVE-2012-0031 httpd: possible crash on shutdown due to flaw in scoreboard handling","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.2.3-63.el5_8.1","httpd-0:2.2.17-15.4.ep5.el5","httpd-0:2.2.17-15.4.ep5.el6","httpd-0:2.2.15-15.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0031.json"},{"CVE":"CVE-2012-4557","severity":"low","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2013:0512","RHSA-2011:0897"],"bugzilla":"871685","bugzilla_description":"CVE-2012-4557 httpd: mod_proxy_ajp worker moved to error state when timeout exceeded","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.2.15-26.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4557.json"},{"CVE":"CVE-2012-0021","severity":"low","public_date":"2011-11-28T00:00:00Z","advisories":["RHSA-2012:0542","RHSA-2012:0543"],"bugzilla":"785065","bugzilla_description":"CVE-2012-0021 httpd: NULL pointer dereference crash in mod_log_config","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["httpd-0:2.2.17-15.4.ep5.el5","httpd-0:2.2.17-15.4.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0021.json"},{"CVE":"CVE-2011-4317","severity":"moderate","public_date":"2011-11-23T00:00:00Z","advisories":["RHSA-2012:0128"],"bugzilla":"756483","bugzilla_description":"CVE-2011-4317 httpd: uri scheme bypass of the reverse proxy vulnerability CVE-2011-3368 fix","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["httpd-0:2.2.15-15.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4317.json"},{"CVE":"CVE-2011-4415","severity":"low","public_date":"2011-11-02T00:00:00Z","advisories":[],"bugzilla":"750935","bugzilla_description":"CVE-2011-4415 httpd: SetEnvIf resource exhaustion","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4415.json"},{"CVE":"CVE-2011-3607","severity":"low","public_date":"2011-11-02T00:00:00Z","advisories":["RHSA-2012:0128","RHSA-2012:0542","RHSA-2012:0323","RHSA-2012:0543"],"bugzilla":"769844","bugzilla_description":"CVE-2011-3607 httpd: ap_pregsub Integer overflow to buffer overflow","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["httpd-0:2.2.3-63.el5_8.1","httpd-0:2.2.17-15.4.ep5.el5","httpd-0:2.2.17-15.4.ep5.el6","httpd-0:2.2.15-15.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3607.json"},{"CVE":"CVE-2011-3639","severity":"moderate","public_date":"2011-10-26T00:00:00Z","advisories":["RHSA-2012:0128","RHSA-2012:0323"],"bugzilla":"752080","bugzilla_description":"CVE-2011-3639 httpd: http 0.9 request bypass of the reverse proxy vulnerability CVE-2011-3368 fix","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["httpd-0:2.2.3-63.el5_8.1","httpd-0:2.2.15-15.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3639.json"},{"CVE":"CVE-2011-3368","severity":"moderate","public_date":"2011-10-05T00:00:00Z","advisories":["RHSA-2011:1391","RHSA-2011:1392","RHSA-2012:0542","RHSA-2012:0543"],"bugzilla":"740045","bugzilla_description":"CVE-2011-3368 httpd: reverse web proxy vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["httpd-0:2.0.52-49.ent","httpd-0:2.2.3-53.el5_7.3","httpd-0:2.2.15-9.el6_1.3","httpd-0:2.2.17-15.4.ep5.el5","httpd-0:2.2.17-15.4.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3368.json"},{"CVE":"CVE-2011-3348","severity":"moderate","public_date":"2011-09-14T00:00:00Z","advisories":["RHSA-2011:1391","RHSA-2012:0542","RHSA-2012:0543"],"bugzilla":"736690","bugzilla_description":"CVE-2011-3348 httpd: mod_proxy_ajp remote temporary DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.2.15-9.el6_1.3","httpd-0:2.2.17-15.4.ep5.el5","httpd-0:2.2.17-15.4.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3348.json"},{"CVE":"CVE-2011-3192","severity":"important","public_date":"2011-08-20T00:00:00Z","advisories":["RHSA-2011:1300","RHSA-2011:1245","RHSA-2011:1369","RHSA-2011:1330","RHSA-2011:1294","RHSA-2011:1329"],"bugzilla":"732928","bugzilla_description":"CVE-2011-3192 httpd: multiple ranges DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.2.15-5.el6_0.1","httpd-0:2.0.52-48.ent","httpd-0:2.2.3-53.el5_7.1","httpd-0:2.2.17-13.2.ep5.el6","httpd-0:2.2.15-9.el6_1.2","httpd-0:2.2.17-14.1.ep5.el5","httpd-0:2.2.13-3.el5s2","httpd22-0:2.2.17-16.ep5.el4","httpd-0:2.0.46-78.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3192.json"},{"CVE":"CVE-2011-1928","severity":"low","public_date":"2011-05-19T00:00:00Z","advisories":["RHSA-2011:0844"],"bugzilla":"706203","bugzilla_description":"CVE-2011-1928 apr: DoS flaw in apr_fnmatch() due to fix for CVE-2011-0419","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["apr-0:1.3.9-3.el6_1.2","apr-0:0.9.4-26.el4","apr-0:1.2.7-11.el5_6.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1928.json"},{"CVE":"CVE-2010-1623","severity":"moderate","public_date":"2010-10-01T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2010:0950","RHSA-2011:0897"],"bugzilla":"640281","bugzilla_description":"CVE-2010-1623 apr-util: high memory consumption in apr_brigade_split_line()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["apr-util-0:1.3.9-3.el6_0.1","httpd22-0:2.2.17-14.ep5.el4","apr-util-0:0.9.4-22.el4_8.3","apr-util-0:1.2.7-11.el5_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1623.json"},{"CVE":"CVE-2010-2791","severity":"moderate","public_date":"2010-07-23T00:00:00Z","advisories":["RHSA-2010:0659"],"bugzilla":"617523","bugzilla_description":"CVE-2010-2791 httpd: Reverse proxy sends wrong responses after time-outs","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["httpd-0:2.2.3-43.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2791.json"},{"CVE":"CVE-2010-1452","severity":"low","public_date":"2010-07-21T00:00:00Z","advisories":["RHSA-2010:0659","RHSA-2011:0896","RHSA-2011:0897"],"bugzilla":"618189","bugzilla_description":"CVE-2010-1452 httpd mod_cache, mod_dav: DoS (httpd child process crash) by parsing URI structure with missing path segments","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.17-14.ep5.el4","httpd-0:2.2.3-43.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1452.json"},{"CVE":"CVE-2010-2057","severity":"moderate","public_date":"2010-06-10T00:00:00Z","advisories":[],"bugzilla":"623799","bugzilla_description":"CVE-2010-2057 Apache MyFaces: encrypted view state does not include MAC","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2057.json"},{"CVE":"CVE-2010-0408","severity":"moderate","public_date":"2010-03-02T00:00:00Z","advisories":["RHSA-2010:0168","RHSA-2010:0396"],"bugzilla":"569905","bugzilla_description":"CVE-2010-0408 httpd: mod_proxy_ajp remote temporary DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.2.3-31.el5_4.4","httpd22-0:2.2.14-11.jdk6.ep5.el4","httpd-0:2.2.14-1.2.6.jdk6.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0408.json"},{"CVE":"CVE-2010-0434","severity":"low","public_date":"2009-12-09T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2010:0168","RHSA-2010:0396","RHSA-2010:0175"],"bugzilla":"570171","bugzilla_description":"CVE-2010-0434 httpd: request header information leak","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["httpd-0:2.0.52-41.ent.7","httpd-0:2.2.3-31.el5_4.4","httpd22-0:2.2.14-11.jdk6.ep5.el4","httpd-0:2.2.14-1.2.6.jdk6.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0434.json"},{"CVE":"CVE-2009-3555","severity":"moderate","public_date":"2009-11-05T00:00:00Z","advisories":["RHSA-2009:1580","RHSA-2010:0408","RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2010:0786","RHSA-2010:0167","RHSA-2010:0166","RHSA-2010:0165","RHSA-2010:0440","RHSA-2010:0164","RHSA-2010:0163","RHSA-2010:0162","RHSA-2009:1579","RHSA-2009:1694","RHSA-2010:0807","RHSA-2010:0119","RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2011:0880","RHSA-2010:0155","RHSA-2010:0770","RHSA-2010:0011","RHSA-2015:1591","RHSA-2010:0130"],"bugzilla":"533125","bugzilla_description":"CVE-2009-3555 TLS: MITM attacks via session renegotiation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-300","affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","httpd-0:2.2.3-31.el5_4.2","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el5","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","openssl-0:0.9.8e-12.el5_4.6","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el4_8","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","rhev-hypervisor-0:5.4-2.1.12.1.el5_4rhev2_1","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5","openssl097a-0:0.9.7a-9.el5_4.2","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","httpd22-0:2.2.10-25.1.ep5.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","httpd-0:2.0.52-41.ent.6","gnutls-0:1.0.20-4.el4_8.7","httpd-0:2.2.10-11.ep5.el5","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","httpd-0:2.0.46-77.ent","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4","pulp-0:2.6.0.15-1.el7sat","openssl-0:0.9.7a-33.26"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3555.json"},{"CVE":"CVE-2009-3095","severity":"low","public_date":"2009-09-03T00:00:00Z","advisories":["RHSA-2009:1580","RHSA-2009:1461","RHSA-2010:0602","RHSA-2009:1579","RHSA-2010:0011"],"bugzilla":"522209","bugzilla_description":"CVE-2009-3095 httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["httpd-0:2.0.52-41.ent.6","httpd-0:2.2.3-31.el5_4.2","httpd-0:2.2.10-11.ep5.el5","httpd22-0:2.2.10-25.1.ep5.el4","httpd-0:2.0.46-77.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3095.json"},{"CVE":"CVE-2009-3094","severity":"low","public_date":"2009-09-02T00:00:00Z","advisories":["RHSA-2009:1580","RHSA-2009:1461","RHSA-2010:0602","RHSA-2009:1579","RHSA-2010:0011"],"bugzilla":"521619","bugzilla_description":"CVE-2009-3094 httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd-0:2.0.52-41.ent.6","httpd-0:2.2.3-31.el5_4.2","httpd-0:2.2.10-11.ep5.el5","httpd22-0:2.2.10-25.1.ep5.el4","httpd-0:2.0.46-77.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3094.json"},{"CVE":"CVE-2009-2412","severity":"moderate","public_date":"2009-08-04T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1205","RHSA-2009:1204","RHSA-2009:1462"],"bugzilla":"515698","bugzilla_description":"CVE-2009-2412 apr, apr-util: Integer overflows in memory pool (apr) and relocatable memory (apr-util) management","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["httpd-0:2.0.46-75.ent","httpd22-0:2.2.10-24.1.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2412.json"},{"CVE":"CVE-2009-1890","severity":"important","public_date":"2009-07-02T00:00:00Z","advisories":["RHSA-2009:1160","RHSA-2009:1148","RHSA-2009:1155","RHSA-2009:1156"],"bugzilla":"509375","bugzilla_description":"CVE-2009-1890 httpd: mod_proxy reverse proxy DoS (infinite loop)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","httpd-0:2.2.3-22.el5_3.2","httpd-0:2.2.10-10.ep5.el5","httpd-0:2.2.11-3.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1890.json"},{"CVE":"CVE-2009-1891","severity":"low","public_date":"2009-06-26T00:00:00Z","advisories":["RHSA-2009:1580","RHSA-2010:0602","RHSA-2009:1160","RHSA-2009:1148","RHSA-2009:1205","RHSA-2009:1155","RHSA-2009:1156"],"bugzilla":"509125","bugzilla_description":"CVE-2009-1891 httpd: possible temporary DoS (CPU consumption) in mod_deflate","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","httpd-0:2.0.46-75.ent","httpd-0:2.0.52-41.ent.6","httpd-0:2.2.3-22.el5_3.2","httpd-0:2.2.10-10.ep5.el5","httpd-0:2.2.11-3.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1891.json"},{"CVE":"CVE-2007-6750","severity":"low","public_date":"2009-06-17T00:00:00Z","advisories":[],"bugzilla":"508238","bugzilla_description":"CVE-2007-6750 httpd: Apache Slowloris denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6750.json"},{"CVE":"CVE-2009-0023","severity":"moderate","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107","RHSA-2009:1160"],"bugzilla":"503928","bugzilla_description":"CVE-2009-0023 apr-util heap buffer underwrite","cvss_score":4.3,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0023.json"},{"CVE":"CVE-2009-1955","severity":"moderate","public_date":"2009-06-01T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107","RHSA-2009:1160"],"bugzilla":"504555","bugzilla_description":"CVE-2009-1955 apr-util billion laughs attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1955.json"},{"CVE":"CVE-2009-1956","severity":"moderate","public_date":"2009-04-24T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107"],"bugzilla":"504390","bugzilla_description":"CVE-2009-1956 apr-util single NULL byte buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1956.json"},{"CVE":"CVE-2009-1195","severity":"low","public_date":"2009-04-22T00:00:00Z","advisories":["RHSA-2009:1075","RHSA-2009:1160","RHSA-2009:1155","RHSA-2009:1156"],"bugzilla":"489436","bugzilla_description":"CVE-2009-1195 httpd: AllowOverride Options=IncludesNoExec allows Options Includes","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","httpd-0:2.2.3-22.el5_3.1","httpd-0:2.2.10-10.ep5.el5","httpd-0:2.2.11-3.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1195.json"},{"CVE":"CVE-2009-1191","severity":"important","public_date":"2009-04-21T00:00:00Z","advisories":["RHSA-2009:1058"],"bugzilla":"496801","bugzilla_description":"CVE-2009-1191 httpd mod_proxy_ajp information disclosure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["httpd-0:2.2.10-4.ep5.el5","httpd22-0:2.2.10-16.1.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1191.json"},{"CVE":"CVE-2008-2939","severity":"low","public_date":"2008-08-05T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2008:0967","RHSA-2008:0966"],"bugzilla":"458250","bugzilla_description":"CVE-2008-2939 httpd: mod_proxy_ftp globbing XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["httpd-0:2.2.3-11.el5_2.4","httpd-0:2.0.46-71.ent","httpd-0:2.0.52-41.ent.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2939.json"},{"CVE":"CVE-2008-2364","severity":"moderate","public_date":"2008-06-10T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2008:0967","RHSA-2008:0966"],"bugzilla":"451615","bugzilla_description":"CVE-2008-2364 httpd: mod_proxy_http DoS via excessive interim responses from the origin server","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.2.3-11.el5_2.4","httpd-0:2.0.46-71.ent","httpd-0:2.0.52-41.ent.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2364.json"},{"CVE":"CVE-2008-1678","severity":"moderate","public_date":"2008-04-30T00:00:00Z","advisories":["RHSA-2009:1075"],"bugzilla":"447268","bugzilla_description":"CVE-2008-1678 httpd: mod_ssl per-connection memory leak for connections with zlib compression","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["httpd-0:2.2.3-22.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1678.json"},{"CVE":"CVE-2008-0456","severity":"low","public_date":"2008-01-22T00:00:00Z","advisories":["RHSA-2013:0130"],"bugzilla":"879292","bugzilla_description":"CVE-2008-0456 httpd: mod_negotiation CRLF injection via untrusted file names in directories with MultiViews enabled","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["httpd-0:2.2.3-74.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0456.json"},{"CVE":"CVE-2007-6421","severity":"low","public_date":"2008-01-02T00:00:00Z","advisories":["RHSA-2008:0009","RHSA-2008:0008"],"bugzilla":"427229","bugzilla_description":"CVE-2007-6421 httpd mod_proxy_balancer cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["httpd-0:2.2.3-11.el5_1.3","httpd-0:2.2.4-9.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6421.json"},{"CVE":"CVE-2008-0005","severity":"low","public_date":"2008-01-02T00:00:00Z","advisories":["RHSA-2008:0005","RHSA-2008:0004","RHSA-2010:0602","RHSA-2008:0009","RHSA-2008:0008","RHSA-2008:0007","RHSA-2008:0006"],"bugzilla":"427739","bugzilla_description":"CVE-2008-0005 mod_proxy_ftp XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["apache-0:1.3.27-14.ent","httpd-0:2.0.46-70.ent","httpd-0:2.2.3-11.el5_1.3","httpd-0:2.0.52-38.ent.2","httpd-0:2.2.4-9.el5s2","httpd-0:2.0.59-1.el4s1.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0005.json"},{"CVE":"CVE-2007-6422","severity":"low","public_date":"2008-01-01T00:00:00Z","advisories":["RHSA-2008:0009","RHSA-2008:0008"],"bugzilla":"427230","bugzilla_description":"CVE-2007-6422 httpd mod_proxy_balancer crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.2.3-11.el5_1.3","httpd-0:2.2.4-9.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6422.json"},{"CVE":"CVE-2007-6388","severity":"moderate","public_date":"2007-12-29T00:00:00Z","advisories":["RHSA-2008:0005","RHSA-2008:0004","RHSA-2010:0602","RHSA-2008:0263","RHSA-2008:0261","RHSA-2008:0009","RHSA-2008:0008","RHSA-2008:0524","RHSA-2008:0007","RHSA-2008:0006","RHSA-2008:0523"],"bugzilla":"427228","bugzilla_description":"CVE-2007-6388 apache mod_status cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["apache-0:1.3.27-14.ent","httpd-0:2.0.46-70.ent","httpd-0:2.2.3-11.el5_1.3","httpd-0:2.0.52-38.ent.2","httpd-0:2.2.4-9.el5s2","httpd-0:2.0.59-1.el4s1.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6388.json"},{"CVE":"CVE-2007-5000","severity":"low","public_date":"2007-12-11T00:00:00Z","advisories":["RHSA-2008:0005","RHSA-2008:0004","RHSA-2010:0602","RHSA-2008:0263","RHSA-2008:0261","RHSA-2008:0009","RHSA-2008:0008","RHSA-2008:0524","RHSA-2008:0007","RHSA-2008:0006","RHSA-2008:0523"],"bugzilla":"419931","bugzilla_description":"CVE-2007-5000 httpd: mod_imagemap XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["apache-0:1.3.27-14.ent","httpd-0:2.0.46-70.ent","httpd-0:2.2.3-11.el5_1.3","httpd-0:2.0.52-38.ent.2","httpd-0:2.2.4-9.el5s2","httpd-0:2.0.59-1.el4s1.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5000.json"},{"CVE":"CVE-2007-4465","severity":"low","public_date":"2007-09-13T00:00:00Z","advisories":["RHSA-2008:0005","RHSA-2008:0004","RHSA-2010:0602","RHSA-2008:0261","RHSA-2008:0008","RHSA-2008:0524","RHSA-2008:0006","RHSA-2008:0523","RHSA-2007:0911"],"bugzilla":"289511","bugzilla_description":"CVE-2007-4465 mod_autoindex XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["apache-0:1.3.27-14.ent","httpd-0:2.0.46-70.ent","httpd-0:2.2.3-11.el5_1.3","httpd-0:2.0.59-1.el4s1.8","httpd-0:2.0.52-38.ent.2","httpd-0:2.2.4-7.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4465.json"},{"CVE":"CVE-2007-3847","severity":"moderate","public_date":"2007-08-01T00:00:00Z","advisories":["RHSA-2008:0005","RHSA-2010:0602","RHSA-2007:0747","RHSA-2007:0746","RHSA-2007:0911"],"bugzilla":"250731","bugzilla_description":"CVE-2007-3847 httpd: out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd-0:2.2.3-11.el5","httpd-0:2.0.46-70.ent","httpd-0:2.0.52-38.ent","httpd-0:2.0.59-1.el4s1.8","httpd-0:2.2.4-7.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3847.json"},{"CVE":"CVE-2006-5752","severity":"moderate","public_date":"2007-06-20T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2007:0532","RHSA-2008:0263","RHSA-2008:0261","RHSA-2007:0557","RHSA-2007:0533","RHSA-2007:0534","RHSA-2007:0556","RHSA-2008:0524","RHSA-2008:0523"],"bugzilla":"245112","bugzilla_description":"CVE-2006-5752 httpd mod_status XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["httpd-0:2.0.52-32.2.ent","httpd-0:2.0.59-1.el4s1.7","httpd-0:2.0.46-67.ent","httpd-0:2.2.3-7.el5","apache-0:1.3.27-12.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5752.json"},{"CVE":"CVE-2007-3304","severity":"moderate","public_date":"2007-06-19T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2007:0532","RHSA-2007:0662","RHSA-2008:0263","RHSA-2008:0261","RHSA-2007:0557","RHSA-2007:0556","RHSA-2008:0524","RHSA-2008:0523"],"bugzilla":"245111","bugzilla_description":"CVE-2007-3304 httpd scoreboard lack of PID protection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.59-1.el4s1.7","httpd-0:2.0.46-68.ent","httpd-0:2.0.52-32.3.ent","httpd-0:2.2.3-7.el5","apache-0:1.3.27-12.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3304.json"},{"CVE":"CVE-2007-1863","severity":"moderate","public_date":"2007-05-02T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2007:0557","RHSA-2007:0533","RHSA-2007:0534","RHSA-2007:0556"],"bugzilla":"244658","bugzilla_description":"CVE-2007-1863 httpd mod_cache segfault","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.52-32.2.ent","httpd-0:2.0.59-1.el4s1.7","httpd-0:2.0.46-67.ent","httpd-0:2.2.3-7.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1863.json"},{"CVE":"CVE-2006-3918","severity":"moderate","public_date":"2006-05-08T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2006:0619","RHSA-2006:0692","RHSA-2006:0618","RHSA-2008:0523"],"bugzilla":"200732","bugzilla_description":"CVE-2006-3918 httpd: Expect header XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["httpd-0:2.0.52-28.ent","httpd-0:2.0.46-61.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3918.json"},{"CVE":"CVE-2005-3352","severity":"moderate","public_date":"2005-12-12T00:00:00Z","advisories":["RHSA-2005:882","RHSA-2006:0158","RHSA-2006:0159","RHSA-2006:0692","RHSA-2008:0523"],"bugzilla":"430524","bugzilla_description":"CVE-2005-3352 httpd cross-site scripting flaw in mod_imap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["httpd-0:2.0.46-56.ent","httpd-0:2.0.52-22.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3352.json"},{"CVE":"CVE-2005-3357","severity":"low","public_date":"2005-12-05T00:00:00Z","advisories":["RHSA-2006:0159"],"bugzilla":"1617818","bugzilla_description":"CVE-2005-3357 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-56.ent","httpd-0:2.0.52-22.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3357.json"},{"CVE":"CVE-2005-2970","severity":"low","public_date":"2005-10-25T00:00:00Z","advisories":["RHSA-2006:0159"],"bugzilla":"1617769","bugzilla_description":"CVE-2005-2970 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-56.ent","httpd-0:2.0.52-22.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2970.json"},{"CVE":"CVE-2005-2700","severity":"important","public_date":"2005-08-30T00:00:00Z","advisories":["RHSA-2005:773","RHSA-2005:882","RHSA-2005:816","RHSA-2005:608"],"bugzilla":"1617741","bugzilla_description":"CVE-2005-2700 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-46.3.ent","httpd-0:2.0.52-12.2.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2700.json"},{"CVE":"CVE-2005-2088","severity":"moderate","public_date":"2005-06-12T00:00:00Z","advisories":["RHSA-2005:582"],"bugzilla":"1617682","bugzilla_description":"CVE-2005-2088 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.52-12.1.ent","httpd-0:2.0.46-46.2.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2088.json"},{"CVE":"CVE-2005-1268","severity":"low","public_date":"2005-06-08T00:00:00Z","advisories":["RHSA-2005:582"],"bugzilla":"1617625","bugzilla_description":"CVE-2005-1268 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.52-12.1.ent","httpd-0:2.0.46-46.2.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1268.json"},{"CVE":"CVE-2004-0942","severity":"important","public_date":"2004-11-01T00:00:00Z","advisories":["RHSA-2004:562"],"bugzilla":"1617326","bugzilla_description":"CVE-2004-0942 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-44.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0942.json"},{"CVE":"CVE-2004-0885","severity":"moderate","public_date":"2004-10-05T00:00:00Z","advisories":["RHSA-2008:0261","RHSA-2005:816","RHSA-2004:562","RHSA-2004:653","RHSA-2004:600","RHSA-2008:0524","RHSA-2008:0523"],"bugzilla":"430637","bugzilla_description":"CVE-2004-0885 mod_ssl SSLCipherSuite bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-44.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0885.json"},{"CVE":"CVE-2004-0747","severity":"low","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:463"],"bugzilla":"1617261","bugzilla_description":"CVE-2004-0747 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-40.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0747.json"},{"CVE":"CVE-2004-0751","severity":"low","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:463"],"bugzilla":"1617264","bugzilla_description":"CVE-2004-0751 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-40.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0751.json"},{"CVE":"CVE-2004-0786","severity":"moderate","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:463"],"bugzilla":"1617289","bugzilla_description":"CVE-2004-0786 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-40.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0786.json"},{"CVE":"CVE-2004-0809","severity":"low","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:463"],"bugzilla":"1617299","bugzilla_description":"CVE-2004-0809 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-40.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0809.json"},{"CVE":"CVE-2004-0748","severity":"important","public_date":"2004-07-07T00:00:00Z","advisories":["RHSA-2004:349"],"bugzilla":"1617262","bugzilla_description":"CVE-2004-0748 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-38.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0748.json"},{"CVE":"CVE-2005-2728","severity":"moderate","public_date":"2004-07-07T00:00:00Z","advisories":["RHSA-2005:608"],"bugzilla":"1617753","bugzilla_description":"CVE-2005-2728 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-46.3.ent","httpd-0:2.0.52-12.2.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2728.json"},{"CVE":"CVE-2004-0493","severity":"important","public_date":"2004-06-28T00:00:00Z","advisories":["RHSA-2004:342"],"bugzilla":"1617211","bugzilla_description":"CVE-2004-0493 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-32.ent.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0493.json"},{"CVE":"CVE-2004-0488","severity":"moderate","public_date":"2004-05-17T00:00:00Z","advisories":["RHSA-2004:405","RHSA-2005:816","RHSA-2004:342","RHSA-2004:245","RHSA-2008:0523"],"bugzilla":"430867","bugzilla_description":"CVE-2004-0488 mod_ssl ssl_util_uuencode_binary CA issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-32.ent.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0488.json"},{"CVE":"CVE-2004-1834","severity":"moderate","public_date":"2004-03-20T00:00:00Z","advisories":["RHSA-2004:562"],"bugzilla":"1617419","bugzilla_description":"CVE-2004-1834 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-44.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1834.json"},{"CVE":"CVE-2004-0113","severity":null,"public_date":"2004-02-20T00:00:00Z","advisories":["RHSA-2004:182","RHSA-2004:084"],"bugzilla":"1617157","bugzilla_description":"CVE-2004-0113 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-32.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0113.json"},{"CVE":"CVE-2003-0542","severity":"low","public_date":"2003-10-29T00:00:00Z","advisories":["RHSA-2003:405","RHSA-2003:360","RHSA-2005:816","RHSA-2003:320","RHSA-2004:015","RHSA-2004:139"],"bugzilla":"1617048","bugzilla_description":"CVE-2003-0542 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["httpd-0:2.0.46-26.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0542.json"},{"CVE":"CVE-2003-1418","severity":"low","public_date":"2003-02-25T00:00:00Z","advisories":[],"bugzilla":"733043","bugzilla_description":"CVE-2003-1418 httpd information disclosure in FileEtag","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-1418.json"},{"CVE":"CVE-2001-0131","severity":"low","public_date":"2001-01-10T00:00:00Z","advisories":[],"bugzilla":"1886967","bugzilla_description":"CVE-2001-0131 httpd: allows local users to overwrite arbitrary files via a symlink attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2001-0131.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-af_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-af_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-af_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ak_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ak_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ak_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-am_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-am_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-am_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-as_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-as_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-as_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ast_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ast_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ast_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-az_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-az_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-az_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-be_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-be_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-be_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ber_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ber_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ber_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-bg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-bg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-bg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-bn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-bn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-bn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-br_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-br_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-br_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-csb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-csb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-csb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-cy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-da_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-da_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-da_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-de_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-de_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-de_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-dsb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-dsb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-dsb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-el_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-el_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-el_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-en-GB_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-en-GB_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-en-GB_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-en-US_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-en-US_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-en-US_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-en_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-en_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-en_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-eo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-eo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-eo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-AR_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-AR_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-AR_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-BO_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-BO_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-BO_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CO_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CO_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CO_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CR_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CR_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CR_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CU_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CU_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-CU_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-DO_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-DO_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-DO_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-EC_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-EC_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-EC_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-ES_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-ES_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-ES_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-GT_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-GT_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-GT_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-HN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-HN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-HN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-MX_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-MX_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-MX_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-NI_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-NI_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-NI_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PA_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PA_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PA_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PE_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PE_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PE_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PR_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PR_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PR_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PY_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PY_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-PY_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-SV_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-SV_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-SV_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-US_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-US_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-US_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-UY_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-UY_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-UY_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-VE_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-VE_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es-VE_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-es_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-et_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-et_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-et_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-eu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-eu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-eu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fj_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fj_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fj_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fur_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fur_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fur_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-fy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ga_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ga_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-grc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-grc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-grc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-gv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-haw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-haw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-haw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-he_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-he_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-he_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hsb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hsb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hsb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ht_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ht_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ht_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-hy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-id_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-id_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-id_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-is_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-is_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-is_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-it_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-it_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-it_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-kk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-kk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-kk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-km_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-km_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-km_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-kn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-kn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-kn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ku_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ku_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ku_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ky_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ky_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ky_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-la_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-la_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-la_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-lb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-lb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-lb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ln_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ln_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ln_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-lt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-lt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-lt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-lv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-lv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-lv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mai_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mai_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mai_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mos_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mos_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mos_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ms_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ms_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ms_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-mt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ne_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ne_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ne_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nso_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nso_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-nso_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ny_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ny_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ny_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-oc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-oc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-oc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-om_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-om_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-om_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-or_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-or_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-or_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-pa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-pa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-pa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-pl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-pl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-pl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-pt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-pt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-pt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-qu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-qu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-qu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-quh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-quh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-quh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ru_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ru_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ru_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-rw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-rw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-rw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-se_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-se_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-se_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-shs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-shs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-shs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-si_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-si_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-si_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-smj_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-smj_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-smj_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-so_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-so_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-so_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sq_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sq_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-st_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-st_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-st_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-sw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-te_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-te_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-te_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-th_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-th_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-th_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ti_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ti_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ti_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-tpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-uk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-uk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-uk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ur_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ur_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ur_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-uz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-uz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-uz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ve_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ve_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-ve_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-vi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-vi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-vi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-wa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-wa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-wa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-xh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-xh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-xh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-yi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-yi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-yi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-zu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-zu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell-zu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell_security_api_results.json
new file mode 100644
index 0000000..fdde65f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hunspell_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-16707","severity":"low","public_date":"2019-03-18T00:00:00Z","advisories":["RHSA-2020:3971"],"bugzilla":"1771026","bugzilla_description":"CVE-2019-16707 hunspell: out-of-bounds read in SuggestMgr::leftcommonsubstring in suggestmgr.cxx","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":["hunspell-0:1.3.2-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16707.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"5.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwdata_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwdata_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwdata_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-plugins_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc-plugins_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hwloc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyperv-daemons-license_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyperv-daemons-license_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyperv-daemons-license_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyperv-daemons_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyperv-daemons_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyperv-daemons_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyperv-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyperv-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyperv-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hypervfcopyd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hypervfcopyd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hypervfcopyd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hypervkvpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hypervkvpd_security_api_results.json
new file mode 100644
index 0000000..4186c05
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hypervkvpd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-5532","severity":"low","public_date":"2012-06-06T00:00:00Z","advisories":["RHSA-2013:0807"],"bugzilla":"877572","bugzilla_description":"CVE-2012-5532 hypervkvpd: Netlink source address validation allows denial of service","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["hypervkvpd-0:0-0.7.el5_9.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5532.json"},{"CVE":"CVE-2012-2669","severity":"low","public_date":"2012-05-08T00:00:00Z","advisories":[],"bugzilla":"893728","bugzilla_description":"CVE-2012-2669 hypervkvpd: fails to check origin of netlink messages","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2669.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hypervvssd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hypervvssd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hypervvssd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-af_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-af_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-af_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-as_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-as_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-as_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-be_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-be_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-be_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-bg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-bg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-bg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-bn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-bn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-bn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-cs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-cs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-cs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-cy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-cy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-cy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-da_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-da_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-da_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-de_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-de_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-de_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-el_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-el_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-el_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-en_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-en_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-en_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-es_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-es_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-es_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-et_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-et_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-et_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-eu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-eu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-eu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-fa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-fa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-fa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-fo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-fo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-fo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-fr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-fr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-fr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ga_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ga_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-gl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-gl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-gl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-grc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-grc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-grc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-gu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-gu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-gu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hsb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hsb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hsb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-hu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-id_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-id_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-id_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-is_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-is_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-is_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-it_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-it_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-it_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-kn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-kn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-kn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ku_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ku_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ku_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-lt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-lt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-lt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-lv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-lv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-lv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-mi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-mi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-mi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-mn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-mn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-mn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-mr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-mr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-mr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-nb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-nb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-nb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-nl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-nl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-nl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-nn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-nn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-nn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-or_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-or_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-or_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-pa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-pa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-pa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-pl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-pl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-pl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-pt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-pt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-pt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ru_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ru_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ru_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-sv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-ta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-te_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-te_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-te_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-tk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-tk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-tk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-uk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-uk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-uk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-zu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-zu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen-zu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/hyphen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/i2c-tools-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/i2c-tools-perl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/i2c-tools-perl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/i2c-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/i2c-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/i2c-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibacm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibacm_security_api_results.json
new file mode 100644
index 0000000..33cc02c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibacm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-4518","severity":"low","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2013:0509"],"bugzilla":"865499","bugzilla_description":"CVE-2012-4518 ibacm: ibacm service files created with world writable permissions (DoS)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ibacm-0:1.0.8-0.git7a3adb7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4518.json"},{"CVE":"CVE-2012-4517","severity":"low","public_date":"2012-04-04T00:00:00Z","advisories":["RHSA-2013:0509"],"bugzilla":"865492","bugzilla_description":"CVE-2012-4517 ibacm: DoS (ibacm deamon crash) by joining responses for multicast destinations","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ibacm-0:1.0.8-0.git7a3adb7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4517.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-devel-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-devel-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-devel-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-gtk2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-gtk2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-gtk2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-hangul_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-hangul_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-hangul_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-kkc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-kkc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-kkc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-libpinyin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-libpinyin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-libpinyin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-libzhuyin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-libzhuyin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-libzhuyin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-m17n_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-m17n_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-m17n_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-sayura_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-sayura_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-sayura_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-setup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-setup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-setup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-array_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-array_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-array_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-cangjie_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-cangjie_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-cangjie_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-cantonese_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-cantonese_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-cantonese_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-easy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-easy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-easy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-erbi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-erbi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-erbi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-quick_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-quick_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-quick_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-scj_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-scj_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-scj_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-stroke5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-stroke5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-stroke5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-wu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-wu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-wu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-wubi-haifeng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-wubi-haifeng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-wubi-haifeng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-wubi-jidian_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-wubi-jidian_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-wubi-jidian_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-yong_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-yong_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese-yong_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table-chinese_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-table_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-typing-booster_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-typing-booster_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-typing-booster_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-wayland_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-wayland_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus-wayland_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus_security_api_results.json
new file mode 100644
index 0000000..6ed5c52
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ibus_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14822","severity":"moderate","public_date":"2019-09-13T07:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1880","RHSA-2020:3978"],"bugzilla":"1717958","bugzilla_description":"CVE-2019-14822 ibus: missing authorization allows local attacker to access the input bus of another user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["ibus-0:1.5.19-11.el8","ibus-0:1.5.17-11.el7","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14822.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2015-3245","severity":"moderate","public_date":"2015-07-23T00:00:00Z","advisories":["RHSA-2015:1483","RHSA-2015:1482"],"bugzilla":"1233043","bugzilla_description":"CVE-2015-3245 libuser: does not filter newline characters in the GECOS field","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-138","affected_packages":["libuser-0:0.56.13-8.el6_7","libuser-0:0.60-7.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3245.json"},{"CVE":"CVE-2015-3246","severity":"important","public_date":"2015-07-23T00:00:00Z","advisories":["RHSA-2015:1483","RHSA-2015:1482"],"bugzilla":"1233052","bugzilla_description":"CVE-2015-3246 libuser: Security flaw in handling /etc/passwd file","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["libuser-0:0.56.13-8.el6_7","libuser-0:0.60-7.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3246.json"},{"CVE":"CVE-2013-4509","severity":"low","public_date":"2013-10-25T00:00:00Z","advisories":[],"bugzilla":"1027028","bugzilla_description":"CVE-2013-4509 ibus: visible password entry flaw","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4509.json"},{"CVE":"CVE-2012-5630","severity":"low","public_date":"2013-03-28T00:00:00Z","advisories":[],"bugzilla":"884685","bugzilla_description":"CVE-2012-5630 libuser: TOCTOU race conditions by copying and removing directory trees","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5630.json"},{"CVE":"CVE-2012-5644","severity":"low","public_date":"2013-03-28T00:00:00Z","advisories":[],"bugzilla":"885724","bugzilla_description":"CVE-2012-5644 libuser: (Complete) Information disclosure when moving user's home directory","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5644.json"},{"CVE":"CVE-2011-0002","severity":"moderate","public_date":"2011-01-10T00:00:00Z","advisories":["RHSA-2011:0170"],"bugzilla":"643227","bugzilla_description":"CVE-2011-0002 libuser creates LDAP users with a default password","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["libuser-0:0.54.7-2.1.el5_5.2","libuser-0:0.52.5-1.1.el4_8.1","libuser-0:0.56.13-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0002.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icedax_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icedax_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icedax_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icedtea-web-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icedtea-web-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icedtea-web-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icedtea-web_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icedtea-web_security_api_results.json
new file mode 100644
index 0000000..d101ca8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icedtea-web_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-10181","severity":"moderate","public_date":"2019-07-31T13:42:00Z","advisories":["RHSA-2019:2003","RHSA-2019:2004"],"bugzilla":"1725928","bugzilla_description":"CVE-2019-10181 icedtea-web: unsigned code injection in a signed JAR file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["icedtea-web-0:1.7.1-2.el7_6","icedtea-web-0:1.7.1-17.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-10185","severity":"important","public_date":"2019-07-31T13:41:00Z","advisories":["RHSA-2019:2003","RHSA-2019:2004"],"bugzilla":"1724989","bugzilla_description":"CVE-2019-10185 icedtea-web: directory traversal in the nested jar auto-extraction leading to arbitrary file overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["icedtea-web-0:1.7.1-2.el7_6","icedtea-web-0:1.7.1-17.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L","cvss3_score":"8.2"},{"CVE":"CVE-2019-10182","severity":"important","public_date":"2019-07-31T13:40:00Z","advisories":["RHSA-2019:2003","RHSA-2019:2004"],"bugzilla":"1724958","bugzilla_description":"CVE-2019-10182 icedtea-web: path traversal while processing <jar/> elements of JNLP files results in arbitrary file overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22->CWE-94","affected_packages":["icedtea-web-0:1.7.1-2.el7_6","icedtea-web-0:1.7.1-17.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L","cvss3_score":"8.2"},{"CVE":"CVE-2015-5234","severity":"moderate","public_date":"2015-09-02T00:00:00Z","advisories":["RHSA-2016:0778","RHBA-2015:2457"],"bugzilla":"1233667","bugzilla_description":"CVE-2015-5234 icedtea-web: unexpected permanent authorization of unsigned applets","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-138","affected_packages":["icedtea-web-0:1.6.2-1.el6","icedtea-web-0:1.6.1-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5234.json"},{"CVE":"CVE-2015-5235","severity":"moderate","public_date":"2015-09-02T00:00:00Z","advisories":["RHSA-2016:0778","RHBA-2015:2457"],"bugzilla":"1233697","bugzilla_description":"CVE-2015-5235 icedtea-web: applet origin spoofing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-345","affected_packages":["icedtea-web-0:1.6.2-1.el6","icedtea-web-0:1.6.1-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5235.json"},{"CVE":"CVE-2013-6493","severity":"moderate","public_date":"2014-02-05T00:00:00Z","advisories":["RHBA-2014:1417"],"bugzilla":"1010958","bugzilla_description":"CVE-2013-6493 icedtea-web: insecure temporary file use flaw in LiveConnect implementation","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":["icedtea-web-0:1.5.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6493.json"},{"CVE":"CVE-2013-4349","severity":"critical","public_date":"2013-09-16T00:00:00Z","advisories":[],"bugzilla":"1007960","bugzilla_description":"CVE-2013-4349 icedtea-web: CVE-2012-4540 issue not fixed in 1.4","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4349.json"},{"CVE":"CVE-2013-1927","severity":"moderate","public_date":"2013-04-17T00:00:00Z","advisories":["RHSA-2013:0753"],"bugzilla":"884705","bugzilla_description":"CVE-2013-1927 icedtea-web: GIFAR issue","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.2.3-2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1927.json"},{"CVE":"CVE-2013-1926","severity":"moderate","public_date":"2013-04-17T00:00:00Z","advisories":["RHSA-2013:0753"],"bugzilla":"916774","bugzilla_description":"CVE-2013-1926 icedtea-web: class loader sharing for applets with same codebase paths","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.2.3-2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1926.json"},{"CVE":"CVE-2012-4540","severity":"critical","public_date":"2012-11-07T00:00:00Z","advisories":["RHSA-2012:1434"],"bugzilla":"869040","bugzilla_description":"CVE-2012-4540 icedtea-web: IcedTeaScriptableJavaObject::invoke off-by-one heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["icedtea-web-0:1.2.2-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4540.json"},{"CVE":"CVE-2012-3422","severity":"important","public_date":"2012-07-31T00:00:00Z","advisories":["RHSA-2012:1132"],"bugzilla":"840592","bugzilla_description":"CVE-2012-3422 icedtea-web: getvalueforurl uninitialized instance pointer","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["icedtea-web-0:1.2.1-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3422.json"},{"CVE":"CVE-2012-3423","severity":"important","public_date":"2012-07-31T00:00:00Z","advisories":["RHSA-2012:1132"],"bugzilla":"841345","bugzilla_description":"CVE-2012-3423 icedtea-web: incorrect handling of not 0-terminated strings","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["icedtea-web-0:1.2.1-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3423.json"},{"CVE":"CVE-2011-3377","severity":"moderate","public_date":"2011-11-08T00:00:00Z","advisories":["RHSA-2011:1441"],"bugzilla":"742515","bugzilla_description":"CVE-2011-3377 IcedTea-Web: second-level domain subdomains and suffix domain SOP bypass","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.0.6-1.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3377.json"},{"CVE":"CVE-2011-2513","severity":"low","public_date":"2011-07-20T00:00:00Z","advisories":["RHSA-2011:1100"],"bugzilla":"718164","bugzilla_description":"CVE-2011-2513 icedtea, icedtea-web: home directory path disclosure to untrusted applications","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["icedtea-web-0:1.0.4-2.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2513.json"},{"CVE":"CVE-2011-2514","severity":"moderate","public_date":"2011-07-20T00:00:00Z","advisories":["RHSA-2011:1100"],"bugzilla":"718170","bugzilla_description":"CVE-2011-2514 icedtea-web: Java Web Start security warning dialog manipulation","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["icedtea-web-0:1.0.4-2.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2514.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icoutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icoutils_security_api_results.json
new file mode 100644
index 0000000..307bf70
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icoutils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-6009","severity":"important","public_date":"2017-02-03T00:00:00Z","advisories":["RHSA-2017:0837"],"bugzilla":"1422906","bugzilla_description":"CVE-2017-6009 icoutils: Buffer overflow in the decode_ne_resource_id function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["icoutils-0:0.31.3-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6009.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L","cvss3_score":"8.1"},{"CVE":"CVE-2017-6010","severity":"moderate","public_date":"2017-02-03T00:00:00Z","advisories":["RHSA-2017:0837"],"bugzilla":"1422907","bugzilla_description":"CVE-2017-6010 icoutils: Buffer overflow in the extract_icons function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["icoutils-0:0.31.3-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6010.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L","cvss3_score":"8.1"},{"CVE":"CVE-2017-6011","severity":"moderate","public_date":"2017-02-03T00:00:00Z","advisories":["RHSA-2017:0837"],"bugzilla":"1422908","bugzilla_description":"CVE-2017-6011 icoutils: Buffer overflow in the simple_vec function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["icoutils-0:0.31.3-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6011.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L","cvss3_score":"8.1"},{"CVE":"CVE-2017-5208","severity":"important","public_date":"2017-01-08T00:00:00Z","advisories":["RHSA-2017:0837"],"bugzilla":"1411251","bugzilla_description":"CVE-2017-5208 icoutils: Check_offset overflow on 64-bit systems","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["icoutils-0:0.31.3-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5208.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L","cvss3_score":"8.1"},{"CVE":"CVE-2017-5331","severity":"moderate","public_date":"2017-01-08T00:00:00Z","advisories":[],"bugzilla":"1412248","bugzilla_description":"CVE-2017-5331 icoutils: Check_offset overflow on 64-bit systems","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5331.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5333","severity":"important","public_date":"2017-01-08T00:00:00Z","advisories":["RHSA-2017:0837"],"bugzilla":"1412259","bugzilla_description":"CVE-2017-5333 icoutils: Integer overflow vulnerability in extract.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["icoutils-0:0.31.3-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5333.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L","cvss3_score":"8.1"},{"CVE":"CVE-2017-5332","severity":"moderate","public_date":"2017-01-08T00:00:00Z","advisories":["RHSA-2017:0837"],"bugzilla":"1412263","bugzilla_description":"CVE-2017-5332 icoutils: Access to unallocated memory possible in extract.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["icoutils-0:0.31.3-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5332.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icu_security_api_results.json
new file mode 100644
index 0000000..29ec8b4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/icu_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10531","severity":"important","public_date":"2020-02-25T00:00:00Z","advisories":["RHSA-2020:1343","RHSA-2020:2895","RHSA-2020:0738","RHSA-2020:1317","RHSA-2020:1293","RHSA-2020:0902","RHSA-2020:0901","RHSA-2020:3084","RHSA-2020:0896","RHSA-2020:0897"],"bugzilla":"1807349","bugzilla_description":"CVE-2020-10531 ICU: Integer overflow in UnicodeString::doAppend()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["icu-0:60.3-2.el8_0","icu-0:50.2-4.el7_7","rh-nodejs12-nodejs-0:12.18.2-1.el7","nodejs:12-8010020200326104226.c27ad7f8","icu-0:60.3-2.el8_1","chromium-browser-0:80.0.3987.122-1.el6_10","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:10-8000020200318152927.f8e95b4e","nodejs:10-8010020200318152252.c27ad7f8","icu-0:4.2.1-15.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10531.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18928","severity":"low","public_date":"2018-10-30T00:00:00Z","advisories":[],"bugzilla":"1646702","bugzilla_description":"CVE-2018-18928 icu: integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-15422","severity":"moderate","public_date":"2017-12-06T00:00:00Z","advisories":["RHSA-2017:3401"],"bugzilla":"1523136","bugzilla_description":"CVE-2017-15422 chromium-browser: integer overflow in icu","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["chromium-browser-0:63.0.3239.84-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-17484","severity":"moderate","public_date":"2017-11-21T00:00:00Z","advisories":[],"bugzilla":"1524819","bugzilla_description":"CVE-2017-17484 icu: stack-based buffer overflow in ucnv_u8.cpp:ucnv_UTF8FromUTF8 can lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17484.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-14952","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1510930","bugzilla_description":"CVE-2017-14952 icu: Double free in i18n/zonemeta.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14952.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-7867","severity":"moderate","public_date":"2017-02-13T00:00:00Z","advisories":[],"bugzilla":"1444097","bugzilla_description":"CVE-2017-7867 icu: Heap-buffer overflow in utext_setNativeIndex function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7867.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-7868","severity":null,"public_date":"2017-02-13T00:00:00Z","advisories":[],"bugzilla":"1444098","bugzilla_description":"CVE-2017-7868 icu: Heap-buffer overflow in utext_moveIndex32 function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7868.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2014-9911","severity":"moderate","public_date":"2016-11-22T00:00:00Z","advisories":[],"bugzilla":"1383569","bugzilla_description":"CVE-2014-9911 icu: stack-based buffer overflow in uloc_getDisplayName","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9911.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2016-7415","severity":"moderate","public_date":"2016-09-03T00:00:00Z","advisories":[],"bugzilla":"1377361","bugzilla_description":"CVE-2016-7415 icu: Stack based buffer overflow in locid.cpp","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7415.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-6293","severity":"low","public_date":"2016-07-03T00:00:00Z","advisories":[],"bugzilla":"1360339","bugzilla_description":"CVE-2016-6293 icu: Out-of-bounds access in uloc_acceptLanguageFromHTTP","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6293.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-0494","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298906","bugzilla_description":"CVE-2016-0494 ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0494.json"},{"CVE":"CVE-2015-4844","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273318","bugzilla_description":"CVE-2015-4844 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4844.json"},{"CVE":"CVE-2015-1270","severity":"moderate","public_date":"2015-07-21T00:00:00Z","advisories":["RHSA-2015:1499"],"bugzilla":"1245574","bugzilla_description":"CVE-2015-1270 ICU: Uninitialized memory read fixed in Chrome 44.0.2403.89","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["chromium-browser-0:44.0.2403.89-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1270.json"},{"CVE":"CVE-2015-2632","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242394","bugzilla_description":"CVE-2015-2632 ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190->CWE-125","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2632.json"},{"CVE":"CVE-2015-4760","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242447","bugzilla_description":"CVE-2015-4760 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8071715)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4760.json"},{"CVE":"CVE-2014-8146","severity":"low","public_date":"2015-05-05T00:00:00Z","advisories":[],"bugzilla":"1176197","bugzilla_description":"CVE-2014-8146 icu: heap overflow via incorrect isolateCount","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8146.json"},{"CVE":"CVE-2014-8147","severity":"low","public_date":"2015-05-05T00:00:00Z","advisories":[],"bugzilla":"1176200","bugzilla_description":"CVE-2014-8147 icu: integer truncation in the resolveImplicitLevels function","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8147.json"},{"CVE":"CVE-2015-0469","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1210829","bugzilla_description":"CVE-2015-0469 ICU: layout engine glyphStorage off-by-one (OpenJDK 2D, 8067699)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-122","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0469.json"},{"CVE":"CVE-2014-7923","severity":"important","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0093"],"bugzilla":"1185202","bugzilla_description":"CVE-2014-7923 ICU: regexp engine missing look-behind expression range check","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:40.0.2214.91-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7923.json"},{"CVE":"CVE-2014-7926","severity":"important","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0093"],"bugzilla":"1185205","bugzilla_description":"CVE-2014-7926 ICU: regexp engine incorrect handling of a zero length quantifier","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:40.0.2214.91-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7926.json"},{"CVE":"CVE-2014-7940","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0093"],"bugzilla":"1185220","bugzilla_description":"CVE-2014-7940 ICU: uninitialized value use in the collation component","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["chromium-browser-0:40.0.2214.91-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7940.json"},{"CVE":"CVE-2014-9654","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0093"],"bugzilla":"1190129","bugzilla_description":"CVE-2014-9654 icu: insufficient size limit checks in regular expression compiler","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:40.0.2214.91-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9654.json"},{"CVE":"CVE-2014-6585","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183645","bugzilla_description":"CVE-2014-6585 ICU: font parsing OOB read (OpenJDK 2D, 8055489)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6585.json"},{"CVE":"CVE-2014-6591","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183646","bugzilla_description":"CVE-2014-6591 ICU: font parsing OOB read (OpenJDK 2D, 8056276)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6591.json"},{"CVE":"CVE-2014-6511","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151517","bugzilla_description":"CVE-2014-6511 ICU: Layout Engine ContextualSubstitution missing boundary checks (JDK 2D, 8041540)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6511.json"},{"CVE":"CVE-2013-5907","severity":"critical","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0135","RHSA-2014:0026","RHSA-2014:0136","RHSA-2014:0134","RHSA-2014:0414","RHSA-2014:0027","RHSA-2014:0705","RHSA-2014:0030","RHSA-2014:0097"],"bugzilla":"1052915","bugzilla_description":"CVE-2013-5907 ICU: Layout Engine LookupProcessor insufficient input checks (JDK 2D, 8025034)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.5.0-ibm-1:1.5.0.16.5-1jpp.1.el6_5","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el6_5","java-1.7.0-ibm-1:1.7.0.6.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.15.1-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.7.0-openjdk-1:1.7.0.51-2.4.4.1.el5_10","java-1.7.0-oracle-1:1.7.0.51-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el6_5","java-1.6.0-openjdk-1:1.6.0.0-3.1.13.1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5907.json"},{"CVE":"CVE-2013-2924","severity":"moderate","public_date":"2013-10-01T00:00:00Z","advisories":[],"bugzilla":"1014886","bugzilla_description":"CVE-2013-2924 icu: use-after-free flaw leads to denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2924.json"},{"CVE":"CVE-2013-2419","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952656","bugzilla_description":"CVE-2013-2419 ICU: Layout Engine font processing errors (JDK 2D, 8001031)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2419.json"},{"CVE":"CVE-2013-2383","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952708","bugzilla_description":"CVE-2013-2383 ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004986)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2383.json"},{"CVE":"CVE-2013-2384","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952709","bugzilla_description":"CVE-2013-2384 ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004987)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2384.json"},{"CVE":"CVE-2013-1569","severity":"critical","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0823","RHSA-2013:0757","RHSA-2013:0822","RHSA-2013:0855","RHSA-2013:0758","RHSA-2013:0752","RHSA-2013:1456","RHSA-2013:0770","RHSA-2013:1455","RHSA-2013:0751"],"bugzilla":"952711","bugzilla_description":"CVE-2013-1569 ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004994)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el5_9","java-1.7.0-oracle-1:1.7.0.21-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.11.11.el5_9","java-1.7.0-openjdk-1:1.7.0.19-2.3.9.1.el6_4","java-1.6.0-sun-1:1.6.0.45-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el5_9","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.61.1.11.11.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1569.json"},{"CVE":"CVE-2013-0900","severity":"moderate","public_date":"2013-02-21T00:00:00Z","advisories":[],"bugzilla":"918167","bugzilla_description":"CVE-2013-0900 icu: Race condition leading to a use-after-free","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0900.json"},{"CVE":"CVE-2012-5109","severity":"low","public_date":"2012-10-08T00:00:00Z","advisories":[],"bugzilla":"864538","bugzilla_description":"CVE-2012-5109 icu: DoS (out-of bounds read) via vectors related to regular expression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5109.json"},{"CVE":"CVE-2011-4599","severity":"moderate","public_date":"2011-12-07T00:00:00Z","advisories":["RHSA-2011:1815"],"bugzilla":"765812","bugzilla_description":"CVE-2011-4599 icu: Stack-based buffer overflow by canonicalizing the given localeID","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["icu-0:3.6-5.16.1","icu-0:4.2.1-9.1.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4599.json"},{"CVE":"CVE-2008-1036","severity":"moderate","public_date":"2008-05-28T00:00:00Z","advisories":["RHSA-2009:0296"],"bugzilla":"464168","bugzilla_description":"CVE-2008-1036 ICU: Invalid character sequences omission during conversion of some character encodings (XSS attack possible)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["icu-0:3.6-5.11.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1036.json"},{"CVE":"CVE-2007-4770","severity":"important","public_date":"2008-01-22T00:00:00Z","advisories":["RHSA-2008:0090"],"bugzilla":"429023","bugzilla_description":"CVE-2007-4770 libicu poor back reference validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["icu-0:3.6-5.11.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4770.json"},{"CVE":"CVE-2007-4771","severity":"important","public_date":"2008-01-22T00:00:00Z","advisories":["RHSA-2008:0090"],"bugzilla":"429025","bugzilla_description":"CVE-2007-4771 libicu incomplete interval handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["icu-0:3.6-5.11.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4771.json"},{"CVE":"CVE-2009-0153","severity":"moderate","public_date":"2007-04-17T00:00:00Z","advisories":["RHSA-2009:1122"],"bugzilla":"503071","bugzilla_description":"CVE-2009-0153 icu: XSS vulnerability due to improper invalid byte sequence handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["icu-0:3.6-5.11.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0153.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/idm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/idm_security_api_results.json
new file mode 100644
index 0000000..80c760e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/idm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-4051","severity":"moderate","public_date":"2020-06-13T00:00:00Z","advisories":[],"bugzilla":"1879724","bugzilla_description":"CVE-2020-4051 dojo: Cross-site scripting vulnerability in the editor's LinkDialog plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-4051.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2020-1722","severity":"low","public_date":"2020-04-14T04:26:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1793071","bugzilla_description":"CVE-2020-1722 ipa: No password length restriction leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1722.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-1703","severity":"low","public_date":"2020-04-09T03:31:00Z","advisories":[],"bugzilla":"1793049","bugzilla_description":"CVE-2020-1703 ipa: failure to invalidate session after password change","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1703.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-10785","severity":"moderate","public_date":"2020-02-28T00:00:00Z","advisories":[],"bugzilla":"1831010","bugzilla_description":"CVE-2019-10785 dojo: cross-site scripting via dojox.xmpp.util.xmlEncode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10785.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-10195","severity":"moderate","public_date":"2019-11-26T00:00:00Z","advisories":["RHBA-2019:4268","RHSA-2020:0378","RHSA-2020:1269"],"bugzilla":"1726223","bugzilla_description":"CVE-2019-10195 ipa: Batch API logging user passwords to /var/log/httpd/error_log","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532->CWE-200","affected_packages":["idm:DL1-8010020191127093529.6573b795","ipa-0:4.6.5-11.el7_7.4","idm:DL1-8000020200217171713.2874843d"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2019-14826","severity":"low","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1746944","bugzilla_description":"CVE-2019-14826 ipa: Session not terminated after logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14826.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"1.8"},{"CVE":"CVE-2019-14867","severity":"important","public_date":"2019-08-26T00:00:00Z","advisories":["RHBA-2019:4268","RHSA-2020:0378","RHSA-2020:1269"],"bugzilla":"1766920","bugzilla_description":"CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-94|CWE-400)","affected_packages":["idm:DL1-8010020191127093529.6573b795","ipa-0:4.6.5-11.el7_7.4","idm:DL1-8000020200217171713.2874843d"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14867.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-8331","severity":"moderate","public_date":"2019-02-11T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2020:3936"],"bugzilla":"1686454","bugzilla_description":"CVE-2019-8331 bootstrap: XSS in the tooltip or popover data-template attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","ovirt-web-ui-0:1.6.0-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-20676","severity":"moderate","public_date":"2018-08-10T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668082","bugzilla_description":"CVE-2018-20676 bootstrap: XSS in the tooltip data-viewport attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20676.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-20677","severity":"moderate","public_date":"2018-08-10T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668089","bugzilla_description":"CVE-2018-20677 bootstrap: XSS in the affix configuration target property","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14040","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601614","bugzilla_description":"CVE-2018-14040 bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14041","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2019:1456"],"bugzilla":"1601616","bugzilla_description":"CVE-2018-14041 bootstrap: Cross-site Scripting (XSS) in the data-target property of scrollspy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14041.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14042","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601617","bugzilla_description":"CVE-2018-14042 bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-2582","severity":"moderate","public_date":"2017-09-26T00:00:00Z","advisories":["RHSA-2019:0136","RHSA-2019:0137","RHSA-2017:3220","RHSA-2017:3218","RHSA-2017:2811","RHSA-2017:3219","RHSA-2017:3216","RHSA-2017:2810","RHSA-2017:3217","RHSA-2018:2743","RHSA-2017:2808","RHSA-2018:2742","RHSA-2017:2809","RHSA-2018:2741","RHSA-2019:0139","RHSA-2018:2740"],"bugzilla":"1410481","bugzilla_description":"CVE-2017-2582 picketlink, keycloak: SAML request parser replaces special strings with system properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["jboss-ec2-eap-0:7.5.18-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-10735","severity":"moderate","public_date":"2016-06-27T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668097","bugzilla_description":"CVE-2016-10735 bootstrap: XSS in the data-target attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2015-9251","severity":"moderate","public_date":"2015-06-27T00:00:00Z","advisories":["RHSA-2020:0481","RHSA-2020:0729","RHSA-2020:3936","RHSA-2020:0983"],"bugzilla":"1399546","bugzilla_description":"CVE-2015-9251 js-jquery: Cross-site scripting via cross-domain ajax requests","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2008-0889","severity":"important","public_date":"2008-03-19T00:00:00Z","advisories":["RHSA-2008:0191"],"bugzilla":"436107","bugzilla_description":"CVE-2008-0889 directory server: insecure permissions on fedora/redhat-idm-console","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-732","affected_packages":["redhat-idm-console-0:1.0.0-22.el4idm","redhat-idm-console-0:1.0.0-17.el5idm"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0889.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/idn2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/idn2_security_api_results.json
new file mode 100644
index 0000000..73eeeb9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/idn2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-18224","severity":"moderate","public_date":"2019-01-07T00:00:00Z","advisories":[],"bugzilla":"1764780","bugzilla_description":"CVE-2019-18224 libidn2: heap-based buffer overflow in idn2_to_ascii_4i in lib/lookup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iio-sensor-proxy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iio-sensor-proxy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iio-sensor-proxy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ilmbase-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ilmbase-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ilmbase-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ilmbase_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ilmbase_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ilmbase_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ima-evm-utils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ima-evm-utils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ima-evm-utils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ima-evm-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ima-evm-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ima-evm-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/imake_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/imake_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/imake_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/infiniband-diags_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/infiniband-diags_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/infiniband-diags_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/info_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/info_security_api_results.json
new file mode 100644
index 0000000..816198b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/info_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-13313","severity":"low","public_date":"2019-07-05T00:00:00Z","advisories":["RHSA-2019:3387","RHSA-2020:1051"],"bugzilla":"1727766","bugzilla_description":"CVE-2019-13313 Libosinfo: osinfo-install-script option leaks password via command line argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-214->CWE-200","affected_packages":["libosinfo-0:1.1.0-5.el7","libosinfo-0:1.5.0-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2016-9181","severity":"low","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1379556","bugzilla_description":"CVE-2016-9181 perl-Image-Info: XXE in SVG files","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2006-4810","severity":"moderate","public_date":"2006-11-08T00:00:00Z","advisories":["RHSA-2006:0727"],"bugzilla":"1618203","bugzilla_description":"CVE-2006-4810 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["texinfo-0:4.5-3.el3.1","texinfo-0:4.7-5.el4.2","texinfo-0:4.0b-3.el2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4810.json"},{"CVE":"CVE-2005-3011","severity":"low","public_date":"2000-02-09T00:00:00Z","advisories":["RHSA-2006:0727"],"bugzilla":"1617775","bugzilla_description":"CVE-2005-3011 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["texinfo-0:4.5-3.el3.1","texinfo-0:4.7-5.el4.2","texinfo-0:4.0b-3.el2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3011.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/initial-setup-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/initial-setup-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/initial-setup-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/initial-setup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/initial-setup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/initial-setup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/initscripts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/initscripts_security_api_results.json
new file mode 100644
index 0000000..21d0096
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/initscripts_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4169","severity":"important","public_date":"2013-09-05T00:00:00Z","advisories":["RHSA-2013:1213"],"bugzilla":"988498","bugzilla_description":"CVE-2013-4169 gdm: TOCTTOU race condition on /tmp/.X11-unix","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"(CWE-367|CWE-377)->CWE-552","affected_packages":["gdm-1:2.16.0-59.el5_9.1","initscripts-0:8.45.42-2.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4169.json"},{"CVE":"CVE-2008-1198","severity":"low","public_date":"2008-02-28T00:00:00Z","advisories":["RHSA-2012:0312"],"bugzilla":"435274","bugzilla_description":"CVE-2008-1198 initscripts: IPSec ifup script allows for aggressive IKE mode","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["initscripts-0:8.45.42-1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1198.json"},{"CVE":"CVE-2005-3629","severity":"moderate","public_date":"2005-03-07T00:00:00Z","advisories":["RHSA-2006:0015","RHSA-2006:0016"],"bugzilla":"1617831","bugzilla_description":"CVE-2005-3629 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["initscripts-0:7.31.30.EL-1","initscripts-0:7.93.24.EL-1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3629.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/inkscape-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/inkscape-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/inkscape-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/inkscape-view_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/inkscape-view_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/inkscape-view_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/inkscape_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/inkscape_security_api_results.json
new file mode 100644
index 0000000..188f07c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/inkscape_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-27560","severity":"low","public_date":"2020-10-18T00:00:00Z","advisories":[],"bugzilla":"1890687","bugzilla_description":"CVE-2020-27560 ImageMagick: division by zero in OptimizeLayerFrames function in MagickCore/layer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27560.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2012-1610","severity":"moderate","public_date":"2020-07-31T00:00:00Z","advisories":[],"bugzilla":"1868354","bugzilla_description":"CVE-2012-1610 ImageMagick: integer overflow in the GetEXIFProperty function in magick/property.c could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1610.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12825","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:3654","RHBA-2020:3609","RHSA-2020:4072"],"bugzilla":"1835377","bugzilla_description":"CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["redhat-coreos-43.82.202009181853.0","libcroco-0:0.6.12-4.el8_2.1","libcroco-0:0.6.12-6.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2012-5656","severity":"low","public_date":"2012-12-17T00:00:00Z","advisories":[],"bugzilla":"888249","bugzilla_description":"CVE-2012-5656 inkscape: XXE via SVG rasterization","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5656.json"},{"CVE":"CVE-2012-6076","severity":"low","public_date":"2012-03-04T00:00:00Z","advisories":[],"bugzilla":"891331","bugzilla_description":"CVE-2012-6076 inkscape: Reads .eps files from /tmp instead of current working directory","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6076.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/insights-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/insights-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/insights-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/integritysetup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/integritysetup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/integritysetup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/intel-cmt-cat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/intel-cmt-cat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/intel-cmt-cat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/intel-gpu-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/intel-gpu-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/intel-gpu-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/intltool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/intltool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/intltool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iotop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iotop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iotop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iowatcher_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iowatcher_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iowatcher_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-client-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-client-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-client-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-client-samba_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-client-samba_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-client-samba_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-client_security_api_results.json
new file mode 100644
index 0000000..35116c2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-client_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-5484","severity":"important","public_date":"2013-01-23T00:00:00Z","advisories":["RHSA-2013:0188","RHSA-2013:0189"],"bugzilla":"876307","bugzilla_description":"CVE-2012-5484 ipa: weakness when initiating join from IPA client can potentially compromise IPA domain","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["ipa-client-0:2.1.3-5.el5_9.2","ipa-0:2.2.0-17.el6_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5484.json"},{"CVE":"CVE-2012-5631","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":[],"bugzilla":"886369","bugzilla_description":"CVE-2012-5631 ipa: client does not properly check server identity before sending cookies that contain credentials","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5631.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-healthcheck-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-healthcheck-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-healthcheck-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-healthcheck_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-healthcheck_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-healthcheck_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-idoverride-memberof-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-idoverride-memberof-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-idoverride-memberof-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-python-compat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-python-compat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-python-compat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server-dns_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server-dns_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server-dns_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server-trust-ad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server-trust-ad_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server-trust-ad_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server_security_api_results.json
new file mode 100644
index 0000000..202c21d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipa-server_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-2222","severity":"important","public_date":"2010-07-01T00:00:00Z","advisories":[],"bugzilla":"604783","bugzilla_description":"CVE-2010-2222 redhat-ds/389: null deref in _ger_parse_control() for subjectdn can crash server","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2222.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipcalc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipcalc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipcalc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iperf3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iperf3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iperf3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipmievd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipmievd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipmievd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipmitool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipmitool_security_api_results.json
new file mode 100644
index 0000000..714cc4e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipmitool_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-5208","severity":"important","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:2213","RHSA-2020:1486","RHSA-2020:1331","RHSA-2020:0981","RHSA-2020:2286","RHSA-2020:2276","RHSA-2020:2284","RHSA-2020:0979","RHSA-2020:0984"],"bugzilla":"1798721","bugzilla_description":"CVE-2020-5208 ipmitool: Buffer overflow in read_fru_area_section function in lib/ipmi_fru.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["ipmitool-0:1.8.18-9.el7_6","ipmitool-0:1.8.18-9.el7_7","ipmitool-0:1.8.13-10.el7_2","ipmitool-0:1.8.18-9.el7_5","ipmitool-0:1.8.15-8.el7_3","ipmitool-0:1.8.15-3.el6_10","ipmitool-0:1.8.18-12.el8_1","ipmitool-0:1.8.18-12.el8_0","ipmitool-0:1.8.18-6.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5208.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2011-4339","severity":"moderate","public_date":"2011-12-13T00:00:00Z","advisories":["RHSA-2011:1814","RHSA-2013:0123"],"bugzilla":"742837","bugzilla_description":"CVE-2011-4339 OpenIPMI: IPMI event daemon creates PID file with world writeable permissions","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["OpenIPMI-0:2.0.16-16.el5","ipmitool-0:1.8.11-12.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4339.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iproute-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iproute-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iproute-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iproute-tc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iproute-tc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iproute-tc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iproute_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iproute_security_api_results.json
new file mode 100644
index 0000000..25e4cb7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iproute_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-20795","severity":"low","public_date":"2019-05-05T00:00:00Z","advisories":[],"bugzilla":"1868211","bugzilla_description":"CVE-2019-20795 iproute: use-after-free in get_netnsid_from_name in ip/ipnetns.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20795.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2012-1088","severity":"low","public_date":"2012-02-15T00:00:00Z","advisories":[],"bugzilla":"797878","bugzilla_description":"CVE-2012-1088 iproute: multiple insecure temporary file use issues","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1088.json"},{"CVE":"CVE-2003-0856","severity":"low","public_date":"2003-11-12T00:00:00Z","advisories":["RHSA-2003:317","RHSA-2003:316"],"bugzilla":"1617095","bugzilla_description":"CVE-2003-0856 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["iproute-0:2.4.7-11.30E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0856.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iprutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iprutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iprutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset-service_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset-service_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset-service_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipset_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-arptables_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-arptables_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-arptables_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-ebtables_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-ebtables_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-ebtables_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-services_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-services_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-services_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables_security_api_results.json
new file mode 100644
index 0000000..26dd1a9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptables_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-2663","severity":"moderate","public_date":"2011-12-02T00:00:00Z","advisories":[],"bugzilla":"826702","bugzilla_description":"CVE-2012-2663 iptables: --syn flag bypass","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2663.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptraf-ng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptraf-ng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptraf-ng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptstate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptstate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iptstate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iputils-ninfod_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iputils-ninfod_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iputils-ninfod_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iputils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iputils_security_api_results.json
new file mode 100644
index 0000000..9fb3001
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iputils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-2529","severity":"low","public_date":"2010-07-23T00:00:00Z","advisories":[],"bugzilla":"613819","bugzilla_description":"CVE-2010-2529 iputils: denial of service vulnerability in ping","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2529.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipvsadm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipvsadm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipvsadm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipxe-bootimgs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipxe-bootimgs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipxe-bootimgs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipxe-roms-qemu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipxe-roms-qemu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipxe-roms-qemu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipxe-roms_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipxe-roms_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ipxe-roms_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/irqbalance_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/irqbalance_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/irqbalance_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/irssi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/irssi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/irssi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/irssi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/irssi_security_api_results.json
new file mode 100644
index 0000000..089f2d2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/irssi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-15717","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":[],"bugzilla":"1747346","bugzilla_description":"CVE-2019-15717 Irssi: use-after-free if the IRC server sends double CAP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15717.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13045","severity":"low","public_date":"2019-06-29T00:00:00Z","advisories":["RHSA-2020:1616"],"bugzilla":"1727683","bugzilla_description":"CVE-2019-13045 irssi: use after free when sending SASL login to server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["irssi-0:1.1.1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13045.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-5882","severity":"low","public_date":"2019-01-10T00:00:00Z","advisories":[],"bugzilla":"1665510","bugzilla_description":"CVE-2019-5882 irssi: Use-after-free when hidden lines were expired from the scroll buffer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5882.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-7054","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":[],"bugzilla":"1546223","bugzilla_description":"CVE-2018-7054 irssi: use-after-free when a server is disconnected during netsplits","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-7053","severity":"low","public_date":"2018-02-13T00:00:00Z","advisories":[],"bugzilla":"1546226","bugzilla_description":"CVE-2018-7053 irssi: use-after-free when SASL messages are received in unexpected order","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-7050","severity":"low","public_date":"2018-02-13T00:00:00Z","advisories":[],"bugzilla":"1546280","bugzilla_description":"CVE-2018-7050 irssi: Null pointer dereference when an \"empty\" nick joins a channel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7050.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2018-7051","severity":"low","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1546275","bugzilla_description":"CVE-2018-7051 irssi: out-of-bounds access when printing theme strings with certain nick names","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7051.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-7052","severity":"low","public_date":"2018-02-02T00:00:00Z","advisories":[],"bugzilla":"1546272","bugzilla_description":"CVE-2018-7052 irssi: Denial of Service (DoS) due to a NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7052.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5206","severity":"moderate","public_date":"2018-01-06T00:00:00Z","advisories":[],"bugzilla":"1532569","bugzilla_description":"CVE-2018-5206 irssi: NULL pointer dereference when channel topic is set without specifying sender","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5206.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-5205","severity":"moderate","public_date":"2018-01-06T00:00:00Z","advisories":[],"bugzilla":"1532573","bugzilla_description":"CVE-2018-5205 irssi: Out-of-bounds read when using incomplete escape codes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5205.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-5208","severity":"moderate","public_date":"2018-01-06T00:00:00Z","advisories":[],"bugzilla":"1532622","bugzilla_description":"CVE-2018-5208 irssi: heap buffer overflow due to calculation error in the completion code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5208.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-5207","severity":"moderate","public_date":"2018-01-06T00:00:00Z","advisories":[],"bugzilla":"1532624","bugzilla_description":"CVE-2018-5207 irssi: Out-of-bounds read when using an incomplete variable argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-15227","severity":"moderate","public_date":"2017-10-22T00:00:00Z","advisories":[],"bugzilla":"1510951","bugzilla_description":"CVE-2017-15227 irssi: Use-after-free due to failures to remove destroyed channels from the query list","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15227.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15228","severity":"moderate","public_date":"2017-10-22T00:00:00Z","advisories":[],"bugzilla":"1510953","bugzilla_description":"CVE-2017-15228 irssi: Out-of-bounds access when installing themes with unterminated colour formatting sequences","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15228.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15721","severity":"moderate","public_date":"2017-10-22T00:00:00Z","advisories":[],"bugzilla":"1510955","bugzilla_description":"CVE-2017-15721 irssi: NULL pointer dereference due to incorrectly formatted DCC CTCP messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15721.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15722","severity":"moderate","public_date":"2017-10-22T00:00:00Z","advisories":[],"bugzilla":"1510956","bugzilla_description":"CVE-2017-15722 irssi: Out-of-bounds access while verifying that a Safe channel ID is long enough","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15722.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15723","severity":"moderate","public_date":"2017-10-22T00:00:00Z","advisories":[],"bugzilla":"1510958","bugzilla_description":"CVE-2017-15723 irssi: NULL pointer dereference due to overlong nicks while splitting the message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15723.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10965","severity":"low","public_date":"2017-07-05T00:00:00Z","advisories":[],"bugzilla":"1473232","bugzilla_description":"CVE-2017-10965 irssi: NULL pointer dereference when receiving messages with invalid time stamps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10965.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-10966","severity":"low","public_date":"2017-07-05T00:00:00Z","advisories":[],"bugzilla":"1473234","bugzilla_description":"CVE-2017-10966 irssi: Use-after-free while updating the internal nick list","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10966.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-9468","severity":"low","public_date":"2017-06-07T00:00:00Z","advisories":[],"bugzilla":"1459456","bugzilla_description":"CVE-2017-9468 irssi: Null pointer dereference while receiving a DCC message without source nick/host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-9469","severity":"low","public_date":"2017-06-07T00:00:00Z","advisories":[],"bugzilla":"1459457","bugzilla_description":"CVE-2017-9469 irssi: Invalid read when receiving certain incorrectly quoted DCC files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-129","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9469.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5356","severity":"low","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1413890","bugzilla_description":"CVE-2017-5356 irssi: Out-of-bounds read in format string","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5356.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-5193","severity":"low","public_date":"2017-01-05T00:00:00Z","advisories":[],"bugzilla":"1410821","bugzilla_description":"CVE-2017-5193 irssi: Null pointer dereference in the nickcmp function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-5194","severity":"low","public_date":"2017-01-05T00:00:00Z","advisories":[],"bugzilla":"1410824","bugzilla_description":"CVE-2017-5194 irssi: Use after free when receiving invalid nick message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5194.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5195","severity":"moderate","public_date":"2017-01-05T00:00:00Z","advisories":[],"bugzilla":"1410825","bugzilla_description":"CVE-2017-5195 irssi: Out of bounds read in certain incomplete control codes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-5196","severity":"moderate","public_date":"2017-01-05T00:00:00Z","advisories":[],"bugzilla":"1410827","bugzilla_description":"CVE-2017-5196 irssi: Out of bounds read in certain incomplete character sequences","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5196.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7553","severity":"low","public_date":"2016-09-22T00:00:00Z","advisories":[],"bugzilla":"1379270","bugzilla_description":"CVE-2016-7553 irssi: Information disclosure in buf.pl","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7553.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-7044","severity":"moderate","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1378343","bugzilla_description":"CVE-2016-7044 irssi: Unchecked input in unformat_24bit_color() can lead to crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7044.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-7045","severity":"moderate","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1378344","bugzilla_description":"CVE-2016-7045 irssi: String length not validated in format_send_to_gui() causing crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7045.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iscsi-initiator-utils-iscsiuio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iscsi-initiator-utils-iscsiuio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iscsi-initiator-utils-iscsiuio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iscsi-initiator-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iscsi-initiator-utils_security_api_results.json
new file mode 100644
index 0000000..68d8026
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iscsi-initiator-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-17840","severity":"moderate","public_date":"2017-12-22T00:00:00Z","advisories":[],"bugzilla":"1529176","bugzilla_description":"CVE-2017-17840 iscsi-initiator-utils: Heap-based buffer overflow in process_iscsid_broadcast()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2007-3099","severity":"moderate","public_date":"2007-06-11T00:00:00Z","advisories":["RHSA-2007:0497"],"bugzilla":"243719","bugzilla_description":"CVE-2007-3099 dos flaws in open-iscsi (CVE-2007-3100)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["iscsi-initiator-utils-0:6.2.0.742-0.6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3099.json"},{"CVE":"CVE-2007-3100","severity":"moderate","public_date":"2007-06-11T00:00:00Z","advisories":["RHSA-2007:0497"],"bugzilla":"243719","bugzilla_description":"CVE-2007-3099 dos flaws in open-iscsi (CVE-2007-3100)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["iscsi-initiator-utils-0:6.2.0.742-0.6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3100.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isns-utils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isns-utils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isns-utils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isns-utils-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isns-utils-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isns-utils-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isns-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isns-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isns-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iso-codes-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iso-codes-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iso-codes-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iso-codes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iso-codes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iso-codes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isomd5sum_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isomd5sum_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isomd5sum_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isorelax-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isorelax-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isorelax-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isorelax_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isorelax_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/isorelax_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/istack-commons-runtime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/istack-commons-runtime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/istack-commons-runtime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/istack-commons-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/istack-commons-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/istack-commons-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/istack-commons_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/istack-commons_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/istack-commons_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/itstool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/itstool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/itstool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ivy-local_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ivy-local_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ivy-local_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl100-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl100-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl100-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl1000-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl1000-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl1000-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl105-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl105-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl105-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl135-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl135-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl135-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl2000-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl2000-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl2000-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl2030-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl2030-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl2030-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl3160-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl3160-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl3160-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl3945-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl3945-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl3945-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl4965-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl4965-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl4965-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl5000-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl5000-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl5000-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl5150-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl5150-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl5150-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6000-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6000-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6000-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6000g2a-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6000g2a-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6000g2a-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6000g2b-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6000g2b-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6000g2b-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6050-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6050-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl6050-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl7260-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl7260-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwl7260-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwpmd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwpmd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/iwpmd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-annotations_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-annotations_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-annotations_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-databind_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-databind_security_api_results.json
new file mode 100644
index 0000000..8ac2c8e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-databind_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24750","severity":"important","public_date":"2020-09-18T00:00:00Z","advisories":["RHSA-2020:4173"],"bugzilla":"1882310","bugzilla_description":"CVE-2020-24750 jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-24616","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872707","bugzilla_description":"CVE-2020-24616 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24616.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14195","severity":"important","public_date":"2020-06-14T00:00:00Z","advisories":["RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848958","bugzilla_description":"CVE-2020-14195 jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14195.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14060","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848960","bugzilla_description":"CVE-2020-14060 jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14060.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14062","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848962","bugzilla_description":"CVE-2020-14062 jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14062.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14061","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848966","bugzilla_description":"CVE-2020-14061 jackson-databind: serialization in weblogic/oracle-aqjms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14061.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11620","severity":"important","public_date":"2020-04-07T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:3192"],"bugzilla":"1826798","bugzilla_description":"CVE-2020-11620 jackson-databind: Serialization gadgets in commons-jelly:commons-jelly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11620.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11619","severity":"important","public_date":"2020-04-06T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1826805","bugzilla_description":"CVE-2020-11619 jackson-databind: Serialization gadgets in org.springframework:spring-aop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11113","severity":"important","public_date":"2020-03-28T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3817","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821315","bugzilla_description":"CVE-2020-11113 jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11113.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11112","severity":"important","public_date":"2020-03-25T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821311","bugzilla_description":"CVE-2020-11112 jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11112.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11111","severity":"important","public_date":"2020-03-24T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821304","bugzilla_description":"CVE-2020-11111 jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11111.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10968","severity":"important","public_date":"2020-03-22T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819208","bugzilla_description":"CVE-2020-10968 jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10673","severity":"important","public_date":"2020-03-18T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3585","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815470","bugzilla_description":"CVE-2020-10673 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10672","severity":"important","public_date":"2020-03-15T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815495","bugzilla_description":"CVE-2020-10672 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10969","severity":"important","public_date":"2020-03-03T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819212","bugzilla_description":"CVE-2020-10969 jackson-databind: Serialization gadgets in javax.swing.JEditorPane","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10969.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8840","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816330","bugzilla_description":"CVE-2020-8840 jackson-databind: Lacks certain xbean-reflect/JNDI blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9546","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816332","bugzilla_description":"CVE-2020-9546 jackson-databind: Serialization gadgets in shaded-hikari-config","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9546.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9547","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816337","bugzilla_description":"CVE-2020-9547 jackson-databind: Serialization gadgets in ibatis-sqlmap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9547.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9548","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816340","bugzilla_description":"CVE-2020-9548 jackson-databind: Serialization gadgets in anteros-core","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9548.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-25649","severity":"important","public_date":"2020-01-09T00:00:00Z","advisories":["RHSA-2020:4312"],"bugzilla":"1887664","bugzilla_description":"CVE-2020-25649 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25649.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20330","severity":"important","public_date":"2020-01-02T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:0939","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:0951","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1793154","bugzilla_description":"CVE-2019-20330 jackson-databind: lacks certain net.sf.ehcache blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20330.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-17531","severity":"moderate","public_date":"2019-10-12T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2019:4192","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1775293","bugzilla_description":"CVE-2019-17531 jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.8.el7","pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17531.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-16942","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758187","bugzilla_description":"CVE-2019-16942 jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16943","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758191","bugzilla_description":"CVE-2019-16943 jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16943.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14893","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758182","bugzilla_description":"CVE-2019-14893 jackson-databind: Serialization gadgets in classes of the xalan package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14892","severity":"moderate","public_date":"2019-09-19T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758171","bugzilla_description":"CVE-2019-14892 jackson-databind: Serialization gadgets in classes of the commons-configuration package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14892.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-17267","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758167","bugzilla_description":"CVE-2019-17267 jackson-databind: Serialization gadgets in classes of the ehcache package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17267.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16335","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0729","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755831","bugzilla_description":"CVE-2019-16335 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16335.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14540","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755849","bugzilla_description":"CVE-2019-14540 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14540.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14439","severity":"moderate","public_date":"2019-07-30T00:00:00Z","advisories":["RHSA-2019:3200","RHSA-2020:0983"],"bugzilla":"1752962","bugzilla_description":"CVE-2019-14439 jackson-databind: Polymorphic typing issue related to logback/JNDI","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14439.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14379","severity":"important","public_date":"2019-07-23T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:2743","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2020:0727","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1737517","bugzilla_description":"CVE-2019-14379 jackson-databind: default typing mishandling leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","rh-maven35-jackson-databind-0:2.7.6-2.7.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-12384","severity":"important","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:1820","RHSA-2019:3200","RHSA-2019:2720","RHSA-2019:4352","RHSA-2019:3297","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1725807","bugzilla_description":"CVE-2019-12384 jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","pki-deps:10.6-8000020190807021343.f8e95b4e","rh-maven35-jackson-databind-0:2.7.6-2.6.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12384.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-12814","severity":"moderate","public_date":"2019-06-04T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2938","RHSA-2019:2937","RHSA-2019:2804","RHSA-2019:2936"],"bugzilla":"1725795","bugzilla_description":"CVE-2019-12814 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-12086","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2020:1454","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3044","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2020:3192","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1713468","bugzilla_description":"CVE-2019-12086 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-19360","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666482","bugzilla_description":"CVE-2018-19360 jackson-databind: improper polymorphic deserialization in axis2-transport-jms class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19360.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19361","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666484","bugzilla_description":"CVE-2018-19361 jackson-databind: improper polymorphic deserialization in openjpa class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19361.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19362","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666489","bugzilla_description":"CVE-2018-19362 jackson-databind: improper polymorphic deserialization in jboss-common-core class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-1000873","severity":"moderate","public_date":"2018-10-24T00:00:00Z","advisories":[],"bugzilla":"1665601","bugzilla_description":"CVE-2018-1000873 jackson-modules-java8: DoS due to an Improper Input Validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000873.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-14718","severity":"important","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666415","bugzilla_description":"CVE-2018-14718 jackson-databind: arbitrary code execution in slf4j-ext class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14718.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14719","severity":"important","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666418","bugzilla_description":"CVE-2018-14719 jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14719.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14720","severity":"moderate","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:4037","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:1140"],"bugzilla":"1666423","bugzilla_description":"CVE-2018-14720 jackson-databind: exfiltration/XXE in some JDK classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-611","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14720.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-14721","severity":"moderate","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:4037","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:1140"],"bugzilla":"1666428","bugzilla_description":"CVE-2018-14721 jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14721.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-12023","severity":"important","public_date":"2018-06-08T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1671096","bugzilla_description":"CVE-2018-12023 jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-12022","severity":"important","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1671097","bugzilla_description":"CVE-2018-12022 jackson-databind: improper polymorphic deserialization of types from Jodd-db library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-11307","severity":"important","public_date":"2018-05-10T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1677341","bugzilla_description":"CVE-2018-11307 jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11307.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-7489","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":["RHSA-2018:2938","RHSA-2019:3149","RHSA-2018:1448","RHSA-2018:1449","RHSA-2020:2562","RHSA-2018:1447","RHSA-2018:2939","RHSA-2018:2090","RHSA-2019:2858","RHSA-2018:1786","RHSA-2018:1451","RHSA-2018:2089","RHSA-2018:2088","RHSA-2018:1450"],"bugzilla":"1549276","bugzilla_description":"CVE-2018-7489 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-5968","severity":"moderate","public_date":"2018-01-18T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2019:3149","RHSA-2018:1525","RHSA-2018:0478","RHSA-2018:0479","RHSA-2019:2858","RHSA-2018:0481"],"bugzilla":"1538332","bugzilla_description":"CVE-2018-5968 jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rhvm-appliance-0:4.2-20180504.0","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5968.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-17485","severity":"important","public_date":"2017-12-12T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2018:1448","RHSA-2019:3892","RHSA-2019:1797","RHSA-2018:1449","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2018:0116","RHSA-2018:0480","RHSA-2018:2930","RHSA-2019:2858","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1528565","bugzilla_description":"CVE-2017-17485 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","rh-eclipse46-jackson-databind-0:2.6.3-2.6.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-15095","severity":"important","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:3149","RHSA-2017:3190","RHSA-2018:1448","RHSA-2019:3892","RHSA-2018:1449","RHSA-2018:0577","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2017:3189","RHSA-2018:0480","RHSA-2019:2858","RHSA-2018:0576","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1506612","bugzilla_description":"CVE-2017-15095 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","rh-eclipse47-jackson-databind-0:2.7.6-3.3.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","rh-eclipse46-jackson-databind-0:2.6.3-2.4.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-7525","severity":"important","public_date":"2017-07-14T00:00:00Z","advisories":["RHSA-2018:1449","RHSA-2017:3141","RHSA-2017:2477","RHSA-2017:1840","RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2637","RHSA-2017:2638","RHSA-2018:0294","RHSA-2019:3149","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:2547","RHSA-2017:3458","RHSA-2017:2546","RHSA-2017:1835","RHSA-2017:1834","RHSA-2017:1837","RHSA-2017:1836","RHSA-2019:0910","RHSA-2019:2858","RHSA-2017:1839","RHSA-2018:0342","RHSA-2018:1450"],"bugzilla":"1462702","bugzilla_description":"CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["devtoolset-4-jackson-databind-0:2.5.0-2.4.el6","openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-eclipse46-jackson-databind-0:2.6.3-2.3.el7","devtoolset-4-jackson-databind-0:2.5.0-2.4.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:20171102.0-1","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7525.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-jaxrs-json-provider_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-jaxrs-json-provider_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-jaxrs-json-provider_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-jaxrs-providers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-jaxrs-providers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-jaxrs-providers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-module-jaxb-annotations_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-module-jaxb-annotations_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jackson-module-jaxb-annotations_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaf-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaf-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaf-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient-demo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient-demo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient-demo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient-manual_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient-manual_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient-manual_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient_security_api_results.json
new file mode 100644
index 0000000..3e30d0e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-commons-httpclient_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5262","severity":"low","public_date":"2015-09-03T00:00:00Z","advisories":[],"bugzilla":"1261538","bugzilla_description":"CVE-2015-5262 jakarta-commons-httpclient, httpcomponents-core: missing HTTPS connection timeout","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5262.json"},{"CVE":"CVE-2014-3577","severity":"important","public_date":"2014-08-18T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2016:1773","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1082","RHSA-2014:1320","RHSA-2014:1166","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1146","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2016:1931","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1834","RHSA-2014:1833","RHSA-2015:1177","RHSA-2014:1836","RHSA-2015:1176","RHSA-2014:1835"],"bugzilla":"1129074","bugzilla_description":"CVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","httpcomponents-client-0:4.2.5-5.el7_0","org.ovirt.engine-root-0:3.5.0-29","jakarta-commons-httpclient-1:3.1-16.el7_0","thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1","jakarta-commons-httpclient-1:3.1-0.9.el6_5","jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2012-6153","severity":"important","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1320","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1098","RHSA-2014:1834","RHSA-2014:1833","RHSA-2014:1836","RHSA-2014:1835"],"bugzilla":"1129916","bugzilla_description":"CVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","devtoolset-2-httpcomponents-client-0:4.2.1-6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","org.ovirt.engine-root-0:3.5.0-29","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6153.json"},{"CVE":"CVE-2012-5783","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2014:0224","RHSA-2013:0681","RHSA-2013:0680","RHSA-2013:0679","RHSA-2013:0270","RHSA-2017:0868","RHSA-2013:0763","RHSA-2013:1006","RHSA-2013:1853","RHSA-2013:0682","RHSA-2013:1147"],"bugzilla":"873317","bugzilla_description":"CVE-2012-5783 jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el4","jakarta-commons-httpclient-1:3.1-2_patch_01.ep5.el6","jakarta-commons-httpclient-1:3.0-7jpp.2","jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el5","jakarta-commons-httpclient-1:3.1-0.7.el6_3","redhat-support-plugin-rhev-0:3.3.0-14.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-oro-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-oro-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-oro-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-oro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-oro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jakarta-oro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi-native-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi-native-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi-native-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi-native_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi-native_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi-native_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi_security_api_results.json
new file mode 100644
index 0000000..a7100b7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-2035","severity":"low","public_date":"2013-05-13T00:00:00Z","advisories":["RHSA-2014:1290","RHSA-2014:1291","RHSA-2014:1995","RHSA-2014:0245","RHSA-2014:0400","RHSA-2014:0254","RHSA-2014:0029","RHSA-2014:0401","RHSA-2013:1029","RHSA-2015:0034","RHSA-2014:1904","RHSA-2013:1786","RHSA-2013:1784","RHSA-2013:1785"],"bugzilla":"958618","bugzilla_description":"CVE-2013-2035 HawtJNI: predictable temporary file name leading to local arbitrary code execution","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-377","affected_packages":["jansi-0:1.9-5.redhat_3.1.ep6.el5","activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2035.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansson-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansson-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansson-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansson_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansson_security_api_results.json
new file mode 100644
index 0000000..e2320c1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jansson_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-4425","severity":"moderate","public_date":"2016-05-01T00:00:00Z","advisories":[],"bugzilla":"1332200","bugzilla_description":"CVE-2016-4425 jansson: stack exhaustion parsing a JSON file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4425.json"},{"CVE":"CVE-2013-6401","severity":"moderate","public_date":"2014-02-12T00:00:00Z","advisories":[],"bugzilla":"1035538","bugzilla_description":"CVE-2013-6401 jansson: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6401.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jasper-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jasper-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jasper-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jasper-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jasper-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jasper-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-demo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-demo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-demo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-headless_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-headless_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-headless_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-jdbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-jdbc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-jdbc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-src_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-src_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-src_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-webstart_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-webstart_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm-webstart_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm_security_api_results.json
new file mode 100644
index 0000000..453ddff
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-ibm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17639","severity":"moderate","public_date":"2020-08-05T00:00:00Z","advisories":["RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3387"],"bugzilla":"1866497","bugzilla_description":"CVE-2019-17639 IBM JDK: Information disclosure via calls to System.arraycopy() with invalid length","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17639.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14583","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856448","bugzilla_description":"CVE-2020-14583 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2020-14593","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856784","bugzilla_description":"CVE-2020-14593 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14593.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-14621","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856885","bugzilla_description":"CVE-2020-14621 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14621.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14556","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856896","bugzilla_description":"CVE-2020-14556 OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14556.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-14577","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856988","bugzilla_description":"CVE-2020-14577 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14577.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14578","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856991","bugzilla_description":"CVE-2020-14578 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14578.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-14579","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856995","bugzilla_description":"CVE-2020-14579 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14579.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2754","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514"],"bugzilla":"1823199","bugzilla_description":"CVE-2020-2754 OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2754.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2755","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514"],"bugzilla":"1823200","bugzilla_description":"CVE-2020-2755 OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2755.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2756","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823215","bugzilla_description":"CVE-2020-2756 OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2756.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2757","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823216","bugzilla_description":"CVE-2020-2757 OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2757.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2773","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1508","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:1512","RHSA-2020:1514"],"bugzilla":"1823224","bugzilla_description":"CVE-2020-2773 OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2773.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2800","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823527","bugzilla_description":"CVE-2020-2800 OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2800.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2830","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823542","bugzilla_description":"CVE-2020-2830 OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185->CWE-400","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2830.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-2803","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823694","bugzilla_description":"CVE-2020-2803 OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2805","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823844","bugzilla_description":"CVE-2020-2805 OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2805.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2781","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823960","bugzilla_description":"CVE-2020-2781 OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2781.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-4732","severity":"important","public_date":"2020-01-31T00:00:00Z","advisories":[],"bugzilla":"1797101","bugzilla_description":"CVE-2019-4732 IBM JDK: untrusted DLL search path vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-4732.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-2583","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790444","bugzilla_description":"CVE-2020-2583 OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2590","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790556","bugzilla_description":"CVE-2020-2590 OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2590.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2601","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790570","bugzilla_description":"CVE-2020-2601 OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2020-2593","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790884","bugzilla_description":"CVE-2020-2593 OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2593.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2604","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790944","bugzilla_description":"CVE-2020-2604 OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2604.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-2654","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:2236","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0541","RHSA-2020:0196","RHSA-2020:2241","RHSA-2020:0632","RHSA-2020:2239","RHSA-2020:0202","RHSA-2020:2237","RHSA-2020:0128","RHSA-2020:2238"],"bugzilla":"1791217","bugzilla_description":"CVE-2020-2654 OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2654.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2659","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0468"],"bugzilla":"1791284","bugzilla_description":"CVE-2020-2659 OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2659.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2585","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1807936","bugzilla_description":"CVE-2020-2585 Oracle JDK: unspecified vulnerability fixed in 8u221 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2585.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-17631","severity":"moderate","public_date":"2019-12-04T00:00:00Z","advisories":["RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:4115","RHSA-2020:0006"],"bugzilla":"1779880","bugzilla_description":"CVE-2019-17631 IBM JDK: Unrestricted access to diagnostic operations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17631.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-2964","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760963","bugzilla_description":"CVE-2019-2964 OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2964.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2975","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:4115","RHSA-2020:0006"],"bugzilla":"1760969","bugzilla_description":"CVE-2019-2975 OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2019-2973","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760978","bugzilla_description":"CVE-2019-2973 OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2981","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760980","bugzilla_description":"CVE-2019-2981 OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2999","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760992","bugzilla_description":"CVE-2019-2999 OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-2988","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760999","bugzilla_description":"CVE-2019-2988 OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2988.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2978","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761006","bugzilla_description":"CVE-2019-2978 OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2992","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761146","bugzilla_description":"CVE-2019-2992 OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2983","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761262","bugzilla_description":"CVE-2019-2983 OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2983.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2962","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761266","bugzilla_description":"CVE-2019-2962 OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2962.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2949","severity":"important","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2019:3134","RHSA-2019:3135","RHSA-2019:3136","RHSA-2020:2241","RHSA-2020:2239","RHSA-2020:2237"],"bugzilla":"1761594","bugzilla_description":"CVE-2019-2949 OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2949.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-2945","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761596","bugzilla_description":"CVE-2019-2945 OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2945.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2019-2989","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761601","bugzilla_description":"CVE-2019-2989 OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2989.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-2958","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777929","bugzilla_description":"CVE-2019-2958 OpenJDK: Incorrect escaping of command line arguments in ProcessImpl on Windows (Libraries, 8221858)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2958.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2933","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777981","bugzilla_description":"CVE-2019-2933 OpenJDK: FilePermission checks not preformed correctly on Windows (Libraries, 8213429)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2996","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:4115","RHSA-2020:0006"],"bugzilla":"1778942","bugzilla_description":"CVE-2019-2996 Oracle JDK: unspecified vulnerability fixed in 8u221 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2996.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-11772","severity":"important","public_date":"2019-08-01T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2737","RHSA-2019:2592","RHSA-2019:2590"],"bugzilla":"1738547","bugzilla_description":"CVE-2019-11772 IBM JDK: Out-of-bounds access in the String.getBytes method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11775","severity":"important","public_date":"2019-08-01T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:2737","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590"],"bugzilla":"1738549","bugzilla_description":"CVE-2019-11775 IBM JDK: Failure to privatize a value pulled out of the loop by versioning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11775.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-4473","severity":"moderate","public_date":"2019-08-01T00:00:00Z","advisories":[],"bugzilla":"1738558","bugzilla_description":"CVE-2019-4473 IBM JDK: Insecure RPATH in multiple binaries on AIX","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-4473.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-11771","severity":"moderate","public_date":"2019-08-01T00:00:00Z","advisories":[],"bugzilla":"1738559","bugzilla_description":"CVE-2019-11771 IBM JDK: Insecure RPATH in OpenJ9 on AIX","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11771.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-2769","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730056","bugzilla_description":"CVE-2019-2769 OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2769.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2816","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730099","bugzilla_description":"CVE-2019-2816 OpenJDK: Missing URL format validation (Networking, 8221518)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-2786","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:1840","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:2592","RHSA-2019:1816","RHSA-2019:1815","RHSA-2019:2590"],"bugzilla":"1730255","bugzilla_description":"CVE-2019-2786 OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2762","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730415","bugzilla_description":"CVE-2019-2762 OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2766","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730459","bugzilla_description":"CVE-2019-2766 OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-10245","severity":"moderate","public_date":"2019-04-30T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:1165","RHSA-2019:1164","RHSA-2019:1325","RHSA-2019:1238","RHSA-2019:1163"],"bugzilla":"1704799","bugzilla_description":"CVE-2019-10245 IBM JDK: Read beyond the end of bytecode array causing JVM crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2602","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700440","bugzilla_description":"CVE-2019-2602 OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2698","severity":"important","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1238","RHSA-2019:1163"],"bugzilla":"1700447","bugzilla_description":"CVE-2019-2698 OpenJDK: Font layout engine out of bounds access setCurrGlyphID() (2D, 8219022)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2684","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700564","bugzilla_description":"CVE-2019-2684 OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2684.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2697","severity":"important","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:1165","RHSA-2019:1164","RHSA-2019:1325","RHSA-2019:1238","RHSA-2019:1163"],"bugzilla":"1704480","bugzilla_description":"CVE-2019-2697 Oracle JDK: Unspecified vulnerability fixed in 7u221 and 8u211 (2D)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2697.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12547","severity":"critical","public_date":"2019-03-01T00:00:00Z","advisories":["RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0640","RHSA-2019:0469","RHSA-2019:1238"],"bugzilla":"1685611","bugzilla_description":"CVE-2018-12547 IBM JDK: buffer overflow in jio_snprintf() and jio_vsnprintf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12547.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12549","severity":"critical","public_date":"2019-03-01T00:00:00Z","advisories":["RHSA-2019:0472","RHSA-2019:0640","RHSA-2019:0469","RHSA-2019:1238"],"bugzilla":"1685717","bugzilla_description":"CVE-2018-12549 IBM JDK: missing null check when accelerating Unsafe calls","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-1890","severity":"moderate","public_date":"2019-03-01T00:00:00Z","advisories":[],"bugzilla":"1685725","bugzilla_description":"CVE-2018-1890 IBM JDK: local privilege escalation via insecure RPATHs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1890.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-7317","severity":"low","public_date":"2019-01-25T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:2737","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:1309","RHSA-2019:1308","RHSA-2019:2590"],"bugzilla":"1672409","bugzilla_description":"CVE-2019-7317 libpng: use-after-free in png_image_free in png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","thunderbird-0:60.7.0-1.el6_10","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","firefox-0:60.7.0-1.el7_6","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-2422","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:0462","RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0464","RHSA-2019:0640","RHSA-2019:0416","RHSA-2019:0435","RHSA-2019:0469","RHSA-2019:0436","RHSA-2019:1238"],"bugzilla":"1665945","bugzilla_description":"CVE-2019-2422 OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["java-11-openjdk-1:11.0.2.7-0.el7_6","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el6_10","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el7_6","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.201.b09-1.el6_10","java-1.8.0-openjdk-1:1.8.0.201.b09-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2426","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":[],"bugzilla":"1665953","bugzilla_description":"CVE-2019-2426 OpenJDK: transparent NTLM authentication enabled by default (Networking, 8209094)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2426.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-2449","severity":"low","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:0472","RHSA-2019:0640","RHSA-2019:0469","RHSA-2019:1238"],"bugzilla":"1685601","bugzilla_description":"CVE-2019-2449 Oracle JDK: unspecified vulnerability fixed in 8u201 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2449.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2018-3183","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:2943","RHSA-2018:2942","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002"],"bugzilla":"1639268","bugzilla_description":"CVE-2018-3183 OpenJDK: Unrestricted access to scripting engine (Scripting, 8202936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-11-openjdk-1:11.0.1.13-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-3169","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639293","bugzilla_description":"CVE-2018-3169 OpenJDK: Improper field access checks (Hotspot, 8199226)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3214","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639301","bugzilla_description":"CVE-2018-3214 OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3139","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639442","bugzilla_description":"CVE-2018-3139 OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3139.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3180","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639484","bugzilla_description":"CVE-2018-3180 OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-3136","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639755","bugzilla_description":"CVE-2018-3136 OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3149","severity":"important","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639834","bugzilla_description":"CVE-2018-3149 OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3149.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1656","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:2569","RHSA-2018:2575","RHSA-2018:2576"],"bugzilla":"1618869","bugzilla_description":"CVE-2018-1656 IBM JDK: path traversal flaw in the Diagnostic Tooling Framework","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1656.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1517","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:2569","RHSA-2018:2575","RHSA-2018:2576"],"bugzilla":"1618871","bugzilla_description":"CVE-2018-1517 IBM JDK: DoS in the java.math component","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1517.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-2952","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:2283","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2241","RHSA-2018:2253","RHSA-2018:2242","RHSA-2018:2286"],"bugzilla":"1600925","bugzilla_description":"CVE-2018-2952 OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2952.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2964","severity":"critical","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2256","RHSA-2018:2253"],"bugzilla":"1602142","bugzilla_description":"CVE-2018-2964 Oracle JDK: unspecified vulnerability fixed in 8u181 and 10.0.2 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2964.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2973","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2253"],"bugzilla":"1602145","bugzilla_description":"CVE-2018-2973 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-2940","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2253"],"bugzilla":"1602146","bugzilla_description":"CVE-2018-2940 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2940.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-11212","severity":"low","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0640","RHSA-2019:0469","RHSA-2019:1238","RHSA-2019:2052"],"bugzilla":"1579973","bugzilla_description":"CVE-2018-11212 libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11212.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-12539","severity":"important","public_date":"2018-05-11T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:2569","RHSA-2018:2575","RHSA-2018:2576"],"bugzilla":"1618767","bugzilla_description":"CVE-2018-12539 IBM JDK: privilege escalation via insufficiently restricted access to Attach API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12539.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2018-2794","severity":"important","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567126","bugzilla_description":"CVE-2018-2794 OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2794.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-2795","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567351","bugzilla_description":"CVE-2018-2795 OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2799","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567542","bugzilla_description":"CVE-2018-2799 OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2799.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2798","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567543","bugzilla_description":"CVE-2018-2798 OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2797","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567545","bugzilla_description":"CVE-2018-2797 OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2796","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567546","bugzilla_description":"CVE-2018-2796 OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2800","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568163","bugzilla_description":"CVE-2018-2800 OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-2790","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568515","bugzilla_description":"CVE-2018-2790 OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-2783","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1203","RHSA-2018:0100","RHSA-2018:0099"],"bugzilla":"1569204","bugzilla_description":"CVE-2018-2783 Oracle JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-13785","severity":"low","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1599943","bugzilla_description":"CVE-2018-13785 libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-369","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1417","severity":"critical","public_date":"2018-02-20T00:00:00Z","advisories":["RHSA-2018:0458","RHSA-2018:0521","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463"],"bugzilla":"1568966","bugzilla_description":"CVE-2018-1417 IBM JDK: J9 JVM allows untrusted code running under a security manager to elevate its privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1417.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2678","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534263","bugzilla_description":"CVE-2018-2678 OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2678.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2677","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534288","bugzilla_description":"CVE-2018-2677 OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2663","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534296","bugzilla_description":"CVE-2018-2663 OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2663.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2579","severity":"low","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534298","bugzilla_description":"CVE-2018-2579 OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-567","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2579.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2588","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534299","bugzilla_description":"CVE-2018-2588 OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-90","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-2602","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534525","bugzilla_description":"CVE-2018-2602 OpenJDK: loading of classes from untrusted locations (I18n, 8182601)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2018-2599","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534543","bugzilla_description":"CVE-2018-2599 OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2599.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2603","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534553","bugzilla_description":"CVE-2018-2603 OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2603.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2629","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0100","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534625","bugzilla_description":"CVE-2018-2629 OpenJDK: GSS context use-after-free (JGSS, 8186212)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2618","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534762","bugzilla_description":"CVE-2018-2618 OpenJDK: insufficient strength of key agreement (JCE, 8185292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-2641","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534766","bugzilla_description":"CVE-2018-2641 OpenJDK: GTK library loading use-after-free (AWT, 8185325)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-2582","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0521","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534768","bugzilla_description":"CVE-2018-2582 OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-2634","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534943","bugzilla_description":"CVE-2018-2634 OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-2637","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534970","bugzilla_description":"CVE-2018-2637 OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-2633","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535036","bugzilla_description":"CVE-2018-2633 OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2018-2638","severity":"critical","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535350","bugzilla_description":"CVE-2018-2638 Oracle JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2639","severity":"critical","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535351","bugzilla_description":"CVE-2018-2639 Oracle JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2627","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535352","bugzilla_description":"CVE-2018-2627 Oracle JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Installer)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2657","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0458","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:1463"],"bugzilla":"1535353","bugzilla_description":"CVE-2018-2657 Oracle JDK: unspecified vulnerability fixed in 6u181 and 7u171 (Serialization)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2657.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2581","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:1812","RHSA-2018:0100","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535354","bugzilla_description":"CVE-2018-2581 Oracle JDK: unspecified vulnerability fixed in 7u171, 8u161, and 9.0.4 (JavaFX)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2581.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3736","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1509169","bugzilla_description":"CVE-2017-3736 openssl: bn_sqrx8x_internal carry bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":["openssl-1:1.0.2k-12.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-10285","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501868","bugzilla_description":"CVE-2017-10285 OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10346","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501873","bugzilla_description":"CVE-2017-10346 OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10388","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502038","bugzilla_description":"CVE-2017-10388 OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10349","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502611","bugzilla_description":"CVE-2017-10349 OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10349.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10357","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502614","bugzilla_description":"CVE-2017-10357 OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10357.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10348","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502629","bugzilla_description":"CVE-2017-10348 OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10347","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502632","bugzilla_description":"CVE-2017-10347 OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10350","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502640","bugzilla_description":"CVE-2017-10350 OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10350.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10281","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502649","bugzilla_description":"CVE-2017-10281 OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10281.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10295","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502687","bugzilla_description":"CVE-2017-10295 OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10295.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-10345","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502858","bugzilla_description":"CVE-2017-10345 OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-10355","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502869","bugzilla_description":"CVE-2017-10355 OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10355.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10356","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1503169","bugzilla_description":"CVE-2017-10356 OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10356.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2017-10309","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267"],"bugzilla":"1503319","bugzilla_description":"CVE-2017-10309 Oracle JDK: unspecified vulnerability fixed in 8u151 and 9.0.1 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10309.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2017-1376","severity":"critical","public_date":"2017-08-18T00:00:00Z","advisories":["RHSA-2017:2469","RHSA-2017:2481"],"bugzilla":"1483736","bugzilla_description":"CVE-2017-1376 IBM JDK: class verifier allowing Security Manager bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10107","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471266","bugzilla_description":"CVE-2017-10107 OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10107.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10089","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471270","bugzilla_description":"CVE-2017-10089 OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10090","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1791"],"bugzilla":"1471517","bugzilla_description":"CVE-2017-10090 OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10090.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10087","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471521","bugzilla_description":"CVE-2017-10087 OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10110","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471523","bugzilla_description":"CVE-2017-10110 OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10101","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471527","bugzilla_description":"CVE-2017-10101 OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10096","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471528","bugzilla_description":"CVE-2017-10096 OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10067","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471535","bugzilla_description":"CVE-2017-10067 OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10109","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471670","bugzilla_description":"CVE-2017-10109 OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10116","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471738","bugzilla_description":"CVE-2017-10116 OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2017-10115","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471851","bugzilla_description":"CVE-2017-10115 OpenJDK: DSA implementation timing attack (JCE, 8175106)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10108","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471888","bugzilla_description":"CVE-2017-10108 OpenJDK: unbounded memory allocation in BasicAttribute deserialization (Serialization, 8174105)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10108.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10053","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471889","bugzilla_description":"CVE-2017-10053 OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10078","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2469","RHSA-2017:1790","RHSA-2017:3453"],"bugzilla":"1471898","bugzilla_description":"CVE-2017-10078 OpenJDK: Nashorn incompletely blocking access to Java APIs (Scripting, 8171539)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-10102","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472345","bugzilla_description":"CVE-2017-10102 OpenJDK: incorrect handling of references in DGC (RMI, 8163958)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-10243","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472666","bugzilla_description":"CVE-2017-10243 OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10243.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-10105","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472667","bugzilla_description":"CVE-2017-10105 Oracle JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-1289","severity":"moderate","public_date":"2017-05-09T00:00:00Z","advisories":["RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1449603","bugzilla_description":"CVE-2017-1289 IBM JDK: XML External Entity Injection (XXE) error when processing XML data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"8.2"},{"CVE":"CVE-2017-3511","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1221"],"bugzilla":"1443007","bugzilla_description":"CVE-2017-3511 OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-3509","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443052","bugzilla_description":"CVE-2017-3509 OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2017-3544","severity":"low","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443068","bugzilla_description":"CVE-2017-3544 OpenJDK: newline injection in the SMTP client (Networking, 8171533)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3539","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443097","bugzilla_description":"CVE-2017-3539 OpenJDK: MD5 allowed for jar verification (Security, 8171121)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3514","severity":"critical","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443469","bugzilla_description":"CVE-2017-3514 OpenJDK: peering issues on Windows (AWT, 8167110)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3533","severity":"low","public_date":"2017-02-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443083","bugzilla_description":"CVE-2017-3533 OpenJDK: newline injection in the FTP client (Networking, 8170222)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3732","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416856","bugzilla_description":"CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3272","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413554","bugzilla_description":"CVE-2017-3272 OpenJDK: insufficient protected field access checks in atomic field updaters (Libraries, 8165344)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3289","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413562","bugzilla_description":"CVE-2017-3289 OpenJDK: insecure class construction (Hotspot, 8167104)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3253","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413583","bugzilla_description":"CVE-2017-3253 OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-3261","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413653","bugzilla_description":"CVE-2017-3261 OpenJDK: integer overflow in SocketOutputStream boundary check (Networking, 8164147)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3231","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413717","bugzilla_description":"CVE-2017-3231 OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3231.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5547","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413764","bugzilla_description":"CVE-2016-5547 OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5547.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5552","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413882","bugzilla_description":"CVE-2016-5552 OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5552.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3252","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413906","bugzilla_description":"CVE-2017-3252 OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3252.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5546","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413911","bugzilla_description":"CVE-2016-5546 OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5546.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-5548","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413920","bugzilla_description":"CVE-2016-5548 OpenJDK: DSA implementation timing attack (Libraries, 8168728)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-5549","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413923","bugzilla_description":"CVE-2016-5549 OpenJDK: ECDSA implementation timing attack (Libraries, 8168724)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-3241","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413955","bugzilla_description":"CVE-2017-3241 OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3241.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3259","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1414163","bugzilla_description":"CVE-2017-3259 Oracle JDK: unspecified vulnerability fixed in 6u141, 7u131, and 8u121 (Deployment)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3259.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3260","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":[],"bugzilla":"1414562","bugzilla_description":"CVE-2017-3260 OpenJDK: menu handling memory corruption (AWT, 8164143)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3260.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5573","severity":"important","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385544","bugzilla_description":"CVE-2016-5573 OpenJDK: insufficient checks of JDWP packets (Hotspot, 8159519)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5573.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5554","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385714","bugzilla_description":"CVE-2016-5554 OpenJDK: insufficient classloader consistency checks in ClassLoaderWithRepository (JMX, 8157739)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5554.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5542","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385723","bugzilla_description":"CVE-2016-5542 OpenJDK: missing algorithm restrictions for jar verification (Libraries, 8155973)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5597","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1386103","bugzilla_description":"CVE-2016-5597 OpenJDK: exposure of server authentication credentials to proxy (Networking, 8160838)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-319","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5597.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5556","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2016:2659","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1386408","bugzilla_description":"CVE-2016-5556 Oracle JDK: unspecified vulnerability fixed in 6u131, 7u121, and 8u111 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5556.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-9843","severity":"low","public_date":"2016-09-29T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402351","bugzilla_description":"CVE-2016-9843 zlib: Big-endian out-of-bounds pointer","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9840","severity":"low","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402345","bugzilla_description":"CVE-2016-9840 zlib: Out-of-bounds pointer arithmetic in inftrees.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9841","severity":"low","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402346","bugzilla_description":"CVE-2016-9841 zlib: Out-of-bounds pointer arithmetic in inffast.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9842","severity":"low","public_date":"2016-09-06T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402348","bugzilla_description":"CVE-2016-9842 zlib: Undefined left shift of negative number","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-2183","severity":"moderate","public_date":"2016-08-24T00:00:00Z","advisories":["RHSA-2020:0451","RHSA-2020:3842","RHSA-2017:3240","RHSA-2019:1245","RHBA-2019:2581","RHSA-2017:0462","RHSA-2017:3113","RHSA-2017:3114","RHSA-2017:2710","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:3239","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:2709","RHSA-2017:2708","RHSA-2018:2123","RHSA-2019:2859"],"bugzilla":"1369383","bugzilla_description":"CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","openshift3/metrics-heapster:v3.11.141-2","python-0:2.7.5-69.el7_5","openshift3/ose-console:v3.11.141-2","openshift3/oauth-proxy:v3.11.170-5","openshift4/ose-console:v4.5.0-202009201759.p0","openshift3/ose-kube-rbac-proxy:v3.11.141-2","openshift3/ose-metrics-server:v3.11.141-2","java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8","openshift4/ose-oauth-proxy:v4.1.18-201909201915"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10165","severity":"moderate","public_date":"2016-08-15T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2017:2999","RHSA-2017:3046","RHSA-2016:2658","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1367357","bugzilla_description":"CVE-2016-10165 lcms2: Out-of-bounds read in Type_MLU_Read()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2016-3598","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2017:1216","RHSA-2016:1504","RHSA-2016:1587","RHSA-2016:1588","RHSA-2016:1589","RHSA-2016:1458"],"bugzilla":"1356971","bugzilla_description":"CVE-2016-3598 OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3598.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3511","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2017:1216","RHSA-2016:1587","RHSA-2016:1588","RHSA-2016:1589"],"bugzilla":"1358168","bugzilla_description":"CVE-2016-3511 Oracle JDK: unspecified vulnerability fixed in 7u111 and 8u101 (Deployment)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-0264","severity":"important","public_date":"2016-04-27T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039"],"bugzilla":"1331359","bugzilla_description":"CVE-2016-0264 IBM JDK: buffer overflow vulnerability in the IBM JVM","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0264.json"},{"CVE":"CVE-2016-0686","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327743","bugzilla_description":"CVE-2016-0686 OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0686.json"},{"CVE":"CVE-2016-0687","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327749","bugzilla_description":"CVE-2016-0687 OpenJDK: insufficient byte type checks (Hotspot, 8132051)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0687.json"},{"CVE":"CVE-2016-3426","severity":"low","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328059","bugzilla_description":"CVE-2016-3426 OpenJDK: non-constant time GCM authentication tag comparison (JCE, 8143945)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3426.json"},{"CVE":"CVE-2016-3427","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328210","bugzilla_description":"CVE-2016-3427 OpenJDK: unrestricted deserialization of authentication credentials (JMX, 8144430)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3427.json"},{"CVE":"CVE-2016-3443","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328618","bugzilla_description":"CVE-2016-3443 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3443.json"},{"CVE":"CVE-2016-3449","severity":"important","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328619","bugzilla_description":"CVE-2016-3449 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (Deployment)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3449.json"},{"CVE":"CVE-2016-3422","severity":"moderate","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328620","bugzilla_description":"CVE-2016-3422 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3422.json"},{"CVE":"CVE-2016-0376","severity":"critical","public_date":"2016-04-14T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039"],"bugzilla":"1330986","bugzilla_description":"CVE-2016-0376 IBM JDK: insecure deserialization in CORBA, incorrect CVE-2013-5456 fix","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0376.json"},{"CVE":"CVE-2016-0363","severity":"critical","public_date":"2016-04-04T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039"],"bugzilla":"1324044","bugzilla_description":"CVE-2016-0363 IBM JDK: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0363.json"},{"CVE":"CVE-2016-0705","severity":"low","public_date":"2016-02-18T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2016:2957","RHSA-2016:0301","RHSA-2016:0379"],"bugzilla":"1310596","bugzilla_description":"CVE-2016-0705 OpenSSL: Double-free in DSA code","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-42.el6_7.4","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","rhev-hypervisor7-0:7.2-20160302.1.el7ev","rhev-hypervisor7-0:7.2-20160302.1.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0705.json"},{"CVE":"CVE-2015-5041","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0100","RHSA-2016:0101"],"bugzilla":"1302689","bugzilla_description":"CVE-2015-5041 IBM JDK: J9 JVM allows code to invoke non-public interface methods","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5041.json"},{"CVE":"CVE-2016-0494","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298906","bugzilla_description":"CVE-2016-0494 ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0494.json"},{"CVE":"CVE-2016-0475","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0050","RHSA-2016:0049"],"bugzilla":"1298949","bugzilla_description":"CVE-2016-0475 OpenJDK: PBE incorrect key lengths (Libraries, 8138589)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0475.json"},{"CVE":"CVE-2016-0402","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298957","bugzilla_description":"CVE-2016-0402 OpenJDK: URL deserialization inconsistencies (Networking, 8059054)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0402.json"},{"CVE":"CVE-2016-0448","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299073","bugzilla_description":"CVE-2016-0448 OpenJDK: logging of RMI connection secrets (JMX, 8130710)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0448.json"},{"CVE":"CVE-2016-0466","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299385","bugzilla_description":"CVE-2016-0466 OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0466.json"},{"CVE":"CVE-2016-0483","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299441","bugzilla_description":"CVE-2016-0483 OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0483.json"},{"CVE":"CVE-2015-7575","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0012","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0007","RHSA-2016:0008","RHSA-2016:0049"],"bugzilla":"1289841","bugzilla_description":"CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.2","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","nss-0:3.19.1-19.el7_2","gnutls-0:3.3.8-14.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","gnutls-0:2.8.5-19.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","nss-0:3.19.1-8.el6_7","openssl-1:1.0.1e-51.el7_2.2","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json"},{"CVE":"CVE-2015-5006","severity":"moderate","public_date":"2015-11-13T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:2509","RHSA-2015:2506"],"bugzilla":"1282379","bugzilla_description":"CVE-2015-5006 IBM JDK: local disclosure of kerberos credentials cache","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5006.json"},{"CVE":"CVE-2015-8126","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8126.json"},{"CVE":"CVE-2015-8472","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8472.json"},{"CVE":"CVE-2015-4806","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1233687","bugzilla_description":"CVE-2015-4806 OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4806.json"},{"CVE":"CVE-2015-4835","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273022","bugzilla_description":"CVE-2015-4835 OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4835.json"},{"CVE":"CVE-2015-4843","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273053","bugzilla_description":"CVE-2015-4843 OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4843.json"},{"CVE":"CVE-2015-4883","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273304","bugzilla_description":"CVE-2015-4883 OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4883.json"},{"CVE":"CVE-2015-4860","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273308","bugzilla_description":"CVE-2015-4860 OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4860.json"},{"CVE":"CVE-2015-4805","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273311","bugzilla_description":"CVE-2015-4805 OpenJDK: missing checks for proper initialization in ObjectStreamClass (Serialization, 8103671)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-665","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4805.json"},{"CVE":"CVE-2015-4844","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273318","bugzilla_description":"CVE-2015-4844 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4844.json"},{"CVE":"CVE-2015-4840","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273338","bugzilla_description":"CVE-2015-4840 OpenJDK: OOB access in CMS code (2D, 8086092)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4840.json"},{"CVE":"CVE-2015-4882","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273414","bugzilla_description":"CVE-2015-4882 OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4882.json"},{"CVE":"CVE-2015-4842","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273425","bugzilla_description":"CVE-2015-4842 OpenJDK: leak of user.dir location (JAXP, 8078427)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4842.json"},{"CVE":"CVE-2015-4734","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273430","bugzilla_description":"CVE-2015-4734 OpenJDK: kerberos realm name leak (JGSS, 8048030)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4734.json"},{"CVE":"CVE-2015-4903","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273496","bugzilla_description":"CVE-2015-4903 OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4903.json"},{"CVE":"CVE-2015-4803","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273637","bugzilla_description":"CVE-2015-4803 OpenJDK: inefficient use of hash tables and lists during XML parsing (JAXP, 8068842)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4803.json"},{"CVE":"CVE-2015-4893","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273638","bugzilla_description":"CVE-2015-4893 OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4893.json"},{"CVE":"CVE-2015-4872","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273734","bugzilla_description":"CVE-2015-4872 OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4872.json"},{"CVE":"CVE-2015-4810","severity":"important","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:2506"],"bugzilla":"1273858","bugzilla_description":"CVE-2015-4810 Oracle JDK: unspecified vulnerability fixed in 7u91 and 8u65 (Deployment)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4810.json"},{"CVE":"CVE-2015-4871","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:2509","RHSA-2015:1927","RHSA-2016:0053","RHSA-2015:2506"],"bugzilla":"1273859","bugzilla_description":"CVE-2015-4871 OpenJDK: protected methods can be used as interface methods via DirectMethodHandle (Libraries)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4871.json"},{"CVE":"CVE-2015-4902","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:2506"],"bugzilla":"1273860","bugzilla_description":"CVE-2015-4902 Oracle JDK: unspecified vulnerability fixed in 6u105, 7u91 and 8u65 (Deployment)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4902.json"},{"CVE":"CVE-2014-3086","severity":"moderate","public_date":"2014-07-31T00:00:00Z","advisories":["RHSA-2014:1036","RHSA-2014:1041","RHSA-2015:0264","RHSA-2014:1033","RHSA-2014:1042"],"bugzilla":"1324547","bugzilla_description":"CVE-2014-3086 IBM JDK: Privilege escalation issue","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-266","affected_packages":["java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el5_10","java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5","java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0","java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3086.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-accessibility_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-accessibility_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-accessibility_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-demo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-demo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-demo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-headless_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-headless_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-headless_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-javadoc-zip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-javadoc-zip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-javadoc-zip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-src_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-src_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk-src_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk_security_api_results.json
new file mode 100644
index 0000000..6647add
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-1.8.0-openjdk_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14779","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889271","bugzilla_description":"CVE-2020-14779 OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14779.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-14781","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889274","bugzilla_description":"CVE-2020-14781 OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14781.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14792","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889280","bugzilla_description":"CVE-2020-14792 OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14792.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2020-14782","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889290","bugzilla_description":"CVE-2020-14782 OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14796","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889697","bugzilla_description":"CVE-2020-14796 OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14796.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-14797","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889717","bugzilla_description":"CVE-2020-14797 OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14797.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14803","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889895","bugzilla_description":"CVE-2020-14803 OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14583","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856448","bugzilla_description":"CVE-2020-14583 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2020-14593","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856784","bugzilla_description":"CVE-2020-14593 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14593.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-14562","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2970","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969"],"bugzilla":"1856810","bugzilla_description":"CVE-2020-14562 OpenJDK: Excessive memory usage in ImageIO TIFF plugin (ImageIO, 8233239)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-11-openjdk-1:11.0.8.10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_1","java-11-openjdk-1:11.0.8.10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14562.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-14621","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856885","bugzilla_description":"CVE-2020-14621 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14621.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14556","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856896","bugzilla_description":"CVE-2020-14556 OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14556.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-14573","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2970","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969"],"bugzilla":"1856951","bugzilla_description":"CVE-2020-14573 OpenJDK: Incomplete interface type checks in Graal compiler (Hotspot, 8236867)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-11-openjdk-1:11.0.8.10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_1","java-11-openjdk-1:11.0.8.10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14573.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14577","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856988","bugzilla_description":"CVE-2020-14577 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14577.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14578","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856991","bugzilla_description":"CVE-2020-14578 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14578.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-14579","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856995","bugzilla_description":"CVE-2020-14579 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14579.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-14581","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":[],"bugzilla":"1857172","bugzilla_description":"CVE-2020-14581 OpenJDK: Information disclosure in color management (2D, 8238002)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14581.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14664","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":[],"bugzilla":"1866027","bugzilla_description":"CVE-2020-14664 JavaFX: Out-of-bounds write in HTML Rendering","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14664.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2020-2754","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514"],"bugzilla":"1823199","bugzilla_description":"CVE-2020-2754 OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2754.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2755","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514"],"bugzilla":"1823200","bugzilla_description":"CVE-2020-2755 OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2755.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2756","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823215","bugzilla_description":"CVE-2020-2756 OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2756.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2757","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823216","bugzilla_description":"CVE-2020-2757 OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2757.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2773","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1508","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:1512","RHSA-2020:1514"],"bugzilla":"1823224","bugzilla_description":"CVE-2020-2773 OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2773.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2800","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823527","bugzilla_description":"CVE-2020-2800 OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2800.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2830","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823542","bugzilla_description":"CVE-2020-2830 OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185->CWE-400","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2830.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-2803","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823694","bugzilla_description":"CVE-2020-2803 OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2805","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823844","bugzilla_description":"CVE-2020-2805 OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2805.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2816","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1517","RHSA-2020:1514"],"bugzilla":"1823853","bugzilla_description":"CVE-2020-2816 OpenJDK: Application data accepted before TLS handshake completion (JSSE, 8235691)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["java-11-openjdk-1:11.0.7.10-4.el7_8","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2816.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-2778","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1517","RHSA-2020:1514"],"bugzilla":"1823879","bugzilla_description":"CVE-2020-2778 OpenJDK: Incomplete enforcement of algorithm restrictions for TLS (JSSE, 8232424)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-11-openjdk-1:11.0.7.10-4.el7_8","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2778.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2767","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1517","RHSA-2020:1514"],"bugzilla":"1823947","bugzilla_description":"CVE-2020-2767 OpenJDK: Incorrect handling of Certificate messages during TLS handshake (JSSE, 8232581)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["java-11-openjdk-1:11.0.7.10-4.el7_8","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2767.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2781","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823960","bugzilla_description":"CVE-2020-2781 OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2781.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-10531","severity":"important","public_date":"2020-02-25T00:00:00Z","advisories":["RHSA-2020:1343","RHSA-2020:2895","RHSA-2020:0738","RHSA-2020:1317","RHSA-2020:1293","RHSA-2020:0902","RHSA-2020:0901","RHSA-2020:3084","RHSA-2020:0896","RHSA-2020:0897"],"bugzilla":"1807349","bugzilla_description":"CVE-2020-10531 ICU: Integer overflow in UnicodeString::doAppend()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["icu-0:60.3-2.el8_0","icu-0:50.2-4.el7_7","rh-nodejs12-nodejs-0:12.18.2-1.el7","nodejs:12-8010020200326104226.c27ad7f8","icu-0:60.3-2.el8_1","chromium-browser-0:80.0.3987.122-1.el6_10","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:10-8000020200318152927.f8e95b4e","nodejs:10-8010020200318152252.c27ad7f8","icu-0:4.2.1-15.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10531.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-2583","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790444","bugzilla_description":"CVE-2020-2583 OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2590","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790556","bugzilla_description":"CVE-2020-2590 OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2590.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2601","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790570","bugzilla_description":"CVE-2020-2601 OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2020-2593","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790884","bugzilla_description":"CVE-2020-2593 OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2593.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2604","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790944","bugzilla_description":"CVE-2020-2604 OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2604.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-2655","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0128"],"bugzilla":"1790951","bugzilla_description":"CVE-2020-2655 OpenJDK: Incorrect handling of unexpected CertificateVerify TLS handshake messages (JSSE, 8231780)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":["java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2655.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2654","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:2236","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0541","RHSA-2020:0196","RHSA-2020:2241","RHSA-2020:0632","RHSA-2020:2239","RHSA-2020:0202","RHSA-2020:2237","RHSA-2020:0128","RHSA-2020:2238"],"bugzilla":"1791217","bugzilla_description":"CVE-2020-2654 OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2654.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2659","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0468"],"bugzilla":"1791284","bugzilla_description":"CVE-2020-2659 OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2659.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2964","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760963","bugzilla_description":"CVE-2019-2964 OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2964.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2975","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:4115","RHSA-2020:0006"],"bugzilla":"1760969","bugzilla_description":"CVE-2019-2975 OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2019-2973","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760978","bugzilla_description":"CVE-2019-2973 OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2981","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760980","bugzilla_description":"CVE-2019-2981 OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2999","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760992","bugzilla_description":"CVE-2019-2999 OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-2988","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760999","bugzilla_description":"CVE-2019-2988 OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2988.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2977","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3135"],"bugzilla":"1761002","bugzilla_description":"CVE-2019-2977 OpenJDK: Out of bounds access in optimized String indexof implementation (Hotspot, 8224062)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["java-11-openjdk-1:11.0.5.10-0.el8_0","java-11-openjdk-1:11.0.5.10-0.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2977.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2978","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761006","bugzilla_description":"CVE-2019-2978 OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2992","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761146","bugzilla_description":"CVE-2019-2992 OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2987","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158"],"bugzilla":"1761149","bugzilla_description":"CVE-2019-2987 OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2987.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2983","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761262","bugzilla_description":"CVE-2019-2983 OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2983.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2962","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761266","bugzilla_description":"CVE-2019-2962 OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2962.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2949","severity":"important","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2019:3134","RHSA-2019:3135","RHSA-2019:3136","RHSA-2020:2241","RHSA-2020:2239","RHSA-2020:2237"],"bugzilla":"1761594","bugzilla_description":"CVE-2019-2949 OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2949.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-2945","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761596","bugzilla_description":"CVE-2019-2945 OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2945.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2019-2989","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761601","bugzilla_description":"CVE-2019-2989 OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2989.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-2958","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777929","bugzilla_description":"CVE-2019-2958 OpenJDK: Incorrect escaping of command line arguments in ProcessImpl on Windows (Libraries, 8221858)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2958.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2933","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777981","bugzilla_description":"CVE-2019-2933 OpenJDK: FilePermission checks not preformed correctly on Windows (Libraries, 8213429)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2894","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777985","bugzilla_description":"CVE-2019-2894 OpenJDK: Side-channel vulnerability in the ECDSA implementation (Security, 8228825)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2894.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-2769","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730056","bugzilla_description":"CVE-2019-2769 OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2769.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2818","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1810","RHSA-2019:1817"],"bugzilla":"1730078","bugzilla_description":"CVE-2019-2818 OpenJDK: Non-constant time comparison in ChaCha20Cipher (Security, 8221344)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-11-openjdk-1:11.0.4.11-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2816","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730099","bugzilla_description":"CVE-2019-2816 OpenJDK: Missing URL format validation (Networking, 8221518)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-2842","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1840","RHSA-2019:1811","RHSA-2019:1839","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730110","bugzilla_description":"CVE-2019-2842 OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2842.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2821","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1810","RHSA-2019:1817"],"bugzilla":"1730251","bugzilla_description":"CVE-2019-2821 OpenJDK: Incorrect handling of certificate status messages during TLS handshake (JSSE, 8222678)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-11-openjdk-1:11.0.4.11-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2821.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2786","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:1840","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:2592","RHSA-2019:1816","RHSA-2019:1815","RHSA-2019:2590"],"bugzilla":"1730255","bugzilla_description":"CVE-2019-2786 OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2745","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1840","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730411","bugzilla_description":"CVE-2019-2745 OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2745.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2019-2762","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730415","bugzilla_description":"CVE-2019-2762 OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2766","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730459","bugzilla_description":"CVE-2019-2766 OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2602","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700440","bugzilla_description":"CVE-2019-2602 OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2698","severity":"important","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1238","RHSA-2019:1163"],"bugzilla":"1700447","bugzilla_description":"CVE-2019-2698 OpenJDK: Font layout engine out of bounds access setCurrGlyphID() (2D, 8219022)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2684","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700564","bugzilla_description":"CVE-2019-2684 OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2684.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2422","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:0462","RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0464","RHSA-2019:0640","RHSA-2019:0416","RHSA-2019:0435","RHSA-2019:0469","RHSA-2019:0436","RHSA-2019:1238"],"bugzilla":"1665945","bugzilla_description":"CVE-2019-2422 OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["java-11-openjdk-1:11.0.2.7-0.el7_6","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el6_10","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el7_6","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.201.b09-1.el6_10","java-1.8.0-openjdk-1:1.8.0.201.b09-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2426","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":[],"bugzilla":"1665953","bugzilla_description":"CVE-2019-2426 OpenJDK: transparent NTLM authentication enabled by default (Networking, 8209094)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2426.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-18928","severity":"low","public_date":"2018-10-30T00:00:00Z","advisories":[],"bugzilla":"1646702","bugzilla_description":"CVE-2018-18928 icu: integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-3183","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:2943","RHSA-2018:2942","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002"],"bugzilla":"1639268","bugzilla_description":"CVE-2018-3183 OpenJDK: Unrestricted access to scripting engine (Scripting, 8202936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-11-openjdk-1:11.0.1.13-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-3169","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639293","bugzilla_description":"CVE-2018-3169 OpenJDK: Improper field access checks (Hotspot, 8199226)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3214","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639301","bugzilla_description":"CVE-2018-3214 OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3139","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639442","bugzilla_description":"CVE-2018-3139 OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3139.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3180","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639484","bugzilla_description":"CVE-2018-3180 OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-3136","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639755","bugzilla_description":"CVE-2018-3136 OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3149","severity":"important","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639834","bugzilla_description":"CVE-2018-3149 OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3149.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3150","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3521"],"bugzilla":"1642321","bugzilla_description":"CVE-2018-3150 OpenJDK: Multi-Release attribute read from outside of the main manifest attributes (Utility, 8199171)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.1.13-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3150.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-3157","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1642328","bugzilla_description":"CVE-2018-3157 OpenJDK: Uninitialized memory use in MIDI device handling (Sound, 8200648)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3157.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-16435","severity":"moderate","public_date":"2018-08-13T00:00:00Z","advisories":["RHSA-2018:3004"],"bugzilla":"1628969","bugzilla_description":"CVE-2018-16435 lcms2: Integer overflow in AllocateDataSet() in cmscgats.c leading to heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["chromium-browser-0:70.0.3538.67-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16435.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2952","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2712","RHSA-2018:3008","RHSA-2018:2569","RHSA-2018:2283","RHSA-2018:3007","RHSA-2018:2256","RHSA-2018:2575","RHSA-2018:2576","RHSA-2018:2254","RHSA-2018:2255","RHSA-2018:2241","RHSA-2018:2253","RHSA-2018:2242","RHSA-2018:2286"],"bugzilla":"1600925","bugzilla_description":"CVE-2018-2952 OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7","java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10","java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2952.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2972","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1601026","bugzilla_description":"CVE-2018-2972 OpenJDK: GCTR counter roll over (Security, 8200332)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2972.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-2814","severity":"critical","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1270","RHSA-2018:1206","RHSA-2018:1191","RHSA-2018:1204","RHSA-2018:1205","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567121","bugzilla_description":"CVE-2018-2814 OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2794","severity":"important","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567126","bugzilla_description":"CVE-2018-2794 OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2794.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-2795","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567351","bugzilla_description":"CVE-2018-2795 OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2815","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1270","RHSA-2018:1206","RHSA-2018:1191","RHSA-2018:1204","RHSA-2018:1205","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567537","bugzilla_description":"CVE-2018-2815 OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2799","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567542","bugzilla_description":"CVE-2018-2799 OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2799.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2798","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567543","bugzilla_description":"CVE-2018-2798 OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2797","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567545","bugzilla_description":"CVE-2018-2797 OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2796","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1567546","bugzilla_description":"CVE-2018-2796 OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2800","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568163","bugzilla_description":"CVE-2018-2800 OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-2790","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1206","RHSA-2018:1723","RHSA-2018:1724","RHSA-2018:1204","RHSA-2018:1721","RHSA-2018:1974","RHSA-2018:1205","RHSA-2018:1722","RHSA-2018:1975","RHSA-2018:1270","RHSA-2018:1191","RHSA-2018:1202","RHSA-2018:1203","RHSA-2018:1201","RHSA-2018:1278","RHSA-2018:1188"],"bugzilla":"1568515","bugzilla_description":"CVE-2018-2790 OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6_9","java-1.6.0-sun-1:1.6.0.191-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el7","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.3.el6","java-1.8.0-openjdk-1:1.8.0.171-3.b10.el6_9","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.1.el6_9","java-1.8.0-oracle-1:1.8.0.171-1jpp.2.el6","java-1.8.0-openjdk-1:1.8.0.171-7.b10.el7","java-1.8.0-ibm-1:1.8.0.5.15-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.5.el7","java-1.8.0-oracle-1:1.8.0.171-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.191-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.4.25-1jpp.2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-2826","severity":"critical","public_date":"2018-04-17T00:00:00Z","advisories":[],"bugzilla":"1568520","bugzilla_description":"CVE-2018-2826 OpenJDK: incorrect type check for the MethodHandles' tryFinally cleanup exception type (Libraries, 8194238)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2826.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2825","severity":"critical","public_date":"2018-04-17T00:00:00Z","advisories":[],"bugzilla":"1568586","bugzilla_description":"CVE-2018-2825 OpenJDK: insufficient array type checks in VarHandle (Libraries, 8194233)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2825.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2678","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534263","bugzilla_description":"CVE-2018-2678 OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2678.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2677","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534288","bugzilla_description":"CVE-2018-2677 OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2663","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534296","bugzilla_description":"CVE-2018-2663 OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2663.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2579","severity":"low","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534298","bugzilla_description":"CVE-2018-2579 OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-567","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2579.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2588","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534299","bugzilla_description":"CVE-2018-2588 OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-90","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-2602","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534525","bugzilla_description":"CVE-2018-2602 OpenJDK: loading of classes from untrusted locations (I18n, 8182601)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2018-2599","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534543","bugzilla_description":"CVE-2018-2599 OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2599.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-2603","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534553","bugzilla_description":"CVE-2018-2603 OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2603.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-2629","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0100","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534625","bugzilla_description":"CVE-2018-2629 OpenJDK: GSS context use-after-free (JGSS, 8186212)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-2618","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534762","bugzilla_description":"CVE-2018-2618 OpenJDK: insufficient strength of key agreement (JCE, 8185292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-2641","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534766","bugzilla_description":"CVE-2018-2641 OpenJDK: GTK library loading use-after-free (AWT, 8185325)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-2582","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0521","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534768","bugzilla_description":"CVE-2018-2582 OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-2634","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534943","bugzilla_description":"CVE-2018-2634 OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-2637","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1534970","bugzilla_description":"CVE-2018-2637 OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-2633","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0095","RHSA-2018:0458","RHSA-2018:0349","RHSA-2018:1812","RHSA-2018:0115","RHSA-2018:0521","RHSA-2018:0100","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:1463","RHSA-2018:0099"],"bugzilla":"1535036","bugzilla_description":"CVE-2018-2633 OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.3.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.171-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.181-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.161-3.b14.el6_9","java-1.8.0-oracle-1:1.8.0.161-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.161-0.b14.el7_4","java-1.6.0-sun-1:1.6.0.181-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.20-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.171-2.6.13.0.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2017-10285","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501868","bugzilla_description":"CVE-2017-10285 OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10346","severity":"critical","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1501873","bugzilla_description":"CVE-2017-10346 OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10388","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502038","bugzilla_description":"CVE-2017-10388 OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10274","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3047"],"bugzilla":"1502053","bugzilla_description":"CVE-2017-10274 OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10349","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502611","bugzilla_description":"CVE-2017-10349 OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10349.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10357","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502614","bugzilla_description":"CVE-2017-10357 OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10357.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10348","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502629","bugzilla_description":"CVE-2017-10348 OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10347","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502632","bugzilla_description":"CVE-2017-10347 OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10350","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502640","bugzilla_description":"CVE-2017-10350 OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10350.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10281","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502649","bugzilla_description":"CVE-2017-10281 OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10281.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10295","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502687","bugzilla_description":"CVE-2017-10295 OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10295.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-10345","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502858","bugzilla_description":"CVE-2017-10345 OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-10355","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1502869","bugzilla_description":"CVE-2017-10355 OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10355.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10356","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3392","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3047","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1503169","bugzilla_description":"CVE-2017-10356 OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el6_9","java-1.8.0-openjdk-1:1.8.0.151-1.b12.el7_4","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10356.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2017-10107","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471266","bugzilla_description":"CVE-2017-10107 OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10107.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10089","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471270","bugzilla_description":"CVE-2017-10089 OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10090","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1791"],"bugzilla":"1471517","bugzilla_description":"CVE-2017-10090 OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10090.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10087","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471521","bugzilla_description":"CVE-2017-10087 OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10110","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471523","bugzilla_description":"CVE-2017-10110 OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10111","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:1790"],"bugzilla":"1471526","bugzilla_description":"CVE-2017-10111 OpenJDK: incorrect range checks in LambdaFormEditor (Libraries, 8184185)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10101","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471527","bugzilla_description":"CVE-2017-10101 OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10096","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471528","bugzilla_description":"CVE-2017-10096 OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-10074","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471534","bugzilla_description":"CVE-2017-10074 OpenJDK: integer overflows in range check loop predicates (Hotspot, 8173770)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10067","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471535","bugzilla_description":"CVE-2017-10067 OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10109","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471670","bugzilla_description":"CVE-2017-10109 OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10081","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471711","bugzilla_description":"CVE-2017-10081 OpenJDK: incorrect bracket processing in function signature handling (Hotspot, 8170966)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10081.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-10193","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:3392","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471715","bugzilla_description":"CVE-2017-10193 OpenJDK: incorrect key size constraint check (Security, 8179101)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-10116","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471738","bugzilla_description":"CVE-2017-10116 OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2017-10115","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471851","bugzilla_description":"CVE-2017-10115 OpenJDK: DSA implementation timing attack (JCE, 8175106)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10135","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1471871","bugzilla_description":"CVE-2017-10135 OpenJDK: PKCS#8 implementation timing attack (JCE, 8176760)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10135.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-10108","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471888","bugzilla_description":"CVE-2017-10108 OpenJDK: unbounded memory allocation in BasicAttribute deserialization (Serialization, 8174105)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10108.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-10053","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1471889","bugzilla_description":"CVE-2017-10053 OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10078","severity":"important","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2469","RHSA-2017:1790","RHSA-2017:3453"],"bugzilla":"1471898","bugzilla_description":"CVE-2017-10078 OpenJDK: Nashorn incompletely blocking access to Java APIs (Scripting, 8171539)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-10198","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:3392","RHSA-2017:1790","RHSA-2017:1792","RHSA-2017:1791"],"bugzilla":"1472320","bugzilla_description":"CVE-2017-10198 OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el7_4","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.161-2.6.12.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-10102","severity":"critical","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472345","bugzilla_description":"CVE-2017-10102 OpenJDK: incorrect handling of references in DGC (RMI, 8163958)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-10118","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1790","RHSA-2017:1791"],"bugzilla":"1472470","bugzilla_description":"CVE-2017-10118 OpenJDK: ECDSA implementation timing attack (JCE, 8175110)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10176","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1790","RHSA-2017:1791"],"bugzilla":"1472476","bugzilla_description":"CVE-2017-10176 OpenJDK: incorrect handling of certain EC points (Security, 8178135)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10243","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2017:1789","RHSA-2017:2424","RHSA-2017:2469","RHSA-2017:2481","RHSA-2017:1790","RHSA-2017:3453","RHSA-2017:1792","RHSA-2017:1791","RHSA-2017:2530"],"bugzilla":"1472666","bugzilla_description":"CVE-2017-10243 OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6","java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.141-1.b16.el7_3","java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.2.el6_9","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.3.el7","java-1.6.0-ibm-1:1.6.0.16.50-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.1.el7_4","java-1.8.0-ibm-1:1.8.0.4.10-1jpp.1.el6_9","java-1.7.1-ibm-1:1.7.1.4.10-1jpp.3.el7","java-1.6.0-sun-1:1.6.0.161-1jpp.3.el7_3","java-1.8.0-openjdk-1:1.8.0.141-2.b16.el6_9","java-1.6.0-sun-1:1.6.0.161-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.151-2.6.11.0.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10243.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-3511","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1221"],"bugzilla":"1443007","bugzilla_description":"CVE-2017-3511 OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-3509","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443052","bugzilla_description":"CVE-2017-3509 OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2017-3544","severity":"low","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443068","bugzilla_description":"CVE-2017-3544 OpenJDK: newline injection in the SMTP client (Networking, 8171533)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3539","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443097","bugzilla_description":"CVE-2017-3539 OpenJDK: MD5 allowed for jar verification (Security, 8171121)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3526","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108"],"bugzilla":"1443252","bugzilla_description":"CVE-2017-3526 OpenJDK: incomplete XML parse tree size enforcement (JAXP, 8169011)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3512","severity":"critical","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443455","bugzilla_description":"CVE-2017-3512 OpenJDK: window framing issues on MacOSX (AWT, 8165626)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3514","severity":"critical","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443469","bugzilla_description":"CVE-2017-3514 OpenJDK: peering issues on Windows (AWT, 8167110)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3533","severity":"low","public_date":"2017-02-18T00:00:00Z","advisories":["RHSA-2017:1204","RHSA-2017:1118","RHSA-2017:1117","RHSA-2017:1109","RHSA-2017:1119","RHSA-2017:1108","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221"],"bugzilla":"1443083","bugzilla_description":"CVE-2017-3533 OpenJDK: newline injection in the FTP client (Networking, 8170222)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el7_3","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-0.b11.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.141-2.6.10.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.131-1jpp.1.el6","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-openjdk-1:1.8.0.131-2.b11.el7_3","java-1.7.0-oracle-1:1.7.0.141-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.151-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3272","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413554","bugzilla_description":"CVE-2017-3272 OpenJDK: insufficient protected field access checks in atomic field updaters (Libraries, 8165344)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3289","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413562","bugzilla_description":"CVE-2017-3289 OpenJDK: insecure class construction (Hotspot, 8167104)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-3253","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413583","bugzilla_description":"CVE-2017-3253 OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-3261","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413653","bugzilla_description":"CVE-2017-3261 OpenJDK: integer overflow in SocketOutputStream boundary check (Networking, 8164147)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3231","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413717","bugzilla_description":"CVE-2017-3231 OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3231.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5547","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413764","bugzilla_description":"CVE-2016-5547 OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5547.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5552","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413882","bugzilla_description":"CVE-2016-5552 OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5552.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3252","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413906","bugzilla_description":"CVE-2017-3252 OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3252.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5546","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413911","bugzilla_description":"CVE-2016-5546 OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5546.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-5548","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413920","bugzilla_description":"CVE-2016-5548 OpenJDK: DSA implementation timing attack (Libraries, 8168728)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-5549","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0176"],"bugzilla":"1413923","bugzilla_description":"CVE-2016-5549 OpenJDK: ECDSA implementation timing attack (Libraries, 8168724)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-3241","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:0269","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:1216","RHSA-2017:0180","RHSA-2017:0338","RHSA-2017:0175","RHSA-2017:0263","RHSA-2017:0177","RHSA-2017:0176"],"bugzilla":"1413955","bugzilla_description":"CVE-2017-3241 OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el5_11","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.131-2.6.9.0.el7_3","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.4.0-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el6_8","java-1.7.0-oracle-1:1.7.0.131-1jpp.1.el7_3","java-1.8.0-oracle-1:1.8.0.121-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.121-0.b13.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3241.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3260","severity":"critical","public_date":"2017-01-17T00:00:00Z","advisories":[],"bugzilla":"1414562","bugzilla_description":"CVE-2017-3260 OpenJDK: menu handling memory corruption (AWT, 8164143)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3260.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5582","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2658","RHSA-2016:2090"],"bugzilla":"1385402","bugzilla_description":"CVE-2016-5582 OpenJDK: incomplete type checks of System.arraycopy arguments (Hotspot, 8160591)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5582.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-5573","severity":"important","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385544","bugzilla_description":"CVE-2016-5573 OpenJDK: insufficient checks of JDWP packets (Hotspot, 8159519)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5573.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5554","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385714","bugzilla_description":"CVE-2016-5554 OpenJDK: insufficient classloader consistency checks in ClassLoaderWithRepository (JMX, 8157739)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5554.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5542","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1385723","bugzilla_description":"CVE-2016-5542 OpenJDK: missing algorithm restrictions for jar verification (Libraries, 8155973)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5597","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2016:2089","RHSA-2016:2136","RHSA-2017:1216","RHSA-2016:2088","RHSA-2017:0061","RHSA-2016:2659","RHSA-2016:2658","RHSA-2016:2138","RHSA-2016:2137","RHSA-2016:2090"],"bugzilla":"1386103","bugzilla_description":"CVE-2016-5597 OpenJDK: exposure of server authentication credentials to proxy (Networking, 8160838)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-319","affected_packages":["java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el6_8","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el7","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el7_3","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.8.0-ibm-1:1.8.0.3.20-1jpp.1.el7_2","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.9.60-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.121-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.131-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.111-1jpp.4.el6_8","java-1.7.1-ibm-1:1.7.1.3.60-1jpp.1.el7_2","java-1.6.0-ibm-1:1.6.0.16.35-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.6.0-openjdk-1:1.6.0.41-1.13.13.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5597.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5568","severity":"critical","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1386112","bugzilla_description":"CVE-2016-5568 OpenJDK: incorrect menu handling on Windows (AWT, 8158993)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5568.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-10165","severity":"moderate","public_date":"2016-08-15T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2017:2999","RHSA-2017:3046","RHSA-2016:2658","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1367357","bugzilla_description":"CVE-2016-10165 lcms2: Out-of-bounds read in Type_MLU_Read()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2016-3606","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1356963","bugzilla_description":"CVE-2016-3606 OpenJDK: insufficient bytecode verification (Hotspot, 8155981)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3598","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2017:1216","RHSA-2016:1504","RHSA-2016:1587","RHSA-2016:1588","RHSA-2016:1589","RHSA-2016:1458"],"bugzilla":"1356971","bugzilla_description":"CVE-2016-3598 OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.1-ibm-1:1.7.1.3.50-1jpp.1.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.50-1jpp.1.el5_11","java-1.8.0-ibm-1:1.8.0.3.10-1jpp.2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3598.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3587","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1458"],"bugzilla":"1356987","bugzilla_description":"CVE-2016-3587 OpenJDK: insufficient protection of MethodHandle.invokeBasic() (Hotspot, 8154475)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3587.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3610","severity":"critical","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1504","RHSA-2016:1458"],"bugzilla":"1356994","bugzilla_description":"CVE-2016-3610 OpenJDK: insufficient value count check in MethodHandles.filterReturnValue() (Libraries, 8158571)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-3500","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357008","bugzilla_description":"CVE-2016-3500 OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3508","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357015","bugzilla_description":"CVE-2016-3508 OpenJDK: missing entity replacement limits (JAXP, 8149962)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3458","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357494","bugzilla_description":"CVE-2016-3458 OpenJDK: insufficient restrictions on the use of custom ValueHandler (CORBA, 8079718)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-3550","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:1475","RHSA-2016:1476","RHSA-2016:1504","RHSA-2016:1477","RHSA-2016:1776","RHSA-2016:1458"],"bugzilla":"1357506","bugzilla_description":"CVE-2016-3550 OpenJDK: integer overflows in bytecode streams (Hotspot, 8152479)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190","affected_packages":["java-1.7.0-openjdk-1:1.7.0.111-2.6.7.1.el5_11","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el6_8","java-1.8.0-openjdk-1:1.8.0.101-3.b13.el7_2","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.111-2.6.7.2.el7_2","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.6.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el6_8","java-1.7.0-oracle-1:1.7.0.111-1jpp.1.el6_8","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.4.el5_11","java-1.8.0-oracle-1:1.8.0.101-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.121-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.40-1.13.12.5.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3550.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-3485","severity":"low","public_date":"2016-07-19T00:00:00Z","advisories":[],"bugzilla":"1357516","bugzilla_description":"CVE-2016-3485 OpenJDK: weak authentication secret in Pipe implementation on Windows (Networking, 8145446)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3485.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2016-0686","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327743","bugzilla_description":"CVE-2016-0686 OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0686.json"},{"CVE":"CVE-2016-0687","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1327749","bugzilla_description":"CVE-2016-0687 OpenJDK: insufficient byte type checks (Hotspot, 8132051)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0687.json"},{"CVE":"CVE-2016-0695","severity":"low","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:0677"],"bugzilla":"1328022","bugzilla_description":"CVE-2016-0695 OpenJDK: insufficient DSA key parameters checks (Security, 8138593)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0695.json"},{"CVE":"CVE-2016-3425","severity":"moderate","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:0677"],"bugzilla":"1328040","bugzilla_description":"CVE-2016-3425 OpenJDK: incorrect handling of surrogate pairs in XML attribute values (JAXP, 8143167)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3425.json"},{"CVE":"CVE-2016-3426","severity":"low","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:0708","RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328059","bugzilla_description":"CVE-2016-3426 OpenJDK: non-constant time GCM authentication tag comparison (JCE, 8143945)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3426.json"},{"CVE":"CVE-2016-3427","severity":"critical","public_date":"2016-04-19T00:00:00Z","advisories":["RHSA-2016:1430","RHSA-2016:0650","RHSA-2016:0651","RHSA-2016:0708","RHSA-2017:1216","RHSA-2016:0716","RHSA-2016:0678","RHSA-2016:0679","RHSA-2016:0723","RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0675","RHSA-2016:0676","RHSA-2016:1039","RHSA-2016:0677"],"bugzilla":"1328210","bugzilla_description":"CVE-2016-3427 OpenJDK: unrestricted deserialization of authentication credentials (JMX, 8144430)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el6_7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el5_11","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.25-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.91-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el6","java-1.8.0-ibm-1:1.8.0.3.0-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el5_11","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el7_2","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el6_7","java-1.7.0-oracle-1:1.7.0.101-1jpp.1.el7","java-1.6.0-openjdk-1:1.6.0.39-1.13.11.0.el7_2","java-1.7.0-openjdk-1:1.7.0.101-2.6.6.1.el6_7","java-1.6.0-sun-1:1.6.0.115-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el6_7","java-1.8.0-openjdk-1:1.8.0.91-0.b14.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3427.json"},{"CVE":"CVE-2016-0636","severity":"critical","public_date":"2016-03-23T00:00:00Z","advisories":["RHSA-2016:0513","RHSA-2016:0514","RHSA-2016:0515","RHSA-2016:0516","RHSA-2016:0511","RHSA-2016:0512"],"bugzilla":"1320650","bugzilla_description":"CVE-2016-0636 OpenJDK: missing type safety checks for MethodHandle calls across class loaders, incorrect CVE-2013-5838 fix (Hotspot, 8151666)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["java-1.7.0-oracle-1:1.7.0.99-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.77-0.b03.el6_7","java-1.7.0-oracle-1:1.7.0.99-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.77-0.b03.el7_2","java-1.8.0-oracle-1:1.8.0.77-1jpp.1.el6_7","java-1.7.0-openjdk-1:1.7.0.99-2.6.5.0.el6_7","java-1.7.0-openjdk-1:1.7.0.99-2.6.5.0.el7_2","java-1.7.0-oracle-1:1.7.0.99-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.77-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.99-2.6.5.0.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0636.json"},{"CVE":"CVE-2016-0494","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298906","bugzilla_description":"CVE-2016-0494 ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0494.json"},{"CVE":"CVE-2016-0475","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0050","RHSA-2016:0049"],"bugzilla":"1298949","bugzilla_description":"CVE-2016-0475 OpenJDK: PBE incorrect key lengths (Libraries, 8138589)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0475.json"},{"CVE":"CVE-2016-0402","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1298957","bugzilla_description":"CVE-2016-0402 OpenJDK: URL deserialization inconsistencies (Networking, 8059054)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0402.json"},{"CVE":"CVE-2016-0448","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299073","bugzilla_description":"CVE-2016-0448 OpenJDK: logging of RMI connection secrets (JMX, 8130710)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0448.json"},{"CVE":"CVE-2016-0466","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299385","bugzilla_description":"CVE-2016-0466 OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0466.json"},{"CVE":"CVE-2016-0483","severity":"critical","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0067","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0049"],"bugzilla":"1299441","bugzilla_description":"CVE-2016-0483 OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el7_2","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.38-1.13.10.0.el5_11","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0483.json"},{"CVE":"CVE-2015-7575","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0012","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0007","RHSA-2016:0008","RHSA-2016:0049"],"bugzilla":"1289841","bugzilla_description":"CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.2","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","nss-0:3.19.1-19.el7_2","gnutls-0:3.3.8-14.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","gnutls-0:2.8.5-19.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","nss-0:3.19.1-8.el6_7","openssl-1:1.0.1e-51.el7_2.2","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json"},{"CVE":"CVE-2015-4806","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1233687","bugzilla_description":"CVE-2015-4806 OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4806.json"},{"CVE":"CVE-2015-4835","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273022","bugzilla_description":"CVE-2015-4835 OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4835.json"},{"CVE":"CVE-2015-4881","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921"],"bugzilla":"1273027","bugzilla_description":"CVE-2015-4881 OpenJDK: missing type checks in IIOPInputStream (CORBA, 8076392)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4881.json"},{"CVE":"CVE-2015-4843","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273053","bugzilla_description":"CVE-2015-4843 OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4843.json"},{"CVE":"CVE-2015-4883","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273304","bugzilla_description":"CVE-2015-4883 OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4883.json"},{"CVE":"CVE-2015-4860","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273308","bugzilla_description":"CVE-2015-4860 OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4860.json"},{"CVE":"CVE-2015-4805","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273311","bugzilla_description":"CVE-2015-4805 OpenJDK: missing checks for proper initialization in ObjectStreamClass (Serialization, 8103671)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-665","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4805.json"},{"CVE":"CVE-2015-4844","severity":"critical","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273318","bugzilla_description":"CVE-2015-4844 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4844.json"},{"CVE":"CVE-2015-4868","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:1919"],"bugzilla":"1273328","bugzilla_description":"CVE-2015-4868 OpenJDK: CRL checking flaw (Libraries, 8081744)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4868.json"},{"CVE":"CVE-2015-4840","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273338","bugzilla_description":"CVE-2015-4840 OpenJDK: OOB access in CMS code (2D, 8086092)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4840.json"},{"CVE":"CVE-2015-4882","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273414","bugzilla_description":"CVE-2015-4882 OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4882.json"},{"CVE":"CVE-2015-4842","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273425","bugzilla_description":"CVE-2015-4842 OpenJDK: leak of user.dir location (JAXP, 8078427)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4842.json"},{"CVE":"CVE-2015-4734","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273430","bugzilla_description":"CVE-2015-4734 OpenJDK: kerberos realm name leak (JGSS, 8048030)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4734.json"},{"CVE":"CVE-2015-4903","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273496","bugzilla_description":"CVE-2015-4903 OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4903.json"},{"CVE":"CVE-2015-4803","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273637","bugzilla_description":"CVE-2015-4803 OpenJDK: inefficient use of hash tables and lists during XML parsing (JAXP, 8068842)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4803.json"},{"CVE":"CVE-2015-4893","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273638","bugzilla_description":"CVE-2015-4893 OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4893.json"},{"CVE":"CVE-2015-4911","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:1926","RHSA-2015:2086","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921"],"bugzilla":"1273645","bugzilla_description":"CVE-2015-4911 OpenJDK: incomplete supportDTD enforcement (JAXP, 8130078)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.ael7b_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4911.json"},{"CVE":"CVE-2015-4872","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2015:2518","RHSA-2015:2508","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1928","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506","RHSA-2015:2086"],"bugzilla":"1273734","bugzilla_description":"CVE-2015-4872 OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7","java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el6_7","java-1.6.0-openjdk-1:1.6.0.37-1.13.9.4.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4872.json"},{"CVE":"CVE-2015-4871","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:2509","RHSA-2015:1927","RHSA-2016:0053","RHSA-2015:2506"],"bugzilla":"1273859","bugzilla_description":"CVE-2015-4871 OpenJDK: protected methods can be used as interface methods via DirectMethodHandle (Libraries)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el7_2","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4871.json"},{"CVE":"CVE-2015-2601","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242019","bugzilla_description":"CVE-2015-2601 OpenJDK: non-constant time comparisons in crypto code (JCE, 8074865)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2601.json"},{"CVE":"CVE-2015-2659","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1228","RHSA-2015:1241"],"bugzilla":"1242144","bugzilla_description":"CVE-2015-2659 OpenJDK: GCM cipher issue causing JVM crash (Security, 8067648)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2659.json"},{"CVE":"CVE-2015-2628","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242232","bugzilla_description":"CVE-2015-2628 OpenJDK: IIOPInputStream type confusion vulnerability (CORBA, 8076376)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2628.json"},{"CVE":"CVE-2015-4731","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242234","bugzilla_description":"CVE-2015-4731 OpenJDK: improper permission checks in MBeanServerInvocationHandler (JMX, 8076397)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4731.json"},{"CVE":"CVE-2015-4732","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242240","bugzilla_description":"CVE-2015-4732 OpenJDK: insufficient context checks during object deserialization (Libraries, 8076405)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-567","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4732.json"},{"CVE":"CVE-2015-4733","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242275","bugzilla_description":"CVE-2015-4733 OpenJDK: RemoteObjectInvocationHandler allows calling finalize() (RMI, 8076409)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4733.json"},{"CVE":"CVE-2015-4748","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242281","bugzilla_description":"CVE-2015-4748 OpenJDK: incorrect OCSP nextUpdate checking (Libraries, 8075374)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-299","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4748.json"},{"CVE":"CVE-2015-2621","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242372","bugzilla_description":"CVE-2015-2621 OpenJDK: incorrect code permission checks in RMIConnectionImpl (JMX, 8075853)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2621.json"},{"CVE":"CVE-2015-4749","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242379","bugzilla_description":"CVE-2015-4749 OpenJDK: DnsClient fails to release request information after error (JNDI, 8075378)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4749.json"},{"CVE":"CVE-2015-2632","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242394","bugzilla_description":"CVE-2015-2632 ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190->CWE-125","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2632.json"},{"CVE":"CVE-2015-4760","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1242447","bugzilla_description":"CVE-2015-4760 ICU: missing boundary checks in layout engine (OpenJDK 2D, 8071715)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4760.json"},{"CVE":"CVE-2015-2613","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1242456","bugzilla_description":"CVE-2015-2613 NSS / JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2613.json"},{"CVE":"CVE-2015-2590","severity":"critical","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1243139","bugzilla_description":"CVE-2015-2590 OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2590.json"},{"CVE":"CVE-2015-4000","severity":"moderate","public_date":"2015-05-20T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2016:2056","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2016:1624","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1197","RHSA-2015:1230","RHSA-2015:1185","RHSA-2015:1072"],"bugzilla":"1223211","bugzilla_description":"CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","nss-0:3.19.1-3.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","nss-0:3.19.1-3.ael7b_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","openssl-0:1.0.1e-30.el6_6.9","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","openssl-1:1.0.1e-42.ael7b_1.6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.8.0-openjdk-1:1.8.0.51-1.b16.ael7b_1","openssl-0:0.9.8e-36.el5_11","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-0478","severity":"low","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1210355","bugzilla_description":"CVE-2015-0478 OpenJDK: insufficient hardening of RSA-CRT implementation (JCE, 8071726)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0478.json"},{"CVE":"CVE-2015-0469","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1210829","bugzilla_description":"CVE-2015-0469 ICU: layout engine glyphStorage off-by-one (OpenJDK 2D, 8067699)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-122","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0469.json"},{"CVE":"CVE-2015-0460","severity":"critical","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211285","bugzilla_description":"CVE-2015-0460 OpenJDK: incorrect handling of phantom references (Hotspot, 8071931)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0460.json"},{"CVE":"CVE-2015-0477","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211299","bugzilla_description":"CVE-2015-0477 OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0477.json"},{"CVE":"CVE-2015-0470","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:0809"],"bugzilla":"1211387","bugzilla_description":"CVE-2015-0470 OpenJDK: incorrect handling of default methods (Hotspot, 8065366)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0470.json"},{"CVE":"CVE-2015-0488","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211543","bugzilla_description":"CVE-2015-0488 OpenJDK: certificate options parsing uncaught exception (JSSE, 8068720)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-248","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0488.json"},{"CVE":"CVE-2015-2808","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1207101","bugzilla_description":"CVE-2015-2808 SSL/TLS: \"Invariance Weakness\" vulnerability in RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2808.json"},{"CVE":"CVE-2015-0383","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1123870","bugzilla_description":"CVE-2015-0383 OpenJDK: insecure hsperfdata temporary file handling (Hotspot, 8050807)","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0383.json"},{"CVE":"CVE-2014-6601","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183020","bugzilla_description":"CVE-2014-6601 OpenJDK: class verifier insufficient invokespecial calls verification (Hotspot, 8058982)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6601.json"},{"CVE":"CVE-2015-0412","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183021","bugzilla_description":"CVE-2015-0412 OpenJDK: insufficient code privileges checks (JAX-WS, 8054367)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0412.json"},{"CVE":"CVE-2015-0408","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183023","bugzilla_description":"CVE-2015-0408 OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0408.json"},{"CVE":"CVE-2015-0395","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0067","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183031","bugzilla_description":"CVE-2015-0395 OpenJDK: phantom references handling issue in garbage collector (Hotspot, 8047125)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0395.json"},{"CVE":"CVE-2015-0400","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1183039","bugzilla_description":"CVE-2015-0400 OpenJDK: NTLM authentication data disclosure via redirect to proxy (Libraries, 8048035)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0400.json"},{"CVE":"CVE-2015-0407","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183043","bugzilla_description":"CVE-2015-0407 OpenJDK: directory information leak via file chooser (Swing, 8055304)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0407.json"},{"CVE":"CVE-2015-0410","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183044","bugzilla_description":"CVE-2015-0410 OpenJDK: DER decoder infinite loop  (Security, 8059485)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0410.json"},{"CVE":"CVE-2014-6593","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183049","bugzilla_description":"CVE-2014-6593 OpenJDK: incorrect tracking of ChangeCipherSpec during SSL/TLS handshake (JSSE, 8057555)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6593.json"},{"CVE":"CVE-2014-6585","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183645","bugzilla_description":"CVE-2014-6585 ICU: font parsing OOB read (OpenJDK 2D, 8055489)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6585.json"},{"CVE":"CVE-2014-6591","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0136","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0080","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183646","bugzilla_description":"CVE-2014-6591 ICU: font parsing OOB read (OpenJDK 2D, 8056276)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6591.json"},{"CVE":"CVE-2014-6549","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0134","RHSA-2015:0133"],"bugzilla":"1183660","bugzilla_description":"CVE-2014-6549 OpenJDK: incorrect class loader permission check in ClassLoader getParent() (Libraries, 8055314)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6549.json"},{"CVE":"CVE-2015-0437","severity":"critical","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069"],"bugzilla":"1183670","bugzilla_description":"CVE-2015-0437 OpenJDK: code generation issue (Hotspot, 8064524)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0437.json"},{"CVE":"CVE-2014-6587","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2015:0080","RHSA-2015:0069","RHSA-2015:0135","RHSA-2015:0079","RHSA-2015:0068","RHSA-2015:0134","RHSA-2015:0067","RHSA-2015:0133","RHSA-2015:0264","RHSA-2015:0263","RHSA-2015:0086","RHSA-2015:0085"],"bugzilla":"1183715","bugzilla_description":"CVE-2014-6587 OpenJDK: MulticastSocket NULL pointer dereference (Libraries, 8056264)","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6587.json"},{"CVE":"CVE-2015-2625","severity":"low","public_date":"2014-11-02T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1488","RHSA-2015:1486","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230"],"bugzilla":"1241965","bugzilla_description":"CVE-2015-2625 OpenJDK: name for reverse DNS lookup used in certificate identity check (JSSE, 8067694)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2625.json"},{"CVE":"CVE-2014-6512","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1071210","bugzilla_description":"CVE-2014-6512 OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-345","affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6512.json"},{"CVE":"CVE-2014-6513","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1150118","bugzilla_description":"CVE-2014-6513 OpenJDK: splash image handling memory corruption (AWT, 8042609)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6513.json"},{"CVE":"CVE-2014-6506","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150155","bugzilla_description":"CVE-2014-6506 OpenJDK: insufficient permission checks when setting resource bundle on system logger (Libraries, 8041564)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6506.json"},{"CVE":"CVE-2014-6504","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1150182","bugzilla_description":"CVE-2014-6504 OpenJDK: incorrect optimization of range checks in C2 compiler (Hotspot, 8022783)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6504.json"},{"CVE":"CVE-2014-6519","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1150273","bugzilla_description":"CVE-2014-6519 OpenJDK: missing BootstrapMethods bounds check (Hotspot, 8041717)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6519.json"},{"CVE":"CVE-2014-6531","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150651","bugzilla_description":"CVE-2014-6531 OpenJDK: insufficient ResourceBundle name check (Libraries, 8044274)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6531.json"},{"CVE":"CVE-2014-6502","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1150669","bugzilla_description":"CVE-2014-6502 OpenJDK: LogRecord use of incorrect CL when loading ResourceBundle (Libraries, 8042797)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6502.json"},{"CVE":"CVE-2014-6457","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151046","bugzilla_description":"CVE-2014-6457 OpenJDK: Triple Handshake attack against TLS/SSL connections (JSSE, 8037066)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6457.json"},{"CVE":"CVE-2014-6558","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151063","bugzilla_description":"CVE-2014-6558 OpenJDK: CipherInputStream incorrect exception handling (Security, 8037846)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6558.json"},{"CVE":"CVE-2014-6517","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1634","RHSA-2014:1633"],"bugzilla":"1151364","bugzilla_description":"CVE-2014-6517 OpenJDK: StAX parser parameter entity XXE (JAXP, 8039533)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6517.json"},{"CVE":"CVE-2014-6511","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1620","RHSA-2014:1882","RHSA-2014:1658","RHSA-2014:1636","RHSA-2014:1657","RHSA-2014:1877","RHSA-2014:1634","RHSA-2014:1876","RHSA-2014:1633","RHSA-2015:0264","RHSA-2014:1881","RHSA-2014:1880"],"bugzilla":"1151517","bugzilla_description":"CVE-2014-6511 ICU: Layout Engine ContextualSubstitution missing boundary checks (JDK 2D, 8041540)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.85-1jpp.2.el7","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el5_11","java-1.6.0-sun-1:1.6.0.85-1jpp.2.el6","java-1.6.0-sun-1:1.6.0.85-1jpp.3.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el7","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el5_11","java-1.7.0-oracle-1:1.7.0.72-1jpp.2.el6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.72-1jpp.4.el5_11","java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6","java-1.7.0-openjdk-1:1.7.0.71-2.5.3.1.el6","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el7_0","java-1.6.0-openjdk-1:1.6.0.33-1.13.5.0.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6511.json"},{"CVE":"CVE-2014-6562","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1636"],"bugzilla":"1151988","bugzilla_description":"CVE-2014-6562 OpenJDK: incorrect handling of zip entries with NUL in name (Libraries, 8048025)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6562.json"},{"CVE":"CVE-2014-6468","severity":"low","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1636"],"bugzilla":"1152049","bugzilla_description":"CVE-2014-6468 OpenJDK: insufficient SharedArchiveFile checks (Hotspot, 8044269)","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["java-1.8.0-openjdk-0:1.8.0.25-1.b17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6468.json"},{"CVE":"CVE-2014-3566","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2015:1546","RHSA-2015:1545","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2014:1881","RHSA-2014:1880","RHSA-2015:0080","RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2014:1920","RHSA-2015:0067","RHSA-2015:0012","RHSA-2015:0011","RHSA-2015:0264","RHSA-2015:0010","RHSA-2015:0086","RHSA-2015:0085","RHBA-2014:1857"],"bugzilla":"1152789","bugzilla_description":"CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-636|CWE-757)","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","openshift-origin-node-proxy-0:1.16.4.2-1.el6op","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","openshift-origin-node-proxy-0:1.22.3.4-1.el6op","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json"},{"CVE":"CVE-2015-3149","severity":"low","public_date":"2014-04-20T00:00:00Z","advisories":["RHSA-2015:1228"],"bugzilla":"1213365","bugzilla_description":"CVE-2015-3149 OpenJDK8: insecure hsperfdata temporary file handling, CVE-2015-0383 regression (Hotspot)","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":["java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3149.json"},{"CVE":"CVE-2015-0480","severity":"low","public_date":"2005-01-04T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"1211504","bugzilla_description":"CVE-2015-0480 OpenJDK: jar directory traversal issues (Tools, 8064601)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0480.json"},{"CVE":"CVE-2005-1080","severity":"low","public_date":"2005-01-04T00:00:00Z","advisories":["RHSA-2015:0854","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:0809","RHSA-2015:0808","RHSA-2015:0807","RHSA-2015:0806","RHSA-2015:1021","RHSA-2015:1020","RHSA-2015:0858","RHSA-2015:0857"],"bugzilla":"606442","bugzilla_description":"CVE-2005-1080 jar: directory traversal vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el7_1","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el7_1","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el6_6","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el5_11","java-1.6.0-openjdk-1:1.6.0.35-1.13.7.1.el7_1","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el7_1","java-1.8.0-openjdk-1:1.8.0.45-30.b13.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.1.el6_6","java-1.7.0-oracle-1:1.7.0.79-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.79-2.5.5.2.el5_11","java-1.6.0-sun-1:1.6.0.95-1jpp.3.el5_11","java-1.8.0-oracle-1:1.8.0.45-1jpp.2.el6_6","java-1.8.0-openjdk-1:1.8.0.45-28.b13.el6_6","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1080.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-demo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-demo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-demo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-headless_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-headless_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-headless_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-javadoc-zip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-javadoc-zip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-javadoc-zip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-jmods_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-jmods_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-jmods_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-src_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-src_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk-src_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk_security_api_results.json
new file mode 100644
index 0000000..b84c88e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-11-openjdk_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14779","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889271","bugzilla_description":"CVE-2020-14779 OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14779.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-14781","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889274","bugzilla_description":"CVE-2020-14781 OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14781.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14792","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889280","bugzilla_description":"CVE-2020-14792 OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14792.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2020-14782","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889290","bugzilla_description":"CVE-2020-14782 OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14796","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889697","bugzilla_description":"CVE-2020-14796 OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14796.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-14797","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889717","bugzilla_description":"CVE-2020-14797 OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14797.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14803","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4307","RHSA-2020:4306","RHSA-2020:4305","RHSA-2020:4316"],"bugzilla":"1889895","bugzilla_description":"CVE-2020-14803 OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":["java-11-openjdk-1:11.0.9.11-0.el8_1","java-11-openjdk-1:11.0.9.11-0.el8_0","java-11-openjdk-1:11.0.9.11-0.el8_2","java-11-openjdk-1:11.0.9.11-0.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14583","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856448","bugzilla_description":"CVE-2020-14583 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2020-14593","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856784","bugzilla_description":"CVE-2020-14593 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14593.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-14562","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2970","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969"],"bugzilla":"1856810","bugzilla_description":"CVE-2020-14562 OpenJDK: Excessive memory usage in ImageIO TIFF plugin (ImageIO, 8233239)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-11-openjdk-1:11.0.8.10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_1","java-11-openjdk-1:11.0.8.10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14562.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-14621","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856885","bugzilla_description":"CVE-2020-14621 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14621.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14556","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856896","bugzilla_description":"CVE-2020-14556 OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14556.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-14573","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2970","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969"],"bugzilla":"1856951","bugzilla_description":"CVE-2020-14573 OpenJDK: Incomplete interface type checks in Graal compiler (Hotspot, 8236867)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-11-openjdk-1:11.0.8.10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_1","java-11-openjdk-1:11.0.8.10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14573.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14577","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:2970","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:3098","RHSA-2020:3099","RHSA-2020:2969","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856988","bugzilla_description":"CVE-2020-14577 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.8.10-0.el7_8","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.8.10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-11-openjdk-1:11.0.8.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-11-openjdk-1:11.0.8.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14577.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14578","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856991","bugzilla_description":"CVE-2020-14578 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14578.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-14579","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:2972","RHSA-2020:3388","RHSA-2020:3386","RHSA-2020:3100","RHSA-2020:3387","RHSA-2020:3101","RHSA-2020:2968","RHSA-2020:2985"],"bugzilla":"1856995","bugzilla_description":"CVE-2020-14579 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el7_8","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el8_2","java-1.8.0-openjdk-1:1.8.0.262.b10-0.el6_10","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14579.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-14581","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":[],"bugzilla":"1857172","bugzilla_description":"CVE-2020-14581 OpenJDK: Information disclosure in color management (2D, 8238002)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14581.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-14664","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":[],"bugzilla":"1866027","bugzilla_description":"CVE-2020-14664 JavaFX: Out-of-bounds write in HTML Rendering","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14664.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2020-2754","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514"],"bugzilla":"1823199","bugzilla_description":"CVE-2020-2754 OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2754.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2755","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514"],"bugzilla":"1823200","bugzilla_description":"CVE-2020-2755 OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2755.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2756","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823215","bugzilla_description":"CVE-2020-2756 OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2756.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2757","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823216","bugzilla_description":"CVE-2020-2757 OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2757.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2773","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1508","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:1512","RHSA-2020:1514"],"bugzilla":"1823224","bugzilla_description":"CVE-2020-2773 OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2773.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2800","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823527","bugzilla_description":"CVE-2020-2800 OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2800.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2830","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823542","bugzilla_description":"CVE-2020-2830 OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185->CWE-400","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2830.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-2803","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823694","bugzilla_description":"CVE-2020-2803 OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2805","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823844","bugzilla_description":"CVE-2020-2805 OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2805.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-2816","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1517","RHSA-2020:1514"],"bugzilla":"1823853","bugzilla_description":"CVE-2020-2816 OpenJDK: Application data accepted before TLS handshake completion (JSSE, 8235691)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["java-11-openjdk-1:11.0.7.10-4.el7_8","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2816.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-2778","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1517","RHSA-2020:1514"],"bugzilla":"1823879","bugzilla_description":"CVE-2020-2778 OpenJDK: Incomplete enforcement of algorithm restrictions for TLS (JSSE, 8232424)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-11-openjdk-1:11.0.7.10-4.el7_8","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2778.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2767","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1509","RHSA-2020:1517","RHSA-2020:1514"],"bugzilla":"1823947","bugzilla_description":"CVE-2020-2767 OpenJDK: Incorrect handling of Certificate messages during TLS handshake (JSSE, 8232581)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["java-11-openjdk-1:11.0.7.10-4.el7_8","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2767.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2781","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:2236","RHSA-2020:2241","RHSA-2020:1516","RHSA-2020:1515","RHSA-2020:1507","RHSA-2020:1506","RHSA-2020:1517","RHSA-2020:2239","RHSA-2020:1512","RHSA-2020:2237","RHSA-2020:1514","RHSA-2020:2238","RHSA-2020:1509","RHSA-2020:1508"],"bugzilla":"1823960","bugzilla_description":"CVE-2020-2781 OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.2.el7_8","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_1","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el8_0","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el6_10","java-1.8.0-openjdk-1:1.8.0.252.b09-2.el7_8","java-11-openjdk-1:11.0.7.10-4.el7_8","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.7.10-1.el8_0","java-11-openjdk-1:11.0.7.10-1.el8_1","java-1.7.0-openjdk-1:1.7.0.261-2.6.22.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2781.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-10531","severity":"important","public_date":"2020-02-25T00:00:00Z","advisories":["RHSA-2020:1343","RHSA-2020:2895","RHSA-2020:0738","RHSA-2020:1317","RHSA-2020:1293","RHSA-2020:0902","RHSA-2020:0901","RHSA-2020:3084","RHSA-2020:0896","RHSA-2020:0897"],"bugzilla":"1807349","bugzilla_description":"CVE-2020-10531 ICU: Integer overflow in UnicodeString::doAppend()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["icu-0:60.3-2.el8_0","icu-0:50.2-4.el7_7","rh-nodejs12-nodejs-0:12.18.2-1.el7","nodejs:12-8010020200326104226.c27ad7f8","icu-0:60.3-2.el8_1","chromium-browser-0:80.0.3987.122-1.el6_10","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:10-8000020200318152927.f8e95b4e","nodejs:10-8010020200318152252.c27ad7f8","icu-0:4.2.1-15.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10531.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-2583","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790444","bugzilla_description":"CVE-2020-2583 OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2590","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790556","bugzilla_description":"CVE-2020-2590 OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2590.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2601","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:3388","RHSA-2020:0541","RHSA-2020:3386","RHSA-2020:3387","RHSA-2020:0196","RHSA-2020:0632","RHSA-2020:0202","RHSA-2020:0128"],"bugzilla":"1790570","bugzilla_description":"CVE-2020-2601 OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el6_10","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2","java-1.7.1-ibm-1:1.7.1.4.70-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2020-2593","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790884","bugzilla_description":"CVE-2020-2593 OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2593.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2604","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0128","RHSA-2020:0468"],"bugzilla":"1790944","bugzilla_description":"CVE-2020-2604 OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2604.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-2655","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:0128"],"bugzilla":"1790951","bugzilla_description":"CVE-2020-2655 OpenJDK: Incorrect handling of unexpected CertificateVerify TLS handshake messages (JSSE, 8231780)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":["java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-11-openjdk-1:11.0.6.10-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2655.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-2654","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0122","RHSA-2020:0232","RHSA-2020:2236","RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0541","RHSA-2020:0196","RHSA-2020:2241","RHSA-2020:0632","RHSA-2020:2239","RHSA-2020:0202","RHSA-2020:2237","RHSA-2020:0128","RHSA-2020:2238"],"bugzilla":"1791217","bugzilla_description":"CVE-2020-2654 OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-11-openjdk-1:11.0.6.10-1.el7_7","java-11-openjdk-1:11.0.6.10-0.el8_0","java-11-openjdk-1:11.0.6.10-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2654.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2020-2659","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:0231","RHSA-2020:0157","RHSA-2020:0465","RHSA-2020:0541","RHSA-2020:0470","RHSA-2020:0196","RHSA-2020:0856","RHSA-2020:0632","RHSA-2020:0467","RHSA-2020:0202","RHSA-2020:0469","RHSA-2020:0468"],"bugzilla":"1791284","bugzilla_description":"CVE-2020-2659 OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7","java-1.8.0-ibm-1:1.8.0.6.5-1.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7","java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10","java-1.7.1-ibm-1:1.7.1.4.60-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1","java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10","java-1.8.0-ibm-1:1.8.0.6.5-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2659.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2964","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760963","bugzilla_description":"CVE-2019-2964 OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2964.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2975","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:4115","RHSA-2020:0006"],"bugzilla":"1760969","bugzilla_description":"CVE-2019-2975 OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2019-2973","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760978","bugzilla_description":"CVE-2019-2973 OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2981","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760980","bugzilla_description":"CVE-2019-2981 OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2999","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760992","bugzilla_description":"CVE-2019-2999 OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-2988","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1760999","bugzilla_description":"CVE-2019-2988 OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2988.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2977","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3135"],"bugzilla":"1761002","bugzilla_description":"CVE-2019-2977 OpenJDK: Out of bounds access in optimized String indexof implementation (Hotspot, 8224062)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["java-11-openjdk-1:11.0.5.10-0.el8_0","java-11-openjdk-1:11.0.5.10-0.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2977.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2978","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761006","bugzilla_description":"CVE-2019-2978 OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2992","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761146","bugzilla_description":"CVE-2019-2992 OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2987","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158"],"bugzilla":"1761149","bugzilla_description":"CVE-2019-2987 OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2987.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2983","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761262","bugzilla_description":"CVE-2019-2983 OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2983.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2962","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761266","bugzilla_description":"CVE-2019-2962 OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2962.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2949","severity":"important","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2019:3134","RHSA-2019:3135","RHSA-2019:3136","RHSA-2020:2241","RHSA-2020:2239","RHSA-2020:2237"],"bugzilla":"1761594","bugzilla_description":"CVE-2019-2949 OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2949.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-2945","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761596","bugzilla_description":"CVE-2019-2945 OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2945.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2019-2989","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:3127","RHSA-2019:3128","RHSA-2020:0046","RHSA-2019:4113","RHSA-2019:3134","RHSA-2019:3157","RHSA-2019:3135","RHSA-2019:3136","RHSA-2019:3158","RHSA-2019:4115","RHSA-2019:4110","RHSA-2020:0006","RHSA-2019:4109"],"bugzilla":"1761601","bugzilla_description":"CVE-2019-2989 OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10","java-11-openjdk-1:11.0.5.10-0.el8_0","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0","java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7","java-11-openjdk-1:11.0.5.10-0.el7_7","java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7","java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2989.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-2958","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777929","bugzilla_description":"CVE-2019-2958 OpenJDK: Incorrect escaping of command line arguments in ProcessImpl on Windows (Libraries, 8221858)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2958.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2933","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777981","bugzilla_description":"CVE-2019-2933 OpenJDK: FilePermission checks not preformed correctly on Windows (Libraries, 8213429)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2894","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1777985","bugzilla_description":"CVE-2019-2894 OpenJDK: Side-channel vulnerability in the ECDSA implementation (Security, 8228825)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2894.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-2769","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730056","bugzilla_description":"CVE-2019-2769 OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2769.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2818","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1810","RHSA-2019:1817"],"bugzilla":"1730078","bugzilla_description":"CVE-2019-2818 OpenJDK: Non-constant time comparison in ChaCha20Cipher (Security, 8221344)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-11-openjdk-1:11.0.4.11-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2816","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730099","bugzilla_description":"CVE-2019-2816 OpenJDK: Missing URL format validation (Networking, 8221518)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-2842","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1840","RHSA-2019:1811","RHSA-2019:1839","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730110","bugzilla_description":"CVE-2019-2842 OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2842.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-2821","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1810","RHSA-2019:1817"],"bugzilla":"1730251","bugzilla_description":"CVE-2019-2821 OpenJDK: Incorrect handling of certificate status messages during TLS handshake (JSSE, 8222678)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-11-openjdk-1:11.0.4.11-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2821.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2786","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:1840","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:2592","RHSA-2019:1816","RHSA-2019:1815","RHSA-2019:2590"],"bugzilla":"1730255","bugzilla_description":"CVE-2019-2786 OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2745","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:1840","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730411","bugzilla_description":"CVE-2019-2745 OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2745.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2019-2762","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1840","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:2590","RHSA-2019:2737","RHSA-2019:1811","RHSA-2019:1810","RHSA-2019:1839","RHSA-2019:1817","RHSA-2019:1816","RHSA-2019:1815"],"bugzilla":"1730415","bugzilla_description":"CVE-2019-2762 OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.4.11-0.el8_0","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el6_10","java-1.7.0-openjdk-1:1.7.0.231-2.6.19.1.el7_6","java-11-openjdk-1:11.0.4.11-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el7_6","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el6_10","java-1.8.0-openjdk-1:1.8.0.222.b10-0.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2766","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730459","bugzilla_description":"CVE-2019-2766 OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2602","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700440","bugzilla_description":"CVE-2019-2602 OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2602.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2698","severity":"important","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1238","RHSA-2019:1163"],"bugzilla":"1700447","bugzilla_description":"CVE-2019-2698 OpenJDK: Font layout engine out of bounds access setCurrGlyphID() (2D, 8219022)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2684","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:1166","RHSA-2019:0790","RHSA-2019:1165","RHSA-2019:0791","RHSA-2019:1164","RHSA-2019:0774","RHSA-2019:1325","RHSA-2019:0775","RHSA-2019:1146","RHSA-2019:1163","RHSA-2019:0778","RHSA-2019:1238","RHSA-2019:1518"],"bugzilla":"1700564","bugzilla_description":"CVE-2019-2684 OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el6_10","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el7_6","java-11-openjdk-1:11.0.3.7-2.el8_0","java-11-openjdk-1:11.0.3.7-0.el7_6","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.45-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.212.b04-1.el8_0","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el6_10","java-1.7.0-openjdk-1:1.7.0.221-2.6.18.0.el7_6","java-1.8.0-ibm-1:1.8.0.5.35-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.212.b04-0.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2684.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2422","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:0462","RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0464","RHSA-2019:0640","RHSA-2019:0416","RHSA-2019:0435","RHSA-2019:0469","RHSA-2019:0436","RHSA-2019:1238"],"bugzilla":"1665945","bugzilla_description":"CVE-2019-2422 OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["java-11-openjdk-1:11.0.2.7-0.el7_6","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el6_10","java-1.7.0-openjdk-1:1.7.0.211-2.6.17.1.el7_6","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","java-1.8.0-openjdk-1:1.8.0.201.b09-1.el6_10","java-1.8.0-openjdk-1:1.8.0.201.b09-0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2422.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2426","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":[],"bugzilla":"1665953","bugzilla_description":"CVE-2019-2426 OpenJDK: transparent NTLM authentication enabled by default (Networking, 8209094)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2426.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-3183","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:2943","RHSA-2018:2942","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002"],"bugzilla":"1639268","bugzilla_description":"CVE-2018-3183 OpenJDK: Unrestricted access to scripting engine (Scripting, 8202936)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-11-openjdk-1:11.0.1.13-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-3169","severity":"critical","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639293","bugzilla_description":"CVE-2018-3169 OpenJDK: Improper field access checks (Hotspot, 8199226)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3139","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639442","bugzilla_description":"CVE-2018-3139 OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3139.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3180","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639484","bugzilla_description":"CVE-2018-3180 OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-3136","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639755","bugzilla_description":"CVE-2018-3136 OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3136.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-3149","severity":"important","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3409","RHSA-2018:2943","RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:2942","RHSA-2018:3350","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3521","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1639834","bugzilla_description":"CVE-2018-3149 OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["java-1.7.0-openjdk-1:1.7.0.201-2.6.16.0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el6_10","java-1.8.0-openjdk-1:1.8.0.191.b12-0.el7_5","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-11-openjdk-1:11.0.1.13-3.el7_6","java-1.7.0-openjdk-1:1.7.0.201-2.6.16.1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3149.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3150","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3521"],"bugzilla":"1642321","bugzilla_description":"CVE-2018-3150 OpenJDK: Multi-Release attribute read from outside of the main manifest attributes (Utility, 8199171)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-11-openjdk-1:11.0.1.13-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3150.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-atk-wrapper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-atk-wrapper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java-atk-wrapper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java_cup-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java_cup-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java_cup-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java_cup-manual_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java_cup-manual_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java_cup-manual_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java_cup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java_cup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/java_cup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-demo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-demo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-demo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-manual_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-manual_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-manual_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-maven-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-maven-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-maven-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-maven-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-maven-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc-maven-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javacc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javamail-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javamail-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javamail-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javamail_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javamail_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javamail_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-local_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-local_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-local_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-runtime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-runtime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-runtime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javapackages-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javassist-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javassist-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javassist-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javassist_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javassist_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/javassist_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaxen-demo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaxen-demo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaxen-demo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaxen-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaxen-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaxen-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaxen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaxen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jaxen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jbig2dec-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jbig2dec-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jbig2dec-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jbigkit-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jbigkit-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jbigkit-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jbigkit-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jbigkit-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jbigkit-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-annotations-1.2-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-annotations-1.2-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-annotations-1.2-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-interceptors-1.2-api-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-interceptors-1.2-api-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-interceptors-1.2-api-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-interceptors-1.2-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-interceptors-1.2-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-interceptors-1.2-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-jaxrs-2.0-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-jaxrs-2.0-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-jaxrs-2.0-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-logging-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-logging-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-logging-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-logging_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-logging_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-logging_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jboss-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jcl-over-slf4j_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jcl-over-slf4j_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jcl-over-slf4j_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdeparser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdeparser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdeparser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdepend-demo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdepend-demo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdepend-demo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdepend-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdepend-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdepend-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdepend_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdepend_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdepend_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdependency-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdependency-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdependency-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdependency_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdependency_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdependency_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom-demo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom-demo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom-demo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom2-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom2-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom2-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jdom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jflex-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jflex-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jflex-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jflex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jflex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jflex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jimtcl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jimtcl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jimtcl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jimtcl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jimtcl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jimtcl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jline-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jline-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jline-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jline_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jline_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jline_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jmc-core-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jmc-core-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jmc-core-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jmc-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jmc-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jmc-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jmc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jmc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jmc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jna_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jna_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jna_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jolokia-jvm-agent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jolokia-jvm-agent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jolokia-jvm-agent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jomolhari-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jomolhari-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jomolhari-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jose_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jose_security_api_results.json
new file mode 100644
index 0000000..1832a42
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jose_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17195","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:1308"],"bugzilla":"1764791","bugzilla_description":"CVE-2019-17195 nimbus-jose-jwt: Uncaught exceptions while parsing a JWT","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["rhvm-dependencies-0:4.3.2-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jq_security_api_results.json
new file mode 100644
index 0000000..3f9b2ae
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jq_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-16012","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":["RHSA-2018:0501","RHSA-2020:0983"],"bugzilla":"1591854","bugzilla_description":"CVE-2017-16012 js-jquery: XSS in responses from cross-origin ajax requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2016-7103","severity":"low","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2017:0161","RHSA-2016:2933","RHSA-2016:2932"],"bugzilla":"1360286","bugzilla_description":"CVE-2016-7103 jquery-ui: cross-site scripting in dialog closeText","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-XStatic-jquery-ui-0:1.12.0.1-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7103.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-4074","severity":"low","public_date":"2016-04-24T00:00:00Z","advisories":[],"bugzilla":"1329982","bugzilla_description":"CVE-2016-4074 jq: stack exhaustion via jv_dump_term() function","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4074.json"},{"CVE":"CVE-2015-8863","severity":"moderate","public_date":"2015-10-18T00:00:00Z","advisories":["RHSA-2016:1099","RHSA-2016:1098","RHSA-2016:1106"],"bugzilla":"1328747","bugzilla_description":"CVE-2015-8863 jq: heap-buffer-overflow in tokenadd() function","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["jq-0:1.3-3.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8863.json"},{"CVE":"CVE-2015-9251","severity":"moderate","public_date":"2015-06-27T00:00:00Z","advisories":["RHSA-2020:0481","RHSA-2020:0729","RHSA-2020:3936","RHSA-2020:0983"],"bugzilla":"1399546","bugzilla_description":"CVE-2015-9251 js-jquery: Cross-site scripting via cross-domain ajax requests","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2015-1840","severity":"moderate","public_date":"2015-06-16T00:00:00Z","advisories":[],"bugzilla":"1233334","bugzilla_description":"CVE-2015-1840 rubygem-jquery-rails: CSRF Vulnerability in jquery-ujs and jquery-rails","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-212->CWE-201->CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1840.json"},{"CVE":"CVE-2014-6071","severity":null,"public_date":"2014-09-02T00:00:00Z","advisories":[],"bugzilla":"1136683","bugzilla_description":"CVE-2014-6071 jQuery: cross-site scripting flaw","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6071.json"},{"CVE":"CVE-2012-6662","severity":"moderate","public_date":"2012-11-27T00:00:00Z","advisories":["RHSA-2015:0442","RHSA-2015:1462"],"bugzilla":"1166064","bugzilla_description":"CVE-2012-6662 jquery-ui: XSS vulnerability in default content in Tooltip widget","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:3.0.0-47.el6","ipa-0:4.1.0-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6662.json"},{"CVE":"CVE-2010-5312","severity":"moderate","public_date":"2010-09-03T00:00:00Z","advisories":["RHSA-2015:0442","RHSA-2015:1462"],"bugzilla":"1166041","bugzilla_description":"CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:3.0.0-47.el6","ipa-0:4.1.0-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5312.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/js-uglify_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/js-uglify_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/js-uglify_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsch-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsch-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsch-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsch_security_api_results.json
new file mode 100644
index 0000000..aabdcaf
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsch_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-5725","severity":"low","public_date":"2016-08-31T00:00:00Z","advisories":["RHSA-2017:3115"],"bugzilla":"1375941","bugzilla_description":"CVE-2016-5725 jsch: ChannelSftp path traversal vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5725.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.2"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-c-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-c-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-c-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-c-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-c-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-c-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-c_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-c_security_api_results.json
new file mode 100644
index 0000000..707475e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-c_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12762","severity":"moderate","public_date":"2020-05-02T00:00:00Z","advisories":[],"bugzilla":"1835253","bugzilla_description":"CVE-2020-12762 json-c: integer overflow and out-of-bounds write via a large JSON file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12762.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2013-6371","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":["RHSA-2014:0703"],"bugzilla":"1032311","bugzilla_description":"CVE-2013-6371 json-c: hash collision DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["json-c-0:0.11-4.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6371.json"},{"CVE":"CVE-2013-6370","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":["RHSA-2014:0703"],"bugzilla":"1032322","bugzilla_description":"CVE-2013-6370 json-c: buffer overflow if size_t is larger than int","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["json-c-0:0.11-4.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6370.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-glib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-glib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-glib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/json-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsoup-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsoup-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsoup-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsoup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsoup_security_api_results.json
new file mode 100644
index 0000000..a5ef0a7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsoup_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-6748","severity":"moderate","public_date":"2015-08-27T00:00:00Z","advisories":["RHSA-2015:2560","RHSA-2015:2559"],"bugzilla":"1258310","bugzilla_description":"CVE-2015-6748 jsoup: XSS vulnerability related to incomplete tags at EOF","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6748.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsr-305-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsr-305-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsr-305-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsr-305_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsr-305_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jsr-305_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jss-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jss-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jss-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jss_security_api_results.json
new file mode 100644
index 0000000..bcc1c2a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jss_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14823","severity":"important","public_date":"2019-10-14T12:00:00Z","advisories":["RHSA-2019:3225","RHSA-2019:3067"],"bugzilla":"1747435","bugzilla_description":"CVE-2019-14823 JSS: OCSP policy \"Leaf and Chain\" implicitly trusts the root certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["jss-0:4.4.4-6.el7_6","jss-0:4.4.6-3.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jtidy-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jtidy-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jtidy-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jtidy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jtidy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jtidy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jul-to-slf4j_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jul-to-slf4j_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jul-to-slf4j_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/julietaula-montserrat-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/julietaula-montserrat-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/julietaula-montserrat-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/junit-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/junit-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/junit-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/junit-manual_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/junit-manual_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/junit-manual_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/junit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/junit_security_api_results.json
new file mode 100644
index 0000000..bad7339
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/junit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15250","severity":"low","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1887810","bugzilla_description":"CVE-2020-15250 junit4: TemporaryFolder is shared between all users across system which could result in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15250.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-1000411","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":[],"bugzilla":"1639388","bugzilla_description":"CVE-2018-1000411 jenkins-plugin-junit: CSRF due to URL not requiring POST requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000411.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-1000056","severity":"moderate","public_date":"2018-02-05T00:00:00Z","advisories":[],"bugzilla":"1542723","bugzilla_description":"CVE-2018-1000056 jenkins-plugin-junit: XML External Entity (XXE) via a maliciously crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jvnet-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jvnet-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jvnet-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jzlib-demo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jzlib-demo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jzlib-demo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jzlib-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jzlib-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jzlib-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jzlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jzlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/jzlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kabi-dw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kabi-dw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kabi-dw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-art-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-art-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-art-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-book-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-book-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-book-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-decorative-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-decorative-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-decorative-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-digital-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-digital-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-digital-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-farsi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-farsi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-farsi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-letter-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-letter-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-letter-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-naskh-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-naskh-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-naskh-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-office-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-office-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-office-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-one-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-one-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-one-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-pen-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-pen-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-pen-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-poster-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-poster-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-poster-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-qurn-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-qurn-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-qurn-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-screen-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-screen-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-screen-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-title-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-title-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-title-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-titlel-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-titlel-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kacst-titlel-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kbd-legacy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kbd-legacy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kbd-legacy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kbd-misc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kbd-misc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kbd-misc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kbd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kbd_security_api_results.json
new file mode 100644
index 0000000..99fba66
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kbd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-0460","severity":"moderate","public_date":"2011-04-18T00:00:00Z","advisories":[],"bugzilla":"722876","bugzilla_description":"CVE-2011-0460 kbd: /etc/init.d/kbd dumps state to /dev/shm/defkeymap.map on shutdown","cvss_score":6.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0460.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kdump-anaconda-addon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kdump-anaconda-addon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kdump-anaconda-addon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keepalived_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keepalived_security_api_results.json
new file mode 100644
index 0000000..7b075ee
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keepalived_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19044","severity":"moderate","public_date":"2018-11-08T00:00:00Z","advisories":["RHSA-2019:2285"],"bugzilla":"1651863","bugzilla_description":"CVE-2018-19044 keepalived: Improper pathname validation allows for overwrite of arbitrary filenames via symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["keepalived-0:1.3.5-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19044.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-19045","severity":"moderate","public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1651866","bugzilla_description":"CVE-2018-19045 keepalived: Insecure permissions when creating new temporary files allows for leaking of sensitive data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19045.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-19046","severity":"moderate","public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1651869","bugzilla_description":"CVE-2018-19046 keepalived: Insecure use of temporary files allows attackers read sensitive information from pre-existing files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19046.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-19115","severity":"important","public_date":"2018-11-08T00:00:00Z","advisories":["RHSA-2019:0022","RHSA-2019:1792","RHSA-2019:1945"],"bugzilla":"1651871","bugzilla_description":"CVE-2018-19115 keepalived: Heap-based buffer overflow when parsing HTTP status codes allows for denial of service or possibly arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["keepalived-0:1.3.5-1.el7_4.1","keepalived-0:1.3.5-8.el7_6","keepalived-0:1.3.5-7.el7_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-abi-whitelists_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-abi-whitelists_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-abi-whitelists_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-cross-headers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-cross-headers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-cross-headers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-modules-extra_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-modules-extra_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-modules-extra_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-headers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-headers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-headers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-modules-extra_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-modules-extra_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-modules-extra_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-rpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-rpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-rpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-tools-libs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-tools-libs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-tools-libs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-tools-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-tools-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-tools-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-modules-extra_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-modules-extra_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-modules-extra_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel-zfcpdump_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel_security_api_results.json
new file mode 100644
index 0000000..df5651c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernel_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-25656","severity":"moderate","public_date":"2020-10-16T00:00:00Z","advisories":[],"bugzilla":"1888726","bugzilla_description":"CVE-2020-25656 kernel: use-after-free in read in vt_do_kdgkb_ioctl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25656.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12351","severity":"important","public_date":"2020-10-14T00:00:00Z","advisories":["RHSA-2020:4279","RHSA-2020:4278","RHSA-2020:4289","RHSA-2020:4277","RHSA-2020:4288","RHSA-2020:4276","RHSA-2020:4287","RHSA-2020:4286","RHSA-2020:4281","RHSA-2020:4280"],"bugzilla":"1886521","bugzilla_description":"CVE-2020-12351 kernel: net: bluetooth: type confusion while processing AMP packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["kernel-0:4.18.0-147.32.1.el8_1","kernel-0:3.10.0-1062.37.1.el7","kernel-rt-0:4.18.0-193.28.1.rt13.77.el8_2","kernel-alt-0:4.14.0-115.32.1.el7a","kernel-0:3.10.0-1160.2.2.el7","kernel-0:4.18.0-193.28.1.el8_2","kernel-0:3.10.0-957.61.2.el7","kernel-rt-0:3.10.0-1160.2.2.rt56.1134.el7","kernel-0:3.10.0-693.77.1.el7","kernel-0:4.18.0-80.30.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12351.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12352","severity":"moderate","public_date":"2020-10-14T00:00:00Z","advisories":["RHSA-2020:4279","RHSA-2020:4278","RHSA-2020:4289","RHSA-2020:4277","RHSA-2020:4288","RHSA-2020:4276","RHSA-2020:4287","RHSA-2020:4286","RHSA-2020:4281","RHSA-2020:4280"],"bugzilla":"1886529","bugzilla_description":"CVE-2020-12352 kernel: net: bluetooth: information leak when processing certain AMP packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284->CWE-201","affected_packages":["kernel-0:4.18.0-147.32.1.el8_1","kernel-0:3.10.0-1062.37.1.el7","kernel-rt-0:4.18.0-193.28.1.rt13.77.el8_2","kernel-alt-0:4.14.0-115.32.1.el7a","kernel-0:3.10.0-1160.2.2.el7","kernel-0:4.18.0-193.28.1.el8_2","kernel-0:3.10.0-957.61.2.el7","kernel-rt-0:3.10.0-1160.2.2.rt56.1134.el7","kernel-0:3.10.0-693.77.1.el7","kernel-0:4.18.0-80.30.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12352.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-24490","severity":"moderate","public_date":"2020-10-14T00:00:00Z","advisories":[],"bugzilla":"1888449","bugzilla_description":"CVE-2020-24490 kernel: net: bluetooth: heap buffer overflow when processing extended advertising report events","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24490.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-16119","severity":"important","public_date":"2020-10-13T17:00:00Z","advisories":[],"bugzilla":"1886374","bugzilla_description":"CVE-2020-16119 kernel: DCCP CCID structure use-after-free may lead to DoS or code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16119.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-16120","severity":"moderate","public_date":"2020-10-13T17:00:00Z","advisories":[],"bugzilla":"1886387","bugzilla_description":"CVE-2020-16120 kernel: incorrect unprivileged overlayfs permission checking may lead to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16120.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2020-27194","severity":"moderate","public_date":"2020-10-08T00:00:00Z","advisories":[],"bugzilla":"1889477","bugzilla_description":"CVE-2020-27194 kernel: bounds tracking issue during use of 64-bit values in scalar32_min_max_or function in kernel/bpf/verifier.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27194.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2020-25641","severity":"moderate","public_date":"2020-09-30T00:24:00Z","advisories":[],"bugzilla":"1881424","bugzilla_description":"CVE-2020-25641 kernel: soft-lockups in iov_iter_copy_from_user_atomic() could result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25641.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-25643","severity":"moderate","public_date":"2020-09-25T00:00:00Z","advisories":[],"bugzilla":"1879981","bugzilla_description":"CVE-2020-25643 kernel: improper input validation in ppp_cp_parse_cr function leads to memory corruption and read overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25643.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2020-25603","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1877366","bugzilla_description":"CVE-2020-25603 xen: missing memory barriers when accessing/allocating an event channel (XSA-340)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25603.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-25595","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1877369","bugzilla_description":"CVE-2020-25595 xen: PCI passthrough code reading back hardware registers (XSA-337)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25595.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-25601","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1877378","bugzilla_description":"CVE-2020-25601 xen: lack of preemption in evtchn_reset() / evtchn_destroy() (XSA-344)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25601.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.0"},{"CVE":"CVE-2020-25604","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1877382","bugzilla_description":"CVE-2020-25604 xen: race when migrating timers between x86 HVM vCPU-s (XSA-336)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25604.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2020-25598","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1877383","bugzilla_description":"CVE-2020-25598 xen: missing unlock in XENMEM_acquire_resource error path (XSA-334)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25598.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-25597","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1879553","bugzilla_description":"CVE-2020-25597 xen: once valid event channels may not turn invalid (XSA-338)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25597.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-25599","severity":"important","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1879567","bugzilla_description":"CVE-2020-25599 xen: races with evtchn_reset function (XSA-343)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440->(CWE-125|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25599.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-25596","severity":"low","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1880137","bugzilla_description":"CVE-2020-25596 xen: x86 pv guest kernel DoS via SYSENTER (XSA-339)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25596.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2020-25600","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1880156","bugzilla_description":"CVE-2020-25600 xen: out of bounds event channels available to 32-bit x86 domains (XSA-342)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25600.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-25602","severity":"moderate","public_date":"2020-09-22T12:00:00Z","advisories":[],"bugzilla":"1880158","bugzilla_description":"CVE-2020-25602 xen: x86 pv: Crash when handling guest access to MSR_MISC_ENABLE (XSA-333)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25602.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-25645","severity":"moderate","public_date":"2020-09-16T00:00:00Z","advisories":[],"bugzilla":"1883988","bugzilla_description":"CVE-2020-25645 kernel: Geneve/IPsec traffic may be unencrypted between two Geneve endpoints","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25645.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-14390","severity":"low","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1876788","bugzilla_description":"CVE-2020-14390 kernel: out-of-bounds write in fbcon_redraw_softback","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14390.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2020-26541","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1886285","bugzilla_description":"CVE-2020-26541 kernel: security bypass in certs/blacklist.c and certs/system_keyring.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26541.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-25285","severity":"moderate","public_date":"2020-09-13T00:00:00Z","advisories":[],"bugzilla":"1882591","bugzilla_description":"CVE-2020-25285 kernel: race condition between hugetlb sysctl handlers in mm/hugetlb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25285.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-25284","severity":"moderate","public_date":"2020-09-13T00:00:00Z","advisories":[],"bugzilla":"1882594","bugzilla_description":"CVE-2020-25284 kernel: incomplete permission checking for access to rbd devices","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25284.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2020-15802","severity":"moderate","public_date":"2020-09-10T14:00:00Z","advisories":[],"bugzilla":"1878021","bugzilla_description":"CVE-2020-15802 hardware: BLURtooth: \"Dual mode\" hardware using CTKD are vulnerable to key overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15802.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2020-25211","severity":"moderate","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877571","bugzilla_description":"CVE-2020-25211 kernel: Local buffer overflow in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25211.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-25212","severity":"moderate","public_date":"2020-09-09T00:00:00Z","advisories":["RHSA-2020:4279"],"bugzilla":"1877575","bugzilla_description":"CVE-2020-25212 kernel: TOCTOU mismatch in the NFS client code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":["kernel-alt-0:4.14.0-115.32.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25212.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-25221","severity":"moderate","public_date":"2020-09-08T00:00:00Z","advisories":[],"bugzilla":"1884341","bugzilla_description":"CVE-2020-25221 kernel: incorrect vsyscall page reference counting in get_gate_page function in mm/gup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25221.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-14386","severity":"important","public_date":"2020-09-03T00:00:00Z","advisories":["RHSA-2020:4289","RHSA-2020:4287","RHSA-2020:4286"],"bugzilla":"1875699","bugzilla_description":"CVE-2020-14386 kernel: memory corruption in net/packet/af_packet.c leads to elevation of privilege","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787->CWE-250","affected_packages":["kernel-0:4.18.0-147.32.1.el8_1","kernel-rt-0:4.18.0-193.28.1.rt13.77.el8_2","kernel-0:4.18.0-193.28.1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14386.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-25639","severity":"low","public_date":"2020-08-28T00:00:00Z","advisories":[],"bugzilla":"1876995","bugzilla_description":"CVE-2020-25639 kernel: NULL pointer dereference via nouveau ioctl can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25639.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-14385","severity":"important","public_date":"2020-08-25T09:00:00Z","advisories":["RHSA-2020:4289","RHSA-2020:4287","RHSA-2020:4286"],"bugzilla":"1874800","bugzilla_description":"CVE-2020-14385 kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":["kernel-0:4.18.0-147.32.1.el8_1","kernel-rt-0:4.18.0-193.28.1.rt13.77.el8_2","kernel-0:4.18.0-193.28.1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14385.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2020-26088","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1882508","bugzilla_description":"CVE-2020-26088 kernel: missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c allows local attackers to create raw sockets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26088.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-27152","severity":"moderate","public_date":"2020-08-02T00:00:00Z","advisories":[],"bugzilla":"1888886","bugzilla_description":"CVE-2020-27152 Kernel: KVM: host stack overflow due to lazy update IOAPIC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27152.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-10713","severity":"moderate","public_date":"2020-07-29T17:00:00Z","advisories":["RHSA-2020:3223","RHSA-2020:4115","RHSA-2020:3276","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3273","RHSA-2020:3271","RHSA-2020:4172","RHSA-2020:3216","RHSA-2020:3227","RHSA-2020:3217"],"bugzilla":"1825243","bugzilla_description":"CVE-2020-10713 grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787->CWE-78","affected_packages":["grub2-1:2.02-0.86.el7_8","fwupd-0:1.1.4-7.el8_2","fwupdate-0:12-6.el7_8","grub2-1:2.02-87.el8_2","shim-0:15-14.el8_2","shim-0:15-7.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10713.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-14331","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:4289","RHSA-2020:4286"],"bugzilla":"1858679","bugzilla_description":"CVE-2020-14331 kernel: kernel: buffer over write in vgacon_scroll","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:4.18.0-193.28.1.rt13.77.el8_2","kernel-0:4.18.0-193.28.1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14331.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2020-25220","severity":"moderate","public_date":"2020-07-22T00:00:00Z","advisories":[],"bugzilla":"1877920","bugzilla_description":"CVE-2020-25220 kernel: use-after-free because skcd->no_refcnt was not considered during the backport of CVE-2020-14356","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25220.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-0305","severity":"moderate","public_date":"2020-07-17T00:00:00Z","advisories":[],"bugzilla":"1860065","bugzilla_description":"CVE-2020-0305 kernel: possible use-after-free due to a race condition in cdev_get of char_dev.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0305.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-15852","severity":"moderate","public_date":"2020-07-16T00:00:00Z","advisories":[],"bugzilla":"1856441","bugzilla_description":"CVE-2020-15852 xen: Linux ioperm bitmap context switching issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15852.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-15564","severity":"moderate","public_date":"2020-07-07T12:00:00Z","advisories":[],"bugzilla":"1851470","bugzilla_description":"CVE-2020-15564 xen: missing alignment check in VCPUOP_register_vcpu_info leads to DoS (XSA-327)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15564.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-15563","severity":"moderate","public_date":"2020-07-07T12:00:00Z","advisories":[],"bugzilla":"1851471","bugzilla_description":"CVE-2020-15563 xen: inverted code paths in x86 dirty VRAM tracking leads to DoS (XSA-319)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15563.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2020-15567","severity":"moderate","public_date":"2020-07-07T12:00:00Z","advisories":[],"bugzilla":"1851472","bugzilla_description":"CVE-2020-15567 xen: non-atomic modification of live EPT PTE leads to DoS (XSA-328)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15567.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15566","severity":"moderate","public_date":"2020-07-07T12:00:00Z","advisories":[],"bugzilla":"1851474","bugzilla_description":"CVE-2020-15566 xen: incorrect error handling in event channel port allocation leads to DoS (XSA-317)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-392","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15566.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2020-15565","severity":"moderate","public_date":"2020-07-07T12:00:00Z","advisories":[],"bugzilla":"1851475","bugzilla_description":"CVE-2020-15565 xen: insufficient cache write-back under VT-d leads to DoS (XSA-321)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15565.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.9"},{"CVE":"CVE-2020-14416","severity":"moderate","public_date":"2020-06-18T00:00:00Z","advisories":[],"bugzilla":"1849926","bugzilla_description":"CVE-2020-14416 kernel: slcan : race over tty->disc_data can lead use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14416.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2020-10781","severity":"low","public_date":"2020-06-17T07:37:00Z","advisories":[],"bugzilla":"1847832","bugzilla_description":"CVE-2020-10781 kernel: zram sysfs resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10781.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-10774","severity":"low","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1846964","bugzilla_description":"CVE-2020-10774 kernel: possibility of memory disclosure when reading the file /proc/sys/kernel/rh_features","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10774.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-15780","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3218","RHSA-2020:3219","RHSA-2020:3228"],"bugzilla":"1852962","bugzilla_description":"CVE-2020-15780 kernel: lockdown: bypass through ACPI write via acpi_configfs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-193.14.3.rt13.67.el8_2","kernel-0:4.18.0-80.27.2.el8_0","kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.14.3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15780.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-0543","severity":"moderate","public_date":"2020-06-09T17:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1827165","bugzilla_description":"CVE-2020-0543 hw: Special Register Buffer Data Sampling (SRBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0543.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-10766","severity":"important","public_date":"2020-06-09T17:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845840","bugzilla_description":"CVE-2020-10766 kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10766.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10136","severity":"moderate","public_date":"2020-06-09T14:00:00Z","advisories":[],"bugzilla":"1829625","bugzilla_description":"CVE-2020-10136 kernel: IP-in-IP protocol routes arbitrary traffic by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10136.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10767","severity":"important","public_date":"2020-06-09T14:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845867","bugzilla_description":"CVE-2020-10767 kernel: Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10767.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10768","severity":"important","public_date":"2020-06-09T14:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3297","RHSA-2020:3041","RHSA-2020:3073"],"bugzilla":"1845868","bugzilla_description":"CVE-2020-10768 kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.27.1.el8_0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10768.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-14305","severity":"moderate","public_date":"2020-06-09T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1850716","bugzilla_description":"CVE-2020-14305 kernel: memory corruption in Voice over IP nf_conntrack_h323 module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14305.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-13844","severity":"moderate","public_date":"2020-06-07T14:00:00Z","advisories":[],"bugzilla":"1848279","bugzilla_description":"CVE-2020-13844 kernel: ARM straight-line speculation vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13844.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-14314","severity":"moderate","public_date":"2020-06-05T16:45:00Z","advisories":[],"bugzilla":"1853922","bugzilla_description":"CVE-2020-14314 kernel: buffer uses out of index in ext3/4 filesystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14314.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-24394","severity":"moderate","public_date":"2020-06-05T00:00:00Z","advisories":[],"bugzilla":"1869141","bugzilla_description":"CVE-2020-24394 kernel: umask not applied on filesystem without ACL support","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24394.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2020-10757","severity":"important","public_date":"2020-06-04T09:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHBA-2020:3180","RHSA-2020:3598","RHSA-2020:3221","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:3041"],"bugzilla":"1842525","bugzilla_description":"CVE-2020-10757 kernel: kernel: DAX hugepages not considered during mremap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-1062.33.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10757.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-20810","severity":"moderate","public_date":"2020-06-03T00:00:00Z","advisories":[],"bugzilla":"1850249","bugzilla_description":"CVE-2019-20810 kernel: go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path, which causes a memory leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20810.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-15393","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":[],"bugzilla":"1852584","bugzilla_description":"CVE-2020-15393 kernel: memory leak in usbtest_disconnect function in drivers/usb/misc/usbtest.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15393.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2020-14356","severity":"moderate","public_date":"2020-05-31T12:00:00Z","advisories":[],"bugzilla":"1868453","bugzilla_description":"CVE-2020-14356 kernel: Use After Free vulnerability in cgroup BPF component","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14356.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-10135","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1832397","bugzilla_description":"CVE-2020-10135 kernel: bluetooth: BR/EDR Bluetooth Impersonation Attacks (BIAS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10135.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-14304","severity":"low","public_date":"2020-05-15T00:00:00Z","advisories":[],"bugzilla":"1847539","bugzilla_description":"CVE-2020-14304 kernel: ethtool when reading eeprom of device could lead to memory leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14304.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12888","severity":"important","public_date":"2020-05-14T00:00:00Z","advisories":["RHSA-2020:2664","RHSA-2020:2851","RHSA-2020:3016","RHSA-2020:2665","RHSA-2020:3222","RHSA-2020:3230","RHSA-2020:3010","RHSA-2020:2831","RHSA-2020:2854","RHSA-2020:2832","RHSA-2020:3019","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1836244","bugzilla_description":"CVE-2020-12888 Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":["kernel-0:3.10.0-693.71.2.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-957.56.1.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-1062.30.1.el7","kernel-0:3.10.0-1127.13.1.el7","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-327.89.1.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:3.10.0-1127.13.1.rt56.1110.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12888.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-10742","severity":"moderate","public_date":"2020-05-13T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1835127","bugzilla_description":"CVE-2020-10742 kernel: NFS client crash due to index buffer overflow during Direct IO write causing kernel panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10742.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"6.0"},{"CVE":"CVE-2020-10711","severity":"important","public_date":"2020-05-12T12:00:00Z","advisories":["RHSA-2020:2103","RHSA-2020:2125","RHSA-2020:2104","RHSA-2020:2214","RHSA-2020:2522","RHSA-2020:2203","RHSA-2020:2277","RHSA-2020:2289","RHSA-2020:2102","RHSA-2020:2242","RHSA-2020:2199","RHSA-2020:2285","RHSA-2020:2519","RHSA-2020:2429","RHBA-2020:3180","RHSA-2020:2085","RHSA-2020:2082","RHSA-2020:2291","RHSA-2020:2171"],"bugzilla":"1825116","bugzilla_description":"CVE-2020-10711 Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-514.76.1.el7","kernel-0:4.18.0-193.1.2.el8_2","kernel-rt-1:3.10.0-693.67.1.rt56.665.el6rt","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:3.10.0-327.88.1.el7","kernel-0:2.6.32-754.29.2.el6","kernel-rt-0:3.10.0-1127.8.2.rt56.1103.el7","kernel-0:3.10.0-1062.26.1.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-957.54.1.el7","kernel-rt-0:4.18.0-193.1.2.rt13.53.el8_2","kernel-0:3.10.0-1127.8.2.el7","kernel-0:3.10.0-693.67.1.el7","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10711.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-10741","severity":"moderate","public_date":"2020-05-12T05:40:00Z","advisories":[],"bugzilla":"1822077","bugzilla_description":"CVE-2020-10741 kernel: possible to send arbitrary signals to a privileged (suidroot) parent process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10741.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2020-12826","severity":"moderate","public_date":"2020-05-12T05:40:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1822077","bugzilla_description":"CVE-2020-12826 kernel: possible to send arbitrary signals to a privileged (suidroot) parent process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12826.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-20794","severity":"moderate","public_date":"2020-05-09T00:00:00Z","advisories":[],"bugzilla":"1849005","bugzilla_description":"CVE-2019-20794 kernel: task processes not being properly ended could lead to resource exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20794.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2020-14381","severity":"moderate","public_date":"2020-05-07T19:00:00Z","advisories":[],"bugzilla":"1874311","bugzilla_description":"CVE-2020-14381 kernel: referencing inode of removed superblock in get_futex_key() causes UAF","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14381.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-0110","severity":"low","public_date":"2020-05-07T00:00:00Z","advisories":[],"bugzilla":"1836936","bugzilla_description":"CVE-2020-0110 kernel: out of bound write when writing 0 bytes to PSI files which could result in local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0110.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12656","severity":"low","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1832860","bugzilla_description":"CVE-2020-12656 kernel: gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation lacks certain domain_release calls, leading to a memory leak.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12656.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-12657","severity":"important","public_date":"2020-05-05T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2428","RHSA-2020:2429","RHSA-2020:2427","RHSA-2020:2669","RHSA-2020:2567","RHSA-2020:2667"],"bugzilla":"1832866","bugzilla_description":"CVE-2020-12657 kernel: use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-147.20.1.el8_1","kernel-rt-0:4.18.0-193.6.3.rt13.59.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.6.3.el8_2","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12657.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-12659","severity":"moderate","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1832876","bugzilla_description":"CVE-2020-12659 kernel: xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write which could result in crash and data coruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12659.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-12114","severity":"moderate","public_date":"2020-05-04T00:00:00Z","advisories":[],"bugzilla":"1848652","bugzilla_description":"CVE-2020-12114 kernel: DoS by corrupting mountpoint reference counter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12114.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-10732","severity":"moderate","public_date":"2020-05-01T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1831399","bugzilla_description":"CVE-2020-10732 kernel: uninitialized kernel data leak in userspace coredumps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10732.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2020-13143","severity":"low","public_date":"2020-04-30T00:00:00Z","advisories":[],"bugzilla":"1846382","bugzilla_description":"CVE-2020-13143 kernel: usb: gadget: illegal array access in binding with UDC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13143.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.0"},{"CVE":"CVE-2020-11884","severity":"important","public_date":"2020-04-28T18:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2102","RHSA-2020:2199","RHSA-2020:2429"],"bugzilla":"1828149","bugzilla_description":"CVE-2020-11884 Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1251","affected_packages":["kernel-0:4.18.0-193.1.2.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11884.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-10751","severity":"moderate","public_date":"2020-04-27T14:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1839634","bugzilla_description":"CVE-2020-10751 kernel: SELinux netlink permission check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-349","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10751.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-12771","severity":"low","public_date":"2020-04-26T00:00:00Z","advisories":[],"bugzilla":"1834862","bugzilla_description":"CVE-2020-12771 kernel: deadlock if a coalescing operation fails in btree_gc_coalesce function in drivers/md/bcache/btree.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-833","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12771.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2020-0067","severity":"moderate","public_date":"2020-04-17T05:01:00Z","advisories":[],"bugzilla":"1848847","bugzilla_description":"CVE-2020-0067 kernel: out of bounds read due to a missing bounds check in f2fs_xattr_generic_list of xattr.c leading to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0067.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-10708","severity":"moderate","public_date":"2020-04-17T00:00:00Z","advisories":[],"bugzilla":"1822593","bugzilla_description":"CVE-2020-10708 kernel: race condition in kernel/audit.c may allow low privilege users trigger kernel panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10708.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-11739","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1823783","bugzilla_description":"CVE-2020-11739 xen: missing memory barriers in read-write unlock paths (XSA-314)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11739.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2020-11740","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1823911","bugzilla_description":"CVE-2020-11740 xen: xenoprof issue allows guest OS users without active profiling to obtain sensitive information about other guests (XSA-313)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11740.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-11741","severity":"important","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1823913","bugzilla_description":"CVE-2020-11741 xen: xenoprof issue allows guest OS users with active profiling to obtain sensitive information about other guests (XSA-313)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11741.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11743","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1823925","bugzilla_description":"CVE-2020-11743 xen: bad error path in GNTTABOP_map_grant (XSA-316)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11743.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-11742","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1823942","bugzilla_description":"CVE-2020-11742 xen: bad continuation handling in GNTTABOP_copy (XSA-318)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11742.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-12770","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1834845","bugzilla_description":"CVE-2020-12770 kernel: sg_write function lacks an sg_remove_request call in a certain failure case","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401->CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12770.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-11725","severity":"moderate","public_date":"2020-04-12T00:00:00Z","advisories":[],"bugzilla":"1824923","bugzilla_description":"CVE-2020-11725 kernel: improper handling of private_size*count multiplication due to count=info->owner typo","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11725.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-11669","severity":"moderate","public_date":"2020-04-10T00:00:00Z","advisories":[],"bugzilla":"1824803","bugzilla_description":"CVE-2020-11669 kernel: powerpc: guest can cause DoS on POWER9 KVM hosts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11669.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-8834","severity":"important","public_date":"2020-04-06T16:00:00Z","advisories":["RHSA-2020:2854"],"bugzilla":"1819615","bugzilla_description":"CVE-2020-8834 Kernel: ppc: kvm: conflicting use of HSTATE_HOST_R1 to store r1 state leads to host stack corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["kernel-alt-0:4.14.0-115.26.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8834.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.0"},{"CVE":"CVE-2019-20636","severity":"moderate","public_date":"2020-04-04T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2020:2854"],"bugzilla":"1824059","bugzilla_description":"CVE-2019-20636 kernel: out-of-bounds write via crafted keycode table","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20636.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-11565","severity":"moderate","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2020:2854"],"bugzilla":"1824918","bugzilla_description":"CVE-2020-11565 kernel: out-of-bounds write in mpol_parse_str function in mm/mempolicy.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11565.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.0"},{"CVE":"CVE-2020-11494","severity":"low","public_date":"2020-04-01T00:00:00Z","advisories":[],"bugzilla":"1826030","bugzilla_description":"CVE-2020-11494 kernel: transmission of uninitialized data allows attackers to read sensitive information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11494.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-8835","severity":"important","public_date":"2020-03-30T16:00:00Z","advisories":[],"bugzilla":"1817350","bugzilla_description":"CVE-2020-8835 kernel: out-of-bounds read/write in the bpf verifier","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8835.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-20806","severity":"moderate","public_date":"2020-03-29T00:00:00Z","advisories":[],"bugzilla":"1842547","bugzilla_description":"CVE-2019-20806 kernel: NULL pointer dereference in tw5864_handle_frame function in drivers/media/pci/tw5864/tw5864-video.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20806.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-8832","severity":"moderate","public_date":"2020-03-25T00:00:00Z","advisories":[],"bugzilla":"1817047","bugzilla_description":"CVE-2020-8832 kernel: incomplete fix for CVE-2019-14615 allows for a local information exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-112","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8832.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-12464","severity":"moderate","public_date":"2020-03-23T00:00:00Z","advisories":[],"bugzilla":"1831726","bugzilla_description":"CVE-2020-12464 kernel: use-after-free in usb_sg_cancel function in drivers/usb/core/message.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12464.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-10942","severity":"low","public_date":"2020-03-22T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1817718","bugzilla_description":"CVE-2020-10942 kernel: vhost-net: stack overflow in get_raw_socket while checking sk_family field","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-119","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10942.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-11608","severity":"low","public_date":"2020-03-12T00:00:00Z","advisories":[],"bugzilla":"1833445","bugzilla_description":"CVE-2020-11608 kernel: NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs in drivers/media/usb/gspca/ov519.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11608.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2020-0550","severity":"moderate","public_date":"2020-03-10T17:20:00Z","advisories":[],"bugzilla":"1810359","bugzilla_description":"CVE-2020-0550 hw: Snoop-Assisted L1D Sampling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440->CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0550.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2020-10255","severity":"important","public_date":"2020-03-10T15:00:00Z","advisories":[],"bugzilla":"1812088","bugzilla_description":"CVE-2020-10255 hw: dram: circumvent TRR to induce bit flips via Rowhammer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10255.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-0551","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":[],"bugzilla":"1753463","bugzilla_description":"CVE-2020-0551 hw: Load Value Injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440->CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0551.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2020-1749","severity":"moderate","public_date":"2020-03-04T01:29:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1809833","bugzilla_description":"CVE-2020-1749 kernel: some ipv6 protocols not encrypted over ipsec tunnel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1749.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-12465","severity":"moderate","public_date":"2020-03-03T00:00:00Z","advisories":[],"bugzilla":"1831699","bugzilla_description":"CVE-2020-12465 kernel: buffer overflow in mt76_add_fragment function in drivers/net/wireless/mediatek/mt76/dma.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12465.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-12655","severity":"low","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:3545"],"bugzilla":"1832543","bugzilla_description":"CVE-2020-12655 kernel: sync of excessive duration via an XFS v5 image with crafted metadata","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-835","affected_packages":["kernel-alt-0:4.14.0-115.29.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12655.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-9391","severity":"moderate","public_date":"2020-02-25T00:00:00Z","advisories":[],"bugzilla":"1814237","bugzilla_description":"CVE-2020-9391 kernel: brk discards top byte of addresses on aarch64 causing heap corruption in glibc malloc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9391.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-2732","severity":"moderate","public_date":"2020-02-24T18:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:2102","RHSA-2020:4062","RHSA-2020:2171","RHSA-2020:4060"],"bugzilla":"1805135","bugzilla_description":"CVE-2020-2732 Kernel: kvm: nVMX: L2 guest may trick the L0 hypervisor to access sensitive L1 resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-193.1.2.el8_2","kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-rt-0:4.18.0-193.1.2.rt13.53.el8_2","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2732.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.8"},{"CVE":"CVE-2020-9383","severity":"moderate","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1810685","bugzilla_description":"CVE-2020-9383 kernel: out-of-bounds read in set_fdc in drivers/block/floppy.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9383.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-12768","severity":"low","public_date":"2020-02-21T00:00:00Z","advisories":[],"bugzilla":"1834829","bugzilla_description":"CVE-2020-12768 kernel: memory leak in svm_cpu_init function in arch/x86/kvm/svm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12768.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"1.9"},{"CVE":"CVE-2011-0699","severity":"low","public_date":"2020-02-20T00:00:00Z","advisories":[],"bugzilla":"1816142","bugzilla_description":"CVE-2011-0699 kernel: integer signedness error in the btrfs_ioctl_space_info function could lead to a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0699.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2020-8992","severity":"low","public_date":"2020-02-11T00:00:00Z","advisories":[],"bugzilla":"1805887","bugzilla_description":"CVE-2020-8992 kernel: soft lockup via a crafted journal size in ext4_protect_reserved_inode in fs/ext4/block_validity.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8992.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19581","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":[],"bugzilla":"1801083","bugzilla_description":"CVE-2019-19581 xen: bit iteration mishandling allows Arm guest OS users to cause a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19581.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-0030","severity":"important","public_date":"2020-02-03T00:00:00Z","advisories":[],"bugzilla":"1829841","bugzilla_description":"CVE-2020-0030 kernel: use after free due to a race condition in binder driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0030.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-3016","severity":"low","public_date":"2020-01-30T18:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3010"],"bugzilla":"1792167","bugzilla_description":"CVE-2019-3016 kernel: kvm: Information leak within a KVM guest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-200","affected_packages":["redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3016.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-8649","severity":"moderate","public_date":"2020-01-30T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1802555","bugzilla_description":"CVE-2020-8649 kernel: invalid read location in vgacon_invert_region function in drivers/video/console/vgacon.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8649.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-8648","severity":"moderate","public_date":"2020-01-30T00:00:00Z","advisories":[],"bugzilla":"1802559","bugzilla_description":"CVE-2020-8648 kernel: use-after-free in n_tty_receive_buf_common function in drivers/tty/n_tty.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8648.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-8647","severity":"moderate","public_date":"2020-01-30T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1802563","bugzilla_description":"CVE-2020-8647 kernel: out-of-bounds read in in vc_do_resize function in drivers/tty/vt/vt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8647.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2020-8428","severity":"moderate","public_date":"2020-01-28T00:00:00Z","advisories":[],"bugzilla":"1796939","bugzilla_description":"CVE-2020-8428 kernel: use-after-free in fs/namei.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8428.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-20422","severity":"moderate","public_date":"2020-01-27T00:00:00Z","advisories":[],"bugzilla":"1798708","bugzilla_description":"CVE-2019-20422 kernel: mishandling the RT6_LOOKUP_F_DST_NOREF flag in fib6_rule_lookup in net/ipv6/ip6_fib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20422.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-12653","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHSA-2020:3432","RHSA-2020:3224","RHSA-2020:3389","RHSA-2020:3221","RHSA-2020:3232","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:2832","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1831868","bugzilla_description":"CVE-2020-12653 kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in drivers/net/wireless/marvell/mwifiex/scan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-rt-1:3.10.0-693.72.1.rt56.672.el6rt","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","kernel-0:3.10.0-327.90.2.el7","kernel-0:3.10.0-693.72.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:3.10.0-1062.31.2.el7","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12653.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12654","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:3016","RHSA-2020:3226","RHSA-2020:3432","RHSA-2020:3224","RHSA-2020:3389","RHSA-2020:3221","RHSA-2020:3232","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:3220","RHSA-2020:2832","RHBA-2020:3180","RHSA-2020:3041"],"bugzilla":"1832530","bugzilla_description":"CVE-2020-12654 kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-1:3.10.0-693.72.1.rt56.672.el6rt","redhat-coreos-43.82.202007300301.0","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","kernel-0:4.18.0-80.27.1.el8_0","kernel-0:3.10.0-514.78.1.el7","kernel-0:4.18.0-147.24.2.el8_1","kernel-0:3.10.0-957.58.2.el7","kernel-0:3.10.0-327.90.2.el7","kernel-0:3.10.0-693.72.1.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:3.10.0-1062.31.2.el7","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12654.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-12652","severity":"low","public_date":"2020-01-15T00:00:00Z","advisories":[],"bugzilla":"1831849","bugzilla_description":"CVE-2020-12652 kernel: race condition in __mptctl_ioctl function in drivers/message/fusion/mptctl.c allows local users to hold an incorrect lock during the ioctl operation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12652.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-14615","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1789209","bugzilla_description":"CVE-2019-14615 kernel: Intel graphics card information leak.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14615.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-7053","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1795624","bugzilla_description":"CVE-2020-7053 kernel: use-after-free in i915_ppgtt_close in drivers/gpu/drm/i915/i915_gem_gtt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7053.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19947","severity":"moderate","public_date":"2020-01-06T00:00:00Z","advisories":[],"bugzilla":"1788039","bugzilla_description":"CVE-2019-19947 kernel: uninitialized memory allocation in drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c leading to information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19947.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-11668","severity":"moderate","public_date":"2020-01-03T00:00:00Z","advisories":[],"bugzilla":"1824792","bugzilla_description":"CVE-2020-11668 kernel: mishandles invalid descriptors in drivers/media/usb/gspca/xirlink_cit.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11668.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-11609","severity":"low","public_date":"2020-01-03T00:00:00Z","advisories":[],"bugzilla":"1833452","bugzilla_description":"CVE-2020-11609 kernel: NULL pointer dereference due to incorrect handling of invalid descriptors in stv06xx subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11609.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2020-12769","severity":"low","public_date":"2020-01-03T00:00:00Z","advisories":[],"bugzilla":"1834821","bugzilla_description":"CVE-2020-12769 kernel: DoS via concurrent calls to dw_spi_irq and dw_spi_transfer_one functions in drivers/spi/spi-dw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12769.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19927","severity":"moderate","public_date":"2019-12-31T00:00:00Z","advisories":[],"bugzilla":"1790044","bugzilla_description":"CVE-2019-19927 kernel: Out-of-bounds read in ttm_put_pages in gpu/drm/ttm/ttm_page_alloc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19927.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"6.0"},{"CVE":"CVE-2019-20095","severity":"low","public_date":"2019-12-30T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1791954","bugzilla_description":"CVE-2019-20095 kernel: memory leak in mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20095.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2019-20096","severity":"low","public_date":"2019-12-30T00:00:00Z","advisories":[],"bugzilla":"1791959","bugzilla_description":"CVE-2019-20096 kernel: memory leak in __feat_register_sp() in net/dccp/feat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20096.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-20054","severity":"low","public_date":"2019-12-28T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1790063","bugzilla_description":"CVE-2019-20054 kernel: Null pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20054.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-19966","severity":"low","public_date":"2019-12-24T00:00:00Z","advisories":[],"bugzilla":"1794399","bugzilla_description":"CVE-2019-19966 kernel: use-after-free in cpia2_exit in drivers/media/usb/cpia2/cpia2_v4l.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19966.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-19965","severity":"low","public_date":"2019-12-24T00:00:00Z","advisories":[],"bugzilla":"1794404","bugzilla_description":"CVE-2019-19965 kernel: NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19965.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19922","severity":"low","public_date":"2019-12-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1493","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1792512","bugzilla_description":"CVE-2019-19922 kernel: when cpu.cfs_quota_us is used allows attackers to cause a denial of service against non-cpu-bound applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19922.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19813","severity":"moderate","public_date":"2019-12-17T00:00:00Z","advisories":[],"bugzilla":"1784911","bugzilla_description":"CVE-2019-19813 kernel: use-after-free in __mutex_lock in kernel/locking/mutex.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19813.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19814","severity":"moderate","public_date":"2019-12-17T00:00:00Z","advisories":[],"bugzilla":"1784917","bugzilla_description":"CVE-2019-19814 kernel: out-of-bounds write in __remove_dirty_segment in fs/f2fs/segment.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19814.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-19815","severity":"moderate","public_date":"2019-12-17T00:00:00Z","advisories":[],"bugzilla":"1784920","bugzilla_description":"CVE-2019-19815 kernel: NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19815.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19816","severity":"moderate","public_date":"2019-12-17T00:00:00Z","advisories":[],"bugzilla":"1784923","bugzilla_description":"CVE-2019-19816 kernel: out-of-bounds write in __btrfs_map_block in fs/btrfs/volumes.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19816.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19578","severity":"important","public_date":"2019-12-11T00:00:00Z","advisories":[],"bugzilla":"1778161","bugzilla_description":"CVE-2019-19578 xen: privilege escalation due to malicious PV guest (XSA-309)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19578.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2019-19583","severity":"moderate","public_date":"2019-12-11T00:00:00Z","advisories":[],"bugzilla":"1778171","bugzilla_description":"CVE-2019-19583 xen: denial of service in HVM/PVH guest userspace code (XSA-308)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19583.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-19580","severity":"moderate","public_date":"2019-12-11T00:00:00Z","advisories":[],"bugzilla":"1778185","bugzilla_description":"CVE-2019-19580 xen: Further issues with restartable PV type change operations (XSA-310)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19580.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2019-19582","severity":"moderate","public_date":"2019-12-11T00:00:00Z","advisories":[],"bugzilla":"1778191","bugzilla_description":"CVE-2019-19582 xen: denial of service in find_next_bit() (XSA-307)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19582.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-19577","severity":"moderate","public_date":"2019-12-11T00:00:00Z","advisories":[],"bugzilla":"1778194","bugzilla_description":"CVE-2019-19577 xen: vulnerability in dynamic height handling for AMD IOMMU pagetables (XSA-311 v2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19577.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2019-5108","severity":"moderate","public_date":"2019-12-11T00:00:00Z","advisories":["RHSA-2020:1493"],"bugzilla":"1789927","bugzilla_description":"CVE-2019-5108 kernel: triggering AP to send IAPP location updates for stations before the required authentication process has completed can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":["kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5108.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-19449","severity":"important","public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1781668","bugzilla_description":"CVE-2019-19449 kernel: mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19449.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-19448","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1781674","bugzilla_description":"CVE-2019-19448 kernel: mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19447","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1781679","bugzilla_description":"CVE-2019-19447 kernel: mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19447.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-10720","severity":"moderate","public_date":"2019-12-09T14:23:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:2854","RHSA-2019:3309"],"bugzilla":"1781204","bugzilla_description":"CVE-2020-10720 kernel: use-after-free read in napi_gro_frags() in the Linux kernel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-20812","severity":"moderate","public_date":"2019-12-09T00:00:00Z","advisories":[],"bugzilla":"1846462","bugzilla_description":"CVE-2019-20812 kernel: af_packet: TPACKET_V3: invalid timer timeout on error","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20812.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-19579","severity":"moderate","public_date":"2019-12-06T00:00:00Z","advisories":[],"bugzilla":"1780558","bugzilla_description":"CVE-2019-19579 xen: an untrusted domain with access to a physical device can DMA into host memory, leading to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19579.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"6.9"},{"CVE":"CVE-2019-0162","severity":"moderate","public_date":"2019-12-06T00:00:00Z","advisories":[],"bugzilla":"1780586","bugzilla_description":"CVE-2019-0162 hw: dram: spoiler attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0162.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-19332","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1779594","bugzilla_description":"CVE-2019-19332 Kernel: kvm: OOB memory write via kvm_dev_ioctl_get_cpuid","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19332.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-19532","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1781821","bugzilla_description":"CVE-2019-19532 kernel: malicious USB devices can lead to multiple out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19532.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-19378","severity":"low","public_date":"2019-11-30T00:00:00Z","advisories":[],"bugzilla":"1781899","bugzilla_description":"CVE-2019-19378 kernel: out-of-bounds write in index_rbio_pages in fs/btrfs/raid56.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19378.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19462","severity":"low","public_date":"2019-11-29T00:00:00Z","advisories":[],"bugzilla":"1781839","bugzilla_description":"CVE-2019-19462 kernel: NULL pointer dereference in relay_open in kernel/relay.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19462.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19768","severity":"important","public_date":"2019-11-29T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:2214","RHSA-2020:2522","RHSA-2020:2203","RHSA-2020:2277","RHSA-2020:2289","RHSA-2020:2242","RHSA-2020:2199","RHSA-2020:2285","RHSA-2020:2519","RHSA-2020:1966","RHSA-2020:1769","RHSA-2020:1567","RHBA-2020:3180","RHSA-2020:2085","RHSA-2020:2082","RHSA-2020:2291"],"bugzilla":"1786164","bugzilla_description":"CVE-2019-19768 kernel: use-after-free in __blk_add_trace in kernel/trace/blktrace.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-514.76.1.el7","kernel-rt-1:3.10.0-693.67.1.rt56.665.el6rt","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-80.18.1.el8_0","kernel-0:4.18.0-147.13.2.el8_1","kernel-0:3.10.0-327.88.1.el7","kernel-rt-0:3.10.0-1127.8.2.rt56.1103.el7","kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-193.el8","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1127.8.2.el7","kernel-0:3.10.0-693.67.1.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19768.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-19769","severity":"moderate","public_date":"2019-11-29T00:00:00Z","advisories":[],"bugzilla":"1786174","bugzilla_description":"CVE-2019-19769 kernel: use-after-free in perf_trace_lock_acquire related to include/trace/events/lock.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19769.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-19770","severity":"moderate","public_date":"2019-11-29T00:00:00Z","advisories":[],"bugzilla":"1786179","bugzilla_description":"CVE-2019-19770 kernel: use-after-free in debugfs_remove in fs/debugfs/inode.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19770.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-18660","severity":"moderate","public_date":"2019-11-28T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:1372","RHSA-2020:0174","RHBA-2020:1450","RHSA-2020:2429","RHSA-2020:2933","RHSA-2020:1016","RHSA-2020:1984"],"bugzilla":"1777825","bugzilla_description":"CVE-2019-18660 kernel: powerpc: incomplete Spectre-RSB mitigation leads to information exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","kernel-0:2.6.32-754.31.1.el6","kernel-0:3.10.0-957.56.1.el7","redhat-coreos-42.81.20200407.0","kernel-0:3.10.0-1127.el7","kernel-alt-0:4.14.0-115.17.1.el7a","kernel-0:3.10.0-1062.21.1.el7","kernel-0:4.18.0-80.23.2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18660.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-19377","severity":"moderate","public_date":"2019-11-28T00:00:00Z","advisories":[],"bugzilla":"1781894","bugzilla_description":"CVE-2019-19377 kernel: use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19377.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19318","severity":"moderate","public_date":"2019-11-28T00:00:00Z","advisories":[],"bugzilla":"1784141","bugzilla_description":"CVE-2019-19318 kernel: use-after-free in rwsem_down_write_slowpath in kernel/locking/rwsem.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19318.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-10220","severity":"important","public_date":"2019-11-27T15:16:00Z","advisories":[],"bugzilla":"1741727","bugzilla_description":"CVE-2019-10220 kernel: CIFS: Relative paths injection in directory entry lists","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10220.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-18809","severity":"low","public_date":"2019-11-27T00:00:00Z","advisories":[],"bugzilla":"1777449","bugzilla_description":"CVE-2019-18809 kernel: memory leak in  af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18809.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-18810","severity":"moderate","public_date":"2019-11-27T00:00:00Z","advisories":[],"bugzilla":"1777452","bugzilla_description":"CVE-2019-18810 kernel: memory leak in komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18810.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-18811","severity":"moderate","public_date":"2019-11-27T00:00:00Z","advisories":[],"bugzilla":"1777455","bugzilla_description":"CVE-2019-18811 kernel: memory leak in sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18811.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19319","severity":"moderate","public_date":"2019-11-27T00:00:00Z","advisories":[],"bugzilla":"1784130","bugzilla_description":"CVE-2019-19319 kernel: out-of-bounds write in ext4_xattr_set_entry in fs/ext4/xattr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19319.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19602","severity":"moderate","public_date":"2019-11-26T00:00:00Z","advisories":[],"bugzilla":"1784572","bugzilla_description":"CVE-2019-19602 kernel: cached use of fpu_fpregs_owner_ctx in arch/x86/include/asm/fpu/internal.h can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19602.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2020-10690","severity":"low","public_date":"2019-11-25T12:53:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1817141","bugzilla_description":"CVE-2020-10690 kernel: use-after-free in cdev_put() when a PTP device is removed while it's chardev is open","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10690.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-14897","severity":"moderate","public_date":"2019-11-25T08:35:00Z","advisories":[],"bugzilla":"1774879","bugzilla_description":"CVE-2019-14897 kernel: stack-based buffer overflow in add_ie_rates function in drivers/net/wireless/marvell/libertas/cfg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14897.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2019-14896","severity":"moderate","public_date":"2019-11-25T08:33:00Z","advisories":["RHSA-2020:3548"],"bugzilla":"1774875","bugzilla_description":"CVE-2019-14896 kernel: heap-based buffer overflow in lbs_ibss_join_existing function in drivers/net/wireless/marvell/libertas/cfg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:2.6.32-754.33.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14896.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-14895","severity":"important","public_date":"2019-11-25T08:29:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0661","RHSA-2020:0374","RHSA-2020:1493","RHSA-2020:0592","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:0653","RHSA-2020:0543","RHSA-2020:0664","RHSA-2020:0831","RHSA-2020:0609"],"bugzilla":"1774870","bugzilla_description":"CVE-2019-14895 kernel: heap-based buffer overflow in mwifiex_process_country_ie() function in drivers/net/wireless/marvell/mwifiex/sta_ioctl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:3.10.0-693.64.1.el7","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-0:3.10.0-514.73.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-0:3.10.0-957.46.1.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:4.18.0-80.16.1.el8_0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14895.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-19252","severity":"low","public_date":"2019-11-25T00:00:00Z","advisories":[],"bugzilla":"1778860","bugzilla_description":"CVE-2019-19252 kernel: vcs_write in drivers/tty/vt/vc_screen.c does not prevent write access to vcsu devices","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19252.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19241","severity":"moderate","public_date":"2019-11-25T00:00:00Z","advisories":[],"bugzilla":"1784942","bugzilla_description":"CVE-2019-19241 kernel: privilege escalation via io_uring offload of sendmsg() onto kernel thread with kernel creds","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19241.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2019-14901","severity":"important","public_date":"2019-11-22T00:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0374","RHSA-2020:1493","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:0204"],"bugzilla":"1773519","bugzilla_description":"CVE-2019-14901 kernel: heap overflow in marvell/mwifiex/tdls.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-400|CWE-122)","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14901.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-18675","severity":"moderate","public_date":"2019-11-22T00:00:00Z","advisories":[],"bugzilla":"1777471","bugzilla_description":"CVE-2019-18675 kernel: integer overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18675.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-19227","severity":"moderate","public_date":"2019-11-22T00:00:00Z","advisories":[],"bugzilla":"1851480","bugzilla_description":"CVE-2019-19227 kernel: potential NULL pointer dereference leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19227.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19074","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774933","bugzilla_description":"CVE-2019-19074 kernel: a memory leak in the ath9k management function in allows local DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19073","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774937","bugzilla_description":"CVE-2019-19073 kernel: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel (DOS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19073.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-19072","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1774946","bugzilla_description":"CVE-2019-19072 kernel: A memory leak in the predicate_parse() function in kernel/trace/trace_events_filter.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19072.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-19071","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1774949","bugzilla_description":"CVE-2019-19071 kernel: A memory leak in the rsi_send_beacon() function in drivers/net/wireless/rsi/rsi_91x_mgmt.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19071.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19070","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1774957","bugzilla_description":"CVE-2019-19070 kernel: A memory leak in the spi_gpio_probe() function in drivers/spi/spi-gpio.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19070.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19069","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1774960","bugzilla_description":"CVE-2019-19069 kernel: A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19069.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19068","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1774963","bugzilla_description":"CVE-2019-19068 kernel: A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19068.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-19067","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774968","bugzilla_description":"CVE-2019-19067 kernel: Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c allow for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19067.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-19066","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1774976","bugzilla_description":"CVE-2019-19066 kernel: A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19066.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19065","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775000","bugzilla_description":"CVE-2019-19065 kernel: A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19065.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19064","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1775010","bugzilla_description":"CVE-2019-19064 kernel: A memory leak in the fsl_lpspi_probe() function in drivers/spi/spi-fsl-lpspi.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19063","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1775015","bugzilla_description":"CVE-2019-19063 kernel: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c allow for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19063.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-19062","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2020:2854"],"bugzilla":"1775021","bugzilla_description":"CVE-2019-19062 kernel: memory leak in the crypto_report() function in crypto/crypto_user_base.c allows for DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19062.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19061","severity":"important","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1775029","bugzilla_description":"CVE-2019-19061 kernel: A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19060","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1775035","bugzilla_description":"CVE-2019-19060 kernel: A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19059","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775042","bugzilla_description":"CVE-2019-19059 kernel: Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19059.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19058","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775047","bugzilla_description":"CVE-2019-19058 kernel: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19058.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19057","severity":"low","public_date":"2019-11-21T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775050","bugzilla_description":"CVE-2019-19057 kernel: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows for a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19057.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-14898","severity":"moderate","public_date":"2019-11-20T00:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0374","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1774671","bugzilla_description":"CVE-2019-14898 kernel: incomplete fix  for race condition between mmget_not_zero()/get_task_mm() and core dumping in CVE-2019-11599","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-667","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14898.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-19039","severity":"low","public_date":"2019-11-20T00:00:00Z","advisories":[],"bugzilla":"1775803","bugzilla_description":"CVE-2019-19039 kernel: information disclosure in __btrfs_free_extent in fs/btrfs/extent-tree.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19039.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-19043","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1774972","bugzilla_description":"CVE-2019-19043 kernel: dos in i40e_setup_macvlans() function in drivers/net/ethernet/intel/i40e/i40e_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19043.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19044","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1774977","bugzilla_description":"CVE-2019-19044 kernel: dos in v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19044.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-19045","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774983","bugzilla_description":"CVE-2019-19045 kernel: dos in mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19045.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.5"},{"CVE":"CVE-2019-19046","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHSA-2020:3545","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1774988","bugzilla_description":"CVE-2019-19046 kernel: Denial Of Service in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401->CWE-400","affected_packages":["kernel-alt-0:4.14.0-115.29.1.el7a","kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19046.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-19047","severity":"low","public_date":"2019-11-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1774991","bugzilla_description":"CVE-2019-19047 kernel: dos in mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19047.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19048","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1774994","bugzilla_description":"CVE-2019-19048 kernel: dos in crypto_reportstat() function in drivers/virt/vboxguest/vboxguest_utils.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19048.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-19049","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1774996","bugzilla_description":"CVE-2019-19049 kernel: dos in unittest_data_add() function in drivers/of/unittest.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19049.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-19050","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1774998","bugzilla_description":"CVE-2019-19050 kernel: dos in crypto_reportstat() function in crypto/crypto_user_stat.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19050.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-19051","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1775004","bugzilla_description":"CVE-2019-19051 kernel: dos in i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19051.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19052","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1775007","bugzilla_description":"CVE-2019-19052 kernel: dos in gs_can_open() function in drivers/net/can/usb/gs_usb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19052.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2014-3180","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1775121","bugzilla_description":"CVE-2014-3180 kernel: out-of-bounds read in kernel/compact.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3180.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-19037","severity":"low","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1775182","bugzilla_description":"CVE-2019-19037 kernel: null-pointer dereference in ext4_empty_dir in fs/ext4/namei.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19037.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19036","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1775187","bugzilla_description":"CVE-2019-19036 kernel: null-pointer dereference in btrfs_root_node in fs/btrfs/ctree.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19036.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-18807","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1777408","bugzilla_description":"CVE-2019-18807 kernel: memory leak in sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18807.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-18808","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2020:2854"],"bugzilla":"1777418","bugzilla_description":"CVE-2019-18808 kernel: memory leak in ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18808.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19338","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":["RHSA-2020:1465","RHSA-2020:0839","RHSA-2020:0834","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1781514","bugzilla_description":"CVE-2019-19338 Kernel: KVM: export MSR_IA32_TSX_CTRL to guest - incomplete fix for TAA (CVE-2019-11135)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-203","affected_packages":["kernel-0:3.10.0-957.48.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-1062.18.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19338.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-19524","severity":"moderate","public_date":"2019-11-15T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1783459","bugzilla_description":"CVE-2019-19524 kernel: a malicious USB device in the drivers/input/ff-memless.c leads to use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19524.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-12207","severity":"important","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3941","RHSA-2019:3843","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0026","RHSA-2020:0028","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3916","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1646768","bugzilla_description":"CVE-2018-12207 hw: Machine Check Error on Page Size Change (IFU)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-0154","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3840","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837"],"bugzilla":"1724393","bugzilla_description":"CVE-2019-0154 hw: Intel GPU Denial Of Service while accessing MMIO in lower power state","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0154.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-0155","severity":"important","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3887","RHSA-2019:3877","RHSA-2019:3870","RHSA-2019:3871","RHSA-2019:3872","RHSA-2019:3883","RHSA-2019:3873","RHBA-2019:3919","RHSA-2020:0204","RHSA-2019:3908","RHSA-2019:3878","RHSA-2019:3889"],"bugzilla":"1724398","bugzilla_description":"CVE-2019-0155 hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-1:3.10.0-693.60.3.rt56.655.el6rt","kernel-0:3.10.0-693.60.3.el7","kernel-0:2.6.32-754.24.3.el6","kernel-0:3.10.0-862.43.3.el7","kernel-0:3.10.0-514.70.3.el7","kernel-0:3.10.0-327.82.2.el7","kernel-rt-0:3.10.0-1062.4.3.rt56.1029.el7","kernel-0:3.10.0-1062.4.3.el7","kernel-0:4.18.0-147.0.3.el8_1","redhat-coreos-42.81.20191119.1","kernel-0:3.10.0-957.38.3.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.3.rt24.95.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0155.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-15794","severity":"moderate","public_date":"2019-11-12T00:00:00Z","advisories":[],"bugzilla":"1831055","bugzilla_description":"CVE-2019-15794 kernel: Overlayfs in the Linux kernel and shiftfs  not restoring original value on error leading to a refcount underflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15794.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-18814","severity":"moderate","public_date":"2019-11-07T00:00:00Z","advisories":[],"bugzilla":"1772518","bugzilla_description":"CVE-2019-18814 kernel: use-after-free in aa_audit_rule_init() in security/apparmor/audit.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19767","severity":"moderate","public_date":"2019-11-07T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2020:2854"],"bugzilla":"1786160","bugzilla_description":"CVE-2019-19767 kernel: use-after-free in __ext4_expand_extra_isize and ext4_xattr_set_entry related to fs/ext4/inode.c and fs/ext4/super.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19767.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19807","severity":"important","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3016","RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3010","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1786078","bugzilla_description":"CVE-2019-19807 kernel: use-after-free in sound/core/timer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:4.18.0-147.24.2.el8_1","kernel-rt-0:3.10.0-1160.rt56.1131.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.13.2.rt13.65.el8_2","kernel-0:4.18.0-193.13.2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19807.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-10769","severity":"moderate","public_date":"2019-11-05T00:00:00Z","advisories":["RHSA-2020:3545"],"bugzilla":"1708775","bugzilla_description":"CVE-2020-10769 kernel: Buffer over-read in crypto_authenc_extractkeys() when a payload longer than 4 bytes is not aligned.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-alt-0:4.14.0-115.29.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10769.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-18683","severity":"important","public_date":"2019-11-04T00:00:00Z","advisories":[],"bugzilla":"1771826","bugzilla_description":"CVE-2019-18683 kernel: race condition in vivid_stop_generating_vid_cap(),vivid_stop_generating_vid_out(), sdr_cap_stop_streaming()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18683.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19529","severity":"moderate","public_date":"2019-11-04T00:00:00Z","advisories":[],"bugzilla":"1783515","bugzilla_description":"CVE-2019-19529 kernel: use-after-free bug caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19529.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2019-19534","severity":"moderate","public_date":"2019-11-04T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1783540","bugzilla_description":"CVE-2019-19534 kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772->CWE-200","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19534.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-15791","severity":"moderate","public_date":"2019-11-01T00:00:00Z","advisories":[],"bugzilla":"1801616","bugzilla_description":"CVE-2019-15791 kernel: reference count underflow was discovered in shiftfs implementation causing dos","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15791.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-18421","severity":"important","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1765043","bugzilla_description":"CVE-2019-18421 xen: a malicious PV guest administrator may be able to escalate their privilege to that of the host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-268","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18421.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-18424","severity":"important","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1767730","bugzilla_description":"CVE-2019-18424 xen: passed through PCI devices may corrupt host memory after deassignment leading to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18424.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2019-18425","severity":"important","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1771340","bugzilla_description":"CVE-2019-18425 xen: missing descriptor table limit checking in x86 PV emulation leading to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18425.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-18423","severity":"moderate","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1771344","bugzilla_description":"CVE-2019-18423 xen: add-to-physmap can be abused to DoS Arm hosts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18423.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2019-17340","severity":"important","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1771349","bugzilla_description":"CVE-2019-17340 xen: mishanding grant-table transfer allows x86 guest OS to cause a DoS or escalate their privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17340.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-18420","severity":"moderate","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1771366","bugzilla_description":"CVE-2019-18420 xen: allows guest OS users to cause denial of service via VCPUOP_initialise hypercall","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18420.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-18422","severity":"moderate","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1771442","bugzilla_description":"CVE-2019-18422 xen: ARM: Interrupts are unconditionally unmasked in exception handlers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18422.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-17347","severity":"important","public_date":"2019-10-31T00:00:00Z","advisories":[],"bugzilla":"1771444","bugzilla_description":"CVE-2019-17347 xen: x86: PV kernel context switch corruption leading to Dos or privileges escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17347.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-10773","severity":"low","public_date":"2019-10-28T14:00:00Z","advisories":[],"bugzilla":"1846380","bugzilla_description":"CVE-2020-10773 kernel: kernel stack information leak on s390/s390x","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-626","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10773.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-18812","severity":"moderate","public_date":"2019-10-28T00:00:00Z","advisories":[],"bugzilla":"1777458","bugzilla_description":"CVE-2019-18812 kernel: memory leak in sof_dfsentry_write() function in sound/soc/sof/debug.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18812.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-18813","severity":"moderate","public_date":"2019-10-27T00:00:00Z","advisories":[],"bugzilla":"1777462","bugzilla_description":"CVE-2019-18813 kernel: memory leak in dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18813.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-18282","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1796360","bugzilla_description":"CVE-2019-18282 kernel: The flow_dissector feature allows device tracking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18282.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-17666","severity":"important","public_date":"2019-10-18T00:00:00Z","advisories":["RHSA-2020:0661","RHSA-2020:1353","RHSA-2020:0740","RHSA-2020:1465","RHSA-2020:1473","RHSA-2020:0834","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:1347","RHSA-2020:0543","RHSA-2020:1524","RHSA-2020:0831","RHSA-2020:0839"],"bugzilla":"1763690","bugzilla_description":"CVE-2019-17666 kernel: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel lacks a certain upper-bound check, leading to a buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-0:3.10.0-957.48.1.el7","kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.65.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:3.10.0-514.74.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-rt-1:3.10.0-693.65.1.rt56.663.el6rt","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:2.6.32-754.29.1.el6","kernel-0:3.10.0-1062.18.1.el7","kernel-0:4.18.0-80.16.1.el8_0","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17666.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2019-18786","severity":"low","public_date":"2019-10-18T00:00:00Z","advisories":[],"bugzilla":"1772538","bugzilla_description":"CVE-2019-18786 kernel: memory disclosure in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18786.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-2215","severity":"moderate","public_date":"2019-10-16T00:00:00Z","advisories":[],"bugzilla":"1805822","bugzilla_description":"CVE-2019-2215 kernel: Use-after-free in binder.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2215.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-19528","severity":"moderate","public_date":"2019-10-09T00:00:00Z","advisories":[],"bugzilla":"1783507","bugzilla_description":"CVE-2019-19528 kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19528.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-19526","severity":"moderate","public_date":"2019-10-08T00:00:00Z","advisories":[],"bugzilla":"1783494","bugzilla_description":"CVE-2019-19526 kernel: use-after-free bug caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19526.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-18806","severity":"low","public_date":"2019-10-07T00:00:00Z","advisories":[],"bugzilla":"1777397","bugzilla_description":"CVE-2019-18806 kernel: memory leak in ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18806.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19055","severity":"moderate","public_date":"2019-10-05T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1775074","bugzilla_description":"CVE-2019-19055 kernel: memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c allows DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19055.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19056","severity":"low","public_date":"2019-10-05T00:00:00Z","advisories":[],"bugzilla":"1775097","bugzilla_description":"CVE-2019-19056 kernel: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows to cause DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19056.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-17133","severity":"important","public_date":"2019-10-04T00:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0661","RHSA-2020:0374","RHSA-2020:0609","RHSA-2020:0790","RHSA-2020:0174","RHSA-2020:0592","RHSA-2020:0653","RHSA-2020:0543","RHSA-2020:0664"],"bugzilla":"1771909","bugzilla_description":"CVE-2019-17133 kernel: buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.64.1.el7","kernel-0:3.10.0-957.46.1.el7","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-0:2.6.32-754.28.1.el6","kernel-0:3.10.0-514.73.1.el7","kernel-alt-0:4.14.0-115.17.1.el7a","kernel-0:3.10.0-862.48.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17133.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-19523","severity":"moderate","public_date":"2019-10-04T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1783434","bugzilla_description":"CVE-2019-19523 kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416->CWE-476","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19523.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-17075","severity":"moderate","public_date":"2019-10-01T00:00:00Z","advisories":[],"bugzilla":"1759767","bugzilla_description":"CVE-2019-17075 kernel: denial of service in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17075.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-16994","severity":"low","public_date":"2019-09-30T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1759681","bugzilla_description":"CVE-2019-16994 kernel: Memory leak in sit_init_net() in net/ipv6/sit.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16994.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-16995","severity":"low","public_date":"2019-09-30T00:00:00Z","advisories":[],"bugzilla":"1759684","bugzilla_description":"CVE-2019-16995 kernel: Memory leak in hsr_dev_finalize() in net/hsr/hsr_device.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16995.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2019-16921","severity":"important","public_date":"2019-09-27T00:00:00Z","advisories":[],"bugzilla":"1762321","bugzilla_description":"CVE-2019-16921 kernel: information disclosure in hns_roce_alloc_ucontext in drivers/infiniband/hw/hns/hns_roce_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16921.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-19076","severity":"low","public_date":"2019-09-26T00:00:00Z","advisories":[],"bugzilla":"1776852","bugzilla_description":"CVE-2019-19076 kernel: memory leak in the nfp_abm_u32_knode_replace() function in drivers/net/ethernet/netronome/nfp/abm/cls.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19076.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-19054","severity":"low","public_date":"2019-09-25T00:00:00Z","advisories":[],"bugzilla":"1775063","bugzilla_description":"CVE-2019-19054 kernel: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c allows attackers to cause a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19054.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19080","severity":"low","public_date":"2019-09-25T00:00:00Z","advisories":[],"bugzilla":"1776372","bugzilla_description":"CVE-2019-19080 kernel: memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19080.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-19081","severity":"low","public_date":"2019-09-25T00:00:00Z","advisories":[],"bugzilla":"1776375","bugzilla_description":"CVE-2019-19081 kernel: memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19081.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-19082","severity":"low","public_date":"2019-09-25T00:00:00Z","advisories":[],"bugzilla":"1776832","bugzilla_description":"CVE-2019-19082 kernel: memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19082.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-18198","severity":"moderate","public_date":"2019-09-24T00:00:00Z","advisories":[],"bugzilla":"1771486","bugzilla_description":"CVE-2019-18198 kernel: reference count usage error in fib6_rule_suppress function in net/ipv6/fib6_rules.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18198.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-16714","severity":"moderate","public_date":"2019-09-23T00:00:00Z","advisories":[],"bugzilla":"1755544","bugzilla_description":"CVE-2019-16714 kernel: vulnerability in rds6_inc_info_copy in net/rds/recv.c allows attackers to obtain sensitive information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16714.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-17052","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1758239","bugzilla_description":"CVE-2019-17052 kernel: unprivileged users able to create RAW sockets in the the AF_AX25 network protocol.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17052.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2019-17053","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1758242","bugzilla_description":"CVE-2019-17053 kernel: unprivileged users able to create RAW sockets in AF_IEEE802154 network protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-17054","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1758245","bugzilla_description":"CVE-2019-17054 kernel: privilege escalation in atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17054.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2019-17055","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0790","RHSA-2020:4062","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:4060"],"bugzilla":"1758248","bugzilla_description":"CVE-2019-17055 kernel: unprivileged users able to create RAW sockets in AF_ISDN network protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:2.6.32-754.28.1.el6","kernel-0:3.10.0-1160.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17055.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-17056","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1758256","bugzilla_description":"CVE-2019-17056 kernel: unprivileged access to llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC socket type.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17056.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2019-19078","severity":"moderate","public_date":"2019-09-19T00:00:00Z","advisories":[],"bugzilla":"1776353","bugzilla_description":"CVE-2019-19078 kernel: memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19078.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-19525","severity":"moderate","public_date":"2019-09-19T00:00:00Z","advisories":[],"bugzilla":"1783478","bugzilla_description":"CVE-2019-19525 kernel: malicious USB device leads to use-after-free in the drivers/net/ieee802154/atusb.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19525.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-16413","severity":"moderate","public_date":"2019-09-18T00:00:00Z","advisories":[],"bugzilla":"1757321","bugzilla_description":"CVE-2019-16413 kernel:  i_size_read() infinite loop leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16413.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-18680","severity":"low","public_date":"2019-09-18T00:00:00Z","advisories":[],"bugzilla":"1772527","bugzilla_description":"CVE-2019-18680 kernel: NULL pointer dereference in rds_tcp_kill_sock() in net/rds/tcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18680.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14821","severity":"important","public_date":"2019-09-17T17:00:00Z","advisories":["RHSA-2020:2851","RHSA-2019:4256","RHSA-2019:4154","RHSA-2020:0027","RHSA-2019:3978","RHSA-2019:3979","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1746708","bugzilla_description":"CVE-2019-14821 Kernel: KVM: OOB memory access via mmio ring buffer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.7.1.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:2.6.32-754.25.1.el6","kernel-rt-0:3.10.0-1062.7.1.rt56.1030.el7","kernel-alt-0:4.14.0-115.16.1.el7a","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14821.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-14835","severity":"important","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2019:2854","RHSA-2019:2865","RHSA-2019:2864","RHSA-2019:2863","RHSA-2019:2830","RHSA-2019:2862","RHBA-2019:3151","RHSA-2019:2869","RHSA-2019:2924","RHSA-2019:2901","RHSA-2019:2900","RHSA-2019:2867","RHSA-2019:2889","RHSA-2019:2899","RHSA-2019:2866","RHSA-2019:2829","RHSA-2019:2828","RHSA-2019:2827"],"bugzilla":"1750727","bugzilla_description":"CVE-2019-14835 kernel: vhost-net: guest to host kernel escape during migration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["redhat-coreos-42.80.20191022.0","redhat-virtualization-host-0:4.2-20190919.0.el7_6","kernel-0:2.6.32-754.23.1.el6","kernel-rt-0:3.10.0-1062.1.2.rt56.1025.el7","kernel-0:3.10.0-1062.1.2.el7","kernel-0:3.10.0-862.41.2.el7","kernel-0:3.10.0-693.59.1.el7","kernel-0:3.10.0-514.69.1.el7","kernel-0:3.10.0-327.82.1.el7","kernel-0:4.18.0-80.11.2.el8_0","kernel-0:2.6.32-504.81.2.el6","kernel-0:2.6.32-431.96.2.el6","kernel-0:3.10.0-957.35.2.el7","kernel-alt-0:4.14.0-115.13.1.el7a","kernel-rt-0:4.18.0-80.11.2.rt9.157.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14835.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-19053","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1775056","bugzilla_description":"CVE-2019-19053 kernel: A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c allows attackers to cause a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19083","severity":"low","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1776838","bugzilla_description":"CVE-2019-19083 kernel: memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19083.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19075","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1776842","bugzilla_description":"CVE-2019-19075 kernel: memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15031","severity":"moderate","public_date":"2019-09-13T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2020:1372","RHBA-2020:1450"],"bugzilla":"1760063","bugzilla_description":"CVE-2019-15031 kernel: powerpc: local user can read vector registers of other users' processes via an interrupt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","redhat-coreos-42.81.20200407.0","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15031.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-16746","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016"],"bugzilla":"1760306","bugzilla_description":"CVE-2019-16746 kernel: buffer-overflow hardening in WiFi beacon validation code.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16746.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-16231","severity":"low","public_date":"2019-09-11T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1760310","bugzilla_description":"CVE-2019-16231 kernel: null-pointer dereference in drivers/net/fjes/fjes_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16231.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-16232","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":[],"bugzilla":"1760351","bugzilla_description":"CVE-2019-16232 kernel: null-pointer dereference in drivers/net/wireless/marvell/libertas/if_sdio.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16232.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-19079","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":[],"bugzilla":"1776367","bugzilla_description":"CVE-2019-19079 kernel: memory leak in the qrtr_tun_write_iter() function in net/qrtr/tun.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19079.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11184","severity":"moderate","public_date":"2019-09-10T02:46:00Z","advisories":[],"bugzilla":"1752738","bugzilla_description":"CVE-2019-11184 hardware:  Side-channel cache attack against DDIO with RDMA","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-341->CWE-642","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11184.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2019-19077","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1775724","bugzilla_description":"CVE-2019-19077 kernel: memory leak in bnxt_re_create_srq function in drivers/infiniband/hw/bnxt_re/ib_verbs.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19077.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-16233","severity":"low","public_date":"2019-09-09T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1760420","bugzilla_description":"CVE-2019-16233 kernel: null pointer dereference in drivers/scsi/qla2xxx/qla_os.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16233.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-16234","severity":"low","public_date":"2019-09-09T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1760441","bugzilla_description":"CVE-2019-16234 kernel: null pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16234.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-16230","severity":"low","public_date":"2019-09-09T00:00:00Z","advisories":[],"bugzilla":"1760450","bugzilla_description":"CVE-2019-16230 kernel: null pointer dereference in drivers/gpu/drm/radeon/radeon_display.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16230.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-16229","severity":"low","public_date":"2019-09-09T00:00:00Z","advisories":[],"bugzilla":"1760490","bugzilla_description":"CVE-2019-16229 kernel: null pointer dereference in drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16229.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-16089","severity":"low","public_date":"2019-09-06T00:00:00Z","advisories":[],"bugzilla":"1751393","bugzilla_description":"CVE-2019-16089 kernel: Improper return check in nbd_genl_status function in drivers/block/nbd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16089.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-15030","severity":"moderate","public_date":"2019-09-06T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2020:1372","RHBA-2020:1450"],"bugzilla":"1759313","bugzilla_description":"CVE-2019-15030 kernel: powerpc: local user can read vector registers of other users' processes via a Facility Unavailable exception","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-200","affected_packages":["kernel-0:4.18.0-147.8.1.el8_1","redhat-coreos-42.81.20200407.0","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15030.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-15919","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1750410","bugzilla_description":"CVE-2019-15919 kernel: use-after-free in SMB2_write function in fs/cifs/smb2pdu.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15919.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-15926","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1750802","bugzilla_description":"CVE-2019-15926 kernel: out of bounds access in  functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15926.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-15916","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:0740","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1750813","bugzilla_description":"CVE-2019-15916 kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15916.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18595","severity":"important","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:2214","RHSA-2020:2522","RHSA-2020:2277","RHSA-2020:2289","RHSA-2020:2242","RHSA-2020:2285","RHSA-2020:2085","RHSA-2020:2082"],"bugzilla":"1758671","bugzilla_description":"CVE-2017-18595 kernel: double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1127.8.2.rt56.1103.el7","kernel-0:3.10.0-514.76.1.el7","kernel-0:3.10.0-1062.26.1.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-957.54.1.el7","kernel-rt-1:3.10.0-693.67.1.rt56.665.el6rt","kernel-0:3.10.0-1127.8.2.el7","kernel-0:3.10.0-693.67.1.el7","kernel-0:3.10.0-327.88.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18595.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-15925","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1759052","bugzilla_description":"CVE-2019-15925 kernel: out-of-bounds access in function hclge_tm_schd_mode_vnet_base_cfg","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15925.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-15927","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1759059","bugzilla_description":"CVE-2019-15927 kernel: out-of-bounds in function build_audio_procunit in sound/usb/mixer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15927.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-21008","severity":"important","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1759188","bugzilla_description":"CVE-2018-21008 kernel: use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-21008.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15917","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2020:2854"],"bugzilla":"1760100","bugzilla_description":"CVE-2019-15917 kernel: use-after-free in drivers/bluetooth/hci_ldisc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15917.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-15918","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1760550","bugzilla_description":"CVE-2019-15918 kernel: out-of-bounds read in fs/cifs/smb2pdu.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15918.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2019-15920","severity":"moderate","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1760864","bugzilla_description":"CVE-2019-15920 kernel: use-after-free information leak in SMB2_read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15920.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-15921","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1760958","bugzilla_description":"CVE-2019-15921 kernel: memory leak in genl_register_family() in net/netlink/genetlink.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15921.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-15922","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1763828","bugzilla_description":"CVE-2019-15922 kernel: null pointer dereference in drivers/block/paride/pf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15922.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15923","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":[],"bugzilla":"1763844","bugzilla_description":"CVE-2019-15923 kernel: null pointer dereference in drivers/block/paride/pf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15923.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15924","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1763869","bugzilla_description":"CVE-2019-15924 kernel: null pointer dereference in drivers/net/ethernet/intel/fm10k/fm10k_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15924.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-15902","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1752081","bugzilla_description":"CVE-2019-15902 kernel: backporting error in ptrace_get_debugreg()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15902.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-9454","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1818818","bugzilla_description":"CVE-2019-9454 kernel: out of bounds write in i2c driver leads to local escalation of privilege","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-787|CWE-119)","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9454.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2182","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819133","bugzilla_description":"CVE-2019-2182 kernel: possible execution path in MMU code leads to local escalation of privilege","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2182.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9453","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819146","bugzilla_description":"CVE-2019-9453 kernel: out of bounds read in F2FS touch driver leads to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-125|CWE-200)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9453.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-9456","severity":"low","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1819156","bugzilla_description":"CVE-2019-9456 kernel: OOB write due to missing bounds check leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-787","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9456.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9248","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819352","bugzilla_description":"CVE-2019-9248 kernel: out of bounds write due to missing bounds check leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9248.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9245","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819355","bugzilla_description":"CVE-2019-9245 kernel: out of bounds read due to a missing bounds check leads to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9245.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-9271","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819358","bugzilla_description":"CVE-2019-9271 kernel: race condition in mnh driver due to insufficient locking leads to use-after-free and subsequently privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-362|CWE-416)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9271.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-9276","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819363","bugzilla_description":"CVE-2019-9276 kernel: out of bounds write due to use after free in synaptics_dsx_htc touchscreen driver leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9276.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9443","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819368","bugzilla_description":"CVE-2019-9443 kernel: out of bounds write due to permission bypass in vl53L0 driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9443.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9442","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819371","bugzilla_description":"CVE-2019-9442 kernel: memory corruption due to use after free in mnh driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9442.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9441","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819374","bugzilla_description":"CVE-2019-9441 kernel: out of bounds write due to improper input validation in mnh driver leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9441.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9458","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060","RHSA-2020:2854"],"bugzilla":"1819377","bugzilla_description":"CVE-2019-9458 kernel: use after free due to race condition in the video driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9458.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-9449","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819380","bugzilla_description":"CVE-2019-9449 kernel: out of bounds read due to missing bounds check in FingerTipS touchscreen driver leads to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9449.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-9445","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819384","bugzilla_description":"CVE-2019-9445 kernel: out of bounds read due to missing bounds check in F2FS driver leads to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9445.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-9448","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819387","bugzilla_description":"CVE-2019-9448 kernel: out of bounds write due to missing bounds check in FingerTipS touchscreen driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9450","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819392","bugzilla_description":"CVE-2019-9450 kernel: memory corruption due to race condition in FingerTipS touchscreen driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9450.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-9452","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819396","bugzilla_description":"CVE-2019-9452 kernel: out of bounds read due to missing bounds check in SEC_TS touch driver leads to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9452.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-9455","severity":"low","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819399","bugzilla_description":"CVE-2019-9455 kernel: kernel pointer leak due to WARN_ON statement in video driver leads to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9455.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.3"},{"CVE":"CVE-2019-9270","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819402","bugzilla_description":"CVE-2019-9270 kernel: out of bounds write due to missing bounds check in unifi and r8180 WiFi drivers leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9270.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9273","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819405","bugzilla_description":"CVE-2019-9273 kernel: use after free due to improper locking in synaptics_dsx_htc touchscreen driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9273.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9274","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819409","bugzilla_description":"CVE-2019-9274 kernel: out of bounds write due to missing bounds check in mnh driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9274.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9275","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819412","bugzilla_description":"CVE-2019-9275 kernel: use after free due to improper locking in mnh driver leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9275.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9345","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819417","bugzilla_description":"CVE-2019-9345 kernel: data separation violation in sdcardfs leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9345.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9426","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819422","bugzilla_description":"CVE-2019-9426 kernel: out of bounds write due to missing bounds check in Bluetooth leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9426.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9436","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819426","bugzilla_description":"CVE-2019-9436 kernel: secure boot bypass in bootloader leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-592","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9436.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9444","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819433","bugzilla_description":"CVE-2019-9444 kernel: kernel pointer leak in sync debug fs driver leads to local information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9444.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-9446","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819437","bugzilla_description":"CVE-2019-9446 kernel: out of bounds write due to improper input validation in FingerTipS touchscreen driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9446.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9447","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819441","bugzilla_description":"CVE-2019-9447 kernel: use after free due to improper locking in FingerTipS touchscreen driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9447.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9451","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819444","bugzilla_description":"CVE-2019-9451 kernel: out of bounds write due to missing bounds check in touchscreen driver leads to local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9451.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-9461","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1819447","bugzilla_description":"CVE-2019-9461 kernel: information disclosure via VPN routing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9461.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-15807","severity":"low","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1747216","bugzilla_description":"CVE-2019-15807 kernel: Memory leak in drivers/scsi/libsas/sas_expander.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15807.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-14814","severity":"moderate","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460"],"bugzilla":"1744130","bugzilla_description":"CVE-2019-14814 kernel: heap overflow in mwifiex_set_uap_rates() function of Marvell Wifi Driver leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-14815","severity":"moderate","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHSA-2020:1070","RHBA-2020:0460","RHSA-2020:1016"],"bugzilla":"1744137","bugzilla_description":"CVE-2019-14815 kernel: heap-overflow in mwifiex_set_wmm_params() function of Marvell WiFi driver leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-1127.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-14816","severity":"important","public_date":"2019-08-28T10:00:00Z","advisories":["RHSA-2020:0375","RHSA-2020:0661","RHSA-2020:1266","RHSA-2020:0374","RHSA-2020:1353","RHSA-2020:0174","RHSA-2020:0328","RHSA-2020:0339","RHBA-2020:0460","RHSA-2020:1347","RHSA-2020:0653","RHSA-2020:0664","RHSA-2020:0204"],"bugzilla":"1744149","bugzilla_description":"CVE-2019-14816 kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.65.1.el7","kernel-rt-0:4.18.0-147.5.1.rt24.98.el8_1","kernel-rt-0:3.10.0-1062.12.1.rt56.1042.el7","kernel-0:3.10.0-514.73.1.el7","kernel-rt-1:3.10.0-693.65.1.rt56.663.el6rt","kernel-0:3.10.0-957.46.1.el7","kernel-0:3.10.0-1062.12.1.el7","kernel-0:4.18.0-147.5.1.el8_1","redhat-coreos-42.81.20200210.0","kernel-0:3.10.0-862.51.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14816.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-15666","severity":"moderate","public_date":"2019-08-27T00:00:00Z","advisories":["RHSA-2020:1493","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1747334","bugzilla_description":"CVE-2019-15666 kernel: out-of-bounds array access in __xfrm_policy_unlink","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15666.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-15538","severity":"moderate","public_date":"2019-08-25T00:00:00Z","advisories":["RHSA-2020:2104"],"bugzilla":"1746777","bugzilla_description":"CVE-2019-15538 kernel: denial of service in in xfs_setattr_nonsize in fs/xfs/xfs_iops.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-alt-0:4.14.0-115.21.2.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15538.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15504","severity":"moderate","public_date":"2019-08-23T00:00:00Z","advisories":[],"bugzilla":"1746725","bugzilla_description":"CVE-2019-15504 kernel: double free in drivers/net/wireless/rsi/rsi_91x_usb.c via crafted USB device","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15504.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-15505","severity":"moderate","public_date":"2019-08-23T00:00:00Z","advisories":[],"bugzilla":"1746732","bugzilla_description":"CVE-2019-15505 kernel: out of bounds read in drivers/media/usb/dvb-usb/technisat-usb2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15505.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-15292","severity":"moderate","public_date":"2019-08-21T00:00:00Z","advisories":[],"bugzilla":"1746628","bugzilla_description":"CVE-2019-15292 kernel: Use-after-free in atalk_proc_exit function in net/appletalk","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15292.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-19533","severity":"low","public_date":"2019-08-21T00:00:00Z","advisories":[],"bugzilla":"1783534","bugzilla_description":"CVE-2019-19533 kernel: information leak bug caused  by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19533.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2017-18509","severity":"important","public_date":"2019-08-20T00:00:00Z","advisories":[],"bugzilla":"1743520","bugzilla_description":"CVE-2017-18509 kernel: not checking sk_type and protocol in net/ipv6/ip6mr.c leads to general protection fault, or arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-15090","severity":"low","public_date":"2019-08-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1743526","bugzilla_description":"CVE-2019-15090 kernel: An out-of-bounds read in drivers/scsi/qedi/qedi_dbg.c leading to crash or information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15090.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-15118","severity":"moderate","public_date":"2019-08-20T00:00:00Z","advisories":[],"bugzilla":"1743539","bugzilla_description":"CVE-2019-15118 kernel: mishandling recursion in sound/usb/mixer.c leading to kernel stack exhaustion and crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-15098","severity":"low","public_date":"2019-08-20T00:00:00Z","advisories":[],"bugzilla":"1743552","bugzilla_description":"CVE-2019-15098 kernel: a NULL pointer dereference in drivers/net/wireless/ath/ath6kl/usb.c leads to a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15098.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-15099","severity":"low","public_date":"2019-08-20T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1493","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1743560","bugzilla_description":"CVE-2019-15099 kernel: a NULL pointer dereference in drivers/net/wireless/ath/ath10k/usb.c leads to a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.19.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15099.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-15239","severity":"important","public_date":"2019-08-20T00:00:00Z","advisories":["RHSA-2020:0027","RHSA-2019:3978","RHSA-2019:3979"],"bugzilla":"1747353","bugzilla_description":"CVE-2019-15239 kernel: local attacker can trigger multiple use-after-free conditions results in privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-1062.7.1.el7","kernel-rt-0:3.10.0-1062.7.1.rt56.1030.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15239.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-15211","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743544","bugzilla_description":"CVE-2019-15211 kernel: use-after-free in drivers/media/v4l2-core/v4l2-dev.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-15212","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743556","bugzilla_description":"CVE-2019-15212 kernel: double-free caused by malicious USB device in drivers/usb/misc/rio500.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15212.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-15213","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743580","bugzilla_description":"CVE-2019-15213 kernel: use-after-free caused by malicious USB device in drivers/media/usb/dvb-usb/dvb-usb-init.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15213.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-15214","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743591","bugzilla_description":"CVE-2019-15214 kernel: use-after-free in sound/core/init.c and sound/core/info.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15214.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-15215","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1745514","bugzilla_description":"CVE-2019-15215 kernel: use after free in drivers/media/usb/cpia2/cpia2_usb.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15215.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15216","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1745523","bugzilla_description":"CVE-2019-15216 kernel: null-pointer dereference in drivers/usb/misc/yurex.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15216.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-15217","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1745528","bugzilla_description":"CVE-2019-15217 kernel: null pointer dereference in drivers/media/usb/zr364xx/zr364xx.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15217.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15218","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1745530","bugzilla_description":"CVE-2019-15218 kernel: null pointer dereference in the drivers/media/usb/siano/smsusb.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15218.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15219","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1745536","bugzilla_description":"CVE-2019-15219 kernel: null pointer dereference in drivers/usb/misc/sisusbvga/sisusb.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15219.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-20908","severity":"moderate","public_date":"2019-08-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:3222","RHSA-2020:3218","RHSA-2020:3219","RHSA-2020:3228"],"bugzilla":"1852942","bugzilla_description":"CVE-2019-20908 kernel: lockdown: bypass through ACPI write via efivar_ssdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-193.14.3.rt13.67.el8_2","kernel-0:4.18.0-80.27.2.el8_0","kernel-0:4.18.0-147.24.2.el8_1","redhat-coreos-43.82.202007300301.0","kernel-0:4.18.0-193.14.3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20908.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2016-10905","severity":"moderate","public_date":"2019-08-18T00:00:00Z","advisories":[],"bugzilla":"1757356","bugzilla_description":"CVE-2016-10905 kernel: use-after-free in fs/gfs2/rgrp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10905.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-18552","severity":"moderate","public_date":"2019-08-18T00:00:00Z","advisories":[],"bugzilla":"1757358","bugzilla_description":"CVE-2017-18552 kernel: OOB read and write in net/rds/af_rds.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-787|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18552.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-18549","severity":"low","public_date":"2019-08-18T00:00:00Z","advisories":[],"bugzilla":"1757363","bugzilla_description":"CVE-2017-18549 kernel: information exposure in drivers/scsi/aacraid/commctrl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18549.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-18551","severity":"moderate","public_date":"2019-08-18T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1757368","bugzilla_description":"CVE-2017-18551 kernel: out of bounds write in function i2c_smbus_xfer_emulated in drivers/i2c/i2c-core-smbus.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18551.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2016-10907","severity":"moderate","public_date":"2019-08-18T00:00:00Z","advisories":[],"bugzilla":"1757372","bugzilla_description":"CVE-2016-10907 kernel: out of bounds write in ad5755_parse_dt in drivers/iio/dac/ad5755.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10907.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-18550","severity":"moderate","public_date":"2019-08-18T00:00:00Z","advisories":[],"bugzilla":"1757375","bugzilla_description":"CVE-2017-18550 kernel: information exposure in drivers/scsi/aacraid/commctrl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18550.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-10906","severity":"moderate","public_date":"2019-08-18T00:00:00Z","advisories":[],"bugzilla":"1757380","bugzilla_description":"CVE-2016-10906 kernel: use-after-free in functions arc_emac_tx and arc_emac_tx_clean in drivers/net/ethernet/arc/emac_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10906.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-15117","severity":"moderate","public_date":"2019-08-16T00:00:00Z","advisories":[],"bugzilla":"1746769","bugzilla_description":"CVE-2019-15117 kernel: out of bounds memory access in parse_audio_mixer_unit in sound/usb/mixer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15117.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10140","severity":"moderate","public_date":"2019-08-15T03:50:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1677778","bugzilla_description":"CVE-2019-10140 kernel: overlayfs: NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10140.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19530","severity":"moderate","public_date":"2019-08-15T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1783518","bugzilla_description":"CVE-2019-19530 kernel: use-after-free caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19530.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2007-2764","severity":"moderate","public_date":"2019-08-14T00:00:00Z","advisories":[],"bugzilla":"1758987","bugzilla_description":"CVE-2007-2764 kernel: denial of service via unspecified vectors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2764.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-19537","severity":"moderate","public_date":"2019-08-12T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1783561","bugzilla_description":"CVE-2019-19537 kernel: race condition caused by a malicious USB device in the USB character device driver layer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19537.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2019-9506","severity":"important","public_date":"2019-08-10T09:00:00Z","advisories":["RHSA-2019:3217","RHSA-2019:3089","RHSA-2020:1460","RHSA-2019:2975","RHSA-2019:3076","RHSA-2019:3055","RHSA-2019:3187","RHSA-2019:3220","RHSA-2019:3231","RHSA-2019:3165","RHSA-2020:0204","RHSA-2019:3218","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1727857","bugzilla_description":"CVE-2019-9506 hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["kernel-alt-0:4.14.0-115.14.1.el7a","kernel-0:3.10.0-957.38.1.el7","kernel-0:3.10.0-862.43.1.el7","kernel-0:3.10.0-514.70.1.el7","kernel-0:3.10.0-693.60.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","kernel-rt-1:3.10.0-693.60.1.rt56.654.el6rt","redhat-coreos-42.81.20191107.0","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:3.10.0-327.86.1.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.0"},{"CVE":"CVE-2018-20961","severity":"moderate","public_date":"2019-08-07T00:00:00Z","advisories":[],"bugzilla":"1743502","bugzilla_description":"CVE-2018-20961 kernel: double free vulnerability in function f_midi_set_alt in drivers/usb/gadget/function/f_midi.c causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20961.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-14763","severity":"low","public_date":"2019-08-07T00:00:00Z","advisories":[],"bugzilla":"1743505","bugzilla_description":"CVE-2019-14763 kernel: double-locking error in drivers/usb/dwc3/gadget.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667->CWE-833","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14763.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-1125","severity":"moderate","public_date":"2019-08-06T17:00:00Z","advisories":["RHSA-2019:2476","RHSA-2019:2696","RHSA-2019:2695","RHSA-2019:2473","RHSA-2019:2975","RHSA-2019:2600","RHSA-2019:2411","RHSA-2019:2730","RHSA-2019:3220","RHSA-2019:3011","RHBA-2019:3151","RHSA-2019:2900","RHSA-2019:2405","RHSA-2019:2899","RHSA-2019:2609","RHBA-2019:3248"],"bugzilla":"1724389","bugzilla_description":"CVE-2019-1125 kernel: hw: Spectre SWAPGS gadget vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":["kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0","redhat-virtualization-host-0:4.2-20191022.0.el7_6","kernel-0:3.10.0-957.38.1.el7","kernel-0:3.10.0-862.43.1.el7","redhat-coreos-42.80.20191022.0","kernel-0:2.6.32-431.96.1.el6","kernel-0:2.6.32-754.18.2.el6","kernel-0:4.18.0-80.7.2.el8_0","kernel-0:2.6.32-504.80.2.el6","kernel-0:3.10.0-514.69.1.el7","kernel-0:3.10.0-327.82.1.el7","kernel-rt-0:3.10.0-1062.1.1.rt56.1024.el7","kernel-0:3.10.0-693.58.1.el7","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:3.10.0-1062.1.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-19527","severity":"moderate","public_date":"2019-08-06T00:00:00Z","advisories":["RHSA-2020:4236","RHSA-2020:1378","RHSA-2020:3221","RHSA-2020:1372","RHSA-2020:3220","RHBA-2020:1450"],"bugzilla":"1783498","bugzilla_description":"CVE-2019-19527 kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-147.8.1.rt24.101.el8_1","kernel-0:3.10.0-1062.36.1.el7","kernel-0:4.18.0-147.8.1.el8_1","kernel-rt-0:3.10.0-1127.18.2.rt56.1116.el7","kernel-0:3.10.0-1127.18.2.el7","redhat-coreos-42.81.20200407.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19527.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-19531","severity":"moderate","public_date":"2019-08-05T00:00:00Z","advisories":[],"bugzilla":"1783523","bugzilla_description":"CVE-2019-19531 kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/yurex.c driver leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19531.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15220","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":[],"bugzilla":"1749973","bugzilla_description":"CVE-2019-15220 kernel: Use-after-free in drivers/net/wireless/intersil/p54/p54usb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15220.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15221","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1070","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1749974","bugzilla_description":"CVE-2019-15221 kernel: Null pointer dereference in the sound/usb/line6/pcm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","kernel-rt-0:3.10.0-1127.rt56.1093.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15221.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15222","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":[],"bugzilla":"1749975","bugzilla_description":"CVE-2019-15222 kernel: Null pointer dereference in the sound/usb/helper.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15222.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15223","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1749976","bugzilla_description":"CVE-2019-15223 kernel: Null pointer dereference in the sound/usb/line6/driver.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15223.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15290","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":[],"bugzilla":"1749977","bugzilla_description":"CVE-2019-15290 kernel: Null pointer dereference in the ath6kl_usb_alloc_urb_from_pipe function in the drivers/net/wireless/ath/ath6kl/usb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15290.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15291","severity":"low","public_date":"2019-08-02T00:00:00Z","advisories":[],"bugzilla":"1749978","bugzilla_description":"CVE-2019-15291 kernel: Null pointer dereference in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15291.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-19535","severity":"moderate","public_date":"2019-08-02T00:00:00Z","advisories":[],"bugzilla":"1783547","bugzilla_description":"CVE-2019-19535 kernel: information leak bug caused  by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.cdriver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19535.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-19536","severity":"moderate","public_date":"2019-08-02T00:00:00Z","advisories":[],"bugzilla":"1783552","bugzilla_description":"CVE-2019-19536 kernel: information leak bug caused  by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19536.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-10207","severity":"moderate","public_date":"2019-07-29T13:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1733874","bugzilla_description":"CVE-2019-10207 kernel: null-pointer dereference in hci_uart_set_flow_control","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2007-6762","severity":"moderate","public_date":"2019-07-27T00:00:00Z","advisories":[],"bugzilla":"1735620","bugzilla_description":"CVE-2007-6762 kernel: buffer overflow in doi_def->tags[] array","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6762.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2011-5327","severity":"important","public_date":"2019-07-27T00:00:00Z","advisories":[],"bugzilla":"1735624","bugzilla_description":"CVE-2011-5327 kernel: memory corruption in sunction tcm_loop_make_naa_tpg() in drivers/target/loopback/tcm_loop.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5327.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10764","severity":"moderate","public_date":"2019-07-27T00:00:00Z","advisories":[],"bugzilla":"1735633","bugzilla_description":"CVE-2016-10764 kernel: off by one in function cqspi_setup_flash() in drivers/mtd/spi-nor/cadence-quadspi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10764.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18379","severity":"moderate","public_date":"2019-07-27T00:00:00Z","advisories":[],"bugzilla":"1735637","bugzilla_description":"CVE-2017-18379 kernel: out of bound access in drivers/nvme/target/fc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-787|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18379.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2012-6712","severity":"moderate","public_date":"2019-07-27T00:00:00Z","advisories":[],"bugzilla":"1735642","bugzilla_description":"CVE-2012-6712 kernel: buffer overflow in drivers/net/wireless/iwlwifi/iwl-agn-sta.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6712.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2015-9289","severity":"moderate","public_date":"2019-07-27T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016"],"bugzilla":"1735655","bugzilla_description":"CVE-2015-9289 kernel: out of bound read in DVB connexant driver.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9289.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2010-5331","severity":"moderate","public_date":"2019-07-27T00:00:00Z","advisories":[],"bugzilla":"1743598","bugzilla_description":"CVE-2010-5331 kernel: range check issue in drivers/gpu/drm/radeon/atombios.c leads to buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193->CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5331.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2010-5332","severity":"moderate","public_date":"2019-07-27T00:00:00Z","advisories":[],"bugzilla":"1743604","bugzilla_description":"CVE-2010-5332 kernel: out of bounds array access in drivers/net/mlx4/port.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5332.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2019-14283","severity":"moderate","public_date":"2019-07-26T00:00:00Z","advisories":["RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016"],"bugzilla":"1734243","bugzilla_description":"CVE-2019-14283 kernel: integer overflow and OOB read in drivers/block/floppy.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-190|CWE-125)","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14283.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2019-14284","severity":"moderate","public_date":"2019-07-26T00:00:00Z","advisories":[],"bugzilla":"1734246","bugzilla_description":"CVE-2019-14284 kernel: denial of service in drivers/block/floppy.c by setup_format_params division-by-zero","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14284.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-20856","severity":"important","public_date":"2019-07-26T00:00:00Z","advisories":["RHSA-2020:0100","RHSA-2019:3217","RHSA-2019:3089","RHSA-2019:3076","RHSA-2019:3055","RHSA-2020:0698","RHSA-2020:0103","RHSA-2020:0543","RHSA-2020:0664"],"bugzilla":"1738705","bugzilla_description":"CVE-2018-20856 kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-alt-0:4.14.0-115.14.1.el7a","kernel-0:3.10.0-693.62.1.el7","kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","kernel-0:3.10.0-957.46.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-rt-1:3.10.0-693.62.1.rt56.659.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20856.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-20855","severity":"moderate","public_date":"2019-07-26T00:00:00Z","advisories":[],"bugzilla":"1738708","bugzilla_description":"CVE-2018-20855 kernel: Information leak in create_qp_common in drivers/infiniband/hw/mlx5/qp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20855.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-20854","severity":"moderate","public_date":"2019-07-26T00:00:00Z","advisories":[],"bugzilla":"1738711","bugzilla_description":"CVE-2018-20854 kernel: Out-of-bounds read in drivers/phy/mscc/phy-ocelot-serdes.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20854.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-13648","severity":"moderate","public_date":"2019-07-19T00:00:00Z","advisories":["RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:3019"],"bugzilla":"1735630","bugzilla_description":"CVE-2019-13648 kernel: denial of service in arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c via sigreturn() system call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-1062.30.1.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1127.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13648.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-13272","severity":"important","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2809","RHBA-2019:3151","RHSA-2019:2411","RHSA-2019:2405"],"bugzilla":"1730895","bugzilla_description":"CVE-2019-13272 kernel: broken permission and object lifetime handling for PTRACE_TRACEME","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":["kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.7.2.el8_0","kernel-alt-0:4.14.0-115.12.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13272.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10638","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1729931","bugzilla_description":"CVE-2019-10638 Kernel: net: weak IP ID generation leads to remote device tracking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331->CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-10639","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:2522","RHBA-2020:3180","RHSA-2020:1070","RHSA-2020:1769","RHSA-2020:1567","RHSA-2020:1016"],"bugzilla":"1729933","bugzilla_description":"CVE-2019-10639 Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-193.el8","kernel-rt-0:3.10.0-1127.rt56.1093.el7","redhat-coreos-43.82.202007300301.0","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-13631","severity":"moderate","public_date":"2019-07-11T00:00:00Z","advisories":[],"bugzilla":"1731000","bugzilla_description":"CVE-2019-13631 kernel: OOB writes in parse_hid_report_descriptor in drivers/input/tablet/gtco.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13631.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-13233","severity":"moderate","public_date":"2019-07-04T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1727756","bugzilla_description":"CVE-2019-13233 kernel: use-after-free in arch/x86/lib/insn-eval.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13233.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2019-12984","severity":"moderate","public_date":"2019-06-26T00:00:00Z","advisories":[],"bugzilla":"1724637","bugzilla_description":"CVE-2019-12984 kernel: null pointer dereference in function nfc_genl_deactivate_target() in net/nfc/netlink.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-476|CWE-400)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12984.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-12817","severity":"important","public_date":"2019-06-24T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2703"],"bugzilla":"1720616","bugzilla_description":"CVE-2019-12817 kernel: ppc: unrelated processes being able to read/write to each other's virtual memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->(CWE-125|CWE-787)","affected_packages":["redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12817.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-12881","severity":"moderate","public_date":"2019-06-18T00:00:00Z","advisories":[],"bugzilla":"1723860","bugzilla_description":"CVE-2019-12881 kernel: NULL pointer dereference in i915_gem_userptr_get_pages allows local denial of service via crafted ioctl calls","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12881.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-11477","severity":"important","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719123","bugzilla_description":"CVE-2019-11477 Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11478","severity":"moderate","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719128","bugzilla_description":"CVE-2019-11478 Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11478.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11479","severity":"moderate","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719129","bugzilla_description":"CVE-2019-11479 kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11479.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-3896","severity":"important","public_date":"2019-06-17T00:00:00Z","advisories":["RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1490"],"bugzilla":"1694812","bugzilla_description":"CVE-2019-3896 kernel: Double free in lib/idr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:2.6.32-754.15.3.el6","kernel-0:2.6.32-431.95.3.el6","kernel-0:2.6.32-504.79.3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3896.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-12819","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":[],"bugzilla":"1721962","bugzilla_description":"CVE-2019-12819 kernel: use-after-free in function __mdiobus_register() in drivers/net/phy/mdio_bus.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12819.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-12818","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":[],"bugzilla":"1721967","bugzilla_description":"CVE-2019-12818 kernel: null-pointer dereference in function nfc_llcp_build_tlv in net/nfc/llcp_commands.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12818.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-0174","severity":"moderate","public_date":"2019-06-11T00:00:00Z","advisories":[],"bugzilla":"1719410","bugzilla_description":"CVE-2019-0174 hw: dram: reading bits in memory without accessing them","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1231->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0174.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2018-16871","severity":"moderate","public_date":"2019-06-03T02:23:00Z","advisories":["RHSA-2019:2696","RHBA-2020:3180","RHSA-2019:1891","RHSA-2020:0740","RHSA-2019:1873","RHSA-2019:2730","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1655162","bugzilla_description":"CVE-2018-16871 kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-957.27.2.el7","kernel-0:4.18.0-193.el8","kernel-0:3.10.0-693.58.1.el7","redhat-coreos-43.82.202007300301.0","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16871.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-12614","severity":"low","public_date":"2019-06-03T00:00:00Z","advisories":["RHSA-2020:2104","RHSA-2020:4060"],"bugzilla":"1718176","bugzilla_description":"CVE-2019-12614 kernel: null pointer dereference in dlpar_parse_cc_property in arch/powerrc/platforms/pseries/dlpar.c causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kernel-alt-0:4.14.0-115.21.2.el7a","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12614.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-12615","severity":"moderate","public_date":"2019-06-02T00:00:00Z","advisories":[],"bugzilla":"1718179","bugzilla_description":"CVE-2019-12615 kernel: null pointer dereference in get_vdev_port_node_info in arch /sparc/kernel/mdesc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12615.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-10126","severity":"important","public_date":"2019-05-31T00:00:00Z","advisories":["RHSA-2020:2289","RHSA-2019:3089","RHSA-2020:0174","RHSA-2019:3076","RHSA-2019:3055","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1716992","bugzilla_description":"CVE-2019-10126 kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10126.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-3846","severity":"important","public_date":"2019-05-30T12:53:00Z","advisories":["RHSA-2020:2289","RHSA-2019:3089","RHBA-2019:3151","RHSA-2020:0174","RHSA-2019:2741","RHSA-2019:2703","RHSA-2019:3076","RHSA-2019:3055"],"bugzilla":"1713059","bugzilla_description":"CVE-2019-3846 kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-0:3.10.0-1062.4.1.rt56.1027.el7","kernel-0:3.10.0-957.54.1.el7","kernel-0:3.10.0-1062.4.1.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3846.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-12454","severity":"low","public_date":"2019-05-29T00:00:00Z","advisories":[],"bugzilla":"1716996","bugzilla_description":"CVE-2019-12454 kernel: unspecified impact in function wcd9335_codec_enable_dec in sound/soc/codecs/wcd9335.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12454.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-12456","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":[],"bugzilla":"1717182","bugzilla_description":"CVE-2019-12456 kernel: double fetch in the MPT3COMMAND case in _ctl_ioctl_main in drivers/scsi/mpt3sas/mpt3sas_ctl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-12455","severity":"moderate","public_date":"2019-05-28T00:00:00Z","advisories":[],"bugzilla":"1716990","bugzilla_description":"CVE-2019-12455 kernel: null pointer dereference in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12455.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-12378","severity":"moderate","public_date":"2019-05-25T00:00:00Z","advisories":[],"bugzilla":"1715459","bugzilla_description":"CVE-2019-12378 kernel: unchecked kmalloc of new_ra in ip6_ra_control leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12378.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2019-12380","severity":"low","public_date":"2019-05-25T00:00:00Z","advisories":[],"bugzilla":"1715494","bugzilla_description":"CVE-2019-12380 kernel: memory allocation failure in the efi subsystem leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12380.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-12381","severity":"moderate","public_date":"2019-05-25T00:00:00Z","advisories":[],"bugzilla":"1715501","bugzilla_description":"CVE-2019-12381 kernel: unchecked kmalloc of new_ra in ip_ra_control leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12381.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-12379","severity":"low","public_date":"2019-05-24T00:00:00Z","advisories":[],"bugzilla":"1715491","bugzilla_description":"CVE-2019-12379 kernel:  memory leak in con_insert_unipair in drivers/tty/vt/consolemap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-200|CWE-400)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12379.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.3"},{"CVE":"CVE-2019-12382","severity":"moderate","public_date":"2019-05-24T00:00:00Z","advisories":["RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303"],"bugzilla":"1715554","bugzilla_description":"CVE-2019-12382 kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253->CWE-476","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12382.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-12126","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646781","bugzilla_description":"CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12130","severity":"important","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646784","bugzilla_description":"CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385->CWE-226","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-12127","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1667782","bugzilla_description":"CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11091","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1705312","bugzilla_description":"CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-11085","severity":"important","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:1891","RHBA-2019:3151","RHSA-2019:1873","RHSA-2020:0609","RHSA-2020:0592","RHSA-2019:1971","RHSA-2020:0543","RHSA-2019:1959"],"bugzilla":"1710405","bugzilla_description":"CVE-2019-11085 kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-250","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.64.1.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-862.48.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11085.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10142","severity":"important","public_date":"2019-05-14T00:00:00Z","advisories":[],"bugzilla":"1711194","bugzilla_description":"CVE-2019-10142 kernel: integer overflow in ioctl handling of fsl hypervisor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10142.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-11833","severity":"moderate","public_date":"2019-05-11T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1712072","bugzilla_description":"CVE-2019-11833 kernel: fs/ext4/extents.c leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11833.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-11884","severity":"moderate","public_date":"2019-05-10T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1709837","bugzilla_description":"CVE-2019-11884 kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11884.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"6.8"},{"CVE":"CVE-2019-11815","severity":"important","public_date":"2019-05-08T00:00:00Z","advisories":[],"bugzilla":"1708518","bugzilla_description":"CVE-2019-11815 kernel: race condition in rds_tcp_kill_sock in net/rds/tcp.c leading to use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11810","severity":"moderate","public_date":"2019-05-07T00:00:00Z","advisories":["RHSA-2020:0036","RHSA-2019:3217","RHSA-2019:2029","RHBA-2019:3151","RHSA-2019:1971","RHSA-2019:2736","RHSA-2019:2043","RHSA-2019:1959","RHSA-2019:2837"],"bugzilla":"1709164","bugzilla_description":"CVE-2019-11810 kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.14.1.el7a","kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:2.6.32-754.22.1.el6","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.46.1.el7","kernel-0:3.10.0-957.35.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11810.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-11811","severity":"moderate","public_date":"2019-05-07T00:00:00Z","advisories":["RHSA-2019:1891","RHSA-2020:0036","RHSA-2019:4057","RHSA-2019:4058","RHBA-2019:3151","RHSA-2019:1873","RHSA-2019:1971","RHSA-2019:1959","RHSA-2020:2854"],"bugzilla":"1709180","bugzilla_description":"CVE-2019-11811 kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.61.1.el7","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-0:4.18.0-80.7.1.el8_0","kernel-0:3.10.0-862.46.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11811.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-11683","severity":"moderate","public_date":"2019-05-01T00:00:00Z","advisories":[],"bugzilla":"1707358","bugzilla_description":"CVE-2019-11683 kernel: udp_gro_receive_segment in net/ipv4/udp_offload.c allows denial of service or other unspecified impact via UDP packets with 0 payload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11683.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2054","severity":"moderate","public_date":"2019-05-01T00:00:00Z","advisories":[],"bugzilla":"1709898","bugzilla_description":"CVE-2019-2054 kernel: seccompass mechanism bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-305|CWE-284)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2054.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2019-3900","severity":"important","public_date":"2019-04-25T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:1973","RHSA-2019:4058","RHSA-2019:3220","RHSA-2019:2043","RHSA-2019:3967","RHSA-2019:3836","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1698757","bugzilla_description":"CVE-2019-3900 Kernel: vhost_net: infinite loop while receiving packets leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-957.38.1.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:3.10.0-693.61.1.el7","redhat-coreos-42.81.20191107.0","kernel-alt-0:4.14.0-115.10.1.el7a","kernel-0:4.18.0-80.15.1.el8_0","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.44.2.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2019-11487","severity":"important","public_date":"2019-04-22T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:3266","RHBA-2019:3151","RHSA-2020:3230","RHSA-2020:0839","RHSA-2020:0174","RHSA-2019:2741","RHSA-2020:0834","RHSA-2019:2703","RHSA-2020:4182"],"bugzilla":"1703063","bugzilla_description":"CVE-2019-11487 kernel: Count overflow in FUSE request leading to use-after-free issues.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-693.71.2.el7","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-1:3.10.0-693.71.2.rt56.670.el6rt","kernel-rt-0:3.10.0-1062.18.1.rt56.1044.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:2.6.32-754.35.1.el6","kernel-0:3.10.0-1062.18.1.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-11599","severity":"moderate","public_date":"2019-04-19T00:00:00Z","advisories":["RHSA-2020:0100","RHSA-2020:0179","RHSA-2019:2029","RHSA-2019:2043","RHSA-2020:0103","RHSA-2020:0543","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1705937","bugzilla_description":"CVE-2019-11599 kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-667","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.62.1.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-957.43.1.el7","kernel-0:3.10.0-862.48.1.el7","kernel-rt-1:3.10.0-693.62.1.rt56.659.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11599.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-18805","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:0740","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1771496","bugzilla_description":"CVE-2019-18805 kernel: integer overflow in tcp_ack_update_rtt in net/ipv4/tcp_input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18805.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2018-20510","severity":"low","public_date":"2019-04-15T00:00:00Z","advisories":[],"bugzilla":"1707391","bugzilla_description":"CVE-2018-20510 kernel: print_binder_transaction_ilocked() in drivers/android/binder.c leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20510.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-20509","severity":"low","public_date":"2019-04-13T00:00:00Z","advisories":[],"bugzilla":"1707400","bugzilla_description":"CVE-2018-20509 kernel: print_binder_ref_olocked function in drivers/android/binder.c leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20509.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-3887","severity":"important","public_date":"2019-04-05T16:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2703"],"bugzilla":"1695044","bugzilla_description":"CVE-2019-3887 Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3887.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-11486","severity":"moderate","public_date":"2019-04-05T00:00:00Z","advisories":[],"bugzilla":"1705498","bugzilla_description":"CVE-2019-11486 kernel: multiple race conditions in Siemens R3964 line discipline driver in drivers/tty/n_r3964.c leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11486.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-3892","severity":null,"public_date":"2019-04-04T02:55:00Z","advisories":[],"bugzilla":"1696015","bugzilla_description":"CVE-2019-3892 kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3892.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-3837","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":[],"bugzilla":"1678423","bugzilla_description":"CVE-2019-3837 kernel: memory leak in tcp_recvmsg() with NET_DMA","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-11190","severity":"low","public_date":"2019-04-03T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016"],"bugzilla":"1699856","bugzilla_description":"CVE-2019-11190 kernel: ASLR bypass for setuid binaries due to late install_exec_creds()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11190.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-11191","severity":"low","public_date":"2019-04-03T00:00:00Z","advisories":[],"bugzilla":"1700007","bugzilla_description":"CVE-2019-11191 kernel: race condition in load_aout_binary() allows local users to bypass ASLR on setuid a.out programs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11191.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-3882","severity":"moderate","public_date":"2019-04-02T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1689426","bugzilla_description":"CVE-2019-3882 kernel: denial of service vector through vfio DMA mappings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-3874","severity":"moderate","public_date":"2019-03-19T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1686373","bugzilla_description":"CVE-2019-3874 kernel: SCTP socket buffer memory leak leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3874.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-19543","severity":"moderate","public_date":"2019-03-19T00:00:00Z","advisories":[],"bugzilla":"1781810","bugzilla_description":"CVE-2019-19543 kernel: use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19543.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-20811","severity":"low","public_date":"2019-03-19T00:00:00Z","advisories":[],"bugzilla":"1846439","bugzilla_description":"CVE-2019-20811 kernel: net-sysfs: *_queue_add_kobject refcount issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20811.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-2024","severity":"low","public_date":"2019-03-14T00:00:00Z","advisories":[],"bugzilla":"1696017","bugzilla_description":"CVE-2019-2024 kernel: media: em28xx: Use-after-free in em28xx/em28xx-dvb.c when disconnecting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2024.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2019-10124","severity":null,"public_date":"2019-03-05T00:00:00Z","advisories":[],"bugzilla":"1695049","bugzilla_description":"CVE-2019-10124 kernel: hwpoison implementation in mm/memory-failure.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-119|CWE-400)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10124.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-2025","severity":"low","public_date":"2019-03-04T00:00:00Z","advisories":[],"bugzilla":"1696020","bugzilla_description":"CVE-2019-2025 kernel: Use-after-free due to race condition in android/binder.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2025.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-9857","severity":"moderate","public_date":"2019-03-02T00:00:00Z","advisories":[],"bugzilla":"1694758","bugzilla_description":"CVE-2019-9857 kernel: memory leak in inotify_update_existing_watch() leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9857.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2019-9213","severity":"important","public_date":"2019-02-27T00:00:00Z","advisories":["RHSA-2019:1479","RHBA-2019:3151","RHSA-2019:0831","RHSA-2019:1480"],"bugzilla":"1686136","bugzilla_description":"CVE-2019-9213 kernel: lack of check for mmap minimum address in expand_downwards in mm/mmap.c leads to NULL pointer dereferences exploit on non-SMAP platforms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:4.18.0-80.4.2.el8_0","redhat-coreos-42.80.20191022.0","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9213.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-10125","severity":"important","public_date":"2019-02-25T00:00:00Z","advisories":[],"bugzilla":"1695074","bugzilla_description":"CVE-2019-10125 kernel: use-after-free in aio_poll() in fs/aio.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-8956","severity":"important","public_date":"2019-02-21T00:00:00Z","advisories":[],"bugzilla":"1679889","bugzilla_description":"CVE-2019-8956 Kernel: SCTP: use-after-free while traversing list of endpoint associations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8956.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9500","severity":"important","public_date":"2019-02-19T00:00:00Z","advisories":["RHSA-2019:3217","RHSA-2019:2600","RHSA-2019:4168","RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2945","RHSA-2019:2703","RHSA-2019:2609","RHSA-2019:4171"],"bugzilla":"1701224","bugzilla_description":"CVE-2019-9500 kernel: brcmfmac heap buffer overflow in brcmf_wowl_nd_results","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-alt-0:4.14.0-115.14.1.el7a","kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","kernel-rt-0:3.10.0-1062.1.1.rt56.1024.el7","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0","kernel-0:3.10.0-1062.1.1.el7","kernel-0:3.10.0-957.41.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9503","severity":"moderate","public_date":"2019-02-19T00:00:00Z","advisories":["RHSA-2020:2522","RHBA-2019:3151","RHSA-2019:2741","RHSA-2020:1070","RHSA-2019:2703","RHSA-2020:1016"],"bugzilla":"1701842","bugzilla_description":"CVE-2019-9503 kernel: brcmfmac frame validation bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-1062.26.1.el7","kernel-0:4.18.0-80.11.1.el8_0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9503.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-8980","severity":"moderate","public_date":"2019-02-18T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1769","RHSA-2020:1567"],"bugzilla":"1679972","bugzilla_description":"CVE-2019-8980 kernel: memory leak in the kernel_read_file function in fs/exec.c allows to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:4.18.0-193.el8","redhat-coreos-43.82.202007300301.0","kernel-rt-0:4.18.0-193.rt13.51.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8980.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-8912","severity":"important","public_date":"2019-02-15T00:00:00Z","advisories":["RHSA-2020:0174"],"bugzilla":"1678685","bugzilla_description":"CVE-2019-8912 kernel: af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8912.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9162","severity":"important","public_date":"2019-02-11T00:00:00Z","advisories":[],"bugzilla":"1683191","bugzilla_description":"CVE-2019-9162 kernel: out-of-bounds read/write in et/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9162.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-7221","severity":"important","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2019:0818","RHSA-2019:4058","RHSA-2019:0833","RHSA-2019:3967"],"bugzilla":"1671904","bugzilla_description":"CVE-2019-7221 Kernel: KVM: nVMX: use-after-free of the hrtimer for emulation of the preemption timer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-693.61.1.el7","kernel-0:3.10.0-957.12.1.el7","kernel-rt-0:3.10.0-957.12.1.rt56.927.el7","kernel-0:3.10.0-862.44.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7221.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-6974","severity":"important","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2019:2809","RHSA-2019:0818","RHSA-2019:0833","RHSA-2020:0103","RHSA-2019:3967"],"bugzilla":"1671913","bugzilla_description":"CVE-2019-6974 Kernel: KVM: potential use-after-free via kvm_ioctl_create_device()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-693.62.1.el7","kernel-0:3.10.0-957.12.1.el7","kernel-rt-0:3.10.0-957.12.1.rt56.927.el7","kernel-alt-0:4.14.0-115.12.1.el7a","kernel-0:3.10.0-862.44.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6974.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-7222","severity":"low","public_date":"2019-02-07T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1671930","bugzilla_description":"CVE-2019-7222 Kernel: KVM: leak of uninitialized stack contents to guest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7222.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2018-16880","severity":"important","public_date":"2019-01-25T00:00:00Z","advisories":[],"bugzilla":"1656472","bugzilla_description":"CVE-2018-16880 kernel: Out of bounds write in get_rx_bufs() function in drivers/vhost/net.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16880.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-3819","severity":"low","public_date":"2019-01-25T00:00:00Z","advisories":[],"bugzilla":"1669187","bugzilla_description":"CVE-2019-3819 kernel: infinite loop in drivers/hid/hid-debug.c:hid_debug_events_read()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3819.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2018-20449","severity":"low","public_date":"2019-01-22T00:00:00Z","advisories":[],"bugzilla":"1696604","bugzilla_description":"CVE-2018-20449 kernel: reading \"callback=\" lines in a debugfs file in drivers/dma/qcom/hidma_dbg.c results in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20449.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"1.9"},{"CVE":"CVE-2019-18885","severity":"low","public_date":"2019-01-19T00:00:00Z","advisories":[],"bugzilla":"1775746","bugzilla_description":"CVE-2019-18885 kernel: fs/btrfs/volumes.c allows a btrfs_verify_dev_extents NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-9003","severity":"low","public_date":"2019-01-16T00:00:00Z","advisories":[],"bugzilla":"1681007","bugzilla_description":"CVE-2019-9003 kernel: use-after-free and OOPS in drivers/char/ipmi/ipmi_msghandler.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9003.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-3459","severity":"moderate","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1663176","bugzilla_description":"CVE-2019-3459 kernel: Heap address information leak while using L2CAP_GET_CONF_OPT","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-3460","severity":"moderate","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2020:0740","RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1663179","bugzilla_description":"CVE-2019-3460 kernel: Heap address information leak while using L2CAP_PARSE_CONF_RSP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-alt-0:4.14.0-115.18.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-5489","severity":"important","public_date":"2019-01-06T00:00:00Z","advisories":["RHSA-2019:2473","RHSA-2019:4255","RHSA-2019:2029","RHSA-2019:4057","RHSA-2019:4058","RHSA-2019:4159","RHSA-2019:4164","RHSA-2019:4056","RHSA-2019:2043","RHSA-2020:0204","RHSA-2019:2809","RHSA-2019:2808","RHSA-2019:3967","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:2837","RHSA-2019:3309"],"bugzilla":"1664110","bugzilla_description":"CVE-2019-5489 Kernel: page cache side channel attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:2.6.18-439.el5","kernel-0:2.6.32-431.97.1.el6","kernel-0:2.6.32-754.18.2.el6","kernel-0:3.10.0-327.83.1.el7","kernel-0:2.6.32-504.82.1.el6","kernel-0:3.10.0-1062.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:3.10.0-957.35.1.el7","kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.61.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-0:4.18.0-80.15.1.el8_0","kernel-alt-0:4.14.0-115.12.1.el7a","kernel-0:3.10.0-862.44.2.el7","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-514.71.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-20669","severity":"important","public_date":"2019-01-04T00:00:00Z","advisories":[],"bugzilla":"1669141","bugzilla_description":"CVE-2018-20669 kernel: missing access_ok() checks in i915_gem_execbuffer2_ioctl() results in priviledge escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20669.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-7308","severity":"important","public_date":"2019-01-03T00:00:00Z","advisories":[],"bugzilla":"1672355","bugzilla_description":"CVE-2019-7308 kernel: eBPF: Spectre v1 mitigation bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7308.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2019-3701","severity":null,"public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1663729","bugzilla_description":"CVE-2019-3701 kernel: Missing check in net/can/gw.c:can_can_gw_rcv() allows for crash by users with CAP_NET_ADMIN","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3701.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-20784","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:1971","RHSA-2019:1959"],"bugzilla":"1680540","bugzilla_description":"CVE-2018-20784 kernel: infinite loop in update_blocked_averages() in kernel/sched/fair.c leading to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:4.18.0-80.7.1.rt9.153.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.7.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-16885","severity":"low","public_date":"2018-12-21T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1661503","bugzilla_description":"CVE-2018-16885 kernel: out-of-bound read in memcpy_fromiovecend()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-16882","severity":"important","public_date":"2018-12-18T00:00:00Z","advisories":[],"bugzilla":"1660604","bugzilla_description":"CVE-2018-16882 Kernel: KVM: nVMX: use after free in posted interrupt processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-19985","severity":"low","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1666106","bugzilla_description":"CVE-2018-19985 kernel: oob memory read in hso_probe in drivers/net/usb/hso.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19985.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-20169","severity":"moderate","public_date":"2018-12-05T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:2770","RHSA-2020:1070","RHSA-2020:1016","RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309","RHSA-2020:2777"],"bugzilla":"1660385","bugzilla_description":"CVE-2018-20169 kernel: usb: missing size check in the __usb_get_extra_descriptor() leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","redhat-coreos-42.81.20191107.0","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-rt-1:3.10.0-693.69.1.rt56.667.el6rt","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8","kernel-0:3.10.0-693.69.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20169.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-19824","severity":"moderate","public_date":"2018-12-04T00:00:00Z","advisories":["RHBA-2019:3151","RHSA-2019:2741","RHSA-2019:2703"],"bugzilla":"1655816","bugzilla_description":"CVE-2018-19824 kernel: Use-after-free in sound/usb/card.c:usb_audio_probe()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:4.18.0-80.11.1.rt9.156.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.11.1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19824.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2018-5856","severity":"moderate","public_date":"2018-12-03T00:00:00Z","advisories":[],"bugzilla":"1655386","bugzilla_description":"CVE-2018-5856 kernel: Use-after-free in sound/soc/qcom/qdsp6/q6asm.c allows for kernel panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5856.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-16884","severity":"important","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:2696","RHSA-2019:1891","RHSA-2019:1873","RHSA-2019:2730","RHSA-2019:3517","RHBA-2019:3303","RHSA-2020:2854","RHSA-2019:3309","RHSA-2020:0204"],"bugzilla":"1660375","bugzilla_description":"CVE-2018-16884 kernel: nfs: use-after-free in svc_process_common()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-957.27.2.el7","redhat-coreos-42.81.20191107.0","kernel-0:3.10.0-693.58.1.el7","kernel-alt-0:4.14.0-115.26.1.el7a","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:3.10.0-957.27.2.rt56.940.el7","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16884.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-14646","severity":"moderate","public_date":"2018-11-26T00:00:00Z","advisories":["RHSA-2018:3843","RHSA-2018:3666","RHSA-2018:3651"],"bugzilla":"1630124","bugzilla_description":"CVE-2018-14646 kernel: NULL pointer dereference in af_netlink.c:__netlink_ns_capable() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-957.1.3.rt56.913.el7","kernel-0:3.10.0-957.1.3.el7","kernel-0:3.10.0-862.25.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14646.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-18397","severity":"moderate","public_date":"2018-11-26T00:00:00Z","advisories":["RHSA-2019:0163","RHSA-2019:0202","RHSA-2019:0324","RHSA-2019:0831"],"bugzilla":"1641548","bugzilla_description":"CVE-2018-18397 kernel: userfaultfd bypasses tmpfs file permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-0:3.10.0-862.27.1.el7","kernel-0:3.10.0-693.44.1.el7","kernel-0:3.10.0-957.5.1.el7","kernel-alt-0:4.14.0-115.7.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18397.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-16862","severity":"moderate","public_date":"2018-11-24T00:00:00Z","advisories":[],"bugzilla":"1649017","bugzilla_description":"CVE-2018-16862 kernel: cleancache: Infoleak of deleted files after reuse of old inodes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-19961","severity":"important","public_date":"2018-11-20T12:00:00Z","advisories":[],"bugzilla":"1647573","bugzilla_description":"CVE-2018-19961 CVE-2018-19962 xen: insufficient TLB flushing / improper large page mappings with AMD IOMMUs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19961.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-19962","severity":"important","public_date":"2018-11-20T12:00:00Z","advisories":[],"bugzilla":"1647573","bugzilla_description":"CVE-2018-19961 CVE-2018-19962 xen: insufficient TLB flushing / improper large page mappings with AMD IOMMUs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19962.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-19965","severity":"important","public_date":"2018-11-20T12:00:00Z","advisories":[],"bugzilla":"1647588","bugzilla_description":"CVE-2018-19965 xen: x86: DoS from attempting to use INVPCID with a non-canonical addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-228","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19965.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-19406","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1652650","bugzilla_description":"CVE-2018-19406 kernel: kvm: NULL pointer dereference in kvm_pv_send_ipi in arch/x86/kvm/lapic.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19406.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-19407","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1652656","bugzilla_description":"CVE-2018-19407 kernel: kvm: NULL pointer dereference in vcpu_scan_ioapic in arch/x86/kvm/x86.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19407.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-19270","severity":null,"public_date":"2018-11-19T00:00:00Z","advisories":[],"bugzilla":"1651061","bugzilla_description":"CVE-2018-19270 kernel: Out-of-bounds read in drivers/usb/misc/yurex.c:yurex_read allows for DoS or potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19270.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-18955","severity":"important","public_date":"2018-11-15T00:00:00Z","advisories":[],"bugzilla":"1651384","bugzilla_description":"CVE-2018-18955 kernel: Privilege escalation in map_write() in kernel/user_namespace.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18955.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-9385","severity":"moderate","public_date":"2018-11-07T00:00:00Z","advisories":[],"bugzilla":"1647289","bugzilla_description":"CVE-2018-9385 kernel: Out-of-bounds write due to incorrect bounds check in drivers/amba/bus.c:driver_override_store()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9385.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-19854","severity":"moderate","public_date":"2018-11-03T00:00:00Z","advisories":["RHSA-2019:3517","RHBA-2019:3303","RHSA-2019:3309"],"bugzilla":"1656986","bugzilla_description":"CVE-2018-19854 kernel: Information Disclosure in crypto_report_one in crypto/crypto_user.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["redhat-coreos-42.81.20191107.0","kernel-rt-0:4.18.0-147.rt24.93.el8","kernel-0:4.18.0-147.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19854.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-18710","severity":"low","public_date":"2018-10-29T00:00:00Z","advisories":[],"bugzilla":"1645140","bugzilla_description":"CVE-2018-18710 kernel: Information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18710.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-18281","severity":"moderate","public_date":"2018-10-18T00:00:00Z","advisories":["RHSA-2020:0100","RHSA-2020:0036","RHSA-2020:0179","RHSA-2019:2029","RHSA-2019:0831","RHSA-2019:2043","RHSA-2020:0103"],"bugzilla":"1645121","bugzilla_description":"CVE-2018-18281 kernel: TLB flush happens too late on mremap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.62.1.el7","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.46.1.el7","kernel-0:3.10.0-957.43.1.el7","kernel-rt-1:3.10.0-693.62.1.rt56.659.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18281.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-17977","severity":"moderate","public_date":"2018-10-05T00:00:00Z","advisories":[],"bugzilla":"1637504","bugzilla_description":"CVE-2018-17977 kernel: Mishandled interactions among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17977.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-18445","severity":"moderate","public_date":"2018-10-05T00:00:00Z","advisories":["RHSA-2019:0514","RHSA-2019:0512"],"bugzilla":"1640596","bugzilla_description":"CVE-2018-18445 kernel: Faulty computation of numberic bounds in the BPF verifier","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-0:3.10.0-957.10.1.el7","kernel-rt-0:3.10.0-957.10.1.rt56.921.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18445.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-18021","severity":"important","public_date":"2018-10-03T00:00:00Z","advisories":["RHSA-2018:3656"],"bugzilla":"1635475","bugzilla_description":"CVE-2018-18021 kernel: Privilege escalation on arm64 via KVM hypervisor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-alt-0:4.14.0-115.2.2.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18021.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-17972","severity":"moderate","public_date":"2018-09-27T00:00:00Z","advisories":["RHSA-2019:2473","RHSA-2019:0514","RHSA-2019:0512","RHSA-2019:0831"],"bugzilla":"1636349","bugzilla_description":"CVE-2018-17972 kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:3.10.0-957.10.1.el7","kernel-rt-0:3.10.0-957.10.1.rt56.921.el7","kernel-0:2.6.32-754.18.2.el6","kernel-alt-0:4.14.0-115.7.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17972.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-14634","severity":"important","public_date":"2018-09-25T17:00:00Z","advisories":["RHSA-2018:2925","RHSA-2018:3591","RHSA-2018:2924","RHSA-2018:2748","RHSA-2018:3590","RHSA-2018:2846","RHSA-2018:2933","RHSA-2018:3643","RHSA-2018:2763","RHSA-2018:3586","RHSA-2018:3540"],"bugzilla":"1624498","bugzilla_description":"CVE-2018-14634 kernel: Integer overflow in Linux's create_elf_tables function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-0:2.6.32-358.94.1.el6","kernel-0:3.10.0-327.76.1.el7","kernel-0:3.10.0-693.43.1.el7","kernel-0:2.6.32-573.65.2.el6","kernel-rt-0:3.10.0-862.14.4.rt56.821.el7","kernel-rt-1:3.10.0-693.43.1.rt56.630.el6rt","kernel-0:2.6.32-504.76.2.el6","kernel-0:2.6.32-754.6.3.el6","kernel-0:2.6.32-431.93.2.el6","kernel-0:3.10.0-862.14.4.el7","kernel-0:3.10.0-514.61.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14634.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-20836","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2020:4062","RHSA-2020:4060"],"bugzilla":"1707796","bugzilla_description":"CVE-2018-20836 kernel: race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c leads to use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-416","affected_packages":["kernel-rt-0:3.10.0-1160.rt56.1131.el7","kernel-0:3.10.0-1160.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20836.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-14633","severity":"moderate","public_date":"2018-09-24T00:00:00Z","advisories":["RHSA-2018:3666","RHSA-2018:3651","RHSA-2019:1946"],"bugzilla":"1626035","bugzilla_description":"CVE-2018-14633 kernel: stack-based buffer overflow in chap_server_compute_md5() in iscsi target","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["kernel-0:3.10.0-693.55.1.el7","kernel-rt-0:3.10.0-957.1.3.rt56.913.el7","kernel-0:3.10.0-957.1.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-14641","severity":"important","public_date":"2018-09-18T09:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1629636","bugzilla_description":"CVE-2018-14641 kernel: a bug in ip_frag_reasm() can cause a crash in ip_do_fragment()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14641.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-16597","severity":"moderate","public_date":"2018-09-18T00:00:00Z","advisories":["RHSA-2016:2574"],"bugzilla":"1632443","bugzilla_description":"CVE-2018-16597 kernel: overlayfs file truncation without permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16597.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9518","severity":"moderate","public_date":"2018-09-14T00:00:00Z","advisories":[],"bugzilla":"1631027","bugzilla_description":"CVE-2018-9518 kernel: NFC: llcp: Out of bounds write in nfc_llcp_sdp_tlv struct in nfc/llcp_commands.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9518.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-9516","severity":"low","public_date":"2018-09-14T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1631036","bugzilla_description":"CVE-2018-9516 kernel: HID: debug: Buffer overflow in hid_debug_events_read() in drivers/hid/hid-debug.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9516.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2018-9517","severity":"moderate","public_date":"2018-09-14T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1631045","bugzilla_description":"CVE-2018-9517 kernel: l2tp: Race condition between pppol2tp_session_create() and l2tp_eth_create()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9517.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-14656","severity":"important","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1629940","bugzilla_description":"CVE-2018-14656 kernel: Arbitrary Kernel Read into dmesg via Missing Address Check in segfault Handler","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14656.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-17182","severity":"important","public_date":"2018-09-13T00:00:00Z","advisories":["RHSA-2018:3656"],"bugzilla":"1631205","bugzilla_description":"CVE-2018-17182 kernel: Use-after-free in the vmacache_flush_all function resulting in a possible privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-alt-0:4.14.0-115.2.2.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-20511","severity":"low","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1663072","bugzilla_description":"CVE-2018-20511 kernel: Memory address exposure in drivers/net/appletalk/ipddp.c:ipddp_ioctl() by users with CAP_NET_ADMIN","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.3"},{"CVE":"CVE-2018-12193","severity":"important","public_date":"2018-09-10T00:00:00Z","advisories":[],"bugzilla":"1638454","bugzilla_description":"CVE-2018-12193 kernel: insufficient access control in Intel QuickAssist Technology","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12193.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-6554","severity":null,"public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1623610","bugzilla_description":"CVE-2018-6554 kernel: irda: Memory leak caused by repeated binds of irda socket","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6554.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-6555","severity":null,"public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1623614","bugzilla_description":"CVE-2018-6555 kernel: irda: use-after-free vulnerability in the hashbin list","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6555.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2018-14619","severity":"important","public_date":"2018-08-28T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1622004","bugzilla_description":"CVE-2018-14619 kernel: crash (possible privesc) in kernel crypto api.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14619.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2018-10938","severity":"moderate","public_date":"2018-08-27T00:00:00Z","advisories":[],"bugzilla":"1622404","bugzilla_description":"CVE-2018-10938 kernel: infinite loop in net/ipv4/cipso_ipv4.c:cipso_v4_optptr() allows for DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10938.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10902","severity":"important","public_date":"2018-08-21T03:28:00Z","advisories":["RHSA-2018:3096","RHSA-2019:3217","RHSA-2018:3083","RHSA-2019:0641","RHSA-2019:0415","RHSA-2019:3967"],"bugzilla":"1590720","bugzilla_description":"CVE-2018-10902 kernel: MIDI driver race condition leads to a double-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:2.6.32-754.11.1.el6","kernel-alt-0:4.14.0-115.14.1.el7a","kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-rt-1:3.10.0-693.46.1.rt56.639.el6rt","kernel-0:3.10.0-862.44.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10902.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-9363","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1623067","bugzilla_description":"CVE-2018-9363 kernel: Buffer overflow in hidp_process_report","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9363.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2018-3620","severity":"important","public_date":"2018-08-14T17:00:00Z","advisories":["RHSA-2018:2603","RHSA-2018:2403","RHSA-2018:2602","RHSA-2018:2404","RHSA-2018:2393","RHSA-2018:2394","RHSA-2018:2391","RHSA-2018:2392","RHSA-2018:2390","RHSA-2018:2402","RHSA-2018:2388","RHSA-2018:2389","RHSA-2018:2387","RHSA-2018:2395","RHSA-2018:2384","RHSA-2018:2396"],"bugzilla":"1585005","bugzilla_description":"CVE-2018-3620 CVE-2018-3646 Kernel: hw: cpu: L1 terminal fault (L1TF)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["kernel-0:2.6.18-434.el5","kernel-0:3.10.0-514.55.4.el7","kernel-0:2.6.32-754.3.5.el6","kernel-0:2.6.32-358.91.4.el6","kernel-0:2.6.18-348.41.1.el5","rhvm-appliance-0:4.2-20180813.0","rhev-hypervisor7-0:7.3-20180813.0.el7ev","kernel-rt-0:3.10.0-862.11.6.rt56.819.el7","kernel-0:3.10.0-693.37.4.el7","rhev-hypervisor7-0:7.3-20180813.0.el6ev","kernel-0:2.6.32-431.91.3.el6","kernel-0:2.6.32-573.60.4.el6","kernel-0:3.10.0-327.71.4.el7","kernel-0:3.10.0-862.11.6.el7","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","kernel-0:2.6.32-504.72.4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3620.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-3646","severity":"important","public_date":"2018-08-14T17:00:00Z","advisories":["RHSA-2018:2603","RHSA-2018:2403","RHSA-2018:2602","RHSA-2018:2404","RHSA-2018:2393","RHSA-2018:2394","RHSA-2018:2391","RHSA-2018:2392","RHSA-2018:2390","RHSA-2018:2402","RHSA-2018:2388","RHSA-2018:2389","RHSA-2018:2387","RHSA-2018:2395","RHSA-2018:2384","RHSA-2018:2396"],"bugzilla":"1585005","bugzilla_description":"CVE-2018-3620 CVE-2018-3646 Kernel: hw: cpu: L1 terminal fault (L1TF)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["kernel-0:2.6.18-434.el5","kernel-0:3.10.0-514.55.4.el7","kernel-0:2.6.32-754.3.5.el6","kernel-0:2.6.32-358.91.4.el6","kernel-0:2.6.18-348.41.1.el5","rhvm-appliance-0:4.2-20180813.0","rhev-hypervisor7-0:7.3-20180813.0.el7ev","kernel-rt-0:3.10.0-862.11.6.rt56.819.el7","kernel-0:3.10.0-693.37.4.el7","rhev-hypervisor7-0:7.3-20180813.0.el6ev","kernel-0:2.6.32-431.91.3.el6","kernel-0:2.6.32-573.60.4.el6","kernel-0:3.10.0-327.71.4.el7","kernel-0:3.10.0-862.11.6.el7","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","kernel-0:2.6.32-504.72.4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3646.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-15471","severity":"important","public_date":"2018-08-14T17:00:00Z","advisories":[],"bugzilla":"1610555","bugzilla_description":"CVE-2018-15471 kernel: net: xen: Linux netback driver OOB access in hash handling (XSA-270)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15471.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2018-5391","severity":"important","public_date":"2018-08-14T16:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:2925","RHSA-2018:2924","RHSA-2018:2846","RHSA-2018:2933","RHSA-2018:3459","RHSA-2018:3096","RHSA-2018:3590","RHSA-2018:3083","RHSA-2018:2785","RHSA-2018:3586","RHSA-2018:3540","RHSA-2018:2791"],"bugzilla":"1609664","bugzilla_description":"CVE-2018-5391 kernel: IP fragments with random offsets allow a remote denial of service (FragmentSmack)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-327.76.1.el7","kernel-0:3.10.0-862.20.2.el7","kernel-rt-1:3.10.0-693.43.1.rt56.630.el6rt","kernel-0:3.10.0-514.58.1.el7","kernel-0:2.6.32-431.93.2.el6","kernel-alt-0:4.14.0-115.el7a","kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-693.43.1.el7","kernel-0:2.6.32-358.93.1.el6","kernel-0:2.6.32-573.65.2.el6","kernel-0:3.10.0-957.el7","kernel-0:2.6.32-504.76.2.el6","kernel-0:2.6.32-754.6.3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5391.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7754","severity":"low","public_date":"2018-08-09T00:00:00Z","advisories":[],"bugzilla":"1616374","bugzilla_description":"CVE-2018-7754 kernel: Information Exposure in aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7754.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-5953","severity":null,"public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1614057","bugzilla_description":"CVE-2018-5953 kernel: Information Exposure through dmesg data from a \"software IO TLB\" printk call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5953.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-5995","severity":null,"public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1614061","bugzilla_description":"CVE-2018-5995 kernel: Information Exposure through dmesg data from a \"pages/cpu\" printk call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5995.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-5390","severity":"important","public_date":"2018-08-06T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:2924","RHSA-2018:2933","RHSA-2018:2645","RHSA-2018:2789","RHSA-2018:2403","RHSA-2018:2790","RHSA-2018:2390","RHSA-2018:2776","RHSA-2018:2402","RHSA-2018:2785","RHSA-2018:2395","RHSA-2018:2384","RHSA-2018:2791"],"bugzilla":"1601704","bugzilla_description":"CVE-2018-5390 kernel: TCP segments with random offsets allow a remote denial of service (SegmentSmack)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:2.6.32-754.3.5.el6","kernel-0:2.6.32-573.62.1.el6","kernel-0:3.10.0-514.58.1.el7","kernel-rt-1:3.10.0-693.39.1.rt56.629.el6rt","rhvm-appliance-0:4.2-20180813.0","kernel-rt-0:3.10.0-862.11.6.rt56.819.el7","kernel-0:2.6.32-431.93.2.el6","kernel-alt-0:4.14.0-115.el7a","kernel-0:3.10.0-693.39.1.el7","kernel-0:3.10.0-327.73.1.el7","kernel-0:2.6.32-358.93.1.el6","kernel-0:3.10.0-862.11.6.el7","kernel-0:2.6.32-504.76.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5390.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-9465","severity":"moderate","public_date":"2018-08-05T00:00:00Z","advisories":[],"bugzilla":"1615658","bugzilla_description":"CVE-2018-9465 kernel: Use-after-free in drivers/android/binder.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9465.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-15594","severity":"moderate","public_date":"2018-08-03T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1620555","bugzilla_description":"CVE-2018-15594 kernel: Mishandling of indirect calls weakens Spectre mitigation for paravirtual guests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15594.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-14625","severity":"moderate","public_date":"2018-07-30T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:4154","RHSA-2019:2043"],"bugzilla":"1619846","bugzilla_description":"CVE-2018-14625 kernel: use-after-free Read in vhost_transport_send_pkt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.16.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14625.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-14678","severity":"moderate","public_date":"2018-07-25T00:00:00Z","advisories":[],"bugzilla":"1608559","bugzilla_description":"CVE-2018-14678 xen: Uninitialized state in x86 PV failsafe callback path (XSA-274)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14678.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-15572","severity":"moderate","public_date":"2018-07-20T00:00:00Z","advisories":[],"bugzilla":"1616245","bugzilla_description":"CVE-2018-15572 Kernel: hw: cpu: userspace-userspace spectreRSB attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1189->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15572.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-3693","severity":"important","public_date":"2018-07-10T17:00:00Z","advisories":["RHSA-2018:2390","RHSA-2020:0174","RHSA-2018:2395","RHSA-2018:2384","RHSA-2019:1946"],"bugzilla":"1581650","bugzilla_description":"CVE-2018-3693 Kernel: speculative bounds check bypass store","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:3.10.0-693.55.1.el7","kernel-0:2.6.32-754.3.5.el6","kernel-0:3.10.0-862.11.6.el7","kernel-rt-0:3.10.0-862.11.6.rt56.819.el7","kernel-alt-0:4.14.0-115.17.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3693.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-10872","severity":"moderate","public_date":"2018-07-10T10:00:00Z","advisories":["RHSA-2018:2164"],"bugzilla":"1596094","bugzilla_description":"CVE-2018-10872 kernel: error in exception handling leads to DoS (CVE-2018-8897 regression)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:2.6.32-754.2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10872.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-14616","severity":"low","public_date":"2018-07-09T00:00:00Z","advisories":[],"bugzilla":"1610106","bugzilla_description":"CVE-2018-14616 kernel: NULL pointer dereference in fs/crypto/crypto.c:fscrypt_do_page_crypto() when operating on a corrupted f2fs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-13406","severity":null,"public_date":"2018-07-06T00:00:00Z","advisories":[],"bugzilla":"1599168","bugzilla_description":"CVE-2018-13406 kernel: Integer overflow in drivers/video/fbdev/uvesafb.c:uvesafb_setcmap() allows for potential denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13406.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-16276","severity":"moderate","public_date":"2018-07-06T00:00:00Z","advisories":[],"bugzilla":"1624507","bugzilla_description":"CVE-2018-16276 kernel: incorrect bounds checking in yurex_read in drivers/usb/misc/yurex.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-13405","severity":"important","public_date":"2018-07-05T00:00:00Z","advisories":["RHSA-2019:2476","RHSA-2019:2696","RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083","RHSA-2019:2566","RHSA-2019:4159","RHSA-2019:2730","RHSA-2019:4164","RHSA-2019:0717"],"bugzilla":"1599161","bugzilla_description":"CVE-2018-13405 kernel: Missing check in fs/inode.c:inode_init_owner() does not clear SGID bit on non-directories for non-members","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-0:2.6.32-504.80.2.el6","kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-693.58.1.el7","kernel-0:3.10.0-862.41.1.el7","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:3.10.0-957.el7","kernel-0:3.10.0-327.83.1.el7","kernel-0:2.6.32-754.12.1.el6","kernel-alt-0:4.14.0-115.el7a","kernel-0:3.10.0-514.71.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13405.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-14615","severity":"low","public_date":"2018-07-05T00:00:00Z","advisories":[],"bugzilla":"1610102","bugzilla_description":"CVE-2018-14615 kernel: Buffer overflow in fs/f2fs/inline.c:truncate_inline_inode() when unmounting a crafted f2fs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14615.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-9415","severity":"moderate","public_date":"2018-07-02T00:00:00Z","advisories":[],"bugzilla":"1629030","bugzilla_description":"CVE-2018-9415 kernel: race condition in the ARM Advanced Microcontroller Bus Architecture (AMBA) driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9415.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2018-13053","severity":"low","public_date":"2018-06-27T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:0831","RHSA-2019:2043"],"bugzilla":"1597747","bugzilla_description":"CVE-2018-13053 kernel: Integer overflow in the alarm_timer_nsleep function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14617","severity":"low","public_date":"2018-06-27T00:00:00Z","advisories":[],"bugzilla":"1610110","bugzilla_description":"CVE-2018-14617 kernel: NULL pointer dereference in fs/hfsplus/dir.c:hfsplus_lookup() when operating on a file in a crafted hfs+ image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-11987","severity":"moderate","public_date":"2018-06-25T00:00:00Z","advisories":[],"bugzilla":"1661435","bugzilla_description":"CVE-2018-11987 kernel: Double-free in ion_system_heap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11987.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-12714","severity":"moderate","public_date":"2018-06-23T00:00:00Z","advisories":[],"bugzilla":"1595835","bugzilla_description":"CVE-2018-12714 kernel: slab out-of-bounds write in trace/trace_events_filter.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12714.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-12896","severity":null,"public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597759","bugzilla_description":"CVE-2018-12896 kernel: Integer overflow in kernel/time/posix-timers.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12896.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-13096","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597782","bugzilla_description":"CVE-2018-13096 kernel: out-of-bounds memory access in fs/f2fs/super.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13096.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-13097","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597786","bugzilla_description":"CVE-2018-13097 kernel: divide-by-zero in fs/f2fs/super.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13097.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-13098","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597792","bugzilla_description":"CVE-2018-13098 kernel: slab out-of-bounds read in fs/f2fs/inode.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13098.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-13099","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597810","bugzilla_description":"CVE-2018-13099 kernel: out-of-bounds memory access in fs/f2fs/inline.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13099.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-13100","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597814","bugzilla_description":"CVE-2018-13100 kernel: divide-by-zero in fs/f2fs/super.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13100.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-18559","severity":"important","public_date":"2018-06-15T00:00:00Z","advisories":["RHSA-2019:0188","RHSA-2019:0163","RHSA-2020:0174","RHSA-2019:4159","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:3967"],"bugzilla":"1641878","bugzilla_description":"CVE-2018-18559 kernel: Use-after-free due to race condition in AF_PACKET implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-957.5.1.el7","kernel-rt-0:3.10.0-957.5.1.rt56.916.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-0:3.10.0-862.44.2.el7","kernel-alt-0:4.14.0-115.17.1.el7a","kernel-0:3.10.0-514.71.1.el7","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18559.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-10882","severity":"low","public_date":"2018-06-14T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1596842","bugzilla_description":"CVE-2018-10882 kernel: stack-out-of-bounds write infs/jbd2/transaction.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10882.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.8"},{"CVE":"CVE-2018-10883","severity":"low","public_date":"2018-06-14T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1596846","bugzilla_description":"CVE-2018-10883 kernel: stack-out-of-bounds write in jbd2_journal_dirty_metadata function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10883.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.8"},{"CVE":"CVE-2018-3665","severity":"moderate","public_date":"2018-06-13T21:00:00Z","advisories":["RHSA-2018:1944","RHSA-2019:1170","RHSA-2018:1852","RHSA-2019:1190","RHSA-2018:2164","RHSA-2018:2165"],"bugzilla":"1585011","bugzilla_description":"CVE-2018-3665 Kernel: FPU state information leakage via lazy FPU restore","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-0:2.6.32-754.2.1.el6","kernel-rt-1:3.10.0-693.35.1.rt56.625.el6rt","kernel-rt-0:3.10.0-862.3.3.rt56.809.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-0:3.10.0-862.3.3.el7","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3665.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-12904","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":[],"bugzilla":"1595143","bugzilla_description":"CVE-2018-12904 kernel: kvm: nVMX: missing privilege check allows privilege escalation in nested virtualization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12904.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-10881","severity":"low","public_date":"2018-06-10T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1596828","bugzilla_description":"CVE-2018-10881 kernel: out-of-bound access in ext4_get_group_info() when mounting and operating a crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10881.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2018-10880","severity":"low","public_date":"2018-06-09T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1596812","bugzilla_description":"CVE-2018-10880 kernel: stack-out-of-bounds write in ext4_update_inline_data function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10880.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-10879","severity":"low","public_date":"2018-06-08T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1596806","bugzilla_description":"CVE-2018-10879 kernel: use-after-free detected in ext4_xattr_set_entry with a crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10879.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2018-13094","severity":"low","public_date":"2018-06-07T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:0831","RHSA-2019:2043"],"bugzilla":"1597771","bugzilla_description":"CVE-2018-13094 kernel: NULL pointer dereference in xfs_da_shrink_inode function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13094.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-10853","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2020:0036","RHSA-2020:0179","RHSA-2019:2029","RHSA-2019:2043","RHSA-2020:0103"],"bugzilla":"1589890","bugzilla_description":"CVE-2018-10853 kernel: kvm: guest userspace to guest kernel write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-693.62.1.el7","kernel-0:3.10.0-1062.el7","kernel-0:3.10.0-862.46.1.el7","kernel-0:3.10.0-957.43.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10853.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-12232","severity":"moderate","public_date":"2018-06-04T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1590215","bugzilla_description":"CVE-2018-12232 kernel: NULL pointer dereference if close and fchownat system calls share a socket file descriptor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-13095","severity":"low","public_date":"2018-06-03T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:1350"],"bugzilla":"1597775","bugzilla_description":"CVE-2018-13095 kernel: NULL pointer dereference in fs/xfs/libxfs/xfs_inode_buf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.8.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13095.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-12233","severity":"moderate","public_date":"2018-06-01T00:00:00Z","advisories":[],"bugzilla":"1590205","bugzilla_description":"CVE-2018-12233 kernel: Memory corruption in JFS setattr","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12233.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-14734","severity":"moderate","public_date":"2018-06-01T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:0831","RHSA-2019:2043"],"bugzilla":"1611005","bugzilla_description":"CVE-2018-14734 kernel: use-after-free in ucma_leave_multicast in drivers/infiniband/core/ucma.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-10878","severity":"moderate","public_date":"2018-05-28T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1596802","bugzilla_description":"CVE-2018-10878 kernel: out-of-bound write in ext4_init_block_bitmap function with a crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10878.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.8"},{"CVE":"CVE-2018-14609","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610074","bugzilla_description":"CVE-2018-14609 kernel: Invalid pointer dereference in fs/btrfs/relocation.c:__del_reloc_root() when mounting crafted btrfs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14609.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-14610","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610079","bugzilla_description":"CVE-2018-14610 kernel: Out-of-bounds access in write_extent_buffer() when mounting and operating a crafted btrfs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14610.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-14611","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610084","bugzilla_description":"CVE-2018-14611 kernel: Use-after-free in try_merge_free_space() when mounting crafted btrfs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14611.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2018-14612","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610088","bugzilla_description":"CVE-2018-14612 kernel: Invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14612.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-14613","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610092","bugzilla_description":"CVE-2018-14613 kernel: Invalid pointer dereference in io_ctl_map_page() when mounting and operating a crafted btrfs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14613.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-14614","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610098","bugzilla_description":"CVE-2018-14614 kernel: Out-of-bounds access in fs/f2fs/segment.c:__remove_dirty_segment() when mounting a crafted f2fs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14614.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-11412","severity":"moderate","public_date":"2018-05-22T00:00:00Z","advisories":["RHSA-2019:0525"],"bugzilla":"1582358","bugzilla_description":"CVE-2018-11412 kernel: out-of-bounds memcpy in fs/ext4/inline.c:ext4_read_inline_data() with crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805","affected_packages":["kernel-alt-0:4.14.0-115.6.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11412.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-3640","severity":"moderate","public_date":"2018-05-21T21:00:00Z","advisories":[],"bugzilla":"1580340","bugzilla_description":"CVE-2018-3640 hw: cpu: speculative register load","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1231->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3640.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2018-11506","severity":"moderate","public_date":"2018-05-21T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1583210","bugzilla_description":"CVE-2018-11506 kernel: Stack-based buffer overflow in drivers/scsi/sr_ioctl.c allows denial of service or other unspecified impact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11506.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000204","severity":"low","public_date":"2018-05-18T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1589324","bugzilla_description":"CVE-2018-1000204 kernel: Infoleak caused by incorrect handling of the SG_IO ioctl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000204.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2018-1120","severity":"moderate","public_date":"2018-05-17T17:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083","RHSA-2020:3804","RHSA-2020:3810"],"bugzilla":"1575472","bugzilla_description":"CVE-2018-1120 kernel: fuse-backed file mmap-ed onto process cmdline arguments causes denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-rt-1:3.10.0-693.76.1.rt56.676.el6rt","kernel-0:3.10.0-693.76.1.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1120.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-5814","severity":"moderate","public_date":"2018-05-15T00:00:00Z","advisories":[],"bugzilla":"1588620","bugzilla_description":"CVE-2018-5814 kernel: Race condition errors in USB over IP functionality can cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-20976","severity":"important","public_date":"2018-05-15T00:00:00Z","advisories":["RHSA-2020:0661","RHSA-2020:0178","RHSA-2020:0609","RHSA-2020:0592","RHSA-2020:0543"],"bugzilla":"1743547","bugzilla_description":"CVE-2018-20976 kernel: use-after-free in fs/xfs/xfs_super.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-327.85.1.el7","kernel-0:3.10.0-693.64.1.el7","kernel-0:3.10.0-514.72.1.el7","kernel-rt-1:3.10.0-693.64.1.rt56.662.el6rt","kernel-0:3.10.0-862.48.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20976.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-11508","severity":"low","public_date":"2018-05-11T00:00:00Z","advisories":[],"bugzilla":"1583314","bugzilla_description":"CVE-2018-11508 kernel: Missing initialization in kernel/compat.c:compat_get_timex() allows local attacker to obtain possibly sensitive information via adjtimex","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11508.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-1087","severity":"important","public_date":"2018-05-08T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1347","RHSA-2018:1710","RHSA-2018:1348","RHSA-2018:1524","RHSA-2018:1711","RHSA-2018:1345","RHSA-2018:1355"],"bugzilla":"1566837","bugzilla_description":"CVE-2018-1087 Kernel: KVM: error in exception handling leads to wrong debug stack value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.25.4.el7","redhat-virtualization-host-0:3.6-20180521.0","kernel-0:3.10.0-862.2.3.el7","rhev-hypervisor7-0:7.3-20180521.1.el7ev","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","rhev-hypervisor7-0:7.3-20180521.1.el6ev","kernel-0:3.10.0-327.66.3.el7","kernel-0:3.10.0-514.48.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1087.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-8897","severity":"moderate","public_date":"2018-05-08T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1319","RHSA-2018:1349","RHSA-2018:1347","RHSA-2018:1710","RHSA-2018:1348","RHSA-2018:1524","RHSA-2018:1711","RHSA-2018:1345","RHSA-2018:1346","RHSA-2018:1354","RHSA-2018:1355","RHSA-2018:1352","RHSA-2018:1353","RHSA-2018:1350","RHSA-2018:1351"],"bugzilla":"1567074","bugzilla_description":"CVE-2018-8897 Kernel: error in exception handling leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.25.4.el7","redhat-virtualization-host-0:3.6-20180521.0","kernel-0:2.6.32-696.28.1.el6","kernel-0:2.6.18-431.el5","kernel-0:2.6.32-504.68.2.el6","kernel-rt-1:3.10.0-693.25.4.rt56.613.el6rt","kernel-0:3.10.0-514.48.3.el7","kernel-0:2.6.32-358.88.2.el6","kernel-0:2.6.32-573.55.2.el6","kernel-0:2.6.32-431.89.2.el6","kernel-0:3.10.0-862.2.3.el7","rhev-hypervisor7-0:7.3-20180521.1.el7ev","kernel-0:2.6.18-348.39.2.el5","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","rhev-hypervisor7-0:7.3-20180521.1.el6ev","kernel-0:3.10.0-327.66.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8897.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-12633","severity":"moderate","public_date":"2018-05-08T00:00:00Z","advisories":[],"bugzilla":"1594170","bugzilla_description":"CVE-2018-12633 kernel: Double-fetch vulnerability in drivers/virt/vboxguest/vboxguest_linux.c:vbg_misc_device_ioctl() allows information leak and local denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12633.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2018-1000199","severity":"important","public_date":"2018-05-01T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1347","RHSA-2018:1348","RHSA-2018:1345","RHSA-2018:1354","RHSA-2018:1355","RHSA-2018:1374"],"bugzilla":"1568477","bugzilla_description":"CVE-2018-1000199 kernel: ptrace() incorrect error handling leads to corruption and DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":["kernel-0:3.10.0-693.25.4.el7","kernel-alt-0:4.14.0-49.2.2.el7a","kernel-0:3.10.0-862.2.3.el7","kernel-rt-1:3.10.0-693.25.4.rt56.613.el6rt","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","kernel-0:3.10.0-327.66.3.el7","kernel-0:3.10.0-514.48.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-16658","severity":"low","public_date":"2018-04-26T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:4154","RHSA-2019:2043"],"bugzilla":"1627731","bugzilla_description":"CVE-2018-16658 kernel: Information leak in cdrom_ioctl_drive_status","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.16.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16658.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2018-1000200","severity":"moderate","public_date":"2018-04-24T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1568744","bugzilla_description":"CVE-2018-1000200 kernel: NULL pointer dereference on OOM kill of large mlocked process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000200.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-1118","severity":"low","public_date":"2018-04-23T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1573699","bugzilla_description":"CVE-2018-1118 kernel: vhost: Information disclosure in vhost/vhost.c:vhost_new_msg()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1118.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.3"},{"CVE":"CVE-2018-10940","severity":"low","public_date":"2018-04-18T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1577408","bugzilla_description":"CVE-2018-10940 kernel: incorrect memory bounds check in drivers/cdrom/cdrom.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10940.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-10323","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":[],"bugzilla":"1571627","bugzilla_description":"CVE-2018-10323 kernel: Invalid pointer dereference in xfs_bmapi_write() when mounting and operating on crafted xfs image allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10323.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-10876","severity":"low","public_date":"2018-04-16T00:00:00Z","advisories":["RHSA-2019:0525"],"bugzilla":"1596773","bugzilla_description":"CVE-2018-10876 kernel: use-after-free in jbd2_journal_commit_transaction funtion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-alt-0:4.14.0-115.6.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10876.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-10877","severity":"low","public_date":"2018-04-16T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1596795","bugzilla_description":"CVE-2018-10877 kernel: out-of-bound access in ext4_ext_drop_refs function with a crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10877.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2018-1108","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":[],"bugzilla":"1567306","bugzilla_description":"CVE-2018-1108 kernel: drivers: getrandom(2) unblocks too early after system boot","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1108.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-10322","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1571623","bugzilla_description":"CVE-2018-10322 kernel: Invalid pointer dereference in xfs_ilock_attr_map_shared() when mounting crafted xfs image allowing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10322.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-13093","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1597766","bugzilla_description":"CVE-2018-13093 kernel: NULL pointer dereference in lookup_slow function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13093.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-12928","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":[],"bugzilla":"1597826","bugzilla_description":"CVE-2018-12928 kernel: NULL pointer dereference in hfs_ext_read_extent in hfs.ko","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12928.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-12929","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:0641"],"bugzilla":"1597831","bugzilla_description":"CVE-2018-12929 kernel: use-after-free in ntfs_read_locked_inode in the ntfs.ko","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-1:3.10.0-693.46.1.rt56.639.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12929.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-12930","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:0641"],"bugzilla":"1597837","bugzilla_description":"CVE-2018-12930 kernel: stack-based out-of-bounds write in ntfs_end_buffer_async_read in the ntfs.ko","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-1:3.10.0-693.46.1.rt56.639.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12930.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-12931","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:0641"],"bugzilla":"1597843","bugzilla_description":"CVE-2018-12931 kernel: stack-based out-of-bounds write in ntfs_attr_find in the ntfs.ko","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-1:3.10.0-693.46.1.rt56.639.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12931.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-10840","severity":"moderate","public_date":"2018-04-11T00:00:00Z","advisories":["RHSA-2019:0162"],"bugzilla":"1582346","bugzilla_description":"CVE-2018-10840 kernel: Heap-based buffer overflow in fs/ext4/xattr.c:ext4_xattr_set_entry() with crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-alt-0:4.14.0-115.5.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10840.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2018-9056","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":[],"bugzilla":"1561794","bugzilla_description":"CVE-2018-9056 hw: cpu: speculative execution branch predictor side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9056.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-1092","severity":"low","public_date":"2018-03-22T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1560777","bugzilla_description":"CVE-2018-1092 kernel: NULL pointer dereference in ext4/mballoc.c:ext4_process_freed_data() when mounting crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1092.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-1093","severity":"low","public_date":"2018-03-22T00:00:00Z","advisories":[],"bugzilla":"1560782","bugzilla_description":"CVE-2018-1093 kernel: Out of bounds read in ext4/balloc.c:ext4_valid_block_bitmap() causes crash with crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1093.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-1094","severity":"low","public_date":"2018-03-22T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1560788","bugzilla_description":"CVE-2018-1094 kernel: NULL pointer dereference in ext4/xattr.c:ext4_xattr_inode_hash() causes crash with crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1094.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-1095","severity":"low","public_date":"2018-03-22T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1560793","bugzilla_description":"CVE-2018-1095 kernel: out-of-bound access in fs/posix_acl.c:get_acl() causes crash with crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1095.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2018-8781","severity":"important","public_date":"2018-03-21T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1571062","bugzilla_description":"CVE-2018-8781 kernel: Integer overflow in drivers/gpu/drm/udl/udl_fb.c:udl_fb_mmap() can allow attackers to execute code in kernel space","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8781.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-8822","severity":"moderate","public_date":"2018-03-20T00:00:00Z","advisories":[],"bugzilla":"1558697","bugzilla_description":"CVE-2018-8822 kernel: Memory corruption in ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-18690","severity":"moderate","public_date":"2018-03-15T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1643988","bugzilla_description":"CVE-2018-18690 kernel: filesystem corruption due to an unchecked error condition during an xfs attribute change","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18690.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-7995","severity":"low","public_date":"2018-03-09T00:00:00Z","advisories":[],"bugzilla":"1553911","bugzilla_description":"CVE-2018-7995 kernel: Race condition in the store_int_with_restart() function in cpu/mcheck/mce.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7995.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-7755","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1553216","bugzilla_description":"CVE-2018-7755 kernel: Information exposure in fd_locked_ioctl function in drivers/block/floppy.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-7757","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1553361","bugzilla_description":"CVE-2018-7757 kernel: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7757.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18222","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":[],"bugzilla":"1553371","bugzilla_description":"CVE-2017-18222 kernel: Memory corruption in ethtool_get_strings function in hns driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18222.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2018-10021","severity":null,"public_date":"2018-03-08T00:00:00Z","advisories":[],"bugzilla":"1566407","bugzilla_description":"CVE-2018-10021 kernel: ata qc leak in drivers/scsi/libsas/sas_scsi_host.c allows local users to cause denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10021.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.0"},{"CVE":"CVE-2017-18221","severity":"moderate","public_date":"2018-03-07T00:00:00Z","advisories":[],"bugzilla":"1552849","bugzilla_description":"CVE-2017-18221 kernel: Race condition in __munlock_pagevec function in mm/mlock.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18221.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-7740","severity":"low","public_date":"2018-03-07T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1552867","bugzilla_description":"CVE-2018-7740 kernel: Denial of service in resv_map_release function in mm/hugetlb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7740.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-1130","severity":"moderate","public_date":"2018-03-07T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083","RHSA-2018:1854"],"bugzilla":"1576419","bugzilla_description":"CVE-2018-1130 kernel: a null pointer dereference in net/dccp/output.c:dccp_write_xmit() leads to a system crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-1068","severity":"important","public_date":"2018-03-05T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:1318","RHSA-2019:4159","RHSA-2019:1170","RHSA-2019:1190","RHSA-2018:1355"],"bugzilla":"1552048","bugzilla_description":"CVE-2018-1068 kernel: Out-of-bounds write via userland offsets in ebt_entry struct in netfilter/ebtables.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:3.10.0-862.2.3.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","kernel-alt-0:4.14.0-115.el7a","kernel-0:3.10.0-514.71.1.el7","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1068.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-18202","severity":"important","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:2772"],"bugzilla":"1549621","bugzilla_description":"CVE-2017-18202 kernel: Infoleak/use-after-free in __oom_reap_task_mm function in mm/oom_kill.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-alt-0:4.14.0-49.13.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18202.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-7480","severity":"moderate","public_date":"2018-02-25T00:00:00Z","advisories":[],"bugzilla":"1549427","bugzilla_description":"CVE-2018-7480 kernel: Double free in block/blk-cgroup.c:blkcg_init_queue() can allow a local user to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7480.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-18193","severity":"low","public_date":"2018-02-22T00:00:00Z","advisories":[],"bugzilla":"1549421","bugzilla_description":"CVE-2017-18193 kernel: Mishandled extent trees in fs/f2fs/extent_cache.c can allow a local user to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18193.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7273","severity":"low","public_date":"2018-02-20T00:00:00Z","advisories":[],"bugzilla":"1547384","bugzilla_description":"CVE-2018-7273 kernel: Kernel address information leak in drivers/block/floppy.c:show_floppy function potentially allowing KASLR bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7273.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2018-7566","severity":"moderate","public_date":"2018-02-14T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2019:1483","RHSA-2018:2390","RHSA-2019:1487","RHSA-2018:2395","RHSA-2018:2384"],"bugzilla":"1550142","bugzilla_description":"CVE-2018-7566 kernel: race condition in snd_seq_write() may lead to UAF or OOB-access","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.3.5.el6","kernel-0:3.10.0-862.11.6.el7","kernel-rt-0:3.10.0-862.11.6.rt56.819.el7","kernel-alt-0:4.14.0-115.el7a","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7566.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2018-6927","severity":"low","public_date":"2018-02-12T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:0654"],"bugzilla":"1544612","bugzilla_description":"CVE-2018-6927 kernel: Integer overflow in futex.c:futux_requeue can lead to denial of service or unspecified impact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6927.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5803","severity":"moderate","public_date":"2018-02-09T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083","RHSA-2018:1854","RHSA-2019:0641"],"bugzilla":"1551051","bugzilla_description":"CVE-2018-5803 kernel: Missing length check of payload in net/sctp/sm_make_chunk.c:_sctp_make_chunk() function allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-957.el7","kernel-rt-1:3.10.0-693.46.1.rt56.639.el6rt","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5803.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-1065","severity":"moderate","public_date":"2018-02-04T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1547824","bugzilla_description":"CVE-2018-1065 kernel: netfilter: xtables NULL pointer dereference in ip6_tables.c:ip6t_do_table() leading to a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1065.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-6412","severity":"low","public_date":"2018-01-31T00:00:00Z","advisories":[],"bugzilla":"1541240","bugzilla_description":"CVE-2018-6412 kernel: Incorrect integer signedness in sbuslibc:sbusfb_ioctl_helper() allows for information leakage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-194","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6412.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-16911","severity":"low","public_date":"2018-01-31T00:00:00Z","advisories":[],"bugzilla":"1541876","bugzilla_description":"CVE-2017-16911 kernel: vhci_cd driver in usbip/vhci_sysfs.c:port_show_vhci() discloses kernel memory addresses to local attackers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-214","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16911.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-11232","severity":"low","public_date":"2018-01-23T00:00:00Z","advisories":[],"bugzilla":"1580583","bugzilla_description":"CVE-2018-11232 kernel: coresight: kernel panic caused by invalid CPU","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000028","severity":"moderate","public_date":"2018-01-22T00:00:00Z","advisories":[],"bugzilla":"1540439","bugzilla_description":"CVE-2018-1000028 kernel: Improper sorting of GIDs in nfsd can lead to incorrect permissions being applied","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000028.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-8087","severity":"low","public_date":"2018-01-18T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1555145","bugzilla_description":"CVE-2018-8087 kernel: Memory leak in drivers/net/wireless/mac80211_hwsim.c:hwsim_new_radio_nl() can lead to potential denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8087.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18174","severity":"moderate","public_date":"2018-01-17T00:00:00Z","advisories":[],"bugzilla":"1544482","bugzilla_description":"CVE-2017-18174 kernel: Double free vulnerability in drivers/pinctrl/pinctrl-amd.c:amd_gpio_remove() function can lead to kernel panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18174.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-7191","severity":"moderate","public_date":"2018-01-17T00:00:00Z","advisories":["RHSA-2020:2851","RHSA-2020:2522","RHSA-2020:1070","RHSA-2020:1016"],"bugzilla":"1716328","bugzilla_description":"CVE-2018-7191 kernel: denial of service via ioctl call in network tun handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400->CWE-476","affected_packages":["kernel-0:3.10.0-1062.26.1.el7","kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-957.56.1.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7191.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2018-1000026","severity":"moderate","public_date":"2018-01-12T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1541846","bugzilla_description":"CVE-2018-1000026 kernel: Improper validation in bnx2x network card driver can allow for denial of service attacks via crafted packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000026.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2018-8043","severity":"low","public_date":"2018-01-11T00:00:00Z","advisories":[],"bugzilla":"1554199","bugzilla_description":"CVE-2018-8043 kernel: NULL pointer dereference in drivers/net/phy/mdio-bcm-unimac.c:unimac_mdio_probe() can lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252->CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8043.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2018-1000004","severity":"moderate","public_date":"2018-01-10T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2019:1483","RHSA-2018:2390","RHSA-2018:0676","RHSA-2018:0654","RHSA-2019:1487"],"bugzilla":"1535315","bugzilla_description":"CVE-2018-1000004 kernel: Race condition in sound system can lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.3.5.el6","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:3.10.0-862.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000004.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-5344","severity":"moderate","public_date":"2018-01-06T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1533909","bugzilla_description":"CVE-2018-5344 kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5344.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-10074","severity":"moderate","public_date":"2018-01-04T00:00:00Z","advisories":[],"bugzilla":"1567822","bugzilla_description":"CVE-2018-10074 kernel: Null pointer dereference in drivers/clk/hisilicon/clk-hi3660-stub.c:hi3660_stub_clk_probe() allows local users to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10074.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5753","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":[],"bugzilla":"1519778","bugzilla_description":"CVE-2017-5753 hw: cpu: speculative execution bounds-check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5753.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2017-5754","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":[],"bugzilla":"1519781","bugzilla_description":"CVE-2017-5754 hw: cpu: speculative execution permission faults handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5754.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-18017","severity":"moderate","public_date":"2018-01-03T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:1170","RHSA-2018:1319","RHSA-2018:1737","RHSA-2018:0676","RHSA-2018:1130"],"bugzilla":"1531135","bugzilla_description":"CVE-2017-18017 kernel: netfilter: use-after-free in tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-1:3.10.0-693.25.2.rt56.612.el6rt","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:2.6.32-696.28.1.el6","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.25.2.el7","kernel-0:3.10.0-514.51.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18017.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-5333","severity":"moderate","public_date":"2018-01-03T00:00:00Z","advisories":["RHSA-2018:0470"],"bugzilla":"1533891","bugzilla_description":"CVE-2018-5333 kernel: Null pointer dereference in rds_atomic_free_op() allowing denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-1:3.10.0-693.21.1.rt56.607.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5333.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-5703","severity":"moderate","public_date":"2018-01-03T00:00:00Z","advisories":[],"bugzilla":"1535110","bugzilla_description":"CVE-2018-5703 kernel: net/ipv6/tcp_ipv6.c:tcp_v6_syn_recv_sock function allows attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5703.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-5332","severity":"moderate","public_date":"2018-01-02T00:00:00Z","advisories":["RHSA-2018:0470"],"bugzilla":"1533890","bugzilla_description":"CVE-2018-5332 kernel: rds_message_alloc_sgs() function doesn't validate value used during DMA page allocation causes heap out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-1:3.10.0-693.21.1.rt56.607.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5332.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-13215","severity":"important","public_date":"2018-01-02T00:00:00Z","advisories":["RHSA-2019:1170","RHSA-2019:1190","RHSA-2018:2395","RHSA-2018:2384"],"bugzilla":"1535173","bugzilla_description":"CVE-2017-13215 kernel: crypto: privilege escalation in skcipher_recvmsg function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["kernel-0:3.10.0-862.11.6.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-rt-0:3.10.0-862.11.6.rt56.819.el7","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13215.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-13216","severity":"moderate","public_date":"2018-01-02T00:00:00Z","advisories":[],"bugzilla":"1535199","bugzilla_description":"CVE-2017-13216 kernel: escalation of privileges (EoP) in ashmem_ioctl function in drivers/staging/android/ashmen.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13216.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-13220","severity":"moderate","public_date":"2018-01-02T00:00:00Z","advisories":[],"bugzilla":"1536155","bugzilla_description":"CVE-2017-13220 kernel: Possible out-of-bound access in Bluetooth subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13220.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-13221","severity":"important","public_date":"2018-01-02T00:00:00Z","advisories":[],"bugzilla":"1536181","bugzilla_description":"CVE-2017-13221 kernel: elevation of privilege (EoP) in the Upstream kernel wifi driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13221.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-17864","severity":"low","public_date":"2017-12-23T00:00:00Z","advisories":[],"bugzilla":"1529120","bugzilla_description":"CVE-2017-17864 kernel: information disclosure via pointer leak in kernel/bpf/verifier.c","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17863","severity":"moderate","public_date":"2017-12-23T00:00:00Z","advisories":[],"bugzilla":"1529123","bugzilla_description":"CVE-2017-17863 kernel: integer overflow in static int check_alu_op function in bpf/verifier.c","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17863.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17862","severity":"low","public_date":"2017-12-23T00:00:00Z","advisories":[],"bugzilla":"1529124","bugzilla_description":"CVE-2017-17862 kernel: Improper logic pruning in bpf/verifier.c","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-561","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-16996","severity":"important","public_date":"2017-12-22T00:00:00Z","advisories":[],"bugzilla":"1528516","bugzilla_description":"CVE-2017-16996 kernel: memory corruption caused by BPF verifier bugs can allow for arbitrary code execution","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16996.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-16995","severity":"important","public_date":"2017-12-22T00:00:00Z","advisories":[],"bugzilla":"1528518","bugzilla_description":"CVE-2017-16995 kernel: memory corruption caused by BPF verifier bugs can allow for arbitrary code execution","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16995.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-17852","severity":"moderate","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1530269","bugzilla_description":"CVE-2017-17852 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging mishandling of 32-bit ALU ops","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17852.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-18075","severity":"moderate","public_date":"2017-12-20T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1539508","bugzilla_description":"CVE-2017-18075 kernel: Mishandled freeing of instances in pcrypt.c can allow a local user to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18075.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-18386","severity":"moderate","public_date":"2017-12-20T00:00:00Z","advisories":["RHSA-2019:0831"],"bugzilla":"1640598","bugzilla_description":"CVE-2018-18386 kernel: Type confusion in drivers/tty/n_tty.c allows for a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["kernel-alt-0:4.14.0-115.7.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18386.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17853","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1530270","bugzilla_description":"CVE-2017-17853 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging incorrect BPF_RSH signed bounds calculations","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17853.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17854","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1530271","bugzilla_description":"CVE-2017-17854 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging unrestricted integer values for pointer arithmetic","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17854.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17855","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1530272","bugzilla_description":"CVE-2017-17855 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging improper use of pointers in place of scalars","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17855.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17856","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1530273","bugzilla_description":"CVE-2017-17856 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging the lack of stack-pointer alignment enforcement","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17856.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17857","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1530274","bugzilla_description":"CVE-2017-17857 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging mishandling of invalid variable stack read operations","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-15129","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:0654","RHSA-2019:1946"],"bugzilla":"1531174","bugzilla_description":"CVE-2017-15129 kernel: net: double-free and memory corruption in get_net_ns_by_id()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-0:3.10.0-693.55.1.el7","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15129.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2018-5750","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:2948","RHSA-2018:0676"],"bugzilla":"1539706","bugzilla_description":"CVE-2018-5750 kernel: Kernel address information leak in drivers/acpi/sbshc.c:acpi_smbus_hc_add() function potentially allowing KASLR bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5750.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-18344","severity":"important","public_date":"2017-12-15T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3591","RHSA-2018:3590","RHSA-2018:3083","RHSA-2018:3459","RHSA-2018:3586","RHSA-2018:3540"],"bugzilla":"1610958","bugzilla_description":"CVE-2017-18344 kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-327.76.1.el7","kernel-0:3.10.0-693.43.1.el7","kernel-0:3.10.0-862.20.2.el7","kernel-rt-1:3.10.0-693.43.1.rt56.630.el6rt","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a","kernel-0:3.10.0-514.61.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18344.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2017-17558","severity":"moderate","public_date":"2017-12-11T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2019:1170","RHSA-2019:1190"],"bugzilla":"1525474","bugzilla_description":"CVE-2017-17558 kernel: Unallocated memory access by malicious USB device via bNumInterfaces overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17558.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-17741","severity":"low","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1527112","bugzilla_description":"CVE-2017-17741 kernel: kvm: stack-based out-of-bounds read via vmcall instruction","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17741.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2017-16912","severity":"moderate","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1541883","bugzilla_description":"CVE-2017-16912 kernel: Out-of-bounds read in usbip/stub_rx.c:get_pipe() allows attackers to cause a denial of service via crafted USB over IP packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16912.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-17712","severity":"important","public_date":"2017-12-10T00:00:00Z","advisories":["RHSA-2018:0502"],"bugzilla":"1526427","bugzilla_description":"CVE-2017-17712 kernel: Race condition in raw_sendmsg function allows denial-of-service or kernel addresses leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-alt-0:4.11.0-44.6.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17712.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-15127","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1525218","bugzilla_description":"CVE-2017-15127 kernel: Improper error handling of VM_SHARED hugetlbfs mapping in mm/hugetlb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-15128","severity":"moderate","public_date":"2017-12-08T00:00:00Z","advisories":[],"bugzilla":"1525222","bugzilla_description":"CVE-2017-15128 kernel: Out of bound access in hugetlb_mcopy_atomic_pte function in mm/hugetlb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15128.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-17807","severity":"moderate","public_date":"2017-12-08T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016"],"bugzilla":"1528335","bugzilla_description":"CVE-2017-17807 kernel: Missing permissions check for request_key() destination allows local attackers to add keys to keyring without Write permission","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17807.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-18232","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1558066","bugzilla_description":"CVE-2017-18232 kernel: Mishandling mutex within libsas allowing local Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-833","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18232.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-16914","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1541282","bugzilla_description":"CVE-2017-16914 kernel: NULL pointer dereference in usb/usbip/stub_tx.c:stub_send_ret_submit() can lead to denial of service via crafted USB over IP packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16914.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-16913","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1541888","bugzilla_description":"CVE-2017-16913 kernel: Improper validation in usbip/stub_rx.c:stub_recv_cmd_submit() allows for denial of service via crafted USB over IP CMD_SUBMIT packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16913.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-1000410","severity":"moderate","public_date":"2017-12-06T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:1170","RHSA-2018:1319","RHSA-2018:0676","RHSA-2018:0654","RHSA-2018:1130"],"bugzilla":"1519160","bugzilla_description":"CVE-2017-1000410 kernel: Stack information leak in the EFS element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-1:3.10.0-693.25.2.rt56.612.el6rt","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:2.6.32-696.28.1.el6","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.25.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000410.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-7492","severity":"moderate","public_date":"2017-12-06T00:00:00Z","advisories":[],"bugzilla":"1527393","bugzilla_description":"CVE-2018-7492 kernel: Null pointer dereference in net/rds/rdma.c:__rds_rdma_map() allowing local attackers to cause denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-13168","severity":null,"public_date":"2017-12-06T00:00:00Z","advisories":[],"bugzilla":"1658985","bugzilla_description":"CVE-2017-13168 kernel: scsi: sg driver can improperly access userspace memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13168.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-8824","severity":"important","public_date":"2017-12-05T05:43:00Z","advisories":["RHSA-2018:1062","RHSA-2018:1170","RHSA-2018:1319","RHSA-2018:0676","RHSA-2018:3822","RHSA-2018:1216","RHSA-2018:0399","RHSA-2018:1130"],"bugzilla":"1519591","bugzilla_description":"CVE-2017-8824 kernel: Use-after-free vulnerability in DCCP socket","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-327.66.1.el7","kernel-0:3.10.0-514.44.1.el7","kernel-rt-1:3.10.0-693.25.2.rt56.612.el6rt","kernel-0:2.6.18-436.el5","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:2.6.32-696.28.1.el6","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.25.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8824.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-15121","severity":"moderate","public_date":"2017-12-05T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:1854"],"bugzilla":"1520893","bugzilla_description":"CVE-2017-15121 kernel: vfs: BUG in truncate_inode_pages_range() and fuse client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15121.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-15126","severity":"moderate","public_date":"2017-12-05T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1523481","bugzilla_description":"CVE-2017-15126 kernel: Use-after-free in userfaultfd_event_wait_completion function in userfaultfd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-17450","severity":"low","public_date":"2017-12-05T00:00:00Z","advisories":[],"bugzilla":"1525761","bugzilla_description":"CVE-2017-17450 kernel: Unchecked capabilities in net/netfilter/xt_osf.c allows for unprivileged modification to systemwide fingerprint list","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-17449","severity":"moderate","public_date":"2017-12-05T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:1170","RHSA-2018:0676","RHSA-2018:0654","RHSA-2018:1130"],"bugzilla":"1525762","bugzilla_description":"CVE-2017-17449 kernel: Missing namespace check in net/netlink/af_netlink.c allows for network monitors to observe systemwide activity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-1:3.10.0-693.25.2.rt56.612.el6rt","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.25.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17449.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-0861","severity":"moderate","public_date":"2017-12-05T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2020:0036","RHSA-2018:3083","RHSA-2018:2390"],"bugzilla":"1563994","bugzilla_description":"CVE-2017-0861 kernel: Use-after-free in snd_pcm_info function in ALSA subsystem potentially leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:2.6.32-754.3.5.el6","kernel-0:3.10.0-957.el7","kernel-0:3.10.0-862.46.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0861.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-17448","severity":"moderate","public_date":"2017-12-03T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:0654"],"bugzilla":"1525768","bugzilla_description":"CVE-2017-17448 kernel: Missing capabilities check in net/netfilter/nfnetlink_cthelper.c allows for unprivileged access to systemwide nfnl_cthelper_list structure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-5848","severity":"moderate","public_date":"2017-12-02T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1590799","bugzilla_description":"CVE-2018-5848 kernel: buffer overflow in drivers/net/wireless/ath/wil6210/wmi.c:wmi_set_ie() may lead to memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5848.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-1000407","severity":"moderate","public_date":"2017-12-01T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2019:1170"],"bugzilla":"1520328","bugzilla_description":"CVE-2017-1000407 Kernel: KVM: DoS via write flood to I/O port 0x80","cvss_score":4.6,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-248","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000407.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2017-1000405","severity":"important","public_date":"2017-11-30T00:00:00Z","advisories":["RHSA-2018:0180"],"bugzilla":"1516514","bugzilla_description":"CVE-2017-1000405 kernel: pmd can become dirty without going through a COW cycle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-alt-0:4.11.0-44.4.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000405.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2017-18208","severity":"moderate","public_date":"2017-11-30T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083","RHSA-2019:4057","RHSA-2019:4058","RHSA-2019:3967"],"bugzilla":"1551565","bugzilla_description":"CVE-2017-18208 kernel: Inifinite loop vulnerability in mm/madvise.c:madvise_willneed() function allows local denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-693.61.1.el7","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-0:3.10.0-957.el7","kernel-0:3.10.0-862.44.2.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18208.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-17805","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2019:2473","RHSA-2018:3083"],"bugzilla":"1528312","bugzilla_description":"CVE-2017-17805 kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:2.6.32-754.18.2.el6","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17805.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-17806","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1528323","bugzilla_description":"CVE-2017-17806 kernel: HMAC implementation does not validate that the underlying cryptographic hash algorithm is unkeyed allowing local attackers to cause denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17806.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-16939","severity":"important","public_date":"2017-11-24T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:0654","RHSA-2019:1170","RHSA-2019:1190","RHSA-2018:1355"],"bugzilla":"1517220","bugzilla_description":"CVE-2017-16939 Kernel: ipsec: xfrm: use-after-free leading to potential privilege escalation","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["kernel-alt-0:4.14.0-49.el7a","kernel-0:3.10.0-862.2.3.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16939.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-17975","severity":"low","public_date":"2017-11-19T00:00:00Z","advisories":[],"bugzilla":"1531142","bugzilla_description":"CVE-2017-17975 kernel: use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17975.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2017-18216","severity":"moderate","public_date":"2017-11-16T00:00:00Z","advisories":[],"bugzilla":"1551992","bugzilla_description":"CVE-2017-18216 kernel: Null pointer dereference in fs/ocfs2/cluster/nodemanager.c allows local users to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18216.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-16994","severity":"moderate","public_date":"2017-11-15T00:00:00Z","advisories":["RHSA-2018:0502"],"bugzilla":"1518155","bugzilla_description":"CVE-2017-16994 kernel: mm/pagewalk.c:walk_hugetlb_range function mishandles holes in hugetlb ranges causing information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-alt-0:4.11.0-44.6.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16994.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-18204","severity":"moderate","public_date":"2017-11-15T00:00:00Z","advisories":[],"bugzilla":"1550818","bugzilla_description":"CVE-2017-18204 kernel: Deadlock caused in fs/ocfs2/file.c:ocfs2_setattr() can allow local users to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18204.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18224","severity":"moderate","public_date":"2017-11-15T00:00:00Z","advisories":[],"bugzilla":"1557555","bugzilla_description":"CVE-2017-18224 kernel: race condition due to concurrent access to extent tree in fs/ocfs2/aops.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18224.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-15306","severity":"moderate","public_date":"2017-11-06T00:00:00Z","advisories":["RHSA-2018:0654"],"bugzilla":"1510399","bugzilla_description":"CVE-2017-15306 Kernel: KVM: oops when checking KVM_CAP_PPC_HTM on PPC platform","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-49.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15306.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-16650","severity":"low","public_date":"2017-11-06T00:00:00Z","advisories":[],"bugzilla":"1516265","bugzilla_description":"CVE-2017-16650 kernel: Divide-by-zero in drivers/net/usb/qmi_wwan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16650.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16649","severity":"low","public_date":"2017-11-06T00:00:00Z","advisories":[],"bugzilla":"1516267","bugzilla_description":"CVE-2017-16649 kernel: Divide-by-zero in drivers/net/usb/cdc_ether.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16649.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-12193","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:0181","RHSA-2018:0151","RHSA-2018:0152"],"bugzilla":"1501215","bugzilla_description":"CVE-2017-12193 kernel: Null pointer dereference due to incorrect node-splitting in assoc_array implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-1:3.10.0-693.17.1.rt56.604.el6rt","kernel-rt-0:3.10.0-693.17.1.rt56.636.el7","kernel-0:3.10.0-693.17.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12193.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-18203","severity":"moderate","public_date":"2017-11-01T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:1854","RHSA-2019:4154"],"bugzilla":"1550811","bugzilla_description":"CVE-2017-18203 kernel: Race condition in drivers/md/dm.c:dm_get_from_kobject() allows local users to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-400","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-862.el7","kernel-alt-0:4.14.0-115.16.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18203.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-16645","severity":"low","public_date":"2017-10-28T00:00:00Z","advisories":[],"bugzilla":"1516235","bugzilla_description":"CVE-2017-16645 kernel: Out-of-bounds read in drivers/input/misc/ims-pcu.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16645.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16643","severity":"low","public_date":"2017-10-24T00:00:00Z","advisories":[],"bugzilla":"1516232","bugzilla_description":"CVE-2017-16643 kernel: Out-of-bounds read in drivers/input/tablet/gtco.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16643.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16648","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1516257","bugzilla_description":"CVE-2017-16648 kernel: Use-after-free in drivers/media/dvb-core/dvb_frontend.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16648.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16646","severity":"low","public_date":"2017-10-22T00:00:00Z","advisories":[],"bugzilla":"1516272","bugzilla_description":"CVE-2017-16646 kernel: BUG in drivers/media/usb/dvb-usb/dib0700_devices.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16646.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-15951","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":[],"bugzilla":"1507539","bugzilla_description":"CVE-2017-15951 kernel: Race condition in the KEYS subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15951.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-16535","severity":"low","public_date":"2017-10-18T00:00:00Z","advisories":[],"bugzilla":"1510823","bugzilla_description":"CVE-2017-16535 kernel: out-of-bounds read in usb_get_bos_descriptor function in drivers/usb/core/config.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16535.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-15115","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":[],"bugzilla":"1513345","bugzilla_description":"CVE-2017-15115 kernel: use-after-free in sctp_cmp_addr_exact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15115.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-15537","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":[],"bugzilla":"1529302","bugzilla_description":"CVE-2017-15537 kernel: Information leak of x86 FPU registers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15537.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2017-5123","severity":"important","public_date":"2017-10-12T00:00:00Z","advisories":[],"bugzilla":"1500094","bugzilla_description":"CVE-2017-5123 kernel: Missing access_ok() checks in waitid()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5123.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-15265","severity":"moderate","public_date":"2017-10-11T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:1170","RHSA-2018:2390","RHSA-2018:3823","RHSA-2018:0676","RHSA-2018:3822","RHSA-2018:1130"],"bugzilla":"1501878","bugzilla_description":"CVE-2017-15265 kernel: Use-after-free in snd_seq_ioctl_create_port()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-1:3.10.0-693.25.2.rt56.612.el6rt","kernel-0:2.6.18-348.42.1.el5","kernel-0:2.6.32-754.3.5.el6","kernel-0:2.6.18-436.el5","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.25.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15265.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-12188","severity":"important","public_date":"2017-10-10T00:00:00Z","advisories":["RHSA-2018:0412","RHSA-2018:0395"],"bugzilla":"1500380","bugzilla_description":"CVE-2017-12188 Kernel: KVM: MMU potential stack buffer overrun during page walks","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["kernel-0:3.10.0-693.21.1.el7","kernel-rt-0:3.10.0-693.21.1.rt56.639.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12188.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2017-16527","severity":"low","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1510828","bugzilla_description":"CVE-2017-16527 kernel: Use-after-free in snd_usb_mixer_interrupt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16527.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16647","severity":"low","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1516270","bugzilla_description":"CVE-2017-16647 kernel: NULL pointer dereference in drivers/net/usb/asix_devices.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16647.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-1000255","severity":"moderate","public_date":"2017-10-09T00:00:00Z","advisories":["RHSA-2018:0654"],"bugzilla":"1498067","bugzilla_description":"CVE-2017-1000255 kernel: Arbitrary stack overwrite causing oops via crafted signal frame","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-alt-0:4.14.0-49.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000255.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2017-16537","severity":"low","public_date":"2017-10-09T00:00:00Z","advisories":[],"bugzilla":"1510825","bugzilla_description":"CVE-2017-16537 kernel: NULL pointer dereference in imon_probe function in drivers/media/rc/imon.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16537.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16525","severity":"low","public_date":"2017-10-04T00:00:00Z","advisories":[],"bugzilla":"1510799","bugzilla_description":"CVE-2017-16525 kernel: Use-after-free in usb_serial_console_disconnect()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16525.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-18200","severity":"moderate","public_date":"2017-10-01T00:00:00Z","advisories":[],"bugzilla":"1549586","bugzilla_description":"CVE-2017-18200 kernel: mishandling reference counts associated with f2fs_wait_discard_bios calls allowing local attacker to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18200.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-14954","severity":"low","public_date":"2017-09-29T00:00:00Z","advisories":[],"bugzilla":"1497745","bugzilla_description":"CVE-2017-14954 kernel: Info leak in kernel_waitid()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14954.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-16532","severity":"low","public_date":"2017-09-29T00:00:00Z","advisories":[],"bugzilla":"1510835","bugzilla_description":"CVE-2017-16532 kernel: Null pointer dereference in get_endpoints function in drivers/usb/misc/usbtest.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16532.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16533","severity":"low","public_date":"2017-09-28T00:00:00Z","advisories":[],"bugzilla":"1510836","bugzilla_description":"CVE-2017-16533 kernel: out-of-bounds read in usbhid_parse function in drivers/hid/usbhid/hid-core.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16533.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-9568","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2019:2696","RHSA-2019:4255","RHSA-2019:4159","RHSA-2019:2730","RHSA-2019:0514","RHSA-2019:2736","RHSA-2019:4164","RHSA-2019:0512","RHSA-2019:4056","RHSA-2019:3967"],"bugzilla":"1655904","bugzilla_description":"CVE-2018-9568 kernel: Memory corruption due to incorrect socket cloning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-0:3.10.0-957.10.1.el7","kernel-0:2.6.32-431.97.1.el6","kernel-rt-0:3.10.0-957.10.1.rt56.921.el7","kernel-0:3.10.0-693.58.1.el7","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:2.6.32-754.22.1.el6","kernel-0:3.10.0-327.83.1.el7","kernel-0:2.6.32-504.82.1.el6","kernel-0:3.10.0-862.44.2.el7","kernel-0:3.10.0-514.71.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9568.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-15299","severity":"moderate","public_date":"2017-09-27T00:00:00Z","advisories":["RHSA-2018:0654"],"bugzilla":"1498016","bugzilla_description":"CVE-2017-15299 kernel: Incorrect updates of uninstantiated keys crash the kernel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-49.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15299.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-1000253","severity":"important","public_date":"2017-09-26T00:00:00Z","advisories":["RHSA-2017:2800","RHSA-2017:2801","RHSA-2017:2798","RHSA-2017:2799","RHSA-2017:2802","RHSA-2017:2793","RHSA-2017:2796","RHSA-2017:2797","RHSA-2017:2794","RHSA-2017:2795"],"bugzilla":"1492212","bugzilla_description":"CVE-2017-1000253 kernel: load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-0:3.10.0-514.32.3.el7","kernel-0:2.6.32-358.84.1.el6","kernel-0:2.6.32-573.48.1.el6","kernel-0:2.6.18-423.el5","kernel-0:2.6.32-220.76.1.el6","kernel-0:2.6.18-348.34.2.el5","kernel-0:2.6.32-504.63.3.el6","kernel-0:3.10.0-327.59.3.el7","kernel-0:2.6.32-696.10.3.el6","kernel-0:2.6.32-431.85.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000253.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-16538","severity":"low","public_date":"2017-09-26T00:00:00Z","advisories":[],"bugzilla":"1510826","bugzilla_description":"CVE-2017-16538 kernel: general protection fault in drivers/media/usb/dvb-usb-v2/lmedm04.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16538.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16529","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1510831","bugzilla_description":"CVE-2017-16529 kernel: out-of-bounds read in snd_usb_create_streams","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16529.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16530","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1510832","bugzilla_description":"CVE-2017-16530 kernel: out-of-bounds read in drivers/usb/storage/uas-detect{.h,.c}","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16530.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-12190","severity":"moderate","public_date":"2017-09-21T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:0654","RHSA-2018:1854","RHSA-2019:1170","RHSA-2019:1190"],"bugzilla":"1495089","bugzilla_description":"CVE-2017-12190 kernel: memory leak when merging buffers in SCSI IO vectors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-862.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12190.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-16534","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1510822","bugzilla_description":"CVE-2017-16534 kernel: out-of-bounds read in cdc_parse_cdc_header function in drivers/usb/core/message.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16534.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16536","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1510824","bugzilla_description":"CVE-2017-16536 kernel: Null pointer dereference in cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16536.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16644","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1516273","bugzilla_description":"CVE-2017-16644 kernel: Improper error handling in drivers/media/usb/hdpvr/hdpvr-core.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16644.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-15649","severity":"important","public_date":"2017-09-20T00:00:00Z","advisories":["RHSA-2018:0181","RHSA-2018:0151","RHSA-2018:0152"],"bugzilla":"1504574","bugzilla_description":"CVE-2017-15649 kernel: Use-after-free in the af_packet.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-1:3.10.0-693.17.1.rt56.604.el6rt","kernel-rt-0:3.10.0-693.17.1.rt56.636.el7","kernel-0:3.10.0-693.17.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15649.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-16531","severity":"low","public_date":"2017-09-19T00:00:00Z","advisories":[],"bugzilla":"1510833","bugzilla_description":"CVE-2017-16531 kernel: out-of-bounds read in drivers/usb/core/config.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16531.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2020-14353","severity":null,"public_date":"2017-09-18T16:00:00Z","advisories":[],"bugzilla":"1856774","bugzilla_description":"CVE-2020-14353 kernel: keys: for keyctl prevent creating a different user's keyrings in RHEL-6.10","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14353.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-12192","severity":"moderate","public_date":"2017-09-18T00:00:00Z","advisories":["RHSA-2018:0181","RHSA-2020:2430","RHSA-2018:0654","RHSA-2018:0151","RHSA-2018:0152"],"bugzilla":"1493435","bugzilla_description":"CVE-2017-12192 kernel: NULL pointer dereference due to KEYCTL_READ on negative key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-1:3.10.0-693.17.1.rt56.604.el6rt","kernel-alt-0:4.14.0-49.el7a","kernel-rt-0:3.10.0-693.17.1.rt56.636.el7","kernel-0:2.6.32-754.30.2.el6","kernel-0:3.10.0-693.17.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12192.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18270","severity":"moderate","public_date":"2017-09-18T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0412"],"bugzilla":"1580979","bugzilla_description":"CVE-2017-18270 kernel: improper keyrings creation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["kernel-0:3.10.0-862.el7","kernel-rt-0:3.10.0-693.21.1.rt56.639.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18270.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-1000252","severity":"moderate","public_date":"2017-09-15T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:1130"],"bugzilla":"1490781","bugzilla_description":"CVE-2017-1000252 kernel: kvm: Reachable BUG() on out-of-bounds guest IRQ","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-617","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.25.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000252.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.4"},{"CVE":"CVE-2017-14991","severity":"moderate","public_date":"2017-09-15T00:00:00Z","advisories":[],"bugzilla":"1500366","bugzilla_description":"CVE-2017-14991 kernel: Information leak in the scsi driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14991.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-16526","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1510827","bugzilla_description":"CVE-2017-16526 kernel: General protection fault in drivers/uwb/uwbd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16526.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-12153","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1491046","bugzilla_description":"CVE-2017-12153 kernel: null pointer dereference in nl80211_set_rekey_data()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12153.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-14340","severity":"moderate","public_date":"2017-09-13T00:00:00Z","advisories":["RHSA-2017:2918"],"bugzilla":"1491344","bugzilla_description":"CVE-2017-14340 kernel: xfs: unprivileged user kernel oops","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14340.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-1091","severity":"moderate","public_date":"2017-09-13T00:00:00Z","advisories":["RHSA-2018:1318"],"bugzilla":"1558149","bugzilla_description":"CVE-2018-1091 kernel: guest kernel crash during core dump on POWER9 host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["kernel-0:3.10.0-862.2.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-1000251","severity":"important","public_date":"2017-09-12T00:00:00Z","advisories":["RHSA-2017:2679","RHSA-2017:2732","RHSA-2017:2705","RHSA-2017:2706","RHSA-2017:2704","RHSA-2017:2682","RHSA-2017:2683","RHSA-2017:2707","RHSA-2017:2680","RHSA-2017:2681","RHSA-2017:2731"],"bugzilla":"1489716","bugzilla_description":"CVE-2017-1000251 kernel: stack buffer overflow in the native Bluetooth stack","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["kernel-0:2.6.32-220.75.1.el6","kernel-0:2.6.32-431.84.1.el6","kernel-0:2.6.32-573.45.2.el6","kernel-0:3.10.0-514.28.2.el7","kernel-rt-0:3.10.0-693.2.2.rt56.623.el7","kernel-0:3.10.0-693.2.2.el7","kernel-rt-1:3.10.0-693.2.2.rt56.588.el6rt","kernel-0:3.10.0-327.59.2.el7","kernel-0:2.6.32-504.63.2.el6","kernel-0:2.6.32-696.10.2.el6","kernel-0:2.6.32-358.83.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000251.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-12154","severity":"important","public_date":"2017-09-12T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2019:1946"],"bugzilla":"1491224","bugzilla_description":"CVE-2017-12154 Kernel: kvm: nVMX: L2 guest could access hardware(L0) CR8 register","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-284","affected_packages":["kernel-0:3.10.0-693.55.1.el7","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12154.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2017-16528","severity":"moderate","public_date":"2017-09-12T00:00:00Z","advisories":[],"bugzilla":"1510830","bugzilla_description":"CVE-2017-16528 kernel: use-after-free in snd_rawmidi_dev_seq_free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16528.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2017-14106","severity":"moderate","public_date":"2017-09-01T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2018:2172","RHSA-2017:2931","RHSA-2017:2918","RHSA-2017:3200"],"bugzilla":"1487295","bugzilla_description":"CVE-2017-14106 kernel: Divide-by-zero in __tcp_select_window","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-696.16.1.el6","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14106.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-14051","severity":"moderate","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1487126","bugzilla_description":"CVE-2017-14051 kernel: Integer overflow in the qla2x00_sysfs_write_optrom_ctl function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14051.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-14497","severity":"moderate","public_date":"2017-08-28T00:00:00Z","advisories":[],"bugzilla":"1492593","bugzilla_description":"CVE-2017-14497 kernel: buffer overflow in tpacket_rcv() in net/packet/af_packet.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14497.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.0"},{"CVE":"CVE-2017-15116","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1514609","bugzilla_description":"CVE-2017-15116 kernel: Null pointer dereference in rngapi_reset function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15116.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14489","severity":"moderate","public_date":"2017-08-27T00:00:00Z","advisories":[],"bugzilla":"1490421","bugzilla_description":"CVE-2017-14489 kernel: scsi: nlmsg is not properly parsed in iscsi_if_rx function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-17052","severity":"moderate","public_date":"2017-08-26T00:00:00Z","advisories":[],"bugzilla":"1518632","bugzilla_description":"CVE-2017-17052 kernel: use-after-free in kernel/fork.c:mm_init function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17052.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2017-17053","severity":"moderate","public_date":"2017-08-24T00:00:00Z","advisories":[],"bugzilla":"1518638","bugzilla_description":"CVE-2017-17053 kernel: Incorrect handling in arch/x86/include/asm/mmu_context.h:init_new_context function allowing use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-7558","severity":"moderate","public_date":"2017-08-23T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2017:2918"],"bugzilla":"1480266","bugzilla_description":"CVE-2017-7558 kernel: Out of bounds read in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() in SCTP stack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7558.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2017-14140","severity":"low","public_date":"2017-08-20T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1488329","bugzilla_description":"CVE-2017-14140 kernel: Missing permission check in move_pages system call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14140.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-10675","severity":"important","public_date":"2017-08-19T00:00:00Z","advisories":["RHSA-2018:2925","RHSA-2018:2924","RHSA-2018:3590","RHSA-2018:2933","RHSA-2018:2785","RHSA-2018:3586","RHSA-2018:2164","RHSA-2018:2395","RHSA-2018:2384","RHSA-2018:3540","RHSA-2018:2791"],"bugzilla":"1575065","bugzilla_description":"CVE-2018-10675 kernel: mm: use-after-free in do_get_mempolicy function allows local DoS or other unspecified impact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-327.76.1.el7","kernel-0:3.10.0-693.43.1.el7","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.93.1.el6","kernel-0:2.6.32-573.65.2.el6","kernel-rt-1:3.10.0-693.43.1.rt56.630.el6rt","kernel-0:3.10.0-862.11.6.el7","kernel-0:3.10.0-514.58.1.el7","kernel-0:2.6.32-504.76.2.el6","kernel-rt-0:3.10.0-862.11.6.rt56.819.el7","kernel-0:2.6.32-431.93.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10675.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-13686","severity":"moderate","public_date":"2017-08-16T00:00:00Z","advisories":[],"bugzilla":"1485265","bugzilla_description":"CVE-2017-13686 kernel: NULL pointer dereference due to late check for a NULL fi field when RTM_F_FIB_MATCH is set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13686.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-1000111","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2017:2918","RHSA-2017:3200"],"bugzilla":"1479304","bugzilla_description":"CVE-2017-1000111 kernel: Heap out-of-bounds read in AF_PACKET sockets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.32-696.16.1.el6","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000111.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-1000112","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2019:4159","RHSA-2017:2918","RHSA-2017:3200","RHSA-2019:1932","RHSA-2019:1931"],"bugzilla":"1479307","bugzilla_description":"CVE-2017-1000112 kernel: Exploitable memory corruption due to UFO to non-UFO path switch","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.18-438.el5","kernel-0:2.6.18-348.44.1.el5","kernel-0:2.6.32-696.16.1.el6","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7","kernel-0:3.10.0-514.71.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000112.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-18261","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":[],"bugzilla":"1569560","bugzilla_description":"CVE-2017-18261 kernel: Infinite recursion in arch/arm64/include/asm/arch_timer.h:arch_timer_reg_read_stable macro allows local users to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18261.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7533","severity":"important","public_date":"2017-08-03T00:00:00Z","advisories":["RHSA-2017:2669","RHSA-2017:2869","RHSA-2017:2473","RHSA-2017:2770","RHSA-2017:2585"],"bugzilla":"1468283","bugzilla_description":"CVE-2017-7533 kernel: a race between inotify_handle_event() and sys_rename()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-642","affected_packages":["kernel-0:3.10.0-693.1.1.el7","kernel-0:3.10.0-327.61.3.el7","kernel-0:3.10.0-514.32.2.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-rt-0:3.10.0-693.2.1.rt56.620.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7533.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-14156","severity":"low","public_date":"2017-08-03T00:00:00Z","advisories":[],"bugzilla":"1478018","bugzilla_description":"CVE-2017-14156 kernel: driver/video/fbdev/aty/atyfb_base.c: atyfb_ioctl() stack infoleak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14156.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-12762","severity":"low","public_date":"2017-08-03T00:00:00Z","advisories":[],"bugzilla":"1481178","bugzilla_description":"CVE-2017-12762 kernel: Buffer overflow due to unbounded strcpy in ISDN I4L driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12762.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2014-9900","severity":"moderate","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1481325","bugzilla_description":"CVE-2014-9900 kernel: Info leak in uninitialized structure ethtool_wolinfo in ethtool_get_wol()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-13166","severity":"important","public_date":"2017-07-20T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:2948","RHSA-2018:1170","RHSA-2018:1319","RHSA-2018:0676","RHSA-2018:1130"],"bugzilla":"1548412","bugzilla_description":"CVE-2017-13166 kernel: v4l2: disabled memory access protection mechanism allowing privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["kernel-rt-1:3.10.0-693.25.2.rt56.612.el6rt","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:2.6.32-696.28.1.el6","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.25.2.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13166.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7542","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2017:2918","RHSA-2018:0169"],"bugzilla":"1473649","bugzilla_description":"CVE-2017-7542 kernel: Integer overflow in ip6_find_1stfragopt() causes infinite loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-835","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.32-696.20.1.el6","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7542.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-13693","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1485346","bugzilla_description":"CVE-2017-13693 kernel: ACPI operand cache leak in dsutils.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13693.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-13695","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1485349","bugzilla_description":"CVE-2017-13695 kernel: ACPI operand cache leak in nseval.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13695.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-11473","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2018:0654"],"bugzilla":"1473209","bugzilla_description":"CVE-2017-11473 kernel: Buffer overflow in mp_override_legacy_irq()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-alt-0:4.14.0-49.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11473.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-7541","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2017:2918","RHSA-2017:2863"],"bugzilla":"1473198","bugzilla_description":"CVE-2017-7541 kernel: Possible heap buffer overflow in brcmf_cfg80211_mgmt_tx()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.32-696.13.2.el6","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7541.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2017-11600","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":["RHSA-2018:1965","RHSA-2019:1170","RHSA-2018:2003","RHSA-2019:1190"],"bugzilla":"1474928","bugzilla_description":"CVE-2017-11600 kernel: Out-of-bounds access via an XFRM_MSG_MIGRATE xfrm Netlink message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-0:3.10.0-862.6.3.el7","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11600.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-10087","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1568011","bugzilla_description":"CVE-2018-10087 kernel: Undefined behavior in kernel/exit.c:kernel_wait4() function allows local denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-10124","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1568205","bugzilla_description":"CVE-2018-10124 kernel: Undefined behaviour with INT_MIN argument in kernel/signal.c:kill_something_info() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10124.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-11176","severity":"moderate","public_date":"2017-07-09T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2018:3822","RHSA-2017:2918","RHSA-2018:0169"],"bugzilla":"1470659","bugzilla_description":"CVE-2017-11176 kernel: Use-after-free in sys_mq_notify()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.18-436.el5","kernel-0:2.6.32-696.20.1.el6","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11176.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-11089","severity":"moderate","public_date":"2017-07-07T00:00:00Z","advisories":[],"bugzilla":"1564038","bugzilla_description":"CVE-2017-11089 kernel: Out-of-bounds read in nl80211_set_station allows privileged local attacker to cause system crash or possibly code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11089.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-18218","severity":"moderate","public_date":"2017-07-06T00:00:00Z","advisories":[],"bugzilla":"1551985","bugzilla_description":"CVE-2017-18218 kernel: Use-after-free vulnerability in drivers/net/ethernet/hisilicon/hns/hns_enet.c allows local attacker to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18218.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18079","severity":"moderate","public_date":"2017-07-03T00:00:00Z","advisories":[],"bugzilla":"1539725","bugzilla_description":"CVE-2017-18079 kernel: Null pointer dereference in drivers/input/serio/i8042.c leading to denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18079.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-9986","severity":"low","public_date":"2017-06-28T00:00:00Z","advisories":[],"bugzilla":"1470211","bugzilla_description":"CVE-2017-9986 kernel: Double fetch in the intr function in sound/oss/msnd_pinnacle.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9986.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-9985","severity":"low","public_date":"2017-06-28T00:00:00Z","advisories":[],"bugzilla":"1470213","bugzilla_description":"CVE-2017-9985 kernel: Double fetch in the snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9985.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-8797","severity":"important","public_date":"2017-06-27T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2437","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1466329","bugzilla_description":"CVE-2017-8797 kernel: NFSv4 server does not properly validate layout type when processing NFSv4 pNFS LAYOUTGET operand","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7","kernel-0:3.10.0-514.28.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2017-7482","severity":"moderate","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:0641"],"bugzilla":"1446288","bugzilla_description":"CVE-2017-7482 kernel: net/rxrpc: overflow in decoding of krb5 principal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-rt-1:3.10.0-693.46.1.rt56.639.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7482.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-13694","severity":"moderate","public_date":"2017-06-23T00:00:00Z","advisories":[],"bugzilla":"1485348","bugzilla_description":"CVE-2017-13694 kernel: ACPI node and node_ext cache leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13694.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-7518","severity":"moderate","public_date":"2017-06-22T00:00:00Z","advisories":["RHSA-2018:0412","RHSA-2018:0395"],"bugzilla":"1464473","bugzilla_description":"CVE-2017-7518 Kernel: KVM: debug exception via syscall emulation","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.21.1.el7","kernel-rt-0:3.10.0-693.21.1.rt56.639.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7518.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2017-9984","severity":"low","public_date":"2017-06-20T00:00:00Z","advisories":[],"bugzilla":"1470178","bugzilla_description":"CVE-2017-9984 kernel: Double fetch in the snd_msnd_interrupt function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9984.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-1000364","severity":"important","public_date":"2017-06-19T00:00:00Z","advisories":["RHSA-2017:1491","RHSA-2017:1490","RHSA-2017:1482","RHSA-2017:1484","RHSA-2017:1483","RHSA-2017:1486","RHSA-2017:1485","RHSA-2017:1488","RHSA-2017:1487","RHSA-2017:1567","RHSA-2017:1489","RHSA-2017:1647","RHSA-2017:1616"],"bugzilla":"1461333","bugzilla_description":"CVE-2017-1000364 kernel: heap/stack gap jumping via unbounded stack allocations","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-rt-1:3.10.0-514.rt56.228.el6rt","kernel-0:3.10.0-327.55.2.el7","kernel-0:2.6.18-420.el5","kernel-0:2.6.32-220.72.2.el6","kernel-0:2.6.32-431.80.2.el6","kernel-0:2.6.32-696.3.2.el6","kernel-0:2.6.18-348.33.2.el5","kernel-0:2.6.32-504.60.2.el6","kernel-0:3.10.0-514.21.2.el7","kernel-0:2.6.32-358.79.2.el6","kernel-0:2.6.32-573.42.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000364.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2017-1000365","severity":"low","public_date":"2017-06-19T00:00:00Z","advisories":[],"bugzilla":"1462147","bugzilla_description":"CVE-2017-1000365 kernel: RLIMIT_STACK/RLIMIT_INFINITY string size limitation bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000365.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-1000370","severity":"low","public_date":"2017-06-19T00:00:00Z","advisories":[],"bugzilla":"1462153","bugzilla_description":"CVE-2017-1000370 kernel: offset2lib patch protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000370.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-1000371","severity":"low","public_date":"2017-06-19T00:00:00Z","advisories":["RHSA-2020:1524"],"bugzilla":"1462158","bugzilla_description":"CVE-2017-1000371 kernel: offset2lib allows for the stack guard page to be jumped over","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-0:2.6.32-754.29.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000371.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-1000379","severity":"low","public_date":"2017-06-19T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:1489","RHSA-2017:1647","RHSA-2017:1491","RHSA-2017:1490","RHSA-2017:1616","RHSA-2017:1482","RHSA-2017:1484","RHSA-2017:1486","RHSA-2017:1485","RHSA-2017:1488","RHSA-2017:1487"],"bugzilla":"1462165","bugzilla_description":"CVE-2017-1000379 kernel: Incorrectly mapped contents of PIE executable","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-rt-1:3.10.0-514.rt56.228.el6rt","kernel-0:3.10.0-327.55.2.el7","kernel-0:2.6.18-420.el5","kernel-0:2.6.32-220.72.2.el6","kernel-0:2.6.32-431.80.2.el6","kernel-0:2.6.32-696.3.2.el6","kernel-0:2.6.32-504.60.2.el6","kernel-0:3.10.0-514.21.2.el7","kernel-0:3.10.0-693.el7","kernel-0:2.6.32-358.79.2.el6","kernel-0:2.6.32-573.42.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000379.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-1000380","severity":"moderate","public_date":"2017-06-12T00:00:00Z","advisories":["RHSA-2017:3315","RHSA-2017:3295","RHSA-2017:3322"],"bugzilla":"1463311","bugzilla_description":"CVE-2017-1000380 kernel: information leak due to a data race in ALSA timer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-693.11.1.rt56.632.el7","kernel-0:3.10.0-693.11.1.el7","kernel-rt-1:3.10.0-693.11.1.rt56.597.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000380.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-15274","severity":"moderate","public_date":"2017-06-08T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2019:1946"],"bugzilla":"1500391","bugzilla_description":"CVE-2017-15274 kernel: dereferencing NULL payload with nonzero length","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-693.55.1.el7","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15274.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-13305","severity":"moderate","public_date":"2017-06-08T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:2165"],"bugzilla":"1581637","bugzilla_description":"CVE-2017-13305 kernel: Buffer over-read in keyring subsystem allows exposing potentially sensitive information to local attacker","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-rt-1:3.10.0-693.35.1.rt56.625.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13305.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-9605","severity":"low","public_date":"2017-06-02T00:00:00Z","advisories":[],"bugzilla":"1462172","bugzilla_description":"CVE-2017-9605 kernel: Uninitialized kernel memory leak in vmw_gb_surface_define_ioctl function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9605.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-18241","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1559318","bugzilla_description":"CVE-2017-18241 kernel: Null pointer dereference in fs/f2fs/segment.c via mounting fs with noflush_merge option allows local denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18241.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-12146","severity":"moderate","public_date":"2017-05-25T00:00:00Z","advisories":["RHEA-2017:3163"],"bugzilla":"1489078","bugzilla_description":"CVE-2017-12146 kernel: Race condition in driver_override implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-alt-0:4.11.0-44.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12146.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-1000363","severity":"moderate","public_date":"2017-05-22T00:00:00Z","advisories":[],"bugzilla":"1451685","bugzilla_description":"CVE-2017-1000363 kernel: Out-of-bounds write in lp_setup in drivers/char/lp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000363.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-9242","severity":"moderate","public_date":"2017-05-19T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1456388","bugzilla_description":"CVE-2017-9242 kernel: Incorrect overwrite check in __ip6_append_data()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9242.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-9075","severity":"moderate","public_date":"2017-05-17T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1452691","bugzilla_description":"CVE-2017-9075 kernel: net: sctp_v6_create_accept_sk function mishandles inheritance","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-9074","severity":"moderate","public_date":"2017-05-16T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077","RHSA-2018:0169"],"bugzilla":"1452679","bugzilla_description":"CVE-2017-9074 kernel: net: IPv6 fragmentation implementation of nexthdr field may be associated with an invalid option","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-696.20.1.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9074.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7495","severity":"moderate","public_date":"2017-05-12T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1450261","bugzilla_description":"CVE-2017-7495 kernel: ext4: power failure during write(2) causes on-disk information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2017-10663","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1481149","bugzilla_description":"CVE-2017-10663 kernel: Missing sanity check for segno and blkoff read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10663.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-18360","severity":"low","public_date":"2017-05-11T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1671343","bugzilla_description":"CVE-2017-18360 kernel: Division by zero in change_port_settings in drivers/usb/serial/io_ti.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18360.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-9076","severity":"moderate","public_date":"2017-05-10T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1452688","bugzilla_description":"CVE-2017-9076 kernel: net: IPv6 DCCP implementation mishandles inheritance","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9076.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-9077","severity":"moderate","public_date":"2017-05-10T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1452744","bugzilla_description":"CVE-2017-9077 kernel: net: tcp_v6_syn_recv_sock function mishandles inheritance","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9077.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-8890","severity":"moderate","public_date":"2017-05-09T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1450972","bugzilla_description":"CVE-2017-8890 kernel: Double free in the inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8890.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-9211","severity":"moderate","public_date":"2017-05-09T00:00:00Z","advisories":[],"bugzilla":"1454757","bugzilla_description":"CVE-2017-9211 kernel: Null pointer dereference due to missing key-size check in setkey function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-9150","severity":"moderate","public_date":"2017-05-08T00:00:00Z","advisories":[],"bugzilla":"1454647","bugzilla_description":"CVE-2017-9150 kernel: eBPF verifier log leaks lower half of map pointer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9150.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-7487","severity":"low","public_date":"2017-05-02T00:00:00Z","advisories":[],"bugzilla":"1447734","bugzilla_description":"CVE-2017-7487 kernel: Reference counter leak in ipxitf_ioctl resulting into use after free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2017-10662","severity":"low","public_date":"2017-05-02T00:00:00Z","advisories":[],"bugzilla":"1481146","bugzilla_description":"CVE-2017-10662 kernel: Missing sanity check for segment count in f2fs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10662.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-0630","severity":"low","public_date":"2017-05-01T00:00:00Z","advisories":[],"bugzilla":"1450039","bugzilla_description":"CVE-2017-0630 kernel: Information disclosure vulnerability in kernel trace subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0630.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-0627","severity":"low","public_date":"2017-05-01T00:00:00Z","advisories":[],"bugzilla":"1450042","bugzilla_description":"CVE-2017-0627 kernel: Information disclosure vulnerability in kernel UVC driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-7895","severity":"important","public_date":"2017-04-28T00:00:00Z","advisories":["RHSA-2017:1798","RHSA-2017:1723","RHSA-2017:2732","RHSA-2017:1766","RHSA-2017:1615","RHSA-2017:1647","RHSA-2017:2428","RHSA-2017:1715","RHSA-2017:2429","RHSA-2017:1616","RHSA-2017:2472","RHSA-2017:2412"],"bugzilla":"1446103","bugzilla_description":"CVE-2017-7895 kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-0:2.6.18-422.el5","kernel-0:2.6.32-220.75.1.el6","kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-rt-1:3.10.0-514.rt56.228.el6rt","kernel-0:2.6.18-348.34.1.el5","kernel-0:2.6.32-573.45.1.el6","kernel-0:2.6.32-358.81.1.el6","kernel-0:2.6.32-431.82.1.el6","kernel-0:2.6.32-696.6.3.el6","kernel-0:2.6.32-504.62.1.el6","kernel-0:3.10.0-514.26.1.el7","kernel-0:3.10.0-327.58.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7895.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-9059","severity":"moderate","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1451386","bugzilla_description":"CVE-2017-9059 kernel: Module reference leak due to improper shut down of callback channel on umount","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9059.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11472","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1473214","bugzilla_description":"CVE-2017-11472 kernel: ACPI operand cache leak in acpi_ns_terminate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11472.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-7477","severity":"important","public_date":"2017-04-24T00:00:00Z","advisories":["RHSA-2017:1615","RHSA-2017:1616"],"bugzilla":"1445207","bugzilla_description":"CVE-2017-7477 kernel: net: Heap overflow in skb_to_sgvec in macsec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-0:3.10.0-514.26.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-8831","severity":"low","public_date":"2017-04-24T00:00:00Z","advisories":[],"bugzilla":"1449980","bugzilla_description":"CVE-2017-8831 kernel: Double fetch vulnerability in saa7164_bus_get function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8831.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.0"},{"CVE":"CVE-2007-6761","severity":"moderate","public_date":"2017-04-24T00:00:00Z","advisories":[],"bugzilla":"1458182","bugzilla_description":"CVE-2007-6761 kernel: Improper initialization of videobuf_mapping data structures","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6761.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-5873","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1600268","bugzilla_description":"CVE-2018-5873 kernel: use-after-free in __ns_get_path()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5873.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2016-9604","severity":"low","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1389433","bugzilla_description":"CVE-2016-9604 kernel: security: The built-in keyrings for security tokens can be joined as a session and then modified by the root user","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-732","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9604.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-7645","severity":"important","public_date":"2017-04-14T00:00:00Z","advisories":["RHSA-2018:1319","RHSA-2017:1615","RHSA-2017:1647","RHSA-2017:1616"],"bugzilla":"1443615","bugzilla_description":"CVE-2017-7645 kernel: nfsd: Incorrect handling of long RPC replies","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-130","affected_packages":["kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-rt-1:3.10.0-514.rt56.228.el6rt","kernel-0:2.6.32-696.28.1.el6","kernel-0:3.10.0-514.26.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7979","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1444501","bugzilla_description":"CVE-2017-7979 kernel: cookie feature in packet action API implementation mishandles tb nlattr array","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7979.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7618","severity":"low","public_date":"2017-04-10T00:00:00Z","advisories":[],"bugzilla":"1441093","bugzilla_description":"CVE-2017-7618 kernel: Infinite recursion in ahash.c by triggering EBUSY on a full queue","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7618.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7616","severity":"moderate","public_date":"2017-04-08T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1441088","bugzilla_description":"CVE-2017-7616 kernel: Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-390","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-10810","severity":"low","public_date":"2017-04-06T00:00:00Z","advisories":[],"bugzilla":"1468023","bugzilla_description":"CVE-2017-10810 Kernel: virtio-gpu: memory leakage while creating gpu object","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10810.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2017-7889","severity":"moderate","public_date":"2017-04-05T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1444493","bugzilla_description":"CVE-2017-7889 kernel: mm subsystem does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7889.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7472","severity":"moderate","public_date":"2017-04-01T00:00:00Z","advisories":["RHSA-2018:0181","RHSA-2018:0151","RHSA-2018:0152"],"bugzilla":"1442086","bugzilla_description":"CVE-2017-7472 kernel: keyctl_set_reqkey_keyring() leaks thread keyrings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-1:3.10.0-693.17.1.rt56.604.el6rt","kernel-rt-0:3.10.0-693.17.1.rt56.636.el7","kernel-0:3.10.0-693.17.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7472.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7374","severity":"low","public_date":"2017-03-31T00:00:00Z","advisories":[],"bugzilla":"1438394","bugzilla_description":"CVE-2017-7374 kernel: use-after-free in keyring key revocation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7374.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2017-8106","severity":"moderate","public_date":"2017-03-31T00:00:00Z","advisories":[],"bugzilla":"1445828","bugzilla_description":"CVE-2017-8106 kernel: Null pointer dereference on host in INVEPT emulation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8106.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2017-7346","severity":"low","public_date":"2017-03-30T00:00:00Z","advisories":[],"bugzilla":"1437431","bugzilla_description":"CVE-2017-7346 kernel: drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7346.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7319","severity":null,"public_date":"2017-03-30T00:00:00Z","advisories":[],"bugzilla":"1440877","bugzilla_description":"CVE-2017-7319 kernel: Sending SIGIO signal to any process via fcntl","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7319.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-7184","severity":"important","public_date":"2017-03-29T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2019:4159","RHSA-2017:2918"],"bugzilla":"1435153","bugzilla_description":"CVE-2017-7184 kernel: Out-of-bounds heap access in xfrm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7","kernel-0:3.10.0-514.71.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7184.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7308","severity":"important","public_date":"2017-03-29T00:00:00Z","advisories":["RHSA-2018:1854","RHSA-2017:1308","RHSA-2017:1297","RHSA-2017:1298"],"bugzilla":"1437404","bugzilla_description":"CVE-2017-7308 kernel: net/packet: overflow in check for priv area size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-0:2.6.32-754.el6","kernel-rt-0:3.10.0-514.21.1.rt56.438.el7","kernel-rt-1:3.10.0-514.rt56.221.el6rt","kernel-0:3.10.0-514.21.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7308.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-7286","severity":null,"public_date":"2017-03-29T00:00:00Z","advisories":[],"bugzilla":"1440871","bugzilla_description":"CVE-2017-7286 kernel: Inode integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7286.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-7294","severity":"moderate","public_date":"2017-03-28T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1436798","bugzilla_description":"CVE-2017-7294 kernel: drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7294.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2017-7273","severity":"low","public_date":"2017-03-27T00:00:00Z","advisories":[],"bugzilla":"1437435","bugzilla_description":"CVE-2017-7273 kernel: HID: integer underflow in cp_report_fixup() (drivers/hid/hid-cypress.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7273.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-7261","severity":"low","public_date":"2017-03-24T00:00:00Z","advisories":[],"bugzilla":"1435719","bugzilla_description":"CVE-2017-7261 kernel: drm/vmwgfx: check that number of mip levels is above zero","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-839","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7261.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-2671","severity":"moderate","public_date":"2017-03-24T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1436649","bugzilla_description":"CVE-2017-2671 kernel: ping socket / AF_LLC connect() sin_family race","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2671.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-18249","severity":"moderate","public_date":"2017-03-22T00:00:00Z","advisories":[],"bugzilla":"1560968","bugzilla_description":"CVE-2017-18249 kernel: Race condition in fs/f2fs/node.c:add_free_nid() function allows local users to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18249.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-2647","severity":"important","public_date":"2017-03-21T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2437","RHSA-2017:2077","RHSA-2020:3836","RHSA-2020:3548","RHSA-2017:2444"],"bugzilla":"1428353","bugzilla_description":"CVE-2017-2647 kernel: Null pointer dereference in search_keyring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:2.6.32-754.33.1.el6","kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7","kernel-0:3.10.0-514.28.1.el7","kernel-rt-1:3.10.0-514.rt56.231.el6rt","kernel-0:2.6.32-504.84.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2647.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7277","severity":"low","public_date":"2017-03-18T00:00:00Z","advisories":[],"bugzilla":"1436629","bugzilla_description":"CVE-2017-7277 kernel: Mishandling SCM_TIMESTAMPING_OPT_STATS feature causes out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7277.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2017-7187","severity":"moderate","public_date":"2017-03-16T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1434327","bugzilla_description":"CVE-2017-7187 kernel: scsi: Stack-based buffer overflow in sg_ioctl function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7187.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-2636","severity":"important","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:1126","RHSA-2017:0986","RHSA-2017:0931","RHSA-2017:0933","RHSA-2017:0932","RHSA-2017:0892","RHSA-2017:1233","RHSA-2017:1232","RHSA-2017:1488","RHSA-2017:1125"],"bugzilla":"1428319","bugzilla_description":"CVE-2017-2636 kernel: Race condition access to n_hdlc.tbuf causes double free in n_hdlc_release()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-0:2.6.32-358.78.1.el6","kernel-rt-1:3.10.0-514.rt56.219.el6rt","kernel-0:3.10.0-327.53.1.el7","kernel-0:2.6.32-696.1.1.el6","kernel-0:2.6.32-431.80.1.el6","kernel-rt-0:3.10.0-514.16.1.rt56.437.el7","kernel-0:3.10.0-514.16.1.el7","kernel-0:2.6.32-573.42.1.el6","kernel-0:2.6.32-220.71.1.el6","kernel-0:2.6.32-504.60.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2636.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-6874","severity":"moderate","public_date":"2017-03-06T00:00:00Z","advisories":[],"bugzilla":"1432429","bugzilla_description":"CVE-2017-6874 kernel: Race condition in kernel/ucount.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6874.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8925","severity":"low","public_date":"2017-03-06T00:00:00Z","advisories":[],"bugzilla":"1451393","bugzilla_description":"CVE-2017-8925 kernel: Reference count mishandling in the omninet_open function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8925.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8924","severity":"low","public_date":"2017-03-06T00:00:00Z","advisories":[],"bugzilla":"1451399","bugzilla_description":"CVE-2017-8924 kernel: Information leak in completion handler in edge_bulk_in_callback function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8924.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-6951","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1433252","bugzilla_description":"CVE-2017-6951 kernel: NULL pointer dereference in keyring_search_aux function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6951.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8065","severity":"moderate","public_date":"2017-02-27T00:00:00Z","advisories":[],"bugzilla":"1445338","bugzilla_description":"CVE-2017-8065 kernel: crypto/ccm.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8065.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-2634","severity":"moderate","public_date":"2017-02-24T00:00:00Z","advisories":["RHSA-2017:0346","RHSA-2017:0323","RHSA-2017:0347"],"bugzilla":"1424751","bugzilla_description":"CVE-2017-2634 kernel: dccp: crash while sending ipv6 reset packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:2.6.18-348.33.1.el5","kernel-0:2.6.18-419.el5","kernel-0:2.6.18-238.58.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8066","severity":"moderate","public_date":"2017-02-24T00:00:00Z","advisories":[],"bugzilla":"1445339","bugzilla_description":"CVE-2017-8066 kernel: gs_usb.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8066.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-6353","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":[],"bugzilla":"1428907","bugzilla_description":"CVE-2017-6353 kernel: Possible double free in stcp_sendmsg() (incorrect fix for CVE-2017-5986)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6353.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18255","severity":"low","public_date":"2017-02-23T00:00:00Z","advisories":[],"bugzilla":"1563069","bugzilla_description":"CVE-2017-18255 kernel: Integer overflow in events/core.c:perf_cpu_time_max_percent_handler() can allow for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18255.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2017-6074","severity":"important","public_date":"2017-02-22T00:00:00Z","advisories":["RHSA-2017:0294","RHSA-2017:0293","RHSA-2017:0295","RHSA-2017:0366","RHSA-2017:0365","RHSA-2017:0346","RHSA-2017:0324","RHSA-2017:0323","RHSA-2017:0345","RHSA-2017:0403","RHSA-2017:0347","RHSA-2017:0501","RHSA-2017:0316","RHSA-2017:0932","RHSA-2017:1209"],"bugzilla":"1423071","bugzilla_description":"CVE-2017-6074 kernel: use after free in dccp protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:2.6.32-504.57.1.el6","kernel-0:2.6.18-348.33.1.el5","kernel-rt-1:3.10.0-514.rt56.219.el6rt","kernel-0:2.6.32-431.78.1.el6","kernel-0:3.10.0-229.49.1.ael7b","kernel-0:2.6.32-358.77.1.el6","kernel-rt-0:3.10.0-514.6.1.rt56.430.el7","kernel-0:2.6.18-238.58.1.el5","rhev-hypervisor7-0:7.3-20170425.0.el7ev","rhev-hypervisor7-0:7.3-20170425.0.el6ev","kernel-0:2.6.32-573.40.1.el6","kernel-0:3.10.0-327.49.2.el7","kernel-0:2.6.18-419.el5","kernel-0:2.6.32-220.70.1.el6","kernel-0:3.10.0-514.6.2.el7","kernel-0:2.6.32-642.13.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6074.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-6347","severity":"moderate","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427984","bugzilla_description":"CVE-2017-6347 kernel: ipv4: Incorrect IP_CHECKSUM handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-6348","severity":"moderate","public_date":"2017-02-17T00:00:00Z","advisories":[],"bugzilla":"1428491","bugzilla_description":"CVE-2017-6348 kernel: net: Improper lock dropping in the hashbin_delete function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6348.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-2618","severity":"moderate","public_date":"2017-02-16T00:00:00Z","advisories":["RHSA-2017:0931","RHSA-2017:0933","RHSA-2017:0932"],"bugzilla":"1419916","bugzilla_description":"CVE-2017-2618 kernel: Off-by-one error in selinux_setprocattr (/proc/self/attr/fscreate)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["kernel-rt-1:3.10.0-514.rt56.219.el6rt","kernel-rt-0:3.10.0-514.16.1.rt56.437.el7","kernel-0:3.10.0-514.16.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2618.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8062","severity":"moderate","public_date":"2017-02-15T00:00:00Z","advisories":[],"bugzilla":"1445332","bugzilla_description":"CVE-2017-8062 kernel: dw2102.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8062.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-6346","severity":"moderate","public_date":"2017-02-14T00:00:00Z","advisories":[],"bugzilla":"1428487","bugzilla_description":"CVE-2017-6346 kernel: net: Race condition in net/packet/af_packet.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6346.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-6345","severity":"moderate","public_date":"2017-02-13T00:00:00Z","advisories":[],"bugzilla":"1428485","bugzilla_description":"CVE-2017-6345 kernel: llc: skb->sk set without skb->destructor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6345.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-5972","severity":"moderate","public_date":"2017-02-12T00:00:00Z","advisories":[],"bugzilla":"1422081","bugzilla_description":"CVE-2017-5972 kernel: SYN cookie protection mechanism not properly implemented","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5972.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8061","severity":"moderate","public_date":"2017-02-12T00:00:00Z","advisories":[],"bugzilla":"1445333","bugzilla_description":"CVE-2017-8061 kernel: dvb-usb-firmware.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8061.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5967","severity":"low","public_date":"2017-02-10T00:00:00Z","advisories":[],"bugzilla":"1422138","bugzilla_description":"CVE-2017-5967 kernel: Time subsystem allows local users to discover real PID values","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5967.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-10661","severity":"moderate","public_date":"2017-02-10T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2020:0036","RHSA-2018:3083","RHSA-2019:4057","RHSA-2019:4058"],"bugzilla":"1481136","bugzilla_description":"CVE-2017-10661 kernel: Handling of might_cancel queueing is not properly pretected against race","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-693.61.1.el7","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-0:3.10.0-957.el7","kernel-0:3.10.0-862.46.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10661.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-8636","severity":"moderate","public_date":"2017-02-07T00:00:00Z","advisories":[],"bugzilla":"1421981","bugzilla_description":"CVE-2016-8636 kernel: Integer overflow in the RDMA over infiniband software implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8636.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2017-6214","severity":"moderate","public_date":"2017-02-07T00:00:00Z","advisories":["RHSA-2017:1615","RHSA-2017:1647","RHSA-2017:1616","RHSA-2017:1372"],"bugzilla":"1426542","bugzilla_description":"CVE-2017-6214 kernel: ipv4/tcp: Infinite loop in tcp_splice_read()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-0:2.6.32-696.3.1.el6","kernel-rt-1:3.10.0-514.rt56.228.el6rt","kernel-0:3.10.0-514.26.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5986","severity":"moderate","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:1308"],"bugzilla":"1420276","bugzilla_description":"CVE-2017-5986 kernel: Reachable BUG_ON from userspace in sctp_wait_for_sndbuf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["kernel-0:3.10.0-514.21.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5986.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5897","severity":"low","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1419848","bugzilla_description":"CVE-2017-5897 kernel: ip6_gre: Invalid reads in ip6gre_err","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-8063","severity":"moderate","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1445334","bugzilla_description":"CVE-2017-8063 kernel: cxusb.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8063.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5970","severity":"moderate","public_date":"2017-02-04T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1421638","bugzilla_description":"CVE-2017-5970 kernel: ipv4: Invalid IP options could cause skb->dst drop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5970.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8070","severity":"moderate","public_date":"2017-02-04T00:00:00Z","advisories":[],"bugzilla":"1445328","bugzilla_description":"CVE-2017-8070 kernel: catc.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8070.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8068","severity":"moderate","public_date":"2017-02-04T00:00:00Z","advisories":[],"bugzilla":"1445341","bugzilla_description":"CVE-2017-8068 kernel: pegasus.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8068.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8069","severity":"moderate","public_date":"2017-02-04T00:00:00Z","advisories":[],"bugzilla":"1445343","bugzilla_description":"CVE-2017-8069 kernel: rtl8150.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8069.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8064","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":[],"bugzilla":"1445336","bugzilla_description":"CVE-2017-8064 kernel: dvb_usb_core.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8064.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8067","severity":"moderate","public_date":"2017-02-01T00:00:00Z","advisories":[],"bugzilla":"1445340","bugzilla_description":"CVE-2017-8067 kernel: virtio_console.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8067.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8072","severity":"moderate","public_date":"2017-01-30T00:00:00Z","advisories":[],"bugzilla":"1445330","bugzilla_description":"CVE-2017-8072 kernel: cp2112_gpio_direction_input does not have the expected EIO error status for a zero-length report","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8072.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8071","severity":"moderate","public_date":"2017-01-30T00:00:00Z","advisories":[],"bugzilla":"1445331","bugzilla_description":"CVE-2017-8071 kernel: hid-cp2112.c uses a spinlock without considering that sleeping is possible in a USB HID request callback","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8071.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8405","severity":"low","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1426132","bugzilla_description":"CVE-2016-8405 kernel: Copying color maps to userspace vulnerable to heap-buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8405.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2016-10142","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0817"],"bugzilla":"1415908","bugzilla_description":"CVE-2016-10142 kernel - IPV6 fragmentation flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-406","affected_packages":["kernel-0:2.6.32-696.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10142.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2017-2596","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1417812","bugzilla_description":"CVE-2017-2596 Kernel: kvm: page reference leakage in handle_vmon","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-772","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2596.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2017-18257","severity":"low","public_date":"2017-01-22T00:00:00Z","advisories":[],"bugzilla":"1565455","bugzilla_description":"CVE-2017-18257 kernel: Inifinite loop caused by integer overflow in fs/f2fs/data.c:__get_data_block() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18257.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5669","severity":"low","public_date":"2017-01-20T00:00:00Z","advisories":[],"bugzilla":"1427239","bugzilla_description":"CVE-2017-5669 kernel: Shmat allows mmap null page protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5669.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5576","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1416436","bugzilla_description":"CVE-2017-5576 kernel: vc4: Integer overflow in temporary allocation layout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5576.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2017-5577","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1416437","bugzilla_description":"CVE-2017-5577 kernel: vc4: Heap-buffer overflow due to failing checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5577.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-5550","severity":"moderate","public_date":"2017-01-15T00:00:00Z","advisories":[],"bugzilla":"1416116","bugzilla_description":"CVE-2017-5550 kernel: Information leak due to fencepost error in pipe_advance()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5550.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-6001","severity":"moderate","public_date":"2017-01-14T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1422825","bugzilla_description":"CVE-2017-6001 kernel: Race condition between multiple sys_perf_event_open() calls","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6001.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-5547","severity":"low","public_date":"2017-01-13T00:00:00Z","advisories":[],"bugzilla":"1416096","bugzilla_description":"CVE-2017-5547 kernel: DMA buffers on stack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-2583","severity":"moderate","public_date":"2017-01-12T00:00:00Z","advisories":["RHSA-2017:1615","RHSA-2017:1616"],"bugzilla":"1414735","bugzilla_description":"CVE-2017-2583 Kernel: Kvm: vmx/svm potential privilege escalation inside guest","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-0:3.10.0-514.26.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2583.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-5548","severity":"moderate","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1416110","bugzilla_description":"CVE-2017-5548 kernel: Using stack for buffers in ieee802154","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5548.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10088","severity":"moderate","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077","RHSA-2017:0817"],"bugzilla":"1412210","bugzilla_description":"CVE-2016-10088 kernel: Use after free in SCSI generic device interface (CVE-2016-9576 regression)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:2.6.32-696.el6","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10088.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-2584","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1413001","bugzilla_description":"CVE-2017-2584 Kernel: kvm: use after free in complete_emulated_mmio","cvss_score":5.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:C","CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2584.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-5546","severity":"moderate","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1415733","bugzilla_description":"CVE-2017-5546 kernel: SLAB freelist randomization produces duplicate entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5546.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5549","severity":"low","public_date":"2017-01-10T00:00:00Z","advisories":[],"bugzilla":"1416114","bugzilla_description":"CVE-2017-5549 kernel: Incorrect line-state error handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5549.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8106","severity":"moderate","public_date":"2017-01-09T00:00:00Z","advisories":[],"bugzilla":"1386646","bugzilla_description":"CVE-2016-8106 kernel: DoS of Intel Ethernet controllers after a period of IPv6 fragment flood","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8106.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-5551","severity":"moderate","public_date":"2017-01-09T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077","RHSA-2017:0817"],"bugzilla":"1416126","bugzilla_description":"CVE-2017-5551 kernel: S_ISGD is not cleared when setting posix ACLs in tmpfs (CVE-2016-7097 incomplete fix)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:2.6.32-696.el6","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5551.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-0403","severity":"important","public_date":"2017-01-01T00:00:00Z","advisories":[],"bugzilla":"1417833","bugzilla_description":"CVE-2017-0403 kernel: Privilege escalation in Android performance subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0403.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-0404","severity":"important","public_date":"2017-01-01T00:00:00Z","advisories":[],"bugzilla":"1417834","bugzilla_description":"CVE-2017-0404 kernel: Privilege escalation in Android sound subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0404.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9588","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1404924","bugzilla_description":"CVE-2016-9588 Kernel: kvm: nVMX: uncaught software exceptions in L1 guest leads to DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-248","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9588.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2016-10154","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":[],"bugzilla":"1416104","bugzilla_description":"CVE-2016-10154 kernel: smbencrypt() points a scatterlist to the stack causing DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10154.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9919","severity":"important","public_date":"2016-12-08T00:00:00Z","advisories":[],"bugzilla":"1403260","bugzilla_description":"CVE-2016-9919 kernel: Linux panic on fragemented IPv6 traffic (icmp6_send)","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9919.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-8967","severity":"important","public_date":"2016-12-08T00:00:00Z","advisories":[],"bugzilla":"1404284","bugzilla_description":"CVE-2015-8967 kernel: arm64: Strict page permission bypass","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8967.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-8655","severity":"important","public_date":"2016-12-06T00:00:00Z","advisories":["RHSA-2017:0402","RHSA-2017:0386","RHSA-2017:0387"],"bugzilla":"1400019","bugzilla_description":"CVE-2016-8655 kernel: Race condition in packet_set_ring leads to use after free","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-362->CWE-416","affected_packages":["kernel-0:3.10.0-514.10.2.el7","kernel-rt-1:3.10.0-514.rt56.215.el6rt","kernel-rt-0:3.10.0-514.10.2.rt56.435.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8655.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8399","severity":"moderate","public_date":"2016-12-05T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2017:0869","RHSA-2017:0817"],"bugzilla":"1403833","bugzilla_description":"CVE-2016-8399 kernel: net: Out of bounds stack read in memcpy_fromiovec","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.32-573.41.1.el6","kernel-0:2.6.32-696.el6","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9793","severity":"moderate","public_date":"2016-12-02T00:00:00Z","advisories":["RHSA-2017:0931","RHSA-2017:0933","RHSA-2017:0932"],"bugzilla":"1402013","bugzilla_description":"CVE-2016-9793 kernel: Signed overflow for SO_{SND|RCV}BUFFORCE","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":["kernel-rt-1:3.10.0-514.rt56.219.el6rt","kernel-rt-0:3.10.0-514.16.1.rt56.437.el7","kernel-0:3.10.0-514.16.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9793.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2016-10147","severity":"moderate","public_date":"2016-12-02T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1404200","bugzilla_description":"CVE-2016-10147 kernel: Kernel crash by spawning mcrypt(alg) with incompatible algorithm","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10147.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10153","severity":"moderate","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1416101","bugzilla_description":"CVE-2016-10153 kernel: introduce ceph_crypt() for in-place en/decryption","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10153.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9685","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1396941","bugzilla_description":"CVE-2016-9685 kernel: Memory leaks in xfs_attr_list.c error paths","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-772","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9685.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2016-10150","severity":"important","public_date":"2016-11-30T00:00:00Z","advisories":[],"bugzilla":"1414506","bugzilla_description":"CVE-2016-10150 Kernel: Kvm: a use-after-free while creating devices","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10150.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2016-9755","severity":"moderate","public_date":"2016-11-26T00:00:00Z","advisories":[],"bugzilla":"1400904","bugzilla_description":"CVE-2016-9755 kernel: netfilter: Out-of-bounds write due to a signedness issue when defragmenting IPv6 packets","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9755.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-9576","severity":"moderate","public_date":"2016-11-25T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077","RHSA-2017:0817"],"bugzilla":"1403145","bugzilla_description":"CVE-2016-9576 kernel: Use after free in SCSI generic device interface","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:2.6.32-696.el6","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9576.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9777","severity":"important","public_date":"2016-11-23T00:00:00Z","advisories":[],"bugzilla":"1400804","bugzilla_description":"CVE-2016-9777 Kernel: kvm: out of bounds memory access via vcpu_id","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9777.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2016-9756","severity":"low","public_date":"2016-11-22T00:00:00Z","advisories":[],"bugzilla":"1400468","bugzilla_description":"CVE-2016-9756 Kernel: kvm: stack memory information leakage","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9756.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2016-10200","severity":"important","public_date":"2016-11-18T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2437","RHSA-2017:2077","RHSA-2017:2444"],"bugzilla":"1430347","bugzilla_description":"CVE-2016-10200 kernel: l2tp: Race condition in the L2TPv3 IP encapsulation feature","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7","kernel-0:3.10.0-514.28.1.el7","kernel-rt-1:3.10.0-514.rt56.231.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10200.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-12168","severity":"moderate","public_date":"2016-11-18T00:00:00Z","advisories":["RHEA-2017:3163"],"bugzilla":"1492984","bugzilla_description":"CVE-2017-12168 Kernel: kvm: ARM64: assert failure when accessing PMCCNTR register","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-617","affected_packages":["kernel-alt-0:4.11.0-44.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12168.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-8646","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:1308","RHSA-2017:1297","RHSA-2017:1298"],"bugzilla":"1388821","bugzilla_description":"CVE-2016-8646 kernel: Oops in shash_async_export()","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-514.21.1.rt56.438.el7","kernel-rt-1:3.10.0-514.rt56.221.el6rt","kernel-0:3.10.0-514.21.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8646.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8650","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:0931","RHSA-2017:0933","RHSA-2017:0932","RHSA-2018:1854"],"bugzilla":"1395187","bugzilla_description":"CVE-2016-8650 kernel: Null pointer dereference via keyctl","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-1:3.10.0-514.rt56.219.el6rt","kernel-0:2.6.32-754.el6","kernel-rt-0:3.10.0-514.16.1.rt56.437.el7","kernel-0:3.10.0-514.16.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8650.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-10208","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:1308","RHSA-2017:1297","RHSA-2017:1298"],"bugzilla":"1395190","bugzilla_description":"CVE-2016-10208 kernel: EXT4 memory corruption / SLAB out-of-bounds read","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-514.21.1.rt56.438.el7","kernel-rt-1:3.10.0-514.rt56.221.el6rt","kernel-0:3.10.0-514.21.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10208.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-8645","severity":"moderate","public_date":"2016-11-10T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1393904","bugzilla_description":"CVE-2016-8645 kernel: a BUG() statement can be hit in net/ipv4/tcp_input.c","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-617","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8645.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-9279","severity":"moderate","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1396669","bugzilla_description":"CVE-2016-9279 kernel: Use After Free in /dev/fimg2d","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9279.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9278","severity":"moderate","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1396670","bugzilla_description":"CVE-2016-9278 kernel: Kernel Crash on /dev/fimg2d ioctl command","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9278.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-10741","severity":"low","public_date":"2016-11-08T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1671869","bugzilla_description":"CVE-2016-10741 kernel: race condition between direct and memory-mapped I/O in fs/xfs/xfs_aops.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10741.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-8632","severity":"moderate","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1390832","bugzilla_description":"CVE-2016-8632 kernel: TIPC subsystem: tipc_msg_build() doesn't validate MTU, may cause memory corruption.","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8632.json"},{"CVE":"CVE-2016-8633","severity":"important","public_date":"2016-11-06T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2019:1170","RHSA-2019:1190"],"bugzilla":"1391490","bugzilla_description":"CVE-2016-8633 kernel: Buffer overflow in firewire driver via crafted incoming packets","cvss_score":5.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:C","CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","kernel-0:3.10.0-693.47.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8633.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2016-9191","severity":"moderate","public_date":"2016-11-05T00:00:00Z","advisories":[],"bugzilla":"1392439","bugzilla_description":"CVE-2016-9191 kernel: Local DoS via cgroup offline code","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9191.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9644","severity":"important","public_date":"2016-11-03T00:00:00Z","advisories":[],"bugzilla":"1399528","bugzilla_description":"CVE-2016-9644 kernel: Incorrect fix for CVE-2016-9178","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9644.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8630","severity":"important","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2017:0386","RHSA-2017:0387"],"bugzilla":"1393350","bugzilla_description":"CVE-2016-8630 kernel: kvm: x86: NULL pointer dereference during instruction decode","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-514.10.2.el7","kernel-rt-0:3.10.0-514.10.2.rt56.435.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8630.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-9555","severity":"moderate","public_date":"2016-10-25T00:00:00Z","advisories":["RHSA-2017:0091","RHSA-2017:0307","RHSA-2017:0086","RHSA-2017:0113"],"bugzilla":"1397930","bugzilla_description":"CVE-2016-9555 kernel: Slab out-of-bounds access in sctp_sf_ootb()","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-125","affected_packages":["kernel-rt-0:3.10.0-514.6.1.rt56.429.el7","kernel-rt-1:3.10.0-514.rt56.210.el6rt","kernel-0:2.6.32-642.15.1.el6","kernel-0:3.10.0-514.6.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9555.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-5195","severity":"important","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2133","RHSA-2016:2124","RHSA-2016:2132","RHSA-2016:2110","RHSA-2016:2120","RHSA-2016:2098","RHSA-2017:0372","RHSA-2016:2127","RHSA-2016:2105","RHSA-2016:2126","RHSA-2016:2118","RHSA-2016:2107","RHSA-2016:2128","RHSA-2016:2106"],"bugzilla":"1384344","bugzilla_description":"CVE-2016-5195 kernel: mm: privilege escalation via MAP_PRIVATE COW breakage","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-rt-0:3.10.0-327.36.3.rt56.238.el7","kernel-0:2.6.18-238.57.1.el5","kernel-0:3.10.0-229.42.2.el7","kernel-0:2.6.32-431.75.1.el6","kernel-aarch64-0:4.5.0-15.2.1.el7","kernel-0:2.6.18-416.el5","kernel-0:2.6.32-573.35.2.el6","kernel-0:2.6.32-220.68.1.el6","kernel-0:2.6.32-358.75.1.el6","kernel-0:2.6.32-642.6.2.el6","kernel-0:2.6.18-348.32.1.el5","kernel-rt-1:3.10.0-327.rt56.198.el6rt","kernel-0:2.6.32-504.54.1.el6","kernel-0:3.10.0-327.36.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5195.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-7042","severity":"moderate","public_date":"2016-10-13T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077","RHSA-2017:0817"],"bugzilla":"1373966","bugzilla_description":"CVE-2016-7042 kernel: Stack corruption while reading /proc/keys when gcc stack protector is enabled","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-121","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:2.6.32-696.el6","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7042.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8660","severity":"low","public_date":"2016-10-13T00:00:00Z","advisories":[],"bugzilla":"1384851","bugzilla_description":"CVE-2016-8660 kernel: xfs: local DoS due to a page lock order bug in the XFS seek hole/data implementation","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8660.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8666","severity":"important","public_date":"2016-10-13T00:00:00Z","advisories":["RHSA-2017:0004","RHSA-2016:2047","RHSA-2016:2110","RHSA-2017:0372","RHSA-2016:2107"],"bugzilla":"1384991","bugzilla_description":"CVE-2016-8666 kernel: Remotely triggerable recursion in GRE code leading to kernel crash","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-674","affected_packages":["kernel-rt-0:3.10.0-327.36.3.rt56.238.el7","kernel-rt-1:3.10.0-327.rt56.198.el6rt","kernel-0:3.10.0-229.46.1.el7","kernel-aarch64-0:4.5.0-15.2.1.el7","kernel-0:3.10.0-327.36.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8666.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9083","severity":"important","public_date":"2016-10-12T00:00:00Z","advisories":["RHSA-2017:0386","RHSA-2017:0387"],"bugzilla":"1389258","bugzilla_description":"CVE-2016-9083 kernel: State machine confusion bug in vfio driver leading to memory corruption","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-391","affected_packages":["kernel-0:3.10.0-514.10.2.el7","kernel-rt-0:3.10.0-514.10.2.rt56.435.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9083.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-9084","severity":"moderate","public_date":"2016-10-12T00:00:00Z","advisories":["RHSA-2017:0386","RHSA-2017:0387"],"bugzilla":"1389259","bugzilla_description":"CVE-2016-9084 kernel: Integer overflow when using kzalloc in vfio driver","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":["kernel-0:3.10.0-514.10.2.el7","kernel-rt-0:3.10.0-514.10.2.rt56.435.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9084.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-7039","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2016:2047","RHSA-2016:2110","RHSA-2017:0372","RHSA-2016:2107"],"bugzilla":"1375944","bugzilla_description":"CVE-2016-7039 kernel: remotely triggerable unbounded recursion in the vlan gro code leading to a kernel crash","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-674","affected_packages":["kernel-rt-0:3.10.0-327.36.3.rt56.238.el7","kernel-rt-1:3.10.0-327.rt56.198.el6rt","kernel-aarch64-0:4.5.0-15.2.1.el7","kernel-0:3.10.0-327.36.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7039.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15102","severity":"low","public_date":"2016-09-19T00:00:00Z","advisories":[],"bugzilla":"1505905","bugzilla_description":"CVE-2017-15102 kernel: NULL pointer dereference due to race condition in probe function of legousbtower driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15102.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2016-10044","severity":"moderate","public_date":"2016-09-16T00:00:00Z","advisories":[],"bugzilla":"1420236","bugzilla_description":"CVE-2016-10044 kernel: aio_mount function does not properly restrict execute access","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10044.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-7425","severity":"low","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1377330","bugzilla_description":"CVE-2016-7425 kernel: SCSI arcmsr driver: Buffer overflow in arcmsr_iop_message_xfer()","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7425.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-9178","severity":"low","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1391908","bugzilla_description":"CVE-2016-9178 kernel: Information leak in get_user_ex function","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9178.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-10318","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1439768","bugzilla_description":"CVE-2016-10318 kernel: User can assign an encryption policy to a directory owned by a different user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10318.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-8658","severity":"low","public_date":"2016-09-07T00:00:00Z","advisories":[],"bugzilla":"1384403","bugzilla_description":"CVE-2016-8658 kernel: Stack buffer overflow in brcmf_cfg80211_start_ap","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:C","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8658.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2016-5342","severity":"moderate","public_date":"2016-08-30T00:00:00Z","advisories":[],"bugzilla":"1866176","bugzilla_description":"CVE-2016-5342 kernel: Heap-based buffer overflow in wcnss_wlan_write function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5342.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2015-8953","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":[],"bugzilla":"1367814","bugzilla_description":"CVE-2015-8953 kernel: overlayfs: Double dentry reference leak in copy-up failure","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:C","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8953.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2016-5344","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":[],"bugzilla":"1866172","bugzilla_description":"CVE-2016-5344 kernel: multiple integer overflows in the MDSS driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5344.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2015-8952","severity":"low","public_date":"2016-08-22T00:00:00Z","advisories":[],"bugzilla":"1360968","bugzilla_description":"CVE-2015-8952 kernel: mbcache code subject to softlockup DOS in cache management","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8952.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6327","severity":"moderate","public_date":"2016-08-19T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1354525","bugzilla_description":"CVE-2016-6327 kernel: infiniband: Kernel crash by sending ABORT_TASK command","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6327.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6828","severity":"moderate","public_date":"2016-08-15T00:00:00Z","advisories":["RHSA-2017:0091","RHSA-2017:0086","RHSA-2017:0036","RHSA-2017:0113"],"bugzilla":"1367091","bugzilla_description":"CVE-2016-6828 kernel: Use after free in tcp_xmit_retransmit_queue","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-416","affected_packages":["kernel-0:2.6.32-642.13.1.el6","kernel-rt-0:3.10.0-514.6.1.rt56.429.el7","kernel-rt-1:3.10.0-514.rt56.210.el6rt","kernel-0:3.10.0-514.6.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6828.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-2064","severity":"moderate","public_date":"2016-08-09T00:00:00Z","advisories":[],"bugzilla":"1866180","bugzilla_description":"CVE-2016-2064 kernel: DoS in MSM QDSP6 audio driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-400)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2064.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-3841","severity":"important","public_date":"2016-08-08T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2695","RHSA-2016:2584","RHSA-2016:0855"],"bugzilla":"1364971","bugzilla_description":"CVE-2016-3841 kernel: use-after-free via crafted IPV6 sendmsg for raw / tcp / udp / l2tp sockets.","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-667","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7","kernel-0:3.10.0-327.41.3.el7","kernel-0:2.6.32-642.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2016-3857","severity":"important","public_date":"2016-08-05T00:00:00Z","advisories":[],"bugzilla":"1381188","bugzilla_description":"CVE-2016-3857 kernel: privilege escalation in sys_oabi_*() in arm kernel","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-7910","severity":"moderate","public_date":"2016-08-04T00:00:00Z","advisories":["RHSA-2017:1308","RHSA-2017:1297","RHSA-2017:0892","RHSA-2017:1298"],"bugzilla":"1399727","bugzilla_description":"CVE-2016-7910 kernel: Use after free in seq file","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["kernel-0:2.6.32-696.1.1.el6","kernel-rt-0:3.10.0-514.21.1.rt56.438.el7","kernel-rt-1:3.10.0-514.rt56.221.el6rt","kernel-0:3.10.0-514.21.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7910.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6480","severity":"moderate","public_date":"2016-08-01T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2017:0817"],"bugzilla":"1362466","bugzilla_description":"CVE-2016-6480 kernel: scsi: aacraid: double fetch in ioctl_send_fib()","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-362","affected_packages":["kernel-0:2.6.32-696.el6","kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6480.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2017-0605","severity":"low","public_date":"2016-08-01T00:00:00Z","advisories":[],"bugzilla":"1450028","bugzilla_description":"CVE-2017-0605 kernel: Stack corruption due to string copy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0605.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-6516","severity":"important","public_date":"2016-07-31T00:00:00Z","advisories":[],"bugzilla":"1362457","bugzilla_description":"CVE-2016-6516 kernel: vfs: ioctl: double fetch leading to heap overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6516.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2016-6492","severity":"important","public_date":"2016-07-30T00:00:00Z","advisories":[],"bugzilla":"1363702","bugzilla_description":"CVE-2016-6492 kernel: privilege escalation flaw in mediatek driver","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2016-5412","severity":"moderate","public_date":"2016-07-28T00:00:00Z","advisories":["RHSA-2016:2574"],"bugzilla":"1349916","bugzilla_description":"CVE-2016-5412 Kernel: powerpc: kvm: Infinite loop via H_CEDE hypercall when running under hypervisor-mode","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-835","affected_packages":["kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5412.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.4"},{"CVE":"CVE-2016-9313","severity":"moderate","public_date":"2016-07-22T00:00:00Z","advisories":[],"bugzilla":"1399519","bugzilla_description":"CVE-2016-9313 kernel: security/keys/big_key.c mishandles unsuccessful crypto registration","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-3044","severity":"important","public_date":"2016-07-22T00:00:00Z","advisories":["RHSA-2016:1033","RHSA-2016:2574"],"bugzilla":"1400495","bugzilla_description":"CVE-2016-3044 kernel: Infinite loop vulnerability in KVM","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-835","affected_packages":["kernel-0:3.10.0-514.el7","kernel-0:3.10.0-327.18.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3044.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.4"},{"CVE":"CVE-2016-5400","severity":"low","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358184","bugzilla_description":"CVE-2016-5400 kernel: memory leak in airspy usb driver","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5400.json","cvss3_scoring_vector":"AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2016-6213","severity":"low","public_date":"2016-07-13T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1356471","bugzilla_description":"CVE-2016-6213 kernel: Overflowing kernel mount table using shared bind mount","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-770","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6213.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-5696","severity":"important","public_date":"2016-07-12T00:00:00Z","advisories":["RHSA-2016:1815","RHSA-2016:1939","RHSA-2016:1657","RHSA-2016:1814","RHSA-2016:1664","RHSA-2016:1631","RHSA-2016:1632","RHSA-2016:1633"],"bugzilla":"1354708","bugzilla_description":"CVE-2016-5696 kernel: challenge ACK counter information disclosure.","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-203","affected_packages":["kernel-0:2.6.32-642.4.2.el6","kernel-0:3.10.0-229.40.1.el7","kernel-rt-1:3.10.0-327.rt56.195.el6rt","kernel-0:2.6.32-573.34.1.el6","kernel-0:3.10.0-327.28.3.el7","kernel-0:2.6.32-431.73.2.el6","kernel-0:2.6.32-504.52.1.el6","kernel-rt-0:3.10.0-327.28.3.rt56.235.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5696.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-6197","severity":"moderate","public_date":"2016-07-11T00:00:00Z","advisories":["RHSA-2016:1847","RHSA-2016:1875"],"bugzilla":"1355650","bugzilla_description":"CVE-2016-6197 kernel: overlayfs: missing upper dentry verification before unlink and rename","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-362","affected_packages":["kernel-0:3.10.0-327.36.1.el7","kernel-rt-0:3.10.0-327.36.1.rt56.237.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6197.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6198","severity":"moderate","public_date":"2016-07-11T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2016:1847","RHSA-2016:1875"],"bugzilla":"1355654","bugzilla_description":"CVE-2016-6198 kernel: vfs: missing detection of hardlinks in vfs_rename() on overlayfs","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-362","affected_packages":["kernel-0:3.10.0-327.36.1.el7","kernel-rt-0:3.10.0-327.36.1.rt56.237.el7","kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6187","severity":"important","public_date":"2016-07-08T00:00:00Z","advisories":[],"bugzilla":"1354383","bugzilla_description":"CVE-2016-6187 kernel: apparmor: Potential privilege escalation via oops in apparmor_setprocattr()","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6187.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2014-9410","severity":"moderate","public_date":"2016-07-08T00:00:00Z","advisories":[],"bugzilla":"1866191","bugzilla_description":"CVE-2014-9410 kernel: DoS in drivers/media/video/msm/vfe/msm_vfe31.c via crafted ioctl call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9410.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-6162","severity":null,"public_date":"2016-07-05T00:00:00Z","advisories":[],"bugzilla":"1353538","bugzilla_description":"CVE-2016-6162 kernel: Kernel panic triggered at BUG_ON in net/core/skbuff.c","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6162.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6156","severity":"moderate","public_date":"2016-07-04T00:00:00Z","advisories":[],"bugzilla":"1353490","bugzilla_description":"CVE-2016-6156 kernel: Race condition vulnerability in Chrome driver","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6156.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-6136","severity":"moderate","public_date":"2016-07-04T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2017:0307"],"bugzilla":"1353533","bugzilla_description":"CVE-2016-6136 kernel: Race condition vulnerability in execve argv arguments","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:2.6.32-642.15.1.el6","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6136.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-7911","severity":"moderate","public_date":"2016-07-01T00:00:00Z","advisories":[],"bugzilla":"1399722","bugzilla_description":"CVE-2016-7911 kernel: Use after free in sys_ioprio_get()","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7911.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-5829","severity":"moderate","public_date":"2016-06-25T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2016:2006"],"bugzilla":"1350509","bugzilla_description":"CVE-2016-5829 kernel: Heap buffer overflow in hiddev driver","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["kernel-0:2.6.32-642.6.1.el6","kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5829.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-4997","severity":"important","public_date":"2016-06-24T00:00:00Z","advisories":["RHSA-2016:1883","RHSA-2016:1847","RHSA-2016:1875"],"bugzilla":"1349722","bugzilla_description":"CVE-2016-4997 kernel: compat IPT_SO_SET_REPLACE setsockopt","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":["kernel-rt-1:3.10.0-327.rt56.197.el6rt","kernel-0:3.10.0-327.36.1.el7","kernel-rt-0:3.10.0-327.36.1.rt56.237.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4997.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2016-4998","severity":"moderate","public_date":"2016-06-24T00:00:00Z","advisories":["RHSA-2016:1883","RHSA-2016:1847","RHSA-2017:0036","RHSA-2016:1875"],"bugzilla":"1349886","bugzilla_description":"CVE-2016-4998 kernel: out of bounds reads when processing IPT_SO_SET_REPLACE setsockopt","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:C","CWE":"CWE-122","affected_packages":["kernel-0:2.6.32-642.13.1.el6","kernel-rt-1:3.10.0-327.rt56.197.el6rt","kernel-0:3.10.0-327.36.1.el7","kernel-rt-0:3.10.0-327.36.1.rt56.237.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4998.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2016-5828","severity":"moderate","public_date":"2016-06-24T00:00:00Z","advisories":["RHSA-2016:2574"],"bugzilla":"1349917","bugzilla_description":"CVE-2016-5828 Kernel: powerpc: tm: crash via exec system call on PPC","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5828.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-1237","severity":"important","public_date":"2016-06-24T00:00:00Z","advisories":[],"bugzilla":"1350845","bugzilla_description":"CVE-2016-1237 kernel: Missing check for permissions when setting ACL","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1237.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-4470","severity":"important","public_date":"2016-06-15T00:00:00Z","advisories":["RHSA-2016:2133","RHSA-2016:1541","RHSA-2016:2074","RHSA-2016:2076","RHSA-2016:1657","RHSA-2016:1539","RHSA-2016:2006","RHSA-2016:1532","RHSA-2016:2128"],"bugzilla":"1341716","bugzilla_description":"CVE-2016-4470 kernel: Uninitialized variable in request_key handling causes kernel crash in error handling path","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-253","affected_packages":["kernel-0:2.6.32-573.35.1.el6","kernel-0:2.6.32-358.75.1.el6","kernel-0:2.6.32-642.6.1.el6","kernel-0:3.10.0-229.40.1.el7","kernel-0:2.6.32-431.74.1.el6","kernel-0:3.10.0-327.28.2.el7","kernel-rt-1:3.10.0-327.rt56.194.el6rt","kernel-0:2.6.32-504.54.1.el6","kernel-rt-0:3.10.0-327.28.2.rt56.234.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4470.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-1583","severity":"important","public_date":"2016-06-10T00:00:00Z","advisories":["RHSA-2016:2124","RHSA-2017:2760","RHSA-2016:2766"],"bugzilla":"1344721","bugzilla_description":"CVE-2016-1583 kernel: Stack overflow via ecryptfs and /proc/$pid/environ","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["kernel-0:2.6.32-573.47.1.el6","kernel-0:2.6.18-416.el5","kernel-0:2.6.32-642.11.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1583.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-2061","severity":"moderate","public_date":"2016-06-06T00:00:00Z","advisories":[],"bugzilla":"1866185","bugzilla_description":"CVE-2016-2061 kernel: DoS in MSM V4L2 video driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2061.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-5243","severity":"low","public_date":"2016-06-03T00:00:00Z","advisories":[],"bugzilla":"1343335","bugzilla_description":"CVE-2016-5243 kernel: Information leak in tipc_nl_compat_link_dump","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5243.json"},{"CVE":"CVE-2016-5244","severity":"low","public_date":"2016-06-03T00:00:00Z","advisories":[],"bugzilla":"1343337","bugzilla_description":"CVE-2016-5244 kernel: Information leak in rds_inc_info_copy","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5244.json"},{"CVE":"CVE-2016-2143","severity":"moderate","public_date":"2016-06-01T00:00:00Z","advisories":["RHSA-2016:1539","RHSA-2016:2766"],"bugzilla":"1308908","bugzilla_description":"CVE-2016-2143 kernel: Fork of large process causes memory corruption","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["kernel-0:3.10.0-327.28.2.el7","kernel-0:2.6.32-642.11.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2143.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-7097","severity":"moderate","public_date":"2016-05-26T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077","RHSA-2017:0817"],"bugzilla":"1368938","bugzilla_description":"CVE-2016-7097 kernel: Setting a POSIX ACL via setxattr doesn't clear the setgid bit","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:2.6.32-696.el6","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7097.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2016-4440","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1337806","bugzilla_description":"CVE-2016-4440 Kernel: kvm: vmx: incorrect state update leading to MSR access","cvss_score":5.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:C","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4440.json"},{"CVE":"CVE-2016-3707","severity":"moderate","public_date":"2016-05-17T00:00:00Z","advisories":["RHSA-2016:1341","RHSA-2016:1301"],"bugzilla":"1327484","bugzilla_description":"CVE-2016-3707 kernel-rt: Sending SysRq command via ICMP echo request","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-312","affected_packages":["kernel-rt-0:3.10.0-327.22.2.rt56.230.el7_2","kernel-rt-1:3.10.0-327.rt56.190.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3707.json"},{"CVE":"CVE-2016-3713","severity":"moderate","public_date":"2016-05-16T00:00:00Z","advisories":[],"bugzilla":"1332139","bugzilla_description":"CVE-2016-3713 kernel: kvm: out-of-bounds access in set_var_mtrr_msr","cvss_score":5.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:C","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3713.json"},{"CVE":"CVE-2016-4951","severity":"moderate","public_date":"2016-05-16T00:00:00Z","advisories":[],"bugzilla":"1338625","bugzilla_description":"CVE-2016-4951 kernel: Null pointer dereference in tipc_nl_publ_dump","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4951.json"},{"CVE":"CVE-2016-9806","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1401502","bugzilla_description":"CVE-2016-9806 kernel: netlink: double-free in netlink_dump","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9806.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2014-8181","severity":"low","public_date":"2016-05-13T00:00:00Z","advisories":[],"bugzilla":"1335817","bugzilla_description":"CVE-2014-8181 kernel: scsi: do not fill dirty page content in the SG_IO buffer","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8181.json"},{"CVE":"CVE-2016-9754","severity":"important","public_date":"2016-05-13T00:00:00Z","advisories":[],"bugzilla":"1410370","bugzilla_description":"CVE-2016-9754 kernel: Integer overflow in ring_buffer_resize()","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9754.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2016-0758","severity":"important","public_date":"2016-05-12T00:00:00Z","advisories":["RHSA-2016:1033","RHSA-2016:1055","RHSA-2016:1051"],"bugzilla":"1300257","bugzilla_description":"CVE-2016-0758 kernel: tags with indefinite length can corrupt pointers in asn1_find_indefinite_length()","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-120","affected_packages":["kernel-rt-0:3.10.0-327.18.2.rt56.223.el7_2","kernel-rt-1:3.10.0-327.rt56.183.el6rt","kernel-0:3.10.0-327.18.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0758.json"},{"CVE":"CVE-2016-3070","severity":"low","public_date":"2016-05-10T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1308846","bugzilla_description":"CVE-2016-3070 kernel: Null pointer dereference in trace_writeback_dirty_page()","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3070.json"},{"CVE":"CVE-2016-4569","severity":"low","public_date":"2016-05-08T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1334643","bugzilla_description":"CVE-2016-4569 kernel: Information leak in Linux sound module in timer.c","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-665","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4569.json"},{"CVE":"CVE-2016-4580","severity":"low","public_date":"2016-05-08T00:00:00Z","advisories":[],"bugzilla":"1338756","bugzilla_description":"CVE-2016-4580 kernel: Information leak in x25 module","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4580.json"},{"CVE":"CVE-2016-4565","severity":"important","public_date":"2016-05-07T00:00:00Z","advisories":["RHSA-2016:1341","RHSA-2016:1640","RHSA-2016:1277","RHSA-2016:1617","RHSA-2016:1581","RHSA-2016:1657","RHSA-2016:1406","RHSA-2016:1814","RHSA-2016:1301","RHSA-2016:1489"],"bugzilla":"1310570","bugzilla_description":"CVE-2016-4565 kernel: infiniband: Unprivileged process can overwrite kernel memory using rdma_ucm.ko","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["kernel-0:2.6.32-504.51.1.el6","kernel-0:3.10.0-327.22.2.el7","kernel-0:3.10.0-229.40.1.el7","kernel-0:2.6.32-220.67.1.el6","kernel-0:2.6.32-642.3.1.el6","kernel-rt-0:3.10.0-327.22.2.rt56.230.el7_2","kernel-rt-1:3.10.0-327.rt56.190.el6rt","kernel-0:2.6.32-358.72.1.el6","kernel-0:2.6.32-431.73.2.el6","kernel-0:2.6.32-573.32.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4565.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-4568","severity":"low","public_date":"2016-05-07T00:00:00Z","advisories":[],"bugzilla":"1334316","bugzilla_description":"CVE-2016-4568 kernel: videobuf2-v412: Planes array amount not verified in buffer dequeueing","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4568.json"},{"CVE":"CVE-2016-4581","severity":"moderate","public_date":"2016-05-05T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1333712","bugzilla_description":"CVE-2016-4581 kernel: Slave being first propagated copy causes oops in propagate_mnt","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4581.json"},{"CVE":"CVE-2016-4913","severity":"low","public_date":"2016-05-05T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1337528","bugzilla_description":"CVE-2016-4913 kernel: Information leak when handling NM entries containing NUL","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4913.json"},{"CVE":"CVE-2016-4485","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1333309","bugzilla_description":"CVE-2016-4485 kernel: Information leak in llc module","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4485.json"},{"CVE":"CVE-2016-4486","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1333316","bugzilla_description":"CVE-2016-4486 kernel: Information leak in rtnetlink","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4486.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernelshark_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernelshark_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kernelshark_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kexec-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kexec-tools_security_api_results.json
new file mode 100644
index 0000000..efea367
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kexec-tools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-5759","severity":"moderate","public_date":"2016-07-22T00:00:00Z","advisories":[],"bugzilla":"1510921","bugzilla_description":"CVE-2016-5759 kexec-tools: mkdumprd script called \"dracut\" in the current working directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5759.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2015-0267","severity":"moderate","public_date":"2015-02-10T00:00:00Z","advisories":["RHSA-2015:0986"],"bugzilla":"1191575","bugzilla_description":"CVE-2015-0267 kexec-tools: insecure use of /tmp/*$$* filenames","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":["kexec-tools-0:2.0.7-19.el7_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0267.json"},{"CVE":"CVE-2011-3588","severity":"moderate","public_date":"2011-10-05T00:00:00Z","advisories":["RHSA-2011:1532","RHSA-2012:0152"],"bugzilla":"716439","bugzilla_description":"CVE-2011-3588 CVE-2011-3589 CVE-2011-3590 kexec-tools: Multiple security flaws by management of kdump core files and ramdisk images","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":["kexec-tools-0:2.0.0-209.el6","kexec-tools-0:1.102pre-154.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3588.json"},{"CVE":"CVE-2011-3589","severity":"moderate","public_date":"2011-10-05T00:00:00Z","advisories":["RHSA-2011:1532","RHSA-2012:0152"],"bugzilla":"716439","bugzilla_description":"CVE-2011-3588 CVE-2011-3589 CVE-2011-3590 kexec-tools: Multiple security flaws by management of kdump core files and ramdisk images","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":["kexec-tools-0:2.0.0-209.el6","kexec-tools-0:1.102pre-154.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3589.json"},{"CVE":"CVE-2011-3590","severity":"moderate","public_date":"2011-10-05T00:00:00Z","advisories":["RHSA-2011:1532","RHSA-2012:0152"],"bugzilla":"716439","bugzilla_description":"CVE-2011-3588 CVE-2011-3589 CVE-2011-3590 kexec-tools: Multiple security flaws by management of kdump core files and ramdisk images","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":["kexec-tools-0:2.0.0-209.el6","kexec-tools-0:1.102pre-154.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3590.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keybinder3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keybinder3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keybinder3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keybinder3-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keybinder3-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keybinder3-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keybinder3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keybinder3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keybinder3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keycloak-httpd-client-install_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keycloak-httpd-client-install_security_api_results.json
new file mode 100644
index 0000000..e151a9e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keycloak-httpd-client-install_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-15111","severity":"low","public_date":"2018-01-05T00:00:00Z","advisories":["RHSA-2019:2137"],"bugzilla":"1511623","bugzilla_description":"CVE-2017-15111 keycloak-httpd-client-install: unsafe /tmp log file in --log-file option in keycloak_cli.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["keycloak-httpd-client-install-0:0.8-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15111.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2017-15112","severity":"low","public_date":"2018-01-05T00:00:00Z","advisories":["RHSA-2019:2137"],"bugzilla":"1511626","bugzilla_description":"CVE-2017-15112 keycloak-httpd-client-install: unsafe use of -p/--admin-password on command line","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["keycloak-httpd-client-install-0:0.8-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15112.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keyutils-libs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keyutils-libs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keyutils-libs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keyutils-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keyutils-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keyutils-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keyutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keyutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/keyutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-base-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-base-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-base-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-battambang-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-battambang-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-battambang-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-bokor-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-bokor-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-bokor-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-handwritten-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-handwritten-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-handwritten-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-metal-chrieng-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-metal-chrieng-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-metal-chrieng-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-muol-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-muol-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-muol-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-siemreap-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-siemreap-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/khmeros-siemreap-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod-kvdo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod-kvdo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod-kvdo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod_security_api_results.json
new file mode 100644
index 0000000..6e026d8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kmod_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-0727","severity":"moderate","public_date":"2010-03-11T00:00:00Z","advisories":["RHSA-2010:0380","RHSA-2010:0291","RHSA-2010:0521","RHSA-2010:0178","RHSA-2010:0331","RHSA-2010:0330"],"bugzilla":"570863","bugzilla_description":"CVE-2010-0727 kernel: bug in GFS/GFS2 locking code leads to dos","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["GFS-kernel-0:2.6.9-85.2.el4_8.10","gfs-kmod-0:0.1.34-12.el5","kernel-0:2.6.18-194.el5","kernel-0:2.6.18-164.17.1.el5","gfs-kmod-0:0.1.34-2.el5_4.3","GFS-0:6.0.2.36-13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0727.json"},{"CVE":"CVE-2009-3995","severity":"moderate","public_date":"2010-02-05T00:00:00Z","advisories":["RHSA-2010:0720"],"bugzilla":"614643","bugzilla_description":"CVE-2009-3995 CVE-2009-3996 libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["mikmod-0:3.1.6-33.el4_8.1","mikmod-0:3.1.6-23.el3","mikmod-0:3.1.6-39.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3995.json"},{"CVE":"CVE-2009-3996","severity":"moderate","public_date":"2010-02-05T00:00:00Z","advisories":["RHSA-2010:0720"],"bugzilla":"614643","bugzilla_description":"CVE-2009-3995 CVE-2009-3996 libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["mikmod-0:3.1.6-33.el4_8.1","mikmod-0:3.1.6-23.el3","mikmod-0:3.1.6-39.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3996.json"},{"CVE":"CVE-2010-2546","severity":"moderate","public_date":"2010-02-05T00:00:00Z","advisories":[],"bugzilla":"614643","bugzilla_description":"CVE-2009-3995 CVE-2009-3996 libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2546.json"},{"CVE":"CVE-2010-2971","severity":"moderate","public_date":"2010-02-05T00:00:00Z","advisories":[],"bugzilla":"614643","bugzilla_description":"CVE-2009-3995 CVE-2009-3996 libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2971.json"},{"CVE":"CVE-2007-6720","severity":"low","public_date":"2008-01-19T00:00:00Z","advisories":["RHSA-2010:0720"],"bugzilla":"479829","bugzilla_description":"CVE-2007-6720 mikmod: crash or abort when loading/playing multiple files with different number of channels","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mikmod-0:3.1.6-33.el4_8.1","mikmod-0:3.1.6-23.el3","mikmod-0:3.1.6-39.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6720.json"},{"CVE":"CVE-2003-0427","severity":"low","public_date":"2003-06-13T00:00:00Z","advisories":["RHSA-2005:506"],"bugzilla":"1617026","bugzilla_description":"CVE-2003-0427 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mikmod-0:3.1.6-22.EL3","mikmod-0:3.1.6-32.EL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0427.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/koan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/koan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/koan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kpartx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kpartx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kpartx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kpatch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kpatch_security_api_results.json
new file mode 100644
index 0000000..d023be8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kpatch_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-pkinit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-pkinit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-pkinit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-server-ldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-server-ldap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-server-ldap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-workstation_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-workstation_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/krb5-workstation_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ksc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ksc_security_api_results.json
new file mode 100644
index 0000000..188f07c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ksc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-27560","severity":"low","public_date":"2020-10-18T00:00:00Z","advisories":[],"bugzilla":"1890687","bugzilla_description":"CVE-2020-27560 ImageMagick: division by zero in OptimizeLayerFrames function in MagickCore/layer.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27560.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2012-1610","severity":"moderate","public_date":"2020-07-31T00:00:00Z","advisories":[],"bugzilla":"1868354","bugzilla_description":"CVE-2012-1610 ImageMagick: integer overflow in the GetEXIFProperty function in magick/property.c could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1610.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12825","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:3654","RHBA-2020:3609","RHSA-2020:4072"],"bugzilla":"1835377","bugzilla_description":"CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["redhat-coreos-43.82.202009181853.0","libcroco-0:0.6.12-4.el8_2.1","libcroco-0:0.6.12-6.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2012-5656","severity":"low","public_date":"2012-12-17T00:00:00Z","advisories":[],"bugzilla":"888249","bugzilla_description":"CVE-2012-5656 inkscape: XXE via SVG rasterization","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5656.json"},{"CVE":"CVE-2012-6076","severity":"low","public_date":"2012-03-04T00:00:00Z","advisories":[],"bugzilla":"891331","bugzilla_description":"CVE-2012-6076 inkscape: Reads .eps files from /tmp instead of current working directory","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6076.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ksh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ksh_security_api_results.json
new file mode 100644
index 0000000..58d1a5e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ksh_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14868","severity":"important","public_date":"2019-12-13T00:00:00Z","advisories":["RHSA-2020:1332","RHSA-2020:1333","RHSA-2020:0431","RHSA-2020:2210","RHSA-2020:0515","RHSA-2020:0559","RHSA-2020:0568"],"bugzilla":"1757324","bugzilla_description":"CVE-2019-14868 ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["ksh-0:20120801-38.el6_10","ksh-0:20120801-140.el7_6","ksh-0:20120801-253.el8_0","ksh-0:20120801-36.el7_4","ksh-0:20120801-138.el7_5","ksh-0:20120801-253.el8_1","ksh-0:20120801-140.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14868.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kurdit-unikurd-web-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kurdit-unikurd-web-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kurdit-unikurd-web-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kyotocabinet-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kyotocabinet-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/kyotocabinet-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ladspa-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ladspa-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ladspa-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ladspa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ladspa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ladspa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lame-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lame-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lame-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lame-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lame-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lame-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-af_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-af_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-af_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-am_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-am_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-am_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-as_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-as_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-as_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ast_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ast_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ast_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-be_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-be_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-be_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-bg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-bg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-bg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-bn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-bn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-bn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-br_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-br_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-br_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-bs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-bs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-bs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-cs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-cs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-cs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-cy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-cy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-cy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-da_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-da_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-da_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-de_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-de_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-de_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-el_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-el_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-el_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-en_GB_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-en_GB_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-en_GB_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-en_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-en_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-en_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-es_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-es_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-es_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-et_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-et_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-et_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-eu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-eu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-eu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-fa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-fa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-fa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-fi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-fi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-fi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-fr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-fr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-fr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ga_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ga_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-gl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-gl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-gl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-gu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-gu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-gu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-he_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-he_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-he_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-hi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-hi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-hi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-hr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-hr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-hr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-hu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-hu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-hu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-id_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-id_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-id_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-is_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-is_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-is_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-it_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-it_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-it_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ja_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ja_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ja_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-kk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-kk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-kk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-kn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-kn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-kn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-lt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-lt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-lt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-lv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-lv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-lv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-mai_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-mai_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-mai_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-mk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-mk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-mk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-mr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-mr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-mr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ms_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ms_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ms_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ne_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ne_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ne_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nso_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nso_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-nso_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-or_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-or_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-or_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pt_BR_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pt_BR_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pt_BR_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-pt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ru_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ru_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ru_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-si_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-si_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-si_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sq_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sq_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-sv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-te_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-te_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-te_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-th_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-th_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-th_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-tn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-tn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-tn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-tr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-tr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-tr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-uk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-uk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-uk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ur_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ur_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ur_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ve_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ve_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-ve_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-vi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-vi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-vi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-xh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-xh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-xh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-zh_CN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-zh_CN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-zh_CN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-zh_TW_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-zh_TW_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-zh_TW_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-zu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-zu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langpacks-zu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langtable-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langtable-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langtable-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langtable_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langtable_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/langtable_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lapack_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lasso_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lasso_security_api_results.json
new file mode 100644
index 0000000..46b3d65
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lasso_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-1783","severity":"moderate","public_date":"2015-03-09T00:00:00Z","advisories":[],"bugzilla":"1199925","bugzilla_description":"CVE-2015-1783 lasso: use of uninitialized value leading to a crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/latex2html_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/latex2html_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/latex2html_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lato-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lato-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lato-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lcms2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lcms2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lcms2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lcms2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lcms2_security_api_results.json
new file mode 100644
index 0000000..6cf66da
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lcms2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-16435","severity":"moderate","public_date":"2018-08-13T00:00:00Z","advisories":["RHSA-2018:3004"],"bugzilla":"1628969","bugzilla_description":"CVE-2018-16435 lcms2: Integer overflow in AllocateDataSet() in cmscgats.c leading to heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["chromium-browser-0:70.0.3538.67-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16435.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10165","severity":"moderate","public_date":"2016-08-15T00:00:00Z","advisories":["RHSA-2016:2079","RHSA-2017:2999","RHSA-2017:3046","RHSA-2016:2658","RHSA-2017:3453","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268"],"bugzilla":"1367357","bugzilla_description":"CVE-2016-10165 lcms2: Out-of-bounds read in Type_MLU_Read()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.8.0-openjdk-1:1.8.0.111-0.b15.el6_8","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.15-1jpp.3.el6_9","java-1.8.0-openjdk-1:1.8.0.111-1.b15.el7_2","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el5_11","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.0.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.2.el7","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.7.0-openjdk-1:1.7.0.121-2.6.8.1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2013-7455","severity":"moderate","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1332518","bugzilla_description":"CVE-2013-7455 lcms2: double free on error recovering","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7455.json"},{"CVE":"CVE-2015-4840","severity":"moderate","public_date":"2015-10-20T00:00:00Z","advisories":["RHSA-2015:2507","RHSA-2016:1430","RHSA-2015:1926","RHSA-2015:2509","RHSA-2015:1927","RHSA-2015:1919","RHSA-2015:1920","RHSA-2015:1921","RHSA-2015:2506"],"bugzilla":"1273338","bugzilla_description":"CVE-2015-4840 OpenJDK: OOB access in CMS code (2D, 8086092)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.7.0-openjdk-1:1.7.0.91-2.6.2.2.el6_7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el7_1","java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7","java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7","java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5","java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1","java-1.7.0-openjdk-1:1.7.0.91-2.6.2.1.el5_11","java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4840.json"},{"CVE":"CVE-2013-4160","severity":"moderate","public_date":"2013-06-20T00:00:00Z","advisories":[],"bugzilla":"985137","bugzilla_description":"CVE-2013-4160 Little CMS: multiple potential flaws","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4160.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldapjdk-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldapjdk-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldapjdk-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldapjdk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldapjdk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldapjdk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldb-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldb-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldb-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldns-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldns-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldns-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldns_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldns_security_api_results.json
new file mode 100644
index 0000000..a1f06f1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ldns_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-1000232","severity":"moderate","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1510993","bugzilla_description":"CVE-2017-1000232 ldns: Memory corruption in ldns_str2rdf_long_str","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000232.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-1000231","severity":"moderate","public_date":"2017-04-25T00:00:00Z","advisories":[],"bugzilla":"1510985","bugzilla_description":"CVE-2017-1000231 ldns: Memory corruption in ldns_rr_new_frm_fp_l","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2014-3209","severity":"low","public_date":"2014-05-03T00:00:00Z","advisories":[],"bugzilla":"1093943","bugzilla_description":"CVE-2014-3209 ldns: ldns-keygen generates keys with world readable permissions","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-732->CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3209.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ledmon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ledmon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ledmon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lensfun-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lensfun-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lensfun-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lensfun_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lensfun_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lensfun_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/leptonica-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/leptonica-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/leptonica-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/leptonica_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/leptonica_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/leptonica_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/less_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/less_security_api_results.json
new file mode 100644
index 0000000..0357c88
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/less_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-9488","severity":"low","public_date":"2015-03-10T00:00:00Z","advisories":[],"bugzilla":"1201309","bugzilla_description":"CVE-2014-9488 less: out of bounds read access in is_utf8_well_formed()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9488.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2005-0086","severity":"important","public_date":"2005-01-19T00:00:00Z","advisories":["RHSA-2005:068"],"bugzilla":"1617448","bugzilla_description":"CVE-2005-0086 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["less-0:378-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0086.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lftp-scripts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lftp-scripts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lftp-scripts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lftp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lftp_security_api_results.json
new file mode 100644
index 0000000..4fe961f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lftp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10916","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2020:1045"],"bugzilla":"1610349","bugzilla_description":"CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["lftp-0:4.4.8-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10916.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2010-2251","severity":"moderate","public_date":"2010-05-17T00:00:00Z","advisories":["RHSA-2010:0585"],"bugzilla":"591580","bugzilla_description":"CVE-2010-2251 lftp: multiple HTTP client download filename vulnerability [OCERT 2010-001]","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["lftp-0:3.7.11-4.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2251.json"},{"CVE":"CVE-2007-2348","severity":"low","public_date":"2007-01-09T00:00:00Z","advisories":["RHSA-2009:1278"],"bugzilla":"236238","bugzilla_description":"CVE-2007-2348 lftp mirror --script does not escape names and targets of symbolic links","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["lftp-0:3.7.11-4.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2348.json"},{"CVE":"CVE-2003-0963","severity":"moderate","public_date":"2003-12-13T00:00:00Z","advisories":["RHSA-2003:403","RHSA-2003:404"],"bugzilla":"1617106","bugzilla_description":"CVE-2003-0963 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["lftp-0:2.6.3-5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0963.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libEMF-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libEMF-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libEMF-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libEMF_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libEMF_security_api_results.json
new file mode 100644
index 0000000..be34eb4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libEMF_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13999","severity":"low","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1850254","bugzilla_description":"CVE-2020-13999 libemf: Integer overflow which could result in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13999.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-11866","severity":"moderate","public_date":"2020-05-11T00:00:00Z","advisories":[],"bugzilla":"1835793","bugzilla_description":"CVE-2020-11866 libEMF: allows a use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11866.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-11863","severity":"moderate","public_date":"2020-05-11T00:00:00Z","advisories":[],"bugzilla":"1835797","bugzilla_description":"CVE-2020-11863 libEMF: allows denial of service (issue 1 of 2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11863.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-11864","severity":"moderate","public_date":"2020-05-11T00:00:00Z","advisories":[],"bugzilla":"1835802","bugzilla_description":"CVE-2020-11864 libEMF: allows denial of service (issue 2 of 2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11864.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-11865","severity":"moderate","public_date":"2020-05-11T00:00:00Z","advisories":[],"bugzilla":"1835806","bugzilla_description":"CVE-2020-11865 libEMF: allows out-of-bounds memory access","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11865.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libGLEW_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libGLEW_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libGLEW_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libICE-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libICE-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libICE-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libICE_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libICE_security_api_results.json
new file mode 100644
index 0000000..2cc80c6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libICE_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-2626","severity":"low","public_date":"2017-02-28T00:00:00Z","advisories":["RHSA-2017:1865"],"bugzilla":"1424992","bugzilla_description":"CVE-2017-2626 libICE: weak entropy usage in session keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":["libICE-0:1.0.9-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2626.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L","cvss3_score":"5.2"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libIDL-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libIDL-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libIDL-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libIDL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libIDL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libIDL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libSM-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libSM-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libSM-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libSM_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libSM_security_api_results.json
new file mode 100644
index 0000000..16b4ead
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libSM_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-2891","severity":"moderate","public_date":"2010-10-20T00:00:00Z","advisories":[],"bugzilla":"647520","bugzilla_description":"CVE-2010-2891 libsmi: buffer overflow in smiGetNode can lead to arbitrary code execution","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2891.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11-xcb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11-xcb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11-xcb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11_security_api_results.json
new file mode 100644
index 0000000..c7aa5d0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libX11_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14363","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872473","bugzilla_description":"CVE-2020-14363 libX11: integer overflow leads to double free in locale handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14363.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-14344","severity":"moderate","public_date":"2020-07-31T00:00:00Z","advisories":[],"bugzilla":"1862255","bugzilla_description":"CVE-2020-14344 libX11: Heap overflow in the X input method client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14344.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-14598","severity":"moderate","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623238","bugzilla_description":"CVE-2018-14598 libX11: Crash on invalid reply in XListExtensions in ListExt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["libX11-0:1.6.7-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14598.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14600","severity":"moderate","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623242","bugzilla_description":"CVE-2018-14600 libX11: Out of Bounds write in XListExtensions in ListExt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libX11-0:1.6.7-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14600.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-14599","severity":"moderate","public_date":"2018-08-21T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623250","bugzilla_description":"CVE-2018-14599 libX11: Off-by-one error in XListExtensions in ListExt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libX11-0:1.6.7-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14599.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-7942","severity":"low","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381859","bugzilla_description":"CVE-2016-7942 libX11: Insufficient validation of server responses in XGetImage()","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7942.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-7943","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381861","bugzilla_description":"CVE-2016-7943 libX11: Insufficient validation of server responses in FontNames","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7943.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2013-1981","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959040","bugzilla_description":"CVE-2013-1981 libX11: Multiple integer overflows leading to heap-based buffer-overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libX11-0:1.6.0-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1981.json"},{"CVE":"CVE-2013-2004","severity":"low","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959112","bugzilla_description":"CVE-2013-2004 libX11: unbounded recursion leading to stack-overflow","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-835->CWE-121","affected_packages":["libX11-0:1.6.0-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2004.json"},{"CVE":"CVE-2013-1997","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960345","bugzilla_description":"CVE-2013-1997 libX11: Multiple Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libX11-0:1.6.0-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1997.json"},{"CVE":"CVE-2013-7439","severity":"low","public_date":"2013-03-09T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"1209943","bugzilla_description":"CVE-2013-7439 libX11: buffer overflow in MakeBigReq macro","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:N/A:P","CWE":"CWE-119","affected_packages":["libX11-0:1.6.0-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7439.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXNVCtrl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXNVCtrl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXNVCtrl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXNVCtrl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXNVCtrl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXNVCtrl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXScrnSaver-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXScrnSaver-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXScrnSaver-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXScrnSaver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXScrnSaver_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXScrnSaver_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXau-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXau-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXau-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXau_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXau_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXau_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXaw-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXaw-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXaw-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXaw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXaw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXaw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcomposite-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcomposite-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcomposite-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcomposite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcomposite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcomposite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcursor-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcursor-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcursor-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcursor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcursor_security_api_results.json
new file mode 100644
index 0000000..a640c21
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXcursor_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-9262","severity":"low","public_date":"2018-08-01T00:00:00Z","advisories":["RHSA-2018:3059"],"bugzilla":"1611599","bugzilla_description":"CVE-2015-9262 libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libXcursor-0:1.1.15-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9262.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-16612","severity":"moderate","public_date":"2017-11-25T00:00:00Z","advisories":[],"bugzilla":"1518475","bugzilla_description":"CVE-2017-16612 libXcursor: file.c: heap-based buffer overflow when reading/creating images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16612.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2013-2003","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959077","bugzilla_description":"CVE-2013-2003 libXcursor: Integer overflow leading to heap-based buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXcursor-0:1.1.14-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2003.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdamage-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdamage-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdamage-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdamage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdamage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdamage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdmcp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdmcp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdmcp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdmcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdmcp_security_api_results.json
new file mode 100644
index 0000000..ba89cc6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXdmcp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-2625","severity":"moderate","public_date":"2017-02-28T00:00:00Z","advisories":["RHSA-2017:1865"],"bugzilla":"1424987","bugzilla_description":"CVE-2017-2625 libXdmcp: weak entropy usage for session keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":["libXdmcp-0:1.1.2-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2625.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXext-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXext-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXext-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXext_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXext_security_api_results.json
new file mode 100644
index 0000000..2fa6a81
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXext_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-1982","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959046","bugzilla_description":"CVE-2013-1982 libXext: Multiple integer overflows leading to heap-based buffer-overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXext-0:1.3.2-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1982.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfixes-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfixes-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfixes-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfixes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfixes_security_api_results.json
new file mode 100644
index 0000000..2a3da25
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfixes_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7944","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381865","bugzilla_description":"CVE-2016-7944 libXfixes: Insufficient validation of server responses results in Integer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7944.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2013-1983","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959048","bugzilla_description":"CVE-2013-1983 libXfixes: Integer overflow leading to heap-based buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXfixes-0:5.0.1-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1983.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfont2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfont2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfont2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfont2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfont2_security_api_results.json
new file mode 100644
index 0000000..f29c7b6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXfont2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-16611","severity":"low","public_date":"2017-11-25T00:00:00Z","advisories":[],"bugzilla":"1519082","bugzilla_description":"CVE-2017-16611 libXfont: User can trigger arbitrary file read by X server causing a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16611.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2017-13720","severity":"low","public_date":"2017-10-04T00:00:00Z","advisories":[],"bugzilla":"1500690","bugzilla_description":"CVE-2017-13720 libXfont: Insufficient input validation in fontdir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13720.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-13722","severity":"low","public_date":"2017-10-04T00:00:00Z","advisories":[],"bugzilla":"1500693","bugzilla_description":"CVE-2017-13722 libXfont: Insufficient input validation in pcfread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13722.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXft-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXft-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXft-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXft_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXft_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXft_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXi_security_api_results.json
new file mode 100644
index 0000000..9b139a3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7945","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381868","bugzilla_description":"CVE-2016-7945 libXi: Insufficient validation of server responses result in Integer overflows","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7945.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-7946","severity":"low","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381869","bugzilla_description":"CVE-2016-7946 libXi: Insufficient validation of server responses result in various data mishandlings","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7946.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2013-1984","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959049","bugzilla_description":"CVE-2013-1984 libXi: Multiple integer overflows leading to heap-based buffer-overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXi-0:1.7.2-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1984.json"},{"CVE":"CVE-2013-1985","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959056","bugzilla_description":"CVE-2013-1985 libXinerama: Integer overflow leading to heap-based buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXinerama-0:1.1.3-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1985.json"},{"CVE":"CVE-2013-1998","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960346","bugzilla_description":"CVE-2013-1998 libXi: Multiple Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXi-0:1.7.2-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1998.json"},{"CVE":"CVE-2013-1995","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960357","bugzilla_description":"CVE-2013-1995 libXi: Sign extension issues resulting in heap-based buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-252->CWE-122","affected_packages":["libXi-0:1.7.2-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1995.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXinerama-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXinerama-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXinerama-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXinerama_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXinerama_security_api_results.json
new file mode 100644
index 0000000..b356121
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXinerama_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-1985","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959056","bugzilla_description":"CVE-2013-1985 libXinerama: Integer overflow leading to heap-based buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXinerama-0:1.1.3-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1985.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXmu-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXmu-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXmu-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXmu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXmu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXmu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXp_security_api_results.json
new file mode 100644
index 0000000..0d07171
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10164","severity":"moderate","public_date":"2016-12-12T00:00:00Z","advisories":["RHSA-2017:1865"],"bugzilla":"1416410","bugzilla_description":"CVE-2016-10164 libXpm: Out-of-bounds write in XPM extension parsing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libXpm-0:3.5.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2013-2062","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960362","bugzilla_description":"CVE-2013-2062 libXp: Integer overflow leading to heap-based buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXp-0:1.0.2-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2062.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXpm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXpm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXpm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXpm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXpm_security_api_results.json
new file mode 100644
index 0000000..f146d81
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXpm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10164","severity":"moderate","public_date":"2016-12-12T00:00:00Z","advisories":["RHSA-2017:1865"],"bugzilla":"1416410","bugzilla_description":"CVE-2016-10164 libXpm: Out-of-bounds write in XPM extension parsing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libXpm-0:3.5.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"5.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrandr-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrandr-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrandr-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrandr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrandr_security_api_results.json
new file mode 100644
index 0000000..77058ab
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrandr_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7947","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381872","bugzilla_description":"CVE-2016-7947 libXrandr: Insufficient validation of server responses result in Integer overflows","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7947.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-7948","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381873","bugzilla_description":"CVE-2016-7948 libXrandr: Insufficient validation of server responses result in various data mishandlings","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7948.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2013-1986","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959059","bugzilla_description":"CVE-2013-1986 libXrandr: Multiple integer overflows leading to heap-based bufer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXrandr-0:1.4.1-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1986.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrender-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrender-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrender-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrender_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrender_security_api_results.json
new file mode 100644
index 0000000..293f093
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXrender_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7949","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381927","bugzilla_description":"CVE-2016-7949 libXrender: Insufficient validation of server responses results in overflow of previously reserved memory","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7949.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-7950","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381928","bugzilla_description":"CVE-2016-7950 libXrender: Insufficient validation of server responses results out-of-bounds write in XRenderQueryFilters","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7950.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2013-1987","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959061","bugzilla_description":"CVE-2013-1987 libXrender: Multiple integer overflows leading to heap-based bufer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXrender-0:0.9.8-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1987.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXres-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXres-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXres-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXres_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXres_security_api_results.json
new file mode 100644
index 0000000..03f6d22
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXres_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-1988","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959066","bugzilla_description":"CVE-2013-1988 libXRes: Multiple integer overflows leading to heap-based bufer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXres-0:1.0.7-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1988.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXt_security_api_results.json
new file mode 100644
index 0000000..02da272
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7951","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381919","bugzilla_description":"CVE-2016-7951 libXtst: Insufficient validation of server responses result in Integer overflows","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7951.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-7952","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381922","bugzilla_description":"CVE-2016-7952 libXtst: Insufficient validation of server responses result in various data mishandlings","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7952.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2013-2005","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959108","bugzilla_description":"CVE-2013-2005 libXt: Memory corruption due to unchecked use of unchecked function pointers","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-392->CWE-456","affected_packages":["libXt-0:1.1.4-6.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2005.json"},{"CVE":"CVE-2013-2002","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960352","bugzilla_description":"CVE-2013-2002 libXt: Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXt-0:1.1.4-6.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2002.json"},{"CVE":"CVE-2013-2063","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960366","bugzilla_description":"CVE-2013-2063 libXtst:Integer overflow leading to heap-based buffer overlow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXtst-0:1.2.2-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2063.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXtst-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXtst-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXtst-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXtst_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXtst_security_api_results.json
new file mode 100644
index 0000000..0dc4915
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXtst_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7951","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381919","bugzilla_description":"CVE-2016-7951 libXtst: Insufficient validation of server responses result in Integer overflows","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7951.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-7952","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381922","bugzilla_description":"CVE-2016-7952 libXtst: Insufficient validation of server responses result in various data mishandlings","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7952.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2013-2063","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960366","bugzilla_description":"CVE-2013-2063 libXtst:Integer overflow leading to heap-based buffer overlow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXtst-0:1.2.2-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2063.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXv-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXv-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXv-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXvMC-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXvMC-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXvMC-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXvMC_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXvMC_security_api_results.json
new file mode 100644
index 0000000..e8c0113
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXvMC_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7953","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381933","bugzilla_description":"CVE-2016-7953 libXvMC: Insufficient validation of server responses results in buffer underflow","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7953.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2013-1990","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959070","bugzilla_description":"CVE-2013-1990 libXvMC: Multiple integer overflows leading to heap-based buffer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXvMC-0:1.0.8-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1990.json"},{"CVE":"CVE-2013-1999","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960347","bugzilla_description":"CVE-2013-1999 libXvMC: Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXvMC-0:1.0.8-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1999.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXv_security_api_results.json
new file mode 100644
index 0000000..8a9b5fa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXv_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-5407","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381931","bugzilla_description":"CVE-2016-5407 libXv: Insufficient validation of server responses results in out-of bounds accesses","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-7953","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381933","bugzilla_description":"CVE-2016-7953 libXvMC: Insufficient validation of server responses results in buffer underflow","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7953.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2013-1989","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959068","bugzilla_description":"CVE-2013-1989 libXv: Multiple integer overflows leading to heap-based bufer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXv-0:1.0.9-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1989.json"},{"CVE":"CVE-2013-1990","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959070","bugzilla_description":"CVE-2013-1990 libXvMC: Multiple integer overflows leading to heap-based buffer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXvMC-0:1.0.8-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1990.json"},{"CVE":"CVE-2013-1999","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960347","bugzilla_description":"CVE-2013-1999 libXvMC: Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXvMC-0:1.0.8-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1999.json"},{"CVE":"CVE-2013-2066","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960369","bugzilla_description":"CVE-2013-2066 libXv: Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXv-0:1.0.9-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2066.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86dga-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86dga-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86dga-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86dga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86dga_security_api_results.json
new file mode 100644
index 0000000..ca382cb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86dga_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-1991","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959072","bugzilla_description":"CVE-2013-1991 libXxf86dga: Multiple integer overflows leading to heap-based buffer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXxf86dga-0:1.1.4-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1991.json"},{"CVE":"CVE-2013-2000","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960349","bugzilla_description":"CVE-2013-2000 libXxf86dga: Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXxf86dga-0:1.1.4-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2000.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86misc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86misc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86misc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86misc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86misc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86misc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86vm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86vm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86vm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86vm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86vm_security_api_results.json
new file mode 100644
index 0000000..3b8efe7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libXxf86vm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-2001","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960350","bugzilla_description":"CVE-2013-2001 libXxf86vm: Multiple Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXxf86vm-0:1.1.3-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2001.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liba52_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liba52_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liba52_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libabw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libabw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libabw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libacl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libacl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libacl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libacl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libacl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libacl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaec-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaec-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaec-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaec_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaec_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaec_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaio-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaio-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaio-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libaio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libao-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libao-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libao-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libao_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libao_security_api_results.json
new file mode 100644
index 0000000..eaa356f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libao_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-11548","severity":"low","public_date":"2017-08-07T00:00:00Z","advisories":[],"bugzilla":"1478946","bugzilla_description":"CVE-2017-11548 libao: Invalid memory allocation in _tokenize_matrix function in audio_out.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11548.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappindicator-gtk3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappindicator-gtk3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappindicator-gtk3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappindicator-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappindicator-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappindicator-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappstream-glib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappstream-glib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappstream-glib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappstream-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappstream-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libappstream-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libarchive-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libarchive-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libarchive-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libarchive_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libarchive_security_api_results.json
new file mode 100644
index 0000000..58247c4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libarchive_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9308","severity":"moderate","public_date":"2020-02-02T00:00:00Z","advisories":[],"bugzilla":"1805963","bugzilla_description":"CVE-2020-9308 libarchive: attempts to unpack a RAR5 file with an invalid or corrupted header leads to a SIGSEGV","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9308.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-21674","severity":"moderate","public_date":"2019-12-28T00:00:00Z","advisories":[],"bugzilla":"1888786","bugzilla_description":"CVE-2020-21674 libarchive: heap-based buffer overflow in archive_string_append_from_wcs function in archive_string.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-21674.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20509","severity":"moderate","public_date":"2019-11-26T00:00:00Z","advisories":[],"bugzilla":"1812633","bugzilla_description":"CVE-2019-20509 libarchive: heap-based buffer overflow in archive_read_support_format_lha.c due to insufficient validation of UTF-16 input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20509.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-19221","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":[],"bugzilla":"1801635","bugzilla_description":"CVE-2019-19221 libarchive: out-of-bounds read in archive_wstring_append_from_mbs in archive_string.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19221.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-18408","severity":"important","public_date":"2019-05-10T00:00:00Z","advisories":["RHSA-2020:0271","RHSA-2020:0203","RHSA-2020:0246","RHBA-2020:0395"],"bugzilla":"1769979","bugzilla_description":"CVE-2019-18408 libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-8.el8_1","libarchive-0:3.1.2-14.el7_7","libarchive-0:3.3.2-4.el8_0","redhat-coreos-42.81.20200203.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18408.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11463","severity":"low","public_date":"2019-03-28T00:00:00Z","advisories":[],"bugzilla":"1702204","bugzilla_description":"CVE-2019-11463 libarchive: memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c causing denial of service via crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11463.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-1000020","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1672888","bugzilla_description":"CVE-2019-1000020 libarchive: Infinite recursion in archive_read_support_format_iso9660.c resulting in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1000020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-1000019","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1672892","bugzilla_description":"CVE-2019-1000019 libarchive: Out of bounds read in archive_read_support_format_7zip.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1000019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000877","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1663887","bugzilla_description":"CVE-2018-1000877 libarchive: Double free in RAR decoder resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000877.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1000878","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1663889","bugzilla_description":"CVE-2018-1000878 libarchive: Use after free in RAR decoder resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000878.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1000879","severity":"low","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1663890","bugzilla_description":"CVE-2018-1000879 libarchive: NULL pointer dereference in ACL parser resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000879.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000880","severity":"low","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1663892","bugzilla_description":"CVE-2018-1000880 libarchive: Improper input validation in WARC parser resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000880.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14503","severity":"low","public_date":"2017-09-16T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1494449","bugzilla_description":"CVE-2017-14503 libarchive: Out-of-bounds read in lha_read_data_none","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14503.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14501","severity":"low","public_date":"2017-09-16T00:00:00Z","advisories":[],"bugzilla":"1494460","bugzilla_description":"CVE-2017-14501 libarchive: Out-of-bounds read in parse_file_info","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14501.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14502","severity":"moderate","public_date":"2017-09-16T00:00:00Z","advisories":[],"bugzilla":"1494463","bugzilla_description":"CVE-2017-14502 libarchive: Off-by-one error in the read_header function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14502.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-14166","severity":"low","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1489852","bugzilla_description":"CVE-2017-14166 libarchive: Heap-based buffer over-read in the atol8 function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14166.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5601","severity":"moderate","public_date":"2017-01-27T00:00:00Z","advisories":[],"bugzilla":"1417912","bugzilla_description":"CVE-2017-5601 libarchive: Out of bounds read in lha_read_file_header_1() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5601.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-10209","severity":"low","public_date":"2016-12-12T00:00:00Z","advisories":[],"bugzilla":"1439703","bugzilla_description":"CVE-2016-10209 libarchive: NULL pointer dereference in archive_wstring_append_from_mbs function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10349","severity":"low","public_date":"2016-12-06T00:00:00Z","advisories":[],"bugzilla":"1449528","bugzilla_description":"CVE-2016-10349 libarchive: Heap-based buffer over-read in the archive_le32dec function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10349.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10350","severity":"low","public_date":"2016-12-06T00:00:00Z","advisories":[],"bugzilla":"1449530","bugzilla_description":"CVE-2016-10350 libarchive: Heap-based buffer over-read in the archive_read_format_cab_read_header function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10350.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8688","severity":"low","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1377923","bugzilla_description":"CVE-2016-8688 libarchive: heap based buffer overflow in detect_form (archive_read_support_format_mtree.c)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-131->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8688.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-8689","severity":"low","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1377925","bugzilla_description":"CVE-2016-8689 libarchive: heap based buffer overflow in read_header (archive_read_support_format_7zip.c)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-228->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8689.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-8687","severity":"low","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1377926","bugzilla_description":"CVE-2016-8687 libarchive: stack based buffer overflow in bsdtar_expand_char (util.c)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-131->CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8687.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5418","severity":"important","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844","RHSA-2016:1852","RHSA-2016:1853"],"bugzilla":"1362601","bugzilla_description":"CVE-2016-5418 libarchive: Archive Entry with type 1 (hardlink), but has a non-zero data size file overwrite","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-20->CWE-22","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2","atomic-openshift-0:3.1.1.7-1.git.0.65f396b.el7aos"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5418.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5844","severity":"low","public_date":"2016-06-24T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844"],"bugzilla":"1350280","bugzilla_description":"CVE-2016-5844 libarchive: undefined behaviour (integer overflow) in iso parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5844.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-4300","severity":"moderate","public_date":"2016-06-19T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348439","bugzilla_description":"CVE-2016-4300 libarchive: Heap buffer overflow vulnerability in the 7zip read_SubStreamsInfo","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4300.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L","cvss3_score":"8.4"},{"CVE":"CVE-2016-4301","severity":"low","public_date":"2016-06-19T00:00:00Z","advisories":[],"bugzilla":"1348441","bugzilla_description":"CVE-2016-4301 libarchive: Stack buffer overflow in the mtree parse_device","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4301.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"7.7"},{"CVE":"CVE-2016-4302","severity":"moderate","public_date":"2016-06-19T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348444","bugzilla_description":"CVE-2016-4302 libarchive: Heap buffer overflow in the Rar decompression functionality","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"7.7"},{"CVE":"CVE-2015-8916","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348412","bugzilla_description":"CVE-2015-8916 libarchive: NULL pointer access in RAR parser through bsdtar","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-228->CWE-476","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8916.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8917","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348413","bugzilla_description":"CVE-2015-8917 libarchive: NULL pointer access in CAB parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-228->CWE-476","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8917.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8919","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348414","bugzilla_description":"CVE-2015-8919 libarchive: Heap out of bounds read in LHA/LZH parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8919.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8920","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844"],"bugzilla":"1348416","bugzilla_description":"CVE-2015-8920 libarchive: Stack out of bounds read in ar parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8920.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-8922","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348419","bugzilla_description":"CVE-2015-8922 libarchive: NULL pointer access in 7z parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-228->CWE-476","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2015-8924","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348421","bugzilla_description":"CVE-2015-8924 libarchive: Heap out of bounds read in TAR parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8924.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2015-8925","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348423","bugzilla_description":"CVE-2015-8925 libarchive: Unclear invalid memory read in mtree parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-8926","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348424","bugzilla_description":"CVE-2015-8926 libarchive: NULL pointer access in RAR parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8926.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8927","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":[],"bugzilla":"1348426","bugzilla_description":"CVE-2015-8927 libarchive: Heap out of bounds read when reading password for malformed ZIP","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-228->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8927.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"3.0"},{"CVE":"CVE-2015-8928","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348429","bugzilla_description":"CVE-2015-8928 libarchive: Heap out of bounds read in mtree parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-8918","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":[],"bugzilla":"1348770","bugzilla_description":"CVE-2015-8918 libarchive: Overlapping memcpy in CAB parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-228","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8918.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8929","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":[],"bugzilla":"1348771","bugzilla_description":"CVE-2015-8929 libarchive: Memory leak in TAR parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8929.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2015-8921","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844"],"bugzilla":"1348772","bugzilla_description":"CVE-2015-8921 libarchive: Global out of bounds read in mtree parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8921.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-8923","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348773","bugzilla_description":"CVE-2015-8923 libarchive: Unclear crashes in ZIP parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-190->CWE-125","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2015-8931","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1348779","bugzilla_description":"CVE-2015-8931 libarchive: Undefined behavior (signed integer overflow) in mtree parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8931.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8932","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844"],"bugzilla":"1348780","bugzilla_description":"CVE-2015-8932 libarchive: Undefined behavior / invalid shiftleft in TAR parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-682","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8932.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2015-8933","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":[],"bugzilla":"1348781","bugzilla_description":"CVE-2015-8933 libarchive: Undefined behavior / signed integer overflow in TAR parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2015-8930","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1349204","bugzilla_description":"CVE-2015-8930 libarchive: Endless loop in ISO parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-228->CWE-835","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8930.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8934","severity":"low","public_date":"2016-06-17T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1349229","bugzilla_description":"CVE-2015-8934 libarchive: out of bounds heap read in RAR parser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-228->CWE-125","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8934.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-6250","severity":"low","public_date":"2016-05-29T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1347085","bugzilla_description":"CVE-2016-6250 libarchive: Buffer overflow when writing large iso9660 containers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6250.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L","cvss3_score":"7.9"},{"CVE":"CVE-2016-4809","severity":"low","public_date":"2016-05-12T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844"],"bugzilla":"1347084","bugzilla_description":"CVE-2016-4809 libarchive: Memory allocate error with symbolic links in cpio archives","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4809.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-1541","severity":"moderate","public_date":"2016-05-02T00:00:00Z","advisories":["RHSA-2016:1844"],"bugzilla":"1334211","bugzilla_description":"CVE-2016-1541 libarchive: zip_read_mac_metadata() heap-based buffer overflow","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1541.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L","cvss3_score":"8.4"},{"CVE":"CVE-2016-7166","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1850","RHSA-2016:1844"],"bugzilla":"1347086","bugzilla_description":"CVE-2016-7166 libarchive: Denial of service using a crafted gzip file","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["libarchive-0:2.8.3-7.el6_8","libarchive-0:3.1.2-10.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7166.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2015-8915","severity":"low","public_date":"2015-04-28T00:00:00Z","advisories":[],"bugzilla":"1216891","bugzilla_description":"CVE-2015-8915 libarchive: crash via malformed cpio archive","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8915.json"},{"CVE":"CVE-2015-2304","severity":"low","public_date":"2015-01-16T00:00:00Z","advisories":[],"bugzilla":"1192482","bugzilla_description":"CVE-2015-2304 libarchive: directory traversal in bsdcpio","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2304.json"},{"CVE":"CVE-2013-0211","severity":"low","public_date":"2013-03-25T00:00:00Z","advisories":[],"bugzilla":"902998","bugzilla_description":"CVE-2013-0211 libarchive: read buffer overflow on 64-bit systems","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0211.json"},{"CVE":"CVE-2011-2895","severity":"important","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2011:1154","RHSA-2011:1155","RHSA-2011:1161","RHSA-2011:1834"],"bugzilla":"727624","bugzilla_description":"CVE-2011-2895 BSD compress LZW decoder buffer overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libXfont-0:1.2.2-1.0.3.el5_6","libXfont-0:1.4.1-2.el6_1","freetype-0:2.1.9-19.el4","xorg-x11-0:6.8.2-1.EL.69","libXfont-0:1.2.2-1.0.4.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2895.json"},{"CVE":"CVE-2010-4666","severity":"moderate","public_date":"2010-12-30T00:00:00Z","advisories":[],"bugzilla":"705849","bugzilla_description":"CVE-2010-4666 CVE-2011-1777 CVE-2011-1778 CVE-2011-1779 Libarchive multiple security issues","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4666.json"},{"CVE":"CVE-2011-1777","severity":"moderate","public_date":"2010-12-30T00:00:00Z","advisories":["RHSA-2011:1507"],"bugzilla":"705849","bugzilla_description":"CVE-2010-4666 CVE-2011-1777 CVE-2011-1778 CVE-2011-1779 Libarchive multiple security issues","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libarchive-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1777.json"},{"CVE":"CVE-2011-1778","severity":"moderate","public_date":"2010-12-30T00:00:00Z","advisories":["RHSA-2011:1507"],"bugzilla":"705849","bugzilla_description":"CVE-2010-4666 CVE-2011-1777 CVE-2011-1778 CVE-2011-1779 Libarchive multiple security issues","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libarchive-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1778.json"},{"CVE":"CVE-2011-1779","severity":"moderate","public_date":"2010-12-30T00:00:00Z","advisories":[],"bugzilla":"705849","bugzilla_description":"CVE-2010-4666 CVE-2011-1777 CVE-2011-1778 CVE-2011-1779 Libarchive multiple security issues","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1779.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libasan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libasan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libasan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libassuan-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libassuan-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libassuan-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libassuan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libassuan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libassuan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libasyncns-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libasyncns-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libasyncns-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libasyncns_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libasyncns_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libasyncns_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatasmart-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatasmart-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatasmart-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatasmart_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatasmart_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatasmart_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic_ops-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic_ops-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic_ops-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic_ops_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic_ops_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic_ops_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libatomic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libattr-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libattr-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libattr-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libattr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libattr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libattr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libavc1394_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libavc1394_security_api_results.json
new file mode 100644
index 0000000..6d43d27
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libavc1394_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9335","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":[],"bugzilla":"1824428","bugzilla_description":"CVE-2019-9335 libavc: information disclosure due to uninitialized data (A-112328051)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9335.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9336","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":[],"bugzilla":"1824433","bugzilla_description":"CVE-2019-9336 libavc: information disclosure due to uninitialized data (A-112326322)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9336.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9337","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":[],"bugzilla":"1824439","bugzilla_description":"CVE-2019-9337 libavc: information disclosure due to uninitialized data (A-112204376)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9337.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9338","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":[],"bugzilla":"1824442","bugzilla_description":"CVE-2019-9338 libavc: information disclosure due to uninitialized data (A-111762686)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9338.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbabeltrace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbabeltrace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbabeltrace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbase_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbase_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbase_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbasicobjects-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbasicobjects-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbasicobjects-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbasicobjects_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbasicobjects_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbasicobjects_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblkid-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblkid-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblkid-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblkid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblkid_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblkid_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-crypto_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-crypto_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-crypto_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-dm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-dm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-dm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-fs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-fs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-fs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-kbd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-kbd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-kbd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-loop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-loop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-loop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-lvm-dbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-lvm-dbus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-lvm-dbus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-lvm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-lvm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-lvm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-mdraid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-mdraid_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-mdraid_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-mpath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-mpath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-mpath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-nvdimm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-nvdimm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-nvdimm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-part_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-part_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-part_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-plugins-all_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-plugins-all_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-plugins-all_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-s390_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-s390_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-s390_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-swap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-swap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-swap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-vdo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-vdo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev-vdo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libblockdev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbluray_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbluray_security_api_results.json
new file mode 100644
index 0000000..2d91084
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbluray_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-7810","severity":"moderate","public_date":"2015-02-06T00:00:00Z","advisories":[],"bugzilla":"959433","bugzilla_description":"CVE-2015-7810 libbluray (MountManager): TOCTOU race when expanding JAR files","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7810.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbpf-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbpf-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbpf-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbpf-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbpf-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbpf-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbpf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbpf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbpf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libburn-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libburn-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libburn-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libburn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libburn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libburn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbytesize_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbytesize_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libbytesize_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcacard-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcacard-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcacard-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcacard_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcacard_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcacard_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra-gtk2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra-gtk2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra-gtk2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcanberra_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-ng-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-ng-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-ng-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-ng-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-ng-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-ng-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-ng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-ng_security_api_results.json
new file mode 100644
index 0000000..85c9e75
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap-ng_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-3215","severity":"important","public_date":"2012-12-08T00:00:00Z","advisories":["RHSA-2015:0864","RHBA-2015:2161"],"bugzilla":"1095855","bugzilla_description":"CVE-2014-3215 policycoreutils: local privilege escalation via seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-270","affected_packages":["kernel-0:2.6.32-504.16.2.el6","libcap-ng-0:0.7.5-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3215.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap_security_api_results.json
new file mode 100644
index 0000000..94db922
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcap_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-3215","severity":"important","public_date":"2012-12-08T00:00:00Z","advisories":["RHSA-2015:0864","RHBA-2015:2161"],"bugzilla":"1095855","bugzilla_description":"CVE-2014-3215 policycoreutils: local privilege escalation via seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-270","affected_packages":["kernel-0:2.6.32-504.16.2.el6","libcap-ng-0:0.7.5-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3215.json"},{"CVE":"CVE-2011-4099","severity":"low","public_date":"2011-07-16T00:00:00Z","advisories":["RHSA-2011:1694"],"bugzilla":"722694","bugzilla_description":"CVE-2011-4099 capsh: does not chdir after chroot","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["libcap-0:2.16-5.5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4099.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio-paranoia-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio-paranoia-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio-paranoia-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio-paranoia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio-paranoia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio-paranoia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio_security_api_results.json
new file mode 100644
index 0000000..45ac21b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdio_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-18198","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:3246"],"bugzilla":"1549644","bugzilla_description":"CVE-2017-18198 libcdio: Heap-based buffer over-read in print_iso9660_recurse function in iso-info.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libcdio-0:0.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2017-18199","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:3246"],"bugzilla":"1549701","bugzilla_description":"CVE-2017-18199 libcdio: NULL pointer dereference in realloc_symlink in rock.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libcdio-0:0.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2017-18201","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:3246"],"bugzilla":"1549707","bugzilla_description":"CVE-2017-18201 libcdio: Double free in get_cdtext_generic() in lib/driver/_cdio_generic.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libcdio-0:0.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18201.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcdr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcephfs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcephfs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcephfs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcephfs2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcephfs2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcephfs2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcgroup-pam_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcgroup-pam_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcgroup-pam_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcgroup-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcgroup-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcgroup-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcgroup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcgroup_security_api_results.json
new file mode 100644
index 0000000..db5555f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcgroup_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-14348","severity":"moderate","public_date":"2018-07-25T00:00:00Z","advisories":["RHSA-2019:2047"],"bugzilla":"1611119","bugzilla_description":"CVE-2018-14348 libcgroup: cgrulesengd creates log files with insecure permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libcgroup-0:0.41-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14348.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2011-1006","severity":"important","public_date":"2011-03-03T00:00:00Z","advisories":["RHSA-2011:0320"],"bugzilla":"678107","bugzilla_description":"CVE-2011-1006 libcgroup: Heap-based buffer overflow by converting list of controllers for given task into an array of strings","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["libcgroup-0:0.36.1-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1006.json"},{"CVE":"CVE-2011-1022","severity":"low","public_date":"2011-02-18T00:00:00Z","advisories":["RHSA-2011:0320"],"bugzilla":"680409","bugzilla_description":"CVE-2011-1022 libcgroup: Uncheck origin of NETLINK messages","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["libcgroup-0:0.36.1-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1022.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libchamplain-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libchamplain-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libchamplain-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libchamplain-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libchamplain-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libchamplain-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libchamplain_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libchamplain_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libchamplain_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmis_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmis_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmocka-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmocka-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmocka-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmocka_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmocka_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmocka_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmpiCppImpl0_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmpiCppImpl0_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcmpiCppImpl0_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcollection-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcollection-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcollection-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcollection_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcollection_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcollection_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcom_err-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcom_err-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcom_err-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcom_err_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcom_err_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcom_err_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcomps-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcomps-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcomps-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcomps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcomps_security_api_results.json
new file mode 100644
index 0000000..e35def2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcomps_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-3817","severity":"moderate","public_date":"2019-01-21T00:00:00Z","advisories":["RHSA-2019:3898","RHBA-2020:0062","RHSA-2019:3583"],"bugzilla":"1668005","bugzilla_description":"CVE-2019-3817 libcomps: use after free when merging two objmrtrees","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["redhat-coreos-43.81.202001142154.0","libcomps-0:0.1.8-13.el7","libcomps-0:0.1.11-2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libconfig-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libconfig-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libconfig-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libconfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libconfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcroco-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcroco-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcroco-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcroco_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcroco_security_api_results.json
new file mode 100644
index 0000000..12da465
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcroco_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12825","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:3654","RHBA-2020:3609","RHSA-2020:4072"],"bugzilla":"1835377","bugzilla_description":"CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["redhat-coreos-43.82.202009181853.0","libcroco-0:0.6.12-4.el8_2.1","libcroco-0:0.6.12-6.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-8834","severity":"low","public_date":"2017-06-07T00:00:00Z","advisories":[],"bugzilla":"1463306","bugzilla_description":"CVE-2017-8834 libcroco: Memory allocation failure in the cr_tknzr_parse_comment function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8834.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8871","severity":"low","public_date":"2017-06-07T00:00:00Z","advisories":[],"bugzilla":"1463307","bugzilla_description":"CVE-2017-8871 libcroco: Infinite loop in the cr_parser_parse_selector_core function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8871.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7960","severity":"low","public_date":"2017-04-16T00:00:00Z","advisories":[],"bugzilla":"1445314","bugzilla_description":"CVE-2017-7960 libcroco: Out-of-bounds read due to missing index check in cr-input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7960.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7961","severity":"low","public_date":"2017-04-16T00:00:00Z","advisories":[],"bugzilla":"1450068","bugzilla_description":"CVE-2017-7961 libcroco: Undefined behavior issue in cr_tknzr_parse_rgb function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7961.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcurl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcurl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcurl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcurl-minimal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcurl-minimal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcurl-minimal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcurl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcurl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcurl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcxl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcxl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcxl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcxl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcxl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libcxl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdaemon-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdaemon-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdaemon-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdaemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdaemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdaemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdap-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdap-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdap-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdatrie-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdatrie-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdatrie-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdatrie_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdatrie_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdatrie_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdazzle_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdazzle_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdazzle_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-cxx-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-cxx-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-cxx-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-cxx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-cxx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-cxx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-devel-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-devel-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-devel-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-sql-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-sql-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-sql-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-sql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-sql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-sql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb_security_api_results.json
new file mode 100644
index 0000000..bf79779
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-2708","severity":"low","public_date":"2019-04-23T00:00:00Z","advisories":[],"bugzilla":"1853242","bugzilla_description":"CVE-2019-2708 libdb: data store execution leads to partial DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2708.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10140","severity":"moderate","public_date":"2017-06-11T00:00:00Z","advisories":["RHSA-2019:0366"],"bugzilla":"1464032","bugzilla_description":"CVE-2017-10140 libdb: Reads DB_CONFIG from the current working directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10140.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-gtk3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-gtk3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-gtk3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdbusmenu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdc1394_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdc1394_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdc1394_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdhash_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdhash_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdhash_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdmapsharing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdmapsharing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdmapsharing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdmmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdmmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdmmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdmx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdmx_security_api_results.json
new file mode 100644
index 0000000..caf75d1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdmx_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-1992","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959074","bugzilla_description":"CVE-2013-1992 libdmx: Multiple integer overflows leading to heap-based bufer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libdmx-0:1.1.3-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1992.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdnet-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdnet-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdnet-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdnet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdnet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdnet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdnf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdnf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdnf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdrm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdrm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdrm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdrm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdrm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdrm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdv-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdv-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdv-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdvdnav_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdvdnav_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdvdnav_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdvdread-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdvdread-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdvdread-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdvdread_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdvdread_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdvdread_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf_security_api_results.json
new file mode 100644
index 0000000..d287da4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarf_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14249","severity":"low","public_date":"2019-07-24T00:00:00Z","advisories":[],"bugzilla":"1732719","bugzilla_description":"CVE-2019-14249 libdwarf: division by zero in dwarf_elf_load_headers.c leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14249.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9998","severity":"low","public_date":"2017-06-28T00:00:00Z","advisories":[],"bugzilla":"1470186","bugzilla_description":"CVE-2017-9998 libdwarf: Segmentation fault in the _dwarf_decode_s_leb128_chk function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9998.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9052","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1452587","bugzilla_description":"CVE-2017-9052 libdwarf: heap-based buffer over-read in dwarf_formsdata()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9052.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9053","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1452590","bugzilla_description":"CVE-2017-9053 libdwarf: heap-based buffer over-read in _dwarf_read_loc_expr_op()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9054","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1452591","bugzilla_description":"CVE-2017-9054 libdwarf: heap-based buffer over-read in _dwarf_decode_s_leb128_chk()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9054.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9055","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1452592","bugzilla_description":"CVE-2017-9055 libdwarf: heap-based buffer over-read in dwarf_formsdata()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9055.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9558","severity":"low","public_date":"2016-11-19T00:00:00Z","advisories":[],"bugzilla":"1398176","bugzilla_description":"CVE-2016-9558 libdwarf: Negation overflow in dwarf_leb.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9558.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9480","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1399990","bugzilla_description":"CVE-2016-9480 libdwarf: Heap buffer overflow in dwarf_util.c","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9480.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-9275","severity":"low","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1394802","bugzilla_description":"CVE-2016-9275 libdwarf: Out of bound heap read in _dwarf_skim_forms","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9275.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9276","severity":"low","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1394804","bugzilla_description":"CVE-2016-9276 libdwarf: Out-of-bounds heap read in dwarf_get_aranges_list","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9276.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8679","severity":"moderate","public_date":"2016-10-06T00:00:00Z","advisories":[],"bugzilla":"1385689","bugzilla_description":"CVE-2016-8679 libdwarf: Heap based buffer overflow in _dwarf_get_size_of_val","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8679.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-8681","severity":"moderate","public_date":"2016-10-06T00:00:00Z","advisories":[],"bugzilla":"1385690","bugzilla_description":"CVE-2016-8681 libdwarf: Heap based buffer overflow in _dwarf_get_abbrev_for_code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8681.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-8680","severity":"moderate","public_date":"2016-10-04T00:00:00Z","advisories":[],"bugzilla":"1385686","bugzilla_description":"CVE-2016-8680 libdwarf: Out of bounds heap read in _dwarf_get_abbrev_for_code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8680.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-7511","severity":"low","public_date":"2016-09-18T00:00:00Z","advisories":[],"bugzilla":"1379624","bugzilla_description":"CVE-2016-7511 libdwarf: Integer overflow in dwarf_die_deliv.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7510","severity":"low","public_date":"2016-09-17T00:00:00Z","advisories":[],"bugzilla":"1378718","bugzilla_description":"CVE-2016-7510 libdwarf: Out-of-bounds read in read_line_table_program","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7510.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7410","severity":"low","public_date":"2016-09-14T00:00:00Z","advisories":[],"bugzilla":"1376361","bugzilla_description":"CVE-2016-7410 libdwarf: Heap buffer overflow in _dwarf_read_loc_section","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7410.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5027","severity":"low","public_date":"2016-05-24T00:00:00Z","advisories":[],"bugzilla":"1340123","bugzilla_description":"CVE-2016-5027 libdwarf: Null pointer dereference in _dwarf_decode_s_leb128","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5027.json"},{"CVE":"CVE-2016-5028","severity":"low","public_date":"2016-05-23T00:00:00Z","advisories":[],"bugzilla":"1339929","bugzilla_description":"CVE-2016-5028 libdwarf: Null pointer dereference in print_frame_inst_bytes()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5028.json"},{"CVE":"CVE-2016-5029","severity":"low","public_date":"2016-05-22T00:00:00Z","advisories":[],"bugzilla":"1339931","bugzilla_description":"CVE-2016-5029 libdwarf: Null pointer dereference in create_fullest_file_path()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5029.json"},{"CVE":"CVE-2016-5030","severity":"low","public_date":"2016-05-22T00:00:00Z","advisories":[],"bugzilla":"1340079","bugzilla_description":"CVE-2016-5030 libdwarf: Null pointer dereference in _dwarf_calculate_info_section_end_ptr()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5030.json"},{"CVE":"CVE-2016-5031","severity":"low","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1340082","bugzilla_description":"CVE-2016-5031 libdwarf: Out-of-bounds read in print_frame_inst_bytes() function","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5031.json"},{"CVE":"CVE-2016-5032","severity":"low","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1340087","bugzilla_description":"CVE-2016-5032 libdwarf: Out-of-bounds read in dwarf_get_xu_hash_entry()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5032.json"},{"CVE":"CVE-2016-5033","severity":"low","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1340094","bugzilla_description":"CVE-2016-5033 libdwarf: Out-of-bounds read in print_explroc_content","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5033.json"},{"CVE":"CVE-2016-5034","severity":"low","public_date":"2016-05-17T00:00:00Z","advisories":[],"bugzilla":"1340099","bugzilla_description":"CVE-2016-5034 libdwarf: Out-of-bounds write in dwarf_elf_access.c","cvss_score":3.2,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5034.json"},{"CVE":"CVE-2016-5035","severity":"low","public_date":"2016-05-12T00:00:00Z","advisories":[],"bugzilla":"1340101","bugzilla_description":"CVE-2016-5035 libdwarf: Out-of-bounds read in _dwarf_read_line_table_header","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5035.json"},{"CVE":"CVE-2016-5036","severity":"low","public_date":"2016-05-12T00:00:00Z","advisories":[],"bugzilla":"1340102","bugzilla_description":"CVE-2016-5036 libdwarf: Out-of-bounds read in dump_block","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5036.json"},{"CVE":"CVE-2016-5038","severity":"low","public_date":"2016-05-12T00:00:00Z","advisories":[],"bugzilla":"1340106","bugzilla_description":"CVE-2016-5038 libdwarf: Out-of-bounds read in dwarf_get_macro_startend_file()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5038.json"},{"CVE":"CVE-2016-5037","severity":"low","public_date":"2016-05-06T00:00:00Z","advisories":[],"bugzilla":"1340103","bugzilla_description":"CVE-2016-5037 libdwarf: Null pointer dereference in _dwarf_load_section","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5037.json"},{"CVE":"CVE-2016-5039","severity":"low","public_date":"2016-05-06T00:00:00Z","advisories":[],"bugzilla":"1340121","bugzilla_description":"CVE-2016-5039 libdwarf: Out-of-bounds read in get_attr_value() function","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5039.json"},{"CVE":"CVE-2016-5040","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1340108","bugzilla_description":"CVE-2016-5040 libdwarf: Null pointer dereference in read_area_length()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5040.json"},{"CVE":"CVE-2016-5041","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1340110","bugzilla_description":"CVE-2016-5041 libdwarf: Null pointer dereference in _dwarf_file_name_is_full_path()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5041.json"},{"CVE":"CVE-2016-5042","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1340111","bugzilla_description":"CVE-2016-5042 libdwarf: Infinite loop in dwarf_get_arranges_list()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5042.json"},{"CVE":"CVE-2016-5043","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1340113","bugzilla_description":"CVE-2016-5043 libdwarf: Out-of-bounds read in dwarf_dealloc()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5043.json"},{"CVE":"CVE-2016-5044","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1340116","bugzilla_description":"CVE-2016-5044 libdwarf: Heap-based buffer overflow in update_entry()","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5044.json"},{"CVE":"CVE-2016-2091","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1299964","bugzilla_description":"CVE-2016-2091 libdwarf: Out-of-bounds read in dwarf_frame2.c","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2091.json"},{"CVE":"CVE-2016-2050","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1300330","bugzilla_description":"CVE-2016-2050 libdwarf: Out-of-bounds write in get_abbrev_array_info","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2050.json"},{"CVE":"CVE-2015-8750","severity":"low","public_date":"2015-12-25T00:00:00Z","advisories":[],"bugzilla":"1296986","bugzilla_description":"CVE-2015-8750 libdwarf: NULL pointer dereference in dwarf_utils.c","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8750.json"},{"CVE":"CVE-2015-8538","severity":"low","public_date":"2015-12-07T00:00:00Z","advisories":[],"bugzilla":"1291299","bugzilla_description":"CVE-2015-8538 libdwarf: Out-of-bounds read in dwarf_leb.c","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8538.json"},{"CVE":"CVE-2014-9482","severity":"low","public_date":"2014-12-30T00:00:00Z","advisories":[],"bugzilla":"1178725","bugzilla_description":"CVE-2014-9482 libdwarf: use-after-free when parsing a crafted ELF file","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9482.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarves1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarves1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libdwarves1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libeasyfc-gobject_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libeasyfc-gobject_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libeasyfc-gobject_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libeasyfc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libeasyfc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libeasyfc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libecap-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libecap-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libecap-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libecap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libecap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libecap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libedit-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libedit-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libedit-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libedit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libedit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libedit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libeot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libeot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libeot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libepoxy-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libepoxy-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libepoxy-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libepoxy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libepoxy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libepoxy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libepubgen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libepubgen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libepubgen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-mono-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-mono-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-mono-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-narrow-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-narrow-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-narrow-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-serif-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-serif-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liberation-serif-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-sd8686-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-sd8686-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-sd8686-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-sd8787-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-sd8787-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-sd8787-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-usb8388-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-usb8388-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-usb8388-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-usb8388-olpc-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-usb8388-olpc-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libertas-usb8388-olpc-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libestr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libestr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libestr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libetonyek-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libetonyek-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libetonyek-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libetonyek_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libetonyek_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libetonyek_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev-libevent-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev-libevent-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev-libevent-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev-source_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev-source_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev-source_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev_security_api_results.json
new file mode 100644
index 0000000..ae0f51c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libev_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10197","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418612","bugzilla_description":"CVE-2016-10197 libevent: Out-of-bounds read in search_make_new()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10195","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418608","bugzilla_description":"CVE-2016-10195 libevent: Stack-buffer overflow in the name_parse() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10196","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418611","bugzilla_description":"CVE-2016-10196 libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-6525","severity":"moderate","public_date":"2015-08-24T00:00:00Z","advisories":[],"bugzilla":"1256797","bugzilla_description":"CVE-2015-6525 libevent: multiple integer overflows in the evbuffer APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6525.json"},{"CVE":"CVE-2014-6272","severity":"moderate","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1144646","bugzilla_description":"CVE-2014-6272 libevent: potential heap overflow in buffer/bufferevent APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6272.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevdev-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevdev-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevdev-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevdev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevdev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevdev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevent-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevent-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevent-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevent-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevent-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevent-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevent_security_api_results.json
new file mode 100644
index 0000000..ae0f51c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libevent_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10197","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418612","bugzilla_description":"CVE-2016-10197 libevent: Out-of-bounds read in search_make_new()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10195","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418608","bugzilla_description":"CVE-2016-10195 libevent: Stack-buffer overflow in the name_parse() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10196","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418611","bugzilla_description":"CVE-2016-10196 libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-6525","severity":"moderate","public_date":"2015-08-24T00:00:00Z","advisories":[],"bugzilla":"1256797","bugzilla_description":"CVE-2015-6525 libevent: multiple integer overflows in the evbuffer APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6525.json"},{"CVE":"CVE-2014-6272","severity":"moderate","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1144646","bugzilla_description":"CVE-2014-6272 libevent: potential heap overflow in buffer/bufferevent APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6272.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libexif-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libexif-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libexif-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libexif_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libexif_security_api_results.json
new file mode 100644
index 0000000..b048e52
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libexif_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-0181","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":[],"bugzilla":"1847131","bugzilla_description":"CVE-2020-0181 libexif: integer overflow in exif_data_load_data_thumbnail function in exif-data.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0181.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-0198","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":[],"bugzilla":"1847133","bugzilla_description":"CVE-2020-0198 libexif: integer overflow in exif_data_load_data_content function in exif-data.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0198.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-0182","severity":"low","public_date":"2020-06-01T00:00:00Z","advisories":["RHSA-2020:4040"],"bugzilla":"1852490","bugzilla_description":"CVE-2020-0182 libexif: out of bounds read due to a missing bounds check in exif_entry_get_value function in exif-entry.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libexif-0:0.6.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0182.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-13112","severity":"moderate","public_date":"2020-05-16T00:00:00Z","advisories":["RHSA-2020:2550","RHSA-2020:2474","RHSA-2020:2672","RHSA-2020:2516","RHSA-2020:2549"],"bugzilla":"1840344","bugzilla_description":"CVE-2020-13112 libexif: several buffer over-reads in EXIF MakerNote handling can lead to information disclosure and DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-190)->CWE-125","affected_packages":["libexif-0:0.6.21-17.el8_2","libexif-0:0.6.21-17.el8_1","libexif-0:0.6.21-7.el7_8","libexif-0:0.6.21-6.el6_10","libexif-0:0.6.21-17.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13112.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2020-13113","severity":"moderate","public_date":"2020-05-16T00:00:00Z","advisories":["RHSA-2020:4040"],"bugzilla":"1840347","bugzilla_description":"CVE-2020-13113 libexif: use of uninitialized memory in EXIF Makernote handling can lead to crashes and use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->(CWE-416|CWE-822)","affected_packages":["libexif-0:0.6.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13113.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-13114","severity":"moderate","public_date":"2020-05-16T00:00:00Z","advisories":["RHSA-2020:4040"],"bugzilla":"1840350","bugzilla_description":"CVE-2020-13114 libexif: unrestricted size in handling Canon EXIF MakerNote data can lead to consumption of large amounts of compute time","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["libexif-0:0.6.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13114.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-0093","severity":"moderate","public_date":"2020-05-04T00:00:00Z","advisories":["RHSA-2020:4040"],"bugzilla":"1852487","bugzilla_description":"CVE-2020-0093 libexif: out of bounds read due to a missing bounds check in exif_data_save_data_entry function in exif-data.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805->CWE-125","affected_packages":["libexif-0:0.6.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0093.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2020-12767","severity":"low","public_date":"2020-02-17T00:00:00Z","advisories":["RHSA-2020:4040"],"bugzilla":"1834950","bugzilla_description":"CVE-2020-12767 libexif: divide-by-zero in exif_entry_get_value function in exif-entry.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["libexif-0:0.6.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12767.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-9278","severity":"moderate","public_date":"2019-12-01T00:00:00Z","advisories":["RHSA-2020:4040"],"bugzilla":"1789031","bugzilla_description":"CVE-2019-9278 libexif: out of bounds write in exif-data.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libexif-0:0.6.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9278.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20030","severity":"low","public_date":"2018-12-20T00:00:00Z","advisories":[],"bugzilla":"1663878","bugzilla_description":"CVE-2018-20030 libexif: Input validation issue resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20030.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6328","severity":"low","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1366239","bugzilla_description":"CVE-2016-6328 libexif: Integer overflow in parsing MNOTE entry data of the input file","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6328.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2017-7544","severity":"low","public_date":"2017-07-04T00:00:00Z","advisories":[],"bugzilla":"1494196","bugzilla_description":"CVE-2017-7544 libexif: Out-of-bounds heap read in exif_data_save_data_entry function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7544.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2012-2813","severity":"low","public_date":"2012-07-12T00:00:00Z","advisories":["RHSA-2012:1255"],"bugzilla":"839182","bugzilla_description":"CVE-2012-2813 libexif: \"exif_convert_utf16_to_utf8()\" heap-based out-of-bounds array read","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["libexif-0:0.6.21-5.el6_3","libexif-0:0.6.21-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2813.json"},{"CVE":"CVE-2012-2814","severity":"moderate","public_date":"2012-07-12T00:00:00Z","advisories":["RHSA-2012:1255"],"bugzilla":"839183","bugzilla_description":"CVE-2012-2814 libexif: \"exif_entry_format_value()\" buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libexif-0:0.6.21-5.el6_3","libexif-0:0.6.21-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2814.json"},{"CVE":"CVE-2012-2836","severity":"low","public_date":"2012-07-12T00:00:00Z","advisories":["RHSA-2012:1255"],"bugzilla":"839184","bugzilla_description":"CVE-2012-2836 libexif: \"exif_data_load_data()\" heap-based out-of-bounds array read","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["libexif-0:0.6.21-5.el6_3","libexif-0:0.6.21-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2836.json"},{"CVE":"CVE-2012-2837","severity":"low","public_date":"2012-07-12T00:00:00Z","advisories":["RHSA-2012:1255"],"bugzilla":"839185","bugzilla_description":"CVE-2012-2837 libexif: \"mnote_olympus_entry_get_value()\" division by zero","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libexif-0:0.6.21-5.el6_3","libexif-0:0.6.21-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2837.json"},{"CVE":"CVE-2012-2840","severity":"moderate","public_date":"2012-07-12T00:00:00Z","advisories":["RHSA-2012:1255"],"bugzilla":"839188","bugzilla_description":"CVE-2012-2840 libexif: \"exif_convert_utf16_to_utf8()\" off-by-one","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":["libexif-0:0.6.21-5.el6_3","libexif-0:0.6.21-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2840.json"},{"CVE":"CVE-2012-2841","severity":"moderate","public_date":"2012-07-12T00:00:00Z","advisories":["RHSA-2012:1255"],"bugzilla":"839189","bugzilla_description":"CVE-2012-2841 libexif: \"exif_entry_get_value()\" integer underflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["libexif-0:0.6.21-5.el6_3","libexif-0:0.6.21-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2841.json"},{"CVE":"CVE-2012-2812","severity":"low","public_date":"2012-07-12T00:00:00Z","advisories":["RHSA-2012:1255"],"bugzilla":"839203","bugzilla_description":"CVE-2012-2812 libexif: \"exif_entry_get_value()\" heap-based out-of-bounds array read","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["libexif-0:0.6.21-5.el6_3","libexif-0:0.6.21-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2812.json"},{"CVE":"CVE-2007-6351","severity":"moderate","public_date":"2007-12-14T00:00:00Z","advisories":["RHSA-2007:1165"],"bugzilla":"425551","bugzilla_description":"CVE-2007-6351 libexif infinite recursion flaw (DoS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libexif-0:0.6.13-4.0.2.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6351.json"},{"CVE":"CVE-2007-6352","severity":"moderate","public_date":"2007-12-14T00:00:00Z","advisories":["RHSA-2007:1166","RHSA-2007:1165"],"bugzilla":"425561","bugzilla_description":"CVE-2007-6352 libexif integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["libexif-0:0.5.12-5.1.0.2.el4_6.1","libexif-0:0.6.13-4.0.2.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6352.json"},{"CVE":"CVE-2006-4168","severity":"moderate","public_date":"2007-06-13T00:00:00Z","advisories":["RHSA-2007:0501"],"bugzilla":"243888","bugzilla_description":"CVE-2006-4168 libexif integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["libexif-0:0.5.12-5.1.0.2","libexif-0:0.6.13-4.0.2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4168.json"},{"CVE":"CVE-2005-0664","severity":"low","public_date":"2004-03-03T00:00:00Z","advisories":["RHSA-2005:300"],"bugzilla":"1617555","bugzilla_description":"CVE-2005-0664 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libexif-0:0.5.12-5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0664.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libexttextcat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libexttextcat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libexttextcat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfabric-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfabric-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfabric-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfabric_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfabric_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfabric_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfastjson_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfastjson_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfastjson_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdisk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdisk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdisk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdisk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdisk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdisk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfdt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libffi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libffi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libffi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libffi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libffi_security_api_results.json
new file mode 100644
index 0000000..d4cb054
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libffi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-1000376","severity":"moderate","public_date":null,"advisories":[],"bugzilla":"1462164","bugzilla_description":"CVE-2017-1000376 libffi: Requests an executable stack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000376.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfontenc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfontenc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfontenc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfontenc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfontenc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfontenc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libformula_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libformula_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libformula_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfprint_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfprint_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfprint_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfreehand_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfreehand_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libfreehand_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcab1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcab1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcab1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcrypt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcrypt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcrypt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcrypt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcrypt_security_api_results.json
new file mode 100644
index 0000000..ddcf658
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgcrypt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-13627","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1764018","bugzilla_description":"CVE-2019-13627 libgcrypt: ECDSA timing attack allowing private key leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2019-12904","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1730320","bugzilla_description":"CVE-2019-12904 Libgcrypt: physical addresses being available to other processes leads to a flush-and-reload side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12904.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-6829","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1543437","bugzilla_description":"CVE-2018-6829 libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6829.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-0379","severity":"moderate","public_date":"2017-08-27T00:00:00Z","advisories":[],"bugzilla":"1485921","bugzilla_description":"CVE-2017-0379 libgcrypt: Missing input validation for X25519 curve","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0379.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-7526","severity":"moderate","public_date":"2017-06-29T00:00:00Z","advisories":[],"bugzilla":"1466265","bugzilla_description":"CVE-2017-7526 libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-9526","severity":"low","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1459887","bugzilla_description":"CVE-2017-9526 libgcrypt: Possible timing attack on EdDSA session key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-6313","severity":"moderate","public_date":"2016-08-17T00:00:00Z","advisories":["RHSA-2016:2674"],"bugzilla":"1366105","bugzilla_description":"CVE-2016-6313 libgcrypt: PRNG output is predictable","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["libgcrypt-0:1.5.3-13.el7_3.1","libgcrypt-0:1.4.5-12.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6313.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2015-7511","severity":"low","public_date":"2016-02-08T00:00:00Z","advisories":[],"bugzilla":"1306184","bugzilla_description":"CVE-2015-7511 libgcrypt: side-channel attack on ECDH with Weierstrass curves","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7511.json"},{"CVE":"CVE-2014-3591","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198145","bugzilla_description":"CVE-2014-3591 libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3591.json"},{"CVE":"CVE-2015-0837","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198147","bugzilla_description":"CVE-2015-0837 libgcrypt: last-level cache side-channel attack","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0837.json"},{"CVE":"CVE-2014-5270","severity":"moderate","public_date":"2014-08-08T00:00:00Z","advisories":[],"bugzilla":"1128531","bugzilla_description":"CVE-2014-5270 libgcrypt: ELGAMAL side-channel attack","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5270.json"},{"CVE":"CVE-2013-4576","severity":"moderate","public_date":"2013-12-18T00:00:00Z","advisories":["RHSA-2014:0016"],"bugzilla":"1043327","bugzilla_description":"CVE-2013-4576 gnupg: RSA secret key recovery via acoustic cryptanalysis","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["gnupg-0:1.4.5-18.el5_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4576.json"},{"CVE":"CVE-2013-4242","severity":"moderate","public_date":"2013-07-22T00:00:00Z","advisories":["RHSA-2013:1458","RHSA-2013:1457"],"bugzilla":"988589","bugzilla_description":"CVE-2013-4242 GnuPG susceptible to Yarom/Falkner flush+reload cache side-channel attack","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libgcrypt-0:1.4.4-7.el5_10","libgcrypt-0:1.4.5-11.el6_4","gnupg-0:1.4.5-18.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4242.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgdata-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgdata-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgdata-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgdata_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgdata_security_api_results.json
new file mode 100644
index 0000000..d33f0b5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgdata_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-1177","severity":"moderate","public_date":"2012-03-12T00:00:00Z","advisories":[],"bugzilla":"803335","bugzilla_description":"CVE-2012-1177 libgdata: Absent validation of SSL certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1177.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgdither_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgdither_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgdither_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgee-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgee-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgee-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgee_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgee_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgee_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgexiv2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgexiv2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgexiv2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgexiv2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgexiv2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgexiv2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgfortran_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgfortran_security_api_results.json
new file mode 100644
index 0000000..ab2dea6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgfortran_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-5044","severity":"moderate","public_date":"2014-06-17T00:00:00Z","advisories":[],"bugzilla":"1122812","bugzilla_description":"CVE-2014-5044 gcc: integer overflow flaws in libgfortran","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5044.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2-glib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2-glib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2-glib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2_security_api_results.json
new file mode 100644
index 0000000..aae923c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgit2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12278","severity":"low","public_date":"2019-09-18T00:00:00Z","advisories":[],"bugzilla":"1829397","bugzilla_description":"CVE-2020-12278 libgit2: files inside the .git directory may be overwritten during cloning via NTFS Alternate Data Streams","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12278.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-12279","severity":"low","public_date":"2019-09-18T00:00:00Z","advisories":[],"bugzilla":"1829407","bugzilla_description":"CVE-2020-12279 libgit2: NTFS protections inactive when running Git in the Windows Subsystem for Linux","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12279.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-15501","severity":"low","public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1615585","bugzilla_description":"CVE-2018-15501 libgit2: out-of-bounds reads when processing smart-protocol ng packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15501.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-8098","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":[],"bugzilla":"1554366","bugzilla_description":"CVE-2018-8099 CVE-2018-8098 libgit2: denial of service (DoS) via crafted repository index files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8098.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-8099","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":[],"bugzilla":"1554366","bugzilla_description":"CVE-2018-8099 CVE-2018-8098 libgit2: denial of service (DoS) via crafted repository index files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8099.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-core-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-core-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-core-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-egl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-egl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-egl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-gles_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-gles_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-gles_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-glx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-glx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-glx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-opengl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-opengl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd-opengl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libglvnd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgnomekbd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgnomekbd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgnomekbd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgnomekbd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgnomekbd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgnomekbd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgomp-offload-nvptx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgomp-offload-nvptx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgomp-offload-nvptx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgomp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgomp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgomp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgovirt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgovirt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgovirt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpg-error-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpg-error-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpg-error-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpg-error_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpg-error_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpg-error_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgphoto2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgphoto2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgphoto2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgphoto2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgphoto2_security_api_results.json
new file mode 100644
index 0000000..c67bedc
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgphoto2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-9831","severity":"low","public_date":"2017-03-16T00:00:00Z","advisories":[],"bugzilla":"1465038","bugzilla_description":"CVE-2017-9831 libmtp: Integer overflow in ptp_unpack_EOS_CustomFuncEx","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9831.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-9832","severity":"low","public_date":"2017-03-16T00:00:00Z","advisories":[],"bugzilla":"1465040","bugzilla_description":"CVE-2017-9832 libmtp: Integer overflow in ptp_unpack_OPL function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9832.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpod-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpod-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpod-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpod-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpod-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpod-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpod_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpod_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgpod_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgs_security_api_results.json
new file mode 100644
index 0000000..944ddda
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-9888","severity":"low","public_date":"2016-12-07T00:00:00Z","advisories":[],"bugzilla":"1403198","bugzilla_description":"CVE-2016-9888 libgsf: Null pointer dereference in tar_directory_for_file()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9888.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2011-2709","severity":"low","public_date":"2011-05-18T00:00:00Z","advisories":[],"bugzilla":"724005","bugzilla_description":"CVE-2011-2709 libgssapi, libgssglue: Ability to load untrusted configuration file, when loading GSS mechanisms and their definitions during initialization","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2709.json"},{"CVE":"CVE-2006-4514","severity":"moderate","public_date":"2006-11-30T00:00:00Z","advisories":["RHSA-2007:0011"],"bugzilla":"1618189","bugzilla_description":"CVE-2006-4514 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libgsf-0:1.10.1-2","libgsf-0:1.6.0-7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4514.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgsf-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgsf-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgsf-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgsf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgsf_security_api_results.json
new file mode 100644
index 0000000..5f1bce5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgsf_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-9888","severity":"low","public_date":"2016-12-07T00:00:00Z","advisories":[],"bugzilla":"1403198","bugzilla_description":"CVE-2016-9888 libgsf: Null pointer dereference in tar_directory_for_file()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9888.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2006-4514","severity":"moderate","public_date":"2006-11-30T00:00:00Z","advisories":["RHSA-2007:0011"],"bugzilla":"1618189","bugzilla_description":"CVE-2006-4514 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libgsf-0:1.10.1-2","libgsf-0:1.6.0-7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4514.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgtop2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgtop2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgtop2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgtop2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgtop2_security_api_results.json
new file mode 100644
index 0000000..07b7523
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgtop2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2007-0235","severity":"moderate","public_date":"2007-01-14T00:00:00Z","advisories":["RHSA-2007:0765"],"bugzilla":"222637","bugzilla_description":"CVE-2007-0235 Stack overflow libgtop when pathname of mmap()-ed file is too long","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libgtop2-0:2.8.0-1.0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0235.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgudev-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgudev-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgudev-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgudev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgudev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgudev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-bash-completion_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-bash-completion_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-bash-completion_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-benchmarking_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-benchmarking_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-benchmarking_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-gfs2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-gfs2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-gfs2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-gobject-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-gobject-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-gobject-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-gobject_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-gobject_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-gobject_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-inspect-icons_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-inspect-icons_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-inspect-icons_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-java-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-java-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-java-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-java_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-java_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-java_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-man-pages-ja_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-man-pages-ja_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-man-pages-ja_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-man-pages-uk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-man-pages-uk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-man-pages-uk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-rescue_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-rescue_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-rescue_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-rsync_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-rsync_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-rsync_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-tools-c_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-tools-c_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-tools-c_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-winsupport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-winsupport_security_api_results.json
new file mode 100644
index 0000000..e3849de
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-winsupport_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9755","severity":"low","public_date":"2019-03-21T00:00:00Z","advisories":["RHBA-2019:3723","RHSA-2019:3345","RHSA-2019:2308"],"bugzilla":"1691624","bugzilla_description":"CVE-2019-9755 ntfs-3g: heap-based buffer overflow leads to local root privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libguestfs-winsupport-0:7.2-3.el7","virt:rhel-8010020190916153839.cdc1202b"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-3202","severity":"low","public_date":"2015-05-21T00:00:00Z","advisories":[],"bugzilla":"1224103","bugzilla_description":"CVE-2015-3202 fuse: incorrect filtering of environment variables leading to privilege escalation","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3202.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-xfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-xfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs-xfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs_security_api_results.json
new file mode 100644
index 0000000..3dc0827
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libguestfs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9755","severity":"low","public_date":"2019-03-21T00:00:00Z","advisories":["RHBA-2019:3723","RHSA-2019:3345","RHSA-2019:2308"],"bugzilla":"1691624","bugzilla_description":"CVE-2019-9755 ntfs-3g: heap-based buffer overflow leads to local root privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libguestfs-winsupport-0:7.2-3.el7","virt:rhel-8010020190916153839.cdc1202b"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8869","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":["RHSA-2017:0565","RHSA-2016:2576","RHSA-2016:1296","RHSA-2017:0564"],"bugzilla":"1332090","bugzilla_description":"CVE-2015-8869 ocaml: sizes arguments are sign-extended from 32 to 64 bits","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-194","affected_packages":["libguestfs-1:1.32.7-3.el7","ocaml-0:3.11.2-5.el6","libguestfs-1:1.20.11-20.el6","ocaml-0:4.01.0-22.7.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8869.json"},{"CVE":"CVE-2015-3202","severity":"low","public_date":"2015-05-21T00:00:00Z","advisories":[],"bugzilla":"1224103","bugzilla_description":"CVE-2015-3202 fuse: incorrect filtering of environment variables leading to privilege escalation","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3202.json"},{"CVE":"CVE-2013-4419","severity":"moderate","public_date":"2013-10-17T00:00:00Z","advisories":["RHSA-2013:1536"],"bugzilla":"1016960","bugzilla_description":"CVE-2013-4419 libguestfs: insecure temporary directory handling for guestfish's network socket","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-377","affected_packages":["libguestfs-1:1.20.11-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4419.json"},{"CVE":"CVE-2013-2124","severity":"moderate","public_date":"2013-05-28T00:00:00Z","advisories":[],"bugzilla":"968306","bugzilla_description":"CVE-2013-2124 libguestfs: DoS (abort) due to a double free flaw when inspecting certain guest files / images","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2124.json"},{"CVE":"CVE-2012-2690","severity":"low","public_date":"2012-02-08T00:00:00Z","advisories":["RHSA-2012:0774"],"bugzilla":"831117","bugzilla_description":"CVE-2012-2690 libguestfs: virt-edit creates a new file, when it is used leading to loss of file attributes (permissions, owner, SELinux context etc.)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libguestfs-1:1.16.19-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2690.json"},{"CVE":"CVE-2010-3851","severity":"low","public_date":"2010-10-14T00:00:00Z","advisories":["RHSA-2011:0586"],"bugzilla":"643958","bugzilla_description":"CVE-2010-3851 libguestfs: missing disk format specifier when adding a disk","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["libguestfs-1:1.7.17-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3851.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgusb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgusb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgusb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgusb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgusb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgusb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgweather-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgweather-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgweather-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgweather_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgweather_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgweather_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgxps-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgxps-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgxps-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgxps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgxps_security_api_results.json
new file mode 100644
index 0000000..14cd24c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libgxps_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10767","severity":"low","public_date":"2018-05-05T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1576175","bugzilla_description":"CVE-2018-10767 libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libgxps-0:0.3.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10767.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10733","severity":"low","public_date":"2018-05-04T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1576111","bugzilla_description":"CVE-2018-10733 libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libgxps-0:0.3.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10733.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11590","severity":"low","public_date":"2017-07-20T00:00:00Z","advisories":[],"bugzilla":"1475734","bugzilla_description":"CVE-2017-11590 libgxps: NULL pointer dereference in the caseless_hash function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11590.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhangul_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhangul_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhangul_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbaapi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbaapi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbaapi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbaapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbaapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbaapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbalinux-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbalinux-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbalinux-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbalinux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbalinux_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhbalinux_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhugetlbfs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhugetlbfs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhugetlbfs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhugetlbfs-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhugetlbfs-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhugetlbfs-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhugetlbfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhugetlbfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libhugetlbfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libi2c_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libi2c_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libi2c_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libibumad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libibumad_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libibumad_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libibverbs-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libibverbs-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libibverbs-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libibverbs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libibverbs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libibverbs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libica-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libica-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libica-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libica_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libica_security_api_results.json
new file mode 100644
index 0000000..51d9fd8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libica_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11703","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720001","bugzilla_description":"CVE-2019-11703 libical: Heap buffer over read in icalparser.c parser_get_next_char","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11703.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-11704","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720006","bugzilla_description":"CVE-2019-11704 libical: Heap buffer overflow in icalmemory_strdup_and_dequote function in icalvalue.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11705","severity":"important","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720008","bugzilla_description":"CVE-2019-11705 libical: Stack buffer overflow in icalrecur_add_bydayrules in icalrecur.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11706","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720011","bugzilla_description":"CVE-2019-11706 libical: Type confusion in icaltimezone_get_vtimezone_properties function in icalproperty.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2016-9584","severity":"moderate","public_date":"2016-12-15T00:00:00Z","advisories":[],"bugzilla":"1405315","bugzilla_description":"CVE-2016-9584 libical: Use-after-free","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9584.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-5825","severity":"low","public_date":"2016-06-25T00:00:00Z","advisories":[],"bugzilla":"1375104","bugzilla_description":"CVE-2016-5825 libical: Heap buffer over-read in icalparser_parse_string function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5825.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5826","severity":"low","public_date":"2016-06-25T00:00:00Z","advisories":[],"bugzilla":"1375106","bugzilla_description":"CVE-2016-5826 libical: Heap buffer over-read in parser_get_next_char","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5826.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5827","severity":"moderate","public_date":"2016-06-24T00:00:00Z","advisories":[],"bugzilla":"1350481","bugzilla_description":"CVE-2016-5827 libical: Heap buffer over-read in icaltime_from_string","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5827.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5823","severity":"low","public_date":"2016-06-24T00:00:00Z","advisories":[],"bugzilla":"1350487","bugzilla_description":"CVE-2016-5823 libical: Segmentation fault on crafted file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5823.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5824","severity":"moderate","public_date":"2016-05-24T00:00:00Z","advisories":["RHSA-2019:0269","RHSA-2019:0270"],"bugzilla":"1375120","bugzilla_description":"CVE-2016-5824 libical: Multiple use-after-free vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:60.5.0-1.el6_10","thunderbird-0:60.5.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5824.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libical-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libical-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libical-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libical_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libical_security_api_results.json
new file mode 100644
index 0000000..51d9fd8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libical_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11703","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720001","bugzilla_description":"CVE-2019-11703 libical: Heap buffer over read in icalparser.c parser_get_next_char","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11703.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-11704","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720006","bugzilla_description":"CVE-2019-11704 libical: Heap buffer overflow in icalmemory_strdup_and_dequote function in icalvalue.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11705","severity":"important","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720008","bugzilla_description":"CVE-2019-11705 libical: Stack buffer overflow in icalrecur_add_bydayrules in icalrecur.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11706","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720011","bugzilla_description":"CVE-2019-11706 libical: Type confusion in icaltimezone_get_vtimezone_properties function in icalproperty.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2016-9584","severity":"moderate","public_date":"2016-12-15T00:00:00Z","advisories":[],"bugzilla":"1405315","bugzilla_description":"CVE-2016-9584 libical: Use-after-free","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9584.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-5825","severity":"low","public_date":"2016-06-25T00:00:00Z","advisories":[],"bugzilla":"1375104","bugzilla_description":"CVE-2016-5825 libical: Heap buffer over-read in icalparser_parse_string function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5825.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5826","severity":"low","public_date":"2016-06-25T00:00:00Z","advisories":[],"bugzilla":"1375106","bugzilla_description":"CVE-2016-5826 libical: Heap buffer over-read in parser_get_next_char","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5826.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5827","severity":"moderate","public_date":"2016-06-24T00:00:00Z","advisories":[],"bugzilla":"1350481","bugzilla_description":"CVE-2016-5827 libical: Heap buffer over-read in icaltime_from_string","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5827.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5823","severity":"low","public_date":"2016-06-24T00:00:00Z","advisories":[],"bugzilla":"1350487","bugzilla_description":"CVE-2016-5823 libical: Segmentation fault on crafted file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5823.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5824","severity":"moderate","public_date":"2016-05-24T00:00:00Z","advisories":["RHSA-2019:0269","RHSA-2019:0270"],"bugzilla":"1375120","bugzilla_description":"CVE-2016-5824 libical: Multiple use-after-free vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:60.5.0-1.el6_10","thunderbird-0:60.5.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5824.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libicu-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libicu-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libicu-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libicu-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libicu-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libicu-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libicu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libicu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libicu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn2_security_api_results.json
new file mode 100644
index 0000000..73eeeb9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-18224","severity":"moderate","public_date":"2019-01-07T00:00:00Z","advisories":[],"bugzilla":"1764780","bugzilla_description":"CVE-2019-18224 libidn2: heap-based buffer overflow in idn2_to_ascii_4i in lib/lookup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn_security_api_results.json
new file mode 100644
index 0000000..7f8aae8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libidn_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-18224","severity":"moderate","public_date":"2019-01-07T00:00:00Z","advisories":[],"bugzilla":"1764780","bugzilla_description":"CVE-2019-18224 libidn2: heap-based buffer overflow in idn2_to_ascii_4i in lib/lookup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-14061","severity":"low","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1486881","bugzilla_description":"CVE-2017-14061 libidn2: integer overflow in bidi.c/_isBidi()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14061.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14062","severity":"low","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1486882","bugzilla_description":"CVE-2017-14062 libidn2: Integer overflow in puny_decode.c/decode_digit","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14062.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6261","severity":"low","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1359134","bugzilla_description":"CVE-2016-6261 libidn: Out of bounds stack read in idna_to_ascii_4i","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-6262","severity":"low","public_date":"2016-01-14T00:00:00Z","advisories":[],"bugzilla":"1359138","bugzilla_description":"CVE-2016-6262 libidn: Out-of-bounds read when reading zero byte as input","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6262.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-6263","severity":"low","public_date":"2016-01-14T00:00:00Z","advisories":[],"bugzilla":"1359145","bugzilla_description":"CVE-2016-6263 libidn: Crash when given invalid UTF-8 data on input","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6263.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8948","severity":"low","public_date":"2015-08-10T00:00:00Z","advisories":[],"bugzilla":"1359141","bugzilla_description":"CVE-2015-8948 libidn: Out-of-bounds read due to use of fgets with fixed-size buffer","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8948.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-2059","severity":"low","public_date":"2015-02-23T00:00:00Z","advisories":[],"bugzilla":"1197796","bugzilla_description":"CVE-2015-2059 libidn: out-of-bounds read with stringprep on invalid UTF-8","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2059.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiec61883-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiec61883-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiec61883-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiec61883_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiec61883_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiec61883_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libieee1284-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libieee1284-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libieee1284-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libieee1284_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libieee1284_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libieee1284_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libijs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libijs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libijs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libimobiledevice-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libimobiledevice-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libimobiledevice-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libimobiledevice_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libimobiledevice_security_api_results.json
new file mode 100644
index 0000000..c56c5a2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libimobiledevice_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-5104","severity":"low","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1339988","bugzilla_description":"CVE-2016-5104 libimobiledevice: Sockets listening on INADDR_ANY","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5104.json"},{"CVE":"CVE-2013-2142","severity":"low","public_date":"2013-05-31T00:00:00Z","advisories":[],"bugzilla":"970172","bugzilla_description":"CVE-2013-2142 libimobiledevice: Insecure temporary file use when both $XDG_CONFIG_HOME and $HOME are unset","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2142.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libindicator-gtk3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libindicator-gtk3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libindicator-gtk3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libindicator-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libindicator-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libindicator-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libini_config-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libini_config-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libini_config-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libini_config_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libini_config_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libini_config_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libinput-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libinput-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libinput-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libinput-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libinput-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libinput-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libinput_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libinput_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libinput_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libipa_hbac_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libipa_hbac_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libipa_hbac_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libipt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libipt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libipt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiptcdata_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiptcdata_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiptcdata_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiscsi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiscsi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiscsi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiscsi-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiscsi-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiscsi-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiscsi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiscsi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libiscsi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisoburn-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisoburn-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisoburn-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisoburn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisoburn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisoburn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisofs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisofs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisofs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisofs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisofs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libisofs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libitm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libitm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libitm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libitm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libitm_security_api_results.json
new file mode 100644
index 0000000..47906ba
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libitm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-6131","severity":null,"public_date":"2016-06-29T00:00:00Z","advisories":[],"bugzilla":"1352068","bugzilla_description":"CVE-2016-6131 gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjose-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjose-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjose-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjose_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjose_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjose_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjpeg-turbo-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjpeg-turbo-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjpeg-turbo-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjpeg-turbo-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjpeg-turbo-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjpeg-turbo-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjpeg-turbo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjpeg-turbo_security_api_results.json
new file mode 100644
index 0000000..c1cb602
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libjpeg-turbo_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14152","severity":"moderate","public_date":"2020-06-11T00:00:00Z","advisories":[],"bugzilla":"1849026","bugzilla_description":"CVE-2020-14152 libjpeg: improper handling of max_memory_to_use setting can lead to excessive memory consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14152.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-14151","severity":null,"public_date":"2020-06-11T00:00:00Z","advisories":[],"bugzilla":"1849031","bugzilla_description":"CVE-2020-14151 libjpeg: read_*_pixel functions in rdtarga.c in cjpeg mishandles EOF","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14151.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-14153","severity":"moderate","public_date":"2020-06-11T00:00:00Z","advisories":[],"bugzilla":"1849032","bugzilla_description":"CVE-2020-14153 libjpeg: out-of-bounds read for certain table pointers in jdhuff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14153.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-13790","severity":"moderate","public_date":"2020-05-25T00:00:00Z","advisories":[],"bugzilla":"1847155","bugzilla_description":"CVE-2020-13790 libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13790.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-13960","severity":"low","public_date":"2019-07-18T00:00:00Z","advisories":[],"bugzilla":"1734637","bugzilla_description":"CVE-2019-13960 libjpeg-turbo: denial of service due to incorrect width and height value of JPEG image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13960.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-2201","severity":"moderate","public_date":"2019-07-05T00:00:00Z","advisories":[],"bugzilla":"1770982","bugzilla_description":"CVE-2019-2201 libjpeg-turbo: several integer overflows and subsequent segfaults when attempting to compress/decompress gigapixel images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2201.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-19664","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1656218","bugzilla_description":"CVE-2018-19664 libjpeg-turbo: heap-based buffer over-read in the put_pixel_rows function in wrbmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-20330","severity":"low","public_date":"2018-11-25T00:00:00Z","advisories":[],"bugzilla":"1665223","bugzilla_description":"CVE-2018-20330 libjpeg-turbo: heap-based buffer overflow in tjLoadImage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20330.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-14498","severity":"moderate","public_date":"2018-07-20T00:00:00Z","advisories":["RHSA-2019:2052","RHSA-2019:3705"],"bugzilla":"1687424","bugzilla_description":"CVE-2018-14498 libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libjpeg-turbo-0:1.5.3-10.el8","libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14498.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-1152","severity":"low","public_date":"2018-06-13T00:00:00Z","advisories":[],"bugzilla":"1593554","bugzilla_description":"CVE-2018-1152 libjpeg-turbo: Divide by zero allows for denial of service via crafted BMP image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1152.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-11813","severity":"low","public_date":"2018-06-07T00:00:00Z","advisories":["RHSA-2019:2052"],"bugzilla":"1588803","bugzilla_description":"CVE-2018-11813 libjpeg: \"cjpeg\" utility large loop because read_pixel in rdtarga.c mishandles EOF","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11813.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11212","severity":"low","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0472","RHSA-2019:0640","RHSA-2019:0469","RHSA-2019:1238","RHSA-2019:2052"],"bugzilla":"1579973","bugzilla_description":"CVE-2018-11212 libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.30-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el6_10","java-1.7.1-ibm-1:1.7.1.4.40-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.35-3.el8_0","libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11212.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-11213","severity":"low","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2019:2052"],"bugzilla":"1579979","bugzilla_description":"CVE-2018-11213 libjpeg: Segmentation fault in get_text_gray_row function in rdppm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11213.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-11214","severity":"low","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2019:2052"],"bugzilla":"1579980","bugzilla_description":"CVE-2018-11214 libjpeg: Segmentation fault in get_text_rgb_row function in rdppm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-15232","severity":"low","public_date":"2017-09-30T00:00:00Z","advisories":[],"bugzilla":"1500678","bugzilla_description":"CVE-2017-15232 libjpeg-turbo: NULL pointer dereference in jdpostct.c and jquant1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9614","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475742","bugzilla_description":"CVE-2017-9614 libjpeg-turbo: Invalid memory access in the fill_input_buffer function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9614.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-3616","severity":"moderate","public_date":"2016-03-30T00:00:00Z","advisories":["RHSA-2019:2052"],"bugzilla":"1319661","bugzilla_description":"CVE-2016-3616 libjpeg: null pointer dereference in cjpeg","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3616.json"},{"CVE":"CVE-2014-9092","severity":"low","public_date":"2014-10-26T00:00:00Z","advisories":[],"bugzilla":"1169845","bugzilla_description":"CVE-2014-9092 libjpeg-turbo: denial of service via specially-crafted JPEG file","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9092.json"},{"CVE":"CVE-2013-6629","severity":"moderate","public_date":"2013-11-12T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2013:1803","RHSA-2013:1804","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508","RHSA-2014:0509"],"bugzilla":"1031734","bugzilla_description":"CVE-2013-6629 libjpeg: information leak (read of uninitialized memory)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5","libjpeg-0:6b-38","libjpeg-turbo-0:1.2.1-3.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6629.json"},{"CVE":"CVE-2013-6630","severity":"moderate","public_date":"2013-11-12T00:00:00Z","advisories":["RHSA-2013:1803"],"bugzilla":"1031749","bugzilla_description":"CVE-2013-6630 libjpeg: information leak (read of uninitialized memory)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":["libjpeg-turbo-0:1.2.1-3.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6630.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkadm5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkadm5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkadm5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkcapi-hmaccalc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkcapi-hmaccalc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkcapi-hmaccalc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkcapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkcapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkcapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkeepalive_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkeepalive_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkeepalive_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkkc-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkkc-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkkc-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkkc-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkkc-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkkc-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkkc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkkc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libkkc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-bzip2-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-bzip2-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-bzip2-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-lz4-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-lz4-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-lz4-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-lzma-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-lzma-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-lzma-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-lzo2-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-lzo2-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-lzo2-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-plugins-all_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-plugins-all_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-plugins-all_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-zlib-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-zlib-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-compress-zlib-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-crypto-nss-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-crypto-nss-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-crypto-nss-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-crypto-openssl-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-crypto-openssl-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-crypto-openssl-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-crypto-plugins-all_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-crypto-plugins-all_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-crypto-plugins-all_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-plugins-all_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-plugins-all_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1-plugins-all_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libknet1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libksba-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libksba-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libksba-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libksba_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libksba_security_api_results.json
new file mode 100644
index 0000000..dde25d2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libksba_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-4574","severity":"moderate","public_date":"2016-05-10T00:00:00Z","advisories":[],"bugzilla":"1334831","bugzilla_description":"CVE-2016-4574 libksba: Incomplete fix for CVE-2016-4356","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-172","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4574.json"},{"CVE":"CVE-2016-4579","severity":"moderate","public_date":"2016-05-10T00:00:00Z","advisories":[],"bugzilla":"1335396","bugzilla_description":"CVE-2016-4579 libksba: Out-of-bounds read in _ksba_ber_parse_tl","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4579.json"},{"CVE":"CVE-2016-4356","severity":"moderate","public_date":"2015-04-08T00:00:00Z","advisories":[],"bugzilla":"1211259","bugzilla_description":"CVE-2016-4356 libksba: encoding of invalid utf-8 strings in DN decoder src/dn.c (append_quoted, append_atv)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-172","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4356.json"},{"CVE":"CVE-2016-4354","severity":"moderate","public_date":"2015-04-08T00:00:00Z","advisories":[],"bugzilla":"1211260","bugzilla_description":"CVE-2016-4354 CVE-2016-4355 libksba: integer overflow in the BER decoder src/ber-decoder.c (ber_decoder_s)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4354.json"},{"CVE":"CVE-2016-4355","severity":"moderate","public_date":"2015-04-08T00:00:00Z","advisories":[],"bugzilla":"1211260","bugzilla_description":"CVE-2016-4354 CVE-2016-4355 libksba: integer overflow in the BER decoder src/ber-decoder.c (ber_decoder_s)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4355.json"},{"CVE":"CVE-2016-4353","severity":"low","public_date":"2015-04-08T00:00:00Z","advisories":[],"bugzilla":"1211261","bugzilla_description":"CVE-2016-4353 libksba: denial of service due to stack overflow in src/ber-decoder.c (push_decoder_state, pop_decoder_state)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4353.json"},{"CVE":"CVE-2014-9087","severity":"moderate","public_date":"2014-11-25T00:00:00Z","advisories":[],"bugzilla":"1168051","bugzilla_description":"CVE-2014-9087 libksba: integer underflow flaw leading to a heap-based buffer overflow in ksba_oid_to_str()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9087.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-gobject_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-gobject_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag-gobject_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblangtag_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblayout_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblayout_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblayout_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libldb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libldb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libldb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libldb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libldb_security_api_results.json
new file mode 100644
index 0000000..ac88381
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libldb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10730","severity":"moderate","public_date":"2020-07-02T00:00:00Z","advisories":["RHSA-2020:3119","RHSA-2020:3118"],"bugzilla":"1849489","bugzilla_description":"CVE-2020-10730 samba: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and paged_results","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["samba-0:4.11.6-107.el8rhgs","samba-0:4.11.6-107.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10730.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3824","severity":"moderate","public_date":"2019-02-25T00:00:00Z","advisories":[],"bugzilla":"1671845","bugzilla_description":"CVE-2019-3824 samba: Out of bound read in ldb_wildcard_compare in Samba AD DC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3824.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1140","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":[],"bugzilla":"1580230","bugzilla_description":"CVE-2018-1140 libldb: LDAP server crash via distinguishedName","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1140.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2015-5330","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0010","RHSA-2016:0009","RHSA-2016:0014","RHSA-2016:0015","RHSA-2016:0016","RHSA-2016:0006"],"bugzilla":"1281326","bugzilla_description":"CVE-2015-5330 samba, libldb: remote memory read in the Samba LDAP server","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-135","affected_packages":["samba-0:4.1.17-16.el6rhs","libldb-0:1.1.20-3.el7rhgs","libldb-0:1.1.20-1.el7_2.2","libldb-0:1.1.13-3.el6_7.1","samba-0:4.2.4-9.1.el7rhgs","libldb-0:1.1.20-3.el6rhs","samba4-0:4.0.0-67.el6_7.rc4","samba-0:4.2.3-11.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5330.json"},{"CVE":"CVE-2015-3223","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0009","RHSA-2016:0014"],"bugzilla":"1290287","bugzilla_description":"CVE-2015-3223 libldb: Remote DoS in Samba (AD) LDAP server","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["libldb-0:1.1.20-3.el7rhgs","libldb-0:1.1.20-1.el7_2.2","libldb-0:1.1.13-3.el6_7.1","libldb-0:1.1.20-3.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3223.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libloader_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libloader_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libloader_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblockfile-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblockfile-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblockfile-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblockfile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblockfile_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblockfile_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblognorm-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblognorm-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblognorm-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblognorm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblognorm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblognorm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblouis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblouis_security_api_results.json
new file mode 100644
index 0000000..f591ab4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblouis_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-17294","severity":"low","public_date":"2018-09-24T00:00:00Z","advisories":[],"bugzilla":"1632834","bugzilla_description":"CVE-2018-17294 liblouis: Stack-based buffer over-read in matchCurrentInput function lou_translateString.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17294.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-11683","severity":"moderate","public_date":"2018-06-06T00:00:00Z","advisories":[],"bugzilla":"1588624","bugzilla_description":"CVE-2018-11683 liblouis: Stack-based buffer overflow in function parseChars in compileTranslationTable.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11683.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-11684","severity":"moderate","public_date":"2018-06-06T00:00:00Z","advisories":["RHSA-2020:1708"],"bugzilla":"1588631","bugzilla_description":"CVE-2018-11684 liblouis: Stack-based buffer overflow in function includeFile in compileTranslationTable.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["liblouis-0:2.6.2-21.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11684.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-11685","severity":"moderate","public_date":"2018-06-06T00:00:00Z","advisories":["RHSA-2020:1708"],"bugzilla":"1588636","bugzilla_description":"CVE-2018-11685 liblouis: Stack-based buffer overflow in function compileHyphenation in compileTranslationTable.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["liblouis-0:2.6.2-21.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11685.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-12085","severity":"low","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2020:1708"],"bugzilla":"1589940","bugzilla_description":"CVE-2018-12085 liblouis: Stack-based buffer overflow in compileTranslationTable.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["liblouis-0:2.6.2-21.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12085.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11577","severity":"low","public_date":"2018-05-30T00:00:00Z","advisories":["RHSA-2020:1708"],"bugzilla":"1585905","bugzilla_description":"CVE-2018-11577 liblouis: Segmentation fault in logging.c:lou_logPrint()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["liblouis-0:2.6.2-21.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-11440","severity":"low","public_date":"2018-05-25T00:00:00Z","advisories":[],"bugzilla":"1582658","bugzilla_description":"CVE-2018-11440 liblouis: Stack-based Buffer Overflow in parseChars function in compileTranslationTable.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11440.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11410","severity":"low","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1582304","bugzilla_description":"CVE-2018-11410 liblouis: invalid free in compileRule function in compileTranslationTable.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11410.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-15101","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2017:3384"],"bugzilla":"1511023","bugzilla_description":"CVE-2017-15101 liblouis: incomplete fix for CVE-2014-8184","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["liblouis-0:2.5.2-12.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15101.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2014-8184","severity":"moderate","public_date":"2017-10-09T00:00:00Z","advisories":["RHSA-2017:3111"],"bugzilla":"1492701","bugzilla_description":"CVE-2014-8184 liblouis: stack-based buffer overflow in findTable()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["liblouis-0:2.5.2-11.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8184.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-13738","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":["RHSA-2017:3111"],"bugzilla":"1488933","bugzilla_description":"CVE-2017-13738 liblouis: Illegal address access in the _lou_getALine function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["liblouis-0:2.5.2-11.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13738.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-13744","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":["RHSA-2017:3111"],"bugzilla":"1488935","bugzilla_description":"CVE-2017-13744 liblouis: Illegal address access in the _lou_getALine() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["liblouis-0:2.5.2-11.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13744.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-13739","severity":"moderate","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488936","bugzilla_description":"CVE-2017-13739 liblouis: Heap-buffer overflow resulting in an out-of-bounds write in resolveSubtable() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13739.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-13740","severity":"moderate","public_date":"2017-08-23T00:00:00Z","advisories":["RHSA-2017:3111"],"bugzilla":"1488937","bugzilla_description":"CVE-2017-13740 liblouis: Stack-buffer overflow in the parseChars() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["liblouis-0:2.5.2-11.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13740.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-13741","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":["RHSA-2017:3111"],"bugzilla":"1488938","bugzilla_description":"CVE-2017-13741 liblouis: Use-after-free in the function compileBrailleIndicator()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["liblouis-0:2.5.2-11.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13741.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13742","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":["RHSA-2017:3111"],"bugzilla":"1488939","bugzilla_description":"CVE-2017-13742 liblouis: Stack-buffer overflow in the function includeFile()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["liblouis-0:2.5.2-11.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13742.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13743","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":["RHSA-2017:3111"],"bugzilla":"1488942","bugzilla_description":"CVE-2017-13743 liblouis: Buffer overflow in the function _lou_showString()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["liblouis-0:2.5.2-11.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13743.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblsan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblsan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liblsan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libluksmeta-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libluksmeta-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libluksmeta-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libluksmeta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libluksmeta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libluksmeta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmad-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmad-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmad-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmad_security_api_results.json
new file mode 100644
index 0000000..845706f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmad_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-7263","severity":"low","public_date":"2018-02-20T00:00:00Z","advisories":["RHSA-2020:1631"],"bugzilla":"1547504","bugzilla_description":"CVE-2018-7263 libmad: Double-free in the mad_decoder_run() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libmad-0:0.15.1b-25.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7263.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmalaga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmalaga_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmalaga_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmatchbox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmatchbox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmatchbox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmaxminddb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmaxminddb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmaxminddb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmaxminddb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmaxminddb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmaxminddb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmbim-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmbim-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmbim-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmbim_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmbim_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmbim_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmcpp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmcpp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmcpp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmediaart_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmediaart_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmediaart_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmemcached-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmemcached-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmemcached-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmemcached-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmemcached-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmemcached-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmemcached_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmemcached_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmemcached_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmetalink_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmetalink_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmetalink_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmicrohttpd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmicrohttpd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmicrohttpd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmicrohttpd-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmicrohttpd-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmicrohttpd-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmicrohttpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmicrohttpd_security_api_results.json
new file mode 100644
index 0000000..6f0975b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmicrohttpd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7038","severity":"important","public_date":"2013-11-28T00:00:00Z","advisories":[],"bugzilla":"1039384","bugzilla_description":"CVE-2013-7038 libmicrohttpd: out-of-bounds read in MHD_http_unescape()","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7038.json"},{"CVE":"CVE-2013-7039","severity":"moderate","public_date":"2013-11-28T00:00:00Z","advisories":[],"bugzilla":"1039390","bugzilla_description":"CVE-2013-7039 libmicrohttpd: stack overflow in MHD_digest_auth_check()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7039.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmng-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmng-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmng-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmnl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmnl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmnl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmnl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmnl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmnl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodman_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodman_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodman_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodulemd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodulemd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodulemd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodulemd1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodulemd1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodulemd1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodulemd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodulemd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmodulemd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmount-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmount-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmount-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmount_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmount_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmount_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpcdec-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpcdec-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpcdec-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpcdec_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpcdec_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmpcdec_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmspack-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmspack-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmspack-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmspack_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmspack_security_api_results.json
new file mode 100644
index 0000000..72c41a5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmspack_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-1010305","severity":"low","public_date":"2019-07-15T00:00:00Z","advisories":["RHSA-2020:1686","RHBA-2020:3180","RHSA-2020:3848"],"bugzilla":"1730568","bugzilla_description":"CVE-2019-1010305 libmspack: buffer overflow in function chmd_read_headers()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["libmspack-0:0.5-0.8.alpha.el7","libmspack-0:0.7-0.3.alpha.el8.4","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010305.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2018-18584","severity":"moderate","public_date":"2018-10-17T00:00:00Z","advisories":["RHSA-2019:2049"],"bugzilla":"1644214","bugzilla_description":"CVE-2018-18584 libmspack: Out-of-bounds write in mspack/cab.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libmspack-0:0.5-0.7.alpha.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18584.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-18585","severity":"low","public_date":"2018-10-17T00:00:00Z","advisories":["RHSA-2019:2049"],"bugzilla":"1644215","bugzilla_description":"CVE-2018-18585 libmspack: chmd_read_headers() fails to reject filenames containing NULL bytes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libmspack-0:0.5-0.7.alpha.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18585.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18586","severity":"moderate","public_date":"2018-10-17T00:00:00Z","advisories":[],"bugzilla":"1644216","bugzilla_description":"CVE-2018-18586 libmspack: Directory traversal in chmextract.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18586.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14679","severity":"low","public_date":"2018-05-12T00:00:00Z","advisories":["RHSA-2018:3327"],"bugzilla":"1610890","bugzilla_description":"CVE-2018-14679 libmspack: off-by-one error in the CHM PMGI/PMGL chunk number validity checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["libmspack-0:0.5-0.6.alpha.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14679.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-14680","severity":"low","public_date":"2018-05-12T00:00:00Z","advisories":["RHSA-2018:3327"],"bugzilla":"1610934","bugzilla_description":"CVE-2018-14680 libmspack: off-by-one error in the CHM chunk number validity checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["libmspack-0:0.5-0.6.alpha.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14680.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-14682","severity":"low","public_date":"2018-02-06T00:00:00Z","advisories":["RHSA-2018:3327"],"bugzilla":"1610941","bugzilla_description":"CVE-2018-14682 libmspack: off-by-one error in the TOLOWER() macro for CHM decompression","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["libmspack-0:0.5-0.6.alpha.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14682.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-14681","severity":"low","public_date":"2017-11-26T00:00:00Z","advisories":["RHSA-2018:3327"],"bugzilla":"1610896","bugzilla_description":"CVE-2018-14681 libmspack: out-of-bounds write in kwajd_read_headers in mspack/kwajd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libmspack-0:0.5-0.6.alpha.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14681.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-11423","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":[],"bugzilla":"1472776","bugzilla_description":"CVE-2017-11423 libmspack, clamav: Stack-based buffer over-read in cabd_read_string function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11423.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-6419","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":[],"bugzilla":"1483909","bugzilla_description":"CVE-2017-6419 libmspack, clamav: heap-based buffer overflow in mspack/lzxd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6419.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmspub_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmspub_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmspub_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmtp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmtp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmtp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmtp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmtp_security_api_results.json
new file mode 100644
index 0000000..c67bedc
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmtp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-9831","severity":"low","public_date":"2017-03-16T00:00:00Z","advisories":[],"bugzilla":"1465038","bugzilla_description":"CVE-2017-9831 libmtp: Integer overflow in ptp_unpack_EOS_CustomFuncEx","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9831.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-9832","severity":"low","public_date":"2017-03-16T00:00:00Z","advisories":[],"bugzilla":"1465040","bugzilla_description":"CVE-2017-9832 libmtp: Integer overflow in ptp_unpack_OPL function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9832.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmusicbrainz5-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmusicbrainz5-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmusicbrainz5-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmusicbrainz5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmusicbrainz5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmusicbrainz5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmwaw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmwaw_security_api_results.json
new file mode 100644
index 0000000..e1cccea
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libmwaw_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-9433","severity":"moderate","public_date":"2017-04-08T00:00:00Z","advisories":[],"bugzilla":"1461762","bugzilla_description":"CVE-2017-9433 libmwaw: Out-of-bounds write in the MsWrd1Parser::readFootnoteCorrespondence function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9433.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"8.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libndp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libndp_security_api_results.json
new file mode 100644
index 0000000..52b7018
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libndp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-3698","severity":"moderate","public_date":"2016-05-17T00:00:00Z","advisories":["RHSA-2016:1086"],"bugzilla":"1329366","bugzilla_description":"CVE-2016-3698 libndp: denial of service due to insufficient validation of source of NDP messages","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["libndp-0:1.2-6.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3698.json"},{"CVE":"CVE-2014-3554","severity":"moderate","public_date":"2014-07-29T00:00:00Z","advisories":[],"bugzilla":"1118583","bugzilla_description":"CVE-2014-3554 libndp: buffer overflow flaw in DNS Search List (DNSSL) handling","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3554.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnet-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnet-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnet-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_conntrack-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_conntrack-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_conntrack-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_conntrack_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_conntrack_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_conntrack_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_cthelper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_cthelper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_cthelper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_cttimeout_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_cttimeout_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_cttimeout_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_queue-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_queue-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_queue-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_queue_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_queue_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnetfilter_queue_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfnetlink-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfnetlink-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfnetlink-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfnetlink_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfnetlink_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfnetlink_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfsidmap-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfsidmap-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfsidmap-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfsidmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfsidmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnfsidmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnftnl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnftnl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnftnl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnftnl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnftnl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnftnl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnghttp2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnghttp2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnghttp2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnghttp2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnghttp2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnghttp2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnice-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnice-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnice-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnice-gstreamer1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnice-gstreamer1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnice-gstreamer1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnice_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnice_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnice_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3_security_api_results.json
new file mode 100644
index 0000000..883b037
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnl3_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-0553","severity":"moderate","public_date":"2017-02-07T00:00:00Z","advisories":["RHSA-2017:2299"],"bugzilla":"1440788","bugzilla_description":"CVE-2017-0553 libnl: Integer overflow in nlmsg_reserve()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["libnl3-0:3.2.28-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0553.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-0386","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":[],"bugzilla":"1414304","bugzilla_description":"CVE-2017-0386 libnl: Privilege escalation due to insufficient data checks in nla_reserve and nla_put","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0386.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnma-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnma-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnma-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnma_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnma_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnma_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnotify-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnotify-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnotify-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnotify_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnotify_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnotify_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnozzle1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnozzle1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnozzle1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnsl2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnsl2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnsl2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnsl2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnsl2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnsl2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnsl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnsl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libnsl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liboauth-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liboauth-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liboauth-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liboauth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liboauth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liboauth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libocxl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libocxl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libocxl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libocxl-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libocxl-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libocxl-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libocxl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libocxl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libocxl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libodfgen-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libodfgen-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libodfgen-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libodfgen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libodfgen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libodfgen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libogg-devel-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libogg-devel-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libogg-devel-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libogg-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libogg-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libogg-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libogg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libogg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libogg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liboggz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liboggz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liboggz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libomp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libomp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libomp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libomp-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libomp-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libomp-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libomp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libomp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libomp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw-gnome-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw-gnome-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw-gnome-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw-gnome_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw-gnome_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw-gnome_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libopenraw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liborcus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liborcus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liborcus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libosinfo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libosinfo_security_api_results.json
new file mode 100644
index 0000000..9ab5391
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libosinfo_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-13313","severity":"low","public_date":"2019-07-05T00:00:00Z","advisories":["RHSA-2019:3387","RHSA-2020:1051"],"bugzilla":"1727766","bugzilla_description":"CVE-2019-13313 Libosinfo: osinfo-install-script option leaks password via command line argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-214->CWE-200","affected_packages":["libosinfo-0:1.1.0-5.el7","libosinfo-0:1.5.0-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libotf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libotf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libotf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpagemaker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpagemaker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpagemaker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpaper-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpaper-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpaper-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpaper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpaper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpaper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpath_utils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpath_utils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpath_utils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpath_utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpath_utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpath_utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpcap-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpcap-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpcap-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpcap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpcap_security_api_results.json
new file mode 100644
index 0000000..58674eb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpcap_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-16301","severity":"low","public_date":"2019-09-30T00:00:00Z","advisories":[],"bugzilla":"1760500","bugzilla_description":"CVE-2018-16301 libpcap: Buffer overflow in pcapng reader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16301.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-15165","severity":"low","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1760618","bugzilla_description":"CVE-2019-15165 libpcap: Resource exhaustion while PHB header length validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15165.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15164","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1760619","bugzilla_description":"CVE-2019-15164 libpcap: Server side request forgery in rpcapd/daemon.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15164.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-15163","severity":"low","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1760621","bugzilla_description":"CVE-2019-15163 libpcap: Null pointer dereference in rpcapd/daemon.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15163.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15162","severity":"low","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1760622","bugzilla_description":"CVE-2019-15162 libpcap: Information disclosure in rpcapd/daemon.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15162.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-15161","severity":"low","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1760623","bugzilla_description":"CVE-2019-15161 libpcap: Mishandled length values in reused variables","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15161.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2014-4174","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":[],"bugzilla":"1086033","bugzilla_description":"CVE-2014-4174 libpcap: file parser crash (wnpa-sec-2014-05)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4174.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpciaccess-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpciaccess-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpciaccess-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpciaccess_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpciaccess_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpciaccess_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas-loader-python3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas-loader-python3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas-loader-python3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpeas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpfm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpfm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpfm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpfm-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpfm-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpfm-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpfm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpfm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpfm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpinyin-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpinyin-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpinyin-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpinyin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpinyin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpinyin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpipeline_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpipeline_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpipeline_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpkgconf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpkgconf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpkgconf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libplist-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libplist-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libplist-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libplist_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libplist_security_api_results.json
new file mode 100644
index 0000000..1fe4d90
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libplist_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-7982","severity":"low","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1445672","bugzilla_description":"CVE-2017-7982 libplist: Integer overflow in the plist_from_bin function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7982.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6437","severity":"low","public_date":"2017-02-24T00:00:00Z","advisories":[],"bugzilla":"1432954","bugzilla_description":"CVE-2017-6437 libplist: Out-of-bounds heap read in base64encode function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6437.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6438","severity":"low","public_date":"2017-02-24T00:00:00Z","advisories":[],"bugzilla":"1432956","bugzilla_description":"CVE-2017-6438 libplist: Heap-based buffer overflow in parse_unicode_node","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6438.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6440","severity":"low","public_date":"2017-02-24T00:00:00Z","advisories":[],"bugzilla":"1432965","bugzilla_description":"CVE-2017-6440 libplist: Memory allocation error in parse_data_node","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6440.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6436","severity":"low","public_date":"2017-02-08T00:00:00Z","advisories":[],"bugzilla":"1432951","bugzilla_description":"CVE-2017-6436 libplist: Integer overflow in parse_string_node","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6436.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6439","severity":"low","public_date":"2017-02-08T00:00:00Z","advisories":[],"bugzilla":"1432959","bugzilla_description":"CVE-2017-6439 libplist: Heap-based buffer overflow in parse_string_node","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6439.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6435","severity":"low","public_date":"2017-02-07T00:00:00Z","advisories":[],"bugzilla":"1432946","bugzilla_description":"CVE-2017-6435 libplist: Missing return value check from malloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6435.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5834","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1418591","bugzilla_description":"CVE-2017-5834 libplist: Heap-buffer overflow in parse_dict_node","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5834.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5835","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1418592","bugzilla_description":"CVE-2017-5835 libplist: Memory allocation error","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5835.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5545","severity":"low","public_date":"2017-01-17T00:00:00Z","advisories":[],"bugzilla":"1416002","bugzilla_description":"CVE-2017-5545 libplist: Out-of-bounds heap buffer read in plistutil","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5545.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5836","severity":"low","public_date":"2017-01-15T00:00:00Z","advisories":[],"bugzilla":"1418593","bugzilla_description":"CVE-2017-5836 libplist: Type inconsistency in bplist.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5836.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5209","severity":"low","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1412613","bugzilla_description":"CVE-2017-5209 libplist: base64decode buffer over-read via split encoded Apple Property List data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmem-debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmem-debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmem-debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmem-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmem-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmem-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemblk-debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemblk-debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemblk-debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemblk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemblk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemblk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemblk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemblk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemblk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemlog-debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemlog-debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemlog-debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemlog-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemlog-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemlog-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemlog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemlog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemlog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj++-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj++-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj++-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj++-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj++-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj++-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj-debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj-debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj-debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmemobj_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmempool-debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmempool-debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmempool-debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmempool-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmempool-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmempool-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmempool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmempool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpmempool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng12_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng12_security_api_results.json
new file mode 100644
index 0000000..19776a0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng12_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17371","severity":"low","public_date":"2019-07-11T00:00:00Z","advisories":[],"bugzilla":"1776981","bugzilla_description":"CVE-2019-17371 libpng: memory leaks in png_malloc_warn and png_create_info_struct","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17371.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-7317","severity":"low","public_date":"2019-01-25T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:2737","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:1309","RHSA-2019:1308","RHSA-2019:2590"],"bugzilla":"1672409","bugzilla_description":"CVE-2019-7317 libpng: use-after-free in png_image_free in png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","thunderbird-0:60.7.0-1.el6_10","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","firefox-0:60.7.0-1.el7_6","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-6129","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1667127","bugzilla_description":"CVE-2019-6129 libpng: memory leak of png_info struct in pngcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6129.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14550","severity":"moderate","public_date":"2018-07-21T00:00:00Z","advisories":[],"bugzilla":"1608800","bugzilla_description":"CVE-2018-14550 libpng: Stack-based buffer overflow in contrib/pngminus/pnm2png.c:get_token() potentially leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14550.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-14048","severity":"low","public_date":"2018-07-12T00:00:00Z","advisories":[],"bugzilla":"1608073","bugzilla_description":"CVE-2018-14048 libpng: Segmentation fault in png.c:png_free_data function causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14048.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-13785","severity":"low","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1599943","bugzilla_description":"CVE-2018-13785 libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-369","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-10087","severity":"low","public_date":"2016-12-29T00:00:00Z","advisories":[],"bugzilla":"1409617","bugzilla_description":"CVE-2016-10087 libpng: NULL pointer dereference in png_set_text_2()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8540","severity":"low","public_date":"2015-12-10T00:00:00Z","advisories":["RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0100","RHSA-2016:0101"],"bugzilla":"1291312","bugzilla_description":"CVE-2015-8540 libpng: underflow read in png_check_keyword()","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-125","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8540.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-8126","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8126.json"},{"CVE":"CVE-2015-8472","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8472.json"},{"CVE":"CVE-2015-7981","severity":"low","public_date":"2015-10-22T00:00:00Z","advisories":["RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0100","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595"],"bugzilla":"1276416","bugzilla_description":"CVE-2015-7981 libpng: Out-of-bounds read in png_convert_to_rfc1123","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","libpng12-0:1.2.50-7.el7_2","libpng-2:1.2.49-2.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7981.json"},{"CVE":"CVE-2014-9495","severity":"moderate","public_date":"2014-12-22T00:00:00Z","advisories":[],"bugzilla":"1179186","bugzilla_description":"CVE-2014-9495 libpng: buffer overflow in png_combine_row","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9495.json"},{"CVE":"CVE-2013-7353","severity":"moderate","public_date":"2014-04-11T00:00:00Z","advisories":[],"bugzilla":"1086514","bugzilla_description":"CVE-2013-7353 libpng: integer overflow leading to a heap-based buffer overflow in png_set_unknown_chunks()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7353.json"},{"CVE":"CVE-2013-7354","severity":"moderate","public_date":"2014-04-11T00:00:00Z","advisories":[],"bugzilla":"1086516","bugzilla_description":"CVE-2013-7354 libpng: integer overflow leading to a heap-based buffer overflow in png_set_sPLT() and png_set_text_2()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7354.json"},{"CVE":"CVE-2014-0333","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":[],"bugzilla":"1070985","bugzilla_description":"CVE-2014-0333 libpng: denial of service via png_push_read_chunk()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0333.json"},{"CVE":"CVE-2013-6954","severity":"low","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1045561","bugzilla_description":"CVE-2013-6954 libpng: unhandled zero-length PLTE chunk or NULL palette","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6954.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng15_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng15_security_api_results.json
new file mode 100644
index 0000000..2b0fb70
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng15_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17371","severity":"low","public_date":"2019-07-11T00:00:00Z","advisories":[],"bugzilla":"1776981","bugzilla_description":"CVE-2019-17371 libpng: memory leaks in png_malloc_warn and png_create_info_struct","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17371.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2015-8540","severity":"low","public_date":"2015-12-10T00:00:00Z","advisories":["RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0100","RHSA-2016:0101"],"bugzilla":"1291312","bugzilla_description":"CVE-2015-8540 libpng: underflow read in png_check_keyword()","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-125","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8540.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng_security_api_results.json
new file mode 100644
index 0000000..33844ec
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpng_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17371","severity":"low","public_date":"2019-07-11T00:00:00Z","advisories":[],"bugzilla":"1776981","bugzilla_description":"CVE-2019-17371 libpng: memory leaks in png_malloc_warn and png_create_info_struct","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17371.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12652","severity":"low","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2020:3901"],"bugzilla":"1733956","bugzilla_description":"CVE-2017-12652 libpng: does not check length of chunks against user limit","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["libpng-2:1.5.13-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-7317","severity":"low","public_date":"2019-01-25T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:2737","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:1309","RHSA-2019:1308","RHSA-2019:2590"],"bugzilla":"1672409","bugzilla_description":"CVE-2019-7317 libpng: use-after-free in png_image_free in png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","thunderbird-0:60.7.0-1.el6_10","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","firefox-0:60.7.0-1.el7_6","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-6129","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1667127","bugzilla_description":"CVE-2019-6129 libpng: memory leak of png_info struct in pngcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6129.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14550","severity":"moderate","public_date":"2018-07-21T00:00:00Z","advisories":[],"bugzilla":"1608800","bugzilla_description":"CVE-2018-14550 libpng: Stack-based buffer overflow in contrib/pngminus/pnm2png.c:get_token() potentially leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14550.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-14048","severity":"low","public_date":"2018-07-12T00:00:00Z","advisories":[],"bugzilla":"1608073","bugzilla_description":"CVE-2018-14048 libpng: Segmentation fault in png.c:png_free_data function causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14048.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-13785","severity":"low","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:3779","RHSA-2018:3008","RHSA-2018:3007","RHSA-2018:3534","RHSA-2018:3533","RHSA-2018:3852","RHSA-2018:3003","RHSA-2018:3002","RHSA-2018:3001","RHSA-2018:3672","RHSA-2018:3000","RHSA-2018:3671"],"bugzilla":"1599943","bugzilla_description":"CVE-2018-13785 libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-369","affected_packages":["java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el6","java-1.7.0-oracle-1:1.7.0.201-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.25-1jpp.1.el6_10","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.191-1jpp.1.el6","java-1.7.1-ibm-1:1.7.1.4.35-1jpp.1.el6_10","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-10087","severity":"low","public_date":"2016-12-29T00:00:00Z","advisories":[],"bugzilla":"1409617","bugzilla_description":"CVE-2016-10087 libpng: NULL pointer dereference in png_set_text_2()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8540","severity":"low","public_date":"2015-12-10T00:00:00Z","advisories":["RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0100","RHSA-2016:0101"],"bugzilla":"1291312","bugzilla_description":"CVE-2015-8540 libpng: underflow read in png_check_keyword()","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-125","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8540.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-8126","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8126.json"},{"CVE":"CVE-2015-8472","severity":"moderate","public_date":"2015-11-12T00:00:00Z","advisories":["RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0057","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595","RHSA-2015:2596"],"bugzilla":"1281756","bugzilla_description":"CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","libpng-2:1.5.13-7.el7_2","libpng12-0:1.2.50-7.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","libpng-2:1.2.49-2.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8472.json"},{"CVE":"CVE-2015-7981","severity":"low","public_date":"2015-10-22T00:00:00Z","advisories":["RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0100","RHSA-2016:0101","RHSA-2015:2594","RHSA-2015:2595"],"bugzilla":"1276416","bugzilla_description":"CVE-2015-7981 libpng: Out-of-bounds read in png_convert_to_rfc1123","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","libpng12-0:1.2.50-7.el7_2","libpng-2:1.2.49-2.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7981.json"},{"CVE":"CVE-2015-0973","severity":"critical","public_date":"2014-12-22T00:00:00Z","advisories":[],"bugzilla":"1177327","bugzilla_description":"CVE-2015-0973 libpng: Heap-buffer overflow png_combine_row() with very wide interlaced images","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0973.json"},{"CVE":"CVE-2014-9495","severity":"moderate","public_date":"2014-12-22T00:00:00Z","advisories":[],"bugzilla":"1179186","bugzilla_description":"CVE-2014-9495 libpng: buffer overflow in png_combine_row","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9495.json"},{"CVE":"CVE-2013-7353","severity":"moderate","public_date":"2014-04-11T00:00:00Z","advisories":[],"bugzilla":"1086514","bugzilla_description":"CVE-2013-7353 libpng: integer overflow leading to a heap-based buffer overflow in png_set_unknown_chunks()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7353.json"},{"CVE":"CVE-2013-7354","severity":"moderate","public_date":"2014-04-11T00:00:00Z","advisories":[],"bugzilla":"1086516","bugzilla_description":"CVE-2013-7354 libpng: integer overflow leading to a heap-based buffer overflow in png_set_sPLT() and png_set_text_2()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7354.json"},{"CVE":"CVE-2014-0333","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":[],"bugzilla":"1070985","bugzilla_description":"CVE-2014-0333 libpng: denial of service via png_push_read_chunk()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0333.json"},{"CVE":"CVE-2013-6954","severity":"low","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0982","RHSA-2014:0486","RHSA-2014:0414","RHSA-2014:0412","RHSA-2014:0413","RHSA-2014:0705","RHSA-2014:0508"],"bugzilla":"1045561","bugzilla_description":"CVE-2013-6954 libpng: unhandled zero-length PLTE chunk or NULL palette","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5","java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5","java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5","java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6954.json"},{"CVE":"CVE-2012-3425","severity":"low","public_date":"2012-04-08T00:00:00Z","advisories":[],"bugzilla":"813249","bugzilla_description":"CVE-2012-3425 libpng: Out-of heap-based buffer read by inflating certain PNG images","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3425.json"},{"CVE":"CVE-2011-3048","severity":"moderate","public_date":"2012-03-29T00:00:00Z","advisories":["RHSA-2012:0523"],"bugzilla":"808139","bugzilla_description":"CVE-2011-3048 libpng: memory corruption flaw","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libpng-2:1.2.10-17.el5_8","libpng-2:1.2.49-1.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3048.json"},{"CVE":"CVE-2011-3045","severity":"moderate","public_date":"2012-03-08T00:00:00Z","advisories":["RHSA-2012:0407"],"bugzilla":"799000","bugzilla_description":"CVE-2011-3045 libpng: buffer overflow in png_inflate caused by invalid type conversions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libpng-2:1.2.48-1.el6_2","libpng-2:1.2.10-16.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3045.json"},{"CVE":"CVE-2011-3026","severity":"important","public_date":"2012-02-16T00:00:00Z","advisories":["RHSA-2012:0317","RHSA-2012:0140","RHSA-2012:0141","RHSA-2012:0142","RHSA-2012:0143"],"bugzilla":"790737","bugzilla_description":"CVE-2011-3026 libpng: Heap buffer overflow in png_decompress_chunk (MFSA 2012-11)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["thunderbird-0:3.1.18-2.el6_2","firefox-0:3.6.26-3.el4","libpng-2:1.2.7-9.el4","seamonkey-0:1.0.9-79.el4","xulrunner-0:1.9.2.26-2.el5_7","libpng10-0:1.0.16-10.el4","libpng-2:1.2.10-15.el5_7","xulrunner-0:1.9.2.26-2.el6_2","libpng-2:1.2.46-2.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3026.json"},{"CVE":"CVE-2011-3464","severity":"important","public_date":"2012-02-01T00:00:00Z","advisories":[],"bugzilla":"843179","bugzilla_description":"CVE-2011-3464  libpng: One-byte stack buffer overrun in png_formatted_warning","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3464.json"},{"CVE":"CVE-2011-3328","severity":"moderate","public_date":"2011-09-22T00:00:00Z","advisories":[],"bugzilla":"740864","bugzilla_description":"CVE-2011-3328 libpng: malformed cHRM divide-by-zero vulnerability in 1.5.4","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3328.json"},{"CVE":"CVE-2011-2690","severity":"moderate","public_date":"2011-07-07T00:00:00Z","advisories":["RHSA-2011:1104","RHSA-2011:1105"],"bugzilla":"720607","bugzilla_description":"CVE-2011-2690 libpng: buffer overwrite in png_rgb_to_gray","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libpng-2:1.2.46-1.el6_1","libpng-2:1.2.10-7.1.el5_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2690.json"},{"CVE":"CVE-2011-2691","severity":"low","public_date":"2011-07-07T00:00:00Z","advisories":[],"bugzilla":"720608","bugzilla_description":"CVE-2011-2691 libpng: Crash in png_default_error due to use of NULL Pointer","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2691.json"},{"CVE":"CVE-2011-2692","severity":"moderate","public_date":"2011-07-07T00:00:00Z","advisories":["RHSA-2011:1103","RHSA-2011:1104","RHSA-2011:1105"],"bugzilla":"720612","bugzilla_description":"CVE-2011-2692 libpng: Invalid read when handling empty sCAL chunks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libpng-2:1.2.46-1.el6_1","libpng-2:1.2.10-7.1.el5_7.5","libpng-2:1.2.7-8.el4","libpng10-0:1.0.16-9.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2692.json"},{"CVE":"CVE-2011-2501","severity":"moderate","public_date":"2011-06-07T00:00:00Z","advisories":["RHSA-2011:1105"],"bugzilla":"717084","bugzilla_description":"CVE-2011-2501 libpng: regression of CVE-2004-0421 in 1.2.23+","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libpng-2:1.2.46-1.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2501.json"},{"CVE":"CVE-2011-0408","severity":"important","public_date":"2011-01-08T00:00:00Z","advisories":[],"bugzilla":"671502","bugzilla_description":"CVE-2011-0408 libpng: application crash or possible arbitrary code execution in libpng 1.5.0","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P/","CWE":"CWE-190->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0408.json"},{"CVE":"CVE-2010-1205","severity":"important","public_date":"2010-06-25T00:00:00Z","advisories":["RHSA-2010:0547","RHSA-2010:0546","RHSA-2010:0534","RHSA-2010:0545"],"bugzilla":"608238","bugzilla_description":"CVE-2010-1205 libpng: out-of-bounds memory write","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libpng-2:1.2.2-30","libpng-2:1.2.10-7.1.el5_5.3","seamonkey-0:1.0.9-0.57.el3","libpng-2:1.2.7-3.el4_8.3","seamonkey-0:1.0.9-60.el4","thunderbird-0:2.0.0.24-6.el5","libpng10-0:1.0.13-21","libpng10-0:1.0.16-3.el4_8.4","firefox-0:3.6.7-2.el4","firefox-0:3.6.7-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1205.json"},{"CVE":"CVE-2010-2249","severity":"low","public_date":"2010-06-25T00:00:00Z","advisories":["RHSA-2010:0534"],"bugzilla":"608644","bugzilla_description":"CVE-2010-2249 libpng: Memory leak when processing Physical Scale (sCAL) images","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["libpng-2:1.2.2-30","libpng-2:1.2.10-7.1.el5_5.3","libpng-2:1.2.7-3.el4_8.3","libpng10-0:1.0.13-21","libpng10-0:1.0.16-3.el4_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2249.json"},{"CVE":"CVE-2010-0205","severity":"moderate","public_date":"2010-03-01T00:00:00Z","advisories":["RHSA-2010:0534"],"bugzilla":"566234","bugzilla_description":"CVE-2010-0205 libpng: excessive memory consumption due to highly compressed huge ancillary chunk","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-409->CWE-400","affected_packages":["libpng-2:1.2.2-30","libpng-2:1.2.10-7.1.el5_5.3","libpng-2:1.2.7-3.el4_8.3","libpng10-0:1.0.13-21","libpng10-0:1.0.16-3.el4_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0205.json"},{"CVE":"CVE-2006-7244","severity":"low","public_date":"2009-08-01T00:00:00Z","advisories":[],"bugzilla":"690200","bugzilla_description":"libpng10, libpng: Memory leak by write of iCCP chunk with negative embedded profile length (CVE-2006-7244, CVE-2009-5063)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7244.json"},{"CVE":"CVE-2009-5063","severity":"low","public_date":"2009-08-01T00:00:00Z","advisories":[],"bugzilla":"690200","bugzilla_description":"libpng10, libpng: Memory leak by write of iCCP chunk with negative embedded profile length (CVE-2006-7244, CVE-2009-5063)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5063.json"},{"CVE":"CVE-2009-2042","severity":"low","public_date":"2009-06-04T00:00:00Z","advisories":["RHSA-2010:0534"],"bugzilla":"504782","bugzilla_description":"CVE-2009-2042 libpng: Interlaced Images Information Disclosure Vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libpng-2:1.2.2-30","libpng-2:1.2.10-7.1.el5_5.3","libpng-2:1.2.7-3.el4_8.3","libpng10-0:1.0.13-21","libpng10-0:1.0.16-3.el4_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2042.json"},{"CVE":"CVE-2009-0040","severity":"moderate","public_date":"2009-02-19T00:00:00Z","advisories":["RHSA-2009:0315","RHSA-2009:0333","RHSA-2009:0325","RHSA-2009:0340"],"bugzilla":"486355","bugzilla_description":"CVE-2009-0040 libpng arbitrary free() flaw","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libpng-2:1.0.14-12","seamonkey-0:1.0.9-38.el4","firefox-0:3.0.7-1.el4","seamonkey-0:1.0.9-0.30.el2","libpng-2:1.2.10-7.1.el5_3.2","seamonkey-0:1.0.9-0.34.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0040.json"},{"CVE":"CVE-2008-1382","severity":"low","public_date":"2008-04-12T00:00:00Z","advisories":["RHSA-2009:0333"],"bugzilla":"441839","bugzilla_description":"CVE-2008-1382 libpng unknown chunk handling flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libpng-2:1.0.14-12","libpng-2:1.2.10-7.1.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1382.json"},{"CVE":"CVE-2007-5269","severity":"moderate","public_date":"2007-09-11T00:00:00Z","advisories":["RHSA-2007:0992"],"bugzilla":"324771","bugzilla_description":"CVE-2007-5269 libpng DoS via multiple out-of-bounds reads","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libpng-2:1.0.14-11","libpng-2:1.2.10-7.1.el5_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5269.json"},{"CVE":"CVE-2007-2445","severity":"moderate","public_date":"2007-05-15T00:00:00Z","advisories":["RHSA-2007:0356"],"bugzilla":"239425","bugzilla_description":"CVE-2007-2445 libpng png_handle_tRNS flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libpng-2:1.0.14-10","libpng-2:1.2.10-7.0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2445.json"},{"CVE":"CVE-2006-5793","severity":"low","public_date":"2006-11-14T00:00:00Z","advisories":["RHSA-2007:0356"],"bugzilla":"215405","bugzilla_description":"CVE-2006-5793 libpng DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libpng-2:1.0.14-10","libpng-2:1.2.10-7.0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5793.json"},{"CVE":"CVE-2006-0481","severity":"moderate","public_date":"2004-12-03T00:00:00Z","advisories":["RHSA-2006:0205"],"bugzilla":"1618003","bugzilla_description":"CVE-2006-0481 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libpng-2:1.2.7-1.el4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0481.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpq-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpq-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpq-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpq_security_api_results.json
new file mode 100644
index 0000000..81ec28e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpq_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14349","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":["RHSA-2020:3669"],"bugzilla":"1865744","bugzilla_description":"CVE-2020-14349 postgresql: Uncontrolled search path element in logical replication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["postgresql:10-8020020200825115746.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14349.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-14350","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":["RHSA-2020:4295","RHSA-2020:3669"],"bugzilla":"1865746","bugzilla_description":"CVE-2020-14350 postgresql: Uncontrolled search path element in CREATE EXTENSION","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["postgresql:10-8020020200825115746.4cda2c84","rh-postgresql96-postgresql-0:9.6.19-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14350.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-1720","severity":"low","public_date":"2020-02-13T00:00:00Z","advisories":["RHSA-2020:0980","RHSA-2020:4295","RHBA-2020:2396","RHSA-2020:3669"],"bugzilla":"1798852","bugzilla_description":"CVE-2020-1720 postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["postgresql:10-8020020200825115746.4cda2c84","rh-postgresql10-postgresql-0:10.12-2.el7","rh-postgresql96-postgresql-0:9.6.19-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-10208","severity":"moderate","public_date":"2019-08-08T00:00:00Z","advisories":["RHSA-2020:4295","RHSA-2020:3669"],"bugzilla":"1734416","bugzilla_description":"CVE-2019-10208 postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":["postgresql:10-8020020200825115746.4cda2c84","rh-postgresql96-postgresql-0:9.6.19-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10208.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10209","severity":"low","public_date":"2019-08-08T00:00:00Z","advisories":[],"bugzilla":"1734447","bugzilla_description":"CVE-2019-10209 postgresql: Memory disclosure in cross-type comparison for hashed subplan","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10209.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-10210","severity":"moderate","public_date":"2019-08-08T00:00:00Z","advisories":[],"bugzilla":"1734453","bugzilla_description":"CVE-2019-10210 postgresql: Windows installer writes superuser password to unprotected temporary file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10210.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-10211","severity":"moderate","public_date":"2019-08-08T00:00:00Z","advisories":[],"bugzilla":"1734461","bugzilla_description":"CVE-2019-10211 postgresql: Windows installer bundled OpenSSL executes code from unprotected directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10164","severity":"moderate","public_date":"2019-06-20T00:00:00Z","advisories":["RHSA-2020:0980","RHEA-2020:0343","RHSA-2020:3669"],"bugzilla":"1719698","bugzilla_description":"CVE-2019-10164 postgresql: Stack-based buffer overflow via setting a password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libpq-0:12.1-3.el8","postgresql:10-8020020200825115746.4cda2c84","rh-postgresql10-postgresql-0:10.12-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10127","severity":"moderate","public_date":"2019-05-09T00:00:00Z","advisories":[],"bugzilla":"1707098","bugzilla_description":"CVE-2019-10127 postgresql: BigSQL installer does not clear permissive ACL entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10128","severity":"moderate","public_date":"2019-05-09T00:00:00Z","advisories":[],"bugzilla":"1707102","bugzilla_description":"CVE-2019-10128 postgresql: EnterpriseDB installer does not clear permissive ACL entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10128.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-10129","severity":"moderate","public_date":"2019-05-09T00:00:00Z","advisories":[],"bugzilla":"1707106","bugzilla_description":"CVE-2019-10129 postgresql: Memory disclosure in partition routing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10129.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10130","severity":"low","public_date":"2019-05-09T00:00:00Z","advisories":["RHSA-2020:4295","RHSA-2020:3669"],"bugzilla":"1707109","bugzilla_description":"CVE-2019-10130 postgresql: Selectivity estimators bypass row security policies","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["postgresql:10-8020020200825115746.4cda2c84","rh-postgresql96-postgresql-0:9.6.19-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10130.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-9193","severity":null,"public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1695982","bugzilla_description":"CVE-2019-9193 postgresql: Command injection via \"COPY TO/FROM PROGRAM\" function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-16850","severity":"important","public_date":"2018-11-08T00:00:00Z","advisories":["RHSA-2018:3757"],"bugzilla":"1645937","bugzilla_description":"CVE-2018-16850 postgresql: SQL injection in pg_upgrade and pg_dump, via CREATE TRIGGER ... REFERENCING","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":["rh-postgresql10-postgresql-0:10.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16850.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-10915","severity":"important","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2557","RHSA-2018:2511","RHSA-2018:2566","RHSA-2018:2643","RHSA-2018:2565"],"bugzilla":"1609891","bugzilla_description":"CVE-2018-10915 postgresql: Certain host connection parameters defeat client-side security defenses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665->(CWE-200|CWE-89)","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","postgresql-0:9.2.24-1.el7_5","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rhvm-appliance-0:4.2-20180828.0.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10915.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2018-10925","severity":"important","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566","RHSA-2018:2565"],"bugzilla":"1612619","bugzilla_description":"CVE-2018-10925 postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-bin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-bin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-bin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-gnome_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-gnome_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-gnome_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-networkmanager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-networkmanager_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-networkmanager_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-webkitgtk4_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-webkitgtk4_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy-webkitgtk4_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy_security_api_results.json
new file mode 100644
index 0000000..6cccc2e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libproxy_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-25219","severity":"moderate","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1880349","bugzilla_description":"CVE-2020-25219 libproxy: uncontrolled recursion via an infinite stream response leading to stack exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25219.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-26154","severity":"moderate","public_date":"2020-07-16T00:00:00Z","advisories":[],"bugzilla":"1869639","bugzilla_description":"CVE-2020-26154 libproxy: sending more than 102400 bytes in PAC without a Content-Length present could result in buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26154.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2012-5580","severity":"low","public_date":"2012-11-24T00:00:00Z","advisories":[],"bugzilla":"883100","bugzilla_description":"CVE-2012-5580 libproxy: format string flaw in bin/proxy","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5580.json"},{"CVE":"CVE-2012-4505","severity":"moderate","public_date":"2012-10-12T00:00:00Z","advisories":["RHSA-2012:1461"],"bugzilla":"864612","bugzilla_description":"CVE-2012-4505 libproxy: PAC handling insufficient content length check leading to buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libproxy-0:0.3.0-3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4505.json"},{"CVE":"CVE-2012-4504","severity":"moderate","public_date":"2012-10-10T00:00:00Z","advisories":[],"bugzilla":"864417","bugzilla_description":"CVE-2012-4504 libproxy: long proxy.pac file handling buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4504.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsm2-compat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsm2-compat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsm2-compat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsm2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsm2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsm2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsm2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsm2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpsm2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpst-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpst-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpst-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpurple-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpurple-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpurple-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpurple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpurple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpurple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpwquality-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpwquality-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpwquality-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpwquality_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpwquality_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libpwquality_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqb_security_api_results.json
new file mode 100644
index 0000000..95a88f7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-12779","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":["RHSA-2020:1189","RHSA-2019:3610"],"bugzilla":"1695948","bugzilla_description":"CVE-2019-12779 libqb: Insecure treatment of IPC (temporary) files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["libqb-0:1.0.1-9.el7","libqb-0:1.0.3-10.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12779.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqhull_p_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqhull_p_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqhull_p_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqhull_r_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqhull_r_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqhull_r_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqhull_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqhull_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqhull_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqmi-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqmi-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqmi-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqmi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqmi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqmi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquadmath-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquadmath-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquadmath-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquadmath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquadmath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquadmath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquvi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquvi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquvi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquvi-scripts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquvi-scripts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquvi-scripts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquvi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquvi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libquvi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqxp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqxp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libqxp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librabbitmq-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librabbitmq-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librabbitmq-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librabbitmq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librabbitmq_security_api_results.json
new file mode 100644
index 0000000..d87f5f1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librabbitmq_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-18609","severity":"moderate","public_date":"2019-12-01T00:00:00Z","advisories":["RHSA-2020:3949"],"bugzilla":"1786646","bugzilla_description":"CVE-2019-18609 librabbitmq: integer overflow in amqp_handle_input in amqp_connection.c leads to heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["librabbitmq-0:0.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18609.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librados-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librados-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librados-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librados2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librados2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librados2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libradosstriper-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libradosstriper-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libradosstriper-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libradosstriper1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libradosstriper1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libradosstriper1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libraw1394-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libraw1394-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libraw1394-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libraw1394_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libraw1394_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libraw1394_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librbd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librbd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librbd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librbd1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librbd1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librbd1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdkafka-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdkafka-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdkafka-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdkafka_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdkafka_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdkafka_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdmacm-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdmacm-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdmacm-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdmacm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdmacm_security_api_results.json
new file mode 100644
index 0000000..0c593db
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librdmacm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-4516","severity":"low","public_date":"2012-10-08T00:00:00Z","advisories":["RHSA-2013:1661"],"bugzilla":"865483","bugzilla_description":"CVE-2012-4516 librdmacm: Tried to connect to port 6125 if ibacm.port was not found","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["librdmacm-0:1.0.17-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4516.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libref_array-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libref_array-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libref_array-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libref_array_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libref_array_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libref_array_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librelp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librelp_security_api_results.json
new file mode 100644
index 0000000..c1dcf59
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librelp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1000140","severity":"critical","public_date":"2018-03-23T00:00:00Z","advisories":["RHSA-2018:1703","RHSA-2018:1704","RHSA-2018:1701","RHSA-2018:1702","RHSA-2018:1225","RHSA-2018:1223","RHSA-2018:1707"],"bugzilla":"1560084","bugzilla_description":"CVE-2018-1000140 librelp: Stack-based buffer overflow in relpTcpChkPeerName function in src/tcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["librelp-0:1.2.0-4.el7_3","librelp-0:1.2.0-4.el7_2","librelp-0:1.2.7-3.el6_6.1","librelp-0:1.2.7-3.el6_7.1","librelp-0:1.2.7-3.el6_9.1","librelp-0:1.2.12-1.el7_4.1","librelp-0:1.2.12-1.el7_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000140.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-calc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-calc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-calc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-draw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-draw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-draw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-emailmerge_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-emailmerge_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-emailmerge_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-filters_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-filters_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-filters_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-gdb-debug-support_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-gdb-debug-support_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-gdb-debug-support_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-graphicfilter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-graphicfilter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-graphicfilter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-gtk2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-gtk2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-gtk2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-bg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-bg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-bg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-bn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-bn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-bn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-cs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-cs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-cs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-da_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-da_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-da_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-de_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-de_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-de_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-dz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-dz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-dz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-el_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-el_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-el_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-en_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-en_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-en_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-es_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-es_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-es_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-et_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-et_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-et_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-eu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-eu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-eu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-fi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-fi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-fi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-fr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-fr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-fr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-gl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-gl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-gl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-gu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-gu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-gu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-he_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-he_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-he_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-hi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-hi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-hi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-hr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-hr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-hr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-hu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-hu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-hu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-id_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-id_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-id_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-it_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-it_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-it_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ja_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ja_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ja_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-lt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-lt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-lt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-lv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-lv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-lv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-nb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-nb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-nb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-nl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-nl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-nl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-nn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-nn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-nn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-pl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-pl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-pl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-pt-BR_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-pt-BR_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-pt-BR_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-pt-PT_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-pt-PT_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-pt-PT_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ru_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ru_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ru_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-si_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-si_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-si_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-sk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-sk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-sk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-sl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-sl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-sl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-sv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-sv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-sv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-ta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-tr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-tr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-tr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-uk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-uk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-uk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-zh-Hans_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-zh-Hans_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-zh-Hans_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-zh-Hant_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-zh-Hant_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-help-zh-Hant_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-impress_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-impress_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-impress_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-af_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-af_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-af_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-as_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-as_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-as_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-bg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-bg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-bg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-bn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-bn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-bn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-br_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-br_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-br_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-cs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-cs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-cs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-cy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-cy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-cy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-da_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-da_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-da_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-de_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-de_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-de_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-dz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-dz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-dz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-el_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-el_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-el_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-en_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-en_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-en_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-es_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-es_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-es_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-et_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-et_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-et_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-eu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-eu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-eu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-fa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-fa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-fa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-fi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-fi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-fi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-fr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-fr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-fr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ga_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ga_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-gl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-gl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-gl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-gu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-gu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-gu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-he_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-he_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-he_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-hi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-hi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-hi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-hr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-hr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-hr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-hu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-hu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-hu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-id_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-id_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-id_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-it_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-it_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-it_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ja_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ja_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ja_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-kk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-kk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-kk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-kn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-kn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-kn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-lt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-lt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-lt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-lv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-lv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-lv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-mai_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-mai_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-mai_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-mr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-mr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-mr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nso_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nso_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-nso_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-or_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-or_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-or_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pt-BR_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pt-BR_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pt-BR_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pt-PT_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pt-PT_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-pt-PT_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ru_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ru_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ru_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-si_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-si_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-si_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-st_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-st_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-st_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-sv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-te_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-te_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-te_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-th_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-th_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-th_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-tn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-tn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-tn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-tr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-tr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-tr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-uk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-uk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-uk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ve_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ve_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-ve_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-xh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-xh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-xh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-zh-Hans_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-zh-Hans_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-zh-Hans_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-zh-Hant_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-zh-Hant_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-zh-Hant_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-zu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-zu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-langpack-zu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-math_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-math_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-math_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-ogltrans_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-ogltrans_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-ogltrans_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-opensymbol-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-opensymbol-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-opensymbol-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-pdfimport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-pdfimport_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-pdfimport_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-pyuno_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-pyuno_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-pyuno_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-sdk-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-sdk-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-sdk-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-sdk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-sdk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-sdk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-ure-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-ure-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-ure-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-ure_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-ure_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-ure_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-voikko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-voikko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-voikko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-wiki-publisher_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-wiki-publisher_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-wiki-publisher_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-writer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-writer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-writer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-x11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-x11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-x11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-xsltfilter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-xsltfilter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreoffice-xsltfilter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreofficekit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreofficekit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreofficekit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librepo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librepo_security_api_results.json
new file mode 100644
index 0000000..99ba2f9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librepo_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14352","severity":"important","public_date":"2020-08-13T00:00:00Z","advisories":["RHSA-2020:3749","RHBA-2020:3609","RHSA-2020:3658","RHSA-2020:3756"],"bugzilla":"1866498","bugzilla_description":"CVE-2020-14352 librepo: missing path validation in repomd.xml may lead to directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["librepo-0:1.9.2-2.el8_0","librepo-0:1.10.3-4.el8_1","redhat-coreos-43.82.202009181853.0","librepo-0:1.11.0-3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14352.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2015-5302","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:2504","RHSA-2015:2505"],"bugzilla":"1270903","bugzilla_description":"CVE-2015-5302 libreport: Possible private data leak in Bugzilla bugs opened by ABRT","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":["libreport-0:2.0.9-25.el6_7","libreport-0:2.1.11-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5302.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-anaconda_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-anaconda_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-anaconda_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-newt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-newt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-newt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-bugzilla_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-bugzilla_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-bugzilla_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-kerneloops_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-kerneloops_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-kerneloops_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-logger_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-logger_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-logger_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-mailx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-mailx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-mailx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-reportuploader_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-reportuploader_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-reportuploader_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-rhtsupport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-rhtsupport_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-rhtsupport_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-ureport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-ureport_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-plugin-ureport_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-rhel-anaconda-bugzilla_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-rhel-anaconda-bugzilla_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-rhel-anaconda-bugzilla_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-rhel-bugzilla_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-rhel-bugzilla_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-rhel-bugzilla_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-rhel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-rhel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-rhel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-web_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-web_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport-web_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport_security_api_results.json
new file mode 100644
index 0000000..10c7434
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreport_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5302","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:2504","RHSA-2015:2505"],"bugzilla":"1270903","bugzilla_description":"CVE-2015-5302 libreport: Possible private data leak in Bugzilla bugs opened by ABRT","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":["libreport-0:2.0.9-25.el6_7","libreport-0:2.1.11-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5302.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librepository_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librepository_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librepository_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreswan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreswan_security_api_results.json
new file mode 100644
index 0000000..1016b50
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libreswan_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-1763","severity":"important","public_date":"2020-05-11T00:00:00Z","advisories":["RHSA-2020:2069","RHSA-2020:2071","RHSA-2020:2070"],"bugzilla":"1814541","bugzilla_description":"CVE-2020-1763 libreswan: DoS attack via malicious IKEv1 informational exchange message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libreswan-0:3.27-10.el8_0","libreswan-0:3.29-7.el8_1","libreswan-0:3.29-7.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1763.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10155","severity":"low","public_date":"2019-06-10T00:00:00Z","advisories":["RHSA-2019:3391"],"bugzilla":"1714141","bugzilla_description":"CVE-2019-10155 libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-354","affected_packages":["libreswan-0:3.29-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2019-12312","severity":"moderate","public_date":"2019-05-12T00:00:00Z","advisories":["RHSA-2019:3391"],"bugzilla":"1716918","bugzilla_description":"CVE-2019-12312 libreswan: null-pointer dereference by sending two IKEv2 packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libreswan-0:3.29-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12312.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-5389","severity":"moderate","public_date":"2018-08-14T00:00:00Z","advisories":[],"bugzilla":"1603064","bugzilla_description":"CVE-2018-5389 IKEv1: IKEv1 protocol vulnerability in the authentication mode with pre-shared keys in the main mode of operation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5389.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-5391","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":[],"bugzilla":"1356183","bugzilla_description":"CVE-2016-5391 libreswan: IKEv2 bogus proposal lacking DH transform causes pluto daemon restart","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5391.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3071","severity":"moderate","public_date":"2016-04-04T00:00:00Z","advisories":[],"bugzilla":"1327957","bugzilla_description":"CVE-2016-3071 libreswan: DoS when receiving an IKE transforn containing AES_XCBC","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3071.json"},{"CVE":"CVE-2016-5361","severity":"moderate","public_date":"2016-03-14T00:00:00Z","advisories":["RHSA-2016:2603"],"bugzilla":"1308508","bugzilla_description":"CVE-2016-5361 IKEv1 protocol is vulnerable to DoS amplification attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libreswan-0:3.15-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5361.json"},{"CVE":"CVE-2015-3240","severity":"moderate","public_date":"2015-08-25T00:00:00Z","advisories":["RHSA-2015:1979"],"bugzilla":"1232320","bugzilla_description":"CVE-2015-3240 libreswan / openswan: denial of service via IKE daemon restart when receiving a bad DH gx value","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["libreswan-0:3.15-5.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3240.json"},{"CVE":"CVE-2015-3204","severity":"moderate","public_date":"2015-06-01T00:00:00Z","advisories":["RHSA-2015:1154"],"bugzilla":"1223361","bugzilla_description":"CVE-2015-3204 libreswan: crafted IKE packet causes daemon restart","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["libreswan-0:3.12-10.1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3204.json"},{"CVE":"CVE-2014-2891","severity":"moderate","public_date":"2014-05-05T00:00:00Z","advisories":[],"bugzilla":"1095487","bugzilla_description":"CVE-2014-2891 strongswan: denial of service via crafted ID_DER_ASN1_DN_ID payload","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2891.json"},{"CVE":"CVE-2013-6467","severity":"moderate","public_date":"2014-01-15T00:00:00Z","advisories":[],"bugzilla":"1050245","bugzilla_description":"CVE-2013-6467 libreswan: dereferencing missing IKEv2 payloads causes pluto daemon to restart","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6467.json"},{"CVE":"CVE-2013-7294","severity":"moderate","public_date":"2013-11-26T00:00:00Z","advisories":[],"bugzilla":"1054022","bugzilla_description":"CVE-2013-7294 libreswan: DoS via an IKEv2 I1 notification","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7294.json"},{"CVE":"CVE-2013-4564","severity":"moderate","public_date":"2013-11-18T00:00:00Z","advisories":[],"bugzilla":"1031830","bugzilla_description":"CVE-2013-4564 libreswan: DoS due to how mangled IKE packets are handled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4564.json"},{"CVE":"CVE-2013-7283","severity":"moderate","public_date":"2013-11-08T00:00:00Z","advisories":[],"bugzilla":"1051092","bugzilla_description":"CVE-2013-7283 libreswan: insecure tmp files on rpm package installation","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7283.json"},{"CVE":"CVE-2013-6076","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":[],"bugzilla":"1026152","bugzilla_description":"CVE-2013-6076 strongswan: denial of service when handling IKEv1 fragmentation payloads","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6076.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librevenge-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librevenge-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librevenge-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librevenge-gdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librevenge-gdb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librevenge-gdb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librevenge_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librevenge_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librevenge_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librhsm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librhsm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librhsm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librpmem-debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librpmem-debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librpmem-debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librpmem-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librpmem-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librpmem-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librpmem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librpmem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librpmem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librsvg2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librsvg2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librsvg2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librsvg2-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librsvg2-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librsvg2-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librsvg2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librsvg2_security_api_results.json
new file mode 100644
index 0000000..fad8149
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librsvg2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-20446","severity":"moderate","public_date":"2020-02-02T00:00:00Z","advisories":[],"bugzilla":"1797608","bugzilla_description":"CVE-2019-20446 librsvg: Resource exhaustion via crafted SVG file with nested patterns","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20446.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000041","severity":"low","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588840","bugzilla_description":"CVE-2018-1000041 librsvg: Improper input validation vulnerability in rsvg-io.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000041.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-11464","severity":"low","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1474400","bugzilla_description":"CVE-2017-11464 librsvg: SIGFPE is raised in box_blur_line function of rsvg-filter.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11464.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6163","severity":"moderate","public_date":"2016-07-04T00:00:00Z","advisories":[],"bugzilla":"1353520","bugzilla_description":"CVE-2016-6163 librsvg2: Out-of-bounds read when processing crafted SVG file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6163.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-4347","severity":null,"public_date":"2016-04-28T00:00:00Z","advisories":[],"bugzilla":"1331724","bugzilla_description":"CVE-2016-4347 Rejected: CVE-2016-4347","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4347.json"},{"CVE":"CVE-2016-4348","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":[],"bugzilla":"1331725","bugzilla_description":"CVE-2016-4348 librsvg2: DoS parsing SVGs with circular definitions _rsvg_css_normalize_font_size() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4348.json"},{"CVE":"CVE-2015-7557","severity":"moderate","public_date":"2015-12-21T00:00:00Z","advisories":[],"bugzilla":"1268239","bugzilla_description":"CVE-2015-7557 librsvg2: Out-of-bounds heap read when parsing SVG file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"(CWE-122|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7557.json"},{"CVE":"CVE-2015-7558","severity":"moderate","public_date":"2015-12-21T00:00:00Z","advisories":[],"bugzilla":"1268243","bugzilla_description":"CVE-2015-7558 librsvg2: Stack exhaustion causing DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7558.json"},{"CVE":"CVE-2014-7904","severity":"moderate","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2014:1894"],"bugzilla":"1165652","bugzilla_description":"CVE-2014-7904 chromium-browser: Buffer overflow in Skia","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:39.0.2171.65-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7904.json"},{"CVE":"CVE-2014-7909","severity":"moderate","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2014:1894"],"bugzilla":"1165660","bugzilla_description":"CVE-2014-7909 chromium-browser: Uninitialized memory read in Skia","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:39.0.2171.65-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7909.json"},{"CVE":"CVE-2013-1881","severity":"moderate","public_date":"2013-08-17T00:00:00Z","advisories":["RHSA-2014:0127"],"bugzilla":"924414","bugzilla_description":"CVE-2013-1881 librsvg2: local resource access vulnerability due to XML External Entity enablement","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["librsvg2-0:2.26.0-6.el6_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1881.json"},{"CVE":"CVE-2011-3146","severity":"moderate","public_date":"2011-09-06T00:00:00Z","advisories":["RHSA-2011:1289"],"bugzilla":"734936","bugzilla_description":"CVE-2011-3146 librsvg: object type mismatch leading to invalid pointer dereference","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["librsvg2-0:2.26.0-5.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3146.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librtas-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librtas-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librtas-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librtas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librtas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librtas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librx-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librx-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librx-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/librx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsamplerate-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsamplerate-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsamplerate-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsamplerate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsamplerate_security_api_results.json
new file mode 100644
index 0000000..d67ee29
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsamplerate_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-7697","severity":"low","public_date":"2017-04-11T00:00:00Z","advisories":[],"bugzilla":"1441641","bugzilla_description":"CVE-2017-7697 libsamplerate: Buffer overflow in calc_output_single","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7697.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsane-hpaio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsane-hpaio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsane-hpaio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsass-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsass-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsass-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsass_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsass_security_api_results.json
new file mode 100644
index 0000000..0423dfa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsass_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-18797","severity":"moderate","public_date":"2019-10-07T00:00:00Z","advisories":[],"bugzilla":"1852071","bugzilla_description":"CVE-2019-18797 libsass: uncontrolled recursion in Sass:Eval:operator()(Sass:Binary_Expression*) in eval.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18797.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-18798","severity":"moderate","public_date":"2019-10-07T00:00:00Z","advisories":[],"bugzilla":"1852074","bugzilla_description":"CVE-2019-18798 libsass: heap-based buffer overflow in Sass:weaveParents in ast_sel_weave.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18798.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-18799","severity":"moderate","public_date":"2019-10-07T00:00:00Z","advisories":[],"bugzilla":"1852077","bugzilla_description":"CVE-2019-18799 libsass: NULL pointer dereference in Sass:Parser:parseCompoundSelector in parser_selectors.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18799.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-6284","severity":"low","public_date":"2019-01-14T00:00:00Z","advisories":[],"bugzilla":"1668921","bugzilla_description":"CVE-2019-6284 libsass: heap-based buffer over-read in Sass::Prelexer::alternatives in prelexer.hpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6284.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-6286","severity":"low","public_date":"2019-01-14T00:00:00Z","advisories":[],"bugzilla":"1668924","bugzilla_description":"CVE-2019-6286 libsass: heap-based buffer over-read in Sass::Prelexer::skip_over_scopes in prelexer.hpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6286.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19826","severity":"low","public_date":"2018-12-03T00:00:00Z","advisories":[],"bugzilla":"1671376","bugzilla_description":"CVE-2018-19826 libsass: Infinite loop in Sass::Inspect::operator() function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19826.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19827","severity":"important","public_date":"2018-12-03T00:00:00Z","advisories":[],"bugzilla":"1671377","bugzilla_description":"CVE-2018-19827 libsass: Use-after-free in SharedPtr class resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19827.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-19218","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":[],"bugzilla":"1652070","bugzilla_description":"CVE-2018-19218 libsass: illegal address access at Sass::Parser::parse_css_variable_value_token","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19218.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-11698","severity":"low","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588651","bugzilla_description":"CVE-2018-11698 libsass: Out-of-bounds read n function Sass::handle_error in sass_context.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11698.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-11697","severity":"low","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588663","bugzilla_description":"CVE-2018-11697 libsass: Heap buffer over-read in Sass::Prelexer::exactly in lexer.hpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11697.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-20822","severity":"moderate","public_date":"2018-06-03T00:00:00Z","advisories":[],"bugzilla":"1706031","bugzilla_description":"CVE-2018-20822 libsass: DoS in Sass::Complex_Selector::perform in ast.hpp and Sass::Inspect::operator in inspect.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-19839","severity":"low","public_date":"2018-06-02T00:00:00Z","advisories":[],"bugzilla":"1671386","bugzilla_description":"CVE-2018-19839 libsass: Heap-based buffer over-read in the handle_error function resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19839.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20821","severity":"moderate","public_date":"2018-06-02T00:00:00Z","advisories":[],"bugzilla":"1706044","bugzilla_description":"CVE-2018-20821 libsass: parsing component allows attackers to cause denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20821.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libseccomp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libseccomp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libseccomp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libseccomp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libseccomp_security_api_results.json
new file mode 100644
index 0000000..3a7ebf6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libseccomp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9893","severity":"moderate","public_date":"2019-03-14T00:00:00Z","advisories":["RHSA-2019:3624","RHBA-2019:3303"],"bugzilla":"1690897","bugzilla_description":"CVE-2019-9893 libseccomp: incorrect generation of syscall filters in libseccomp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["redhat-coreos-42.81.20191107.0","libseccomp-0:2.4.1-1.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsecret-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsecret-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsecret-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsecret_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsecret_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsecret_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-ruby_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-ruby_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-ruby_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libselinux_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsemanage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsemanage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsemanage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsepol-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsepol-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsepol-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsepol-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsepol-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsepol-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsepol_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsepol_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsepol_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libserf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libserf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libserf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libserializer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libserializer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libserializer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libservicelog-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libservicelog-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libservicelog-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libservicelog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libservicelog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libservicelog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libshout-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libshout-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libshout-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libshout_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libshout_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libshout_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigc++20-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigc++20-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigc++20-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigc++20-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigc++20-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigc++20-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigc++20_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigc++20_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigc++20_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigsegv-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigsegv-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigsegv-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigsegv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigsegv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsigsegv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmartcols-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmartcols-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmartcols-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmartcols_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmartcols_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmartcols_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmbclient-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmbclient-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmbclient-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmbclient_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmbclient_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmbclient_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmbios_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmbios_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmbios_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmi_security_api_results.json
new file mode 100644
index 0000000..16b4ead
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsmi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-2891","severity":"moderate","public_date":"2010-10-20T00:00:00Z","advisories":[],"bugzilla":"647520","bugzilla_description":"CVE-2010-2891 libsmi: buffer overflow in smiGetNode can lead to arbitrary code execution","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2891.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsndfile-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsndfile-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsndfile-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsndfile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsndfile_security_api_results.json
new file mode 100644
index 0000000..878a598
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsndfile_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-3832","severity":"low","public_date":"2019-02-07T00:00:00Z","advisories":[],"bugzilla":"1677216","bugzilla_description":"CVE-2019-3832 libsndfile: incomplete fix for CVE-2018-19758 still allow to read beyond buffer limits","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3832.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19661","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1659627","bugzilla_description":"CVE-2018-19661 libsndfile: buffer over-read in the function i2ulaw_array in ulaw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19661.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19662","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2020:1636","RHSA-2020:3922"],"bugzilla":"1659631","bugzilla_description":"CVE-2018-19662 libsndfile: buffer over-read in the function i2alaw_array in alaw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["libsndfile-0:1.0.28-10.el8","libsndfile-0:1.0.25-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19662.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19432","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":[],"bugzilla":"1652566","bugzilla_description":"CVE-2018-19432 libsndfile:  OOB read in sf_write_int in sndfile.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19432.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-19758","severity":"low","public_date":"2018-10-29T00:00:00Z","advisories":[],"bugzilla":"1659638","bugzilla_description":"CVE-2018-19758 libsndfile: heap-based buffer over-read at wav.c in wav_write_header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19758.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-13419","severity":"low","public_date":"2018-07-05T00:00:00Z","advisories":[],"bugzilla":"1599152","bugzilla_description":"CVE-2018-13419 libsndfile: Memory leak in common.c:psf_allocate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13419.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-13139","severity":"moderate","public_date":"2018-07-03T00:00:00Z","advisories":["RHSA-2020:1185","RHSA-2020:1636"],"bugzilla":"1598480","bugzilla_description":"CVE-2018-13139 libsndfile: stack-based buffer overflow in sndfile-deinterleave utility","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libsndfile-0:1.0.25-11.el7","libsndfile-0:1.0.28-10.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-17456","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1524570","bugzilla_description":"CVE-2017-17456 libsndfile: SEGV on unknown address in the function d2alaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17457","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1524571","bugzilla_description":"CVE-2017-17457 libsndfile: SEGV on unknown address in the function d2ulaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17457.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16942","severity":"low","public_date":"2017-11-25T00:00:00Z","advisories":[],"bugzilla":"1517902","bugzilla_description":"CVE-2017-16942 libsndfile: divide-by-zero error in wav_w64_read_fmt_chunk()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-14634","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1499982","bugzilla_description":"CVE-2017-14634 libsndfile: Divide-by-zero in the double64_init() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14634.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14245","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1500006","bugzilla_description":"CVE-2017-14245 libsndfile: Out-of-bounds read in the function d2alaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14245.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14246","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1500007","bugzilla_description":"CVE-2017-14246 libsndfile: Out-of-bounds read in the function d2ulaw_array()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14246.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12562","severity":"low","public_date":"2017-08-05T00:00:00Z","advisories":[],"bugzilla":"1483140","bugzilla_description":"CVE-2017-12562 libsndfile: Heap-based Buffer Overflow in psf_binheader_writef function in common.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12562.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6892","severity":"low","public_date":"2017-05-23T00:00:00Z","advisories":[],"bugzilla":"1463326","bugzilla_description":"CVE-2017-6892 libsndfile: Information disclosure via aiff_read_chanmap() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6892.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-8361","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1449518","bugzilla_description":"CVE-2017-8361 libsndfile: Buffer overflow in the flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8361.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8362","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1449519","bugzilla_description":"CVE-2017-8362 libsndfile: Out-of-bounds read in the flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8362.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8365","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1449520","bugzilla_description":"CVE-2017-8365 libsndfile: Buffer over-read in the l2les_array function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8365.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8363","severity":"low","public_date":"2017-04-29T00:00:00Z","advisories":[],"bugzilla":"1458694","bugzilla_description":"CVE-2017-8363 libsndfile: Heap buffer over-read in the flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8363.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7741","severity":"low","public_date":"2017-04-11T00:00:00Z","advisories":[],"bugzilla":"1442033","bugzilla_description":"CVE-2017-7741 libsndfile: Invalid memory write in flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7741.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7742","severity":"low","public_date":"2017-04-11T00:00:00Z","advisories":[],"bugzilla":"1442034","bugzilla_description":"CVE-2017-7742 libsndfile: Invalid memory read in flac_buffer_copy function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7742.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7586","severity":"low","public_date":"2017-03-26T00:00:00Z","advisories":[],"bugzilla":"1440758","bugzilla_description":"CVE-2017-7586 libsndfile: Error in header_read() causing stack-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7586.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7585","severity":"low","public_date":"2017-03-24T00:00:00Z","advisories":[],"bugzilla":"1440756","bugzilla_description":"CVE-2017-7585 libsndfile: Stack-based buffer overflow in flac_buffer_copy()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7585.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-7805","severity":"moderate","public_date":"2015-10-12T00:00:00Z","advisories":[],"bugzilla":"1277897","bugzilla_description":"CVE-2015-7805 libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7805.json"},{"CVE":"CVE-2015-8075","severity":"low","public_date":"2015-07-10T00:00:00Z","advisories":[],"bugzilla":"1277915","bugzilla_description":"CVE-2015-8075 libsndfile: Out of bounds memory access in psf_strlcpy_crlf","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8075.json"},{"CVE":"CVE-2014-9756","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":[],"bugzilla":"1177254","bugzilla_description":"libsndfile: division by zero leading to denial of service in psf_fwrite()","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9756.json"},{"CVE":"CVE-2014-9496","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":[],"bugzilla":"1178840","bugzilla_description":"CVE-2014-9496 libsndfile: 2 buffer overruns in sd2_parse_rsrc_fork()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9496.json"},{"CVE":"CVE-2011-2696","severity":"moderate","public_date":"2011-07-12T00:00:00Z","advisories":["RHSA-2011:1084"],"bugzilla":"721234","bugzilla_description":"CVE-2011-2696 libsndfile: Application crash due integer overflow by processing certain PAF audio files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["libsndfile-0:1.0.20-3.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2696.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsolv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsolv_security_api_results.json
new file mode 100644
index 0000000..c14cdf5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsolv_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-20387","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1797072","bugzilla_description":"CVE-2019-20387 libsolv: out-of-bounds read in repodata_schema2id in repodata.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20387.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20532","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":["RHSA-2019:2290"],"bugzilla":"1665532","bugzilla_description":"CVE-2018-20532 libsolv: NULL pointer dereference in function testcase_read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libsolv-0:0.6.34-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20532.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20533","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":["RHSA-2019:2290"],"bugzilla":"1665535","bugzilla_description":"CVE-2018-20533 libsolv: NULL pointer dereference in function testcase_str2dep_complex","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libsolv-0:0.6.34-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20533.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20534","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":["RHBA-2020:0062","RHSA-2019:2290","RHSA-2019:3583"],"bugzilla":"1665538","bugzilla_description":"CVE-2018-20534 libsolv: illegal address access in pool_whatprovides in src/pool.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libsolv-0:0.7.4-3.el8","libsolv-0:0.6.34-4.el7","redhat-coreos-43.81.202001142154.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20534.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsoup-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsoup-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsoup-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsoup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsoup_security_api_results.json
new file mode 100644
index 0000000..2cb9460
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsoup_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17266","severity":"important","public_date":"2019-10-06T00:00:00Z","advisories":[],"bugzilla":"1771292","bugzilla_description":"CVE-2019-17266 libsoup: heap-based over-read in soup_ntlm_parse_challenge() in soup-auth-ntlm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17266.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"8.2"},{"CVE":"CVE-2018-12910","severity":"moderate","public_date":"2018-07-03T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1597980","bugzilla_description":"CVE-2018-12910 libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libsoup-0:2.62.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12910.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-2885","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2459"],"bugzilla":"1479281","bugzilla_description":"CVE-2017-2885 libsoup: Stack based buffer overflow with HTTP Chunked Encoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libsoup-0:2.56.0-4.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2885.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2012-2132","severity":"low","public_date":"2012-04-23T00:00:00Z","advisories":[],"bugzilla":"817692","bugzilla_description":"CVE-2012-2132 libsoup: does not indicate whether or not an SSL certificate is valid","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2132.json"},{"CVE":"CVE-2011-2524","severity":"moderate","public_date":"2011-07-28T00:00:00Z","advisories":["RHSA-2011:1102"],"bugzilla":"720509","bugzilla_description":"CVE-2011-2524 libsoup: SoupServer directory traversal flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libsoup-0:2.28.2-1.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2524.json"},{"CVE":"CVE-2009-0585","severity":"moderate","public_date":"2009-03-12T00:00:00Z","advisories":["RHSA-2009:0344"],"bugzilla":"488026","bugzilla_description":"CVE-2009-0585 libsoup: integer overflow in soup_base64_encode()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["libsoup-0:2.2.98-2.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0585.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libspectre-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libspectre-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libspectre-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libspectre_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libspectre_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libspectre_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libspiro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libspiro_security_api_results.json
new file mode 100644
index 0000000..e8e1561
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libspiro_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-19847","severity":"moderate","public_date":"2019-12-17T00:00:00Z","advisories":[],"bugzilla":"1786740","bugzilla_description":"CVE-2019-19847 libspiro: stack-based off-by-one buffer overflow in spiro_to_bpath0() in spiro.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19847.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsrtp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsrtp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsrtp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsrtp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsrtp_security_api_results.json
new file mode 100644
index 0000000..11bcd7d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsrtp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-6360","severity":"moderate","public_date":"2016-04-02T00:00:00Z","advisories":["RHSA-2020:3873"],"bugzilla":"1323702","bugzilla_description":"CVE-2015-6360 libsrtp: improper handling of CSRC count and extension header length in RTP header","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libsrtp-0:1.4.4-11.20101004cvs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6360.json"},{"CVE":"CVE-2013-2139","severity":"low","public_date":"2013-05-30T00:00:00Z","advisories":["RHSA-2020:3873"],"bugzilla":"970697","bugzilla_description":"CVE-2013-2139 libsrtp: buffer overflow in application of crypto profiles","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libsrtp-0:1.4.4-11.20101004cvs.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2139.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libss_security_api_results.json
new file mode 100644
index 0000000..9837244
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libss_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16135","severity":"low","public_date":"2020-07-30T00:00:00Z","advisories":[],"bugzilla":"1862456","bugzilla_description":"CVE-2020-16135 libssh: NULL pointer dereference in sftpserver.c if ssh_buffer_new returns NULL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16135.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-1730","severity":"moderate","public_date":"2020-04-09T09:00:00Z","advisories":[],"bugzilla":"1801998","bugzilla_description":"CVE-2020-1730 libssh: denial of service when handling AES-CTR (or DES) ciphers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1730.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-14889","severity":"low","public_date":"2019-12-05T00:00:00Z","advisories":[],"bugzilla":"1772523","bugzilla_description":"CVE-2019-14889 libssh: unsanitized location in scp could lead to unwanted command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14889.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-17498","severity":"moderate","public_date":"2019-10-16T00:00:00Z","advisories":["RHSA-2020:3915"],"bugzilla":"1766898","bugzilla_description":"CVE-2019-17498 libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-190|CWE-200|CWE-400)","affected_packages":["libssh2-0:1.8.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17498.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-13115","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1731324","bugzilla_description":"CVE-2019-13115 libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-3855","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687303","bugzilla_description":"CVE-2019-3855 libssh2: Integer overflow in transport read resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3856","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687304","bugzilla_description":"CVE-2019-3856 libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3856.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3857","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687305","bugzilla_description":"CVE-2019-3857 libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3857.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3858","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687306","bugzilla_description":"CVE-2019-3858 libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3859","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687307","bugzilla_description":"CVE-2019-3859 libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3859.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3860","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687310","bugzilla_description":"CVE-2019-3860 libssh2: Out-of-bounds reads with specially crafted SFTP packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3861","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687311","bugzilla_description":"CVE-2019-3861 libssh2: Out-of-bounds reads with specially crafted SSH packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3861.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3862","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:1884"],"bugzilla":"1687312","bugzilla_description":"CVE-2019-3862 libssh2: Out-of-bounds memory comparison with specially crafted message channel request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["libssh2-0:1.4.3-12.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3862.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3863","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687313","bugzilla_description":"CVE-2019-3863 libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10933","severity":"important","public_date":"2018-10-16T12:00:00Z","advisories":[],"bugzilla":"1614973","bugzilla_description":"CVE-2018-10933 libssh: Authentication Bypass due to improper message callbacks implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2016-0739","severity":"moderate","public_date":"2016-02-23T00:00:00Z","advisories":["RHSA-2016:0566"],"bugzilla":"1305971","bugzilla_description":"CVE-2016-0739 libssh: bits/bytes confusion resulting in truncated Difffie-Hellman secret length","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-704","affected_packages":["libssh-0:0.7.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0739.json"},{"CVE":"CVE-2016-0787","severity":"moderate","public_date":"2016-02-23T00:00:00Z","advisories":["RHSA-2016:0428"],"bugzilla":"1306021","bugzilla_description":"CVE-2016-0787 libssh2: bits/bytes confusion resulting in truncated Diffie-Hellman secret length","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-704","affected_packages":["libssh2-0:1.4.2-2.el6_7.1","libssh2-0:1.4.3-10.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0787.json"},{"CVE":"CVE-2015-3146","severity":"moderate","public_date":"2015-04-30T00:00:00Z","advisories":[],"bugzilla":"1213775","bugzilla_description":"CVE-2015-3146 libssh: null pointer dereference due to a logical error in the handling of a SSH_MSG_NEWKEYS and KEXDH_REPLY packets","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3146.json"},{"CVE":"CVE-2015-1782","severity":"low","public_date":"2015-03-11T00:00:00Z","advisories":["RHSA-2015:2140"],"bugzilla":"1199511","bugzilla_description":"CVE-2015-1782 libssh2: Using SSH_MSG_KEXINIT data unbounded","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-130","affected_packages":["libssh2-0:1.4.3-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1782.json"},{"CVE":"CVE-2014-0017","severity":"moderate","public_date":"2014-03-04T00:00:00Z","advisories":[],"bugzilla":"1072191","bugzilla_description":"CVE-2014-0017 libssh: Improper initialization of PRNG after fork()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0017.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libssh-config_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libssh-config_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libssh-config_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libssh-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libssh-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libssh-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libssh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libssh_security_api_results.json
new file mode 100644
index 0000000..9837244
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libssh_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16135","severity":"low","public_date":"2020-07-30T00:00:00Z","advisories":[],"bugzilla":"1862456","bugzilla_description":"CVE-2020-16135 libssh: NULL pointer dereference in sftpserver.c if ssh_buffer_new returns NULL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16135.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-1730","severity":"moderate","public_date":"2020-04-09T09:00:00Z","advisories":[],"bugzilla":"1801998","bugzilla_description":"CVE-2020-1730 libssh: denial of service when handling AES-CTR (or DES) ciphers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1730.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-14889","severity":"low","public_date":"2019-12-05T00:00:00Z","advisories":[],"bugzilla":"1772523","bugzilla_description":"CVE-2019-14889 libssh: unsanitized location in scp could lead to unwanted command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14889.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-17498","severity":"moderate","public_date":"2019-10-16T00:00:00Z","advisories":["RHSA-2020:3915"],"bugzilla":"1766898","bugzilla_description":"CVE-2019-17498 libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-190|CWE-200|CWE-400)","affected_packages":["libssh2-0:1.8.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17498.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-13115","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1731324","bugzilla_description":"CVE-2019-13115 libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-3855","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687303","bugzilla_description":"CVE-2019-3855 libssh2: Integer overflow in transport read resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3856","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687304","bugzilla_description":"CVE-2019-3856 libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3856.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3857","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687305","bugzilla_description":"CVE-2019-3857 libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3857.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3858","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687306","bugzilla_description":"CVE-2019-3858 libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3859","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687307","bugzilla_description":"CVE-2019-3859 libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3859.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3860","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687310","bugzilla_description":"CVE-2019-3860 libssh2: Out-of-bounds reads with specially crafted SFTP packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3861","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687311","bugzilla_description":"CVE-2019-3861 libssh2: Out-of-bounds reads with specially crafted SSH packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3861.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3862","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:1884"],"bugzilla":"1687312","bugzilla_description":"CVE-2019-3862 libssh2: Out-of-bounds memory comparison with specially crafted message channel request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["libssh2-0:1.4.3-12.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3862.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3863","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687313","bugzilla_description":"CVE-2019-3863 libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10933","severity":"important","public_date":"2018-10-16T12:00:00Z","advisories":[],"bugzilla":"1614973","bugzilla_description":"CVE-2018-10933 libssh: Authentication Bypass due to improper message callbacks implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2016-0739","severity":"moderate","public_date":"2016-02-23T00:00:00Z","advisories":["RHSA-2016:0566"],"bugzilla":"1305971","bugzilla_description":"CVE-2016-0739 libssh: bits/bytes confusion resulting in truncated Difffie-Hellman secret length","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-704","affected_packages":["libssh-0:0.7.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0739.json"},{"CVE":"CVE-2016-0787","severity":"moderate","public_date":"2016-02-23T00:00:00Z","advisories":["RHSA-2016:0428"],"bugzilla":"1306021","bugzilla_description":"CVE-2016-0787 libssh2: bits/bytes confusion resulting in truncated Diffie-Hellman secret length","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-704","affected_packages":["libssh2-0:1.4.2-2.el6_7.1","libssh2-0:1.4.3-10.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0787.json"},{"CVE":"CVE-2015-3146","severity":"moderate","public_date":"2015-04-30T00:00:00Z","advisories":[],"bugzilla":"1213775","bugzilla_description":"CVE-2015-3146 libssh: null pointer dereference due to a logical error in the handling of a SSH_MSG_NEWKEYS and KEXDH_REPLY packets","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3146.json"},{"CVE":"CVE-2015-1782","severity":"low","public_date":"2015-03-11T00:00:00Z","advisories":["RHSA-2015:2140"],"bugzilla":"1199511","bugzilla_description":"CVE-2015-1782 libssh2: Using SSH_MSG_KEXINIT data unbounded","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-130","affected_packages":["libssh2-0:1.4.3-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1782.json"},{"CVE":"CVE-2014-0017","severity":"moderate","public_date":"2014-03-04T00:00:00Z","advisories":[],"bugzilla":"1072191","bugzilla_description":"CVE-2014-0017 libssh: Improper initialization of PRNG after fork()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0017.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_autofs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_autofs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_autofs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_certmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_certmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_certmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_idmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_idmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_idmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_nss_idmap-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_nss_idmap-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_nss_idmap-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_nss_idmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_nss_idmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_nss_idmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_simpleifp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_simpleifp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_simpleifp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_sudo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_sudo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsss_sudo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstaroffice_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstaroffice_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstaroffice_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstdc++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstemmer-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstemmer-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstemmer-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstemmer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstemmer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstemmer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-arcconf-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-arcconf-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-arcconf-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-hpsa-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-hpsa-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-hpsa-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-local-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-local-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-local-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-megaraid-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-megaraid-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-megaraid-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-nfs-plugin-clibs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-nfs-plugin-clibs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-nfs-plugin-clibs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-nfs-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-nfs-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-nfs-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-nstor-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-nstor-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-nstor-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-smis-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-smis-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-smis-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-udev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-udev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt-udev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libstoragemgmt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsysfs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsysfs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsysfs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsysfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsysfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libsysfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtalloc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtalloc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtalloc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtalloc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtalloc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtalloc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtar_security_api_results.json
new file mode 100644
index 0000000..673543d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtar_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4397","severity":"moderate","public_date":"2013-10-09T00:00:00Z","advisories":["RHSA-2013:1418"],"bugzilla":"1014492","bugzilla_description":"CVE-2013-4397 libtar: Heap-based buffer overflows by expanding a specially-crafted archive","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtar-0:1.2.11-17.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4397.json"},{"CVE":"CVE-2013-4420","severity":"low","public_date":"2013-10-01T00:00:00Z","advisories":[],"bugzilla":"1018150","bugzilla_description":"CVE-2013-4420 libtar: missing validation of file names","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4420.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtasn1-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtasn1-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtasn1-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtasn1-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtasn1-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtasn1-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtasn1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtasn1_security_api_results.json
new file mode 100644
index 0000000..d5f5033
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtasn1_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1000654","severity":"low","public_date":"2018-08-12T00:00:00Z","advisories":[],"bugzilla":"1621972","bugzilla_description":"CVE-2018-1000654 libtasn1: Infinite loop in _asn1_expand_object_id(ptree) leads to memory exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000654.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-6003","severity":"moderate","public_date":"2018-01-04T00:00:00Z","advisories":[],"bugzilla":"1535578","bugzilla_description":"CVE-2018-6003 libtasn1: Stack exhaustion due to indefinite recursion during BER decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6003.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10790","severity":"low","public_date":"2017-06-22T00:00:00Z","advisories":[],"bugzilla":"1473192","bugzilla_description":"CVE-2017-10790 libtasn1: NULL pointer dereference in the _asn1_check_identifier function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10790.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6891","severity":"low","public_date":"2017-05-18T00:00:00Z","advisories":[],"bugzilla":"1456763","bugzilla_description":"CVE-2017-6891 libtasn1: Stack-based buffer overflow in asn1_find_node()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6891.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-4008","severity":"moderate","public_date":"2016-04-11T00:00:00Z","advisories":[],"bugzilla":"1325965","bugzilla_description":"CVE-2016-4008 libtasn1: infinite loop while parsing DER certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4008.json"},{"CVE":"CVE-2015-3622","severity":"moderate","public_date":"2015-04-30T00:00:00Z","advisories":["RHSA-2017:1860"],"bugzilla":"1218141","bugzilla_description":"CVE-2015-3622 libtasn1: heap overflow flaw in _asn1_extract_der_octet()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libtasn1-0:4.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-2806","severity":"low","public_date":"2015-03-26T00:00:00Z","advisories":["RHSA-2017:1860"],"bugzilla":"1207192","bugzilla_description":"CVE-2015-2806 libtasn1: stack overflow in asn1_der_decoding","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtasn1-0:4.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2806.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-3467","severity":"moderate","public_date":"2014-05-25T00:00:00Z","advisories":["RHSA-2014:0596","RHSA-2014:0687","RHSA-2014:0815","RHSA-2014:0594"],"bugzilla":"1102022","bugzilla_description":"CVE-2014-3467 libtasn1: multiple boundary check issues","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libtasn1-0:2.3-6.el6_5","rhev-hypervisor6-0:6.5-20140624.0.el6ev","gnutls-0:1.4.1-16.el5_10","libtasn1-0:3.3-5.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3467.json"},{"CVE":"CVE-2014-3468","severity":"moderate","public_date":"2014-05-25T00:00:00Z","advisories":["RHSA-2014:0596","RHSA-2014:0687","RHSA-2014:0815","RHSA-2014:0594"],"bugzilla":"1102323","bugzilla_description":"CVE-2014-3468 libtasn1: asn1_get_bit_der() can return negative bit length","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-392->CWE-119","affected_packages":["libtasn1-0:2.3-6.el6_5","rhev-hypervisor6-0:6.5-20140624.0.el6ev","gnutls-0:1.4.1-16.el5_10","libtasn1-0:3.3-5.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3468.json"},{"CVE":"CVE-2014-3469","severity":"moderate","public_date":"2014-05-25T00:00:00Z","advisories":["RHSA-2014:0596","RHSA-2014:0687","RHSA-2014:0815","RHSA-2014:0594"],"bugzilla":"1102329","bugzilla_description":"CVE-2014-3469 libtasn1: asn1_read_value_type() NULL pointer dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["libtasn1-0:2.3-6.el6_5","rhev-hypervisor6-0:6.5-20140624.0.el6ev","gnutls-0:1.4.1-16.el5_10","libtasn1-0:3.3-5.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3469.json"},{"CVE":"CVE-2012-1569","severity":"important","public_date":"2012-03-19T00:00:00Z","advisories":["RHSA-2012:0427","RHSA-2012:0428","RHSA-2012:0531","RHSA-2012:0488"],"bugzilla":"804920","bugzilla_description":"CVE-2012-1569 libtasn1: DER decoding buffer overflow (GNUTLS-SA-2012-3, MU-201202-02)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtasn1-0:2.3-3.el6_2.1","rhev-hypervisor6-0:6.2-20120423.1.el6_2","gnutls-0:1.4.1-7.el5_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1569.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtdb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtdb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtdb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtdb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtdb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libteam-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libteam-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libteam-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libteam_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libteam_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libteam_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtevent-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtevent-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtevent-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtevent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtevent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtevent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libthai-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libthai-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libthai-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libthai_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libthai_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libthai_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtheora-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtheora-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtheora-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtheora_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtheora_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtheora_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtiff-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtiff-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtiff-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtiff-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtiff-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtiff-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtiff_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtiff_security_api_results.json
new file mode 100644
index 0000000..39674a4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtiff_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17546","severity":"moderate","public_date":"2019-08-15T00:00:00Z","advisories":["RHSA-2020:3902"],"bugzilla":"1765705","bugzilla_description":"CVE-2019-17546 libtiff: integer overflow leading to heap-based buffer overflow in tif_getimage.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["libtiff-0:4.0.3-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17546.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-14973","severity":"moderate","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2020:3902","RHSA-2020:1688"],"bugzilla":"1745951","bugzilla_description":"CVE-2019-14973 libtiff: integer overflow in _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["libtiff-0:4.0.3-35.el7","libtiff-0:4.0.9-17.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14973.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-6128","severity":"low","public_date":"2019-01-04T00:00:00Z","advisories":[],"bugzilla":"1667122","bugzilla_description":"CVE-2019-6128 libtiff: memory leak in TIFFFdOpen function in tif_unix.c when using pal2rgb","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-244","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6128.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-7663","severity":null,"public_date":"2018-12-18T00:00:00Z","advisories":[],"bugzilla":"1677528","bugzilla_description":"CVE-2019-7663 libtiff: integer overflow in libtiff/tif_dirwrite.c resulting in an invalid pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-19210","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":[],"bugzilla":"1649385","bugzilla_description":"CVE-2018-19210 libtiff: NULL pointer dereference in TIFFWriteDirectorySec function in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19210.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18661","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1644448","bugzilla_description":"CVE-2018-18661 libtiff: tiff2bw tool failed memory allocation leads to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18661.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18557","severity":"moderate","public_date":"2018-10-14T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1644229","bugzilla_description":"CVE-2018-18557 libtiff: Out-of-bounds write in tif_jbig.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18557.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-17795","severity":"low","public_date":"2018-10-02T00:00:00Z","advisories":[],"bugzilla":"1635091","bugzilla_description":"CVE-2018-17795 libtiff: Heap-based buffer overflow in tiff2pdf.c:t2p_write_pdf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-17100","severity":"low","public_date":"2018-09-16T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1631069","bugzilla_description":"CVE-2018-17100 libtiff: Integer overflow in multiply_ms in tools/ppm2tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17100.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-17101","severity":"low","public_date":"2018-09-16T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1631078","bugzilla_description":"CVE-2018-17101 libtiff: Two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17101.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-17000","severity":"low","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1630004","bugzilla_description":"CVE-2018-17000 libtiff: NULL pointer dereference in function _TIFFmemcmp at tif_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17000.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-15209","severity":"moderate","public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1614051","bugzilla_description":"CVE-2018-15209 libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16335","severity":"moderate","public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1624981","bugzilla_description":"CVE-2018-16335 libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16335.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14373","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609400","bugzilla_description":"CVE-2018-14373 libtiff: NULL dereference in TIFFFindField in tif_dirinfo.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14373.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14374","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609406","bugzilla_description":"CVE-2018-14374 libtiff: NULL dereference in unixErrorHandler in tif_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14374.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14375","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609411","bugzilla_description":"CVE-2018-14375 libtiff: NULL dereference in TIFFRGBAImageOK in tif_getimage.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14375.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14378","severity":null,"public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609417","bugzilla_description":"CVE-2018-14378 libtiff: NULL dereference in TIFFWriteBufferSetup in tif_write.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14378.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12900","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2019:2053","RHSA-2019:3419"],"bugzilla":"1595575","bugzilla_description":"CVE-2018-12900 libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libtiff-0:4.0.3-32.el7","libtiff-0:4.0.9-15.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12900.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10963","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1579058","bugzilla_description":"CVE-2018-10963 libtiff: reachable assertion in TIFFWriteDirectorySec function in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10963.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10779","severity":"low","public_date":"2018-05-07T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1577311","bugzilla_description":"CVE-2018-10779 libtiff: heap-based buffer over-read in TIFFWriteScanline function in tif_write.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10779.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10801","severity":"low","public_date":"2018-05-07T00:00:00Z","advisories":[],"bugzilla":"1577392","bugzilla_description":"CVE-2018-10801 libtiff: memory leak in bmp2tiff tool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10801.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10126","severity":"low","public_date":"2018-04-18T00:00:00Z","advisories":[],"bugzilla":"1572766","bugzilla_description":"CVE-2018-10126 libtiff: NULL pointer dereference in the jpeg_fdct_16x16 function in jfdctint.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8905","severity":"low","public_date":"2018-03-17T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1559704","bugzilla_description":"CVE-2018-8905 libtiff: heap-based buffer overflow in tif_lzw.c:LZWDecodeCompat() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8905.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-7456","severity":"low","public_date":"2018-02-24T00:00:00Z","advisories":["RHSA-2019:2053","RHSA-2019:2051"],"bugzilla":"1556708","bugzilla_description":"CVE-2018-7456 libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["compat-libtiff3-0:3.9.4-12.el7","libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5784","severity":"low","public_date":"2018-01-18T00:00:00Z","advisories":[],"bugzilla":"1537740","bugzilla_description":"CVE-2018-5784 libtiff: uncontrolled resource consumption in TIFFSetDirectory function in tif_dir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5784.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5360","severity":"low","public_date":"2018-01-12T00:00:00Z","advisories":[],"bugzilla":"1535494","bugzilla_description":"CVE-2018-5360 LibTIFF: heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5360.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18013","severity":"moderate","public_date":"2017-12-29T00:00:00Z","advisories":[],"bugzilla":"1530440","bugzilla_description":"CVE-2017-18013 libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18013.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-17973","severity":"moderate","public_date":"2017-12-29T00:00:00Z","advisories":[],"bugzilla":"1530912","bugzilla_description":"CVE-2017-17973 libtiff: heap-based use after free in tiff2pdf.c:t2p_writeproc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-17942","severity":"low","public_date":"2017-12-28T00:00:00Z","advisories":[],"bugzilla":"1529524","bugzilla_description":"CVE-2017-17942 libtiff: Heap-based buffer overflow in PackBitsEncode function in tif_packbits.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-17095","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":[],"bugzilla":"1524284","bugzilla_description":"CVE-2017-17095 libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16232","severity":"low","public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1516189","bugzilla_description":"CVE-2017-16232 libtiff: Memory leaks in tif_open.c, tif_lzw.c, and tif_aux.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13726","severity":"low","public_date":"2017-08-21T00:00:00Z","advisories":[],"bugzilla":"1488886","bugzilla_description":"CVE-2017-13726 libtiff: Reachable assertion abort in the function TIFFWriteDirectorySec()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13726.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13727","severity":"low","public_date":"2017-08-21T00:00:00Z","advisories":[],"bugzilla":"1488887","bugzilla_description":"CVE-2017-13727 libtiff: Reachable assertion abort in the function TIFFWriteDirectoryTagSubifd()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13727.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12944","severity":"low","public_date":"2017-08-06T00:00:00Z","advisories":[],"bugzilla":"1487202","bugzilla_description":"CVE-2017-12944 libtiff: Mishandled memory allocation for short files in the TIFFReadDirEntryArray function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12944.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11613","severity":null,"public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475530","bugzilla_description":"CVE-2017-11613 libtiff: Memory leak via corrupt td_imagelength in TIFFOpen function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11613.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11335","severity":"moderate","public_date":"2017-07-14T00:00:00Z","advisories":[],"bugzilla":"1474356","bugzilla_description":"CVE-2017-11335 libtiff: Heap-based buffer overflow in tiff2pdf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11335.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-9935","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469725","bugzilla_description":"CVE-2017-9935 libtiff: Heap-based buffer overflow in t2p_write_pdf function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9935.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9936","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469728","bugzilla_description":"CVE-2017-9936 libtiff: memory leak in tif_jbig.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9936.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9937","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469732","bugzilla_description":"CVE-2017-9937 libtiff: memory malloc failure in tif_jbig.c could cause DOS.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9937.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10688","severity":"low","public_date":"2017-06-29T00:00:00Z","advisories":[],"bugzilla":"1470241","bugzilla_description":"CVE-2017-10688 libtiff: Assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10688.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9815","severity":"low","public_date":"2017-06-22T00:00:00Z","advisories":[],"bugzilla":"1464449","bugzilla_description":"CVE-2017-9815 libtiff: Memory leak in the TIFFReadDirEntryLong8Array function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9147","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1454655","bugzilla_description":"CVE-2017-9147 libtiff: Out of bounds read in _TIFFVGetField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9147.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9117","severity":"moderate","public_date":"2017-05-07T00:00:00Z","advisories":[],"bugzilla":"1456756","bugzilla_description":"CVE-2017-9117 libtiff: Heap-based buffer over-read in bmp2tiff","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9117.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9403","severity":"low","public_date":"2017-04-20T00:00:00Z","advisories":[],"bugzilla":"1458902","bugzilla_description":"CVE-2017-9403 libtiff: Memory leak in TIFFReadDirEntryLong8Array","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9403.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9404","severity":"low","public_date":"2017-04-20T00:00:00Z","advisories":[],"bugzilla":"1458904","bugzilla_description":"CVE-2017-9404 libtiff: Memory leak in OJPEGReadHeaderInfoSecTablesQTable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9404.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7595","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441248","bugzilla_description":"CVE-2017-7595 libtiff: Divide-by-zero in JPEGSetupEncode (tiff_jpeg.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7595.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7596","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441250","bugzilla_description":"CVE-2017-7596 libtiff: Float out of range issue in tif_dir.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7596.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7597","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441252","bugzilla_description":"CVE-2017-7597 libtiff: Float out of range issue in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7597.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7598","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441254","bugzilla_description":"CVE-2017-7598 libtiff: Divide-by-zero in tif_dirread.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7598.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7599","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441259","bugzilla_description":"CVE-2017-7599 libtiff: Unsigned short out of range in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7599.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7600","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441260","bugzilla_description":"CVE-2017-7600 libtiff: Unsigned char out of range in tif_dirwrite.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7600.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7601","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441261","bugzilla_description":"CVE-2017-7601 libtiff: Signed integer overflow in tif_jpeg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7601.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7602","severity":"low","public_date":"2017-04-09T00:00:00Z","advisories":[],"bugzilla":"1441263","bugzilla_description":"CVE-2017-7602 libtiff: Signed integer overflow in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7602.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5563","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1416109","bugzilla_description":"CVE-2017-5563 libtiff: Heap-buffer overflow in LZWEncode tif_lzw.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5563.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5225","severity":"moderate","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1412716","bugzilla_description":"CVE-2017-5225 libtiff: Heap-buffer overflow in tools/tiffcp via crafted BitsPerSample value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5225.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-7592","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441240","bugzilla_description":"CVE-2017-7592 libtiff: Left shift of unsigned char without a cast","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-704","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7592.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7593","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441246","bugzilla_description":"CVE-2017-7593 libtiff: tif_rawdata not properly initialized in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7593.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7594","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1441247","bugzilla_description":"CVE-2017-7594 libtiff: Memory leak in OJPEGReadHeaderInfoSecTablesDcTable function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7594.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10094","severity":"moderate","public_date":"2016-12-20T00:00:00Z","advisories":[],"bugzilla":"1410119","bugzilla_description":"CVE-2016-10094 libtiff: Off-by-one error in t2p_readwrite_pdf_image_tile() causing heap buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10094.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10095","severity":null,"public_date":"2016-12-04T00:00:00Z","advisories":[],"bugzilla":"1410063","bugzilla_description":"CVE-2016-10095 libtiff: Stack-based buffer overflow in _TIFFVGetField","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10095.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-10092","severity":"moderate","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1410067","bugzilla_description":"CVE-2016-10092 libtiff: Heap-based buffer overflow in _TIFFFax3fillruns","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10092.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10270","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438441","bugzilla_description":"CVE-2016-10270 libtiff: Heap-based buffer overflow in tiff_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10270.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10269","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438443","bugzilla_description":"CVE-2016-10269 libtiff: Heap-based buffer overflow in tiff_unix.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10269.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10267","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438449","bugzilla_description":"CVE-2016-10267 libtiff: Divide-by-zero in tif_ojpeg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10267.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10271","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438453","bugzilla_description":"CVE-2016-10271 libtiff: Heap-based buffer overflow in tif_fax3.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10271.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10272","severity":"low","public_date":"2016-12-03T00:00:00Z","advisories":[],"bugzilla":"1438458","bugzilla_description":"CVE-2016-10272 libtiff: Heap-based buffer overflow in tif_next.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10272.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10268","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1438447","bugzilla_description":"CVE-2016-10268 libtiff: Integer underflow in tiffcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10268.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10266","severity":"low","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1438472","bugzilla_description":"CVE-2016-10266 libtiff: Divide-by-zero in tif_read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10266.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10093","severity":"moderate","public_date":"2016-11-27T00:00:00Z","advisories":[],"bugzilla":"1410116","bugzilla_description":"CVE-2016-10093 libtiff: Integer overflow in DECLAREreadFunc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10093.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9453","severity":"moderate","public_date":"2016-11-18T00:00:00Z","advisories":[],"bugzilla":"1397723","bugzilla_description":"CVE-2016-9453 libtiff: Out-of-bounds access in t2p_readwrite_pdf_image_tile()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9453.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9448","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1397734","bugzilla_description":"CVE-2016-9448 libtiff: Null pointer dereference in TIFFFetchNormalTag() (regression of CVE-2016-9297)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9532","severity":"low","public_date":"2016-11-11T00:00:00Z","advisories":[],"bugzilla":"1397726","bugzilla_description":"CVE-2016-9532 libtiff: Multiple uint32 overflows leading to heap buffer over-read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9532.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9273","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1395164","bugzilla_description":"CVE-2016-9273 libtiff: Out-of-bounds heap read in cpStrips","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9273.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9297","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1395264","bugzilla_description":"CVE-2016-9297 libtiff: Out-of-bounds heap read in _TIFFPrintField (tif_print.c:127)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-170","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9297.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9535","severity":"moderate","public_date":"2016-11-04T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397755","bugzilla_description":"CVE-2016-9535 libtiff: Predictor heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-5652","severity":"moderate","public_date":"2016-10-25T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1389222","bugzilla_description":"CVE-2016-5652 libtiff: tiff2pdf JPEG Compression Tables Heap Buffer Overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-5875","severity":"important","public_date":"2016-10-25T00:00:00Z","advisories":[],"bugzilla":"1389228","bugzilla_description":"CVE-2016-5875 libtiff: PixarLogDecode Heap Buffer Overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5875.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-8331","severity":"moderate","public_date":"2016-10-25T00:00:00Z","advisories":[],"bugzilla":"1389229","bugzilla_description":"CVE-2016-8331 libtiff: FAX IFD Entry Parsing Type Confusion","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-9539","severity":"moderate","public_date":"2016-10-14T00:00:00Z","advisories":[],"bugzilla":"1397767","bugzilla_description":"CVE-2016-9539 libtiff: Out-of-bounds read in readContigTilesIntoBuffer()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9539.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9538","severity":"moderate","public_date":"2016-10-08T00:00:00Z","advisories":[],"bugzilla":"1397765","bugzilla_description":"CVE-2016-9538 libtiff: Integer overflow leads to reading undefined buffer in readContigStripsIntoBuffer()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9538.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9540","severity":"moderate","public_date":"2016-10-08T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397768","bugzilla_description":"CVE-2016-9540 libtiff: cpStripToTile heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9540.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9534","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397751","bugzilla_description":"CVE-2016-9534 libtiff: TIFFFlushData1 heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9534.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9536","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397758","bugzilla_description":"CVE-2016-9536 libtiff: t2p_process_jpeg_strip heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9537","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397760","bugzilla_description":"CVE-2016-9537 libtiff: Out-of-bounds write vulnerabilities in tools/tiffcrop.c","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9537.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9533","severity":"moderate","public_date":"2016-09-24T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1397769","bugzilla_description":"CVE-2016-9533 libtiff: PixarLog horizontalDifference heap-buffer-overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9533.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6223","severity":"moderate","public_date":"2016-07-10T00:00:00Z","advisories":[],"bugzilla":"1356867","bugzilla_description":"CVE-2016-6223 libtiff: Out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6223.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-5322","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346683","bugzilla_description":"CVE-2016-5322 libtiff: Out-of-bounds read in extractContigSamplesBytes() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5322.json"},{"CVE":"CVE-2016-5320","severity":"important","public_date":"2016-06-15T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1346687","bugzilla_description":"CVE-2016-5320 libtiff: Out-of-bounds write in PixarLogDecode() function in tif_pixarlog.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-5317","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346689","bugzilla_description":"CVE-2016-5317 libtiff: Out-of-bounds write in PixarLogDecode() function in libtiff.so","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5317.json"},{"CVE":"CVE-2016-5316","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346690","bugzilla_description":"CVE-2016-5316 libtiff: Out-of-bounds read in PixarLogCleanup() function in tif_pixarlog.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5316.json"},{"CVE":"CVE-2016-5315","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346694","bugzilla_description":"CVE-2016-5315 libtiff: Out-of-bounds read in setByteArray() function in tif_dir.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5315.json"},{"CVE":"CVE-2016-5321","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346695","bugzilla_description":"CVE-2016-5321 libtiff: tiffcrop readSeparateTilesIntoBuffer() memory corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5321.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-5323","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346696","bugzilla_description":"CVE-2016-5323 libtiff: more tiffcrop readSeparateTilesIntoBuffer() memory corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-5314","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1346697","bugzilla_description":"CVE-2016-5314 libtiff: Out-of-bounds write in PixarLogDecode() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5314.json"},{"CVE":"CVE-2016-5102","severity":"moderate","public_date":"2016-05-30T00:00:00Z","advisories":[],"bugzilla":"1343407","bugzilla_description":"CVE-2016-5102 libtiff: Buffer overflow in readgifimage()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5102.json"},{"CVE":"CVE-2016-5318","severity":"moderate","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1344068","bugzilla_description":"CVE-2016-5318 libtiff: Stack-based buffer overflow in thumbnail's _TIFFVGetField function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5318.json"},{"CVE":"CVE-2016-5319","severity":"moderate","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1344069","bugzilla_description":"CVE-2016-5319 libtiff: Heap-based buffer overflow in bmp2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5319.json"},{"CVE":"CVE-2016-3990","severity":"important","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1326246","bugzilla_description":"CVE-2016-3990 libtiff: out-of-bounds write in horizontalDifference8()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3990.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3991","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1326249","bugzilla_description":"CVE-2016-3991 libtiff: out-of-bounds write in loadImage() function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3991.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-3633","severity":"low","public_date":"2016-04-11T00:00:00Z","advisories":[],"bugzilla":"1326255","bugzilla_description":"CVE-2016-3633 libtiff: out-of-bounds read in the _setrow function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3633.json"},{"CVE":"CVE-2016-3623","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325089","bugzilla_description":"CVE-2016-3623 libtiff: divide by zero in the rgb2ycybr tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3623.json"},{"CVE":"CVE-2016-3624","severity":"low","public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325090","bugzilla_description":"CVE-2016-3624 libtiff: out of bounds write in the rgb2ycybr tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3624.json"},{"CVE":"CVE-2016-3625","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1325091","bugzilla_description":"CVE-2016-3625 libtiff: out of bounds read in the tiff2bw tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3625.json"},{"CVE":"CVE-2016-3945","severity":"moderate","public_date":"2016-04-08T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1325093","bugzilla_description":"CVE-2016-3945 libtiff: out-of-bounds write in the tiff2rgba tool","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3945.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3632","severity":"moderate","public_date":"2016-04-08T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1325095","bugzilla_description":"CVE-2016-3632 libtiff: out-of-bounds write in _TIFFVGetField function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3632.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-3658","severity":null,"public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1326257","bugzilla_description":"CVE-2016-3658 libtiff: out-of-bounds read in the TIFFWriteDirectoryTagLongLong8Array function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3658.json"},{"CVE":"CVE-2016-3634","severity":"low","public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1326267","bugzilla_description":"CVE-2016-3634 libtiff: out-of-bounds read in the tagCompare function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3634.json"},{"CVE":"CVE-2016-3619","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316569","bugzilla_description":"CVE-2016-3619 libtiff: bmp2tiff DumpModeEncode OOB read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3619.json"},{"CVE":"CVE-2016-3620","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316859","bugzilla_description":"CVE-2016-3620 libtiff: Out-of-bound read in ZIPEncode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3620.json"},{"CVE":"CVE-2016-3631","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1316872","bugzilla_description":"CVE-2016-3631 libtiff: thumbnail tool out-of-bounds read vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3631.json"},{"CVE":"CVE-2016-3621","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1324822","bugzilla_description":"CVE-2016-3621 libtiff: out of bounds read in the bmp2tiff tool","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3621.json"},{"CVE":"CVE-2016-3622","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1324823","bugzilla_description":"CVE-2016-3622 libtiff: Division by zero in fpAcc function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3622.json"},{"CVE":"CVE-2016-3186","severity":"moderate","public_date":"2016-03-30T00:00:00Z","advisories":["RHSA-2019:2053"],"bugzilla":"1319666","bugzilla_description":"CVE-2016-3186 libtiff: buffer overflow in gif2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["libtiff-0:4.0.3-32.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3186.json"},{"CVE":"CVE-2016-10371","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1449534","bugzilla_description":"CVE-2016-10371 libtiff: Assertion failure in TIFFWriteDirectoryTagCheckedRational","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10371.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8781","severity":"low","public_date":"2016-01-24T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1301649","bugzilla_description":"CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 libtiff: invalid assertion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8781.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8782","severity":"low","public_date":"2016-01-24T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1301649","bugzilla_description":"CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 libtiff: invalid assertion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8782.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8783","severity":"low","public_date":"2016-01-24T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1301649","bugzilla_description":"CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 libtiff: invalid assertion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8783.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8784","severity":"important","public_date":"2016-01-24T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1301652","bugzilla_description":"CVE-2015-8784 libtiff: out-of-bound write in NeXTDecode()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8784.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-8668","severity":"low","public_date":"2015-12-28T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1294425","bugzilla_description":"CVE-2015-8668 libtiff: OOB read in bmp2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8668.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-7554","severity":"moderate","public_date":"2015-12-26T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1294417","bugzilla_description":"CVE-2015-7554 libtiff: Invalid-write in _TIFFVGetField() when parsing some extension tags","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7554.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-8683","severity":"low","public_date":"2015-12-25T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1294427","bugzilla_description":"CVE-2015-8683 libtiff: Out-of-bounds when reading CIE Lab image format files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8683.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8665","severity":"low","public_date":"2015-12-24T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1294444","bugzilla_description":"CVE-2015-8665 libtiff: Out-of-bounds read in tif_getimage.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8665.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-7313","severity":"low","public_date":"2015-09-21T00:00:00Z","advisories":[],"bugzilla":"1265998","bugzilla_description":"CVE-2015-7313 libtiff: OOM when parsing crafted tiff files","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7313.json"},{"CVE":"CVE-2015-8870","severity":"moderate","public_date":"2015-01-28T00:00:00Z","advisories":["RHSA-2017:0225"],"bugzilla":"1402778","bugzilla_description":"CVE-2015-8870 libtiff: Integer overflow in tools/bmp2tiff.c","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-190","affected_packages":["libtiff-0:3.9.4-21.el6_8","libtiff-0:4.0.3-27.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2014-9655","severity":"moderate","public_date":"2014-12-29T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1190703","bugzilla_description":"CVE-2014-9655 libtiff: use of uninitialized memory in putcontig8bitYCbCr21tile and NeXTDecode","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9655.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2015-1547","severity":"moderate","public_date":"2014-12-29T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1190709","bugzilla_description":"CVE-2015-1547 libtiff: use of uninitialized memory in NeXTDecode","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2014-9330","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1177893","bugzilla_description":"CVE-2014-9330 libtiff: Out-of-bounds reads followed by a crash in bmp2tiff","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9330.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-8127","severity":"low","public_date":"2014-12-07T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1185805","bugzilla_description":"CVE-2014-8127 libtiff: out-of-bounds read with malformed TIFF image in multiple tools","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-8128","severity":"low","public_date":"2014-12-07T00:00:00Z","advisories":[],"bugzilla":"1185812","bugzilla_description":"CVE-2014-8128 libtiff: out-of-bounds write in multiple tools","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8128.json"},{"CVE":"CVE-2014-8129","severity":"low","public_date":"2014-12-07T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1185815","bugzilla_description":"CVE-2014-8129 libtiff: out-of-bounds read/write with malformed TIFF image in tiff2pdf","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8129.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2014-8130","severity":"low","public_date":"2014-12-07T00:00:00Z","advisories":["RHSA-2016:1547","RHSA-2016:1546"],"bugzilla":"1185817","bugzilla_description":"CVE-2014-8130 libtiff: divide by zero in the tiffdither tool","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:4.0.3-25.el7_2","libtiff-0:3.9.4-18.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2013-4243","severity":"moderate","public_date":"2013-08-14T00:00:00Z","advisories":["RHSA-2014:0223","RHSA-2014:0222"],"bugzilla":"996052","bugzilla_description":"CVE-2013-4243 libtiff (gif2tiff): possible heap-based buffer overflow in readgifimage()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-10.el6_5","libtiff-0:3.8.2-19.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4243.json"},{"CVE":"CVE-2013-4244","severity":"moderate","public_date":"2013-08-14T00:00:00Z","advisories":["RHSA-2014:0223","RHSA-2014:0222"],"bugzilla":"996468","bugzilla_description":"CVE-2013-4244 libtiff (gif2tiff): OOB Write in LZW decompressor","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libtiff-0:3.9.4-10.el6_5","libtiff-0:3.8.2-19.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4244.json"},{"CVE":"CVE-2013-4231","severity":"moderate","public_date":"2013-08-01T00:00:00Z","advisories":["RHSA-2014:0223","RHSA-2014:0222"],"bugzilla":"995965","bugzilla_description":"CVE-2013-4231 libtiff (gif2tiff): GIF LZW decoder missing datasize value check","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libtiff-0:3.9.4-10.el6_5","libtiff-0:3.8.2-19.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4231.json"},{"CVE":"CVE-2013-4232","severity":"moderate","public_date":"2013-08-01T00:00:00Z","advisories":["RHSA-2014:0223","RHSA-2014:0222"],"bugzilla":"995975","bugzilla_description":"CVE-2013-4232 libtiff (tiff2pdf): use-after-free in t2p_readwrite_pdf_image()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["libtiff-0:3.9.4-10.el6_5","libtiff-0:3.8.2-19.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4232.json"},{"CVE":"CVE-2013-1961","severity":"low","public_date":"2013-05-02T00:00:00Z","advisories":["RHSA-2014:0223","RHSA-2014:0222"],"bugzilla":"952131","bugzilla_description":"CVE-2013-1961 libtiff (tiff2pdf): Stack-based buffer overflow with malformed image-length and resolution","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["libtiff-0:3.9.4-10.el6_5","libtiff-0:3.8.2-19.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1961.json"},{"CVE":"CVE-2013-1960","severity":"moderate","public_date":"2013-05-02T00:00:00Z","advisories":["RHSA-2014:0223","RHSA-2014:0222"],"bugzilla":"952158","bugzilla_description":"CVE-2013-1960 libtiff (tiff2pdf): Heap-based buffer overflow in t2_process_jpeg_strip()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-10.el6_5","libtiff-0:3.8.2-19.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1960.json"},{"CVE":"CVE-2012-4564","severity":"moderate","public_date":"2012-11-02T00:00:00Z","advisories":["RHSA-2012:1590"],"bugzilla":"871700","bugzilla_description":"CVE-2012-4564 libtiff: Missing return value check in ppm2tiff leading to heap-buffer overflow when reading a tiff file","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-9.el6_3","libtiff-0:3.8.2-18.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4564.json"},{"CVE":"CVE-2012-5581","severity":"moderate","public_date":"2012-10-18T00:00:00Z","advisories":["RHSA-2012:1590"],"bugzilla":"867235","bugzilla_description":"CVE-2012-5581 libtiff: Stack-based buffer overflow when reading a tiled tiff file","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["libtiff-0:3.9.4-9.el6_3","libtiff-0:3.8.2-18.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5581.json"},{"CVE":"CVE-2012-4447","severity":"moderate","public_date":"2012-09-22T00:00:00Z","advisories":["RHSA-2012:1590"],"bugzilla":"860198","bugzilla_description":"CVE-2012-4447 libtiff: Heap-buffer overflow when processing a TIFF image with PixarLog Compression","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-9.el6_3","libtiff-0:3.8.2-18.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4447.json"},{"CVE":"CVE-2012-3401","severity":"moderate","public_date":"2012-07-18T00:00:00Z","advisories":["RHSA-2012:1590"],"bugzilla":"837577","bugzilla_description":"CVE-2012-3401 libtiff (tiff2pdf): Heap-based buffer overflow due to improper initialization of T2P context struct pointer","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-9.el6_3","libtiff-0:3.8.2-18.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3401.json"},{"CVE":"CVE-2012-2113","severity":"moderate","public_date":"2012-06-15T00:00:00Z","advisories":["RHSA-2012:1054"],"bugzilla":"810551","bugzilla_description":"CVE-2012-2113 libtiff: integer overflow in tiff2pdf leading to heap-buffer overflow when reading a tiled tiff file","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libtiff-0:3.9.4-6.el6_3","libtiff-0:3.8.2-15.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2113.json"},{"CVE":"CVE-2012-2088","severity":"important","public_date":"2012-06-15T00:00:00Z","advisories":["RHSA-2012:1054"],"bugzilla":"832864","bugzilla_description":"CVE-2012-2088 libtiff: Type conversion flaw leading to heap-buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.9.4-6.el6_3","libtiff-0:3.8.2-15.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2088.json"},{"CVE":"CVE-2012-1173","severity":"important","public_date":"2012-04-04T00:00:00Z","advisories":["RHSA-2012:0468"],"bugzilla":"803078","bugzilla_description":"CVE-2012-1173 libtiff: Heap-buffer overflow due to TileSize calculation when parsing tiff files","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.8.2-14.el5_8","libtiff-0:3.9.4-5.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1173.json"},{"CVE":"CVE-2011-1167","severity":"important","public_date":"2011-03-21T00:00:00Z","advisories":["RHSA-2011:0392"],"bugzilla":"684939","bugzilla_description":"CVE-2011-1167 libtiff: heap-based buffer overflow in thunder decoder (ZDI-11-107)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtiff-0:3.8.2-7.el5_6.7","libtiff-0:3.9.4-1.el6_0.2","libtiff-0:3.6.1-18.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1167.json"},{"CVE":"CVE-2011-0192","severity":"important","public_date":"2011-03-02T00:00:00Z","advisories":["RHSA-2011:0318"],"bugzilla":"678635","bugzilla_description":"CVE-2011-0192 libtiff: buffer overflow in Fax4Decode","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libtiff-0:3.8.2-7.el5_6.6","libtiff-0:3.9.4-1.el6_0.1","libtiff-0:3.6.1-17.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0192.json"},{"CVE":"CVE-2011-0191","severity":"important","public_date":"2011-03-02T00:00:00Z","advisories":[],"bugzilla":"678956","bugzilla_description":"CVE-2011-0191 libtiff: buffer overflow in JPEGDecode","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0191.json"},{"CVE":"CVE-2010-3087","severity":"important","public_date":"2010-07-02T00:00:00Z","advisories":[],"bugzilla":"638301","bugzilla_description":"CVE-2010-3087 libtiff: DoS or possible arbitrary code execution via crafted TIFF image","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P/","CWE":"CWE-190->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3087.json"},{"CVE":"CVE-2010-2481","severity":"low","public_date":"2010-06-23T00:00:00Z","advisories":["RHSA-2010:0519"],"bugzilla":"611895","bugzilla_description":"CVE-2010-2481 libtiff: TIFFExtractData out-of-bounds read crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libtiff-0:3.8.2-7.el5_5.5","libtiff-0:3.6.1-12.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2481.json"},{"CVE":"CVE-2010-4665","severity":"low","public_date":"2010-06-22T00:00:00Z","advisories":["RHSA-2010:0519"],"bugzilla":"695887","bugzilla_description":"CVE-2010-4665 libtiff tiffdump integer overflow","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["libtiff-0:3.8.2-7.el5_5.5","libtiff-0:3.6.1-12.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4665.json"},{"CVE":"CVE-2010-2483","severity":"low","public_date":"2010-06-16T00:00:00Z","advisories":["RHSA-2010:0519"],"bugzilla":"611900","bugzilla_description":"CVE-2010-2483 libtiff: out-of-bounds read crash on images with invalid SamplesPerPixel values","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libtiff-0:3.8.2-7.el5_5.5","libtiff-0:3.6.1-12.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2483.json"},{"CVE":"CVE-2010-2065","severity":null,"public_date":"2010-06-15T00:00:00Z","advisories":[],"bugzilla":"601274","bugzilla_description":"CVE-2010-2065 libtiff: TIFFroundup() integer overflow in TIFFFillStrip()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2065.json"},{"CVE":"CVE-2010-1411","severity":"important","public_date":"2010-06-14T00:00:00Z","advisories":["RHSA-2010:0520","RHSA-2010:0519"],"bugzilla":"592361","bugzilla_description":"CVE-2010-1411 libtiff: integer overflows leading to heap overflow in Fax3SetupState","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["libtiff-0:3.8.2-7.el5_5.5","libtiff-0:3.6.1-12.el4_8.5","libtiff-0:3.5.7-34.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1411.json"},{"CVE":"CVE-2010-2597","severity":"low","public_date":"2010-06-12T00:00:00Z","advisories":["RHSA-2010:0519"],"bugzilla":"610776","bugzilla_description":"CVE-2010-2597 libtiff: use of uninitialized values crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:3.8.2-7.el5_5.5","libtiff-0:3.6.1-12.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2597.json"},{"CVE":"CVE-2010-2598","severity":"low","public_date":"2010-06-10T00:00:00Z","advisories":["RHSA-2010:0520"],"bugzilla":"610786","bugzilla_description":"CVE-2010-2598 libtiff: crash when reading image with not configured compression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:3.5.7-34.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2598.json"},{"CVE":"CVE-2010-2595","severity":"low","public_date":"2010-04-16T00:00:00Z","advisories":["RHSA-2010:0519"],"bugzilla":"610684","bugzilla_description":"CVE-2010-2595 libtiff: Array index error due improper handling of invalid ReferenceBlackWhite values","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:3.8.2-7.el5_5.5","libtiff-0:3.6.1-12.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2595.json"},{"CVE":"CVE-2010-2596","severity":"low","public_date":"2010-04-16T00:00:00Z","advisories":["RHSA-2014:0222"],"bugzilla":"610759","bugzilla_description":"CVE-2010-2596 libtiff: assertion failure on downsampled OJPEG file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:3.9.4-10.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2596.json"},{"CVE":"CVE-2009-2347","severity":"moderate","public_date":"2009-07-13T00:00:00Z","advisories":["RHSA-2009:1159"],"bugzilla":"510041","bugzilla_description":"CVE-2009-2347 libtiff: integer overflows in various inter-color spaces conversion tools (crash, ACE)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":["libtiff-0:3.6.1-12.el4_8.4","libtiff-0:3.8.2-7.el5_3.4","libtiff-0:3.5.7-33.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2347.json"},{"CVE":"CVE-2009-5022","severity":"important","public_date":"2009-02-09T00:00:00Z","advisories":["RHSA-2011:0452"],"bugzilla":"695885","bugzilla_description":"CVE-2009-5022 libtiff ojpeg buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-228->CWE-119","affected_packages":["libtiff-0:3.9.4-1.el6_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5022.json"},{"CVE":"CVE-2009-2285","severity":"moderate","public_date":"2009-01-03T00:00:00Z","advisories":["RHSA-2009:1159"],"bugzilla":"507465","bugzilla_description":"CVE-2009-2285 libtiff: LZWDecodeCompat underflow","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtiff-0:3.6.1-12.el4_8.4","libtiff-0:3.8.2-7.el5_3.4","libtiff-0:3.5.7-33.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2285.json"},{"CVE":"CVE-2008-2327","severity":"important","public_date":"2008-08-26T00:00:00Z","advisories":["RHSA-2008:0863","RHSA-2008:0848","RHSA-2008:0847"],"bugzilla":"458674","bugzilla_description":"CVE-2008-2327 libtiff: use of uninitialized memory in LZW decoder","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.6.1-12.el4_7.2","libtiff-0:3.5.7-31.el3","libtiff-0:3.8.2-7.el5_2.2","libtiff-0:3.5.7-31.el2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2327.json"},{"CVE":"CVE-2006-3459","severity":"important","public_date":"2006-08-01T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0603"],"bugzilla":"199111","bugzilla_description":"CVE-2006-3459 Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3459.json"},{"CVE":"CVE-2006-3460","severity":"important","public_date":"2006-08-01T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0603"],"bugzilla":"199111","bugzilla_description":"CVE-2006-3459 Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3460.json"},{"CVE":"CVE-2006-3461","severity":"important","public_date":"2006-08-01T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0603"],"bugzilla":"199111","bugzilla_description":"CVE-2006-3459 Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3461.json"},{"CVE":"CVE-2006-3462","severity":"important","public_date":"2006-08-01T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0603"],"bugzilla":"199111","bugzilla_description":"CVE-2006-3459 Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3462.json"},{"CVE":"CVE-2006-3463","severity":"important","public_date":"2006-08-01T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0603"],"bugzilla":"199111","bugzilla_description":"CVE-2006-3459 Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3463.json"},{"CVE":"CVE-2006-3464","severity":"important","public_date":"2006-08-01T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0603"],"bugzilla":"199111","bugzilla_description":"CVE-2006-3459 Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3464.json"},{"CVE":"CVE-2006-3465","severity":"important","public_date":"2006-08-01T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0603"],"bugzilla":"199111","bugzilla_description":"CVE-2006-3459 Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3465.json"},{"CVE":"CVE-2006-2193","severity":"low","public_date":"2006-06-07T00:00:00Z","advisories":["RHSA-2008:0848"],"bugzilla":"194362","bugzilla_description":"CVE-2006-2193 tiff2pdf buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.6.1-12.el4_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2193.json"},{"CVE":"CVE-2006-2656","severity":"low","public_date":"2006-05-25T00:00:00Z","advisories":["RHSA-2006:0603"],"bugzilla":"193166","bugzilla_description":"CVE-2006-2656 tiffsplit buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.4","libtiff-0:3.6.1-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2656.json"},{"CVE":"CVE-2006-2024","severity":"important","public_date":"2006-03-03T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0425"],"bugzilla":"1618083","bugzilla_description":"CVE-2006-2024 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.1","libtiff-0:3.6.1-10","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2024.json"},{"CVE":"CVE-2006-2025","severity":"important","public_date":"2006-03-03T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0425"],"bugzilla":"1618084","bugzilla_description":"CVE-2006-2025 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.1","libtiff-0:3.6.1-10","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2025.json"},{"CVE":"CVE-2006-2026","severity":"important","public_date":"2006-03-03T00:00:00Z","advisories":["RHSA-2006:0648","RHSA-2006:0425"],"bugzilla":"1618085","bugzilla_description":"CVE-2006-2026 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.1","libtiff-0:3.6.1-10","kdegraphics-7:3.1.3-3.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2026.json"},{"CVE":"CVE-2006-2120","severity":"moderate","public_date":"2006-02-08T00:00:00Z","advisories":["RHSA-2006:0425"],"bugzilla":"1618087","bugzilla_description":"CVE-2006-2120 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-25.el3.1","libtiff-0:3.6.1-10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2120.json"},{"CVE":"CVE-2004-1183","severity":"low","public_date":"2005-01-05T00:00:00Z","advisories":["RHSA-2005:035","RHSA-2005:019"],"bugzilla":"1617390","bugzilla_description":"CVE-2004-1183 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.6.1-8","libtiff-0:3.5.7-22.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1183.json"},{"CVE":"CVE-2004-1307","severity":"moderate","public_date":"2004-12-21T00:00:00Z","advisories":["RHSA-2005:021","RHSA-2004:577"],"bugzilla":"1617405","bugzilla_description":"CVE-2004-1307 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-20.1","kdegraphics-7:3.1.3-3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1307.json"},{"CVE":"CVE-2004-1308","severity":"important","public_date":"2004-12-21T00:00:00Z","advisories":["RHSA-2005:035","RHSA-2005:021","RHSA-2005:019"],"bugzilla":"1617406","bugzilla_description":"CVE-2004-1308 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["kdegraphics-7:3.1.3-3.7","libtiff-0:3.6.1-8","libtiff-0:3.5.7-22.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1308.json"},{"CVE":"CVE-2004-0803","severity":"important","public_date":"2004-10-13T00:00:00Z","advisories":["RHSA-2005:354","RHSA-2005:021","RHSA-2004:577"],"bugzilla":"1617294","bugzilla_description":"CVE-2004-0803 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-20.1","kdegraphics-7:3.1.3-3.7","tetex-0:1.0.7-67.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0803.json"},{"CVE":"CVE-2004-0886","severity":"moderate","public_date":"2004-10-13T00:00:00Z","advisories":["RHSA-2005:354","RHSA-2005:021","RHSA-2004:577"],"bugzilla":"1617314","bugzilla_description":"CVE-2004-0886 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-20.1","kdegraphics-7:3.1.3-3.7","tetex-0:1.0.7-67.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0886.json"},{"CVE":"CVE-2004-0804","severity":null,"public_date":"2002-03-15T00:00:00Z","advisories":["RHSA-2005:354","RHSA-2005:021","RHSA-2004:577"],"bugzilla":"1617295","bugzilla_description":"CVE-2004-0804 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libtiff-0:3.5.7-20.1","kdegraphics-7:3.1.3-3.7","tetex-0:1.0.7-67.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0804.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtimezonemap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtimezonemap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtimezonemap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtirpc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtirpc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtirpc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtirpc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtirpc_security_api_results.json
new file mode 100644
index 0000000..8d679e3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtirpc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-8779","severity":"important","public_date":"2017-05-03T00:00:00Z","advisories":["RHSA-2017:1262","RHBA-2017:1497","RHSA-2017:1263","RHSA-2017:1395","RHSA-2017:1268","RHSA-2017:1267"],"bugzilla":"1448124","bugzilla_description":"CVE-2017-8779 rpcbind, libtirpc, libntirpc: Memory leak when failing to parse XDR strings or bytearrays","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rpcbind-0:0.2.0-13.el6_9","libntirpc-0:1.4.3-4.el7rhgs","libtirpc-0:0.2.4-0.8.el7_3","libntirpc-0:1.4.3-2.el7","libntirpc-0:1.4.3-4.el6rhs","libtirpc-0:0.2.1-13.el6_9","rpcbind-0:0.2.0-38.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-4429","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1337136","bugzilla_description":"CVE-2016-4429 glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4429.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14621","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":[],"bugzilla":"1620290","bugzilla_description":"CVE-2018-14621 libtirpc: Infinite loop in EMFILE case in svc_vc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14621.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14622","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHBA-2017:1991"],"bugzilla":"1620293","bugzilla_description":"CVE-2018-14622 libtirpc: Segmentation fault in makefd_xprt return value in svc_vc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libtirpc-0:0.2.4-0.10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2013-1950","severity":"moderate","public_date":"2013-04-18T00:00:00Z","advisories":["RHSA-2013:0884"],"bugzilla":"948378","bugzilla_description":"CVE-2013-1950 libtirpc: invalid pointer free leads to rpcbind daemon crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtirpc-0:0.2.1-6.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1950.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtool-ltdl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtool-ltdl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtool-ltdl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtool-ltdl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtool-ltdl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtool-ltdl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtool_security_api_results.json
new file mode 100644
index 0000000..9baa68f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtool_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2009-3736","severity":"moderate","public_date":"2009-11-16T00:00:00Z","advisories":["RHSA-2009:1646","RHSA-2010:0039"],"bugzilla":"537941","bugzilla_description":"CVE-2009-3736 libtool: libltdl may load and execute code from a library in the current directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libtool-0:1.5.6-5.el4_8","gcc-0:4.1.2-46.el5_4.2","libtool-0:1.4.3-7","gcc-0:3.2.3-60","gcc-0:3.4.6-11.el4_8.1","libtool-0:1.5.22-7.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3736.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtsan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtsan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libtsan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libubsan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libubsan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libubsan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libucil-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libucil-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libucil-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libucil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libucil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libucil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libudisks2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libudisks2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libudisks2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunicap-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunicap-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunicap-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunicap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunicap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunicap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuninameslist_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuninameslist_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuninameslist_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunistring-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunistring-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunistring-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunistring_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunistring_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libunistring_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liburing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liburing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/liburing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbmuxd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbmuxd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbmuxd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbmuxd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbmuxd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbmuxd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbx-devel-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbx-devel-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbx-devel-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbx-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbx-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbx-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libusbx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuser_security_api_results.json
new file mode 100644
index 0000000..ba0ee94
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuser_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-3245","severity":"moderate","public_date":"2015-07-23T00:00:00Z","advisories":["RHSA-2015:1483","RHSA-2015:1482"],"bugzilla":"1233043","bugzilla_description":"CVE-2015-3245 libuser: does not filter newline characters in the GECOS field","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-138","affected_packages":["libuser-0:0.56.13-8.el6_7","libuser-0:0.60-7.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3245.json"},{"CVE":"CVE-2015-3246","severity":"important","public_date":"2015-07-23T00:00:00Z","advisories":["RHSA-2015:1483","RHSA-2015:1482"],"bugzilla":"1233052","bugzilla_description":"CVE-2015-3246 libuser: Security flaw in handling /etc/passwd file","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["libuser-0:0.56.13-8.el6_7","libuser-0:0.60-7.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3246.json"},{"CVE":"CVE-2012-5630","severity":"low","public_date":"2013-03-28T00:00:00Z","advisories":[],"bugzilla":"884685","bugzilla_description":"CVE-2012-5630 libuser: TOCTOU race conditions by copying and removing directory trees","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5630.json"},{"CVE":"CVE-2012-5644","severity":"low","public_date":"2013-03-28T00:00:00Z","advisories":[],"bugzilla":"885724","bugzilla_description":"CVE-2012-5644 libuser: (Complete) Information disclosure when moving user's home directory","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5644.json"},{"CVE":"CVE-2011-0002","severity":"moderate","public_date":"2011-01-10T00:00:00Z","advisories":["RHSA-2011:0170"],"bugzilla":"643227","bugzilla_description":"CVE-2011-0002 libuser creates LDAP users with a default password","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["libuser-0:0.54.7-2.1.el5_5.2","libuser-0:0.52.5-1.1.el4_8.1","libuser-0:0.56.13-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0002.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libutempter-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libutempter-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libutempter-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libutempter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libutempter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libutempter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuuid-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuuid-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuuid-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuuid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuuid_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuuid_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuv_security_api_results.json
new file mode 100644
index 0000000..3a0c7ab
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libuv_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8252","severity":"important","public_date":"2020-09-15T00:00:00Z","advisories":["RHSA-2020:4272"],"bugzilla":"1879315","bugzilla_description":"CVE-2020-8252 libuv: buffer overflow in realpath","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-122","affected_packages":["nodejs:12-8020020201007080935.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8252.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2015-0278","severity":"moderate","public_date":"2014-02-10T00:00:00Z","advisories":[],"bugzilla":"1194651","bugzilla_description":"CVE-2015-0278 libuv: incorrect revocation order while relinquishing privileges","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0278.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libv4l-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libv4l-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libv4l-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libv4l_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libv4l_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libv4l_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libva-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libva-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libva-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libva_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libva_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libva_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvarlink-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvarlink-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvarlink-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvarlink-util_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvarlink-util_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvarlink-util_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvarlink_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvarlink_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvarlink_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvdpau-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvdpau-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvdpau-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvdpau_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvdpau_security_api_results.json
new file mode 100644
index 0000000..5715dde
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvdpau_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5198","severity":"moderate","public_date":"2015-08-31T00:00:00Z","advisories":[],"bugzilla":"1253824","bugzilla_description":"CVE-2015-5198 libvdpau incorrect check for security transition","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5198.json"},{"CVE":"CVE-2015-5199","severity":"moderate","public_date":"2015-08-31T00:00:00Z","advisories":[],"bugzilla":"1253826","bugzilla_description":"CVE-2015-5199 libvdpau directory traversal in dlopen","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5199.json"},{"CVE":"CVE-2015-5200","severity":"moderate","public_date":"2015-08-31T00:00:00Z","advisories":[],"bugzilla":"1253827","bugzilla_description":"CVE-2015-5200 libvdpau vulnerability in trace functionality","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5200.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libverto-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libverto-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libverto-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libverto-libevent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libverto-libevent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libverto-libevent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libverto_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libverto_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libverto_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-admin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-admin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-admin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-bash-completion_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-bash-completion_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-bash-completion_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-config-network_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-config-network_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-config-network_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-config-nwfilter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-config-nwfilter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-config-nwfilter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-interface_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-interface_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-interface_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-network_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-network_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-network_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-nodedev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-nodedev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-nodedev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-nwfilter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-nwfilter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-nwfilter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-qemu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-qemu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-qemu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-secret_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-secret_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-secret_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-disk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-disk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-disk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-gluster_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-gluster_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-gluster_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-iscsi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-iscsi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-iscsi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-logical_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-logical_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-logical_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-mpath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-mpath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-mpath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-rbd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-rbd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-rbd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-scsi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-scsi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage-scsi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-driver-storage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-kvm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-kvm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon-kvm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-daemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-dbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-dbus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-dbus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-gconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-gconfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-gconfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-gobject_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-gobject_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-gobject_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-lock-sanlock_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-lock-sanlock_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-lock-sanlock_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-nss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-nss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt-nss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt_security_api_results.json
new file mode 100644
index 0000000..76e3c46
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvirt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-25637","severity":"moderate","public_date":"2020-09-30T00:00:00Z","advisories":[],"bugzilla":"1881037","bugzilla_description":"CVE-2020-25637 libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25637.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-15708","severity":"moderate","public_date":"2020-08-04T00:00:00Z","advisories":[],"bugzilla":"1866270","bugzilla_description":"CVE-2020-15708 libvirt: incorrect permissions on the UNIX domain socket allows local attacker to escalate privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15708.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-14339","severity":"important","public_date":"2020-07-17T00:00:00Z","advisories":["RHSA-2020:3586"],"bugzilla":"1860069","bugzilla_description":"CVE-2020-14339 libvirt: leak of /dev/mapper/control into QEMU guests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14339.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14301","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHBA-2020:3172"],"bugzilla":"1848640","bugzilla_description":"CVE-2020-14301 libvirt: leak of sensitive cookie information via dumpxml","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14301.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2020-10701","severity":"moderate","public_date":"2020-03-20T00:00:00Z","advisories":[],"bugzilla":"1819163","bugzilla_description":"CVE-2020-10701 libvirt: guest agent timeout can be set under read-only mode leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10701.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12430","severity":"moderate","public_date":"2020-02-19T00:00:00Z","advisories":[],"bugzilla":"1828190","bugzilla_description":"CVE-2020-12430 libvirt: memory leak in domstats may allow read-only user to perform DoS attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12430.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-10703","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:4000"],"bugzilla":"1816650","bugzilla_description":"CVE-2020-10703 libvirt: Potential denial of service via active pool without target path","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libvirt-0:4.5.0-36.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10703.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-20485","severity":"moderate","public_date":"2019-12-05T00:00:00Z","advisories":["RHSA-2020:4000"],"bugzilla":"1809740","bugzilla_description":"CVE-2019-20485 libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["libvirt-0:4.5.0-36.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20485.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10166","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720114","bugzilla_description":"CVE-2019-10166 libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10166.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10161","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1578","RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720115","bugzilla_description":"CVE-2019-10161 libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","libvirt-0:0.10.2-64.el6_10.2","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10167","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720117","bugzilla_description":"CVE-2019-10167 libvirt: arbitrary command execution via virConnectGetDomainCapabilities API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-284|CWE-250)","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10168","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720118","bugzilla_description":"CVE-2019-10168 libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-284|CWE-250)","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10168.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10132","severity":"important","public_date":"2019-05-21T12:00:00Z","advisories":["RHSA-2019:1264","RHSA-2019:1268","RHSA-2019:1455"],"bugzilla":"1706067","bugzilla_description":"CVE-2019-10132 libvirt: wrong permissions in systemd admin-sock due to missing SocketMode parameter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["virt:rhel-8000020190516125745.55190bc5","virt:8.0.0-8000020190530233731.55190bc5","libvirt-0:4.5.0-10.el7_6.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12126","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646781","bugzilla_description":"CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12130","severity":"important","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646784","bugzilla_description":"CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385->CWE-226","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-12127","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1667782","bugzilla_description":"CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11091","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1705312","bugzilla_description":"CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2016-10746","severity":"moderate","public_date":"2019-04-18T00:00:00Z","advisories":[],"bugzilla":"1705507","bugzilla_description":"CVE-2016-10746 libvirt: libvirt-domain.c supports virDomainGetTime API calls with an RO connection instead of RW connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10746.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-3886","severity":"low","public_date":"2019-04-03T00:00:00Z","advisories":["RHBA-2019:3723"],"bugzilla":"1694880","bugzilla_description":"CVE-2019-3886 libvirt: virsh domhostname command discloses guest hostname in readonly mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3886.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-3840","severity":"moderate","public_date":"2019-01-10T00:00:00Z","advisories":["RHSA-2019:2294"],"bugzilla":"1665228","bugzilla_description":"CVE-2019-3840 libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libvirt-0:4.5.0-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3840.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2018-17942","severity":"low","public_date":"2018-09-19T00:00:00Z","advisories":[],"bugzilla":"1635896","bugzilla_description":"CVE-2018-17942 gnulib: heap-based buffer overflow in convert_to_decimal function in vasnprintf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-1064","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:1929","RHSA-2018:1396"],"bugzilla":"1550672","bugzilla_description":"CVE-2018-1064 libvirt: Incomplete fix for CVE-2018-5748 triggered by QEMU guest agent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["libvirt-0:0.10.2-64.el6","libvirt-0:3.9.0-14.el7_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1064.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6764","severity":"moderate","public_date":"2018-02-05T00:00:00Z","advisories":["RHSA-2018:3113"],"bugzilla":"1541444","bugzilla_description":"CVE-2018-6764 libvirt: guest could inject executable code via libnss_dns.so loaded by libvirt_lxc before init","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-179","affected_packages":["libvirt-0:4.5.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6764.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-5748","severity":"low","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:1929","RHSA-2018:1396"],"bugzilla":"1528396","bugzilla_description":"CVE-2018-5748 libvirt: Resource exhaustion via qemuMonitorIORead() method","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["libvirt-0:0.10.2-64.el6","libvirt-0:3.9.0-14.el7_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5748.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2017-1000256","severity":"low","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1503658","bugzilla_description":"CVE-2017-1000256 libvirt: TLS certificate verification disabled for clients","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000256.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2017-2635","severity":"moderate","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1427090","bugzilla_description":"CVE-2017-2635 libvirt: Null pointer dereference when updating storage size on empty drives","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2015-5313","severity":"moderate","public_date":"2015-12-11T00:00:00Z","advisories":["RHSA-2016:2577"],"bugzilla":"1277121","bugzilla_description":"CVE-2015-5313 libvirt: filesystem storage volume names path traversal flaw","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:C/A:N","CWE":"CWE-22","affected_packages":["libvirt-0:2.0.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5313.json"},{"CVE":"CVE-2015-5247","severity":"low","public_date":"2015-09-03T00:00:00Z","advisories":[],"bugzilla":"1259350","bugzilla_description":"CVE-2015-5247 libvirt: denial of service when volume creation fails on NFS pool","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5247.json"},{"CVE":"CVE-2015-5160","severity":"moderate","public_date":"2015-08-10T00:00:00Z","advisories":["RHSA-2016:2577"],"bugzilla":"1245647","bugzilla_description":"CVE-2015-5160 libvirt: Ceph id/key leaked in the process list","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libvirt-0:2.0.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5160.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2015-0236","severity":"low","public_date":"2015-01-22T00:00:00Z","advisories":["RHSA-2015:0323"],"bugzilla":"1184431","bugzilla_description":"CVE-2015-0236 libvirt: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save images and snapshots objects","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-285->CWE-200","affected_packages":["libvirt-0:1.2.8-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0236.json"},{"CVE":"CVE-2016-5008","severity":"moderate","public_date":"2015-01-18T00:00:00Z","advisories":["RHSA-2016:2577"],"bugzilla":"1351514","bugzilla_description":"CVE-2016-5008 libvirt: Setting empty VNC password allows access to unauthorized users","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libvirt-0:2.0.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5008.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2014-8136","severity":"low","public_date":"2014-12-17T00:00:00Z","advisories":["RHSA-2015:0323"],"bugzilla":"1176176","bugzilla_description":"CVE-2014-8136 libvirt: local denial of service in qemu/qemu_driver.c","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:1.2.8-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8136.json"},{"CVE":"CVE-2014-8135","severity":"moderate","public_date":"2014-12-17T00:00:00Z","advisories":[],"bugzilla":"1176182","bugzilla_description":"CVE-2014-8135 libvirt: local denial of service in storage/storage_driver.c","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8135.json"},{"CVE":"CVE-2014-8131","severity":"low","public_date":"2014-12-05T00:00:00Z","advisories":[],"bugzilla":"1172569","bugzilla_description":"CVE-2014-8131 libvirt: deadlock and segfault in qemuConnectGetAllDomainStats","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8131.json"},{"CVE":"CVE-2014-7823","severity":"low","public_date":"2014-11-05T00:00:00Z","advisories":["RHSA-2014:1873","RHSA-2015:0008"],"bugzilla":"1160817","bugzilla_description":"CVE-2014-7823 libvirt: dumpxml: information leak with migratable flag","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libvirt-0:0.10.2-46.el6_6.2","libvirt-0:1.1.1-29.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7823.json"},{"CVE":"CVE-2014-3657","severity":"moderate","public_date":"2014-10-01T00:00:00Z","advisories":["RHSA-2014:1873","RHSA-2014:1352"],"bugzilla":"1145667","bugzilla_description":"CVE-2014-3657 libvirt: domain_conf: domain deadlock DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["libvirt-0:0.10.2-46.el6_6.2","libvirt-0:1.1.1-29.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3657.json"},{"CVE":"CVE-2014-3633","severity":"moderate","public_date":"2014-09-17T00:00:00Z","advisories":["RHSA-2014:1873","RHSA-2014:1352"],"bugzilla":"1141131","bugzilla_description":"CVE-2014-3633 libvirt: qemu: out-of-bounds read access in qemuDomainGetBlockIoTune() due to invalid index","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["libvirt-0:0.10.2-46.el6_6.2","libvirt-0:1.1.1-29.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3633.json"},{"CVE":"CVE-2014-0179","severity":"moderate","public_date":"2014-05-06T00:00:00Z","advisories":["RHSA-2014:0914","RHSA-2014:0560"],"bugzilla":"1088290","bugzilla_description":"CVE-2014-0179 CVE-2014-5177 libvirt: unsafe parsing of XML documents allows libvirt DoS and/or arbitrary file read","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-611","affected_packages":["libvirt-0:1.1.1-29.el7_0.1","libvirt-0:0.10.2-29.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0179.json"},{"CVE":"CVE-2014-5177","severity":"moderate","public_date":"2014-05-06T00:00:00Z","advisories":["RHSA-2014:0914"],"bugzilla":"1088290","bugzilla_description":"CVE-2014-0179 CVE-2014-5177 libvirt: unsafe parsing of XML documents allows libvirt DoS and/or arbitrary file read","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-611","affected_packages":["libvirt-0:1.1.1-29.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5177.json"},{"CVE":"CVE-2014-0028","severity":"moderate","public_date":"2014-01-15T00:00:00Z","advisories":[],"bugzilla":"1048637","bugzilla_description":"CVE-2014-0028 libvirt: event registration bypasses domain:getattr ACL","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0028.json"},{"CVE":"CVE-2014-1447","severity":"moderate","public_date":"2013-12-31T00:00:00Z","advisories":["RHSA-2014:0103"],"bugzilla":"1052957","bugzilla_description":"CVE-2014-1447 libvirt: denial of service with keepalive","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-29.el6_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1447.json"},{"CVE":"CVE-2013-6436","severity":"moderate","public_date":"2013-12-20T00:00:00Z","advisories":[],"bugzilla":"1042252","bugzilla_description":"CVE-2013-6436 libvirt: crash in lxcDomainGetMemoryParameters","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6436.json"},{"CVE":"CVE-2013-6457","severity":"moderate","public_date":"2013-12-20T00:00:00Z","advisories":[],"bugzilla":"1048629","bugzilla_description":"CVE-2013-6457 libvirt: avoid crashing if calling 'virsh numatune' on an inactive domain (libxl)","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6457.json"},{"CVE":"CVE-2013-6456","severity":"moderate","public_date":"2013-12-17T00:00:00Z","advisories":[],"bugzilla":"1048627","bugzilla_description":"CVE-2013-6456 libvirt: unsafe usage of paths under /proc/$PID/root","cvss_score":6.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:P/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6456.json"},{"CVE":"CVE-2013-6441","severity":"moderate","public_date":"2013-12-16T00:00:00Z","advisories":[],"bugzilla":"1045988","bugzilla_description":"CVE-2013-6441 lxc: sshd template allow privilege escalation on host","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6441.json"},{"CVE":"CVE-2013-6458","severity":"moderate","public_date":"2013-12-13T00:00:00Z","advisories":["RHSA-2014:0103"],"bugzilla":"1048631","bugzilla_description":"CVE-2013-6458 qemu: job usage issue in several APIs leading to libvirtd crash","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libvirt-0:0.10.2-29.el6_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6458.json"},{"CVE":"CVE-2013-4400","severity":"important","public_date":"2013-10-21T00:00:00Z","advisories":[],"bugzilla":"1015228","bugzilla_description":"CVE-2013-4400 libvirt: virt-login-shell arbitrary file overwrites vulnerability","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4400.json"},{"CVE":"CVE-2013-4401","severity":"important","public_date":"2013-10-21T00:00:00Z","advisories":[],"bugzilla":"1015259","bugzilla_description":"CVE-2013-4401 libvirt: unintended API access due to incorrect permissions checks","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4401.json"},{"CVE":"CVE-2013-4399","severity":"moderate","public_date":"2013-09-27T00:00:00Z","advisories":[],"bugzilla":"1015214","bugzilla_description":"CVE-2013-4399 libvirt: unprivileged user can crash libvirtd when ACLs are enabled","cvss_score":5.5,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4399.json"},{"CVE":"CVE-2013-7336","severity":"moderate","public_date":"2013-09-19T00:00:00Z","advisories":["RHBA-2013:1581"],"bugzilla":"1077620","bugzilla_description":"CVE-2013-7336 libvirt: unprivileged user can crash libvirtd during spice migration","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-29.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7336.json"},{"CVE":"CVE-2013-4311","severity":"important","public_date":"2013-09-18T00:00:00Z","advisories":["RHSA-2013:1272"],"bugzilla":"1005332","bugzilla_description":"CVE-2013-4311 libvirt: insecure calling of polkit","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libvirt-0:0.10.2-18.el6_4.14"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4311.json"},{"CVE":"CVE-2013-4296","severity":"moderate","public_date":"2013-09-18T00:00:00Z","advisories":["RHSA-2013:1272"],"bugzilla":"1006173","bugzilla_description":"CVE-2013-4296 libvirt: invalid free in remoteDispatchDomainMemoryStats","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-18.el6_4.14"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4296.json"},{"CVE":"CVE-2013-4297","severity":"moderate","public_date":"2013-09-03T00:00:00Z","advisories":[],"bugzilla":"1006505","bugzilla_description":"CVE-2013-4297 libvirt: invalid free in virFileNBDDeviceAssociate","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4297.json"},{"CVE":"CVE-2013-4292","severity":"moderate","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"1002666","bugzilla_description":"CVE-2013-4292 libvirt: unbounded RPC arrays in remote protocol","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4292.json"},{"CVE":"CVE-2013-5651","severity":"moderate","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"1006493","bugzilla_description":"CVE-2013-5651 libvirt: virBitmapParse out-of-bounds read access","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5651.json"},{"CVE":"CVE-2013-4291","severity":"low","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"1006509","bugzilla_description":"CVE-2013-4291 libvirt: supplementary groups not adjusted correctly when parsing label","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4291.json"},{"CVE":"CVE-2013-4239","severity":"important","public_date":"2013-08-05T00:00:00Z","advisories":[],"bugzilla":"996241","bugzilla_description":"CVE-2013-4239 libvirt: memory corruption in xenDaemonListDefinedDomains function","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4239.json"},{"CVE":"CVE-2013-4153","severity":"important","public_date":"2013-07-16T00:00:00Z","advisories":[],"bugzilla":"986383","bugzilla_description":"CVE-2013-4153 libvirt: double free of returned JSON array in qemuAgentGetVCPUs()","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4153.json"},{"CVE":"CVE-2013-4154","severity":"moderate","public_date":"2013-07-16T00:00:00Z","advisories":[],"bugzilla":"986386","bugzilla_description":"CVE-2013-4154 libvirt: crash of libvirtd without guest agent configuration","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4154.json"},{"CVE":"CVE-2013-2230","severity":"moderate","public_date":"2013-07-10T00:00:00Z","advisories":[],"bugzilla":"981476","bugzilla_description":"CVE-2013-2230 libvirt: multiple registered events crash","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2230.json"},{"CVE":"CVE-2013-2218","severity":"important","public_date":"2013-07-01T00:00:00Z","advisories":[],"bugzilla":"980112","bugzilla_description":"CVE-2013-2218 libvirt: virConnectListAllInterfaces crash","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2218.json"},{"CVE":"CVE-2013-1962","severity":"moderate","public_date":"2013-05-16T00:00:00Z","advisories":["RHSA-2013:0831"],"bugzilla":"953107","bugzilla_description":"CVE-2013-1962 libvirt: DoS (max count of open files exhaustion) due sockets leak in the storage pool","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-18.el6_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1962.json"},{"CVE":"CVE-2013-1766","severity":"moderate","public_date":"2013-02-25T00:00:00Z","advisories":[],"bugzilla":"915718","bugzilla_description":"CVE-2013-1766 libvirt: kvm-group writable storage","cvss_score":3.5,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1766.json"},{"CVE":"CVE-2013-0170","severity":"important","public_date":"2013-01-28T00:00:00Z","advisories":["RHSA-2013:0199"],"bugzilla":"893450","bugzilla_description":"CVE-2013-0170 libvirt: use-after-free in virNetMessageFree()","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["libvirt-0:0.9.10-21.el6_3.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0170.json"},{"CVE":"CVE-2012-3445","severity":"moderate","public_date":"2012-07-30T00:00:00Z","advisories":["RHSA-2012:1202"],"bugzilla":"844734","bugzilla_description":"CVE-2012-3445 libvirt: crash in virTypedParameterArrayClear","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.9.10-21.el6_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3445.json"},{"CVE":"CVE-2012-4423","severity":"moderate","public_date":"2012-07-24T00:00:00Z","advisories":["RHSA-2012:1359"],"bugzilla":"857133","bugzilla_description":"CVE-2012-4423 libvirt: null function pointer invocation in virNetServerProgramDispatchCall()","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.9.10-21.el6_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4423.json"},{"CVE":"CVE-2012-3411","severity":"moderate","public_date":"2012-07-09T00:00:00Z","advisories":["RHSA-2013:0579","RHSA-2013:0276","RHSA-2013:0277"],"bugzilla":"833033","bugzilla_description":"CVE-2012-3411 libvirt+dnsmasq: DNS configured to answer DNS queries from non-virtual networks","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-18.el6","rhev-hypervisor6-0:6.4-20130221.0.el6","dnsmasq-0:2.48-13.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3411.json"},{"CVE":"CVE-2012-2693","severity":"low","public_date":"2012-04-28T00:00:00Z","advisories":["RHSA-2012:0748","RHSA-2013:0127"],"bugzilla":"831164","bugzilla_description":"CVE-2012-2693 libvirt: address bus= device= when identicle vendor ID/product IDs usb devices attached are ignored","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libvirt-0:0.8.2-29.el5","libvirt-0:0.9.10-21.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2693.json"},{"CVE":"CVE-2011-4600","severity":"low","public_date":"2011-12-09T00:00:00Z","advisories":["RHBA-2012:0013"],"bugzilla":"765964","bugzilla_description":"CVE-2011-4600 libvirt: unintended firewall port exposure after restarting libvirtd when defining a bridged forward-mode network","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libvirt-0:0.9.4-23.el6_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4600.json"},{"CVE":"CVE-2011-2511","severity":"moderate","public_date":"2011-06-24T00:00:00Z","advisories":["RHSA-2011:1197","RHSA-2011:1019"],"bugzilla":"717199","bugzilla_description":"CVE-2011-2511 libvirt: integer overflow in VirDomainGetVcpus","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["libvirt-0:0.8.7-18.el6_1.1","libvirt-0:0.8.2-22.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2511.json"},{"CVE":"CVE-2011-2178","severity":"moderate","public_date":"2011-05-31T00:00:00Z","advisories":[],"bugzilla":"709769","bugzilla_description":"CVE-2011-2178 libvirt: regression introduced in disk probe logic","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2178.json"},{"CVE":"CVE-2011-1486","severity":"moderate","public_date":"2011-03-23T00:00:00Z","advisories":["RHSA-2011:0478","RHSA-2011:0479"],"bugzilla":"693391","bugzilla_description":"CVE-2011-1486 libvirt: error reporting in libvirtd is not thread safe","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.8.2-15.el5_6.4","libvirt-0:0.8.1-27.el6_0.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1486.json"},{"CVE":"CVE-2011-1146","severity":"important","public_date":"2011-03-02T00:00:00Z","advisories":["RHSA-2011:0391"],"bugzilla":"683650","bugzilla_description":"CVE-2011-1146 libvirt: several API calls do not honour read-only connection","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libvirt-0:0.8.1-27.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1146.json"},{"CVE":"CVE-2010-2242","severity":"low","public_date":"2010-07-12T00:00:00Z","advisories":["RHSA-2010:0615"],"bugzilla":"602455","bugzilla_description":"CVE-2010-2242 libvirt: improperly mapped source privileged ports may allow for obtaining privileged resources on the host","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["libvirt-0:0.6.3-33.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2242.json"},{"CVE":"CVE-2010-2237","severity":"moderate","public_date":"2010-07-12T00:00:00Z","advisories":[],"bugzilla":"607810","bugzilla_description":"CVE-2010-2237 libvirt: ignoring defined main disk format when looking up disk backing stores","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2237.json"},{"CVE":"CVE-2010-2238","severity":"moderate","public_date":"2010-07-12T00:00:00Z","advisories":[],"bugzilla":"607811","bugzilla_description":"CVE-2010-2238 libvirt: ignoring defined disk backing store format when recursing into disk image backing stores","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2238.json"},{"CVE":"CVE-2010-2239","severity":"low","public_date":"2010-07-12T00:00:00Z","advisories":["RHSA-2010:0615"],"bugzilla":"607812","bugzilla_description":"CVE-2010-2239 libvirt: not setting user defined backing store format when creating new image","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:N/A:N","CWE":null,"affected_packages":["libvirt-0:0.6.3-33.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2239.json"},{"CVE":"CVE-2009-0036","severity":"moderate","public_date":"2009-01-27T00:00:00Z","advisories":["RHSA-2009:0382"],"bugzilla":"484947","bugzilla_description":"CVE-2009-0036 libvirt: libvirt_proxy buffer overflow","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libvirt-0:0.3.3-14.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0036.json"},{"CVE":"CVE-2008-5086","severity":"moderate","public_date":"2008-12-17T00:00:00Z","advisories":["RHSA-2009:0382"],"bugzilla":"476560","bugzilla_description":"CVE-2008-5086 libvirt: missing checks for read-only connection","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.3.3-14.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5086.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisio-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisio-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisio-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisual-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisual-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisual-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisual_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisual_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvisual_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvma_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvma_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvma_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmem-debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmem-debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmem-debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmem-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmem-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmem-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmmalloc-debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmmalloc-debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmmalloc-debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmmalloc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmmalloc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmmalloc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmmalloc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmmalloc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvmmalloc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvncserver-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvncserver-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvncserver-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvncserver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvncserver_security_api_results.json
new file mode 100644
index 0000000..1db9307
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvncserver_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-20839","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1849877","bugzilla_description":"CVE-2019-20839 libvncserver: \"ConnectClientToUnixSock()\" buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20839.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20840","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1849881","bugzilla_description":"CVE-2019-20840 libvncserver: unaligned accesses in hybiReadAndDecode can lead to a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-21247","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1849886","bugzilla_description":"CVE-2018-21247 libvncserver: uninitialized memory contents are vulnerable to Information Leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-21247.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-14405","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860325","bugzilla_description":"CVE-2020-14405 libvncserver: libvncclient/rfbproto.c does not limit TextChat size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14403","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860334","bugzilla_description":"CVE-2020-14403 libvncserver: libvncserver/hextile.c allows out-of-bounds access via encodings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14403.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-14404","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860337","bugzilla_description":"CVE-2020-14404 libvncserver: libvncserver/rre.c allows out-of-bounds access via encodings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14404.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-14396","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860340","bugzilla_description":"CVE-2020-14396 libvncserver: libvncclient/tls_openssl.c has a NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14396.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14397","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860344","bugzilla_description":"CVE-2020-14397 libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14397.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14398","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860348","bugzilla_description":"CVE-2020-14398 libvncserver: an improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14398.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14399","severity":null,"public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860354","bugzilla_description":"CVE-2020-14399 libvncserver: byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14399.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-14400","severity":null,"public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860361","bugzilla_description":"CVE-2020-14400 libvncserver: byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14400.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-14401","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860364","bugzilla_description":"CVE-2020-14401 libvncserver: libvncserver/scale.c has a pixel_value integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14401.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-14402","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860367","bugzilla_description":"CVE-2020-14402 libvncserver: libvncserver/corre.c allows out-of-bounds access via encodings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14402.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-15690","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2020:0921","RHSA-2020:0913","RHSA-2020:0920"],"bugzilla":"1811948","bugzilla_description":"CVE-2019-15690 libvncserver: HandleCursorShape() integer overflow resulting in heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["libvncserver-0:0.9.9-14.el7_7","libvncserver-0:0.9.11-9.el8_0.2","libvncserver-0:0.9.11-9.el8_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15690.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-20788","severity":null,"public_date":"2019-11-17T00:00:00Z","advisories":["RHSA-2020:0921","RHSA-2020:0913","RHSA-2020:0920"],"bugzilla":"1829870","bugzilla_description":"CVE-2019-20788 libvncserver: integer overflow and heap-based buffer overflow in libvncclient/cursor.c in HandleCursorShape function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-190)","affected_packages":["libvncserver-0:0.9.9-14.el7_7","libvncserver-0:0.9.11-9.el8_0.2","libvncserver-0:0.9.11-9.el8_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20788.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-15681","severity":"low","public_date":"2019-10-30T00:00:00Z","advisories":[],"bugzilla":"1854761","bugzilla_description":"CVE-2019-15681 libvncserver: information disclosure and ASLR bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15681.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-20749","severity":"important","public_date":"2019-01-06T00:00:00Z","advisories":[],"bugzilla":"1671403","bugzilla_description":"CVE-2018-20749 libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution (Incomplete fix for CVE-2018-15127)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20749.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20750","severity":"important","public_date":"2019-01-06T00:00:00Z","advisories":[],"bugzilla":"1671405","bugzilla_description":"CVE-2018-20750 libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution (Incomplete fix for CVE-2018-15127)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20748","severity":"moderate","public_date":"2019-01-06T00:00:00Z","advisories":[],"bugzilla":"1671407","bugzilla_description":"CVE-2018-20748 libvncserver: Multiple heap out-of-bound writes in VNC client code (Incomplete fix for CVE-2018-20019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20748.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-15127","severity":"important","public_date":"2018-12-19T00:00:00Z","advisories":["RHSA-2019:0059"],"bugzilla":"1661102","bugzilla_description":"CVE-2018-15127 libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvncserver-0:0.9.9-13.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15127.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-15126","severity":"important","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661110","bugzilla_description":"CVE-2018-15126 libvncserver: Use-after-free in file transfer extension allows for potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15126.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20019","severity":"moderate","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661114","bugzilla_description":"CVE-2018-20019 libvncserver: Multiple heap out-of-bound writes in VNC client code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-20020","severity":"moderate","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661117","bugzilla_description":"CVE-2018-20020 libvncserver: Heap out-of-bound write inside structure in VNC client code allows for potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-20021","severity":"low","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661120","bugzilla_description":"CVE-2018-20021 libvncserver: Infinite loop in VNC client code allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20021.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-20022","severity":"low","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661123","bugzilla_description":"CVE-2018-20022 libvncserver: Improper initialization in VNC client code allows for information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-20023","severity":"low","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661128","bugzilla_description":"CVE-2018-20023 libvncserver: Improper initialization in VNC Repeater client code allows for information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-20024","severity":"low","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661132","bugzilla_description":"CVE-2018-20024 libvncserver: NULL pointer dereference in VNC client code allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20024.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-6307","severity":"important","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1661136","bugzilla_description":"CVE-2018-6307 libvncserver: Use-after-free in file transfer extension server code allows for potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6307.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7225","severity":"moderate","public_date":"2018-02-18T00:00:00Z","advisories":["RHSA-2018:1055"],"bugzilla":"1546858","bugzilla_description":"CVE-2018-7225 libvncserver: Improper input sanitization in rfbProcessClientNormalMessage in rfbserver.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805","affected_packages":["libvncserver-0:0.9.9-12.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-7226","severity":"low","public_date":"2018-02-18T00:00:00Z","advisories":[],"bugzilla":"1549172","bugzilla_description":"CVE-2018-7226 libvncserver: integer overflow in vcSetXCutTextProc in VNConsole.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7226.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-18922","severity":"important","public_date":"2017-02-15T00:00:00Z","advisories":["RHSA-2020:3588","RHSA-2020:3456","RHSA-2020:3385","RHSA-2020:3281"],"bugzilla":"1852356","bugzilla_description":"CVE-2017-18922 libvncserver: websocket decoding buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvncserver-0:0.9.11-15.el8_2.1","libvncserver-0:0.9.11-9.el8_0.3","libvncserver-0:0.9.11-9.el8_1.3","libvncserver-0:0.9.9-14.el7_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18922.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-9941","severity":"moderate","public_date":"2016-11-14T00:00:00Z","advisories":[],"bugzilla":"1410166","bugzilla_description":"CVE-2016-9941 libvncserver: Heap-based buffer overflow in rfbproto.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9941.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9942","severity":"moderate","public_date":"2016-11-14T00:00:00Z","advisories":[],"bugzilla":"1410168","bugzilla_description":"CVE-2016-9942 libvncserver: Heap-based buffer overflow in ultra.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-6051","severity":"moderate","public_date":"2014-09-23T00:00:00Z","advisories":["RHSA-2015:0113","RHSA-2014:1826"],"bugzilla":"1144287","bugzilla_description":"CVE-2014-6051 libvncserver: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libvncserver-0:0.9.7-7.el6_6.1","libvncserver-0:0.9.7-7.el6_5.1","libvncserver-0:0.9.9-9.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6051.json"},{"CVE":"CVE-2014-6052","severity":"moderate","public_date":"2014-09-23T00:00:00Z","advisories":["RHSA-2014:1826"],"bugzilla":"1144288","bugzilla_description":"CVE-2014-6052 libvncserver: NULL pointer dereference flaw in framebuffer setup","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["libvncserver-0:0.9.7-7.el6_6.1","libvncserver-0:0.9.9-9.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6052.json"},{"CVE":"CVE-2014-6053","severity":"moderate","public_date":"2014-09-23T00:00:00Z","advisories":["RHSA-2014:1827","RHSA-2014:1826"],"bugzilla":"1144289","bugzilla_description":"CVE-2014-6053 libvncserver: server NULL pointer dereference flaw in ClientCutText message handling","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["kdenetwork-7:4.10.5-8.el7_0","libvncserver-0:0.9.7-7.el6_6.1","libvncserver-0:0.9.9-9.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6053.json"},{"CVE":"CVE-2014-6054","severity":"moderate","public_date":"2014-09-23T00:00:00Z","advisories":["RHSA-2014:1827","RHSA-2014:1826"],"bugzilla":"1144291","bugzilla_description":"CVE-2014-6054 libvncserver: server divide-by-zero flaw in scaling factor handling","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-369","affected_packages":["kdenetwork-7:4.10.5-8.el7_0","libvncserver-0:0.9.7-7.el6_6.1","libvncserver-0:0.9.9-9.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6054.json"},{"CVE":"CVE-2014-6055","severity":"moderate","public_date":"2014-09-23T00:00:00Z","advisories":["RHSA-2015:0113","RHSA-2014:1827","RHSA-2014:1826"],"bugzilla":"1144293","bugzilla_description":"CVE-2014-6055 libvncserver: server stacked-based buffer overflow flaws in file transfer handling","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["kdenetwork-7:4.10.5-8.el7_0","libvncserver-0:0.9.7-7.el6_6.1","libvncserver-0:0.9.7-7.el6_5.1","libvncserver-0:0.9.9-9.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6055.json"},{"CVE":"CVE-2011-0904","severity":"low","public_date":"2011-05-02T00:00:00Z","advisories":["RHSA-2013:0169"],"bugzilla":"694455","bugzilla_description":"CVE-2011-0904 vino: Out of bounds read flaw by processing certain client raw encoding framebuffer update requests","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["vino-0:2.28.1-8.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0904.json"},{"CVE":"CVE-2011-0905","severity":"low","public_date":"2011-05-02T00:00:00Z","advisories":["RHSA-2013:0169"],"bugzilla":"694456","bugzilla_description":"CVE-2011-0905 vino: Out of bounds read flaw by processing certain client tight encoding framebuffer update requests","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["vino-0:2.28.1-8.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0905.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvoikko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvoikko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvoikko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvorbis-devel-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvorbis-devel-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvorbis-devel-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvorbis-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvorbis-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvorbis-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvorbis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvorbis_security_api_results.json
new file mode 100644
index 0000000..a52b8b6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvorbis_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10392","severity":"low","public_date":"2018-04-25T00:00:00Z","advisories":["RHSA-2019:3703"],"bugzilla":"1574193","bugzilla_description":"CVE-2018-10392 libvorbis: heap buffer overflow in mapping0_forward function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvorbis-1:1.3.6-2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10392.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10393","severity":"low","public_date":"2018-04-25T00:00:00Z","advisories":["RHSA-2019:3703"],"bugzilla":"1574194","bugzilla_description":"CVE-2018-10393 libvorbis: stack buffer overflow in bark_noise_hybridmp function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvorbis-1:1.3.6-2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10393.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-5146","severity":"critical","public_date":"2018-03-16T00:00:00Z","advisories":["RHSA-2018:0649","RHSA-2018:0647","RHSA-2018:0549","RHSA-2018:0648","RHSA-2018:1058"],"bugzilla":"1557221","bugzilla_description":"CVE-2018-5146 Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvorbis-1:1.2.3-5.el6_9.1","libvorbis-1:1.3.3-8.el7.1","thunderbird-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el6_9","firefox-0:52.7.2-1.el6_9","firefox-0:52.7.2-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5146.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-14160","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1499991","bugzilla_description":"CVE-2017-14160 libvorbis: Out-of-bounds read in the bark_noise_hybridmp function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14160.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14633","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1499959","bugzilla_description":"CVE-2017-14633 libvorbis: Out-of-bounds array read in the function mapping0_forward()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14633.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14632","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1499952","bugzilla_description":"CVE-2017-14632 libvorbis: Invalid freeing of uninitialized memory in the function vorbis_analysis_headerout()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14632.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11333","severity":"low","public_date":"2017-07-30T00:00:00Z","advisories":[],"bugzilla":"1480643","bugzilla_description":"CVE-2017-11333 libvorbis: Memory exhaustion in vorbis_analysis_wrote function in lib/block.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11333.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11735","severity":"low","public_date":"2017-07-30T00:00:00Z","advisories":[],"bugzilla":"1480645","bugzilla_description":"CVE-2017-11735 libvorbis: NULL pointer dereference in vorbis_block_clear function in lib/block.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2011-3960","severity":"low","public_date":"2012-02-09T00:00:00Z","advisories":[],"bugzilla":"788858","bugzilla_description":"CVE-2011-3960 libvorbis: Stack-buffer overflow in render_line","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3960.json"},{"CVE":"CVE-2012-0444","severity":"important","public_date":"2012-01-31T00:00:00Z","advisories":["RHSA-2012:0079","RHSA-2012:0136"],"bugzilla":"786026","bugzilla_description":"CVE-2012-0444 Firefox: Ogg Vorbis Decoding Memory Corruption (MFSA 2012-07)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:3.6.26-1.el6_2","firefox-0:3.6.26-2.el4","libvorbis-1:1.2.3-4.el6_2.1","libvorbis-1:1.1.0-4.el4.5","libvorbis-1:1.1.2-3.el5_7.6","firefox-0:3.6.26-1.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0444.json"},{"CVE":"CVE-2009-3379","severity":"important","public_date":"2009-10-27T00:00:00Z","advisories":["RHSA-2009:1561"],"bugzilla":"531765","bugzilla_description":"CVE-2009-3379 libvorbis: security fixes mentioned in MFSA 2009-63","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libvorbis-1:1.1.0-3.el4_8.3","libvorbis-1:1.0-12.el3","libvorbis-1:1.1.2-3.el5_4.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3379.json"},{"CVE":"CVE-2009-2663","severity":"important","public_date":"2009-06-24T00:00:00Z","advisories":["RHSA-2009:1219"],"bugzilla":"516259","bugzilla_description":"CVE-2009-2663 libvorbis: Improper codec headers processing (DoS, ACE)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libvorbis-1:1.1.0-3.el4_8.2","libvorbis-1:1.0-11.el3","libvorbis-1:1.1.2-3.el5_3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2663.json"},{"CVE":"CVE-2008-1419","severity":"important","public_date":"2008-05-14T00:00:00Z","advisories":["RHSA-2008:0271","RHSA-2008:0270"],"bugzilla":"440700","bugzilla_description":"CVE-2008-1419 vorbis: zero-dim codebooks can cause crash, infinite loop or heap overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libvorbis-1:1.1.2-3.el5_1.2","libvorbis-0:1.0rc2-9.el2","libvorbis-1:1.0-10.el3","libvorbis-1:1.1.0-3.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1419.json"},{"CVE":"CVE-2008-1420","severity":"important","public_date":"2008-05-14T00:00:00Z","advisories":["RHSA-2008:0271","RHSA-2008:0270"],"bugzilla":"440706","bugzilla_description":"CVE-2008-1420 vorbis: integer overflow in partvals computation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["libvorbis-1:1.1.2-3.el5_1.2","libvorbis-0:1.0rc2-9.el2","libvorbis-1:1.0-10.el3","libvorbis-1:1.1.0-3.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1420.json"},{"CVE":"CVE-2008-1423","severity":"important","public_date":"2008-05-14T00:00:00Z","advisories":["RHSA-2008:0271","RHSA-2008:0270"],"bugzilla":"440709","bugzilla_description":"CVE-2008-1423 vorbis: integer oveflow caused by huge codebooks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["libvorbis-1:1.1.2-3.el5_1.2","libvorbis-0:1.0rc2-9.el2","libvorbis-1:1.0-10.el3","libvorbis-1:1.1.0-3.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1423.json"},{"CVE":"CVE-2008-2009","severity":"important","public_date":"2008-05-14T00:00:00Z","advisories":["RHSA-2008:0271"],"bugzilla":"444443","bugzilla_description":"CVE-2008-2009 vorbis: insufficient validation of Huffman tree causing memory corruption in _make_decode_tree()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libvorbis-0:1.0rc2-9.el2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2009.json"},{"CVE":"CVE-2007-3106","severity":"important","public_date":"2007-07-26T00:00:00Z","advisories":["RHSA-2007:0912","RHSA-2007:0845"],"bugzilla":"245991","bugzilla_description":"CVE-2007-3106 libvorbis array boundary condition","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libvorbis-1:1.1.0-2.el4.5","libvorbis-1:1.1.2-3.el5.0","libvorbis-0:1.0rc2-7.el2","libvorbis-1:1.0-8.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3106.json"},{"CVE":"CVE-2007-4029","severity":"important","public_date":"2007-07-26T00:00:00Z","advisories":["RHSA-2007:0912","RHSA-2007:0845"],"bugzilla":"249780","bugzilla_description":"CVE-2007-4065 Multiple libvorbis flaws (CVE-2007-4066, CVE-2007-4029)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libvorbis-1:1.1.0-2.el4.5","libvorbis-1:1.1.2-3.el5.0","libvorbis-0:1.0rc2-7.el2","libvorbis-1:1.0-8.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4029.json"},{"CVE":"CVE-2007-4065","severity":"important","public_date":"2007-07-26T00:00:00Z","advisories":["RHSA-2007:0912","RHSA-2007:0845"],"bugzilla":"249780","bugzilla_description":"CVE-2007-4065 Multiple libvorbis flaws (CVE-2007-4066, CVE-2007-4029)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libvorbis-1:1.1.0-2.el4.5","libvorbis-1:1.1.2-3.el5.0","libvorbis-0:1.0rc2-7.el2","libvorbis-1:1.0-8.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4065.json"},{"CVE":"CVE-2007-4066","severity":"important","public_date":"2007-07-26T00:00:00Z","advisories":["RHSA-2007:0912","RHSA-2007:0845"],"bugzilla":"249780","bugzilla_description":"CVE-2007-4065 Multiple libvorbis flaws (CVE-2007-4066, CVE-2007-4029)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libvorbis-1:1.1.0-2.el4.5","libvorbis-1:1.1.2-3.el5.0","libvorbis-0:1.0rc2-7.el2","libvorbis-1:1.0-8.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4066.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpx-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpx-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpx-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpx_security_api_results.json
new file mode 100644
index 0000000..49da681
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libvpx_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-0034","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:3876"],"bugzilla":"1813000","bugzilla_description":"CVE-2020-0034 libvpx: Out of bounds read in vp8_decode_frame in decodeframe.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":["libvpx-0:1.3.0-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0034.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-9232","severity":"moderate","public_date":"2019-10-26T00:00:00Z","advisories":["RHSA-2020:3876"],"bugzilla":"1788966","bugzilla_description":"CVE-2019-9232 libvpx: Out of bounds read in vp8_norm table","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libvpx-0:1.3.0-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9232.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-9433","severity":"moderate","public_date":"2019-10-26T00:00:00Z","advisories":["RHSA-2020:3876"],"bugzilla":"1788994","bugzilla_description":"CVE-2019-9433 libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416->CWE-200","affected_packages":["libvpx-0:1.3.0-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9433.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9325","severity":"moderate","public_date":"2019-10-26T00:00:00Z","advisories":[],"bugzilla":"1789002","bugzilla_description":"CVE-2019-9325 libvpx: Out-of-bounds read in read in decoder_peek_si_internal() in vp9/vp9_dx_iface.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9325.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9371","severity":"moderate","public_date":"2019-10-26T00:00:00Z","advisories":[],"bugzilla":"1789004","bugzilla_description":"CVE-2019-9371 libvpx: Resource exhaustion after memory leak in mkvparser.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9371.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2126","severity":"moderate","public_date":"2019-10-26T00:00:00Z","advisories":[],"bugzilla":"1789008","bugzilla_description":"CVE-2019-2126 libvpx: Double free in ParseContentEncodingEntry() in mkvparser.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2126.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-13194","severity":"low","public_date":"2018-01-02T00:00:00Z","advisories":[],"bugzilla":"1535183","bugzilla_description":"CVE-2017-13194 libvpx:  denial of service (DoS) in vpx/src/vpx_image.c file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13194.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2017-0641","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1486854","bugzilla_description":"CVE-2017-0641 libvpx: Weak limit for frames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-0393","severity":"moderate","public_date":"2017-01-03T00:00:00Z","advisories":["RHSA-2020:3876"],"bugzilla":"1769657","bugzilla_description":"CVE-2017-0393 libvpx: Denial of service in mediaserver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["libvpx-0:1.3.0-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0393.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-1621","severity":"important","public_date":"2016-03-14T00:00:00Z","advisories":[],"bugzilla":"1318185","bugzilla_description":"CVE-2016-1621 libvpx: remote code execution via crafted media file","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1621.json"},{"CVE":"CVE-2015-1258","severity":"moderate","public_date":"2015-05-19T00:00:00Z","advisories":["RHSA-2015:1023"],"bugzilla":"1223266","bugzilla_description":"CVE-2015-1258 chromium-browser: Negative-size parameter in Libvpx.","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:43.0.2357.65-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1258.json"},{"CVE":"CVE-2012-0823","severity":"moderate","public_date":"2012-01-29T00:00:00Z","advisories":[],"bugzilla":"785640","bugzilla_description":"CVE-2012-0823 libvpx: VP8 Codec decoder crash introduced in 0.9.7","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0823.json"},{"CVE":"CVE-2010-4489","severity":"low","public_date":"2011-01-19T00:00:00Z","advisories":[],"bugzilla":"670840","bugzilla_description":"CVE-2010-4489 libvpx: Signedness error in partition size check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4489.json"},{"CVE":"CVE-2010-4203","severity":"moderate","public_date":"2010-11-04T00:00:00Z","advisories":["RHSA-2010:0999"],"bugzilla":"651213","bugzilla_description":"CVE-2010-4203 libvpx: memory corruption flaw","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libvpx-0:0.9.0-8.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4203.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwacom-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwacom-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwacom-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwacom-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwacom-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwacom-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwacom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwacom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwacom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-cursor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-cursor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-cursor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-egl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-egl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-egl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwayland-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwbclient-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwbclient-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwbclient-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwbclient_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwbclient_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwbclient_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwebp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwebp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwebp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwebp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwebp_security_api_results.json
new file mode 100644
index 0000000..a46cdf7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwebp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-9085","severity":"low","public_date":"2016-10-10T00:00:00Z","advisories":[],"bugzilla":"1389338","bugzilla_description":"CVE-2016-9085 libwebp: Several integer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9085.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwinpr-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwinpr-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwinpr-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwinpr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwinpr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwinpr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwmf-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwmf-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwmf-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwmf-lite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwmf-lite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwmf-lite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwmf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwmf_security_api_results.json
new file mode 100644
index 0000000..df3039e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwmf_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-6978","severity":"low","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2722","RHSA-2020:3943"],"bugzilla":"1671390","bugzilla_description":"CVE-2019-6978 gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libwmf-0:0.2.8.4-44.el7","libwmf-0:0.2.9-8.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000222","severity":"moderate","public_date":"2018-07-15T00:00:00Z","advisories":[],"bugzilla":"1621953","bugzilla_description":"CVE-2018-1000222 gd: Double free in src/gd_bump.c:gdImageBmpPtr() via crafted JPEG","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000222.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-5711","severity":"low","public_date":"2017-11-25T00:00:00Z","advisories":["RHSA-2019:2519","RHSA-2018:1296"],"bugzilla":"1535246","bugzilla_description":"CVE-2018-5711 gd: Infinite loop in gdImageCreateFromGifCtx() in gd_gif_in.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5711.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-6362","severity":"moderate","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1489842","bugzilla_description":"CVE-2017-6362 gd: Double free in the gdImagePngPtr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10168","severity":"moderate","public_date":"2016-12-17T00:00:00Z","advisories":["RHSA-2017:3221","RHSA-2018:1296"],"bugzilla":"1418986","bugzilla_description":"CVE-2016-10168 gd: Integer overflow in gd_io.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-43.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10168.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-9317","severity":"moderate","public_date":"2016-11-12T00:00:00Z","advisories":[],"bugzilla":"1417987","bugzilla_description":"CVE-2016-9317 gd: Missing check for oversized images in gdImageCreate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9317.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-9011","severity":"low","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1388450","bugzilla_description":"CVE-2016-9011 libwmf: Memory allocation failure in wmf_malloc","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9011.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6912","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":[],"bugzilla":"1417977","bugzilla_description":"CVE-2016-6912 gd, php: Double free in gdImageWebpPtr()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6912.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-10167","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2017:3221","RHSA-2018:1296"],"bugzilla":"1418984","bugzilla_description":"CVE-2016-10167 gd: DoS vulnerability in gdImageCreateFromGd2Ctx()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-43.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-6906","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":[],"bugzilla":"1435313","bugzilla_description":"CVE-2016-6906 gd: Out-of-bounds read in read_image_tga function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10166","severity":"moderate","public_date":"2016-08-06T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2019:2519"],"bugzilla":"1418983","bugzilla_description":"CVE-2016-10166 gd: Unsigned integer underflow _gdContributionsAlloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10166.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-6214","severity":"low","public_date":"2016-07-12T00:00:00Z","advisories":[],"bugzilla":"1356466","bugzilla_description":"CVE-2016-6214 gd: Buffer over-read issue when parsing crafted TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6214.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6905","severity":"low","public_date":"2016-07-05T00:00:00Z","advisories":[],"bugzilla":"1356485","bugzilla_description":"CVE-2016-6905 gd: Out-of-bounds read in function read_image_tga in gd_tga.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6905.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6132","severity":"low","public_date":"2016-06-30T00:00:00Z","advisories":[],"bugzilla":"1352544","bugzilla_description":"CVE-2016-6132 gd: Buffer over-read issue when parsing crafted TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6128","severity":"low","public_date":"2016-06-27T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1351603","bugzilla_description":"CVE-2016-6128 gd: Invalid color index not properly handled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6128.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-0848","severity":"important","public_date":"2015-06-01T00:00:00Z","advisories":["RHSA-2015:1917"],"bugzilla":"1227243","bugzilla_description":"CVE-2015-0848 libwmf: heap overflow when decoding BMP images","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libwmf-0:0.2.8.4-41.el7_1","libwmf-0:0.2.8.4-25.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0848.json"},{"CVE":"CVE-2015-4588","severity":"important","public_date":"2015-06-01T00:00:00Z","advisories":["RHSA-2015:1917"],"bugzilla":"1272993","bugzilla_description":"CVE-2015-4588 libwmf: heap overflow within the RLE decoding of embedded BMP images","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libwmf-0:0.2.8.4-41.el7_1","libwmf-0:0.2.8.4-25.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4588.json"},{"CVE":"CVE-2015-4695","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":["RHSA-2015:1917"],"bugzilla":"1235665","bugzilla_description":"CVE-2015-4695 libwmf: heap buffer overread in meta.h","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"(CWE-122|CWE-125)","affected_packages":["libwmf-0:0.2.8.4-41.el7_1","libwmf-0:0.2.8.4-25.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4695.json"},{"CVE":"CVE-2015-4696","severity":"moderate","public_date":"2015-05-03T00:00:00Z","advisories":["RHSA-2015:1917"],"bugzilla":"1235669","bugzilla_description":"CVE-2015-4696 libwmf: use-after-free flaw in meta.h","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-416","affected_packages":["libwmf-0:0.2.8.4-41.el7_1","libwmf-0:0.2.8.4-25.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4696.json"},{"CVE":"CVE-2014-2497","severity":"low","public_date":"2014-03-13T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1076676","bugzilla_description":"CVE-2014-2497 gd: NULL pointer dereference in gdImageCreateFromXpm()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php53-0:5.3.3-24.el5","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2497.json"},{"CVE":"CVE-2009-3546","severity":"low","public_date":"2009-10-12T00:00:00Z","advisories":["RHSA-2010:0040","RHSA-2010:0003"],"bugzilla":"529213","bugzilla_description":"CVE-2009-3546 gd: insufficient input validation in _gdGetColors()","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","gd-0:2.0.33-9.4.el5_4.2","gd-0:2.0.28-5.4E.el4_8.1","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3546.json"},{"CVE":"CVE-2009-1364","severity":"moderate","public_date":"2009-04-27T00:00:00Z","advisories":["RHSA-2009:0457"],"bugzilla":"496864","bugzilla_description":"CVE-2009-1364 libwmf: embedded gd use-after-free error","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["libwmf-0:0.2.8.4-10.2","libwmf-0:0.2.8.3-5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1364.json"},{"CVE":"CVE-2007-3472","severity":"low","public_date":"2007-06-21T00:00:00Z","advisories":["RHSA-2008:0146"],"bugzilla":"276751","bugzilla_description":"CVE-2007-3472 libgd Integer overflow in TrueColor code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3472.json"},{"CVE":"CVE-2007-3473","severity":"low","public_date":"2007-06-21T00:00:00Z","advisories":["RHSA-2008:0146"],"bugzilla":"276791","bugzilla_description":"CVE-2007-3473 libgd NULL pointer dereference when reading a corrupt X bitmap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3473.json"},{"CVE":"CVE-2007-3477","severity":"low","public_date":"2007-06-21T00:00:00Z","advisories":[],"bugzilla":"277221","bugzilla_description":"CVE-2007-3477 gd: arc drawing functions can consume large amount of CPU time","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3477.json"},{"CVE":"CVE-2007-2756","severity":"low","public_date":"2007-05-16T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2008:0146","RHSA-2007:0889"],"bugzilla":"242033","bugzilla_description":"CVE-2007-2756 gd / php-gd ImageCreateFromPng infinite loop caused by truncated PNG","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["php-0:5.1.6-15.el5","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:4.3.9-3.22.9","gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2756.json"},{"CVE":"CVE-2007-0455","severity":"low","public_date":"2007-01-26T00:00:00Z","advisories":["RHSA-2007:0153","RHSA-2008:0146","RHSA-2007:0162","RHSA-2007:0155"],"bugzilla":"224607","bugzilla_description":"CVE-2007-0455 gd: buffer overrun","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:5.1.6-3.el4s1.6","php-0:4.3.2-40.ent","gd-0:2.0.33-9.4.el5_1.1","php-0:5.1.6-11.el5","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0455.json"},{"CVE":"CVE-2006-3376","severity":"moderate","public_date":"2006-06-30T00:00:00Z","advisories":["RHSA-2006:0597"],"bugzilla":"1618139","bugzilla_description":"CVE-2006-3376 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libwmf-0:0.2.8.3-5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3376.json"},{"CVE":"CVE-2004-0941","severity":"low","public_date":"2004-11-10T00:00:00Z","advisories":["RHSA-2004:638","RHSA-2006:0194"],"bugzilla":"175413","bugzilla_description":"CVE-2004-0941 gd: additional overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gd-0:1.8.4-12.3.1","gd-0:2.0.28-4.4E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0941.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwnck3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwnck3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwnck3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwnck3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwnck3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwnck3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpd-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpd-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpd-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpd_security_api_results.json
new file mode 100644
index 0000000..7cabe16
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19208","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":["RHSA-2019:2126"],"bugzilla":"1649414","bugzilla_description":"CVE-2018-19208 libwpd: NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libwpd-0:0.10.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19208.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14226","severity":"low","public_date":"2017-09-07T00:00:00Z","advisories":[],"bugzilla":"1491812","bugzilla_description":"CVE-2017-14226 libwpd: Heap-based buffer over-read in WPXTableList class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14226.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2012-2149","severity":"important","public_date":"2012-05-16T00:00:00Z","advisories":["RHSA-2012:1043"],"bugzilla":"822207","bugzilla_description":"CVE-2012-2149 libwpd: Memory overwrite flaw by processing certain WordPerfect (WPD) documents","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libwpd-0:0.8.7-3.1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2149.json"},{"CVE":"CVE-2007-1466","severity":"important","public_date":"2007-03-16T00:00:00Z","advisories":["RHSA-2007:0033","RHSA-2007:0055"],"bugzilla":"1618301","bugzilla_description":"CVE-2007-1466 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openoffice.org-0:1.1.5-10.6.0.EL4","libwpd-0:0.8.7-3.el5","openoffice.org-0:1.1.2-38.2.0.EL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1466.json"},{"CVE":"CVE-2007-0002","severity":"important","public_date":"2007-03-16T00:00:00Z","advisories":["RHSA-2007:0055"],"bugzilla":"222808","bugzilla_description":"CVE-2007-0002 buffer overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libwpd-0:0.8.7-3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0002.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpg-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpg-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpg-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpg-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpg-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpg-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwpg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwps-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwps-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwps-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwps-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwps-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwps-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwps_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwps_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwsman-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwsman-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwsman-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwsman1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwsman1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libwsman1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcb_security_api_results.json
new file mode 100644
index 0000000..44f1829
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-2064","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960367","bugzilla_description":"CVE-2013-2064 libxcb: Integer overflow leading to heap-based buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libxcb-0:1.9.1-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2064.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcrypt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcrypt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcrypt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcrypt-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcrypt-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcrypt-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcrypt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcrypt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxcrypt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon-x11-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon-x11-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon-x11-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon-x11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon-x11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon-x11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon_security_api_results.json
new file mode 100644
index 0000000..7307cea
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbcommon_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-15857","severity":"moderate","public_date":"2018-07-30T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623022","bugzilla_description":"CVE-2018-15857 libxkbcommon: Invalid free in ExprAppendMultiKeysymList resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-15858","severity":"low","public_date":"2018-07-23T00:00:00Z","advisories":[],"bugzilla":"1623024","bugzilla_description":"CVE-2018-15858 libxkbcommon: NULL pointer dereference when handling invalid aliases in CopyKeyAliasesToKeymap resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15858.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15856","severity":"low","public_date":"2018-03-12T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623018","bugzilla_description":"CVE-2018-15856 libxkbcommon: Infinite loop when reaching EOL unexpectedly resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15856.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15855","severity":"low","public_date":"2018-03-11T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623013","bugzilla_description":"CVE-2018-15855 libxkbcommon: NULL pointer dereference when handling xkb_geometry","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15855.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15853","severity":"low","public_date":"2018-03-10T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623009","bugzilla_description":"CVE-2018-15853 libxkbcommon: Endless recursion in xkbcomp/expr.c resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15853.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15854","severity":"low","public_date":"2018-03-10T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623012","bugzilla_description":"CVE-2018-15854 libxkbcommon: NULL pointer dereference resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15854.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15859","severity":"low","public_date":"2017-10-30T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623026","bugzilla_description":"CVE-2018-15859 libxkbcommon: NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15859.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15861","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623028","bugzilla_description":"CVE-2018-15861 libxkbcommon: NULL pointer dereference in ExprResolveLhs resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15861.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15862","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623029","bugzilla_description":"CVE-2018-15862 libxkbcommon: NULL pointer dereference in LookupModMask resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15863","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623030","bugzilla_description":"CVE-2018-15863 libxkbcommon: NULL pointer dereference in ResolveStateAndPredicate resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15863.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15864","severity":"low","public_date":"2017-06-26T00:00:00Z","advisories":["RHSA-2019:2079"],"bugzilla":"1623033","bugzilla_description":"CVE-2018-15864 libxkbcommon: NULL pointer dereference in resolve_keysym resulting in a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libxkbcommon-0:0.7.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbfile-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbfile-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbfile-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbfile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbfile_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxkbfile_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxklavier-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxklavier-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxklavier-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxklavier_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxklavier_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxklavier_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxml2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxml2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxml2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxml2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxml2_security_api_results.json
new file mode 100644
index 0000000..c51cd49
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxml2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24977","severity":"moderate","public_date":"2020-09-04T00:00:00Z","advisories":[],"bugzilla":"1877788","bugzilla_description":"CVE-2020-24977 libxml2: Buffer Overflow vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24977.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-20388","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:3996","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1799734","bugzilla_description":"CVE-2019-20388 libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["libxml2-0:2.9.1-6.el7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20388.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7595","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:3996","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1799786","bugzilla_description":"CVE-2020-7595 libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libxml2-0:2.9.1-6.el7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7595.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19956","severity":"moderate","public_date":"2020-01-08T00:00:00Z","advisories":["RHSA-2020:3996","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1788856","bugzilla_description":"CVE-2019-19956 libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["libxml2-0:2.9.1-6.el7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19956.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14404","severity":"moderate","public_date":"2018-06-18T00:00:00Z","advisories":["RHBA-2020:3180","RHBA-2020:1539","RHSA-2020:1827","RHSA-2019:1543","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1595985","bugzilla_description":"CVE-2018-14404 libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4","redhat-coreos-43.82.202007300301.0","libxml2-0:2.9.7-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-9251","severity":"low","public_date":"2018-04-03T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1827"],"bugzilla":"1565318","bugzilla_description":"CVE-2018-9251 libxml2: infinite loop in xz_decomp function in xzlib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["redhat-coreos-43.82.202007300301.0","libxml2-0:2.9.7-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2018-14567","severity":"low","public_date":"2018-04-03T00:00:00Z","advisories":["RHBA-2020:1539","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1619875","bugzilla_description":"CVE-2018-14567 libxml2: Infinite loop caused by incorrect error detection during LZMA decompression","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14567.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-15412","severity":"important","public_date":"2017-12-06T00:00:00Z","advisories":["RHBA-2020:1539","RHSA-2018:0287","RHSA-2017:3401","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1523128","bugzilla_description":"CVE-2017-15412 libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4","chromium-browser-0:63.0.3239.84-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15412.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5130","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2997"],"bugzilla":"1503537","bugzilla_description":"CVE-2017-5130 chromium-browser: heap overflow in libxml2","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["chromium-browser-0:62.0.3202.62-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5130.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-18258","severity":"low","public_date":"2017-09-07T00:00:00Z","advisories":["RHBA-2020:1539","RHSA-2018:2486","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1566749","bugzilla_description":"CVE-2017-18258 libxml2: Unrestricted memory usage in xz_head() function in xzlib.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18258.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2017-16932","severity":"moderate","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1517316","bugzilla_description":"CVE-2017-16932 libxml2: Infinite recursion in parameter entities","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16932.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16931","severity":"moderate","public_date":"2017-06-05T00:00:00Z","advisories":[],"bugzilla":"1517307","bugzilla_description":"CVE-2017-16931 libxml2: Mishandling parameter-entity references","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16931.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-9048","severity":"low","public_date":"2017-05-15T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1452549","bugzilla_description":"CVE-2017-9048 libxml2: Stack-based buffer overflow in function xmlSnprintfElementContent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-9050","severity":"moderate","public_date":"2017-05-15T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1452553","bugzilla_description":"CVE-2017-9050 libxml2: Heap-based buffer over-read in function xmlDictAddString","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9050.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-9047","severity":"moderate","public_date":"2017-05-15T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1452554","bugzilla_description":"CVE-2017-9047 libxml2: Buffer overflow in function xmlSnprintfElementContent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9047.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-9049","severity":"moderate","public_date":"2017-05-15T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1452556","bugzilla_description":"CVE-2017-9049 libxml2: Heap-based buffer over-read in function xmlDictComputeFastKey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9049.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-7375","severity":"moderate","public_date":"2017-04-17T00:00:00Z","advisories":[],"bugzilla":"1462203","bugzilla_description":"CVE-2017-7375 libxml2: Missing validation for external entities in xmlParsePEReference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7375.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-7376","severity":"low","public_date":"2017-04-17T00:00:00Z","advisories":[],"bugzilla":"1462216","bugzilla_description":"CVE-2017-7376 libxml2: Incorrect limit used for port values","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-0663","severity":"moderate","public_date":"2017-04-17T00:00:00Z","advisories":[],"bugzilla":"1462225","bugzilla_description":"CVE-2017-0663 libxml2: Heap buffer overflow in xmlAddID","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0663.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-8872","severity":"low","public_date":"2016-11-28T00:00:00Z","advisories":[],"bugzilla":"1449541","bugzilla_description":"CVE-2017-8872 libxml2: Out-of-bounds read in htmlParseTryOrFinish","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8872.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-5969","severity":"low","public_date":"2016-11-05T00:00:00Z","advisories":[],"bugzilla":"1421996","bugzilla_description":"CVE-2017-5969 libxml2: Null pointer dereference in xmlSaveDoc implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5969.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-4658","severity":"moderate","public_date":"2016-10-12T00:00:00Z","advisories":[],"bugzilla":"1384424","bugzilla_description":"CVE-2016-4658 libxml2: Use after free via namespace node in XPointer ranges","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4658.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9318","severity":"moderate","public_date":"2016-10-06T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1395609","bugzilla_description":"CVE-2016-9318 libxml2: XML External Entity vulnerability","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9318.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L","cvss3_score":"6.7"},{"CVE":"CVE-2016-5131","severity":"important","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1485","RHBA-2020:1539","RHSA-2018:2486","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1358641","bugzilla_description":"CVE-2016-5131 libxml2: Use after free triggered by XPointer paths beginning with range-to","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4","chromium-browser-0:52.0.2743.82-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5131.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-4447","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338686","bugzilla_description":"CVE-2016-4447 libxml2: Heap-based buffer underreads due to xmlParseName","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4447.json"},{"CVE":"CVE-2016-1835","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338691","bugzilla_description":"CVE-2016-1835 libxml2: Heap use-after-free in xmlSAX2AttributeNs","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1835.json"},{"CVE":"CVE-2016-1837","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338696","bugzilla_description":"CVE-2016-1837 libxml2: Heap use-after-free in htmlPArsePubidLiteral and htmlParseSystemiteral","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1837.json"},{"CVE":"CVE-2016-4448","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338700","bugzilla_description":"CVE-2016-4448 libxml2: Format string vulnerability","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-134","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4448.json"},{"CVE":"CVE-2016-4449","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338701","bugzilla_description":"CVE-2016-4449 libxml2: Inappropriate fetch of entities content","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4449.json"},{"CVE":"CVE-2016-1836","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338702","bugzilla_description":"CVE-2016-1836 libxml2: Heap use-after-free in xmlDictComputeFastKey","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1836.json"},{"CVE":"CVE-2016-1839","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338703","bugzilla_description":"CVE-2016-1839 libxml2: Heap-based buffer overread in xmlDictAddString","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1839.json"},{"CVE":"CVE-2016-1838","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338705","bugzilla_description":"CVE-2016-1838 libxml2: Heap-based buffer overread in xmlPArserPrintFileContextInternal","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1838.json"},{"CVE":"CVE-2016-1840","severity":"important","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338706","bugzilla_description":"CVE-2016-1840 libxml2: Heap-buffer-overflow in xmlFAParserPosCharGroup","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-1834","severity":"important","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338708","bugzilla_description":"CVE-2016-1834 libxml2: Heap-buffer-overflow in xmlStrncat","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1834.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-1762","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338711","bugzilla_description":"CVE-2016-1762 libxml2: Heap-based buffer-overread in xmlNextChar","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1762.json"},{"CVE":"CVE-2016-3705","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1332443","bugzilla_description":"CVE-2016-3705 libxml2: stack overflow before detecting invalid XML file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3705.json"},{"CVE":"CVE-2016-4483","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2957"],"bugzilla":"1332820","bugzilla_description":"CVE-2016-4483 libxml2: out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4483.json"},{"CVE":"CVE-2016-9597","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1408305","bugzilla_description":"CVE-2016-9597 libxml2: stack overflow before detecting invalid XML file (unfixed CVE-2016-3705 in JBCS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9597.json"},{"CVE":"CVE-2016-9598","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1408306","bugzilla_description":"CVE-2016-9598 libxml2: out-of-bounds read (unfixed CVE-2016-4483 in JBCS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9598.json"},{"CVE":"CVE-2016-3627","severity":"moderate","public_date":"2016-03-21T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1319829","bugzilla_description":"CVE-2016-3627 libxml2: stack exhaustion while parsing xml files in recovery mode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3627.json"},{"CVE":"CVE-2016-9596","severity":"moderate","public_date":"2016-03-21T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1408302","bugzilla_description":"CVE-2016-9596 libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9596.json"},{"CVE":"CVE-2015-8806","severity":null,"public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1304636","bugzilla_description":"CVE-2015-8806 libxml2: heap-buffer overread in dict.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8806.json"},{"CVE":"CVE-2016-2073","severity":null,"public_date":"2016-01-25T00:00:00Z","advisories":[],"bugzilla":"1301928","bugzilla_description":"CVE-2016-2073 libxml2: out-of-bounds read in htmlParseNameComplex()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2073.json"},{"CVE":"CVE-2015-5312","severity":"moderate","public_date":"2015-12-01T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1276693","bugzilla_description":"CVE-2015-5312 libxml2: CPU exhaustion when processing specially crafted XML input","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5312.json"},{"CVE":"CVE-2015-7497","severity":"moderate","public_date":"2015-12-01T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1281862","bugzilla_description":"CVE-2015-7497 libxml2: Heap-based buffer overflow in xmlDictComputeFastQKey","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7497.json"},{"CVE":"CVE-2015-7498","severity":"moderate","public_date":"2015-12-01T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1281879","bugzilla_description":"CVE-2015-7498 libxml2: Heap-based buffer overflow in xmlParseXmlDecl","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7498.json"},{"CVE":"CVE-2015-7499","severity":"moderate","public_date":"2015-12-01T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1281925","bugzilla_description":"CVE-2015-7499 libxml2: Heap-based buffer overflow in xmlGROW","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7499.json"},{"CVE":"CVE-2015-7500","severity":"moderate","public_date":"2015-12-01T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1281943","bugzilla_description":"CVE-2015-7500 libxml2: Heap buffer overflow in xmlParseMisc","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7500.json"},{"CVE":"CVE-2016-1833","severity":"moderate","public_date":"2015-11-27T00:00:00Z","advisories":["RHSA-2016:1292","RHSA-2016:2957"],"bugzilla":"1338682","bugzilla_description":"CVE-2016-1833 libxml2: Heap-based buffer overread in htmlCurrentChar","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.3","libxml2-0:2.7.6-21.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1833.json"},{"CVE":"CVE-2015-8035","severity":"moderate","public_date":"2015-11-02T00:00:00Z","advisories":["RHSA-2016:1089","RHBA-2020:1539","RHSA-2020:1190","RHBA-2020:1540"],"bugzilla":"1277146","bugzilla_description":"CVE-2015-8035 libxml2: DoS caused by incorrect error detection during XZ decompression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-252","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","libxml2-0:2.9.1-6.el7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8035.json"},{"CVE":"CVE-2015-7942","severity":"moderate","public_date":"2015-10-22T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1276297","bugzilla_description":"CVE-2015-7942 libxml2: heap-based buffer overflow in xmlParseConditionalSections()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7942.json"},{"CVE":"CVE-2015-8242","severity":"low","public_date":"2015-10-11T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1281950","bugzilla_description":"CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8242.json"},{"CVE":"CVE-2015-8241","severity":"low","public_date":"2015-10-08T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1281936","bugzilla_description":"CVE-2015-8241 libxml2: Buffer overread with XML parser in xmlNextChar","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8241.json"},{"CVE":"CVE-2015-8317","severity":"low","public_date":"2015-06-29T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1281930","bugzilla_description":"CVE-2015-8317 libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8317.json"},{"CVE":"CVE-2015-8710","severity":"moderate","public_date":"2015-04-19T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1213957","bugzilla_description":"CVE-2015-8710 libxml2: out-of-bounds memory access when parsing an unclosed HTML comment","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-119","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8710.json"},{"CVE":"CVE-2015-1819","severity":"low","public_date":"2015-04-14T00:00:00Z","advisories":["RHSA-2015:2550","RHSA-2015:1419"],"bugzilla":"1211278","bugzilla_description":"CVE-2015-1819 libxml2: denial of service processing a crafted XML document","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1819.json"},{"CVE":"CVE-2015-7941","severity":"low","public_date":"2015-02-22T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:2550","RHSA-2015:2549"],"bugzilla":"1274222","bugzilla_description":"CVE-2015-7941 libxml2: Out-of-bounds memory access","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["libxml2-0:2.9.1-6.el7_2.2","libxml2-0:2.7.6-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7941.json"},{"CVE":"CVE-2014-3660","severity":"moderate","public_date":"2014-10-16T00:00:00Z","advisories":["RHSA-2014:1885","RHSA-2014:1655"],"bugzilla":"1149084","bugzilla_description":"CVE-2014-3660 libxml2: denial of service via recursive entity expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["libxml2-0:2.6.26-2.1.25.el5_11","libxml2-0:2.7.6-17.el6_6.1","libxml2-0:2.9.1-5.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3660.json"},{"CVE":"CVE-2014-0191","severity":"moderate","public_date":"2014-05-06T00:00:00Z","advisories":["RHSA-2014:0513","RHSA-2015:0749"],"bugzilla":"1090976","bugzilla_description":"CVE-2014-0191 libxml2: external parameter entity loaded when entity substitution is disabled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-611","affected_packages":["libxml2-0:2.9.1-5.el7_1.2","libxml2-0:2.7.6-14.el6_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0191.json"},{"CVE":"CVE-2013-2877","severity":"low","public_date":"2013-07-09T00:00:00Z","advisories":["RHSA-2014:0513"],"bugzilla":"983204","bugzilla_description":"CVE-2013-2877 libxml2: Out-of-bounds read via a document that ends abruptly","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libxml2-0:2.7.6-14.el6_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2877.json"},{"CVE":"CVE-2013-0338","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0581"],"bugzilla":"912400","bugzilla_description":"CVE-2013-0338 libxml2: CPU consumption DoS when performing string substitutions during entities expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libxml2-0:2.6.26-2.1.21.el5_9.1","libxml2-0:2.7.6-12.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0338.json"},{"CVE":"CVE-2013-0339","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"915149","bugzilla_description":"CVE-2013-0339 libxml2: CPU consumption DoS and other effects when performing string substitutions during external entities expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0339.json"},{"CVE":"CVE-2013-1969","severity":"important","public_date":"2012-12-14T00:00:00Z","advisories":[],"bugzilla":"953722","bugzilla_description":"CVE-2013-1969 libxml2: multiple use-after-free flaws","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1969.json"},{"CVE":"CVE-2012-5134","severity":"important","public_date":"2012-11-27T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2012:1512"],"bugzilla":"880466","bugzilla_description":"CVE-2012-5134 libxml2: Heap-buffer-underflow in xmlParseAttValueComplex","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libxml2-0:2.7.6-8.el6_3.4","mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.6.26-2.1.15.el5_8.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5134.json"},{"CVE":"CVE-2012-2807","severity":"moderate","public_date":"2012-06-26T00:00:00Z","advisories":["RHSA-2012:1288"],"bugzilla":"835863","bugzilla_description":"CVE-2012-2807 libxml2 (64-bit): Multiple integer overflows, leading to DoS or possibly other unspecified impact","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["libxml2-0:2.7.6-8.el6_3.3","libxml2-0:2.6.26-2.1.15.el5_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2807.json"},{"CVE":"CVE-2011-3102","severity":"low","public_date":"2012-05-15T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2012:1288"],"bugzilla":"822109","bugzilla_description":"CVE-2011-3102 libxml: An off-by-one out-of-bounds write by XPointer part evaluation","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["libxml2-0:2.7.6-8.el6_3.3","mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.6.26-2.1.15.el5_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3102.json"},{"CVE":"CVE-2012-0841","severity":"moderate","public_date":"2012-02-21T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2012:0324"],"bugzilla":"787067","bugzilla_description":"CVE-2012-0841 libxml2: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["libxml2-0:2.6.26-2.1.15.el5_8.2","libxml2-0:2.7.6-4.el6_2.4","mingw32-libxml2-0:2.7.6-6.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0841.json"},{"CVE":"CVE-2011-3919","severity":"important","public_date":"2012-01-06T00:00:00Z","advisories":["RHSA-2012:0018","RHSA-2013:0217","RHSA-2012:0016","RHSA-2012:0104","RHSA-2012:0017"],"bugzilla":"771896","bugzilla_description":"CVE-2011-3919 libxml2: Heap-based buffer overflow when decoding an entity reference with a long name","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.7.6-4.el6_2.1","libxml2-0:2.6.26-2.1.2.8.el5_6.2","libxml2-0:2.6.16-12.9","libxml2-0:2.6.26-2.1.12.el5_7.2","mingw32-libxml2-0:2.7.6-6.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3919.json"},{"CVE":"CVE-2011-3905","severity":"low","public_date":"2011-12-13T00:00:00Z","advisories":["RHSA-2012:0018","RHSA-2013:0217","RHSA-2012:0016","RHSA-2012:0017"],"bugzilla":"767387","bugzilla_description":"CVE-2011-3905 libxml2 out of bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libxml2-0:2.7.6-4.el6_2.1","libxml2-0:2.6.16-12.9","libxml2-0:2.6.26-2.1.12.el5_7.2","mingw32-libxml2-0:2.7.6-6.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3905.json"},{"CVE":"CVE-2011-2834","severity":"low","public_date":"2011-10-11T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2011:1749","RHSA-2012:0016","RHSA-2012:0017"],"bugzilla":"735751","bugzilla_description":"CVE-2011-2834 libxml2: double-free caused by malformed XPath expression in XSLT","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libxml2-0:2.6.16-12.9","libxml2-0:2.6.26-2.1.12.el5_7.2","mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.7.6-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2834.json"},{"CVE":"CVE-2011-2821","severity":"low","public_date":"2011-08-22T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2011:1749"],"bugzilla":"735712","bugzilla_description":"CVE-2011-2821 libxml2: double free caused by malformed XPath expression in XSLT","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-672","affected_packages":["mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.7.6-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2821.json"},{"CVE":"CVE-2011-0216","severity":"low","public_date":"2011-07-20T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2011:1749","RHSA-2012:0016","RHSA-2012:0017"],"bugzilla":"724906","bugzilla_description":"CVE-2011-0216 libxml2: Off-by-one error leading to heap-based buffer overflow in encoding","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.6.16-12.9","libxml2-0:2.6.26-2.1.12.el5_7.2","mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.7.6-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0216.json"},{"CVE":"CVE-2011-1944","severity":"low","public_date":"2011-05-27T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2011:1749","RHSA-2012:0017"],"bugzilla":"709747","bugzilla_description":"CVE-2011-1944 libxml, libxml2: Heap-based buffer overflow by adding new namespace node to an existing nodeset or merging nodesets","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libxml2-0:2.6.26-2.1.12.el5_7.2","mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.7.6-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1944.json"},{"CVE":"CVE-2010-4494","severity":"low","public_date":"2010-11-17T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2011:1749"],"bugzilla":"665963","bugzilla_description":"CVE-2010-4494 libxml2: double-free in XPath processing code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.7.6-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4494.json"},{"CVE":"CVE-2010-4008","severity":"low","public_date":"2010-11-04T00:00:00Z","advisories":["RHSA-2013:0217","RHSA-2011:1749","RHSA-2012:0017"],"bugzilla":"645341","bugzilla_description":"CVE-2010-4008 libxml2: Crash (stack frame overflow or NULL pointer dereference) by traversal of XPath axis","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["libxml2-0:2.6.26-2.1.12.el5_7.2","mingw32-libxml2-0:2.7.6-6.el6_3","libxml2-0:2.7.6-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4008.json"},{"CVE":"CVE-2009-2414","severity":"moderate","public_date":"2009-08-10T00:00:00Z","advisories":["RHSA-2009:1206"],"bugzilla":"515195","bugzilla_description":"CVE-2009-2414 libxml, libxml2, mingw32-libxml2: Stack overflow by parsing root XML element DTD definition","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libxml2-0:2.6.26-2.1.2.8","libxml2-0:2.6.16-12.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2414.json"},{"CVE":"CVE-2009-2416","severity":"low","public_date":"2009-08-10T00:00:00Z","advisories":["RHSA-2009:1206"],"bugzilla":"515205","bugzilla_description":"CVE-2009-2416 libxml, libxml2, mingw32-libxml2: Pointer use-after-free flaws by parsing Notation and Enumeration attribute types","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["libxml2-0:2.6.26-2.1.2.8","libxml2-0:2.6.16-12.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2416.json"},{"CVE":"CVE-2008-4226","severity":"important","public_date":"2008-11-17T00:00:00Z","advisories":["RHSA-2008:0988"],"bugzilla":"470466","bugzilla_description":"CVE-2008-4226 libxml2: integer overflow leading to memory corruption in  xmlSAX2Characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["libxml2-0:2.5.10-14","libxml2-0:2.6.26-2.1.2.7","libxml2-0:2.6.16-12.6","libxml2-0:2.4.19-12.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4226.json"},{"CVE":"CVE-2008-4225","severity":"moderate","public_date":"2008-11-17T00:00:00Z","advisories":["RHSA-2008:0988"],"bugzilla":"470480","bugzilla_description":"CVE-2008-4225 libxml2: integer overflow leading to infinite loop in xmlBufferResize","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["libxml2-0:2.5.10-14","libxml2-0:2.6.26-2.1.2.7","libxml2-0:2.6.16-12.6","libxml2-0:2.4.19-12.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4225.json"},{"CVE":"CVE-2008-3529","severity":"important","public_date":"2008-09-11T00:00:00Z","advisories":["RHSA-2008:0884","RHSA-2008:0886"],"bugzilla":"461015","bugzilla_description":"CVE-2008-3529 libxml2: long entity name heap buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libxml2-0:2.6.26-2.1.2.6","libxml2-0:2.5.10-13","libxml2-0:2.4.19-11.ent","libxml2-0:2.6.16-12.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3529.json"},{"CVE":"CVE-2008-3281","severity":"moderate","public_date":"2008-08-20T00:00:00Z","advisories":["RHSA-2008:0836"],"bugzilla":"458086","bugzilla_description":"CVE-2008-3281 libxml2 denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libxml2-0:2.6.26-2.1.2.4","libxml2-0:2.6.16-12.3","libxml2-0:2.5.10-11","libxml2-0:2.4.19-9.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3281.json"},{"CVE":"CVE-2007-6284","severity":"important","public_date":"2008-01-11T00:00:00Z","advisories":["RHSA-2008:0032"],"bugzilla":"425927","bugzilla_description":"CVE-2007-6284 libxml2: infinite loop in UTF-8 decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libxml2-0:2.4.19-7.ent","libxml2-0:2.5.10-8","libxml2-0:2.6.16-10.1","libxml2-0:2.6.26-2.1.2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6284.json"},{"CVE":"CVE-2004-0989","severity":"moderate","public_date":"2004-10-26T00:00:00Z","advisories":["RHSA-2004:615","RHSA-2004:650"],"bugzilla":"430645","bugzilla_description":"CVE-2004-0989 libxml2 various overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libxml-1:1.8.17-9.2","libxml2-0:2.5.10-7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0989.json"},{"CVE":"CVE-2004-0110","severity":"moderate","public_date":"2004-02-12T00:00:00Z","advisories":["RHSA-2004:091","RHSA-2004:650","RHSA-2004:090"],"bugzilla":"430644","bugzilla_description":"CVE-2004-0110 libxml2 long URL causes SEGV","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libxml2-0:2.5.10-6","libxml-1:1.8.17-9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0110.json"},{"CVE":"CVE-2003-1564","severity":"moderate","public_date":"2003-02-02T00:00:00Z","advisories":["RHSA-2008:0886"],"bugzilla":"461107","bugzilla_description":"CVE-2003-1564 libxml2: billion laughs DoS attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libxml2-0:2.4.19-11.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-1564.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxshmfence-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxshmfence-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxshmfence-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxshmfence_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxshmfence_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxshmfence_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxslt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxslt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxslt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxslt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxslt_security_api_results.json
new file mode 100644
index 0000000..752b948
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libxslt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-18197","severity":"moderate","public_date":"2019-10-18T00:00:00Z","advisories":["RHSA-2020:4005","RHSA-2020:0514"],"bugzilla":"1770768","bugzilla_description":"CVE-2019-18197 libxslt: use after free in xsltCopyText in transform.c could lead to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["chromium-browser-0:80.0.3987.87-1.el6_10","libxslt-0:1.1.28-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18197.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13118","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":[],"bugzilla":"1728541","bugzilla_description":"CVE-2019-13118 libxslt: read of uninitialized stack data due to too narrow xsl:number instruction and an invalid character","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13118.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2019-13117","severity":"low","public_date":"2019-06-30T00:00:00Z","advisories":[],"bugzilla":"1728546","bugzilla_description":"CVE-2019-13117 libxslt: an xsl number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-134","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13117.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-11068","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4005"],"bugzilla":"1709697","bugzilla_description":"CVE-2019-11068 libxslt: xsltCheckRead and xsltCheckWrite routines security bypass by crafted URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libxslt-0:1.1.28-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11068.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-4738","severity":"moderate","public_date":"2016-10-12T00:00:00Z","advisories":[],"bugzilla":"1388777","bugzilla_description":"CVE-2016-4738 libxslt: Heap overread due to an empty decimal-separator","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-4609","severity":"moderate","public_date":"2016-07-21T00:00:00Z","advisories":[],"bugzilla":"1714979","bugzilla_description":"CVE-2016-4609 libxslt: Out-of-bounds read at xmlGetLineNoInternal()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4609.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-4610","severity":"moderate","public_date":"2016-07-21T00:00:00Z","advisories":[],"bugzilla":"1716448","bugzilla_description":"CVE-2016-4610 libxslt: Invalid memory access leading to DoS at exsltDynMapFunction()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-4607","severity":"moderate","public_date":"2016-07-21T00:00:00Z","advisories":[],"bugzilla":"1716453","bugzilla_description":"CVE-2016-4607 libxslt: allows remote attacker to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4607.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-4608","severity":"moderate","public_date":"2016-07-21T00:00:00Z","advisories":[],"bugzilla":"1716454","bugzilla_description":"CVE-2016-4608 libxslt: stack-based buffer overflow at exsltDateFormat()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4608.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-1683","severity":"moderate","public_date":"2016-05-25T00:00:00Z","advisories":["RHSA-2016:1190"],"bugzilla":"1340016","bugzilla_description":"CVE-2016-1683 chromium-browser: out-of-bounds access in libxslt","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["chromium-browser-0:51.0.2704.63-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1683.json"},{"CVE":"CVE-2016-1684","severity":"moderate","public_date":"2016-05-25T00:00:00Z","advisories":["RHSA-2016:1190"],"bugzilla":"1340017","bugzilla_description":"CVE-2016-1684 chromium-browser: integer overflow in libxslt","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["chromium-browser-0:51.0.2704.63-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1684.json"},{"CVE":"CVE-2015-9019","severity":"low","public_date":"2015-11-20T00:00:00Z","advisories":[],"bugzilla":"1439548","bugzilla_description":"CVE-2015-9019 libxslt: math.random() in xslt uses unseeded randomness","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9019.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-1841","severity":"moderate","public_date":"2015-11-18T00:00:00Z","advisories":[],"bugzilla":"1393780","bugzilla_description":"CVE-2016-1841 libxslt: Use after free in xsltDocumentFunctionLoadDocument","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1841.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2015-7995","severity":"moderate","public_date":"2015-08-26T00:00:00Z","advisories":[],"bugzilla":"1257962","bugzilla_description":"CVE-2015-7995 libxslt: Type confusion may cause DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-587->CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7995.json"},{"CVE":"CVE-2012-6139","severity":"low","public_date":"2012-10-02T00:00:00Z","advisories":[],"bugzilla":"927386","bugzilla_description":"CVE-2012-6139 libxslt: two DoS issues fixed in 1.1.28","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6139.json"},{"CVE":"CVE-2012-2893","severity":"low","public_date":"2012-09-25T00:00:00Z","advisories":["RHSA-2012:1265"],"bugzilla":"860671","bugzilla_description":"CVE-2012-2893 libxslt: Heap-double-free in xmlFreeNodeList","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libxslt-0:1.1.26-2.el6_3.1","libxslt-0:1.1.17-4.el5_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2893.json"},{"CVE":"CVE-2012-2871","severity":"important","public_date":"2012-08-31T00:00:00Z","advisories":["RHSA-2012:1265"],"bugzilla":"852935","bugzilla_description":"CVE-2012-2871 libxslt: Heap-buffer overflow caused by bad cast in XSL transforms","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libxslt-0:1.1.26-2.el6_3.1","libxslt-0:1.1.17-4.el5_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2871.json"},{"CVE":"CVE-2012-2870","severity":"low","public_date":"2012-08-31T00:00:00Z","advisories":["RHSA-2012:1265"],"bugzilla":"852937","bugzilla_description":"CVE-2012-2870 libxslt: Use-after-free when processing an invalid XPath expression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["libxslt-0:1.1.26-2.el6_3.1","libxslt-0:1.1.17-4.el5_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2870.json"},{"CVE":"CVE-2012-2825","severity":"moderate","public_date":"2012-06-26T00:00:00Z","advisories":["RHSA-2012:1265"],"bugzilla":"835982","bugzilla_description":"CVE-2012-2825 libxslt: DoS when reading unexpected DTD nodes in XSLT","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libxslt-0:1.1.26-2.el6_3.1","libxslt-0:1.1.17-4.el5_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2825.json"},{"CVE":"CVE-2011-3970","severity":"low","public_date":"2012-02-09T00:00:00Z","advisories":["RHSA-2012:1265"],"bugzilla":"788826","bugzilla_description":"CVE-2011-3970 libxslt: Out-of-bounds read when parsing certain patterns","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["libxslt-0:1.1.26-2.el6_3.1","libxslt-0:1.1.17-4.el5_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3970.json"},{"CVE":"CVE-2011-1202","severity":"low","public_date":"2011-02-22T00:00:00Z","advisories":["RHSA-2011:0471","RHSA-2012:1265"],"bugzilla":"684386","bugzilla_description":"CVE-2011-1202 libxslt: Heap address leak in XLST","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libxslt-0:1.1.26-2.el6_3.1","libxslt-0:1.1.17-4.el5_8.3","firefox-0:3.6.17-2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1202.json"},{"CVE":"CVE-2013-4520","severity":"moderate","public_date":"2009-09-16T00:00:00Z","advisories":[],"bugzilla":"1027360","bugzilla_description":"CVE-2013-4520 libxslt: DoS when reading unexpected DTD nodes in XSLT in versions prior to 1.1.25","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4520.json"},{"CVE":"CVE-2008-2935","severity":"important","public_date":"2008-07-31T14:00:00Z","advisories":["RHSA-2008:0649"],"bugzilla":"455848","bugzilla_description":"CVE-2008-2935 libxslt: buffer overflow in libexslt RC4 encryption/decryption functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libxslt-0:1.1.17-2.el5_2.2","libxslt-0:1.1.11-1.el4_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2935.json"},{"CVE":"CVE-2008-1767","severity":"important","public_date":"2008-04-10T00:00:00Z","advisories":["RHSA-2008:0287"],"bugzilla":"446809","bugzilla_description":"CVE-2008-1767 libxslt: fixed-sized steps array overflow via \"template match\" condition in XSL file","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["libxslt-0:1.1.11-1.el4_6.1","libxslt-0:1.1.17-2.el5_1.1","libxslt-0:1.0.33-6","libxslt-0:1.0.15-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1767.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyami_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyami_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyami_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyaml-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyaml-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyaml-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyaml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyaml_security_api_results.json
new file mode 100644
index 0000000..a8edf23
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyaml_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-9130","severity":"moderate","public_date":"2014-11-26T00:00:00Z","advisories":["RHSA-2015:0112","RHSA-2015:0100","RHSA-2015:0260"],"bugzilla":"1169369","bugzilla_description":"CVE-2014-9130 libyaml: assert failure when processing wrapped strings","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["libyaml-0:0.1.4-11.el7_0","libyaml-0:0.1.3-4.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9130.json"},{"CVE":"CVE-2014-2525","severity":"important","public_date":"2014-03-27T00:00:00Z","advisories":["RHSA-2014:0355","RHSA-2014:0353","RHSA-2014:0364","RHSA-2014:0354","RHSA-2014:0415"],"bugzilla":"1078083","bugzilla_description":"CVE-2014-2525 libyaml: heap-based buffer overflow when parsing URLs","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libyaml-0:0.1.3-1.4.el6","ruby193-libyaml-0:0.1.4-5.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2525.json"},{"CVE":"CVE-2013-6393","severity":"moderate","public_date":"2014-01-27T00:00:00Z","advisories":["RHSA-2014:0355","RHSA-2014:0353","RHSA-2014:0364","RHSA-2014:0354","RHSA-2014:0415"],"bugzilla":"1033990","bugzilla_description":"CVE-2013-6393 libyaml: heap-based buffer overflow when parsing YAML tags","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libyaml-0:0.1.3-1.4.el6","ruby193-libyaml-0:0.1.4-5.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6393.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyang_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyang_security_api_results.json
new file mode 100644
index 0000000..5de8dff
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libyang_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-19333","severity":"important","public_date":"2019-12-05T00:00:00Z","advisories":["RHSA-2019:4360"],"bugzilla":"1779573","bugzilla_description":"CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libyang-0:0.16.105-3.el8_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19333.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-19334","severity":"important","public_date":"2019-12-05T00:00:00Z","advisories":["RHSA-2019:4360"],"bugzilla":"1779576","bugzilla_description":"CVE-2019-19334 libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libyang-0:0.16.105-3.el8_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19334.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-20398","severity":"low","public_date":"2019-04-29T00:00:00Z","advisories":[],"bugzilla":"1793935","bugzilla_description":"CVE-2019-20398 libyang: NULL pointer dereference in function lys_extension_instances_free()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20398.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-20394","severity":"moderate","public_date":"2019-04-26T00:00:00Z","advisories":[],"bugzilla":"1793932","bugzilla_description":"CVE-2019-20394 libyang: double-free in yyparse() when a type statement is used in a notification statement","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20394.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-20391","severity":"low","public_date":"2019-04-26T00:00:00Z","advisories":[],"bugzilla":"1793934","bugzilla_description":"CVE-2019-20391 libyang: invalid memory access in resolve_feature_value() when a if-feature is used inside a bit","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20391.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-20396","severity":"moderate","public_date":"2019-03-29T00:00:00Z","advisories":[],"bugzilla":"1793929","bugzilla_description":"CVE-2019-20396 libyang: heap-based buffer over-read in function lys_type_free() due to malformed pattern","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20396.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-20393","severity":"moderate","public_date":"2019-03-29T00:00:00Z","advisories":[],"bugzilla":"1793930","bugzilla_description":"CVE-2019-20393 libyang: double-free in function yyparse() when empty description is used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20393.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-20397","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":[],"bugzilla":"1793928","bugzilla_description":"CVE-2019-20397 libyang: double-free in yyparse() when organization field is not terminated","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20397.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-20395","severity":"low","public_date":"2019-03-08T00:00:00Z","advisories":[],"bugzilla":"1793924","bugzilla_description":"CVE-2019-20395 libyang: stack-overflow when parsing yang files with self-referential union types","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20395.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-20392","severity":"low","public_date":"2019-03-07T00:00:00Z","advisories":[],"bugzilla":"1793922","bugzilla_description":"CVE-2019-20392 libyang: invalid memory access when if-feature statement is used inside a list key node","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20392.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzfcphbaapi-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzfcphbaapi-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzfcphbaapi-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzfcphbaapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzfcphbaapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzfcphbaapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzhuyin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzhuyin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzhuyin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzip-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzip-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzip-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzip-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzip-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzip-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzip_security_api_results.json
new file mode 100644
index 0000000..2b0c6f4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzip_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-14107","severity":"low","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1489000","bugzilla_description":"CVE-2017-14107 libzip: Memory allocation failure in _zip_cdir_grow function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14107.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12858","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1484514","bugzilla_description":"CVE-2017-12858 libzip: Double free in _zip_dirent_read function in zip_dirent.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12858.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-2331","severity":"important","public_date":"2015-03-18T00:00:00Z","advisories":[],"bugzilla":"1204676","bugzilla_description":"CVE-2015-2331 libzip: integer overflow when processing ZIP archives","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2331.json"},{"CVE":"CVE-2012-1162","severity":"moderate","public_date":"2012-03-20T00:00:00Z","advisories":[],"bugzilla":"802564","bugzilla_description":"CVE-2012-1162 libzip: heap overflow flaw when processing malformed zip file","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1162.json"},{"CVE":"CVE-2012-1163","severity":"moderate","public_date":"2012-03-20T00:00:00Z","advisories":[],"bugzilla":"803028","bugzilla_description":"CVE-2012-1163 libzip: integer overflow when processing malformed zip file","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1163.json"},{"CVE":"CVE-2011-0421","severity":"low","public_date":"2011-01-30T00:00:00Z","advisories":[],"bugzilla":"688735","bugzilla_description":"CVE-2011-0421 php/libzip: segfault with FL_UNCHANGED on empty archive in zip_name_locate()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0421.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzmf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzmf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzmf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzstd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzstd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzstd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzstd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzstd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/libzstd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linux-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linux-firmware_security_api_results.json
new file mode 100644
index 0000000..c814ebd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linux-firmware_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-15126","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":[],"bugzilla":"1807728","bugzilla_description":"CVE-2019-15126 linux-firmware: Transmission of data encrypted with an all-zero session key after disassociation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-300","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15126.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-11090","severity":"moderate","public_date":"2020-01-08T00:00:00Z","advisories":[],"bugzilla":"1788755","bugzilla_description":"CVE-2019-11090 CVE-2019-16863 hw: ECDSA signature timing vulnerabilities in TPM module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11090.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-16863","severity":"moderate","public_date":"2020-01-08T00:00:00Z","advisories":[],"bugzilla":"1788755","bugzilla_description":"CVE-2019-11090 CVE-2019-16863 hw: ECDSA signature timing vulnerabilities in TPM module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16863.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-5383","severity":"important","public_date":"2018-07-23T00:00:00Z","advisories":["RHSA-2019:2169"],"bugzilla":"1614159","bugzilla_description":"CVE-2018-5383 kernel: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["linux-firmware-0:20190429-72.gitddde598.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5383.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linuxconsoletools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linuxconsoletools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linuxconsoletools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linuxdoc-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linuxdoc-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linuxdoc-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linuxptp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linuxptp_security_api_results.json
new file mode 100644
index 0000000..3bbd481
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/linuxptp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lklug-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lklug-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lklug-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lksctp-tools-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lksctp-tools-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lksctp-tools-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lksctp-tools-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lksctp-tools-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lksctp-tools-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lksctp-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lksctp-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lksctp-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld_security_api_results.json
new file mode 100644
index 0000000..507a0ad
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lld_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10932","severity":"low","public_date":"2018-08-10T16:01:00Z","advisories":["RHSA-2019:3673"],"bugzilla":"1614896","bugzilla_description":"CVE-2018-10932 lldptool: improper sanitization of shell-escape codes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["lldpad-0:1.0.1-13.git036e314.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10932.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-5410","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2016:2597"],"bugzilla":"1360135","bugzilla_description":"CVE-2016-5410 firewalld: Firewall configuration can be modified by any logged in user","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":["firewalld-0:0.4.3.2-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5410.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldpad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldpad_security_api_results.json
new file mode 100644
index 0000000..9d8ca73
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldpad_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10932","severity":"low","public_date":"2018-08-10T16:01:00Z","advisories":["RHSA-2019:3673"],"bugzilla":"1614896","bugzilla_description":"CVE-2018-10932 lldptool: improper sanitization of shell-escape codes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["lldpad-0:1.0.1-13.git036e314.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10932.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldpd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldpd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldpd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldpd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lldpd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-googletest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-googletest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-googletest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-toolset_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-toolset_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm-toolset_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm_security_api_results.json
new file mode 100644
index 0000000..5709a1b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/llvm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-2305","severity":"moderate","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1191049","bugzilla_description":"CVE-2015-2305 regex: heap overflow in regcomp() on 32-bit architectures","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2305.json"},{"CVE":"CVE-2014-2893","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088105","bugzilla_description":"CVE-2014-2893 llvm: insecure temporary file handling in clang's scan-build utility","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367|CWE-732)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2893.json"},{"CVE":"CVE-2013-7171","severity":"moderate","public_date":"2001-07-21T00:00:00Z","advisories":[],"bugzilla":"1044842","bugzilla_description":"CVE-2013-7171 llvm: insecure RPATH in certain binaries","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7171.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors-sensord_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors-sensord_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors-sensord_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors_security_api_results.json
new file mode 100644
index 0000000..a9f3506
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lm_sensors_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2005-2672","severity":"low","public_date":"2005-08-14T00:00:00Z","advisories":["RHSA-2005:825"],"bugzilla":"1617739","bugzilla_description":"CVE-2005-2672 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["lm_sensors-0:2.8.7-2.40.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2672.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lmdb-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lmdb-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lmdb-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lockdev-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lockdev-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lockdev-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lockdev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lockdev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lockdev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/log4j-over-slf4j_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/log4j-over-slf4j_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/log4j-over-slf4j_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/log4j12-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/log4j12-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/log4j12-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/log4j12_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/log4j12_security_api_results.json
new file mode 100644
index 0000000..8fd7cd1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/log4j12_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9488","severity":"low","public_date":"2020-04-25T00:00:00Z","advisories":["RHSA-2020:3817","RHSA-2020:2391","RHSA-2020:3779","RHSA-2020:3626"],"bugzilla":"1831139","bugzilla_description":"CVE-2020-9488 log4j: improper validation of certificate with host mismatch in SMTP appender","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9488.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-17571","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2638"],"bugzilla":"1785616","bugzilla_description":"CVE-2019-17571 log4j: deserialization of untrusted data in SocketServer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/logrotate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/logrotate_security_api_results.json
new file mode 100644
index 0000000..b4ee89b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/logrotate_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-1154","severity":"moderate","public_date":"2011-02-13T00:00:00Z","advisories":["RHSA-2011:0407"],"bugzilla":"680796","bugzilla_description":"CVE-2011-1154 logrotate: Shell command injection by using the shred configuration directive","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["logrotate-0:3.7.8-12.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1154.json"},{"CVE":"CVE-2011-1155","severity":"low","public_date":"2011-02-13T00:00:00Z","advisories":["RHSA-2011:0407"],"bugzilla":"680797","bugzilla_description":"CVE-2011-1155 logrotate: DoS due improper escaping of file names within 'write state' action","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["logrotate-0:3.7.8-12.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1155.json"},{"CVE":"CVE-2011-1098","severity":"low","public_date":"2011-02-13T00:00:00Z","advisories":["RHSA-2011:0407"],"bugzilla":"680798","bugzilla_description":"CVE-2011-1098 logrotate: TOCTOU race condition by creation of new files (between opening the file and moment, final permissions have been applied) [information disclosure]","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-367","affected_packages":["logrotate-0:3.7.8-12.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1098.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/logwatch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/logwatch_security_api_results.json
new file mode 100644
index 0000000..19d4d98
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/logwatch_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-1018","severity":"important","public_date":"2011-02-16T00:00:00Z","advisories":["RHSA-2011:0324"],"bugzilla":"680237","bugzilla_description":"CVE-2011-1018 logwatch: Privilege escalation due improper sanitization of special characters in log file names","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-73->CWE-78","affected_packages":["logwatch-0:7.3.6-49.el6","logwatch-0:7.3-9.el5_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1018.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-assamese-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-assamese-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-assamese-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-bengali-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-bengali-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-bengali-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-devanagari-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-devanagari-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-devanagari-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-gujarati-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-gujarati-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-gujarati-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-gurmukhi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-gurmukhi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-gurmukhi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-kannada-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-kannada-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-kannada-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-malayalam-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-malayalam-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-malayalam-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-marathi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-marathi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-marathi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-nepali-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-nepali-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-nepali-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-odia-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-odia-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-odia-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-tamil-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-tamil-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-tamil-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-telugu-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-telugu-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lohit-telugu-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-composer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-composer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-composer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-lmc-novirt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-lmc-novirt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-lmc-novirt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-lmc-virt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-lmc-virt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-lmc-virt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-templates-generic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-templates-generic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-templates-generic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-templates-rhel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-templates-rhel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax-templates-rhel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lorax_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lpsolve_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lpsolve_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lpsolve_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lrzsz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lrzsz_security_api_results.json
new file mode 100644
index 0000000..ff76b66
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lrzsz_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10195","severity":"moderate","public_date":"2018-04-18T00:00:00Z","advisories":[],"bugzilla":"1572058","bugzilla_description":"CVE-2018-10195 lrzsz: Integer overflow in src/zm.c:zsdata() causes crash in sz and can leak information to receiver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lshw-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lshw-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lshw-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lshw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lshw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lshw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lsof_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lsof_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lsof_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lsscsi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lsscsi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lsscsi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lsvpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lsvpd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lsvpd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ltrace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ltrace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ltrace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lttng-ust-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lttng-ust-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lttng-ust-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lttng-ust_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lttng-ust_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lttng-ust_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-expat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-expat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-expat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-guestfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-guestfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-guestfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-json_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-json_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-json_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-lpeg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-lpeg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-lpeg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-lunit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-lunit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-lunit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-posix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-posix_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-posix_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-socket_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-socket_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua-socket_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua_security_api_results.json
new file mode 100644
index 0000000..b3f4dc6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lua_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24369","severity":"low","public_date":"2020-07-24T00:00:00Z","advisories":[],"bugzilla":"1870230","bugzilla_description":"CVE-2020-24369 lua: NULL pointer dereference when trying to access debug information via the line hook of a stripped function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24369.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-24370","severity":"low","public_date":"2020-07-24T00:00:00Z","advisories":[],"bugzilla":"1870290","bugzilla_description":"CVE-2020-24370 lua: segmentation fault in getlocal and setlocal functions in ldebug.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24370.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-24371","severity":"moderate","public_date":"2020-07-15T00:00:00Z","advisories":[],"bugzilla":"1870294","bugzilla_description":"CVE-2020-24371 lua: mishandles the interaction between barriers and the sweep phase leading to a memory access violation involving collectgarbage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24371.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-15945","severity":"moderate","public_date":"2020-07-09T00:00:00Z","advisories":[],"bugzilla":"1861999","bugzilla_description":"CVE-2020-15945 lua: segmentation fault in changedline in ldebug.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15945.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-15888","severity":"important","public_date":"2020-07-06T00:00:00Z","advisories":[],"bugzilla":"1860310","bugzilla_description":"CVE-2020-15888 lua: stack resizes and garbage collection leads to heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15888.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15889","severity":"important","public_date":"2020-07-06T00:00:00Z","advisories":[],"bugzilla":"1860316","bugzilla_description":"CVE-2020-15889 lua: heap-based buffer over-read in lgc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15889.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-24342","severity":"moderate","public_date":"2020-07-06T00:00:00Z","advisories":[],"bugzilla":"1873084","bugzilla_description":"CVE-2020-24342 lua: buffer overflow in luaO_pushvfstring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24342.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-6706","severity":"moderate","public_date":"2019-01-10T00:00:00Z","advisories":["RHSA-2019:3706"],"bugzilla":"1670019","bugzilla_description":"CVE-2019-6706 lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["lua-0:5.3.4-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-5461","severity":"moderate","public_date":"2013-04-17T00:00:00Z","advisories":[],"bugzilla":"1132304","bugzilla_description":"CVE-2014-5461 lua: overflow flaw in vararg functions","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5461.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/luksmeta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/luksmeta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/luksmeta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-dbusd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-dbusd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-dbusd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-lockd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-lockd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2-lockd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2_security_api_results.json
new file mode 100644
index 0000000..43689da
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lvm2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8991","severity":"low","public_date":"2020-02-05T00:00:00Z","advisories":[],"bugzilla":"1805922","bugzilla_description":"CVE-2020-8991 lvm2: memory leak in vg_lookup in daemons/lvmetad/lvmetad-core.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8991.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.3"},{"CVE":"CVE-2010-2526","severity":"moderate","public_date":"2010-07-28T00:00:00Z","advisories":["RHSA-2010:0568","RHSA-2010:0567"],"bugzilla":"614248","bugzilla_description":"CVE-2010-2526 lvm2-cluster: insecurity when communicating between lvm2 and clvmd","cvss_score":4.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["lvm2-cluster-0:2.02.42-5.el4_8.2","lvm2-cluster-0:2.02.56-7.el5_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2526.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lynx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lynx_security_api_results.json
new file mode 100644
index 0000000..dd8956f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lynx_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-1000211","severity":"low","public_date":"2017-12-06T00:00:00Z","advisories":[],"bugzilla":"1522617","bugzilla_description":"CVE-2017-1000211 lynx: Use after free in HTML.c:HTML_put_string() can lead to memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000211.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9179","severity":"moderate","public_date":"2016-11-03T00:00:00Z","advisories":[],"bugzilla":"1391861","bugzilla_description":"CVE-2016-9179 lynx: Invalid URL parsing of pages containing '?'","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9179.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2012-5821","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":[],"bugzilla":"873262","bugzilla_description":"CVE-2012-5821 lynx: Does not verify that the server's certificate is signed by a trusted certification authority","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5821.json"},{"CVE":"CVE-2010-2810","severity":null,"public_date":"2010-08-05T00:00:00Z","advisories":[],"bugzilla":"630677","bugzilla_description":"CVE-2010-2810 Lynx: Heap-based buffer overflow by processing URLs with % (percent) character in the domain name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2810.json"},{"CVE":"CVE-2008-4690","severity":"important","public_date":"2008-10-09T00:00:00Z","advisories":["RHSA-2008:0965"],"bugzilla":"468184","bugzilla_description":"CVE-2008-4690 lynx: remote arbitrary command execution via a crafted lynxcgi: URL","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":["lynx-0:2.8.4-18.1.3","lynx-0:2.8.5-11.3","lynx-0:2.8.5-28.1.el5_2.1","lynx-0:2.8.5-18.2.el4_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4690.json"},{"CVE":"CVE-2006-7234","severity":"low","public_date":"2006-10-03T00:00:00Z","advisories":["RHSA-2008:0965"],"bugzilla":"214205","bugzilla_description":"CVE-2006-7234 lynx: .mailcap and .mime.types files read from CWD","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["lynx-0:2.8.4-18.1.3","lynx-0:2.8.5-11.3","lynx-0:2.8.5-28.1.el5_2.1","lynx-0:2.8.5-18.2.el4_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7234.json"},{"CVE":"CVE-2005-2929","severity":"critical","public_date":"2005-11-11T16:45:00Z","advisories":["RHSA-2005:839"],"bugzilla":"172972","bugzilla_description":"CVE-2005-2929 lynx arbitrary command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["lynx-0:2.8.5-18.2","lynx-0:2.8.5-11.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2929.json"},{"CVE":"CVE-2005-3120","severity":"critical","public_date":"2005-10-17T00:00:00Z","advisories":["RHSA-2005:803"],"bugzilla":"170253","bugzilla_description":"CAN-2005-3120 lynx buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["lynx-0:2.8.5-18.1","lynx-0:2.8.5-11.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3120.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lz4-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lz4-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lz4-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lz4-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lz4-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lz4-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lz4_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lz4_security_api_results.json
new file mode 100644
index 0000000..9c7d94c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lz4_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17543","severity":"moderate","public_date":"2019-07-17T00:00:00Z","advisories":[],"bugzilla":"1765316","bugzilla_description":"CVE-2019-17543 lz4: heap-based buffer overflow in LZ4_write32","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17543.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzo-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzo-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzo-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzo-minilzo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzo-minilzo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzo-minilzo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzo_security_api_results.json
new file mode 100644
index 0000000..56528c5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzo_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-4607","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":["RHSA-2014:0861"],"bugzilla":"1112418","bugzilla_description":"CVE-2014-4607 lzo: lzo1x_decompress_safe() integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["lzo-0:2.03-3.1.el6_5.1","lzo-0:2.06-6.el7_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4607.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/lzop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/m17n-db_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/m17n-db_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/m17n-db_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/m17n-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/m17n-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/m17n-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/m4_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/m4_security_api_results.json
new file mode 100644
index 0000000..f2b85ce
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/m4_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10683","severity":"moderate","public_date":"2020-04-15T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3585","RHSA-2020:3461","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:3637"],"bugzilla":"1694235","bugzilla_description":"CVE-2020-10683 dom4j: XML External Entity vulnerability in default SAX parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10683.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2018-1000632","severity":"moderate","public_date":"2018-07-01T00:00:00Z","advisories":["RHSA-2019:0364","RHSA-2019:1159","RHSA-2019:0365","RHSA-2019:1162","RHSA-2020:3192","RHSA-2019:1161","RHSA-2019:1160","RHSA-2019:3172","RHSA-2019:0380"],"bugzilla":"1620529","bugzilla_description":"CVE-2018-1000632 dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/madan-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/madan-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/madan-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mailcap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mailcap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mailcap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mailman_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mailman_security_api_results.json
new file mode 100644
index 0000000..b40876d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mailman_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15011","severity":"moderate","public_date":"2020-05-07T00:00:00Z","advisories":[],"bugzilla":"1850684","bugzilla_description":"CVE-2020-15011 mailman: arbitrary content injection via the private archive login page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15011.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2020-12108","severity":"moderate","public_date":"2020-05-06T00:00:00Z","advisories":[],"bugzilla":"1848856","bugzilla_description":"CVE-2020-12108 mailman: /options/mailman allows Arbitrary Content Injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12108.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-12137","severity":"moderate","public_date":"2020-02-24T00:00:00Z","advisories":[],"bugzilla":"1830007","bugzilla_description":"CVE-2020-12137 mailman: XSS via file attachments in list archives","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12137.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-13796","severity":"moderate","public_date":"2018-07-23T00:00:00Z","advisories":["RHSA-2020:1054"],"bugzilla":"1609090","bugzilla_description":"CVE-2018-13796 mailman: Mishandled URLs in Utils.py:GetPathPieces() allows attackers to display arbitrary text on trusted sites","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["mailman-3:2.1.15-30.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-0618","severity":"moderate","public_date":"2018-06-22T00:00:00Z","advisories":["RHSA-2020:1054"],"bugzilla":"1596458","bugzilla_description":"CVE-2018-0618 mailman: Cross-site scripting vulnerability allows malicious listowners to inject scripts into listinfo pages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["mailman-3:2.1.15-30.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-5950","severity":"moderate","public_date":"2018-01-20T00:00:00Z","advisories":["RHSA-2018:0504","RHSA-2018:0505"],"bugzilla":"1537941","bugzilla_description":"CVE-2018-5950 mailman: Cross-site scripting (XSS) vulnerability in web UI","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["mailman-3:2.1.12-26.el6_9.3","mailman-3:2.1.15-26.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5950.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-7123","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":[],"bugzilla":"1373125","bugzilla_description":"CVE-2016-7123 mailman: Missing CSRF protection in admin web interface","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7123.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-6893","severity":"moderate","public_date":"2016-08-19T00:00:00Z","advisories":[],"bugzilla":"1370155","bugzilla_description":"CVE-2016-6893 mailman: CSRF protection missing in the user options page","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2015-2775","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:1417","RHSA-2015:1153"],"bugzilla":"1208059","bugzilla_description":"CVE-2015-2775 mailman: directory traversal in MTA transports that deliver programmatically","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-22","affected_packages":["mailman-3:2.1.12-25.el6","mailman-3:2.1.15-21.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2775.json"},{"CVE":"CVE-2011-0707","severity":"moderate","public_date":"2011-02-18T00:00:00Z","advisories":["RHSA-2011:0307","RHSA-2011:0308"],"bugzilla":"677375","bugzilla_description":"CVE-2011-0707 Mailman: Three XSS flaws due improper escaping of the full name of the member","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["mailman-3:2.1.9-6.el5_6.1","mailman-3:2.1.5.1-34.rhel4.7","mailman-3:2.1.12-14.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0707.json"},{"CVE":"CVE-2010-3089","severity":"low","public_date":"2010-09-09T00:00:00Z","advisories":["RHSA-2011:0307","RHSA-2011:0308"],"bugzilla":"631881","bugzilla_description":"CVE-2010-3089 mailman: Multiple security flaws leading to cross-site scripting (XSS) attacks","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["mailman-3:2.1.9-6.el5_6.1","mailman-3:2.1.5.1-34.rhel4.7","mailman-3:2.1.12-14.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3089.json"},{"CVE":"CVE-2002-0389","severity":"low","public_date":"2008-08-19T00:00:00Z","advisories":["RHSA-2015:1417"],"bugzilla":"723584","bugzilla_description":"CVE-2002-0389 mailman: Local users able to read private mailing list archives","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["mailman-3:2.1.12-25.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2002-0389.json"},{"CVE":"CVE-2008-0564","severity":"low","public_date":"2008-01-03T00:00:00Z","advisories":["RHSA-2011:0307"],"bugzilla":"431526","bugzilla_description":"CVE-2008-0564 mailman: XSS triggerable by list administrator","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["mailman-3:2.1.9-6.el5_6.1","mailman-3:2.1.5.1-34.rhel4.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0564.json"},{"CVE":"CVE-2006-2941","severity":"moderate","public_date":"2006-09-04T00:00:00Z","advisories":["RHSA-2006:0600"],"bugzilla":"1618129","bugzilla_description":"CVE-2006-2941 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5.1-25.rhel3.7","mailman-3:2.1.5.1-34.rhel4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2941.json"},{"CVE":"CVE-2006-3636","severity":"moderate","public_date":"2006-09-04T00:00:00Z","advisories":["RHSA-2006:0600"],"bugzilla":"1618152","bugzilla_description":"CVE-2006-3636 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5.1-25.rhel3.7","mailman-3:2.1.5.1-34.rhel4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3636.json"},{"CVE":"CVE-2006-4624","severity":"low","public_date":"2006-06-23T00:00:00Z","advisories":["RHSA-2007:0779"],"bugzilla":"205651","bugzilla_description":"CVE-2006-4624 mailman logfile CRLF injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5.1-34.rhel4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4624.json"},{"CVE":"CVE-2005-3573","severity":"moderate","public_date":"2005-09-12T00:00:00Z","advisories":["RHSA-2006:0204"],"bugzilla":"1617824","bugzilla_description":"CVE-2005-3573 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5.1-34.rhel4.2","mailman-3:2.1.5.1-25.rhel3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3573.json"},{"CVE":"CVE-2005-4153","severity":"moderate","public_date":"2005-09-01T00:00:00Z","advisories":["RHSA-2006:0204"],"bugzilla":"1617854","bugzilla_description":"CVE-2005-4153 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5.1-34.rhel4.2","mailman-3:2.1.5.1-25.rhel3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4153.json"},{"CVE":"CVE-2006-0052","severity":"moderate","public_date":"2005-06-06T00:00:00Z","advisories":["RHSA-2006:0486"],"bugzilla":"1617871","bugzilla_description":"CVE-2006-0052 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5.1-25.rhel3.5","mailman-3:2.1.5.1-34.rhel4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0052.json"},{"CVE":"CVE-2005-0202","severity":"important","public_date":"2005-02-09T00:00:00Z","advisories":["RHSA-2005:137","RHSA-2005:136"],"bugzilla":"1617490","bugzilla_description":"CVE-2005-0202 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5-31.rhel4","mailman-3:2.1.5-24.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0202.json"},{"CVE":"CVE-2004-1177","severity":"important","public_date":"2005-01-10T00:00:00Z","advisories":["RHSA-2005:235"],"bugzilla":"1617389","bugzilla_description":"CVE-2004-1177 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mailman-3:2.1.5-33.rhel4","mailman-3:2.1.5-25.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1177.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mailx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mailx_security_api_results.json
new file mode 100644
index 0000000..72a97b2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mailx_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-5899","severity":"moderate","public_date":"2017-01-27T00:00:00Z","advisories":[],"bugzilla":"1418204","bugzilla_description":"CVE-2017-5899 s-nail: privsep helper local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5899.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2004-2771","severity":"moderate","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2014:1999"],"bugzilla":"1162783","bugzilla_description":"CVE-2004-2771 CVE-2014-7844 mailx: command execution flaw","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-78","affected_packages":["mailx-0:12.5-12.el7_0","mailx-0:12.4-8.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-2771.json"},{"CVE":"CVE-2014-7844","severity":"moderate","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2014:1999"],"bugzilla":"1162783","bugzilla_description":"CVE-2004-2771 CVE-2014-7844 mailx: command execution flaw","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-78","affected_packages":["mailx-0:12.5-12.el7_0","mailx-0:12.4-8.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7844.json"},{"CVE":"CVE-2011-2895","severity":"important","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2011:1154","RHSA-2011:1155","RHSA-2011:1161","RHSA-2011:1834"],"bugzilla":"727624","bugzilla_description":"CVE-2011-2895 BSD compress LZW decoder buffer overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libXfont-0:1.2.2-1.0.3.el5_6","libXfont-0:1.4.1-2.el6_1","freetype-0:2.1.9-19.el4","xorg-x11-0:6.8.2-1.EL.69","libXfont-0:1.2.2-1.0.4.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2895.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/make-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/make-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/make-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/make_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/make_security_api_results.json
new file mode 100644
index 0000000..4325e4f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/make_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3885","severity":"low","public_date":"2019-04-17T09:45:00Z","advisories":["RHSA-2019:1279","RHSA-2019:1278"],"bugzilla":"1694554","bugzilla_description":"CVE-2019-3885 pacemaker: Information disclosure through use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["pacemaker-0:1.1.19-8.el7_6.5","pacemaker-0:2.0.1-4.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-16877","severity":"important","public_date":"2019-04-17T04:30:00Z","advisories":["RHSA-2019:1279","RHSA-2019:1278"],"bugzilla":"1652646","bugzilla_description":"CVE-2018-16877 pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["pacemaker-0:1.1.19-8.el7_6.5","pacemaker-0:2.0.1-4.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16877.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-16878","severity":"moderate","public_date":"2019-04-17T04:30:00Z","advisories":["RHSA-2019:1279","RHSA-2019:1278"],"bugzilla":"1657962","bugzilla_description":"CVE-2018-16878 pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["pacemaker-0:1.1.19-8.el7_6.5","pacemaker-0:2.0.1-4.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16878.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-7035","severity":"important","public_date":"2016-11-03T00:00:00Z","advisories":["RHSA-2016:2675","RHSA-2016:2614"],"bugzilla":"1369732","bugzilla_description":"CVE-2016-7035 pacemaker: Privilege escalation due to improper guarding of IPC communication","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-285","affected_packages":["pacemaker-0:1.1.14-8.el6_8.2","pacemaker-0:1.1.15-11.el7_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7035.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-7797","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2578"],"bugzilla":"1379784","bugzilla_description":"CVE-2016-7797 pacemaker: pacemaker remote nodes vulnerable to hijacking, resulting in a DoS attack","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["pacemaker-0:1.1.15-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2015-1867","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:2383","RHSA-2015:1424"],"bugzilla":"1211370","bugzilla_description":"CVE-2015-1867 pacemaker: acl read-only access allow role assignment","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-863","affected_packages":["pacemaker-0:1.1.13-10.el7","pacemaker-0:1.1.12-8.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1867.json"},{"CVE":"CVE-2013-0281","severity":"low","public_date":"2013-02-14T00:00:00Z","advisories":["RHSA-2013:1635"],"bugzilla":"891922","bugzilla_description":"CVE-2013-0281 pacemaker: remote DoS when CIB management is enabled caused by use of blocking sockets","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pacemaker-0:1.1.10-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0281.json"},{"CVE":"CVE-2012-3386","severity":"low","public_date":"2012-07-09T00:00:00Z","advisories":["RHSA-2013:0526","RHSA-2014:1243"],"bugzilla":"838286","bugzilla_description":"CVE-2012-3386 automake: locally exploitable \"make distcheck\" bug","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-732","affected_packages":["automake-0:1.9.6-3.el5","automake-0:1.11.1-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3386.json"},{"CVE":"CVE-2011-1920","severity":"low","public_date":"2011-05-14T00:00:00Z","advisories":[],"bugzilla":"705100","bugzilla_description":"CVE-2011-1920 mk-files: insecure temporary file usage","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1920.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/malaga-suomi-voikko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/malaga-suomi-voikko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/malaga-suomi-voikko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/malaga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/malaga_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/malaga_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mallard-rng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mallard-rng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mallard-rng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-db-cron_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-db-cron_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-db-cron_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-db_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-db_security_api_results.json
new file mode 100644
index 0000000..cf83706
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-db_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-1336","severity":"moderate","public_date":"2015-12-13T00:00:00Z","advisories":[],"bugzilla":"1292432","bugzilla_description":"CVE-2015-1336 man-db: TOCTOU bug when processing catman pages","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1336.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-pages-overrides_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-pages-overrides_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-pages-overrides_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-pages_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-pages_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/man-pages_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-backup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-backup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-backup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-c-config_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-c-config_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-c-config_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-c-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-c-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-c-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-c_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-c_security_api_results.json
new file mode 100644
index 0000000..ef351e5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-c_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13249","severity":"moderate","public_date":"2020-05-20T00:00:00Z","advisories":["RHSA-2020:4174"],"bugzilla":"1839827","bugzilla_description":"CVE-2020-13249 mariadb-connector-c: Improper validation of content in a OK packet received from server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13249.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-2752","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1835849","bugzilla_description":"CVE-2020-2752 mysql: C API unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-2922","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2020:3732","RHSA-2020:4174","RHSA-2019:3708","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1835850","bugzilla_description":"CVE-2020-2922 mysql: C API unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","rh-mysql80-mysql-0:8.0.21-1.el7","mariadb-1:5.5.65-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2574","severity":"low","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1798587","bugzilla_description":"CVE-2020-2574 mysql: C API unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2574.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-3081","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1602424","bugzilla_description":"CVE-2018-3081 mysql: Client programs unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3081.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-odbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-odbc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-connector-odbc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-embedded-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-embedded-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-embedded-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-embedded_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-embedded_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-embedded_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-errmsg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-errmsg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-errmsg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-gssapi-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-gssapi-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-gssapi-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-java-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-java-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-java-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-oqgraph-engine_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-oqgraph-engine_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-oqgraph-engine_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-server-galera_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-server-galera_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-server-galera_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-server-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-server-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-server-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb_security_api_results.json
new file mode 100644
index 0000000..d6f617a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mariadb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14760","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890735","bugzilla_description":"CVE-2020-14760 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14760.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-14672","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890737","bugzilla_description":"CVE-2020-14672 mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14765","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890738","bugzilla_description":"CVE-2020-14765 mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14765.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14769","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890739","bugzilla_description":"CVE-2020-14769 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14769.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14771","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890740","bugzilla_description":"CVE-2020-14771 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14771.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-14773","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890742","bugzilla_description":"CVE-2020-14773 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14773.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14776","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890743","bugzilla_description":"CVE-2020-14776 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14776.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14777","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890744","bugzilla_description":"CVE-2020-14777 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14777.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14785","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890745","bugzilla_description":"CVE-2020-14785 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14785.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14786","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890746","bugzilla_description":"CVE-2020-14786 mysql: Server: PS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14786.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14789","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890747","bugzilla_description":"CVE-2020-14789 mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14789.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14790","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890748","bugzilla_description":"CVE-2020-14790 mysql: Server: PS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14790.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14791","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890749","bugzilla_description":"CVE-2020-14791 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14791.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-14793","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890750","bugzilla_description":"CVE-2020-14793 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14793.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14794","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890751","bugzilla_description":"CVE-2020-14794 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14794.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14799","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890752","bugzilla_description":"CVE-2020-14799 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14799.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14800","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890753","bugzilla_description":"CVE-2020-14800 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14800.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14804","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890754","bugzilla_description":"CVE-2020-14804 mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14804.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14809","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890755","bugzilla_description":"CVE-2020-14809 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14809.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14812","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890756","bugzilla_description":"CVE-2020-14812 mysql: Server: Locking unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14812.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14814","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890757","bugzilla_description":"CVE-2020-14814 mysql: Server: DML unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14814.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14821","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890758","bugzilla_description":"CVE-2020-14821 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14821.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14827","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890759","bugzilla_description":"CVE-2020-14827 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14827.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-14828","severity":"important","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890760","bugzilla_description":"CVE-2020-14828 mysql: Server: DML unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14828.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14829","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890761","bugzilla_description":"CVE-2020-14829 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14829.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14830","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890762","bugzilla_description":"CVE-2020-14830 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14830.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14836","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890763","bugzilla_description":"CVE-2020-14836 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14836.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14837","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890764","bugzilla_description":"CVE-2020-14837 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14837.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14838","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890765","bugzilla_description":"CVE-2020-14838 mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14838.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-14839","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890766","bugzilla_description":"CVE-2020-14839 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14839.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14844","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890767","bugzilla_description":"CVE-2020-14844 mysql: Server: PS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14844.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14845","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890768","bugzilla_description":"CVE-2020-14845 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14846","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890769","bugzilla_description":"CVE-2020-14846 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14846.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14848","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890770","bugzilla_description":"CVE-2020-14848 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14848.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14852","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890771","bugzilla_description":"CVE-2020-14852 mysql: Server: Charsets unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14852.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14860","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890772","bugzilla_description":"CVE-2020-14860 mysql: Server: Security: Roles unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14860.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-14861","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890773","bugzilla_description":"CVE-2020-14861 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14861.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14866","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890774","bugzilla_description":"CVE-2020-14866 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14866.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14867","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890775","bugzilla_description":"CVE-2020-14867 mysql: Server: DDL unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14867.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-14868","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890776","bugzilla_description":"CVE-2020-14868 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14868.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14869","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890777","bugzilla_description":"CVE-2020-14869 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14869.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14870","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890778","bugzilla_description":"CVE-2020-14870 mysql: Server: X Plugin unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14870.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14873","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890779","bugzilla_description":"CVE-2020-14873 mysql: Server: Logging unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14873.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-14878","severity":"important","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890780","bugzilla_description":"CVE-2020-14878 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14878.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2020-14888","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890781","bugzilla_description":"CVE-2020-14888 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14888.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14891","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890782","bugzilla_description":"CVE-2020-14891 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14891.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14893","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890783","bugzilla_description":"CVE-2020-14893 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14893.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14775","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890784","bugzilla_description":"CVE-2020-14775 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14775.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14539","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865945","bugzilla_description":"CVE-2020-14539 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14539.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14540","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865947","bugzilla_description":"CVE-2020-14540 mysql: Server: DML unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14540.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14547","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865948","bugzilla_description":"CVE-2020-14547 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14547.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14550","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2019:1258","RHSA-2019:2327","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865949","bugzilla_description":"CVE-2020-14550 mysql: C API unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mariadb-1:5.5.64-1.el7","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14550.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-14553","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865950","bugzilla_description":"CVE-2020-14553 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-14559","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865951","bugzilla_description":"CVE-2020-14559 mysql: Server: Information Schema unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-14567","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865952","bugzilla_description":"CVE-2020-14567 mysql: Server: Replication unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14567.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14568","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865953","bugzilla_description":"CVE-2020-14568 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14568.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14575","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865954","bugzilla_description":"CVE-2020-14575 mysql: Server: DML unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14575.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14576","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865955","bugzilla_description":"CVE-2020-14576 mysql: Server: UDF unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14576.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865956","bugzilla_description":"CVE-2020-14586 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14591","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":[],"bugzilla":"1865957","bugzilla_description":"CVE-2020-14591 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14591.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14597","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865958","bugzilla_description":"CVE-2020-14597 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14614","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865959","bugzilla_description":"CVE-2020-14614 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14614.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14619","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865960","bugzilla_description":"CVE-2020-14619 mysql: Server: Parser unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14620","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865961","bugzilla_description":"CVE-2020-14620 mysql: Server: DML unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14620.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14623","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865962","bugzilla_description":"CVE-2020-14623 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14623.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14624","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865963","bugzilla_description":"CVE-2020-14624 mysql: Server: JSON unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14624.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14631","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865964","bugzilla_description":"CVE-2020-14631 mysql: Server: Security: Audit unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14631.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14632","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865965","bugzilla_description":"CVE-2020-14632 mysql: Server: Options unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14632.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14633","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865966","bugzilla_description":"CVE-2020-14633 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14633.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-14634","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865967","bugzilla_description":"CVE-2020-14634 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14634.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-14641","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865968","bugzilla_description":"CVE-2020-14641 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14641.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.9"},{"CVE":"CVE-2020-14643","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865969","bugzilla_description":"CVE-2020-14643 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14643.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-14654","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865970","bugzilla_description":"CVE-2020-14654 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14654.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14656","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865971","bugzilla_description":"CVE-2020-14656 mysql: Server: Locking unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14663","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865972","bugzilla_description":"CVE-2020-14663 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14678","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865973","bugzilla_description":"CVE-2020-14678 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14678.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14680","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865974","bugzilla_description":"CVE-2020-14680 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14680.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14697","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865975","bugzilla_description":"CVE-2020-14697 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14697.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14702","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865976","bugzilla_description":"CVE-2020-14702 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14702.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14725","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865977","bugzilla_description":"CVE-2020-14725 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14725.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14651","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865982","bugzilla_description":"CVE-2020-14651 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14651.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-13249","severity":"moderate","public_date":"2020-05-20T00:00:00Z","advisories":["RHSA-2020:4174"],"bugzilla":"1839827","bugzilla_description":"CVE-2020-13249 mariadb-connector-c: Improper validation of content in a OK packet received from server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13249.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-2759","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830048","bugzilla_description":"CVE-2020-2759 mysql: Server: Replication unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2759.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2761","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830049","bugzilla_description":"CVE-2020-2761 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2761.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2762","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830050","bugzilla_description":"CVE-2020-2762 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2763","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830051","bugzilla_description":"CVE-2020-2763 mysql: Server: Replication unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2763.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2765","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830052","bugzilla_description":"CVE-2020-2765 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2765.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2770","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830053","bugzilla_description":"CVE-2020-2770 mysql: Server: Logging unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2770.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2774","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830054","bugzilla_description":"CVE-2020-2774 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2774.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2779","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830055","bugzilla_description":"CVE-2020-2779 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2780","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830056","bugzilla_description":"CVE-2020-2780 mysql: Server: DML unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2790","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1830057","bugzilla_description":"CVE-2020-2790 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2804","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830058","bugzilla_description":"CVE-2020-2804 mysql: Server: Memcached unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-2812","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830059","bugzilla_description":"CVE-2020-2812 mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2814","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830060","bugzilla_description":"CVE-2020-2814 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2853","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830061","bugzilla_description":"CVE-2020-2853 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2853.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2892","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830062","bugzilla_description":"CVE-2020-2892 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2892.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2893","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830064","bugzilla_description":"CVE-2020-2893 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2895","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830066","bugzilla_description":"CVE-2020-2895 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2895.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2896","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830067","bugzilla_description":"CVE-2020-2896 mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2896.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2897","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830068","bugzilla_description":"CVE-2020-2897 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2898","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830069","bugzilla_description":"CVE-2020-2898 mysql: Server: Charsets unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2898.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2901","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830070","bugzilla_description":"CVE-2020-2901 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2901.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2903","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830071","bugzilla_description":"CVE-2020-2903 mysql: Server: Connection Handling unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2903.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2904","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830072","bugzilla_description":"CVE-2020-2904 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2904.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2921","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830073","bugzilla_description":"CVE-2020-2921 mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2921.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-2923","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830074","bugzilla_description":"CVE-2020-2923 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2924","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830075","bugzilla_description":"CVE-2020-2924 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2924.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2925","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830076","bugzilla_description":"CVE-2020-2925 mysql: Server: PS unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2926","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830077","bugzilla_description":"CVE-2020-2926 mysql: Server: Group Replication GCS unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2926.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-2928","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830078","bugzilla_description":"CVE-2020-2928 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2930","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830079","bugzilla_description":"CVE-2020-2930 mysql: Server: Parser unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2930.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-2806","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1830081","bugzilla_description":"CVE-2020-2806 mysql: Server: Compiling unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2806.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-2760","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830082","bugzilla_description":"CVE-2020-2760 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2760.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-2752","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1835849","bugzilla_description":"CVE-2020-2752 mysql: C API unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-2922","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2020:3732","RHSA-2020:4174","RHSA-2019:3708","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1835850","bugzilla_description":"CVE-2020-2922 mysql: C API unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","rh-mysql80-mysql-0:8.0.21-1.el7","mariadb-1:5.5.65-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2570","severity":"low","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1798559","bugzilla_description":"CVE-2020-2570 mysql: C API unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2570.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-2573","severity":"low","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1798576","bugzilla_description":"CVE-2020-2573 mysql: C API unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2573.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-2574","severity":"low","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1798587","bugzilla_description":"CVE-2020-2574 mysql: C API unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2574.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-7221","severity":"moderate","public_date":"2020-02-04T00:00:00Z","advisories":[],"bugzilla":"1802786","bugzilla_description":"CVE-2020-7221 mariadb: mysql_install_db allows privilege escalation due to unsafe chown and chmod operations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7221.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19346","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:0694","RHSA-2020:0617","RHSA-2020:0681","RHSA-2020:0802"],"bugzilla":"1793289","bugzilla_description":"CVE-2019-19346 openshift/mariadb-apb: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift4/apb-base:v4.2.21-202002240343","openshift4/mariadb-apb:v4.3.5-202003020549","openshift3/mariadb-apb:v3.11.188-4","openshift4/apb-base:v4.1.37-202003021622"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19346.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-2572","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1796879","bugzilla_description":"CVE-2020-2572 mysql: Server: Audit Plugin unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2572.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-2577","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796880","bugzilla_description":"CVE-2020-2577 mysql: InnoDB unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2579","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796881","bugzilla_description":"CVE-2020-2579 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2579.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2580","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796882","bugzilla_description":"CVE-2020-2580 mysql: Server: DDL unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2580.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2584","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796883","bugzilla_description":"CVE-2020-2584 mysql: Server: Options unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2584.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-2588","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796884","bugzilla_description":"CVE-2020-2588 mysql: Server: DML unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2589","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796885","bugzilla_description":"CVE-2020-2589 mysql: InnoDB unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2589.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2660","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796886","bugzilla_description":"CVE-2020-2660 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2660.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2679","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796887","bugzilla_description":"CVE-2020-2679 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2679.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2686","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796888","bugzilla_description":"CVE-2020-2686 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2686.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2694","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796889","bugzilla_description":"CVE-2020-2694 mysql: Server: Information Schema unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2694.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-2627","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796905","bugzilla_description":"CVE-2020-2627 mysql: Server: Parser unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2910","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764674","bugzilla_description":"CVE-2019-2910 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2910.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-2911","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764675","bugzilla_description":"CVE-2019-2911 mysql: Information Schema unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2911.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2019-2914","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764676","bugzilla_description":"CVE-2019-2914 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2914.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2922","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764677","bugzilla_description":"CVE-2019-2922 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2923","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764678","bugzilla_description":"CVE-2019-2923 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2924","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764679","bugzilla_description":"CVE-2019-2924 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2924.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2938","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764680","bugzilla_description":"CVE-2019-2938 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2938.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2946","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764681","bugzilla_description":"CVE-2019-2946 mysql: Server: PS unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2946.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2948","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764682","bugzilla_description":"CVE-2019-2948 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2948.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2950","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764683","bugzilla_description":"CVE-2019-2950 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2950.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2957","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764684","bugzilla_description":"CVE-2019-2957 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2957.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2960","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764685","bugzilla_description":"CVE-2019-2960 mysql: Server: Replication unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2960.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2963","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764686","bugzilla_description":"CVE-2019-2963 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2963.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2966","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764687","bugzilla_description":"CVE-2019-2966 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2966.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2967","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764688","bugzilla_description":"CVE-2019-2967 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2967.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2968","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764689","bugzilla_description":"CVE-2019-2968 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2968.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2969","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764690","bugzilla_description":"CVE-2019-2969 mysql: Client programs unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2969.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2019-2974","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764691","bugzilla_description":"CVE-2019-2974 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2974.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2982","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764692","bugzilla_description":"CVE-2019-2982 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2982.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2991","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764693","bugzilla_description":"CVE-2019-2991 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2991.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2993","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764694","bugzilla_description":"CVE-2019-2993 mysql: Server: C API unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2997","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764695","bugzilla_description":"CVE-2019-2997 mysql: Server: DDL unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2997.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2998","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764696","bugzilla_description":"CVE-2019-2998 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2998.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-3003","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764697","bugzilla_description":"CVE-2019-3003 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3003.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-3004","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764698","bugzilla_description":"CVE-2019-3004 mysql: Server: Parser unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3009","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764699","bugzilla_description":"CVE-2019-3009 mysql: Server: Connection unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3009.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-3011","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764700","bugzilla_description":"CVE-2019-3011 mysql: Server: C API unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3011.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3018","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764701","bugzilla_description":"CVE-2019-3018 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3018.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2730","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1731995","bugzilla_description":"CVE-2019-2730 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2730.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2019-2731","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1731996","bugzilla_description":"CVE-2019-2731 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2731.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-2737","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1731997","bugzilla_description":"CVE-2019-2737 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2738","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1731998","bugzilla_description":"CVE-2019-2738 mysql: Server: Compiling unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2739","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1731999","bugzilla_description":"CVE-2019-2739 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2739.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-2740","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1732000","bugzilla_description":"CVE-2019-2740 mysql: Server: XML unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2741","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732001","bugzilla_description":"CVE-2019-2741 mysql: Server: Audit Log unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2741.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2743","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732002","bugzilla_description":"CVE-2019-2743 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2743.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2746","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732003","bugzilla_description":"CVE-2019-2746 mysql: Server: Data Dictionary unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2746.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2747","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732004","bugzilla_description":"CVE-2019-2747 mysql: Server: GIS unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2747.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2752","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732005","bugzilla_description":"CVE-2019-2752 mysql: Server: Options unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2755","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732006","bugzilla_description":"CVE-2019-2755 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2755.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2757","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732007","bugzilla_description":"CVE-2019-2757 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2757.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2758","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1732008","bugzilla_description":"CVE-2019-2758 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2758.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2774","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732009","bugzilla_description":"CVE-2019-2774 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2774.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2778","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732010","bugzilla_description":"CVE-2019-2778 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-2780","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732011","bugzilla_description":"CVE-2019-2780 mysql: Server: Components / Services unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2784","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732012","bugzilla_description":"CVE-2019-2784 mysql: Server: DML unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2785","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732013","bugzilla_description":"CVE-2019-2785 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2789","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732015","bugzilla_description":"CVE-2019-2789 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2789.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2019-2791","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732016","bugzilla_description":"CVE-2019-2791 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2791.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-2795","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732017","bugzilla_description":"CVE-2019-2795 mysql: Server: Charsets unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2796","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732018","bugzilla_description":"CVE-2019-2796 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2797","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732019","bugzilla_description":"CVE-2019-2797 mysql: Client programs unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2797.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2019-2798","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732020","bugzilla_description":"CVE-2019-2798 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2800","severity":"important","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732021","bugzilla_description":"CVE-2019-2800 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-2801","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732022","bugzilla_description":"CVE-2019-2801 mysql: Server: FTS unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2801.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2802","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732023","bugzilla_description":"CVE-2019-2802 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2803","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732024","bugzilla_description":"CVE-2019-2803 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2803.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2805","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1732025","bugzilla_description":"CVE-2019-2805 mysql: Server: Parser unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2808","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732026","bugzilla_description":"CVE-2019-2808 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2810","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732027","bugzilla_description":"CVE-2019-2810 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2811","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732028","bugzilla_description":"CVE-2019-2811 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2812","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732029","bugzilla_description":"CVE-2019-2812 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2814","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732030","bugzilla_description":"CVE-2019-2814 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.2"},{"CVE":"CVE-2019-2815","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732031","bugzilla_description":"CVE-2019-2815 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2819","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732032","bugzilla_description":"CVE-2019-2819 mysql: Server: Security: Audit unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2822","severity":"important","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732033","bugzilla_description":"CVE-2019-2822 mysql: Shell: Admin / InnoDB Cluster unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2826","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732034","bugzilla_description":"CVE-2019-2826 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2826.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2830","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732035","bugzilla_description":"CVE-2019-2830 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2830.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2834","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732036","bugzilla_description":"CVE-2019-2834 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2834.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2879","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732037","bugzilla_description":"CVE-2019-2879 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2879.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3123","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":[],"bugzilla":"1702956","bugzilla_description":"CVE-2018-3123 mysql: Server: libmysqld unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3123.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2566","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":[],"bugzilla":"1702957","bugzilla_description":"CVE-2019-2566 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2566.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2580","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702958","bugzilla_description":"CVE-2019-2580 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2580.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2581","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702959","bugzilla_description":"CVE-2019-2581 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2581.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2584","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702960","bugzilla_description":"CVE-2019-2584 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2584.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2585","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702961","bugzilla_description":"CVE-2019-2585 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2585.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2587","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702962","bugzilla_description":"CVE-2019-2587 mysql: Server: Partition unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2587.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2589","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702963","bugzilla_description":"CVE-2019-2589 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2589.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2592","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702964","bugzilla_description":"CVE-2019-2592 mysql: Server: PS unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2592.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2593","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702965","bugzilla_description":"CVE-2019-2593 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2593.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2596","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702966","bugzilla_description":"CVE-2019-2596 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2596.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2606","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702967","bugzilla_description":"CVE-2019-2606 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2607","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702968","bugzilla_description":"CVE-2019-2607 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2607.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2614","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708","RHSA-2019:2327"],"bugzilla":"1702969","bugzilla_description":"CVE-2019-2614 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2614.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2617","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702970","bugzilla_description":"CVE-2019-2617 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2617.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2620","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702971","bugzilla_description":"CVE-2019-2620 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2620.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2623","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702972","bugzilla_description":"CVE-2019-2623 mysql: Server: Options unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2624","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702973","bugzilla_description":"CVE-2019-2624 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2625","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702974","bugzilla_description":"CVE-2019-2625 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2625.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2626","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702975","bugzilla_description":"CVE-2019-2626 mysql: Server: DDL unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2626.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2627","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708","RHSA-2019:2327"],"bugzilla":"1702976","bugzilla_description":"CVE-2019-2627 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2628","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1702977","bugzilla_description":"CVE-2019-2628 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2628.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2630","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702978","bugzilla_description":"CVE-2019-2630 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2630.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2631","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702979","bugzilla_description":"CVE-2019-2631 mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2631.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2632","severity":"important","public_date":"2019-04-16T00:00:00Z","advisories":[],"bugzilla":"1702980","bugzilla_description":"CVE-2019-2632 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-2635","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702981","bugzilla_description":"CVE-2019-2635 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2636","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702982","bugzilla_description":"CVE-2019-2636 mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2644","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702983","bugzilla_description":"CVE-2019-2644 mysql: Server: DDL unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2644.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2681","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702984","bugzilla_description":"CVE-2019-2681 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2681.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2683","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702985","bugzilla_description":"CVE-2019-2683 mysql: Server: Options unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2683.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2685","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702986","bugzilla_description":"CVE-2019-2685 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2685.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2686","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702987","bugzilla_description":"CVE-2019-2686 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2686.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2687","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702989","bugzilla_description":"CVE-2019-2687 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2687.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2688","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702990","bugzilla_description":"CVE-2019-2688 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2688.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2689","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702991","bugzilla_description":"CVE-2019-2689 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2689.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2691","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702992","bugzilla_description":"CVE-2019-2691 mysql: Server: Security: Roles unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2691.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2693","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702993","bugzilla_description":"CVE-2019-2693 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2693.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2694","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702994","bugzilla_description":"CVE-2019-2694 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2694.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2695","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702995","bugzilla_description":"CVE-2019-2695 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2695.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2634","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702997","bugzilla_description":"CVE-2019-2634 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2634.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-2420","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666738","bugzilla_description":"CVE-2019-2420 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2420.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2434","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666740","bugzilla_description":"CVE-2019-2434 mysql: Server: Parser unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2434.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2436","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666741","bugzilla_description":"CVE-2019-2436 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2455","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2018:2439","RHSA-2019:1258","RHSA-2019:2511"],"bugzilla":"1666742","bugzilla_description":"CVE-2019-2455 mysql: Server: Parser unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.60-1.el7_5","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2455.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2481","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2014:0702"],"bugzilla":"1666743","bugzilla_description":"CVE-2019-2481 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb-1:5.5.37-1.el7_0","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2481.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2482","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666744","bugzilla_description":"CVE-2019-2482 mysql: Server: PS unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2482.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2486","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666745","bugzilla_description":"CVE-2019-2486 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2494","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666746","bugzilla_description":"CVE-2019-2494 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2494.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2495","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666747","bugzilla_description":"CVE-2019-2495 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2495.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2502","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666748","bugzilla_description":"CVE-2019-2502 mysql: InnoDB unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2502.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2503","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:1258","RHSA-2019:2511","RHSA-2019:2327"],"bugzilla":"1666749","bugzilla_description":"CVE-2019-2503 mysql: Server: Connection Handling unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2503.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-2507","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666750","bugzilla_description":"CVE-2019-2507 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2510","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:1258","RHSA-2019:2511","RHSA-2019:3708"],"bugzilla":"1666751","bugzilla_description":"CVE-2019-2510 mysql: InnoDB unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","mariadb:10.3-8010020190902091509.cdc1202b","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2510.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2513","severity":"low","public_date":"2019-01-15T00:00:00Z","advisories":[],"bugzilla":"1666752","bugzilla_description":"CVE-2019-2513 mysql: Shell unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2513.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-2528","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666753","bugzilla_description":"CVE-2019-2528 mysql: Server: Partition unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2528.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2529","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2019:2327"],"bugzilla":"1666755","bugzilla_description":"CVE-2019-2529 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2529.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2530","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666756","bugzilla_description":"CVE-2019-2530 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2530.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2531","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666757","bugzilla_description":"CVE-2019-2531 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2531.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2532","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666758","bugzilla_description":"CVE-2019-2532 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2532.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2533","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666759","bugzilla_description":"CVE-2019-2533 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-2534","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666760","bugzilla_description":"CVE-2019-2534 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2534.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2019-2535","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666761","bugzilla_description":"CVE-2019-2535 mysql: Server: Options unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-2536","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666762","bugzilla_description":"CVE-2019-2536 mysql: Server: Packaging unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2019-2537","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:1258","RHSA-2019:2511","RHSA-2019:3708"],"bugzilla":"1666763","bugzilla_description":"CVE-2019-2537 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","mariadb:10.3-8010020190902091509.cdc1202b","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2537.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2539","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666764","bugzilla_description":"CVE-2019-2539 mysql: Server: Connection unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3276","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640307","bugzilla_description":"CVE-2018-3276 mysql: Server: Memcached unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3200","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640308","bugzilla_description":"CVE-2018-3200 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3200.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3137","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640309","bugzilla_description":"CVE-2018-3137 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3284","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640310","bugzilla_description":"CVE-2018-3284 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3284.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-3195","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640311","bugzilla_description":"CVE-2018-3195 mysql: Server: DDL unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3173","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640312","bugzilla_description":"CVE-2018-3173 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3173.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3212","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640314","bugzilla_description":"CVE-2018-3212 mysql: Server: Information Schema unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3212.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3279","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640315","bugzilla_description":"CVE-2018-3279 mysql: Server: Security: Roles unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3279.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3162","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640316","bugzilla_description":"CVE-2018-3162 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3162.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3247","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640317","bugzilla_description":"CVE-2018-3247 mysql: Server: Merge unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3247.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3156","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640318","bugzilla_description":"CVE-2018-3156 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3156.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3161","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640319","bugzilla_description":"CVE-2018-3161 mysql: Server: Partition unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3278","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640320","bugzilla_description":"CVE-2018-3278 mysql: Server: RBR unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3278.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3174","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640321","bugzilla_description":"CVE-2018-3174 mysql: Init script calling kill with root privileges using pid from pidfile owned by mysql user (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3174.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"1.9"},{"CVE":"CVE-2018-3282","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1640322","bugzilla_description":"CVE-2018-3282 mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3282.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3285","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640323","bugzilla_description":"CVE-2018-3285 mysql: Server: Windows unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3187","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640324","bugzilla_description":"CVE-2018-3187 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3187.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3277","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640325","bugzilla_description":"CVE-2018-3277 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3277.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3144","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640326","bugzilla_description":"CVE-2018-3144 mysql: Server: Security: Audit unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3144.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-3145","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640327","bugzilla_description":"CVE-2018-3145 mysql: Server: Parser unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3145.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3170","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640328","bugzilla_description":"CVE-2018-3170 mysql: Server: DDL unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3170.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3186","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640329","bugzilla_description":"CVE-2018-3186 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3182","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640330","bugzilla_description":"CVE-2018-3182 mysql: Server: DML unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3133","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640331","bugzilla_description":"CVE-2018-3133 mysql: Server: Parser unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3133.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3143","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640332","bugzilla_description":"CVE-2018-3143 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3143.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3283","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640333","bugzilla_description":"CVE-2018-3283 mysql: Server: Logging unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-3171","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640334","bugzilla_description":"CVE-2018-3171 mysql: Server: Partition unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3171.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-3251","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640335","bugzilla_description":"CVE-2018-3251 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3286","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640336","bugzilla_description":"CVE-2018-3286 mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3286.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-3185","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640337","bugzilla_description":"CVE-2018-3185 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3280","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640338","bugzilla_description":"CVE-2018-3280 mysql: Server: JSON unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3280.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3203","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640339","bugzilla_description":"CVE-2018-3203 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3203.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3155","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640340","bugzilla_description":"CVE-2018-3155 mysql: Server: Parser unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-3054","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602354","bugzilla_description":"CVE-2018-3054 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3056","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602355","bugzilla_description":"CVE-2018-3056 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-3058","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1602356","bugzilla_description":"CVE-2018-3058 mysql: MyISAM unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3058.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-3060","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1602357","bugzilla_description":"CVE-2018-3060 mysql: InnoDB unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3061","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602359","bugzilla_description":"CVE-2018-3061 mysql: Server: DML unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3062","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602360","bugzilla_description":"CVE-2018-3062 mysql: Server: Memcached unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3062.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-3063","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2019:2327"],"bugzilla":"1602363","bugzilla_description":"CVE-2018-3063 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3063.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3064","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1602364","bugzilla_description":"CVE-2018-3064 mysql: InnoDB unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-3065","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602365","bugzilla_description":"CVE-2018-3065 mysql: Server: DML unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3065.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3066","severity":"low","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1602366","bugzilla_description":"CVE-2018-3066 mysql: Server: Options unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3066.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-3067","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602368","bugzilla_description":"CVE-2018-3067 mysql: Server: Replication unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3070","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602369","bugzilla_description":"CVE-2018-3070 mysql: Client mysqldump unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3070.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-3071","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602370","bugzilla_description":"CVE-2018-3071 mysql: Audit Log unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3071.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3073","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602371","bugzilla_description":"CVE-2018-3073 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3073.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3074","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602372","bugzilla_description":"CVE-2018-3074 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-3075","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602374","bugzilla_description":"CVE-2018-3075 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3077","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602375","bugzilla_description":"CVE-2018-3077 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3077.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3078","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602376","bugzilla_description":"CVE-2018-3078 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3079","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602377","bugzilla_description":"CVE-2018-3079 mysql: InnoDB unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3079.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3080","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602378","bugzilla_description":"CVE-2018-3080 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3080.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3082","severity":"low","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602379","bugzilla_description":"CVE-2018-3082 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3082.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2018-3084","severity":"low","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602380","bugzilla_description":"CVE-2018-3084 mysql: Shell: Core / Client unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3084.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-3081","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1602424","bugzilla_description":"CVE-2018-3081 mysql: Client programs unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3081.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-2755","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568921","bugzilla_description":"CVE-2018-2755 mysql: Server: Replication unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-2758","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568922","bugzilla_description":"CVE-2018-2758 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2758.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2759","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568923","bugzilla_description":"CVE-2018-2759 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2759.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2761","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568924","bugzilla_description":"CVE-2018-2761 mysql: Client programs unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2761.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-2762","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568925","bugzilla_description":"CVE-2018-2762 mysql: Server: Connection unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-2766","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568926","bugzilla_description":"CVE-2018-2766 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2769","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568927","bugzilla_description":"CVE-2018-2769 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2769.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2771","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568931","bugzilla_description":"CVE-2018-2771 mysql: Server: Locking unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2771.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-2773","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568932","bugzilla_description":"CVE-2018-2773 mysql: pid file can be created in a world-writeable directory (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2773.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2018-2775","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568934","bugzilla_description":"CVE-2018-2775 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2775.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2776","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568936","bugzilla_description":"CVE-2018-2776 mysql: Group Replication GCS unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2777","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568937","bugzilla_description":"CVE-2018-2777 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2777.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2778","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568938","bugzilla_description":"CVE-2018-2778 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2779","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568940","bugzilla_description":"CVE-2018-2779 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2780","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568941","bugzilla_description":"CVE-2018-2780 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2781","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568942","bugzilla_description":"CVE-2018-2781 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2781.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2782","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568943","bugzilla_description":"CVE-2018-2782 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2782.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2784","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568944","bugzilla_description":"CVE-2018-2784 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2786","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568945","bugzilla_description":"CVE-2018-2786 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2787","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568946","bugzilla_description":"CVE-2018-2787 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2787.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2805","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1254"],"bugzilla":"1568948","bugzilla_description":"CVE-2018-2805 mysql: GIS Extension unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2810","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568949","bugzilla_description":"CVE-2018-2810 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2812","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568950","bugzilla_description":"CVE-2018-2812 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2813","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568951","bugzilla_description":"CVE-2018-2813 mysql: Server: DDL unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-2816","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568953","bugzilla_description":"CVE-2018-2816 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2817","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568954","bugzilla_description":"CVE-2018-2817 mysql: Server: DDL unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2818","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568955","bugzilla_description":"CVE-2018-2818 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2819","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568956","bugzilla_description":"CVE-2018-2819 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2839","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568957","bugzilla_description":"CVE-2018-2839 mysql: Server: DML unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2846","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568958","bugzilla_description":"CVE-2018-2846 mysql: Server: Performance Schema unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2767","severity":"low","public_date":"2018-04-08T00:00:00Z","advisories":["RHSA-2018:2439"],"bugzilla":"1564965","bugzilla_description":"CVE-2018-2767 mysql: use of SSL/TLS not enforced in libmysqld (Return of BACKRONYM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2767.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-2696","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1509475","bugzilla_description":"CVE-2018-2696 mysql: sha256_password authentication DoS via long password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2696.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2703","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1534139","bugzilla_description":"CVE-2018-2703 mysql: sha256_password authentication DoS via hash with large rounds value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2703.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2562","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2017:3442","RHSA-2018:0587"],"bugzilla":"1535484","bugzilla_description":"CVE-2018-2562 mysql: Server: Partition unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2562.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-2565","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535486","bugzilla_description":"CVE-2018-2565 mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2565.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2573","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535487","bugzilla_description":"CVE-2018-2573 mysql: Server: GIS unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2573.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2576","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535488","bugzilla_description":"CVE-2018-2576 mysql: Server: DML unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2576.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2583","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535490","bugzilla_description":"CVE-2018-2583 mysql: Stored Procedure unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2583.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-2586","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535491","bugzilla_description":"CVE-2018-2586 mysql: Server: DML unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2586.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2590","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535492","bugzilla_description":"CVE-2018-2590 mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2590.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2591","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2017:3442","RHSA-2018:0587"],"bugzilla":"1535493","bugzilla_description":"CVE-2018-2591 mysql: Server : Partition unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2591.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2600","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535496","bugzilla_description":"CVE-2018-2600 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2600.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2612","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535497","bugzilla_description":"CVE-2018-2612 mysql: InnoDB unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2612.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2622","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535499","bugzilla_description":"CVE-2018-2622 mysql: Server: DDL unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2640","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535500","bugzilla_description":"CVE-2018-2640 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2640.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2645","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535501","bugzilla_description":"CVE-2018-2645 mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.9"},{"CVE":"CVE-2018-2646","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535502","bugzilla_description":"CVE-2018-2646 mysql: Server: DML unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2646.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2647","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535503","bugzilla_description":"CVE-2018-2647 mysql: Server: Replication unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2665","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535504","bugzilla_description":"CVE-2018-2665 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2665.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2667","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535505","bugzilla_description":"CVE-2018-2667 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2667.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2668","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535506","bugzilla_description":"CVE-2018-2668 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2668.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-16231","severity":null,"public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1700392","bugzilla_description":"CVE-2017-16231 pcre: self-recursive call in match() in pcre_exec.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-10155","severity":"important","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503649","bugzilla_description":"CVE-2017-10155 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10165","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503651","bugzilla_description":"CVE-2017-10165 mysql: Server: Replication unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10167","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503653","bugzilla_description":"CVE-2017-10167 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10227","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503654","bugzilla_description":"CVE-2017-10227 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10227.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10268","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503656","bugzilla_description":"CVE-2017-10268 mysql: Server: Replication unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10268.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2017-10276","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503659","bugzilla_description":"CVE-2017-10276 mysql: Server: FTS unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10279","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503663","bugzilla_description":"CVE-2017-10279 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10279.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10283","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503664","bugzilla_description":"CVE-2017-10283 mysql: Server: Performance Schema unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-10284","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503665","bugzilla_description":"CVE-2017-10284 mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10284.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10286","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503669","bugzilla_description":"CVE-2017-10286 mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10286.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-10294","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503671","bugzilla_description":"CVE-2017-10294 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10294.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10296","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503673","bugzilla_description":"CVE-2017-10296 mysql: Server: DML unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10296.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10311","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503674","bugzilla_description":"CVE-2017-10311 mysql: Server: FTS unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10313","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503677","bugzilla_description":"CVE-2017-10313 mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10313.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10314","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503679","bugzilla_description":"CVE-2017-10314 mysql: Server: Memcached unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10314.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10320","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503681","bugzilla_description":"CVE-2017-10320 mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10365","severity":"low","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503682","bugzilla_description":"CVE-2017-10365 mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2017-10378","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503684","bugzilla_description":"CVE-2017-10378 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10378.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10379","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503685","bugzilla_description":"CVE-2017-10379 mysql: Client programs unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10384","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503686","bugzilla_description":"CVE-2017-10384 mysql: Server: DDL unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10384.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-15365","severity":"moderate","public_date":"2017-10-06T00:00:00Z","advisories":["RHSA-2019:1258"],"bugzilla":"1524234","bugzilla_description":"CVE-2017-15365 mariadb: Replication in sql/event_data_objects.cc occurs before ACL checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3529","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472682","bugzilla_description":"CVE-2017-3529 mysql: Server: UDF unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3529.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-3633","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472683","bugzilla_description":"CVE-2017-3633 mysql: Server: Memcached unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3634","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472684","bugzilla_description":"CVE-2017-3634 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3635","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1472685","bugzilla_description":"CVE-2017-3635 mysql: C API unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-3636","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2018:2439","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1472686","bugzilla_description":"CVE-2017-3636 mysql: Client programs unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3636.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-3637","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472687","bugzilla_description":"CVE-2017-3637 mysql: X Plugin unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-3638","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472688","bugzilla_description":"CVE-2017-3638 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3639","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472689","bugzilla_description":"CVE-2017-3639 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3640","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472692","bugzilla_description":"CVE-2017-3640 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3640.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3641","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2018:2439","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1472693","bugzilla_description":"CVE-2017-3641 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3642","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472695","bugzilla_description":"CVE-2017-3642 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3642.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3643","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472697","bugzilla_description":"CVE-2017-3643 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3643.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3644","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472698","bugzilla_description":"CVE-2017-3644 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3644.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3645","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472700","bugzilla_description":"CVE-2017-3645 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3646","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472701","bugzilla_description":"CVE-2017-3646 mysql: X Plugin unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3646.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3647","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472703","bugzilla_description":"CVE-2017-3647 mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3648","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472704","bugzilla_description":"CVE-2017-3648 mysql: Server: Charsets unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3648.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3649","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472705","bugzilla_description":"CVE-2017-3649 mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3649.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3650","severity":"low","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472706","bugzilla_description":"CVE-2017-3650 mysql: C API unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3650.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3651","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2016:2927","RHSA-2018:2439","RHSA-2017:2192","RHSA-2016:2928"],"bugzilla":"1472708","bugzilla_description":"CVE-2017-3651 mysql: Client mysqldump unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb101-mariadb-1:10.1.19-6.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-1:5.5.56-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3651.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3652","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472710","bugzilla_description":"CVE-2017-3652 mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2017-3653","severity":"low","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2018:2439","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1472711","bugzilla_description":"CVE-2017-3653 mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3653.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-11164","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":[],"bugzilla":"1470107","bugzilla_description":"CVE-2017-11164 pcre: OP_KETRMAX feature in the match function in pcre_exec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-3308","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443358","bugzilla_description":"CVE-2017-3308 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3308.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3309","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443359","bugzilla_description":"CVE-2017-3309 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3309.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3329","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443360","bugzilla_description":"CVE-2017-3329 mysql: Server: Thread Pooling unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3329.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3331","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443362","bugzilla_description":"CVE-2017-3331 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3450","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443363","bugzilla_description":"CVE-2017-3450 mysql: Server: Memcached unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3450.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3452","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787"],"bugzilla":"1443364","bugzilla_description":"CVE-2017-3452 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3452.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3453","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443365","bugzilla_description":"CVE-2017-3453 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3453.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3454","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443366","bugzilla_description":"CVE-2017-3454 mysql: Server: InnoDB unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3454.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-3455","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443368","bugzilla_description":"CVE-2017-3455 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3455.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-3456","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443369","bugzilla_description":"CVE-2017-3456 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3456.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3457","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443371","bugzilla_description":"CVE-2017-3457 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3457.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3458","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443372","bugzilla_description":"CVE-2017-3458 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3459","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443374","bugzilla_description":"CVE-2017-3459 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3460","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443375","bugzilla_description":"CVE-2017-3460 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3461","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443376","bugzilla_description":"CVE-2017-3461 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3461.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3462","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443377","bugzilla_description":"CVE-2017-3462 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3462.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3463","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443378","bugzilla_description":"CVE-2017-3463 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3463.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3464","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443379","bugzilla_description":"CVE-2017-3464 mysql: Server: DDL unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3464.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3465","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443380","bugzilla_description":"CVE-2017-3465 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3465.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3467","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443382","bugzilla_description":"CVE-2017-3467 mysql: Server: C API unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3467.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3468","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443385","bugzilla_description":"CVE-2017-3468 mysql: Server: Security: Encryption unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3599","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443386","bugzilla_description":"CVE-2017-3599 mysql: integer underflow in get_56_lenc_string() leading to DoS (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3599.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7244","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437364","bugzilla_description":"CVE-2017-7244 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7245","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437367","bugzilla_description":"CVE-2017-7245 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7246","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437369","bugzilla_description":"CVE-2017-7246 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-3305","severity":"moderate","public_date":"2017-03-17T00:00:00Z","advisories":["RHSA-2017:2787"],"bugzilla":"1431690","bugzilla_description":"CVE-2017-3305 mysql: incorrect enforcement of ssl-mode=REQUIRED in MySQL 5.5 and 5.6","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3305.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-8399","severity":"moderate","public_date":"2017-03-10T00:00:00Z","advisories":[],"bugzilla":"1449629","bugzilla_description":"CVE-2017-8399 pcre2: Stack-based buffer overflow in pcre2_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-5483","severity":"moderate","public_date":"2017-03-09T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2016:2927","RHSA-2017:2192","RHSA-2016:2928","RHSA-2016:2131"],"bugzilla":"1433010","bugzilla_description":"CVE-2017-3600 mariadb, mysql: Incorrect input validation allowing code execution via mysqldump","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el6","rh-mysql56-mysql-0:5.6.37-5.el7","mariadb55-mariadb-0:5.5.53-1.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-1:5.5.56-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5483.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-3600","severity":"moderate","public_date":"2017-03-09T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2016:2927","RHSA-2017:2192","RHSA-2016:2928"],"bugzilla":"1433010","bugzilla_description":"CVE-2017-3600 mariadb, mysql: Incorrect input validation allowing code execution via mysqldump","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb101-mariadb-1:10.1.19-6.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-1:5.5.56-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3600.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-7186","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1434504","bugzilla_description":"CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-6004","severity":"moderate","public_date":"2017-02-14T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1425365","bugzilla_description":"CVE-2017-6004 pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3302","severity":"low","public_date":"2017-01-27T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1422119","bugzilla_description":"CVE-2017-3302 mysql: prepared statement handle use-after-free after disconnect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-8318","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1414335","bugzilla_description":"CVE-2016-8318 mysql: Server: Security: Encryption  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8318.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2016-8327","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1414337","bugzilla_description":"CVE-2016-8327 mysql: Server: Replication  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8327.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3238","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414338","bugzilla_description":"CVE-2017-3238 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3238.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3243","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414340","bugzilla_description":"CVE-2017-3243 mysql: Server: Charsets unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3243.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3244","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414342","bugzilla_description":"CVE-2017-3244 mysql: Server: DML unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3251","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414343","bugzilla_description":"CVE-2017-3251 mysql: Server: Optimizer  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3256","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414345","bugzilla_description":"CVE-2017-3256 mysql: Server: Replication  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3256.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3257","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414350","bugzilla_description":"CVE-2017-3257 mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3258","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414351","bugzilla_description":"CVE-2017-3258 mysql: Server: DDL unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3258.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3273","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1414352","bugzilla_description":"CVE-2017-3273 mysql: Server: DDL  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3273.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3313","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414353","bugzilla_description":"CVE-2017-3313 mysql: Server: MyISAM unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-3317","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414355","bugzilla_description":"CVE-2017-3317 mysql: Logging unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.0"},{"CVE":"CVE-2017-3318","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414357","bugzilla_description":"CVE-2017-3318 mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3318.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2017-3319","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414358","bugzilla_description":"CVE-2017-3319 mysql: Server: X Plugin  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3319.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3320","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414360","bugzilla_description":"CVE-2017-3320 mysql: Server: Security: Encryption  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2017-3312","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414133","bugzilla_description":"CVE-2017-3312 mysql: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 fix (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3312.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-3265","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414423","bugzilla_description":"CVE-2017-3265 mysql: unsafe chmod/chown use in init script (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3265.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-3291","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414429","bugzilla_description":"CVE-2017-3291 mysql: unrestricted mysqld_safe's ledir (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3291.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-3492","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386554","bugzilla_description":"CVE-2016-3492 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3492.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3495","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386555","bugzilla_description":"CVE-2016-3495 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3495.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5507","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2749"],"bugzilla":"1386556","bugzilla_description":"CVE-2016-5507 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.34-2.el6","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5584","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386557","bugzilla_description":"CVE-2016-5584 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5584.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2016-5609","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386559","bugzilla_description":"CVE-2016-5609 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5609.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5612","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:1601"],"bugzilla":"1386561","bugzilla_description":"CVE-2016-5612 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5612.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5617","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2130","RHSA-2017:2192","RHSA-2018:0279","RHSA-2016:2749","RHSA-2018:0574"],"bugzilla":"1386564","bugzilla_description":"CVE-2016-5617 mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.34-2.el6","mariadb-1:5.5.56-2.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-6664","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2130","RHSA-2017:2192","RHSA-2018:0279","RHSA-2016:2749","RHSA-2018:0574"],"bugzilla":"1386564","bugzilla_description":"CVE-2016-5617 mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.34-2.el6","mariadb-1:5.5.56-2.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6664.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-5624","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928"],"bugzilla":"1386566","bugzilla_description":"CVE-2016-5624 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5625","severity":"important","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386567","bugzilla_description":"CVE-2016-5625 mysql: unspecified vulnerability in subcomponent: Server: Packaging (CPU October 2016)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5625.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-5626","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386568","bugzilla_description":"CVE-2016-5626 mysql: unspecified vulnerability in subcomponent: Server: GIS (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5626.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5627","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386570","bugzilla_description":"CVE-2016-5627 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5628","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386571","bugzilla_description":"CVE-2016-5628 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5628.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5629","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386572","bugzilla_description":"CVE-2016-5629 mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5630","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2927","RHSA-2016:1601"],"bugzilla":"1386573","bugzilla_description":"CVE-2016-5630 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5630.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5631","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386574","bugzilla_description":"CVE-2016-5631 mysql: unspecified vulnerability in subcomponent: Server: Memcached (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5631.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5632","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386575","bugzilla_description":"CVE-2016-5632 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5633","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386576","bugzilla_description":"CVE-2016-5633 mysql: unspecified vulnerability in subcomponent: Server: Performance Schema (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5634","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386579","bugzilla_description":"CVE-2016-5634 mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5635","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386580","bugzilla_description":"CVE-2016-5635 mysql: unspecified vulnerability in subcomponent: Server: Security: Audit (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-7440","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386584","bugzilla_description":"CVE-2016-7440 yaSSL: AES key leak via cache-bank timing side channel attack","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7440.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2016-8283","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386585","bugzilla_description":"CVE-2016-8283 mysql: unspecified vulnerability in subcomponent: Server: Types (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-8284","severity":"low","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386587","bugzilla_description":"CVE-2016-8284 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU October 2016)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8284.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"1.8"},{"CVE":"CVE-2016-8286","severity":"low","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386588","bugzilla_description":"CVE-2016-8286 mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8286.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-8287","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386589","bugzilla_description":"CVE-2016-8287 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU October 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8287.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.5"},{"CVE":"CVE-2016-8288","severity":"low","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386590","bugzilla_description":"CVE-2016-8288 mysql: unspecified vulnerability in subcomponent: Server: InnoDB Plugin (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8288.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-8289","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386591","bugzilla_description":"CVE-2016-8289 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8289.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-8290","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386592","bugzilla_description":"CVE-2016-8290 mysql: unspecified vulnerability in subcomponent: Server: Performance Schema (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8290.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2016-6662","severity":"important","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2059","RHSA-2016:2058","RHSA-2016:2130","RHSA-2016:2077","RHSA-2016:2131","RHSA-2017:0184","RHSA-2016:2060","RHSA-2016:2062","RHSA-2016:2061","RHSA-2016:2927","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1375198","bugzilla_description":"CVE-2016-6662 mysql: general_log can write to configuration files, leading to privilege escalation (CPU Oct 2016)","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-732","affected_packages":["mariadb-galera-1:5.5.42-1.2.el7ost","mariadb-galera-0:5.5.42-1.1.el6ost","mariadb55-mariadb-0:5.5.53-1.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","mysql-0:5.1.73-8.el6_8","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mysql56-mysql-0:5.6.34-2.el7","mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","rh-mariadb101-mariadb-1:10.1.19-6.el6","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-galera-1:5.5.42-5.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6662.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2016-5616","severity":"moderate","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2017:0184","RHSA-2016:2749"],"bugzilla":"1378936","bugzilla_description":"CVE-2016-5616 CVE-2016-6663 mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-362","affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","mysql-0:5.1.73-8.el6_8","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6663","severity":"moderate","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2017:0184","RHSA-2016:2749"],"bugzilla":"1378936","bugzilla_description":"CVE-2016-5616 CVE-2016-6663 mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-362","affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","mysql-0:5.1.73-8.el6_8","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6663.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-3424","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358199","bugzilla_description":"CVE-2016-3424 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3424.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-3440","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358200","bugzilla_description":"CVE-2016-3440 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3440.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3452","severity":"low","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1358201","bugzilla_description":"CVE-2016-3452 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3452.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-3459","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1601"],"bugzilla":"1358202","bugzilla_description":"CVE-2016-3459 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-3471","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1358203","bugzilla_description":"CVE-2016-3471 mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:P/I:P/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3471.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2016-3477","severity":"important","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358205","bugzilla_description":"CVE-2016-3477 mysql: unspecified vulnerability in subcomponent: Server: Parser (CPU July 2016)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-3486","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358206","bugzilla_description":"CVE-2016-3486 mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3501","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358207","bugzilla_description":"CVE-2016-3501 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3501.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3518","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358208","bugzilla_description":"CVE-2016-3518 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3521","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358209","bugzilla_description":"CVE-2016-3521 mysql: unspecified vulnerability in subcomponent: Server: Types (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3521.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3588","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358210","bugzilla_description":"CVE-2016-3588 mysql: unspecified vulnerability in subcomponent: Server: InnoDB  (CPU July 2016)","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-3614","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358211","bugzilla_description":"CVE-2016-3614 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3614.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-3615","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358212","bugzilla_description":"CVE-2016-3615 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU July 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-5436","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358213","bugzilla_description":"CVE-2016-5436 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5437","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358214","bugzilla_description":"CVE-2016-5437 mysql: unspecified vulnerability in subcomponent: Server: Log (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5437.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5439","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358216","bugzilla_description":"CVE-2016-5439 mysql: unspecified vulnerability in subcomponent: Server: Privileges (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5439.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5440","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358218","bugzilla_description":"CVE-2016-5440 mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5440.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5441","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358219","bugzilla_description":"CVE-2016-5441 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5441.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5442","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358221","bugzilla_description":"CVE-2016-5442 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption  (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5442.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5443","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358222","bugzilla_description":"CVE-2016-5443 mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5443.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-5444","severity":"low","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1358223","bugzilla_description":"CVE-2016-5444 mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5444.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-0639","severity":"critical","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1329238","bugzilla_description":"CVE-2016-0639 mysql: unspecified vulnerability in subcomponent: Server: Pluggable Authentication (CPU April 2016)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0639.json"},{"CVE":"CVE-2016-0640","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329239","bugzilla_description":"CVE-2016-0640 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0640.json"},{"CVE":"CVE-2016-0641","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329241","bugzilla_description":"CVE-2016-0641 mysql: unspecified vulnerability in subcomponent: Server: MyISAM (CPU April 2016)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0641.json"},{"CVE":"CVE-2016-0642","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1329243","bugzilla_description":"CVE-2016-0642 mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU April 2016)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:P/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0642.json"},{"CVE":"CVE-2016-0643","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329245","bugzilla_description":"CVE-2016-0643 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0643.json"},{"CVE":"CVE-2016-0644","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329247","bugzilla_description":"CVE-2016-0644 mysql: unspecified vulnerability in subcomponent: Server: DDL (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0644.json"},{"CVE":"CVE-2016-0646","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329248","bugzilla_description":"CVE-2016-0646 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0646.json"},{"CVE":"CVE-2016-0647","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329249","bugzilla_description":"CVE-2016-0647 mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0647.json"},{"CVE":"CVE-2016-0648","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329251","bugzilla_description":"CVE-2016-0648 mysql: unspecified vulnerability in subcomponent: Server: PS (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0648.json"},{"CVE":"CVE-2016-0649","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329252","bugzilla_description":"CVE-2016-0649 mysql: unspecified vulnerability in subcomponent: Server: PS (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0649.json"},{"CVE":"CVE-2016-0650","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329253","bugzilla_description":"CVE-2016-0650 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0650.json"},{"CVE":"CVE-2016-0651","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1329254","bugzilla_description":"CVE-2016-0651 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0651.json"},{"CVE":"CVE-2016-0652","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329255","bugzilla_description":"CVE-2016-0652 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0652.json"},{"CVE":"CVE-2016-0653","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329257","bugzilla_description":"CVE-2016-0653 mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0653.json"},{"CVE":"CVE-2016-0654","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329258","bugzilla_description":"CVE-2016-0654 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0654.json"},{"CVE":"CVE-2016-0655","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:0705"],"bugzilla":"1329259","bugzilla_description":"CVE-2016-0655 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0655.json"},{"CVE":"CVE-2016-0656","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329260","bugzilla_description":"CVE-2016-0656 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0656.json"},{"CVE":"CVE-2016-0657","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329261","bugzilla_description":"CVE-2016-0657 mysql: unspecified vulnerability in subcomponent: Server: JSON (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0657.json"},{"CVE":"CVE-2016-0658","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329263","bugzilla_description":"CVE-2016-0658 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0658.json"},{"CVE":"CVE-2016-0659","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329265","bugzilla_description":"CVE-2016-0659 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0659.json"},{"CVE":"CVE-2016-0661","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1329266","bugzilla_description":"CVE-2016-0661 mysql: unspecified vulnerability in subcomponent: Server: Options (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0661.json"},{"CVE":"CVE-2016-0662","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329267","bugzilla_description":"CVE-2016-0662 mysql: unspecified vulnerability in subcomponent: Server: Partition (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0662.json"},{"CVE":"CVE-2016-0663","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329268","bugzilla_description":"CVE-2016-0663 mysql: unspecified vulnerability in subcomponent: Server: Performance Schema (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0663.json"},{"CVE":"CVE-2016-0665","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1329269","bugzilla_description":"CVE-2016-0665 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0665.json"},{"CVE":"CVE-2016-0666","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329270","bugzilla_description":"CVE-2016-0666 mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0666.json"},{"CVE":"CVE-2016-0667","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329271","bugzilla_description":"CVE-2016-0667 mysql: unspecified vulnerability in subcomponent: Server: Locking (CPU April 2016)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0667.json"},{"CVE":"CVE-2016-0668","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:0705"],"bugzilla":"1329273","bugzilla_description":"CVE-2016-0668 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":1.7,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0668.json"},{"CVE":"CVE-2014-9769","severity":"moderate","public_date":"2016-03-23T00:00:00Z","advisories":[],"bugzilla":"1320995","bugzilla_description":"CVE-2014-9769 pcre: incorrect nested table jumps when JIT is used (8.36/6)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9769.json"},{"CVE":"CVE-2016-3191","severity":"important","public_date":"2016-02-09T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1025"],"bugzilla":"1311503","bugzilla_description":"CVE-2016-3191 pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3191.json"},{"CVE":"CVE-2016-1283","severity":"important","public_date":"2016-01-04T00:00:00Z","advisories":["RHSA-2016:1132"],"bugzilla":"1295385","bugzilla_description":"CVE-2016-1283 pcre: heap buffer overflow in handling of duplicate named groups (8.39/14)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1283.json"},{"CVE":"CVE-2016-2047","severity":"moderate","public_date":"2015-11-30T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301874","bugzilla_description":"CVE-2016-2047 mysql: ssl-validate-cert incorrect hostname check","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2047.json"},{"CVE":"CVE-2015-8383","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287614","bugzilla_description":"CVE-2015-8383 pcre: Buffer overflow caused by repeated conditional group (8.38/3)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8383.json"},{"CVE":"CVE-2015-3210","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3210.json"},{"CVE":"CVE-2015-8384","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8384.json"},{"CVE":"CVE-2015-8385","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287629","bugzilla_description":"CVE-2015-8385 pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8385.json"},{"CVE":"CVE-2015-8386","severity":"low","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287636","bugzilla_description":"CVE-2015-8386 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8386.json"},{"CVE":"CVE-2015-8387","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287646","bugzilla_description":"CVE-2015-8387 pcre: Integer overflow in subroutine calls (8.38/8)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8387.json"},{"CVE":"CVE-2015-8389","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287659","bugzilla_description":"CVE-2015-8389 pcre: infinite recursion in JIT compiler when processing certain patterns (8.38/21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8389.json"},{"CVE":"CVE-2015-8390","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287666","bugzilla_description":"CVE-2015-8390 pcre: uninitialized memory read triggered by malformed posix character class (8.38/22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8390.json"},{"CVE":"CVE-2015-8391","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287671","bugzilla_description":"CVE-2015-8391 pcre: inefficient posix character class syntax check (8.38/16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8391.json"},{"CVE":"CVE-2015-8392","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287690","bugzilla_description":"CVE-2015-8392 pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8392.json"},{"CVE":"CVE-2015-8393","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287695","bugzilla_description":"CVE-2015-8393 pcre: pcregrep -q is not always quiet (8.38/28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8393.json"},{"CVE":"CVE-2015-8394","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287702","bugzilla_description":"CVE-2015-8394 pcre: Integer overflow caused by missing check for certain conditions (8.38/31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8394.json"},{"CVE":"CVE-2015-8381","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8381.json"},{"CVE":"CVE-2015-8395","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8395.json"},{"CVE":"CVE-2015-4766","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1630"],"bugzilla":"1274748","bugzilla_description":"CVE-2015-4766 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4766.json"},{"CVE":"CVE-2015-4791","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274749","bugzilla_description":"CVE-2015-4791 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4791.json"},{"CVE":"CVE-2015-4792","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274752","bugzilla_description":"CVE-2015-4792 mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4792.json"},{"CVE":"CVE-2015-4800","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274754","bugzilla_description":"CVE-2015-4800 mysql: unspecified vulnerability related to Server:Optimizer (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4800.json"},{"CVE":"CVE-2015-4802","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274756","bugzilla_description":"CVE-2015-4802 mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4802.json"},{"CVE":"CVE-2015-4807","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274758","bugzilla_description":"CVE-2015-4807 mysql: unspecified vulnerability related to Server:Query Cache (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4807.json"},{"CVE":"CVE-2015-4815","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274759","bugzilla_description":"CVE-2015-4815 mysql: unspecified vulnerability related to Server:DDL (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4815.json"},{"CVE":"CVE-2015-4816","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1481","RHSA-2015:1629","RHSA-2015:1628","RHSA-2016:0534"],"bugzilla":"1274761","bugzilla_description":"CVE-2015-4816 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.45-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.49-1.el6","mysql55-mysql-0:5.5.45-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4816.json"},{"CVE":"CVE-2015-4819","severity":"low","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1481","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628","RHSA-2016:0534"],"bugzilla":"1274764","bugzilla_description":"CVE-2015-4819 mysql: unspecified vulnerability related to Client programs (CPU October 2015)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.45-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.49-1.el6","mysql55-mysql-0:5.5.45-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4819.json"},{"CVE":"CVE-2015-4826","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274766","bugzilla_description":"CVE-2015-4826 mysql: unspecified vulnerability related to Server:Types (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4826.json"},{"CVE":"CVE-2015-4830","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274767","bugzilla_description":"CVE-2015-4830 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4830.json"},{"CVE":"CVE-2015-4833","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1630"],"bugzilla":"1274770","bugzilla_description":"CVE-2015-4833 mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4833.json"},{"CVE":"CVE-2015-4836","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274771","bugzilla_description":"CVE-2015-4836 mysql: unspecified vulnerability related to Server:SP (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4836.json"},{"CVE":"CVE-2015-4858","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274773","bugzilla_description":"CVE-2015-4858 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4858.json"},{"CVE":"CVE-2015-4861","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274776","bugzilla_description":"CVE-2015-4861 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4861.json"},{"CVE":"CVE-2015-4862","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274778","bugzilla_description":"CVE-2015-4862 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4862.json"},{"CVE":"CVE-2015-4864","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1274779","bugzilla_description":"CVE-2015-4864 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4864.json"},{"CVE":"CVE-2015-4866","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1646"],"bugzilla":"1274780","bugzilla_description":"CVE-2015-4866 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4866.json"},{"CVE":"CVE-2015-4870","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274781","bugzilla_description":"CVE-2015-4870 mysql: unspecified vulnerability related to Server:Parser (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4870.json"},{"CVE":"CVE-2015-4879","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1481","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628","RHSA-2016:0534"],"bugzilla":"1274783","bugzilla_description":"CVE-2015-4879 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.45-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.49-1.el6","mysql55-mysql-0:5.5.45-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4879.json"},{"CVE":"CVE-2015-4890","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274785","bugzilla_description":"CVE-2015-4890 mysql: unspecified vulnerability related to Server:Replication (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4890.json"},{"CVE":"CVE-2015-4895","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2015:1630"],"bugzilla":"1274786","bugzilla_description":"CVE-2015-4895 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4895.json"},{"CVE":"CVE-2015-4904","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1630"],"bugzilla":"1274787","bugzilla_description":"CVE-2015-4904 mysql: unspecified vulnerability related to libmysqld (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4904.json"},{"CVE":"CVE-2015-4905","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274790","bugzilla_description":"CVE-2015-4905 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4905.json"},{"CVE":"CVE-2015-4910","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274792","bugzilla_description":"CVE-2015-4910 mysql: unspecified vulnerability related to Server:Memcached (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4910.json"},{"CVE":"CVE-2015-4913","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274794","bugzilla_description":"CVE-2015-4913 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4913.json"},{"CVE":"CVE-2015-4730","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1276265","bugzilla_description":"CVE-2015-4730 mysql: unspecified vulnerability related to Server:Types (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4730.json"},{"CVE":"CVE-2015-2582","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244768","bugzilla_description":"CVE-2015-2582 mysql: unspecified vulnerability related to Server:GIS (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2582.json"},{"CVE":"CVE-2015-2611","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244769","bugzilla_description":"CVE-2015-2611 mysql: unspecified vulnerability related to Server:DML (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2611.json"},{"CVE":"CVE-2015-2617","severity":"important","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244770","bugzilla_description":"CVE-2015-2617 mysql: unspecified vulnerability related to Server:Partition (CPU July 2015)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2617.json"},{"CVE":"CVE-2015-2620","severity":"low","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244771","bugzilla_description":"CVE-2015-2620 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU July 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2620.json"},{"CVE":"CVE-2015-2639","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244772","bugzilla_description":"CVE-2015-2639 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2639.json"},{"CVE":"CVE-2015-2641","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244773","bugzilla_description":"CVE-2015-2641 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2641.json"},{"CVE":"CVE-2015-2643","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244774","bugzilla_description":"CVE-2015-2643 mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2643.json"},{"CVE":"CVE-2015-2648","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244775","bugzilla_description":"CVE-2015-2648 mysql: unspecified vulnerability related to Server:DML (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2648.json"},{"CVE":"CVE-2015-2661","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244776","bugzilla_description":"CVE-2015-2661 mysql: unspecified vulnerability related to Client (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2661.json"},{"CVE":"CVE-2015-4737","severity":"low","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244778","bugzilla_description":"CVE-2015-4737 mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU July 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4737.json"},{"CVE":"CVE-2015-4752","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244779","bugzilla_description":"CVE-2015-4752 mysql: unspecified vulnerability related to Server:I_S (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4752.json"},{"CVE":"CVE-2015-4756","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244780","bugzilla_description":"CVE-2015-4756 mysql: unspecified vulnerability related to Server:InnoDB (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4756.json"},{"CVE":"CVE-2015-4757","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244781","bugzilla_description":"CVE-2015-4757 mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4757.json"},{"CVE":"CVE-2015-4761","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244782","bugzilla_description":"CVE-2015-4761 mysql: unspecified vulnerability related to Server:Memcached (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4761.json"},{"CVE":"CVE-2015-4767","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244784","bugzilla_description":"CVE-2015-4767 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4767.json"},{"CVE":"CVE-2015-4769","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244785","bugzilla_description":"CVE-2015-4769 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4769.json"},{"CVE":"CVE-2015-4771","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244786","bugzilla_description":"CVE-2015-4771 mysql: unspecified vulnerability related to Server:RBR (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4771.json"},{"CVE":"CVE-2015-4772","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244787","bugzilla_description":"CVE-2015-4772 mysql: unspecified vulnerability related to Server:Partition (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4772.json"},{"CVE":"CVE-2015-5073","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5073.json"},{"CVE":"CVE-2015-8388","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8388.json"},{"CVE":"CVE-2015-3217","severity":"moderate","public_date":"2015-06-03T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1228283","bugzilla_description":"CVE-2015-3217 pcre: stack overflow caused by mishandled group empty match (8.38/11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3217.json"},{"CVE":"CVE-2015-8380","severity":null,"public_date":"2015-06-01T00:00:00Z","advisories":[],"bugzilla":"1285413","bugzilla_description":"CVE-2015-8380 pcre: OOB write when pcre_exec() is called with ovecsize of 1 (8.38/10)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8380.json"},{"CVE":"CVE-2015-3152","severity":"moderate","public_date":"2015-04-29T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665"],"bugzilla":"1217506","bugzilla_description":"CVE-2015-3152 mysql: use of SSL/TLS can not be enforced in mysql client library (oCERT-2015-003, BACKRONYM)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3152.json"},{"CVE":"CVE-2015-0405","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212753","bugzilla_description":"CVE-2015-0405 mysql: unspecified vulnerability related to Server:XA (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0405.json"},{"CVE":"CVE-2015-0438","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212755","bugzilla_description":"CVE-2015-0438 mysql: unspecified vulnerability related to Server:Partition (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0438.json"},{"CVE":"CVE-2015-0498","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212757","bugzilla_description":"CVE-2015-0498 mysql: unspecified vulnerability related to Server:Replication (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0498.json"},{"CVE":"CVE-2015-0501","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212758","bugzilla_description":"CVE-2015-0501 mysql: unspecified vulnerability related to Server:Compiling (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0501.json"},{"CVE":"CVE-2015-0506","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212759","bugzilla_description":"CVE-2015-0506 mysql: unspecified vulnerability related to Server:InnoDB (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0506.json"},{"CVE":"CVE-2015-0511","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212760","bugzilla_description":"CVE-2015-0511 mysql: unspecified vulnerability related to Server:SP (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0511.json"},{"CVE":"CVE-2015-2568","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212763","bugzilla_description":"CVE-2015-2568 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2568.json"},{"CVE":"CVE-2015-0423","severity":"low","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212765","bugzilla_description":"CVE-2015-0423 mysql: unspecified vulnerability related to Server:Optimizer (CPU April 2015)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0423.json"},{"CVE":"CVE-2015-0439","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212767","bugzilla_description":"CVE-2015-0439 mysql: unspecified vulnerability related to Server:InnoDB (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0439.json"},{"CVE":"CVE-2015-0499","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212768","bugzilla_description":"CVE-2015-0499 mysql: unspecified vulnerability related to Server:Federated (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0499.json"},{"CVE":"CVE-2015-0503","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212769","bugzilla_description":"CVE-2015-0503 mysql: unspecified vulnerability related to Server:Partition (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0503.json"},{"CVE":"CVE-2015-0507","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212770","bugzilla_description":"CVE-2015-0507 mysql: unspecified vulnerability related to Server:Memcached (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0507.json"},{"CVE":"CVE-2015-2566","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212771","bugzilla_description":"CVE-2015-2566 mysql: unspecified vulnerability related to Server:DML (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2566.json"},{"CVE":"CVE-2015-2571","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212772","bugzilla_description":"CVE-2015-2571 mysql: unspecified vulnerability related to Server:Optimizer (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2571.json"},{"CVE":"CVE-2015-2576","severity":"low","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212774","bugzilla_description":"CVE-2015-2576 mysql-utilities: unspecified vulnerability related to Installation (CPU April 2015)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2576.json"},{"CVE":"CVE-2015-0433","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212776","bugzilla_description":"CVE-2015-0433 mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0433.json"},{"CVE":"CVE-2015-0441","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212777","bugzilla_description":"CVE-2015-0441 mysql: unspecified vulnerability related to Server:Security:Encryption (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0441.json"},{"CVE":"CVE-2015-0500","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212779","bugzilla_description":"CVE-2015-0500 mysql: unspecified vulnerability related to Server:Information Schema (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0500.json"},{"CVE":"CVE-2015-0505","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212780","bugzilla_description":"CVE-2015-0505 mysql: unspecified vulnerability related to Server:DDL (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0505.json"},{"CVE":"CVE-2015-0508","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212781","bugzilla_description":"CVE-2015-0508 mysql: unspecified vulnerability related to Server:InnoDB (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0508.json"},{"CVE":"CVE-2015-2567","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212782","bugzilla_description":"CVE-2015-2567 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2567.json"},{"CVE":"CVE-2015-2573","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212783","bugzilla_description":"CVE-2015-2573 mysql: unspecified vulnerability related to Server:DDL (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2573.json"},{"CVE":"CVE-2015-2305","severity":"moderate","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1191049","bugzilla_description":"CVE-2015-2305 regex: heap overflow in regcomp() on 32-bit architectures","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2305.json"},{"CVE":"CVE-2014-6568","severity":"low","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184552","bugzilla_description":"CVE-2014-6568 mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU Jan 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6568.json"},{"CVE":"CVE-2015-0374","severity":"low","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184553","bugzilla_description":"CVE-2015-0374 mysql: unspecified vulnerability related to Server:Security:Privileges:Foreign Key (CPU Jan 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0374.json"},{"CVE":"CVE-2015-0381","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184554","bugzilla_description":"CVE-2015-0381 mysql: unspecified vulnerability related to Server:Replication (CPU Jan 2015)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0381.json"},{"CVE":"CVE-2015-0382","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184555","bugzilla_description":"CVE-2015-0382 mysql: unspecified vulnerability related to Server:Replication (CPU Jan 2015)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0382.json"},{"CVE":"CVE-2015-0385","severity":"low","public_date":"2015-01-21T00:00:00Z","advisories":[],"bugzilla":"1184556","bugzilla_description":"CVE-2015-0385 mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU Jan 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0385.json"},{"CVE":"CVE-2015-0391","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHSA-2015:0117","RHSA-2015:0116","RHSA-2015:1628"],"bugzilla":"1184557","bugzilla_description":"CVE-2015-0391 mysql: unspecified vulnerability related to Server:DDL (CPU Jan 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0391.json"},{"CVE":"CVE-2015-0409","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":[],"bugzilla":"1184559","bugzilla_description":"CVE-2015-0409 mysql: unspecified vulnerability related to Server:Optimizer (CPU Jan 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0409.json"},{"CVE":"CVE-2015-0411","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184560","bugzilla_description":"CVE-2015-0411 mysql: unspecified vulnerability related to Server:Security:Encryption (CPU Jan 2015)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0411.json"},{"CVE":"CVE-2015-0432","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184561","bugzilla_description":"CVE-2015-0432 mysql: unspecified vulnerability related to Server:InnoDB:DDL:Foreign Key (CPU Jan 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0432.json"},{"CVE":"CVE-2015-7744","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301488","bugzilla_description":"CVE-2015-7744 yaSSL, wolfSSL: insufficient hardening of RSA-CRT implementation (Oracle MySQL CPU Jan 2016)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7744.json"},{"CVE":"CVE-2016-0502","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301489","bugzilla_description":"CVE-2016-0502 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0502.json"},{"CVE":"CVE-2016-0503","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301490","bugzilla_description":"CVE-2016-0503 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0503.json"},{"CVE":"CVE-2016-0504","severity":"important","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301491","bugzilla_description":"CVE-2016-0504 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0504.json"},{"CVE":"CVE-2016-0505","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301492","bugzilla_description":"CVE-2016-0505 mysql: unspecified vulnerability in subcomponent: Server: Options (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0505.json"},{"CVE":"CVE-2016-0546","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301493","bugzilla_description":"CVE-2016-0546 mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0546.json"},{"CVE":"CVE-2016-0594","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301494","bugzilla_description":"CVE-2016-0594 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0594.json"},{"CVE":"CVE-2016-0595","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301495","bugzilla_description":"CVE-2016-0595 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0595.json"},{"CVE":"CVE-2016-0596","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301496","bugzilla_description":"CVE-2016-0596 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0596.json"},{"CVE":"CVE-2016-0597","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301497","bugzilla_description":"CVE-2016-0597 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0597.json"},{"CVE":"CVE-2016-0598","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301498","bugzilla_description":"CVE-2016-0598 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0598.json"},{"CVE":"CVE-2016-0599","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301500","bugzilla_description":"CVE-2016-0599 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0599.json"},{"CVE":"CVE-2016-0600","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301501","bugzilla_description":"CVE-2016-0600 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0600.json"},{"CVE":"CVE-2016-0601","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301502","bugzilla_description":"CVE-2016-0601 mysql: unspecified vulnerability in subcomponent: Server: Partition (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0601.json"},{"CVE":"CVE-2016-0605","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301503","bugzilla_description":"CVE-2016-0605 mysql: unspecified vulnerability in subcomponent: Server: General (CPU January 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0605.json"},{"CVE":"CVE-2016-0606","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301504","bugzilla_description":"CVE-2016-0606 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0606.json"},{"CVE":"CVE-2016-0607","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301505","bugzilla_description":"CVE-2016-0607 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU January 2016)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0607.json"},{"CVE":"CVE-2016-0608","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301506","bugzilla_description":"CVE-2016-0608 mysql: unspecified vulnerability in subcomponent: Server: UDF (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0608.json"},{"CVE":"CVE-2016-0609","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301507","bugzilla_description":"CVE-2016-0609 mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU January 2016)","cvss_score":1.7,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0609.json"},{"CVE":"CVE-2016-0610","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:0705"],"bugzilla":"1301508","bugzilla_description":"CVE-2016-0610 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0610.json"},{"CVE":"CVE-2016-0611","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301509","bugzilla_description":"CVE-2016-0611 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0611.json"},{"CVE":"CVE-2016-0616","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301510","bugzilla_description":"CVE-2016-0616 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0616.json"},{"CVE":"CVE-2014-4287","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153461","bugzilla_description":"CVE-2014-4287 mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4287.json"},{"CVE":"CVE-2014-6463","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153462","bugzilla_description":"CVE-2014-6463 mysql: unspecified vulnerability related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML (CPU October 2014)","cvss_score":3.3,"cvss_scoring_vector":"AV:N/AC:L/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6463.json"},{"CVE":"CVE-2014-6464","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153463","bugzilla_description":"CVE-2014-6464 mysql: unspecified vulnerability related to SERVER:INNODB DML FOREIGN KEYS (CPU October 2014)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6464.json"},{"CVE":"CVE-2014-6469","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153464","bugzilla_description":"CVE-2014-6469 mysql: unspecified vulnerability related to SERVER:OPTIMIZER (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6469.json"},{"CVE":"CVE-2014-6474","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153465","bugzilla_description":"CVE-2014-6474 mysql: unspecified vulnerability related to SERVER:MEMCACHED (CPU October 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6474.json"},{"CVE":"CVE-2014-6478","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153466","bugzilla_description":"CVE-2014-6478 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6478.json"},{"CVE":"CVE-2014-6484","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153467","bugzilla_description":"CVE-2014-6484 mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6484.json"},{"CVE":"CVE-2014-6489","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153482","bugzilla_description":"CVE-2014-6489 mysql: unspecified vulnerability related to SERVER:SP (CPU October 2014)","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6489.json"},{"CVE":"CVE-2014-6491","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153483","bugzilla_description":"CVE-2014-6491 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6491.json"},{"CVE":"CVE-2014-6494","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153484","bugzilla_description":"CVE-2014-6494 mysql: unspecified vulnerability related to CLIENT:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6494.json"},{"CVE":"CVE-2014-6495","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153485","bugzilla_description":"CVE-2014-6495 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6495.json"},{"CVE":"CVE-2014-6496","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153486","bugzilla_description":"CVE-2014-6496 mysql: unspecified vulnerability related to CLIENT:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6496.json"},{"CVE":"CVE-2014-6500","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153487","bugzilla_description":"CVE-2014-6500 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6500.json"},{"CVE":"CVE-2014-6505","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153489","bugzilla_description":"CVE-2014-6505 mysql: unspecified vulnerability related to SERVER:MEMORY STORAGE ENGINE (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6505.json"},{"CVE":"CVE-2014-6507","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153490","bugzilla_description":"CVE-2014-6507 mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6507.json"},{"CVE":"CVE-2014-6520","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153491","bugzilla_description":"CVE-2014-6520 mysql: unspecified vulnerability related to SERVER:DDL (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6520.json"},{"CVE":"CVE-2014-6530","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153493","bugzilla_description":"CVE-2014-6530 mysql: unspecified vulnerability related to CLIENT:MYSQLDUMP (CPU October 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6530.json"},{"CVE":"CVE-2014-6551","severity":"low","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153494","bugzilla_description":"CVE-2014-6551 mysql: unspecified vulnerability related to CLIENT:MYSQLADMIN (CPU October 2014)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6551.json"},{"CVE":"CVE-2014-6555","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153495","bugzilla_description":"CVE-2014-6555 mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6555.json"},{"CVE":"CVE-2014-6559","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153496","bugzilla_description":"CVE-2014-6559 mysql: unspecified vulnerability related to C API SSL CERTIFICATE HANDLING (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6559.json"},{"CVE":"CVE-2014-6564","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153497","bugzilla_description":"CVE-2014-6564 mysql: unspecified vulnerability related to SERVER:INNODB FULLTEXT SEARCH DML (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6564.json"},{"CVE":"CVE-2015-2328","severity":"moderate","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1285399","bugzilla_description":"CVE-2015-2328 pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2328.json"},{"CVE":"CVE-2014-4274","severity":"moderate","public_date":"2014-07-31T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1126271","bugzilla_description":"CVE-2014-4274 mysql: unspecified MyISAM temporary file issue fixed in 5.5.39 and 5.6.20","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4274.json"},{"CVE":"CVE-2015-2327","severity":"moderate","public_date":"2014-07-11T00:00:00Z","advisories":["RHBA-2015:2142","RHSA-2016:2750"],"bugzilla":"1285408","bugzilla_description":"CVE-2015-2327 pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2327.json"},{"CVE":"CVE-2014-0384","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088133","bugzilla_description":"CVE-2014-0384 mysql: unspecified DoS related to XML (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0384.json"},{"CVE":"CVE-2014-2419","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088134","bugzilla_description":"CVE-2014-2419 mysql: unspecified DoS related to Partition (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2419.json"},{"CVE":"CVE-2014-2430","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088143","bugzilla_description":"CVE-2014-2430 mysql: unspecified DoS related to Performance Schema (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2430.json"},{"CVE":"CVE-2014-2431","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088146","bugzilla_description":"CVE-2014-2431 mysql: unspecified DoS related to Options (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2431.json"},{"CVE":"CVE-2014-2432","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088179","bugzilla_description":"CVE-2014-2432 mysql: unspecified DoS related to Federated (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2432.json"},{"CVE":"CVE-2014-2434","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088184","bugzilla_description":"CVE-2014-2434 mysql: unspecified DoS related to DML (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2434.json"},{"CVE":"CVE-2014-2435","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088186","bugzilla_description":"CVE-2014-2435 mysql: unspecified DoS related to InnoDB (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2435.json"},{"CVE":"CVE-2014-2436","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088190","bugzilla_description":"CVE-2014-2436 mysql: unspecified vulnerability related to RBR (CPU April 2014)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2436.json"},{"CVE":"CVE-2014-2438","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088191","bugzilla_description":"CVE-2014-2438 mysql: unspecified DoS related to Replication (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2438.json"},{"CVE":"CVE-2014-2440","severity":null,"public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088197","bugzilla_description":"CVE-2014-2440 mysql: unspecified vulnerability related to Client (CPU April 2014)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2440.json"},{"CVE":"CVE-2014-2442","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088206","bugzilla_description":"CVE-2014-2442 mysql: unspecified DoS related to MyIASM (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2442.json"},{"CVE":"CVE-2014-2444","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088208","bugzilla_description":"CVE-2014-2444 mysql: unspecified vulnerability related to InnoDB (CPU April 2014)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2444.json"},{"CVE":"CVE-2014-2450","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088212","bugzilla_description":"CVE-2014-2450 mysql: unspecified DoS related to Optimizer (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2450.json"},{"CVE":"CVE-2014-2451","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088217","bugzilla_description":"CVE-2014-2451 mysql: unspecified DoS related to Privileges (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2451.json"},{"CVE":"CVE-2014-2484","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1120330","bugzilla_description":"CVE-2014-2484 mysql: unspecified vulnerability related to SRFTS (CPU July 2014)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2484.json"},{"CVE":"CVE-2014-4214","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1120334","bugzilla_description":"CVE-2014-4214 mysql: unspecified vulnerability related to SRSP (CPU July 2014)","cvss_score":3.3,"cvss_scoring_vector":"AV:N/AC:L/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4214.json"},{"CVE":"CVE-2014-4233","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1120337","bugzilla_description":"CVE-2014-4233 mysql: unspecified vulnerability related to SRREP (CPU July 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4233.json"},{"CVE":"CVE-2014-4238","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1120338","bugzilla_description":"CVE-2014-4238 mysql: unspecified vulnerability related to SROPTZR (CPU July 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4238.json"},{"CVE":"CVE-2014-4240","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1120340","bugzilla_description":"CVE-2014-4240 mysql: unspecified vulnerability related to SRREP (CPU July 2014)","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4240.json"},{"CVE":"CVE-2014-2494","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120382","bugzilla_description":"CVE-2014-2494 mysql: unspecified vulnerability related to ENARC (CPU July 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2494.json"},{"CVE":"CVE-2014-4207","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120383","bugzilla_description":"CVE-2014-4207 mysql: unspecified vulnerability related to SROPTZR (CPU July 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4207.json"},{"CVE":"CVE-2014-4243","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1859"],"bugzilla":"1120385","bugzilla_description":"CVE-2014-4243 mysql: unspecified vulnerability related to ENFED (CPU July 2014)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4243.json"},{"CVE":"CVE-2014-4258","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120387","bugzilla_description":"CVE-2014-4258 mysql: unspecified vulnerability related to SRINFOSC (CPU July 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4258.json"},{"CVE":"CVE-2014-4260","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120388","bugzilla_description":"CVE-2014-4260 mysql: unspecified vulnerability related to SRCHAR (CPU July 2014)","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4260.json"},{"CVE":"CVE-2014-0001","severity":"moderate","public_date":"2014-01-30T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1054592","bugzilla_description":"CVE-2014-0001 mysql: command-line tool buffer overflow via long server version string","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0001.json"},{"CVE":"CVE-2013-5860","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053361","bugzilla_description":"CVE-2013-5860 mysql: unspecified DoS related to GIS subcomponent (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5860.json"},{"CVE":"CVE-2013-5881","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053364","bugzilla_description":"CVE-2013-5881 mysql: unspecified DoS related to InnoDB subcomponent (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5881.json"},{"CVE":"CVE-2013-5882","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053366","bugzilla_description":"CVE-2013-5882 mysql: unspecified DoS related to Stored Procedure subcomponent (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5882.json"},{"CVE":"CVE-2013-5891","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0173"],"bugzilla":"1053371","bugzilla_description":"CVE-2013-5891 mysql: unspecified vulnerability related to Partition DoS (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5891.json"},{"CVE":"CVE-2013-5894","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053372","bugzilla_description":"CVE-2013-5894 mysql: unspecified vulnerability related to InnoDB DoS (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5894.json"},{"CVE":"CVE-2013-5908","severity":"low","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053373","bugzilla_description":"CVE-2013-5908 mysql: unspecified vulnerability related to Error Handling DoS (CPU Jan 2014)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5908.json"},{"CVE":"CVE-2014-0386","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053375","bugzilla_description":"CVE-2014-0386 mysql: unspecified vulnerability related to Optimizer DoS (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0386.json"},{"CVE":"CVE-2014-0393","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053377","bugzilla_description":"CVE-2014-0393 mysql: unspecified vulnerability related to InnoDB affecting integrity (CPU Jan 2014)","cvss_score":3.3,"cvss_scoring_vector":"AV:N/AC:L/Au:M/C:N/I:P/A:N","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0393.json"},{"CVE":"CVE-2014-0401","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053378","bugzilla_description":"CVE-2014-0401 mysql: unspecified DoS vulnerability (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0401.json"},{"CVE":"CVE-2014-0402","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053380","bugzilla_description":"CVE-2014-0402 mysql: unspecified vulnerability related to Locking DoS (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0402.json"},{"CVE":"CVE-2014-0412","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053381","bugzilla_description":"CVE-2014-0412 mysql: unspecified vulnerability related to InnoDB DoS (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0412.json"},{"CVE":"CVE-2014-0420","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0173"],"bugzilla":"1053383","bugzilla_description":"CVE-2014-0420 mysql: unspecified vulnerability related to Replication DoS (CPU Jan 2014)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0420.json"},{"CVE":"CVE-2014-0427","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053385","bugzilla_description":"CVE-2014-0427 mysql: unspecified vulnerability related to FTS DoS (CPU Jan 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0427.json"},{"CVE":"CVE-2014-0430","severity":"low","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053386","bugzilla_description":"CVE-2014-0430 mysql: unspecified vulnerability related to Performance Schema DoS (CPU Jan 2014)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0430.json"},{"CVE":"CVE-2014-0431","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053387","bugzilla_description":"CVE-2014-0431 mysql: unspecified vulnerability related to InnoDB DoS (CPU Jan 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0431.json"},{"CVE":"CVE-2014-0433","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053388","bugzilla_description":"CVE-2014-0433 mysql: unspecified vulnerability related to Thread Pooling DoS (CPU Jan 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0433.json"},{"CVE":"CVE-2014-0437","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053390","bugzilla_description":"CVE-2014-0437 mysql: unspecified vulnerability related to Optimizer DoS (CPU Jan 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0437.json"},{"CVE":"CVE-2013-3839","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2014:0189","RHBA-2013:1647","RHSA-2014:0186","RHSA-2014:0173"],"bugzilla":"1019978","bugzilla_description":"CVE-2013-3839 mysql: unspecified DoS related to Optimizer (CPU October 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.71-1.el6","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3839.json"},{"CVE":"CVE-2013-5767","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1019984","bugzilla_description":"CVE-2013-5767 mysql: unspecified DoS related to Optimizer (CPU October 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5767.json"},{"CVE":"CVE-2013-5770","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1019988","bugzilla_description":"CVE-2013-5770 mysql: unspecified DoS related to Locking (CPU October 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5770.json"},{"CVE":"CVE-2013-5786","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1019991","bugzilla_description":"CVE-2013-5786 mysql: unspecified DoS related to InnoDB (CPU October 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5786.json"},{"CVE":"CVE-2013-5793","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1019993","bugzilla_description":"CVE-2013-5793 mysql: unspecified DoS related to InnoDB (CPU October 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5793.json"},{"CVE":"CVE-2013-5807","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0173"],"bugzilla":"1019997","bugzilla_description":"CVE-2013-5807 mysql: unspecified flaw related to Replication (CPU October 2013)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5807.json"},{"CVE":"CVE-2012-5615","severity":"low","public_date":"2012-12-01T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"882608","bugzilla_description":"CVE-2012-5615 mysql: Remote Preauth User Enumeration flaw","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-209","affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5615.json"},{"CVE":"CVE-2005-0004","severity":"moderate","public_date":"2005-01-19T00:00:00Z","advisories":[],"bugzilla":"1386138","bugzilla_description":"CVE-2005-0004 mysql: CVE-2005-0004 mysqlaccess creates/overwrite files on the system","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0004.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H","cvss3_score":"7.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/marisa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/marisa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/marisa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/matchbox-window-manager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/matchbox-window-manager_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/matchbox-window-manager_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-antrun-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-antrun-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-antrun-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-antrun-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-antrun-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-antrun-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-archiver-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-archiver-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-archiver-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-archiver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-archiver_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-archiver_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-manager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-manager_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-manager_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-resolver-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-resolver-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-resolver-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-resolver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-resolver_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-resolver_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-transfer-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-transfer-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-transfer-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-transfer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-transfer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact-transfer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-artifact_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-assembly-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-assembly-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-assembly-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-assembly-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-assembly-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-assembly-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-cal10n-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-cal10n-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-cal10n-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-clean-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-clean-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-clean-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-clean-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-clean-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-clean-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-common-artifact-filters-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-common-artifact-filters-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-common-artifact-filters-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-common-artifact-filters_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-common-artifact-filters_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-common-artifact-filters_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-compiler-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-compiler-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-compiler-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-compiler-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-compiler-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-compiler-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-analyzer-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-analyzer-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-analyzer-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-analyzer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-analyzer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-analyzer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-tree-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-tree-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-tree-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-tree_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-tree_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-dependency-tree_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-logging-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-logging-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-logging-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-apt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-apt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-apt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-confluence_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-confluence_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-confluence_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-docbook-simple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-docbook-simple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-docbook-simple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-fml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-fml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-fml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-latex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-latex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-latex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-rtf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-rtf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-rtf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-twiki_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-twiki_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-twiki_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-xdoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-xdoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-xdoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-xhtml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-xhtml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-module-xhtml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-sink-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-sink-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-sink-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-sitetools-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-sitetools-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-sitetools-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-sitetools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-sitetools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-sitetools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-test-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-test-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-test-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-tests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-tests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia-tests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-doxia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-rules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-rules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer-rules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-enforcer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-failsafe-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-failsafe-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-failsafe-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-file-management-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-file-management-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-file-management-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-file-management_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-file-management_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-file-management_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-filtering-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-filtering-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-filtering-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-filtering_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-filtering_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-filtering_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-hawtjni-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-hawtjni-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-hawtjni-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-install-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-install-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-install-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-install-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-install-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-install-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-invoker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-jar-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-jar-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-jar-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-jar-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-jar-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-jar-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-local_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-local_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-local_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-model_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-model_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-model_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-monitor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-monitor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-monitor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-openjdk11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-openjdk11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-openjdk11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-openjdk8_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-openjdk8_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-openjdk8_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-annotations_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-annotations_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-annotations_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-build-helper-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-build-helper-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-build-helper-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-build-helper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-build-helper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-build-helper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-bundle-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-bundle-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-bundle-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-bundle_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-bundle_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-bundle_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-descriptor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-descriptor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-descriptor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-registry_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-registry_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-registry_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing-harness_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing-harness_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing-harness_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-testing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-annotations_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-annotations_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-annotations_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-ant_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-ant_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-ant_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-beanshell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-beanshell_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-beanshell_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-generators_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-generators_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-generators_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-java_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-java_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-java_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-javadocs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-javadocs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-javadocs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-model_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-model_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools-model_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugin-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugins-pom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugins-pom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-plugins-pom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-profile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-profile_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-profile_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-project_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-project_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-project_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-remote-resources-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-remote-resources-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-remote-resources-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-remote-resources-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-remote-resources-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-remote-resources-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-api-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-api-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-api-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-impl-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-impl-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-impl-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-impl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-impl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-reporting-impl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-connector-basic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-connector-basic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-connector-basic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-impl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-impl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-impl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-spi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-spi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-spi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-test-util_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-test-util_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-test-util_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-classpath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-classpath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-classpath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-file_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-file_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-file_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-http_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-http_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-http_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-wagon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-wagon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-transport-wagon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-util_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-util_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver-util_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resolver_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resources-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resources-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resources-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resources-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resources-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-resources-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-ant_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-ant_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-ant_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-beanshell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-beanshell_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-beanshell_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-interpreter-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-interpreter-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-interpreter-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-interpreter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-interpreter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script-interpreter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-script_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-settings_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-settings_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-settings_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shade-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shade-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shade-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shade-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shade-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shade-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-incremental-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-incremental-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-incremental-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-incremental_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-incremental_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-incremental_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-io-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-io-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-io-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-io_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-io_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-io_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-utils-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-utils-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-utils-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-shared_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-source-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-source-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-source-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-source-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-source-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-source-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-provider-junit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-provider-junit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-provider-junit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-provider-testng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-provider-testng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-provider-testng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-report-parser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-report-parser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-report-parser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-report-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-report-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire-report-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-surefire_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-test-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-test-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-test-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-toolchain_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-toolchain_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-toolchain_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-verifier-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-verifier-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-verifier-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-verifier_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-verifier_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-verifier_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-file_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-file_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-file_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-ftp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-ftp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-ftp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-http-lightweight_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-http-lightweight_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-http-lightweight_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-http-shared_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-http-shared_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-http-shared_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-http_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-http_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-http_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-provider-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-provider-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-provider-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-providers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-providers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon-providers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven-wagon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven2-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven2-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven2-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven_security_api_results.json
new file mode 100644
index 0000000..c4c62be
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/maven_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10721","severity":"moderate","public_date":"2020-10-20T17:51:00Z","advisories":[],"bugzilla":"1827201","bugzilla_description":"CVE-2020-10721 fabric8-maven-plugin: insecure way to construct Yaml Object leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10721.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-15250","severity":"low","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1887810","bugzilla_description":"CVE-2020-15250 junit4: TemporaryFolder is shared between all users across system which could result in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15250.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2020-24750","severity":"important","public_date":"2020-09-18T00:00:00Z","advisories":["RHSA-2020:4173"],"bugzilla":"1882310","bugzilla_description":"CVE-2020-24750 jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-24616","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872707","bugzilla_description":"CVE-2020-24616 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24616.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14195","severity":"important","public_date":"2020-06-14T00:00:00Z","advisories":["RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848958","bugzilla_description":"CVE-2020-14195 jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14195.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14060","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848960","bugzilla_description":"CVE-2020-14060 jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14060.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14062","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848962","bugzilla_description":"CVE-2020-14062 jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14062.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14061","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848966","bugzilla_description":"CVE-2020-14061 jackson-databind: serialization in weblogic/oracle-aqjms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14061.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9488","severity":"low","public_date":"2020-04-25T00:00:00Z","advisories":["RHSA-2020:3817","RHSA-2020:2391","RHSA-2020:3779","RHSA-2020:3626"],"bugzilla":"1831139","bugzilla_description":"CVE-2020-9488 log4j: improper validation of certificate with host mismatch in SMTP appender","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9488.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-10683","severity":"moderate","public_date":"2020-04-15T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3585","RHSA-2020:3461","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:3637"],"bugzilla":"1694235","bugzilla_description":"CVE-2020-10683 dom4j: XML External Entity vulnerability in default SAX parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10683.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2020-11620","severity":"important","public_date":"2020-04-07T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:3192"],"bugzilla":"1826798","bugzilla_description":"CVE-2020-11620 jackson-databind: Serialization gadgets in commons-jelly:commons-jelly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11620.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11619","severity":"important","public_date":"2020-04-06T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1826805","bugzilla_description":"CVE-2020-11619 jackson-databind: Serialization gadgets in org.springframework:spring-aop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11113","severity":"important","public_date":"2020-03-28T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3817","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821315","bugzilla_description":"CVE-2020-11113 jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11113.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11112","severity":"important","public_date":"2020-03-25T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821311","bugzilla_description":"CVE-2020-11112 jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11112.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11111","severity":"important","public_date":"2020-03-24T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821304","bugzilla_description":"CVE-2020-11111 jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11111.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10968","severity":"important","public_date":"2020-03-22T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819208","bugzilla_description":"CVE-2020-10968 jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10673","severity":"important","public_date":"2020-03-18T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3585","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815470","bugzilla_description":"CVE-2020-10673 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10672","severity":"important","public_date":"2020-03-15T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815495","bugzilla_description":"CVE-2020-10672 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-1953","severity":"important","public_date":"2020-03-13T00:00:00Z","advisories":["RHSA-2020:2751","RHSA-2020:3133","RHSA-2020:3192"],"bugzilla":"1815212","bugzilla_description":"CVE-2020-1953 apache-commons-configuration: uncontrolled class instantiation when loading YAML files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1953.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2020-10969","severity":"important","public_date":"2020-03-03T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819212","bugzilla_description":"CVE-2020-10969 jackson-databind: Serialization gadgets in javax.swing.JEditorPane","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10969.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8840","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816330","bugzilla_description":"CVE-2020-8840 jackson-databind: Lacks certain xbean-reflect/JNDI blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9546","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816332","bugzilla_description":"CVE-2020-9546 jackson-databind: Serialization gadgets in shaded-hikari-config","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9546.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9547","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816337","bugzilla_description":"CVE-2020-9547 jackson-databind: Serialization gadgets in ibatis-sqlmap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9547.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9548","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816340","bugzilla_description":"CVE-2020-9548 jackson-databind: Serialization gadgets in anteros-core","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9548.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-25649","severity":"important","public_date":"2020-01-09T00:00:00Z","advisories":["RHSA-2020:4312"],"bugzilla":"1887664","bugzilla_description":"CVE-2020-25649 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25649.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20330","severity":"important","public_date":"2020-01-02T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:0939","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:0951","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1793154","bugzilla_description":"CVE-2019-20330 jackson-databind: lacks certain net.sf.ehcache blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20330.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-17571","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2638"],"bugzilla":"1785616","bugzilla_description":"CVE-2019-17571 log4j: deserialization of untrusted data in SocketServer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-18640","severity":"moderate","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:2603"],"bugzilla":"1785376","bugzilla_description":"CVE-2017-18640 snakeyaml: Billion laughs attack via alias feature","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18640.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2019-17531","severity":"moderate","public_date":"2019-10-12T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2019:4192","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1775293","bugzilla_description":"CVE-2019-17531 jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.8.el7","pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17531.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-16942","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758187","bugzilla_description":"CVE-2019-16942 jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16943","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758191","bugzilla_description":"CVE-2019-16943 jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16943.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14893","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758182","bugzilla_description":"CVE-2019-14893 jackson-databind: Serialization gadgets in classes of the xalan package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14892","severity":"moderate","public_date":"2019-09-19T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758171","bugzilla_description":"CVE-2019-14892 jackson-databind: Serialization gadgets in classes of the commons-configuration package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14892.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-17267","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758167","bugzilla_description":"CVE-2019-17267 jackson-databind: Serialization gadgets in classes of the ehcache package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17267.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16335","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0729","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755831","bugzilla_description":"CVE-2019-16335 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16335.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14540","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755849","bugzilla_description":"CVE-2019-14540 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14540.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-12402","severity":"important","public_date":"2019-08-27T00:00:00Z","advisories":[],"bugzilla":"1764640","bugzilla_description":"CVE-2019-12402 apache-commons-compress: Infinite loop in name encoding algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12402.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10086","severity":"important","public_date":"2019-08-15T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2321","RHSA-2020:3587","RHSA-2020:2333","RHSA-2020:2740","RHSA-2020:1454","RHSA-2020:0057","RHSA-2019:4317","RHSA-2020:0194","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:0899","RHSA-2020:0811","RHSA-2020:1308","RHSA-2020:0951","RHBA-2020:0496","RHSA-2020:0805","RHSA-2020:0804","RHSA-2020:2619","RHSA-2020:0806","RHSA-2020:3192"],"bugzilla":"1767483","bugzilla_description":"CVE-2019-10086 apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-java-common-apache-commons-beanutils-0:1.8.3-14.14.el6","rh-maven35-apache-commons-beanutils-0:1.9.3-2.3.el7","rh-java-common-apache-commons-beanutils-0:1.8.3-14.15.el7","apache-commons-beanutils-0:1.8.3-15.el7_7","candlepin-0:2.5.22-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-14439","severity":"moderate","public_date":"2019-07-30T00:00:00Z","advisories":["RHSA-2019:3200","RHSA-2020:0983"],"bugzilla":"1752962","bugzilla_description":"CVE-2019-14439 jackson-databind: Polymorphic typing issue related to logback/JNDI","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14439.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14379","severity":"important","public_date":"2019-07-23T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:2743","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2020:0727","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1737517","bugzilla_description":"CVE-2019-14379 jackson-databind: default typing mishandling leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","rh-maven35-jackson-databind-0:2.7.6-2.7.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-12384","severity":"important","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:1820","RHSA-2019:3200","RHSA-2019:2720","RHSA-2019:4352","RHSA-2019:3297","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1725807","bugzilla_description":"CVE-2019-12384 jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","pki-deps:10.6-8000020190807021343.f8e95b4e","rh-maven35-jackson-databind-0:2.7.6-2.6.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12384.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-12814","severity":"moderate","public_date":"2019-06-04T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2938","RHSA-2019:2937","RHSA-2019:2804","RHSA-2019:2936"],"bugzilla":"1725795","bugzilla_description":"CVE-2019-12814 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-12086","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2020:1454","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3044","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2020:3192","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1713468","bugzilla_description":"CVE-2019-12086 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-19360","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666482","bugzilla_description":"CVE-2018-19360 jackson-databind: improper polymorphic deserialization in axis2-transport-jms class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19360.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19361","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666484","bugzilla_description":"CVE-2018-19361 jackson-databind: improper polymorphic deserialization in openjpa class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19361.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19362","severity":"important","public_date":"2018-11-18T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666489","bugzilla_description":"CVE-2018-19362 jackson-databind: improper polymorphic deserialization in jboss-common-core class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-1000873","severity":"moderate","public_date":"2018-10-24T00:00:00Z","advisories":[],"bugzilla":"1665601","bugzilla_description":"CVE-2018-1000873 jackson-modules-java8: DoS due to an Improper Input Validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000873.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-11771","severity":"moderate","public_date":"2018-08-17T00:00:00Z","advisories":["RHSA-2020:0983"],"bugzilla":"1618573","bugzilla_description":"CVE-2018-11771 apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11771.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-14718","severity":"important","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666415","bugzilla_description":"CVE-2018-14718 jackson-databind: arbitrary code execution in slf4j-ext class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14718.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14719","severity":"important","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1822","RHSA-2019:2804"],"bugzilla":"1666418","bugzilla_description":"CVE-2018-14719 jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14719.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-14720","severity":"moderate","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:4037","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:1140"],"bugzilla":"1666423","bugzilla_description":"CVE-2018-14720 jackson-databind: exfiltration/XXE in some JDK classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-611","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14720.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-14721","severity":"moderate","public_date":"2018-07-27T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2020:2564","RHSA-2019:3892","RHSA-2019:4037","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:1140"],"bugzilla":"1666428","bugzilla_description":"CVE-2018-14721 jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14721.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-1000632","severity":"moderate","public_date":"2018-07-01T00:00:00Z","advisories":["RHSA-2019:0364","RHSA-2019:1159","RHSA-2019:0365","RHSA-2019:1162","RHSA-2020:3192","RHSA-2019:1161","RHSA-2019:1160","RHSA-2019:3172","RHSA-2019:0380"],"bugzilla":"1620529","bugzilla_description":"CVE-2018-1000632 dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-12023","severity":"important","public_date":"2018-06-08T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1671096","bugzilla_description":"CVE-2018-12023 jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-1002200","severity":"important","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2018:1837","RHSA-2018:1836"],"bugzilla":"1584392","bugzilla_description":"CVE-2018-1002200 plexus-archiver: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["rh-maven33-plexus-archiver-0:2.4.2-5.1.el7","rh-maven35-plexus-archiver-0:3.4-4.1.el7","plexus-archiver-0:2.4.2-5.el7_5","rh-maven33-plexus-archiver-0:2.4.2-5.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002200.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-12022","severity":"important","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:1797","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1671097","bugzilla_description":"CVE-2018-12022 jackson-databind: improper polymorphic deserialization of types from Jodd-db library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-11307","severity":"important","public_date":"2018-05-10T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:0782","RHSA-2019:3892","RHSA-2019:3002","RHSA-2019:4037","RHSA-2019:3140","RHSA-2019:1140","RHSA-2019:0877","RHSA-2019:2858","RHSA-2019:1823","RHSA-2019:1108","RHSA-2019:1822","RHSA-2019:1107","RHSA-2019:1106","RHSA-2019:2804"],"bugzilla":"1677341","bugzilla_description":"CVE-2018-11307 jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-maven35-jackson-databind-0:2.7.6-2.5.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11307.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-10237","severity":"moderate","public_date":"2018-04-25T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:3149","RHSA-2020:2562","RHSA-2018:2428","RHSA-2018:2425","RHSA-2018:2743","RHSA-2018:2423","RHSA-2019:2858","RHSA-2018:2643","RHSA-2018:2742","RHSA-2018:2424","RHSA-2018:2741","RHSA-2018:2740","RHSA-2018:2598"],"bugzilla":"1573391","bugzilla_description":"CVE-2018-10237 guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rhvm-appliance-0:4.2-20180828.0.el7","opendaylight-0:8.3.0-3.el7ost","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10237.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-1324","severity":"moderate","public_date":"2018-03-16T00:00:00Z","advisories":[],"bugzilla":"1557542","bugzilla_description":"CVE-2018-1324 apache-commons-compress:  Infinite loop via extra field parser in ZipFile and ZipArchiveInputStream classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7489","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":["RHSA-2018:2938","RHSA-2019:3149","RHSA-2018:1448","RHSA-2018:1449","RHSA-2020:2562","RHSA-2018:1447","RHSA-2018:2939","RHSA-2018:2090","RHSA-2019:2858","RHSA-2018:1786","RHSA-2018:1451","RHSA-2018:2089","RHSA-2018:2088","RHSA-2018:1450"],"bugzilla":"1549276","bugzilla_description":"CVE-2018-7489 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-8088","severity":"important","public_date":"2018-02-22T00:00:00Z","advisories":["RHSA-2018:2419","RHSA-2018:1448","RHSA-2018:1525","RHSA-2018:1449","RHSA-2018:1248","RHSA-2018:1447","RHSA-2018:1249","RHSA-2018:0630","RHSA-2018:2930","RHSA-2018:1323","RHSA-2018:1247","RHSA-2018:0592","RHSA-2018:0627","RHSA-2018:0628","RHSA-2020:2561","RHSA-2018:2669","RHSA-2019:2413","RHSA-2019:3140","RHSA-2018:0629","RHSA-2018:1575","RHSA-2018:1451","RHSA-2018:0582","RHSA-2018:2420","RHSA-2018:1251","RHSA-2018:2143","RHSA-2018:1450"],"bugzilla":"1548909","bugzilla_description":"CVE-2018-8088 slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el7","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el6","rhvm-appliance-0:4.2-20180504.0","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el5","rh-maven35-slf4j-0:1.7.25-1.3.el7","slf4j-0:1.7.4-4.el7_4","eap7-slf4j-0:1.7.22-3.redhat_2.1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6","eap7-slf4j-0:1.7.22-3.redhat_2.1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8088.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-5968","severity":"moderate","public_date":"2018-01-18T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2019:3149","RHSA-2018:1525","RHSA-2018:0478","RHSA-2018:0479","RHSA-2019:2858","RHSA-2018:0481"],"bugzilla":"1538332","bugzilla_description":"CVE-2018-5968 jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rhvm-appliance-0:4.2-20180504.0","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5968.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-17485","severity":"important","public_date":"2017-12-12T00:00:00Z","advisories":["RHSA-2019:1782","RHSA-2019:3149","RHSA-2018:1448","RHSA-2019:3892","RHSA-2019:1797","RHSA-2018:1449","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2018:0116","RHSA-2018:0480","RHSA-2018:2930","RHSA-2019:2858","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1528565","bugzilla_description":"CVE-2017-17485 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","rh-eclipse46-jackson-databind-0:2.6.3-2.6.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-15095","severity":"important","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2927","RHSA-2019:3149","RHSA-2017:3190","RHSA-2018:1448","RHSA-2019:3892","RHSA-2018:1449","RHSA-2018:0577","RHSA-2018:0478","RHSA-2018:1447","RHSA-2018:0479","RHSA-2017:3189","RHSA-2018:0480","RHSA-2019:2858","RHSA-2018:0576","RHSA-2018:0342","RHSA-2018:1451","RHSA-2018:0481","RHSA-2018:1450"],"bugzilla":"1506612","bugzilla_description":"CVE-2017-15095 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","rh-eclipse47-jackson-databind-0:2.7.6-3.3.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","rh-eclipse46-jackson-databind-0:2.6.3-2.4.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-7525","severity":"important","public_date":"2017-07-14T00:00:00Z","advisories":["RHSA-2018:1449","RHSA-2017:3141","RHSA-2017:2477","RHSA-2017:1840","RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2637","RHSA-2017:2638","RHSA-2018:0294","RHSA-2019:3149","RHSA-2017:3456","RHSA-2017:3454","RHSA-2017:3455","RHSA-2017:2547","RHSA-2017:3458","RHSA-2017:2546","RHSA-2017:1835","RHSA-2017:1834","RHSA-2017:1837","RHSA-2017:1836","RHSA-2019:0910","RHSA-2019:2858","RHSA-2017:1839","RHSA-2018:0342","RHSA-2018:1450"],"bugzilla":"1462702","bugzilla_description":"CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["devtoolset-4-jackson-databind-0:2.5.0-2.4.el6","openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-eclipse46-jackson-databind-0:2.6.3-2.3.el7","devtoolset-4-jackson-databind-0:2.5.0-2.4.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.7-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:20171102.0-1","openshift3/ose-logging-elasticsearch5:v3.11.153-2","rh-maven35-jackson-databind-0:2.7.6-2.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7525.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-5661","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443585","bugzilla_description":"CVE-2017-5661 fop: XML external entity processing vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5661.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-6814","severity":"important","public_date":"2017-01-14T00:00:00Z","advisories":["RHSA-2017:0868","RHSA-2017:0272","RHSA-2017:2486","RHSA-2017:2596"],"bugzilla":"1413466","bugzilla_description":"CVE-2016-6814 Apache Groovy: Remote code execution via deserialization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["groovy-0:1.8.9-8.el7_4","rh-maven33-groovy-0:1.8.9-7.19.el6","rh-maven33-groovy-0:1.8.9-7.19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"9.6"},{"CVE":"CVE-2016-3674","severity":"moderate","public_date":"2016-03-15T00:00:00Z","advisories":["RHSA-2016:2823","RHSA-2016:2822"],"bugzilla":"1321789","bugzilla_description":"CVE-2016-3674 XStream: enabled processing of external entities","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3674.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2015-7501","severity":"critical","public_date":"2015-11-06T00:00:00Z","advisories":["RHSA-2016:1773","RHSA-2016:0040","RHSA-2015:2578","RHSA-2015:2534","RHSA-2015:2556","RHSA-2015:2557","RHSA-2015:2579","RHSA-2015:2535","RHSA-2015:2514","RHSA-2015:2536","RHSA-2015:2559","RHSA-2015:2537","RHSA-2015:2538","RHSA-2015:2516","RHSA-2015:2539","RHSA-2015:2517","RHSA-2015:2670","RHSA-2015:2671","RHSA-2020:4274","RHSA-2015:2521","RHSA-2015:2522","RHSA-2015:2500","RHSA-2015:2501","RHSA-2015:2523","RHSA-2015:2502","RHSA-2015:2524","RHSA-2015:2547","RHSA-2015:2548","RHSA-2015:2560","RHSA-2015:2540","RHSA-2015:2541","RHSA-2015:2542","RHSA-2016:0118"],"bugzilla":"1279330","bugzilla_description":"CVE-2015-7501 apache-commons-collections: InvokerTransformer code execution during deserialisation","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502->CWE-284","affected_packages":["jboss-ec2-eap-0:7.5.5-3.Final_redhat_3.ep6.el6","apache-commons-collections-0:3.2.1-22.el7_2","jakarta-commons-collections-0:3.2.1-3.5.el6_7","jenkins-0:1.651.2-1.el6op","rh-maven35-apache-commons-collections4-0:4.0-7.3.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el6","jakarta-commons-collections-0:3.2.1-5.ep5.el4","jakarta-commons-collections-0:3.2.1-5.ep5.el5","jakarta-commons-collections-0:3.2.1-5.ep5.el6","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el7","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el5","jakarta-commons-collections-0:3.2-2jpp.4","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7501.json"},{"CVE":"CVE-2015-3253","severity":"important","public_date":"2015-07-16T00:00:00Z","advisories":["RHSA-2016:0066","RHSA-2016:1376","RHSA-2016:0118","RHSA-2015:2556","RHSA-2015:2557","RHSA-2015:2558","RHSA-2017:2486","RHSA-2017:2596"],"bugzilla":"1243934","bugzilla_description":"CVE-2015-3253 groovy: remote execution of untrusted code in class MethodClosure","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502->CWE-284","affected_packages":["groovy-0:1.8.9-8.el7_4","rh-maven33-groovy-0:1.8.9-7.19.el6","rh-maven33-groovy-0:1.8.9-7.19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"9.6"},{"CVE":"CVE-2014-3577","severity":"important","public_date":"2014-08-18T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2016:1773","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1082","RHSA-2014:1320","RHSA-2014:1166","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1146","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2016:1931","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1834","RHSA-2014:1833","RHSA-2015:1177","RHSA-2014:1836","RHSA-2015:1176","RHSA-2014:1835"],"bugzilla":"1129074","bugzilla_description":"CVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","httpcomponents-client-0:4.2.5-5.el7_0","org.ovirt.engine-root-0:3.5.0-29","jakarta-commons-httpclient-1:3.1-16.el7_0","thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1","jakarta-commons-httpclient-1:3.1-0.9.el6_5","jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2012-6153","severity":"important","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1320","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1098","RHSA-2014:1834","RHSA-2014:1833","RHSA-2014:1836","RHSA-2014:1835"],"bugzilla":"1129916","bugzilla_description":"CVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","devtoolset-2-httpcomponents-client-0:4.2.1-6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","org.ovirt.engine-root-0:3.5.0-29","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6153.json"},{"CVE":"CVE-2013-4002","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0269","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2015:0773","RHSA-2013:1081","RHSA-2013:1060","RHSA-2014:0414","RHSA-2014:1823","RHSA-2014:1822","RHSA-2014:1821","RHSA-2013:1505","RHSA-2013:1447","RHSA-2014:1319","RHSA-2013:1059","RHSA-2014:1818"],"bugzilla":"1019176","bugzilla_description":"CVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP, 8017298)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","xerces-j2-0:2.7.1-12.7.el6_5","xerces-j2-0:2.11.0-17.el7_0","java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4002.json"},{"CVE":"CVE-2017-1000487","severity":"moderate","public_date":"2013-10-09T00:00:00Z","advisories":["RHSA-2018:1322"],"bugzilla":"1532497","bugzilla_description":"CVE-2017-1000487 plexus-utils: Mishandled strings in Commandline class allow for command injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mc_security_api_results.json
new file mode 100644
index 0000000..b5950ef
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13943","severity":"moderate","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1887648","bugzilla_description":"CVE-2020-13943 tomcat: Apache Tomcat HTTP/2 Request mix-up","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13943.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-26160","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1883371","bugzilla_description":"CVE-2020-26160 jwt-go: access restriction bypass vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26160.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-7720","severity":"moderate","public_date":"2020-09-01T00:00:00Z","advisories":[],"bugzilla":"1874606","bugzilla_description":"CVE-2020-7720 nodejs-node-forge: prototype pollution via the util.setPath function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-8237","severity":"moderate","public_date":"2020-08-26T00:00:00Z","advisories":[],"bugzilla":"1881028","bugzilla_description":"CVE-2020-8237 nodejs-json-bigint: Prototype pollution via `__proto__` assignment could result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8237.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8911","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869800","bugzilla_description":"CVE-2020-8911 aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8911.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2020-8912","severity":"low","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869801","bugzilla_description":"CVE-2020-8912 aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8912.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-1710","severity":"important","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3461","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3539","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:3637"],"bugzilla":"1793970","bugzilla_description":"CVE-2020-1710 EAP: field-name is not parsed in accordance to RFC7230","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-74->CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1710.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-13935","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3303","RHSA-2020:4004","RHSA-2020:3382","RHSA-2020:3383","RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306","RHSA-2020:3305"],"bugzilla":"1857024","bugzilla_description":"CVE-2020-13935 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","tomcat-0:7.0.76-15.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el6","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-13934","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306"],"bugzilla":"1857040","bugzilla_description":"CVE-2020-13934 tomcat: OutOfMemoryException caused by HTTP/2 connection leak could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13934.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-8022","severity":"moderate","public_date":"2020-06-29T00:00:00Z","advisories":[],"bugzilla":"1852863","bugzilla_description":"CVE-2020-8022 tomcat: /usr/lib/tmpfiles.d/tomcat.conf is group-writable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8022.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2020-11996","severity":"moderate","public_date":"2020-06-25T00:00:00Z","advisories":[],"bugzilla":"1851420","bugzilla_description":"CVE-2020-11996 tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11996.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9484","severity":"important","public_date":"2020-05-20T00:00:00Z","advisories":["RHSA-2020:3017","RHSA-2020:2530","RHSA-2020:2487","RHSA-2020:2509","RHSA-2020:2483","RHSA-2020:2529","RHSA-2020:2506"],"bugzilla":"1838332","bugzilla_description":"CVE-2020-9484 tomcat: deserialization flaw in session persistence storage leading to RCE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["tomcat-0:7.0.76-12.el7_8","tomcat6-0:6.0.24-115.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9484.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-10931","severity":"important","public_date":"2020-03-24T00:00:00Z","advisories":[],"bugzilla":"1816630","bugzilla_description":"CVE-2020-10931 memcached: mishandled memcpy into a stack-based buffer may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10931.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1935","severity":"low","public_date":"2020-02-24T00:00:00Z","advisories":["RHSA-2020:2367","RHSA-2020:3303","RHSA-2020:1521","RHSA-2020:1520","RHSA-2020:3305"],"bugzilla":"1806835","bugzilla_description":"CVE-2020-1935 tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-17569","severity":"low","public_date":"2020-02-24T00:00:00Z","advisories":["RHSA-2020:1521","RHSA-2020:1520"],"bugzilla":"1806849","bugzilla_description":"CVE-2019-17569 tomcat: Regression in handling of Transfer-Encoding header allows for HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17569.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1938","severity":"important","public_date":"2020-02-20T00:00:00Z","advisories":["RHSA-2020:2840","RHSA-2020:2367","RHSA-2020:2783","RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:0860","RHSA-2020:1520","RHSA-2020:2781","RHSA-2020:2780","RHSA-2020:0855","RHSA-2020:0912","RHSA-2020:1479","RHSA-2020:1478","RHSA-2020:2779"],"bugzilla":"1806398","bugzilla_description":"CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["tomcat-0:7.0.76-11.el7_7","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el7","tomcat6-0:6.0.24-114.el6_10","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el6","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el5","tomcat-0:7.0.76-10.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1938.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2020-8116","severity":"moderate","public_date":"2020-01-28T00:00:00Z","advisories":["RHSA-2020:4272"],"bugzilla":"1868196","bugzilla_description":"CVE-2020-8116 nodejs-dot-prop: prototype pollution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":["nodejs:12-8020020201007080935.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8116.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-17563","severity":"low","public_date":"2019-12-18T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:4004","RHSA-2020:0860","RHSA-2020:1520"],"bugzilla":"1785711","bugzilla_description":"CVE-2019-17563 tomcat: session fixation when using FORM authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":["tomcat-0:7.0.76-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17563.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-12418","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:0860","RHSA-2020:1520"],"bugzilla":"1785699","bugzilla_description":"CVE-2019-12418 tomcat: local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12418.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-15026","severity":"moderate","public_date":"2019-08-20T00:00:00Z","advisories":[],"bugzilla":"1753862","bugzilla_description":"CVE-2019-15026 memcached: stack-based buffer over-read in conn_to_str in memcached.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15026.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-17362","severity":"moderate","public_date":"2019-08-10T00:00:00Z","advisories":[],"bugzilla":"1775212","bugzilla_description":"CVE-2019-17362 libtomcrypt: out-of-bounds read in the der_decode_utf8_string function in der_decode_utf8_string.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-14274","severity":"moderate","public_date":"2019-07-26T00:00:00Z","advisories":[],"bugzilla":"1740464","bugzilla_description":"CVE-2019-14274 mcpp: heap based buffer overflow in function do_msg() in support.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14274.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-10072","severity":"moderate","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3929"],"bugzilla":"1723708","bugzilla_description":"CVE-2019-10072 tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10072.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-0221","severity":"low","public_date":"2019-04-13T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2019:3931","RHSA-2020:0860","RHSA-2019:3929"],"bugzilla":"1713275","bugzilla_description":"CVE-2019-0221 tomcat: XSS in SSI printenv","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0221.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-0232","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:1712","RHSA-2019:3929"],"bugzilla":"1701056","bugzilla_description":"CVE-2019-0232 tomcat: Remote Code Execution on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0232.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-11596","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:1576"],"bugzilla":"1706001","bugzilla_description":"CVE-2019-11596 memcached: null-pointer dereference in \"lru mode\" and \"lru temp_ttl\" causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["memcached-0:1.5.9-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11596.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-0199","severity":"important","public_date":"2019-03-25T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2020:2366","RHSA-2019:3929"],"bugzilla":"1693325","bugzilla_description":"CVE-2019-0199 tomcat: Apache Tomcat HTTP/2 DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0199.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-11784","severity":"moderate","public_date":"2018-10-03T00:00:00Z","advisories":["RHSA-2019:0485","RHSA-2019:0130","RHSA-2019:0131","RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1636512","bugzilla_description":"CVE-2018-11784 tomcat: Open redirect in default servlet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-99","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7_6","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-17540","severity":"low","public_date":"2018-10-02T00:00:00Z","advisories":[],"bugzilla":"1635877","bugzilla_description":"CVE-2018-17540 strongswan: heap buffer overflow using crafted certificates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17540.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2018-16152","severity":"moderate","public_date":"2018-09-24T00:00:00Z","advisories":[],"bugzilla":"1635870","bugzilla_description":"CVE-2018-16152 strongswan: authentication bypass in verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16152.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-16151","severity":"moderate","public_date":"2018-09-24T00:00:00Z","advisories":[],"bugzilla":"1635873","bugzilla_description":"CVE-2018-16151 strongswan: authentication bypass in verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16151.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-8034","severity":"low","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2019:0451","RHSA-2019:0130","RHSA-2019:0131","RHSA-2019:0450","RHSA-2019:2205","RHSA-2019:3892","RHSA-2019:1159","RHSA-2019:1162","RHSA-2019:1529","RHSA-2019:1161","RHSA-2019:1160"],"bugzilla":"1607580","bugzilla_description":"CVE-2018-8034 tomcat: Host name verification missing in WebSocket client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","jbossweb-0:7.5.30-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8034.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-8037","severity":"important","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1607582","bugzilla_description":"CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2018-1336","severity":"important","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2945","RHSA-2018:2921","RHSA-2018:3768","RHSA-2018:2701","RHEA-2018:2189","RHSA-2018:2700","RHEA-2018:2188","RHSA-2018:2939","RHSA-2018:2743","RHSA-2018:2930","RHSA-2018:2742","RHSA-2018:2741","RHSA-2018:2740"],"bugzilla":"1607591","bugzilla_description":"CVE-2018-1336 tomcat: A bug in the UTF-8 decoder can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["jbossweb-0:7.5.29-1.Final_redhat_1.1.ep6.el5","tomcat8-0:8.0.36-33.ep7.el7","tomcat8-0:8.0.36-33.ep7.el6","tomcat-0:7.0.76-8.el7_5","tomcat7-0:7.0.70-29.ep7.el6","tomcat7-0:7.0.70-29.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1336.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-8020","severity":"important","public_date":"2018-07-21T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2018:2469"],"bugzilla":"1581569","bugzilla_description":"CVE-2018-8020 tomcat-native: Mishandled OCSP responses can allow clients to authenticate with revoked certificates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tomcat-native-0:1.2.17-17.redhat_17.ep7.el6","tomcat-native-0:1.2.17-17.redhat_17.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-8019","severity":"moderate","public_date":"2018-07-21T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2018:2469"],"bugzilla":"1583998","bugzilla_description":"CVE-2018-8019 tomcat-native: Mishandled OCSP invalid response","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tomcat-native-0:1.2.17-17.redhat_17.ep7.el6","tomcat-native-0:1.2.17-17.redhat_17.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-12437","severity":null,"public_date":"2018-06-13T00:00:00Z","advisories":[],"bugzilla":"1591904","bugzilla_description":"CVE-2018-12437 libtomcrypt: memory-cache side-channel attack on ECDSA signatures","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12437.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-10811","severity":"moderate","public_date":"2018-05-28T00:00:00Z","advisories":[],"bugzilla":"1585966","bugzilla_description":"CVE-2018-10811 strongswan: Missing initialization of a variable in IKEv2 key derivation allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-5388","severity":"moderate","public_date":"2018-05-22T00:00:00Z","advisories":[],"bugzilla":"1581867","bugzilla_description":"CVE-2018-5388 strongswan: integer underflow leads to buffer overflow and denial of service in stroke_socket.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5388.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-8014","severity":"moderate","public_date":"2018-05-17T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2019:0451","RHSA-2019:0450","RHSA-2019:2205","RHSA-2018:3768","RHSA-2018:2469","RHSA-2019:1529"],"bugzilla":"1579611","bugzilla_description":"CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","tomcat8-0:8.0.36-31.ep7.el7","tomcat7-0:7.0.70-27.ep7.el7","tomcat7-0:7.0.70-27.ep7.el6","tomcat8-0:8.0.36-31.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2018-1067","severity":"moderate","public_date":"2018-04-25T17:51:00Z","advisories":["RHSA-2020:2562","RHSA-2018:1248","RHSA-2018:1249","RHSA-2019:0877","RHSA-2018:2643","RHSA-2018:1247","RHSA-2018:1251"],"bugzilla":"1550671","bugzilla_description":"CVE-2018-1067 undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-113","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:4.2-20180828.0.el7","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-1275","severity":"critical","public_date":"2018-04-09T19:00:00Z","advisories":["RHSA-2018:1320","RHSA-2018:2939"],"bugzilla":"1565307","bugzilla_description":"CVE-2018-1275 spring-framework: Address partial fix for CVE-2018-1270","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1275.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-1270","severity":"critical","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:2939"],"bugzilla":"1564405","bugzilla_description":"CVE-2018-1270 spring-framework: Possible RCE via spring messaging","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1270.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-1272","severity":"low","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:2669","RHSA-2018:1320"],"bugzilla":"1564408","bugzilla_description":"CVE-2018-1272 spring-framework: Multipart content pollution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000115","severity":"moderate","public_date":"2018-03-02T00:00:00Z","advisories":["RHSA-2018:1627","RHSA-2018:2857","RHSA-2018:2331","RHBA-2018:2140","RHSA-2018:1593"],"bugzilla":"1551182","bugzilla_description":"CVE-2018-1000115 memcached: UDP server support allows spoofed traffic amplification DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1305","severity":"moderate","public_date":"2018-02-23T00:00:00Z","advisories":["RHSA-2019:2205","RHSA-2018:0465","RHSA-2018:0466","RHSA-2018:1320","RHSA-2018:2939"],"bugzilla":"1548282","bugzilla_description":"CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["tomcat-0:7.0.76-9.el7","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1305.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-6459","severity":"moderate","public_date":"2018-02-19T00:00:00Z","advisories":[],"bugzilla":"1547510","bugzilla_description":"CVE-2018-6459 strongswan: Insufficient Input Validation in RSASSA-PSS Signature Parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15698","severity":"moderate","public_date":"2018-01-31T00:00:00Z","advisories":["RHSA-2018:0465","RHSA-2018:0466"],"bugzilla":"1540824","bugzilla_description":"CVE-2017-15698 tomcat-native: Mishandling of client certificates can allow for OCSP check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-299","affected_packages":["tomcat-native-0:1.2.8-11.redhat_11.ep7.el6","tomcat-native-0:1.2.8-11.redhat_11.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-15706","severity":"low","public_date":"2018-01-31T00:00:00Z","advisories":[],"bugzilla":"1540828","bugzilla_description":"CVE-2017-15706 tomcat: Incorrect documentation of CGI Servlet search algorithm may lead to misconfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-1304","severity":"moderate","public_date":"2018-01-31T00:00:00Z","advisories":["RHSA-2019:2205","RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1447","RHSA-2018:0465","RHSA-2018:0466","RHSA-2018:1451","RHSA-2018:1320","RHSA-2018:1450","RHSA-2018:2939"],"bugzilla":"1548289","bugzilla_description":"CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["tomcat-0:7.0.76-9.el7","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","jbossweb-0:7.5.28-1.Final_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1199","severity":"important","public_date":"2018-01-29T00:00:00Z","advisories":["RHSA-2018:2405"],"bugzilla":"1540030","bugzilla_description":"CVE-2018-1199 spring-framework: Improper URL path validation allows for bypassing of security checks on static resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1199.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-12617","severity":"important","public_date":"2017-09-21T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2018:0270","RHSA-2018:0271","RHSA-2017:3080","RHSA-2018:0269","RHSA-2018:0465","RHSA-2018:0268","RHSA-2018:0466","RHSA-2018:0275","RHSA-2017:3113","RHSA-2018:2939","RHSA-2017:3114"],"bugzilla":"1494283","bugzilla_description":"CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat6-0:6.0.41-19_patch_04.ep6.el7","tomcat7-0:7.0.54-28_patch_05.ep6.el7","tomcat6-0:6.0.41-19_patch_04.ep6.el6","tomcat7-0:7.0.54-28_patch_05.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","tomcat6-0:6.0.24-111.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12617.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12615","severity":"important","public_date":"2017-09-19T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:3080","RHSA-2018:0465","RHSA-2018:0466","RHSA-2017:3113","RHSA-2017:3114"],"bugzilla":"1493220","bugzilla_description":"CVE-2017-12615 tomcat: Remote Code Execution via JSP Upload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat6-0:6.0.41-19_patch_04.ep6.el7","tomcat7-0:7.0.54-28_patch_05.ep6.el7","tomcat6-0:6.0.41-19_patch_04.ep6.el6","tomcat7-0:7.0.54-28_patch_05.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","tomcat6-0:6.0.24-111.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12616","severity":"moderate","public_date":"2017-09-19T00:00:00Z","advisories":["RHSA-2018:0465","RHSA-2018:0466"],"bugzilla":"1493222","bugzilla_description":"CVE-2017-12616 tomcat: Information Disclosure when using VirtualDirContext","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12616.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-11185","severity":"moderate","public_date":"2017-08-14T00:00:00Z","advisories":[],"bugzilla":"1484008","bugzilla_description":"CVE-2017-11185 strongswan: Insufficient Input Validation in gmp Plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7674","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:1802","RHSA-2017:1801"],"bugzilla":"1480618","bugzilla_description":"CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat-0:7.0.76-3.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7674.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-7675","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":[],"bugzilla":"1480626","bugzilla_description":"CVE-2017-7675 tomcat: Security Constraint Bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7675.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-9951","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1471970","bugzilla_description":"CVE-2017-9951 memcached: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9951.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5664","severity":"important","public_date":"2017-06-06T00:00:00Z","advisories":["RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:3080","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2637","RHSA-2017:2638","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:1809"],"bugzilla":"1459158","bugzilla_description":"CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["tomcat-0:7.0.69-12.el7_3","tomcat8-0:8.0.36-24.ep7.el7","tomcat7-0:7.0.70-22.ep7.el6","tomcat8-0:8.0.36-24.ep7.el6","jbossweb-0:7.5.24-1.Final_redhat_1.1.ep6.el7","tomcat7-0:7.0.70-22.ep7.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el6","tomcat6-0:6.0.24-111.el6_9","tomcat6-0:6.0.41-17_patch_04.ep6.el7","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","tomcat6-0:6.0.41-17_patch_04.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-9022","severity":"moderate","public_date":"2017-05-30T00:00:00Z","advisories":[],"bugzilla":"1457121","bugzilla_description":"CVE-2017-9022 strongswan: Insufficient validation of RSA public keys passed to the gmp plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9023","severity":"moderate","public_date":"2017-05-30T00:00:00Z","advisories":[],"bugzilla":"1457122","bugzilla_description":"CVE-2017-9023 strongswan: Incorrect Handling of CHOICE types in ASN.1 parser and x509 plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7464","severity":"moderate","public_date":"2017-05-11T00:00:00Z","advisories":[],"bugzilla":"1439520","bugzilla_description":"CVE-2017-7464 JBoss: JAXP in EAP 7.0 allows info disclosure via XXE","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7464.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H","cvss3_score":"8.7"},{"CVE":"CVE-2017-2292","severity":"important","public_date":"2017-05-11T00:00:00Z","advisories":[],"bugzilla":"1470086","bugzilla_description":"CVE-2017-2292 mcollective: RCE via YAML deserialization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2292.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-1000127","severity":"moderate","public_date":"2017-04-27T00:00:00Z","advisories":["RHSA-2018:2290"],"bugzilla":"1555064","bugzilla_description":"CVE-2018-1000127 memcached: Integer Overflow in items.c:item_free()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["memcached-0:1.4.39-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000127.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-7465","severity":"important","public_date":"2017-04-11T00:00:00Z","advisories":["RHSA-2020:2563"],"bugzilla":"1439980","bugzilla_description":"CVE-2017-7465 JBoss: JAXP in EAP 7.0 allows RCE via XSL","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7465.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2017-5647","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:3080","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494"],"bugzilla":"1441205","bugzilla_description":"CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat8-0:8.0.36-24.ep7.el7","tomcat7-0:7.0.70-22.ep7.el6","tomcat8-0:8.0.36-24.ep7.el6","tomcat7-0:7.0.70-22.ep7.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el6","tomcat6-0:6.0.24-111.el6_9","tomcat6-0:6.0.41-17_patch_04.ep6.el7","tomcat6-0:6.0.41-17_patch_04.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-5648","severity":"moderate","public_date":"2017-04-10T00:00:00Z","advisories":["RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:1809"],"bugzilla":"1441223","bugzilla_description":"CVE-2017-5648 tomcat: Calls to application listeners did not use the appropriate facade object","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat-0:7.0.69-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5648.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2017-5651","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":[],"bugzilla":"1441226","bugzilla_description":"CVE-2017-5651 tomcat: Incorrect handling of send file processing could result into adding Processort to the cache twice","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5651.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-5650","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":[],"bugzilla":"1441230","bugzilla_description":"CVE-2017-5650 tomcat: Handling of HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5650.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-8747","severity":"moderate","public_date":"2017-03-13T00:00:00Z","advisories":[],"bugzilla":"1432006","bugzilla_description":"CVE-2016-8747 tomcat: Information leak between requests on the same connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8747.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-2625","severity":"moderate","public_date":"2017-02-28T00:00:00Z","advisories":["RHSA-2017:1865"],"bugzilla":"1424987","bugzilla_description":"CVE-2017-2625 libXdmcp: weak entropy usage for session keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":["libXdmcp-0:1.1.2-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2625.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-8745","severity":"important","public_date":"2016-12-12T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:0935","RHSA-2017:0527"],"bugzilla":"1403824","bugzilla_description":"CVE-2016-8745 tomcat: information disclosure due to incorrect Processor sharing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat-0:7.0.69-11.el7_3","tomcat6-0:6.0.24-105.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-6817","severity":"important","public_date":"2016-11-22T00:00:00Z","advisories":[],"bugzilla":"1397474","bugzilla_description":"CVE-2016-6817 tomcat: Infinite loop in HTTP/2 header parser","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6816","severity":"moderate","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0247","RHSA-2017:0456","RHSA-2017:0246","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:0935","RHSA-2017:0527","RHSA-2017:0250","RHSA-2017:0245","RHSA-2017:0244"],"bugzilla":"1397484","bugzilla_description":"CVE-2016-6816 tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-444","affected_packages":["tomcat-0:7.0.69-11.el7_3","tomcat6-0:6.0.24-105.el6_8","jboss-ec2-eap-0:7.5.13-1.Final_redhat_2.ep6.el6","jbossweb-0:7.5.20-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-8735","severity":"important","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457"],"bugzilla":"1397485","bugzilla_description":"CVE-2016-8735 tomcat: Remote code execution vulnerability in JmxRemoteLifecycleListener","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-8704","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390510","bugzilla_description":"CVE-2016-8704 memcached: Server append/prepend remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-8705","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390511","bugzilla_description":"CVE-2016-8705 memcached: Server update remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-8706","severity":"moderate","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2016:2819"],"bugzilla":"1390512","bugzilla_description":"CVE-2016-8706 memcached: SASL authentication remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["memcached-0:1.4.15-10.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-6797","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:2247"],"bugzilla":"1390493","bugzilla_description":"CVE-2016-6797 tomcat: unrestricted access to global resources","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.70-16.ep7.el6","tomcat8-0:8.0.36-17.ep7.el6","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-6796","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1550","RHSA-2017:1552","RHSA-2017:2247","RHSA-2017:1551"],"bugzilla":"1390515","bugzilla_description":"CVE-2016-6796 tomcat: security manager bypass via JSP Servlet config parameters","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","jbossweb-0:7.5.23-1.Final_redhat_1.1.ep6.el7","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-6794","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:2247"],"bugzilla":"1390520","bugzilla_description":"CVE-2016-6794 tomcat: system property disclosure","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.70-16.ep7.el6","tomcat8-0:8.0.36-17.ep7.el6","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6794.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-5018","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:1549","RHSA-2017:1548","RHSA-2017:1550","RHSA-2017:1552","RHSA-2017:2247","RHSA-2017:1551"],"bugzilla":"1390525","bugzilla_description":"CVE-2016-5018 tomcat: security manager bypass via IntrospectHelper utility function","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jboss-ec2-eap-0:7.5.16-1.Final_redhat_1.ep6.el6","jbossweb-0:7.5.23-1.Final_redhat_1.1.ep6.el7","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5018.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-0762","severity":"low","public_date":"2016-10-27T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457","RHSA-2017:2247"],"bugzilla":"1390526","bugzilla_description":"CVE-2016-0762 tomcat: timing attack in Realm implementation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.70-16.ep7.el6","tomcat8-0:8.0.36-17.ep7.el6","tomcat-0:7.0.76-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-5425","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2016:2046"],"bugzilla":"1362545","bugzilla_description":"CVE-2016-5425 tomcat: Local privilege escalation via systemd-tmpfiles service","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":["tomcat-0:7.0.54-8.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5425.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6325","severity":"important","public_date":"2016-10-10T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2017:0456","RHSA-2016:2045","RHSA-2017:0455","RHSA-2017:0457"],"bugzilla":"1367447","bugzilla_description":"CVE-2016-6325 tomcat: tomcat writable config files allow privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6325.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-7953","severity":"moderate","public_date":"2016-09-25T00:00:00Z","advisories":[],"bugzilla":"1381933","bugzilla_description":"CVE-2016-7953 libXvMC: Insufficient validation of server responses results in buffer underflow","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7953.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-1240","severity":"important","public_date":"2016-09-15T00:00:00Z","advisories":["RHSA-2017:0456","RHSA-2017:0455","RHSA-2017:0457"],"bugzilla":"1376712","bugzilla_description":"CVE-2016-1240 tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalation","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1240.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-4993","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":["RHSA-2017:3458","RHSA-2016:1838","RHSA-2016:1839","RHSA-2017:3456","RHSA-2016:1840","RHSA-2016:1841","RHSA-2017:3454","RHSA-2017:3455"],"bugzilla":"1344321","bugzilla_description":"CVE-2016-4993 eap: HTTP header injection / response splitting","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-113","affected_packages":["eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el7","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.0-5.GA_redhat_5.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-6129","severity":"moderate","public_date":"2016-08-26T00:00:00Z","advisories":[],"bugzilla":"1370955","bugzilla_description":"CVE-2016-6129 libtomcrypt: possible OP-TEE Bleichenbacher attack","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6129.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-2788","severity":"moderate","public_date":"2016-08-09T00:00:00Z","advisories":[],"bugzilla":"1365799","bugzilla_description":"CVE-2016-2788 mcollective: Improper validation of fields in MCollective pings","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2788.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5388","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2016:2045","RHSA-2016:1624","RHSA-2016:1635","RHSA-2016:1636"],"bugzilla":"1353809","bugzilla_description":"CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.59-51_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-3092","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:2068","RHSA-2017:0456","RHSA-2017:0455","RHSA-2016:2069","RHSA-2017:0457","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:2071","RHSA-2016:2070","RHSA-2016:2072","RHSA-2016:2599"],"bugzilla":"1349468","bugzilla_description":"CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","jboss-ec2-eap-0:7.5.11-1.Final_redhat_1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3092.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-1000031","severity":"moderate","public_date":"2016-04-20T00:00:00Z","advisories":[],"bugzilla":"1393454","bugzilla_description":"CVE-2016-1000031 Apache Commons FileUpload: DiskFileItem file manipulation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000031.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2015-5174","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2045","RHSA-2016:1432","RHSA-2015:2660","RHBA-2016:0090","RHSA-2015:2661","RHSA-2016:1433","RHSA-2016:2599","RHSA-2016:1434","RHSA-2016:1435","RHSA-2015:2659"],"bugzilla":"1265698","bugzilla_description":"CVE-2015-5174 tomcat: URL Normalization issue","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.54-21_patch_05.ep6.el5","tomcat7-0:7.0.54-21_patch_05.ep6.el7","tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-21_patch_05.ep6.el6","tomcat7-0:7.0.59-42_patch_01.ep7.el6","tomcat8-0:8.0.18-52_patch_01.ep7.el6","jboss-ec2-eap-0:7.5.9-2.Final_redhat_2.ep6.el6","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5174.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-5351","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311076","bugzilla_description":"CVE-2015-5351 tomcat: CSRF token leak","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-352","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5351.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-0714","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311082","bugzilla_description":"CVE-2016-0714 tomcat: Security Manager bypass via persistence mechanisms","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-290","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0714.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2015-5346","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087"],"bugzilla":"1311085","bugzilla_description":"CVE-2015-5346 tomcat: Session fixation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-0706","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311087","bugzilla_description":"CVE-2016-0706 tomcat: security manager bypass via StatusManagerServlet","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-287","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-5345","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311089","bugzilla_description":"CVE-2015-5345 tomcat: directory disclosure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-552","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-0763","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311093","bugzilla_description":"CVE-2016-0763 tomcat: security manager bypass via setGlobalContext()","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0763.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2015-8023","severity":"important","public_date":"2015-11-16T00:00:00Z","advisories":[],"bugzilla":"1283219","bugzilla_description":"CVE-2015-8023 strongswan: Authentication bypass in eap-mschapv2 plugin","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8023.json"},{"CVE":"CVE-2015-7501","severity":"critical","public_date":"2015-11-06T00:00:00Z","advisories":["RHSA-2016:1773","RHSA-2016:0040","RHSA-2015:2578","RHSA-2015:2534","RHSA-2015:2556","RHSA-2015:2557","RHSA-2015:2579","RHSA-2015:2535","RHSA-2015:2514","RHSA-2015:2536","RHSA-2015:2559","RHSA-2015:2537","RHSA-2015:2538","RHSA-2015:2516","RHSA-2015:2539","RHSA-2015:2517","RHSA-2015:2670","RHSA-2015:2671","RHSA-2020:4274","RHSA-2015:2521","RHSA-2015:2522","RHSA-2015:2500","RHSA-2015:2501","RHSA-2015:2523","RHSA-2015:2502","RHSA-2015:2524","RHSA-2015:2547","RHSA-2015:2548","RHSA-2015:2560","RHSA-2015:2540","RHSA-2015:2541","RHSA-2015:2542","RHSA-2016:0118"],"bugzilla":"1279330","bugzilla_description":"CVE-2015-7501 apache-commons-collections: InvokerTransformer code execution during deserialisation","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502->CWE-284","affected_packages":["jboss-ec2-eap-0:7.5.5-3.Final_redhat_3.ep6.el6","apache-commons-collections-0:3.2.1-22.el7_2","jakarta-commons-collections-0:3.2.1-3.5.el6_7","jenkins-0:1.651.2-1.el6op","rh-maven35-apache-commons-collections4-0:4.0-7.3.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el7","rh-java-common-apache-commons-collections-0:3.2.1-21.13.el6","jakarta-commons-collections-0:3.2.1-5.ep5.el4","jakarta-commons-collections-0:3.2.1-5.ep5.el5","jakarta-commons-collections-0:3.2.1-5.ep5.el6","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el7","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el5","jakarta-commons-collections-0:3.2-2jpp.4","apache-commons-collections-eap6-0:3.2.1-16.redhat_5.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7501.json"},{"CVE":"CVE-2015-4171","severity":"low","public_date":"2015-06-08T00:00:00Z","advisories":[],"bugzilla":"1231178","bugzilla_description":"CVE-2015-4171 strongswan: rogue servers are able to gain user credentials from a client in certain IKEv2 setups","cvss_score":1.4,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4171.json"},{"CVE":"CVE-2014-7810","severity":"moderate","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2015:1622","RHSA-2015:1621","RHSA-2016:0492"],"bugzilla":"1222573","bugzilla_description":"CVE-2014-7810 Tomcat/JbossWeb: security manager bypass via EL expressions","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.54-19_patch_04.ep6.el5","tomcat7-0:7.0.54-19_patch_04.ep6.el6","tomcat6-0:6.0.41-15_patch_04.ep6.el7","tomcat6-0:6.0.24-94.el6_7","tomcat6-0:6.0.41-15_patch_04.ep6.el6","tomcat6-0:6.0.41-15_patch_04.ep6.el5","tomcat7-0:7.0.54-20_patch_04.ep6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7810.json"},{"CVE":"CVE-2015-0254","severity":"important","public_date":"2015-02-27T00:00:00Z","advisories":["RHSA-2016:0121","RHSA-2016:0122","RHSA-2016:1376","RHSA-2016:0123","RHSA-2016:1838","RHSA-2016:1839","RHSA-2015:1695","RHSA-2016:0124","RHSA-2016:1840","RHSA-2016:1841","RHSA-2016:0125"],"bugzilla":"1198606","bugzilla_description":"CVE-2015-0254 jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["jakarta-taglibs-standard-0:1.1.1-11.7.el6_7","jboss-ec2-eap-0:7.5.6-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7","jakarta-taglibs-standard-0:1.1.2-14.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2014-0227","severity":"moderate","public_date":"2015-02-09T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0983","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:1088","RHSA-2014:1021","RHSA-2014:1087","RHSA-2014:1020","RHSA-2014:1086","RHSA-2015:0091","RHSA-2014:1019","RHSA-2015:0991","RHSA-2014:1904"],"bugzilla":"1109196","bugzilla_description":"CVE-2014-0227 Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-400","affected_packages":["tomcat6-0:6.0.24-83.el6_6","tomcat-0:7.0.54-2.el7_1","jbossweb-0:7.4.8-4.Final_redhat_4.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0227.json"},{"CVE":"CVE-2017-6056","severity":"important","public_date":"2015-02-06T00:00:00Z","advisories":["RHSA-2017:0517","RHSA-2017:0827","RHSA-2017:0826","RHSA-2017:0829","RHSA-2017:0828"],"bugzilla":"1422148","bugzilla_description":"CVE-2017-6056 tomcat: Infinite loop in the processing of https requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["jbossweb-0:7.5.21-2.Final_redhat_2.1.ep6.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-9221","severity":"moderate","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1173064","bugzilla_description":"CVE-2014-9221 strongswan: denial-of-service vulnerability in libtls when processing crafted Key Exchange payload","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9221.json"},{"CVE":"CVE-2014-6439","severity":"low","public_date":"2014-10-01T00:00:00Z","advisories":[],"bugzilla":"1149945","bugzilla_description":"CVE-2014-6439 Elasticsearch: CSRF via insecure CORS default configuration","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-345->CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6439.json"},{"CVE":"CVE-2013-4444","severity":"important","public_date":"2014-09-10T00:00:00Z","advisories":[],"bugzilla":"1140314","bugzilla_description":"CVE-2013-4444 tomcat: remote code execution via uploaded JSP","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4444.json"},{"CVE":"CVE-2014-0230","severity":"low","public_date":"2014-07-19T00:00:00Z","advisories":["RHSA-2016:0595","RHSA-2016:0596","RHSA-2015:1622","RHSA-2015:1621","RHSA-2015:2659","RHSA-2015:2660","RHSA-2015:2661","RHEA-2015:1770","RHSA-2016:0597","RHEA-2015:1771","RHSA-2016:2599","RHSA-2016:0598","RHSA-2016:0599"],"bugzilla":"1191200","bugzilla_description":"CVE-2014-0230 tomcat: non-persistent DoS attack by feeding data by aborting an upload","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["tomcat8-0:8.0.18-25_patch_00.ep7.el6","jbossweb-0:7.5.15-1.Final_redhat_1.1.ep6.el5","jboss-ec2-eap-0:7.5.7-2.Final_redhat_3.ep6.el6","tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.59-26_patch_00.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0230.json"},{"CVE":"CVE-2014-3251","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":[],"bugzilla":"1105713","bugzilla_description":"CVE-2014-3251 mcollective: aes_security.rb file creation vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-348","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3251.json"},{"CVE":"CVE-2014-0175","severity":"important","public_date":"2014-07-10T00:00:00Z","advisories":["RHBA-2014:0487"],"bugzilla":"1086381","bugzilla_description":"CVE-2014-0175 mcollective: default password set at install","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-798","affected_packages":["ruby193-mcollective-0:2.4.1-5.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0175.json"},{"CVE":"CVE-2014-0186","severity":"important","public_date":"2014-06-10T00:00:00Z","advisories":["RHSA-2014:0686"],"bugzilla":"1089884","bugzilla_description":"CVE-2014-0186 tomcat7: RHEL-7 regression causing DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat-0:7.0.42-5.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0186.json"},{"CVE":"CVE-2014-0095","severity":"moderate","public_date":"2014-05-30T00:00:00Z","advisories":[],"bugzilla":"1103804","bugzilla_description":"CVE-2014-0095 Apache Tomcat 8: Denial of service via AJP requests with content length zero","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-130->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0095.json"},{"CVE":"CVE-2014-0075","severity":"moderate","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:1149","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1072776","bugzilla_description":"CVE-2014-0075 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-400","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0075.json"},{"CVE":"CVE-2014-0096","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1088342","bugzilla_description":"CVE-2014-0096 Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0096.json"},{"CVE":"CVE-2014-0099","severity":"moderate","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:1149","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1102030","bugzilla_description":"CVE-2014-0099 Tomcat/JBossWeb: Request smuggling via malicious content length header","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-190->CWE-444","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0099.json"},{"CVE":"CVE-2014-0119","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:1034","RHSA-2014:1088","RHSA-2014:1087","RHSA-2014:1086","RHSA-2014:1038","RHSA-2014:0895","RHSA-2014:0843","RHSA-2014:0842"],"bugzilla":"1102038","bugzilla_description":"CVE-2014-0119 Tomcat/JBossWeb: XML parser hijack by malicious web application","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-470","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat6-0:6.0.24-78.el6_5","tomcat-0:7.0.42-8.el7_0","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0119.json"},{"CVE":"CVE-2014-2891","severity":"moderate","public_date":"2014-05-05T00:00:00Z","advisories":[],"bugzilla":"1095487","bugzilla_description":"CVE-2014-2891 strongswan: denial of service via crafted ID_DER_ASN1_DN_ID payload","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2891.json"},{"CVE":"CVE-2014-0164","severity":"important","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2014:0461","RHSA-2014:0460"],"bugzilla":"1083847","bugzilla_description":"CVE-2014-0164 mcollective: world readable client config","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-732","affected_packages":["openshift-origin-broker-util-0:1.17.6.6-1.el6op","openshift-origin-broker-util-0:1.9.16-1.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0164.json"},{"CVE":"CVE-2013-4322","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2014:0686","RHSA-2014:0525","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1069905","bugzilla_description":"CVE-2013-4322 tomcat: incomplete fix for CVE-2012-3544","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat-0:7.0.42-5.el7_0","tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4322.json"},{"CVE":"CVE-2013-4590","severity":"low","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2014:1038","RHSA-2014:1088","RHSA-2014:1087","RHSA-2014:1086"],"bugzilla":"1069911","bugzilla_description":"CVE-2013-4590 tomcat: information disclosure via XXE when running untrusted web applications","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["tomcat6-0:6.0.24-78.el6_5","tomcat6-0:6.0.41-5_patch_02.ep6.el6","tomcat7-0:7.0.54-6_patch_02.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4590.json"},{"CVE":"CVE-2014-0033","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2014:0525","RHSA-2014:0528"],"bugzilla":"1069919","bugzilla_description":"CVE-2014-0033 tomcat: session fixation still possible with disableURLRewriting enabled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-384","affected_packages":["tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0033.json"},{"CVE":"CVE-2013-4286","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0374","RHSA-2014:0344","RHSA-2014:0686","RHSA-2014:0345","RHSA-2014:0343","RHSA-2014:0458","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0511","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1069921","bugzilla_description":"CVE-2013-4286 tomcat: multiple content-length header poisoning flaws","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat-0:7.0.42-5.el7_0","tomcat6-0:6.0.37-27_patch_04.ep6.el6","jbossweb-0:7.3.1-1.Final_redhat_1.1.ep6.el5","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4286.json"},{"CVE":"CVE-2014-0050","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0252","RHSA-2014:0253","RHSA-2014:0473","RHSA-2014:0400","RHSA-2014:0452","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0401","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1062337","bugzilla_description":"CVE-2014-0050 apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el6","tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0050.json"},{"CVE":"CVE-2013-6357","severity":"moderate","public_date":"2013-11-04T00:00:00Z","advisories":[],"bugzilla":"1030090","bugzilla_description":"CVE-2013-6357 tomcat5: CSRF vulnerability in Manager application","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6357.json"},{"CVE":"CVE-2013-4561","severity":"low","public_date":"2013-10-24T00:00:00Z","advisories":[],"bugzilla":"1029652","bugzilla_description":"CVE-2013-4561 openshift-origin-msg-node-mcollective: /etc/cron.minutely/openshift-facts tmp file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4561.json"},{"CVE":"CVE-2013-4002","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0269","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2015:0773","RHSA-2013:1081","RHSA-2013:1060","RHSA-2014:0414","RHSA-2014:1823","RHSA-2014:1822","RHSA-2014:1821","RHSA-2013:1505","RHSA-2013:1447","RHSA-2014:1319","RHSA-2013:1059","RHSA-2014:1818"],"bugzilla":"1019176","bugzilla_description":"CVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP, 8017298)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","xerces-j2-0:2.7.1-12.7.el6_5","xerces-j2-0:2.11.0-17.el7_0","java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4002.json"},{"CVE":"CVE-2013-2185","severity":"important","public_date":"2013-09-03T00:00:00Z","advisories":["RHSA-2013:1193","RHSA-2013:1194","RHSA-2013:1265"],"bugzilla":"974813","bugzilla_description":"CVE-2013-2185 Tomcat/JBossWeb: Arbitrary file upload via deserialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-626","affected_packages":["jbossweb-0:7.2.0-3.redhat_2.ep6.el6","jbossweb-0:7.2.0-3.redhat_2.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2185.json"},{"CVE":"CVE-2013-4372","severity":"moderate","public_date":"2013-08-20T00:00:00Z","advisories":["RHSA-2013:1286","RHSA-2013:1862"],"bugzilla":"1011736","bugzilla_description":"CVE-2013-4372 Fuse Management Console: Stored cross-site scripting (XSS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4372.json"},{"CVE":"CVE-2013-1976","severity":"important","public_date":"2013-05-28T00:00:00Z","advisories":["RHSA-2013:0869","RHSA-2013:0870","RHSA-2013:0872","RHSA-2013:0871"],"bugzilla":"927622","bugzilla_description":"CVE-2013-1976 tomcat: Improper TOMCAT_LOG management in init script (DoS, ACE)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["tomcat7-0:7.0.30-7_patch_03.ep6.el6","tomcat6-0:6.0.35-12_patch_07.ep6.el5","tomcat5-0:5.5.33-36_patch_09.ep5.el6","tomcat6-0:6.0.24-55.el6_4","tomcat6-0:6.0.32-35_patch_09.ep5.el6","tomcat7-0:7.0.30-5_patch_03.ep6.el5","tomcat6-0:6.0.32-32_patch_09.ep5.el5","tomcat6-0:6.0.35-33_patch_07.ep6.el6","tomcat5-0:5.5.23-0jpp.40.el5_9","tomcat5-0:5.5.33-33_patch_09.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1976.json"},{"CVE":"CVE-2013-2051","severity":"low","public_date":"2013-05-28T00:00:00Z","advisories":["RHSA-2013:0869"],"bugzilla":"959047","bugzilla_description":"CVE-2013-2051 tomcat: DIGEST authentication vulnerable to replay attacks","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["tomcat6-0:6.0.24-55.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2051.json"},{"CVE":"CVE-2013-1990","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"959070","bugzilla_description":"CVE-2013-1990 libXvMC: Multiple integer overflows leading to heap-based buffer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["libXvMC-0:1.0.8-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1990.json"},{"CVE":"CVE-2013-1999","severity":"moderate","public_date":"2013-05-23T00:00:00Z","advisories":["RHSA-2014:1436"],"bugzilla":"960347","bugzilla_description":"CVE-2013-1999 libXvMC: Array Index error leading to heap-based OOB write","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-129->CWE-122","affected_packages":["libXvMC-0:1.0.8-2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1999.json"},{"CVE":"CVE-2013-2035","severity":"low","public_date":"2013-05-13T00:00:00Z","advisories":["RHSA-2014:1290","RHSA-2014:1291","RHSA-2014:1995","RHSA-2014:0245","RHSA-2014:0400","RHSA-2014:0254","RHSA-2014:0029","RHSA-2014:0401","RHSA-2013:1029","RHSA-2015:0034","RHSA-2014:1904","RHSA-2013:1786","RHSA-2013:1784","RHSA-2013:1785"],"bugzilla":"958618","bugzilla_description":"CVE-2013-2035 HawtJNI: predictable temporary file name leading to local arbitrary code execution","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-377","affected_packages":["jansi-0:1.9-5.redhat_3.1.ep6.el5","activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2035.json"},{"CVE":"CVE-2013-2067","severity":"moderate","public_date":"2013-05-10T00:00:00Z","advisories":["RHSA-2013:1011","RHSA-2013:0839","RHSA-2013:0834","RHSA-2013:0833","RHSA-2013:1437","RHSA-2013:0964","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"961779","bugzilla_description":"CVE-2013-2067 tomcat: Session fixation in form authenticator","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-384","affected_packages":["tomcat6-0:6.0.37-8_patch_01.ep6.el5","tomcat6-0:6.0.24-57.el6_4","tomcat7-0:7.0.40-9_patch_01.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2067.json"},{"CVE":"CVE-2012-3544","severity":"moderate","public_date":"2013-05-10T00:00:00Z","advisories":["RHSA-2013:1011","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"961783","bugzilla_description":"CVE-2012-3544 tomcat: Limited DoS in chunked transfer encoding input filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.37-8_patch_01.ep6.el5","tomcat7-0:7.0.40-9_patch_01.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3544.json"},{"CVE":"CVE-2013-2071","severity":"low","public_date":"2013-05-10T00:00:00Z","advisories":["RHSA-2013:1011","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"961803","bugzilla_description":"CVE-2013-2071 tomcat: Information disclosure in asynchronous context when using AsyncListeners that threw RuntimeExceptions","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat6-0:6.0.37-8_patch_01.ep6.el5","tomcat7-0:7.0.40-9_patch_01.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2071.json"},{"CVE":"CVE-2013-7239","severity":"moderate","public_date":"2013-04-19T00:00:00Z","advisories":[],"bugzilla":"1047299","bugzilla_description":"CVE-2013-7239 memcached: SASL authentication allows wrong credentials to access memcache","cvss_score":4.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7239.json"},{"CVE":"CVE-2013-7290","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"1052863","bugzilla_description":"CVE-2013-7290 memcached: remote DoS (segmentation fault) via a request to delete a key","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7290.json"},{"CVE":"CVE-2013-7291","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"1052864","bugzilla_description":"CVE-2013-7291 memcached: remote DoS (crash) via a request that triggers \"unbounded key print\"","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7291.json"},{"CVE":"CVE-2013-0179","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"895054","bugzilla_description":"CVE-2013-0179 memcached: DoS due to buffer overrun when printing out keys to be deleted in verbose mode","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0179.json"},{"CVE":"CVE-2012-3546","severity":"important","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0195","RHSA-2013:0151","RHSA-2013:0162","RHSA-2013:0194","RHSA-2013:0197","RHSA-2013:0164","RHSA-2013:0196","RHSA-2013:0163","RHSA-2013:0191","RHSA-2013:0193","RHSA-2013:0192","RHSA-2013:0005","RHSA-2013:0147","RHSA-2013:0158","RHSA-2013:0235","RHSA-2013:0642","RHSA-2013:0004","RHSA-2013:0623","RHSA-2013:0221","RHSA-2013:0198","RHSA-2013:0146","RHSA-2013:0641","RHSA-2013:0157","RHSA-2013:0640"],"bugzilla":"883634","bugzilla_description":"CVE-2012-3546 Tomcat/JBoss Web: Bypass of security constraints","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-31_patch_08.ep5.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossas-0:4.3.0-11.GA_CP10_patch_02.2.ep1.el5","tomcat6-0:6.0.35-6_patch_02.ep6.el5","tomcat6-0:6.0.32-28_patch_08.ep5.el5","jbossas-0:4.3.0-11.GA_CP10_patch_02.1.ep1.el4","tomcat5-0:5.5.33-34_patch_08.ep5.el6","jbossweb-0:7.0.17-3.Final_redhat_2.ep6.el6","jbossweb-0:7.0.17-3.Final_redhat_2.ep6.el5","tomcat6-0:6.0.32-31_patch_08.ep5.el6","tomcat6-0:6.0.24-52.el6_4","tomcat6-0:6.0.35-25_patch_01.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3546.json"},{"CVE":"CVE-2012-4431","severity":"moderate","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0647","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0268","RHSA-2013:1437","RHSA-2013:1853","RHSA-2013:0265","RHSA-2013:0267","RHSA-2013:0266"],"bugzilla":"883636","bugzilla_description":"CVE-2012-4431 Tomcat/JBoss Web - Bypass of CSRF prevention filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["tomcat7-0:7.0.30-3_patch_02.ep6.el5","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","tomcat6-0:6.0.35-6_patch_06.ep6.el5","tomcat7-0:7.0.30-5_patch_02.ep6.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4431.json"},{"CVE":"CVE-2012-4534","severity":"moderate","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0623","RHSA-2013:0265","RHSA-2013:0266"],"bugzilla":"883637","bugzilla_description":"CVE-2012-4534 Tomcat - Denial Of Service when using NIO+SSL+sendfile","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.35-6_patch_06.ep6.el5","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4534.json"},{"CVE":"CVE-2012-5885","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5885.json"},{"CVE":"CVE-2012-5886","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5886.json"},{"CVE":"CVE-2012-5887","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5887.json"},{"CVE":"CVE-2012-2733","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0265","RHSA-2013:0266"],"bugzilla":"873695","bugzilla_description":"CVE-2012-2733 tomcat: HTTP NIO connector OOM DoS via a request with large headers","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.35-6_patch_06.ep6.el5","tomcat6-0:6.0.35-29_patch_06.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2733.json"},{"CVE":"CVE-2012-6551","severity":"moderate","public_date":"2012-11-02T00:00:00Z","advisories":["RHSA-2013:1029"],"bugzilla":"955907","bugzilla_description":"CVE-2012-6551 activemq: DoS by resource consumption via HTTP requests to sample webapp","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6551.json"},{"CVE":"CVE-2013-3060","severity":"important","public_date":"2012-11-02T00:00:00Z","advisories":["RHSA-2013:1029","RHSA-2013:1221"],"bugzilla":"955908","bugzilla_description":"CVE-2013-3060 activemq: Unauthenticated access to web console","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3060.json"},{"CVE":"CVE-2012-6092","severity":"moderate","public_date":"2012-10-18T00:00:00Z","advisories":["RHSA-2013:1029"],"bugzilla":"955906","bugzilla_description":"CVE-2012-6092 activemq: Multiple XSS flaws in web demos","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6092.json"},{"CVE":"CVE-2012-4529","severity":"low","public_date":"2012-10-10T00:00:00Z","advisories":["RHSA-2013:0839","RHSA-2013:0834","RHSA-2013:0833","RHSA-2013:1437"],"bugzilla":"868202","bugzilla_description":"CVE-2012-4529 JBoss Web: jsessionid exposed via encoded url when using cookie based session tracking","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4529.json"},{"CVE":"CVE-2012-4463","severity":"low","public_date":"2012-09-28T00:00:00Z","advisories":[],"bugzilla":"862813","bugzilla_description":"CVE-2012-4463 mc: Improper sanitization of MC_EXT_SELECTED variable when viewing multiple files","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4463.json"},{"CVE":"CVE-2011-4610","severity":"important","public_date":"2012-01-31T00:00:00Z","advisories":["RHSA-2012:0074","RHSA-2012:0075","RHSA-2012:0076","RHSA-2012:0077","RHSA-2012:0078","RHSA-2012:0325"],"bugzilla":"767871","bugzilla_description":"CVE-2011-4610 JBoss Web remote denial of service when surrogate pair character is placed at buffer boundary","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4610.json"},{"CVE":"CVE-2011-3375","severity":"moderate","public_date":"2012-01-17T00:00:00Z","advisories":["RHSA-2012:0682","RHSA-2012:0681"],"bugzilla":"782624","bugzilla_description":"CVE-2011-3375 tomcat: information disclosure due to improper response and request object recycling","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat6-0:6.0.32-24_patch_07.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3375.json"},{"CVE":"CVE-2012-0022","severity":"moderate","public_date":"2012-01-17T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:1331","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0474","RHSA-2012:0475","RHSA-2012:0345","RHSA-2012:0325","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075"],"bugzilla":"783359","bugzilla_description":"CVE-2012-0022 tomcat: large number of parameters DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat6-0:6.0.24-36.el6_2","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat5-0:5.5.23-0jpp.31.el5_8","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0022.json"},{"CVE":"CVE-2011-4084","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":[],"bugzilla":"750521","bugzilla_description":"CVE-2011-4858 tomcat: hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4084.json"},{"CVE":"CVE-2011-4858","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0406","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0474","RHSA-2012:0089","RHSA-2012:0475","RHSA-2012:0325","RHSA-2012:0091","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075"],"bugzilla":"750521","bugzilla_description":"CVE-2011-4858 tomcat: hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat6-0:6.0.24-36.el6_2","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat5-0:5.5.23-0jpp.31.el5_8","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4858.json"},{"CVE":"CVE-2011-1184","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1184.json"},{"CVE":"CVE-2011-5062","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5062.json"},{"CVE":"CVE-2011-5063","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5063.json"},{"CVE":"CVE-2011-5064","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5064.json"},{"CVE":"CVE-2011-3190","severity":"moderate","public_date":"2011-08-20T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2011:1780","RHSA-2012:0680","RHSA-2012:0682","RHSA-2012:0681"],"bugzilla":"734868","bugzilla_description":"CVE-2011-3190 tomcat: authentication bypass and information disclosure","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3190.json"},{"CVE":"CVE-2011-2481","severity":"low","public_date":"2011-08-12T00:00:00Z","advisories":[],"bugzilla":"732820","bugzilla_description":"CVE-2011-2481 Apache Tomcat CVE-2009-0783 regression","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2481.json"},{"CVE":"CVE-2011-2526","severity":"low","public_date":"2011-07-13T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075"],"bugzilla":"720948","bugzilla_description":"CVE-2011-2526 tomcat: security manager restrictions bypass","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2526.json"},{"CVE":"CVE-2011-2204","severity":"low","public_date":"2011-06-27T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2011:1780","RHSA-2012:0680","RHSA-2012:0682","RHSA-2012:0681","RHSA-2011:1845"],"bugzilla":"717013","bugzilla_description":"CVE-2011-2204 tomcat: password disclosure vulnerability","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2204.json"},{"CVE":"CVE-2011-4971","severity":"low","public_date":"2011-05-15T00:00:00Z","advisories":[],"bugzilla":"957964","bugzilla_description":"CVE-2011-4971 memcached: specially crafted packet segmentation fault","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4971.json"},{"CVE":"CVE-2011-1475","severity":"low","public_date":"2011-04-06T00:00:00Z","advisories":[],"bugzilla":"708969","bugzilla_description":"CVE-2011-1475 tomcat: Information disclosure due improper handling of HTTP pipelining","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1475.json"},{"CVE":"CVE-2011-1088","severity":"moderate","public_date":"2011-03-02T00:00:00Z","advisories":[],"bugzilla":"708955","bugzilla_description":"CVE-2011-1088 CVE-2011-1183 CVE-2011-1419 CVE-2011-1582 tomcat: various flaws due not following ServletSecurity annotations","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1088.json"},{"CVE":"CVE-2011-1183","severity":"moderate","public_date":"2011-03-02T00:00:00Z","advisories":[],"bugzilla":"708955","bugzilla_description":"CVE-2011-1088 CVE-2011-1183 CVE-2011-1419 CVE-2011-1582 tomcat: various flaws due not following ServletSecurity annotations","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1183.json"},{"CVE":"CVE-2011-1419","severity":"moderate","public_date":"2011-03-02T00:00:00Z","advisories":[],"bugzilla":"708955","bugzilla_description":"CVE-2011-1088 CVE-2011-1183 CVE-2011-1419 CVE-2011-1582 tomcat: various flaws due not following ServletSecurity annotations","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1419.json"},{"CVE":"CVE-2011-1582","severity":"moderate","public_date":"2011-03-02T00:00:00Z","advisories":[],"bugzilla":"708955","bugzilla_description":"CVE-2011-1088 CVE-2011-1183 CVE-2011-1419 CVE-2011-1582 tomcat: various flaws due not following ServletSecurity annotations","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1582.json"},{"CVE":"CVE-2010-3718","severity":"moderate","public_date":"2011-02-05T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2011:0791","RHSA-2011:0897","RHSA-2011:1845"],"bugzilla":"675792","bugzilla_description":"CVE-2010-3718 tomcat: file permission bypass flaw","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat6-0:6.0.24-33.el6","tomcat5-0:5.5.23-0jpp.22.el5_7","tomcat5-0:5.5.33-14_patch_04.ep5.el4","tomcat5-0:5.5.33-16_patch_04.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3718.json"},{"CVE":"CVE-2010-4476","severity":"moderate","public_date":"2011-02-01T00:00:00Z","advisories":["RHSA-2011:0291","RHSA-2011:0292","RHSA-2011:0282","RHSA-2011:0290","RHSA-2011:0211","RHSA-2011:0299","RHSA-2011:0212","RHSA-2011:0333","RHSA-2011:0334","RHSA-2011:0213","RHSA-2011:0214","RHSA-2011:0335","RHSA-2011:0350","RHSA-2011:0880","RHSA-2011:0210","RHSA-2011:0336","RHSA-2011:0348","RHSA-2011:0349"],"bugzilla":"674336","bugzilla_description":"CVE-2010-4476 JDK Double.parseDouble Denial-Of-Service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.18.b17.el5","tomcat6-0:6.0.24-24.el6_0","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.8.sap-1jpp.2.el5","tomcat5-0:5.5.23-0jpp.17.el5_6","java-1.6.0-openjdk-1:1.6.0.0-1.36.b17.el6_0","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el4","java-1.4.2-ibm-sap-0:1.4.2.13.8.sap-1jpp.2.el4_8","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el5","tomcat5-0:5.5.28-12_patch_03.ep5.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el4","jbossweb-0:2.1.10-5.patch01.1.1.ep5.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el5","java-1.4.2-ibm-0:1.4.2.13.8-1jpp.3.el5","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.5.el6","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.3.el6","jbossweb-0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el5","jbossweb-0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el4","tomcat5-0:5.5.28-18_patch_03.ep5.el4","tomcat6-0:6.0.24-11.patch_03.ep5.el5","tomcat6-0:6.0.24-11.patch_03.ep5.el4","jbossweb-0:2.1.10-5.patch01.1.ep5.el4","java-1.4.2-ibm-0:1.4.2.13.8-1jpp.4.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4476.json"},{"CVE":"CVE-2011-0534","severity":"moderate","public_date":"2011-01-21T00:00:00Z","advisories":["RHSA-2011:0335","RHSA-2011:0350","RHSA-2011:0348"],"bugzilla":"675338","bugzilla_description":"CVE-2011-0534 tomcat: remote DoS via NIO connector","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.24-24.el6_0","tomcat6-0:6.0.24-11.patch_03.ep5.el5","tomcat6-0:6.0.24-11.patch_03.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0534.json"},{"CVE":"CVE-2011-0013","severity":"moderate","public_date":"2011-01-11T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2011:0791","RHSA-2011:0897","RHSA-2011:1845"],"bugzilla":"675786","bugzilla_description":"CVE-2011-0013 tomcat: XSS vulnerability in HTML Manager interface","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["tomcat6-0:6.0.24-33.el6","tomcat5-0:5.5.23-0jpp.22.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0013.json"},{"CVE":"CVE-2010-4172","severity":"moderate","public_date":"2010-11-22T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2011:0791","RHSA-2011:0897"],"bugzilla":"656246","bugzilla_description":"CVE-2010-4172 tomcat: cross-site-scripting vulnerability in the manager application","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["tomcat6-0:6.0.24-33.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4172.json"},{"CVE":"CVE-2010-4312","severity":"moderate","public_date":"2010-11-22T00:00:00Z","advisories":[],"bugzilla":"658267","bugzilla_description":"CVE-2010-4312 tomcat6: does not use HTTPOnly for session cookies by default","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4312.json"},{"CVE":"CVE-2009-2696","severity":"low","public_date":"2010-08-02T00:00:00Z","advisories":["RHSA-2010:0580"],"bugzilla":"616717","bugzilla_description":"CVE-2009-2696 tomcat: missing fix for CVE-2009-0781","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.9.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2696.json"},{"CVE":"CVE-2010-2227","severity":"important","public_date":"2010-07-08T00:00:00Z","advisories":["RHSA-2010:0584","RHSA-2010:0693","RHSA-2010:0583","RHSA-2010:0582","RHSA-2010:0581","RHSA-2010:0580"],"bugzilla":"612799","bugzilla_description":"CVE-2010-2227 tomcat: information leak vulnerability in the handling of 'Transfer-Encoding' header","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el4","jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el5","tomcat5-0:5.5.23-0jpp_21rh","tomcat5-0:5.5.23-0jpp_4rh.17","tomcat5-0:5.5.23-0jpp_4rh.19","tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5","tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4","tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4","tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5","tomcat5-0:5.5.23-0jpp.9.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2227.json"},{"CVE":"CVE-2010-1157","severity":"low","public_date":"2010-04-21T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2010:0584","RHSA-2011:0897"],"bugzilla":"585331","bugzilla_description":"CVE-2010-1157 tomcat: information disclosure in authentication headers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el4","jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1157.json"},{"CVE":"CVE-2009-2693","severity":"low","public_date":"2010-01-24T00:00:00Z","advisories":["RHSA-2010:0119","RHSA-2010:0693","RHSA-2010:0582","RHSA-2010:0580"],"bugzilla":"559738","bugzilla_description":"CVE-2009-2693 tomcat: unexpected file deletion and/or alteration","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_4rh.17","tomcat5-0:5.5.23-0jpp_4rh.19","tomcat5-0:5.5.23-0jpp.9.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2693.json"},{"CVE":"CVE-2009-2902","severity":"low","public_date":"2010-01-24T00:00:00Z","advisories":["RHSA-2010:0119","RHSA-2010:0693","RHSA-2010:0582","RHSA-2010:0580"],"bugzilla":"559761","bugzilla_description":"CVE-2009-2902 tomcat: unexpected file deletion in work directory","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_4rh.17","tomcat5-0:5.5.23-0jpp_4rh.19","tomcat5-0:5.5.23-0jpp.9.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2902.json"},{"CVE":"CVE-2008-5515","severity":"important","public_date":"2009-06-08T00:00:00Z","advisories":["RHSA-2009:1617","RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1144","RHSA-2009:1562","RHSA-2009:1143","RHSA-2009:1454","RHSA-2009:1146","RHSA-2009:1563","RHSA-2009:1145"],"bugzilla":"504753","bugzilla_description":"CVE-2008-5515 tomcat request dispatcher information disclosure vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.0.30-0jpp_16rh","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5515.json"},{"CVE":"CVE-2009-0783","severity":"low","public_date":"2009-06-04T00:00:00Z","advisories":["RHSA-2009:1617","RHSA-2009:1164","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1144","RHSA-2009:1562","RHSA-2009:1143","RHSA-2009:1454","RHSA-2009:1146","RHSA-2009:1563","RHSA-2009:1145"],"bugzilla":"504153","bugzilla_description":"CVE-2009-0783 tomcat XML parser information disclosure","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.0.30-0jpp_16rh","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0783.json"},{"CVE":"CVE-2009-0033","severity":"important","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2009:1617","RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1562","RHSA-2009:1454","RHSA-2009:1563"],"bugzilla":"493381","bugzilla_description":"CVE-2009-0033 tomcat6 Denial-Of-Service with AJP connection","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.0.30-0jpp_16rh","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0033.json"},{"CVE":"CVE-2009-0580","severity":"low","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1144","RHSA-2009:1562","RHSA-2009:1143","RHSA-2009:1454","RHSA-2009:1146","RHSA-2009:1563","RHSA-2009:1145"],"bugzilla":"503978","bugzilla_description":"CVE-2009-0580 tomcat6 Information disclosure in authentication classes","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0580.json"},{"CVE":"CVE-2009-0781","severity":"low","public_date":"2009-03-06T00:00:00Z","advisories":["RHSA-2009:1164","RHSA-2009:1562"],"bugzilla":"489028","bugzilla_description":"CVE-2009-0781 tomcat: XSS in Apache Tomcat calendar application","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0781.json"},{"CVE":"CVE-2008-3271","severity":"low","public_date":"2008-10-09T00:00:00Z","advisories":["RHSA-2008:1007"],"bugzilla":"466875","bugzilla_description":"CVE-2008-3271 tomcat  RemoteFilterValve Information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.0.30-0jpp_12rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3271.json"},{"CVE":"CVE-2008-2938","severity":"moderate","public_date":"2008-08-11T00:00:00Z","advisories":["RHSA-2008:1007","RHSA-2008:0862","RHSA-2008:0648","RHSA-2008:0877","RHSA-2008:0864"],"bugzilla":"456120","bugzilla_description":"CVE-2008-2938 tomcat Unicode directory traversal vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_12rh","tomcat5-0:5.5.23-0jpp.7.el5_2.1","tomcat5-0:5.5.23-0jpp_4rh.9","jbossweb-0:2.0.0-5.CP07.0jpp.ep1.1.el5","tomcat5-0:5.0.30-0jpp_12rh","jbossweb-0:2.0.0-5.CP07.0jpp.ep1.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2938.json"},{"CVE":"CVE-2008-1232","severity":"low","public_date":"2008-08-01T00:00:00Z","advisories":["RHSA-2008:1007","RHSA-2008:0862","RHSA-2010:0602","RHSA-2008:0648","RHSA-2008:0877","RHSA-2008:0864"],"bugzilla":"457597","bugzilla_description":"CVE-2008-1232 tomcat: Cross-Site-Scripting enabled by sendError call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.5.23-0jpp_12rh","tomcat5-0:5.5.23-0jpp.7.el5_2.1","tomcat5-0:5.5.23-0jpp_4rh.9","jbossweb-0:2.0.0-5.CP07.0jpp.ep1.1.el5","tomcat5-0:5.0.30-0jpp_12rh","jbossweb-0:2.0.0-5.CP07.0jpp.ep1.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1232.json"},{"CVE":"CVE-2008-2370","severity":"important","public_date":"2008-08-01T00:00:00Z","advisories":["RHSA-2008:1007","RHSA-2008:0862","RHSA-2010:0602","RHSA-2008:0648","RHSA-2008:0877","RHSA-2008:0864"],"bugzilla":"457934","bugzilla_description":"CVE-2008-2370 tomcat RequestDispatcher information disclosure vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_12rh","tomcat5-0:5.5.23-0jpp.7.el5_2.1","tomcat5-0:5.5.23-0jpp_4rh.9","jbossweb-0:2.0.0-5.CP07.0jpp.ep1.1.el5","tomcat5-0:5.0.30-0jpp_12rh","jbossweb-0:2.0.0-5.CP07.0jpp.ep1.1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2370.json"},{"CVE":"CVE-2008-1947","severity":"low","public_date":"2008-06-02T00:00:00Z","advisories":["RHSA-2008:1007","RHSA-2008:0862","RHSA-2008:0648","RHSA-2008:0864"],"bugzilla":"446393","bugzilla_description":"CVE-2008-1947 Tomcat host manager xss - name field","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.5.23-0jpp_12rh","tomcat5-0:5.5.23-0jpp.7.el5_2.1","tomcat5-0:5.5.23-0jpp_4rh.9","tomcat5-0:5.0.30-0jpp_12rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1947.json"},{"CVE":"CVE-2007-5333","severity":"low","public_date":"2008-02-11T00:00:00Z","advisories":["RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1616","RHSA-2009:1562","RHSA-2009:1454","RHSA-2009:1563"],"bugzilla":"427766","bugzilla_description":"CVE-2007-5333 Improve cookie parsing for tomcat5","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5333.json"},{"CVE":"CVE-2007-5342","severity":"low","public_date":"2007-12-23T00:00:00Z","advisories":["RHSA-2008:0862","RHSA-2008:0042","RHSA-2008:0195","RHSA-2008:0834","RHSA-2008:0833","RHSA-2008:0832","RHSA-2008:0831"],"bugzilla":"427216","bugzilla_description":"CVE-2007-5342 Apache Tomcat's default security policy is too open","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_11rh","tomcat5-0:5.5.23-0jpp_4rh.9","tomcat5-0:5.5.23-0jpp.3.0.3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5342.json"},{"CVE":"CVE-2007-4570","severity":"low","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:0542"],"bugzilla":"288201","bugzilla_description":"CVE-2007-4570 mctransd DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mcstrans-0:0.2.6-1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4570.json"},{"CVE":"CVE-2007-5461","severity":"important","public_date":"2007-10-14T00:00:00Z","advisories":["RHSA-2008:0213","RHSA-2008:0158","RHSA-2008:0862","RHSA-2008:0630","RHSA-2010:0602","RHSA-2008:0042","RHSA-2008:0151","RHSA-2008:0195","RHSA-2008:0261","RHSA-2008:0524"],"bugzilla":"333791","bugzilla_description":"CVE-2007-5461 Absolute path traversal Apache Tomcat WEBDAV","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_11rh","tomcat5-0:5.5.23-0jpp_4rh.9","tomcat5-0:5.5.23-0jpp.3.0.3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5461.json"},{"CVE":"CVE-2007-3382","severity":"low","public_date":"2007-08-14T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2007:0950","RHSA-2007:0871","RHSA-2007:1069","RHSA-2008:0195","RHSA-2008:0261","RHSA-2007:0876","RHSA-2008:0524"],"bugzilla":"247972","bugzilla_description":"CVE-2007-3382 tomcat handling of cookies","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_11rh","tomcat5-0:5.5.23-0jpp.3.0.2.el5","tomcat5-0:5.5.23-0jpp_4rh.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3382.json"},{"CVE":"CVE-2007-3385","severity":"low","public_date":"2007-08-14T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2007:0950","RHSA-2007:0871","RHSA-2007:1069","RHSA-2008:0195","RHSA-2008:0261","RHSA-2007:0876","RHSA-2008:0524"],"bugzilla":"247976","bugzilla_description":"CVE-2007-3385 tomcat handling of cookie values","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp_11rh","tomcat5-0:5.5.23-0jpp.3.0.2.el5","tomcat5-0:5.5.23-0jpp_4rh.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3385.json"},{"CVE":"CVE-2007-3386","severity":"low","public_date":"2007-08-14T00:00:00Z","advisories":["RHSA-2007:0871","RHSA-2007:0876"],"bugzilla":"247994","bugzilla_description":"CVE-2007-3386 tomcat host manager xss","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.5.23-0jpp.3.0.2.el5","tomcat5-0:5.5.23-0jpp_4rh.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3386.json"},{"CVE":"CVE-2007-2449","severity":"moderate","public_date":"2007-06-13T00:00:00Z","advisories":["RHSA-2008:0630","RHSA-2008:0261","RHSA-2007:0569","RHSA-2007:0876","RHSA-2008:0524"],"bugzilla":"244804","bugzilla_description":"CVE-2007-2449 tomcat examples jsp XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.5.23-0jpp.1.0.4.el5","tomcat5-0:5.5.23-0jpp_4rh.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2449.json"},{"CVE":"CVE-2007-2450","severity":"low","public_date":"2007-06-13T00:00:00Z","advisories":["RHSA-2008:0261","RHSA-2007:0569","RHSA-2007:0876","RHSA-2008:0524"],"bugzilla":"244808","bugzilla_description":"CVE-2007-2450 tomcat host manager XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.5.23-0jpp.1.0.4.el5","tomcat5-0:5.5.23-0jpp_4rh.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2450.json"},{"CVE":"CVE-2007-1358","severity":"low","public_date":"2007-06-06T00:00:00Z","advisories":["RHSA-2008:0630","RHSA-2007:0360","RHSA-2010:0602","RHSA-2008:0261","RHSA-2007:0326","RHSA-2007:0327","RHSA-2007:0876","RHSA-2007:0328","RHSA-2008:0524"],"bugzilla":"244803","bugzilla_description":"CVE-2007-1358 tomcat accept-language xss flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.5.23-0jpp_4rh.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1358.json"},{"CVE":"CVE-2006-7196","severity":"moderate","public_date":"2007-04-26T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2008:0261","RHSA-2007:0326","RHSA-2008:0524"],"bugzilla":"238131","bugzilla_description":"CVE-2006-7196 tomcat XSS in example webapps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7196.json"},{"CVE":"CVE-2006-7195","severity":"moderate","public_date":"2007-04-19T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2008:0261","RHSA-2007:0326","RHSA-2007:0327","RHSA-2007:0328","RHSA-2008:0524"],"bugzilla":"237081","bugzilla_description":"CVE-2006-7195 tomcat XSS in example webapps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7195.json"},{"CVE":"CVE-2007-1858","severity":"moderate","public_date":"2007-04-19T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2007:1069","RHSA-2007:0326"],"bugzilla":"237083","bugzilla_description":"CVE-2007-1858 tomcat anonymous cipher issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1858.json"},{"CVE":"CVE-2007-0450","severity":"important","public_date":"2007-03-14T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2007:0360","RHSA-2010:0602","RHSA-2007:1069","RHSA-2008:0261","RHSA-2007:0326","RHSA-2007:0327","RHSA-2007:0328","RHSA-2008:0524"],"bugzilla":"237080","bugzilla_description":"CVE-2007-0450 tomcat directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0450.json"},{"CVE":"CVE-2006-3835","severity":"low","public_date":"2006-07-21T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2010:0602","RHSA-2007:1069","RHSA-2008:0261","RHSA-2007:0326","RHSA-2008:0524"],"bugzilla":"237084","bugzilla_description":"CVE-2006-3835 tomcat directory listing issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3835.json"},{"CVE":"CVE-2005-3510","severity":"moderate","public_date":"2005-11-03T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2010:0602","RHSA-2007:1069","RHSA-2008:0261","RHSA-2006:0161","RHSA-2008:0524"],"bugzilla":"237085","bugzilla_description":"CVE-2005-3510 tomcat DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3510.json"},{"CVE":"CVE-2005-2090","severity":"moderate","public_date":"2005-06-06T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2007:0360","RHSA-2010:0602","RHSA-2007:1069","RHSA-2008:0261","RHSA-2007:0326","RHSA-2007:0327","RHSA-2007:0328","RHSA-2008:0524"],"bugzilla":"237079","bugzilla_description":"CVE-2005-2090 tomcat multiple content-length header poisioning","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2090.json"},{"CVE":"CVE-2005-4838","severity":"low","public_date":"2005-01-03T00:00:00Z","advisories":["RHSA-2007:0340","RHSA-2008:0630","RHSA-2008:0261","RHSA-2008:0524"],"bugzilla":"238401","bugzilla_description":"CVE-2005-4838 tomcat manager example DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.0.30-0jpp_5rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4838.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mcelog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mcelog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mcelog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mcpp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mcpp_security_api_results.json
new file mode 100644
index 0000000..1bfc4aa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mcpp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14274","severity":"moderate","public_date":"2019-07-26T00:00:00Z","advisories":[],"bugzilla":"1740464","bugzilla_description":"CVE-2019-14274 mcpp: heap based buffer overflow in function do_msg() in support.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14274.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mcstrans_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mcstrans_security_api_results.json
new file mode 100644
index 0000000..6cbc6e4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mcstrans_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2007-4570","severity":"low","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:0542"],"bugzilla":"288201","bugzilla_description":"CVE-2007-4570 mctransd DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mcstrans-0:0.2.6-1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4570.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mdadm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mdadm_security_api_results.json
new file mode 100644
index 0000000..118c614
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mdadm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-5220","severity":"moderate","public_date":"2014-12-17T00:00:00Z","advisories":[],"bugzilla":"1589839","bugzilla_description":"CVE-2014-5220 mdadm: Improper sanitization of device names allows arbitrary command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5220.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.6"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/meanwhile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/meanwhile_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/meanwhile_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mecab-ipadic-EUCJP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mecab-ipadic-EUCJP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mecab-ipadic-EUCJP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mecab-ipadic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mecab-ipadic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mecab-ipadic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mecab_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mecab_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mecab_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/media-player-info_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/media-player-info_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/media-player-info_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memcached_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memcached_security_api_results.json
new file mode 100644
index 0000000..a0f05f1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memcached_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10931","severity":"important","public_date":"2020-03-24T00:00:00Z","advisories":[],"bugzilla":"1816630","bugzilla_description":"CVE-2020-10931 memcached: mishandled memcpy into a stack-based buffer may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10931.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15026","severity":"moderate","public_date":"2019-08-20T00:00:00Z","advisories":[],"bugzilla":"1753862","bugzilla_description":"CVE-2019-15026 memcached: stack-based buffer over-read in conn_to_str in memcached.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15026.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-11596","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:1576"],"bugzilla":"1706001","bugzilla_description":"CVE-2019-11596 memcached: null-pointer dereference in \"lru mode\" and \"lru temp_ttl\" causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["memcached-0:1.5.9-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11596.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000115","severity":"moderate","public_date":"2018-03-02T00:00:00Z","advisories":["RHSA-2018:1627","RHSA-2018:2857","RHSA-2018:2331","RHBA-2018:2140","RHSA-2018:1593"],"bugzilla":"1551182","bugzilla_description":"CVE-2018-1000115 memcached: UDP server support allows spoofed traffic amplification DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-9951","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1471970","bugzilla_description":"CVE-2017-9951 memcached: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9951.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000127","severity":"moderate","public_date":"2017-04-27T00:00:00Z","advisories":["RHSA-2018:2290"],"bugzilla":"1555064","bugzilla_description":"CVE-2018-1000127 memcached: Integer Overflow in items.c:item_free()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["memcached-0:1.4.39-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000127.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-8704","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390510","bugzilla_description":"CVE-2016-8704 memcached: Server append/prepend remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-8705","severity":"important","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2017:0059","RHSA-2016:2819","RHSA-2016:2820"],"bugzilla":"1390511","bugzilla_description":"CVE-2016-8705 memcached: Server update remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rhmap-fh-openshift-templates-0:1.0.0-5.el7","memcached-0:1.4.15-10.el7_3.1","memcached-0:1.4.4-3.el6_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-8706","severity":"moderate","public_date":"2016-10-31T00:00:00Z","advisories":["RHSA-2016:2819"],"bugzilla":"1390512","bugzilla_description":"CVE-2016-8706 memcached: SASL authentication remote code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["memcached-0:1.4.15-10.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2013-7239","severity":"moderate","public_date":"2013-04-19T00:00:00Z","advisories":[],"bugzilla":"1047299","bugzilla_description":"CVE-2013-7239 memcached: SASL authentication allows wrong credentials to access memcache","cvss_score":4.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7239.json"},{"CVE":"CVE-2013-7290","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"1052863","bugzilla_description":"CVE-2013-7290 memcached: remote DoS (segmentation fault) via a request to delete a key","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7290.json"},{"CVE":"CVE-2013-7291","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"1052864","bugzilla_description":"CVE-2013-7291 memcached: remote DoS (crash) via a request that triggers \"unbounded key print\"","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7291.json"},{"CVE":"CVE-2013-0179","severity":"low","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"895054","bugzilla_description":"CVE-2013-0179 memcached: DoS due to buffer overrun when printing out keys to be deleted in verbose mode","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0179.json"},{"CVE":"CVE-2011-4971","severity":"low","public_date":"2011-05-15T00:00:00Z","advisories":[],"bugzilla":"957964","bugzilla_description":"CVE-2011-4971 memcached: specially crafted packet segmentation fault","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4971.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memkind-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memkind-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memkind-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memkind_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memkind_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memkind_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memtest86+_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memtest86+_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/memtest86+_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mercurial-hgk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mercurial-hgk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mercurial-hgk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mercurial_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mercurial_security_api_results.json
new file mode 100644
index 0000000..7467a9c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mercurial_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-3902","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1696025","bugzilla_description":"CVE-2019-3902 mercurial: Path-checking logic bypass via symlinks and subrepositories","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3902.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-17983","severity":"moderate","public_date":"2018-10-01T00:00:00Z","advisories":[],"bugzilla":"1637556","bugzilla_description":"CVE-2018-17983 mercurial: Out-of-bounds read in cext/manifest.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17983.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-13348","severity":"moderate","public_date":"2018-06-06T00:00:00Z","advisories":[],"bugzilla":"1594083","bugzilla_description":"CVE-2018-13348 mercurial: Improper length check in mpatch.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-13347","severity":"moderate","public_date":"2018-06-06T00:00:00Z","advisories":["RHSA-2019:2276"],"bugzilla":"1594087","bugzilla_description":"CVE-2018-13347 mercurial: Buffer underflow in mpatch.c:mpatch_apply()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-787","affected_packages":["mercurial-0:2.6.2-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-13346","severity":"low","public_date":"2018-06-06T00:00:00Z","advisories":["RHSA-2019:2276"],"bugzilla":"1594090","bugzilla_description":"CVE-2018-13346 mercurial: Missing check for fragment start position in mpatch.c:mpatch_apply()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":["mercurial-0:2.6.2-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1000132","severity":"moderate","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2019:2276"],"bugzilla":"1553265","bugzilla_description":"CVE-2018-1000132 mercurial: HTTP server permissions bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["mercurial-0:2.6.2-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000132.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000112","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":[],"bugzilla":"1549540","bugzilla_description":"CVE-2018-1000112 jenkins-plugin-mercurial: Disclosure of user names and node names to unauthorized users through post-commit hook URL in Mercurial Plugin (SECURITY-726)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000112.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-17458","severity":"moderate","public_date":"2017-11-03T00:00:00Z","advisories":[],"bugzilla":"1509868","bugzilla_description":"CVE-2017-17458 mercurial: arbitrary command execution in mercurial repo with a git submodule","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-1000116","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2489"],"bugzilla":"1479915","bugzilla_description":"CVE-2017-1000116 mercurial: command injection on clients through malicious ssh URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["mercurial-0:2.6.2-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-1000115","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2489"],"bugzilla":"1480330","bugzilla_description":"CVE-2017-1000115 Mercurial: pathaudit: path traversal via symlink","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["mercurial-0:2.6.2-8.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-9462","severity":"important","public_date":"2017-04-18T00:00:00Z","advisories":["RHSA-2017:1576"],"bugzilla":"1459482","bugzilla_description":"CVE-2017-9462 mercurial: Python debugger accessible to authorized users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["mercurial-0:1.4-5.el6_9","mercurial-0:2.6.2-7.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9462.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-3105","severity":"moderate","public_date":"2016-04-06T00:00:00Z","advisories":[],"bugzilla":"1332945","bugzilla_description":"CVE-2016-3105 mercurial: arbitrary code execution when converting git repos","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3105.json"},{"CVE":"CVE-2016-3068","severity":"important","public_date":"2016-03-29T00:00:00Z","advisories":["RHSA-2016:0706"],"bugzilla":"1319768","bugzilla_description":"CVE-2016-3068 mercurial: command injection via git subrepository urls","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["mercurial-0:2.6.2-6.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3068.json"},{"CVE":"CVE-2016-3069","severity":"moderate","public_date":"2016-03-29T00:00:00Z","advisories":["RHSA-2016:0706"],"bugzilla":"1320155","bugzilla_description":"CVE-2016-3069 mercurial: convert extension command injection via git repository names","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["mercurial-0:2.6.2-6.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3069.json"},{"CVE":"CVE-2016-3630","severity":"important","public_date":"2016-03-29T00:00:00Z","advisories":[],"bugzilla":"1322264","bugzilla_description":"CVE-2016-3630 mercurial: remote code execution in binary delta decoding","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3630.json"},{"CVE":"CVE-2014-9462","severity":"moderate","public_date":"2014-12-29T00:00:00Z","advisories":[],"bugzilla":"1204807","bugzilla_description":"CVE-2014-9462 mercurial: command Injection via sshpeer._validaterepo()","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9462.json"},{"CVE":"CVE-2010-4237","severity":"moderate","public_date":"2010-09-29T00:00:00Z","advisories":[],"bugzilla":"641373","bugzilla_description":"CVE-2010-4237 Mercurial: Doesn't verify subject Common Name","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4237.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-dri-drivers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-dri-drivers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-dri-drivers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libEGL-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libEGL-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libEGL-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libEGL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libEGL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libEGL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGL-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGL-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGL-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLU-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLU-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLU-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLU_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLU_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLU_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLw-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLw-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLw-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLw_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLw_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libGLw_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libOSMesa-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libOSMesa-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libOSMesa-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libOSMesa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libOSMesa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libOSMesa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libgbm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libgbm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libgbm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libgbm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libgbm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libgbm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libglapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libglapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libglapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libxatracker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libxatracker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-libxatracker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-vdpau-drivers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-vdpau-drivers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-vdpau-drivers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-vulkan-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-vulkan-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-vulkan-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-vulkan-drivers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-vulkan-drivers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mesa-vulkan-drivers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/meson_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/meson_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/meson_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/metacity_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/metacity_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/metacity_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/metis-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/metis-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/metis-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/metis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/metis_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/metis_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/microcode_ctl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/microcode_ctl_security_api_results.json
new file mode 100644
index 0000000..a1982ea
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/microcode_ctl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-0543","severity":"moderate","public_date":"2020-06-09T17:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1827165","bugzilla_description":"CVE-2020-0543 hw: Special Register Buffer Data Sampling (SRBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0543.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-0548","severity":"low","public_date":"2020-01-27T13:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1788786","bugzilla_description":"CVE-2020-0548 hw: Vector Register Data Sampling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-200","affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0548.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2020-0549","severity":"moderate","public_date":"2020-01-27T13:00:00Z","advisories":["RHSA-2020:2433","RHSA-2020:2431","RHSA-2020:2432","RHSA-2020:2771","RHSA-2020:2680","RHSA-2020:2706","RHSA-2020:2758","RHSA-2020:2679","RHSA-2020:2757","RHSA-2020:2842","RHSA-2020:2677","RHBA-2020:3180","RHSA-2020:2707"],"bugzilla":"1788788","bugzilla_description":"CVE-2020-0549 hw: L1D Cache Eviction Sampling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-200","affected_packages":["microcode_ctl-4:20190618-1.20200609.1.el8_1","redhat-coreos-43.82.202007300301.0","microcode_ctl-2:1.17-19.29.el6_6","microcode_ctl-4:20191115-4.20200602.2.el8_2","microcode_ctl-2:1.17-33.26.el6_10","microcode_ctl-2:2.1-12.30.el7_2","microcode_ctl-4:20180807a-2.20200609.1.el8_0","microcode_ctl-2:2.1-47.14.el7_6","microcode_ctl-2:2.1-53.9.el7_7","microcode_ctl-2:2.1-61.6.el7_8","microcode_ctl-2:1.17-17.31.el6_5","microcode_ctl-2:2.1-16.33.el7_3","microcode_ctl-2:2.1-22.32.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0549.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-0117","severity":"important","public_date":"2019-11-12T18:00:00Z","advisories":[],"bugzilla":"1758414","bugzilla_description":"CVE-2019-0117 hw: Intel SGX information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-1220->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0117.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.0"},{"CVE":"CVE-2019-11139","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":[],"bugzilla":"1765481","bugzilla_description":"CVE-2019-11139 hw: voltage modulation technical advisory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/microdnf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/microdnf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/microdnf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw-binutils-generic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw-binutils-generic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw-binutils-generic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw-filesystem-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw-filesystem-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw-filesystem-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-binutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-binutils_security_api_results.json
new file mode 100644
index 0000000..0c14373
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-binutils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-8737","severity":"moderate","public_date":"2014-11-04T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162655","bugzilla_description":"CVE-2014-8737 binutils: directory traversal vulnerability","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8737.json"},{"CVE":"CVE-2014-8738","severity":"low","public_date":"2014-11-02T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162666","bugzilla_description":"CVE-2014-8738 binutils: out of bounds memory write","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-787","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8738.json"},{"CVE":"CVE-2014-8503","severity":"low","public_date":"2014-10-30T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162607","bugzilla_description":"CVE-2014-8503 binutils: stack overflow in objdump when parsing specially crafted ihex file","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-121","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8503.json"},{"CVE":"CVE-2014-8502","severity":"low","public_date":"2014-10-28T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162594","bugzilla_description":"CVE-2014-8502 binutils: heap overflow in objdump when parsing a crafted ELF/PE binary file (incomplete fix for CVE-2014-8485)","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-122","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8502.json"},{"CVE":"CVE-2014-8504","severity":"low","public_date":"2014-10-27T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162621","bugzilla_description":"CVE-2014-8504 binutils: stack overflow in the SREC parser","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-121","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8504.json"},{"CVE":"CVE-2014-8501","severity":"low","public_date":"2014-10-26T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1162570","bugzilla_description":"CVE-2014-8501 binutils: out-of-bounds write when parsing specially crafted PE executable","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-787","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8501.json"},{"CVE":"CVE-2014-8485","severity":"moderate","public_date":"2014-10-24T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1157276","bugzilla_description":"CVE-2014-8485 binutils: lack of range checking leading to controlled write in _bfd_elf_setup_sections()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-822","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8485.json"},{"CVE":"CVE-2014-8484","severity":"moderate","public_date":"2014-10-20T00:00:00Z","advisories":["RHSA-2015:2079"],"bugzilla":"1156272","bugzilla_description":"CVE-2014-8484 binutils: invalid read flaw in libbfd","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-839","affected_packages":["binutils-0:2.23.52.0.1-55.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8484.json"},{"CVE":"CVE-2012-3509","severity":"moderate","public_date":"2012-08-29T00:00:00Z","advisories":[],"bugzilla":"849693","bugzilla_description":"CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3509.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-bzip2-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-bzip2-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-bzip2-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-bzip2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-bzip2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-bzip2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-cairo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-cairo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-cairo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-cpp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-cpp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-cpp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-crt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-crt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-crt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-expat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-expat_security_api_results.json
new file mode 100644
index 0000000..c716de9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-expat_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-0876","severity":"moderate","public_date":"2012-03-03T00:00:00Z","advisories":["RHSA-2017:3239","RHSA-2016:0062","RHSA-2016:2957","RHSA-2012:0731"],"bugzilla":"786617","bugzilla_description":"CVE-2012-0876 expat: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["expat-0:1.95.8-11.el5_8","expat-0:2.0.1-11.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0876.json"},{"CVE":"CVE-2012-1147","severity":"low","public_date":"2012-03-03T00:00:00Z","advisories":[],"bugzilla":"801634","bugzilla_description":"CVE-2012-1147 expat: resource leak in readfilemap.c","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1147.json"},{"CVE":"CVE-2012-1148","severity":"moderate","public_date":"2012-03-03T00:00:00Z","advisories":["RHSA-2016:2957","RHSA-2012:0731"],"bugzilla":"801648","bugzilla_description":"CVE-2012-1148 expat: Memory leak in poolGrow","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["expat-0:1.95.8-11.el5_8","expat-0:2.0.1-11.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1148.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-fontconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-fontconfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-fontconfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-freetype-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-freetype-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-freetype-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-freetype_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-freetype_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-freetype_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gcc-c++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gcc-c++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gcc-c++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gcc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gcc_security_api_results.json
new file mode 100644
index 0000000..c2f8cc0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gcc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3509","severity":"moderate","public_date":"2012-08-29T00:00:00Z","advisories":[],"bugzilla":"849693","bugzilla_description":"CVE-2012-3509 libiberty: integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3509.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gettext-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gettext-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gettext-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gettext_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gettext_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gettext_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-glib2-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-glib2-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-glib2-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-glib2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-glib2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-glib2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gstreamer1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gstreamer1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-gstreamer1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-harfbuzz-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-harfbuzz-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-harfbuzz-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-harfbuzz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-harfbuzz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-harfbuzz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-headers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-headers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-headers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-icu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-icu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-icu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libffi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libffi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libffi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libjpeg-turbo-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libjpeg-turbo-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libjpeg-turbo-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libjpeg-turbo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libjpeg-turbo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libjpeg-turbo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libpng-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libpng-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libpng-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libpng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libpng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libpng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libtiff-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libtiff-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libtiff-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libtiff_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libtiff_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-libtiff_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-openssl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-openssl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-openssl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pcre-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pcre-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pcre-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pcre_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pcre_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pcre_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pixman_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pixman_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pixman_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pkg-config_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pkg-config_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-pkg-config_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-readline_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-readline_security_api_results.json
new file mode 100644
index 0000000..8e0033c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-readline_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-2524","severity":"low","public_date":"2014-03-14T00:00:00Z","advisories":[],"bugzilla":"1077023","bugzilla_description":"CVE-2014-2524 readline: insecure temporary file use in _rl_tropen()","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2524.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-spice-vdagent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-spice-vdagent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-spice-vdagent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-sqlite-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-sqlite-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-sqlite-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-sqlite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-sqlite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-sqlite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-termcap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-termcap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-termcap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-win-iconv-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-win-iconv-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-win-iconv-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-win-iconv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-win-iconv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-win-iconv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-winpthreads-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-winpthreads-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-winpthreads-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-winpthreads_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-winpthreads_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-winpthreads_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-zlib-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-zlib-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-zlib-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-zlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-zlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw32-zlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-binutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-binutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-binutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-bzip2-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-bzip2-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-bzip2-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-bzip2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-bzip2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-bzip2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-cairo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-cairo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-cairo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-cpp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-cpp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-cpp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-crt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-crt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-crt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-expat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-expat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-expat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-fontconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-fontconfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-fontconfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-freetype-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-freetype-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-freetype-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-freetype_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-freetype_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-freetype_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gcc-c++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gcc-c++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gcc-c++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gcc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gcc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gcc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gettext-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gettext-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gettext-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gettext_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gettext_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gettext_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-glib2-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-glib2-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-glib2-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-glib2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-glib2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-glib2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gstreamer1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gstreamer1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-gstreamer1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-harfbuzz-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-harfbuzz-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-harfbuzz-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-harfbuzz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-harfbuzz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-harfbuzz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-headers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-headers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-headers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-icu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-icu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-icu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libffi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libffi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libffi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libjpeg-turbo-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libjpeg-turbo-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libjpeg-turbo-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libjpeg-turbo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libjpeg-turbo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libjpeg-turbo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libpng-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libpng-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libpng-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libpng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libpng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libpng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libtiff-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libtiff-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libtiff-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libtiff_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libtiff_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-libtiff_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-openssl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-openssl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-openssl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pcre-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pcre-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pcre-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pcre_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pcre_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pcre_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pixman_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pixman_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pixman_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pkg-config_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pkg-config_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-pkg-config_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-readline_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-readline_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-readline_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-spice-vdagent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-spice-vdagent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-spice-vdagent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-sqlite-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-sqlite-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-sqlite-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-sqlite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-sqlite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-sqlite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-termcap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-termcap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-termcap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-win-iconv-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-win-iconv-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-win-iconv-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-win-iconv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-win-iconv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-win-iconv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-winpthreads-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-winpthreads-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-winpthreads-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-winpthreads_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-winpthreads_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-winpthreads_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-zlib-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-zlib-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-zlib-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-zlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-zlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mingw64-zlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/minicom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/minicom_security_api_results.json
new file mode 100644
index 0000000..636a346
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/minicom_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-7467","severity":"moderate","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1442099","bugzilla_description":"CVE-2017-7467 minicom: Out of bounds write in vt100.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7467.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mksh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mksh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mksh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mlocate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mlocate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mlocate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mobile-broadband-provider-info_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mobile-broadband-provider-info_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mobile-broadband-provider-info_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mockito-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mockito-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mockito-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mockito_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mockito_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mockito_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_gssapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_gssapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_gssapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_mellon-diagnostics_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_mellon-diagnostics_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_mellon-diagnostics_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_mellon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_mellon_security_api_results.json
new file mode 100644
index 0000000..4750a3f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_mellon_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-13038","severity":"moderate","public_date":"2019-06-20T00:00:00Z","advisories":["RHSA-2020:1003","RHSA-2020:1660"],"bugzilla":"1725740","bugzilla_description":"CVE-2019-13038 mod_auth_mellon: Open Redirect via the login?ReturnTo= substring which could facilitate information theft","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["mod_auth_mellon-0:0.14.0-8.el7","mod_auth_mellon-0:0.14.0-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13038.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-3877","severity":"moderate","public_date":"2019-03-22T00:00:00Z","advisories":["RHSA-2019:3421","RHSA-2019:0766"],"bugzilla":"1691125","bugzilla_description":"CVE-2019-3877 mod_auth_mellon: open redirect in logout url when using URLs with backslashes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["mod_auth_mellon-0:0.14.0-2.el7_6.4","mod_auth_mellon-0:0.14.0-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3877.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.8"},{"CVE":"CVE-2019-3878","severity":"important","public_date":"2018-05-10T00:00:00Z","advisories":["RHSA-2019:0746","RHSA-2019:0985","RHSA-2019:0766"],"bugzilla":"1691126","bugzilla_description":"CVE-2019-3878 mod_auth_mellon: authentication bypass in ECP flow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["httpd24-mod_auth_mellon-0:0.13.1-2.el7.1","mod_auth_mellon-0:0.14.0-2.el7_6.4","mod_auth_mellon-0:0.14.0-3.el8_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3878.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-6807","severity":"moderate","public_date":"2017-03-13T00:00:00Z","advisories":[],"bugzilla":"1431670","bugzilla_description":"CVE-2017-6807 mod_auth_mellon: Cross-site session transfer vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2016-2145","severity":"moderate","public_date":"2016-03-09T00:00:00Z","advisories":[],"bugzilla":"1315739","bugzilla_description":"CVE-2016-2145 mod_auth_mellon: Missing error check when calling ap_get_client_block()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2145.json"},{"CVE":"CVE-2016-2146","severity":"moderate","public_date":"2016-03-09T00:00:00Z","advisories":[],"bugzilla":"1315747","bugzilla_description":"CVE-2016-2146 mod_auth_mellon: Failure to limit amount of POST data submitted by client","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2146.json"},{"CVE":"CVE-2014-8566","severity":"important","public_date":"2014-11-03T00:00:00Z","advisories":["RHSA-2014:1803"],"bugzilla":"1157281","bugzilla_description":"CVE-2014-8566 mod_auth_mellon: remote memory disclosure flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["mod_auth_mellon-0:0.8.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8566.json"},{"CVE":"CVE-2014-8567","severity":"moderate","public_date":"2014-11-03T00:00:00Z","advisories":["RHSA-2014:1803"],"bugzilla":"1157954","bugzilla_description":"CVE-2014-8567 mod_auth_mellon: logout processing leads to denial of service","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mod_auth_mellon-0:0.8.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8567.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_openidc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_openidc_security_api_results.json
new file mode 100644
index 0000000..297cdb3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_auth_openidc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-20479","severity":"moderate","public_date":"2019-11-12T00:00:00Z","advisories":["RHSA-2020:3970","RHSA-2020:3032"],"bugzilla":"1805102","bugzilla_description":"CVE-2019-20479 mod_auth_openidc: Open redirect issue exists in URLs with slash and backslash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["mod_auth_openidc-0:1.8.8-7.el7","mod_auth_openidc:2.3-8020020200604180605.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20479.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-14857","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":["RHSA-2020:3970","RHSA-2020:3032"],"bugzilla":"1760613","bugzilla_description":"CVE-2019-14857 mod_auth_openidc: Open redirect in logout url when using URLs with leading slashes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["mod_auth_openidc-0:1.8.8-7.el7","mod_auth_openidc:2.3-8020020200604180605.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14857.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-6413","severity":"moderate","public_date":"2017-02-20T00:00:00Z","advisories":["RHSA-2019:2112"],"bugzilla":"1428855","bugzilla_description":"CVE-2017-6413 mod_auth_openidc: OIDC_CLAIM and OIDCAuthNHeader not skipped in an \"AuthType oauth20\" configuration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["mod_auth_openidc-0:1.8.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6413.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-6062","severity":"moderate","public_date":"2017-01-30T00:00:00Z","advisories":[],"bugzilla":"1425353","bugzilla_description":"CVE-2017-6062 mod_auth_openidc: OIDCUnAuthAction pass does not scrub request headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6062.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-6059","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2019:2112"],"bugzilla":"1425350","bugzilla_description":"CVE-2017-6059 mod_auth_openidc: Shows user-supplied content on error pages","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mod_auth_openidc-0:1.8.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6059.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_authnz_pam_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_authnz_pam_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_authnz_pam_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_dav_svn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_dav_svn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_dav_svn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_fcgid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_fcgid_security_api_results.json
new file mode 100644
index 0000000..91f87f5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_fcgid_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-1000104","severity":"important","public_date":"2016-07-18T00:00:00Z","advisories":[],"bugzilla":"1353760","bugzilla_description":"CVE-2016-1000104 mod_fcgid: mod_fcgid sets environmental variable based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000104.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2013-4365","severity":"important","public_date":"2013-09-29T00:00:00Z","advisories":[],"bugzilla":"1017039","bugzilla_description":"CVE-2013-4365 mod_fcgid: heap overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4365.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_http2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_http2_security_api_results.json
new file mode 100644
index 0000000..85cc97e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_http2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-11993","severity":"moderate","public_date":"2020-08-07T00:00:00Z","advisories":[],"bugzilla":"1866564","bugzilla_description":"CVE-2020-11993 httpd: mod_http2 concurrent pool usage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11993.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10081","severity":"moderate","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1743966","bugzilla_description":"CVE-2019-10081 httpd: memory corruption on early pushes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10081.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-10082","severity":"moderate","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1743974","bugzilla_description":"CVE-2019-10082 httpd: read-after-free in h2 connection shutdown","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10082.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-10097","severity":"moderate","public_date":"2019-08-14T00:00:00Z","advisories":["RHSA-2019:4126","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1743996","bugzilla_description":"CVE-2019-10097 httpd: null-pointer dereference in mod_remoteip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-120|CWE-416)","affected_packages":["httpd24-httpd-0:2.4.34-15.el7","httpd24-httpd-0:2.4.34-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10097.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2019-9511","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3932","RHSA-2019:2799","RHSA-2020:2067","RHSA-2019:2775","RHSA-2019:3041","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4021","RHSA-2019:2692","RHSA-2020:1445","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2020:3192","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741860","bugzilla_description":"CVE-2019-9511 HTTP/2: large amount of data requests leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","kiali-0:v1.0.6.redhat1-1.el7","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9516","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741864","bugzilla_description":"CVE-2019-9516 HTTP/2: 0-length headers lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-0196","severity":"low","public_date":"2019-04-01T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:3933","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3935"],"bugzilla":"1695030","bugzilla_description":"CVE-2019-0196 httpd: mod_http2: read-after-free on a string compare","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-0197","severity":"low","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:3933","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3935"],"bugzilla":"1695042","bugzilla_description":"CVE-2019-0197 httpd: mod_http2: possible crash on late upgrade","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2018-17189","severity":"low","public_date":"2019-01-22T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:4126","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1668497","bugzilla_description":"CVE-2018-17189 httpd: mod_http2: DoS via slow, unneeded request bodies","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd24-httpd-0:2.4.34-15.el7","httpd24-httpd-0:2.4.34-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17189.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-11763","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3558"],"bugzilla":"1633399","bugzilla_description":"CVE-2018-11763 httpd: DoS for HTTP/2 connections by continuous SETTINGS frames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["httpd24-httpd-0:2.4.34-7.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11763.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1333","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3558"],"bugzilla":"1605048","bugzilla_description":"CVE-2018-1333 httpd: mod_http2: Too much time allocated to workers, possibly leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd24-httpd-0:2.4.34-7.el7","httpd24-httpd-0:2.4.34-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1333.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1302","severity":"low","public_date":"2018-03-21T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366"],"bugzilla":"1560625","bugzilla_description":"CVE-2018-1302 httpd: Use-after-free on HTTP/2 stream shutdown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_intercept_form_submit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_intercept_form_submit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_intercept_form_submit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_ldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_ldap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_ldap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_lookup_identity_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_lookup_identity_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_lookup_identity_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_md_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_md_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_md_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_proxy_html_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_proxy_html_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_proxy_html_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_security-mlogc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_security-mlogc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_security-mlogc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_security_crs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_security_crs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_security_crs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_security_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_security_security_api_results.json
new file mode 100644
index 0000000..88f47aa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_security_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-5705","severity":"moderate","public_date":"2014-03-31T00:00:00Z","advisories":[],"bugzilla":"1082904","bugzilla_description":"CVE-2013-5705 mod_security: bypass of intended rules via chunked requests","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5705.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_session_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_session_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_session_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_ssl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_ssl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mod_ssl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/modello-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/modello-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/modello-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/modello_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/modello_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/modello_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mojo-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mojo-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mojo-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mokutil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mokutil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mokutil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/motif-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/motif-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/motif-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/motif-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/motif-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/motif-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/motif_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/motif_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/motif_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mousetweaks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mousetweaks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mousetweaks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozilla-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozilla-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozilla-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs52-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs52-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs52-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs52_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs52_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs52_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs60-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs60-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs60-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs60_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs60_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozjs60_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozvoikko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozvoikko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mozvoikko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpfr-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpfr-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpfr-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpfr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpfr_security_api_results.json
new file mode 100644
index 0000000..f296974
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpfr_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-9474","severity":"low","public_date":"2013-12-16T00:00:00Z","advisories":[],"bugzilla":"1171701","bugzilla_description":"CVE-2014-9474 mpfr: buffer overflow in mpfr_strtofr","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9474.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123-plugins-pulseaudio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123-plugins-pulseaudio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123-plugins-pulseaudio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123_security_api_results.json
new file mode 100644
index 0000000..8a887d1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpg123_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14247","severity":"moderate","public_date":"2019-07-24T00:00:00Z","advisories":[],"bugzilla":"1850870","bugzilla_description":"CVE-2019-14247 mpg321: out-of-bounds write via a zero bitrate in an MP3 file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14247.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-12839","severity":"moderate","public_date":"2017-08-11T00:00:00Z","advisories":[],"bugzilla":"1708559","bugzilla_description":"CVE-2017-12839 mpg123: heap-based buffer over-read in function getbits insrc/libmpg123/getbits.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12839.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpich-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpich-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpich-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpich_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpich_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpich_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-mpich_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-mpich_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-mpich_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-mvapich2-psm2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-mvapich2-psm2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-mvapich2-psm2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-mvapich2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-mvapich2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-mvapich2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-openmpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-openmpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mpitests-openmpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mrtg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mrtg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mrtg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mstflint_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mstflint_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mstflint_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mt-st_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mt-st_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mt-st_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtdev-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtdev-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtdev-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtdev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtdev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtdev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtr-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtr-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtr-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtr_security_api_results.json
new file mode 100644
index 0000000..0af9f36
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtr_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11840","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":["RHBA-2020:0063"],"bugzilla":"1691529","bugzilla_description":"CVE-2019-11840 golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["openshift-0:4.3.0-202001131753.git.0.0aee6a8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3204","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":[],"bugzilla":"1439748","bugzilla_description":"CVE-2017-3204 golang-googlecode-go-crypto: Go SSH library does not verify host keys by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mtx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/multilib-rpm-config_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/multilib-rpm-config_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/multilib-rpm-config_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-maven-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-maven-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-maven-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-maven-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-maven-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge-maven-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/munge_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mutt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mutt_security_api_results.json
new file mode 100644
index 0000000..501b725
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mutt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14954","severity":"moderate","public_date":"2020-06-16T00:00:00Z","advisories":[],"bugzilla":"1850170","bugzilla_description":"CVE-2020-14954 mutt: response Injection via STARTTLS in SMTP, POP3 and IMAP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14954.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-14154","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1848287","bugzilla_description":"CVE-2020-14154 mutt: TLS mishandling during connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14154.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-14093","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1848360","bugzilla_description":"CVE-2020-14093 mutt: IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14093.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-14353","severity":"low","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1604040","bugzilla_description":"CVE-2018-14353 mutt: integer underflow in imap/util.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14353.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-14354","severity":"important","public_date":"2018-07-16T00:00:00Z","advisories":["RHSA-2018:2526"],"bugzilla":"1602069","bugzilla_description":"CVE-2018-14354 mutt: Remote code injection vulnerability to an IMAP mailbox","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["mutt-5:1.5.20-9.20091214hg736b6a.el6","mutt-5:1.5.21-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14354.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"9.6"},{"CVE":"CVE-2018-14362","severity":"moderate","public_date":"2018-07-16T00:00:00Z","advisories":["RHSA-2018:2526"],"bugzilla":"1602079","bugzilla_description":"CVE-2018-14362 mutt: POP body caching path traversal vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["mutt-5:1.5.20-9.20091214hg736b6a.el6","mutt-5:1.5.21-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-14355","severity":"moderate","public_date":"2018-07-16T00:00:00Z","advisories":["RHSA-2020:1126"],"bugzilla":"1602081","bugzilla_description":"CVE-2018-14355 mutt: IMAP header caching path traversal vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["mutt-5:1.5.21-29.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14355.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-14350","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1602922","bugzilla_description":"CVE-2018-14350 mutt: stack-based buffer overflow in imap/message.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14350.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-14351","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1602953","bugzilla_description":"CVE-2018-14351 mutt: IMAP status mailbox literal mishandled in imap/command.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14351.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-14352","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1604034","bugzilla_description":"CVE-2018-14352 mutt: stack-based buffer overflow in imap/util.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14352.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-14356","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1604047","bugzilla_description":"CVE-2018-14356 mutt: mishandles a zero-length UID in pop.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14356.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-14358","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1604064","bugzilla_description":"CVE-2018-14358 mutt: stack-based buffer overflow in imap/message.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-14359","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1604084","bugzilla_description":"CVE-2018-14359 mutt: buffer overflow via base64 data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14359.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-14357","severity":"important","public_date":"2018-07-08T00:00:00Z","advisories":["RHSA-2018:2526"],"bugzilla":"1602915","bugzilla_description":"CVE-2018-14357 mutt: Remote Code Execution via backquote characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["mutt-5:1.5.20-9.20091214hg736b6a.el6","mutt-5:1.5.21-28.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14357.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2018-14349","severity":"low","public_date":"2018-07-07T00:00:00Z","advisories":[],"bugzilla":"1602934","bugzilla_description":"CVE-2018-14349 mutt: Heap Overflow in imap/command.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14349.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2014-9116","severity":"low","public_date":"2014-11-26T00:00:00Z","advisories":[],"bugzilla":"1168463","bugzilla_description":"CVE-2014-9116 mutt: incorrect use of mutt_substrdup() in write_one_header()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-119->CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9116.json"},{"CVE":"CVE-2014-0467","severity":"important","public_date":"2013-05-18T00:00:00Z","advisories":["RHSA-2014:0304"],"bugzilla":"1075860","bugzilla_description":"CVE-2014-0467 mutt: heap-based buffer overflow when parsing certain headers","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["mutt-5:1.5.20-4.20091214hg736b6a.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0467.json"},{"CVE":"CVE-2011-1429","severity":"moderate","public_date":"2011-03-08T00:00:00Z","advisories":["RHSA-2011:0959"],"bugzilla":"688755","bugzilla_description":"CVE-2011-1429 mutt: SSL host name check may be skipped when verifying certificate chain","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["mutt-5:1.5.20-2.20091214hg736b6a.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1429.json"},{"CVE":"CVE-2009-3766","severity":"moderate","public_date":"2009-08-10T00:00:00Z","advisories":[],"bugzilla":"531011","bugzilla_description":"CVE-2009-3766 mutt: missing host name vs. SSL certificate name checks","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3766.json"},{"CVE":"CVE-2007-2683","severity":"low","public_date":"2007-05-11T00:00:00Z","advisories":["RHSA-2007:0386"],"bugzilla":"239890","bugzilla_description":"CVE-2007-2683 Buffer overflow in mutt's gecos structure handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mutt-5:1.4.1-5.el3","mutt-5:1.4.2.2-3.0.2.el5","mutt-5:1.4.1-12.0.3.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2683.json"},{"CVE":"CVE-2007-1558","severity":"moderate","public_date":"2007-04-02T00:00:00Z","advisories":["RHSA-2009:1140","RHSA-2007:0385","RHSA-2007:0344","RHSA-2007:0353","RHSA-2007:0386","RHSA-2007:0401","RHSA-2007:0402"],"bugzilla":"241191","bugzilla_description":"CVE-2007-1558 fetchmail/mutt/evolution/...: APOP password disclosure vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:1.5.0.12-0.1.el4","evolution-0:2.0.2-35.0.2.el4","fetchmail-0:5.9.0-21.7.3.el2.1.6","mutt-5:1.4.1-5.el3","fetchmail-0:6.2.5-6.0.1.el4","ruby-0:1.8.1-7.el4_8.3","evolution-data-server-0:1.8.0-15.0.3.el5","thunderbird-0:1.5.0.12-1.el5","ruby-0:1.8.5-5.el5_3.7","fetchmail-0:6.3.6-1.0.1.el5","mutt-5:1.4.2.2-3.0.2.el5","mutt-5:1.4.1-12.0.3.el4","evolution-0:1.4.5-20.el3","seamonkey-0:1.0.9-0.1.el3","seamonkey-0:1.0.9-0.1.el2","fetchmail-0:6.2.0-3.el3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1558.json"},{"CVE":"CVE-2006-5297","severity":"low","public_date":"2006-10-04T00:00:00Z","advisories":["RHSA-2007:0386"],"bugzilla":"211085","bugzilla_description":"CVE-2006-5297 Multiple mutt tempfile race conditions","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mutt-5:1.4.1-5.el3","mutt-5:1.4.2.2-3.0.2.el5","mutt-5:1.4.1-12.0.3.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5297.json"},{"CVE":"CVE-2006-3242","severity":"moderate","public_date":"2006-06-19T00:00:00Z","advisories":["RHSA-2006:0577"],"bugzilla":"1618137","bugzilla_description":"CVE-2006-3242 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mutt-5:1.4.1-11.rhel4","mutt-5:1.4.1-3.5.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3242.json"},{"CVE":"CVE-2005-2351","severity":"low","public_date":"2005-05-30T00:00:00Z","advisories":[],"bugzilla":"1768449","bugzilla_description":"CVE-2005-2351 mutt: denial of service via a series of requests to temporary files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2351.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2004-0078","severity":"important","public_date":"2004-02-11T00:00:00Z","advisories":["RHSA-2004:050","RHSA-2004:051"],"bugzilla":"1617139","bugzilla_description":"CVE-2004-0078 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mutt-5:1.4.1-3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0078.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mutter-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mutter-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mutter-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mutter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mutter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mutter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mvapich2-psm2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mvapich2-psm2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mvapich2-psm2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mvapich2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mvapich2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mvapich2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-errmsg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-errmsg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-errmsg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql_security_api_results.json
new file mode 100644
index 0000000..466b9bf
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mysql_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14760","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890735","bugzilla_description":"CVE-2020-14760 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14760.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-14672","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890737","bugzilla_description":"CVE-2020-14672 mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14765","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890738","bugzilla_description":"CVE-2020-14765 mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14765.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14769","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890739","bugzilla_description":"CVE-2020-14769 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14769.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14771","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890740","bugzilla_description":"CVE-2020-14771 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14771.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-14773","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890742","bugzilla_description":"CVE-2020-14773 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14773.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14776","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890743","bugzilla_description":"CVE-2020-14776 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14776.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14777","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890744","bugzilla_description":"CVE-2020-14777 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14777.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14785","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890745","bugzilla_description":"CVE-2020-14785 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14785.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14786","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890746","bugzilla_description":"CVE-2020-14786 mysql: Server: PS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14786.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14789","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890747","bugzilla_description":"CVE-2020-14789 mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14789.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14790","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890748","bugzilla_description":"CVE-2020-14790 mysql: Server: PS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14790.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14791","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890749","bugzilla_description":"CVE-2020-14791 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14791.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-14793","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890750","bugzilla_description":"CVE-2020-14793 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14793.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14794","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890751","bugzilla_description":"CVE-2020-14794 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14794.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14799","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890752","bugzilla_description":"CVE-2020-14799 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14799.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14800","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890753","bugzilla_description":"CVE-2020-14800 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14800.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14804","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890754","bugzilla_description":"CVE-2020-14804 mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14804.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14809","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890755","bugzilla_description":"CVE-2020-14809 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14809.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14812","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890756","bugzilla_description":"CVE-2020-14812 mysql: Server: Locking unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14812.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14814","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890757","bugzilla_description":"CVE-2020-14814 mysql: Server: DML unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14814.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14821","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890758","bugzilla_description":"CVE-2020-14821 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14821.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14827","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890759","bugzilla_description":"CVE-2020-14827 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14827.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-14828","severity":"important","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890760","bugzilla_description":"CVE-2020-14828 mysql: Server: DML unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14828.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14829","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890761","bugzilla_description":"CVE-2020-14829 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14829.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14830","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890762","bugzilla_description":"CVE-2020-14830 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14830.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14836","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890763","bugzilla_description":"CVE-2020-14836 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14836.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14837","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890764","bugzilla_description":"CVE-2020-14837 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14837.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14838","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890765","bugzilla_description":"CVE-2020-14838 mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14838.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-14839","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890766","bugzilla_description":"CVE-2020-14839 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14839.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14844","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890767","bugzilla_description":"CVE-2020-14844 mysql: Server: PS unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14844.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14845","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890768","bugzilla_description":"CVE-2020-14845 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14846","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890769","bugzilla_description":"CVE-2020-14846 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14846.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14848","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890770","bugzilla_description":"CVE-2020-14848 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14848.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14852","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890771","bugzilla_description":"CVE-2020-14852 mysql: Server: Charsets unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14852.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14860","severity":"low","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890772","bugzilla_description":"CVE-2020-14860 mysql: Server: Security: Roles unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14860.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-14861","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890773","bugzilla_description":"CVE-2020-14861 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14861.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14866","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890774","bugzilla_description":"CVE-2020-14866 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14866.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14867","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890775","bugzilla_description":"CVE-2020-14867 mysql: Server: DDL unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14867.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-14868","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890776","bugzilla_description":"CVE-2020-14868 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14868.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14869","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890777","bugzilla_description":"CVE-2020-14869 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14869.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14870","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890778","bugzilla_description":"CVE-2020-14870 mysql: Server: X Plugin unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14870.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14873","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890779","bugzilla_description":"CVE-2020-14873 mysql: Server: Logging unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14873.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-14878","severity":"important","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890780","bugzilla_description":"CVE-2020-14878 mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14878.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2020-14888","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890781","bugzilla_description":"CVE-2020-14888 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14888.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14891","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890782","bugzilla_description":"CVE-2020-14891 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14891.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14893","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890783","bugzilla_description":"CVE-2020-14893 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14893.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14775","severity":"moderate","public_date":"2020-10-20T00:00:00Z","advisories":[],"bugzilla":"1890784","bugzilla_description":"CVE-2020-14775 mysql: InnoDB unspecified vulnerability (CPU Oct 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14775.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14539","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865945","bugzilla_description":"CVE-2020-14539 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14539.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14540","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865947","bugzilla_description":"CVE-2020-14540 mysql: Server: DML unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14540.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14547","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865948","bugzilla_description":"CVE-2020-14547 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14547.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14550","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2019:1258","RHSA-2019:2327","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865949","bugzilla_description":"CVE-2020-14550 mysql: C API unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mariadb-1:5.5.64-1.el7","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14550.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-14553","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865950","bugzilla_description":"CVE-2020-14553 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-14559","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865951","bugzilla_description":"CVE-2020-14559 mysql: Server: Information Schema unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-14567","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865952","bugzilla_description":"CVE-2020-14567 mysql: Server: Replication unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14567.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14568","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865953","bugzilla_description":"CVE-2020-14568 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14568.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14575","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865954","bugzilla_description":"CVE-2020-14575 mysql: Server: DML unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14575.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14576","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865955","bugzilla_description":"CVE-2020-14576 mysql: Server: UDF unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14576.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865956","bugzilla_description":"CVE-2020-14586 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14591","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":[],"bugzilla":"1865957","bugzilla_description":"CVE-2020-14591 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14591.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14597","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865958","bugzilla_description":"CVE-2020-14597 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14614","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865959","bugzilla_description":"CVE-2020-14614 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14614.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14619","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865960","bugzilla_description":"CVE-2020-14619 mysql: Server: Parser unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14620","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865961","bugzilla_description":"CVE-2020-14620 mysql: Server: DML unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14620.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14623","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865962","bugzilla_description":"CVE-2020-14623 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14623.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14624","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865963","bugzilla_description":"CVE-2020-14624 mysql: Server: JSON unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14624.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14631","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865964","bugzilla_description":"CVE-2020-14631 mysql: Server: Security: Audit unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14631.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14632","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865965","bugzilla_description":"CVE-2020-14632 mysql: Server: Options unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14632.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14633","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865966","bugzilla_description":"CVE-2020-14633 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14633.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-14634","severity":"low","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865967","bugzilla_description":"CVE-2020-14634 mysql: InnoDB unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14634.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-14641","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865968","bugzilla_description":"CVE-2020-14641 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14641.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.9"},{"CVE":"CVE-2020-14643","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865969","bugzilla_description":"CVE-2020-14643 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14643.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-14654","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865970","bugzilla_description":"CVE-2020-14654 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14654.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14656","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865971","bugzilla_description":"CVE-2020-14656 mysql: Server: Locking unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14663","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865972","bugzilla_description":"CVE-2020-14663 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14678","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865973","bugzilla_description":"CVE-2020-14678 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14678.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14680","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865974","bugzilla_description":"CVE-2020-14680 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14680.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14697","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865975","bugzilla_description":"CVE-2020-14697 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14697.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2020-14702","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865976","bugzilla_description":"CVE-2020-14702 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14702.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14725","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865977","bugzilla_description":"CVE-2020-14725 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14725.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-14651","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1865982","bugzilla_description":"CVE-2020-14651 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14651.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-2934","severity":"low","public_date":"2020-04-15T00:00:00Z","advisories":[],"bugzilla":"1851014","bugzilla_description":"CVE-2020-2934 mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2934.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-2875","severity":"low","public_date":"2020-04-15T00:00:00Z","advisories":[],"bugzilla":"1851019","bugzilla_description":"CVE-2020-2875 mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2875.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2020-2933","severity":"low","public_date":"2020-04-15T00:00:00Z","advisories":[],"bugzilla":"1851022","bugzilla_description":"CVE-2020-2933 mysql-connector-java: allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized partial DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2933.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.2"},{"CVE":"CVE-2020-2759","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830048","bugzilla_description":"CVE-2020-2759 mysql: Server: Replication unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2759.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2761","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830049","bugzilla_description":"CVE-2020-2761 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2761.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2762","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830050","bugzilla_description":"CVE-2020-2762 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2763","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830051","bugzilla_description":"CVE-2020-2763 mysql: Server: Replication unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2763.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2765","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830052","bugzilla_description":"CVE-2020-2765 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2765.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2770","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830053","bugzilla_description":"CVE-2020-2770 mysql: Server: Logging unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2770.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2774","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830054","bugzilla_description":"CVE-2020-2774 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2774.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2779","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830055","bugzilla_description":"CVE-2020-2779 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2780","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830056","bugzilla_description":"CVE-2020-2780 mysql: Server: DML unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2790","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1830057","bugzilla_description":"CVE-2020-2790 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2804","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830058","bugzilla_description":"CVE-2020-2804 mysql: Server: Memcached unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-2812","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830059","bugzilla_description":"CVE-2020-2812 mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2814","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830060","bugzilla_description":"CVE-2020-2814 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2853","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830061","bugzilla_description":"CVE-2020-2853 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2853.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2892","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830062","bugzilla_description":"CVE-2020-2892 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2892.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2893","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830064","bugzilla_description":"CVE-2020-2893 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2895","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830066","bugzilla_description":"CVE-2020-2895 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2895.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2896","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830067","bugzilla_description":"CVE-2020-2896 mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2896.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2897","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830068","bugzilla_description":"CVE-2020-2897 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2898","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830069","bugzilla_description":"CVE-2020-2898 mysql: Server: Charsets unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2898.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2901","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830070","bugzilla_description":"CVE-2020-2901 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2901.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2903","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830071","bugzilla_description":"CVE-2020-2903 mysql: Server: Connection Handling unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2903.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2904","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830072","bugzilla_description":"CVE-2020-2904 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2904.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2921","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830073","bugzilla_description":"CVE-2020-2921 mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2921.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-2923","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830074","bugzilla_description":"CVE-2020-2923 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2924","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830075","bugzilla_description":"CVE-2020-2924 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2924.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2925","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830076","bugzilla_description":"CVE-2020-2925 mysql: Server: PS unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2926","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830077","bugzilla_description":"CVE-2020-2926 mysql: Server: Group Replication GCS unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2926.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-2928","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830078","bugzilla_description":"CVE-2020-2928 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2930","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830079","bugzilla_description":"CVE-2020-2930 mysql: Server: Parser unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2930.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2020-2806","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":[],"bugzilla":"1830081","bugzilla_description":"CVE-2020-2806 mysql: Server: Compiling unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2806.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-2760","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1830082","bugzilla_description":"CVE-2020-2760 mysql: InnoDB unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2760.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-2752","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1835849","bugzilla_description":"CVE-2020-2752 mysql: C API unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-2922","severity":"moderate","public_date":"2020-04-14T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2020:3732","RHSA-2020:4174","RHSA-2019:3708","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1835850","bugzilla_description":"CVE-2020-2922 mysql: C API unspecified vulnerability (CPU Apr 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","rh-mysql80-mysql-0:8.0.21-1.el7","mariadb-1:5.5.65-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-2570","severity":"low","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1798559","bugzilla_description":"CVE-2020-2570 mysql: C API unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2570.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-2573","severity":"low","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1798576","bugzilla_description":"CVE-2020-2573 mysql: C API unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2573.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-2574","severity":"low","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1798587","bugzilla_description":"CVE-2020-2574 mysql: C API unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2574.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-1708","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:0694","RHSA-2020:0617","RHSA-2020:0681","RHSA-2020:0800"],"bugzilla":"1793299","bugzilla_description":"CVE-2020-1708 openshift/mysql-apb: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift4/apb-base:v4.2.21-202002240343","openshift4/mysql-apb:v4.3.5-202003020549","openshift3/mysql-apb:v3.11.188-4","openshift4/apb-base:v4.1.37-202003021622"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1708.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-2572","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1796879","bugzilla_description":"CVE-2020-2572 mysql: Server: Audit Plugin unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2572.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2020-2577","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796880","bugzilla_description":"CVE-2020-2577 mysql: InnoDB unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2579","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796881","bugzilla_description":"CVE-2020-2579 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2579.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2580","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796882","bugzilla_description":"CVE-2020-2580 mysql: Server: DDL unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2580.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2584","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796883","bugzilla_description":"CVE-2020-2584 mysql: Server: Options unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2584.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-2588","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796884","bugzilla_description":"CVE-2020-2588 mysql: Server: DML unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2589","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796885","bugzilla_description":"CVE-2020-2589 mysql: InnoDB unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2589.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2660","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796886","bugzilla_description":"CVE-2020-2660 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2660.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2679","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796887","bugzilla_description":"CVE-2020-2679 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2679.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2020-2686","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796888","bugzilla_description":"CVE-2020-2686 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2686.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-2694","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796889","bugzilla_description":"CVE-2020-2694 mysql: Server: Information Schema unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2694.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-2627","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1796905","bugzilla_description":"CVE-2020-2627 mysql: Server: Parser unspecified vulnerability (CPU Jan 2020)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2920","severity":"low","public_date":"2019-11-19T00:00:00Z","advisories":[],"bugzilla":"1774049","bugzilla_description":"CVE-2019-2920 mysql-connector-odbc: An unauthenticated attacker with network access can, via multiple protocols compromise MySQL Connectors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2920.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-2910","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764674","bugzilla_description":"CVE-2019-2910 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2910.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-2911","severity":"low","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764675","bugzilla_description":"CVE-2019-2911 mysql: Information Schema unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2911.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2019-2914","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764676","bugzilla_description":"CVE-2019-2914 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2914.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2922","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764677","bugzilla_description":"CVE-2019-2922 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2923","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764678","bugzilla_description":"CVE-2019-2923 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2924","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":[],"bugzilla":"1764679","bugzilla_description":"CVE-2019-2924 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2924.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-2938","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764680","bugzilla_description":"CVE-2019-2938 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2938.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2946","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764681","bugzilla_description":"CVE-2019-2946 mysql: Server: PS unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2946.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2948","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764682","bugzilla_description":"CVE-2019-2948 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2948.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2950","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764683","bugzilla_description":"CVE-2019-2950 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2950.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2957","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764684","bugzilla_description":"CVE-2019-2957 mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2957.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2960","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764685","bugzilla_description":"CVE-2019-2960 mysql: Server: Replication unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2960.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2963","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764686","bugzilla_description":"CVE-2019-2963 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2963.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2966","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764687","bugzilla_description":"CVE-2019-2966 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2966.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2967","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764688","bugzilla_description":"CVE-2019-2967 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2967.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2968","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764689","bugzilla_description":"CVE-2019-2968 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2968.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2969","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764690","bugzilla_description":"CVE-2019-2969 mysql: Client programs unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2969.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2019-2974","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:4026","RHSA-2020:4174","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764691","bugzilla_description":"CVE-2019-2974 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mariadb-1:5.5.68-1.el7","mysql:8.0-8010020200828111645.c27ad7f8","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2974.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2982","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764692","bugzilla_description":"CVE-2019-2982 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2982.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2991","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764693","bugzilla_description":"CVE-2019-2991 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2991.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2993","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764694","bugzilla_description":"CVE-2019-2993 mysql: Server: C API unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2997","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764695","bugzilla_description":"CVE-2019-2997 mysql: Server: DDL unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2997.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2998","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764696","bugzilla_description":"CVE-2019-2998 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2998.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-3003","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1764697","bugzilla_description":"CVE-2019-3003 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3003.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-3004","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764698","bugzilla_description":"CVE-2019-3004 mysql: Server: Parser unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3009","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764699","bugzilla_description":"CVE-2019-3009 mysql: Server: Connection unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3009.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-3011","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764700","bugzilla_description":"CVE-2019-3011 mysql: Server: C API unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3011.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3018","severity":"moderate","public_date":"2019-10-15T00:00:00Z","advisories":["RHSA-2020:3732","RHSA-2020:3518","RHSA-2020:3757","RHSA-2020:3755"],"bugzilla":"1764701","bugzilla_description":"CVE-2019-3018 mysql: InnoDB unspecified vulnerability (CPU Oct 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql80-mysql-0:8.0.21-1.el7","mysql:8.0-8020020200828111438.4cda2c84","mysql:8.0-8000020200828111808.f8e95b4e","mysql:8.0-8010020200828111645.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3018.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2730","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1731995","bugzilla_description":"CVE-2019-2730 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2730.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2019-2731","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1731996","bugzilla_description":"CVE-2019-2731 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2731.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-2737","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1731997","bugzilla_description":"CVE-2019-2737 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2738","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1731998","bugzilla_description":"CVE-2019-2738 mysql: Server: Compiling unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-2739","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1731999","bugzilla_description":"CVE-2019-2739 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2739.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-2740","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1732000","bugzilla_description":"CVE-2019-2740 mysql: Server: XML unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2741","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732001","bugzilla_description":"CVE-2019-2741 mysql: Server: Audit Log unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2741.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2743","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732002","bugzilla_description":"CVE-2019-2743 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2743.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2746","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732003","bugzilla_description":"CVE-2019-2746 mysql: Server: Data Dictionary unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2746.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2747","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732004","bugzilla_description":"CVE-2019-2747 mysql: Server: GIS unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2747.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2752","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732005","bugzilla_description":"CVE-2019-2752 mysql: Server: Options unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2755","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732006","bugzilla_description":"CVE-2019-2755 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2755.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2757","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732007","bugzilla_description":"CVE-2019-2757 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2757.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2758","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1732008","bugzilla_description":"CVE-2019-2758 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2758.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2774","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732009","bugzilla_description":"CVE-2019-2774 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2774.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2778","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732010","bugzilla_description":"CVE-2019-2778 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-2780","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732011","bugzilla_description":"CVE-2019-2780 mysql: Server: Components / Services unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2784","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732012","bugzilla_description":"CVE-2019-2784 mysql: Server: DML unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2785","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732013","bugzilla_description":"CVE-2019-2785 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2789","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732015","bugzilla_description":"CVE-2019-2789 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2789.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2019-2791","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732016","bugzilla_description":"CVE-2019-2791 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2791.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-2795","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732017","bugzilla_description":"CVE-2019-2795 mysql: Server: Charsets unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2796","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732018","bugzilla_description":"CVE-2019-2796 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2797","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732019","bugzilla_description":"CVE-2019-2797 mysql: Client programs unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2797.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2019-2798","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732020","bugzilla_description":"CVE-2019-2798 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2800","severity":"important","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732021","bugzilla_description":"CVE-2019-2800 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-2801","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732022","bugzilla_description":"CVE-2019-2801 mysql: Server: FTS unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2801.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2802","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732023","bugzilla_description":"CVE-2019-2802 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2803","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732024","bugzilla_description":"CVE-2019-2803 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2803.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2805","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2020:1100","RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1732025","bugzilla_description":"CVE-2019-2805 mysql: Server: Parser unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.65-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2808","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732026","bugzilla_description":"CVE-2019-2808 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2810","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732027","bugzilla_description":"CVE-2019-2810 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2811","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732028","bugzilla_description":"CVE-2019-2811 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2812","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732029","bugzilla_description":"CVE-2019-2812 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2814","severity":"low","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732030","bugzilla_description":"CVE-2019-2814 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.2"},{"CVE":"CVE-2019-2815","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732031","bugzilla_description":"CVE-2019-2815 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2819","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732032","bugzilla_description":"CVE-2019-2819 mysql: Server: Security: Audit unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2822","severity":"important","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1732033","bugzilla_description":"CVE-2019-2822 mysql: Shell: Admin / InnoDB Cluster unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-2826","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732034","bugzilla_description":"CVE-2019-2826 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2826.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2830","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732035","bugzilla_description":"CVE-2019-2830 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2830.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2834","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732036","bugzilla_description":"CVE-2019-2834 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2834.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2879","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1732037","bugzilla_description":"CVE-2019-2879 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2879.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2692","severity":"moderate","public_date":"2019-04-23T00:00:00Z","advisories":[],"bugzilla":"1703402","bugzilla_description":"CVE-2019-2692 mysql-connector-java: privilege escalation in MySQL connector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2692.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2018-3123","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":[],"bugzilla":"1702956","bugzilla_description":"CVE-2018-3123 mysql: Server: libmysqld unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3123.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-2566","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":[],"bugzilla":"1702957","bugzilla_description":"CVE-2019-2566 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2566.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2580","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702958","bugzilla_description":"CVE-2019-2580 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2580.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2581","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702959","bugzilla_description":"CVE-2019-2581 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2581.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2584","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702960","bugzilla_description":"CVE-2019-2584 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2584.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2585","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702961","bugzilla_description":"CVE-2019-2585 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2585.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2587","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702962","bugzilla_description":"CVE-2019-2587 mysql: Server: Partition unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2587.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2589","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702963","bugzilla_description":"CVE-2019-2589 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2589.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2592","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702964","bugzilla_description":"CVE-2019-2592 mysql: Server: PS unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2592.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2593","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702965","bugzilla_description":"CVE-2019-2593 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2593.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2596","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702966","bugzilla_description":"CVE-2019-2596 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2596.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2606","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702967","bugzilla_description":"CVE-2019-2606 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2607","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702968","bugzilla_description":"CVE-2019-2607 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2607.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2614","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708","RHSA-2019:2327"],"bugzilla":"1702969","bugzilla_description":"CVE-2019-2614 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2614.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2617","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702970","bugzilla_description":"CVE-2019-2617 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2617.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2620","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702971","bugzilla_description":"CVE-2019-2620 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2620.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2623","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702972","bugzilla_description":"CVE-2019-2623 mysql: Server: Options unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-2624","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702973","bugzilla_description":"CVE-2019-2624 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2625","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702974","bugzilla_description":"CVE-2019-2625 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2625.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2626","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702975","bugzilla_description":"CVE-2019-2626 mysql: Server: DDL unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2626.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2627","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708","RHSA-2019:2327"],"bugzilla":"1702976","bugzilla_description":"CVE-2019-2627 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2628","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2020:4174","RHSA-2019:3708"],"bugzilla":"1702977","bugzilla_description":"CVE-2019-2628 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb:10.3-8010020190902091509.cdc1202b","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el7","rh-mariadb102-mariadb-1:10.2.33-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2628.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2630","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702978","bugzilla_description":"CVE-2019-2630 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2630.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2631","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702979","bugzilla_description":"CVE-2019-2631 mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2631.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2632","severity":"important","public_date":"2019-04-16T00:00:00Z","advisories":[],"bugzilla":"1702980","bugzilla_description":"CVE-2019-2632 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-2635","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702981","bugzilla_description":"CVE-2019-2635 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2636","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702982","bugzilla_description":"CVE-2019-2636 mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2019-2644","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702983","bugzilla_description":"CVE-2019-2644 mysql: Server: DDL unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2644.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2681","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702984","bugzilla_description":"CVE-2019-2681 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2681.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2683","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702985","bugzilla_description":"CVE-2019-2683 mysql: Server: Options unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2683.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2685","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702986","bugzilla_description":"CVE-2019-2685 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2685.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2686","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702987","bugzilla_description":"CVE-2019-2686 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2686.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2687","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702989","bugzilla_description":"CVE-2019-2687 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2687.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2688","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702990","bugzilla_description":"CVE-2019-2688 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2688.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2689","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702991","bugzilla_description":"CVE-2019-2689 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2689.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2691","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702992","bugzilla_description":"CVE-2019-2691 mysql: Server: Security: Roles unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2691.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2693","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702993","bugzilla_description":"CVE-2019-2693 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2693.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2694","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702994","bugzilla_description":"CVE-2019-2694 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2694.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2695","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702995","bugzilla_description":"CVE-2019-2695 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2695.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2634","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1702997","bugzilla_description":"CVE-2019-2634 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2634.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2019-2420","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666738","bugzilla_description":"CVE-2019-2420 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2420.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2434","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666740","bugzilla_description":"CVE-2019-2434 mysql: Server: Parser unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2434.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2436","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666741","bugzilla_description":"CVE-2019-2436 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-2455","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2018:2439","RHSA-2019:1258","RHSA-2019:2511"],"bugzilla":"1666742","bugzilla_description":"CVE-2019-2455 mysql: Server: Parser unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.60-1.el7_5","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2455.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2481","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2014:0702"],"bugzilla":"1666743","bugzilla_description":"CVE-2019-2481 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mariadb-1:5.5.37-1.el7_0","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2481.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2482","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666744","bugzilla_description":"CVE-2019-2482 mysql: Server: PS unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2482.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2486","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666745","bugzilla_description":"CVE-2019-2486 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2494","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666746","bugzilla_description":"CVE-2019-2494 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2494.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2495","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666747","bugzilla_description":"CVE-2019-2495 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2495.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2502","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666748","bugzilla_description":"CVE-2019-2502 mysql: InnoDB unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2502.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2503","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:1258","RHSA-2019:2511","RHSA-2019:2327"],"bugzilla":"1666749","bugzilla_description":"CVE-2019-2503 mysql: Server: Connection Handling unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2503.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-2507","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666750","bugzilla_description":"CVE-2019-2507 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2510","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:1258","RHSA-2019:2511","RHSA-2019:3708"],"bugzilla":"1666751","bugzilla_description":"CVE-2019-2510 mysql: InnoDB unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","mariadb:10.3-8010020190902091509.cdc1202b","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2510.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2513","severity":"low","public_date":"2019-01-15T00:00:00Z","advisories":[],"bugzilla":"1666752","bugzilla_description":"CVE-2019-2513 mysql: Shell unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2513.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-2528","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666753","bugzilla_description":"CVE-2019-2528 mysql: Server: Partition unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2528.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2529","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511","RHSA-2019:2327"],"bugzilla":"1666755","bugzilla_description":"CVE-2019-2529 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","mariadb-1:5.5.64-1.el7","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2529.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-2530","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666756","bugzilla_description":"CVE-2019-2530 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2530.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2531","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666757","bugzilla_description":"CVE-2019-2531 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2531.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2532","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666758","bugzilla_description":"CVE-2019-2532 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2532.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2533","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666759","bugzilla_description":"CVE-2019-2533 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-2534","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666760","bugzilla_description":"CVE-2019-2534 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2534.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2019-2535","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666761","bugzilla_description":"CVE-2019-2535 mysql: Server: Options unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2019-2536","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666762","bugzilla_description":"CVE-2019-2536 mysql: Server: Packaging unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2019-2537","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:1258","RHSA-2019:2511","RHSA-2019:3708"],"bugzilla":"1666763","bugzilla_description":"CVE-2019-2537 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","mariadb:10.3-8010020190902091509.cdc1202b","rh-mariadb102-mariadb-1:10.2.22-1.el7","mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2537.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-2539","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2484","RHSA-2019:2511"],"bugzilla":"1666764","bugzilla_description":"CVE-2019-2539 mysql: Server: Connection unspecified vulnerability (CPU Jan 2019)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql:8.0-8000020190807131617.f8e95b4e","rh-mysql80-mysql-0:8.0.17-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3258","severity":"important","public_date":"2018-10-17T00:00:00Z","advisories":["RHSA-2019:1545"],"bugzilla":"1640615","bugzilla_description":"CVE-2018-3258 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3258.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-3276","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640307","bugzilla_description":"CVE-2018-3276 mysql: Server: Memcached unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3200","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640308","bugzilla_description":"CVE-2018-3200 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3200.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3137","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640309","bugzilla_description":"CVE-2018-3137 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3284","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640310","bugzilla_description":"CVE-2018-3284 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3284.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-3195","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640311","bugzilla_description":"CVE-2018-3195 mysql: Server: DDL unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3173","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640312","bugzilla_description":"CVE-2018-3173 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3173.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3212","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640314","bugzilla_description":"CVE-2018-3212 mysql: Server: Information Schema unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3212.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3279","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640315","bugzilla_description":"CVE-2018-3279 mysql: Server: Security: Roles unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3279.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3162","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640316","bugzilla_description":"CVE-2018-3162 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3162.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3247","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640317","bugzilla_description":"CVE-2018-3247 mysql: Server: Merge unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3247.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3156","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640318","bugzilla_description":"CVE-2018-3156 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3156.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3161","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640319","bugzilla_description":"CVE-2018-3161 mysql: Server: Partition unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3278","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640320","bugzilla_description":"CVE-2018-3278 mysql: Server: RBR unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3278.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3174","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640321","bugzilla_description":"CVE-2018-3174 mysql: Init script calling kill with root privileges using pid from pidfile owned by mysql user (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3174.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"1.9"},{"CVE":"CVE-2018-3282","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1640322","bugzilla_description":"CVE-2018-3282 mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3282.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3285","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640323","bugzilla_description":"CVE-2018-3285 mysql: Server: Windows unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3187","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640324","bugzilla_description":"CVE-2018-3187 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3187.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3277","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640325","bugzilla_description":"CVE-2018-3277 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3277.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3144","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640326","bugzilla_description":"CVE-2018-3144 mysql: Server: Security: Audit unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3144.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-3145","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640327","bugzilla_description":"CVE-2018-3145 mysql: Server: Parser unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3145.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3170","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640328","bugzilla_description":"CVE-2018-3170 mysql: Server: DDL unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3170.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3186","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640329","bugzilla_description":"CVE-2018-3186 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3182","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640330","bugzilla_description":"CVE-2018-3182 mysql: Server: DML unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3133","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640331","bugzilla_description":"CVE-2018-3133 mysql: Server: Parser unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3133.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3143","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640332","bugzilla_description":"CVE-2018-3143 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3143.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3283","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640333","bugzilla_description":"CVE-2018-3283 mysql: Server: Logging unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-3171","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640334","bugzilla_description":"CVE-2018-3171 mysql: Server: Partition unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3171.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-3251","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640335","bugzilla_description":"CVE-2018-3251 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3286","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640336","bugzilla_description":"CVE-2018-3286 mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3286.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-3185","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1640337","bugzilla_description":"CVE-2018-3185 mysql: InnoDB unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-3280","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640338","bugzilla_description":"CVE-2018-3280 mysql: Server: JSON unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3280.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3203","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1640339","bugzilla_description":"CVE-2018-3203 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3203.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3155","severity":"moderate","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1640340","bugzilla_description":"CVE-2018-3155 mysql: Server: Parser unspecified vulnerability (CPU Oct 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-3054","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602354","bugzilla_description":"CVE-2018-3054 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3056","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602355","bugzilla_description":"CVE-2018-3056 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-3058","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1602356","bugzilla_description":"CVE-2018-3058 mysql: MyISAM unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3058.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-3060","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1602357","bugzilla_description":"CVE-2018-3060 mysql: InnoDB unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3061","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602359","bugzilla_description":"CVE-2018-3061 mysql: Server: DML unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3062","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602360","bugzilla_description":"CVE-2018-3062 mysql: Server: Memcached unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3062.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-3063","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2019:2327"],"bugzilla":"1602363","bugzilla_description":"CVE-2018-3063 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3063.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3064","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1602364","bugzilla_description":"CVE-2018-3064 mysql: InnoDB unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-3065","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602365","bugzilla_description":"CVE-2018-3065 mysql: Server: DML unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3065.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3066","severity":"low","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1602366","bugzilla_description":"CVE-2018-3066 mysql: Server: Options unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3066.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-3067","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602368","bugzilla_description":"CVE-2018-3067 mysql: Server: Replication unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3070","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602369","bugzilla_description":"CVE-2018-3070 mysql: Client mysqldump unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3070.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-3071","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602370","bugzilla_description":"CVE-2018-3071 mysql: Audit Log unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3071.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3073","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602371","bugzilla_description":"CVE-2018-3073 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3073.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-3074","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602372","bugzilla_description":"CVE-2018-3074 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-3075","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602374","bugzilla_description":"CVE-2018-3075 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3077","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1602375","bugzilla_description":"CVE-2018-3077 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3077.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3078","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602376","bugzilla_description":"CVE-2018-3078 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3079","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602377","bugzilla_description":"CVE-2018-3079 mysql: InnoDB unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3079.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3080","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602378","bugzilla_description":"CVE-2018-3080 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3080.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-3082","severity":"low","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602379","bugzilla_description":"CVE-2018-3082 mysql: Server: DDL unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3082.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2018-3084","severity":"low","public_date":"2018-07-17T00:00:00Z","advisories":[],"bugzilla":"1602380","bugzilla_description":"CVE-2018-3084 mysql: Shell: Core / Client unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3084.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-3081","severity":"moderate","public_date":"2018-07-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2019:2327"],"bugzilla":"1602424","bugzilla_description":"CVE-2018-3081 mysql: Client programs unspecified vulnerability (CPU Jul 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.64-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3081.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-2755","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568921","bugzilla_description":"CVE-2018-2755 mysql: Server: Replication unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-2758","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568922","bugzilla_description":"CVE-2018-2758 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2758.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2759","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568923","bugzilla_description":"CVE-2018-2759 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2759.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2761","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568924","bugzilla_description":"CVE-2018-2761 mysql: Client programs unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2761.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-2762","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568925","bugzilla_description":"CVE-2018-2762 mysql: Server: Connection unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2762.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-2766","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568926","bugzilla_description":"CVE-2018-2766 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2769","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568927","bugzilla_description":"CVE-2018-2769 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2769.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2771","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568931","bugzilla_description":"CVE-2018-2771 mysql: Server: Locking unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2771.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-2773","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568932","bugzilla_description":"CVE-2018-2773 mysql: pid file can be created in a world-writeable directory (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2773.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2018-2775","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568934","bugzilla_description":"CVE-2018-2775 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2775.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2776","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568936","bugzilla_description":"CVE-2018-2776 mysql: Group Replication GCS unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2777","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568937","bugzilla_description":"CVE-2018-2777 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2777.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2778","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568938","bugzilla_description":"CVE-2018-2778 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2779","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568940","bugzilla_description":"CVE-2018-2779 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2780","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568941","bugzilla_description":"CVE-2018-2780 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2781","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568942","bugzilla_description":"CVE-2018-2781 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2781.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2782","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568943","bugzilla_description":"CVE-2018-2782 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2782.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2784","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568944","bugzilla_description":"CVE-2018-2784 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2786","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568945","bugzilla_description":"CVE-2018-2786 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2787","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568946","bugzilla_description":"CVE-2018-2787 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2787.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2805","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:1254"],"bugzilla":"1568948","bugzilla_description":"CVE-2018-2805 mysql: GIS Extension unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2810","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:3655"],"bugzilla":"1568949","bugzilla_description":"CVE-2018-2810 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2812","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568950","bugzilla_description":"CVE-2018-2812 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2813","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568951","bugzilla_description":"CVE-2018-2813 mysql: Server: DDL unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-2816","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568953","bugzilla_description":"CVE-2018-2816 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2817","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568954","bugzilla_description":"CVE-2018-2817 mysql: Server: DDL unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2818","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568955","bugzilla_description":"CVE-2018-2818 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2819","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:3655","RHSA-2018:1254"],"bugzilla":"1568956","bugzilla_description":"CVE-2018-2819 mysql: InnoDB unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql56-mysql-0:5.6.40-1.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql56-mysql-0:5.6.40-1.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2839","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568957","bugzilla_description":"CVE-2018-2839 mysql: Server: DML unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2846","severity":"moderate","public_date":"2018-04-17T00:00:00Z","advisories":["RHSA-2018:3655"],"bugzilla":"1568958","bugzilla_description":"CVE-2018-2846 mysql: Server: Performance Schema unspecified vulnerability (CPU Apr 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.24-2.el6","rh-mysql57-mysql-0:5.7.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2767","severity":"low","public_date":"2018-04-08T00:00:00Z","advisories":["RHSA-2018:2439"],"bugzilla":"1564965","bugzilla_description":"CVE-2018-2767 mysql: use of SSL/TLS not enforced in libmysqld (Return of BACKRONYM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2767.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-6508","severity":"important","public_date":"2018-02-05T00:00:00Z","advisories":[],"bugzilla":"1542831","bugzilla_description":"CVE-2018-6508 puppet: Unparameterized input in multiple modules can allow a remote user to execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2018-2696","severity":"important","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1509475","bugzilla_description":"CVE-2018-2696 mysql: sha256_password authentication DoS via long password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2696.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-2703","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1534139","bugzilla_description":"CVE-2018-2703 mysql: sha256_password authentication DoS via hash with large rounds value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2703.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2562","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2017:3442","RHSA-2018:0587"],"bugzilla":"1535484","bugzilla_description":"CVE-2018-2562 mysql: Server: Partition unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2562.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-2565","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535486","bugzilla_description":"CVE-2018-2565 mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2565.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2573","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535487","bugzilla_description":"CVE-2018-2573 mysql: Server: GIS unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2573.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2576","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535488","bugzilla_description":"CVE-2018-2576 mysql: Server: DML unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2576.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2583","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535490","bugzilla_description":"CVE-2018-2583 mysql: Stored Procedure unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2583.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-2586","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535491","bugzilla_description":"CVE-2018-2586 mysql: Server: DML unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2586.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2590","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535492","bugzilla_description":"CVE-2018-2590 mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2590.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2591","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2017:3442","RHSA-2018:0587"],"bugzilla":"1535493","bugzilla_description":"CVE-2018-2591 mysql: Server : Partition unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2591.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2600","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535496","bugzilla_description":"CVE-2018-2600 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2600.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2612","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535497","bugzilla_description":"CVE-2018-2612 mysql: InnoDB unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2612.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2622","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535499","bugzilla_description":"CVE-2018-2622 mysql: Server: DDL unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2640","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535500","bugzilla_description":"CVE-2018-2640 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2640.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2645","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535501","bugzilla_description":"CVE-2018-2645 mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.9"},{"CVE":"CVE-2018-2646","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535502","bugzilla_description":"CVE-2018-2646 mysql: Server: DML unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2646.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2647","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535503","bugzilla_description":"CVE-2018-2647 mysql: Server: Replication unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mysql56-mysql-0:5.6.39-1.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-2665","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535504","bugzilla_description":"CVE-2018-2665 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2665.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-2667","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:0586"],"bugzilla":"1535505","bugzilla_description":"CVE-2018-2667 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2667.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-2668","severity":"moderate","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2018:0586","RHSA-2018:0587"],"bugzilla":"1535506","bugzilla_description":"CVE-2018-2668 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.21-2.el6.1","rh-mysql57-mysql-0:5.7.21-2.el7.1","rh-mysql56-mysql-0:5.6.39-1.el6.1","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mysql56-mysql-0:5.6.39-1.el7.1","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-2668.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10155","severity":"important","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503649","bugzilla_description":"CVE-2017-10155 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-10165","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503651","bugzilla_description":"CVE-2017-10165 mysql: Server: Replication unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10165.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10167","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503653","bugzilla_description":"CVE-2017-10167 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10227","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503654","bugzilla_description":"CVE-2017-10227 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10227.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10268","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503656","bugzilla_description":"CVE-2017-10268 mysql: Server: Replication unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10268.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2017-10276","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503659","bugzilla_description":"CVE-2017-10276 mysql: Server: FTS unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10279","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503663","bugzilla_description":"CVE-2017-10279 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10279.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10283","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503664","bugzilla_description":"CVE-2017-10283 mysql: Server: Performance Schema unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-10284","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503665","bugzilla_description":"CVE-2017-10284 mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10284.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10286","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503669","bugzilla_description":"CVE-2017-10286 mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10286.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-10294","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503671","bugzilla_description":"CVE-2017-10294 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10294.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10296","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503673","bugzilla_description":"CVE-2017-10296 mysql: Server: DML unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10296.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10311","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503674","bugzilla_description":"CVE-2017-10311 mysql: Server: FTS unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10313","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503677","bugzilla_description":"CVE-2017-10313 mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10313.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10314","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3265","RHSA-2017:3442"],"bugzilla":"1503679","bugzilla_description":"CVE-2017-10314 mysql: Server: Memcached unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10314.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10320","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503681","bugzilla_description":"CVE-2017-10320 mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-10365","severity":"low","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2017:3442"],"bugzilla":"1503682","bugzilla_description":"CVE-2017-10365 mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2017-10378","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2019:1258","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503684","bugzilla_description":"CVE-2017-10378 mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb102-mariadb-1:10.2.22-1.el6","rh-mariadb102-mariadb-1:10.2.22-1.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10378.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10379","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503685","bugzilla_description":"CVE-2017-10379 mysql: Client programs unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10384","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":["RHSA-2018:2439","RHSA-2017:3265","RHSA-2017:3442","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1503686","bugzilla_description":"CVE-2017-10384 mysql: Server: DDL unspecified vulnerability (CPU Oct 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.20-1.el7","rh-mariadb101-mariadb-1:10.1.29-3.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.38-1.el6","rh-mysql56-mysql-0:5.6.38-1.el7","rh-mysql57-mysql-0:5.7.20-1.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10384.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-15010","severity":"moderate","public_date":"2017-09-05T00:00:00Z","advisories":["RHSA-2017:2912","RHSA-2017:2913","RHSA-2018:1264","RHSA-2018:1263"],"bugzilla":"1493989","bugzilla_description":"CVE-2017-15010 nodejs-tough-cookie: Regular expression denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rhmap46/mysql:5.5-28","rh-nodejs4-nodejs-tough-cookie-0:2.3.3-2.el7","rh-nodejs4-nodejs-tough-cookie-0:2.3.3-2.el6","rh-nodejs6-nodejs-tough-cookie-0:2.3.3-1.el6","rh-nodejs6-nodejs-tough-cookie-0:2.3.3-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-3529","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472682","bugzilla_description":"CVE-2017-3529 mysql: Server: UDF unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3529.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-3633","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472683","bugzilla_description":"CVE-2017-3633 mysql: Server: Memcached unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3634","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472684","bugzilla_description":"CVE-2017-3634 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3635","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1472685","bugzilla_description":"CVE-2017-3635 mysql: C API unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-3636","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2018:2439","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1472686","bugzilla_description":"CVE-2017-3636 mysql: Client programs unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3636.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-3637","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472687","bugzilla_description":"CVE-2017-3637 mysql: X Plugin unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-3638","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472688","bugzilla_description":"CVE-2017-3638 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3639","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472689","bugzilla_description":"CVE-2017-3639 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3640","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472692","bugzilla_description":"CVE-2017-3640 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3640.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3641","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2018:2439","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1472693","bugzilla_description":"CVE-2017-3641 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3642","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472695","bugzilla_description":"CVE-2017-3642 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3642.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3643","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472697","bugzilla_description":"CVE-2017-3643 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3643.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3644","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472698","bugzilla_description":"CVE-2017-3644 mysql: Server: DML unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3644.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3645","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472700","bugzilla_description":"CVE-2017-3645 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3646","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472701","bugzilla_description":"CVE-2017-3646 mysql: X Plugin unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3646.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3647","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472703","bugzilla_description":"CVE-2017-3647 mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3648","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472704","bugzilla_description":"CVE-2017-3648 mysql: Server: Charsets unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3648.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3649","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472705","bugzilla_description":"CVE-2017-3649 mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3649.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3650","severity":"low","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1472706","bugzilla_description":"CVE-2017-3650 mysql: C API unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3650.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3651","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2016:2927","RHSA-2018:2439","RHSA-2017:2192","RHSA-2016:2928"],"bugzilla":"1472708","bugzilla_description":"CVE-2017-3651 mysql: Client mysqldump unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb101-mariadb-1:10.1.19-6.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-1:5.5.56-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3651.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3652","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1472710","bugzilla_description":"CVE-2017-3652 mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2017-3653","severity":"low","public_date":"2017-07-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2018:2439","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1472711","bugzilla_description":"CVE-2017-3653 mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","mariadb-1:5.5.60-1.el7_5","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3653.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-10789","severity":"moderate","public_date":"2017-07-01T00:00:00Z","advisories":[],"bugzilla":"1467606","bugzilla_description":"CVE-2017-10789 perl-DBD-MySQL: Possible MITM attack when mysql_ssl=1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10789.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10788","severity":"moderate","public_date":"2017-06-08T00:00:00Z","advisories":[],"bugzilla":"1467600","bugzilla_description":"CVE-2017-10788 perl-DBD-MySQL: Use-after-free when calling mysql_stmt_error() after mysql_stmt_close()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10788.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3523","severity":"important","public_date":"2017-04-21T00:00:00Z","advisories":[],"bugzilla":"1444759","bugzilla_description":"CVE-2017-3523 mysql-connector-java: Improper automatic deserialization of binary data (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2017-3308","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443358","bugzilla_description":"CVE-2017-3308 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3308.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3309","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443359","bugzilla_description":"CVE-2017-3309 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3309.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3329","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443360","bugzilla_description":"CVE-2017-3329 mysql: Server: Thread Pooling unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3329.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3331","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443362","bugzilla_description":"CVE-2017-3331 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3450","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443363","bugzilla_description":"CVE-2017-3450 mysql: Server: Memcached unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3450.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3452","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787"],"bugzilla":"1443364","bugzilla_description":"CVE-2017-3452 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3452.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3453","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443365","bugzilla_description":"CVE-2017-3453 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3453.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3454","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443366","bugzilla_description":"CVE-2017-3454 mysql: Server: InnoDB unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3454.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-3455","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443368","bugzilla_description":"CVE-2017-3455 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3455.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-3456","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443369","bugzilla_description":"CVE-2017-3456 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3456.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3457","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443371","bugzilla_description":"CVE-2017-3457 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3457.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3458","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443372","bugzilla_description":"CVE-2017-3458 mysql: Server: DML unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3459","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443374","bugzilla_description":"CVE-2017-3459 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3460","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443375","bugzilla_description":"CVE-2017-3460 mysql: Server: Audit Plug-in unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3461","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443376","bugzilla_description":"CVE-2017-3461 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3461.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3462","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443377","bugzilla_description":"CVE-2017-3462 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3462.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3463","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443378","bugzilla_description":"CVE-2017-3463 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3463.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3464","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1443379","bugzilla_description":"CVE-2017-3464 mysql: Server: DDL unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3464.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3465","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443380","bugzilla_description":"CVE-2017-3465 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3465.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-3467","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443382","bugzilla_description":"CVE-2017-3467 mysql: Server: C API unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3467.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-3468","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1443385","bugzilla_description":"CVE-2017-3468 mysql: Server: Security: Encryption unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3599","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1443386","bugzilla_description":"CVE-2017-3599 mysql: integer underflow in get_56_lenc_string() leading to DoS (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3599.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3586","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1444406","bugzilla_description":"CVE-2017-3586 mysql-connector-java: Connector/J unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3586.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2017-3589","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1444407","bugzilla_description":"CVE-2017-3589 mysql-connector-java: Connector/J unspecified vulnerability (CPU Apr 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3589.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-3305","severity":"moderate","public_date":"2017-03-17T00:00:00Z","advisories":["RHSA-2017:2787"],"bugzilla":"1431690","bugzilla_description":"CVE-2017-3305 mysql: incorrect enforcement of ssl-mode=REQUIRED in MySQL 5.5 and 5.6","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":["rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3305.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2016-5483","severity":"moderate","public_date":"2017-03-09T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2016:2927","RHSA-2017:2192","RHSA-2016:2928","RHSA-2016:2131"],"bugzilla":"1433010","bugzilla_description":"CVE-2017-3600 mariadb, mysql: Incorrect input validation allowing code execution via mysqldump","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el6","rh-mysql56-mysql-0:5.6.37-5.el7","mariadb55-mariadb-0:5.5.53-1.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-1:5.5.56-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5483.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-3600","severity":"moderate","public_date":"2017-03-09T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2016:2927","RHSA-2017:2192","RHSA-2016:2928"],"bugzilla":"1433010","bugzilla_description":"CVE-2017-3600 mariadb, mysql: Incorrect input validation allowing code execution via mysqldump","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb101-mariadb-1:10.1.19-6.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-1:5.5.56-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3600.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-3302","severity":"low","public_date":"2017-01-27T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1422119","bugzilla_description":"CVE-2017-3302 mysql: prepared statement handle use-after-free after disconnect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-8318","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1414335","bugzilla_description":"CVE-2016-8318 mysql: Server: Security: Encryption  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8318.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2016-8327","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1414337","bugzilla_description":"CVE-2016-8327 mysql: Server: Replication  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8327.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3238","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414338","bugzilla_description":"CVE-2017-3238 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3238.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3243","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414340","bugzilla_description":"CVE-2017-3243 mysql: Server: Charsets unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3243.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-3244","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414342","bugzilla_description":"CVE-2017-3244 mysql: Server: DML unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3251","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414343","bugzilla_description":"CVE-2017-3251 mysql: Server: Optimizer  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2017-3256","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414345","bugzilla_description":"CVE-2017-3256 mysql: Server: Replication  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3256.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3257","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414350","bugzilla_description":"CVE-2017-3257 mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3258","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414351","bugzilla_description":"CVE-2017-3258 mysql: Server: DDL unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3258.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3273","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886"],"bugzilla":"1414352","bugzilla_description":"CVE-2017-3273 mysql: Server: DDL  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mysql56-mysql-0:5.6.37-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3273.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3313","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414353","bugzilla_description":"CVE-2017-3313 mysql: Server: MyISAM unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-3317","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414355","bugzilla_description":"CVE-2017-3317 mysql: Logging unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.0"},{"CVE":"CVE-2017-3318","severity":"moderate","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414357","bugzilla_description":"CVE-2017-3318 mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3318.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2017-3319","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414358","bugzilla_description":"CVE-2017-3319 mysql: Server: X Plugin  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3319.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-3320","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":["RHSA-2017:2886"],"bugzilla":"1414360","bugzilla_description":"CVE-2017-3320 mysql: Server: Security: Encryption  unspecified vulnerability (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mysql57-mysql-0:5.7.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2017-3312","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414133","bugzilla_description":"CVE-2017-3312 mysql: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 fix (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3312.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-3265","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414423","bugzilla_description":"CVE-2017-3265 mysql: unsafe chmod/chown use in init script (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3265.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-3291","severity":"moderate","public_date":"2017-01-17T00:00:00Z","advisories":["RHSA-2017:2787","RHSA-2017:2886","RHSA-2017:2192","RHSA-2018:0279","RHSA-2018:0574"],"bugzilla":"1414429","bugzilla_description":"CVE-2017-3291 mysql: unrestricted mysqld_safe's ledir (CPU Jan 2017)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":["rh-mysql57-mysql-0:5.7.19-6.el6","rh-mariadb101-mariadb-1:10.1.29-3.el7","rh-mysql57-mysql-0:5.7.19-6.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mysql56-mysql-0:5.6.37-5.el7","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.37-5.el6","mariadb-1:5.5.56-2.el7","rh-mariadb101-mariadb-1:10.1.29-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3291.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-1251","severity":"moderate","public_date":"2016-11-18T00:00:00Z","advisories":[],"bugzilla":"1399580","bugzilla_description":"CVE-2016-1251 perl-DBD-MySQL: Use after free when using prepared statements","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-1249","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395591","bugzilla_description":"CVE-2016-1249 perl-DBD-MySQL: Out-of-bounds read when using server-side prepared statement support","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1249.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-3492","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386554","bugzilla_description":"CVE-2016-3492 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3492.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3495","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386555","bugzilla_description":"CVE-2016-3495 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3495.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5507","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2749"],"bugzilla":"1386556","bugzilla_description":"CVE-2016-5507 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.34-2.el6","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5584","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386557","bugzilla_description":"CVE-2016-5584 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5584.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2016-5609","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386559","bugzilla_description":"CVE-2016-5609 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5609.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5612","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:1601"],"bugzilla":"1386561","bugzilla_description":"CVE-2016-5612 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5612.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5617","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2130","RHSA-2017:2192","RHSA-2018:0279","RHSA-2016:2749","RHSA-2018:0574"],"bugzilla":"1386564","bugzilla_description":"CVE-2016-5617 mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.34-2.el6","mariadb-1:5.5.56-2.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-6664","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2130","RHSA-2017:2192","RHSA-2018:0279","RHSA-2016:2749","RHSA-2018:0574"],"bugzilla":"1386564","bugzilla_description":"CVE-2016-5617 mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","rh-mariadb100-mariadb-1:10.0.33-3.el6","rh-mariadb100-mariadb-1:10.0.33-3.el7","rh-mysql56-mysql-0:5.6.34-2.el6","mariadb-1:5.5.56-2.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6664.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-5624","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928"],"bugzilla":"1386566","bugzilla_description":"CVE-2016-5624 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5625","severity":"important","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386567","bugzilla_description":"CVE-2016-5625 mysql: unspecified vulnerability in subcomponent: Server: Packaging (CPU October 2016)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5625.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-5626","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386568","bugzilla_description":"CVE-2016-5626 mysql: unspecified vulnerability in subcomponent: Server: GIS (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5626.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5627","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386570","bugzilla_description":"CVE-2016-5627 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5628","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386571","bugzilla_description":"CVE-2016-5628 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5628.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5629","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386572","bugzilla_description":"CVE-2016-5629 mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5630","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2927","RHSA-2016:1601"],"bugzilla":"1386573","bugzilla_description":"CVE-2016-5630 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5630.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5631","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386574","bugzilla_description":"CVE-2016-5631 mysql: unspecified vulnerability in subcomponent: Server: Memcached (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5631.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5632","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386575","bugzilla_description":"CVE-2016-5632 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5632.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5633","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386576","bugzilla_description":"CVE-2016-5633 mysql: unspecified vulnerability in subcomponent: Server: Performance Schema (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5634","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386579","bugzilla_description":"CVE-2016-5634 mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5635","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386580","bugzilla_description":"CVE-2016-5635 mysql: unspecified vulnerability in subcomponent: Server: Security: Audit (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-7440","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386584","bugzilla_description":"CVE-2016-7440 yaSSL: AES key leak via cache-bank timing side channel attack","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7440.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2016-8283","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1386585","bugzilla_description":"CVE-2016-8283 mysql: unspecified vulnerability in subcomponent: Server: Types (CPU October 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-8284","severity":"low","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386587","bugzilla_description":"CVE-2016-8284 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU October 2016)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8284.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"1.8"},{"CVE":"CVE-2016-8286","severity":"low","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386588","bugzilla_description":"CVE-2016-8286 mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8286.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-8287","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386589","bugzilla_description":"CVE-2016-8287 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU October 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8287.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.5"},{"CVE":"CVE-2016-8288","severity":"low","public_date":"2016-10-19T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1386590","bugzilla_description":"CVE-2016-8288 mysql: unspecified vulnerability in subcomponent: Server: InnoDB Plugin (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8288.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-8289","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386591","bugzilla_description":"CVE-2016-8289 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8289.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-8290","severity":"moderate","public_date":"2016-10-19T00:00:00Z","advisories":[],"bugzilla":"1386592","bugzilla_description":"CVE-2016-8290 mysql: unspecified vulnerability in subcomponent: Server: Performance Schema (CPU October 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8290.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2016-1246","severity":"moderate","public_date":"2016-10-03T00:00:00Z","advisories":[],"bugzilla":"1380375","bugzilla_description":"CVE-2016-1246 perl-DBD-MySQL: Buffer overflow triggered by user supplied data","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-6662","severity":"important","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2059","RHSA-2016:2058","RHSA-2016:2130","RHSA-2016:2077","RHSA-2016:2131","RHSA-2017:0184","RHSA-2016:2060","RHSA-2016:2062","RHSA-2016:2061","RHSA-2016:2927","RHSA-2016:2928","RHSA-2016:2749"],"bugzilla":"1375198","bugzilla_description":"CVE-2016-6662 mysql: general_log can write to configuration files, leading to privilege escalation (CPU Oct 2016)","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-732","affected_packages":["mariadb-galera-1:5.5.42-1.2.el7ost","mariadb-galera-0:5.5.42-1.1.el6ost","mariadb55-mariadb-0:5.5.53-1.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","mysql-0:5.1.73-8.el6_8","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mysql56-mysql-0:5.6.34-2.el7","mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","rh-mariadb101-mariadb-1:10.1.19-6.el6","rh-mariadb101-mariadb-1:10.1.19-6.el7","mariadb-galera-1:5.5.42-5.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6662.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2016-5616","severity":"moderate","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2017:0184","RHSA-2016:2749"],"bugzilla":"1378936","bugzilla_description":"CVE-2016-5616 CVE-2016-6663 mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-362","affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","mysql-0:5.1.73-8.el6_8","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6663","severity":"moderate","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2016:2595","RHSA-2016:2130","RHSA-2016:2927","RHSA-2016:2131","RHSA-2016:2928","RHSA-2017:0184","RHSA-2016:2749"],"bugzilla":"1378936","bugzilla_description":"CVE-2016-5616 CVE-2016-6663 mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-362","affected_packages":["mysql55-mysql-0:5.5.52-1.el6","mysql55-mysql-0:5.5.52-1.el7","mariadb-1:5.5.52-1.el7","mariadb55-mariadb-0:5.5.53-1.el6","rh-mariadb101-mariadb-1:10.1.19-6.el6","mariadb55-mariadb-0:5.5.53-1.el7","rh-mysql56-mysql-0:5.6.34-2.el6","rh-mariadb100-mariadb-1:10.0.28-5.el6","mysql-0:5.1.73-8.el6_8","rh-mariadb100-mariadb-1:10.0.28-5.el7","rh-mariadb101-mariadb-1:10.1.19-6.el7","rh-mysql56-mysql-0:5.6.34-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6663.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-3424","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358199","bugzilla_description":"CVE-2016-3424 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3424.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-3440","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358200","bugzilla_description":"CVE-2016-3440 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3440.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3452","severity":"low","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1358201","bugzilla_description":"CVE-2016-3452 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3452.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-3459","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1601"],"bugzilla":"1358202","bugzilla_description":"CVE-2016-3459 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-3471","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1358203","bugzilla_description":"CVE-2016-3471 mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:P/I:P/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3471.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2016-3477","severity":"important","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358205","bugzilla_description":"CVE-2016-3477 mysql: unspecified vulnerability in subcomponent: Server: Parser (CPU July 2016)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-3486","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358206","bugzilla_description":"CVE-2016-3486 mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3501","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358207","bugzilla_description":"CVE-2016-3501 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3501.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3518","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358208","bugzilla_description":"CVE-2016-3518 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3521","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358209","bugzilla_description":"CVE-2016-3521 mysql: unspecified vulnerability in subcomponent: Server: Types (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3521.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-3588","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358210","bugzilla_description":"CVE-2016-3588 mysql: unspecified vulnerability in subcomponent: Server: InnoDB  (CPU July 2016)","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3588.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-3614","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358211","bugzilla_description":"CVE-2016-3614 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3614.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-3615","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358212","bugzilla_description":"CVE-2016-3615 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU July 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-5436","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358213","bugzilla_description":"CVE-2016-5436 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5437","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358214","bugzilla_description":"CVE-2016-5437 mysql: unspecified vulnerability in subcomponent: Server: Log (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5437.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5439","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1601"],"bugzilla":"1358216","bugzilla_description":"CVE-2016-5439 mysql: unspecified vulnerability in subcomponent: Server: Privileges (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.32-1.el7","rh-mysql56-mysql-0:5.6.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5439.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5440","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1480","RHSA-2016:1602","RHSA-2016:1603","RHSA-2016:1604","RHSA-2016:1637","RHSA-2016:1601"],"bugzilla":"1358218","bugzilla_description":"CVE-2016-5440 mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.50-1.el7","mariadb55-mariadb-0:5.5.50-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el7","rh-mariadb101-mariadb-1:10.1.16-1.el6","rh-mysql56-mysql-0:5.6.32-1.el7","rh-mariadb101-mariadb-1:10.1.16-1.el7","mariadb-1:5.5.50-1.el7_2","rh-mysql56-mysql-0:5.6.32-1.el6","rh-mariadb100-mariadb-1:10.0.26-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5440.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5441","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358219","bugzilla_description":"CVE-2016-5441 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5441.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5442","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358221","bugzilla_description":"CVE-2016-5442 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption  (CPU July 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5442.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2016-5443","severity":"moderate","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358222","bugzilla_description":"CVE-2016-5443 mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5443.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-5444","severity":"low","public_date":"2016-07-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1358223","bugzilla_description":"CVE-2016-5444 mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5444.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-0639","severity":"critical","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1329238","bugzilla_description":"CVE-2016-0639 mysql: unspecified vulnerability in subcomponent: Server: Pluggable Authentication (CPU April 2016)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0639.json"},{"CVE":"CVE-2016-0640","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329239","bugzilla_description":"CVE-2016-0640 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0640.json"},{"CVE":"CVE-2016-0641","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329241","bugzilla_description":"CVE-2016-0641 mysql: unspecified vulnerability in subcomponent: Server: MyISAM (CPU April 2016)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0641.json"},{"CVE":"CVE-2016-0642","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1329243","bugzilla_description":"CVE-2016-0642 mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU April 2016)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:P/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0642.json"},{"CVE":"CVE-2016-0643","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329245","bugzilla_description":"CVE-2016-0643 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0643.json"},{"CVE":"CVE-2016-0644","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329247","bugzilla_description":"CVE-2016-0644 mysql: unspecified vulnerability in subcomponent: Server: DDL (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0644.json"},{"CVE":"CVE-2016-0646","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329248","bugzilla_description":"CVE-2016-0646 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0646.json"},{"CVE":"CVE-2016-0647","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329249","bugzilla_description":"CVE-2016-0647 mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0647.json"},{"CVE":"CVE-2016-0648","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329251","bugzilla_description":"CVE-2016-0648 mysql: unspecified vulnerability in subcomponent: Server: PS (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0648.json"},{"CVE":"CVE-2016-0649","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329252","bugzilla_description":"CVE-2016-0649 mysql: unspecified vulnerability in subcomponent: Server: PS (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0649.json"},{"CVE":"CVE-2016-0650","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329253","bugzilla_description":"CVE-2016-0650 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU April 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0650.json"},{"CVE":"CVE-2016-0651","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1329254","bugzilla_description":"CVE-2016-0651 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0651.json"},{"CVE":"CVE-2016-0652","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329255","bugzilla_description":"CVE-2016-0652 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0652.json"},{"CVE":"CVE-2016-0653","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329257","bugzilla_description":"CVE-2016-0653 mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0653.json"},{"CVE":"CVE-2016-0654","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329258","bugzilla_description":"CVE-2016-0654 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0654.json"},{"CVE":"CVE-2016-0655","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:0705"],"bugzilla":"1329259","bugzilla_description":"CVE-2016-0655 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0655.json"},{"CVE":"CVE-2016-0656","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329260","bugzilla_description":"CVE-2016-0656 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0656.json"},{"CVE":"CVE-2016-0657","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329261","bugzilla_description":"CVE-2016-0657 mysql: unspecified vulnerability in subcomponent: Server: JSON (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0657.json"},{"CVE":"CVE-2016-0658","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329263","bugzilla_description":"CVE-2016-0658 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0658.json"},{"CVE":"CVE-2016-0659","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329265","bugzilla_description":"CVE-2016-0659 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0659.json"},{"CVE":"CVE-2016-0661","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1329266","bugzilla_description":"CVE-2016-0661 mysql: unspecified vulnerability in subcomponent: Server: Options (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0661.json"},{"CVE":"CVE-2016-0662","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329267","bugzilla_description":"CVE-2016-0662 mysql: unspecified vulnerability in subcomponent: Server: Partition (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0662.json"},{"CVE":"CVE-2016-0663","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329268","bugzilla_description":"CVE-2016-0663 mysql: unspecified vulnerability in subcomponent: Server: Performance Schema (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0663.json"},{"CVE":"CVE-2016-0665","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1329269","bugzilla_description":"CVE-2016-0665 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0665.json"},{"CVE":"CVE-2016-0666","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:1602"],"bugzilla":"1329270","bugzilla_description":"CVE-2016-0666 mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU April 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6","mariadb-1:5.5.50-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0666.json"},{"CVE":"CVE-2016-0667","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":[],"bugzilla":"1329271","bugzilla_description":"CVE-2016-0667 mysql: unspecified vulnerability in subcomponent: Server: Locking (CPU April 2016)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0667.json"},{"CVE":"CVE-2016-0668","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:0705"],"bugzilla":"1329273","bugzilla_description":"CVE-2016-0668 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)","cvss_score":1.7,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0668.json"},{"CVE":"CVE-2016-2047","severity":"moderate","public_date":"2015-11-30T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301874","bugzilla_description":"CVE-2016-2047 mysql: ssl-validate-cert incorrect hostname check","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2047.json"},{"CVE":"CVE-2015-8949","severity":"low","public_date":"2015-11-14T00:00:00Z","advisories":[],"bugzilla":"1360279","bugzilla_description":"CVE-2015-8949 perl-DBD-MySQL: Use after free when my_login fails","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8949.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-4766","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1630"],"bugzilla":"1274748","bugzilla_description":"CVE-2015-4766 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4766.json"},{"CVE":"CVE-2015-4791","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274749","bugzilla_description":"CVE-2015-4791 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4791.json"},{"CVE":"CVE-2015-4792","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274752","bugzilla_description":"CVE-2015-4792 mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4792.json"},{"CVE":"CVE-2015-4800","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274754","bugzilla_description":"CVE-2015-4800 mysql: unspecified vulnerability related to Server:Optimizer (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4800.json"},{"CVE":"CVE-2015-4802","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274756","bugzilla_description":"CVE-2015-4802 mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4802.json"},{"CVE":"CVE-2015-4807","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274758","bugzilla_description":"CVE-2015-4807 mysql: unspecified vulnerability related to Server:Query Cache (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4807.json"},{"CVE":"CVE-2015-4815","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274759","bugzilla_description":"CVE-2015-4815 mysql: unspecified vulnerability related to Server:DDL (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4815.json"},{"CVE":"CVE-2015-4816","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1481","RHSA-2015:1629","RHSA-2015:1628","RHSA-2016:0534"],"bugzilla":"1274761","bugzilla_description":"CVE-2015-4816 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.45-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.49-1.el6","mysql55-mysql-0:5.5.45-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4816.json"},{"CVE":"CVE-2015-4819","severity":"low","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1481","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628","RHSA-2016:0534"],"bugzilla":"1274764","bugzilla_description":"CVE-2015-4819 mysql: unspecified vulnerability related to Client programs (CPU October 2015)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.45-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.49-1.el6","mysql55-mysql-0:5.5.45-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4819.json"},{"CVE":"CVE-2015-4826","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274766","bugzilla_description":"CVE-2015-4826 mysql: unspecified vulnerability related to Server:Types (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4826.json"},{"CVE":"CVE-2015-4830","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274767","bugzilla_description":"CVE-2015-4830 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4830.json"},{"CVE":"CVE-2015-4833","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1630"],"bugzilla":"1274770","bugzilla_description":"CVE-2015-4833 mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4833.json"},{"CVE":"CVE-2015-4836","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274771","bugzilla_description":"CVE-2015-4836 mysql: unspecified vulnerability related to Server:SP (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4836.json"},{"CVE":"CVE-2015-4858","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274773","bugzilla_description":"CVE-2015-4858 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4858.json"},{"CVE":"CVE-2015-4861","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274776","bugzilla_description":"CVE-2015-4861 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4861.json"},{"CVE":"CVE-2015-4862","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274778","bugzilla_description":"CVE-2015-4862 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4862.json"},{"CVE":"CVE-2015-4864","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1274779","bugzilla_description":"CVE-2015-4864 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4864.json"},{"CVE":"CVE-2015-4866","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1646"],"bugzilla":"1274780","bugzilla_description":"CVE-2015-4866 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4866.json"},{"CVE":"CVE-2015-4870","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274781","bugzilla_description":"CVE-2015-4870 mysql: unspecified vulnerability related to Server:Parser (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4870.json"},{"CVE":"CVE-2015-4879","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1481","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628","RHSA-2016:0534"],"bugzilla":"1274783","bugzilla_description":"CVE-2015-4879 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.45-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.49-1.el6","mysql55-mysql-0:5.5.45-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4879.json"},{"CVE":"CVE-2015-4890","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274785","bugzilla_description":"CVE-2015-4890 mysql: unspecified vulnerability related to Server:Replication (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4890.json"},{"CVE":"CVE-2015-4895","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2015:1630"],"bugzilla":"1274786","bugzilla_description":"CVE-2015-4895 mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4895.json"},{"CVE":"CVE-2015-4904","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2015:1630"],"bugzilla":"1274787","bugzilla_description":"CVE-2015-4904 mysql: unspecified vulnerability related to libmysqld (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4904.json"},{"CVE":"CVE-2015-4905","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274790","bugzilla_description":"CVE-2015-4905 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4905.json"},{"CVE":"CVE-2015-4910","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1274792","bugzilla_description":"CVE-2015-4910 mysql: unspecified vulnerability related to Server:Memcached (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4910.json"},{"CVE":"CVE-2015-4913","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1274794","bugzilla_description":"CVE-2015-4913 mysql: unspecified vulnerability related to Server:DML (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4913.json"},{"CVE":"CVE-2015-4730","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1276265","bugzilla_description":"CVE-2015-4730 mysql: unspecified vulnerability related to Server:Types (CPU October 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4730.json"},{"CVE":"CVE-2015-2582","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244768","bugzilla_description":"CVE-2015-2582 mysql: unspecified vulnerability related to Server:GIS (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2582.json"},{"CVE":"CVE-2015-2611","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244769","bugzilla_description":"CVE-2015-2611 mysql: unspecified vulnerability related to Server:DML (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2611.json"},{"CVE":"CVE-2015-2617","severity":"important","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244770","bugzilla_description":"CVE-2015-2617 mysql: unspecified vulnerability related to Server:Partition (CPU July 2015)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2617.json"},{"CVE":"CVE-2015-2620","severity":"low","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244771","bugzilla_description":"CVE-2015-2620 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU July 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2620.json"},{"CVE":"CVE-2015-2639","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244772","bugzilla_description":"CVE-2015-2639 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2639.json"},{"CVE":"CVE-2015-2641","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244773","bugzilla_description":"CVE-2015-2641 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2641.json"},{"CVE":"CVE-2015-2643","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244774","bugzilla_description":"CVE-2015-2643 mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2643.json"},{"CVE":"CVE-2015-2648","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244775","bugzilla_description":"CVE-2015-2648 mysql: unspecified vulnerability related to Server:DML (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2648.json"},{"CVE":"CVE-2015-2661","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244776","bugzilla_description":"CVE-2015-2661 mysql: unspecified vulnerability related to Client (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2661.json"},{"CVE":"CVE-2015-4737","severity":"low","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244778","bugzilla_description":"CVE-2015-4737 mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU July 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4737.json"},{"CVE":"CVE-2015-4752","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244779","bugzilla_description":"CVE-2015-4752 mysql: unspecified vulnerability related to Server:I_S (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4752.json"},{"CVE":"CVE-2015-4756","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244780","bugzilla_description":"CVE-2015-4756 mysql: unspecified vulnerability related to Server:InnoDB (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4756.json"},{"CVE":"CVE-2015-4757","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1630","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1244781","bugzilla_description":"CVE-2015-4757 mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4757.json"},{"CVE":"CVE-2015-4761","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244782","bugzilla_description":"CVE-2015-4761 mysql: unspecified vulnerability related to Server:Memcached (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4761.json"},{"CVE":"CVE-2015-4767","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244784","bugzilla_description":"CVE-2015-4767 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4767.json"},{"CVE":"CVE-2015-4769","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244785","bugzilla_description":"CVE-2015-4769 mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4769.json"},{"CVE":"CVE-2015-4771","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244786","bugzilla_description":"CVE-2015-4771 mysql: unspecified vulnerability related to Server:RBR (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4771.json"},{"CVE":"CVE-2015-4772","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1646","RHSA-2015:1630"],"bugzilla":"1244787","bugzilla_description":"CVE-2015-4772 mysql: unspecified vulnerability related to Server:Partition (CPU July 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.26-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","rh-mysql56-mysql-0:5.6.26-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4772.json"},{"CVE":"CVE-2015-3152","severity":"moderate","public_date":"2015-04-29T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665"],"bugzilla":"1217506","bugzilla_description":"CVE-2015-3152 mysql: use of SSL/TLS can not be enforced in mysql client library (oCERT-2015-003, BACKRONYM)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.20-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3152.json"},{"CVE":"CVE-2015-0405","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212753","bugzilla_description":"CVE-2015-0405 mysql: unspecified vulnerability related to Server:XA (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0405.json"},{"CVE":"CVE-2015-0438","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212755","bugzilla_description":"CVE-2015-0438 mysql: unspecified vulnerability related to Server:Partition (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0438.json"},{"CVE":"CVE-2015-0498","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212757","bugzilla_description":"CVE-2015-0498 mysql: unspecified vulnerability related to Server:Replication (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0498.json"},{"CVE":"CVE-2015-0501","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212758","bugzilla_description":"CVE-2015-0501 mysql: unspecified vulnerability related to Server:Compiling (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0501.json"},{"CVE":"CVE-2015-0506","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212759","bugzilla_description":"CVE-2015-0506 mysql: unspecified vulnerability related to Server:InnoDB (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0506.json"},{"CVE":"CVE-2015-0511","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212760","bugzilla_description":"CVE-2015-0511 mysql: unspecified vulnerability related to Server:SP (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0511.json"},{"CVE":"CVE-2015-2568","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212763","bugzilla_description":"CVE-2015-2568 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2568.json"},{"CVE":"CVE-2015-2575","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212764","bugzilla_description":"CVE-2015-2575 mysql-connector-java: unspecified vulnerability related to Connector/J (CPU April 2015)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2575.json"},{"CVE":"CVE-2015-0423","severity":"low","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212765","bugzilla_description":"CVE-2015-0423 mysql: unspecified vulnerability related to Server:Optimizer (CPU April 2015)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0423.json"},{"CVE":"CVE-2015-0439","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212767","bugzilla_description":"CVE-2015-0439 mysql: unspecified vulnerability related to Server:InnoDB (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0439.json"},{"CVE":"CVE-2015-0499","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212768","bugzilla_description":"CVE-2015-0499 mysql: unspecified vulnerability related to Server:Federated (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0499.json"},{"CVE":"CVE-2015-0503","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212769","bugzilla_description":"CVE-2015-0503 mysql: unspecified vulnerability related to Server:Partition (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0503.json"},{"CVE":"CVE-2015-0507","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212770","bugzilla_description":"CVE-2015-0507 mysql: unspecified vulnerability related to Server:Memcached (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0507.json"},{"CVE":"CVE-2015-2566","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212771","bugzilla_description":"CVE-2015-2566 mysql: unspecified vulnerability related to Server:DML (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2566.json"},{"CVE":"CVE-2015-2571","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212772","bugzilla_description":"CVE-2015-2571 mysql: unspecified vulnerability related to Server:Optimizer (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2571.json"},{"CVE":"CVE-2015-2576","severity":"low","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212774","bugzilla_description":"CVE-2015-2576 mysql-utilities: unspecified vulnerability related to Installation (CPU April 2015)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2576.json"},{"CVE":"CVE-2015-0433","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212776","bugzilla_description":"CVE-2015-0433 mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0433.json"},{"CVE":"CVE-2015-0441","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212777","bugzilla_description":"CVE-2015-0441 mysql: unspecified vulnerability related to Server:Security:Encryption (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0441.json"},{"CVE":"CVE-2015-0500","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212779","bugzilla_description":"CVE-2015-0500 mysql: unspecified vulnerability related to Server:Information Schema (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0500.json"},{"CVE":"CVE-2015-0505","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHSA-2015:1646","RHSA-2015:1665","RHSA-2015:1629","RHSA-2015:1628"],"bugzilla":"1212780","bugzilla_description":"CVE-2015-0505 mysql: unspecified vulnerability related to Server:DDL (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.45-1.el6","rh-mariadb100-mariadb-1:10.0.20-1.el6","mysql55-mysql-0:5.5.45-1.el5","rh-mariadb100-mariadb-1:10.0.20-1.el7","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0505.json"},{"CVE":"CVE-2015-0508","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212781","bugzilla_description":"CVE-2015-0508 mysql: unspecified vulnerability related to Server:InnoDB (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0508.json"},{"CVE":"CVE-2015-2567","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":[],"bugzilla":"1212782","bugzilla_description":"CVE-2015-2567 mysql: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2567.json"},{"CVE":"CVE-2015-2573","severity":"moderate","public_date":"2015-04-15T00:00:00Z","advisories":["RHSA-2015:1647","RHBA-2015:1659","RHSA-2015:1665","RHBA-2015:1762","RHSA-2015:1629","RHSA-2015:1628","RHBA-2015:1763"],"bugzilla":"1212783","bugzilla_description":"CVE-2015-2573 mysql: unspecified vulnerability related to Server:DDL (CPU April 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-galera-1:5.5.42-1.el7ost","mysql55-mysql-0:5.5.45-1.el6","mysql55-mysql-0:5.5.45-1.el5","mysql55-mysql-0:5.5.45-1.el7","mariadb-1:5.5.44-1.ael7b_1","mariadb-galera-0:5.5.42-1.el6ost","mariadb55-mariadb-0:5.5.44-1.el7","mariadb55-mariadb-0:5.5.44-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2573.json"},{"CVE":"CVE-2015-2305","severity":"moderate","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1191049","bugzilla_description":"CVE-2015-2305 regex: heap overflow in regcomp() on 32-bit architectures","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2305.json"},{"CVE":"CVE-2014-6568","severity":"low","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184552","bugzilla_description":"CVE-2014-6568 mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU Jan 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6568.json"},{"CVE":"CVE-2015-0374","severity":"low","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184553","bugzilla_description":"CVE-2015-0374 mysql: unspecified vulnerability related to Server:Security:Privileges:Foreign Key (CPU Jan 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0374.json"},{"CVE":"CVE-2015-0381","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184554","bugzilla_description":"CVE-2015-0381 mysql: unspecified vulnerability related to Server:Replication (CPU Jan 2015)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0381.json"},{"CVE":"CVE-2015-0382","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184555","bugzilla_description":"CVE-2015-0382 mysql: unspecified vulnerability related to Server:Replication (CPU Jan 2015)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0382.json"},{"CVE":"CVE-2015-0385","severity":"low","public_date":"2015-01-21T00:00:00Z","advisories":[],"bugzilla":"1184556","bugzilla_description":"CVE-2015-0385 mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU Jan 2015)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0385.json"},{"CVE":"CVE-2015-0391","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHSA-2015:0117","RHSA-2015:0116","RHSA-2015:1628"],"bugzilla":"1184557","bugzilla_description":"CVE-2015-0391 mysql: unspecified vulnerability related to Server:DDL (CPU Jan 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mysql55-mysql-0:5.5.45-1.el5","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0391.json"},{"CVE":"CVE-2015-0409","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":[],"bugzilla":"1184559","bugzilla_description":"CVE-2015-0409 mysql: unspecified vulnerability related to Server:Optimizer (CPU Jan 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0409.json"},{"CVE":"CVE-2015-0411","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184560","bugzilla_description":"CVE-2015-0411 mysql: unspecified vulnerability related to Server:Security:Encryption (CPU Jan 2015)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0411.json"},{"CVE":"CVE-2015-0432","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0118","RHBA-2015:0825","RHSA-2015:0117","RHSA-2015:0116","RHBA-2015:0928","RHSA-2015:1628","RHBA-2015:0820"],"bugzilla":"1184561","bugzilla_description":"CVE-2015-0432 mysql: unspecified vulnerability related to Server:InnoDB:DDL:Foreign Key (CPU Jan 2015)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.41-2.el7","mariadb-1:5.5.41-2.el7_0","mysql55-mysql-0:5.5.41-2.el6","mariadb-galera-0:5.5.41-1.el6ost","mysql55-mysql-0:5.5.45-1.el5","mariadb-galera-1:5.5.41-2.el7ost","mariadb55-mariadb-0:5.5.41-12.el7","mariadb55-mariadb-0:5.5.41-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0432.json"},{"CVE":"CVE-2015-7744","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301488","bugzilla_description":"CVE-2015-7744 yaSSL, wolfSSL: insufficient hardening of RSA-CRT implementation (Oracle MySQL CPU Jan 2016)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7744.json"},{"CVE":"CVE-2016-0502","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301489","bugzilla_description":"CVE-2016-0502 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0502.json"},{"CVE":"CVE-2016-0503","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301490","bugzilla_description":"CVE-2016-0503 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0503.json"},{"CVE":"CVE-2016-0504","severity":"important","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301491","bugzilla_description":"CVE-2016-0504 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0504.json"},{"CVE":"CVE-2016-0505","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301492","bugzilla_description":"CVE-2016-0505 mysql: unspecified vulnerability in subcomponent: Server: Options (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0505.json"},{"CVE":"CVE-2016-0546","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301493","bugzilla_description":"CVE-2016-0546 mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0546.json"},{"CVE":"CVE-2016-0594","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301494","bugzilla_description":"CVE-2016-0594 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0594.json"},{"CVE":"CVE-2016-0595","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301495","bugzilla_description":"CVE-2016-0595 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0595.json"},{"CVE":"CVE-2016-0596","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301496","bugzilla_description":"CVE-2016-0596 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0596.json"},{"CVE":"CVE-2016-0597","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301497","bugzilla_description":"CVE-2016-0597 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0597.json"},{"CVE":"CVE-2016-0598","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301498","bugzilla_description":"CVE-2016-0598 mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0598.json"},{"CVE":"CVE-2016-0599","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301500","bugzilla_description":"CVE-2016-0599 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0599.json"},{"CVE":"CVE-2016-0600","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301501","bugzilla_description":"CVE-2016-0600 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0600.json"},{"CVE":"CVE-2016-0601","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1301502","bugzilla_description":"CVE-2016-0601 mysql: unspecified vulnerability in subcomponent: Server: Partition (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0601.json"},{"CVE":"CVE-2016-0605","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301503","bugzilla_description":"CVE-2016-0605 mysql: unspecified vulnerability in subcomponent: Server: General (CPU January 2016)","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0605.json"},{"CVE":"CVE-2016-0606","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301504","bugzilla_description":"CVE-2016-0606 mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0606.json"},{"CVE":"CVE-2016-0607","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301505","bugzilla_description":"CVE-2016-0607 mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU January 2016)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0607.json"},{"CVE":"CVE-2016-0608","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301506","bugzilla_description":"CVE-2016-0608 mysql: unspecified vulnerability in subcomponent: Server: UDF (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0608.json"},{"CVE":"CVE-2016-0609","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:0705","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301507","bugzilla_description":"CVE-2016-0609 mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU January 2016)","cvss_score":1.7,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","rh-mysql56-mysql-0:5.6.30-1.el6","mysql55-mysql-0:5.5.50-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0609.json"},{"CVE":"CVE-2016-0610","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:0705"],"bugzilla":"1301508","bugzilla_description":"CVE-2016-0610 mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0610.json"},{"CVE":"CVE-2016-0611","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:0705"],"bugzilla":"1301509","bugzilla_description":"CVE-2016-0611 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-mysql56-mysql-0:5.6.30-1.el6","rh-mysql56-mysql-0:5.6.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0611.json"},{"CVE":"CVE-2016-0616","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1480","RHSA-2016:1481","RHSA-2016:0534"],"bugzilla":"1301510","bugzilla_description":"CVE-2016-0616 mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mariadb-1:5.5.47-1.el7_2","rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","mysql55-mysql-0:5.5.50-1.el7","mysql55-mysql-0:5.5.50-1.el6","mariadb55-mariadb-0:5.5.49-1.el7","mariadb55-mariadb-0:5.5.49-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0616.json"},{"CVE":"CVE-2014-4287","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153461","bugzilla_description":"CVE-2014-4287 mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4287.json"},{"CVE":"CVE-2014-6463","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153462","bugzilla_description":"CVE-2014-6463 mysql: unspecified vulnerability related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML (CPU October 2014)","cvss_score":3.3,"cvss_scoring_vector":"AV:N/AC:L/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6463.json"},{"CVE":"CVE-2014-6464","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153463","bugzilla_description":"CVE-2014-6464 mysql: unspecified vulnerability related to SERVER:INNODB DML FOREIGN KEYS (CPU October 2014)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6464.json"},{"CVE":"CVE-2014-6469","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153464","bugzilla_description":"CVE-2014-6469 mysql: unspecified vulnerability related to SERVER:OPTIMIZER (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6469.json"},{"CVE":"CVE-2014-6474","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153465","bugzilla_description":"CVE-2014-6474 mysql: unspecified vulnerability related to SERVER:MEMCACHED (CPU October 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6474.json"},{"CVE":"CVE-2014-6478","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153466","bugzilla_description":"CVE-2014-6478 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6478.json"},{"CVE":"CVE-2014-6484","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153467","bugzilla_description":"CVE-2014-6484 mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6484.json"},{"CVE":"CVE-2014-6489","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153482","bugzilla_description":"CVE-2014-6489 mysql: unspecified vulnerability related to SERVER:SP (CPU October 2014)","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6489.json"},{"CVE":"CVE-2014-6491","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153483","bugzilla_description":"CVE-2014-6491 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6491.json"},{"CVE":"CVE-2014-6494","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153484","bugzilla_description":"CVE-2014-6494 mysql: unspecified vulnerability related to CLIENT:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6494.json"},{"CVE":"CVE-2014-6495","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153485","bugzilla_description":"CVE-2014-6495 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6495.json"},{"CVE":"CVE-2014-6496","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153486","bugzilla_description":"CVE-2014-6496 mysql: unspecified vulnerability related to CLIENT:SSL:yaSSL (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6496.json"},{"CVE":"CVE-2014-6500","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153487","bugzilla_description":"CVE-2014-6500 mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6500.json"},{"CVE":"CVE-2014-6505","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153489","bugzilla_description":"CVE-2014-6505 mysql: unspecified vulnerability related to SERVER:MEMORY STORAGE ENGINE (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6505.json"},{"CVE":"CVE-2014-6507","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153490","bugzilla_description":"CVE-2014-6507 mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6507.json"},{"CVE":"CVE-2014-6520","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153491","bugzilla_description":"CVE-2014-6520 mysql: unspecified vulnerability related to SERVER:DDL (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6520.json"},{"CVE":"CVE-2014-6530","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153493","bugzilla_description":"CVE-2014-6530 mysql: unspecified vulnerability related to CLIENT:MYSQLDUMP (CPU October 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6530.json"},{"CVE":"CVE-2014-6551","severity":"low","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153494","bugzilla_description":"CVE-2014-6551 mysql: unspecified vulnerability related to CLIENT:MYSQLADMIN (CPU October 2014)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6551.json"},{"CVE":"CVE-2014-6555","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153495","bugzilla_description":"CVE-2014-6555 mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6555.json"},{"CVE":"CVE-2014-6559","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1153496","bugzilla_description":"CVE-2014-6559 mysql: unspecified vulnerability related to C API SSL CERTIFICATE HANDLING (CPU October 2014)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6559.json"},{"CVE":"CVE-2014-6564","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1153497","bugzilla_description":"CVE-2014-6564 mysql: unspecified vulnerability related to SERVER:INNODB FULLTEXT SEARCH DML (CPU October 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6564.json"},{"CVE":"CVE-2014-9906","severity":"low","public_date":"2014-08-01T00:00:00Z","advisories":[],"bugzilla":"1361073","bugzilla_description":"CVE-2014-9906 perl-DBD-MySQL: Use after free in mysql_dr_error","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2014-4274","severity":"moderate","public_date":"2014-07-31T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1126271","bugzilla_description":"CVE-2014-4274 mysql: unspecified MyISAM temporary file issue fixed in 5.5.39 and 5.6.20","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4274.json"},{"CVE":"CVE-2014-0384","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088133","bugzilla_description":"CVE-2014-0384 mysql: unspecified DoS related to XML (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0384.json"},{"CVE":"CVE-2014-2419","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088134","bugzilla_description":"CVE-2014-2419 mysql: unspecified DoS related to Partition (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2419.json"},{"CVE":"CVE-2014-2430","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088143","bugzilla_description":"CVE-2014-2430 mysql: unspecified DoS related to Performance Schema (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2430.json"},{"CVE":"CVE-2014-2431","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088146","bugzilla_description":"CVE-2014-2431 mysql: unspecified DoS related to Options (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2431.json"},{"CVE":"CVE-2014-2432","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088179","bugzilla_description":"CVE-2014-2432 mysql: unspecified DoS related to Federated (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2432.json"},{"CVE":"CVE-2014-2434","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088184","bugzilla_description":"CVE-2014-2434 mysql: unspecified DoS related to DML (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2434.json"},{"CVE":"CVE-2014-2435","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088186","bugzilla_description":"CVE-2014-2435 mysql: unspecified DoS related to InnoDB (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2435.json"},{"CVE":"CVE-2014-2436","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088190","bugzilla_description":"CVE-2014-2436 mysql: unspecified vulnerability related to RBR (CPU April 2014)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2436.json"},{"CVE":"CVE-2014-2438","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:0536","RHSA-2014:0522","RHSA-2014:0702","RHSA-2014:0537"],"bugzilla":"1088191","bugzilla_description":"CVE-2014-2438 mysql: unspecified DoS related to Replication (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.37-1.el5","mariadb55-mariadb-0:5.5.37-1.3.el6","mariadb-1:5.5.37-1.el7_0","mysql55-mysql-0:5.5.37-1.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2438.json"},{"CVE":"CVE-2014-2440","severity":null,"public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088197","bugzilla_description":"CVE-2014-2440 mysql: unspecified vulnerability related to Client (CPU April 2014)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2440.json"},{"CVE":"CVE-2014-2442","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088206","bugzilla_description":"CVE-2014-2442 mysql: unspecified DoS related to MyIASM (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2442.json"},{"CVE":"CVE-2014-2444","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088208","bugzilla_description":"CVE-2014-2444 mysql: unspecified vulnerability related to InnoDB (CPU April 2014)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2444.json"},{"CVE":"CVE-2014-2450","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088212","bugzilla_description":"CVE-2014-2450 mysql: unspecified DoS related to Optimizer (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2450.json"},{"CVE":"CVE-2014-2451","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1088217","bugzilla_description":"CVE-2014-2451 mysql: unspecified DoS related to Privileges (CPU April 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2451.json"},{"CVE":"CVE-2014-2484","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1120330","bugzilla_description":"CVE-2014-2484 mysql: unspecified vulnerability related to SRFTS (CPU July 2014)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2484.json"},{"CVE":"CVE-2014-4214","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1120334","bugzilla_description":"CVE-2014-4214 mysql: unspecified vulnerability related to SRSP (CPU July 2014)","cvss_score":3.3,"cvss_scoring_vector":"AV:N/AC:L/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4214.json"},{"CVE":"CVE-2014-4233","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1120337","bugzilla_description":"CVE-2014-4233 mysql: unspecified vulnerability related to SRREP (CPU July 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4233.json"},{"CVE":"CVE-2014-4238","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1120338","bugzilla_description":"CVE-2014-4238 mysql: unspecified vulnerability related to SROPTZR (CPU July 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4238.json"},{"CVE":"CVE-2014-4240","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":[],"bugzilla":"1120340","bugzilla_description":"CVE-2014-4240 mysql: unspecified vulnerability related to SRREP (CPU July 2014)","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4240.json"},{"CVE":"CVE-2014-2494","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120382","bugzilla_description":"CVE-2014-2494 mysql: unspecified vulnerability related to ENARC (CPU July 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2494.json"},{"CVE":"CVE-2014-4207","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120383","bugzilla_description":"CVE-2014-4207 mysql: unspecified vulnerability related to SROPTZR (CPU July 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4207.json"},{"CVE":"CVE-2014-4243","severity":"low","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1859"],"bugzilla":"1120385","bugzilla_description":"CVE-2014-4243 mysql: unspecified vulnerability related to ENFED (CPU July 2014)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4243.json"},{"CVE":"CVE-2014-4258","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120387","bugzilla_description":"CVE-2014-4258 mysql: unspecified vulnerability related to SRINFOSC (CPU July 2014)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4258.json"},{"CVE":"CVE-2014-4260","severity":"moderate","public_date":"2014-04-15T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"1120388","bugzilla_description":"CVE-2014-4260 mysql: unspecified vulnerability related to SRCHAR (CPU July 2014)","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4260.json"},{"CVE":"CVE-2014-0001","severity":"moderate","public_date":"2014-01-30T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1054592","bugzilla_description":"CVE-2014-0001 mysql: command-line tool buffer overflow via long server version string","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0001.json"},{"CVE":"CVE-2013-5860","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053361","bugzilla_description":"CVE-2013-5860 mysql: unspecified DoS related to GIS subcomponent (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5860.json"},{"CVE":"CVE-2013-5881","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053364","bugzilla_description":"CVE-2013-5881 mysql: unspecified DoS related to InnoDB subcomponent (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5881.json"},{"CVE":"CVE-2013-5882","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053366","bugzilla_description":"CVE-2013-5882 mysql: unspecified DoS related to Stored Procedure subcomponent (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5882.json"},{"CVE":"CVE-2013-5891","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0173"],"bugzilla":"1053371","bugzilla_description":"CVE-2013-5891 mysql: unspecified vulnerability related to Partition DoS (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5891.json"},{"CVE":"CVE-2013-5894","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053372","bugzilla_description":"CVE-2013-5894 mysql: unspecified vulnerability related to InnoDB DoS (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5894.json"},{"CVE":"CVE-2013-5908","severity":"low","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053373","bugzilla_description":"CVE-2013-5908 mysql: unspecified vulnerability related to Error Handling DoS (CPU Jan 2014)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5908.json"},{"CVE":"CVE-2014-0386","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053375","bugzilla_description":"CVE-2014-0386 mysql: unspecified vulnerability related to Optimizer DoS (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0386.json"},{"CVE":"CVE-2014-0393","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053377","bugzilla_description":"CVE-2014-0393 mysql: unspecified vulnerability related to InnoDB affecting integrity (CPU Jan 2014)","cvss_score":3.3,"cvss_scoring_vector":"AV:N/AC:L/Au:M/C:N/I:P/A:N","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0393.json"},{"CVE":"CVE-2014-0401","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053378","bugzilla_description":"CVE-2014-0401 mysql: unspecified DoS vulnerability (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0401.json"},{"CVE":"CVE-2014-0402","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053380","bugzilla_description":"CVE-2014-0402 mysql: unspecified vulnerability related to Locking DoS (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0402.json"},{"CVE":"CVE-2014-0412","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053381","bugzilla_description":"CVE-2014-0412 mysql: unspecified vulnerability related to InnoDB DoS (CPU Jan 2014)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0412.json"},{"CVE":"CVE-2014-0420","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0173"],"bugzilla":"1053383","bugzilla_description":"CVE-2014-0420 mysql: unspecified vulnerability related to Replication DoS (CPU Jan 2014)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0420.json"},{"CVE":"CVE-2014-0427","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053385","bugzilla_description":"CVE-2014-0427 mysql: unspecified vulnerability related to FTS DoS (CPU Jan 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0427.json"},{"CVE":"CVE-2014-0430","severity":"low","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053386","bugzilla_description":"CVE-2014-0430 mysql: unspecified vulnerability related to Performance Schema DoS (CPU Jan 2014)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0430.json"},{"CVE":"CVE-2014-0431","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053387","bugzilla_description":"CVE-2014-0431 mysql: unspecified vulnerability related to InnoDB DoS (CPU Jan 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0431.json"},{"CVE":"CVE-2014-0433","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":[],"bugzilla":"1053388","bugzilla_description":"CVE-2014-0433 mysql: unspecified vulnerability related to Thread Pooling DoS (CPU Jan 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0433.json"},{"CVE":"CVE-2014-0437","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0164","RHSA-2014:0173"],"bugzilla":"1053390","bugzilla_description":"CVE-2014-0437 mysql: unspecified vulnerability related to Optimizer DoS (CPU Jan 2014)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.73-3.el6_5","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0437.json"},{"CVE":"CVE-2013-3839","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2014:0189","RHBA-2013:1647","RHSA-2014:0186","RHSA-2014:0173"],"bugzilla":"1019978","bugzilla_description":"CVE-2013-3839 mysql: unspecified DoS related to Optimizer (CPU October 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.71-1.el6","mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3839.json"},{"CVE":"CVE-2013-5767","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1019984","bugzilla_description":"CVE-2013-5767 mysql: unspecified DoS related to Optimizer (CPU October 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5767.json"},{"CVE":"CVE-2013-5770","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1019988","bugzilla_description":"CVE-2013-5770 mysql: unspecified DoS related to Locking (CPU October 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5770.json"},{"CVE":"CVE-2013-5786","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1019991","bugzilla_description":"CVE-2013-5786 mysql: unspecified DoS related to InnoDB (CPU October 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5786.json"},{"CVE":"CVE-2013-5793","severity":"low","public_date":"2013-10-15T00:00:00Z","advisories":[],"bugzilla":"1019993","bugzilla_description":"CVE-2013-5793 mysql: unspecified DoS related to InnoDB (CPU October 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5793.json"},{"CVE":"CVE-2013-5807","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2014:0189","RHSA-2014:0186","RHSA-2014:0173"],"bugzilla":"1019997","bugzilla_description":"CVE-2013-5807 mysql: unspecified flaw related to Replication (CPU October 2013)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql55-mysql-0:5.5.36-2.el5","mysql55-mysql-0:5.5.36-1.1.el6","mariadb55-mariadb-0:5.5.35-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5807.json"},{"CVE":"CVE-2013-3798","severity":"moderate","public_date":"2013-07-17T00:00:00Z","advisories":[],"bugzilla":"985664","bugzilla_description":"CVE-2013-3798 mysql: unspecified integrity and availability issue related to memcached (CPU July 2013)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3798.json"},{"CVE":"CVE-2013-3809","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":[],"bugzilla":"985669","bugzilla_description":"CVE-2013-3809 mysql: unspecified integrity issue related to audit log (CPU July 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3809.json"},{"CVE":"CVE-2013-3793","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":[],"bugzilla":"985677","bugzilla_description":"CVE-2013-3793 mysql: unspecified DoS related to Data Manipulation Language (CPU July 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3793.json"},{"CVE":"CVE-2013-3795","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":[],"bugzilla":"985680","bugzilla_description":"CVE-2013-3795 mysql: unspecified DoS related to Data Manipulation Language (CPU July 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3795.json"},{"CVE":"CVE-2013-3802","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":["RHBA-2013:1647"],"bugzilla":"985683","bugzilla_description":"CVE-2013-3802 mysql: unspecified DoS related to Full Text Search (CPU July 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.71-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3802.json"},{"CVE":"CVE-2013-3806","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":[],"bugzilla":"985684","bugzilla_description":"CVE-2013-3806 mysql: unspecified DoS related to InnoDB (CPU July 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3806.json"},{"CVE":"CVE-2013-3805","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":[],"bugzilla":"985686","bugzilla_description":"CVE-2013-3805 mysql: unspecified DoS related to Prepared Statements (CPU July 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3805.json"},{"CVE":"CVE-2013-3804","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":["RHBA-2013:1647"],"bugzilla":"985687","bugzilla_description":"CVE-2013-3804 mysql: unspecified DoS related to Server Optimizer (CPU July 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.71-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3804.json"},{"CVE":"CVE-2013-3796","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":[],"bugzilla":"985688","bugzilla_description":"CVE-2013-3796 mysql: unspecified DoS related to Server Optimizer (CPU July 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3796.json"},{"CVE":"CVE-2013-3808","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":["RHSA-2013:0772"],"bugzilla":"985699","bugzilla_description":"CVE-2013-3808 mysql: unspecified DoS related to Server Options (CPU July 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.69-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3808.json"},{"CVE":"CVE-2013-3783","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":[],"bugzilla":"985716","bugzilla_description":"CVE-2013-3783 mysql: unspecified DoS related to Server Parser (CPU July 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3783.json"},{"CVE":"CVE-2013-3794","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":[],"bugzilla":"985717","bugzilla_description":"CVE-2013-3794 mysql: unspecified DoS related to Server Partition (CPU July 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3794.json"},{"CVE":"CVE-2013-3807","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":[],"bugzilla":"985718","bugzilla_description":"CVE-2013-3807 mysql: unspecified DoS related to Server Privileges (CPU July 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3807.json"},{"CVE":"CVE-2013-3811","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":[],"bugzilla":"985719","bugzilla_description":"CVE-2013-3811 mysql: unspecified DoS related to InnoDB (CPU July 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3811.json"},{"CVE":"CVE-2013-3812","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":[],"bugzilla":"985720","bugzilla_description":"CVE-2013-3812 mysql: unspecified DoS related to Server Replication (CPU July 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3812.json"},{"CVE":"CVE-2013-3810","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":[],"bugzilla":"985721","bugzilla_description":"CVE-2013-3810 mysql: unspecified DoS related to XA Transactions (CPU July 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3810.json"},{"CVE":"CVE-2013-3801","severity":"low","public_date":"2013-07-17T00:00:00Z","advisories":[],"bugzilla":"985723","bugzilla_description":"CVE-2013-3801 mysql: unspecified DoS related to Server Options (CPU July 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3801.json"},{"CVE":"CVE-2013-2395","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"952857","bugzilla_description":"CVE-2013-2395 mysql: unspecified DoS related to Data Manipulation Language (CPU April 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2395.json"},{"CVE":"CVE-2013-1521","severity":"important","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0772"],"bugzilla":"952861","bugzilla_description":"CVE-2013-1521 mysql: unspecified vulnerability related to Server Locking (CPU April 2013)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql-0:5.1.69-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1521.json"},{"CVE":"CVE-2013-2378","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0772"],"bugzilla":"952862","bugzilla_description":"CVE-2013-2378 mysql: unspecified vulnerability related to Information Schema (CPU April 2013)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql-0:5.1.69-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2378.json"},{"CVE":"CVE-2013-1552","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0772"],"bugzilla":"952863","bugzilla_description":"CVE-2013-1552 mysql: unspecified vulnerability related to Server (CPU April 2013)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql-0:5.1.69-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1552.json"},{"CVE":"CVE-2013-1531","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0772"],"bugzilla":"952864","bugzilla_description":"CVE-2013-1531 mysql: unspecified vulnerability related to Server Privileges (CPU April 2013)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql-0:5.1.69-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1531.json"},{"CVE":"CVE-2013-2375","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0772"],"bugzilla":"952866","bugzilla_description":"CVE-2013-2375 mysql: unspecified vulnerability related to Server Privileges (CPU April 2013)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql-0:5.1.69-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2375.json"},{"CVE":"CVE-2013-1570","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"952867","bugzilla_description":"CVE-2013-1570 mysql: unspecified DoS related to MemCached (CPU April 2013)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1570.json"},{"CVE":"CVE-2013-1523","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"952868","bugzilla_description":"CVE-2013-1523 mysql: unspecified vulnerability related to Server Optimizer (CPU April 2013)","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1523.json"},{"CVE":"CVE-2013-1544","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0772"],"bugzilla":"952869","bugzilla_description":"CVE-2013-1544 mysql: unspecified DoS related to Data Manipulation Language (CPU April 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.69-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1544.json"},{"CVE":"CVE-2013-1512","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"952870","bugzilla_description":"CVE-2013-1512 mysql: unspecified DoS related to Data Manipulation Language (CPU April 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1512.json"},{"CVE":"CVE-2013-1532","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0772"],"bugzilla":"952871","bugzilla_description":"CVE-2013-1532 mysql: unspecified DoS related to Information Schema (CPU April 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.69-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1532.json"},{"CVE":"CVE-2013-2389","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0772"],"bugzilla":"952874","bugzilla_description":"CVE-2013-2389 mysql: unspecified DoS related to InnoDB (CPU April 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.69-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2389.json"},{"CVE":"CVE-2013-2392","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0772"],"bugzilla":"952875","bugzilla_description":"CVE-2013-2392 mysql: unspecified DoS related to Server Optimizer (CPU April 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.69-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2392.json"},{"CVE":"CVE-2013-1555","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0772"],"bugzilla":"952876","bugzilla_description":"CVE-2013-1555 mysql: unspecified DoS related to Server Partition (CPU April 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.69-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1555.json"},{"CVE":"CVE-2013-1526","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"952877","bugzilla_description":"CVE-2013-1526 mysql: unspecified DoS related to Server Replication (CPU April 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1526.json"},{"CVE":"CVE-2013-2376","severity":"moderate","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"952883","bugzilla_description":"CVE-2013-2376 mysql: unspecified DoS related to Stored Procedure (CPU April 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2376.json"},{"CVE":"CVE-2013-1567","severity":"low","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"952884","bugzilla_description":"CVE-2013-1567 mysql: unspecified DoS related to Data Manipulation Language (CPU April 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1567.json"},{"CVE":"CVE-2013-1511","severity":"low","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"952890","bugzilla_description":"CVE-2013-1511 mysql: unspecified DoS related to InnoDB (CPU April 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1511.json"},{"CVE":"CVE-2013-1566","severity":"low","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"952891","bugzilla_description":"CVE-2013-1566 mysql: unspecified DoS related to InnoDB (CPU April 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1566.json"},{"CVE":"CVE-2013-2381","severity":"low","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"952892","bugzilla_description":"CVE-2013-2381 mysql: unspecified vulnerability related to Server Privileges (CPU April 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2381.json"},{"CVE":"CVE-2013-1548","severity":"low","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0772"],"bugzilla":"952893","bugzilla_description":"CVE-2013-1548 mysql: unspecified DoS related to Server Types (CPU April 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.69-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1548.json"},{"CVE":"CVE-2013-2391","severity":"low","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0772"],"bugzilla":"952895","bugzilla_description":"CVE-2013-2391 mysql: unspecified vulnerability related to Server Install (CPU April 2013)","cvss_score":3.0,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql-0:5.1.69-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2391.json"},{"CVE":"CVE-2013-1506","severity":"low","public_date":"2013-04-16T00:00:00Z","advisories":["RHSA-2013:0772"],"bugzilla":"952899","bugzilla_description":"CVE-2013-1506 mysql: unspecified DoS related to Server Locking (CPU April 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.69-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1506.json"},{"CVE":"CVE-2013-1502","severity":"low","public_date":"2013-04-16T00:00:00Z","advisories":[],"bugzilla":"952900","bugzilla_description":"CVE-2013-1502 mysql: unspecified DoS related to Server Partition (CPU April 2013)","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1502.json"},{"CVE":"CVE-2012-0553","severity":"important","public_date":"2013-03-19T00:00:00Z","advisories":[],"bugzilla":"929163","bugzilla_description":"CVE-2012-0553 mysql: yaSSL buffer overflow ((a different flaw than CVE-2013-1492)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0553.json"},{"CVE":"CVE-2013-1492","severity":"important","public_date":"2013-03-19T00:00:00Z","advisories":[],"bugzilla":"929165","bugzilla_description":"CVE-2013-1492 mysql: yaSSL buffer overflow (a different flaw than CVE-2012-0553)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1492.json"},{"CVE":"CVE-2013-1861","severity":"low","public_date":"2013-03-05T00:00:00Z","advisories":["RHBA-2013:1647"],"bugzilla":"919247","bugzilla_description":"CVE-2013-1861 mysql: geometry query crashes mysqld (CPU July 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.71-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1861.json"},{"CVE":"CVE-2013-1623","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":[],"bugzilla":"908445","bugzilla_description":"CVE-2013-1623 yaSSL: TLS CBC padding timing attack","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1623.json"},{"CVE":"CVE-2012-5060","severity":"moderate","public_date":"2013-01-15T00:00:00Z","advisories":[],"bugzilla":"896060","bugzilla_description":"CVE-2012-5060 mysql: unspecified DoS vulnerability related to GIS (CPU Jan 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5060.json"},{"CVE":"CVE-2013-0384","severity":"moderate","public_date":"2013-01-15T00:00:00Z","advisories":["RHSA-2013:0219"],"bugzilla":"896062","bugzilla_description":"CVE-2013-0384 mysql: unspecified DoS vulnerability related to Information Schema (CPU Jan 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.67-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0384.json"},{"CVE":"CVE-2013-0389","severity":"moderate","public_date":"2013-01-15T00:00:00Z","advisories":["RHSA-2013:0219"],"bugzilla":"896063","bugzilla_description":"CVE-2013-0389 mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Jan 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.67-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0389.json"},{"CVE":"CVE-2013-0386","severity":"low","public_date":"2013-01-15T00:00:00Z","advisories":[],"bugzilla":"896064","bugzilla_description":"CVE-2013-0386 mysql: unspecified DoS vulnerability related to Stored Procedure (CPU Jan 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0386.json"},{"CVE":"CVE-2013-0385","severity":"moderate","public_date":"2013-01-15T00:00:00Z","advisories":["RHSA-2013:0219"],"bugzilla":"896066","bugzilla_description":"CVE-2013-0385 mysql: Unspecified vulnerability in the server replication of the Oracle MySQL server allows local attackers to alter confidentiality and integrity","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql-0:5.1.67-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0385.json"},{"CVE":"CVE-2013-0375","severity":"moderate","public_date":"2013-01-15T00:00:00Z","advisories":["RHSA-2013:0219"],"bugzilla":"896067","bugzilla_description":"CVE-2013-0375 mysql: Unspecified vulnerability in the server replication of the Oracle MySQL server allows remote attackers to alter confidentiality and integrity","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql-0:5.1.67-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0375.json"},{"CVE":"CVE-2012-1702","severity":"moderate","public_date":"2013-01-15T00:00:00Z","advisories":["RHSA-2013:0219"],"bugzilla":"896069","bugzilla_description":"CVE-2012-1702 mysql: unspecified unauthenticated DoS vulnerability related to Server (CPU Jan 2013)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.67-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1702.json"},{"CVE":"CVE-2013-0383","severity":"moderate","public_date":"2013-01-15T00:00:00Z","advisories":["RHSA-2013:0219"],"bugzilla":"896070","bugzilla_description":"CVE-2013-0383 mysql: unspecified unauthenticated DoS vulnerability related to Server Locking (CPU Jan 2013)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.67-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0383.json"},{"CVE":"CVE-2013-0368","severity":"low","public_date":"2013-01-15T00:00:00Z","advisories":[],"bugzilla":"896071","bugzilla_description":"CVE-2013-0368 mysql: unspecified DoS vulnerability related to InnoDB (CPU Jan 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0368.json"},{"CVE":"CVE-2012-0572","severity":"low","public_date":"2013-01-15T00:00:00Z","advisories":["RHSA-2013:0219"],"bugzilla":"896072","bugzilla_description":"CVE-2012-0572 mysql: unspecified DoS vulnerability related to InnoDB (CPU Jan 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.67-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0572.json"},{"CVE":"CVE-2013-0371","severity":"low","public_date":"2013-01-15T00:00:00Z","advisories":[],"bugzilla":"896075","bugzilla_description":"CVE-2013-0371 mysql: unspecified DoS vulnerability related to MyISAM (CPU Jan 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0371.json"},{"CVE":"CVE-2012-0574","severity":"low","public_date":"2013-01-15T00:00:00Z","advisories":["RHSA-2013:0219"],"bugzilla":"896076","bugzilla_description":"CVE-2012-0574 mysql: unspecified DoS vulnerability related to Server (CPU Jan 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.67-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0574.json"},{"CVE":"CVE-2012-1705","severity":"low","public_date":"2013-01-15T00:00:00Z","advisories":["RHSA-2013:0219"],"bugzilla":"896078","bugzilla_description":"CVE-2012-1705 mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Jan 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.67-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1705.json"},{"CVE":"CVE-2012-0578","severity":"low","public_date":"2013-01-15T00:00:00Z","advisories":[],"bugzilla":"896081","bugzilla_description":"CVE-2012-0578 mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Jan 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0578.json"},{"CVE":"CVE-2013-0367","severity":"low","public_date":"2013-01-15T00:00:00Z","advisories":[],"bugzilla":"896082","bugzilla_description":"CVE-2013-0367 mysql: unspecified DoS vulnerability related to Server Partition (CPU Jan 2013)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0367.json"},{"CVE":"CVE-2012-5096","severity":"low","public_date":"2013-01-15T00:00:00Z","advisories":[],"bugzilla":"896084","bugzilla_description":"CVE-2012-5096 mysql: unspecified DoS vulnerability related to Server Privileges (CPU Jan 2013)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5096.json"},{"CVE":"CVE-2012-5627","severity":"low","public_date":"2012-12-03T00:00:00Z","advisories":[],"bugzilla":"883719","bugzilla_description":"CVE-2012-5627 mysql: efficient password guessing attack using change_user()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5627.json"},{"CVE":"CVE-2012-5612","severity":"important","public_date":"2012-12-01T00:00:00Z","advisories":[],"bugzilla":"882600","bugzilla_description":"CVE-2012-5612 mysql: MDL subsystem heap-based buffer overflow","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5612.json"},{"CVE":"CVE-2012-5613","severity":null,"public_date":"2012-12-01T00:00:00Z","advisories":[],"bugzilla":"882606","bugzilla_description":"CVE-2012-5613 mysql: database privilege escalation using FILE privilege","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5613.json"},{"CVE":"CVE-2012-5614","severity":"low","public_date":"2012-12-01T00:00:00Z","advisories":["RHSA-2013:0772"],"bugzilla":"882607","bugzilla_description":"CVE-2012-5614 mysql: COM_BINLOG_DUMP crash on invalid data","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.69-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5614.json"},{"CVE":"CVE-2012-5615","severity":"low","public_date":"2012-12-01T00:00:00Z","advisories":["RHSA-2014:1940","RHSA-2014:1862","RHSA-2014:1861","RHSA-2014:1860","RHSA-2014:1937","RHSA-2014:1859"],"bugzilla":"882608","bugzilla_description":"CVE-2012-5615 mysql: Remote Preauth User Enumeration flaw","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-209","affected_packages":["mysql55-mysql-0:5.5.40-1.el6","mysql55-mysql-0:5.5.40-1.el7","mysql55-mysql-0:5.5.40-2.el5","mariadb-galera-1:5.5.40-2.el7ost","mariadb55-mariadb-0:5.5.40-10.el7","mariadb55-mariadb-0:5.5.40-10.el6","mariadb-1:5.5.40-1.el7_0","mariadb-galera-0:5.5.40-2.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5615.json"},{"CVE":"CVE-2012-5579","severity":"important","public_date":"2012-11-29T00:00:00Z","advisories":[],"bugzilla":"881064","bugzilla_description":"CVE-2012-5611 mysql: acl_get() stack-based buffer overflow","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5579.json"},{"CVE":"CVE-2012-5611","severity":"important","public_date":"2012-11-29T00:00:00Z","advisories":["RHSA-2013:0180","RHSA-2012:1551"],"bugzilla":"881064","bugzilla_description":"CVE-2012-5611 mysql: acl_get() stack-based buffer overflow","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["mysql-0:5.1.66-2.el6_3","mysql-0:5.0.95-5.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5611.json"},{"CVE":"CVE-2012-3163","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"867212","bugzilla_description":"CVE-2012-3163 mysql: unspecified vulnerability related to Information Schema (CPU Oct 2012)","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3163.json"},{"CVE":"CVE-2012-3158","severity":"important","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"867213","bugzilla_description":"CVE-2012-3158 mysql: unspecified vulnerability related to the MySQL Protocol (CPU Oct 2012)","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3158.json"},{"CVE":"CVE-2012-3177","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"867215","bugzilla_description":"CVE-2012-3177 mysql: unspecified Server DoS vulnerability (CPU Oct 2012)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3177.json"},{"CVE":"CVE-2012-3166","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"867216","bugzilla_description":"CVE-2012-3166 mysql: unspecified DoS vulnerability related to InnoDB (CPU Oct 2012)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3166.json"},{"CVE":"CVE-2012-3173","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"867217","bugzilla_description":"CVE-2012-3173 mysql: unspecified DoS vulnerability related to InnoDB Plugin (CPU Oct 2012)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3173.json"},{"CVE":"CVE-2012-3150","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"867220","bugzilla_description":"CVE-2012-3150 mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Oct 2012)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3150.json"},{"CVE":"CVE-2012-3180","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"867223","bugzilla_description":"CVE-2012-3180 mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Oct 2012)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3180.json"},{"CVE":"CVE-2012-3167","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"867230","bugzilla_description":"CVE-2012-3167 mysql: unspecified DoS vulnerability related to Server Full Text Search (CPU Oct 2012)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3167.json"},{"CVE":"CVE-2012-3197","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"867233","bugzilla_description":"CVE-2012-3197 mysql: unspecified DoS vulnerability related to Server Replication (CPU Oct 2012)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3197.json"},{"CVE":"CVE-2012-3160","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"867238","bugzilla_description":"CVE-2012-3160 mysql: unspecified vulnerability in Server Installation leading to information disclosure (CPU Oct 2012)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3160.json"},{"CVE":"CVE-2012-3144","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":[],"bugzilla":"867514","bugzilla_description":"CVE-2012-3144 mysql: unspecified Server DoS vulnerability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3144.json"},{"CVE":"CVE-2012-3147","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":[],"bugzilla":"867518","bugzilla_description":"CVE-2012-3147 mysql: unspecified client vulnerability with integrity and availability impact","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3147.json"},{"CVE":"CVE-2012-3149","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":[],"bugzilla":"867521","bugzilla_description":"CVE-2012-3149 mysql: unspecified client vulnerability with confidentiality impact","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3149.json"},{"CVE":"CVE-2012-3156","severity":"low","public_date":"2012-10-16T00:00:00Z","advisories":[],"bugzilla":"867523","bugzilla_description":"CVE-2012-3156 mysql: unspecified Server DoS vulnerability","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3156.json"},{"CVE":"CVE-2012-4452","severity":"low","public_date":"2012-09-27T00:00:00Z","advisories":["RHSA-2013:0121"],"bugzilla":"860808","bugzilla_description":"CVE-2012-4452 mysql: regression of CVE-2009-4030","cvss_score":2.4,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":["mysql-0:5.0.95-3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4452.json"},{"CVE":"CVE-2012-4414","severity":"moderate","public_date":"2012-09-11T00:00:00Z","advisories":[],"bugzilla":"852144","bugzilla_description":"CVE-2012-4414 mysql: Multiple SQL injection flaws by generation of binlog entries","cvss_score":2.2,"cvss_scoring_vector":"AV:A/AC:L/Au:M/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4414.json"},{"CVE":"CVE-2012-0540","severity":"low","public_date":"2012-07-18T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"841349","bugzilla_description":"CVE-2012-0540 mysql: unspecified vulnerability related to GIS extension DoS  (CPU Jul 2012)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0540.json"},{"CVE":"CVE-2012-1689","severity":"low","public_date":"2012-07-18T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"841351","bugzilla_description":"CVE-2012-1689 mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Jul 2012)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1689.json"},{"CVE":"CVE-2012-1734","severity":"low","public_date":"2012-07-18T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"841353","bugzilla_description":"CVE-2012-1734 mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Jul 2012)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1734.json"},{"CVE":"CVE-2012-1735","severity":"moderate","public_date":"2012-07-18T00:00:00Z","advisories":[],"bugzilla":"841354","bugzilla_description":"CVE-2012-1735 mysql: unspecified vulnerability related to Server Optimizer DoS","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1735.json"},{"CVE":"CVE-2012-1756","severity":"moderate","public_date":"2012-07-18T00:00:00Z","advisories":[],"bugzilla":"841356","bugzilla_description":"CVE-2012-1756 mysql: unspecified vulnerability leads to DoS via unspecified vectors","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1756.json"},{"CVE":"CVE-2012-1757","severity":"moderate","public_date":"2012-07-18T00:00:00Z","advisories":[],"bugzilla":"841360","bugzilla_description":"CVE-2012-1757 mysql: unspecified vulnerability related to InnoDB DoS","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1757.json"},{"CVE":"CVE-2012-2122","severity":"important","public_date":"2012-06-09T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"814605","bugzilla_description":"CVE-2012-2122 mysql: incorrect type cast in check_scramble() leading to authentication bypass","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-704->CWE-393->CWE-305","affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2122.json"},{"CVE":"CVE-2012-0583","severity":"low","public_date":"2012-04-17T00:00:00Z","advisories":["RHSA-2012:0105"],"bugzilla":"814282","bugzilla_description":"CVE-2012-0583 mysql: unspecified DoS vulnerability in MyISAM (Oracle CPU April 2012)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0583.json"},{"CVE":"CVE-2012-1688","severity":"low","public_date":"2012-04-17T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"814285","bugzilla_description":"CVE-2012-1688 mysql: unspecified DoS vulnerability related to DML (CPU Apr 2012)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1688.json"},{"CVE":"CVE-2012-1690","severity":"low","public_date":"2012-04-17T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"814287","bugzilla_description":"CVE-2012-1690 mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Apr 2012)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1690.json"},{"CVE":"CVE-2012-1696","severity":"low","public_date":"2012-04-17T00:00:00Z","advisories":[],"bugzilla":"814290","bugzilla_description":"CVE-2012-1696 mysql: Unspecified vulnerability in the server optimizer subcomponent leading to DoS (server hang / crash) (Oracle CPU April 2012)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1696.json"},{"CVE":"CVE-2012-1697","severity":"low","public_date":"2012-04-17T00:00:00Z","advisories":[],"bugzilla":"814291","bugzilla_description":"CVE-2012-1697 mysql: Unspecified vulnerability in the partition subcomponent leading to DoS (server hang / crash) (Oracle CPU April 2012)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1697.json"},{"CVE":"CVE-2012-1703","severity":"moderate","public_date":"2012-04-17T00:00:00Z","advisories":["RHSA-2012:1462"],"bugzilla":"814293","bugzilla_description":"CVE-2012-1703 mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Apr 2012)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1703.json"},{"CVE":"CVE-2012-2750","severity":"moderate","public_date":"2012-04-12T00:00:00Z","advisories":[],"bugzilla":"833742","bugzilla_description":"CVE-2012-2750 mysql: unspecified flaw related to Optimizer","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2750.json"},{"CVE":"CVE-2012-2749","severity":"low","public_date":"2012-04-04T00:00:00Z","advisories":["RHSA-2013:0180","RHSA-2012:1462"],"bugzilla":"833737","bugzilla_description":"CVE-2012-2749 mysql: crash caused by wrong calculation of key length for sort order index","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.0.95-5.el5_9","mysql-0:5.1.66-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2749.json"},{"CVE":"CVE-2012-2102","severity":"low","public_date":"2012-03-21T00:00:00Z","advisories":["RHSA-2012:0874"],"bugzilla":"812431","bugzilla_description":"CVE-2012-2102 mysql: Server crash on HANDLER READ NEXT after DELETE","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.61-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2102.json"},{"CVE":"CVE-2012-0882","severity":"important","public_date":"2012-02-09T00:00:00Z","advisories":[],"bugzilla":"789141","bugzilla_description":"CVE-2012-0882 mysql: unspecified remote exploit (released with VulnDisco Pack Professional 9.17)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0882.json"},{"CVE":"CVE-2011-2262","severity":"important","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0105"],"bugzilla":"783793","bugzilla_description":"CVE-2011-2262 mysql: Unspecified vulnerability allows remote attackers to affect availability","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2262.json"},{"CVE":"CVE-2012-0075","severity":"moderate","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0127","RHSA-2012:0105"],"bugzilla":"783794","bugzilla_description":"CVE-2012-0075 mysql: Unspecified vulnerability allows remote authenticated users to affect integrity","cvss_score":1.7,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:N/I:P/A:N","CWE":null,"affected_packages":["mysql-0:5.0.95-1.el5_7.1","mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0075.json"},{"CVE":"CVE-2012-0087","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0127","RHSA-2012:0105"],"bugzilla":"783795","bugzilla_description":"CVE-2012-0087 mysql: Unspecified vulnerability allows remote authenticated users to affect availability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.0.95-1.el5_7.1","mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0087.json"},{"CVE":"CVE-2012-0101","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0127","RHSA-2012:0105"],"bugzilla":"783797","bugzilla_description":"CVE-2012-0101 mysql: Unspecified vulnerability allows remote authenticated users to affect availability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.0.95-1.el5_7.1","mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0101.json"},{"CVE":"CVE-2012-0102","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0127","RHSA-2012:0105"],"bugzilla":"783798","bugzilla_description":"CVE-2012-0102 mysql: Unspecified vulnerability allows remote authenticated users to affect availability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.0.95-1.el5_7.1","mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0102.json"},{"CVE":"CVE-2012-0112","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0105"],"bugzilla":"783799","bugzilla_description":"CVE-2012-0112 mysql: Unspecified vulnerability allows remote authenticated users to affect availability","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0112.json"},{"CVE":"CVE-2012-0113","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0105"],"bugzilla":"783800","bugzilla_description":"CVE-2012-0113 mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and availability","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0113.json"},{"CVE":"CVE-2012-0114","severity":"moderate","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0127","RHSA-2012:0105"],"bugzilla":"783801","bugzilla_description":"CVE-2012-0114 mysql: Unspecified vulnerability allows local users to affect confidentiality and integrity","cvss_score":3.0,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql-0:5.0.95-1.el5_7.1","mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0114.json"},{"CVE":"CVE-2012-0115","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0105"],"bugzilla":"783802","bugzilla_description":"CVE-2012-0115 mysql: Unspecified vulnerability allows remote authenticated users to affect availability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0115.json"},{"CVE":"CVE-2012-0116","severity":"moderate","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0105"],"bugzilla":"783803","bugzilla_description":"CVE-2012-0116 mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and integrity","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0116.json"},{"CVE":"CVE-2012-0117","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":[],"bugzilla":"783804","bugzilla_description":"CVE-2012-0117 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0117.json"},{"CVE":"CVE-2012-0118","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0105"],"bugzilla":"783805","bugzilla_description":"CVE-2012-0118 mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and availability","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0118.json"},{"CVE":"CVE-2012-0119","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0105"],"bugzilla":"783806","bugzilla_description":"CVE-2012-0119 mysql: Unspecified vulnerability allows remote authenticated users to affect availability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0119.json"},{"CVE":"CVE-2012-0120","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0105"],"bugzilla":"783807","bugzilla_description":"CVE-2012-0120 mysql: Unspecified vulnerability allows remote authenticated users to affect availability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0120.json"},{"CVE":"CVE-2012-0484","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0127","RHSA-2012:0105"],"bugzilla":"783808","bugzilla_description":"CVE-2012-0484 mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["mysql-0:5.0.95-1.el5_7.1","mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0484.json"},{"CVE":"CVE-2012-0485","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0105"],"bugzilla":"783809","bugzilla_description":"CVE-2012-0485 mysql: Unspecified vulnerability allows remote authenticated users to affect availability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0485.json"},{"CVE":"CVE-2012-0486","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":[],"bugzilla":"783810","bugzilla_description":"CVE-2012-0486 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0486.json"},{"CVE":"CVE-2012-0487","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":[],"bugzilla":"783812","bugzilla_description":"CVE-2012-0487 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0487.json"},{"CVE":"CVE-2012-0488","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":[],"bugzilla":"783813","bugzilla_description":"CVE-2012-0488 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0488.json"},{"CVE":"CVE-2012-0489","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":[],"bugzilla":"783814","bugzilla_description":"CVE-2012-0489 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0489.json"},{"CVE":"CVE-2012-0490","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0127","RHSA-2012:0105"],"bugzilla":"783815","bugzilla_description":"CVE-2012-0490 mysql: Unspecified vulnerability allows remote authenticated users to affect availability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.0.95-1.el5_7.1","mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0490.json"},{"CVE":"CVE-2012-0491","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":[],"bugzilla":"783816","bugzilla_description":"CVE-2012-0491 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0491.json"},{"CVE":"CVE-2012-0492","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":["RHSA-2012:0105"],"bugzilla":"783817","bugzilla_description":"CVE-2012-0492 mysql: Unspecified vulnerability allows remote authenticated users to affect availability","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.61-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0492.json"},{"CVE":"CVE-2012-0493","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":[],"bugzilla":"783818","bugzilla_description":"CVE-2012-0493 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0493.json"},{"CVE":"CVE-2012-0494","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":[],"bugzilla":"783819","bugzilla_description":"CVE-2012-0494 mysql: Unspecified vulnerability allows local users to affect availability via unknown vectors","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0494.json"},{"CVE":"CVE-2012-0495","severity":"low","public_date":"2012-01-18T00:00:00Z","advisories":[],"bugzilla":"783820","bugzilla_description":"CVE-2012-0495 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0495.json"},{"CVE":"CVE-2012-0496","severity":"moderate","public_date":"2012-01-18T00:00:00Z","advisories":[],"bugzilla":"783821","bugzilla_description":"CVE-2012-0496 mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and integrity via unknown vectors","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0496.json"},{"CVE":"CVE-2010-3834","severity":"moderate","public_date":"2010-09-28T00:00:00Z","advisories":[],"bugzilla":"640808","bugzilla_description":"CVE-2010-3834 MySQL: user variable assignments crash server when used within query (MySQL Bug#55568)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3834.json"},{"CVE":"CVE-2010-3679","severity":"moderate","public_date":"2010-09-07T00:00:00Z","advisories":["RHSA-2011:0164"],"bugzilla":"628062","bugzilla_description":"CVE-2010-3679 MySQL: Use of unassigned memory (valgrind errors / crash) by providing certain values to BINLOG statement (MySQL BZ#54393)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P/","CWE":null,"affected_packages":["mysql-0:5.1.52-1.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3679.json"},{"CVE":"CVE-2010-3833","severity":"moderate","public_date":"2010-08-08T00:00:00Z","advisories":["RHSA-2010:0825","RHSA-2011:0164"],"bugzilla":"640751","bugzilla_description":"CVE-2010-3833 MySQL: CREATE TABLE ... SELECT causes crash when KILL_BAD_DATA is returned (MySQL Bug#55826)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.52-1.el6_0.1","mysql-0:5.0.77-4.el5_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3833.json"},{"CVE":"CVE-2010-3835","severity":"moderate","public_date":"2010-07-26T00:00:00Z","advisories":["RHSA-2010:0825","RHSA-2011:0164"],"bugzilla":"640819","bugzilla_description":"CVE-2010-3835 MySQL: crash with user variables, assignments, joins... (MySQL Bug #55564)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.52-1.el6_0.1","mysql-0:5.0.77-4.el5_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3835.json"},{"CVE":"CVE-2010-3677","severity":"moderate","public_date":"2010-07-09T00:00:00Z","advisories":["RHSA-2010:0825","RHSA-2011:0164"],"bugzilla":"628040","bugzilla_description":"CVE-2010-3677 MySQL: Mysqld DoS (crash) by processing joins involving a table with a unique SET column (MySQL BZ#54575)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.52-1.el6_0.1","mysql-0:5.0.77-4.el5_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3677.json"},{"CVE":"CVE-2010-3678","severity":"moderate","public_date":"2010-07-09T00:00:00Z","advisories":["RHSA-2011:0164"],"bugzilla":"628172","bugzilla_description":"CVE-2010-3678  MySQL: mysqld DoS (crash) by processing IN / CASE statements with NULL arguments (MySQL bug #54477)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.52-1.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3678.json"},{"CVE":"CVE-2010-3680","severity":"moderate","public_date":"2010-07-09T00:00:00Z","advisories":["RHSA-2010:0825","RHSA-2011:0164"],"bugzilla":"628192","bugzilla_description":"CVE-2010-3680 MySQL: mysqld DoS (assertion failure) by using temporary InnoDB engine tables with nullable columns (MySQL bug #54044)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.52-1.el6_0.1","mysql-0:5.0.77-4.el5_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3680.json"},{"CVE":"CVE-2010-3682","severity":"moderate","public_date":"2010-07-09T00:00:00Z","advisories":["RHSA-2010:0825","RHSA-2011:0164"],"bugzilla":"628328","bugzilla_description":"CVE-2010-3682 MySQL: mysqld DoS (crash) by processing EXPLAIN statements for complex SQL queries (MySQL bug #52711)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P/","CWE":"CWE-119","affected_packages":["mysql-0:5.1.52-1.el6_0.1","mysql-0:5.0.77-4.el5_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3682.json"},{"CVE":"CVE-2010-3676","severity":"low","public_date":"2010-07-09T00:00:00Z","advisories":[],"bugzilla":"628660","bugzilla_description":"CVE-2010-3676  MySQL: mysqld DoS (assertion failure) after changing InnoDB storage engine configuration parameters (MySQL bug #55039)","cvss_score":2.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3676.json"},{"CVE":"CVE-2010-3681","severity":"moderate","public_date":"2010-07-09T00:00:00Z","advisories":["RHSA-2010:0825","RHSA-2010:0824","RHSA-2011:0164"],"bugzilla":"628680","bugzilla_description":"CVE-2010-3681 MySQL: mysqld DoS (assertion failure) by alternate reads from two indexes on a table using the HANDLER interface (MySQL bug #54007)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.52-1.el6_0.1","mysql-0:5.0.77-4.el5_5.4","mysql-0:4.1.22-2.el4_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3681.json"},{"CVE":"CVE-2010-3683","severity":"moderate","public_date":"2010-07-09T00:00:00Z","advisories":["RHSA-2011:0164"],"bugzilla":"628698","bugzilla_description":"CVE-2010-3683 MySQL: mysqld DoS (assertion failure) while reading the file back into a table (MySQL bug #52512)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.52-1.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3683.json"},{"CVE":"CVE-2010-2008","severity":"moderate","public_date":"2010-07-06T00:00:00Z","advisories":[],"bugzilla":"614214","bugzilla_description":"CVE-2010-2008 mysql: remote authenticated DoS via ALTER DATABASE","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2008.json"},{"CVE":"CVE-2010-3836","severity":"moderate","public_date":"2010-06-16T00:00:00Z","advisories":["RHSA-2010:0825","RHSA-2011:0164"],"bugzilla":"640845","bugzilla_description":"CVE-2010-3836 MySQL: pre-evaluating LIKE arguments in view prepare mode causes crash (MySQL Bug#54568)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.52-1.el6_0.1","mysql-0:5.0.77-4.el5_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3836.json"},{"CVE":"CVE-2010-3837","severity":"moderate","public_date":"2010-06-14T00:00:00Z","advisories":["RHSA-2010:0825","RHSA-2011:0164"],"bugzilla":"640856","bugzilla_description":"CVE-2010-3837 MySQL: crash when group_concat and \"with rollup\" in prepared statements (MySQL Bug#54476)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.52-1.el6_0.1","mysql-0:5.0.77-4.el5_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3837.json"},{"CVE":"CVE-2010-3838","severity":"moderate","public_date":"2010-06-14T00:00:00Z","advisories":["RHSA-2010:0825","RHSA-2011:0164"],"bugzilla":"640858","bugzilla_description":"CVE-2010-3838 MySQL: crash with LONGBLOB and union or update with subquery (MySQL Bug#54461)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.52-1.el6_0.1","mysql-0:5.0.77-4.el5_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3838.json"},{"CVE":"CVE-2010-1848","severity":"important","public_date":"2010-05-13T00:00:00Z","advisories":["RHSA-2010:0824","RHSA-2010:0442"],"bugzilla":"592079","bugzilla_description":"CVE-2010-1848 mysql: multiple insufficient table name checks","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql-0:5.0.77-4.el5_5.3","mysql-0:4.1.22-2.el4_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1848.json"},{"CVE":"CVE-2010-1849","severity":"low","public_date":"2010-05-13T00:00:00Z","advisories":["RHSA-2012:0127"],"bugzilla":"592086","bugzilla_description":"CVE-2010-1849 mysql: over-sized packet denial of service vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.0.95-1.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1849.json"},{"CVE":"CVE-2010-1850","severity":"important","public_date":"2010-05-13T00:00:00Z","advisories":["RHSA-2010:0442"],"bugzilla":"592091","bugzilla_description":"CVE-2010-1850 mysql: COM_FIELD_LIST table name buffer overflow","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["mysql-0:5.0.77-4.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1850.json"},{"CVE":"CVE-2010-3839","severity":"moderate","public_date":"2010-05-10T00:00:00Z","advisories":["RHSA-2010:0825","RHSA-2011:0164"],"bugzilla":"640861","bugzilla_description":"CVE-2010-3839 MySQL: server hangs during JOIN query in stored procedures called twice in a row (MySQL Bug#53544)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.52-1.el6_0.1","mysql-0:5.0.77-4.el5_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3839.json"},{"CVE":"CVE-2010-3840","severity":"moderate","public_date":"2010-03-09T00:00:00Z","advisories":["RHSA-2010:0825","RHSA-2010:0824","RHSA-2011:0164"],"bugzilla":"640865","bugzilla_description":"CVE-2010-3840 MySQL: crash when loading data into geometry function PolyFromWKB() (MySQL Bug#51875)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.1.52-1.el6_0.1","mysql-0:5.0.77-4.el5_5.4","mysql-0:4.1.22-2.el4_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3840.json"},{"CVE":"CVE-2010-1621","severity":null,"public_date":"2010-03-05T00:00:00Z","advisories":[],"bugzilla":"590190","bugzilla_description":"CVE-2010-1621 MySQL UNINSTALL PLUGIN requires no privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1621.json"},{"CVE":"CVE-2009-4019","severity":"low","public_date":"2009-11-04T00:00:00Z","advisories":["RHSA-2010:0109"],"bugzilla":"540906","bugzilla_description":"CVE-2009-4019 mysql: DoS (crash) when comparing GIS items from subquery and when handling subqueires in WHERE  and assigning a SELECT result to a @variable","cvss_score":2.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.0.77-4.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4019.json"},{"CVE":"CVE-2009-4028","severity":"moderate","public_date":"2009-11-04T00:00:00Z","advisories":["RHSA-2010:0109"],"bugzilla":"541233","bugzilla_description":"CVE-2009-4028 mysql: client SSL certificate verification flaw","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["mysql-0:5.0.77-4.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4028.json"},{"CVE":"CVE-2009-4030","severity":"low","public_date":"2009-11-04T00:00:00Z","advisories":["RHSA-2010:0109","RHSA-2010:0110"],"bugzilla":"543653","bugzilla_description":"CVE-2009-4030 mysql: Incomplete fix for CVE-2008-2079 / CVE-2008-4098","cvss_score":2.4,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":["mysql-0:5.0.77-4.el5_4.2","mysql-0:4.1.22-2.el4_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4030.json"},{"CVE":"CVE-2009-2446","severity":"low","public_date":"2009-07-09T00:00:00Z","advisories":["RHSA-2009:1461","RHSA-2010:0110","RHSA-2009:1289"],"bugzilla":"511020","bugzilla_description":"CVE-2009-2446 MySQL: Format string vulnerability by manipulation with database instances (crash)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.0.77-3.el5","mysql-0:4.1.22-2.el4_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2446.json"},{"CVE":"CVE-2008-2384","severity":"moderate","public_date":"2009-01-22T00:00:00Z","advisories":["RHSA-2009:0259","RHSA-2010:1002"],"bugzilla":"480238","bugzilla_description":"CVE-2008-2384 mod_auth_mysql: character encoding SQL injection flaw","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["mod_auth_mysql-1:3.0.0-3.2.el5_3","mod_auth_mysql-1:3.0.0-11.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2384.json"},{"CVE":"CVE-2010-1626","severity":"low","public_date":"2008-11-22T00:00:00Z","advisories":["RHSA-2010:0442"],"bugzilla":"553648","bugzilla_description":"CVE-2010-1626 mysql: table destruction via DATA/INDEX DIRECTORY directives using symlinks","cvss_score":3.2,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":["mysql-0:5.0.77-4.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1626.json"},{"CVE":"CVE-2008-4456","severity":"low","public_date":"2008-09-30T00:00:00Z","advisories":["RHSA-2009:1461","RHSA-2010:0110","RHSA-2009:1289"],"bugzilla":"466518","bugzilla_description":"CVE-2008-4456 mysql: mysql command line client XSS flaw","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["mysql-0:5.0.77-3.el5","mysql-0:4.1.22-2.el4_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4456.json"},{"CVE":"CVE-2008-3963","severity":"low","public_date":"2008-08-10T00:00:00Z","advisories":["RHSA-2009:1067","RHSA-2009:1289"],"bugzilla":"462071","bugzilla_description":"CVE-2008-3963 MySQL: Using an empty binary value leads to server crash","cvss_score":2.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["mysql-0:5.0.77-3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3963.json"},{"CVE":"CVE-2008-4098","severity":"moderate","public_date":"2008-07-03T00:00:00Z","advisories":["RHSA-2010:0110","RHSA-2009:1067"],"bugzilla":"454077","bugzilla_description":"CVE-2008-4098 mysql: incomplete upstream fix for CVE-2008-2079","cvss_score":3.2,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql-0:4.1.22-2.el4_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4098.json"},{"CVE":"CVE-2008-2079","severity":"moderate","public_date":"2008-03-13T00:00:00Z","advisories":["RHSA-2008:0510","RHSA-2008:0505","RHSA-2008:0768","RHSA-2009:1289"],"bugzilla":"445222","bugzilla_description":"CVE-2008-2079 mysql: privilege escalation via DATA/INDEX DIRECTORY directives","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["mysql-0:5.0.77-3.el5","mysql-0:4.1.22-2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2079.json"},{"CVE":"CVE-2007-5969","severity":"important","public_date":"2007-11-15T00:00:00Z","advisories":["RHSA-2007:1155","RHSA-2007:1157"],"bugzilla":"397071","bugzilla_description":"CVE-2007-5969 mysql: possible system table information overwrite using symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:4.1.20-3.RHEL4.1.el4_6.1","mysql-0:5.0.22-2.2.el5_1.1","mysql-0:5.0.44-2.el4s1.1","mysql-0:5.0.44-3.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5969.json"},{"CVE":"CVE-2007-5925","severity":"low","public_date":"2007-11-05T00:00:00Z","advisories":["RHSA-2007:1155","RHSA-2007:1157"],"bugzilla":"377451","bugzilla_description":"CVE-2007-5925 mysql DoS in the InnoDB Engine","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:4.1.20-3.RHEL4.1.el4_6.1","mysql-0:5.0.22-2.2.el5_1.1","mysql-0:5.0.44-2.el4s1.1","mysql-0:5.0.44-3.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5925.json"},{"CVE":"CVE-2007-6303","severity":"low","public_date":"2007-07-19T00:00:00Z","advisories":["RHSA-2007:1157"],"bugzilla":"420231","bugzilla_description":"CVE-2007-6303 mysql: DEFINER value of view not altered on ALTER VIEW","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:5.0.44-2.el4s1.1","mysql-0:5.0.44-3.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6303.json"},{"CVE":"CVE-2007-3781","severity":"low","public_date":"2007-07-04T00:00:00Z","advisories":["RHSA-2008:0364","RHSA-2007:0894"],"bugzilla":"248553","bugzilla_description":"CVE-2007-3781 CVE-2007-3782 New release of MySQL fixes security bugs","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:5.0.45-7.el5","mysql-0:5.0.44-1.el4s1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3781.json"},{"CVE":"CVE-2007-3782","severity":"low","public_date":"2007-07-04T00:00:00Z","advisories":["RHSA-2008:0364","RHSA-2007:0894"],"bugzilla":"248553","bugzilla_description":"CVE-2007-3781 CVE-2007-3782 New release of MySQL fixes security bugs","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:5.0.45-7.el5","mysql-0:5.0.44-1.el4s1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3782.json"},{"CVE":"CVE-2007-3780","severity":"important","public_date":"2007-07-04T00:00:00Z","advisories":["RHSA-2007:0894","RHSA-2007:0875"],"bugzilla":"254108","bugzilla_description":"CVE-2007-3780 mysql malformed password crasher","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:4.1.20-2.RHEL4.1.0.1","mysql-0:5.0.44-1.el4s1.1","mysql-0:5.0.22-2.1.0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3780.json"},{"CVE":"CVE-2007-2691","severity":"low","public_date":"2007-05-17T00:00:00Z","advisories":["RHSA-2008:0364","RHSA-2007:0894","RHSA-2008:0768"],"bugzilla":"241688","bugzilla_description":"CVE-2007-2691 mysql DROP privilege not enforced when renaming tables","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:5.0.45-7.el5","mysql-0:5.0.44-1.el4s1.1","mysql-0:4.1.22-2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2691.json"},{"CVE":"CVE-2007-2692","severity":"low","public_date":"2007-05-17T00:00:00Z","advisories":["RHSA-2008:0364","RHSA-2007:0894"],"bugzilla":"241689","bugzilla_description":"CVE-2007-2692 mysql SECURITY INVOKER functions do not drop privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:5.0.45-7.el5","mysql-0:5.0.44-1.el4s1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2692.json"},{"CVE":"CVE-2007-2583","severity":"low","public_date":"2007-03-29T00:00:00Z","advisories":["RHSA-2008:0364"],"bugzilla":"240813","bugzilla_description":"CVE-2007-2583 mysql: DoS via statement with crafted IF clause","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:5.0.45-7.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2583.json"},{"CVE":"CVE-2007-1420","severity":"low","public_date":"2007-03-09T00:00:00Z","advisories":["RHSA-2008:0364"],"bugzilla":"232603","bugzilla_description":"CVE-2007-1420 Single MySQL worker can be crashed (NULL deref) with certain SELECT statements","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["mysql-0:5.0.45-7.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1420.json"},{"CVE":"CVE-2006-7232","severity":"low","public_date":"2006-09-16T00:00:00Z","advisories":["RHSA-2008:0364"],"bugzilla":"434264","bugzilla_description":"CVE-2006-7232 mysql: daemon crash via EXPLAIN on queries on information schema","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:5.0.45-7.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7232.json"},{"CVE":"CVE-2006-3469","severity":"low","public_date":"2006-06-27T00:00:00Z","advisories":["RHSA-2008:0768"],"bugzilla":"201904","bugzilla_description":"CVE-2006-3469 mysql server DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:4.1.22-2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3469.json"},{"CVE":"CVE-2006-3081","severity":"low","public_date":"2006-06-14T00:00:00Z","advisories":["RHSA-2006:0544","RHSA-2007:0083"],"bugzilla":"1618132","bugzilla_description":"CVE-2006-3081 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:4.1.20-1.RHEL4.1","mysql-0:5.0.30-1.el4s1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3081.json"},{"CVE":"CVE-2006-2753","severity":"important","public_date":"2006-05-31T00:00:00Z","advisories":["RHSA-2006:0544"],"bugzilla":"1618111","bugzilla_description":"CVE-2006-2753 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:4.1.20-1.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2753.json"},{"CVE":"CVE-2006-1516","severity":"moderate","public_date":"2006-05-02T00:00:00Z","advisories":["RHSA-2006:0544"],"bugzilla":"1618038","bugzilla_description":"CVE-2006-1516 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:4.1.20-1.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1516.json"},{"CVE":"CVE-2006-1517","severity":"moderate","public_date":"2006-05-02T00:00:00Z","advisories":["RHSA-2006:0544"],"bugzilla":"1618039","bugzilla_description":"CVE-2006-1517 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:4.1.20-1.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1517.json"},{"CVE":"CVE-2006-4227","severity":"moderate","public_date":"2006-03-29T00:00:00Z","advisories":["RHSA-2008:0364","RHSA-2007:0083"],"bugzilla":"216427","bugzilla_description":"CVE-2006-4227 mysql improper suid argument evaluation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:5.0.45-7.el5","mysql-0:5.0.30-1.el4s1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4227.json"},{"CVE":"CVE-2006-4226","severity":"low","public_date":"2006-02-22T00:00:00Z","advisories":["RHSA-2007:0152","RHSA-2007:0083"],"bugzilla":"203428","bugzilla_description":"CVE-2006-4226 mysql-server create database privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:4.1.20-2.RHEL4.1","mysql-0:5.0.30-1.el4s1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4226.json"},{"CVE":"CVE-2006-0903","severity":"low","public_date":"2006-02-20T00:00:00Z","advisories":["RHSA-2008:0364","RHSA-2006:0544","RHSA-2007:0083"],"bugzilla":"194613","bugzilla_description":"CVE-2006-0903 Mysql log file obfuscation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:5.0.45-7.el5","mysql-0:4.1.20-1.RHEL4.1","mysql-0:5.0.30-1.el4s1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0903.json"},{"CVE":"CVE-2006-4031","severity":"low","public_date":"2005-11-23T00:00:00Z","advisories":["RHSA-2008:0364","RHSA-2008:0768","RHSA-2007:0083"],"bugzilla":"202246","bugzilla_description":"CVE-2006-4031 MySQL improper permission revocation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:5.0.45-7.el5","mysql-0:4.1.22-2.el4","mysql-0:5.0.30-1.el4s1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4031.json"},{"CVE":"CVE-2006-4380","severity":"moderate","public_date":"2005-05-28T00:00:00Z","advisories":["RHSA-2006:0544"],"bugzilla":"1618185","bugzilla_description":"CVE-2006-4380 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:4.1.20-1.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4380.json"},{"CVE":"CVE-2005-1636","severity":"low","public_date":"2005-05-17T00:00:00Z","advisories":["RHSA-2005:685"],"bugzilla":"1617657","bugzilla_description":"CVE-2005-1636 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:4.1.12-3.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1636.json"},{"CVE":"CVE-2005-0709","severity":"important","public_date":"2005-03-11T00:00:00Z","advisories":["RHSA-2005:334","RHSA-2005:348"],"bugzilla":"1617560","bugzilla_description":"CVE-2005-0709 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:4.1.10a-1.RHEL4.1","mysql-0:3.23.58-15.RHEL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0709.json"},{"CVE":"CVE-2005-0710","severity":"important","public_date":"2005-03-11T00:00:00Z","advisories":["RHSA-2005:334","RHSA-2005:348"],"bugzilla":"1617561","bugzilla_description":"CVE-2005-0710 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:4.1.10a-1.RHEL4.1","mysql-0:3.23.58-15.RHEL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0710.json"},{"CVE":"CVE-2005-0711","severity":"important","public_date":"2005-03-11T00:00:00Z","advisories":["RHSA-2005:334","RHSA-2005:348"],"bugzilla":"1617562","bugzilla_description":"CVE-2005-0711 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:4.1.10a-1.RHEL4.1","mysql-0:3.23.58-15.RHEL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0711.json"},{"CVE":"CVE-2005-0004","severity":"moderate","public_date":"2005-01-19T00:00:00Z","advisories":[],"bugzilla":"1386138","bugzilla_description":"CVE-2005-0004 mysql: CVE-2005-0004 mysqlaccess creates/overwrite files on the system","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0004.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H","cvss3_score":"7.9"},{"CVE":"CVE-2004-0457","severity":null,"public_date":"2004-08-18T00:00:00Z","advisories":["RHSA-2004:569","RHSA-2004:597"],"bugzilla":"1617209","bugzilla_description":"CVE-2004-0457 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:3.23.58-2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0457.json"},{"CVE":"CVE-2004-0627","severity":"important","public_date":"2004-07-05T00:00:00Z","advisories":[],"bugzilla":"674431","bugzilla_description":"CVE-2004-0627 CVE-2004-0628 MySQL: check_scramble_323 authentication bypass and buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0627.json"},{"CVE":"CVE-2004-0628","severity":"important","public_date":"2004-07-05T00:00:00Z","advisories":[],"bugzilla":"674431","bugzilla_description":"CVE-2004-0627 CVE-2004-0628 MySQL: check_scramble_323 authentication bypass and buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0628.json"},{"CVE":"CVE-2004-0388","severity":"low","public_date":"2004-04-14T00:00:00Z","advisories":["RHSA-2004:569","RHSA-2004:597"],"bugzilla":"1617190","bugzilla_description":"CVE-2004-0388 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:3.23.58-2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0388.json"},{"CVE":"CVE-2004-0381","severity":"low","public_date":"2004-03-24T00:00:00Z","advisories":["RHSA-2004:569","RHSA-2004:597"],"bugzilla":"1617187","bugzilla_description":"CVE-2004-0381 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mysql-0:3.23.58-2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0381.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-bg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-bg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-bg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-cs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-cs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-cs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-da_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-da_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-da_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-de_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-de_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-de_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-el_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-el_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-el_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-en_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-en_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-en_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-es_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-es_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-es_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-fr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-fr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-fr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ga_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ga_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ga_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-hu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-hu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-hu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-it_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-it_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-it_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-lb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-lb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-lb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-lv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-lv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-lv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-mi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-mi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-mi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-nb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-nb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-nb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ne_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ne_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ne_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-nl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-nl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-nl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-nn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-nn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-nn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-pl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-pl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-pl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-pt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-pt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-pt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ru_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ru_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-ru_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-sk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-sk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-sk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-sl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-sl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-sl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-sv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-sv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-sv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-uk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-uk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes-uk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/mythes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nafees-web-naskh-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nafees-web-naskh-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nafees-web-naskh-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nano_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nano_security_api_results.json
new file mode 100644
index 0000000..9f548c3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nano_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-1160","severity":"low","public_date":"2010-04-02T00:00:00Z","advisories":[],"bugzilla":"582434","bugzilla_description":"CVE-2010-1160 CVE-2010-1161 nano: multiple file editing insecurities","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1160.json"},{"CVE":"CVE-2010-1161","severity":"low","public_date":"2010-04-02T00:00:00Z","advisories":[],"bugzilla":"582434","bugzilla_description":"CVE-2010-1160 CVE-2010-1161 nano: multiple file editing insecurities","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1161.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nasm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nasm_security_api_results.json
new file mode 100644
index 0000000..3c1d700
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nasm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24978","severity":"low","public_date":"2020-09-04T00:00:00Z","advisories":[],"bugzilla":"1877786","bugzilla_description":"CVE-2020-24978 nasm: double-free vulnerability in pp_tokline asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24978.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-24242","severity":"low","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1872747","bugzilla_description":"CVE-2020-24242 nasm: segmentation fault in tok_text function in asm/preproc.c by accessing read memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24242.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-24241","severity":"low","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1872803","bugzilla_description":"CVE-2020-24241 nasm: use-after-free in saa_wbytes function in nasmlib/saa.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24241.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-20352","severity":"low","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1790845","bugzilla_description":"CVE-2019-20352 nasm: heap-based buffer over-read in set_text_free when called from expand_one_smacro in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20352.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-20334","severity":"low","public_date":"2020-01-04T00:00:00Z","advisories":[],"bugzilla":"1824469","bugzilla_description":"CVE-2019-20334 nasm: stack consumption occurs in expr# functions in asm/eval.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20334.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-14248","severity":"low","public_date":"2019-07-24T00:00:00Z","advisories":[],"bugzilla":"1732714","bugzilla_description":"CVE-2019-14248 nasm: NULL pointer dereference in asm/pragma.c leading to Segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14248.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-8343","severity":"low","public_date":"2019-02-14T00:00:00Z","advisories":[],"bugzilla":"1677636","bugzilla_description":"CVE-2019-8343 nasm: use-after-free in paste_tokens in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8343.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-6290","severity":"low","public_date":"2019-01-02T00:00:00Z","advisories":[],"bugzilla":"1668319","bugzilla_description":"CVE-2019-6290 nasm: Infinite recursion in eval.c causing stack exhaustion problem resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6290.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-6291","severity":"low","public_date":"2019-01-02T00:00:00Z","advisories":[],"bugzilla":"1668321","bugzilla_description":"CVE-2019-6291 nasm: Recursive calls in the function expr resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6291.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-7147","severity":"low","public_date":"2019-01-01T00:00:00Z","advisories":[],"bugzilla":"1670704","bugzilla_description":"CVE-2019-7147 nasm: Buffer over-read in function crc64ib in crc64.c resulting in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7147.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-20535","severity":"low","public_date":"2018-11-18T00:00:00Z","advisories":[],"bugzilla":"1663907","bugzilla_description":"CVE-2018-20535 nasm: Use-after-free at asm/preproc.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20535.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20538","severity":"low","public_date":"2018-11-18T00:00:00Z","advisories":[],"bugzilla":"1663908","bugzilla_description":"CVE-2018-20538 nasm: Use-after-free at asm/preproc.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20538.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19755","severity":"low","public_date":"2018-11-12T00:00:00Z","advisories":[],"bugzilla":"1656210","bugzilla_description":"CVE-2018-19755 nasm: out-of-bounds array access in is_mmacro in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-19213","severity":"low","public_date":"2018-10-29T00:00:00Z","advisories":[],"bugzilla":"1652029","bugzilla_description":"CVE-2018-19213 nasm: memory leaks in nasm_malloc in nasmlib/malloc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19213.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19215","severity":"low","public_date":"2018-10-29T00:00:00Z","advisories":[],"bugzilla":"1652041","bugzilla_description":"CVE-2018-19215 nasm: heap-based buffer over-read in do_directive in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19215.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19209","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":[],"bugzilla":"1652027","bugzilla_description":"CVE-2018-19209 nasm: NULL pointer dereference in find_label in asm/labels.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19214","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":[],"bugzilla":"1652033","bugzilla_description":"CVE-2018-19214 nasm: heap-based buffer over-read in expand_mmac_params in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19214.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16999","severity":"low","public_date":"2018-09-13T00:00:00Z","advisories":[],"bugzilla":"1629990","bugzilla_description":"CVE-2018-16999 nasm: Invalid memory write (segmentation fault) in expand_smacro in preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16999.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000667","severity":"low","public_date":"2018-09-06T00:00:00Z","advisories":[],"bugzilla":"1626256","bugzilla_description":"CVE-2018-1000667 nasm: Memory corruption in assemble_file() function in asm/nasm.c:482","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000667.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2018-1000886","severity":"low","public_date":"2018-09-06T00:00:00Z","advisories":[],"bugzilla":"1663906","bugzilla_description":"CVE-2018-1000886 nasm: Buffer overflow in asm/stdscan.c:130 resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000886.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16517","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":[],"bugzilla":"1626549","bugzilla_description":"CVE-2018-16517 nasm: NULL Pointer Dereference in asm/labels.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16517.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2018-19216","severity":null,"public_date":"2018-08-28T00:00:00Z","advisories":[],"bugzilla":"1652046","bugzilla_description":"CVE-2018-19216 nasm: use-after-free in detoken at asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19216.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16382","severity":"low","public_date":"2018-08-03T00:00:00Z","advisories":[],"bugzilla":"1625037","bugzilla_description":"CVE-2018-16382 nasm: buffer over-read in x86/regflags.c allows for crash via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16382.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10316","severity":"low","public_date":"2018-04-25T00:00:00Z","advisories":[],"bugzilla":"1573298","bugzilla_description":"CVE-2018-10316 nasm: Endless while loop in the assemble_file function of asm/nasm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10316.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10254","severity":"low","public_date":"2018-04-21T00:00:00Z","advisories":[],"bugzilla":"1570495","bugzilla_description":"CVE-2018-10254 nasm: Stack-based buffer over-read in disasm/disasm.c:disasm() can allow attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10254.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10016","severity":"low","public_date":"2018-04-10T00:00:00Z","advisories":[],"bugzilla":"1567719","bugzilla_description":"CVE-2018-10016 nasm: Divide-by-zero asm/eval.c:expr5() allows for crash via crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10016.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17810","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529312","bugzilla_description":"CVE-2017-17810 nasm: Segfault via mishandled macro calls in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17810.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-17811","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529317","bugzilla_description":"CVE-2017-17811 nasm: Heap-based buffer overflow in paste_tokens function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17811.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-17812","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529319","bugzilla_description":"CVE-2017-17812 nasm: Heap-based buffer over-read in detoken function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17812.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17813","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529326","bugzilla_description":"CVE-2017-17813 nasm: use-after-free in pp_list_one_macro function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17813.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17814","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529327","bugzilla_description":"CVE-2017-17814 nasm: use-after-free in do_directive function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17815","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529328","bugzilla_description":"CVE-2017-17815 nasm: Illegal address access in is_mmacro function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17816","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529330","bugzilla_description":"CVE-2017-17816 nasm: Use-after-free in pp_getline function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17816.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17817","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529331","bugzilla_description":"CVE-2017-17817 nasm: Use-after-free in pp_verror function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17817.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17818","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529332","bugzilla_description":"CVE-2017-17818 nasm: Heap-based buffer over-read in paste_tokens function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17818.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17819","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529334","bugzilla_description":"CVE-2017-17819 nasm: Illegal address access in find_cc function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17819.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17820","severity":"low","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1529335","bugzilla_description":"CVE-2017-17820 nasm: Use-after-free in pp_list_one_macro function in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17820.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8883","severity":"low","public_date":"2017-10-22T00:00:00Z","advisories":[],"bugzilla":"1559919","bugzilla_description":"CVE-2018-8883 nasm: Buffer over-read in parse_line function in asm/parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8883.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8881","severity":"low","public_date":"2017-10-18T00:00:00Z","advisories":[],"bugzilla":"1559905","bugzilla_description":"CVE-2018-8881 nasm: Heap overflow in function tokenize in asm/preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8881.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8882","severity":"low","public_date":"2017-10-18T00:00:00Z","advisories":[],"bugzilla":"1559913","bugzilla_description":"CVE-2018-8882 nasm: Stack buffer underflow in function ieee_shr at source file asm/float.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14228","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":[],"bugzilla":"1493189","bugzilla_description":"CVE-2017-14228 nasm: NULL pointer dereference in the paste_tokens function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14228.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10686","severity":"moderate","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1472882","bugzilla_description":"CVE-2017-10686 nasm: Use-after-free in the detoken() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10686.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-11111","severity":"moderate","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1472884","bugzilla_description":"CVE-2017-11111 nasm: Heap buffer overflow in the preproc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11111.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2005-1194","severity":"low","public_date":"2005-03-31T00:00:00Z","advisories":["RHSA-2005:381"],"bugzilla":"1617615","bugzilla_description":"CVE-2005-1194 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nasm-0:0.98.38-3.EL4","nasm-0:0.98.35-3.EL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1194.json"},{"CVE":"CVE-2004-1287","severity":"low","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:381"],"bugzilla":"1617404","bugzilla_description":"CVE-2004-1287 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nasm-0:0.98.38-3.EL4","nasm-0:0.98.35-3.EL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1287.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus-extensions_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus-extensions_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus-extensions_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus-sendto_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus-sendto_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus-sendto_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus_security_api_results.json
new file mode 100644
index 0000000..36a9e5e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nautilus_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11461","severity":"low","public_date":"2019-04-13T00:00:00Z","advisories":[],"bugzilla":"1711144","bugzilla_description":"CVE-2019-11461 nautilus: sandbox security bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11461.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-14604","severity":"moderate","public_date":"2017-01-31T00:00:00Z","advisories":["RHSA-2018:0223"],"bugzilla":"1490872","bugzilla_description":"CVE-2017-14604 nautilus: Insufficient validation of trust of .desktop files with execute permission","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["nautilus-0:3.22.3-4.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14604.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/navilu-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/navilu-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/navilu-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-bash-completion_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-bash-completion_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-bash-completion_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-basic-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-basic-plugins_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-basic-plugins_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-example-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-example-plugins_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-example-plugins_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-gzip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-gzip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-gzip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-python-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-python-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-python-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-python3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-python3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-python3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-vddk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-vddk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-vddk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-xz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-xz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit-plugin-xz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit_security_api_results.json
new file mode 100644
index 0000000..e939e9c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nbdkit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-14850","severity":"low","public_date":"2019-09-20T00:00:00Z","advisories":["RHSA-2020:1167"],"bugzilla":"1757258","bugzilla_description":"CVE-2019-14850 nbdkit: denial of service due to premature opening of back-end connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406","affected_packages":["nbdkit-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14850.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-14851","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":[],"bugzilla":"1757259","bugzilla_description":"CVE-2019-14851 nbdkit: assertion failure by issuing commands in the wrong order","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14851.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncompress_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncompress_security_api_results.json
new file mode 100644
index 0000000..cbbe774
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncompress_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-2895","severity":"important","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2011:1154","RHSA-2011:1155","RHSA-2011:1161","RHSA-2011:1834"],"bugzilla":"727624","bugzilla_description":"CVE-2011-2895 BSD compress LZW decoder buffer overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libXfont-0:1.2.2-1.0.3.el5_6","libXfont-0:1.4.1-2.el6_1","freetype-0:2.1.9-19.el4","xorg-x11-0:6.8.2-1.EL.69","libXfont-0:1.2.2-1.0.4.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2895.json"},{"CVE":"CVE-2006-1168","severity":"moderate","public_date":"2006-08-08T00:00:00Z","advisories":["RHSA-2012:0810","RHSA-2012:0308","RHSA-2006:0663"],"bugzilla":"201919","bugzilla_description":"CVE-2006-1168 ncompress: .bss buffer underflow in decompression","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["busybox-1:1.2.0-13.el5","ncompress-0:4.2.4-39.rhel3","ncompress-0:4.2.4-43.rhel4","busybox-1:1.15.1-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1168.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-c++-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-c++-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-c++-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-compat-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-compat-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-compat-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-term_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-term_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses-term_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses_security_api_results.json
new file mode 100644
index 0000000..fd08161
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ncurses_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17595","severity":"moderate","public_date":"2019-10-11T00:00:00Z","advisories":[],"bugzilla":"1766617","bugzilla_description":"CVE-2019-17595 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17595.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-17594","severity":"moderate","public_date":"2019-10-11T00:00:00Z","advisories":[],"bugzilla":"1766745","bugzilla_description":"CVE-2019-17594 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17594.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-19217","severity":"low","public_date":"2018-11-12T00:00:00Z","advisories":[],"bugzilla":"1652606","bugzilla_description":"CVE-2018-19217 ncurses: Null pointer dereference at function _nc_name_match","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19217.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-19211","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":[],"bugzilla":"1652600","bugzilla_description":"CVE-2018-19211 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-10754","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":[],"bugzilla":"1576119","bugzilla_description":"CVE-2018-10754 ncurses: NULL Pointer Dereference in _nc_parse_entry function in tinfo/parse_entry.c.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10754.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2017-16879","severity":"low","public_date":"2017-11-18T00:00:00Z","advisories":[],"bugzilla":"1517922","bugzilla_description":"CVE-2017-16879 ncurses: Stack-based buffer overflow in the _nc_write_entry function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16879.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-13728","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488915","bugzilla_description":"CVE-2017-13728 ncurses: Infinite loop in the next_char function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13728.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13729","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488916","bugzilla_description":"CVE-2017-13729 ncurses: Illegal address access in the _nc_save_str function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13729.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13730","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488917","bugzilla_description":"CVE-2017-13730 ncurses: Illegal address access in the function _nc_read_entry_source()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13730.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13731","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488918","bugzilla_description":"CVE-2017-13731 ncurses: Illegal address access in the function postprocess_termcap()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13731.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13732","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488919","bugzilla_description":"CVE-2017-13732 ncurses: Illegal address access in the function dump_uses()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13732.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13733","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488920","bugzilla_description":"CVE-2017-13733 ncurses: Illegal address access in the function fmt_entry","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13733.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13734","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1488922","bugzilla_description":"CVE-2017-13734 ncurses: Illegal address access in the function _nc_safe_strcat","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10684","severity":"moderate","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1473302","bugzilla_description":"CVE-2017-10684 ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10684.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-11112","severity":"low","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1473306","bugzilla_description":"CVE-2017-11112 ncurses: Illegal address access in append_acs function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11112.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11113","severity":"low","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1473310","bugzilla_description":"CVE-2017-11113 ncurses: Null pointer dereference vulnerability in _nc_parse_entry function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11113.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10685","severity":"moderate","public_date":"2017-06-24T00:00:00Z","advisories":[],"bugzilla":"1473312","bugzilla_description":"CVE-2017-10685 ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10685.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ndctl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ndctl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ndctl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ndctl-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ndctl-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ndctl-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ndctl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ndctl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ndctl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/neon-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/neon-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/neon-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/neon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/neon_security_api_results.json
new file mode 100644
index 0000000..a0e444a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/neon_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2009-2473","severity":"low","public_date":"2009-08-18T00:00:00Z","advisories":["RHSA-2013:0131","RHSA-2009:1452"],"bugzilla":"518215","bugzilla_description":"CVE-2009-2473 neon: billion laughs DoS attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["gnome-vfs2-0:2.16.2-10.el5","neon-0:0.24.7-4.el4_8.2","neon-0:0.25.5-10.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2473.json"},{"CVE":"CVE-2009-2474","severity":"moderate","public_date":"2009-08-18T00:00:00Z","advisories":["RHSA-2009:1452"],"bugzilla":"518223","bugzilla_description":"CVE-2009-2474 neon: Improper verification of x509v3 certificate with NULL (zero) byte in certain fields","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["neon-0:0.24.7-4.el4_8.2","neon-0:0.25.5-10.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2474.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-agent-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-agent-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-agent-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp_security_api_results.json
new file mode 100644
index 0000000..b898a8d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-snmp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15862","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1873038","bugzilla_description":"CVE-2020-15862 net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15862.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15861","severity":"important","public_date":"2020-07-31T00:00:00Z","advisories":[],"bugzilla":"1862469","bugzilla_description":"CVE-2020-15861 net-snmp: combination with can lead to elevated permissions to root","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15861.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-20892","severity":"moderate","public_date":"2020-01-02T00:00:00Z","advisories":["RHBA-2020:1376"],"bugzilla":"1851145","bugzilla_description":"CVE-2019-20892 net-snmp: double free in usm_free_usmStateReference function in snmplib/snmpusm.c via an SNMPv3 GetBulk request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["net-snmp-1:5.8-12.el8_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20892.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1000116","severity":"moderate","public_date":"2018-03-07T00:00:00Z","advisories":["RHSA-2015:1636"],"bugzilla":"1552844","bugzilla_description":"CVE-2018-1000116 net-snmp: Heap corruption in snmp_pdu_parse function in snmplib/snmp_api.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["net-snmp-1:5.7.2-20.el7_1.1","net-snmp-1:5.5-54.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2018-18065","severity":"moderate","public_date":"2016-10-06T00:00:00Z","advisories":[],"bugzilla":"1637570","bugzilla_description":"CVE-2018-18065 net-snmp: NULL pointer exception in _set_key in agent/helpers/table_container.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18065.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-18066","severity":"moderate","public_date":"2015-10-06T00:00:00Z","advisories":["RHSA-2020:1081","RHSA-2020:2539"],"bugzilla":"1637572","bugzilla_description":"CVE-2018-18066 net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["net-snmp-1:5.7.2-47.el7","net-snmp-1:5.7.2-43.el7_7.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18066.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-5621","severity":"moderate","public_date":"2015-04-13T00:00:00Z","advisories":["RHSA-2015:1636"],"bugzilla":"1212408","bugzilla_description":"CVE-2015-5621 net-snmp: snmp_pdu_parse() incompletely parsed varBinds left in list of variables","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-772->CWE-672->CWE-665","affected_packages":["net-snmp-1:5.7.2-20.ael7b_1.1","net-snmp-1:5.5-54.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5621.json"},{"CVE":"CVE-2014-3565","severity":"moderate","public_date":"2014-08-31T00:00:00Z","advisories":["RHSA-2015:2345","RHSA-2015:1385"],"bugzilla":"1125155","bugzilla_description":"CVE-2014-3565 net-snmp: snmptrapd crash when handling an SNMP trap containing a ifMtu with a NULL type","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-843","affected_packages":["net-snmp-1:5.7.2-24.el7","net-snmp-1:5.5-54.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3565.json"},{"CVE":"CVE-2014-2310","severity":"moderate","public_date":"2014-03-06T00:00:00Z","advisories":[],"bugzilla":"1074631","bugzilla_description":"CVE-2014-2310 net-snmp: AgentX incorrectly handles multi-object requests leading to DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2310.json"},{"CVE":"CVE-2014-2285","severity":"moderate","public_date":"2014-03-03T00:00:00Z","advisories":["RHSA-2014:0322"],"bugzilla":"1072778","bugzilla_description":"CVE-2014-2285 net-snmp: snmptrapd crash when using a trap with empty community string","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["net-snmp-1:5.3.2.2-22.el5_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2285.json"},{"CVE":"CVE-2014-2284","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2014:0321"],"bugzilla":"1070396","bugzilla_description":"CVE-2014-2284 net-snmp: denial of service flaw in Linux implementation of ICMP-MIB","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["net-snmp-1:5.5-49.el6_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2284.json"},{"CVE":"CVE-2012-6151","severity":"moderate","public_date":"2012-09-05T00:00:00Z","advisories":["RHSA-2014:0322","RHBA-2013:1150"],"bugzilla":"1038007","bugzilla_description":"CVE-2012-6151 net-snmp: snmpd crashes/hangs when AgentX subagent times-out","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["net-snmp-1:5.5-44.el6_4.4","net-snmp-1:5.3.2.2-22.el5_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6151.json"},{"CVE":"CVE-2012-2141","severity":"moderate","public_date":"2012-04-24T00:00:00Z","advisories":["RHSA-2012:0876","RHSA-2013:0124"],"bugzilla":"815813","bugzilla_description":"CVE-2012-2141 net-snmp: Array index error, leading to out-of heap-based buffer read (snmpd crash)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["net-snmp-1:5.5-41.el6","net-snmp-1:5.3.2.2-20.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2141.json"},{"CVE":"CVE-2009-1887","severity":"moderate","public_date":"2009-06-25T00:00:00Z","advisories":["RHSA-2009:1124"],"bugzilla":"506903","bugzilla_description":"CVE-2009-1887 net-snmp: DoS (division by zero) via SNMP GetBulk requests","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["net-snmp-0:5.0.9-2.30E.28"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1887.json"},{"CVE":"CVE-2008-6123","severity":"moderate","public_date":"2008-12-09T00:00:00Z","advisories":["RHSA-2009:0295"],"bugzilla":"485211","bugzilla_description":"CVE-2008-6123 net-snmp: incorrect application of hosts access restrictions in hosts.{allow,deny}","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["net-snmp-0:5.0.9-2.30E.27"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-6123.json"},{"CVE":"CVE-2008-4309","severity":"important","public_date":"2008-10-31T00:00:00Z","advisories":["RHSA-2008:0971"],"bugzilla":"469349","bugzilla_description":"CVE-2008-4309 net-snmp: numresponses calculation integer overflow in snmp_agent.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["net-snmp-0:5.0.9-2.30E.25","net-snmp-0:5.1.2-13.el4_7.2","net-snmp-1:5.3.1-24.el5_2.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4309.json"},{"CVE":"CVE-2008-0960","severity":"moderate","public_date":"2008-06-09T00:00:00Z","advisories":["RHSA-2008:0529","RHSA-2008:0528"],"bugzilla":"447974","bugzilla_description":"CVE-2008-0960 net-snmp SNMPv3 authentication bypass (VU#877044)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["net-snmp-1:5.3.1-24.el5_2.1","ucd-snmp-0:4.2.5-8.AS21.7","net-snmp-0:5.1.2-11.el4_6.11.3","net-snmp-0:5.0.9-2.30E.24"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0960.json"},{"CVE":"CVE-2008-2292","severity":"moderate","public_date":"2007-11-05T00:00:00Z","advisories":["RHSA-2008:0529"],"bugzilla":"447262","bugzilla_description":"CVE-2008-2292 net-snmp: buffer overflow in perl module's Perl Module __snprint_value()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["net-snmp-1:5.3.1-24.el5_2.1","net-snmp-0:5.1.2-11.el4_6.11.3","net-snmp-0:5.0.9-2.30E.24"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2292.json"},{"CVE":"CVE-2007-5846","severity":"important","public_date":"2007-05-04T00:00:00Z","advisories":["RHSA-2007:1045"],"bugzilla":"363631","bugzilla_description":"CVE-2007-5846 net-snmp remote DoS via udp packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["net-snmp-0:5.1.2-11.el4_6.11.1","net-snmp-0:5.0.9-2.30E.23","net-snmp-1:5.3.1-19.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5846.json"},{"CVE":"CVE-2005-2177","severity":"low","public_date":"2005-07-01T00:00:00Z","advisories":["RHSA-2005:720","RHSA-2005:373","RHSA-2005:395"],"bugzilla":"1617692","bugzilla_description":"CVE-2005-2177 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["net-snmp-0:5.0.9-2.30E.19","net-snmp-0:5.1.2-11.EL4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2177.json"},{"CVE":"CVE-2005-4837","severity":"moderate","public_date":"2005-05-23T00:00:00Z","advisories":["RHSA-2005:373","RHSA-2005:395"],"bugzilla":"1617865","bugzilla_description":"CVE-2005-4837 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["net-snmp-0:5.0.9-2.30E.19","net-snmp-0:5.1.2-11.EL4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4837.json"},{"CVE":"CVE-2005-1740","severity":"low","public_date":"2005-05-18T00:00:00Z","advisories":["RHSA-2005:373","RHSA-2005:395"],"bugzilla":"1617663","bugzilla_description":"CVE-2005-1740 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["net-snmp-0:5.0.9-2.30E.19","net-snmp-0:5.1.2-11.EL4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1740.json"},{"CVE":"CVE-2003-0935","severity":"moderate","public_date":"2003-09-06T00:00:00Z","advisories":["RHSA-2004:023","RHSA-2003:335"],"bugzilla":"1617103","bugzilla_description":"CVE-2003-0935 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["net-snmp-0:5.0.9-2.30E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0935.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/net-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netcf-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netcf-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netcf-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netcf-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netcf-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netcf-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netcf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netcf_security_api_results.json
new file mode 100644
index 0000000..105f60c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netcf_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-8119","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":["RHBA-2015:1307","RHSA-2015:2248"],"bugzilla":"1172176","bugzilla_description":"CVE-2014-8119 netcf: augeas path expression injection via interface name","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-643->CWE-476","affected_packages":["netcf-0:0.2.4-3.el6","netcf-0:0.2.8-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8119.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netconsole-service_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netconsole-service_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netconsole-service_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netlabel_tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netlabel_tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netlabel_tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm-progs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm-progs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm-progs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm_security_api_results.json
new file mode 100644
index 0000000..c95651a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netpbm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-20622","severity":"low","public_date":"2018-12-31T00:00:00Z","advisories":[],"bugzilla":"1664872","bugzilla_description":"CVE-2018-20622 jasper: memory leak in jpc_dec_decodepkt()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20622.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20584","severity":"low","public_date":"2018-12-29T00:00:00Z","advisories":[],"bugzilla":"1664864","bugzilla_description":"CVE-2018-20584 jasper: DoS / hang when converting to jp2 format","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20584.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20570","severity":"low","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1664878","bugzilla_description":"CVE-2018-20570 jasper: heap-based buffer over-read in jp2_encode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20570.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-19139","severity":"low","public_date":"2018-11-09T00:00:00Z","advisories":[],"bugzilla":"1649110","bugzilla_description":"CVE-2018-19139 jasper: memory leak of data allocated in jpc_unk_getparms() after abort in jpc_dec_process_sot()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18873","severity":"low","public_date":"2018-10-31T00:00:00Z","advisories":[],"bugzilla":"1646647","bugzilla_description":"CVE-2018-18873 jasper: NULL pointer dereference in ras_putdatastd() in ras_enc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18873.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-19539","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1658773","bugzilla_description":"CVE-2018-19539 jasper: access violation in jas_image_readcmpt in libjasper/base/jas_image.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19539.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19540","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1658781","bugzilla_description":"CVE-2018-19540 jasper: heap-based buffer overflow of size 1 in jas_icctxtdesc_input in libjasper/base/jas_icc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19540.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19541","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1658786","bugzilla_description":"CVE-2018-19541 jasper: heap-based buffer over-read of size 8 in jas_image_depalettize in libjasper/base/jas_image.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19541.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-19542","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1658791","bugzilla_description":"CVE-2018-19542 jasper: invalid access in  jp2_decode in libjasper/jp2/jp2_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19542.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19543","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1658795","bugzilla_description":"CVE-2018-19543 jasper: heap-based buffer over-read of size 8 in jp2_decode in libjasper/jp2/jp2_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9154","severity":null,"public_date":"2018-05-04T00:00:00Z","advisories":[],"bugzilla":"1610135","bugzilla_description":"CVE-2018-9154 jasper: reachable abort in jpc_dec_process_sot()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9154.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9252","severity":"low","public_date":"2018-04-02T00:00:00Z","advisories":[],"bugzilla":"1565333","bugzilla_description":"CVE-2018-9252 jasper: reachable assertion in jpc_abstorelstepsize() in jpc_enc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9252.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9055","severity":"low","public_date":"2018-03-26T00:00:00Z","advisories":[],"bugzilla":"1561699","bugzilla_description":"CVE-2018-9055 jasper: reachable assertion in jpc_firstone() in jpc_math.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9055.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8975","severity":"low","public_date":"2018-03-15T00:00:00Z","advisories":[],"bugzilla":"1561206","bugzilla_description":"CVE-2018-8975 netpbm: heap-buffer-overflow in pm_mallocarray2 function in lib/util/mallocvar.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8975.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-14229","severity":"moderate","public_date":"2017-09-11T00:00:00Z","advisories":[],"bugzilla":"1491853","bugzilla_description":"CVE-2017-14229 jasper: excessive looping in jpc_dec_tileinit()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14229.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14132","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":[],"bugzilla":"1489304","bugzilla_description":"CVE-2017-14132 jasper: heap-based buffer over-read in jas_image_ishomosamp()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13745","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488958","bugzilla_description":"CVE-2017-13745 jasper: reachable abort in jpc_dec_process_sot()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13745.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13746","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488959","bugzilla_description":"CVE-2017-13746 jasper: reachable assertion in jpc_dec_process_siz() - dec->numvtiles","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13746.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13747","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488960","bugzilla_description":"CVE-2017-13747 jasper: reachable assertion in jpc_floorlog2()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13747.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13748","severity":"moderate","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488961","bugzilla_description":"CVE-2017-13748 jasper: tile memory not released on image parsing errors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13748.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13749","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488962","bugzilla_description":"CVE-2017-13749 jasper: reachable assertion in jpc_pi_nextrpcl()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13749.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13750","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488963","bugzilla_description":"CVE-2017-13750 jasper: reachable assertion in jpc_dec_process_siz() - dec->numhtiles","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13750.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13751","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488964","bugzilla_description":"CVE-2017-13751 jasper: reachable assertion in calcstepsizes()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13751.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13752","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488965","bugzilla_description":"CVE-2017-13752 jasper: reachable assertion in jpc_dequantize()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13752.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9782","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1463993","bugzilla_description":"CVE-2017-9782 jasper: cdef.ents[] heap-based buffer over-read in jp2_decode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9782.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000050","severity":"low","public_date":"2017-03-05T00:00:00Z","advisories":["RHSA-2018:3253"],"bugzilla":"1472888","bugzilla_description":"CVE-2017-1000050 jasper: NULL pointer exception in jp2_encode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000050.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-2586","severity":"low","public_date":"2017-02-06T00:00:00Z","advisories":[],"bugzilla":"1419539","bugzilla_description":"CVE-2017-2586 netpbm: Null pointer dereference in stringToUint function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2586.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-2587","severity":"low","public_date":"2017-02-06T00:00:00Z","advisories":[],"bugzilla":"1419542","bugzilla_description":"CVE-2017-2587 netpbm: Insufficient size check of memory allocation in createCanvas() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2587.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-2579","severity":"low","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1411404","bugzilla_description":"CVE-2017-2579 netpbm: Out-of-bounds read in expandCodeOntoStack()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2579.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-2580","severity":"moderate","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1411408","bugzilla_description":"CVE-2017-2580 netpbm: Out-of-bounds write of heap data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2580.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-2581","severity":"moderate","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1411409","bugzilla_description":"CVE-2017-2581 netpbm: Out-of-bounds write in writeRasterPbm() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2581.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-5849","severity":"low","public_date":"2017-01-31T00:00:00Z","advisories":[],"bugzilla":"1419650","bugzilla_description":"CVE-2017-5849 netpbm: Calls TIFFRGBA with width and height parameters switched","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5849.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-6850","severity":"moderate","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1434458","bugzilla_description":"CVE-2017-6850 jasper: uninitialized pointer use in jp2_cdef_destroy()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6850.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-6852","severity":"moderate","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1434459","bugzilla_description":"CVE-2017-6852 jasper: Out of bounds heap read in jpc_dec_decodepkt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6852.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-6851","severity":"low","public_date":"2017-01-21T00:00:00Z","advisories":[],"bugzilla":"1435324","bugzilla_description":"CVE-2017-6851 jasper: Invalid memory read in jas_matrix_bindsub (jas_seq.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6851.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9600","severity":"low","public_date":"2016-12-29T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1410026","bugzilla_description":"CVE-2016-9600 jasper: JP2 encoder NULL pointer dereference due to uninitialized cmprof_","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9600.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-9591","severity":"low","public_date":"2016-12-16T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1406405","bugzilla_description":"CVE-2016-9591 jasper: use-after-free / double-free in JPC encoder","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9591.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9583","severity":"low","public_date":"2016-12-09T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1405148","bugzilla_description":"CVE-2016-9583 jasper: integer overflows leading to out of bounds read in packet iterators in JPC decoder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9583.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8654","severity":"important","public_date":"2016-11-25T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1399167","bugzilla_description":"CVE-2016-8654 jasper: heap-based buffer overflow in QMFB code in JPC codec","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8654.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9560","severity":"important","public_date":"2016-11-20T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1398256","bugzilla_description":"CVE-2016-9560 jasper: stack-based buffer overflow in jpc_dec_tileinit()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9560.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-5503","severity":"moderate","public_date":"2016-11-20T00:00:00Z","advisories":[],"bugzilla":"1416056","bugzilla_description":"CVE-2017-5503 jasper: invalid memory write in dec_clnpass()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5503.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5505","severity":"moderate","public_date":"2016-11-20T00:00:00Z","advisories":[],"bugzilla":"1416068","bugzilla_description":"CVE-2017-5505 jasper: Invalid memory read in jas_matrix_asl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5505.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5504","severity":"moderate","public_date":"2016-11-20T00:00:00Z","advisories":[],"bugzilla":"1416069","bugzilla_description":"CVE-2017-5504 jasper: Invalid memory read in jpc_undo_roi","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5504.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-9396","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2018:3253"],"bugzilla":"1396978","bugzilla_description":"CVE-2016-9396 jasper: reachable assertion in JPC_NOMINALGAIN()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9396.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9397","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396979","bugzilla_description":"CVE-2016-9397 jasper: reachable assertion in jpc_dequantize()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9397.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9398","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396980","bugzilla_description":"CVE-2016-9398 jasper: reachable assertion in jpc_floorlog2()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9398.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9399","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396981","bugzilla_description":"CVE-2016-9399 jasper: reachable assertion in calcstepsizes()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9395","severity":"low","public_date":"2016-11-12T00:00:00Z","advisories":[],"bugzilla":"1396977","bugzilla_description":"CVE-2016-9395 jasper: reachable assertion failure in jas_seq2d_create()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9395.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9557","severity":"low","public_date":"2016-11-12T00:00:00Z","advisories":[],"bugzilla":"1398251","bugzilla_description":"CVE-2016-9557 jasper: signed integer overflow in jas_image_create()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9557.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9262","severity":"moderate","public_date":"2016-11-06T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1393882","bugzilla_description":"CVE-2016-9262 jasper: integer truncation in jas_image_cmpt_create()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9262.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10251","severity":"low","public_date":"2016-11-04T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1434461","bugzilla_description":"CVE-2016-10251 jasper: integer overflow in jpc_pi_nextcprl(), leading to out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10251.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9392","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396971","bugzilla_description":"CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 jasper: insufficient SIZ marker segment data sanity checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9392.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9393","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396971","bugzilla_description":"CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 jasper: insufficient SIZ marker segment data sanity checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9393.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9394","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396971","bugzilla_description":"CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 jasper: insufficient SIZ marker segment data sanity checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9394.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5498","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416060","bugzilla_description":"CVE-2017-5498 jasper: Left shift of negative value in jas_fast32_asl() in jas_math.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5498.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5499","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416061","bugzilla_description":"CVE-2017-5499 jasper: Signed integer overflow in jpc_dequantize() in jpc_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5499.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5500","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416063","bugzilla_description":"CVE-2017-5500 jasper: Invalid exponent shift in jpc_calcabsstepsize() in jpc_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5500.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5501","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416064","bugzilla_description":"CVE-2017-5501 jasper: Signed integer overflow in jpc_tsfb_getbands2() in jpc_tsfb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5501.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5502","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416066","bugzilla_description":"CVE-2017-5502 jasper: Left shift of negative value in jp2_validate() in jp2_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5502.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9391","severity":"low","public_date":"2016-10-25T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396967","bugzilla_description":"CVE-2016-9391 jasper: reachable assertions in the JPC bitstream code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9391.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9388","severity":"low","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396962","bugzilla_description":"CVE-2016-9388 jasper: reachable assertions in RAS encoder/decoder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9388.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9389","severity":"low","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396963","bugzilla_description":"CVE-2016-9389 jasper: reachable assertions caused by insufficient component domains checks in ICT/RCT in JPC codec","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9389.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9390","severity":"low","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396965","bugzilla_description":"CVE-2016-9390 jasper: insufficient SIZ marker tilexoff and tileyoff checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9390.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10249","severity":"important","public_date":"2016-10-23T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1388840","bugzilla_description":"CVE-2016-10249 jasper: integer overflow in jas_matrix_create()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10249.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9387","severity":"low","public_date":"2016-10-23T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396959","bugzilla_description":"CVE-2016-9387 jasper: integer overflow in jpc_dec_process_siz()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-190","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9387.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2016-10248","severity":"low","public_date":"2016-10-20T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1434447","bugzilla_description":"CVE-2016-10248 jasper: NULL pointer dereference in jpc_tsfb_synthesize()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10248.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8887","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1388828","bugzilla_description":"CVE-2016-8887 jasper: uninitialized pointer use in jp2_box_get()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8887.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10250","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1388829","bugzilla_description":"CVE-2016-10250 jasper: Null pointer dereference in jp2_colr_destroy (incomplete fix for CVE-2016-8887)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10250.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8886","severity":"low","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1388880","bugzilla_description":"CVE-2016-8886 jasper: no upper limit on memory allocations in jas_malloc()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8886.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8880","severity":null,"public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1388863","bugzilla_description":"CVE-2016-8880 jasper: heap buffer overflow in jpc_dec_cp_setfromcox() (rejected duplicate of CVE-2011-4516)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8880.json"},{"CVE":"CVE-2016-8881","severity":null,"public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1388864","bugzilla_description":"CVE-2016-8881 jasper: insufficient memory allocation in jpc_crg_getparms() (rejected duplicate of CVE-2011-4517)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8881.json"},{"CVE":"CVE-2016-8882","severity":"moderate","public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1388866","bugzilla_description":"CVE-2016-8882 jasper: uninitialized tile->pi pointer use in JPC decoder","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8883","severity":"low","public_date":"2016-10-17T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1388870","bugzilla_description":"CVE-2016-8883 jasper: reachable asserts in jpc_dec_tiledecode()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8883.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8690","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385499","bugzilla_description":"CVE-2016-8690 CVE-2016-8884 CVE-2016-8885 jasper: missing jas_matrix_create() parameter checks","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8690.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8884","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385499","bugzilla_description":"CVE-2016-8690 CVE-2016-8884 CVE-2016-8885 jasper: missing jas_matrix_create() parameter checks","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8884.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8885","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385499","bugzilla_description":"CVE-2016-8690 CVE-2016-8884 CVE-2016-8885 jasper: missing jas_matrix_create() parameter checks","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8691","severity":"low","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385502","bugzilla_description":"CVE-2016-8691 CVE-2016-8692 jasper: missing SIZ marker segment XRsiz and YRsiz fields range check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-369","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8691.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8692","severity":"low","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385502","bugzilla_description":"CVE-2016-8691 CVE-2016-8692 jasper: missing SIZ marker segment XRsiz and YRsiz fields range check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-369","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8692.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8693","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385507","bugzilla_description":"CVE-2016-8693 jasper: incorrect handling of bufsize 0 in mem_resize()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8693.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-1577","severity":"moderate","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1314466","bugzilla_description":"CVE-2016-1577 jasper: double free issue in jas_iccattrval_destroy()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1577.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-2116","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1314472","bugzilla_description":"CVE-2016-2116 jasper: memory leak in jas_iccprof_createfrombuf()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2116.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-2089","severity":"low","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1302636","bugzilla_description":"CVE-2016-2089 jasper: matrix rows_ NULL pointer dereference in jas_matrix_clip()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2089.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2015-8751","severity":"moderate","public_date":"2015-12-24T00:00:00Z","advisories":[],"bugzilla":"1296949","bugzilla_description":"CVE-2015-8751 jasper: integer overflow in the jas_matrix_create() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8751.json"},{"CVE":"CVE-2015-5221","severity":"moderate","public_date":"2015-08-20T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1255710","bugzilla_description":"CVE-2015-5221 jasper: use-after-free and double-free flaws in mif_process_cmpt()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5221.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-5203","severity":"moderate","public_date":"2015-08-16T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1254242","bugzilla_description":"CVE-2015-5203 jasper: integer overflow in jas_image_cmpt_create()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5203.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-3885","severity":"low","public_date":"2015-05-11T00:00:00Z","advisories":[],"bugzilla":"1221249","bugzilla_description":"CVE-2015-3885 dcraw: input sanitization flaw leading to buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-190->CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3885.json"},{"CVE":"CVE-2014-8157","severity":"important","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0698","RHSA-2015:0074"],"bugzilla":"1179282","bugzilla_description":"CVE-2014-8157 jasper: dec->numtiles off-by-one check in jpc_dec_process_sot() (oCERT-2015-001)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-122","affected_packages":["spice-client-msi-0:3.5-3","jasper-0:1.900.1-16.el6_6.3","jasper-0:1.900.1-26.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8157.json"},{"CVE":"CVE-2014-8158","severity":"moderate","public_date":"2015-01-21T00:00:00Z","advisories":["RHSA-2015:0698","RHSA-2015:0074"],"bugzilla":"1179298","bugzilla_description":"CVE-2014-8158 jasper: unrestricted stack memory use in jpc_qmfb.c (oCERT-2015-001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-770","affected_packages":["spice-client-msi-0:3.5-3","jasper-0:1.900.1-16.el6_6.3","jasper-0:1.900.1-26.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8158.json"},{"CVE":"CVE-2014-8137","severity":"low","public_date":"2014-12-18T00:00:00Z","advisories":["RHSA-2015:0698","RHSA-2015:1713","RHSA-2014:2021"],"bugzilla":"1173157","bugzilla_description":"CVE-2014-8137 jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rhev-hypervisor7-0:7.1-20150827.1.el7ev","spice-client-msi-0:3.5-3","jasper-0:1.900.1-16.el6_6.2","jasper-0:1.900.1-26.el7_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8137.json"},{"CVE":"CVE-2014-8138","severity":"important","public_date":"2014-12-18T00:00:00Z","advisories":["RHSA-2015:0698","RHSA-2015:1713","RHSA-2014:2021"],"bugzilla":"1173162","bugzilla_description":"CVE-2014-8138 jasper: heap overflow in jp2_decode() (oCERT-2014-012)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rhev-hypervisor7-0:7.1-20150827.1.el7ev","spice-client-msi-0:3.5-3","jasper-0:1.900.1-16.el6_6.2","jasper-0:1.900.1-26.el7_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8138.json"},{"CVE":"CVE-2014-9029","severity":"important","public_date":"2014-12-04T00:00:00Z","advisories":["RHSA-2015:0698","RHSA-2014:2021"],"bugzilla":"1167537","bugzilla_description":"CVE-2014-9029 jasper: incorrect component number check in COC, RGN and QCC marker segment decoders (oCERT-2014-009)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193->CWE-122","affected_packages":["spice-client-msi-0:3.5-3","jasper-0:1.900.1-16.el6_6.2","jasper-0:1.900.1-26.el7_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9029.json"},{"CVE":"CVE-2011-4516","severity":"important","public_date":"2011-12-08T00:00:00Z","advisories":["RHSA-2011:1807","RHSA-2015:0698","RHSA-2011:1811"],"bugzilla":"747726","bugzilla_description":"CVE-2011-4516 CVE-2011-4517 jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["netpbm-0:10.35.58-8.el4","jasper-0:1.900.1-15.el6_1.1","spice-client-msi-0:3.5-3","netpbm-0:10.35.58-8.el5_7.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4516.json"},{"CVE":"CVE-2011-4517","severity":"important","public_date":"2011-12-08T00:00:00Z","advisories":["RHSA-2011:1807","RHSA-2015:0698","RHSA-2011:1811"],"bugzilla":"747726","bugzilla_description":"CVE-2011-4516 CVE-2011-4517 jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["netpbm-0:10.35.58-8.el4","jasper-0:1.900.1-15.el6_1.1","spice-client-msi-0:3.5-3","netpbm-0:10.35.58-8.el5_7.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4517.json"},{"CVE":"CVE-2009-4274","severity":"moderate","public_date":"2010-02-09T00:00:00Z","advisories":["RHSA-2011:1811"],"bugzilla":"546580","bugzilla_description":"CVE-2009-4274 netpbm: Stack-based buffer overflow by processing X PixMap image header fields","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["netpbm-0:10.35.58-8.el4","netpbm-0:10.35.58-8.el5_7.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4274.json"},{"CVE":"CVE-2008-3520","severity":"moderate","public_date":"2008-09-08T00:00:00Z","advisories":["RHSA-2015:0698","RHSA-2009:0012"],"bugzilla":"461476","bugzilla_description":"CVE-2008-3520 jasper: multiple integer overflows in jas_alloc calls","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["netpbm-0:10.25-2.1.el4_7.4","spice-client-msi-0:3.5-3","netpbm-0:10.35-6.1.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3520.json"},{"CVE":"CVE-2008-0554","severity":"moderate","public_date":"2008-02-01T00:00:00Z","advisories":["RHSA-2008:0131"],"bugzilla":"431525","bugzilla_description":"CVE-2008-0554 netpbm: GIF handling buffer overflow in giftopnm","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["netpbm-0:10.25-2.EL4.6.el4_6.1","netpbm-0:9.24-9.AS21.7","netpbm-0:9.24-11.30.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0554.json"},{"CVE":"CVE-2007-2721","severity":"moderate","public_date":"2007-03-01T00:00:00Z","advisories":["RHSA-2009:0012"],"bugzilla":"346501","bugzilla_description":"CVE-2007-2721 jasper: crash in jpc_qcx_getcompparms","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["netpbm-0:10.25-2.1.el4_7.4","netpbm-0:10.35-6.1.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2721.json"},{"CVE":"CVE-2005-3632","severity":"moderate","public_date":"2005-11-12T00:00:00Z","advisories":["RHSA-2005:843"],"bugzilla":"1617833","bugzilla_description":"CVE-2005-3632 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["netpbm-0:9.24-11.30.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3632.json"},{"CVE":"CVE-2005-3662","severity":"moderate","public_date":"2005-11-12T00:00:00Z","advisories":["RHSA-2005:843"],"bugzilla":"1617836","bugzilla_description":"CVE-2005-3662 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["netpbm-0:9.24-11.30.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3662.json"},{"CVE":"CVE-2005-2978","severity":"moderate","public_date":"2005-10-18T00:00:00Z","advisories":["RHSA-2005:793"],"bugzilla":"1617774","bugzilla_description":"CVE-2005-2978 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["netpbm-0:10.25-2.EL4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2978.json"},{"CVE":"CVE-2005-2471","severity":"low","public_date":"2005-07-24T00:00:00Z","advisories":["RHSA-2005:743"],"bugzilla":"1617722","bugzilla_description":"CVE-2005-2471 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["netpbm-0:10.25-2.EL4.1","netpbm-0:9.24-11.30.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2471.json"},{"CVE":"CVE-2003-0924","severity":"moderate","public_date":"2004-01-18T00:00:00Z","advisories":["RHSA-2004:030","RHSA-2004:031"],"bugzilla":"1617099","bugzilla_description":"CVE-2003-0924 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["netpbm-0:9.24-11.30.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0924.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netstandard-targeting-pack-2.1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netstandard-targeting-pack-2.1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/netstandard-targeting-pack-2.1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nettle-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nettle-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nettle-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nettle_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nettle_security_api_results.json
new file mode 100644
index 0000000..e1732a4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nettle_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-16869","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1654930","bugzilla_description":"CVE-2018-16869 nettle: Leaky data conversion exposing a manager oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16869.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2016-6489","severity":"moderate","public_date":"2016-06-20T00:00:00Z","advisories":["RHSA-2016:2582"],"bugzilla":"1362016","bugzilla_description":"CVE-2016-6489 nettle: RSA/DSA code is vulnerable to cache-timing related attacks","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["nettle-0:2.7.1-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6489.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2015-8803","severity":"moderate","public_date":"2016-02-02T00:00:00Z","advisories":["RHSA-2016:2582"],"bugzilla":"1304303","bugzilla_description":"CVE-2015-8803 nettle: secp256 calculation bug","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-358","affected_packages":["nettle-0:2.7.1-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8803.json"},{"CVE":"CVE-2015-8804","severity":"moderate","public_date":"2016-02-02T00:00:00Z","advisories":["RHSA-2016:2582"],"bugzilla":"1304379","bugzilla_description":"CVE-2015-8804 nettle: miscalculations on secp384 curve","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-358","affected_packages":["nettle-0:2.7.1-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8804.json"},{"CVE":"CVE-2015-8805","severity":"moderate","public_date":"2016-02-02T00:00:00Z","advisories":["RHSA-2016:2582"],"bugzilla":"1304382","bugzilla_description":"CVE-2015-8805 nettle: secp256 calculation bug","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-358","affected_packages":["nettle-0:2.7.1-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8805.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-manager-applet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-manager-applet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-manager-applet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-scripts-ppp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-scripts-ppp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-scripts-ppp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-scripts-team_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-scripts-team_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-scripts-team_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-scripts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-scripts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/network-scripts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/newt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/newt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/newt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/newt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/newt_security_api_results.json
new file mode 100644
index 0000000..351dfcf
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/newt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2009-2905","severity":"moderate","public_date":"2009-09-24T00:00:00Z","advisories":["RHSA-2009:1463"],"bugzilla":"523955","bugzilla_description":"CVE-2009-2905 newt: heap-overflow in textbox when text reflowing","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["newt-0:0.51.6-10.el4_8.1","newt-0:0.52.2-12.el5_4.1","newt-0:0.51.5-2.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2905.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nfs-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nfs-utils_security_api_results.json
new file mode 100644
index 0000000..5ed33ab
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nfs-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-3689","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1850194","bugzilla_description":"CVE-2019-3689 nfs-utils: root-owned files stored in insecure /var/lib/nfs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3689.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-10197","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418612","bugzilla_description":"CVE-2016-10197 libevent: Out-of-bounds read in search_make_new()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10195","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418608","bugzilla_description":"CVE-2016-10195 libevent: Stack-buffer overflow in the name_parse() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10196","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418611","bugzilla_description":"CVE-2016-10196 libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-6525","severity":"moderate","public_date":"2015-08-24T00:00:00Z","advisories":[],"bugzilla":"1256797","bugzilla_description":"CVE-2015-6525 libevent: multiple integer overflows in the evbuffer APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6525.json"},{"CVE":"CVE-2014-6272","severity":"moderate","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1144646","bugzilla_description":"CVE-2014-6272 libevent: potential heap overflow in buffer/bufferevent APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6272.json"},{"CVE":"CVE-2013-1923","severity":"low","public_date":"2013-04-02T00:00:00Z","advisories":[],"bugzilla":"948072","bugzilla_description":"CVE-2013-1923 nfs-utils: rpc.gssd is vulnerable to DNS spoofing","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1923.json"},{"CVE":"CVE-2011-2500","severity":"low","public_date":"2011-06-22T00:00:00Z","advisories":["RHSA-2011:1534"],"bugzilla":"716949","bugzilla_description":"CVE-2011-2500 nfs-utils: Improper authentication of an incoming request when an IP based authentication used","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["nfs-utils-1:1.2.3-15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2500.json"},{"CVE":"CVE-2011-1749","severity":"low","public_date":"2011-04-19T00:00:00Z","advisories":["RHSA-2011:1534","RHSA-2012:0310"],"bugzilla":"697975","bugzilla_description":"CVE-2011-1749 nfs-utils: mount.nfs fails to anticipate RLIMIT_FSIZE","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["nfs-utils-1:1.2.3-15.el6","nfs-utils-1:1.0.9-60.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1749.json"},{"CVE":"CVE-2008-4552","severity":"low","public_date":"2008-08-05T00:00:00Z","advisories":["RHSA-2009:1321"],"bugzilla":"458676","bugzilla_description":"CVE-2008-4552 nfs-utils: incorrect use of tcp_wrappers, causing hostname-based rules to be ignored","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["nfs-utils-1:1.0.9-42.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4552.json"},{"CVE":"CVE-2008-1376","severity":"moderate","public_date":"2008-07-31T00:00:00Z","advisories":["RHSA-2008:0486","RHSA-2009:0955"],"bugzilla":"440114","bugzilla_description":"CVE-2008-1376 nfs-utils: missing tcp_wrappers support","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nfs-utils-0:1.0.6-93.EL4","nfs-utils-1:1.0.9-35z.el5_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1376.json"},{"CVE":"CVE-2007-3999","severity":"important","public_date":"2007-09-04T19:00:00Z","advisories":["RHSA-2007:0951","RHSA-2007:0913","RHSA-2007:0858"],"bugzilla":"250973","bugzilla_description":"CVE-2007-3999 krb5 RPC library buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["krb5-0:1.5-29","nfs-utils-lib-0:1.0.6-8.z1","nfs-utils-lib-0:1.0.8-7.2.z2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3999.json"},{"CVE":"CVE-2007-4135","severity":"moderate","public_date":"2007-08-31T00:00:00Z","advisories":["RHSA-2007:0951"],"bugzilla":"254040","bugzilla_description":"CVE-2007-4135 nfs-utils-lib NFSv4 user id mapping flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nfs-utils-lib-0:1.0.8-7.2.z2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4135.json"},{"CVE":"CVE-2004-1014","severity":"important","public_date":"2004-12-01T00:00:00Z","advisories":["RHSA-2005:014","RHSA-2004:583"],"bugzilla":"1617349","bugzilla_description":"CVE-2004-1014 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nfs-utils-0:1.0.6-33EL"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1014.json"},{"CVE":"CVE-2004-0946","severity":null,"public_date":"2004-11-22T00:00:00Z","advisories":["RHSA-2005:014","RHSA-2004:583"],"bugzilla":"1617327","bugzilla_description":"CVE-2004-0946 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nfs-utils-0:1.0.6-33EL"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0946.json"},{"CVE":"CVE-2004-0154","severity":"low","public_date":"2003-09-09T00:00:00Z","advisories":["RHSA-2004:072"],"bugzilla":"1617162","bugzilla_description":"CVE-2004-0154 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nfs-utils-0:1.0.6-7.EL"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0154.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nfs4-acl-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nfs4-acl-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nfs4-acl-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nftables_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nftables_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nftables_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nghttp2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nghttp2_security_api_results.json
new file mode 100644
index 0000000..b153102
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nghttp2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-11080","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:2852","RHSA-2020:2850","RHSA-2020:2784","RHSA-2020:2848","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:2646","RHSA-2020:2823","RHSA-2020:2644","RHSA-2020:2523","RHSA-2020:2524","RHSA-2020:2755","RHSA-2020:3042","RHSA-2020:3084"],"bugzilla":"1844929","bugzilla_description":"CVE-2020-11080 nghttp2: overly large SETTINGS frames can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["servicemesh-proxy-0:1.0.10-3.el8","nghttp2-0:1.33.0-3.el8_1.1","rh-nodejs10-nodejs-0:10.21.0-3.el7","nghttp2-0:1.33.0-3.el8_2.1","nodejs:12-8010020200630154708.c27ad7f8","httpd24-nghttp2-0:1.7.1-8.el7.1","nodejs:10-8010020200617134056.c27ad7f8","httpd24-nghttp2-0:1.7.1-8.el6.1","nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","rh-nodejs12-nodejs-0:12.18.2-1.el7","servicemesh-proxy-0:1.1.2-3.el8","nodejs:10-8020020200617141353.4cda2c84","nghttp2-0:1.33.0-1.el8_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11080.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9513","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:3041","RHSA-2019:2692","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1735741","bugzilla_description":"CVE-2019-9513 HTTP/2: flood using PRIORITY frames results in excessive resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","rh-nginx112-nginx-1:1.12.1-3.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","kiali-0:v1.0.6.redhat1-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9511","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3932","RHSA-2019:2799","RHSA-2020:2067","RHSA-2019:2775","RHSA-2019:3041","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4021","RHSA-2019:2692","RHSA-2020:1445","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2020:3192","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741860","bugzilla_description":"CVE-2019-9511 HTTP/2: large amount of data requests leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","kiali-0:v1.0.6.redhat1-1.el7","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9516","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741864","bugzilla_description":"CVE-2019-9516 HTTP/2: 0-length headers lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9517","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:2893","RHSA-2019:3932","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2955","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741868","bugzilla_description":"CVE-2019-9517 HTTP/2: request for large response leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","httpd:2.4-8000020190829150747.f8e95b4e","nodejs:10-8000020190911085529.f8e95b4e","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9517.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1000168","severity":"moderate","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366"],"bugzilla":"1565035","bugzilla_description":"CVE-2018-1000168 nghttp2: Null pointer dereference when too large ALTSVC frame is received","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000168.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-1544","severity":"low","public_date":"2016-02-11T00:00:00Z","advisories":[],"bugzilla":"1308461","bugzilla_description":"CVE-2016-1544 nghttp2: out of memory error due to unlimited incoming HTTP header fields","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1544.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-all-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-all-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-all-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-http-image-filter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-http-image-filter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-http-image-filter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-http-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-http-perl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-http-perl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-http-xslt-filter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-http-xslt-filter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-http-xslt-filter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-mail_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-mail_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-mail_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-stream_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-stream_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx-mod-stream_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx_security_api_results.json
new file mode 100644
index 0000000..12ff41c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nginx_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-20372","severity":"moderate","public_date":"2020-01-09T00:00:00Z","advisories":["RHSA-2020:2817"],"bugzilla":"1790277","bugzilla_description":"CVE-2019-20372 nginx: HTTP request smuggling via error pages in http/ngx_http_special_response.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["rh-nginx116-nginx-1:1.16.1-4.el7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20372.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9513","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:3041","RHSA-2019:2692","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1735741","bugzilla_description":"CVE-2019-9513 HTTP/2: flood using PRIORITY frames results in excessive resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","rh-nginx112-nginx-1:1.12.1-3.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","kiali-0:v1.0.6.redhat1-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9515","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:2861","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3892","RHSA-2019:2766","RHSA-2020:2067","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4352","RHSA-2019:4045","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2020:3196","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2925"],"bugzilla":"1735745","bugzilla_description":"CVE-2019-9515 HTTP/2: flood using SETTINGS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","nodejs:10-8000020190911085529.f8e95b4e","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","skydive-0:0.20.5-2.el7ost","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9518","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:3892","RHSA-2020:0727","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:3196","RHSA-2019:4352","RHSA-2019:2955","RHSA-2019:2939","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2925"],"bugzilla":"1735749","bugzilla_description":"CVE-2019-9518 HTTP/2: flood using empty frames results in excessive resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nodejs:10-8000020190911085529.f8e95b4e","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9511","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3932","RHSA-2019:2799","RHSA-2020:2067","RHSA-2019:2775","RHSA-2019:3041","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4021","RHSA-2019:2692","RHSA-2020:1445","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2020:3192","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741860","bugzilla_description":"CVE-2019-9511 HTTP/2: large amount of data requests leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","kiali-0:v1.0.6.redhat1-1.el7","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9516","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741864","bugzilla_description":"CVE-2019-9516 HTTP/2: 0-length headers lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9517","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:2893","RHSA-2019:3932","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2955","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741868","bugzilla_description":"CVE-2019-9517 HTTP/2: request for large response leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","httpd:2.4-8000020190829150747.f8e95b4e","nodejs:10-8000020190911085529.f8e95b4e","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9517.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16845","severity":"important","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2018:3681","RHSA-2018:3680","RHSA-2018:3653","RHSA-2018:3652"],"bugzilla":"1644508","bugzilla_description":"CVE-2018-16845 nginx: Denial of service and memory disclosure via mp4 module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-201","affected_packages":["rh-nginx18-nginx-1:1.8.1-1.el7.1","rh-nginx18-nginx-1:1.8.1-1.el6.1","rh-nginx110-nginx-1:1.10.2-8.el6.1","rh-nginx110-nginx-1:1.10.2-8.el7.1","rh-nginx112-nginx-1:1.12.1-2.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16845.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2018-16844","severity":"moderate","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2018:3681","RHSA-2018:3680"],"bugzilla":"1644510","bugzilla_description":"CVE-2018-16844 nginx: Excessive CPU usage via flaw in HTTP/2 implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nginx112-nginx-1:1.12.1-2.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16844.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16843","severity":"moderate","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2018:3681","RHSA-2018:3680","RHSA-2018:3653"],"bugzilla":"1644511","bugzilla_description":"CVE-2018-16843 nginx: Excessive memory consumption via flaw in HTTP/2 implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nginx110-nginx-1:1.10.2-8.el6.1","rh-nginx110-nginx-1:1.10.2-8.el7.1","rh-nginx112-nginx-1:1.12.1-2.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-7529","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":["RHSA-2017:2538"],"bugzilla":"1468584","bugzilla_description":"CVE-2017-7529 nginx: Integer overflow in nginx range filter module leading to memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-nginx110-nginx-1:1.10.2-8.el7","rh-nginx110-nginx-1:1.10.2-8.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7529.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-1247","severity":"low","public_date":"2016-10-25T00:00:00Z","advisories":[],"bugzilla":"1390182","bugzilla_description":"CVE-2016-1247 nginx: Local privilege escalation via log files","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1247.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2016-1000105","severity":"important","public_date":"2016-07-18T00:00:00Z","advisories":[],"bugzilla":"1353758","bugzilla_description":"CVE-2016-1000105 Nginx: fastcgi sets environmental variable  based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-4450","severity":"moderate","public_date":"2016-05-31T00:00:00Z","advisories":["RHSA-2016:1425"],"bugzilla":"1341462","bugzilla_description":"CVE-2016-4450 nginx: NULL pointer dereference while writing client request body","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["rh-nginx18-nginx-1:1.8.1-1.el7","rh-nginx18-nginx-1:1.8.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4450.json"},{"CVE":"CVE-2016-0742","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":["RHSA-2016:1425"],"bugzilla":"1302587","bugzilla_description":"CVE-2016-0742 nginx: invalid pointer dereference in resolver","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-nginx18-nginx-1:1.8.1-1.el7","rh-nginx18-nginx-1:1.8.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0742.json"},{"CVE":"CVE-2016-0746","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":["RHSA-2016:1425"],"bugzilla":"1302588","bugzilla_description":"CVE-2016-0746 nginx: use-after-free during CNAME response processing in resolver","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-nginx18-nginx-1:1.8.1-1.el7","rh-nginx18-nginx-1:1.8.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0746.json"},{"CVE":"CVE-2016-0747","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":["RHSA-2016:1425"],"bugzilla":"1302589","bugzilla_description":"CVE-2016-0747 nginx: Insufficient limits of CNAME resolution in resolver","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["rh-nginx18-nginx-1:1.8.1-1.el7","rh-nginx18-nginx-1:1.8.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0747.json"},{"CVE":"CVE-2014-3616","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1142573","bugzilla_description":"CVE-2014-3616 nginx: virtual host confusion","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3616.json"},{"CVE":"CVE-2014-3556","severity":"moderate","public_date":"2014-08-05T00:00:00Z","advisories":[],"bugzilla":"1126891","bugzilla_description":"CVE-2014-3556 nginx: SMTP STARTTLS plaintext injection flaw","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3556.json"},{"CVE":"CVE-2014-0133","severity":"important","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077988","bugzilla_description":"CVE-2014-0133 nginx: heap-based buffer overflow in SPDY implementation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0133.json"},{"CVE":"CVE-2014-0088","severity":"moderate","public_date":"2014-03-04T00:00:00Z","advisories":[],"bugzilla":"1072546","bugzilla_description":"CVE-2014-0088 nginx: possible arbitrary code execution via SPDY implementation in 1.5.10","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0088.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ninja-build_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ninja-build_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ninja-build_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nkf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nkf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nkf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nm-connection-editor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nm-connection-editor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nm-connection-editor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nmap-ncat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nmap-ncat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nmap-ncat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nmap_security_api_results.json
new file mode 100644
index 0000000..7af8f88
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nmap_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-18594","severity":"low","public_date":"2019-08-10T00:00:00Z","advisories":[],"bugzilla":"1749181","bugzilla_description":"CVE-2017-18594 nmap: denial of service condition due to a double free when SSH connection fails","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18594.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-15173","severity":"low","public_date":"2018-07-29T00:00:00Z","advisories":[],"bugzilla":"1615862","bugzilla_description":"CVE-2018-15173 nmap: Stack exhausation when -sV option is used allows for DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15173.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000161","severity":"moderate","public_date":"2018-03-20T00:00:00Z","advisories":[],"bugzilla":"1560005","bugzilla_description":"CVE-2018-1000161 nmap: directory traversal in the way the non-default http-fetch script sanitized URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2013-4885","severity":"low","public_date":"2013-08-07T00:00:00Z","advisories":[],"bugzilla":"995634","bugzilla_description":"CVE-2013-4885 nmap: arbitrary file upload flaw in http-domino-enum-passwords NSE script","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4885.json"},{"CVE":"CVE-2005-1751","severity":"low","public_date":"2005-05-24T00:00:00Z","advisories":["RHSA-2005:564"],"bugzilla":"158995","bugzilla_description":"CVE-2005-1751 shtool: insecure temporary file creation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["php-0:4.3.2-24.ent","php-0:4.3.9-3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1751.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nmstate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nmstate_security_api_results.json
new file mode 100644
index 0000000..f4447db
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nmstate_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15157","severity":"moderate","public_date":"2020-10-15T00:00:00Z","advisories":[],"bugzilla":"1888248","bugzilla_description":"CVE-2020-15157 containerd: credentials leak during image pull","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15157.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-26160","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1883371","bugzilla_description":"CVE-2020-26160 jwt-go: access restriction bypass vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26160.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1742","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1803608","bugzilla_description":"CVE-2020-1742 nmstate/kubernetes-nmstate-handler: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1742.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-nodemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-nodemon_security_api_results.json
new file mode 100644
index 0000000..198c442
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-nodemon_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-7598","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:3247","RHSA-2020:2852","RHSA-2020:2992","RHSA-2020:2362","RHSA-2020:2848","RHSA-2020:3042","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:3084"],"bugzilla":"1813344","bugzilla_description":"CVE-2020-7598 nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","kiali-0:v1.0.11.redhat1-1.el7","rh-nodejs12-nodejs-0:12.18.2-1.el7","servicemesh-grafana-0:6.2.2-36.el8","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:12-8010020200630154708.c27ad7f8","nodejs:10-8020020200617141353.4cda2c84","nodejs:10-8010020200617134056.c27ad7f8","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7598.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-10747","severity":"moderate","public_date":"2019-06-20T00:00:00Z","advisories":[],"bugzilla":"1795479","bugzilla_description":"CVE-2019-10747 nodejs-set-value: prototype pollution in function set-value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10747.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-10746","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1795475","bugzilla_description":"CVE-2019-10746 nodejs-mixin-deep: prototype pollution in function mixin-deep","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10746.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-3750","severity":"low","public_date":"2018-04-18T00:00:00Z","advisories":["RHSA-2020:2625"],"bugzilla":"1578246","bugzilla_description":"CVE-2018-3750 nodejs-deep-extend: Prototype pollution can allow attackers to modify object properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs8-nodejs-0:8.17.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.2"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-packaging_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-packaging_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs-packaging_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs_security_api_results.json
new file mode 100644
index 0000000..ff29389
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nodejs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8201","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":["RHSA-2020:4272"],"bugzilla":"1879311","bugzilla_description":"CVE-2020-8201 nodejs: HTTP request smuggling due to CR-to-Hyphen conversion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["nodejs:12-8020020201007080935.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8201.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-8251","severity":"important","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1879314","bugzilla_description":"CVE-2020-8251 nodejs: Denial of Service by resource exhaustion CWE-400 due to unfinished HTTP/1.1 requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8251.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8252","severity":"important","public_date":"2020-09-15T00:00:00Z","advisories":["RHSA-2020:4272"],"bugzilla":"1879315","bugzilla_description":"CVE-2020-8252 libuv: buffer overflow in realpath","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-122","affected_packages":["nodejs:12-8020020201007080935.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8252.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-7733","severity":"low","public_date":"2020-09-12T00:00:00Z","advisories":[],"bugzilla":"1879733","bugzilla_description":"CVE-2020-7733 ua-parser-js: Regular expression denial of service via the regex","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7733.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14354","severity":"moderate","public_date":"2020-08-02T00:00:00Z","advisories":[],"bugzilla":"1866838","bugzilla_description":"CVE-2020-14354 c-ares: ares_destroy() with pending ares_getaddrinfo() leads to Use-After-Free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14354.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2020-15095","severity":"moderate","public_date":"2020-07-07T00:00:00Z","advisories":["RHSA-2020:4272"],"bugzilla":"1856875","bugzilla_description":"CVE-2020-15095 npm: Sensitive information exposure through logs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["nodejs:12-8020020201007080935.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15095.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-15366","severity":"moderate","public_date":"2020-07-04T00:00:00Z","advisories":[],"bugzilla":"1857977","bugzilla_description":"CVE-2020-15366 nodejs-ajv: prototype pollution via crafted JSON schema in ajv.validate function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15366.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-11080","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:2852","RHSA-2020:2850","RHSA-2020:2784","RHSA-2020:2848","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:2646","RHSA-2020:2823","RHSA-2020:2644","RHSA-2020:2523","RHSA-2020:2524","RHSA-2020:2755","RHSA-2020:3042","RHSA-2020:3084"],"bugzilla":"1844929","bugzilla_description":"CVE-2020-11080 nghttp2: overly large SETTINGS frames can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["servicemesh-proxy-0:1.0.10-3.el8","nghttp2-0:1.33.0-3.el8_1.1","rh-nodejs10-nodejs-0:10.21.0-3.el7","nghttp2-0:1.33.0-3.el8_2.1","nodejs:12-8010020200630154708.c27ad7f8","httpd24-nghttp2-0:1.7.1-8.el7.1","nodejs:10-8010020200617134056.c27ad7f8","httpd24-nghttp2-0:1.7.1-8.el6.1","nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","rh-nodejs12-nodejs-0:12.18.2-1.el7","servicemesh-proxy-0:1.1.2-3.el8","nodejs:10-8020020200617141353.4cda2c84","nghttp2-0:1.33.0-1.el8_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11080.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8172","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:2852","RHSA-2020:2847"],"bugzilla":"1845247","bugzilla_description":"CVE-2020-8172 nodejs: TLS session reuse can lead to hostname verification bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["nodejs:12-8020020200630155331.4cda2c84","rh-nodejs12-nodejs-0:12.18.2-1.el7","nodejs:12-8010020200630154708.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8172.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2020-8174","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:2852","RHSA-2020:2848","RHSA-2020:3042","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:3084"],"bugzilla":"1845256","bugzilla_description":"CVE-2020-8174 nodejs: memory corruption in napi_get_value_string_* functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","rh-nodejs12-nodejs-0:12.18.2-1.el7","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:12-8010020200630154708.c27ad7f8","nodejs:10-8020020200617141353.4cda2c84","nodejs:10-8010020200617134056.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8174.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-16769","severity":"moderate","public_date":"2020-05-04T00:00:00Z","advisories":["RHSA-2020:2796"],"bugzilla":"1848092","bugzilla_description":"CVE-2019-16769 npm-serialize-javascript: XSS via unsafe characters in serialized regular expressions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["servicemesh-grafana-0:6.4.3-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16769.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-8203","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:3807","RHSA-2020:3370"],"bugzilla":"1857412","bugzilla_description":"CVE-2020-8203 nodejs-lodash: prototype pollution in zipObjectDeep function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","distributed-tracing/jaeger-query-rhel7:1.17.6-1","ovirt-web-ui-0:1.6.4-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2020-7660","severity":"moderate","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:2796","RHSA-2020:2861"],"bugzilla":"1844228","bugzilla_description":"CVE-2020-7660 npm-serialize-javascript: allows remote attackers to inject arbitrary code via the function deleteFunctions within index.js","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["servicemesh-grafana-0:6.2.2-38.el8","servicemesh-grafana-0:6.4.3-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7660.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-7608","severity":"low","public_date":"2020-03-16T00:00:00Z","advisories":[],"bugzilla":"1840004","bugzilla_description":"CVE-2020-7608 nodejs-yargs-parser: prototype pollution vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7608.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-7598","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:3247","RHSA-2020:2852","RHSA-2020:2992","RHSA-2020:2362","RHSA-2020:2848","RHSA-2020:3042","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:3084"],"bugzilla":"1813344","bugzilla_description":"CVE-2020-7598 nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","kiali-0:v1.0.11.redhat1-1.el7","rh-nodejs12-nodejs-0:12.18.2-1.el7","servicemesh-grafana-0:6.2.2-36.el8","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:12-8010020200630154708.c27ad7f8","nodejs:10-8020020200617141353.4cda2c84","nodejs:10-8010020200617134056.c27ad7f8","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7598.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-10531","severity":"important","public_date":"2020-02-25T00:00:00Z","advisories":["RHSA-2020:1343","RHSA-2020:2895","RHSA-2020:0738","RHSA-2020:1317","RHSA-2020:1293","RHSA-2020:0902","RHSA-2020:0901","RHSA-2020:3084","RHSA-2020:0896","RHSA-2020:0897"],"bugzilla":"1807349","bugzilla_description":"CVE-2020-10531 ICU: Integer overflow in UnicodeString::doAppend()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["icu-0:60.3-2.el8_0","icu-0:50.2-4.el7_7","rh-nodejs12-nodejs-0:12.18.2-1.el7","nodejs:12-8010020200326104226.c27ad7f8","icu-0:60.3-2.el8_1","chromium-browser-0:80.0.3987.122-1.el6_10","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:10-8000020200318152927.f8e95b4e","nodejs:10-8010020200318152252.c27ad7f8","icu-0:4.2.1-15.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10531.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-15605","severity":"important","public_date":"2020-02-07T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:1510","RHSA-2020:0597","RHSA-2020:0708","RHSA-2020:0707","RHSA-2020:0602","RHSA-2020:0703","RHSA-2020:0598","RHSA-2020:0579"],"bugzilla":"1800364","bugzilla_description":"CVE-2019-15605 nodejs: HTTP request smuggling using malformed Transfer-Encoding header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["nodejs:12-8010020200220143053.c27ad7f8","http-parser-0:2.7.1-8.el7_7.2","rh-nodejs12-nodejs-0:12.16.1-1.el7","http-parser-0:2.8.0-2.el8_0.2","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","http-parser-0:2.8.0-5.el8_1.2","http-parser-0:2.7.1-5.el7_6.1","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15605.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2019-15606","severity":"moderate","public_date":"2020-02-07T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHSA-2020:0598","RHSA-2020:0579"],"bugzilla":"1800366","bugzilla_description":"CVE-2019-15606 nodejs: HTTP header values do not have trailing optional whitespace trimmed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["nodejs:12-8010020200220143053.c27ad7f8","rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15606.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-15604","severity":"moderate","public_date":"2020-02-07T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHSA-2020:0598","RHSA-2020:0579"],"bugzilla":"1800367","bugzilla_description":"CVE-2019-15604 nodejs: Remotely trigger an assertion on a TLS server with a malformed certificate string","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["nodejs:12-8010020200220143053.c27ad7f8","rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15604.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-8124","severity":"moderate","public_date":"2020-02-04T00:00:00Z","advisories":["RHSA-2020:0972"],"bugzilla":"1800774","bugzilla_description":"CVE-2020-8124 npmjs-url-parse: Improper validation of protocol of the returned URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["jaeger-0:v1.13.1.redhat6-1.el7","kiali-0:v1.0.10.redhat1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8124.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-8116","severity":"moderate","public_date":"2020-01-28T00:00:00Z","advisories":["RHSA-2020:4272"],"bugzilla":"1868196","bugzilla_description":"CVE-2020-8116 nodejs-dot-prop: prototype pollution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":["nodejs:12-8020020201007080935.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8116.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-17571","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2638"],"bugzilla":"1785616","bugzilla_description":"CVE-2019-17571 log4j: deserialization of untrusted data in SocketServer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-16777","severity":"low","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHEA-2020:0330","RHSA-2020:2625","RHSA-2020:0579"],"bugzilla":"1788301","bugzilla_description":"CVE-2019-16777 npm: Global node_modules Binary Overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","rh-nodejs8-nodejs-0:8.17.0-2.el7","nodejs:12-8010020200116150415.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16777.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-16775","severity":"low","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHEA-2020:0330","RHSA-2020:2625","RHSA-2020:0579"],"bugzilla":"1788305","bugzilla_description":"CVE-2019-16775 npm: Symlink reference outside of node_modules folder through the bin field upon installation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","rh-nodejs8-nodejs-0:8.17.0-2.el7","nodejs:12-8010020200116150415.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16775.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-16776","severity":"low","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHEA-2020:0330","RHSA-2020:2625","RHSA-2020:0579"],"bugzilla":"1788310","bugzilla_description":"CVE-2019-16776 npm: Arbitrary file write via constructed entry in the package.json bin field","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","rh-nodejs8-nodejs-0:8.17.0-2.el7","nodejs:12-8010020200116150415.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16776.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-19919","severity":"low","public_date":"2019-09-24T00:00:00Z","advisories":[],"bugzilla":"1789959","bugzilla_description":"CVE-2019-19919 nodejs-handlebars: prototype pollution leading to remote code execution via crafted payloads","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19919.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-17592","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1767146","bugzilla_description":"CVE-2019-17592 nodejs: regular expression denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17592.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9513","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:3041","RHSA-2019:2692","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1735741","bugzilla_description":"CVE-2019-9513 HTTP/2: flood using PRIORITY frames results in excessive resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","rh-nginx112-nginx-1:1.12.1-3.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","kiali-0:v1.0.6.redhat1-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9515","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:2861","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3892","RHSA-2019:2766","RHSA-2020:2067","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:4352","RHSA-2019:4045","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2020:3196","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2925"],"bugzilla":"1735745","bugzilla_description":"CVE-2019-9515 HTTP/2: flood using SETTINGS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","nodejs:10-8000020190911085529.f8e95b4e","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","skydive-0:0.20.5-2.el7ost","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9518","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:3892","RHSA-2020:0727","RHSA-2020:3197","RHSA-2020:0922","RHSA-2020:3196","RHSA-2019:4352","RHSA-2019:2955","RHSA-2019:2939","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2925"],"bugzilla":"1735749","bugzilla_description":"CVE-2019-9518 HTTP/2: flood using empty frames results in excessive resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nodejs:10-8000020190911085529.f8e95b4e","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9511","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:3932","RHSA-2019:2799","RHSA-2020:2067","RHSA-2019:2775","RHSA-2019:3041","RHSA-2020:0922","RHSA-2019:4020","RHSA-2019:4021","RHSA-2019:2692","RHSA-2020:1445","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2020:3192","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741860","bugzilla_description":"CVE-2019-9511 HTTP/2: large amount of data requests leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["nghttp2-0:1.33.0-1.el8_0.1","httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","kiali-0:v1.0.6.redhat1-1.el7","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9516","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:2799","RHSA-2019:2775","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2966","RHSA-2019:2746","RHSA-2019:2955","RHSA-2019:2745","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741864","bugzilla_description":"CVE-2019-9516 HTTP/2: 0-length headers lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nginx112-nginx-1:1.12.1-3.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7.1","nginx:1.14-8000020190830002848.f8e95b4e","rh-nginx110-nginx-1:1.10.2-9.el7.1","nodejs:10-8000020190911085529.f8e95b4e","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7","rh-nginx110-nginx-1:1.10.2-9.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9517","severity":"important","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2019:2893","RHSA-2019:3932","RHSA-2019:2950","RHSA-2020:0922","RHSA-2020:1445","RHSA-2020:0983","RHSA-2019:2946","RHSA-2019:2955","RHSA-2019:3933","RHSA-2019:2939","RHSA-2019:2949","RHSA-2019:3935","RHSA-2019:2925"],"bugzilla":"1741868","bugzilla_description":"CVE-2019-9517 HTTP/2: request for large response leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["httpd24-nghttp2-0:1.7.1-7.el6.1","httpd24-httpd-0:2.4.34-8.el7.1","httpd24-nghttp2-0:1.7.1-7.el7.1","httpd:2.4-8000020190829150747.f8e95b4e","nodejs:10-8000020190911085529.f8e95b4e","httpd24-httpd-0:2.4.34-8.el6.1","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9517.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10744","severity":"important","public_date":"2019-08-09T00:00:00Z","advisories":["RHSA-2020:2819","RHSA-2019:3024","RHSA-2020:2362"],"bugzilla":"1739497","bugzilla_description":"CVE-2019-10744 nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ovirt-web-ui-0:1.6.0-1.el7ev","servicemesh-grafana-0:6.2.2-36.el8","jaeger-0:v1.13.1.redhat7-1.el7","distributed-tracing/jaeger-query-rhel7:1.17.2-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10744.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2019-10747","severity":"moderate","public_date":"2019-06-20T00:00:00Z","advisories":[],"bugzilla":"1795479","bugzilla_description":"CVE-2019-10747 nodejs-set-value: prototype pollution in function set-value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10747.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-10746","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1795475","bugzilla_description":"CVE-2019-10746 nodejs-mixin-deep: prototype pollution in function mixin-deep","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10746.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-13173","severity":"moderate","public_date":"2019-05-15T00:00:00Z","advisories":[],"bugzilla":"1710570","bugzilla_description":"CVE-2019-13173 nodejs-fstream: File overwrite in fstream.DirWriter() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13173.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-5739","severity":"moderate","public_date":"2019-02-28T00:00:00Z","advisories":[],"bugzilla":"1690798","bugzilla_description":"CVE-2019-5739 nodejs: DoS with keep-alive HTTP connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5739.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-5737","severity":"low","public_date":"2019-02-28T00:00:00Z","advisories":["RHSA-2019:1821","RHSA-2019:2939"],"bugzilla":"1690808","bugzilla_description":"CVE-2019-5737 nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nodejs8-nodejs-0:8.16.0-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16490","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1672396","bugzilla_description":"CVE-2018-16490 nodejs-mpath: prototype pollution in Object.prototype","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16490.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2018-16491","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1672400","bugzilla_description":"CVE-2018-16491 nodejs-extend: Prototype pollution in Object.prototype","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16491.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-12116","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:1821"],"bugzilla":"1660998","bugzilla_description":"CVE-2018-12116 nodejs: HTTP request splitting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["rh-nodejs8-nodejs-0:8.16.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12116.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"7.2"},{"CVE":"CVE-2018-12121","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:3497","RHSA-2019:2258","RHSA-2019:1821","RHSA-2019:2939"],"bugzilla":"1661002","bugzilla_description":"CVE-2018-12121 nodejs: Denial of Service with large HTTP headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["http-parser-0:2.8.0-5.el8","http-parser-0:2.7.1-8.el7","rh-nodejs8-nodejs-0:8.16.0-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12121.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12122","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:1821","RHSA-2019:2939"],"bugzilla":"1661005","bugzilla_description":"CVE-2018-12122 nodejs: Slowloris HTTP Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nodejs8-nodejs-0:8.16.0-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12122.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-12123","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:1821","RHSA-2019:2939"],"bugzilla":"1661010","bugzilla_description":"CVE-2018-12123 nodejs: Hostname spoofing in URL parser for javascript protocol","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs8-nodejs-0:8.16.0-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12123.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-12120","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1661016","bugzilla_description":"CVE-2018-12120 nodejs: Debugger port 5858 listens on any interface by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12120.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19587","severity":"low","public_date":"2018-11-26T00:00:00Z","advisories":[],"bugzilla":"1656205","bugzilla_description":"CVE-2018-19587 mongoose: SIGSEGV in mg_mqtt_add_session() in mongoose.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19587.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-16472","severity":"moderate","public_date":"2018-11-02T00:00:00Z","advisories":[],"bugzilla":"1649118","bugzilla_description":"CVE-2018-16472 nodejs-cached-path-relative: prototype pollution due to injected properties on Object.prototype","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16472.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16487","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":[],"bugzilla":"1671878","bugzilla_description":"CVE-2018-16487 lodash: Prototype pollution in utilities function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16487.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-5413","severity":"low","public_date":"2018-10-28T00:00:00Z","advisories":[],"bugzilla":"1649409","bugzilla_description":"CVE-2019-5413 nodejs-morgan: Unescaped input in compile() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5413.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-18764","severity":"low","public_date":"2018-10-26T00:00:00Z","advisories":[],"bugzilla":"1646631","bugzilla_description":"CVE-2018-18764 mongoose: heap-based buffer over-read in a parse_mqtt getu16 call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18764.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-18765","severity":"low","public_date":"2018-10-26T00:00:00Z","advisories":[],"bugzilla":"1646637","bugzilla_description":"CVE-2018-18765 mongoose: heap-based buffer over-read in mg_mqtt_next_subscribe_topic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18765.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-7166","severity":"moderate","public_date":"2018-08-11T00:00:00Z","advisories":["RHSA-2018:2553"],"bugzilla":"1620215","bugzilla_description":"CVE-2018-7166 nodejs: Unintentional exposure of uninitialized memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rhoar-nodejs-1:10.9.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7166.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-12115","severity":"important","public_date":"2018-08-11T00:00:00Z","advisories":["RHSA-2018:2949","RHSA-2018:2944","RHSA-2018:3537","RHSA-2018:2553","RHSA-2018:2552"],"bugzilla":"1620219","bugzilla_description":"CVE-2018-12115 nodejs: Out of bounds (OOB) write via UCS-2 encoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["rh-nodejs6-nodejs-0:6.11.3-7.el7","rhoar-nodejs-1:8.11.4-2.el7","rh-nodejs6-nodejs-0:6.11.3-6.el6","rhoar-nodejs-1:10.9.0-1.el7","rh-nodejs8-nodejs-0:8.11.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-18869","severity":"moderate","public_date":"2018-07-31T00:00:00Z","advisories":["RHSA-2020:2625"],"bugzilla":"1611613","bugzilla_description":"CVE-2017-18869 nodejs-chownr: TOCTOU vulnerability in `chownr` function in chownr.js","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":["rh-nodejs8-nodejs-0:8.17.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18869.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2018-1000620","severity":"moderate","public_date":"2018-07-19T00:00:00Z","advisories":[],"bugzilla":"1608153","bugzilla_description":"CVE-2018-1000620 nodejs-cryptiles: Insecure randomness causes the randomDigits() function returns a pseudo-random data string biased to certain digits","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000620.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-7167","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":["RHSA-2018:2949"],"bugzilla":"1591006","bugzilla_description":"CVE-2018-7167 nodejs: Denial of Service by calling Buffer.fill() or Buffer.alloc() with specially crafted parameters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-835","affected_packages":["rh-nodejs8-nodejs-0:8.11.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7161","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":["RHSA-2018:2949"],"bugzilla":"1591013","bugzilla_description":"CVE-2018-7161 nodejs: denial of service (DoS) by causing a node server providing an http2 server to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nodejs8-nodejs-0:8.11.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7162","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":[],"bugzilla":"1591018","bugzilla_description":"CVE-2018-7162 nodejs: denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7162.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7164","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":[],"bugzilla":"1591023","bugzilla_description":"CVE-2018-7164 nodejs: uncontrolled memory consumption when using the net.Socket as a stream","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-0732","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2019:1296","RHSA-2019:1543","RHSA-2018:2553","RHSA-2018:2552","RHSA-2018:3221"],"bugzilla":"1591100","bugzilla_description":"CVE-2018-0732 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-1:1.0.2k-16.el7","rhoar-nodejs-1:8.11.4-2.el7","rhoar-nodejs-1:10.9.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-16119","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588780","bugzilla_description":"CVE-2017-16119 nodejs-fresh: Regular expression denial of service when parsing crafted user input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16119.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16118","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588785","bugzilla_description":"CVE-2017-16118 nodejs-forwarded:  regular expression denial of service when parsing crafted user input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-3717","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588799","bugzilla_description":"CVE-2018-3717 nodejs-connect: XSS due to a lack of validation of file in directory.js middleware","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3717.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2017-16005","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588846","bugzilla_description":"CVE-2017-16005 nodejs-http-signature: HTTP header forgery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-20834","severity":"important","public_date":"2018-04-30T00:00:00Z","advisories":["RHSA-2019:1821"],"bugzilla":"1702338","bugzilla_description":"CVE-2018-20834 nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["rh-nodejs8-nodejs-0:8.16.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20834.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-16492","severity":"moderate","public_date":"2018-04-24T00:00:00Z","advisories":[],"bugzilla":"1608140","bugzilla_description":"CVE-2018-16492 nodejs-extend: Prototype pollution can allow attackers to modify object properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16492.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-3750","severity":"low","public_date":"2018-04-18T00:00:00Z","advisories":["RHSA-2020:2625"],"bugzilla":"1578246","bugzilla_description":"CVE-2018-3750 nodejs-deep-extend: Prototype pollution can allow attackers to modify object properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs8-nodejs-0:8.17.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2018-1000168","severity":"moderate","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366"],"bugzilla":"1565035","bugzilla_description":"CVE-2018-1000168 nghttp2: Null pointer dereference when too large ALTSVC frame is received","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000168.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-10196","severity":"moderate","public_date":"2018-04-05T00:00:00Z","advisories":[],"bugzilla":"1567245","bugzilla_description":"CVE-2019-10196 nodejs-http-proxy-agent: Denial of Service and data leak due to improper buffer sanitization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-3736","severity":null,"public_date":"2018-04-03T00:00:00Z","advisories":[],"bugzilla":"1576651","bugzilla_description":"CVE-2018-3736 nodejs-https-proxy-agent: Unsanitized options passed to Buffer() allow for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2015-9235","severity":"important","public_date":"2018-03-31T00:00:00Z","advisories":[],"bugzilla":"1584880","bugzilla_description":"CVE-2015-9235 nodejs-jsonwebtoken: verification step bypass with an altered token","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9235.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-3737","severity":"moderate","public_date":"2018-03-12T00:00:00Z","advisories":["RHSA-2020:2625"],"bugzilla":"1567228","bugzilla_description":"CVE-2018-3737 nodejs-sshpk: ReDoS when parsing crafted invalid public keys in lib/formats/ssh.js","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nodejs8-nodejs-0:8.17.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-7160","severity":"moderate","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2018:2949"],"bugzilla":"1561979","bugzilla_description":"CVE-2018-7160 nodejs: Inspector DNS rebinding vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs8-nodejs-0:8.11.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2018-7158","severity":"moderate","public_date":"2018-03-08T00:00:00Z","advisories":[],"bugzilla":"1561980","bugzilla_description":"CVE-2018-7158 nodejs: path module regular expression denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-7159","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2018:2949","RHSA-2019:2258"],"bugzilla":"1561981","bugzilla_description":"CVE-2018-7159 nodejs: HTTP parser allowed for spaces inside Content-Length header values","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs8-nodejs-0:8.11.4-1.el7","http-parser-0:2.7.1-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-13863","severity":"low","public_date":"2018-02-27T00:00:00Z","advisories":[],"bugzilla":"1550772","bugzilla_description":"CVE-2018-13863 nodejs-bson: Regular expression denial of service in decimal128.js","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-1109","severity":"low","public_date":"2018-02-19T00:00:00Z","advisories":[],"bugzilla":"1547272","bugzilla_description":"CVE-2018-1109 nodejs-braces: Regular Expression Denial of Service (ReDoS) in lib/parsers.js","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-185->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1109.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-1107","severity":"moderate","public_date":"2018-02-16T00:00:00Z","advisories":[],"bugzilla":"1546357","bugzilla_description":"CVE-2018-1107 nodejs-is-my-json-valid: ReDoS when validating JSON fields with email format","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1107.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-3721","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":[],"bugzilla":"1545884","bugzilla_description":"CVE-2018-3721 lodash: Prototype pollution in utilities function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3721.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2018-3728","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:1264","RHSA-2018:1263"],"bugzilla":"1545893","bugzilla_description":"CVE-2018-3728 hoek: Prototype pollution in utilities function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rhmap46/redis:2.8.21-40"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3728.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2018-3739","severity":"moderate","public_date":"2017-12-28T00:00:00Z","advisories":[],"bugzilla":"1727312","bugzilla_description":"CVE-2018-3739 nodejs-https-proxy-agent: Unsanitized options passed to Buffer() allow for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3739.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2017-15896","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1525106","bugzilla_description":"CVE-2017-15896 nodejs: Vulnerable to CVE-2017-3737 due to embedded OpenSSL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15896.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-15897","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1532534","bugzilla_description":"CVE-2017-15897 nodejs: Unitialized buffer due to incorrect encoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-14919","severity":"moderate","public_date":"2017-10-24T00:00:00Z","advisories":[],"bugzilla":"1516175","bugzilla_description":"CVE-2017-14919 nodejs: DoS via specific windowBits value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14919.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-18214","severity":"moderate","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1553413","bugzilla_description":"CVE-2017-18214 nodejs-moment: Regular expression denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-15010","severity":"moderate","public_date":"2017-09-05T00:00:00Z","advisories":["RHSA-2017:2912","RHSA-2017:2913","RHSA-2018:1264","RHSA-2018:1263"],"bugzilla":"1493989","bugzilla_description":"CVE-2017-15010 nodejs-tough-cookie: Regular expression denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rhmap46/mysql:5.5-28","rh-nodejs4-nodejs-tough-cookie-0:2.3.3-2.el7","rh-nodejs4-nodejs-tough-cookie-0:2.3.3-2.el6","rh-nodejs6-nodejs-tough-cookie-0:2.3.3-1.el6","rh-nodejs6-nodejs-tough-cookie-0:2.3.3-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-16138","severity":"moderate","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1500700","bugzilla_description":"CVE-2017-16138 nodejs-mime: Regular expression Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16138.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-16137","severity":"moderate","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1500705","bugzilla_description":"CVE-2017-16137 nodejs-debug: Regular expression Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-11499","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":["RHSA-2017:2908","RHSA-2017:3002"],"bugzilla":"1475327","bugzilla_description":"CVE-2017-11499 nodejs: Constant Hashtable Seeds vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-nodejs6-nodejs-0:6.11.3-2.el6","rh-nodejs4-nodejs-1:4.6.2-7.el6","rh-nodejs6-nodejs-0:6.11.3-2.el7","rh-nodejs4-nodejs-1:4.6.2-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11499.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-1000381","severity":"moderate","public_date":"2017-06-20T00:00:00Z","advisories":["RHSA-2017:2908"],"bugzilla":"1463132","bugzilla_description":"CVE-2017-1000381 c-ares: NAPTR parser out of bounds access","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-nodejs6-nodejs-0:6.11.3-2.el6","rh-nodejs6-nodejs-0:6.11.3-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000381.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-16014","severity":"moderate","public_date":"2017-04-11T00:00:00Z","advisories":[],"bugzilla":"1591872","bugzilla_description":"CVE-2017-16014 nodejs-http-proxy: DOS via improper error handling in middleware implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-248","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-18077","severity":"moderate","public_date":"2017-03-02T00:00:00Z","advisories":["RHSA-2020:2625"],"bugzilla":"1448380","bugzilla_description":"CVE-2017-18077 nodejs-brace-expansion: Regular expression denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs8-nodejs-0:8.17.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18077.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-1000048","severity":"moderate","public_date":"2017-03-01T00:00:00Z","advisories":["RHSA-2017:2672"],"bugzilla":"1427872","bugzilla_description":"CVE-2017-1000048 nodejs-qs: Prototype override protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs6-nodejs-qs-0:6.2.3-1.el7","rh-nodejs6-nodejs-qs-0:6.2.3-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-5180","severity":"moderate","public_date":"2016-09-29T00:00:00Z","advisories":["RHSA-2017:0002"],"bugzilla":"1380463","bugzilla_description":"CVE-2016-5180 c-ares: Single byte out of buffer write","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-122","affected_packages":["rh-nodejs4-nodejs-0:4.6.2-4.el6","rh-nodejs4-nodejs-0:4.6.2-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-7099","severity":"important","public_date":"2016-09-28T00:00:00Z","advisories":["RHSA-2017:0002"],"bugzilla":"1379921","bugzilla_description":"CVE-2016-7099 nodejs: wildcard certificates not properly validated","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rh-nodejs4-nodejs-0:4.6.2-4.el6","rh-nodejs4-nodejs-0:4.6.2-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7099.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2016-1000232","severity":"moderate","public_date":"2016-07-22T00:00:00Z","advisories":["RHSA-2016:2101","RHSA-2017:2912"],"bugzilla":"1359818","bugzilla_description":"CVE-2016-1000232 nodejs-tough-cookie: regular expression DoS via Cookie header with many semicolons","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["rh-nodejs4-nodejs-tough-cookie-0:2.3.3-2.el7","nodejs-tough-cookie-0:2.3.1-1.el7","rh-nodejs4-nodejs-tough-cookie-0:2.3.3-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000232.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-16042","severity":"important","public_date":"2016-07-21T00:00:00Z","advisories":[],"bugzilla":"1585953","bugzilla_description":"CVE-2017-16042 nodejs-growl: Does not properly sanitize input before passing it to exec","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-1000025","severity":"moderate","public_date":"2016-06-24T00:00:00Z","advisories":[],"bugzilla":"1351230","bugzilla_description":"CVE-2016-1000025 nodejs-ws: DoS due to excessively large websocket message","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000025.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-10541","severity":"important","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1588519","bugzilla_description":"CVE-2016-10541 nodejs-shell-quote: Command Injection via bash escape characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10541.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2016-1000023","severity":"moderate","public_date":"2016-06-20T00:00:00Z","advisories":["RHSA-2016:1583","RHSA-2016:1582","RHSA-2016:1605"],"bugzilla":"1348509","bugzilla_description":"CVE-2016-1000023 nodejs-minimatch: Regular expression denial-of-service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["nodejs-minimatch-0:3.0.2-1.el7","rh-nodejs4-nodejs-minimatch-0:3.0.2-1.el7","nodejs010-nodejs-minimatch-0:3.0.2-1.el6","rh-nodejs4-nodejs-minimatch-0:3.0.2-1.el6","nodejs010-nodejs-minimatch-0:3.0.2-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-1000022","severity":"moderate","public_date":"2016-06-16T00:00:00Z","advisories":["RHSA-2016:1605"],"bugzilla":"1347677","bugzilla_description":"CVE-2016-1000022 nodejs-negotiator: Regular expression denial-of-service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["nodejs-negotiator-0:0.6.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000022.json"},{"CVE":"CVE-2016-5325","severity":"low","public_date":"2016-06-13T00:00:00Z","advisories":["RHSA-2016:2101","RHSA-2017:0002"],"bugzilla":"1346910","bugzilla_description":"CVE-2016-5325 nodejs: reason argument in ServerResponse#writeHead() not properly validated","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rh-nodejs4-nodejs-0:4.6.2-4.el6","rh-nodejs4-nodejs-0:4.6.2-4.el7","nodejs-0:0.10.47-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5325.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-1669","severity":"important","public_date":"2016-05-11T00:00:00Z","advisories":["RHSA-2017:0879","RHSA-2018:0336","RHSA-2016:1080","RHSA-2017:0881","RHSA-2017:0880","RHSA-2017:0882","RHSA-2017:0002"],"bugzilla":"1335449","bugzilla_description":"CVE-2016-1669 V8: integer overflow leading to buffer overflow in Zone::New","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["chromium-browser-0:50.0.2661.102-1.el6","rh-nodejs4-nodejs-0:4.6.2-4.el6","rh-nodejs4-nodejs-0:4.6.2-4.el7","v8-1:3.14.5.10-19.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1669.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-3956","severity":"moderate","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1328413","bugzilla_description":"CVE-2016-3956 npm: bearer token leak to non-registry hosts","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3956.json"},{"CVE":"CVE-2015-8851","severity":"moderate","public_date":"2016-03-30T00:00:00Z","advisories":["RHBA-2016:1343"],"bugzilla":"1327056","bugzilla_description":"CVE-2015-8851 nodejs-node-uuid: insecure entropy source - Math.random()","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8851.json"},{"CVE":"CVE-2016-2086","severity":"moderate","public_date":"2016-02-09T00:00:00Z","advisories":[],"bugzilla":"1306200","bugzilla_description":"CVE-2016-2086 nodejs: Request smuggling vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2086.json"},{"CVE":"CVE-2016-2216","severity":"moderate","public_date":"2016-02-09T00:00:00Z","advisories":[],"bugzilla":"1306203","bugzilla_description":"CVE-2016-2216 nodejs: Response splitting vulnerability using Unicode characters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2216.json"},{"CVE":"CVE-2016-2515","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1309721","bugzilla_description":"CVE-2016-2515 nodejs-hawk: Long headers or URIs can cause minor DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2515.json"},{"CVE":"CVE-2017-16023","severity":"moderate","public_date":"2015-12-23T00:00:00Z","advisories":[],"bugzilla":"1445292","bugzilla_description":"CVE-2017-16023 nodejs-decamelize: Regular expression Denial-of-Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-8027","severity":"moderate","public_date":"2015-11-25T00:00:00Z","advisories":[],"bugzilla":"1285771","bugzilla_description":"CVE-2015-8027 nodejs: unspecified denial of service vulnerability","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8027.json"},{"CVE":"CVE-2015-6764","severity":"low","public_date":"2015-11-25T00:00:00Z","advisories":["RHSA-2015:2545"],"bugzilla":"1285774","bugzilla_description":"CVE-2015-6764 v8: unspecified out-of-bounds access vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["chromium-browser-0:47.0.2526.73-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6764.json"},{"CVE":"CVE-2017-16026","severity":"low","public_date":"2015-11-16T00:00:00Z","advisories":[],"bugzilla":"1588833","bugzilla_description":"CVE-2017-16026 nodejs-request: Remote Memory Exposure when a multipart request is made","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16026.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-8315","severity":"moderate","public_date":"2015-10-24T00:00:00Z","advisories":[],"bugzilla":"1329552","bugzilla_description":"CVE-2015-8315 nodejs-ms: regular expression denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8315.json"},{"CVE":"CVE-2015-7384","severity":"low","public_date":"2015-10-01T00:00:00Z","advisories":[],"bugzilla":"1268791","bugzilla_description":"CVE-2015-7384 nodejs: unspecified DoS vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7384.json"},{"CVE":"CVE-2015-5380","severity":"moderate","public_date":"2015-07-03T00:00:00Z","advisories":[],"bugzilla":"1239332","bugzilla_description":"CVE-2015-5380 nodejs: `Buffer` to UTF8 `String` conversion DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5380.json"},{"CVE":"CVE-2015-8855","severity":"moderate","public_date":"2015-04-03T00:00:00Z","advisories":[],"bugzilla":"1209496","bugzilla_description":"CVE-2015-8855 nodejs-semver: npm Regular Expression Denial of Service during package versions parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8855.json"},{"CVE":"CVE-2015-8860","severity":"moderate","public_date":"2015-03-27T00:00:00Z","advisories":[],"bugzilla":"1209501","bugzilla_description":"CVE-2015-8860 nodejs-tar: insecure processing of symbolic links during package processing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8860.json"},{"CVE":"CVE-2014-6393","severity":"moderate","public_date":"2015-03-15T00:00:00Z","advisories":[],"bugzilla":"1203190","bugzilla_description":"CVE-2014-6393 express: cross-site scripting via content-type header","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6393.json"},{"CVE":"CVE-2018-1002204","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":[],"bugzilla":"1584400","bugzilla_description":"CVE-2018-1002204 nodejs-adm-zip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002204.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2014-6394","severity":"low","public_date":"2014-09-12T00:00:00Z","advisories":[],"bugzilla":"1146063","bugzilla_description":"CVE-2014-6394 nodejs-send: directory traversal vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6394.json"},{"CVE":"CVE-2014-7191","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2016:1380"],"bugzilla":"1146054","bugzilla_description":"CVE-2014-7191 nodejs-qs: Denial-of-Service Memory Exhaustion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["nodejs010-nodejs-qs-0:0.6.5-5.el7","nodejs010-nodejs-qs-0:0.6.5-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7191.json"},{"CVE":"CVE-2016-1000236","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":[],"bugzilla":"1371409","bugzilla_description":"CVE-2016-1000236 nodejs-cookie-signature: Timing attack vulnerability","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000236.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2015-0278","severity":"moderate","public_date":"2014-02-10T00:00:00Z","advisories":[],"bugzilla":"1194651","bugzilla_description":"CVE-2015-0278 libuv: incorrect revocation order while relinquishing privileges","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0278.json"},{"CVE":"CVE-2013-4450","severity":"moderate","public_date":"2013-10-18T00:00:00Z","advisories":["RHSA-2013:1842"],"bugzilla":"1021170","bugzilla_description":"CVE-2013-4450 NodeJS: HTTP Pipelining DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["nodejs010-nodejs-0:0.10.5-8.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4450.json"},{"CVE":"CVE-2013-4116","severity":"low","public_date":"2013-07-08T00:00:00Z","advisories":[],"bugzilla":"983917","bugzilla_description":"CVE-2013-4116 npm: Insecure temporary directory generation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4116.json"},{"CVE":"CVE-2013-7370","severity":"moderate","public_date":"2013-07-01T00:00:00Z","advisories":[],"bugzilla":"1091166","bugzilla_description":"CVE-2013-7370 nodejs-connect: XSS via HTTP request with a crafted method containing JavaScript","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7370.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/npm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/npm_security_api_results.json
new file mode 100644
index 0000000..0eee011
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/npm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15095","severity":"moderate","public_date":"2020-07-07T00:00:00Z","advisories":["RHSA-2020:4272"],"bugzilla":"1856875","bugzilla_description":"CVE-2020-15095 npm: Sensitive information exposure through logs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["nodejs:12-8020020201007080935.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15095.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-16777","severity":"low","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHEA-2020:0330","RHSA-2020:2625","RHSA-2020:0579"],"bugzilla":"1788301","bugzilla_description":"CVE-2019-16777 npm: Global node_modules Binary Overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","rh-nodejs8-nodejs-0:8.17.0-2.el7","nodejs:12-8010020200116150415.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16777.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-16775","severity":"low","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHEA-2020:0330","RHSA-2020:2625","RHSA-2020:0579"],"bugzilla":"1788305","bugzilla_description":"CVE-2019-16775 npm: Symlink reference outside of node_modules folder through the bin field upon installation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","rh-nodejs8-nodejs-0:8.17.0-2.el7","nodejs:12-8010020200116150415.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16775.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-16776","severity":"low","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHEA-2020:0330","RHSA-2020:2625","RHSA-2020:0579"],"bugzilla":"1788310","bugzilla_description":"CVE-2019-16776 npm: Arbitrary file write via constructed entry in the package.json bin field","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","rh-nodejs8-nodejs-0:8.17.0-2.el7","nodejs:12-8010020200116150415.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16776.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-10196","severity":"moderate","public_date":"2018-04-05T00:00:00Z","advisories":[],"bugzilla":"1567245","bugzilla_description":"CVE-2019-10196 nodejs-http-proxy-agent: Denial of Service and data leak due to improper buffer sanitization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-3956","severity":"moderate","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1328413","bugzilla_description":"CVE-2016-3956 npm: bearer token leak to non-registry hosts","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3956.json"},{"CVE":"CVE-2013-4116","severity":"low","public_date":"2013-07-08T00:00:00Z","advisories":[],"bugzilla":"983917","bugzilla_description":"CVE-2013-4116 npm: Insecure temporary directory generation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4116.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/npth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/npth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/npth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nscd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nscd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nscd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nspr-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nspr-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nspr-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nspr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nspr_security_api_results.json
new file mode 100644
index 0000000..92ac791
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nspr_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-1951","severity":"moderate","public_date":"2016-05-31T00:00:00Z","advisories":[],"bugzilla":"1311126","bugzilla_description":"CVE-2016-1951 nspr: Memory allocation issue related to PR_*printf functions","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1951.json"},{"CVE":"CVE-2015-7183","severity":"critical","public_date":"2015-11-03T00:00:00Z","advisories":["RHSA-2015:1980","RHSA-2015:2068","RHSA-2015:1981"],"bugzilla":"1269353","bugzilla_description":"CVE-2015-7183 nspr: heap-buffer overflow in PL_ARENA_ALLOCATE (MFSA 2015-133)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["nspr-0:4.10.8-2.el7_1","nspr-0:4.10.8-2.el5_11","nspr-0:4.10.8-2.el6_6","nss-0:3.14.3-9.el6_4","nss-0:3.16.1-9.el6_5","nspr-0:4.8.9-6.el6_2","nspr-0:4.10.6-2.el6_5","nss-0:3.13.1-12.el6_2","nss-0:3.19.1-7.ael7b_1.2","nss-0:3.19.1-5.el6_7","nspr-0:4.9.5-5.el6_4","nspr-0:4.10.8-2.el6_7","nss-0:3.19.1-4.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7183.json"},{"CVE":"CVE-2014-1545","severity":"moderate","public_date":"2014-06-10T00:00:00Z","advisories":["RHSA-2014:1246","RHBA-2015:0364","RHSA-2014:0917"],"bugzilla":"1107432","bugzilla_description":"CVE-2014-1545 Mozilla: Out of bounds write in NSPR (MFSA 2014-55)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["nspr-0:4.10.6-1.el6_5","nspr-0:4.10.6-3.el7","nss-0:3.16.1-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1545.json"},{"CVE":"CVE-2013-5607","severity":"moderate","public_date":"2013-11-19T00:00:00Z","advisories":["RHSA-2013:1791","RHSA-2013:1829"],"bugzilla":"1031461","bugzilla_description":"CVE-2013-5607 nspr: Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["nspr-0:4.10.2-2.el5_10","nspr-0:4.10.2-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5607.json"},{"CVE":"CVE-2006-4842","severity":"important","public_date":"2006-09-05T00:00:00Z","advisories":[],"bugzilla":"1253692","bugzilla_description":"CVE-2006-4842 nspr: setuid root programs linked with NSPR allow elevation of privilege","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4842.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-altfiles_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-altfiles_security_api_results.json
new file mode 100644
index 0000000..b697bca
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-altfiles_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-6829","severity":"moderate","public_date":"2020-06-02T12:00:00Z","advisories":["RHSA-2020:4076"],"bugzilla":"1826187","bugzilla_description":"CVE-2020-6829 nss: Side channel attack on ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6829.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12402","severity":"moderate","public_date":"2020-06-02T12:00:00Z","advisories":["RHSA-2020:4076","RHSA-2020:3280"],"bugzilla":"1826231","bugzilla_description":"CVE-2020-12402 nss: Side channel vulnerabilities during RSA key generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.53.1-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12402.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12399","severity":"moderate","public_date":"2020-05-21T00:00:00Z","advisories":[],"bugzilla":"1826177","bugzilla_description":"CVE-2020-12399 nss: Timing attack on DSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12399.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-11719","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1951","RHSA-2020:4076"],"bugzilla":"1728436","bugzilla_description":"CVE-2019-11719 nss: Out-of-bounds read when importing curve25519 private key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11719.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11729","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:4190","RHSA-2019:1951"],"bugzilla":"1728437","bugzilla_description":"CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["nss-0:3.44.0-7.el7_7","nss-util-0:3.44.0-4.el7_7","nss-0:3.44.0-7.el8_0","nss-softokn-0:3.44.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11729.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-pam-ldapd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-pam-ldapd_security_api_results.json
new file mode 100644
index 0000000..8312fe6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-pam-ldapd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-0288","severity":"important","public_date":"2013-02-18T00:00:00Z","advisories":["RHSA-2013:0590"],"bugzilla":"909119","bugzilla_description":"CVE-2013-0288 nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["nss-pam-ldapd-0:0.7.5-18.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0288.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn-freebl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn-freebl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn-freebl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn-freebl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn-freebl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn-freebl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn_security_api_results.json
new file mode 100644
index 0000000..9e21950
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-softokn_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11745","severity":"important","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:0243","RHSA-2019:4190","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:4114","RHSA-2020:1461","RHSA-2019:4152","RHSA-2020:0466"],"bugzilla":"1774831","bugzilla_description":"CVE-2019-11745 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["nss-0:3.44.0-8.el8_0","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-7.el7_7","nss-softokn-0:3.14.3-23.el6_6","nss-0:3.44.0-9.el8_1","nss-softokn-0:3.44.0-6.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11729","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:4190","RHSA-2019:1951"],"bugzilla":"1728437","bugzilla_description":"CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["nss-0:3.44.0-7.el7_7","nss-util-0:3.44.0-4.el7_7","nss-0:3.44.0-7.el8_0","nss-softokn-0:3.44.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11729.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2017-7781","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479197","bugzilla_description":"CVE-2017-7781 Mozilla: Elliptic curve point addition error when using mixed Jacobian-affine coordinates (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-681","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7781.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-1938","severity":"low","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1305159","bugzilla_description":"CVE-2016-1938 Mozilla NSS: Errors in mp_div and mp_exptmod cryptographic functions","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1938.json"},{"CVE":"CVE-2015-2613","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1242456","bugzilla_description":"CVE-2015-2613 NSS / JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2613.json"},{"CVE":"CVE-2015-2730","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1664","RHSA-2015:1699"],"bugzilla":"1236954","bugzilla_description":"CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-347","affected_packages":["nss-0:3.19.1-1.el5_11","nss-softokn-0:3.16.2.3-13.el7_1","nss-softokn-0:3.14.3-23.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2730.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-sysinit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-sysinit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-sysinit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-util-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-util-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-util-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-util_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-util_security_api_results.json
new file mode 100644
index 0000000..0aaa72b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss-util_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-11729","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:4190","RHSA-2019:1951"],"bugzilla":"1728437","bugzilla_description":"CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["nss-0:3.44.0-7.el7_7","nss-util-0:3.44.0-4.el7_7","nss-0:3.44.0-7.el8_0","nss-softokn-0:3.44.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11729.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5461","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1101","RHSA-2017:1100","RHSA-2017:1103","RHSA-2017:1102"],"bugzilla":"1440080","bugzilla_description":"CVE-2017-5461 nss: Write beyond bounds caused by bugs in Base64 de/encoding in nssb64d.c and nssb64e.c (MFSA 2017-10)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nss-0:3.21.4-1.el5_11","nss-util-0:3.16.1-5.el6_5","nss-util-0:3.13.1-11.el6_2","nss-util-0:3.21.4-1.el6_7","nss-0:3.28.4-1.el6_9","nss-util-0:3.19.1-4.el6_6","nss-util-0:3.21.4-1.el7_2","nss-util-0:3.14.3-9.el6_4","nss-0:3.14.3-11.el5_9","nss-0:3.28.4-1.0.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5461.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-1950","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0495","RHSA-2016:0370","RHSA-2016:0371"],"bugzilla":"1310509","bugzilla_description":"CVE-2016-1950 nss: Heap buffer overflow vulnerability in ASN1 certificate parsing (MFSA 2016-35)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-util-0:3.19.1-3.el6_6","nss-util-0:3.19.1-5.el7_1","nss-util-0:3.14.3-8.el6_4","nss-util-0:3.19.1-9.el7_2","nss-util-0:3.16.1-4.el6_5","nss-0:3.19.1-4.el5_11","nss-util-0:3.19.1-5.el6_7","nss-util-0:3.13.1-10.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1950.json"},{"CVE":"CVE-2015-7181","severity":"critical","public_date":"2015-11-03T00:00:00Z","advisories":["RHSA-2015:1980","RHSA-2015:2068","RHSA-2015:1981"],"bugzilla":"1269345","bugzilla_description":"CVE-2015-7181 nss: use-after-poison in sec_asn1d_parse_leaf() (MFSA 2015-133)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-util-0:3.13.1-9.el6_2","nss-0:3.19.1-2.el5_11","nss-util-0:3.19.1-2.el6_7","nss-util-0:3.14.3-7.el6_4","nss-util-0:3.19.1-2.el6_6","nss-util-0:3.19.1-4.ael7b_1","nss-util-0:3.16.1-3.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7181.json"},{"CVE":"CVE-2015-7182","severity":"critical","public_date":"2015-11-03T00:00:00Z","advisories":["RHSA-2015:1980","RHSA-2015:2068","RHSA-2015:1981"],"bugzilla":"1269351","bugzilla_description":"CVE-2015-7182 nss: ASN.1 decoder heap overflow when decoding constructed OCTET STRING that mixes indefinite and definite length encodings (MFSA 2015-133)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["nss-util-0:3.13.1-9.el6_2","nss-0:3.19.1-2.el5_11","nss-util-0:3.19.1-2.el6_7","nss-util-0:3.14.3-7.el6_4","nss-util-0:3.19.1-2.el6_6","nss-util-0:3.19.1-4.ael7b_1","nss-util-0:3.16.1-3.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7182.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_db_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_db_security_api_results.json
new file mode 100644
index 0000000..bbfc439
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_db_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-0826","severity":"moderate","public_date":"2010-04-01T00:00:00Z","advisories":["RHSA-2010:0347"],"bugzilla":"580187","bugzilla_description":"CVE-2010-0826 nss_db: Information leak due the DB_CONFIG file read from current working directory","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["nss_db-0:2.2-35.4.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0826.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_hesiod_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_hesiod_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_hesiod_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_nis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_nis_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_nis_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_security_api_results.json
new file mode 100644
index 0000000..66d51e7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-25648","severity":"moderate","public_date":"2020-10-19T00:00:00Z","advisories":[],"bugzilla":"1887319","bugzilla_description":"CVE-2020-25648 nss: TLS 1.3 CCS flood remote DoS Attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25648.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-25644","severity":"important","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4257","RHSA-2020:4256"],"bugzilla":"1885485","bugzilla_description":"CVE-2020-25644 wildfly-openssl: memory leak per HTTP session creation in WildFly OpenSSL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el8eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el6eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el7eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25644.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1968","severity":"low","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877458","bugzilla_description":"CVE-2020-1968 openssl: Information exposure when DH secret are reused across multiple TLS connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-12413","severity":"low","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877557","bugzilla_description":"CVE-2020-12413 nss: Information exposure when DH secret are reused across multiple TLS connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12413.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-12400","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:4076"],"bugzilla":"1853983","bugzilla_description":"CVE-2020-12400 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12400.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12403","severity":"moderate","public_date":"2020-07-27T00:00:00Z","advisories":["RHSA-2020:4076"],"bugzilla":"1868931","bugzilla_description":"CVE-2020-12403 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["nss-0:3.53.1-3.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12403.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2020-15778","severity":"moderate","public_date":"2020-07-18T00:00:00Z","advisories":[],"bugzilla":"1860487","bugzilla_description":"CVE-2020-15778 openssh: scp allows command injection when using backtick characters in the destination argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15778.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12401","severity":"moderate","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:4076"],"bugzilla":"1851294","bugzilla_description":"CVE-2020-12401 nss: ECDSA timing attack mitigation bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12401.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-14145","severity":"low","public_date":"2020-06-29T00:00:00Z","advisories":[],"bugzilla":"1852930","bugzilla_description":"CVE-2020-14145 openssh: Observable Discrepancy leading to an information leak in the algorithm negotiation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14145.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-6829","severity":"moderate","public_date":"2020-06-02T12:00:00Z","advisories":["RHSA-2020:4076"],"bugzilla":"1826187","bugzilla_description":"CVE-2020-6829 nss: Side channel attack on ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6829.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12402","severity":"moderate","public_date":"2020-06-02T12:00:00Z","advisories":["RHSA-2020:4076","RHSA-2020:3280"],"bugzilla":"1826231","bugzilla_description":"CVE-2020-12402 nss: Side channel vulnerabilities during RSA key generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.53.1-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12402.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12062","severity":"moderate","public_date":"2020-05-27T00:00:00Z","advisories":[],"bugzilla":"1854145","bugzilla_description":"CVE-2020-12062 openssh: scp can send duplicate responses to the server upon a utimes system call failure leading to overwrite of arbitrary files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12062.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-12399","severity":"moderate","public_date":"2020-05-21T00:00:00Z","advisories":[],"bugzilla":"1826177","bugzilla_description":"CVE-2020-12399 nss: Timing attack on DSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12399.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-1967","severity":"important","public_date":"2020-04-21T00:00:00Z","advisories":[],"bugzilla":"1823670","bugzilla_description":"CVE-2020-1967 openssl: Segmentation fault in SSL_check_chain causes denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1967.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17023","severity":"low","public_date":"2020-01-08T00:00:00Z","advisories":["RHSA-2020:4076","RHSA-2020:3280"],"bugzilla":"1791225","bugzilla_description":"CVE-2019-17023 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.53.1-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-17006","severity":"moderate","public_date":"2019-12-26T00:00:00Z","advisories":["RHSA-2020:4076","RHSA-2020:3280"],"bugzilla":"1775916","bugzilla_description":"CVE-2019-17006 nss: Check length of inputs for cryptographic primitives","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.53.1-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17006.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11756","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:4076","RHSA-2020:3280"],"bugzilla":"1774835","bugzilla_description":"CVE-2019-11756 nss: Use-after-free in sftk_FreeSession due to improper refcounting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.53.1-11.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11756.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-1551","severity":"low","public_date":"2019-12-06T00:00:00Z","advisories":[],"bugzilla":"1780995","bugzilla_description":"CVE-2019-1551 openssl: Integer overflow in RSAZ modular exponentiation on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1551.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2012-5582","severity":"low","public_date":"2019-11-25T00:00:00Z","advisories":[],"bugzilla":"1777925","bugzilla_description":"CVE-2012-5582 opendnssec: misuses libcurl API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5582.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2019-11745","severity":"important","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:0243","RHSA-2019:4190","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:4114","RHSA-2020:1461","RHSA-2019:4152","RHSA-2020:0466"],"bugzilla":"1774831","bugzilla_description":"CVE-2019-11745 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["nss-0:3.44.0-8.el8_0","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-7.el7_7","nss-softokn-0:3.14.3-23.el6_6","nss-0:3.44.0-9.el8_1","nss-softokn-0:3.44.0-6.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-1547","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752090","bugzilla_description":"CVE-2019-1547 openssl: side-channel weak encryption vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-602","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-1549","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752095","bugzilla_description":"CVE-2019-1549 openssl: information disclosure in fork()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-1563","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752100","bugzilla_description":"CVE-2019-1563 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-16905","severity":"important","public_date":"2019-08-28T00:00:00Z","advisories":[],"bugzilla":"1767966","bugzilla_description":"CVE-2019-16905 openssh: an integer overflow in the private key parsing code for the XMSS key type","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16905.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-1552","severity":"low","public_date":"2019-07-30T00:00:00Z","advisories":[],"bugzilla":"1745637","bugzilla_description":"CVE-2019-1552 openssl: Insecure path defaults vulnerability in mingw builds","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1552.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2019-11719","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1951","RHSA-2020:4076"],"bugzilla":"1728436","bugzilla_description":"CVE-2019-11719 nss: Out-of-bounds read when importing curve25519 private key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11719.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11729","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:4190","RHSA-2019:1951"],"bugzilla":"1728437","bugzilla_description":"CVE-2019-11729 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["nss-0:3.44.0-7.el7_7","nss-util-0:3.44.0-4.el7_7","nss-0:3.44.0-7.el8_0","nss-softokn-0:3.44.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11729.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11727","severity":"low","public_date":"2019-07-09T00:00:00Z","advisories":["RHSA-2019:1951","RHSA-2020:4076"],"bugzilla":"1730988","bugzilla_description":"CVE-2019-11727 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":["nss-0:3.53.1-3.el7_9","nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11727.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"3.4"},{"CVE":"CVE-2019-17007","severity":"moderate","public_date":"2019-03-21T00:00:00Z","advisories":[],"bugzilla":"1703979","bugzilla_description":"CVE-2019-17007 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17007.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1543","severity":"low","public_date":"2019-03-06T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1695954","bugzilla_description":"CVE-2019-1543 openssl: ChaCha20-Poly1305 with long nonces","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-1559","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:2304","RHSA-2019:2439","RHSA-2019:3929","RHSA-2019:2437","RHSA-2019:2471"],"bugzilla":"1683804","bugzilla_description":"CVE-2019-1559 openssl: 0-byte record padding oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-0:1.0.1e-58.el6_10","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-18508","severity":"moderate","public_date":"2019-01-22T00:00:00Z","advisories":["RHSA-2019:1951"],"bugzilla":"1671310","bugzilla_description":"CVE-2018-18508 nss: NULL pointer dereference in several CMS functions resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-12404","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":["RHSA-2019:2237"],"bugzilla":"1657913","bugzilla_description":"CVE-2018-12404 nss: Cache side-channel variant of the Bleichenbacher attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-20685","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1665785","bugzilla_description":"CVE-2018-20685 openssh: scp client improper directory name validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20685.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-6109","severity":"low","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666119","bugzilla_description":"CVE-2019-6109 openssh: Missing character encoding in progress display allows for spoofing of scp client output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-6110","severity":"low","public_date":"2018-11-16T00:00:00Z","advisories":[],"bugzilla":"1666124","bugzilla_description":"CVE-2019-6110 openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-6111","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666127","bugzilla_description":"CVE-2019-6111 openssh: Improper validation of object names allows malicious server to overwrite files via scp client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-5407","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3932","RHSA-2019:0483","RHSA-2019:2125","RHSA-2019:3929","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1645695","bugzilla_description":"CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7_6.1","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-0735","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1644356","bugzilla_description":"CVE-2018-0735 openssl: timing side channel attack in the ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0734","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:3700","RHSA-2019:3932","RHSA-2019:2304","RHSA-2019:3933","RHSA-2019:3935","RHBA-2019:3303"],"bugzilla":"1644364","bugzilla_description":"CVE-2018-0734 openssl: timing side channel attack in the DSA signature algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-12384","severity":"moderate","public_date":"2018-09-03T00:00:00Z","advisories":["RHSA-2018:2768","RHSA-2018:2898"],"bugzilla":"1622089","bugzilla_description":"CVE-2018-12384 nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nss-0:3.36.0-9.el6_10","nss-0:3.36.0-7.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12384.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-15919","severity":"low","public_date":"2018-08-28T00:00:00Z","advisories":[],"bugzilla":"1623184","bugzilla_description":"CVE-2018-15919 openssh: User enumeration via malformed packets in authentication requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15919.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-15473","severity":"low","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2019:2143","RHSA-2019:0711"],"bugzilla":"1619063","bugzilla_description":"CVE-2018-15473 openssh: User enumeration via malformed packets in authentication requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssh-0:7.4p1-21.el7","openssh-0:5.3p1-124.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15473.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0732","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2019:1296","RHSA-2019:1543","RHSA-2018:2553","RHSA-2018:2552","RHSA-2018:3221"],"bugzilla":"1591100","bugzilla_description":"CVE-2018-0732 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-1:1.0.2k-16.el7","rhoar-nodejs-1:8.11.4-2.el7","rhoar-nodejs-1:10.9.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-0737","severity":"low","public_date":"2018-04-16T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:3933","RHSA-2018:3221","RHSA-2019:3935"],"bugzilla":"1568253","bugzilla_description":"CVE-2018-0737 openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0737.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-0733","severity":"moderate","public_date":"2018-03-27T00:00:00Z","advisories":[],"bugzilla":"1561260","bugzilla_description":"CVE-2018-0733 openssl: Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages in a reduced number of attempts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0733.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-0739","severity":"moderate","public_date":"2018-03-27T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3090","RHSA-2019:1712","RHSA-2019:1711","RHSA-2018:3221"],"bugzilla":"1561266","bugzilla_description":"CVE-2018-0739 openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-400","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7","openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0739.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-10708","severity":"low","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1537929","bugzilla_description":"CVE-2016-10708 openssh: Out of sequence NEWKEYS message can allow remote attacker to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-3737","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523504","bugzilla_description":"CVE-2017-3737 openssl: Read/write after SSL object in error state","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3738","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523510","bugzilla_description":"CVE-2017-3738 openssl: rsaz_1024_mul_avx2 overflow bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-1000808","severity":"low","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2019:0085"],"bugzilla":"1640216","bugzilla_description":"CVE-2018-1000808 pyOpenSSL: Failure to release memory before removing last reference in PKCS #12 Store","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["pyOpenSSL-0:17.5.0-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-1000807","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2019:0085"],"bugzilla":"1640217","bugzilla_description":"CVE-2018-1000807 pyOpenSSL: Use-after-free in X509 object handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["pyOpenSSL-0:17.5.0-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3736","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1509169","bugzilla_description":"CVE-2017-3736 openssl: bn_sqrx8x_internal carry bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":["openssl-1:1.0.2k-12.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-15906","severity":"low","public_date":"2017-10-03T00:00:00Z","advisories":["RHSA-2018:0980"],"bugzilla":"1506630","bugzilla_description":"CVE-2017-15906 openssh: Improper write operations in readonly mode allow for zero-length file creation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openssh-0:7.4p1-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-7805","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2832"],"bugzilla":"1471171","bugzilla_description":"CVE-2017-7805 nss: Potential use-after-free in TLS 1.2 server when verifying client authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["nss-0:3.28.4-12.el7_4","nss-0:3.28.4-4.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-3735","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":["RHSA-2018:3221"],"bugzilla":"1486144","bugzilla_description":"CVE-2017-3735 openssl: Malformed X.509 IPAdressFamily could cause OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-11695","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1487128","bugzilla_description":"CVE-2017-11695 nss: Heap-buffer-overflow in alloc_segs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11695.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-11696","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1487129","bugzilla_description":"CVE-2017-11696 nss: Heap-buffer-overflow in __hash_open","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11696.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-11698","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1487130","bugzilla_description":"CVE-2017-11698 nss: Heap-buffer-overflow in __get_page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-11697","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1487132","bugzilla_description":"CVE-2017-11697 nss: Floating Point Exception in __hash_open","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11697.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7781","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1479197","bugzilla_description":"CVE-2017-7781 Mozilla: Elliptic curve point addition error when using mixed Jacobian-affine coordinates (MFSA 2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-681","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7781.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7502","severity":"important","public_date":"2017-05-30T00:00:00Z","advisories":["RHSA-2017:1567","RHSA-2017:1365","RHSA-2017:1364"],"bugzilla":"1446631","bugzilla_description":"CVE-2017-7502 nss: Null pointer dereference when handling empty SSLv2 messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["nss-0:3.28.4-3.el6_9","nss-0:3.28.4-1.2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7502.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5461","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1101","RHSA-2017:1100","RHSA-2017:1103","RHSA-2017:1102"],"bugzilla":"1440080","bugzilla_description":"CVE-2017-5461 nss: Write beyond bounds caused by bugs in Base64 de/encoding in nssb64d.c and nssb64e.c (MFSA 2017-10)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nss-0:3.21.4-1.el5_11","nss-util-0:3.16.1-5.el6_5","nss-util-0:3.13.1-11.el6_2","nss-util-0:3.21.4-1.el6_7","nss-0:3.28.4-1.el6_9","nss-util-0:3.19.1-4.el6_6","nss-util-0:3.21.4-1.el7_2","nss-util-0:3.14.3-9.el6_4","nss-0:3.14.3-11.el5_9","nss-0:3.28.4-1.0.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5461.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-5462","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443348","bugzilla_description":"CVE-2017-5462 nss: DRBG flaw in NSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5462.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-3733","severity":"important","public_date":"2017-02-16T00:00:00Z","advisories":[],"bugzilla":"1421695","bugzilla_description":"CVE-2017-3733 openssl: Encrypt-Then-Mac renegotiation crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3733.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3731","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2017:0286","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416852","bugzilla_description":"CVE-2017-3731 openssl: Truncated packet could crash via OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["openssl-0:1.0.1e-48.el6_8.4","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3731.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3730","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":[],"bugzilla":"1416855","bugzilla_description":"CVE-2017-3730 openssl: Bad (EC)DHE parameters cause a client crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3730.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3732","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416856","bugzilla_description":"CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-7056","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1802","RHSA-2017:1801","RHBA-2017:1929"],"bugzilla":"1412120","bugzilla_description":"CVE-2016-7056 openssl: ECDSA P-256 timing attack key recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.0.2k-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7056.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-10009","severity":"moderate","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1406269","bugzilla_description":"CVE-2016-10009 openssh: loading of untrusted PKCS#11 modules in ssh-agent","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10009.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2016-10010","severity":"low","public_date":"2016-12-19T00:00:00Z","advisories":[],"bugzilla":"1406278","bugzilla_description":"CVE-2016-10010 openssh: privilege escalation via Unix domain socket forwarding","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-10011","severity":"low","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1406286","bugzilla_description":"CVE-2016-10011 openssh: Leak of host private key material to privilege-separated child process via realloc()","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10011.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2016-10012","severity":"low","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1406293","bugzilla_description":"CVE-2016-10012 openssh: Bounds check can be evaded in the shared memory manager used by pre-authentication compression support","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-9574","severity":"moderate","public_date":"2016-11-28T00:00:00Z","advisories":[],"bugzilla":"1404568","bugzilla_description":"CVE-2016-9574 nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSA","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9574.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-5285","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2779"],"bugzilla":"1383883","bugzilla_description":"CVE-2016-5285 nss: Missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime causes server crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["nss-0:3.21.3-2.el5_11","nss-0:3.21.3-2.el6_8","nss-0:3.21.3-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-8635","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2779"],"bugzilla":"1391818","bugzilla_description":"CVE-2016-8635 nss: small-subgroups attack flaw","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["nss-0:3.21.3-2.el5_11","nss-0:3.21.3-2.el6_8","nss-0:3.21.3-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9074","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396548","bugzilla_description":"CVE-2016-9074 nss: Insufficient timing side-channel resistance in divSpoiler","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-7054","severity":"important","public_date":"2016-11-10T00:00:00Z","advisories":[],"bugzilla":"1393920","bugzilla_description":"CVE-2016-7054 openssl: Corrupting larger payloads when using ChaCha20/Poly1305 ciphersuites leads to DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7053","severity":"moderate","public_date":"2016-11-10T00:00:00Z","advisories":[],"bugzilla":"1393930","bugzilla_description":"CVE-2016-7053 openssl: CMS Null dereference vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-8610","severity":"moderate","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:0286","RHSA-2017:0574"],"bugzilla":"1384743","bugzilla_description":"CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","openssl-0:1.0.1e-48.el6_8.4","gnutls-0:2.12.23-21.el6","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-8858","severity":"moderate","public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1384860","bugzilla_description":"CVE-2016-8858 openssh: Memory exhaustion due to unregistered KEXINIT handler after receiving message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2016-7055","severity":"low","public_date":"2016-10-11T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1393929","bugzilla_description":"CVE-2016-7055 openssl: Carry propagating bug in Montgomery multiplication","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7055.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-6309","severity":"critical","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1379302","bugzilla_description":"CVE-2016-6309 openssl: Use After Free for large message sizes","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6309.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-7052","severity":"moderate","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1379310","bugzilla_description":"CVE-2016-7052 openssl: Missing CRL sanity check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7052.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6304","severity":"important","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2016:2802","RHSA-2017:2493","RHSA-2017:2494","RHSA-2016:1940"],"bugzilla":"1377600","bugzilla_description":"CVE-2016-6304 openssl: OCSP Status Request extension unbounded memory growth","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-0:1.0.1e-16.el6_5.17","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-42.el6_7.6","openssl-0:1.0.1e-48.el6_8.3","openssl-0:1.0.0-27.el6_4.6","openssl-0:1.0.1e-30.el6_6.13","openssl-0:1.0.0-20.el6_2.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6305","severity":"moderate","public_date":"2016-09-22T00:00:00Z","advisories":[],"bugzilla":"1378127","bugzilla_description":"CVE-2016-6305 openssl: SSL_peek() hang on empty record","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6305.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6306","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1377594","bugzilla_description":"CVE-2016-6306 openssl: certificate message OOB reads","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6306.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6307","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1378203","bugzilla_description":"CVE-2016-6307 openssl: excessive allocation of memory in tls_get_message_header()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6307.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-6308","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1378208","bugzilla_description":"CVE-2016-6308 openssl: excessive allocation of memory in dtls1_preprocess_fragment()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6308.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-2183","severity":"moderate","public_date":"2016-08-24T00:00:00Z","advisories":["RHSA-2020:0451","RHSA-2020:3842","RHSA-2017:3240","RHSA-2019:1245","RHBA-2019:2581","RHSA-2017:0462","RHSA-2017:3113","RHSA-2017:3114","RHSA-2017:2710","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:3239","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:2709","RHSA-2017:2708","RHSA-2018:2123","RHSA-2019:2859"],"bugzilla":"1369383","bugzilla_description":"CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","openshift3/metrics-heapster:v3.11.141-2","python-0:2.7.5-69.el7_5","openshift3/ose-console:v3.11.141-2","openshift3/oauth-proxy:v3.11.170-5","openshift4/ose-console:v4.5.0-202009201759.p0","openshift3/ose-kube-rbac-proxy:v3.11.141-2","openshift3/ose-metrics-server:v3.11.141-2","java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8","openshift4/ose-oauth-proxy:v4.1.18-201909201915"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-6302","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1369855","bugzilla_description":"CVE-2016-6302 openssl: Insufficient TLS session ticket HMAC length checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6303","severity":"moderate","public_date":"2016-08-20T00:00:00Z","advisories":[],"bugzilla":"1370146","bugzilla_description":"CVE-2016-6303 openssl: Integer overflow in MDC2_Update()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6303.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-2182","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1367340","bugzilla_description":"CVE-2016-2182 openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-2180","severity":"low","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2016:1940"],"bugzilla":"1359615","bugzilla_description":"CVE-2016-2180 OpenSSL: OOB read in TS_OBJ_print_bio()","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2180.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2016-6515","severity":"moderate","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1364935","bugzilla_description":"CVE-2016-6515 openssh: Denial of service via very long passwords","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-6210","severity":"moderate","public_date":"2016-07-14T00:00:00Z","advisories":["RHSA-2017:2029","RHSA-2017:2563"],"bugzilla":"1357442","bugzilla_description":"CVE-2016-6210 openssh: User enumeration via covert timing channel","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["openssh-0:7.4p1-11.el7","openssh-0:5.3p1-123.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6210.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-2181","severity":"moderate","public_date":"2016-07-05T00:00:00Z","advisories":["RHSA-2016:1940"],"bugzilla":"1369113","bugzilla_description":"CVE-2016-2181 openssl: DTLS replay protection bypass allows DoS against DTLS connection","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-2179","severity":"moderate","public_date":"2016-06-30T00:00:00Z","advisories":["RHSA-2016:1940"],"bugzilla":"1369504","bugzilla_description":"CVE-2016-2179 openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2179.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-2834","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":["RHSA-2016:2779"],"bugzilla":"1347908","bugzilla_description":"CVE-2016-2834 nss: Multiple security flaws (MFSA 2016-61)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-0:3.21.3-2.el5_11","nss-0:3.21.3-2.el6_8","nss-0:3.21.3-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2834.json"},{"CVE":"CVE-2016-2178","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1343400","bugzilla_description":"CVE-2016-2178 openssl: Non-constant time codepath followed for certain operations in DSA implementation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2178.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2016-2177","severity":"low","public_date":"2016-05-05T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1341705","bugzilla_description":"CVE-2016-2177 openssl: Possible integer overflow vulnerabilities in codebase","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2177.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-2108","severity":"important","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2017:0193","RHSA-2016:0722","RHSA-2017:0194","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:1137","RHSA-2016:0996"],"bugzilla":"1331402","bugzilla_description":"CVE-2016-2108 openssl: Memory corruption in the ASN.1 encoder","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:0.9.8e-40.el5_11","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2108.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2107","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1331426","bugzilla_description":"CVE-2016-2107 openssl: Padding oracle in AES-NI CBC MAC check","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2107.json"},{"CVE":"CVE-2016-2105","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:1650","RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:1648","RHSA-2016:2957","RHSA-2016:1649","RHSA-2016:0996"],"bugzilla":"1331441","bugzilla_description":"CVE-2016-2105 openssl: EVP_EncodeUpdate overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2106","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:1650","RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:1648","RHSA-2016:2957","RHSA-2016:1649","RHSA-2016:0996"],"bugzilla":"1331536","bugzilla_description":"CVE-2016-2106 openssl: EVP_EncryptUpdate overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2106.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2176","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1331563","bugzilla_description":"CVE-2016-2176 openssl: EBCDIC overread in X509_NAME_oneline()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2176.json"},{"CVE":"CVE-2016-4425","severity":"moderate","public_date":"2016-05-01T00:00:00Z","advisories":[],"bugzilla":"1332200","bugzilla_description":"CVE-2016-4425 jansson: stack exhaustion parsing a JSON file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4425.json"},{"CVE":"CVE-2016-2109","severity":"low","public_date":"2016-04-23T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1330101","bugzilla_description":"CVE-2016-2109 openssl: ASN.1 BIO handling of large amounts of data","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2109.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2015-8325","severity":"moderate","public_date":"2016-04-13T00:00:00Z","advisories":["RHSA-2016:2588","RHSA-2017:0641"],"bugzilla":"1328012","bugzilla_description":"CVE-2015-8325 openssh: privilege escalation via user's PAM environment and UseLogin=yes","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-863","affected_packages":["openssh-0:6.6.1p1-31.el7","openssh-0:5.3p1-122.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8325.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-3099","severity":"low","public_date":"2016-04-05T00:00:00Z","advisories":["RHSA-2016:2602"],"bugzilla":"1319052","bugzilla_description":"CVE-2016-3099 mod_nss: Invalid handling of +CIPHER operator","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-392","affected_packages":["mod_nss-0:1.0.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3099.json"},{"CVE":"CVE-2016-3115","severity":"moderate","public_date":"2016-03-10T00:00:00Z","advisories":["RHSA-2016:0465","RHSA-2016:0466"],"bugzilla":"1316829","bugzilla_description":"CVE-2016-3115 openssh: missing sanitisation of input for X11 forwarding","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-20","affected_packages":["openssh-0:6.6.1p1-25.el7_2","openssh-0:5.3p1-114.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3115.json"},{"CVE":"CVE-2016-1950","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0495","RHSA-2016:0370","RHSA-2016:0371"],"bugzilla":"1310509","bugzilla_description":"CVE-2016-1950 nss: Heap buffer overflow vulnerability in ASN1 certificate parsing (MFSA 2016-35)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-util-0:3.19.1-3.el6_6","nss-util-0:3.19.1-5.el7_1","nss-util-0:3.14.3-8.el6_4","nss-util-0:3.19.1-9.el7_2","nss-util-0:3.16.1-4.el6_5","nss-0:3.19.1-4.el5_11","nss-util-0:3.19.1-5.el6_7","nss-util-0:3.13.1-10.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1950.json"},{"CVE":"CVE-2016-1979","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0684","RHSA-2016:0591","RHSA-2016:0685"],"bugzilla":"1315202","bugzilla_description":"CVE-2016-1979 nss: Use-after-free during processing of DER encoded keys in NSS (MFSA 2016-36)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-0:3.21.0-6.el5_11","nss-0:3.21.0-0.3.el6_7","nss-0:3.21.0-9.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1979.json"},{"CVE":"CVE-2016-1978","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0684","RHSA-2016:0591","RHSA-2016:0685"],"bugzilla":"1315565","bugzilla_description":"CVE-2016-1978 nss: Use-after-free in NSS during SSL connections in low memory (MFSA 2016-15)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-0:3.21.0-6.el5_11","nss-0:3.21.0-0.3.el6_7","nss-0:3.21.0-9.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1978.json"},{"CVE":"CVE-2016-2842","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1314757","bugzilla_description":"CVE-2016-2842 openssl: doapr_outch function does not verify that certain memory allocation succeeds","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2842.json"},{"CVE":"CVE-2016-0800","severity":"important","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2016:0490","RHSA-2016:1519","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0305","RHSA-2016:0306","RHSA-2016:0301","RHSA-2016:0302","RHSA-2016:0445","RHSA-2016:0379","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1310593","bugzilla_description":"CVE-2016-0800 SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-42.el6_7.4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","rhev-hypervisor7-0:7.2-20160302.1.el7ev","openssl-0:1.0.1e-30.el6_6.12","rhev-hypervisor7-0:7.2-20160302.1.el6ev","openssl-0:1.0.0-20.el6_2.8","openssl-0:0.9.7a-43.23.el4","openssl-1:1.0.1e-42.el7_1.10","openssl098e-0:0.9.8e-20.el6_7.1","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-39.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0800.json"},{"CVE":"CVE-2016-0702","severity":"low","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2016:2957","RHSA-2016:0301","RHSA-2016:0379"],"bugzilla":"1310599","bugzilla_description":"CVE-2016-0702 OpenSSL: Side channel attack on modular exponentiation","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-42.el6_7.4","rhev-hypervisor7-0:7.2-20160302.1.el7ev","rhev-hypervisor7-0:7.2-20160302.1.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0702.json"},{"CVE":"CVE-2016-0703","severity":"moderate","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0303"],"bugzilla":"1310811","bugzilla_description":"CVE-2016-0703 openssl: Divide-and-conquer session key recovery in SSLv2","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0703.json"},{"CVE":"CVE-2016-0704","severity":"moderate","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0303"],"bugzilla":"1310814","bugzilla_description":"CVE-2016-0704 openssl: SSLv2 Bleichenbacher protection overwrites wrong bytes for export ciphers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0704.json"},{"CVE":"CVE-2016-0797","severity":"low","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2016:2957","RHSA-2016:0301","RHSA-2016:0302","RHSA-2016:0379"],"bugzilla":"1311880","bugzilla_description":"CVE-2016-0797 OpenSSL: BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-42.el6_7.4","rhev-hypervisor7-0:7.2-20160302.1.el7ev","rhev-hypervisor7-0:7.2-20160302.1.el6ev","openssl-0:0.9.8e-39.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0797.json"},{"CVE":"CVE-2016-0799","severity":"low","public_date":"2016-02-26T00:00:00Z","advisories":["RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1312219","bugzilla_description":"CVE-2016-0799 OpenSSL: Fix memory issues in BIO_*printf functions","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0799.json"},{"CVE":"CVE-2016-0798","severity":"low","public_date":"2016-02-25T00:00:00Z","advisories":[],"bugzilla":"1311876","bugzilla_description":"CVE-2016-0798 OpenSSL: Avoid memory leak in SRP","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0798.json"},{"CVE":"CVE-2016-0705","severity":"low","public_date":"2016-02-18T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2016:2957","RHSA-2016:0301","RHSA-2016:0379"],"bugzilla":"1310596","bugzilla_description":"CVE-2016-0705 OpenSSL: Double-free in DSA code","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-42.el6_7.4","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","rhev-hypervisor7-0:7.2-20160302.1.el7ev","rhev-hypervisor7-0:7.2-20160302.1.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0705.json"},{"CVE":"CVE-2015-3194","severity":"low","public_date":"2016-01-28T00:00:00Z","advisories":["RHSA-2015:2617","RHSA-2016:2957"],"bugzilla":"1288320","bugzilla_description":"CVE-2015-3194 OpenSSL: Certificate verify crash with missing PSS parameter","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.1","openssl-1:1.0.1e-51.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3194.json"},{"CVE":"CVE-2016-0701","severity":"moderate","public_date":"2016-01-28T00:00:00Z","advisories":[],"bugzilla":"1301845","bugzilla_description":"CVE-2016-0701 OpenSSL: DH small subgroups","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0701.json"},{"CVE":"CVE-2015-3197","severity":"low","public_date":"2016-01-28T00:00:00Z","advisories":["RHSA-2016:0490","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0305","RHSA-2016:0306","RHSA-2016:0301","RHSA-2016:0302","RHSA-2016:0445","RHSA-2016:0379","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1301846","bugzilla_description":"CVE-2015-3197 OpenSSL: SSLv2 doesn't block disabled ciphers","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-42.el6_7.4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","rhev-hypervisor7-0:7.2-20160302.1.el7ev","openssl-0:1.0.1e-30.el6_6.12","rhev-hypervisor7-0:7.2-20160302.1.el6ev","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8","openssl-0:0.9.7a-43.23.el4","openssl098e-0:0.9.8e-20.el6_7.1","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-39.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3197.json"},{"CVE":"CVE-2016-1938","severity":"low","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1305159","bugzilla_description":"CVE-2016-1938 Mozilla NSS: Errors in mp_div and mp_exptmod cryptographic functions","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1938.json"},{"CVE":"CVE-2016-0777","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2016:0043"],"bugzilla":"1298032","bugzilla_description":"CVE-2016-0777 OpenSSH: Client Information leak due to use of roaming connection feature","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-682","affected_packages":["openssh-0:6.6.1p1-23.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0777.json"},{"CVE":"CVE-2016-0778","severity":"low","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2016:0043"],"bugzilla":"1298033","bugzilla_description":"CVE-2016-0778 OpenSSH: Client buffer-overflow when using roaming connections","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["openssh-0:6.6.1p1-23.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0778.json"},{"CVE":"CVE-2016-1908","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2016:0465","RHSA-2016:0741"],"bugzilla":"1298741","bugzilla_description":"CVE-2016-1908 openssh: possible fallback from untrusted to trusted X11 forwarding","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-284","affected_packages":["openssh-0:6.6.1p1-25.el7_2","openssh-0:5.3p1-117.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1908.json"},{"CVE":"CVE-2016-1907","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":[],"bugzilla":"1298746","bugzilla_description":"CVE-2016-1907 openssh: out-of-bounds read in packet handling code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1907.json"},{"CVE":"CVE-2015-7575","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0012","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0007","RHSA-2016:0008","RHSA-2016:0049"],"bugzilla":"1289841","bugzilla_description":"CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.2","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","nss-0:3.19.1-19.el7_2","gnutls-0:3.3.8-14.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","gnutls-0:2.8.5-19.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","nss-0:3.19.1-8.el6_7","openssl-1:1.0.1e-51.el7_2.2","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json"},{"CVE":"CVE-2015-1794","severity":"low","public_date":"2015-12-04T00:00:00Z","advisories":[],"bugzilla":"1288955","bugzilla_description":"CVE-2015-1794 OpenSSL: Anon DH ServerKeyExchange with 0 p parameter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1794.json"},{"CVE":"CVE-2015-3193","severity":"moderate","public_date":"2015-12-03T00:00:00Z","advisories":[],"bugzilla":"1288317","bugzilla_description":"CVE-2015-3193 OpenSSL: BN_mod_exp may produce incorrect results on x86_64","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3193.json"},{"CVE":"CVE-2015-3195","severity":"moderate","public_date":"2015-12-03T00:00:00Z","advisories":["RHSA-2015:2617","RHSA-2016:2056","RHSA-2016:2957","RHSA-2015:2616"],"bugzilla":"1288322","bugzilla_description":"CVE-2015-3195 OpenSSL: X509_ATTRIBUTE memory leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-42.el6_7.1","openssl-1:1.0.1e-51.el7_2.1","openssl-0:0.9.8e-37.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-3196","severity":"low","public_date":"2015-12-03T00:00:00Z","advisories":["RHSA-2015:2617","RHSA-2016:2957"],"bugzilla":"1288326","bugzilla_description":"CVE-2015-3196 OpenSSL: Race condition handling PSK identify hint","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.1","openssl-1:1.0.1e-51.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3196.json"},{"CVE":"CVE-2015-7181","severity":"critical","public_date":"2015-11-03T00:00:00Z","advisories":["RHSA-2015:1980","RHSA-2015:2068","RHSA-2015:1981"],"bugzilla":"1269345","bugzilla_description":"CVE-2015-7181 nss: use-after-poison in sec_asn1d_parse_leaf() (MFSA 2015-133)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-util-0:3.13.1-9.el6_2","nss-0:3.19.1-2.el5_11","nss-util-0:3.19.1-2.el6_7","nss-util-0:3.14.3-7.el6_4","nss-util-0:3.19.1-2.el6_6","nss-util-0:3.19.1-4.ael7b_1","nss-util-0:3.16.1-3.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7181.json"},{"CVE":"CVE-2015-7182","severity":"critical","public_date":"2015-11-03T00:00:00Z","advisories":["RHSA-2015:1980","RHSA-2015:2068","RHSA-2015:1981"],"bugzilla":"1269351","bugzilla_description":"CVE-2015-7182 nss: ASN.1 decoder heap overflow when decoding constructed OCTET STRING that mixes indefinite and definite length encodings (MFSA 2015-133)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["nss-util-0:3.13.1-9.el6_2","nss-0:3.19.1-2.el5_11","nss-util-0:3.19.1-2.el6_7","nss-util-0:3.14.3-7.el6_4","nss-util-0:3.19.1-2.el6_6","nss-util-0:3.19.1-4.ael7b_1","nss-util-0:3.16.1-3.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7182.json"},{"CVE":"CVE-2015-7183","severity":"critical","public_date":"2015-11-03T00:00:00Z","advisories":["RHSA-2015:1980","RHSA-2015:2068","RHSA-2015:1981"],"bugzilla":"1269353","bugzilla_description":"CVE-2015-7183 nspr: heap-buffer overflow in PL_ARENA_ALLOCATE (MFSA 2015-133)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["nspr-0:4.10.8-2.el7_1","nspr-0:4.10.8-2.el5_11","nspr-0:4.10.8-2.el6_6","nss-0:3.14.3-9.el6_4","nss-0:3.16.1-9.el6_5","nspr-0:4.8.9-6.el6_2","nspr-0:4.10.6-2.el6_5","nss-0:3.13.1-12.el6_2","nss-0:3.19.1-7.ael7b_1.2","nss-0:3.19.1-5.el6_7","nspr-0:4.9.5-5.el6_4","nspr-0:4.10.8-2.el6_7","nss-0:3.19.1-4.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7183.json"},{"CVE":"CVE-2015-5244","severity":"moderate","public_date":"2015-09-15T00:00:00Z","advisories":[],"bugzilla":"1259216","bugzilla_description":"CVE-2015-5244 mod_nss: incorrect ciphersuite parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5244.json"},{"CVE":"CVE-2015-6563","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2088","RHSA-2016:0741"],"bugzilla":"1252844","bugzilla_description":"CVE-2015-6563 openssh: Privilege separation weakness related to PAM support","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-266","affected_packages":["openssh-0:5.3p1-117.el6","openssh-0:6.6.1p1-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6563.json"},{"CVE":"CVE-2015-6564","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2088","RHSA-2016:0741"],"bugzilla":"1252852","bugzilla_description":"CVE-2015-6564 openssh: Use-after-free bug related to PAM support","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-416","affected_packages":["openssh-0:5.3p1-117.el6","openssh-0:6.6.1p1-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6564.json"},{"CVE":"CVE-2015-6565","severity":"low","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252861","bugzilla_description":"CVE-2015-6565 openssh: Incorrectly set TTYs to be world-writable","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6565.json"},{"CVE":"CVE-2015-5600","severity":"low","public_date":"2015-07-16T00:00:00Z","advisories":["RHSA-2015:2088","RHSA-2016:0466"],"bugzilla":"1245969","bugzilla_description":"CVE-2015-5600 openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-304","affected_packages":["openssh-0:5.3p1-114.el6_7","openssh-0:6.6.1p1-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5600.json"},{"CVE":"CVE-2015-3277","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":[],"bugzilla":"1238324","bugzilla_description":"CVE-2015-3277 mod_nss: incorrect multi-keyword mode cipherstring parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3277.json"},{"CVE":"CVE-2015-3278","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":[],"bugzilla":"1238326","bugzilla_description":"CVE-2015-3278 nss_compat_ossl: incorrect multi-keyword mode cipherstring parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3278.json"},{"CVE":"CVE-2015-2613","severity":"moderate","public_date":"2015-07-14T00:00:00Z","advisories":["RHSA-2015:1488","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241"],"bugzilla":"1242456","bugzilla_description":"CVE-2015-2613 NSS / JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2613.json"},{"CVE":"CVE-2015-1793","severity":"important","public_date":"2015-07-09T00:00:00Z","advisories":[],"bugzilla":"1238619","bugzilla_description":"CVE-2015-1793 openssl: alternative chains certificate forgery","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1793.json"},{"CVE":"CVE-2015-2730","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1664","RHSA-2015:1699"],"bugzilla":"1236954","bugzilla_description":"CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-347","affected_packages":["nss-0:3.19.1-1.el5_11","nss-softokn-0:3.16.2.3-13.el7_1","nss-softokn-0:3.14.3-23.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2730.json"},{"CVE":"CVE-2015-2721","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1664","RHSA-2015:1185"],"bugzilla":"1236967","bugzilla_description":"CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["nss-0:3.19.1-3.el6_6","nss-0:3.19.1-1.el5_11","nss-0:3.19.1-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2721.json"},{"CVE":"CVE-2015-5352","severity":"moderate","public_date":"2015-07-01T00:00:00Z","advisories":["RHSA-2016:0741"],"bugzilla":"1238231","bugzilla_description":"CVE-2015-5352 openssh: XSECURITY restrictions bypass under certain conditions in ssh(1)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["openssh-0:5.3p1-117.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5352.json"},{"CVE":"CVE-2015-1788","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":[],"bugzilla":"1228600","bugzilla_description":"CVE-2015-1788 OpenSSL: Malformed ECParameters causes infinite loop","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1788.json"},{"CVE":"CVE-2015-1789","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2015:1197"],"bugzilla":"1228603","bugzilla_description":"CVE-2015-1789 OpenSSL: out-of-bounds read in X509_cmp_time","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11","openssl-0:0.9.8e-36.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1789.json"},{"CVE":"CVE-2015-1790","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2015:1197"],"bugzilla":"1228604","bugzilla_description":"CVE-2015-1790 OpenSSL: PKCS7 crash with missing EnvelopedContent","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11","openssl-0:0.9.8e-36.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1790.json"},{"CVE":"CVE-2015-1792","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115"],"bugzilla":"1228607","bugzilla_description":"CVE-2015-1792 OpenSSL: CMS verify infinite loop with unknown hash function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1792.json"},{"CVE":"CVE-2015-1791","severity":"low","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115"],"bugzilla":"1228608","bugzilla_description":"CVE-2015-1791 OpenSSL: Race condition handling NewSessionTicket","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1791.json"},{"CVE":"CVE-2014-8176","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2016:2957"],"bugzilla":"1228611","bugzilla_description":"CVE-2014-8176 OpenSSL: Invalid free in DTLS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-3216","severity":"low","public_date":"2015-05-28T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2016:2957"],"bugzilla":"1227574","bugzilla_description":"CVE-2015-3216 openssl: Crash in ssleay_rand_bytes due to locking regression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3216.json"},{"CVE":"CVE-2015-4000","severity":"moderate","public_date":"2015-05-20T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2016:2056","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2016:1624","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1197","RHSA-2015:1230","RHSA-2015:1185","RHSA-2015:1072"],"bugzilla":"1223211","bugzilla_description":"CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","nss-0:3.19.1-3.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","nss-0:3.19.1-3.ael7b_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","openssl-0:1.0.1e-30.el6_6.9","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","openssl-1:1.0.1e-42.ael7b_1.6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.8.0-openjdk-1:1.8.0.51-1.b16.ael7b_1","openssl-0:0.9.8e-36.el5_11","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-2808","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1207101","bugzilla_description":"CVE-2015-2808 SSL/TLS: \"Invariance Weakness\" vulnerability in RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2808.json"},{"CVE":"CVE-2015-0291","severity":"important","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202338","bugzilla_description":"CVE-2015-0291 openssl: ClientHello sigalgs NULL pointer dereference DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0291.json"},{"CVE":"CVE-2015-0290","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202345","bugzilla_description":"CVE-2015-0290 openssl: multiblock corrupted pointer","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0290.json"},{"CVE":"CVE-2015-0207","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202351","bugzilla_description":"CVE-2015-0207 openssl: DTLS segmentation fault in DTLSv1_listen","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0207.json"},{"CVE":"CVE-2015-0286","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0752","RHSA-2016:2957","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202366","bugzilla_description":"CVE-2015-0286 openssl: invalid pointer use in ASN1_TYPE_cmp()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822->CWE-125","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0286.json"},{"CVE":"CVE-2015-0208","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202369","bugzilla_description":"CVE-2015-0208 openssl: segmentation fault for invalid PSS parameters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0208.json"},{"CVE":"CVE-2015-0287","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202380","bugzilla_description":"CVE-2015-0287 openssl: ASN.1 structure reuse memory corruption","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0287.json"},{"CVE":"CVE-2015-0289","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202384","bugzilla_description":"CVE-2015-0289 openssl: PKCS7 NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0289.json"},{"CVE":"CVE-2015-0292","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202395","bugzilla_description":"CVE-2015-0292 openssl: integer underflow leading to buffer overflow in base64 decoding","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-120","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0292.json"},{"CVE":"CVE-2015-0293","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2016:0490","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0445","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1202404","bugzilla_description":"CVE-2015-0293 openssl: assertion failure in SSLv2 servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0293.json"},{"CVE":"CVE-2015-1787","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202406","bugzilla_description":"CVE-2015-1787 openssl: segmentation fault in client authentication with empty CKE and DHE","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1787.json"},{"CVE":"CVE-2015-0285","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202410","bugzilla_description":"CVE-2015-0285 openssl: handshake with unseeded PRNG","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-335","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0285.json"},{"CVE":"CVE-2015-0288","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHEA-2015:1770","RHEA-2015:1771","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202418","bugzilla_description":"CVE-2015-0288 openssl: X509_to_X509_REQ NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0288.json"},{"CVE":"CVE-2009-5146","severity":"moderate","public_date":"2015-03-16T00:00:00Z","advisories":[],"bugzilla":"1203232","bugzilla_description":"CVE-2009-5146 openssl: memory leak in hostname TLS extension","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5146.json"},{"CVE":"CVE-2015-0209","severity":"low","public_date":"2015-02-09T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:0752","RHSA-2016:2957","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1196737","bugzilla_description":"CVE-2015-0209 openssl: use-after-free on invalid EC private key import","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0209.json"},{"CVE":"CVE-2014-3571","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180234","bugzilla_description":"CVE-2014-3571 openssl: DTLS segmentation fault in dtls1_get_record","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3571.json"},{"CVE":"CVE-2015-0206","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180235","bugzilla_description":"CVE-2015-0206 openssl: DTLS memory leak in dtls1_buffer_record","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0206.json"},{"CVE":"CVE-2015-0205","severity":"low","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180239","bugzilla_description":"CVE-2015-0205 openssl: DH client certificates accepted without verification","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0205.json"},{"CVE":"CVE-2014-3570","severity":"low","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2016:1650","RHSA-2015:0066","RHSA-2015:0849"],"bugzilla":"1180240","bugzilla_description":"CVE-2014-3570 openssl: Bignum squaring may produce incorrect results","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3570.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-0204","severity":"moderate","public_date":"2015-01-06T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2016:1650","RHEA-2015:0955","RHSA-2015:0066","RHSA-2015:0849"],"bugzilla":"1180184","bugzilla_description":"CVE-2015-0204 openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"(CWE-327|CWE-757)","affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2014-3572","severity":"low","public_date":"2015-01-05T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180185","bugzilla_description":"CVE-2014-3572 openssl: ECDH downgrade bug fix","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3572.json"},{"CVE":"CVE-2014-8275","severity":"low","public_date":"2015-01-05T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0066"],"bugzilla":"1180187","bugzilla_description":"CVE-2014-8275 openssl: Fix various certificate fingerprint issues","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8275.json"},{"CVE":"CVE-2014-9424","severity":"moderate","public_date":"2014-12-29T00:00:00Z","advisories":[],"bugzilla":"1177569","bugzilla_description":"CVE-2014-9424 libressl: Double-free in ssl_parse_clienthello_use_srtp_ext() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9424.json"},{"CVE":"CVE-2014-8730","severity":"moderate","public_date":"2014-12-09T00:00:00Z","advisories":[],"bugzilla":"1171965","bugzilla_description":"CVE-2014-8730 TLS: incorrect check of padding bytes when using CBC cipher suites","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8730.json"},{"CVE":"CVE-2014-1569","severity":"low","public_date":"2014-12-01T00:00:00Z","advisories":["RHBA-2015:0925","RHBA-2015:0926","RHBA-2015:0965"],"bugzilla":"1174492","bugzilla_description":"CVE-2014-1569 nss: QuickDER decoder length issue","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["nss-0:3.18.0-6.el5_11","nss-0:3.18.0-5.3.el6_6","nss-0:3.18.0-2.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1569.json"},{"CVE":"CVE-2014-3569","severity":"moderate","public_date":"2014-10-21T00:00:00Z","advisories":[],"bugzilla":"1177249","bugzilla_description":"CVE-2014-3569 openssl: denial of service in ssl23_get_client_hello function","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3569.json"},{"CVE":"CVE-2014-3513","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1652","RHSA-2014:1692"],"bugzilla":"1152953","bugzilla_description":"CVE-2014-3513 openssl: SRTP memory leak causes crash when using specially-crafted handshake message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-30.el6_6.2","openssl-1:1.0.1e-34.el7_0.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3513.json"},{"CVE":"CVE-2014-3567","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1652","RHSA-2015:0126","RHSA-2014:1692"],"bugzilla":"1152961","bugzilla_description":"CVE-2014-3567 openssl: Invalid TLS/SSL session tickets could cause memory leak leading to server crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["rhev-hypervisor6-0:6.6-20150123.1.el6ev","openssl-0:1.0.1e-30.el6_6.2","openssl-1:1.0.1e-34.el7_0.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3567.json"},{"CVE":"CVE-2014-3568","severity":"low","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1152967","bugzilla_description":"CVE-2014-3568 openssl: Build option no-ssl3 is incomplete","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3568.json"},{"CVE":"CVE-2014-3566","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2015:1546","RHSA-2015:1545","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2014:1881","RHSA-2014:1880","RHSA-2015:0080","RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2014:1920","RHSA-2015:0067","RHSA-2015:0012","RHSA-2015:0011","RHSA-2015:0264","RHSA-2015:0010","RHSA-2015:0086","RHSA-2015:0085","RHBA-2014:1857"],"bugzilla":"1152789","bugzilla_description":"CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-636|CWE-757)","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","openshift-origin-node-proxy-0:1.16.4.2-1.el6op","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","openshift-origin-node-proxy-0:1.22.3.4-1.el6op","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json"},{"CVE":"CVE-2014-9278","severity":"low","public_date":"2014-10-03T00:00:00Z","advisories":["RHSA-2015:0425"],"bugzilla":"1169843","bugzilla_description":"CVE-2014-9278 openssh: ~/.k5users unexpectedly grants remote login","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["openssh-0:6.6.1p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9278.json"},{"CVE":"CVE-2014-1568","severity":"important","public_date":"2014-09-24T00:00:00Z","advisories":["RHSA-2014:1354","RHSA-2014:1371","RHSA-2014:1307"],"bugzilla":"1145429","bugzilla_description":"CVE-2014-1568 nss: RSA PKCS#1 signature verification forgery flaw (MFSA 2014-73)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-347","affected_packages":["nss-0:3.16.1-7.el6_5","nss-0:3.16.2-7.el7_0","nss-0:3.16.1-4.el5_11","nss-0:3.14.3-10.el5_9","rhev-hypervisor6-0:6.5-20140930.1.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1568.json"},{"CVE":"CVE-2014-2970","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1118169","bugzilla_description":"CVE-2014-2970 openssl: client-crash when parsing SRP parameters (VU#904060)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2970.json"},{"CVE":"CVE-2014-3508","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127490","bugzilla_description":"CVE-2014-3508 openssl: information leak in pretty printing functions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3508.json"},{"CVE":"CVE-2014-5139","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1127491","bugzilla_description":"CVE-2014-5139 openssl: crash with SRP ciphersuite in Server Hello message","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5139.json"},{"CVE":"CVE-2014-3509","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1052","RHSA-2015:0197","RHSA-2014:1054"],"bugzilla":"1127498","bugzilla_description":"CVE-2014-3509 openssl: race condition in ssl_parse_serverhello_tlsext","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-362","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","spice-client-msi-0:3.5-2","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3509.json"},{"CVE":"CVE-2014-3505","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127499","bugzilla_description":"CVE-2014-3505 openssl: DTLS packet processing double free","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-672","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3505.json"},{"CVE":"CVE-2014-3506","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127500","bugzilla_description":"CVE-2014-3506 openssl: DTLS memory exhaustion","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-862->CWE-400","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3506.json"},{"CVE":"CVE-2014-3507","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1052","RHSA-2014:1054"],"bugzilla":"1127502","bugzilla_description":"CVE-2014-3507 openssl: DTLS memory leak from zero-length fragments","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3507.json"},{"CVE":"CVE-2014-3510","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127503","bugzilla_description":"CVE-2014-3510 openssl: DTLS anonymous (EC)DH denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3510.json"},{"CVE":"CVE-2014-3511","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2015:0126","RHSA-2014:1052","RHSA-2015:0197","RHSA-2014:1054"],"bugzilla":"1127504","bugzilla_description":"CVE-2014-3511 openssl: TLS protocol downgrade attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-390","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","rhev-hypervisor6-0:6.6-20150123.1.el6ev","spice-client-msi-0:3.5-2","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3511.json"},{"CVE":"CVE-2014-3512","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1127505","bugzilla_description":"CVE-2014-3512 openssl: SRP buffer overrun","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3512.json"},{"CVE":"CVE-2014-1544","severity":"critical","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:0917","RHSA-2014:1165","RHSA-2014:0915","RHSA-2014:0916"],"bugzilla":"1116198","bugzilla_description":"CVE-2014-1544 nss: Race-condition in certificate verification can lead to Remote code execution (MFSA 2014-63)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["nss-0:3.12.10-7.el4","nss-0:3.15.3-7.el5_10","nss-0:3.14.3-9.el5_9","nss-0:3.15.4-7.el7_0","nss-0:3.16.1-4.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1544.json"},{"CVE":"CVE-2014-1545","severity":"moderate","public_date":"2014-06-10T00:00:00Z","advisories":["RHSA-2014:1246","RHBA-2015:0364","RHSA-2014:0917"],"bugzilla":"1107432","bugzilla_description":"CVE-2014-1545 Mozilla: Out of bounds write in NSPR (MFSA 2014-55)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["nspr-0:4.10.6-1.el6_5","nspr-0:4.10.6-3.el7","nss-0:3.16.1-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1545.json"},{"CVE":"CVE-2014-0224","severity":"important","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0630","RHSA-2014:0631","RHSA-2014:0624","RHSA-2014:0679","RHSA-2014:0632","RHSA-2014:0633","RHSA-2014:0627","RHSA-2014:0628","RHSA-2014:0625","RHSA-2014:0626","RHSA-2014:0629","RHSA-2014:0680"],"bugzilla":"1103586","bugzilla_description":"CVE-2014-0224 openssl: SSL/TLS MITM vulnerability","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-841","affected_packages":["openssl-0:0.9.8e-27.el5_10.3","openssl-0:1.0.1e-16.el6_5.14","openssl097a-0:0.9.7a-12.el5_10.1","openssl098e-0:0.9.8e-18.el6_5.2","openssl-1:1.0.1e-34.el7_0.3","openssl098e-0:0.9.8e-29.el7_0.2","rhev-hypervisor6-0:6.5-20140603.1.el6ev","openssl-0:0.9.8e-26.el5_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0224.json"},{"CVE":"CVE-2014-0221","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625","RHSA-2014:1021","RHSA-2014:1053","RHSA-2014:1086"],"bugzilla":"1103593","bugzilla_description":"CVE-2014-0221 openssl: DoS when sending invalid DTLS handshake","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["openssl-0:0.9.8e-27.el5_10.4","openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0221.json"},{"CVE":"CVE-2014-0195","severity":"important","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1103598","bugzilla_description":"CVE-2014-0195 openssl: Buffer overflow via DTLS invalid fragment","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-119","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0195.json"},{"CVE":"CVE-2014-3470","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1103600","bugzilla_description":"CVE-2014-3470 openssl: client-side denial of service when using anonymous ECDH","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3470.json"},{"CVE":"CVE-2014-0198","severity":"moderate","public_date":"2014-04-21T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1093837","bugzilla_description":"CVE-2014-0198 openssl: SSL_MODE_RELEASE_BUFFERS NULL pointer dereference in do_ssl3_write()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0198.json"},{"CVE":"CVE-2010-5298","severity":"moderate","public_date":"2014-04-08T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1087195","bugzilla_description":"CVE-2010-5298 openssl: freelist misuse causing a possible use-after-free","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5298.json"},{"CVE":"CVE-2014-0160","severity":"important","public_date":"2014-04-07T00:00:00Z","advisories":["RHSA-2014:0377","RHSA-2014:0378","RHSA-2014:0376","RHSA-2014:0416","RHSA-2014:0396"],"bugzilla":"1084875","bugzilla_description":"CVE-2014-0160 openssl: information disclosure in handling of TLS heartbeat extension packets","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-119->CWE-201","affected_packages":["openssl-0:1.0.1e-16.el6_5.7","rhev-hypervisor6-0:6.5-20140118.1.3.2.el6_5","rhev-hypervisor6-0:6.5-20140407.0.el6ev","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0160.json"},{"CVE":"CVE-2014-2653","severity":"moderate","public_date":"2014-03-24T00:00:00Z","advisories":["RHSA-2015:0425","RHSA-2014:1552"],"bugzilla":"1081338","bugzilla_description":"CVE-2014-2653 openssh: failure to check DNS SSHFP records in certain scenarios","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-287","affected_packages":["openssh-0:5.3p1-104.el6","openssh-0:6.6.1p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2653.json"},{"CVE":"CVE-2014-1492","severity":"low","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:1246","RHSA-2014:1073","RHSA-2014:0917"],"bugzilla":"1079851","bugzilla_description":"CVE-2014-1492 nss: IDNA hostname matching code does not follow RFC 6125 recommendation (MFSA 2014-45)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-172->CWE-697->CWE-295","affected_packages":["nss-0:3.16.2-2.el7_0","nss-0:3.16.1-4.el6_5","nss-0:3.16.1-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1492.json"},{"CVE":"CVE-2014-2532","severity":"low","public_date":"2014-03-15T00:00:00Z","advisories":["RHSA-2014:1552"],"bugzilla":"1077843","bugzilla_description":"CVE-2014-2532 openssh: AcceptEnv environment restriction bypass flaw","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":"CWE-138","affected_packages":["openssh-0:5.3p1-104.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2532.json"},{"CVE":"CVE-2014-0076","severity":"moderate","public_date":"2014-02-14T00:00:00Z","advisories":[],"bugzilla":"1080276","bugzilla_description":"CVE-2014-0076 openssl: ECDSA nonces susceptible to Yarom/Benger flush+reload cache side-channel attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0076.json"},{"CVE":"CVE-2013-6401","severity":"moderate","public_date":"2014-02-12T00:00:00Z","advisories":[],"bugzilla":"1035538","bugzilla_description":"CVE-2013-6401 jansson: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6401.json"},{"CVE":"CVE-2014-1490","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:1246","RHSA-2014:0917"],"bugzilla":"1060953","bugzilla_description":"CVE-2014-1490 nss: TOCTOU, potential use-after-free in libssl's session ticket processing (MFSA 2014-12)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-367->CWE-416","affected_packages":["nss-0:3.16.1-4.el6_5","nss-0:3.16.1-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1490.json"},{"CVE":"CVE-2014-1491","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:1246","RHSA-2014:0979","RHSA-2014:0917"],"bugzilla":"1060955","bugzilla_description":"CVE-2014-1491 nss: Do not allow p-1 as a public DH value (MFSA 2014-12)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-358","affected_packages":["rhev-hypervisor6-0:6.5-20140725.0.el6ev","nss-0:3.16.1-4.el6_5","nss-0:3.16.1-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1491.json"},{"CVE":"CVE-2013-4353","severity":"moderate","public_date":"2014-01-06T00:00:00Z","advisories":["RHSA-2014:0015","RHSA-2014:0416","RHSA-2014:0041"],"bugzilla":"1049058","bugzilla_description":"CVE-2013-4353 openssl: client NULL dereference crash on malformed handshake packets","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.4","rhev-hypervisor6-0:6.5-20140112.0.el6ev","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4353.json"},{"CVE":"CVE-2013-1740","severity":"moderate","public_date":"2014-01-05T00:00:00Z","advisories":["RHSA-2014:1246","RHSA-2014:0917"],"bugzilla":"1053725","bugzilla_description":"CVE-2013-1740 nss: false start PR_Recv information disclosure security issue","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["nss-0:3.16.1-4.el6_5","nss-0:3.16.1-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1740.json"},{"CVE":"CVE-2013-6449","severity":"important","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0015","RHSA-2014:0041"],"bugzilla":"1045363","bugzilla_description":"CVE-2013-6449 openssl: crash when using TLS 1.2 caused by use of incorrect hash algorithm","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.4","rhev-hypervisor6-0:6.5-20140112.0.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6449.json"},{"CVE":"CVE-2013-6450","severity":"important","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0015"],"bugzilla":"1047840","bugzilla_description":"CVE-2013-6450 openssl: crash in DTLS renegotiation after packet loss","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6450.json"},{"CVE":"CVE-2013-4566","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2013:1779"],"bugzilla":"1016832","bugzilla_description":"CVE-2013-4566 mod_nss: incorrect handling of NSSVerifyClient in directory context","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["mod_nss-0:1.0.8-19.el6_5","mod_nss-0:1.0.8-8.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4566.json"},{"CVE":"CVE-2013-5606","severity":"moderate","public_date":"2013-11-19T00:00:00Z","advisories":["RHSA-2013:1791","RHSA-2013:1829","RHSA-2014:0041"],"bugzilla":"1031457","bugzilla_description":"CVE-2013-5606 nss: CERT_VerifyCert returns SECSuccess (saying certificate is good) even for bad certificates (MFSA 2013-103)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["nss-0:3.15.3-2.el6_5","nss-0:3.15.3-3.el5_10","rhev-hypervisor6-0:6.5-20140112.0.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5606.json"},{"CVE":"CVE-2013-1741","severity":"moderate","public_date":"2013-11-19T00:00:00Z","advisories":["RHSA-2013:1791","RHSA-2013:1829"],"bugzilla":"1031458","bugzilla_description":"CVE-2013-1741 nss: Integer truncation in certificate parsing (MFSA 2013-103)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["nss-0:3.15.3-2.el6_5","nss-0:3.15.3-3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1741.json"},{"CVE":"CVE-2013-5605","severity":"important","public_date":"2013-11-13T00:00:00Z","advisories":["RHSA-2013:1791","RHSA-2013:1829","RHSA-2013:1841","RHSA-2013:1840","RHSA-2014:0041"],"bugzilla":"1030807","bugzilla_description":"CVE-2013-5605 nss: Null_Cipher() does not respect maxOutputLen  (MFSA 2013-103)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["nss-0:3.14.3-5.el6_4","nss-0:3.15.3-2.el6_5","nss-0:3.15.3-3.el5_10","rhev-hypervisor6-0:6.5-20140112.0.el6ev","nss-0:3.12.8-8.el5_6","nss-0:3.14.3-8.el5_9","nss-0:3.13.1-9.el6_2","nss-0:3.13.6-3.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5605.json"},{"CVE":"CVE-2013-4548","severity":"moderate","public_date":"2013-11-07T00:00:00Z","advisories":[],"bugzilla":"1028418","bugzilla_description":"CVE-2013-4548 openssh: post-auth memory corruption when using AES-GCM cipher","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4548.json"},{"CVE":"CVE-2013-1739","severity":"moderate","public_date":"2013-10-17T00:00:00Z","advisories":["RHSA-2013:1791","RHSA-2013:1829"],"bugzilla":"1012740","bugzilla_description":"CVE-2013-1739 nss: Avoid uninitialized data read in the event of a decryption failure","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["nss-0:3.15.3-2.el6_5","nss-0:3.15.3-3.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1739.json"},{"CVE":"CVE-2007-6755","severity":"moderate","public_date":"2013-10-11T00:00:00Z","advisories":[],"bugzilla":"1046045","bugzilla_description":"CVE-2007-6755 Dual_EC_DRBG: weak pseudo random number generator","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6755.json"},{"CVE":"CVE-2013-4314","severity":"moderate","public_date":"2013-09-04T00:00:00Z","advisories":[],"bugzilla":"1005325","bugzilla_description":"CVE-2013-4314 pyOpenSSL: hostname check bypassing vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4314.json"},{"CVE":"CVE-2013-0791","severity":"low","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:1181","RHSA-2013:1135","RHSA-2013:1144"],"bugzilla":"946947","bugzilla_description":"CVE-2013-0791 Mozilla: Out-of-bounds array read in CERT_DecodeCertPackage (MFSA 2013-40)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130815.0.el6_4","nss-0:3.14.3-4.el6_4","nss-0:3.14.3-6.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0791.json"},{"CVE":"CVE-2013-2566","severity":"moderate","public_date":"2013-03-15T00:00:00Z","advisories":[],"bugzilla":"921947","bugzilla_description":"CVE-2013-2566 SSL/TLS: Attack against RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2566.json"},{"CVE":"CVE-2012-5536","severity":"moderate","public_date":"2013-02-21T00:00:00Z","advisories":["RHSA-2013:0519"],"bugzilla":"834618","bugzilla_description":"CVE-2012-5536 pam_ssh_agent_auth: symbol crash leading to glibc error() called incorrectly","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["openssh-0:5.3p1-84.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5536.json"},{"CVE":"CVE-2013-0288","severity":"important","public_date":"2013-02-18T00:00:00Z","advisories":["RHSA-2013:0590"],"bugzilla":"909119","bugzilla_description":"CVE-2013-0288 nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["nss-pam-ldapd-0:0.7.5-18.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0288.json"},{"CVE":"CVE-2010-5107","severity":"low","public_date":"2013-02-06T00:00:00Z","advisories":["RHSA-2013:1591","RHSA-2013:1527"],"bugzilla":"908707","bugzilla_description":"CVE-2010-5107 openssh: Prevent connection slot exhaustion attacks","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["openssh-0:5.3p1-94.el6","rhev-hypervisor6-0:6.5-20131115.0.3.2.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5107.json"},{"CVE":"CVE-2012-2686","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":[],"bugzilla":"908029","bugzilla_description":"CVE-2012-2686 openssl: DoS due to improper handling of CBC ciphersuites in TLS 1.1/1.2 on AES-NI supporting platforms","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2686.json"},{"CVE":"CVE-2013-0166","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":["RHSA-2013:0636","RHSA-2013:0833","RHSA-2013:0587","RHSA-2013:0782","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"908052","bugzilla_description":"CVE-2013-0166 openssl: DoS due to improper handling of OCSP response verification","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0166.json"},{"CVE":"CVE-2013-0169","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0636","RHSA-2013:0823","RHSA-2013:0833","RHSA-2013:0855","RHSA-2013:0822","RHSA-2013:0587","RHSA-2013:0532","RHSA-2013:1456","RHSA-2014:0416","RHSA-2013:0782","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"907589","bugzilla_description":"CVE-2013-0169 SSL/TLS: CBC padding timing attack (lucky-13)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3","spice-client-msi-0:3.3-12","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el5_9","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0169.json"},{"CVE":"CVE-2013-1620","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:1181","RHSA-2013:1135","RHSA-2013:1144"],"bugzilla":"908234","bugzilla_description":"CVE-2013-1620 nss: TLS CBC padding timing attack","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130815.0.el6_4","nss-0:3.14.3-4.el6_4","nss-0:3.14.3-6.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1620.json"},{"CVE":"CVE-2014-1692","severity":"critical","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"1059052","bugzilla_description":"CVE-2014-1692 openssh: uninitialized variable use in J-PAKE implementation","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1692.json"},{"CVE":"CVE-2013-0743","severity":"important","public_date":"2013-01-03T00:00:00Z","advisories":["RHSA-2013:0213"],"bugzilla":"890605","bugzilla_description":"nss: Dis-trust TURKTRUST mis-issued *.google.com certificate","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["nss-0:3.13.6-2.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0743.json"},{"CVE":"CVE-2012-4929","severity":"moderate","public_date":"2012-09-13T00:00:00Z","advisories":["RHSA-2013:0636","RHSA-2013:0587","RHSA-2014:0416"],"bugzilla":"857051","bugzilla_description":"CVE-2012-4929 SSL/TLS CRIME attack against HTTPS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4929.json"},{"CVE":"CVE-2012-0441","severity":"moderate","public_date":"2012-06-05T00:00:00Z","advisories":["RHSA-2012:1091","RHSA-2012:1090"],"bugzilla":"827833","bugzilla_description":"CVE-2012-0441 nss: NSS parsing errors with zero length items","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["nss-0:3.13.5-1.el6_3","nss-0:3.13.5-4.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0441.json"},{"CVE":"CVE-2012-2333","severity":"moderate","public_date":"2012-05-10T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:1307","RHSA-2012:0699"],"bugzilla":"820686","bugzilla_description":"CVE-2012-2333 openssl: record length handling integer underflow","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["openssl-0:1.0.0-20.el6_2.5","openssl-0:0.9.8e-22.el5_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2333.json"},{"CVE":"CVE-2012-2131","severity":"important","public_date":"2012-04-23T00:00:00Z","advisories":[],"bugzilla":"815661","bugzilla_description":"CVE-2012-2131 openssl: incomplete fix of CVE-2012-2110 for 0.9.x","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2131.json"},{"CVE":"CVE-2012-2110","severity":"important","public_date":"2012-04-19T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:1307","RHSA-2012:0518","RHSA-2012:0522"],"bugzilla":"814185","bugzilla_description":"CVE-2012-2110 openssl: asn1_d2i_read_bio integer errors leading to buffer overflow","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["openssl-0:0.9.8e-12.el5_6.9","openssl-0:1.0.0-20.el6_2.4","openssl-0:0.9.8e-22.el5_8.3","openssl098e-0:0.9.8e-17.el6_2.2","openssl-0:1.0.0-10.el6_1.6","openssl097a-0:0.9.7a-11.el5_8.2","openssl-0:1.0.0-4.el6_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2110.json"},{"CVE":"CVE-2012-1165","severity":"moderate","public_date":"2012-03-12T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:0426","RHSA-2012:1308","RHSA-2012:1307"],"bugzilla":"802489","bugzilla_description":"CVE-2012-1165 openssl: mime_param_cmp NULL dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-22.el5_8.1","openssl-0:1.0.0-20.el6_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1165.json"},{"CVE":"CVE-2012-0884","severity":"low","public_date":"2012-03-12T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:0426","RHSA-2012:1308","RHSA-2012:1307"],"bugzilla":"802725","bugzilla_description":"CVE-2012-0884 openssl: CMS and PKCS#7 Bleichenbacher attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:0.9.8e-22.el5_8.1","openssl-0:1.0.0-20.el6_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0884.json"},{"CVE":"CVE-2012-0814","severity":"low","public_date":"2012-01-26T00:00:00Z","advisories":[],"bugzilla":"785292","bugzilla_description":"CVE-2012-0814 openssh: forced command option information disclosure","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0814.json"},{"CVE":"CVE-2011-4108","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0059"],"bugzilla":"771770","bugzilla_description":"CVE-2011-4108 openssl: DTLS plaintext recovery attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.0-20.el6_2.1","openssl-0:0.9.8e-20.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4108.json"},{"CVE":"CVE-2011-4109","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0168"],"bugzilla":"771771","bugzilla_description":"CVE-2011-4109 openssl: double-free in policy checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-20.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4109.json"},{"CVE":"CVE-2011-4576","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0109","RHSA-2012:0086","RHSA-2012:0168","RHSA-2012:0059"],"bugzilla":"771775","bugzilla_description":"CVE-2011-4576 openssl: uninitialized SSL 3.0 padding","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:0.9.7a-43.18.el4","openssl-0:1.0.0-20.el6_2.1","openssl-0:0.9.8e-20.el5_7.1","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4576.json"},{"CVE":"CVE-2011-4577","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:0109","RHSA-2012:0059"],"bugzilla":"771778","bugzilla_description":"CVE-2011-4577 openssl: malformed RFC 3779 data can cause assertion failures","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.0-20.el6_2.1","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4577.json"},{"CVE":"CVE-2011-4619","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0109","RHSA-2012:0086","RHSA-2012:0168","RHSA-2012:0059"],"bugzilla":"771780","bugzilla_description":"CVE-2011-4619 openssl: SGC restart DoS attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.7a-43.18.el4","openssl-0:1.0.0-20.el6_2.1","openssl-0:0.9.8e-20.el5_7.1","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4619.json"},{"CVE":"CVE-2012-0027","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":[],"bugzilla":"771782","bugzilla_description":"CVE-2012-0027 openssl: invalid GOST parameters DoS attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0027.json"},{"CVE":"CVE-2011-4354","severity":"moderate","public_date":"2011-11-24T00:00:00Z","advisories":[],"bugzilla":"757909","bugzilla_description":"CVE-2011-4354 openssl: ECC private leak (disclosure of TLS server's private key)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4354.json"},{"CVE":"CVE-2011-3640","severity":null,"public_date":"2011-09-23T00:00:00Z","advisories":[],"bugzilla":"748379","bugzilla_description":"CVE-2011-3640 nss: /pkcs11.txt and /secmod.db files read on initialization","cvss_score":null,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3640.json"},{"CVE":"CVE-2011-3389","severity":"moderate","public_date":"2011-09-10T00:00:00Z","advisories":["RHSA-2011:1384","RHSA-2012:0508","RHSA-2011:1380","RHSA-2012:0034","RHSA-2012:0343","RHSA-2013:1455","RHSA-2012:0006"],"bugzilla":"737506","bugzilla_description":"CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2","java-1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3389.json"},{"CVE":"CVE-2011-3210","severity":"moderate","public_date":"2011-09-06T00:00:00Z","advisories":[],"bugzilla":"736079","bugzilla_description":"CVE-2011-3210 openssl: TLS ephemeral ECDH crashes in OpenSSL","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3210.json"},{"CVE":"CVE-2011-3207","severity":"moderate","public_date":"2011-09-06T00:00:00Z","advisories":["RHSA-2011:1409"],"bugzilla":"736087","bugzilla_description":"CVE-2011-3207 openssl: CRL verification vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.0-10.el6_1.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3207.json"},{"CVE":"CVE-2011-5000","severity":"low","public_date":"2011-08-01T00:00:00Z","advisories":["RHSA-2012:0884"],"bugzilla":"809938","bugzilla_description":"CVE-2011-5000 openssh: post-authentication resource exhaustion bug via GSSAPI","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["openssh-0:5.3p1-81.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5000.json"},{"CVE":"CVE-2011-1945","severity":"important","public_date":"2011-05-17T00:00:00Z","advisories":[],"bugzilla":"709021","bugzilla_description":"CVE-2011-1945 openssl: ECDSA private key leak through a remote timing attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1945.json"},{"CVE":"CVE-2011-4327","severity":"moderate","public_date":"2011-05-05T00:00:00Z","advisories":[],"bugzilla":"755640","bugzilla_description":"CVE-2011-4327 openssh: Unauthorized local access to host keys on platforms where ssh-rand-helper used","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4327.json"},{"CVE":"CVE-2011-4973","severity":"moderate","public_date":"2011-05-04T00:00:00Z","advisories":["RHBA-2011:1656","RHBA-2013:0009"],"bugzilla":"1017197","bugzilla_description":"CVE-2011-4973 mod_nss: FakeBasicAuth authentication bypass","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["mod_nss-0:1.0.8-7.el5","mod_nss-0:1.0.8-13.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4973.json"},{"CVE":"CVE-2011-5095","severity":"moderate","public_date":"2011-04-13T00:00:00Z","advisories":[],"bugzilla":"834062","bugzilla_description":"CVE-2011-5095 openssl: weak public value accepted during Diffie Hellman key exchange","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5095.json"},{"CVE":"CVE-2011-1473","severity":"low","public_date":"2011-03-13T00:00:00Z","advisories":[],"bugzilla":"707065","bugzilla_description":"CVE-2011-1473 openssl: DoS via repeated SSL session renegotiations","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1473.json"},{"CVE":"CVE-2011-5094","severity":"low","public_date":"2011-03-13T00:00:00Z","advisories":[],"bugzilla":"833118","bugzilla_description":"CVE-2011-5094 nss: DoS via repeated SSL session renegotiations","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5094.json"},{"CVE":"CVE-2011-0014","severity":"moderate","public_date":"2011-02-08T00:00:00Z","advisories":["RHSA-2011:0677"],"bugzilla":"676063","bugzilla_description":"CVE-2011-0014 openssl: OCSP stapling vulnerability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.0-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0014.json"},{"CVE":"CVE-2011-0539","severity":"low","public_date":"2011-02-04T00:00:00Z","advisories":[],"bugzilla":"675254","bugzilla_description":"CVE-2011-0539 OpenSSH: legacy certificate generation information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0539.json"},{"CVE":"CVE-2012-0050","severity":"important","public_date":"2011-01-18T00:00:00Z","advisories":[],"bugzilla":"782795","bugzilla_description":"CVE-2012-0050 openssl: remote DTLS server DoS introduced in the CVE-2011-4108 fix","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0050.json"},{"CVE":"CVE-2010-4755","severity":null,"public_date":"2011-01-03T00:00:00Z","advisories":[],"bugzilla":"681698","bugzilla_description":"CVE-2010-4755 openssh: remote DoS in sftp via crafted glob expressions","cvss_score":null,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4755.json"},{"CVE":"CVE-2010-4180","severity":"moderate","public_date":"2010-12-02T00:00:00Z","advisories":["RHSA-2010:0979","RHSA-2010:0978","RHSA-2010:0977","RHSA-2011:0896"],"bugzilla":"659462","bugzilla_description":"CVE-2010-4180 openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG ciphersuite downgrade attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.0-4.el6_0.2","openssl-0:0.9.8e-12.el5_5.7","openssl-0:0.9.7a-43.17.el4_8.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4180.json"},{"CVE":"CVE-2008-7270","severity":"moderate","public_date":"2010-12-02T00:00:00Z","advisories":["RHSA-2010:0978","RHSA-2010:0977","RHSA-2011:0896"],"bugzilla":"660650","bugzilla_description":"CVE-2008-7270 openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG downgrade-to-disabled ciphersuite attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5_5.7","openssl-0:0.9.7a-43.17.el4_8.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-7270.json"},{"CVE":"CVE-2010-3864","severity":"important","public_date":"2010-11-16T00:00:00Z","advisories":["RHSA-2010:0888"],"bugzilla":"649304","bugzilla_description":"CVE-2010-3864 OpenSSL TLS extension parsing race condition","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-662->CWE-362->CWE-119","affected_packages":["openssl-0:1.0.0-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3864.json"},{"CVE":"CVE-2010-3170","severity":"low","public_date":"2010-07-14T00:00:00Z","advisories":["RHSA-2010:0862","RHSA-2010:0782","RHSA-2010:0781"],"bugzilla":"630047","bugzilla_description":"CVE-2010-3170 firefox/nss: doesn't handle IP-based wildcards in X509 certificates safely","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["nss-0:3.12.8-1.el4","seamonkey-0:1.0.9-0.61.el3","nss-0:3.12.8-1.el5","nss-0:3.12.8-1.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3170.json"},{"CVE":"CVE-2010-1633","severity":null,"public_date":"2010-06-01T00:00:00Z","advisories":[],"bugzilla":"598732","bugzilla_description":"CVE-2010-1633 openssl: information leak due to invalid Return value check","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1633.json"},{"CVE":"CVE-2010-0742","severity":null,"public_date":"2010-06-01T00:00:00Z","advisories":[],"bugzilla":"598738","bugzilla_description":"CVE-2010-0742 openssl: invalid ASN1 module definition for CMS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0742.json"},{"CVE":"CVE-2010-0826","severity":"moderate","public_date":"2010-04-01T00:00:00Z","advisories":["RHSA-2010:0347"],"bugzilla":"580187","bugzilla_description":"CVE-2010-0826 nss_db: Information leak due the DB_CONFIG file read from current working directory","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["nss_db-0:2.2-35.4.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0826.json"},{"CVE":"CVE-2009-3245","severity":"important","public_date":"2010-02-23T00:00:00Z","advisories":["RHSA-2010:0977","RHSA-2011:0896","RHSA-2010:0440","RHSA-2010:0173","RHSA-2010:0162"],"bugzilla":"570924","bugzilla_description":"CVE-2009-3245 openssl: missing bn_wexpand return value checks","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-252->CWE-476","affected_packages":["rhev-hypervisor-0:5.4-2.1.12.1.el5_4rhev2_1","openssl096b-0:0.9.6b-16.50","openssl096b-0:0.9.6b-22.46.el4_8.1","openssl-0:0.9.7a-43.17.el4_8.6","openssl-0:0.9.8e-12.el5_4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3245.json"},{"CVE":"CVE-2010-0433","severity":"moderate","public_date":"2010-01-19T00:00:00Z","advisories":["RHSA-2010:0162"],"bugzilla":"569774","bugzilla_description":"CVE-2010-0433 openssl: crash caused by a missing krb5_sname_to_principal() return value check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5_4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0433.json"},{"CVE":"CVE-2009-4355","severity":"moderate","public_date":"2010-01-13T00:00:00Z","advisories":["RHSA-2010:0054"],"bugzilla":"546707","bugzilla_description":"CVE-2009-4355 openssl significant memory leak in certain SSLv3 requests (DoS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:0.9.8e-12.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4355.json"},{"CVE":"CVE-2009-3555","severity":"moderate","public_date":"2009-11-05T00:00:00Z","advisories":["RHSA-2009:1580","RHSA-2010:0408","RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2010:0786","RHSA-2010:0167","RHSA-2010:0166","RHSA-2010:0165","RHSA-2010:0440","RHSA-2010:0164","RHSA-2010:0163","RHSA-2010:0162","RHSA-2009:1579","RHSA-2009:1694","RHSA-2010:0807","RHSA-2010:0119","RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2011:0880","RHSA-2010:0155","RHSA-2010:0770","RHSA-2010:0011","RHSA-2015:1591","RHSA-2010:0130"],"bugzilla":"533125","bugzilla_description":"CVE-2009-3555 TLS: MITM attacks via session renegotiation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-300","affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","httpd-0:2.2.3-31.el5_4.2","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el5","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","openssl-0:0.9.8e-12.el5_4.6","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el4_8","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","rhev-hypervisor-0:5.4-2.1.12.1.el5_4rhev2_1","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5","openssl097a-0:0.9.7a-9.el5_4.2","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","httpd22-0:2.2.10-25.1.ep5.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","httpd-0:2.0.52-41.ent.6","gnutls-0:1.0.20-4.el4_8.7","httpd-0:2.2.10-11.ep5.el5","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","httpd-0:2.0.46-77.ent","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4","pulp-0:2.6.0.15-1.el7sat","openssl-0:0.9.7a-33.26"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3555.json"},{"CVE":"CVE-2009-2904","severity":"moderate","public_date":"2009-09-30T00:00:00Z","advisories":["RHSA-2009:1470"],"bugzilla":"522141","bugzilla_description":"CVE-2009-2904 openssh: possible privilege escalation when using ChrootDirectory setting","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["openssh-0:4.3p2-36.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2904.json"},{"CVE":"CVE-2009-2409","severity":"moderate","public_date":"2009-07-29T00:00:00Z","advisories":["RHSA-2009:1184","RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1186","RHSA-2009:1207","RHSA-2009:1190","RHSA-2010:0166","RHSA-2009:1584","RHSA-2010:0054","RHSA-2009:1432","RHSA-2010:0163","RHSA-2009:1662"],"bugzilla":"510197","bugzilla_description":"CVE-2009-2409 deprecate MD2 in SSL cert validation (Kaminsky)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","seamonkey-0:1.0.9-0.45.el3","java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","nss-0:3.12.3.99.3-1.el4_8.2","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","openssl-0:0.9.8e-12.el5_4.1","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","openssl-0:0.9.7a-33.26","nss-0:3.12.3.99.3-1.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2409.json"},{"CVE":"CVE-2009-1386","severity":"moderate","public_date":"2009-06-02T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"503685","bugzilla_description":"CVE-2009-1386 openssl: DTLS NULL deref crash on early ChangeCipherSpec request","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1386.json"},{"CVE":"CVE-2009-1387","severity":"moderate","public_date":"2009-06-02T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"503688","bugzilla_description":"CVE-2009-1387 openssl: DTLS out-of-sequence message handling NULL deref DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1387.json"},{"CVE":"CVE-2009-1377","severity":"moderate","public_date":"2009-05-12T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"501253","bugzilla_description":"CVE-2009-1377 OpenSSL: DTLS epoch record buffer memory DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1377.json"},{"CVE":"CVE-2009-1378","severity":"moderate","public_date":"2009-05-12T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"501254","bugzilla_description":"CVE-2009-1378 OpenSSL: DTLS fragment handling memory DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1378.json"},{"CVE":"CVE-2009-1379","severity":"moderate","public_date":"2009-05-11T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"501572","bugzilla_description":"CVE-2009-1379 OpenSSL: DTLS pointer use-after-free flaw (DoS)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1379.json"},{"CVE":"CVE-2009-0590","severity":"low","public_date":"2009-03-25T00:00:00Z","advisories":["RHSA-2009:1335","RHSA-2010:0163"],"bugzilla":"492304","bugzilla_description":"CVE-2009-0590 openssl: ASN1 printing crash","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5","openssl-0:0.9.7a-43.17.el4_8.5","openssl-0:0.9.7a-33.26"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0590.json"},{"CVE":"CVE-2008-5161","severity":"low","public_date":"2008-11-19T00:00:00Z","advisories":["RHSA-2009:1287"],"bugzilla":"472068","bugzilla_description":"CVE-2008-5161 OpenSSH: Plaintext Recovery Attack against CBC ciphers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssh-0:4.3p2-36.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5161.json"},{"CVE":"CVE-2008-3844","severity":"critical","public_date":"2008-08-22T00:00:00Z","advisories":["RHSA-2008:0855"],"bugzilla":"1618333","bugzilla_description":"CVE-2008-3844 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:4.3p2-26.el5_2.1","openssh-0:3.9p1-11.el4_7","openssh-0:3.9p1-10.RHEL4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3844.json"},{"CVE":"CVE-2008-1483","severity":"low","public_date":"2008-01-08T00:00:00Z","advisories":["RHSA-2005:527"],"bugzilla":"439079","bugzilla_description":"CVE-2008-1483 openssh may set DISPLAY even if it's unable to listen on respective port","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1483.json"},{"CVE":"CVE-2007-3102","severity":"moderate","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:0540","RHSA-2007:0555","RHSA-2007:0737","RHSA-2007:0703"],"bugzilla":"243204","bugzilla_description":"CVE-2007-3102 audit logging of failed logins","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.24","openssh-0:4.3p2-24.el5","pam-0:0.99.6.2-3.26.el5","pam-0:0.77-66.23"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3102.json"},{"CVE":"CVE-2007-4995","severity":"important","public_date":"2007-10-12T00:00:00Z","advisories":["RHSA-2007:0964"],"bugzilla":"321191","bugzilla_description":"CVE-2007-4995 openssl dtls out of order vulnerabilitiy","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssl-0:0.9.8b-8.3.el5_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4995.json"},{"CVE":"CVE-2007-5135","severity":"moderate","public_date":"2007-09-27T00:00:00Z","advisories":["RHSA-2007:1003","RHSA-2007:0964","RHSA-2007:0813"],"bugzilla":"309801","bugzilla_description":"CVE-2007-5135 openssl: SSL_get_shared_ciphers() off-by-one","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["openssl-0:0.9.7a-43.17.el4_6.1","openssl-0:0.9.6b-48","openssl-0:0.9.7a-33.24","openssl-0:0.9.8b-8.3.el5_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5135.json"},{"CVE":"CVE-2007-4752","severity":"low","public_date":"2007-09-04T00:00:00Z","advisories":["RHSA-2008:0855"],"bugzilla":"280361","bugzilla_description":"CVE-2007-4752 openssh falls back to the trusted x11 cookie if generation of an untrusted cookie fails","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:4.3p2-26.el5_2.1","openssh-0:3.9p1-11.el4_7","openssh-0:3.9p1-10.RHEL4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4752.json"},{"CVE":"CVE-2007-3108","severity":"moderate","public_date":"2007-08-01T00:00:00Z","advisories":["RHSA-2007:1003","RHSA-2007:0964","RHSA-2007:0813"],"bugzilla":"245732","bugzilla_description":"CVE-2007-3108 openssl: RSA side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssl-0:0.9.7a-43.17.el4_6.1","openssl-0:0.9.6b-48","openssl-0:0.9.7a-33.24","openssl-0:0.9.8b-8.3.el5_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3108.json"},{"CVE":"CVE-2006-5794","severity":"low","public_date":"2006-11-07T00:00:00Z","advisories":["RHSA-2006:0738"],"bugzilla":"214641","bugzilla_description":"CVE-2006-5794 OpenSSH privilege separation flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.13","openssh-0:3.9p1-8.RHEL4.17.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5794.json"},{"CVE":"CVE-2006-5051","severity":"important","public_date":"2006-09-28T00:00:00Z","advisories":["RHSA-2006:0697","RHSA-2006:0698"],"bugzilla":"208347","bugzilla_description":"CVE-2006-5051 unsafe GSSAPI signal handler","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.12","openssh-0:3.9p1-8.RHEL4.17","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5051.json"},{"CVE":"CVE-2006-5052","severity":"low","public_date":"2006-09-28T00:00:00Z","advisories":["RHSA-2007:0540","RHSA-2007:0703"],"bugzilla":"234643","bugzilla_description":"CVE-2006-5052 Kerberos information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.24","openssh-0:4.3p2-24.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5052.json"},{"CVE":"CVE-2006-5170","severity":"moderate","public_date":"2006-09-20T00:00:00Z","advisories":["RHSA-2006:0719"],"bugzilla":"1618208","bugzilla_description":"CVE-2006-5170 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nss_ldap-0:226-17"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5170.json"},{"CVE":"CVE-2006-4924","severity":"moderate","public_date":"2006-09-19T00:00:00Z","advisories":["RHSA-2006:0697","RHSA-2006:0698"],"bugzilla":"207957","bugzilla_description":"CVE-2006-4924 openssh DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.12","openssh-0:3.9p1-8.RHEL4.17","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4924.json"},{"CVE":"CVE-2006-7248","severity":"moderate","public_date":"2006-08-29T00:00:00Z","advisories":[],"bugzilla":"798100","bugzilla_description":"CVE-2006-7250 openssl: mime_hdr_cmp NULL dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7248.json"},{"CVE":"CVE-2006-7250","severity":"moderate","public_date":"2006-08-29T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"798100","bugzilla_description":"CVE-2006-7250 openssl: mime_hdr_cmp NULL dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7250.json"},{"CVE":"CVE-2006-0225","severity":"low","public_date":"2005-09-28T00:00:00Z","advisories":["RHSA-2006:0698","RHSA-2006:0044","RHSA-2006:0298"],"bugzilla":"168167","bugzilla_description":"CVE-2006-0225 local to local copy uses shell expansion twice","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.12","openssh-0:3.6.1p2-33.30.9","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0225.json"},{"CVE":"CVE-2005-2798","severity":"moderate","public_date":"2005-09-01T00:00:00Z","advisories":["RHSA-2005:527"],"bugzilla":"1617757","bugzilla_description":"CVE-2005-2798 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2798.json"},{"CVE":"CVE-2005-2666","severity":"low","public_date":"2005-07-07T00:00:00Z","advisories":["RHSA-2007:0257"],"bugzilla":"162681","bugzilla_description":"CVE-2005-2666 openssh vulnerable to known_hosts address harvesting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2666.json"},{"CVE":"CVE-2007-5794","severity":"low","public_date":"2005-04-09T00:00:00Z","advisories":["RHSA-2008:0389","RHSA-2008:0715"],"bugzilla":"367461","bugzilla_description":"CVE-2007-5794 nss_ldap randomly replying with wrong user's data","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["nss_ldap-0:253-12.el5","nss_ldap-0:253-5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5794.json"},{"CVE":"CVE-2004-0079","severity":"important","public_date":"2004-03-17T00:00:00Z","advisories":["RHSA-2005:830","RHSA-2005:829","RHSA-2004:120","RHSA-2004:121","RHSA-2004:139"],"bugzilla":"1617140","bugzilla_description":"CVE-2004-0079 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssl096b-0:0.9.6b-22.42","openssl096b-0:0.9.6b-16.42"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0079.json"},{"CVE":"CVE-2004-2069","severity":"low","public_date":"2004-01-27T00:00:00Z","advisories":["RHSA-2005:550"],"bugzilla":"1617421","bugzilla_description":"CVE-2004-2069 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-2069.json"},{"CVE":"CVE-2003-0386","severity":"low","public_date":"2003-06-05T00:00:00Z","advisories":["RHSA-2006:0698","RHSA-2006:0298"],"bugzilla":"1617024","bugzilla_description":"CVE-2003-0386 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.9","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0386.json"},{"CVE":"CVE-2004-0175","severity":"low","public_date":"2000-09-01T00:00:00Z","advisories":["RHSA-2005:567","RHSA-2005:562","RHSA-2005:495","RHSA-2005:165","RHSA-2005:481","RHSA-2005:074","RHSA-2005:106"],"bugzilla":"1617166","bugzilla_description":"CVE-2004-0175 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["krb5-0:1.2.7-47","krb5-0:1.3.4-17","openssh-0:3.6.1p2-33.30.4","rsh-0:0.17-25.3","rsh-0:0.17-17.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0175.json"},{"CVE":"CVE-2000-1254","severity":"moderate","public_date":"2000-06-01T00:00:00Z","advisories":[],"bugzilla":"1333287","bugzilla_description":"CVE-2000-1254 openssl: Mishandling C bitwise-shift operations making easier to bypass protection mechanisms","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2000-1254.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_wrapper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_wrapper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nss_wrapper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ntpstat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ntpstat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ntpstat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ntsysv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ntsysv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ntsysv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numactl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numactl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numactl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numactl-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numactl-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numactl-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numactl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numactl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numactl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numad_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numad_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numatop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numatop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/numatop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nvme-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nvme-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nvme-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nvmetcli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nvmetcli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/nvmetcli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objectweb-asm-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objectweb-asm-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objectweb-asm-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objectweb-asm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objectweb-asm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objectweb-asm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objectweb-pom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objectweb-pom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objectweb-pom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objenesis-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objenesis-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objenesis-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objenesis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objenesis_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/objenesis_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-camlp4-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-camlp4-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-camlp4-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-camlp4_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-camlp4_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-camlp4_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-compiler-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-compiler-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-compiler-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-cppo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-cppo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-cppo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-extlib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-extlib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-extlib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-extlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-extlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-extlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-findlib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-findlib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-findlib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-findlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-findlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-findlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-hivex-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-hivex-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-hivex-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-hivex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-hivex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-hivex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-labltk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-labltk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-labltk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-labltk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-labltk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-labltk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-libguestfs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-libguestfs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-libguestfs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-libguestfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-libguestfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-libguestfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-ocamlbuild-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-ocamlbuild-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-ocamlbuild-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-ocamlbuild_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-ocamlbuild_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-ocamlbuild_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-ocamldoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-ocamldoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-ocamldoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-runtime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-runtime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-runtime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-srpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-srpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml-srpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml_security_api_results.json
new file mode 100644
index 0000000..5579581
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocaml_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-9838","severity":"low","public_date":"2018-04-06T00:00:00Z","advisories":[],"bugzilla":"1565468","bugzilla_description":"CVE-2018-9838 ocaml: Integer overflow in byterun/bigarray.c:caml_ba_deserialize() allows remote attackers to cause a denial of service or other unspecified impact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-9772","severity":"moderate","public_date":"2017-06-23T00:00:00Z","advisories":[],"bugzilla":"1464920","bugzilla_description":"CVE-2017-9772 ocaml: Insufficient sanitisation allows privilege escalation for setuid binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9772.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-8869","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":["RHSA-2017:0565","RHSA-2016:2576","RHSA-2016:1296","RHSA-2017:0564"],"bugzilla":"1332090","bugzilla_description":"CVE-2015-8869 ocaml: sizes arguments are sign-extended from 32 to 64 bits","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-194","affected_packages":["libguestfs-1:1.32.7-3.el7","ocaml-0:3.11.2-5.el6","libguestfs-1:1.20.11-20.el6","ocaml-0:4.01.0-22.7.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8869.json"},{"CVE":"CVE-2012-3514","severity":"moderate","public_date":"2012-02-06T00:00:00Z","advisories":[],"bugzilla":"787890","bugzilla_description":"CVE-2012-3514 ocaml-xml-light: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3514.json"},{"CVE":"CVE-2012-0839","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":[],"bugzilla":"787888","bugzilla_description":"CVE-2012-0839 ocaml: hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0839.json"},{"CVE":"CVE-2011-2896","severity":"moderate","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181","RHSA-2011:1635","RHSA-2012:0302"],"bugzilla":"727800","bugzilla_description":"CVE-2011-2896 David Koblas' GIF decoder LZW decoder buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gimp-2:2.6.9-4.el6_3.3","cups-1:1.3.7-30.el5","gimp-2:2.2.13-2.0.7.el5_8.5","cups-1:1.4.2-44.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2896.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oci-systemd-hook_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oci-systemd-hook_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oci-systemd-hook_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oci-umount_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oci-umount_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oci-umount_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocl-icd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocl-icd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocl-icd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocl-icd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocl-icd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ocl-icd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oddjob-mkhomedir_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oddjob-mkhomedir_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oddjob-mkhomedir_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oddjob_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oddjob_security_api_results.json
new file mode 100644
index 0000000..d6be1c9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oddjob_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10737","severity":"moderate","public_date":"2020-05-07T00:00:00Z","advisories":[],"bugzilla":"1833042","bugzilla_description":"CVE-2020-10737 oddjob: race condition in oddjob_selinux_mkdir function in mkhomedir.c can lead to symlink attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10737.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/omping_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/omping_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/omping_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ongres-scram-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ongres-scram-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ongres-scram-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ongres-scram_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ongres-scram_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ongres-scram_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oniguruma-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oniguruma-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oniguruma-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oniguruma_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oniguruma_security_api_results.json
new file mode 100644
index 0000000..c346c3a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oniguruma_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-26159","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1884111","bugzilla_description":"CVE-2020-26159 oniguruma: Buffer overflow in concat_opt_exact_str could result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26159.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2019-19012","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":[],"bugzilla":"1802051","bugzilla_description":"CVE-2019-19012 oniguruma: integer overflow in search_in_range function in regexec.c leads to out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19012.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19203","severity":"moderate","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1802061","bugzilla_description":"CVE-2019-19203 oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19204","severity":"moderate","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1802068","bugzilla_description":"CVE-2019-19204 oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19204.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19246","severity":"low","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1777537","bugzilla_description":"CVE-2019-19246 oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2019-16162","severity":"moderate","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1781304","bugzilla_description":"CVE-2019-16162 onigmo: out-of-bounds read in next_state_val() in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16162.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16163","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1768997","bugzilla_description":"CVE-2019-16163 oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16163.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-16161","severity":"low","public_date":"2019-07-28T00:00:00Z","advisories":[],"bugzilla":"1769042","bugzilla_description":"CVE-2019-16161 onigmo: NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16161.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13225","severity":"moderate","public_date":"2019-06-27T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1728965","bugzilla_description":"CVE-2019-13225 oniguruma: NULL pointer dereference in match_at() in regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-13224","severity":"moderate","public_date":"2019-06-27T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1728970","bugzilla_description":"CVE-2019-13224 oniguruma: Use-after-free in onig_new_deluxe() in regext.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2017-9227","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466739","bugzilla_description":"CVE-2017-9227 oniguruma: Out-of-bounds stack read in mbc_enc_len() during regular expression searching","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9227.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9228","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466740","bugzilla_description":"CVE-2017-9228 oniguruma: Out-of-bounds heap write in bitset_set_range()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9228.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9229","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466746","bugzilla_description":"CVE-2017-9229 oniguruma: Invalid pointer dereference in left_adjust_char_head()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9229.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-9224","severity":"moderate","public_date":"2017-05-22T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466730","bugzilla_description":"CVE-2017-9224 oniguruma: Out-of-bounds stack read in match_at() during regular expression searching","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-9225","severity":"moderate","public_date":"2017-05-22T00:00:00Z","advisories":[],"bugzilla":"1466733","bugzilla_description":"CVE-2017-9225 oniguruma: Out-of-bounds stack write in onigenc_unicode_get_case_fold_codes_by_str() during regular expression compilation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9226","severity":"moderate","public_date":"2017-05-18T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466736","bugzilla_description":"CVE-2017-9226 oniguruma: Heap buffer overflow in next_state_val() during regular expression compilation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9226.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-address-resolution_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-address-resolution_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-address-resolution_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-basic-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-basic-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-basic-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-fastfabric_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-fastfabric_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-fastfabric_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-fm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-fm_security_api_results.json
new file mode 100644
index 0000000..acff3df
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-fm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5232","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1257098","bugzilla_description":"CVE-2015-5232 opa-fm, opa-ff: various /tmp races","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5232.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-libopamgt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-libopamgt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opa-libopamgt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opal-firmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opal-firmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opal-firmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opal-prd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opal-prd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opal-prd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opal-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opal-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opal-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/open-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/open-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/open-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/open-vm-tools-desktop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/open-vm-tools-desktop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/open-vm-tools-desktop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/open-vm-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/open-vm-tools_security_api_results.json
new file mode 100644
index 0000000..144d72d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/open-vm-tools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-6969","severity":"moderate","public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1603048","bugzilla_description":"CVE-2018-6969 open-vm-tools: Out-of-bounds read in HGFS allows for information disclosure or potential privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6969.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"6.6"},{"CVE":"CVE-2015-5191","severity":"low","public_date":"2017-07-24T00:00:00Z","advisories":[],"bugzilla":"1253689","bugzilla_description":"CVE-2015-5191 open-vm-tools: /tmp race conditions in the libDeployPkg component","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5191.json"},{"CVE":"CVE-2014-4199","severity":"low","public_date":"2014-08-26T00:00:00Z","advisories":[],"bugzilla":"1165899","bugzilla_description":"CVE-2014-4199 open-vm-tools: insecure temporary file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4199.json"},{"CVE":"CVE-2014-4200","severity":"low","public_date":"2014-08-26T00:00:00Z","advisories":[],"bugzilla":"1165900","bugzilla_description":"CVE-2014-4200 open-vm-tools: vm-support's diagnostics archive created with world-readable permissions","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"(CWE-377|CWE-732)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4200.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openal-soft-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openal-soft-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openal-soft-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openal-soft_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openal-soft_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openal-soft_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-Rblas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-Rblas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-Rblas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-openmp64__security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-openmp64__security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-openmp64__security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-openmp64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-openmp64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-openmp64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-openmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-openmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-openmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-serial64__security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-serial64__security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-serial64__security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-serial64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-serial64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-serial64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-srpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-srpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-srpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-threads64__security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-threads64__security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-threads64__security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-threads64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-threads64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-threads64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-threads_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-threads_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas-threads_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openblas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openchange_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openchange_security_api_results.json
new file mode 100644
index 0000000..6439c64
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openchange_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-1182","severity":"critical","public_date":"2012-04-10T00:00:00Z","advisories":["RHSA-2013:0515","RHSA-2013:0506","RHSA-2012:0465","RHSA-2012:0466","RHSA-2012:0478"],"bugzilla":"804093","bugzilla_description":"CVE-2012-1182 samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-122","affected_packages":["samba4-0:4.0.0-55.el6.rc4","samba-0:3.5.6-86.el6_1.5","openchange-0:1.0-4.el6","evolution-mapi-0:0.28.3-12.el6","samba-0:3.5.4-68.el6_0.3","samba-0:3.0.33-3.36.el4","samba-0:3.0.33-3.29.el5_6.5","samba3x-0:3.5.4-0.70.el5_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1182.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencl-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencl-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencl-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencl-headers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencl-headers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencl-headers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-ccatok_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-ccatok_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-ccatok_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-ep11tok_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-ep11tok_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-ep11tok_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-icatok_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-icatok_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-icatok_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-icsftok_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-icsftok_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-icsftok_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-swtok_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-swtok_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-swtok_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-tpmtok_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-tpmtok_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki-tpmtok_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki_security_api_results.json
new file mode 100644
index 0000000..d450653
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencryptoki_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-4454","severity":"moderate","public_date":"2012-09-07T00:00:00Z","advisories":[],"bugzilla":"730636","bugzilla_description":"CVE-2012-4454 CVE-2012-4455 opencryptoki: insecure handling of files in the /tmp directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4454.json"},{"CVE":"CVE-2012-4455","severity":"moderate","public_date":"2012-09-07T00:00:00Z","advisories":[],"bugzilla":"730636","bugzilla_description":"CVE-2012-4454 CVE-2012-4455 opencryptoki: insecure handling of files in the /tmp directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4455.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencv-contrib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencv-contrib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencv-contrib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencv-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencv-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencv-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencv-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencv-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opencv-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opendnssec_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opendnssec_security_api_results.json
new file mode 100644
index 0000000..e0fe38a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opendnssec_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-5582","severity":"low","public_date":"2019-11-25T00:00:00Z","advisories":[],"bugzilla":"1777925","bugzilla_description":"CVE-2012-5582 opendnssec: misuses libcurl API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5582.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openhpi-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openhpi-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openhpi-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openhpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openhpi_security_api_results.json
new file mode 100644
index 0000000..06b04d9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openhpi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-3248","severity":"low","public_date":"2014-02-10T00:00:00Z","advisories":["RHSA-2015:2369"],"bugzilla":"1233520","bugzilla_description":"CVE-2015-3248 openhpi: world writable /var/lib/openhpi directory","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-552","affected_packages":["openhpi-0:3.4.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3248.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjade_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjade_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjade_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2-devel-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2-devel-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2-devel-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2_security_api_results.json
new file mode 100644
index 0000000..a2fa456
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openjpeg2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15389","severity":"moderate","public_date":"2020-06-28T00:00:00Z","advisories":[],"bugzilla":"1852869","bugzilla_description":"CVE-2020-15389 openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15389.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-8112","severity":"important","public_date":"2020-02-07T11:35:00Z","advisories":["RHSA-2020:0550","RHSA-2020:0570","RHSA-2020:0569"],"bugzilla":"1800535","bugzilla_description":"CVE-2020-8112 openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["openjpeg2-0:2.3.0-10.el8_0","openjpeg2-0:2.3.1-3.el8_1","openjpeg2-0:2.3.1-3.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8112.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6851","severity":"important","public_date":"2020-01-13T00:00:00Z","advisories":["RHSA-2020:0274","RHSA-2020:0296","RHSA-2020:0262"],"bugzilla":"1790511","bugzilla_description":"CVE-2020-6851 openjpeg: Heap-based buffer overflow in opj_t1_clbl_decode_processor()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["openjpeg2-0:2.3.1-2.el7_7","openjpeg2-0:2.3.1-2.el8_1","openjpeg2-0:2.3.0-9.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6851.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-21010","severity":"moderate","public_date":"2019-09-05T00:00:00Z","advisories":[],"bugzilla":"1755769","bugzilla_description":"CVE-2018-21010 openjpeg: heap buffer overflow in color_apply_icc_profile in bin/common/color.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-21010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-20845","severity":"low","public_date":"2019-06-26T00:00:00Z","advisories":[],"bugzilla":"1728505","bugzilla_description":"CVE-2018-20845 openjpeg: division-by-zero in function pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20845.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20847","severity":"low","public_date":"2019-06-26T00:00:00Z","advisories":[],"bugzilla":"1728509","bugzilla_description":"CVE-2018-20847 openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20847.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-20846","severity":"moderate","public_date":"2019-06-26T00:00:00Z","advisories":[],"bugzilla":"1728513","bugzilla_description":"CVE-2018-20846 openjpeg: out-of-bounds read in functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-12973","severity":"low","public_date":"2019-06-26T00:00:00Z","advisories":[],"bugzilla":"1732270","bugzilla_description":"CVE-2019-12973 openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12973.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18088","severity":"low","public_date":"2018-10-09T00:00:00Z","advisories":[],"bugzilla":"1638558","bugzilla_description":"CVE-2018-18088 openjpeg2: NULL pointer dereference in the imagetopnm function of jp2/convert.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18088.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16375","severity":"moderate","public_date":"2018-09-03T00:00:00Z","advisories":[],"bugzilla":"1626088","bugzilla_description":"CVE-2018-16375 openjpeg: Heap-based buffer overflow in pnmtoimage function in bin/jpwl/convert.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16375.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16376","severity":"moderate","public_date":"2018-09-03T00:00:00Z","advisories":[],"bugzilla":"1626095","bugzilla_description":"CVE-2018-16376 openjpeg: Heap-based buffer overflow in function t2_encode_packet in src/lib/openmj2/t2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16376.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2018-14423","severity":"low","public_date":"2018-07-16T00:00:00Z","advisories":[],"bugzilla":"1609909","bugzilla_description":"CVE-2018-14423 openjpeg2: Division-by-zero vulnerabilities in lib/openjp3d/pi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14423.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6616","severity":"low","public_date":"2018-02-04T00:00:00Z","advisories":[],"bugzilla":"1542321","bugzilla_description":"CVE-2018-6616 openjpeg2: Excessive iteration in openjp2/t1.c:opj_t1_encode_cblks can allow for denial of service via crafted BMP file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5785","severity":"low","public_date":"2018-01-19T00:00:00Z","advisories":[],"bugzilla":"1537758","bugzilla_description":"CVE-2018-5785 openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5785.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5727","severity":"low","public_date":"2018-01-13T00:00:00Z","advisories":[],"bugzilla":"1536552","bugzilla_description":"CVE-2018-5727 openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5727.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openldap-clients_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openldap-clients_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openldap-clients_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openldap-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openldap-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openldap-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openldap_security_api_results.json
new file mode 100644
index 0000000..565f0bd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openldap_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12243","severity":"moderate","public_date":"2020-04-28T00:00:00Z","advisories":["RHSA-2020:4041"],"bugzilla":"1833535","bugzilla_description":"CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openldap-0:2.4.44-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12243.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15719","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":["RHBA-2019:3674","RHBA-2019:3303"],"bugzilla":"1853350","bugzilla_description":"CVE-2020-15719 openldap: Certificate validation incorrectly matches name against CN-ID","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":["openldap-0:2.4.46-10.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15719.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-13057","severity":"moderate","public_date":"2019-07-25T00:00:00Z","advisories":[],"bugzilla":"1730472","bugzilla_description":"CVE-2019-13057 openldap: Information disclosure issue in slapd component","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13057.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-13565","severity":"moderate","public_date":"2019-07-24T00:00:00Z","advisories":[],"bugzilla":"1730477","bugzilla_description":"CVE-2019-13565 openldap: ACL restrictions bypass due to sasl_ssf value being set permanently","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13565.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-17740","severity":"moderate","public_date":"2017-10-20T00:00:00Z","advisories":[],"bugzilla":"1527076","bugzilla_description":"CVE-2017-17740 openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-14159","severity":"low","public_date":"2017-07-28T00:00:00Z","advisories":[],"bugzilla":"1488751","bugzilla_description":"CVE-2017-14159 openldap: Privilege escalation via PID file manipulation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14159.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-9287","severity":"moderate","public_date":"2017-05-17T00:00:00Z","advisories":["RHSA-2017:1852"],"bugzilla":"1456712","bugzilla_description":"CVE-2017-9287 openldap: Double free vulnerability in servers/slapd/back-mdb/search.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["openldap-0:2.4.44-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9287.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-4984","severity":"low","public_date":"2016-06-13T00:00:00Z","advisories":[],"bugzilla":"1346120","bugzilla_description":"CVE-2016-4984 openldap-servers: /usr/libexec/openldap/generate-server-cert.sh create world readable password file","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4984.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"2.7"},{"CVE":"CVE-2015-5244","severity":"moderate","public_date":"2015-09-15T00:00:00Z","advisories":[],"bugzilla":"1259216","bugzilla_description":"CVE-2015-5244 mod_nss: incorrect ciphersuite parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5244.json"},{"CVE":"CVE-2015-6908","severity":"important","public_date":"2015-09-09T00:00:00Z","advisories":["RHSA-2015:1840"],"bugzilla":"1262393","bugzilla_description":"CVE-2015-6908 openldap: ber_get_next denial of service vulnerability","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["openldap-0:2.3.43-29.el5_11","openldap-0:2.4.39-7.el7_1","openldap-0:2.4.40-6.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6908.json"},{"CVE":"CVE-2015-3276","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":["RHSA-2015:2131"],"bugzilla":"1238322","bugzilla_description":"CVE-2015-3276 openldap: incorrect multi-keyword mode cipherstring parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-682","affected_packages":["openldap-0:2.4.40-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3276.json"},{"CVE":"CVE-2015-1545","severity":"moderate","public_date":"2015-02-03T00:00:00Z","advisories":[],"bugzilla":"1190643","bugzilla_description":"CVE-2015-1545 openldap: slapd crashes on search with deref control and empty attr list","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1545.json"},{"CVE":"CVE-2015-1546","severity":"moderate","public_date":"2015-02-03T00:00:00Z","advisories":[],"bugzilla":"1190644","bugzilla_description":"CVE-2015-1546 openldap: slapd crash in valueReturnFilter cleanup","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1546.json"},{"CVE":"CVE-2014-8182","severity":"low","public_date":"2014-07-21T00:00:00Z","advisories":["RHBA-2015:1292","RHSA-2015:2131"],"bugzilla":"1095976","bugzilla_description":"CVE-2014-8182 openldap: crash in ldap_domain2hostlist when processing SRV records","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openldap-0:2.4.40-8.el7","openldap-0:2.4.40-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2013-4449","severity":"moderate","public_date":"2013-10-11T00:00:00Z","advisories":["RHSA-2014:0206","RHSA-2014:0126"],"bugzilla":"1019490","bugzilla_description":"CVE-2013-4449 openldap: segfault on certain queries with rwm overlay","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openldap-0:2.4.23-34.el6_5.1","openldap-0:2.3.43-27.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4449.json"},{"CVE":"CVE-2012-2668","severity":"low","public_date":"2012-06-04T00:00:00Z","advisories":["RHSA-2012:1151"],"bugzilla":"825875","bugzilla_description":"CVE-2012-2668 openldap: does not honor TLSCipherSuite settings","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openldap-0:2.4.23-26.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2668.json"},{"CVE":"CVE-2012-1164","severity":"low","public_date":"2012-01-29T00:00:00Z","advisories":["RHSA-2012:0899"],"bugzilla":"802514","bugzilla_description":"CVE-2012-1164 openldap (slapd): Assertion failure by processing search queries requesting only attributes for particular entry","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openldap-0:2.4.23-26.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1164.json"},{"CVE":"CVE-2011-4079","severity":null,"public_date":"2011-10-06T00:00:00Z","advisories":[],"bugzilla":"749324","bugzilla_description":"CVE-2011-4079 openldap: one-byte buffer overflow in slapd","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4079.json"},{"CVE":"CVE-2011-1081","severity":"moderate","public_date":"2011-01-03T00:00:00Z","advisories":["RHSA-2011:0347"],"bugzilla":"680975","bugzilla_description":"CVE-2011-1081 openldap: DoS when submitting special MODRDN request","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openldap-0:2.4.19-15.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1081.json"},{"CVE":"CVE-2011-1025","severity":"moderate","public_date":"2010-09-29T00:00:00Z","advisories":["RHSA-2011:0347"],"bugzilla":"680472","bugzilla_description":"CVE-2011-1025 openldap: rootpw not verified via slapd.conf when using the NDB backend","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["openldap-0:2.4.19-15.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1025.json"},{"CVE":"CVE-2011-1024","severity":"moderate","public_date":"2010-07-28T00:00:00Z","advisories":["RHSA-2011:0346","RHSA-2011:0347"],"bugzilla":"680466","bugzilla_description":"CVE-2011-1024 openldap: forwarded bind failure messages cause success","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["openldap-0:2.4.19-15.el6_0.2","openldap-0:2.3.43-12.el5_6.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1024.json"},{"CVE":"CVE-2010-0211","severity":"important","public_date":"2010-07-19T00:00:00Z","advisories":["RHSA-2010:0543","RHSA-2010:0542"],"bugzilla":"605448","bugzilla_description":"CVE-2010-0211 openldap: modrdn processing uninitialized pointer free","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openldap-0:2.2.13-12.el4_8.3","openldap-0:2.3.43-12.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0211.json"},{"CVE":"CVE-2010-0212","severity":"important","public_date":"2010-07-19T00:00:00Z","advisories":["RHSA-2010:0542"],"bugzilla":"605452","bugzilla_description":"CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openldap-0:2.3.43-12.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0212.json"},{"CVE":"CVE-2009-3767","severity":"moderate","public_date":"2009-08-10T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2010:0543","RHSA-2010:0198"],"bugzilla":"530715","bugzilla_description":"CVE-2009-3767 OpenLDAP: Doesn't properly handle NULL character in subject Common Name","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openldap-0:2.2.13-12.el4_8.3","openldap-0:2.3.43-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3767.json"},{"CVE":"CVE-2008-2952","severity":"important","public_date":"2008-06-26T00:00:00Z","advisories":["RHSA-2008:0583"],"bugzilla":"453444","bugzilla_description":"CVE-2008-2952 OpenLDAP denial-of-service flaw in ASN.1 decoder","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openldap-0:2.2.13-8.el4_6.5","openldap-0:2.3.27-8.el5_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2952.json"},{"CVE":"CVE-2008-0658","severity":"moderate","public_date":"2008-02-07T00:00:00Z","advisories":["RHSA-2008:0110"],"bugzilla":"432008","bugzilla_description":"CVE-2008-0658 openldap: slapd crash on modrdn operation with NOOP control on entry in bdb storage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openldap-0:2.3.27-8.el5_1.3","openldap-0:2.2.13-8.el4_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0658.json"},{"CVE":"CVE-2007-5707","severity":"important","public_date":"2007-10-29T00:00:00Z","advisories":["RHSA-2007:1038","RHSA-2007:1037"],"bugzilla":"359851","bugzilla_description":"CVE-2007-5707 openldap slapd DoS via objectClasses attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openldap-0:2.2.13-8.el4_6.1","openldap-0:2.3.27-8.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5707.json"},{"CVE":"CVE-2007-6698","severity":"moderate","public_date":"2007-04-11T00:00:00Z","advisories":["RHSA-2008:0110"],"bugzilla":"431203","bugzilla_description":"CVE-2007-6698 openldap: slapd crash on NOOP control operation on entry in bdb storage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openldap-0:2.3.27-8.el5_1.3","openldap-0:2.2.13-8.el4_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6698.json"},{"CVE":"CVE-2006-4600","severity":"low","public_date":"2006-09-04T00:00:00Z","advisories":["RHSA-2007:0430","RHSA-2007:0310"],"bugzilla":"1618198","bugzilla_description":"CVE-2006-4600 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openldap-0:2.0.27-23","openldap-0:2.2.13-7.4E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4600.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openmpi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openmpi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openmpi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openmpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openmpi_security_api_results.json
new file mode 100644
index 0000000..ae0f51c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openmpi_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10197","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418612","bugzilla_description":"CVE-2016-10197 libevent: Out-of-bounds read in search_make_new()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10195","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418608","bugzilla_description":"CVE-2016-10195 libevent: Stack-buffer overflow in the name_parse() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10196","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418611","bugzilla_description":"CVE-2016-10196 libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-6525","severity":"moderate","public_date":"2015-08-24T00:00:00Z","advisories":[],"bugzilla":"1256797","bugzilla_description":"CVE-2015-6525 libevent: multiple integer overflows in the evbuffer APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6525.json"},{"CVE":"CVE-2014-6272","severity":"moderate","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1144646","bugzilla_description":"CVE-2014-6272 libevent: potential heap overflow in buffer/bufferevent APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6272.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensc_security_api_results.json
new file mode 100644
index 0000000..45cd157
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-26570","severity":"moderate","public_date":"2020-10-06T00:00:00Z","advisories":[],"bugzilla":"1885947","bugzilla_description":"CVE-2020-26570 opensc: heap-based buffer overflow in sc_oberthur_read_file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26570.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-26571","severity":"moderate","public_date":"2020-10-06T00:00:00Z","advisories":[],"bugzilla":"1885950","bugzilla_description":"CVE-2020-26571 opensc: stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26571.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-26572","severity":"moderate","public_date":"2020-10-06T00:00:00Z","advisories":[],"bugzilla":"1885954","bugzilla_description":"CVE-2020-26572 opensc: stack-based buffer overflow in tcos_decipher","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26572.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-20792","severity":"moderate","public_date":"2020-01-04T00:00:00Z","advisories":[],"bugzilla":"1837946","bugzilla_description":"CVE-2019-20792 opensc: Double free in coolkey_free_private_data in libopensc/card-coolkey.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20792.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-19479","severity":"low","public_date":"2019-11-03T00:00:00Z","advisories":[],"bugzilla":"1782519","bugzilla_description":"CVE-2019-19479 opensc: Incorrect read operation during parsing of a SETCOS file attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19479.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-19481","severity":"moderate","public_date":"2019-10-30T00:00:00Z","advisories":[],"bugzilla":"1782955","bugzilla_description":"CVE-2019-19481 opensc: Improper handling of buffer limits for CAC certificates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19481.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-19480","severity":"moderate","public_date":"2019-10-23T00:00:00Z","advisories":[],"bugzilla":"1782950","bugzilla_description":"CVE-2019-19480 opensc: incorrect free operation in sc_pkcs15_decode_prkdf_entry in libopensc/pkcs15-prkey.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19480.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2019-15945","severity":"moderate","public_date":"2019-09-06T00:00:00Z","advisories":[],"bugzilla":"1765222","bugzilla_description":"CVE-2019-15945 opensc: Out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15945.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-15946","severity":"moderate","public_date":"2019-09-06T00:00:00Z","advisories":[],"bugzilla":"1765229","bugzilla_description":"CVE-2019-15946 opensc: Out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15946.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-6502","severity":"low","public_date":"2019-01-20T00:00:00Z","advisories":[],"bugzilla":"1668933","bugzilla_description":"CVE-2019-6502 opensc: memory leak in sc_context_create in ctx.c in libopensc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6502.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-16391","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1627998","bugzilla_description":"CVE-2018-16391 opensc: Buffer overflows handling responses from Muscle Cards in card-muscle.c:muscle_list_files()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16391.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16392","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628002","bugzilla_description":"CVE-2018-16392 opensc: Buffer overflows handling responses from TCOS Cards in card-tcos.c:tcos_select_file()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16392.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16393","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628006","bugzilla_description":"CVE-2018-16393 opensc: Buffer overflows handling responses from Gemsafe V1 Smartcards in pkcs15-gemsafeV1.c:gemsafe_get_cert_len()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16393.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16418","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628010","bugzilla_description":"CVE-2018-16418 opensc: Buffer overflow handling string concatention in tools/util.c:util_acl_to_str()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16418.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16419","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628013","bugzilla_description":"CVE-2018-16419 opensc: Buffer overflow handling responses from Cryptoflex cards in cryptoflex-tool.c:read_public_key()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16419.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16422","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628016","bugzilla_description":"CVE-2018-16422 opensc: Buffer overflow handling responses from esteid cards in pkcs15-esteid.c:sc_pkcs15emu_esteid_init()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16422.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16423","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628020","bugzilla_description":"CVE-2018-16423 opensc: Double free handling responses from smartcards in libopensc/sc.c:sc_file_set_sec_attr()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16423.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16425","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":[],"bugzilla":"1628023","bugzilla_description":"CVE-2018-16425 opensc: Double free handling responses from HSM Cards in pkcs15-sc-hsm.c:sc_pkcs15emu_sc_hsm_init()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16425.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16420","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628026","bugzilla_description":"CVE-2018-16420 opensc: Buffer overflows handling responses from ePass 2003 Cards in card-epass2003.c:decrypt_response()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16420.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16421","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628034","bugzilla_description":"CVE-2018-16421 opensc: Buffer overflows handling responses from CAC Cards in card-cac.c:cac_get_serial_nr_from_CUID()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16421.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16424","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":[],"bugzilla":"1628040","bugzilla_description":"CVE-2018-16424 opensc: Double free handling responses from smartcards in tools/egk-tool.c:read_file()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16424.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16426","severity":"low","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628044","bugzilla_description":"CVE-2018-16426 opensc: Infinite recusrion handling responses from IAS-ECC cards in card-iasecc.c:iasecc_select_file()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16426.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.4"},{"CVE":"CVE-2018-16427","severity":"moderate","public_date":"2018-09-12T00:00:00Z","advisories":["RHSA-2019:2154"],"bugzilla":"1628052","bugzilla_description":"CVE-2018-16427 opensc: Out of bounds reads handling responses from smartcards","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["opensc-0:0.19.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16427.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-engine-sce-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-engine-sce-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-engine-sce-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-engine-sce_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-engine-sce_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-engine-sce_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-python3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-python3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-python3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-scanner_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-scanner_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-scanner_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openscap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openslp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openslp_security_api_results.json
new file mode 100644
index 0000000..4fe3c88
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openslp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-5544","severity":"critical","public_date":"2019-12-06T00:00:00Z","advisories":["RHSA-2020:0199","RHSA-2019:4240"],"bugzilla":"1777788","bugzilla_description":"CVE-2019-5544 openslp: Heap-based buffer overflow in ProcessSrvRqst() in slpd_process.c leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["openslp-1:2.0.0-4.el6_10","openslp-1:2.0.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-12938","severity":null,"public_date":"2018-06-28T00:00:00Z","advisories":[],"bugzilla":"1596450","bugzilla_description":"CVE-2018-12938 openslp: Double free in slp_buffer:SLPBufferRealloc() may allow a remote attacker to execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12938.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2017-17833","severity":"important","public_date":"2018-04-19T00:00:00Z","advisories":["RHSA-2018:2240","RHSA-2018:2308"],"bugzilla":"1572166","bugzilla_description":"CVE-2017-17833 openslp: Heap memory corruption in slpd/slpd_process.c allows denial of service or potentially code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["openslp-1:2.0.0-3.el6","openslp-1:2.0.0-7.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17833.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7567","severity":"low","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1379987","bugzilla_description":"CVE-2016-7567 openslp: memory corruption due to possible overflow in SLPFoldWhiteSpace in common/slp_compare.c","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7567.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-4912","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1329295","bugzilla_description":"CVE-2016-4912 openslp: null pointer dereference in _xrealloc() function","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4912.json"},{"CVE":"CVE-2015-5155","severity":null,"public_date":"2015-09-16T00:00:00Z","advisories":[],"bugzilla":"1263769","bugzilla_description":"CVE-2015-5155 openslp: Packet with crafted \"nextoffset\" and \"extid\" values causes DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5155.json"},{"CVE":"CVE-2015-5177","severity":"moderate","public_date":"2015-08-06T00:00:00Z","advisories":[],"bugzilla":"1251064","bugzilla_description":"CVE-2015-5177 openslp: double free in SLPDProcessMessage()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5177.json"},{"CVE":"CVE-2012-4428","severity":"moderate","public_date":"2012-09-13T00:00:00Z","advisories":[],"bugzilla":"857242","bugzilla_description":"CVE-2012-4428 openslp: out-of-bounds read in SLPIntersectStringList() can cause DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4428.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensm-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensm-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensm-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opensp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-askpass_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-askpass_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-askpass_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-cavs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-cavs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-cavs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-clients_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-clients_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-clients_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-keycat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-keycat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-keycat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-ldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-ldap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-ldap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh_security_api_results.json
new file mode 100644
index 0000000..05c3cc5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssh_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15778","severity":"moderate","public_date":"2020-07-18T00:00:00Z","advisories":[],"bugzilla":"1860487","bugzilla_description":"CVE-2020-15778 openssh: scp allows command injection when using backtick characters in the destination argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15778.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-14145","severity":"low","public_date":"2020-06-29T00:00:00Z","advisories":[],"bugzilla":"1852930","bugzilla_description":"CVE-2020-14145 openssh: Observable Discrepancy leading to an information leak in the algorithm negotiation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14145.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-12062","severity":"moderate","public_date":"2020-05-27T00:00:00Z","advisories":[],"bugzilla":"1854145","bugzilla_description":"CVE-2020-12062 openssh: scp can send duplicate responses to the server upon a utimes system call failure leading to overwrite of arbitrary files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12062.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-16905","severity":"important","public_date":"2019-08-28T00:00:00Z","advisories":[],"bugzilla":"1767966","bugzilla_description":"CVE-2019-16905 openssh: an integer overflow in the private key parsing code for the XMSS key type","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16905.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-20685","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1665785","bugzilla_description":"CVE-2018-20685 openssh: scp client improper directory name validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20685.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-6109","severity":"low","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666119","bugzilla_description":"CVE-2019-6109 openssh: Missing character encoding in progress display allows for spoofing of scp client output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6109.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-6110","severity":"low","public_date":"2018-11-16T00:00:00Z","advisories":[],"bugzilla":"1666124","bugzilla_description":"CVE-2019-6110 openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-6111","severity":"moderate","public_date":"2018-11-16T00:00:00Z","advisories":["RHSA-2019:3702","RHBA-2019:3303"],"bugzilla":"1666127","bugzilla_description":"CVE-2019-6111 openssh: Improper validation of object names allows malicious server to overwrite files via scp client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["redhat-coreos-42.81.20191107.0","openssh-0:8.0p1-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-15919","severity":"low","public_date":"2018-08-28T00:00:00Z","advisories":[],"bugzilla":"1623184","bugzilla_description":"CVE-2018-15919 openssh: User enumeration via malformed packets in authentication requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15919.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-15473","severity":"low","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2019:2143","RHSA-2019:0711"],"bugzilla":"1619063","bugzilla_description":"CVE-2018-15473 openssh: User enumeration via malformed packets in authentication requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssh-0:7.4p1-21.el7","openssh-0:5.3p1-124.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15473.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-10708","severity":"low","public_date":"2018-01-24T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1537929","bugzilla_description":"CVE-2016-10708 openssh: Out of sequence NEWKEYS message can allow remote attacker to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-15906","severity":"low","public_date":"2017-10-03T00:00:00Z","advisories":["RHSA-2018:0980"],"bugzilla":"1506630","bugzilla_description":"CVE-2017-15906 openssh: Improper write operations in readonly mode allow for zero-length file creation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openssh-0:7.4p1-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-10009","severity":"moderate","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1406269","bugzilla_description":"CVE-2016-10009 openssh: loading of untrusted PKCS#11 modules in ssh-agent","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10009.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2016-10010","severity":"low","public_date":"2016-12-19T00:00:00Z","advisories":[],"bugzilla":"1406278","bugzilla_description":"CVE-2016-10010 openssh: privilege escalation via Unix domain socket forwarding","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-10011","severity":"low","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1406286","bugzilla_description":"CVE-2016-10011 openssh: Leak of host private key material to privilege-separated child process via realloc()","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10011.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2016-10012","severity":"low","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1406293","bugzilla_description":"CVE-2016-10012 openssh: Bounds check can be evaded in the shared memory manager used by pre-authentication compression support","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-8858","severity":"moderate","public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1384860","bugzilla_description":"CVE-2016-8858 openssh: Memory exhaustion due to unregistered KEXINIT handler after receiving message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2016-6515","severity":"moderate","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2017:2029"],"bugzilla":"1364935","bugzilla_description":"CVE-2016-6515 openssh: Denial of service via very long passwords","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["openssh-0:7.4p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-6210","severity":"moderate","public_date":"2016-07-14T00:00:00Z","advisories":["RHSA-2017:2029","RHSA-2017:2563"],"bugzilla":"1357442","bugzilla_description":"CVE-2016-6210 openssh: User enumeration via covert timing channel","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["openssh-0:7.4p1-11.el7","openssh-0:5.3p1-123.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6210.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2015-8325","severity":"moderate","public_date":"2016-04-13T00:00:00Z","advisories":["RHSA-2016:2588","RHSA-2017:0641"],"bugzilla":"1328012","bugzilla_description":"CVE-2015-8325 openssh: privilege escalation via user's PAM environment and UseLogin=yes","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-863","affected_packages":["openssh-0:6.6.1p1-31.el7","openssh-0:5.3p1-122.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8325.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-3115","severity":"moderate","public_date":"2016-03-10T00:00:00Z","advisories":["RHSA-2016:0465","RHSA-2016:0466"],"bugzilla":"1316829","bugzilla_description":"CVE-2016-3115 openssh: missing sanitisation of input for X11 forwarding","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-20","affected_packages":["openssh-0:6.6.1p1-25.el7_2","openssh-0:5.3p1-114.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3115.json"},{"CVE":"CVE-2016-0777","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2016:0043"],"bugzilla":"1298032","bugzilla_description":"CVE-2016-0777 OpenSSH: Client Information leak due to use of roaming connection feature","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-682","affected_packages":["openssh-0:6.6.1p1-23.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0777.json"},{"CVE":"CVE-2016-0778","severity":"low","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2016:0043"],"bugzilla":"1298033","bugzilla_description":"CVE-2016-0778 OpenSSH: Client buffer-overflow when using roaming connections","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["openssh-0:6.6.1p1-23.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0778.json"},{"CVE":"CVE-2016-1908","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2016:0465","RHSA-2016:0741"],"bugzilla":"1298741","bugzilla_description":"CVE-2016-1908 openssh: possible fallback from untrusted to trusted X11 forwarding","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-284","affected_packages":["openssh-0:6.6.1p1-25.el7_2","openssh-0:5.3p1-117.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1908.json"},{"CVE":"CVE-2016-1907","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":[],"bugzilla":"1298746","bugzilla_description":"CVE-2016-1907 openssh: out-of-bounds read in packet handling code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1907.json"},{"CVE":"CVE-2015-6563","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2088","RHSA-2016:0741"],"bugzilla":"1252844","bugzilla_description":"CVE-2015-6563 openssh: Privilege separation weakness related to PAM support","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-266","affected_packages":["openssh-0:5.3p1-117.el6","openssh-0:6.6.1p1-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6563.json"},{"CVE":"CVE-2015-6564","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2088","RHSA-2016:0741"],"bugzilla":"1252852","bugzilla_description":"CVE-2015-6564 openssh: Use-after-free bug related to PAM support","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-416","affected_packages":["openssh-0:5.3p1-117.el6","openssh-0:6.6.1p1-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6564.json"},{"CVE":"CVE-2015-6565","severity":"low","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252861","bugzilla_description":"CVE-2015-6565 openssh: Incorrectly set TTYs to be world-writable","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6565.json"},{"CVE":"CVE-2015-5600","severity":"low","public_date":"2015-07-16T00:00:00Z","advisories":["RHSA-2015:2088","RHSA-2016:0466"],"bugzilla":"1245969","bugzilla_description":"CVE-2015-5600 openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-304","affected_packages":["openssh-0:5.3p1-114.el6_7","openssh-0:6.6.1p1-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5600.json"},{"CVE":"CVE-2015-5352","severity":"moderate","public_date":"2015-07-01T00:00:00Z","advisories":["RHSA-2016:0741"],"bugzilla":"1238231","bugzilla_description":"CVE-2015-5352 openssh: XSECURITY restrictions bypass under certain conditions in ssh(1)","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["openssh-0:5.3p1-117.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5352.json"},{"CVE":"CVE-2014-9278","severity":"low","public_date":"2014-10-03T00:00:00Z","advisories":["RHSA-2015:0425"],"bugzilla":"1169843","bugzilla_description":"CVE-2014-9278 openssh: ~/.k5users unexpectedly grants remote login","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["openssh-0:6.6.1p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9278.json"},{"CVE":"CVE-2014-2653","severity":"moderate","public_date":"2014-03-24T00:00:00Z","advisories":["RHSA-2015:0425","RHSA-2014:1552"],"bugzilla":"1081338","bugzilla_description":"CVE-2014-2653 openssh: failure to check DNS SSHFP records in certain scenarios","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-287","affected_packages":["openssh-0:5.3p1-104.el6","openssh-0:6.6.1p1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2653.json"},{"CVE":"CVE-2014-2532","severity":"low","public_date":"2014-03-15T00:00:00Z","advisories":["RHSA-2014:1552"],"bugzilla":"1077843","bugzilla_description":"CVE-2014-2532 openssh: AcceptEnv environment restriction bypass flaw","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":"CWE-138","affected_packages":["openssh-0:5.3p1-104.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2532.json"},{"CVE":"CVE-2013-4548","severity":"moderate","public_date":"2013-11-07T00:00:00Z","advisories":[],"bugzilla":"1028418","bugzilla_description":"CVE-2013-4548 openssh: post-auth memory corruption when using AES-GCM cipher","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4548.json"},{"CVE":"CVE-2012-5536","severity":"moderate","public_date":"2013-02-21T00:00:00Z","advisories":["RHSA-2013:0519"],"bugzilla":"834618","bugzilla_description":"CVE-2012-5536 pam_ssh_agent_auth: symbol crash leading to glibc error() called incorrectly","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["openssh-0:5.3p1-84.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5536.json"},{"CVE":"CVE-2010-5107","severity":"low","public_date":"2013-02-06T00:00:00Z","advisories":["RHSA-2013:1591","RHSA-2013:1527"],"bugzilla":"908707","bugzilla_description":"CVE-2010-5107 openssh: Prevent connection slot exhaustion attacks","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["openssh-0:5.3p1-94.el6","rhev-hypervisor6-0:6.5-20131115.0.3.2.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5107.json"},{"CVE":"CVE-2014-1692","severity":"critical","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"1059052","bugzilla_description":"CVE-2014-1692 openssh: uninitialized variable use in J-PAKE implementation","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1692.json"},{"CVE":"CVE-2012-0814","severity":"low","public_date":"2012-01-26T00:00:00Z","advisories":[],"bugzilla":"785292","bugzilla_description":"CVE-2012-0814 openssh: forced command option information disclosure","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0814.json"},{"CVE":"CVE-2011-5000","severity":"low","public_date":"2011-08-01T00:00:00Z","advisories":["RHSA-2012:0884"],"bugzilla":"809938","bugzilla_description":"CVE-2011-5000 openssh: post-authentication resource exhaustion bug via GSSAPI","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["openssh-0:5.3p1-81.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5000.json"},{"CVE":"CVE-2011-4327","severity":"moderate","public_date":"2011-05-05T00:00:00Z","advisories":[],"bugzilla":"755640","bugzilla_description":"CVE-2011-4327 openssh: Unauthorized local access to host keys on platforms where ssh-rand-helper used","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4327.json"},{"CVE":"CVE-2011-0539","severity":"low","public_date":"2011-02-04T00:00:00Z","advisories":[],"bugzilla":"675254","bugzilla_description":"CVE-2011-0539 OpenSSH: legacy certificate generation information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0539.json"},{"CVE":"CVE-2010-4755","severity":null,"public_date":"2011-01-03T00:00:00Z","advisories":[],"bugzilla":"681698","bugzilla_description":"CVE-2010-4755 openssh: remote DoS in sftp via crafted glob expressions","cvss_score":null,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4755.json"},{"CVE":"CVE-2009-2904","severity":"moderate","public_date":"2009-09-30T00:00:00Z","advisories":["RHSA-2009:1470"],"bugzilla":"522141","bugzilla_description":"CVE-2009-2904 openssh: possible privilege escalation when using ChrootDirectory setting","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["openssh-0:4.3p2-36.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2904.json"},{"CVE":"CVE-2008-5161","severity":"low","public_date":"2008-11-19T00:00:00Z","advisories":["RHSA-2009:1287"],"bugzilla":"472068","bugzilla_description":"CVE-2008-5161 OpenSSH: Plaintext Recovery Attack against CBC ciphers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssh-0:4.3p2-36.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5161.json"},{"CVE":"CVE-2008-3844","severity":"critical","public_date":"2008-08-22T00:00:00Z","advisories":["RHSA-2008:0855"],"bugzilla":"1618333","bugzilla_description":"CVE-2008-3844 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:4.3p2-26.el5_2.1","openssh-0:3.9p1-11.el4_7","openssh-0:3.9p1-10.RHEL4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3844.json"},{"CVE":"CVE-2008-1483","severity":"low","public_date":"2008-01-08T00:00:00Z","advisories":["RHSA-2005:527"],"bugzilla":"439079","bugzilla_description":"CVE-2008-1483 openssh may set DISPLAY even if it's unable to listen on respective port","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1483.json"},{"CVE":"CVE-2007-3102","severity":"moderate","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:0540","RHSA-2007:0555","RHSA-2007:0737","RHSA-2007:0703"],"bugzilla":"243204","bugzilla_description":"CVE-2007-3102 audit logging of failed logins","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.24","openssh-0:4.3p2-24.el5","pam-0:0.99.6.2-3.26.el5","pam-0:0.77-66.23"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3102.json"},{"CVE":"CVE-2007-4752","severity":"low","public_date":"2007-09-04T00:00:00Z","advisories":["RHSA-2008:0855"],"bugzilla":"280361","bugzilla_description":"CVE-2007-4752 openssh falls back to the trusted x11 cookie if generation of an untrusted cookie fails","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:4.3p2-26.el5_2.1","openssh-0:3.9p1-11.el4_7","openssh-0:3.9p1-10.RHEL4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4752.json"},{"CVE":"CVE-2006-5794","severity":"low","public_date":"2006-11-07T00:00:00Z","advisories":["RHSA-2006:0738"],"bugzilla":"214641","bugzilla_description":"CVE-2006-5794 OpenSSH privilege separation flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.13","openssh-0:3.9p1-8.RHEL4.17.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5794.json"},{"CVE":"CVE-2006-5051","severity":"important","public_date":"2006-09-28T00:00:00Z","advisories":["RHSA-2006:0697","RHSA-2006:0698"],"bugzilla":"208347","bugzilla_description":"CVE-2006-5051 unsafe GSSAPI signal handler","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.12","openssh-0:3.9p1-8.RHEL4.17","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5051.json"},{"CVE":"CVE-2006-5052","severity":"low","public_date":"2006-09-28T00:00:00Z","advisories":["RHSA-2007:0540","RHSA-2007:0703"],"bugzilla":"234643","bugzilla_description":"CVE-2006-5052 Kerberos information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.24","openssh-0:4.3p2-24.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5052.json"},{"CVE":"CVE-2006-4924","severity":"moderate","public_date":"2006-09-19T00:00:00Z","advisories":["RHSA-2006:0697","RHSA-2006:0698"],"bugzilla":"207957","bugzilla_description":"CVE-2006-4924 openssh DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.12","openssh-0:3.9p1-8.RHEL4.17","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4924.json"},{"CVE":"CVE-2006-0225","severity":"low","public_date":"2005-09-28T00:00:00Z","advisories":["RHSA-2006:0698","RHSA-2006:0044","RHSA-2006:0298"],"bugzilla":"168167","bugzilla_description":"CVE-2006-0225 local to local copy uses shell expansion twice","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.12","openssh-0:3.6.1p2-33.30.9","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0225.json"},{"CVE":"CVE-2005-2798","severity":"moderate","public_date":"2005-09-01T00:00:00Z","advisories":["RHSA-2005:527"],"bugzilla":"1617757","bugzilla_description":"CVE-2005-2798 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2798.json"},{"CVE":"CVE-2005-2666","severity":"low","public_date":"2005-07-07T00:00:00Z","advisories":["RHSA-2007:0257"],"bugzilla":"162681","bugzilla_description":"CVE-2005-2666 openssh vulnerable to known_hosts address harvesting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2666.json"},{"CVE":"CVE-2004-2069","severity":"low","public_date":"2004-01-27T00:00:00Z","advisories":["RHSA-2005:550"],"bugzilla":"1617421","bugzilla_description":"CVE-2004-2069 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-2069.json"},{"CVE":"CVE-2003-0386","severity":"low","public_date":"2003-06-05T00:00:00Z","advisories":["RHSA-2006:0698","RHSA-2006:0298"],"bugzilla":"1617024","bugzilla_description":"CVE-2003-0386 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.6.1p2-33.30.9","openssh-0:3.1p1-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0386.json"},{"CVE":"CVE-2004-0175","severity":"low","public_date":"2000-09-01T00:00:00Z","advisories":["RHSA-2005:567","RHSA-2005:562","RHSA-2005:495","RHSA-2005:165","RHSA-2005:481","RHSA-2005:074","RHSA-2005:106"],"bugzilla":"1617166","bugzilla_description":"CVE-2004-0175 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["krb5-0:1.2.7-47","krb5-0:1.3.4-17","openssh-0:3.6.1p2-33.30.4","rsh-0:0.17-25.3","rsh-0:0.17-17.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0175.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-ibmca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-ibmca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-ibmca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-ibmpkcs11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-ibmpkcs11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-ibmpkcs11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-perl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-perl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-pkcs11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-pkcs11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl-pkcs11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl_security_api_results.json
new file mode 100644
index 0000000..7ef85e3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openssl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-25644","severity":"important","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4257","RHSA-2020:4256"],"bugzilla":"1885485","bugzilla_description":"CVE-2020-25644 wildfly-openssl: memory leak per HTTP session creation in WildFly OpenSSL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el8eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el6eap","eap7-wildfly-openssl-linux-x86_64-0:1.0.11-1.Final_redhat_00001.1.el7eap"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25644.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1968","severity":"low","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877458","bugzilla_description":"CVE-2020-1968 openssl: Information exposure when DH secret are reused across multiple TLS connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-1967","severity":"important","public_date":"2020-04-21T00:00:00Z","advisories":[],"bugzilla":"1823670","bugzilla_description":"CVE-2020-1967 openssl: Segmentation fault in SSL_check_chain causes denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1967.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1551","severity":"low","public_date":"2019-12-06T00:00:00Z","advisories":[],"bugzilla":"1780995","bugzilla_description":"CVE-2019-1551 openssl: Integer overflow in RSAZ modular exponentiation on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1551.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-1547","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752090","bugzilla_description":"CVE-2019-1547 openssl: side-channel weak encryption vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-602","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-1549","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752095","bugzilla_description":"CVE-2019-1549 openssl: information disclosure in fork()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-1563","severity":"low","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1840","RHBA-2020:3180","RHSA-2020:1336","RHSA-2020:1337"],"bugzilla":"1752100","bugzilla_description":"CVE-2019-1563 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.1.1c-15.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-1552","severity":"low","public_date":"2019-07-30T00:00:00Z","advisories":[],"bugzilla":"1745637","bugzilla_description":"CVE-2019-1552 openssl: Insecure path defaults vulnerability in mingw builds","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1552.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2019-1543","severity":"low","public_date":"2019-03-06T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1695954","bugzilla_description":"CVE-2019-1543 openssl: ChaCha20-Poly1305 with long nonces","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2019-1559","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:2304","RHSA-2019:2439","RHSA-2019:3929","RHSA-2019:2437","RHSA-2019:2471"],"bugzilla":"1683804","bugzilla_description":"CVE-2019-1559 openssl: 0-byte record padding oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-0:1.0.1e-58.el6_10","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-5407","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3932","RHSA-2019:0483","RHSA-2019:2125","RHSA-2019:3929","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1645695","bugzilla_description":"CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7_6.1","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-0735","severity":"low","public_date":"2018-10-25T00:00:00Z","advisories":["RHSA-2019:3700","RHBA-2019:3303"],"bugzilla":"1644356","bugzilla_description":"CVE-2018-0735 openssl: timing side channel attack in the ECDSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0735.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0734","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:3700","RHSA-2019:3932","RHSA-2019:2304","RHSA-2019:3933","RHSA-2019:3935","RHBA-2019:3303"],"bugzilla":"1644364","bugzilla_description":"CVE-2018-0734 openssl: timing side channel attack in the DSA signature algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.1.1c-2.el8","redhat-coreos-42.81.20191107.0","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0495","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:1296","RHSA-2019:2237","RHSA-2019:1543","RHSA-2020:1461","RHSA-2018:3221"],"bugzilla":"1591163","bugzilla_description":"CVE-2018-0495 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0495.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2018-0732","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":["RHSA-2019:1297","RHSA-2019:1296","RHSA-2019:1543","RHSA-2018:2553","RHSA-2018:2552","RHSA-2018:3221"],"bugzilla":"1591100","bugzilla_description":"CVE-2018-0732 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-1:1.0.2k-16.el7","rhoar-nodejs-1:8.11.4-2.el7","rhoar-nodejs-1:10.9.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-0737","severity":"low","public_date":"2018-04-16T00:00:00Z","advisories":["RHSA-2019:3932","RHSA-2019:3933","RHSA-2018:3221","RHSA-2019:3935"],"bugzilla":"1568253","bugzilla_description":"CVE-2018-0737 openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0737.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-0733","severity":"moderate","public_date":"2018-03-27T00:00:00Z","advisories":[],"bugzilla":"1561260","bugzilla_description":"CVE-2018-0733 openssl: Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages in a reduced number of attempts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0733.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-0739","severity":"moderate","public_date":"2018-03-27T00:00:00Z","advisories":["RHSA-2019:0367","RHSA-2019:0366","RHSA-2018:3090","RHSA-2019:1712","RHSA-2019:1711","RHSA-2018:3221"],"bugzilla":"1561266","bugzilla_description":"CVE-2018-0739 openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-400","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7","openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0739.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-3737","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523504","bugzilla_description":"CVE-2017-3737 openssl: Read/write after SSL object in error state","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3738","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523510","bugzilla_description":"CVE-2017-3738 openssl: rsaz_1024_mul_avx2 overflow bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-1000808","severity":"low","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2019:0085"],"bugzilla":"1640216","bugzilla_description":"CVE-2018-1000808 pyOpenSSL: Failure to release memory before removing last reference in PKCS #12 Store","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["pyOpenSSL-0:17.5.0-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-1000807","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2019:0085"],"bugzilla":"1640217","bugzilla_description":"CVE-2018-1000807 pyOpenSSL: Use-after-free in X509 object handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["pyOpenSSL-0:17.5.0-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-3736","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1509169","bugzilla_description":"CVE-2017-3736 openssl: bn_sqrx8x_internal carry bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":["openssl-1:1.0.2k-12.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3735","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":["RHSA-2018:3221"],"bugzilla":"1486144","bugzilla_description":"CVE-2017-3735 openssl: Malformed X.509 IPAdressFamily could cause OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-3733","severity":"important","public_date":"2017-02-16T00:00:00Z","advisories":[],"bugzilla":"1421695","bugzilla_description":"CVE-2017-3733 openssl: Encrypt-Then-Mac renegotiation crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3733.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3731","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2017:0286","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416852","bugzilla_description":"CVE-2017-3731 openssl: Truncated packet could crash via OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["openssl-0:1.0.1e-48.el6_8.4","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3731.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3730","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":[],"bugzilla":"1416855","bugzilla_description":"CVE-2017-3730 openssl: Bad (EC)DHE parameters cause a client crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3730.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3732","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416856","bugzilla_description":"CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-7056","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1802","RHSA-2017:1801","RHBA-2017:1929"],"bugzilla":"1412120","bugzilla_description":"CVE-2016-7056 openssl: ECDSA P-256 timing attack key recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.0.2k-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7056.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-7054","severity":"important","public_date":"2016-11-10T00:00:00Z","advisories":[],"bugzilla":"1393920","bugzilla_description":"CVE-2016-7054 openssl: Corrupting larger payloads when using ChaCha20/Poly1305 ciphersuites leads to DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7053","severity":"moderate","public_date":"2016-11-10T00:00:00Z","advisories":[],"bugzilla":"1393930","bugzilla_description":"CVE-2016-7053 openssl: CMS Null dereference vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-8610","severity":"moderate","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:0286","RHSA-2017:0574"],"bugzilla":"1384743","bugzilla_description":"CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","openssl-0:1.0.1e-48.el6_8.4","gnutls-0:2.12.23-21.el6","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8610.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7055","severity":"low","public_date":"2016-10-11T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1393929","bugzilla_description":"CVE-2016-7055 openssl: Carry propagating bug in Montgomery multiplication","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7055.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-6309","severity":"critical","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1379302","bugzilla_description":"CVE-2016-6309 openssl: Use After Free for large message sizes","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6309.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2016-7052","severity":"moderate","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1379310","bugzilla_description":"CVE-2016-7052 openssl: Missing CRL sanity check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7052.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6304","severity":"important","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1659","RHSA-2017:1802","RHSA-2017:1658","RHSA-2017:1801","RHSA-2016:2802","RHSA-2017:2493","RHSA-2017:2494","RHSA-2016:1940"],"bugzilla":"1377600","bugzilla_description":"CVE-2016-6304 openssl: OCSP Status Request extension unbounded memory growth","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-0:1.0.1e-16.el6_5.17","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-42.el6_7.6","openssl-0:1.0.1e-48.el6_8.3","openssl-0:1.0.0-27.el6_4.6","openssl-0:1.0.1e-30.el6_6.13","openssl-0:1.0.0-20.el6_2.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6305","severity":"moderate","public_date":"2016-09-22T00:00:00Z","advisories":[],"bugzilla":"1378127","bugzilla_description":"CVE-2016-6305 openssl: SSL_peek() hang on empty record","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6305.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6306","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1377594","bugzilla_description":"CVE-2016-6306 openssl: certificate message OOB reads","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6306.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6307","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1378203","bugzilla_description":"CVE-2016-6307 openssl: excessive allocation of memory in tls_get_message_header()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6307.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-6308","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1378208","bugzilla_description":"CVE-2016-6308 openssl: excessive allocation of memory in dtls1_preprocess_fragment()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6308.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-2183","severity":"moderate","public_date":"2016-08-24T00:00:00Z","advisories":["RHSA-2020:0451","RHSA-2020:3842","RHSA-2017:3240","RHSA-2019:1245","RHBA-2019:2581","RHSA-2017:0462","RHSA-2017:3113","RHSA-2017:3114","RHSA-2017:2710","RHSA-2017:0337","RHSA-2017:0336","RHSA-2017:3239","RHSA-2017:1216","RHSA-2017:0338","RHSA-2017:2709","RHSA-2017:2708","RHSA-2018:2123","RHSA-2019:2859"],"bugzilla":"1369383","bugzilla_description":"CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.8.0-ibm-1:1.8.0.4.1-1jpp.2.el7","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.2.el7","java-1.6.0-ibm-1:1.6.0.16.41-1jpp.1.el6_8","java-1.7.0-ibm-1:1.7.0.10.1-1jpp.1.el5_11","java-1.7.1-ibm-1:1.7.1.4.1-1jpp.1.el6_8","openshift3/metrics-heapster:v3.11.141-2","python-0:2.7.5-69.el7_5","openshift3/ose-console:v3.11.141-2","openshift3/oauth-proxy:v3.11.170-5","openshift4/ose-console:v4.5.0-202009201759.p0","openshift3/ose-kube-rbac-proxy:v3.11.141-2","openshift3/ose-metrics-server:v3.11.141-2","java-1.8.0-ibm-1:1.8.0.4.1-1jpp.1.el6_8","openshift4/ose-oauth-proxy:v4.1.18-201909201915"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-6302","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1369855","bugzilla_description":"CVE-2016-6302 openssl: Insufficient TLS session ticket HMAC length checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6302.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6303","severity":"moderate","public_date":"2016-08-20T00:00:00Z","advisories":[],"bugzilla":"1370146","bugzilla_description":"CVE-2016-6303 openssl: Integer overflow in MDC2_Update()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6303.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-2182","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2016:1940","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1367340","bugzilla_description":"CVE-2016-2182 openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-2180","severity":"low","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2016:1940"],"bugzilla":"1359615","bugzilla_description":"CVE-2016-2180 OpenSSL: OOB read in TS_OBJ_print_bio()","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2180.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2016-2181","severity":"moderate","public_date":"2016-07-05T00:00:00Z","advisories":["RHSA-2016:1940"],"bugzilla":"1369113","bugzilla_description":"CVE-2016-2181 openssl: DTLS replay protection bypass allows DoS against DTLS connection","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-2179","severity":"moderate","public_date":"2016-06-30T00:00:00Z","advisories":["RHSA-2016:1940"],"bugzilla":"1369504","bugzilla_description":"CVE-2016-2179 openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2179.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-2178","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1343400","bugzilla_description":"CVE-2016-2178 openssl: Non-constant time codepath followed for certain operations in DSA implementation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2178.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2016-2177","severity":"low","public_date":"2016-05-05T00:00:00Z","advisories":["RHSA-2017:1659","RHSA-2017:1658","RHSA-2017:0193","RHSA-2017:0194","RHSA-2016:2957","RHSA-2016:1940"],"bugzilla":"1341705","bugzilla_description":"CVE-2016-2177 openssl: Possible integer overflow vulnerabilities in codebase","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7","jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6","openssl-1:1.0.1e-51.el7_2.7","openssl-0:1.0.1e-48.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2177.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-2108","severity":"important","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2017:0193","RHSA-2016:0722","RHSA-2017:0194","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:1137","RHSA-2016:0996"],"bugzilla":"1331402","bugzilla_description":"CVE-2016-2108 openssl: Memory corruption in the ASN.1 encoder","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:0.9.8e-40.el5_11","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2108.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2107","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1331426","bugzilla_description":"CVE-2016-2107 openssl: Padding oracle in AES-NI CBC MAC check","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2107.json"},{"CVE":"CVE-2016-2105","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:1650","RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:1648","RHSA-2016:2957","RHSA-2016:1649","RHSA-2016:0996"],"bugzilla":"1331441","bugzilla_description":"CVE-2016-2105 openssl: EVP_EncodeUpdate overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2106","severity":"moderate","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:1650","RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:1648","RHSA-2016:2957","RHSA-2016:1649","RHSA-2016:0996"],"bugzilla":"1331536","bugzilla_description":"CVE-2016-2106 openssl: EVP_EncryptUpdate overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2106.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2176","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1331563","bugzilla_description":"CVE-2016-2176 openssl: EBCDIC overread in X509_NAME_oneline()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2176.json"},{"CVE":"CVE-2016-2109","severity":"low","public_date":"2016-04-23T00:00:00Z","advisories":["RHSA-2016:2056","RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1330101","bugzilla_description":"CVE-2016-2109 openssl: ASN.1 BIO handling of large amounts of data","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2109.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2016-2842","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1314757","bugzilla_description":"CVE-2016-2842 openssl: doapr_outch function does not verify that certain memory allocation succeeds","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2842.json"},{"CVE":"CVE-2016-0800","severity":"important","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2016:0490","RHSA-2016:1519","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0305","RHSA-2016:0306","RHSA-2016:0301","RHSA-2016:0302","RHSA-2016:0445","RHSA-2016:0379","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1310593","bugzilla_description":"CVE-2016-0800 SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-42.el6_7.4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","rhev-hypervisor7-0:7.2-20160302.1.el7ev","openssl-0:1.0.1e-30.el6_6.12","rhev-hypervisor7-0:7.2-20160302.1.el6ev","openssl-0:1.0.0-20.el6_2.8","openssl-0:0.9.7a-43.23.el4","openssl-1:1.0.1e-42.el7_1.10","openssl098e-0:0.9.8e-20.el6_7.1","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-39.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0800.json"},{"CVE":"CVE-2016-0702","severity":"low","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2016:2957","RHSA-2016:0301","RHSA-2016:0379"],"bugzilla":"1310599","bugzilla_description":"CVE-2016-0702 OpenSSL: Side channel attack on modular exponentiation","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-42.el6_7.4","rhev-hypervisor7-0:7.2-20160302.1.el7ev","rhev-hypervisor7-0:7.2-20160302.1.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0702.json"},{"CVE":"CVE-2016-0703","severity":"moderate","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0303"],"bugzilla":"1310811","bugzilla_description":"CVE-2016-0703 openssl: Divide-and-conquer session key recovery in SSLv2","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0703.json"},{"CVE":"CVE-2016-0704","severity":"moderate","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0303"],"bugzilla":"1310814","bugzilla_description":"CVE-2016-0704 openssl: SSLv2 Bleichenbacher protection overwrites wrong bytes for export ciphers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0704.json"},{"CVE":"CVE-2016-0797","severity":"low","public_date":"2016-03-01T00:00:00Z","advisories":["RHSA-2016:2957","RHSA-2016:0301","RHSA-2016:0302","RHSA-2016:0379"],"bugzilla":"1311880","bugzilla_description":"CVE-2016-0797 OpenSSL: BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-42.el6_7.4","rhev-hypervisor7-0:7.2-20160302.1.el7ev","rhev-hypervisor7-0:7.2-20160302.1.el6ev","openssl-0:0.9.8e-39.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0797.json"},{"CVE":"CVE-2016-0799","severity":"low","public_date":"2016-02-26T00:00:00Z","advisories":["RHSA-2016:0722","RHSA-2016:2073","RHSA-2016:2957","RHSA-2016:0996"],"bugzilla":"1312219","bugzilla_description":"CVE-2016-0799 OpenSSL: Fix memory issues in BIO_*printf functions","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.5","openssl-0:1.0.1e-48.el6_8.1","openssl-0:1.0.1e-42.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0799.json"},{"CVE":"CVE-2016-0798","severity":"low","public_date":"2016-02-25T00:00:00Z","advisories":[],"bugzilla":"1311876","bugzilla_description":"CVE-2016-0798 OpenSSL: Avoid memory leak in SRP","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0798.json"},{"CVE":"CVE-2016-0705","severity":"low","public_date":"2016-02-18T00:00:00Z","advisories":["RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2016:2957","RHSA-2016:0301","RHSA-2016:0379"],"bugzilla":"1310596","bugzilla_description":"CVE-2016-0705 OpenSSL: Double-free in DSA code","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-42.el6_7.4","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10","rhev-hypervisor7-0:7.2-20160302.1.el7ev","rhev-hypervisor7-0:7.2-20160302.1.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0705.json"},{"CVE":"CVE-2015-3194","severity":"low","public_date":"2016-01-28T00:00:00Z","advisories":["RHSA-2015:2617","RHSA-2016:2957"],"bugzilla":"1288320","bugzilla_description":"CVE-2015-3194 OpenSSL: Certificate verify crash with missing PSS parameter","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.1","openssl-1:1.0.1e-51.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3194.json"},{"CVE":"CVE-2016-0701","severity":"moderate","public_date":"2016-01-28T00:00:00Z","advisories":[],"bugzilla":"1301845","bugzilla_description":"CVE-2016-0701 OpenSSL: DH small subgroups","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0701.json"},{"CVE":"CVE-2015-3197","severity":"low","public_date":"2016-01-28T00:00:00Z","advisories":["RHSA-2016:0490","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0305","RHSA-2016:0306","RHSA-2016:0301","RHSA-2016:0302","RHSA-2016:0445","RHSA-2016:0379","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1301846","bugzilla_description":"CVE-2015-3197 OpenSSL: SSLv2 doesn't block disabled ciphers","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-51.el7_2.4","openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-42.el6_7.4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","rhev-hypervisor7-0:7.2-20160302.1.el7ev","openssl-0:1.0.1e-30.el6_6.12","rhev-hypervisor7-0:7.2-20160302.1.el6ev","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8","openssl-0:0.9.7a-43.23.el4","openssl098e-0:0.9.8e-20.el6_7.1","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-39.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3197.json"},{"CVE":"CVE-2015-7575","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":["RHSA-2016:0054","RHSA-2016:0098","RHSA-2016:0055","RHSA-2016:0099","RHSA-2016:1430","RHSA-2016:0056","RHSA-2016:0100","RHSA-2016:0012","RHSA-2016:0101","RHSA-2016:0050","RHSA-2016:0053","RHSA-2016:0007","RHSA-2016:0008","RHSA-2016:0049"],"bugzilla":"1289841","bugzilla_description":"CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.2","java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7","java-1.8.0-openjdk-1:1.8.0.71-1.b15.el6_7","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7","nss-0:3.19.1-19.el7_2","gnutls-0:3.3.8-14.el7_2","java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.1.el5_11","java-1.7.0-openjdk-1:1.7.0.95-2.6.4.0.el6_7","java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5","java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7","gnutls-0:2.8.5-19.el6_7","java-1.8.0-openjdk-1:1.8.0.71-2.b15.el7_2","java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7","java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7","nss-0:3.19.1-8.el6_7","openssl-1:1.0.1e-51.el7_2.2","java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json"},{"CVE":"CVE-2015-1794","severity":"low","public_date":"2015-12-04T00:00:00Z","advisories":[],"bugzilla":"1288955","bugzilla_description":"CVE-2015-1794 OpenSSL: Anon DH ServerKeyExchange with 0 p parameter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1794.json"},{"CVE":"CVE-2015-3193","severity":"moderate","public_date":"2015-12-03T00:00:00Z","advisories":[],"bugzilla":"1288317","bugzilla_description":"CVE-2015-3193 OpenSSL: BN_mod_exp may produce incorrect results on x86_64","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3193.json"},{"CVE":"CVE-2015-3195","severity":"moderate","public_date":"2015-12-03T00:00:00Z","advisories":["RHSA-2015:2617","RHSA-2016:2056","RHSA-2016:2957","RHSA-2015:2616"],"bugzilla":"1288322","bugzilla_description":"CVE-2015-3195 OpenSSL: X509_ATTRIBUTE memory leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-42.el6_7.1","openssl-1:1.0.1e-51.el7_2.1","openssl-0:0.9.8e-37.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-3196","severity":"low","public_date":"2015-12-03T00:00:00Z","advisories":["RHSA-2015:2617","RHSA-2016:2957"],"bugzilla":"1288326","bugzilla_description":"CVE-2015-3196 OpenSSL: Race condition handling PSK identify hint","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-42.el6_7.1","openssl-1:1.0.1e-51.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3196.json"},{"CVE":"CVE-2015-1793","severity":"important","public_date":"2015-07-09T00:00:00Z","advisories":[],"bugzilla":"1238619","bugzilla_description":"CVE-2015-1793 openssl: alternative chains certificate forgery","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1793.json"},{"CVE":"CVE-2015-2721","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1664","RHSA-2015:1185"],"bugzilla":"1236967","bugzilla_description":"CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["nss-0:3.19.1-3.el6_6","nss-0:3.19.1-1.el5_11","nss-0:3.19.1-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2721.json"},{"CVE":"CVE-2015-1788","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":[],"bugzilla":"1228600","bugzilla_description":"CVE-2015-1788 OpenSSL: Malformed ECParameters causes infinite loop","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1788.json"},{"CVE":"CVE-2015-1789","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2015:1197"],"bugzilla":"1228603","bugzilla_description":"CVE-2015-1789 OpenSSL: out-of-bounds read in X509_cmp_time","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11","openssl-0:0.9.8e-36.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1789.json"},{"CVE":"CVE-2015-1790","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2015:1197"],"bugzilla":"1228604","bugzilla_description":"CVE-2015-1790 OpenSSL: PKCS7 crash with missing EnvelopedContent","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11","openssl-0:0.9.8e-36.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1790.json"},{"CVE":"CVE-2015-1792","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115"],"bugzilla":"1228607","bugzilla_description":"CVE-2015-1792 OpenSSL: CMS verify infinite loop with unknown hash function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1792.json"},{"CVE":"CVE-2015-1791","severity":"low","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115"],"bugzilla":"1228608","bugzilla_description":"CVE-2015-1791 OpenSSL: Race condition handling NewSessionTicket","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1791.json"},{"CVE":"CVE-2014-8176","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2016:2957"],"bugzilla":"1228611","bugzilla_description":"CVE-2014-8176 OpenSSL: Invalid free in DTLS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-3216","severity":"low","public_date":"2015-05-28T00:00:00Z","advisories":["RHSA-2015:1115","RHSA-2016:2957"],"bugzilla":"1227574","bugzilla_description":"CVE-2015-3216 openssl: Crash in ssleay_rand_bytes due to locking regression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-1:1.0.1e-42.ael7b_1.8","openssl-0:1.0.1e-30.el6_6.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3216.json"},{"CVE":"CVE-2015-4000","severity":"moderate","public_date":"2015-05-20T00:00:00Z","advisories":["RHSA-2015:1604","RHSA-2015:1526","RHSA-2015:1229","RHSA-2016:2056","RHSA-2015:1228","RHSA-2015:1544","RHSA-2015:1488","RHSA-2015:1486","RHSA-2016:1624","RHSA-2015:1243","RHSA-2015:1485","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1197","RHSA-2015:1230","RHSA-2015:1185","RHSA-2015:1072"],"bugzilla":"1223211","bugzilla_description":"CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":["java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","nss-0:3.19.1-3.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7","java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","nss-0:3.19.1-3.ael7b_1","java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","openssl-0:1.0.1e-30.el6_6.9","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7","java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","openssl-1:1.0.1e-42.ael7b_1.6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.8.0-openjdk-1:1.8.0.51-1.b16.ael7b_1","openssl-0:0.9.8e-36.el5_11","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-2808","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":["RHSA-2015:1526","RHSA-2015:1229","RHSA-2015:1228","RHSA-2015:1091","RHSA-2015:1007","RHSA-2015:1006","RHSA-2015:1243","RHSA-2015:1242","RHSA-2015:1241","RHSA-2015:1230","RHSA-2015:1021","RHSA-2015:1020"],"bugzilla":"1207101","bugzilla_description":"CVE-2015-2808 SSL/TLS: \"Invariance Weakness\" vulnerability in RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1","java-1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6","java-1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11","java-1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6","java-1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1","java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6","java-1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6","java-1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11","java-1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11","java-1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1","java-1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2808.json"},{"CVE":"CVE-2015-0291","severity":"important","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202338","bugzilla_description":"CVE-2015-0291 openssl: ClientHello sigalgs NULL pointer dereference DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0291.json"},{"CVE":"CVE-2015-0290","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202345","bugzilla_description":"CVE-2015-0290 openssl: multiblock corrupted pointer","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0290.json"},{"CVE":"CVE-2015-0207","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202351","bugzilla_description":"CVE-2015-0207 openssl: DTLS segmentation fault in DTLSv1_listen","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0207.json"},{"CVE":"CVE-2015-0286","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0752","RHSA-2016:2957","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202366","bugzilla_description":"CVE-2015-0286 openssl: invalid pointer use in ASN1_TYPE_cmp()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822->CWE-125","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0286.json"},{"CVE":"CVE-2015-0208","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202369","bugzilla_description":"CVE-2015-0208 openssl: segmentation fault for invalid PSS parameters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0208.json"},{"CVE":"CVE-2015-0287","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202380","bugzilla_description":"CVE-2015-0287 openssl: ASN.1 structure reuse memory corruption","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0287.json"},{"CVE":"CVE-2015-0289","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202384","bugzilla_description":"CVE-2015-0289 openssl: PKCS7 NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0289.json"},{"CVE":"CVE-2015-0292","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202395","bugzilla_description":"CVE-2015-0292 openssl: integer underflow leading to buffer overflow in base64 decoding","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-120","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0292.json"},{"CVE":"CVE-2015-0293","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2016:0490","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0445","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1202404","bugzilla_description":"CVE-2015-0293 openssl: assertion failure in SSLv2 servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0293.json"},{"CVE":"CVE-2015-1787","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202406","bugzilla_description":"CVE-2015-1787 openssl: segmentation fault in client authentication with empty CKE and DHE","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1787.json"},{"CVE":"CVE-2015-0285","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202410","bugzilla_description":"CVE-2015-0285 openssl: handshake with unseeded PRNG","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-335","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0285.json"},{"CVE":"CVE-2015-0288","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHEA-2015:1770","RHEA-2015:1771","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202418","bugzilla_description":"CVE-2015-0288 openssl: X509_to_X509_REQ NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0288.json"},{"CVE":"CVE-2009-5146","severity":"moderate","public_date":"2015-03-16T00:00:00Z","advisories":[],"bugzilla":"1203232","bugzilla_description":"CVE-2009-5146 openssl: memory leak in hostname TLS extension","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5146.json"},{"CVE":"CVE-2015-0209","severity":"low","public_date":"2015-02-09T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:0752","RHSA-2016:2957","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1196737","bugzilla_description":"CVE-2015-0209 openssl: use-after-free on invalid EC private key import","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0209.json"},{"CVE":"CVE-2014-3571","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180234","bugzilla_description":"CVE-2014-3571 openssl: DTLS segmentation fault in dtls1_get_record","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3571.json"},{"CVE":"CVE-2015-0206","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180235","bugzilla_description":"CVE-2015-0206 openssl: DTLS memory leak in dtls1_buffer_record","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0206.json"},{"CVE":"CVE-2015-0205","severity":"low","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180239","bugzilla_description":"CVE-2015-0205 openssl: DH client certificates accepted without verification","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0205.json"},{"CVE":"CVE-2014-3570","severity":"low","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2016:1650","RHSA-2015:0066","RHSA-2015:0849"],"bugzilla":"1180240","bugzilla_description":"CVE-2014-3570 openssl: Bignum squaring may produce incorrect results","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3570.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-0204","severity":"moderate","public_date":"2015-01-06T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2016:1650","RHEA-2015:0955","RHSA-2015:0066","RHSA-2015:0849"],"bugzilla":"1180184","bugzilla_description":"CVE-2015-0204 openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"(CWE-327|CWE-757)","affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2014-3572","severity":"low","public_date":"2015-01-05T00:00:00Z","advisories":["RHSA-2015:0066"],"bugzilla":"1180185","bugzilla_description":"CVE-2014-3572 openssl: ECDH downgrade bug fix","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3572.json"},{"CVE":"CVE-2014-8275","severity":"low","public_date":"2015-01-05T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0066"],"bugzilla":"1180187","bugzilla_description":"CVE-2014-8275 openssl: Fix various certificate fingerprint issues","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.1e-30.el6_6.5","openssl-1:1.0.1e-34.el7_0.7","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8275.json"},{"CVE":"CVE-2014-9424","severity":"moderate","public_date":"2014-12-29T00:00:00Z","advisories":[],"bugzilla":"1177569","bugzilla_description":"CVE-2014-9424 libressl: Double-free in ssl_parse_clienthello_use_srtp_ext() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9424.json"},{"CVE":"CVE-2014-8730","severity":"moderate","public_date":"2014-12-09T00:00:00Z","advisories":[],"bugzilla":"1171965","bugzilla_description":"CVE-2014-8730 TLS: incorrect check of padding bytes when using CBC cipher suites","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8730.json"},{"CVE":"CVE-2014-3569","severity":"moderate","public_date":"2014-10-21T00:00:00Z","advisories":[],"bugzilla":"1177249","bugzilla_description":"CVE-2014-3569 openssl: denial of service in ssl23_get_client_hello function","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3569.json"},{"CVE":"CVE-2014-3513","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1652","RHSA-2014:1692"],"bugzilla":"1152953","bugzilla_description":"CVE-2014-3513 openssl: SRTP memory leak causes crash when using specially-crafted handshake message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-30.el6_6.2","openssl-1:1.0.1e-34.el7_0.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3513.json"},{"CVE":"CVE-2014-3567","severity":"moderate","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1652","RHSA-2015:0126","RHSA-2014:1692"],"bugzilla":"1152961","bugzilla_description":"CVE-2014-3567 openssl: Invalid TLS/SSL session tickets could cause memory leak leading to server crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["rhev-hypervisor6-0:6.6-20150123.1.el6ev","openssl-0:1.0.1e-30.el6_6.2","openssl-1:1.0.1e-34.el7_0.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3567.json"},{"CVE":"CVE-2014-3568","severity":"low","public_date":"2014-10-15T00:00:00Z","advisories":[],"bugzilla":"1152967","bugzilla_description":"CVE-2014-3568 openssl: Build option no-ssl3 is incomplete","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3568.json"},{"CVE":"CVE-2014-3566","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2015:1546","RHSA-2015:1545","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2014:1881","RHSA-2014:1880","RHSA-2015:0080","RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2014:1920","RHSA-2015:0067","RHSA-2015:0012","RHSA-2015:0011","RHSA-2015:0264","RHSA-2015:0010","RHSA-2015:0086","RHSA-2015:0085","RHBA-2014:1857"],"bugzilla":"1152789","bugzilla_description":"CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-636|CWE-757)","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","openshift-origin-node-proxy-0:1.16.4.2-1.el6op","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","openshift-origin-node-proxy-0:1.22.3.4-1.el6op","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json"},{"CVE":"CVE-2014-2970","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1118169","bugzilla_description":"CVE-2014-2970 openssl: client-crash when parsing SRP parameters (VU#904060)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2970.json"},{"CVE":"CVE-2014-3508","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127490","bugzilla_description":"CVE-2014-3508 openssl: information leak in pretty printing functions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3508.json"},{"CVE":"CVE-2014-5139","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1127491","bugzilla_description":"CVE-2014-5139 openssl: crash with SRP ciphersuite in Server Hello message","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5139.json"},{"CVE":"CVE-2014-3509","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1052","RHSA-2015:0197","RHSA-2014:1054"],"bugzilla":"1127498","bugzilla_description":"CVE-2014-3509 openssl: race condition in ssl_parse_serverhello_tlsext","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-362","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","spice-client-msi-0:3.5-2","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3509.json"},{"CVE":"CVE-2014-3505","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127499","bugzilla_description":"CVE-2014-3505 openssl: DTLS packet processing double free","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-672","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3505.json"},{"CVE":"CVE-2014-3506","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127500","bugzilla_description":"CVE-2014-3506 openssl: DTLS memory exhaustion","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-862->CWE-400","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3506.json"},{"CVE":"CVE-2014-3507","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1052","RHSA-2014:1054"],"bugzilla":"1127502","bugzilla_description":"CVE-2014-3507 openssl: DTLS memory leak from zero-length fragments","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3507.json"},{"CVE":"CVE-2014-3510","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127503","bugzilla_description":"CVE-2014-3510 openssl: DTLS anonymous (EC)DH denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3510.json"},{"CVE":"CVE-2014-3511","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2015:0126","RHSA-2014:1052","RHSA-2015:0197","RHSA-2014:1054"],"bugzilla":"1127504","bugzilla_description":"CVE-2014-3511 openssl: TLS protocol downgrade attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-390","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","rhev-hypervisor6-0:6.6-20150123.1.el6ev","spice-client-msi-0:3.5-2","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3511.json"},{"CVE":"CVE-2014-3512","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1127505","bugzilla_description":"CVE-2014-3512 openssl: SRP buffer overrun","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3512.json"},{"CVE":"CVE-2014-0224","severity":"important","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0630","RHSA-2014:0631","RHSA-2014:0624","RHSA-2014:0679","RHSA-2014:0632","RHSA-2014:0633","RHSA-2014:0627","RHSA-2014:0628","RHSA-2014:0625","RHSA-2014:0626","RHSA-2014:0629","RHSA-2014:0680"],"bugzilla":"1103586","bugzilla_description":"CVE-2014-0224 openssl: SSL/TLS MITM vulnerability","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-841","affected_packages":["openssl-0:0.9.8e-27.el5_10.3","openssl-0:1.0.1e-16.el6_5.14","openssl097a-0:0.9.7a-12.el5_10.1","openssl098e-0:0.9.8e-18.el6_5.2","openssl-1:1.0.1e-34.el7_0.3","openssl098e-0:0.9.8e-29.el7_0.2","rhev-hypervisor6-0:6.5-20140603.1.el6ev","openssl-0:0.9.8e-26.el5_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0224.json"},{"CVE":"CVE-2014-0221","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625","RHSA-2014:1021","RHSA-2014:1053","RHSA-2014:1086"],"bugzilla":"1103593","bugzilla_description":"CVE-2014-0221 openssl: DoS when sending invalid DTLS handshake","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["openssl-0:0.9.8e-27.el5_10.4","openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0221.json"},{"CVE":"CVE-2014-0195","severity":"important","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1103598","bugzilla_description":"CVE-2014-0195 openssl: Buffer overflow via DTLS invalid fragment","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-119","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0195.json"},{"CVE":"CVE-2014-3470","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1103600","bugzilla_description":"CVE-2014-3470 openssl: client-side denial of service when using anonymous ECDH","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3470.json"},{"CVE":"CVE-2014-0198","severity":"moderate","public_date":"2014-04-21T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1093837","bugzilla_description":"CVE-2014-0198 openssl: SSL_MODE_RELEASE_BUFFERS NULL pointer dereference in do_ssl3_write()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0198.json"},{"CVE":"CVE-2010-5298","severity":"moderate","public_date":"2014-04-08T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1087195","bugzilla_description":"CVE-2010-5298 openssl: freelist misuse causing a possible use-after-free","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5298.json"},{"CVE":"CVE-2014-0160","severity":"important","public_date":"2014-04-07T00:00:00Z","advisories":["RHSA-2014:0377","RHSA-2014:0378","RHSA-2014:0376","RHSA-2014:0416","RHSA-2014:0396"],"bugzilla":"1084875","bugzilla_description":"CVE-2014-0160 openssl: information disclosure in handling of TLS heartbeat extension packets","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-119->CWE-201","affected_packages":["openssl-0:1.0.1e-16.el6_5.7","rhev-hypervisor6-0:6.5-20140118.1.3.2.el6_5","rhev-hypervisor6-0:6.5-20140407.0.el6ev","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0160.json"},{"CVE":"CVE-2014-0076","severity":"moderate","public_date":"2014-02-14T00:00:00Z","advisories":[],"bugzilla":"1080276","bugzilla_description":"CVE-2014-0076 openssl: ECDSA nonces susceptible to Yarom/Benger flush+reload cache side-channel attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0076.json"},{"CVE":"CVE-2013-4353","severity":"moderate","public_date":"2014-01-06T00:00:00Z","advisories":["RHSA-2014:0015","RHSA-2014:0416","RHSA-2014:0041"],"bugzilla":"1049058","bugzilla_description":"CVE-2013-4353 openssl: client NULL dereference crash on malformed handshake packets","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.4","rhev-hypervisor6-0:6.5-20140112.0.el6ev","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4353.json"},{"CVE":"CVE-2013-6449","severity":"important","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0015","RHSA-2014:0041"],"bugzilla":"1045363","bugzilla_description":"CVE-2013-6449 openssl: crash when using TLS 1.2 caused by use of incorrect hash algorithm","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.4","rhev-hypervisor6-0:6.5-20140112.0.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6449.json"},{"CVE":"CVE-2013-6450","severity":"important","public_date":"2013-12-19T00:00:00Z","advisories":["RHSA-2014:0015"],"bugzilla":"1047840","bugzilla_description":"CVE-2013-6450 openssl: crash in DTLS renegotiation after packet loss","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.1e-16.el6_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6450.json"},{"CVE":"CVE-2007-6755","severity":"moderate","public_date":"2013-10-11T00:00:00Z","advisories":[],"bugzilla":"1046045","bugzilla_description":"CVE-2007-6755 Dual_EC_DRBG: weak pseudo random number generator","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6755.json"},{"CVE":"CVE-2013-4314","severity":"moderate","public_date":"2013-09-04T00:00:00Z","advisories":[],"bugzilla":"1005325","bugzilla_description":"CVE-2013-4314 pyOpenSSL: hostname check bypassing vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4314.json"},{"CVE":"CVE-2013-2566","severity":"moderate","public_date":"2013-03-15T00:00:00Z","advisories":[],"bugzilla":"921947","bugzilla_description":"CVE-2013-2566 SSL/TLS: Attack against RC4 stream cipher","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2566.json"},{"CVE":"CVE-2012-2686","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":[],"bugzilla":"908029","bugzilla_description":"CVE-2012-2686 openssl: DoS due to improper handling of CBC ciphersuites in TLS 1.1/1.2 on AES-NI supporting platforms","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2686.json"},{"CVE":"CVE-2013-0166","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":["RHSA-2013:0636","RHSA-2013:0833","RHSA-2013:0587","RHSA-2013:0782","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"908052","bugzilla_description":"CVE-2013-0166 openssl: DoS due to improper handling of OCSP response verification","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0166.json"},{"CVE":"CVE-2013-0169","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0274","RHSA-2013:0273","RHSA-2013:0636","RHSA-2013:0823","RHSA-2013:0833","RHSA-2013:0855","RHSA-2013:0822","RHSA-2013:0587","RHSA-2013:0532","RHSA-2013:1456","RHSA-2014:0416","RHSA-2013:0782","RHSA-2013:0275","RHSA-2013:1455","RHSA-2013:0531","RHSA-2013:0783","RHSA-2013:1013"],"bugzilla":"907589","bugzilla_description":"CVE-2013-0169 SSL/TLS: CBC padding timing attack (lucky-13)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","java-1.7.0-ibm-1:1.7.0.4.2-1jpp.1.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","java-1.6.0-openjdk-1:1.6.0.0-1.56.1.11.8.el6_3","spice-client-msi-0:3.3-12","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el5_9","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el6_3","java-1.6.0-ibm-1:1.6.0.13.2-1jpp.1.el6_4","java-1.5.0-ibm-1:1.5.0.16.2-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.9-2.3.7.1.el5_9","java-1.6.0-sun-1:1.6.0.41-1jpp.1.el5_9","java-1.7.0-oracle-1:1.7.0.15-1jpp.1.el5_9","java-1.6.0-openjdk-1:1.6.0.0-1.35.1.11.8.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0169.json"},{"CVE":"CVE-2012-4929","severity":"moderate","public_date":"2012-09-13T00:00:00Z","advisories":["RHSA-2013:0636","RHSA-2013:0587","RHSA-2014:0416"],"bugzilla":"857051","bugzilla_description":"CVE-2012-4929 SSL/TLS CRIME attack against HTTPS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","openssl-0:1.0.0-27.el6_4.2","openssl-0:0.9.8e-26.el5_9.1","spice-client-msi-0:3.3-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4929.json"},{"CVE":"CVE-2012-2333","severity":"moderate","public_date":"2012-05-10T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:1307","RHSA-2012:0699"],"bugzilla":"820686","bugzilla_description":"CVE-2012-2333 openssl: record length handling integer underflow","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["openssl-0:1.0.0-20.el6_2.5","openssl-0:0.9.8e-22.el5_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2333.json"},{"CVE":"CVE-2012-2131","severity":"important","public_date":"2012-04-23T00:00:00Z","advisories":[],"bugzilla":"815661","bugzilla_description":"CVE-2012-2131 openssl: incomplete fix of CVE-2012-2110 for 0.9.x","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2131.json"},{"CVE":"CVE-2012-2110","severity":"important","public_date":"2012-04-19T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:1307","RHSA-2012:0518","RHSA-2012:0522"],"bugzilla":"814185","bugzilla_description":"CVE-2012-2110 openssl: asn1_d2i_read_bio integer errors leading to buffer overflow","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["openssl-0:0.9.8e-12.el5_6.9","openssl-0:1.0.0-20.el6_2.4","openssl-0:0.9.8e-22.el5_8.3","openssl098e-0:0.9.8e-17.el6_2.2","openssl-0:1.0.0-10.el6_1.6","openssl097a-0:0.9.7a-11.el5_8.2","openssl-0:1.0.0-4.el6_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2110.json"},{"CVE":"CVE-2012-1165","severity":"moderate","public_date":"2012-03-12T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:0426","RHSA-2012:1308","RHSA-2012:1307"],"bugzilla":"802489","bugzilla_description":"CVE-2012-1165 openssl: mime_param_cmp NULL dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-22.el5_8.1","openssl-0:1.0.0-20.el6_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1165.json"},{"CVE":"CVE-2012-0884","severity":"low","public_date":"2012-03-12T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:0426","RHSA-2012:1308","RHSA-2012:1307"],"bugzilla":"802725","bugzilla_description":"CVE-2012-0884 openssl: CMS and PKCS#7 Bleichenbacher attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:0.9.8e-22.el5_8.1","openssl-0:1.0.0-20.el6_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0884.json"},{"CVE":"CVE-2011-4108","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0059"],"bugzilla":"771770","bugzilla_description":"CVE-2011-4108 openssl: DTLS plaintext recovery attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:1.0.0-20.el6_2.1","openssl-0:0.9.8e-20.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4108.json"},{"CVE":"CVE-2011-4109","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0168"],"bugzilla":"771771","bugzilla_description":"CVE-2011-4109 openssl: double-free in policy checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-20.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4109.json"},{"CVE":"CVE-2011-4576","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0109","RHSA-2012:0086","RHSA-2012:0168","RHSA-2012:0059"],"bugzilla":"771775","bugzilla_description":"CVE-2011-4576 openssl: uninitialized SSL 3.0 padding","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openssl-0:0.9.7a-43.18.el4","openssl-0:1.0.0-20.el6_2.1","openssl-0:0.9.8e-20.el5_7.1","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4576.json"},{"CVE":"CVE-2011-4577","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:0109","RHSA-2012:0059"],"bugzilla":"771778","bugzilla_description":"CVE-2011-4577 openssl: malformed RFC 3779 data can cause assertion failures","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.0-20.el6_2.1","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4577.json"},{"CVE":"CVE-2011-4619","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":["RHSA-2012:1306","RHSA-2012:1308","RHSA-2012:0060","RHSA-2012:1307","RHSA-2012:0109","RHSA-2012:0086","RHSA-2012:0168","RHSA-2012:0059"],"bugzilla":"771780","bugzilla_description":"CVE-2011-4619 openssl: SGC restart DoS attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.7a-43.18.el4","openssl-0:1.0.0-20.el6_2.1","openssl-0:0.9.8e-20.el5_7.1","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4619.json"},{"CVE":"CVE-2012-0027","severity":"moderate","public_date":"2012-01-04T00:00:00Z","advisories":[],"bugzilla":"771782","bugzilla_description":"CVE-2012-0027 openssl: invalid GOST parameters DoS attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0027.json"},{"CVE":"CVE-2011-4354","severity":"moderate","public_date":"2011-11-24T00:00:00Z","advisories":[],"bugzilla":"757909","bugzilla_description":"CVE-2011-4354 openssl: ECC private leak (disclosure of TLS server's private key)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4354.json"},{"CVE":"CVE-2011-3389","severity":"moderate","public_date":"2011-09-10T00:00:00Z","advisories":["RHSA-2011:1384","RHSA-2012:0508","RHSA-2011:1380","RHSA-2012:0034","RHSA-2012:0343","RHSA-2013:1455","RHSA-2012:0006"],"bugzilla":"737506","bugzilla_description":"CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6","java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.11.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7","java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2","java-1.4.2-ibm-0:1.4.2.13.11-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3389.json"},{"CVE":"CVE-2011-3210","severity":"moderate","public_date":"2011-09-06T00:00:00Z","advisories":[],"bugzilla":"736079","bugzilla_description":"CVE-2011-3210 openssl: TLS ephemeral ECDH crashes in OpenSSL","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3210.json"},{"CVE":"CVE-2011-3207","severity":"moderate","public_date":"2011-09-06T00:00:00Z","advisories":["RHSA-2011:1409"],"bugzilla":"736087","bugzilla_description":"CVE-2011-3207 openssl: CRL verification vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.0-10.el6_1.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3207.json"},{"CVE":"CVE-2011-1945","severity":"important","public_date":"2011-05-17T00:00:00Z","advisories":[],"bugzilla":"709021","bugzilla_description":"CVE-2011-1945 openssl: ECDSA private key leak through a remote timing attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1945.json"},{"CVE":"CVE-2011-5095","severity":"moderate","public_date":"2011-04-13T00:00:00Z","advisories":[],"bugzilla":"834062","bugzilla_description":"CVE-2011-5095 openssl: weak public value accepted during Diffie Hellman key exchange","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5095.json"},{"CVE":"CVE-2011-1473","severity":"low","public_date":"2011-03-13T00:00:00Z","advisories":[],"bugzilla":"707065","bugzilla_description":"CVE-2011-1473 openssl: DoS via repeated SSL session renegotiations","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1473.json"},{"CVE":"CVE-2011-0014","severity":"moderate","public_date":"2011-02-08T00:00:00Z","advisories":["RHSA-2011:0677"],"bugzilla":"676063","bugzilla_description":"CVE-2011-0014 openssl: OCSP stapling vulnerability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["openssl-0:1.0.0-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0014.json"},{"CVE":"CVE-2012-0050","severity":"important","public_date":"2011-01-18T00:00:00Z","advisories":[],"bugzilla":"782795","bugzilla_description":"CVE-2012-0050 openssl: remote DTLS server DoS introduced in the CVE-2011-4108 fix","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0050.json"},{"CVE":"CVE-2010-4180","severity":"moderate","public_date":"2010-12-02T00:00:00Z","advisories":["RHSA-2010:0979","RHSA-2010:0978","RHSA-2010:0977","RHSA-2011:0896"],"bugzilla":"659462","bugzilla_description":"CVE-2010-4180 openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG ciphersuite downgrade attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openssl-0:1.0.0-4.el6_0.2","openssl-0:0.9.8e-12.el5_5.7","openssl-0:0.9.7a-43.17.el4_8.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4180.json"},{"CVE":"CVE-2008-7270","severity":"moderate","public_date":"2010-12-02T00:00:00Z","advisories":["RHSA-2010:0978","RHSA-2010:0977","RHSA-2011:0896"],"bugzilla":"660650","bugzilla_description":"CVE-2008-7270 openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG downgrade-to-disabled ciphersuite attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5_5.7","openssl-0:0.9.7a-43.17.el4_8.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-7270.json"},{"CVE":"CVE-2010-3864","severity":"important","public_date":"2010-11-16T00:00:00Z","advisories":["RHSA-2010:0888"],"bugzilla":"649304","bugzilla_description":"CVE-2010-3864 OpenSSL TLS extension parsing race condition","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-662->CWE-362->CWE-119","affected_packages":["openssl-0:1.0.0-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3864.json"},{"CVE":"CVE-2010-1633","severity":null,"public_date":"2010-06-01T00:00:00Z","advisories":[],"bugzilla":"598732","bugzilla_description":"CVE-2010-1633 openssl: information leak due to invalid Return value check","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1633.json"},{"CVE":"CVE-2010-0742","severity":null,"public_date":"2010-06-01T00:00:00Z","advisories":[],"bugzilla":"598738","bugzilla_description":"CVE-2010-0742 openssl: invalid ASN1 module definition for CMS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0742.json"},{"CVE":"CVE-2009-3245","severity":"important","public_date":"2010-02-23T00:00:00Z","advisories":["RHSA-2010:0977","RHSA-2011:0896","RHSA-2010:0440","RHSA-2010:0173","RHSA-2010:0162"],"bugzilla":"570924","bugzilla_description":"CVE-2009-3245 openssl: missing bn_wexpand return value checks","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-252->CWE-476","affected_packages":["rhev-hypervisor-0:5.4-2.1.12.1.el5_4rhev2_1","openssl096b-0:0.9.6b-16.50","openssl096b-0:0.9.6b-22.46.el4_8.1","openssl-0:0.9.7a-43.17.el4_8.6","openssl-0:0.9.8e-12.el5_4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3245.json"},{"CVE":"CVE-2010-0433","severity":"moderate","public_date":"2010-01-19T00:00:00Z","advisories":["RHSA-2010:0162"],"bugzilla":"569774","bugzilla_description":"CVE-2010-0433 openssl: crash caused by a missing krb5_sname_to_principal() return value check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5_4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0433.json"},{"CVE":"CVE-2009-4355","severity":"moderate","public_date":"2010-01-13T00:00:00Z","advisories":["RHSA-2010:0054"],"bugzilla":"546707","bugzilla_description":"CVE-2009-4355 openssl significant memory leak in certain SSLv3 requests (DoS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:0.9.8e-12.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4355.json"},{"CVE":"CVE-2009-3555","severity":"moderate","public_date":"2009-11-05T00:00:00Z","advisories":["RHSA-2009:1580","RHSA-2010:0408","RHSA-2010:0768","RHSA-2010:0987","RHSA-2010:0865","RHSA-2010:0986","RHSA-2010:0786","RHSA-2010:0167","RHSA-2010:0166","RHSA-2010:0165","RHSA-2010:0440","RHSA-2010:0164","RHSA-2010:0163","RHSA-2010:0162","RHSA-2009:1579","RHSA-2009:1694","RHSA-2010:0807","RHSA-2010:0119","RHSA-2010:0339","RHSA-2010:0338","RHSA-2010:0337","RHSA-2011:0880","RHSA-2010:0155","RHSA-2010:0770","RHSA-2010:0011","RHSA-2015:1591","RHSA-2010:0130"],"bugzilla":"533125","bugzilla_description":"CVE-2009-3555 TLS: MITM attacks via session renegotiation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-300","affected_packages":["java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el5","httpd-0:2.2.3-31.el5_4.2","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el4","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el5","java-1.4.2-ibm-sap-0:1.4.2.13.6.sap-1jpp.1.el4_8","java-1.4.2-ibm-0:1.4.2.13.4-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.3.el3","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4","openssl-0:0.9.8e-12.el5_4.6","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el4_8","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el5","java-1.5.0-ibm-1:1.5.0.11.1-1jpp.3.el4","java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0","rhev-hypervisor-0:5.4-2.1.12.1.el5_4rhev2_1","java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el4","java-1.6.0-sun-1:1.6.0.19-1jpp.1.el5","openssl097a-0:0.9.7a-9.el5_4.2","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el4","java-1.5.0-sun-0:1.5.0.22-1jpp.3.el5","httpd22-0:2.2.10-25.1.ep5.el4","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.4.2-ibm-0:1.4.2.13.4.sap-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5","httpd-0:2.0.52-41.ent.6","gnutls-0:1.0.20-4.el4_8.7","httpd-0:2.2.10-11.ep5.el5","java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4","java-1.6.0-openjdk-1:1.6.0.0-1.11.b16.el5","java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5","httpd-0:2.0.46-77.ent","java-1.4.2-ibm-0:1.4.2.13.6-1jpp.2.el4","pulp-0:2.6.0.15-1.el7sat","openssl-0:0.9.7a-33.26"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3555.json"},{"CVE":"CVE-2009-2409","severity":"moderate","public_date":"2009-07-29T00:00:00Z","advisories":["RHSA-2009:1184","RHSA-2009:1560","RHSA-2009:1571","RHSA-2009:1186","RHSA-2009:1207","RHSA-2009:1190","RHSA-2010:0166","RHSA-2009:1584","RHSA-2010:0054","RHSA-2009:1432","RHSA-2010:0163","RHSA-2009:1662"],"bugzilla":"510197","bugzilla_description":"CVE-2009-2409 deprecate MD2 in SSL cert validation (Kaminsky)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.17-1jpp.1.el4","seamonkey-0:1.0.9-0.45.el3","java-1.6.0-openjdk-1:1.6.0.0-1.7.b09.el5","nss-0:3.12.3.99.3-1.el4_8.2","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","openssl-0:0.9.8e-12.el5_4.1","openssl-0:0.9.7a-43.17.el4_8.5","gnutls-0:1.4.1-3.el5_4.8","openssl-0:0.9.7a-33.26","nss-0:3.12.3.99.3-1.el5_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2409.json"},{"CVE":"CVE-2009-1386","severity":"moderate","public_date":"2009-06-02T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"503685","bugzilla_description":"CVE-2009-1386 openssl: DTLS NULL deref crash on early ChangeCipherSpec request","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1386.json"},{"CVE":"CVE-2009-1387","severity":"moderate","public_date":"2009-06-02T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"503688","bugzilla_description":"CVE-2009-1387 openssl: DTLS out-of-sequence message handling NULL deref DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1387.json"},{"CVE":"CVE-2009-1377","severity":"moderate","public_date":"2009-05-12T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"501253","bugzilla_description":"CVE-2009-1377 OpenSSL: DTLS epoch record buffer memory DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1377.json"},{"CVE":"CVE-2009-1378","severity":"moderate","public_date":"2009-05-12T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"501254","bugzilla_description":"CVE-2009-1378 OpenSSL: DTLS fragment handling memory DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1378.json"},{"CVE":"CVE-2009-1379","severity":"moderate","public_date":"2009-05-11T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"501572","bugzilla_description":"CVE-2009-1379 OpenSSL: DTLS pointer use-after-free flaw (DoS)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1379.json"},{"CVE":"CVE-2009-0590","severity":"low","public_date":"2009-03-25T00:00:00Z","advisories":["RHSA-2009:1335","RHSA-2010:0163"],"bugzilla":"492304","bugzilla_description":"CVE-2009-0590 openssl: ASN1 printing crash","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["openssl-0:0.9.8e-12.el5","openssl-0:0.9.7a-43.17.el4_8.5","openssl-0:0.9.7a-33.26"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0590.json"},{"CVE":"CVE-2007-4995","severity":"important","public_date":"2007-10-12T00:00:00Z","advisories":["RHSA-2007:0964"],"bugzilla":"321191","bugzilla_description":"CVE-2007-4995 openssl dtls out of order vulnerabilitiy","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssl-0:0.9.8b-8.3.el5_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4995.json"},{"CVE":"CVE-2007-5135","severity":"moderate","public_date":"2007-09-27T00:00:00Z","advisories":["RHSA-2007:1003","RHSA-2007:0964","RHSA-2007:0813"],"bugzilla":"309801","bugzilla_description":"CVE-2007-5135 openssl: SSL_get_shared_ciphers() off-by-one","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["openssl-0:0.9.7a-43.17.el4_6.1","openssl-0:0.9.6b-48","openssl-0:0.9.7a-33.24","openssl-0:0.9.8b-8.3.el5_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5135.json"},{"CVE":"CVE-2007-3108","severity":"moderate","public_date":"2007-08-01T00:00:00Z","advisories":["RHSA-2007:1003","RHSA-2007:0964","RHSA-2007:0813"],"bugzilla":"245732","bugzilla_description":"CVE-2007-3108 openssl: RSA side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssl-0:0.9.7a-43.17.el4_6.1","openssl-0:0.9.6b-48","openssl-0:0.9.7a-33.24","openssl-0:0.9.8b-8.3.el5_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3108.json"},{"CVE":"CVE-2006-7248","severity":"moderate","public_date":"2006-08-29T00:00:00Z","advisories":[],"bugzilla":"798100","bugzilla_description":"CVE-2006-7250 openssl: mime_hdr_cmp NULL dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7248.json"},{"CVE":"CVE-2006-7250","severity":"moderate","public_date":"2006-08-29T00:00:00Z","advisories":["RHSA-2009:1335"],"bugzilla":"798100","bugzilla_description":"CVE-2006-7250 openssl: mime_hdr_cmp NULL dereference crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:0.9.8e-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7250.json"},{"CVE":"CVE-2004-0079","severity":"important","public_date":"2004-03-17T00:00:00Z","advisories":["RHSA-2005:830","RHSA-2005:829","RHSA-2004:120","RHSA-2004:121","RHSA-2004:139"],"bugzilla":"1617140","bugzilla_description":"CVE-2004-0079 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssl096b-0:0.9.6b-22.42","openssl096b-0:0.9.6b-16.42"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0079.json"},{"CVE":"CVE-2000-1254","severity":"moderate","public_date":"2000-06-01T00:00:00Z","advisories":[],"bugzilla":"1333287","bugzilla_description":"CVE-2000-1254 openssl: Mishandling C bitwise-shift operations making easier to bypass protection mechanisms","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2000-1254.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openwsman-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openwsman-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openwsman-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openwsman-python3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openwsman-python3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openwsman-python3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openwsman-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openwsman-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/openwsman-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opus-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opus-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opus-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opus_security_api_results.json
new file mode 100644
index 0000000..7a70907
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/opus_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-0381","severity":"low","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1413604","bugzilla_description":"CVE-2017-0381 opus: Memory corruption during media file and data processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0381.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orc-compiler_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orc-compiler_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orc-compiler_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orc_security_api_results.json
new file mode 100644
index 0000000..41c123b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4245","severity":"moderate","public_date":"2015-02-06T00:00:00Z","advisories":[],"bugzilla":"995060","bugzilla_description":"CVE-2013-4245 orca: Arbitrary code execution due to insecure CWD Python module load","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4245.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orca_security_api_results.json
new file mode 100644
index 0000000..41c123b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/orca_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4245","severity":"moderate","public_date":"2015-02-06T00:00:00Z","advisories":[],"bugzilla":"995060","bugzilla_description":"CVE-2013-4245 orca: Arbitrary code execution due to insecure CWD Python module load","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4245.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/os-maven-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/os-maven-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/os-maven-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/os-maven-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/os-maven-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/os-maven-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/os-prober_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/os-prober_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/os-prober_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osad_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osad_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oscap-anaconda-addon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oscap-anaconda-addon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/oscap-anaconda-addon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-annotation-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-annotation-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-annotation-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-annotation_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-annotation_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-annotation_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-compendium-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-compendium-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-compendium-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-compendium_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-compendium_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-compendium_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-core-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-core-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-core-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osgi-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osinfo-db-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osinfo-db-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osinfo-db-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osinfo-db_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osinfo-db_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/osinfo-db_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree-grub2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree-grub2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree-grub2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree_security_api_results.json
new file mode 100644
index 0000000..91e071e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ostree_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-2623","severity":"moderate","public_date":"2017-03-02T00:00:00Z","advisories":["RHSA-2017:0444"],"bugzilla":"1422157","bugzilla_description":"CVE-2017-2623 rpm-ostree, rpm-ostree-client: fails to check gpg package signatures when layering","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["rpm-ostree-0:2017.1-5.atomic.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/overpass-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/overpass-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/overpass-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/overpass-mono-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/overpass-mono-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/overpass-mono-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/owasp-java-encoder-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/owasp-java-encoder-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/owasp-java-encoder-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/owasp-java-encoder_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/owasp-java-encoder_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/owasp-java-encoder_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit-trust_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit-trust_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit-trust_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/p11-kit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-cluster-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-cluster-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-cluster-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-cts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-cts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-cts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-libs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-libs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-libs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-nagios-plugins-metadata_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-nagios-plugins-metadata_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-nagios-plugins-metadata_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-remote_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-remote_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-remote_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-schemas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-schemas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker-schemas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker_security_api_results.json
new file mode 100644
index 0000000..635f0b5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pacemaker_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-3885","severity":"low","public_date":"2019-04-17T09:45:00Z","advisories":["RHSA-2019:1279","RHSA-2019:1278"],"bugzilla":"1694554","bugzilla_description":"CVE-2019-3885 pacemaker: Information disclosure through use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["pacemaker-0:1.1.19-8.el7_6.5","pacemaker-0:2.0.1-4.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-16877","severity":"important","public_date":"2019-04-17T04:30:00Z","advisories":["RHSA-2019:1279","RHSA-2019:1278"],"bugzilla":"1652646","bugzilla_description":"CVE-2018-16877 pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["pacemaker-0:1.1.19-8.el7_6.5","pacemaker-0:2.0.1-4.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16877.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-16878","severity":"moderate","public_date":"2019-04-17T04:30:00Z","advisories":["RHSA-2019:1279","RHSA-2019:1278"],"bugzilla":"1657962","bugzilla_description":"CVE-2018-16878 pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["pacemaker-0:1.1.19-8.el7_6.5","pacemaker-0:2.0.1-4.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16878.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-7035","severity":"important","public_date":"2016-11-03T00:00:00Z","advisories":["RHSA-2016:2675","RHSA-2016:2614"],"bugzilla":"1369732","bugzilla_description":"CVE-2016-7035 pacemaker: Privilege escalation due to improper guarding of IPC communication","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-285","affected_packages":["pacemaker-0:1.1.14-8.el6_8.2","pacemaker-0:1.1.15-11.el7_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7035.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-7797","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2578"],"bugzilla":"1379784","bugzilla_description":"CVE-2016-7797 pacemaker: pacemaker remote nodes vulnerable to hijacking, resulting in a DoS attack","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["pacemaker-0:1.1.15-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2015-1867","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:2383","RHSA-2015:1424"],"bugzilla":"1211370","bugzilla_description":"CVE-2015-1867 pacemaker: acl read-only access allow role assignment","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-863","affected_packages":["pacemaker-0:1.1.13-10.el7","pacemaker-0:1.1.12-8.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1867.json"},{"CVE":"CVE-2013-0281","severity":"low","public_date":"2013-02-14T00:00:00Z","advisories":["RHSA-2013:1635"],"bugzilla":"891922","bugzilla_description":"CVE-2013-0281 pacemaker: remote DoS when CIB management is enabled caused by use of blocking sockets","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pacemaker-0:1.1.10-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0281.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pakchois_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pakchois_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pakchois_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paktype-naqsh-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paktype-naqsh-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paktype-naqsh-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paktype-naskh-basic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paktype-naskh-basic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paktype-naskh-basic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paktype-tehreer-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paktype-tehreer-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paktype-tehreer-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam_cifscreds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam_cifscreds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam_cifscreds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam_security_api_results.json
new file mode 100644
index 0000000..a18cd37
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10595","severity":"moderate","public_date":"2020-03-31T03:00:00Z","advisories":[],"bugzilla":"1816536","bugzilla_description":"CVE-2020-10595 pam_krb5: incorrect input handling results in single byte buffer overflow which may lead to heap corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10595.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1930","severity":"moderate","public_date":"2020-01-30T00:00:00Z","advisories":[],"bugzilla":"1802977","bugzilla_description":"CVE-2020-1930 spamassassin: command injection via crafted configuration file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1930.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-1931","severity":"moderate","public_date":"2020-01-29T00:00:00Z","advisories":[],"bugzilla":"1802975","bugzilla_description":"CVE-2020-1931 spamassassin: command injection via crafted configuration file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1931.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-11805","severity":"moderate","public_date":"2019-12-12T00:00:00Z","advisories":[],"bugzilla":"1784974","bugzilla_description":"CVE-2018-11805 spamassassin: crafted configuration files can run system commands without any output or errors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11805.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-12420","severity":"moderate","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:3973"],"bugzilla":"1784984","bugzilla_description":"CVE-2019-12420 spamassassin: crafted email message can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":["spamassassin-0:3.4.0-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12420.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-17953","severity":"moderate","public_date":"2018-11-11T00:00:00Z","advisories":[],"bugzilla":"1652593","bugzilla_description":"CVE-2018-17953 pam: pam_access.so doesn't properly handle ip addresses and subnets filtering","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17953.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-15705","severity":"important","public_date":"2018-09-17T00:00:00Z","advisories":["RHSA-2018:2916"],"bugzilla":"1629521","bugzilla_description":"CVE-2017-15705 spamassassin: Certain unclosed tags in crafted emails allow for scan timeouts and result in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["spamassassin-0:3.4.0-4.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-11780","severity":"important","public_date":"2018-09-17T00:00:00Z","advisories":[],"bugzilla":"1629532","bugzilla_description":"CVE-2018-11780 spamassassin: Potential remote code execution vulnerability in PDFInfo plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-11781","severity":"moderate","public_date":"2018-09-17T00:00:00Z","advisories":["RHSA-2018:2916"],"bugzilla":"1629536","bugzilla_description":"CVE-2018-11781 spamassassin: Local user code injection in the meta rule syntax","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["spamassassin-0:3.4.0-4.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11781.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2015-3238","severity":"moderate","public_date":"2015-06-25T00:00:00Z","advisories":["RHSA-2015:1640"],"bugzilla":"1228571","bugzilla_description":"CVE-2015-3238 pam: DoS/user enumeration due to blocking pipe in pam_unix module","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":"CWE-833->CWE-203","affected_packages":["pam-0:1.1.8-12.el7_1.1","pam-0:1.1.1-20.el6_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3238.json"},{"CVE":"CVE-2014-2583","severity":"moderate","public_date":"2014-03-24T00:00:00Z","advisories":[],"bugzilla":"1080243","bugzilla_description":"CVE-2014-2583 pam: path traversal issue in pam_timestamp's format_timestamp_name()","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2583.json"},{"CVE":"CVE-2013-7041","severity":"low","public_date":"2013-12-04T00:00:00Z","advisories":[],"bugzilla":"1038555","bugzilla_description":"CVE-2013-7041 pam: pam_userdb case insensitive password hash comparison","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7041.json"},{"CVE":"CVE-2013-0288","severity":"important","public_date":"2013-02-18T00:00:00Z","advisories":["RHSA-2013:0590"],"bugzilla":"909119","bugzilla_description":"CVE-2013-0288 nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["nss-pam-ldapd-0:0.7.5-18.1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0288.json"},{"CVE":"CVE-2012-1502","severity":"low","public_date":"2012-03-08T00:00:00Z","advisories":[],"bugzilla":"801116","bugzilla_description":"CVE-2012-1502 PyPAM: Double free by processing passwords containing NULL-bytes","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1502.json"},{"CVE":"CVE-2011-3148","severity":"moderate","public_date":"2011-10-24T00:00:00Z","advisories":["RHSA-2013:0521"],"bugzilla":"746619","bugzilla_description":"CVE-2011-3148 pam (pam_env): Stack-based buffer overflow by parsing user's pam_environment file","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["pam-0:1.1.1-13.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3148.json"},{"CVE":"CVE-2011-3149","severity":"low","public_date":"2011-10-24T00:00:00Z","advisories":["RHSA-2013:0521"],"bugzilla":"746620","bugzilla_description":"CVE-2011-3149 pam (pam_env): Infinite loop by expanding certain arguments","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["pam-0:1.1.1-13.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3149.json"},{"CVE":"CVE-2010-3853","severity":"moderate","public_date":"2010-10-22T00:00:00Z","advisories":["RHSA-2010:0819","RHSA-2010:0891"],"bugzilla":"643043","bugzilla_description":"CVE-2010-3853 pam: pam_namespace executes namespace.init with service's environment","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["pam-0:0.99.6.2-6.el5_5.2","pam-0:1.1.1-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3853.json"},{"CVE":"CVE-2010-4706","severity":"low","public_date":"2010-10-03T00:00:00Z","advisories":[],"bugzilla":"672482","bugzilla_description":"CVE-2010-4706 pam: pam_xauth: Improper handling of failure to determine certain target uid","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4706.json"},{"CVE":"CVE-2010-4707","severity":"low","public_date":"2010-10-03T00:00:00Z","advisories":["RHSA-2010:0819","RHSA-2010:0891"],"bugzilla":"672486","bugzilla_description":"CVE-2010-4707 pam: pam_xauth: Does not check if certain ACL file is a regular file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pam-0:0.99.6.2-6.el5_5.2","pam-0:1.1.1-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4707.json"},{"CVE":"CVE-2010-4708","severity":"low","public_date":"2010-09-27T00:00:00Z","advisories":["RHSA-2010:0891"],"bugzilla":"672489","bugzilla_description":"CVE-2010-4708 pam: pam_env: reading ~/.pam_environment is security risk","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P/","CWE":null,"affected_packages":["pam-0:1.1.1-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4708.json"},{"CVE":"CVE-2010-3435","severity":"low","public_date":"2010-09-21T00:00:00Z","advisories":["RHSA-2010:0819","RHSA-2010:0891"],"bugzilla":"641335","bugzilla_description":"CVE-2010-3435 pam: pam_env and pam_mail accessing users' file with root privileges","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["pam-0:0.99.6.2-6.el5_5.2","pam-0:1.1.1-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3435.json"},{"CVE":"CVE-2010-3430","severity":"moderate","public_date":"2010-09-21T00:00:00Z","advisories":[],"bugzilla":"641361","bugzilla_description":"CVE-2010-3430 CVE-2010-3431 pam: pam_mail and pam_env incorrect privilege dropping","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3430.json"},{"CVE":"CVE-2010-3431","severity":"moderate","public_date":"2010-09-21T00:00:00Z","advisories":[],"bugzilla":"641361","bugzilla_description":"CVE-2010-3430 CVE-2010-3431 pam: pam_mail and pam_env incorrect privilege dropping","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3431.json"},{"CVE":"CVE-2010-3316","severity":"moderate","public_date":"2010-07-20T00:00:00Z","advisories":["RHSA-2010:0819","RHSA-2010:0891"],"bugzilla":"637898","bugzilla_description":"CVE-2010-3316 pam: pam_xauth missing return value checks from setuid() and similar calls","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["pam-0:0.99.6.2-6.el5_5.2","pam-0:1.1.1-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3316.json"},{"CVE":"CVE-2009-1384","severity":"low","public_date":"2009-05-27T00:00:00Z","advisories":["RHSA-2010:0258"],"bugzilla":"502602","bugzilla_description":"CVE-2009-1384 pam_krb5: Password prompt varies for existent and non-existent users","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["pam_krb5-0:2.2.14-15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1384.json"},{"CVE":"CVE-2008-3825","severity":"moderate","public_date":"2008-10-01T00:00:00Z","advisories":["RHSA-2008:0907"],"bugzilla":"461960","bugzilla_description":"CVE-2008-3825 pam_krb5 existing_ticket permission flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pam_krb5-0:2.2.14-1.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3825.json"},{"CVE":"CVE-2007-3102","severity":"moderate","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:0540","RHSA-2007:0555","RHSA-2007:0737","RHSA-2007:0703"],"bugzilla":"243204","bugzilla_description":"CVE-2007-3102 audit logging of failed logins","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["openssh-0:3.9p1-8.RHEL4.24","openssh-0:4.3p2-24.el5","pam-0:0.99.6.2-3.26.el5","pam-0:0.77-66.23"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3102.json"},{"CVE":"CVE-2007-2873","severity":"low","public_date":"2007-06-11T00:00:00Z","advisories":["RHSA-2007:0492"],"bugzilla":"243455","bugzilla_description":"CVE-2007-2873 spamassassin symlink attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:3.1.9-1.el5","spamassassin-0:3.1.9-1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2873.json"},{"CVE":"CVE-2007-1716","severity":"low","public_date":"2007-03-03T00:00:00Z","advisories":["RHSA-2007:0465","RHSA-2007:0555","RHSA-2007:0737"],"bugzilla":"1618305","bugzilla_description":"CVE-2007-1716 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pam-0:0.99.6.2-3.26.el5","pam-0:0.77-66.23"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1716.json"},{"CVE":"CVE-2007-0451","severity":"important","public_date":"2007-02-13T00:00:00Z","advisories":["RHSA-2007:0074","RHSA-2007:0075"],"bugzilla":"1618365","bugzilla_description":"CVE-2007-0451 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:3.1.8-2.el5","spamassassin-0:3.1.8-2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0451.json"},{"CVE":"CVE-2006-2447","severity":"moderate","public_date":"2006-06-06T00:00:00Z","advisories":["RHSA-2006:0543"],"bugzilla":"1618105","bugzilla_description":"CVE-2006-2447 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:3.0.6-1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2447.json"},{"CVE":"CVE-2005-2977","severity":"low","public_date":"2005-10-26T00:00:00Z","advisories":["RHSA-2005:805"],"bugzilla":"1617773","bugzilla_description":"CVE-2005-2977 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pam-0:0.77-66.13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2977.json"},{"CVE":"CVE-2005-3351","severity":"moderate","public_date":"2005-09-05T00:00:00Z","advisories":["RHSA-2006:0129"],"bugzilla":"1617815","bugzilla_description":"CVE-2005-3351 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:3.0.5-3.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3351.json"},{"CVE":"CVE-2005-1266","severity":"moderate","public_date":"2005-06-15T00:00:00Z","advisories":["RHSA-2005:498"],"bugzilla":"1617623","bugzilla_description":"CVE-2005-1266 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:3.0.4-1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1266.json"},{"CVE":"CVE-2004-0796","severity":"important","public_date":"2004-08-05T00:00:00Z","advisories":["RHSA-2004:451"],"bugzilla":"1617293","bugzilla_description":"CVE-2004-0796 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:2.55-3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0796.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam_ssh_agent_auth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam_ssh_agent_auth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pam_ssh_agent_auth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pandoc-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pandoc-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pandoc-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pandoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pandoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pandoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pango-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pango-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pango-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pango_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pango_security_api_results.json
new file mode 100644
index 0000000..937e354
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pango_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-1010238","severity":"important","public_date":"2019-08-06T00:00:00Z","advisories":["RHSA-2019:3234","RHSA-2019:2571","RHSA-2019:2582"],"bugzilla":"1737785","bugzilla_description":"CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["pango-0:1.42.4-3.el7_6","pango-0:1.42.4-5.el8_0","pango-0:1.42.4-4.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010238.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-15120","severity":"moderate","public_date":"2018-08-20T00:00:00Z","advisories":[],"bugzilla":"1613550","bugzilla_description":"CVE-2018-15120 pango: application crash triggered by unicode chars in pango-emoji.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15120.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2011-3922","severity":"moderate","public_date":"2012-01-06T00:00:00Z","advisories":["RHSA-2012:0880"],"bugzilla":"772125","bugzilla_description":"CVE-2011-3922 qt: Stack-based buffer overflow in embedded harfbuzz code","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["qt-1:4.6.2-24.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3922.json"},{"CVE":"CVE-2011-3193","severity":"moderate","public_date":"2011-07-19T00:00:00Z","advisories":["RHSA-2011:1323","RHSA-2011:1324","RHSA-2011:1325","RHSA-2011:1326","RHSA-2011:1327","RHSA-2011:1328"],"bugzilla":"733118","bugzilla_description":"CVE-2011-3193 qt/harfbuzz buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qt-1:4.6.2-17.el6_1.1","pango-0:1.14.9-8.el5_7.3","qt4-0:4.2.1-1.el5_7.1","frysk-0:0.0.1.2007.08.03-8.el4","evolution28-pango-0:1.14.9-13.el4_11","qt-1:4.6.2-20.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3193.json"},{"CVE":"CVE-2011-0064","severity":"critical","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0309"],"bugzilla":"678563","bugzilla_description":"CVE-2011-0064 pango: missing memory reallocation failure checking in hb_buffer_ensure","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["pango-0:1.28.1-3.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0064.json"},{"CVE":"CVE-2011-0020","severity":"moderate","public_date":"2011-01-18T00:00:00Z","advisories":["RHSA-2011:0180"],"bugzilla":"671122","bugzilla_description":"CVE-2011-0020 pango: Heap-based buffer overflow by rendering glyph box for certain FT_Bitmap objects","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P/","CWE":"CWE-122","affected_packages":["pango-0:1.14.9-8.el5_6.2","pango-0:1.28.1-3.el6_0.3","evolution28-pango-0:1.14.9-13.el4_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0020.json"},{"CVE":"CVE-2010-0421","severity":"moderate","public_date":"2010-03-15T00:00:00Z","advisories":["RHSA-2010:0140"],"bugzilla":"555831","bugzilla_description":"CVE-2010-0421 libpangoft2 segfaults on forged font files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pango-0:1.14.9-8.el5","pango-0:1.2.5-10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0421.json"},{"CVE":"CVE-2009-1194","severity":"important","public_date":"2009-05-07T00:00:00Z","advisories":["RHSA-2009:0476"],"bugzilla":"496887","bugzilla_description":"CVE-2009-1194 pango: pango_glyph_string_set_size integer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["pango-0:1.2.5-8","pango-0:1.14.9-5.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1194.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pangomm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pangomm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pangomm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pangomm-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pangomm-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pangomm-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pangomm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pangomm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pangomm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi-testsuite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi-testsuite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi-testsuite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/papi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paps-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paps-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paps-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paps_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paps_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paratype-pt-sans-caption-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paratype-pt-sans-caption-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paratype-pt-sans-caption-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paratype-pt-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paratype-pt-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/paratype-pt-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parfait-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parfait-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parfait-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parfait-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parfait-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parfait-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parfait_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parfait_security_api_results.json
new file mode 100644
index 0000000..8fd7cd1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parfait_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9488","severity":"low","public_date":"2020-04-25T00:00:00Z","advisories":["RHSA-2020:3817","RHSA-2020:2391","RHSA-2020:3779","RHSA-2020:3626"],"bugzilla":"1831139","bugzilla_description":"CVE-2020-9488 log4j: improper validation of certificate with host mismatch in SMTP appender","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9488.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-17571","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2638"],"bugzilla":"1785616","bugzilla_description":"CVE-2019-17571 log4j: deserialization of untrusted data in SocketServer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parted-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parted-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parted-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parted_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parted_security_api_results.json
new file mode 100644
index 0000000..97d9383
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/parted_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-17942","severity":"low","public_date":"2018-09-19T00:00:00Z","advisories":[],"bugzilla":"1635896","bugzilla_description":"CVE-2018-17942 gnulib: heap-based buffer overflow in convert_to_decimal function in vasnprintf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/passwd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/passwd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/passwd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/patch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/patch_security_api_results.json
new file mode 100644
index 0000000..2c22950
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/patch_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17571","severity":"important","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2638"],"bugzilla":"1785616","bugzilla_description":"CVE-2019-17571 log4j: deserialization of untrusted data in SocketServer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-20969","severity":"important","public_date":"2019-08-16T00:00:00Z","advisories":["RHSA-2019:2964","RHSA-2019:2798","RHSA-2019:3757","RHSA-2019:4061","RHSA-2019:3758"],"bugzilla":"1746672","bugzilla_description":"CVE-2018-20969 patch: do_ed_script in pch.c does not block strings beginning with a ! character","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["patch-0:2.7.6-9.el8_0","patch-0:2.7.1-11.el7_6","patch-0:2.7.1-11.el7_5","patch-0:2.7.1-11.el7_4","patch-0:2.7.1-12.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20969.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-13638","severity":"important","public_date":"2019-07-29T00:00:00Z","advisories":["RHSA-2019:2964","RHSA-2019:2798","RHSA-2019:3757","RHSA-2019:4061","RHSA-2019:3758"],"bugzilla":"1733916","bugzilla_description":"CVE-2019-13638 patch: OS shell command injection when processing crafted patch files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["patch-0:2.7.6-9.el8_0","patch-0:2.7.1-11.el7_6","patch-0:2.7.1-11.el7_5","patch-0:2.7.1-11.el7_4","patch-0:2.7.1-12.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13638.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-20633","severity":"low","public_date":"2019-07-28T00:00:00Z","advisories":[],"bugzilla":"1818934","bugzilla_description":"CVE-2019-20633 patch: double free in another_hunk function in pch.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20633.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-13636","severity":"moderate","public_date":"2019-07-24T00:00:00Z","advisories":["RHSA-2020:1852"],"bugzilla":"1732781","bugzilla_description":"CVE-2019-13636 patch: the following of symlinks in inp.c and util.c is mishandled in cases other than input files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["patch-0:2.7.6-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-14667","severity":"critical","public_date":"2018-11-06T18:44:00Z","advisories":["RHSA-2018:3581","RHSA-2018:3519","RHSA-2018:3518","RHSA-2018:3517"],"bugzilla":"1639139","bugzilla_description":"CVE-2018-14667 RichFaces: Expression Language injection via UserResource allows for unauthenticated remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["richfaces-0:3.3.1-6.SP3_patch_03.ep5.el6","richfaces-0:3.3.1-9.SP3_patch_03.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14667.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-12533","severity":"critical","public_date":"2018-05-30T00:00:00Z","advisories":["RHSA-2018:2930","RHSA-2018:2663","RHSA-2018:2664"],"bugzilla":"1584490","bugzilla_description":"CVE-2018-12533 RichFaces: Injection of arbitrary EL expressions allows remote code execution via org.richfaces.renderkit.html.Paint2DResource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["richfaces-0:3.3.1-7.SP3_patch_02.ep5.el5","richfaces-0:3.3.1-4.SP3_patch_02.ep5.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12533.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-1000156","severity":"important","public_date":"2018-04-05T00:00:00Z","advisories":["RHSA-2018:2096","RHSA-2018:2097","RHSA-2018:2094","RHSA-2018:2095","RHSA-2018:2092","RHSA-2018:2093","RHSA-2018:2091","RHSA-2018:1200","RHSA-2018:1199"],"bugzilla":"1564326","bugzilla_description":"CVE-2018-1000156 patch: Malicious patch files cause ed to execute arbitrary commands","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["patch-0:2.6-8.el6_9","patch-0:2.7.1-10.el7_2","patch-0:2.6-8.el6_4","patch-0:2.7.1-10.el7_4","patch-0:2.7.1-10.el7_3","patch-0:2.6-8.el6_6","patch-0:2.6-8.el6_5","patch-0:2.7.1-10.el7_5","patch-0:2.6-8.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000156.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-10713","severity":"low","public_date":"2018-02-13T00:00:00Z","advisories":["RHSA-2019:2033"],"bugzilla":"1545405","bugzilla_description":"CVE-2016-10713 patch: Out-of-bounds access in pch_write_line function in pch.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["patch-0:2.7.1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10713.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6951","severity":"low","public_date":"2018-02-03T00:00:00Z","advisories":[],"bugzilla":"1545046","bugzilla_description":"CVE-2018-6951 patch: NULL pointer dereference in pch.c:intuit_diff_type() causes a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6951.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6952","severity":"low","public_date":"2018-02-03T00:00:00Z","advisories":["RHSA-2019:2033"],"bugzilla":"1545053","bugzilla_description":"CVE-2018-6952 patch: Double free of memory in pch.c:another_hunk() causes a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["patch-0:2.7.1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6952.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12617","severity":"important","public_date":"2017-09-21T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2018:0270","RHSA-2018:0271","RHSA-2017:3080","RHSA-2018:0269","RHSA-2018:0465","RHSA-2018:0268","RHSA-2018:0466","RHSA-2018:0275","RHSA-2017:3113","RHSA-2018:2939","RHSA-2017:3114"],"bugzilla":"1494283","bugzilla_description":"CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat6-0:6.0.41-19_patch_04.ep6.el7","tomcat7-0:7.0.54-28_patch_05.ep6.el7","tomcat6-0:6.0.41-19_patch_04.ep6.el6","tomcat7-0:7.0.54-28_patch_05.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","jboss-ec2-eap-0:7.5.19-2.Final_redhat_2.ep6.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","tomcat6-0:6.0.24-111.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12617.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12615","severity":"important","public_date":"2017-09-19T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:3080","RHSA-2018:0465","RHSA-2018:0466","RHSA-2017:3113","RHSA-2017:3114"],"bugzilla":"1493220","bugzilla_description":"CVE-2017-12615 tomcat: Remote Code Execution via JSP Upload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat6-0:6.0.41-19_patch_04.ep6.el7","tomcat7-0:7.0.54-28_patch_05.ep6.el7","tomcat6-0:6.0.41-19_patch_04.ep6.el6","tomcat7-0:7.0.54-28_patch_05.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","tomcat6-0:6.0.24-111.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-5664","severity":"important","public_date":"2017-06-06T00:00:00Z","advisories":["RHSA-2017:2635","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:3080","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2637","RHSA-2017:2638","RHSA-2017:2493","RHSA-2017:2494","RHSA-2017:1809"],"bugzilla":"1459158","bugzilla_description":"CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["tomcat-0:7.0.69-12.el7_3","tomcat8-0:8.0.36-24.ep7.el7","tomcat7-0:7.0.70-22.ep7.el6","tomcat8-0:8.0.36-24.ep7.el6","jbossweb-0:7.5.24-1.Final_redhat_1.1.ep6.el7","tomcat7-0:7.0.70-22.ep7.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el6","tomcat6-0:6.0.24-111.el6_9","tomcat6-0:6.0.41-17_patch_04.ep6.el7","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","tomcat6-0:6.0.41-17_patch_04.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-5647","severity":"important","public_date":"2017-04-10T00:00:00Z","advisories":["RHSA-2017:3081","RHSA-2017:3080","RHSA-2017:1802","RHSA-2017:1801","RHSA-2017:2493","RHSA-2017:2494"],"bugzilla":"1441205","bugzilla_description":"CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["tomcat-0:7.0.76-3.el7_4","tomcat8-0:8.0.36-24.ep7.el7","tomcat7-0:7.0.70-22.ep7.el6","tomcat8-0:8.0.36-24.ep7.el6","tomcat7-0:7.0.70-22.ep7.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el7","tomcat7-0:7.0.54-25_patch_05.ep6.el6","tomcat6-0:6.0.24-111.el6_9","tomcat6-0:6.0.41-17_patch_04.ep6.el7","tomcat6-0:6.0.41-17_patch_04.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-5645","severity":"important","public_date":"2017-04-02T00:00:00Z","advisories":["RHSA-2019:1545","RHSA-2017:3244","RHSA-2017:2423","RHSA-2017:3399","RHSA-2017:3400","RHSA-2017:2888","RHSA-2017:2635","RHSA-2017:2811","RHSA-2017:2889","RHSA-2017:2636","RHSA-2017:2633","RHSA-2017:2810","RHSA-2017:1802","RHSA-2017:1417","RHSA-2017:1801","RHSA-2017:2637","RHSA-2017:2638","RHSA-2017:2808","RHSA-2017:2809"],"bugzilla":"1443635","bugzilla_description":"CVE-2017-5645 log4j: Socket receiver deserialization vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-java-common-log4j-0:1.2.17-15.15.el6","log4j-0:1.2.17-16.el7_4","jboss-ec2-eap-0:7.5.17-1.Final_redhat_4.ep6.el6","log4j-0:1.2.14-19.patch_01.ep5.el5","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el6","log4j-0:1.2.14-19.patch_01.ep5.el6","eap7-jboss-ec2-eap-0:7.0.8-1.GA_redhat_1.ep7.el7","rh-java-common-log4j-0:1.2.17-15.15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5645.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-5388","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2016:2045","RHSA-2016:1624","RHSA-2016:1635","RHSA-2016:1636"],"bugzilla":"1353809","bugzilla_description":"CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.59-51_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5388.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-3092","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:2068","RHSA-2017:0456","RHSA-2017:0455","RHSA-2016:2069","RHSA-2017:0457","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:2071","RHSA-2016:2070","RHSA-2016:2072","RHSA-2016:2599"],"bugzilla":"1349468","bugzilla_description":"CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","jboss-ec2-eap-0:7.5.11-1.Final_redhat_1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3092.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-5174","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2045","RHSA-2016:1432","RHSA-2015:2660","RHBA-2016:0090","RHSA-2015:2661","RHSA-2016:1433","RHSA-2016:2599","RHSA-2016:1434","RHSA-2016:1435","RHSA-2015:2659"],"bugzilla":"1265698","bugzilla_description":"CVE-2015-5174 tomcat: URL Normalization issue","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat7-0:7.0.54-21_patch_05.ep6.el5","tomcat7-0:7.0.54-21_patch_05.ep6.el7","tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-21_patch_05.ep6.el6","tomcat7-0:7.0.59-42_patch_01.ep7.el6","tomcat8-0:8.0.18-52_patch_01.ep7.el6","jboss-ec2-eap-0:7.5.9-2.Final_redhat_2.ep6.el6","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5174.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-5351","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311076","bugzilla_description":"CVE-2015-5351 tomcat: CSRF token leak","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-352","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5351.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-0714","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311082","bugzilla_description":"CVE-2016-0714 tomcat: Security Manager bypass via persistence mechanisms","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-290","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0714.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2015-5346","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087"],"bugzilla":"1311085","bugzilla_description":"CVE-2015-5346 tomcat: Session fixation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-0706","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311087","bugzilla_description":"CVE-2016-0706 tomcat: security manager bypass via StatusManagerServlet","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-287","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-5345","severity":"low","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:2045","RHSA-2016:1089","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311089","bugzilla_description":"CVE-2015-5345 tomcat: directory disclosure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-552","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.59-50_patch_01.ep7.el7","tomcat6-0:6.0.24-98.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-0763","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:1088","RHSA-2016:1089","RHSA-2016:2808","RHSA-2016:2807","RHSA-2016:1087","RHSA-2016:2599"],"bugzilla":"1311093","bugzilla_description":"CVE-2016-0763 tomcat: security manager bypass via setGlobalContext()","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el7","tomcat8-0:8.0.18-61_patch_01.ep7.el7","tomcat7-0:7.0.54-23_patch_05.ep6.el6","tomcat7-0:7.0.59-50_patch_01.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0763.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2014-7810","severity":"moderate","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2016:2046","RHSA-2015:1622","RHSA-2015:1621","RHSA-2016:0492"],"bugzilla":"1222573","bugzilla_description":"CVE-2014-7810 Tomcat/JbossWeb: security manager bypass via EL expressions","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat-0:7.0.54-8.el7_2","tomcat7-0:7.0.54-19_patch_04.ep6.el5","tomcat7-0:7.0.54-19_patch_04.ep6.el6","tomcat6-0:6.0.41-15_patch_04.ep6.el7","tomcat6-0:6.0.24-94.el6_7","tomcat6-0:6.0.41-15_patch_04.ep6.el6","tomcat6-0:6.0.41-15_patch_04.ep6.el5","tomcat7-0:7.0.54-20_patch_04.ep6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7810.json"},{"CVE":"CVE-2015-1396","severity":"moderate","public_date":"2015-01-24T00:00:00Z","advisories":[],"bugzilla":"1186764","bugzilla_description":"CVE-2015-1396 patch: directory traversal via symlinks (incomplete fix for CVE-2015-1196)","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1396.json"},{"CVE":"CVE-2015-1395","severity":"moderate","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1184490","bugzilla_description":"CVE-2015-1395 patch: directory traversal via file rename","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1395.json"},{"CVE":"CVE-2014-9637","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1185262","bugzilla_description":"CVE-2014-9637 patch: local denial of service with a crafted patch","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9637.json"},{"CVE":"CVE-2015-1196","severity":"moderate","public_date":"2015-01-12T00:00:00Z","advisories":[],"bugzilla":"1182154","bugzilla_description":"CVE-2015-1196 patch: directory traversal via symlinks","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1196.json"},{"CVE":"CVE-2014-3577","severity":"important","public_date":"2014-08-18T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2016:1773","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1082","RHSA-2014:1320","RHSA-2014:1166","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1146","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2016:1931","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1834","RHSA-2014:1833","RHSA-2015:1177","RHSA-2014:1836","RHSA-2015:1176","RHSA-2014:1835"],"bugzilla":"1129074","bugzilla_description":"CVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","httpcomponents-client-0:4.2.5-5.el7_0","org.ovirt.engine-root-0:3.5.0-29","jakarta-commons-httpclient-1:3.1-16.el7_0","thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1","jakarta-commons-httpclient-1:3.1-0.9.el6_5","jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2012-6153","severity":"important","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1320","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1098","RHSA-2014:1834","RHSA-2014:1833","RHSA-2014:1836","RHSA-2014:1835"],"bugzilla":"1129916","bugzilla_description":"CVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","devtoolset-2-httpcomponents-client-0:4.2.1-6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","org.ovirt.engine-root-0:3.5.0-29","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6153.json"},{"CVE":"CVE-2014-0230","severity":"low","public_date":"2014-07-19T00:00:00Z","advisories":["RHSA-2016:0595","RHSA-2016:0596","RHSA-2015:1622","RHSA-2015:1621","RHSA-2015:2659","RHSA-2015:2660","RHSA-2015:2661","RHEA-2015:1770","RHSA-2016:0597","RHEA-2015:1771","RHSA-2016:2599","RHSA-2016:0598","RHSA-2016:0599"],"bugzilla":"1191200","bugzilla_description":"CVE-2014-0230 tomcat: non-persistent DoS attack by feeding data by aborting an upload","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["tomcat8-0:8.0.18-25_patch_00.ep7.el6","jbossweb-0:7.5.15-1.Final_redhat_1.1.ep6.el5","jboss-ec2-eap-0:7.5.7-2.Final_redhat_3.ep6.el6","tomcat-0:7.0.69-10.el7","tomcat7-0:7.0.59-26_patch_00.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0230.json"},{"CVE":"CVE-2014-3530","severity":"important","public_date":"2014-07-15T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2015:1888","RHSA-2014:0883","RHSA-2015:0091","RHSA-2014:0884","RHSA-2014:0898","RHSA-2014:0910","RHSA-2014:0885","RHSA-2014:0886","RHSA-2014:0897"],"bugzilla":"1112987","bugzilla_description":"CVE-2014-3530 PicketLink: XXE via insecure DocumentBuilderFactory usage","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-611","affected_packages":["picketlink-federation-0:2.1.5-3_patch_01.ep5.el4","picketlink-federation-0:2.1.5-3_patch_01.ep5.el5","picketlink-federation-0:2.1.5-3_patch_01.el6_5","picketlink-federation-0:2.1.9-5.SP3_redhat_2.1.ep6.el5","picketlink-federation-0:2.1.9-5.SP3_redhat_2.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3530.json"},{"CVE":"CVE-2014-0075","severity":"moderate","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:1149","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1072776","bugzilla_description":"CVE-2014-0075 Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-400","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0075.json"},{"CVE":"CVE-2014-0096","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1088342","bugzilla_description":"CVE-2014-0096 Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0096.json"},{"CVE":"CVE-2014-0099","severity":"moderate","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2014:0895","RHSA-2014:0865","RHSA-2014:0843","RHSA-2014:0833","RHSA-2014:0842","RHSA-2014:1149","RHSA-2014:0836","RHSA-2014:0834","RHSA-2014:0835","RHSA-2014:0827"],"bugzilla":"1102030","bugzilla_description":"CVE-2014-0099 Tomcat/JBossWeb: Request smuggling via malicious content length header","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-190->CWE-444","affected_packages":["jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el5","tomcat7-0:7.0.40-14_patch_03.ep6.el5","tomcat6-0:6.0.24-72.el6_5","tomcat-0:7.0.42-6.el7_0","tomcat6-0:6.0.37-29_patch_05.ep6.el6","tomcat7-0:7.0.40-11_patch_03.ep6.el6","tomcat6-0:6.0.37-20_patch_04.ep6.el5","jbossweb-0:7.3.2-4.Final_redhat_3.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0099.json"},{"CVE":"CVE-2014-0107","severity":"important","public_date":"2014-03-24T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:1290","RHSA-2014:0590","RHSA-2014:1291","RHSA-2015:1888","RHSA-2014:1351","RHSA-2014:0591","RHSA-2014:0454","RHSA-2014:1995","RHSA-2014:1059","RHSA-2014:0453","RHSA-2014:0348","RHSA-2014:1007","RHSA-2014:1369","RHSA-2014:0818","RHSA-2014:0819"],"bugzilla":"1080248","bugzilla_description":"CVE-2014-0107 Xalan-Java: insufficient constraints in secure processing feature","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el5","xalan-j2-0:2.7.0-6jpp.2","xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el6","xalan-j2-0:2.7.1-12_patch_08.ep5.el6","xalan-j2-0:2.7.1-12_patch_08.ep5.el4","xalan-j2-0:2.7.1-12_patch_08.ep5.el5","xalan-j2-0:2.7.0-9.9.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0107.json"},{"CVE":"CVE-2013-4322","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2014:0686","RHSA-2014:0525","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1069905","bugzilla_description":"CVE-2013-4322 tomcat: incomplete fix for CVE-2012-3544","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat-0:7.0.42-5.el7_0","tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4322.json"},{"CVE":"CVE-2013-4590","severity":"low","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2014:1038","RHSA-2014:1088","RHSA-2014:1087","RHSA-2014:1086"],"bugzilla":"1069911","bugzilla_description":"CVE-2013-4590 tomcat: information disclosure via XXE when running untrusted web applications","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["tomcat6-0:6.0.24-78.el6_5","tomcat6-0:6.0.41-5_patch_02.ep6.el6","tomcat7-0:7.0.54-6_patch_02.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4590.json"},{"CVE":"CVE-2014-0033","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2014:0525","RHSA-2014:0528"],"bugzilla":"1069919","bugzilla_description":"CVE-2014-0033 tomcat: session fixation still possible with disableURLRewriting enabled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-384","affected_packages":["tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0033.json"},{"CVE":"CVE-2013-4286","severity":"moderate","public_date":"2014-02-25T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0374","RHSA-2014:0344","RHSA-2014:0686","RHSA-2014:0345","RHSA-2014:0343","RHSA-2014:0458","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0511","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1069921","bugzilla_description":"CVE-2013-4286 tomcat: multiple content-length header poisoning flaws","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat-0:7.0.42-5.el7_0","tomcat6-0:6.0.37-27_patch_04.ep6.el6","jbossweb-0:7.3.1-1.Final_redhat_1.1.ep6.el5","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4286.json"},{"CVE":"CVE-2014-0050","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:0373","RHSA-2014:0252","RHSA-2014:0253","RHSA-2014:0473","RHSA-2014:0400","RHSA-2014:0452","RHSA-2014:0525","RHSA-2014:0459","RHSA-2014:0401","RHSA-2014:0429","RHSA-2014:0528","RHSA-2014:0526","RHSA-2014:0527"],"bugzilla":"1062337","bugzilla_description":"CVE-2014-0050 apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.3.0-2.Final_redhat_2.1.ep6.el6","tomcat6-0:6.0.37-27_patch_04.ep6.el6","tomcat7-0:7.0.40-9_patch_02.ep6.el6","tomcat6-0:6.0.37-19_patch_04.ep6.el5","tomcat7-0:7.0.40-13_patch_02.ep6.el5","tomcat6-0:6.0.24-64.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0050.json"},{"CVE":"CVE-2013-4210","severity":"moderate","public_date":"2013-09-30T00:00:00Z","advisories":["RHSA-2013:1373","RHSA-2013:1374","RHSA-2013:1371","RHSA-2013:1372","RHSA-2013:1370","RHSA-2013:1448","RHSA-2013:1369"],"bugzilla":"994321","bugzilla_description":"CVE-2013-4210 JBoss Remoting: DoS by file descriptor exhaustion","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jboss-remoting-0:2.5.4-11.SP4_patch01.ep5.el5","jboss-remoting-0:2.5.4-11.SP4_patch01.ep5.el6","jboss-remoting-0:2.5.4-11.SP4_patch01.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4210.json"},{"CVE":"CVE-2013-2165","severity":"critical","public_date":"2013-07-10T00:00:00Z","advisories":["RHSA-2013:1043","RHSA-2013:1044","RHSA-2013:1041","RHSA-2013:1042","RHSA-2013:1045"],"bugzilla":"973570","bugzilla_description":"CVE-2013-2165 JBoss RichFaces: Remote code execution due to insecure deserialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["jboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el5","richfaces-0:3.3.1-11.SP3_patch_01.ep5.el4","jboss-seam2-0:2.0.2.FP_SEC1-1.ep2.6.el4","richfaces-0:3.3.1-6.SP3_patch_01.ep5.el5","richfaces-0:3.3.1-3.SP3_patch_01.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2165.json"},{"CVE":"CVE-2013-2172","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:1220","RHSA-2014:0212","RHSA-2014:0400","RHSA-2013:1209","RHSA-2013:1218","RHSA-2013:1207","RHSA-2014:1369","RHSA-2013:1219","RHSA-2013:1208","RHSA-2013:1217","RHSA-2013:1437","RHSA-2013:1853","RHSA-2013:1375"],"bugzilla":"999263","bugzilla_description":"CVE-2013-2172 Apache Santuario XML Security for Java: XML signature spoofing","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-290","affected_packages":["xml-security-0:1.5.1-3_patch01.ep5.el6","xml-security-0:1.5.1-3_patch01.ep5.el5","xml-security-0:1.5.1-3_patch01.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2172.json"},{"CVE":"CVE-2013-1976","severity":"important","public_date":"2013-05-28T00:00:00Z","advisories":["RHSA-2013:0869","RHSA-2013:0870","RHSA-2013:0872","RHSA-2013:0871"],"bugzilla":"927622","bugzilla_description":"CVE-2013-1976 tomcat: Improper TOMCAT_LOG management in init script (DoS, ACE)","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["tomcat7-0:7.0.30-7_patch_03.ep6.el6","tomcat6-0:6.0.35-12_patch_07.ep6.el5","tomcat5-0:5.5.33-36_patch_09.ep5.el6","tomcat6-0:6.0.24-55.el6_4","tomcat6-0:6.0.32-35_patch_09.ep5.el6","tomcat7-0:7.0.30-5_patch_03.ep6.el5","tomcat6-0:6.0.32-32_patch_09.ep5.el5","tomcat6-0:6.0.35-33_patch_07.ep6.el6","tomcat5-0:5.5.23-0jpp.40.el5_9","tomcat5-0:5.5.33-33_patch_09.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1976.json"},{"CVE":"CVE-2013-2067","severity":"moderate","public_date":"2013-05-10T00:00:00Z","advisories":["RHSA-2013:1011","RHSA-2013:0839","RHSA-2013:0834","RHSA-2013:0833","RHSA-2013:1437","RHSA-2013:0964","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"961779","bugzilla_description":"CVE-2013-2067 tomcat: Session fixation in form authenticator","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-384","affected_packages":["tomcat6-0:6.0.37-8_patch_01.ep6.el5","tomcat6-0:6.0.24-57.el6_4","tomcat7-0:7.0.40-9_patch_01.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2067.json"},{"CVE":"CVE-2012-3544","severity":"moderate","public_date":"2013-05-10T00:00:00Z","advisories":["RHSA-2013:1011","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"961783","bugzilla_description":"CVE-2012-3544 tomcat: Limited DoS in chunked transfer encoding input filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.37-8_patch_01.ep6.el5","tomcat7-0:7.0.40-9_patch_01.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3544.json"},{"CVE":"CVE-2013-2071","severity":"low","public_date":"2013-05-10T00:00:00Z","advisories":["RHSA-2013:1011","RHSA-2013:1012","RHSA-2013:1013"],"bugzilla":"961803","bugzilla_description":"CVE-2013-2071 tomcat: Information disclosure in asynchronous context when using AsyncListeners that threw RuntimeExceptions","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat6-0:6.0.37-8_patch_01.ep6.el5","tomcat7-0:7.0.40-9_patch_01.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2071.json"},{"CVE":"CVE-2012-5633","severity":"important","public_date":"2013-02-08T00:00:00Z","advisories":["RHSA-2013:0749","RHSA-2013:0649","RHSA-2013:0726","RHSA-2013:0258","RHSA-2013:0257","RHSA-2013:0645","RHSA-2013:0259","RHSA-2013:0743","RHSA-2013:0644","RHSA-2013:0256"],"bugzilla":"889008","bugzilla_description":"CVE-2012-5633 jbossws-cxf, apache-cxf: Bypass of security constraints on WS endpoints when using WSS4JInInterceptor","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["apache-cxf-0:2.2.12-10.patch_06.ep5.el4","apache-cxf-0:2.4.9-6.redhat_3.ep6.el6","apache-cxf-0:2.4.9-6.redhat_3.ep6.el5","apache-cxf-0:2.2.12-10.patch_06.ep5.el5","apache-cxf-0:2.2.12-10.patch_06.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5633.json"},{"CVE":"CVE-2012-5629","severity":"important","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0230","RHSA-2013:0229","RHSA-2013:0665","RHSA-2013:0533","RHSA-2013:0249","RHSA-2013:0248","RHSA-2013:0232","RHSA-2013:0231","RHSA-2013:0586","RHSA-2013:0234","RHSA-2013:0233"],"bugzilla":"885569","bugzilla_description":"CVE-2012-5629 JBoss: allows empty password to authenticate against LDAP","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-305","affected_packages":["jbossas-0:4.3.0-12.GA_CP10_patch_01.1.ep1.el4","jbossas-0:4.3.0-12.GA_CP10_patch_01.1.ep1.el5","jbosssx2-0:2.0.5-9.SP3_1_patch_01.ep5.el5","jbosssx2-0:2.0.5-9.SP3_1_patch_01.ep5.el4","jbosssx2-0:2.0.5-9.1.SP3_1_patch_01.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5629.json"},{"CVE":"CVE-2012-3546","severity":"important","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0195","RHSA-2013:0151","RHSA-2013:0162","RHSA-2013:0194","RHSA-2013:0197","RHSA-2013:0164","RHSA-2013:0196","RHSA-2013:0163","RHSA-2013:0191","RHSA-2013:0193","RHSA-2013:0192","RHSA-2013:0005","RHSA-2013:0147","RHSA-2013:0158","RHSA-2013:0235","RHSA-2013:0642","RHSA-2013:0004","RHSA-2013:0623","RHSA-2013:0221","RHSA-2013:0198","RHSA-2013:0146","RHSA-2013:0641","RHSA-2013:0157","RHSA-2013:0640"],"bugzilla":"883634","bugzilla_description":"CVE-2012-3546 Tomcat/JBoss Web: Bypass of security constraints","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-31_patch_08.ep5.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossas-0:4.3.0-11.GA_CP10_patch_02.2.ep1.el5","tomcat6-0:6.0.35-6_patch_02.ep6.el5","tomcat6-0:6.0.32-28_patch_08.ep5.el5","jbossas-0:4.3.0-11.GA_CP10_patch_02.1.ep1.el4","tomcat5-0:5.5.33-34_patch_08.ep5.el6","jbossweb-0:7.0.17-3.Final_redhat_2.ep6.el6","jbossweb-0:7.0.17-3.Final_redhat_2.ep6.el5","tomcat6-0:6.0.32-31_patch_08.ep5.el6","tomcat6-0:6.0.24-52.el6_4","tomcat6-0:6.0.35-25_patch_01.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3546.json"},{"CVE":"CVE-2012-4431","severity":"moderate","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0647","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0268","RHSA-2013:1437","RHSA-2013:1853","RHSA-2013:0265","RHSA-2013:0267","RHSA-2013:0266"],"bugzilla":"883636","bugzilla_description":"CVE-2012-4431 Tomcat/JBoss Web - Bypass of CSRF prevention filter","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["tomcat7-0:7.0.30-3_patch_02.ep6.el5","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","tomcat6-0:6.0.35-6_patch_06.ep6.el5","tomcat7-0:7.0.30-5_patch_02.ep6.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4431.json"},{"CVE":"CVE-2012-4534","severity":"moderate","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0623","RHSA-2013:0265","RHSA-2013:0266"],"bugzilla":"883637","bugzilla_description":"CVE-2012-4534 Tomcat - Denial Of Service when using NIO+SSL+sendfile","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.35-6_patch_06.ep6.el5","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4534.json"},{"CVE":"CVE-2012-5885","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5885.json"},{"CVE":"CVE-2012-5886","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5886.json"},{"CVE":"CVE-2012-5887","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0629","RHSA-2013:0647","RHSA-2013:0726","RHSA-2013:0648","RHSA-2013:0665","RHSA-2013:0632","RHSA-2013:0631","RHSA-2013:0623","RHSA-2013:1006","RHSA-2013:0633","RHSA-2013:0265","RHSA-2013:0640","RHSA-2013:0266"],"bugzilla":"873664","bugzilla_description":"CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 tomcat: three DIGEST authentication implementation issues","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el5","tomcat5-0:5.5.23-0jpp.38.el5_9","jbossweb-0:2.1.13-3_patch_02.ep5.el4","jbossweb-0:7.0.17-4.Final_redhat_3.ep6.el6","jbossweb-0:2.1.13-3_patch_02.ep5.el5","tomcat6-0:6.0.35-6_patch_06.ep6.el5","jbossweb-0:2.1.13-4_patch_02.ep5.el6","tomcat6-0:6.0.35-29_patch_06.ep6.el6","tomcat6-0:6.0.24-52.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5887.json"},{"CVE":"CVE-2012-2733","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":["RHSA-2013:0265","RHSA-2013:0266"],"bugzilla":"873695","bugzilla_description":"CVE-2012-2733 tomcat: HTTP NIO connector OOM DoS via a request with large headers","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.35-6_patch_06.ep6.el5","tomcat6-0:6.0.35-29_patch_06.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2733.json"},{"CVE":"CVE-2012-5783","severity":"moderate","public_date":"2012-10-16T00:00:00Z","advisories":["RHSA-2014:0224","RHSA-2013:0681","RHSA-2013:0680","RHSA-2013:0679","RHSA-2013:0270","RHSA-2017:0868","RHSA-2013:0763","RHSA-2013:1006","RHSA-2013:1853","RHSA-2013:0682","RHSA-2013:1147"],"bugzilla":"873317","bugzilla_description":"CVE-2012-5783 jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el4","jakarta-commons-httpclient-1:3.1-2_patch_01.ep5.el6","jakarta-commons-httpclient-1:3.0-7jpp.2","jakarta-commons-httpclient-1:3.1-2.1_patch_01.ep5.el5","jakarta-commons-httpclient-1:3.1-0.7.el6_3","redhat-support-plugin-rhev-0:3.3.0-14.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2012-3451","severity":"moderate","public_date":"2012-09-19T00:00:00Z","advisories":["RHSA-2012:1591","RHSA-2013:0726","RHSA-2012:1592","RHSA-2013:0258","RHSA-2013:0257","RHSA-2012:1594","RHSA-2013:0259","RHSA-2013:0743","RHSA-2013:0256"],"bugzilla":"851896","bugzilla_description":"CVE-2012-3451 jbossws-cxf, apache-cxf: SOAPAction spoofing on document literal web services","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["apache-cxf-0:2.2.12-10.patch_06.ep5.el4","apache-cxf-0:2.2.12-10.patch_06.ep5.el5","apache-cxf-0:2.2.12-10.patch_06.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3451.json"},{"CVE":"CVE-2011-4605","severity":"important","public_date":"2012-06-20T00:00:00Z","advisories":["RHSA-2012:1109","RHSA-2012:1295","RHSA-2012:1232","RHSA-2012:1023","RHSA-2012:1022","RHSA-2012:1025","RHSA-2012:1024","RHSA-2012:1027","RHSA-2012:1026","RHSA-2012:1125","RHSA-2012:1028"],"bugzilla":"766469","bugzilla_description":"CVE-2011-4605 JNDI: unauthenticated remote write access is permitted by default","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":["jbossas-0:4.3.0-10.GA_CP10_patch_01.1.ep1.el4","jbossas-0:4.3.0-10.GA_CP10_patch_01.1.ep1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4605.json"},{"CVE":"CVE-2011-4610","severity":"important","public_date":"2012-01-31T00:00:00Z","advisories":["RHSA-2012:0074","RHSA-2012:0075","RHSA-2012:0076","RHSA-2012:0077","RHSA-2012:0078","RHSA-2012:0325"],"bugzilla":"767871","bugzilla_description":"CVE-2011-4610 JBoss Web remote denial of service when surrogate pair character is placed at buffer boundary","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4610.json"},{"CVE":"CVE-2011-3375","severity":"moderate","public_date":"2012-01-17T00:00:00Z","advisories":["RHSA-2012:0682","RHSA-2012:0681"],"bugzilla":"782624","bugzilla_description":"CVE-2011-3375 tomcat: information disclosure due to improper response and request object recycling","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat6-0:6.0.32-24_patch_07.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3375.json"},{"CVE":"CVE-2012-0022","severity":"moderate","public_date":"2012-01-17T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:1331","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0474","RHSA-2012:0475","RHSA-2012:0345","RHSA-2012:0325","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075"],"bugzilla":"783359","bugzilla_description":"CVE-2012-0022 tomcat: large number of parameters DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat6-0:6.0.24-36.el6_2","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat5-0:5.5.23-0jpp.31.el5_8","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0022.json"},{"CVE":"CVE-2011-5245","severity":"moderate","public_date":"2011-12-30T00:00:00Z","advisories":["RHSA-2012:0519","RHSA-2012:1056","RHSA-2012:1058","RHSA-2012:0441","RHSA-2012:1057","RHSA-2012:0421","RHSA-2012:1059","RHSA-2012:1125","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"785631","bugzilla_description":"CVE-2011-5245 CVE-2012-0818 RESTEasy: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el4","org.ovirt.engine-root-0:3.0.3_0001-3","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el6","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5245.json"},{"CVE":"CVE-2012-0818","severity":"moderate","public_date":"2011-12-30T00:00:00Z","advisories":["RHSA-2013:1263","RHSA-2012:0519","RHSA-2012:1056","RHSA-2012:1058","RHSA-2012:0441","RHSA-2012:1057","RHSA-2012:0421","RHSA-2012:1059","RHSA-2012:1125","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"785631","bugzilla_description":"CVE-2011-5245 CVE-2012-0818 RESTEasy: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el4","org.ovirt.engine-root-0:3.0.3_0001-3","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el6","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0818.json"},{"CVE":"CVE-2011-4858","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0406","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0474","RHSA-2012:0089","RHSA-2012:0475","RHSA-2012:0325","RHSA-2012:0091","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075"],"bugzilla":"750521","bugzilla_description":"CVE-2011-4858 tomcat: hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat6-0:6.0.24-36.el6_2","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat5-0:5.5.23-0jpp.31.el5_8","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4858.json"},{"CVE":"CVE-2011-1184","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1184.json"},{"CVE":"CVE-2011-5062","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5062.json"},{"CVE":"CVE-2011-5063","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5063.json"},{"CVE":"CVE-2011-5064","severity":"moderate","public_date":"2011-09-26T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075","RHSA-2011:1845"],"bugzilla":"741401","bugzilla_description":"CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 tomcat: Multiple weaknesses in HTTP DIGEST authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5064.json"},{"CVE":"CVE-2011-1483","severity":"important","public_date":"2011-09-15T00:00:00Z","advisories":["RHSA-2011:1311","RHSA-2011:1312","RHSA-2011:1301","RHSA-2011:1313","RHSA-2011:1302","RHSA-2011:1303","RHSA-2011:1310","RHSA-2011:1308","RHSA-2011:1309","RHSA-2011:1304","RHSA-2011:1305","RHSA-2011:1306","RHSA-2011:1307"],"bugzilla":"692584","bugzilla_description":"CVE-2011-1483 JBossWS remote Denial of Service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jbossas-0:4.2.0-6.GA_CP09.11.1.ep1.el5","jbossws-common-0:1.1.0-4.SP7_patch_02.1.ep5.el6","jbossws-common-0:1.1.0-4.SP7_patch_02.1.ep5.el4","jbossws-common-0:1.0.0-5.GA_CP07_patch_01.1.ep1.el4","jbossws-common-0:1.1.0-4.SP7_patch_02.1.ep5.el5","jbossws-common-0:1.0.0-5.GA_CP07_patch_01.1.ep1.el5","jbossas-0:4.2.0-6.GA_CP09.11.ep1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1483.json"},{"CVE":"CVE-2012-1154","severity":"moderate","public_date":"2011-08-31T00:00:00Z","advisories":["RHSA-2012:1052","RHSA-2012:1010","RHSA-2012:1053","RHSA-2012:1166","RHSA-2012:1012","RHSA-2012:1011"],"bugzilla":"802200","bugzilla_description":"CVE-2012-1154 mod_cluster registers and exposes the root context of a server by default, despite ROOT being in the excluded-contexts list","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["mod_cluster-0:1.0.10-4.1.GA_CP02_patch01.ep5.el5","mod_cluster-0:1.0.10-4.1.GA_CP02_patch01.ep5.el6","mod_cluster-0:1.0.10-4.GA_CP02_patch01.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1154.json"},{"CVE":"CVE-2011-3190","severity":"moderate","public_date":"2011-08-20T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2011:1780","RHSA-2012:0680","RHSA-2012:0682","RHSA-2012:0681"],"bugzilla":"734868","bugzilla_description":"CVE-2011-3190 tomcat: authentication bypass and information disclosure","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3190.json"},{"CVE":"CVE-2011-2729","severity":"important","public_date":"2011-08-12T00:00:00Z","advisories":["RHSA-2011:1292","RHSA-2011:1291"],"bugzilla":"730400","bugzilla_description":"CVE-2011-2729 jakarta-commons-daemon: jsvc does not drop capabilities allowing access to files and directories owned by the superuser","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["jakarta-commons-daemon-jsvc-1:1.0.5-1.5.patch01.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2729.json"},{"CVE":"CVE-2011-2526","severity":"low","public_date":"2011-07-13T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2012:0076","RHSA-2012:0682","RHSA-2012:0077","RHSA-2012:0681","RHSA-2012:0078","RHSA-2012:0325","RHSA-2012:0091","RHSA-2011:1780","RHSA-2012:0041","RHSA-2012:0074","RHSA-2012:0680","RHSA-2012:0075"],"bugzilla":"720948","bugzilla_description":"CVE-2011-2526 tomcat: security manager restrictions bypass","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el5","jbossweb-0:2.1.12-3_patch_03.2.ep5.el6","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","jbossweb-0:2.1.12-3_patch_03.2.ep5.el4","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2526.json"},{"CVE":"CVE-2011-2204","severity":"low","public_date":"2011-06-27T00:00:00Z","advisories":["RHSA-2012:0679","RHSA-2011:1780","RHSA-2012:0680","RHSA-2012:0682","RHSA-2012:0681","RHSA-2011:1845"],"bugzilla":"717013","bugzilla_description":"CVE-2011-2204 tomcat: password disclosure vulnerability","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.33-27_patch_07.ep5.el5","tomcat5-0:5.5.23-0jpp.22.el5_7","tomcat6-0:6.0.24-35.el6_1","tomcat6-0:6.0.32-24_patch_07.ep5.el6","tomcat6-0:6.0.32-24_patch_07.ep5.el5","tomcat5-0:5.5.33-28_patch_07.ep5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2204.json"},{"CVE":"CVE-2010-3718","severity":"moderate","public_date":"2011-02-05T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2011:0791","RHSA-2011:0897","RHSA-2011:1845"],"bugzilla":"675792","bugzilla_description":"CVE-2010-3718 tomcat: file permission bypass flaw","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["tomcat6-0:6.0.24-33.el6","tomcat5-0:5.5.23-0jpp.22.el5_7","tomcat5-0:5.5.33-14_patch_04.ep5.el4","tomcat5-0:5.5.33-16_patch_04.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3718.json"},{"CVE":"CVE-2010-4476","severity":"moderate","public_date":"2011-02-01T00:00:00Z","advisories":["RHSA-2011:0291","RHSA-2011:0292","RHSA-2011:0282","RHSA-2011:0290","RHSA-2011:0211","RHSA-2011:0299","RHSA-2011:0212","RHSA-2011:0333","RHSA-2011:0334","RHSA-2011:0213","RHSA-2011:0214","RHSA-2011:0335","RHSA-2011:0350","RHSA-2011:0880","RHSA-2011:0210","RHSA-2011:0336","RHSA-2011:0348","RHSA-2011:0349"],"bugzilla":"674336","bugzilla_description":"CVE-2010-4476 JDK Double.parseDouble Denial-Of-Service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-openjdk-1:1.6.0.0-1.18.b17.el5","tomcat6-0:6.0.24-24.el6_0","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4","java-1.4.2-ibm-sap-0:1.4.2.13.8.sap-1jpp.2.el5","tomcat5-0:5.5.23-0jpp.17.el5_6","java-1.6.0-openjdk-1:1.6.0.0-1.36.b17.el6_0","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el4","java-1.4.2-ibm-sap-0:1.4.2.13.8.sap-1jpp.2.el4_8","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el5","tomcat5-0:5.5.28-12_patch_03.ep5.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el4","jbossweb-0:2.1.10-5.patch01.1.1.ep5.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el5","java-1.4.2-ibm-0:1.4.2.13.8-1jpp.3.el5","java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5","java-1.6.0-ibm-1:1.6.0.9.0-1jpp.5.el6","java-1.5.0-ibm-1:1.5.0.12.3-1jpp.3.el6","jbossweb-0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el5","jbossweb-0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el4","tomcat5-0:5.5.28-18_patch_03.ep5.el4","tomcat6-0:6.0.24-11.patch_03.ep5.el5","tomcat6-0:6.0.24-11.patch_03.ep5.el4","jbossweb-0:2.1.10-5.patch01.1.ep5.el4","java-1.4.2-ibm-0:1.4.2.13.8-1jpp.4.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4476.json"},{"CVE":"CVE-2011-0534","severity":"moderate","public_date":"2011-01-21T00:00:00Z","advisories":["RHSA-2011:0335","RHSA-2011:0350","RHSA-2011:0348"],"bugzilla":"675338","bugzilla_description":"CVE-2011-0534 tomcat: remote DoS via NIO connector","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat6-0:6.0.24-24.el6_0","tomcat6-0:6.0.24-11.patch_03.ep5.el5","tomcat6-0:6.0.24-11.patch_03.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0534.json"},{"CVE":"CVE-2010-4651","severity":"low","public_date":"2010-12-30T00:00:00Z","advisories":[],"bugzilla":"667529","bugzilla_description":"CVE-2010-4651 patch: directory traversal flaw allows for arbitrary file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4651.json"},{"CVE":"CVE-2010-2227","severity":"important","public_date":"2010-07-08T00:00:00Z","advisories":["RHSA-2010:0584","RHSA-2010:0693","RHSA-2010:0583","RHSA-2010:0582","RHSA-2010:0581","RHSA-2010:0580"],"bugzilla":"612799","bugzilla_description":"CVE-2010-2227 tomcat: information leak vulnerability in the handling of 'Transfer-Encoding' header","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el4","jbossweb-0:2.0.0-6.CP14.0jpp.ep1.1.el5","tomcat5-0:5.5.23-0jpp_21rh","tomcat5-0:5.5.23-0jpp_4rh.17","tomcat5-0:5.5.23-0jpp_4rh.19","tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5","tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4","tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4","tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5","tomcat5-0:5.5.23-0jpp.9.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2227.json"},{"CVE":"CVE-2008-5515","severity":"important","public_date":"2009-06-08T00:00:00Z","advisories":["RHSA-2009:1617","RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1144","RHSA-2009:1562","RHSA-2009:1143","RHSA-2009:1454","RHSA-2009:1146","RHSA-2009:1563","RHSA-2009:1145"],"bugzilla":"504753","bugzilla_description":"CVE-2008-5515 tomcat request dispatcher information disclosure vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.0.30-0jpp_16rh","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5515.json"},{"CVE":"CVE-2009-0783","severity":"low","public_date":"2009-06-04T00:00:00Z","advisories":["RHSA-2009:1617","RHSA-2009:1164","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1144","RHSA-2009:1562","RHSA-2009:1143","RHSA-2009:1454","RHSA-2009:1146","RHSA-2009:1563","RHSA-2009:1145"],"bugzilla":"504153","bugzilla_description":"CVE-2009-0783 tomcat XML parser information disclosure","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.0.30-0jpp_16rh","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0783.json"},{"CVE":"CVE-2009-0033","severity":"important","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2009:1617","RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1562","RHSA-2009:1454","RHSA-2009:1563"],"bugzilla":"493381","bugzilla_description":"CVE-2009-0033 tomcat6 Denial-Of-Service with AJP connection","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.0.30-0jpp_16rh","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0033.json"},{"CVE":"CVE-2009-0580","severity":"low","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1506","RHSA-2009:1616","RHSA-2009:1144","RHSA-2009:1562","RHSA-2009:1143","RHSA-2009:1454","RHSA-2009:1146","RHSA-2009:1563","RHSA-2009:1145"],"bugzilla":"503978","bugzilla_description":"CVE-2009-0580 tomcat6 Information disclosure in authentication classes","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat6-0:6.0.18-12.0.ep5.el5","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat6-0:6.0.18-11.3.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0580.json"},{"CVE":"CVE-2007-5333","severity":"low","public_date":"2008-02-11T00:00:00Z","advisories":["RHSA-2009:1164","RHSA-2010:0602","RHSA-2009:1616","RHSA-2009:1562","RHSA-2009:1454","RHSA-2009:1563"],"bugzilla":"427766","bugzilla_description":"CVE-2007-5333 Improve cookie parsing for tomcat5","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tomcat5-0:5.5.23-0jpp.7.el5_3.2","tomcat5-0:5.5.23-0jpp_4rh.16","tomcat5-0:5.5.23-0jpp.9.6.ep5.el5","tomcat5-0:5.5.23-1.patch07.19.ep5.el4","tomcat5-0:5.5.23-0jpp_18rh"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5333.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/patchutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/patchutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/patchutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pavucontrol_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pavucontrol_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pavucontrol_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcaudiolib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcaudiolib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcaudiolib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pciutils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pciutils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pciutils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pciutils-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pciutils-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pciutils-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pciutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pciutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pciutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-conf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-conf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-conf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2elasticsearch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2elasticsearch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2elasticsearch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2graphite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2graphite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2graphite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2influxdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2influxdb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2influxdb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2json_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2json_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2json_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2spark_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2spark_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2spark_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2xml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2xml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2xml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2zabbix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2zabbix_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-pcp2zabbix_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-zabbix-agent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-zabbix-agent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-export-zabbix-agent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-collectl2pcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-collectl2pcp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-collectl2pcp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-ganglia2pcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-ganglia2pcp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-ganglia2pcp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-iostat2pcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-iostat2pcp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-iostat2pcp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-mrtg2pcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-mrtg2pcp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-mrtg2pcp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-sar2pcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-sar2pcp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-import-sar2pcp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-libs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-libs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-libs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-manager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-manager_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-manager_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-parfait-agent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-parfait-agent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-parfait-agent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-activemq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-activemq_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-activemq_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-apache_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-apache_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-apache_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bash_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bash_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bash_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bcc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bcc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bcc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bind2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bind2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bind2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bonding_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bonding_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bonding_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bpftrace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bpftrace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-bpftrace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-cifs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-cifs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-cifs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-cisco_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-cisco_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-cisco_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-dbping_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-dbping_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-dbping_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-dm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-dm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-dm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-docker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-docker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-docker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-ds389_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-ds389_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-ds389_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-ds389log_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-ds389log_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-ds389log_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-elasticsearch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-elasticsearch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-elasticsearch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gfs2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gfs2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gfs2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gluster_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gluster_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gluster_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gpfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gpfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gpfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gpsd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gpsd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-gpsd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-haproxy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-haproxy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-haproxy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-infiniband_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-infiniband_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-infiniband_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-json_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-json_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-json_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-libvirt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-libvirt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-libvirt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lmsensors_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lmsensors_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lmsensors_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-logger_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-logger_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-logger_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lustre_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lustre_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lustre_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lustrecomm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lustrecomm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-lustrecomm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mailq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mailq_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mailq_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-memcache_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-memcache_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-memcache_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mounts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mounts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mounts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mssql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mssql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mssql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-named_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-named_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-named_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-netcheck_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-netcheck_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-netcheck_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-netfilter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-netfilter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-netfilter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-news_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-news_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-news_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-nfsclient_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-nfsclient_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-nfsclient_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-nginx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-nginx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-nginx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-nvidia-gpu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-nvidia-gpu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-nvidia-gpu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-openmetrics_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-openmetrics_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-openmetrics_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-oracle_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-oracle_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-oracle_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-pdns_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-pdns_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-pdns_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-perfevent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-perfevent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-perfevent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-podman_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-podman_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-podman_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-postfix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-postfix_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-postfix_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-postgresql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-postgresql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-postgresql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-redis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-redis_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-redis_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-roomtemp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-roomtemp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-roomtemp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-rpm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-rpm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-rpm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-rsyslog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-rsyslog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-rsyslog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-samba_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-samba_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-samba_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-sendmail_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-sendmail_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-sendmail_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-shping_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-shping_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-shping_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-slurm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-slurm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-slurm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-smart_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-smart_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-smart_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-snmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-snmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-snmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-summary_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-summary_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-summary_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-systemd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-systemd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-systemd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-trace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-trace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-trace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-unbound_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-unbound_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-unbound_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-vmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-vmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-vmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-weblog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-weblog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-weblog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-zimbra_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-zimbra_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-zimbra_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-zswap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-zswap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-pmda-zswap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-selinux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-selinux_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-selinux_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-system-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-system-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-system-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-testsuite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-testsuite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-testsuite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-zeroconf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-zeroconf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp-zeroconf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp_security_api_results.json
new file mode 100644
index 0000000..c64214c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2019-3695","severity":"low","public_date":"2019-10-14T00:00:00Z","advisories":["RHSA-2020:3869","RHBA-2020:1628"],"bugzilla":"1811703","bugzilla_description":"CVE-2019-3695 pcp: Local privilege escalation in pcp spec file %post section","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["pcp-0:4.3.2-12.el7","pcp-0:5.0.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3695.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-3696","severity":"low","public_date":"2019-10-14T00:00:00Z","advisories":["RHSA-2020:3869","RHBA-2020:1628"],"bugzilla":"1811707","bugzilla_description":"CVE-2019-3696 pcp: Local privilege escalation in pcp spec file through migrate_tempdirs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["pcp-0:4.3.2-12.el7","pcp-0:5.0.2-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3696.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2012-5530","severity":"low","public_date":"2012-11-18T00:00:00Z","advisories":[],"bugzilla":"875842","bugzilla_description":"CVE-2012-5530 pcp: Insecure temporary file use flaws","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5530.json"},{"CVE":"CVE-2012-3418","severity":"important","public_date":"2012-08-16T00:00:00Z","advisories":[],"bugzilla":"841698","bugzilla_description":"CVE-2012-3418 pcp: multiple integer and heap-based buffer overflow flaws","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3418.json"},{"CVE":"CVE-2012-3419","severity":"moderate","public_date":"2012-08-16T00:00:00Z","advisories":[],"bugzilla":"841702","bugzilla_description":"CVE-2012-3419 pcp: privileged information diclosure flaw","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3419.json"},{"CVE":"CVE-2012-3420","severity":"moderate","public_date":"2012-08-16T00:00:00Z","advisories":[],"bugzilla":"841704","bugzilla_description":"CVE-2012-3420 pcp: two memory leaks can lead to pcmd crash or trigger OOM killer","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3420.json"},{"CVE":"CVE-2012-3421","severity":"moderate","public_date":"2012-08-16T00:00:00Z","advisories":[],"bugzilla":"841706","bugzilla_description":"CVE-2012-3421 pcp: event-driven programming flaw blocks pmcd from responding to other legitimate requests","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3421.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-cpp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-cpp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-cpp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-utf16_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-utf16_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-utf16_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-utf32_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-utf32_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre-utf32_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2-utf16_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2-utf16_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2-utf16_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2-utf32_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2-utf32_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2-utf32_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2_security_api_results.json
new file mode 100644
index 0000000..4e0c1d7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-11164","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":[],"bugzilla":"1470107","bugzilla_description":"CVE-2017-11164 pcre: OP_KETRMAX feature in the match function in pcre_exec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7244","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437364","bugzilla_description":"CVE-2017-7244 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7245","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437367","bugzilla_description":"CVE-2017-7245 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7246","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437369","bugzilla_description":"CVE-2017-7246 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-8786","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1500717","bugzilla_description":"CVE-2017-8786 pcre2: Heap-based buffer overflow in pcre2test.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8786.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8399","severity":"moderate","public_date":"2017-03-10T00:00:00Z","advisories":[],"bugzilla":"1449629","bugzilla_description":"CVE-2017-8399 pcre2: Stack-based buffer overflow in pcre2_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7186","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1434504","bugzilla_description":"CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre_security_api_results.json
new file mode 100644
index 0000000..b5ab610
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcre_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14155","severity":"low","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1848436","bugzilla_description":"CVE-2020-14155 pcre: integer overflow in libpcre","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14155.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-20838","severity":"low","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1848444","bugzilla_description":"CVE-2019-20838 pcre: buffer over-read in JIT when UTF is disabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20838.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16231","severity":null,"public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1700392","bugzilla_description":"CVE-2017-16231 pcre: self-recursive call in match() in pcre_exec.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11164","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":[],"bugzilla":"1470107","bugzilla_description":"CVE-2017-11164 pcre: OP_KETRMAX feature in the match function in pcre_exec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7244","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437364","bugzilla_description":"CVE-2017-7244 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7245","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437367","bugzilla_description":"CVE-2017-7245 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7246","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437369","bugzilla_description":"CVE-2017-7246 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-8786","severity":"low","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1500717","bugzilla_description":"CVE-2017-8786 pcre2: Heap-based buffer overflow in pcre2test.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8786.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8399","severity":"moderate","public_date":"2017-03-10T00:00:00Z","advisories":[],"bugzilla":"1449629","bugzilla_description":"CVE-2017-8399 pcre2: Stack-based buffer overflow in pcre2_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7186","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1434504","bugzilla_description":"CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-6004","severity":"moderate","public_date":"2017-02-14T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1425365","bugzilla_description":"CVE-2017-6004 pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-9769","severity":"moderate","public_date":"2016-03-23T00:00:00Z","advisories":[],"bugzilla":"1320995","bugzilla_description":"CVE-2014-9769 pcre: incorrect nested table jumps when JIT is used (8.36/6)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9769.json"},{"CVE":"CVE-2016-3191","severity":"important","public_date":"2016-02-09T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1025"],"bugzilla":"1311503","bugzilla_description":"CVE-2016-3191 pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3191.json"},{"CVE":"CVE-2016-1283","severity":"important","public_date":"2016-01-04T00:00:00Z","advisories":["RHSA-2016:1132"],"bugzilla":"1295385","bugzilla_description":"CVE-2016-1283 pcre: heap buffer overflow in handling of duplicate named groups (8.39/14)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1283.json"},{"CVE":"CVE-2015-8383","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287614","bugzilla_description":"CVE-2015-8383 pcre: Buffer overflow caused by repeated conditional group (8.38/3)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8383.json"},{"CVE":"CVE-2015-3210","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3210.json"},{"CVE":"CVE-2015-8384","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8384.json"},{"CVE":"CVE-2015-8385","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287629","bugzilla_description":"CVE-2015-8385 pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8385.json"},{"CVE":"CVE-2015-8386","severity":"low","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287636","bugzilla_description":"CVE-2015-8386 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8386.json"},{"CVE":"CVE-2015-8387","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287646","bugzilla_description":"CVE-2015-8387 pcre: Integer overflow in subroutine calls (8.38/8)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8387.json"},{"CVE":"CVE-2015-8389","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287659","bugzilla_description":"CVE-2015-8389 pcre: infinite recursion in JIT compiler when processing certain patterns (8.38/21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8389.json"},{"CVE":"CVE-2015-8390","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287666","bugzilla_description":"CVE-2015-8390 pcre: uninitialized memory read triggered by malformed posix character class (8.38/22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8390.json"},{"CVE":"CVE-2015-8391","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287671","bugzilla_description":"CVE-2015-8391 pcre: inefficient posix character class syntax check (8.38/16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8391.json"},{"CVE":"CVE-2015-8392","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287690","bugzilla_description":"CVE-2015-8392 pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8392.json"},{"CVE":"CVE-2015-8393","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287695","bugzilla_description":"CVE-2015-8393 pcre: pcregrep -q is not always quiet (8.38/28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8393.json"},{"CVE":"CVE-2015-8394","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287702","bugzilla_description":"CVE-2015-8394 pcre: Integer overflow caused by missing check for certain conditions (8.38/31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8394.json"},{"CVE":"CVE-2015-8381","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8381.json"},{"CVE":"CVE-2015-8395","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8395.json"},{"CVE":"CVE-2015-5073","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5073.json"},{"CVE":"CVE-2015-8388","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8388.json"},{"CVE":"CVE-2015-3217","severity":"moderate","public_date":"2015-06-03T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1228283","bugzilla_description":"CVE-2015-3217 pcre: stack overflow caused by mishandled group empty match (8.38/11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3217.json"},{"CVE":"CVE-2015-8380","severity":null,"public_date":"2015-06-01T00:00:00Z","advisories":[],"bugzilla":"1285413","bugzilla_description":"CVE-2015-8380 pcre: OOB write when pcre_exec() is called with ovecsize of 1 (8.38/10)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8380.json"},{"CVE":"CVE-2015-2325","severity":"important","public_date":"2015-03-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1207198","bugzilla_description":"CVE-2015-2325 pcre: heap buffer overflow in compile_branch()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2325.json"},{"CVE":"CVE-2015-2326","severity":"moderate","public_date":"2015-03-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1207202","bugzilla_description":"CVE-2015-2326 pcre: heap buffer over-read in pcre_compile2() (8.37/23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2326.json"},{"CVE":"CVE-2015-8382","severity":"low","public_date":"2015-02-03T00:00:00Z","advisories":[],"bugzilla":"1187225","bugzilla_description":"CVE-2015-8382 php: Regular Expression Uninitialized Pointer Information Disclosure Vulnerability (ZDI-CAN-2547)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8382.json"},{"CVE":"CVE-2014-8964","severity":"low","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2015:0330"],"bugzilla":"1166147","bugzilla_description":"CVE-2014-8964 pcre: incorrect handling of zero-repeat assertion conditions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":["pcre-0:8.32-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8964.json"},{"CVE":"CVE-2015-2328","severity":"moderate","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1285399","bugzilla_description":"CVE-2015-2328 pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2328.json"},{"CVE":"CVE-2015-2327","severity":"moderate","public_date":"2014-07-11T00:00:00Z","advisories":["RHBA-2015:2142","RHSA-2016:2750"],"bugzilla":"1285408","bugzilla_description":"CVE-2015-2327 pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2327.json"},{"CVE":"CVE-2006-7230","severity":"important","public_date":"2007-11-20T00:00:00Z","advisories":["RHSA-2007:1059","RHSA-2007:1068"],"bugzilla":"384801","bugzilla_description":"CVE-2006-7230 pcre miscalculation of memory requirements if options are changed during pattern compilation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pcre-0:6.6-2.el5_1.7","pcre-0:4.5-4.el4_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7230.json"},{"CVE":"CVE-2006-7225","severity":"important","public_date":"2007-11-13T00:00:00Z","advisories":["RHSA-2007:1059","RHSA-2007:1068"],"bugzilla":"384761","bugzilla_description":"CVE-2006-7225 pcre miscalculation of memory requirements for malformed Posix character class","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pcre-0:6.6-2.el5_1.7","pcre-0:4.5-4.el4_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7225.json"},{"CVE":"CVE-2006-7226","severity":"important","public_date":"2007-11-13T00:00:00Z","advisories":["RHSA-2007:1059","RHSA-2007:1068"],"bugzilla":"384781","bugzilla_description":"CVE-2006-7226 pcre miscalculation of memory requirements for repeated subpattern containing a named recursion or subroutine reference","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pcre-0:6.6-2.el5_1.7","pcre-0:4.5-4.el4_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7226.json"},{"CVE":"CVE-2006-7227","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1052"],"bugzilla":"383341","bugzilla_description":"CVE-2006-7227 pcre integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["pcre-0:6.6-2.el5_1.1","pcre-0:4.5-4.el4_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7227.json"},{"CVE":"CVE-2005-4872","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1052"],"bugzilla":"383361","bugzilla_description":"CVE-2005-4872 pcre incorrect memory requirement computation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pcre-0:6.6-2.el5_1.1","pcre-0:4.5-4.el4_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4872.json"},{"CVE":"CVE-2006-7228","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1077","RHSA-2007:1065","RHSA-2007:1076","RHSA-2007:1059","RHSA-2007:1068","RHSA-2007:1063","RHSA-2008:0546"],"bugzilla":"383371","bugzilla_description":"CVE-2006-7228 pcre integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["pcre-0:3.4-2.4","pcre-0:3.9-10.4","python-0:2.3.4-14.4.el4_6.1","pcre-0:6.6-2.el5_1.7","python-0:1.5.2-43.72.2","pcre-0:4.5-4.el4_6.6","php-0:4.1.2-2.20","python-0:2.2.3-6.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7228.json"},{"CVE":"CVE-2007-1659","severity":"critical","public_date":"2007-11-05T00:00:00Z","advisories":["RHSA-2007:1068","RHSA-2007:0967"],"bugzilla":"315871","bugzilla_description":"CVE-2007-1659 pcre regular expression flaws","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pcre-0:6.6-2.el5_0.1","pcre-0:4.5-4.el4_6.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1659.json"},{"CVE":"CVE-2007-1660","severity":"important","public_date":"2007-11-05T00:00:00Z","advisories":["RHSA-2007:1065","RHSA-2007:1063","RHSA-2007:0968","RHSA-2008:0546","RHSA-2007:0967"],"bugzilla":"315881","bugzilla_description":"CVE-2007-1660 pcre regular expression flaws","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pcre-0:6.6-2.el5_0.1","pcre-0:3.4-2.4","pcre-0:3.9-10.4","php-0:4.1.2-2.20","pcre-0:4.5-4.el4_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1660.json"},{"CVE":"CVE-2005-2491","severity":"moderate","public_date":"2005-08-01T00:00:00Z","advisories":["RHSA-2005:358","RHSA-2005:761","RHSA-2006:0197"],"bugzilla":"430638","bugzilla_description":"CVE-2005-2491 pcre heap overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python-0:2.2.3-6.2","exim-0:4.43-1.RHEL4.5","python-0:2.3.4-14.2","pcre-0:3.9-10.2","pcre-0:4.5-3.2.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2491.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcs-snmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcs-snmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcs-snmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcs_security_api_results.json
new file mode 100644
index 0000000..706d18a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-10663","severity":"moderate","public_date":"2020-03-19T00:00:00Z","advisories":["RHSA-2020:2462","RHSA-2020:2473","RHSA-2020:2670"],"bugzilla":"1827500","bugzilla_description":"CVE-2020-10663 rubygem-json: Unsafe Object Creation Vulnerability in JSON","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-94","affected_packages":["pcs-0:0.10.1-4.el8_0.5","pcs-0:0.10.2-4.el8_1.1","pcs-0:0.10.4-6.el8_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-11627","severity":"moderate","public_date":"2018-05-22T00:00:00Z","advisories":["RHSA-2019:0212","RHSA-2019:0315"],"bugzilla":"1585218","bugzilla_description":"CVE-2018-11627 rubygem-sinatra: XSS in the 400 Bad Request page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-1079","severity":"important","public_date":"2018-04-09T00:00:00Z","advisories":["RHSA-2018:1060"],"bugzilla":"1550243","bugzilla_description":"CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["pcs-0:0.9.162-5.el7_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1079.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H","cvss3_score":"8.7"},{"CVE":"CVE-2018-1086","severity":"moderate","public_date":"2018-04-09T00:00:00Z","advisories":["RHSA-2018:1060","RHSA-2018:1927"],"bugzilla":"1557366","bugzilla_description":"CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["pcs-0:0.9.162-5.el7_5.1","pcs-0:0.9.155-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-7212","severity":"low","public_date":"2018-02-18T00:00:00Z","advisories":[],"bugzilla":"1802282","bugzilla_description":"CVE-2018-7212 rubygem-sinatra: path traversal via backslash characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7212.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-10109","severity":"moderate","public_date":"2016-12-30T00:00:00Z","advisories":[],"bugzilla":"1410074","bugzilla_description":"CVE-2016-10109 pcsc-lite: Use-after-free of cardsList due to SCardReleaseContext invocations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10109.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-0720","severity":"moderate","public_date":"2016-02-16T00:00:00Z","advisories":["RHSA-2016:2596"],"bugzilla":"1299614","bugzilla_description":"CVE-2016-0720 pcs: Cross-Site Request Forgery in web UI","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["pcs-0:0.9.152-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0720.json"},{"CVE":"CVE-2016-0721","severity":"moderate","public_date":"2016-02-16T00:00:00Z","advisories":["RHSA-2016:2596"],"bugzilla":"1299615","bugzilla_description":"CVE-2016-0721 pcs: cookies are not invalidated upon logout","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-613->CWE-384","affected_packages":["pcs-0:0.9.152-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0721.json"},{"CVE":"CVE-2015-5189","severity":"moderate","public_date":"2015-09-01T00:00:00Z","advisories":["RHSA-2015:1700"],"bugzilla":"1252805","bugzilla_description":"CVE-2015-5189 pcs: Incorrect authorization when using pcs web UI","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-863","affected_packages":["pcs-0:0.9.139-9.el6_7.1","pcs-0:0.9.137-13.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5189.json"},{"CVE":"CVE-2015-5190","severity":"important","public_date":"2015-09-01T00:00:00Z","advisories":["RHSA-2015:1700"],"bugzilla":"1252813","bugzilla_description":"CVE-2015-5190 pcs: Command injection with root privileges.","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["pcs-0:0.9.139-9.el6_7.1","pcs-0:0.9.137-13.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5190.json"},{"CVE":"CVE-2015-9251","severity":"moderate","public_date":"2015-06-27T00:00:00Z","advisories":["RHSA-2020:0481","RHSA-2020:0729","RHSA-2020:3936","RHSA-2020:0983"],"bugzilla":"1399546","bugzilla_description":"CVE-2015-9251 js-jquery: Cross-site scripting via cross-domain ajax requests","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2015-3225","severity":"moderate","public_date":"2015-06-16T00:00:00Z","advisories":["RHBA-2018:0337","RHSA-2015:2290"],"bugzilla":"1232292","bugzilla_description":"CVE-2015-3225 rubygem-rack: Potential Denial of Service Vulnerability in Rack normalize_params()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["rubygem-rack-1:1.6.4-2.el7sat","pcs-0:0.9.143-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3225.json"},{"CVE":"CVE-2018-1000119","severity":"moderate","public_date":"2015-05-25T00:00:00Z","advisories":["RHSA-2018:1060"],"bugzilla":"1534027","bugzilla_description":"CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["pcs-0:0.9.162-5.el7_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000119.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-1848","severity":"important","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0980","RHSA-2015:0990"],"bugzilla":"1208294","bugzilla_description":"CVE-2015-1848 CVE-2015-3983 pcs: improper web session variable signing","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-347","affected_packages":["pcs-0:0.9.123-9.el6_6.2","pcs-0:0.9.137-13.el7_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1848.json"},{"CVE":"CVE-2015-3983","severity":"important","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0980","RHSA-2015:0990"],"bugzilla":"1208294","bugzilla_description":"CVE-2015-1848 CVE-2015-3983 pcs: improper web session variable signing","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-347","affected_packages":["pcs-0:0.9.123-9.el6_6.2","pcs-0:0.9.137-13.el7_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3983.json"},{"CVE":"CVE-2010-4531","severity":"moderate","public_date":"2010-12-13T00:00:00Z","advisories":["RHSA-2013:0525"],"bugzilla":"664999","bugzilla_description":"CVE-2010-4531 pcsc-lite: Stack-based buffer overflow in Answer-to-Reset (ATR) decoder","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["pcsc-lite-0:1.5.2-11.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4531.json"},{"CVE":"CVE-2009-4901","severity":"moderate","public_date":"2010-06-10T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2010:0533"],"bugzilla":"596426","bugzilla_description":"CVE-2009-4901 CVE-2009-4902 CVE-2010-0407 pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["pcsc-lite-0:1.3.3-3.el4","pcsc-lite-0:1.4.4-4.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4901.json"},{"CVE":"CVE-2009-4902","severity":"moderate","public_date":"2010-06-10T00:00:00Z","advisories":[],"bugzilla":"596426","bugzilla_description":"CVE-2009-4901 CVE-2009-4902 CVE-2010-0407 pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4902.json"},{"CVE":"CVE-2010-0407","severity":"moderate","public_date":"2010-06-10T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2010:0533"],"bugzilla":"596426","bugzilla_description":"CVE-2009-4901 CVE-2009-4902 CVE-2010-0407 pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["pcsc-lite-0:1.3.3-3.el4","pcsc-lite-0:1.4.4-4.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0407.json"},{"CVE":"CVE-2017-2661","severity":"low","public_date":null,"advisories":[],"bugzilla":"1428948","bugzilla_description":"CVE-2017-2661 pcs: Improper node name field validation when creating clusters leads to XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2661.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-ccid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-ccid_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-ccid_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite_security_api_results.json
new file mode 100644
index 0000000..f37911e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pcsc-lite_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10109","severity":"moderate","public_date":"2016-12-30T00:00:00Z","advisories":[],"bugzilla":"1410074","bugzilla_description":"CVE-2016-10109 pcsc-lite: Use-after-free of cardsList due to SCardReleaseContext invocations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10109.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2010-4531","severity":"moderate","public_date":"2010-12-13T00:00:00Z","advisories":["RHSA-2013:0525"],"bugzilla":"664999","bugzilla_description":"CVE-2010-4531 pcsc-lite: Stack-based buffer overflow in Answer-to-Reset (ATR) decoder","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["pcsc-lite-0:1.5.2-11.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4531.json"},{"CVE":"CVE-2009-4901","severity":"moderate","public_date":"2010-06-10T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2010:0533"],"bugzilla":"596426","bugzilla_description":"CVE-2009-4901 CVE-2009-4902 CVE-2010-0407 pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["pcsc-lite-0:1.3.3-3.el4","pcsc-lite-0:1.4.4-4.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4901.json"},{"CVE":"CVE-2009-4902","severity":"moderate","public_date":"2010-06-10T00:00:00Z","advisories":[],"bugzilla":"596426","bugzilla_description":"CVE-2009-4901 CVE-2009-4902 CVE-2010-0407 pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4902.json"},{"CVE":"CVE-2010-0407","severity":"moderate","public_date":"2010-06-10T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2010:0533"],"bugzilla":"596426","bugzilla_description":"CVE-2009-4901 CVE-2009-4902 CVE-2010-0407 pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["pcsc-lite-0:1.3.3-3.el4","pcsc-lite-0:1.4.4-4.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0407.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pentaho-libxml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pentaho-libxml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pentaho-libxml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pentaho-reporting-flow-engine_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pentaho-reporting-flow-engine_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pentaho-reporting-flow-engine_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perftest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perftest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perftest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/peripety_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/peripety_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/peripety_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Algorithm-Diff_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Algorithm-Diff_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Algorithm-Diff_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-AnyEvent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-AnyEvent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-AnyEvent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-App-cpanminus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-App-cpanminus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-App-cpanminus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Archive-Tar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Archive-Tar_security_api_results.json
new file mode 100644
index 0000000..8a66389
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Archive-Tar_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10860","severity":"moderate","public_date":"2018-06-28T00:00:00Z","advisories":[],"bugzilla":"1591449","bugzilla_description":"CVE-2018-10860 perl-Archive-Zip: Directory traversal in Archive::Zip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-12015","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":["RHSA-2019:2097"],"bugzilla":"1588760","bugzilla_description":"CVE-2018-12015 perl: Directory traversal in Archive::Tar","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["perl-Archive-Tar-0:1.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12015.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2007-4829","severity":"moderate","public_date":"2007-08-24T00:00:00Z","advisories":["RHSA-2010:0505"],"bugzilla":"295021","bugzilla_description":"CVE-2007-4829 perl-Archive-Tar directory traversal flaws","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-Archive-Tar-1:1.39.1-1.el5_5.1","perl-Archive-Tar-0:1.39.1-1.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4829.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Archive-Zip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Archive-Zip_security_api_results.json
new file mode 100644
index 0000000..889ca05
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Archive-Zip_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10860","severity":"moderate","public_date":"2018-06-28T00:00:00Z","advisories":[],"bugzilla":"1591449","bugzilla_description":"CVE-2018-10860 perl-Archive-Zip: Directory traversal in Archive::Zip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Attribute-Handlers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Attribute-Handlers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Attribute-Handlers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Authen-SASL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Authen-SASL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Authen-SASL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-B-Debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-B-Debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-B-Debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-B-Hooks-EndOfScope_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-B-Hooks-EndOfScope_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-B-Hooks-EndOfScope_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-B-Lint_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-B-Lint_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-B-Lint_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Bit-Vector_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Bit-Vector_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Bit-Vector_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CGI_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CGI_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CGI_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-DistnameInfo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-DistnameInfo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-DistnameInfo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta-Check_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta-Check_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta-Check_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta-Requirements_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta-Requirements_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta-Requirements_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta-YAML_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta-YAML_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta-YAML_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN-Meta_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN_security_api_results.json
new file mode 100644
index 0000000..f78ec76
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-CPAN_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-1238","severity":"moderate","public_date":"2016-07-25T00:00:00Z","advisories":[],"bugzilla":"1355695","bugzilla_description":"CVE-2016-1238 perl: loading of modules from current directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1238.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Canary-Stability_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Canary-Stability_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Canary-Stability_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Capture-Tiny_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Capture-Tiny_security_api_results.json
new file mode 100644
index 0000000..d739564
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Capture-Tiny_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-1875","severity":"low","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1062424","bugzilla_description":"CVE-2014-1875 perl-Capture-Tiny: insecure temporary file usage","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-732)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1875.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Carp-Clan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Carp-Clan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Carp-Clan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Carp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Carp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Carp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Accessor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Accessor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Accessor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Data-Inheritable_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Data-Inheritable_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Data-Inheritable_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Factory-Util_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Factory-Util_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Factory-Util_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-ISA_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-ISA_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-ISA_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Inspector_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Inspector_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Inspector_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Method-Modifiers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Method-Modifiers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Method-Modifiers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Singleton_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Singleton_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Singleton_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Tiny_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Tiny_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-Tiny_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-XSAccessor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-XSAccessor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Class-XSAccessor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Clone_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Clone_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Clone_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Compress-Bzip2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Compress-Bzip2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Compress-Bzip2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Compress-Raw-Bzip2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Compress-Raw-Bzip2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Compress-Raw-Bzip2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Compress-Raw-Zlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Compress-Raw-Zlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Compress-Raw-Zlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Config-AutoConf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Config-AutoConf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Config-AutoConf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Config-Perl-V_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Config-Perl-V_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Config-Perl-V_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Convert-ASN1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Convert-ASN1_security_api_results.json
new file mode 100644
index 0000000..5018469
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Convert-ASN1_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-7488","severity":"moderate","public_date":"2013-10-08T00:00:00Z","advisories":[],"bugzilla":"1821879","bugzilla_description":"CVE-2013-7488 perl-Convert-ASN1: allows remote attackers to cause an infinite loop via unexpected input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7488.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Crypt-OpenSSL-Bignum_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Crypt-OpenSSL-Bignum_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Crypt-OpenSSL-Bignum_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Crypt-OpenSSL-RSA_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Crypt-OpenSSL-RSA_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Crypt-OpenSSL-RSA_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Crypt-OpenSSL-Random_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Crypt-OpenSSL-Random_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Crypt-OpenSSL-Random_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBD-MySQL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBD-MySQL_security_api_results.json
new file mode 100644
index 0000000..6008467
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBD-MySQL_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-10789","severity":"moderate","public_date":"2017-07-01T00:00:00Z","advisories":[],"bugzilla":"1467606","bugzilla_description":"CVE-2017-10789 perl-DBD-MySQL: Possible MITM attack when mysql_ssl=1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10789.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10788","severity":"moderate","public_date":"2017-06-08T00:00:00Z","advisories":[],"bugzilla":"1467600","bugzilla_description":"CVE-2017-10788 perl-DBD-MySQL: Use-after-free when calling mysql_stmt_error() after mysql_stmt_close()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10788.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-1251","severity":"moderate","public_date":"2016-11-18T00:00:00Z","advisories":[],"bugzilla":"1399580","bugzilla_description":"CVE-2016-1251 perl-DBD-MySQL: Use after free when using prepared statements","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-1249","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395591","bugzilla_description":"CVE-2016-1249 perl-DBD-MySQL: Out-of-bounds read when using server-side prepared statement support","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1249.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-1246","severity":"moderate","public_date":"2016-10-03T00:00:00Z","advisories":[],"bugzilla":"1380375","bugzilla_description":"CVE-2016-1246 perl-DBD-MySQL: Buffer overflow triggered by user supplied data","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8949","severity":"low","public_date":"2015-11-14T00:00:00Z","advisories":[],"bugzilla":"1360279","bugzilla_description":"CVE-2015-8949 perl-DBD-MySQL: Use after free when my_login fails","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8949.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2014-9906","severity":"low","public_date":"2014-08-01T00:00:00Z","advisories":[],"bugzilla":"1361073","bugzilla_description":"CVE-2014-9906 perl-DBD-MySQL: Use after free in mysql_dr_error","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBD-Pg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBD-Pg_security_api_results.json
new file mode 100644
index 0000000..a6c322f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBD-Pg_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-1151","severity":"moderate","public_date":"2012-02-27T00:00:00Z","advisories":["RHSA-2012:1116"],"bugzilla":"801733","bugzilla_description":"CVE-2012-1151 perl-DBD-Pg: Format string flaws by turning db notices into Perl warnings and by preparing DBD statement","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-DBD-Pg-0:1.49-4.el5_8","perl-DBD-Pg-0:2.15.1-4.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1151.json"},{"CVE":"CVE-2009-0663","severity":"moderate","public_date":"2009-04-28T00:00:00Z","advisories":["RHSA-2009:0479","RHSA-2009:1067"],"bugzilla":"497367","bugzilla_description":"CVE-2009-0663 perl-DBD-Pg: pg_getline buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-DBD-Pg-0:1.49-2.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0663.json"},{"CVE":"CVE-2009-1341","severity":"moderate","public_date":"2009-04-28T00:00:00Z","advisories":["RHSA-2009:0479","RHSA-2009:1067"],"bugzilla":"497503","bugzilla_description":"CVE-2009-1341 perl-DBD-Pg: dequote_bytea memory leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/AU:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["perl-DBD-Pg-0:1.49-2.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1341.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBD-SQLite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBD-SQLite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBD-SQLite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBI_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBI_security_api_results.json
new file mode 100644
index 0000000..78d7e42
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DBI_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-10402","severity":"moderate","public_date":"2020-09-16T00:00:00Z","advisories":[],"bugzilla":"1879741","bugzilla_description":"CVE-2014-10402 perl-dbi: Incomplete fix for CVE-2014-10401","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-10402.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2020-14393","severity":"low","public_date":"2019-08-01T00:00:00Z","advisories":[],"bugzilla":"1877409","bugzilla_description":"CVE-2020-14393 perl-dbi: Buffer overflow on an overlong DBD class name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14393.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-14392","severity":"low","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1877402","bugzilla_description":"CVE-2020-14392 perl-dbi: Memory corruption in XS functions when Perl stack is reallocated","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14392.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-20919","severity":"low","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1877405","bugzilla_description":"CVE-2019-20919 perl-dbi: NULL profile dereference in dbi_profile()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20919.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2014-10401","severity":"moderate","public_date":"2014-10-16T00:00:00Z","advisories":[],"bugzilla":"1877444","bugzilla_description":"CVE-2014-10401 perl-dbi: DBD::File drivers open files from folders other than specifically passed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-10401.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2013-7490","severity":"moderate","public_date":"2014-09-21T00:00:00Z","advisories":[],"bugzilla":"1877427","bugzilla_description":"CVE-2013-7490 perl-dbi: Risk of memory corruption with many arguments in DBI method dispatch","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7490.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2013-7491","severity":"low","public_date":"2013-06-24T00:00:00Z","advisories":[],"bugzilla":"1877447","bugzilla_description":"CVE-2013-7491 perl-dbi: Stack corruption on callbacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7491.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2005-0077","severity":"low","public_date":"2005-01-25T00:00:00Z","advisories":["RHSA-2005:069","RHSA-2005:072"],"bugzilla":"1617444","bugzilla_description":"CVE-2005-0077 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-DBI-0:1.40-8","perl-DBI-0:1.32-9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0077.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DB_File_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DB_File_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DB_File_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-Dump_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-Dump_security_api_results.json
new file mode 100644
index 0000000..6f1c8c8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-Dump_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-4330","severity":"low","public_date":"2014-09-18T00:00:00Z","advisories":[],"bugzilla":"1139700","bugzilla_description":"CVE-2014-4330 perl-Data-Dumper: deep recursion stack overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4330.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-Dumper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-Dumper_security_api_results.json
new file mode 100644
index 0000000..6f1c8c8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-Dumper_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-4330","severity":"low","public_date":"2014-09-18T00:00:00Z","advisories":[],"bugzilla":"1139700","bugzilla_description":"CVE-2014-4330 perl-Data-Dumper: deep recursion stack overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4330.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-OptList_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-OptList_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-OptList_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-Section_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-Section_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-Section_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-UUID_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-UUID_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Data-UUID_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Date-Calc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Date-Calc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Date-Calc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Date-ISO8601_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Date-ISO8601_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Date-ISO8601_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Date-Manip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Date-Manip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Date-Manip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-Builder_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-Builder_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-Builder_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-HTTP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-HTTP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-HTTP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-ISO8601_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-ISO8601_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-ISO8601_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-Mail_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-Mail_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-Mail_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-Strptime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-Strptime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Format-Strptime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Locale_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Locale_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-Locale_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-TimeZone-SystemV_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-TimeZone-SystemV_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-TimeZone-SystemV_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-TimeZone-Tzfile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-TimeZone-Tzfile_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-TimeZone-Tzfile_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-TimeZone_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-TimeZone_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime-TimeZone_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DateTime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-CallChecker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-CallChecker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-CallChecker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Caller_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Caller_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Caller_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-CheckLib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-CheckLib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-CheckLib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-GlobalDestruction_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-GlobalDestruction_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-GlobalDestruction_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-LexAlias_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-LexAlias_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-LexAlias_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-PPPort_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-PPPort_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-PPPort_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Peek_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Peek_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Peek_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-SelfStubber_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-SelfStubber_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-SelfStubber_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Size_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Size_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Size_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-StackTrace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-StackTrace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-StackTrace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Symdump_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Symdump_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Devel-Symdump_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-CRC_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-CRC_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-CRC_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-HMAC_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-HMAC_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-HMAC_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-MD5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-MD5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-MD5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-SHA1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-SHA1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-SHA1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-SHA_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-SHA_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest-SHA_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Digest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Dist-CheckConflicts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Dist-CheckConflicts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Dist-CheckConflicts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DynaLoader-Functions_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DynaLoader-Functions_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-DynaLoader-Functions_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode-Detect_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode-Detect_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode-Detect_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode-Locale_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode-Locale_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode-Locale_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Encode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Env_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Env_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Env_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Errno_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Errno_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Errno_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Error_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Error_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Error_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Eval-Closure_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Eval-Closure_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Eval-Closure_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Exception-Class_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Exception-Class_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Exception-Class_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Exporter-Tiny_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Exporter-Tiny_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Exporter-Tiny_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Exporter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Exporter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Exporter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-CBuilder_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-CBuilder_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-CBuilder_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Command_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Command_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Command_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Embed_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Embed_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Embed_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Install_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Install_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Install_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-MM-Utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-MM-Utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-MM-Utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-MakeMaker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-MakeMaker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-MakeMaker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Manifest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Manifest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Manifest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Miniperl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Miniperl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-Miniperl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-ParseXS_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-ParseXS_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-ExtUtils-ParseXS_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-FCGI_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-FCGI_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-FCGI_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Fedora-VSP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Fedora-VSP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Fedora-VSP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-BaseDir_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-BaseDir_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-BaseDir_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-CheckTree_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-CheckTree_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-CheckTree_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Copy-Recursive_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Copy-Recursive_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Copy-Recursive_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-DesktopEntry_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-DesktopEntry_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-DesktopEntry_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Fetch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Fetch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Fetch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Find-Object_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Find-Object_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Find-Object_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Find-Rule_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Find-Rule_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Find-Rule_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-HomeDir_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-HomeDir_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-HomeDir_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Listing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Listing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Listing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-MimeInfo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-MimeInfo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-MimeInfo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Path_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Path_security_api_results.json
new file mode 100644
index 0000000..fa34f22
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Path_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-6512","severity":"low","public_date":"2017-05-02T00:00:00Z","advisories":[],"bugzilla":"1457832","bugzilla_description":"CVE-2017-6512 perl-File-Path: rmtree/remove_tree race condition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6512.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-ReadBackwards_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-ReadBackwards_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-ReadBackwards_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Remove_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Remove_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Remove_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-ShareDir_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-ShareDir_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-ShareDir_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Slurp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Slurp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Slurp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Temp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Temp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Temp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Which_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Which_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-Which_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-chdir_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-chdir_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-chdir_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-pushd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-pushd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-File-pushd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Filter-Simple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Filter-Simple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Filter-Simple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Filter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Filter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Filter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-GSSAPI_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-GSSAPI_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-GSSAPI_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Getopt-Long_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Getopt-Long_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Getopt-Long_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Git-SVN_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Git-SVN_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Git-SVN_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Git_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Git_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Git_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTML-Parser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTML-Parser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTML-Parser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTML-Tagset_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTML-Tagset_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTML-Tagset_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTML-Tree_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTML-Tree_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTML-Tree_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Cookies_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Cookies_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Cookies_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Daemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Daemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Daemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Date_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Date_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Date_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Message_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Message_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Message_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Negotiate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Negotiate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Negotiate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Tiny_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Tiny_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-HTTP-Tiny_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-All_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-All_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-All_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Compress_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Compress_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Compress_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-HTML_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-HTML_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-HTML_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Multiplex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Multiplex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Multiplex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Socket-INET6_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Socket-INET6_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Socket-INET6_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Socket-IP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Socket-IP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Socket-IP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Socket-SSL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Socket-SSL_security_api_results.json
new file mode 100644
index 0000000..aca26ef
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Socket-SSL_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-4334","severity":"low","public_date":"2010-12-06T00:00:00Z","advisories":[],"bugzilla":"660847","bugzilla_description":"CVE-2010-4334 perl-IO-Socket-SSL: ignores user request for peer verification","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4334.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-String_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-String_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-String_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Tty_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Tty_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Tty_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Zlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Zlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-Zlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-stringy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-stringy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO-stringy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO_security_api_results.json
new file mode 100644
index 0000000..aca26ef
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IO_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-4334","severity":"low","public_date":"2010-12-06T00:00:00Z","advisories":[],"bugzilla":"660847","bugzilla_description":"CVE-2010-4334 perl-IO-Socket-SSL: ignores user request for peer verification","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4334.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-Cmd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-Cmd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-Cmd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-Run3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-Run3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-Run3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-Run_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-Run_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-Run_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-SysV_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-SysV_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-SysV_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-System-Simple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-System-Simple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-IPC-System-Simple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Import-Into_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Import-Into_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Import-Into_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Importer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Importer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Importer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-JSON-PP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-JSON-PP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-JSON-PP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-JSON-XS_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-JSON-XS_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-JSON-XS_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-JSON_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-JSON_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-JSON_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-LDAP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-LDAP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-LDAP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-LWP-MediaTypes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-LWP-MediaTypes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-LWP-MediaTypes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-LWP-Protocol-https_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-LWP-Protocol-https_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-LWP-Protocol-https_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-List-MoreUtils-XS_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-List-MoreUtils-XS_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-List-MoreUtils-XS_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-List-MoreUtils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-List-MoreUtils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-List-MoreUtils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-Codes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-Codes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-Codes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-Maketext-Simple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-Maketext-Simple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-Maketext-Simple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-Maketext_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-Maketext_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-Maketext_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-gettext_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-gettext_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Locale-gettext_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MIME-Base64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MIME-Base64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MIME-Base64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MIME-Charset_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MIME-Charset_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MIME-Charset_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MIME-Types_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MIME-Types_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MIME-Types_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MRO-Compat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MRO-Compat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MRO-Compat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mail-DKIM_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mail-DKIM_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mail-DKIM_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mail-SPF_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mail-SPF_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mail-SPF_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MailTools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MailTools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-MailTools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-BigInt-FastCalc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-BigInt-FastCalc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-BigInt-FastCalc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-BigInt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-BigInt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-BigInt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-BigRat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-BigRat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-BigRat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-Complex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-Complex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Math-Complex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Memoize_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Memoize_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Memoize_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Build_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Build_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Build_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-CPANfile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-CPANfile_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-CPANfile_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-CoreList-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-CoreList-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-CoreList-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-CoreList_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-CoreList_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-CoreList_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Implementation_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Implementation_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Implementation_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Install-AuthorTests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Install-AuthorTests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Install-AuthorTests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Install-ReadmeFromPod_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Install-ReadmeFromPod_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Install-ReadmeFromPod_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Install_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Install_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Install_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Load-Conditional_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Load-Conditional_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Load-Conditional_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Load_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Load_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Load_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Loaded_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Loaded_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Loaded_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Metadata_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Metadata_security_api_results.json
new file mode 100644
index 0000000..fe683d3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Metadata_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-1437","severity":"low","public_date":"2013-08-21T00:00:00Z","advisories":[],"bugzilla":"996281","bugzilla_description":"CVE-2013-1437 perl-Module-Metadata: incorrectly documents that it does not execute unsafe code","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1437.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Pluggable_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Pluggable_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Pluggable_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Runtime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Runtime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-Runtime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-ScanDeps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-ScanDeps_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Module-ScanDeps_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mozilla-CA_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mozilla-CA_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mozilla-CA_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mozilla-LDAP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mozilla-LDAP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Mozilla-LDAP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-NKF_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-NKF_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-NKF_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-NTLM_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-NTLM_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-NTLM_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-DNS_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-DNS_security_api_results.json
new file mode 100644
index 0000000..6b14b45
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-DNS_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2007-3377","severity":"moderate","public_date":"2006-12-22T00:00:00Z","advisories":["RHSA-2007:0675","RHSA-2007:0674"],"bugzilla":"245466","bugzilla_description":"CVE-2007-3377 perl-Net-DNS security issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-Net-DNS-0:0.48-2.el4","perl-Net-DNS-0:0.31-4.el3","perl-Net-DNS-0:0.59-3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3377.json"},{"CVE":"CVE-2007-3409","severity":"moderate","public_date":"2006-12-22T00:00:00Z","advisories":["RHSA-2007:0674"],"bugzilla":"245804","bugzilla_description":"CVE-2007-3409 Perl Net::DNS denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-Net-DNS-0:0.31-4.el3","perl-Net-DNS-0:0.59-3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3409.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-HTTP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-HTTP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-HTTP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-Ping_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-Ping_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-Ping_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-SMTP-SSL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-SMTP-SSL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-SMTP-SSL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-SSLeay_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-SSLeay_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-SSLeay_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-Server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-Server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Net-Server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-NetAddr-IP_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-NetAddr-IP_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-NetAddr-IP_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Number-Compare_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Number-Compare_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Number-Compare_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-LogImport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-LogImport_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-LogImport_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-LogSummary_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-LogSummary_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-LogSummary_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-MMV_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-MMV_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-MMV_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-PMDA_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-PMDA_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PCP-PMDA_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-DeprecationManager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-DeprecationManager_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-DeprecationManager_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-Generator_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-Generator_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-Generator_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-Stash-XS_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-Stash-XS_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-Stash-XS_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-Stash_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-Stash_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Package-Stash_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PadWalker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PadWalker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PadWalker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Check_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Check_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Check_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Classify_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Classify_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Classify_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Util_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Util_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Util_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Validate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Validate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-Validate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-ValidationCompiler_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-ValidationCompiler_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Params-ValidationCompiler_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Parse-PMFile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Parse-PMFile_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Parse-PMFile_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Parse-Yapp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Parse-Yapp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Parse-Yapp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Path-Tiny_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Path-Tiny_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Path-Tiny_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PathTools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PathTools_security_api_results.json
new file mode 100644
index 0000000..c99d26f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PathTools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-8607","severity":"moderate","public_date":"2016-01-11T00:00:00Z","advisories":[],"bugzilla":"1293272","bugzilla_description":"CVE-2015-8607 perl-PathTools: Taint propagation flaw in canonpath()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8607.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Perl-Destruct-Level_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Perl-Destruct-Level_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Perl-Destruct-Level_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Perl-OSType_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Perl-OSType_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Perl-OSType_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PerlIO-utf8_strict_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PerlIO-utf8_strict_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PerlIO-utf8_strict_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PerlIO-via-QuotedPrint_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PerlIO-via-QuotedPrint_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-PerlIO-via-QuotedPrint_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Checker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Checker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Checker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Coverage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Coverage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Coverage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Escapes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Escapes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Escapes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Html_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Html_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Html_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-LaTeX_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-LaTeX_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-LaTeX_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Markdown_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Markdown_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Markdown_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Parser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Parser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Parser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Perldoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Perldoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Perldoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Plainer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Plainer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Plainer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Simple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Simple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Simple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Usage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Usage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Pod-Usage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Readonly_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Readonly_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Readonly_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Ref-Util-XS_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Ref-Util-XS_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Ref-Util-XS_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Ref-Util_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Ref-Util_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Ref-Util_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Role-Tiny_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Role-Tiny_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Role-Tiny_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SGMLSpm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SGMLSpm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SGMLSpm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SNMP_Session_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SNMP_Session_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SNMP_Session_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SUPER_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SUPER_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SUPER_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Scalar-List-Utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Scalar-List-Utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Scalar-List-Utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Scope-Guard_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Scope-Guard_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Scope-Guard_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SelfLoader_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SelfLoader_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-SelfLoader_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Socket6_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Socket6_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Socket6_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Socket_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Socket_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Socket_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Software-License_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Software-License_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Software-License_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Specio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Specio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Specio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Storable_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Storable_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Storable_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-String-CRC32_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-String-CRC32_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-String-CRC32_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-String-ShellQuote_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-String-ShellQuote_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-String-ShellQuote_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Exporter-Progressive_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Exporter-Progressive_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Exporter-Progressive_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Exporter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Exporter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Exporter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Identify_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Identify_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Identify_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Info_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Info_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Info_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Install_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Install_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Install_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Name_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Name_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Name_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Uplevel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Uplevel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sub-Uplevel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Switch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Switch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Switch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-CPU_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-CPU_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-CPU_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-Guestfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-Guestfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-Guestfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-MemInfo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-MemInfo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-MemInfo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-Syslog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-Syslog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-Syslog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-Virt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-Virt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Sys-Virt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Taint-Runtime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Taint-Runtime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Taint-Runtime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-ANSIColor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-ANSIColor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-ANSIColor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Cap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Cap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Cap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Size-Any_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Size-Any_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Size-Any_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Size-Perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Size-Perl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Size-Perl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Table_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Table_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Term-Table_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-TermReadKey_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-TermReadKey_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-TermReadKey_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Deep_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Deep_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Deep_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Differences_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Differences_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Differences_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Exception_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Exception_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Exception_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Fatal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Fatal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Fatal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Harness_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Harness_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Harness_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-LongString_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-LongString_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-LongString_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-NoWarnings_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-NoWarnings_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-NoWarnings_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Pod-Coverage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Pod-Coverage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Pod-Coverage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Pod_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Pod_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Pod_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Requires_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Requires_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Requires_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Simple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Simple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Simple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Taint_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Taint_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Taint_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Warn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Warn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Warn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Warnings_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Warnings_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test-Warnings_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test2-Suite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test2-Suite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test2-Suite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Balanced_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Balanced_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Balanced_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-CharWidth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-CharWidth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-CharWidth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Diff_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Diff_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Diff_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Glob_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Glob_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Glob_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-ParseWords_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-ParseWords_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-ParseWords_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Soundex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Soundex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Soundex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Tabs+Wrap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Tabs+Wrap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Tabs+Wrap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Template_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Template_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Template_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Unidecode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Unidecode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-Unidecode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-WrapI18N_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-WrapI18N_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Text-WrapI18N_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Thread-Queue_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Thread-Queue_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Thread-Queue_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Tie-IxHash_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Tie-IxHash_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Tie-IxHash_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Time-HiRes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Time-HiRes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Time-HiRes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Time-Local_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Time-Local_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Time-Local_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Time-Piece_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Time-Piece_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Time-Piece_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-TimeDate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-TimeDate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-TimeDate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Tk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Tk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Tk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Tk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Tk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Tk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Try-Tiny_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Try-Tiny_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Try-Tiny_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Types-Serialiser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Types-Serialiser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Types-Serialiser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-URI_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-URI_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-URI_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-Collate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-Collate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-Collate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-EastAsianWidth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-EastAsianWidth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-EastAsianWidth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-LineBreak_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-LineBreak_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-LineBreak_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-Normalize_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-Normalize_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-Normalize_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-UTF8_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-UTF8_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unicode-UTF8_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unix-Syslog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unix-Syslog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Unix-Syslog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Variable-Magic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Variable-Magic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-Variable-Magic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-WWW-RobotRules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-WWW-RobotRules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-WWW-RobotRules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Catalog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Catalog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Catalog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-DOM_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-DOM_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-DOM_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-LibXML_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-LibXML_security_api_results.json
new file mode 100644
index 0000000..cee9b26
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-LibXML_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-10672","severity":"moderate","public_date":"2017-06-27T00:00:00Z","advisories":[],"bugzilla":"1470204","bugzilla_description":"CVE-2017-10672 perl-XML-LibXML: Use-after-free by controlling the arguments to a replaceChild call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10672.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2015-3451","severity":"low","public_date":"2015-04-23T00:00:00Z","advisories":[],"bugzilla":"1216112","bugzilla_description":"CVE-2015-3451 perl-XML-LibXML: \"expand_entities\" option was not preserved under some circumstances","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3451.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-NamespaceSupport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-NamespaceSupport_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-NamespaceSupport_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Parser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Parser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Parser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-RegExp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-RegExp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-RegExp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-SAX-Base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-SAX-Base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-SAX-Base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-SAX_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-SAX_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-SAX_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Simple_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Simple_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Simple_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-TokeParser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-TokeParser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-TokeParser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Twig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Twig_security_api_results.json
new file mode 100644
index 0000000..497abf9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-Twig_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-9180","severity":"moderate","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1379553","bugzilla_description":"CVE-2016-9180 perl-XML-Twig:  expand_external_ents option fails to work as documented","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"7.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-XPath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-XPath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-XML-XPath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML-LibYAML_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML-LibYAML_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML-LibYAML_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML-Syck_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML-Syck_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML-Syck_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML-Tiny_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML-Tiny_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML-Tiny_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-YAML_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-autodie_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-autodie_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-autodie_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-bignum_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-bignum_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-bignum_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-common-sense_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-common-sense_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-common-sense_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-constant_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-constant_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-constant_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-encoding_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-encoding_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-encoding_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-experimental_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-experimental_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-experimental_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-generators_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-generators_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-generators_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-hivex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-hivex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-hivex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-homedir_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-homedir_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-homedir_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-inc-latest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-inc-latest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-inc-latest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-interpreter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-interpreter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-interpreter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libintl-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libintl-perl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libintl-perl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libnet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libnet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libnet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libnetcfg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libnetcfg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libnetcfg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libwww-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libwww-perl_security_api_results.json
new file mode 100644
index 0000000..51596cb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libwww-perl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-3230","severity":"moderate","public_date":"2014-05-01T00:00:00Z","advisories":[],"bugzilla":"1094440","bugzilla_description":"CVE-2014-3230 perl-libwww-perl: incorrect handling of SSL certificate verification","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3230.json"},{"CVE":"CVE-2011-0633","severity":"moderate","public_date":"2011-03-08T00:00:00Z","advisories":[],"bugzilla":"705044","bugzilla_description":"CVE-2011-0633 perl-libwww-perl: no hostname check against SSL certificate name by default","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0633.json"},{"CVE":"CVE-2010-2253","severity":"low","public_date":"2010-05-17T00:00:00Z","advisories":[],"bugzilla":"602800","bugzilla_description":"CVE-2010-2253 perl-libwww-perl: multiple HTTP client download filename vulnerability [OCERT 2010-001]","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2253.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libxml-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libxml-perl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-libxml-perl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-local-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-local-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-local-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-namespace-autoclean_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-namespace-autoclean_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-namespace-autoclean_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-namespace-clean_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-namespace-clean_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-namespace-clean_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-open_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-open_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-open_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-perlfaq_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-perlfaq_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-perlfaq_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-podlators_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-podlators_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-podlators_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-prefork_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-prefork_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-prefork_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-srpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-srpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-srpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-tests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-tests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-tests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-threads-shared_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-threads-shared_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-threads-shared_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-threads_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-threads_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-threads_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-version_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-version_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl-version_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl_security_api_results.json
new file mode 100644
index 0000000..e3784ed
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-10402","severity":"moderate","public_date":"2020-09-16T00:00:00Z","advisories":[],"bugzilla":"1879741","bugzilla_description":"CVE-2014-10402 perl-dbi: Incomplete fix for CVE-2014-10401","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-10402.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2020-10543","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":[],"bugzilla":"1837975","bugzilla_description":"CVE-2020-10543 perl: heap-based buffer overflow in regular expression compiler leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10543.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2020-10878","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":[],"bugzilla":"1837988","bugzilla_description":"CVE-2020-10878 perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10878.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2020-12723","severity":"moderate","public_date":"2020-06-02T00:00:00Z","advisories":[],"bugzilla":"1838000","bugzilla_description":"CVE-2020-12723 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12723.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14393","severity":"low","public_date":"2019-08-01T00:00:00Z","advisories":[],"bugzilla":"1877409","bugzilla_description":"CVE-2020-14393 perl-dbi: Buffer overflow on an overlong DBD class name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14393.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-14392","severity":"low","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1877402","bugzilla_description":"CVE-2020-14392 perl-dbi: Memory corruption in XS functions when Perl stack is reallocated","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14392.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-20919","severity":"low","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1877405","bugzilla_description":"CVE-2019-20919 perl-dbi: NULL profile dereference in dbi_profile()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20919.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-18311","severity":"important","public_date":"2018-11-29T00:00:00Z","advisories":["RHSA-2019:0001","RHSA-2019:0010","RHSA-2019:2400","RHSA-2019:1942","RHSA-2019:1790","RHSA-2019:0109"],"bugzilla":"1646730","bugzilla_description":"CVE-2018-18311 perl: Integer overflow leading to buffer overflow in Perl_my_setenv()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["rh-perl524-perl-4:5.24.0-381.el6","perl-4:5.16.3-294.el7_6","rh-perl524-perl-4:5.24.0-381.el7","perl-4:5.16.3-292.el7_5.1","perl-4:5.16.3-292.el7_4.1","rh-perl526-perl-4:5.26.3-405.el7","perl-4:5.16.3-291.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-18312","severity":"moderate","public_date":"2018-11-29T00:00:00Z","advisories":["RHSA-2019:0001","RHSA-2019:0010"],"bugzilla":"1646734","bugzilla_description":"CVE-2018-18312 perl: Heap-based buffer overflow in S_handle_regex_sets()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["rh-perl524-perl-4:5.24.0-381.el6","rh-perl524-perl-4:5.24.0-381.el7","rh-perl526-perl-4:5.26.3-405.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18312.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-18313","severity":"low","public_date":"2018-11-29T00:00:00Z","advisories":["RHSA-2019:0001","RHSA-2019:0010"],"bugzilla":"1646738","bugzilla_description":"CVE-2018-18313 perl: Heap-based buffer read overflow in S_grok_bslash_N()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-perl524-perl-4:5.24.0-381.el6","rh-perl524-perl-4:5.24.0-381.el7","rh-perl526-perl-4:5.26.3-405.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18313.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-18314","severity":"moderate","public_date":"2018-11-29T00:00:00Z","advisories":["RHSA-2019:0001","RHSA-2019:0010"],"bugzilla":"1646751","bugzilla_description":"CVE-2018-18314 perl: Heap-based buffer overflow in S_regatom()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-perl524-perl-4:5.24.0-381.el6","rh-perl524-perl-4:5.24.0-381.el7","rh-perl526-perl-4:5.26.3-405.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18314.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-10860","severity":"moderate","public_date":"2018-06-28T00:00:00Z","advisories":[],"bugzilla":"1591449","bugzilla_description":"CVE-2018-10860 perl-Archive-Zip: Directory traversal in Archive::Zip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-12558","severity":"moderate","public_date":"2018-06-19T00:00:00Z","advisories":[],"bugzilla":"1593318","bugzilla_description":"CVE-2018-12558 perl-Email-Address: Specially crafted input could cause Denial of Service due to complex parse() method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12558.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12015","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":["RHSA-2019:2097"],"bugzilla":"1588760","bugzilla_description":"CVE-2018-12015 perl: Directory traversal in Archive::Tar","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["perl-Archive-Tar-0:1.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12015.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-6913","severity":"low","public_date":"2018-04-14T00:00:00Z","advisories":[],"bugzilla":"1547772","bugzilla_description":"CVE-2018-6913 perl: heap buffer overflow in pp_pack.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6913.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-6798","severity":"moderate","public_date":"2018-04-14T00:00:00Z","advisories":["RHSA-2018:1192"],"bugzilla":"1547779","bugzilla_description":"CVE-2018-6798 perl: heap read overflow in regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-perl524-perl-4:5.24.0-380.el6","rh-perl524-perl-4:5.24.0-380.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-6797","severity":"moderate","public_date":"2018-04-14T00:00:00Z","advisories":["RHSA-2018:1192"],"bugzilla":"1547783","bugzilla_description":"CVE-2018-6797 perl: heap write overflow in regcomp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["rh-perl524-perl-4:5.24.0-380.el6","rh-perl524-perl-4:5.24.0-380.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12837","severity":"low","public_date":"2017-09-12T00:00:00Z","advisories":[],"bugzilla":"1492091","bugzilla_description":"CVE-2017-12837 perl: Heap buffer overflow in regular expression compiler","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12837.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-12883","severity":"moderate","public_date":"2017-09-12T00:00:00Z","advisories":[],"bugzilla":"1492093","bugzilla_description":"CVE-2017-12883 perl: Buffer over-read in regular expression parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12883.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-10789","severity":"moderate","public_date":"2017-07-01T00:00:00Z","advisories":[],"bugzilla":"1467606","bugzilla_description":"CVE-2017-10789 perl-DBD-MySQL: Possible MITM attack when mysql_ssl=1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10789.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-10672","severity":"moderate","public_date":"2017-06-27T00:00:00Z","advisories":[],"bugzilla":"1470204","bugzilla_description":"CVE-2017-10672 perl-XML-LibXML: Use-after-free by controlling the arguments to a replaceChild call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10672.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-10788","severity":"moderate","public_date":"2017-06-08T00:00:00Z","advisories":[],"bugzilla":"1467600","bugzilla_description":"CVE-2017-10788 perl-DBD-MySQL: Use-after-free when calling mysql_stmt_error() after mysql_stmt_close()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10788.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6512","severity":"low","public_date":"2017-05-02T00:00:00Z","advisories":[],"bugzilla":"1457832","bugzilla_description":"CVE-2017-6512 perl-File-Path: rmtree/remove_tree race condition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6512.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2016-1251","severity":"moderate","public_date":"2016-11-18T00:00:00Z","advisories":[],"bugzilla":"1399580","bugzilla_description":"CVE-2016-1251 perl-DBD-MySQL: Use after free when using prepared statements","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-1249","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395591","bugzilla_description":"CVE-2016-1249 perl-DBD-MySQL: Out-of-bounds read when using server-side prepared statement support","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1249.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-1246","severity":"moderate","public_date":"2016-10-03T00:00:00Z","advisories":[],"bugzilla":"1380375","bugzilla_description":"CVE-2016-1246 perl-DBD-MySQL: Buffer overflow triggered by user supplied data","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-9180","severity":"moderate","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1379553","bugzilla_description":"CVE-2016-9180 perl-XML-Twig:  expand_external_ents option fails to work as documented","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2016-9181","severity":"low","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1379556","bugzilla_description":"CVE-2016-9181 perl-Image-Info: XXE in SVG files","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2016-10374","severity":"low","public_date":"2016-08-13T00:00:00Z","advisories":[],"bugzilla":"1452050","bugzilla_description":"CVE-2016-10374 perltidy: Uses current working directory without symlink-attack protection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10374.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2016-1238","severity":"moderate","public_date":"2016-07-25T00:00:00Z","advisories":[],"bugzilla":"1355695","bugzilla_description":"CVE-2016-1238 perl: loading of modules from current directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1238.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2016-6185","severity":"moderate","public_date":"2016-06-30T00:00:00Z","advisories":[],"bugzilla":"1354386","bugzilla_description":"CVE-2016-6185 perl: XSLoader loads relative paths not included in @INC","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6185.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2016-2381","severity":"moderate","public_date":"2016-03-01T00:00:00Z","advisories":[],"bugzilla":"1309214","bugzilla_description":"CVE-2016-2381 perl: ambiguous environment variables handling","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2381.json"},{"CVE":"CVE-2015-8607","severity":"moderate","public_date":"2016-01-11T00:00:00Z","advisories":[],"bugzilla":"1293272","bugzilla_description":"CVE-2015-8607 perl-PathTools: Taint propagation flaw in canonpath()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8607.json"},{"CVE":"CVE-2015-8608","severity":"moderate","public_date":"2016-01-11T00:00:00Z","advisories":[],"bugzilla":"1857318","bugzilla_description":"CVE-2015-8608 perl: out-of-bounds read and buffer overflow in functions VDir::MapPathA and VDir::MapPathW via a crafted drive letter or a pInName argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-121|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2015-8949","severity":"low","public_date":"2015-11-14T00:00:00Z","advisories":[],"bugzilla":"1360279","bugzilla_description":"CVE-2015-8949 perl-DBD-MySQL: Use after free when my_login fails","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8949.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-7686","severity":"moderate","public_date":"2015-09-27T00:00:00Z","advisories":[],"bugzilla":"1268777","bugzilla_description":"CVE-2015-7686 perl-Email-Address: denial of service when parsing crafted email address list","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7686.json"},{"CVE":"CVE-2015-8978","severity":"moderate","public_date":"2015-07-21T00:00:00Z","advisories":[],"bugzilla":"1397731","bugzilla_description":"CVE-2015-8978 perl-SOAP-Lite: XML exponential entity expansion denial-of-service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8978.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-3451","severity":"low","public_date":"2015-04-23T00:00:00Z","advisories":[],"bugzilla":"1216112","bugzilla_description":"CVE-2015-3451 perl-XML-LibXML: \"expand_entities\" option was not preserved under some circumstances","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3451.json"},{"CVE":"CVE-2015-3406","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209911","bugzilla_description":"CVE-2015-3406 perl-Module-Signature: unsigned files interpreted as signed in some circumstances","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3406.json"},{"CVE":"CVE-2015-3407","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209915","bugzilla_description":"CVE-2015-3407 perl-Module-Signature: arbitrary code execution during test phase","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3407.json"},{"CVE":"CVE-2015-3408","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209917","bugzilla_description":"CVE-2015-3408 perl-Module-Signature: arbitrary code execution when verifying module signatures","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3408.json"},{"CVE":"CVE-2015-3409","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209918","bugzilla_description":"CVE-2015-3409 perl-Module-Signature: arbitrary modules loading in some circumstances","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3409.json"},{"CVE":"CVE-2013-7422","severity":"low","public_date":"2015-01-23T00:00:00Z","advisories":[],"bugzilla":"1187149","bugzilla_description":"CVE-2013-7422 perl: segmentation fault in S_regmatch on negative backreference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7422.json"},{"CVE":"CVE-2015-8853","severity":"moderate","public_date":"2015-01-07T00:00:00Z","advisories":[],"bugzilla":"1329106","bugzilla_description":"CVE-2015-8853 perl: regexp matching hangs indefinitely on illegal UTF-8 input","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8853.json"},{"CVE":"CVE-2014-10401","severity":"moderate","public_date":"2014-10-16T00:00:00Z","advisories":[],"bugzilla":"1877444","bugzilla_description":"CVE-2014-10401 perl-dbi: DBD::File drivers open files from folders other than specifically passed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-10401.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2013-7490","severity":"moderate","public_date":"2014-09-21T00:00:00Z","advisories":[],"bugzilla":"1877427","bugzilla_description":"CVE-2013-7490 perl-dbi: Risk of memory corruption with many arguments in DBI method dispatch","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7490.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2014-4330","severity":"low","public_date":"2014-09-18T00:00:00Z","advisories":[],"bugzilla":"1139700","bugzilla_description":"CVE-2014-4330 perl-Data-Dumper: deep recursion stack overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4330.json"},{"CVE":"CVE-2014-9906","severity":"low","public_date":"2014-08-01T00:00:00Z","advisories":[],"bugzilla":"1361073","bugzilla_description":"CVE-2014-9906 perl-DBD-MySQL: Use after free in mysql_dr_error","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2014-0477","severity":"low","public_date":"2014-06-18T00:00:00Z","advisories":[],"bugzilla":"1110723","bugzilla_description":"CVE-2014-0477 perl-Email-Address: Denial-of-Service in Email::Address::parse","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0477.json"},{"CVE":"CVE-2014-3230","severity":"moderate","public_date":"2014-05-01T00:00:00Z","advisories":[],"bugzilla":"1094440","bugzilla_description":"CVE-2014-3230 perl-libwww-perl: incorrect handling of SSL certificate verification","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3230.json"},{"CVE":"CVE-2014-2277","severity":"low","public_date":"2014-03-03T00:00:00Z","advisories":[],"bugzilla":"1074720","bugzilla_description":"CVE-2014-2277 perltidy: insecure temporary file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2277.json"},{"CVE":"CVE-2014-1875","severity":"low","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1062424","bugzilla_description":"CVE-2014-1875 perl-Capture-Tiny: insecure temporary file usage","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-732)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1875.json"},{"CVE":"CVE-2013-7135","severity":"low","public_date":"2013-12-15T00:00:00Z","advisories":[],"bugzilla":"1043872","bugzilla_description":"CVE-2013-7135 perl-Proc-Daemon: writes pidfile with mode 666","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7135.json"},{"CVE":"CVE-2013-7284","severity":"moderate","public_date":"2013-11-14T00:00:00Z","advisories":[],"bugzilla":"1051108","bugzilla_description":"CVE-2013-7284 perl-PlRPC: pre-auth remote code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7284.json"},{"CVE":"CVE-2013-7488","severity":"moderate","public_date":"2013-10-08T00:00:00Z","advisories":[],"bugzilla":"1821879","bugzilla_description":"CVE-2013-7488 perl-Convert-ASN1: allows remote attackers to cause an infinite loop via unexpected input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7488.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2013-1437","severity":"low","public_date":"2013-08-21T00:00:00Z","advisories":[],"bugzilla":"996281","bugzilla_description":"CVE-2013-1437 perl-Module-Metadata: incorrectly documents that it does not execute unsafe code","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1437.json"},{"CVE":"CVE-2013-7491","severity":"low","public_date":"2013-06-24T00:00:00Z","advisories":[],"bugzilla":"1877447","bugzilla_description":"CVE-2013-7491 perl-dbi: Stack corruption on callbacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7491.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2013-1667","severity":"moderate","public_date":"2013-03-04T00:00:00Z","advisories":["RHSA-2013:0685"],"bugzilla":"912276","bugzilla_description":"CVE-2013-1667 perl: DoS in rehashing code","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["perl-4:5.8.8-40.el5_9","perl-4:5.10.1-130.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1667.json"},{"CVE":"CVE-2012-6329","severity":"moderate","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2013:0685"],"bugzilla":"884354","bugzilla_description":"CVE-2012-6329 perl: possible arbitrary code execution via Locale::Maketext","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-4:5.8.8-40.el5_9","perl-4:5.10.1-130.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6329.json"},{"CVE":"CVE-2012-5526","severity":"moderate","public_date":"2012-11-12T00:00:00Z","advisories":["RHSA-2013:0685"],"bugzilla":"877015","bugzilla_description":"CVE-2012-5526 perl-CGI: Newline injection due to improper CRLF escaping in Set-Cookie and P3P headers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["perl-4:5.8.8-40.el5_9","perl-4:5.10.1-130.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5526.json"},{"CVE":"CVE-2012-5195","severity":"moderate","public_date":"2012-10-10T00:00:00Z","advisories":["RHSA-2013:0685"],"bugzilla":"862413","bugzilla_description":"CVE-2012-5195 perl: heap buffer overrun flaw may lead to arbitrary code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-4:5.8.8-40.el5_9","perl-4:5.10.1-130.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5195.json"},{"CVE":"CVE-2012-2451","severity":"low","public_date":"2012-05-02T00:00:00Z","advisories":[],"bugzilla":"818386","bugzilla_description":"CVE-2012-2451 perl-Config-IniFiles: insecure temporary file usage","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2451.json"},{"CVE":"CVE-2012-1151","severity":"moderate","public_date":"2012-02-27T00:00:00Z","advisories":["RHSA-2012:1116"],"bugzilla":"801733","bugzilla_description":"CVE-2012-1151 perl-DBD-Pg: Format string flaws by turning db notices into Perl warnings and by preparing DBD statement","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-DBD-Pg-0:1.49-4.el5_8","perl-DBD-Pg-0:2.15.1-4.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1151.json"},{"CVE":"CVE-2011-2767","severity":"important","public_date":"2011-10-03T00:00:00Z","advisories":["RHSA-2018:2826","RHSA-2018:2737","RHSA-2018:2825"],"bugzilla":"1623265","bugzilla_description":"CVE-2011-2767 mod_perl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["mod_perl-0:2.0.4-12.el6_10","rh-perl524-mod_perl-0:2.0.9-10.el7","rh-perl524-mod_perl-0:2.0.9-10.el6","rh-perl526-mod_perl-0:2.0.10-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2767.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2011-3597","severity":"moderate","public_date":"2011-10-02T00:00:00Z","advisories":["RHSA-2011:1797","RHSA-2011:1424"],"bugzilla":"743010","bugzilla_description":"CVE-2011-3597 Perl Digest improper control of generation of code","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-4:5.8.8-32.el5_7.6","perl-3:5.8.5-57.el4","perl-4:5.10.1-119.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3597.json"},{"CVE":"CVE-2011-2728","severity":null,"public_date":"2011-09-26T00:00:00Z","advisories":[],"bugzilla":"742236","bugzilla_description":"CVE-2011-2728 perl: File::Glob bsd_glob() crash with certain glob flags","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2728.json"},{"CVE":"CVE-2011-2939","severity":"moderate","public_date":"2011-08-09T00:00:00Z","advisories":["RHSA-2011:1424"],"bugzilla":"731246","bugzilla_description":"CVE-2011-2939 Perl decode_xs heap-based buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["perl-4:5.10.1-119.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2939.json"},{"CVE":"CVE-2011-4116","severity":"low","public_date":"2011-06-27T00:00:00Z","advisories":[],"bugzilla":"753970","bugzilla_description":"CVE-2011-4116 perl: File::Temp insecure temporary file handling","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-283","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4116.json"},{"CVE":"CVE-2011-0761","severity":"low","public_date":"2011-05-03T00:00:00Z","advisories":[],"bugzilla":"704994","bugzilla_description":"CVE-2011-0761 perl: NULL pointer dereference via crafted SOCKET, DIRHANDLE or FILEHANDLE value","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0761.json"},{"CVE":"CVE-2011-1487","severity":"low","public_date":"2011-03-30T00:00:00Z","advisories":["RHSA-2011:0558"],"bugzilla":"692898","bugzilla_description":"CVE-2011-1487 perl: lc(), uc() routines are laundering tainted data","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["perl-4:5.10.1-119.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1487.json"},{"CVE":"CVE-2011-0633","severity":"moderate","public_date":"2011-03-08T00:00:00Z","advisories":[],"bugzilla":"705044","bugzilla_description":"CVE-2011-0633 perl-libwww-perl: no hostname check against SSL certificate name by default","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0633.json"},{"CVE":"CVE-2010-4334","severity":"low","public_date":"2010-12-06T00:00:00Z","advisories":[],"bugzilla":"660847","bugzilla_description":"CVE-2010-4334 perl-IO-Socket-SSL: ignores user request for peer verification","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4334.json"},{"CVE":"CVE-2010-2761","severity":"moderate","public_date":"2010-11-10T00:00:00Z","advisories":["RHSA-2011:1797","RHSA-2011:0558"],"bugzilla":"658976","bugzilla_description":"perl-CGI, perl-CGI-Simple: CVE-2010-2761 - hardcoded MIME boundary value for multipart content, CVE-2010-4410 - CRLF injection allowing HTTP response splitting","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["perl-4:5.8.8-32.el5_7.6","perl-3:5.8.5-57.el4","perl-4:5.10.1-119.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2761.json"},{"CVE":"CVE-2010-4410","severity":"moderate","public_date":"2010-11-10T00:00:00Z","advisories":["RHSA-2011:1797","RHSA-2011:0558"],"bugzilla":"658976","bugzilla_description":"perl-CGI, perl-CGI-Simple: CVE-2010-2761 - hardcoded MIME boundary value for multipart content, CVE-2010-4410 - CRLF injection allowing HTTP response splitting","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["perl-4:5.8.8-32.el5_7.6","perl-3:5.8.5-57.el4","perl-4:5.10.1-119.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4410.json"},{"CVE":"CVE-2010-4777","severity":"moderate","public_date":"2010-07-16T00:00:00Z","advisories":[],"bugzilla":"694166","bugzilla_description":"CVE-2010-4777 perl: assertion failure with certain regular expressions","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4777.json"},{"CVE":"CVE-2010-1168","severity":"moderate","public_date":"2010-05-20T00:00:00Z","advisories":["RHSA-2010:0458","RHSA-2010:0457"],"bugzilla":"576508","bugzilla_description":"CVE-2010-1168 perl Safe: Intended restriction bypass via object references","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["perl-3:5.8.5-53.el4","perl-4:5.8.8-32.el5_5.1","perl-2:5.8.0-101.EL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1168.json"},{"CVE":"CVE-2010-1447","severity":"moderate","public_date":"2010-05-17T00:00:00Z","advisories":["RHSA-2010:0458","RHSA-2010:0457"],"bugzilla":"588269","bugzilla_description":"CVE-2010-1447 perl: Safe restriction bypass when reference to subroutine in compartment is called from outside","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-3:5.8.5-53.el4","perl-4:5.8.8-32.el5_5.1","perl-2:5.8.0-101.EL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1447.json"},{"CVE":"CVE-2010-2253","severity":"low","public_date":"2010-05-17T00:00:00Z","advisories":[],"bugzilla":"602800","bugzilla_description":"CVE-2010-2253 perl-libwww-perl: multiple HTTP client download filename vulnerability [OCERT 2010-001]","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2253.json"},{"CVE":"CVE-2010-1974","severity":null,"public_date":"2010-05-08T00:00:00Z","advisories":[],"bugzilla":"593857","bugzilla_description":"CVE-2010-1974 perl: multiple unspecified vulnerabilities in Safe","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1974.json"},{"CVE":"CVE-2009-0663","severity":"moderate","public_date":"2009-04-28T00:00:00Z","advisories":["RHSA-2009:0479","RHSA-2009:1067"],"bugzilla":"497367","bugzilla_description":"CVE-2009-0663 perl-DBD-Pg: pg_getline buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-DBD-Pg-0:1.49-2.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0663.json"},{"CVE":"CVE-2009-1341","severity":"moderate","public_date":"2009-04-28T00:00:00Z","advisories":["RHSA-2009:0479","RHSA-2009:1067"],"bugzilla":"497503","bugzilla_description":"CVE-2009-1341 perl-DBD-Pg: dequote_bytea memory leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/AU:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["perl-DBD-Pg-0:1.49-2.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1341.json"},{"CVE":"CVE-2008-5302","severity":"low","public_date":"2008-11-19T00:00:00Z","advisories":["RHSA-2010:0458"],"bugzilla":"473450","bugzilla_description":"CVE-2008-5302 perl: File::Path rmtree race condition (CVE-2005-0448) reintroduced after upstream rebase to 5.8.8-1","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-4:5.8.8-32.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5302.json"},{"CVE":"CVE-2008-5303","severity":"low","public_date":"2008-11-19T00:00:00Z","advisories":["RHSA-2010:0458"],"bugzilla":"474217","bugzilla_description":"CVE-2008-5303 symlink perl: File::Path rmtree race condition (CVE-2004-0452) reintroduced after upstream rebase to 5.8.8-1","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-4:5.8.8-32.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5303.json"},{"CVE":"CVE-2008-1927","severity":"important","public_date":"2007-12-04T00:00:00Z","advisories":["RHSA-2008:0522","RHSA-2008:0532","RHSA-2010:0602"],"bugzilla":"443928","bugzilla_description":"CVE-2008-1927 perl: heap corruption by regular expressions with utf8 characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-4:5.8.8-10.el5_2.3","perl-2:5.8.0-98.EL3","perl-3:5.8.5-36.el4_6.3","perl-4:5.8.8-6.el4s1_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1927.json"},{"CVE":"CVE-2007-5116","severity":"important","public_date":"2007-11-05T00:00:00Z","advisories":["RHSA-2007:1011","RHSA-2010:0602","RHSA-2007:0966"],"bugzilla":"323571","bugzilla_description":"CVE-2007-5116 perl regular expression UTF parsing errors","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-4:5.8.8-10.el5_0.2","perl-4:5.8.8-5.el4s1_2","perl-3:5.8.5-36.el4_5.2","perl-2:5.8.0-97.EL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5116.json"},{"CVE":"CVE-2007-4829","severity":"moderate","public_date":"2007-08-24T00:00:00Z","advisories":["RHSA-2010:0505"],"bugzilla":"295021","bugzilla_description":"CVE-2007-4829 perl-Archive-Tar directory traversal flaws","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-Archive-Tar-1:1.39.1-1.el5_5.1","perl-Archive-Tar-0:1.39.1-1.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4829.json"},{"CVE":"CVE-2007-1349","severity":"moderate","public_date":"2007-03-22T00:00:00Z","advisories":["RHSA-2007:0395","RHSA-2007:0396","RHSA-2008:0630","RHSA-2010:0602","RHSA-2008:0263","RHSA-2007:0486","RHSA-2008:0261","RHSA-2008:0627","RHSA-2008:0524","RHSA-2008:0523"],"bugzilla":"240423","bugzilla_description":"CVE-2007-1349 mod_perl PerlRun denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["mod_perl-0:2.0.3-1.el4s1.3","mod_perl-0:2.0.2-12.el4","mod_perl-0:1.26-8.el2","mod_perl-0:1.99_16-4.5","mod_perl-0:1.99_09-12.ent","mod_perl-0:2.0.2-6.3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1349.json"},{"CVE":"CVE-2007-3377","severity":"moderate","public_date":"2006-12-22T00:00:00Z","advisories":["RHSA-2007:0675","RHSA-2007:0674"],"bugzilla":"245466","bugzilla_description":"CVE-2007-3377 perl-Net-DNS security issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-Net-DNS-0:0.48-2.el4","perl-Net-DNS-0:0.31-4.el3","perl-Net-DNS-0:0.59-3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3377.json"},{"CVE":"CVE-2007-3409","severity":"moderate","public_date":"2006-12-22T00:00:00Z","advisories":["RHSA-2007:0674"],"bugzilla":"245804","bugzilla_description":"CVE-2007-3409 Perl Net::DNS denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-Net-DNS-0:0.31-4.el3","perl-Net-DNS-0:0.59-3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3409.json"},{"CVE":"CVE-2006-3813","severity":"important","public_date":"2006-08-10T00:00:00Z","advisories":["RHSA-2006:0605"],"bugzilla":"1618172","bugzilla_description":"CVE-2006-3813 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-3:5.8.5-36.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3813.json"},{"CVE":"CVE-2005-3962","severity":"moderate","public_date":"2005-12-01T00:00:00Z","advisories":["RHSA-2005:881","RHSA-2005:880"],"bugzilla":"1617848","bugzilla_description":"CVE-2005-3962 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-2:5.8.0-90.4","perl-3:5.8.5-24.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3962.json"},{"CVE":"CVE-2005-0448","severity":"low","public_date":"2005-03-09T00:00:00Z","advisories":["RHSA-2005:674","RHSA-2005:881"],"bugzilla":"1617524","bugzilla_description":"CVE-2005-0448 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-2:5.8.0-90.4","perl-3:5.8.5-16.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0448.json"},{"CVE":"CVE-2005-0155","severity":"moderate","public_date":"2005-02-01T00:00:00Z","advisories":["RHSA-2005:105","RHSA-2005:103"],"bugzilla":"1617476","bugzilla_description":"CVE-2005-0155 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-2:5.8.0-89.10","perl-3:5.8.5-12.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0155.json"},{"CVE":"CVE-2005-0156","severity":"important","public_date":"2005-02-01T00:00:00Z","advisories":["RHSA-2005:105","RHSA-2005:103"],"bugzilla":"1617477","bugzilla_description":"CVE-2005-0156 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-2:5.8.0-89.10","perl-3:5.8.5-12.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0156.json"},{"CVE":"CVE-2005-0077","severity":"low","public_date":"2005-01-25T00:00:00Z","advisories":["RHSA-2005:069","RHSA-2005:072"],"bugzilla":"1617444","bugzilla_description":"CVE-2005-0077 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-DBI-0:1.40-8","perl-DBI-0:1.32-9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0077.json"},{"CVE":"CVE-2004-0452","severity":"low","public_date":"2004-12-23T00:00:00Z","advisories":["RHSA-2005:105","RHSA-2005:103"],"bugzilla":"1618363","bugzilla_description":"CVE-2004-0452 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-2:5.8.0-89.10","perl-3:5.8.5-12.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0452.json"},{"CVE":"CVE-2004-0976","severity":"low","public_date":"2004-09-30T00:00:00Z","advisories":["RHSA-2005:881"],"bugzilla":"1617339","bugzilla_description":"CVE-2004-0976 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["perl-2:5.8.0-90.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0976.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perltidy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perltidy_security_api_results.json
new file mode 100644
index 0000000..9e83055
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/perltidy_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-10374","severity":"low","public_date":"2016-08-13T00:00:00Z","advisories":[],"bugzilla":"1452050","bugzilla_description":"CVE-2016-10374 perltidy: Uses current working directory without symlink-attack protection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10374.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2014-2277","severity":"low","public_date":"2014-03-03T00:00:00Z","advisories":[],"bugzilla":"1074720","bugzilla_description":"CVE-2014-2277 perltidy: insecure temporary file creation","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2277.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pesign_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pesign_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pesign_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pgaudit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pgaudit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pgaudit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-bcmath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-bcmath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-bcmath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-dba_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-dba_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-dba_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-dbg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-dbg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-dbg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-embedded_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-embedded_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-embedded_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-enchant_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-enchant_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-enchant_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-fpm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-fpm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-fpm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-gd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-gd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-gd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-gmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-gmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-gmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-intl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-intl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-intl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-json_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-json_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-json_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-ldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-ldap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-ldap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-mbstring_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-mbstring_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-mbstring_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-mysqlnd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-mysqlnd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-mysqlnd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-odbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-odbc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-odbc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-opcache_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-opcache_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-opcache_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pdo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pdo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pdo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pear_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pear_security_api_results.json
new file mode 100644
index 0000000..a72ff22
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pear_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1000888","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1669615","bugzilla_description":"CVE-2018-1000888 php-pear: Unsafe deserialization of data in Archive_Tar class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000888.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-5630","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":[],"bugzilla":"1418771","bugzilla_description":"CVE-2017-5630 php-pear: File overwrite by malicious server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5630.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.4"},{"CVE":"CVE-2014-5459","severity":"moderate","public_date":"2014-08-25T00:00:00Z","advisories":[],"bugzilla":"1133753","bugzilla_description":"CVE-2014-5459 php-pear: insecure temporary file use for cache data","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5459.json"},{"CVE":"CVE-2011-1072","severity":"low","public_date":"2010-11-14T00:00:00Z","advisories":["RHSA-2011:1741"],"bugzilla":"681982","bugzilla_description":"CVE-2011-1072 CVE-2011-1144 php-pear: symlink vulnerability in PEAR installer","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-pear-1:1.9.4-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1072.json"},{"CVE":"CVE-2011-1144","severity":"low","public_date":"2010-11-14T00:00:00Z","advisories":[],"bugzilla":"681982","bugzilla_description":"CVE-2011-1072 CVE-2011-1144 php-pear: symlink vulnerability in PEAR installer","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1144.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-apcu-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-apcu-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-apcu-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-apcu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-apcu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-apcu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-rrd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-rrd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-rrd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-xdebug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-xdebug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-xdebug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-zip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-zip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pecl-zip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pgsql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pgsql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-pgsql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-process_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-process_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-process_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-recode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-recode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-recode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-snmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-snmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-snmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-soap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-soap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-soap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-xml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-xml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-xml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-xmlrpc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-xmlrpc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php-xmlrpc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php_security_api_results.json
new file mode 100644
index 0000000..745b8d9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/php_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-26159","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1884111","bugzilla_description":"CVE-2020-26159 oniguruma: Buffer overflow in concat_opt_exact_str could result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26159.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2020-7068","severity":"low","public_date":"2020-08-06T00:00:00Z","advisories":[],"bugzilla":"1868109","bugzilla_description":"CVE-2020-7068 php: Use of freed hash key in the phar_parse_zipfile function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7068.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2020-7070","severity":"low","public_date":"2020-06-14T00:00:00Z","advisories":[],"bugzilla":"1885738","bugzilla_description":"CVE-2020-7070 php: PHP parses encoded cookie names so malicious `__Host-` cookies can be sent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7070.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-7069","severity":"moderate","public_date":"2020-05-15T00:00:00Z","advisories":[],"bugzilla":"1885735","bugzilla_description":"CVE-2020-7069 php: wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7069.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11048","severity":"moderate","public_date":"2020-05-14T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1837842","bugzilla_description":"CVE-2019-11048 php: Integer wraparounds when receiving multipart forms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11048.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7067","severity":"moderate","public_date":"2020-04-10T00:00:00Z","advisories":[],"bugzilla":"1827653","bugzilla_description":"CVE-2020-7067 php: out-of-bounds read when using a malformed url-encoded string","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7067.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-7064","severity":"moderate","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1820601","bugzilla_description":"CVE-2020-7064 php: Information disclosure in exif_read_data() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7064.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-7066","severity":"low","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1820604","bugzilla_description":"CVE-2020-7066 php: Information disclosure in function get_headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7066.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-7065","severity":"moderate","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1820627","bugzilla_description":"CVE-2020-7065 php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-787|CWE-121)","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7065.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-7062","severity":"moderate","public_date":"2020-02-04T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1808532","bugzilla_description":"CVE-2020-7062 php: NULL pointer dereference in PHP session upload progress","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7062.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7061","severity":"low","public_date":"2020-01-26T00:00:00Z","advisories":[],"bugzilla":"1808529","bugzilla_description":"CVE-2020-7061 php: heap-based buffer overflow in phar_extract_file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7061.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2020-7059","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1797776","bugzilla_description":"CVE-2020-7059 php: Out of bounds read in php_strip_tags_ex","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7059.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-7060","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1797779","bugzilla_description":"CVE-2020-7060 php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7060.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-7063","severity":"moderate","public_date":"2020-01-08T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1808536","bugzilla_description":"CVE-2020-7063 php: Files added to tar with Phar::buildFromIterator have all-access permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7063.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-11047","severity":"moderate","public_date":"2019-12-22T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1786570","bugzilla_description":"CVE-2019-11047 php: Information disclosure in exif_read_data()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11047.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-11045","severity":"moderate","public_date":"2019-12-22T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1786572","bugzilla_description":"CVE-2019-11045 php: DirectoryIterator class accepts filenames with embedded \\0 byte and treats them as terminating at that byte","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-170","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11045.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-14553","severity":"low","public_date":"2019-12-20T00:00:00Z","advisories":[],"bugzilla":"1600727","bugzilla_description":"CVE-2018-14553 gd: NULL pointer dereference in gdImageClone","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14553.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-11046","severity":"low","public_date":"2019-12-16T00:00:00Z","advisories":[],"bugzilla":"1786567","bugzilla_description":"CVE-2019-11046 php: OOB read  in bc_shift_addsub","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11046.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-11049","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1788586","bugzilla_description":"CVE-2019-11049 php: double free when supplying custom headers to mail function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11049.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-11044","severity":null,"public_date":"2019-11-23T00:00:00Z","advisories":[],"bugzilla":"1789069","bugzilla_description":"CVE-2019-11044 php: link function accepts filenames with embedded null byte and treats them as terminating at that byte on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-170","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11044.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-19012","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":[],"bugzilla":"1802051","bugzilla_description":"CVE-2019-19012 oniguruma: integer overflow in search_in_range function in regexec.c leads to out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19012.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11050","severity":"low","public_date":"2019-11-07T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1788258","bugzilla_description":"CVE-2019-11050 php: Out of bounds read when parsing EXIF information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11050.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-19203","severity":"moderate","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1802061","bugzilla_description":"CVE-2019-19203 oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19204","severity":"moderate","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1802068","bugzilla_description":"CVE-2019-19204 oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19204.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11043","severity":"critical","public_date":"2019-10-24T00:00:00Z","advisories":["RHSA-2020:0322","RHSA-2019:3287","RHSA-2019:3299","RHSA-2019:3300","RHSA-2020:2835","RHSA-2019:3286","RHSA-2019:3735","RHSA-2019:3724","RHSA-2019:3736"],"bugzilla":"1766378","bugzilla_description":"CVE-2019-11043 php: underflow in env_path_info in fpm_main.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-787","affected_packages":["php-0:5.4.16-46.1.el7_6","rh-php70-php-0:7.0.27-2.el7","rh-php72-php-0:7.2.24-1.el7","rh-php70-php-0:7.0.27-2.el6","php:7.2-8010020191030112723.dcfb48bd","php-0:5.4.16-46.1.el7_7","php-0:5.3.3-50.el6_10","php:7.3-8010020191030161321.dcfb48bd","rh-php71-php-0:7.1.30-2.el7","php:7.2-8000020191113103901.5d58a046"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11043.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-18218","severity":"moderate","public_date":"2019-08-26T00:00:00Z","advisories":[],"bugzilla":"1765272","bugzilla_description":"CVE-2019-18218 file: heap-based buffer overflow in cdf_read_property_info in cdf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18218.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-19246","severity":"low","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1777537","bugzilla_description":"CVE-2019-19246 oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2019-11041","severity":"low","public_date":"2019-08-09T00:00:00Z","advisories":["RHSA-2020:3662","RHSA-2019:3299","RHSA-2020:1624"],"bugzilla":"1739459","bugzilla_description":"CVE-2019-11041 php: Heap buffer over-read in exif_scan_thumbnail()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891","php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11041.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2019-11042","severity":"low","public_date":"2019-08-09T00:00:00Z","advisories":["RHSA-2020:3662","RHSA-2019:3299","RHSA-2020:1624"],"bugzilla":"1739465","bugzilla_description":"CVE-2019-11042 php: Heap buffer over-read in exif_process_user_comment()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891","php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-7189","severity":"moderate","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1734756","bugzilla_description":"CVE-2017-7189 php: misparsing fsockopen calls in main/streams/xp_socket.c leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7189.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-16162","severity":"moderate","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1781304","bugzilla_description":"CVE-2019-16162 onigmo: out-of-bounds read in next_state_val() in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16162.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16163","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1768997","bugzilla_description":"CVE-2019-16163 oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16163.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-16161","severity":"low","public_date":"2019-07-28T00:00:00Z","advisories":[],"bugzilla":"1769042","bugzilla_description":"CVE-2019-16161 onigmo: NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16161.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13225","severity":"moderate","public_date":"2019-06-27T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1728965","bugzilla_description":"CVE-2019-13225 oniguruma: NULL pointer dereference in match_at() in regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-13224","severity":"moderate","public_date":"2019-06-27T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1728970","bugzilla_description":"CVE-2019-13224 oniguruma: Use-after-free in onig_new_deluxe() in regext.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-11038","severity":"low","public_date":"2019-06-18T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2019:2519"],"bugzilla":"1724149","bugzilla_description":"CVE-2019-11038 gd: Information disclosure in gdImageCreateFromXbm()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11038.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-11039","severity":"moderate","public_date":"2019-06-18T00:00:00Z","advisories":["RHSA-2020:3662","RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1724152","bugzilla_description":"CVE-2019-11039 php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891","php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11039.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-11040","severity":"moderate","public_date":"2019-06-18T00:00:00Z","advisories":["RHSA-2020:3662","RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1724154","bugzilla_description":"CVE-2019-11040 php: Buffer over-read in exif_read_data()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891","php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-11037","severity":"moderate","public_date":"2019-05-04T00:00:00Z","advisories":[],"bugzilla":"1708570","bugzilla_description":"CVE-2019-11037 php-imagick: out-of-bounds write to memory in ImagickKernel::fromMatrix() leading to possible crash and DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11036","severity":"low","public_date":"2019-05-02T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1707299","bugzilla_description":"CVE-2019-11036 php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11036.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2019-11035","severity":"low","public_date":"2019-04-02T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1702246","bugzilla_description":"CVE-2019-11035 php: Heap buffer overflow in function exif_iif_add_value()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11035.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11034","severity":"low","public_date":"2019-03-16T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1702256","bugzilla_description":"CVE-2019-11034 php: Heap buffer overflow in function exif_process_IFD_TAG()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11034.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9639","severity":"moderate","public_date":"2019-02-23T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1688934","bugzilla_description":"CVE-2019-9639 php: Uninitialized read in exif_process_IFD_in_MAKERNOTE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9639.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9024","severity":"low","public_date":"2019-02-22T00:00:00Z","advisories":["RHSA-2020:1112","RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1685404","bugzilla_description":"CVE-2019-9024 php: Out-of-bounds read in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php-0:5.4.16-48.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9024.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-9025","severity":"moderate","public_date":"2019-02-22T00:00:00Z","advisories":[],"bugzilla":"1685408","bugzilla_description":"CVE-2019-9025 php: Negative size parameter in mb_split","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9025.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-8905","severity":"low","public_date":"2019-02-18T00:00:00Z","advisories":[],"bugzilla":"1679181","bugzilla_description":"CVE-2019-8905 file: stack-based buffer over-read in do_core_note in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8905.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-8904","severity":"low","public_date":"2019-02-18T00:00:00Z","advisories":[],"bugzilla":"1679188","bugzilla_description":"CVE-2019-8904 file: stack-based buffer over-read in do_bid_note in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8904.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-9637","severity":"moderate","public_date":"2019-02-18T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1688897","bugzilla_description":"CVE-2019-9637 php: File rename across filesystems may allow unwanted access during processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-9675","severity":null,"public_date":"2019-02-08T00:00:00Z","advisories":[],"bugzilla":"1688947","bugzilla_description":"CVE-2019-9675 php: buffer overflow in ext/phar/tar.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9675.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-9638","severity":"moderate","public_date":"2019-02-04T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1688922","bugzilla_description":"CVE-2019-9638 php: Uninitialized read in exif_process_IFD_in_MAKERNOTE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9640","severity":"moderate","public_date":"2019-01-29T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1688939","bugzilla_description":"CVE-2019-9640 php: Invalid read in exif_process_SOFn()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9640.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9641","severity":"moderate","public_date":"2019-01-23T00:00:00Z","advisories":[],"bugzilla":"1688943","bugzilla_description":"CVE-2019-9641 php: Uninitialized read in exif_process_IFD_in_TIFF","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9641.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-6978","severity":"low","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:2722","RHSA-2020:3943"],"bugzilla":"1671390","bugzilla_description":"CVE-2019-6978 gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["libwmf-0:0.2.8.4-44.el7","libwmf-0:0.2.9-8.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-8907","severity":"low","public_date":"2019-01-03T00:00:00Z","advisories":[],"bugzilla":"1679138","bugzilla_description":"CVE-2019-8907 file: do_core_note in readelf.c allows remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8907.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-8906","severity":"low","public_date":"2019-01-03T00:00:00Z","advisories":[],"bugzilla":"1679175","bugzilla_description":"CVE-2019-8906 file: out-of-bounds read in do_core_note in readelf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8906.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-9023","severity":"low","public_date":"2018-12-29T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1685398","bugzilla_description":"CVE-2019-9023 php: Heap-based buffer over-read in mbstring regular expression functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-9022","severity":"low","public_date":"2018-12-29T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1685412","bugzilla_description":"CVE-2019-9022 php: memcpy with negative length via crafted DNS response","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2018-1000888","severity":"moderate","public_date":"2018-12-28T00:00:00Z","advisories":[],"bugzilla":"1669615","bugzilla_description":"CVE-2018-1000888 php-pear: Unsafe deserialization of data in Archive_Tar class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000888.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-6977","severity":"moderate","public_date":"2018-12-09T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2019:2519"],"bugzilla":"1672207","bugzilla_description":"CVE-2019-6977 gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6977.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-9021","severity":"low","public_date":"2018-12-06T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1685132","bugzilla_description":"CVE-2019-9021 php: Heap-based buffer over-read in PHAR reading functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9021.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-9020","severity":"moderate","public_date":"2018-12-05T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1685123","bugzilla_description":"CVE-2019-9020 php: Invalid memory access in function xmlrpc_decode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-19396","severity":"low","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1652716","bugzilla_description":"CVE-2018-19396 php: Serializing or unserializing COM objects crashes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19396.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-19518","severity":"moderate","public_date":"2018-11-19T00:00:00Z","advisories":[],"bugzilla":"1654228","bugzilla_description":"CVE-2018-19518 php: imap_open() allows running arbitrary shell commands via mailbox parameter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-20783","severity":"low","public_date":"2018-11-12T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2020:1624","RHSA-2019:2519"],"bugzilla":"1680545","bugzilla_description":"CVE-2018-20783 php: Buffer over-read in PHAR reading functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7","php:7.2-8020020191108065827.2c7ca891"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20783.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-19935","severity":"low","public_date":"2018-10-16T00:00:00Z","advisories":[],"bugzilla":"1660525","bugzilla_description":"CVE-2018-19935 php: NULL pointer dereference in ext/imap/php_imap.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19935.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-17082","severity":"moderate","public_date":"2018-09-13T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1629552","bugzilla_description":"CVE-2018-17082 php: Cross-site scripting (XSS) flaw in Apache2 component via body of 'Transfer-Encoding: chunked' request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17082.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-1000222","severity":"moderate","public_date":"2018-07-15T00:00:00Z","advisories":[],"bugzilla":"1621953","bugzilla_description":"CVE-2018-1000222 gd: Double free in src/gd_bump.c:gdImageBmpPtr() via crafted JPEG","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000222.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10360","severity":"low","public_date":"2018-06-09T00:00:00Z","advisories":["RHSA-2020:2521","RHBA-2020:1539","RHSA-2020:1022","RHSA-2020:2838","RHSA-2020:2768","RHBA-2020:1540"],"bugzilla":"1590000","bugzilla_description":"CVE-2018-10360 file: out-of-bounds read via a crafted ELF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","file-0:5.11-35.el7_6.1","file-0:5.11-35.el7_7.1","file-0:5.11-33.el7_4.1","file-0:5.11-36.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10360.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-14883","severity":"low","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1609637","bugzilla_description":"CVE-2018-14883 php: exif: integer overflow leading to out-of-bound buffer read in exif_thumbnail_extract()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14883.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14851","severity":"low","public_date":"2018-06-07T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1609642","bugzilla_description":"CVE-2018-14851 php: exif: Buffer over-read in exif_process_IFD_in_MAKERNOTE()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14851.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-12882","severity":"moderate","public_date":"2018-06-03T00:00:00Z","advisories":[],"bugzilla":"1595502","bugzilla_description":"CVE-2018-12882 php: Use-after-free reachable via the exif.c:exif_read_from_impl() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12882.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-10549","severity":"low","public_date":"2018-04-26T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1573797","bugzilla_description":"CVE-2018-10549 php: Out-of-bounds read in ext/exif/exif.c:exif_read_data() when reading crafted JPEG data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10549.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2018-10546","severity":"moderate","public_date":"2018-04-26T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1573802","bugzilla_description":"CVE-2018-10546 php: Infinite loop in ext/iconv/iconv.c when using stream filter with convert.incov on invalid sequence leads to denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10546.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10548","severity":"moderate","public_date":"2018-04-26T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1573805","bugzilla_description":"CVE-2018-10548 php: NULL pointer dereference due to mishandling of ldap_get_dn return value allows DoS via malicious LDAP server reply","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-10547","severity":"moderate","public_date":"2018-04-26T00:00:00Z","advisories":["RHSA-2020:1112","RHSA-2019:2519"],"bugzilla":"1573814","bugzilla_description":"CVE-2018-10547 php: Reflected XSS vulnerability on PHAR 403 and 404 error pages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["rh-php71-php-0:7.1.30-1.el7","php-0:5.4.16-48.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10547.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-7584","severity":"moderate","public_date":"2018-02-20T00:00:00Z","advisories":["RHSA-2020:1112","RHSA-2019:2519"],"bugzilla":"1551039","bugzilla_description":"CVE-2018-7584 php: Stack-based buffer under-read in php_stream_url_wrap_http_ex() in http_fopen_wrapper.c when parsing HTTP response","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7","php-0:5.4.16-48.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7584.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-10545","severity":"low","public_date":"2017-11-30T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1563858","bugzilla_description":"CVE-2018-10545 php: Dumpable FPM child processes allow bypassing opcache access controls","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10545.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2018-5711","severity":"low","public_date":"2017-11-25T00:00:00Z","advisories":["RHSA-2019:2519","RHSA-2018:1296"],"bugzilla":"1535246","bugzilla_description":"CVE-2018-5711 gd: Infinite loop in gdImageCreateFromGifCtx() in gd_gif_in.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5711.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-14884","severity":"moderate","public_date":"2017-11-17T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1612362","bugzilla_description":"CVE-2018-14884 php: Mishandled http_header_value in an atoi() call in http_fopen_wrapper.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14884.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16642","severity":"low","public_date":"2017-11-07T00:00:00Z","advisories":["RHSA-2019:2519","RHSA-2018:1296"],"bugzilla":"1512057","bugzilla_description":"CVE-2017-16642 php: Out-of-bound read in timelib_meridian()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16642.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-16231","severity":null,"public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1700392","bugzilla_description":"CVE-2017-16231 pcre: self-recursive call in match() in pcre_exec.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-1000249","severity":"important","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1488053","bugzilla_description":"CVE-2017-1000249 file: Stack-based buffer overflow in do_bid_note()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000249.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-6362","severity":"moderate","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1489842","bugzilla_description":"CVE-2017-6362 gd: Double free in the gdImagePngPtr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-12858","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1484514","bugzilla_description":"CVE-2017-12858 libzip: Double free in _zip_dirent_read function in zip_dirent.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12858.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11628","severity":"moderate","public_date":"2017-07-25T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1475522","bugzilla_description":"CVE-2017-11628 php: Stack based 1-byte buffer over-write in zend_ini_do_op() function Zend/zend_ini_parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11628.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-11362","severity":"moderate","public_date":"2017-07-17T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1475373","bugzilla_description":"CVE-2017-11362 php: Stack-based buffer over-read in msgfmt_parse_message function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11362.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-11164","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":[],"bugzilla":"1470107","bugzilla_description":"CVE-2017-11164 pcre: OP_KETRMAX feature in the match function in pcre_exec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7890","severity":"moderate","public_date":"2017-07-10T00:00:00Z","advisories":["RHSA-2018:0406","RHSA-2018:1296"],"bugzilla":"1473822","bugzilla_description":"CVE-2017-7890 php: Buffer over-read from unitialized data in gdImageCreateFromGifCtx function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-43.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7890.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-11145","severity":"low","public_date":"2017-06-27T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1471834","bugzilla_description":"CVE-2017-11145 php: wddx_deserialize() heap out-of-bound read via php_parse_date()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11145.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-5712","severity":"moderate","public_date":"2017-06-19T00:00:00Z","advisories":["RHSA-2020:1112","RHSA-2019:2519","RHSA-2018:1296"],"bugzilla":"1535251","bugzilla_description":"CVE-2018-5712 php: Reflected XSS on PHAR 404 page","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-48.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5712.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-11144","severity":"moderate","public_date":"2017-05-25T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1471827","bugzilla_description":"CVE-2017-11144 php: Incorrect return value check of OpenSSL sealing function leads to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11144.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9227","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466739","bugzilla_description":"CVE-2017-9227 oniguruma: Out-of-bounds stack read in mbc_enc_len() during regular expression searching","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9227.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9228","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466740","bugzilla_description":"CVE-2017-9228 oniguruma: Out-of-bounds heap write in bitset_set_range()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9228.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9229","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466746","bugzilla_description":"CVE-2017-9229 oniguruma: Invalid pointer dereference in left_adjust_char_head()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9229.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-9224","severity":"moderate","public_date":"2017-05-22T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466730","bugzilla_description":"CVE-2017-9224 oniguruma: Out-of-bounds stack read in match_at() during regular expression searching","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-9225","severity":"moderate","public_date":"2017-05-22T00:00:00Z","advisories":[],"bugzilla":"1466733","bugzilla_description":"CVE-2017-9225 oniguruma: Out-of-bounds stack write in onigenc_unicode_get_case_fold_codes_by_str() during regular expression compilation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9226","severity":"moderate","public_date":"2017-05-18T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466736","bugzilla_description":"CVE-2017-9226 oniguruma: Heap buffer overflow in next_state_val() during regular expression compilation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9226.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-9118","severity":"moderate","public_date":"2017-05-17T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1611890","bugzilla_description":"CVE-2017-9118 php: Out of bounds access in php_pcre.c:php_pcre_replace_impl()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-9119","severity":"moderate","public_date":"2017-05-15T00:00:00Z","advisories":[],"bugzilla":"1456749","bugzilla_description":"CVE-2017-9119 php: Segfault in i_zval_ptr_dtor()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9119.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-8923","severity":"moderate","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1451700","bugzilla_description":"CVE-2017-8923 php: Overflowing the length of string causes crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-9120","severity":"moderate","public_date":"2017-05-09T00:00:00Z","advisories":["RHSA-2019:2519"],"bugzilla":"1611898","bugzilla_description":"CVE-2017-9120 php: Integer overflow in mysqli_api.c:mysqli_real_escape_string()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php71-php-0:7.1.30-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9120.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-7272","severity":"low","public_date":"2017-03-27T00:00:00Z","advisories":[],"bugzilla":"1437837","bugzilla_description":"CVE-2017-7272 php: potential SSRF via fsockopen","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2017-7244","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437364","bugzilla_description":"CVE-2017-7244 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7245","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437367","bugzilla_description":"CVE-2017-7245 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7246","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437369","bugzilla_description":"CVE-2017-7246 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-8399","severity":"moderate","public_date":"2017-03-10T00:00:00Z","advisories":[],"bugzilla":"1449629","bugzilla_description":"CVE-2017-8399 pcre2: Stack-based buffer overflow in pcre2_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7186","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1434504","bugzilla_description":"CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-6441","severity":"low","public_date":"2017-02-22T00:00:00Z","advisories":[],"bugzilla":"1443487","bugzilla_description":"CVE-2017-6441 php: Null pointer dereference via crafted \"declare(ticks=\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6441.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11143","severity":"moderate","public_date":"2017-02-22T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1471824","bugzilla_description":"CVE-2017-11143 php: Incorrect WDDX deserialization of boolean parameters leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11143.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-12932","severity":"moderate","public_date":"2017-02-20T00:00:00Z","advisories":["RHSA-2019:2519","RHSA-2018:1296"],"bugzilla":"1484837","bugzilla_description":"CVE-2017-12932 php: Heap use after free in ext/standard/var_unserializer.re","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12932.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12933","severity":"low","public_date":"2017-02-16T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1484838","bugzilla_description":"CVE-2017-12933 php: buffer over-read in finish_nested_data function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-12934","severity":"moderate","public_date":"2017-02-15T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1484839","bugzilla_description":"CVE-2017-12934 php: heap use after free in ext/standard/var_unserializer.re","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12934.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-6004","severity":"moderate","public_date":"2017-02-14T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1425365","bugzilla_description":"CVE-2017-6004 pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5630","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":[],"bugzilla":"1418771","bugzilla_description":"CVE-2017-5630 php-pear: File overwrite by malicious server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5630.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.4"},{"CVE":"CVE-2016-10161","severity":"moderate","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1419010","bugzilla_description":"CVE-2016-10161 php: Out-of-bounds heap read on unserialize in finish_nested_data()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10162","severity":"moderate","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1419012","bugzilla_description":"CVE-2016-10162 php: Null pointer dereference when unserializing PHP object","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10162.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10158","severity":"moderate","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1419015","bugzilla_description":"CVE-2016-10158 php: Wrong calculation in exif_convert_any_to_int function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10160","severity":"moderate","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1419018","bugzilla_description":"CVE-2016-10160 php: Off-by-one error in phar_parse_pharfile when loading crafted phar archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10159","severity":"moderate","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1419020","bugzilla_description":"CVE-2016-10159 php: Integer overflow in phar_parse_pharfile","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-5340","severity":"moderate","public_date":"2016-12-29T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1412631","bugzilla_description":"CVE-2017-5340 php: Use of uninitialized memory in unserialize()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5340.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-7479","severity":"moderate","public_date":"2016-12-27T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1412686","bugzilla_description":"CVE-2016-7479 php: Use-after-free vulnerability when resizing the 'properties' hash table of a serialized object","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7479.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-11142","severity":"low","public_date":"2016-12-23T00:00:00Z","advisories":[],"bugzilla":"1471820","bugzilla_description":"CVE-2017-11142 php: Denial-of-Service via injecting long form variables","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11142.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10168","severity":"moderate","public_date":"2016-12-17T00:00:00Z","advisories":["RHSA-2017:3221","RHSA-2018:1296"],"bugzilla":"1418986","bugzilla_description":"CVE-2016-10168 gd: Integer overflow in gd_io.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-43.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10168.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-11147","severity":"moderate","public_date":"2016-12-17T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1471842","bugzilla_description":"CVE-2017-11147 php: Out-of-bounds read in phar_parse_pharfile","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11147.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-9933","severity":"low","public_date":"2016-12-08T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1404723","bugzilla_description":"CVE-2016-9933 php, gd: Stack overflow in gdImageFillToBorder on truecolor images","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9933.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9935","severity":"moderate","public_date":"2016-12-08T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1404731","bugzilla_description":"CVE-2016-9935 php: Invalid read when wddx decodes empty boolean element","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9935.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2016-9936","severity":"moderate","public_date":"2016-12-08T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1404735","bugzilla_description":"CVE-2016-9936 php: Use After Free in unserialize()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9317","severity":"moderate","public_date":"2016-11-12T00:00:00Z","advisories":[],"bugzilla":"1417987","bugzilla_description":"CVE-2016-9317 gd: Missing check for oversized images in gdImageCreate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9317.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-6911","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":[],"bugzilla":"1388787","bugzilla_description":"CVE-2016-6911 gd, php: Missing check for OOB read in dynamicGetbuf()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6911.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-8670","severity":"moderate","public_date":"2016-10-10T00:00:00Z","advisories":[],"bugzilla":"1391068","bugzilla_description":"CVE-2016-8670 gd, php: Stack based buffer overflow in dynamicGetbuf","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8670.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-7480","severity":"moderate","public_date":"2016-10-06T00:00:00Z","advisories":[],"bugzilla":"1416499","bugzilla_description":"CVE-2016-7480 php: Use of uninitialized value in SplObjectStorag::unserialize","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7480.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-10397","severity":"moderate","public_date":"2016-09-28T00:00:00Z","advisories":[],"bugzilla":"1471811","bugzilla_description":"CVE-2016-10397 php: Incorrect handling of URI components in URL parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-228","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10397.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-9138","severity":"moderate","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1391012","bugzilla_description":"CVE-2016-9138 php: Use after free in unserialize() via DateInterval::__wakeup()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9138.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-9137","severity":"moderate","public_date":"2016-09-23T00:00:00Z","advisories":[],"bugzilla":"1391000","bugzilla_description":"CVE-2016-9137 php: Use after free in unserialize()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-7478","severity":"moderate","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1412245","bugzilla_description":"CVE-2016-7478 php: Unserialize Exception object can lead to infinite loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7478.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7418","severity":"moderate","public_date":"2016-09-12T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1377352","bugzilla_description":"CVE-2016-7418 php: Null pointer dereference in php_wddx_push_element","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7418.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7411","severity":"moderate","public_date":"2016-09-09T00:00:00Z","advisories":[],"bugzilla":"1377303","bugzilla_description":"CVE-2016-7411 php: Memory corruption when destructing deserialized object","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7411.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-7417","severity":"moderate","public_date":"2016-09-06T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1377344","bugzilla_description":"CVE-2016-7417 php: Missing type check when unserializing SplArray","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-252","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7417.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7416","severity":"moderate","public_date":"2016-09-03T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1377340","bugzilla_description":"CVE-2016-7416 php: Stack based buffer overflow in msgfmt_format_message","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7416.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-7124","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374697","bugzilla_description":"CVE-2016-7124 php: bypass __wakeup() in deserialization of an unexpected object","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7124.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-7125","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374698","bugzilla_description":"CVE-2016-7125 php: Session Data Injection Vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7125.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2016-7126","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374699","bugzilla_description":"CVE-2016-7126 php: select_colors write out-of-bounds","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7126.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7127","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374701","bugzilla_description":"CVE-2016-7127 php: imagegammacorrect allows arbitrary write access","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7127.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7128","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374704","bugzilla_description":"CVE-2016-7128 php: Memory Leakage In exif_process_IFD_in_TIFF","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7128.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-7129","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374705","bugzilla_description":"CVE-2016-7129 php: wddx_deserialize allows illegal memory access","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7129.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7130","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374707","bugzilla_description":"CVE-2016-7130 php: wddx_deserialize null dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7130.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7131","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374708","bugzilla_description":"CVE-2016-7131 php: wddx_deserialize null dereference with invalid xml","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7131.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7132","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1374711","bugzilla_description":"CVE-2016-7132 php: wddx_deserialize null dereference in php_wddx_pop_element","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7132.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7133","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":[],"bugzilla":"1374712","bugzilla_description":"CVE-2016-7133 php: memory allocator fails to realloc small block to large one","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7133.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7134","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":[],"bugzilla":"1374714","bugzilla_description":"CVE-2016-7134 php: Heap overflow in curl_escape","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7134.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7568","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":[],"bugzilla":"1380450","bugzilla_description":"CVE-2016-7568 gd, php: Integer overflow in gdImageWebpCtx","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7568.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2016-7414","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1377336","bugzilla_description":"CVE-2016-7414 php: Out of bounds heap read when verifying signature of zip phar in phar_parse_zipfile","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7414.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7413","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1377314","bugzilla_description":"CVE-2016-7413 php: Use after free in wddx_deserialize","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7413.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6912","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":[],"bugzilla":"1417977","bugzilla_description":"CVE-2016-6912 gd, php: Double free in gdImageWebpPtr()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6912.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-10167","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":["RHSA-2017:3221","RHSA-2018:1296"],"bugzilla":"1418984","bugzilla_description":"CVE-2016-10167 gd: DoS vulnerability in gdImageCreateFromGd2Ctx()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7","php-0:5.4.16-43.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-6906","severity":"moderate","public_date":"2016-08-16T00:00:00Z","advisories":[],"bugzilla":"1435313","bugzilla_description":"CVE-2016-6906 gd: Out-of-bounds read in read_image_tga function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10166","severity":"moderate","public_date":"2016-08-06T00:00:00Z","advisories":["RHSA-2019:3299","RHSA-2019:2519"],"bugzilla":"1418983","bugzilla_description":"CVE-2016-10166 gd: Unsigned integer underflow _gdContributionsAlloc()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["rh-php71-php-0:7.1.30-1.el7","rh-php72-php-0:7.2.24-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10166.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-6292","severity":"low","public_date":"2016-07-19T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359756","bugzilla_description":"CVE-2016-6292 php: Null pointer dereference in exif_process_user_comment","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6292.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-5385","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1609","RHSA-2016:1613","RHSA-2016:1610","RHSA-2016:1611","RHSA-2016:1612"],"bugzilla":"1353794","bugzilla_description":"CVE-2016-5385 PHP: sets environmental variable based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["php54-php-0:5.4.40-4.el7","php-0:5.3.3-48.el6_8","php-0:5.4.16-36.3.el7_2","php55-php-0:5.5.21-5.el7","rh-php56-php-0:5.6.5-9.el7","rh-php56-php-0:5.6.5-9.el6","php54-php-0:5.4.40-4.el6","php55-php-0:5.5.21-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5385.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-5399","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:2598"],"bugzilla":"1358395","bugzilla_description":"CVE-2016-5399 php: Improper error handling in bzread()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-390","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php-0:5.4.16-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5399.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-6296","severity":"moderate","public_date":"2016-07-17T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359822","bugzilla_description":"CVE-2016-6296 php: Heap buffer overflow vulnerability in simplestring_addn in simplestring.c","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-704->CWE-190->CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6296.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6291","severity":"moderate","public_date":"2016-07-15T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359718","bugzilla_description":"CVE-2016-6291 php: Out-of-bounds access in exif_process_IFD_in_MAKERNOTE","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-119","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6291.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-6214","severity":"low","public_date":"2016-07-12T00:00:00Z","advisories":[],"bugzilla":"1356466","bugzilla_description":"CVE-2016-6214 gd: Buffer over-read issue when parsing crafted TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6214.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6290","severity":"moderate","public_date":"2016-07-08T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359710","bugzilla_description":"CVE-2016-6290 php: Use after free in unserialize() with Unexpected Session Deserialization","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6290.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6207","severity":"moderate","public_date":"2016-07-07T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359800","bugzilla_description":"CVE-2016-6207 php,gd: Integer overflow error within _gdContributionsAlloc()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-6905","severity":"low","public_date":"2016-07-05T00:00:00Z","advisories":[],"bugzilla":"1356485","bugzilla_description":"CVE-2016-6905 gd: Out-of-bounds read in function read_image_tga in gd_tga.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6905.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6294","severity":"low","public_date":"2016-07-03T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359811","bugzilla_description":"CVE-2016-6294 php: Out-of-bounds access in locale_accept_from_http","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6294.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-6132","severity":"low","public_date":"2016-06-30T00:00:00Z","advisories":[],"bugzilla":"1352544","bugzilla_description":"CVE-2016-6132 gd: Buffer over-read issue when parsing crafted TGA file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-130->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-6297","severity":"low","public_date":"2016-06-30T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359828","bugzilla_description":"CVE-2016-6297 php: Stack-based buffer overflow vulnerability in php_stream_zip_opener","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6297.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2016-6289","severity":"moderate","public_date":"2016-06-29T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359698","bugzilla_description":"CVE-2016-6289 php: Integer overflow leads to buffer overflow in virtual_file_ex","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-190","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-6128","severity":"low","public_date":"2016-06-27T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1351603","bugzilla_description":"CVE-2016-6128 gd: Invalid color index not properly handled","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6128.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5766","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:2598"],"bugzilla":"1351068","bugzilla_description":"CVE-2016-5766 gd: Integer Overflow in _gd2GetHeader() resulting in heap overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php-0:5.4.16-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5767","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:2598"],"bugzilla":"1351069","bugzilla_description":"CVE-2016-5767 gd: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php-0:5.4.16-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5767.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5769","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":[],"bugzilla":"1351070","bugzilla_description":"CVE-2016-5769 php: Integer Overflows in mcrypt_generic() and mdecrypt_generic() resulting in heap overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5769.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5768","severity":"low","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:2598"],"bugzilla":"1351168","bugzilla_description":"CVE-2016-5768 php: Double free in _php_mb_regex_ereg_replace_exec","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php-0:5.4.16-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5768.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5770","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1351171","bugzilla_description":"CVE-2016-5770 php: Int/size_t confusion in SplFileObject::fread","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5770.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5771","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1351173","bugzilla_description":"CVE-2016-5771 php: Use After Free Vulnerability in PHP's GC algorithm and unserialize","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5771.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5772","severity":"low","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1351175","bugzilla_description":"CVE-2016-5772 php: Double Free Corruption in wddx_deserialize","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-5773","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1351179","bugzilla_description":"CVE-2016-5773 php: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5773.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-6295","severity":"moderate","public_date":"2016-06-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1359815","bugzilla_description":"CVE-2016-6295 php: Use after free in SNMP with GC and unserialize()","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6295.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-4473","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1347772","bugzilla_description":"CVE-2016-4473 php: Invalid free() instead of efree() in phar_extract_file()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4473.json"},{"CVE":"CVE-2016-7412","severity":"moderate","public_date":"2016-05-30T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1377311","bugzilla_description":"CVE-2016-7412 php: Heap overflow in mysqlnd when not receiving UNSIGNED_FLAG in BIT field","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7412.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2016-5093","severity":"low","public_date":"2016-05-19T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1339590","bugzilla_description":"CVE-2016-5093 php: improper nul termination leading to out-of-bounds read in get_icu_value_internal","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-170","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5093.json"},{"CVE":"CVE-2016-5095","severity":"low","public_date":"2016-05-17T00:00:00Z","advisories":[],"bugzilla":"1340742","bugzilla_description":"CVE-2016-5095 php: Integer overflow in php_filter_full_special_chars","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5095.json"},{"CVE":"CVE-2016-6161","severity":"moderate","public_date":"2016-05-08T00:00:00Z","advisories":[],"bugzilla":"1353550","bugzilla_description":"CVE-2016-6161 gd: Global out-of-bounds read when encoding gif from malformed gd2 input","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-5094","severity":"low","public_date":"2016-05-01T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1340738","bugzilla_description":"CVE-2016-5094 php: Integer overflow in php_html_entities()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5094.json"},{"CVE":"CVE-2016-3078","severity":"important","public_date":"2016-04-28T00:00:00Z","advisories":[],"bugzilla":"1319750","bugzilla_description":"CVE-2016-3078 php: Heap overflow caused by integer overflow when reading zip files in ZipArchive","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3078.json"},{"CVE":"CVE-2016-5096","severity":"low","public_date":"2016-04-27T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1339949","bugzilla_description":"CVE-2016-5096 php: Integer underflow causing arbitrary null write in fread/gzread","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5096.json"},{"CVE":"CVE-2016-4539","severity":"low","public_date":"2016-04-25T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332877","bugzilla_description":"CVE-2016-4539 php: xml_parse_into_struct() can crash when XML parser is re-used","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4539.json"},{"CVE":"CVE-2016-4537","severity":"low","public_date":"2016-04-24T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332860","bugzilla_description":"CVE-2016-4537 CVE-2016-4538 php: bcpowmod accepts negative scale causing heap buffer overflow corrupting _one_ definition","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4537.json"},{"CVE":"CVE-2016-4538","severity":"low","public_date":"2016-04-24T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332860","bugzilla_description":"CVE-2016-4537 CVE-2016-4538 php: bcpowmod accepts negative scale causing heap buffer overflow corrupting _one_ definition","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4538.json"},{"CVE":"CVE-2016-4542","severity":"low","public_date":"2016-04-24T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332865","bugzilla_description":"CVE-2016-4542 CVE-2016-4543 CVE-2016-4544 php: Out-of-bounds heap memory read in exif_read_data() caused by malformed input","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4542.json"},{"CVE":"CVE-2016-4543","severity":"low","public_date":"2016-04-24T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332865","bugzilla_description":"CVE-2016-4542 CVE-2016-4543 CVE-2016-4544 php: Out-of-bounds heap memory read in exif_read_data() caused by malformed input","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4543.json"},{"CVE":"CVE-2016-4544","severity":"low","public_date":"2016-04-24T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332865","bugzilla_description":"CVE-2016-4542 CVE-2016-4543 CVE-2016-4544 php: Out-of-bounds heap memory read in exif_read_data() caused by malformed input","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4544.json"},{"CVE":"CVE-2016-3074","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1321893","bugzilla_description":"CVE-2016-3074 php: Signedness vulnerability causing heap overflow in libgd","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3074.json"},{"CVE":"CVE-2015-8866","severity":"low","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1330418","bugzilla_description":"CVE-2015-8866 php: libxml_disable_entity_loader setting is shared between threads","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8866.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-8867","severity":"moderate","public_date":"2016-04-21T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1330420","bugzilla_description":"CVE-2015-8867 php: openssl_random_pseudo_bytes() is not cryptographically secure","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8867.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-4540","severity":"low","public_date":"2016-04-20T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332872","bugzilla_description":"CVE-2016-4540 CVE-2016-4541 php: OOB read in grapheme_stripos and grapheme_strpos when negative offset is used","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4540.json"},{"CVE":"CVE-2016-4541","severity":"low","public_date":"2016-04-20T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332872","bugzilla_description":"CVE-2016-4540 CVE-2016-4541 php: OOB read in grapheme_stripos and grapheme_strpos when negative offset is used","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4541.json"},{"CVE":"CVE-2016-4073","severity":"moderate","public_date":"2016-03-26T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323103","bugzilla_description":"CVE-2016-4073 php: mb_strcut() Negative size parameter in memcpy","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4073.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2014-9769","severity":"moderate","public_date":"2016-03-23T00:00:00Z","advisories":[],"bugzilla":"1320995","bugzilla_description":"CVE-2014-9769 pcre: incorrect nested table jumps when JIT is used (8.36/6)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9769.json"},{"CVE":"CVE-2016-4072","severity":"moderate","public_date":"2016-03-19T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323106","bugzilla_description":"CVE-2016-4072 php: Invalid memory write in phar on filename containing \\0 inside name","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4072.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2016-4070","severity":"moderate","public_date":"2016-03-11T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323114","bugzilla_description":"CVE-2016-4070 php: Integer overflow in php_raw_url_encode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4070.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-3132","severity":"moderate","public_date":"2016-03-07T00:00:00Z","advisories":[],"bugzilla":"1333497","bugzilla_description":"CVE-2016-3132 php: Double free in SplDoublyLinkedList::offsetSet","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3132.json"},{"CVE":"CVE-2016-4071","severity":"moderate","public_date":"2016-03-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323108","bugzilla_description":"CVE-2016-4071 php: Format string vulnerability in php_snmp_error()","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-134","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4071.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2015-8865","severity":"low","public_date":"2016-02-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323118","bugzilla_description":"CVE-2015-8865 file: Buffer over-write in finfo_open with malformed magic file","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-4344","severity":"low","public_date":"2016-02-20T00:00:00Z","advisories":[],"bugzilla":"1315339","bugzilla_description":"CVE-2016-4344 CVE-2016-4345 CVE-2016-4346 php: Multiple heap overflows due to integer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4344.json"},{"CVE":"CVE-2016-4345","severity":"low","public_date":"2016-02-20T00:00:00Z","advisories":[],"bugzilla":"1315339","bugzilla_description":"CVE-2016-4344 CVE-2016-4345 CVE-2016-4346 php: Multiple heap overflows due to integer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4345.json"},{"CVE":"CVE-2016-4346","severity":"low","public_date":"2016-02-20T00:00:00Z","advisories":[],"bugzilla":"1315339","bugzilla_description":"CVE-2016-4344 CVE-2016-4345 CVE-2016-4346 php: Multiple heap overflows due to integer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4346.json"},{"CVE":"CVE-2016-3185","severity":"moderate","public_date":"2016-02-16T00:00:00Z","advisories":[],"bugzilla":"1315344","bugzilla_description":"CVE-2016-3185 php: Type confusion vulnerability in make_http_soap_request()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3185.json"},{"CVE":"CVE-2016-3141","severity":"moderate","public_date":"2016-02-14T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1315328","bugzilla_description":"CVE-2016-3141 php: Use after free in WDDX Deserialize when processing XML data","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3141.json"},{"CVE":"CVE-2016-3191","severity":"important","public_date":"2016-02-09T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1025"],"bugzilla":"1311503","bugzilla_description":"CVE-2016-3191 pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3191.json"},{"CVE":"CVE-2016-3142","severity":"low","public_date":"2016-02-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1315312","bugzilla_description":"CVE-2016-3142 php: Out-of-bounds read in phar_parse_zipfile()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3142.json"},{"CVE":"CVE-2016-2554","severity":"low","public_date":"2016-01-31T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1305543","bugzilla_description":"CVE-2016-2554 php: buffer overflow in handling of long link names in tar phar archives","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2554.json"},{"CVE":"CVE-2016-1904","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":[],"bugzilla":"1298839","bugzilla_description":"CVE-2016-1904 php: heap buffer overflow in escapeshell functions","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1904.json"},{"CVE":"CVE-2016-4342","severity":"moderate","public_date":"2016-01-12T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1305536","bugzilla_description":"CVE-2016-4342 php: use of uninitialized pointer in PharFileInfo::getContent","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-665","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4342.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-10712","severity":"low","public_date":"2016-01-10T00:00:00Z","advisories":[],"bugzilla":"1305523","bugzilla_description":"CVE-2016-10712 php: Output of stream_get_meta_data can be falsified by its input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10712.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-4343","severity":"moderate","public_date":"2016-01-10T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1332454","bugzilla_description":"CVE-2016-4343 php: Uninitialized pointer in phar_make_dirstream()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4343.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-1283","severity":"important","public_date":"2016-01-04T00:00:00Z","advisories":["RHSA-2016:1132"],"bugzilla":"1295385","bugzilla_description":"CVE-2016-1283 pcre: heap buffer overflow in handling of duplicate named groups (8.39/14)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1283.json"},{"CVE":"CVE-2015-8880","severity":"moderate","public_date":"2015-12-17T00:00:00Z","advisories":[],"bugzilla":"1339142","bugzilla_description":"CVE-2015-8880 php: Double free vulnerability in error condition of format printer","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8880.json"},{"CVE":"CVE-2015-8617","severity":"important","public_date":"2015-12-12T00:00:00Z","advisories":[],"bugzilla":"1293880","bugzilla_description":"CVE-2015-8617 php: Format string vulnerability in class name error message","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-134","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8617.json"},{"CVE":"CVE-2016-9934","severity":"low","public_date":"2015-12-08T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1404726","bugzilla_description":"CVE-2016-9934 php: NULL Pointer Dereference in WDDX Packet Deserialization with PDORow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9934.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2015-8616","severity":"low","public_date":"2015-12-03T00:00:00Z","advisories":[],"bugzilla":"1293876","bugzilla_description":"CVE-2015-8616 php: Use after free vulnerability in Collator::sortWithSortKeys","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8616.json"},{"CVE":"CVE-2016-1903","severity":"moderate","public_date":"2015-11-26T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1297717","bugzilla_description":"CVE-2016-1903 php: Out-of-bounds memory read via gdImageRotateInterpolated","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1903.json"},{"CVE":"CVE-2015-8383","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287614","bugzilla_description":"CVE-2015-8383 pcre: Buffer overflow caused by repeated conditional group (8.38/3)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8383.json"},{"CVE":"CVE-2015-3210","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3210.json"},{"CVE":"CVE-2015-8384","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8384.json"},{"CVE":"CVE-2015-8385","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287629","bugzilla_description":"CVE-2015-8385 pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8385.json"},{"CVE":"CVE-2015-8386","severity":"low","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287636","bugzilla_description":"CVE-2015-8386 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8386.json"},{"CVE":"CVE-2015-8387","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287646","bugzilla_description":"CVE-2015-8387 pcre: Integer overflow in subroutine calls (8.38/8)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8387.json"},{"CVE":"CVE-2015-8389","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287659","bugzilla_description":"CVE-2015-8389 pcre: infinite recursion in JIT compiler when processing certain patterns (8.38/21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8389.json"},{"CVE":"CVE-2015-8390","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287666","bugzilla_description":"CVE-2015-8390 pcre: uninitialized memory read triggered by malformed posix character class (8.38/22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8390.json"},{"CVE":"CVE-2015-8391","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287671","bugzilla_description":"CVE-2015-8391 pcre: inefficient posix character class syntax check (8.38/16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8391.json"},{"CVE":"CVE-2015-8392","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287690","bugzilla_description":"CVE-2015-8392 pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8392.json"},{"CVE":"CVE-2015-8393","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287695","bugzilla_description":"CVE-2015-8393 pcre: pcregrep -q is not always quiet (8.38/28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8393.json"},{"CVE":"CVE-2015-8394","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287702","bugzilla_description":"CVE-2015-8394 pcre: Integer overflow caused by missing check for certain conditions (8.38/31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8394.json"},{"CVE":"CVE-2015-8381","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8381.json"},{"CVE":"CVE-2015-8395","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8395.json"},{"CVE":"CVE-2016-5114","severity":"moderate","public_date":"2015-10-21T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1297710","bugzilla_description":"CVE-2016-5114 php: out-of-bounds write in fpm_log.c","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-787","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5114.json"},{"CVE":"CVE-2015-7803","severity":"moderate","public_date":"2015-10-01T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1271081","bugzilla_description":"CVE-2015-7803 php: NULL pointer dereference in phar_get_fp_offset()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7803.json"},{"CVE":"CVE-2015-7804","severity":"moderate","public_date":"2015-10-01T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1271088","bugzilla_description":"CVE-2015-7804 php: uninitialized pointer in phar_make_dirstream()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7804.json"},{"CVE":"CVE-2016-6288","severity":"low","public_date":"2015-09-13T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1360322","bugzilla_description":"CVE-2016-6288 php: Buffer over-read in php_url_parse_ex","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6288.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2015-6836","severity":"low","public_date":"2015-08-29T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1260683","bugzilla_description":"CVE-2015-6836 php: SOAP serialize_function_call() type confusion","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6836.json"},{"CVE":"CVE-2014-9767","severity":"moderate","public_date":"2015-08-25T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1260716","bugzilla_description":"CVE-2014-9767 php: ZipArchive::extractTo allows for directory traversal when creating directories","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9767.json"},{"CVE":"CVE-2015-6835","severity":"low","public_date":"2015-08-09T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1260647","bugzilla_description":"CVE-2015-6835 php: use-after-free vulnerability in session deserializer","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6835.json"},{"CVE":"CVE-2015-6831","severity":"moderate","public_date":"2015-08-06T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1256290","bugzilla_description":"CVE-2015-6831 php: Use After Free Vulnerability in unserialize()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6831.json"},{"CVE":"CVE-2015-6832","severity":"moderate","public_date":"2015-08-06T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1256322","bugzilla_description":"CVE-2015-6832 php: dangling pointer in the unserialization of ArrayObject items","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6832.json"},{"CVE":"CVE-2015-8873","severity":"low","public_date":"2015-08-04T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1336775","bugzilla_description":"CVE-2015-8873 php: Stack consumption vulnerability in Zend/zend_exceptions.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8873.json"},{"CVE":"CVE-2015-8876","severity":"moderate","public_date":"2015-08-04T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1338896","bugzilla_description":"CVE-2015-8876 php: Zend/zend_exceptions.c does not validate certain Exception objects","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8876.json"},{"CVE":"CVE-2015-9253","severity":"moderate","public_date":"2015-08-03T00:00:00Z","advisories":[],"bugzilla":"1547725","bugzilla_description":"CVE-2015-9253 php: Infinite loop in php-fpm when restarting a child using program execution function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9253.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-6834","severity":"low","public_date":"2015-07-31T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1260642","bugzilla_description":"CVE-2015-6834 php: multiple unserialization use-after-free issues","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6834.json"},{"CVE":"CVE-2015-6527","severity":"moderate","public_date":"2015-07-26T00:00:00Z","advisories":[],"bugzilla":"1255780","bugzilla_description":"CVE-2015-6527 php: Arbitrary code execution in str_ireplace function","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6527.json"},{"CVE":"CVE-2015-8879","severity":"low","public_date":"2015-07-22T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1338912","bugzilla_description":"CVE-2015-8879 php: odbc_bindcols function mishandles driver behavior for SQL_WVARCHAR columns","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8879.json"},{"CVE":"CVE-2015-8835","severity":"moderate","public_date":"2015-07-15T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323074","bugzilla_description":"CVE-2015-8835 php: type confusion issue in Soap Client call() method","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8835.json"},{"CVE":"CVE-2015-8877","severity":"low","public_date":"2015-07-13T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1338907","bugzilla_description":"CVE-2015-8877 gd: gdImageScaleTwoPass function in gd_interpolation.c uses inconsistent allocate and free approaches","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8877.json"},{"CVE":"CVE-2015-6833","severity":"moderate","public_date":"2015-07-08T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1283702","bugzilla_description":"CVE-2015-6833 php: Files from archive can be extracted outside of destination directory using phar","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6833.json"},{"CVE":"CVE-2015-8878","severity":"moderate","public_date":"2015-07-06T00:00:00Z","advisories":[],"bugzilla":"1338893","bugzilla_description":"CVE-2015-8878 php: main/php_open_temporary_file.c does not ensure thread safety","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-567","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8878.json"},{"CVE":"CVE-2015-5589","severity":"moderate","public_date":"2015-07-05T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1245236","bugzilla_description":"CVE-2015-5589 php: segmentation fault in Phar::convertToData on invalid file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5589.json"},{"CVE":"CVE-2015-5590","severity":"moderate","public_date":"2015-07-05T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1245242","bugzilla_description":"CVE-2015-5590 php: buffer overflow and stack smashing error in phar_fix_filepath","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5590.json"},{"CVE":"CVE-2015-5073","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5073.json"},{"CVE":"CVE-2015-8388","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8388.json"},{"CVE":"CVE-2015-4643","severity":"moderate","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1234938","bugzilla_description":"CVE-2015-4643 php: integer overflow in ftp_genlist() resulting in heap overflow (improved fix for CVE-2015-4022)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4643.json"},{"CVE":"CVE-2015-4644","severity":"low","public_date":"2015-06-11T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1234940","bugzilla_description":"CVE-2015-4644 php: NULL pointer dereference in php_pgsql_meta_data()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4644.json"},{"CVE":"CVE-2015-4116","severity":"low","public_date":"2015-06-10T00:00:00Z","advisories":[],"bugzilla":"1336784","bugzilla_description":"CVE-2015-4116 php: Use-after-free vulnerability in the spl_ptr_heap_insert function","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4116.json"},{"CVE":"CVE-2015-6837","severity":"low","public_date":"2015-06-09T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1260711","bugzilla_description":"CVE-2015-6837 CVE-2015-6838 php: NULL pointer dereference in XSLTProcessor class","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6837.json"},{"CVE":"CVE-2015-6838","severity":"low","public_date":"2015-06-09T00:00:00Z","advisories":["RHSA-2016:0457"],"bugzilla":"1260711","bugzilla_description":"CVE-2015-6837 CVE-2015-6838 php: NULL pointer dereference in XSLTProcessor class","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["rh-php56-php-0:5.6.5-8.el6","rh-php56-php-0:5.6.5-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6838.json"},{"CVE":"CVE-2015-3211","severity":"low","public_date":"2015-06-05T00:00:00Z","advisories":[],"bugzilla":"1228721","bugzilla_description":"CVE-2015-3211 php: php-fpm package vulnerable to symlink attack","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:C/A:N","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3211.json"},{"CVE":"CVE-2015-3217","severity":"moderate","public_date":"2015-06-03T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1228283","bugzilla_description":"CVE-2015-3217 pcre: stack overflow caused by mishandled group empty match (8.38/11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3217.json"},{"CVE":"CVE-2015-8874","severity":"low","public_date":"2015-06-02T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1336772","bugzilla_description":"CVE-2015-8874 gd: gdImageFillToBorder deep recursion leading to stack overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8874.json"},{"CVE":"CVE-2015-8380","severity":null,"public_date":"2015-06-01T00:00:00Z","advisories":[],"bugzilla":"1285413","bugzilla_description":"CVE-2015-8380 pcre: OOB write when pcre_exec() is called with ovecsize of 1 (8.38/10)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8380.json"},{"CVE":"CVE-2015-4598","severity":"moderate","public_date":"2015-05-28T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1232897","bugzilla_description":"CVE-2015-4598 php: missing null byte checks for paths in DOM and GD extensions","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-626","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4598.json"},{"CVE":"CVE-2015-8838","severity":"moderate","public_date":"2015-05-20T00:00:00Z","advisories":[],"bugzilla":"1323749","bugzilla_description":"CVE-2015-8838 php: mysqlnd interface vulnerable to BACKRONYM","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8838.json"},{"CVE":"CVE-2015-3307","severity":"moderate","public_date":"2015-05-18T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1223441","bugzilla_description":"CVE-2015-3307 php: invalid pointer free() in phar_tar_process_metadata()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3307.json"},{"CVE":"CVE-2015-4024","severity":"moderate","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1222485","bugzilla_description":"CVE-2015-4024 php: multipart/form-data request parsing CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4024.json"},{"CVE":"CVE-2015-4022","severity":"moderate","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1223412","bugzilla_description":"CVE-2015-4022 php: integer overflow leading to heap overflow when reading FTP file listing","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4022.json"},{"CVE":"CVE-2015-4026","severity":"low","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1223422","bugzilla_description":"CVE-2015-4026 php: pcntl_exec() accepts paths with NUL character","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-626","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4026.json"},{"CVE":"CVE-2015-4021","severity":"moderate","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1223425","bugzilla_description":"CVE-2015-4021 php: memory corruption in phar_parse_tarfile caused by empty entry file name","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-125->CWE-787","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4021.json"},{"CVE":"CVE-2015-3330","severity":"important","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213394","bugzilla_description":"CVE-2015-3330 php: pipelined request executed in deinitialized interpreter under httpd 2.4","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-665","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3330.json"},{"CVE":"CVE-2015-3411","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213407","bugzilla_description":"CVE-2015-3411 php: missing null byte checks for paths in various PHP extensions","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-626","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3411.json"},{"CVE":"CVE-2015-4604","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213442","bugzilla_description":"CVE-2015-4604 CVE-2015-4605 php: denial of service when processing a crafted file with Fileinfo","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4604.json"},{"CVE":"CVE-2015-4605","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213442","bugzilla_description":"CVE-2015-4604 CVE-2015-4605 php: denial of service when processing a crafted file with Fileinfo","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4605.json"},{"CVE":"CVE-2015-2783","severity":"low","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213446","bugzilla_description":"CVE-2015-2783 php: buffer over-read in Phar metadata parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-20->CWE-125","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2783.json"},{"CVE":"CVE-2015-3329","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1213449","bugzilla_description":"CVE-2015-3329 php: buffer overflow in phar_set_inode()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3329.json"},{"CVE":"CVE-2015-4599","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1222538","bugzilla_description":"CVE-2015-4599 CVE-2015-4600 CVE-2015-4601 php: type confusion issue in unserialize() with various SOAP methods","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-843","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4599.json"},{"CVE":"CVE-2015-4600","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1222538","bugzilla_description":"CVE-2015-4599 CVE-2015-4600 CVE-2015-4601 php: type confusion issue in unserialize() with various SOAP methods","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-843","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4600.json"},{"CVE":"CVE-2015-4601","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1222538","bugzilla_description":"CVE-2015-4599 CVE-2015-4600 CVE-2015-4601 php: type confusion issue in unserialize() with various SOAP methods","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-843","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4601.json"},{"CVE":"CVE-2015-3412","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1232823","bugzilla_description":"CVE-2015-3412 php: missing null byte checks for paths in various PHP extensions","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-626","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3412.json"},{"CVE":"CVE-2015-4025","severity":"moderate","public_date":"2015-04-10T00:00:00Z","advisories":["RHSA-2015:1219","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1186"],"bugzilla":"1223408","bugzilla_description":"CVE-2015-4025 php: CVE-2006-7243 regressions in 5.4+","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-626","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php54-php-0:5.4.40-3.el6","php54-php-0:5.4.40-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4025.json"},{"CVE":"CVE-2015-2325","severity":"important","public_date":"2015-03-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1207198","bugzilla_description":"CVE-2015-2325 pcre: heap buffer overflow in compile_branch()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2325.json"},{"CVE":"CVE-2015-2326","severity":"moderate","public_date":"2015-03-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1207202","bugzilla_description":"CVE-2015-2326 pcre: heap buffer over-read in pcre_compile2() (8.37/23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2326.json"},{"CVE":"CVE-2015-4602","severity":"moderate","public_date":"2015-03-20T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1232923","bugzilla_description":"CVE-2015-4602 php: Incomplete Class unserialization type confusion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-843","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4602.json"},{"CVE":"CVE-2015-2331","severity":"important","public_date":"2015-03-18T00:00:00Z","advisories":[],"bugzilla":"1204676","bugzilla_description":"CVE-2015-2331 libzip: integer overflow when processing ZIP archives","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2331.json"},{"CVE":"CVE-2015-4147","severity":"moderate","public_date":"2015-03-03T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1204868","bugzilla_description":"CVE-2015-4147 php: SoapClient's __call() type confusion through unserialize()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4147.json"},{"CVE":"CVE-2015-4148","severity":"low","public_date":"2015-03-03T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1226916","bugzilla_description":"CVE-2015-4148 php: SoapClient's do_soap_call() type confusion after unserialize()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-843","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4148.json"},{"CVE":"CVE-2015-4603","severity":"moderate","public_date":"2015-03-03T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1187","RHSA-2015:1066","RHSA-2015:1186"],"bugzilla":"1232918","bugzilla_description":"CVE-2015-4603 php: exception::getTraceAsString type confusion issue after unserialize","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-843","affected_packages":["php55-php-0:5.5.21-4.el6","php55-php-0:5.5.21-4.el7","rh-php56-php-0:5.6.5-7.el6","rh-php56-php-0:5.6.5-7.el7","php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4603.json"},{"CVE":"CVE-2015-2787","severity":"moderate","public_date":"2015-03-02T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1207676","bugzilla_description":"CVE-2015-2787 php: use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-416","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2787.json"},{"CVE":"CVE-2015-2348","severity":"moderate","public_date":"2015-03-02T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1207682","bugzilla_description":"CVE-2015-2348 php: move_uploaded_file() NUL byte injection in file name","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-626","affected_packages":["php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2348.json"},{"CVE":"CVE-2015-0273","severity":"moderate","public_date":"2015-02-19T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1194730","bugzilla_description":"CVE-2015-0273 php: use after free vulnerability in unserialize() with DateTimeZone","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0273.json"},{"CVE":"CVE-2013-6501","severity":"low","public_date":"2015-02-08T00:00:00Z","advisories":[],"bugzilla":"1009103","bugzilla_description":"CVE-2013-6501 php: predictable file name used for cache in world writeable directory","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6501.json"},{"CVE":"CVE-2015-2305","severity":"moderate","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1191049","bugzilla_description":"CVE-2015-2305 regex: heap overflow in regcomp() on 32-bit architectures","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2305.json"},{"CVE":"CVE-2015-8382","severity":"low","public_date":"2015-02-03T00:00:00Z","advisories":[],"bugzilla":"1187225","bugzilla_description":"CVE-2015-8382 php: Regular Expression Uninitialized Pointer Information Disclosure Vulnerability (ZDI-CAN-2547)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8382.json"},{"CVE":"CVE-2015-8935","severity":"moderate","public_date":"2015-02-03T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2015:1066"],"bugzilla":"1348927","bugzilla_description":"CVE-2015-8935 php: HTTP response splitting in header() function","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-113","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php54-php-0:5.4.40-1.el6","php54-php-0:5.4.40-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8935.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2015-2301","severity":"low","public_date":"2015-01-24T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1194747","bugzilla_description":"CVE-2015-2301 php: use after free in phar_object.c","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2301.json"},{"CVE":"CVE-2015-1353","severity":"low","public_date":"2015-01-20T00:00:00Z","advisories":[],"bugzilla":"1185896","bugzilla_description":"CVE-2015-1353 php: integer overflow in the conversion of dates to \"Julian Day Count\" function","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1353.json"},{"CVE":"CVE-2015-1352","severity":"low","public_date":"2015-01-04T00:00:00Z","advisories":["RHSA-2015:1053"],"bugzilla":"1185904","bugzilla_description":"CVE-2015-1352 php: NULL pointer dereference in pgsql extension","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1352.json"},{"CVE":"CVE-2014-9620","severity":"low","public_date":"2015-01-03T00:00:00Z","advisories":["RHSA-2016:0760"],"bugzilla":"1180639","bugzilla_description":"CVE-2014-9620 file: limit the number of ELF notes processed","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9620.json"},{"CVE":"CVE-2014-9621","severity":"low","public_date":"2015-01-03T00:00:00Z","advisories":[],"bugzilla":"1180642","bugzilla_description":"CVE-2014-9621 file: limit string printing to 100 chars","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9621.json"},{"CVE":"CVE-2015-0231","severity":"moderate","public_date":"2015-01-01T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1185397","bugzilla_description":"CVE-2015-0231 php: use after free vulnerability in unserialize() (incomplete fix of CVE-2014-8142)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0231.json"},{"CVE":"CVE-2015-0232","severity":"moderate","public_date":"2015-01-01T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1185472","bugzilla_description":"CVE-2015-0232 php: Free called on unitialized pointer in exif.c","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-822","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0232.json"},{"CVE":"CVE-2014-9425","severity":"low","public_date":"2014-12-30T00:00:00Z","advisories":["RHSA-2015:1218"],"bugzilla":"1177734","bugzilla_description":"CVE-2014-9425 php: Double-free in zend_ts_hash_graceful_destroy()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9425.json"},{"CVE":"CVE-2015-1351","severity":"low","public_date":"2014-12-29T00:00:00Z","advisories":["RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1185900","bugzilla_description":"CVE-2015-1351 php: use after free in opcache extension","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1351.json"},{"CVE":"CVE-2014-8142","severity":"moderate","public_date":"2014-12-18T00:00:00Z","advisories":["RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1175718","bugzilla_description":"CVE-2014-8142 php: use after free vulnerability in unserialize()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8142.json"},{"CVE":"CVE-2014-9427","severity":"low","public_date":"2014-12-17T00:00:00Z","advisories":["RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1178736","bugzilla_description":"CVE-2014-9427 php: out of bounds read when parsing a crafted .php file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9427.json"},{"CVE":"CVE-2014-8116","severity":"moderate","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2015:2155"],"bugzilla":"1171580","bugzilla_description":"CVE-2014-8116 file: multiple denial of service issues (resource consumption)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400->CWE-674","affected_packages":["file-0:5.11-31.el7","file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8116.json"},{"CVE":"CVE-2014-8117","severity":"moderate","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2015:2155"],"bugzilla":"1174606","bugzilla_description":"CVE-2014-8117 file: denial of service issue (resource consumption)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400->CWE-674","affected_packages":["file-0:5.11-31.el7","file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8117.json"},{"CVE":"CVE-2014-9653","severity":"low","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2015:2155"],"bugzilla":"1190116","bugzilla_description":"CVE-2014-9653 file: malformed elf file causes access to uninitialized memory","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9653.json"},{"CVE":"CVE-2014-9709","severity":"low","public_date":"2014-12-13T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1188639","bugzilla_description":"CVE-2014-9709 gd: buffer read overflow in gd_gif_in.c","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-119","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9709.json"},{"CVE":"CVE-2014-9705","severity":"moderate","public_date":"2014-12-05T00:00:00Z","advisories":["RHSA-2015:1218","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1194737","bugzilla_description":"CVE-2014-9705 php: heap buffer overflow in enchant_broker_request_dict()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["php-0:5.4.16-36.el7_1","php-0:5.3.3-46.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9705.json"},{"CVE":"CVE-2014-8964","severity":"low","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2015:0330"],"bugzilla":"1166147","bugzilla_description":"CVE-2014-8964 pcre: incorrect handling of zero-repeat assertion conditions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":["pcre-0:8.32-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8964.json"},{"CVE":"CVE-2014-9652","severity":"low","public_date":"2014-11-11T00:00:00Z","advisories":["RHSA-2015:2155","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1188599","bugzilla_description":"CVE-2014-9652 file: out of bounds read in mconvert()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9652.json"},{"CVE":"CVE-2014-8626","severity":"critical","public_date":"2014-11-05T00:00:00Z","advisories":["RHSA-2014:1825","RHSA-2014:1824"],"bugzilla":"1155607","bugzilla_description":"CVE-2014-8626 php: xmlrpc ISO8601 date format parsing buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["php-0:4.3.9-3.38.el4","php-0:5.1.6-45.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8626.json"},{"CVE":"CVE-2014-3710","severity":"moderate","public_date":"2014-10-22T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1768","RHSA-2014:1767","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1155071","bugzilla_description":"CVE-2014-3710 file: out-of-bounds read in elf note headers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-40.el6_6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.3","php53-0:5.3.3-26.el5_11","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3710.json"},{"CVE":"CVE-2014-3670","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1768","RHSA-2014:1767","RHSA-2014:1766","RHSA-2014:1765","RHSA-2015:0021","RHSA-2014:1824"],"bugzilla":"1154502","bugzilla_description":"CVE-2014-3670 php: heap corruption issue in exif_thumbnail()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["php55-php-0:5.5.6-13.el6","php-0:5.1.6-45.el5_11","php-0:5.3.3-40.el6_6","php-0:5.3.3-27.el6_5.3","php-0:5.4.16-23.el7_0.3","php53-0:5.3.3-26.el5_11","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3670.json"},{"CVE":"CVE-2014-3668","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1768","RHSA-2014:1767","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1154503","bugzilla_description":"CVE-2014-3668 php: xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["php55-php-0:5.5.6-13.el6","php-0:5.3.3-40.el6_6","php-0:5.4.16-23.el7_0.3","php53-0:5.3.3-26.el5_11","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3668.json"},{"CVE":"CVE-2014-3622","severity":"low","public_date":"2014-10-03T00:00:00Z","advisories":[],"bugzilla":"1151423","bugzilla_description":"CVE-2014-3622 php: post handler potential illegal efree() vulnerability","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3622.json"},{"CVE":"CVE-2014-3669","severity":"moderate","public_date":"2014-09-18T00:00:00Z","advisories":["RHSA-2014:1768","RHSA-2014:1767","RHSA-2014:1766","RHSA-2014:1765","RHSA-2015:0021","RHSA-2014:1824"],"bugzilla":"1154500","bugzilla_description":"CVE-2014-3669 php: integer overflow in unserialize()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-190","affected_packages":["php55-php-0:5.5.6-13.el6","php-0:5.1.6-45.el5_11","php-0:5.3.3-40.el6_6","php-0:5.3.3-27.el6_5.3","php-0:5.4.16-23.el7_0.3","php53-0:5.3.3-26.el5_11","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3669.json"},{"CVE":"CVE-2014-5459","severity":"moderate","public_date":"2014-08-25T00:00:00Z","advisories":[],"bugzilla":"1133753","bugzilla_description":"CVE-2014-5459 php-pear: insecure temporary file use for cache data","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5459.json"},{"CVE":"CVE-2014-3587","severity":"moderate","public_date":"2014-08-21T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1128587","bugzilla_description":"CVE-2014-3587 file: incomplete fix for CVE-2012-1571 in cdf_read_property_info","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["php53-0:5.3.3-24.el5","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3587.json"},{"CVE":"CVE-2015-2328","severity":"moderate","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1285399","bugzilla_description":"CVE-2015-2328 pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2328.json"},{"CVE":"CVE-2014-5120","severity":"moderate","public_date":"2014-07-31T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1132793","bugzilla_description":"CVE-2014-5120 php: gd extension NUL byte injection in file names","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-626","affected_packages":["php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5120.json"},{"CVE":"CVE-2014-3597","severity":"low","public_date":"2014-07-30T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1132589","bugzilla_description":"CVE-2014-3597 php: multiple buffer over-reads in php_parserr","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["php53-0:5.3.3-24.el5","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3597.json"},{"CVE":"CVE-2015-2327","severity":"moderate","public_date":"2014-07-11T00:00:00Z","advisories":["RHBA-2015:2142","RHSA-2016:2750"],"bugzilla":"1285408","bugzilla_description":"CVE-2015-2327 pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2327.json"},{"CVE":"CVE-2014-3515","severity":"low","public_date":"2014-07-09T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1012"],"bugzilla":"1112154","bugzilla_description":"CVE-2014-3515 php: unserialize() SPL ArrayObject / SPLObjectStorage type confusion flaw","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3515.json"},{"CVE":"CVE-2014-4698","severity":"low","public_date":"2014-06-29T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1120259","bugzilla_description":"CVE-2014-4698 php: ArrayIterator use-after-free due to object change during sorting","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["php53-0:5.3.3-24.el5","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4698.json"},{"CVE":"CVE-2014-4670","severity":"low","public_date":"2014-06-29T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1120266","bugzilla_description":"CVE-2014-4670 php: SPL Iterators use-after-free","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["php53-0:5.3.3-24.el5","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4670.json"},{"CVE":"CVE-2014-0207","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1091842","bugzilla_description":"CVE-2014-0207 file: cdf_read_short_sector insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0207.json"},{"CVE":"CVE-2014-0236","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":[],"bugzilla":"1098209","bugzilla_description":"CVE-2014-0236 file: root_storage NULL pointer deference flaw in CDF parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0236.json"},{"CVE":"CVE-2014-3538","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1098222","bugzilla_description":"CVE-2014-3538 file: unrestricted regular expression matching","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.1","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3538.json"},{"CVE":"CVE-2014-3480","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1104858","bugzilla_description":"CVE-2014-3480 file: cdf_count_chain insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3480.json"},{"CVE":"CVE-2014-3478","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1104863","bugzilla_description":"CVE-2014-3478 file: mconvert incorrect handling of truncated pascal string size","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3478.json"},{"CVE":"CVE-2014-3479","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1104869","bugzilla_description":"CVE-2014-3479 file: cdf_check_stream_offset insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3479.json"},{"CVE":"CVE-2014-3487","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1107544","bugzilla_description":"CVE-2014-3487 file: cdf_read_property_info insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3487.json"},{"CVE":"CVE-2014-4721","severity":"low","public_date":"2014-06-23T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1012"],"bugzilla":"1116662","bugzilla_description":"CVE-2014-4721 php: type confusion issue in phpinfo() leading to information leak","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-843->CWE-822->CWE-201","affected_packages":["php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4721.json"},{"CVE":"CVE-2015-8994","severity":"low","public_date":"2014-06-19T00:00:00Z","advisories":[],"bugzilla":"1395231","bugzilla_description":"CVE-2015-8994 php: Zend OPCache code permission/sensitive data protection issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8994.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2014-4049","severity":"moderate","public_date":"2014-06-11T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1012"],"bugzilla":"1108447","bugzilla_description":"CVE-2014-4049 php: heap-based buffer overflow in DNS TXT record parsing","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4049.json"},{"CVE":"CVE-2014-9912","severity":"moderate","public_date":"2014-06-08T00:00:00Z","advisories":[],"bugzilla":"1399433","bugzilla_description":"CVE-2014-9912 php: stack buffer overflow in locale_get_display_name","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9912.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2014-3981","severity":"low","public_date":"2014-06-04T00:00:00Z","advisories":[],"bugzilla":"1104978","bugzilla_description":"CVE-2014-3981 php: insecure temporary file use in the configure script","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3981.json"},{"CVE":"CVE-2014-0238","severity":"moderate","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1098155","bugzilla_description":"CVE-2014-0238 file: CDF property info parsing nelements infinite loop","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0238.json"},{"CVE":"CVE-2014-0237","severity":"moderate","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1098193","bugzilla_description":"CVE-2014-0237 file: cdf_unpack_summary_info() excessive looping DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0237.json"},{"CVE":"CVE-2014-0185","severity":"moderate","public_date":"2014-04-30T00:00:00Z","advisories":[],"bugzilla":"1092815","bugzilla_description":"CVE-2014-0185 php: insecure default permissions on the FPM unix socket","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0185.json"},{"CVE":"CVE-2013-6371","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":["RHSA-2014:0703"],"bugzilla":"1032311","bugzilla_description":"CVE-2013-6371 json-c: hash collision DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["json-c-0:0.11-4.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6371.json"},{"CVE":"CVE-2013-6370","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":["RHSA-2014:0703"],"bugzilla":"1032322","bugzilla_description":"CVE-2013-6370 json-c: buffer overflow if size_t is larger than int","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["json-c-0:0.11-4.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6370.json"},{"CVE":"CVE-2014-2497","severity":"low","public_date":"2014-03-13T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1076676","bugzilla_description":"CVE-2014-2497 gd: NULL pointer dereference in gdImageCreateFromXpm()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php53-0:5.3.3-24.el5","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2497.json"},{"CVE":"CVE-2014-1943","severity":"moderate","public_date":"2014-02-10T00:00:00Z","advisories":["RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1065836","bugzilla_description":"CVE-2014-1943 file: unrestricted recursion in handling of indirect type rules","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1943.json"},{"CVE":"CVE-2013-7226","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7226.json"},{"CVE":"CVE-2013-7327","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7327.json"},{"CVE":"CVE-2013-7328","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7328.json"},{"CVE":"CVE-2014-2020","severity":"important","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1065108","bugzilla_description":"CVE-2013-7226 CVE-2013-7327 CVE-2013-7328 CVE-2014-2020 php: multiple vulnerabilities in gdImageCrop()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2020.json"},{"CVE":"CVE-2014-2270","severity":"moderate","public_date":"2013-12-20T00:00:00Z","advisories":["RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1072220","bugzilla_description":"CVE-2014-2270 file: out-of-bounds access in search rules with offsets from input file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2270.json"},{"CVE":"CVE-2013-6420","severity":"critical","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1814","RHSA-2013:1825","RHSA-2013:1826","RHSA-2013:1815","RHSA-2013:1813","RHSA-2013:1824"],"bugzilla":"1036830","bugzilla_description":"CVE-2013-6420 php: memory corruption in openssl_x509_parse()","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-130->CWE-119","affected_packages":["php-0:5.1.6-43.el5_10","php-0:5.1.6-40.el5_9.1","php53-0:5.3.3-1.el5_6.4","php-0:4.3.2-57.ent","php53-0:5.3.3-13.el5_9.2","php-0:5.3.3-27.el6_5","php-0:5.1.6-27.el5_6.6","php-0:4.3.9-3.37.el4.1","php53-0:5.3.3-22.el5_10","php54-php-0:5.4.16-7.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6420.json"},{"CVE":"CVE-2013-6712","severity":"low","public_date":"2013-11-27T00:00:00Z","advisories":["RHSA-2014:1765","RHSA-2014:1012"],"bugzilla":"1035670","bugzilla_description":"CVE-2013-6712 php: heap-based buffer over-read in DateInterval","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["php-0:5.3.3-27.el6_5.1","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6712.json"},{"CVE":"CVE-2013-7456","severity":"low","public_date":"2013-09-24T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1340433","bugzilla_description":"CVE-2013-7456 gd: incorrect boundary adjustment in _gdContributionsCalc","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7456.json"},{"CVE":"CVE-2013-4248","severity":"moderate","public_date":"2013-08-13T00:00:00Z","advisories":["RHSA-2013:1307","RHSA-2013:1615"],"bugzilla":"997097","bugzilla_description":"CVE-2013-4248 php: hostname check bypassing vulnerability in SSL client","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-0:5.3.3-26.el6","php53-0:5.3.3-21.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4248.json"},{"CVE":"CVE-2013-4113","severity":"critical","public_date":"2013-07-11T00:00:00Z","advisories":["RHSA-2013:1063","RHSA-2013:1050","RHSA-2013:1061","RHSA-2013:1062","RHSA-2013:1049"],"bugzilla":"983689","bugzilla_description":"CVE-2013-4113 php: xml_parse_into_struct buffer overflow when parsing deeply nested XML","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["php-0:5.1.6-40.el5_9","php53-0:5.3.3-1.el5_6.3","php53-0:5.3.3-13.el5_9.1","php-0:5.3.3-23.el6_4","php-0:4.3.2-56.ent","php-0:5.3.3-14.el6_3.1","php-0:5.3.3-3.el6_2.10","php-0:5.1.6-23.4.el5_3","php-0:4.3.9-3.37.el4","php-0:5.1.6-27.el5_6.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4113.json"},{"CVE":"CVE-2013-2110","severity":"critical","public_date":"2013-06-06T00:00:00Z","advisories":[],"bugzilla":"964969","bugzilla_description":"CVE-2013-2110 php: Heap-based buffer overflow in quoted_printable_encode()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2110.json"},{"CVE":"CVE-2013-3735","severity":null,"public_date":"2013-05-23T00:00:00Z","advisories":[],"bugzilla":"969996","bugzilla_description":"CVE-2013-3735 php: DoS (memory exhaustion, application crash) via crafted function definition","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3735.json"},{"CVE":"CVE-2013-4635","severity":"moderate","public_date":"2013-05-22T00:00:00Z","advisories":[],"bugzilla":"977462","bugzilla_description":"CVE-2013-4635 php: Integer overflow in SndToJewish - DoS (excessive CPU use, interpreter hang)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4635.json"},{"CVE":"CVE-2013-4636","severity":"moderate","public_date":"2013-05-13T00:00:00Z","advisories":[],"bugzilla":"977463","bugzilla_description":"CVE-2013-4636 php: fileinfo: Invalid pointer dereference when checking mimetype of certain MP3 files","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4636.json"},{"CVE":"CVE-2013-1643","severity":"low","public_date":"2013-02-20T00:00:00Z","advisories":["RHSA-2013:1814","RHSA-2013:1307","RHSA-2013:1615"],"bugzilla":"918187","bugzilla_description":"CVE-2013-1643 php: Ability to read arbitrary files due use of external entities while parsing SOAP WSDL files","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["php-0:5.1.6-43.el5_10","php-0:5.3.3-26.el6","php53-0:5.3.3-21.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1643.json"},{"CVE":"CVE-2013-1635","severity":"moderate","public_date":"2013-02-07T00:00:00Z","advisories":[],"bugzilla":"918196","bugzilla_description":"CVE-2013-1635 php, php53: Arbitrary locations file write due absent validation of soap.wsdl_cache_dir configuration directive value","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1635.json"},{"CVE":"CVE-2012-4388","severity":"moderate","public_date":"2012-09-02T00:00:00Z","advisories":[],"bugzilla":"854184","bugzilla_description":"CVE-2012-4388 php: header() injection detection bypass (incorrect fix for CVE-2011-1398)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4388.json"},{"CVE":"CVE-2012-2688","severity":"low","public_date":"2012-07-19T00:00:00Z","advisories":["RHSA-2013:1814","RHSA-2013:0514","RHSA-2013:1307"],"bugzilla":"828051","bugzilla_description":"CVE-2012-2688 php: Integer Signedness issues in _php_stream_scandir","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["php-0:5.1.6-43.el5_10","php53-0:5.3.3-21.el5","php-0:5.3.3-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2688.json"},{"CVE":"CVE-2012-3450","severity":null,"public_date":"2012-06-10T00:00:00Z","advisories":[],"bugzilla":"845372","bugzilla_description":"CVE-2012-3450 php: PDO array over-read crash","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3450.json"},{"CVE":"CVE-2012-2143","severity":"moderate","public_date":"2012-05-30T00:00:00Z","advisories":["RHSA-2012:1036","RHSA-2012:1047","RHSA-2012:1046","RHSA-2012:1037"],"bugzilla":"816956","bugzilla_description":"CVE-2012-2143 BSD crypt(): DES encrypted password weakness","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["postgresql-0:8.1.23-5.el5_8","postgresql84-0:8.4.12-1.el5_8","postgresql-0:8.4.12-1.el6_2","php-0:5.3.3-14.el6_3","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2143.json"},{"CVE":"CVE-2012-2386","severity":"moderate","public_date":"2012-05-21T00:00:00Z","advisories":["RHSA-2012:1047","RHSA-2012:1046"],"bugzilla":"823594","bugzilla_description":"CVE-2012-2386 php: Integer overflow leading to heap-buffer overflow in the Phar extension","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["php-0:5.3.3-14.el6_3","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2386.json"},{"CVE":"CVE-2012-2376","severity":"low","public_date":"2012-05-19T00:00:00Z","advisories":[],"bugzilla":"823464","bugzilla_description":"CVE-2012-2376 php: Buffer overflow in com_print_typeinfo() by parsing certain variant types","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2376.json"},{"CVE":"CVE-2012-2329","severity":"important","public_date":"2012-05-08T00:00:00Z","advisories":[],"bugzilla":"820000","bugzilla_description":"CVE-2012-2329 php: buffer overflow flaw in apache_request_headers() in PHP 5.4.x","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-697->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2329.json"},{"CVE":"CVE-2012-1823","severity":"critical","public_date":"2012-05-03T00:00:00Z","advisories":["RHSA-2012:0546","RHSA-2012:0568","RHSA-2012:0547","RHSA-2012:0569","RHSA-2012:0570"],"bugzilla":"818607","bugzilla_description":"CVE-2012-1823 php: command line arguments injection when run in CGI mode (VU#520827)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_6.2","php-0:5.3.3-3.el6_2.8","php-0:5.3.2-6.el6_0.2","php-0:5.2.10-2.el5s2","php53-0:5.3.3-7.el5_8","php-0:5.1.6-27.el5_6.4","php-0:5.1.6-34.el5_8","php-0:5.3.3-3.el6_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1823.json"},{"CVE":"CVE-2012-2311","severity":"critical","public_date":"2012-05-03T00:00:00Z","advisories":[],"bugzilla":"818907","bugzilla_description":"CVE-2012-2311 php: incomplete CVE-2012-1823 fix - incorrect check for =","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2311.json"},{"CVE":"CVE-2012-2336","severity":"moderate","public_date":"2012-05-03T00:00:00Z","advisories":["RHSA-2012:1045","RHSA-2012:1047","RHSA-2012:1046"],"bugzilla":"820708","bugzilla_description":"CVE-2012-2336 php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-228->CWE-400","affected_packages":["php-0:5.3.3-14.el6_3","php-0:5.1.6-39.el5_8","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2336.json"},{"CVE":"CVE-2012-2335","severity":"low","public_date":"2012-05-03T00:00:00Z","advisories":[],"bugzilla":"820874","bugzilla_description":"CVE-2012-2335 php: incomplete CVE-2012-1823 fix - insecure wrapper","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2335.json"},{"CVE":"CVE-2012-1162","severity":"moderate","public_date":"2012-03-20T00:00:00Z","advisories":[],"bugzilla":"802564","bugzilla_description":"CVE-2012-1162 libzip: heap overflow flaw when processing malformed zip file","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1162.json"},{"CVE":"CVE-2012-1163","severity":"moderate","public_date":"2012-03-20T00:00:00Z","advisories":[],"bugzilla":"803028","bugzilla_description":"CVE-2012-1163 libzip: integer overflow when processing malformed zip file","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1163.json"},{"CVE":"CVE-2012-6113","severity":"low","public_date":"2012-03-16T00:00:00Z","advisories":[],"bugzilla":"902365","bugzilla_description":"CVE-2012-6113 php (openssl extension): Process memory sensitive information disclosure due to missing variable initialization","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6113.json"},{"CVE":"CVE-2012-1171","severity":"moderate","public_date":"2012-03-13T00:00:00Z","advisories":[],"bugzilla":"802591","bugzilla_description":"CVE-2012-1171 php: libxml RSHUTDOWN function disables the hooks which are used to implement open_basedir","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1171.json"},{"CVE":"CVE-2012-1172","severity":"moderate","public_date":"2012-03-01T00:00:00Z","advisories":["RHSA-2012:1045","RHSA-2012:1047","RHSA-2012:1046"],"bugzilla":"799187","bugzilla_description":"CVE-2012-1172 php: $_FILES array indexes corruption","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["php-0:5.3.3-14.el6_3","php-0:5.1.6-39.el5_8","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1172.json"},{"CVE":"CVE-2012-1571","severity":"low","public_date":"2012-02-16T00:00:00Z","advisories":["RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"805197","bugzilla_description":"CVE-2012-1571 file: out of bounds read in CDF parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php53-0:5.3.3-23.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1571.json"},{"CVE":"CVE-2012-0830","severity":"critical","public_date":"2012-02-02T00:00:00Z","advisories":["RHSA-2012:0092","RHSA-2012:0093"],"bugzilla":"786686","bugzilla_description":"CVE-2012-0830 php: remote code exec flaw introduced in the CVE-2011-4885 hashdos fix","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-228->CWE-119","affected_packages":["php-0:5.3.3-3.el6_2.6","php53-0:5.3.3-1.el5_7.6","php-0:4.3.9-3.36","php-0:5.1.6-27.el5_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0830.json"},{"CVE":"CVE-2012-0831","severity":"low","public_date":"2012-02-02T00:00:00Z","advisories":["RHSA-2013:0514","RHSA-2013:1307"],"bugzilla":"789468","bugzilla_description":"CVE-2012-0831 php: PG(magic_quote_gpc) was not restored on shutdown","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php53-0:5.3.3-21.el5","php-0:5.3.3-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0831.json"},{"CVE":"CVE-2012-0057","severity":"moderate","public_date":"2012-01-11T00:00:00Z","advisories":["RHSA-2012:1045","RHSA-2012:1047","RHSA-2012:1046"],"bugzilla":"782657","bugzilla_description":"CVE-2012-0057 php: XSLT file writing vulnerability","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["php-0:5.3.3-14.el6_3","php-0:5.1.6-39.el5_8","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0057.json"},{"CVE":"CVE-2012-0788","severity":null,"public_date":"2012-01-11T00:00:00Z","advisories":[],"bugzilla":"783605","bugzilla_description":"CVE-2012-0788 php: crash when unserializing serialized PDORow object","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0788.json"},{"CVE":"CVE-2012-0789","severity":"low","public_date":"2012-01-11T00:00:00Z","advisories":["RHSA-2012:1045","RHSA-2012:1047","RHSA-2012:1046"],"bugzilla":"783609","bugzilla_description":"CVE-2012-0789 php: strtotime timezone memory leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["php-0:5.3.3-14.el6_3","php-0:5.1.6-39.el5_8","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0789.json"},{"CVE":"CVE-2011-4153","severity":"low","public_date":"2012-01-10T00:00:00Z","advisories":["RHSA-2012:1045","RHSA-2012:1047","RHSA-2012:1046"],"bugzilla":"782943","bugzilla_description":"CVE-2011-4153 php: zend_strndup() NULL pointer dereference may cause DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php-0:5.3.3-14.el6_3","php-0:5.1.6-39.el5_8","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4153.json"},{"CVE":"CVE-2012-0781","severity":"low","public_date":"2012-01-10T00:00:00Z","advisories":["RHSA-2012:1046"],"bugzilla":"782951","bugzilla_description":"CVE-2012-0781 php: tidy_diagnose() NULL pointer dereference may cause DoS","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php-0:5.3.3-14.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0781.json"},{"CVE":"CVE-2013-7345","severity":"moderate","public_date":"2011-12-31T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2014:1765"],"bugzilla":"1079846","bugzilla_description":"CVE-2013-7345 file: extensive backtracking in awk rule regular expression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["php-0:5.4.16-23.el7_0","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7345.json"},{"CVE":"CVE-2011-4885","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":["RHSA-2012:0019","RHSA-2012:0071","RHSA-2012:0033"],"bugzilla":"750547","bugzilla_description":"CVE-2011-4885 php: hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php-0:5.3.3-3.el6_2.5","php53-0:5.3.3-1.el5_7.5","php-0:4.3.9-3.35","php-0:5.1.6-27.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4885.json"},{"CVE":"CVE-2011-4718","severity":"moderate","public_date":"2011-11-23T00:00:00Z","advisories":[],"bugzilla":"996774","bugzilla_description":"CVE-2011-4718 php: session fixation vulnerability allows remote hijacking of sessions","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-384","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4718.json"},{"CVE":"CVE-2011-1398","severity":"moderate","public_date":"2011-11-06T00:00:00Z","advisories":["RHSA-2013:1814","RHSA-2013:0514","RHSA-2013:1307"],"bugzilla":"853329","bugzilla_description":"CVE-2011-1398 PHP: sapi_header_op() %0D sequence handling security bypass","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-0:5.1.6-43.el5_10","php53-0:5.3.3-21.el5","php-0:5.3.3-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1398.json"},{"CVE":"CVE-2011-4566","severity":"moderate","public_date":"2011-10-27T00:00:00Z","advisories":["RHSA-2012:0019","RHSA-2012:0071","RHSA-2012:0033"],"bugzilla":"758413","bugzilla_description":"CVE-2011-4566 php: integer overflow in exif_process_IFD_TAG() may lead to DoS or arbitrary memory disclosure","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-190","affected_packages":["php-0:5.3.3-3.el6_2.5","php53-0:5.3.3-1.el5_7.5","php-0:4.3.9-3.35","php-0:5.1.6-27.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4566.json"},{"CVE":"CVE-2011-3379","severity":"moderate","public_date":"2011-09-23T00:00:00Z","advisories":[],"bugzilla":"741020","bugzilla_description":"CVE-2011-3379 php: changes to is_a() in 5.3.7 may allow arbitrary code execution with certain code","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3379.json"},{"CVE":"CVE-2011-3182","severity":null,"public_date":"2011-08-19T00:00:00Z","advisories":[],"bugzilla":"732516","bugzilla_description":"CVE-2011-3182 php: multiple NULL pointer dereferences","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3182.json"},{"CVE":"CVE-2011-3189","severity":"important","public_date":"2011-08-17T00:00:00Z","advisories":[],"bugzilla":"732795","bugzilla_description":"CVE-2011-3189 php: 5.3.7 crypt() only returns the salt for MD5 hashes","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3189.json"},{"CVE":"CVE-2011-2896","severity":"moderate","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181","RHSA-2011:1635","RHSA-2012:0302"],"bugzilla":"727800","bugzilla_description":"CVE-2011-2896 David Koblas' GIF decoder LZW decoder buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gimp-2:2.6.9-4.el6_3.3","cups-1:1.3.7-30.el5","gimp-2:2.2.13-2.0.7.el5_8.5","cups-1:1.4.2-44.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2896.json"},{"CVE":"CVE-2011-2483","severity":"moderate","public_date":"2011-06-20T00:00:00Z","advisories":["RHSA-2011:1377","RHSA-2011:1378","RHSA-2011:1423"],"bugzilla":"715025","bugzilla_description":"CVE-2011-2483 crypt_blowfish: 8-bit character mishandling allows different password pairs to produce the same hash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["postgresql-0:7.4.30-3.el4","php53-0:5.3.3-1.el5_7.3","postgresql84-0:8.4.9-1.el5_7.1","postgresql-0:8.4.9-1.el6_1.1","postgresql-0:8.1.23-1.el5_7.2","php-0:5.3.3-3.el6_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2483.json"},{"CVE":"CVE-2011-2202","severity":"low","public_date":"2011-06-12T00:00:00Z","advisories":["RHSA-2011:1423","RHSA-2012:0071","RHSA-2012:0033"],"bugzilla":"713194","bugzilla_description":"CVE-2011-2202 php: file path injection vulnerability in RFC1867 file upload filename","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3","php-0:4.3.9-3.35","php-0:5.1.6-27.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2202.json"},{"CVE":"CVE-2011-1938","severity":"low","public_date":"2011-05-23T00:00:00Z","advisories":["RHSA-2011:1423"],"bugzilla":"709067","bugzilla_description":"CVE-2011-1938 php: stack-based buffer overflow in socket_connect()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1938.json"},{"CVE":"CVE-2011-1657","severity":null,"public_date":"2011-05-07T00:00:00Z","advisories":[],"bugzilla":"718253","bugzilla_description":"CVE-2011-1657 php: ZipArchive::addGlob() missing glob flags filtering","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1657.json"},{"CVE":"CVE-2011-1153","severity":"moderate","public_date":"2011-03-14T00:00:00Z","advisories":[],"bugzilla":"688378","bugzilla_description":"CVE-2011-1153 php: several format string vulnerabilities in PHP's Phar extension","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1153.json"},{"CVE":"CVE-2011-1148","severity":"moderate","public_date":"2011-03-13T00:00:00Z","advisories":["RHSA-2011:1423","RHSA-2012:0033"],"bugzilla":"688958","bugzilla_description":"CVE-2011-1148 php: use-after-free vulnerability in substr_replace()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3","php-0:5.1.6-27.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1148.json"},{"CVE":"CVE-2011-1092","severity":null,"public_date":"2011-03-08T00:00:00Z","advisories":[],"bugzilla":"683183","bugzilla_description":"CVE-2011-1092 php: integer overflow in shmop_read()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1092.json"},{"CVE":"CVE-2011-1469","severity":"low","public_date":"2011-02-24T00:00:00Z","advisories":["RHSA-2011:1423","RHSA-2012:0033"],"bugzilla":"690905","bugzilla_description":"CVE-2011-1469 php: DoS when using HTTP proxy with the FTP wrapper","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3","php-0:5.1.6-27.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1469.json"},{"CVE":"CVE-2011-1468","severity":"low","public_date":"2011-02-21T00:00:00Z","advisories":["RHSA-2011:1423"],"bugzilla":"690899","bugzilla_description":"CVE-2011-1468 php: Multiple memory leaks in the OpenSSL extension","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1468.json"},{"CVE":"CVE-2011-1464","severity":null,"public_date":"2011-02-20T00:00:00Z","advisories":[],"bugzilla":"689365","bugzilla_description":"CVE-2011-1464 php: Crash by retrieving string value of a variable, when high precision used","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1464.json"},{"CVE":"CVE-2011-0420","severity":null,"public_date":"2011-02-17T00:00:00Z","advisories":[],"bugzilla":"678885","bugzilla_description":"CVE-2011-0420 php: missing $size checks in grapheme_extract()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0420.json"},{"CVE":"CVE-2011-0708","severity":"low","public_date":"2011-02-14T00:00:00Z","advisories":["RHSA-2011:1423","RHSA-2012:0071","RHSA-2012:0033"],"bugzilla":"680972","bugzilla_description":"CVE-2011-0708 php: buffer over-read in Exif extension","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3","php-0:4.3.9-3.35","php-0:5.1.6-27.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0708.json"},{"CVE":"CVE-2011-0421","severity":"low","public_date":"2011-01-30T00:00:00Z","advisories":[],"bugzilla":"688735","bugzilla_description":"CVE-2011-0421 php/libzip: segfault with FL_UNCHANGED on empty archive in zip_name_locate()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0421.json"},{"CVE":"CVE-2010-4645","severity":"moderate","public_date":"2010-12-30T00:00:00Z","advisories":["RHSA-2011:0196","RHSA-2011:0195"],"bugzilla":"667806","bugzilla_description":"CVE-2010-4645 php: hang on numeric value 2.2250738585072011e-308 with x87 fpu","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php-0:5.3.2-6.el6_0.1","php53-0:5.3.3-1.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4645.json"},{"CVE":"CVE-2011-1470","severity":"low","public_date":"2010-12-20T00:00:00Z","advisories":[],"bugzilla":"690911","bugzilla_description":"CVE-2011-1470 php: crash when processing certain Zip archives","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1470.json"},{"CVE":"CVE-2011-1466","severity":"low","public_date":"2010-12-19T00:00:00Z","advisories":["RHSA-2011:1423","RHSA-2012:0071","RHSA-2012:0033"],"bugzilla":"689386","bugzilla_description":"CVE-2011-1466 php: Crash by converting serial day numbers (SDN) into Julian calendar","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3","php-0:4.3.9-3.35","php-0:5.1.6-27.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1466.json"},{"CVE":"CVE-2010-4698","severity":null,"public_date":"2010-12-08T00:00:00Z","advisories":[],"bugzilla":"670799","bugzilla_description":"CVE-2010-4698 php: GD crash in imagepstext with invalid anti-aliasing argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4698.json"},{"CVE":"CVE-2011-0752","severity":"low","public_date":"2010-12-08T00:00:00Z","advisories":[],"bugzilla":"674699","bugzilla_description":"CVE-2011-0752 php: extract() can overwrite $GLOBALS and $this when using EXTR_OVERWRITE","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0752.json"},{"CVE":"CVE-2011-1467","severity":null,"public_date":"2010-12-07T00:00:00Z","advisories":[],"bugzilla":"690894","bugzilla_description":"CVE-2011-1467 php: NumberFormatter: set a symbol value crash (DoS) on bogus  values","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1467.json"},{"CVE":"CVE-2010-4409","severity":"low","public_date":"2010-11-19T00:00:00Z","advisories":[],"bugzilla":"660382","bugzilla_description":"CVE-2010-4409 php: getSymbol() integer overflow vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4409.json"},{"CVE":"CVE-2011-1072","severity":"low","public_date":"2010-11-14T00:00:00Z","advisories":["RHSA-2011:1741"],"bugzilla":"681982","bugzilla_description":"CVE-2011-1072 CVE-2011-1144 php-pear: symlink vulnerability in PEAR installer","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-pear-1:1.9.4-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1072.json"},{"CVE":"CVE-2011-1144","severity":"low","public_date":"2010-11-14T00:00:00Z","advisories":[],"bugzilla":"681982","bugzilla_description":"CVE-2011-1072 CVE-2011-1144 php-pear: symlink vulnerability in PEAR installer","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1144.json"},{"CVE":"CVE-2010-4156","severity":"moderate","public_date":"2010-11-08T00:00:00Z","advisories":["RHSA-2011:0196"],"bugzilla":"651682","bugzilla_description":"CVE-2010-4156 php information disclosure via mb_strcut()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4156.json"},{"CVE":"CVE-2010-4150","severity":null,"public_date":"2010-11-02T00:00:00Z","advisories":[],"bugzilla":"656917","bugzilla_description":"CVE-2010-4150 php: Double free in the imap extension","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4150.json"},{"CVE":"CVE-2010-3709","severity":"low","public_date":"2010-10-19T00:00:00Z","advisories":["RHSA-2011:0195"],"bugzilla":"651206","bugzilla_description":"CVE-2010-3709 php: NULL pointer dereference in ZipArchive::getArchiveComment","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php-0:5.3.2-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3709.json"},{"CVE":"CVE-2010-4657","severity":"low","public_date":"2010-10-06T00:00:00Z","advisories":[],"bugzilla":"673101","bugzilla_description":"CVE-2010-4657 php: XMLWriter information leak","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4657.json"},{"CVE":"CVE-2010-3710","severity":"low","public_date":"2010-09-27T00:00:00Z","advisories":["RHSA-2011:0196"],"bugzilla":"646684","bugzilla_description":"CVE-2010-3710 php: DoS in filter_var() via long email string","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3710.json"},{"CVE":"CVE-2011-0753","severity":null,"public_date":"2010-09-06T00:00:00Z","advisories":[],"bugzilla":"674705","bugzilla_description":"CVE-2011-0753 php: race condition when handling many concurrent signals may lead to memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0753.json"},{"CVE":"CVE-2010-3294","severity":"low","public_date":"2010-08-05T00:00:00Z","advisories":["RHSA-2012:0811"],"bugzilla":"634334","bugzilla_description":"CVE-2010-3294 php-pecl-apc: potential XSS in apc.php","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["php-pecl-apc-0:3.1.9-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3294.json"},{"CVE":"CVE-2010-2531","severity":"low","public_date":"2010-07-09T00:00:00Z","advisories":["RHSA-2010:0919"],"bugzilla":"617673","bugzilla_description":"CVE-2010-2531 php: information leak vulnerability in var_export()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["php-0:5.1.6-27.el5_5.3","php-0:4.3.9-3.31"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2531.json"},{"CVE":"CVE-2010-4700","severity":"low","public_date":"2010-07-01T00:00:00Z","advisories":[],"bugzilla":"670811","bugzilla_description":"CVE-2010-4700 php: mysqli mysqli_fetch_assoc does not escape its output when magic_quotes are enabled","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4700.json"},{"CVE":"CVE-2010-2225","severity":null,"public_date":"2010-06-18T00:00:00Z","advisories":[],"bugzilla":"605641","bugzilla_description":"CVE-2010-2225 php: SplObjectStorage unserialization flaws (MOPS-2010-061)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2225.json"},{"CVE":"CVE-2010-3065","severity":"moderate","public_date":"2010-05-31T00:00:00Z","advisories":["RHSA-2010:0919"],"bugzilla":"619030","bugzilla_description":"CVE-2010-3065 php: session serializer session data injection vulnerability (MOPS-2010-060)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-0:5.1.6-27.el5_5.3","php-0:4.3.9-3.31"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3065.json"},{"CVE":"CVE-2010-2094","severity":"moderate","public_date":"2010-05-14T00:00:00Z","advisories":[],"bugzilla":"598537","bugzilla_description":"CVE-2010-2094 php: Multiple format string flaws in the phar extension (MOPS-2010-025 MOPS-2010-026 MOPS-2010-027 MOPS-2010-028)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2094.json"},{"CVE":"CVE-2010-2950","severity":"moderate","public_date":"2010-05-14T00:00:00Z","advisories":["RHSA-2012:1047","RHSA-2012:1046"],"bugzilla":"835024","bugzilla_description":"CVE-2010-2950 php: Format string flaw in phar extension via phar_stream_flush() (MOPS-2010-024)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["php-0:5.3.3-14.el6_3","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2950.json"},{"CVE":"CVE-2010-2093","severity":"low","public_date":"2010-05-12T00:00:00Z","advisories":[],"bugzilla":"598474","bugzilla_description":"CVE-2010-2093 PHP: Context stream use-after-free on request shutdown (MOPS-2010-022)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2093.json"},{"CVE":"CVE-2010-1917","severity":"low","public_date":"2010-05-11T00:00:00Z","advisories":["RHSA-2010:0919"],"bugzilla":"617232","bugzilla_description":"CVE-2010-1917 php: fnmatch long pattern stack memory exhaustion (MOPS-2010-021)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php-0:5.1.6-27.el5_5.3","php-0:4.3.9-3.31"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1917.json"},{"CVE":"CVE-2010-1915","severity":null,"public_date":"2010-05-09T00:00:00Z","advisories":[],"bugzilla":"617211","bugzilla_description":"CVE-2010-1915 php: preg_quote interruption vulnerability (MOPS-2010-017)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1915.json"},{"CVE":"CVE-2010-1914","severity":null,"public_date":"2010-05-08T00:00:00Z","advisories":[],"bugzilla":"617180","bugzilla_description":"CVE-2010-1914 php: bitwise operators interruption vulnerabilities (MOPS-2010-014, MOPS-2010-015, MOPS-2010-016)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1914.json"},{"CVE":"CVE-2010-1868","severity":"low","public_date":"2010-05-07T00:00:00Z","advisories":[],"bugzilla":"617134","bugzilla_description":"CVE-2010-1868 php: sqlite: use of uninitialized memory triggered by empty SQL query (MOPS-2010-012, MOPS-2010-013)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1868.json"},{"CVE":"CVE-2010-1866","severity":"moderate","public_date":"2010-05-02T00:00:00Z","advisories":[],"bugzilla":"618167","bugzilla_description":"CVE-2010-1866 php: dechunk filter integer signedness error causing buffer overflow (MOPS-2010-003)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1866.json"},{"CVE":"CVE-2010-0397","severity":"low","public_date":"2010-03-12T00:00:00Z","advisories":["RHSA-2010:0919"],"bugzilla":"573779","bugzilla_description":"CVE-2010-0397 php: NULL pointer dereference in XML-RPC extension","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["php-0:5.1.6-27.el5_5.3","php-0:4.3.9-3.31"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0397.json"},{"CVE":"CVE-2010-1128","severity":"low","public_date":"2010-02-25T00:00:00Z","advisories":["RHSA-2010:0919"],"bugzilla":"577582","bugzilla_description":"CVE-2010-1128 php: LCG entropy weakness","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["php-0:5.1.6-27.el5_5.3","php-0:4.3.9-3.31"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1128.json"},{"CVE":"CVE-2009-0689","severity":"critical","public_date":"2009-11-20T00:00:00Z","advisories":["RHSA-2014:0311","RHSA-2014:0312","RHSA-2009:1601","RHSA-2010:0154","RHSA-2010:0153","RHSA-2009:1531","RHSA-2009:1530"],"bugzilla":"539784","bugzilla_description":"CVE-2009-0689 array index error in dtoa implementation of many products","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["php-0:5.1.6-40.el5_9.2","seamonkey-0:1.0.9-50.el4_8","php-0:5.1.6-23.6.el5_3","php-0:5.1.6-27.el5_6.7","kdelibs-6:3.3.1-17.el4_8.1","php-0:5.1.6-44.el5_10","kdelibs-6:3.5.4-25.el5_4.1","thunderbird-0:2.0.0.24-2.el5_4","seamonkey-0:1.0.9-0.47.el3","thunderbird-0:1.5.0.12-25.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0689.json"},{"CVE":"CVE-2009-4017","severity":"moderate","public_date":"2009-11-20T00:00:00Z","advisories":["RHSA-2010:0040"],"bugzilla":"540459","bugzilla_description":"CVE-2009-4017 PHP: resource exhaustion attack via upload requests with lots of files","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4017.json"},{"CVE":"CVE-2009-3546","severity":"low","public_date":"2009-10-12T00:00:00Z","advisories":["RHSA-2010:0040","RHSA-2010:0003"],"bugzilla":"529213","bugzilla_description":"CVE-2009-3546 gd: insufficient input validation in _gdGetColors()","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","gd-0:2.0.33-9.4.el5_4.2","gd-0:2.0.28-5.4E.el4_8.1","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3546.json"},{"CVE":"CVE-2009-4142","severity":"moderate","public_date":"2009-10-06T00:00:00Z","advisories":["RHSA-2010:0040"],"bugzilla":"548516","bugzilla_description":"CVE-2009-4142 php: htmlspecialchars() insufficient checking of input for multi-byte encodings","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4142.json"},{"CVE":"CVE-2010-3870","severity":"moderate","public_date":"2009-09-27T00:00:00Z","advisories":["RHSA-2010:0919","RHSA-2011:0195"],"bugzilla":"649056","bugzilla_description":"CVE-2010-3870 php: XSS mitigation bypass via utf8_decode()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["php-0:5.3.2-6.el6_0.1","php-0:5.1.6-27.el5_5.3","php-0:4.3.9-3.31"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3870.json"},{"CVE":"CVE-2009-5016","severity":"moderate","public_date":"2009-09-27T00:00:00Z","advisories":["RHSA-2010:0919","RHSA-2011:0195"],"bugzilla":"652836","bugzilla_description":"CVE-2009-5016 php: XSS and SQL injection bypass via crafted overlong UTF-8 encoded string","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["php-0:5.3.2-6.el6_0.1","php-0:5.1.6-27.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5016.json"},{"CVE":"CVE-2009-3292","severity":"low","public_date":"2009-09-16T00:00:00Z","advisories":["RHSA-2010:0040"],"bugzilla":"524222","bugzilla_description":"CVE-2009-3292 php: exif extension: Multiple missing sanity checks in EXIF file processing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3292.json"},{"CVE":"CVE-2009-3291","severity":"low","public_date":"2009-09-16T00:00:00Z","advisories":["RHSA-2010:0040"],"bugzilla":"524228","bugzilla_description":"CVE-2009-3291 php: openssl extension: Incorrect verification of SSL certificate with NUL in name","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3291.json"},{"CVE":"CVE-2011-1471","severity":"low","public_date":"2009-07-27T00:00:00Z","advisories":["RHSA-2011:1423"],"bugzilla":"690915","bugzilla_description":"CVE-2011-1471 php: DoS (excessive CPU consumption) by processing certain Zip archive files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php53-0:5.3.3-1.el5_7.3","php-0:5.3.3-3.el6_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1471.json"},{"CVE":"CVE-2009-2687","severity":"moderate","public_date":"2009-06-18T00:00:00Z","advisories":["RHSA-2010:0040","RHSA-2009:1461"],"bugzilla":"506896","bugzilla_description":"CVE-2009-2687 php: exif_read_data crash on corrupted JPEG files","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["php-0:4.3.9-3.29","php-0:4.3.2-54.ent","php-0:5.1.6-24.el5_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2687.json"},{"CVE":"CVE-2008-5498","severity":"low","public_date":"2008-12-24T00:00:00Z","advisories":["RHSA-2009:0350","RHSA-2009:0337","RHSA-2009:0338"],"bugzilla":"478425","bugzilla_description":"CVE-2008-5498 php: libgd imagerotate() array index error memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-51.ent","php-0:5.1.6-23.2.el5_3","php-0:4.3.9-3.22.15","php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5498.json"},{"CVE":"CVE-2008-5814","severity":"low","public_date":"2008-12-19T00:00:00Z","advisories":["RHSA-2009:0350","RHSA-2009:0338"],"bugzilla":"480167","bugzilla_description":"CVE-2008-5814 php: XSS via PHP error messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["php-0:5.1.6-23.2.el5_3","php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5814.json"},{"CVE":"CVE-2009-1271","severity":"low","public_date":"2008-12-19T00:00:00Z","advisories":["RHSA-2009:0350"],"bugzilla":"494530","bugzilla_description":"CVE-2009-1271 php: crash on malformed input in json_decode()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1271.json"},{"CVE":"CVE-2008-5658","severity":"moderate","public_date":"2008-12-04T00:00:00Z","advisories":["RHSA-2009:0350"],"bugzilla":"474824","bugzilla_description":"CVE-2008-5658 php: ZipArchive::extractTo() Directory Traversal Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5658.json"},{"CVE":"CVE-2011-0755","severity":null,"public_date":"2008-11-17T00:00:00Z","advisories":[],"bugzilla":"674709","bugzilla_description":"CVE-2011-0755 php: mt_rand() does not check that max is greater than min","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0755.json"},{"CVE":"CVE-2008-3658","severity":"low","public_date":"2008-08-07T00:00:00Z","advisories":["RHSA-2009:0350","RHSA-2009:0337","RHSA-2009:0338"],"bugzilla":"459529","bugzilla_description":"CVE-2008-3658 php: buffer overflow in the imageloadfont function in gd extension","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-51.ent","php-0:5.1.6-23.2.el5_3","php-0:4.3.9-3.22.15","php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3658.json"},{"CVE":"CVE-2008-3660","severity":"low","public_date":"2008-08-06T00:00:00Z","advisories":["RHSA-2009:0350","RHSA-2009:0337","RHSA-2009:0338"],"bugzilla":"459572","bugzilla_description":"CVE-2008-3660 php: FastCGI module DoS via multiple dots preceding the extension","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-51.ent","php-0:5.1.6-23.2.el5_3","php-0:4.3.9-3.22.15","php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3660.json"},{"CVE":"CVE-2008-5557","severity":"moderate","public_date":"2008-08-05T00:00:00Z","advisories":["RHSA-2009:0350","RHSA-2009:0337","RHSA-2009:0338"],"bugzilla":"478848","bugzilla_description":"CVE-2008-5557 php: Heap-based buffer overflow in the mbstring extension via crafted string containing a HTML entity (arb code execution)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["php-0:4.3.2-51.ent","php-0:5.1.6-23.2.el5_3","php-0:4.3.9-3.22.15","php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5557.json"},{"CVE":"CVE-2008-2107","severity":"low","public_date":"2008-05-06T00:00:00Z","advisories":["RHSA-2008:0544","RHSA-2008:0582","RHSA-2008:0505","RHSA-2008:0546","RHSA-2008:0545"],"bugzilla":"445684","bugzilla_description":"CVE-2008-2107 PHP 32 bit weak random seed","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.12","php-0:4.3.2-48.ent","php-0:5.1.6-3.el4s1.10","php-0:4.1.2-2.20","php-0:5.1.6-20.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2107.json"},{"CVE":"CVE-2008-2108","severity":"low","public_date":"2008-05-06T00:00:00Z","advisories":["RHSA-2008:0544","RHSA-2008:0582","RHSA-2008:0505","RHSA-2008:0546","RHSA-2008:0545"],"bugzilla":"445685","bugzilla_description":"CVE-2008-2108 PHP weak 64 bit random seed","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.12","php-0:4.3.2-48.ent","php-0:5.1.6-3.el4s1.10","php-0:4.1.2-2.20","php-0:5.1.6-20.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2108.json"},{"CVE":"CVE-2008-2051","severity":"moderate","public_date":"2008-05-01T00:00:00Z","advisories":["RHSA-2008:0544","RHSA-2008:0582","RHSA-2008:0505","RHSA-2008:0546","RHSA-2008:0545"],"bugzilla":"445006","bugzilla_description":"CVE-2008-2051 PHP multibyte shell escape flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.12","php-0:4.3.2-48.ent","php-0:5.1.6-3.el4s1.10","php-0:4.1.2-2.20","php-0:5.1.6-20.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2051.json"},{"CVE":"CVE-2007-5898","severity":"moderate","public_date":"2007-11-08T00:00:00Z","advisories":["RHSA-2008:0544","RHSA-2008:0582","RHSA-2008:0505","RHSA-2008:0546","RHSA-2008:0545"],"bugzilla":"382411","bugzilla_description":"CVE-2007-5898 php htmlentities/htmlspecialchars multibyte sequences","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.12","php-0:4.3.2-48.ent","php-0:5.1.6-3.el4s1.10","php-0:4.1.2-2.20","php-0:5.1.6-20.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5898.json"},{"CVE":"CVE-2007-5899","severity":"low","public_date":"2007-11-08T00:00:00Z","advisories":["RHSA-2008:0544","RHSA-2008:0582","RHSA-2008:0505","RHSA-2008:0546","RHSA-2008:0545"],"bugzilla":"382431","bugzilla_description":"CVE-2007-5899 php session ID leakage","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.12","php-0:4.3.2-48.ent","php-0:5.1.6-3.el4s1.10","php-0:4.1.2-2.20","php-0:5.1.6-20.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5899.json"},{"CVE":"CVE-2006-7228","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1077","RHSA-2007:1065","RHSA-2007:1076","RHSA-2007:1059","RHSA-2007:1068","RHSA-2007:1063","RHSA-2008:0546"],"bugzilla":"383371","bugzilla_description":"CVE-2006-7228 pcre integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["pcre-0:3.4-2.4","pcre-0:3.9-10.4","python-0:2.3.4-14.4.el4_6.1","pcre-0:6.6-2.el5_1.7","python-0:1.5.2-43.72.2","pcre-0:4.5-4.el4_6.6","php-0:4.1.2-2.20","python-0:2.2.3-6.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7228.json"},{"CVE":"CVE-2007-1660","severity":"important","public_date":"2007-11-05T00:00:00Z","advisories":["RHSA-2007:1065","RHSA-2007:1063","RHSA-2007:0968","RHSA-2008:0546","RHSA-2007:0967"],"bugzilla":"315881","bugzilla_description":"CVE-2007-1660 pcre regular expression flaws","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pcre-0:6.6-2.el5_0.1","pcre-0:3.4-2.4","pcre-0:3.9-10.4","php-0:4.1.2-2.20","pcre-0:4.5-4.el4_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1660.json"},{"CVE":"CVE-2007-4782","severity":"low","public_date":"2007-09-04T00:00:00Z","advisories":["RHSA-2008:0544","RHSA-2008:0582","RHSA-2008:0505","RHSA-2008:0545"],"bugzilla":"285881","bugzilla_description":"CVE-2007-4782 php crash in glob() and fnmatch() functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.12","php-0:4.3.2-48.ent","php-0:5.1.6-3.el4s1.10","php-0:5.1.6-20.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4782.json"},{"CVE":"CVE-2007-3998","severity":"low","public_date":"2007-08-30T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2007:0917","RHSA-2007:0889"],"bugzilla":"276081","bugzilla_description":"CVE-2007-3998 php floating point exception inside wordwrap","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-15.el5","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:5.2.3-3.el5s2","php-0:4.3.9-3.22.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3998.json"},{"CVE":"CVE-2007-4659","severity":"low","public_date":"2007-08-30T00:00:00Z","advisories":["RHSA-2007:0917"],"bugzilla":"276531","bugzilla_description":"CVE-2007-4659 php zend_alter_ini_entry() memory_limit interruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.2.3-3.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4659.json"},{"CVE":"CVE-2007-4658","severity":"low","public_date":"2007-08-30T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2007:0917","RHSA-2007:0889"],"bugzilla":"278011","bugzilla_description":"CVE-2007-4658 php money_format format string issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-15.el5","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:5.2.3-3.el5s2","php-0:4.3.9-3.22.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4658.json"},{"CVE":"CVE-2007-3996","severity":"moderate","public_date":"2007-08-30T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2007:0917","RHSA-2007:0888","RHSA-2007:0889"],"bugzilla":"278031","bugzilla_description":"CVE-2007-3996 php multiple integer overflows in gd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["php-0:5.1.6-15.el5","php-0:4.1.2-2.19","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:5.2.3-3.el5s2","php-0:4.3.9-3.22.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3996.json"},{"CVE":"CVE-2007-4670","severity":"low","public_date":"2007-08-30T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2007:0917","RHSA-2007:0888","RHSA-2007:0889"],"bugzilla":"278041","bugzilla_description":"CVE-2007-4670 php malformed cookie handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-15.el5","php-0:4.1.2-2.19","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:5.2.3-3.el5s2","php-0:4.3.9-3.22.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4670.json"},{"CVE":"CVE-2007-4661","severity":"moderate","public_date":"2007-08-30T00:00:00Z","advisories":["RHSA-2007:0917"],"bugzilla":"278161","bugzilla_description":"CVE-2007-4661 php size calculation in chunk_split","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.2.3-3.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4661.json"},{"CVE":"CVE-2007-2872","severity":"moderate","public_date":"2007-06-01T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2007:0888","RHSA-2007:0889"],"bugzilla":"242032","bugzilla_description":"CVE-2007-2872 php chunk_split integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["php-0:5.1.6-15.el5","php-0:4.1.2-2.19","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:4.3.9-3.22.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2872.json"},{"CVE":"CVE-2007-3799","severity":"low","public_date":"2007-06-01T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2007:0917","RHSA-2007:0888","RHSA-2007:0889"],"bugzilla":"250726","bugzilla_description":"CVE-2007-3799 php cross-site cookie insertion","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-15.el5","php-0:4.1.2-2.19","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:5.2.3-3.el5s2","php-0:4.3.9-3.22.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3799.json"},{"CVE":"CVE-2007-2756","severity":"low","public_date":"2007-05-16T00:00:00Z","advisories":["RHSA-2007:0891","RHSA-2007:0890","RHSA-2008:0146","RHSA-2007:0889"],"bugzilla":"242033","bugzilla_description":"CVE-2007-2756 gd / php-gd ImageCreateFromPng infinite loop caused by truncated PNG","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["php-0:5.1.6-15.el5","php-0:5.1.6-3.el4s1.8","php-0:4.3.2-43.ent","php-0:4.3.9-3.22.9","gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2756.json"},{"CVE":"CVE-2007-1864","severity":"important","public_date":"2007-05-03T00:00:00Z","advisories":["RHSA-2007:0355","RHSA-2007:0348","RHSA-2007:0349"],"bugzilla":"239009","bugzilla_description":"CVE-2007-1864 php libxmlrpc library overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.5","php-0:5.1.6-3.el4s1.7","php-0:5.1.6-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1864.json"},{"CVE":"CVE-2007-2510","severity":"moderate","public_date":"2007-05-03T00:00:00Z","advisories":["RHSA-2007:0355","RHSA-2007:0348"],"bugzilla":"239012","bugzilla_description":"CVE-2007-2510 php make_http_soap_request flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.7","php-0:5.1.6-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2510.json"},{"CVE":"CVE-2007-2509","severity":"low","public_date":"2007-05-03T00:00:00Z","advisories":["RHSA-2007:0355","RHSA-2007:0888","RHSA-2007:0348","RHSA-2007:0349","RHSA-2007:0889"],"bugzilla":"239014","bugzilla_description":"CVE-2007-2509 php CRLF injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.1.2-2.19","php-0:4.3.9-3.22.5","php-0:5.1.6-3.el4s1.7","php-0:4.3.2-43.ent","php-0:5.1.6-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2509.json"},{"CVE":"CVE-2007-1718","severity":"low","public_date":"2007-03-26T00:00:00Z","advisories":["RHSA-2007:0153","RHSA-2007:0162","RHSA-2007:0155"],"bugzilla":"1618306","bugzilla_description":"CVE-2007-1718 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:5.1.6-3.el4s1.6","php-0:4.3.2-40.ent","php-0:5.1.6-11.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1718.json"},{"CVE":"CVE-2007-1711","severity":"important","public_date":"2007-03-25T00:00:00Z","advisories":["RHSA-2007:0154","RHSA-2007:0163","RHSA-2007:0155"],"bugzilla":"1618304","bugzilla_description":"CVE-2007-1711 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:4.1.2-2.17","php-0:4.3.2-40.ent","stronghold-php-0:4.1.2-15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1711.json"},{"CVE":"CVE-2007-1583","severity":"low","public_date":"2007-03-20T00:00:00Z","advisories":["RHSA-2007:0153","RHSA-2007:0162","RHSA-2007:0155"],"bugzilla":"1618303","bugzilla_description":"CVE-2007-1583 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:5.1.6-3.el4s1.6","php-0:4.3.2-40.ent","php-0:5.1.6-11.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1583.json"},{"CVE":"CVE-2007-1001","severity":"moderate","public_date":"2007-03-10T00:00:00Z","advisories":["RHSA-2007:0153","RHSA-2007:0162","RHSA-2007:0155"],"bugzilla":"1618291","bugzilla_description":"CVE-2007-1001 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:5.1.6-3.el4s1.6","php-0:4.3.2-40.ent","php-0:5.1.6-11.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1001.json"},{"CVE":"CVE-2007-1286","severity":"important","public_date":"2007-03-02T00:00:00Z","advisories":["RHSA-2007:0154","RHSA-2007:0163","RHSA-2007:0155"],"bugzilla":"1618297","bugzilla_description":"CVE-2007-1286 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:4.1.2-2.17","php-0:4.3.2-40.ent","stronghold-php-0:4.1.2-15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1286.json"},{"CVE":"CVE-2007-1285","severity":"moderate","public_date":"2007-03-01T00:00:00Z","advisories":["RHSA-2007:0154","RHSA-2007:0162","RHSA-2007:0163","RHSA-2007:0155","RHSA-2007:0082"],"bugzilla":"1618296","bugzilla_description":"CVE-2007-1285 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:5.1.6-3.el4s1.6","php-0:4.1.2-2.17","php-0:4.3.2-40.ent","stronghold-php-0:4.1.2-15","php-0:5.1.6-7.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1285.json"},{"CVE":"CVE-2007-0906","severity":"important","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"1618280","bugzilla_description":"CVE-2007-0906 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0906.json"},{"CVE":"CVE-2007-0907","severity":"low","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"1618281","bugzilla_description":"CVE-2007-0907 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0907.json"},{"CVE":"CVE-2007-0908","severity":"moderate","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"1618282","bugzilla_description":"CVE-2007-0908 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0908.json"},{"CVE":"CVE-2007-0909","severity":"low","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"1618283","bugzilla_description":"CVE-2007-0909 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0909.json"},{"CVE":"CVE-2007-0910","severity":"important","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"1618284","bugzilla_description":"CVE-2007-0910 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0910.json"},{"CVE":"CVE-2007-0988","severity":"moderate","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"1618285","bugzilla_description":"CVE-2007-0988 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0988.json"},{"CVE":"CVE-2007-1380","severity":"important","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"240157","bugzilla_description":"CVE-2007-1380 php session extension information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1380.json"},{"CVE":"CVE-2007-1825","severity":"important","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"240426","bugzilla_description":"CVE-2007-1825 php imap_mail_compose() buffer overflow via type.parameters","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1825.json"},{"CVE":"CVE-2007-1701","severity":"important","public_date":"2007-02-14T00:00:00Z","advisories":["RHSA-2007:0076","RHSA-2007:0088","RHSA-2007:0089","RHSA-2007:0081","RHSA-2007:0082"],"bugzilla":"240431","bugzilla_description":"CVE-2007-1701 php session extension global variable clobber","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.6-3.el4s1.5","stronghold-php-0:4.1.2-12","php-0:4.1.2-2.14","php-0:5.1.6-7.el5","php-0:4.3.2-39.ent","php-0:4.3.9-3.22.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1701.json"},{"CVE":"CVE-2007-0455","severity":"low","public_date":"2007-01-26T00:00:00Z","advisories":["RHSA-2007:0153","RHSA-2008:0146","RHSA-2007:0162","RHSA-2007:0155"],"bugzilla":"224607","bugzilla_description":"CVE-2007-0455 gd: buffer overrun","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.22.4","php-0:5.1.6-3.el4s1.6","php-0:4.3.2-40.ent","gd-0:2.0.33-9.4.el5_1.1","php-0:5.1.6-11.el5","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0455.json"},{"CVE":"CVE-2006-7243","severity":"moderate","public_date":"2006-12-18T00:00:00Z","advisories":["RHSA-2014:0311","RHSA-2013:1307","RHSA-2013:1615"],"bugzilla":"662707","bugzilla_description":"CVE-2006-7243 php: paths with NULL character were considered valid","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-626","affected_packages":["php-0:5.3.3-26.el6","php-0:5.1.6-44.el5_10","php53-0:5.3.3-21.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7243.json"},{"CVE":"CVE-2006-5465","severity":"important","public_date":"2006-11-02T00:00:00Z","advisories":["RHSA-2006:0736","RHSA-2006:0730","RHSA-2006:0731"],"bugzilla":"213732","bugzilla_description":"CVE-2006-5465 PHP buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.4-1.el4s1.5","php-0:4.1.2-2.13","php-0:4.3.9-3.22","php-0:4.3.2-37.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5465.json"},{"CVE":"CVE-2006-4812","severity":"important","public_date":"2006-09-30T00:00:00Z","advisories":["RHSA-2006:0688","RHSA-2006:0708"],"bugzilla":"1618205","bugzilla_description":"CVE-2006-4812 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.4-1.el4s1.4","php-0:4.1.2-2.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4812.json"},{"CVE":"CVE-2006-4486","severity":"moderate","public_date":"2006-08-18T00:00:00Z","advisories":["RHSA-2006:0669","RHSA-2006:0688","RHSA-2006:0682"],"bugzilla":"1618188","bugzilla_description":"CVE-2006-4486 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.18","php-0:5.1.4-1.el4s1.4","php-0:4.3.2-36.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4486.json"},{"CVE":"CVE-2006-4482","severity":"moderate","public_date":"2006-08-17T00:00:00Z","advisories":["RHSA-2006:0669","RHSA-2006:0688","RHSA-2006:0682"],"bugzilla":"1618186","bugzilla_description":"CVE-2006-4482 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.18","php-0:5.1.4-1.el4s1.4","php-0:4.3.2-36.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4482.json"},{"CVE":"CVE-2006-4485","severity":"low","public_date":"2006-08-17T00:00:00Z","advisories":["RHSA-2006:0688"],"bugzilla":"1618187","bugzilla_description":"CVE-2006-4485 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:5.1.4-1.el4s1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4485.json"},{"CVE":"CVE-2006-4020","severity":"low","public_date":"2006-08-04T00:00:00Z","advisories":["RHSA-2006:0736","RHSA-2006:0669","RHSA-2006:0688","RHSA-2006:0682"],"bugzilla":"1618174","bugzilla_description":"CVE-2006-4020 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.18","php-0:5.1.4-1.el4s1.4","php-0:4.3.2-36.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4020.json"},{"CVE":"CVE-2006-4023","severity":"low","public_date":"2006-07-29T00:00:00Z","advisories":[],"bugzilla":"920517","bugzilla_description":"CVE-2006-4023 php: Improper validation of strings in ip2long function (remote attackers able to obtain network information and facilitate other attacks)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4023.json"},{"CVE":"CVE-2006-4484","severity":"moderate","public_date":"2006-07-16T00:00:00Z","advisories":["RHSA-2008:0146","RHSA-2006:0669","RHSA-2006:0688"],"bugzilla":"431568","bugzilla_description":"CVE-2006-4484 gd: GIF handling buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.18","php-0:5.1.4-1.el4s1.4","php-0:4.3.2-36.ent","gd-0:2.0.33-9.4.el5_1.1","gd-0:2.0.28-5.4E.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4484.json"},{"CVE":"CVE-2006-3017","severity":"moderate","public_date":"2006-06-14T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2006:0567","RHSA-2006:0568"],"bugzilla":"1618131","bugzilla_description":"CVE-2006-3017 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-33.ent","php-0:4.3.9-3.15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3017.json"},{"CVE":"CVE-2006-3016","severity":"moderate","public_date":"2006-05-02T00:00:00Z","advisories":["RHSA-2006:0736","RHSA-2006:0669","RHSA-2006:0682"],"bugzilla":"1618130","bugzilla_description":"CVE-2006-3016 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.9-3.18","php-0:4.3.2-36.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3016.json"},{"CVE":"CVE-2006-1990","severity":"low","public_date":"2006-04-24T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2006:0501","RHSA-2006:0568"],"bugzilla":"1618082","bugzilla_description":"CVE-2006-1990 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-33.ent","php-0:4.3.9-3.15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1990.json"},{"CVE":"CVE-2006-1494","severity":"low","public_date":"2006-04-08T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2006:0567","RHSA-2006:0568"],"bugzilla":"1618037","bugzilla_description":"CVE-2006-1494 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-33.ent","php-0:4.3.9-3.15"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1494.json"},{"CVE":"CVE-2006-0996","severity":"low","public_date":"2006-03-30T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2006:0501","RHSA-2006:0276"],"bugzilla":"1618022","bugzilla_description":"CVE-2006-0996 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-30.ent","php-0:4.3.9-3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0996.json"},{"CVE":"CVE-2006-1490","severity":"moderate","public_date":"2006-03-28T00:00:00Z","advisories":["RHSA-2006:0276"],"bugzilla":"1618036","bugzilla_description":"CVE-2006-1490 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-30.ent","php-0:4.3.9-3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1490.json"},{"CVE":"CVE-2006-0208","severity":"low","public_date":"2006-01-12T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2006:0501","RHSA-2006:0276"],"bugzilla":"1617878","bugzilla_description":"CVE-2006-0208 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-30.ent","php-0:4.3.9-3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0208.json"},{"CVE":"CVE-2005-3883","severity":"moderate","public_date":"2005-11-24T00:00:00Z","advisories":["RHSA-2006:0276"],"bugzilla":"1617845","bugzilla_description":"CVE-2005-3883 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-30.ent","php-0:4.3.9-3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3883.json"},{"CVE":"CVE-2005-3388","severity":"low","public_date":"2005-10-31T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2005:831","RHSA-2005:882","RHSA-2005:838"],"bugzilla":"1617821","bugzilla_description":"CVE-2005-3388 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-26.ent","php-0:4.3.9-3.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3388.json"},{"CVE":"CVE-2005-3389","severity":"low","public_date":"2005-10-31T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2005:831","RHSA-2005:882","RHSA-2005:838"],"bugzilla":"1617822","bugzilla_description":"CVE-2005-3389 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-26.ent","php-0:4.3.9-3.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3389.json"},{"CVE":"CVE-2005-3390","severity":"moderate","public_date":"2005-10-31T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2005:831","RHSA-2005:882","RHSA-2005:838"],"bugzilla":"1617823","bugzilla_description":"CVE-2005-3390 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-26.ent","php-0:4.3.9-3.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3390.json"},{"CVE":"CVE-2005-2933","severity":"moderate","public_date":"2005-10-04T00:00:00Z","advisories":["RHSA-2006:0549","RHSA-2005:850","RHSA-2006:0501","RHSA-2006:0276","RHSA-2005:848"],"bugzilla":"1617767","bugzilla_description":"CVE-2005-2933 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-30.ent","imap-1:2002d-12","libc-client-0:2002e-14","php-0:4.3.9-3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2933.json"},{"CVE":"CVE-2005-3353","severity":"moderate","public_date":"2005-10-02T00:00:00Z","advisories":["RHSA-2005:831"],"bugzilla":"1617816","bugzilla_description":"CVE-2005-3353 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-26.ent","php-0:4.3.9-3.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3353.json"},{"CVE":"CVE-2005-2498","severity":"important","public_date":"2005-08-14T00:00:00Z","advisories":["RHSA-2005:748"],"bugzilla":"1617729","bugzilla_description":"CVE-2005-2498 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-25.ent","php-0:4.3.9-3.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2498.json"},{"CVE":"CVE-2005-1921","severity":"important","public_date":"2005-06-29T00:00:00Z","advisories":["RHSA-2005:564"],"bugzilla":"1617676","bugzilla_description":"CVE-2005-1921 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-24.ent","php-0:4.3.9-3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1921.json"},{"CVE":"CVE-2005-1751","severity":"low","public_date":"2005-05-24T00:00:00Z","advisories":["RHSA-2005:564"],"bugzilla":"158995","bugzilla_description":"CVE-2005-1751 shtool: insecure temporary file creation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["php-0:4.3.2-24.ent","php-0:4.3.9-3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1751.json"},{"CVE":"CVE-2005-0524","severity":"moderate","public_date":"2005-03-31T00:00:00Z","advisories":["RHSA-2005:405","RHSA-2005:406"],"bugzilla":"1617533","bugzilla_description":"CVE-2005-0524 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-23.ent","php-0:4.3.9-3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0524.json"},{"CVE":"CVE-2005-0525","severity":"moderate","public_date":"2005-03-31T00:00:00Z","advisories":["RHSA-2005:405","RHSA-2005:406"],"bugzilla":"1617534","bugzilla_description":"CVE-2005-0525 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-23.ent","php-0:4.3.9-3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0525.json"},{"CVE":"CVE-2005-1042","severity":"moderate","public_date":"2005-03-31T00:00:00Z","advisories":["RHSA-2005:405","RHSA-2005:406"],"bugzilla":"1617600","bugzilla_description":"CVE-2005-1042 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-23.ent","php-0:4.3.9-3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1042.json"},{"CVE":"CVE-2005-1043","severity":"moderate","public_date":"2005-03-31T00:00:00Z","advisories":["RHSA-2005:405","RHSA-2005:406"],"bugzilla":"1617601","bugzilla_description":"CVE-2005-1043 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-23.ent","php-0:4.3.9-3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1043.json"},{"CVE":"CVE-2004-1018","severity":"low","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:882","RHSA-2005:032","RHSA-2005:816","RHSA-2005:031","RHSA-2004:687"],"bugzilla":"1617352","bugzilla_description":"CVE-2004-1018 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-19.ent","php-0:4.3.9-3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1018.json"},{"CVE":"CVE-2004-1019","severity":"important","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:882","RHSA-2005:032","RHSA-2005:816","RHSA-2005:031","RHSA-2004:687"],"bugzilla":"1617353","bugzilla_description":"CVE-2004-1019 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-19.ent","php-0:4.3.9-3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1019.json"},{"CVE":"CVE-2004-1065","severity":"important","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:032","RHSA-2004:687"],"bugzilla":"1617361","bugzilla_description":"CVE-2004-1065 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-19.ent","php-0:4.3.9-3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1065.json"},{"CVE":"CVE-2004-1392","severity":"low","public_date":"2004-12-15T00:00:00Z","advisories":["RHSA-2005:405","RHSA-2005:406"],"bugzilla":"1617411","bugzilla_description":"CVE-2004-1392 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-23.ent","php-0:4.3.9-3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1392.json"},{"CVE":"CVE-2004-0958","severity":null,"public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:687"],"bugzilla":"1617331","bugzilla_description":"CVE-2004-0958 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-19.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0958.json"},{"CVE":"CVE-2004-0959","severity":null,"public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:687"],"bugzilla":"1617332","bugzilla_description":"CVE-2004-0959 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-19.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0959.json"},{"CVE":"CVE-2004-0595","severity":"moderate","public_date":"2004-07-14T00:00:00Z","advisories":["RHSA-2004:405","RHSA-2004:392","RHSA-2004:395","RHSA-2005:816"],"bugzilla":"1617234","bugzilla_description":"CVE-2004-0595 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-11.1.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0595.json"},{"CVE":"CVE-2004-0594","severity":"important","public_date":"2004-07-13T00:00:00Z","advisories":["RHSA-2004:405","RHSA-2004:392","RHSA-2004:395","RHSA-2005:816"],"bugzilla":"1617233","bugzilla_description":"CVE-2004-0594 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-11.1.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0594.json"},{"CVE":"CVE-2009-0754","severity":"moderate","public_date":"2004-02-27T00:00:00Z","advisories":["RHSA-2009:0350","RHSA-2009:0337","RHSA-2009:0338"],"bugzilla":"479272","bugzilla_description":"CVE-2009-0754 PHP mbstring.func_overload web server denial of service","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["php-0:4.3.2-51.ent","php-0:5.1.6-23.2.el5_3","php-0:4.3.9-3.22.15","php-0:5.2.6-4.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0754.json"},{"CVE":"CVE-2003-1303","severity":"important","public_date":"2003-06-12T00:00:00Z","advisories":["RHSA-2006:0501","RHSA-2006:0276"],"bugzilla":"1617127","bugzilla_description":"CVE-2003-1303 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["php-0:4.3.2-30.ent","php-0:4.3.9-3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-1303.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pidgin-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pidgin-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pidgin-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pidgin-sipe_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pidgin-sipe_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pidgin-sipe_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pidgin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pidgin_security_api_results.json
new file mode 100644
index 0000000..63c2876
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pidgin_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-2640","severity":"moderate","public_date":"2017-03-10T00:00:00Z","advisories":["RHSA-2017:1854"],"bugzilla":"1430019","bugzilla_description":"CVE-2017-2640 pidgin: Out-of-bounds write in purple_markup_unescape_entity triggered by invalid XML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["pidgin-0:2.10.11-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2640.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-2376","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348848","bugzilla_description":"CVE-2016-2376 pidgin: MXIT read stage 0x3 Code Execution Vulnerability","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2377","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348852","bugzilla_description":"CVE-2016-2377 pidgin: MXIT HTTP Content-Length Buffer Overflow Vulnerability","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2377.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2378","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348854","bugzilla_description":"CVE-2016-2378 pidgin: MXIT get_utf8_string Code Execution Vulnerability","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2378.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-2380","severity":"low","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348856","bugzilla_description":"CVE-2016-2380 pidgin: MXIT mxit_convert_markup_tx Information Leak Vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2380.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-4323","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348857","bugzilla_description":"CVE-2016-4323 pidgin: MXIT Splash Image Arbitrary File Overwrite Vulnerability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-2365","severity":"low","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348858","bugzilla_description":"CVE-2016-2365 pidgin: MXIT Markup Command Denial of Service Vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-2366","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348862","bugzilla_description":"CVE-2016-2366 pidgin: MXIT Table Command Denial of Service Vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2366.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-2367","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348865","bugzilla_description":"CVE-2016-2367 pidgin: MXIT Avatar Length Memory Disclosure Vulnerability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-2368","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348867","bugzilla_description":"CVE-2016-2368 pidgin: MXIT g_snprintf Multiple Buffer Overflow Vulnerabilities","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2368.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-2369","severity":"low","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348869","bugzilla_description":"CVE-2016-2369 pidgin: MXIT CP_SOCK_REC_TERM Denial of Service Vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2369.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-2370","severity":"low","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348871","bugzilla_description":"CVE-2016-2370 pidgin: MXIT Custom Resource Denial of Service Vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2370.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-2371","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348873","bugzilla_description":"CVE-2016-2371 pidgin: MXIT Extended Profiles Code Execution Vulnerability","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2371.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2372","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348876","bugzilla_description":"CVE-2016-2372 pidgin: MXIT File Transfer Length Memory Disclosure Vulnerability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2372.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2016-2373","severity":"low","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348877","bugzilla_description":"CVE-2016-2373 pidgin: MXIT Contact Mood Denial of Service Vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2373.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-2374","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348878","bugzilla_description":"CVE-2016-2374 pidgin: MXIT MultiMX Message Code Execution Vulnerability","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2374.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2375","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348880","bugzilla_description":"CVE-2016-2375 pidgin: MXIT Suggested Contacts Memory Disclosure Vulnerability","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2375.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2016-1000030","severity":"low","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1348882","bugzilla_description":"CVE-2016-1000030 pidgin: X.509 Certificates Improperly Imported","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000030.json"},{"CVE":"CVE-2016-2379","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":[],"bugzilla":"1363715","bugzilla_description":"CVE-2016-2379 pidgin: Eavesdropping hashed password when logging","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2379.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"6.8"},{"CVE":"CVE-2014-3694","severity":"low","public_date":"2014-10-22T00:00:00Z","advisories":["RHSA-2017:1854"],"bugzilla":"1154908","bugzilla_description":"CVE-2014-3694 pidgin: SSL/TLS plug-ins failed to check Basic Constraints","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":["pidgin-0:2.10.11-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3694.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2014-3695","severity":"moderate","public_date":"2014-10-22T00:00:00Z","advisories":["RHSA-2017:1854"],"bugzilla":"1154909","bugzilla_description":"CVE-2014-3695 pidgin: crash in Mxit protocol plug-in","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.10.11-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3695.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2014-3696","severity":"moderate","public_date":"2014-10-22T00:00:00Z","advisories":["RHSA-2017:1854"],"bugzilla":"1154910","bugzilla_description":"CVE-2014-3696 pidgin: denial of service parsing Groupwise server message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["pidgin-0:2.10.11-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3696.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2014-3698","severity":"moderate","public_date":"2014-10-22T00:00:00Z","advisories":["RHSA-2017:1854"],"bugzilla":"1154911","bugzilla_description":"CVE-2014-3698 pidgin: remote information leak via crafted XMPP message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":["pidgin-0:2.10.11-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2014-3775","severity":"moderate","public_date":"2014-05-07T00:00:00Z","advisories":[],"bugzilla":"1099776","bugzilla_description":"CVE-2014-3775 libgadu: server response memory corruption issue","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3775.json"},{"CVE":"CVE-2012-6152","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1056473","bugzilla_description":"CVE-2012-6152 pidgin: DoS when decoding non-UTF-8 strings in Yahoo protocol plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-172","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6152.json"},{"CVE":"CVE-2013-6477","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1056479","bugzilla_description":"CVE-2013-6477 pidgin: DoS when handling timestamps in the XMPP plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6477.json"},{"CVE":"CVE-2013-6478","severity":"low","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1056904","bugzilla_description":"CVE-2013-6478 pidgin: DoS when rendering long URLs","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770->CWE-400","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6478.json"},{"CVE":"CVE-2013-6479","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1056907","bugzilla_description":"CVE-2013-6479 pidgin: DoS when parsing certain HTTP response headers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6479.json"},{"CVE":"CVE-2013-6481","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1056908","bugzilla_description":"CVE-2013-6481 pidgin: DoS caused due to OOB read in Yahoo protocol plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-130->CWE-125","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6481.json"},{"CVE":"CVE-2013-6482","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1056913","bugzilla_description":"CVE-2013-6482 pidgin: DoS via multiple null pointer dereferences in MSN protocol plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6482.json"},{"CVE":"CVE-2013-6483","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1056978","bugzilla_description":"CVE-2013-6483 pidgin: Possible spoofing using iq replies in XMPP protocol plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-290","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6483.json"},{"CVE":"CVE-2013-6484","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1057481","bugzilla_description":"CVE-2013-6484 pidgin: DoS via specially-crafted stun messages","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6484.json"},{"CVE":"CVE-2013-6485","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1057484","bugzilla_description":"CVE-2013-6485 pidgin: Heap-based buffer overflow when parsing chunked HTTP responses","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6485.json"},{"CVE":"CVE-2013-6487","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1057489","bugzilla_description":"CVE-2013-6487 pidgin: Heap-based buffer overflow in Gadu-Gadu protocol plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6487.json"},{"CVE":"CVE-2013-6489","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1057490","bugzilla_description":"CVE-2013-6489 pidgin: Heap-based buffer overflow in MXit emoticon parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-122","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6489.json"},{"CVE":"CVE-2013-6490","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1057498","bugzilla_description":"CVE-2013-6490 pidgin: Heap-based buffer overflow in SIMPLE protocol plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-122","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6490.json"},{"CVE":"CVE-2014-0020","severity":"moderate","public_date":"2014-01-28T00:00:00Z","advisories":["RHSA-2014:0139"],"bugzilla":"1057502","bugzilla_description":"CVE-2014-0020 pidgin: DoS in IRC protocol plugin due to arguement parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-628","affected_packages":["pidgin-0:2.7.9-27.el6","pidgin-0:2.6.6-32.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0020.json"},{"CVE":"CVE-2013-0271","severity":"moderate","public_date":"2013-02-13T00:00:00Z","advisories":[],"bugzilla":"910039","bugzilla_description":"CVE-2013-0271 pidgin: MXit protocol insufficient sanitization of saved image file names","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0271.json"},{"CVE":"CVE-2013-0272","severity":"moderate","public_date":"2013-02-13T00:00:00Z","advisories":["RHSA-2013:0646"],"bugzilla":"910040","bugzilla_description":"CVE-2013-0272 pidgin: MXit protocol stack-based buffer overflow when processing HTTP headers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":["pidgin-0:2.7.9-10.el6_4.1","pidgin-0:2.6.6-17.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0272.json"},{"CVE":"CVE-2013-0273","severity":"moderate","public_date":"2013-02-13T00:00:00Z","advisories":["RHSA-2013:0646"],"bugzilla":"910041","bugzilla_description":"CVE-2013-0273 pidgin: Meanwhile protocol missing nul termination of long Lotus Sametime usernames","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.7.9-10.el6_4.1","pidgin-0:2.6.6-17.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0273.json"},{"CVE":"CVE-2013-0274","severity":"moderate","public_date":"2013-02-13T00:00:00Z","advisories":["RHSA-2013:0646"],"bugzilla":"910042","bugzilla_description":"CVE-2013-0274 pidgin: missing nul termination of long values in UPnP responses","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.7.9-10.el6_4.1","pidgin-0:2.6.6-17.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0274.json"},{"CVE":"CVE-2012-3374","severity":"moderate","public_date":"2012-07-05T00:00:00Z","advisories":["RHSA-2012:1102"],"bugzilla":"837319","bugzilla_description":"CVE-2012-3374 pidgin: Stack-based buffer overwrite in MXit protocol libPurple plug-in","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-11.el5.4","pidgin-0:2.7.9-5.el6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3374.json"},{"CVE":"CVE-2012-2318","severity":"moderate","public_date":"2012-05-06T00:00:00Z","advisories":["RHSA-2012:1102"],"bugzilla":"819446","bugzilla_description":"CVE-2012-2318 pidgin: Improper validation of incoming plaintext messages in MSN protocol plug-in","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-11.el5.4","pidgin-0:2.7.9-5.el6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2318.json"},{"CVE":"CVE-2012-2214","severity":"moderate","public_date":"2012-05-06T00:00:00Z","advisories":[],"bugzilla":"819449","bugzilla_description":"CVE-2012-2214 pidgin: Invalid memory dereference in the XMPP protocol plug-in by processing serie of specially-crafted file transfer requests","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2214.json"},{"CVE":"CVE-2012-1178","severity":"moderate","public_date":"2012-01-17T00:00:00Z","advisories":["RHSA-2012:1102"],"bugzilla":"803298","bugzilla_description":"CVE-2012-1178 pidgin: Client abort in the MSN protocol plug-in by attempt to display certain, not UTF-8 encoded text","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-11.el5.4","pidgin-0:2.7.9-5.el6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1178.json"},{"CVE":"CVE-2012-1257","severity":"low","public_date":"2011-12-20T00:00:00Z","advisories":[],"bugzilla":"798279","bugzilla_description":"CVE-2012-1257 pidgin: libpurple no way to restrict \"private\" messages from being sent over session dbus","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1257.json"},{"CVE":"CVE-2011-4603","severity":"moderate","public_date":"2011-12-11T00:00:00Z","advisories":["RHSA-2011:1820"],"bugzilla":"766446","bugzilla_description":"CVE-2011-4603 pidgin: SILC remote crash on channel messages","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-5.el5_7.4","pidgin-0:2.6.6-10.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4603.json"},{"CVE":"CVE-2011-4602","severity":"low","public_date":"2011-12-10T00:00:00Z","advisories":["RHSA-2011:1820","RHSA-2011:1821"],"bugzilla":"761510","bugzilla_description":"CVE-2011-4602 pidgin: Multiple NULL pointer deference flaws by processing certain Jingle stanzas in the XMPP protocol plug-in","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-5.el5_7.4","pidgin-0:2.6.6-10.el4","pidgin-0:2.7.9-3.el6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4602.json"},{"CVE":"CVE-2011-4601","severity":"moderate","public_date":"2011-12-10T00:00:00Z","advisories":["RHSA-2011:1820","RHSA-2011:1821"],"bugzilla":"761517","bugzilla_description":"CVE-2011-4601 pidgin (libpurple): Invalid UTF-8 string handling in OSCAR messages","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-5.el5_7.4","pidgin-0:2.6.6-10.el4","pidgin-0:2.7.9-3.el6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4601.json"},{"CVE":"CVE-2011-3594","severity":"moderate","public_date":"2011-09-29T00:00:00Z","advisories":["RHSA-2011:1371"],"bugzilla":"743481","bugzilla_description":"CVE-2011-3594 libpurple: invalid UTF-8 string handling in SILC messages","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-7.el4","pidgin-0:2.6.6-5.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3594.json"},{"CVE":"CVE-2011-3184","severity":null,"public_date":"2011-08-20T00:00:00Z","advisories":[],"bugzilla":"732405","bugzilla_description":"CVE-2011-3184 pidgin: Remote crash in MSN protocol plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3184.json"},{"CVE":"CVE-2011-2943","severity":"low","public_date":"2011-07-20T00:00:00Z","advisories":[],"bugzilla":"722939","bugzilla_description":"CVE-2011-2943 pidgin: Crash in IRC protocol plug-in by listing set of users (/who command) upon session startup","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2943.json"},{"CVE":"CVE-2011-4939","severity":"low","public_date":"2011-07-08T00:00:00Z","advisories":[],"bugzilla":"803296","bugzilla_description":"CVE-2011-4939 pidgin: NULL pointer dereference in the XMPP protocol plug-in by renaming user name","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4939.json"},{"CVE":"CVE-2011-2485","severity":"low","public_date":"2011-06-23T00:00:00Z","advisories":[],"bugzilla":"715337","bugzilla_description":"CVE-2011-2485 gdk-pixbuf: incorrect error detection in the GIF image loader","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2485.json"},{"CVE":"CVE-2011-1091","severity":"low","public_date":"2011-03-10T00:00:00Z","advisories":["RHSA-2011:0616","RHSA-2011:1371"],"bugzilla":"683031","bugzilla_description":"CVE-2011-1091 Pidgin: Multiple NULL pointer dereference flaws in Yahoo protocol plug-in","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["pidgin-0:2.7.9-3.el6","pidgin-0:2.6.6-7.el4","pidgin-0:2.6.6-5.el5_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1091.json"},{"CVE":"CVE-2011-4922","severity":"low","public_date":"2011-02-10T00:00:00Z","advisories":["RHSA-2011:0616"],"bugzilla":"684685","bugzilla_description":"CVE-2011-4922 Cipher API information disclosure in pidgin","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["pidgin-0:2.7.9-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4922.json"},{"CVE":"CVE-2010-4528","severity":"moderate","public_date":"2010-12-26T00:00:00Z","advisories":[],"bugzilla":"665421","bugzilla_description":"CVE-2010-4528 Pidgin: MSN DirectConnect DoS (crash) after receiving a short P2P message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4528.json"},{"CVE":"CVE-2010-3711","severity":"moderate","public_date":"2010-10-20T00:00:00Z","advisories":["RHSA-2010:0788","RHSA-2010:0890"],"bugzilla":"641921","bugzilla_description":"CVE-2010-3711 Pidgin (libpurple): Multiple DoS (crash) flaws by processing of unsanitized Base64 decoder values","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-6.el6_0","pidgin-0:2.6.6-5.el4_8","pidgin-0:2.6.6-5.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3711.json"},{"CVE":"CVE-2010-2528","severity":"low","public_date":"2010-07-21T00:00:00Z","advisories":[],"bugzilla":"617105","bugzilla_description":"CVE-2010-2528 pidgin: ICQ X-Status denial of service (NULL deref)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2528.json"},{"CVE":"CVE-2010-1624","severity":"low","public_date":"2010-05-12T00:00:00Z","advisories":["RHSA-2010:0788"],"bugzilla":"589973","bugzilla_description":"CVE-2010-1624 Pidgin: MSN SLP emoticon DoS (NULL pointer dereference)","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["pidgin-0:2.6.6-5.el4_8","pidgin-0:2.6.6-5.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1624.json"},{"CVE":"CVE-2010-0420","severity":"low","public_date":"2010-02-18T00:00:00Z","advisories":["RHSA-2010:0115"],"bugzilla":"565786","bugzilla_description":"CVE-2010-0420 pidgin: Finch XMPP MUC Crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-1.el5","pidgin-0:2.6.6-1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0420.json"},{"CVE":"CVE-2010-0423","severity":"low","public_date":"2010-02-18T00:00:00Z","advisories":["RHSA-2010:0115"],"bugzilla":"565792","bugzilla_description":"CVE-2010-0423 pidgin: Smiley Denial of Service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-1.el5","pidgin-0:2.6.6-1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0423.json"},{"CVE":"CVE-2010-0013","severity":"important","public_date":"2009-12-27T00:00:00Z","advisories":["RHSA-2010:0044"],"bugzilla":"552483","bugzilla_description":"CVE-2010-0013 pidgin/libpurple: MSN custom smiley request directory traversal file disclosure","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["pidgin-0:2.6.5-1.el4.1","pidgin-0:2.6.5-1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0013.json"},{"CVE":"CVE-2010-0277","severity":"moderate","public_date":"2009-12-27T00:00:00Z","advisories":["RHSA-2010:0115"],"bugzilla":"554335","bugzilla_description":"CVE-2010-0277 pidgin MSN protocol plugin memory corruption","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.6-1.el5","pidgin-0:2.6.6-1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0277.json"},{"CVE":"CVE-2009-3615","severity":"moderate","public_date":"2009-10-10T00:00:00Z","advisories":["RHSA-2009:1536","RHSA-2009:1535"],"bugzilla":"529357","bugzilla_description":"CVE-2009-3615 Pidgin: Invalid pointer dereference (crash) after receiving contacts from SIM IM client","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.6.3-2.el4","pidgin-0:2.6.3-2.el5","pidgin-0:1.5.1-6.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3615.json"},{"CVE":"CVE-2009-2703","severity":"low","public_date":"2009-09-03T00:00:00Z","advisories":["RHSA-2009:1535","RHSA-2009:1453"],"bugzilla":"521823","bugzilla_description":"CVE-2009-2703 Pidgin: NULL pointer dereference by handling IRC topic(s) (DoS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["pidgin-0:2.6.2-2.el4","pidgin-0:2.6.2-2.el5","pidgin-0:1.5.1-6.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2703.json"},{"CVE":"CVE-2009-3083","severity":"low","public_date":"2009-09-03T00:00:00Z","advisories":["RHSA-2009:1535","RHSA-2009:1453"],"bugzilla":"521832","bugzilla_description":"CVE-2009-3083 Pidgin: NULL pointer dereference by processing incomplete MSN SLP invite (DoS)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["pidgin-0:2.6.2-2.el4","pidgin-0:2.6.2-2.el5","pidgin-0:1.5.1-6.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3083.json"},{"CVE":"CVE-2009-3085","severity":"moderate","public_date":"2009-09-03T00:00:00Z","advisories":["RHSA-2009:1453"],"bugzilla":"521853","bugzilla_description":"CVE-2009-3085 Pidgin: NULL pointer dereference by processing a custom smiley (DoS)","cvss_score":2.8,"cvss_scoring_vector":"AV:N/AC:M/Au:M/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["pidgin-0:2.6.2-2.el4","pidgin-0:2.6.2-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3085.json"},{"CVE":"CVE-2009-2694","severity":"critical","public_date":"2009-08-18T00:00:00Z","advisories":["RHSA-2009:1218"],"bugzilla":"514957","bugzilla_description":"CVE-2009-2694 pidgin: insufficient input validation in msn_slplink_process_msg()","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-228->CWE-119","affected_packages":["pidgin-0:2.5.9-1.el5","pidgin-0:2.5.9-1.el4","pidgin-0:1.5.1-4.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2694.json"},{"CVE":"CVE-2009-1889","severity":"moderate","public_date":"2009-05-28T00:00:00Z","advisories":["RHSA-2009:1139"],"bugzilla":"508738","bugzilla_description":"CVE-2009-1889 pidgin: DoS via specially-crafted ICQWebMessage","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.5.8-1.el4","pidgin-0:2.5.8-1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1889.json"},{"CVE":"CVE-2009-1374","severity":"low","public_date":"2009-05-03T00:00:00Z","advisories":["RHSA-2009:1060"],"bugzilla":"500490","bugzilla_description":"CVE-2009-1374 pidgin DoS when decrypting qq packets","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.5.5-3.el5","pidgin-0:2.5.5-2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1374.json"},{"CVE":"CVE-2009-1373","severity":"moderate","public_date":"2009-05-02T00:00:00Z","advisories":["RHSA-2009:1060","RHSA-2009:1059"],"bugzilla":"500488","bugzilla_description":"CVE-2009-1373 pidgin file transfer buffer overflow","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["pidgin-0:2.5.5-3.el5","pidgin-0:2.5.5-2.el4","pidgin-0:1.5.1-3.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1373.json"},{"CVE":"CVE-2009-1376","severity":"important","public_date":"2009-05-02T00:00:00Z","advisories":["RHSA-2009:1060","RHSA-2009:1059"],"bugzilla":"500493","bugzilla_description":"CVE-2009-1376 pidgin incomplete fix for CVE-2008-2927","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["pidgin-0:2.5.5-3.el5","pidgin-0:2.5.5-2.el4","pidgin-0:1.5.1-3.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1376.json"},{"CVE":"CVE-2009-1375","severity":"low","public_date":"2009-03-20T00:00:00Z","advisories":["RHSA-2009:1060"],"bugzilla":"500491","bugzilla_description":"CVE-2009-1375 pidgin PurpleCircBuffer corruption","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.5.5-3.el5","pidgin-0:2.5.5-2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1375.json"},{"CVE":"CVE-2009-3026","severity":"low","public_date":"2009-01-15T00:00:00Z","advisories":["RHSA-2009:1453"],"bugzilla":"519224","bugzilla_description":"CVE-2009-3026 pidgin: ignores SSL/TLS requirements with old jabber servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["pidgin-0:2.6.2-2.el4","pidgin-0:2.6.2-2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3026.json"},{"CVE":"CVE-2008-3532","severity":"moderate","public_date":"2008-07-28T00:00:00Z","advisories":["RHSA-2008:1023"],"bugzilla":"457907","bugzilla_description":"CVE-2008-3532 pidgin: NSS plugin doesn't verify SSL certificates","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pidgin-0:2.5.2-6.el4","pidgin-0:2.5.2-6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3532.json"},{"CVE":"CVE-2008-2927","severity":"important","public_date":"2008-07-04T00:00:00Z","advisories":["RHSA-2008:0584"],"bugzilla":"453764","bugzilla_description":"CVE-2008-2927 pidgin MSN integer overflow","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["pidgin-0:1.5.1-2.el4","pidgin-0:2.3.1-2.el5_2","pidgin-0:1.5.1-2.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2927.json"},{"CVE":"CVE-2008-2955","severity":"moderate","public_date":"2008-06-28T00:00:00Z","advisories":["RHSA-2008:1023"],"bugzilla":"453736","bugzilla_description":"CVE-2008-2955 pidgin: remote DoS via MSN message with crafted file name","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pidgin-0:2.5.2-6.el4","pidgin-0:2.5.2-6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2955.json"},{"CVE":"CVE-2008-2957","severity":"low","public_date":"2007-05-11T00:00:00Z","advisories":["RHSA-2008:1023"],"bugzilla":"453740","bugzilla_description":"CVE-2008-2957 pidgin: unrestricted download of arbitrary files triggered via UPnP","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pidgin-0:2.5.2-6.el4","pidgin-0:2.5.2-6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2957.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pigz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pigz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pigz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry-emacs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry-emacs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry-emacs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry-gnome3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry-gnome3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry-gnome3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinentry_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinfo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinfo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pinfo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pipewire_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pixman-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pixman-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pixman-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pixman_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pixman_security_api_results.json
new file mode 100644
index 0000000..82d2b1d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pixman_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5297","severity":"moderate","public_date":"2015-09-16T00:00:00Z","advisories":[],"bugzilla":"1651585","bugzilla_description":"CVE-2015-5297 pixman: general_composite_rect() integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5297.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2014-9766","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1311882","bugzilla_description":"CVE-2014-9766 pixman: integer overflow in create_bits function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9766.json"},{"CVE":"CVE-2013-6425","severity":"important","public_date":"2013-07-16T00:00:00Z","advisories":["RHSA-2013:1869"],"bugzilla":"1037975","bugzilla_description":"CVE-2013-6425 pixman: integer underflow when handling trapezoids","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["pixman-0:0.22.0-2.2.el5_10","pixman-0:0.26.2-5.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6425.json"},{"CVE":"CVE-2013-1591","severity":"moderate","public_date":"2012-09-15T00:00:00Z","advisories":["RHSA-2013:0746","RHSA-2013:0687"],"bugzilla":"910149","bugzilla_description":"CVE-2013-1591 pixman: stack-based buffer overflow","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rhev-hypervisor6-0:6.4-20130415.0.el6_4","pixman-0:0.26.2-5.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1591.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pkgconf-m4_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pkgconf-m4_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pkgconf-m4_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pkgconf-pkg-config_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pkgconf-pkg-config_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pkgconf-pkg-config_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pkgconf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pkgconf_security_api_results.json
new file mode 100644
index 0000000..4553083
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pkgconf_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1000221","severity":"low","public_date":"2018-08-24T00:00:00Z","advisories":[],"bugzilla":"1622242","bugzilla_description":"CVE-2018-1000221 pkgconf: 1 byte out of bounds read for 0 length keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000221.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-base-java_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-base-java_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-base-java_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-ca_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-ca_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-ca_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-core_security_api_results.json
new file mode 100644
index 0000000..37f8501
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-core_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15720","severity":"moderate","public_date":"2020-06-23T00:00:00Z","advisories":[],"bugzilla":"1855273","bugzilla_description":"CVE-2020-15720 pki: dogtag's Python client does not validate certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2019-10179","severity":"low","public_date":"2020-02-03T00:00:00Z","advisories":[],"bugzilla":"1695901","bugzilla_description":"CVE-2019-10179 pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10179.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-10146","severity":"low","public_date":"2020-02-03T00:00:00Z","advisories":[],"bugzilla":"1710171","bugzilla_description":"CVE-2019-10146 pki-core: Reflected Cross-Site Scripting in 'path length' constraint field in CA's Agent page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10146.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2019-10178","severity":"moderate","public_date":"2020-02-03T00:00:00Z","advisories":[],"bugzilla":"1719042","bugzilla_description":"CVE-2019-10178 pki-core: stored Cross-site scripting (XSS) in the pki-tps web Activity tab","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10178.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-10180","severity":"moderate","public_date":"2020-02-03T00:00:00Z","advisories":[],"bugzilla":"1721137","bugzilla_description":"CVE-2019-10180 pki-core: unsanitized token parameters in TPS resulting in stored XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10180.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2019-10221","severity":"low","public_date":"2020-02-03T00:00:00Z","advisories":[],"bugzilla":"1732565","bugzilla_description":"CVE-2019-10221 pki-core: reflected cross site scripting in getcookies?url= endpoint in CA","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10221.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-1721","severity":"low","public_date":"2020-02-03T00:00:00Z","advisories":[],"bugzilla":"1777579","bugzilla_description":"CVE-2020-1721 pki-core: KRA vulnerable to reflected XSS via the getPk12 page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1721.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-1696","severity":"moderate","public_date":"2020-02-03T00:00:00Z","advisories":[],"bugzilla":"1780707","bugzilla_description":"CVE-2020-1696 pki-core: Stored XSS in TPS profile creation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1696.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-14823","severity":"important","public_date":"2019-10-14T12:00:00Z","advisories":["RHSA-2019:3225","RHSA-2019:3067"],"bugzilla":"1747435","bugzilla_description":"CVE-2019-14823 JSS: OCSP policy \"Leaf and Chain\" implicitly trusts the root certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":["jss-0:4.4.4-6.el7_6","jss-0:4.4.6-3.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-8331","severity":"moderate","public_date":"2019-02-11T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2020:3936"],"bugzilla":"1686454","bugzilla_description":"CVE-2019-8331 bootstrap: XSS in the tooltip or popover data-template attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","ovirt-web-ui-0:1.6.0-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-20676","severity":"moderate","public_date":"2018-08-10T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668082","bugzilla_description":"CVE-2018-20676 bootstrap: XSS in the tooltip data-viewport attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20676.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-20677","severity":"moderate","public_date":"2018-08-10T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668089","bugzilla_description":"CVE-2018-20677 bootstrap: XSS in the affix configuration target property","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14040","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601614","bugzilla_description":"CVE-2018-14040 bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14041","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2019:1456"],"bugzilla":"1601616","bugzilla_description":"CVE-2018-14041 bootstrap: Cross-site Scripting (XSS) in the data-target property of scrollspy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14041.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14042","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601617","bugzilla_description":"CVE-2018-14042 bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-1080","severity":"moderate","public_date":"2018-03-15T00:00:00Z","advisories":["RHSA-2018:1979"],"bugzilla":"1556657","bugzilla_description":"CVE-2018-1080 pki-core: Mishandled ACL configuration in AAclAuthz.java reverses rules that allow and deny access","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["pki-core-0:10.5.1-13.1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1080.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7537","severity":"moderate","public_date":"2017-07-21T00:00:00Z","advisories":["RHSA-2017:2335"],"bugzilla":"1470817","bugzilla_description":"CVE-2017-7537 pki-core: mock CMC authentication plugin with hardcoded secret enabled by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["pki-core-0:10.4.1-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7537.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2016-10735","severity":"moderate","public_date":"2016-06-27T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668097","bugzilla_description":"CVE-2016-10735 bootstrap: XSS in the data-target attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2015-9251","severity":"moderate","public_date":"2015-06-27T00:00:00Z","advisories":["RHSA-2020:0481","RHSA-2020:0729","RHSA-2020:3936","RHSA-2020:0983"],"bugzilla":"1399546","bugzilla_description":"CVE-2015-9251 js-jquery: Cross-site scripting via cross-domain ajax requests","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2015-0234","severity":"low","public_date":"2015-01-16T00:00:00Z","advisories":[],"bugzilla":"1183176","bugzilla_description":"CVE-2015-0234 pki-core 10.x: multiple /tmp/ file vulnerabilities","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0234.json"},{"CVE":"CVE-2012-4543","severity":"moderate","public_date":"2012-12-06T00:00:00Z","advisories":["RHSA-2013:0511","RHSA-2012:1550"],"bugzilla":"864397","bugzilla_description":"CVE-2012-4543 Certificate System: Multiple cross-site scripting flaws by displaying CRL or processing profile","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["pki-core-0:9.0.3-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4543.json"},{"CVE":"CVE-2012-2662","severity":"moderate","public_date":"2012-07-19T00:00:00Z","advisories":["RHSA-2015:1347","RHSA-2012:1103"],"bugzilla":"826646","bugzilla_description":"CVE-2012-2662 Certificate System: multiple XSS flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["pki-core-0:9.0.3-43.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2662.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-deps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-deps_security_api_results.json
new file mode 100644
index 0000000..7f503f8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-deps_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13943","severity":"moderate","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1887648","bugzilla_description":"CVE-2020-13943 tomcat: Apache Tomcat HTTP/2 Request mix-up","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13943.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-24750","severity":"important","public_date":"2020-09-18T00:00:00Z","advisories":["RHSA-2020:4173"],"bugzilla":"1882310","bugzilla_description":"CVE-2020-24750 jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-24616","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872707","bugzilla_description":"CVE-2020-24616 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24616.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-13935","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3303","RHSA-2020:4004","RHSA-2020:3382","RHSA-2020:3383","RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306","RHSA-2020:3305"],"bugzilla":"1857024","bugzilla_description":"CVE-2020-13935 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","tomcat-0:7.0.76-15.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el6","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-13934","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306"],"bugzilla":"1857040","bugzilla_description":"CVE-2020-13934 tomcat: OutOfMemoryException caused by HTTP/2 connection leak could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13934.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14326","severity":"important","public_date":"2020-07-09T00:00:00Z","advisories":["RHSA-2020:3248"],"bugzilla":"1855826","bugzilla_description":"CVE-2020-14326 RESTEasy: Caching routes in RootNode may result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-407","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14326.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8022","severity":"moderate","public_date":"2020-06-29T00:00:00Z","advisories":[],"bugzilla":"1852863","bugzilla_description":"CVE-2020-8022 tomcat: /usr/lib/tmpfiles.d/tomcat.conf is group-writable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8022.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2020-11996","severity":"moderate","public_date":"2020-06-25T00:00:00Z","advisories":[],"bugzilla":"1851420","bugzilla_description":"CVE-2020-11996 tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11996.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14195","severity":"important","public_date":"2020-06-14T00:00:00Z","advisories":["RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848958","bugzilla_description":"CVE-2020-14195 jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14195.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9484","severity":"important","public_date":"2020-05-20T00:00:00Z","advisories":["RHSA-2020:3017","RHSA-2020:2530","RHSA-2020:2487","RHSA-2020:2509","RHSA-2020:2483","RHSA-2020:2529","RHSA-2020:2506"],"bugzilla":"1838332","bugzilla_description":"CVE-2020-9484 tomcat: deserialization flaw in session persistence storage leading to RCE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["tomcat-0:7.0.76-12.el7_8","tomcat6-0:6.0.24-115.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9484.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-14060","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848960","bugzilla_description":"CVE-2020-14060 jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14060.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14062","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848962","bugzilla_description":"CVE-2020-14062 jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14062.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-14061","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1848966","bugzilla_description":"CVE-2020-14061 jackson-databind: serialization in weblogic/oracle-aqjms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14061.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-1695","severity":"moderate","public_date":"2020-04-15T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:2112","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:2905","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHSA-2020:2513"],"bugzilla":"1730462","bugzilla_description":"CVE-2020-1695 resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1695.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-11620","severity":"important","public_date":"2020-04-07T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:3192"],"bugzilla":"1826798","bugzilla_description":"CVE-2020-11620 jackson-databind: Serialization gadgets in commons-jelly:commons-jelly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11620.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11619","severity":"important","public_date":"2020-04-06T00:00:00Z","advisories":["RHSA-2020:2565","RHSA-2020:2067","RHSA-2020:2320","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1826805","bugzilla_description":"CVE-2020-11619 jackson-databind: Serialization gadgets in org.springframework:spring-aop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.10.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11113","severity":"important","public_date":"2020-03-28T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3817","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821315","bugzilla_description":"CVE-2020-11113 jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11113.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11112","severity":"important","public_date":"2020-03-25T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821311","bugzilla_description":"CVE-2020-11112 jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11112.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-11111","severity":"important","public_date":"2020-03-24T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192"],"bugzilla":"1821304","bugzilla_description":"CVE-2020-11111 jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-96","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11111.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10968","severity":"important","public_date":"2020-03-22T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819208","bugzilla_description":"CVE-2020-10968 jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10968.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10673","severity":"important","public_date":"2020-03-18T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:3585","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815470","bugzilla_description":"CVE-2020-10673 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10672","severity":"important","public_date":"2020-03-15T00:00:00Z","advisories":["RHSA-2020:3501","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:3463","RHSA-2020:3464","RHSA-2020:2067","RHSA-2020:3461","RHSA-2020:3197","RHSA-2020:3462","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:1644","RHSA-2020:3779","RHSA-2020:3637","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1815495","bugzilla_description":"CVE-2020-10672 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-96","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10969","severity":"important","public_date":"2020-03-03T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:3779","RHSA-2020:1523","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1819212","bugzilla_description":"CVE-2020-10969 jackson-databind: Serialization gadgets in javax.swing.JEditorPane","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.9.el7","candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10969.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8840","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816330","bugzilla_description":"CVE-2020-8840 jackson-databind: Lacks certain xbean-reflect/JNDI blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9546","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816332","bugzilla_description":"CVE-2020-9546 jackson-databind: Serialization gadgets in shaded-hikari-config","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9546.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9547","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816337","bugzilla_description":"CVE-2020-9547 jackson-databind: Serialization gadgets in ibatis-sqlmap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9547.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-9548","severity":"important","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:3642","RHSA-2020:2067","RHSA-2020:3197","RHSA-2020:3638","RHBA-2020:1494","RHSA-2020:2813","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHBA-2020:3255","RHSA-2020:2513","RHSA-2020:3196","RHSA-2020:3192"],"bugzilla":"1816340","bugzilla_description":"CVE-2020-9548 jackson-databind: Serialization gadgets in anteros-core","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9548.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-1935","severity":"low","public_date":"2020-02-24T00:00:00Z","advisories":["RHSA-2020:2367","RHSA-2020:3303","RHSA-2020:1521","RHSA-2020:1520","RHSA-2020:3305"],"bugzilla":"1806835","bugzilla_description":"CVE-2020-1935 tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-17569","severity":"low","public_date":"2020-02-24T00:00:00Z","advisories":["RHSA-2020:1521","RHSA-2020:1520"],"bugzilla":"1806849","bugzilla_description":"CVE-2019-17569 tomcat: Regression in handling of Transfer-Encoding header allows for HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17569.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-1938","severity":"important","public_date":"2020-02-20T00:00:00Z","advisories":["RHSA-2020:2840","RHSA-2020:2367","RHSA-2020:2783","RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:0860","RHSA-2020:1520","RHSA-2020:2781","RHSA-2020:2780","RHSA-2020:0855","RHSA-2020:0912","RHSA-2020:1479","RHSA-2020:1478","RHSA-2020:2779"],"bugzilla":"1806398","bugzilla_description":"CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["tomcat-0:7.0.76-11.el7_7","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el7","tomcat6-0:6.0.24-114.el6_10","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el6","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el5","tomcat-0:7.0.76-10.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1938.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2020-25649","severity":"important","public_date":"2020-01-09T00:00:00Z","advisories":["RHSA-2020:4312"],"bugzilla":"1887664","bugzilla_description":"CVE-2020-25649 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25649.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20330","severity":"important","public_date":"2020-01-02T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:2067","RHSA-2020:0939","RHSA-2020:3197","RHSA-2020:3196","RHBA-2020:1494","RHSA-2020:0951","RHSA-2020:3192","RHBA-2020:3255"],"bugzilla":"1793154","bugzilla_description":"CVE-2019-20330 jackson-databind: lacks certain net.sf.ehcache blocking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["candlepin-0:2.6.16-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20330.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-17563","severity":"low","public_date":"2019-12-18T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:4004","RHSA-2020:0860","RHSA-2020:1520"],"bugzilla":"1785711","bugzilla_description":"CVE-2019-17563 tomcat: session fixation when using FORM authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":["tomcat-0:7.0.76-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17563.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-12418","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:0860","RHSA-2020:1520"],"bugzilla":"1785699","bugzilla_description":"CVE-2019-12418 tomcat: local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12418.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-17531","severity":"moderate","public_date":"2019-10-12T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2019:4192","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1775293","bugzilla_description":"CVE-2019-17531 jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.8.el7","pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17531.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-16942","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758187","bugzilla_description":"CVE-2019-16942 jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16942.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16943","severity":"moderate","public_date":"2019-09-27T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0939","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758191","bugzilla_description":"CVE-2019-16943 jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16943.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14893","severity":"moderate","public_date":"2019-09-20T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758182","bugzilla_description":"CVE-2019-14893 jackson-databind: Serialization gadgets in classes of the xalan package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14892","severity":"moderate","public_date":"2019-09-19T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0729","RHSA-2020:0899","RHSA-2020:0160","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:3192","RHSA-2020:0895"],"bugzilla":"1758171","bugzilla_description":"CVE-2019-14892 jackson-databind: Serialization gadgets in classes of the commons-configuration package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14892.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-17267","severity":"moderate","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192","RHSA-2019:3901"],"bugzilla":"1758167","bugzilla_description":"CVE-2019-17267 jackson-databind: Serialization gadgets in classes of the ehcache package","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17267.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-16335","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0729","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755831","bugzilla_description":"CVE-2019-16335 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16335.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14540","severity":"moderate","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2020:2321","RHSA-2020:2333","RHSA-2019:3200","RHSA-2020:0161","RHSA-2020:2067","RHSA-2020:0164","RHSA-2020:0899","RHSA-2020:1644","RHSA-2020:0159","RHSA-2020:0445","RHSA-2020:0895","RHSA-2020:0160","RHSA-2020:3192"],"bugzilla":"1755849","bugzilla_description":"CVE-2019-14540 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["pki-deps:10.6-8020020191204213056.6a468ee4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14540.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14439","severity":"moderate","public_date":"2019-07-30T00:00:00Z","advisories":["RHSA-2019:3200","RHSA-2020:0983"],"bugzilla":"1752962","bugzilla_description":"CVE-2019-14439 jackson-databind: Polymorphic typing issue related to logback/JNDI","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14439.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-14379","severity":"important","public_date":"2019-07-23T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:2743","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2020:0727","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1737517","bugzilla_description":"CVE-2019-14379 jackson-databind: default typing mishandling leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","rh-maven35-jackson-databind-0:2.7.6-2.7.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-10072","severity":"moderate","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3929"],"bugzilla":"1723708","bugzilla_description":"CVE-2019-10072 tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10072.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-12384","severity":"important","public_date":"2019-06-21T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:1820","RHSA-2019:3200","RHSA-2019:2720","RHSA-2019:4352","RHSA-2019:3297","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2019:3901","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1725807","bugzilla_description":"CVE-2019-12384 jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","pki-deps:10.6-8000020190807021343.f8e95b4e","rh-maven35-jackson-databind-0:2.7.6-2.6.el7","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12384.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-12814","severity":"moderate","public_date":"2019-06-04T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3297","RHSA-2019:3044","RHSA-2020:0983","RHSA-2019:3292","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2938","RHSA-2019:2937","RHSA-2019:2804","RHSA-2019:2936"],"bugzilla":"1725795","bugzilla_description":"CVE-2019-12814 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-12086","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":["RHSA-2019:3149","RHSA-2020:1454","RHSA-2019:3045","RHSA-2019:3200","RHSA-2019:3046","RHSA-2019:3044","RHSA-2019:3050","RHSA-2019:2935","RHSA-2019:2858","RHSA-2019:2998","RHSA-2019:2938","RHSA-2020:3192","RHSA-2019:2937","RHSA-2019:2936"],"bugzilla":"1713468","bugzilla_description":"CVE-2019-12086 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["openshift4/ose-logging-elasticsearch5:v4.1.18-201909201915","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso","rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso","openshift3/ose-logging-elasticsearch5:v3.11.153-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-0221","severity":"low","public_date":"2019-04-13T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2019:3931","RHSA-2020:0860","RHSA-2019:3929"],"bugzilla":"1713275","bugzilla_description":"CVE-2019-0221 tomcat: XSS in SSI printenv","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0221.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-0232","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:1712","RHSA-2019:3929"],"bugzilla":"1701056","bugzilla_description":"CVE-2019-0232 tomcat: Remote Code Execution on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0232.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-0199","severity":"important","public_date":"2019-03-25T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2020:2366","RHSA-2019:3929"],"bugzilla":"1693325","bugzilla_description":"CVE-2019-0199 tomcat: Apache Tomcat HTTP/2 DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0199.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-11784","severity":"moderate","public_date":"2018-10-03T00:00:00Z","advisories":["RHSA-2019:0485","RHSA-2019:0130","RHSA-2019:0131","RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1636512","bugzilla_description":"CVE-2018-11784 tomcat: Open redirect in default servlet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-99","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7_6","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-8034","severity":"low","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2019:0451","RHSA-2019:0130","RHSA-2019:0131","RHSA-2019:0450","RHSA-2019:2205","RHSA-2019:3892","RHSA-2019:1159","RHSA-2019:1162","RHSA-2019:1529","RHSA-2019:1161","RHSA-2019:1160"],"bugzilla":"1607580","bugzilla_description":"CVE-2018-8034 tomcat: Host name verification missing in WebSocket client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","jbossweb-0:7.5.30-1.Final_redhat_1.1.ep6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8034.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-8037","severity":"important","public_date":"2018-07-22T00:00:00Z","advisories":["RHSA-2018:2868","RHSA-2018:2867","RHSA-2019:1529"],"bugzilla":"1607582","bugzilla_description":"CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws","jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2018-8014","severity":"moderate","public_date":"2018-05-17T00:00:00Z","advisories":["RHSA-2018:2470","RHSA-2019:0451","RHSA-2019:0450","RHSA-2019:2205","RHSA-2018:3768","RHSA-2018:2469","RHSA-2019:1529"],"bugzilla":"1579611","bugzilla_description":"CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["pki-deps:10.6-8000020190524054914.55190bc5","tomcat-0:7.0.76-9.el7","tomcat8-0:8.0.36-31.ep7.el7","tomcat7-0:7.0.70-27.ep7.el7","tomcat7-0:7.0.70-27.ep7.el6","tomcat8-0:8.0.36-31.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2018-1067","severity":"moderate","public_date":"2018-04-25T17:51:00Z","advisories":["RHSA-2020:2562","RHSA-2018:1248","RHSA-2018:1249","RHSA-2019:0877","RHSA-2018:2643","RHSA-2018:1247","RHSA-2018:1251"],"bugzilla":"1550671","bugzilla_description":"CVE-2018-1067 undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-113","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","rhvm-appliance-0:4.2-20180828.0.el7","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-1305","severity":"moderate","public_date":"2018-02-23T00:00:00Z","advisories":["RHSA-2019:2205","RHSA-2018:0465","RHSA-2018:0466","RHSA-2018:1320","RHSA-2018:2939"],"bugzilla":"1548282","bugzilla_description":"CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["tomcat-0:7.0.76-9.el7","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1305.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-1304","severity":"moderate","public_date":"2018-01-31T00:00:00Z","advisories":["RHSA-2019:2205","RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1447","RHSA-2018:0465","RHSA-2018:0466","RHSA-2018:1451","RHSA-2018:1320","RHSA-2018:1450","RHSA-2018:2939"],"bugzilla":"1548289","bugzilla_description":"CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["tomcat-0:7.0.76-9.el7","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","tomcat8-0:8.0.36-29.ep7.el6","tomcat8-0:8.0.36-29.ep7.el7","tomcat7-0:7.0.70-25.ep7.el6","tomcat7-0:7.0.70-25.ep7.el7","jbossweb-0:7.5.28-1.Final_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1304.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-kra_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-kra_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-kra_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-servlet-4.0-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-servlet-4.0-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-servlet-4.0-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-servlet-engine_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-servlet-engine_security_api_results.json
new file mode 100644
index 0000000..3fb15ce
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-servlet-engine_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13943","severity":"moderate","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1887648","bugzilla_description":"CVE-2020-13943 tomcat: Apache Tomcat HTTP/2 Request mix-up","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13943.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-13935","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3303","RHSA-2020:4004","RHSA-2020:3382","RHSA-2020:3383","RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306","RHSA-2020:3305"],"bugzilla":"1857024","bugzilla_description":"CVE-2020-13935 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","tomcat-0:7.0.76-15.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el7","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el5","jbossweb-0:7.5.31-2.Final_redhat_2.1.ep6.el6","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-13934","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":["RHSA-2020:3806","RHSA-2020:3308","RHSA-2020:3306"],"bugzilla":"1857040","bugzilla_description":"CVE-2020-13934 tomcat: OutOfMemoryException caused by HTTP/2 connection leak could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["jws5-tomcat-0:9.0.30-5.redhat_6.1.el6jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el8jws","jws5-tomcat-0:9.0.30-5.redhat_6.1.el7jws"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13934.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-8022","severity":"moderate","public_date":"2020-06-29T00:00:00Z","advisories":[],"bugzilla":"1852863","bugzilla_description":"CVE-2020-8022 tomcat: /usr/lib/tmpfiles.d/tomcat.conf is group-writable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8022.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2020-11996","severity":"moderate","public_date":"2020-06-25T00:00:00Z","advisories":[],"bugzilla":"1851420","bugzilla_description":"CVE-2020-11996 tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11996.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9484","severity":"important","public_date":"2020-05-20T00:00:00Z","advisories":["RHSA-2020:3017","RHSA-2020:2530","RHSA-2020:2487","RHSA-2020:2509","RHSA-2020:2483","RHSA-2020:2529","RHSA-2020:2506"],"bugzilla":"1838332","bugzilla_description":"CVE-2020-9484 tomcat: deserialization flaw in session persistence storage leading to RCE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["tomcat-0:7.0.76-12.el7_8","tomcat6-0:6.0.24-115.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9484.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-1935","severity":"low","public_date":"2020-02-24T00:00:00Z","advisories":["RHSA-2020:2367","RHSA-2020:3303","RHSA-2020:1521","RHSA-2020:1520","RHSA-2020:3305"],"bugzilla":"1806835","bugzilla_description":"CVE-2020-1935 tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-17569","severity":"low","public_date":"2020-02-24T00:00:00Z","advisories":["RHSA-2020:1521","RHSA-2020:1520"],"bugzilla":"1806849","bugzilla_description":"CVE-2019-17569 tomcat: Regression in handling of Transfer-Encoding header allows for HTTP request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17569.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2020-1938","severity":"important","public_date":"2020-02-20T00:00:00Z","advisories":["RHSA-2020:2840","RHSA-2020:2367","RHSA-2020:2783","RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:0860","RHSA-2020:1520","RHSA-2020:2781","RHSA-2020:2780","RHSA-2020:0855","RHSA-2020:0912","RHSA-2020:1479","RHSA-2020:1478","RHSA-2020:2779"],"bugzilla":"1806398","bugzilla_description":"CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["tomcat-0:7.0.76-11.el7_7","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el7","tomcat6-0:6.0.24-114.el6_10","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el6","jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el5","tomcat-0:7.0.76-10.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1938.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2019-17563","severity":"low","public_date":"2019-12-18T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:4004","RHSA-2020:0860","RHSA-2020:1520"],"bugzilla":"1785711","bugzilla_description":"CVE-2019-17563 tomcat: session fixation when using FORM authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":["tomcat-0:7.0.76-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17563.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-12418","severity":"moderate","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:0861","RHSA-2020:1521","RHSA-2020:0860","RHSA-2020:1520"],"bugzilla":"1785699","bugzilla_description":"CVE-2019-12418 tomcat: local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12418.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-symkey_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-symkey_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-symkey_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pki-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-coverage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-coverage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-coverage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-pip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-pip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-pip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-setuptools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-setuptools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python-setuptools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/platform-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-ant-factory-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-ant-factory-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-ant-factory-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-ant-factory_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-ant-factory_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-ant-factory_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-archiver-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-archiver-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-archiver-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-archiver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-archiver_security_api_results.json
new file mode 100644
index 0000000..a602c7d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-archiver_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1002200","severity":"important","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2018:1837","RHSA-2018:1836"],"bugzilla":"1584392","bugzilla_description":"CVE-2018-1002200 plexus-archiver: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["rh-maven33-plexus-archiver-0:2.4.2-5.1.el7","rh-maven35-plexus-archiver-0:3.4-4.1.el7","plexus-archiver-0:2.4.2-5.el7_5","rh-maven33-plexus-archiver-0:2.4.2-5.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002200.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-bsh-factory-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-bsh-factory-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-bsh-factory-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-bsh-factory_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-bsh-factory_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-bsh-factory_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-build-api-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-build-api-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-build-api-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-build-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-build-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-build-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cipher-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cipher-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cipher-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cipher_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cipher_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cipher_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-classworlds-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-classworlds-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-classworlds-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-classworlds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-classworlds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-classworlds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cli-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cli-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cli-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler-extras_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler-extras_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler-extras_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler-pom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler-pom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler-pom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-compiler_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-component-api-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-component-api-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-component-api-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-component-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-component-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-component-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-component-factories-pom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-component-factories-pom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-component-factories-pom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-components-pom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-components-pom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-components-pom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-component-annotations_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-component-annotations_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-component-annotations_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-component-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-component-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-component-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-component-metadata_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-component-metadata_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-component-metadata_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-container-default_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-container-default_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-container-default_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-containers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-i18n-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-i18n-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-i18n-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-i18n_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-i18n_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-i18n_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity-jline_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity-jline_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity-jline_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interactivity_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interpolation-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interpolation-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interpolation-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interpolation_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interpolation_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-interpolation_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-io-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-io-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-io-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-io_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-io_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-io_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-languages-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-languages-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-languages-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-languages_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-languages_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-languages_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-pom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-pom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-pom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-resources-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-resources-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-resources-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-resources_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-resources_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-resources_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-sec-dispatcher-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-sec-dispatcher-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-sec-dispatcher-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-sec-dispatcher_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-sec-dispatcher_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-sec-dispatcher_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-utils-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-utils-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-utils-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-utils_security_api_results.json
new file mode 100644
index 0000000..bf63af5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-1000487","severity":"moderate","public_date":"2013-10-09T00:00:00Z","advisories":["RHSA-2018:1322"],"bugzilla":"1532497","bugzilla_description":"CVE-2017-1000487 plexus-utils: Mishandled strings in Commandline class allow for command injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-velocity-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-velocity-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-velocity-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-velocity_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-velocity_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plexus-velocity_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plotutils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plotutils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plotutils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plotutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plotutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plotutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-core-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-core-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-core-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-graphics-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-graphics-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-graphics-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-fade-throbber_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-fade-throbber_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-fade-throbber_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-label_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-label_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-label_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-script_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-script_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-script_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-space-flares_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-space-flares_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-space-flares_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-throbgress_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-throbgress_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-throbgress_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-two-step_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-two-step_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-plugin-two-step_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-scripts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-scripts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-scripts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-system-theme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-system-theme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-system-theme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-charge_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-charge_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-charge_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-fade-in_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-fade-in_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-fade-in_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-script_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-script_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-script_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-solar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-solar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-solar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-spinfinity_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-spinfinity_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-spinfinity_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-spinner_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-spinner_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth-theme-spinner_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/plymouth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmdk-convert_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmdk-convert_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmdk-convert_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmempool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmempool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmempool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmix_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmix_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmreorder_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmreorder_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pmreorder_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pnm2ppa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pnm2ppa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pnm2ppa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/po4a_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/po4a_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/po4a_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman-docker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman-docker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman-docker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman-remote_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman-remote_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman-remote_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman-tests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman-tests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman-tests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman_security_api_results.json
new file mode 100644
index 0000000..655d4c2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/podman_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14370","severity":"moderate","public_date":"2020-09-22T00:00:00Z","advisories":[],"bugzilla":"1874268","bugzilla_description":"CVE-2020-14370 podman: environment variables leak between containers when started via Varlink or Docker-compatible REST API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14370.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10696","severity":"important","public_date":"2020-03-26T00:00:00Z","advisories":["RHSA-2020:1926","RHSA-2020:1396","RHSA-2020:1449","RHSA-2020:1931","RHSA-2020:1932","RHSA-2020:1401","RHSA-2020:2116","RHSA-2020:2117"],"bugzilla":"1817651","bugzilla_description":"CVE-2020-10696 buildah: Crafted input tar file may lead to local file overwrite during image build process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["buildah-0:1.11.6-11.el7_8","podman-0:1.0.2-4.dev.git96ccc2e.rhaos4.1.el8","podman-0:1.6.4-10.rhaos4.3.el8","podman-0:1.6.4-18.el7_8","container-tools:2.0-8020020200420175838.28c38760","podman-0:1.4.2-6.rhaos4.2.el8","container-tools:1.0-8020020200420104655.28c38760","container-tools:rhel8-8020020200420180128.28c38760"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10696.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-1726","severity":"low","public_date":"2020-02-11T00:00:00Z","advisories":["RHSA-2020:1650","RHSA-2020:0680"],"bugzilla":"1801152","bugzilla_description":"CVE-2020-1726 podman: incorrectly allows existing files in volumes to be overwritten by a container when it is created","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["podman-0:1.6.4-7.el8","container-tools:rhel8-8020020200324071414.0d58ad57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1726.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-1702","severity":"low","public_date":"2020-01-20T00:00:00Z","advisories":["RHSA-2020:1650","RHSA-2020:1234","RHSA-2020:1937","RHSA-2020:2681","RHBA-2020:0492","RHSA-2020:2218","RHSA-2020:2116","RHSA-2020:1227"],"bugzilla":"1792796","bugzilla_description":"CVE-2020-1702 containers/image: Container images read entire image manifest into memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["cri-o-0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7","buildah-0:1.11.6-11.el7_8","podman-0:1.6.4-16.el7_8","openshift4/ose-pod:v4.3.2-202002112006","skopeo-1:0.1.40-11.el7_8","cri-o-0:1.11.16-0.9.dev.rhaos3.11.git6d43aae.el7","docker-2:1.13.1-161.git64e9980.el7_8","container-tools:rhel8-8020020200324071414.0d58ad57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1702.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2020-8945","severity":"moderate","public_date":"2020-01-16T00:00:00Z","advisories":["RHSA-2020:2027","RHSA-2020:2992","RHSA-2020:1234","RHSA-2020:3167","RHSA-2020:1231","RHSA-2020:1396","RHSA-2020:1230","RHSA-2020:0679","RHSA-2020:0934","RHSA-2020:1402","RHSA-2020:0863","RHSA-2020:0697","RHSA-2020:0689","RHSA-2020:1940","RHSA-2020:2413","RHSA-2020:2117","RHBA-2020:1255","RHSA-2020:0928","RHSA-2020:1937","RHSA-2020:2927"],"bugzilla":"1795838","bugzilla_description":"CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["atomic-openshift-0:3.11.248-1.git.0.92ee8ac.el7","openshift-clients-0:4.2.32-202005020632.git.1.1b0fab9.el8","skopeo-1:0.1.32-7.git1715c90.rhaos4.2.el8","podman-0:1.6.4-10.rhaos4.3.el8","openshift4/ose-docker-builder:v4.3.7-202003161611","skopeo-1:0.1.40-7.el7_8","podman-0:1.6.4-18.el7_8","openshift4/ose-cli:v4.3.7-202003161611","openshift4/ose-cli-artifacts:v4.3.7-202003161611","openshift4/ose-openshift-controller-manager-rhel7:v4.2.34-202005252115","cri-o-0:1.16.4-1.dev.rhaos4.3.git9238eee.el7","openshift4/ose-openshift-controller-manager-rhel7:v4.3.9-202003230345","cri-o-0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7","openshift-0:4.3.10-202003300855.git.0.da48c1d.el8","docker-2:1.13.1-161.git64e9980.el7_8","skopeo-1:0.1.40-4.rhaos.el8","machine-config-daemon-0:4.3.10-202003300415.git.0.56d6ae0.el8","buildah-0:1.11.6-8.el7_8","skopeo-1:0.1.32-6.git1715c90.el8_0","openshift4/ose-cluster-policy-controller-rhel7:v4.4.0-202004261927","openshift4/ose-docker-builder:v4.2.28-202004061218","openshift-clients-0:4.3.10-202003300001.git.0.e43c148.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8945.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10214","severity":"moderate","public_date":"2019-09-09T00:00:00Z","advisories":["RHSA-2019:3403","RHSA-2019:3007","RHSA-2019:2825","RHSA-2019:2989","RHSA-2019:3494","RHSA-2019:3812","RHSA-2019:2817"],"bugzilla":"1732508","bugzilla_description":"CVE-2019-10214 containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["container-tools:rhel8-8010020190927090915.4985cc55","cri-o-0:1.9.16-5.git858756d.el7","container-tools:1.0-8010020190927091243.4985cc55","cri-o-0:1.13.11-0.7.dev.rhaos4.1.git9cb8f2f.el8","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","cri-o-0:1.10.6-2.rhaos3.10.git56d7d9a.el7","openshift4/ose-docker-builder:v4.1.20-201910102034"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10214.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-18466","severity":"moderate","public_date":"2019-08-22T00:00:00Z","advisories":["RHSA-2019:4269","RHSA-2020:1227"],"bugzilla":"1744588","bugzilla_description":"CVE-2019-18466 podman: resolving symlink in host filesystem leads to unexpected results of copy operation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["podman-0:1.6.4-16.el7_8","container-tools:rhel8-8010020191126140055.c294d161"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18466.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10152","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHSA-2019:1907"],"bugzilla":"1715667","bugzilla_description":"CVE-2019-10152 podman: Improper symlink resolution allows access to host files when executing `podman cp` on running containers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59->CWE-22","affected_packages":["podman-0:1.4.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10152.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10892","severity":"moderate","public_date":"2018-07-05T00:00:00Z","advisories":["RHSA-2018:2482","RHBA-2018:2796"],"bugzilla":"1598581","bugzilla_description":"CVE-2018-10892 docker: container breakout without selinux in enforcing mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["docker-2:1.13.1-74.git6e3bb8e.el7","podman-0:0.9.2-5.git37a2afe.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10892.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-10856","severity":"moderate","public_date":"2018-05-31T00:00:00Z","advisories":["RHSA-2018:2037"],"bugzilla":"1592166","bugzilla_description":"CVE-2018-10856 podman: Containers run as non-root users do not drop capabilities","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["podman-0:0.6.1-3.git3e0ff12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10856.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-dbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-dbus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-dbus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-newrole_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-newrole_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-newrole_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-python-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-python-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-python-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-restorecond_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-restorecond_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-restorecond_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-sandbox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-sandbox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils-sandbox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils_security_api_results.json
new file mode 100644
index 0000000..d203cb7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/policycoreutils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1063","severity":"low","public_date":"2018-02-28T00:00:00Z","advisories":["RHSA-2018:0913"],"bugzilla":"1550122","bugzilla_description":"CVE-2018-1063 policycoreutils: Relabelling of symbolic links in /tmp and /var/tmp change the context of their target instead","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59->CWE-282","affected_packages":["policycoreutils-0:2.5-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1063.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.9"},{"CVE":"CVE-2016-7545","severity":"important","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:0535","RHSA-2017:0536","RHSA-2016:2702"],"bugzilla":"1378577","bugzilla_description":"CVE-2016-7545 policycoreutils: SELinux sandbox escape via TIOCSTI ioctl","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["policycoreutils-0:2.0.83-30.1.el6_8","policycoreutils-0:2.2.5-21.el7_2","policycoreutils-0:2.5-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7545.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2014-3215","severity":"important","public_date":"2012-12-08T00:00:00Z","advisories":["RHSA-2015:0864","RHBA-2015:2161"],"bugzilla":"1095855","bugzilla_description":"CVE-2014-3215 policycoreutils: local privilege escalation via seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-270","affected_packages":["kernel-0:2.6.32-504.16.2.el6","libcap-ng-0:0.7.5-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3215.json"},{"CVE":"CVE-2011-1011","severity":"important","public_date":"2011-02-22T00:00:00Z","advisories":["RHSA-2011:0414"],"bugzilla":"633544","bugzilla_description":"CVE-2011-1011 policycoreutils: insecure temporary directory handling in seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["policycoreutils-0:2.0.83-19.8.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1011.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-pkla-compat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-pkla-compat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit-pkla-compat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit_security_api_results.json
new file mode 100644
index 0000000..d2e435f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/polkit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-6133","severity":"important","public_date":"2019-01-09T00:00:00Z","advisories":["RHSA-2019:0230","RHSA-2019:2699","RHSA-2019:0420","RHSA-2019:2978","RHSA-2019:0832"],"bugzilla":"1664212","bugzilla_description":"CVE-2019-6133 polkit: Temporary auth hijacking via PID reuse and non-atomic fork","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-697->CWE-284","affected_packages":["polkit-0:0.96-7.el6_6.1","polkit-0:0.112-12.el7_4.1","polkit-0:0.112-18.el7_6.1","polkit-0:0.96-11.el6_10.1","polkit-0:0.112-14.el7_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6133.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2018-19788","severity":"moderate","public_date":"2018-12-03T00:00:00Z","advisories":["RHSA-2019:2046","RHSA-2019:3232"],"bugzilla":"1655925","bugzilla_description":"CVE-2018-19788 polkit: Improper handling of user with uid > INT_MAX leading to authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["polkit-0:0.112-22.el7","polkit-0:0.112-18.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19788.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1116","severity":"low","public_date":"2018-07-10T00:00:00Z","advisories":["RHSA-2020:1135"],"bugzilla":"1595404","bugzilla_description":"CVE-2018-1116 polkit: Improper authorization in polkit_backend_interactive_authority_check_authorization function in polkitd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["polkit-0:0.112-26.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1116.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-2568","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1300746","bugzilla_description":"CVE-2016-2568 polkit: Program run via pkexec as unprivileged user can escape to parent session via TIOCSTI ioctl","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2568.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2015-3256","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2016:0189"],"bugzilla":"1245684","bugzilla_description":"CVE-2015-3256 polkit: Memory corruption via javascript rule evaluation","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["polkit-0:0.112-6.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3256.json"},{"CVE":"CVE-2015-3218","severity":"low","public_date":"2015-05-29T00:00:00Z","advisories":[],"bugzilla":"1228738","bugzilla_description":"CVE-2015-3218 polkit: crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3218.json"},{"CVE":"CVE-2015-4625","severity":"low","public_date":"2015-05-29T00:00:00Z","advisories":[],"bugzilla":"1233808","bugzilla_description":"CVE-2015-4625 polkit: potential information disclosure vulnerability due to cookie counter wrapping","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-190->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4625.json"},{"CVE":"CVE-2015-3255","severity":"moderate","public_date":"2014-09-07T00:00:00Z","advisories":[],"bugzilla":"1245673","bugzilla_description":"CVE-2015-3255 polkit: Heap-corruption on duplicate ids","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3255.json"},{"CVE":"CVE-2014-5033","severity":"important","public_date":"2014-03-24T00:00:00Z","advisories":["RHSA-2014:1359"],"bugzilla":"1094890","bugzilla_description":"CVE-2014-5033 polkit-qt: insecure calling of polkit","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-362","affected_packages":["polkit-qt-0:0.103.0-10.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5033.json"},{"CVE":"CVE-2013-4288","severity":"important","public_date":"2013-09-18T00:00:00Z","advisories":["RHSA-2013:1270"],"bugzilla":"1002375","bugzilla_description":"CVE-2013-4288 polkit: unix-process subject for authorization is racy","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-362","affected_packages":["polkit-0:0.96-5.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4288.json"},{"CVE":"CVE-2011-4945","severity":"important","public_date":"2011-12-09T00:00:00Z","advisories":[],"bugzilla":"807712","bugzilla_description":"CVE-2011-4945 polkit: Members of 'wheel' group allowed to become root without providing a password","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4945.json"},{"CVE":"CVE-2011-1485","severity":"important","public_date":"2011-04-19T00:00:00Z","advisories":["RHSA-2011:0455"],"bugzilla":"692922","bugzilla_description":"CVE-2011-1485 polkit: polkitd/pkexec vulnerability","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["polkit-0:0.96-2.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1485.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-cpp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-cpp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-cpp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-cpp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-cpp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-cpp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-glib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-glib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-glib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-qt5-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-qt5-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-qt5-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-qt5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-qt5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-qt5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler_security_api_results.json
new file mode 100644
index 0000000..a24fefd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/poppler_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-21009","severity":"moderate","public_date":"2019-09-05T00:00:00Z","advisories":["RHSA-2020:1074"],"bugzilla":"1753850","bugzilla_description":"CVE-2018-21009 poppler: integer overflow in Parser::makeStream in Parser.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["poppler-0:0.26.5-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-21009.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2019-9959","severity":"low","public_date":"2019-07-23T00:00:00Z","advisories":["RHSA-2020:1074","RHSA-2019:2713"],"bugzilla":"1732340","bugzilla_description":"CVE-2019-9959 poppler: integer overflow in JPXStream::init function leading to memory consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["poppler-0:0.66.0-11.el8_0.12","poppler-0:0.26.5-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9959.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2019-14494","severity":"low","public_date":"2019-07-11T00:00:00Z","advisories":["RHSA-2020:3977"],"bugzilla":"1797453","bugzilla_description":"CVE-2019-14494 poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["poppler-0:0.26.5-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14494.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-12360","severity":"moderate","public_date":"2019-05-27T00:00:00Z","advisories":[],"bugzilla":"1850876","bugzilla_description":"CVE-2019-12360 xpdf: buffer over-read via crafted PDF document leads to DoS or memory leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12360.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2019-12293","severity":"moderate","public_date":"2019-05-23T00:00:00Z","advisories":["RHSA-2020:1074","RHSA-2019:2713"],"bugzilla":"1713582","bugzilla_description":"CVE-2019-12293 poppler: heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["poppler-0:0.66.0-11.el8_0.12","poppler-0:0.26.5-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12293.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2019-11026","severity":"low","public_date":"2019-04-09T00:00:00Z","advisories":[],"bugzilla":"1699862","bugzilla_description":"CVE-2019-11026 poppler: infinite recursion in function FontInfoScanner::scanFonts in FontInfo.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11026.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-10871","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":["RHSA-2020:1074","RHSA-2019:2713"],"bugzilla":"1696636","bugzilla_description":"CVE-2019-10871 poppler: heap-based buffer over-read in function PSOutputDev::checkPageSlice in PSOutputDev.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["poppler-0:0.66.0-11.el8_0.12","poppler-0:0.26.5-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10871.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-10872","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":[],"bugzilla":"1696638","bugzilla_description":"CVE-2019-10872 poppler: heap-based buffer over-read in function Splash::blitTransparent in splash/Splash.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10872.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-10873","severity":"low","public_date":"2019-04-01T00:00:00Z","advisories":[],"bugzilla":"1696637","bugzilla_description":"CVE-2019-10873 poppler: null-pointer dereference in function SplashClip::clipAALine in splash/SplashClip.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10873.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-9903","severity":"low","public_date":"2019-03-15T00:00:00Z","advisories":["RHSA-2019:2713"],"bugzilla":"1691724","bugzilla_description":"CVE-2019-9903 poppler: stack consumption in function Dict::find() in Dict.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9903.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-9631","severity":"low","public_date":"2019-03-07T00:00:00Z","advisories":["RHSA-2019:2022","RHSA-2019:2713"],"bugzilla":"1686802","bugzilla_description":"CVE-2019-9631 poppler: heap-based buffer over-read in function downsample_row_box_filter in CairoRescaleBox.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["poppler-0:0.26.5-38.el7","poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9631.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2019-9545","severity":null,"public_date":"2019-02-28T00:00:00Z","advisories":[],"bugzilla":"1685966","bugzilla_description":"CVE-2019-9545 poppler: recursive function call in JBIG2Stream::readTextRegion() in JBIG2Stream.cc causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9545.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-9543","severity":"low","public_date":"2019-02-28T00:00:00Z","advisories":[],"bugzilla":"1685971","bugzilla_description":"CVE-2019-9543 poppler: recursive function call in JBIG2Stream::readGenericBitmap() in JBIG2Stream.cc causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-9200","severity":"moderate","public_date":"2019-02-25T00:00:00Z","advisories":["RHSA-2019:2022","RHSA-2019:2713"],"bugzilla":"1683632","bugzilla_description":"CVE-2019-9200 poppler: heap-based buffer overflow in function ImageStream::getLine() in Stream.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["poppler-0:0.26.5-38.el7","poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9200.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-7310","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:2022","RHSA-2019:2713"],"bugzilla":"1672419","bugzilla_description":"CVE-2019-7310 poppler: heap-based buffer over-read in XRef::getEntry in XRef.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["poppler-0:0.26.5-38.el7","poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7310.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20662","severity":"low","public_date":"2018-12-30T00:00:00Z","advisories":["RHSA-2019:2022","RHSA-2019:2713"],"bugzilla":"1665273","bugzilla_description":"CVE-2018-20662 poppler: SIGABRT PDFDoc::setup class in PDFDoc.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["poppler-0:0.26.5-38.el7","poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20662.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20650","severity":"low","public_date":"2018-12-28T00:00:00Z","advisories":["RHSA-2019:2022","RHSA-2019:2713"],"bugzilla":"1665263","bugzilla_description":"CVE-2018-20650 poppler: reachable Object::dictLookup assertion in FileSpec class in FileSpec.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["poppler-0:0.26.5-38.el7","poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20650.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20551","severity":"low","public_date":"2018-12-26T00:00:00Z","advisories":["RHSA-2019:2713"],"bugzilla":"1665259","bugzilla_description":"CVE-2018-20551 poppler: reachable Object::getString assertion in AnnotRichMedia class in Annot.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20551.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20481","severity":"low","public_date":"2018-12-20T00:00:00Z","advisories":["RHSA-2019:2022","RHSA-2019:2713"],"bugzilla":"1665266","bugzilla_description":"CVE-2018-20481 poppler: NULL pointer dereference in the XRef::getEntry in XRef.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["poppler-0:0.26.5-38.el7","poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20481.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19149","severity":"low","public_date":"2018-11-08T00:00:00Z","advisories":["RHSA-2019:2022"],"bugzilla":"1649457","bugzilla_description":"CVE-2018-19149 poppler: NULL pointer dereference in _poppler_attachment_new","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["poppler-0:0.26.5-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19149.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19058","severity":"low","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2019:2022"],"bugzilla":"1649435","bugzilla_description":"CVE-2018-19058 poppler: reachable abort in Object.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["poppler-0:0.26.5-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19058.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19059","severity":"low","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2019:2022"],"bugzilla":"1649440","bugzilla_description":"CVE-2018-19059 poppler: out-of-bounds read in EmbFile::save2 in FileSpec.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["poppler-0:0.26.5-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19059.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19060","severity":"low","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2019:2022"],"bugzilla":"1649450","bugzilla_description":"CVE-2018-19060 poppler: pdfdetach utility does not validate save paths","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["poppler-0:0.26.5-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19060.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-18897","severity":"low","public_date":"2018-11-01T00:00:00Z","advisories":["RHSA-2019:2022","RHSA-2019:2713"],"bugzilla":"1646546","bugzilla_description":"CVE-2018-18897 poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["poppler-0:0.26.5-38.el7","poppler-0:0.66.0-11.el8_0.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-16646","severity":"low","public_date":"2018-08-28T00:00:00Z","advisories":["RHSA-2019:2022"],"bugzilla":"1626618","bugzilla_description":"CVE-2018-16646 poppler: infinite recursion in Parser::getObj function in Parser.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["poppler-0:0.26.5-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16646.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-13988","severity":"low","public_date":"2018-07-23T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1602838","bugzilla_description":"CVE-2018-13988 poppler: out of bounds read in pdfunite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["poppler-0:0.26.5-20.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13988.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-10768","severity":"low","public_date":"2018-05-05T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1576169","bugzilla_description":"CVE-2018-10768 poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["poppler-0:0.26.5-20.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10768.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18267","severity":"low","public_date":"2017-10-12T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1578777","bugzilla_description":"CVE-2017-18267 poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["poppler-0:0.26.5-20.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18267.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2017-1000456","severity":"moderate","public_date":"2017-10-05T00:00:00Z","advisories":[],"bugzilla":"1531382","bugzilla_description":"CVE-2017-1000456 poppler: Invalid read in TextPool::addWord() causes crash and can lead to overflow in subsequent calculations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000456.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-14977","severity":"low","public_date":"2017-09-30T00:00:00Z","advisories":[],"bugzilla":"1500344","bugzilla_description":"CVE-2017-14977 poppler: NULL pointer dereference in the FoFiTrueType::getCFFBlock function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14977.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15565","severity":"low","public_date":"2017-09-28T00:00:00Z","advisories":[],"bugzilla":"1510977","bugzilla_description":"CVE-2017-15565 poppler: NULL pointer dereference in the GfxImageColorMap::getGrayLine() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15565.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14929","severity":"low","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1499167","bugzilla_description":"CVE-2017-14929 poppler: Memory corruption via Gfx.cc infinite loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14929.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14617","severity":"low","public_date":"2017-09-19T00:00:00Z","advisories":[],"bugzilla":"1499905","bugzilla_description":"CVE-2017-14617 poppler: Floating point exception in the ImageStream class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14520","severity":"low","public_date":"2017-09-17T00:00:00Z","advisories":[],"bugzilla":"1494582","bugzilla_description":"CVE-2017-14520 poppler: Floating point exception in Splash::scaleImageYuXd() function in Splash.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14520.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14976","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1500345","bugzilla_description":"CVE-2017-14976 poppler: Heap-based buffer over-read in the FoFiType1C::convertToType0 function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14976.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14517","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1499162","bugzilla_description":"CVE-2017-14517 poppler: NULL pointer dereference in the XRef::parseEntry() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14517.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14518","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1499163","bugzilla_description":"CVE-2017-14518 poppler: Floating point exception in the isImageInterpolationRequired() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14518.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14519","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1499165","bugzilla_description":"CVE-2017-14519 poppler: Memory corruption via Gfx.cc infinite loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14519.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14975","severity":"low","public_date":"2017-09-11T00:00:00Z","advisories":[],"bugzilla":"1500343","bugzilla_description":"CVE-2017-14975 poppler: NULL pointer dereference in the FoFiType1C::convertToType0 function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14975.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14928","severity":"low","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1500322","bugzilla_description":"CVE-2017-14928 poppler: NULL pointer dereference in the AnnotRichMedia::Configuration::Configuration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14928.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14926","severity":"low","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1500323","bugzilla_description":"CVE-2017-14926 poppler: NULL pointer dereference in the AnnotRichMedia::Content::Content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14926.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14927","severity":"low","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1500324","bugzilla_description":"CVE-2017-14927 poppler: NULL pointer dereference in the SplashOutputDev::type3D0() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14927.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-2814","severity":"moderate","public_date":"2017-07-07T00:00:00Z","advisories":[],"bugzilla":"1470131","bugzilla_description":"CVE-2017-2814 poppler: Heap-buffer overflow in DCTStream::readScan()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-2820","severity":"moderate","public_date":"2017-07-07T00:00:00Z","advisories":[],"bugzilla":"1470138","bugzilla_description":"CVE-2017-2820 poppler: Integer overflow in the JPEG 2000 image parsing functionality","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2820.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-2818","severity":"moderate","public_date":"2017-07-07T00:00:00Z","advisories":[],"bugzilla":"1470139","bugzilla_description":"CVE-2017-2818 poppler: Heap-buffer overflow in the image rendering functionality","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2818.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-9775","severity":"moderate","public_date":"2017-06-21T00:00:00Z","advisories":["RHSA-2017:2551"],"bugzilla":"1466442","bugzilla_description":"CVE-2017-9775 poppler: Stack-buffer overflow in GfxState.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["poppler-0:0.26.5-17.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9775.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-9776","severity":"moderate","public_date":"2017-06-21T00:00:00Z","advisories":["RHSA-2017:2550","RHSA-2017:2551"],"bugzilla":"1466443","bugzilla_description":"CVE-2017-9776 poppler: Integer overflow in JBIG2Stream.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["poppler-0:0.26.5-17.el7_4","poppler-0:0.12.4-12.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9776.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-7515","severity":"low","public_date":"2017-05-27T00:00:00Z","advisories":[],"bugzilla":"1459066","bugzilla_description":"CVE-2017-7515 poppler: Stack exhaustion due to infinite recursive call in pdfunite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7515.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7511","severity":"low","public_date":"2017-05-23T00:00:00Z","advisories":[],"bugzilla":"1456827","bugzilla_description":"CVE-2017-7511 poppler: Null pointer dereference in pdfunite via crafted documents","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7511.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9083","severity":"low","public_date":"2017-05-18T00:00:00Z","advisories":[],"bugzilla":"1453198","bugzilla_description":"CVE-2017-9083 poppler: Null pointer dereference in the JPXStream::readUByte function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9083.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9406","severity":"low","public_date":"2017-04-24T00:00:00Z","advisories":[],"bugzilla":"1458701","bugzilla_description":"CVE-2017-9406 poppler: Memory leak in the gmalloc function in gmem.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9406.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9408","severity":"low","public_date":"2017-04-24T00:00:00Z","advisories":[],"bugzilla":"1458702","bugzilla_description":"CVE-2017-9408 poppler: Memory leak in the Object::initArray function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9408.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9865","severity":"low","public_date":"2017-04-24T00:00:00Z","advisories":[],"bugzilla":"1466435","bugzilla_description":"CVE-2017-9865 poppler: Buffer over-read in the GfxImageColorMap::getGray function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9865.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8868","severity":"moderate","public_date":"2016-04-11T00:00:00Z","advisories":["RHSA-2016:2580"],"bugzilla":"1326225","bugzilla_description":"CVE-2015-8868 poppler: heap buffer overflow in ExponentialFunction","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["poppler-0:0.26.5-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8868.json"},{"CVE":"CVE-2013-7296","severity":"moderate","public_date":"2013-12-07T00:00:00Z","advisories":[],"bugzilla":"1048199","bugzilla_description":"CVE-2013-7296 poppler: DoS due to a format string error","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7296.json"},{"CVE":"CVE-2013-4472","severity":"low","public_date":"2013-10-26T00:00:00Z","advisories":[],"bugzilla":"1024746","bugzilla_description":"CVE-2013-4472 poppler, xpdf: insecure temporary file","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4472.json"},{"CVE":"CVE-2013-4473","severity":"moderate","public_date":"2013-10-26T00:00:00Z","advisories":[],"bugzilla":"1024753","bugzilla_description":"CVE-2013-4473 poppler: stack-based buffer overflow in pdfseparate utility","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4473.json"},{"CVE":"CVE-2013-4474","severity":"moderate","public_date":"2013-10-26T00:00:00Z","advisories":[],"bugzilla":"1024762","bugzilla_description":"CVE-2013-4474 poppler: format string flaw in pdfseparate utility","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4474.json"},{"CVE":"CVE-2012-2142","severity":"low","public_date":"2013-08-09T00:00:00Z","advisories":[],"bugzilla":"789936","bugzilla_description":"CVE-2012-2142 poppler, xpdf: Insufficient sanitization of escape sequences in the error messages","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2142.json"},{"CVE":"CVE-2013-1788","severity":"low","public_date":"2013-01-10T00:00:00Z","advisories":[],"bugzilla":"917108","bugzilla_description":"CVE-2013-1788 poppler: multiple invalid memory access flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1788.json"},{"CVE":"CVE-2013-1789","severity":"low","public_date":"2013-01-10T00:00:00Z","advisories":[],"bugzilla":"917109","bugzilla_description":"CVE-2013-1789 poppler: Multiple null pointer de-references in the Poppler splash backend","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1789.json"},{"CVE":"CVE-2013-1790","severity":"low","public_date":"2013-01-09T00:00:00Z","advisories":[],"bugzilla":"917111","bugzilla_description":"CVE-2013-1790 poppler: uninitialized memory read flaw","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1790.json"},{"CVE":"CVE-2010-3702","severity":"important","public_date":"2010-09-24T00:00:00Z","advisories":["RHSA-2010:0749","RHSA-2010:0859","RHSA-2010:0755","RHSA-2010:0754","RHSA-2010:0753","RHSA-2010:0752","RHSA-2010:0751","RHSA-2010:0750","RHSA-2012:1201"],"bugzilla":"595245","bugzilla_description":"CVE-2010-3702 xpdf: uninitialized Gfx::parser pointer dereference","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["kdegraphics-7:3.5.4-17.el5_5.1","poppler-0:0.12.4-3.el6_0.1","cups-1:1.1.22-0.rc1.9.32.el4_8.10","cups-1:1.1.17-13.3.70","kdegraphics-7:3.3.1-18.el4_8.1","tetex-0:3.0-33.15.el5_8.1","gpdf-0:2.8.2-7.7.2.el4_8.7","poppler-0:0.5.4-4.4.el5_5.14","xpdf-1:2.02-19.el3","xpdf-1:3.00-24.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3702.json"},{"CVE":"CVE-2010-3704","severity":"important","public_date":"2010-09-24T00:00:00Z","advisories":["RHSA-2010:0749","RHSA-2010:0859","RHSA-2010:0753","RHSA-2010:0752","RHSA-2010:0751","RHSA-2012:1201"],"bugzilla":"638960","bugzilla_description":"CVE-2010-3704 xpdf: array indexing error in FoFiType1::parse()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["kdegraphics-7:3.5.4-17.el5_5.1","poppler-0:0.12.4-3.el6_0.1","kdegraphics-7:3.3.1-18.el4_8.1","tetex-0:3.0-33.15.el5_8.1","gpdf-0:2.8.2-7.7.2.el4_8.7","poppler-0:0.5.4-4.4.el5_5.14","xpdf-1:3.00-24.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3704.json"},{"CVE":"CVE-2010-3703","severity":"important","public_date":"2010-09-24T00:00:00Z","advisories":["RHSA-2010:0859"],"bugzilla":"639356","bugzilla_description":"CVE-2010-3703 poppler: use of initialized pointer in PostScriptFunction","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["poppler-0:0.12.4-3.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3703.json"},{"CVE":"CVE-2010-5110","severity":"moderate","public_date":"2010-01-27T00:00:00Z","advisories":[],"bugzilla":"647377","bugzilla_description":"CVE-2010-5110 poppler: heap based buffer overflow in DCTStream.cc","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5110.json"},{"CVE":"CVE-2009-3608","severity":"important","public_date":"2009-10-14T00:00:00Z","advisories":["RHSA-2009:1504","RHSA-2009:1503","RHSA-2010:0400","RHSA-2009:1502","RHSA-2009:1513","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"526637","bugzilla_description":"CVE-2009-3608 xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["xpdf-1:3.00-22.el4_8.1","kdegraphics-7:3.3.1-15.el4_8.2","cups-1:1.3.7-11.el5_4.3","poppler-0:0.5.4-4.4.el5_4.11","gpdf-0:2.8.2-7.7.2.el4_8.5","tetex-0:3.0-33.8.el5_5.5","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3608.json"},{"CVE":"CVE-2009-3606","severity":"moderate","public_date":"2009-10-14T00:00:00Z","advisories":["RHSA-2009:0480","RHSA-2009:0458","RHSA-2009:1500","RHSA-2009:1502","RHSA-2009:1501"],"bugzilla":"526877","bugzilla_description":"CVE-2009-3606 xpdf/poppler: PSOutputDev::doImageL1Sep integer overflow","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:3.00-22.el4_8.1","gpdf-0:2.8.2-7.7.2.el4_7.4","xpdf-1:2.02-17.el3","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3606.json"},{"CVE":"CVE-2009-3609","severity":"low","public_date":"2009-10-14T00:00:00Z","advisories":["RHSA-2009:1504","RHSA-2009:1503","RHSA-2010:0755","RHSA-2010:0401","RHSA-2009:1500","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:1502","RHSA-2009:1513","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"526893","bugzilla_description":"CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["tetex-0:2.0.2-22.0.1.EL4.16","xpdf-1:3.00-22.el4_8.1","cups-1:1.1.22-0.rc1.9.32.el4_8.10","kdegraphics-7:3.3.1-15.el4_8.2","cups-1:1.3.7-11.el5_4.3","tetex-0:1.0.7-67.19","poppler-0:0.5.4-4.4.el5_4.11","gpdf-0:2.8.2-7.7.2.el4_8.5","tetex-0:3.0-33.8.el5_5.5","xpdf-1:2.02-17.el3","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3609.json"},{"CVE":"CVE-2009-3604","severity":"important","public_date":"2009-10-14T00:00:00Z","advisories":["RHSA-2009:0480","RHSA-2009:1503","RHSA-2009:1500","RHSA-2009:1502","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"526911","bugzilla_description":"CVE-2009-3604 xpdf/poppler: Splash::drawImage integer overflow and missing allocation return value check","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:3.00-22.el4_8.1","kdegraphics-7:3.3.1-15.el4_8.2","gpdf-0:2.8.2-7.7.2.el4_8.5","xpdf-1:2.02-17.el3","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3604.json"},{"CVE":"CVE-2009-3603","severity":"important","public_date":"2009-10-14T00:00:00Z","advisories":["RHSA-2009:1504"],"bugzilla":"526915","bugzilla_description":"CVE-2009-3603 xpdf/poppler: SplashBitmap::SplashBitmap integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["poppler-0:0.5.4-4.4.el5_4.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3603.json"},{"CVE":"CVE-2009-0791","severity":"moderate","public_date":"2009-05-19T00:00:00Z","advisories":["RHSA-2009:0480","RHSA-2009:1503","RHSA-2009:1083","RHSA-2010:0401","RHSA-2009:1500","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:1502","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"491840","bugzilla_description":"CVE-2009-0791 xpdf: multiple integer overflows","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.17-13.3.62","tetex-0:2.0.2-22.0.1.EL4.16","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:3.00-22.el4_8.1","kdegraphics-7:3.3.1-15.el4_8.2","cups-1:1.1.22-0.rc1.9.32.el4_8.3","tetex-0:1.0.7-67.19","gpdf-0:2.8.2-7.7.2.el4_8.5","tetex-0:3.0-33.8.el5_5.5","xpdf-1:2.02-17.el3","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0791.json"},{"CVE":"CVE-2009-0146","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490612","bugzilla_description":"CVE-2009-0146 xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0146.json"},{"CVE":"CVE-2009-0195","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490612","bugzilla_description":"CVE-2009-0146 xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0195.json"},{"CVE":"CVE-2009-0147","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490614","bugzilla_description":"CVE-2009-0147 xpdf: Multiple integer overflows in JBIG2 decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0147.json"},{"CVE":"CVE-2009-0166","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"490625","bugzilla_description":"CVE-2009-0166 xpdf: Freeing of potentially uninitialized memory in JBIG2 decoder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0166.json"},{"CVE":"CVE-2009-0799","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495886","bugzilla_description":"CVE-2009-0799 PDF JBIG2 decoder OOB read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0799.json"},{"CVE":"CVE-2009-0800","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495887","bugzilla_description":"CVE-2009-0800 PDF JBIG2 multiple input validation flaws","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0800.json"},{"CVE":"CVE-2009-1179","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495889","bugzilla_description":"CVE-2009-1179 PDF JBIG2 integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1179.json"},{"CVE":"CVE-2009-1180","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495892","bugzilla_description":"CVE-2009-1180 PDF JBIG2 invalid free()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1180.json"},{"CVE":"CVE-2009-1181","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495894","bugzilla_description":"CVE-2009-1181 PDF JBIG2 NULL dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1181.json"},{"CVE":"CVE-2009-1182","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495896","bugzilla_description":"CVE-2009-1182 PDF JBIG2 MMR decoder buffer overflows","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1182.json"},{"CVE":"CVE-2009-1183","severity":"low","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0429","RHSA-2009:0480","RHSA-2009:0458","RHSA-2010:0400","RHSA-2010:0399","RHSA-2009:0430","RHSA-2009:0431"],"bugzilla":"495899","bugzilla_description":"CVE-2009-1183 PDF JBIG2 MMR infinite loop DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["cups-1:1.1.22-0.rc1.9.27.el4_7.5","tetex-0:2.0.2-22.0.1.EL4.16","kdegraphics-7:3.5.4-12.el5_3","poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:2.02-14.el3","gpdf-0:2.8.2-7.7.2.el4_7.4","kdegraphics-7:3.3.1-13.el4","tetex-0:3.0-33.8.el5_5.5","xpdf-1:3.00-20.el4","cups-1:1.3.7-8.el5_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1183.json"},{"CVE":"CVE-2009-1187","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0480"],"bugzilla":"495906","bugzilla_description":"CVE-2009-1187 poppler CairoOutputDev integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["poppler-0:0.5.4-4.4.el5_3.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1187.json"},{"CVE":"CVE-2009-1188","severity":"important","public_date":"2009-04-16T00:00:00Z","advisories":["RHSA-2009:0480","RHSA-2009:1503","RHSA-2009:1502","RHSA-2009:1501","RHSA-2009:1512"],"bugzilla":"495907","bugzilla_description":"CVE-2009-1188 xpdf/poppler: SplashBitmap integer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["poppler-0:0.5.4-4.4.el5_3.9","xpdf-1:3.00-22.el4_8.1","kdegraphics-7:3.3.1-15.el4_8.2","gpdf-0:2.8.2-7.7.2.el4_8.5","kdegraphics-7:3.5.4-15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1188.json"},{"CVE":"CVE-2008-1693","severity":"important","public_date":"2008-04-17T00:00:00Z","advisories":["RHSA-2008:0240","RHSA-2008:0262","RHSA-2008:0239","RHSA-2008:0238"],"bugzilla":"441722","bugzilla_description":"CVE-2008-1693 xpdf: embedded font vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xpdf-1:3.00-16.el4","poppler-0:0.5.4-4.4.el5_1","gpdf-0:2.8.2-7.7.2","kdegraphics-7:3.3.1-9.el4_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1693.json"},{"CVE":"CVE-2007-4352","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1022","RHSA-2007:1021","RHSA-2007:1027","RHSA-2007:1026","RHSA-2007:1025","RHSA-2007:1024","RHSA-2007:1029","RHSA-2007:1030"],"bugzilla":"345101","bugzilla_description":"CVE-2007-4352 xpdf memory corruption in DCTStream::readProgressiveDataUnit()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","kdegraphics-7:3.3.1-6.el4_5","xpdf-1:2.02-11.el3","xpdf-1:3.00-14.el4","gpdf-0:2.8.2-7.7.1","cups-1:1.2.4-11.14.el5_1.3","tetex-0:2.0.2-22.0.1.EL4.10","tetex-0:3.0-33.2.el5_1.2","poppler-0:0.5.4-4.3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4352.json"},{"CVE":"CVE-2007-5392","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1022","RHSA-2007:1021","RHSA-2007:1027","RHSA-2007:1026","RHSA-2007:1025","RHSA-2007:1024","RHSA-2007:1029","RHSA-2007:1030"],"bugzilla":"345111","bugzilla_description":"CVE-2007-5392 xpdf buffer overflow in DCTStream::reset()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","kdegraphics-7:3.3.1-6.el4_5","xpdf-1:2.02-11.el3","xpdf-1:3.00-14.el4","gpdf-0:2.8.2-7.7.1","cups-1:1.2.4-11.14.el5_1.3","tetex-0:2.0.2-22.0.1.EL4.10","tetex-0:3.0-33.2.el5_1.2","poppler-0:0.5.4-4.3.el5_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5392.json"},{"CVE":"CVE-2007-5393","severity":"important","public_date":"2007-11-07T00:00:00Z","advisories":["RHSA-2007:1023","RHSA-2007:1022","RHSA-2007:1021","RHSA-2007:1031","RHSA-2007:1027","RHSA-2007:1026","RHSA-2007:1025","RHSA-2007:1024","RHSA-2007:1029","RHSA-2007:1028","RHSA-2007:1030","RHSA-2007:1051"],"bugzilla":"345121","bugzilla_description":"CVE-2007-5393 xpdf buffer overflow in CCITTFaxStream::lookChar()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tetex-0:1.0.7-38.5E.12","xpdf-1:2.02-11.el3","gpdf-0:2.8.2-7.7.1","cups-1:1.2.4-11.14.el5_1.3","cups-1:1.1.17-13.3.46","poppler-0:0.5.4-4.3.el5_1","cups-1:1.1.22-0.rc1.9.20.2.el4_5.2","kdegraphics-7:3.3.1-6.el4_5","xpdf-1:3.00-14.el4","xpdf-1:0.92-19.el2","tetex-0:2.0.2-22.0.1.EL4.10","tetex-0:3.0-33.2.el5_1.2","kdegraphics-7:3.5.4-5.el5_1","tetex-0:1.0.7-67.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5393.json"},{"CVE":"CVE-2007-3387","severity":"important","public_date":"2007-07-28T00:00:00Z","advisories":["RHSA-2007:0729","RHSA-2007:0730","RHSA-2007:0732","RHSA-2007:0731","RHSA-2007:0720","RHSA-2007:0735"],"bugzilla":"248194","bugzilla_description":"CVE-2007-3387 xpdf integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["xpdf-1:3.00-12.RHEL4","tetex-0:1.0.7-38.5E.11","cups-1:1.1.22-0.rc1.9.20.2","gpdf-0:2.8.2-7.7","cups-1:1.1.17-13.3.45","cups-1:1.2.4-11.5.3.el5","tetex-0:2.0.2-22.0.1.EL4.8","kdegraphics-7:3.5.4-2.el5","kdegraphics-7:3.3.1-4.RHEL4","tetex-0:3.0-33.1.el5","poppler-0:0.5.4-4.1.el5","xpdf-1:2.02-10.RHEL3","tetex-0:1.0.7-67.10","xpdf-1:0.92-18.RHEL2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3387.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/popt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/popt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/popt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/popt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/popt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/popt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/portreserve_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/portreserve_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/portreserve_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-cdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-cdb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-cdb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-ldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-ldap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-ldap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-pcre_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-pcre_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-pcre_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-perl-scripts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-perl-scripts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-perl-scripts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-pgsql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-pgsql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-pgsql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-sqlite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-sqlite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix-sqlite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix_security_api_results.json
new file mode 100644
index 0000000..c2b2fd7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postfix_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12063","severity":null,"public_date":"2020-04-24T00:00:00Z","advisories":[],"bugzilla":"1848850","bugzilla_description":"CVE-2020-12063 postfix: an attacker may send an email from an arbitrary-looking sender via a homoglyph attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12063.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-10140","severity":"moderate","public_date":"2017-06-11T00:00:00Z","advisories":["RHSA-2019:0366"],"bugzilla":"1464032","bugzilla_description":"CVE-2017-10140 libdb: Reads DB_CONFIG from the current working directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10140.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2011-1720","severity":"moderate","public_date":"2011-05-09T00:00:00Z","advisories":["RHSA-2011:0843"],"bugzilla":"699035","bugzilla_description":"CVE-2011-1720 postfix (smtpd): Crash due to improper management of SASL handlers for SMTP sessions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["postfix-2:2.2.10-1.5.el4","postfix-2:2.6.6-2.2.el6_1","postfix-2:2.3.3-2.3.el5_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1720.json"},{"CVE":"CVE-2011-0411","severity":"moderate","public_date":"2011-03-05T00:00:00Z","advisories":["RHSA-2011:0422","RHSA-2011:0423"],"bugzilla":"674814","bugzilla_description":"CVE-2011-0411 postfix: SMTP commands injection during plaintext to TLS session switch","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["postfix-2:2.6.6-2.1.el6_0","postfix-2:2.3.3-2.2.el5_6","postfix-2:2.2.10-1.4.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0411.json"},{"CVE":"CVE-2008-2936","severity":"moderate","public_date":"2008-08-14T00:00:00Z","advisories":["RHSA-2008:0839"],"bugzilla":"456314","bugzilla_description":"CVE-2008-2936 postfix privilege escalation flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postfix-2:2.3.3-2.1.el5_2","postfix-2:2.0.16-14.1.RHEL3","postfix-2:2.2.10-1.2.1.el4_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2936.json"},{"CVE":"CVE-2008-2937","severity":"low","public_date":"2008-08-14T00:00:00Z","advisories":["RHSA-2011:0422"],"bugzilla":"456347","bugzilla_description":"CVE-2008-2937 postfix improper mailbox permissions","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["postfix-2:2.3.3-2.2.el5_6","postfix-2:2.2.10-1.4.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2937.json"},{"CVE":"CVE-2005-0337","severity":"low","public_date":"2005-01-31T00:00:00Z","advisories":["RHSA-2005:152"],"bugzilla":"1617510","bugzilla_description":"CVE-2005-0337 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postfix-2:2.1.5-4.2.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0337.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgres-decoderbufs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgres-decoderbufs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgres-decoderbufs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-contrib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-contrib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-contrib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-jdbc-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-jdbc-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-jdbc-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-jdbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-jdbc_security_api_results.json
new file mode 100644
index 0000000..540584c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-jdbc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13692","severity":"important","public_date":"2020-06-04T00:00:00Z","advisories":["RHSA-2020:3005","RHSA-2020:3248","RHSA-2020:3675","RHSA-2020:3285","RHSA-2020:3176","RHSA-2020:3286","RHSA-2020:3283","RHSA-2020:3284","RHSA-2020:3209","RHSA-2020:3678"],"bugzilla":"1852985","bugzilla_description":"CVE-2020-13692 postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["postgresql-jdbc-0:9.2.1002-8.el7_8","postgresql-jdbc-0:8.4.704-4.el6_10","postgresql-jdbc-0:42.2.3-3.el8_0","postgresql-jdbc-0:42.2.3-3.el8_1","postgresql-jdbc-0:42.2.3-3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13692.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-10936","severity":"low","public_date":"2018-08-27T00:00:00Z","advisories":[],"bugzilla":"1622225","bugzilla_description":"CVE-2018-10936 PostgreSQL: Postgres JDBC driver does not perform host name validation by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2012-1618","severity":null,"public_date":"2012-03-25T00:00:00Z","advisories":[],"bugzilla":"807394","bugzilla_description":"CVE-2012-1618 postgresql-jdbc: SQL injection due improper escaping of JDBC statement parameters","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1618.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-odbc-tests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-odbc-tests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-odbc-tests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-odbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-odbc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-odbc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-plperl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-plperl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-plperl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-plpython3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-plpython3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-plpython3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-pltcl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-pltcl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-pltcl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-server-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-server-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-server-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-test-rpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-test-rpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-test-rpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-upgrade-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-upgrade-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-upgrade-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-upgrade_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-upgrade_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql-upgrade_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql_security_api_results.json
new file mode 100644
index 0000000..16b59a9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/postgresql_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14349","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":["RHSA-2020:3669"],"bugzilla":"1865744","bugzilla_description":"CVE-2020-14349 postgresql: Uncontrolled search path element in logical replication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["postgresql:10-8020020200825115746.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14349.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-14350","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":["RHSA-2020:4295","RHSA-2020:3669"],"bugzilla":"1865746","bugzilla_description":"CVE-2020-14350 postgresql: Uncontrolled search path element in CREATE EXTENSION","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["postgresql:10-8020020200825115746.4cda2c84","rh-postgresql96-postgresql-0:9.6.19-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14350.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2020-13692","severity":"important","public_date":"2020-06-04T00:00:00Z","advisories":["RHSA-2020:3005","RHSA-2020:3248","RHSA-2020:3675","RHSA-2020:3285","RHSA-2020:3176","RHSA-2020:3286","RHSA-2020:3283","RHSA-2020:3284","RHSA-2020:3209","RHSA-2020:3678"],"bugzilla":"1852985","bugzilla_description":"CVE-2020-13692 postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["postgresql-jdbc-0:9.2.1002-8.el7_8","postgresql-jdbc-0:8.4.704-4.el6_10","postgresql-jdbc-0:42.2.3-3.el8_0","postgresql-jdbc-0:42.2.3-3.el8_1","postgresql-jdbc-0:42.2.3-3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13692.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2020-1720","severity":"low","public_date":"2020-02-13T00:00:00Z","advisories":["RHSA-2020:0980","RHSA-2020:4295","RHBA-2020:2396","RHSA-2020:3669"],"bugzilla":"1798852","bugzilla_description":"CVE-2020-1720 postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["postgresql:10-8020020200825115746.4cda2c84","rh-postgresql10-postgresql-0:10.12-2.el7","rh-postgresql96-postgresql-0:9.6.19-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-1707","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:0694","RHSA-2020:0617","RHSA-2020:0681","RHSA-2020:0801"],"bugzilla":"1793301","bugzilla_description":"CVE-2020-1707 openshift/postgresql-apb: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift4/postgres-apb:v4.3.5-202003020549","openshift4/apb-base:v4.2.21-202002240343","openshift3/postgresql-apb:v3.11.188-4","openshift4/apb-base:v4.1.37-202003021622"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1707.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-10208","severity":"moderate","public_date":"2019-08-08T00:00:00Z","advisories":["RHSA-2020:4295","RHSA-2020:3669"],"bugzilla":"1734416","bugzilla_description":"CVE-2019-10208 postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":["postgresql:10-8020020200825115746.4cda2c84","rh-postgresql96-postgresql-0:9.6.19-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10208.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10209","severity":"low","public_date":"2019-08-08T00:00:00Z","advisories":[],"bugzilla":"1734447","bugzilla_description":"CVE-2019-10209 postgresql: Memory disclosure in cross-type comparison for hashed subplan","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10209.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-10210","severity":"moderate","public_date":"2019-08-08T00:00:00Z","advisories":[],"bugzilla":"1734453","bugzilla_description":"CVE-2019-10210 postgresql: Windows installer writes superuser password to unprotected temporary file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10210.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-10211","severity":"moderate","public_date":"2019-08-08T00:00:00Z","advisories":[],"bugzilla":"1734461","bugzilla_description":"CVE-2019-10211 postgresql: Windows installer bundled OpenSSL executes code from unprotected directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10211.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10164","severity":"moderate","public_date":"2019-06-20T00:00:00Z","advisories":["RHSA-2020:0980","RHEA-2020:0343","RHSA-2020:3669"],"bugzilla":"1719698","bugzilla_description":"CVE-2019-10164 postgresql: Stack-based buffer overflow via setting a password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libpq-0:12.1-3.el8","postgresql:10-8020020200825115746.4cda2c84","rh-postgresql10-postgresql-0:10.12-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10127","severity":"moderate","public_date":"2019-05-09T00:00:00Z","advisories":[],"bugzilla":"1707098","bugzilla_description":"CVE-2019-10127 postgresql: BigSQL installer does not clear permissive ACL entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10128","severity":"moderate","public_date":"2019-05-09T00:00:00Z","advisories":[],"bugzilla":"1707102","bugzilla_description":"CVE-2019-10128 postgresql: EnterpriseDB installer does not clear permissive ACL entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10128.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-10129","severity":"moderate","public_date":"2019-05-09T00:00:00Z","advisories":[],"bugzilla":"1707106","bugzilla_description":"CVE-2019-10129 postgresql: Memory disclosure in partition routing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10129.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10130","severity":"low","public_date":"2019-05-09T00:00:00Z","advisories":["RHSA-2020:4295","RHSA-2020:3669"],"bugzilla":"1707109","bugzilla_description":"CVE-2019-10130 postgresql: Selectivity estimators bypass row security policies","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["postgresql:10-8020020200825115746.4cda2c84","rh-postgresql96-postgresql-0:9.6.19-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10130.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-9193","severity":null,"public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1695982","bugzilla_description":"CVE-2019-9193 postgresql: Command injection via \"COPY TO/FROM PROGRAM\" function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-16850","severity":"important","public_date":"2018-11-08T00:00:00Z","advisories":["RHSA-2018:3757"],"bugzilla":"1645937","bugzilla_description":"CVE-2018-16850 postgresql: SQL injection in pg_upgrade and pg_dump, via CREATE TRIGGER ... REFERENCING","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":["rh-postgresql10-postgresql-0:10.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16850.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-10936","severity":"low","public_date":"2018-08-27T00:00:00Z","advisories":[],"bugzilla":"1622225","bugzilla_description":"CVE-2018-10936 PostgreSQL: Postgres JDBC driver does not perform host name validation by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-10915","severity":"important","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2557","RHSA-2018:2511","RHSA-2018:2566","RHSA-2018:2643","RHSA-2018:2565"],"bugzilla":"1609891","bugzilla_description":"CVE-2018-10915 postgresql: Certain host connection parameters defeat client-side security defenses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665->(CWE-200|CWE-89)","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","postgresql-0:9.2.24-1.el7_5","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rhvm-appliance-0:4.2-20180828.0.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10915.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2018-10925","severity":"important","public_date":"2018-08-09T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566","RHSA-2018:2565"],"bugzilla":"1612619","bugzilla_description":"CVE-2018-10925 postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-1115","severity":"low","public_date":"2018-05-10T00:00:00Z","advisories":["RHSA-2018:2566","RHSA-2018:2565"],"bugzilla":"1573276","bugzilla_description":"CVE-2018-1115 postgresql: Too-permissive access control list on function pg_logfile_rotate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6","rh-postgresql10-postgresql-0:10.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2018-1058","severity":"moderate","public_date":"2018-03-01T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1547044","bugzilla_description":"CVE-2018-1058 postgresql: Uncontrolled search path element in pg_dump and other client applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1058.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-1052","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1539613","bugzilla_description":"CVE-2018-1052 postgresql: Memory disclosure in table partitioning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1052.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1053","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":["RHSA-2018:3816","RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1539619","bugzilla_description":"CVE-2018-1053 postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["postgresql96-0:9.6.10-1PGDG.el7at","rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-15097","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2017:3405","RHSA-2017:3403","RHSA-2017:3404","RHSA-2017:3402"],"bugzilla":"1508985","bugzilla_description":"CVE-2017-15097 postgresql: Start scripts permit database administrator to modify root-owned files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["rh-postgresql95-postgresql-0:9.5.9-4.el6","rh-postgresql96-postgresql-0:9.6.5-2.el6","rh-postgresql95-postgresql-0:9.5.9-4.el7","postgresql-0:9.2.23-3.el7_4","rh-postgresql96-postgresql-0:9.6.5-2.el7","rh-postgresql94-postgresql-0:9.4.14-2.el6","rh-postgresql94-postgresql-0:9.4.14-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15097.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12172","severity":"moderate","public_date":"2017-11-09T00:00:00Z","advisories":["RHSA-2017:3405","RHSA-2017:3403","RHSA-2017:3404","RHSA-2017:3402"],"bugzilla":"1498394","bugzilla_description":"CVE-2017-12172 postgresql: Start scripts permit database administrator to modify root-owned files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["rh-postgresql95-postgresql-0:9.5.9-4.el6","rh-postgresql96-postgresql-0:9.6.5-2.el6","rh-postgresql95-postgresql-0:9.5.9-4.el7","postgresql-0:9.2.23-3.el7_4","rh-postgresql96-postgresql-0:9.6.5-2.el7","rh-postgresql94-postgresql-0:9.4.14-2.el6","rh-postgresql94-postgresql-0:9.4.14-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12172.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-15098","severity":"moderate","public_date":"2017-11-09T00:00:00Z","advisories":["RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1508820","bugzilla_description":"CVE-2017-15098 postgresql: Memory disclosure in JSON functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15098.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-15099","severity":"low","public_date":"2017-11-09T00:00:00Z","advisories":["RHSA-2018:2511","RHSA-2018:2566"],"bugzilla":"1508823","bugzilla_description":"CVE-2017-15099 postgresql: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["rh-postgresql95-postgresql-0:9.5.14-1.el7","rh-postgresql95-postgresql-0:9.5.14-1.el6","rh-postgresql96-postgresql-0:9.6.10-1.el7","rh-postgresql96-postgresql-0:9.6.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15099.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2017-7546","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2677","RHSA-2017:2678","RHSA-2017:2728","RHSA-2017:2860"],"bugzilla":"1477184","bugzilla_description":"CVE-2017-7546 postgresql: Empty password accepted in some authentication methods","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["postgresql-0:9.2.23-1.el7_4","rh-postgresql95-postgresql-0:9.5.9-1.el6","rh-postgresql95-postgresql-0:9.5.9-1.el7","rh-postgresql94-postgresql-0:9.4.14-1.el6","postgresql-0:8.4.20-8.el6_9","rh-postgresql94-postgresql-0:9.4.14-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7546.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7547","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2677","RHSA-2017:2678","RHSA-2017:2728"],"bugzilla":"1477185","bugzilla_description":"CVE-2017-7547 postgresql: pg_user_mappings view discloses passwords to users lacking server privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["postgresql-0:9.2.23-1.el7_4","rh-postgresql95-postgresql-0:9.5.9-1.el6","rh-postgresql95-postgresql-0:9.5.9-1.el7","rh-postgresql94-postgresql-0:9.4.14-1.el6","rh-postgresql94-postgresql-0:9.4.14-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7547.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7548","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2677","RHSA-2017:2678"],"bugzilla":"1477187","bugzilla_description":"CVE-2017-7548 postgresql: lo_put() function ignores ACLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["rh-postgresql95-postgresql-0:9.5.9-1.el6","rh-postgresql95-postgresql-0:9.5.9-1.el7","rh-postgresql94-postgresql-0:9.4.14-1.el6","rh-postgresql94-postgresql-0:9.4.14-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-7484","severity":"moderate","public_date":"2017-05-11T00:00:00Z","advisories":["RHSA-2017:1677","RHSA-2017:2425","RHSA-2017:1678","RHSA-2017:1838","RHSA-2017:1983"],"bugzilla":"1448078","bugzilla_description":"CVE-2017-7484 postgresql: Selectivity estimators bypass SELECT privilege checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["postgresql-0:9.2.21-1.el7","rh-postgresql95-postgresql-0:9.5.7-2.el6","rh-postgresql95-postgresql-0:9.5.7-2.el7","rh-postgresql94-postgresql-0:9.4.12-1.el6","rh-postgresql94-postgresql-0:9.4.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7484.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-7485","severity":"moderate","public_date":"2017-05-11T00:00:00Z","advisories":["RHSA-2017:1677","RHSA-2017:2425","RHSA-2017:1678","RHSA-2017:1838"],"bugzilla":"1448086","bugzilla_description":"CVE-2017-7485 postgresql: libpq ignores PGREQUIRESSL environment variable","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-390","affected_packages":["rh-postgresql95-postgresql-0:9.5.7-2.el6","rh-postgresql95-postgresql-0:9.5.7-2.el7","rh-postgresql94-postgresql-0:9.4.12-1.el6","rh-postgresql94-postgresql-0:9.4.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-7486","severity":"moderate","public_date":"2017-05-11T00:00:00Z","advisories":["RHSA-2017:1677","RHSA-2017:2425","RHSA-2017:1678","RHSA-2017:1838","RHSA-2017:1983"],"bugzilla":"1448089","bugzilla_description":"CVE-2017-7486 postgresql: pg_user_mappings view discloses foreign server passwords","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["postgresql-0:9.2.21-1.el7","rh-postgresql95-postgresql-0:9.5.7-2.el6","rh-postgresql95-postgresql-0:9.5.7-2.el7","rh-postgresql94-postgresql-0:9.4.12-1.el6","rh-postgresql94-postgresql-0:9.4.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-7070","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":[],"bugzilla":"1627754","bugzilla_description":"CVE-2016-7070 Ansible Tower: PostgreSQL privilege escalation in Tower-deployed setups","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7070.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2016-7048","severity":"important","public_date":"2016-09-22T00:00:00Z","advisories":[],"bugzilla":"1378043","bugzilla_description":"CVE-2016-7048 postgresql: Interactive installer downloads and executes software via plain HTTP","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-494","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5423","severity":"moderate","public_date":"2016-08-11T00:00:00Z","advisories":["RHSA-2016:1781","RHSA-2017:2425","RHSA-2016:2606","RHSA-2016:1820","RHSA-2016:1821"],"bugzilla":"1364001","bugzilla_description":"CVE-2016-5423 postgresql: CASE/WHEN with inlining can cause untrusted pointer dereference","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-822","affected_packages":["postgresql92-postgresql-0:9.2.18-1.el7","postgresql92-postgresql-0:9.2.18-1.el6","rh-postgresql95-postgresql-0:9.5.4-1.el7","rh-postgresql95-postgresql-0:9.5.4-1.el6","rh-postgresql94-postgresql-0:9.4.9-1.el7","postgresql-0:9.2.18-1.el7","rh-postgresql94-postgresql-0:9.4.9-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5423.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2016-5424","severity":"moderate","public_date":"2016-08-11T00:00:00Z","advisories":["RHSA-2016:1781","RHSA-2017:2425","RHSA-2016:2606","RHSA-2016:1820","RHSA-2016:1821"],"bugzilla":"1364002","bugzilla_description":"CVE-2016-5424 postgresql: privilege escalation via crafted database and role names","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["postgresql92-postgresql-0:9.2.18-1.el7","postgresql92-postgresql-0:9.2.18-1.el6","rh-postgresql95-postgresql-0:9.5.4-1.el7","rh-postgresql95-postgresql-0:9.5.4-1.el6","rh-postgresql94-postgresql-0:9.4.9-1.el7","postgresql-0:9.2.18-1.el7","rh-postgresql94-postgresql-0:9.4.9-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5424.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2016-2193","severity":"moderate","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1319806","bugzilla_description":"CVE-2016-2193 postgresql: row security policies in prepared statements disregard user ID changes","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2193.json"},{"CVE":"CVE-2016-3065","severity":"moderate","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1319810","bugzilla_description":"CVE-2016-3065 postgresql: memory disclosure in pageinspect functions","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3065.json"},{"CVE":"CVE-2016-0773","severity":"important","public_date":"2016-02-11T00:00:00Z","advisories":["RHSA-2016:0348","RHSA-2016:0349","RHSA-2016:1060","RHSA-2016:0346","RHSA-2016:0347"],"bugzilla":"1303832","bugzilla_description":"CVE-2016-0773 postgresql: case insensitive range handling integer overflow leading to buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rh-postgresql94-postgresql-0:9.4.6-1.el7","rh-postgresql94-postgresql-0:9.4.6-1.el6","postgresql-0:9.2.15-1.el7_2","postgresql-0:8.4.20-5.el6_7","postgresql92-postgresql-0:9.2.15-2.el6","postgresql92-postgresql-0:9.2.15-1.el7","postgresql92-postgresql-0:9.2.15-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0773.json"},{"CVE":"CVE-2015-5288","severity":"moderate","public_date":"2015-10-08T00:00:00Z","advisories":["RHSA-2015:2077","RHSA-2015:2078","RHSA-2015:2081","RHSA-2015:2083"],"bugzilla":"1270306","bugzilla_description":"CVE-2015-5288 postgresql: limited memory disclosure flaw in crypt()","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-131->CWE-200","affected_packages":["postgresql92-postgresql-0:9.2.14-1.el7","postgresql-0:8.4.20-4.el6_7","postgresql92-postgresql-0:9.2.14-1.el6","postgresql-0:9.2.14-1.el7_1","rh-postgresql94-postgresql-0:9.4.5-1.el6","rh-postgresql94-postgresql-0:9.4.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5288.json"},{"CVE":"CVE-2015-5289","severity":"moderate","public_date":"2015-10-08T00:00:00Z","advisories":["RHSA-2015:2077","RHSA-2015:2078","RHSA-2015:2083"],"bugzilla":"1270312","bugzilla_description":"CVE-2015-5289 postgresql: stack overflow DoS when parsing json or jsonb inputs","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-131->CWE-674","affected_packages":["postgresql92-postgresql-0:9.2.14-1.el7","postgresql92-postgresql-0:9.2.14-1.el6","postgresql-0:9.2.14-1.el7_1","rh-postgresql94-postgresql-0:9.4.5-1.el6","rh-postgresql94-postgresql-0:9.4.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5289.json"},{"CVE":"CVE-2015-3165","severity":"moderate","public_date":"2015-05-22T00:00:00Z","advisories":["RHSA-2015:1196","RHSA-2015:1195","RHSA-2015:1194"],"bugzilla":"1221537","bugzilla_description":"CVE-2015-3165 postgresql: double-free after authentication timeout","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["postgresql-0:9.2.13-1.ael7b_1","rh-postgresql94-postgresql-0:9.4.4-1.el6","rh-postgresql94-postgresql-0:9.4.4-1.el7","postgresql92-postgresql-0:9.2.13-1.el7","postgresql92-postgresql-0:9.2.13-1.el6","postgresql-0:8.4.20-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3165.json"},{"CVE":"CVE-2015-3166","severity":"low","public_date":"2015-05-22T00:00:00Z","advisories":["RHSA-2015:1196","RHSA-2015:1195","RHSA-2015:1194"],"bugzilla":"1221539","bugzilla_description":"CVE-2015-3166 postgresql: unanticipated errors from the standard library","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-391","affected_packages":["postgresql-0:9.2.13-1.ael7b_1","rh-postgresql94-postgresql-0:9.4.4-1.el6","rh-postgresql94-postgresql-0:9.4.4-1.el7","postgresql92-postgresql-0:9.2.13-1.el7","postgresql92-postgresql-0:9.2.13-1.el6","postgresql-0:8.4.20-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3166.json"},{"CVE":"CVE-2015-3167","severity":"low","public_date":"2015-05-22T00:00:00Z","advisories":["RHSA-2015:1196","RHSA-2015:1195","RHSA-2015:1194"],"bugzilla":"1221541","bugzilla_description":"CVE-2015-3167 postgresql: pgcrypto has multiple error messages for decryption with an incorrect key.","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-209","affected_packages":["postgresql-0:9.2.13-1.ael7b_1","rh-postgresql94-postgresql-0:9.4.4-1.el6","rh-postgresql94-postgresql-0:9.4.4-1.el7","postgresql92-postgresql-0:9.2.13-1.el7","postgresql92-postgresql-0:9.2.13-1.el6","postgresql-0:8.4.20-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3167.json"},{"CVE":"CVE-2015-0241","severity":"moderate","public_date":"2015-02-16T00:00:00Z","advisories":["RHSA-2015:0856","RHSA-2015:0699","RHSA-2015:0750"],"bugzilla":"1188684","bugzilla_description":"CVE-2015-0241 postgresql: buffer overflow in the to_char() function","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["postgresql-0:9.2.10-2.el7_1","postgresql-0:8.4.20-2.el6_6","postgresql92-postgresql-0:9.2.10-2.el6","postgresql92-postgresql-0:9.2.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0241.json"},{"CVE":"CVE-2015-0242","severity":"moderate","public_date":"2015-02-16T00:00:00Z","advisories":[],"bugzilla":"1188688","bugzilla_description":"CVE-2015-0242 postgresql: buffer overflow flaws in replacement *printf() functions","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0242.json"},{"CVE":"CVE-2015-0243","severity":"moderate","public_date":"2015-02-16T00:00:00Z","advisories":["RHSA-2015:0856","RHSA-2015:0699","RHSA-2015:0750"],"bugzilla":"1188689","bugzilla_description":"CVE-2015-0243 postgresql: buffer overflow flaws in contrib/pgcrypto","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["postgresql-0:9.2.10-2.el7_1","postgresql-0:8.4.20-2.el6_6","postgresql92-postgresql-0:9.2.10-2.el6","postgresql92-postgresql-0:9.2.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0243.json"},{"CVE":"CVE-2015-0244","severity":"low","public_date":"2015-02-16T00:00:00Z","advisories":["RHSA-2015:0856","RHSA-2015:0699","RHSA-2015:0750"],"bugzilla":"1188694","bugzilla_description":"CVE-2015-0244 postgresql: loss of frontend/backend protocol synchronization after an error","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":"CWE-662->CWE-300","affected_packages":["postgresql-0:9.2.10-2.el7_1","postgresql-0:8.4.20-2.el6_6","postgresql92-postgresql-0:9.2.10-2.el6","postgresql92-postgresql-0:9.2.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0244.json"},{"CVE":"CVE-2014-8161","severity":"moderate","public_date":"2015-02-05T00:00:00Z","advisories":["RHSA-2015:0856","RHSA-2015:0699","RHSA-2015:0750"],"bugzilla":"1182043","bugzilla_description":"CVE-2014-8161 postgresql: information leak through constraint violation errors","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-662->CWE-300","affected_packages":["postgresql-0:9.2.10-2.el7_1","postgresql-0:8.4.20-2.el6_6","postgresql92-postgresql-0:9.2.10-2.el6","postgresql92-postgresql-0:9.2.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8161.json"},{"CVE":"CVE-2014-0060","severity":"moderate","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0211","RHSA-2014:0469","RHSA-2014:0249"],"bugzilla":"1065219","bugzilla_description":"CVE-2014-0060 postgresql: SET ROLE without ADMIN OPTION allows adding and removing group members","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.23-10.el5_10","postgresql84-0:8.4.20-1.el5_10","postgresql92-postgresql-0:9.2.7-1.1.el6","postgresql-0:8.4.20-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0060.json"},{"CVE":"CVE-2014-0061","severity":"moderate","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0211","RHSA-2014:0469","RHSA-2014:0249"],"bugzilla":"1065220","bugzilla_description":"CVE-2014-0061 postgresql: privilege escalation via procedural language validator functions","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.23-10.el5_10","postgresql84-0:8.4.20-1.el5_10","postgresql92-postgresql-0:9.2.7-1.1.el6","postgresql-0:8.4.20-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0061.json"},{"CVE":"CVE-2014-0062","severity":"moderate","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0211","RHSA-2014:0469","RHSA-2014:0249"],"bugzilla":"1065222","bugzilla_description":"CVE-2014-0062 postgresql: CREATE INDEX race condition possibly leading to privilege escalation","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["postgresql-0:8.1.23-10.el5_10","postgresql84-0:8.4.20-1.el5_10","postgresql92-postgresql-0:9.2.7-1.1.el6","postgresql-0:8.4.20-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0062.json"},{"CVE":"CVE-2014-0063","severity":"important","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0211","RHSA-2014:0469","RHSA-2014:0249"],"bugzilla":"1065226","bugzilla_description":"CVE-2014-0063 postgresql: stack-based buffer overflow in datetime input/output","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["postgresql-0:8.1.23-10.el5_10","postgresql84-0:8.4.20-1.el5_10","postgresql92-postgresql-0:9.2.7-1.1.el6","postgresql-0:8.4.20-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0063.json"},{"CVE":"CVE-2014-0064","severity":"important","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0211","RHSA-2014:0469","RHSA-2014:0249"],"bugzilla":"1065230","bugzilla_description":"CVE-2014-0064 postgresql: integer overflows leading to buffer overflows","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["postgresql-0:8.1.23-10.el5_10","postgresql84-0:8.4.20-1.el5_10","postgresql92-postgresql-0:9.2.7-1.1.el6","postgresql-0:8.4.20-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0064.json"},{"CVE":"CVE-2014-0065","severity":"important","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0211","RHSA-2014:0469","RHSA-2014:0249"],"bugzilla":"1065235","bugzilla_description":"CVE-2014-0065 postgresql: possible buffer overflow flaws","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.23-10.el5_10","postgresql84-0:8.4.20-1.el5_10","postgresql92-postgresql-0:9.2.7-1.1.el6","postgresql-0:8.4.20-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0065.json"},{"CVE":"CVE-2014-0066","severity":"moderate","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0211","RHSA-2014:0469","RHSA-2014:0249"],"bugzilla":"1065236","bugzilla_description":"CVE-2014-0066 postgresql: NULL pointer dereference","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["postgresql-0:8.1.23-10.el5_10","postgresql84-0:8.4.20-1.el5_10","postgresql92-postgresql-0:9.2.7-1.1.el6","postgresql-0:8.4.20-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0066.json"},{"CVE":"CVE-2014-0067","severity":"low","public_date":"2014-02-17T00:00:00Z","advisories":[],"bugzilla":"1065863","bugzilla_description":"CVE-2014-0067 postgresql: Vulnerability during \"make check\"","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0067.json"},{"CVE":"CVE-2014-2669","severity":"important","public_date":"2014-02-17T00:00:00Z","advisories":["RHSA-2014:0221","RHSA-2014:0469"],"bugzilla":"1082154","bugzilla_description":"CVE-2014-2669 postgresql: multiple integer overflows in hstore_io.c","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["postgresql92-postgresql-0:9.2.7-1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2669.json"},{"CVE":"CVE-2013-1899","severity":"important","public_date":"2013-04-04T00:00:00Z","advisories":["RHEA-2013:1487"],"bugzilla":"929223","bugzilla_description":"CVE-2013-1899 postgresql: Insecure switch parsing","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1899.json"},{"CVE":"CVE-2013-1900","severity":"low","public_date":"2013-04-04T00:00:00Z","advisories":["RHEA-2013:1487","RHSA-2013:1475"],"bugzilla":"929255","bugzilla_description":"CVE-2013-1900 postgresql: Improper randomization of pgcrypto functions (requiring random seed)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["postgresql84-0:8.4.18-1.el5_10","postgresql-0:8.4.18-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1900.json"},{"CVE":"CVE-2013-1901","severity":"low","public_date":"2013-04-04T00:00:00Z","advisories":["RHEA-2013:1487"],"bugzilla":"929328","bugzilla_description":"CVE-2013-1901 postgresql: Improper user privilege check for on-line backups","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1901.json"},{"CVE":"CVE-2013-0255","severity":"moderate","public_date":"2013-02-07T00:00:00Z","advisories":["RHSA-2013:1475"],"bugzilla":"907892","bugzilla_description":"CVE-2013-0255 postgresql: array indexing error in enum_recv()","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":["postgresql84-0:8.4.18-1.el5_10","postgresql-0:8.4.18-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0255.json"},{"CVE":"CVE-2012-3488","severity":"moderate","public_date":"2012-08-17T00:00:00Z","advisories":["RHSA-2012:1263","RHSA-2012:1264"],"bugzilla":"849172","bugzilla_description":"CVE-2012-3488 postgresql (xml2 contrib module): XXE by applying XSL stylesheet to the document","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["postgresql-0:8.1.23-6.el5_8","postgresql84-0:8.4.13-1.el5_8","postgresql-0:8.4.13-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3488.json"},{"CVE":"CVE-2012-3489","severity":"low","public_date":"2012-08-17T00:00:00Z","advisories":["RHSA-2012:1263"],"bugzilla":"849173","bugzilla_description":"CVE-2012-3489 postgresql: File disclosure through XXE in xmlparse by DTD validation","cvss_score":2.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["postgresql84-0:8.4.13-1.el5_8","postgresql-0:8.4.13-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3489.json"},{"CVE":"CVE-2012-2143","severity":"moderate","public_date":"2012-05-30T00:00:00Z","advisories":["RHSA-2012:1036","RHSA-2012:1047","RHSA-2012:1046","RHSA-2012:1037"],"bugzilla":"816956","bugzilla_description":"CVE-2012-2143 BSD crypt(): DES encrypted password weakness","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["postgresql-0:8.1.23-5.el5_8","postgresql84-0:8.4.12-1.el5_8","postgresql-0:8.4.12-1.el6_2","php-0:5.3.3-14.el6_3","php53-0:5.3.3-13.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2143.json"},{"CVE":"CVE-2012-2655","severity":"low","public_date":"2012-05-30T00:00:00Z","advisories":["RHSA-2012:1037"],"bugzilla":"825995","bugzilla_description":"CVE-2012-2655 postgresql: Ability of database owners to install procedural languages via CREATE LANGUAGE found unsafe (DoS)","cvss_score":2.2,"cvss_scoring_vector":"AV:A/AC:L/Au:M/C:N/I:N/A:P","CWE":null,"affected_packages":["postgresql84-0:8.4.12-1.el5_8","postgresql-0:8.4.12-1.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2655.json"},{"CVE":"CVE-2012-1618","severity":null,"public_date":"2012-03-25T00:00:00Z","advisories":[],"bugzilla":"807394","bugzilla_description":"CVE-2012-1618 postgresql-jdbc: SQL injection due improper escaping of JDBC statement parameters","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1618.json"},{"CVE":"CVE-2012-0866","severity":"low","public_date":"2012-02-27T00:00:00Z","advisories":["RHSA-2012:0678","RHSA-2012:0677"],"bugzilla":"797222","bugzilla_description":"CVE-2012-0866 postgresql: Absent permission checks on trigger function to be called when creating a trigger","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.4.11-1.el6_2","postgresql-0:8.1.23-4.el5_8","postgresql84-0:8.4.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0866.json"},{"CVE":"CVE-2012-0867","severity":"low","public_date":"2012-02-27T00:00:00Z","advisories":["RHSA-2012:0678"],"bugzilla":"797915","bugzilla_description":"CVE-2012-0867 postgresql: MITM due improper x509_v3 CN validation during certificate verification","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["postgresql-0:8.4.11-1.el6_2","postgresql84-0:8.4.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0867.json"},{"CVE":"CVE-2012-0868","severity":"moderate","public_date":"2012-02-27T00:00:00Z","advisories":["RHSA-2012:0678","RHSA-2012:0677"],"bugzilla":"797917","bugzilla_description":"CVE-2012-0868 postgresql: SQL injection due unsanitized newline characters in object names","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["postgresql-0:8.4.11-1.el6_2","postgresql-0:8.1.23-4.el5_8","postgresql84-0:8.4.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0868.json"},{"CVE":"CVE-2011-2483","severity":"moderate","public_date":"2011-06-20T00:00:00Z","advisories":["RHSA-2011:1377","RHSA-2011:1378","RHSA-2011:1423"],"bugzilla":"715025","bugzilla_description":"CVE-2011-2483 crypt_blowfish: 8-bit character mishandling allows different password pairs to produce the same hash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["postgresql-0:7.4.30-3.el4","php53-0:5.3.3-1.el5_7.3","postgresql84-0:8.4.9-1.el5_7.1","postgresql-0:8.4.9-1.el6_1.1","postgresql-0:8.1.23-1.el5_7.2","php-0:5.3.3-3.el6_1.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2483.json"},{"CVE":"CVE-2010-4015","severity":"moderate","public_date":"2011-02-01T00:00:00Z","advisories":["RHSA-2011:0197","RHSA-2011:0198"],"bugzilla":"664402","bugzilla_description":"CVE-2010-4015 PostgreSQL: Stack-based buffer overflow by processing certain tokens from SQL query string when intarray module enabled","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["postgresql-0:8.4.7-1.el6_0.1","postgresql-0:7.4.30-1.el4_8.2","postgresql84-0:8.4.7-1.el5_6.1","postgresql-0:8.1.23-1.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4015.json"},{"CVE":"CVE-2010-3433","severity":"moderate","public_date":"2010-10-05T00:00:00Z","advisories":["RHSA-2010:0742","RHSA-2010:0908"],"bugzilla":"639371","bugzilla_description":"CVE-2010-3433 PostgreSQL (PL/Perl, PL/Tcl): SECURITY DEFINER function keyword bypass","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.22-1.el5_5.1","postgresql-0:7.4.30-1.el4_8.1","postgresql84-0:8.4.5-1.el5_5.1","postgresql-0:8.4.5-1.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3433.json"},{"CVE":"CVE-2010-1169","severity":"moderate","public_date":"2010-05-17T00:00:00Z","advisories":["RHSA-2010:0429","RHSA-2010:0428","RHSA-2010:0427","RHSA-2010:0430"],"bugzilla":"582615","bugzilla_description":"CVE-2010-1169 PostgreSQL: PL/Perl Intended restriction bypass","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.21-1.el5_5.1","postgresql84-0:8.4.4-1.el5_5.1","postgresql-0:7.4.29-1.el4_8.1","rh-postgresql-0:7.3.21-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1169.json"},{"CVE":"CVE-2010-1170","severity":"moderate","public_date":"2010-05-17T00:00:00Z","advisories":["RHSA-2010:0429","RHSA-2010:0428","RHSA-2010:0427","RHSA-2010:0430"],"bugzilla":"583072","bugzilla_description":"CVE-2010-1170 PostgreSQL: PL/Tcl Intended restriction bypass","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.21-1.el5_5.1","postgresql84-0:8.4.4-1.el5_5.1","postgresql-0:7.4.29-1.el4_8.1","rh-postgresql-0:7.3.21-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1170.json"},{"CVE":"CVE-2010-1975","severity":"low","public_date":"2010-05-17T00:00:00Z","advisories":["RHSA-2010:0429","RHSA-2010:0428","RHSA-2010:0430"],"bugzilla":"593870","bugzilla_description":"CVE-2010-1975 postgresql: improper privilege check during certain RESET ALL operations","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.21-1.el5_5.1","postgresql84-0:8.4.4-1.el5_5.1","postgresql-0:7.4.29-1.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1975.json"},{"CVE":"CVE-2010-0442","severity":"moderate","public_date":"2010-01-27T00:00:00Z","advisories":["RHSA-2010:0429","RHSA-2010:0428","RHSA-2010:0427"],"bugzilla":"559259","bugzilla_description":"CVE-2010-0442 postgresql: substring() negative length argument buffer overflow","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.21-1.el5_5.1","postgresql-0:7.4.29-1.el4_8.1","rh-postgresql-0:7.3.21-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0442.json"},{"CVE":"CVE-2009-4136","severity":"low","public_date":"2009-12-14T00:00:00Z","advisories":["RHSA-2010:0429","RHSA-2010:0428","RHSA-2010:0427"],"bugzilla":"546321","bugzilla_description":"CVE-2009-4136 postgresql: SQL privilege escalation via modifications to session-local state","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.21-1.el5_5.1","postgresql-0:7.4.29-1.el4_8.1","rh-postgresql-0:7.3.21-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4136.json"},{"CVE":"CVE-2010-0733","severity":"low","public_date":"2009-12-14T00:00:00Z","advisories":["RHSA-2010:0429","RHSA-2010:0428","RHSA-2010:0427"],"bugzilla":"546621","bugzilla_description":"CVE-2010-0733 postgresql: Integer overflow in hash table size calculation","cvss_score":2.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["postgresql-0:8.1.21-1.el5_5.1","postgresql-0:7.4.29-1.el4_8.1","rh-postgresql-0:7.3.21-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0733.json"},{"CVE":"CVE-2009-3230","severity":"moderate","public_date":"2009-09-09T00:00:00Z","advisories":["RHSA-2009:1461","RHSA-2009:1485","RHSA-2009:1484"],"bugzilla":"522085","bugzilla_description":"CVE-2009-3230 postgresql: SQL privilege escalation, incomplete fix for CVE-2007-6600","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["postgresql-0:7.4.26-1.el4_8.1","rh-postgresql-0:7.3.21-2","postgresql-0:8.1.18-2.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3230.json"},{"CVE":"CVE-2009-0922","severity":"low","public_date":"2009-02-27T00:00:00Z","advisories":["RHSA-2009:1067","RHSA-2009:1484"],"bugzilla":"488156","bugzilla_description":"CVE-2009-0922 postgresql: potential DoS due to conversion functions","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["postgresql-0:7.4.26-1.el4_8.1","postgresql-0:8.1.18-2.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0922.json"},{"CVE":"CVE-2007-4769","severity":"moderate","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0038","RHSA-2008:0040"],"bugzilla":"315231","bugzilla_description":"CVE-2007-4769 postgresql integer overflow in regex code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["postgresql-0:8.1.11-1.el5_1.1","postgresql-0:8.1.11-1.el4s1.1","postgresql-0:7.4.19-1.el4_6.1","postgresql-0:8.2.6-1.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4769.json"},{"CVE":"CVE-2007-4772","severity":"moderate","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0038","RHSA-2008:0134","RHSA-2008:0040","RHSA-2013:0122"],"bugzilla":"316511","bugzilla_description":"CVE-2007-4772 postgresql DoS via infinite loop in regex NFA optimization code","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["postgresql-0:8.1.11-1.el5_1.1","postgresql-0:8.1.11-1.el4s1.1","tcl-0:8.4.13-6.el5","tcltk-0:8.3.5-92.8","postgresql-0:7.4.19-1.el4_6.1","postgresql-0:8.2.6-1.el5s2","tcltk-0:8.3.3-75"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4772.json"},{"CVE":"CVE-2007-6067","severity":"low","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0038","RHSA-2008:0040","RHSA-2013:0122"],"bugzilla":"400931","bugzilla_description":"CVE-2007-6067 postgresql: tempory DoS caused by slow regex NFA cleanup","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.11-1.el5_1.1","postgresql-0:8.1.11-1.el4s1.1","tcl-0:8.4.13-6.el5","postgresql-0:7.4.19-1.el4_6.1","postgresql-0:8.2.6-1.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6067.json"},{"CVE":"CVE-2007-6600","severity":"moderate","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0038","RHSA-2008:0040","RHSA-2008:0039"],"bugzilla":"427127","bugzilla_description":"CVE-2007-6600 PostgreSQL privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.11-1.el5_1.1","postgresql-0:8.1.11-1.el4s1.1","postgresql-0:7.4.19-1.el4_6.1","rh-postgresql-0:7.3.21-1","postgresql-0:8.2.6-1.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6600.json"},{"CVE":"CVE-2007-6601","severity":"moderate","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0038","RHSA-2008:0040","RHSA-2008:0039"],"bugzilla":"427128","bugzilla_description":"CVE-2007-6601 PostgreSQL privilege escalation via dblink","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.11-1.el5_1.1","postgresql-0:8.1.11-1.el4s1.1","postgresql-0:7.4.19-1.el4_6.1","rh-postgresql-0:7.3.21-1","postgresql-0:8.2.6-1.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6601.json"},{"CVE":"CVE-2007-3278","severity":null,"public_date":"2007-06-16T00:00:00Z","advisories":["RHSA-2008:0038","RHSA-2008:0040","RHSA-2008:0039"],"bugzilla":"309141","bugzilla_description":"CVE-2007-3278 dblink allows proxying of database connections via 127.0.0.1","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.11-1.el5_1.1","postgresql-0:8.1.11-1.el4s1.1","postgresql-0:7.4.19-1.el4_6.1","rh-postgresql-0:7.3.21-1","postgresql-0:8.2.6-1.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3278.json"},{"CVE":"CVE-2007-2138","severity":"moderate","public_date":"2007-04-23T00:00:00Z","advisories":["RHSA-2007:0337","RHSA-2007:0336"],"bugzilla":"237682","bugzilla_description":"CVE-2007-2138 PostgreSQL security-definer function privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.9-1.el4s1.1","rh-postgresql-0:7.3.19-1","postgresql-0:8.1.9-1.el5","postgresql-0:7.4.17-1.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2138.json"},{"CVE":"CVE-2007-0556","severity":"moderate","public_date":"2007-02-05T00:00:00Z","advisories":["RHSA-2007:0067","RHSA-2007:0068"],"bugzilla":"1618270","bugzilla_description":"CVE-2007-0556 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.8-1.el5","postgresql-0:8.1.7-3.el4s1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0556.json"},{"CVE":"CVE-2007-0555","severity":"moderate","public_date":"2007-02-05T00:00:00Z","advisories":["RHSA-2007:0064","RHSA-2007:0067","RHSA-2007:0068"],"bugzilla":"1618367","bugzilla_description":"CVE-2007-0555 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.8-1.el5","postgresql-0:8.1.7-3.el4s1.1","rh-postgresql-0:7.3.18-1","postgresql-0:7.4.16-1.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0555.json"},{"CVE":"CVE-2006-5540","severity":"low","public_date":"2006-10-16T00:00:00Z","advisories":["RHSA-2007:0064","RHSA-2007:0067","RHSA-2007:0068"],"bugzilla":"1618217","bugzilla_description":"CVE-2006-5540 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.8-1.el5","postgresql-0:8.1.7-3.el4s1.1","rh-postgresql-0:7.3.18-1","postgresql-0:7.4.16-1.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5540.json"},{"CVE":"CVE-2006-5541","severity":"low","public_date":"2006-10-16T00:00:00Z","advisories":["RHSA-2007:0067","RHSA-2007:0068"],"bugzilla":"1618218","bugzilla_description":"CVE-2006-5541 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.8-1.el5","postgresql-0:8.1.7-3.el4s1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5541.json"},{"CVE":"CVE-2006-5542","severity":"low","public_date":"2006-10-16T00:00:00Z","advisories":["RHSA-2007:0067","RHSA-2007:0068"],"bugzilla":"212360","bugzilla_description":"CVE-2006-5540 New version fixes three different crash vulnerabilities","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:8.1.8-1.el5","postgresql-0:8.1.7-3.el4s1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5542.json"},{"CVE":"CVE-2006-0591","severity":"low","public_date":"2006-02-07T00:00:00Z","advisories":["RHSA-2006:0526"],"bugzilla":"1618012","bugzilla_description":"CVE-2006-0591 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.15-2","postgresql-0:7.4.13-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0591.json"},{"CVE":"CVE-2006-2313","severity":"important","public_date":"2005-05-23T00:00:00Z","advisories":["RHSA-2006:0526"],"bugzilla":"1618100","bugzilla_description":"CVE-2006-2313 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.15-2","postgresql-0:7.4.13-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2313.json"},{"CVE":"CVE-2006-2314","severity":"important","public_date":"2005-05-23T00:00:00Z","advisories":["RHSA-2006:0526"],"bugzilla":"1618101","bugzilla_description":"CVE-2006-2314 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.15-2","postgresql-0:7.4.13-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2314.json"},{"CVE":"CVE-2005-1409","severity":"moderate","public_date":"2005-05-02T00:00:00Z","advisories":["RHSA-2005:433"],"bugzilla":"1617632","bugzilla_description":"CVE-2005-1409 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:7.4.8-1.RHEL4.1","rh-postgresql-0:7.3.10-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1409.json"},{"CVE":"CVE-2005-1410","severity":"moderate","public_date":"2005-05-02T00:00:00Z","advisories":["RHSA-2005:433"],"bugzilla":"1617633","bugzilla_description":"CVE-2005-1410 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["postgresql-0:7.4.8-1.RHEL4.1","rh-postgresql-0:7.3.10-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1410.json"},{"CVE":"CVE-2005-0247","severity":null,"public_date":"2005-02-01T00:00:00Z","advisories":["RHSA-2005:138","RHSA-2005:141","RHSA-2005:150"],"bugzilla":"1617508","bugzilla_description":"CVE-2005-0247 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.9-2","postgresql-0:7.4.7-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0247.json"},{"CVE":"CVE-2005-0244","severity":"moderate","public_date":"2005-01-27T00:00:00Z","advisories":["RHSA-2005:138","RHSA-2005:141"],"bugzilla":"1617505","bugzilla_description":"CVE-2005-0244 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.9-2","postgresql-0:7.4.7-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0244.json"},{"CVE":"CVE-2005-0246","severity":"low","public_date":"2005-01-27T00:00:00Z","advisories":["RHSA-2005:138","RHSA-2005:141"],"bugzilla":"1617507","bugzilla_description":"CVE-2005-0246 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.9-2","postgresql-0:7.4.7-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0246.json"},{"CVE":"CVE-2005-0227","severity":null,"public_date":"2005-01-21T00:00:00Z","advisories":["RHSA-2005:138","RHSA-2005:141","RHSA-2005:150"],"bugzilla":"1617499","bugzilla_description":"CVE-2005-0227 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.9-2","postgresql-0:7.4.7-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0227.json"},{"CVE":"CVE-2005-0245","severity":"moderate","public_date":"2005-01-20T00:00:00Z","advisories":["RHSA-2005:138","RHSA-2005:141","RHSA-2005:150"],"bugzilla":"1617506","bugzilla_description":"CVE-2005-0245 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.9-2","postgresql-0:7.4.7-2.RHEL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0245.json"},{"CVE":"CVE-2004-0977","severity":"low","public_date":"2004-09-30T00:00:00Z","advisories":["RHSA-2004:489"],"bugzilla":"1617340","bugzilla_description":"CVE-2004-0977 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rh-postgresql-0:7.3.8-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0977.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/potrace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/potrace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/potrace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-api-easymock_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-api-easymock_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-api-easymock_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-api-mockito_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-api-mockito_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-api-mockito_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-api-support_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-api-support_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-api-support_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-junit4_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-junit4_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-junit4_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-reflect_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-reflect_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-reflect_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-testng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-testng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powermock-testng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powerpc-utils-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powerpc-utils-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powerpc-utils-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powerpc-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powerpc-utils_security_api_results.json
new file mode 100644
index 0000000..e864e7d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powerpc-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-8165","severity":"moderate","public_date":"2014-09-30T00:00:00Z","advisories":["RHSA-2016:2607"],"bugzilla":"1073139","bugzilla_description":"CVE-2014-8165 powerpc-utils-python: arbitrary code execution due to unpickling untrusted input","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["powerpc-utils-python-0:1.2.1-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8165.json"},{"CVE":"CVE-2014-4040","severity":"low","public_date":"2014-06-13T00:00:00Z","advisories":["RHSA-2015:0384"],"bugzilla":"1110520","bugzilla_description":"CVE-2014-4040 powerpc-utils: snap creates archives with fstab and yaboot.conf which may expose certain passwords","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["powerpc-utils-0:1.2.24-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4040.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powertop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powertop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/powertop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ppc64-diag_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ppc64-diag_security_api_results.json
new file mode 100644
index 0000000..d486c46
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ppc64-diag_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-4038","severity":"moderate","public_date":"2014-06-13T00:00:00Z","advisories":["RHSA-2015:1320","RHSA-2015:0383"],"bugzilla":"1109371","bugzilla_description":"CVE-2014-4038 CVE-2014-4039 ppc64-diag: multiple temporary file races","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"(CWE-367|CWE-377)","affected_packages":["ppc64-diag-0:2.6.7-4.el6","ppc64-diag-0:2.6.7-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4038.json"},{"CVE":"CVE-2014-4039","severity":"moderate","public_date":"2014-06-13T00:00:00Z","advisories":["RHSA-2015:1320","RHSA-2015:0383"],"bugzilla":"1109371","bugzilla_description":"CVE-2014-4038 CVE-2014-4039 ppc64-diag: multiple temporary file races","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"(CWE-367|CWE-377)","affected_packages":["ppc64-diag-0:2.6.7-4.el6","ppc64-diag-0:2.6.7-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4039.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ppp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ppp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ppp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ppp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ppp_security_api_results.json
new file mode 100644
index 0000000..56b352a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ppp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15704","severity":null,"public_date":"2020-08-05T00:00:00Z","advisories":[],"bugzilla":"1866491","bugzilla_description":"CVE-2020-15704 ppp: Privilege escalation through loading of arbitrary kernel modules and other programs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15704.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-8597","severity":"important","public_date":"2020-02-03T00:00:00Z","advisories":["RHSA-2020:0630","RHSA-2020:0631","RHSA-2020:0634","RHSA-2020:0633"],"bugzilla":"1800727","bugzilla_description":"CVE-2020-8597 ppp: Buffer overflow in the eap_request and eap_response functions in eap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["ppp-0:2.4.7-26.el8_1","ppp-0:2.4.7-26.el8_0","ppp-0:2.4.5-11.el6_10","ppp-0:2.4.5-34.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-11574","severity":"moderate","public_date":"2018-06-12T04:16:00Z","advisories":[],"bugzilla":"1586071","bugzilla_description":"CVE-2018-11574 ppp: Remote client crash in ppp EAP-TLS patch","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11574.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-3310","severity":"moderate","public_date":"2015-04-13T00:00:00Z","advisories":[],"bugzilla":"1211293","bugzilla_description":"CVE-2015-3310 ppp: buffer overflow in radius plug-in's rc_mksid()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-120|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3310.json"},{"CVE":"CVE-2014-3158","severity":"moderate","public_date":"2014-08-10T00:00:00Z","advisories":[],"bugzilla":"1128748","bugzilla_description":"CVE-2014-3158 ppp: integer overflow in option parsing","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3158.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pps-tools-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pps-tools-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pps-tools-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pptp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pptp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pptp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/prefixdevname_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/prefixdevname_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/prefixdevname_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/procmail_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/procmail_security_api_results.json
new file mode 100644
index 0000000..a2e7b1a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/procmail_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-16844","severity":"important","public_date":"2017-09-22T00:00:00Z","advisories":["RHSA-2017:3269"],"bugzilla":"1500070","bugzilla_description":"CVE-2017-16844 procmail: Heap-based buffer overflow in loadbuf function in formisc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["procmail-0:3.22-36.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16844.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-3618","severity":"important","public_date":"2014-09-04T00:00:00Z","advisories":["RHSA-2014:1172"],"bugzilla":"1137581","bugzilla_description":"CVE-2014-3618 procmail: Heap-overflow in procmail's formail utility when processing specially-crafted email headers","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-228->CWE-122","affected_packages":["procmail-0:3.22-25.1.el6_5.1","procmail-0:3.22-17.1.2","procmail-0:3.22-34.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3618.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/procps-ng-i18n_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/procps-ng-i18n_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/procps-ng-i18n_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/procps-ng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/procps-ng_security_api_results.json
new file mode 100644
index 0000000..7ec4792
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/procps-ng_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1124","severity":"important","public_date":"2018-05-17T17:00:00Z","advisories":["RHSA-2019:2401","RHSA-2018:1820","RHSA-2018:1777","RHSA-2018:1700","RHSA-2019:1944","RHSA-2018:2267","RHSA-2018:2268"],"bugzilla":"1575465","bugzilla_description":"CVE-2018-1124 procps-ng, procps: Integer overflows leading to heap overflow in file2strvec","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":["procps-0:3.2.8-35.el6_7.1","procps-0:3.2.8-45.el6_9.3","procps-ng-0:3.3.10-17.el7_5.2","procps-ng-0:3.3.10-10.el7_3.1","procps-ng-0:3.3.10-16.el7_4.1","procps-0:3.2.8-30.el6_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1124.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2018-1122","severity":"moderate","public_date":"2018-05-17T17:00:00Z","advisories":["RHSA-2020:0595","RHSA-2020:1464","RHSA-2019:2189","RHSA-2020:1265"],"bugzilla":"1575466","bugzilla_description":"CVE-2018-1122 procps-ng, procps: Local privilege escalation in top","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["procps-ng-0:3.3.10-26.el7","procps-ng-0:3.3.10-23.el7_6.2","procps-ng-0:3.3.10-17.el7_5.4","procps-ng-0:3.3.10-16.el7_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1122.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-1121","severity":"low","public_date":"2018-05-17T17:00:00Z","advisories":[],"bugzilla":"1575473","bugzilla_description":"CVE-2018-1121 procps-ng, procps: process hiding through race condition enumerating /proc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1121.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2018-1123","severity":"low","public_date":"2018-05-17T17:00:00Z","advisories":[],"bugzilla":"1575474","bugzilla_description":"CVE-2018-1123 procps-ng, procps: denial of service in ps via mmap buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1123.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2018-1125","severity":"low","public_date":"2018-05-17T17:00:00Z","advisories":[],"bugzilla":"1575852","bugzilla_description":"CVE-2018-1125 procps-ng, procps: stack buffer overflow in pgrep","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-1126","severity":"moderate","public_date":"2018-05-17T17:00:00Z","advisories":["RHSA-2018:1820","RHSA-2018:1777","RHSA-2018:1700","RHSA-2019:1944","RHSA-2018:2267","RHSA-2018:2268"],"bugzilla":"1575853","bugzilla_description":"CVE-2018-1126 procps-ng, procps: incorrect integer size in proc/alloc.* leading to truncation / integer overflow issues","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["procps-0:3.2.8-35.el6_7.1","procps-0:3.2.8-45.el6_9.3","procps-ng-0:3.3.10-17.el7_5.2","procps-ng-0:3.3.10-16.el7_4.1","procps-0:3.2.8-30.el6_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/prometheus-jmx-exporter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/prometheus-jmx-exporter_security_api_results.json
new file mode 100644
index 0000000..6d56999
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/prometheus-jmx-exporter_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-18640","severity":"moderate","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:2603"],"bugzilla":"1785376","bugzilla_description":"CVE-2017-18640 snakeyaml: Billion laughs attack via alias feature","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18640.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"7.6"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-c-compiler_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-c-compiler_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-c-compiler_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-c-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-c-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-c-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-c_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-c_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-c_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-compiler_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-compiler_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-compiler_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-lite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-lite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf-lite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf_security_api_results.json
new file mode 100644
index 0000000..d67b8ae
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/protobuf_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-5237","severity":"low","public_date":"2015-08-27T00:00:00Z","advisories":[],"bugzilla":"1256426","bugzilla_description":"CVE-2015-5237 protobuf: integer overflow in serialization","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-131->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5237.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ps_mem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ps_mem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ps_mem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/psacct_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/psacct_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/psacct_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/psmisc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/psmisc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/psmisc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pstoedit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pstoedit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pstoedit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-mpich-devel-parmetis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-mpich-devel-parmetis_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-mpich-devel-parmetis_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-mpich-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-mpich-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-mpich-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-mpich_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-mpich_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-mpich_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-openmpi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-openmpi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-openmpi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-openmpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-openmpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ptscotch-openmpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/publicsuffix-list-dafsa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/publicsuffix-list-dafsa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/publicsuffix-list-dafsa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/publicsuffix-list_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/publicsuffix-list_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/publicsuffix-list_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-libs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-libs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-libs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-libs-glib2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-libs-glib2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-libs-glib2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-module-bluetooth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-module-bluetooth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-module-bluetooth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-module-x11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-module-x11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-module-x11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio_security_api_results.json
new file mode 100644
index 0000000..dac83b4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pulseaudio_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-7805","severity":"moderate","public_date":"2015-10-12T00:00:00Z","advisories":[],"bugzilla":"1277897","bugzilla_description":"CVE-2015-7805 libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7805.json"},{"CVE":"CVE-2014-3970","severity":"low","public_date":"2014-05-31T00:00:00Z","advisories":[],"bugzilla":"1104835","bugzilla_description":"CVE-2014-3970 pulseaudio: denial of service in module-rtp-recv","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3970.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/purple-sipe_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/purple-sipe_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/purple-sipe_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2-codegen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2-codegen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2-codegen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygobject3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2-codegen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2-codegen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2-codegen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pygtk2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pykickstart_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pykickstart_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/pykickstart_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-cups-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-cups-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-cups-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-nose-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-nose-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-nose-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-nss-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-nss-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-nss-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-podman-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-podman-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-podman-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-psycopg2-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-psycopg2-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-psycopg2-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-pymongo-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-pymongo-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-pymongo-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-qt5-rpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-qt5-rpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-qt5-rpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-rpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-rpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-rpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-sphinx-locale_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-sphinx-locale_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-sphinx-locale_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-sqlalchemy-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-sqlalchemy-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-sqlalchemy-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-srpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-srpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-srpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-virtualenv-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-virtualenv-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python-virtualenv-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-Cython_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-Cython_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-Cython_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-PyMySQL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-PyMySQL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-PyMySQL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-attrs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-attrs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-attrs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-babel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-babel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-babel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-backports-ssl_match_hostname_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-backports-ssl_match_hostname_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-backports-ssl_match_hostname_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-backports_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-backports_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-backports_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-bson_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-bson_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-bson_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-cairo-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-cairo-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-cairo-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-cairo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-cairo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-cairo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-chardet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-chardet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-chardet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-coverage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-coverage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-coverage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-dns_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-dns_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-dns_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-docs-info_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-docs-info_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-docs-info_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-docutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-docutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-docutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-funcsigs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-funcsigs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-funcsigs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-idna_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-idna_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-idna_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-ipaddress_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-ipaddress_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-ipaddress_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-iso8601_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-iso8601_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-iso8601_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-jinja2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-jinja2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-jinja2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-lxml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-lxml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-lxml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-markupsafe_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-markupsafe_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-markupsafe_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-mock_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-mock_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-mock_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-nose_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-nose_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-nose_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-numpy-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-numpy-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-numpy-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-numpy-f2py_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-numpy-f2py_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-numpy-f2py_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-numpy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-numpy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-numpy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pip-wheel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pip-wheel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pip-wheel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pip_security_api_results.json
new file mode 100644
index 0000000..6a95c3d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pip_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14422","severity":"moderate","public_date":"2020-06-18T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285"],"bugzilla":"1854926","bugzilla_description":"CVE-2020-14422 python: DoS via inefficiency in IPv{4,6}Interface classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14422.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-26137","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299"],"bugzilla":"1883632","bugzilla_description":"CVE-2020-26137 python-urllib3: CRLF injection via HTTP request method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["rh-python38-python-urllib3-0:1.25.7-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26137.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-20916","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1868135","bugzilla_description":"CVE-2019-20916 python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["python27-python-pip-0:8.1.2-6.el7","rh-python36-python-virtualenv-0:15.1.0-3.el6","python27-python-virtualenv-0:13.1.0-4.el7","rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-virtualenv-0:15.1.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20916.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pluggy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pluggy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pluggy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-psycopg2-debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-psycopg2-debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-psycopg2-debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-psycopg2-tests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-psycopg2-tests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-psycopg2-tests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-psycopg2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-psycopg2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-psycopg2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-py_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-py_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-py_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pygments_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pygments_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pygments_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pymongo-gridfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pymongo-gridfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pymongo-gridfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pymongo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pymongo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pymongo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pysocks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pysocks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pysocks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pytest-mock_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pytest-mock_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pytest-mock_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pytest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pytest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pytest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pytz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pytz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pytz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pyyaml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pyyaml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-pyyaml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-requests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-requests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-requests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-rpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-rpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-rpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-scipy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-scipy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-scipy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-scour_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-scour_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-scour_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-setuptools-wheel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-setuptools-wheel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-setuptools-wheel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-setuptools_scm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-setuptools_scm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-setuptools_scm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-setuptools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-setuptools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-setuptools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-six_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-six_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-six_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-sqlalchemy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-sqlalchemy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-sqlalchemy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-tkinter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-tkinter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-tkinter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-urllib3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-urllib3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-urllib3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-virtualenv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-virtualenv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-virtualenv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-wheel-wheel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-wheel-wheel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-wheel-wheel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-wheel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-wheel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2-wheel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python27_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python27_security_api_results.json
new file mode 100644
index 0000000..b384b29
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python27_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14343","severity":"moderate","public_date":"2020-07-22T00:00:00Z","advisories":[],"bugzilla":"1860466","bugzilla_description":"CVE-2020-14343 PyYAML: incomplete fix for CVE-2020-1747","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14343.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-15801","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":[],"bugzilla":"1860242","bugzilla_description":"CVE-2020-15801 python: sys.path allowing code to be loaded from arbitrary locations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15801.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2020-14422","severity":"moderate","public_date":"2020-06-18T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285"],"bugzilla":"1854926","bugzilla_description":"CVE-2020-14422 python: DoS via inefficiency in IPv{4,6}Interface classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14422.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-20225","severity":"low","public_date":"2020-04-28T00:00:00Z","advisories":[],"bugzilla":"1835736","bugzilla_description":"CVE-2018-20225 python-pip: when --extra-index-url option is used and package does not already exist in the public index, the installation of malicious package with arbitrary version number is possible.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-348","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20225.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2020-1747","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1807367","bugzilla_description":"CVE-2020-1747 PyYAML: arbitrary command execution through python/object/new when FullLoader is used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1747.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-8492","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:3888"],"bugzilla":"1809065","bugzilla_description":"CVE-2020-8492 python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["python3-0:3.6.8-17.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8492.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-26116","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1883014","bugzilla_description":"CVE-2020-26116 python: CRLF injection via HTTP request method in httplib/http.client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26116.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-26137","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299"],"bugzilla":"1883632","bugzilla_description":"CVE-2020-26137 python-urllib3: CRLF injection via HTTP request method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["rh-python38-python-urllib3-0:1.25.7-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26137.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-8315","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1855039","bugzilla_description":"CVE-2020-8315 python: unsafe dll loading in getpathp.c on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8315.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-20907","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1856481","bugzilla_description":"CVE-2019-20907 python: infinite loop in the tarfile module via crafted TAR archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-835","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20907.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20477","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1806005","bugzilla_description":"CVE-2019-20477 PyYAML: command execution through python/object/apply constructor in FullLoader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20477.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-17514","severity":null,"public_date":"2019-10-12T00:00:00Z","advisories":[],"bugzilla":"1824446","bugzilla_description":"CVE-2019-17514 python: potentially misleading information about whether sorting in library/glob.html","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17514.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-16935","severity":"moderate","public_date":"2019-09-21T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:3911","RHSA-2020:3888"],"bugzilla":"1763229","bugzilla_description":"CVE-2019-16935 python: XSS vulnerability in the documentation XML-RPC server in server_title field","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["python-0:2.7.5-89.el7","python3-0:3.6.8-17.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-18348","severity":"moderate","public_date":"2019-07-04T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1727276","bugzilla_description":"CVE-2019-18348 python: CRLF injection via the host part of the url passed to urlopen()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10160","severity":"important","public_date":"2019-06-03T00:00:00Z","advisories":["RHSA-2019:1587","RHSA-2019:1700","RHSA-2019:2437"],"bugzilla":"1718388","bugzilla_description":"CVE-2019-10160 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python27-python-0:2.7.16-6.el6","python27-python-0:2.7.16-6.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","python-0:2.7.5-80.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-11324","severity":"moderate","public_date":"2019-04-17T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:2804","RHSA-2020:1916","RHSA-2020:1605","RHBA-2020:2785","RHSA-2019:3590"],"bugzilla":"1702473","bugzilla_description":"CVE-2019-11324 python-urllib3: Certification mishandle when error should be thrown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-pip-0:9.0.3-7.el7_8","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20916","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1868135","bugzilla_description":"CVE-2019-20916 python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["python27-python-pip-0:8.1.2-6.el7","rh-python36-python-virtualenv-0:15.1.0-3.el6","python27-python-virtualenv-0:13.1.0-4.el7","rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-virtualenv-0:15.1.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20916.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-10906","severity":"important","public_date":"2019-04-06T00:00:00Z","advisories":["RHSA-2019:1237","RHSA-2019:1329","RHSA-2019:1152","RHSA-2019:3172"],"bugzilla":"1698839","bugzilla_description":"CVE-2019-10906 python-jinja2: str.format_map allows sandbox escape","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","rh-python36-python-jinja2-0:2.9.6-3.el6","rh-python36-python-jinja2-0:2.9.6-3.el7","rh-python35-python-jinja2-0:2.8.1-2.el7","python-jinja2-0:2.10.1-2.el8_0","rh-python35-python-jinja2-0:2.8.1-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-9948","severity":"moderate","public_date":"2019-03-23T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:1268","RHSA-2020:1462","RHSA-2019:3520","RHSA-2019:1700","RHSA-2020:1346","RHSA-2019:2030"],"bugzilla":"1695570","bugzilla_description":"CVE-2019-9948 python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-749","affected_packages":["python27:2.7-8010020190903182548.51c94b97","python-0:2.7.5-63.el7_4","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-6.el6","python27-python-0:2.7.16-6.el7","python3-0:3.6.8-15.1.el8","python-0:2.7.5-74.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9948.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-9947","severity":"moderate","public_date":"2019-03-23T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:1268","RHSA-2020:1462","RHSA-2019:3520","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:2030","RHSA-2019:1260"],"bugzilla":"1695572","bugzilla_description":"CVE-2019-9947 python: CRLF injection via the path part of the url passed to urlopen()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27:2.7-8010020190903182548.51c94b97","rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-4.el7","python3-0:3.6.8-15.1.el8","python-0:2.7.5-74.el7_5","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9947.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9740","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:1268","RHSA-2020:1462","RHSA-2019:3520","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:2030","RHSA-2019:1260"],"bugzilla":"1688169","bugzilla_description":"CVE-2019-9740 python: CRLF injection via the query part of the url passed to urlopen()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27:2.7-8010020190903182548.51c94b97","rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-4.el7","python3-0:3.6.8-15.1.el8","python-0:2.7.5-74.el7_5","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11236","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHBA-2020:2804","RHSA-2020:1605","RHSA-2020:0851","RHBA-2020:2785","RHSA-2019:2272","RHBA-2020:1540","RHSA-2019:3590","RHSA-2020:1916","RHSA-2020:2081"],"bugzilla":"1700824","bugzilla_description":"CVE-2019-11236 python-urllib3: CRLF injection due to not encoding the '\\r\\n' sequence leading to possible attack on internal service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.10.2-7.el7","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9674","severity":"low","public_date":"2019-03-11T00:00:00Z","advisories":[],"bugzilla":"1800749","bugzilla_description":"CVE-2019-9674 python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-409","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9674.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9636","severity":"important","public_date":"2019-03-06T00:00:00Z","advisories":["RHBA-2019:0763","RHSA-2019:2980","RHSA-2019:0806","RHSA-2019:1467","RHSA-2019:0981","RHSA-2019:0710","RHSA-2019:0765","RHSA-2019:0997","RHSA-2019:3170","RHBA-2019:0764","RHSA-2019:0902"],"bugzilla":"1688543","bugzilla_description":"CVE-2019-9636 python: Information Disclosure due to urlsplit improper NFKC normalization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python3-0:3.6.8-2.el8_0","python27-python-0:2.7.13-4.el6","rhvm-appliance-0:4.2-20190411.1.el7","python27-python-0:2.7.13-6.el7","python-0:2.7.5-59.el7_4","python-0:2.7.5-70.el7_5","rh-python36-python-0:3.6.3-4.el6","redhat-virtualization-host-0:4.2-20190411.1.el7_6","python27:2.7-8000020190410132513.c0efe978","rh-python35-python-0:3.5.1-12.el7","rh-python35-python-0:3.5.1-12.el6","python-0:2.7.5-77.el7_6","python-0:2.6.6-68.el6_10","rh-python36-python-0:3.6.3-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-7548","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:0984","RHSA-2019:0981"],"bugzilla":"1674059","bugzilla_description":"CVE-2019-7548 python-sqlalchemy: SQL Injection when the group_by parameter can be controlled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":["python27:2.7-8000020190410132513.c0efe978","python36:3.6-8000020190410133122.593c47b3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-7164","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:0984","RHSA-2019:0981"],"bugzilla":"1678520","bugzilla_description":"CVE-2019-7164 python-sqlalchemy: SQL Injection when the order_by parameter can be controlled","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python27:2.7-8000020190410132513.c0efe978","python36:3.6-8000020190410133122.593c47b3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-6446","severity":"moderate","public_date":"2019-01-16T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2019:3704"],"bugzilla":"1667950","bugzilla_description":"CVE-2019-6446 numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-20","affected_packages":["python27:2.7-8010020190903182548.51c94b97","numpy-1:1.14.3-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-20852","severity":"moderate","public_date":"2018-10-31T00:00:00Z","advisories":["RHBA-2020:1539","RHSA-2020:1132","RHSA-2020:1131","RHSA-2019:3948","RHSA-2020:1605","RHSA-2019:3725","RHSA-2020:1764","RHBA-2020:1540"],"bugzilla":"1740347","bugzilla_description":"CVE-2018-20852 python: Cookie domain check returns incorrect results","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","rh-python36-python-0:3.6.9-2.el6","python27-python-0:2.7.17-2.el6","python3-0:3.6.8-13.el7","python27-python-0:2.7.17-2.el7","python-0:2.7.5-88.el7","python3-0:3.6.8-23.el8","rh-python36-python-0:3.6.9-2.el7","python27:2.7-8020020200117110429.90f98d4f"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20852.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-14647","severity":"moderate","public_date":"2018-09-22T00:00:00Z","advisories":["RHSA-2020:1268","RHSA-2020:1462","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:2030","RHSA-2019:1260"],"bugzilla":"1631822","bugzilla_description":"CVE-2018-14647 python: Missing salt initialization in _elementtree.c module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665->CWE-335","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-4.el7","python-0:2.7.5-74.el7_5","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000802","severity":"moderate","public_date":"2018-08-29T00:00:00Z","advisories":[],"bugzilla":"1631420","bugzilla_description":"CVE-2018-1000802 python: Command injection in the shutil module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-16056","severity":"moderate","public_date":"2018-07-19T00:00:00Z","advisories":["RHSA-2020:2520","RHBA-2020:1539","RHSA-2020:1132","RHSA-2020:1131","RHSA-2019:3948","RHSA-2020:1605","RHSA-2019:3725","RHSA-2020:1764","RHBA-2020:1540"],"bugzilla":"1749839","bugzilla_description":"CVE-2019-16056 python: email.utils.parseaddr wrongly parses email addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","rh-python36-python-0:3.6.9-2.el6","python27-python-0:2.7.17-2.el6","python3-0:3.6.8-13.el7","python27-python-0:2.7.17-2.el7","python-0:2.7.5-88.el7","python-0:2.7.5-87.el7_7","python3-0:3.6.8-23.el8","rh-python36-python-0:3.6.9-2.el7","python27:2.7-8020020200117110429.90f98d4f"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-18074","severity":"low","public_date":"2018-06-29T00:00:00Z","advisories":["RHSA-2019:2035","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHBA-2020:1540"],"bugzilla":"1643829","bugzilla_description":"CVE-2018-18074 python-requests: Redirect from HTTPS to HTTP does not remove Authorization header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-requests-0:2.6.0-5.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18074.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2017-18342","severity":"moderate","public_date":"2018-06-27T00:00:00Z","advisories":[],"bugzilla":"1595743","bugzilla_description":"CVE-2017-18342 PyYAML: yaml.load() API could execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18342.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-20060","severity":"moderate","public_date":"2018-03-26T00:00:00Z","advisories":["RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHSA-2019:2272","RHBA-2020:1540"],"bugzilla":"1649153","bugzilla_description":"CVE-2018-20060 python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-urllib3-0:1.10.2-7.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1060","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3041","RHSA-2020:1268","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:1260"],"bugzilla":"1549191","bugzilla_description":"CVE-2018-1060 python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python27-python-0:2.7.16-4.el7","python-0:2.7.5-74.el7_5","python-0:2.7.5-76.el7","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1061","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3041","RHSA-2020:1268","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:1260"],"bugzilla":"1549192","bugzilla_description":"CVE-2018-1061 python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python27-python-0:2.7.16-4.el7","python-0:2.7.5-74.el7_5","python-0:2.7.5-76.el7","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-17522","severity":"moderate","public_date":"2017-12-14T00:00:00Z","advisories":[],"bugzilla":"1526176","bugzilla_description":"CVE-2017-17522 python: Command injection in Lib/webbrowser.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17522.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10516","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1512102","bugzilla_description":"CVE-2016-10516 python-werkzeug: Cross-site scripting in render_full function in debug/tbtools.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["python-werkzeug-0:0.12.2-5.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2018-1000030","severity":"low","public_date":"2017-09-20T00:00:00Z","advisories":[],"bugzilla":"1541558","bugzilla_description":"CVE-2018-1000030 python: Heap-Buffer-Overflow and Heap-Use-After-Free in Objects/fileobject.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000030.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2017-12852","severity":"low","public_date":"2017-08-15T00:00:00Z","advisories":[],"bugzilla":"1483686","bugzilla_description":"CVE-2017-12852 numpy: Missing input validation on empty list or ndarray in numpy.pad function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12852.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-1000158","severity":"moderate","public_date":"2017-06-13T00:00:00Z","advisories":[],"bugzilla":"1519595","bugzilla_description":"CVE-2017-1000158 python: Integer overflow in PyString_DecodeEscape results in heap-base buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2016-10745","severity":"important","public_date":"2016-12-29T00:00:00Z","advisories":["RHSA-2019:1022","RHSA-2019:3964","RHSA-2019:1237","RHSA-2019:4062","RHSA-2019:1260","RHSA-2019:3172"],"bugzilla":"1698345","bugzilla_description":"CVE-2016-10745 python-jinja2: Sandbox escape due to information disclosure via str.format","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","python27-python-jinja2-0:2.6-15.el7","python-jinja2-0:2.7.2-3.el7_4","python-jinja2-0:2.7.2-3.el7_5","python-jinja2-0:2.7.2-3.el7_6","rh-python35-python-jinja2-0:2.8.1-2.el7","rh-python35-python-jinja2-0:2.8.1-2.el6","python27-python-jinja2-0:2.6-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2016-1000110","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1630","RHSA-2016:1628","RHSA-2016:1629","RHSA-2016:1626","RHSA-2016:1627"],"bugzilla":"1357334","bugzilla_description":"CVE-2016-1000110 Python CGIHandler: sets environmental variable based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["python33-python-0:3.3.2-18.el6","rh-python34-python-0:3.4.2-13.el7","python27-python-0:2.7.8-16.el7","python27-python-0:2.7.8-18.el6","python-0:2.7.5-38.el7_2","rh-python34-python-0:3.4.2-14.el6","rh-python35-python-0:3.5.1-9.el7","python-0:2.6.6-66.el6_8","python33-python-0:3.3.2-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-0772","severity":"moderate","public_date":"2016-06-11T00:00:00Z","advisories":["RHSA-2016:1630","RHSA-2016:1628","RHSA-2016:1629","RHSA-2016:1626","RHSA-2016:1627"],"bugzilla":"1303647","bugzilla_description":"CVE-2016-0772 python: smtplib StartTLS stripping attack","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python33-python-0:3.3.2-18.el6","rh-python34-python-0:3.4.2-13.el7","python27-python-0:2.7.8-16.el7","python27-python-0:2.7.8-18.el6","python-0:2.7.5-38.el7_2","rh-python34-python-0:3.4.2-14.el6","rh-python35-python-0:3.5.1-9.el7","python-0:2.6.6-66.el6_8","python33-python-0:3.3.2-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-5636","severity":"low","public_date":"2016-01-21T00:00:00Z","advisories":["RHSA-2016:2586"],"bugzilla":"1345856","bugzilla_description":"CVE-2016-5636 python: Heap overflow in zipimporter module","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-190->CWE-122","affected_packages":["python-0:2.7.5-48.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5636.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2015-8557","severity":"moderate","public_date":"2015-09-28T00:00:00Z","advisories":[],"bugzilla":"1276321","bugzilla_description":"CVE-2015-8557 python-pygments: Shell injection in FontManager._get_nix_font_path","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8557.json"},{"CVE":"CVE-2014-9365","severity":"moderate","public_date":"2014-12-11T00:00:00Z","advisories":["RHSA-2017:1868","RHSA-2017:1162"],"bugzilla":"1173041","bugzilla_description":"CVE-2014-9365 python: failure to validate certificates in the HTTP client with TLS (PEP 476)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-345","affected_packages":["python27-python-0:2.7.13-3.el7","python27-python-0:2.7.13-3.el6","python-0:2.7.5-58.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2016-5699","severity":"moderate","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2016:1630","RHSA-2016:1628","RHSA-2016:1629","RHSA-2016:1626","RHSA-2016:1627"],"bugzilla":"1303699","bugzilla_description":"CVE-2016-5699 python: http protocol steam injection attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["python33-python-0:3.3.2-18.el6","rh-python34-python-0:3.4.2-13.el7","python27-python-0:2.7.8-16.el7","python27-python-0:2.7.8-18.el6","python-0:2.7.5-38.el7_2","rh-python34-python-0:3.4.2-14.el6","rh-python35-python-0:3.5.1-9.el7","python-0:2.6.6-66.el6_8","python33-python-0:3.3.2-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5699.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2014-4650","severity":"moderate","public_date":"2014-06-23T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1113527","bugzilla_description":"CVE-2014-4650 python: CGIHTTPServer module does not properly handle URL-encoded path separators in URLs","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-138","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4650.json"},{"CVE":"CVE-2014-7185","severity":"low","public_date":"2014-06-23T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1146026","bugzilla_description":"CVE-2014-7185 python: buffer() integer overflow leading to out of bounds read","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-190->CWE-125->CWE-200","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7185.json"},{"CVE":"CVE-2014-8583","severity":"moderate","public_date":"2014-06-17T00:00:00Z","advisories":[],"bugzilla":"1111034","bugzilla_description":"CVE-2014-8583 mod_wsgi: failure to handle errors when attempting to drop group privileges","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-271","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8583.json"},{"CVE":"CVE-2014-0240","severity":"important","public_date":"2014-05-21T00:00:00Z","advisories":["RHSA-2014:0788","RHSA-2014:1091","RHSA-2014:0789"],"bugzilla":"1101863","bugzilla_description":"CVE-2014-0240 mod_wsgi: possible privilege escalation in setuid() failure scenarios","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-271","affected_packages":["mod_wsgi-0:3.4-12.el7_0","python27-mod_wsgi-0:3.4-12.el6","python27-mod_wsgi-0:3.4-13.el7","python33-mod_wsgi-0:3.4-13.el7","python33-mod_wsgi-0:3.4-14.el6","mod_wsgi-0:3.2-6.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0240.json"},{"CVE":"CVE-2014-0242","severity":"moderate","public_date":"2014-05-21T00:00:00Z","advisories":["RHSA-2014:0788"],"bugzilla":"1101873","bugzilla_description":"CVE-2014-0242 mod_wsgi: information leak","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["mod_wsgi-0:3.2-6.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0242.json"},{"CVE":"CVE-2014-4616","severity":"moderate","public_date":"2014-05-19T00:00:00Z","advisories":["RHSA-2015:2101","RHEA-2014:1175","RHSA-2015:1064"],"bugzilla":"1112285","bugzilla_description":"CVE-2014-4616 python: missing boundary check in JSON module","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-129->CWE-119","affected_packages":["python-0:2.7.5-34.el7","python-simplejson-0:3.2.0-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4616.json"},{"CVE":"CVE-2014-2667","severity":"moderate","public_date":"2014-03-28T00:00:00Z","advisories":[],"bugzilla":"1082177","bugzilla_description":"CVE-2014-2667 python: os.makedirs(exist_ok=True) is not thread-safe in Python 3.x","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2667.json"},{"CVE":"CVE-2014-1858","severity":"low","public_date":"2014-02-05T00:00:00Z","advisories":[],"bugzilla":"1062009","bugzilla_description":"CVE-2014-1858 CVE-2014-1859 numpy: f2py insecure temporary file use","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1858.json"},{"CVE":"CVE-2014-1859","severity":"low","public_date":"2014-02-05T00:00:00Z","advisories":[],"bugzilla":"1062009","bugzilla_description":"CVE-2014-1858 CVE-2014-1859 numpy: f2py insecure temporary file use","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1859.json"},{"CVE":"CVE-2014-1912","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1062370","bugzilla_description":"CVE-2014-1912 python: buffer overflow in socket.recvfrom_into()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1912.json"},{"CVE":"CVE-2014-0012","severity":"moderate","public_date":"2014-01-11T00:00:00Z","advisories":[],"bugzilla":"1052102","bugzilla_description":"CVE-2014-0012 python-jinja2: FileSystemBytecodeCache insecure cache temporary file use, incorrect CVE-2014-1402 fix","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0012.json"},{"CVE":"CVE-2014-1402","severity":"moderate","public_date":"2014-01-09T00:00:00Z","advisories":["RHSA-2014:0748","RHSA-2014:0747"],"bugzilla":"1051421","bugzilla_description":"CVE-2014-1402 python-jinja2: FileSystemBytecodeCache insecure cache temporary file use","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":["python27-python-jinja2-0:2.6-10.el6","python33-python-jinja2-0:2.6-12.el7","python-jinja2-0:2.2.1-2.el6_5","python33-python-jinja2-0:2.6-11.el6","python27-python-jinja2-0:2.6-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1402.json"},{"CVE":"CVE-2013-7338","severity":"moderate","public_date":"2013-12-27T00:00:00Z","advisories":[],"bugzilla":"1078014","bugzilla_description":"CVE-2013-7338 python: malformed ZIP files could cause 100% CPU usage","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7338.json"},{"CVE":"CVE-2013-7040","severity":"moderate","public_date":"2013-12-09T00:00:00Z","advisories":[],"bugzilla":"1039915","bugzilla_description":"CVE-2013-7040 python: hash secret can be recovered remotely","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7040.json"},{"CVE":"CVE-2014-8991","severity":"low","public_date":"2013-10-09T00:00:00Z","advisories":[],"bugzilla":"1166137","bugzilla_description":"CVE-2014-8991 python-pip: local DoS vulnerability","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8991.json"},{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-4238","severity":"moderate","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2013:1582","RHSA-2013:1527"],"bugzilla":"996381","bugzilla_description":"CVE-2013-4238 python: hostname check bypassing vulnerability in SSL module","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["python-0:2.6.6-51.el6","rhev-hypervisor6-0:6.5-20131115.0.3.2.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4238.json"},{"CVE":"CVE-2013-5123","severity":"moderate","public_date":"2013-07-31T00:00:00Z","advisories":[],"bugzilla":"1066692","bugzilla_description":"CVE-2013-5123 python-pip: insecure software download with mirroring support","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5123.json"},{"CVE":"CVE-2013-1633","severity":"moderate","public_date":"2013-06-02T00:00:00Z","advisories":[],"bugzilla":"994182","bugzilla_description":"CVE-2013-1633 python-setuptools: easy_install insecure installation mechanism","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1633.json"},{"CVE":"CVE-2013-2099","severity":"low","public_date":"2013-05-15T00:00:00Z","advisories":["RHSA-2016:1166","RHBA-2016:1500","RHSA-2014:1690","RHSA-2015:0042","RHSA-2014:1263"],"bugzilla":"963260","bugzilla_description":"CVE-2013-2099 python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-backports-ssl_match_hostname-0:3.4.0.2-1.el6","python-pymongo-0:3.2-1.el7sat","python-pymongo-0:3.2-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json"},{"CVE":"CVE-2013-1753","severity":"moderate","public_date":"2012-09-25T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1064"],"bugzilla":"1046170","bugzilla_description":"CVE-2013-1753 python: XMLRPC library unrestricted decompression of HTTP responses using gzip enconding","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["python-0:2.7.5-34.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1753.json"},{"CVE":"CVE-2013-1752","severity":"moderate","public_date":"2012-09-25T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1046174","bugzilla_description":"CVE-2013-1752 python: multiple unbound readline() DoS flaws in python stdlib","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1752.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2_security_api_results.json
new file mode 100644
index 0000000..04eea41
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14343","severity":"moderate","public_date":"2020-07-22T00:00:00Z","advisories":[],"bugzilla":"1860466","bugzilla_description":"CVE-2020-14343 PyYAML: incomplete fix for CVE-2020-1747","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14343.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-15801","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":[],"bugzilla":"1860242","bugzilla_description":"CVE-2020-15801 python: sys.path allowing code to be loaded from arbitrary locations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15801.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2020-14422","severity":"moderate","public_date":"2020-06-18T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285"],"bugzilla":"1854926","bugzilla_description":"CVE-2020-14422 python: DoS via inefficiency in IPv{4,6}Interface classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14422.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-20225","severity":"low","public_date":"2020-04-28T00:00:00Z","advisories":[],"bugzilla":"1835736","bugzilla_description":"CVE-2018-20225 python-pip: when --extra-index-url option is used and package does not already exist in the public index, the installation of malicious package with arbitrary version number is possible.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-348","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20225.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2020-1747","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1807367","bugzilla_description":"CVE-2020-1747 PyYAML: arbitrary command execution through python/object/new when FullLoader is used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1747.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-8492","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:3888"],"bugzilla":"1809065","bugzilla_description":"CVE-2020-8492 python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["python3-0:3.6.8-17.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8492.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-26116","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1883014","bugzilla_description":"CVE-2020-26116 python: CRLF injection via HTTP request method in httplib/http.client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26116.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-26137","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299"],"bugzilla":"1883632","bugzilla_description":"CVE-2020-26137 python-urllib3: CRLF injection via HTTP request method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["rh-python38-python-urllib3-0:1.25.7-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26137.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-8315","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1855039","bugzilla_description":"CVE-2020-8315 python: unsafe dll loading in getpathp.c on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8315.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-20907","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1856481","bugzilla_description":"CVE-2019-20907 python: infinite loop in the tarfile module via crafted TAR archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-835","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20907.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20477","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1806005","bugzilla_description":"CVE-2019-20477 PyYAML: command execution through python/object/apply constructor in FullLoader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20477.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-18874","severity":"moderate","public_date":"2019-11-07T00:00:00Z","advisories":["RHSA-2020:2583","RHSA-2020:4255","RHSA-2020:4299","RHSA-2020:4254","RHSA-2020:2593","RHSA-2020:2635"],"bugzilla":"1772014","bugzilla_description":"CVE-2019-18874 python-psutil: double free because of refcount mishandling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["rh-python38-python-psutil-0:5.6.4-5.el7","ansible-tower-36/ansible-runner-rhel7:1.4.4-2","python-psutil-0:5.6.6-1.el7ar","ansible-tower-37/ansible-runner-rhel7:1.4.6-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18874.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-17514","severity":null,"public_date":"2019-10-12T00:00:00Z","advisories":[],"bugzilla":"1824446","bugzilla_description":"CVE-2019-17514 python: potentially misleading information about whether sorting in library/glob.html","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17514.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-16935","severity":"moderate","public_date":"2019-09-21T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:3911","RHSA-2020:3888"],"bugzilla":"1763229","bugzilla_description":"CVE-2019-16935 python: XSS vulnerability in the documentation XML-RPC server in server_title field","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["python-0:2.7.5-89.el7","python3-0:3.6.8-17.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-18348","severity":"moderate","public_date":"2019-07-04T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1727276","bugzilla_description":"CVE-2019-18348 python: CRLF injection via the host part of the url passed to urlopen()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10160","severity":"important","public_date":"2019-06-03T00:00:00Z","advisories":["RHSA-2019:1587","RHSA-2019:1700","RHSA-2019:2437"],"bugzilla":"1718388","bugzilla_description":"CVE-2019-10160 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python27-python-0:2.7.16-6.el6","python27-python-0:2.7.16-6.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","python-0:2.7.5-80.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-11324","severity":"moderate","public_date":"2019-04-17T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:2804","RHSA-2020:1916","RHSA-2020:1605","RHBA-2020:2785","RHSA-2019:3590"],"bugzilla":"1702473","bugzilla_description":"CVE-2019-11324 python-urllib3: Certification mishandle when error should be thrown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-pip-0:9.0.3-7.el7_8","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20916","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1868135","bugzilla_description":"CVE-2019-20916 python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["python27-python-pip-0:8.1.2-6.el7","rh-python36-python-virtualenv-0:15.1.0-3.el6","python27-python-virtualenv-0:13.1.0-4.el7","rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-virtualenv-0:15.1.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20916.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-10906","severity":"important","public_date":"2019-04-06T00:00:00Z","advisories":["RHSA-2019:1237","RHSA-2019:1329","RHSA-2019:1152","RHSA-2019:3172"],"bugzilla":"1698839","bugzilla_description":"CVE-2019-10906 python-jinja2: str.format_map allows sandbox escape","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","rh-python36-python-jinja2-0:2.9.6-3.el6","rh-python36-python-jinja2-0:2.9.6-3.el7","rh-python35-python-jinja2-0:2.8.1-2.el7","python-jinja2-0:2.10.1-2.el8_0","rh-python35-python-jinja2-0:2.8.1-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-9948","severity":"moderate","public_date":"2019-03-23T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:1268","RHSA-2020:1462","RHSA-2019:3520","RHSA-2019:1700","RHSA-2020:1346","RHSA-2019:2030"],"bugzilla":"1695570","bugzilla_description":"CVE-2019-9948 python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-749","affected_packages":["python27:2.7-8010020190903182548.51c94b97","python-0:2.7.5-63.el7_4","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-6.el6","python27-python-0:2.7.16-6.el7","python3-0:3.6.8-15.1.el8","python-0:2.7.5-74.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9948.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-9947","severity":"moderate","public_date":"2019-03-23T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:1268","RHSA-2020:1462","RHSA-2019:3520","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:2030","RHSA-2019:1260"],"bugzilla":"1695572","bugzilla_description":"CVE-2019-9947 python: CRLF injection via the path part of the url passed to urlopen()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27:2.7-8010020190903182548.51c94b97","rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-4.el7","python3-0:3.6.8-15.1.el8","python-0:2.7.5-74.el7_5","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9947.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9740","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:1268","RHSA-2020:1462","RHSA-2019:3520","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:2030","RHSA-2019:1260"],"bugzilla":"1688169","bugzilla_description":"CVE-2019-9740 python: CRLF injection via the query part of the url passed to urlopen()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27:2.7-8010020190903182548.51c94b97","rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-4.el7","python3-0:3.6.8-15.1.el8","python-0:2.7.5-74.el7_5","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11236","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHBA-2020:2804","RHSA-2020:1605","RHSA-2020:0851","RHBA-2020:2785","RHSA-2019:2272","RHBA-2020:1540","RHSA-2019:3590","RHSA-2020:1916","RHSA-2020:2081"],"bugzilla":"1700824","bugzilla_description":"CVE-2019-11236 python-urllib3: CRLF injection due to not encoding the '\\r\\n' sequence leading to possible attack on internal service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.10.2-7.el7","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9674","severity":"low","public_date":"2019-03-11T00:00:00Z","advisories":[],"bugzilla":"1800749","bugzilla_description":"CVE-2019-9674 python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-409","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9674.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9636","severity":"important","public_date":"2019-03-06T00:00:00Z","advisories":["RHBA-2019:0763","RHSA-2019:2980","RHSA-2019:0806","RHSA-2019:1467","RHSA-2019:0981","RHSA-2019:0710","RHSA-2019:0765","RHSA-2019:0997","RHSA-2019:3170","RHBA-2019:0764","RHSA-2019:0902"],"bugzilla":"1688543","bugzilla_description":"CVE-2019-9636 python: Information Disclosure due to urlsplit improper NFKC normalization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python3-0:3.6.8-2.el8_0","python27-python-0:2.7.13-4.el6","rhvm-appliance-0:4.2-20190411.1.el7","python27-python-0:2.7.13-6.el7","python-0:2.7.5-59.el7_4","python-0:2.7.5-70.el7_5","rh-python36-python-0:3.6.3-4.el6","redhat-virtualization-host-0:4.2-20190411.1.el7_6","python27:2.7-8000020190410132513.c0efe978","rh-python35-python-0:3.5.1-12.el7","rh-python35-python-0:3.5.1-12.el6","python-0:2.7.5-77.el7_6","python-0:2.6.6-68.el6_10","rh-python36-python-0:3.6.3-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-7548","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:0984","RHSA-2019:0981"],"bugzilla":"1674059","bugzilla_description":"CVE-2019-7548 python-sqlalchemy: SQL Injection when the group_by parameter can be controlled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":["python27:2.7-8000020190410132513.c0efe978","python36:3.6-8000020190410133122.593c47b3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-7164","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:0984","RHSA-2019:0981"],"bugzilla":"1678520","bugzilla_description":"CVE-2019-7164 python-sqlalchemy: SQL Injection when the order_by parameter can be controlled","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python27:2.7-8000020190410132513.c0efe978","python36:3.6-8000020190410133122.593c47b3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-6446","severity":"moderate","public_date":"2019-01-16T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2019:3704"],"bugzilla":"1667950","bugzilla_description":"CVE-2019-6446 numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-20","affected_packages":["python27:2.7-8010020190903182548.51c94b97","numpy-1:1.14.3-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-20852","severity":"moderate","public_date":"2018-10-31T00:00:00Z","advisories":["RHBA-2020:1539","RHSA-2020:1132","RHSA-2020:1131","RHSA-2019:3948","RHSA-2020:1605","RHSA-2019:3725","RHSA-2020:1764","RHBA-2020:1540"],"bugzilla":"1740347","bugzilla_description":"CVE-2018-20852 python: Cookie domain check returns incorrect results","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","rh-python36-python-0:3.6.9-2.el6","python27-python-0:2.7.17-2.el6","python3-0:3.6.8-13.el7","python27-python-0:2.7.17-2.el7","python-0:2.7.5-88.el7","python3-0:3.6.8-23.el8","rh-python36-python-0:3.6.9-2.el7","python27:2.7-8020020200117110429.90f98d4f"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20852.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-14647","severity":"moderate","public_date":"2018-09-22T00:00:00Z","advisories":["RHSA-2020:1268","RHSA-2020:1462","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:2030","RHSA-2019:1260"],"bugzilla":"1631822","bugzilla_description":"CVE-2018-14647 python: Missing salt initialization in _elementtree.c module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665->CWE-335","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-4.el7","python-0:2.7.5-74.el7_5","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000802","severity":"moderate","public_date":"2018-08-29T00:00:00Z","advisories":[],"bugzilla":"1631420","bugzilla_description":"CVE-2018-1000802 python: Command injection in the shutil module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-16056","severity":"moderate","public_date":"2018-07-19T00:00:00Z","advisories":["RHSA-2020:2520","RHBA-2020:1539","RHSA-2020:1132","RHSA-2020:1131","RHSA-2019:3948","RHSA-2020:1605","RHSA-2019:3725","RHSA-2020:1764","RHBA-2020:1540"],"bugzilla":"1749839","bugzilla_description":"CVE-2019-16056 python: email.utils.parseaddr wrongly parses email addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","rh-python36-python-0:3.6.9-2.el6","python27-python-0:2.7.17-2.el6","python3-0:3.6.8-13.el7","python27-python-0:2.7.17-2.el7","python-0:2.7.5-88.el7","python-0:2.7.5-87.el7_7","python3-0:3.6.8-23.el8","rh-python36-python-0:3.6.9-2.el7","python27:2.7-8020020200117110429.90f98d4f"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-18074","severity":"low","public_date":"2018-06-29T00:00:00Z","advisories":["RHSA-2019:2035","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHBA-2020:1540"],"bugzilla":"1643829","bugzilla_description":"CVE-2018-18074 python-requests: Redirect from HTTPS to HTTP does not remove Authorization header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-requests-0:2.6.0-5.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18074.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2017-18342","severity":"moderate","public_date":"2018-06-27T00:00:00Z","advisories":[],"bugzilla":"1595743","bugzilla_description":"CVE-2017-18342 PyYAML: yaml.load() API could execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18342.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-20060","severity":"moderate","public_date":"2018-03-26T00:00:00Z","advisories":["RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHSA-2019:2272","RHBA-2020:1540"],"bugzilla":"1649153","bugzilla_description":"CVE-2018-20060 python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-urllib3-0:1.10.2-7.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1060","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3041","RHSA-2020:1268","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:1260"],"bugzilla":"1549191","bugzilla_description":"CVE-2018-1060 python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python27-python-0:2.7.16-4.el7","python-0:2.7.5-74.el7_5","python-0:2.7.5-76.el7","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1061","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3041","RHSA-2020:1268","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:1260"],"bugzilla":"1549192","bugzilla_description":"CVE-2018-1061 python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python27-python-0:2.7.16-4.el7","python-0:2.7.5-74.el7_5","python-0:2.7.5-76.el7","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-17522","severity":"moderate","public_date":"2017-12-14T00:00:00Z","advisories":[],"bugzilla":"1526176","bugzilla_description":"CVE-2017-17522 python: Command injection in Lib/webbrowser.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17522.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10516","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1512102","bugzilla_description":"CVE-2016-10516 python-werkzeug: Cross-site scripting in render_full function in debug/tbtools.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["python-werkzeug-0:0.12.2-5.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2018-1000030","severity":"low","public_date":"2017-09-20T00:00:00Z","advisories":[],"bugzilla":"1541558","bugzilla_description":"CVE-2018-1000030 python: Heap-Buffer-Overflow and Heap-Use-After-Free in Objects/fileobject.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000030.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2017-12852","severity":"low","public_date":"2017-08-15T00:00:00Z","advisories":[],"bugzilla":"1483686","bugzilla_description":"CVE-2017-12852 numpy: Missing input validation on empty list or ndarray in numpy.pad function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12852.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-1000158","severity":"moderate","public_date":"2017-06-13T00:00:00Z","advisories":[],"bugzilla":"1519595","bugzilla_description":"CVE-2017-1000158 python: Integer overflow in PyString_DecodeEscape results in heap-base buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2016-10745","severity":"important","public_date":"2016-12-29T00:00:00Z","advisories":["RHSA-2019:1022","RHSA-2019:3964","RHSA-2019:1237","RHSA-2019:4062","RHSA-2019:1260","RHSA-2019:3172"],"bugzilla":"1698345","bugzilla_description":"CVE-2016-10745 python-jinja2: Sandbox escape due to information disclosure via str.format","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","python27-python-jinja2-0:2.6-15.el7","python-jinja2-0:2.7.2-3.el7_4","python-jinja2-0:2.7.2-3.el7_5","python-jinja2-0:2.7.2-3.el7_6","rh-python35-python-jinja2-0:2.8.1-2.el7","rh-python35-python-jinja2-0:2.8.1-2.el6","python27-python-jinja2-0:2.6-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2016-1000110","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:1630","RHSA-2016:1628","RHSA-2016:1629","RHSA-2016:1626","RHSA-2016:1627"],"bugzilla":"1357334","bugzilla_description":"CVE-2016-1000110 Python CGIHandler: sets environmental variable based on user supplied Proxy request header","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["python33-python-0:3.3.2-18.el6","rh-python34-python-0:3.4.2-13.el7","python27-python-0:2.7.8-16.el7","python27-python-0:2.7.8-18.el6","python-0:2.7.5-38.el7_2","rh-python34-python-0:3.4.2-14.el6","rh-python35-python-0:3.5.1-9.el7","python-0:2.6.6-66.el6_8","python33-python-0:3.3.2-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000110.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2016-0772","severity":"moderate","public_date":"2016-06-11T00:00:00Z","advisories":["RHSA-2016:1630","RHSA-2016:1628","RHSA-2016:1629","RHSA-2016:1626","RHSA-2016:1627"],"bugzilla":"1303647","bugzilla_description":"CVE-2016-0772 python: smtplib StartTLS stripping attack","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python33-python-0:3.3.2-18.el6","rh-python34-python-0:3.4.2-13.el7","python27-python-0:2.7.8-16.el7","python27-python-0:2.7.8-18.el6","python-0:2.7.5-38.el7_2","rh-python34-python-0:3.4.2-14.el6","rh-python35-python-0:3.5.1-9.el7","python-0:2.6.6-66.el6_8","python33-python-0:3.3.2-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-5636","severity":"low","public_date":"2016-01-21T00:00:00Z","advisories":["RHSA-2016:2586"],"bugzilla":"1345856","bugzilla_description":"CVE-2016-5636 python: Heap overflow in zipimporter module","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-190->CWE-122","affected_packages":["python-0:2.7.5-48.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5636.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2015-8557","severity":"moderate","public_date":"2015-09-28T00:00:00Z","advisories":[],"bugzilla":"1276321","bugzilla_description":"CVE-2015-8557 python-pygments: Shell injection in FontManager._get_nix_font_path","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8557.json"},{"CVE":"CVE-2014-9365","severity":"moderate","public_date":"2014-12-11T00:00:00Z","advisories":["RHSA-2017:1868","RHSA-2017:1162"],"bugzilla":"1173041","bugzilla_description":"CVE-2014-9365 python: failure to validate certificates in the HTTP client with TLS (PEP 476)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-345","affected_packages":["python27-python-0:2.7.13-3.el7","python27-python-0:2.7.13-3.el6","python-0:2.7.5-58.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2016-5699","severity":"moderate","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2016:1630","RHSA-2016:1628","RHSA-2016:1629","RHSA-2016:1626","RHSA-2016:1627"],"bugzilla":"1303699","bugzilla_description":"CVE-2016-5699 python: http protocol steam injection attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["python33-python-0:3.3.2-18.el6","rh-python34-python-0:3.4.2-13.el7","python27-python-0:2.7.8-16.el7","python27-python-0:2.7.8-18.el6","python-0:2.7.5-38.el7_2","rh-python34-python-0:3.4.2-14.el6","rh-python35-python-0:3.5.1-9.el7","python-0:2.6.6-66.el6_8","python33-python-0:3.3.2-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5699.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2014-4650","severity":"moderate","public_date":"2014-06-23T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1113527","bugzilla_description":"CVE-2014-4650 python: CGIHTTPServer module does not properly handle URL-encoded path separators in URLs","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-138","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4650.json"},{"CVE":"CVE-2014-7185","severity":"low","public_date":"2014-06-23T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1146026","bugzilla_description":"CVE-2014-7185 python: buffer() integer overflow leading to out of bounds read","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-190->CWE-125->CWE-200","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7185.json"},{"CVE":"CVE-2014-8583","severity":"moderate","public_date":"2014-06-17T00:00:00Z","advisories":[],"bugzilla":"1111034","bugzilla_description":"CVE-2014-8583 mod_wsgi: failure to handle errors when attempting to drop group privileges","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-271","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8583.json"},{"CVE":"CVE-2014-0240","severity":"important","public_date":"2014-05-21T00:00:00Z","advisories":["RHSA-2014:0788","RHSA-2014:1091","RHSA-2014:0789"],"bugzilla":"1101863","bugzilla_description":"CVE-2014-0240 mod_wsgi: possible privilege escalation in setuid() failure scenarios","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-271","affected_packages":["mod_wsgi-0:3.4-12.el7_0","python27-mod_wsgi-0:3.4-12.el6","python27-mod_wsgi-0:3.4-13.el7","python33-mod_wsgi-0:3.4-13.el7","python33-mod_wsgi-0:3.4-14.el6","mod_wsgi-0:3.2-6.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0240.json"},{"CVE":"CVE-2014-0242","severity":"moderate","public_date":"2014-05-21T00:00:00Z","advisories":["RHSA-2014:0788"],"bugzilla":"1101873","bugzilla_description":"CVE-2014-0242 mod_wsgi: information leak","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["mod_wsgi-0:3.2-6.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0242.json"},{"CVE":"CVE-2014-4616","severity":"moderate","public_date":"2014-05-19T00:00:00Z","advisories":["RHSA-2015:2101","RHEA-2014:1175","RHSA-2015:1064"],"bugzilla":"1112285","bugzilla_description":"CVE-2014-4616 python: missing boundary check in JSON module","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-129->CWE-119","affected_packages":["python-0:2.7.5-34.el7","python-simplejson-0:3.2.0-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4616.json"},{"CVE":"CVE-2014-2667","severity":"moderate","public_date":"2014-03-28T00:00:00Z","advisories":[],"bugzilla":"1082177","bugzilla_description":"CVE-2014-2667 python: os.makedirs(exist_ok=True) is not thread-safe in Python 3.x","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2667.json"},{"CVE":"CVE-2014-1858","severity":"low","public_date":"2014-02-05T00:00:00Z","advisories":[],"bugzilla":"1062009","bugzilla_description":"CVE-2014-1858 CVE-2014-1859 numpy: f2py insecure temporary file use","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1858.json"},{"CVE":"CVE-2014-1859","severity":"low","public_date":"2014-02-05T00:00:00Z","advisories":[],"bugzilla":"1062009","bugzilla_description":"CVE-2014-1858 CVE-2014-1859 numpy: f2py insecure temporary file use","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1859.json"},{"CVE":"CVE-2014-1912","severity":"moderate","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1062370","bugzilla_description":"CVE-2014-1912 python: buffer overflow in socket.recvfrom_into()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1912.json"},{"CVE":"CVE-2014-0012","severity":"moderate","public_date":"2014-01-11T00:00:00Z","advisories":[],"bugzilla":"1052102","bugzilla_description":"CVE-2014-0012 python-jinja2: FileSystemBytecodeCache insecure cache temporary file use, incorrect CVE-2014-1402 fix","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0012.json"},{"CVE":"CVE-2014-1402","severity":"moderate","public_date":"2014-01-09T00:00:00Z","advisories":["RHSA-2014:0748","RHSA-2014:0747"],"bugzilla":"1051421","bugzilla_description":"CVE-2014-1402 python-jinja2: FileSystemBytecodeCache insecure cache temporary file use","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":["python27-python-jinja2-0:2.6-10.el6","python33-python-jinja2-0:2.6-12.el7","python-jinja2-0:2.2.1-2.el6_5","python33-python-jinja2-0:2.6-11.el6","python27-python-jinja2-0:2.6-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1402.json"},{"CVE":"CVE-2013-7338","severity":"moderate","public_date":"2013-12-27T00:00:00Z","advisories":[],"bugzilla":"1078014","bugzilla_description":"CVE-2013-7338 python: malformed ZIP files could cause 100% CPU usage","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7338.json"},{"CVE":"CVE-2013-7040","severity":"moderate","public_date":"2013-12-09T00:00:00Z","advisories":[],"bugzilla":"1039915","bugzilla_description":"CVE-2013-7040 python: hash secret can be recovered remotely","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7040.json"},{"CVE":"CVE-2014-8991","severity":"low","public_date":"2013-10-09T00:00:00Z","advisories":[],"bugzilla":"1166137","bugzilla_description":"CVE-2014-8991 python-pip: local DoS vulnerability","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8991.json"},{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-4238","severity":"moderate","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2013:1582","RHSA-2013:1527"],"bugzilla":"996381","bugzilla_description":"CVE-2013-4238 python: hostname check bypassing vulnerability in SSL module","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["python-0:2.6.6-51.el6","rhev-hypervisor6-0:6.5-20131115.0.3.2.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4238.json"},{"CVE":"CVE-2013-5123","severity":"moderate","public_date":"2013-07-31T00:00:00Z","advisories":[],"bugzilla":"1066692","bugzilla_description":"CVE-2013-5123 python-pip: insecure software download with mirroring support","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5123.json"},{"CVE":"CVE-2013-1633","severity":"moderate","public_date":"2013-06-02T00:00:00Z","advisories":[],"bugzilla":"994182","bugzilla_description":"CVE-2013-1633 python-setuptools: easy_install insecure installation mechanism","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1633.json"},{"CVE":"CVE-2013-2099","severity":"low","public_date":"2013-05-15T00:00:00Z","advisories":["RHSA-2016:1166","RHBA-2016:1500","RHSA-2014:1690","RHSA-2015:0042","RHSA-2014:1263"],"bugzilla":"963260","bugzilla_description":"CVE-2013-2099 python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-backports-ssl_match_hostname-0:3.4.0.2-1.el6","python-pymongo-0:3.2-1.el7sat","python-pymongo-0:3.2-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2099.json"},{"CVE":"CVE-2013-1753","severity":"moderate","public_date":"2012-09-25T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1064"],"bugzilla":"1046170","bugzilla_description":"CVE-2013-1753 python: XMLRPC library unrestricted decompression of HTTP responses using gzip enconding","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["python-0:2.7.5-34.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1753.json"},{"CVE":"CVE-2013-1752","severity":"moderate","public_date":"2012-09-25T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1046174","bugzilla_description":"CVE-2013-1752 python: multiple unbound readline() DoS flaws in python stdlib","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1752.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-Cython_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-Cython_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-Cython_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-PyMySQL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-PyMySQL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-PyMySQL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt-addon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt-addon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt-addon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt-container-addon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt-container-addon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt-container-addon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-abrt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-argcomplete_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-argcomplete_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-argcomplete_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-argh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-argh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-argh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-asn1crypto_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-asn1crypto_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-asn1crypto_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-attrs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-attrs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-attrs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-audit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-audit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-audit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-augeas_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-augeas_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-augeas_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-avahi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-avahi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-avahi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-azure-sdk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-azure-sdk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-azure-sdk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-babel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-babel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-babel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bcc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bcc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bcc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bind_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bind_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bind_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-blivet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-blivet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-blivet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-blockdev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-blockdev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-blockdev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-boom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-boom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-boom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-boto3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-boto3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-boto3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-botocore_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-botocore_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-botocore_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-brlapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-brlapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-brlapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bson_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bson_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bson_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bytesize_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bytesize_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-bytesize_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cairo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cairo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cairo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cffi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cffi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cffi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-chardet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-chardet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-chardet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-clang_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-clang_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-clang_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-click_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-click_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-click_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-clufter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-clufter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-clufter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-configobj_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-configobj_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-configobj_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-configshell_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-configshell_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-configshell_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-coverage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-coverage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-coverage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cpio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cpio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cpio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-createrepo_c_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-createrepo_c_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-createrepo_c_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-criu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-criu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-criu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cryptography_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cryptography_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cryptography_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cups_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cups_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-cups_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-custodia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-custodia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-custodia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dateutil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dateutil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dateutil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus-client-gen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus-client-gen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus-client-gen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus-python-client-gen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus-python-client-gen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus-python-client-gen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus-signature-pyparsing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus-signature-pyparsing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus-signature-pyparsing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dbus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-decorator_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-decorator_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-decorator_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-distro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-distro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-distro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dmidecode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dmidecode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dmidecode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugin-post-transaction-actions_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugin-post-transaction-actions_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugin-post-transaction-actions_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugin-spacewalk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugin-spacewalk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugin-spacewalk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugin-versionlock_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugin-versionlock_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugin-versionlock_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugins-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugins-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf-plugins-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dnf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dns_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dns_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-dns_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-docutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-docutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-docutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-enchant_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-enchant_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-enchant_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ethtool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ethtool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ethtool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-evdev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-evdev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-evdev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-fasteners_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-fasteners_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-fasteners_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-firewall_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-firewall_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-firewall_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-flask_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-flask_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-flask_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gevent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gevent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gevent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gflags_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gflags_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gflags_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gobject-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gobject-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gobject-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gobject_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gobject_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gobject_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-google-api-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-google-api-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-google-api-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gpg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gpg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gpg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-greenlet-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-greenlet-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-greenlet-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-greenlet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-greenlet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-greenlet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gssapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gssapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-gssapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hawkey_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hawkey_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hawkey_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hivex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hivex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hivex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-html5lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-html5lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-html5lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-httplib2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-httplib2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-httplib2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-humanize_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-humanize_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-humanize_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hwdata_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hwdata_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hwdata_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hypothesis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hypothesis_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-hypothesis_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-idle_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-idle_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-idle_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-idna_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-idna_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-idna_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-imagesize_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-imagesize_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-imagesize_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-iniparse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-iniparse_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-iniparse_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-inotify_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-inotify_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-inotify_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-into-dbus-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-into-dbus-python_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-into-dbus-python_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ipaclient_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ipaclient_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ipaclient_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ipalib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ipalib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ipalib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ipaserver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ipaserver_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ipaserver_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-iscsi-initiator-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-iscsi-initiator-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-iscsi-initiator-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-iso8601_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-iso8601_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-iso8601_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-itsdangerous_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-itsdangerous_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-itsdangerous_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jabberpy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jabberpy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jabberpy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-javapackages_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-javapackages_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-javapackages_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jinja2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jinja2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jinja2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jmespath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jmespath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jmespath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jsonpatch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jsonpatch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jsonpatch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jsonpointer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jsonpointer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jsonpointer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jsonschema_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jsonschema_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jsonschema_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-justbases_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-justbases_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-justbases_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-justbytes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-justbytes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-justbytes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jwcrypto_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jwcrypto_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jwcrypto_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jwt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jwt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-jwt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-kdcproxy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-kdcproxy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-kdcproxy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-keycloak-httpd-client-install_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-keycloak-httpd-client-install_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-keycloak-httpd-client-install_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-kickstart_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-kickstart_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-kickstart_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-kmod_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-kmod_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-kmod_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-koan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-koan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-koan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-langtable_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-langtable_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-langtable_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ldap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ldap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ldb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ldb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ldb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lesscpy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lesscpy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lesscpy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lib389_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lib389_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lib389_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libcomps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libcomps_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libcomps_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libdnf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libdnf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libdnf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libguestfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libguestfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libguestfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libipa_hbac_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libipa_hbac_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libipa_hbac_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libnl3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libnl3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libnl3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libnmstate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libnmstate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libnmstate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libpfm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libpfm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libpfm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libproxy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libproxy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libproxy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-librepo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-librepo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-librepo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libreport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libreport_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libreport_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libselinux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libselinux_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libselinux_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libsemanage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libsemanage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libsemanage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libsss_nss_idmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libsss_nss_idmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libsss_nss_idmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libstoragemgmt-clibs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libstoragemgmt-clibs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libstoragemgmt-clibs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libstoragemgmt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libstoragemgmt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libstoragemgmt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libuser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libuser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libuser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libvirt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libvirt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libvirt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libvoikko_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libvoikko_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libvoikko_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libxml2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libxml2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-libxml2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-linux-procfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-linux-procfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-linux-procfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lldb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lldb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lldb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-louis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-louis_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-louis_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lxml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lxml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-lxml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-magic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-magic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-magic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mako_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mako_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mako_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-markdown_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-markdown_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-markdown_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-markupsafe_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-markupsafe_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-markupsafe_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-meh-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-meh-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-meh-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-meh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-meh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-meh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mock_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mock_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mock_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mod_wsgi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mod_wsgi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mod_wsgi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mpich_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mpich_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-mpich_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-netaddr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-netaddr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-netaddr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-netifaces_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-netifaces_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-netifaces_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-networkx-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-networkx-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-networkx-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-networkx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-networkx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-networkx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-newt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-newt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-newt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-nftables_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-nftables_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-nftables_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-nose_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-nose_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-nose_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-nss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-nss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-nss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ntplib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ntplib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ntplib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-numpy-f2py_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-numpy-f2py_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-numpy-f2py_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-numpy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-numpy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-numpy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-oauth2client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-oauth2client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-oauth2client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-oauthlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-oauthlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-oauthlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-openipmi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-openipmi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-openipmi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-openmpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-openmpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-openmpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ordered-set_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ordered-set_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ordered-set_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-osa-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-osa-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-osa-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-osad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-osad_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-osad_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-packaging_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-packaging_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-packaging_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pcp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pcp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-perf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-perf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-perf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pexpect_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pexpect_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pexpect_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pid_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pid_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pillow_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pillow_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pillow_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pip-wheel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pip-wheel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pip-wheel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pki_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pki_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pki_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pluggy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pluggy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pluggy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ply_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ply_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ply_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-policycoreutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-policycoreutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-policycoreutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-prettytable_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-prettytable_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-prettytable_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-productmd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-productmd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-productmd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-protobuf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-protobuf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-protobuf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-psutil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-psutil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-psutil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-psycopg2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-psycopg2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-psycopg2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ptyprocess_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ptyprocess_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-ptyprocess_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pwquality_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pwquality_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pwquality_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyOpenSSL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyOpenSSL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyOpenSSL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-py_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-py_security_api_results.json
new file mode 100644
index 0000000..6514350
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-py_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14343","severity":"moderate","public_date":"2020-07-22T00:00:00Z","advisories":[],"bugzilla":"1860466","bugzilla_description":"CVE-2020-14343 PyYAML: incomplete fix for CVE-2020-1747","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14343.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyasn1-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyasn1-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyasn1-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyasn1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyasn1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyasn1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyatspi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyatspi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyatspi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pycparser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pycparser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pycparser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pycurl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pycurl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pycurl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pydbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pydbus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pydbus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pygments_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pygments_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pygments_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pymongo-gridfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pymongo-gridfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pymongo-gridfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pymongo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pymongo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pymongo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyparsing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyparsing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyparsing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyparted_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyparted_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyparted_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyqt5-sip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyqt5-sip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyqt5-sip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyserial_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyserial_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyserial_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pysocks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pysocks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pysocks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pytest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pytest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pytest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pytoml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pytoml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pytoml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pytz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pytz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pytz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyudev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyudev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyudev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyusb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyusb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyusb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pywbem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pywbem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pywbem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyxattr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyxattr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyxattr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyxdg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyxdg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyxdg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyyaml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyyaml_security_api_results.json
new file mode 100644
index 0000000..6514350
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-pyyaml_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14343","severity":"moderate","public_date":"2020-07-22T00:00:00Z","advisories":[],"bugzilla":"1860466","bugzilla_description":"CVE-2020-14343 PyYAML: incomplete fix for CVE-2020-1747","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14343.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qrcode-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qrcode-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qrcode-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qrcode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qrcode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qrcode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qt5-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qt5-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qt5-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qt5-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qt5-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qt5-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qt5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qt5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-qt5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-reportlab_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-reportlab_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-reportlab_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests-file_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests-file_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests-file_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests-ftp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests-ftp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests-ftp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests-oauthlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests-oauthlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests-oauthlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-requests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-check_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-check_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-check_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-client-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-client-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-client-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-setup-gnome_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-setup-gnome_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-setup-gnome_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-setup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-setup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-setup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-virtualization-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-virtualization-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-virtualization-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-virtualization-host_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-virtualization-host_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhn-virtualization-host_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg-actions_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg-actions_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg-actions_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg-management_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg-management_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg-management_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhncfg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhnlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhnlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhnlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhnpush_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhnpush_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rhnpush_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpm-generators_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpm-generators_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpm-generators_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpmfluff_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpmfluff_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rpmfluff_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rrdtool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rrdtool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rrdtool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rtslib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rtslib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-rtslib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-s3transfer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-s3transfer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-s3transfer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-samba-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-samba-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-samba-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-samba_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-samba_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-samba_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sanlock_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sanlock_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sanlock_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-schedutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-schedutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-schedutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-scipy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-scipy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-scipy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-scons_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-scons_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-scons_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-semantic_version_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-semantic_version_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-semantic_version_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setuptools-wheel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setuptools-wheel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setuptools-wheel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setuptools_scm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setuptools_scm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setuptools_scm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setuptools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setuptools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-setuptools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-simpleline_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-simpleline_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-simpleline_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sip-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sip-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sip-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-six_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-six_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-six_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-slip-dbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-slip-dbus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-slip-dbus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-slip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-slip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-slip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-snowballstemmer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-snowballstemmer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-snowballstemmer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-abrt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-abrt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-abrt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-backend-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-backend-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-backend-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-koan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-koan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-koan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-oscap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-oscap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-oscap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-usix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-usix_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-spacewalk-usix_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-speechd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-speechd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-speechd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinx-theme-alabaster_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinx-theme-alabaster_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinx-theme-alabaster_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinx_rtd_theme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinx_rtd_theme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinx_rtd_theme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinxcontrib-websupport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinxcontrib-websupport_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sphinxcontrib-websupport_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sqlalchemy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sqlalchemy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sqlalchemy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sss-murmur_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sss-murmur_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sss-murmur_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sssdconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sssdconfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sssdconfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-subscription-manager-rhsm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-subscription-manager-rhsm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-subscription-manager-rhsm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-suds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-suds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-suds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sure_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sure_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sure_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sushy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sushy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-sushy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-syspurpose_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-syspurpose_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-syspurpose_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-systemd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-systemd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-systemd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-talloc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-talloc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-talloc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tbb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tbb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tbb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tdb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tdb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tevent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tevent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tevent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tkinter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tkinter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-tkinter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-unbound_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-unbound_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-unbound_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-unittest2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-unittest2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-unittest2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-uritemplate_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-uritemplate_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-uritemplate_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-urllib3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-urllib3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-urllib3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-urwid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-urwid_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-urwid_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-varlink_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-varlink_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-varlink_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-virtualenv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-virtualenv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-virtualenv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-webencodings_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-webencodings_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-webencodings_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-werkzeug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-werkzeug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-werkzeug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-wheel-wheel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-wheel-wheel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-wheel-wheel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-wheel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-wheel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-wheel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-whoosh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-whoosh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-whoosh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-yubico_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-yubico_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python3-yubico_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36-debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36-debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36-debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36-rpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36-rpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36-rpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36_security_api_results.json
new file mode 100644
index 0000000..56ba4a6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python36_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-27619","severity":"moderate","public_date":"2020-10-05T00:00:00Z","advisories":[],"bugzilla":"1889886","bugzilla_description":"CVE-2020-27619 python: Python 3 eval of http resources during test suite runs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-95","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14343","severity":"moderate","public_date":"2020-07-22T00:00:00Z","advisories":[],"bugzilla":"1860466","bugzilla_description":"CVE-2020-14343 PyYAML: incomplete fix for CVE-2020-1747","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14343.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-15801","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":[],"bugzilla":"1860242","bugzilla_description":"CVE-2020-15801 python: sys.path allowing code to be loaded from arbitrary locations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15801.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2020-14422","severity":"moderate","public_date":"2020-06-18T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285"],"bugzilla":"1854926","bugzilla_description":"CVE-2020-14422 python: DoS via inefficiency in IPv{4,6}Interface classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14422.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-20225","severity":"low","public_date":"2020-04-28T00:00:00Z","advisories":[],"bugzilla":"1835736","bugzilla_description":"CVE-2018-20225 python-pip: when --extra-index-url option is used and package does not already exist in the public index, the installation of malicious package with arbitrary version number is possible.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-348","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20225.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2020-1747","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1807367","bugzilla_description":"CVE-2020-1747 PyYAML: arbitrary command execution through python/object/new when FullLoader is used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1747.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-8492","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:3888"],"bugzilla":"1809065","bugzilla_description":"CVE-2020-8492 python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["python3-0:3.6.8-17.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8492.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-26116","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1883014","bugzilla_description":"CVE-2020-26116 python: CRLF injection via HTTP request method in httplib/http.client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26116.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-26137","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299"],"bugzilla":"1883632","bugzilla_description":"CVE-2020-26137 python-urllib3: CRLF injection via HTTP request method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["rh-python38-python-urllib3-0:1.25.7-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26137.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-8315","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1855039","bugzilla_description":"CVE-2020-8315 python: unsafe dll loading in getpathp.c on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8315.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-20907","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1856481","bugzilla_description":"CVE-2019-20907 python: infinite loop in the tarfile module via crafted TAR archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-835","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20907.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20477","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1806005","bugzilla_description":"CVE-2019-20477 PyYAML: command execution through python/object/apply constructor in FullLoader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20477.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-17514","severity":null,"public_date":"2019-10-12T00:00:00Z","advisories":[],"bugzilla":"1824446","bugzilla_description":"CVE-2019-17514 python: potentially misleading information about whether sorting in library/glob.html","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17514.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-16935","severity":"moderate","public_date":"2019-09-21T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:3911","RHSA-2020:3888"],"bugzilla":"1763229","bugzilla_description":"CVE-2019-16935 python: XSS vulnerability in the documentation XML-RPC server in server_title field","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["python-0:2.7.5-89.el7","python3-0:3.6.8-17.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16935.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-18348","severity":"moderate","public_date":"2019-07-04T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1727276","bugzilla_description":"CVE-2019-18348 python: CRLF injection via the host part of the url passed to urlopen()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10160","severity":"important","public_date":"2019-06-03T00:00:00Z","advisories":["RHSA-2019:1587","RHSA-2019:1700","RHSA-2019:2437"],"bugzilla":"1718388","bugzilla_description":"CVE-2019-10160 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python27-python-0:2.7.16-6.el6","python27-python-0:2.7.16-6.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","python-0:2.7.5-80.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-11324","severity":"moderate","public_date":"2019-04-17T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:2804","RHSA-2020:1916","RHSA-2020:1605","RHBA-2020:2785","RHSA-2019:3590"],"bugzilla":"1702473","bugzilla_description":"CVE-2019-11324 python-urllib3: Certification mishandle when error should be thrown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-pip-0:9.0.3-7.el7_8","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20916","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1868135","bugzilla_description":"CVE-2019-20916 python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["python27-python-pip-0:8.1.2-6.el7","rh-python36-python-virtualenv-0:15.1.0-3.el6","python27-python-virtualenv-0:13.1.0-4.el7","rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-virtualenv-0:15.1.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20916.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-10906","severity":"important","public_date":"2019-04-06T00:00:00Z","advisories":["RHSA-2019:1237","RHSA-2019:1329","RHSA-2019:1152","RHSA-2019:3172"],"bugzilla":"1698839","bugzilla_description":"CVE-2019-10906 python-jinja2: str.format_map allows sandbox escape","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","rh-python36-python-jinja2-0:2.9.6-3.el6","rh-python36-python-jinja2-0:2.9.6-3.el7","rh-python35-python-jinja2-0:2.8.1-2.el7","python-jinja2-0:2.10.1-2.el8_0","rh-python35-python-jinja2-0:2.8.1-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-9948","severity":"moderate","public_date":"2019-03-23T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:1268","RHSA-2020:1462","RHSA-2019:3520","RHSA-2019:1700","RHSA-2020:1346","RHSA-2019:2030"],"bugzilla":"1695570","bugzilla_description":"CVE-2019-9948 python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-749","affected_packages":["python27:2.7-8010020190903182548.51c94b97","python-0:2.7.5-63.el7_4","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-6.el6","python27-python-0:2.7.16-6.el7","python3-0:3.6.8-15.1.el8","python-0:2.7.5-74.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9948.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-9947","severity":"moderate","public_date":"2019-03-23T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:1268","RHSA-2020:1462","RHSA-2019:3520","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:2030","RHSA-2019:1260"],"bugzilla":"1695572","bugzilla_description":"CVE-2019-9947 python: CRLF injection via the path part of the url passed to urlopen()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27:2.7-8010020190903182548.51c94b97","rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-4.el7","python3-0:3.6.8-15.1.el8","python-0:2.7.5-74.el7_5","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9947.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9740","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:1268","RHSA-2020:1462","RHSA-2019:3520","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:2030","RHSA-2019:1260"],"bugzilla":"1688169","bugzilla_description":"CVE-2019-9740 python: CRLF injection via the query part of the url passed to urlopen()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27:2.7-8010020190903182548.51c94b97","rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-4.el7","python3-0:3.6.8-15.1.el8","python-0:2.7.5-74.el7_5","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11236","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHBA-2020:2804","RHSA-2020:1605","RHSA-2020:0851","RHBA-2020:2785","RHSA-2019:2272","RHBA-2020:1540","RHSA-2019:3590","RHSA-2020:1916","RHSA-2020:2081"],"bugzilla":"1700824","bugzilla_description":"CVE-2019-11236 python-urllib3: CRLF injection due to not encoding the '\\r\\n' sequence leading to possible attack on internal service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.10.2-7.el7","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-9674","severity":"low","public_date":"2019-03-11T00:00:00Z","advisories":[],"bugzilla":"1800749","bugzilla_description":"CVE-2019-9674 python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-409","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9674.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9636","severity":"important","public_date":"2019-03-06T00:00:00Z","advisories":["RHBA-2019:0763","RHSA-2019:2980","RHSA-2019:0806","RHSA-2019:1467","RHSA-2019:0981","RHSA-2019:0710","RHSA-2019:0765","RHSA-2019:0997","RHSA-2019:3170","RHBA-2019:0764","RHSA-2019:0902"],"bugzilla":"1688543","bugzilla_description":"CVE-2019-9636 python: Information Disclosure due to urlsplit improper NFKC normalization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python3-0:3.6.8-2.el8_0","python27-python-0:2.7.13-4.el6","rhvm-appliance-0:4.2-20190411.1.el7","python27-python-0:2.7.13-6.el7","python-0:2.7.5-59.el7_4","python-0:2.7.5-70.el7_5","rh-python36-python-0:3.6.3-4.el6","redhat-virtualization-host-0:4.2-20190411.1.el7_6","python27:2.7-8000020190410132513.c0efe978","rh-python35-python-0:3.5.1-12.el7","rh-python35-python-0:3.5.1-12.el6","python-0:2.7.5-77.el7_6","python-0:2.6.6-68.el6_10","rh-python36-python-0:3.6.3-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-7548","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:0984","RHSA-2019:0981"],"bugzilla":"1674059","bugzilla_description":"CVE-2019-7548 python-sqlalchemy: SQL Injection when the group_by parameter can be controlled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":["python27:2.7-8000020190410132513.c0efe978","python36:3.6-8000020190410133122.593c47b3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-7164","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:0984","RHSA-2019:0981"],"bugzilla":"1678520","bugzilla_description":"CVE-2019-7164 python-sqlalchemy: SQL Injection when the order_by parameter can be controlled","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python27:2.7-8000020190410132513.c0efe978","python36:3.6-8000020190410133122.593c47b3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-6446","severity":"moderate","public_date":"2019-01-16T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2019:3704"],"bugzilla":"1667950","bugzilla_description":"CVE-2019-6446 numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-20","affected_packages":["python27:2.7-8010020190903182548.51c94b97","numpy-1:1.14.3-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-5010","severity":"moderate","public_date":"2019-01-15T00:00:00Z","advisories":["RHSA-2019:3520","RHSA-2019:3725","RHSA-2019:2030"],"bugzilla":"1666519","bugzilla_description":"CVE-2019-5010 python: NULL pointer dereference using a specially crafted X509 certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-86.el7","python3-0:3.6.8-15.1.el8","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20852","severity":"moderate","public_date":"2018-10-31T00:00:00Z","advisories":["RHBA-2020:1539","RHSA-2020:1132","RHSA-2020:1131","RHSA-2019:3948","RHSA-2020:1605","RHSA-2019:3725","RHSA-2020:1764","RHBA-2020:1540"],"bugzilla":"1740347","bugzilla_description":"CVE-2018-20852 python: Cookie domain check returns incorrect results","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","rh-python36-python-0:3.6.9-2.el6","python27-python-0:2.7.17-2.el6","python3-0:3.6.8-13.el7","python27-python-0:2.7.17-2.el7","python-0:2.7.5-88.el7","python3-0:3.6.8-23.el8","rh-python36-python-0:3.6.9-2.el7","python27:2.7-8020020200117110429.90f98d4f"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20852.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-14647","severity":"moderate","public_date":"2018-09-22T00:00:00Z","advisories":["RHSA-2020:1268","RHSA-2020:1462","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:2030","RHSA-2019:1260"],"bugzilla":"1631822","bugzilla_description":"CVE-2018-14647 python: Missing salt initialization in _elementtree.c module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665->CWE-335","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python-0:2.7.5-86.el7","python-0:2.7.5-83.el7_6","python27-python-0:2.7.16-4.el7","python-0:2.7.5-74.el7_5","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14647.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20406","severity":"low","public_date":"2018-09-21T00:00:00Z","advisories":["RHSA-2019:3725"],"bugzilla":"1664509","bugzilla_description":"CVE-2018-20406 python: Integer overflow in Modules/_pickle.c allows for memory exhaustion if serializing gigabytes of data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":["rh-python36-python-0:3.6.9-2.el6","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20406.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-1000802","severity":"moderate","public_date":"2018-08-29T00:00:00Z","advisories":[],"bugzilla":"1631420","bugzilla_description":"CVE-2018-1000802 python: Command injection in the shutil module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2019-16056","severity":"moderate","public_date":"2018-07-19T00:00:00Z","advisories":["RHSA-2020:2520","RHBA-2020:1539","RHSA-2020:1132","RHSA-2020:1131","RHSA-2019:3948","RHSA-2020:1605","RHSA-2019:3725","RHSA-2020:1764","RHBA-2020:1540"],"bugzilla":"1749839","bugzilla_description":"CVE-2019-16056 python: email.utils.parseaddr wrongly parses email addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","rh-python36-python-0:3.6.9-2.el6","python27-python-0:2.7.17-2.el6","python3-0:3.6.8-13.el7","python27-python-0:2.7.17-2.el7","python-0:2.7.5-88.el7","python-0:2.7.5-87.el7_7","python3-0:3.6.8-23.el8","rh-python36-python-0:3.6.9-2.el7","python27:2.7-8020020200117110429.90f98d4f"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-18074","severity":"low","public_date":"2018-06-29T00:00:00Z","advisories":["RHSA-2019:2035","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHBA-2020:1540"],"bugzilla":"1643829","bugzilla_description":"CVE-2018-18074 python-requests: Redirect from HTTPS to HTTP does not remove Authorization header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-requests-0:2.6.0-5.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18074.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2017-18342","severity":"moderate","public_date":"2018-06-27T00:00:00Z","advisories":[],"bugzilla":"1595743","bugzilla_description":"CVE-2017-18342 PyYAML: yaml.load() API could execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18342.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-20060","severity":"moderate","public_date":"2018-03-26T00:00:00Z","advisories":["RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHSA-2019:2272","RHBA-2020:1540"],"bugzilla":"1649153","bugzilla_description":"CVE-2018-20060 python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-urllib3-0:1.10.2-7.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1060","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3041","RHSA-2020:1268","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:1260"],"bugzilla":"1549191","bugzilla_description":"CVE-2018-1060 python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python27-python-0:2.7.16-4.el7","python-0:2.7.5-74.el7_5","python-0:2.7.5-76.el7","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1061","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:3041","RHSA-2020:1268","RHSA-2020:1346","RHSA-2019:3725","RHSA-2019:1260"],"bugzilla":"1549192","bugzilla_description":"CVE-2018-1061 python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-python36-python-0:3.6.9-2.el6","python-0:2.7.5-63.el7_4","python27-python-0:2.7.16-4.el6","python27-python-0:2.7.16-4.el7","python-0:2.7.5-74.el7_5","python-0:2.7.5-76.el7","rh-python36-python-0:3.6.9-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-17522","severity":"moderate","public_date":"2017-12-14T00:00:00Z","advisories":[],"bugzilla":"1526176","bugzilla_description":"CVE-2017-17522 python: Command injection in Lib/webbrowser.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17522.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000030","severity":"low","public_date":"2017-09-20T00:00:00Z","advisories":[],"bugzilla":"1541558","bugzilla_description":"CVE-2018-1000030 python: Heap-Buffer-Overflow and Heap-Use-After-Free in Objects/fileobject.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000030.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2017-1000158","severity":"moderate","public_date":"2017-06-13T00:00:00Z","advisories":[],"bugzilla":"1519595","bugzilla_description":"CVE-2017-1000158 python: Integer overflow in PyString_DecodeEscape results in heap-base buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2016-10745","severity":"important","public_date":"2016-12-29T00:00:00Z","advisories":["RHSA-2019:1022","RHSA-2019:3964","RHSA-2019:1237","RHSA-2019:4062","RHSA-2019:1260","RHSA-2019:3172"],"bugzilla":"1698345","bugzilla_description":"CVE-2016-10745 python-jinja2: Sandbox escape due to information disclosure via str.format","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","python27-python-jinja2-0:2.6-15.el7","python-jinja2-0:2.7.2-3.el7_4","python-jinja2-0:2.7.2-3.el7_5","python-jinja2-0:2.7.2-3.el7_6","rh-python35-python-jinja2-0:2.8.1-2.el7","rh-python35-python-jinja2-0:2.8.1-2.el6","python27-python-jinja2-0:2.6-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-Cython_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-Cython_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-Cython_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-PyMySQL_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-PyMySQL_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-PyMySQL_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-asn1crypto_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-asn1crypto_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-asn1crypto_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-atomicwrites_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-atomicwrites_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-atomicwrites_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-attrs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-attrs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-attrs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-babel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-babel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-babel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-cffi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-cffi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-cffi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-chardet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-chardet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-chardet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-cryptography_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-cryptography_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-cryptography_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-debug_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-debug_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-debug_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-idle_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-idle_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-idle_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-idna_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-idna_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-idna_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-jinja2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-jinja2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-jinja2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-lxml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-lxml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-lxml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-markupsafe_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-markupsafe_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-markupsafe_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-mod_wsgi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-mod_wsgi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-mod_wsgi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-more-itertools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-more-itertools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-more-itertools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-numpy-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-numpy-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-numpy-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-numpy-f2py_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-numpy-f2py_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-numpy-f2py_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-numpy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-numpy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-numpy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-packaging_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-packaging_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-packaging_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pip-wheel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pip-wheel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pip-wheel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pluggy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pluggy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pluggy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-ply_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-ply_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-ply_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psutil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psutil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psutil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psycopg2-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psycopg2-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psycopg2-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psycopg2-tests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psycopg2-tests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psycopg2-tests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psycopg2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psycopg2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-psycopg2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-py_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-py_security_api_results.json
new file mode 100644
index 0000000..eb33af1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-py_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-27619","severity":"moderate","public_date":"2020-10-05T00:00:00Z","advisories":[],"bugzilla":"1889886","bugzilla_description":"CVE-2020-27619 python: Python 3 eval of http resources during test suite runs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-95","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14343","severity":"moderate","public_date":"2020-07-22T00:00:00Z","advisories":[],"bugzilla":"1860466","bugzilla_description":"CVE-2020-14343 PyYAML: incomplete fix for CVE-2020-1747","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14343.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-15801","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":[],"bugzilla":"1860242","bugzilla_description":"CVE-2020-15801 python: sys.path allowing code to be loaded from arbitrary locations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15801.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2020-14422","severity":"moderate","public_date":"2020-06-18T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285"],"bugzilla":"1854926","bugzilla_description":"CVE-2020-14422 python: DoS via inefficiency in IPv{4,6}Interface classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14422.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-7212","severity":null,"public_date":"2020-03-06T00:00:00Z","advisories":[],"bugzilla":"1812095","bugzilla_description":"CVE-2020-7212 python-urllib3: inefficient algorithm allows a DoS (CPU consumption) in _encode_invalid_chars function in util/url.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7212.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-1747","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1807367","bugzilla_description":"CVE-2020-1747 PyYAML: arbitrary command execution through python/object/new when FullLoader is used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1747.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-8492","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:3888"],"bugzilla":"1809065","bugzilla_description":"CVE-2020-8492 python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["python3-0:3.6.8-17.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8492.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-26116","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1883014","bugzilla_description":"CVE-2020-26116 python: CRLF injection via HTTP request method in httplib/http.client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26116.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-26137","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299"],"bugzilla":"1883632","bugzilla_description":"CVE-2020-26137 python-urllib3: CRLF injection via HTTP request method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["rh-python38-python-urllib3-0:1.25.7-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26137.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-8315","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1855039","bugzilla_description":"CVE-2020-8315 python: unsafe dll loading in getpathp.c on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8315.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-20907","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1856481","bugzilla_description":"CVE-2019-20907 python: infinite loop in the tarfile module via crafted TAR archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-835","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20907.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20477","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1806005","bugzilla_description":"CVE-2019-20477 PyYAML: command execution through python/object/apply constructor in FullLoader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20477.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-18874","severity":"moderate","public_date":"2019-11-07T00:00:00Z","advisories":["RHSA-2020:2583","RHSA-2020:4255","RHSA-2020:4299","RHSA-2020:4254","RHSA-2020:2593","RHSA-2020:2635"],"bugzilla":"1772014","bugzilla_description":"CVE-2019-18874 python-psutil: double free because of refcount mishandling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["rh-python38-python-psutil-0:5.6.4-5.el7","ansible-tower-36/ansible-runner-rhel7:1.4.4-2","python-psutil-0:5.6.6-1.el7ar","ansible-tower-37/ansible-runner-rhel7:1.4.6-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18874.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-17514","severity":null,"public_date":"2019-10-12T00:00:00Z","advisories":[],"bugzilla":"1824446","bugzilla_description":"CVE-2019-17514 python: potentially misleading information about whether sorting in library/glob.html","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17514.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-20916","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1868135","bugzilla_description":"CVE-2019-20916 python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["python27-python-pip-0:8.1.2-6.el7","rh-python36-python-virtualenv-0:15.1.0-3.el6","python27-python-virtualenv-0:13.1.0-4.el7","rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-virtualenv-0:15.1.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20916.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pycparser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pycparser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pycparser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pyparsing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pyparsing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pyparsing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pysocks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pysocks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pysocks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pytest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pytest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pytest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pytz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pytz_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pytz_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pyyaml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pyyaml_security_api_results.json
new file mode 100644
index 0000000..c4f4829
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-pyyaml_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14343","severity":"moderate","public_date":"2020-07-22T00:00:00Z","advisories":[],"bugzilla":"1860466","bugzilla_description":"CVE-2020-14343 PyYAML: incomplete fix for CVE-2020-1747","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14343.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-1747","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1807367","bugzilla_description":"CVE-2020-1747 PyYAML: arbitrary command execution through python/object/new when FullLoader is used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1747.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-20477","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1806005","bugzilla_description":"CVE-2019-20477 PyYAML: command execution through python/object/apply constructor in FullLoader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20477.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-requests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-requests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-requests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-rpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-rpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-rpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-scipy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-scipy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-scipy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-setuptools-wheel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-setuptools-wheel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-setuptools-wheel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-setuptools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-setuptools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-setuptools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-six_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-six_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-six_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-tkinter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-tkinter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-tkinter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-urllib3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-urllib3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-urllib3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-wcwidth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-wcwidth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-wcwidth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-wheel-wheel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-wheel-wheel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-wheel-wheel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-wheel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-wheel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38-wheel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38_security_api_results.json
new file mode 100644
index 0000000..eb33af1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/python38_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-27619","severity":"moderate","public_date":"2020-10-05T00:00:00Z","advisories":[],"bugzilla":"1889886","bugzilla_description":"CVE-2020-27619 python: Python 3 eval of http resources during test suite runs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-95","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14343","severity":"moderate","public_date":"2020-07-22T00:00:00Z","advisories":[],"bugzilla":"1860466","bugzilla_description":"CVE-2020-14343 PyYAML: incomplete fix for CVE-2020-1747","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14343.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-15801","severity":"important","public_date":"2020-07-15T00:00:00Z","advisories":[],"bugzilla":"1860242","bugzilla_description":"CVE-2020-15801 python: sys.path allowing code to be loaded from arbitrary locations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15801.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2020-14422","severity":"moderate","public_date":"2020-06-18T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285"],"bugzilla":"1854926","bugzilla_description":"CVE-2020-14422 python: DoS via inefficiency in IPv{4,6}Interface classes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14422.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-7212","severity":null,"public_date":"2020-03-06T00:00:00Z","advisories":[],"bugzilla":"1812095","bugzilla_description":"CVE-2020-7212 python-urllib3: inefficient algorithm allows a DoS (CPU consumption) in _encode_invalid_chars function in util/url.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7212.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-1747","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1807367","bugzilla_description":"CVE-2020-1747 PyYAML: arbitrary command execution through python/object/new when FullLoader is used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1747.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-8492","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:3888"],"bugzilla":"1809065","bugzilla_description":"CVE-2020-8492 python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["python3-0:3.6.8-17.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8492.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-26116","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1883014","bugzilla_description":"CVE-2020-26116 python: CRLF injection via HTTP request method in httplib/http.client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26116.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-26137","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299"],"bugzilla":"1883632","bugzilla_description":"CVE-2020-26137 python-urllib3: CRLF injection via HTTP request method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["rh-python38-python-urllib3-0:1.25.7-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26137.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-8315","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1855039","bugzilla_description":"CVE-2020-8315 python: unsafe dll loading in getpathp.c on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8315.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2019-20907","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2020:4299","RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1856481","bugzilla_description":"CVE-2019-20907 python: infinite loop in the tarfile module via crafted TAR archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-835","affected_packages":["python27-python-0:2.7.18-2.el7","rh-python36-python-0:3.6.12-1.el6","rh-python36-python-0:3.6.12-1.el7","rh-python38-python-0:3.8.6-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20907.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20477","severity":"moderate","public_date":"2019-11-18T00:00:00Z","advisories":[],"bugzilla":"1806005","bugzilla_description":"CVE-2019-20477 PyYAML: command execution through python/object/apply constructor in FullLoader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20477.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-18874","severity":"moderate","public_date":"2019-11-07T00:00:00Z","advisories":["RHSA-2020:2583","RHSA-2020:4255","RHSA-2020:4299","RHSA-2020:4254","RHSA-2020:2593","RHSA-2020:2635"],"bugzilla":"1772014","bugzilla_description":"CVE-2019-18874 python-psutil: double free because of refcount mishandling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["rh-python38-python-psutil-0:5.6.4-5.el7","ansible-tower-36/ansible-runner-rhel7:1.4.4-2","python-psutil-0:5.6.6-1.el7ar","ansible-tower-37/ansible-runner-rhel7:1.4.6-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18874.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-17514","severity":null,"public_date":"2019-10-12T00:00:00Z","advisories":[],"bugzilla":"1824446","bugzilla_description":"CVE-2019-17514 python: potentially misleading information about whether sorting in library/glob.html","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17514.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-20916","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1868135","bugzilla_description":"CVE-2019-20916 python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["python27-python-pip-0:8.1.2-6.el7","rh-python36-python-virtualenv-0:15.1.0-3.el6","python27-python-virtualenv-0:13.1.0-4.el7","rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-virtualenv-0:15.1.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20916.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qclib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qclib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qclib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qclib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qclib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qclib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qdox-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qdox-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qdox-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qdox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qdox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qdox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-guest-agent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-guest-agent_security_api_results.json
new file mode 100644
index 0000000..944ea29
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-guest-agent_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-12247","severity":null,"public_date":"2019-01-07T00:00:00Z","advisories":[],"bugzilla":"1712834","bugzilla_description":"CVE-2019-12247 QEMU: qemu-guest-agent: integer overflow while running guest-exec command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12247.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2018-12617","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1594054","bugzilla_description":"CVE-2018-12617 Qemu: qemu-guest-agent: Integer overflow causes segmentation fault in qmp_guest_file_read()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2018-5683","severity":"low","public_date":"2017-12-25T00:00:00Z","advisories":["RHSA-2018:2162","RHSA-2018:1104","RHSA-2018:1113","RHSA-2018:0816"],"bugzilla":"1530356","bugzilla_description":"CVE-2018-5683 Qemu: Out-of-bounds read in vga_draw_text routine","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7","qemu-kvm-10:1.5.3-156.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5683.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-18030","severity":"low","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1530360","bugzilla_description":"CVE-2017-18030 Qemu: Out-of-bounds access in cirrus_invalidate_region routine","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18030.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2015-5745","severity":"low","public_date":"2015-07-23T00:00:00Z","advisories":[],"bugzilla":"1251157","bugzilla_description":"CVE-2015-5745 kernel: qemu buffer overflow in virtio-serial","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5745.json"},{"CVE":"CVE-2015-4037","severity":"moderate","public_date":"2015-05-13T00:00:00Z","advisories":[],"bugzilla":"1222892","bugzilla_description":"CVE-2015-4037 qemu: insecure temporary file use in /net/slirp.c","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4037.json"},{"CVE":"CVE-2014-9766","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1311882","bugzilla_description":"CVE-2014-9766 pixman: integer overflow in create_bits function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9766.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-img_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-img_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-img_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-curl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-curl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-curl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-gluster_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-gluster_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-gluster_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-iscsi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-iscsi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-iscsi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-rbd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-rbd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-rbd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-ssh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-ssh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-block-ssh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-tests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-tests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm-tests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm_security_api_results.json
new file mode 100644
index 0000000..1dd7b30
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qemu-kvm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-27661","severity":"low","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1890653","bugzilla_description":"CVE-2020-27661 QEMU: divide by zero in dwc2_handle_packet() in hw/usb/hcd-dwc2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27661.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-25624","severity":"moderate","public_date":"2020-09-11T00:00:00Z","advisories":[],"bugzilla":"1879801","bugzilla_description":"CVE-2020-25624 QEMU: usb: hcd-ohci: out-of-bound access issue while processing transfer descriptors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25624.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-25625","severity":"low","public_date":"2020-09-11T00:00:00Z","advisories":[],"bugzilla":"1879808","bugzilla_description":"CVE-2020-25625 QEMU: usb: hcd-ohci: infinite loop issue while processing transfer descriptors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25625.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2020-14364","severity":"important","public_date":"2020-08-24T12:00:00Z","advisories":["RHSA-2020:4049","RHSA-2020:4115","RHSA-2020:4048","RHSA-2020:4059","RHSA-2020:4047","RHSA-2020:4058","RHSA-2020:4079","RHSA-2020:4167","RHSA-2020:4056","RHSA-2020:4078","RHSA-2020:4111","RHSA-2020:4055","RHSA-2020:4176","RHSA-2020:4054","RHSA-2020:4053","RHSA-2020:4052","RHSA-2020:4162","RHSA-2020:4051","RHSA-2020:4172","RHSA-2020:4050","RHSA-2020:4291","RHSA-2020:4290"],"bugzilla":"1869201","bugzilla_description":"CVE-2020-14364 QEMU: usb: out-of-bounds r/w access issue while processing usb packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["qemu-kvm-10:1.5.3-105.el7_2.20","qemu-kvm-rhev-10:2.12.0-33.el7_7.12","qemu-kvm-10:1.5.3-175.el7_9.1","qemu-kvm-10:1.5.3-160.el7_6.8","qemu-kvm-10:1.5.3-141.el7_4.11","qemu-kvm-ma-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-18.el7_6.12","qemu-kvm-2:0.12.1.2-2.448.el6_6.9","virt:rhel-8000020200910175113.f8e95b4e","qemu-kvm-ma-10:2.12.0-18.el7_6.7","qemu-kvm-10:1.5.3-167.el7_7.7","qemu-kvm-2:0.12.1.2-2.506.el6_10.8","qemu-kvm-2:0.12.1.2-2.415.el6_5.21","qemu-kvm-ma-10:2.12.0-48.el7_9.1","virt:rhel-8020020200909224913.4cda2c84","qemu-kvm-rhev-10:2.12.0-48.el7_9.1","qemu-kvm-10:1.5.3-126.el7_3.18","redhat-virtualization-host-0:4.4.2-20200930.0.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14364.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-24352","severity":"low","public_date":"2020-08-14T00:00:00Z","advisories":[],"bugzilla":"1847584","bugzilla_description":"CVE-2020-24352 QEMU: out-of-bounds read/write in ati-vga device emulation in ati_2d_blt()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24352.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2020-17380","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1862167","bugzilla_description":"CVE-2020-17380 QEMU: heap buffer overflow in sdhci_sdma_transfer_multi_blocks() in hw/sd/sdhci.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17380.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2020-16092","severity":"low","public_date":"2020-07-27T00:00:00Z","advisories":[],"bugzilla":"1860283","bugzilla_description":"CVE-2020-16092 QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16092.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-15859","severity":"moderate","public_date":"2020-07-16T00:00:00Z","advisories":[],"bugzilla":"1859168","bugzilla_description":"CVE-2020-15859 QEMU: net: e1000e: use-after-free while sending packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15859.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-15863","severity":"low","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1853725","bugzilla_description":"CVE-2020-15863 QEMU: stack-based overflow in xgmac_enet_send() in hw/net/xgmac.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15863.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-25084","severity":"low","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1879652","bugzilla_description":"CVE-2020-25084 QEMU: usb: use-after-free issue while setting up packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25084.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-25085","severity":"moderate","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1879671","bugzilla_description":"CVE-2020-25085 QEMU: sdhci: out-of-bounds access issue while doing multi block SDMA","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25085.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-25741","severity":"low","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1881401","bugzilla_description":"CVE-2020-25741 QEMU: fdc: null pointer dereference during r/w data transfer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25741.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-25743","severity":"low","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1881409","bugzilla_description":"CVE-2020-25743 QEMU: ide: null pointer dereference while cancelling i/o operation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25743.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-25742","severity":"low","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1883178","bugzilla_description":"CVE-2020-25742 QEMU: scsi: lsi: null pointer dereference during memory move","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25742.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-15469","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1853154","bugzilla_description":"CVE-2020-15469 QEMU: MMIO ops null pointer dereference may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15469.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.3"},{"CVE":"CVE-2020-10761","severity":"moderate","public_date":"2020-06-08T00:00:00Z","advisories":["RHBA-2020:3172"],"bugzilla":"1843707","bugzilla_description":"CVE-2020-10761 QEMU: nbd: reachable assertion failure in nbd_negotiate_send_rep_verr via remote client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10761.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-13791","severity":"low","public_date":"2020-06-03T00:00:00Z","advisories":[],"bugzilla":"1843764","bugzilla_description":"CVE-2020-13791 QEMU: ati-vga: OOB access while reading PCI configuration may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13791.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2020-13800","severity":"low","public_date":"2020-06-03T00:00:00Z","advisories":[],"bugzilla":"1843771","bugzilla_description":"CVE-2020-13800 QEMU: ati-vga: infinite recursion in ati_mm_read/write calls may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13800.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2020-13754","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":[],"bugzilla":"1842363","bugzilla_description":"CVE-2020-13754 QEMU: msix: OOB access during mmio operations may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13754.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-10756","severity":"moderate","public_date":"2020-05-27T00:00:00Z","advisories":["RHSA-2020:3586","RHSA-2020:4059"],"bugzilla":"1835986","bugzilla_description":"CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["virt:rhel-8020020200909224913.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10756.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-13253","severity":"low","public_date":"2020-05-20T00:00:00Z","advisories":[],"bugzilla":"1838546","bugzilla_description":"CVE-2020-13253 QEMU: sd: OOB access could crash the guest resulting in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13253.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2020-13361","severity":"low","public_date":"2020-05-15T00:00:00Z","advisories":[],"bugzilla":"1840980","bugzilla_description":"CVE-2020-13361 QEMU: es1370: OOB access due to incorrect frame count leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13361.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2020-13659","severity":"low","public_date":"2020-05-14T00:00:00Z","advisories":[],"bugzilla":"1842496","bugzilla_description":"CVE-2020-13659 QEMU: exec: address_space_map returns NULL without setting length to zero may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13659.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2020-13765","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":[],"bugzilla":"1842912","bugzilla_description":"CVE-2020-13765 QEMU: loader: OOB access while loading registered ROM may lead to code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13765.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-13362","severity":"low","public_date":"2020-05-07T00:00:00Z","advisories":[],"bugzilla":"1840999","bugzilla_description":"CVE-2020-13362 QEMU: megasas: OOB read access due to invalid index leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13362.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-10717","severity":"low","public_date":"2020-04-30T00:00:00Z","advisories":["RHBA-2020:3172"],"bugzilla":"1827808","bugzilla_description":"CVE-2020-10717 QEMU: virtiofsd: guest may open maximum file descriptor to cause DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10717.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2020-11869","severity":"low","public_date":"2020-04-07T00:00:00Z","advisories":[],"bugzilla":"1809955","bugzilla_description":"CVE-2020-11869 qemu: integer overflow in ati_2d_blt() in hw/display/ati-2d.c could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->(CWE-125|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11869.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2020-10702","severity":"low","public_date":"2020-04-02T00:00:00Z","advisories":["RHBA-2020:3172"],"bugzilla":"1809948","bugzilla_description":"CVE-2020-10702 qemu: weak signature generation in Pointer Authentication support for ARM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10702.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-1983","severity":"moderate","public_date":"2020-04-02T00:00:00Z","advisories":["RHBA-2020:3172","RHSA-2020:4079","RHSA-2020:3053","RHSA-2020:4290"],"bugzilla":"1829825","bugzilla_description":"CVE-2020-1983 QEMU: slirp: use-after-free in ip_reass() function in ip_input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["qemu-kvm-10:1.5.3-175.el7_9.1","container-tools:rhel8-8020120200601155013.ffd2803a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1983.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-11102","severity":"important","public_date":"2020-02-11T00:00:00Z","advisories":[],"bugzilla":"1821180","bugzilla_description":"CVE-2020-11102 QEMU: tulip: OOB access in tulip_copy_tx_buffers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11102.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-8608","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:2774","RHSA-2020:2730","RHSA-2020:2773","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:2342","RHSA-2020:1352","RHBA-2020:0527","RHSA-2020:1351","RHSA-2020:1208","RHSA-2020:0889","RHSA-2020:1209","RHSA-2020:2844","RHSA-2020:1379","RHSA-2020:1403","RHSA-2020:3040","RHSA-2020:1292"],"bugzilla":"1798453","bugzilla_description":"CVE-2020-8608 QEMU: Slirp: potential OOB access due to unsafe snprintf() usages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-160.el7_6.7","virt:rhel-8020020200601195459.4cda2c84","slirp4netns-0:0.3.0-8.el7_7","qemu-kvm-ma-10:2.12.0-33.el7_7.3","slirp4netns-0:0.4.2-4.git21fdece.el8","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-10:1.5.3-167.el7_7.6","qemu-kvm-10:1.5.3-173.el7_8.1","virt:rhel-8000020200526192422.f8e95b4e","qemu-kvm-2:0.12.1.2-2.506.el6_10.7","qemu-kvm-ma-10:2.12.0-44.el7_8.1","container-tools:rhel8-8010120200326094405.f8993c42"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-1711","severity":"important","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:0773","RHSA-2020:1300","RHSA-2020:1352","RHSA-2020:2472","RHSA-2020:1296","RHSA-2020:1505","RHSA-2020:0669","RHSA-2020:1150","RHSA-2020:0731","RHSA-2020:1358","RHSA-2020:0730","RHSA-2020:1216"],"bugzilla":"1794290","bugzilla_description":"CVE-2020-1711 QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["virt:rhel-8000020200331183759.f8e95b4e","qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-ma-10:2.10.0-21.el7_5.5","qemu-kvm-ma-10:2.12.0-33.el7_7.3","virt:rhel-8010020200304114113.c27ad7f8","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","qemu-kvm-ma-10:2.12.0-18.el7_6.5","qemu-kvm-ma-10:2.12.0-44.el7","qemu-kvm-rhev-10:2.12.0-44.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1711.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.0"},{"CVE":"CVE-2020-14415","severity":"low","public_date":"2020-01-20T00:00:00Z","advisories":[],"bugzilla":"1848117","bugzilla_description":"CVE-2020-14415 QEMU: division by zero in oss_write() in audio/ossaudio.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14415.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-7039","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:2730","RHSA-2020:1344","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:1360","RHSA-2020:2342","RHSA-2020:1352","RHSA-2020:1351","RHSA-2020:1296","RHSA-2020:0889","RHSA-2020:0775","RHSA-2020:1116","RHSA-2020:1358","RHSA-2020:0348","RHBA-2020:0390","RHSA-2020:1150"],"bugzilla":"1791551","bugzilla_description":"CVE-2020-7039 QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-173.el7","slirp4netns-0:0.3.0-8.el7_7","container-tools:1.0-8010020200206144344.c294d161","qemu-kvm-ma-10:2.12.0-33.el7_7.3","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","virt:rhel-8000020200305185300.f8e95b4e","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-ma-10:2.12.0-44.el7","qemu-kvm-rhev-10:2.12.0-44.el7","container-tools:rhel8-8010120200116121758.53d07e52","qemu-kvm-10:1.5.3-167.el7_7.6","slirp4netns-0:0.4.2-3.git21fdece.el8","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","virt:rhel-8010020200304114113.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7039.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-7211","severity":"low","public_date":"2019-12-30T00:00:00Z","advisories":["RHBA-2020:0390"],"bugzilla":"1792130","bugzilla_description":"CVE-2020-7211 QEMU: Slirp: potential directory traversal using relative paths via tftp server on Windows host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["slirp4netns-0:0.4.2-3.git21fdece.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7211.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2020-12829","severity":"moderate","public_date":"2019-12-23T00:00:00Z","advisories":[],"bugzilla":"1808510","bugzilla_description":"CVE-2020-12829 qemu: OOB read and write due to integer overflow in sm501_2d_operation() in hw/display/sm501.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->(CWE-125|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12829.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-12067","severity":"low","public_date":"2019-10-09T00:00:00Z","advisories":[],"bugzilla":"1759820","bugzilla_description":"CVE-2019-12067 QEMU: NULL dereference in ahci_commit_buf() leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12067.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2017-8284","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1769670","bugzilla_description":"CVE-2017-8284 QEMU: privilege escalation via disas_insn function in TCG mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8284.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2019-20382","severity":"low","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2020:2774","RHSA-2020:3267","RHSA-2020:4167","RHSA-2020:3906","RHSA-2020:3907"],"bugzilla":"1810390","bugzilla_description":"CVE-2019-20382 QEMU: vnc: memory leakage upon disconnect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401->CWE-772","affected_packages":["qemu-kvm-ma-10:2.12.0-48.el7","qemu-kvm-10:1.5.3-175.el7","virt:rhel-8020020200601195459.4cda2c84","qemu-kvm-rhev-10:2.12.0-48.el7_9.1","qemu-kvm-rhev-10:2.12.0-18.el7_6.12","qemu-kvm-rhev-10:2.12.0-48.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20382.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2019-20808","severity":"low","public_date":"2019-09-13T00:00:00Z","advisories":[],"bugzilla":"1841136","bugzilla_description":"CVE-2019-20808 QEMU: out-of-bounds read in ati_cursor_define() function in hw/display/ati.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20808.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2019-15890","severity":"moderate","public_date":"2019-08-25T00:00:00Z","advisories":["RHBA-2020:3172","RHSA-2020:0889","RHSA-2020:0775","RHSA-2020:0348"],"bugzilla":"1749716","bugzilla_description":"CVE-2019-15890 QEMU: Slirp: use-after-free during packet reassembly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["container-tools:rhel8-8010120200116121758.53d07e52","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","slirp4netns-0:0.3.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15890.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2019-12068","severity":"low","public_date":"2019-08-14T00:00:00Z","advisories":[],"bugzilla":"1773749","bugzilla_description":"CVE-2019-12068 qemu: scsi: lsi: potential infinite loop when executing script in lsi_execute_script","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12068.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-15034","severity":"important","public_date":"2019-08-12T00:00:00Z","advisories":[],"bugzilla":"1812659","bugzilla_description":"CVE-2019-15034 qemu: hw/display/bochs-display.c does not ensure a sufficient PCI config space allocation leading to a buffer overflow involving the PCIe extended config space","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15034.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2019-14378","severity":"important","public_date":"2019-07-28T00:00:00Z","advisories":["RHBA-2019:3723","RHSA-2019:3742","RHSA-2020:2126","RHSA-2019:3787","RHSA-2020:0366","RHSA-2019:3403","RHSA-2019:4344","RHSA-2020:2342","RHSA-2019:3179","RHSA-2020:2065","RHSA-2020:0889","RHSA-2019:3494","RHSA-2020:0775","RHSA-2020:1216","RHSA-2019:3968"],"bugzilla":"1734745","bugzilla_description":"CVE-2019-14378 QEMU: slirp: heap buffer overflow during packet reassembly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["container-tools:rhel8-8010020190927090915.4985cc55","container-tools:1.0-8010020190927091243.4985cc55","qemu-kvm-10:1.5.3-160.el7_6.6","qemu-kvm-10:1.5.3-167.el7_7.4","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","qemu-kvm-ma-10:2.12.0-33.el7_7.1","slirp4netns-0:0.3.0-8.el7_7","qemu-kvm-rhev-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","qemu-kvm-ma-10:2.12.0-18.el7_6.6","qemu-kvm-rhev-10:2.12.0-44.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14378.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-13164","severity":"low","public_date":"2019-06-28T00:00:00Z","advisories":[],"bugzilla":"1722559","bugzilla_description":"CVE-2019-13164 Qemu: qemu-bridge-helper ACL can be bypassed when names are too long","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-12929","severity":"low","public_date":"2019-06-06T00:00:00Z","advisories":[],"bugzilla":"1724809","bugzilla_description":"CVE-2019-12929 QEMU: guest agent guest_exec command execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12929.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2019-12928","severity":"low","public_date":"2019-06-05T00:00:00Z","advisories":[],"bugzilla":"1724812","bugzilla_description":"CVE-2019-12928 QEMU: QMP migrate command execution issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-12126","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646781","bugzilla_description":"CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12130","severity":"important","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646784","bugzilla_description":"CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385->CWE-226","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-12127","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1667782","bugzilla_description":"CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11091","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1705312","bugzilla_description":"CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-12155","severity":"low","public_date":"2019-04-25T00:00:00Z","advisories":["RHBA-2019:3723","RHSA-2019:3742","RHSA-2019:3787","RHSA-2019:2892","RHSA-2019:4344","RHSA-2019:3179","RHSA-2019:3345","RHSA-2019:2607","RHSA-2020:1216"],"bugzilla":"1712670","bugzilla_description":"CVE-2019-12155 QEMU: qxl: null pointer dereference while releasing spice resources","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["qemu-kvm-10:1.5.3-167.el7_7.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.5","qemu-kvm-rhev-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-44.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12155.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2019-9824","severity":"low","public_date":"2019-03-01T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:1650","RHSA-2019:2078","RHSA-2019:2425","RHSA-2019:3345"],"bugzilla":"1678515","bugzilla_description":"CVE-2019-9824 QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.4","qemu-kvm-10:1.5.3-167.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9824.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2019-3812","severity":"moderate","public_date":"2019-02-18T03:22:00Z","advisories":[],"bugzilla":"1665792","bugzilla_description":"CVE-2019-3812 qemu: Out-of-bounds read in hw/i2c/i2c-ddc.c allows for memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3812.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-8934","severity":"low","public_date":"2019-02-02T00:00:00Z","advisories":[],"bugzilla":"1668022","bugzilla_description":"CVE-2019-8934 QEMU: ppc64: sPAPR emulator leaks the host hardware identity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8934.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2019-6778","severity":"important","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2019:2892","RHSA-2019:2425","RHSA-2019:1883","RHSA-2019:1968"],"bugzilla":"1664205","bugzilla_description":"CVE-2019-6778 QEMU: slirp: heap buffer overflow in tcp_emu()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-10:1.5.3-160.el7_6.3","qemu-kvm-2:0.12.1.2-2.506.el6_10.5","qemu-kvm-rhev-10:2.12.0-18.el7_6.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6778.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-6501","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:2166","RHSA-2019:2425"],"bugzilla":"1668160","bugzilla_description":"CVE-2019-6501 QEMU: scsi-generic: possible OOB access while handling inquiry request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-ma-10:2.12.0-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6501.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2019-12247","severity":null,"public_date":"2019-01-07T00:00:00Z","advisories":[],"bugzilla":"1712834","bugzilla_description":"CVE-2019-12247 QEMU: qemu-guest-agent: integer overflow while running guest-exec command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12247.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2019-5008","severity":"low","public_date":"2019-01-04T00:00:00Z","advisories":[],"bugzilla":"1705915","bugzilla_description":"CVE-2019-5008 QEMU: NULL pointer dereference in hw/sparc64/sun4u.c leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5008.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2018-20815","severity":"important","public_date":"2018-12-14T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:1881","RHSA-2019:1175","RHSA-2019:1743","RHSA-2019:1723","RHSA-2019:1667","RHSA-2019:2507","RHSA-2019:1968"],"bugzilla":"1693101","bugzilla_description":"CVE-2018-20815 QEMU: device_tree: heap buffer overflow while loading device tree blob","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-ma-10:2.12.0-18.el7_6.4","virt:rhel-8000020190510171727.55190bc5","qemu-kvm-rhev-10:2.12.0-18.el7_6.6","qemu-kvm-rhev-10:2.12.0-18.el7_6.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16872","severity":"low","public_date":"2018-12-13T00:00:00Z","advisories":[],"bugzilla":"1656114","bugzilla_description":"CVE-2018-16872 QEMU: usb-mtp: path traversal by host filesystem manipulation in Media Transfer Protocol (MTP)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16872.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-20123","severity":"low","public_date":"2018-12-12T00:00:00Z","advisories":[],"bugzilla":"1658963","bugzilla_description":"CVE-2018-20123 QEMU: pvrdma: memory leakage in device hotplug","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20123.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2018-20191","severity":"low","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1660314","bugzilla_description":"CVE-2018-20191 QEMU: pvrdma: uar_read leads to NULL dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20191.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2018-20124","severity":"moderate","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1660372","bugzilla_description":"CVE-2018-20124 QEMU: rdma: OOB access when building scatter-gather array","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20124.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-20125","severity":"low","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1660747","bugzilla_description":"CVE-2018-20125 QEMU: pvrdma: null dereference or excessive memory allocation when creating QP/CQ","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2018-20126","severity":"low","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1660751","bugzilla_description":"CVE-2018-20126 QEMU: pvrdma: memory leakage when creating cq/qp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2018-20216","severity":"low","public_date":"2018-12-11T00:00:00Z","advisories":[],"bugzilla":"1660753","bugzilla_description":"CVE-2018-20216 QEMU: pvrdma: infinite loop in pvrdma_qp_send/recv","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20216.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2018-16867","severity":"important","public_date":"2018-12-03T00:00:00Z","advisories":[],"bugzilla":"1654885","bugzilla_description":"CVE-2018-16867 QEMU: dev-mtp: path traversal in usb_mtp_write_data of the Media Transfer Protocol (MTP)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16867.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-19489","severity":"low","public_date":"2018-11-22T00:00:00Z","advisories":[],"bugzilla":"1653156","bugzilla_description":"CVE-2018-19489 QEMU: 9pfs: crash due to race condition in renaming files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-19364","severity":"low","public_date":"2018-11-07T00:00:00Z","advisories":[],"bugzilla":"1643252","bugzilla_description":"CVE-2018-19364 Qemu: 9pfs: Use-after-free due to race condition while updating fid path","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19364.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-16847","severity":"important","public_date":"2018-11-01T00:00:00Z","advisories":[],"bugzilla":"1644052","bugzilla_description":"CVE-2018-16847 QEMU: nvme: Out-of-bounds r/w buffer access in cmb operations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16847.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-18849","severity":"moderate","public_date":"2018-10-25T00:00:00Z","advisories":[],"bugzilla":"1644973","bugzilla_description":"CVE-2018-18849 QEMU: lsi53c895a: OOB msg buffer access leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18849.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-18954","severity":"low","public_date":"2018-10-22T00:00:00Z","advisories":[],"bugzilla":"1526029","bugzilla_description":"CVE-2018-18954 QEMU: ppc64: Out-of-bounds r/w stack access in pnv_lpc_do_eccb","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18954.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2018-19665","severity":"moderate","public_date":"2018-10-18T00:00:00Z","advisories":[],"bugzilla":"1607652","bugzilla_description":"CVE-2018-19665 Qemu: bt: Integer overflow in Bluetooth routines allows memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19665.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-18438","severity":null,"public_date":"2018-10-11T00:00:00Z","advisories":[],"bugzilla":"1609015","bugzilla_description":"CVE-2018-18438 Qemu: Integer overflow in ccid_card_vscard_read() allows memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18438.json"},{"CVE":"CVE-2018-10839","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":["RHSA-2019:2892"],"bugzilla":"1581013","bugzilla_description":"CVE-2018-10839 QEMU: ne2000: integer overflow leads to buffer overflow issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["qemu-kvm-2:0.12.1.2-2.506.el6_10.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-17958","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:2425"],"bugzilla":"1636712","bugzilla_description":"CVE-2018-17958 QEMU: rtl8139: integer overflow leads to buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17958.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-17962","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":["RHSA-2019:2892"],"bugzilla":"1636773","bugzilla_description":"CVE-2018-17962 QEMU: pcnet: integer overflow leads to buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["qemu-kvm-2:0.12.1.2-2.506.el6_10.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17962.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-15746","severity":"low","public_date":"2018-08-13T00:00:00Z","advisories":["RHSA-2019:2425","RHSA-2020:3906","RHSA-2020:3907"],"bugzilla":"1615637","bugzilla_description":"CVE-2018-15746 QEMU: seccomp: blacklist is not applied to all threads","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-ma-10:2.12.0-48.el7","qemu-kvm-10:1.5.3-175.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15746.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-12617","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1594054","bugzilla_description":"CVE-2018-12617 Qemu: qemu-guest-agent: Integer overflow causes segmentation fault in qmp_guest_file_read()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2018-11806","severity":"important","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2019:2892","RHSA-2018:2822","RHSA-2018:2887","RHSA-2018:2762","RHSA-2018:2462"],"bugzilla":"1586245","bugzilla_description":"CVE-2018-11806 QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.6","qemu-kvm-rhev-10:2.10.0-21.el7_5.7","qemu-kvm-10:1.5.3-156.el7_5.5","qemu-kvm-2:0.12.1.2-2.506.el6_10.5","qemu-kvm-ma-10:2.10.0-21.el7_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11806.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-17963","severity":"moderate","public_date":"2018-05-21T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:2166","RHSA-2019:2425"],"bugzilla":"1636777","bugzilla_description":"CVE-2018-17963 QEMU: net: ignore packets with large size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-ma-10:2.12.0-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17963.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-7858","severity":"moderate","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2018:2162","RHSA-2018:1646","RHSA-2018:1416","RHSA-2018:1644","RHSA-2018:1369","RHSA-2018:1645","RHSA-2018:1643"],"bugzilla":"1553402","bugzilla_description":"CVE-2018-7858 QEMU: cirrus: OOB access when updating VGA display","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.2","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","qemu-kvm-10:1.5.3-156.el7_5.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7858.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2018-7550","severity":"moderate","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:1646","RHSA-2018:1644","RHSA-2018:1369","RHSA-2018:1645","RHSA-2018:1643","RHSA-2018:2462"],"bugzilla":"1549798","bugzilla_description":"CVE-2018-7550 QEMU: i386: multiboot OOB access while loading kernel image","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.2","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","qemu-kvm-10:1.5.3-156.el7_5.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7550.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-5683","severity":"low","public_date":"2017-12-25T00:00:00Z","advisories":["RHSA-2018:2162","RHSA-2018:1104","RHSA-2018:1113","RHSA-2018:0816"],"bugzilla":"1530356","bugzilla_description":"CVE-2018-5683 Qemu: Out-of-bounds read in vga_draw_text routine","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7","qemu-kvm-10:1.5.3-156.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5683.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-15124","severity":"low","public_date":"2017-12-18T00:00:00Z","advisories":["RHSA-2018:3062","RHSA-2018:1104","RHSA-2018:1113","RHSA-2018:0816"],"bugzilla":"1525195","bugzilla_description":"CVE-2017-15124 Qemu: memory exhaustion through framebuffer update request message in VNC server","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["qemu-kvm-ma-10:2.12.0-18.el7","qemu-kvm-rhev-10:2.10.0-21.el7","qemu-kvm-10:1.5.3-156.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15124.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2017-15118","severity":"important","public_date":"2017-11-28T00:00:00Z","advisories":["RHSA-2018:1104","RHSA-2018:1113"],"bugzilla":"1516922","bugzilla_description":"CVE-2017-15118 Qemu: stack buffer overflow in NBD server triggered via long export name","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15118.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"8.3"},{"CVE":"CVE-2017-15119","severity":"moderate","public_date":"2017-11-28T00:00:00Z","advisories":["RHSA-2018:1104","RHSA-2018:1113"],"bugzilla":"1516925","bugzilla_description":"CVE-2017-15119 qemu: DoS via large option request","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15119.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2017-17381","severity":"low","public_date":"2017-11-24T00:00:00Z","advisories":[],"bugzilla":"1520782","bugzilla_description":"CVE-2017-17381 Qemu: virtio: divide by zero exception while updating rings","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17381.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2017-16845","severity":"low","public_date":"2017-11-15T00:00:00Z","advisories":[],"bugzilla":"1514148","bugzilla_description":"CVE-2017-16845 Qemu: ps2: information leakage via post_load routine","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16845.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-15289","severity":"moderate","public_date":"2017-10-11T00:00:00Z","advisories":["RHSA-2018:0516","RHSA-2017:3470","RHSA-2017:3471","RHSA-2017:3474","RHSA-2017:3472","RHSA-2017:3473","RHSA-2017:3368","RHSA-2017:3369","RHSA-2017:3466"],"bugzilla":"1501290","bugzilla_description":"CVE-2017-15289 Qemu: cirrus: OOB access issue in mode4and5 write functions","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-10:1.5.3-141.el7_4.4","qemu-kvm-2:0.12.1.2-2.503.el6_9.5","qemu-kvm-rhev-10:2.9.0-16.el7_4.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15289.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-15038","severity":"low","public_date":"2017-10-04T00:00:00Z","advisories":[],"bugzilla":"1499110","bugzilla_description":"CVE-2017-15038 Qemu: 9p: virtfs: information disclosure when reading extended attributes","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15038.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.0"},{"CVE":"CVE-2017-15268","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":["RHSA-2018:1104","RHSA-2018:1113","RHSA-2018:0816"],"bugzilla":"1496879","bugzilla_description":"CVE-2017-15268 QEMU: I/O: potential memory exhaustion via websock connection to VNC","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7","qemu-kvm-10:1.5.3-156.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15268.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-18043","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1536377","bugzilla_description":"CVE-2017-18043 Qemu: integer overflow in ROUND_UP macro could result in DoS","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18043.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2017-14167","severity":"moderate","public_date":"2017-09-05T00:00:00Z","advisories":["RHSA-2017:3470","RHSA-2017:3471","RHSA-2017:3474","RHSA-2017:3472","RHSA-2017:3473","RHSA-2017:3368","RHSA-2017:3369","RHSA-2017:3466"],"bugzilla":"1489375","bugzilla_description":"CVE-2017-14167 Qemu: i386: multiboot OOB access while loading kernel image","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["qemu-kvm-10:1.5.3-141.el7_4.4","qemu-kvm-rhev-10:2.9.0-16.el7_4.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.9"},{"CVE":"CVE-2017-13672","severity":"low","public_date":"2017-08-24T00:00:00Z","advisories":["RHSA-2018:2162","RHSA-2018:1104","RHSA-2018:1113","RHSA-2018:0816"],"bugzilla":"1486560","bugzilla_description":"CVE-2017-13672 QEMU: vga: OOB read access during display update","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7","qemu-kvm-10:1.5.3-156.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13672.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-13673","severity":"low","public_date":"2017-08-24T00:00:00Z","advisories":["RHSA-2018:1104","RHSA-2018:1113"],"bugzilla":"1486588","bugzilla_description":"CVE-2017-13673 QEMU: VGA: reachable assert failure during display update","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13673.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-13711","severity":"low","public_date":"2017-08-03T00:00:00Z","advisories":["RHSA-2018:1104","RHSA-2018:1113","RHSA-2018:0816"],"bugzilla":"1486400","bugzilla_description":"CVE-2017-13711 QEMU: Slirp: use-after-free when sending response","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7","qemu-kvm-10:1.5.3-156.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13711.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2017-11434","severity":"low","public_date":"2017-07-17T00:00:00Z","advisories":[],"bugzilla":"1472611","bugzilla_description":"CVE-2017-11434 Qemu: slirp: out-of-bounds read while parsing dhcp options","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11434.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-11334","severity":"moderate","public_date":"2017-07-13T00:00:00Z","advisories":["RHSA-2017:3470","RHSA-2017:3471","RHSA-2017:3474","RHSA-2017:3472","RHSA-2017:3473","RHSA-2017:3369","RHSA-2017:3466"],"bugzilla":"1471638","bugzilla_description":"CVE-2017-11334 Qemu: exec: oob access during dma operation","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.9.0-16.el7_4.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11334.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2017-12809","severity":"low","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1483534","bugzilla_description":"CVE-2017-12809 Qemu: ide: flushing of empty CDROM drives leads to NULL dereference","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12809.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2017-10911","severity":"low","public_date":"2017-06-20T00:00:00Z","advisories":[],"bugzilla":"1458870","bugzilla_description":"CVE-2017-10911 xsa216 xen: blkif responses leak backend stack data (XSA-216)","cvss_score":1.4,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10911.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.0"},{"CVE":"CVE-2017-10664","severity":"moderate","public_date":"2017-06-11T00:00:00Z","advisories":["RHSA-2017:3470","RHSA-2017:3471","RHSA-2017:2390","RHSA-2017:3474","RHSA-2017:3472","RHSA-2017:3473","RHSA-2017:2445","RHSA-2017:3466"],"bugzilla":"1466190","bugzilla_description":"CVE-2017-10664 Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-248","affected_packages":["qemu-kvm-10:1.5.3-141.el7_4.1","qemu-kvm-rhev-10:2.9.0-16.el7_4.11","qemu-kvm-rhev-10:2.9.0-16.el7_4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-7539","severity":"moderate","public_date":"2017-06-02T00:00:00Z","advisories":["RHSA-2017:3470","RHSA-2017:2628","RHSA-2017:3471","RHSA-2017:3474","RHSA-2017:3472","RHSA-2017:3473","RHSA-2017:3466"],"bugzilla":"1473622","bugzilla_description":"CVE-2017-7539 Qemu: qemu-nbd crashes due to undefined I/O coroutine","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["qemu-kvm-rhev-10:2.9.0-16.el7_4.11","qemu-kvm-rhev-10:2.9.0-16.el7_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7539.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-9524","severity":"moderate","public_date":"2017-05-26T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:1682","RHSA-2017:1681"],"bugzilla":"1460170","bugzilla_description":"CVE-2017-9524 Qemu: nbd: segmentation fault due to client non-negotiation","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["qemu-kvm-10:1.5.3-126.el7_3.10","qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.6.0-28.el7_3.12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9524.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-7493","severity":"moderate","public_date":"2017-05-16T00:00:00Z","advisories":[],"bugzilla":"1451709","bugzilla_description":"CVE-2017-7493 Qemu: 9pfs: guest privilege escalation in virtfs mapped-file mode","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7493.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-10806","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1468496","bugzilla_description":"CVE-2017-10806 Qemu: usb-redirect: stack buffer overflow in debug logging","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10806.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-9503","severity":"low","public_date":"2017-05-10T00:00:00Z","advisories":[],"bugzilla":"1459477","bugzilla_description":"CVE-2017-9503 Qemu: scsi: megasas: null pointer dereference while processing megasas command","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9503.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2017-8309","severity":"low","public_date":"2017-04-28T00:00:00Z","advisories":["RHSA-2017:2408"],"bugzilla":"1446517","bugzilla_description":"CVE-2017-8309 Qemu: audio: host memory leakage via capture buffer","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8309.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-8379","severity":"low","public_date":"2017-04-28T00:00:00Z","advisories":["RHSA-2017:2408"],"bugzilla":"1446547","bugzilla_description":"CVE-2017-8379 Qemu: input: host memory lekage via keyboard events","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8379.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-8112","severity":"low","public_date":"2017-04-25T00:00:00Z","advisories":[],"bugzilla":"1445621","bugzilla_description":"CVE-2017-8112 Qemu: scsi: vmw_pvscsi: infinite loop in pvscsi_log2","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8112.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-8380","severity":"low","public_date":"2017-04-24T00:00:00Z","advisories":[],"bugzilla":"1446577","bugzilla_description":"CVE-2017-8380 Qemu: scsi: megasas: out-of-bounds read in megasas_mmio_write","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8380.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-7471","severity":"important","public_date":"2017-04-18T00:00:00Z","advisories":[],"bugzilla":"1443401","bugzilla_description":"CVE-2017-7471 Qemu: 9p: virtfs allows guest to change filesystem attributes on host","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7471.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2017-8086","severity":"low","public_date":"2017-04-10T00:00:00Z","advisories":[],"bugzilla":"1444781","bugzilla_description":"CVE-2017-8086 Qemu: 9pfs: host memory leakage via v9pfs_list_xattr","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8086.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-7377","severity":"low","public_date":"2017-03-28T00:00:00Z","advisories":[],"bugzilla":"1437871","bugzilla_description":"CVE-2017-7377 Qemu: 9pfs: host memory leakage via v9fs_create","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7377.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-9373","severity":"low","public_date":"2017-03-16T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1458270","bugzilla_description":"CVE-2017-9373 Qemu: ide: ahci host memory leakage during hotunplug","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9373.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-7980","severity":"important","public_date":"2017-03-15T00:00:00Z","advisories":["RHSA-2017:0984","RHSA-2017:0983","RHSA-2017:1206","RHSA-2017:1205","RHSA-2017:0988","RHSA-2017:0980","RHSA-2017:1430","RHSA-2017:1441","RHSA-2017:0982","RHSA-2017:0981"],"bugzilla":"1444371","bugzilla_description":"CVE-2017-7980 Qemu: display: cirrus: OOB r/w access issues in bitblt routines","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-10:1.5.3-126.el7_3.9","qemu-kvm-rhev-10:2.6.0-28.el7_3.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7980.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2016-9603","severity":"important","public_date":"2017-03-14T00:00:00Z","advisories":["RHSA-2017:0984","RHSA-2017:0983","RHSA-2017:1206","RHSA-2017:0985","RHSA-2017:1205","RHSA-2017:0988","RHSA-2017:0987","RHSA-2017:0980","RHSA-2017:1441","RHSA-2017:0982","RHSA-2017:0981"],"bugzilla":"1430056","bugzilla_description":"CVE-2016-9603 Qemu: cirrus: heap buffer overflow via vnc connection","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["qemu-kvm-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-rhev-10:2.6.0-28.el7_3.9","qemu-kvm-10:1.5.3-126.el7_3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9603.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2017-7718","severity":"moderate","public_date":"2017-03-14T00:00:00Z","advisories":["RHSA-2017:0984","RHSA-2017:0983","RHSA-2017:1206","RHSA-2017:1205","RHSA-2017:0988","RHSA-2017:0980","RHSA-2017:1431","RHSA-2017:1430","RHSA-2017:1441","RHSA-2017:0982","RHSA-2017:0981"],"bugzilla":"1443441","bugzilla_description":"CVE-2017-7718 Qemu: display: cirrus: OOB read access issue","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-10:1.5.3-126.el7_3.9","qemu-kvm-rhev-10:2.6.0-28.el7_3.10","qemu-kvm-rhev-10:2.6.0-28.el7_3.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7718.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-2620","severity":"important","public_date":"2017-02-21T00:00:00Z","advisories":["RHSA-2017:0334","RHSA-2017:0328","RHSA-2017:0329","RHSA-2017:0351","RHSA-2017:0350","RHSA-2017:0331","RHSA-2017:0352","RHSA-2017:0396","RHSA-2017:0330","RHSA-2017:0454","RHSA-2017:0333","RHSA-2017:0332"],"bugzilla":"1420484","bugzilla_description":"CVE-2017-2620 Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.6.0-28.el7_3.6","qemu-kvm-rhev-2:0.12.1.2-2.491.el6_8.7","kvm-0:83-277.el5_11","qemu-kvm-2:0.12.1.2-2.491.el6_8.7","qemu-kvm-10:1.5.3-126.el7_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2620.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2017-6414","severity":"low","public_date":"2017-02-21T00:00:00Z","advisories":["RHSA-2017:2408"],"bugzilla":"1427833","bugzilla_description":"CVE-2017-6414 Qemu: libcacard: host memory leakage while creating new APDU","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6414.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-6058","severity":"moderate","public_date":"2017-02-16T00:00:00Z","advisories":[],"bugzilla":"1423358","bugzilla_description":"CVE-2017-6058 Qemu: net: vmxnet3: OOB NetRxPkt::ehdr_buf access when doing vlan stripping","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6058.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-5973","severity":"low","public_date":"2017-02-13T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1421626","bugzilla_description":"CVE-2017-5973 Qemu: usb: infinite loop while doing control transfer in xhci_kick_epctx","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5973.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-9310","severity":"low","public_date":"2017-02-10T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1452620","bugzilla_description":"CVE-2017-9310 Qemu: net: infinite loop in e1000e NIC emulation","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9310.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-9374","severity":"low","public_date":"2017-02-08T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1459132","bugzilla_description":"CVE-2017-9374 Qemu: usb: ehci host memory leakage during hotunplug","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9374.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-6505","severity":"low","public_date":"2017-02-07T00:00:00Z","advisories":[],"bugzilla":"1429432","bugzilla_description":"CVE-2017-6505 Qemu: usb: an infinite loop issue in ohci_service_ed_list","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6505.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-9330","severity":"low","public_date":"2017-02-07T00:00:00Z","advisories":[],"bugzilla":"1457697","bugzilla_description":"CVE-2017-9330 Qemu: usb: ohci: infinite loop due to incorrect return value","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9330.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-5898","severity":"moderate","public_date":"2017-02-03T00:00:00Z","advisories":["RHSA-2017:2392","RHSA-2017:1856"],"bugzilla":"1419699","bugzilla_description":"CVE-2017-5898 Qemu: usb: integer overflow in emulated_apdu_from_guest","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":["qemu-kvm-rhev-10:2.9.0-14.el7","qemu-kvm-10:1.5.3-141.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5898.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-2630","severity":"important","public_date":"2017-02-03T00:00:00Z","advisories":["RHSA-2017:2392"],"bugzilla":"1422415","bugzilla_description":"CVE-2017-2630 Qemu: nbd: oob stack write in client routine drop_sync","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2630.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2017-9375","severity":"low","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1458744","bugzilla_description":"CVE-2017-9375 Qemu: usb: xhci infinite recursive call via xhci_kick_ep","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9375.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-5987","severity":"low","public_date":"2017-01-31T00:00:00Z","advisories":[],"bugzilla":"1421995","bugzilla_description":"CVE-2017-5987 Qemu: sd: infinite loop issue in multi block transfers","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5987.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-5667","severity":"moderate","public_date":"2017-01-30T00:00:00Z","advisories":[],"bugzilla":"1417559","bugzilla_description":"CVE-2017-5667 Qemu: sd: sdhci OOB access during multi block SDMA transfer","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5667.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-18030","severity":"low","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1530360","bugzilla_description":"CVE-2017-18030 Qemu: Out-of-bounds access in cirrus_invalidate_region routine","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18030.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-2615","severity":"important","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0334","RHSA-2017:0328","RHSA-2017:0329","RHSA-2017:0309","RHSA-2017:0350","RHSA-2017:0331","RHSA-2017:0396","RHSA-2017:0330","RHSA-2017:0454","RHSA-2017:0333","RHSA-2017:0344","RHSA-2017:0332"],"bugzilla":"1418200","bugzilla_description":"CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt copy backward mode","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.6.0-28.el7_3.6","qemu-kvm-rhev-2:0.12.1.2-2.491.el6_8.6","qemu-kvm-rhev-2:0.12.1.2-2.491.el6_8.7","kvm-0:83-277.el5_11","qemu-kvm-2:0.12.1.2-2.491.el6_8.6","qemu-kvm-10:1.5.3-126.el7_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2615.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2017-5857","severity":"low","public_date":"2017-01-23T00:00:00Z","advisories":[],"bugzilla":"1418382","bugzilla_description":"CVE-2017-5857 Qemu: display: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5857.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-9060","severity":"low","public_date":"2017-01-22T00:00:00Z","advisories":[],"bugzilla":"1452597","bugzilla_description":"CVE-2017-9060 Qemu: virtio-gpu: host memory leakage in Virtio GPU device","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9060.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9602","severity":"important","public_date":"2017-01-17T00:00:00Z","advisories":[],"bugzilla":"1413929","bugzilla_description":"CVE-2016-9602 Qemu: 9p: virtfs allows guest to access host filesystem","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9602.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2017-5525","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1414108","bugzilla_description":"CVE-2017-5525 Qemu: audio: memory leakage in ac97 device","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5525.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2017-5526","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1414209","bugzilla_description":"CVE-2017-5526 Qemu: audio: memory leakage in es1370 device","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5526.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2017-5579","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1416157","bugzilla_description":"CVE-2017-5579 Qemu: serial: host memory leakage 16550A UART emulation","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5579.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2017-5931","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":[],"bugzilla":"1420092","bugzilla_description":"CVE-2017-5931 Qemu: virtio: integer overflow in handling virtio-crypto requests","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5931.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2017-6000","severity":"low","public_date":"2017-01-04T00:00:00Z","advisories":[],"bugzilla":"1422656","bugzilla_description":"REJECTED CVE-2017-6000 Qemu: crypto: memory leakage in qcrypto_ivgen_essiv_init","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6000.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-5552","severity":"low","public_date":"2017-01-03T00:00:00Z","advisories":[],"bugzilla":"1415281","bugzilla_description":"CVE-2017-5552 Qemu: display: virtio-gpu-3d: memory leakage in virgl_resource_attach_backing","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5552.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-5578","severity":"low","public_date":"2017-01-03T00:00:00Z","advisories":[],"bugzilla":"1415795","bugzilla_description":"CVE-2017-5578 Qemu: display: virtio-gpu: host memory leakage in virtio_gpu_resource_attach_backing","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5578.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2017-5856","severity":"low","public_date":"2017-01-02T00:00:00Z","advisories":[],"bugzilla":"1418342","bugzilla_description":"CVE-2017-5856 Qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5856.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-10155","severity":"low","public_date":"2016-12-22T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1415199","bugzilla_description":"CVE-2016-10155 Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10155.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2016-10028","severity":"moderate","public_date":"2016-12-11T00:00:00Z","advisories":[],"bugzilla":"1406367","bugzilla_description":"CVE-2016-10028 Qemu: display: virtio-gpu-3d: OOB access while reading virgl capabilities","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10028.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2016-9637","severity":"important","public_date":"2016-12-06T00:00:00Z","advisories":["RHSA-2016:2963"],"bugzilla":"1397043","bugzilla_description":"CVE-2016-9637 XSA199 Xen: qemu ioport out-of-bounds array access (XSA-199)","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-125","affected_packages":["xen-0:3.0.3-148.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9637.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2017-2633","severity":"moderate","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:1206","RHSA-2017:1205","RHSA-2017:1856","RHSA-2017:1441"],"bugzilla":"1425939","bugzilla_description":"CVE-2017-2633 Qemu: VNC: memory corruption due to unchecked resolution limit","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-120","affected_packages":["qemu-kvm-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3","qemu-kvm-10:1.5.3-141.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2633.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2016-9776","severity":"low","public_date":"2016-11-29T00:00:00Z","advisories":[],"bugzilla":"1400829","bugzilla_description":"CVE-2016-9776 Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9776.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9912","severity":"low","public_date":"2016-11-28T00:00:00Z","advisories":[],"bugzilla":"1402284","bugzilla_description":"CVE-2016-9912 Qemu: display: virtio-gpu: memory leakage when destroying gpu resource","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9912.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9923","severity":"low","public_date":"2016-11-24T00:00:00Z","advisories":[],"bugzilla":"1402967","bugzilla_description":"CVE-2016-9923 Qemu: char: use-after-free issue during hotplug and unplugging device","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9923.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2016-9381","severity":"important","public_date":"2016-11-22T00:00:00Z","advisories":[],"bugzilla":"1392938","bugzilla_description":"CVE-2016-9381 xsa197 xen: qemu incautious about shared ring processing (XSA-197)","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9381.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9913","severity":"low","public_date":"2016-11-21T00:00:00Z","advisories":[],"bugzilla":"1402276","bugzilla_description":"CVE-2016-9913 CVE-2016-9914 CVE-2016-9915 CVE-2016-9916 Qemu: 9pfs: memory leakage via proxy/handle callbacks","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9913.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9914","severity":"low","public_date":"2016-11-21T00:00:00Z","advisories":[],"bugzilla":"1402276","bugzilla_description":"CVE-2016-9913 CVE-2016-9914 CVE-2016-9915 CVE-2016-9916 Qemu: 9pfs: memory leakage via proxy/handle callbacks","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9914.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9915","severity":"low","public_date":"2016-11-21T00:00:00Z","advisories":[],"bugzilla":"1402276","bugzilla_description":"CVE-2016-9913 CVE-2016-9914 CVE-2016-9915 CVE-2016-9916 Qemu: 9pfs: memory leakage via proxy/handle callbacks","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9915.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9916","severity":"low","public_date":"2016-11-21T00:00:00Z","advisories":[],"bugzilla":"1402276","bugzilla_description":"CVE-2016-9913 CVE-2016-9914 CVE-2016-9915 CVE-2016-9916 Qemu: 9pfs: memory leakage via proxy/handle callbacks","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9916.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9911","severity":"low","public_date":"2016-11-08T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1402272","bugzilla_description":"CVE-2016-9911 Qemu: usb: ehci: memory leakage in ehci_init_transfer","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9911.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9907","severity":"low","public_date":"2016-11-07T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1402265","bugzilla_description":"CVE-2016-9907 Qemu: usb: redirector: memory leakage when destroying redirector","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9907.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9845","severity":"low","public_date":"2016-11-01T00:00:00Z","advisories":[],"bugzilla":"1402245","bugzilla_description":"CVE-2016-9845 Qemu: display: virtio-gpu-3d: information leakage in virgl_cmd_get_capset_info","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9845.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2016-9846","severity":"low","public_date":"2016-11-01T00:00:00Z","advisories":[],"bugzilla":"1402255","bugzilla_description":"CVE-2016-9846 Qemu: display: virtio-gpu: memory leakage while updating cursor data","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-244","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9846.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9908","severity":"low","public_date":"2016-11-01T00:00:00Z","advisories":[],"bugzilla":"1402262","bugzilla_description":"CVE-2016-9908 Qemu: display: virtio-gpu: information leakage in virgl_cmd_get_capset","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9908.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2016-8910","severity":"low","public_date":"2016-10-21T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1388046","bugzilla_description":"CVE-2016-8910 Qemu: net: rtl8139: infinite loop while transmit in C+ mode","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8910.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-8909","severity":"low","public_date":"2016-10-20T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1388052","bugzilla_description":"CVE-2016-8909 Qemu: audio: intel-hda: infinite loop in processing dma buffer stream","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8909.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9921","severity":"low","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1334398","bugzilla_description":"CVE-2016-9921 CVE-2016-9922 Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9921.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9922","severity":"low","public_date":"2016-10-18T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1334398","bugzilla_description":"CVE-2016-9921 CVE-2016-9922 Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9922.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9104","severity":"low","public_date":"2016-10-13T00:00:00Z","advisories":[],"bugzilla":"1389686","bugzilla_description":"CVE-2016-9104 Qemu: 9pfs: integer overflow leading to OOB access","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9104.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-8667","severity":"low","public_date":"2016-10-12T00:00:00Z","advisories":[],"bugzilla":"1384874","bugzilla_description":"CVE-2016-8667 Qemu: hw: dma: divide by zero error in set_next_tick","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8667.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-8668","severity":"low","public_date":"2016-10-12T00:00:00Z","advisories":[],"bugzilla":"1384896","bugzilla_description":"CVE-2016-8668 Qemu: net: OOB buffer access in rocker switch emulation","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8668.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2016-8669","severity":"low","public_date":"2016-10-12T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1384909","bugzilla_description":"CVE-2016-8669 Qemu: char: divide by zero error in serial_update_parameters","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8669.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9105","severity":"low","public_date":"2016-10-12T00:00:00Z","advisories":[],"bugzilla":"1389702","bugzilla_description":"CVE-2016-9105 Qemu: 9pfs: memory leakage in v9fs_link","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9105.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9106","severity":"low","public_date":"2016-10-12T00:00:00Z","advisories":[],"bugzilla":"1389712","bugzilla_description":"CVE-2016-9106 Qemu: 9pfs: memory leakage in v9fs_write","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9106.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9102","severity":"low","public_date":"2016-10-10T00:00:00Z","advisories":[],"bugzilla":"1389550","bugzilla_description":"CVE-2016-9102 Qemu: 9pfs: memory leakage when creating extended attribute","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9102.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9101","severity":"low","public_date":"2016-10-08T00:00:00Z","advisories":[],"bugzilla":"1389538","bugzilla_description":"CVE-2016-9101 Qemu: net: eepro100 memory leakage at device unplug","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9101.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-9103","severity":"low","public_date":"2016-10-08T00:00:00Z","advisories":[],"bugzilla":"1389642","bugzilla_description":"CVE-2016-9103 Qemu: 9pfs: information leakage via xattr","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9103.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2016-8576","severity":"low","public_date":"2016-10-06T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1333425","bugzilla_description":"CVE-2016-8576 Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8576.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7909","severity":"low","public_date":"2016-09-30T00:00:00Z","advisories":[],"bugzilla":"1329538","bugzilla_description":"CVE-2016-7909 Qemu: net: pcnet: infinite loop in pcnet_rdra_addr()","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7909.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-8577","severity":"low","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1383285","bugzilla_description":"CVE-2016-8577 Qemu: 9pfs: host memory leakage in v9fs_read","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8577.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-8578","severity":"low","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1383291","bugzilla_description":"CVE-2016-8578 Qemu: 9pfs: potential NULL dereferencein 9pfs routines","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8578.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7995","severity":"low","public_date":"2016-09-26T00:00:00Z","advisories":[],"bugzilla":"1382668","bugzilla_description":"CVE-2016-7995 Qemu: usb: hcd-ehci: memory leak in ehci_process_itd","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7995.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7161","severity":"moderate","public_date":"2016-09-23T00:00:00Z","advisories":[],"bugzilla":"1379297","bugzilla_description":"CVE-2016-7161 Qemu: net: xilinx_ethlite: heap buffer overflow in eth_rx","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7161.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2016-7907","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1327206","bugzilla_description":"CVE-2016-7907 Qemu: net: inifinte loop in imx_fec_do_tx() function","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7907.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7908","severity":"low","public_date":"2016-09-21T00:00:00Z","advisories":[],"bugzilla":"1327465","bugzilla_description":"CVE-2016-7908 Qemu: net: Infinite loop in mcf_fec_do_tx()","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7908.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7994","severity":"low","public_date":"2016-09-19T00:00:00Z","advisories":[],"bugzilla":"1382666","bugzilla_description":"CVE-2016-7994 Qemu: virtio-gpu: memory leak in virtio_gpu_resource_create_2d","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7994.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7422","severity":"low","public_date":"2016-09-15T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1376755","bugzilla_description":"CVE-2016-7422 Qemu: virtio: null pointer dereference in virtqueu_map_desc","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7422.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.6"},{"CVE":"CVE-2016-7423","severity":"moderate","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1376776","bugzilla_description":"CVE-2016-7423 Qemu: scsi: mptsas: OOB access when freeing MPTSASRequest object","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7423.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-7466","severity":"low","public_date":"2016-09-13T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1377837","bugzilla_description":"CVE-2016-7466 Qemu: usb: xhci memory leakage during device unplug","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7466.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7170","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1374702","bugzilla_description":"CVE-2016-7170 Qemu: vmware_vga: OOB stack memory access when processing svga command","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7170.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2016-7421","severity":"low","public_date":"2016-09-07T00:00:00Z","advisories":[],"bugzilla":"1376731","bugzilla_description":"CVE-2016-7421 Qemu: scsi: pvscsi: infinite loop when processing IO requests","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7421.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.0"},{"CVE":"CVE-2016-7156","severity":"low","public_date":"2016-09-03T00:00:00Z","advisories":[],"bugzilla":"1373478","bugzilla_description":"CVE-2016-7156 Qemu: scsi: pvscsi: infintie loop when building SG list","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7156.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.6"},{"CVE":"CVE-2016-7155","severity":"moderate","public_date":"2016-08-31T00:00:00Z","advisories":[],"bugzilla":"1373462","bugzilla_description":"CVE-2016-7155 Qemu: scsi: pvscsi: OOB read and infinite loop while setting descriptor rings","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7155.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-7157","severity":"low","public_date":"2016-08-31T00:00:00Z","advisories":[],"bugzilla":"1373504","bugzilla_description":"CVE-2016-7157 Qemu: scsi: mptsas: invalid memory access while building configuration pages","cvss_score":2.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7157.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2016-7116","severity":"low","public_date":"2016-08-11T00:00:00Z","advisories":[],"bugzilla":"1346349","bugzilla_description":"CVE-2016-7116 Qemu: 9p: directory traversal flaw in 9p virtio backend","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7116.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-6836","severity":"low","public_date":"2016-08-11T00:00:00Z","advisories":[],"bugzilla":"1366369","bugzilla_description":"CVE-2016-6836 Qemu: net: vmxnet: Information leakage in vmxnet3_complete_packet","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6836.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2016-6833","severity":"low","public_date":"2016-08-09T00:00:00Z","advisories":[],"bugzilla":"1368980","bugzilla_description":"CVE-2016-6833 Qemu: net: vmxnet3: use-after-free while writing to device","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6833.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2016-6834","severity":"low","public_date":"2016-08-09T00:00:00Z","advisories":[],"bugzilla":"1368990","bugzilla_description":"CVE-2016-6834 Qemu: net: vmxnet3: an infinite loop during packet fragmentation","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6834.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2016-6835","severity":"moderate","public_date":"2016-08-09T00:00:00Z","advisories":["RHSA-2017:2392"],"bugzilla":"1369012","bugzilla_description":"CVE-2016-6835 Qemu: net: vmxnet: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6835.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2016-6888","severity":"low","public_date":"2016-08-09T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392"],"bugzilla":"1369031","bugzilla_description":"CVE-2016-6888 Qemu: net: vmxnet: integer overflow in packet initialisation","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6888.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2016-5403","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":["RHSA-2016:1585","RHSA-2016:1652","RHSA-2016:1586","RHSA-2016:1606","RHSA-2016:1607","RHSA-2016:1943","RHSA-2016:1756","RHSA-2016:1653","RHSA-2016:1763","RHSA-2016:1654","RHSA-2016:1655"],"bugzilla":"1358359","bugzilla_description":"CVE-2016-5403 Qemu: virtio: unbounded memory allocation on host via guest leading to DoS","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["qemu-kvm-rhev-10:2.3.0-31.el7_2.21","qemu-kvm-10:1.5.3-105.el7_2.7","qemu-kvm-rhev-2:0.12.1.2-2.491.el6_8.3","kvm-0:83-276.el5_11","qemu-kvm-2:0.12.1.2-2.491.el6_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5403.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2016-6490","severity":"low","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361427","bugzilla_description":"CVE-2016-6490 Qemu: virtio: infinite loop in virtqueue_pop","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6490.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.4"},{"CVE":"CVE-2016-6351","severity":"moderate","public_date":"2016-06-15T00:00:00Z","advisories":[],"bugzilla":"1360599","bugzilla_description":"CVE-2016-6351 Qemu: scsi: esp: OOB write access in esp_do_dma","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6351.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2016-5337","severity":"low","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343909","bugzilla_description":"CVE-2016-5337 Qemu: scsi: megasas: information leakage in megasas_ctrl_get_info","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5337.json"},{"CVE":"CVE-2016-5238","severity":"moderate","public_date":"2016-05-31T00:00:00Z","advisories":[],"bugzilla":"1341931","bugzilla_description":"CVE-2016-5238 Qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5238.json"},{"CVE":"CVE-2016-4454","severity":"moderate","public_date":"2016-05-30T00:00:00Z","advisories":[],"bugzilla":"1336429","bugzilla_description":"CVE-2016-4454 Qemu: display: vmsvga: out-of-bounds read in vmsvga_fifo_read_raw() routine","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4454.json"},{"CVE":"CVE-2016-4453","severity":"low","public_date":"2016-05-30T00:00:00Z","advisories":[],"bugzilla":"1336650","bugzilla_description":"CVE-2016-4453 Qemu: display: vmsvga: infinite loop in vmsvga_fifo_run() routine","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4453.json"},{"CVE":"CVE-2016-5338","severity":"moderate","public_date":"2016-05-30T00:00:00Z","advisories":[],"bugzilla":"1343323","bugzilla_description":"CVE-2016-5338 Qemu: scsi: esp: OOB r/w access while processing ESP_FIFO","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5338.json"},{"CVE":"CVE-2016-5107","severity":"moderate","public_date":"2016-05-25T00:00:00Z","advisories":[],"bugzilla":"1336461","bugzilla_description":"CVE-2016-5107 Qemu: scsi: megasas: out-of-bounds read in megasas_lookup_frame() function","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5107.json"},{"CVE":"CVE-2016-5106","severity":"moderate","public_date":"2016-05-25T00:00:00Z","advisories":[],"bugzilla":"1339578","bugzilla_description":"CVE-2016-5106 Qemu: scsi: megasas: out-of-bounds write while setting controller properties","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5106.json"},{"CVE":"CVE-2016-5105","severity":"low","public_date":"2016-05-25T00:00:00Z","advisories":[],"bugzilla":"1339583","bugzilla_description":"CVE-2016-5105 Qemu: scsi: megasas: stack information leakage while reading configuration","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5105.json"},{"CVE":"CVE-2016-4964","severity":"low","public_date":"2016-05-24T00:00:00Z","advisories":[],"bugzilla":"1339155","bugzilla_description":"CVE-2016-4964 Qemu: scsi: mptsas infinite loop in mptsas_fetch_requests","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4964.json"},{"CVE":"CVE-2016-5126","severity":"moderate","public_date":"2016-05-24T00:00:00Z","advisories":["RHSA-2016:1606","RHSA-2016:1607","RHSA-2016:1756","RHSA-2016:1653","RHSA-2016:1763","RHSA-2016:1654","RHSA-2016:1655"],"bugzilla":"1340924","bugzilla_description":"CVE-2016-5126 Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-120","affected_packages":["qemu-kvm-rhev-10:2.3.0-31.el7_2.21","qemu-kvm-10:1.5.3-105.el7_2.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5126.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2016-4952","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":[],"bugzilla":"1334384","bugzilla_description":"CVE-2016-4952 Qemu: scsi: pvscsi: out-of-bounds access issue in pvsci_ring_init_msg/data routines","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4952.json"},{"CVE":"CVE-2014-3672","severity":"moderate","public_date":"2016-05-23T00:00:00Z","advisories":[],"bugzilla":"1339123","bugzilla_description":"CVE-2014-3672 xen: Unrestricted qemu logging","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3672.json"},{"CVE":"CVE-2016-4439","severity":"moderate","public_date":"2016-05-19T00:00:00Z","advisories":[],"bugzilla":"1337502","bugzilla_description":"CVE-2016-4439 Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4439.json"},{"CVE":"CVE-2016-4441","severity":"moderate","public_date":"2016-05-19T00:00:00Z","advisories":[],"bugzilla":"1337505","bugzilla_description":"CVE-2016-4441 Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4441.json"},{"CVE":"CVE-2016-10029","severity":"moderate","public_date":"2016-05-19T00:00:00Z","advisories":[],"bugzilla":"1406390","bugzilla_description":"CVE-2016-10029 Qemu: display: virtio-gpu: out of bounds read in virtio_gpu_set_scanout","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10029.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2016-3712","severity":"moderate","public_date":"2016-05-09T00:00:00Z","advisories":["RHSA-2017:0621","RHSA-2016:2585"],"bugzilla":"1318712","bugzilla_description":"CVE-2016-3712 qemu-kvm: Out-of-bounds read when creating weird vga screen surface","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-2:0.12.1.2-2.503.el6","qemu-kvm-10:1.5.3-126.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3712.json"},{"CVE":"CVE-2016-3710","severity":"important","public_date":"2016-05-09T00:00:00Z","advisories":["RHSA-2016:1000","RHSA-2016:1001","RHSA-2016:1002","RHSA-2016:1943","RHSA-2016:0997","RHSA-2016:1019","RHSA-2016:0724","RHSA-2016:0999","RHSA-2016:0725","RHSA-2016:1224"],"bugzilla":"1331401","bugzilla_description":"CVE-2016-3710 qemu: incorrect banked access bounds checking in vga module","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["qemu-kvm-rhev-10:2.3.0-31.el7_2.13","kvm-0:83-276.el5_11","qemu-kvm-10:1.5.3-105.el7_2.4","qemu-kvm-2:0.12.1.2-2.491.el6_8.1","qemu-kvm-rhev-2:0.12.1.2-2.491.el6_8.1","qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3710.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2016-4037","severity":"low","public_date":"2016-04-18T00:00:00Z","advisories":[],"bugzilla":"1325129","bugzilla_description":"CVE-2016-4037 Qemu: usb: Infinite loop vulnerability in usb_ehci using siTD process","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4037.json"},{"CVE":"CVE-2016-4020","severity":"low","public_date":"2016-04-07T00:00:00Z","advisories":["RHSA-2017:2408","RHSA-2017:2392","RHSA-2017:1856"],"bugzilla":"1313686","bugzilla_description":"CVE-2016-4020 Qemu: i386: leakage of stack memory to guest in kvmvapic.c","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["qemu-kvm-rhev-10:2.9.0-10.el7","qemu-kvm-rhev-10:2.9.0-14.el7","qemu-kvm-10:1.5.3-141.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4020.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.4"},{"CVE":"CVE-2016-4001","severity":"moderate","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1325884","bugzilla_description":"CVE-2016-4001 Qemu: net: buffer overflow in stellaris_enet emulator","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4001.json"},{"CVE":"CVE-2016-4002","severity":"moderate","public_date":"2016-04-07T00:00:00Z","advisories":[],"bugzilla":"1326082","bugzilla_description":"CVE-2016-4002 Qemu: net: buffer overflow in MIPSnet emulator","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4002.json"},{"CVE":"CVE-2016-2857","severity":"low","public_date":"2016-02-17T00:00:00Z","advisories":["RHSA-2017:0334","RHSA-2016:2706","RHSA-2017:0083","RHSA-2016:2671","RHSA-2016:2670","RHSA-2017:0309","RHSA-2016:2705","RHSA-2016:2704","RHSA-2017:0350","RHSA-2017:0344"],"bugzilla":"1296567","bugzilla_description":"CVE-2016-2857 Qemu: net: out of bounds read in net_checksum_calculate()","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-rhev-10:2.6.0-27.el7","qemu-kvm-rhev-10:2.6.0-28.el7_3.6","qemu-kvm-rhev-2:0.12.1.2-2.491.el6_8.6","qemu-kvm-rhev-2:0.12.1.2-2.491.el6_8.7","qemu-kvm-10:1.5.3-126.el7_3.3","qemu-kvm-2:0.12.1.2-2.491.el6_8.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2857.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L","cvss3_score":"4.7"},{"CVE":"CVE-2016-2391","severity":"low","public_date":"2016-02-16T00:00:00Z","advisories":[],"bugzilla":"1304794","bugzilla_description":"CVE-2016-2391 Qemu: usb: multiple eof_timers in ohci module leads to null pointer dereference","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2391.json"},{"CVE":"CVE-2016-2392","severity":"low","public_date":"2016-02-11T00:00:00Z","advisories":[],"bugzilla":"1302299","bugzilla_description":"CVE-2016-2392 Qemu: usb: null pointer dereference in remote NDIS control message handling","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2392.json"},{"CVE":"CVE-2016-2538","severity":"low","public_date":"2016-02-05T00:00:00Z","advisories":[],"bugzilla":"1303120","bugzilla_description":"CVE-2016-2538 Qemu: usb: integer overflow in remote NDIS control message handling","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2538.json"},{"CVE":"CVE-2016-2841","severity":"low","public_date":"2016-02-02T00:00:00Z","advisories":[],"bugzilla":"1303106","bugzilla_description":"CVE-2016-2841 Qemu: net: ne2000: infinite loop in ne2000_receive","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2841.json"},{"CVE":"CVE-2016-2198","severity":"low","public_date":"2016-01-29T00:00:00Z","advisories":[],"bugzilla":"1301643","bugzilla_description":"CVE-2016-2198 Qemu: usb: ehci null pointer dereference in ehci_caps_write","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2198.json"},{"CVE":"CVE-2016-2197","severity":"low","public_date":"2016-01-28T00:00:00Z","advisories":[],"bugzilla":"1302057","bugzilla_description":"CVE-2016-2197 Qemu: ide: ahci null pointer dereference when using FIS CLB engines","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2197.json"},{"CVE":"CVE-2015-8817","severity":"low","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2016:2706","RHSA-2016:2671","RHSA-2016:2670","RHSA-2016:2705","RHSA-2016:2704"],"bugzilla":"1300771","bugzilla_description":"CVE-2015-8817 CVE-2015-8818 Qemu: OOB access in address_space_rw leads to segmentation fault","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.6.0-27.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8817.json"},{"CVE":"CVE-2015-8818","severity":"low","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2016:2706","RHSA-2016:2671","RHSA-2016:2670","RHSA-2016:2705","RHSA-2016:2704"],"bugzilla":"1300771","bugzilla_description":"CVE-2015-8817 CVE-2015-8818 Qemu: OOB access in address_space_rw leads to segmentation fault","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-rhev-10:2.6.0-27.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8818.json"},{"CVE":"CVE-2016-2858","severity":"low","public_date":"2016-01-22T00:00:00Z","advisories":[],"bugzilla":"1314676","bugzilla_description":"CVE-2016-2858 Qemu: rng-random: arbitrary stack based allocation leading to corruption","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2858.json"},{"CVE":"CVE-2016-1981","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:2585"],"bugzilla":"1298570","bugzilla_description":"CVE-2016-1981 Qemu: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["qemu-kvm-10:1.5.3-126.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1981.json"},{"CVE":"CVE-2016-1568","severity":"important","public_date":"2016-01-08T00:00:00Z","advisories":["RHSA-2016:0087","RHSA-2016:0088","RHSA-2016:0084","RHSA-2016:0086"],"bugzilla":"1288532","bugzilla_description":"CVE-2016-1568 Qemu: ide: ahci use-after-free vulnerability in aio port commands","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["qemu-kvm-rhev-10:2.3.0-31.el7_2.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1568.json"},{"CVE":"CVE-2016-1714","severity":"important","public_date":"2016-01-05T00:00:00Z","advisories":["RHSA-2016:0087","RHSA-2016:0088","RHSA-2016:0083","RHSA-2016:0084","RHSA-2016:0085","RHSA-2016:0086","RHSA-2016:0081","RHSA-2016:0082"],"bugzilla":"1296060","bugzilla_description":"CVE-2016-1714 Qemu: nvram: OOB r/w access in processing firmware configurations","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["qemu-kvm-2:0.12.1.2-2.479.el6_7.4","qemu-kvm-rhev-10:2.3.0-31.el7_2.7","qemu-kvm-10:1.5.3-105.el7_2.3","qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1714.json"},{"CVE":"CVE-2015-8743","severity":"low","public_date":"2015-12-30T00:00:00Z","advisories":[],"bugzilla":"1264929","bugzilla_description":"CVE-2015-8743 Qemu: net: ne2000: OOB memory access in ioport r/w functions","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8743.json"},{"CVE":"CVE-2015-8666","severity":"low","public_date":"2015-12-24T00:00:00Z","advisories":[],"bugzilla":"1283722","bugzilla_description":"CVE-2015-8666 Qemu: acpi: heap based buffer overrun during VM migration","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8666.json"},{"CVE":"CVE-2015-8701","severity":"low","public_date":"2015-12-23T00:00:00Z","advisories":[],"bugzilla":"1286971","bugzilla_description":"CVE-2015-8701 Qemu: net: rocker: stack buffer overflow(off-by-one) in tx_consume routine","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8701.json"},{"CVE":"CVE-2015-8613","severity":"low","public_date":"2015-12-21T00:00:00Z","advisories":[],"bugzilla":"1284008","bugzilla_description":"CVE-2015-8613 Qemu: scsi: stack based buffer overflow in megasas_ctrl_get_info","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8613.json"},{"CVE":"CVE-2016-1922","severity":"low","public_date":"2015-12-18T00:00:00Z","advisories":[],"bugzilla":"1283934","bugzilla_description":"CVE-2016-1922 Qemu: i386: null pointer dereference in vapic_write()","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1922.json"},{"CVE":"CVE-2015-8619","severity":"low","public_date":"2015-12-17T00:00:00Z","advisories":[],"bugzilla":"1283926","bugzilla_description":"CVE-2015-8619 Qemu: hmp: stack based OOB write in hmp_sendkey routine","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8619.json"},{"CVE":"CVE-2015-8556","severity":"important","public_date":"2015-12-14T00:00:00Z","advisories":[],"bugzilla":"1292211","bugzilla_description":"CVE-2015-8556 Qemu: virtfs: local privilege escalation via virtfs-proxy-helper","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8556.json"},{"CVE":"CVE-2015-8558","severity":"low","public_date":"2015-12-10T00:00:00Z","advisories":[],"bugzilla":"1277983","bugzilla_description":"CVE-2015-8558 Qemu: usb: infinite loop in ehci_advance_state results in DoS","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8558.json"},{"CVE":"CVE-2015-8504","severity":"moderate","public_date":"2015-12-03T00:00:00Z","advisories":[],"bugzilla":"1289541","bugzilla_description":"CVE-2015-8504 Qemu: ui: vnc: avoid floating point exception","cvss_score":6.3,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8504.json"},{"CVE":"CVE-2015-8567","severity":"low","public_date":"2015-12-02T00:00:00Z","advisories":[],"bugzilla":"1289816","bugzilla_description":"CVE-2015-8567 CVE-2015-8568 Qemu: net: vmxnet3: host memory leakage","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8567.json"},{"CVE":"CVE-2015-8568","severity":"low","public_date":"2015-12-02T00:00:00Z","advisories":[],"bugzilla":"1289816","bugzilla_description":"CVE-2015-8567 CVE-2015-8568 Qemu: net: vmxnet3: host memory leakage","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8568.json"},{"CVE":"CVE-2015-7504","severity":"important","public_date":"2015-11-30T00:00:00Z","advisories":["RHSA-2015:2694","RHSA-2015:2695","RHSA-2015:2696"],"bugzilla":"1261461","bugzilla_description":"CVE-2015-7504 Qemu: net: pcnet: heap overflow vulnerability in pcnet_receive","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["qemu-kvm-2:0.12.1.2-2.479.el6_7.3","qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7504.json"},{"CVE":"CVE-2015-7512","severity":"important","public_date":"2015-11-30T00:00:00Z","advisories":["RHSA-2015:2694","RHSA-2015:2695","RHSA-2015:2696"],"bugzilla":"1285061","bugzilla_description":"CVE-2015-7512 Qemu: net: pcnet: buffer overflow in non-loopback mode","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["qemu-kvm-2:0.12.1.2-2.479.el6_7.3","qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7512.json"},{"CVE":"CVE-2015-8345","severity":"moderate","public_date":"2015-11-20T00:00:00Z","advisories":[],"bugzilla":"1285213","bugzilla_description":"CVE-2015-8345 Qemu: net: eepro100: infinite loop in processing command block list","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8345.json"},{"CVE":"CVE-2015-7549","severity":"low","public_date":"2015-10-24T00:00:00Z","advisories":[],"bugzilla":"1291137","bugzilla_description":"CVE-2015-7549 Qemu: pci: null pointer dereference issue","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7549.json"},{"CVE":"CVE-2015-8744","severity":"low","public_date":"2015-10-12T00:00:00Z","advisories":[],"bugzilla":"1270871","bugzilla_description":"CVE-2015-8744 Qemu: net: vmxnet3: incorrect l2 header validation leads to a crash via assert(2) call","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8744.json"},{"CVE":"CVE-2015-8745","severity":"low","public_date":"2015-10-12T00:00:00Z","advisories":[],"bugzilla":"1270876","bugzilla_description":"CVE-2015-8745 Qemu: net: vmxnet3: reading IMR registers leads to a crash via assert(2) call","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8745.json"},{"CVE":"CVE-2015-7295","severity":"moderate","public_date":"2015-09-18T00:00:00Z","advisories":[],"bugzilla":"1264381","bugzilla_description":"CVE-2015-7295 Qemu: net: virtio-net possible remote DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7295.json"},{"CVE":"CVE-2015-5278","severity":"moderate","public_date":"2015-09-15T00:00:00Z","advisories":[],"bugzilla":"1256661","bugzilla_description":"CVE-2015-5278 qemu: Infinite loop in ne2000_receive() function","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5278.json"},{"CVE":"CVE-2015-5279","severity":"important","public_date":"2015-09-15T00:00:00Z","advisories":["RHSA-2015:1924","RHSA-2015:1925","RHSA-2015:2065","RHSA-2015:1896","RHSA-2015:1923"],"bugzilla":"1256672","bugzilla_description":"CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["kvm-0:83-274.el5_11","qemu-kvm-2:0.12.1.2-2.479.el6_7.2","xen-0:3.0.3-147.el5_11","qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5279.json"},{"CVE":"CVE-2015-6855","severity":"low","public_date":"2015-09-09T00:00:00Z","advisories":[],"bugzilla":"1260080","bugzilla_description":"CVE-2015-6855 Qemu: ide: divide by zero issue","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6855.json"},{"CVE":"CVE-2015-6815","severity":"low","public_date":"2015-09-05T00:00:00Z","advisories":[],"bugzilla":"1260076","bugzilla_description":"CVE-2015-6815 qemu: net: e1000: infinite loop issue","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6815.json"},{"CVE":"CVE-2015-5225","severity":"important","public_date":"2015-08-22T00:00:00Z","advisories":["RHSA-2015:1837","RHSA-2015:1772"],"bugzilla":"1255896","bugzilla_description":"CVE-2015-5225 Qemu: ui: vnc: heap memory corruption in vnc_refresh_server_surface","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.1.2-23.el7_1.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5225.json"},{"CVE":"CVE-2015-5165","severity":"moderate","public_date":"2015-08-03T00:00:00Z","advisories":["RHSA-2015:1739","RHSA-2015:1718","RHSA-2015:1793","RHSA-2015:1683","RHSA-2015:1674","RHSA-2015:1740","RHSA-2015:1833"],"bugzilla":"1248760","bugzilla_description":"CVE-2015-5165 Qemu: rtl8139 uninitialized heap memory information leakage to guest (XSA-140)","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":["qemu-kvm-2:0.12.1.2-2.479.el6_7.1","qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.1","qemu-kvm-10:1.5.3-86.el7_1.6","qemu-kvm-rhev-10:2.1.2-23.el7_1.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5165.json"},{"CVE":"CVE-2015-5166","severity":"moderate","public_date":"2015-08-03T00:00:00Z","advisories":[],"bugzilla":"1248997","bugzilla_description":"CVE-2015-5166 Qemu: BlockBackend object use after free issue (XSA-139)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5166.json"},{"CVE":"CVE-2015-5154","severity":"important","public_date":"2015-07-27T00:00:00Z","advisories":["RHSA-2015:1512","RHSA-2015:1508","RHSA-2015:1507"],"bugzilla":"1243563","bugzilla_description":"CVE-2015-5154 qemu: ide: atapi: heap overflow during I/O buffer memory access","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["qemu-kvm-10:1.5.3-86.el7_1.5","qemu-kvm-rhev-10:2.1.2-23.el7_1.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5154.json"},{"CVE":"CVE-2015-5745","severity":"low","public_date":"2015-07-23T00:00:00Z","advisories":[],"bugzilla":"1251157","bugzilla_description":"CVE-2015-5745 kernel: qemu buffer overflow in virtio-serial","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5745.json"},{"CVE":"CVE-2015-5158","severity":"moderate","public_date":"2015-07-22T00:00:00Z","advisories":[],"bugzilla":"1244332","bugzilla_description":"CVE-2015-5158 Qemu: scsi stack buffer overflow","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5158.json"},{"CVE":"CVE-2015-3214","severity":"moderate","public_date":"2015-06-16T00:00:00Z","advisories":["RHSA-2015:1512","RHSA-2015:1508","RHSA-2015:1507"],"bugzilla":"1229640","bugzilla_description":"CVE-2015-3214 qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["qemu-kvm-10:1.5.3-86.el7_1.5","qemu-kvm-rhev-10:2.1.2-23.el7_1.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3214.json"},{"CVE":"CVE-2015-3209","severity":"important","public_date":"2015-06-10T00:00:00Z","advisories":["RHSA-2015:1189","RHSA-2015:1089","RHSA-2015:1088","RHSA-2015:1087"],"bugzilla":"1225882","bugzilla_description":"CVE-2015-3209 qemu: pcnet: multi-tmd buffer overflow in the tx path","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["kvm-0:83-273.el5_11","qemu-kvm-2:0.12.1.2-2.448.el6_6.4","qemu-kvm-rhev-2:0.12.1.2-2.448.el6_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3209.json"},{"CVE":"CVE-2015-3456","severity":"important","public_date":"2015-05-13T00:00:00Z","advisories":["RHSA-2015:0999","RHSA-2015:0998","RHSA-2015:1004","RHSA-2015:1003","RHSA-2015:1002","RHSA-2015:1001","RHSA-2015:1011","RHSA-2015:1000","RHSA-2015:1031"],"bugzilla":"1218611","bugzilla_description":"CVE-2015-3456 qemu: fdc: out-of-bounds fifo buffer memory access","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["qemu-kvm-rhev-10:2.1.2-23.el7_1.3","qemu-kvm-10:1.5.3-86.el7_1.2","kvm-0:83-272.el5_11","qemu-kvm-2:0.12.1.2-2.448.el6_6.3","qemu-kvm-rhev-2:0.12.1.2-2.448.el6_6.3","rhev-hypervisor7-0:7.1-20150512.1.el7ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.15","rhev-hypervisor6-0:6.6-20150512.0.el6ev","xen-0:3.0.3-146.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3456.json"},{"CVE":"CVE-2015-4037","severity":"moderate","public_date":"2015-05-13T00:00:00Z","advisories":[],"bugzilla":"1222892","bugzilla_description":"CVE-2015-4037 qemu: insecure temporary file use in /net/slirp.c","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4037.json"},{"CVE":"CVE-2015-1779","severity":"moderate","public_date":"2015-03-23T00:00:00Z","advisories":["RHSA-2015:1931","RHSA-2015:1943"],"bugzilla":"1199572","bugzilla_description":"CVE-2015-1779 qemu: vnc: insufficient resource limiting in VNC websockets decoder","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-770","affected_packages":["qemu-kvm-rhev-10:2.1.2-23.el7_1.10","qemu-kvm-10:1.5.3-86.el7_1.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1779.json"},{"CVE":"CVE-2014-8106","severity":"important","public_date":"2014-12-04T00:00:00Z","advisories":["RHSA-2015:0867","RHSA-2015:0349","RHSA-2015:0624","RHSA-2015:0643","RHSA-2015:0795","RHSA-2015:0891","RHSA-2015:0868"],"bugzilla":"1169454","bugzilla_description":"CVE-2014-8106 qemu: cirrus: insufficient blit region checks","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-20->CWE-119","affected_packages":["qemu-kvm-2:0.12.1.2-2.448.el6_6.2","qemu-kvm-10:1.5.3-86.el7","qemu-kvm-rhev-10:2.1.2-23.el7","qemu-kvm-rhev-2:0.12.1.2-2.448.el6_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8106.json"},{"CVE":"CVE-2014-7840","severity":"moderate","public_date":"2014-11-12T00:00:00Z","advisories":["RHSA-2015:0349","RHSA-2015:0624"],"bugzilla":"1163075","bugzilla_description":"CVE-2014-7840 qemu: insufficient parameter validation during ram load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-122","affected_packages":["qemu-kvm-10:1.5.3-86.el7","qemu-kvm-rhev-10:2.1.2-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7840.json"},{"CVE":"CVE-2014-9718","severity":"moderate","public_date":"2014-10-31T00:00:00Z","advisories":[],"bugzilla":"1204919","bugzilla_description":"CVE-2014-9718 Qemu: PRDT overflow from guest to host","cvss_score":4.6,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9718.json"},{"CVE":"CVE-2014-7815","severity":"moderate","public_date":"2014-10-27T00:00:00Z","advisories":["RHSA-2015:0349","RHSA-2015:0624"],"bugzilla":"1157641","bugzilla_description":"CVE-2014-7815 qemu: vnc: insufficient bits_per_pixel from the client sanitization","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["qemu-kvm-10:1.5.3-86.el7","qemu-kvm-rhev-10:2.1.2-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7815.json"},{"CVE":"CVE-2014-3689","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1153035","bugzilla_description":"CVE-2014-3689 qemu: vmware_vga: insufficient parameter validation in rectangle functions","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3689.json"},{"CVE":"CVE-2014-9766","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1311882","bugzilla_description":"CVE-2014-9766 pixman: integer overflow in create_bits function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9766.json"},{"CVE":"CVE-2014-3640","severity":"low","public_date":"2014-09-17T00:00:00Z","advisories":["RHSA-2015:0349","RHSA-2015:0624"],"bugzilla":"1144818","bugzilla_description":"CVE-2014-3640 qemu: slirp: NULL pointer deref in sosendto()","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["qemu-kvm-10:1.5.3-86.el7","qemu-kvm-rhev-10:2.1.2-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3640.json"},{"CVE":"CVE-2014-3615","severity":"low","public_date":"2014-09-05T00:00:00Z","advisories":["RHSA-2014:1669","RHSA-2014:1941","RHSA-2014:1670"],"bugzilla":"1139115","bugzilla_description":"CVE-2014-3615 Qemu: information leakage when guest sets high resolution","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:N","CWE":"CWE-200","affected_packages":["qemu-kvm-rhev-10:1.5.3-60.el7_0.10","qemu-kvm-10:1.5.3-60.el7_0.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3615.json"},{"CVE":"CVE-2014-5388","severity":"low","public_date":"2014-08-19T00:00:00Z","advisories":[],"bugzilla":"1132956","bugzilla_description":"CVE-2014-5388 Qemu: out of bounds memory access","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:N","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5388.json"},{"CVE":"CVE-2014-5263","severity":"low","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1126543","bugzilla_description":"CVE-2014-5263 qemu: missing field list terminator in vmstate_xhci_event","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5263.json"},{"CVE":"CVE-2015-5239","severity":"moderate","public_date":"2014-06-30T00:00:00Z","advisories":[],"bugzilla":"1257735","bugzilla_description":"CVE-2015-5239 qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg()","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5239.json"},{"CVE":"CVE-2014-3471","severity":"moderate","public_date":"2014-06-23T00:00:00Z","advisories":[],"bugzilla":"1112271","bugzilla_description":"CVE-2014-3471 Qemu: hw: pci: use after free triggered via guest","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3471.json"},{"CVE":"CVE-2014-3461","severity":"moderate","public_date":"2014-05-12T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1096821","bugzilla_description":"CVE-2014-3461 Qemu: usb: fix up post load checks","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3461.json"},{"CVE":"CVE-2014-0222","severity":"moderate","public_date":"2014-05-12T00:00:00Z","advisories":["RHSA-2014:1268","RHSA-2014:1168","RHSA-2014:1187","RHSA-2014:1076","RHSA-2014:1075","RHSA-2014:0927"],"bugzilla":"1097216","bugzilla_description":"CVE-2014-0222 Qemu: qcow1: validate L2 table size to avoid integer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-119","affected_packages":["rhev-hypervisor6-0:6.5-20140821.1.el6ev","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.14","qemu-kvm-2:0.12.1.2-2.415.el6_5.14","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0222.json"},{"CVE":"CVE-2014-0223","severity":"moderate","public_date":"2014-05-12T00:00:00Z","advisories":["RHSA-2014:1268","RHSA-2014:1168","RHSA-2014:1187","RHSA-2014:1076","RHSA-2014:1075","RHSA-2014:0927"],"bugzilla":"1097222","bugzilla_description":"CVE-2014-0223 Qemu: qcow1: validate image size to avoid out-of-bounds memory access","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-119","affected_packages":["rhev-hypervisor6-0:6.5-20140821.1.el6ev","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.14","qemu-kvm-2:0.12.1.2-2.415.el6_5.14","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0223.json"},{"CVE":"CVE-2014-0182","severity":"moderate","public_date":"2014-04-17T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1088986","bugzilla_description":"CVE-2014-0182 qemu: virtio: out-of-bounds buffer write on state load with invalid config_len","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0182.json"},{"CVE":"CVE-2014-2894","severity":"moderate","public_date":"2014-04-14T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0704"],"bugzilla":"1087971","bugzilla_description":"CVE-2014-2894 QEMU: out of bounds buffer accesses, guest triggerable via IDE SMART","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","qemu-kvm-10:1.5.3-60.el7_0.2","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2894.json"},{"CVE":"CVE-2014-0150","severity":"moderate","public_date":"2014-04-11T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1078846","bugzilla_description":"CVE-2014-0150 qemu: virtio-net: buffer overflow in virtio_net_handle_mac() function","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0150.json"},{"CVE":"CVE-2013-4544","severity":"moderate","public_date":"2014-04-04T00:00:00Z","advisories":[],"bugzilla":"1087513","bugzilla_description":"CVE-2013-4544 Qemu: vmxnet3: bounds checking buffer overrun","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4544.json"},{"CVE":"CVE-2014-0142","severity":"low","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1078201","bugzilla_description":"CVE-2014-0142 qemu: crash by possible division by zero","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-369","affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0142.json"},{"CVE":"CVE-2014-0148","severity":"low","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1078212","bugzilla_description":"CVE-2014-0148 Qemu: vhdx: bounds checking for block_size and logical_sector_size","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0148.json"},{"CVE":"CVE-2014-0146","severity":"low","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1078232","bugzilla_description":"CVE-2014-0146 Qemu: qcow2: NULL dereference in qcow2_open() error path","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0146.json"},{"CVE":"CVE-2014-0147","severity":"moderate","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1078848","bugzilla_description":"CVE-2014-0147 Qemu: block: possible crash due signed types or logic error","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0147.json"},{"CVE":"CVE-2014-0145","severity":"moderate","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1078885","bugzilla_description":"CVE-2014-0145 Qemu: prevent possible buffer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0145.json"},{"CVE":"CVE-2014-0143","severity":"moderate","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1079140","bugzilla_description":"CVE-2014-0143 Qemu: block: multiple integer overflow flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0143.json"},{"CVE":"CVE-2014-0144","severity":"moderate","public_date":"2014-03-26T00:00:00Z","advisories":["RHSA-2014:0421","RHSA-2014:0674","RHSA-2014:0420","RHSA-2014:0434","RHSA-2014:0435"],"bugzilla":"1079240","bugzilla_description":"CVE-2014-0144 Qemu: block: missing input validation","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-2:0.12.1.2-2.415.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0144.json"},{"CVE":"CVE-2013-4148","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1066334","bugzilla_description":"CVE-2013-4148 qemu: virtio-net: buffer overflow on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-681->CWE-119","affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4148.json"},{"CVE":"CVE-2013-4149","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:1268","RHSA-2014:0927"],"bugzilla":"1066337","bugzilla_description":"CVE-2013-4149 qemu: virtio-net: out-of-bounds buffer write on load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4149.json"},{"CVE":"CVE-2013-4150","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:1268","RHSA-2014:0927"],"bugzilla":"1066340","bugzilla_description":"CVE-2013-4150 qemu: virtio-net: out-of-bounds buffer write on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-787","affected_packages":["qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4150.json"},{"CVE":"CVE-2013-4151","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1066342","bugzilla_description":"CVE-2013-4151 qemu: virtio: out-of-bounds buffer write on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4151.json"},{"CVE":"CVE-2013-4526","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066345","bugzilla_description":"CVE-2013-4526 qemu: ahci: fix buffer overrun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4526.json"},{"CVE":"CVE-2013-4527","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:1268","RHSA-2014:0927"],"bugzilla":"1066347","bugzilla_description":"CVE-2013-4527 qemu: hpet: buffer overrun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4527.json"},{"CVE":"CVE-2013-4529","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:1268","RHSA-2014:0927"],"bugzilla":"1066353","bugzilla_description":"CVE-2013-4529 qemu: hw/pci/pcie_aer.c: buffer overrun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4529.json"},{"CVE":"CVE-2013-4530","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066354","bugzilla_description":"CVE-2013-4530 qemu: pl022: fix buffer overun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4530.json"},{"CVE":"CVE-2013-4531","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066357","bugzilla_description":"CVE-2013-4531 qemu: target-arm/machine.c: fix buffer overflow on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4531.json"},{"CVE":"CVE-2013-4532","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066358","bugzilla_description":"CVE-2013-4532 qemu: stellaris_enet: buffer overrun on incoming migration","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4532.json"},{"CVE":"CVE-2013-6399","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1066361","bugzilla_description":"CVE-2013-6399 qemu: virtio: buffer overrun on incoming migration","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6399.json"},{"CVE":"CVE-2013-4542","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1066382","bugzilla_description":"CVE-2013-4542 qemu: virtio-scsi: buffer overrun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4542.json"},{"CVE":"CVE-2013-4541","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1066384","bugzilla_description":"CVE-2013-4541 qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4541.json"},{"CVE":"CVE-2013-4540","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066386","bugzilla_description":"CVE-2013-4540 qemu: zaurus: buffer overrun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4540.json"},{"CVE":"CVE-2013-4539","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066387","bugzilla_description":"CVE-2013-4539 qemu: tsc210x: buffer overrun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4539.json"},{"CVE":"CVE-2013-4538","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066393","bugzilla_description":"CVE-2013-4538 qemu: ssd0323: fix buffer overun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4538.json"},{"CVE":"CVE-2013-4537","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066394","bugzilla_description":"CVE-2013-4537 qemu: ssi-sd: buffer overrun on invalid state load","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4537.json"},{"CVE":"CVE-2013-4535","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1066401","bugzilla_description":"CVE-2013-4535 CVE-2013-4536 qemu: virtio: insufficient validation of num_sg when mapping","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4535.json"},{"CVE":"CVE-2013-4536","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0674","RHSA-2014:1268","RHSA-2014:0744","RHSA-2014:0888","RHSA-2014:0743","RHSA-2014:0927"],"bugzilla":"1066401","bugzilla_description":"CVE-2013-4535 CVE-2013-4536 qemu: virtio: insufficient validation of num_sg when mapping","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6_5.10","rhev-hypervisor6-0:6.5-20140603.2.el6ev","qemu-kvm-10:1.5.3-60.el7_0.5","qemu-kvm-rhev-10:1.5.3-60.el7_0.7","qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4536.json"},{"CVE":"CVE-2013-4533","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066404","bugzilla_description":"CVE-2013-4533 qemu: pxa2xx: buffer overrun on incoming migration","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4533.json"},{"CVE":"CVE-2013-4534","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1066405","bugzilla_description":"CVE-2013-4534 qemu: openpic: buffer overrun on incoming migration","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4534.json"},{"CVE":"CVE-2013-4375","severity":"moderate","public_date":"2013-10-10T00:00:00Z","advisories":[],"bugzilla":"1012587","bugzilla_description":"CVE-2013-4375 xen: qemu disk backend (qdisk) resource leak (XSA-71)","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4375.json"},{"CVE":"CVE-2013-4344","severity":"important","public_date":"2013-10-02T00:00:00Z","advisories":["RHSA-2013:1527","RHSA-2013:1754","RHSA-2013:1553"],"bugzilla":"1007330","bugzilla_description":"CVE-2013-4344 qemu: buffer overflow in scsi_target_emulate_report_luns","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.415.el6","rhev-hypervisor6-0:6.5-20131115.0.3.2.el6_5","qemu-kvm-rhev-2:0.12.1.2-2.415.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4344.json"},{"CVE":"CVE-2013-2231","severity":"important","public_date":"2013-07-22T00:00:00Z","advisories":["RHSA-2013:1100","RHSA-2013:1101"],"bugzilla":"980757","bugzilla_description":"CVE-2013-2231 qemu: qemu-ga win32 service unquoted search path","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-428","affected_packages":["virtio-win-0:1.6.5-6.el6_4","qemu-kvm-2:0.12.1.2-2.355.el6_4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2231.json"},{"CVE":"CVE-2013-4377","severity":"moderate","public_date":"2013-07-11T00:00:00Z","advisories":[],"bugzilla":"1012633","bugzilla_description":"CVE-2013-4377 qemu: hot-unplugging virtio devices in guest can crash host qemu process","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4377.json"},{"CVE":"CVE-2013-2007","severity":"moderate","public_date":"2013-05-06T00:00:00Z","advisories":["RHSA-2013:0896"],"bugzilla":"956082","bugzilla_description":"CVE-2013-2007 qemu: guest agent creates files with insecure permissions in deamon mode","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.355.el6_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2007.json"},{"CVE":"CVE-2013-2016","severity":"important","public_date":"2013-04-25T00:00:00Z","advisories":[],"bugzilla":"957155","bugzilla_description":"CVE-2013-2016 qemu: virtio: out-of-bounds config space access","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2016.json"},{"CVE":"CVE-2013-1922","severity":"moderate","public_date":"2013-04-15T00:00:00Z","advisories":[],"bugzilla":"923219","bugzilla_description":"CVE-2013-1922 qemu, qemu-kvm, kvm: qemu-nbd block format auto-detection vulnerability","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1922.json"},{"CVE":"CVE-2012-6075","severity":"important","public_date":"2012-12-16T00:00:00Z","advisories":["RHSA-2013:0639","RHSA-2013:0609","RHSA-2013:0608","RHSA-2013:0636","RHSA-2013:0599","RHSA-2013:0610"],"bugzilla":"889301","bugzilla_description":"CVE-2012-6075 qemu: e1000 driver buffer overflow when processing large packets when SBP and LPE flags are disabled","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130306.2.el6_4","qemu-kvm-rhev-2:0.12.1.2-2.355.el6_4.2","xen-0:3.0.3-142.el5_9.2","qemu-kvm-2:0.12.1.2-2.355.el6_4.2","kvm-0:83-262.el5_9.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6075.json"},{"CVE":"CVE-2012-3515","severity":"important","public_date":"2012-09-05T00:00:00Z","advisories":["RHSA-2012:1262","RHSA-2012:1234","RHSA-2012:1233","RHSA-2012:1236","RHSA-2012:1235","RHSA-2012:1325"],"bugzilla":"851252","bugzilla_description":"CVE-2012-3515 qemu: VT100 emulation vulnerability","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-839->CWE-119","affected_packages":["rhev-hypervisor6-0:6.3-20120926.0.el6_3","kvm-0:83-249.el5_8.5","qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2","xen-0:3.0.3-135.el5_8.5","qemu-kvm-2:0.12.1.2-2.295.el6_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3515.json"},{"CVE":"CVE-2012-2652","severity":"moderate","public_date":"2012-05-28T00:00:00Z","advisories":[],"bugzilla":"824919","bugzilla_description":"CVE-2012-2652 qemu: vulnerable to temporary file symlink attacks","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2652.json"},{"CVE":"CVE-2012-0029","severity":"important","public_date":"2012-01-23T00:00:00Z","advisories":["RHSA-2012:0109","RHSA-2012:0050","RHSA-2012:0051","RHSA-2012:0370","RHSA-2012:0168"],"bugzilla":"772075","bugzilla_description":"CVE-2012-0029 qemu: e1000: process_tx_desc legacy mode packets heap overflow","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["kvm-0:83-239.el5_7.1","qemu-kvm-2:0.12.1.2-2.209.el6_2.4","xen-0:3.0.3-135.el5_8.2","rhev-hypervisor6-0:6.2-20120209.0.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0029.json"},{"CVE":"CVE-2011-4111","severity":"important","public_date":"2011-11-28T00:00:00Z","advisories":["RHSA-2011:1777","RHSA-2011:1801"],"bugzilla":"751310","bugzilla_description":"CVE-2011-4111 qemu: ccid: buffer overflow in handling of VSC_ATR message","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.209.el6_2.1","qemu-kvm-2:0.12.1.2-2.160.el6_1.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4111.json"},{"CVE":"CVE-2011-3346","severity":"moderate","public_date":"2011-09-07T00:00:00Z","advisories":["RHSA-2011:1401"],"bugzilla":"736038","bugzilla_description":"CVE-2011-3346 qemu: local DoS with SCSI CD-ROM","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["xen-0:3.0.3-132.el5_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3346.json"},{"CVE":"CVE-2011-2527","severity":"moderate","public_date":"2011-07-09T00:00:00Z","advisories":["RHSA-2011:1531"],"bugzilla":"720773","bugzilla_description":"CVE-2011-2527 qemu: when started as root, extra groups are not dropped correctly","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.209.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2527.json"},{"CVE":"CVE-2011-2212","severity":"important","public_date":"2011-07-05T00:00:00Z","advisories":["RHSA-2011:0919"],"bugzilla":"713589","bugzilla_description":"CVE-2011-2212 qemu-kvm: virtqueue: too-large indirect descriptor buffer overflow","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["qemu-kvm-2:0.12.1.2-2.160.el6_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2212.json"},{"CVE":"CVE-2011-1751","severity":"important","public_date":"2011-05-18T00:00:00Z","advisories":["RHSA-2011:0534"],"bugzilla":"699773","bugzilla_description":"CVE-2011-1751 qemu: acpi_piix4: missing hotplug check during device removal","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-672->CWE-119","affected_packages":["qemu-kvm-2:0.12.1.2-2.160.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1751.json"},{"CVE":"CVE-2011-2512","severity":"important","public_date":"2011-05-08T00:00:00Z","advisories":["RHSA-2011:0919"],"bugzilla":"717399","bugzilla_description":"CVE-2011-2512 qemu-kvm: OOB memory access caused by negative vq notifies","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.160.el6_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2512.json"},{"CVE":"CVE-2011-1750","severity":"important","public_date":"2011-03-30T00:00:00Z","advisories":["RHSA-2011:0534"],"bugzilla":"698906","bugzilla_description":"CVE-2011-1750 virtio-blk: heap buffer overflow caused by unaligned requests","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-228->CWE-122","affected_packages":["qemu-kvm-2:0.12.1.2-2.160.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1750.json"},{"CVE":"CVE-2011-0011","severity":"moderate","public_date":"2011-01-07T00:00:00Z","advisories":["RHSA-2011:0345"],"bugzilla":"668589","bugzilla_description":"CVE-2011-0011 qemu-kvm: Setting VNC password to empty string silently disables all authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.113.el6_0.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0011.json"},{"CVE":"CVE-2010-2784","severity":"important","public_date":"2010-07-28T00:00:00Z","advisories":["RHSA-2010:0627","RHSA-2010:0622"],"bugzilla":"619411","bugzilla_description":"CVE-2010-2784 qemu: insufficient constraints checking in exec.c:subpage_register()","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["kvm-0:83-164.el5_5.21","rhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2784.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qgnomeplatform_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qgnomeplatform_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qgnomeplatform_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qgpgme_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qgpgme_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qgpgme_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qhull-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qhull-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qhull-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qpdf-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qpdf-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qpdf-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qpdf-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qpdf-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qpdf-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qpdf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qpdf_security_api_results.json
new file mode 100644
index 0000000..3f7419b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qpdf_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-18020","severity":"low","public_date":"2018-10-06T00:00:00Z","advisories":[],"bugzilla":"1646389","bugzilla_description":"CVE-2018-18020 qpdf: recursive calls can lead to a DoS in libqpdf/QPDFWriter.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18020.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9918","severity":"low","public_date":"2018-04-10T00:00:00Z","advisories":[],"bugzilla":"1566756","bugzilla_description":"CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary classes in libqpdf.a","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9918.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18185","severity":"low","public_date":"2017-08-27T00:00:00Z","advisories":[],"bugzilla":"1545283","bugzilla_description":"CVE-2017-18185 qpdf: large heap-based out-of-bounds read in the Pl_Buffer::write function in Pl_Buffer.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18185.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18186","severity":"low","public_date":"2017-08-24T00:00:00Z","advisories":[],"bugzilla":"1545288","bugzilla_description":"CVE-2017-18186 qpdf: infinite loop due to looping xref tables in QPDF.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18186.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18184","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1545278","bugzilla_description":"CVE-2017-18184 qpdf: out-of-bounds read in iterate_rc4 in QPDF_encryption.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18184.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12595","severity":"low","public_date":"2017-08-22T00:00:00Z","advisories":[],"bugzilla":"1485847","bugzilla_description":"CVE-2017-12595 qpdf: Stack overflow when processing deeply nested arrays and dictionaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12595.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18183","severity":"low","public_date":"2017-08-12T00:00:00Z","advisories":[],"bugzilla":"1545272","bugzilla_description":"CVE-2017-18183 qpdf: Infinite Loop in QPDFWriter::enqueueObject in libqpdf/QPDFWriter.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18183.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11624","severity":"low","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1475507","bugzilla_description":"CVE-2017-11624 qpdf: Infinite loop in QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11624.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11625","severity":"low","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1475510","bugzilla_description":"CVE-2017-11625 qpdf: Infinite loop in QPDF::resolveObjectsInStream function in QPDF.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11625.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11626","severity":"low","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1475514","bugzilla_description":"CVE-2017-11626 qpdf: Infinite loop in QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11626.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-11627","severity":"low","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1475517","bugzilla_description":"CVE-2017-11627 qpdf: Infinite loop in PointerHolder function in PointerHolder.hh","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9208","severity":"low","public_date":"2017-05-21T00:00:00Z","advisories":[],"bugzilla":"1454815","bugzilla_description":"CVE-2017-9208 qpdf: Infinite loop related to releaseResolved functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9208.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9209","severity":"low","public_date":"2017-05-21T00:00:00Z","advisories":[],"bugzilla":"1454816","bugzilla_description":"CVE-2017-9209 qpdf: Infinite loop related to QPDFObjectHandle::parseInternal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9209.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9210","severity":"low","public_date":"2017-05-21T00:00:00Z","advisories":[],"bugzilla":"1454819","bugzilla_description":"CVE-2017-9210 qpdf: Infinite loop related to unparse functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9210.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-9252","severity":"low","public_date":"2015-09-02T00:00:00Z","advisories":[],"bugzilla":"1545268","bugzilla_description":"CVE-2015-9252 qpdf: Infinite loop in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9252.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qperf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qperf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qperf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qrencode-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qrencode-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qrencode-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qrencode-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qrencode-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qrencode-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qrencode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qrencode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qrencode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-assistant_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-assistant_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-assistant_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-designer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-designer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-designer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-doctools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-doctools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-doctools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-linguist_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-linguist_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-linguist_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qdbusviewer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qdbusviewer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qdbusviewer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qt3d-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qt3d-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qt3d-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qt3d-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qt3d-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qt3d-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qt3d_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qt3d_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qt3d_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-odbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-odbc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-odbc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-postgresql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-postgresql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-postgresql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-private-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-private-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-private-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase_security_api_results.json
new file mode 100644
index 0000000..6e43e74
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtbase_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-17507","severity":"moderate","public_date":"2020-08-12T00:00:00Z","advisories":[],"bugzilla":"1868532","bugzilla_description":"CVE-2020-17507 qt: buffer over-read in read_xbm_body in gui/image/qxbmhandler.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17507.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-13962","severity":"moderate","public_date":"2020-06-09T00:00:00Z","advisories":[],"bugzilla":"1849734","bugzilla_description":"CVE-2020-13962 qt5: incorrectly calls SSL_shutdown() in OpenSSL mid-handshake causing denial of service in TLS applications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13962.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-0569","severity":"moderate","public_date":"2020-02-07T00:00:00Z","advisories":["RHSA-2020:4025"],"bugzilla":"1800600","bugzilla_description":"CVE-2020-0569 qt: files placed by attacker can influence the working directory and lead to malicious code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":["qt5-qtbase-0:5.9.7-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0569.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2020-0570","severity":"moderate","public_date":"2020-02-07T00:00:00Z","advisories":["RHSA-2020:4025"],"bugzilla":"1800604","bugzilla_description":"CVE-2020-0570 qt: files placed by attacker can influence the working directory and lead to malicious code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-73","affected_packages":["qt5-qtbase-0:5.9.7-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-0570.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2019-18281","severity":"low","public_date":"2019-10-23T00:00:00Z","advisories":[],"bugzilla":"1764742","bugzilla_description":"CVE-2019-18281 qt5-qtbase: Out-of-bounds access in generateDirectionalRuns() function in qtextengine.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18281.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-19870","severity":"low","public_date":"2018-12-06T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2019:3390"],"bugzilla":"1658996","bugzilla_description":"CVE-2018-19870 qt5-qtbase: QImage allocation failure in qgifhandler","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["qt-1:4.8.7-8.el7","qt5-qtbase-0:5.9.7-2.el7","qt5-qtbase-0:5.11.1-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19873","severity":"low","public_date":"2018-12-06T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2019:3390"],"bugzilla":"1658998","bugzilla_description":"CVE-2018-19873 qt5-qtbase: QBmpHandler segmentation fault on malformed BMP file","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["qt-1:4.8.7-8.el7","qt5-qtbase-0:5.9.7-2.el7","qt5-qtbase-0:5.11.1-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19873.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-15518","severity":"moderate","public_date":"2018-08-13T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2019:3390"],"bugzilla":"1659000","bugzilla_description":"CVE-2018-15518 qt5-qtbase: Double free in QXmlStreamReader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["qt-1:4.8.7-8.el7","qt5-qtbase-0:5.9.7-2.el7","qt5-qtbase-0:5.11.1-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15518.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10040","severity":"low","public_date":"2016-12-24T00:00:00Z","advisories":[],"bugzilla":"1409597","bugzilla_description":"CVE-2016-10040 qt: stack overflow in QXmlSimpleReader","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtcanvas3d-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtcanvas3d-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtcanvas3d-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtcanvas3d_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtcanvas3d_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtcanvas3d_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtconnectivity-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtconnectivity-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtconnectivity-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtconnectivity-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtconnectivity-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtconnectivity-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtconnectivity_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtconnectivity_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtconnectivity_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdeclarative_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtdoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtgraphicaleffects_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtgraphicaleffects_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtgraphicaleffects_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtimageformats_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtimageformats_security_api_results.json
new file mode 100644
index 0000000..5597f58
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtimageformats_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19871","severity":"low","public_date":"2018-08-24T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2020:1665"],"bugzilla":"1661465","bugzilla_description":"CVE-2018-19871 qt5-qtimageformats: QTgaFile CPU exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["qt-1:4.8.7-8.el7","qt5-qtimageformats-0:5.12.5-1.el8","qt5-qtimageformats-0:5.9.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19871.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtlocation-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtlocation-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtlocation-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtlocation-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtlocation-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtlocation-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtlocation_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtlocation_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtlocation_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtmultimedia-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtmultimedia-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtmultimedia-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtmultimedia-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtmultimedia-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtmultimedia-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtmultimedia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtmultimedia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtmultimedia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols2-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols2-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols2-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtquickcontrols_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtscript-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtscript-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtscript-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtscript-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtscript-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtscript-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtscript_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtscript_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtscript_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsensors-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsensors-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsensors-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsensors-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsensors-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsensors-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsensors_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsensors_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsensors_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialbus-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialbus-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialbus-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialbus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialbus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialport-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialport-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialport-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialport-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialport-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialport-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialport_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialport_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtserialport_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsvg-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsvg-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsvg-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsvg-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsvg-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsvg-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsvg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsvg_security_api_results.json
new file mode 100644
index 0000000..01df515
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtsvg_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19869","severity":"low","public_date":"2018-07-30T00:00:00Z","advisories":["RHSA-2019:2135","RHSA-2020:1172","RHSA-2020:1665"],"bugzilla":"1661460","bugzilla_description":"CVE-2018-19869 qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["qt-1:4.8.7-8.el7","qt5-qtsvg-0:5.12.5-1.el8","qt5-qtsvg-0:5.9.7-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19869.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-libs-designer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-libs-designer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-libs-designer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-libs-designercomponents_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-libs-designercomponents_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-libs-designercomponents_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-libs-help_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-libs-help_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-libs-help_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttranslations_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttranslations_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qttranslations_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwayland-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwayland-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwayland-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwayland-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwayland-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwayland-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwayland_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwayland_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwayland_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebchannel-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebchannel-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebchannel-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebchannel-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebchannel-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebchannel-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebchannel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebchannel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebchannel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebsockets-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebsockets-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebsockets-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebsockets-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebsockets-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebsockets-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebsockets_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebsockets_security_api_results.json
new file mode 100644
index 0000000..19d2f5f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtwebsockets_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-21035","severity":"moderate","public_date":"2018-09-23T00:00:00Z","advisories":[],"bugzilla":"1810964","bugzilla_description":"CVE-2018-21035 qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages therefore attacker can cause DOS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-21035.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtx11extras-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtx11extras-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtx11extras-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtx11extras_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtx11extras_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtx11extras_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtxmlpatterns-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtxmlpatterns-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtxmlpatterns-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtxmlpatterns-examples_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtxmlpatterns-examples_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtxmlpatterns-examples_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtxmlpatterns_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtxmlpatterns_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-qtxmlpatterns_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-rpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-rpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-rpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-srpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-srpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/qt5-srpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-nld_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-nld_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-nld_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-nls_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-nls_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-nls_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-rpc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-rpc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-rpc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-warnquota_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-warnquota_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota-warnquota_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota_security_api_results.json
new file mode 100644
index 0000000..96541a2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/quota_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3417","severity":"low","public_date":"2009-04-22T00:00:00Z","advisories":["RHSA-2013:0120"],"bugzilla":"566717","bugzilla_description":"CVE-2012-3417 quota: incorrect use of tcp_wrappers","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["quota-1:3.13-8.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3417.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/radvd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/radvd_security_api_results.json
new file mode 100644
index 0000000..bde65fb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/radvd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-3601","severity":"low","public_date":"2011-10-04T00:00:00Z","advisories":[],"bugzilla":"743748","bugzilla_description":"CVE-2011-3601 radvd: privilege escalation flaw in process_ra()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3601.json"},{"CVE":"CVE-2011-3602","severity":"low","public_date":"2011-10-04T00:00:00Z","advisories":[],"bugzilla":"743749","bugzilla_description":"CVE-2011-3602 radvd: arbitrary file overwrite flaw in set_interface_var()","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3602.json"},{"CVE":"CVE-2011-3603","severity":"moderate","public_date":"2011-10-04T00:00:00Z","advisories":[],"bugzilla":"743752","bugzilla_description":"CVE-2011-3603 radvd: daemon would not fail on privsep_init() causing it to run with full root privileges","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3603.json"},{"CVE":"CVE-2011-3604","severity":"moderate","public_date":"2011-10-04T00:00:00Z","advisories":[],"bugzilla":"743756","bugzilla_description":"CVE-2011-3604 radvd: numerous buffer overread flaws in process_ra() may lead to crash","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3604.json"},{"CVE":"CVE-2011-3605","severity":"low","public_date":"2011-10-04T00:00:00Z","advisories":[],"bugzilla":"743758","bugzilla_description":"CVE-2011-3605 radvd: temporary denial of service flaw in process_rs()","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3605.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/raptor2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/raptor2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/raptor2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/raptor2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/raptor2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/raptor2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rarian-compat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rarian-compat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rarian-compat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rarian_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rarian_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rarian_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rasdaemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rasdaemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rasdaemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rasqal-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rasqal-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rasqal-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rasqal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rasqal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rasqal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rdma-core-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rdma-core-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rdma-core-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rdma-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rdma-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rdma-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/re2c_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/re2c_security_api_results.json
new file mode 100644
index 0000000..d4d4ef7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/re2c_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-11958","severity":"moderate","public_date":"2020-04-17T00:00:00Z","advisories":[],"bugzilla":"1826946","bugzilla_description":"CVE-2020-11958 re2c: heap-based buffer overflow in Scanner::fill in parse/scanner.cc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11958.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2018-21232","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":[],"bugzilla":"1837650","bugzilla_description":"CVE-2018-21232 re2c: uncontrolled recursion that causes stack consumption in find_fixed_tags","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-21232.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/readline-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/readline-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/readline-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/readline_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/readline_security_api_results.json
new file mode 100644
index 0000000..67bbc12
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/readline_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-7091","severity":"low","public_date":"2016-05-24T00:00:00Z","advisories":["RHSA-2016:2593"],"bugzilla":"1339935","bugzilla_description":"CVE-2016-7091 sudo: Possible info leak via INPUTRC","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["sudo-0:1.8.6p7-20.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7091.json"},{"CVE":"CVE-2014-2524","severity":"low","public_date":"2014-03-14T00:00:00Z","advisories":[],"bugzilla":"1077023","bugzilla_description":"CVE-2014-2524 readline: insecure temporary file use in _rl_tropen()","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2524.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/readonly-root_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/readonly-root_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/readonly-root_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/realmd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/realmd_security_api_results.json
new file mode 100644
index 0000000..eb671b7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/realmd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-2704","severity":"moderate","public_date":"2015-02-18T00:00:00Z","advisories":["RHSA-2015:2184"],"bugzilla":"1205752","bugzilla_description":"CVE-2015-2704 realmd: untrusted data is used when configuring sssd.conf and/or smb.conf","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-345","affected_packages":["realmd-0:0.16.1-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2704.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rear_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rear_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rear_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/recode-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/recode-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/recode-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/recode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/recode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/recode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redfish-finder_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redfish-finder_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redfish-finder_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-backgrounds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-backgrounds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-backgrounds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-indexhtml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-indexhtml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-indexhtml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-logos-httpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-logos-httpd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-logos-httpd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-logos-ipa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-logos-ipa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-logos-ipa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-logos_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-logos_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-logos_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-cxx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-cxx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-cxx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-desktop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-desktop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-desktop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-languages_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-languages_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-languages_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-printing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-printing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-printing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-submod-multimedia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-submod-multimedia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-submod-multimedia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-submod-security_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-submod-security_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb-submod-security_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-lsb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-menus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-menus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-menus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-release-eula_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-release-eula_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-release-eula_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-release_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-release_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-release_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-rpm-config_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-rpm-config_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-rpm-config_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-support-lib-python_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-support-lib-python_security_api_results.json
new file mode 100644
index 0000000..ed88128
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-support-lib-python_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-1752","severity":"moderate","public_date":"2012-09-25T00:00:00Z","advisories":["RHSA-2015:2101","RHSA-2015:1330","RHSA-2015:1064"],"bugzilla":"1046174","bugzilla_description":"CVE-2013-1752 python: multiple unbound readline() DoS flaws in python stdlib","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["python-0:2.7.5-34.el7","python-0:2.6.6-64.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1752.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-support-tool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-support-tool_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redhat-support-tool_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redis-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redis-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redis-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redis-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redis-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redis-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redis_security_api_results.json
new file mode 100644
index 0000000..cefd354
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redis_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14147","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1848539","bugzilla_description":"CVE-2020-14147 redis: integer overflow in the getnum function in lua_struct.c could lead to a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14147.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2019-10192","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:2630","RHSA-2019:1860","RHSA-2019:2002","RHSA-2019:1819","RHSA-2019:2621","RHSA-2019:2506","RHSA-2019:2508","RHSA-2019:2628"],"bugzilla":"1723918","bugzilla_description":"CVE-2019-10192 redis: Heap buffer overflow in HyperLogLog triggered by malicious client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redis-0:3.2.8-4.el7ost","redis-0:3.0.6-5.el7ost","rh-redis32-redis-0:3.2.13-1.el7","rh-redis32-redis-0:3.2.13-1.el6","redis:5-8000020190711140130.f8e95b4e","rh-redis5-redis-0:5.0.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10192.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-10193","severity":"important","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:2002","RHSA-2019:1819"],"bugzilla":"1727668","bugzilla_description":"CVE-2019-10193 redis: Stack buffer overflow in HyperLogLog triggered by malicious client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["redis:5-8000020190711140130.f8e95b4e","rh-redis5-redis-0:5.0.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2018-11219","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1860","RHSA-2019:0052","RHSA-2019:0094"],"bugzilla":"1590062","bugzilla_description":"CVE-2018-11219 redis: Integer overflow in lua_struct.c:b_unpack()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["redis-0:3.2.8-3.el7ost","redis-0:3.0.6-4.el7ost","rh-redis32-redis-0:3.2.13-1.el7","rh-redis32-redis-0:3.2.13-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11219.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-11218","severity":"moderate","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1860","RHSA-2019:0052","RHSA-2019:0094"],"bugzilla":"1590067","bugzilla_description":"CVE-2018-11218 redis: Heap corruption in lua_cmsgpack.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["redis-0:3.2.8-3.el7ost","redis-0:3.0.6-4.el7ost","rh-redis32-redis-0:3.2.13-1.el7","rh-redis32-redis-0:3.2.13-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11218.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-12326","severity":"low","public_date":"2018-06-13T00:00:00Z","advisories":["RHSA-2019:1860","RHSA-2019:0052","RHSA-2019:0094"],"bugzilla":"1594291","bugzilla_description":"CVE-2018-12326 redis: Code execution in redis-cli via crafted command line arguments","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["redis-0:3.2.8-3.el7ost","redis-0:3.0.6-4.el7ost","rh-redis32-redis-0:3.2.13-1.el7","rh-redis32-redis-0:3.2.13-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12326.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-12453","severity":"moderate","public_date":"2018-06-10T00:00:00Z","advisories":[],"bugzilla":"1592892","bugzilla_description":"CVE-2018-12453 redis: type confusion in the xgroupCommand function in t_stream.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12453.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-3728","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:1264","RHSA-2018:1263"],"bugzilla":"1545893","bugzilla_description":"CVE-2018-3728 hoek: Prototype pollution in utilities function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rhmap46/redis:2.8.21-40"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3728.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2017-15047","severity":"low","public_date":"2017-08-31T00:00:00Z","advisories":[],"bugzilla":"1499152","bugzilla_description":"CVE-2017-15047 redis: Insufficient input validation in the clusterLoadConfig function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15047.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-2121","severity":"low","public_date":"2016-11-01T00:00:00Z","advisories":["RHSA-2017:3226"],"bugzilla":"1390588","bugzilla_description":"CVE-2016-2121 redis: weak permissions on sensitive files","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["redis-0:3.0.6-2.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2121.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2016-8339","severity":"moderate","public_date":"2016-09-30T00:00:00Z","advisories":[],"bugzilla":"1381244","bugzilla_description":"CVE-2016-8339 redis: OOB write vulnerability in handling of client-output-buffer-limit option during the CONFIG SET command","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8339.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2016-10517","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":[],"bugzilla":"1515245","bugzilla_description":"CVE-2016-10517 redis: cross-protocol attack using malicious HTTP request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10517.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2013-7458","severity":"low","public_date":"2016-07-28T00:00:00Z","advisories":[],"bugzilla":"1363670","bugzilla_description":"CVE-2013-7458 redis: world-readable ~/.rediscli_history","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7458.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2015-8080","severity":"moderate","public_date":"2015-11-06T00:00:00Z","advisories":["RHSA-2016:0095","RHSA-2016:0096","RHSA-2016:0097"],"bugzilla":"1278965","bugzilla_description":"CVE-2015-8080 redis: Integer wraparound in lua_struct.c causing stack-based buffer overflow","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["redis-0:2.8.24-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8080.json"},{"CVE":"CVE-2015-4335","severity":"important","public_date":"2015-06-04T00:00:00Z","advisories":["RHSA-2015:1676"],"bugzilla":"1228327","bugzilla_description":"CVE-2015-4335 redis: Lua sandbox escape and arbitrary code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["redis-0:2.8.21-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4335.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redland-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redland-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redland-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redland_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redland_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/redland_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/regexp-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/regexp-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/regexp-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/regexp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/regexp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/regexp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/relaxngDatatype_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/relaxngDatatype_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/relaxngDatatype_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resource-agents-aliyun_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resource-agents-aliyun_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resource-agents-aliyun_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resource-agents-gcp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resource-agents-gcp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resource-agents-gcp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resource-agents_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resource-agents_security_api_results.json
new file mode 100644
index 0000000..b9a75a3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resource-agents_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2010-3389","severity":"low","public_date":"2010-09-30T00:00:00Z","advisories":["RHSA-2011:1000","RHSA-2011:0264","RHSA-2011:1580"],"bugzilla":"639044","bugzilla_description":"CVE-2010-3389 rgmanager: insecure library loading vulnerability","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rgmanager-0:1.9.88-2.el4","rgmanager-0:2.0.52-21.el5","resource-agents-0:3.9.2-7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3389.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rest_security_api_results.json
new file mode 100644
index 0000000..4e563ed
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rest_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13956","severity":"moderate","public_date":"2020-10-08T00:00:00Z","advisories":[],"bugzilla":"1886587","bugzilla_description":"CVE-2020-13956 apache-httpclient: incorrect handling of malformed authority component in request URIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13956.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-24750","severity":"important","public_date":"2020-09-18T00:00:00Z","advisories":["RHSA-2020:4173"],"bugzilla":"1882310","bugzilla_description":"CVE-2020-24750 jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-25633","severity":"moderate","public_date":"2020-09-04T00:00:00Z","advisories":[],"bugzilla":"1879042","bugzilla_description":"CVE-2020-25633 resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25633.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-10746","severity":"important","public_date":"2020-09-03T00:00:00Z","advisories":["RHSA-2020:3626"],"bugzilla":"1835922","bugzilla_description":"CVE-2020-10746 Infinispan: REST and HotRod APIs unsecured locally by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10746.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2020-8911","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869800","bugzilla_description":"CVE-2020-8911 aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8911.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2020-8912","severity":"low","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1869801","bugzilla_description":"CVE-2020-8912 aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8912.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2020-14326","severity":"important","public_date":"2020-07-09T00:00:00Z","advisories":["RHSA-2020:3248"],"bugzilla":"1855826","bugzilla_description":"CVE-2020-14326 RESTEasy: Caching routes in RootNode may result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-407","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14326.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10771","severity":"moderate","public_date":"2020-06-04T00:00:00Z","advisories":[],"bugzilla":"1846293","bugzilla_description":"CVE-2020-10771 Infinispan: Actions with effects should not be permitted via GET requests using REST API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10771.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2020-8203","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:3807","RHSA-2020:3370"],"bugzilla":"1857412","bugzilla_description":"CVE-2020-8203 nodejs-lodash: prototype pollution in zipObjectDeep function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","distributed-tracing/jaeger-query-rhel7:1.17.6-1","ovirt-web-ui-0:1.6.4-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2020-1695","severity":"moderate","public_date":"2020-04-15T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:2112","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:2905","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHSA-2020:2513"],"bugzilla":"1730462","bugzilla_description":"CVE-2020-1695 resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1695.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-10688","severity":"moderate","public_date":"2020-02-18T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:2333","RHSA-2020:2905","RHSA-2020:3806","RHSA-2020:2515","RHSA-2020:2512","RHSA-2020:2513"],"bugzilla":"1814974","bugzilla_description":"CVE-2020-10688 RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10688.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-19352","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:1942"],"bugzilla":"1793281","bugzilla_description":"CVE-2019-19352 operator-framework/presto: /etc/passwd is given incorrect privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["openshift4/ose-metering-presto:v4.4.0-202004261927"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19352.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-25649","severity":"important","public_date":"2020-01-09T00:00:00Z","advisories":["RHSA-2020:4312"],"bugzilla":"1887664","bugzilla_description":"CVE-2020-25649 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25649.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-15224","severity":"important","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743940","bugzilla_description":"CVE-2019-15224 rubygem-rest-client: code-execution backdoor insterted by third party","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-348","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-16843","severity":"moderate","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2018:3681","RHSA-2018:3680","RHSA-2018:3653"],"bugzilla":"1644511","bugzilla_description":"CVE-2018-16843 nginx: Excessive memory consumption via flaw in HTTP/2 implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nginx110-nginx-1:1.10.2-8.el6.1","rh-nginx110-nginx-1:1.10.2-8.el7.1","rh-nginx112-nginx-1:1.12.1-2.el7.1","rh-nginx114-nginx-1:1.14.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16487","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":[],"bugzilla":"1671878","bugzilla_description":"CVE-2018-16487 lodash: Prototype pollution in utilities function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16487.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-1051","severity":"moderate","public_date":"2018-01-18T00:00:00Z","advisories":[],"bugzilla":"1535411","bugzilla_description":"CVE-2018-1051 resteasy: Unsafe unmarshalling in YamlProvider allows code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1051.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-12629","severity":"critical","public_date":"2017-10-12T00:00:00Z","advisories":["RHSA-2020:2561","RHSA-2018:0005","RHSA-2018:0002","RHSA-2017:3452","RHSA-2017:3244","RHSA-2017:3123","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:3451","RHSA-2017:3124"],"bugzilla":"1501529","bugzilla_description":"CVE-2017-12629 Solr: Code execution via entity expansion","cvss_score":10.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-138","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-lucene-solr-0:5.3.1-4.redhat_2.1.ep7.el6","eap7-lucene-solr-0:5.3.1-4.redhat_2.1.ep7.el7","rh-java-common-lucene5-0:5.4.1-2.4.el7","rh-java-common-lucene5-0:5.4.1-2.4.el6","rh-java-common-lucene-0:4.8.0-6.9.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6","rh-java-common-lucene-0:4.8.0-6.9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-14949","severity":"moderate","public_date":"2017-10-02T00:00:00Z","advisories":[],"bugzilla":"1520471","bugzilla_description":"CVE-2017-14949 restlet: XXE vulnerability in XML extension allows remote attackers to access arbitrary files via a crafted REST API HTTP request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14949.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","cvss3_score":"7.0"},{"CVE":"CVE-2017-14868","severity":"moderate","public_date":"2017-09-27T00:00:00Z","advisories":[],"bugzilla":"1498760","bugzilla_description":"CVE-2017-14868 restlet: XML external entity injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14868.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-7561","severity":"moderate","public_date":"2017-08-22T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2018:0005","RHSA-2018:0478","RHSA-2018:0479","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2018:0481"],"bugzilla":"1483823","bugzilla_description":"CVE-2017-7561 resteasy: Vary header not added by CORS filter leading to cache poisoning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7561.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-7492","severity":"moderate","public_date":"2017-05-08T00:00:00Z","advisories":[],"bugzilla":"1448753","bugzilla_description":"REJECTED CVE-2017-7492 SourceProvider in RestEasy-jaxrs is vulnerable to XXE","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7492.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-2638","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1097"],"bugzilla":"1428564","bugzilla_description":"CVE-2017-2638 infinispan: auth bypass in REST api","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2638.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-9606","severity":"moderate","public_date":"2016-12-15T00:00:00Z","advisories":["RHSA-2018:2913","RHSA-2017:1260","RHSA-2017:1253","RHSA-2018:2909","RHSA-2017:1255","RHSA-2017:1254","RHSA-2017:1675","RHSA-2017:1411","RHSA-2017:1256","RHSA-2017:1410","RHSA-2017:1676","RHSA-2017:1412","RHSA-2017:1409"],"bugzilla":"1400644","bugzilla_description":"CVE-2016-9606 Resteasy: Yaml unmarshalling vulnerable to RCE","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["resteasy-0:2.3.19-1.Final_redhat_1.1.ep6.el5","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","jboss-ec2-eap-0:7.5.15-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-7050","severity":"important","public_date":"2016-09-23T00:00:00Z","advisories":["RHSA-2016:2604"],"bugzilla":"1378613","bugzilla_description":"CVE-2016-7050 RESTEasy:SerializableProvider enabled by default and deserializes untrusted data","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["resteasy-base-0:3.0.6-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7050.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2016-6345","severity":"low","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372117","bugzilla_description":"CVE-2016-6345 RESTEasy: Insufficient use of random values in RESTEasy async jobs could lead to loss of data confidentiality","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-6346","severity":"moderate","public_date":"2016-09-01T00:00:00Z","advisories":["RHSA-2019:1222","RHSA-2018:0005","RHSA-2017:1675","RHSA-2017:1676","RHSA-2017:0517","RHSA-2017:0827","RHSA-2018:0002","RHSA-2017:0826","RHSA-2017:0829","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:0828","RHSA-2018:2143"],"bugzilla":"1372120","bugzilla_description":"CVE-2016-6346 RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6347","severity":"moderate","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372124","bugzilla_description":"CVE-2016-6347 RESTEasy: Use of the default exception handler in RESTEasy can lead to reflected XSS attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-6348","severity":"low","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372129","bugzilla_description":"CVE-2016-6348 RESTEasy: Use of JacksonJsonpInterceptor in RESTEasy can lead to Cross Site Script Inclusion attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2015-1820","severity":"moderate","public_date":"2015-03-24T00:00:00Z","advisories":[],"bugzilla":"1205291","bugzilla_description":"CVE-2015-1820 rubygem-rest-client: session fixation vulnerability Set-Cookie headers present in an HTTP 30x redirection responses","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1820.json"},{"CVE":"CVE-2015-3448","severity":"low","public_date":"2015-01-12T00:00:00Z","advisories":[],"bugzilla":"1240982","bugzilla_description":"CVE-2015-3448 rubygem-rest-client: unsanitized application logging","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3448.json"},{"CVE":"CVE-2014-7839","severity":"moderate","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2015:0218","RHSA-2015:0217","RHSA-2015:1009","RHSA-2015:0216","RHSA-2015:0215","RHSA-2015:0851","RHSA-2015:0675","RHSA-2015:0850","RHSA-2015:0773"],"bugzilla":"1165328","bugzilla_description":"CVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7839.json"},{"CVE":"CVE-2015-2675","severity":"low","public_date":"2014-09-03T00:00:00Z","advisories":["RHSA-2015:2237"],"bugzilla":"1199049","bugzilla_description":"CVE-2015-2675 rest: memory corruption when using oauth because of implicit declaration of rest_proxy_call_get_url","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-704","affected_packages":["rest-0:0.7.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2675.json"},{"CVE":"CVE-2014-3490","severity":"moderate","public_date":"2014-07-23T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0125","RHSA-2015:0234","RHSA-2014:1039","RHSA-2014:1904","RHSA-2014:1040","RHSA-2014:1298","RHSA-2014:1011"],"bugzilla":"1107901","bugzilla_description":"CVE-2014-3490 RESTEasy: XXE via parameter entities","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-base-0:2.3.5-3.el7_0","resteasy-0:2.3.8-5.SP1_redhat_1.1.ep6.el7","resteasy-0:2.3.8-5.SP1_redhat_1.1.ep6.el5","resteasy-0:2.3.8-5.SP1_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3490.json"},{"CVE":"CVE-2014-1868","severity":"moderate","public_date":"2014-02-09T00:00:00Z","advisories":[],"bugzilla":"1065199","bugzilla_description":"CVE-2014-1868 Restlet: DoS due to XML entity expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1868.json"},{"CVE":"CVE-2013-4271","severity":"important","public_date":"2013-09-07T00:00:00Z","advisories":["RHSA-2013:1410","RHSA-2013:1862"],"bugzilla":"999735","bugzilla_description":"CVE-2013-4271 Restlet: remote code execution due to insecure deserialization","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4271.json"},{"CVE":"CVE-2013-4221","severity":"important","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1410","RHSA-2013:1862"],"bugzilla":"995275","bugzilla_description":"CVE-2013-4221 Restlet: remote code execution due to insecure XML deserialization","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4221.json"},{"CVE":"CVE-2012-2656","severity":"moderate","public_date":"2012-05-29T00:00:00Z","advisories":[],"bugzilla":"999809","bugzilla_description":"CVE-2012-2656 Restlet: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2656.json"},{"CVE":"CVE-2011-5245","severity":"moderate","public_date":"2011-12-30T00:00:00Z","advisories":["RHSA-2012:0519","RHSA-2012:1056","RHSA-2012:1058","RHSA-2012:0441","RHSA-2012:1057","RHSA-2012:0421","RHSA-2012:1059","RHSA-2012:1125","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"785631","bugzilla_description":"CVE-2011-5245 CVE-2012-0818 RESTEasy: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el4","org.ovirt.engine-root-0:3.0.3_0001-3","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el6","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5245.json"},{"CVE":"CVE-2012-0818","severity":"moderate","public_date":"2011-12-30T00:00:00Z","advisories":["RHSA-2013:1263","RHSA-2012:0519","RHSA-2012:1056","RHSA-2012:1058","RHSA-2012:0441","RHSA-2012:1057","RHSA-2012:0421","RHSA-2012:1059","RHSA-2012:1125","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"785631","bugzilla_description":"CVE-2011-5245 CVE-2012-0818 RESTEasy: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el4","org.ovirt.engine-root-0:3.0.3_0001-3","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el6","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0818.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resteasy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resteasy_security_api_results.json
new file mode 100644
index 0000000..36858fa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/resteasy_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-25633","severity":"moderate","public_date":"2020-09-04T00:00:00Z","advisories":[],"bugzilla":"1879042","bugzilla_description":"CVE-2020-25633 resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25633.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-14326","severity":"important","public_date":"2020-07-09T00:00:00Z","advisories":["RHSA-2020:3248"],"bugzilla":"1855826","bugzilla_description":"CVE-2020-14326 RESTEasy: Caching routes in RootNode may result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-407","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14326.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1695","severity":"moderate","public_date":"2020-04-15T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:2112","RHSA-2020:3642","RHSA-2020:2333","RHSA-2020:2905","RHSA-2020:3638","RHSA-2020:3639","RHSA-2020:3779","RHSA-2020:2515","RHSA-2020:3637","RHSA-2020:2512","RHSA-2020:2513"],"bugzilla":"1730462","bugzilla_description":"CVE-2020-1695 resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1695.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-10688","severity":"moderate","public_date":"2020-02-18T00:00:00Z","advisories":["RHSA-2020:2511","RHSA-2020:2333","RHSA-2020:2905","RHSA-2020:3806","RHSA-2020:2515","RHSA-2020:2512","RHSA-2020:2513"],"bugzilla":"1814974","bugzilla_description":"CVE-2020-10688 RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10688.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-1051","severity":"moderate","public_date":"2018-01-18T00:00:00Z","advisories":[],"bugzilla":"1535411","bugzilla_description":"CVE-2018-1051 resteasy: Unsafe unmarshalling in YamlProvider allows code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1051.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-7561","severity":"moderate","public_date":"2017-08-22T00:00:00Z","advisories":["RHSA-2018:0480","RHSA-2018:0005","RHSA-2018:0478","RHSA-2018:0479","RHSA-2018:0002","RHSA-2018:0004","RHSA-2018:0003","RHSA-2018:0481"],"bugzilla":"1483823","bugzilla_description":"CVE-2017-7561 resteasy: Vary header not added by CORS filter leading to cache poisoning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el7","eap7-jboss-ec2-eap-0:7.1.1-3.1.GA_redhat_3.ep7.el6","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7561.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-9606","severity":"moderate","public_date":"2016-12-15T00:00:00Z","advisories":["RHSA-2018:2913","RHSA-2017:1260","RHSA-2017:1253","RHSA-2018:2909","RHSA-2017:1255","RHSA-2017:1254","RHSA-2017:1675","RHSA-2017:1411","RHSA-2017:1256","RHSA-2017:1410","RHSA-2017:1676","RHSA-2017:1412","RHSA-2017:1409"],"bugzilla":"1400644","bugzilla_description":"CVE-2016-9606 Resteasy: Yaml unmarshalling vulnerable to RCE","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["resteasy-0:2.3.19-1.Final_redhat_1.1.ep6.el5","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el7","eap7-jboss-ec2-eap-0:7.0.6-1.GA_redhat_1.ep7.el6","jboss-ec2-eap-0:7.5.15-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9606.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-7050","severity":"important","public_date":"2016-09-23T00:00:00Z","advisories":["RHSA-2016:2604"],"bugzilla":"1378613","bugzilla_description":"CVE-2016-7050 RESTEasy:SerializableProvider enabled by default and deserializes untrusted data","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["resteasy-base-0:3.0.6-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7050.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2016-6345","severity":"low","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372117","bugzilla_description":"CVE-2016-6345 RESTEasy: Insufficient use of random values in RESTEasy async jobs could lead to loss of data confidentiality","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2016-6346","severity":"moderate","public_date":"2016-09-01T00:00:00Z","advisories":["RHSA-2019:1222","RHSA-2018:0005","RHSA-2017:1675","RHSA-2017:1676","RHSA-2017:0517","RHSA-2017:0827","RHSA-2018:0002","RHSA-2017:0826","RHSA-2017:0829","RHSA-2018:0004","RHSA-2018:0003","RHSA-2017:0828","RHSA-2018:2143"],"bugzilla":"1372120","bugzilla_description":"CVE-2016-6346 RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7","eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6","jboss-ec2-eap-0:7.5.14-2.Final_redhat_2.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-6347","severity":"moderate","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372124","bugzilla_description":"CVE-2016-6347 RESTEasy: Use of the default exception handler in RESTEasy can lead to reflected XSS attack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2016-6348","severity":"low","public_date":"2016-09-01T00:00:00Z","advisories":[],"bugzilla":"1372129","bugzilla_description":"CVE-2016-6348 RESTEasy: Use of JacksonJsonpInterceptor in RESTEasy can lead to Cross Site Script Inclusion attack","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2014-7839","severity":"moderate","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2015:0218","RHSA-2015:0217","RHSA-2015:1009","RHSA-2015:0216","RHSA-2015:0215","RHSA-2015:0851","RHSA-2015:0675","RHSA-2015:0850","RHSA-2015:0773"],"bugzilla":"1165328","bugzilla_description":"CVE-2014-7839 RESTeasy: External entities expanded by DocumentProvider","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:2.3.8-13.SP4_redhat_2.1.ep6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7839.json"},{"CVE":"CVE-2014-3490","severity":"moderate","public_date":"2014-07-23T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0125","RHSA-2015:0234","RHSA-2014:1039","RHSA-2014:1904","RHSA-2014:1040","RHSA-2014:1298","RHSA-2014:1011"],"bugzilla":"1107901","bugzilla_description":"CVE-2014-3490 RESTEasy: XXE via parameter entities","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-base-0:2.3.5-3.el7_0","resteasy-0:2.3.8-5.SP1_redhat_1.1.ep6.el7","resteasy-0:2.3.8-5.SP1_redhat_1.1.ep6.el5","resteasy-0:2.3.8-5.SP1_redhat_1.1.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3490.json"},{"CVE":"CVE-2011-5245","severity":"moderate","public_date":"2011-12-30T00:00:00Z","advisories":["RHSA-2012:0519","RHSA-2012:1056","RHSA-2012:1058","RHSA-2012:0441","RHSA-2012:1057","RHSA-2012:0421","RHSA-2012:1059","RHSA-2012:1125","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"785631","bugzilla_description":"CVE-2011-5245 CVE-2012-0818 RESTEasy: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el4","org.ovirt.engine-root-0:3.0.3_0001-3","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el6","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5245.json"},{"CVE":"CVE-2012-0818","severity":"moderate","public_date":"2011-12-30T00:00:00Z","advisories":["RHSA-2013:1263","RHSA-2012:0519","RHSA-2012:1056","RHSA-2012:1058","RHSA-2012:0441","RHSA-2012:1057","RHSA-2012:0421","RHSA-2012:1059","RHSA-2012:1125","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"785631","bugzilla_description":"CVE-2011-5245 CVE-2012-0818 RESTEasy: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el4","org.ovirt.engine-root-0:3.0.3_0001-3","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el6","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0818.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhel-system-roles_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhel-system-roles_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhel-system-roles_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-check_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-check_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-check_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-client-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-client-tools_security_api_results.json
new file mode 100644
index 0000000..d2d5fe3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-client-tools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-1777","severity":"moderate","public_date":"2015-03-04T00:00:00Z","advisories":[],"bugzilla":"1198740","bugzilla_description":"CVE-2015-1777 rhn-setup: rhnreg_ks fails to properly validate SSL/TLS certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1777.json"},{"CVE":"CVE-2010-1439","severity":"moderate","public_date":"2010-06-01T00:00:00Z","advisories":["RHSA-2010:0449"],"bugzilla":"585386","bugzilla_description":"CVE-2010-1439 rhn-client-tools: authorized information disclosure","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rhn-client-tools-0:0.4.20-33.el5_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1439.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-custom-info_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-custom-info_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-custom-info_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-setup-gnome_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-setup-gnome_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-setup-gnome_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-setup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-setup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-setup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-virtualization-host_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-virtualization-host_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhn-virtualization-host_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg-actions_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg-actions_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg-actions_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg-management_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg-management_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg-management_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg_security_api_results.json
new file mode 100644
index 0000000..63b86ac
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhncfg_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-2679","severity":"moderate","public_date":"2012-06-14T00:00:00Z","advisories":["RHSA-2012:1369"],"bugzilla":"825275","bugzilla_description":"CVE-2012-2679 rhncfg: Insecure permissions used for /var/log/rhncfg-actions file","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["rhncfg-0:5.10.27-8.el6sat","rhncfg-0:5.10.27-8.el5sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2679.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhnlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhnlib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhnlib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhnpush_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhnpush_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhnpush_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhnsd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhnsd_security_api_results.json
new file mode 100644
index 0000000..554aa42
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhnsd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-7560","severity":"low","public_date":"2017-08-22T00:00:00Z","advisories":[],"bugzilla":"1480550","bugzilla_description":"CVE-2017-7560 rhnsd: World-writable PID files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7560.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhsm-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhsm-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhsm-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhsm-icons_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhsm-icons_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhsm-icons_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhythmbox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhythmbox_security_api_results.json
new file mode 100644
index 0000000..a269b79
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rhythmbox_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3355","severity":"low","public_date":"2011-03-06T00:00:00Z","advisories":[],"bugzilla":"835076","bugzilla_description":"CVE-2012-3355 rhythmbox (context plug-in): Insecure temporary directory use by loading template files for 'Album', 'Lyrics', and 'Artist' tabs","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3355.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rls_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rls_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rls_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rmt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rmt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rmt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rng-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rng-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rng-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rootfiles_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rootfiles_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rootfiles_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpcbind_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpcbind_security_api_results.json
new file mode 100644
index 0000000..03ff8b1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpcbind_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-8779","severity":"important","public_date":"2017-05-03T00:00:00Z","advisories":["RHSA-2017:1262","RHBA-2017:1497","RHSA-2017:1263","RHSA-2017:1395","RHSA-2017:1268","RHSA-2017:1267"],"bugzilla":"1448124","bugzilla_description":"CVE-2017-8779 rpcbind, libtirpc, libntirpc: Memory leak when failing to parse XDR strings or bytearrays","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rpcbind-0:0.2.0-13.el6_9","libntirpc-0:1.4.3-4.el7rhgs","libtirpc-0:0.2.4-0.8.el7_3","libntirpc-0:1.4.3-2.el7","libntirpc-0:1.4.3-4.el6rhs","libtirpc-0:0.2.1-13.el6_9","rpcbind-0:0.2.0-38.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-7236","severity":"moderate","public_date":"2015-08-06T00:00:00Z","advisories":["RHSA-2016:0005"],"bugzilla":"1264345","bugzilla_description":"CVE-2015-7236 rpcbind: Use-after-free vulnerability in PMAP_CALLIT","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["rpcbind-0:0.2.0-33.el7_2","rpcbind-0:0.2.0-11.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7236.json"},{"CVE":"CVE-2012-3541","severity":"moderate","public_date":"2014-07-08T00:00:00Z","advisories":[],"bugzilla":"852282","bugzilla_description":"CVE-2012-3541 rpcbind: -h fails to control access to rpcbind","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3541.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpcgen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpcgen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpcgen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpcsvc-proto-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpcsvc-proto-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpcsvc-proto-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-apidocs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-apidocs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-apidocs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-build-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-build-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-build-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-build_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-build_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-build_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-cron_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-cron_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-cron_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-mpi-hooks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-mpi-hooks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-mpi-hooks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-ostree-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-ostree-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-ostree-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-ostree_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-ostree_security_api_results.json
new file mode 100644
index 0000000..91e071e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-ostree_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-2623","severity":"moderate","public_date":"2017-03-02T00:00:00Z","advisories":["RHSA-2017:0444"],"bugzilla":"1422157","bugzilla_description":"CVE-2017-2623 rpm-ostree, rpm-ostree-client: fails to check gpg package signatures when layering","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["rpm-ostree-0:2017.1-5.atomic.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-ima_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-ima_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-ima_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-prioreset_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-prioreset_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-prioreset_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-selinux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-selinux_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-selinux_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-syslog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-syslog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-syslog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-systemd-inhibit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-systemd-inhibit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-plugin-systemd-inhibit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-sign_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-sign_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm-sign_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm_security_api_results.json
new file mode 100644
index 0000000..1cb8284
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9512","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735645","bugzilla_description":"CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9514","severity":"important","public_date":"2019-08-13T17:00:00Z","advisories":["RHSA-2019:2861","RHSA-2019:2661","RHSA-2019:2682","RHSA-2019:3892","RHSA-2019:2766","RHSA-2019:4269","RHSA-2019:4020","RHSA-2019:4042","RHSA-2019:4021","RHSA-2019:3131","RHSA-2019:4045","RHSA-2020:1445","RHSA-2019:4040","RHSA-2019:4041","RHSA-2020:0727","RHSA-2019:2726","RHSA-2019:2769","RHSA-2019:2966","RHSA-2019:2925","RHSA-2020:2565","RHSA-2019:4018","RHSA-2019:4019","RHSA-2019:2594","RHSA-2019:3265","RHSA-2020:2067","RHSA-2019:3245","RHSA-2020:3197","RHSA-2019:2796","RHSA-2020:0922","RHSA-2019:4273","RHSA-2019:4352","RHSA-2020:0406","RHSA-2020:0983","RHSA-2019:2690","RHSA-2020:3196","RHSA-2019:3906","RHSA-2019:2955","RHSA-2019:2939","RHSA-2019:2817","RHBA-2019:3139"],"bugzilla":"1735744","bugzilla_description":"CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["go-toolset:rhel8-8000120190828225436.14bc675c","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso","faq-0:0.0.6-4.el7","golang-github-prometheus-prometheus-0:3.11.154-1.git.1.148db48.el7","csi-livenessprobe-0:0.0.1-2.gitff5b6a0.el7","atomic-openshift-service-idler-0:3.11.154-1.git.1.f80fb86.el7","csi-provisioner-0:0.2.0-3.el7","openshift-external-storage-0:0.0.2-7.gitd3c94f0.el7","csi-driver-registrar-0:0.2.0-2.el7","golang-github-prometheus-node_exporter-0:3.11.154-1.git.1.bc9f224.el7","openshift-eventrouter-0:0.2-4.git7c289cc.el7","openshift4/ose-sriov-network-device-plugin:v4.1.18-201909201915","apb-0:2.0.3-2.el7","skydive-0:0.20.5-2.el7ost","csi-attacher-0:0.2.0-4.git27299be.el7","atomic-openshift-0:3.9.101-1.git.0.150f595.el7","ansible-operator-0:0.0.1-3.git.59.4beb3d2.el7","nodejs:10-8000020190911085529.f8e95b4e","openshift-monitor-project-lifecycle-0:3.11.51-2.git.59.7b59e29.el7","atomic-openshift-metrics-server-0:3.11.154-1.git.1.6a6b6ce.el7","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","openshift-external-storage-0:0.0.2-9.gitd3c94f0.el7","heapster-0:1.3.0-4.el7","containernetworking-plugins-0:0.8.1-4.el7","golang-github-prometheus-alertmanager-0:3.11.154-1.git.1.4acd2e6.el7","containernetworking-plugins-0:0.8.1-4.el7_7","atomic-openshift-0:3.10.170-1.git.0.8e592d6.el7","openshift-enterprise-autoheal-0:3.11.154-1.git.1.13199be.el7","openshift-0:4.1.14-201908290858.git.0.3bd3467.el8","cri-tools-0:1.13.0-3.rhaos4.1.gitb69a0b9.el8","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso","atomic-openshift-0:3.11.153-1.git.0.aaf3f71.el7","atomic-openshift-cluster-autoscaler-0:3.11.154-1.git.1.532da7a.el7","cri-o-0:1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8","golang-github-openshift-prometheus-alert-buffer-0:0-3.gitceca8c1.el7","apb-0:1.9.8-1.el7","atomic-openshift-node-problem-detector-0:3.11.154-1.git.1.5e8e065.el7","golang-github-prometheus-promu-0:0.5.0-2.git642a960.el7","openshift-eventrouter-0:0.2-3.gited73fb6.el7","hawkular-openshift-agent-0:1.2.2-3.el7","image-inspector-0:2.4.0-4.el7","atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7","rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso","pivot-0:0.0.5-2.el8","golang-github-openshift-oauth-proxy-0:3.11.154-1.git.1.220e3dc.el7","atomic-openshift-web-console-0:3.11.154-1.git.1.f54cb18.el7","openshift-enterprise-cluster-capacity-0:3.11.154-1.git.1.5798c2c.el7","atomic-openshift-descheduler-0:3.11.154-1.git.1.1d31032.el7","cri-tools-0:1.11.1-2.rhaos3.11.gitedabfb5.el7","cockpit-0:195-2.rhaos.el7","container-tools:1.0-8010020191126173920.c294d161","container-tools:rhel8-8010020191126140055.c294d161","ignition-0:0.32.0-2.git5941fc0.el8","rh-nodejs10-nodejs-0:10.16.3-3.el7","rh-nodejs8-nodejs-0:8.16.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9514.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10360","severity":"low","public_date":"2018-06-09T00:00:00Z","advisories":["RHSA-2020:2521","RHBA-2020:1539","RHSA-2020:1022","RHSA-2020:2838","RHSA-2020:2768","RHBA-2020:1540"],"bugzilla":"1590000","bugzilla_description":"CVE-2018-10360 file: out-of-bounds read via a crafted ELF file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","file-0:5.11-35.el7_6.1","file-0:5.11-35.el7_7.1","file-0:5.11-33.el7_4.1","file-0:5.11-36.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10360.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-1000249","severity":"important","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1488053","bugzilla_description":"CVE-2017-1000249 file: Stack-based buffer overflow in do_bid_note()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000249.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7500","severity":"moderate","public_date":"2017-07-03T00:00:00Z","advisories":[],"bugzilla":"1450369","bugzilla_description":"CVE-2017-7500 rpm: Following symlinks to directories when installing packages allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7500.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2017-7501","severity":"moderate","public_date":"2017-07-03T00:00:00Z","advisories":[],"bugzilla":"1452133","bugzilla_description":"CVE-2017-7501 rpm: Following symlinks to files when installing packages allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7501.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2017-2623","severity":"moderate","public_date":"2017-03-02T00:00:00Z","advisories":["RHSA-2017:0444"],"bugzilla":"1422157","bugzilla_description":"CVE-2017-2623 rpm-ostree, rpm-ostree-client: fails to check gpg package signatures when layering","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["rpm-ostree-0:2017.1-5.atomic.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2015-8865","severity":"low","public_date":"2016-02-23T00:00:00Z","advisories":["RHSA-2016:2750"],"bugzilla":"1323118","bugzilla_description":"CVE-2015-8865 file: Buffer over-write in finfo_open with malformed magic file","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2014-9620","severity":"low","public_date":"2015-01-03T00:00:00Z","advisories":["RHSA-2016:0760"],"bugzilla":"1180639","bugzilla_description":"CVE-2014-9620 file: limit the number of ELF notes processed","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9620.json"},{"CVE":"CVE-2014-9621","severity":"low","public_date":"2015-01-03T00:00:00Z","advisories":[],"bugzilla":"1180642","bugzilla_description":"CVE-2014-9621 file: limit string printing to 100 chars","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9621.json"},{"CVE":"CVE-2014-9653","severity":"low","public_date":"2014-12-16T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2015:2155"],"bugzilla":"1190116","bugzilla_description":"CVE-2014-9653 file: malformed elf file causes access to uninitialized memory","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","file-0:5.04-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9653.json"},{"CVE":"CVE-2013-6435","severity":"important","public_date":"2014-12-09T00:00:00Z","advisories":["RHSA-2014:1976","RHSA-2014:1975","RHSA-2014:1974"],"bugzilla":"1039811","bugzilla_description":"CVE-2013-6435 rpm: race condition during the installation process","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-367","affected_packages":["rpm-0:4.8.0-38.el6_6","rpm-0:4.11.1-18.el7_0","rpm-0:4.4.2.3-36.el5_11","rpm-0:4.4.2.3-34.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6435.json"},{"CVE":"CVE-2014-8118","severity":"important","public_date":"2014-12-09T00:00:00Z","advisories":["RHSA-2014:1976"],"bugzilla":"1168715","bugzilla_description":"CVE-2014-8118 rpm: integer overflow and stack overflow in CPIO header parsing","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-190->CWE-121","affected_packages":["rpm-0:4.11.1-18.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8118.json"},{"CVE":"CVE-2014-9652","severity":"low","public_date":"2014-11-11T00:00:00Z","advisories":["RHSA-2015:2155","RHSA-2015:1135","RHSA-2015:1066","RHSA-2015:1053"],"bugzilla":"1188599","bugzilla_description":"CVE-2014-9652 file: out of bounds read in mconvert()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["file-0:5.11-31.el7","php-0:5.4.16-36.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9652.json"},{"CVE":"CVE-2014-3587","severity":"moderate","public_date":"2014-08-21T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1326","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1128587","bugzilla_description":"CVE-2014-3587 file: incomplete fix for CVE-2012-1571 in cdf_read_property_info","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["php53-0:5.3.3-24.el5","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.1","php-0:5.3.3-27.el6_5.2","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3587.json"},{"CVE":"CVE-2014-0207","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1091842","bugzilla_description":"CVE-2014-0207 file: cdf_read_short_sector insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0207.json"},{"CVE":"CVE-2014-0236","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":[],"bugzilla":"1098209","bugzilla_description":"CVE-2014-0236 file: root_storage NULL pointer deference flaw in CDF parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0236.json"},{"CVE":"CVE-2014-3538","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2016:0760","RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1098222","bugzilla_description":"CVE-2014-3538 file: unrestricted regular expression matching","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","file-0:5.04-30.el6","php-0:5.4.16-23.el7_0.1","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3538.json"},{"CVE":"CVE-2014-3480","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1104858","bugzilla_description":"CVE-2014-3480 file: cdf_count_chain insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3480.json"},{"CVE":"CVE-2014-3478","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1327","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1104863","bugzilla_description":"CVE-2014-3478 file: mconvert incorrect handling of truncated pascal string size","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0.1","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3478.json"},{"CVE":"CVE-2014-3479","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1104869","bugzilla_description":"CVE-2014-3479 file: cdf_check_stream_offset insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3479.json"},{"CVE":"CVE-2014-3487","severity":"moderate","public_date":"2014-06-27T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765"],"bugzilla":"1107544","bugzilla_description":"CVE-2014-3487 file: cdf_read_property_info insufficient boundary check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3487.json"},{"CVE":"CVE-2014-0238","severity":"moderate","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1098155","bugzilla_description":"CVE-2014-0238 file: CDF property info parsing nelements infinite loop","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0238.json"},{"CVE":"CVE-2014-0237","severity":"moderate","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2015:2155","RHSA-2014:1766","RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1098193","bugzilla_description":"CVE-2014-0237 file: cdf_unpack_summary_info() excessive looping DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["file-0:5.04-21.el6","file-0:5.11-31.el7","php55-php-0:5.5.6-13.el6","php-0:5.3.3-27.el6_5.1","php-0:5.4.16-23.el7_0","php55-php-0:5.5.6-13.el7","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0237.json"},{"CVE":"CVE-2014-1943","severity":"moderate","public_date":"2014-02-10T00:00:00Z","advisories":["RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1065836","bugzilla_description":"CVE-2014-1943 file: unrestricted recursion in handling of indirect type rules","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1943.json"},{"CVE":"CVE-2014-2270","severity":"moderate","public_date":"2013-12-20T00:00:00Z","advisories":["RHSA-2014:1765","RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"1072220","bugzilla_description":"CVE-2014-2270 file: out-of-bounds access in search rules with offsets from input file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php54-php-0:5.4.16-22.el7","php53-0:5.3.3-23.el5_10","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2270.json"},{"CVE":"CVE-2014-5461","severity":"moderate","public_date":"2013-04-17T00:00:00Z","advisories":[],"bugzilla":"1132304","bugzilla_description":"CVE-2014-5461 lua: overflow flaw in vararg functions","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5461.json"},{"CVE":"CVE-2012-3500","severity":null,"public_date":"2012-08-31T00:00:00Z","advisories":[],"bugzilla":"848022","bugzilla_description":"CVE-2012-3500 rpmdevtools: TOCTOU race condition in annotate-output","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3500.json"},{"CVE":"CVE-2012-0815","severity":"important","public_date":"2012-04-03T00:00:00Z","advisories":["RHSA-2012:0451"],"bugzilla":"744104","bugzilla_description":"CVE-2012-0815 rpm: incorrect handling of negated offsets in headerVerifyInfo()","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-839->CWE-119","affected_packages":["rpm-0:4.8.0-16.el6_1.2","rpm-0:4.8.0-12.el6_0.2","rpm-0:4.4.2.3-22.el5_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0815.json"},{"CVE":"CVE-2012-0060","severity":"important","public_date":"2012-04-03T00:00:00Z","advisories":["RHSA-2012:0451"],"bugzilla":"744858","bugzilla_description":"CVE-2012-0060 rpm: insufficient validation of region tags","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["rpm-0:4.8.0-16.el6_1.2","rpm-0:4.8.0-12.el6_0.2","rpm-0:4.4.2.3-22.el5_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0060.json"},{"CVE":"CVE-2012-0061","severity":"important","public_date":"2012-04-03T00:00:00Z","advisories":["RHSA-2012:0451"],"bugzilla":"798585","bugzilla_description":"CVE-2012-0061 rpm: improper validation of header contents total size in headerLoad()","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["rpm-0:4.8.0-16.el6_1.2","rpm-0:4.8.0-12.el6_0.2","rpm-0:4.4.2.3-22.el5_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0061.json"},{"CVE":"CVE-2012-1571","severity":"low","public_date":"2012-02-16T00:00:00Z","advisories":["RHSA-2014:1606","RHSA-2014:1012"],"bugzilla":"805197","bugzilla_description":"CVE-2012-1571 file: out of bounds read in CDF parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["file-0:5.04-21.el6","php-0:5.3.3-27.el6_5.1","php53-0:5.3.3-23.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1571.json"},{"CVE":"CVE-2013-7345","severity":"moderate","public_date":"2011-12-31T00:00:00Z","advisories":["RHSA-2014:1013","RHSA-2014:1765"],"bugzilla":"1079846","bugzilla_description":"CVE-2013-7345 file: extensive backtracking in awk rule regular expression","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["php-0:5.4.16-23.el7_0","php54-php-0:5.4.16-22.el7","php54-php-0:5.4.16-22.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7345.json"},{"CVE":"CVE-2011-3378","severity":"important","public_date":"2011-09-27T00:00:00Z","advisories":["RHSA-2011:1349"],"bugzilla":"741606","bugzilla_description":"CVE-2011-3378 rpm: crashes and overflows on malformed header","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["rpm-0:4.8.0-12.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3378.json"},{"CVE":"CVE-2010-2059","severity":"moderate","public_date":"2010-06-01T00:00:00Z","advisories":["RHSA-2010:0679","RHSA-2010:0678"],"bugzilla":"598775","bugzilla_description":"CVE-2010-2059 rpm: fails to drop SUID/SGID bits on package upgrade","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["rpm-0:4.3.3-33_nonptl.el4_8.1","rpm-0:4.4.2.3-20.el5_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2059.json"},{"CVE":"CVE-2005-4889","severity":"moderate","public_date":"2010-06-01T00:00:00Z","advisories":["RHSA-2010:0678"],"bugzilla":"625756","bugzilla_description":"CVE-2005-4889 rpm: fails to drop SUID/SGID bits on package removal","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["rpm-0:4.3.3-33_nonptl.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4889.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpmdevtools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpmdevtools_security_api_results.json
new file mode 100644
index 0000000..69d4e65
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpmdevtools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-3500","severity":null,"public_date":"2012-08-31T00:00:00Z","advisories":[],"bugzilla":"848022","bugzilla_description":"CVE-2012-3500 rpmdevtools: TOCTOU race condition in annotate-output","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3500.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpmemd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpmemd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpmemd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpmlint_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpmlint_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rpmlint_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-lua_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-lua_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-lua_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-perl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-perl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-ruby_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-ruby_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-ruby_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-tcl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-tcl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool-tcl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool_security_api_results.json
new file mode 100644
index 0000000..8996edb
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rrdtool_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-2131","severity":null,"public_date":"2013-04-18T00:00:00Z","advisories":[],"bugzilla":"969296","bugzilla_description":"CVE-2013-2131 rrdtool: crashes on format string exploit","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2131.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsync-daemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsync-daemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsync-daemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsync_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsync_security_api_results.json
new file mode 100644
index 0000000..7318353
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsync_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14387","severity":"important","public_date":"2020-09-03T18:10:00Z","advisories":[],"bugzilla":"1875549","bugzilla_description":"CVE-2020-14387 rsync: rsync-ssl does not verify the hostname in the server certificate when using openssl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14387.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"9.1"},{"CVE":"CVE-2018-5764","severity":"moderate","public_date":"2018-01-17T00:00:00Z","advisories":[],"bugzilla":"1536661","bugzilla_description":"CVE-2018-5764 rsync: sanitization bypass in parse_argument in options.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5764.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-17433","severity":"moderate","public_date":"2017-12-04T00:00:00Z","advisories":[],"bugzilla":"1522874","bugzilla_description":"CVE-2017-17433 rsync: recv_files function metadata handling allows for access restriction bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17433.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-17434","severity":"moderate","public_date":"2017-12-04T00:00:00Z","advisories":[],"bugzilla":"1522875","bugzilla_description":"CVE-2017-17434 rsync: daemon does not check for fnamecmp filenames allowing for access restriction bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17434.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-16548","severity":"moderate","public_date":"2017-10-31T00:00:00Z","advisories":[],"bugzilla":"1511411","bugzilla_description":"CVE-2017-16548 rsync: Heap-based buffer over-read in receive_xattr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-170","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-15994","severity":"moderate","public_date":"2017-10-24T00:00:00Z","advisories":[],"bugzilla":"1515735","bugzilla_description":"CVE-2017-15994 rsync: Mishandles archaic checksums","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15994.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2014-9512","severity":"moderate","public_date":"2015-12-21T00:00:00Z","advisories":[],"bugzilla":"1293854","bugzilla_description":"CVE-2014-9512 rsync: Transferring file outside destination path via just-sent symlink","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9512.json"},{"CVE":"CVE-2014-2855","severity":"moderate","public_date":"2014-04-13T00:00:00Z","advisories":[],"bugzilla":"1087841","bugzilla_description":"CVE-2014-2855 rsync: CPU consumption denial of service when authenticating with a non-existent username","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2855.json"},{"CVE":"CVE-2011-1097","severity":"moderate","public_date":"2011-03-26T00:00:00Z","advisories":["RHSA-2011:0390"],"bugzilla":"675036","bugzilla_description":"CVE-2011-1097 rsync: Incremental file-list corruption due to temporary file_extra_cnt increments","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["rsync-0:3.0.6-5.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1097.json"},{"CVE":"CVE-2007-6200","severity":"moderate","public_date":"2007-11-28T00:00:00Z","advisories":["RHSA-2011:0999"],"bugzilla":"407171","bugzilla_description":"CVE-2007-6200 rsync excluded content access restrictions bypass via symlinks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["rsync-0:3.0.6-4.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6200.json"},{"CVE":"CVE-2004-0792","severity":"moderate","public_date":"2004-08-12T00:00:00Z","advisories":["RHSA-2004:436"],"bugzilla":"1617292","bugzilla_description":"CVE-2004-0792 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rsync-0:2.5.7-5.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0792.json"},{"CVE":"CVE-2004-0426","severity":"important","public_date":"2004-04-26T00:00:00Z","advisories":["RHSA-2004:192"],"bugzilla":"1617206","bugzilla_description":"CVE-2004-0426 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rsync-0:2.5.7-4.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0426.json"},{"CVE":"CVE-2003-0962","severity":"critical","public_date":"2003-12-04T00:00:00Z","advisories":["RHSA-2003:399","RHSA-2003:398"],"bugzilla":"1617105","bugzilla_description":"CVE-2003-0962 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["rsync-0:2.5.7-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0962.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-crypto_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-crypto_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-crypto_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-elasticsearch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-elasticsearch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-elasticsearch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-gnutls_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-gnutls_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-gnutls_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-gssapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-gssapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-gssapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-kafka_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-kafka_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-kafka_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmaudit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmaudit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmaudit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmjsonparse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmjsonparse_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmjsonparse_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmkubernetes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmkubernetes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmkubernetes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmnormalize_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmnormalize_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmnormalize_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmsnmptrapd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmsnmptrapd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mmsnmptrapd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mysql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mysql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-mysql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-pgsql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-pgsql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-pgsql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-relp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-relp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-relp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-snmp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-snmp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog-snmp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog_security_api_results.json
new file mode 100644
index 0000000..926d366
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rsyslog_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17042","severity":"moderate","public_date":"2019-10-01T00:00:00Z","advisories":["RHBA-2020:1539","RHSA-2020:1000","RHSA-2020:1702","RHBA-2020:1540"],"bugzilla":"1766700","bugzilla_description":"CVE-2019-17042 rsyslog: heap-based overflow in contrib/pmcisconames/pmcisconames.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","rsyslog-0:8.24.0-52.el7","rsyslog-0:8.1911.0-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17041","severity":"moderate","public_date":"2019-09-30T00:00:00Z","advisories":["RHBA-2020:1539","RHSA-2020:1000","RHSA-2020:1702","RHBA-2020:1540"],"bugzilla":"1766693","bugzilla_description":"CVE-2019-17041 rsyslog: heap-based overflow in contrib/pmaixforwardedfrom/pmaixforwardedfrom.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","rsyslog-0:8.24.0-52.el7","rsyslog-0:8.1911.0-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17041.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17040","severity":"moderate","public_date":"2019-09-24T00:00:00Z","advisories":[],"bugzilla":"1766641","bugzilla_description":"CVE-2019-17040 rsyslog: out-of-bounds read in contrib/pmdb2diag/pmdb2diag.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-12588","severity":"moderate","public_date":"2017-08-02T00:00:00Z","advisories":[],"bugzilla":"1481335","bugzilla_description":"CVE-2017-12588 rsyslog: multiple format string vulnerabilities in zmq3 modules","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-134","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12588.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.9"},{"CVE":"CVE-2018-16881","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHBA-2019:2501","RHSA-2019:2110","RHSA-2019:2439","RHSA-2019:2437"],"bugzilla":"1658366","bugzilla_description":"CVE-2018-16881 rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190","affected_packages":["rsyslog-0:8.24.0-41.el7_7","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","rsyslog-0:8.24.0-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16881.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-3243","severity":"low","public_date":"2015-06-18T00:00:00Z","advisories":[],"bugzilla":"1232826","bugzilla_description":"CVE-2015-3243 rsyslog: some log files are created world-readable","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732->CWE-532","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3243.json"},{"CVE":"CVE-2014-3683","severity":"important","public_date":"2014-10-02T00:00:00Z","advisories":[],"bugzilla":"1149081","bugzilla_description":"CVE-2014-3683 rsyslog: integer overflow in PRI parsing","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3683.json"},{"CVE":"CVE-2014-3634","severity":"important","public_date":"2014-09-30T00:00:00Z","advisories":["RHSA-2014:1654","RHSA-2014:1397","RHSA-2014:1671"],"bugzilla":"1142373","bugzilla_description":"CVE-2014-3634 rsyslog: remote syslog PRI vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-129->CWE-119","affected_packages":["rsyslog-0:5.8.10-9.el6_6","rsyslog7-0:7.4.10-3.el6_6","rsyslog5-0:5.8.12-5.el5_11","rsyslog-0:7.4.7-7.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3634.json"},{"CVE":"CVE-2013-4758","severity":"moderate","public_date":"2013-07-05T00:00:00Z","advisories":[],"bugzilla":"981719","bugzilla_description":"CVE-2013-4758 rsyslog: double free flaw in ElasticSearch plugin","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4758.json"},{"CVE":"CVE-2011-3200","severity":"moderate","public_date":"2011-09-01T00:00:00Z","advisories":["RHSA-2011:1247"],"bugzilla":"727644","bugzilla_description":"CVE-2011-3200 rsyslog: parseLegacySyslogMsg off-by-two buffer overflow","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rsyslog-0:4.6.2-3.el6_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3200.json"},{"CVE":"CVE-2011-1488","severity":"low","public_date":"2011-02-25T00:00:00Z","advisories":[],"bugzilla":"694122","bugzilla_description":"CVE-2011-1488 rsyslog: Memory leak when $RepeatedMsgReduction turned on","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1488.json"},{"CVE":"CVE-2011-1489","severity":"low","public_date":"2011-02-25T00:00:00Z","advisories":[],"bugzilla":"694126","bugzilla_description":"CVE-2011-1489 CVE-2011-1490 rsyslog: Memory leak when multiple rulesets used","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1489.json"},{"CVE":"CVE-2011-1490","severity":"low","public_date":"2011-02-25T00:00:00Z","advisories":[],"bugzilla":"694126","bugzilla_description":"CVE-2011-1489 CVE-2011-1490 rsyslog: Memory leak when multiple rulesets used","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1490.json"},{"CVE":"CVE-2011-4623","severity":"moderate","public_date":"2011-02-09T00:00:00Z","advisories":["RHSA-2012:0796"],"bugzilla":"769822","bugzilla_description":"CVE-2011-4623 rsyslog: DoS due integer signedness error while extending rsyslog counted string buffer","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["rsyslog-0:5.8.10-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4623.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rtkit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rtkit_security_api_results.json
new file mode 100644
index 0000000..7a22f06
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rtkit_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-4326","severity":"important","public_date":"2013-09-18T00:00:00Z","advisories":["RHSA-2013:1282"],"bugzilla":"1006677","bugzilla_description":"CVE-2013-4326 rtkit: insecure calling of polkit","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["rtkit-0:0.5-2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4326.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-hivex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-hivex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-hivex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-irb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-irb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-irb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-libguestfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-libguestfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-libguestfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby_security_api_results.json
new file mode 100644
index 0000000..284040c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ruby_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8264","severity":"important","public_date":"2020-10-07T00:00:00Z","advisories":[],"bugzilla":"1886554","bugzilla_description":"CVE-2020-8264 rubygem-actionpack: possible XSS vulnerability in Action Pack in development mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8264.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"7.7"},{"CVE":"CVE-2020-25613","severity":"moderate","public_date":"2020-09-29T00:00:00Z","advisories":[],"bugzilla":"1883623","bugzilla_description":"CVE-2020-25613 ruby: potential HTTP request smuggling in WEBrick","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25613.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-26159","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1884111","bugzilla_description":"CVE-2020-26159 oniguruma: Buffer overflow in concat_opt_exact_str could result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26159.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2020-15169","severity":"moderate","public_date":"2020-09-09T00:00:00Z","advisories":[],"bugzilla":"1877566","bugzilla_description":"CVE-2020-15169 rubygem-activeview: Cross-site scripting in translation helpers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15169.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-8185","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1852380","bugzilla_description":"CVE-2020-8185 rubygem-rails: untrusted users able to run pending migrations in production","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8185.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-8184","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1849141","bugzilla_description":"CVE-2020-8184 rubygem-rack: percent-encoded cookies can be used to overwrite existing prefixed cookie names","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-807","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8184.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-7663","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":[],"bugzilla":"1845978","bugzilla_description":"CVE-2020-7663 rubygem-websocket-extensions: ReDoS vulnerability in Sec-WebSocket-Extensions parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-185->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-11077","severity":"moderate","public_date":"2020-05-21T00:00:00Z","advisories":[],"bugzilla":"1842534","bugzilla_description":"CVE-2020-11077 rubygem-puma: HTTP Smuggling through a proxy via Transfer-Encoding Header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11077.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2020-11076","severity":"moderate","public_date":"2020-05-21T00:00:00Z","advisories":[],"bugzilla":"1842539","bugzilla_description":"CVE-2020-11076 rubygem-puma: HTTP Smuggling via an invalid Transfer-Encoding Header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11076.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-8164","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1842634","bugzilla_description":"CVE-2020-8164 rubygem-actionpack: possible strong parameters bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8164.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-8162","severity":"important","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1843005","bugzilla_description":"CVE-2020-8162 rubygem-activestorage: circumvention of file size limits in ActiveStorage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8162.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-8165","severity":"important","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1843072","bugzilla_description":"CVE-2020-8165 rubygem-activesupport: potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8165.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-8167","severity":"moderate","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1843084","bugzilla_description":"CVE-2020-8167 rubygem-actionview: CSRF vulnerability in rails-ujs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8167.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-8166","severity":"low","public_date":"2020-05-18T00:00:00Z","advisories":[],"bugzilla":"1843152","bugzilla_description":"CVE-2020-8166 rubygem-actionpack: ability to forge per-form CSRF tokens given a global CSRF token","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8166.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2020-8163","severity":"important","public_date":"2020-05-15T00:00:00Z","advisories":[],"bugzilla":"1848724","bugzilla_description":"CVE-2020-8163 rubygem-rails: potential remote code execution of user-provided local names","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8163.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-8161","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":[],"bugzilla":"1838281","bugzilla_description":"CVE-2020-8161 rubygem-rack: directory traversal in Rack::Directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8161.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-8159","severity":"important","public_date":"2020-05-06T00:00:00Z","advisories":[],"bugzilla":"1835655","bugzilla_description":"CVE-2020-8159 rubygem-actionpack-page_caching: allows an attacker to write arbitrary files to a web server, which could result in remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8159.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-10716","severity":"low","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:1454"],"bugzilla":"1827300","bugzilla_description":"CVE-2020-10716 rubygem-foreman_ansible: \"User input\" entry from Job Invocation may contain sensitive data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["tfm-rubygem-foreman_ansible-0:4.0.3.5-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10716.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2020-10933","severity":"moderate","public_date":"2020-03-31T00:00:00Z","advisories":[],"bugzilla":"1833291","bugzilla_description":"CVE-2020-10933 ruby: BasicSocket#read_nonblock method leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10933.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-10663","severity":"moderate","public_date":"2020-03-19T00:00:00Z","advisories":["RHSA-2020:2462","RHSA-2020:2473","RHSA-2020:2670"],"bugzilla":"1827500","bugzilla_description":"CVE-2020-10663 rubygem-json: Unsafe Object Creation Vulnerability in JSON","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-94","affected_packages":["pcs-0:0.10.1-4.el8_0.5","pcs-0:0.10.2-4.el8_1.1","pcs-0:0.10.4-6.el8_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2020-5267","severity":"moderate","public_date":"2020-03-19T00:00:00Z","advisories":[],"bugzilla":"1831528","bugzilla_description":"CVE-2020-5267 rubygem-actionview: views that use the `j` or `escape_javascript` methods are susceptible to XSS attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5267.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-5249","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1816181","bugzilla_description":"CVE-2020-5249 rubygem-puma: attacker is able to use carriage return character to insert malicious content (HTTP Response Splitting), this could lead to XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5249.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-5247","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":[],"bugzilla":"1816187","bugzilla_description":"CVE-2020-5247 rubygem-puma: attacker is able to use newline characters to insert malicious content (HTTP Response Splitting), this could lead to XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5247.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-5217","severity":"moderate","public_date":"2020-01-22T00:00:00Z","advisories":[],"bugzilla":"1801264","bugzilla_description":"CVE-2020-5217 rubygem-secure_headers: directive injection when using dynamic overrides with user input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-95->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5217.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.8"},{"CVE":"CVE-2020-5216","severity":"moderate","public_date":"2020-01-22T00:00:00Z","advisories":[],"bugzilla":"1801286","bugzilla_description":"CVE-2020-5216 rubygem-secure_headers: limited header injection when using dynamic overrides with user input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-5216.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"5.8"},{"CVE":"CVE-2019-16782","severity":"moderate","public_date":"2019-12-18T00:00:00Z","advisories":["RHSA-2020:2480"],"bugzilla":"1789100","bugzilla_description":"CVE-2019-16782 rubygem-rack: hijack sessions by using timing attacks targeting the session id","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["cfme-gemset-0:5.11.6.0-1.el8cf","cfme-amazon-smartstate-0:5.11.6.0-1.el8cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-16770","severity":"moderate","public_date":"2019-12-05T00:00:00Z","advisories":[],"bugzilla":"1831297","bugzilla_description":"CVE-2019-16770 rubygem-puma: keepalive requests from poorly-behaved client leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16770.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16255","severity":"moderate","public_date":"2019-11-26T00:00:00Z","advisories":[],"bugzilla":"1793683","bugzilla_description":"CVE-2019-16255 ruby: Code injection via command argument of Shell#test / Shell#[]","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16255.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-19012","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":[],"bugzilla":"1802051","bugzilla_description":"CVE-2019-19012 oniguruma: integer overflow in search_in_range function in regexec.c leads to out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19012.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19203","severity":"moderate","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1802061","bugzilla_description":"CVE-2019-19203 oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19204","severity":"moderate","public_date":"2019-11-06T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1802068","bugzilla_description":"CVE-2019-19204 oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19204.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16254","severity":"low","public_date":"2019-10-25T00:00:00Z","advisories":[],"bugzilla":"1789556","bugzilla_description":"CVE-2019-16254 ruby: HTTP response splitting in WEBrick (Additional fix)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16254.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-15587","severity":"moderate","public_date":"2019-10-10T00:00:00Z","advisories":[],"bugzilla":"1774081","bugzilla_description":"CVE-2019-15587 rubygem-loofah: XXS when a crafted SVG element is republished","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15587.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2019-16201","severity":"moderate","public_date":"2019-10-01T00:00:00Z","advisories":[],"bugzilla":"1773728","bugzilla_description":"CVE-2019-16201 ruby: regular expression denial of service vulnerability of WEBrick's Digest access authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16201.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15845","severity":"moderate","public_date":"2019-10-01T00:00:00Z","advisories":[],"bugzilla":"1789407","bugzilla_description":"CVE-2019-15845 ruby: NUL injection vulnerability of File.fnmatch and File.fnmatch?","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-626->CWE-41","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-8130","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":[],"bugzilla":"1816270","bugzilla_description":"CVE-2020-8130 rake: OS Command Injection via egrep in Rake::FileList","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8130.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-15224","severity":"important","public_date":"2019-08-19T00:00:00Z","advisories":[],"bugzilla":"1743940","bugzilla_description":"CVE-2019-15224 rubygem-rest-client: code-execution backdoor insterted by third party","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-348","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-19246","severity":"low","public_date":"2019-08-13T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1777537","bugzilla_description":"CVE-2019-19246 oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2019-16162","severity":"moderate","public_date":"2019-07-31T00:00:00Z","advisories":[],"bugzilla":"1781304","bugzilla_description":"CVE-2019-16162 onigmo: out-of-bounds read in next_state_val() in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16162.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16163","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1768997","bugzilla_description":"CVE-2019-16163 oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16163.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-16161","severity":"low","public_date":"2019-07-28T00:00:00Z","advisories":[],"bugzilla":"1769042","bugzilla_description":"CVE-2019-16161 onigmo: NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16161.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10198","severity":"moderate","public_date":"2019-07-12T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1729130","bugzilla_description":"CVE-2019-10198 foreman: authorization bypasses in foreman-tasks leading to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["tfm-rubygem-foreman-tasks-0:0.15.11.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-13225","severity":"moderate","public_date":"2019-06-27T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1728965","bugzilla_description":"CVE-2019-13225 oniguruma: NULL pointer dereference in match_at() in regexec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-13224","severity":"moderate","public_date":"2019-06-27T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1728970","bugzilla_description":"CVE-2019-13224 oniguruma: Use-after-free in onig_new_deluxe() in regext.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-11027","severity":"moderate","public_date":"2019-06-10T00:00:00Z","advisories":[],"bugzilla":"1719494","bugzilla_description":"CVE-2019-11027 rubygem-ruby-openid: Unknown remotely exploitable flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11027.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-10842","severity":"important","public_date":"2019-03-27T00:00:00Z","advisories":[],"bugzilla":"1697482","bugzilla_description":"CVE-2019-10842 rubygem-bootstrap-sass: backdoor code allows arbitrary code execution when downloaded from rubygems.org","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10842.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-5420","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1689154","bugzilla_description":"CVE-2019-5420 rubygem-rails: Weak secret token leading to possible code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-338","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5420.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-5418","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:0796","RHSA-2019:1149","RHSA-2019:1147","RHSA-2019:1289"],"bugzilla":"1689159","bugzilla_description":"CVE-2019-5418 rubygem-actionpack: render file directory traversal in Action View","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["cfme-gemset-0:5.9.9.3-1.el7cf","rh-ror42-rubygem-actionpack-1:4.2.6-5.el6","rh-ror42-rubygem-actionpack-1:4.2.6-5.el7","rh-ror50-rubygem-actionpack-1:5.0.1-2.el6","rh-ror50-rubygem-actionpack-1:5.0.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5418.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-5419","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:0796","RHSA-2019:1149","RHSA-2019:1147","RHSA-2019:1289"],"bugzilla":"1689160","bugzilla_description":"CVE-2019-5419 rubygem-actionpack: denial of service vulnerability in Action View","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["cfme-gemset-0:5.9.9.3-1.el7cf","rh-ror42-rubygem-actionpack-1:4.2.6-5.el6","rh-ror42-rubygem-actionpack-1:4.2.6-5.el7","rh-ror50-rubygem-actionpack-1:5.0.1-2.el6","rh-ror50-rubygem-actionpack-1:5.0.1-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5419.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-8320","severity":"moderate","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHBA-2019:3384","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692512","bugzilla_description":"CVE-2019-8320 rubygems: Delete directory using symlink when decompressing tar","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-8321","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692514","bugzilla_description":"CVE-2019-8321 rubygems: Escape sequence injection vulnerability in verbose","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8321.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8322","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692516","bugzilla_description":"CVE-2019-8322 rubygems: Escape sequence injection vulnerability in gem owner","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8322.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8323","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692519","bugzilla_description":"CVE-2019-8323 rubygems: Escape sequence injection vulnerability in API response handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8324","severity":"important","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHSA-2019:1972","RHSA-2020:2769","RHSA-2019:1151","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692520","bugzilla_description":"CVE-2019-8324 rubygems: Installing a malicious gem may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby:2.5-8000020190524123348.55190bc5","ruby-0:2.0.0.648-35.el7_6","ruby-0:2.4.6-91.el7cf","rh-ruby23-ruby-0:2.3.8-70.el6","rh-ruby23-ruby-0:2.3.8-70.el7","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-8325","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692522","bugzilla_description":"CVE-2019-8325 rubygems: Escape sequence injection vulnerability in errors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8325.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-16476","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:0600"],"bugzilla":"1659223","bugzilla_description":"CVE-2018-16476 activejob: Information Exposure through deserialization using GlobalId","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502->CWE-200","affected_packages":["cfme-gemset-0:5.9.9.1-1.el7cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16476.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-16470","severity":"moderate","public_date":"2018-11-06T00:00:00Z","advisories":["RHSA-2019:3172"],"bugzilla":"1646814","bugzilla_description":"CVE-2018-16470 rubygem-rack: Buffer size in multipart parser allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rubygem-rack-1:1.6.4-3.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16471","severity":"moderate","public_date":"2018-11-06T00:00:00Z","advisories":[],"bugzilla":"1646818","bugzilla_description":"CVE-2018-16471 rubygem-rack: Cross-site scripting (XSS) via `scheme` method on `Rack::Request`","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16471.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-16468","severity":"moderate","public_date":"2018-10-27T00:00:00Z","advisories":[],"bugzilla":"1646715","bugzilla_description":"CVE-2018-16468 rubygem-loofah: XXS when a crafted SVG element is republished","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-16395","severity":"important","public_date":"2018-10-17T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2018:3738","RHSA-2019:2565","RHSA-2018:3731","RHSA-2018:3730","RHSA-2019:1948"],"bugzilla":"1643086","bugzilla_description":"CVE-2018-16395 ruby: OpenSSL::X509::Name equality check does not work correctly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["ruby-0:2.0.0.648-34.el7_6","ruby-0:2.0.0.648-34.el7_5","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-34.el7_4","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16395.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-16396","severity":"moderate","public_date":"2018-10-17T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2019:2028","RHSA-2020:2839","RHSA-2020:2769","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1643089","bugzilla_description":"CVE-2018-16396 ruby: Tainted flags are not propagated in Array#pack and String#unpack with some directives","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-37.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-38.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16396.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-18385","severity":"moderate","public_date":"2018-09-26T00:00:00Z","advisories":[],"bugzilla":"1640723","bugzilla_description":"CVE-2018-18385 rubygem-asciidoctor: Infinite loop in the #next_block method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18385.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14643","severity":"critical","public_date":"2018-09-20T00:00:00Z","advisories":["RHSA-2018:2733"],"bugzilla":"1629063","bugzilla_description":"CVE-2018-14643 smart_proxy_dynflow: Authentication bypass in Foreman remote execution feature","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["rubygem-smart_proxy_dynflow-0:0.1.10.2-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14643.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-3760","severity":"important","public_date":"2018-06-20T00:00:00Z","advisories":["RHSA-2018:2745","RHSA-2018:2245","RHSA-2018:2244","RHSA-2018:2561"],"bugzilla":"1593058","bugzilla_description":"CVE-2018-3760 rubygem-sprockets: Path traversal in forbidden_request?() can allow remote attackers to read arbitrary files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["rh-ror42-rubygem-sprockets-0:3.2.0-5.el6","rh-ror50-rubygem-sprockets-0:3.7.1-2.el7","rh-ror50-rubygem-sprockets-0:3.7.1-2.el6","rh-ror42-rubygem-sprockets-0:3.2.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3760.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-12029","severity":"important","public_date":"2018-06-05T00:00:00Z","advisories":[],"bugzilla":"1592612","bugzilla_description":"CVE-2018-12029 passenger: CHMOD race condition in nginx_module/ngx_http_passenger_module.c allows for local privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12029.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-12026","severity":"important","public_date":"2018-06-05T00:00:00Z","advisories":[],"bugzilla":"1592616","bugzilla_description":"CVE-2018-12026 passenger: SpawningKit allows malicious applications to replace files and directories allowing for arbitrary reads and writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12026.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-12027","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":[],"bugzilla":"1592619","bugzilla_description":"CVE-2018-12027 passenger: Insecure permissions in SpawningKit can allow for redirection of traffic under certain configurations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12027.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2018-12028","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":[],"bugzilla":"1592621","bugzilla_description":"CVE-2018-12028 passenger: Improper access control in SpawningKit can allow malicious child processes to kill arbitrary processes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12028.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2018-1000544","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2018:3466"],"bugzilla":"1593001","bugzilla_description":"CVE-2018-1000544 rubyzip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-22|CWE-59)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000544.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-12615","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":[],"bugzilla":"1594361","bugzilla_description":"CVE-2018-12615 passenger: privilege lowering in switchGroup() in agent/ExecHelper/ExecHelperMain.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12615.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-14040","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601614","bugzilla_description":"CVE-2018-14040 bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14041","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2019:1456"],"bugzilla":"1601616","bugzilla_description":"CVE-2018-14041 bootstrap: Cross-site Scripting (XSS) in the data-target property of scrollspy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14041.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14042","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601617","bugzilla_description":"CVE-2018-14042 bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-3881","severity":"moderate","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1651826","bugzilla_description":"CVE-2019-3881 rubygem-bundler: Insecure permissions on directory in /tmp/ allows for execution of malicious code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3881.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-11627","severity":"moderate","public_date":"2018-05-22T00:00:00Z","advisories":["RHSA-2019:0212","RHSA-2019:0315"],"bugzilla":"1585218","bugzilla_description":"CVE-2018-11627 rubygem-sinatra: XSS in the 400 Bad Request page","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11627.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-6914","severity":"low","public_date":"2018-03-28T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1561947","bugzilla_description":"CVE-2018-6914 ruby: Unintentional file and directory creation with directory traversal in tempfile and tmpdir","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6914.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-8779","severity":"low","public_date":"2018-03-28T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1561948","bugzilla_description":"CVE-2018-8779 ruby: Unintentional socket creation by poisoned NULL byte in UNIXServer and UNIXSocket","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-626","affected_packages":["rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-8780","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1561949","bugzilla_description":"CVE-2018-8780 ruby: Unintentional directory traversal by poisoned NULL byte in Dir","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-626->CWE-22","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-8777","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1561950","bugzilla_description":"CVE-2018-8777 ruby: DoS by large request in WEBrick","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8777.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-17742","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:2288","RHSA-2020:2212","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730","RHSA-2020:1963"],"bugzilla":"1561952","bugzilla_description":"CVE-2017-17742 ruby: HTTP response splitting in WEBrick","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["ruby-0:2.0.0.648-37.el7_6","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","ruby-0:2.0.0.648-36.el7_4","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_5","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17742.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-8778","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:2288","RHSA-2020:2212","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730","RHSA-2020:1963"],"bugzilla":"1561953","bugzilla_description":"CVE-2018-8778 ruby: Buffer under-read in String#unpack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["ruby-0:2.0.0.648-37.el7_6","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","ruby-0:2.0.0.648-36.el7_4","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_5","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-3741","severity":"moderate","public_date":"2018-03-21T00:00:00Z","advisories":[],"bugzilla":"1568842","bugzilla_description":"CVE-2018-3741 rubygem-rails-html-sanitizer: non-whitelisted attributes are present in sanitized output when input with specially-crafted HTML fragments leading to XSS vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3741.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-8048","severity":"moderate","public_date":"2018-03-15T00:00:00Z","advisories":[],"bugzilla":"1559071","bugzilla_description":"CVE-2018-8048 rubygem-loofah: XSS vulnerability due to unescaped comments within attributes by libxml2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-7212","severity":"low","public_date":"2018-02-18T00:00:00Z","advisories":[],"bugzilla":"1802282","bugzilla_description":"CVE-2018-7212 rubygem-sinatra: path traversal via backslash characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7212.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000073","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547418","bugzilla_description":"CVE-2018-1000073 rubygems: Path traversal when writing to a symlinked basedir outside of the root","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000073.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000074","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547419","bugzilla_description":"CVE-2018-1000074 rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000074.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-1000075","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547420","bugzilla_description":"CVE-2018-1000075 rubygems: Infinite loop vulnerability due to negative size in tar header causes Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000075.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000076","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547421","bugzilla_description":"CVE-2018-1000076 rubygems: Improper verification of signatures in tarball allows to install mis-signed gem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000076.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000077","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547422","bugzilla_description":"CVE-2018-1000077 rubygems: Missing URL validation on spec home attribute allows malicious gem to set an invalid homepage URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000077.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000078","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547425","bugzilla_description":"CVE-2018-1000078 rubygems: XSS vulnerability in homepage attribute when displayed via gem server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-1000079","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547426","bugzilla_description":"CVE-2018-1000079 rubygems: Path traversal issue during gem installation allows to write to arbitrary filesystem locations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000079.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-17790","severity":"low","public_date":"2017-12-19T00:00:00Z","advisories":["RHSA-2018:0378","RHSA-2018:0584","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1528218","bugzilla_description":"CVE-2017-17790 ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6","rh-ruby24-ruby-0:2.4.3-90.el6","rh-ruby24-ruby-0:2.4.3-90.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-17405","severity":"important","public_date":"2017-12-14T00:00:00Z","advisories":["RHSA-2018:0378","RHSA-2018:0584","RHSA-2018:0585","RHSA-2019:2806","RHSA-2018:0583"],"bugzilla":"1526189","bugzilla_description":"CVE-2017-17405 ruby: Command injection vulnerability in Net::FTP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-30.el7_3","ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6","rh-ruby24-ruby-0:2.4.3-90.el6","rh-ruby24-ruby-0:2.4.3-90.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-17042","severity":"moderate","public_date":"2017-11-24T00:00:00Z","advisories":[],"bugzilla":"1519065","bugzilla_description":"CVE-2017-17042 rubygem-yard: (lib/yard/core_ext/file.rb) is vulnerable to directory traversal attacks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-16516","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":[],"bugzilla":"1524439","bugzilla_description":"CVE-2017-16516 rubygem-yajl-ruby: Yajl::Parser.new.parse incorrect parsing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16355","severity":"moderate","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1513377","bugzilla_description":"CVE-2017-16355 passenger: arbitrary file read via REVISION symlink","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16355.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-0903","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1500488","bugzilla_description":"CVE-2017-0903 rubygems: Unsafe object deserialization through YAML formatted gem specifications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0903.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-14033","severity":"moderate","public_date":"2017-09-14T00:00:00Z","advisories":["RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1491866","bugzilla_description":"CVE-2017-14033 ruby: Buffer underrun in OpenSSL ASN1 decode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14033.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-10784","severity":"moderate","public_date":"2017-09-14T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1492012","bugzilla_description":"CVE-2017-10784 ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2017-0898","severity":"moderate","public_date":"2017-09-14T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1492015","bugzilla_description":"CVE-2017-0898 ruby: Buffer underrun vulnerability in Kernel.sprintf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0898.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-0901","severity":"moderate","public_date":"2017-09-01T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487587","bugzilla_description":"CVE-2017-0901 rubygems: Arbitrary file overwrite due to incorrect validation of specification name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0901.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-0900","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487588","bugzilla_description":"CVE-2017-0900 rubygems: No size limit in summary length of gem spec","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-0902","severity":"moderate","public_date":"2017-08-31T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487589","bugzilla_description":"CVE-2017-0902 rubygems: DNS hijacking vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0902.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-0899","severity":"low","public_date":"2017-08-31T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487590","bugzilla_description":"CVE-2017-0899 rubygems: Escape sequence in the \"summary\" field of gemspec","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0899.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-16932","severity":"moderate","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1517316","bugzilla_description":"CVE-2017-16932 libxml2: Infinite recursion in parameter entities","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16932.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-11465","severity":"low","public_date":"2017-07-13T00:00:00Z","advisories":[],"bugzilla":"1473720","bugzilla_description":"CVE-2017-11465 ruby: Invalid read/write in parser_yyerror function in UTF-8 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11465.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7540","severity":"important","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1473243","bugzilla_description":"CVE-2017-7540 rubygem-safemode: Bypassing the whitelist of safe commands via block_pass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-184","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7540.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-9096","severity":"low","public_date":"2017-06-12T00:00:00Z","advisories":[],"bugzilla":"1461846","bugzilla_description":"CVE-2015-9096 ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-16931","severity":"moderate","public_date":"2017-06-05T00:00:00Z","advisories":[],"bugzilla":"1517307","bugzilla_description":"CVE-2017-16931 libxml2: Mishandling parameter-entity references","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16931.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-9227","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466739","bugzilla_description":"CVE-2017-9227 oniguruma: Out-of-bounds stack read in mbc_enc_len() during regular expression searching","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9227.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9228","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466740","bugzilla_description":"CVE-2017-9228 oniguruma: Out-of-bounds heap write in bitset_set_range()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9228.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9229","severity":"moderate","public_date":"2017-05-23T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466746","bugzilla_description":"CVE-2017-9229 oniguruma: Invalid pointer dereference in left_adjust_char_head()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9229.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-9224","severity":"moderate","public_date":"2017-05-22T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466730","bugzilla_description":"CVE-2017-9224 oniguruma: Out-of-bounds stack read in match_at() during regular expression searching","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-9225","severity":"moderate","public_date":"2017-05-22T00:00:00Z","advisories":[],"bugzilla":"1466733","bugzilla_description":"CVE-2017-9225 oniguruma: Out-of-bounds stack write in onigenc_unicode_get_case_fold_codes_by_str() during regular expression compilation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9226","severity":"moderate","public_date":"2017-05-18T00:00:00Z","advisories":["RHSA-2018:1296"],"bugzilla":"1466736","bugzilla_description":"CVE-2017-9226 oniguruma: Heap buffer overflow in next_state_val() during regular expression compilation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["rh-php70-php-0:7.0.27-1.el6","rh-php70-php-0:7.0.27-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9226.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-2292","severity":"important","public_date":"2017-05-11T00:00:00Z","advisories":[],"bugzilla":"1470086","bugzilla_description":"CVE-2017-2292 mcollective: RCE via YAML deserialization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2292.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-2667","severity":"moderate","public_date":"2017-03-27T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1436262","bugzilla_description":"CVE-2017-2667 rubygem-hammer_cli: no verification of API server's SSL certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2667.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-16012","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":["RHSA-2018:0501","RHSA-2020:0983"],"bugzilla":"1591854","bugzilla_description":"CVE-2017-16012 js-jquery: XSS in responses from cross-origin ajax requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2017-14064","severity":"low","public_date":"2017-03-02T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487552","bugzilla_description":"CVE-2017-14064 ruby: Arbitrary heap exposure during a JSON.generate call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-6181","severity":"moderate","public_date":"2017-02-20T00:00:00Z","advisories":[],"bugzilla":"1443435","bugzilla_description":"CVE-2017-6181 ruby: Stack overflow in parse_char_class() in Onigmo","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5946","severity":"moderate","public_date":"2017-02-04T00:00:00Z","advisories":[],"bugzilla":"1427937","bugzilla_description":"CVE-2017-5946 rubygem-rubyzip: Directory traversal in the Zip::File component","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5946.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-7060","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:0256"],"bugzilla":"1379909","bugzilla_description":"CVE-2016-7060 Red Hat QCI: qci exposes password in web UI when they should be masked","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":"CWE-200","affected_packages":["tfm-rubygem-fusor_ui-0:1.0.9.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7060.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.9"},{"CVE":"CVE-2016-10345","severity":"moderate","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1445306","bugzilla_description":"CVE-2016-10345 passenger: File overwrite vulnerability in passenger-install-nginx-module","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10345.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-8613","severity":"moderate","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1387232","bugzilla_description":"CVE-2016-8613 foreman: Stored XSS vulnerability in remote execution plugin","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["tfm-rubygem-foreman_remote_execution-0:1.3.7.2-1.fm1_15.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8613.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2016-7954","severity":"moderate","public_date":"2016-10-04T00:00:00Z","advisories":[],"bugzilla":"1381951","bugzilla_description":"CVE-2016-7954 rubygem-bundler: Code execution via gem name collision in bundler","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7954.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.9"},{"CVE":"CVE-2016-7798","severity":"moderate","public_date":"2016-09-19T00:00:00Z","advisories":[],"bugzilla":"1381526","bugzilla_description":"CVE-2016-7798 ruby: IV Reuse in GCM Mode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10173","severity":"moderate","public_date":"2016-08-22T00:00:00Z","advisories":[],"bugzilla":"1417578","bugzilla_description":"CVE-2016-10173 rubygem-archive-tar-minitar: Directory traversal during archive extraction","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10173.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-6316","severity":"moderate","public_date":"2016-08-11T00:00:00Z","advisories":["RHSA-2016:1855","RHSA-2016:1856","RHSA-2016:1857","RHSA-2016:1858"],"bugzilla":"1365008","bugzilla_description":"CVE-2016-6316 rubygem-actionview: cross-site scripting flaw in Action View","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rh-ror41-rubygem-actionview-0:4.1.5-6.el7","ruby193-rubygem-actionpack-1:3.2.8-20.el7","rh-ror42-rubygem-actionview-0:4.2.6-3.el7","rh-ror41-rubygem-actionview-0:4.1.5-6.el6","ruby193-rubygem-actionpack-1:3.2.8-20.el6","ror40-rubygem-actionpack-1:4.0.2-8.el7","ror40-rubygem-actionpack-1:4.0.2-8.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6316.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-6317","severity":"moderate","public_date":"2016-08-11T00:00:00Z","advisories":["RHSA-2016:1855"],"bugzilla":"1365017","bugzilla_description":"CVE-2016-6317 rubygem-activerecord: unsafe query generation in Active Record","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["rh-ror42-rubygem-activerecord-1:4.2.6-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6317.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-2788","severity":"moderate","public_date":"2016-08-09T00:00:00Z","advisories":[],"bugzilla":"1365799","bugzilla_description":"CVE-2016-2788 mcollective: Improper validation of fields in MCollective pings","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2788.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-7103","severity":"low","public_date":"2016-07-21T00:00:00Z","advisories":["RHSA-2017:0161","RHSA-2016:2933","RHSA-2016:2932"],"bugzilla":"1360286","bugzilla_description":"CVE-2016-7103 jquery-ui: cross-site scripting in dialog closeText","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["python-XStatic-jquery-ui-0:1.12.0.1-1.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7103.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-2339","severity":"moderate","public_date":"2016-06-14T00:00:00Z","advisories":[],"bugzilla":"1412678","bugzilla_description":"CVE-2016-2339 ruby: Fiddle::Function.new heap buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2339.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-2337","severity":"moderate","public_date":"2016-06-14T00:00:00Z","advisories":[],"bugzilla":"1412680","bugzilla_description":"CVE-2016-2337 ruby: TclTkIp ip_cancel_eval type confusion vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2337.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-2336","severity":"important","public_date":"2016-06-14T00:00:00Z","advisories":[],"bugzilla":"1412683","bugzilla_description":"CVE-2016-2336 ruby: WIN32OLE ole_invoke and ole_query_interface type confusion vulnerabilities","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2336.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-2097","severity":"important","public_date":"2016-02-29T00:00:00Z","advisories":["RHSA-2016:0454","RHSA-2016:0455","RHSA-2016:0456"],"bugzilla":"1310043","bugzilla_description":"CVE-2016-2097 rubygem-actionview, rubygem-actionpack: directory traversal in Action View, incomplete CVE-2016-0752 fix","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-22","affected_packages":["ror40-rubygem-actionpack-1:4.0.2-7.el6","ror40-rubygem-actionpack-1:4.0.2-7.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el6","rh-ror41-rubygem-actionview-0:4.1.5-5.el6","rh-ror41-rubygem-actionview-0:4.1.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2097.json"},{"CVE":"CVE-2016-2098","severity":"important","public_date":"2016-02-29T00:00:00Z","advisories":["RHSA-2016:0454","RHSA-2016:0455","RHSA-2016:0456"],"bugzilla":"1310054","bugzilla_description":"CVE-2016-2098 rubygem-actionview, rubygem-actionpack: code injection vulnerability in Action View","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-94","affected_packages":["ror40-rubygem-actionpack-1:4.0.2-7.el6","ror40-rubygem-actionpack-1:4.0.2-7.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el6","rh-ror41-rubygem-actionview-0:4.1.5-5.el6","rh-ror41-rubygem-actionview-0:4.1.5-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2098.json"},{"CVE":"CVE-2015-7576","severity":"low","public_date":"2016-01-25T00:00:00Z","advisories":["RHSA-2016:0296","RHSA-2016:0454","RHSA-2016:0455"],"bugzilla":"1301933","bugzilla_description":"CVE-2015-7576 rubygem-actionpack: Timing attack vulnerability in basic authentication in Action Controller","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":["ror40-rubygem-actionpack-1:4.0.2-7.el6","rh-ror41-rubygem-actionpack-1:4.1.5-3.el7","ror40-rubygem-actionpack-1:4.0.2-7.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el6","rh-ror41-rubygem-actionpack-1:4.1.5-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7576.json"},{"CVE":"CVE-2016-0751","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHSA-2016:0296","RHSA-2016:0454","RHSA-2016:0455"],"bugzilla":"1301946","bugzilla_description":"CVE-2016-0751 rubygem-actionpack: possible object leak and denial of service attack in Action Pack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["ror40-rubygem-actionpack-1:4.0.2-7.el6","rh-ror41-rubygem-actionpack-1:4.1.5-3.el7","ror40-rubygem-actionpack-1:4.0.2-7.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el6","rh-ror41-rubygem-actionpack-1:4.1.5-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0751.json"},{"CVE":"CVE-2015-7577","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHSA-2016:0296","RHSA-2016:0454","RHSA-2016:0455"],"bugzilla":"1301957","bugzilla_description":"CVE-2015-7577 rubygem-activerecord: Nested attributes rejection proc bypass in Active Record","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ror40-rubygem-activerecord-1:4.0.2-6.el7","ror40-rubygem-activerecord-1:4.0.2-6.el6","ruby193-rubygem-activerecord-1:3.2.8-11.el7","ruby193-rubygem-activerecord-1:3.2.8-11.el6","rh-ror41-rubygem-activerecord-1:4.1.5-2.el6","rh-ror41-rubygem-activerecord-1:4.1.5-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7577.json"},{"CVE":"CVE-2016-0752","severity":"important","public_date":"2016-01-25T00:00:00Z","advisories":["RHSA-2016:0296","RHSA-2016:0454","RHSA-2016:0455"],"bugzilla":"1301963","bugzilla_description":"CVE-2016-0752 rubygem-actionview, rubygem-actionpack: directory traversal flaw in Action View","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-22","affected_packages":["ror40-rubygem-actionpack-1:4.0.2-7.el6","rh-ror41-rubygem-actionpack-1:4.1.5-3.el7","ror40-rubygem-actionpack-1:4.0.2-7.el7","ruby193-rubygem-actionpack-1:3.2.8-16.el7","rh-ror41-rubygem-actionview-0:4.1.5-4.el6","ruby193-rubygem-actionpack-1:3.2.8-16.el6","rh-ror41-rubygem-actionview-0:4.1.5-4.el7","rh-ror41-rubygem-actionpack-1:4.1.5-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0752.json"},{"CVE":"CVE-2016-0753","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHSA-2016:0296"],"bugzilla":"1301973","bugzilla_description":"CVE-2016-0753 rubygem-activemodel, rubygem-activerecord: possible input validation circumvention in Active Model","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["rh-ror41-rubygem-activemodel-0:4.1.5-2.el6","rh-ror41-rubygem-activemodel-0:4.1.5-2.el7","rh-ror41-rubygem-activerecord-1:4.1.5-2.el6","rh-ror41-rubygem-activerecord-1:4.1.5-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0753.json"},{"CVE":"CVE-2015-7581","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHSA-2016:0296","RHSA-2016:0454"],"bugzilla":"1301981","bugzilla_description":"CVE-2015-7581 rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["ror40-rubygem-actionpack-1:4.0.2-7.el6","rh-ror41-rubygem-actionpack-1:4.1.5-3.el7","ror40-rubygem-actionpack-1:4.0.2-7.el7","rh-ror41-rubygem-actionpack-1:4.1.5-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7581.json"},{"CVE":"CVE-2017-17718","severity":"moderate","public_date":"2016-01-14T00:00:00Z","advisories":["RHSA-2020:1454"],"bugzilla":"1527048","bugzilla_description":"CVE-2017-17718 rubygem-net-ldap: Missing SSL Certificate Validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["tfm-rubygem-net-ldap-0:0.16.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17718.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2015-9097","severity":"low","public_date":"2015-12-11T00:00:00Z","advisories":[],"bugzilla":"1293598","bugzilla_description":"CVE-2015-9097 rubygem-mail: SMTP injection via recipient email addresses","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9097.json"},{"CVE":"CVE-2015-7519","severity":"moderate","public_date":"2015-12-07T00:00:00Z","advisories":[],"bugzilla":"1290405","bugzilla_description":"CVE-2015-7519 passenger: Header overwriting issue allowing user impersonation","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7519.json"},{"CVE":"CVE-2015-5274","severity":"important","public_date":"2015-09-16T00:00:00Z","advisories":["RHSA-2015:1808"],"bugzilla":"1262518","bugzilla_description":"CVE-2015-5274 OpenShift 2.2: API command injection vulnerability","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["rubygem-openshift-origin-console-0:1.34.1.3-1.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5274.json"},{"CVE":"CVE-2013-2103","severity":"moderate","public_date":"2015-07-23T00:00:00Z","advisories":[],"bugzilla":"964013","bugzilla_description":"CVE-2013-2103 OpenShift cartridge: remote URL retrieval","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2103.json"},{"CVE":"CVE-2014-10077","severity":"low","public_date":"2015-07-20T00:00:00Z","advisories":[],"bugzilla":"1647431","bugzilla_description":"CVE-2014-10077 rubygem-i18n: denial of service in Hash#slice in lib/i18n/core_ext/hash.rb","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-10077.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-9251","severity":"moderate","public_date":"2015-06-27T00:00:00Z","advisories":["RHSA-2020:0481","RHSA-2020:0729","RHSA-2020:3936","RHSA-2020:0983"],"bugzilla":"1399546","bugzilla_description":"CVE-2015-9251 js-jquery: Cross-site scripting via cross-domain ajax requests","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2015-3225","severity":"moderate","public_date":"2015-06-16T00:00:00Z","advisories":["RHBA-2018:0337","RHSA-2015:2290"],"bugzilla":"1232292","bugzilla_description":"CVE-2015-3225 rubygem-rack: Potential Denial of Service Vulnerability in Rack normalize_params()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["rubygem-rack-1:1.6.4-2.el7sat","pcs-0:0.9.143-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3225.json"},{"CVE":"CVE-2015-3227","severity":"moderate","public_date":"2015-06-16T00:00:00Z","advisories":[],"bugzilla":"1232302","bugzilla_description":"CVE-2015-3227 rubygem-activesupport: Possible Denial of Service attack in Active Support in merge_element()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3227.json"},{"CVE":"CVE-2015-3226","severity":"moderate","public_date":"2015-06-16T00:00:00Z","advisories":[],"bugzilla":"1232310","bugzilla_description":"CVE-2015-3226 rubygem-activesupport: XSS Vulnerability in ActiveSupport::JSON.encode","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3226.json"},{"CVE":"CVE-2015-1840","severity":"moderate","public_date":"2015-06-16T00:00:00Z","advisories":[],"bugzilla":"1233334","bugzilla_description":"CVE-2015-1840 rubygem-jquery-rails: CSRF Vulnerability in jquery-ujs and jquery-rails","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-212->CWE-201->CWE-352","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1840.json"},{"CVE":"CVE-2015-4411","severity":"low","public_date":"2015-06-04T00:00:00Z","advisories":[],"bugzilla":"1229706","bugzilla_description":"CVE-2015-4411 rubygem-moped: Denial of Service with crafted ObjectId string (incomplete fix for CVE-2015-4410)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4411.json"},{"CVE":"CVE-2015-4412","severity":"low","public_date":"2015-06-04T00:00:00Z","advisories":[],"bugzilla":"1229750","bugzilla_description":"CVE-2015-4412 rubygem-bson: data injection vulnerability through a crafted ObjectId","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4412.json"},{"CVE":"CVE-2015-4410","severity":"low","public_date":"2015-06-04T00:00:00Z","advisories":[],"bugzilla":"1229757","bugzilla_description":"CVE-2015-4410 rubygem-moped: Denial of Service with crafted ObjectId string","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-185","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4410.json"},{"CVE":"CVE-2018-1000119","severity":"moderate","public_date":"2015-05-25T00:00:00Z","advisories":["RHSA-2018:1060"],"bugzilla":"1534027","bugzilla_description":"CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["pcs-0:0.9.162-5.el7_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000119.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-4020","severity":"important","public_date":"2015-05-18T00:00:00Z","advisories":[],"bugzilla":"1250109","bugzilla_description":"CVE-2015-4020 rubygems: incomplete fix for CVE-2015-3900","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-20->CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4020.json"},{"CVE":"CVE-2015-3900","severity":"important","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2015:1657"],"bugzilla":"1236116","bugzilla_description":"CVE-2015-3900 rubygems: DNS hijacking vulnerability in api_endpoint()","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-20->CWE-345","affected_packages":["rh-ruby22-ruby-0:2.2.2-12.el6","rh-ruby22-ruby-0:2.2.2-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3900.json"},{"CVE":"CVE-2013-2095","severity":"important","public_date":"2015-05-13T00:00:00Z","advisories":[],"bugzilla":"963079","bugzilla_description":"CVE-2013-2095 rubygem-openshift-origin-controller: cartridge_cache.rb URI.prase() command injection","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2095.json"},{"CVE":"CVE-2015-3199","severity":"low","public_date":"2015-05-11T00:00:00Z","advisories":[],"bugzilla":"1220853","bugzilla_description":"CVE-2015-3199 foreman_discovery: auto provision rule does not enforce host group association to org/location","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3199.json"},{"CVE":"CVE-2015-1855","severity":"moderate","public_date":"2015-03-30T00:00:00Z","advisories":[],"bugzilla":"1209981","bugzilla_description":"CVE-2015-1855 ruby: OpenSSL extension hostname matching implementation violates RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1855.json"},{"CVE":"CVE-2015-1820","severity":"moderate","public_date":"2015-03-24T00:00:00Z","advisories":[],"bugzilla":"1205291","bugzilla_description":"CVE-2015-1820 rubygem-rest-client: session fixation vulnerability Set-Cookie headers present in an HTTP 30x redirection responses","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1820.json"},{"CVE":"CVE-2014-0241","severity":"moderate","public_date":"2015-02-18T00:00:00Z","advisories":[],"bugzilla":"1099419","bugzilla_description":"CVE-2014-0241 rubygem-hammer_cli_foreman: /etc/hammer/cli.modules.d/foreman.yml is world-readable","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:N/A:N","CWE":"CWE-732->CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0241.json"},{"CVE":"CVE-2014-0135","severity":"moderate","public_date":"2015-02-06T00:00:00Z","advisories":["RHEA-2014:1175"],"bugzilla":"1076335","bugzilla_description":"CVE-2014-0135 rubygem-kafo: temporary file creation vulnerability when creating /tmp/default_values.yaml","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"(CWE-377|CWE-367|CWE-732)","affected_packages":["rubygem-kafo-0:0.6.4-2.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0135.json"},{"CVE":"CVE-2015-3448","severity":"low","public_date":"2015-01-12T00:00:00Z","advisories":[],"bugzilla":"1240982","bugzilla_description":"CVE-2015-3448 rubygem-rest-client: unsanitized application logging","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3448.json"},{"CVE":"CVE-2014-0163","severity":"important","public_date":"2014-12-03T00:00:00Z","advisories":[],"bugzilla":"1083858","bugzilla_description":"CVE-2014-0163 Openshift: Multiple shell command injection flaws","cvss_score":8.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0163.json"},{"CVE":"CVE-2014-9130","severity":"moderate","public_date":"2014-11-26T00:00:00Z","advisories":["RHSA-2015:0112","RHSA-2015:0100","RHSA-2015:0260"],"bugzilla":"1169369","bugzilla_description":"CVE-2014-9130 libyaml: assert failure when processing wrapped strings","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["libyaml-0:0.1.4-11.el7_0","libyaml-0:0.1.3-4.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9130.json"},{"CVE":"CVE-2014-7829","severity":"low","public_date":"2014-11-17T00:00:00Z","advisories":[],"bugzilla":"1164659","bugzilla_description":"CVE-2014-7829 rubygem-actionpack: incomplete fix for CVE-2014-7818, arbitrary file existence disclosure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-22->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7829.json"},{"CVE":"CVE-2014-8090","severity":"moderate","public_date":"2014-11-13T00:00:00Z","advisories":["RHSA-2014:1911","RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1159927","bugzilla_description":"CVE-2014-8090 ruby: REXML incomplete fix for CVE-2014-8080","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-776","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:1.8.7.374-3.el6_6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8090.json"},{"CVE":"CVE-2014-7818","severity":"low","public_date":"2014-10-31T00:00:00Z","advisories":[],"bugzilla":"1161499","bugzilla_description":"CVE-2014-7818 rubygem-actionpack: arbitrary file existence disclosure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-22->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7818.json"},{"CVE":"CVE-2014-7819","severity":"low","public_date":"2014-10-31T00:00:00Z","advisories":[],"bugzilla":"1161527","bugzilla_description":"CVE-2014-7819 rubygem-sprockets: arbitrary file existence disclosure","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-22->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7819.json"},{"CVE":"CVE-2014-8080","severity":"moderate","public_date":"2014-10-27T00:00:00Z","advisories":["RHSA-2014:1911","RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1157709","bugzilla_description":"CVE-2014-8080 ruby: REXML billion laughs attack via parameter entity expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-776","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:1.8.7.374-3.el6_6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8080.json"},{"CVE":"CVE-2014-3712","severity":"low","public_date":"2014-10-22T00:00:00Z","advisories":[],"bugzilla":"1155708","bugzilla_description":"CVE-2014-3712 Katello: user parameters passed to to_sym","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-20->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3712.json"},{"CVE":"CVE-2014-7967","severity":"important","public_date":"2014-10-08T00:00:00Z","advisories":[],"bugzilla":"1150850","bugzilla_description":"CVE-2014-7967 v8: multiple unspecified issues fixed in Google Chrome 38.0.2125.101","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7967.json"},{"CVE":"CVE-2014-3188","severity":"important","public_date":"2014-09-22T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1150848","bugzilla_description":"CVE-2014-3188 v8: IPC and v8 issue fixed in Google Chrome 38.0.2125.101","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3188.json"},{"CVE":"CVE-2014-3195","severity":"moderate","public_date":"2014-09-18T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1150849","bugzilla_description":"CVE-2014-3195 v8: information leak fixed in Google Chrome 38.0.2125.101","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3195.json"},{"CVE":"CVE-2013-1945","severity":"low","public_date":"2014-09-17T00:00:00Z","advisories":[],"bugzilla":"950930","bugzilla_description":"CVE-2013-1945 ruby193: insecure LD_LIBRARY_PATH setting","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1945.json"},{"CVE":"CVE-2013-0196","severity":"moderate","public_date":"2014-09-05T00:00:00Z","advisories":["RHEA-2013:1031"],"bugzilla":"901364","bugzilla_description":"CVE-2013-0196 OpenShift Enterprise and Online vulnerable to CSRF attack with REST API","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["rubygem-openshift-origin-controller-0:1.9.14-1.2.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0196.json"},{"CVE":"CVE-2014-6071","severity":null,"public_date":"2014-09-02T00:00:00Z","advisories":[],"bugzilla":"1136683","bugzilla_description":"CVE-2014-6071 jQuery: cross-site scripting flaw","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6071.json"},{"CVE":"CVE-2014-6438","severity":"moderate","public_date":"2014-08-19T00:00:00Z","advisories":[],"bugzilla":"1490845","bugzilla_description":"CVE-2014-6438 ruby: Unsafe parsing of long strings via decode_www_form_component method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6438.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-3514","severity":"important","public_date":"2014-08-18T00:00:00Z","advisories":["RHSA-2014:1102"],"bugzilla":"1131240","bugzilla_description":"CVE-2014-3514 rubygem-activerecord: Strong Parameter bypass with create_with","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-88","affected_packages":["ror40-rubygem-activerecord-1:4.0.2-2.3.el6","ror40-rubygem-activerecord-1:4.0.2-2.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3514.json"},{"CVE":"CVE-2013-0334","severity":"moderate","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:2180"],"bugzilla":"1146335","bugzilla_description":"CVE-2013-0334 rubygem-bundler: 'bundle install' may install a gem from a source other than expected","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-345","affected_packages":["rubygem-bundler-0:1.7.8-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0334.json"},{"CVE":"CVE-2014-3592","severity":"moderate","public_date":"2014-08-13T00:00:00Z","advisories":[],"bugzilla":"1129846","bugzilla_description":"CVE-2014-3592 OpenShift Origin: XSS in team name","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3592.json"},{"CVE":"CVE-2014-5256","severity":"moderate","public_date":"2014-07-31T00:00:00Z","advisories":["RHSA-2014:1744"],"bugzilla":"1125464","bugzilla_description":"CVE-2014-5256 V8: Memory Corruption and Stack Overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["v8314-v8-1:3.14.5.10-6.el7","v8314-v8-1:3.14.5.10-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5256.json"},{"CVE":"CVE-2014-3251","severity":"moderate","public_date":"2014-07-15T00:00:00Z","advisories":[],"bugzilla":"1105713","bugzilla_description":"CVE-2014-3251 mcollective: aes_security.rb file creation vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-348","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3251.json"},{"CVE":"CVE-2014-3531","severity":"moderate","public_date":"2014-07-11T00:00:00Z","advisories":["RHEA-2014:1175"],"bugzilla":"1108745","bugzilla_description":"CVE-2014-3531 foreman: XSS with operating system name/description","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3531.json"},{"CVE":"CVE-2014-0175","severity":"important","public_date":"2014-07-10T00:00:00Z","advisories":["RHBA-2014:0487"],"bugzilla":"1086381","bugzilla_description":"CVE-2014-0175 mcollective: default password set at install","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-798","affected_packages":["ruby193-mcollective-0:2.4.1-5.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0175.json"},{"CVE":"CVE-2014-4975","severity":"low","public_date":"2014-07-09T00:00:00Z","advisories":["RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1118158","bugzilla_description":"CVE-2014-4975 ruby: off-by-one stack-based buffer overflow in the encodes() function","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-121","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4975.json"},{"CVE":"CVE-2014-3482","severity":"moderate","public_date":"2014-07-02T00:00:00Z","advisories":["RHSA-2014:0876"],"bugzilla":"1114425","bugzilla_description":"CVE-2014-3482 rubygem-activerecord: SQL injection vulnerability in 'bitstring' quoting","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-89","affected_packages":["ruby193-rubygem-activerecord-1:3.2.8-8.2.el6","ruby193-rubygem-activerecord-1:3.2.8-8.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3482.json"},{"CVE":"CVE-2014-3483","severity":"moderate","public_date":"2014-07-02T00:00:00Z","advisories":["RHSA-2014:0877"],"bugzilla":"1114427","bugzilla_description":"CVE-2014-3483 rubygem-activerecord: SQL injection vulnerability in 'range' quoting","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-89","affected_packages":["ror40-rubygem-activerecord-1:4.0.2-2.2.el7","ror40-rubygem-activerecord-1:4.0.2-2.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3483.json"},{"CVE":"CVE-2014-0007","severity":"critical","public_date":"2014-06-18T00:00:00Z","advisories":["RHEA-2014:1175","RHSA-2014:0770"],"bugzilla":"1105369","bugzilla_description":"CVE-2014-0007 foreman-proxy: smart-proxy remote command injection","cvss_score":10.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-78","affected_packages":["foreman-proxy-0:1.3.0-5.el6sat","foreman-proxy-0:1.6.0.30-1.el7sat","ruby193-foreman-proxy-0:1.1.10001-7.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0007.json"},{"CVE":"CVE-2014-3496","severity":"critical","public_date":"2014-06-17T00:00:00Z","advisories":["RHSA-2014:0762","RHSA-2014:0763","RHSA-2014:0764"],"bugzilla":"1110470","bugzilla_description":"CVE-2014-3496 OpenShift Origin: Command execution as root via downloadable cartridge source-url","cvss_score":10.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-78","affected_packages":["rubygem-openshift-origin-node-0:1.17.5.17-1.el6op","rubygem-openshift-origin-node-0:1.23.9.11-1.el6op","rubygem-openshift-origin-node-0:1.9.14.8-1.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3496.json"},{"CVE":"CVE-2014-3248","severity":"moderate","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1101346","bugzilla_description":"CVE-2014-3248 puppet: Ruby modules could be loaded from the current working directory","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3248.json"},{"CVE":"CVE-2014-3250","severity":"moderate","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1101347","bugzilla_description":"CVE-2014-3250 puppet: certificates could be honored even when revoked","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3250.json"},{"CVE":"CVE-2013-6470","severity":"moderate","public_date":"2014-05-29T00:00:00Z","advisories":["RHSA-2014:0517"],"bugzilla":"1051994","bugzilla_description":"CVE-2013-6470 openstack foreman-installer: insecure defaults","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["openstack-foreman-installer-0:1.0.12-1.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6470.json"},{"CVE":"CVE-2014-0233","severity":"important","public_date":"2014-05-21T00:00:00Z","advisories":["RHSA-2014:0530","RHSA-2014:0529"],"bugzilla":"1096955","bugzilla_description":"CVE-2014-0233 OpenShift: downloadable cartridge source url file command execution as root","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-73->CWE-78","affected_packages":["rubygem-openshift-origin-node-0:1.17.5.16-1.el6op","rubygem-openshift-origin-node-0:1.23.9.4-1.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0233.json"},{"CVE":"CVE-2014-0130","severity":"important","public_date":"2014-05-06T00:00:00Z","advisories":["RHSA-2014:1863","RHSA-2014:0510","RHSA-2014:0816"],"bugzilla":"1095105","bugzilla_description":"CVE-2014-0130 rubygem-actionpack: directory traversal issue","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-22","affected_packages":["ruby193-rubygem-actionpack-1:3.2.8-5.5.el6","ruby193-rubygem-actionpack-1:3.2.17-6.el6sam","ruby193-rubygem-actionpack-1:3.2.13-8.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0130.json"},{"CVE":"CVE-2014-0164","severity":"important","public_date":"2014-05-01T00:00:00Z","advisories":["RHSA-2014:0461","RHSA-2014:0460"],"bugzilla":"1083847","bugzilla_description":"CVE-2014-0164 mcollective: world readable client config","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-732","affected_packages":["openshift-origin-broker-util-0:1.17.6.6-1.el6op","openshift-origin-broker-util-0:1.9.16-1.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0164.json"},{"CVE":"CVE-2014-0192","severity":"moderate","public_date":"2014-04-25T00:00:00Z","advisories":["RHEA-2014:1175"],"bugzilla":"1092354","bugzilla_description":"CVE-2014-0192 Foreman: provisioning templates are world accessible","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-285->CWE-305","affected_packages":["foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0192.json"},{"CVE":"CVE-2014-1736","severity":"moderate","public_date":"2014-04-24T00:00:00Z","advisories":[],"bugzilla":"1094858","bugzilla_description":"CVE-2014-1736 v8: integer overflow can lead to a remote denial of service","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1736.json"},{"CVE":"CVE-2014-2734","severity":"low","public_date":"2014-04-10T00:00:00Z","advisories":[],"bugzilla":"1091156","bugzilla_description":"CVE-2014-2734 ruby: SSL signature spoofing flaw","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2734.json"},{"CVE":"CVE-2014-3916","severity":"low","public_date":"2014-04-07T00:00:00Z","advisories":[],"bugzilla":"1164844","bugzilla_description":"CVE-2014-3916 ruby: DoS via long string in str_buf_cat()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3916.json"},{"CVE":"CVE-2014-1735","severity":"moderate","public_date":"2014-04-04T00:00:00Z","advisories":[],"bugzilla":"1091838","bugzilla_description":"CVE-2014-1735 v8: multiple vulnerabilities fixed in Google Chrome 34.0.1847.131","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1735.json"},{"CVE":"CVE-2014-1730","severity":"moderate","public_date":"2014-04-01T00:00:00Z","advisories":[],"bugzilla":"1091834","bugzilla_description":"CVE-2014-1730 v8: type confusion issue fixed in Google Chrome 34.0.1847.131","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1730.json"},{"CVE":"CVE-2014-3152","severity":"moderate","public_date":"2014-03-31T00:00:00Z","advisories":[],"bugzilla":"1101056","bugzilla_description":"CVE-2014-3152 v8: integer underflow fixed in Google Chrome 35.0.1916.114","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3152.json"},{"CVE":"CVE-2014-2525","severity":"important","public_date":"2014-03-27T00:00:00Z","advisories":["RHSA-2014:0355","RHSA-2014:0353","RHSA-2014:0364","RHSA-2014:0354","RHSA-2014:0415"],"bugzilla":"1078083","bugzilla_description":"CVE-2014-2525 libyaml: heap-based buffer overflow when parsing URLs","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libyaml-0:0.1.3-1.4.el6","ruby193-libyaml-0:0.1.4-5.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2525.json"},{"CVE":"CVE-2014-0089","severity":"moderate","public_date":"2014-03-24T00:00:00Z","advisories":["RHEA-2014:1175"],"bugzilla":"1071741","bugzilla_description":"CVE-2014-0089 Foreman: Stored Cross Site Scripting","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-79","affected_packages":["foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0089.json"},{"CVE":"CVE-2014-0090","severity":"low","public_date":"2014-03-24T00:00:00Z","advisories":["RHEA-2014:1175"],"bugzilla":"1072151","bugzilla_description":"CVE-2014-0090 Foreman: Session fixation","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":"CWE-384","affected_packages":["foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0090.json"},{"CVE":"CVE-2014-1716","severity":"moderate","public_date":"2014-03-20T00:00:00Z","advisories":[],"bugzilla":"1086112","bugzilla_description":"CVE-2014-1716 v8: cross-site scripting flaw in Runtime_SetPrototype()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1716.json"},{"CVE":"CVE-2014-1717","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1086113","bugzilla_description":"CVE-2014-1717 v8: numeric casting issues","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1717.json"},{"CVE":"CVE-2014-1705","severity":"moderate","public_date":"2014-03-14T00:00:00Z","advisories":[],"bugzilla":"1077141","bugzilla_description":"CVE-2014-1705 v8: ArrayBuffer memory corruption fixed in Chrome 33.0.1750.152","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1705.json"},{"CVE":"CVE-2014-1721","severity":"moderate","public_date":"2014-03-12T00:00:00Z","advisories":[],"bugzilla":"1086116","bugzilla_description":"CVE-2014-1721 v8: memory corruption issue fixed in Google Chrome 34.0.1847.116","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1721.json"},{"CVE":"CVE-2014-0036","severity":"moderate","public_date":"2014-03-05T00:00:00Z","advisories":[],"bugzilla":"1058595","bugzilla_description":"CVE-2014-0036 rubygem-rbovirt: unsafe use of rest-client","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0036.json"},{"CVE":"CVE-2014-1729","severity":"moderate","public_date":"2014-02-27T00:00:00Z","advisories":[],"bugzilla":"1086120","bugzilla_description":"CVE-2014-1729 v8: multiple unspecified vulnerabilities fixed in Google Chrome 34.0.1847.116","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1729.json"},{"CVE":"CVE-2014-0080","severity":"moderate","public_date":"2014-02-18T00:00:00Z","advisories":[],"bugzilla":"1065517","bugzilla_description":"CVE-2014-0080 rubygem-activerecord: PostgreSQL array data injection vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0080.json"},{"CVE":"CVE-2014-0081","severity":"moderate","public_date":"2014-02-18T00:00:00Z","advisories":["RHSA-2014:0215","RHSA-2014:0306"],"bugzilla":"1065520","bugzilla_description":"CVE-2014-0081 rubygem-actionpack: number_to_currency, number_to_percentage and number_to_human XSS vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ruby193-rubygem-actionpack-1:3.2.13-5.el6cf","ruby193-rubygem-actionpack-1:3.2.8-5.3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0081.json"},{"CVE":"CVE-2014-0082","severity":"moderate","public_date":"2014-02-18T00:00:00Z","advisories":["RHSA-2014:0215","RHSA-2014:0306"],"bugzilla":"1065538","bugzilla_description":"CVE-2014-0082 rubygem-actionpack: Action View string handling denial of service","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ruby193-rubygem-actionpack-1:3.2.13-5.el6cf","ruby193-rubygem-actionpack-1:3.2.8-5.3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0082.json"},{"CVE":"CVE-2013-6668","severity":"moderate","public_date":"2014-02-18T00:00:00Z","advisories":["RHSA-2014:1744","RHBA-2018:0337"],"bugzilla":"1074737","bugzilla_description":"CVE-2013-6668 v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.146","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["v8-1:3.14.5.10-19.el7sat","v8314-v8-1:3.14.5.10-6.el7","v8314-v8-1:3.14.5.10-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6668.json"},{"CVE":"CVE-2014-0084","severity":"low","public_date":"2014-02-14T00:00:00Z","advisories":["RHBA-2014:0487"],"bugzilla":"1065198","bugzilla_description":"CVE-2014-0084 rubygem-openshift-origin-node: cron.daily/cron.weekly denial of service","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["rubygem-openshift-origin-node-0:1.23.9.3-1.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0084.json"},{"CVE":"CVE-2014-0083","severity":"low","public_date":"2014-02-12T00:00:00Z","advisories":[],"bugzilla":"1065086","bugzilla_description":"CVE-2014-0083 rubygem-net-ldap: SSHA passwords generated by the net-ldap Ruby gem use a weak salt","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0083.json"},{"CVE":"CVE-2014-1831","severity":"low","public_date":"2014-01-28T00:00:00Z","advisories":[],"bugzilla":"1058992","bugzilla_description":"CVE-2014-1831 CVE-2014-1832 rubygem-passenger: insecure use of temporary files","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1831.json"},{"CVE":"CVE-2014-1832","severity":"low","public_date":"2014-01-28T00:00:00Z","advisories":[],"bugzilla":"1058992","bugzilla_description":"CVE-2014-1831 CVE-2014-1832 rubygem-passenger: insecure use of temporary files","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1832.json"},{"CVE":"CVE-2013-6393","severity":"moderate","public_date":"2014-01-27T00:00:00Z","advisories":["RHSA-2014:0355","RHSA-2014:0353","RHSA-2014:0364","RHSA-2014:0354","RHSA-2014:0415"],"bugzilla":"1033990","bugzilla_description":"CVE-2013-6393 libyaml: heap-based buffer overflow when parsing YAML tags","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libyaml-0:0.1.3-1.4.el6","ruby193-libyaml-0:0.1.4-5.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6393.json"},{"CVE":"CVE-2014-1704","severity":"low","public_date":"2014-01-14T00:00:00Z","advisories":["RHSA-2014:1744","RHEA-2014:1175"],"bugzilla":"1077136","bugzilla_description":"CVE-2014-1704 v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.149","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["v8314-v8-1:3.14.5.10-6.el7","v8-1:3.14.5.10-11.el7sat","v8314-v8-1:3.14.5.10-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1704.json"},{"CVE":"CVE-2013-6650","severity":"moderate","public_date":"2014-01-08T00:00:00Z","advisories":["RHSA-2014:1744","RHEA-2014:1175"],"bugzilla":"1059070","bugzilla_description":"CVE-2013-6650 v8: incorrect handling of popular pages","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-480","affected_packages":["v8314-v8-1:3.14.5.10-6.el7","v8-1:3.14.5.10-11.el7sat","v8314-v8-1:3.14.5.10-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6650.json"},{"CVE":"CVE-2013-4969","severity":"low","public_date":"2013-12-26T00:00:00Z","advisories":[],"bugzilla":"1045212","bugzilla_description":"CVE-2013-4969 Puppet: Unsafe use of Temp files in File type","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4969.json"},{"CVE":"CVE-2013-6459","severity":"moderate","public_date":"2013-12-24T00:00:00Z","advisories":["RHSA-2018:0336"],"bugzilla":"1046642","bugzilla_description":"CVE-2013-6459 rubygem-will_paginate: XSS vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2013-6460","severity":"moderate","public_date":"2013-12-15T00:00:00Z","advisories":[],"bugzilla":"1046663","bugzilla_description":"CVE-2013-6460 rubygem-nokogiri: DoS while parsing XML documents","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6460.json"},{"CVE":"CVE-2013-6461","severity":"moderate","public_date":"2013-12-15T00:00:00Z","advisories":[],"bugzilla":"1046664","bugzilla_description":"CVE-2013-6461 rubygem-nokogiri: DoS while parsing XML entities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6461.json"},{"CVE":"CVE-2013-4492","severity":"moderate","public_date":"2013-12-04T00:00:00Z","advisories":["RHSA-2018:0380","RHBA-2015:1100"],"bugzilla":"1039435","bugzilla_description":"CVE-2013-4492 rubygem-i18n: cross-site scripting flaw in exception handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["httpd-configmap-generator-0:0.2.1-1.el7cf","cfme-gemset-0:5.4.0.5-1.el6cf","cfme-amazon-smartstate-0:5.9.0.22-1.el7cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4492.json"},{"CVE":"CVE-2013-6638","severity":"moderate","public_date":"2013-12-04T00:00:00Z","advisories":[],"bugzilla":"1039887","bugzilla_description":"CVE-2013-6638 v8: multiple buffer overflows in runtime.cc","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6638.json"},{"CVE":"CVE-2013-6639","severity":"moderate","public_date":"2013-12-04T00:00:00Z","advisories":["RHSA-2014:1744","RHEA-2014:1175"],"bugzilla":"1039888","bugzilla_description":"CVE-2013-6639 v8: DoS (out-of-bounds write) in DehoistArrayIndex function in hydrogen.cc","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["v8314-v8-1:3.14.5.10-6.el7","v8-1:3.14.5.10-11.el7sat","v8314-v8-1:3.14.5.10-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6639.json"},{"CVE":"CVE-2013-6640","severity":"moderate","public_date":"2013-12-04T00:00:00Z","advisories":["RHSA-2014:1744","RHEA-2014:1175"],"bugzilla":"1039889","bugzilla_description":"CVE-2013-6640 v8: DoS (out-of-bounds read) in DehoistArrayIndex function in hydrogen.cc","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["v8314-v8-1:3.14.5.10-6.el7","v8-1:3.14.5.10-11.el7sat","v8314-v8-1:3.14.5.10-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6640.json"},{"CVE":"CVE-2013-6417","severity":"important","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:0469","RHSA-2014:0008","RHSA-2013:1794"],"bugzilla":"1036409","bugzilla_description":"CVE-2013-6417 rubygem-actionpack: unsafe query generation risk (incomplete fix for CVE-2013- 0155)","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-89","affected_packages":["ruby193-rubygem-actionpack-1:3.2.13-6.el6cf","ruby193-rubygem-actionpack-1:3.2.8-5.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6417.json"},{"CVE":"CVE-2013-6414","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:1863","RHSA-2014:0008","RHSA-2013:1794"],"bugzilla":"1036483","bugzilla_description":"CVE-2013-6414 rubygem-actionpack: Action View DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["ruby193-rubygem-actionpack-1:3.2.8-5.1.el6","ruby193-rubygem-actionpack-1:3.2.17-6.el6sam"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6414.json"},{"CVE":"CVE-2013-6415","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:1863","RHSA-2014:0008","RHSA-2013:1794"],"bugzilla":"1036910","bugzilla_description":"CVE-2013-6415 rubygem-actionpack: number_to_currency XSS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ruby193-rubygem-actionpack-1:3.2.8-5.1.el6","ruby193-rubygem-actionpack-1:3.2.17-6.el6sam"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6415.json"},{"CVE":"CVE-2013-6416","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":[],"bugzilla":"1036914","bugzilla_description":"CVE-2013-6416 rubygem-actionpack: simple_format XSS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6416.json"},{"CVE":"CVE-2013-4491","severity":"moderate","public_date":"2013-12-03T00:00:00Z","advisories":["RHSA-2014:1863","RHSA-2014:0008","RHSA-2013:1794"],"bugzilla":"1036922","bugzilla_description":"CVE-2013-4491 rubygem-actionpack: i18n missing translation XSS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ruby193-rubygem-actionpack-1:3.2.8-5.1.el6","ruby193-rubygem-actionpack-1:3.2.17-6.el6sam"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4491.json"},{"CVE":"CVE-2013-4164","severity":"critical","public_date":"2013-11-22T00:00:00Z","advisories":["RHSA-2014:0215","RHSA-2013:1767","RHSA-2013:1764","RHSA-2014:0011","RHSA-2013:1763"],"bugzilla":"1033460","bugzilla_description":"CVE-2013-4164 ruby: heap overflow in floating point parsing","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-228->CWE-122","affected_packages":["ruby-0:1.8.7.352-13.el6","ruby-0:1.8.7.352-13.el6_2","ruby-0:1.8.7.352-13.el6_4","ruby-0:1.8.7.352-13.el6_3","ruby193-ruby-0:1.9.3.448-40.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4164.json"},{"CVE":"CVE-2014-0091","severity":"low","public_date":"2013-11-20T00:00:00Z","advisories":["RHEA-2014:1175"],"bugzilla":"1072738","bugzilla_description":"CVE-2014-0091 Foreman: Improper input validation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0091.json"},{"CVE":"CVE-2013-4389","severity":"low","public_date":"2013-10-16T00:00:00Z","advisories":["RHBA-2015:1100"],"bugzilla":"1013913","bugzilla_description":"CVE-2013-4389 rubygem-actionmailer: email address processing DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-134","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4389.json"},{"CVE":"CVE-2013-4386","severity":"moderate","public_date":"2013-10-07T00:00:00Z","advisories":["RHEA-2014:1175","RHSA-2013:1522"],"bugzilla":"1013076","bugzilla_description":"CVE-2013-4386 Foreman: host and host group parameter SQL injection","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-89","affected_packages":["ruby193-foreman-0:1.1.10014-1.3.el6ost","foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4386.json"},{"CVE":"CVE-2013-2919","severity":"important","public_date":"2013-10-01T00:00:00Z","advisories":[],"bugzilla":"1014863","bugzilla_description":"CVE-2013-2919 v8: remote denial of service via memory corruption","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2919.json"},{"CVE":"CVE-2013-4363","severity":"moderate","public_date":"2013-09-15T00:00:00Z","advisories":[],"bugzilla":"1009720","bugzilla_description":"CVE-2013-4363 rubygems: version regex algorithmic complexity vulnerability, incomplete CVE-2013-4287 fix","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4363.json"},{"CVE":"CVE-2013-4287","severity":"moderate","public_date":"2013-09-09T00:00:00Z","advisories":["RHSA-2013:1427","RHSA-2013:1852","RHSA-2014:0207","RHSA-2013:1523","RHSA-2013:1441"],"bugzilla":"1002364","bugzilla_description":"CVE-2013-4287 rubygems: version regex algorithmic complexity vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407->CWE-400","affected_packages":["rubygems-0:1.3.7-4.el6_4","ruby193-rubygems-0:1.8.24-9.el6ost","rubygems-0:1.8.24-5.el6op","rubygems-0:1.8.23.2-1.el6","ruby193-ruby-0:1.9.3.448-40.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4287.json"},{"CVE":"CVE-2013-4180","severity":"low","public_date":"2013-09-03T00:00:00Z","advisories":["RHSA-2013:1196","RHEA-2014:1175"],"bugzilla":"989755","bugzilla_description":"CVE-2013-4180 Foreman: hosts_controller.rb power/ipmi_boot Symbol creation DoS","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-20->CWE-400","affected_packages":["ruby193-foreman-0:1.1.10014-1.2.el6ost","foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4180.json"},{"CVE":"CVE-2013-4182","severity":"important","public_date":"2013-09-03T00:00:00Z","advisories":["RHSA-2013:1196","RHEA-2014:1175"],"bugzilla":"990374","bugzilla_description":"CVE-2013-4182 foreman: app/controllers/api/v1/hosts_controller.rb API privilege escalation","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-862","affected_packages":["ruby193-foreman-0:1.1.10014-1.2.el6ost","foreman-0:1.6.0.44-1.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4182.json"},{"CVE":"CVE-2013-4956","severity":"moderate","public_date":"2013-08-15T00:00:00Z","advisories":["RHSA-2013:1283","RHSA-2013:1284"],"bugzilla":"996855","bugzilla_description":"CVE-2013-4956 Puppet: Local Privilege Escalation/Arbitrary Code Execution","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["puppet-0:3.2.4-1.el6_4","ruby193-puppet-0:3.1.1-11.1.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4956.json"},{"CVE":"CVE-2013-4761","severity":"moderate","public_date":"2013-08-15T00:00:00Z","advisories":["RHSA-2013:1283","RHSA-2013:1284"],"bugzilla":"996856","bugzilla_description":"CVE-2013-4761 Puppet: resource_type service code execution","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["puppet-0:3.2.4-1.el6_4","ruby193-puppet-0:3.1.1-11.1.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4761.json"},{"CVE":"CVE-2013-2882","severity":"moderate","public_date":"2013-07-30T00:00:00Z","advisories":["RHEA-2014:1175","RHSA-2013:1201"],"bugzilla":"991116","bugzilla_description":"CVE-2013-2882 v8: remote DoS or unspecified other impact via type confusion","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ruby193-v8-1:3.14.5.10-2.el6","v8-1:3.14.5.10-11.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2882.json"},{"CVE":"CVE-2014-2538","severity":"moderate","public_date":"2013-07-09T00:00:00Z","advisories":[],"bugzilla":"1078612","bugzilla_description":"CVE-2014-2538 rubygem rack-ssl: URL error display XSS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2538.json"},{"CVE":"CVE-2013-4073","severity":"moderate","public_date":"2013-06-27T00:00:00Z","advisories":["RHSA-2013:1090","RHSA-2013:1137","RHSA-2013:1103"],"bugzilla":"979251","bugzilla_description":"CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby193-ruby-0:1.9.3.448-38.el6","ruby193-ruby-0:1.9.3.429-34.2.el6ost","ruby-0:1.8.5-31.el5_9","ruby-0:1.8.7.352-12.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4073.json"},{"CVE":"CVE-2013-4136","severity":"moderate","public_date":"2013-06-20T00:00:00Z","advisories":["RHSA-2013:1136"],"bugzilla":"985633","bugzilla_description":"CVE-2013-4136 rubygem-passenger: insecure temporary directory usage due to reuse of existing server instance directories","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ruby193-rubygem-passenger-0:3.0.21-3.el6op","rubygem-passenger-0:3.0.21-3.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4136.json"},{"CVE":"CVE-2013-3567","severity":"critical","public_date":"2013-06-18T00:00:00Z","advisories":["RHSA-2013:1283","RHSA-2013:1284"],"bugzilla":"974649","bugzilla_description":"CVE-2013-3567 puppet: remote code execution on master from unauthenticated clients","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["puppet-0:3.2.4-1.el6_4","ruby193-puppet-0:3.1.1-11.1.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3567.json"},{"CVE":"CVE-2013-2119","severity":"moderate","public_date":"2013-05-29T00:00:00Z","advisories":["RHSA-2013:1136"],"bugzilla":"892813","bugzilla_description":"CVE-2013-2119 rubygem-passenger: incorrect temporary file usage","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":["ruby193-rubygem-passenger-0:3.0.21-3.el6op","rubygem-passenger-0:3.0.21-3.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2119.json"},{"CVE":"CVE-2013-2065","severity":"low","public_date":"2013-05-14T00:00:00Z","advisories":[],"bugzilla":"962035","bugzilla_description":"CVE-2013-2065 Ruby: Object taint bypassing in DL and Fiddle","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2065.json"},{"CVE":"CVE-2013-2035","severity":"low","public_date":"2013-05-13T00:00:00Z","advisories":["RHSA-2014:1290","RHSA-2014:1291","RHSA-2014:1995","RHSA-2014:0245","RHSA-2014:0400","RHSA-2014:0254","RHSA-2014:0029","RHSA-2014:0401","RHSA-2013:1029","RHSA-2015:0034","RHSA-2014:1904","RHSA-2013:1786","RHSA-2013:1784","RHSA-2013:1785"],"bugzilla":"958618","bugzilla_description":"CVE-2013-2035 HawtJNI: predictable temporary file name leading to local arbitrary code execution","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-377","affected_packages":["jansi-0:1.9-5.redhat_3.1.ep6.el5","activemq-0:5.9.0-4.redhat.610328.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2035.json"},{"CVE":"CVE-2013-2060","severity":"important","public_date":"2013-05-06T00:00:00Z","advisories":[],"bugzilla":"960363","bugzilla_description":"CVE-2013-2060 OpenShift: Potential remote command execution vulnerability in download cart url","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2060.json"},{"CVE":"CVE-2013-1854","severity":"moderate","public_date":"2013-03-18T00:00:00Z","advisories":["RHSA-2014:1863","RHSA-2013:0699"],"bugzilla":"921329","bugzilla_description":"CVE-2013-1854 rubygem-activerecord: attribute_dos Symbol DoS vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["ruby193-rubygem-activerecord-1:3.2.8-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1854.json"},{"CVE":"CVE-2013-1855","severity":"moderate","public_date":"2013-03-18T00:00:00Z","advisories":["RHSA-2014:1863","RHSA-2013:0698"],"bugzilla":"921331","bugzilla_description":"CVE-2013-1855 rubygem-actionpack: css_sanitization: XSS vulnerability in sanitize_css","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rubygem-actionpack-1:3.0.13-8.el6op","ruby193-rubygem-actionpack-1:3.2.8-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1855.json"},{"CVE":"CVE-2013-1857","severity":"moderate","public_date":"2013-03-18T00:00:00Z","advisories":["RHSA-2014:1863","RHSA-2013:0698"],"bugzilla":"921335","bugzilla_description":"CVE-2013-1857 rubygem-actionpack: sanitize_protocol: XSS Vulnerability in the  helper of Ruby on Rails","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rubygem-actionpack-1:3.0.13-8.el6op","ruby193-rubygem-actionpack-1:3.2.8-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1857.json"},{"CVE":"CVE-2013-1821","severity":"moderate","public_date":"2013-02-22T00:00:00Z","advisories":["RHSA-2013:1185","RHSA-2013:0612","RHSA-2013:1028","RHSA-2013:0611","RHSA-2013:1147"],"bugzilla":"914716","bugzilla_description":"CVE-2013-1821 ruby: entity expansion DoS vulnerability in REXML","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ruby-0:1.8.5-29.el5_9","ruby-0:1.8.7.352-10.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1821.json"},{"CVE":"CVE-2012-6135","severity":"low","public_date":"2013-02-17T00:00:00Z","advisories":[],"bugzilla":"917925","bugzilla_description":"CVE-2012-6135 rubygem-passenger: untrusted apps Security check socket filenames reported by spawned application processes","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6135.json"},{"CVE":"CVE-2013-0269","severity":"moderate","public_date":"2013-02-11T00:00:00Z","advisories":["RHSA-2013:1185","RHSA-2013:0701","RHSA-2013:0686","RHSA-2013:1028","RHSA-2013:1147"],"bugzilla":"909029","bugzilla_description":"CVE-2013-0269 rubygem-json: Denial of Service and SQL Injection","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["rubygem-json-0:1.7.3-2.el6_3","ruby193-ruby-0:1.9.3.327-28.el6","rubygem-json-0:1.7.3-2.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0269.json"},{"CVE":"CVE-2013-0276","severity":"moderate","public_date":"2013-02-11T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2013:0686"],"bugzilla":"909528","bugzilla_description":"CVE-2013-0276 rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby193-rubygem-activemodel-0:3.2.8-2.el6","rubygem-activemodel-0:3.0.10-3.el6cf","rubygem-activemodel-0:3.0.13-3.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0276.json"},{"CVE":"CVE-2013-0277","severity":"critical","public_date":"2013-02-11T00:00:00Z","advisories":[],"bugzilla":"909633","bugzilla_description":"CVE-2013-0277 rubygem-activerecord: Serialized Attributes YAML Vulnerability with Rails 2.3 and 3.0","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0277.json"},{"CVE":"CVE-2013-0263","severity":"moderate","public_date":"2013-02-08T00:00:00Z","advisories":["RHSA-2013:0638","RHSA-2013:0686"],"bugzilla":"909071","bugzilla_description":"CVE-2013-0263 rubygem-rack: Timing attack in cookie sessions","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rubygem-rack-1:1.3.0-4.el6cf","rubygem-rack-1:1.3.0-4.el6op","ruby193-rubygem-rack-1:1.4.1-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0263.json"},{"CVE":"CVE-2013-0262","severity":"moderate","public_date":"2013-02-08T00:00:00Z","advisories":["RHSA-2013:0638"],"bugzilla":"909072","bugzilla_description":"CVE-2013-0262 rubygem-rack: Path sanitization information disclosure","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rubygem-rack-1:1.3.0-4.el6op","ruby193-rubygem-rack-1:1.4.1-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0262.json"},{"CVE":"CVE-2013-3221","severity":"low","public_date":"2013-02-07T00:00:00Z","advisories":[],"bugzilla":"954365","bugzilla_description":"CVE-2013-3221 rubygem-activerecord: Data-type injection attacks due absent database column data type (input vs stored value) check","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3221.json"},{"CVE":"CVE-2013-0256","severity":"moderate","public_date":"2013-02-06T00:00:00Z","advisories":["RHSA-2013:0728","RHSA-2013:0548","RHSA-2013:0701","RHSA-2013:0686"],"bugzilla":"907820","bugzilla_description":"CVE-2013-0256 rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rubygem-rdoc-0:3.8-9.el6op","ruby193-ruby-0:1.9.3.327-28.el6","rubygem-rdoc-0:3.8-6.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0256.json"},{"CVE":"CVE-2013-0333","severity":"critical","public_date":"2013-01-28T00:00:00Z","advisories":["RHSA-2013:0203","RHSA-2013:0202","RHSA-2013:0201"],"bugzilla":"903440","bugzilla_description":"CVE-2013-0333 rubygem-activesupport: json to yaml parsing","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["rubygem-activesupport-1:3.0.13-4.el6op","rubygem-activesupport-1:3.0.10-7.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0333.json"},{"CVE":"CVE-2013-0162","severity":"low","public_date":"2013-01-21T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2013:0548","RHSA-2013:0544"],"bugzilla":"892806","bugzilla_description":"CVE-2013-0162 rubygem-ruby_parser: incorrect temporary file usage","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op","rubygem-ruby_parser-0:2.0.4-6.el6cf","rubygem-ruby_parser-0:2.0.4-6.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0162.json"},{"CVE":"CVE-2013-1800","severity":"important","public_date":"2013-01-14T00:00:00Z","advisories":[],"bugzilla":"917236","bugzilla_description":"CVE-2013-1800 rubygem-crack: YAML parameter parsing vulnerability","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1800.json"},{"CVE":"CVE-2013-0155","severity":"important","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2013:0155","RHSA-2013:0154"],"bugzilla":"892866","bugzilla_description":"CVE-2013-0155 rubygem-actionpack, rubygem-activerecord: Unsafe Query Generation Risk in Ruby on Rails","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-89","affected_packages":["rubygem-actionpack-1:3.0.10-11.el6cf","ruby193-rubygem-actionpack-1:3.2.8-3.el6","rubygem-actionpack-1:3.0.13-4.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0155.json"},{"CVE":"CVE-2013-0156","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0153","RHSA-2013:0155","RHSA-2013:0154"],"bugzilla":"892870","bugzilla_description":"CVE-2013-0156 rubygem-activesupport: Multiple vulnerabilities in parameter parsing in ActionPack","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["ruby193-rubygem-activesupport-1:3.2.8-3.el6","rubygem-activesupport-1:3.0.13-2.el6op","rubygem-activesupport-1:3.0.10-5.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0156.json"},{"CVE":"CVE-2013-0183","severity":"moderate","public_date":"2013-01-07T00:00:00Z","advisories":["RHSA-2013:0548","RHSA-2013:0544"],"bugzilla":"895282","bugzilla_description":"CVE-2013-0183 rubygem-rack: receiving excessively long lines triggers out-of-memory error","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["rubygem-rack-1:1.3.0-3.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0183.json"},{"CVE":"CVE-2012-5664","severity":"moderate","public_date":"2012-12-21T00:00:00Z","advisories":[],"bugzilla":"889649","bugzilla_description":"CVE-2012-6496 rubygem-activerecord: find_by_* SQL Injection","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-89","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5664.json"},{"CVE":"CVE-2012-6496","severity":"moderate","public_date":"2012-12-21T00:00:00Z","advisories":["RHSA-2013:0155","RHSA-2013:0154","RHSA-2013:0220"],"bugzilla":"889649","bugzilla_description":"CVE-2012-6496 rubygem-activerecord: find_by_* SQL Injection","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-89","affected_packages":["ruby193-rubygem-activerecord-1:3.2.8-2.el6","rubygem-activerecord-1:3.0.10-8.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6496.json"},{"CVE":"CVE-2012-5604","severity":"important","public_date":"2012-12-04T00:00:00Z","advisories":[],"bugzilla":"882136","bugzilla_description":"CVE-2012-5604 rubygem-ldap_fluff: CloudForms authentication bypass when handling anonymous LDAP bind","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5604.json"},{"CVE":"CVE-2012-6662","severity":"moderate","public_date":"2012-11-27T00:00:00Z","advisories":["RHSA-2015:0442","RHSA-2015:1462"],"bugzilla":"1166064","bugzilla_description":"CVE-2012-6662 jquery-ui: XSS vulnerability in default content in Tooltip widget","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:3.0.0-47.el6","ipa-0:4.1.0-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6662.json"},{"CVE":"CVE-2012-4522","severity":"moderate","public_date":"2012-10-12T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2013:0129"],"bugzilla":"865940","bugzilla_description":"CVE-2012-4522 ruby: unintentional file creation caused by inserting an illegal NUL character","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-626","affected_packages":["ruby-0:1.8.5-27.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4522.json"},{"CVE":"CVE-2012-4481","severity":"low","public_date":"2012-10-05T00:00:00Z","advisories":["RHSA-2013:0129","RHSA-2013:0612"],"bugzilla":"863484","bugzilla_description":"CVE-2012-4481 ruby: Incomplete fix for CVE-2011-1005 for NameError#to_s method when used on objects","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby-0:1.8.7.352-10.el6_4","ruby-0:1.8.5-27.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4481.json"},{"CVE":"CVE-2012-4466","severity":"low","public_date":"2012-10-02T00:00:00Z","advisories":["RHSA-2013:0582"],"bugzilla":"862614","bugzilla_description":"CVE-2012-4466 ruby: safe level bypass via name_err_mesg_to_str()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4466.json"},{"CVE":"CVE-2012-4464","severity":"low","public_date":"2012-09-28T00:00:00Z","advisories":["RHSA-2013:0582"],"bugzilla":"862598","bugzilla_description":"CVE-2012-4464 ruby 1.9.3: Possibility to bypass Ruby's $SAFE (level 4) semantics","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4464.json"},{"CVE":"CVE-2012-3463","severity":"moderate","public_date":"2012-08-09T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"847196","bugzilla_description":"CVE-2012-3463 rubygem-actionpack: potential XSS vulnerability in select_tag prompt","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rubygem-actionpack-1:3.0.10-11.el6cf","rubygem-activerecord-1:3.0.13-5.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3463.json"},{"CVE":"CVE-2012-3464","severity":"moderate","public_date":"2012-08-09T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"847199","bugzilla_description":"CVE-2012-3464 rubygem-actionpack: potential XSS vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rubygem-actionpack-1:3.0.10-11.el6cf","rubygem-activerecord-1:3.0.13-5.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3464.json"},{"CVE":"CVE-2012-3465","severity":"moderate","public_date":"2012-08-09T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"847200","bugzilla_description":"CVE-2012-3465 rubygem-actionpack: XSS Vulnerability in strip_tags","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rubygem-actionpack-1:3.0.10-11.el6cf","rubygem-activerecord-1:3.0.13-5.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3465.json"},{"CVE":"CVE-2012-3424","severity":"low","public_date":"2012-07-26T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"843711","bugzilla_description":"CVE-2012-3424 rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["rubygem-actionpack-1:3.0.10-11.el6cf","ruby193-rubygem-actionpack-1:3.2.8-3.el6","rubygem-actionpack-1:3.0.13-4.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3424.json"},{"CVE":"CVE-2012-2695","severity":"low","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"831573","bugzilla_description":"CVE-2012-2695 rubygem-activerecord: SQL injection when processing nested query paramaters (a different flaw than CVE-2012-2661)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-89","affected_packages":["rubygem-activerecord-1:3.0.13-5.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2695.json"},{"CVE":"CVE-2012-2694","severity":"low","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"831581","bugzilla_description":"CVE-2012-2694 rubygem-actionpack: Unsafe query generation (a different flaw than CVE-2012-2660)","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-138->CWE-305","affected_packages":["rubygem-activerecord-1:3.0.13-5.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2694.json"},{"CVE":"CVE-2012-6685","severity":"moderate","public_date":"2012-06-06T00:00:00Z","advisories":["RHSA-2019:0212"],"bugzilla":"1178970","bugzilla_description":"CVE-2012-6685 rubygem-nokogiri: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["rubygem-nokogiri-0:1.8.2-1.el7cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6685.json"},{"CVE":"CVE-2012-2660","severity":"low","public_date":"2012-05-31T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"827353","bugzilla_description":"CVE-2012-2660 rubygem-actionpack: Unsafe query generation","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rubygem-actionpack-1:3.0.10-10.el6cf","rubygem-actionpack-1:3.0.10-11.el6cf","rubygem-actionpack-1:3.0.13-4.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2660.json"},{"CVE":"CVE-2012-2661","severity":"low","public_date":"2012-05-31T00:00:00Z","advisories":["RHSA-2013:0582","RHSA-2012:1542","RHSA-2013:0154"],"bugzilla":"827363","bugzilla_description":"CVE-2012-2661 rubygem-activerecord: SQL injection when processing nested query paramaters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["rubygem-activerecord-1:3.0.13-5.el6op","rubygem-activerecord-1:3.0.10-6.el6cf","rubygem-activerecord-1:3.0.10-8.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2661.json"},{"CVE":"CVE-2012-6109","severity":"moderate","public_date":"2012-05-04T00:00:00Z","advisories":["RHSA-2013:0548","RHSA-2013:0544"],"bugzilla":"895277","bugzilla_description":"CVE-2012-6109 rubygem-rack: parsing Content-Disposition header DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["rubygem-rack-1:1.3.0-3.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6109.json"},{"CVE":"CVE-2013-0184","severity":"moderate","public_date":"2012-05-04T00:00:00Z","advisories":["RHSA-2013:0548","RHSA-2013:0544"],"bugzilla":"895384","bugzilla_description":"CVE-2013-0184 rubygem-rack: Rack::Auth::AbstractRequest DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["rubygem-rack-1:1.3.0-3.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0184.json"},{"CVE":"CVE-2012-2125","severity":"moderate","public_date":"2012-04-19T00:00:00Z","advisories":["RHSA-2013:1852","RHSA-2013:1203","RHSA-2013:1441"],"bugzilla":"814718","bugzilla_description":"CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rubygems-0:1.3.7-4.el6_4","rubygems-0:1.8.24-4.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2125.json"},{"CVE":"CVE-2012-2126","severity":"moderate","public_date":"2012-04-19T00:00:00Z","advisories":["RHSA-2013:1852","RHSA-2013:1203","RHSA-2013:1441"],"bugzilla":"814718","bugzilla_description":"CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rubygems-0:1.3.7-4.el6_4","rubygems-0:1.8.24-4.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2126.json"},{"CVE":"CVE-2012-2140","severity":"important","public_date":"2012-03-14T00:00:00Z","advisories":["RHSA-2012:1542"],"bugzilla":"816352","bugzilla_description":"CVE-2012-2140 rubygem-mail: arbitrary command execution when using exim or sendmail from commandline","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2140.json"},{"CVE":"CVE-2012-2139","severity":"low","public_date":"2012-03-14T00:00:00Z","advisories":["RHSA-2012:1542"],"bugzilla":"891762","bugzilla_description":"CVE-2012-2139 rubygem-mail: directory traversal","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2139.json"},{"CVE":"CVE-2012-1098","severity":"moderate","public_date":"2012-03-01T00:00:00Z","advisories":[],"bugzilla":"799275","bugzilla_description":"CVE-2012-1098 rubygem-activesupport: XSS in SafeBuffer#[] (unescaped safe buffers can be marked as safe)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1098.json"},{"CVE":"CVE-2012-1099","severity":"moderate","public_date":"2012-03-01T00:00:00Z","advisories":[],"bugzilla":"799276","bugzilla_description":"CVE-2012-1099 rubygem-actionpack: XSS in the 'select' helper","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1099.json"},{"CVE":"CVE-2012-6684","severity":"moderate","public_date":"2012-02-29T00:00:00Z","advisories":[],"bugzilla":"1179870","bugzilla_description":"CVE-2012-6684 rubygem-RedCloth: XSS vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6684.json"},{"CVE":"CVE-2011-4815","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":["RHSA-2012:0070","RHSA-2012:0069"],"bugzilla":"750564","bugzilla_description":"CVE-2011-4815 ruby: hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ruby-0:1.8.5-22.el5_7.1","ruby-0:1.8.1-18.el4","ruby-0:1.8.7.352-4.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4815.json"},{"CVE":"CVE-2011-5036","severity":"moderate","public_date":"2011-12-28T00:00:00Z","advisories":[],"bugzilla":"771149","bugzilla_description":"CVE-2011-5036 rubygem-rack: hash table collisions DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5036.json"},{"CVE":"CVE-2011-4319","severity":"moderate","public_date":"2011-11-18T00:00:00Z","advisories":[],"bugzilla":"755004","bugzilla_description":"CVE-2011-4319 rubygem-actionpack: XSS in the 'translate' helper method","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4319.json"},{"CVE":"CVE-2011-4121","severity":"important","public_date":"2011-11-03T00:00:00Z","advisories":[],"bugzilla":"751800","bugzilla_description":"CVE-2011-4121 ruby (openssl extension): Insecure way of creation exponent value by private RSA key generation","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4121.json"},{"CVE":"CVE-2011-3624","severity":"low","public_date":"2011-10-07T00:00:00Z","advisories":[],"bugzilla":"745636","bugzilla_description":"CVE-2011-3624 Ruby WEBrick::HTTPRequest X-Forwarded-* allows arbitrary data","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3624.json"},{"CVE":"CVE-2011-2686","severity":"low","public_date":"2011-07-02T00:00:00Z","advisories":[],"bugzilla":"722415","bugzilla_description":"CVE-2011-2686 CVE-2011-2705 CVE-2011-3009 ruby: Properly initialize the random number generator when forking new process","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2686.json"},{"CVE":"CVE-2011-2705","severity":"low","public_date":"2011-07-02T00:00:00Z","advisories":["RHSA-2011:1581"],"bugzilla":"722415","bugzilla_description":"CVE-2011-2686 CVE-2011-2705 CVE-2011-3009 ruby: Properly initialize the random number generator when forking new process","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["ruby-0:1.8.7.352-3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2705.json"},{"CVE":"CVE-2011-3009","severity":"low","public_date":"2011-07-02T00:00:00Z","advisories":["RHSA-2012:0070","RHSA-2011:1581"],"bugzilla":"722415","bugzilla_description":"CVE-2011-2686 CVE-2011-2705 CVE-2011-3009 ruby: Properly initialize the random number generator when forking new process","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["ruby-0:1.8.5-22.el5_7.1","ruby-0:1.8.7.352-3.el6","ruby-0:1.8.1-18.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3009.json"},{"CVE":"CVE-2011-0188","severity":"moderate","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0909","RHSA-2011:0908","RHSA-2011:0910"],"bugzilla":"682332","bugzilla_description":"CVE-2011-0188 ruby: memory corruption in BigDecimal on 64bit platforms","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ruby-0:1.8.7.299-7.el6_1.1","ruby-0:1.8.1-16.el4","ruby-0:1.8.5-19.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0188.json"},{"CVE":"CVE-2011-1004","severity":"moderate","public_date":"2011-02-18T00:00:00Z","advisories":["RHSA-2011:0909","RHSA-2011:0910"],"bugzilla":"678913","bugzilla_description":"CVE-2011-1004 Ruby: Symlink race condition by removing directory trees in fileutils module","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["ruby-0:1.8.7.299-7.el6_1.1","ruby-0:1.8.5-19.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1004.json"},{"CVE":"CVE-2011-1005","severity":"low","public_date":"2011-02-18T00:00:00Z","advisories":["RHSA-2011:0909","RHSA-2011:0908","RHSA-2011:0910"],"bugzilla":"678920","bugzilla_description":"CVE-2011-1005 Ruby: Untrusted codes able to modify arbitrary strings","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby-0:1.8.7.299-7.el6_1.1","ruby-0:1.8.1-16.el4","ruby-0:1.8.5-19.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1005.json"},{"CVE":"CVE-2010-5312","severity":"moderate","public_date":"2010-09-03T00:00:00Z","advisories":["RHSA-2015:0442","RHSA-2015:1462"],"bugzilla":"1166041","bugzilla_description":"CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:3.0.0-47.el6","ipa-0:4.1.0-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5312.json"},{"CVE":"CVE-2010-0541","severity":"low","public_date":"2010-05-27T00:00:00Z","advisories":["RHSA-2011:0909","RHSA-2011:0908"],"bugzilla":"587731","bugzilla_description":"CVE-2010-0541 Ruby WEBrick javascript injection flaw","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby-0:1.8.1-16.el4","ruby-0:1.8.5-19.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0541.json"},{"CVE":"CVE-2009-4492","severity":"low","public_date":"2010-01-11T00:00:00Z","advisories":["RHSA-2011:0909","RHSA-2011:0908"],"bugzilla":"554485","bugzilla_description":"CVE-2009-4492 ruby WEBrick log escape sequence","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby-0:1.8.1-16.el4","ruby-0:1.8.5-19.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4492.json"},{"CVE":"CVE-2009-4124","severity":"moderate","public_date":"2009-12-07T00:00:00Z","advisories":[],"bugzilla":"959916","bugzilla_description":"CVE-2009-4124 ruby: Heap-based buffer overflow in the rb_str_justify() function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4124.json"},{"CVE":"CVE-2007-0469","severity":"low","public_date":"2009-07-21T00:00:00Z","advisories":[],"bugzilla":"513048","bugzilla_description":"CVE-2007-0469 RubyGems: Specially-crafted Gem archive can overwrite system files","cvss_score":5.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0469.json"},{"CVE":"CVE-2009-1904","severity":"moderate","public_date":"2009-06-10T00:00:00Z","advisories":["RHSA-2009:1140"],"bugzilla":"504958","bugzilla_description":"CVE-2009-1904 ruby: DoS vulnerability in BigDecimal","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["ruby-0:1.8.1-7.el4_8.3","ruby-0:1.8.5-5.el5_3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1904.json"},{"CVE":"CVE-2009-5147","severity":"low","public_date":"2009-05-11T00:00:00Z","advisories":["RHSA-2018:0583"],"bugzilla":"1248935","bugzilla_description":"CVE-2009-5147 CVE-2015-7551 ruby: DL::dlopen could open a library with tainted library name","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-267","affected_packages":["rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby22-ruby-0:2.2.9-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5147.json"},{"CVE":"CVE-2015-7551","severity":"low","public_date":"2009-05-11T00:00:00Z","advisories":["RHSA-2018:0583"],"bugzilla":"1248935","bugzilla_description":"CVE-2009-5147 CVE-2015-7551 ruby: DL::dlopen could open a library with tainted library name","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-267","affected_packages":["rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby22-ruby-0:2.2.9-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7551.json"},{"CVE":"CVE-2009-0642","severity":"moderate","public_date":"2009-01-29T00:00:00Z","advisories":["RHSA-2009:1140"],"bugzilla":"486183","bugzilla_description":"CVE-2009-0642 ruby: Incorrect checks for validity of X.509 certificates","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["ruby-0:1.8.1-7.el4_8.3","ruby-0:1.8.5-5.el5_3.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0642.json"},{"CVE":"CVE-2008-4310","severity":"moderate","public_date":"2008-12-04T00:00:00Z","advisories":["RHSA-2008:0981"],"bugzilla":"470252","bugzilla_description":"CVE-2008-4310 ruby: Incomplete fix for CVE-2008-3656","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.6","ruby-0:1.8.1-7.el4_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4310.json"},{"CVE":"CVE-2008-3790","severity":"moderate","public_date":"2008-08-23T00:00:00Z","advisories":["RHSA-2008:0897"],"bugzilla":"460134","bugzilla_description":"CVE-2008-3790 ruby: DoS vulnerability in the REXML module","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.5","ruby-0:1.8.1-7.el4_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3790.json"},{"CVE":"CVE-2008-3443","severity":"moderate","public_date":"2008-08-14T00:00:00Z","advisories":["RHSA-2008:0896","RHSA-2008:0895","RHSA-2008:0897"],"bugzilla":"459266","bugzilla_description":"CVE-2008-3443 ruby: Memory allocation failure in Ruby regex engine (remotely exploitable DoS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.5","ruby-0:1.6.4-7.el2","ruby-0:1.8.1-7.el4_7.1","ruby-0:1.6.8-13.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3443.json"},{"CVE":"CVE-2008-3655","severity":"moderate","public_date":"2008-08-08T00:00:00Z","advisories":["RHSA-2008:0896","RHSA-2008:0895","RHSA-2008:0897"],"bugzilla":"458948","bugzilla_description":"CVE-2008-3655 ruby: multiple insufficient safe mode restrictions","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.5","ruby-0:1.6.4-7.el2","ruby-0:1.8.1-7.el4_7.1","ruby-0:1.6.8-13.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3655.json"},{"CVE":"CVE-2008-3656","severity":"moderate","public_date":"2008-08-08T00:00:00Z","advisories":["RHSA-2008:0897"],"bugzilla":"458953","bugzilla_description":"CVE-2008-3656 ruby: WEBrick DoS vulnerability (CPU consumption)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.5","ruby-0:1.8.1-7.el4_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3656.json"},{"CVE":"CVE-2008-3657","severity":"low","public_date":"2008-08-08T00:00:00Z","advisories":["RHSA-2008:0897"],"bugzilla":"458966","bugzilla_description":"CVE-2008-3657 ruby: missing \"taintness\" checks in dl module","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.5","ruby-0:1.8.1-7.el4_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3657.json"},{"CVE":"CVE-2008-3905","severity":"moderate","public_date":"2008-08-08T00:00:00Z","advisories":["RHSA-2008:0896","RHSA-2008:0897"],"bugzilla":"461495","bugzilla_description":"CVE-2008-3905 ruby: use of predictable source port and transaction id in DNS requests done by resolv.rb module","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.5","ruby-0:1.8.1-7.el4_7.1","ruby-0:1.6.8-13.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3905.json"},{"CVE":"CVE-2008-2376","severity":"moderate","public_date":"2008-07-01T00:00:00Z","advisories":["RHSA-2008:0562","RHSA-2008:0561"],"bugzilla":"453589","bugzilla_description":"CVE-2008-2376 ruby: integer overflows in rb_ary_fill() / Array#fill","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["ruby-0:1.8.5-5.el5_2.3","ruby-0:1.6.8-12.el3","ruby-0:1.6.4-6.el2","ruby-0:1.8.1-7.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2376.json"},{"CVE":"CVE-2008-2662","severity":"moderate","public_date":"2008-06-20T00:00:00Z","advisories":["RHSA-2008:0561"],"bugzilla":"450821","bugzilla_description":"CVE-2008-2662 ruby: Integer overflows in rb_str_buf_append()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["ruby-0:1.8.5-5.el5_2.3","ruby-0:1.8.1-7.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2662.json"},{"CVE":"CVE-2008-2663","severity":"moderate","public_date":"2008-06-20T00:00:00Z","advisories":["RHSA-2008:0562","RHSA-2008:0561"],"bugzilla":"450825","bugzilla_description":"CVE-2008-2663 ruby: Integer overflows in rb_ary_store()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["ruby-0:1.8.5-5.el5_2.3","ruby-0:1.6.8-12.el3","ruby-0:1.6.4-6.el2","ruby-0:1.8.1-7.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2663.json"},{"CVE":"CVE-2008-2664","severity":"low","public_date":"2008-06-20T00:00:00Z","advisories":["RHSA-2008:0562","RHSA-2008:0561"],"bugzilla":"450834","bugzilla_description":"CVE-2008-2664 ruby: Unsafe use of alloca in rb_str_format()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.3","ruby-0:1.6.8-12.el3","ruby-0:1.6.4-6.el2","ruby-0:1.8.1-7.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2664.json"},{"CVE":"CVE-2008-2725","severity":"moderate","public_date":"2008-06-20T00:00:00Z","advisories":["RHSA-2008:0562","RHSA-2008:0561"],"bugzilla":"451821","bugzilla_description":"CVE-2008-2725 ruby: integer overflow in rb_ary_splice/update/replace() - REALLOC_N","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["ruby-0:1.8.5-5.el5_2.3","ruby-0:1.6.8-12.el3","ruby-0:1.6.4-6.el2","ruby-0:1.8.1-7.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2725.json"},{"CVE":"CVE-2008-2726","severity":"moderate","public_date":"2008-06-20T00:00:00Z","advisories":["RHSA-2008:0562","RHSA-2008:0561"],"bugzilla":"451828","bugzilla_description":"CVE-2008-2726 ruby: integer overflow in rb_ary_splice/update/replace() - beg + rlen","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["ruby-0:1.8.5-5.el5_2.3","ruby-0:1.6.8-12.el3","ruby-0:1.6.4-6.el2","ruby-0:1.8.1-7.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2726.json"},{"CVE":"CVE-2008-1145","severity":"low","public_date":"2008-03-03T00:00:00Z","advisories":["RHSA-2008:0897"],"bugzilla":"435902","bugzilla_description":"CVE-2008-1145 ruby: webrick directory traversal","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["ruby-0:1.8.5-5.el5_2.5","ruby-0:1.8.1-7.el4_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1145.json"},{"CVE":"CVE-2007-5770","severity":"moderate","public_date":"2007-10-08T00:00:00Z","advisories":["RHSA-2007:0961","RHSA-2007:0965"],"bugzilla":"362081","bugzilla_description":"CVE-2007-5770 ruby insufficient verification of SSL certificate in various net::* modules","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.1-7.EL4.8.1","ruby-0:1.8.5-5.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5770.json"},{"CVE":"CVE-2007-5162","severity":"moderate","public_date":"2007-09-27T00:00:00Z","advisories":["RHSA-2007:0961","RHSA-2007:0965"],"bugzilla":"313691","bugzilla_description":"CVE-2007-5162 ruby Net:HTTP insufficient verification of SSL certificate","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.1-7.EL4.8.1","ruby-0:1.8.5-5.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5162.json"},{"CVE":"CVE-2007-1558","severity":"moderate","public_date":"2007-04-02T00:00:00Z","advisories":["RHSA-2009:1140","RHSA-2007:0385","RHSA-2007:0344","RHSA-2007:0353","RHSA-2007:0386","RHSA-2007:0401","RHSA-2007:0402"],"bugzilla":"241191","bugzilla_description":"CVE-2007-1558 fetchmail/mutt/evolution/...: APOP password disclosure vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:1.5.0.12-0.1.el4","evolution-0:2.0.2-35.0.2.el4","fetchmail-0:5.9.0-21.7.3.el2.1.6","mutt-5:1.4.1-5.el3","fetchmail-0:6.2.5-6.0.1.el4","ruby-0:1.8.1-7.el4_8.3","evolution-data-server-0:1.8.0-15.0.3.el5","thunderbird-0:1.5.0.12-1.el5","ruby-0:1.8.5-5.el5_3.7","fetchmail-0:6.3.6-1.0.1.el5","mutt-5:1.4.2.2-3.0.2.el5","mutt-5:1.4.1-12.0.3.el4","evolution-0:1.4.5-20.el3","seamonkey-0:1.0.9-0.1.el3","seamonkey-0:1.0.9-0.1.el2","fetchmail-0:6.2.0-3.el3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1558.json"},{"CVE":"CVE-2006-6303","severity":"low","public_date":"2006-12-04T00:00:00Z","advisories":["RHSA-2008:0562","RHSA-2007:0961"],"bugzilla":"218287","bugzilla_description":"CVE-2006-6303 ruby's cgi.rb vulnerable infinite loop DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["ruby-0:1.8.1-7.EL4.8.1","ruby-0:1.6.8-12.el3","ruby-0:1.6.4-6.el2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-6303.json"},{"CVE":"CVE-2006-5467","severity":"moderate","public_date":"2006-10-25T00:00:00Z","advisories":["RHSA-2006:0729"],"bugzilla":"212396","bugzilla_description":"CVE-2006-5467 Ruby CGI multipart parsing DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.6.4-2.AS21.4","ruby-0:1.6.8-9.EL3.8","ruby-0:1.8.1-7.EL4.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5467.json"},{"CVE":"CVE-2006-3694","severity":"moderate","public_date":"2006-07-11T00:00:00Z","advisories":["RHSA-2006:0604"],"bugzilla":"1618154","bugzilla_description":"CVE-2006-3694 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.1-7.EL4.6","ruby-0:1.6.8-9.EL3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3694.json"},{"CVE":"CVE-2005-2337","severity":"moderate","public_date":"2005-09-23T00:00:00Z","advisories":["RHSA-2005:799"],"bugzilla":"1617706","bugzilla_description":"CVE-2005-2337 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.1-7.EL4.2","ruby-0:1.6.8-9.EL3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2337.json"},{"CVE":"CVE-2006-1931","severity":"moderate","public_date":"2005-06-30T00:00:00Z","advisories":["RHSA-2006:0427"],"bugzilla":"1618072","bugzilla_description":"CVE-2006-1931 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.1-7.EL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1931.json"},{"CVE":"CVE-2005-1992","severity":"moderate","public_date":"2005-06-17T00:00:00Z","advisories":["RHSA-2005:543"],"bugzilla":"1617679","bugzilla_description":"CVE-2005-1992 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.8.1-7.EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1992.json"},{"CVE":"CVE-2004-0983","severity":null,"public_date":"2004-11-08T00:00:00Z","advisories":["RHSA-2004:635"],"bugzilla":"1617342","bugzilla_description":"CVE-2004-0983 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.6.8-9.EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0983.json"},{"CVE":"CVE-2004-0755","severity":"low","public_date":"2004-07-22T00:00:00Z","advisories":["RHSA-2004:441"],"bugzilla":"1617269","bugzilla_description":"CVE-2004-0755 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["ruby-0:1.6.8-9.EL3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0755.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-abrt-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-abrt-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-abrt-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-abrt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-abrt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-abrt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bigdecimal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bigdecimal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bigdecimal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bson-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bson-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bson-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bson_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bson_security_api_results.json
new file mode 100644
index 0000000..a48439b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bson_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-4412","severity":"low","public_date":"2015-06-04T00:00:00Z","advisories":[],"bugzilla":"1229750","bugzilla_description":"CVE-2015-4412 rubygem-bson: data injection vulnerability through a crafted ObjectId","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4412.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bundler-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bundler-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bundler-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bundler_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bundler_security_api_results.json
new file mode 100644
index 0000000..7a7d9bd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-bundler_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-3881","severity":"moderate","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1651826","bugzilla_description":"CVE-2019-3881 rubygem-bundler: Insecure permissions on directory in /tmp/ allows for execution of malicious code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3881.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2016-7954","severity":"moderate","public_date":"2016-10-04T00:00:00Z","advisories":[],"bugzilla":"1381951","bugzilla_description":"CVE-2016-7954 rubygem-bundler: Code execution via gem name collision in bundler","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7954.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.9"},{"CVE":"CVE-2013-0334","severity":"moderate","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:2180"],"bugzilla":"1146335","bugzilla_description":"CVE-2013-0334 rubygem-bundler: 'bundle install' may install a gem from a source other than expected","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-345","affected_packages":["rubygem-bundler-0:1.7.8-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0334.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-did_you_mean_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-did_you_mean_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-did_you_mean_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-diff-lcs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-diff-lcs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-diff-lcs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-io-console_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-io-console_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-io-console_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-irb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-irb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-irb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-json_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-json_security_api_results.json
new file mode 100644
index 0000000..ef689c4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-json_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10663","severity":"moderate","public_date":"2020-03-19T00:00:00Z","advisories":["RHSA-2020:2462","RHSA-2020:2473","RHSA-2020:2670"],"bugzilla":"1827500","bugzilla_description":"CVE-2020-10663 rubygem-json: Unsafe Object Creation Vulnerability in JSON","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-94","affected_packages":["pcs-0:0.10.1-4.el8_0.5","pcs-0:0.10.2-4.el8_1.1","pcs-0:0.10.4-6.el8_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2013-0269","severity":"moderate","public_date":"2013-02-11T00:00:00Z","advisories":["RHSA-2013:1185","RHSA-2013:0701","RHSA-2013:0686","RHSA-2013:1028","RHSA-2013:1147"],"bugzilla":"909029","bugzilla_description":"CVE-2013-0269 rubygem-json: Denial of Service and SQL Injection","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-502","affected_packages":["rubygem-json-0:1.7.3-2.el6_3","ruby193-ruby-0:1.9.3.327-28.el6","rubygem-json-0:1.7.3-2.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0269.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-minitest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-minitest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-minitest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mongo-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mongo-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mongo-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mongo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mongo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mongo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mysql2-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mysql2-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mysql2-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mysql2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mysql2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-mysql2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-net-telnet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-net-telnet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-net-telnet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-openssl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-openssl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-openssl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-pg-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-pg-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-pg-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-pg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-pg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-pg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-power_assert_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-power_assert_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-power_assert_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-psych_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-psych_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-psych_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rake_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rake_security_api_results.json
new file mode 100644
index 0000000..074acf0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rake_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-8130","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":[],"bugzilla":"1816270","bugzilla_description":"CVE-2020-8130 rake: OS Command Injection via egrep in Rake::FileList","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8130.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2014-8090","severity":"moderate","public_date":"2014-11-13T00:00:00Z","advisories":["RHSA-2014:1911","RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1159927","bugzilla_description":"CVE-2014-8090 ruby: REXML incomplete fix for CVE-2014-8080","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-776","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:1.8.7.374-3.el6_6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8090.json"},{"CVE":"CVE-2014-8080","severity":"moderate","public_date":"2014-10-27T00:00:00Z","advisories":["RHSA-2014:1911","RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1157709","bugzilla_description":"CVE-2014-8080 ruby: REXML billion laughs attack via parameter entity expansion","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-776","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:1.8.7.374-3.el6_6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8080.json"},{"CVE":"CVE-2014-4975","severity":"low","public_date":"2014-07-09T00:00:00Z","advisories":["RHSA-2014:1914","RHSA-2014:1913","RHSA-2014:1912"],"bugzilla":"1118158","bugzilla_description":"CVE-2014-4975 ruby: off-by-one stack-based buffer overflow in the encodes() function","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-121","affected_packages":["ruby193-ruby-0:1.9.3.484-50.el7","ruby193-ruby-0:1.9.3.484-50.el6","ruby-0:2.0.0.353-22.el7_0","ruby200-ruby-0:2.0.0.353-24.el6","ruby200-ruby-0:2.0.0.353-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4975.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rdoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rdoc_security_api_results.json
new file mode 100644
index 0000000..a85a07b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rdoc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-0256","severity":"moderate","public_date":"2013-02-06T00:00:00Z","advisories":["RHSA-2013:0728","RHSA-2013:0548","RHSA-2013:0701","RHSA-2013:0686"],"bugzilla":"907820","bugzilla_description":"CVE-2013-0256 rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["rubygem-rdoc-0:3.8-9.el6op","ruby193-ruby-0:1.9.3.327-28.el6","rubygem-rdoc-0:3.8-6.el6cf"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0256.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-expectations_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-expectations_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-expectations_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-mocks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-mocks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-mocks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-support_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-support_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec-support_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-rspec_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-test-unit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-test-unit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-test-unit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-xmlrpc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-xmlrpc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygem-xmlrpc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygems-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygems-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygems-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygems_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygems_security_api_results.json
new file mode 100644
index 0000000..2644aea
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rubygems_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-8320","severity":"moderate","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHBA-2019:3384","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692512","bugzilla_description":"CVE-2019-8320 rubygems: Delete directory using symlink when decompressing tar","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8320.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-8321","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692514","bugzilla_description":"CVE-2019-8321 rubygems: Escape sequence injection vulnerability in verbose","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8321.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8322","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692516","bugzilla_description":"CVE-2019-8322 rubygems: Escape sequence injection vulnerability in gem owner","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8322.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8323","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692519","bugzilla_description":"CVE-2019-8323 rubygems: Escape sequence injection vulnerability in API response handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8323.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8324","severity":"important","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHSA-2019:1972","RHSA-2020:2769","RHSA-2019:1151","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692520","bugzilla_description":"CVE-2019-8324 rubygems: Installing a malicious gem may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby:2.5-8000020190524123348.55190bc5","ruby-0:2.0.0.648-35.el7_6","ruby-0:2.4.6-91.el7cf","rh-ruby23-ruby-0:2.3.8-70.el6","rh-ruby23-ruby-0:2.3.8-70.el7","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-8325","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:1148","RHSA-2019:1235","RHBA-2019:3384","RHSA-2020:2769","RHSA-2019:1150","RHSA-2019:1429"],"bugzilla":"1692522","bugzilla_description":"CVE-2019-8325 rubygems: Escape sequence injection vulnerability in errors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":["ruby-0:2.0.0.648-37.el7_4","ruby-0:2.0.0.648-35.el7_6","ruby:2.5-8010020190711131821.cdc1202b","ruby-0:2.4.6-91.el7cf","rh-ruby24-ruby-0:2.4.6-92.el7","rh-ruby25-ruby-0:2.5.5-7.el7","rh-ruby24-ruby-0:2.4.6-92.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8325.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000073","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547418","bugzilla_description":"CVE-2018-1000073 rubygems: Path traversal when writing to a symlinked basedir outside of the root","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000073.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000074","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547419","bugzilla_description":"CVE-2018-1000074 rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000074.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-1000075","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547420","bugzilla_description":"CVE-2018-1000075 rubygems: Infinite loop vulnerability due to negative size in tar header causes Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000075.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000076","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547421","bugzilla_description":"CVE-2018-1000076 rubygems: Improper verification of signatures in tarball allows to install mis-signed gem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-347","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000076.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000077","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547422","bugzilla_description":"CVE-2018-1000077 rubygems: Missing URL validation on spec home attribute allows malicious gem to set an invalid homepage URL","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000077.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000078","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547425","bugzilla_description":"CVE-2018-1000078 rubygems: XSS vulnerability in homepage attribute when displayed via gem server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000078.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-1000079","severity":"moderate","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:3729","RHSA-2020:0542","RHSA-2020:0663","RHSA-2020:0591","RHSA-2019:2028","RHSA-2018:3731","RHSA-2018:3730"],"bugzilla":"1547426","bugzilla_description":"CVE-2018-1000079 rubygems: Path traversal issue during gem installation allows to write to arbitrary filesystem locations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["ruby-0:2.0.0.648-35.el7_5","ruby-0:2.0.0.648-35.el7_4","rh-ruby23-ruby-0:2.3.8-69.el7","rh-ruby25-ruby-0:2.5.3-6.el7","rh-ruby23-ruby-0:2.3.8-69.el6","rh-ruby24-ruby-0:2.4.5-91.el7","ruby-0:2.0.0.648-36.el7","ruby-0:2.0.0.648-36.el7_6","rh-ruby24-ruby-0:2.4.5-91.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000079.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-0903","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1500488","bugzilla_description":"CVE-2017-0903 rubygems: Unsafe object deserialization through YAML formatted gem specifications","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0903.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-0901","severity":"moderate","public_date":"2017-09-01T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487587","bugzilla_description":"CVE-2017-0901 rubygems: Arbitrary file overwrite due to incorrect validation of specification name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0901.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-0900","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487588","bugzilla_description":"CVE-2017-0900 rubygems: No size limit in summary length of gem spec","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-0902","severity":"moderate","public_date":"2017-08-31T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487589","bugzilla_description":"CVE-2017-0902 rubygems: DNS hijacking vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0902.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-0899","severity":"low","public_date":"2017-08-31T00:00:00Z","advisories":["RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0585","RHSA-2018:0583"],"bugzilla":"1487590","bugzilla_description":"CVE-2017-0899 rubygems: Escape sequence in the \"summary\" field of gemspec","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ruby-0:2.0.0.648-33.el7_4","rh-ruby22-ruby-0:2.2.9-19.el6","rh-ruby24-ruby-0:2.4.2-86.el7","rh-ruby22-ruby-0:2.2.9-19.el7","rh-ruby24-ruby-0:2.4.2-86.el6","rh-ruby23-ruby-0:2.3.6-67.el7","rh-ruby23-ruby-0:2.3.6-67.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0899.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-4020","severity":"important","public_date":"2015-05-18T00:00:00Z","advisories":[],"bugzilla":"1250109","bugzilla_description":"CVE-2015-4020 rubygems: incomplete fix for CVE-2015-3900","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-20->CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4020.json"},{"CVE":"CVE-2015-3900","severity":"important","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2015:1657"],"bugzilla":"1236116","bugzilla_description":"CVE-2015-3900 rubygems: DNS hijacking vulnerability in api_endpoint()","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-20->CWE-345","affected_packages":["rh-ruby22-ruby-0:2.2.2-12.el6","rh-ruby22-ruby-0:2.2.2-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3900.json"},{"CVE":"CVE-2013-4363","severity":"moderate","public_date":"2013-09-15T00:00:00Z","advisories":[],"bugzilla":"1009720","bugzilla_description":"CVE-2013-4363 rubygems: version regex algorithmic complexity vulnerability, incomplete CVE-2013-4287 fix","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4363.json"},{"CVE":"CVE-2013-4287","severity":"moderate","public_date":"2013-09-09T00:00:00Z","advisories":["RHSA-2013:1427","RHSA-2013:1852","RHSA-2014:0207","RHSA-2013:1523","RHSA-2013:1441"],"bugzilla":"1002364","bugzilla_description":"CVE-2013-4287 rubygems: version regex algorithmic complexity vulnerability","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-407->CWE-400","affected_packages":["rubygems-0:1.3.7-4.el6_4","ruby193-rubygems-0:1.8.24-9.el6ost","rubygems-0:1.8.24-5.el6op","rubygems-0:1.8.23.2-1.el6","ruby193-ruby-0:1.9.3.448-40.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4287.json"},{"CVE":"CVE-2012-2125","severity":"moderate","public_date":"2012-04-19T00:00:00Z","advisories":["RHSA-2013:1852","RHSA-2013:1203","RHSA-2013:1441"],"bugzilla":"814718","bugzilla_description":"CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rubygems-0:1.3.7-4.el6_4","rubygems-0:1.8.24-4.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2125.json"},{"CVE":"CVE-2012-2126","severity":"moderate","public_date":"2012-04-19T00:00:00Z","advisories":["RHSA-2013:1852","RHSA-2013:1203","RHSA-2013:1441"],"bugzilla":"814718","bugzilla_description":"CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["rubygems-0:1.3.7-4.el6_4","rubygems-0:1.8.24-4.el6op"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2126.json"},{"CVE":"CVE-2007-0469","severity":"low","public_date":"2009-07-21T00:00:00Z","advisories":[],"bugzilla":"513048","bugzilla_description":"CVE-2007-0469 RubyGems: Specially-crafted Gem archive can overwrite system files","cvss_score":5.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0469.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/runc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/runc_security_api_results.json
new file mode 100644
index 0000000..419b031
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/runc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-19921","severity":"moderate","public_date":"2019-12-21T00:00:00Z","advisories":["RHSA-2020:1650","RHSA-2020:1485","RHSA-2020:0695","RHSA-2020:0942","RHSA-2020:0688"],"bugzilla":"1796107","bugzilla_description":"CVE-2019-19921 runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-41","affected_packages":["runc-0:1.0.0-66.rc8.el7_7","runc-0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0","runc-0:1.0.0-66.rc10.rhaos4.3.el7_8","container-tools:rhel8-8020020200324071414.0d58ad57","runc-0:1.0.0-63.rc10.rhaos4.2.gitdc9208a.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19921.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-16884","severity":"moderate","public_date":"2019-09-22T00:00:00Z","advisories":["RHSA-2019:3940","RHSA-2020:1234","RHSA-2019:4269","RHBA-2020:1232","RHSA-2019:4074"],"bugzilla":"1757214","bugzilla_description":"CVE-2019-16884 runc: AppArmor/SELinux bypass with malicious image that specifies a volume at /proc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-41","affected_packages":["docker-2:1.13.1-161.git64e9980.el7_8","runc-0:1.0.0-62.rc8.rhaos4.1.git3cbe540.el8","runc-0:1.0.0-67.rc10.el7_8","container-tools:rhel8-8010020191126140055.c294d161","runc-0:1.0.0-63.rc8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16884.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-5736","severity":"important","public_date":"2019-02-11T13:22:00Z","advisories":["RHSA-2019:0401","RHSA-2019:0303","RHSA-2019:0304","RHSA-2019:0975","RHSA-2019:0408"],"bugzilla":"1664908","bugzilla_description":"CVE-2019-5736 runc: Execution of malicious containers allows for container escape and access to host filesystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["runc-0:1.0.0-59.dev.git2abd837.el7","container-tools:rhel8-8000020190416221845.2ffa3d27","docker-2:1.13.1-91.git07f3374.el7","docker-2:1.12.6-79.git5680db5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5736.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2016-9962","severity":"important","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:0116","RHSA-2017:0127","RHSA-2017:0123"],"bugzilla":"1409531","bugzilla_description":"CVE-2016-9962 docker: insecure opening of file-descriptor allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["runc-0:1.0.0-1.rc2.el7","docker-2:1.12.5-14.el7","docker-latest-0:1.12.5-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9962.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-analysis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-analysis_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-analysis_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-debugger-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-debugger-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-debugger-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-gdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-gdb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-gdb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-lldb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-lldb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-lldb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-src_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-src_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-src_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-srpm-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-srpm-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-srpm-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-std-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-std-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-std-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-toolset_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-toolset_security_api_results.json
new file mode 100644
index 0000000..b198f12
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust-toolset_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-16760","severity":"moderate","public_date":"2019-09-30T00:00:00Z","advisories":[],"bugzilla":"1759773","bugzilla_description":"CVE-2019-16760 rust: privilege escaltion in cargo","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16760.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000810","severity":"moderate","public_date":"2018-09-24T00:00:00Z","advisories":[],"bugzilla":"1632932","bugzilla_description":"CVE-2018-1000810 rust: Buffer overflow in str::repeat function in the standard library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000810.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2018-1000657","severity":"moderate","public_date":"2018-08-24T00:00:00Z","advisories":[],"bugzilla":"1622249","bugzilla_description":"CVE-2018-1000657 rust: Buffer Overflow vulnerability in std::collections::vec_deque::VecDeque::reserve() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-1010299","severity":"low","public_date":"2018-08-21T00:00:00Z","advisories":[],"bugzilla":"1736766","bugzilla_description":"CVE-2019-1010299 rust: print of uninitialized memory in the debug trait implementation for std::collections::vec_deque::Iter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010299.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust_security_api_results.json
new file mode 100644
index 0000000..b198f12
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rust_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-16760","severity":"moderate","public_date":"2019-09-30T00:00:00Z","advisories":[],"bugzilla":"1759773","bugzilla_description":"CVE-2019-16760 rust: privilege escaltion in cargo","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16760.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000810","severity":"moderate","public_date":"2018-09-24T00:00:00Z","advisories":[],"bugzilla":"1632932","bugzilla_description":"CVE-2018-1000810 rust: Buffer overflow in str::repeat function in the standard library","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000810.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2018-1000657","severity":"moderate","public_date":"2018-08-24T00:00:00Z","advisories":[],"bugzilla":"1622249","bugzilla_description":"CVE-2018-1000657 rust: Buffer Overflow vulnerability in std::collections::vec_deque::VecDeque::reserve() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000657.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-1010299","severity":"low","public_date":"2018-08-21T00:00:00Z","advisories":[],"bugzilla":"1736766","bugzilla_description":"CVE-2019-1010299 rust: print of uninitialized memory in the debug trait implementation for std::collections::vec_deque::Iter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010299.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rustfmt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rustfmt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/rustfmt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cmsfs-fuse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cmsfs-fuse_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cmsfs-fuse_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cmsfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cmsfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cmsfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cpacfstatsd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cpacfstatsd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cpacfstatsd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cpuplugd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cpuplugd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-cpuplugd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-hmcdrvfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-hmcdrvfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-hmcdrvfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-iucvterm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-iucvterm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-iucvterm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-mon_statd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-mon_statd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-mon_statd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-osasnmpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-osasnmpd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-osasnmpd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-zdsfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-zdsfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-zdsfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-ziomon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-ziomon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils-ziomon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/s390utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/saab-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/saab-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/saab-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sac_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sac_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sac_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-client-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-client-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-client-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-common-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-common-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-common-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-common-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-common-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-common-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-krb5-printing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-krb5-printing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-krb5-printing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-pidl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-pidl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-pidl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-test-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-test-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-test-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-test_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-test_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-test_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind-clients_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind-clients_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind-clients_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind-krb5-locator_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind-krb5-locator_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind-krb5-locator_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba-winbind_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba_security_api_results.json
new file mode 100644
index 0000000..4150e78
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samba_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-1472","severity":"critical","public_date":"2020-09-11T00:00:00Z","advisories":[],"bugzilla":"1879822","bugzilla_description":"CVE-2020-1472 Samba: Netlogon Elevation of Privilege Vulnerability (Zerologon)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1472.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-10730","severity":"moderate","public_date":"2020-07-02T00:00:00Z","advisories":["RHSA-2020:3119","RHSA-2020:3118"],"bugzilla":"1849489","bugzilla_description":"CVE-2020-10730 samba: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and paged_results","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["samba-0:4.11.6-107.el8rhgs","samba-0:4.11.6-107.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10730.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-10745","severity":"important","public_date":"2020-07-02T00:00:00Z","advisories":[],"bugzilla":"1849491","bugzilla_description":"CVE-2020-10745 samba: Parsing and packing of NBT and DNS packets can consume excessive CPU","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10745.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10760","severity":"moderate","public_date":"2020-07-02T00:00:00Z","advisories":[],"bugzilla":"1849509","bugzilla_description":"CVE-2020-10760 samba: LDAP Use-after-free in Samba AD DC Global Catalog with paged_results and VLV","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10760.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14303","severity":"important","public_date":"2020-07-02T00:00:00Z","advisories":[],"bugzilla":"1851298","bugzilla_description":"CVE-2020-14303 samba: Empty UDP packet DoS in Samba AD DC nbtd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14303.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10700","severity":"moderate","public_date":"2020-04-28T00:00:00Z","advisories":[],"bugzilla":"1825731","bugzilla_description":"CVE-2020-10700 samba: Use-after-free in Samba AD DC LDAP Server with ASQ","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10700.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2020-10704","severity":"important","public_date":"2020-04-28T00:00:00Z","advisories":[],"bugzilla":"1825734","bugzilla_description":"CVE-2020-10704 samba: LDAP Denial of Service (stack overflow) in Samba AD DC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10704.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14902","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1791201","bugzilla_description":"CVE-2019-14902 samba: Replication of ACLs set to inherit down a subtree on AD Directory not automatic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14902.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-19344","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":[],"bugzilla":"1791204","bugzilla_description":"CVE-2019-19344 samba: Use after free during DNS zone scavenging in Samba AD DC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19344.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-14907","severity":"moderate","public_date":"2020-01-21T00:00:00Z","advisories":["RHSA-2020:3981","RHSA-2020:0943","RHSA-2020:1878"],"bugzilla":"1791207","bugzilla_description":"CVE-2019-14907 samba: Crash after failed character conversion at log level 3 or above","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["samba-0:4.11.6-104.el7rhgs","samba-0:4.11.2-13.el8","samba-0:4.10.16-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14907.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-14861","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1778586","bugzilla_description":"CVE-2019-14861 samba: An authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14861.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-14870","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":[],"bugzilla":"1778589","bugzilla_description":"CVE-2019-14870 samba: The DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14870.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-10218","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:0943","RHSA-2020:1084","RHSA-2020:1878"],"bugzilla":"1763137","bugzilla_description":"CVE-2019-10218 samba: smb client vulnerable to filenames containing path separators","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.11.6-104.el7rhgs","samba-0:4.10.4-10.el7","samba-0:4.11.2-13.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10218.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-14833","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":[],"bugzilla":"1764126","bugzilla_description":"CVE-2019-14833 samba: AD DC check password script does not receive full password when non-ASCII characters are used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14833.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-14847","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":[],"bugzilla":"1764142","bugzilla_description":"CVE-2019-14847 samba: samba AD DC LDAP denial of service via dirsync","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-10197","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2020:1084","RHSA-2020:1878","RHSA-2019:4023","RHSA-2019:3253"],"bugzilla":"1746225","bugzilla_description":"CVE-2019-10197 samba: Combination of parameters and permissions can allow user to escape from the share path definition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.9.8-110.el6rhs","samba-0:4.10.4-10.el7","samba-0:4.11.2-13.el8","samba-0:4.9.8-109.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-12435","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1711816","bugzilla_description":"CVE-2019-12435 samba: AD DC Denial of Service in DNS management server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-12436","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1711837","bugzilla_description":"CVE-2019-12436 samba: NULL pointer dereference in Samba LDAP server leading to crash and Dos","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-16860","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":[],"bugzilla":"1705877","bugzilla_description":"CVE-2018-16860 samba: S4U2Self with unkeyed checksum","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3870","severity":"moderate","public_date":"2019-04-09T00:00:00Z","advisories":[],"bugzilla":"1689010","bugzilla_description":"CVE-2019-3870 samba: World writable files in Samba AD DC private/ dir","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-3880","severity":"moderate","public_date":"2019-04-09T00:00:00Z","advisories":["RHSA-2019:2099","RHSA-2019:1967","RHSA-2019:1966","RHSA-2019:3582"],"bugzilla":"1691518","bugzilla_description":"CVE-2019-3880 samba: save registry file outside share as unprivileged user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.9.8-105.el7rhgs","samba-0:4.9.1-6.el7","samba-0:4.10.4-1.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3880.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2019-3824","severity":"moderate","public_date":"2019-02-25T00:00:00Z","advisories":[],"bugzilla":"1671845","bugzilla_description":"CVE-2019-3824 samba: Out of bound read in ldb_wildcard_compare in Samba AD DC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3824.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-16841","severity":"moderate","public_date":"2018-11-28T00:00:00Z","advisories":[],"bugzilla":"1642545","bugzilla_description":"CVE-2018-16841 samba: Double-free in Samba AD DC KDC with PKINIT","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16841.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2018-16853","severity":"important","public_date":"2018-11-28T00:00:00Z","advisories":[],"bugzilla":"1647246","bugzilla_description":"CVE-2018-16853 samba: S4U2Self crash with MIT KDC build","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16853.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14629","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1625449","bugzilla_description":"CVE-2018-14629 samba: Unprivileged adding of CNAME record causing loop in AD LDAP server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-16851","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1646377","bugzilla_description":"CVE-2018-16851 samba: NULL pointer de-reference in Samba AD DC LDAP server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16851.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-16852","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1646386","bugzilla_description":"CVE-2018-16852 samba: NULL pointer de-reference in Samba AD DC DNS management server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16852.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-16857","severity":"moderate","public_date":"2018-11-20T00:00:00Z","advisories":[],"bugzilla":"1649278","bugzilla_description":"CVE-2018-16857 samba: Bad password count in AD DC not always effective","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16857.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-1139","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2018:2612","RHSA-2018:2613","RHSA-2018:3056"],"bugzilla":"1589651","bugzilla_description":"CVE-2018-1139 samba: Weak authentication protocol regression","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["samba-0:4.8.3-4.el7","samba-0:4.7.5-110.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1139.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-10918","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":[],"bugzilla":"1610640","bugzilla_description":"CVE-2018-10918 samba: DsCrackNames on a user without an SPN can trigger NULL-pointer de-reference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10918.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2018-10919","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":[],"bugzilla":"1610645","bugzilla_description":"CVE-2018-10919 samba: Confidential attribute disclosure via substring search","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10919.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-10858","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2018:3470","RHSA-2018:2612","RHSA-2018:2613","RHSA-2018:3056"],"bugzilla":"1612805","bugzilla_description":"CVE-2018-10858 samba: Insufficient input validation in libsmbclient","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["samba-0:4.8.3-4.el7","samba-0:4.7.5-110.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1050","severity":"low","public_date":"2018-03-13T00:00:00Z","advisories":["RHSA-2018:2612","RHSA-2018:2613","RHSA-2018:1860","RHSA-2018:1883","RHSA-2018:3056"],"bugzilla":"1538771","bugzilla_description":"CVE-2018-1050 samba: NULL pointer dereference in printer server process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["samba4-0:4.2.10-15.el6","samba-0:4.8.3-4.el7","samba-0:4.7.5-110.el7rhgs","samba-0:3.6.23-51.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1050.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1057","severity":"important","public_date":"2018-03-13T00:00:00Z","advisories":[],"bugzilla":"1553553","bugzilla_description":"CVE-2018-1057 samba: Authenticated users can change other users password in an AD DC configuration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1057.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2017-14746","severity":"important","public_date":"2017-11-21T00:00:00Z","advisories":["RHSA-2017:3261","RHSA-2017:3260","RHSA-2017:3278"],"bugzilla":"1511899","bugzilla_description":"CVE-2017-14746 samba: Use-after-free in processing SMB1 requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:4.6.3-9.el6rhs","samba-0:4.6.3-9.el7rhgs","samba-0:4.6.2-12.el7_4","samba4-0:4.2.10-12.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14746.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-15275","severity":"moderate","public_date":"2017-11-21T00:00:00Z","advisories":["RHSA-2017:3261","RHSA-2017:3260","RHSA-2017:3278"],"bugzilla":"1512465","bugzilla_description":"CVE-2017-15275 samba: Server heap-memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:4.6.3-9.el6rhs","samba-0:4.6.3-9.el7rhgs","samba-0:4.6.2-12.el7_4","samba4-0:4.2.10-12.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15275.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-15086","severity":"moderate","public_date":"2017-10-24T00:00:00Z","advisories":["RHSA-2017:3110"],"bugzilla":"1505785","bugzilla_description":"CVE-2017-15086 samba: SMB2 connections don't keep encryption across DFS redirects (incomplete fix of CVE-2017-12151)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["samba-0:4.6.3-8.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-15085","severity":"moderate","public_date":"2017-10-24T00:00:00Z","advisories":["RHSA-2017:3110"],"bugzilla":"1505787","bugzilla_description":"CVE-2017-15085 samba: Some code path don't enforce smb signing, when they should (incomplete fix of CVE-2017-12150)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["samba-0:4.6.3-8.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15085.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-15087","severity":"moderate","public_date":"2017-10-24T00:00:00Z","advisories":["RHSA-2017:3110"],"bugzilla":"1505788","bugzilla_description":"CVE-2017-15087 samba: Server memory information leak over SMB1 (incomplete fix for CVE-2017-12163)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["samba-0:4.6.3-8.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15087.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2017-12151","severity":"moderate","public_date":"2017-09-20T00:00:00Z","advisories":["RHSA-2017:2858","RHSA-2017:2790"],"bugzilla":"1488197","bugzilla_description":"CVE-2017-12151 samba: SMB2 connections don't keep encryption across DFS redirects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["samba-0:4.6.2-11.el7_4","samba-0:4.6.3-6.el7rhgs","samba-0:4.6.3-6.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12151.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-12150","severity":"moderate","public_date":"2017-09-20T00:00:00Z","advisories":["RHSA-2017:2789","RHSA-2017:2858","RHSA-2017:2790","RHSA-2017:2791"],"bugzilla":"1488400","bugzilla_description":"CVE-2017-12150 samba: Some code path don't enforce smb signing, when they should","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["samba4-0:4.2.10-11.el6_9","samba-0:4.6.2-11.el7_4","samba-0:4.6.3-6.el7rhgs","samba-0:3.6.23-45.el6_9","samba-0:4.6.3-6.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12150.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-12163","severity":"moderate","public_date":"2017-09-20T00:00:00Z","advisories":["RHSA-2017:2789","RHSA-2017:2858","RHSA-2017:2790","RHSA-2017:2791"],"bugzilla":"1491206","bugzilla_description":"CVE-2017-12163 Samba: Server memory information leak over SMB1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["samba4-0:4.2.10-11.el6_9","samba-0:4.6.2-11.el7_4","samba-0:4.6.3-6.el7rhgs","samba-0:3.6.23-45.el6_9","samba-0:4.6.3-6.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12163.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2017-11103","severity":"important","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1469976","bugzilla_description":"CVE-2017-11103 krb5: Metadata taken from the unauthenticated plaintext","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-319","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11103.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-7494","severity":"important","public_date":"2017-05-24T00:00:00Z","advisories":["RHSA-2017:1390","RHSA-2017:1271","RHSA-2017:1270","RHSA-2017:1273","RHSA-2017:1272"],"bugzilla":"1450347","bugzilla_description":"CVE-2017-7494 samba: Loading shared modules from any path in the system leading to RCE (SambaCry)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:4.4.6-5.el6rhs","samba3x-0:3.6.23-14.el5_11","samba-0:3.6.23-43.el6_9","samba-0:3.6.23-32.el6_2","samba4-0:4.2.10-10.el6_9","samba-0:3.6.23-32.el6_4","samba-0:4.4.4-14.el7_3","samba-0:3.6.23-32.el6_5","samba-0:4.2.10-11.el7_2","samba-0:3.6.23-32.el6_6","samba-0:3.6.23-32.el6_7","samba-0:4.4.6-5.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7494.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-2619","severity":"moderate","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2017:2789","RHSA-2017:2338","RHSA-2017:2778","RHSA-2017:1265"],"bugzilla":"1429472","bugzilla_description":"CVE-2017-2619 samba: symlink race permits opening files outside share directory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["samba-0:4.4.4-13.el7_3","samba-0:3.6.23-45.el6_9","samba-0:4.6.3-5.el6rhs","samba-0:4.6.3-4.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2619.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2017-9461","severity":"low","public_date":"2017-02-16T00:00:00Z","advisories":["RHSA-2017:2338","RHSA-2017:2778","RHSA-2017:1950"],"bugzilla":"1459464","bugzilla_description":"CVE-2017-9461 samba: fd_open_atomic infinite loop due to wrong handling of dangling symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["samba-0:4.6.2-8.el7","samba-0:4.6.3-5.el6rhs","samba-0:4.6.3-4.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9461.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-2123","severity":"critical","public_date":"2016-12-19T00:00:00Z","advisories":[],"bugzilla":"1392702","bugzilla_description":"CVE-2016-2123 samba: NDR Parsing ndr_pull_dnsp_name Heap-based Buffer Overflow Remote Code Execution Vulnerability (ZDI-CAN-3995)","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2123.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-2125","severity":"moderate","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:0744","RHSA-2017:0494","RHSA-2017:1265","RHSA-2017:0495","RHSA-2017:0662"],"bugzilla":"1403114","bugzilla_description":"CVE-2016-2125 samba: Unconditional privilege delegation to Kerberos servers in trusted realms","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["samba-0:3.6.23-41.el6","samba-0:4.4.6-4.el6rhs","samba-0:4.4.6-4.el7rhgs","samba-0:4.4.4-13.el7_3","samba4-0:4.2.10-9.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2125.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2016-2126","severity":"moderate","public_date":"2016-12-19T00:00:00Z","advisories":["RHSA-2017:0744","RHSA-2017:0494","RHSA-2017:1265","RHSA-2017:0495","RHSA-2017:0662"],"bugzilla":"1403115","bugzilla_description":"CVE-2016-2126 samba: Flaws in Kerberos PAC validation can trigger privilege elevation","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["samba-0:3.6.23-41.el6","samba-0:4.4.6-4.el6rhs","samba-0:4.4.6-4.el7rhgs","samba-0:4.4.4-13.el7_3","samba4-0:4.2.10-9.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2126.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2016-2119","severity":"moderate","public_date":"2016-07-07T00:00:00Z","advisories":["RHSA-2016:1486","RHSA-2016:1487","RHSA-2016:1494"],"bugzilla":"1351955","bugzilla_description":"CVE-2016-2119 samba: Client side SMB2/3 required signing can be downgraded","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["samba-0:4.2.10-7.el7_2","samba-0:4.4.3-8.el6rhs","samba-0:4.4.3-8.el7rhgs","samba4-0:4.2.10-7.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2119.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-5370","severity":"critical","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0619","RHSA-2016:0612","RHSA-2016:0613","RHSA-2016:0624","RHSA-2016:0614","RHSA-2016:0620","RHSA-2016:0611"],"bugzilla":"1309987","bugzilla_description":"CVE-2015-5370 samba: crash in dcesrv_auth_bind_ack due to missing error check","cvss_score":8.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["samba4-0:4.2.10-6.el6_2","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba3x-0:3.6.23-12.el5_9","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:3.6.23-30.el6_6","samba3x-0:3.6.23-12.el5_11","samba-0:3.6.23-30.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:3.6.23-30.el6_2","samba-0:4.2.10-6.el7_2","samba-0:3.6.23-30.el6_4","samba-0:3.6.23-30.el6_5","samba-0:4.2.11-2.el7rhgs","samba-0:4.2.10-5.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5370.json"},{"CVE":"CVE-2016-2110","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0619","RHSA-2016:0623","RHSA-2016:0612","RHSA-2016:0613","RHSA-2016:0624","RHSA-2016:0625","RHSA-2016:0614","RHSA-2016:0620","RHSA-2016:0621","RHSA-2016:0611"],"bugzilla":"1311893","bugzilla_description":"CVE-2016-2110 samba: Man-in-the-middle attacks possible with NTLMSSP authentication","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-300","affected_packages":["samba4-0:4.2.10-6.el6_2","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba3x-0:3.6.23-12.el5_9","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:3.6.23-30.el6_6","samba3x-0:3.6.23-12.el5_11","samba-0:3.6.23-30.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:3.6.23-30.el6_2","samba-0:4.2.10-6.el7_2","samba-0:3.6.23-30.el6_4","samba-0:3.6.23-30.el6_5","samba-0:3.0.33-3.41.el5_11","samba-0:4.2.11-2.el7rhgs","samba-0:3.0.33-3.40.el5_9","samba-0:4.2.10-5.ael7b_1","samba-0:3.0.33-3.37.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2110.json"},{"CVE":"CVE-2016-2111","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0619","RHSA-2016:0623","RHSA-2016:0612","RHSA-2016:0613","RHSA-2016:0624","RHSA-2016:0625","RHSA-2016:0614","RHSA-2016:0620","RHSA-2016:0621","RHSA-2016:0611"],"bugzilla":"1311902","bugzilla_description":"CVE-2016-2111 samba: Spoofing vulnerability when domain controller is configured","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-290","affected_packages":["samba4-0:4.2.10-6.el6_2","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba3x-0:3.6.23-12.el5_9","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:3.6.23-30.el6_6","samba3x-0:3.6.23-12.el5_11","samba-0:3.6.23-30.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:3.6.23-30.el6_2","samba-0:4.2.10-6.el7_2","samba-0:3.6.23-30.el6_4","samba-0:3.6.23-30.el6_5","samba-0:3.0.33-3.41.el5_11","samba-0:4.2.11-2.el7rhgs","samba-0:3.0.33-3.40.el5_9","samba-0:4.2.10-5.ael7b_1","samba-0:3.0.33-3.37.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2111.json"},{"CVE":"CVE-2016-2112","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0619","RHSA-2016:0612","RHSA-2016:0613","RHSA-2016:0624","RHSA-2016:0614","RHSA-2016:0620","RHSA-2016:0611"],"bugzilla":"1311903","bugzilla_description":"CVE-2016-2112 samba: Missing downgrade detection","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-300","affected_packages":["samba4-0:4.2.10-6.el6_2","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba3x-0:3.6.23-12.el5_9","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:3.6.23-30.el6_6","samba3x-0:3.6.23-12.el5_11","samba-0:3.6.23-30.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:3.6.23-30.el6_2","samba-0:4.2.10-6.el7_2","samba-0:3.6.23-30.el6_4","samba-0:3.6.23-30.el6_5","samba-0:4.2.11-2.el7rhgs","samba-0:4.2.10-5.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2112.json"},{"CVE":"CVE-2016-2113","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0612","RHSA-2016:0614","RHSA-2016:0620"],"bugzilla":"1311910","bugzilla_description":"CVE-2016-2113 samba: Server certificates not validated at client side","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-295","affected_packages":["samba4-0:4.2.10-6.el6_2","samba-0:4.2.11-2.el7rhgs","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:4.2.10-6.el7_2","samba-0:4.2.10-5.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2113.json"},{"CVE":"CVE-2016-2114","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0612","RHSA-2016:0614","RHSA-2016:0620"],"bugzilla":"1312082","bugzilla_description":"CVE-2016-2114 samba: Samba based active directory domain controller does not enforce smb signing","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-300","affected_packages":["samba4-0:4.2.10-6.el6_2","samba-0:4.2.11-2.el7rhgs","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:4.2.10-6.el7_2","samba-0:4.2.10-5.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2114.json"},{"CVE":"CVE-2016-2115","severity":"moderate","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0619","RHSA-2016:0612","RHSA-2016:0613","RHSA-2016:0624","RHSA-2016:0614","RHSA-2016:0620","RHSA-2016:0611"],"bugzilla":"1312084","bugzilla_description":"CVE-2016-2115 samba: Smb signing not required by default when smb client connection is used for ipc usage","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-300","affected_packages":["samba4-0:4.2.10-6.el6_2","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba3x-0:3.6.23-12.el5_9","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:3.6.23-30.el6_6","samba3x-0:3.6.23-12.el5_11","samba-0:3.6.23-30.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:3.6.23-30.el6_2","samba-0:4.2.10-6.el7_2","samba-0:3.6.23-30.el6_4","samba-0:3.6.23-30.el6_5","samba-0:4.2.11-2.el7rhgs","samba-0:4.2.10-5.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2115.json"},{"CVE":"CVE-2016-2118","severity":"important","public_date":"2016-04-12T00:00:00Z","advisories":["RHSA-2016:0618","RHSA-2016:0619","RHSA-2016:0623","RHSA-2016:0612","RHSA-2016:0613","RHSA-2016:0624","RHSA-2016:0625","RHSA-2016:0614","RHSA-2016:0620","RHSA-2016:0621","RHSA-2016:0611"],"bugzilla":"1317990","bugzilla_description":"CVE-2016-2118 samba: SAMR and LSA man in the middle attacks","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-300","affected_packages":["samba4-0:4.2.10-6.el6_2","samba4-0:4.2.10-6.el6_4","samba4-0:4.2.10-6.el6_5","samba3x-0:3.6.23-12.el5_9","samba4-0:4.2.10-6.el6_6","samba4-0:4.2.10-6.el6_7","samba-0:3.6.23-30.el6_6","samba3x-0:3.6.23-12.el5_11","samba-0:3.6.23-30.el6_7","samba-0:4.2.11-2.el6rhs","samba-0:3.6.23-30.el6_2","samba-0:4.2.10-6.el7_2","samba-0:3.6.23-30.el6_4","samba-0:3.6.23-30.el6_5","samba-0:3.0.33-3.41.el5_11","samba-0:4.2.11-2.el7rhgs","samba-0:3.0.33-3.40.el5_9","samba-0:4.2.10-5.ael7b_1","samba-0:3.0.33-3.37.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2118.json"},{"CVE":"CVE-2016-0771","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1309978","bugzilla_description":"CVE-2016-0771 samba: Out-of-bounds read in internal DNS server","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0771.json"},{"CVE":"CVE-2015-7560","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0447","RHSA-2016:0448","RHSA-2016:0449"],"bugzilla":"1309992","bugzilla_description":"CVE-2015-7560 samba: Incorrect ACL get/set allowed on symlink path","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-284","affected_packages":["samba-0:3.6.23-25.el6_7","samba-0:4.2.3-12.el7_2","samba-0:4.2.4-15.el6rhs","samba-0:4.2.4-15.el7rhgs","samba4-0:4.0.0-68.el6_7.rc4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7560.json"},{"CVE":"CVE-2015-5299","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0010","RHSA-2016:0011","RHSA-2016:0015","RHSA-2016:0016","RHSA-2016:0006"],"bugzilla":"1276126","bugzilla_description":"CVE-2015-5299 Samba: Missing access control check in shadow copy code","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-862","affected_packages":["samba-0:4.1.17-16.el6rhs","samba-0:4.2.4-9.1.el7rhgs","samba4-0:4.0.0-67.el6_7.rc4","samba-0:3.6.23-24.el6_7","samba-0:4.2.3-11.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5299.json"},{"CVE":"CVE-2015-5330","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0010","RHSA-2016:0009","RHSA-2016:0014","RHSA-2016:0015","RHSA-2016:0016","RHSA-2016:0006"],"bugzilla":"1281326","bugzilla_description":"CVE-2015-5330 samba, libldb: remote memory read in the Samba LDAP server","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-135","affected_packages":["samba-0:4.1.17-16.el6rhs","libldb-0:1.1.20-3.el7rhgs","libldb-0:1.1.20-1.el7_2.2","libldb-0:1.1.13-3.el6_7.1","samba-0:4.2.4-9.1.el7rhgs","libldb-0:1.1.20-3.el6rhs","samba4-0:4.0.0-67.el6_7.rc4","samba-0:4.2.3-11.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5330.json"},{"CVE":"CVE-2015-7540","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0010","RHSA-2016:0015","RHBA-2015:2258"],"bugzilla":"1288451","bugzilla_description":"CVE-2015-7540 samba: DoS to AD-DC due to insufficient checking of asn1 memory allocation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["samba-0:4.1.17-16.el6rhs","samba-0:4.2.3-10.el7","samba4-0:4.0.0-67.el6_7.rc4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7540.json"},{"CVE":"CVE-2015-5252","severity":"low","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0010","RHSA-2016:0011","RHSA-2016:0015","RHSA-2016:0016","RHSA-2016:0006"],"bugzilla":"1290288","bugzilla_description":"CVE-2015-5252 samba: Insufficient symlink verification in smbd","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-41","affected_packages":["samba-0:4.1.17-16.el6rhs","samba-0:4.2.4-9.1.el7rhgs","samba4-0:4.0.0-67.el6_7.rc4","samba-0:3.6.23-24.el6_7","samba-0:4.2.3-11.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5252.json"},{"CVE":"CVE-2015-5296","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0010","RHSA-2016:0011","RHSA-2016:0015","RHSA-2016:0016","RHSA-2016:0006"],"bugzilla":"1290292","bugzilla_description":"CVE-2015-5296 samba: client requesting encryption vulnerable to downgrade attack","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-345","affected_packages":["samba-0:4.1.17-16.el6rhs","samba-0:4.2.4-9.1.el7rhgs","samba4-0:4.0.0-67.el6_7.rc4","samba-0:3.6.23-24.el6_7","samba-0:4.2.3-11.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5296.json"},{"CVE":"CVE-2015-8467","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1290294","bugzilla_description":"CVE-2015-8467 samba: Denial of service attack against Windows Active Directory server.","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8467.json"},{"CVE":"CVE-2015-0240","severity":"critical","public_date":"2015-02-23T00:00:00Z","advisories":["RHSA-2015:0249","RHSA-2015:0257","RHSA-2015:0256","RHSA-2015:0255","RHSA-2015:0254","RHSA-2015:0253","RHSA-2015:0252","RHSA-2015:0251","RHSA-2015:0250"],"bugzilla":"1191325","bugzilla_description":"CVE-2015-0240 samba: talloc free on uninitialized stack pointer in netlogon server could lead to remote-code execution","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["samba-0:3.6.9-171.el6_5","samba-0:3.6.9-151.el6_4.3","samba3x-0:3.6.23-9.el5_11","samba3x-0:3.6.6-0.131.el5_9","samba4-0:4.0.0-65.el6_5.rc4","samba4-0:4.0.0-66.el6_6.rc4","samba-0:3.5.10-119.el6_2","samba-0:3.6.509-169.6.el6rhs","samba-0:3.6.23-14.el6_6","samba4-0:4.0.0-57.el6_4.rc4","samba-0:3.6.9-167.10.3.el6rhs","samba-0:4.1.1-38.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0240.json"},{"CVE":"CVE-2014-8143","severity":"moderate","public_date":"2015-01-15T00:00:00Z","advisories":[],"bugzilla":"1181638","bugzilla_description":"CVE-2014-8143 samba: Privileges elevation to Active Directory Domain Controller","cvss_score":4.0,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8143.json"},{"CVE":"CVE-2014-3560","severity":"important","public_date":"2014-07-31T00:00:00Z","advisories":["RHSA-2014:1009","RHSA-2014:1008"],"bugzilla":"1126010","bugzilla_description":"CVE-2014-3560 samba: remote code execution in nmbd","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["samba4-0:4.0.0-63.el6_5.rc4","samba-0:4.1.1-37.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3560.json"},{"CVE":"CVE-2014-3493","severity":"low","public_date":"2014-06-23T00:00:00Z","advisories":["RHSA-2014:1009","RHSA-2014:0866","RHSA-2014:0867"],"bugzilla":"1108748","bugzilla_description":"CVE-2014-3493 samba: smbd unicode path names denial of service","cvss_score":2.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-172->CWE-393","affected_packages":["samba4-0:4.0.0-63.el6_5.rc4","samba-0:3.6.9-169.el6_5","samba-0:4.1.1-35.el7_0","samba3x-0:3.6.6-0.140.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3493.json"},{"CVE":"CVE-2014-0244","severity":"moderate","public_date":"2014-06-12T00:00:00Z","advisories":["RHSA-2014:1009","RHSA-2014:0866","RHSA-2014:0867"],"bugzilla":"1097815","bugzilla_description":"CVE-2014-0244 samba: nmbd denial of service","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["samba4-0:4.0.0-63.el6_5.rc4","samba-0:3.6.9-169.el6_5","samba-0:4.1.1-35.el7_0","samba3x-0:3.6.6-0.140.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0244.json"},{"CVE":"CVE-2014-0239","severity":"low","public_date":"2014-05-28T00:00:00Z","advisories":[],"bugzilla":"1101988","bugzilla_description":"CVE-2014-0239 samba: potential DoS in the internal DNS server","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0239.json"},{"CVE":"CVE-2014-0178","severity":"low","public_date":"2014-05-28T00:00:00Z","advisories":["RHSA-2014:1009","RHSA-2014:0867"],"bugzilla":"1101992","bugzilla_description":"CVE-2014-0178 samba: Uninitialized memory exposure","cvss_score":1.4,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:N/A:N","CWE":"CWE-456->CWE-201","affected_packages":["samba4-0:4.0.0-63.el6_5.rc4","samba-0:4.1.1-35.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0178.json"},{"CVE":"CVE-2014-2830","severity":"moderate","public_date":"2014-04-08T00:00:00Z","advisories":[],"bugzilla":"1086224","bugzilla_description":"CVE-2014-2830 cifs-utils: stack-based buffer overflow flaw in pam_cifscreds","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2830.json"},{"CVE":"CVE-2013-6442","severity":"moderate","public_date":"2014-03-12T00:00:00Z","advisories":["RHSA-2014:0383"],"bugzilla":"1044099","bugzilla_description":"CVE-2013-6442 samba: smbcacls will delete ACL lists in certain circumstances","cvss_score":4.1,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["samba4-0:4.0.0-61.el6_5.rc4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6442.json"},{"CVE":"CVE-2013-4496","severity":"moderate","public_date":"2014-03-12T00:00:00Z","advisories":["RHSA-2014:0330","RHSA-2014:0383"],"bugzilla":"1072792","bugzilla_description":"CVE-2013-4496 samba: Password lockout not enforced for SAMR password changes","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["samba-0:3.6.9-168.el6_5","samba3x-0:3.6.6-0.139.el5_10","samba4-0:4.0.0-61.el6_5.rc4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4496.json"},{"CVE":"CVE-2013-4408","severity":"important","public_date":"2013-12-09T00:00:00Z","advisories":["RHSA-2013:1805","RHSA-2013:1806","RHSA-2014:0009"],"bugzilla":"1018032","bugzilla_description":"CVE-2013-4408 samba: Heap-based buffer overflow due to incorrect DCE-RPC fragment length field check","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-130->CWE-122","affected_packages":["samba3x-0:3.6.6-0.138.el5_10","samba4-0:4.0.0-60.el6_5.rc4","samba-0:3.6.9-167.5.1.el6rhs","samba-0:3.6.9-167.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4408.json"},{"CVE":"CVE-2013-4476","severity":"moderate","public_date":"2013-11-11T00:00:00Z","advisories":[],"bugzilla":"1024547","bugzilla_description":"CVE-2013-4476 samba: world-readable key.pem with Samba 4 AD DC","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4476.json"},{"CVE":"CVE-2013-4475","severity":"moderate","public_date":"2013-10-25T00:00:00Z","advisories":["RHSA-2013:1806","RHSA-2014:0009"],"bugzilla":"1024542","bugzilla_description":"CVE-2013-4475 samba: no access check verification on stream files","cvss_score":4.1,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["samba3x-0:3.6.6-0.138.el5_10","samba-0:3.6.9-167.5.1.el6rhs","samba-0:3.6.9-167.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4475.json"},{"CVE":"CVE-2013-4124","severity":"moderate","public_date":"2013-08-05T00:00:00Z","advisories":["RHSA-2014:0305","RHSA-2013:1542","RHSA-2013:1543","RHSA-2013:1310"],"bugzilla":"984401","bugzilla_description":"CVE-2013-4124 samba: DoS via integer overflow when reading an EA list","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["samba-0:3.0.33-3.40.el5_10","samba4-0:4.0.0-58.el6.rc4","samba3x-0:3.6.6-0.136.el5","samba-0:3.6.9-164.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4124.json"},{"CVE":"CVE-2013-1863","severity":"moderate","public_date":"2013-03-19T00:00:00Z","advisories":[],"bugzilla":"922008","bugzilla_description":"CVE-2013-1863 samba4: Samba 4.0 AD DC files (initially) created as world-writable if additional CIFS file shares are created on the AD DC","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1863.json"},{"CVE":"CVE-2013-0213","severity":"moderate","public_date":"2013-01-30T00:00:00Z","advisories":["RHSA-2014:0305","RHSA-2013:1542","RHSA-2013:1310"],"bugzilla":"905700","bugzilla_description":"CVE-2013-0213 samba: clickjacking vulnerability in SWAT","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["samba-0:3.0.33-3.40.el5_10","samba3x-0:3.6.6-0.136.el5","samba-0:3.6.9-164.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0213.json"},{"CVE":"CVE-2013-0214","severity":"moderate","public_date":"2013-01-30T00:00:00Z","advisories":["RHSA-2014:0305","RHSA-2013:1542","RHSA-2013:1310"],"bugzilla":"905704","bugzilla_description":"CVE-2013-0214 samba: cross-site request forgery vulnerability in SWAT","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["samba-0:3.0.33-3.40.el5_10","samba3x-0:3.6.6-0.136.el5","samba-0:3.6.9-164.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0214.json"},{"CVE":"CVE-2013-0172","severity":"moderate","public_date":"2013-01-15T00:00:00Z","advisories":[],"bugzilla":"895631","bugzilla_description":"CVE-2013-0172 samba4: may provide authenticated users with write access to LDAP directory objects when used as an AD DC","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0172.json"},{"CVE":"CVE-2013-0454","severity":"moderate","public_date":"2012-06-25T00:00:00Z","advisories":[],"bugzilla":"928419","bugzilla_description":"CVE-2013-0454 samba: the SMB2 server does not release unused shares","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0454.json"},{"CVE":"CVE-2012-6150","severity":"low","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2014:0330","RHSA-2014:0383"],"bugzilla":"1036897","bugzilla_description":"CVE-2012-6150 samba: pam_winbind fails open when non-existent group specified to require_membership_of","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["samba-0:3.6.9-168.el6_5","samba3x-0:3.6.6-0.139.el5_10","samba4-0:4.0.0-61.el6_5.rc4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6150.json"},{"CVE":"CVE-2012-2111","severity":"important","public_date":"2012-04-30T00:00:00Z","advisories":["RHSA-2012:0533"],"bugzilla":"813569","bugzilla_description":"CVE-2012-2111 samba: Incorrect permission checks when granting/removing privileges","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["samba3x-0:3.5.10-0.109.el5_8","samba-0:3.5.10-116.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2111.json"},{"CVE":"CVE-2012-1182","severity":"critical","public_date":"2012-04-10T00:00:00Z","advisories":["RHSA-2013:0515","RHSA-2013:0506","RHSA-2012:0465","RHSA-2012:0466","RHSA-2012:0478"],"bugzilla":"804093","bugzilla_description":"CVE-2012-1182 samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-122","affected_packages":["samba4-0:4.0.0-55.el6.rc4","samba-0:3.5.6-86.el6_1.5","openchange-0:1.0-4.el6","evolution-mapi-0:0.28.3-12.el6","samba-0:3.5.4-68.el6_0.3","samba-0:3.0.33-3.36.el4","samba-0:3.0.33-3.29.el5_6.5","samba3x-0:3.5.4-0.70.el5_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1182.json"},{"CVE":"CVE-2012-1586","severity":"low","public_date":"2012-03-21T00:00:00Z","advisories":["RHSA-2012:0902"],"bugzilla":"807252","bugzilla_description":"CVE-2012-1586 samba / cifs-utils: mount.cifs file existence disclosure vulnerability","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["cifs-utils-0:4.8.1-10.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1586.json"},{"CVE":"CVE-2012-0870","severity":"critical","public_date":"2012-02-21T00:00:00Z","advisories":["RHSA-2012:0332"],"bugzilla":"795509","bugzilla_description":"CVE-2012-0870 samba: Any Batched (\"AndX\") request processing infinite recursion and heap-based buffer overflow","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-674->CWE-119","affected_packages":["samba-0:3.0.33-3.29.el5_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0870.json"},{"CVE":"CVE-2012-0817","severity":"moderate","public_date":"2012-01-29T00:00:00Z","advisories":[],"bugzilla":"785746","bugzilla_description":"CVE-2012-0817 samba: DoS (smbd crash) due memory leak in management of fds for socket connections","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0817.json"},{"CVE":"CVE-2011-2724","severity":"low","public_date":"2011-07-29T00:00:00Z","advisories":["RHSA-2011:1220","RHSA-2011:1221"],"bugzilla":"726691","bugzilla_description":"CVE-2011-2724 samba, cifs-utils: mount.cifs incorrect fix for CVE-2010-0547","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["samba3x-0:3.5.4-0.83.el5_7.2","cifs-utils-0:4.8.1-2.el6_1.2","samba-0:3.5.6-86.el6_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2724.json"},{"CVE":"CVE-2011-2522","severity":"moderate","public_date":"2011-07-26T00:00:00Z","advisories":["RHSA-2011:1220","RHSA-2011:1221","RHSA-2011:1219"],"bugzilla":"721348","bugzilla_description":"CVE-2011-2522 samba (SWAT): Absent CSRF protection in various Samba web configuration formulars","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["samba-0:3.0.33-0.34.el4","samba3x-0:3.5.4-0.83.el5_7.2","samba-0:3.5.6-86.el6_1.4","samba-0:3.0.33-3.29.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2522.json"},{"CVE":"CVE-2011-2694","severity":"moderate","public_date":"2011-07-26T00:00:00Z","advisories":["RHSA-2011:1220","RHSA-2011:1221","RHSA-2011:1219"],"bugzilla":"722537","bugzilla_description":"CVE-2011-2694 samba (SWAT): XSS flaw in Change Password page","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["samba-0:3.0.33-0.34.el4","samba3x-0:3.5.4-0.83.el5_7.2","samba-0:3.5.6-86.el6_1.4","samba-0:3.0.33-3.29.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2694.json"},{"CVE":"CVE-2011-1678","severity":"low","public_date":"2011-03-03T00:00:00Z","advisories":["RHSA-2011:1220","RHSA-2011:1221","RHSA-2011:1219"],"bugzilla":"695925","bugzilla_description":"CVE-2011-1678 samba/cifs-utils: mount.cifs and umount.cifs fail to anticipate RLIMIT_FSIZE","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["samba-0:3.0.33-0.34.el4","samba3x-0:3.5.4-0.83.el5_7.2","cifs-utils-0:4.8.1-2.el6_1.2","samba-0:3.0.33-3.29.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1678.json"},{"CVE":"CVE-2011-0719","severity":"important","public_date":"2011-02-28T00:00:00Z","advisories":["RHSA-2011:0305","RHSA-2011:0306"],"bugzilla":"678328","bugzilla_description":"CVE-2011-0719 Samba unsafe fd_set usage","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["samba-0:3.0.33-3.29.el5_6.2","samba-0:3.0.33-0.30.el4","samba-0:3.5.4-68.el6_0.2","samba3x-0:3.5.4-0.70.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0719.json"},{"CVE":"CVE-2010-3069","severity":"critical","public_date":"2010-09-14T00:00:00Z","advisories":["RHSA-2010:0698","RHSA-2010:0697","RHSA-2010:0860"],"bugzilla":"630869","bugzilla_description":"CVE-2010-3069 Samba: Stack-based buffer overflow by processing specially-crafted SID records","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-129->CWE-121","affected_packages":["samba-0:3.0.33-3.29.el5_5.1","samba-0:3.0.9-1.3E.18","samba-0:3.0.33-0.19.el4_8.3","samba3x-0:3.3.8-0.52.el5_5.2","samba-0:3.5.4-68.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3069.json"},{"CVE":"CVE-2010-2063","severity":"critical","public_date":"2010-06-16T00:00:00Z","advisories":["RHSA-2010:0488"],"bugzilla":"601419","bugzilla_description":"CVE-2010-2063 samba: memory corruption vulnerability","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-228->CWE-119","affected_packages":["samba-0:3.0.33-3.7.el5_3.2","samba-0:3.0.33-3.15.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2063.json"},{"CVE":"CVE-2011-3585","severity":"low","public_date":"2010-02-25T00:00:00Z","advisories":["RHSA-2011:1221","RHSA-2011:1219"],"bugzilla":"742907","bugzilla_description":"CVE-2011-3585 Samba mtab lock file race condition","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["samba-0:3.0.33-0.34.el4","samba-0:3.5.6-86.el6_1.4","samba-0:3.0.33-3.29.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3585.json"},{"CVE":"CVE-2010-0926","severity":"low","public_date":"2010-02-05T00:00:00Z","advisories":["RHSA-2012:0313"],"bugzilla":"562568","bugzilla_description":"CVE-2010-0926 samba: insecure \"wide links\" default","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["samba-0:3.0.33-3.37.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0926.json"},{"CVE":"CVE-2010-0547","severity":"low","public_date":"2010-01-26T00:00:00Z","advisories":["RHBA-2011:0054","RHSA-2011:1219"],"bugzilla":"562156","bugzilla_description":"CVE-2010-0547 samba: mount.cifs improper device name and mountpoint strings sanitization","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["samba-0:3.0.33-0.34.el4","samba3x-0:3.5.4-0.70.el5","samba-0:3.0.33-3.29.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0547.json"},{"CVE":"CVE-2010-0787","severity":"low","public_date":"2010-01-26T00:00:00Z","advisories":["RHBA-2011:0054","RHSA-2011:1219"],"bugzilla":"577277","bugzilla_description":"CVE-2010-0787 samba: Race condition by mount (mount.cifs) operations","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["samba-0:3.0.33-0.34.el4","samba3x-0:3.5.4-0.70.el5","samba-0:3.0.33-3.29.el5_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0787.json"},{"CVE":"CVE-2009-2948","severity":"low","public_date":"2009-10-01T00:00:00Z","advisories":["RHSA-2009:1529","RHSA-2009:1585"],"bugzilla":"526074","bugzilla_description":"CVE-2009-2948 samba: information disclosure in suid mount.cifs","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["samba-0:3.0.33-3.15.el5_4","samba3x-0:3.3.8-0.46.el5","samba-0:3.0.33-0.18.el4_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2948.json"},{"CVE":"CVE-2009-2906","severity":"moderate","public_date":"2009-10-01T00:00:00Z","advisories":["RHSA-2009:1529","RHSA-2009:1528","RHSA-2009:1585"],"bugzilla":"526645","bugzilla_description":"CVE-2009-2906 samba: infinite loop flaw in smbd on unexpected oplock break notification reply","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["samba-0:3.0.33-3.15.el5_4","samba3x-0:3.3.8-0.46.el5","samba-0:3.0.33-0.18.el4_8","samba-0:3.0.9-1.3E.16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2906.json"},{"CVE":"CVE-2009-2813","severity":"low","public_date":"2009-09-10T00:00:00Z","advisories":["RHSA-2009:1529","RHSA-2009:1585"],"bugzilla":"523752","bugzilla_description":"CVE-2009-2813 Samba: Share restriction bypass via home-less directory user account(s)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["samba-0:3.0.33-3.15.el5_4","samba3x-0:3.3.8-0.46.el5","samba-0:3.0.33-0.18.el4_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2813.json"},{"CVE":"CVE-2009-1888","severity":"low","public_date":"2009-06-23T00:00:00Z","advisories":["RHSA-2009:1529","RHSA-2009:1585"],"bugzilla":"506996","bugzilla_description":"CVE-2009-1888 Samba improper file access","cvss_score":1.4,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["samba-0:3.0.33-3.15.el5_4","samba3x-0:3.3.8-0.46.el5","samba-0:3.0.33-0.18.el4_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1888.json"},{"CVE":"CVE-2008-1105","severity":"critical","public_date":"2008-05-28T00:00:00Z","advisories":["RHSA-2008:0289","RHSA-2008:0288","RHSA-2008:0290"],"bugzilla":"446724","bugzilla_description":"CVE-2008-1105 Samba client buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:2.2.12-1.21as.9.3","samba-0:3.0.10-2.el4_5.3","samba-0:3.0.25b-1.el4_6.5","samba-0:3.0.9-1.3E.15","samba-0:3.0.28-1.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1105.json"},{"CVE":"CVE-2007-6015","severity":"critical","public_date":"2007-12-10T15:00:00Z","advisories":["RHSA-2007:1114","RHSA-2007:1117"],"bugzilla":"396401","bugzilla_description":"CVE-2007-6015 samba: send_mailslot() buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.10-2.el4_5.2","samba-0:3.0.25b-1.el4_6.4","samba-0:3.0.9-1.3E.14.3","samba-0:3.0.25b-1.el5_1.4","samba-0:2.2.12-1.21as.8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6015.json"},{"CVE":"CVE-2007-4572","severity":"moderate","public_date":"2007-11-15T14:00:00Z","advisories":["RHSA-2007:1016","RHSA-2007:1013","RHSA-2007:1017"],"bugzilla":"294631","bugzilla_description":"CVE-2007-4572 samba buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.9-1.3E.14.1","samba-0:3.0.25b-1.el5_1.2","samba-0:3.0.25b-1.el4_6.2","samba-0:2.2.12-1.21as.8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4572.json"},{"CVE":"CVE-2007-5398","severity":"critical","public_date":"2007-11-15T14:00:00Z","advisories":["RHSA-2007:1034","RHSA-2007:1016","RHSA-2007:1013","RHSA-2007:1017"],"bugzilla":"358831","bugzilla_description":"CVE-2007-5398 Samba \"reply_netbios_packet()\" Buffer Overflow Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.9-1.3E.14.1","samba-0:3.0.25b-1.el5_1.2","samba-0:3.0.25b-1.el4_6.2","samba-0:3.0.10-2.el4_5.1","samba-0:2.2.12-1.21as.8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5398.json"},{"CVE":"CVE-2007-4138","severity":"moderate","public_date":"2007-09-11T00:00:00Z","advisories":["RHSA-2007:1016","RHSA-2007:1017"],"bugzilla":"286271","bugzilla_description":"CVE-2007-4138 samba incorrect primary group assignment for domain users using the rfc2307 or sfu winbind nss info plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.25b-1.el5_1.2","samba-0:3.0.25b-1.el4_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4138.json"},{"CVE":"CVE-2007-2446","severity":"critical","public_date":"2007-05-14T00:00:00Z","advisories":["RHSA-2007:0354"],"bugzilla":"239429","bugzilla_description":"CVE-2007-2446 samba heap overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.9-1.3E.13.2","samba-0:2.2.12-1.21as.6","samba-0:3.0.10-1.4E.12.2","samba-0:3.0.23c-2.el5.2.0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2446.json"},{"CVE":"CVE-2007-2447","severity":"important","public_date":"2007-05-14T00:00:00Z","advisories":["RHSA-2007:0354"],"bugzilla":"239774","bugzilla_description":"CVE-2007-2447 samba code injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.9-1.3E.13.2","samba-0:2.2.12-1.21as.6","samba-0:3.0.10-1.4E.12.2","samba-0:3.0.23c-2.el5.2.0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2447.json"},{"CVE":"CVE-2007-0452","severity":"moderate","public_date":"2007-02-05T00:00:00Z","advisories":["RHSA-2007:0061","RHSA-2007:0060"],"bugzilla":"1618269","bugzilla_description":"CVE-2007-0452 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.10-1.4E.11","samba-0:3.0.9-1.3E.12","samba-0:3.0.23c-2.el5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0452.json"},{"CVE":"CVE-2006-3403","severity":"important","public_date":"2006-07-10T00:00:00Z","advisories":["RHSA-2006:0591"],"bugzilla":"1618140","bugzilla_description":"CVE-2006-3403 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.9-1.3E.10","samba-0:3.0.10-1.4E.6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3403.json"},{"CVE":"CVE-2004-1154","severity":"important","public_date":"2004-12-16T00:00:00Z","advisories":["RHSA-2004:681","RHSA-2004:670","RHSA-2005:020"],"bugzilla":"1617382","bugzilla_description":"CVE-2004-1154 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.9-1.3E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1154.json"},{"CVE":"CVE-2004-0882","severity":"important","public_date":"2004-11-15T00:00:00Z","advisories":["RHSA-2004:632"],"bugzilla":"1617311","bugzilla_description":"CVE-2004-0882 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.7-1.3E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0882.json"},{"CVE":"CVE-2004-0930","severity":"moderate","public_date":"2004-11-08T00:00:00Z","advisories":["RHSA-2004:632"],"bugzilla":"1617324","bugzilla_description":"CVE-2004-0930 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.7-1.3E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0930.json"},{"CVE":"CVE-2004-0807","severity":"important","public_date":"2004-09-13T00:00:00Z","advisories":["RHSA-2004:467"],"bugzilla":"1617297","bugzilla_description":"CVE-2004-0807 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.7-1.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0807.json"},{"CVE":"CVE-2004-0808","severity":"important","public_date":"2004-09-13T00:00:00Z","advisories":["RHSA-2004:467"],"bugzilla":"1617298","bugzilla_description":"CVE-2004-0808 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.7-1.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0808.json"},{"CVE":"CVE-2004-0600","severity":"important","public_date":"2004-07-22T00:00:00Z","advisories":["RHSA-2004:259"],"bugzilla":"1617238","bugzilla_description":"CVE-2004-0600 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.4-6.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0600.json"},{"CVE":"CVE-2004-0686","severity":"moderate","public_date":"2004-07-22T00:00:00Z","advisories":["RHSA-2004:404","RHSA-2004:259"],"bugzilla":"1617250","bugzilla_description":"CVE-2004-0686 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.4-6.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0686.json"},{"CVE":"CVE-2004-0082","severity":"low","public_date":"2004-02-13T00:00:00Z","advisories":["RHSA-2004:064"],"bugzilla":"1617143","bugzilla_description":"CVE-2004-0082 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["samba-0:3.0.2-6.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0082.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-devanagari-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-devanagari-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-devanagari-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-gujarati-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-gujarati-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-gujarati-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-malayalam-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-malayalam-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-malayalam-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-odia-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-odia-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-odia-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-tamil-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-tamil-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/samyak-tamil-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-daemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-daemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-daemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-drivers-cameras_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-drivers-cameras_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-drivers-cameras_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-drivers-scanners_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-drivers-scanners_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-drivers-scanners_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends_security_api_results.json
new file mode 100644
index 0000000..a583fbe
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-backends_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12867","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":[],"bugzilla":"1848097","bugzilla_description":"CVE-2020-12867 sane-backends: NULL pointer dereference in sanei_epson_net_read function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12867.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2020-12866","severity":"moderate","public_date":"2020-05-17T00:00:00Z","advisories":[],"bugzilla":"1850549","bugzilla_description":"CVE-2020-12866 sane-backends: null pointer dereference in epsonds_net_read in epsonds-net.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12866.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.7"},{"CVE":"CVE-2020-12861","severity":"important","public_date":"2020-05-17T00:00:00Z","advisories":["RHSA-2020:3045","RHSA-2020:2967","RHSA-2020:2902"],"bugzilla":"1850556","bugzilla_description":"CVE-2020-12861 sane-backends: Heap buffer overflow in epsonds_net_read in epsonds-net.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["sane-backends-0:1.0.27-19.el8_1.1","sane-backends-0:1.0.27-19.el8_2.1","sane-backends-0:1.0.27-19.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12861.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2020-12864","severity":"low","public_date":"2020-05-17T00:00:00Z","advisories":[],"bugzilla":"1850564","bugzilla_description":"CVE-2020-12864 sane-backends: Reading uninitialized data in epsonds_net_read in epsonds-net.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12864.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-12862","severity":"low","public_date":"2020-05-17T00:00:00Z","advisories":[],"bugzilla":"1850579","bugzilla_description":"CVE-2020-12862 sane-backends: Out-of-bounds read in decode_binary","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12862.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-12863","severity":"low","public_date":"2020-05-17T00:00:00Z","advisories":[],"bugzilla":"1850588","bugzilla_description":"CVE-2020-12863 sane-backends: Out-of-bounds read in esci2_check_header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12863.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-12865","severity":"important","public_date":"2020-05-17T00:00:00Z","advisories":["RHSA-2020:3045","RHSA-2020:2967","RHSA-2020:2902"],"bugzilla":"1850598","bugzilla_description":"CVE-2020-12865 sane-backends: Heap buffer overflow in esci2_img","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["sane-backends-0:1.0.27-19.el8_1.1","sane-backends-0:1.0.27-19.el8_2.1","sane-backends-0:1.0.27-19.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12865.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2017-6318","severity":"low","public_date":"2016-12-16T00:00:00Z","advisories":[],"bugzilla":"1428883","bugzilla_description":"CVE-2017-6318 sane-backends: SANE_NET_CONTROL_OPTION response packet may contain memory contents of the server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6318.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-frontends_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-frontends_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sane-frontends_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlk-reset_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlk-reset_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlk-reset_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlock-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlock-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlock-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlock-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlock-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlock-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlock_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlock_security_api_results.json
new file mode 100644
index 0000000..7462776
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sanlock_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-5638","severity":"low","public_date":"2012-08-22T00:00:00Z","advisories":["RHBA-2012:1507","RHSA-2013:0691"],"bugzilla":"887010","bugzilla_description":"CVE-2012-5638 sanlock world writable /var/log/sanlock.log","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["sanlock-0:2.3-4.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5638.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sassist_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sassist_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sassist_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/satellite-5-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/satellite-5-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/satellite-5-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/satyr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/satyr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/satyr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sbc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sbc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sbc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sbd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sbd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sbd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-cmpi-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-cmpi-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-cmpi-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-cmpi-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-cmpi-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-cmpi-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-indication_helper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-indication_helper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-indication_helper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcCommon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcCommon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcCommon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcb_security_api_results.json
new file mode 100644
index 0000000..3325277
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcb_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-6644","severity":"moderate","public_date":"2018-02-06T00:00:00Z","advisories":[],"bugzilla":"1543825","bugzilla_description":"CVE-2018-6644 sblim-sfcb: NULL pointer dereference (DoS) vulnerability via POST request to /cimom","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6644.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-5185","severity":"moderate","public_date":"2015-08-20T00:00:00Z","advisories":[],"bugzilla":"1255587","bugzilla_description":"CVE-2015-5185 sblim-sfcb: lookupProviders() null pointer dereference","cvss_score":2.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5185.json"},{"CVE":"CVE-2012-3381","severity":"low","public_date":"2012-07-06T00:00:00Z","advisories":[],"bugzilla":"838160","bugzilla_description":"CVE-2012-3381 sblim-sfcb: insecure LD_LIBRARY_PATH usage","cvss_score":3.0,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3381.json"},{"CVE":"CVE-2010-1937","severity":"critical","public_date":"2010-06-01T00:00:00Z","advisories":[],"bugzilla":"605342","bugzilla_description":"CVE-2010-1937 CVE-2010-2054 sblim-sfcb: multiple vulnerabilities fixed upstream in 1.3.8","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1937.json"},{"CVE":"CVE-2010-2054","severity":"critical","public_date":"2010-06-01T00:00:00Z","advisories":[],"bugzilla":"605342","bugzilla_description":"CVE-2010-1937 CVE-2010-2054 sblim-sfcb: multiple vulnerabilities fixed upstream in 1.3.8","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2054.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-sfcc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-wbemcli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-wbemcli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sblim-wbemcli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scala-apidoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scala-apidoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scala-apidoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scala-swing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scala-swing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scala-swing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scala_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scala_security_api_results.json
new file mode 100644
index 0000000..5e734b1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scala_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-15288","severity":"moderate","public_date":"2017-11-13T00:00:00Z","advisories":[],"bugzilla":"1516915","bugzilla_description":"CVE-2017-15288 scala: Privilege escalation in Scala compilation daemon","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15288.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scap-security-guide-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scap-security-guide-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scap-security-guide-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scap-security-guide_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scap-security-guide_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scap-security-guide_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scap-workbench_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scap-workbench_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scap-workbench_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scl-utils-build_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scl-utils-build_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scl-utils-build_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scl-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scl-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scl-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scotch-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scotch-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scotch-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scotch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scotch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scotch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scrub_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scrub_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/scrub_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seabios-bin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seabios-bin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seabios-bin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seabios_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seabios_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seabios_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seahorse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seahorse_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seahorse_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seavgabios-bin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seavgabios-bin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/seavgabios-bin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sed_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sed_security_api_results.json
new file mode 100644
index 0000000..a77d63f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sed_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2007-4639","severity":"moderate","public_date":"2007-08-29T00:00:00Z","advisories":["RHSA-2007:0895"],"bugzilla":"284521","bugzilla_description":"CVE-2007-4639 EnterpriseDB security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["EnterpriseDB-0:8.1.9.27-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4639.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-minimum_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-minimum_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-minimum_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-mls_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-mls_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-mls_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-sandbox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-sandbox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-sandbox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-targeted_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-targeted_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy-targeted_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy_security_api_results.json
new file mode 100644
index 0000000..ef79f3c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/selinux-policy_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-3170","severity":"low","public_date":"2015-05-05T00:00:00Z","advisories":[],"bugzilla":"1218672","bugzilla_description":"CVE-2015-3170 selinux-policy: policy package update causes denial of service","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3170.json"},{"CVE":"CVE-2014-3215","severity":"important","public_date":"2012-12-08T00:00:00Z","advisories":["RHSA-2015:0864","RHBA-2015:2161"],"bugzilla":"1095855","bugzilla_description":"CVE-2014-3215 policycoreutils: local privilege escalation via seunshare","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-270","affected_packages":["kernel-0:2.6.32-504.16.2.el6","libcap-ng-0:0.7.5-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3215.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-cf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-cf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-cf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-milter-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-milter-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-milter-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-milter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-milter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail-milter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail_security_api_results.json
new file mode 100644
index 0000000..936cefa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sendmail_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-3956","severity":"low","public_date":"2014-05-21T00:00:00Z","advisories":[],"bugzilla":"1102174","bugzilla_description":"CVE-2014-3956 sendmail: Properly set the close-on-exec flag for file descriptors","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3956.json"},{"CVE":"CVE-2009-4565","severity":"low","public_date":"2009-12-30T00:00:00Z","advisories":["RHSA-2011:0262","RHSA-2010:0237"],"bugzilla":"552622","bugzilla_description":"CVE-2009-4565 sendmail: incorrect verification of SSL certificate with NUL in name","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["sendmail-0:8.13.1-6.el4","sendmail-0:8.13.8-8.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4565.json"},{"CVE":"CVE-2006-1173","severity":"important","public_date":"2006-06-14T01:06:00Z","advisories":["RHSA-2006:0515"],"bugzilla":"1618028","bugzilla_description":"CVE-2006-1173 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sendmail-0:8.13.1-3.RHEL4.5","sendmail-0:8.12.11-4.RHEL3.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1173.json"},{"CVE":"CVE-2006-0058","severity":"critical","public_date":"2006-03-22T16:00:00Z","advisories":["RHSA-2006:0264","RHSA-2006:0265"],"bugzilla":"1617872","bugzilla_description":"CVE-2006-0058 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sendmail-0:8.13.1-3.RHEL4.3","sendmail-0:8.12.11-4.RHEL3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0058.json"},{"CVE":"CVE-2006-7176","severity":"low","public_date":"2005-10-26T00:00:00Z","advisories":["RHSA-2007:0252","RHSA-2010:0237"],"bugzilla":"238540","bugzilla_description":"CVE-2006-7176 sendmail allows external mail with from address xxx@localhost.localdomain","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sendmail-0:8.13.1-3.2.el4","sendmail-0:8.13.8-8.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7176.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/servicelog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/servicelog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/servicelog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools-console-analyses_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools-console-analyses_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools-console-analyses_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools-console_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools-console_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools-console_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools-gui_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools-gui_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools-gui_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setroubleshoot-plugins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setroubleshoot-plugins_security_api_results.json
new file mode 100644
index 0000000..6424d9e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setroubleshoot-plugins_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-4444","severity":"important","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:1267","RHSA-2016:1293"],"bugzilla":"1332644","bugzilla_description":"CVE-2016-4444 setroubleshoot-plugins: insecure commands.getstatusoutput use in the allow_execmod plugin","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-plugins-0:3.0.40-3.1.el6_8","setroubleshoot-plugins-0:3.0.59-2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4444.json"},{"CVE":"CVE-2016-4446","severity":"important","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:1267","RHSA-2016:1293"],"bugzilla":"1339250","bugzilla_description":"CVE-2016-4446 setroubleshoot-plugins: insecure commands.getoutput use in the allow_execstack plugin","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-plugins-0:3.0.40-3.1.el6_8","setroubleshoot-plugins-0:3.0.59-2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4446.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setroubleshoot-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setroubleshoot-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setroubleshoot-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setroubleshoot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setroubleshoot_security_api_results.json
new file mode 100644
index 0000000..6c13ab0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setroubleshoot_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-4444","severity":"important","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:1267","RHSA-2016:1293"],"bugzilla":"1332644","bugzilla_description":"CVE-2016-4444 setroubleshoot-plugins: insecure commands.getstatusoutput use in the allow_execmod plugin","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-plugins-0:3.0.40-3.1.el6_8","setroubleshoot-plugins-0:3.0.59-2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4444.json"},{"CVE":"CVE-2016-4445","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":["RHBA-2015:2287","RHSA-2016:1267"],"bugzilla":"1339183","bugzilla_description":"CVE-2016-4445 setroubleshoot: insecure use of commands.getstatusoutput in sealert","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-0:3.0.47-12.el6_8","setroubleshoot-0:3.2.24-1.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4445.json"},{"CVE":"CVE-2016-4446","severity":"important","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:1267","RHSA-2016:1293"],"bugzilla":"1339250","bugzilla_description":"CVE-2016-4446 setroubleshoot-plugins: insecure commands.getoutput use in the allow_execstack plugin","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-plugins-0:3.0.40-3.1.el6_8","setroubleshoot-plugins-0:3.0.59-2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4446.json"},{"CVE":"CVE-2016-4989","severity":"important","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:1267","RHSA-2016:1293"],"bugzilla":"1346461","bugzilla_description":"CVE-2016-4989 setroubleshoot: command injection issues","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-0:3.0.47-12.el6_8","setroubleshoot-0:3.2.24-4.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4989.json"},{"CVE":"CVE-2015-1815","severity":"important","public_date":"2015-03-26T00:00:00Z","advisories":["RHSA-2015:0729"],"bugzilla":"1203352","bugzilla_description":"CVE-2015-1815 setroubleshoot: command injection via crafted file name","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["setroubleshoot-0:2.0.5-7.el5_11","setroubleshoot-0:3.0.47-6.el6_6.1","setroubleshoot-0:3.2.17-4.1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1815.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setserial_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setserial_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setserial_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setup_security_api_results.json
new file mode 100644
index 0000000..1b73c63
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/setup_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-26160","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1883371","bugzilla_description":"CVE-2020-26160 jwt-go: access restriction bypass vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26160.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-14382","severity":"moderate","public_date":"2020-09-03T00:00:00Z","advisories":[],"bugzilla":"1874712","bugzilla_description":"CVE-2020-14382 cryptsetup: Out-of-bounds write when validating segments","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14382.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-12126","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646781","bugzilla_description":"CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12130","severity":"important","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646784","bugzilla_description":"CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385->CWE-226","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-12127","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1667782","bugzilla_description":"CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11091","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1705312","bugzilla_description":"CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-1113","severity":"low","public_date":"2018-04-24T00:00:00Z","advisories":["RHSA-2018:3249"],"bugzilla":"1571094","bugzilla_description":"CVE-2018-1113 setup: nologin listed in /etc/shells violates security expectations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["setup-0:2.8.71-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1113.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-1000018","severity":"moderate","public_date":"2018-01-24T00:00:00Z","advisories":[],"bugzilla":"1537904","bugzilla_description":"CVE-2018-1000018 ovirt-hosted-engine-setup: root password exposed in log file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000018.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-1633","severity":"moderate","public_date":"2013-06-02T00:00:00Z","advisories":[],"bugzilla":"994182","bugzilla_description":"CVE-2013-1633 python-setuptools: easy_install insecure installation mechanism","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1633.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sg3_utils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sg3_utils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sg3_utils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sg3_utils-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sg3_utils-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sg3_utils-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sg3_utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sg3_utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sg3_utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgabios-bin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgabios-bin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgabios-bin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgabios_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgabios_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgabios_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgml-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgml-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgml-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgpio_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgpio_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sgpio_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shadow-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shadow-utils_security_api_results.json
new file mode 100644
index 0000000..b4505aa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shadow-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-19882","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":[],"bugzilla":"1788452","bugzilla_description":"CVE-2019-19882 shadow-utils: local users can obtain root access because setuid programs are misconfigured","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-592","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19882.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-16588","severity":"low","public_date":"2018-09-06T00:00:00Z","advisories":[],"bugzilla":"1626123","bugzilla_description":"CVE-2018-16588 shadow-utils: useradd-mkdirs.patch creates intermediate directories with 0777","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16588.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-7169","severity":"moderate","public_date":"2017-11-14T00:00:00Z","advisories":[],"bugzilla":"1546241","bugzilla_description":"CVE-2018-7169 shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7169.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-12424","severity":"moderate","public_date":"2017-03-31T00:00:00Z","advisories":[],"bugzilla":"1478359","bugzilla_description":"CVE-2017-12424 shadow-utils: Buffer overflow via newusers tool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12424.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-2616","severity":"moderate","public_date":"2017-02-22T00:00:00Z","advisories":["RHSA-2017:0654","RHSA-2017:0907"],"bugzilla":"1418710","bugzilla_description":"CVE-2017-2616 util-linux: Sending SIGKILL to other processes with root privileges via su","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":["coreutils-0:8.4-46.el6","util-linux-0:2.23.2-33.el7_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6251","severity":"low","public_date":"2016-07-19T00:00:00Z","advisories":[],"bugzilla":"1358622","bugzilla_description":"REJECTED CVE-2016-6251 shadow-utils: Potentially unsafe use of getlogin","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6251.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2016-6252","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":[],"bugzilla":"1358625","bugzilla_description":"CVE-2016-6252 shadow-utils: Incorrect integer handling results in LPE","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6252.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2013-4235","severity":"low","public_date":"2015-02-06T00:00:00Z","advisories":[],"bugzilla":"884658","bugzilla_description":"CVE-2013-4235 shadow-utils: TOCTOU race conditions by copying and removing directory trees","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4235.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2006-1174","severity":"low","public_date":"2005-02-23T00:00:00Z","advisories":["RHSA-2007:0276","RHSA-2007:0431"],"bugzilla":"1618029","bugzilla_description":"CVE-2006-1174 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["shadow-utils-2:4.0.3-61.RHEL4","shadow-utils-2:4.0.3-29.RHEL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1174.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shared-mime-info_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shared-mime-info_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shared-mime-info_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sharutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sharutils_security_api_results.json
new file mode 100644
index 0000000..8fa6c4c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sharutils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-1000097","severity":"low","public_date":"2018-02-21T00:00:00Z","advisories":[],"bugzilla":"1548018","bugzilla_description":"CVE-2018-1000097 sharutils: heap-buffer-overflow in find_archive in unshar.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000097.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2005-0990","severity":"low","public_date":"2005-03-31T00:00:00Z","advisories":["RHSA-2005:377"],"bugzilla":"1617597","bugzilla_description":"CVE-2005-0990 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sharutils-0:4.2.1-22.2","sharutils-0:4.2.1-16.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0990.json"},{"CVE":"CVE-2004-1773","severity":"low","public_date":"2004-10-01T00:00:00Z","advisories":["RHSA-2005:377"],"bugzilla":"1617418","bugzilla_description":"CVE-2004-1773 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sharutils-0:4.2.1-22.2","sharutils-0:4.2.1-16.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1773.json"},{"CVE":"CVE-2004-1772","severity":"low","public_date":"2004-04-06T00:00:00Z","advisories":["RHSA-2005:377"],"bugzilla":"1617417","bugzilla_description":"CVE-2004-1772 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sharutils-0:4.2.1-22.2","sharutils-0:4.2.1-16.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1772.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-aa64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-aa64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-aa64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-ia32_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-ia32_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-ia32_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-unsigned-aarch64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-unsigned-aarch64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-unsigned-aarch64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-unsigned-x64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-unsigned-x64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-unsigned-x64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-x64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-x64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/shim-x64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/si-units-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/si-units-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/si-units-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/si-units_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/si-units_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/si-units_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-abyssinica-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-abyssinica-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-abyssinica-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-nuosu-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-nuosu-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-nuosu-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-padauk-book-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-padauk-book-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-padauk-book-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-padauk-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-padauk-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-padauk-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-scheherazade-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-scheherazade-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sil-scheherazade-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-inject_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-inject_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-inject_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-mojos-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-mojos-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-mojos-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-mojos_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-mojos_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-mojos_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-plexus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-plexus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu-plexus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sisu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/skkdic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/skkdic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/skkdic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/skopeo-tests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/skopeo-tests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/skopeo-tests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/skopeo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/skopeo_security_api_results.json
new file mode 100644
index 0000000..a10c9cf
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/skopeo_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-1702","severity":"low","public_date":"2020-01-20T00:00:00Z","advisories":["RHSA-2020:1650","RHSA-2020:1234","RHSA-2020:1937","RHSA-2020:2681","RHBA-2020:0492","RHSA-2020:2218","RHSA-2020:2116","RHSA-2020:1227"],"bugzilla":"1792796","bugzilla_description":"CVE-2020-1702 containers/image: Container images read entire image manifest into memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["cri-o-0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7","buildah-0:1.11.6-11.el7_8","podman-0:1.6.4-16.el7_8","openshift4/ose-pod:v4.3.2-202002112006","skopeo-1:0.1.40-11.el7_8","cri-o-0:1.11.16-0.9.dev.rhaos3.11.git6d43aae.el7","docker-2:1.13.1-161.git64e9980.el7_8","container-tools:rhel8-8020020200324071414.0d58ad57"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1702.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2020-8945","severity":"moderate","public_date":"2020-01-16T00:00:00Z","advisories":["RHSA-2020:2027","RHSA-2020:2992","RHSA-2020:1234","RHSA-2020:3167","RHSA-2020:1231","RHSA-2020:1396","RHSA-2020:1230","RHSA-2020:0679","RHSA-2020:0934","RHSA-2020:1402","RHSA-2020:0863","RHSA-2020:0697","RHSA-2020:0689","RHSA-2020:1940","RHSA-2020:2413","RHSA-2020:2117","RHBA-2020:1255","RHSA-2020:0928","RHSA-2020:1937","RHSA-2020:2927"],"bugzilla":"1795838","bugzilla_description":"CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["atomic-openshift-0:3.11.248-1.git.0.92ee8ac.el7","openshift-clients-0:4.2.32-202005020632.git.1.1b0fab9.el8","skopeo-1:0.1.32-7.git1715c90.rhaos4.2.el8","podman-0:1.6.4-10.rhaos4.3.el8","openshift4/ose-docker-builder:v4.3.7-202003161611","skopeo-1:0.1.40-7.el7_8","podman-0:1.6.4-18.el7_8","openshift4/ose-cli:v4.3.7-202003161611","openshift4/ose-cli-artifacts:v4.3.7-202003161611","openshift4/ose-openshift-controller-manager-rhel7:v4.2.34-202005252115","cri-o-0:1.16.4-1.dev.rhaos4.3.git9238eee.el7","openshift4/ose-openshift-controller-manager-rhel7:v4.3.9-202003230345","cri-o-0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7","openshift-0:4.3.10-202003300855.git.0.da48c1d.el8","docker-2:1.13.1-161.git64e9980.el7_8","skopeo-1:0.1.40-4.rhaos.el8","machine-config-daemon-0:4.3.10-202003300415.git.0.56d6ae0.el8","buildah-0:1.11.6-8.el7_8","skopeo-1:0.1.32-6.git1715c90.el8_0","openshift4/ose-cluster-policy-controller-rhel7:v4.4.0-202004261927","openshift4/ose-docker-builder:v4.2.28-202004061218","openshift-clients-0:4.3.10-202003300001.git.0.e43c148.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8945.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16276","severity":"moderate","public_date":"2019-09-25T00:00:00Z","advisories":["RHSA-2020:0652","RHSA-2020:0101","RHBA-2020:0062","RHSA-2020:0329","RHBA-2019:3303","RHBA-2019:3304"],"bugzilla":"1755969","bugzilla_description":"CVE-2019-16276 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["go-toolset-1.12-golang-0:1.12.12-4.el7","go-toolset:rhel8-8010020191220185136.0ed30617","openshift4/ose-pod:v4.3.0-202001211731","ignition-0:0.33.0-6.rhaos4.2.gitc65e95c.el8","openshift-0:4.2.4-201911041319.git.0.c7d2111.el7","openshift4/ose-pod:v4.2.4-201911050122","atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7","openshift4/ose-installer:v4.2.21-202002240343","atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10214","severity":"moderate","public_date":"2019-09-09T00:00:00Z","advisories":["RHSA-2019:3403","RHSA-2019:3007","RHSA-2019:2825","RHSA-2019:2989","RHSA-2019:3494","RHSA-2019:3812","RHSA-2019:2817"],"bugzilla":"1732508","bugzilla_description":"CVE-2019-10214 containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["container-tools:rhel8-8010020190927090915.4985cc55","cri-o-0:1.9.16-5.git858756d.el7","container-tools:1.0-8010020190927091243.4985cc55","cri-o-0:1.13.11-0.7.dev.rhaos4.1.git9cb8f2f.el8","cri-o-0:1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7","cri-o-0:1.10.6-2.rhaos3.10.git56d7d9a.el7","openshift4/ose-docker-builder:v4.1.20-201910102034"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10214.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slang-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slang-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slang-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slang_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slang_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slang_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slapi-nis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slapi-nis_security_api_results.json
new file mode 100644
index 0000000..c7885b8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slapi-nis_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-0283","severity":"moderate","public_date":"2015-03-26T00:00:00Z","advisories":["RHSA-2015:0728"],"bugzilla":"1195729","bugzilla_description":"CVE-2015-0283 slapi-nis: infinite loop in getgrnam_r() and getgrgid_r()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["slapi-nis-0:0.54-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0283.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-ext_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-ext_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-ext_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-jcl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-jcl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-jcl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-jdk14_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-jdk14_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-jdk14_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-log4j12_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-log4j12_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-log4j12_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-manual_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-manual_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-manual_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-sources_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-sources_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j-sources_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j_security_api_results.json
new file mode 100644
index 0000000..c1c808d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slf4j_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-8088","severity":"important","public_date":"2018-02-22T00:00:00Z","advisories":["RHSA-2018:2419","RHSA-2018:1448","RHSA-2018:1525","RHSA-2018:1449","RHSA-2018:1248","RHSA-2018:1447","RHSA-2018:1249","RHSA-2018:0630","RHSA-2018:2930","RHSA-2018:1323","RHSA-2018:1247","RHSA-2018:0592","RHSA-2018:0627","RHSA-2018:0628","RHSA-2020:2561","RHSA-2018:2669","RHSA-2019:2413","RHSA-2019:3140","RHSA-2018:0629","RHSA-2018:1575","RHSA-2018:1451","RHSA-2018:0582","RHSA-2018:2420","RHSA-2018:1251","RHSA-2018:2143","RHSA-2018:1450"],"bugzilla":"1548909","bugzilla_description":"CVE-2018-8088 slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el7","jboss-ec2-eap-0:7.5.20-1.Final_redhat_1.ep6.el6","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el7","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el6","rhvm-appliance-0:4.2-20180504.0","slf4j-eap6-0:1.7.2-14.redhat_4.1.ep6.el5","rh-maven35-slf4j-0:1.7.25-1.3.el7","slf4j-0:1.7.4-4.el7_4","eap7-slf4j-0:1.7.22-3.redhat_2.1.ep7.el6","eap7-jboss-ec2-eap-0:7.1.2-1.GA_redhat_1.ep7.el6","eap7-slf4j-0:1.7.22-3.redhat_2.1.ep7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8088.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slirp4netns_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slirp4netns_security_api_results.json
new file mode 100644
index 0000000..77823f7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/slirp4netns_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10756","severity":"moderate","public_date":"2020-05-27T00:00:00Z","advisories":["RHSA-2020:3586","RHSA-2020:4059"],"bugzilla":"1835986","bugzilla_description":"CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["virt:rhel-8020020200909224913.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10756.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-1983","severity":"moderate","public_date":"2020-04-02T00:00:00Z","advisories":["RHBA-2020:3172","RHSA-2020:4079","RHSA-2020:3053","RHSA-2020:4290"],"bugzilla":"1829825","bugzilla_description":"CVE-2020-1983 QEMU: slirp: use-after-free in ip_reass() function in ip_input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["qemu-kvm-10:1.5.3-175.el7_9.1","container-tools:rhel8-8020120200601155013.ffd2803a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1983.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-8608","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:2774","RHSA-2020:2730","RHSA-2020:2773","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:2342","RHSA-2020:1352","RHBA-2020:0527","RHSA-2020:1351","RHSA-2020:1208","RHSA-2020:0889","RHSA-2020:1209","RHSA-2020:2844","RHSA-2020:1379","RHSA-2020:1403","RHSA-2020:3040","RHSA-2020:1292"],"bugzilla":"1798453","bugzilla_description":"CVE-2020-8608 QEMU: Slirp: potential OOB access due to unsafe snprintf() usages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-160.el7_6.7","virt:rhel-8020020200601195459.4cda2c84","slirp4netns-0:0.3.0-8.el7_7","qemu-kvm-ma-10:2.12.0-33.el7_7.3","slirp4netns-0:0.4.2-4.git21fdece.el8","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-10:1.5.3-167.el7_7.6","qemu-kvm-10:1.5.3-173.el7_8.1","virt:rhel-8000020200526192422.f8e95b4e","qemu-kvm-2:0.12.1.2-2.506.el6_10.7","qemu-kvm-ma-10:2.12.0-44.el7_8.1","container-tools:rhel8-8010120200326094405.f8993c42"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-7039","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:2730","RHSA-2020:1344","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:1360","RHSA-2020:2342","RHSA-2020:1352","RHSA-2020:1351","RHSA-2020:1296","RHSA-2020:0889","RHSA-2020:0775","RHSA-2020:1116","RHSA-2020:1358","RHSA-2020:0348","RHBA-2020:0390","RHSA-2020:1150"],"bugzilla":"1791551","bugzilla_description":"CVE-2020-7039 QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-173.el7","slirp4netns-0:0.3.0-8.el7_7","container-tools:1.0-8010020200206144344.c294d161","qemu-kvm-ma-10:2.12.0-33.el7_7.3","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","virt:rhel-8000020200305185300.f8e95b4e","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-ma-10:2.12.0-44.el7","qemu-kvm-rhev-10:2.12.0-44.el7","container-tools:rhel8-8010120200116121758.53d07e52","qemu-kvm-10:1.5.3-167.el7_7.6","slirp4netns-0:0.4.2-3.git21fdece.el8","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","virt:rhel-8010020200304114113.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7039.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-7211","severity":"low","public_date":"2019-12-30T00:00:00Z","advisories":["RHBA-2020:0390"],"bugzilla":"1792130","bugzilla_description":"CVE-2020-7211 QEMU: Slirp: potential directory traversal using relative paths via tftp server on Windows host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["slirp4netns-0:0.4.2-3.git21fdece.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7211.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2019-15890","severity":"moderate","public_date":"2019-08-25T00:00:00Z","advisories":["RHBA-2020:3172","RHSA-2020:0889","RHSA-2020:0775","RHSA-2020:0348"],"bugzilla":"1749716","bugzilla_description":"CVE-2019-15890 QEMU: Slirp: use-after-free during packet reassembly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["container-tools:rhel8-8010120200116121758.53d07e52","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","slirp4netns-0:0.3.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15890.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2019-14378","severity":"important","public_date":"2019-07-28T00:00:00Z","advisories":["RHBA-2019:3723","RHSA-2019:3742","RHSA-2020:2126","RHSA-2019:3787","RHSA-2020:0366","RHSA-2019:3403","RHSA-2019:4344","RHSA-2020:2342","RHSA-2019:3179","RHSA-2020:2065","RHSA-2020:0889","RHSA-2019:3494","RHSA-2020:0775","RHSA-2020:1216","RHSA-2019:3968"],"bugzilla":"1734745","bugzilla_description":"CVE-2019-14378 QEMU: slirp: heap buffer overflow during packet reassembly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["container-tools:rhel8-8010020190927090915.4985cc55","container-tools:1.0-8010020190927091243.4985cc55","qemu-kvm-10:1.5.3-160.el7_6.6","qemu-kvm-10:1.5.3-167.el7_7.4","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","qemu-kvm-ma-10:2.12.0-33.el7_7.1","slirp4netns-0:0.3.0-8.el7_7","qemu-kvm-rhev-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","qemu-kvm-ma-10:2.12.0-18.el7_6.6","qemu-kvm-rhev-10:2.12.0-44.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14378.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smartmontools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smartmontools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smartmontools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-anjalioldlipi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-anjalioldlipi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-anjalioldlipi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-dyuthi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-dyuthi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-dyuthi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-kalyani-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-kalyani-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-kalyani-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-meera-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-meera-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-meera-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-rachana-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-rachana-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-rachana-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-raghumalayalam-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-raghumalayalam-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-raghumalayalam-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-suruma-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-suruma-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-suruma-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/smc-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/snappy-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/snappy-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/snappy-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/snappy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/snappy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/snappy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/socat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/socat_security_api_results.json
new file mode 100644
index 0000000..d98a11b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/socat_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-2217","severity":"moderate","public_date":"2016-02-01T00:00:00Z","advisories":[],"bugzilla":"1305437","bugzilla_description":"CVE-2016-2217 socat: Hard coded 1024 bit DH p parameter was not prime","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2217.json"},{"CVE":"CVE-2015-1379","severity":"low","public_date":"2015-01-24T00:00:00Z","advisories":[],"bugzilla":"1185711","bugzilla_description":"CVE-2015-1379 socat: possible DoS with fork","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-364","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1379.json"},{"CVE":"CVE-2014-0019","severity":"low","public_date":"2014-01-28T00:00:00Z","advisories":[],"bugzilla":"1057746","bugzilla_description":"CVE-2014-0019 socat: PROXY-CONNECT address overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0019.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/socket_wrapper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/socket_wrapper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/socket_wrapper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/softhsm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/softhsm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/softhsm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/softhsm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/softhsm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/softhsm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sombok-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sombok-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sombok-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sombok_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sombok_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sombok_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sonatype-oss-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sonatype-oss-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sonatype-oss-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sonatype-plugins-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sonatype-plugins-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sonatype-plugins-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sos-audit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sos-audit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sos-audit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sos-collector_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sos-collector_security_api_results.json
new file mode 100644
index 0000000..4fed653
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sos-collector_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-14650","severity":"moderate","public_date":"2018-09-27T00:00:00Z","advisories":["RHSA-2018:3663"],"bugzilla":"1633243","bugzilla_description":"CVE-2018-14650 sos-collector: incorrect permissions set on newly created files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["sos-collector-0:1.5-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14650.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"5.9"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sos_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sos_security_api_results.json
new file mode 100644
index 0000000..f293400
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sos_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-11793","severity":"moderate","public_date":"2019-03-04T00:00:00Z","advisories":[],"bugzilla":"1687364","bugzilla_description":"CVE-2018-11793 mesos: stack overflow vulnerability in parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11793.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-14650","severity":"moderate","public_date":"2018-09-27T00:00:00Z","advisories":["RHSA-2018:3663"],"bugzilla":"1633243","bugzilla_description":"CVE-2018-14650 sos-collector: incorrect permissions set on newly created files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["sos-collector-0:1.5-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14650.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-8023","severity":"moderate","public_date":"2018-09-21T00:00:00Z","advisories":[],"bugzilla":"1632810","bugzilla_description":"CVE-2018-8023 mesos: Exposure of HMAC value via timing vulnerability in  JWT validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2015-7529","severity":"moderate","public_date":"2015-12-01T00:00:00Z","advisories":["RHSA-2016:0188","RHSA-2016:0152"],"bugzilla":"1282542","bugzilla_description":"CVE-2015-7529 sos: Usage of predictable temporary files allows privilege escalation","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-377","affected_packages":["sos-0:3.2-28.el6_7.2","sos-0:3.2-35.el7_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7529.json"},{"CVE":"CVE-2015-3171","severity":"low","public_date":"2015-05-05T00:00:00Z","advisories":[],"bugzilla":"1218658","bugzilla_description":"CVE-2015-3171 sosreport: temporary file created with world-readable permissions","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3171.json"},{"CVE":"CVE-2014-3925","severity":"low","public_date":"2014-05-29T00:00:00Z","advisories":["RHBA-2014:1200"],"bugzilla":"1103324","bugzilla_description":"CVE-2014-3925 sos: does not indicate data sent is potentially sensitive on Red Hat Enterprise Linux 5","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["sos-0:1.7-9.73.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3925.json"},{"CVE":"CVE-2014-0246","severity":null,"public_date":"2014-05-27T00:00:00Z","advisories":[],"bugzilla":"1101393","bugzilla_description":"CVE-2014-0246 sos: md5 hash of GRUB password collected when running sosreport","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0246.json"},{"CVE":"CVE-2012-2664","severity":"low","public_date":"2012-02-14T00:00:00Z","advisories":["RHSA-2013:1121","RHSA-2012:0958"],"bugzilla":"826884","bugzilla_description":"CVE-2012-2664 sosreport does not blank root password in anaconda plugin","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["sos-0:1.7-9.62.el5_9.1","sos-0:2.2-29.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2664.json"},{"CVE":"CVE-2011-4083","severity":"low","public_date":"2011-12-06T00:00:00Z","advisories":["RHSA-2012:0153","RHSA-2011:1536"],"bugzilla":"749383","bugzilla_description":"CVE-2011-4083 sos: sosreport is gathering certificate-based RHN entitlement private keys","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["sos-0:1.7-9.62.el5","sos-0:2.2-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4083.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sound-theme-freedesktop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sound-theme-freedesktop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sound-theme-freedesktop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/soundtouch-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/soundtouch-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/soundtouch-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/soundtouch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/soundtouch_security_api_results.json
new file mode 100644
index 0000000..aee2ac7
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/soundtouch_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-17097","severity":"low","public_date":"2018-09-17T00:00:00Z","advisories":[],"bugzilla":"1631054","bugzilla_description":"CVE-2018-17097 soundtouch: Out-of-bounds heap write in WavOutFile::write()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17097.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17096","severity":"low","public_date":"2018-09-17T00:00:00Z","advisories":[],"bugzilla":"1631060","bugzilla_description":"CVE-2018-17096 soundtouch: Assertion failure in BPMDetect class in BPMDetect.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-17098","severity":"low","public_date":"2018-09-17T00:00:00Z","advisories":[],"bugzilla":"1631064","bugzilla_description":"CVE-2018-17098 soundtouch: Heap corruption in WavFileBase class in WavFile.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17098.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14044","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1601618","bugzilla_description":"CVE-2018-14044 soundtouch: Reachable assertion in RateTransposer::setChannels() causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14044.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-14045","severity":"low","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1601624","bugzilla_description":"CVE-2018-14045 soundtouch: Reachable assertion in FIRFilter.cpp causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14045.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000223","severity":"moderate","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1609193","bugzilla_description":"CVE-2018-1000223 soundtouch: Heap-based buffer overflow in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() potentially leading to code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000223.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-9260","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475756","bugzilla_description":"CVE-2017-9260 soundtouch: Heap-buffer over-read in the TDStretchSSE::calcCrossCorr function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9260.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9259","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475757","bugzilla_description":"CVE-2017-9259 soundtouch: Memory allocation error in the TDStretch::acceptNewOverlapLength function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9259.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9258","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475758","bugzilla_description":"CVE-2017-9258 soundtouch: Infinite loop in the TDStretch::processSamples function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9258.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/source-highlight_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/source-highlight_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/source-highlight_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-abrt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-abrt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-abrt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-client-cert_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-client-cert_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-client-cert_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-koan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-koan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-koan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-oscap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-oscap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-oscap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-remote-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-remote-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-remote-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-usix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-usix_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spacewalk-usix_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spamassassin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spamassassin_security_api_results.json
new file mode 100644
index 0000000..15f8df6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spamassassin_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-1930","severity":"moderate","public_date":"2020-01-30T00:00:00Z","advisories":[],"bugzilla":"1802977","bugzilla_description":"CVE-2020-1930 spamassassin: command injection via crafted configuration file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1930.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-1931","severity":"moderate","public_date":"2020-01-29T00:00:00Z","advisories":[],"bugzilla":"1802975","bugzilla_description":"CVE-2020-1931 spamassassin: command injection via crafted configuration file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1931.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-11805","severity":"moderate","public_date":"2019-12-12T00:00:00Z","advisories":[],"bugzilla":"1784974","bugzilla_description":"CVE-2018-11805 spamassassin: crafted configuration files can run system commands without any output or errors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11805.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-12420","severity":"moderate","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:3973"],"bugzilla":"1784984","bugzilla_description":"CVE-2019-12420 spamassassin: crafted email message can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":["spamassassin-0:3.4.0-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12420.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-15705","severity":"important","public_date":"2018-09-17T00:00:00Z","advisories":["RHSA-2018:2916"],"bugzilla":"1629521","bugzilla_description":"CVE-2017-15705 spamassassin: Certain unclosed tags in crafted emails allow for scan timeouts and result in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["spamassassin-0:3.4.0-4.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-11780","severity":"important","public_date":"2018-09-17T00:00:00Z","advisories":[],"bugzilla":"1629532","bugzilla_description":"CVE-2018-11780 spamassassin: Potential remote code execution vulnerability in PDFInfo plugin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11780.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-11781","severity":"moderate","public_date":"2018-09-17T00:00:00Z","advisories":["RHSA-2018:2916"],"bugzilla":"1629536","bugzilla_description":"CVE-2018-11781 spamassassin: Local user code injection in the meta rule syntax","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["spamassassin-0:3.4.0-4.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11781.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2007-2873","severity":"low","public_date":"2007-06-11T00:00:00Z","advisories":["RHSA-2007:0492"],"bugzilla":"243455","bugzilla_description":"CVE-2007-2873 spamassassin symlink attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:3.1.9-1.el5","spamassassin-0:3.1.9-1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2873.json"},{"CVE":"CVE-2007-0451","severity":"important","public_date":"2007-02-13T00:00:00Z","advisories":["RHSA-2007:0074","RHSA-2007:0075"],"bugzilla":"1618365","bugzilla_description":"CVE-2007-0451 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:3.1.8-2.el5","spamassassin-0:3.1.8-2.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0451.json"},{"CVE":"CVE-2006-2447","severity":"moderate","public_date":"2006-06-06T00:00:00Z","advisories":["RHSA-2006:0543"],"bugzilla":"1618105","bugzilla_description":"CVE-2006-2447 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:3.0.6-1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-2447.json"},{"CVE":"CVE-2005-3351","severity":"moderate","public_date":"2005-09-05T00:00:00Z","advisories":["RHSA-2006:0129"],"bugzilla":"1617815","bugzilla_description":"CVE-2005-3351 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:3.0.5-3.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3351.json"},{"CVE":"CVE-2005-1266","severity":"moderate","public_date":"2005-06-15T00:00:00Z","advisories":["RHSA-2005:498"],"bugzilla":"1617623","bugzilla_description":"CVE-2005-1266 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:3.0.4-1.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1266.json"},{"CVE":"CVE-2004-0796","severity":"important","public_date":"2004-08-05T00:00:00Z","advisories":["RHSA-2004:451"],"bugzilla":"1617293","bugzilla_description":"CVE-2004-0796 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["spamassassin-0:2.55-3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0796.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sparsehash-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sparsehash-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sparsehash-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spausedd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spausedd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spausedd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spax_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spax_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spax_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spec-version-maven-plugin-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spec-version-maven-plugin-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spec-version-maven-plugin-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spec-version-maven-plugin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spec-version-maven-plugin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spec-version-maven-plugin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher-espeak-ng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher-espeak-ng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher-espeak-ng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speech-dispatcher_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speex-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speex-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speex-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speex_security_api_results.json
new file mode 100644
index 0000000..9744315
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speex_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2008-1686","severity":"important","public_date":"2008-04-10T00:00:00Z","advisories":["RHSA-2008:0235"],"bugzilla":"441239","bugzilla_description":"CVE-2008-1686 speex, libfishsound: insufficient boundary checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["speex-0:1.0.4-4.el4_6.1","speex-0:1.0.5-4.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1686.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speexdsp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speexdsp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speexdsp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speexdsp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speexdsp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/speexdsp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-client-win-x64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-client-win-x64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-client-win-x64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-client-win-x86_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-client-win-x86_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-client-win-x86_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-glib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-glib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-glib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-glib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-glib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-glib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk3-vala_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk3-vala_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk3-vala_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk_security_api_results.json
new file mode 100644
index 0000000..ebee7f9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-gtk_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14355","severity":"important","public_date":"2020-10-06T12:00:00Z","advisories":["RHSA-2020:4187","RHSA-2020:4186","RHSA-2020:4185","RHSA-2020:4184"],"bugzilla":"1868435","bugzilla_description":"CVE-2020-14355 spice: multiple buffer overflow vulnerabilities in QUIC decoding code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["spice-gtk-0:0.35-5.el7_9.1","spice-gtk-0:0.37-1.el8_2.2","spice-0:0.14.0-9.el7_9.1","spice-0:0.14.2-1.el8_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14355.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2018-10893","severity":"moderate","public_date":"2018-06-25T00:00:00Z","advisories":["RHSA-2020:0471","RHSA-2019:2229"],"bugzilla":"1598234","bugzilla_description":"CVE-2018-10893 spice-client: Insufficient encoding checks for LZ can cause different integer/buffer overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-190)","affected_packages":["spice-gtk-0:0.26-8.el6_10.2","spice-gtk-0:0.35-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2017-12194","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":[],"bugzilla":"1501200","bugzilla_description":"CVE-2017-12194 spice-gtk:  Integer overflows causing buffer overflows in spice-client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12194.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2016-3066","severity":"low","public_date":"2016-03-22T00:00:00Z","advisories":[],"bugzilla":"1320263","bugzilla_description":"CVE-2016-3066 spice-gtk: hijacks clipboard and sends contents to remote servers","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3066.json"},{"CVE":"CVE-2013-4324","severity":"important","public_date":"2013-09-18T00:00:00Z","advisories":["RHSA-2013:1273"],"bugzilla":"1006669","bugzilla_description":"CVE-2013-4324 spice-gtk: Insecure calling of polkit via polkit_unix_process_new()","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["spice-gtk-0:0.14-7.el6_4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4324.json"},{"CVE":"CVE-2012-4425","severity":"moderate","public_date":"2012-09-12T00:00:00Z","advisories":["RHSA-2012:1284"],"bugzilla":"857283","bugzilla_description":"CVE-2012-4425 spice-gtk/glib: Possible privilege escalation via un-sanitized environment variable","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["spice-gtk-0:0.11-11.el6_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4425.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-protocol_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-protocol_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-protocol_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-qxl-wddm-dod_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-qxl-wddm-dod_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-qxl-wddm-dod_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-qxl-xddm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-qxl-xddm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-qxl-xddm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-server-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-server-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-server-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-server_security_api_results.json
new file mode 100644
index 0000000..40e117f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-server_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14355","severity":"important","public_date":"2020-10-06T12:00:00Z","advisories":["RHSA-2020:4187","RHSA-2020:4186","RHSA-2020:4185","RHSA-2020:4184"],"bugzilla":"1868435","bugzilla_description":"CVE-2020-14355 spice: multiple buffer overflow vulnerabilities in QUIC decoding code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["spice-gtk-0:0.35-5.el7_9.1","spice-gtk-0:0.37-1.el8_2.2","spice-0:0.14.0-9.el7_9.1","spice-0:0.14.2-1.el8_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14355.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2019-3813","severity":"important","public_date":"2019-01-28T18:00:00Z","advisories":["RHSA-2019:0231","RHSA-2019:0232","RHSA-2019:0457"],"bugzilla":"1665371","bugzilla_description":"CVE-2019-3813 spice: Off-by-one error in array access in spice/server/memslot.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["spice-0:0.14.0-6.el7_6.1","redhat-virtualization-host-0:4.2-20190219.0.el7_6","spice-server-0:0.12.4-16.el6_10.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3813.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-10873","severity":"important","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2018:3470","RHSA-2018:2732","RHSA-2018:2731"],"bugzilla":"1596008","bugzilla_description":"CVE-2018-10873 spice: Missing check in demarshal.py:write_validate_array_item() allows for buffer overflow and denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["spice-server-0:0.12.4-16.el6_10.1","spice-0:0.14.0-2.el7_5.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10873.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2017-7506","severity":"important","public_date":"2017-07-11T00:00:00Z","advisories":["RHBA-2017:2529","RHSA-2018:3522","RHSA-2017:2471"],"bugzilla":"1452606","bugzilla_description":"CVE-2017-7506 spice: Possible buffer overflow via invalid monitor configurations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-681->CWE-119","affected_packages":["spice-0:0.12.8-2.el7.1","spice-server-0:0.12.4-16.el6_10.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2016-9578","severity":"moderate","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:0549","RHSA-2017:0254","RHSA-2017:0253","RHSA-2017:0552"],"bugzilla":"1399566","bugzilla_description":"CVE-2016-9578 spice: Remote DoS via crafted message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-770","affected_packages":["spice-server-0:0.12.4-13.el6_8.2","spice-0:0.12.4-20.el7_3","rhevm-appliance-0:20170307.0-1","redhat-virtualization-host-0:4.0-20170307.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9578.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9577","severity":"moderate","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:0549","RHSA-2017:0254","RHSA-2017:0253","RHSA-2017:0552"],"bugzilla":"1401603","bugzilla_description":"CVE-2016-9577 spice: Buffer overflow in main_channel_alloc_msg_rcv_buf when reading large messages","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-20->CWE-122","affected_packages":["spice-server-0:0.12.4-13.el6_8.2","spice-0:0.12.4-20.el7_3","rhevm-appliance-0:20170307.0-1","redhat-virtualization-host-0:4.0-20170307.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-0749","severity":"important","public_date":"2016-06-06T00:00:00Z","advisories":["RHSA-2016:1204","RHSA-2016:1205"],"bugzilla":"1300646","bugzilla_description":"CVE-2016-0749 spice: heap-based memory corruption within smartcard handling","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-131->CWE-122","affected_packages":["spice-0:0.12.4-15.el7_2.1","spice-server-0:0.12.4-13.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0749.json"},{"CVE":"CVE-2016-2150","severity":"important","public_date":"2016-06-06T00:00:00Z","advisories":["RHSA-2016:1204","RHSA-2016:1205"],"bugzilla":"1313496","bugzilla_description":"CVE-2016-2150 spice: Host memory access from guest with invalid primary surface parameters","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["spice-0:0.12.4-15.el7_2.1","spice-server-0:0.12.4-13.el6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2150.json"},{"CVE":"CVE-2015-5261","severity":"important","public_date":"2015-10-06T00:00:00Z","advisories":["RHSA-2015:1890","RHSA-2015:1889"],"bugzilla":"1261889","bugzilla_description":"CVE-2015-5261 spice: host memory access from guest using crafted images","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["spice-0:0.12.4-9.el7_1.3","spice-server-0:0.12.4-12.el6_7.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5261.json"},{"CVE":"CVE-2015-5260","severity":"moderate","public_date":"2015-09-08T00:00:00Z","advisories":["RHSA-2015:1890","RHSA-2015:1889"],"bugzilla":"1260822","bugzilla_description":"CVE-2015-5260 spice: insufficient validation of surface_id parameter can cause crash","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-20","affected_packages":["spice-0:0.12.4-9.el7_1.3","spice-server-0:0.12.4-12.el6_7.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5260.json"},{"CVE":"CVE-2015-3247","severity":"important","public_date":"2015-09-03T00:00:00Z","advisories":["RHSA-2015:1715","RHSA-2015:1713","RHSA-2015:1714"],"bugzilla":"1233238","bugzilla_description":"CVE-2015-3247 spice: memory corruption in worker_update_monitors_config()","cvss_score":7.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:C/I:C/A:C","CWE":"CWE-362","affected_packages":["spice-server-0:0.12.4-12.el6_7.1","rhev-hypervisor7-0:7.1-20150827.1.el7ev","spice-0:0.12.4-9.el7_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3247.json"},{"CVE":"CVE-2013-4282","severity":"important","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1473","RHSA-2013:1460","RHSA-2013:1474"],"bugzilla":"1000443","bugzilla_description":"CVE-2013-4282 spice: stack buffer overflow in reds_handle_ticket() function","cvss_score":6.1,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-121","affected_packages":["spice-server-0:0.12.0-12.el6_4.5","rhev-hypervisor6-0:6.4-20131016.0.el6_4","qspice-0:0.3.0-56.el5_10.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4282.json"},{"CVE":"CVE-2013-4130","severity":"moderate","public_date":"2013-07-05T00:00:00Z","advisories":["RHSA-2013:1260","RHSA-2013:1192"],"bugzilla":"984769","bugzilla_description":"CVE-2013-4130 spice: unsafe clients ring access abort","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130912.1.el6_4","spice-server-0:0.12.0-12.el6_4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4130.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-streaming-agent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-streaming-agent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-streaming-agent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-vdagent-win-x64_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-vdagent-win-x64_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-vdagent-win-x64_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-vdagent-win-x86_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-vdagent-win-x86_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-vdagent-win-x86_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-vdagent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-vdagent_security_api_results.json
new file mode 100644
index 0000000..f2fcc03
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spice-vdagent_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-15108","severity":"low","public_date":null,"advisories":[],"bugzilla":"1510864","bugzilla_description":"CVE-2017-15108 spice-vdagent: Improper validation of xfers->save_dir in vdagent_file_xfers_data()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15108.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","cvss3_score":"6.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spirv-tools-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spirv-tools-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spirv-tools-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spirv-tools-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spirv-tools-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spirv-tools-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spirv-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spirv-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/spirv-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/splix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/splix_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/splix_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite_security_api_results.json
new file mode 100644
index 0000000..a734b3f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sqlite_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15358","severity":"moderate","public_date":"2020-06-15T00:00:00Z","advisories":[],"bugzilla":"1851957","bugzilla_description":"CVE-2020-15358 sqlite: heap-based buffer overflow in multiSelectOrderBy due to mishandling of query-flattener optimization in select.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15358.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-13871","severity":"moderate","public_date":"2020-06-05T00:00:00Z","advisories":[],"bugzilla":"1845576","bugzilla_description":"CVE-2020-13871 sqlite: use-after-free in resetAccumulator in select.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13871.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-13434","severity":"moderate","public_date":"2020-05-23T00:00:00Z","advisories":[],"bugzilla":"1841223","bugzilla_description":"CVE-2020-13434 sqlite: integer overflow in sqlite3_str_vappendf function in printf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13434.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-13435","severity":"moderate","public_date":"2020-05-23T00:00:00Z","advisories":[],"bugzilla":"1841231","bugzilla_description":"CVE-2020-13435 sqlite: NULL pointer dereference leads to segmentation fault in sqlite3ExprCodeTarget in expr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13435.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-13630","severity":"moderate","public_date":"2020-05-16T00:00:00Z","advisories":[],"bugzilla":"1841562","bugzilla_description":"CVE-2020-13630 sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13630.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2020-13631","severity":"moderate","public_date":"2020-05-14T00:00:00Z","advisories":[],"bugzilla":"1841568","bugzilla_description":"CVE-2020-13631 sqlite: Virtual table can be renamed into the name of one of its shadow tables","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13631.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-13632","severity":"moderate","public_date":"2020-05-14T00:00:00Z","advisories":[],"bugzilla":"1841574","bugzilla_description":"CVE-2020-13632 sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13632.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-11655","severity":"moderate","public_date":"2020-04-03T00:00:00Z","advisories":[],"bugzilla":"1824174","bugzilla_description":"CVE-2020-11655 sqlite: malformed window-function query leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11655.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-11656","severity":"moderate","public_date":"2020-04-03T00:00:00Z","advisories":[],"bugzilla":"1824185","bugzilla_description":"CVE-2020-11656 sqlite: use-after-free in the ALTER TABLE implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9327","severity":"moderate","public_date":"2020-02-21T00:00:00Z","advisories":[],"bugzilla":"1809315","bugzilla_description":"CVE-2020-9327 sqlite: NULL pointer dereference and segmentation fault because of generated column optimizations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9327.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-6405","severity":"moderate","public_date":"2020-01-16T00:00:00Z","advisories":["RHSA-2020:0514"],"bugzilla":"1801181","bugzilla_description":"CVE-2020-6405 sqlite: Out-of-bounds read in SELECT with ON/USING clause","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["chromium-browser-0:80.0.3987.87-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-19924","severity":"moderate","public_date":"2020-01-08T00:00:00Z","advisories":["RHSA-2020:1810"],"bugzilla":"1788842","bugzilla_description":"CVE-2019-19924 sqlite: incorrect sqlite3WindowRewrite() error handling leads to mishandling certain parser-tree rewriting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["sqlite-0:3.26.0-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19924.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-19923","severity":"moderate","public_date":"2020-01-08T00:00:00Z","advisories":["RHSA-2020:0514","RHSA-2020:1810"],"bugzilla":"1788846","bugzilla_description":"CVE-2019-19923 sqlite: mishandling of certain uses of SELECT DISTINCT involving a LEFT JOIN in flattenSubquery in select.c leads to a NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["sqlite-0:3.26.0-6.el8","chromium-browser-0:80.0.3987.87-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19923.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19925","severity":"moderate","public_date":"2020-01-08T00:00:00Z","advisories":["RHSA-2020:0514","RHSA-2020:1810"],"bugzilla":"1788866","bugzilla_description":"CVE-2019-19925 sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["sqlite-0:3.26.0-6.el8","chromium-browser-0:80.0.3987.87-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19925.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20218","severity":"moderate","public_date":"2020-01-02T00:00:00Z","advisories":[],"bugzilla":"1791313","bugzilla_description":"CVE-2019-20218 sqlite: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20218.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19959","severity":"moderate","public_date":"2019-12-23T00:00:00Z","advisories":["RHSA-2020:1810"],"bugzilla":"1789595","bugzilla_description":"CVE-2019-19959 sqlite: mishandles certain uses of INSERT INTO in situations involving embedded '\\0' characters in filenames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-626","affected_packages":["sqlite-0:3.26.0-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19959.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-19926","severity":"moderate","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2020:0514"],"bugzilla":"1789364","bugzilla_description":"CVE-2019-19926 sqlite: error mishandling because of incomplete fix of CVE-2019-19880","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["chromium-browser-0:80.0.3987.87-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19926.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19880","severity":"moderate","public_date":"2019-12-17T00:00:00Z","advisories":["RHSA-2020:0514"],"bugzilla":"1787032","bugzilla_description":"CVE-2019-19880 sqlite: invalid pointer dereference in exprListAppendList in window.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["chromium-browser-0:80.0.3987.87-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19880.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13734","severity":"important","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2019:4238","RHSA-2020:2014","RHSA-2020:0273","RHSA-2020:0229","RHBA-2020:0460","RHSA-2020:0227"],"bugzilla":"1781980","bugzilla_description":"CVE-2019-13734 sqlite: fts3: improve shadow table corruption detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sqlite-0:3.26.0-4.el8_0","chromium-browser-0:79.0.3945.79-1.el6_10","sqlite-0:3.26.0-4.el8_1","redhat-coreos-42.81.20200210.0","sqlite-0:3.7.17-8.el7_7.1","sqlite-0:3.7.17-8.el7_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13734.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-13750","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2019:4238"],"bugzilla":"1781997","bugzilla_description":"CVE-2019-13750 sqlite: dropping of shadow tables not restricted in defensive mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["chromium-browser-0:79.0.3945.79-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-13751","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2019:4238"],"bugzilla":"1781998","bugzilla_description":"CVE-2019-13751 sqlite: fts3: improve detection of corrupted records","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["chromium-browser-0:79.0.3945.79-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13751.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-13752","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2019:4238","RHSA-2020:1810"],"bugzilla":"1781999","bugzilla_description":"CVE-2019-13752 sqlite: fts3: improve shadow table corruption detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sqlite-0:3.26.0-6.el8","chromium-browser-0:79.0.3945.79-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-13753","severity":"moderate","public_date":"2019-12-10T00:00:00Z","advisories":["RHSA-2019:4238","RHSA-2020:1810"],"bugzilla":"1782000","bugzilla_description":"CVE-2019-13753 sqlite: fts3: incorrectly removed corruption check","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sqlite-0:3.26.0-6.el8","chromium-browser-0:79.0.3945.79-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13753.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-19645","severity":"moderate","public_date":"2019-12-09T00:00:00Z","advisories":[],"bugzilla":"1783305","bugzilla_description":"CVE-2019-19645 sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19645.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19603","severity":"moderate","public_date":"2019-12-09T00:00:00Z","advisories":[],"bugzilla":"1785318","bugzilla_description":"CVE-2019-19603 sqlite: mishandles certain SELECT statements with a nonexistent VIEW, leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19603.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19646","severity":"moderate","public_date":"2019-12-09T00:00:00Z","advisories":[],"bugzilla":"1786743","bugzilla_description":"CVE-2019-19646 sqlite: pragma.c mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19646.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-19317","severity":"moderate","public_date":"2019-12-05T00:00:00Z","advisories":[],"bugzilla":"1784111","bugzilla_description":"CVE-2019-19317 sqlite: omits bits from the colUsed bitmask in the case of a generated column","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19317.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19242","severity":"moderate","public_date":"2019-11-27T00:00:00Z","advisories":[],"bugzilla":"1778867","bugzilla_description":"CVE-2019-19242 sqlite: SQL injection in sqlite3ExprCodeTarget in expr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19242.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-19244","severity":"low","public_date":"2019-11-22T00:00:00Z","advisories":[],"bugzilla":"1777945","bugzilla_description":"CVE-2019-19244 sqlite: allows a crash if a sub-select uses both DISTINCT and window functions and also has certain ORDER BY usage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19244.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16168","severity":"moderate","public_date":"2019-08-15T00:00:00Z","advisories":[],"bugzilla":"1768986","bugzilla_description":"CVE-2019-16168 sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16168.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-5018","severity":"moderate","public_date":"2019-05-09T00:00:00Z","advisories":[],"bugzilla":"1708301","bugzilla_description":"CVE-2019-5018 sqlite: Use-after-free in window function leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5018.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-5827","severity":"important","public_date":"2019-04-30T00:00:00Z","advisories":["RHSA-2019:1243"],"bugzilla":"1706805","bugzilla_description":"CVE-2019-5827 chromium-browser: out-of-bounds access in SQLite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["chromium-browser-0:74.0.3729.131-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5827.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8457","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2020:1810"],"bugzilla":"1716881","bugzilla_description":"CVE-2019-8457 sqlite: heap out-of-bound read in function rtreenode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["sqlite-0:3.26.0-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8457.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9937","severity":"low","public_date":"2019-03-18T00:00:00Z","advisories":[],"bugzilla":"1692357","bugzilla_description":"CVE-2019-9937 sqlite: null-pointer dereference in function fts5ChunkIterate in sqlite3.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9937.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-9936","severity":"low","public_date":"2019-03-18T00:00:00Z","advisories":[],"bugzilla":"1692365","bugzilla_description":"CVE-2019-9936 sqlite: heap-based buffer over-read in function fts5HashEntrySort in sqlite3.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9936.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-20346","severity":"important","public_date":"2018-12-04T00:00:00Z","advisories":[],"bugzilla":"1659379","bugzilla_description":"CVE-2018-20346 CVE-2018-20505 CVE-2018-20506 sqlite: Multiple flaws in sqlite which can be triggered via corrupted internal databases (Magellan)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20346.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-20505","severity":"important","public_date":"2018-12-04T00:00:00Z","advisories":[],"bugzilla":"1659379","bugzilla_description":"CVE-2018-20346 CVE-2018-20505 CVE-2018-20506 sqlite: Multiple flaws in sqlite which can be triggered via corrupted internal databases (Magellan)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20505.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-20506","severity":"important","public_date":"2018-12-04T00:00:00Z","advisories":[],"bugzilla":"1659379","bugzilla_description":"CVE-2018-20346 CVE-2018-20505 CVE-2018-20506 sqlite: Multiple flaws in sqlite which can be triggered via corrupted internal databases (Magellan)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20506.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-8740","severity":"low","public_date":"2018-03-17T00:00:00Z","advisories":[],"bugzilla":"1558804","bugzilla_description":"CVE-2018-8740 sqlite: NULL pointer dereference with databases with schema corrupted with CREATE TABLE AS allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8740.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-15286","severity":"low","public_date":"2017-10-12T00:00:00Z","advisories":[],"bugzilla":"1510438","bugzilla_description":"CVE-2017-15286 sqlite: NULL pointer dereference in tableColumnList","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15286.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13685","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":[],"bugzilla":"1488881","bugzilla_description":"CVE-2017-13685 sqlite: Local DoS via dump_callback function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13685.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7000","severity":"moderate","public_date":"2017-07-25T00:00:00Z","advisories":["RHSA-2017:1833"],"bugzilla":"1475207","bugzilla_description":"CVE-2017-7000 chromium-browser: pointer disclosure in sqlite","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["chromium-browser-0:60.0.3112.78-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10989","severity":"low","public_date":"2017-07-06T00:00:00Z","advisories":[],"bugzilla":"1469672","bugzilla_description":"CVE-2017-10989 sqlite: Heap-buffer overflow in the getNodeSize function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10989.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2016-6153","severity":"low","public_date":"2016-07-01T00:00:00Z","advisories":[],"bugzilla":"1352437","bugzilla_description":"CVE-2016-6153 sqlite: Tempdir selection vulnerability","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6153.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.2"},{"CVE":"CVE-2015-7036","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1305820","bugzilla_description":"CVE-2015-7036 sqlite: arbitrary code execution on databases with malformed schema","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7036.json"},{"CVE":"CVE-2015-3414","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:1635"],"bugzilla":"1212353","bugzilla_description":"CVE-2015-3414 sqlite: use of uninitialized memory when parsing collation sequences in src/where.c","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":["sqlite-0:3.7.17-6.el7_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3414.json"},{"CVE":"CVE-2015-3415","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:1635"],"bugzilla":"1212356","bugzilla_description":"CVE-2015-3415 sqlite: invalid free() in src/vdbe.c","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["sqlite-0:3.7.17-6.el7_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3415.json"},{"CVE":"CVE-2015-3416","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:1635","RHSA-2015:1634"],"bugzilla":"1212357","bugzilla_description":"CVE-2015-3416 sqlite: stack buffer overflow in src/printf.c","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["sqlite-0:3.6.20-1.el6_7.2","sqlite-0:3.7.17-6.el7_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3416.json"},{"CVE":"CVE-2013-7443","severity":"low","public_date":"2013-12-22T00:00:00Z","advisories":[],"bugzilla":"1243476","bugzilla_description":"CVE-2013-7443 sqlite: array overrun in the skip-scan optimization leading to memory corruption (DoS)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7443.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/squashfs-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/squashfs-tools_security_api_results.json
new file mode 100644
index 0000000..67944fa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/squashfs-tools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-4645","severity":"moderate","public_date":"2015-06-17T00:00:00Z","advisories":[],"bugzilla":"1234886","bugzilla_description":"CVE-2015-4645 squashfs-tools: integer overflow in read_fragment_table_4","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4645.json"},{"CVE":"CVE-2015-4646","severity":"moderate","public_date":"2015-06-17T00:00:00Z","advisories":[],"bugzilla":"1234887","bugzilla_description":"CVE-2015-4646 squashfs-tools: stack overflow in read_fragment_table_4 due to fix for CVE-2015-4645","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4646.json"},{"CVE":"CVE-2012-4024","severity":"moderate","public_date":"2012-07-18T00:00:00Z","advisories":[],"bugzilla":"842458","bugzilla_description":"CVE-2012-4024 squashfs-tools: remote arbitrary code execution via crafted list file","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4024.json"},{"CVE":"CVE-2012-4025","severity":"moderate","public_date":"2012-07-18T00:00:00Z","advisories":[],"bugzilla":"842460","bugzilla_description":"CVE-2012-4025 squashfs-tools: integer overflow in queue_init() may lead to abitrary code execution","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4025.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/squid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/squid_security_api_results.json
new file mode 100644
index 0000000..936897d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/squid_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15810","severity":"important","public_date":"2020-08-23T00:00:00Z","advisories":["RHSA-2020:4082","RHSA-2020:3623"],"bugzilla":"1871700","bugzilla_description":"CVE-2020-15810 squid: HTTP Request Smuggling could result in cache poisoning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["squid-7:3.5.20-17.el7_9.4","squid:4-8020020200827100059.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15810.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cvss3_score":"9.6"},{"CVE":"CVE-2020-15811","severity":"important","public_date":"2020-08-23T00:00:00Z","advisories":["RHSA-2020:4082","RHSA-2020:3623"],"bugzilla":"1871702","bugzilla_description":"CVE-2020-15811 squid: HTTP Request Splitting could result in cache poisoning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["squid-7:3.5.20-17.el7_9.4","squid:4-8020020200827100059.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15811.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cvss3_score":"9.6"},{"CVE":"CVE-2020-24606","severity":"moderate","public_date":"2020-08-23T00:00:00Z","advisories":["RHSA-2020:4082"],"bugzilla":"1871705","bugzilla_description":"CVE-2020-24606 squid: Improper input validation could result in a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["squid-7:3.5.20-17.el7_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24606.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15049","severity":"moderate","public_date":"2020-06-26T00:00:00Z","advisories":["RHSA-2020:4082"],"bugzilla":"1852550","bugzilla_description":"CVE-2020-15049 squid: Request smuggling and poisoning attack against the HTTP cache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["squid-7:3.5.20-17.el7_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15049.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.5"},{"CVE":"CVE-2020-14058","severity":"moderate","public_date":"2020-06-19T00:00:00Z","advisories":[],"bugzilla":"1852554","bugzilla_description":"CVE-2020-14058 squid: DoS in TLS handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-676","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14058.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2020-14059","severity":"moderate","public_date":"2020-06-19T00:00:00Z","advisories":[],"bugzilla":"1852558","bugzilla_description":"CVE-2020-14059 squid: DoS when processing objects in an SMP cache due to an incorrect synchronization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-662","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14059.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2019-12519","severity":"important","public_date":"2020-04-24T00:00:00Z","advisories":["RHSA-2020:2038","RHSA-2020:2040","RHSA-2020:2041","RHSA-2020:2039"],"bugzilla":"1827552","bugzilla_description":"CVE-2019-12519 squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["squid:4-8000020200428154754.f8e95b4e","squid:4-8020020200430095908.4cda2c84","squid-7:3.5.20-15.el7_8.1","squid:4-8010020200429095057.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12519.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-12520","severity":"moderate","public_date":"2020-04-24T00:00:00Z","advisories":[],"bugzilla":"1827558","bugzilla_description":"CVE-2019-12520 squid: Improper input validation in request allows for proxy manipulation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12520.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-12521","severity":"moderate","public_date":"2020-04-24T00:00:00Z","advisories":[],"bugzilla":"1827562","bugzilla_description":"CVE-2019-12521 squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12521.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-11945","severity":"important","public_date":"2020-04-24T00:00:00Z","advisories":["RHSA-2020:2038","RHSA-2020:2040","RHSA-2020:2041","RHSA-2020:2039"],"bugzilla":"1827563","bugzilla_description":"CVE-2020-11945 squid: improper access restriction upon Digest Authentication nonce replay could lead to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["squid:4-8000020200428154754.f8e95b4e","squid:4-8020020200430095908.4cda2c84","squid-7:3.5.20-15.el7_8.1","squid:4-8010020200429095057.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11945.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-12524","severity":"moderate","public_date":"2020-04-24T00:00:00Z","advisories":[],"bugzilla":"1827570","bugzilla_description":"CVE-2019-12524 squid: Improper access restriction in url_regex may lead to security bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12524.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-12522","severity":"low","public_date":"2020-04-24T00:00:00Z","advisories":[],"bugzilla":"1827580","bugzilla_description":"CVE-2019-12522 squid: lack of UID assignment in child process spawning could lead to privileges escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12522.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2020-8449","severity":"moderate","public_date":"2020-02-03T00:00:00Z","advisories":["RHSA-2020:4082"],"bugzilla":"1798540","bugzilla_description":"CVE-2020-8449 squid: Improper input validation issues in HTTP Request processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["squid-7:3.5.20-17.el7_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8449.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2020-8450","severity":"moderate","public_date":"2020-02-03T00:00:00Z","advisories":["RHSA-2020:4082"],"bugzilla":"1798552","bugzilla_description":"CVE-2020-8450 squid: Buffer overflow in reverse-proxy configurations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["squid-7:3.5.20-17.el7_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8450.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-12528","severity":"moderate","public_date":"2020-02-02T00:00:00Z","advisories":["RHSA-2020:4082"],"bugzilla":"1798534","bugzilla_description":"CVE-2019-12528 squid: Information Disclosure issue in FTP Gateway","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["squid-7:3.5.20-17.el7_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12528.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-8517","severity":"important","public_date":"2020-02-02T00:00:00Z","advisories":[],"bugzilla":"1798545","bugzilla_description":"CVE-2020-8517 squid: Buffer Overflow in ext_lm_group_acl helper","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8517.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-18678","severity":"moderate","public_date":"2019-11-05T00:00:00Z","advisories":[],"bugzilla":"1770349","bugzilla_description":"CVE-2019-18678 squid: HTTP Request Splitting issue in HTTP message processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18678.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-12526","severity":"moderate","public_date":"2019-11-05T00:00:00Z","advisories":[],"bugzilla":"1770356","bugzilla_description":"CVE-2019-12526 squid: Heap overflow issue in URN processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-18679","severity":"moderate","public_date":"2019-11-05T00:00:00Z","advisories":[],"bugzilla":"1770360","bugzilla_description":"CVE-2019-18679 squid: Information Disclosure issue in HTTP Digest Authentication","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18679.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-18677","severity":"moderate","public_date":"2019-11-05T00:00:00Z","advisories":[],"bugzilla":"1770365","bugzilla_description":"CVE-2019-18677 squid: Cross-Site Request Forgery issue in HTTP Request processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-12523","severity":"moderate","public_date":"2019-11-05T00:00:00Z","advisories":[],"bugzilla":"1770371","bugzilla_description":"CVE-2019-12523 squid: Improper input validation in URI processor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2019-18676","severity":"moderate","public_date":"2019-11-05T00:00:00Z","advisories":[],"bugzilla":"1770375","bugzilla_description":"CVE-2019-18676 squid: Buffer overflow in URI processor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18676.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-18860","severity":"moderate","public_date":"2019-11-03T00:00:00Z","advisories":[],"bugzilla":"1817121","bugzilla_description":"CVE-2019-18860 squid: Mishandled HTML in the host parameter to cachemgr.cgi results in insecure behaviour","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18860.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-12854","severity":"moderate","public_date":"2019-07-12T00:00:00Z","advisories":[],"bugzilla":"1730523","bugzilla_description":"CVE-2019-12854 squid: Denial of service in cachemgr.cgi","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12854.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-12527","severity":"important","public_date":"2019-07-12T00:00:00Z","advisories":["RHSA-2019:2593"],"bugzilla":"1730533","bugzilla_description":"CVE-2019-12527 squid: heap-based buffer overflow in HttpHeader::getAuth","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["squid:4-8000020190823131713.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12527.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-12525","severity":"moderate","public_date":"2019-07-12T00:00:00Z","advisories":["RHSA-2020:2040","RHSA-2020:2041"],"bugzilla":"1730535","bugzilla_description":"CVE-2019-12525 squid: parsing of header Proxy-Authentication leads to memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["squid:4-8020020200430095908.4cda2c84","squid-7:3.5.20-15.el7_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12525.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-12529","severity":"moderate","public_date":"2019-07-11T00:00:00Z","advisories":[],"bugzilla":"1730528","bugzilla_description":"CVE-2019-12529 squid: Out of bounds read in Proxy-Authorization header causes DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12529.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-13345","severity":"moderate","public_date":"2019-07-05T00:00:00Z","advisories":["RHSA-2020:1068","RHSA-2019:3476"],"bugzilla":"1727744","bugzilla_description":"CVE-2019-13345 squid: XSS via user_name or auth parameter in cachemgr.cgi","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["squid-7:3.5.20-15.el7","squid:4-8010020190823133019.cdc1202b"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-19131","severity":"moderate","public_date":"2018-10-31T00:00:00Z","advisories":[],"bugzilla":"1645146","bugzilla_description":"CVE-2018-19131 squid: Cross-Site Scripting when generating HTTPS response messages about TLS errors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19131.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-19132","severity":"moderate","public_date":"2018-10-31T00:00:00Z","advisories":[],"bugzilla":"1645154","bugzilla_description":"CVE-2018-19132 squid: Memory leak in SNMP query rejection code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19132.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-1172","severity":"low","public_date":"2018-04-18T00:00:00Z","advisories":[],"bugzilla":"1569424","bugzilla_description":"CVE-2018-1172 squid: Incorrect pointer handling when processing ESI responses allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1172.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-1000024","severity":"moderate","public_date":"2018-01-19T00:00:00Z","advisories":["RHSA-2020:1068"],"bugzilla":"1536939","bugzilla_description":"CVE-2018-1000024 squid: Incorrect pointer handling when processing ESI Responses can lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["squid-7:3.5.20-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000024.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2018-1000027","severity":"moderate","public_date":"2018-01-19T00:00:00Z","advisories":["RHSA-2020:1068"],"bugzilla":"1536942","bugzilla_description":"CVE-2018-1000027 squid: Incorrect pointer handling in HTTP processing and certificate download can lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-117","affected_packages":["squid-7:3.5.20-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000027.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2016-10002","severity":"moderate","public_date":"2016-12-16T00:00:00Z","advisories":["RHSA-2017:0182","RHSA-2017:0183"],"bugzilla":"1405941","bugzilla_description":"CVE-2016-10002 squid: Information disclosure in HTTP request processing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["squid-7:3.5.20-2.el7_3.2","squid34-7:3.4.14-9.el6_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10002.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-10003","severity":"low","public_date":"2016-12-16T00:00:00Z","advisories":[],"bugzilla":"1405943","bugzilla_description":"CVE-2016-10003 squid: Information disclosure in Collapsed forwarding","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10003.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-4553","severity":"moderate","public_date":"2016-05-06T00:00:00Z","advisories":["RHSA-2016:1140","RHSA-2016:1139"],"bugzilla":"1334233","bugzilla_description":"CVE-2016-4553 squid: Cache poisoning issue in HTTP Request handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["squid34-7:3.4.14-9.el6_8.3","squid-7:3.3.8-26.el7_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4553.json"},{"CVE":"CVE-2016-4554","severity":"moderate","public_date":"2016-05-06T00:00:00Z","advisories":["RHSA-2016:1140","RHSA-2016:1138","RHSA-2016:1139"],"bugzilla":"1334241","bugzilla_description":"CVE-2016-4554 squid: Header Smuggling issue in HTTP Request processing","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","CWE":"CWE-20","affected_packages":["squid34-7:3.4.14-9.el6_8.3","squid-7:3.1.23-16.el6_8.4","squid-7:3.3.8-26.el7_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4554.json"},{"CVE":"CVE-2016-4555","severity":"moderate","public_date":"2016-05-06T00:00:00Z","advisories":["RHSA-2016:1140","RHSA-2016:1139"],"bugzilla":"1334246","bugzilla_description":"CVE-2016-4555 squid: SegFault from ESIInclude::Start","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["squid34-7:3.4.14-9.el6_8.3","squid-7:3.3.8-26.el7_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4555.json"},{"CVE":"CVE-2016-4556","severity":"moderate","public_date":"2016-05-06T00:00:00Z","advisories":["RHSA-2016:1140","RHSA-2016:1138","RHSA-2016:1139"],"bugzilla":"1334786","bugzilla_description":"CVE-2016-4556 squid: SIGSEGV in ESIContext response handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["squid34-7:3.4.14-9.el6_8.3","squid-7:3.1.23-16.el6_8.4","squid-7:3.3.8-26.el7_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4556.json"},{"CVE":"CVE-2016-4051","severity":"moderate","public_date":"2016-04-20T00:00:00Z","advisories":["RHSA-2016:1140","RHSA-2016:1138","RHSA-2016:1139"],"bugzilla":"1329126","bugzilla_description":"CVE-2016-4051 squid: buffer overflow in cachemgr.cgi","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["squid34-7:3.4.14-9.el6_8.3","squid-7:3.1.23-16.el6_8.4","squid-7:3.3.8-26.el7_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4051.json"},{"CVE":"CVE-2016-4052","severity":"moderate","public_date":"2016-04-20T00:00:00Z","advisories":["RHSA-2016:1140","RHSA-2016:1138","RHSA-2016:1139"],"bugzilla":"1329136","bugzilla_description":"CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 squid: multiple issues in ESI processing","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["squid34-7:3.4.14-9.el6_8.3","squid-7:3.1.23-16.el6_8.4","squid-7:3.3.8-26.el7_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4052.json"},{"CVE":"CVE-2016-4053","severity":"moderate","public_date":"2016-04-20T00:00:00Z","advisories":["RHSA-2016:1140","RHSA-2016:1138","RHSA-2016:1139"],"bugzilla":"1329136","bugzilla_description":"CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 squid: multiple issues in ESI processing","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["squid34-7:3.4.14-9.el6_8.3","squid-7:3.1.23-16.el6_8.4","squid-7:3.3.8-26.el7_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4053.json"},{"CVE":"CVE-2016-4054","severity":"moderate","public_date":"2016-04-20T00:00:00Z","advisories":["RHSA-2016:1140","RHSA-2016:1138","RHSA-2016:1139"],"bugzilla":"1329136","bugzilla_description":"CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 squid: multiple issues in ESI processing","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["squid34-7:3.4.14-9.el6_8.3","squid-7:3.1.23-16.el6_8.4","squid-7:3.3.8-26.el7_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4054.json"},{"CVE":"CVE-2016-5408","severity":"moderate","public_date":"2016-04-20T00:00:00Z","advisories":["RHSA-2016:1573"],"bugzilla":"1359203","bugzilla_description":"CVE-2016-5408 squid: Buffer overflow vulnerability in cachemgr.cgi tool","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["squid-7:3.1.23-16.el6_8.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5408.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-3947","severity":"important","public_date":"2016-04-01T00:00:00Z","advisories":[],"bugzilla":"1323590","bugzilla_description":"CVE-2016-3947 squid: buffer overrun in Squid proxy pinger","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3947.json"},{"CVE":"CVE-2016-3948","severity":"moderate","public_date":"2016-04-01T00:00:00Z","advisories":["RHSA-2016:2600"],"bugzilla":"1323594","bugzilla_description":"CVE-2016-3948 squid: denial of service issue in HTTP response processing","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["squid-7:3.5.20-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3948.json"},{"CVE":"CVE-2016-2569","severity":"moderate","public_date":"2016-02-24T00:00:00Z","advisories":["RHSA-2016:2600"],"bugzilla":"1312257","bugzilla_description":"CVE-2016-2569 CVE-2016-2570 squid: some code paths fail to check bounds in string object","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["squid-7:3.5.20-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2569.json"},{"CVE":"CVE-2016-2570","severity":"moderate","public_date":"2016-02-24T00:00:00Z","advisories":["RHSA-2016:2600"],"bugzilla":"1312257","bugzilla_description":"CVE-2016-2569 CVE-2016-2570 squid: some code paths fail to check bounds in string object","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["squid-7:3.5.20-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2570.json"},{"CVE":"CVE-2016-2571","severity":"moderate","public_date":"2016-02-24T00:00:00Z","advisories":["RHSA-2016:2600"],"bugzilla":"1312262","bugzilla_description":"CVE-2016-2571 CVE-2016-2572 squid: wrong error handling for malformed HTTP responses","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-228","affected_packages":["squid-7:3.5.20-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2571.json"},{"CVE":"CVE-2016-2572","severity":"moderate","public_date":"2016-02-24T00:00:00Z","advisories":["RHSA-2016:2600"],"bugzilla":"1312262","bugzilla_description":"CVE-2016-2571 CVE-2016-2572 squid: wrong error handling for malformed HTTP responses","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-228","affected_packages":["squid-7:3.5.20-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2572.json"},{"CVE":"CVE-2016-2390","severity":"moderate","public_date":"2016-02-16T00:00:00Z","advisories":[],"bugzilla":"1308865","bugzilla_description":"CVE-2016-2390 squid: incorrect server error handling resulting in denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2390.json"},{"CVE":"CVE-2015-5400","severity":"low","public_date":"2015-07-06T00:00:00Z","advisories":[],"bugzilla":"1240741","bugzilla_description":"CVE-2015-5400 squid: information disclosure due to incorrect handling of peer responses in tunnel.cc (SQUID-2015:2)","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200->CWE-391->CWE-392","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5400.json"},{"CVE":"CVE-2015-3455","severity":"moderate","public_date":"2015-05-01T00:00:00Z","advisories":["RHSA-2015:2378"],"bugzilla":"1218118","bugzilla_description":"CVE-2015-3455 squid: incorrect X509 server certificate validation (SQUID-2015:1)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-697->CWE-297","affected_packages":["squid-7:3.3.8-26.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3455.json"},{"CVE":"CVE-2015-0881","severity":"moderate","public_date":"2015-03-06T00:00:00Z","advisories":[],"bugzilla":"1199518","bugzilla_description":"CVE-2015-0881 squid: CRLF injection flaw permitting HTTP response splitting attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0881.json"},{"CVE":"CVE-2014-9749","severity":"moderate","public_date":"2015-01-28T00:00:00Z","advisories":[],"bugzilla":"1186768","bugzilla_description":"CVE-2014-9749 squid: Nonce replay vulnerability in Digest authentication","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9749.json"},{"CVE":"CVE-2014-7142","severity":"low","public_date":"2014-09-16T00:00:00Z","advisories":[],"bugzilla":"1148832","bugzilla_description":"CVE-2014-7142 squid: pinger incorrect input validation flaw in handling of ICMP replies (SQUID-2014:4)","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-129","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7142.json"},{"CVE":"CVE-2014-7141","severity":"low","public_date":"2014-09-09T00:00:00Z","advisories":[],"bugzilla":"1139715","bugzilla_description":"CVE-2014-7141 squid: pinger OOB array index flaw in handling of ICMP replies (SQUID-2014:4)","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-129","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7141.json"},{"CVE":"CVE-2014-6270","severity":"moderate","public_date":"2014-09-09T00:00:00Z","advisories":[],"bugzilla":"1139967","bugzilla_description":"CVE-2014-6270 squid: off-by-one error in snmpHandleUdp() leading to a bss-based buffer overflow (SQUID-2014:3)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6270.json"},{"CVE":"CVE-2014-3609","severity":"important","public_date":"2014-08-28T00:00:00Z","advisories":["RHSA-2014:1148","RHSA-2014:1147"],"bugzilla":"1134209","bugzilla_description":"CVE-2014-3609 squid: assertion failure in Range header processing (SQUID-2014:2)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-228->CWE-617","affected_packages":["squid-7:3.1.10-22.el6_5","squid-7:3.3.8-12.el7_0","squid-7:2.6.STABLE21-7.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3609.json"},{"CVE":"CVE-2014-0128","severity":"moderate","public_date":"2014-03-09T00:00:00Z","advisories":["RHSA-2014:0597"],"bugzilla":"1074870","bugzilla_description":"CVE-2014-0128 squid: denial of service when using SSL-Bump","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["squid-7:3.1.10-20.el6_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0128.json"},{"CVE":"CVE-2013-4123","severity":"moderate","public_date":"2013-07-13T00:00:00Z","advisories":[],"bugzilla":"984632","bugzilla_description":"CVE-2013-4123 squid: Denial of service when processing specially-crafted HTTP requests (SQUID-2013:3)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4123.json"},{"CVE":"CVE-2013-4115","severity":"low","public_date":"2013-07-10T00:00:00Z","advisories":["RHSA-2014:1148"],"bugzilla":"983653","bugzilla_description":"CVE-2013-4115 squid: buffer overflow when processing overly long DNS names (SQUID-2013:2)","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["squid-7:3.1.10-22.el6_5","squid-7:2.6.STABLE21-7.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4115.json"},{"CVE":"CVE-2013-1839","severity":"moderate","public_date":"2013-03-05T00:00:00Z","advisories":[],"bugzilla":"920421","bugzilla_description":"CVE-2013-1839 Squid: strHdrAcptLangGetItem() infinite CPU loop","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1839.json"},{"CVE":"CVE-2013-0189","severity":"moderate","public_date":"2013-01-01T00:00:00Z","advisories":[],"bugzilla":"895972","bugzilla_description":"CVE-2013-0189 squid: Incomplete fix for the CVE-2012-5643 issue","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0189.json"},{"CVE":"CVE-2012-5643","severity":"moderate","public_date":"2012-12-17T00:00:00Z","advisories":["RHSA-2013:0505"],"bugzilla":"887962","bugzilla_description":"CVE-2012-5643 squid: cachemgr.cgi memory usage DoS and memory leaks","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["squid-7:3.1.10-16.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5643.json"},{"CVE":"CVE-2012-2213","severity":"low","public_date":"2012-04-16T00:00:00Z","advisories":[],"bugzilla":"817521","bugzilla_description":"CVE-2012-2213 squid: URL filtering bypass","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2213.json"},{"CVE":"CVE-2011-3205","severity":"moderate","public_date":"2011-08-28T00:00:00Z","advisories":["RHSA-2011:1293"],"bugzilla":"734583","bugzilla_description":"CVE-2011-3205 squid: buffer overflow flaw in Squid's Gopher reply parser (SQUID-2011:3)","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["squid-7:3.1.10-1.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3205.json"},{"CVE":"CVE-2011-4096","severity":"moderate","public_date":"2011-06-06T00:00:00Z","advisories":["RHSA-2011:1791"],"bugzilla":"750316","bugzilla_description":"CVE-2011-4096 squid: Invalid free by processing CNAME DNS record pointing to another CNAME record pointing to an empty A-record","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["squid-7:3.1.10-1.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4096.json"},{"CVE":"CVE-2010-3072","severity":"low","public_date":"2010-09-03T00:00:00Z","advisories":["RHSA-2011:0545"],"bugzilla":"630444","bugzilla_description":"CVE-2010-3072 Squid: Denial of service due internal error in string handling (SQUID-2010:3)","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["squid-7:3.1.10-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3072.json"},{"CVE":"CVE-2010-2951","severity":"low","public_date":"2010-08-18T00:00:00Z","advisories":[],"bugzilla":"626927","bugzilla_description":"CVE-2010-2951 squid: child assertion failure when processing large DNS replies with no IPv6 resolver present","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2951.json"},{"CVE":"CVE-2010-0308","severity":"low","public_date":"2009-12-27T00:00:00Z","advisories":["RHSA-2010:0221"],"bugzilla":"556389","bugzilla_description":"CVE-2010-0308 squid: temporary DoS (assertion failure) triggered by truncated DNS packet (SQUID-2010:1)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["squid-7:2.6.STABLE21-6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0308.json"},{"CVE":"CVE-2009-2855","severity":"low","public_date":"2009-06-28T00:00:00Z","advisories":["RHSA-2010:0221"],"bugzilla":"518182","bugzilla_description":"CVE-2009-2855 squid: DoS (100% CPU use) while processing certain external ACL helper HTTP headers","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["squid-7:2.6.STABLE21-6.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2855.json"},{"CVE":"CVE-2009-0801","severity":"low","public_date":"2009-02-23T00:00:00Z","advisories":[],"bugzilla":"488502","bugzilla_description":"CVE-2009-0801 squid: remote bypass of access controls","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0801.json"},{"CVE":"CVE-2008-1612","severity":"moderate","public_date":"2008-03-22T00:00:00Z","advisories":["RHSA-2008:0214"],"bugzilla":"439801","bugzilla_description":"CVE-2008-1612 squid: regression in SQUID-2007:2 / CVE-2007-6239","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["squid-7:2.5.STABLE14-1.4E.el4_6.2","squid-7:2.6.STABLE6-5.el5_1.3","squid-7:2.4.STABLE7-1.21as.12","squid-7:2.5.STABLE3-9.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1612.json"},{"CVE":"CVE-2007-6239","severity":"moderate","public_date":"2007-12-04T00:00:00Z","advisories":["RHSA-2007:1130"],"bugzilla":"410181","bugzilla_description":"CVE-2007-6239 squid: DoS in cache updates","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE14-1.4E.el4_6.1","squid-7:2.6.STABLE6-5.el5_1.2","squid-7:2.4.STABLE7-1.21as.11","squid-7:2.5.STABLE3-8.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6239.json"},{"CVE":"CVE-2007-1560","severity":"moderate","public_date":"2007-03-20T00:00:00Z","advisories":["RHSA-2007:0131"],"bugzilla":"1618302","bugzilla_description":"CVE-2007-1560 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.6.STABLE6-4.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1560.json"},{"CVE":"CVE-2005-2917","severity":"moderate","public_date":"2005-09-15T00:00:00Z","advisories":["RHSA-2006:0045","RHSA-2006:0052"],"bugzilla":"1617765","bugzilla_description":"CVE-2005-2917 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE6-3.4E.12","squid-7:2.5.STABLE3-6.3E.16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2917.json"},{"CVE":"CVE-2005-2794","severity":"important","public_date":"2005-09-01T00:00:00Z","advisories":["RHSA-2005:766"],"bugzilla":"1617754","bugzilla_description":"CVE-2005-2794 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE6-3.4E.11","squid-7:2.5.STABLE3-6.3E.14"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2794.json"},{"CVE":"CVE-2005-2796","severity":"important","public_date":"2005-09-01T00:00:00Z","advisories":["RHSA-2005:766"],"bugzilla":"1617755","bugzilla_description":"CVE-2005-2796 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE6-3.4E.11","squid-7:2.5.STABLE3-6.3E.14"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2796.json"},{"CVE":"CVE-2005-1519","severity":"low","public_date":"2005-05-11T00:00:00Z","advisories":["RHSA-2005:489","RHSA-2005:415"],"bugzilla":"1617653","bugzilla_description":"CVE-2005-1519 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE6-3.4E.9","squid-7:2.5.STABLE3-6.3E.13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1519.json"},{"CVE":"CVE-2005-0718","severity":"low","public_date":"2005-03-04T00:00:00Z","advisories":["RHSA-2005:489","RHSA-2005:415"],"bugzilla":"1617563","bugzilla_description":"CVE-2005-0718 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE6-3.4E.9","squid-7:2.5.STABLE3-6.3E.13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0718.json"},{"CVE":"CVE-2005-1345","severity":"low","public_date":"2005-03-04T00:00:00Z","advisories":["RHSA-2005:415"],"bugzilla":"1617631","bugzilla_description":"CVE-2005-1345 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE6-3.4E.9","squid-7:2.5.STABLE3-6.3E.13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1345.json"},{"CVE":"CVE-2005-0626","severity":"low","public_date":"2005-03-02T00:00:00Z","advisories":["RHSA-2005:415"],"bugzilla":"1617553","bugzilla_description":"CVE-2005-0626 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE6-3.4E.9","squid-7:2.5.STABLE3-6.3E.13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0626.json"},{"CVE":"CVE-2005-0446","severity":"moderate","public_date":"2005-02-13T00:00:00Z","advisories":["RHSA-2005:201","RHSA-2005:173"],"bugzilla":"1617523","bugzilla_description":"CVE-2005-0446 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE6-3.4E.5","squid-7:2.5.STABLE3-6.3E.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0446.json"},{"CVE":"CVE-2005-0174","severity":null,"public_date":"2005-01-31T00:00:00Z","advisories":["RHSA-2005:061","RHSA-2005:060"],"bugzilla":"1617479","bugzilla_description":"CVE-2005-0174 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE3-6.3E.7","squid-7:2.5.STABLE6-3.4E.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0174.json"},{"CVE":"CVE-2005-0175","severity":null,"public_date":"2005-01-31T00:00:00Z","advisories":["RHSA-2005:061","RHSA-2005:060"],"bugzilla":"1617480","bugzilla_description":"CVE-2005-0175 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE3-6.3E.7","squid-7:2.5.STABLE6-3.4E.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0175.json"},{"CVE":"CVE-2005-0241","severity":"moderate","public_date":"2005-01-31T00:00:00Z","advisories":["RHSA-2005:061","RHSA-2005:060"],"bugzilla":"1617504","bugzilla_description":"CVE-2005-0241 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE3-6.3E.7","squid-7:2.5.STABLE6-3.4E.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0241.json"},{"CVE":"CVE-2005-0211","severity":"important","public_date":"2005-01-28T00:00:00Z","advisories":["RHSA-2005:061","RHSA-2005:060"],"bugzilla":"1617498","bugzilla_description":"CVE-2005-0211 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE3-6.3E.7","squid-7:2.5.STABLE6-3.4E.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0211.json"},{"CVE":"CVE-2005-0094","severity":null,"public_date":"2005-01-12T00:00:00Z","advisories":["RHSA-2005:061","RHSA-2005:060"],"bugzilla":"1617455","bugzilla_description":"CVE-2005-0094 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE3-6.3E.7","squid-7:2.5.STABLE6-3.4E.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0094.json"},{"CVE":"CVE-2005-0095","severity":null,"public_date":"2005-01-12T00:00:00Z","advisories":["RHSA-2005:061","RHSA-2005:060"],"bugzilla":"1617456","bugzilla_description":"CVE-2005-0095 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE3-6.3E.7","squid-7:2.5.STABLE6-3.4E.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0095.json"},{"CVE":"CVE-2005-0173","severity":null,"public_date":"2005-01-10T00:00:00Z","advisories":["RHSA-2005:061","RHSA-2005:060"],"bugzilla":"1617478","bugzilla_description":"CVE-2005-0173 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE3-6.3E.7","squid-7:2.5.STABLE6-3.4E.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0173.json"},{"CVE":"CVE-2005-0096","severity":null,"public_date":"2005-01-08T00:00:00Z","advisories":["RHSA-2005:061","RHSA-2005:060"],"bugzilla":"1617457","bugzilla_description":"CVE-2005-0096 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE3-6.3E.7","squid-7:2.5.STABLE6-3.4E.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0096.json"},{"CVE":"CVE-2005-0097","severity":null,"public_date":"2005-01-08T00:00:00Z","advisories":["RHSA-2005:061","RHSA-2005:060"],"bugzilla":"1617458","bugzilla_description":"CVE-2005-0097 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE3-6.3E.7","squid-7:2.5.STABLE6-3.4E.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0097.json"},{"CVE":"CVE-2004-2479","severity":"low","public_date":"2004-11-23T00:00:00Z","advisories":["RHSA-2005:766"],"bugzilla":"1617425","bugzilla_description":"CVE-2004-2479 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE6-3.4E.11","squid-7:2.5.STABLE3-6.3E.14"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-2479.json"},{"CVE":"CVE-2004-0918","severity":"important","public_date":"2004-10-11T00:00:00Z","advisories":["RHSA-2004:591"],"bugzilla":"453211","bugzilla_description":"CVE-2004-0918  Squid SNMP DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE3-6.3E.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0918.json"},{"CVE":"CVE-2004-0832","severity":"moderate","public_date":"2004-08-18T00:00:00Z","advisories":["RHSA-2004:462"],"bugzilla":"1617307","bugzilla_description":"CVE-2004-0832 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE3-6.3E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0832.json"},{"CVE":"CVE-2004-0541","severity":"moderate","public_date":"2004-06-08T00:00:00Z","advisories":["RHSA-2004:242"],"bugzilla":"1617226","bugzilla_description":"CVE-2004-0541 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE3-6.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0541.json"},{"CVE":"CVE-2004-0189","severity":"low","public_date":"2004-02-29T00:00:00Z","advisories":["RHSA-2004:133","RHSA-2004:134"],"bugzilla":"1617177","bugzilla_description":"CVE-2004-0189 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE3-5.3E"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0189.json"},{"CVE":"CVE-1999-0710","severity":"low","public_date":"1999-07-25T00:00:00Z","advisories":["RHSA-2005:489","RHSA-2005:415"],"bugzilla":"1616452","bugzilla_description":"CVE-1999-0710 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["squid-7:2.5.STABLE6-3.4E.9","squid-7:2.5.STABLE3-6.3E.13"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-1999-0710.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/srp_daemon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/srp_daemon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/srp_daemon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sscg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sscg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sscg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-ad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-ad_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-ad_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-common-pac_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-common-pac_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-common-pac_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-dbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-dbus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-dbus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-ipa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-ipa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-ipa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-kcm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-kcm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-kcm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-krb5-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-krb5-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-krb5-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-krb5_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-krb5_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-krb5_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-ldap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-ldap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-ldap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-libwbclient_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-libwbclient_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-libwbclient_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-nfs-idmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-nfs-idmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-nfs-idmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-polkit-rules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-polkit-rules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-polkit-rules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-proxy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-proxy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-proxy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-winbind-idmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-winbind-idmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd-winbind-idmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd_security_api_results.json
new file mode 100644
index 0000000..c3f0a9b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sssd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-16838","severity":"low","public_date":"2019-02-04T00:00:00Z","advisories":["RHSA-2019:2177","RHSA-2019:3651","RHSA-2019:2437","RHBA-2019:3303"],"bugzilla":"1640820","bugzilla_description":"CVE-2018-16838 sssd: improper implementation of GPOs due to too restrictive permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["redhat-coreos-42.81.20191107.0","sssd-0:1.16.4-21.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","sssd-0:2.2.0-19.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-16883","severity":"low","public_date":"2018-12-19T00:00:00Z","advisories":[],"bugzilla":"1659862","bugzilla_description":"CVE-2018-16883 sssd: Information leak in infopipe due to an improper uid restriction","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16883.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-3811","severity":"moderate","public_date":"2018-12-04T00:00:00Z","advisories":["RHSA-2019:2177"],"bugzilla":"1656618","bugzilla_description":"CVE-2019-3811 sssd: fallback_homedir returns '/' for empty home directories in passwd file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552->CWE-200","affected_packages":["sssd-0:1.16.4-21.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3811.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2018-10852","severity":"low","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:3158"],"bugzilla":"1588810","bugzilla_description":"CVE-2018-10852 sssd: information leak from the sssd-sudo responder","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["sssd-0:1.16.2-13.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10852.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2017-12173","severity":"moderate","public_date":"2017-10-03T00:00:00Z","advisories":["RHSA-2018:1877","RHSA-2017:3379"],"bugzilla":"1498173","bugzilla_description":"CVE-2017-12173 sssd: unsanitized input when searching in local cache database","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["sssd-0:1.15.2-50.el7_4.8","sssd-0:1.13.3-60.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12173.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-5292","severity":"low","public_date":"2015-09-23T00:00:00Z","advisories":["RHSA-2015:2355","RHSA-2015:2019"],"bugzilla":"1267580","bugzilla_description":"CVE-2015-5292 sssd: memory leak in the sssd_pac_plugin","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["sssd-0:1.13.0-40.el7","sssd-0:1.12.4-47.el6_7.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5292.json"},{"CVE":"CVE-2014-0249","severity":"low","public_date":"2014-05-13T00:00:00Z","advisories":["RHBA-2014:1375","RHBA-2015:0441"],"bugzilla":"1101751","bugzilla_description":"CVE-2014-0249 sssd: incorrect expansion of group membership when encountering a non-POSIX group","cvss_score":2.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["sssd-0:1.12.2-58.el7","sssd-0:1.11.6-30.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0249.json"},{"CVE":"CVE-2013-0287","severity":"moderate","public_date":"2013-03-19T00:00:00Z","advisories":["RHSA-2013:0663"],"bugzilla":"910938","bugzilla_description":"CVE-2013-0287 sssd: simple access provider flaw prevents intended ACL use when client to an AD provider","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["sssd-0:1.9.2-82.4.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0287.json"},{"CVE":"CVE-2013-0219","severity":"low","public_date":"2013-01-23T00:00:00Z","advisories":["RHSA-2013:0508","RHSA-2013:1319"],"bugzilla":"884254","bugzilla_description":"CVE-2013-0219 sssd: TOCTOU race conditions by copying and removing directory trees","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-367","affected_packages":["sssd-0:1.5.1-70.el5","sssd-0:1.9.2-82.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0219.json"},{"CVE":"CVE-2013-0220","severity":"low","public_date":"2013-01-23T00:00:00Z","advisories":["RHSA-2013:0508"],"bugzilla":"884601","bugzilla_description":"CVE-2013-0220 sssd: Out-of-bounds read flaws in autofs and ssh services responders","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["sssd-0:1.9.2-82.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0220.json"},{"CVE":"CVE-2010-4341","severity":"low","public_date":"2011-01-11T00:00:00Z","advisories":["RHSA-2011:0560","RHSA-2011:0975"],"bugzilla":"661163","bugzilla_description":"CVE-2010-4341 sssd: DoS in sssd PAM responder can prevent logins","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["sssd-0:1.5.1-34.el6","sssd-0:1.5.1-37.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4341.json"},{"CVE":"CVE-2010-2940","severity":"important","public_date":"2010-08-24T00:00:00Z","advisories":[],"bugzilla":"625189","bugzilla_description":"CVE-2010-2940 sssd: allows null password entry to authenticate against LDAP","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2940.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/star_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/star_security_api_results.json
new file mode 100644
index 0000000..856954c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/star_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-6321","severity":"moderate","public_date":"2016-10-27T00:00:00Z","advisories":[],"bugzilla":"1318562","bugzilla_description":"CVE-2016-6321 tar: Bypassing the extract path name","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6321.json"},{"CVE":"CVE-2013-1793","severity":"moderate","public_date":"2015-07-23T00:00:00Z","advisories":[],"bugzilla":"916767","bugzilla_description":"CVE-2013-1793 openstack-utils: openstack-db insecure password creation for services","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1793.json"},{"CVE":"CVE-2007-4134","severity":"moderate","public_date":"2007-08-21T00:00:00Z","advisories":["RHSA-2007:0873"],"bugzilla":"253856","bugzilla_description":"CVE-2007-4134 star directory traversal vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["star-0:1.5a75-2","star-0:1.5a25-8","star-0:1.5a08-5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4134.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/startup-notification-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/startup-notification-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/startup-notification-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/startup-notification_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/startup-notification_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/startup-notification_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stax-ex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stax-ex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stax-ex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stix-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stix-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stix-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stix-math-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stix-math-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stix-math-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/strace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/strace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/strace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stratis-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stratis-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stratis-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stratisd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stratisd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stratisd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stunnel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stunnel_security_api_results.json
new file mode 100644
index 0000000..43d9865
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/stunnel_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-3644","severity":"important","public_date":"2015-05-14T00:00:00Z","advisories":[],"bugzilla":"1221673","bugzilla_description":"CVE-2015-3644 stunnel: authentication bypass with the \"redirect\" option","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3644.json"},{"CVE":"CVE-2014-0016","severity":"moderate","public_date":"2014-03-05T00:00:00Z","advisories":[],"bugzilla":"1072180","bugzilla_description":"CVE-2014-0016 stunnel: Improper initialization of PRNG after fork()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0016.json"},{"CVE":"CVE-2013-1762","severity":"moderate","public_date":"2013-03-03T00:00:00Z","advisories":["RHSA-2013:0714"],"bugzilla":"917839","bugzilla_description":"CVE-2013-1762 Stunnel: buffer overflow vulnerability due to incorrect integer conversion in the NTLM authentication of the CONNECT protocol negotiation","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["stunnel-0:4.29-3.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1762.json"},{"CVE":"CVE-2011-2940","severity":"important","public_date":"2011-08-18T00:00:00Z","advisories":[],"bugzilla":"732068","bugzilla_description":"CVE-2011-2940 stunnel: heap corruption flaw in 4.4x leads to remote DoS and possible code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2940.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-cockpit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-cockpit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-cockpit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-initial-setup-addon_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-initial-setup-addon_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-initial-setup-addon_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-migration-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-migration-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-migration-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-migration_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-migration_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-migration_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-plugin-ostree_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-plugin-ostree_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-plugin-ostree_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-rhsm-certificates_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-rhsm-certificates_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager-rhsm-certificates_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager_security_api_results.json
new file mode 100644
index 0000000..ee092ca
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subscription-manager_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-4455","severity":"moderate","public_date":"2016-05-25T00:00:00Z","advisories":["RHSA-2017:0698","RHSA-2016:2592"],"bugzilla":"1340525","bugzilla_description":"CVE-2016-4455 subscription-manager: sensitive world readable files in /var/lib/rhsm/","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["subscription-manager-0:1.18.10-1.el6","subscription-manager-0:1.17.15-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4455.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2012-6137","severity":"moderate","public_date":"2013-05-06T00:00:00Z","advisories":["RHSA-2013:0788"],"bugzilla":"885130","bugzilla_description":"CVE-2012-6137 subscription-manager: rhn-migrate-classic-to-rhsm missing SSL certificate verification","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["subscription-manager-0:1.1.23.1-1.el6_4","subscription-manager-0:1.0.24.1-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6137.json"},{"CVE":"CVE-2017-2663","severity":"moderate","public_date":null,"advisories":[],"bugzilla":"1434100","bugzilla_description":"CVE-2017-2663 subscription-manager: unsafe dbus interface","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2663.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.2"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-gnome_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-gnome_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-gnome_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-javahl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-javahl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-javahl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-perl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-perl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-perl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion_security_api_results.json
new file mode 100644
index 0000000..de0a5bc
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/subversion_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-0203","severity":"important","public_date":"2019-07-31T12:00:00Z","advisories":["RHSA-2019:2512"],"bugzilla":"1733073","bugzilla_description":"CVE-2019-0203 subversion: NULL pointer dereference in svnserve leading to an unauthenticated remote DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["subversion:1.10-8000020190807153138.a27fc728"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0203.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-11782","severity":"moderate","public_date":"2019-07-31T12:00:00Z","advisories":["RHSA-2020:3972"],"bugzilla":"1733088","bugzilla_description":"CVE-2018-11782 subversion: remotely triggerable DoS vulnerability in svnserve 'get-deleted-rev'","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["subversion-0:1.7.14-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11782.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-11803","severity":"moderate","public_date":"2019-01-18T00:00:00Z","advisories":[],"bugzilla":"1668807","bugzilla_description":"CVE-2018-11803 subversion: malicious SVN clients can crash mod_dav_svn","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11803.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000111","severity":"moderate","public_date":"2018-02-26T00:00:00Z","advisories":[],"bugzilla":"1549539","bugzilla_description":"CVE-2018-1000111 jenkins-plugin-subversion: Disclosure of user names and node names to unauthorized users through post-commit hook URL in Subversion Plugin (SECURITY-724)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000111.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-9800","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2480"],"bugzilla":"1479686","bugzilla_description":"CVE-2017-9800 subversion: Command injection through clients via malicious svn+ssh URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["subversion-0:1.7.14-11.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-1000085","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":["RHBA-2017:2642"],"bugzilla":"1471046","bugzilla_description":"CVE-2017-1000085 jenkins-plugin-subversion: CSRF vulnerability and insufficient permission checks allow capturing credentials (SECURITY-303)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-352","affected_packages":["jenkins-2-plugins-0:3.7.1502412812-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000085.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2016-8734","severity":"moderate","public_date":"2016-11-29T00:00:00Z","advisories":[],"bugzilla":"1397403","bugzilla_description":"CVE-2016-8734 subversion: unrestricted XML entity expansion in mod_dontdothat and Subversion clients using http(s)://","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-776","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8734.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2016-2168","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":[],"bugzilla":"1331683","bugzilla_description":"CVE-2016-2168 subversion: DoS in mod_authz_svn during COPY/MOVE authorization check","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2168.json"},{"CVE":"CVE-2016-2167","severity":"low","public_date":"2016-04-28T00:00:00Z","advisories":[],"bugzilla":"1331686","bugzilla_description":"CVE-2016-2167 subversion: svnserve/sasl may authenticate users using the wrong realm","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2167.json"},{"CVE":"CVE-2015-5259","severity":"important","public_date":"2015-12-15T00:00:00Z","advisories":[],"bugzilla":"1289958","bugzilla_description":"CVE-2015-5259 subversion: integer overflow in the svn:// protocol parser","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5259.json"},{"CVE":"CVE-2015-5343","severity":"moderate","public_date":"2015-12-15T00:00:00Z","advisories":[],"bugzilla":"1289959","bugzilla_description":"CVE-2015-5343 subversion: (mod_dav_svn) integer overflow when parsing skel-encoded request bodies","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5343.json"},{"CVE":"CVE-2015-3184","severity":"moderate","public_date":"2015-08-05T00:00:00Z","advisories":["RHSA-2015:1742"],"bugzilla":"1247249","bugzilla_description":"CVE-2015-3184 subversion: Mixed anonymous/authenticated path-based authz with httpd 2.4","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-285","affected_packages":["subversion-0:1.7.14-7.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3184.json"},{"CVE":"CVE-2015-3187","severity":"low","public_date":"2015-08-05T00:00:00Z","advisories":["RHSA-2015:1633","RHSA-2015:1742"],"bugzilla":"1247252","bugzilla_description":"CVE-2015-3187 subversion: svn_repos_trace_node_locations() reveals paths hidden by authz","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["subversion-0:1.7.14-7.ael7b_1.1","subversion-0:1.6.11-15.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3187.json"},{"CVE":"CVE-2015-0202","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1205134","bugzilla_description":"CVE-2015-0202 subversion: (mod_dav_svn) remote denial of service with certain REPORT requests","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0202.json"},{"CVE":"CVE-2015-0248","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:1633","RHSA-2015:1742"],"bugzilla":"1205138","bugzilla_description":"CVE-2015-0248 subversion: (mod_dav_svn) remote denial of service with certain requests with dynamically evaluated revision numbers","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["subversion-0:1.7.14-7.ael7b_1.1","subversion-0:1.6.11-15.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0248.json"},{"CVE":"CVE-2015-0251","severity":"low","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:1633","RHSA-2015:1742"],"bugzilla":"1205140","bugzilla_description":"CVE-2015-0251 subversion: (mod_dav_svn) spoofing svn:author property values for new revisions","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","CWE":"CWE-348","affected_packages":["subversion-0:1.7.14-7.ael7b_1.1","subversion-0:1.6.11-15.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0251.json"},{"CVE":"CVE-2014-3580","severity":"moderate","public_date":"2014-12-15T00:00:00Z","advisories":["RHSA-2015:0166","RHSA-2015:0165"],"bugzilla":"1174054","bugzilla_description":"CVE-2014-3580 subversion: NULL pointer dereference flaw in mod_dav_svn when handling REPORT requests","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["subversion-0:1.7.14-7.el7_0","subversion-0:1.6.11-12.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3580.json"},{"CVE":"CVE-2014-8108","severity":"moderate","public_date":"2014-12-15T00:00:00Z","advisories":["RHSA-2015:0166"],"bugzilla":"1174057","bugzilla_description":"CVE-2014-8108 subversion: NULL pointer dereference flaw in mod_dav_svn when handling URIs for virtual transaction names","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["subversion-0:1.7.14-7.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8108.json"},{"CVE":"CVE-2014-3522","severity":"moderate","public_date":"2014-08-11T00:00:00Z","advisories":[],"bugzilla":"1127063","bugzilla_description":"CVE-2014-3522 subversion: incorrect SSL certificate validation in Serf RA (repository access) layer","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3522.json"},{"CVE":"CVE-2014-0032","severity":"moderate","public_date":"2014-01-10T00:00:00Z","advisories":["RHSA-2014:0255"],"bugzilla":"1062042","bugzilla_description":"CVE-2014-0032 subversion: mod_dav_svn crash when handling certain requests with SVNListParentPath on","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["subversion-0:1.6.11-12.el5_10","subversion-0:1.6.11-10.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0032.json"},{"CVE":"CVE-2014-3528","severity":"low","public_date":"2013-12-13T00:00:00Z","advisories":["RHSA-2015:0166","RHSA-2015:0165"],"bugzilla":"1125799","bugzilla_description":"CVE-2014-3528 subversion: credentials leak via MD5 collision","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-327->CWE-201","affected_packages":["subversion-0:1.7.14-7.el7_0","subversion-0:1.6.11-12.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3528.json"},{"CVE":"CVE-2013-4558","severity":"moderate","public_date":"2013-11-25T00:00:00Z","advisories":[],"bugzilla":"1033431","bugzilla_description":"CVE-2013-4558 subversion: mod_dav_svn assertion when handling certain requests with autoversioning enabled","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4558.json"},{"CVE":"CVE-2013-4505","severity":"low","public_date":"2013-11-25T00:00:00Z","advisories":[],"bugzilla":"1033995","bugzilla_description":"CVE-2013-4505 subversion: mod_dontdothat does not block requests from certain clients","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4505.json"},{"CVE":"CVE-2013-4246","severity":"moderate","public_date":"2013-08-30T00:00:00Z","advisories":[],"bugzilla":"1000192","bugzilla_description":"CVE-2013-4246 subversion: FSFS repository corruption due to editing packed revision properties","cvss_score":5.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4246.json"},{"CVE":"CVE-2013-4262","severity":"low","public_date":"2013-08-30T00:00:00Z","advisories":[],"bugzilla":"1000194","bugzilla_description":"CVE-2013-4262 CVE-2013-7393 subversion: svnwcsub.py and irkerbridge.py are vulnerable to symlink attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4262.json"},{"CVE":"CVE-2013-7393","severity":"low","public_date":"2013-08-30T00:00:00Z","advisories":[],"bugzilla":"1000194","bugzilla_description":"CVE-2013-4262 CVE-2013-7393 subversion: svnwcsub.py and irkerbridge.py are vulnerable to symlink attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7393.json"},{"CVE":"CVE-2013-4277","severity":"low","public_date":"2013-08-30T00:00:00Z","advisories":[],"bugzilla":"1000202","bugzilla_description":"CVE-2013-4277 subversion: svnserve is vulnerable to symlink attack","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4277.json"},{"CVE":"CVE-2013-4131","severity":"moderate","public_date":"2013-07-24T00:00:00Z","advisories":[],"bugzilla":"986194","bugzilla_description":"CVE-2013-4131 subversion: DoS (assertion failure, crash) in mod_dav_svn when handling certain MOVE, COPY, or DELETE HTTP requests","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4131.json"},{"CVE":"CVE-2013-1968","severity":"low","public_date":"2013-05-31T00:00:00Z","advisories":["RHSA-2014:0255"],"bugzilla":"970014","bugzilla_description":"CVE-2013-1968 subversion (FSFS format): Filenames with newline character can lead to revision corruption","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-138","affected_packages":["subversion-0:1.6.11-12.el5_10","subversion-0:1.6.11-10.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1968.json"},{"CVE":"CVE-2013-2088","severity":"moderate","public_date":"2013-05-31T00:00:00Z","advisories":[],"bugzilla":"970027","bugzilla_description":"CVE-2013-2088 subversion: Improper sanitization of arguments of certain hook scripts might lead to arbitrary code execution","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2088.json"},{"CVE":"CVE-2013-2112","severity":"low","public_date":"2013-05-31T00:00:00Z","advisories":["RHSA-2014:0255"],"bugzilla":"970037","bugzilla_description":"CVE-2013-2112 subversion: Remote DoS due improper handling of early-closing TCP connections","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["subversion-0:1.6.11-12.el5_10","subversion-0:1.6.11-10.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2112.json"},{"CVE":"CVE-2013-1845","severity":"low","public_date":"2013-04-04T00:00:00Z","advisories":["RHSA-2013:0737"],"bugzilla":"929082","bugzilla_description":"CVE-2013-1845 Subversion (mod_dav_svn): DoS (excessive memory use) when large number of properties are set or deleted","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["subversion-0:1.6.11-9.el6_4","subversion-0:1.6.11-11.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1845.json"},{"CVE":"CVE-2013-1846","severity":"low","public_date":"2013-04-04T00:00:00Z","advisories":["RHSA-2013:0737"],"bugzilla":"929087","bugzilla_description":"CVE-2013-1846 Subversion (mod_dav_svn): DoS (crash) via LOCK requests against an activity URL","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["subversion-0:1.6.11-9.el6_4","subversion-0:1.6.11-11.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1846.json"},{"CVE":"CVE-2013-1847","severity":"low","public_date":"2013-04-04T00:00:00Z","advisories":["RHSA-2013:0737"],"bugzilla":"929090","bugzilla_description":"CVE-2013-1847 Subversion (mod_dav_svn): DoS (crash) via LOCK requests against a non-existent URL","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["subversion-0:1.6.11-9.el6_4","subversion-0:1.6.11-11.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1847.json"},{"CVE":"CVE-2013-1884","severity":"moderate","public_date":"2013-04-04T00:00:00Z","advisories":[],"bugzilla":"929095","bugzilla_description":"CVE-2013-1884 Subversion (mod_dav_svn): DoS (crash) via malformed log REPORT requests","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1884.json"},{"CVE":"CVE-2013-1849","severity":"moderate","public_date":"2013-03-05T00:00:00Z","advisories":["RHSA-2013:0737"],"bugzilla":"929093","bugzilla_description":"CVE-2013-1849 Subversion (mod_dav_svn): DoS (crash) via PROPFIND request made against activity URLs","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["subversion-0:1.6.11-9.el6_4","subversion-0:1.6.11-11.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1849.json"},{"CVE":"CVE-2011-1752","severity":"moderate","public_date":"2011-06-01T00:00:00Z","advisories":["RHSA-2011:0861","RHSA-2011:0862"],"bugzilla":"709111","bugzilla_description":"CVE-2011-1752 subversion (mod_dav_svn): DoS (crash) via request to deliver baselined WebDAV resources","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["subversion-0:1.1.4-4.el4","subversion-0:1.6.11-7.el5_6.4","subversion-0:1.6.11-2.el6_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1752.json"},{"CVE":"CVE-2011-1783","severity":"moderate","public_date":"2011-06-01T00:00:00Z","advisories":["RHSA-2011:0862"],"bugzilla":"709112","bugzilla_description":"CVE-2011-1783 subversion (mod_dav_svn): DoS (excessive memory use) when configured to provide path-based access control","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["subversion-0:1.6.11-7.el5_6.4","subversion-0:1.6.11-2.el6_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1783.json"},{"CVE":"CVE-2011-1921","severity":"low","public_date":"2011-06-01T00:00:00Z","advisories":["RHSA-2011:0862"],"bugzilla":"709114","bugzilla_description":"CVE-2011-1921 subversion (mod_dav_svn): File contents disclosure of files configured to be unreadable by those users","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["subversion-0:1.6.11-7.el5_6.4","subversion-0:1.6.11-2.el6_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1921.json"},{"CVE":"CVE-2011-0715","severity":"moderate","public_date":"2011-03-03T00:00:00Z","advisories":["RHSA-2011:0327","RHSA-2011:0328"],"bugzilla":"680755","bugzilla_description":"CVE-2011-0715 subversion (mod_dav_svn): DoS (NULL ptr deref) by a lock token sent from a not authenticated Subversion client","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["subversion-0:1.6.11-2.el6_0.3","subversion-0:1.6.11-7.el5_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0715.json"},{"CVE":"CVE-2010-4539","severity":"low","public_date":"2010-11-26T00:00:00Z","advisories":["RHSA-2011:0257","RHSA-2011:0258"],"bugzilla":"667407","bugzilla_description":"CVE-2010-4539 Subversion (mod_dav_svn): DoS (crash) by processing certain requests to display all available repositories to a web browser","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["subversion-0:1.6.11-7.el5_6.1","subversion-0:1.6.11-2.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4539.json"},{"CVE":"CVE-2010-4644","severity":"moderate","public_date":"2010-11-04T00:00:00Z","advisories":["RHSA-2011:0257","RHSA-2011:0258"],"bugzilla":"667763","bugzilla_description":"CVE-2010-4644 Subversion: DoS (memory consumption) by processing blame or log -g requests on certain files","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P/","CWE":null,"affected_packages":["subversion-0:1.6.11-7.el5_6.1","subversion-0:1.6.11-2.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4644.json"},{"CVE":"CVE-2010-3315","severity":"moderate","public_date":"2010-10-04T00:00:00Z","advisories":["RHSA-2011:0258"],"bugzilla":"640317","bugzilla_description":"CVE-2010-3315 Subversion: Access restriction bypass by checkout of the root of the repository","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P/","CWE":null,"affected_packages":["subversion-0:1.6.11-2.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3315.json"},{"CVE":"CVE-2009-2411","severity":"important","public_date":"2009-08-03T00:00:00Z","advisories":["RHSA-2009:1203"],"bugzilla":"514744","bugzilla_description":"CVE-2009-2411 subversion: multiple heap overflow issues","cvss_score":6.5,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["subversion-0:1.4.2-4.el5_3.1","subversion-0:1.1.4-3.el4_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2411.json"},{"CVE":"CVE-2007-2448","severity":"low","public_date":"2007-11-06T00:00:00Z","advisories":["RHEA-2011:0039"],"bugzilla":"243757","bugzilla_description":"CVE-2007-2448 subversion: revision properties disclosure to user with partial access","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["subversion-0:1.6.11-7.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2448.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sudo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sudo_security_api_results.json
new file mode 100644
index 0000000..832b3a2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sudo_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-18634","severity":"important","public_date":"2020-01-30T00:00:00Z","advisories":["RHSA-2020:0540","RHSA-2020:0487","RHBA-2020:0523","RHSA-2020:0509","RHSA-2020:0726"],"bugzilla":"1796944","bugzilla_description":"CVE-2019-18634 sudo: Stack based buffer overflow when pwfeedback is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["redhat-coreos-42.81.20200217.0","sudo-0:1.8.25p1-8.el8_1.1","sudo-0:1.8.25p1-4.el8_0.3","sudo-0:1.8.6p3-29.el6_10.3","sudo-0:1.8.23-4.el7_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18634.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-19232","severity":"moderate","public_date":"2019-12-19T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1804"],"bugzilla":"1786704","bugzilla_description":"CVE-2019-19232 sudo: attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["redhat-coreos-43.82.202007300301.0","sudo-0:1.8.29-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19232.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-19234","severity":"moderate","public_date":"2019-12-19T00:00:00Z","advisories":[],"bugzilla":"1786708","bugzilla_description":"CVE-2019-19234 sudo: by using ! character in the shadow file instead of a password hash can access to a run as all sudoer account","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19234.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-18684","severity":"moderate","public_date":"2019-11-07T00:00:00Z","advisories":[],"bugzilla":"1771690","bugzilla_description":"CVE-2019-18684 sudo: privilege escalation via write access to file descriptor 3 of the sudo process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18684.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2019-14287","severity":"important","public_date":"2019-10-14T15:00:00Z","advisories":["RHSA-2019:3754","RHSA-2019:3204","RHSA-2019:3941","RHSA-2019:3755","RHSA-2019:3205","RHSA-2020:0388","RHSA-2019:3694","RHSA-2019:3278","RHSA-2019:3895","RHSA-2019:3197","RHSA-2019:4191","RHSA-2019:3916","RHSA-2019:3219","RHSA-2019:3209","RHBA-2019:3248","RHBA-2019:3303"],"bugzilla":"1760531","bugzilla_description":"CVE-2019-14287 sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":["redhat-virtualization-host-0:4.2-20191022.0.el7_6","sudo-0:1.7.2p1-31.el5_11.1","sudo-0:1.8.23-3.el7_6.1","sudo-0:1.8.25p1-4.el8_0.2","sudo-0:1.8.6p3-29.el6_10.2","sudo-0:1.8.6p7-17.el7_2.2","sudo-0:1.8.19p2-12.el7_4.1","sudo-0:1.8.6p3-12.el6_5.2","redhat-coreos-42.81.20191107.0","sudo-0:1.8.19p2-14.el7_5.1","sudo-0:1.8.6p7-23.el7_3.2","sudo-0:1.8.6p3-15.el6_6.2","sudo-0:1.8.25p1-8.el8_1","sudo-0:1.8.23-4.el7_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14287.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-1000368","severity":"moderate","public_date":"2017-06-02T00:00:00Z","advisories":["RHSA-2017:1574"],"bugzilla":"1459152","bugzilla_description":"CVE-2017-1000368 sudo: Privilege escalation via improper get_process_ttyname() parsing (insufficient fix for CVE-2017-1000367)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["sudo-0:1.7.2p1-31.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000368.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2017-1000367","severity":"important","public_date":"2017-05-30T00:00:00Z","advisories":["RHSA-2017:1381","RHSA-2017:1382"],"bugzilla":"1453074","bugzilla_description":"CVE-2017-1000367 sudo: Privilege escalation in via improper get_process_ttyname() parsing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-807","affected_packages":["sudo-0:1.8.6p3-28.el6_9","sudo-0:1.7.2p1-30.el5_11","sudo-0:1.8.6p7-22.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000367.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-7032","severity":"moderate","public_date":"2016-10-26T00:00:00Z","advisories":["RHSA-2016:2872"],"bugzilla":"1372830","bugzilla_description":"CVE-2016-7032 sudo: noexec bypass via system() and popen()","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-184","affected_packages":["sudo-0:1.8.6p7-21.el7_3","sudo-0:1.8.6p3-25.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7032.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2016-7076","severity":"moderate","public_date":"2016-10-26T00:00:00Z","advisories":["RHSA-2016:2872"],"bugzilla":"1384982","bugzilla_description":"CVE-2016-7076 sudo: noexec bypass via wordexp()","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-184","affected_packages":["sudo-0:1.8.6p7-21.el7_3","sudo-0:1.8.6p3-25.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7076.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2016-7091","severity":"low","public_date":"2016-05-24T00:00:00Z","advisories":["RHSA-2016:2593"],"bugzilla":"1339935","bugzilla_description":"CVE-2016-7091 sudo: Possible info leak via INPUTRC","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["sudo-0:1.8.6p7-20.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7091.json"},{"CVE":"CVE-2015-8239","severity":"moderate","public_date":"2015-11-09T00:00:00Z","advisories":[],"bugzilla":"1283635","bugzilla_description":"CVE-2015-8239 sudo: Race condition when checking digests in sudoers","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8239.json"},{"CVE":"CVE-2015-5602","severity":"moderate","public_date":"2015-07-23T00:00:00Z","advisories":[],"bugzilla":"1277426","bugzilla_description":"CVE-2015-5602 sudo: Unauthorized privilege escalation in sudoedit","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:C/I:C/A:P","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5602.json"},{"CVE":"CVE-2014-9680","severity":"moderate","public_date":"2014-10-16T00:00:00Z","advisories":["RHSA-2015:1409","RHBA-2015:2424"],"bugzilla":"1191144","bugzilla_description":"CVE-2014-9680 sudo: unsafe handling of TZ environment variable","cvss_score":3.0,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:P/A:P","CWE":"CWE-20","affected_packages":["sudo-0:1.8.6p3-19.el6","sudo-0:1.8.6p7-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9680.json"},{"CVE":"CVE-2014-0106","severity":"moderate","public_date":"2014-03-06T00:00:00Z","advisories":["RHSA-2014:0266"],"bugzilla":"1071780","bugzilla_description":"CVE-2014-0106 sudo: certain environment variables not sanitized when env_reset is disabled","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["sudo-0:1.7.2p1-29.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0106.json"},{"CVE":"CVE-2013-1775","severity":"low","public_date":"2013-02-27T00:00:00Z","advisories":["RHSA-2013:1701","RHSA-2013:1353"],"bugzilla":"916363","bugzilla_description":"CVE-2013-1775 sudo: authentication bypass via reset system clock","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["sudo-0:1.8.6p3-12.el6","sudo-0:1.7.2p1-28.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1775.json"},{"CVE":"CVE-2013-1776","severity":"low","public_date":"2013-02-27T00:00:00Z","advisories":["RHBA-2013:0363","RHSA-2013:1353"],"bugzilla":"916365","bugzilla_description":"CVE-2013-1776 sudo: bypass of tty_tickets constraints","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["sudo-0:1.8.6p3-7.el6","sudo-0:1.7.2p1-28.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1776.json"},{"CVE":"CVE-2013-2776","severity":"low","public_date":"2013-02-27T00:00:00Z","advisories":["RHSA-2013:1701","RHSA-2013:1353"],"bugzilla":"949751","bugzilla_description":"CVE-2013-2776 sudo: bypass of tty_tickets constraints","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["sudo-0:1.8.6p3-12.el6","sudo-0:1.7.2p1-28.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2776.json"},{"CVE":"CVE-2013-2777","severity":"low","public_date":"2013-02-27T00:00:00Z","advisories":["RHSA-2013:1701"],"bugzilla":"949753","bugzilla_description":"CVE-2013-2777 sudo: bypass of tty_tickets constraints","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["sudo-0:1.8.6p3-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2777.json"},{"CVE":"CVE-2012-3440","severity":"moderate","public_date":"2012-08-07T00:00:00Z","advisories":["RHSA-2012:1149"],"bugzilla":"844442","bugzilla_description":"CVE-2012-3440 sudo: insecure temporary file use in RPM %postun script","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:C/A:C","CWE":"CWE-367","affected_packages":["sudo-0:1.7.2p1-14.el5_8.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3440.json"},{"CVE":"CVE-2012-2337","severity":"moderate","public_date":"2012-05-16T00:00:00Z","advisories":["RHSA-2012:1081"],"bugzilla":"820677","bugzilla_description":"CVE-2012-2337 sudo: Multiple netmask values used in Host / Host_List configuration cause any host to be allowed access","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:H/Au:M/C:C/I:C/A:C","CWE":null,"affected_packages":["sudo-0:1.7.4p5-12.el6_3","sudo-0:1.7.2p1-14.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2337.json"},{"CVE":"CVE-2012-0809","severity":"low","public_date":"2012-01-30T00:00:00Z","advisories":[],"bugzilla":"784443","bugzilla_description":"CVE-2012-0809 sudo: format string flaw in sudo_debug()","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-134->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0809.json"},{"CVE":"CVE-2011-0010","severity":"low","public_date":"2011-01-11T00:00:00Z","advisories":["RHSA-2011:0599","RHSA-2012:0309"],"bugzilla":"668879","bugzilla_description":"CVE-2011-0010 sudo: does not ask for password on GID changes","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["sudo-0:1.7.4p5-5.el6","sudo-0:1.7.2p1-13.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0010.json"},{"CVE":"CVE-2010-2956","severity":"important","public_date":"2010-09-07T00:00:00Z","advisories":["RHSA-2010:0675"],"bugzilla":"628628","bugzilla_description":"CVE-2010-2956 sudo: incorrect handling of RunAs specification with both user and group lists","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["sudo-0:1.7.2p1-8.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2956.json"},{"CVE":"CVE-2010-1646","severity":"moderate","public_date":"2010-05-28T00:00:00Z","advisories":["RHSA-2010:0475"],"bugzilla":"598154","bugzilla_description":"CVE-2010-1646 sudo: insufficient environment sanitization issue","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["sudo-0:1.7.2p1-7.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1646.json"},{"CVE":"CVE-2010-1163","severity":"moderate","public_date":"2010-04-13T00:00:00Z","advisories":["RHSA-2010:0361"],"bugzilla":"580441","bugzilla_description":"CVE-2010-1163 sudo: incomplete fix for the sudoedit privilege escalation issue CVE-2010-0426","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["sudo-0:1.7.2p1-6.el5_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1163.json"},{"CVE":"CVE-2010-0426","severity":"important","public_date":"2010-02-21T00:00:00Z","advisories":["RHSA-2010:0122"],"bugzilla":"567337","bugzilla_description":"CVE-2010-0426 sudo: sudoedit option can possibly allow for arbitrary code execution","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["sudo-0:1.6.9p17-6.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0426.json"},{"CVE":"CVE-2010-0427","severity":"important","public_date":"2009-04-27T00:00:00Z","advisories":["RHSA-2010:0122"],"bugzilla":"567622","bugzilla_description":"CVE-2010-0427 sudo: Fails to reset group permissions if runas_default set","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["sudo-0:1.6.9p17-6.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0427.json"},{"CVE":"CVE-2009-0034","severity":"moderate","public_date":"2009-01-23T00:00:00Z","advisories":["RHSA-2009:0267"],"bugzilla":"481720","bugzilla_description":"CVE-2009-0034 sudo: incorrect handling of groups in Runas_User","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["sudo-0:1.6.9p17-3.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0034.json"},{"CVE":"CVE-2005-1993","severity":"moderate","public_date":"2005-06-20T00:00:00Z","advisories":["RHSA-2005:535"],"bugzilla":"1617680","bugzilla_description":"CVE-2005-1993 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sudo-0:1.6.7p5-30.1.1","sudo-0:1.6.7p5-1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1993.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/suitesparse-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/suitesparse-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/suitesparse-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/suitesparse_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/suitesparse_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/suitesparse_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/supermin-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/supermin-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/supermin-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/supermin_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/supermin_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/supermin_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sushi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sushi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sushi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/swig-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/swig-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/swig-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/swig-gdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/swig-gdb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/swig-gdb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/swig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/swig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/swig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/switcheroo-control_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/switcheroo-control_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/switcheroo-control_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/symlinks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/symlinks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/symlinks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sysfsutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sysfsutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sysfsutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-extlinux-nonlinux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-extlinux-nonlinux_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-extlinux-nonlinux_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-extlinux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-extlinux_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-extlinux_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-nonlinux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-nonlinux_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-nonlinux_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-tftpboot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-tftpboot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux-tftpboot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/syslinux_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sysstat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sysstat_security_api_results.json
new file mode 100644
index 0000000..bfb2b9d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/sysstat_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-19725","severity":"important","public_date":"2019-12-09T00:00:00Z","advisories":[],"bugzilla":"1784740","bugzilla_description":"CVE-2019-19725 sysstat: double free in check_file_actlst() in sa_common.c may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19725.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-16167","severity":"low","public_date":"2019-08-03T00:00:00Z","advisories":[],"bugzilla":"1768970","bugzilla_description":"CVE-2019-16167 sysstat: memory corruption due to an integer overflow in remap_struct in sa_common.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16167.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-19416","severity":"low","public_date":"2018-11-21T00:00:00Z","advisories":[],"bugzilla":"1652728","bugzilla_description":"CVE-2018-19416 sysstat: Out-of-bounds read in remap_struct function in sa_common.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19416.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-19517","severity":"low","public_date":"2018-11-21T00:00:00Z","advisories":[],"bugzilla":"1679544","bugzilla_description":"CVE-2018-19517 sysstat: Out of bounds read in remap_struct function in sa_common.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19517.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2007-3852","severity":"low","public_date":"2007-08-10T00:00:00Z","advisories":["RHSA-2011:1005"],"bugzilla":"251200","bugzilla_description":"CVE-2007-3852 sysstat insecure temporary file usage","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":["sysstat-0:7.0.2-11.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3852.json"},{"CVE":"CVE-2004-0107","severity":"moderate","public_date":"2004-03-10T00:00:00Z","advisories":["RHSA-2004:093","RHSA-2004:053"],"bugzilla":"1617152","bugzilla_description":"CVE-2004-0107 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sysstat-0:4.0.7-4.EL3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0107.json"},{"CVE":"CVE-2004-0108","severity":"moderate","public_date":"2004-03-10T00:00:00Z","advisories":["RHSA-2004:053"],"bugzilla":"1617153","bugzilla_description":"CVE-2004-0108 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["sysstat-0:4.0.7-4.EL3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0108.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/system-config-printer-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/system-config-printer-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/system-config-printer-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/system-config-printer-udev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/system-config-printer-udev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/system-config-printer-udev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/system-storage-manager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/system-storage-manager_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/system-storage-manager_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-container_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-container_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-container_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-journal-remote_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-journal-remote_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-journal-remote_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-pam_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-pam_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-pam_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-tests_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-tests_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-tests_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-udev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-udev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd-udev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd_security_api_results.json
new file mode 100644
index 0000000..46650ca
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13776","severity":"moderate","public_date":"2020-05-31T00:00:00Z","advisories":[],"bugzilla":"1845534","bugzilla_description":"CVE-2020-13776 systemd: mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-440","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13776.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2020-1712","severity":"important","public_date":"2020-02-05T09:00:00Z","advisories":["RHSA-2020:0575","RHSA-2020:0564","RHBA-2020:0614"],"bugzilla":"1794578","bugzilla_description":"CVE-2020-1712 systemd: use-after-free when asynchronous polkit queries are performed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["systemd-0:239-18.el8_1.4","systemd-0:239-13.el8_0.7","redhat-coreos-42.81.20200224.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1712.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-20386","severity":"low","public_date":"2020-01-22T00:00:00Z","advisories":["RHSA-2020:4007"],"bugzilla":"1793979","bugzilla_description":"CVE-2019-20386 systemd: memory leak in button_open() in login/logind-button.c when udev events are received","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["systemd-0:219-78.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20386.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.4"},{"CVE":"CVE-2019-15718","severity":"moderate","public_date":"2019-09-03T15:00:00Z","advisories":["RHSA-2019:3941","RHSA-2019:3592","RHBA-2019:3303"],"bugzilla":"1746057","bugzilla_description":"CVE-2019-15718 systemd: systemd-resolved allows unprivileged users to configure DNS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["redhat-coreos-42.81.20191107.0","systemd-0:239-18.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15718.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-20839","severity":"moderate","public_date":"2019-05-17T00:00:00Z","advisories":[],"bugzilla":"1716955","bugzilla_description":"CVE-2018-20839 systemd: mishandling of the current keyboard mode check leading to passwords being disclosed in cleartext to attacker","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20839.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-3843","severity":"moderate","public_date":"2019-04-25T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1794"],"bugzilla":"1684607","bugzilla_description":"CVE-2019-3843 systemd: services with DynamicUser can create SUID/SGID binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["systemd-0:239-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-3844","severity":"moderate","public_date":"2019-04-25T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1794"],"bugzilla":"1684610","bugzilla_description":"CVE-2019-3844 systemd: services with DynamicUser can get new privileges and create SGID binaries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-268","affected_packages":["systemd-0:239-29.el8","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3844.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-3842","severity":"moderate","public_date":"2019-04-08T00:00:00Z","advisories":[],"bugzilla":"1668521","bugzilla_description":"CVE-2019-3842 systemd: Spoofing of XDG_SEAT allows for actions to be checked against \"allow_active\" instead of \"allow_any\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-9619","severity":"low","public_date":"2019-04-08T00:00:00Z","advisories":[],"bugzilla":"1699924","bugzilla_description":"CVE-2019-9619 systemd: not enabled pam_systemd for non-interactive sessions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-862|CWE-287|CWE-304)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9619.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2019-6454","severity":"important","public_date":"2019-02-18T00:00:00Z","advisories":["RHSA-2019:0990","RHSA-2019:0461","RHSA-2019:0368","RHBA-2019:3151","RHSA-2019:1322","RHSA-2019:0457","RHSA-2019:1502","RHSA-2019:2805"],"bugzilla":"1667032","bugzilla_description":"CVE-2019-6454 systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["systemd-0:219-62.el7_6.5","rhvm-appliance-0:4.2-20190224.0.el7","systemd-0:219-42.el7_4.16","redhat-coreos-42.80.20191022.0","systemd-0:239-13.el8_0.3","systemd-0:219-57.el7_5.6","systemd-0:219-30.el7_3.14","redhat-virtualization-host-0:4.2-20190219.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6454.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-3815","severity":"low","public_date":"2019-01-14T00:00:00Z","advisories":["RHSA-2019:0201"],"bugzilla":"1666690","bugzilla_description":"CVE-2019-3815 systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["systemd-0:219-62.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-16864","severity":"important","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:0342","RHSA-2019:0361","RHSA-2019:0049","RHSA-2019:2402","RHSA-2019:0204","RHSA-2019:0271"],"bugzilla":"1653855","bugzilla_description":"CVE-2018-16864 systemd: stack overflow when calling syslog from a command with long cmdline","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["systemd-0:219-30.el7_3.13","systemd-0:219-57.el7_5.5","rhvm-appliance-0:4.2-20190129.0.el7","systemd-0:219-62.el7_6.2","systemd-0:219-42.el7_4.13","redhat-virtualization-host-0:4.2-20190129.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2018-16865","severity":"important","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:0342","RHSA-2019:0361","RHSA-2019:0049","RHSA-2019:2402","RHSA-2019:0204","RHSA-2019:0271"],"bugzilla":"1653861","bugzilla_description":"CVE-2018-16865 systemd: stack overflow when receiving many journald entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["systemd-0:219-30.el7_3.13","systemd-0:219-57.el7_5.5","rhvm-appliance-0:4.2-20190129.0.el7","systemd-0:219-62.el7_6.2","systemd-0:219-42.el7_4.13","redhat-virtualization-host-0:4.2-20190129.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16866","severity":"moderate","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:3222","RHSA-2020:0593","RHSA-2020:1264","RHSA-2019:2091"],"bugzilla":"1653867","bugzilla_description":"CVE-2018-16866 systemd: out-of-bounds read when parsing a crafted syslog message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":["systemd-0:219-57.el7_5.9","systemd-0:219-62.el7_6.11","systemd-0:219-67.el7","systemd-0:219-42.el7_4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16866.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-15688","severity":"important","public_date":"2018-10-26T00:00:00Z","advisories":["RHSA-2019:0049","RHSA-2018:3665"],"bugzilla":"1639067","bugzilla_description":"CVE-2018-15688 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-190->CWE-122","affected_packages":["NetworkManager-1:1.12.0-8.el7_6","systemd-0:219-62.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15688.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-15686","severity":"moderate","public_date":"2018-10-26T00:00:00Z","advisories":["RHSA-2019:3222","RHSA-2020:0593","RHSA-2020:1264","RHSA-2019:2091"],"bugzilla":"1639071","bugzilla_description":"CVE-2018-15686 systemd: line splitting via fgets() allows for state injection during daemon-reexec","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["systemd-0:219-57.el7_5.9","systemd-0:219-62.el7_6.11","systemd-0:219-67.el7","systemd-0:219-42.el7_4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15686.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2018-15687","severity":"moderate","public_date":"2018-10-26T00:00:00Z","advisories":[],"bugzilla":"1639076","bugzilla_description":"CVE-2018-15687 systemd: Dereference of symlinks in chown_recursive.c:chown_one() allows for modification of file privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367->CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15687.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.3"},{"CVE":"CVE-2018-21029","severity":"moderate","public_date":"2018-06-24T00:00:00Z","advisories":[],"bugzilla":"1771725","bugzilla_description":"CVE-2018-21029 systemd: incorrect certificate validation results in acceptance of any certificate signed by a trusted certificate authority for DNS over TLS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-21029.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-6954","severity":"moderate","public_date":"2018-01-25T00:00:00Z","advisories":[],"bugzilla":"1545017","bugzilla_description":"CVE-2018-6954 systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6954.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-18078","severity":"moderate","public_date":"2017-12-24T00:00:00Z","advisories":[],"bugzilla":"1539758","bugzilla_description":"CVE-2017-18078 systemd: Unsafe handling of hard links allowing privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18078.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-15908","severity":"moderate","public_date":"2017-10-26T00:00:00Z","advisories":[],"bugzilla":"1507515","bugzilla_description":"CVE-2017-15908 systemd: Infinite loop in the dns_packet_read_type_window() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15908.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16888","severity":"low","public_date":"2017-08-17T00:00:00Z","advisories":["RHSA-2019:2091"],"bugzilla":"1662867","bugzilla_description":"CVE-2018-16888 systemd: kills privileged process if unprivileged PIDFile was tampered","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["systemd-0:219-67.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16888.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-1000082","severity":"moderate","public_date":"2017-07-07T00:00:00Z","advisories":[],"bugzilla":"1468427","bugzilla_description":"CVE-2017-1000082 systemd: fails to parse usernames that start with digits","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000082.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2017-9445","severity":"important","public_date":"2017-06-27T00:00:00Z","advisories":[],"bugzilla":"1463609","bugzilla_description":"CVE-2017-9445 systemd: Out-of-bounds write in systemd-resolved due to allocating too small buffer in dns_packet_new","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9445.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-9217","severity":"low","public_date":"2017-05-20T00:00:00Z","advisories":[],"bugzilla":"1455493","bugzilla_description":"CVE-2017-9217 systemd: Null pointer dereference in dns_packet_is_reply_for function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9217.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1049","severity":"moderate","public_date":"2017-05-09T00:00:00Z","advisories":["RHSA-2018:0260"],"bugzilla":"1534701","bugzilla_description":"CVE-2018-1049 systemd: automount: access to automounted volumes can lock up","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["systemd-0:219-42.el7_4.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1049.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.5"},{"CVE":"CVE-2016-10156","severity":"important","public_date":"2017-01-24T00:00:00Z","advisories":[],"bugzilla":"1416044","bugzilla_description":"CVE-2016-10156 systemd: systemd creates world-writable suid files allowing root privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10156.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-7795","severity":"moderate","public_date":"2016-09-28T00:00:00Z","advisories":["RHSA-2016:2694","RHSA-2016:2610"],"bugzilla":"1380286","bugzilla_description":"CVE-2016-7795 systemd: Assertion failure when PID 1 receives a zero-length message over notify socket","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:C","CWE":"CWE-617","affected_packages":["systemd-0:219-30.el7_3.3","systemd-0:219-19.el7_2.18"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7795.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2016-7796","severity":"moderate","public_date":"2016-09-28T00:00:00Z","advisories":["RHBA-2015:2092","RHSA-2017:0003"],"bugzilla":"1381911","bugzilla_description":"CVE-2016-7796 systemd: freeze when PID 1 receives a zero-length message over notify socket","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:C","CWE":"CWE-253","affected_packages":["systemd-0:219-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7796.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2016-6349","severity":"low","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1360634","bugzilla_description":"CVE-2016-6349 oci-register-machine: information exposure for docker containers","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6349.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2014-9770","severity":"low","public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1348622","bugzilla_description":"CVE-2014-9770 systemd: weak permissions for journal files","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9770.json"},{"CVE":"CVE-2015-8842","severity":"low","public_date":"2016-04-08T00:00:00Z","advisories":[],"bugzilla":"1348626","bugzilla_description":"CVE-2015-8842 systemd: improper use of tmpfiles.d to create persistent journal files","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8842.json"},{"CVE":"CVE-2015-7510","severity":"moderate","public_date":"2015-11-24T00:00:00Z","advisories":[],"bugzilla":"1284642","bugzilla_description":"CVE-2015-7510 systemd: Stack overflow in nss-mymachines","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7510.json"},{"CVE":"CVE-2013-4391","severity":"moderate","public_date":"2013-09-23T00:00:00Z","advisories":[],"bugzilla":"859051","bugzilla_description":"CVE-2013-4391 systemd: Integer overflow, leading to heap-based buffer overflow by processing native messages","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4391.json"},{"CVE":"CVE-2013-4392","severity":"moderate","public_date":"2013-09-23T00:00:00Z","advisories":[],"bugzilla":"859060","bugzilla_description":"CVE-2013-4392 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4392.json"},{"CVE":"CVE-2013-4394","severity":"moderate","public_date":"2013-09-23T00:00:00Z","advisories":[],"bugzilla":"862324","bugzilla_description":"CVE-2013-4394 systemd: Improper sanitization of invalid XKB layouts descriptions (privilege escalation when custom PolicyKit local authority file used)","cvss_score":5.9,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4394.json"},{"CVE":"CVE-2013-4327","severity":"important","public_date":"2013-09-18T00:00:00Z","advisories":[],"bugzilla":"1006680","bugzilla_description":"CVE-2013-4327 systemd: insecure calling of polkit","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4327.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-exporter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-exporter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-exporter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-initscript_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-initscript_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-initscript_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-java_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-java_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-java_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-python3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-python3_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-python3_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-virtguest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-virtguest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-virtguest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-virthost_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-virthost_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime-virthost_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-runtime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-sdt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-sdt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-sdt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap_security_api_results.json
new file mode 100644
index 0000000..a19848b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/systemtap_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-0875","severity":"moderate","public_date":"2012-02-20T00:00:00Z","advisories":["RHSA-2012:0376"],"bugzilla":"795913","bugzilla_description":"CVE-2012-0875 systemtap: kernel panic when processing malformed DWARF unwind data","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:N/A:C","CWE":null,"affected_packages":["systemtap-0:1.6-7.el5_8","systemtap-0:1.6-5.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0875.json"},{"CVE":"CVE-2011-2502","severity":"moderate","public_date":"2011-07-25T00:00:00Z","advisories":["RHSA-2011:1088"],"bugzilla":"716476","bugzilla_description":"CVE-2011-2502 systemtap: insufficient security check when loading uprobes kernel module","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["systemtap-0:1.4-6.el6_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2502.json"},{"CVE":"CVE-2011-2503","severity":"moderate","public_date":"2011-07-25T00:00:00Z","advisories":["RHSA-2011:1088","RHSA-2011:1089"],"bugzilla":"716489","bugzilla_description":"CVE-2011-2503 systemtap: signed module loading race condition","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["systemtap-0:1.3-9.el5","systemtap-0:1.4-6.el6_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2503.json"},{"CVE":"CVE-2011-1769","severity":"moderate","public_date":"2011-05-11T00:00:00Z","advisories":["RHSA-2011:0841","RHSA-2011:0842"],"bugzilla":"702687","bugzilla_description":"CVE-2011-1769 systemtap: does not guard against DWARF operations div-by-zero errors, which can cause a kernel panic","cvss_score":4.6,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["systemtap-0:1.3-4.el5_6.1","systemtap-0:1.4-6.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1769.json"},{"CVE":"CVE-2011-1781","severity":"moderate","public_date":"2011-05-11T00:00:00Z","advisories":["RHSA-2011:0842"],"bugzilla":"703972","bugzilla_description":"CVE-2011-1781 systemtap: divide by zero stack unwinding flaw","cvss_score":4.6,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["systemtap-0:1.4-6.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1781.json"},{"CVE":"CVE-2010-4170","severity":"important","public_date":"2010-11-17T00:00:00Z","advisories":["RHSA-2010:0895","RHSA-2010:0894"],"bugzilla":"653604","bugzilla_description":"CVE-2010-4170 Systemtap: Insecure loading of modules","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":["systemtap-0:1.1-3.el5_5.3","systemtap-0:1.2-11.el6_0","systemtap-0:0.6.2-2.el4_8.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4170.json"},{"CVE":"CVE-2010-4171","severity":"low","public_date":"2010-11-17T00:00:00Z","advisories":["RHSA-2010:0894"],"bugzilla":"653606","bugzilla_description":"CVE-2010-4171 Systemtap: Ability to remove unused modules by unprivileged user","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["systemtap-0:1.1-3.el5_5.3","systemtap-0:1.2-11.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4171.json"},{"CVE":"CVE-2010-0411","severity":"moderate","public_date":"2010-01-29T00:00:00Z","advisories":["RHSA-2010:0125","RHSA-2010:0124"],"bugzilla":"559719","bugzilla_description":"CVE-2010-0411 systemtap: Crash with systemtap script using __get_argv()","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["systemtap-0:0.6.2-2.el4_8.1","systemtap-0:0.9.7-5.el5_4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0411.json"},{"CVE":"CVE-2009-4273","severity":"important","public_date":"2009-12-18T00:00:00Z","advisories":["RHSA-2010:0124"],"bugzilla":"550172","bugzilla_description":"CVE-2009-4273 systemtap: remote code execution via stap-server","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-78","affected_packages":["systemtap-0:0.9.7-5.el5_4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4273.json"},{"CVE":"CVE-2009-0784","severity":"moderate","public_date":"2009-03-25T00:00:00Z","advisories":["RHSA-2009:0373"],"bugzilla":"489808","bugzilla_description":"CVE-2009-0784 systemtap: race condition leads to privilege escalation","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["systemtap-0:0.7.2-3.el5_3","systemtap-0:0.6.2-2.el4_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0784.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/taglib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/taglib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/taglib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/taglib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/taglib_security_api_results.json
new file mode 100644
index 0000000..5184049
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/taglib_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-11439","severity":"low","public_date":"2018-05-27T00:00:00Z","advisories":["RHSA-2020:1175"],"bugzilla":"1584868","bugzilla_description":"CVE-2018-11439 taglib: heap-based buffer over-read via a crafted audio file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["taglib-0:1.8-8.20130218git.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11439.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12678","severity":"low","public_date":"2017-08-08T00:00:00Z","advisories":[],"bugzilla":"1483959","bugzilla_description":"CVE-2017-12678 taglib: Incorrect cast in rebuildAggregateFrames function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-704","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12678.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-0254","severity":"important","public_date":"2015-02-27T00:00:00Z","advisories":["RHSA-2016:0121","RHSA-2016:0122","RHSA-2016:1376","RHSA-2016:0123","RHSA-2016:1838","RHSA-2016:1839","RHSA-2015:1695","RHSA-2016:0124","RHSA-2016:1840","RHSA-2016:1841","RHSA-2016:0125"],"bugzilla":"1198606","bugzilla_description":"CVE-2015-0254 jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["jakarta-taglibs-standard-0:1.1.1-11.7.el6_7","jboss-ec2-eap-0:7.5.6-1.Final_redhat_1.ep6.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el6","eap7-jboss-ec2-eap-0:7.0.2-2.GA_redhat_1.ep7.el7","jakarta-taglibs-standard-0:1.1.2-14.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2012-2396","severity":null,"public_date":"2012-04-20T00:00:00Z","advisories":[],"bugzilla":"818583","bugzilla_description":"CVE-2012-2396 taglib: Division by zero while parsing properties of certain MP4 audio files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2396.json"},{"CVE":"CVE-2012-1108","severity":"moderate","public_date":"2012-03-04T00:00:00Z","advisories":[],"bugzilla":"800559","bugzilla_description":"CVE-2012-1108 taglib: ogg file with vendorLength field modification causes crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1108.json"},{"CVE":"CVE-2012-1584","severity":"moderate","public_date":"2012-03-04T00:00:00Z","advisories":[],"bugzilla":"810009","bugzilla_description":"CVE-2012-1584 taglib: integer overflow can crash application","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1584.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tagsoup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tagsoup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tagsoup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tang_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tang_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tang_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tar_security_api_results.json
new file mode 100644
index 0000000..a2562db
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tar_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13867","severity":"moderate","public_date":"2020-06-05T00:00:00Z","advisories":[],"bugzilla":"1848143","bugzilla_description":"CVE-2020-13867 targetcli: weak permissions for /etc/target and backup files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13867.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10699","severity":"important","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:1933"],"bugzilla":"1819219","bugzilla_description":"CVE-2020-10699 targetcli: world writable /var/run/targetclid.sock allows unprivileged user to execute commands","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["targetcli-0:2.1.51-4.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10699.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9923","severity":"low","public_date":"2019-01-02T00:00:00Z","advisories":[],"bugzilla":"1691764","bugzilla_description":"CVE-2019-9923 tar: null-pointer dereference in pax_decode_header in sparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9923.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20482","severity":"low","public_date":"2018-12-26T00:00:00Z","advisories":[],"bugzilla":"1662346","bugzilla_description":"CVE-2018-20482 tar: Infinite read loop in sparse_dump_region function in sparse.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20482.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-10860","severity":"moderate","public_date":"2018-06-28T00:00:00Z","advisories":[],"bugzilla":"1591449","bugzilla_description":"CVE-2018-10860 perl-Archive-Zip: Directory traversal in Archive::Zip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-12015","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":["RHSA-2019:2097"],"bugzilla":"1588760","bugzilla_description":"CVE-2018-12015 perl: Directory traversal in Archive::Tar","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["perl-Archive-Tar-0:1.92-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12015.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-20834","severity":"important","public_date":"2018-04-30T00:00:00Z","advisories":["RHSA-2019:1821"],"bugzilla":"1702338","bugzilla_description":"CVE-2018-20834 nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["rh-nodejs8-nodejs-0:8.16.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20834.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-6321","severity":"moderate","public_date":"2016-10-27T00:00:00Z","advisories":[],"bugzilla":"1318562","bugzilla_description":"CVE-2016-6321 tar: Bypassing the extract path name","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6321.json"},{"CVE":"CVE-2016-10173","severity":"moderate","public_date":"2016-08-22T00:00:00Z","advisories":[],"bugzilla":"1417578","bugzilla_description":"CVE-2016-10173 rubygem-archive-tar-minitar: Directory traversal during archive extraction","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10173.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2013-1793","severity":"moderate","public_date":"2015-07-23T00:00:00Z","advisories":[],"bugzilla":"916767","bugzilla_description":"CVE-2013-1793 openstack-utils: openstack-db insecure password creation for services","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1793.json"},{"CVE":"CVE-2015-8860","severity":"moderate","public_date":"2015-03-27T00:00:00Z","advisories":[],"bugzilla":"1209501","bugzilla_description":"CVE-2015-8860 nodejs-tar: insecure processing of symbolic links during package processing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8860.json"},{"CVE":"CVE-2013-4397","severity":"moderate","public_date":"2013-10-09T00:00:00Z","advisories":["RHSA-2013:1418"],"bugzilla":"1014492","bugzilla_description":"CVE-2013-4397 libtar: Heap-based buffer overflows by expanding a specially-crafted archive","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["libtar-0:1.2.11-17.el6_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4397.json"},{"CVE":"CVE-2013-4420","severity":"low","public_date":"2013-10-01T00:00:00Z","advisories":[],"bugzilla":"1018150","bugzilla_description":"CVE-2013-4420 libtar: missing validation of file names","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4420.json"},{"CVE":"CVE-2011-0001","severity":"important","public_date":"2011-03-09T00:00:00Z","advisories":["RHSA-2011:0332"],"bugzilla":"667261","bugzilla_description":"CVE-2011-0001 scsi-target-utils: double-free vulnerability leads to pre-authenticated crash","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["scsi-target-utils-0:1.0.4-3.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0001.json"},{"CVE":"CVE-2010-2221","severity":"important","public_date":"2010-07-01T00:00:00Z","advisories":["RHSA-2010:0518"],"bugzilla":"593877","bugzilla_description":"CVE-2010-2221 scsi-target-utils: stack buffer overflow vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["scsi-target-utils-0:0.0-6.20091205snap.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2221.json"},{"CVE":"CVE-2010-0743","severity":"important","public_date":"2010-03-22T00:00:00Z","advisories":["RHSA-2010:0362"],"bugzilla":"576359","bugzilla_description":"CVE-2010-0743 scsi-target-utils: format string vulnerability","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-134","affected_packages":["scsi-target-utils-0:0.0-6.20091205snap.el5_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0743.json"},{"CVE":"CVE-2010-0624","severity":"moderate","public_date":"2010-03-10T00:00:00Z","advisories":["RHSA-2010:0145","RHSA-2010:0144","RHSA-2010:0143","RHSA-2010:0142","RHSA-2010:0141"],"bugzilla":"564368","bugzilla_description":"CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially-crafted archive","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["cpio-0:2.5-6.RHEL3","tar-0:1.14-13.el4_8.1","tar-0:1.13.25-16.RHEL3","cpio-0:2.6-23.el5_4.1","tar-2:1.15.1-23.0.1.el5_4.2","cpio-0:2.5-16.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0624.json"},{"CVE":"CVE-2007-4829","severity":"moderate","public_date":"2007-08-24T00:00:00Z","advisories":["RHSA-2010:0505"],"bugzilla":"295021","bugzilla_description":"CVE-2007-4829 perl-Archive-Tar directory traversal flaws","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["perl-Archive-Tar-1:1.39.1-1.el5_5.1","perl-Archive-Tar-0:1.39.1-1.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4829.json"},{"CVE":"CVE-2007-4134","severity":"moderate","public_date":"2007-08-21T00:00:00Z","advisories":["RHSA-2007:0873"],"bugzilla":"253856","bugzilla_description":"CVE-2007-4134 star directory traversal vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["star-0:1.5a75-2","star-0:1.5a25-8","star-0:1.5a08-5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4134.json"},{"CVE":"CVE-2007-4476","severity":"low","public_date":"2007-08-17T00:00:00Z","advisories":["RHSA-2010:0144","RHSA-2010:0141"],"bugzilla":"280961","bugzilla_description":"CVE-2007-4476 tar/cpio stack crashing in safer_name_suffix","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tar-0:1.14-13.el4_8.1","cpio-0:2.6-23.el5_4.1","tar-2:1.15.1-23.0.1.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4476.json"},{"CVE":"CVE-2007-4131","severity":"moderate","public_date":"2007-08-12T00:00:00Z","advisories":["RHSA-2007:0860"],"bugzilla":"251921","bugzilla_description":"CVE-2007-4131 tar directory traversal vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tar-2:1.15.1-23.0.1.el5","tar-0:1.14-12.5.1.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4131.json"},{"CVE":"CVE-2006-6097","severity":"moderate","public_date":"2006-11-21T00:00:00Z","advisories":["RHSA-2006:0749"],"bugzilla":"1618237","bugzilla_description":"CVE-2006-6097 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tar-0:1.14-12.RHEL4","tar-0:1.13.25-15.RHEL3","tar-0:1.13.25-6.AS21.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-6097.json"},{"CVE":"CVE-2006-0300","severity":"moderate","public_date":"2005-06-17T00:00:00Z","advisories":["RHSA-2006:0232"],"bugzilla":"1617881","bugzilla_description":"CVE-2006-0300 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tar-0:1.14-9.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0300.json"},{"CVE":"CVE-2005-1918","severity":"low","public_date":"2003-07-21T00:00:00Z","advisories":["RHSA-2006:0195"],"bugzilla":"140589","bugzilla_description":"CVE-2005-1918 tar archive path traversal issue","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tar-0:1.13.25-14.RHEL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1918.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/target-restore_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/target-restore_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/target-restore_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/targetcli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/targetcli_security_api_results.json
new file mode 100644
index 0000000..f80486e
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/targetcli_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13867","severity":"moderate","public_date":"2020-06-05T00:00:00Z","advisories":[],"bugzilla":"1848143","bugzilla_description":"CVE-2020-13867 targetcli: weak permissions for /etc/target and backup files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13867.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10699","severity":"important","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:1933"],"bugzilla":"1819219","bugzilla_description":"CVE-2020-10699 targetcli: world writable /var/run/targetclid.sock allows unprivileged user to execute commands","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["targetcli-0:2.1.51-4.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10699.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tbb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tbb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tbb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tbb-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tbb-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tbb-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tbb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tbb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tbb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tboot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tboot_security_api_results.json
new file mode 100644
index 0000000..b8f5ee2
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tboot_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-16837","severity":"moderate","public_date":"2017-11-13T00:00:00Z","advisories":[],"bugzilla":"1515198","bugzilla_description":"CVE-2017-16837 tboot: Incorrect validation of certain function pointers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2014-5118","severity":"low","public_date":"2014-07-24T00:00:00Z","advisories":["RHBA-2015:0584"],"bugzilla":"1124488","bugzilla_description":"CVE-2014-5118 tboot: argument measurement vulnerability for GRUB2+ELF kernels","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["tboot-1:1.8.2-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5118.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl-brlapi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl-brlapi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl-brlapi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl_security_api_results.json
new file mode 100644
index 0000000..b3aa655
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-13867","severity":"moderate","public_date":"2020-06-05T00:00:00Z","advisories":[],"bugzilla":"1848143","bugzilla_description":"CVE-2020-13867 targetcli: weak permissions for /etc/target and backup files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13867.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-10699","severity":"important","public_date":"2020-03-23T00:00:00Z","advisories":["RHSA-2020:1933"],"bugzilla":"1819219","bugzilla_description":"CVE-2020-10699 targetcli: world writable /var/run/targetclid.sock allows unprivileged user to execute commands","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["targetcli-0:2.1.51-4.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10699.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-0773","severity":"important","public_date":"2016-02-11T00:00:00Z","advisories":["RHSA-2016:0348","RHSA-2016:0349","RHSA-2016:1060","RHSA-2016:0346","RHSA-2016:0347"],"bugzilla":"1303832","bugzilla_description":"CVE-2016-0773 postgresql: case insensitive range handling integer overflow leading to buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["rh-postgresql94-postgresql-0:9.4.6-1.el7","rh-postgresql94-postgresql-0:9.4.6-1.el6","postgresql-0:9.2.15-1.el7_2","postgresql-0:8.4.20-5.el6_7","postgresql92-postgresql-0:9.2.15-2.el6","postgresql92-postgresql-0:9.2.15-1.el7","postgresql92-postgresql-0:9.2.15-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0773.json"},{"CVE":"CVE-2013-6396","severity":"moderate","public_date":"2013-07-10T00:00:00Z","advisories":[],"bugzilla":"1031652","bugzilla_description":"CVE-2013-6396 python-swiftclient: SSL certificate verification security issue","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6396.json"},{"CVE":"CVE-2008-0553","severity":"moderate","public_date":"2008-02-01T00:00:00Z","advisories":["RHSA-2008:0136","RHSA-2008:0135","RHSA-2008:0134"],"bugzilla":"431518","bugzilla_description":"CVE-2008-0553 tk: GIF handling buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tk-0:8.4.7-3.el4_6.1","tk-0:8.4.13-5.el5_1.1","tcltk-0:8.3.5-92.8","tcltk-0:8.3.3-75"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0553.json"},{"CVE":"CVE-2007-4772","severity":"moderate","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0038","RHSA-2008:0134","RHSA-2008:0040","RHSA-2013:0122"],"bugzilla":"316511","bugzilla_description":"CVE-2007-4772 postgresql DoS via infinite loop in regex NFA optimization code","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["postgresql-0:8.1.11-1.el5_1.1","postgresql-0:8.1.11-1.el4s1.1","tcl-0:8.4.13-6.el5","tcltk-0:8.3.5-92.8","postgresql-0:7.4.19-1.el4_6.1","postgresql-0:8.2.6-1.el5s2","tcltk-0:8.3.3-75"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4772.json"},{"CVE":"CVE-2007-6067","severity":"low","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0038","RHSA-2008:0040","RHSA-2013:0122"],"bugzilla":"400931","bugzilla_description":"CVE-2007-6067 postgresql: tempory DoS caused by slow regex NFA cleanup","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["postgresql-0:8.1.11-1.el5_1.1","postgresql-0:8.1.11-1.el4s1.1","tcl-0:8.4.13-6.el5","postgresql-0:7.4.19-1.el4_6.1","postgresql-0:8.2.6-1.el5s2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6067.json"},{"CVE":"CVE-2007-5378","severity":"low","public_date":"2006-03-25T00:00:00Z","advisories":["RHSA-2008:0135","RHSA-2008:0134"],"bugzilla":"332021","bugzilla_description":"CVE-2007-5378 Tk GIF processing buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tk-0:8.4.7-3.el4_6.1","tcltk-0:8.3.5-92.8","tcltk-0:8.3.3-75"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5378.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcpdump_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcpdump_security_api_results.json
new file mode 100644
index 0000000..89bba8c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcpdump_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19325","severity":"low","public_date":"2020-03-16T00:00:00Z","advisories":[],"bugzilla":"1817479","bugzilla_description":"CVE-2018-19325 tcpdump: heap-based buffer over-read in the EXTRACT_32BITS function due to improper serviceId sanitization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19325.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-14882","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760430","bugzilla_description":"CVE-2018-14882 tcpdump: Buffer over-read in function rpl_dio_printopt in print-icmp6.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14882.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16300","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760445","bugzilla_description":"CVE-2018-16300 tcpdump: Resource exhaustion in bgp_attr_print() function in print-bgp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16300.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14469","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760447","bugzilla_description":"CVE-2018-14469 tcpdump: Buffer over-read in ikev1_n_print() function in print-isakmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14469.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14465","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760449","bugzilla_description":"CVE-2018-14465 tcpdump: Buffer over-read in rsvp_obj_print() function in print-rsvp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14465.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14463","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760453","bugzilla_description":"CVE-2018-14463 tcpdump: Buffer over-read in vrrp_print() function in print-vrrp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14463.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14462","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760455","bugzilla_description":"CVE-2018-14462 tcpdump: Buffer over-read in icmp_print() function in print-icmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14462.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14879","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760457","bugzilla_description":"CVE-2018-14879 tcpdump: Out of bounds read/write in in get_next_file() in tcpdump.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14879.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16229","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760458","bugzilla_description":"CVE-2018-16229 tcpdump: Buffer over-read in dccp_print_option() function in print-dccp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16229.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16227","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760461","bugzilla_description":"CVE-2018-16227 tcpdump: Buffer over-read in print-802_11.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16227.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14881","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760463","bugzilla_description":"CVE-2018-14881 tcpdump: Buffer over-read in bgp_capabilities_print() function in print-bgp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14881.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14468","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760464","bugzilla_description":"CVE-2018-14468 tcpdump: Buffer over-read in mfr_print() function in print-fr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14468.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14880","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760468","bugzilla_description":"CVE-2018-14880 tcpdump: Buffer over-read in ospf6_print_lshdr() function in print-ospf6.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14880.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-10103","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760504","bugzilla_description":"CVE-2018-10103 tcpdump: SMB data printing mishandled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10103.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-10105","severity":"moderate","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760505","bugzilla_description":"CVE-2018-10105 tcpdump: SMB data printing mishandled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10105.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-14461","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760506","bugzilla_description":"CVE-2018-14461 tcpdump: Buffer over-read in ldp_tlv_print() function in print-ldp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14461.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14464","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760507","bugzilla_description":"CVE-2018-14464 tcpdump: Buffer over-read in lmp_print_data_link_subobjs() function in print-lmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14464.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14466","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760509","bugzilla_description":"CVE-2018-14466 tcpdump: Buffer over-read in print-icmp6.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14466.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14467","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760512","bugzilla_description":"CVE-2018-14467 tcpdump: Buffer over-read in bgp_capabilities_print() in print-bgp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14467.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-14470","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760513","bugzilla_description":"CVE-2018-14470 tcpdump: Buffer over-read in babel_print_v2() in print-babel.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14470.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16228","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760514","bugzilla_description":"CVE-2018-16228 tcpdump: Access to uninitialized buffer in print_prefix() function in print-hncp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16228.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16230","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760516","bugzilla_description":"CVE-2018-16230 tcpdump: Buffer over-read in bgp_attr_print() function in print-bgp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16230.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16451","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760517","bugzilla_description":"CVE-2018-16451 tcpdump: Buffer over-read in print_trans() function in print-smb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16451.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16452","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760518","bugzilla_description":"CVE-2018-16452 tcpdump: Resource exhaustion in smb_fdata() funtion in smbutil.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16452.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-15166","severity":"low","public_date":"2019-10-02T00:00:00Z","advisories":[],"bugzilla":"1760520","bugzilla_description":"CVE-2019-15166 tcpdump: Buffer overflow in lmp_print_data_link_subobjs() in print-lmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15166.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-1010220","severity":null,"public_date":"2019-08-01T00:00:00Z","advisories":[],"bugzilla":"1735549","bugzilla_description":"CVE-2019-1010220 tcpdump: buffer over-read in function print_prefix in print-hncp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010220.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-19519","severity":"low","public_date":"2018-12-03T00:00:00Z","advisories":["RHSA-2019:3976","RHSA-2020:1604"],"bugzilla":"1655374","bugzilla_description":"CVE-2018-19519 tcpdump: Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-4.el7_7.1","tcpdump-14:4.9.2-6.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19519.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-16808","severity":"low","public_date":"2017-11-13T00:00:00Z","advisories":[],"bugzilla":"1516994","bugzilla_description":"CVE-2017-16808 tcpdump: heap-based buffer over-read in aoe_print in print-aoe.c and lookup_emem in addrtoname.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16808.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12893","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490539","bugzilla_description":"CVE-2017-12893 tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12894","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490540","bugzilla_description":"CVE-2017-12894 tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12894.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12895","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490541","bugzilla_description":"CVE-2017-12895 tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12895.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12896","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490543","bugzilla_description":"CVE-2017-12896 tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12896.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12897","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490545","bugzilla_description":"CVE-2017-12897 tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12898","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490546","bugzilla_description":"CVE-2017-12898 tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12898.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12899","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490547","bugzilla_description":"CVE-2017-12899 tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12899.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12900","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490548","bugzilla_description":"CVE-2017-12900 tcpdump: Buffer over-read in util-print.c:tok2strbuf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12901","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490549","bugzilla_description":"CVE-2017-12901 tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12901.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12902","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490550","bugzilla_description":"CVE-2017-12902 tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12902.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12985","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490551","bugzilla_description":"CVE-2017-12985 tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12985.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12986","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490552","bugzilla_description":"CVE-2017-12986 tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12986.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12987","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490553","bugzilla_description":"CVE-2017-12987 tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12987.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12988","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490554","bugzilla_description":"CVE-2017-12988 tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12988.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12989","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490555","bugzilla_description":"CVE-2017-12989 tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12989.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12990","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490556","bugzilla_description":"CVE-2017-12990 tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12990.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12991","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490557","bugzilla_description":"CVE-2017-12991 tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12991.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12992","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490558","bugzilla_description":"CVE-2017-12992 tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12993","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490559","bugzilla_description":"CVE-2017-12993 tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12994","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490560","bugzilla_description":"CVE-2017-12994 tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12994.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12995","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490561","bugzilla_description":"CVE-2017-12995 tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12995.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12996","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490562","bugzilla_description":"CVE-2017-12996 tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12996.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12997","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490564","bugzilla_description":"CVE-2017-12997 tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12997.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12998","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490565","bugzilla_description":"CVE-2017-12998 tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12998.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-12999","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490566","bugzilla_description":"CVE-2017-12999 tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13000","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490567","bugzilla_description":"CVE-2017-13000 tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13001","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490568","bugzilla_description":"CVE-2017-13001 tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13001.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13002","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490569","bugzilla_description":"CVE-2017-13002 tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13002.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13003","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490570","bugzilla_description":"CVE-2017-13003 tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13003.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13004","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490571","bugzilla_description":"CVE-2017-13004 tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13005","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490572","bugzilla_description":"CVE-2017-13005 tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13006","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490573","bugzilla_description":"CVE-2017-13006 tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13006.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13007","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490574","bugzilla_description":"CVE-2017-13007 tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13007.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13008","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490575","bugzilla_description":"CVE-2017-13008 tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13008.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13009","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490576","bugzilla_description":"CVE-2017-13009 tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13009.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13010","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490577","bugzilla_description":"CVE-2017-13010 tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13011","severity":"moderate","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490578","bugzilla_description":"CVE-2017-13011 tcpdump: Buffer overflow in util-print.c:bittok2str_internal()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13011.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13012","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490579","bugzilla_description":"CVE-2017-13012 tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13013","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490580","bugzilla_description":"CVE-2017-13013 tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13013.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13014","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490581","bugzilla_description":"CVE-2017-13014 tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13014.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13015","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490582","bugzilla_description":"CVE-2017-13015 tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13015.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13016","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490583","bugzilla_description":"CVE-2017-13016 tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13016.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13017","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490584","bugzilla_description":"CVE-2017-13017 tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13017.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13018","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490585","bugzilla_description":"CVE-2017-13018 tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13018.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13019","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490586","bugzilla_description":"CVE-2017-13019 tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13020","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490587","bugzilla_description":"CVE-2017-13020 tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13021","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490588","bugzilla_description":"CVE-2017-13021 tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13021.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13022","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490589","bugzilla_description":"CVE-2017-13022 tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13023","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490590","bugzilla_description":"CVE-2017-13023 tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13024","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490591","bugzilla_description":"CVE-2017-13024 tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13024.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13025","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490592","bugzilla_description":"CVE-2017-13025 tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13025.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13026","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490593","bugzilla_description":"CVE-2017-13026 tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13026.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13027","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490594","bugzilla_description":"CVE-2017-13027 tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13027.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13028","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490595","bugzilla_description":"CVE-2017-13028 tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13028.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13029","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490596","bugzilla_description":"CVE-2017-13029 tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13029.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13030","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490597","bugzilla_description":"CVE-2017-13030 tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13030.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13031","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490598","bugzilla_description":"CVE-2017-13031 tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13031.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13032","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490599","bugzilla_description":"CVE-2017-13032 tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13032.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13033","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490600","bugzilla_description":"CVE-2017-13033 tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13033.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13034","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490601","bugzilla_description":"CVE-2017-13034 tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13034.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13035","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490602","bugzilla_description":"CVE-2017-13035 tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13035.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13036","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490603","bugzilla_description":"CVE-2017-13036 tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13036.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13037","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490604","bugzilla_description":"CVE-2017-13037 tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13038","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490605","bugzilla_description":"CVE-2017-13038 tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13038.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13039","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490606","bugzilla_description":"CVE-2017-13039 tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13039.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13040","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490607","bugzilla_description":"CVE-2017-13040 tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13041","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490608","bugzilla_description":"CVE-2017-13041 tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13041.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13042","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490609","bugzilla_description":"CVE-2017-13042 tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13043","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490610","bugzilla_description":"CVE-2017-13043 tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13043.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13044","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490611","bugzilla_description":"CVE-2017-13044 tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13044.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13045","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490612","bugzilla_description":"CVE-2017-13045 tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13045.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13046","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490613","bugzilla_description":"CVE-2017-13046 tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13046.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13047","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490614","bugzilla_description":"CVE-2017-13047 tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13047.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13048","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490615","bugzilla_description":"CVE-2017-13048 tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13048.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13049","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490616","bugzilla_description":"CVE-2017-13049 tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13049.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13050","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490617","bugzilla_description":"CVE-2017-13050 tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13050.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13051","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490618","bugzilla_description":"CVE-2017-13051 tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13051.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13052","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490619","bugzilla_description":"CVE-2017-13052 tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13052.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13053","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490620","bugzilla_description":"CVE-2017-13053 tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13053.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13054","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490621","bugzilla_description":"CVE-2017-13054 tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13054.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13055","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490622","bugzilla_description":"CVE-2017-13055 tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13055.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13687","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490623","bugzilla_description":"CVE-2017-13687 tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13687.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13688","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490624","bugzilla_description":"CVE-2017-13688 tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13688.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13689","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490625","bugzilla_description":"CVE-2017-13689 tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13689.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13690","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490626","bugzilla_description":"CVE-2017-13690 tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13690.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-13725","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1490627","bugzilla_description":"CVE-2017-13725 tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13725.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-11541","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1475352","bugzilla_description":"CVE-2017-11541 tcpdump: heap-based buffer over-read in the lldp_print","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11541.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-11542","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1475355","bugzilla_description":"CVE-2017-11542 tcpdump: heap-based buffer over-read in the pimv1_print","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11542.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-11543","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1475358","bugzilla_description":"CVE-2017-11543 tcpdump: buffer overflow in the sliplink_print function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11543.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11544","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1475359","bugzilla_description":"CVE-2017-11544 tcpdump: Segmentation Violation in the compressed_sl_print","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11544.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11108","severity":"low","public_date":"2017-07-07T00:00:00Z","advisories":["RHEA-2018:0705"],"bugzilla":"1472878","bugzilla_description":"CVE-2017-11108 tcpdump: Heap buffer overflow in the EXTRACT_16BITS function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["tcpdump-14:4.9.2-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11108.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-7922","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7922.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7923","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7923.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7924","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7924.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7925","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7925.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7926","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7926.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7927","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7927.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7928","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7929","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7929.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7930","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7930.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7931","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7931.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7932","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7932.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7933","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7933.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7934","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7934.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7935","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7935.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7936","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7937","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7937.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7938","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7938.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7939","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7939.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7940","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7940.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7973","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7973.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7974","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7974.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7975","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7983","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7983.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7984","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7984.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7985","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7985.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7986","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7986.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7992","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7992.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-7993","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7993.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-8574","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8574.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-8575","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8575.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5202","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5202.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5203","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5203.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5204","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5205","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5205.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5341","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5341.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5342","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5342.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5482","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5482.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5483","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5483.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5484","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5484.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5485","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-5486","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1419066","bugzilla_description":"tcpdump: multiple overflow issues in protocol decoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-125|CWE-190)","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2015-3138","severity":"low","public_date":"2015-03-25T00:00:00Z","advisories":[],"bugzilla":"1212342","bugzilla_description":"CVE-2015-3138 tcpdump: denial of service in print-wb.c","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3138.json"},{"CVE":"CVE-2015-0261","severity":"moderate","public_date":"2015-03-09T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1201792","bugzilla_description":"CVE-2015-0261 tcpdump: IPv6 mobility printer mobility_opt_print() typecastimg/signedness error","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0261.json"},{"CVE":"CVE-2015-2153","severity":"moderate","public_date":"2015-03-09T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1201795","bugzilla_description":"CVE-2015-2153 tcpdump: tcp printer rpki_rtr_pdu_print() missing length check","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2153.json"},{"CVE":"CVE-2015-2154","severity":"low","public_date":"2015-03-09T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1201797","bugzilla_description":"CVE-2015-2154 tcpdump: ethernet printer osi_print_cksum() missing sanity checks out-of-bounds read","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2154.json"},{"CVE":"CVE-2015-2155","severity":"moderate","public_date":"2015-03-09T00:00:00Z","advisories":["RHSA-2017:1871"],"bugzilla":"1201798","bugzilla_description":"CVE-2015-2155 tcpdump: force printer vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["tcpdump-14:4.9.0-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2155.json"},{"CVE":"CVE-2014-9140","severity":"moderate","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1171182","bugzilla_description":"CVE-2014-9140 tcpdump: incorrect handling of PPP packets printing","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9140.json"},{"CVE":"CVE-2014-8767","severity":"low","public_date":"2014-11-13T00:00:00Z","advisories":[],"bugzilla":"1165160","bugzilla_description":"CVE-2014-8767 tcpdump: denial of service in verbose mode using malformed OLSR payload","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8767.json"},{"CVE":"CVE-2014-8768","severity":"low","public_date":"2014-11-13T00:00:00Z","advisories":[],"bugzilla":"1165161","bugzilla_description":"CVE-2014-8768 tcpdump: denial of service in verbose mode using malformed Geonet payload","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8768.json"},{"CVE":"CVE-2014-8769","severity":"low","public_date":"2014-11-13T00:00:00Z","advisories":[],"bugzilla":"1165162","bugzilla_description":"CVE-2014-8769 tcpdump: unreliable output using malformed AOVD payload","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8769.json"},{"CVE":"CVE-2007-3798","severity":"low","public_date":"2007-07-10T00:00:00Z","advisories":["RHSA-2007:0387","RHSA-2007:0368"],"bugzilla":"250275","bugzilla_description":"CVE-2007-3798 tcpdump BGP integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["tcpdump-14:3.9.4-11.el5","tcpdump-14:3.8.2-12.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3798.json"},{"CVE":"CVE-2007-1218","severity":"low","public_date":"2007-03-01T00:00:00Z","advisories":["RHSA-2007:0387","RHSA-2007:0368"],"bugzilla":"232347","bugzilla_description":"CVE-2007-1218 tcpdump denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.9.4-11.el5","tcpdump-14:3.8.2-12.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1218.json"},{"CVE":"CVE-2005-1267","severity":"low","public_date":"2005-06-06T00:00:00Z","advisories":["RHSA-2005:505"],"bugzilla":"1617624","bugzilla_description":"CVE-2005-1267 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.8.2-10.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1267.json"},{"CVE":"CVE-2005-1278","severity":"moderate","public_date":"2005-04-26T00:00:00Z","advisories":["RHSA-2005:421","RHSA-2005:417"],"bugzilla":"1617628","bugzilla_description":"CVE-2005-1278 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.7.2-7.E3.5","tcpdump-14:3.8.2-9.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1278.json"},{"CVE":"CVE-2005-1279","severity":"moderate","public_date":"2005-04-26T00:00:00Z","advisories":["RHSA-2005:421","RHSA-2005:417"],"bugzilla":"1617629","bugzilla_description":"CVE-2005-1279 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.7.2-7.E3.5","tcpdump-14:3.8.2-9.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1279.json"},{"CVE":"CVE-2005-1280","severity":"moderate","public_date":"2005-04-26T00:00:00Z","advisories":["RHSA-2005:421","RHSA-2005:417"],"bugzilla":"1617630","bugzilla_description":"CVE-2005-1280 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.7.2-7.E3.5","tcpdump-14:3.8.2-9.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1280.json"},{"CVE":"CVE-2004-0183","severity":"low","public_date":"2004-03-29T00:00:00Z","advisories":["RHSA-2004:219"],"bugzilla":"1617174","bugzilla_description":"CVE-2004-0183 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.7.2-7.E3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0183.json"},{"CVE":"CVE-2004-0184","severity":"low","public_date":"2004-03-29T00:00:00Z","advisories":["RHSA-2004:219"],"bugzilla":"1617175","bugzilla_description":"CVE-2004-0184 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.7.2-7.E3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0184.json"},{"CVE":"CVE-2003-0989","severity":"moderate","public_date":"2004-01-14T00:00:00Z","advisories":["RHSA-2004:008","RHSA-2004:007"],"bugzilla":"1617118","bugzilla_description":"CVE-2003-0989 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.6.2-12.2.1AS.5","tcpdump-14:3.7.2-7.E3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0989.json"},{"CVE":"CVE-2004-0055","severity":"moderate","public_date":"2004-01-04T00:00:00Z","advisories":["RHSA-2004:008","RHSA-2004:007"],"bugzilla":"1617135","bugzilla_description":"CVE-2004-0055 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.6.2-12.2.1AS.5","tcpdump-14:3.7.2-7.E3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0055.json"},{"CVE":"CVE-2004-0057","severity":"moderate","public_date":"2004-01-04T00:00:00Z","advisories":["RHSA-2004:008","RHSA-2004:007"],"bugzilla":"1617136","bugzilla_description":"CVE-2004-0057 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tcpdump-14:3.6.2-12.2.1AS.5","tcpdump-14:3.7.2-7.E3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0057.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcsh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcsh_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tcsh_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tdb-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tdb-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tdb-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/teamd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/teamd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/teamd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/teckit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/teckit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/teckit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/telnet-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/telnet-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/telnet-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/telnet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/telnet_security_api_results.json
new file mode 100644
index 0000000..15395fd
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/telnet_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10188","severity":"important","public_date":"2020-02-28T00:00:00Z","advisories":["RHSA-2020:1342","RHSA-2020:1334","RHSA-2020:1318","RHSA-2020:1335","RHSA-2020:1349"],"bugzilla":"1811673","bugzilla_description":"CVE-2020-10188 telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["krb5-appl-0:1.0.1-10.el6_10","telnet-1:0.17-73.el8_1.1","telnet-1:0.17-73.el8_0.1","telnet-1:0.17-49.el6_10","telnet-1:0.17-65.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10188.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2005-0488","severity":"moderate","public_date":"2005-06-14T00:00:00Z","advisories":["RHSA-2005:562","RHSA-2005:504"],"bugzilla":"1617531","bugzilla_description":"CVE-2005-0488 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["krb5-0:1.2.7-47","telnet-1:0.17-31.EL4.3","telnet-1:0.17-26.EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0488.json"},{"CVE":"CVE-2005-0468","severity":"important","public_date":"2005-03-28T00:00:00Z","advisories":["RHSA-2005:330","RHSA-2005:327"],"bugzilla":"1617527","bugzilla_description":"CVE-2005-0468 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["telnet-1:0.17-31.EL4.2","krb5-0:1.2.7-42","telnet-1:0.17-26.EL3.2","krb5-0:1.3.4-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0468.json"},{"CVE":"CVE-2005-0469","severity":"important","public_date":"2005-03-28T00:00:00Z","advisories":["RHSA-2005:330","RHSA-2005:327"],"bugzilla":"1617528","bugzilla_description":"CVE-2005-0469 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["telnet-1:0.17-31.EL4.2","krb5-0:1.2.7-42","telnet-1:0.17-26.EL3.2","krb5-0:1.3.4-12"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0469.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/testng-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/testng-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/testng-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/testng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/testng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/testng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tex-fonts-hebrew_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tex-fonts-hebrew_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tex-fonts-hebrew_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texi2html_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texi2html_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texi2html_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texinfo-tex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texinfo-tex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texinfo-tex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texinfo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texinfo_security_api_results.json
new file mode 100644
index 0000000..28f22f0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texinfo_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2006-4810","severity":"moderate","public_date":"2006-11-08T00:00:00Z","advisories":["RHSA-2006:0727"],"bugzilla":"1618203","bugzilla_description":"CVE-2006-4810 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["texinfo-0:4.5-3.el3.1","texinfo-0:4.7-5.el4.2","texinfo-0:4.0b-3.el2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4810.json"},{"CVE":"CVE-2005-3011","severity":"low","public_date":"2000-02-09T00:00:00Z","advisories":["RHSA-2006:0727"],"bugzilla":"1617775","bugzilla_description":"CVE-2005-3011 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["texinfo-0:4.5-3.el3.1","texinfo-0:4.7-5.el4.2","texinfo-0:4.0b-3.el2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3011.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-adjustbox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-adjustbox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-adjustbox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ae_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ae_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ae_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-algorithms_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-algorithms_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-algorithms_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-amscls_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-amscls_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-amscls_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-amsfonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-amsfonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-amsfonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-amsmath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-amsmath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-amsmath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-anyfontsize_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-anyfontsize_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-anyfontsize_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-anysize_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-anysize_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-anysize_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-appendix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-appendix_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-appendix_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-arabxetex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-arabxetex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-arabxetex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-arphic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-arphic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-arphic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-attachfile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-attachfile_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-attachfile_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-avantgar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-avantgar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-avantgar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-awesomebox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-awesomebox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-awesomebox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-babel-english_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-babel-english_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-babel-english_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-babel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-babel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-babel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-babelbib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-babelbib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-babelbib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-beamer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-beamer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-beamer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bera_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bera_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bera_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-beton_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-beton_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-beton_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bibtex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bibtex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bibtex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bibtopic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bibtopic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bibtopic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bidi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bidi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bidi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bigfoot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bigfoot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bigfoot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bookman_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bookman_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-bookman_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-booktabs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-booktabs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-booktabs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-breakurl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-breakurl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-breakurl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-breqn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-breqn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-breqn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-capt-of_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-capt-of_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-capt-of_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-caption_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-caption_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-caption_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-carlisle_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-carlisle_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-carlisle_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-changebar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-changebar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-changebar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-changepage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-changepage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-changepage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-charter_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-charter_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-charter_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-chngcntr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-chngcntr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-chngcntr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cite_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cite_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cite_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cjk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cjk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cjk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-classpack_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-classpack_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-classpack_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cm-lgc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cm-lgc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cm-lgc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cm-super_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cm-super_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cm-super_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cmap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cmap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cmap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cmextra_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cmextra_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cmextra_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cns_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cns_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-cns_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collectbox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collectbox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collectbox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-basic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-basic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-basic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-fontsrecommended_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-fontsrecommended_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-fontsrecommended_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-htmlxml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-htmlxml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-htmlxml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-latex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-latex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-latex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-latexrecommended_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-latexrecommended_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-latexrecommended_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-xetex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-xetex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-collection-xetex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-colortbl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-colortbl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-colortbl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-courier_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-courier_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-courier_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-crop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-crop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-crop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-csquotes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-csquotes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-csquotes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ctable_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ctable_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ctable_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ctablestack_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ctablestack_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ctablestack_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-currfile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-currfile_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-currfile_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-datetime_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-datetime_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-datetime_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvipdfmx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvipdfmx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvipdfmx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvipng_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvipng_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvipng_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvips_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvips_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvips_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvisvgm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvisvgm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-dvisvgm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ec_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ec_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ec_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eepic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eepic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eepic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-enctex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-enctex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-enctex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-enumitem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-enumitem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-enumitem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-environ_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-environ_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-environ_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-epsf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-epsf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-epsf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-epstopdf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-epstopdf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-epstopdf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eqparbox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eqparbox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eqparbox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eso-pic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eso-pic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eso-pic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-etex-pkg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-etex-pkg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-etex-pkg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-etex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-etex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-etex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-etoolbox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-etoolbox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-etoolbox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-euenc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-euenc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-euenc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-euler_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-euler_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-euler_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-euro_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-euro_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-euro_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eurosym_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eurosym_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-eurosym_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-extsizes_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-extsizes_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-extsizes_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancybox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancybox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancybox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancyhdr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancyhdr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancyhdr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancyref_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancyref_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancyref_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancyvrb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancyvrb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fancyvrb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-filecontents_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-filecontents_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-filecontents_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-filehook_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-filehook_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-filehook_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-finstrut_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-finstrut_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-finstrut_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fix2col_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fix2col_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fix2col_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fixlatvian_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fixlatvian_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fixlatvian_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-float_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-float_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-float_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fmtcount_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fmtcount_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fmtcount_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fncychap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fncychap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fncychap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontawesome_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontawesome_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontawesome_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontbook_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontbook_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontbook_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fonts-tlwg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fonts-tlwg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fonts-tlwg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontspec_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontspec_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontspec_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontwrap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontwrap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fontwrap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-footmisc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-footmisc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-footmisc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fpl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fpl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-fpl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-framed_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-framed_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-framed_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-garuda-c90_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-garuda-c90_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-garuda-c90_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-geometry_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-geometry_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-geometry_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-glyphlist_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-glyphlist_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-glyphlist_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-graphics-cfg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-graphics-cfg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-graphics-cfg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-graphics-def_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-graphics-def_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-graphics-def_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-graphics_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-graphics_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-graphics_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-gsftopk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-gsftopk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-gsftopk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-helvetic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-helvetic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-helvetic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyperref_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyperref_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyperref_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyph-utf8_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyph-utf8_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyph-utf8_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyphen-base_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyphen-base_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyphen-base_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyphenat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyphenat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-hyphenat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifetex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifetex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifetex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifluatex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifluatex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifluatex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifmtarg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifmtarg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifmtarg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifoddpage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifoddpage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifoddpage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-iftex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-iftex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-iftex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifxetex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifxetex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ifxetex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-import_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-import_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-import_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-index_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-index_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-index_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-jadetex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-jadetex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-jadetex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-jknapltx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-jknapltx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-jknapltx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-kastrup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-kastrup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-kastrup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-kerkis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-kerkis_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-kerkis_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-knuth-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-knuth-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-knuth-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-knuth-local_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-knuth-local_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-knuth-local_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-koma-script_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-koma-script_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-koma-script_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-kpathsea_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-kpathsea_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-kpathsea_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-l3experimental_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-l3experimental_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-l3experimental_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-l3kernel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-l3kernel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-l3kernel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-l3packages_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-l3packages_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-l3packages_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lastpage_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lastpage_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lastpage_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latex-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latex-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latex-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latex2man_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latex2man_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latex2man_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latexconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latexconfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-latexconfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lettrine_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lettrine_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lettrine_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-linegoal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-linegoal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-linegoal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lineno_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lineno_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lineno_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-listings_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-listings_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-listings_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lm-math_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lm-math_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lm-math_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ltabptch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ltabptch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ltabptch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ltxmisc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ltxmisc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ltxmisc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lua-alt-getopt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lua-alt-getopt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lua-alt-getopt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lualatex-math_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lualatex-math_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lualatex-math_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lualibs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lualibs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-lualibs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luaotfload_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luaotfload_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luaotfload_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luatex85_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luatex85_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luatex85_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luatex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luatex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luatex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luatexbase_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luatexbase_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-luatexbase_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-makecmds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-makecmds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-makecmds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-makeindex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-makeindex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-makeindex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-manfnt-font_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-manfnt-font_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-manfnt-font_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-marginnote_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-marginnote_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-marginnote_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-marvosym_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-marvosym_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-marvosym_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mathpazo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mathpazo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mathpazo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mathspec_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mathspec_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mathspec_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mathtools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mathtools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mathtools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mdwtools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mdwtools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mdwtools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-memoir_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-memoir_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-memoir_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-metafont_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-metafont_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-metafont_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-metalogo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-metalogo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-metalogo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-metapost_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-metapost_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-metapost_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mflogo-font_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mflogo-font_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mflogo-font_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mflogo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mflogo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mflogo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mfnfss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mfnfss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mfnfss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mfware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mfware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mfware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-microtype_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-microtype_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-microtype_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mnsymbol_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mnsymbol_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mnsymbol_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mparhack_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mparhack_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mparhack_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mptopdf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mptopdf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-mptopdf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ms_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ms_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ms_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-multido_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-multido_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-multido_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-multirow_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-multirow_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-multirow_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-natbib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-natbib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-natbib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ncctools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ncctools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ncctools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ncntrsbk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ncntrsbk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ncntrsbk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-needspace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-needspace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-needspace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-norasi-c90_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-norasi-c90_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-norasi-c90_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ntgclass_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ntgclass_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ntgclass_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-oberdiek_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-oberdiek_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-oberdiek_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-overpic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-overpic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-overpic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-palatino_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-palatino_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-palatino_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-paralist_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-paralist_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-paralist_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-parallel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-parallel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-parallel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-parskip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-parskip_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-parskip_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-passivetex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-passivetex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-passivetex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pdfpages_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pdfpages_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pdfpages_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pdftex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pdftex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pdftex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pgf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pgf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pgf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-philokalia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-philokalia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-philokalia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-placeins_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-placeins_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-placeins_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-plain_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-plain_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-plain_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-polyglossia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-polyglossia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-polyglossia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-powerdot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-powerdot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-powerdot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-preprint_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-preprint_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-preprint_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-psfrag_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-psfrag_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-psfrag_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pslatex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pslatex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pslatex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-psnfss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-psnfss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-psnfss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pspicture_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pspicture_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pspicture_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-3d_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-3d_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-3d_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-blur_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-blur_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-blur_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-coil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-coil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-coil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-eps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-eps_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-eps_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-fill_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-fill_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-fill_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-grad_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-grad_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-grad_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-math_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-math_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-math_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-node_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-node_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-node_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-plot_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-plot_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-plot_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-slpe_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-slpe_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-slpe_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-text_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-text_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-text_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-tree_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-tree_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pst-tree_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pstricks-add_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pstricks-add_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pstricks-add_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pstricks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pstricks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pstricks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ptext_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ptext_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ptext_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pxfonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pxfonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-pxfonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-qstest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-qstest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-qstest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-rcs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-rcs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-rcs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-realscripts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-realscripts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-realscripts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-rsfs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-rsfs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-rsfs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sansmath_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sansmath_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sansmath_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sauerj_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sauerj_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sauerj_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-scheme-basic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-scheme-basic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-scheme-basic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-section_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-section_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-section_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sectsty_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sectsty_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sectsty_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-seminar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-seminar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-seminar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sepnum_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sepnum_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-sepnum_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-setspace_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-setspace_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-setspace_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-showexpl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-showexpl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-showexpl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-soul_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-soul_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-soul_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-stmaryrd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-stmaryrd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-stmaryrd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-subfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-subfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-subfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-subfigure_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-subfigure_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-subfigure_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-svn-prov_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-svn-prov_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-svn-prov_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-symbol_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-symbol_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-symbol_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-t2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-t2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-t2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tabu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tabu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tabu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tabulary_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tabulary_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tabulary_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tetex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tetex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tetex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex-gyre-math_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex-gyre-math_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex-gyre-math_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex-gyre_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex-gyre_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex-gyre_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex-ini-files_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex-ini-files_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex-ini-files_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex4ht_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex4ht_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex4ht_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texconfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texconfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-common-doc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-common-doc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-common-doc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-docindex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-docindex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-docindex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-en_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-en_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-en_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-msg-translations_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-msg-translations_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-msg-translations_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-scripts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-scripts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive-scripts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive.infra_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive.infra_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-texlive.infra_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-textcase_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-textcase_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-textcase_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-textpos_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-textpos_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-textpos_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-threeparttable_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-threeparttable_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-threeparttable_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-thumbpdf_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-thumbpdf_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-thumbpdf_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-times_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-times_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-times_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tipa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tipa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tipa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-titlesec_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-titlesec_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-titlesec_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-titling_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-titling_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-titling_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tocloft_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tocloft_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tocloft_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-trimspaces_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-trimspaces_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-trimspaces_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-txfonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-txfonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-txfonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-type1cm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-type1cm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-type1cm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-typehtml_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-typehtml_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-typehtml_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ucharclasses_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ucharclasses_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ucharclasses_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ucs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ucs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ucs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-uhc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-uhc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-uhc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ulem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ulem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-ulem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-underscore_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-underscore_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-underscore_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-unicode-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-unicode-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-unicode-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-unicode-math_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-unicode-math_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-unicode-math_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-unisugar_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-unisugar_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-unisugar_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-updmap-map_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-updmap-map_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-updmap-map_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-upquote_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-upquote_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-upquote_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-url_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-url_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-url_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-utopia_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-utopia_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-utopia_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-varwidth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-varwidth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-varwidth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wadalab_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wadalab_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wadalab_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-was_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-was_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-was_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wasy2-ps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wasy2-ps_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wasy2-ps_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wasy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wasy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wasy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wasysym_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wasysym_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wasysym_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wrapfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wrapfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-wrapfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xcolor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xcolor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xcolor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xdvi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xdvi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xdvi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xecjk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xecjk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xecjk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xecolor_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xecolor_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xecolor_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xecyr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xecyr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xecyr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xeindex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xeindex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xeindex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xepersian_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xepersian_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xepersian_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xesearch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xesearch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xesearch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex-itrans_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex-itrans_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex-itrans_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex-pstricks_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex-pstricks_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex-pstricks_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex-tibetan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex-tibetan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex-tibetan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetexconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetexconfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetexconfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetexfontinfo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetexfontinfo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xetexfontinfo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xifthen_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xifthen_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xifthen_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xkeyval_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xkeyval_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xkeyval_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xltxtra_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xltxtra_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xltxtra_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xmltex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xmltex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xmltex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xmltexconfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xmltexconfig_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xmltexconfig_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xstring_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xstring_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xstring_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xtab_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xtab_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xtab_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xunicode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xunicode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-xunicode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-zapfchan_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-zapfchan_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-zapfchan_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-zapfding_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-zapfding_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive-zapfding_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive_security_api_results.json
new file mode 100644
index 0000000..54901a0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/texlive_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-19601","severity":"moderate","public_date":"2020-02-04T00:00:00Z","advisories":[],"bugzilla":"1798118","bugzilla_description":"CVE-2019-19601 texlive: buffer overflow in the TexOpen() function in detex.l","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19601.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-17407","severity":"moderate","public_date":"2018-09-23T00:00:00Z","advisories":["RHSA-2020:1036"],"bugzilla":"1632802","bugzilla_description":"CVE-2018-17407 texlive: Buffer overflow in t1_check_unusual_charstring function in writet1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["texlive-2:2012-45.20130427_r30134.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17407.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-17513","severity":"moderate","public_date":"2017-12-14T00:00:00Z","advisories":[],"bugzilla":"1526167","bugzilla_description":"CVE-2017-17513 texlive: Command injection in mswin/mtxrun.lua and lualibs/lualibs-os.lua","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17513.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-10243","severity":"moderate","public_date":"2016-11-28T00:00:00Z","advisories":[],"bugzilla":"1429452","bugzilla_description":"CVE-2016-10243 texlive: mpost allows to run non-whitelisted external programs","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10243.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2016-6161","severity":"moderate","public_date":"2016-05-08T00:00:00Z","advisories":[],"bugzilla":"1353550","bugzilla_description":"CVE-2016-6161 gd: Global out-of-bounds read when encoding gif from malformed gd2 input","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2015-5700","severity":"low","public_date":"2015-01-11T00:00:00Z","advisories":[],"bugzilla":"1181167","bugzilla_description":"CVE-2015-5700 CVE-2015-5701 texlive: insecure use of /tmp in mktexlsr","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5700.json"},{"CVE":"CVE-2015-5701","severity":"low","public_date":"2015-01-11T00:00:00Z","advisories":[],"bugzilla":"1181167","bugzilla_description":"CVE-2015-5700 CVE-2015-5701 texlive: insecure use of /tmp in mktexlsr","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5701.json"},{"CVE":"CVE-2015-0296","severity":"moderate","public_date":"2014-05-19T00:00:00Z","advisories":[],"bugzilla":"1197082","bugzilla_description":"CVE-2015-0296 texlive rpm scriptlet allows unprivileged user to delete arbitrary files","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0296.json"},{"CVE":"CVE-2011-1552","severity":"low","public_date":"2011-03-28T00:00:00Z","advisories":["RHSA-2012:0062","RHSA-2012:1201","RHSA-2012:0137"],"bugzilla":"692853","bugzilla_description":"CVE-2011-1552 t1lib: invalid read crash via crafted Type 1 font","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["texlive-0:2007-57.el6_2","tetex-0:3.0-33.15.el5_8.1","t1lib-0:5.1.2-6.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1552.json"},{"CVE":"CVE-2011-1553","severity":"moderate","public_date":"2011-03-28T00:00:00Z","advisories":["RHSA-2012:0062","RHSA-2012:1201","RHSA-2012:0137"],"bugzilla":"692854","bugzilla_description":"CVE-2011-1553 t1lib: Use-after-free via crafted Type 1 font","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["texlive-0:2007-57.el6_2","tetex-0:3.0-33.15.el5_8.1","t1lib-0:5.1.2-6.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1553.json"},{"CVE":"CVE-2011-1554","severity":"moderate","public_date":"2011-03-28T00:00:00Z","advisories":["RHSA-2012:0062","RHSA-2012:1201","RHSA-2012:0137"],"bugzilla":"692856","bugzilla_description":"CVE-2011-1554 t1lib: Off-by-one via crafted Type 1 font","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":["texlive-0:2007-57.el6_2","tetex-0:3.0-33.15.el5_8.1","t1lib-0:5.1.2-6.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1554.json"},{"CVE":"CVE-2011-0764","severity":"moderate","public_date":"2011-03-28T00:00:00Z","advisories":["RHSA-2012:0062","RHSA-2012:1201","RHSA-2012:0137"],"bugzilla":"692909","bugzilla_description":"CVE-2011-0764 t1lib: Invalid pointer dereference via crafted Type 1 font","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["texlive-0:2007-57.el6_2","tetex-0:3.0-33.15.el5_8.1","t1lib-0:5.1.2-6.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0764.json"},{"CVE":"CVE-2011-5244","severity":"moderate","public_date":"2011-03-04T00:00:00Z","advisories":[],"bugzilla":"878483","bugzilla_description":"CVE-2011-5244 t1lib: off-by-one errors in token and linetoken","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5244.json"},{"CVE":"CVE-2011-0433","severity":"moderate","public_date":"2011-01-30T00:00:00Z","advisories":["RHSA-2012:0062","RHSA-2012:1201","RHSA-2012:0137"],"bugzilla":"679732","bugzilla_description":"CVE-2011-0433 t1lib: Heap-based buffer overflow DVI file AFM font parser","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["texlive-0:2007-57.el6_2","tetex-0:3.0-33.15.el5_8.1","t1lib-0:5.1.2-6.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0433.json"},{"CVE":"CVE-2010-2642","severity":"moderate","public_date":"2011-01-05T00:00:00Z","advisories":["RHSA-2012:0062","RHSA-2012:1201","RHSA-2012:0137","RHSA-2011:0009"],"bugzilla":"666318","bugzilla_description":"CVE-2010-2642 t1lib: Heap based buffer overflow in DVI file AFM font parser","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["texlive-0:2007-57.el6_2","evince-0:2.28.2-14.el6_0.1","tetex-0:3.0-33.15.el5_8.1","t1lib-0:5.1.2-6.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2642.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tftp-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tftp-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tftp-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tftp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tftp_security_api_results.json
new file mode 100644
index 0000000..0011fc1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tftp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-2199","severity":"moderate","public_date":"2011-06-10T00:00:00Z","advisories":[],"bugzilla":"713950","bugzilla_description":"CVE-2011-2199 tftp: buffer overflow when setting utimeout option","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2199.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-garuda-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-garuda-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-garuda-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-kinnari-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-kinnari-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-kinnari-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-laksaman-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-laksaman-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-laksaman-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-loma-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-loma-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-loma-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-norasi-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-norasi-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-norasi-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-purisa-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-purisa-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-purisa-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-sawasdee-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-sawasdee-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-sawasdee-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgmono-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgmono-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgmono-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgtypewriter-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgtypewriter-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgtypewriter-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgtypist-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgtypist-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgtypist-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgtypo-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgtypo-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-tlwgtypo-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-umpush-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-umpush-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-umpush-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-waree-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-waree-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thai-scalable-waree-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/theora-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/theora-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/theora-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thunderbird_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thunderbird_security_api_results.json
new file mode 100644
index 0000000..00290ee
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/thunderbird_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15683","severity":"important","public_date":"2020-10-20T00:00:00Z","advisories":["RHSA-2020:4315","RHSA-2020:4311","RHSA-2020:4310","RHSA-2020:4317"],"bugzilla":"1889932","bugzilla_description":"CVE-2020-15683 Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:78.4.0-1.el8_2","firefox-0:78.4.0-1.el7_9","firefox-0:78.4.0-1.el8_1","firefox-0:78.4.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15683.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15999","severity":"moderate","public_date":"2020-10-19T00:00:00Z","advisories":[],"bugzilla":"1890210","bugzilla_description":"CVE-2020-15999 freetype: heap-based buffer overflow via malformed ttf files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15999.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15969","severity":"important","public_date":"2020-10-06T00:00:00Z","advisories":["RHSA-2020:4315","RHSA-2020:4235","RHSA-2020:4311","RHSA-2020:4310","RHSA-2020:4317"],"bugzilla":"1885885","bugzilla_description":"CVE-2020-15969 chromium-browser: Use after free in WebRTC","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:78.4.0-1.el8_2","firefox-0:78.4.0-1.el7_9","chromium-browser-0:86.0.4240.75-1.el6_10","firefox-0:78.4.0-1.el8_1","firefox-0:78.4.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15969.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15675","severity":"important","public_date":"2020-10-05T00:00:00Z","advisories":[],"bugzilla":"1885181","bugzilla_description":"CVE-2020-15675 firefox: Use-After-Free in WebGL could result in memory corruption and a potentially exploitable crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-120|CWE-416)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15675.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15677","severity":"moderate","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4158","RHSA-2020:4157","RHSA-2020:4156","RHSA-2020:4155","RHSA-2020:4163","RHSA-2020:3834","RHSA-2020:3835","RHSA-2020:3832","RHSA-2020:4080","RHSA-2020:3833"],"bugzilla":"1881664","bugzilla_description":"CVE-2020-15677 Mozilla: Download origin spoofing via redirect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":["firefox-0:78.3.0-1.el8_1","firefox-0:78.3.0-1.el8_2","thunderbird-0:78.3.1-1.el8_0","firefox-0:78.3.0-1.el8_0","thunderbird-0:78.3.1-1.el8_1","thunderbird-0:78.3.1-1.el8_2","firefox-0:78.3.0-1.el6_10","thunderbird-0:78.3.1-1.el7_9","firefox-0:78.3.0-1.el7_9","thunderbird-0:78.3.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15676","severity":"moderate","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4158","RHSA-2020:4157","RHSA-2020:4156","RHSA-2020:4155","RHSA-2020:4163","RHSA-2020:3834","RHSA-2020:3835","RHSA-2020:3832","RHSA-2020:4080","RHSA-2020:3833"],"bugzilla":"1881665","bugzilla_description":"CVE-2020-15676 Mozilla: XSS when pasting attacker-controlled data into a contenteditable element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["firefox-0:78.3.0-1.el8_1","firefox-0:78.3.0-1.el8_2","thunderbird-0:78.3.1-1.el8_0","firefox-0:78.3.0-1.el8_0","thunderbird-0:78.3.1-1.el8_1","thunderbird-0:78.3.1-1.el8_2","firefox-0:78.3.0-1.el6_10","thunderbird-0:78.3.1-1.el7_9","firefox-0:78.3.0-1.el7_9","thunderbird-0:78.3.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15676.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15678","severity":"moderate","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4158","RHSA-2020:4157","RHSA-2020:4156","RHSA-2020:4155","RHSA-2020:4163","RHSA-2020:3834","RHSA-2020:3835","RHSA-2020:3832","RHSA-2020:4080","RHSA-2020:3833"],"bugzilla":"1881666","bugzilla_description":"CVE-2020-15678 Mozilla: When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:78.3.0-1.el8_1","firefox-0:78.3.0-1.el8_2","thunderbird-0:78.3.1-1.el8_0","firefox-0:78.3.0-1.el8_0","thunderbird-0:78.3.1-1.el8_1","thunderbird-0:78.3.1-1.el8_2","firefox-0:78.3.0-1.el6_10","thunderbird-0:78.3.1-1.el7_9","firefox-0:78.3.0-1.el7_9","thunderbird-0:78.3.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15678.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15673","severity":"important","public_date":"2020-09-22T00:00:00Z","advisories":["RHSA-2020:4158","RHSA-2020:4157","RHSA-2020:4156","RHSA-2020:4155","RHSA-2020:4163","RHSA-2020:3834","RHSA-2020:3835","RHSA-2020:3832","RHSA-2020:4080","RHSA-2020:3833"],"bugzilla":"1881667","bugzilla_description":"CVE-2020-15673 Mozilla: Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:78.3.0-1.el8_1","firefox-0:78.3.0-1.el8_2","thunderbird-0:78.3.1-1.el8_0","firefox-0:78.3.0-1.el8_0","thunderbird-0:78.3.1-1.el8_1","thunderbird-0:78.3.1-1.el8_2","firefox-0:78.3.0-1.el6_10","thunderbird-0:78.3.1-1.el7_9","firefox-0:78.3.0-1.el7_9","thunderbird-0:78.3.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15663","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872530","bugzilla_description":"CVE-2020-15663 Mozilla: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15663.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15664","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":["RHSA-2020:3643","RHSA-2020:3555","RHSA-2020:3632","RHSA-2020:3556","RHSA-2020:3633","RHSA-2020:3631","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:3634","RHSA-2020:3558"],"bugzilla":"1872531","bugzilla_description":"CVE-2020-15664 Mozilla: Attacker-induced prompt for extension installation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":["thunderbird-0:68.12.0-1.el6_10","thunderbird-0:68.12.0-1.el7_8","firefox-0:68.12.0-1.el6_10","firefox-0:78.2.0-3.el8_0","thunderbird-0:68.12.0-1.el8_2","firefox-0:78.2.0-3.el8_1","thunderbird-0:68.12.0-1.el8_1","thunderbird-0:68.12.0-1.el8_0","firefox-0:68.12.0-1.el7_8","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15664.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15669","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":["RHSA-2020:3643","RHSA-2020:3555","RHSA-2020:3632","RHSA-2020:3556","RHSA-2020:3633","RHSA-2020:3631","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:3634","RHSA-2020:3558"],"bugzilla":"1872532","bugzilla_description":"CVE-2020-15669 Mozilla: Use-After-Free when aborting an operation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.12.0-1.el6_10","thunderbird-0:68.12.0-1.el7_8","firefox-0:68.12.0-1.el6_10","firefox-0:78.2.0-3.el8_0","thunderbird-0:68.12.0-1.el8_2","firefox-0:78.2.0-3.el8_1","thunderbird-0:68.12.0-1.el8_1","thunderbird-0:68.12.0-1.el8_0","firefox-0:68.12.0-1.el7_8","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15669.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15670","severity":"important","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1872533","bugzilla_description":"CVE-2020-15670 Mozilla: Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15670.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15667","severity":"low","public_date":"2020-08-25T00:00:00Z","advisories":[],"bugzilla":"1884474","bugzilla_description":"CVE-2020-15667 firefox: Invalid name length could result in a heap buffer overflow, leading to memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15667.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2020-15652","severity":"important","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3344","RHSA-2020:3345","RHSA-2020:3254","RHSA-2020:3342","RHSA-2020:3233","RHSA-2020:3343","RHSA-2020:3241","RHSA-2020:3253","RHSA-2020:3341","RHSA-2020:3229"],"bugzilla":"1861570","bugzilla_description":"CVE-2020-15652 Mozilla: Potential leak of redirect targets when loading scripts in a worker","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":["thunderbird-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el8_2","firefox-0:68.11.0-1.el8_1","firefox-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_0","firefox-0:68.11.0-1.el8_0","thunderbird-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_2","thunderbird-0:68.11.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15652.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15659","severity":"important","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3344","RHSA-2020:3345","RHSA-2020:3254","RHSA-2020:3342","RHSA-2020:3233","RHSA-2020:3343","RHSA-2020:3241","RHSA-2020:3253","RHSA-2020:3341","RHSA-2020:3229"],"bugzilla":"1861572","bugzilla_description":"CVE-2020-15659 Mozilla: Memory safety bugs fixed in Firefox 79 and Firefox ESR 68.11","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el8_2","firefox-0:68.11.0-1.el8_1","firefox-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_0","firefox-0:68.11.0-1.el8_0","thunderbird-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_2","thunderbird-0:68.11.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15659.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15655","severity":"important","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1861644","bugzilla_description":"CVE-2020-15655 Mozilla: Extension APIs could be used to bypass Same-Origin Policy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15655.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15653","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1861645","bugzilla_description":"CVE-2020-15653 Mozilla: Bypassing iframe sandbox when allowing popups","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-276","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15653.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15656","severity":"moderate","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1861646","bugzilla_description":"CVE-2020-15656 Mozilla: Type confusion for special arguments in IonMonkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15658","severity":"low","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1861647","bugzilla_description":"CVE-2020-15658 Mozilla: Overriding file type when saving to disk","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15658.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"3.5"},{"CVE":"CVE-2020-15657","severity":"low","public_date":"2020-07-28T00:00:00Z","advisories":[],"bugzilla":"1861648","bugzilla_description":"CVE-2020-15657 Mozilla: DLL hijacking due to incorrect loading path","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-426","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15657.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2020-15654","severity":"low","public_date":"2020-07-28T00:00:00Z","advisories":["RHSA-2020:3555","RHSA-2020:3559","RHSA-2020:3557","RHSA-2020:4080"],"bugzilla":"1861649","bugzilla_description":"CVE-2020-15654 Mozilla: Custom cursor can overlay user interface","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["firefox-0:78.2.0-3.el8_0","firefox-0:78.2.0-3.el8_1","firefox-0:78.3.0-1.el7_9","firefox-0:78.2.0-2.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15654.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.6"},{"CVE":"CVE-2020-12415","severity":"important","public_date":"2020-07-16T00:00:00Z","advisories":[],"bugzilla":"1875241","bugzilla_description":"CVE-2020-12415 Mozilla: AppCache manifest poisoning due to url encoded character processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138->CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12415.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12416","severity":"important","public_date":"2020-07-16T00:00:00Z","advisories":[],"bugzilla":"1875242","bugzilla_description":"CVE-2020-12416 Mozilla: Use-after-free in WebRTC VideoBroadcaster","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12416.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12426","severity":"important","public_date":"2020-07-16T00:00:00Z","advisories":[],"bugzilla":"1875243","bugzilla_description":"CVE-2020-12426 Mozilla: Memory safety bugs fixed in Thunderbird 78","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12426.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-6514","severity":"important","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3377","RHSA-2020:3344","RHSA-2020:3345","RHSA-2020:3254","RHSA-2020:3342","RHSA-2020:3233","RHSA-2020:3343","RHSA-2020:3241","RHSA-2020:3253","RHSA-2020:3341","RHSA-2020:3229"],"bugzilla":"1857349","bugzilla_description":"CVE-2020-6514 chromium-browser: Inappropriate implementation in WebRTC","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el8_2","firefox-0:68.11.0-1.el8_1","firefox-0:68.11.0-1.el6_10","chromium-browser-0:84.0.4147.105-2.el6_10","thunderbird-0:68.11.0-1.el8_0","firefox-0:68.11.0-1.el8_0","thunderbird-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_2","thunderbird-0:68.11.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6514.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-12412","severity":"moderate","public_date":"2020-07-09T00:00:00Z","advisories":[],"bugzilla":"1855560","bugzilla_description":"CVE-2020-12412 firefox: address bar spoof using history navigation and blocked ports","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-601","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12412.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2020-12417","severity":"important","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2828","RHSA-2020:2906","RHSA-2020:2826","RHSA-2020:2827","RHSA-2020:2825"],"bugzilla":"1853014","bugzilla_description":"CVE-2020-12417 Mozilla: Memory corruption due to missing sign-extension for ValueTags on ARM64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["firefox-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","firefox-0:68.10.0-1.el7_8","thunderbird-0:68.10.0-1.el8_1","firefox-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el7_8","firefox-0:68.10.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12417.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12418","severity":"important","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2828","RHSA-2020:2906","RHSA-2020:2826","RHSA-2020:2827","RHSA-2020:2824","RHSA-2020:2825","RHSA-2020:2966"],"bugzilla":"1853015","bugzilla_description":"CVE-2020-12418 Mozilla: Information disclosure due to manipulated URL object","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["firefox-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","firefox-0:68.10.0-1.el7_8","thunderbird-0:68.10.0-1.el8_1","firefox-0:68.10.0-1.el6_10","thunderbird-0:68.10.0-1.el6_10","firefox-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el7_8","firefox-0:68.10.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12418.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12419","severity":"important","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2828","RHSA-2020:2906","RHSA-2020:2826","RHSA-2020:2827","RHSA-2020:2824","RHSA-2020:2825","RHSA-2020:2966"],"bugzilla":"1853016","bugzilla_description":"CVE-2020-12419 Mozilla: Use-after-free in nsGlobalWindowInner","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","firefox-0:68.10.0-1.el7_8","thunderbird-0:68.10.0-1.el8_1","firefox-0:68.10.0-1.el6_10","thunderbird-0:68.10.0-1.el6_10","firefox-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el7_8","firefox-0:68.10.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12419.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12420","severity":"important","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2828","RHSA-2020:2906","RHSA-2020:2826","RHSA-2020:2827","RHSA-2020:2824","RHSA-2020:2825","RHSA-2020:2966"],"bugzilla":"1853017","bugzilla_description":"CVE-2020-12420 Mozilla: Use-After-Free when trying to connect to a STUN server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","firefox-0:68.10.0-1.el7_8","thunderbird-0:68.10.0-1.el8_1","firefox-0:68.10.0-1.el6_10","thunderbird-0:68.10.0-1.el6_10","firefox-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el7_8","firefox-0:68.10.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12420.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12421","severity":"moderate","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2828","RHSA-2020:2906","RHSA-2020:2826","RHSA-2020:2827","RHSA-2020:2824","RHSA-2020:2825","RHSA-2020:2966"],"bugzilla":"1853018","bugzilla_description":"CVE-2020-12421 Mozilla: Add-On updates did not respect the same certificate trust rules as software updates","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-296","affected_packages":["firefox-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","firefox-0:68.10.0-1.el7_8","thunderbird-0:68.10.0-1.el8_1","firefox-0:68.10.0-1.el6_10","thunderbird-0:68.10.0-1.el6_10","firefox-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el7_8","firefox-0:68.10.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12421.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15646","severity":"important","public_date":"2020-06-30T00:00:00Z","advisories":["RHSA-2020:3038","RHSA-2020:2907","RHSA-2020:3046","RHSA-2020:2906","RHSA-2020:2966"],"bugzilla":"1854036","bugzilla_description":"CVE-2020-15646 Mozilla: Automatic account setup leaks Microsoft Exchange login credentials","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["thunderbird-0:68.10.0-1.el8_2","thunderbird-0:68.10.0-1.el8_0","thunderbird-0:68.10.0-1.el8_1","thunderbird-0:68.10.0-1.el6_10","thunderbird-0:68.10.0-1.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15646.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12410","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2378","RHSA-2020:2379","RHSA-2020:2381","RHSA-2020:2382","RHSA-2020:2615","RHSA-2020:2616","RHSA-2020:2380","RHSA-2020:2613","RHSA-2020:2614","RHSA-2020:2611"],"bugzilla":"1843030","bugzilla_description":"CVE-2020-12410 Mozilla: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.9.0-1.el8_2","thunderbird-0:68.9.0-1.el6_10","firefox-0:68.9.0-1.el6_10","thunderbird-0:68.9.0-1.el8_0","thunderbird-0:68.9.0-1.el8_1","thunderbird-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el8_1","firefox-0:68.9.0-1.el8_0","firefox-0:68.9.0-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12410.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12406","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2378","RHSA-2020:2379","RHSA-2020:2381","RHSA-2020:2382","RHSA-2020:2615","RHSA-2020:2616","RHSA-2020:2380","RHSA-2020:2613","RHSA-2020:2614","RHSA-2020:2611"],"bugzilla":"1843312","bugzilla_description":"CVE-2020-12406 Mozilla: JavaScript Type confusion with NativeTypes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:68.9.0-1.el8_2","thunderbird-0:68.9.0-1.el6_10","firefox-0:68.9.0-1.el6_10","thunderbird-0:68.9.0-1.el8_0","thunderbird-0:68.9.0-1.el8_1","thunderbird-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el8_1","firefox-0:68.9.0-1.el8_0","firefox-0:68.9.0-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12406.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-12405","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2378","RHSA-2020:2379","RHSA-2020:2381","RHSA-2020:2382","RHSA-2020:2615","RHSA-2020:2616","RHSA-2020:2380","RHSA-2020:2613","RHSA-2020:2614","RHSA-2020:2611"],"bugzilla":"1843313","bugzilla_description":"CVE-2020-12405 Mozilla: Use-after-free in SharedWorkerService","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.9.0-1.el8_2","thunderbird-0:68.9.0-1.el6_10","firefox-0:68.9.0-1.el6_10","thunderbird-0:68.9.0-1.el8_0","thunderbird-0:68.9.0-1.el8_1","thunderbird-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el7_8","firefox-0:68.9.0-1.el8_1","firefox-0:68.9.0-1.el8_0","firefox-0:68.9.0-1.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12398","severity":"important","public_date":"2020-06-02T00:00:00Z","advisories":["RHSA-2020:2615","RHSA-2020:2616","RHSA-2020:2613","RHSA-2020:2614","RHSA-2020:2611"],"bugzilla":"1846556","bugzilla_description":"CVE-2020-12398 Mozilla: Security downgrade with IMAP STARTTLS leads to information leakage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["thunderbird-0:68.9.0-1.el8_2","thunderbird-0:68.9.0-1.el6_10","thunderbird-0:68.9.0-1.el8_0","thunderbird-0:68.9.0-1.el8_1","thunderbird-0:68.9.0-1.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12398.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12399","severity":"moderate","public_date":"2020-05-21T00:00:00Z","advisories":[],"bugzilla":"1826177","bugzilla_description":"CVE-2020-12399 nss: Timing attack on DSA signature generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12399.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2020-12387","severity":"critical","public_date":"2020-05-05T00:00:00Z","advisories":["RHSA-2020:2037","RHSA-2020:2048","RHSA-2020:2049","RHSA-2020:2046","RHSA-2020:2036","RHSA-2020:2047","RHSA-2020:2033","RHSA-2020:2031","RHSA-2020:2032","RHSA-2020:2050"],"bugzilla":"1831761","bugzilla_description":"CVE-2020-12387 Mozilla: Use-after-free during worker shutdown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:68.8.0-1.el7_8","thunderbird-0:68.8.0-1.el8_0","firefox-0:68.8.0-1.el6_10","thunderbird-0:68.8.0-1.el7_8","firefox-0:68.8.0-1.el8_0","thunderbird-0:68.8.0-1.el8_2","firefox-0:68.8.0-1.el8_1","thunderbird-0:68.8.0-1.el6_10","firefox-0:68.8.0-1.el8_2","thunderbird-0:68.8.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6831","severity":"important","public_date":"2020-05-05T00:00:00Z","advisories":["RHSA-2020:2037","RHSA-2020:2048","RHSA-2020:2049","RHSA-2020:2046","RHSA-2020:2036","RHSA-2020:2047","RHSA-2020:2033","RHSA-2020:2064","RHSA-2020:2031","RHSA-2020:2032","RHSA-2020:2050"],"bugzilla":"1831763","bugzilla_description":"CVE-2020-6831 usrsctp: Buffer overflow in AUTH chunk input validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:68.8.0-1.el7_8","thunderbird-0:68.8.0-1.el8_0","chromium-browser-0:81.0.4044.138-1.el6_10","firefox-0:68.8.0-1.el6_10","thunderbird-0:68.8.0-1.el7_8","firefox-0:68.8.0-1.el8_0","thunderbird-0:68.8.0-1.el8_2","firefox-0:68.8.0-1.el8_1","thunderbird-0:68.8.0-1.el6_10","firefox-0:68.8.0-1.el8_2","thunderbird-0:68.8.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6831.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-12392","severity":"moderate","public_date":"2020-05-05T00:00:00Z","advisories":["RHSA-2020:2037","RHSA-2020:2048","RHSA-2020:2049","RHSA-2020:2046","RHSA-2020:2036","RHSA-2020:2047","RHSA-2020:2033","RHSA-2020:2031","RHSA-2020:2032","RHSA-2020:2050"],"bugzilla":"1831764","bugzilla_description":"CVE-2020-12392 Mozilla: Arbitrary local file access with 'Copy as cURL'","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["firefox-0:68.8.0-1.el7_8","thunderbird-0:68.8.0-1.el8_0","firefox-0:68.8.0-1.el6_10","thunderbird-0:68.8.0-1.el7_8","firefox-0:68.8.0-1.el8_0","thunderbird-0:68.8.0-1.el8_2","firefox-0:68.8.0-1.el8_1","thunderbird-0:68.8.0-1.el6_10","firefox-0:68.8.0-1.el8_2","thunderbird-0:68.8.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12392.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-12395","severity":"critical","public_date":"2020-05-05T00:00:00Z","advisories":["RHSA-2020:2037","RHSA-2020:2048","RHSA-2020:2049","RHSA-2020:2046","RHSA-2020:2036","RHSA-2020:2047","RHSA-2020:2033","RHSA-2020:2031","RHSA-2020:2032","RHSA-2020:2050"],"bugzilla":"1831765","bugzilla_description":"CVE-2020-12395 Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:68.8.0-1.el7_8","thunderbird-0:68.8.0-1.el8_0","firefox-0:68.8.0-1.el6_10","thunderbird-0:68.8.0-1.el7_8","firefox-0:68.8.0-1.el8_0","thunderbird-0:68.8.0-1.el8_2","firefox-0:68.8.0-1.el8_1","thunderbird-0:68.8.0-1.el6_10","firefox-0:68.8.0-1.el8_2","thunderbird-0:68.8.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12395.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-12393","severity":"moderate","public_date":"2020-05-05T00:00:00Z","advisories":[],"bugzilla":"1831946","bugzilla_description":"CVE-2020-12393 Mozilla: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12393.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-12397","severity":"low","public_date":"2020-05-05T00:00:00Z","advisories":["RHSA-2020:2048","RHSA-2020:2049","RHSA-2020:2046","RHSA-2020:2047","RHSA-2020:2050"],"bugzilla":"1832565","bugzilla_description":"CVE-2020-12397 Mozilla: Sender Email Address Spoofing using encoded Unicode characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["thunderbird-0:68.8.0-1.el8_0","thunderbird-0:68.8.0-1.el7_8","thunderbird-0:68.8.0-1.el8_2","thunderbird-0:68.8.0-1.el6_10","thunderbird-0:68.8.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12397.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2020-6463","severity":"important","public_date":"2020-04-21T00:00:00Z","advisories":["RHSA-2020:3344","RHSA-2020:3345","RHSA-2020:1970","RHSA-2020:3254","RHSA-2020:3342","RHSA-2020:3233","RHSA-2020:3343","RHSA-2020:3241","RHSA-2020:3253","RHSA-2020:3341","RHSA-2020:3229"],"bugzilla":"1840893","bugzilla_description":"CVE-2020-6463 chromium-browser: Use after free in ANGLE","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el7_8","firefox-0:68.11.0-1.el8_2","firefox-0:68.11.0-1.el8_1","firefox-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_0","firefox-0:68.11.0-1.el8_0","thunderbird-0:68.11.0-1.el6_10","thunderbird-0:68.11.0-1.el8_2","chromium-browser-0:81.0.4044.122-1.el6_10","thunderbird-0:68.11.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6463.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6821","severity":"important","public_date":"2020-04-08T00:00:00Z","advisories":["RHSA-2020:1420","RHSA-2020:1496","RHSA-2020:1488","RHSA-2020:1495","RHSA-2020:1406","RHSA-2020:1429","RHSA-2020:1489","RHSA-2020:1404"],"bugzilla":"1821674","bugzilla_description":"CVE-2020-6821 Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["firefox-0:68.7.0-2.el7_8","thunderbird-0:68.7.0-1.el8_0","thunderbird-0:68.7.0-1.el8_1","firefox-0:68.7.0-2.el8_0","thunderbird-0:68.7.0-1.el6_10","firefox-0:68.7.0-2.el6_10","thunderbird-0:68.7.0-1.el7_8","firefox-0:68.7.0-2.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6821.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-6822","severity":"moderate","public_date":"2020-04-08T00:00:00Z","advisories":["RHSA-2020:1420","RHSA-2020:1496","RHSA-2020:1488","RHSA-2020:1495","RHSA-2020:1406","RHSA-2020:1429","RHSA-2020:1489","RHSA-2020:1404"],"bugzilla":"1821676","bugzilla_description":"CVE-2020-6822 Mozilla: Out of bounds write in GMPDecodeData when processing large images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["firefox-0:68.7.0-2.el7_8","thunderbird-0:68.7.0-1.el8_0","thunderbird-0:68.7.0-1.el8_1","firefox-0:68.7.0-2.el8_0","thunderbird-0:68.7.0-1.el6_10","firefox-0:68.7.0-2.el6_10","thunderbird-0:68.7.0-1.el7_8","firefox-0:68.7.0-2.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6822.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6825","severity":"important","public_date":"2020-04-08T00:00:00Z","advisories":["RHSA-2020:1420","RHSA-2020:1496","RHSA-2020:1488","RHSA-2020:1495","RHSA-2020:1406","RHSA-2020:1429","RHSA-2020:1489","RHSA-2020:1404"],"bugzilla":"1821682","bugzilla_description":"CVE-2020-6825 Mozilla: Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:68.7.0-2.el7_8","thunderbird-0:68.7.0-1.el8_0","thunderbird-0:68.7.0-1.el8_1","firefox-0:68.7.0-2.el8_0","thunderbird-0:68.7.0-1.el6_10","firefox-0:68.7.0-2.el6_10","thunderbird-0:68.7.0-1.el7_8","firefox-0:68.7.0-2.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-6819","severity":"critical","public_date":"2020-04-03T00:00:00Z","advisories":["RHSA-2020:1496","RHSA-2020:1488","RHSA-2020:1341","RHSA-2020:1495","RHSA-2020:1340","RHSA-2020:1339","RHSA-2020:1489","RHSA-2020:1338"],"bugzilla":"1820869","bugzilla_description":"CVE-2020-6819 Mozilla: Use-after-free while running the nsDocShell destructor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:68.6.1-1.el6_10","firefox-0:68.6.1-1.el8_1","firefox-0:68.6.1-1.el8_0","thunderbird-0:68.7.0-1.el8_0","thunderbird-0:68.7.0-1.el8_1","thunderbird-0:68.7.0-1.el6_10","firefox-0:68.6.1-1.el7_8","thunderbird-0:68.7.0-1.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6819.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6820","severity":"critical","public_date":"2020-04-03T00:00:00Z","advisories":["RHSA-2020:1496","RHSA-2020:1488","RHSA-2020:1341","RHSA-2020:1495","RHSA-2020:1340","RHSA-2020:1339","RHSA-2020:1489","RHSA-2020:1338"],"bugzilla":"1820878","bugzilla_description":"CVE-2020-6820 Mozilla: Use-after-free when handling a ReadableStream","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:68.6.1-1.el6_10","firefox-0:68.6.1-1.el8_1","firefox-0:68.6.1-1.el8_0","thunderbird-0:68.7.0-1.el8_0","thunderbird-0:68.7.0-1.el8_1","thunderbird-0:68.7.0-1.el6_10","firefox-0:68.6.1-1.el7_8","thunderbird-0:68.7.0-1.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6820.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6805","severity":"important","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812199","bugzilla_description":"CVE-2020-6805 Mozilla: Use-after-free when removing data about origins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6805.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6806","severity":"important","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812200","bugzilla_description":"CVE-2020-6806 Mozilla: BodyStream::OnInputStreamReady was missing protections against state confusion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6806.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6807","severity":"important","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812201","bugzilla_description":"CVE-2020-6807 Mozilla: Use-after-free in cubeb during stream destruction","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6807.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6811","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812202","bugzilla_description":"CVE-2020-6811 Mozilla: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-78","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6811.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-20503","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:1270","RHSA-2020:0820"],"bugzilla":"1812203","bugzilla_description":"CVE-2019-20503 usrsctp: Out of bounds reads in sctp_load_addresses_from_init()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","chromium-browser-0:80.0.3987.149-1.el6_10","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20503.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6812","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812204","bugzilla_description":"CVE-2020-6812 Mozilla: The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6814","severity":"important","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:0919","RHSA-2020:0819","RHSA-2020:0918","RHSA-2020:0816","RHSA-2020:0914","RHSA-2020:0815","RHSA-2020:0905","RHSA-2020:0820"],"bugzilla":"1812205","bugzilla_description":"CVE-2020-6814 Mozilla: Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.6.0-1.el7_7","thunderbird-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el7_7","firefox-0:68.6.0-1.el6_10","firefox-0:68.6.0-1.el8_1","thunderbird-0:68.6.0-1.el8_1","firefox-0:68.6.0-1.el8_0","thunderbird-0:68.6.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6814.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-6797","severity":"moderate","public_date":"2020-02-11T00:00:00Z","advisories":[],"bugzilla":"1801917","bugzilla_description":"CVE-2020-6797 Mozilla: Extensions granted downloads.open permission could open arbitrary applications on Mac OSX","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6798","severity":"moderate","public_date":"2020-02-11T00:00:00Z","advisories":["RHSA-2020:0520","RHSA-2020:0574","RHSA-2020:0519","RHSA-2020:0577","RHSA-2020:0521","RHSA-2020:0576","RHSA-2020:0565","RHSA-2020:0512"],"bugzilla":"1801918","bugzilla_description":"CVE-2020-6798 Mozilla: Incorrect parsing of template tag could result in JavaScript injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["firefox-0:68.5.0-2.el8_0","firefox-0:68.5.0-2.el8_1","thunderbird-0:68.5.0-1.el8_1","thunderbird-0:68.5.0-1.el8_0","firefox-0:68.5.0-2.el7_7","thunderbird-0:68.5.0-1.el6_10","firefox-0:68.5.0-2.el6_10","thunderbird-0:68.5.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6800","severity":"important","public_date":"2020-02-11T00:00:00Z","advisories":["RHSA-2020:0520","RHSA-2020:0574","RHSA-2020:0519","RHSA-2020:0577","RHSA-2020:0521","RHSA-2020:0576","RHSA-2020:0565","RHSA-2020:0512"],"bugzilla":"1801920","bugzilla_description":"CVE-2020-6800 Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:68.5.0-2.el8_0","firefox-0:68.5.0-2.el8_1","thunderbird-0:68.5.0-1.el8_1","thunderbird-0:68.5.0-1.el8_0","firefox-0:68.5.0-2.el7_7","thunderbird-0:68.5.0-1.el6_10","firefox-0:68.5.0-2.el6_10","thunderbird-0:68.5.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6800.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-6793","severity":"moderate","public_date":"2020-02-11T00:00:00Z","advisories":["RHSA-2020:0574","RHSA-2020:0577","RHSA-2020:0576","RHSA-2020:0565"],"bugzilla":"1801955","bugzilla_description":"CVE-2020-6793 Mozilla: Out-of-bounds read when processing certain email messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:68.5.0-1.el8_1","thunderbird-0:68.5.0-1.el8_0","thunderbird-0:68.5.0-1.el6_10","thunderbird-0:68.5.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6793.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6794","severity":"moderate","public_date":"2020-02-11T00:00:00Z","advisories":["RHSA-2020:0574","RHSA-2020:0577","RHSA-2020:0576","RHSA-2020:0565"],"bugzilla":"1801956","bugzilla_description":"CVE-2020-6794 Mozilla: Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-312","affected_packages":["thunderbird-0:68.5.0-1.el8_1","thunderbird-0:68.5.0-1.el8_0","thunderbird-0:68.5.0-1.el6_10","thunderbird-0:68.5.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6794.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6795","severity":"moderate","public_date":"2020-02-11T00:00:00Z","advisories":["RHSA-2020:0574","RHSA-2020:0577","RHSA-2020:0576","RHSA-2020:0565"],"bugzilla":"1801957","bugzilla_description":"CVE-2020-6795 Mozilla: Crash processing S/MIME messages with multiple signatures","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["thunderbird-0:68.5.0-1.el8_1","thunderbird-0:68.5.0-1.el8_0","thunderbird-0:68.5.0-1.el6_10","thunderbird-0:68.5.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-6792","severity":"low","public_date":"2020-02-11T00:00:00Z","advisories":["RHSA-2020:0574","RHSA-2020:0577","RHSA-2020:0576","RHSA-2020:0565"],"bugzilla":"1801958","bugzilla_description":"CVE-2020-6792 Mozilla: Message ID calculation was based on uninitialized data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["thunderbird-0:68.5.0-1.el8_1","thunderbird-0:68.5.0-1.el8_0","thunderbird-0:68.5.0-1.el6_10","thunderbird-0:68.5.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6792.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-20446","severity":"moderate","public_date":"2020-02-02T00:00:00Z","advisories":[],"bugzilla":"1797608","bugzilla_description":"CVE-2019-20446 librsvg: Resource exhaustion via crafted SVG file with nested patterns","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20446.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-17020","severity":"important","public_date":"2020-01-14T00:00:00Z","advisories":[],"bugzilla":"1790800","bugzilla_description":"CVE-2019-17020 Mozilla: Content Security Policy bypass for XSL stylesheet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17020.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-6750","severity":"moderate","public_date":"2020-01-09T00:00:00Z","advisories":[],"bugzilla":"1790288","bugzilla_description":"CVE-2020-6750 glib: Mishandling of proxy_addr field in GSocketClient may lead to proxy being ignored","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-6750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-17026","severity":"critical","public_date":"2020-01-08T00:00:00Z","advisories":["RHSA-2020:0111","RHSA-2020:0123","RHSA-2020:0085","RHSA-2020:0120","RHSA-2020:0086","RHSA-2020:0295","RHSA-2020:0292","RHSA-2020:0127"],"bugzilla":"1789214","bugzilla_description":"CVE-2019-17026 Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:68.4.1-2.el6_10","firefox-0:68.4.1-1.el6_10","thunderbird-0:68.4.1-2.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.4.1-1.el8_1","thunderbird-0:68.4.1-2.el8_1","firefox-0:68.4.1-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17026.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-17015","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":[],"bugzilla":"1788722","bugzilla_description":"CVE-2019-17015 Mozilla: Memory corruption in parent process during new content process initialization on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17015.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-17016","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:0111","RHSA-2020:0123","RHSA-2020:0085","RHSA-2020:0120","RHSA-2020:0086","RHSA-2020:0295","RHSA-2020:0292","RHSA-2020:0127"],"bugzilla":"1788723","bugzilla_description":"CVE-2019-17016 Mozilla: Bypass of @namespace CSS sanitization during pasting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["thunderbird-0:68.4.1-2.el6_10","firefox-0:68.4.1-1.el6_10","thunderbird-0:68.4.1-2.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.4.1-1.el8_1","thunderbird-0:68.4.1-2.el8_1","firefox-0:68.4.1-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17016.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17017","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:0111","RHSA-2020:0123","RHSA-2020:0085","RHSA-2020:0120","RHSA-2020:0086","RHSA-2020:0295","RHSA-2020:0292","RHSA-2020:0127"],"bugzilla":"1788724","bugzilla_description":"CVE-2019-17017 Mozilla: Type Confusion in XPCVariant.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:68.4.1-2.el6_10","firefox-0:68.4.1-1.el6_10","thunderbird-0:68.4.1-2.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.4.1-1.el8_1","thunderbird-0:68.4.1-2.el8_1","firefox-0:68.4.1-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17017.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-17021","severity":"moderate","public_date":"2020-01-07T00:00:00Z","advisories":[],"bugzilla":"1788725","bugzilla_description":"CVE-2019-17021 Mozilla: Heap address disclosure in parent process during content process initialization on Windows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17021.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17022","severity":"moderate","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:0111","RHSA-2020:0123","RHSA-2020:0085","RHSA-2020:0120","RHSA-2020:0086","RHSA-2020:0295","RHSA-2020:0292","RHSA-2020:0127"],"bugzilla":"1788726","bugzilla_description":"CVE-2019-17022 Mozilla: CSS sanitization does not escape HTML tags","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["thunderbird-0:68.4.1-2.el6_10","firefox-0:68.4.1-1.el6_10","thunderbird-0:68.4.1-2.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.4.1-1.el8_1","thunderbird-0:68.4.1-2.el8_1","firefox-0:68.4.1-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17022.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17024","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:0111","RHSA-2020:0123","RHSA-2020:0085","RHSA-2020:0120","RHSA-2020:0086","RHSA-2020:0295","RHSA-2020:0292","RHSA-2020:0127"],"bugzilla":"1788727","bugzilla_description":"CVE-2019-17024 Mozilla: Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.4.1-2.el6_10","firefox-0:68.4.1-1.el6_10","thunderbird-0:68.4.1-2.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.4.1-1.el8_1","thunderbird-0:68.4.1-2.el8_1","firefox-0:68.4.1-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17024.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-17008","severity":"important","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2019:4205","RHSA-2019:4107","RHSA-2019:4108","RHSA-2019:4148","RHSA-2020:0295","RHSA-2020:0292","RHSA-2019:4111","RHSA-2019:4195"],"bugzilla":"1779431","bugzilla_description":"CVE-2019-17008 Mozilla: Use-after-free in worker destruction","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.3.0-2.el8_1","thunderbird-0:68.3.0-3.el6_10","firefox-0:68.3.0-1.el7_7","thunderbird-0:68.3.0-1.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.3.0-1.el6_10","firefox-0:68.3.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17008.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13722","severity":"important","public_date":"2019-12-03T00:00:00Z","advisories":[],"bugzilla":"1779432","bugzilla_description":"CVE-2019-13722 Mozilla: Stack corruption due to incorrect number of arguments in WebRTC code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628->CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13722.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-17009","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":[],"bugzilla":"1779433","bugzilla_description":"CVE-2019-17009 Mozilla: Updater temporary files accessible to unprivileged processes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17009.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17010","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2019:4205","RHSA-2019:4107","RHSA-2019:4108","RHSA-2019:4148","RHSA-2020:0295","RHSA-2020:0292","RHSA-2019:4111","RHSA-2019:4195"],"bugzilla":"1779434","bugzilla_description":"CVE-2019-17010 Mozilla: Use-after-free when performing device orientation checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.3.0-2.el8_1","thunderbird-0:68.3.0-3.el6_10","firefox-0:68.3.0-1.el7_7","thunderbird-0:68.3.0-1.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.3.0-1.el6_10","firefox-0:68.3.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17010.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17005","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2019:4205","RHSA-2019:4107","RHSA-2019:4108","RHSA-2019:4148","RHSA-2020:0295","RHSA-2020:0292","RHSA-2019:4111","RHSA-2019:4195"],"bugzilla":"1779435","bugzilla_description":"CVE-2019-17005 Mozilla: Buffer overflow in plain text serializer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.3.0-2.el8_1","thunderbird-0:68.3.0-3.el6_10","firefox-0:68.3.0-1.el7_7","thunderbird-0:68.3.0-1.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.3.0-1.el6_10","firefox-0:68.3.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17005.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17011","severity":"moderate","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2019:4205","RHSA-2019:4107","RHSA-2019:4108","RHSA-2019:4148","RHSA-2020:0295","RHSA-2020:0292","RHSA-2019:4111","RHSA-2019:4195"],"bugzilla":"1779436","bugzilla_description":"CVE-2019-17011 Mozilla: Use-after-free when retrieving a document in antitracking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.3.0-2.el8_1","thunderbird-0:68.3.0-3.el6_10","firefox-0:68.3.0-1.el7_7","thunderbird-0:68.3.0-1.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.3.0-1.el6_10","firefox-0:68.3.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17011.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-17012","severity":"important","public_date":"2019-12-03T00:00:00Z","advisories":["RHSA-2019:4205","RHSA-2019:4107","RHSA-2019:4108","RHSA-2019:4148","RHSA-2020:0295","RHSA-2020:0292","RHSA-2019:4111","RHSA-2019:4195"],"bugzilla":"1779437","bugzilla_description":"CVE-2019-17012 Mozilla: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.3.0-2.el8_1","thunderbird-0:68.3.0-3.el6_10","firefox-0:68.3.0-1.el7_7","thunderbird-0:68.3.0-1.el7_7","thunderbird-0:68.4.1-2.el8_0","firefox-0:68.4.1-1.el8_0","firefox-0:68.3.0-1.el6_10","firefox-0:68.3.0-1.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17012.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11745","severity":"important","public_date":"2019-11-21T00:00:00Z","advisories":["RHSA-2020:0243","RHSA-2019:4190","RHSA-2020:1345","RHSA-2020:1267","RHSA-2019:4114","RHSA-2020:1461","RHSA-2019:4152","RHSA-2020:0466"],"bugzilla":"1774831","bugzilla_description":"CVE-2019-11745 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["nss-0:3.44.0-8.el8_0","nss-softokn-0:3.36.0-6.el7_5","nss-softokn-0:3.36.0-6.el7_6","nss-softokn-0:3.28.3-9.el7_4","nss-0:3.44.0-7.el7_7","nss-softokn-0:3.14.3-23.el6_6","nss-0:3.44.0-9.el8_1","nss-softokn-0:3.44.0-6.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11757","severity":"important","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764438","bugzilla_description":"CVE-2019-11757 Mozilla: Use-after-free when creating index updates in IndexedDB","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11757.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11758","severity":"important","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764439","bugzilla_description":"CVE-2019-11758 Mozilla: Potentially exploitable crash due to 360 Total Security","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11758.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11759","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764440","bugzilla_description":"CVE-2019-11759 Mozilla: Stack buffer overflow in HKDF output","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11759.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11760","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764441","bugzilla_description":"CVE-2019-11760 Mozilla: Stack buffer overflow in WebRTC networking","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11760.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11761","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764442","bugzilla_description":"CVE-2019-11761 Mozilla: Unintended access to a privileged JSONView object","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-749","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11761.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-11762","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764443","bugzilla_description":"CVE-2019-11762 Mozilla: document.domain-based origin isolation has same-origin-property violation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11762.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11763","severity":"moderate","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764444","bugzilla_description":"CVE-2019-11763 Mozilla: Incorrect HTML parsing results in XSS bypass technique","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11763.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11764","severity":"critical","public_date":"2019-10-22T00:00:00Z","advisories":["RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2019:3281","RHSA-2019:3193"],"bugzilla":"1764446","bugzilla_description":"CVE-2019-11764 Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","firefox-0:68.2.0-4.el6_10","thunderbird-0:68.2.0-1.el7_7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11764.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11755","severity":"moderate","public_date":"2019-09-30T00:00:00Z","advisories":[],"bugzilla":"1762818","bugzilla_description":"CVE-2019-11755 thunderbird: spoofing a message author via a crafted S/MIME","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11755.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-11739","severity":"important","public_date":"2019-09-15T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2774","RHSA-2019:2807"],"bugzilla":"1752307","bugzilla_description":"CVE-2019-11739 Mozilla: Covert Content Attack on S/MIME encryption using a crafted multipart/alternative message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-356","affected_packages":["thunderbird-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-2.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11739.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-15903","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3193"],"bugzilla":"1752592","bugzilla_description":"CVE-2019-15903 expat: heap-based buffer over-read via crafted XML input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-125)","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","thunderbird-0:68.2.0-1.el7_7","expat-0:2.1.0-12.el7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15903.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-11740","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748652","bugzilla_description":"CVE-2019-11740 Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11742","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748653","bugzilla_description":"CVE-2019-11742 Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11742.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11743","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748654","bugzilla_description":"CVE-2019-11743 Mozilla: Cross-origin access to unload event attributes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11743.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11744","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748655","bugzilla_description":"CVE-2019-11744 Mozilla: XSS by breaking out of title and textarea elements using innerHTML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11744.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11746","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748656","bugzilla_description":"CVE-2019-11746 Mozilla: Use-after-free while manipulating video","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11746.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11752","severity":"important","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2019:2773","RHSA-2019:2663","RHSA-2019:2694","RHSA-2019:2774","RHSA-2019:2807","RHSA-2019:2729"],"bugzilla":"1748657","bugzilla_description":"CVE-2019-11752 Mozilla: Use-after-free while extracting a key value in IndexedDB","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:60.9.0-1.el6_10","firefox-0:60.9.0-1.el7_7","thunderbird-0:60.9.0-1.el7_7","firefox-0:60.9.0-1.el6_10","thunderbird-0:60.9.0-2.el8_0","firefox-0:68.1.0-1.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-9382","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2018:3140","RHSA-2019:4254"],"bugzilla":"1763609","bugzilla_description":"CVE-2015-9382 freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["freetype-0:2.8-12.el7","freetype-0:2.3.11-19.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9382.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2015-9383","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1763613","bugzilla_description":"CVE-2015-9383 freetype: a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c may lead to a DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9383.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11709","severity":"critical","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728430","bugzilla_description":"CVE-2019-11709 Mozilla: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11709.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11711","severity":"important","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728431","bugzilla_description":"CVE-2019-11711 Mozilla: Script injection within domain through inner window reuse","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11711.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11712","severity":"important","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728432","bugzilla_description":"CVE-2019-11712 Mozilla: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11712.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11713","severity":"important","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728433","bugzilla_description":"CVE-2019-11713 Mozilla: Use-after-free with HTTP/2 cached stream","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11713.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11715","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728434","bugzilla_description":"CVE-2019-11715 Mozilla: HTML parsing error can contribute to content XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11715.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11717","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728435","bugzilla_description":"CVE-2019-11717 Mozilla: Caret character improperly escaped in origins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11717.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11730","severity":"moderate","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728438","bugzilla_description":"CVE-2019-11730 Mozilla: Same-origin policy treats all files in a directory as having the same-origin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11730.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-9811","severity":"important","public_date":"2019-07-10T00:00:00Z","advisories":["RHSA-2019:1765","RHSA-2019:1775","RHSA-2019:1764","RHSA-2019:1763","RHSA-2019:1777","RHSA-2019:1799"],"bugzilla":"1728439","bugzilla_description":"CVE-2019-9811 Mozilla: Sandbox escape via installation of malicious language pack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-807","affected_packages":["firefox-0:60.8.0-1.el7_6","thunderbird-0:60.8.0-1.el8_0","thunderbird-0:60.8.0-1.el6_10","thunderbird-0:60.8.0-1.el7_6","firefox-0:60.8.0-1.el8_0","firefox-0:60.8.0-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-20843","severity":"moderate","public_date":"2019-06-24T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1723723","bugzilla_description":"CVE-2018-20843 expat: large number of colons in input makes parser consume high amount of resources, leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["expat-0:2.1.0-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11708","severity":"important","public_date":"2019-06-20T00:00:00Z","advisories":["RHSA-2019:1696","RHSA-2019:1604","RHSA-2019:1626","RHSA-2019:1603","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1722673","bugzilla_description":"CVE-2019-11708 Mozilla: Sandbox escape using Prompt:Open","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":["thunderbird-0:60.7.2-2.el7_6","firefox-0:60.7.2-1.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10","firefox-0:60.7.2-1.el6_10","firefox-0:60.7.2-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11707","severity":"critical","public_date":"2019-06-19T00:00:00Z","advisories":["RHSA-2019:1696","RHSA-2019:1604","RHSA-2019:1626","RHSA-2019:1603","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1721789","bugzilla_description":"CVE-2019-11707 Mozilla: Type confusion in Array.pop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:60.7.2-2.el7_6","firefox-0:60.7.2-1.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10","firefox-0:60.7.2-1.el6_10","firefox-0:60.7.2-3.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11707.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11703","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720001","bugzilla_description":"CVE-2019-11703 libical: Heap buffer over read in icalparser.c parser_get_next_char","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11703.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-11704","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720006","bugzilla_description":"CVE-2019-11704 libical: Heap buffer overflow in icalmemory_strdup_and_dequote function in icalvalue.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11705","severity":"important","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720008","bugzilla_description":"CVE-2019-11705 libical: Stack buffer overflow in icalrecur_add_bydayrules in icalrecur.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-11706","severity":"moderate","public_date":"2019-06-13T00:00:00Z","advisories":["RHSA-2019:1626","RHSA-2019:1624","RHSA-2019:1623"],"bugzilla":"1720011","bugzilla_description":"CVE-2019-11706 libical: Type confusion in icaltimezone_get_vtimezone_properties function in icalproperty.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["thunderbird-0:60.7.2-2.el7_6","thunderbird-0:60.7.2-2.el8_0","thunderbird-0:60.7.2-2.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11706.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2019-11702","severity":"moderate","public_date":"2019-06-11T00:00:00Z","advisories":[],"bugzilla":"1721805","bugzilla_description":"CVE-2019-11702 Mozilla: IE protocols can be used to open known local files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11702.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-12450","severity":"moderate","public_date":"2019-05-23T00:00:00Z","advisories":["RHSA-2019:3530","RHSA-2020:3978","RHBA-2019:3303"],"bugzilla":"1719141","bugzilla_description":"CVE-2019-12450 glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["glib2-0:2.56.1-7.el7","redhat-coreos-42.81.20191107.0","glib2-0:2.56.4-7.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.6"},{"CVE":"CVE-2019-11691","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712617","bugzilla_description":"CVE-2019-11691 Mozilla: Use-after-free in XMLHttpRequest","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11691.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11692","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712618","bugzilla_description":"CVE-2019-11692 Mozilla: Use-after-free removing listeners in the event listener manager","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11692.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11693","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712619","bugzilla_description":"CVE-2019-11693 Mozilla: Buffer overflow in WebGL bufferdata on Linux","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11693.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11694","severity":"moderate","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1712620","bugzilla_description":"CVE-2019-11694 Mozilla: Uninitialized memory leakage in Windows sandbox","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11694.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-11698","severity":"moderate","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712621","bugzilla_description":"CVE-2019-11698 Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11698.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-9797","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712622","bugzilla_description":"CVE-2019-9797 Mozilla: Cross-origin theft of images with createImageBitmap","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9800","severity":"critical","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712623","bugzilla_description":"CVE-2019-9800 Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9815","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1712624","bugzilla_description":"CVE-2019-9815 Mozilla: Disable hyperthreading on content JavaScript threads on macOS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9815.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9816","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267"],"bugzilla":"1712625","bugzilla_description":"CVE-2019-9816 Mozilla: Type confusion with object groups and UnboxedObjects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9817","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712626","bugzilla_description":"CVE-2019-9817 Mozilla: Stealing of cross-domain images using canvas","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9817.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9818","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":[],"bugzilla":"1712627","bugzilla_description":"CVE-2019-9818 Mozilla: Use-after-free in crash generation server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9819","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712628","bugzilla_description":"CVE-2019-9819 Mozilla: Compartment mismatch with fetch API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-567","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9820","severity":"important","public_date":"2019-05-22T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1712629","bugzilla_description":"CVE-2019-9820 Mozilla: Use-after-free of ChromeEventHandler by DocShell","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9820.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9810","severity":"critical","public_date":"2019-03-22T00:00:00Z","advisories":["RHSA-2019:0671","RHSA-2019:0672","RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966"],"bugzilla":"1692181","bugzilla_description":"CVE-2019-9810 Mozilla: IonMonkey MArraySlice has incorrect alias information","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["firefox-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el6_10","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9813","severity":"critical","public_date":"2019-03-22T00:00:00Z","advisories":["RHSA-2019:0671","RHSA-2019:0672","RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966"],"bugzilla":"1692182","bugzilla_description":"CVE-2019-9813 Mozilla: Ionmonkey type confusion with __proto__ mutations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["firefox-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el6_10","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18506","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690673","bugzilla_description":"CVE-2018-18506 Mozilla: Proxy Auto-Configuration file can define localhost access to be proxied","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-9788","severity":"critical","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690674","bugzilla_description":"CVE-2019-9788 Mozilla: Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9788.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9790","severity":"critical","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690675","bugzilla_description":"CVE-2019-9790 Mozilla: Use-after-free when removing in-use DOM elements","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9790.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9791","severity":"critical","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690676","bugzilla_description":"CVE-2019-9791 Mozilla: Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9791.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9792","severity":"critical","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690677","bugzilla_description":"CVE-2019-9792 Mozilla: IonMonkey leaks JS_OPTIMIZED_OUT magic value to script","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-787","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9792.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-9793","severity":"important","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690678","bugzilla_description":"CVE-2019-9793 Mozilla: Improper bounds checks when Spectre mitigations are disabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9793.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9794","severity":"important","public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1690679","bugzilla_description":"CVE-2019-9794 Mozilla: Command line arguments not discarded during execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9794.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9795","severity":"important","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690680","bugzilla_description":"CVE-2019-9795 Mozilla: Type-confusion in IonMonkey JIT compiler","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843->CWE-787","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9795.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9796","severity":"important","public_date":"2019-03-20T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681","RHSA-2019:0966","RHSA-2019:0622","RHSA-2019:0623"],"bugzilla":"1690681","bugzilla_description":"CVE-2019-9796 Mozilla: Use-after-free with SMIL animation controller","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.6.0-3.el7_6","thunderbird-0:60.6.1-1.el8","firefox-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","firefox-0:60.6.0-3.el6_10","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9796.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9801","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":[],"bugzilla":"1690682","bugzilla_description":"CVE-2019-9801 Mozilla: Windows programs that are not 'URL Handlers' are exposed to web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9801.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-5798","severity":"moderate","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:0708","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1688200","bugzilla_description":"CVE-2019-5798 chromium-browser: Out of bounds read in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","chromium-browser-0:73.0.3683.75-1.el6_10","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5798.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-18509","severity":"moderate","public_date":"2019-02-14T00:00:00Z","advisories":["RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0681"],"bugzilla":"1677613","bugzilla_description":"CVE-2018-18509 thunderbird: flaw in verification of S/MIME signature resulting in signature spoofing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451->CWE-347","affected_packages":["thunderbird-0:60.6.1-1.el8","thunderbird-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-5785","severity":"important","public_date":"2019-02-12T00:00:00Z","advisories":["RHSA-2019:0374","RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0373","RHSA-2019:0681"],"bugzilla":"1676991","bugzilla_description":"CVE-2019-5785 mozilla: Integer overflow in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["thunderbird-0:60.6.1-1.el8","firefox-0:60.5.1-1.el7_6","firefox-0:60.5.1-1.el6_10","thunderbird-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-18511","severity":"moderate","public_date":"2019-02-12T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:1309","RHSA-2019:1308"],"bugzilla":"1676997","bugzilla_description":"CVE-2018-18511 mozilla: Cross-origin theft of images with ImageBitmapRenderingContext","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","thunderbird-0:60.7.0-1.el6_10","firefox-0:60.7.0-1.el7_6","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-18500","severity":"critical","public_date":"2019-01-29T00:00:00Z","advisories":["RHSA-2019:0269","RHSA-2019:0218","RHSA-2019:0219","RHSA-2019:0270"],"bugzilla":"1670631","bugzilla_description":"CVE-2018-18500 Mozilla: Use-after-free parsing HTML5 stream","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.5.0-2.el7","firefox-0:60.5.0-2.el6","thunderbird-0:60.5.0-1.el6_10","thunderbird-0:60.5.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18500.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18501","severity":"critical","public_date":"2019-01-29T00:00:00Z","advisories":["RHSA-2019:0269","RHSA-2019:0218","RHSA-2019:0219","RHSA-2019:0270"],"bugzilla":"1670632","bugzilla_description":"CVE-2018-18501 Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.5.0-2.el7","firefox-0:60.5.0-2.el6","thunderbird-0:60.5.0-1.el6_10","thunderbird-0:60.5.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18501.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18505","severity":"important","public_date":"2019-01-29T00:00:00Z","advisories":["RHSA-2019:0269","RHSA-2019:0218","RHSA-2019:0219","RHSA-2019:0270"],"bugzilla":"1670633","bugzilla_description":"CVE-2018-18505 Mozilla: Privilege escalation through IPC channel messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["firefox-0:60.5.0-2.el7","firefox-0:60.5.0-2.el6","thunderbird-0:60.5.0-1.el6_10","thunderbird-0:60.5.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18505.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9633","severity":"moderate","public_date":"2019-01-29T00:00:00Z","advisories":[],"bugzilla":"1687805","bugzilla_description":"CVE-2019-9633 glib: g_socket_client_connected_callback in gio/gsocketclient.c allows to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9633.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2019-7317","severity":"low","public_date":"2019-01-25T00:00:00Z","advisories":["RHSA-2019:1310","RHSA-2019:1265","RHSA-2019:2585","RHSA-2019:2495","RHSA-2019:1269","RHSA-2019:1267","RHSA-2019:2737","RHSA-2019:2494","RHSA-2019:2592","RHSA-2019:1309","RHSA-2019:1308","RHSA-2019:2590"],"bugzilla":"1672409","bugzilla_description":"CVE-2019-7317 libpng: use-after-free in png_image_free in png.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["firefox-0:60.7.0-1.el8_0","firefox-0:60.7.0-1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10","java-1.8.0-ibm-1:1.8.0.5.40-3.el8_0","thunderbird-0:60.7.0-1.el6_10","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10","firefox-0:60.7.0-1.el7_6","java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7","java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7","thunderbird-0:60.7.0-1.el8_0","thunderbird-0:60.7.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-6461","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1669629","bugzilla_description":"CVE-2019-6461 cairo: assertion problem in _cairo_arc_in_direction in cairo-arc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6461.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2019-6462","severity":"low","public_date":"2019-01-11T00:00:00Z","advisories":[],"bugzilla":"1671399","bugzilla_description":"CVE-2019-6462 cairo: infinite loop in the function _arc_error_normalized in the file cairo-arc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6462.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2018-12405","severity":"critical","public_date":"2018-12-12T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2019:0160"],"bugzilla":"1658397","bugzilla_description":"CVE-2018-12405 Mozilla: Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18492","severity":"important","public_date":"2018-12-11T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2019:0160"],"bugzilla":"1658399","bugzilla_description":"CVE-2018-18492 Mozilla: Use-after-free with select element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18492.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-18493","severity":"important","public_date":"2018-12-11T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2019:0160"],"bugzilla":"1658400","bugzilla_description":"CVE-2018-18493 Mozilla: Buffer overflow in accelerated 2D canvas with Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18493.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-18494","severity":"important","public_date":"2018-12-11T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2019:0160"],"bugzilla":"1658401","bugzilla_description":"CVE-2018-18494 Mozilla: Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18494.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-18498","severity":"important","public_date":"2018-12-11T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2019:0160"],"bugzilla":"1658402","bugzilla_description":"CVE-2018-18498 Mozilla: Integer overflow when calculating buffer sizes for images","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18498.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18335","severity":"important","public_date":"2018-12-04T00:00:00Z","advisories":["RHSA-2018:3803"],"bugzilla":"1656549","bugzilla_description":"CVE-2018-18335 chromium-browser: Heap buffer overflow in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["chromium-browser-0:71.0.3578.80-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18335.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18356","severity":"important","public_date":"2018-12-04T00:00:00Z","advisories":["RHSA-2019:0374","RHSA-2019:1144","RHSA-2019:0680","RHSA-2019:0373","RHSA-2019:0681","RHSA-2018:3803"],"bugzilla":"1656570","bugzilla_description":"CVE-2018-18356 chromium-browser, mozilla: Use after free in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:60.6.1-1.el8","firefox-0:60.5.1-1.el7_6","firefox-0:60.5.1-1.el6_10","chromium-browser-0:71.0.3578.80-1.el6_10","thunderbird-0:60.6.1-1.el7_6","thunderbird-0:60.6.1-1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18356.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12389","severity":"low","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005","RHSA-2018:3532","RHSA-2018:3531"],"bugzilla":"1642179","bugzilla_description":"CVE-2018-12389 Mozilla: Memory safety bugs fixed in Firefox ESR 60.3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:60.3.0-1.el6","firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6","thunderbird-0:60.3.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12389.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12390","severity":"critical","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005","RHSA-2018:3532","RHSA-2018:3531"],"bugzilla":"1642180","bugzilla_description":"CVE-2018-12390 Mozilla: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:60.3.0-1.el6","firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6","thunderbird-0:60.3.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12390.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12391","severity":"important","public_date":"2018-10-23T00:00:00Z","advisories":[],"bugzilla":"1642181","bugzilla_description":"CVE-2018-12391 Mozilla: HTTP Live Stream audio data is accessible cross-origin","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12391.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12392","severity":"important","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005","RHSA-2018:3532","RHSA-2018:3531"],"bugzilla":"1642182","bugzilla_description":"CVE-2018-12392 Mozilla: Crash with nested event loops","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-364","affected_packages":["thunderbird-0:60.3.0-1.el6","firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6","thunderbird-0:60.3.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12392.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12393","severity":"important","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005","RHSA-2018:3532","RHSA-2018:3531"],"bugzilla":"1642183","bugzilla_description":"CVE-2018-12393 Mozilla: Integer overflow during Unicode conversion while loading JavaScript","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["thunderbird-0:60.3.0-1.el6","firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6","thunderbird-0:60.3.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12393.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12395","severity":"moderate","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005"],"bugzilla":"1642185","bugzilla_description":"CVE-2018-12395 Mozilla: WebExtension bypass of domain restrictions through header rewriting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12395.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12396","severity":"moderate","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005"],"bugzilla":"1642186","bugzilla_description":"CVE-2018-12396 Mozilla: WebExtension content scripts can execute in disallowed contexts","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12396.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12397","severity":"moderate","public_date":"2018-10-23T00:00:00Z","advisories":["RHSA-2018:3006","RHSA-2018:3005"],"bugzilla":"1642187","bugzilla_description":"CVE-2018-12397 Mozilla: WebExtension local file permission check bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["firefox-0:60.3.0-1.el7_5","firefox-0:60.3.0-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12397.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-17466","severity":"important","public_date":"2018-10-16T00:00:00Z","advisories":["RHSA-2019:0159","RHSA-2018:3833","RHSA-2018:3831","RHSA-2018:3004","RHSA-2019:0160"],"bugzilla":"1640102","bugzilla_description":"CVE-2018-17466 chromium-browser, firefox: Memory corruption in Angle","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:60.4.0-1.el6","firefox-0:60.4.0-1.el7","thunderbird-0:60.4.0-1.el6","chromium-browser-0:70.0.3538.67-1.el6_10","thunderbird-0:60.4.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17466.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-18064","severity":"moderate","public_date":"2018-10-08T00:00:00Z","advisories":[],"bugzilla":"1637792","bugzilla_description":"CVE-2018-18064 cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-12386","severity":"critical","public_date":"2018-10-02T00:00:00Z","advisories":["RHSA-2018:2884","RHSA-2018:2881"],"bugzilla":"1635451","bugzilla_description":"CVE-2018-12386 Mozilla: type confusion in JavaScript","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843->(CWE-125|CWE-787)","affected_packages":["firefox-0:60.2.2-1.el7_5","firefox-0:60.2.2-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12386.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12387","severity":"critical","public_date":"2018-10-02T00:00:00Z","advisories":["RHSA-2018:2884","RHSA-2018:2881"],"bugzilla":"1635452","bugzilla_description":"CVE-2018-12387 Mozilla: stack out-of-bounds read in Array.prototype.push","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:60.2.2-1.el7_5","firefox-0:60.2.2-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12385","severity":"moderate","public_date":"2018-09-21T00:00:00Z","advisories":["RHSA-2018:2835","RHSA-2018:2834","RHSA-2018:3403","RHSA-2018:3458"],"bugzilla":"1632062","bugzilla_description":"CVE-2018-12385 Mozilla: Crash in TransportSecurityInfo due to cached data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-119","affected_packages":["firefox-0:60.2.1-1.el6","firefox-0:60.2.1-1.el7_5","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12385.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12375","severity":"important","public_date":"2018-09-05T00:00:00Z","advisories":[],"bugzilla":"1625524","bugzilla_description":"CVE-2018-12375 Mozilla: Memory safety bugs fixed in Firefox 62","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12375.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12376","severity":"critical","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1625525","bugzilla_description":"CVE-2018-12376 Mozilla: Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12377","severity":"important","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1625526","bugzilla_description":"CVE-2018-12377 Mozilla: Use-after-free in driver timers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12377.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12378","severity":"important","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1625527","bugzilla_description":"CVE-2018-12378 Mozilla: Use-after-free in IndexedDB","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12378.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12379","severity":"moderate","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1625528","bugzilla_description":"CVE-2018-12379 Mozilla: Out-of-bounds write with malicious MAR file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12379.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12381","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":[],"bugzilla":"1625529","bugzilla_description":"CVE-2018-12381 Mozilla: Dragging and dropping Outlook email message results in page navigation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12381.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-12382","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":[],"bugzilla":"1625530","bugzilla_description":"CVE-2018-12382 Mozilla: Addressbar spoofing with javascript URI on Firefox for Android","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12382.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-12383","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:2835","RHSA-2018:2834","RHSA-2018:3403","RHSA-2018:3458"],"bugzilla":"1625531","bugzilla_description":"CVE-2018-12383 Mozilla: Setting a master password post-Firefox 58 does not delete unencrypted previously stored passwords","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":["firefox-0:60.2.1-1.el6","firefox-0:60.2.1-1.el7_5","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12383.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-18499","severity":"important","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1849971","bugzilla_description":"CVE-2018-18499 Mozilla: Same-origin policy violation using meta refresh and performance.getEntries to steal cross-origin URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18499.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16428","severity":"low","public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1626145","bugzilla_description":"CVE-2018-16428 glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16428.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2018-16429","severity":"low","public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1626148","bugzilla_description":"CVE-2018-16429 glib2: Out-of-bounds read in g_markup_parse_context_parse() in gmarkup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16429.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2018-12372","severity":"important","public_date":"2018-07-04T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2252"],"bugzilla":"1598538","bugzilla_description":"CVE-2018-12372 thunderbird: S/MIME and PGP decryption oracles can be built with HTML emails","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-201","affected_packages":["thunderbird-0:52.9.1-1.el7_5","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12372.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-12374","severity":"moderate","public_date":"2018-07-04T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2252"],"bugzilla":"1598543","bugzilla_description":"CVE-2018-12374 thunderbird: Using form to exfiltrate encrypted mail part by pressing enter in form field","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-356","affected_packages":["thunderbird-0:52.9.1-1.el7_5","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12374.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-12358","severity":"important","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595023","bugzilla_description":"CVE-2018-12358 Mozilla: Same-origin bypass using service worker and redirection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12359","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595024","bugzilla_description":"CVE-2018-12359 Mozilla: Buffer overflow using computed size of canvas element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12359.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12360","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595025","bugzilla_description":"CVE-2018-12360 Mozilla: Use-after-free using focus()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12360.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12361","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595026","bugzilla_description":"CVE-2018-12361 Mozilla: Integer overflow in SwizzleData","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12361.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12362","severity":"important","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595027","bugzilla_description":"CVE-2018-12362 Mozilla: Integer overflow in SSSE3 scaler","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12363","severity":"important","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595028","bugzilla_description":"CVE-2018-12363 Mozilla: Use-after-free when appending DOM nodes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12363.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12364","severity":"important","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595029","bugzilla_description":"CVE-2018-12364 Mozilla: CSRF attacks through 307 redirects and NPAPI plugins","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12364.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-12365","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595030","bugzilla_description":"CVE-2018-12365 Mozilla: Compromised IPC child process can list local filenames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12365.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12366","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595031","bugzilla_description":"CVE-2018-12366 Mozilla: Invalid data handling during QCMS transformations","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12366.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12367","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595032","bugzilla_description":"CVE-2018-12367 Mozilla: Timing attack mitigation of PerformanceNavigationTiming","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12368","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595033","bugzilla_description":"CVE-2018-12368 Mozilla: No warning when opening executable SettingContent-ms files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12368.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12369","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595034","bugzilla_description":"CVE-2018-12369 Mozilla: WebExtension security permission checks bypassed by embedded experiments","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12369.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-12370","severity":"low","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595035","bugzilla_description":"CVE-2018-12370 Mozilla: SameSite cookie protections bypassed when exiting Reader View","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12370.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-12371","severity":"moderate","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595036","bugzilla_description":"CVE-2018-12371 Mozilla: Integer overflow in Skia library during edge builder allocation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12371.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5156","severity":"important","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2113","RHSA-2018:2112"],"bugzilla":"1595037","bugzilla_description":"CVE-2018-5156 Mozilla: Media recorder segmentation fault when track type is changed during capture","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5156.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5186","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595038","bugzilla_description":"CVE-2018-5186 Mozilla: Memory safety bugs fixed in Firefox 61","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5187","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":[],"bugzilla":"1595039","bugzilla_description":"CVE-2018-5187 Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5187.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5188","severity":"critical","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2113","RHSA-2018:2112","RHSA-2018:2252"],"bugzilla":"1595040","bugzilla_description":"CVE-2018-5188 Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.9.1-1.el7_5","firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5188.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-12373","severity":"important","public_date":"2018-05-27T00:00:00Z","advisories":["RHSA-2018:2251","RHSA-2018:2252"],"bugzilla":"1598529","bugzilla_description":"CVE-2018-12373 thunderbird: S/MIME plaintext can be leaked through HTML reply/forward","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":["thunderbird-0:52.9.1-1.el7_5","thunderbird-0:52.9.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12373.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-5184","severity":"important","public_date":"2018-05-18T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726"],"bugzilla":"1580236","bugzilla_description":"CVE-2018-5184 Mozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5184.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-5161","severity":"moderate","public_date":"2018-05-18T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726"],"bugzilla":"1580237","bugzilla_description":"CVE-2018-5161 Mozilla: Hang via malformed headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-5162","severity":"moderate","public_date":"2018-05-18T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726"],"bugzilla":"1580239","bugzilla_description":"CVE-2018-5162 Mozilla: Encrypted mail leaks plaintext through src attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5162.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-5170","severity":"moderate","public_date":"2018-05-18T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726"],"bugzilla":"1580240","bugzilla_description":"CVE-2018-5170 Mozilla: Filename spoofing for external attachments","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5170.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-5185","severity":"low","public_date":"2018-05-18T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726"],"bugzilla":"1580241","bugzilla_description":"CVE-2018-5185 Mozilla: Leaking plaintext through HTML forms","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5185.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-17688","severity":"moderate","public_date":"2018-05-14T00:00:00Z","advisories":[],"bugzilla":"1577906","bugzilla_description":"CVE-2017-17688 OpenPGP: CFB gadget attacks allows to exfiltrate plaintext out of encrypted emails","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17688.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-17689","severity":"moderate","public_date":"2018-05-14T00:00:00Z","advisories":[],"bugzilla":"1577909","bugzilla_description":"CVE-2017-17689 S/MIME: CBC gadget attacks allows to exfiltrate plaintext out of encrypted emails","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17689.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-5150","severity":"critical","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576250","bugzilla_description":"CVE-2018-5150 Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5150.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5151","severity":"critical","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576251","bugzilla_description":"CVE-2018-5151 Mozilla: Memory safety bugs fixed in Firefox 60","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5151.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5152","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576252","bugzilla_description":"CVE-2018-5152 Mozilla: WebExtensions information leak through webRequest API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5152.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5153","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576253","bugzilla_description":"CVE-2018-5153 Mozilla: Out-of-bounds read in mixed content websocket messages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5153.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5154","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576255","bugzilla_description":"CVE-2018-5154 Mozilla: Use-after-free with SVG animations and clip paths","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5154.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5155","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576257","bugzilla_description":"CVE-2018-5155 Mozilla: Use-after-free with SVG animations and text paths","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5155.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5157","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576258","bugzilla_description":"CVE-2018-5157 Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5157.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5158","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576259","bugzilla_description":"CVE-2018-5158 Mozilla: Malicious PDF can inject JavaScript into PDF Viewer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-95","affected_packages":["firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5158.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5159","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576260","bugzilla_description":"CVE-2018-5159 Mozilla: Integer overflow and out-of-bounds write in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5160","severity":"important","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576261","bugzilla_description":"CVE-2018-5160 Mozilla: Uninitialized memory use by WebRTC encoder","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5163","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576262","bugzilla_description":"CVE-2018-5163 Mozilla: Replacing cached data in JavaScript Start-up Bytecode Cache","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5163.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5164","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576263","bugzilla_description":"CVE-2018-5164 Mozilla: CSP not applied to all multipart content sent with multipart/x-mixed-replace","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5165","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576266","bugzilla_description":"CVE-2018-5165 Mozilla: Checkbox for enabling Flash protected mode is inverted in 32-bit Firefox","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5165.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-5166","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576267","bugzilla_description":"CVE-2018-5166 Mozilla: WebExtension host permission bypass through filterReponseData","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5166.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5167","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576268","bugzilla_description":"CVE-2018-5167 Mozilla: Improper linkification of chrome: and javascript: content in web console and JavaScript debugger","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5167.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5168","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576269","bugzilla_description":"CVE-2018-5168 Mozilla: Lightweight themes can be installed without user interaction","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5168.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5169","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576270","bugzilla_description":"CVE-2018-5169 Mozilla: Dragging and dropping link text onto home button can set home page to include chrome pages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5169.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5172","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576271","bugzilla_description":"CVE-2018-5172 Mozilla: Pasted script from clipboard can run in the Live Bookmarks page or PDF viewer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5172.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5173","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576272","bugzilla_description":"CVE-2018-5173 Mozilla: File name spoofing of Downloads panel with Unicode characters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5173.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5174","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576274","bugzilla_description":"CVE-2018-5174 Mozilla: Windows Defender SmartScreen UI runs with less secure behavior for downloaded files in Windows 10 April 2018 Update","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5174.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5175","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576275","bugzilla_description":"CVE-2018-5175 Mozilla: Universal CSP bypass on sites using strict-dynamic in their policies","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5175.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5176","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576276","bugzilla_description":"CVE-2018-5176 Mozilla: JSON Viewer script injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5177","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576277","bugzilla_description":"CVE-2018-5177 Mozilla: Buffer overflow in XSLT during number formatting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5177.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5178","severity":"moderate","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576278","bugzilla_description":"CVE-2018-5178 Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5178.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5180","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576279","bugzilla_description":"CVE-2018-5180 Mozilla: heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5181","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576280","bugzilla_description":"CVE-2018-5181 Mozilla: Local file can be displayed in noopener tab through drag and drop of hyperlink","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-5182","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":[],"bugzilla":"1576281","bugzilla_description":"CVE-2018-5182 Mozilla: Local file can be displayed from hyperlink dragged and dropped on addressbar","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5182.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-5183","severity":"critical","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:1725","RHSA-2018:1726","RHSA-2018:1415","RHSA-2018:1414"],"bugzilla":"1576283","bugzilla_description":"CVE-2018-5183 Mozilla: Backport critical security fixes in Skia","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.8.0-2.el6_9","thunderbird-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el7_5","firefox-0:52.8.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5183.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5146","severity":"critical","public_date":"2018-03-16T00:00:00Z","advisories":["RHSA-2018:0649","RHSA-2018:0647","RHSA-2018:0549","RHSA-2018:0648","RHSA-2018:1058"],"bugzilla":"1557221","bugzilla_description":"CVE-2018-5146 Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libvorbis-1:1.2.3-5.el6_9.1","libvorbis-1:1.3.3-8.el7.1","thunderbird-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el6_9","firefox-0:52.7.2-1.el6_9","firefox-0:52.7.2-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5146.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5125","severity":"critical","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0647","RHSA-2018:0527","RHSA-2018:0648"],"bugzilla":"1555127","bugzilla_description":"CVE-2018-5125 Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9","thunderbird-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5125.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5127","severity":"important","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0647","RHSA-2018:0527","RHSA-2018:0648"],"bugzilla":"1555128","bugzilla_description":"CVE-2018-5127 Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9","thunderbird-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5127.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5129","severity":"important","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0647","RHSA-2018:0527","RHSA-2018:0648"],"bugzilla":"1555129","bugzilla_description":"CVE-2018-5129 Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["firefox-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9","thunderbird-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5129.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5130","severity":"important","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0527"],"bugzilla":"1555130","bugzilla_description":"CVE-2018-5130 Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5130.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5131","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0527"],"bugzilla":"1555131","bugzilla_description":"CVE-2018-5131 Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":["firefox-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5131.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5144","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0647","RHSA-2018:0527","RHSA-2018:0648"],"bugzilla":"1555132","bugzilla_description":"CVE-2018-5144 Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["firefox-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9","thunderbird-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5144.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-5145","severity":"critical","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:0526","RHSA-2018:0647","RHSA-2018:0527","RHSA-2018:0648"],"bugzilla":"1555133","bugzilla_description":"CVE-2018-5145 Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.7.0-1.el7_4","thunderbird-0:52.7.0-1.el7_4","firefox-0:52.7.0-1.el6_9","thunderbird-0:52.7.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5145.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-7999","severity":"low","public_date":"2018-03-05T00:00:00Z","advisories":[],"bugzilla":"1554380","bugzilla_description":"CVE-2018-7999 graphite2: NULL pointer dereference in Segment.cpp in libgraphite2","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7999.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-5089","severity":"critical","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537417","bugzilla_description":"CVE-2018-5089 Mozilla: Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6 (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5089.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5091","severity":"critical","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122"],"bugzilla":"1537814","bugzilla_description":"CVE-2018-5091 Mozilla: Use-after-free with DTMF timers (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5091.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-5095","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537817","bugzilla_description":"CVE-2018-5095 Mozilla: Integer overflow in Skia library during edge builder allocation (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5095.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5096","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537818","bugzilla_description":"CVE-2018-5096 Mozilla: Use-after-free while editing form elements (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5096.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5097","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537819","bugzilla_description":"CVE-2018-5097 Mozilla: Use-after-free when source document is manipulated during XSLT (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5097.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5098","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537820","bugzilla_description":"CVE-2018-5098 Mozilla: Use-after-free while manipulating form input elements (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5098.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5099","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537821","bugzilla_description":"CVE-2018-5099 Mozilla: Use-after-free with widget listener (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5099.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5102","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537822","bugzilla_description":"CVE-2018-5102 Mozilla: Use-after-free in HTML media elements (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5102.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5103","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537823","bugzilla_description":"CVE-2018-5103 Mozilla: Use-after-free during mouse event handling (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5103.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5104","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537824","bugzilla_description":"CVE-2018-5104 Mozilla: Use-after-free during font face manipulation (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5104.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-5117","severity":"moderate","public_date":"2018-01-23T00:00:00Z","advisories":["RHSA-2018:0122","RHSA-2018:0262"],"bugzilla":"1537825","bugzilla_description":"CVE-2018-5117 Mozilla: URL spoofing with right-to-left text aligned left-to-right (MFSA 2018-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451","affected_packages":["firefox-0:52.6.0-1.el7_4","firefox-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el6_9","thunderbird-0:52.6.0-1.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5117.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7846","severity":"important","public_date":"2017-12-22T00:00:00Z","advisories":["RHSA-2018:0061"],"bugzilla":"1530187","bugzilla_description":"CVE-2017-7846 Mozilla: JavaScript Execution via RSS in mailbox:// origin","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.5.2-1.el7_4","thunderbird-0:52.5.2-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7847","severity":"moderate","public_date":"2017-12-22T00:00:00Z","advisories":["RHSA-2018:0061"],"bugzilla":"1530190","bugzilla_description":"CVE-2017-7847 Mozilla: Local path string can be leaked from RSS feed","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.5.2-1.el7_4","thunderbird-0:52.5.2-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-7848","severity":"moderate","public_date":"2017-12-22T00:00:00Z","advisories":["RHSA-2018:0061"],"bugzilla":"1530192","bugzilla_description":"CVE-2017-7848 Mozilla: RSS Feed vulnerable to new line Injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.5.2-1.el7_4","thunderbird-0:52.5.2-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7848.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-7826","severity":"critical","public_date":"2017-11-15T00:00:00Z","advisories":["RHSA-2017:3372","RHSA-2017:3247"],"bugzilla":"1513308","bugzilla_description":"CVE-2017-7826 Mozilla: Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5 (MFSA 2017-25)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["thunderbird-0:52.5.0-1.el6_9","firefox-0:52.5.0-1.el7_4","thunderbird-0:52.5.0-1.el7_4","firefox-0:52.5.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7826.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7828","severity":"critical","public_date":"2017-11-15T00:00:00Z","advisories":["RHSA-2017:3372","RHSA-2017:3247"],"bugzilla":"1513310","bugzilla_description":"CVE-2017-7828 Mozilla: Use-after-free of PressShell while restyling layout (MFSA 2017-25)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.5.0-1.el6_9","firefox-0:52.5.0-1.el7_4","thunderbird-0:52.5.0-1.el7_4","firefox-0:52.5.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7828.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7830","severity":"important","public_date":"2017-11-15T00:00:00Z","advisories":["RHSA-2017:3372","RHSA-2017:3247"],"bugzilla":"1513311","bugzilla_description":"CVE-2017-7830 Mozilla: Cross-origin URL information leak through Resource Timing API (MFSA 2017-25)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["thunderbird-0:52.5.0-1.el6_9","firefox-0:52.5.0-1.el7_4","thunderbird-0:52.5.0-1.el7_4","firefox-0:52.5.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7830.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16541","severity":"moderate","public_date":"2017-11-03T00:00:00Z","advisories":["RHSA-2018:3403","RHSA-2018:3458","RHSA-2018:2692","RHSA-2018:2693"],"bugzilla":"1510816","bugzilla_description":"CVE-2017-16541 Mozilla: Proxy bypass using automount and autofs","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:60.2.0-1.el6","thunderbird-0:60.2.1-4.el7_5","thunderbird-0:60.2.1-5.el6","firefox-0:60.2.0-1.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16541.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-16231","severity":null,"public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1700392","bugzilla_description":"CVE-2017-16231 pcre: self-recursive call in match() in pcre_exec.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7793","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496649","bugzilla_description":"CVE-2017-7793 Mozilla: Use-after-free with Fetch API (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7793.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7810","severity":"critical","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496651","bugzilla_description":"CVE-2017-7810 Mozilla: Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4 (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-120|CWE-121|CWE-122)","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7810.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7814","severity":"moderate","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496652","bugzilla_description":"CVE-2017-7814 Mozilla: Blob and data URLs bypass phishing and malware protection warnings (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-494","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7818","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496653","bugzilla_description":"CVE-2017-7818 Mozilla: Use-after-free during ARIA array manipulation (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7818.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7819","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496654","bugzilla_description":"CVE-2017-7819 Mozilla: Use-after-free while resizing images in design mode (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7819.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7823","severity":"moderate","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496655","bugzilla_description":"CVE-2017-7823 Mozilla: CSP sandbox directive did not create a unique origin (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7823.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7824","severity":"important","public_date":"2017-09-28T00:00:00Z","advisories":["RHSA-2017:2831","RHSA-2017:2885"],"bugzilla":"1496656","bugzilla_description":"CVE-2017-7824 Mozilla: Buffer overflow when drawing and validating elements with ANGLE (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["firefox-0:52.4.0-1.el6_9","firefox-0:52.4.0-1.el7_4","thunderbird-0:52.4.0-2.el7_4","thunderbird-0:52.4.0-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7824.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7825","severity":"moderate","public_date":"2017-09-28T00:00:00Z","advisories":[],"bugzilla":"1496657","bugzilla_description":"CVE-2017-7825 Mozilla: OS X fonts render some Tibetan and Arabic unicode characters as spaces (MFSA 2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7825.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7809","severity":"important","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479650","bugzilla_description":"CVE-2017-7809 Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7809.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7753","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479188","bugzilla_description":"CVE-2017-7753 Mozilla: Out-of-bounds read with cached style data and pseudo-elements (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7753.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7779","severity":"critical","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479191","bugzilla_description":"CVE-2017-7779 Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7779.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7784","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479201","bugzilla_description":"CVE-2017-7784 Mozilla: Use-after-free with image observers (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7784.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7785","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479203","bugzilla_description":"CVE-2017-7785 Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7785.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7786","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479205","bugzilla_description":"CVE-2017-7786 Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7786.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7787","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479206","bugzilla_description":"CVE-2017-7787 Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7787.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7791","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479209","bugzilla_description":"CVE-2017-7791 Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7791.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","cvss3_score":"9.3"},{"CVE":"CVE-2017-7792","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479210","bugzilla_description":"CVE-2017-7792 Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7792.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7800","severity":"critical","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479218","bugzilla_description":"CVE-2017-7800 Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7800.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7801","severity":"critical","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479223","bugzilla_description":"CVE-2017-7801 Mozilla: Use-after-free with marquee during window resizing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7801.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-7802","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479224","bugzilla_description":"CVE-2017-7802 Mozilla: Use-after-free resizing image elements (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7802.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7803","severity":"moderate","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479225","bugzilla_description":"CVE-2017-7803 Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7803.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7807","severity":"important","public_date":"2017-08-08T00:00:00Z","advisories":["RHSA-2017:2534","RHSA-2017:2456"],"bugzilla":"1479227","bugzilla_description":"CVE-2017-7807 Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-829","affected_packages":["thunderbird-0:52.3.0-1.el6_9","firefox-0:52.3.0-2.el7_4","thunderbird-0:52.3.0-1.el7_4","firefox-0:52.3.0-3.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5472","severity":"critical","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461252","bugzilla_description":"CVE-2017-5472 Mozilla: Use-after-free using destroyed node when regenerating trees (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5472.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-7749","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461253","bugzilla_description":"CVE-2017-7749 Mozilla: Use-after-free during docshell reloading (MFSA 2017-16)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7749.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7750","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461254","bugzilla_description":"CVE-2017-7750 Mozilla: Use-after-free with track elements (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7750.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7751","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461255","bugzilla_description":"CVE-2017-7751 Mozilla: Use-after-free with content viewer listeners (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7751.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7752","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461256","bugzilla_description":"CVE-2017-7752 Mozilla: Use-after-free with IME input (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7752.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7754","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461257","bugzilla_description":"CVE-2017-7754 Mozilla: Out-of-bounds read in WebGL with ImageInfo object (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7754.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-7756","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461258","bugzilla_description":"CVE-2017-7756 Mozilla: Use-after-free and use-after-scope logging XHR header errors (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7756.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7757","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461259","bugzilla_description":"CVE-2017-7757 Mozilla: Use-after-free in IndexedDB (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7757.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7778","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1461260","bugzilla_description":"CVE-2017-7778 Mozilla: Vulnerabilities in the Graphite 2 library (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7778.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7758","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461261","bugzilla_description":"CVE-2017-7758 Mozilla: Out-of-bounds read in Opus encoder (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7758.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-7764","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461262","bugzilla_description":"CVE-2017-7764 Mozilla: Domain spoofing with combination of Canadian Syllabics and other unicode blocks (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7764.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-5470","severity":"critical","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561"],"bugzilla":"1461264","bugzilla_description":"CVE-2017-5470 Mozilla: Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2 (MFSA 2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-9233","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1462729","bugzilla_description":"CVE-2017-9233 expat: Inifinite loop due to invalid XML in external entity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-7771","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472212","bugzilla_description":"CVE-2017-7771 graphite2: out of bounds read in \"graphite2::Pass::readPass\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7771.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-7772","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472213","bugzilla_description":"CVE-2017-7772 graphite2: heap-buffer-overflow write \"lz4::decompress\" (CVE-2017-7772)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7772.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7773","severity":"important","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472215","bugzilla_description":"CVE-2017-7773 graphite2: heap-buffer-overflow write \"lz4::decompress\" (src/Decompressor)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7773.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-7774","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472219","bugzilla_description":"CVE-2017-7774 graphite2: out of bounds read \"graphite2::Silf::readGraphite\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7774.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-7775","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472221","bugzilla_description":"CVE-2017-7775 graphite2: assertion error \"size() > n\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7775.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7776","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472223","bugzilla_description":"CVE-2017-7776 graphite2: heap-buffer-overflow read \"graphite2::Silf::getClassGlyph\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7776.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-7777","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":["RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793"],"bugzilla":"1472225","bugzilla_description":"CVE-2017-7777 graphite2: use of uninitialized memory \"graphite2::GlyphCache::Loader::read_glyph\"","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["firefox-0:52.2.0-1.el6_9","firefox-0:52.2.0-1.el7_3","thunderbird-0:52.2.0-1.el7_3","graphite2-0:1.3.10-1.el7_3","thunderbird-0:52.2.0-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7777.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-7762","severity":"moderate","public_date":"2017-04-20T00:00:00Z","advisories":["RHSA-2018:2113","RHSA-2018:2112"],"bugzilla":"1590493","bugzilla_description":"CVE-2017-7762 Mozilla: address bar username and password spoofing in reader mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-290","affected_packages":["firefox-0:60.1.0-4.el7_5","firefox-0:60.1.0-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7762.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5456","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106"],"bugzilla":"1443297","bugzilla_description":"CVE-2017-5456 Mozilla: Sandbox escape allowing local file system read access (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5456.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5442","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443298","bugzilla_description":"CVE-2017-5442 Mozilla: Use-after-free during style changes (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5442.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5443","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443299","bugzilla_description":"CVE-2017-5443 Mozilla: Out-of-bounds write during BinHex decoding (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5443.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5429","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443301","bugzilla_description":"CVE-2017-5429 Mozilla: Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and Firefox ESR 52.1 (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5429.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5464","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443303","bugzilla_description":"CVE-2017-5464 Mozilla: Memory corruption with accessibility and DOM manipulation (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5464.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5465","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443304","bugzilla_description":"CVE-2017-5465 Mozilla: Out-of-bounds read in ConvolvePixel (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5465.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5466","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443305","bugzilla_description":"CVE-2017-5466 Mozilla: Origin confusion when reloading isolated data:text/html URL (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5466.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5467","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443307","bugzilla_description":"CVE-2017-5467 Mozilla: Memory corruption when drawing Skia content (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5467.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5460","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443308","bugzilla_description":"CVE-2017-5460 Mozilla: Use-after-free in frame selection (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5460.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5448","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106"],"bugzilla":"1443310","bugzilla_description":"CVE-2017-5448 Mozilla: Out-of-bounds write in ClearKeyDecryptor (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","firefox-0:52.1.0-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5448.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5449","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443311","bugzilla_description":"CVE-2017-5449 Mozilla: Crash during bidirectional unicode manipulation with animation (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5449.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5446","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443312","bugzilla_description":"CVE-2017-5446 Mozilla: Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5447","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443313","bugzilla_description":"CVE-2017-5447 Mozilla: Out-of-bounds read during glyph processing (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5444","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443314","bugzilla_description":"CVE-2017-5444 Mozilla: Buffer overflow while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5444.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5445","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443315","bugzilla_description":"CVE-2017-5445 Mozilla: Uninitialized values used while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5445.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5468","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443316","bugzilla_description":"CVE-2017-5468 Mozilla: Incorrect ownership model for Private Browsing information (MFSA 2017-10)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5469","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443317","bugzilla_description":"CVE-2017-5469 Mozilla: Potential Buffer overflow in flex-generated code (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5469.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5440","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443322","bugzilla_description":"CVE-2017-5440 Mozilla: Use-after-free in txExecutionState destructor during XSLT processing (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5440.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5441","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443323","bugzilla_description":"CVE-2017-5441 Mozilla: Use-after-free with selection during scroll events (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5441.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5439","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443324","bugzilla_description":"CVE-2017-5439 Mozilla: Use-after-free in nsTArray Length() during XSLT processing (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5439.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5438","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443325","bugzilla_description":"CVE-2017-5438 Mozilla: Use-after-free in nsAutoPtr during XSLT processing (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5438.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5437","severity":null,"public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443326","bugzilla_description":"REJECTED CVE-2017-5437 Mozilla: Vulnerabilities in libevent library (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5437.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-5436","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443327","bugzilla_description":"CVE-2017-5436 Mozilla: Out-of-bounds write with malicious font in Graphite 2 (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5435","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443328","bugzilla_description":"CVE-2017-5435 Mozilla: Use-after-free during transaction processing in the editor (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5434","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443329","bugzilla_description":"CVE-2017-5434 Mozilla: Use-after-free during focus handling (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5434.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5433","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443330","bugzilla_description":"CVE-2017-5433 Mozilla: Use-after-free in SMIL animation functions (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5433.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5430","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106"],"bugzilla":"1443331","bugzilla_description":"CVE-2017-5430 Mozilla: Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1 (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5430.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5432","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443332","bugzilla_description":"CVE-2017-5432 Mozilla: Use-after-free in text input selection (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5432.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5459","severity":"critical","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443333","bugzilla_description":"CVE-2017-5459 Mozilla: Buffer overflow in WebGL (MFSA 2017-11, MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5459.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-5455","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106"],"bugzilla":"1443334","bugzilla_description":"CVE-2017-5455 Mozilla: Sandbox escape through internal feed reader APIs (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.1.0-2.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5455.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5458","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443336","bugzilla_description":"CVE-2017-5458 Mozilla: Drag and drop of javascript: URLs can allow for self-XSS (MFSA 2017-11)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5458.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5454","severity":"important","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443338","bugzilla_description":"CVE-2017-5454 Mozilla: Sandbox escape allowing file system read access through file picker (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5454.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-5451","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1443340","bugzilla_description":"CVE-2017-5451 Mozilla: Addressbar spoofing with onblur event (MFSA 2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5451.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5453","severity":"low","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443343","bugzilla_description":"CVE-2017-5453 Mozilla: HTML injection into RSS Reader feed preview page through TITLE element (MFSA 2017-11)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5453.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-5428","severity":"critical","public_date":"2017-03-17T00:00:00Z","advisories":["RHSA-2017:0558"],"bugzilla":"1433202","bugzilla_description":"CVE-2017-5428 Mozilla: integer overflow in createImageBitmap() (MFSA 2017-08)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["firefox-0:52.0-5.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5428.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5400","severity":"critical","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429778","bugzilla_description":"CVE-2017-5400 Mozilla: asm.js JIT-spray bypass of ASLR and DEP (MFSA 2017-06)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5400.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5401","severity":"critical","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429779","bugzilla_description":"CVE-2017-5401 Mozilla: Memory Corruption when handling ErrorResult (MFSA 2017-06)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5401.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5402","severity":"critical","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429780","bugzilla_description":"CVE-2017-5402 Mozilla: Use-after-free working with events in FontFace objects (MFSA 2017-06)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5402.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5404","severity":"critical","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429781","bugzilla_description":"CVE-2017-5404 Mozilla: Use-after-free working with ranges in selections (MFSA 2017-06)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5407","severity":"moderate","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429782","bugzilla_description":"CVE-2017-5407 Mozilla: Pixel and history stealing via floating-point timing side channel with SVG filters (MFSA 2017-06)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5410","severity":"moderate","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429783","bugzilla_description":"CVE-2017-5410 Mozilla: Memory corruption during JavaScript garbage collection incremental sweeping (MFSA 2017-06)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5410.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-5408","severity":"moderate","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429784","bugzilla_description":"CVE-2017-5408 Mozilla: Cross-origin reading of video captions in violation of CORS (MFSA 2017-06)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5408.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5405","severity":"low","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429785","bugzilla_description":"CVE-2017-5405 Mozilla: FTP response codes can cause use of uninitialized values for ports (MFSA 2017-06)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5405.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-5398","severity":"critical","public_date":"2017-03-07T00:00:00Z","advisories":["RHSA-2017:0459","RHSA-2017:0461","RHSA-2017:0498"],"bugzilla":"1429786","bugzilla_description":"CVE-2017-5398 Mozilla: Memory safety bugs fixed in Firefox 52 and Firefox ESR 45.8 (MFSA 2017-06)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.8.0-2.el6_8","firefox-0:45.8.0-2.el5_11","firefox-0:52.0-4.el7_3","thunderbird-0:45.8.0-1.el7_3","thunderbird-0:45.8.0-1.el6_8","thunderbird-0:45.8.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5398.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5373","severity":"critical","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1415924","bugzilla_description":"CVE-2017-5373 Mozilla: Memory safety bugs fixed in Firefox 51 and Firefox ESR 45.7 (MFSA 2017-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5373.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5375","severity":"critical","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416271","bugzilla_description":"CVE-2017-5375 Mozilla: Excessive JIT code allocation allows bypass of ASLR and DEP (MFSA 2017-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5375.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5376","severity":"critical","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416272","bugzilla_description":"CVE-2017-5376 Mozilla: Use-after-free in XSL (MFSA 2017-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2017-5378","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416273","bugzilla_description":"CVE-2017-5378 Mozilla: Pointer and frame data leakage of Javascript objects (MFSA 2017-02)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5378.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-5380","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416274","bugzilla_description":"CVE-2017-5380 Mozilla: Potential use-after-free during DOM manipulations (MFSA 2017-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5380.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-5390","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416279","bugzilla_description":"CVE-2017-5390 Mozilla: Insecure communication methods in Developer Tools JSON viewer (MFSA 2017-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5390.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-5396","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416280","bugzilla_description":"CVE-2017-5396 Mozilla: Use-after-free with Media Decoder (MFSA 2017-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5396.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-5383","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0238","RHSA-2017:0190"],"bugzilla":"1416281","bugzilla_description":"CVE-2017-5383 Mozilla: Location bar spoofing with unicode characters (MFSA 2017-02)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:45.7.0-1.el6_8","firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","thunderbird-0:45.7.0-1.el7_3","firefox-0:45.7.0-2.el6_8","thunderbird-0:45.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5383.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-5386","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0190"],"bugzilla":"1416282","bugzilla_description":"CVE-2017-5386 Mozilla: WebExtensions can use data: protocol to affect other extensions (MFSA 2017-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.7.0-2.el7_3","firefox-0:45.7.0-2.el5_11","firefox-0:45.7.0-2.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5386.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-0381","severity":"low","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1413604","bugzilla_description":"CVE-2017-0381 opus: Memory corruption during media file and data processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0381.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9584","severity":"moderate","public_date":"2016-12-15T00:00:00Z","advisories":[],"bugzilla":"1405315","bugzilla_description":"CVE-2016-9584 libical: Use-after-free","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9584.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-9899","severity":"critical","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404083","bugzilla_description":"CVE-2016-9899 Mozilla: Use-after-free while manipulating DOM events and audio elements (MFSA 2016-94, MFSA 2016-95)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9899.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-9895","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404086","bugzilla_description":"CVE-2016-9895 Mozilla: CSP bypass using marquee tag (MFSA 2016-94, MFSA 2016-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9895.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-9897","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946"],"bugzilla":"1404087","bugzilla_description":"CVE-2016-9897 Mozilla: Memory corruption in libGLES (MFSA 2016-94, MFSA 2016-95)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9898","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946"],"bugzilla":"1404089","bugzilla_description":"CVE-2016-9898 Mozilla: Use-after-free in Editor while manipulating DOM subtrees (MFSA 2016-94, MFSA 2016-95)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9898.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9900","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404090","bugzilla_description":"CVE-2016-9900 Mozilla: Restricted external resources can be loaded by SVG images through data URLs (MFSA 2016-94, MFSA 2016-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9904","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946"],"bugzilla":"1404091","bugzilla_description":"CVE-2016-9904 Mozilla: Cross-origin information leak in shared atoms (MFSA 2016-94, MFSA 2016-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9904.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9905","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404094","bugzilla_description":"CVE-2016-9905 Mozilla: Crash in EnumerateSubDocuments (MFSA 2016-94, MFSA 2016-95)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9905.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9893","severity":"critical","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404096","bugzilla_description":"CVE-2016-9893 Mozilla: Memory safety bugs fixed in Firefox 50.1 and Firefox ESR 45.6 (MFSA 2016-95)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-9901","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404358","bugzilla_description":"CVE-2016-9901 Mozilla: Data from Pocket server improperly sanitized before execution (MFSA 2016-94, MFSA 2016-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9901.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9902","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2016:2946","RHSA-2016:2973"],"bugzilla":"1404359","bugzilla_description":"CVE-2016-9902 Mozilla: Pocket extension does not validate the origin of events (MFSA 2016-94, MFSA 2016-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:45.6.0-1.el7_3","firefox-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el7_3","thunderbird-0:45.6.0-1.el5_11","firefox-0:45.6.0-1.el6_8","thunderbird-0:45.6.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9902.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9079","severity":"critical","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2016:2850","RHSA-2016:2843"],"bugzilla":"1400376","bugzilla_description":"CVE-2016-9079 Mozilla: Firefox SVG Animation Remote Code Execution (MFSA 2016-92)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.5.1-1.el7_3","thunderbird-0:45.5.1-1.el5_11","firefox-0:45.5.1-1.el7_3","firefox-0:45.5.1-1.el5_11","firefox-0:45.5.1-1.el6_8","thunderbird-0:45.5.1-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9079.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5296","severity":"critical","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780"],"bugzilla":"1395055","bugzilla_description":"CVE-2016-5296 Mozilla: Heap-buffer-overflow WRITE in rasterize_edges_1 (MFSA 2016-89, MFSA 2016-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","firefox-0:45.5.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5296.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5297","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780"],"bugzilla":"1395058","bugzilla_description":"CVE-2016-5297 Mozilla: Incorrect argument length checking in Javascript (MFSA 2016-89, MFSA 2016-90)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","firefox-0:45.5.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5297.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9064","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780"],"bugzilla":"1395060","bugzilla_description":"CVE-2016-9064 Mozilla: Addons update must verify IDs match between current and new versions (MFSA 2016-89, MFSA 2016-90)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","firefox-0:45.5.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9064.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9066","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780"],"bugzilla":"1395061","bugzilla_description":"CVE-2016-9066 Mozilla: Integer overflow leading to a buffer overflow in nsScriptLoadHandler (MFSA 2016-89, MFSA 2016-90)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","firefox-0:45.5.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9066.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5291","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780"],"bugzilla":"1395065","bugzilla_description":"CVE-2016-5291 Mozilla: Same-origin policy violation using local HTML file and saved shortcut file (MFSA 2016-89, MFSA 2016-90)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","firefox-0:45.5.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5291.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5290","severity":"critical","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2016:2780","RHSA-2016:2825"],"bugzilla":"1395066","bugzilla_description":"CVE-2016-5290 Mozilla: Memory safety bugs fixed in Firefox 45.5 (MFSA 2016-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el6_8","thunderbird-0:45.5.0-1.el5_11","firefox-0:45.5.0-1.el7_3","thunderbird-0:45.5.0-1.el7_3","thunderbird-0:45.5.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5290.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5292","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395057","bugzilla_description":"CVE-2016-5292 Mozilla: URL parsing causes crash (MFSA 2016-89)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5292.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5289","severity":"critical","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395098","bugzilla_description":"CVE-2016-5289 Mozilla: Memory safety bugs fixed in Firefox 50 (MFSA 2016-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5289.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-9077","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395099","bugzilla_description":"CVE-2016-9077 Mozilla: Canvas filters allow feDisplacementMaps to be applied to cross-origin images, allowing timing attacks on them (MFSA 2016-89)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9077.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9071","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395100","bugzilla_description":"CVE-2016-9071 Mozilla: Probe browser history via HSTS/301 redirect + CSP (MFSA 2016-89)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9071.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-9075","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1395101","bugzilla_description":"CVE-2016-9075 Mozilla: WebExtensions can access the mozAddonManager API and use it to gain elevated privileges (MFSA 2016-89)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9075.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-9076","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396537","bugzilla_description":"CVE-2016-9076 firefox: select dropdown menu can be used for URL bar spoofing on e10s","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9076.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2016-9067","severity":"important","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396539","bugzilla_description":"CVE-2016-9067 CVE-2016-9069 firefox: Heap use-after-free in nsINode::ReplaceOrInsertBefore","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9067.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2016-9069","severity":"important","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396539","bugzilla_description":"CVE-2016-9067 CVE-2016-9069 firefox: Heap use-after-free in nsINode::ReplaceOrInsertBefore","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9069.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2016-9063","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396540","bugzilla_description":"CVE-2016-9063 firefox: Possible integer overflow to fix inside XML_Parse in Expat","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9063.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9068","severity":"important","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396542","bugzilla_description":"CVE-2016-9068 firefox: Heap use-after-free in nsRefreshDriver","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9068.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2016-9073","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396545","bugzilla_description":"CVE-2016-9073 firefox: windows.create schema doesn't specify \"format\": \"relativeUrl\"","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9073.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-9070","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396549","bugzilla_description":"CVE-2016-9070 firefox: Sidebar bookmark can have reference to chrome window","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9070.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5261","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1361986","bugzilla_description":"CVE-2016-5261 Mozilla: Integer overflow and memory corruption in WebSocketChannel (MFSA 2016-75, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5250","severity":"moderate","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1361998","bugzilla_description":"CVE-2016-5250 Mozilla: Resource Timing API is storing resources sent by the previous page (MFSA 2016-84, MFSA 2016-86)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5250.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5257","severity":"critical","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912","RHSA-2016:1985"],"bugzilla":"1377543","bugzilla_description":"CVE-2016-5257 Mozilla: Memory safety bugs fixed in Firefox ESR 45.4 (MFSA 2016-85, MFSA 2016-86)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","thunderbird-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2","thunderbird-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5278","severity":"critical","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377549","bugzilla_description":"CVE-2016-5278 Mozilla: Heap-buffer-overflow in nsBMPEncoder::AddImageFrame (MFSA 2016-85, MFSA 2016-86)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5278.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5270","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377552","bugzilla_description":"CVE-2016-5270 Mozilla: Heap-buffer-overflow in nsCaseTransformTextRunFactory::TransformString (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5270.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5272","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377554","bugzilla_description":"CVE-2016-5272 Mozilla: Bad cast in nsImageGeometryMixin (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5276","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377557","bugzilla_description":"CVE-2016-5276 Mozilla: Heap-use-after-free in mozilla::a11y::DocAccessible::ProcessInvalidationList (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5276.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5274","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377558","bugzilla_description":"CVE-2016-5274 Mozilla: use-after-free in nsFrameManager::CaptureFrameState (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5277","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377559","bugzilla_description":"CVE-2016-5277 Mozilla: Heap-use-after-free in nsRefreshDriver::Tick (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5277.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5280","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377561","bugzilla_description":"CVE-2016-5280 Mozilla: Use-after-free in mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5280.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5281","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377563","bugzilla_description":"CVE-2016-5281 Mozilla: use-after-free in DOMSVGLength (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5281.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5284","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":["RHSA-2016:1912"],"bugzilla":"1377565","bugzilla_description":"CVE-2016-5284 Mozilla: Add-on update site certificate pin expiration (MFSA 2016-85, MFSA 2016-86)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.4.0-1.el5_11","firefox-0:45.4.0-1.el6_8","firefox-0:45.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5284.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2827","severity":"low","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377660","bugzilla_description":"CVE-2016-2827 Mozilla: Out-of-bounds read in mozilla::net::IsValidReferrerPolicy (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2827.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5271","severity":"low","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377661","bugzilla_description":"CVE-2016-5271 Mozilla: Out-of-bounds read in PropertyProvider::GetSpacingInternal (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5271.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5256","severity":"critical","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377666","bugzilla_description":"CVE-2016-5256 Mozilla: Memory safety bugs fixed in Firefox 49 (MFSA 2016-85)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5256.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5275","severity":"critical","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377667","bugzilla_description":"CVE-2016-5275 Mozilla: global-buffer-overflow in mozilla::gfx::FilterSupport::ComputeSourceNeededRegions (MFSA 2016-85)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5275.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5273","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377669","bugzilla_description":"CVE-2016-5273 Mozilla: crash in mozilla::a11y::HyperTextAccessible::GetChildOffset (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5273.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5283","severity":"important","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377670","bugzilla_description":"CVE-2016-5283 Mozilla: iframe src fragment timing attack can reveal cross-origin data (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5283.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5279","severity":"moderate","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377673","bugzilla_description":"CVE-2016-5279 Mozilla: Full local path of files is available to web pages after drag and drop (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5279.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5282","severity":"moderate","public_date":"2016-09-20T00:00:00Z","advisories":[],"bugzilla":"1377675","bugzilla_description":"CVE-2016-5282 Mozilla: Don't allow content to request favicons from non-whitelisted schemes (MFSA 2016-85)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5282.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2836","severity":"critical","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551","RHSA-2016:1809"],"bugzilla":"1361974","bugzilla_description":"CVE-2016-2836 Mozilla: Miscellaneous memory safety hazards (rv:45.3) (MFSA 2016-62)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","thunderbird-0:45.3.0-1.el7_2","thunderbird-0:45.3.0-1.el5_11","thunderbird-0:45.3.0-1.el6_8","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2836.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-2835","severity":"critical","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361975","bugzilla_description":"CVE-2016-2835 Mozilla: Miscellaneous memory safety hazards (rv:48.0) (MFSA 2016-62)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2835.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-2838","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361976","bugzilla_description":"CVE-2016-2838 Mozilla: Buffer overflow rendering SVG with bidirectional content (MFSA 2016-64)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-2839","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361977","bugzilla_description":"CVE-2016-2839 Mozilla: Cairo rendering crash due to memory allocation issue with FFMpeg 0.10 (MFSA 2016-65)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2839.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5251","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361978","bugzilla_description":"CVE-2016-5251 Mozilla: Location bar spoofing via data URLs with malformed/invalid mediatypes (MFSA 2016-66)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5252","severity":"important","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361979","bugzilla_description":"CVE-2016-5252 Mozilla: Stack underflow during 2D graphics rendering (MFSA 2016-67)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5252.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5254","severity":"low","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361980","bugzilla_description":"CVE-2016-5254 Mozilla: Use-after-free when using alt key and toplevel menus (MFSA 2016-70)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5255","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361981","bugzilla_description":"CVE-2016-5255 Mozilla: Crash in incremental garbage collection in JavaScript (MFSA 2016-71)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5255.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5258","severity":"critical","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361982","bugzilla_description":"CVE-2016-5258 Mozilla: Use-after-free in DTLS during WebRTC session shutdown (MFSA 2016-72)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5258.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5259","severity":"critical","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361984","bugzilla_description":"CVE-2016-5259 Mozilla: Use-after-free in service workers with nested sync events (MFSA 2016-73)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5259.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-5260","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361985","bugzilla_description":"CVE-2016-5260 Mozilla: Form input type change from password to text can store plain text password in session restore file (MFSA 2016-74)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5260.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5262","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361987","bugzilla_description":"CVE-2016-5262 Mozilla: Scripts on marquee tag can execute in sandboxed iframes (MFSA 2016-76)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5262.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-2837","severity":"low","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361989","bugzilla_description":"CVE-2016-2837 Mozilla: Buffer overflow in ClearKey Content Decryption Module (CDM) during video playback (MFSA 2016-77)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2837.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5263","severity":"important","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361991","bugzilla_description":"CVE-2016-5263 Mozilla: Type confusion in display transformation (MFSA 2016-78)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5263.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5264","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361992","bugzilla_description":"CVE-2016-5264 Mozilla: Use-after-free when applying SVG effects (MFSA 2016-79)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5264.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2016-5265","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":["RHSA-2016:1551"],"bugzilla":"1361994","bugzilla_description":"CVE-2016-5265 Mozilla: Same-origin policy violation using local HTML file and saved shortcut file (MFSA 2016-80)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.3.0-1.el7_2","firefox-0:45.3.0-1.el5_11","firefox-0:45.3.0-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5265.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5266","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361995","bugzilla_description":"CVE-2016-5266 Mozilla: Information disclosure and local file manipulation through drag and drop (MFSA 2016-81)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5266.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-5268","severity":"moderate","public_date":"2016-08-02T00:00:00Z","advisories":[],"bugzilla":"1361996","bugzilla_description":"CVE-2016-5268 Mozilla: Spoofing attack through text injection into internal error pages (MFSA 2016-83)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5268.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-5825","severity":"low","public_date":"2016-06-25T00:00:00Z","advisories":[],"bugzilla":"1375104","bugzilla_description":"CVE-2016-5825 libical: Heap buffer over-read in icalparser_parse_string function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5825.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5826","severity":"low","public_date":"2016-06-25T00:00:00Z","advisories":[],"bugzilla":"1375106","bugzilla_description":"CVE-2016-5826 libical: Heap buffer over-read in parser_get_next_char","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5826.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5827","severity":"moderate","public_date":"2016-06-24T00:00:00Z","advisories":[],"bugzilla":"1350481","bugzilla_description":"CVE-2016-5827 libical: Heap buffer over-read in icaltime_from_string","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5827.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5823","severity":"low","public_date":"2016-06-24T00:00:00Z","advisories":[],"bugzilla":"1350487","bugzilla_description":"CVE-2016-5823 libical: Segmentation fault on crafted file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5823.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-2831","severity":"moderate","public_date":"2016-06-09T00:00:00Z","advisories":["RHSA-2016:1217"],"bugzilla":"1342898","bugzilla_description":"CVE-2016-2831 Mozilla: Entering fullscreen and persistent pointerlock without user permission (MFSA 2016-58)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2831.json"},{"CVE":"CVE-2016-2818","severity":"critical","public_date":"2016-06-08T00:00:00Z","advisories":["RHSA-2016:1392","RHSA-2016:1217"],"bugzilla":"1342887","bugzilla_description":"CVE-2016-2818 Mozilla: Miscellaneous memory safety hazards (rv:45.2) (MFSA 2016-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","thunderbird-0:45.2-1.el5_11","thunderbird-0:45.2-1.el7_2","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2","thunderbird-0:45.2-1.el6_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2818.json"},{"CVE":"CVE-2016-2819","severity":"critical","public_date":"2016-06-08T00:00:00Z","advisories":["RHSA-2016:1217"],"bugzilla":"1342891","bugzilla_description":"CVE-2016-2819 Mozilla: Buffer overflow parsing HTML5 fragments (MFSA 2016-50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2819.json"},{"CVE":"CVE-2016-2821","severity":"moderate","public_date":"2016-06-08T00:00:00Z","advisories":["RHSA-2016:1217"],"bugzilla":"1342892","bugzilla_description":"CVE-2016-2821 Mozilla: Use-after-free deleting tables from a contenteditable document (MFSA 2016-51)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2821.json"},{"CVE":"CVE-2016-2822","severity":"moderate","public_date":"2016-06-08T00:00:00Z","advisories":["RHSA-2016:1217"],"bugzilla":"1342893","bugzilla_description":"CVE-2016-2822 Mozilla: Addressbar spoofing though the SELECT element (MFSA 2016-52)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2822.json"},{"CVE":"CVE-2016-2828","severity":"moderate","public_date":"2016-06-08T00:00:00Z","advisories":["RHSA-2016:1217"],"bugzilla":"1342895","bugzilla_description":"CVE-2016-2828 Mozilla: Use-after-free when textures are used in WebGL operations after recycle pool destruction (MFSA 2016-56)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:45.2.0-1.el6_8","firefox-0:45.2.0-1.el5_11","firefox-0:45.2.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2828.json"},{"CVE":"CVE-2016-2815","severity":"critical","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1342890","bugzilla_description":"CVE-2016-2815 Mozilla: Miscellaneous memory safety hazards (rv:47.0) (MFSA 2016-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2815.json"},{"CVE":"CVE-2016-2825","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1342894","bugzilla_description":"CVE-2016-2825 Mozilla: Partial same-origin-policy through setting location.host through data: URI (MFSA 2016-54)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2825.json"},{"CVE":"CVE-2016-2829","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1342896","bugzilla_description":"CVE-2016-2829 Mozilla: Incorrect icon displayed on permissions notifications (MFSA 2016-57)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2829.json"},{"CVE":"CVE-2016-2832","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1342899","bugzilla_description":"CVE-2016-2832 Mozilla: Information disclosure of disabled plugins through CSS pseudo-classes (MFSA 2016-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2832.json"},{"CVE":"CVE-2016-2833","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1342900","bugzilla_description":"CVE-2016-2833 Mozilla: Java applets bypass CSP protections (MFSA 2016-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2833.json"},{"CVE":"CVE-2016-5300","severity":"moderate","public_date":"2016-06-04T00:00:00Z","advisories":[],"bugzilla":"1343085","bugzilla_description":"CVE-2016-5300 expat: Little entropy used for hash initialization","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5300.json"},{"CVE":"CVE-2016-5824","severity":"moderate","public_date":"2016-05-24T00:00:00Z","advisories":["RHSA-2019:0269","RHSA-2019:0270"],"bugzilla":"1375120","bugzilla_description":"CVE-2016-5824 libical: Multiple use-after-free vulnerabilities","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:60.5.0-1.el6_10","thunderbird-0:60.5.0-1.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5824.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-0718","severity":"moderate","public_date":"2016-05-17T00:00:00Z","advisories":["RHSA-2016:2824","RHSA-2018:2486"],"bugzilla":"1296102","bugzilla_description":"CVE-2016-0718 expat: Out-of-bounds heap read on crafted input causing crash","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["expat-0:2.0.1-13.el6_8","expat-0:2.1.0-10.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0718.json"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2016-2805","severity":"critical","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:0695","RHSA-2016:1041"],"bugzilla":"1330266","bugzilla_description":"CVE-2016-2805 Mozilla: Miscellaneous memory safety hazards (rv:38.8) (MFSA 2016-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:38.8.0-1.el7_2","firefox-0:45.1.0-1.el6_7","thunderbird-0:38.8.0-2.el6_8","thunderbird-0:38.8.0-1.el5_11","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2805.json"},{"CVE":"CVE-2016-2807","severity":"critical","public_date":"2016-04-26T00:00:00Z","advisories":["RHSA-2016:0695","RHSA-2016:1041"],"bugzilla":"1330271","bugzilla_description":"CVE-2016-2807 Mozilla: Miscellaneous memory safety hazards (rv:46.0 / rv:45.1 / rv:38.8) (MFSA 2016-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:38.8.0-1.el7_2","firefox-0:45.1.0-1.el6_7","thunderbird-0:38.8.0-2.el6_8","thunderbird-0:38.8.0-1.el5_11","firefox-0:45.1.0-1.el5_11","firefox-0:45.1.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2807.json"},{"CVE":"CVE-2016-1952","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315566","bugzilla_description":"CVE-2016-1952 Mozilla: Miscellaneous memory safety hazards (rv:38.7) (MFSA 2016-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1952.json"},{"CVE":"CVE-2016-1953","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315567","bugzilla_description":"CVE-2016-1953 Mozilla: Miscellaneous memory safety hazards (rv:45.0) (MFSA 2016-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1953.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2016-1954","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315569","bugzilla_description":"CVE-2016-1954 Mozilla: Local file overwriting and potential privilege escalation through CSP reports (MFSA 2016-17)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1954.json"},{"CVE":"CVE-2016-1955","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315570","bugzilla_description":"CVE-2016-1955 Mozilla: CSP reports fail to strip location information for embedded iframe pages (MFSA 2016-18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1955.json"},{"CVE":"CVE-2016-1956","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315571","bugzilla_description":"CVE-2016-1956 Mozilla: Linux video memory DOS with Intel drivers (MFSA 2016-19)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1956.json"},{"CVE":"CVE-2016-1957","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315573","bugzilla_description":"CVE-2016-1957 Mozilla: Memory leak in libstagefright when deleting an array during MP4 processing (MFSA 2016-20)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1957.json"},{"CVE":"CVE-2016-1958","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373"],"bugzilla":"1315574","bugzilla_description":"CVE-2016-1958 Mozilla: Displayed page address can be overridden (MFSA 2016-21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1958.json"},{"CVE":"CVE-2016-1959","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315575","bugzilla_description":"CVE-2016-1959 Mozilla: Service Worker Manager out-of-bounds read in Service Worker Manager (MFSA 2016-22)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1959.json"},{"CVE":"CVE-2016-1960","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315576","bugzilla_description":"CVE-2016-1960 Mozilla: Use-after-free in HTML5 string parser (MFSA 2016-23)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1960.json"},{"CVE":"CVE-2016-1961","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315577","bugzilla_description":"CVE-2016-1961 Mozilla: Use-after-free in SetBody (MFSA 2016-24)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1961.json"},{"CVE":"CVE-2016-1962","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373"],"bugzilla":"1315578","bugzilla_description":"CVE-2016-1962 Mozilla: Use-after-free when using multiple WebRTC data channels (MFSA 2016-25)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1962.json"},{"CVE":"CVE-2016-1963","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315579","bugzilla_description":"CVE-2016-1963 Mozilla: Memory corruption when modifying a file being read by FileReader (MFSA 2016-26)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1963.json"},{"CVE":"CVE-2016-1964","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315774","bugzilla_description":"CVE-2016-1964 Mozilla: Use-after-free during XML transformations (MFSA 2016-27)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1964.json"},{"CVE":"CVE-2016-1965","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373"],"bugzilla":"1315775","bugzilla_description":"CVE-2016-1965 Mozilla: Addressbar spoofing though history navigation and Location protocol property (MFSA 2016-28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1965.json"},{"CVE":"CVE-2016-1967","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315776","bugzilla_description":"CVE-2016-1967 Mozilla: Same-origin policy violation using perfomance.getEntries and history navigation with session restore (MFSA 2016-29)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1967.json"},{"CVE":"CVE-2016-1968","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315777","bugzilla_description":"CVE-2016-1968 Mozilla: Buffer overflow in Brotli decompression (MFSA 2016-30)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1968.json"},{"CVE":"CVE-2016-1966","severity":"important","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315778","bugzilla_description":"CVE-2016-1966 Mozilla: Memory corruption with malicious NPAPI plugin (MFSA 2016-31)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1966.json"},{"CVE":"CVE-2016-1970","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315780","bugzilla_description":"CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975  CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1970.json"},{"CVE":"CVE-2016-1971","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315780","bugzilla_description":"CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975  CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1971.json"},{"CVE":"CVE-2016-1972","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315780","bugzilla_description":"CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975  CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1972.json"},{"CVE":"CVE-2016-1975","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315780","bugzilla_description":"CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975  CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1975.json"},{"CVE":"CVE-2016-1976","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":[],"bugzilla":"1315780","bugzilla_description":"CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975  CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1976.json"},{"CVE":"CVE-2016-1973","severity":"important","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373"],"bugzilla":"1315782","bugzilla_description":"CVE-2016-1973 Mozilla: Use-after-free in GetStaticInstance in WebRTC (MFSA 2016-33)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1973.json"},{"CVE":"CVE-2016-1974","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315785","bugzilla_description":"CVE-2016-1974 Mozilla: Out-of-bounds read in HTML parser following a failed allocation (MFSA 2016-34)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1974.json"},{"CVE":"CVE-2016-1977","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1977.json"},{"CVE":"CVE-2016-2790","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2790.json"},{"CVE":"CVE-2016-2791","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2791.json"},{"CVE":"CVE-2016-2792","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2792.json"},{"CVE":"CVE-2016-2793","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2793.json"},{"CVE":"CVE-2016-2794","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2794.json"},{"CVE":"CVE-2016-2795","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2795.json"},{"CVE":"CVE-2016-2796","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2796.json"},{"CVE":"CVE-2016-2797","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2797.json"},{"CVE":"CVE-2016-2798","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2798.json"},{"CVE":"CVE-2016-2799","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2799.json"},{"CVE":"CVE-2016-2800","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2800.json"},{"CVE":"CVE-2016-2801","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2801.json"},{"CVE":"CVE-2016-2802","severity":"critical","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0373","RHSA-2016:0460"],"bugzilla":"1315795","bugzilla_description":"graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.7.0-1.el6_7","thunderbird-0:38.7.0-1.el5_11","thunderbird-0:38.7.0-1.el6_7","firefox-0:38.7.0-1.el7_2","thunderbird-0:38.7.0-1.el7_2","firefox-0:38.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2802.json"},{"CVE":"CVE-2016-1969","severity":"moderate","public_date":"2016-03-08T00:00:00Z","advisories":["RHSA-2016:0197"],"bugzilla":"1317560","bugzilla_description":"CVE-2016-1969 mozilla: out-of-bounds write with malicious font in graphite2 (MFSA 2016-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["firefox-0:38.6.1-1.el6_7","firefox-0:38.6.1-1.el5_11","firefox-0:38.6.1-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1969.json"},{"CVE":"CVE-2016-10197","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418612","bugzilla_description":"CVE-2016-10197 libevent: Out-of-bounds read in search_make_new()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-1521","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0197","RHSA-2016:0594","RHSA-2016:0258"],"bugzilla":"1305805","bugzilla_description":"CVE-2016-1521 graphite2: Out-of-bound read vulnerability triggered by crafted fonts","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:38.6.1-1.el6_7","graphite2-0:1.3.6-1.el7_2","thunderbird-0:38.6.0-1.el5_11","firefox-0:38.6.1-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.1-1.el7_2","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1521.json"},{"CVE":"CVE-2016-1522","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0197","RHSA-2016:0594","RHSA-2016:0258"],"bugzilla":"1305810","bugzilla_description":"CVE-2016-1522 graphite2: Null pointer dereference and out-of-bounds access vulnerabilities","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["firefox-0:38.6.1-1.el6_7","graphite2-0:1.3.6-1.el7_2","thunderbird-0:38.6.0-1.el5_11","firefox-0:38.6.1-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.1-1.el7_2","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1522.json"},{"CVE":"CVE-2016-1523","severity":"important","public_date":"2016-02-05T00:00:00Z","advisories":["RHSA-2016:0197","RHSA-2016:0594","RHSA-2016:0258"],"bugzilla":"1305813","bugzilla_description":"CVE-2016-1523 graphite2: Heap-based buffer overflow in context item handling functionality","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["firefox-0:38.6.1-1.el6_7","graphite2-0:1.3.6-1.el7_2","thunderbird-0:38.6.0-1.el5_11","firefox-0:38.6.1-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.1-1.el7_2","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1523.json"},{"CVE":"CVE-2016-10195","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418608","bugzilla_description":"CVE-2016-10195 libevent: Stack-buffer overflow in the name_parse() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-10196","severity":"moderate","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201"],"bugzilla":"1418611","bugzilla_description":"CVE-2016-10196 libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["firefox-0:52.1.0-2.el6_9","thunderbird-0:52.1.0-1.el6_9","firefox-0:52.1.0-2.el7_3","thunderbird-0:52.1.0-1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-1930","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":["RHSA-2016:0071","RHSA-2016:0258"],"bugzilla":"1301818","bugzilla_description":"CVE-2016-1930 Mozilla: Miscellaneous memory safety hazards (rv:38.6) (MFSA 2016-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.6.0-1.el7_2","thunderbird-0:38.6.0-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.0-1.el5_11","firefox-0:38.6.0-1.el6_7","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1930.json"},{"CVE":"CVE-2016-1931","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301819","bugzilla_description":"CVE-2016-1931 Mozilla: Miscellaneous memory safety hazards (rv:44.0) (MFSA 2016-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1931.json"},{"CVE":"CVE-2016-1933","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301820","bugzilla_description":"CVE-2016-1933 Mozilla: Out of Memory crash when parsing GIF format images (MFSA 2016-02)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1933.json"},{"CVE":"CVE-2016-1935","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":["RHSA-2016:0071","RHSA-2016:0258"],"bugzilla":"1301821","bugzilla_description":"CVE-2016-1935 Mozilla: Buffer overflow in WebGL after out of memory allocation (MFSA 2016-03)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.6.0-1.el7_2","thunderbird-0:38.6.0-1.el5_11","thunderbird-0:38.6.0-1.el7_2","firefox-0:38.6.0-1.el5_11","firefox-0:38.6.0-1.el6_7","thunderbird-0:38.6.0-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1935.json"},{"CVE":"CVE-2016-1939","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301822","bugzilla_description":"CVE-2016-1939 Mozilla: Firefox allows for control characters to be set in cookie names (MFSA 2016-04)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1939.json"},{"CVE":"CVE-2016-1937","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301823","bugzilla_description":"CVE-2016-1937 Mozilla: Missing delay following user click events in protocol handler dialog (MFSA 2016-06)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1937.json"},{"CVE":"CVE-2016-1944","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301825","bugzilla_description":"CVE-2016-1944 CVE-2016-1945 CVE-2016-1946 Mozilla: Unsafe memory manipulation found through code inspection (MFSA 2016-10)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1944.json"},{"CVE":"CVE-2016-1945","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301825","bugzilla_description":"CVE-2016-1944 CVE-2016-1945 CVE-2016-1946 Mozilla: Unsafe memory manipulation found through code inspection (MFSA 2016-10)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1945.json"},{"CVE":"CVE-2016-1946","severity":"critical","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301825","bugzilla_description":"CVE-2016-1944 CVE-2016-1945 CVE-2016-1946 Mozilla: Unsafe memory manipulation found through code inspection (MFSA 2016-10)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1946.json"},{"CVE":"CVE-2016-1947","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301826","bugzilla_description":"CVE-2016-1947 Mozilla: Application Reputation service disabled in Firefox 43 (MFSA 2016-11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1947.json"},{"CVE":"CVE-2016-1943","severity":"moderate","public_date":"2016-01-26T00:00:00Z","advisories":[],"bugzilla":"1301827","bugzilla_description":"CVE-2016-1943 Mozilla: Addressbar spoofing attacks (MFSA 2016-09)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1943.json"},{"CVE":"CVE-2015-7201","severity":"critical","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0001","RHSA-2015:2657"],"bugzilla":"1291571","bugzilla_description":"CVE-2015-7201 Mozilla: Miscellaneous memory safety hazards (rv:38.5) (MFSA 2015-134)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:38.5.0-1.el6_7","thunderbird-0:38.5.0-1.el7_2","thunderbird-0:38.5.0-1.el5_11","firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7201.json"},{"CVE":"CVE-2015-7202","severity":"critical","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291577","bugzilla_description":"CVE-2015-7202 Mozilla: Miscellaneous memory safety hazards (rv:43.0) (MFSA 2015-134)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7202.json"},{"CVE":"CVE-2015-7204","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291578","bugzilla_description":"CVE-2015-7204 Mozilla: Crash with JavaScript variable assignment with unboxed objects (MFSA 2015-135)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7204.json"},{"CVE":"CVE-2015-7207","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291581","bugzilla_description":"CVE-2015-7207 Mozilla: Same-origin policy violation using perfomance.getEntries and history navigation (MFSA 2015-136)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7207.json"},{"CVE":"CVE-2015-7208","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291583","bugzilla_description":"CVE-2015-7208 Mozilla: Firefox allows for control characters to be set in cookies (MFSA 2015-137)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7208.json"},{"CVE":"CVE-2015-7210","severity":"critical","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2015:2657"],"bugzilla":"1291585","bugzilla_description":"CVE-2015-7210 Mozilla: Use-after-free in WebRTC when datachannel is used after being destroyed (MFSA 2015-138)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7210.json"},{"CVE":"CVE-2015-7212","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0001","RHSA-2015:2657"],"bugzilla":"1291587","bugzilla_description":"CVE-2015-7212 Mozilla: Integer overflow allocating extremely large textures (MFSA 2015-139)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["thunderbird-0:38.5.0-1.el6_7","thunderbird-0:38.5.0-1.el7_2","thunderbird-0:38.5.0-1.el5_11","firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7212.json"},{"CVE":"CVE-2015-7215","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291588","bugzilla_description":"CVE-2015-7215 Mozilla: Cross-origin information leak through web workers error events (MFSA 2015-140)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7215.json"},{"CVE":"CVE-2015-7211","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291589","bugzilla_description":"CVE-2015-7211 Mozilla: Hash in data: URI is incorrectly parsed (MFSA 2015-141)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7211.json"},{"CVE":"CVE-2015-7218","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291590","bugzilla_description":"CVE-2015-7218 CVE-2015-7219 Mozilla: DOS due to malformed frames in HTTP/2 (MFSA 2015-142)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7218.json"},{"CVE":"CVE-2015-7219","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291590","bugzilla_description":"CVE-2015-7218 CVE-2015-7219 Mozilla: DOS due to malformed frames in HTTP/2 (MFSA 2015-142)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7219.json"},{"CVE":"CVE-2015-7216","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291591","bugzilla_description":"CVE-2015-7216 CVE-2015-7217 Mozilla: Linux file chooser crashes on malformed JPEG2000 and TGA images due to flaws in underlying libraries (MFSA 2015-143)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7216.json"},{"CVE":"CVE-2015-7217","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291591","bugzilla_description":"CVE-2015-7216 CVE-2015-7217 Mozilla: Linux file chooser crashes on malformed JPEG2000 and TGA images due to flaws in underlying libraries (MFSA 2015-143)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7217.json"},{"CVE":"CVE-2015-7203","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291593","bugzilla_description":"CVE-2015-7203 CVE-2015-7220 CVE-2015-7221 Mozilla: Buffer overflows found through code inspection (MFSA 2015-144)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7203.json"},{"CVE":"CVE-2015-7220","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291593","bugzilla_description":"CVE-2015-7203 CVE-2015-7220 CVE-2015-7221 Mozilla: Buffer overflows found through code inspection (MFSA 2015-144)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7220.json"},{"CVE":"CVE-2015-7221","severity":"moderate","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291593","bugzilla_description":"CVE-2015-7203 CVE-2015-7220 CVE-2015-7221 Mozilla: Buffer overflows found through code inspection (MFSA 2015-144)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7221.json"},{"CVE":"CVE-2015-7205","severity":"important","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0001","RHSA-2015:2657"],"bugzilla":"1291595","bugzilla_description":"CVE-2015-7205 Mozilla: Underflow through code inspection (MFSA 2015-145)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:38.5.0-1.el6_7","thunderbird-0:38.5.0-1.el7_2","thunderbird-0:38.5.0-1.el5_11","firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7205.json"},{"CVE":"CVE-2015-7213","severity":"important","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0001","RHSA-2015:2657"],"bugzilla":"1291596","bugzilla_description":"CVE-2015-7213 Mozilla: Integer overflow in MP4 playback in 64-bit versions (MFSA 2015-146)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["thunderbird-0:38.5.0-1.el6_7","thunderbird-0:38.5.0-1.el7_2","thunderbird-0:38.5.0-1.el5_11","firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7213.json"},{"CVE":"CVE-2015-7222","severity":"important","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2015:2657"],"bugzilla":"1291597","bugzilla_description":"CVE-2015-7222 Mozilla: Integer underflow and buffer overflow processing MP4 metadata in libstagefright (MFSA 2015-147)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-119","affected_packages":["firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7222.json"},{"CVE":"CVE-2015-7223","severity":"critical","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1291599","bugzilla_description":"CVE-2015-7223 Mozilla: Privilege escalation vulnerabilities in WebExtension APIs (MFSA 2015-148)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7223.json"},{"CVE":"CVE-2015-7214","severity":"important","public_date":"2015-12-16T00:00:00Z","advisories":["RHSA-2016:0001","RHSA-2015:2657"],"bugzilla":"1291600","bugzilla_description":"CVE-2015-7214 Mozilla: Cross-site reading attack through data: and view-source: URIs (MFSA 2015-149)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:38.5.0-1.el6_7","thunderbird-0:38.5.0-1.el7_2","thunderbird-0:38.5.0-1.el5_11","firefox-0:38.5.0-3.el7_2","firefox-0:38.5.0-2.el5_11","firefox-0:38.5.0-2.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7214.json"},{"CVE":"CVE-2015-4513","severity":"critical","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277332","bugzilla_description":"CVE-2015-4513 Mozilla: Miscellaneous memory safety hazards (rv:38.4) (MFSA 2015-116)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4513.json"},{"CVE":"CVE-2015-4514","severity":"critical","public_date":"2015-11-04T00:00:00Z","advisories":[],"bugzilla":"1277334","bugzilla_description":"CVE-2015-4514 Mozilla: Miscellaneous memory safety hazards (rv:42.0) (MFSA 2015-116)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4514.json"},{"CVE":"CVE-2015-4515","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":[],"bugzilla":"1277337","bugzilla_description":"CVE-2015-4515 Mozilla: Information disclosure through NTLM authentication (MFSA 2015-117)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4515.json"},{"CVE":"CVE-2015-4518","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":[],"bugzilla":"1277339","bugzilla_description":"CVE-2015-4518 Mozilla: CSP bypass due to permissive Reader mode whitelist (MFSA 2015-118)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4518.json"},{"CVE":"CVE-2015-7187","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":[],"bugzilla":"1277342","bugzilla_description":"CVE-2015-7187 Mozilla: disabling scripts in Add-on SDK panels has no effect (MFSA 2015-121)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7187.json"},{"CVE":"CVE-2015-7188","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:1982"],"bugzilla":"1277343","bugzilla_description":"CVE-2015-7188 Mozilla: Trailing whitespace in IP address hostnames can bypass same-origin policy (MFSA 2015-122)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["firefox-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7188.json"},{"CVE":"CVE-2015-7189","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277344","bugzilla_description":"CVE-2015-7189 Mozilla: Buffer overflow during image interactions in canvas (MFSA 2015-123)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7189.json"},{"CVE":"CVE-2015-7193","severity":"important","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277346","bugzilla_description":"CVE-2015-7193 Mozilla: CORS preflight is bypassed when non-standard Content-Type headers are received (MFSA 2015-127)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7193.json"},{"CVE":"CVE-2015-7194","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:1982"],"bugzilla":"1277347","bugzilla_description":"CVE-2015-7194 Mozilla: Memory corruption in libjar through zip files (MFSA 2015-128)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7194.json"},{"CVE":"CVE-2015-7195","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":[],"bugzilla":"1277348","bugzilla_description":"CVE-2015-7195 Mozilla: Certain escaped characters in host of Location-header are being treated as non-escaped (MFSA 2015-129)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7195.json"},{"CVE":"CVE-2015-7196","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:1982"],"bugzilla":"1277349","bugzilla_description":"CVE-2015-7196 Mozilla: JavaScript garbage collection crash with Java applet (MFSA 2015-130)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7196.json"},{"CVE":"CVE-2015-7198","severity":"critical","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277350","bugzilla_description":"CVE-2015-7198 CVE-2015-7199 CVE-2015-7200 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7198.json"},{"CVE":"CVE-2015-7199","severity":"critical","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277350","bugzilla_description":"CVE-2015-7198 CVE-2015-7199 CVE-2015-7200 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7199.json"},{"CVE":"CVE-2015-7200","severity":"critical","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277350","bugzilla_description":"CVE-2015-7198 CVE-2015-7199 CVE-2015-7200 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7200.json"},{"CVE":"CVE-2015-7197","severity":"moderate","public_date":"2015-11-04T00:00:00Z","advisories":["RHSA-2015:2519","RHSA-2015:1982"],"bugzilla":"1277351","bugzilla_description":"CVE-2015-7197 Mozilla: Mixed content WebSocket policy bypass through workers (MFSA 2015-132)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:38.4.0-1.el5_11","thunderbird-0:38.4.0-1.el6_7","thunderbird-0:38.4.0-1.el5_11","firefox-0:38.4.0-1.el6_7","firefox-0:38.4.0-1.el7_1","thunderbird-0:38.4.0-1.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7197.json"},{"CVE":"CVE-2015-9274","severity":"low","public_date":"2015-09-29T00:00:00Z","advisories":[],"bugzilla":"1652081","bugzilla_description":"CVE-2015-9274 harfbuzz: DoS due to GPOS and GSUB table mishandling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-4500","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265186","bugzilla_description":"CVE-2015-4500 Mozilla: Miscellaneous memory safety hazards (MFSA 2015-96)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-805","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4500.json"},{"CVE":"CVE-2015-4510","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265190","bugzilla_description":"CVE-2015-4510 Mozilla: Use-after-free with shared workers and IndexedDB (MFSA 2015-104)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4510.json"},{"CVE":"CVE-2015-4509","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265192","bugzilla_description":"CVE-2015-4509 Mozilla: Use-after-free while manipulating HTML media content (MFSA 2015-106)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4509.json"},{"CVE":"CVE-2015-7178","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265201","bugzilla_description":"CVE-2015-7178 CVE-2015-7179 Mozilla: Memory safety errors in libGLES in the ANGLE graphics library (MFSA 2015-113)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-805","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7178.json"},{"CVE":"CVE-2015-7179","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265201","bugzilla_description":"CVE-2015-7178 CVE-2015-7179 Mozilla: Memory safety errors in libGLES in the ANGLE graphics library (MFSA 2015-113)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-805","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7179.json"},{"CVE":"CVE-2015-4503","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265591","bugzilla_description":"CVE-2015-4503 Mozilla: Memory leak in mozTCPSocket to servers (MFSA 2015-97)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4503.json"},{"CVE":"CVE-2015-4504","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265596","bugzilla_description":"CVE-2015-4504 Mozilla: Out of bounds read in QCMS library with ICC V4 profile attributes (MFSA 2015-98)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4504.json"},{"CVE":"CVE-2015-4476","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265603","bugzilla_description":"CVE-2015-4476 Mozilla: Site attribute spoofing on Android by pasting URL with unknown scheme (MFSA 2015-99)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4476.json"},{"CVE":"CVE-2015-4505","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265610","bugzilla_description":"CVE-2015-4505 Mozilla: Arbitrary file manipulation by local user through Mozilla updater (MFSA 2015-100)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4505.json"},{"CVE":"CVE-2015-4506","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1834"],"bugzilla":"1265617","bugzilla_description":"CVE-2015-4506 Mozilla: Buffer overflow in libvpx while parsing vp9 format video (MFSA 2015-101)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["firefox-0:38.3.0-2.el5_11","firefox-0:38.3.0-2.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4506.json"},{"CVE":"CVE-2015-4507","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265621","bugzilla_description":"CVE-2015-4507 Mozilla: Crash when using debugger with SavedStacks in JavaScript (MFSA 2015-102)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4507.json"},{"CVE":"CVE-2015-4508","severity":"low","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265624","bugzilla_description":"CVE-2015-4508 Mozilla: URL spoofing in reader mode (MFSA 2015-103)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4508.json"},{"CVE":"CVE-2015-4511","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1834"],"bugzilla":"1265630","bugzilla_description":"CVE-2015-4511 Mozilla: Buffer overflow while decoding WebM video (MFSA 2015-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["firefox-0:38.3.0-2.el5_11","firefox-0:38.3.0-2.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4511.json"},{"CVE":"CVE-2015-4512","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265769","bugzilla_description":"CVE-2015-4512 Mozilla: Out-of-bounds read during 2D canvas display on Linux 16-bit color depth systems (MFSA 2015-107)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4512.json"},{"CVE":"CVE-2015-4502","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265771","bugzilla_description":"CVE-2015-4502 Mozilla: Scripted proxies can access inner window (MFSA 2015-108)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4502.json"},{"CVE":"CVE-2015-4516","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265775","bugzilla_description":"CVE-2015-4516 Mozilla: JavaScript immutable property enforcement can be bypassed (MFSA 2015-109)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4516.json"},{"CVE":"CVE-2015-4519","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265778","bugzilla_description":"CVE-2015-4519 Mozilla: Dragging and dropping images exposes final URL after redirects (MFSA 2015-110)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4519.json"},{"CVE":"CVE-2015-4520","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265781","bugzilla_description":"CVE-2015-4520 Mozilla: Errors in the handling of CORS preflight request headers (MFSA 2015-111)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-284","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4520.json"},{"CVE":"CVE-2015-4517","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4517.json"},{"CVE":"CVE-2015-4521","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4521.json"},{"CVE":"CVE-2015-4522","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4522.json"},{"CVE":"CVE-2015-7174","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7174.json"},{"CVE":"CVE-2015-7175","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7175.json"},{"CVE":"CVE-2015-7176","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7176.json"},{"CVE":"CVE-2015-7177","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7177.json"},{"CVE":"CVE-2015-7180","severity":"important","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:1852","RHSA-2015:1834"],"bugzilla":"1265784","bugzilla_description":"CVE-2015-4517 CVE-2015-4521 CVE-2015-4522 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.3.0-2.el5_11","thunderbird-0:38.3.0-1.ael7b_1","thunderbird-0:38.3.0-1.el5_11","firefox-0:38.3.0-2.el6_7","thunderbird-0:38.3.0-1.el6_7","firefox-0:38.3.0-2.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7180.json"},{"CVE":"CVE-2015-7327","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1265785","bugzilla_description":"CVE-2015-7327 Mozilla: Information disclosure via the High Resolution Time API (MFSA 2015-114)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7327.json"},{"CVE":"CVE-2015-4501","severity":"critical","public_date":"2015-09-22T00:00:00Z","advisories":[],"bugzilla":"1266098","bugzilla_description":"CVE-2015-4501 Mozilla: Miscellaneous memory safety hazards (MFSA 2015-96)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4501.json"},{"CVE":"CVE-2015-6525","severity":"moderate","public_date":"2015-08-24T00:00:00Z","advisories":[],"bugzilla":"1256797","bugzilla_description":"CVE-2015-6525 libevent: multiple integer overflows in the evbuffer APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6525.json"},{"CVE":"CVE-2015-4473","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1586"],"bugzilla":"1252271","bugzilla_description":"CVE-2015-4473 Mozilla: Miscellaneous memory safety hazards (rv:38.2) (MFSA 2015-79)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4473.json"},{"CVE":"CVE-2015-4474","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252273","bugzilla_description":"CVE-2015-4474 Mozilla: Miscellaneous memory safety hazards (rv:40.0) (MFSA 2015-79)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4474.json"},{"CVE":"CVE-2015-4475","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252276","bugzilla_description":"CVE-2015-4475 Mozilla: Out-of-bounds read with malformed MP3 file (MFSA 2015-80)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4475.json"},{"CVE":"CVE-2015-4477","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252277","bugzilla_description":"CVE-2015-4477 Mozilla: Use-after-free in MediaStream playback (MFSA 2015-81)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4477.json"},{"CVE":"CVE-2015-4478","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252282","bugzilla_description":"CVE-2015-4478 Mozilla: Redefinition of non-configurable JavaScript object properties (MFSA 2015-82)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4478.json"},{"CVE":"CVE-2015-4479","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252285","bugzilla_description":"CVE-2015-4479 CVE-2015-4480 CVE-2015-4493 Mozilla: Overflow issues in libstagefright (MFSA 2015-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-190|CWE-119)","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4479.json"},{"CVE":"CVE-2015-4480","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252285","bugzilla_description":"CVE-2015-4479 CVE-2015-4480 CVE-2015-4493 Mozilla: Overflow issues in libstagefright (MFSA 2015-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-190|CWE-119)","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4480.json"},{"CVE":"CVE-2015-4493","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252285","bugzilla_description":"CVE-2015-4479 CVE-2015-4480 CVE-2015-4493 Mozilla: Overflow issues in libstagefright (MFSA 2015-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-190|CWE-119)","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4493.json"},{"CVE":"CVE-2015-4483","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252288","bugzilla_description":"CVE-2015-4483 Mozilla: Feed: protocol with POST bypasses mixed content protections (MFSA 2015-86)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4483.json"},{"CVE":"CVE-2015-4484","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252289","bugzilla_description":"CVE-2015-4484 Mozilla: Crash when using shared memory in JavaScript (MFSA 2015-87)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4484.json"},{"CVE":"CVE-2015-4491","severity":"important","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1694","RHSA-2015:1586"],"bugzilla":"1252290","bugzilla_description":"CVE-2015-4491 Mozilla: Heap overflow in gdk-pixbuf when scaling bitmap images (MFSA 2015-88)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","gdk-pixbuf2-0:2.24.1-6.el6_7","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","gdk-pixbuf2-0:2.28.2-5.el7_1","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4491.json"},{"CVE":"CVE-2015-4485","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252292","bugzilla_description":"CVE-2015-4485 CVE-2015-4486 Mozilla: Buffer overflows on Libvpx when decoding WebM video (MFSA 2015-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4485.json"},{"CVE":"CVE-2015-4486","severity":"critical","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252292","bugzilla_description":"CVE-2015-4485 CVE-2015-4486 Mozilla: Buffer overflows on Libvpx when decoding WebM video (MFSA 2015-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4486.json"},{"CVE":"CVE-2015-4487","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1586"],"bugzilla":"1252293","bugzilla_description":"CVE-2015-4487 CVE-2015-4488 CVE-2015-4489 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4487.json"},{"CVE":"CVE-2015-4488","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1586"],"bugzilla":"1252293","bugzilla_description":"CVE-2015-4487 CVE-2015-4488 CVE-2015-4489 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4488.json"},{"CVE":"CVE-2015-4489","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1682","RHSA-2015:1586"],"bugzilla":"1252293","bugzilla_description":"CVE-2015-4487 CVE-2015-4488 CVE-2015-4489 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.2.0-4.el5_11","thunderbird-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-4.el6_7","thunderbird-0:38.2.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4489.json"},{"CVE":"CVE-2015-4490","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1252294","bugzilla_description":"CVE-2015-4490 Mozilla: Mozilla Content Security Policy allows for asterisk wildcards in violation of CSP specification (MFSA 2015-91)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4490.json"},{"CVE":"CVE-2015-4492","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:1586"],"bugzilla":"1252295","bugzilla_description":"CVE-2015-4492 Mozilla: Use-after-free in XMLHttpRequest with shared workers (MFSA 2015-92)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.2.0-4.el5_11","firefox-0:38.2.0-4.ael7b_1","firefox-0:38.2.0-4.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4492.json"},{"CVE":"CVE-2015-4495","severity":"important","public_date":"2015-08-06T00:00:00Z","advisories":["RHSA-2015:1581"],"bugzilla":"1251318","bugzilla_description":"CVE-2015-4495 Mozilla: Same origin violation and local file stealing via PDF reader (MFSA 2015-78)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:38.1.1-1.el7_1","firefox-0:38.1.1-1.el5_11","firefox-0:38.1.1-1.el6_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4495.json"},{"CVE":"CVE-2015-2724","severity":"important","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236947","bugzilla_description":"CVE-2015-2724 CVE-2015-2725 Mozilla: Miscellaneous memory safety hazards (rv:31.8 / rv:38.1) (MFSA 2015-59)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2724.json"},{"CVE":"CVE-2015-2725","severity":"important","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236947","bugzilla_description":"CVE-2015-2724 CVE-2015-2725 Mozilla: Miscellaneous memory safety hazards (rv:31.8 / rv:38.1) (MFSA 2015-59)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2725.json"},{"CVE":"CVE-2015-2726","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":[],"bugzilla":"1236948","bugzilla_description":"CVE-2015-2726 Mozilla: Miscellaneous memory safety hazards (rv:38.1) (MFSA 2015-59)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2726.json"},{"CVE":"CVE-2015-2727","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236950","bugzilla_description":"CVE-2015-2727 Mozilla: Local files or privileged URLs in pages can be opened into new tabs (MFSA 2015-60)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2727.json"},{"CVE":"CVE-2015-2728","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236951","bugzilla_description":"CVE-2015-2728 Mozilla: Type confusion in Indexed Database Manager (MFSA 2015-61)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-843","affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2728.json"},{"CVE":"CVE-2015-2729","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236952","bugzilla_description":"CVE-2015-2729 Mozilla: Out-of-bound read while computing an oscillator rendering range in Web Audio (MFSA 2015-62)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2729.json"},{"CVE":"CVE-2015-2731","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236953","bugzilla_description":"CVE-2015-2731 Mozilla: Use-after-free in Content Policy due to microtask execution error (MFSA 2015-63)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2731.json"},{"CVE":"CVE-2015-2722","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236955","bugzilla_description":"CVE-2015-2722 CVE-2015-2733 Mozilla: Use-after-free in workers while using XMLHttpRequest (MFSA 2015-65)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2722.json"},{"CVE":"CVE-2015-2733","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236955","bugzilla_description":"CVE-2015-2722 CVE-2015-2733 Mozilla: Use-after-free in workers while using XMLHttpRequest (MFSA 2015-65)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2733.json"},{"CVE":"CVE-2015-2734","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2734.json"},{"CVE":"CVE-2015-2735","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2735.json"},{"CVE":"CVE-2015-2736","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2736.json"},{"CVE":"CVE-2015-2737","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2737.json"},{"CVE":"CVE-2015-2738","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2738.json"},{"CVE":"CVE-2015-2739","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2739.json"},{"CVE":"CVE-2015-2740","severity":"critical","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236956","bugzilla_description":"CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2740.json"},{"CVE":"CVE-2015-2741","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207","RHSA-2015:1455"],"bugzilla":"1236963","bugzilla_description":"CVE-2015-2741 Mozilla: Key pinning is ignored when overridable errors are encountered (MFSA 2015-67)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:31.8.0-1.el6_6","firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","thunderbird-0:31.8.0-1.el5_11","firefox-0:38.1.0-1.el6_6","thunderbird-0:31.8.0-1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2741.json"},{"CVE":"CVE-2015-2743","severity":"moderate","public_date":"2015-07-02T00:00:00Z","advisories":["RHSA-2015:1207"],"bugzilla":"1236964","bugzilla_description":"CVE-2015-2743 Mozilla: Privilege escalation through internal workers (MFSA 2015-69)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:38.1.0-1.el7_1","firefox-0:38.1.0-1.el5_11","firefox-0:38.1.0-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2743.json"},{"CVE":"CVE-2015-2708","severity":"critical","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988","RHSA-2015:1012"],"bugzilla":"1220597","bugzilla_description":"CVE-2015-2708 Mozilla: Miscellaneous memory safety hazards (rv:31.7) (MFSA 2015-46)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:31.7.0-1.el6_6","firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1","thunderbird-0:31.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2708.json"},{"CVE":"CVE-2015-2709","severity":"critical","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220599","bugzilla_description":"CVE-2015-2709 Mozilla: Miscellaneous memory safety hazards (rv:38.0) (MFSA 2015-46)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2709.json"},{"CVE":"CVE-2015-0797","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988"],"bugzilla":"1220600","bugzilla_description":"CVE-2015-0797 Mozilla: Buffer overflow parsing H.264 video with Linux Gstreamer (MFSA 2015-47)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0797.json"},{"CVE":"CVE-2015-2710","severity":"critical","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988","RHSA-2015:1012"],"bugzilla":"1220601","bugzilla_description":"CVE-2015-2710 Mozilla: Buffer overflow with SVG content and CSS (MFSA 2015-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["thunderbird-0:31.7.0-1.el6_6","firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1","thunderbird-0:31.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2710.json"},{"CVE":"CVE-2015-2711","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220603","bugzilla_description":"CVE-2015-2711 Mozilla: <meta name=\"referrer\"> is ignored for navigations from the context menu and via a middle-click (MFSA 2015-49)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2711.json"},{"CVE":"CVE-2015-2712","severity":"critical","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220604","bugzilla_description":"CVE-2015-2712 Mozilla: Out-of-bounds read and write in asm.js validation (MFSA 2015-50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2712.json"},{"CVE":"CVE-2015-2713","severity":"critical","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988","RHSA-2015:1012"],"bugzilla":"1220605","bugzilla_description":"CVE-2015-2713 Mozilla: Use-after-free during text processing with vertical text enabled (MFSA 2015-51)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:31.7.0-1.el6_6","firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1","thunderbird-0:31.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2713.json"},{"CVE":"CVE-2015-2715","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220606","bugzilla_description":"CVE-2015-2715 Mozilla: Use-after-free due to Media Decoder Thread creation during shutdown (MFSA 2015-53)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2715.json"},{"CVE":"CVE-2015-2716","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:0988","RHBA-2020:1539","RHSA-2020:1011","RHSA-2015:1012","RHSA-2020:2508","RHBA-2020:1540"],"bugzilla":"1220607","bugzilla_description":"CVE-2015-2716 expat: Integer overflow leading to buffer overflow in XML_GetBuffer()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","expat-0:2.1.0-11.el7_7","thunderbird-0:31.7.0-1.el6_6","firefox-0:38.0-4.el5_11","firefox-0:38.0-4.el6_6","firefox-0:38.0-3.el7_1","expat-0:2.1.0-11.el7","thunderbird-0:31.7.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2716.json"},{"CVE":"CVE-2015-2717","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220608","bugzilla_description":"CVE-2015-2717 Mozilla: Buffer overflow and out-of-bounds read while parsing MP4 video metadata (MFSA 2015-55)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2717.json"},{"CVE":"CVE-2015-2718","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1220609","bugzilla_description":"CVE-2015-2718 Mozilla: Untrusted site hosting trusted page can intercept webchannel responses (MFSA 2015-56)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2718.json"},{"CVE":"CVE-2015-2706","severity":"critical","public_date":"2015-04-20T00:00:00Z","advisories":[],"bugzilla":"1213935","bugzilla_description":"CVE-2015-2706 Mozilla: Memory corruption during failed plugin initialization (MFSA 2015-45)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2706.json"},{"CVE":"CVE-2015-0799","severity":"important","public_date":"2015-04-03T00:00:00Z","advisories":[],"bugzilla":"1208731","bugzilla_description":"CVE-2015-0799 Mozilla: Certificate verification bypass through the HTTP/2 Alt-Svc header (MFSA 2015-44)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0799.json"},{"CVE":"CVE-2015-0815","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:0766","RHSA-2015:0771"],"bugzilla":"1207068","bugzilla_description":"CVE-2015-0815 Mozilla: Miscellaneous memory safety hazards (rv:31.6) (MFSA 2015-30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["firefox-0:31.6.0-2.el5_11","thunderbird-0:31.6.0-1.ael7b_1","firefox-0:31.6.0-2.ael7b_1","firefox-0:31.6.0-2.el6_6","thunderbird-0:31.6.0-1.el6_6","thunderbird-0:31.6.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0815.json"},{"CVE":"CVE-2015-0814","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207070","bugzilla_description":"CVE-2015-0814 Mozilla: Miscellaneous memory safety hazards (rv:37.0) (MFSA 2015-30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0814.json"},{"CVE":"CVE-2015-0812","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207071","bugzilla_description":"CVE-2015-0812 Mozilla: Add-on lightweight theme installation approval bypassed through MITM attack (MFSA 2015-32)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-306","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0812.json"},{"CVE":"CVE-2015-0816","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:0766","RHSA-2015:0771"],"bugzilla":"1207072","bugzilla_description":"CVE-2015-0816 Mozilla: resource:// documents can load privileged pages (MFSA 2015-33)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["firefox-0:31.6.0-2.el5_11","thunderbird-0:31.6.0-1.ael7b_1","firefox-0:31.6.0-2.ael7b_1","firefox-0:31.6.0-2.el6_6","thunderbird-0:31.6.0-1.el6_6","thunderbird-0:31.6.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0816.json"},{"CVE":"CVE-2015-0811","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207073","bugzilla_description":"CVE-2015-0811 Mozilla: Out of bounds read in QCMS library (MFSA 2015-34)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0811.json"},{"CVE":"CVE-2015-0808","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207075","bugzilla_description":"CVE-2015-0808 Mozilla: Incorrect memory management for simple-type arrays in WebRTC (MFSA 2015-36)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0808.json"},{"CVE":"CVE-2015-0807","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:0766","RHSA-2015:0771"],"bugzilla":"1207076","bugzilla_description":"CVE-2015-0807 Mozilla: CORS requests should not follow 30x redirections after preflight (MFSA 2015-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-352","affected_packages":["firefox-0:31.6.0-2.el5_11","thunderbird-0:31.6.0-1.ael7b_1","firefox-0:31.6.0-2.ael7b_1","firefox-0:31.6.0-2.el6_6","thunderbird-0:31.6.0-1.el6_6","thunderbird-0:31.6.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0807.json"},{"CVE":"CVE-2015-0805","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207078","bugzilla_description":"CVE-2015-0805 CVE-2015-0806 Mozilla: Memory corruption crashes in Off Main Thread Compositing (MFSA 2015-38)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0805.json"},{"CVE":"CVE-2015-0806","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207078","bugzilla_description":"CVE-2015-0805 CVE-2015-0806 Mozilla: Memory corruption crashes in Off Main Thread Compositing (MFSA 2015-38)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0806.json"},{"CVE":"CVE-2015-0803","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207081","bugzilla_description":"CVE-2015-0803 CVE-2015-0804 Mozilla: Use-after-free due to type confusion flaws (MFSA 2015-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0803.json"},{"CVE":"CVE-2015-0804","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207081","bugzilla_description":"CVE-2015-0803 CVE-2015-0804 Mozilla: Use-after-free due to type confusion flaws (MFSA 2015-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0804.json"},{"CVE":"CVE-2015-0801","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:0766","RHSA-2015:0771"],"bugzilla":"1207084","bugzilla_description":"CVE-2015-0801 Mozilla: Same-origin bypass through anchor navigation (MFSA 2015-40)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-358","affected_packages":["firefox-0:31.6.0-2.el5_11","thunderbird-0:31.6.0-1.ael7b_1","firefox-0:31.6.0-2.ael7b_1","firefox-0:31.6.0-2.el6_6","thunderbird-0:31.6.0-1.el6_6","thunderbird-0:31.6.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0801.json"},{"CVE":"CVE-2015-0802","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":[],"bugzilla":"1207086","bugzilla_description":"CVE-2015-0802 Mozilla: Windows can retain access to privileged content on navigation to unprivileged pages (MFSA 2015-42)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0802.json"},{"CVE":"CVE-2015-0813","severity":"critical","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:0766","RHSA-2015:0771"],"bugzilla":"1207088","bugzilla_description":"CVE-2015-0813 Mozilla: Use-after-free when using the Fluendo MP3 GStreamer plugin (MFSA 2015-31)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:31.6.0-2.el5_11","thunderbird-0:31.6.0-1.ael7b_1","firefox-0:31.6.0-2.ael7b_1","firefox-0:31.6.0-2.el6_6","thunderbird-0:31.6.0-1.el6_6","thunderbird-0:31.6.0-1.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0813.json"},{"CVE":"CVE-2015-0817","severity":"critical","public_date":"2015-03-21T00:00:00Z","advisories":["RHSA-2015:0718"],"bugzilla":"1204362","bugzilla_description":"CVE-2015-0817 Mozilla: Code execution through incorrect JavaScript bounds checking elimination (MFSA 2015-29)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:31.5.3-3.ael7b_1","firefox-0:31.5.3-1.el5_11","firefox-0:31.5.3-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0817.json"},{"CVE":"CVE-2015-0818","severity":"critical","public_date":"2015-03-21T00:00:00Z","advisories":["RHSA-2015:0718"],"bugzilla":"1204363","bugzilla_description":"CVE-2015-0818 Mozilla: Privilege escalation through SVG navigation (MFSA 2015-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:31.5.3-3.ael7b_1","firefox-0:31.5.3-1.el5_11","firefox-0:31.5.3-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0818.json"},{"CVE":"CVE-2012-6702","severity":"moderate","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1319731","bugzilla_description":"CVE-2012-6702 expat: Using XML_Parse before rand() results into non-random output","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6702.json"},{"CVE":"CVE-2015-0836","severity":"critical","public_date":"2015-02-24T00:00:00Z","advisories":["RHSA-2015:0642","RHSA-2015:0266","RHSA-2015:0265","RHSA-2015:0629"],"bugzilla":"1195605","bugzilla_description":"CVE-2015-0836 Mozilla: Miscellaneous memory safety hazards (rv:31.5) (MFSA 2015-11)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:31.5.0-2.ael7b_1","firefox-0:31.5.0-1.el5_11","firefox-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-1.el5_11","thunderbird-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0836.json"},{"CVE":"CVE-2015-0835","severity":"critical","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195609","bugzilla_description":"CVE-2015-0835 Mozilla: Miscellaneous memory safety hazards (rv:36.0) (MFSA 2015-11)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0835.json"},{"CVE":"CVE-2015-0832","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195610","bugzilla_description":"CVE-2015-0832 Mozilla: Appended period to hostnames can bypass HPKP and HSTS protections (MFSA 2015-13)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0832.json"},{"CVE":"CVE-2015-0830","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195613","bugzilla_description":"CVE-2015-0830 Mozilla: Malicious WebGL content crash when writing strings (MFSA 2015-14)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0830.json"},{"CVE":"CVE-2015-0834","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195616","bugzilla_description":"CVE-2015-0834 Mozilla: TLS TURN and STUN connections silently fail to simple TCP connections (MFSA 2015-15)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-319","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0834.json"},{"CVE":"CVE-2015-0831","severity":"critical","public_date":"2015-02-24T00:00:00Z","advisories":["RHSA-2015:0642","RHSA-2015:0266","RHSA-2015:0265","RHSA-2015:0629"],"bugzilla":"1195619","bugzilla_description":"CVE-2015-0831 Mozilla: Use-after-free in IndexedDB (MFSA 2015-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:31.5.0-2.ael7b_1","firefox-0:31.5.0-1.el5_11","firefox-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-1.el5_11","thunderbird-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0831.json"},{"CVE":"CVE-2015-0829","severity":"critical","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195620","bugzilla_description":"CVE-2015-0829 Mozilla: Buffer overflow in libstagefright during MP4 video playback (MFSA 2015-17)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0829.json"},{"CVE":"CVE-2015-0828","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195621","bugzilla_description":"CVE-2015-0828 Mozilla: Double-free when using non-default memory allocators with a zero-length XHR (MFSA 2015-18)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0828.json"},{"CVE":"CVE-2015-0827","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":["RHSA-2015:0642","RHSA-2015:0266","RHSA-2015:0265","RHSA-2015:0629"],"bugzilla":"1195623","bugzilla_description":"CVE-2015-0827 Mozilla: Out-of-bounds read and write while rendering SVG content (MFSA 2015-19)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["firefox-0:31.5.0-2.ael7b_1","firefox-0:31.5.0-1.el5_11","firefox-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-1.el5_11","thunderbird-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0827.json"},{"CVE":"CVE-2015-0826","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195629","bugzilla_description":"CVE-2015-0826 Mozilla: Buffer overflow during CSS restyling (MFSA 2015-20)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0826.json"},{"CVE":"CVE-2015-0825","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195631","bugzilla_description":"CVE-2015-0825 Mozilla: Buffer underflow during MP3 playback (MFSA 2015-21)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0825.json"},{"CVE":"CVE-2015-0824","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195633","bugzilla_description":"CVE-2015-0824 Mozilla: Crash using DrawTarget in Cairo graphics library (MFSA 2015-22)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0824.json"},{"CVE":"CVE-2015-0823","severity":"low","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195636","bugzilla_description":"CVE-2015-0823 Mozilla: Use-after-free in Developer Console date with OpenType Sanitiser (MFSA 2015-23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0823.json"},{"CVE":"CVE-2015-0822","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":["RHSA-2015:0642","RHSA-2015:0266","RHSA-2015:0265","RHSA-2015:0629"],"bugzilla":"1195638","bugzilla_description":"CVE-2015-0822 Mozilla: Reading of local files through manipulation of form autocomplete (MFSA 2015-24)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["firefox-0:31.5.0-2.ael7b_1","firefox-0:31.5.0-1.el5_11","firefox-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-1.el5_11","thunderbird-0:31.5.0-1.el6_6","thunderbird-0:31.5.0-2.el7_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0822.json"},{"CVE":"CVE-2015-0821","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195639","bugzilla_description":"CVE-2015-0821 Mozilla: Local files or privileged URLs in pages can be opened into new tabs (MFSA 2015-25)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0821.json"},{"CVE":"CVE-2015-0819","severity":"moderate","public_date":"2015-02-24T00:00:00Z","advisories":[],"bugzilla":"1195640","bugzilla_description":"CVE-2015-0819 Mozilla: UI Tour whitelisted sites in background tab can spoof foreground tabs (MFA 2015-26)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0819.json"},{"CVE":"CVE-2014-8635","severity":"critical","public_date":"2015-01-15T00:00:00Z","advisories":[],"bugzilla":"1180963","bugzilla_description":"CVE-2014-8635 Mozilla: Miscellaneous memory safety hazards (rv:35.0) (MFSA 2015-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8635.json"},{"CVE":"CVE-2014-8637","severity":"moderate","public_date":"2015-01-15T00:00:00Z","advisories":[],"bugzilla":"1180964","bugzilla_description":"CVE-2014-8637 Mozilla: Uninitialized memory use during bitmap rendering (MFSA 2015-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8637.json"},{"CVE":"CVE-2014-8640","severity":"low","public_date":"2015-01-15T00:00:00Z","advisories":[],"bugzilla":"1180970","bugzilla_description":"CVE-2014-8640 Mozilla: Read of uninitialized memory in Web Audio (MFSA 2015-05)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8640.json"},{"CVE":"CVE-2014-8642","severity":"moderate","public_date":"2015-01-15T00:00:00Z","advisories":[],"bugzilla":"1180974","bugzilla_description":"CVE-2014-8642 Mozilla: Delegated OCSP responder certificates failure with id-pkix-ocsp-nocheck extension (MFSA 2015-08)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8642.json"},{"CVE":"CVE-2014-8634","severity":"critical","public_date":"2015-01-13T00:00:00Z","advisories":["RHSA-2015:0047","RHSA-2015:0046"],"bugzilla":"1180962","bugzilla_description":"CVE-2014-8634 Mozilla: Miscellaneous memory safety hazards (rv:31.4) (MFSA 2015-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["thunderbird-0:31.4.0-1.el6_6","firefox-0:31.4.0-1.el6_6","thunderbird-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8634.json"},{"CVE":"CVE-2014-8638","severity":"moderate","public_date":"2015-01-13T00:00:00Z","advisories":["RHSA-2015:0047","RHSA-2015:0046"],"bugzilla":"1180966","bugzilla_description":"CVE-2014-8638 Mozilla: sendBeacon requests lack an Origin header (MFSA 2015-03)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-352","affected_packages":["thunderbird-0:31.4.0-1.el6_6","firefox-0:31.4.0-1.el6_6","thunderbird-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8638.json"},{"CVE":"CVE-2014-8639","severity":"moderate","public_date":"2015-01-13T00:00:00Z","advisories":["RHSA-2015:0047","RHSA-2015:0046"],"bugzilla":"1180967","bugzilla_description":"CVE-2014-8639 Mozilla: Cookie injection through Proxy Authenticate responses (MFSA 2015-04)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-88","affected_packages":["thunderbird-0:31.4.0-1.el6_6","firefox-0:31.4.0-1.el6_6","thunderbird-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8639.json"},{"CVE":"CVE-2014-8641","severity":"important","public_date":"2015-01-13T00:00:00Z","advisories":["RHSA-2015:0046"],"bugzilla":"1180973","bugzilla_description":"CVE-2014-8641 Mozilla: Read-after-free in WebRTC (MFSA 2015-06)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:31.4.0-1.el6_6","firefox-0:31.4.0-1.el5_11","firefox-0:31.4.0-1.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8641.json"},{"CVE":"CVE-2014-6272","severity":"moderate","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1144646","bugzilla_description":"CVE-2014-6272 libevent: potential heap overflow in buffer/bufferevent APIs","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->(CWE-122|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6272.json"},{"CVE":"CVE-2014-8631","severity":"moderate","public_date":"2014-12-03T00:00:00Z","advisories":[],"bugzilla":"1169211","bugzilla_description":"CVE-2014-8631 CVE-2014-8632 Mozilla: Privileged access to security wrapped protected objects (MFSA 2014-91)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8631.json"},{"CVE":"CVE-2014-8632","severity":"moderate","public_date":"2014-12-03T00:00:00Z","advisories":[],"bugzilla":"1169211","bugzilla_description":"CVE-2014-8631 CVE-2014-8632 Mozilla: Privileged access to security wrapped protected objects (MFSA 2014-91)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8632.json"},{"CVE":"CVE-2014-1587","severity":"critical","public_date":"2014-12-02T00:00:00Z","advisories":["RHSA-2014:1924","RHSA-2014:1919"],"bugzilla":"1169201","bugzilla_description":"CVE-2014-1587 Mozilla: Miscellaneous memory safety hazards (rv:31.3) (MFSA 2014-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["firefox-0:31.3.0-3.el7_0","thunderbird-0:31.3.0-1.el5_11","firefox-0:31.3.0-4.el5_11","thunderbird-0:31.3.0-1.el6_6","firefox-0:31.3.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1587.json"},{"CVE":"CVE-2014-1588","severity":"critical","public_date":"2014-12-02T00:00:00Z","advisories":[],"bugzilla":"1169204","bugzilla_description":"CVE-2014-1588 Mozilla: Miscellaneous memory safety hazards (rv:34.0) (MFSA 2014-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1588.json"},{"CVE":"CVE-2014-1589","severity":"moderate","public_date":"2014-12-02T00:00:00Z","advisories":[],"bugzilla":"1169205","bugzilla_description":"CVE-2014-1589 Mozilla: XBL bindings accessible via improper CSS declarations (MFSA 2014-84)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1589.json"},{"CVE":"CVE-2014-1590","severity":"low","public_date":"2014-12-02T00:00:00Z","advisories":["RHSA-2014:1924","RHSA-2014:1919"],"bugzilla":"1169206","bugzilla_description":"CVE-2014-1590 Mozilla: XMLHttpRequest crashes with some input streams (MFSA 2014-85)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["firefox-0:31.3.0-3.el7_0","thunderbird-0:31.3.0-1.el5_11","firefox-0:31.3.0-4.el5_11","thunderbird-0:31.3.0-1.el6_6","firefox-0:31.3.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1590.json"},{"CVE":"CVE-2014-1591","severity":"moderate","public_date":"2014-12-02T00:00:00Z","advisories":[],"bugzilla":"1169207","bugzilla_description":"CVE-2014-1591 Mozilla: CSP leaks redirect data via violation reports (MFSA 2014-86)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1591.json"},{"CVE":"CVE-2014-1592","severity":"critical","public_date":"2014-12-02T00:00:00Z","advisories":["RHSA-2014:1924","RHSA-2014:1919"],"bugzilla":"1169208","bugzilla_description":"CVE-2014-1592 Mozilla: Use-after-free during HTML5 parsing (MFSA 2014-87)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:31.3.0-3.el7_0","thunderbird-0:31.3.0-1.el5_11","firefox-0:31.3.0-4.el5_11","thunderbird-0:31.3.0-1.el6_6","firefox-0:31.3.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1592.json"},{"CVE":"CVE-2014-1593","severity":"critical","public_date":"2014-12-02T00:00:00Z","advisories":["RHSA-2014:1924","RHSA-2014:1919"],"bugzilla":"1169209","bugzilla_description":"CVE-2014-1593 Mozilla: Buffer overflow while parsing media content (MFSA 2014-88)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["firefox-0:31.3.0-3.el7_0","thunderbird-0:31.3.0-1.el5_11","firefox-0:31.3.0-4.el5_11","thunderbird-0:31.3.0-1.el6_6","firefox-0:31.3.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1593.json"},{"CVE":"CVE-2014-1594","severity":"moderate","public_date":"2014-12-02T00:00:00Z","advisories":["RHSA-2014:1924","RHSA-2014:1919"],"bugzilla":"1169210","bugzilla_description":"CVE-2014-1594 Mozilla: Bad casting from the BasicThebesLayer to BasicContainerLayer (MFSA 2014-89)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-749","affected_packages":["firefox-0:31.3.0-3.el7_0","thunderbird-0:31.3.0-1.el5_11","firefox-0:31.3.0-4.el5_11","thunderbird-0:31.3.0-1.el6_6","firefox-0:31.3.0-3.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1594.json"},{"CVE":"CVE-2014-1574","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1647","RHSA-2014:1635"],"bugzilla":"1152356","bugzilla_description":"CVE-2014-1574 Mozilla: Miscellaneous memory safety hazards (rv:31.2) (MFSA 2014-74)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:31.2.0-3.el7_0","thunderbird-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11","thunderbird-0:31.2.0-2.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1574.json"},{"CVE":"CVE-2014-1575","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152357","bugzilla_description":"CVE-2014-1575 Mozilla: Miscellaneous memory safety hazards (rv:33.0) (MFSA 2014-74)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1575.json"},{"CVE":"CVE-2014-1576","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1635"],"bugzilla":"1152358","bugzilla_description":"CVE-2014-1576 Mozilla: Buffer overflow during CSS manipulation (MFSA 2014-75)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:31.2.0-3.el7_0","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1576.json"},{"CVE":"CVE-2014-1577","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1647","RHSA-2014:1635"],"bugzilla":"1152359","bugzilla_description":"CVE-2014-1577 Mozilla: Web Audio memory corruption issues with custom waveforms (MFSA 2014-76)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:31.2.0-3.el7_0","thunderbird-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11","thunderbird-0:31.2.0-2.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1577.json"},{"CVE":"CVE-2014-1578","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1647","RHSA-2014:1635"],"bugzilla":"1152361","bugzilla_description":"CVE-2014-1578 Mozilla: Out-of-bounds write with WebM video (MFSA 2014-77)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["firefox-0:31.2.0-3.el7_0","thunderbird-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11","thunderbird-0:31.2.0-2.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1578.json"},{"CVE":"CVE-2014-1580","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152362","bugzilla_description":"CVE-2014-1580 Mozilla: Further uninitialized memory use during GIF rendering (MFSA 2014-78)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1580.json"},{"CVE":"CVE-2014-1581","severity":"critical","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1647","RHSA-2014:1635"],"bugzilla":"1152363","bugzilla_description":"CVE-2014-1581 Mozilla: Use-after-free interacting with text directionality (MFSA 2014-79)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:31.2.0-3.el7_0","thunderbird-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11","thunderbird-0:31.2.0-2.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1581.json"},{"CVE":"CVE-2014-1582","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152364","bugzilla_description":"CVE-2014-1582 CVE-2014-1584 Mozilla: Key pinning bypasses (MFSA 2014-80)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1582.json"},{"CVE":"CVE-2014-1584","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152364","bugzilla_description":"CVE-2014-1582 CVE-2014-1584 Mozilla: Key pinning bypasses (MFSA 2014-80)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1584.json"},{"CVE":"CVE-2014-1585","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152366","bugzilla_description":"CVE-2014-1585 CVE-2014-1586 Mozilla: Inconsistent video sharing within iframe (MFSA 2014-81)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1585.json"},{"CVE":"CVE-2014-1586","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1152366","bugzilla_description":"CVE-2014-1585 CVE-2014-1586 Mozilla: Inconsistent video sharing within iframe (MFSA 2014-81)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1586.json"},{"CVE":"CVE-2014-1583","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2014:1635"],"bugzilla":"1152683","bugzilla_description":"CVE-2014-1583 Mozilla: Accessing cross-origin objects via the Alarms API (MFSA 2014-82)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:31.2.0-3.el7_0","firefox-0:31.2.0-3.el6_6","firefox-0:31.2.0-3.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1583.json"},{"CVE":"CVE-2014-9766","severity":"moderate","public_date":"2014-10-14T00:00:00Z","advisories":[],"bugzilla":"1311882","bugzilla_description":"CVE-2014-9766 pixman: integer overflow in create_bits function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9766.json"},{"CVE":"CVE-2014-1562","severity":"critical","public_date":"2014-09-03T00:00:00Z","advisories":["RHSA-2014:1145","RHSA-2014:1144"],"bugzilla":"1135862","bugzilla_description":"CVE-2014-1562 Mozilla: Miscellaneous memory safety hazards (rv:rv:24.8) (MFSA 2014-67)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.8.0-1.el6_5","firefox-0:24.8.0-1.el7_0","thunderbird-0:24.8.0-1.el6_5","thunderbird-0:24.8.0-1.el5_10","firefox-0:24.8.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1562.json"},{"CVE":"CVE-2014-1553","severity":"critical","public_date":"2014-09-03T00:00:00Z","advisories":[],"bugzilla":"1135863","bugzilla_description":"CVE-2014-1553 CVE-2014-1554 Mozilla: Miscellaneous memory safety hazards (rv:32.0 / rv:31.1) (MFSA 2014-67)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1553.json"},{"CVE":"CVE-2014-1554","severity":"critical","public_date":"2014-09-03T00:00:00Z","advisories":[],"bugzilla":"1135863","bugzilla_description":"CVE-2014-1553 CVE-2014-1554 Mozilla: Miscellaneous memory safety hazards (rv:32.0 / rv:31.1) (MFSA 2014-67)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1554.json"},{"CVE":"CVE-2014-1563","severity":"critical","public_date":"2014-09-03T00:00:00Z","advisories":[],"bugzilla":"1135864","bugzilla_description":"CVE-2014-1563 Mozilla: Use-after-free during DOM interactions with SVG (MFSA 2014-68)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1563.json"},{"CVE":"CVE-2014-1564","severity":"moderate","public_date":"2014-09-03T00:00:00Z","advisories":[],"bugzilla":"1135865","bugzilla_description":"CVE-2014-1564 Mozilla: Uninitialized memory use during GIF rendering (MFSA 2014-69)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1564.json"},{"CVE":"CVE-2014-1565","severity":"moderate","public_date":"2014-09-03T00:00:00Z","advisories":[],"bugzilla":"1135868","bugzilla_description":"CVE-2014-1565 Mozilla: Out-of-bounds read in Web Audio audio timeline (MFSA 2014-70)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1565.json"},{"CVE":"CVE-2014-1567","severity":"critical","public_date":"2014-09-03T00:00:00Z","advisories":["RHSA-2014:1145","RHSA-2014:1144"],"bugzilla":"1135869","bugzilla_description":"CVE-2014-1567 Mozilla: Use-after-free setting text directionality (MFSA 2014-72)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.8.0-1.el6_5","firefox-0:24.8.0-1.el7_0","thunderbird-0:24.8.0-1.el6_5","thunderbird-0:24.8.0-1.el5_10","firefox-0:24.8.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1567.json"},{"CVE":"CVE-2014-1547","severity":"critical","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:0919","RHSA-2014:0918"],"bugzilla":"1121464","bugzilla_description":"CVE-2014-1547 Mozilla: Miscellaneous memory safety hazards (rv:24.7) (MFSA 2014-56)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.7.0-1.el5_10","thunderbird-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1547.json"},{"CVE":"CVE-2014-1548","severity":"critical","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121469","bugzilla_description":"CVE-2014-1548 Mozilla: Miscellaneous memory safety hazards (rv:31.0) (MFSA 2014-56)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1548.json"},{"CVE":"CVE-2014-1549","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121470","bugzilla_description":"CVE-2014-1549 Mozilla: Buffer overflow during Web Audio buffering for playback (MFSA 2014-57)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1549.json"},{"CVE":"CVE-2014-1550","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121472","bugzilla_description":"CVE-2014-1550 Mozilla: Use-after-free in Web Audio due to incorrect control message ordering (MFSA 2014-58)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1550.json"},{"CVE":"CVE-2014-1561","severity":"low","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121473","bugzilla_description":"CVE-2014-1561 Mozilla: Toolbar dialog customization event spoofing (MFSA 2014-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1561.json"},{"CVE":"CVE-2014-1555","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:0919","RHSA-2014:0918"],"bugzilla":"1121476","bugzilla_description":"CVE-2014-1555 Mozilla: Use-after-free with FireOnStateChange event (MFSA 2014-61)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:24.7.0-1.el5_10","thunderbird-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1555.json"},{"CVE":"CVE-2014-1556","severity":"critical","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:0919","RHSA-2014:0918"],"bugzilla":"1121478","bugzilla_description":"CVE-2014-1556 Mozilla: Exploitable WebGL crash with Cesium JavaScript library (MFSA 2014-62)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.7.0-1.el5_10","thunderbird-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1556.json"},{"CVE":"CVE-2014-1557","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":["RHSA-2014:0919","RHSA-2014:0918"],"bugzilla":"1121479","bugzilla_description":"CVE-2014-1557 Mozilla: Crash in Skia library when scaling high quality images (MFSA 2014-64)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-672","affected_packages":["thunderbird-0:24.7.0-1.el5_10","thunderbird-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el6_5","firefox-0:24.7.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1557.json"},{"CVE":"CVE-2014-1558","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121480","bugzilla_description":"CVE-2014-1558 CVE-2014-1559 CVE-2014-1560 Mozilla: Certificate parsing broken by non-standard character encoding (MFSA 2014-65)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1558.json"},{"CVE":"CVE-2014-1559","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121480","bugzilla_description":"CVE-2014-1558 CVE-2014-1559 CVE-2014-1560 Mozilla: Certificate parsing broken by non-standard character encoding (MFSA 2014-65)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1559.json"},{"CVE":"CVE-2014-1560","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121480","bugzilla_description":"CVE-2014-1558 CVE-2014-1559 CVE-2014-1560 Mozilla: Certificate parsing broken by non-standard character encoding (MFSA 2014-65)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1560.json"},{"CVE":"CVE-2014-1552","severity":"moderate","public_date":"2014-07-22T00:00:00Z","advisories":[],"bugzilla":"1121481","bugzilla_description":"CVE-2014-1552 Mozilla: IFRAME sandbox same-origin access through redirect (MFSA 2014-66)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1552.json"},{"CVE":"CVE-2014-1533","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":["RHSA-2014:0741","RHSA-2014:0742"],"bugzilla":"1107399","bugzilla_description":"CVE-2014-1533 Mozilla: Miscellaneous memory safety hazards (rv:24.6) (MFSA 2014-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.6.0-1.el5_10","thunderbird-0:24.6.0-1.el6_5","thunderbird-0:24.6.0-1.el5_10","firefox-0:24.6.0-1.el7_0","firefox-0:24.6.0-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1533.json"},{"CVE":"CVE-2014-1534","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107403","bugzilla_description":"CVE-2014-1534 Mozilla: Miscellaneous memory safety hazards (rv:30.0) (MFSA 2014-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1534.json"},{"CVE":"CVE-2014-1536","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107419","bugzilla_description":"CVE-2014-1536 CVE-2014-1537 Mozilla: Use-after-free and out of bounds issues found using Address Sanitizer (MFSA 2014-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1536.json"},{"CVE":"CVE-2014-1537","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107419","bugzilla_description":"CVE-2014-1536 CVE-2014-1537 Mozilla: Use-after-free and out of bounds issues found using Address Sanitizer (MFSA 2014-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1537.json"},{"CVE":"CVE-2014-1538","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":["RHSA-2014:0741","RHSA-2014:0742"],"bugzilla":"1107421","bugzilla_description":"CVE-2014-1538 Mozilla: Use-after-free and out of bounds issues found using Address Sanitizer (MFSA 2014-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:24.6.0-1.el5_10","thunderbird-0:24.6.0-1.el6_5","thunderbird-0:24.6.0-1.el5_10","firefox-0:24.6.0-1.el7_0","firefox-0:24.6.0-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1538.json"},{"CVE":"CVE-2014-1540","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107423","bugzilla_description":"CVE-2014-1540 Mozilla: Use-after-free in Event Listener Manager (MFSA 2014-51)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1540.json"},{"CVE":"CVE-2014-1541","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":["RHSA-2014:0741","RHSA-2014:0742"],"bugzilla":"1107424","bugzilla_description":"CVE-2014-1541 Mozilla: Use-after-free with SMIL Animation Controller (MFSA 2014-52)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.6.0-1.el5_10","thunderbird-0:24.6.0-1.el6_5","thunderbird-0:24.6.0-1.el5_10","firefox-0:24.6.0-1.el7_0","firefox-0:24.6.0-1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1541.json"},{"CVE":"CVE-2014-1542","severity":"critical","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107425","bugzilla_description":"CVE-2014-1542 Mozilla: Buffer overflow in Web Audio Speex resampler (MFSA 2014-53)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1542.json"},{"CVE":"CVE-2014-1518","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092657","bugzilla_description":"CVE-2014-1518 Mozilla: Miscellaneous memory safety hazards (rv:24.5) (MFSA 2014-34)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1518.json"},{"CVE":"CVE-2014-1523","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092660","bugzilla_description":"CVE-2014-1523 Mozilla: Out of bounds read while decoding JPG images (MFSA-2014-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1523.json"},{"CVE":"CVE-2014-1524","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092663","bugzilla_description":"CVE-2014-1524 Mozilla: Buffer overflow when using non-XBL object as XBL (MFSA 2014-38)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1524.json"},{"CVE":"CVE-2014-1529","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092664","bugzilla_description":"CVE-2014-1529 Mozilla: Privilege escalation through Web Notification API (MFSA 2014-42)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1529.json"},{"CVE":"CVE-2014-1530","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092666","bugzilla_description":"CVE-2014-1530 Mozilla: Cross-site scripting (XSS) using history navigations (MFSA 2014-43)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1530.json"},{"CVE":"CVE-2014-1531","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092668","bugzilla_description":"CVE-2014-1531 Mozilla: Use-after-free in imgLoader while resizing images (MFSA 2014-44)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1531.json"},{"CVE":"CVE-2014-1532","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":["RHSA-2014:0448","RHSA-2014:0449"],"bugzilla":"1092670","bugzilla_description":"CVE-2014-1532 Mozilla: Use-after-free in nsHostResolver (MFSA 2014-46)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el6_5","thunderbird-0:24.5.0-1.el5_10","firefox-0:24.5.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1532.json"},{"CVE":"CVE-2014-1522","severity":"important","public_date":"2014-04-29T00:00:00Z","advisories":[],"bugzilla":"1095066","bugzilla_description":"CVE-2014-1522 Mozilla: Web Audio memory corruption issues (MFSA 2014-36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1522.json"},{"CVE":"CVE-2014-1525","severity":"critical","public_date":"2014-04-29T00:00:00Z","advisories":[],"bugzilla":"1095070","bugzilla_description":"CVE-2014-1525 Mozilla: Use-after-free in the Text Track Manager for HTML video (MFSA 2014-39)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1525.json"},{"CVE":"CVE-2014-1526","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":[],"bugzilla":"1095074","bugzilla_description":"CVE-2014-1526 Mozilla: Debugger can bypass XrayWrappers with JavaScript (MFSA 2014-47)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1526.json"},{"CVE":"CVE-2014-1528","severity":"moderate","public_date":"2014-04-29T00:00:00Z","advisories":[],"bugzilla":"1096585","bugzilla_description":"CVE-2014-1528 Mozilla: Out-of-bounds write in Cairo (MFSA 2014-41)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1528.json"},{"CVE":"CVE-2014-1493","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077013","bugzilla_description":"CVE-2014-1493 Mozilla: Miscellaneous memory safety hazards (rv:24.4) (MFSA 2014-15)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1493.json"},{"CVE":"CVE-2014-1494","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077014","bugzilla_description":"CVE-2014-1494 Mozilla: Miscellaneous memory safety hazards (rv:28.0) (MFSA 2014-15)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1494.json"},{"CVE":"CVE-2014-1496","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077015","bugzilla_description":"CVE-2014-1496 Mozilla: Files extracted during updates are not always read only (MFSA 2014-16)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1496.json"},{"CVE":"CVE-2014-1497","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077016","bugzilla_description":"CVE-2014-1497 Mozilla: Out of bounds read during WAV file decoding (MFSA 2014-17)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1497.json"},{"CVE":"CVE-2014-1498","severity":"low","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077018","bugzilla_description":"CVE-2014-1498 Mozilla: crypto.generateCRMFRequest does not validate type of key (MFSA 2014-18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1498.json"},{"CVE":"CVE-2014-1499","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077019","bugzilla_description":"CVE-2014-1499 Mozilla: Spoofing attack on WebRTC permission prompt (MFSA 2014-19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1499.json"},{"CVE":"CVE-2014-1500","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077020","bugzilla_description":"CVE-2014-1500 Mozilla: onbeforeunload and Javascript navigation DOS (MFSA 2014-20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1500.json"},{"CVE":"CVE-2014-1502","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077021","bugzilla_description":"CVE-2014-1502 Mozilla: WebGL content injection from one domain to rendering in another (MFSA 2014-22)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1502.json"},{"CVE":"CVE-2014-1504","severity":"low","public_date":"2014-03-18T00:00:00Z","advisories":[],"bugzilla":"1077022","bugzilla_description":"CVE-2014-1504 Mozilla: Content Security Policy for data: documents not preserved by session restore (MFSA 2014-23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1504.json"},{"CVE":"CVE-2014-1508","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077025","bugzilla_description":"CVE-2014-1508 Mozilla: Information disclosure through polygon rendering in MathML (MFSA 2014-26)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1508.json"},{"CVE":"CVE-2014-1509","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077028","bugzilla_description":"CVE-2014-1509 Mozilla: Memory corruption in Cairo during PDF font rendering (MFSA 2014-27)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1509.json"},{"CVE":"CVE-2014-1505","severity":"moderate","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077029","bugzilla_description":"CVE-2014-1505 Mozilla: SVG filters information disclosure through feDisplacementMap (MFSA 2014-28)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1505.json"},{"CVE":"CVE-2014-1510","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077490","bugzilla_description":"CVE-2014-1510 CVE-2014-1511 Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1510.json"},{"CVE":"CVE-2014-1511","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077490","bugzilla_description":"CVE-2014-1510 CVE-2014-1511 Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1511.json"},{"CVE":"CVE-2014-1512","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077491","bugzilla_description":"CVE-2014-1512 Mozilla: Use-after-free in TypeObject (MFSA 2014-30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1512.json"},{"CVE":"CVE-2014-1513","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077492","bugzilla_description":"CVE-2014-1513 Mozilla: Out-of-bounds read/write through neutering ArrayBuffer objects (MFSA 2014-31)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1513.json"},{"CVE":"CVE-2014-1514","severity":"critical","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0310","RHSA-2014:0316"],"bugzilla":"1077494","bugzilla_description":"CVE-2014-1514 Mozilla: Out-of-bounds write through TypedArrayObject after neutering (MFSA 2014-32)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["firefox-0:24.4.0-1.el6_5","thunderbird-0:24.4.0-1.el5_10","thunderbird-0:24.4.0-1.el6_5","firefox-0:24.4.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1514.json"},{"CVE":"CVE-2013-6674","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":["RHSA-2013:1823"],"bugzilla":"1063120","bugzilla_description":"CVE-2013-6674 CVE-2014-2018 Mozilla: Script execution in HTML mail replies (MFSA 2014-14)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6674.json"},{"CVE":"CVE-2014-2018","severity":"moderate","public_date":"2014-02-06T00:00:00Z","advisories":[],"bugzilla":"1063120","bugzilla_description":"CVE-2013-6674 CVE-2014-2018 Mozilla: Script execution in HTML mail replies (MFSA 2014-14)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2018.json"},{"CVE":"CVE-2014-1477","severity":"critical","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060938","bugzilla_description":"CVE-2014-1477 Mozilla: Miscellaneous memory safety hazards (rv:24.3) (MFSA 2014-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1477.json"},{"CVE":"CVE-2014-1478","severity":"critical","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060939","bugzilla_description":"CVE-2014-1478 Mozilla: Miscellaneous memory safety hazards (rv:27.0) (MFSA 2014-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1478.json"},{"CVE":"CVE-2014-1479","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060940","bugzilla_description":"CVE-2014-1479 Mozilla: Clone protected content with XBL scopes (MFSA 2014-02)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1479.json"},{"CVE":"CVE-2014-1480","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060941","bugzilla_description":"CVE-2014-1480 Mozilla: UI selection timeout missing on download prompts (MFSA 2014-03)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1480.json"},{"CVE":"CVE-2014-1482","severity":"critical","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060942","bugzilla_description":"CVE-2014-1482 Mozilla: Incorrect use of discarded images by RasterImage (MFSA 2014-04)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1482.json"},{"CVE":"CVE-2014-1483","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060943","bugzilla_description":"CVE-2014-1483 Mozilla: Information disclosure with *FromPoint on iframes (MFSA 2014-05)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1483.json"},{"CVE":"CVE-2014-1485","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060944","bugzilla_description":"CVE-2014-1485 Mozilla: XSLT stylesheets treated as styles in Content Security Policy (MFSA 2014-07)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1485.json"},{"CVE":"CVE-2014-1486","severity":"critical","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060945","bugzilla_description":"CVE-2014-1486 Mozilla: Use-after-free with imgRequestProxy and image proccessing (MFSA 2014-08)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1486.json"},{"CVE":"CVE-2014-1487","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060947","bugzilla_description":"CVE-2014-1487 Mozilla: Cross-origin information leak through web workers (MFSA 2014-09)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-209","affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1487.json"},{"CVE":"CVE-2014-1489","severity":"low","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060948","bugzilla_description":"CVE-2014-1489 Mozilla: Firefox default start page UI content invokable by script (MFSA 2014-10)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1489.json"},{"CVE":"CVE-2014-1488","severity":"critical","public_date":"2014-02-04T00:00:00Z","advisories":[],"bugzilla":"1060949","bugzilla_description":"CVE-2014-1488 Mozilla: Crash when using web workers with asm.js (MFSA 2014-11)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1488.json"},{"CVE":"CVE-2014-1481","severity":"moderate","public_date":"2014-02-04T00:00:00Z","advisories":["RHSA-2014:0133","RHSA-2014:0132"],"bugzilla":"1060952","bugzilla_description":"CVE-2014-1481 Mozilla: Inconsistent JavaScript handling of access to Window objects (MFSA 2014-13)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:24.3.0-2.el6_5","thunderbird-0:24.3.0-2.el5_10","thunderbird-0:24.3.0-2.el6_5","firefox-0:24.3.0-2.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1481.json"},{"CVE":"CVE-2014-8636","severity":"moderate","public_date":"2014-01-15T00:00:00Z","advisories":[],"bugzilla":"1180977","bugzilla_description":"CVE-2014-8636 Mozilla: XrayWrapper bypass through DOM objects (MFSA 2015-09)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-250","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8636.json"},{"CVE":"CVE-2013-5609","severity":"important","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039417","bugzilla_description":"CVE-2013-5609 Mozilla: Miscellaneous memory safety hazards (rv:24.2) (MFSA 2013-104)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5609.json"},{"CVE":"CVE-2013-5610","severity":"critical","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039418","bugzilla_description":"CVE-2013-5610 Mozilla: Miscellaneous memory safety hazards (rv:26.0) (MFSA 2013-104)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5610.json"},{"CVE":"CVE-2013-5611","severity":"moderate","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039419","bugzilla_description":"CVE-2013-5611 Mozilla: Application Installation doorhanger persists on navigation (MFSA 2013-105)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5611.json"},{"CVE":"CVE-2013-5612","severity":"moderate","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039420","bugzilla_description":"CVE-2013-5612 Mozilla: Character encoding cross-origin XSS attack (MFSA 2013-106)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5612.json"},{"CVE":"CVE-2013-5614","severity":"low","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039421","bugzilla_description":"CVE-2013-5614 Mozilla: Sandbox restrictions not applied to nested object elements (MFSA 2013-107)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5614.json"},{"CVE":"CVE-2013-5616","severity":"important","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039422","bugzilla_description":"CVE-2013-5616 Mozilla: Use-after-free in event listeners (MFSA 2013-108)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5616.json"},{"CVE":"CVE-2013-5618","severity":"important","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039423","bugzilla_description":"CVE-2013-5618 Mozilla: Use-after-free during Table Editing (MFSA 2013-109)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5618.json"},{"CVE":"CVE-2013-5619","severity":"moderate","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039424","bugzilla_description":"CVE-2013-5619 Mozilla: Potential overflow in JavaScript binary search algorithms (MFSA 2013-110)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5619.json"},{"CVE":"CVE-2013-6671","severity":"important","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039426","bugzilla_description":"CVE-2013-6671 Mozilla: Segmentation violation when replacing ordered list elements (MFSA 2013-111)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6671.json"},{"CVE":"CVE-2013-6672","severity":"low","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039427","bugzilla_description":"CVE-2013-6672 Mozilla: Linux clipboard information disclosure though selection paste (MFSA 2013-112)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6672.json"},{"CVE":"CVE-2013-6673","severity":"moderate","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039428","bugzilla_description":"CVE-2013-6673 Mozilla: Trust settings for built-in roots ignored during EV certificate validation (MFSA 2013-113)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6673.json"},{"CVE":"CVE-2013-5613","severity":"important","public_date":"2013-12-10T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"1039429","bugzilla_description":"CVE-2013-5613 Mozilla: Use-after-free in synthetic mouse movement (MFSA 2013-114)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5613.json"},{"CVE":"CVE-2013-5615","severity":"moderate","public_date":"2013-12-10T00:00:00Z","advisories":[],"bugzilla":"1039430","bugzilla_description":"CVE-2013-5615 Mozilla: GetElementIC typed array stubs can be generated outside observed typesets (MFSA 2013-115)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5615.json"},{"CVE":"CVE-2013-5590","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023835","bugzilla_description":"CVE-2013-5590 Mozilla: Miscellaneous memory safety hazards (rv:17.0.10) (MFSA 2013-93)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5590.json"},{"CVE":"CVE-2013-5593","severity":"moderate","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1023836","bugzilla_description":"CVE-2013-5593 Mozilla: Spoofing addressbar though SELECT element (MFSA 2013-94)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5593.json"},{"CVE":"CVE-2013-5595","severity":"moderate","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023839","bugzilla_description":"CVE-2013-5595 Mozilla: Improperly initialized memory and overflows in some JavaScript functions (MFSA 2013-96)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5595.json"},{"CVE":"CVE-2013-5596","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1023840","bugzilla_description":"CVE-2013-5596 Mozilla: Writing to cycle collected object during image decoding (MFSA 2013-97)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5596.json"},{"CVE":"CVE-2013-5597","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023841","bugzilla_description":"CVE-2013-5597 Mozilla: Use-after-free when updating offline cache (MFSA 2013-98)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5597.json"},{"CVE":"CVE-2013-5598","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1023842","bugzilla_description":"CVE-2013-5598 Mozilla: Security bypass of PDF.js checks using iframes (MFSA 2013-99)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5598.json"},{"CVE":"CVE-2013-5599","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023843","bugzilla_description":"CVE-2013-5599 CVE-2013-5600 CVE-2013-5601 Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5599.json"},{"CVE":"CVE-2013-5600","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023843","bugzilla_description":"CVE-2013-5599 CVE-2013-5600 CVE-2013-5601 Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5600.json"},{"CVE":"CVE-2013-5601","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023843","bugzilla_description":"CVE-2013-5599 CVE-2013-5600 CVE-2013-5601 Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5601.json"},{"CVE":"CVE-2013-5602","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023844","bugzilla_description":"CVE-2013-5602 Mozilla: Memory corruption in workers (MFSA 2013-101)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5602.json"},{"CVE":"CVE-2013-5603","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1023845","bugzilla_description":"CVE-2013-5603 Mozilla: Use-after-free in HTML document templates (MFSA 2013-102)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5603.json"},{"CVE":"CVE-2013-5591","severity":"critical","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1023846","bugzilla_description":"CVE-2013-5591 Mozilla: Miscellaneous memory safety hazards (rv:25.0 / rv:124.1) (MFSA 2013-93)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5591.json"},{"CVE":"CVE-2013-5604","severity":"moderate","public_date":"2013-10-29T00:00:00Z","advisories":["RHSA-2013:1480","RHSA-2013:1476"],"bugzilla":"1023863","bugzilla_description":"CVE-2013-5604 Mozilla: Access violation with XSLT and uninitialized data (MFSA 2013-95)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.10-1.el5_10","firefox-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el6_4","thunderbird-0:17.0.10-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5604.json"},{"CVE":"CVE-2013-1718","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009031","bugzilla_description":"CVE-2013-1718 Mozilla: Miscellaneous memory safety hazards (rv:17.0.9) (MFSA 2013-76)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1718.json"},{"CVE":"CVE-2013-1722","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009032","bugzilla_description":"CVE-2013-1722 Mozilla: Use-after-free in Animation Manager during stylesheet cloning (MFSA 2013-79)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1722.json"},{"CVE":"CVE-2013-1725","severity":"important","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009033","bugzilla_description":"CVE-2013-1725 Mozilla: Calling scope for new Javascript objects can lead to memory corruption (MFSA 2013-82)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1725.json"},{"CVE":"CVE-2013-1730","severity":"important","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009036","bugzilla_description":"CVE-2013-1730 Mozilla: Compartment mismatch re-attaching XBL-backed nodes (MFSA 2013-88)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1730.json"},{"CVE":"CVE-2013-1732","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009037","bugzilla_description":"CVE-2013-1732 Mozilla: Buffer overflow with multi-column, lists, and floats (MFSA 2013-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1732.json"},{"CVE":"CVE-2013-1735","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009039","bugzilla_description":"CVE-2013-1735 CVE-2013-1736 Mozilla: Memory corruption involving scrolling (MFSA 2013-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1735.json"},{"CVE":"CVE-2013-1736","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009039","bugzilla_description":"CVE-2013-1735 CVE-2013-1736 Mozilla: Memory corruption involving scrolling (MFSA 2013-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1736.json"},{"CVE":"CVE-2013-1737","severity":"moderate","public_date":"2013-09-17T00:00:00Z","advisories":["RHSA-2013:1269","RHSA-2013:1268"],"bugzilla":"1009041","bugzilla_description":"CVE-2013-1737 Mozilla: User-defined properties on DOM proxies get the wrong \"this\" object (MFSA 2013-91)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el6_4","firefox-0:17.0.9-1.el5_9","thunderbird-0:17.0.9-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1737.json"},{"CVE":"CVE-2013-1719","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009211","bugzilla_description":"CVE-2013-1719 Mozilla: Miscellaneous memory safety hazards (rv:24.0) (MFSA 2013-76)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1719.json"},{"CVE":"CVE-2013-1720","severity":"moderate","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009212","bugzilla_description":"CVE-2013-1720 Mozilla: Improper state in HTML5 Tree Builder with templates (MFSA 2013-77)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1720.json"},{"CVE":"CVE-2013-1721","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009213","bugzilla_description":"CVE-2013-1721 Mozilla: Integer overflow in ANGLE library (MFSA 2013-78)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1721.json"},{"CVE":"CVE-2013-1723","severity":"moderate","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009214","bugzilla_description":"CVE-2013-1723 Mozilla: NativeKey continues handling key messages after widget is destroyed (MFSA 2013-80)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1723.json"},{"CVE":"CVE-2013-1724","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009216","bugzilla_description":"CVE-2013-1724 Mozilla: Use-after-free with select element (MFSA 2013-81)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1724.json"},{"CVE":"CVE-2013-1728","severity":"moderate","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009217","bugzilla_description":"CVE-2013-1728 Mozilla: Uninitialized data in IonMonkey (MFSA 2013-85)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1728.json"},{"CVE":"CVE-2013-1729","severity":"moderate","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009218","bugzilla_description":"CVE-2013-1729 Mozilla: WebGL Information disclosure through OS X NVIDIA graphic drivers (MFSA 2013-86)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1729.json"},{"CVE":"CVE-2013-1738","severity":"critical","public_date":"2013-09-17T00:00:00Z","advisories":[],"bugzilla":"1009219","bugzilla_description":"CVE-2013-1738 Mozilla: GC hazard with default compartments and frame chain restoration (MFSA 2013-92)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1738.json"},{"CVE":"CVE-2013-1701","severity":"critical","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993598","bugzilla_description":"CVE-2013-1701 Mozilla: Miscellaneous memory safety hazards (rv:17.0.8) (MFSA 2013-63)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1701.json"},{"CVE":"CVE-2013-1709","severity":"moderate","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993600","bugzilla_description":"CVE-2013-1709 Mozilla: Document URI misrepresentation and masquerading (MFSA 2013-68)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1709.json"},{"CVE":"CVE-2013-1710","severity":"critical","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993602","bugzilla_description":"CVE-2013-1710 Mozilla: CRMF requests allow for code execution and XSS attacks (MFSA 2013-69)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-79","affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1710.json"},{"CVE":"CVE-2013-1713","severity":"moderate","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993603","bugzilla_description":"CVE-2013-1713 Mozilla: Wrong principal used for validating URI for some Javascript components (MFSA 2013-72)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1713.json"},{"CVE":"CVE-2013-1714","severity":"moderate","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993604","bugzilla_description":"CVE-2013-1714 Mozilla: Same-origin bypass with web workers and XMLHttpRequest (MFSA 2013-73)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1714.json"},{"CVE":"CVE-2013-1717","severity":"moderate","public_date":"2013-08-07T00:00:00Z","advisories":["RHSA-2013:1142","RHSA-2013:1140"],"bugzilla":"993605","bugzilla_description":"CVE-2013-1717 Mozilla: Local Java applets may read contents of local file system (MFSA 2013-75)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:17.0.8-5.el5_9","firefox-0:17.0.8-1.el5_9","thunderbird-0:17.0.8-5.el6_4","firefox-0:17.0.8-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1717.json"},{"CVE":"CVE-2013-1702","severity":"critical","public_date":"2013-08-06T00:00:00Z","advisories":[],"bugzilla":"994332","bugzilla_description":"CVE-2013-1702 Mozilla: Miscellaneous memory safety hazards (rv:23.0) (MFSA 2013-63)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1702.json"},{"CVE":"CVE-2013-1704","severity":"critical","public_date":"2013-08-06T00:00:00Z","advisories":[],"bugzilla":"994334","bugzilla_description":"CVE-2013-1704 Mozilla: Use after free mutating DOM during SetBody (MFSA 2013-64)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1704.json"},{"CVE":"CVE-2013-1705","severity":"critical","public_date":"2013-08-06T00:00:00Z","advisories":[],"bugzilla":"994335","bugzilla_description":"CVE-2013-1705 Mozilla: Buffer underflow when generating CRMF requests (MFSA 2013-65)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1705.json"},{"CVE":"CVE-2013-1708","severity":"low","public_date":"2013-08-06T00:00:00Z","advisories":[],"bugzilla":"994337","bugzilla_description":"CVE-2013-1708 Mozilla: Crash during WAV audio file decoding (MFSA 2013-67)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1708.json"},{"CVE":"CVE-2013-1711","severity":"moderate","public_date":"2013-08-06T00:00:00Z","advisories":[],"bugzilla":"994339","bugzilla_description":"CVE-2013-1711 Mozilla: Bypass of XrayWrappers using XBL Scopes (MFSA 2013-70)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1711.json"},{"CVE":"CVE-2013-1682","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977597","bugzilla_description":"CVE-2013-1682 Mozilla: Miscellaneous memory safety hazards (rv:17.0.7) (MFSA 2013-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1682.json"},{"CVE":"CVE-2013-1683","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977598","bugzilla_description":"CVE-2013-1683 Mozilla: Miscellaneous memory safety hazards (rv:22.0) (MFSA 2013-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1683.json"},{"CVE":"CVE-2013-1684","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977599","bugzilla_description":"CVE-2013-1684 CVE-2013-1685 CVE-2013-1686 Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1684.json"},{"CVE":"CVE-2013-1685","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977599","bugzilla_description":"CVE-2013-1684 CVE-2013-1685 CVE-2013-1686 Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1685.json"},{"CVE":"CVE-2013-1686","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977599","bugzilla_description":"CVE-2013-1684 CVE-2013-1685 CVE-2013-1686 Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-50)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1686.json"},{"CVE":"CVE-2013-1687","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977600","bugzilla_description":"CVE-2013-1687 Mozilla: Privileged content access and execution via XBL (MFSA 2013-51)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1687.json"},{"CVE":"CVE-2013-1688","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977601","bugzilla_description":"CVE-2013-1688 Mozilla: Arbitrary code execution within Profiler (MFSA 2013-52)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1688.json"},{"CVE":"CVE-2013-1690","severity":"critical","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977602","bugzilla_description":"CVE-2013-1690 Mozilla: Execution of unmapped memory through onreadystatechange event (MFSA 2013-53)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1690.json"},{"CVE":"CVE-2013-1692","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977603","bugzilla_description":"CVE-2013-1692 Mozilla: Data in the body of XHR HEAD requests leads to CSRF attacks (MFSA 2013-54)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-352","affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1692.json"},{"CVE":"CVE-2013-1693","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977605","bugzilla_description":"CVE-2013-1693 Mozilla: SVG filters can lead to information disclosure (MFSA 2013-55)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1693.json"},{"CVE":"CVE-2013-1694","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977610","bugzilla_description":"CVE-2013-1694 Mozilla: PreserveWrapper has inconsistent behavior (MFSA 2013-56)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1694.json"},{"CVE":"CVE-2013-1695","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977611","bugzilla_description":"CVE-2013-1695 Mozilla: Sandbox restrictions not applied to nested frame elements (MFSA 2013-57)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1695.json"},{"CVE":"CVE-2013-1696","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977613","bugzilla_description":"CVE-2013-1696 Mozilla: X-Frame-Options ignored when using server push with multi-part responses (MFSA 2013-58)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1696.json"},{"CVE":"CVE-2013-1697","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":["RHSA-2013:0982","RHSA-2013:0981"],"bugzilla":"977614","bugzilla_description":"CVE-2013-1697 Mozilla: XrayWrappers can be bypassed to run user defined methods in a privileged context (MFSA 2013-59)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:17.0.7-1.el6_4","firefox-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el5_9","thunderbird-0:17.0.7-1.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1697.json"},{"CVE":"CVE-2013-1698","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977615","bugzilla_description":"CVE-2013-1698 Mozilla: getUserMedia permission dialog incorrectly displays location (MFSA 2013-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1698.json"},{"CVE":"CVE-2013-1699","severity":"moderate","public_date":"2013-06-25T00:00:00Z","advisories":[],"bugzilla":"977621","bugzilla_description":"CVE-2013-1699 Mozilla: Homograph domain spoofing in .com, .net and .name (MFSA 2013-61)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1699.json"},{"CVE":"CVE-2013-0801","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962591","bugzilla_description":"CVE-2013-0801 Mozilla: Miscellaneous memory safety hazards (rv:17.0.6) (MFSA 2013-41)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0801.json"},{"CVE":"CVE-2013-1669","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":[],"bugzilla":"962594","bugzilla_description":"CVE-2013-1669 Mozilla: Miscellaneous memory safety hazards (rv:21.0) (MFSA 2013-41)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1669.json"},{"CVE":"CVE-2013-1670","severity":"moderate","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962596","bugzilla_description":"CVE-2013-1670 Mozilla: Privileged access for content level constructor (MFSA 2013-42)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1670.json"},{"CVE":"CVE-2013-1671","severity":"moderate","public_date":"2013-05-14T00:00:00Z","advisories":[],"bugzilla":"962597","bugzilla_description":"CVE-2013-1671 Mozilla: File input control has access to full path (MFSA 2013-43)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1671.json"},{"CVE":"CVE-2013-1674","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962598","bugzilla_description":"CVE-2013-1674 Mozilla: Use-after-free with video and onresize event (MFSA 2013-46)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1674.json"},{"CVE":"CVE-2013-1675","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962601","bugzilla_description":"CVE-2013-1675 Mozilla: Uninitialized functions in DOMSVGZoomEvent (MFSA 2013-47)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1675.json"},{"CVE":"CVE-2013-1676","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1676.json"},{"CVE":"CVE-2013-1677","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1677.json"},{"CVE":"CVE-2013-1678","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1678.json"},{"CVE":"CVE-2013-1679","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1679.json"},{"CVE":"CVE-2013-1680","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1680.json"},{"CVE":"CVE-2013-1681","severity":"critical","public_date":"2013-05-14T00:00:00Z","advisories":["RHSA-2013:0821","RHSA-2013:0820"],"bugzilla":"962603","bugzilla_description":"CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla:  Memory corruption found using Address Sanitizer (MFSA 2013-48)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.6-1.el6_4","thunderbird-0:17.0.6-2.el6_4","thunderbird-0:17.0.6-1.el5_9","firefox-0:17.0.6-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1681.json"},{"CVE":"CVE-2013-0788","severity":"critical","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0697","RHSA-2013:0696"],"bugzilla":"946927","bugzilla_description":"CVE-2013-0788 Mozilla: Miscellaneous memory safety hazards (rv:17.0.5) (MFSA 2013-30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.5-1.el5_9","firefox-0:17.0.5-1.el6_4","thunderbird-0:17.0.5-1.el6_4","firefox-0:17.0.5-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0788.json"},{"CVE":"CVE-2013-0789","severity":"critical","public_date":"2013-04-02T00:00:00Z","advisories":[],"bugzilla":"946928","bugzilla_description":"CVE-2013-0789 Mozilla: Miscellaneous memory safety hazards (rv:20.0) (MFSA 2013-30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0789.json"},{"CVE":"CVE-2013-0800","severity":"important","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0697","RHSA-2013:0696"],"bugzilla":"946929","bugzilla_description":"CVE-2013-0800 Mozilla: Out-of-bounds write in Cairo library (MFSA 2013-31)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":["thunderbird-0:17.0.5-1.el5_9","firefox-0:17.0.5-1.el6_4","thunderbird-0:17.0.5-1.el6_4","firefox-0:17.0.5-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0800.json"},{"CVE":"CVE-2013-0796","severity":"critical","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0697","RHSA-2013:0696"],"bugzilla":"946931","bugzilla_description":"CVE-2013-0796 Mozilla: WebGL crash with Mesa graphics driver on Linux (MFSA 2013-35)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.5-1.el5_9","firefox-0:17.0.5-1.el6_4","thunderbird-0:17.0.5-1.el6_4","firefox-0:17.0.5-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0796.json"},{"CVE":"CVE-2013-0795","severity":"critical","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0697","RHSA-2013:0696"],"bugzilla":"946932","bugzilla_description":"CVE-2013-0795 Mozilla: Bypass of SOW protections allows cloning of protected nodes (MFSA 2013-36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:17.0.5-1.el5_9","firefox-0:17.0.5-1.el6_4","thunderbird-0:17.0.5-1.el6_4","firefox-0:17.0.5-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0795.json"},{"CVE":"CVE-2013-0793","severity":"moderate","public_date":"2013-04-02T00:00:00Z","advisories":["RHSA-2013:0697","RHSA-2013:0696"],"bugzilla":"946935","bugzilla_description":"CVE-2013-0793 Mozilla: Cross-site scripting (XSS) using timed history navigations (MFSA 2013-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["thunderbird-0:17.0.5-1.el5_9","firefox-0:17.0.5-1.el6_4","thunderbird-0:17.0.5-1.el6_4","firefox-0:17.0.5-1.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0793.json"},{"CVE":"CVE-2013-0792","severity":"moderate","public_date":"2013-04-02T00:00:00Z","advisories":[],"bugzilla":"946936","bugzilla_description":"CVE-2013-0792 Mozilla: Memory corruption while rendering grayscale PNG images (MFSA 2013-39)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0792.json"},{"CVE":"CVE-2013-0787","severity":"critical","public_date":"2013-03-08T00:00:00Z","advisories":["RHSA-2013:0614","RHSA-2013:0627"],"bugzilla":"918876","bugzilla_description":"CVE-2013-0787 Mozilla: Use-after-free in HTML Editor (MFSA 2013-29)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:17.0.3-2.el6_4","xulrunner-0:17.0.3-2.el5_9","thunderbird-0:17.0.3-2.el5_9","xulrunner-0:17.0.3-2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0787.json"},{"CVE":"CVE-2013-0783","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0272","RHSA-2013:0271"],"bugzilla":"911836","bugzilla_description":"CVE-2013-0783 Mozilla: Miscellaneous memory safety hazards (rv:17.0.3) (MFSA 2013-21)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:17.0.3-1.el5_9","thunderbird-0:17.0.3-1.el6_3","thunderbird-0:17.0.3-1.el5_9","firefox-0:17.0.3-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0783.json"},{"CVE":"CVE-2013-0784","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911837","bugzilla_description":"CVE-2013-0784 Mozilla: Miscellaneous memory safety hazards (rv:19.0) (MFSA 2013-21)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0784.json"},{"CVE":"CVE-2013-0765","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911838","bugzilla_description":"CVE-2013-0765 Mozilla: Wrapped WebIDL objects can be wrapped again (MFSA 2013-23)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0765.json"},{"CVE":"CVE-2013-0773","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911839","bugzilla_description":"CVE-2013-0773 Mozilla: Web content bypass of COW and SOW security wrappers (MFSA 2013-24)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0773.json"},{"CVE":"CVE-2013-0772","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:1812","RHSA-2013:1823"],"bugzilla":"911840","bugzilla_description":"CVE-2013-0772 Mozilla: Out-of-bounds read in image rendering (MFSA 2013-22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["thunderbird-0:24.2.0-1.el6_5","thunderbird-0:24.2.0-2.el5_10","firefox-0:24.2.0-1.el6_5","firefox-0:24.2.0-1.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0772.json"},{"CVE":"CVE-2013-0774","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911842","bugzilla_description":"CVE-2013-0774 Mozilla: Privacy leak in JavaScript Workers (MFSA 2013-25)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0774.json"},{"CVE":"CVE-2013-0775","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0272","RHSA-2013:0271"],"bugzilla":"911843","bugzilla_description":"CVE-2013-0775 Mozilla: Use-after-free in nsImageLoadingContent (MFSA 2013-26)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:17.0.3-1.el5_9","thunderbird-0:17.0.3-1.el6_3","thunderbird-0:17.0.3-1.el5_9","firefox-0:17.0.3-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0775.json"},{"CVE":"CVE-2013-0776","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0272","RHSA-2013:0271"],"bugzilla":"911844","bugzilla_description":"CVE-2013-0776 Mozilla: Phishing on HTTPS connection through malicious proxy (MFSA 2013-27)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:17.0.3-1.el5_9","thunderbird-0:17.0.3-1.el6_3","thunderbird-0:17.0.3-1.el5_9","firefox-0:17.0.3-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0776.json"},{"CVE":"CVE-2013-0780","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0272","RHSA-2013:0271"],"bugzilla":"911865","bugzilla_description":"CVE-2013-0780 CVE-2013-0782 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:17.0.3-1.el5_9","thunderbird-0:17.0.3-1.el6_3","thunderbird-0:17.0.3-1.el5_9","firefox-0:17.0.3-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0780.json"},{"CVE":"CVE-2013-0782","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0272","RHSA-2013:0271"],"bugzilla":"911865","bugzilla_description":"CVE-2013-0780 CVE-2013-0782 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["firefox-0:17.0.3-1.el5_9","thunderbird-0:17.0.3-1.el6_3","thunderbird-0:17.0.3-1.el5_9","firefox-0:17.0.3-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0782.json"},{"CVE":"CVE-2013-0777","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911868","bugzilla_description":"CVE-2013-0777 CVE-2013-0778 CVE-2013-0779 CVE-2013-0781 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-125|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0777.json"},{"CVE":"CVE-2013-0778","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911868","bugzilla_description":"CVE-2013-0777 CVE-2013-0778 CVE-2013-0779 CVE-2013-0781 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-125|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0778.json"},{"CVE":"CVE-2013-0779","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911868","bugzilla_description":"CVE-2013-0777 CVE-2013-0778 CVE-2013-0779 CVE-2013-0781 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-125|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0779.json"},{"CVE":"CVE-2013-0781","severity":"critical","public_date":"2013-02-19T00:00:00Z","advisories":[],"bugzilla":"911868","bugzilla_description":"CVE-2013-0777 CVE-2013-0778 CVE-2013-0779 CVE-2013-0781 Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-125|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0781.json"},{"CVE":"CVE-2013-0769","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891811","bugzilla_description":"CVE-2013-0769 Mozilla: Miscellaneous memory safety hazards (rv:10.0.12) (MFSA 2013-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0769.json"},{"CVE":"CVE-2013-0749","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891813","bugzilla_description":"CVE-2013-0749 CVE-2013-0770 Mozilla: Miscellaneous memory safety hazards (rv:18.0/rv:17.0.1) (MFSA 2013-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0749.json"},{"CVE":"CVE-2013-0770","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891813","bugzilla_description":"CVE-2013-0749 CVE-2013-0770 Mozilla: Miscellaneous memory safety hazards (rv:18.0/rv:17.0.1) (MFSA 2013-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0770.json"},{"CVE":"CVE-2013-0762","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891821","bugzilla_description":"CVE-2013-0762 CVE-2013-0766 CVE-2013-0767 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0762.json"},{"CVE":"CVE-2013-0766","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891821","bugzilla_description":"CVE-2013-0762 CVE-2013-0766 CVE-2013-0767 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0766.json"},{"CVE":"CVE-2013-0767","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891821","bugzilla_description":"CVE-2013-0762 CVE-2013-0766 CVE-2013-0767 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0767.json"},{"CVE":"CVE-2013-0760","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891822","bugzilla_description":"CVE-2013-0760 CVE-2013-0761 CVE-2013-0763 CVE-2013-0771 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0760.json"},{"CVE":"CVE-2013-0761","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891822","bugzilla_description":"CVE-2013-0760 CVE-2013-0761 CVE-2013-0763 CVE-2013-0771 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0761.json"},{"CVE":"CVE-2013-0763","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891822","bugzilla_description":"CVE-2013-0760 CVE-2013-0761 CVE-2013-0763 CVE-2013-0771 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0763.json"},{"CVE":"CVE-2013-0771","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891822","bugzilla_description":"CVE-2013-0760 CVE-2013-0761 CVE-2013-0763 CVE-2013-0771 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0771.json"},{"CVE":"CVE-2013-0768","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"891823","bugzilla_description":"CVE-2013-0768 Mozilla: Buffer Overflow in Canvas (MFSA 2013-03)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0768.json"},{"CVE":"CVE-2013-0759","severity":"moderate","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891824","bugzilla_description":"CVE-2013-0759 Mozilla: URL spoofing in addressbar during page loads (MFSA 2013-04)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0759.json"},{"CVE":"CVE-2013-0744","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"891825","bugzilla_description":"CVE-2013-0744 Mozilla: Use-after-free when displaying table with many columns and column groups (MFSA 2013-05)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0744.json"},{"CVE":"CVE-2013-0764","severity":"important","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892140","bugzilla_description":"CVE-2013-0764 Mozilla: Crash due to handling of SSL on threads (MFSA 2013-07)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0764.json"},{"CVE":"CVE-2013-0745","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892141","bugzilla_description":"CVE-2013-0745 Mozilla: AutoWrapperChanger fails to keep objects alive during garbage collection (MFSA 2013-08)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0745.json"},{"CVE":"CVE-2013-0746","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892142","bugzilla_description":"CVE-2013-0746 Mozilla: Compartment mismatch with quickstubs returned values (MFSA 2013-09)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0746.json"},{"CVE":"CVE-2013-0747","severity":"moderate","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892143","bugzilla_description":"CVE-2013-0747 Mozilla: Event manipulation in plugin handler to bypass same-origin policy (MFSA 2013-10)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0747.json"},{"CVE":"CVE-2013-0748","severity":"moderate","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892144","bugzilla_description":"CVE-2013-0748 Mozilla: Address space layout leaked in XBL objects (MFSA 2013-11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0748.json"},{"CVE":"CVE-2013-0750","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892145","bugzilla_description":"CVE-2013-0750 Mozilla: Buffer overflow in Javascript string concatenation (MFSA 2013-12)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0750.json"},{"CVE":"CVE-2013-0752","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892146","bugzilla_description":"CVE-2013-0752 Mozilla: Memory corruption in XBL with XML bindings containing SVG (MFSA 2013-13)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0752.json"},{"CVE":"CVE-2013-0757","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892147","bugzilla_description":"CVE-2013-0757 Mozilla: Chrome Object Wrapper (COW) bypass through changing prototype (MFSA 2013-14)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0757.json"},{"CVE":"CVE-2013-0758","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892148","bugzilla_description":"CVE-2013-0758 Mozilla: Chrome Object Wrapper (COW) bypass through plugin objects (MFSA 2013-15)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0758.json"},{"CVE":"CVE-2013-0753","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892149","bugzilla_description":"CVE-2013-0753 Mozilla: Use-after-free in serializeToStream (MFSA 2013-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0753.json"},{"CVE":"CVE-2013-0754","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":["RHSA-2013:0144","RHSA-2013:0145"],"bugzilla":"892150","bugzilla_description":"CVE-2013-0754 Mozilla: Use-after-free in ListenerManager (MFSA 2013-17)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.12-1.el6_3","thunderbird-0:10.0.12-3.el6_3","firefox-0:10.0.12-1.el5_9","thunderbird-0:10.0.12-3.el5_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0754.json"},{"CVE":"CVE-2013-0755","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892854","bugzilla_description":"CVE-2013-0755 Mozilla: Use-after-free in Vibrate (MFSA 2013-18)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0755.json"},{"CVE":"CVE-2013-0756","severity":"critical","public_date":"2013-01-08T00:00:00Z","advisories":[],"bugzilla":"892858","bugzilla_description":"CVE-2013-0756 Mozilla: garbage collection flaw in Javascript Proxy objects (MFSA 2013-19)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0756.json"},{"CVE":"CVE-2017-7829","severity":"low","public_date":"2012-12-22T00:00:00Z","advisories":["RHSA-2018:0061"],"bugzilla":"1530195","bugzilla_description":"CVE-2017-7829 Mozilla: From address with encoded null character is cut off in message header display","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["thunderbird-0:52.5.2-1.el7_4","thunderbird-0:52.5.2-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7829.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2012-6051","severity":"moderate","public_date":"2012-11-23T00:00:00Z","advisories":[],"bugzilla":"882910","bugzilla_description":"CVE-2012-6051 firefox, thunderbird, xulrunner: Google CityHash hash function collisions (oCERT-2012-001)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6051.json"},{"CVE":"CVE-2012-5843","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877613","bugzilla_description":"CVE-2012-5843 Mozilla: Miscellaneous memory safety hazards (rv:17.0) (MFSA 2012-91)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5843.json"},{"CVE":"CVE-2012-5842","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877614","bugzilla_description":"CVE-2012-5842 Mozilla: Miscellaneous memory safety hazards (rv:10.0.11) (MFSA 2012-91)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5842.json"},{"CVE":"CVE-2012-4202","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877615","bugzilla_description":"CVE-2012-4202 Mozilla: Buffer overflow while rendering GIF images (MFSA 2012-92)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4202.json"},{"CVE":"CVE-2012-4201","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877616","bugzilla_description":"CVE-2012-4201 Mozilla: evalInSanbox location context incorrectly applied (MFSA 2012-93)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4201.json"},{"CVE":"CVE-2012-5836","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877617","bugzilla_description":"CVE-2012-5836 Mozilla: Crash when combining SVG text on path with CSS (MFSA 2012-94)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5836.json"},{"CVE":"CVE-2012-4203","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877618","bugzilla_description":"CVE-2012-4203 Mozilla: Javascript: URLs run in privileged context on New Tab page (MFSA 2012-95)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4203.json"},{"CVE":"CVE-2012-4204","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877624","bugzilla_description":"CVE-2012-4204 Mozilla: Memory corruption in str_unescape (MFSA 2012-96)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4204.json"},{"CVE":"CVE-2012-4205","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877625","bugzilla_description":"CVE-2012-4205 Mozilla: XMLHttpRequest inherits incorrect principal within sandbox (MFSA 2012-97)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4205.json"},{"CVE":"CVE-2012-4208","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877627","bugzilla_description":"CVE-2012-4208 Mozilla: XrayWrappers exposes chrome-only properties when not in chrome compartment (MFSA 2012-99)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4208.json"},{"CVE":"CVE-2012-5841","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877628","bugzilla_description":"CVE-2012-5841 Mozilla: Improper security filtering for cross-origin wrappers (MFSA 2012-100)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5841.json"},{"CVE":"CVE-2012-4207","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877629","bugzilla_description":"CVE-2012-4207 Mozilla: Improper character decoding in HZ-GB-2312 charset (MFSA 2012-101)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4207.json"},{"CVE":"CVE-2012-5837","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877631","bugzilla_description":"CVE-2012-5837 Mozilla: Script entered into Developer Toolbar runs with chrome privileges (MFSA 2012-102)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5837.json"},{"CVE":"CVE-2012-4209","severity":"moderate","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877632","bugzilla_description":"CVE-2012-4209 Mozilla: Frames can shadow top.location (MFSA 2012-103)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4209.json"},{"CVE":"CVE-2012-4210","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1482"],"bugzilla":"877633","bugzilla_description":"CVE-2012-4210 Mozilla: CSS and HTML injection through Style Inspector (MFSA 2012-104)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4210.json"},{"CVE":"CVE-2012-4214","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4214.json"},{"CVE":"CVE-2012-4215","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4215.json"},{"CVE":"CVE-2012-4216","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4216.json"},{"CVE":"CVE-2012-5829","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5829.json"},{"CVE":"CVE-2012-5839","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5839.json"},{"CVE":"CVE-2012-5840","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877634","bugzilla_description":"CVE-2012-4214 CVE-2012-4215 CVE-2012-4216 CVE-2012-5829 CVE-2012-5839 CVE-2012-5840 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5840.json"},{"CVE":"CVE-2012-5830","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877635","bugzilla_description":"CVE-2012-5830 CVE-2012-5833 CVE-2012-5835 Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5830.json"},{"CVE":"CVE-2012-5833","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877635","bugzilla_description":"CVE-2012-5830 CVE-2012-5833 CVE-2012-5835 Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5833.json"},{"CVE":"CVE-2012-5835","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":["RHSA-2012:1483","RHSA-2012:1482"],"bugzilla":"877635","bugzilla_description":"CVE-2012-5830 CVE-2012-5833 CVE-2012-5835 Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":["firefox-0:10.0.11-1.el6_3","thunderbird-0:10.0.11-1.el5_8","thunderbird-0:10.0.11-1.el6_3","firefox-0:10.0.11-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5835.json"},{"CVE":"CVE-2012-4212","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877942","bugzilla_description":"CVE-2012-4212 CVE-2012-4213 CVE-2012-4217 CVE-2012-4218 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4212.json"},{"CVE":"CVE-2012-4213","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877942","bugzilla_description":"CVE-2012-4212 CVE-2012-4213 CVE-2012-4217 CVE-2012-4218 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4213.json"},{"CVE":"CVE-2012-4217","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877942","bugzilla_description":"CVE-2012-4212 CVE-2012-4213 CVE-2012-4217 CVE-2012-4218 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4217.json"},{"CVE":"CVE-2012-4218","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877942","bugzilla_description":"CVE-2012-4212 CVE-2012-4213 CVE-2012-4217 CVE-2012-4218 Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4218.json"},{"CVE":"CVE-2012-5838","severity":"critical","public_date":"2012-11-20T00:00:00Z","advisories":[],"bugzilla":"877945","bugzilla_description":"CVE-2012-5838 Mozilla: Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer (MFSA 2012-106)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-416|CWE-119)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5838.json"},{"CVE":"CVE-2012-4194","severity":"critical","public_date":"2012-10-26T00:00:00Z","advisories":["RHSA-2012:1407","RHSA-2012:1413"],"bugzilla":"869893","bugzilla_description":"CVE-2012-4194 CVE-2012-4195 CVE-2012-4196 Mozilla: Fixes for Location object issues (MFSA 2012-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.10-1.el6_3","firefox-0:10.0.10-1.el6_3","thunderbird-0:10.0.10-1.el5_8","firefox-0:10.0.10-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4194.json"},{"CVE":"CVE-2012-4195","severity":"critical","public_date":"2012-10-26T00:00:00Z","advisories":["RHSA-2012:1407","RHSA-2012:1413"],"bugzilla":"869893","bugzilla_description":"CVE-2012-4194 CVE-2012-4195 CVE-2012-4196 Mozilla: Fixes for Location object issues (MFSA 2012-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.10-1.el6_3","firefox-0:10.0.10-1.el6_3","thunderbird-0:10.0.10-1.el5_8","firefox-0:10.0.10-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4195.json"},{"CVE":"CVE-2012-4196","severity":"critical","public_date":"2012-10-26T00:00:00Z","advisories":["RHSA-2012:1407","RHSA-2012:1413"],"bugzilla":"869893","bugzilla_description":"CVE-2012-4194 CVE-2012-4195 CVE-2012-4196 Mozilla: Fixes for Location object issues (MFSA 2012-90)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.10-1.el6_3","firefox-0:10.0.10-1.el6_3","thunderbird-0:10.0.10-1.el5_8","firefox-0:10.0.10-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4196.json"},{"CVE":"CVE-2012-4193","severity":"critical","public_date":"2012-10-11T00:00:00Z","advisories":["RHSA-2012:1362","RHSA-2012:1361"],"bugzilla":"865215","bugzilla_description":"CVE-2012-4193 Mozilla: defaultValue security checks not applied (MFSA 2012-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["xulrunner-0:10.0.8-2.el5_8","thunderbird-0:10.0.8-2.el5_8","xulrunner-0:10.0.8-2.el6_3","thunderbird-0:10.0.8-2.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4193.json"},{"CVE":"CVE-2012-4192","severity":"critical","public_date":"2012-10-11T00:00:00Z","advisories":[],"bugzilla":"865283","bugzilla_description":"CVE-2012-4192 Mozilla: defaultValue security checks not applied (firefox-16) (MFSA 2012-89)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4192.json"},{"CVE":"CVE-2012-4191","severity":"critical","public_date":"2012-10-11T00:00:00Z","advisories":[],"bugzilla":"865286","bugzilla_description":"CVE-2012-4191 Mozilla: Miscellaneous memory safety hazards (rv:16.0.1) (MFSA 2012-88)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4191.json"},{"CVE":"CVE-2012-3982","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863614","bugzilla_description":"CVE-2012-3982 Mozilla: Miscellaneous memory safety hazards (rv:10.0.8) (MFSA 2012-74)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3982.json"},{"CVE":"CVE-2012-3983","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":[],"bugzilla":"863615","bugzilla_description":"CVE-2012-3983 Mozilla: Miscellaneous memory safety hazards (rv:16.0) (MFSA 2012-74)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3983.json"},{"CVE":"CVE-2012-3984","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":[],"bugzilla":"863616","bugzilla_description":"CVE-2012-3984 CVE-2012-5354 Mozilla: Select element persistance allows for attacks (MFSA 2012-75)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3984.json"},{"CVE":"CVE-2012-5354","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":[],"bugzilla":"863616","bugzilla_description":"CVE-2012-3984 CVE-2012-5354 Mozilla: Select element persistance allows for attacks (MFSA 2012-75)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5354.json"},{"CVE":"CVE-2012-3985","severity":"moderate","public_date":"2012-10-09T00:00:00Z","advisories":[],"bugzilla":"863617","bugzilla_description":"CVE-2012-3985 Mozilla: Continued access to initial origin after setting document.domain can lead to XSS attacks (MFSA 2012-76)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3985.json"},{"CVE":"CVE-2012-3986","severity":"moderate","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863618","bugzilla_description":"CVE-2012-3986 Mozilla: Some DOMWindowUtils methods bypass security checks (MFSA 2012-77)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3986.json"},{"CVE":"CVE-2012-3988","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863619","bugzilla_description":"CVE-2012-3988 Mozilla: DOS and crash with full screen and history navigation (MFSA 2012-79)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3988.json"},{"CVE":"CVE-2012-3989","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":[],"bugzilla":"863620","bugzilla_description":"CVE-2012-3989 Mozilla: Crash with invalid cast when using instanceof operator (MFSA 2012-80)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3989.json"},{"CVE":"CVE-2012-3991","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863621","bugzilla_description":"CVE-2012-3991 Mozilla: GetProperty function can bypass security checks (MFSA 2012-81)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3991.json"},{"CVE":"CVE-2012-3994","severity":"moderate","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863622","bugzilla_description":"CVE-2012-3994 Mozilla: top object and location property accessible by plugins (MFSA 2012-82)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3994.json"},{"CVE":"CVE-2012-3993","severity":"moderate","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863623","bugzilla_description":"CVE-2012-3993 CVE-2012-4184 Mozilla: Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties (MFSA 2012-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3993.json"},{"CVE":"CVE-2012-4184","severity":"moderate","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863623","bugzilla_description":"CVE-2012-3993 CVE-2012-4184 Mozilla: Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties (MFSA 2012-83)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4184.json"},{"CVE":"CVE-2012-3992","severity":"moderate","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863624","bugzilla_description":"CVE-2012-3992 Mozilla: Spoofing and script injection through location.hash (MFSA 2012-84)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3992.json"},{"CVE":"CVE-2012-3995","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863625","bugzilla_description":"CVE-2012-3995 CVE-2012-4179 CVE-2012-4180 CVE-2012-4181 CVE-2012-4182 CVE-2012-4183 Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3995.json"},{"CVE":"CVE-2012-4179","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863625","bugzilla_description":"CVE-2012-3995 CVE-2012-4179 CVE-2012-4180 CVE-2012-4181 CVE-2012-4182 CVE-2012-4183 Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4179.json"},{"CVE":"CVE-2012-4180","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863625","bugzilla_description":"CVE-2012-3995 CVE-2012-4179 CVE-2012-4180 CVE-2012-4181 CVE-2012-4182 CVE-2012-4183 Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4180.json"},{"CVE":"CVE-2012-4181","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863625","bugzilla_description":"CVE-2012-3995 CVE-2012-4179 CVE-2012-4180 CVE-2012-4181 CVE-2012-4182 CVE-2012-4183 Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4181.json"},{"CVE":"CVE-2012-4182","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863625","bugzilla_description":"CVE-2012-3995 CVE-2012-4179 CVE-2012-4180 CVE-2012-4181 CVE-2012-4182 CVE-2012-4183 Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4182.json"},{"CVE":"CVE-2012-4183","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863625","bugzilla_description":"CVE-2012-3995 CVE-2012-4179 CVE-2012-4180 CVE-2012-4181 CVE-2012-4182 CVE-2012-4183 Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4183.json"},{"CVE":"CVE-2012-4185","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863626","bugzilla_description":"CVE-2012-4185 CVE-2012-4186 CVE-2012-4187 CVE-2012-4188 Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4185.json"},{"CVE":"CVE-2012-4186","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863626","bugzilla_description":"CVE-2012-4185 CVE-2012-4186 CVE-2012-4187 CVE-2012-4188 Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4186.json"},{"CVE":"CVE-2012-4187","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863626","bugzilla_description":"CVE-2012-4185 CVE-2012-4186 CVE-2012-4187 CVE-2012-4188 Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4187.json"},{"CVE":"CVE-2012-4188","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863626","bugzilla_description":"CVE-2012-4185 CVE-2012-4186 CVE-2012-4187 CVE-2012-4188 Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4188.json"},{"CVE":"CVE-2012-3990","severity":"critical","public_date":"2012-10-09T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"863628","bugzilla_description":"CVE-2012-3990 Mozilla: Use-after-free in the IME State Manager (MFSA 2012-87)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3990.json"},{"CVE":"CVE-2012-1971","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":[],"bugzilla":"851908","bugzilla_description":"CVE-2012-1971 Mozilla: Miscellaneous memory safety hazards (rv:15.0) (MFSA 2012-57)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1971.json"},{"CVE":"CVE-2012-1970","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851909","bugzilla_description":"CVE-2012-1970 Mozilla: Miscellaneous memory safety hazards (rv:15.0/ rv:10.0.7) (MFSA 2012-57)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1970.json"},{"CVE":"CVE-2012-1972","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851910","bugzilla_description":"Mozilla: Multiple Use-after-free issues (MFSA 2012-58)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1972.json"},{"CVE":"CVE-2012-1973","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851910","bugzilla_description":"Mozilla: Multiple Use-after-free issues (MFSA 2012-58)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1973.json"},{"CVE":"CVE-2012-1974","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851910","bugzilla_description":"Mozilla: Multiple Use-after-free issues (MFSA 2012-58)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1974.json"},{"CVE":"CVE-2012-1975","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851910","bugzilla_description":"Mozilla: Multiple Use-after-free issues (MFSA 2012-58)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1975.json"},{"CVE":"CVE-2012-1976","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851910","bugzilla_description":"Mozilla: Multiple Use-after-free issues (MFSA 2012-58)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1976.json"},{"CVE":"CVE-2012-3956","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851910","bugzilla_description":"Mozilla: Multiple Use-after-free issues (MFSA 2012-58)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3956.json"},{"CVE":"CVE-2012-3957","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851910","bugzilla_description":"Mozilla: Multiple Use-after-free issues (MFSA 2012-58)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3957.json"},{"CVE":"CVE-2012-3958","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851910","bugzilla_description":"Mozilla: Multiple Use-after-free issues (MFSA 2012-58)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3958.json"},{"CVE":"CVE-2012-3959","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851910","bugzilla_description":"Mozilla: Multiple Use-after-free issues (MFSA 2012-58)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3959.json"},{"CVE":"CVE-2012-3960","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851910","bugzilla_description":"Mozilla: Multiple Use-after-free issues (MFSA 2012-58)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3960.json"},{"CVE":"CVE-2012-3961","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851910","bugzilla_description":"Mozilla: Multiple Use-after-free issues (MFSA 2012-58)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3961.json"},{"CVE":"CVE-2012-3962","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851910","bugzilla_description":"Mozilla: Multiple Use-after-free issues (MFSA 2012-58)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3962.json"},{"CVE":"CVE-2012-3963","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851910","bugzilla_description":"Mozilla: Multiple Use-after-free issues (MFSA 2012-58)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3963.json"},{"CVE":"CVE-2012-3964","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851910","bugzilla_description":"Mozilla: Multiple Use-after-free issues (MFSA 2012-58)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3964.json"},{"CVE":"CVE-2012-1956","severity":"moderate","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1351","RHSA-2012:1350"],"bugzilla":"851912","bugzilla_description":"CVE-2012-1956 Mozilla: Location object can be shadowed using Object.defineProperty (MFSA 2012-59)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["thunderbird-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el6_3","firefox-0:10.0.8-1.el5_8","thunderbird-0:10.0.8-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1956.json"},{"CVE":"CVE-2012-3965","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":[],"bugzilla":"851916","bugzilla_description":"CVE-2012-3965 Mozilla: Escalation of privilege through about:newtab (MFSA 2012-60)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3965.json"},{"CVE":"CVE-2012-3966","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851918","bugzilla_description":"CVE-2012-3966 Mozilla: Memory corruption with bitmap format images with negative height (MFSA 2012-61)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3966.json"},{"CVE":"CVE-2012-3967","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851920","bugzilla_description":"CVE-2012-3967 CVE-2012-3968 Mozilla: WebGL use-after-free and memory corruption (MFSA 2012-62)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3967.json"},{"CVE":"CVE-2012-3968","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851920","bugzilla_description":"CVE-2012-3967 CVE-2012-3968 Mozilla: WebGL use-after-free and memory corruption (MFSA 2012-62)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3968.json"},{"CVE":"CVE-2012-3969","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851922","bugzilla_description":"CVE-2012-3969 CVE-2012-3970 Mozilla: SVG buffer overflow and use-after-free issues (MFSA 2012-63)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-119|CWE-416)","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3969.json"},{"CVE":"CVE-2012-3970","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851922","bugzilla_description":"CVE-2012-3969 CVE-2012-3970 Mozilla: SVG buffer overflow and use-after-free issues (MFSA 2012-63)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"(CWE-119|CWE-416)","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3970.json"},{"CVE":"CVE-2012-3971","severity":"moderate","public_date":"2012-08-28T00:00:00Z","advisories":[],"bugzilla":"851923","bugzilla_description":"CVE-2012-3971 Mozilla: Graphite 2 memory corruption (MFSA 2012-64)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3971.json"},{"CVE":"CVE-2012-3972","severity":"moderate","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851924","bugzilla_description":"CVE-2012-3972 Mozilla: Out-of-bounds read in format-number in XSLT (MFSA 2012-65)","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3972.json"},{"CVE":"CVE-2012-3973","severity":"critical","public_date":"2012-08-28T00:00:00Z","advisories":[],"bugzilla":"851925","bugzilla_description":"CVE-2012-3973 Mozilla: HTTPMonitor extension allows for remote debugging without explicit activation (MFSA 2012-66)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3973.json"},{"CVE":"CVE-2012-3974","severity":"moderate","public_date":"2012-08-28T00:00:00Z","advisories":[],"bugzilla":"851927","bugzilla_description":"CVE-2012-3974 Mozilla: Installer will launch incorrect executable following new installation (MFSA 2012-67)","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3974.json"},{"CVE":"CVE-2012-3975","severity":"low","public_date":"2012-08-28T00:00:00Z","advisories":[],"bugzilla":"851929","bugzilla_description":"CVE-2012-3975 Mozilla: DOMParser loads linked resources in extensions when parsing text/html (MFSA 2012-68)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3975.json"},{"CVE":"CVE-2012-3978","severity":"moderate","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851937","bugzilla_description":"CVE-2012-3978 Mozilla: Location object security checks bypassed by chrome code (MFSA 2012-70)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3978.json"},{"CVE":"CVE-2012-3980","severity":"important","public_date":"2012-08-28T00:00:00Z","advisories":["RHSA-2012:1210","RHSA-2012:1211"],"bugzilla":"851939","bugzilla_description":"CVE-2012-3980 Mozilla: Web console eval capable of executing chrome-privileged code (MFSA 2012-72)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.7-1.el5_8","firefox-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el6_3","thunderbird-0:10.0.7-1.el5_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3980.json"},{"CVE":"CVE-2012-1948","severity":"critical","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1089","RHSA-2012:1088"],"bugzilla":"840201","bugzilla_description":"CVE-2012-1948 Mozilla: Miscellaneous memory safety hazards (rv:14.0/ rv:10.0.6) (MFSA 2012-42)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el6_3","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1948.json"},{"CVE":"CVE-2012-1949","severity":"critical","public_date":"2012-07-17T00:00:00Z","advisories":[],"bugzilla":"840201","bugzilla_description":"CVE-2012-1948 CVE-2012-1949 Mozilla: Miscellaneous memory safety hazards (rv:14.0/ rv:10.0.6) (MFSA 2012-42)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1949.json"},{"CVE":"CVE-2012-1951","severity":"critical","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1089","RHSA-2012:1088"],"bugzilla":"840205","bugzilla_description":"CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 Mozilla: Gecko memory corruption (MFSA 2012-44)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el6_3","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1951.json"},{"CVE":"CVE-2012-1952","severity":"critical","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1089","RHSA-2012:1088"],"bugzilla":"840205","bugzilla_description":"CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 Mozilla: Gecko memory corruption (MFSA 2012-44)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el6_3","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1952.json"},{"CVE":"CVE-2012-1953","severity":"critical","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1089","RHSA-2012:1088"],"bugzilla":"840205","bugzilla_description":"CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 Mozilla: Gecko memory corruption (MFSA 2012-44)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el6_3","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1953.json"},{"CVE":"CVE-2012-1954","severity":"critical","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1089","RHSA-2012:1088"],"bugzilla":"840205","bugzilla_description":"CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 Mozilla: Gecko memory corruption (MFSA 2012-44)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el6_3","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1954.json"},{"CVE":"CVE-2012-1955","severity":"moderate","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1089","RHSA-2012:1088"],"bugzilla":"840206","bugzilla_description":"CVE-2012-1955 Mozilla: Spoofing issue with location (MFSA 2012-45)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el6_3","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1955.json"},{"CVE":"CVE-2012-1966","severity":"moderate","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1088"],"bugzilla":"840207","bugzilla_description":"CVE-2012-1966 Mozilla: XSS and code execution through data: URLs (MFSA 2012-46)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["firefox-0:10.0.6-1.el5_8","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1966.json"},{"CVE":"CVE-2012-1957","severity":"moderate","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1089","RHSA-2012:1088"],"bugzilla":"840208","bugzilla_description":"CVE-2012-1957 Mozilla: Improper filtering of javascript in HTML feed-view (MFSA 2012-47)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el6_3","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1957.json"},{"CVE":"CVE-2012-1958","severity":"moderate","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1089","RHSA-2012:1088"],"bugzilla":"840211","bugzilla_description":"CVE-2012-1958 Mozilla: use-after-free in nsGlobalWindow::PageHidden (MFSA 2012-48)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["firefox-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el6_3","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1958.json"},{"CVE":"CVE-2012-1959","severity":"critical","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1089","RHSA-2012:1088"],"bugzilla":"840212","bugzilla_description":"CVE-2012-1959 Mozilla: Same-compartment Security Wrappers can be bypassed (MFSA 2012-49)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el6_3","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1959.json"},{"CVE":"CVE-2012-1960","severity":"low","public_date":"2012-07-17T00:00:00Z","advisories":[],"bugzilla":"840213","bugzilla_description":"CVE-2012-1960 Mozilla: Out of bounds read in QCMS (MFSA 2012-50)","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1960.json"},{"CVE":"CVE-2012-1961","severity":"moderate","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1089","RHSA-2012:1088"],"bugzilla":"840214","bugzilla_description":"CVE-2012-1961 Mozilla: X-Frame-Options header ignored when duplicated (MFSA 2012-51)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el6_3","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1961.json"},{"CVE":"CVE-2012-1962","severity":"critical","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1089","RHSA-2012:1088"],"bugzilla":"840215","bugzilla_description":"CVE-2012-1962 Mozilla: JSDependentString::undepend string conversion results in memory corruption (MFSA 2012-52)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el6_3","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1962.json"},{"CVE":"CVE-2012-1963","severity":"moderate","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1089","RHSA-2012:1088"],"bugzilla":"840220","bugzilla_description":"CVE-2012-1963 Mozilla: Content Security Policy 1.0 implementation errors cause data leakage (MFSA 2012-53)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el6_3","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1963.json"},{"CVE":"CVE-2012-1964","severity":"moderate","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1089","RHSA-2012:1088"],"bugzilla":"840222","bugzilla_description":"CVE-2012-1964 Mozilla: Clickjacking of certificate warning page (MFSA 2012-54)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["firefox-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el6_3","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1964.json"},{"CVE":"CVE-2012-1965","severity":"moderate","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1088"],"bugzilla":"840225","bugzilla_description":"CVE-2012-1965 Mozilla: feed: URLs with an innerURI inherit security context of page (MFSA 2012-55)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["firefox-0:10.0.6-1.el5_8","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1965.json"},{"CVE":"CVE-2012-1967","severity":"critical","public_date":"2012-07-17T00:00:00Z","advisories":["RHSA-2012:1089","RHSA-2012:1088"],"bugzilla":"840259","bugzilla_description":"CVE-2012-1967 Mozilla: Code execution through javascript: URLs (MFSA 2012-56)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el5_8","thunderbird-0:10.0.6-1.el6_3","firefox-0:10.0.6-1.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1967.json"},{"CVE":"CVE-2011-3101","severity":"critical","public_date":"2012-06-05T00:00:00Z","advisories":["RHSA-2012:0715","RHSA-2012:0710"],"bugzilla":"827829","bugzilla_description":"CVE-2011-3101 CVE-2012-1937 CVE-2012-1938 CVE-2012-1939 CVE-2012-3105 Mozilla: Miscellaneous memory safety hazards (rv:13.0/ rv:10.0.5) (MFSA 2012-34)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["firefox-0:10.0.5-1.el6_2","firefox-0:10.0.5-1.el5_8","thunderbird-0:10.0.5-2.el5_8","thunderbird-0:10.0.5-2.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3101.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tibetan-machine-uni-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tibetan-machine-uni-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tibetan-machine-uni-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-icons_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-icons_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-icons_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-license_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-license_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-license_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server-applet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server-applet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server-applet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server-minimal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server-minimal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server-minimal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server-module_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server-module_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server-module_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc-server_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc_security_api_results.json
new file mode 100644
index 0000000..0c08ed4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tigervnc_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-26117","severity":"moderate","public_date":"2020-09-18T00:00:00Z","advisories":[],"bugzilla":"1882841","bugzilla_description":"CVE-2020-26117 tigervnc: certificate exceptions stored as authorities","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-296","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26117.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2019-15691","severity":"moderate","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2020:1497","RHSA-2020:3875"],"bugzilla":"1789908","bugzilla_description":"CVE-2019-15691 tigervnc: Stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["tigervnc-0:1.8.0-21.el7","tigervnc-0:1.9.0-14.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15691.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-15693","severity":"moderate","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2020:1497","RHSA-2020:3875"],"bugzilla":"1790313","bugzilla_description":"CVE-2019-15693 tigervnc: Heap buffer overflow in TightDecoder::FilterGradient","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["tigervnc-0:1.8.0-21.el7","tigervnc-0:1.9.0-14.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15693.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-15694","severity":"moderate","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2020:1497","RHSA-2020:3875"],"bugzilla":"1790315","bugzilla_description":"CVE-2019-15694 tigervnc: Heap buffer overflow in DecodeManager::decodeRect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["tigervnc-0:1.8.0-21.el7","tigervnc-0:1.9.0-14.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15694.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-15695","severity":"moderate","public_date":"2019-12-20T00:00:00Z","advisories":["RHSA-2020:1497","RHSA-2020:3875"],"bugzilla":"1790318","bugzilla_description":"CVE-2019-15695 tigervnc: Stack buffer overflow in CMsgReader::readSetCursor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["tigervnc-0:1.8.0-21.el7","tigervnc-0:1.9.0-14.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15695.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-15692","severity":"moderate","public_date":"2019-09-10T00:00:00Z","advisories":["RHSA-2020:1497","RHSA-2020:3875"],"bugzilla":"1789527","bugzilla_description":"CVE-2019-15692 tigervnc: Heap buffer overflow triggered from CopyRectDecoder due to incorrect value checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["tigervnc-0:1.8.0-21.el7","tigervnc-0:1.9.0-14.el8_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15692.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2017-7392","severity":"low","public_date":"2017-03-29T00:00:00Z","advisories":["RHSA-2017:2000"],"bugzilla":"1438694","bugzilla_description":"CVE-2017-7392 tigervnc: SSecurityVeNCrypt memory leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tigervnc-0:1.8.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7392.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7394","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":["RHSA-2017:2000"],"bugzilla":"1438700","bugzilla_description":"CVE-2017-7394 tigervnc: Server crash via long usernames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["tigervnc-0:1.8.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7394.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-7393","severity":"moderate","public_date":"2017-03-27T00:00:00Z","advisories":["RHSA-2017:2000"],"bugzilla":"1438697","bugzilla_description":"CVE-2017-7393 tigervnc: Double free via crafted fences","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["tigervnc-0:1.8.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7393.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-7395","severity":"moderate","public_date":"2017-03-27T00:00:00Z","advisories":["RHSA-2017:2000"],"bugzilla":"1438701","bugzilla_description":"CVE-2017-7395 tigervnc: Integer overflow in SMsgReader::readClientCutText","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["tigervnc-0:1.8.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7395.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-7396","severity":"low","public_date":"2017-03-27T00:00:00Z","advisories":["RHSA-2017:2000"],"bugzilla":"1438703","bugzilla_description":"CVE-2017-7396 tigervnc: SecurityServer and ClientServer memory leaks","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tigervnc-0:1.8.0-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7396.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5581","severity":"low","public_date":"2017-01-13T00:00:00Z","advisories":["RHSA-2017:2000","RHSA-2017:0630"],"bugzilla":"1415712","bugzilla_description":"CVE-2017-5581 tigervnc: Buffer overflow in ModifiablePixelBuffer::fillRect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["tigervnc-0:1.8.0-1.el7","tigervnc-0:1.1.0-24.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5581.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-10207","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":["RHSA-2017:2000","RHSA-2017:0630"],"bugzilla":"1418761","bugzilla_description":"CVE-2016-10207 tigervnc: VNC server can crash when TLS handshake terminates early","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tigervnc-0:1.8.0-1.el7","tigervnc-0:1.1.0-24.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10207.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-8240","severity":"moderate","public_date":"2014-10-10T00:00:00Z","advisories":["RHSA-2015:2233"],"bugzilla":"1151307","bugzilla_description":"CVE-2014-8240 tigervnc: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["tigervnc-0:1.3.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8240.json"},{"CVE":"CVE-2014-8241","severity":"moderate","public_date":"2014-10-10T00:00:00Z","advisories":["RHSA-2015:2233"],"bugzilla":"1151312","bugzilla_description":"CVE-2014-8241 tigervnc: NULL pointer dereference flaw in XRegion","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["tigervnc-0:1.3.1-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8241.json"},{"CVE":"CVE-2014-0011","severity":"moderate","public_date":"2014-03-19T00:00:00Z","advisories":[],"bugzilla":"1050928","bugzilla_description":"CVE-2014-0011 tigervnc: ZRLE decoding heap-based buffer overflow in vncviewer","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0011.json"},{"CVE":"CVE-2011-1775","severity":"moderate","public_date":"2011-05-04T00:00:00Z","advisories":["RHSA-2011:0871"],"bugzilla":"702470","bugzilla_description":"CVE-2011-1775 tigervnc: vncviewer can send password to server without proper validation of the X.509 certificate","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["tigervnc-0:1.0.90-0.15.20110314svn4359.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1775.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/time_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/time_security_api_results.json
new file mode 100644
index 0000000..dcc8476
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/time_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-15250","severity":"low","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1887810","bugzilla_description":"CVE-2020-15250 junit4: TemporaryFolder is shared between all users across system which could result in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15250.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3896","severity":"important","public_date":"2019-06-17T00:00:00Z","advisories":["RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1490"],"bugzilla":"1694812","bugzilla_description":"CVE-2019-3896 kernel: Double free in lib/idr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-0:2.6.32-754.15.3.el6","kernel-0:2.6.32-431.95.3.el6","kernel-0:2.6.32-504.79.3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3896.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-3837","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":[],"bugzilla":"1678423","bugzilla_description":"CVE-2019-3837 kernel: memory leak in tcp_recvmsg() with NET_DMA","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2018-16882","severity":"important","public_date":"2018-12-18T00:00:00Z","advisories":[],"bugzilla":"1660604","bugzilla_description":"CVE-2018-16882 Kernel: KVM: nVMX: use after free in posted interrupt processing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-6554","severity":null,"public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1623610","bugzilla_description":"CVE-2018-6554 kernel: irda: Memory leak caused by repeated binds of irda socket","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6554.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-6555","severity":null,"public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1623614","bugzilla_description":"CVE-2018-6555 kernel: irda: use-after-free vulnerability in the hashbin list","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6555.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2018-14619","severity":"important","public_date":"2018-08-28T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1622004","bugzilla_description":"CVE-2018-14619 kernel: crash (possible privesc) in kernel crypto api.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14619.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2018-10938","severity":"moderate","public_date":"2018-08-27T00:00:00Z","advisories":[],"bugzilla":"1622404","bugzilla_description":"CVE-2018-10938 kernel: infinite loop in net/ipv4/cipso_ipv4.c:cipso_v4_optptr() allows for DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10938.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9363","severity":"moderate","public_date":"2018-08-16T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1623067","bugzilla_description":"CVE-2018-9363 kernel: Buffer overflow in hidp_process_report","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9363.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2018-15471","severity":"important","public_date":"2018-08-14T17:00:00Z","advisories":[],"bugzilla":"1610555","bugzilla_description":"CVE-2018-15471 kernel: net: xen: Linux netback driver OOB access in hash handling (XSA-270)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15471.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.2"},{"CVE":"CVE-2018-7754","severity":"low","public_date":"2018-08-09T00:00:00Z","advisories":[],"bugzilla":"1616374","bugzilla_description":"CVE-2018-7754 kernel: Information Exposure in aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7754.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-5953","severity":null,"public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1614057","bugzilla_description":"CVE-2018-5953 kernel: Information Exposure through dmesg data from a \"software IO TLB\" printk call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5953.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-5995","severity":null,"public_date":"2018-08-07T00:00:00Z","advisories":[],"bugzilla":"1614061","bugzilla_description":"CVE-2018-5995 kernel: Information Exposure through dmesg data from a \"pages/cpu\" printk call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5995.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-15594","severity":"moderate","public_date":"2018-08-03T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1620555","bugzilla_description":"CVE-2018-15594 kernel: Mishandling of indirect calls weakens Spectre mitigation for paravirtual guests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15594.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-14616","severity":"low","public_date":"2018-07-09T00:00:00Z","advisories":[],"bugzilla":"1610106","bugzilla_description":"CVE-2018-14616 kernel: NULL pointer dereference in fs/crypto/crypto.c:fscrypt_do_page_crypto() when operating on a corrupted f2fs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-16276","severity":"moderate","public_date":"2018-07-06T00:00:00Z","advisories":[],"bugzilla":"1624507","bugzilla_description":"CVE-2018-16276 kernel: incorrect bounds checking in yurex_read in drivers/usb/misc/yurex.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16276.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-13405","severity":"important","public_date":"2018-07-05T00:00:00Z","advisories":["RHSA-2019:2476","RHSA-2019:2696","RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083","RHSA-2019:2566","RHSA-2019:4159","RHSA-2019:2730","RHSA-2019:4164","RHSA-2019:0717"],"bugzilla":"1599161","bugzilla_description":"CVE-2018-13405 kernel: Missing check in fs/inode.c:inode_init_owner() does not clear SGID bit on non-directories for non-members","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-0:2.6.32-504.80.2.el6","kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-693.58.1.el7","kernel-0:3.10.0-862.41.1.el7","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:3.10.0-957.el7","kernel-0:3.10.0-327.83.1.el7","kernel-0:2.6.32-754.12.1.el6","kernel-alt-0:4.14.0-115.el7a","kernel-0:3.10.0-514.71.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13405.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-14615","severity":"low","public_date":"2018-07-05T00:00:00Z","advisories":[],"bugzilla":"1610102","bugzilla_description":"CVE-2018-14615 kernel: Buffer overflow in fs/f2fs/inline.c:truncate_inline_inode() when unmounting a crafted f2fs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14615.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-13053","severity":"low","public_date":"2018-06-27T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:0831","RHSA-2019:2043"],"bugzilla":"1597747","bugzilla_description":"CVE-2018-13053 kernel: Integer overflow in the alarm_timer_nsleep function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-14617","severity":"low","public_date":"2018-06-27T00:00:00Z","advisories":[],"bugzilla":"1610110","bugzilla_description":"CVE-2018-14617 kernel: NULL pointer dereference in fs/hfsplus/dir.c:hfsplus_lookup() when operating on a file in a crafted hfs+ image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-12714","severity":"moderate","public_date":"2018-06-23T00:00:00Z","advisories":[],"bugzilla":"1595835","bugzilla_description":"CVE-2018-12714 kernel: slab out-of-bounds write in trace/trace_events_filter.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12714.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2018-12896","severity":null,"public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597759","bugzilla_description":"CVE-2018-12896 kernel: Integer overflow in kernel/time/posix-timers.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12896.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-13096","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597782","bugzilla_description":"CVE-2018-13096 kernel: out-of-bounds memory access in fs/f2fs/super.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13096.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-13097","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597786","bugzilla_description":"CVE-2018-13097 kernel: divide-by-zero in fs/f2fs/super.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13097.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-13098","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597792","bugzilla_description":"CVE-2018-13098 kernel: slab out-of-bounds read in fs/f2fs/inode.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13098.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-13099","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597810","bugzilla_description":"CVE-2018-13099 kernel: out-of-bounds memory access in fs/f2fs/inline.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13099.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-13100","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1597814","bugzilla_description":"CVE-2018-13100 kernel: divide-by-zero in fs/f2fs/super.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13100.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-10882","severity":"low","public_date":"2018-06-14T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1596842","bugzilla_description":"CVE-2018-10882 kernel: stack-out-of-bounds write infs/jbd2/transaction.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10882.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.8"},{"CVE":"CVE-2018-10883","severity":"low","public_date":"2018-06-14T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1596846","bugzilla_description":"CVE-2018-10883 kernel: stack-out-of-bounds write in jbd2_journal_dirty_metadata function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10883.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.8"},{"CVE":"CVE-2018-12904","severity":"moderate","public_date":"2018-06-12T00:00:00Z","advisories":[],"bugzilla":"1595143","bugzilla_description":"CVE-2018-12904 kernel: kvm: nVMX: missing privilege check allows privilege escalation in nested virtualization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12904.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-10881","severity":"low","public_date":"2018-06-10T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1596828","bugzilla_description":"CVE-2018-10881 kernel: out-of-bound access in ext4_get_group_info() when mounting and operating a crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10881.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2018-10880","severity":"low","public_date":"2018-06-09T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1596812","bugzilla_description":"CVE-2018-10880 kernel: stack-out-of-bounds write in ext4_update_inline_data function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10880.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-10879","severity":"low","public_date":"2018-06-08T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1596806","bugzilla_description":"CVE-2018-10879 kernel: use-after-free detected in ext4_xattr_set_entry with a crafted file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10879.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.2"},{"CVE":"CVE-2018-13094","severity":"low","public_date":"2018-06-07T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:0831","RHSA-2019:2043"],"bugzilla":"1597771","bugzilla_description":"CVE-2018-13094 kernel: NULL pointer dereference in xfs_da_shrink_inode function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13094.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-13095","severity":"low","public_date":"2018-06-03T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043","RHSA-2019:1350"],"bugzilla":"1597775","bugzilla_description":"CVE-2018-13095 kernel: NULL pointer dereference in fs/xfs/libxfs/xfs_inode_buf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.8.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13095.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-12233","severity":"moderate","public_date":"2018-06-01T00:00:00Z","advisories":[],"bugzilla":"1590205","bugzilla_description":"CVE-2018-12233 kernel: Memory corruption in JFS setattr","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12233.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-14734","severity":"moderate","public_date":"2018-06-01T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:0831","RHSA-2019:2043"],"bugzilla":"1611005","bugzilla_description":"CVE-2018-14734 kernel: use-after-free in ucma_leave_multicast in drivers/infiniband/core/ucma.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-alt-0:4.14.0-115.7.1.el7a","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14734.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-10878","severity":"moderate","public_date":"2018-05-28T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1596802","bugzilla_description":"CVE-2018-10878 kernel: out-of-bound write in ext4_init_block_bitmap function with a crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10878.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.8"},{"CVE":"CVE-2018-14609","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610074","bugzilla_description":"CVE-2018-14609 kernel: Invalid pointer dereference in fs/btrfs/relocation.c:__del_reloc_root() when mounting crafted btrfs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14609.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-14610","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610079","bugzilla_description":"CVE-2018-14610 kernel: Out-of-bounds access in write_extent_buffer() when mounting and operating a crafted btrfs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14610.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-14611","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610084","bugzilla_description":"CVE-2018-14611 kernel: Use-after-free in try_merge_free_space() when mounting crafted btrfs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14611.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2018-14612","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610088","bugzilla_description":"CVE-2018-14612 kernel: Invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14612.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-14613","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610092","bugzilla_description":"CVE-2018-14613 kernel: Invalid pointer dereference in io_ctl_map_page() when mounting and operating a crafted btrfs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14613.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-14614","severity":"low","public_date":"2018-05-26T00:00:00Z","advisories":[],"bugzilla":"1610098","bugzilla_description":"CVE-2018-14614 kernel: Out-of-bounds access in fs/f2fs/segment.c:__remove_dirty_segment() when mounting a crafted f2fs image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14614.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-11412","severity":"moderate","public_date":"2018-05-22T00:00:00Z","advisories":["RHSA-2019:0525"],"bugzilla":"1582358","bugzilla_description":"CVE-2018-11412 kernel: out-of-bounds memcpy in fs/ext4/inline.c:ext4_read_inline_data() with crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-805","affected_packages":["kernel-alt-0:4.14.0-115.6.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11412.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-11506","severity":"moderate","public_date":"2018-05-21T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1583210","bugzilla_description":"CVE-2018-11506 kernel: Stack-based buffer overflow in drivers/scsi/sr_ioctl.c allows denial of service or other unspecified impact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11506.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000204","severity":"low","public_date":"2018-05-18T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1589324","bugzilla_description":"CVE-2018-1000204 kernel: Infoleak caused by incorrect handling of the SG_IO ioctl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000204.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2018-5814","severity":"moderate","public_date":"2018-05-15T00:00:00Z","advisories":[],"bugzilla":"1588620","bugzilla_description":"CVE-2018-5814 kernel: Race condition errors in USB over IP functionality can cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5814.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-11508","severity":"low","public_date":"2018-05-11T00:00:00Z","advisories":[],"bugzilla":"1583314","bugzilla_description":"CVE-2018-11508 kernel: Missing initialization in kernel/compat.c:compat_get_timex() allows local attacker to obtain possibly sensitive information via adjtimex","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11508.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-12633","severity":"moderate","public_date":"2018-05-08T00:00:00Z","advisories":[],"bugzilla":"1594170","bugzilla_description":"CVE-2018-12633 kernel: Double-fetch vulnerability in drivers/virt/vboxguest/vboxguest_linux.c:vbg_misc_device_ioctl() allows information leak and local denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12633.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2018-1000200","severity":"moderate","public_date":"2018-04-24T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1568744","bugzilla_description":"CVE-2018-1000200 kernel: NULL pointer dereference on OOM kill of large mlocked process","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000200.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-1118","severity":"low","public_date":"2018-04-23T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1573699","bugzilla_description":"CVE-2018-1118 kernel: vhost: Information disclosure in vhost/vhost.c:vhost_new_msg()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1118.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.3"},{"CVE":"CVE-2018-10940","severity":"low","public_date":"2018-04-18T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1577408","bugzilla_description":"CVE-2018-10940 kernel: incorrect memory bounds check in drivers/cdrom/cdrom.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10940.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2018-10323","severity":"low","public_date":"2018-04-17T00:00:00Z","advisories":[],"bugzilla":"1571627","bugzilla_description":"CVE-2018-10323 kernel: Invalid pointer dereference in xfs_bmapi_write() when mounting and operating on crafted xfs image allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10323.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-10876","severity":"low","public_date":"2018-04-16T00:00:00Z","advisories":["RHSA-2019:0525"],"bugzilla":"1596773","bugzilla_description":"CVE-2018-10876 kernel: use-after-free in jbd2_journal_commit_transaction funtion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-alt-0:4.14.0-115.6.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10876.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-10877","severity":"low","public_date":"2018-04-16T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1596795","bugzilla_description":"CVE-2018-10877 kernel: out-of-bound access in ext4_ext_drop_refs function with a crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10877.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2018-1108","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":[],"bugzilla":"1567306","bugzilla_description":"CVE-2018-1108 kernel: drivers: getrandom(2) unblocks too early after system boot","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1108.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-10322","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1571623","bugzilla_description":"CVE-2018-10322 kernel: Invalid pointer dereference in xfs_ilock_attr_map_shared() when mounting crafted xfs image allowing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10322.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-13093","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1597766","bugzilla_description":"CVE-2018-13093 kernel: NULL pointer dereference in lookup_slow function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13093.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-12928","severity":"low","public_date":"2018-04-12T00:00:00Z","advisories":[],"bugzilla":"1597826","bugzilla_description":"CVE-2018-12928 kernel: NULL pointer dereference in hfs_ext_read_extent in hfs.ko","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12928.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.0"},{"CVE":"CVE-2018-10840","severity":"moderate","public_date":"2018-04-11T00:00:00Z","advisories":["RHSA-2019:0162"],"bugzilla":"1582346","bugzilla_description":"CVE-2018-10840 kernel: Heap-based buffer overflow in fs/ext4/xattr.c:ext4_xattr_set_entry() with crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-alt-0:4.14.0-115.5.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10840.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2018-9056","severity":"moderate","public_date":"2018-03-28T00:00:00Z","advisories":[],"bugzilla":"1561794","bugzilla_description":"CVE-2018-9056 hw: cpu: speculative execution branch predictor side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9056.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-1092","severity":"low","public_date":"2018-03-22T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1560777","bugzilla_description":"CVE-2018-1092 kernel: NULL pointer dereference in ext4/mballoc.c:ext4_process_freed_data() when mounting crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1092.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-1093","severity":"low","public_date":"2018-03-22T00:00:00Z","advisories":[],"bugzilla":"1560782","bugzilla_description":"CVE-2018-1093 kernel: Out of bounds read in ext4/balloc.c:ext4_valid_block_bitmap() causes crash with crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1093.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-1094","severity":"low","public_date":"2018-03-22T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1560788","bugzilla_description":"CVE-2018-1094 kernel: NULL pointer dereference in ext4/xattr.c:ext4_xattr_inode_hash() causes crash with crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1094.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2018-1095","severity":"low","public_date":"2018-03-22T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1560793","bugzilla_description":"CVE-2018-1095 kernel: out-of-bound access in fs/posix_acl.c:get_acl() causes crash with crafted ext4 image","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1095.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.2"},{"CVE":"CVE-2018-8781","severity":"important","public_date":"2018-03-21T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1571062","bugzilla_description":"CVE-2018-8781 kernel: Integer overflow in drivers/gpu/drm/udl/udl_fb.c:udl_fb_mmap() can allow attackers to execute code in kernel space","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8781.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-8822","severity":"moderate","public_date":"2018-03-20T00:00:00Z","advisories":[],"bugzilla":"1558697","bugzilla_description":"CVE-2018-8822 kernel: Memory corruption in ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8822.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-7995","severity":"low","public_date":"2018-03-09T00:00:00Z","advisories":[],"bugzilla":"1553911","bugzilla_description":"CVE-2018-7995 kernel: Race condition in the store_int_with_restart() function in cpu/mcheck/mce.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7995.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-7755","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1553216","bugzilla_description":"CVE-2018-7755 kernel: Information exposure in fd_locked_ioctl function in drivers/block/floppy.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-7757","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1553361","bugzilla_description":"CVE-2018-7757 kernel: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7757.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18222","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":[],"bugzilla":"1553371","bugzilla_description":"CVE-2017-18222 kernel: Memory corruption in ethtool_get_strings function in hns driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18222.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2018-10021","severity":null,"public_date":"2018-03-08T00:00:00Z","advisories":[],"bugzilla":"1566407","bugzilla_description":"CVE-2018-10021 kernel: ata qc leak in drivers/scsi/libsas/sas_scsi_host.c allows local users to cause denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10021.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.0"},{"CVE":"CVE-2017-18221","severity":"moderate","public_date":"2018-03-07T00:00:00Z","advisories":[],"bugzilla":"1552849","bugzilla_description":"CVE-2017-18221 kernel: Race condition in __munlock_pagevec function in mm/mlock.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18221.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-7740","severity":"low","public_date":"2018-03-07T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1552867","bugzilla_description":"CVE-2018-7740 kernel: Denial of service in resv_map_release function in mm/hugetlb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7740.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-1130","severity":"moderate","public_date":"2018-03-07T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083","RHSA-2018:1854"],"bugzilla":"1576419","bugzilla_description":"CVE-2018-1130 kernel: a null pointer dereference in net/dccp/output.c:dccp_write_xmit() leads to a system crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18202","severity":"important","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2018:2772"],"bugzilla":"1549621","bugzilla_description":"CVE-2017-18202 kernel: Infoleak/use-after-free in __oom_reap_task_mm function in mm/oom_kill.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-alt-0:4.14.0-49.13.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18202.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2018-7480","severity":"moderate","public_date":"2018-02-25T00:00:00Z","advisories":[],"bugzilla":"1549427","bugzilla_description":"CVE-2018-7480 kernel: Double free in block/blk-cgroup.c:blkcg_init_queue() can allow a local user to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7480.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-18193","severity":"low","public_date":"2018-02-22T00:00:00Z","advisories":[],"bugzilla":"1549421","bugzilla_description":"CVE-2017-18193 kernel: Mishandled extent trees in fs/f2fs/extent_cache.c can allow a local user to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18193.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7273","severity":"low","public_date":"2018-02-20T00:00:00Z","advisories":[],"bugzilla":"1547384","bugzilla_description":"CVE-2018-7273 kernel: Kernel address information leak in drivers/block/floppy.c:show_floppy function potentially allowing KASLR bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7273.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2018-6927","severity":"low","public_date":"2018-02-12T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:0654"],"bugzilla":"1544612","bugzilla_description":"CVE-2018-6927 kernel: Integer overflow in futex.c:futux_requeue can lead to denial of service or unspecified impact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6927.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6791","severity":"moderate","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1543457","bugzilla_description":"CVE-2018-6791 kde-runtime: Arbitrary command execution in the removable device notifier","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6791.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-1065","severity":"moderate","public_date":"2018-02-04T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1547824","bugzilla_description":"CVE-2018-1065 kernel: netfilter: xtables NULL pointer dereference in ip6_tables.c:ip6t_do_table() leading to a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1065.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-6412","severity":"low","public_date":"2018-01-31T00:00:00Z","advisories":[],"bugzilla":"1541240","bugzilla_description":"CVE-2018-6412 kernel: Incorrect integer signedness in sbuslibc:sbusfb_ioctl_helper() allows for information leakage","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-194","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6412.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-16911","severity":"low","public_date":"2018-01-31T00:00:00Z","advisories":[],"bugzilla":"1541876","bugzilla_description":"CVE-2017-16911 kernel: vhci_cd driver in usbip/vhci_sysfs.c:port_show_vhci() discloses kernel memory addresses to local attackers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-214","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16911.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-11232","severity":"low","public_date":"2018-01-23T00:00:00Z","advisories":[],"bugzilla":"1580583","bugzilla_description":"CVE-2018-11232 kernel: coresight: kernel panic caused by invalid CPU","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-8087","severity":"low","public_date":"2018-01-18T00:00:00Z","advisories":["RHSA-2019:2029","RHSA-2019:2043"],"bugzilla":"1555145","bugzilla_description":"CVE-2018-8087 kernel: Memory leak in drivers/net/wireless/mac80211_hwsim.c:hwsim_new_radio_nl() can lead to potential denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-1062.rt56.1022.el7","kernel-0:3.10.0-1062.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8087.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18174","severity":"moderate","public_date":"2018-01-17T00:00:00Z","advisories":[],"bugzilla":"1544482","bugzilla_description":"CVE-2017-18174 kernel: Double free vulnerability in drivers/pinctrl/pinctrl-amd.c:amd_gpio_remove() function can lead to kernel panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18174.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-1000026","severity":"moderate","public_date":"2018-01-12T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1541846","bugzilla_description":"CVE-2018-1000026 kernel: Improper validation in bnx2x network card driver can allow for denial of service attacks via crafted packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000026.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2018-8043","severity":"low","public_date":"2018-01-11T00:00:00Z","advisories":[],"bugzilla":"1554199","bugzilla_description":"CVE-2018-8043 kernel: NULL pointer dereference in drivers/net/phy/mdio-bcm-unimac.c:unimac_mdio_probe() can lead to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252->CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8043.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.1"},{"CVE":"CVE-2018-5344","severity":"moderate","public_date":"2018-01-06T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1533909","bugzilla_description":"CVE-2018-5344 kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5344.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-10074","severity":"moderate","public_date":"2018-01-04T00:00:00Z","advisories":[],"bugzilla":"1567822","bugzilla_description":"CVE-2018-10074 kernel: Null pointer dereference in drivers/clk/hisilicon/clk-hi3660-stub.c:hi3660_stub_clk_probe() allows local users to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10074.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-5703","severity":"moderate","public_date":"2018-01-03T00:00:00Z","advisories":[],"bugzilla":"1535110","bugzilla_description":"CVE-2018-5703 kernel: net/ipv6/tcp_ipv6.c:tcp_v6_syn_recv_sock function allows attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5703.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-13220","severity":"moderate","public_date":"2018-01-02T00:00:00Z","advisories":[],"bugzilla":"1536155","bugzilla_description":"CVE-2017-13220 kernel: Possible out-of-bound access in Bluetooth subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-843","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13220.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-17864","severity":"low","public_date":"2017-12-23T00:00:00Z","advisories":[],"bugzilla":"1529120","bugzilla_description":"CVE-2017-17864 kernel: information disclosure via pointer leak in kernel/bpf/verifier.c","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17863","severity":"moderate","public_date":"2017-12-23T00:00:00Z","advisories":[],"bugzilla":"1529123","bugzilla_description":"CVE-2017-17863 kernel: integer overflow in static int check_alu_op function in bpf/verifier.c","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17863.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17862","severity":"low","public_date":"2017-12-23T00:00:00Z","advisories":[],"bugzilla":"1529124","bugzilla_description":"CVE-2017-17862 kernel: Improper logic pruning in bpf/verifier.c","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-561","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17862.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-16996","severity":"important","public_date":"2017-12-22T00:00:00Z","advisories":[],"bugzilla":"1528516","bugzilla_description":"CVE-2017-16996 kernel: memory corruption caused by BPF verifier bugs can allow for arbitrary code execution","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16996.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-17852","severity":"moderate","public_date":"2017-12-21T00:00:00Z","advisories":[],"bugzilla":"1530269","bugzilla_description":"CVE-2017-17852 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging mishandling of 32-bit ALU ops","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17852.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-18075","severity":"moderate","public_date":"2017-12-20T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1539508","bugzilla_description":"CVE-2017-18075 kernel: Mishandled freeing of instances in pcrypt.c can allow a local user to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18075.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-17853","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1530270","bugzilla_description":"CVE-2017-17853 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging incorrect BPF_RSH signed bounds calculations","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17853.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17854","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1530271","bugzilla_description":"CVE-2017-17854 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging unrestricted integer values for pointer arithmetic","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17854.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17855","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1530272","bugzilla_description":"CVE-2017-17855 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging improper use of pointers in place of scalars","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17855.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17856","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1530273","bugzilla_description":"CVE-2017-17856 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging the lack of stack-pointer alignment enforcement","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17856.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-17857","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":[],"bugzilla":"1530274","bugzilla_description":"CVE-2017-17857 kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging mishandling of invalid variable stack read operations","cvss_score":5.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:C","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-15129","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:0654","RHSA-2019:1946"],"bugzilla":"1531174","bugzilla_description":"CVE-2017-15129 kernel: net: double-free and memory corruption in get_net_ns_by_id()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-0:3.10.0-693.55.1.el7","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15129.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2018-5750","severity":"moderate","public_date":"2017-12-19T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:2948","RHSA-2018:0676"],"bugzilla":"1539706","bugzilla_description":"CVE-2018-5750 kernel: Kernel address information leak in drivers/acpi/sbshc.c:acpi_smbus_hc_add() function potentially allowing KASLR bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5750.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-17741","severity":"low","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1527112","bugzilla_description":"CVE-2017-17741 kernel: kvm: stack-based out-of-bounds read via vmcall instruction","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17741.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2017-16912","severity":"moderate","public_date":"2017-12-11T00:00:00Z","advisories":[],"bugzilla":"1541883","bugzilla_description":"CVE-2017-16912 kernel: Out-of-bounds read in usbip/stub_rx.c:get_pipe() allows attackers to cause a denial of service via crafted USB over IP packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16912.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-17712","severity":"important","public_date":"2017-12-10T00:00:00Z","advisories":["RHSA-2018:0502"],"bugzilla":"1526427","bugzilla_description":"CVE-2017-17712 kernel: Race condition in raw_sendmsg function allows denial-of-service or kernel addresses leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-alt-0:4.11.0-44.6.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17712.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-15127","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1525218","bugzilla_description":"CVE-2017-15127 kernel: Improper error handling of VM_SHARED hugetlbfs mapping in mm/hugetlb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-460","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-15128","severity":"moderate","public_date":"2017-12-08T00:00:00Z","advisories":[],"bugzilla":"1525222","bugzilla_description":"CVE-2017-15128 kernel: Out of bound access in hugetlb_mcopy_atomic_pte function in mm/hugetlb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15128.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-17807","severity":"moderate","public_date":"2017-12-08T00:00:00Z","advisories":["RHSA-2020:1070","RHSA-2020:1016"],"bugzilla":"1528335","bugzilla_description":"CVE-2017-17807 kernel: Missing permissions check for request_key() destination allows local attackers to add keys to keyring without Write permission","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["kernel-rt-0:3.10.0-1127.rt56.1093.el7","kernel-0:3.10.0-1127.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17807.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-18232","severity":"low","public_date":"2017-12-08T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1558066","bugzilla_description":"CVE-2017-18232 kernel: Mishandling mutex within libsas allowing local Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-833","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18232.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-16914","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1541282","bugzilla_description":"CVE-2017-16914 kernel: NULL pointer dereference in usb/usbip/stub_tx.c:stub_send_ret_submit() can lead to denial of service via crafted USB over IP packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16914.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-16913","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":[],"bugzilla":"1541888","bugzilla_description":"CVE-2017-16913 kernel: Improper validation in usbip/stub_rx.c:stub_recv_cmd_submit() allows for denial of service via crafted USB over IP CMD_SUBMIT packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16913.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-7492","severity":"moderate","public_date":"2017-12-06T00:00:00Z","advisories":[],"bugzilla":"1527393","bugzilla_description":"CVE-2018-7492 kernel: Null pointer dereference in net/rds/rdma.c:__rds_rdma_map() allowing local attackers to cause denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-15121","severity":"moderate","public_date":"2017-12-05T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:1854"],"bugzilla":"1520893","bugzilla_description":"CVE-2017-15121 kernel: vfs: BUG in truncate_inode_pages_range() and fuse client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15121.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-15126","severity":"moderate","public_date":"2017-12-05T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1523481","bugzilla_description":"CVE-2017-15126 kernel: Use-after-free in userfaultfd_event_wait_completion function in userfaultfd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-17450","severity":"low","public_date":"2017-12-05T00:00:00Z","advisories":[],"bugzilla":"1525761","bugzilla_description":"CVE-2017-17450 kernel: Unchecked capabilities in net/netfilter/xt_osf.c allows for unprivileged modification to systemwide fingerprint list","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17450.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-0861","severity":"moderate","public_date":"2017-12-05T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2020:0036","RHSA-2018:3083","RHSA-2018:2390"],"bugzilla":"1563994","bugzilla_description":"CVE-2017-0861 kernel: Use-after-free in snd_pcm_info function in ALSA subsystem potentially leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:2.6.32-754.3.5.el6","kernel-0:3.10.0-957.el7","kernel-0:3.10.0-862.46.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0861.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-17448","severity":"moderate","public_date":"2017-12-03T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:0654"],"bugzilla":"1525768","bugzilla_description":"CVE-2017-17448 kernel: Missing capabilities check in net/netfilter/nfnetlink_cthelper.c allows for unprivileged access to systemwide nfnl_cthelper_list structure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-alt-0:4.14.0-49.el7a","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17448.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-5848","severity":"moderate","public_date":"2017-12-02T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1590799","bugzilla_description":"CVE-2018-5848 kernel: buffer overflow in drivers/net/wireless/ath/wil6210/wmi.c:wmi_set_ie() may lead to memory corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5848.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-1000405","severity":"important","public_date":"2017-11-30T00:00:00Z","advisories":["RHSA-2018:0180"],"bugzilla":"1516514","bugzilla_description":"CVE-2017-1000405 kernel: pmd can become dirty without going through a COW cycle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-alt-0:4.11.0-44.4.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000405.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","cvss3_score":"6.1"},{"CVE":"CVE-2017-17805","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:2948","RHSA-2018:3096","RHSA-2019:2473","RHSA-2018:3083"],"bugzilla":"1528312","bugzilla_description":"CVE-2017-17805 kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:2.6.32-754.18.2.el6","kernel-0:3.10.0-957.el7","kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17805.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-17806","severity":"moderate","public_date":"2017-11-29T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1528323","bugzilla_description":"CVE-2017-17806 kernel: HMAC implementation does not validate that the underlying cryptographic hash algorithm is unkeyed allowing local attackers to cause denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17806.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-17975","severity":"low","public_date":"2017-11-19T00:00:00Z","advisories":[],"bugzilla":"1531142","bugzilla_description":"CVE-2017-17975 kernel: use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17975.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2017-18216","severity":"moderate","public_date":"2017-11-16T00:00:00Z","advisories":[],"bugzilla":"1551992","bugzilla_description":"CVE-2017-18216 kernel: Null pointer dereference in fs/ocfs2/cluster/nodemanager.c allows local users to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18216.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-16994","severity":"moderate","public_date":"2017-11-15T00:00:00Z","advisories":["RHSA-2018:0502"],"bugzilla":"1518155","bugzilla_description":"CVE-2017-16994 kernel: mm/pagewalk.c:walk_hugetlb_range function mishandles holes in hugetlb ranges causing information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["kernel-alt-0:4.11.0-44.6.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16994.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-18204","severity":"moderate","public_date":"2017-11-15T00:00:00Z","advisories":[],"bugzilla":"1550818","bugzilla_description":"CVE-2017-18204 kernel: Deadlock caused in fs/ocfs2/file.c:ocfs2_setattr() can allow local users to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18204.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18224","severity":"moderate","public_date":"2017-11-15T00:00:00Z","advisories":[],"bugzilla":"1557555","bugzilla_description":"CVE-2017-18224 kernel: race condition due to concurrent access to extent tree in fs/ocfs2/aops.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18224.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-16650","severity":"low","public_date":"2017-11-06T00:00:00Z","advisories":[],"bugzilla":"1516265","bugzilla_description":"CVE-2017-16650 kernel: Divide-by-zero in drivers/net/usb/qmi_wwan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16650.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16649","severity":"low","public_date":"2017-11-06T00:00:00Z","advisories":[],"bugzilla":"1516267","bugzilla_description":"CVE-2017-16649 kernel: Divide-by-zero in drivers/net/usb/cdc_ether.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16649.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-18203","severity":"moderate","public_date":"2017-11-01T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:1854","RHSA-2019:4154"],"bugzilla":"1550811","bugzilla_description":"CVE-2017-18203 kernel: Race condition in drivers/md/dm.c:dm_get_from_kobject() allows local users to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362->CWE-400","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-862.el7","kernel-alt-0:4.14.0-115.16.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18203.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-16645","severity":"low","public_date":"2017-10-28T00:00:00Z","advisories":[],"bugzilla":"1516235","bugzilla_description":"CVE-2017-16645 kernel: Out-of-bounds read in drivers/input/misc/ims-pcu.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16645.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16643","severity":"low","public_date":"2017-10-24T00:00:00Z","advisories":[],"bugzilla":"1516232","bugzilla_description":"CVE-2017-16643 kernel: Out-of-bounds read in drivers/input/tablet/gtco.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16643.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16648","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2018:2948"],"bugzilla":"1516257","bugzilla_description":"CVE-2017-16648 kernel: Use-after-free in drivers/media/dvb-core/dvb_frontend.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["kernel-alt-0:4.14.0-115.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16648.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16646","severity":"low","public_date":"2017-10-22T00:00:00Z","advisories":[],"bugzilla":"1516272","bugzilla_description":"CVE-2017-16646 kernel: BUG in drivers/media/usb/dvb-usb/dib0700_devices.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16646.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-15951","severity":"moderate","public_date":"2017-10-18T00:00:00Z","advisories":[],"bugzilla":"1507539","bugzilla_description":"CVE-2017-15951 kernel: Race condition in the KEYS subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15951.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-16535","severity":"low","public_date":"2017-10-18T00:00:00Z","advisories":[],"bugzilla":"1510823","bugzilla_description":"CVE-2017-16535 kernel: out-of-bounds read in usb_get_bos_descriptor function in drivers/usb/core/config.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16535.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-15115","severity":"low","public_date":"2017-10-17T00:00:00Z","advisories":[],"bugzilla":"1513345","bugzilla_description":"CVE-2017-15115 kernel: use-after-free in sctp_cmp_addr_exact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15115.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2017-15537","severity":"moderate","public_date":"2017-10-17T00:00:00Z","advisories":[],"bugzilla":"1529302","bugzilla_description":"CVE-2017-15537 kernel: Information leak of x86 FPU registers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15537.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.1"},{"CVE":"CVE-2017-5123","severity":"important","public_date":"2017-10-12T00:00:00Z","advisories":[],"bugzilla":"1500094","bugzilla_description":"CVE-2017-5123 kernel: Missing access_ok() checks in waitid()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5123.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-12188","severity":"important","public_date":"2017-10-10T00:00:00Z","advisories":["RHSA-2018:0412","RHSA-2018:0395"],"bugzilla":"1500380","bugzilla_description":"CVE-2017-12188 Kernel: KVM: MMU potential stack buffer overrun during page walks","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["kernel-0:3.10.0-693.21.1.el7","kernel-rt-0:3.10.0-693.21.1.rt56.639.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12188.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2017-16527","severity":"low","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1510828","bugzilla_description":"CVE-2017-16527 kernel: Use-after-free in snd_usb_mixer_interrupt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16527.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16647","severity":"low","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1516270","bugzilla_description":"CVE-2017-16647 kernel: NULL pointer dereference in drivers/net/usb/asix_devices.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16647.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-1000255","severity":"moderate","public_date":"2017-10-09T00:00:00Z","advisories":["RHSA-2018:0654"],"bugzilla":"1498067","bugzilla_description":"CVE-2017-1000255 kernel: Arbitrary stack overwrite causing oops via crafted signal frame","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-alt-0:4.14.0-49.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000255.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2017-16537","severity":"low","public_date":"2017-10-09T00:00:00Z","advisories":[],"bugzilla":"1510825","bugzilla_description":"CVE-2017-16537 kernel: NULL pointer dereference in imon_probe function in drivers/media/rc/imon.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16537.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16525","severity":"low","public_date":"2017-10-04T00:00:00Z","advisories":[],"bugzilla":"1510799","bugzilla_description":"CVE-2017-16525 kernel: Use-after-free in usb_serial_console_disconnect()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16525.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-18200","severity":"moderate","public_date":"2017-10-01T00:00:00Z","advisories":[],"bugzilla":"1549586","bugzilla_description":"CVE-2017-18200 kernel: mishandling reference counts associated with f2fs_wait_discard_bios calls allowing local attacker to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18200.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-14954","severity":"low","public_date":"2017-09-29T00:00:00Z","advisories":[],"bugzilla":"1497745","bugzilla_description":"CVE-2017-14954 kernel: Info leak in kernel_waitid()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14954.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-16532","severity":"low","public_date":"2017-09-29T00:00:00Z","advisories":[],"bugzilla":"1510835","bugzilla_description":"CVE-2017-16532 kernel: Null pointer dereference in get_endpoints function in drivers/usb/misc/usbtest.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16532.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16533","severity":"low","public_date":"2017-09-28T00:00:00Z","advisories":[],"bugzilla":"1510836","bugzilla_description":"CVE-2017-16533 kernel: out-of-bounds read in usbhid_parse function in drivers/hid/usbhid/hid-core.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16533.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-15299","severity":"moderate","public_date":"2017-09-27T00:00:00Z","advisories":["RHSA-2018:0654"],"bugzilla":"1498016","bugzilla_description":"CVE-2017-15299 kernel: Incorrect updates of uninstantiated keys crash the kernel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-alt-0:4.14.0-49.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15299.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-16538","severity":"low","public_date":"2017-09-26T00:00:00Z","advisories":[],"bugzilla":"1510826","bugzilla_description":"CVE-2017-16538 kernel: general protection fault in drivers/media/usb/dvb-usb-v2/lmedm04.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16538.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16529","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1510831","bugzilla_description":"CVE-2017-16529 kernel: out-of-bounds read in snd_usb_create_streams","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16529.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16530","severity":"low","public_date":"2017-09-22T00:00:00Z","advisories":[],"bugzilla":"1510832","bugzilla_description":"CVE-2017-16530 kernel: out-of-bounds read in drivers/usb/storage/uas-detect{.h,.c}","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16530.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16534","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1510822","bugzilla_description":"CVE-2017-16534 kernel: out-of-bounds read in cdc_parse_cdc_header function in drivers/usb/core/message.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16534.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16536","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1510824","bugzilla_description":"CVE-2017-16536 kernel: Null pointer dereference in cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16536.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16644","severity":"low","public_date":"2017-09-21T00:00:00Z","advisories":[],"bugzilla":"1516273","bugzilla_description":"CVE-2017-16644 kernel: Improper error handling in drivers/media/usb/hdpvr/hdpvr-core.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16644.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-16531","severity":"low","public_date":"2017-09-19T00:00:00Z","advisories":[],"bugzilla":"1510833","bugzilla_description":"CVE-2017-16531 kernel: out-of-bounds read in drivers/usb/core/config.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16531.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-1000252","severity":"moderate","public_date":"2017-09-15T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2018:1130"],"bugzilla":"1490781","bugzilla_description":"CVE-2017-1000252 kernel: kvm: Reachable BUG() on out-of-bounds guest IRQ","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-617","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7","kernel-0:3.10.0-693.25.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000252.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.4"},{"CVE":"CVE-2017-14991","severity":"moderate","public_date":"2017-09-15T00:00:00Z","advisories":[],"bugzilla":"1500366","bugzilla_description":"CVE-2017-14991 kernel: Information leak in the scsi driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14991.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-16526","severity":"low","public_date":"2017-09-14T00:00:00Z","advisories":[],"bugzilla":"1510827","bugzilla_description":"CVE-2017-16526 kernel: General protection fault in drivers/uwb/uwbd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-253","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16526.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-12153","severity":"low","public_date":"2017-09-13T00:00:00Z","advisories":[],"bugzilla":"1491046","bugzilla_description":"CVE-2017-12153 kernel: null pointer dereference in nl80211_set_rekey_data()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12153.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-1091","severity":"moderate","public_date":"2017-09-13T00:00:00Z","advisories":["RHSA-2018:1318"],"bugzilla":"1558149","bugzilla_description":"CVE-2018-1091 kernel: guest kernel crash during core dump on POWER9 host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["kernel-0:3.10.0-862.2.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-12154","severity":"important","public_date":"2017-09-12T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2019:1946"],"bugzilla":"1491224","bugzilla_description":"CVE-2017-12154 Kernel: kvm: nVMX: L2 guest could access hardware(L0) CR8 register","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-284","affected_packages":["kernel-0:3.10.0-693.55.1.el7","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12154.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2017-16528","severity":"moderate","public_date":"2017-09-12T00:00:00Z","advisories":[],"bugzilla":"1510830","bugzilla_description":"CVE-2017-16528 kernel: use-after-free in snd_rawmidi_dev_seq_free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16528.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2017-14051","severity":"moderate","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1487126","bugzilla_description":"CVE-2017-14051 kernel: Integer overflow in the qla2x00_sysfs_write_optrom_ctl function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14051.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-14497","severity":"moderate","public_date":"2017-08-28T00:00:00Z","advisories":[],"bugzilla":"1492593","bugzilla_description":"CVE-2017-14497 kernel: buffer overflow in tpacket_rcv() in net/packet/af_packet.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14497.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.0"},{"CVE":"CVE-2017-15116","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1514609","bugzilla_description":"CVE-2017-15116 kernel: Null pointer dereference in rngapi_reset function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15116.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14489","severity":"moderate","public_date":"2017-08-27T00:00:00Z","advisories":[],"bugzilla":"1490421","bugzilla_description":"CVE-2017-14489 kernel: scsi: nlmsg is not properly parsed in iscsi_if_rx function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14489.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-17052","severity":"moderate","public_date":"2017-08-26T00:00:00Z","advisories":[],"bugzilla":"1518632","bugzilla_description":"CVE-2017-17052 kernel: use-after-free in kernel/fork.c:mm_init function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17052.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2017-17053","severity":"moderate","public_date":"2017-08-24T00:00:00Z","advisories":[],"bugzilla":"1518638","bugzilla_description":"CVE-2017-17053 kernel: Incorrect handling in arch/x86/include/asm/mmu_context.h:init_new_context function allowing use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-252->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17053.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-14140","severity":"low","public_date":"2017-08-20T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1488329","bugzilla_description":"CVE-2017-14140 kernel: Missing permission check in move_pages system call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14140.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-13686","severity":"moderate","public_date":"2017-08-16T00:00:00Z","advisories":[],"bugzilla":"1485265","bugzilla_description":"CVE-2017-13686 kernel: NULL pointer dereference due to late check for a NULL fi field when RTM_F_FIB_MATCH is set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13686.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-1000111","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2017:2918","RHSA-2017:3200"],"bugzilla":"1479304","bugzilla_description":"CVE-2017-1000111 kernel: Heap out-of-bounds read in AF_PACKET sockets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.32-696.16.1.el6","kernel-rt-1:3.10.0-693.5.2.rt56.592.el6rt","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000111.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-18261","severity":"moderate","public_date":"2017-08-10T00:00:00Z","advisories":[],"bugzilla":"1569560","bugzilla_description":"CVE-2017-18261 kernel: Infinite recursion in arch/arm64/include/asm/arch_timer.h:arch_timer_reg_read_stable macro allows local users to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18261.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-14156","severity":"low","public_date":"2017-08-03T00:00:00Z","advisories":[],"bugzilla":"1478018","bugzilla_description":"CVE-2017-14156 kernel: driver/video/fbdev/aty/atyfb_base.c: atyfb_ioctl() stack infoleak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14156.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-12762","severity":"low","public_date":"2017-08-03T00:00:00Z","advisories":[],"bugzilla":"1481178","bugzilla_description":"CVE-2017-12762 kernel: Buffer overflow due to unbounded strcpy in ISDN I4L driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12762.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2014-9900","severity":"moderate","public_date":"2017-07-25T00:00:00Z","advisories":[],"bugzilla":"1481325","bugzilla_description":"CVE-2014-9900 kernel: Info leak in uninitialized structure ethtool_wolinfo in ethtool_get_wol()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9900.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2017-13693","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1485346","bugzilla_description":"CVE-2017-13693 kernel: ACPI operand cache leak in dsutils.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13693.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-13695","severity":"moderate","public_date":"2017-07-19T00:00:00Z","advisories":[],"bugzilla":"1485349","bugzilla_description":"CVE-2017-13695 kernel: ACPI operand cache leak in nseval.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13695.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-11473","severity":"low","public_date":"2017-07-18T00:00:00Z","advisories":["RHSA-2018:0654"],"bugzilla":"1473209","bugzilla_description":"CVE-2017-11473 kernel: Buffer overflow in mp_override_legacy_irq()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-alt-0:4.14.0-49.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11473.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2018-10087","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1568011","bugzilla_description":"CVE-2018-10087 kernel: Undefined behavior in kernel/exit.c:kernel_wait4() function allows local denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2018-10124","severity":"moderate","public_date":"2017-07-11T00:00:00Z","advisories":[],"bugzilla":"1568205","bugzilla_description":"CVE-2018-10124 kernel: Undefined behaviour with INT_MIN argument in kernel/signal.c:kill_something_info() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10124.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-11089","severity":"moderate","public_date":"2017-07-07T00:00:00Z","advisories":[],"bugzilla":"1564038","bugzilla_description":"CVE-2017-11089 kernel: Out-of-bounds read in nl80211_set_station allows privileged local attacker to cause system crash or possibly code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11089.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-18218","severity":"moderate","public_date":"2017-07-06T00:00:00Z","advisories":[],"bugzilla":"1551985","bugzilla_description":"CVE-2017-18218 kernel: Use-after-free vulnerability in drivers/net/ethernet/hisilicon/hns/hns_enet.c allows local attacker to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18218.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18079","severity":"moderate","public_date":"2017-07-03T00:00:00Z","advisories":[],"bugzilla":"1539725","bugzilla_description":"CVE-2017-18079 kernel: Null pointer dereference in drivers/input/serio/i8042.c leading to denial-of-service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18079.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-9986","severity":"low","public_date":"2017-06-28T00:00:00Z","advisories":[],"bugzilla":"1470211","bugzilla_description":"CVE-2017-9986 kernel: Double fetch in the intr function in sound/oss/msnd_pinnacle.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9986.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-9985","severity":"low","public_date":"2017-06-28T00:00:00Z","advisories":[],"bugzilla":"1470213","bugzilla_description":"CVE-2017-9985 kernel: Double fetch in the snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9985.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-13694","severity":"moderate","public_date":"2017-06-23T00:00:00Z","advisories":[],"bugzilla":"1485348","bugzilla_description":"CVE-2017-13694 kernel: ACPI node and node_ext cache leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13694.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-7518","severity":"moderate","public_date":"2017-06-22T00:00:00Z","advisories":["RHSA-2018:0412","RHSA-2018:0395"],"bugzilla":"1464473","bugzilla_description":"CVE-2017-7518 Kernel: KVM: debug exception via syscall emulation","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.21.1.el7","kernel-rt-0:3.10.0-693.21.1.rt56.639.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7518.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2017-9984","severity":"low","public_date":"2017-06-20T00:00:00Z","advisories":[],"bugzilla":"1470178","bugzilla_description":"CVE-2017-9984 kernel: Double fetch in the snd_msnd_interrupt function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9984.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-1000365","severity":"low","public_date":"2017-06-19T00:00:00Z","advisories":[],"bugzilla":"1462147","bugzilla_description":"CVE-2017-1000365 kernel: RLIMIT_STACK/RLIMIT_INFINITY string size limitation bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000365.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-1000370","severity":"low","public_date":"2017-06-19T00:00:00Z","advisories":[],"bugzilla":"1462153","bugzilla_description":"CVE-2017-1000370 kernel: offset2lib patch protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000370.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-1000371","severity":"low","public_date":"2017-06-19T00:00:00Z","advisories":["RHSA-2020:1524"],"bugzilla":"1462158","bugzilla_description":"CVE-2017-1000371 kernel: offset2lib allows for the stack guard page to be jumped over","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-0:2.6.32-754.29.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000371.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-15274","severity":"moderate","public_date":"2017-06-08T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676","RHSA-2019:1946"],"bugzilla":"1500391","bugzilla_description":"CVE-2017-15274 kernel: dereferencing NULL payload with nonzero length","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-693.55.1.el7","kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15274.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-9605","severity":"low","public_date":"2017-06-02T00:00:00Z","advisories":[],"bugzilla":"1462172","bugzilla_description":"CVE-2017-9605 kernel: Uninitialized kernel memory leak in vmw_gb_surface_define_ioctl function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9605.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-18241","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1559318","bugzilla_description":"CVE-2017-18241 kernel: Null pointer dereference in fs/f2fs/segment.c via mounting fs with noflush_merge option allows local denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18241.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-12146","severity":"moderate","public_date":"2017-05-25T00:00:00Z","advisories":["RHEA-2017:3163"],"bugzilla":"1489078","bugzilla_description":"CVE-2017-12146 kernel: Race condition in driver_override implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-alt-0:4.11.0-44.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12146.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-1000363","severity":"moderate","public_date":"2017-05-22T00:00:00Z","advisories":[],"bugzilla":"1451685","bugzilla_description":"CVE-2017-1000363 kernel: Out-of-bounds write in lp_setup in drivers/char/lp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000363.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2017-9242","severity":"moderate","public_date":"2017-05-19T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1456388","bugzilla_description":"CVE-2017-9242 kernel: Incorrect overwrite check in __ip6_append_data()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9242.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-10663","severity":"low","public_date":"2017-05-12T00:00:00Z","advisories":[],"bugzilla":"1481149","bugzilla_description":"CVE-2017-10663 kernel: Missing sanity check for segno and blkoff read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10663.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-9150","severity":"moderate","public_date":"2017-05-08T00:00:00Z","advisories":[],"bugzilla":"1454647","bugzilla_description":"CVE-2017-9150 kernel: eBPF verifier log leaks lower half of map pointer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9150.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-7487","severity":"low","public_date":"2017-05-02T00:00:00Z","advisories":[],"bugzilla":"1447734","bugzilla_description":"CVE-2017-7487 kernel: Reference counter leak in ipxitf_ioctl resulting into use after free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7487.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"5.6"},{"CVE":"CVE-2017-10662","severity":"low","public_date":"2017-05-02T00:00:00Z","advisories":[],"bugzilla":"1481146","bugzilla_description":"CVE-2017-10662 kernel: Missing sanity check for segment count in f2fs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10662.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-0630","severity":"low","public_date":"2017-05-01T00:00:00Z","advisories":[],"bugzilla":"1450039","bugzilla_description":"CVE-2017-0630 kernel: Information disclosure vulnerability in kernel trace subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0630.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-0627","severity":"low","public_date":"2017-05-01T00:00:00Z","advisories":[],"bugzilla":"1450042","bugzilla_description":"CVE-2017-0627 kernel: Information disclosure vulnerability in kernel UVC driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-9059","severity":"moderate","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1451386","bugzilla_description":"CVE-2017-9059 kernel: Module reference leak due to improper shut down of callback channel on umount","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9059.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-11472","severity":"low","public_date":"2017-04-26T00:00:00Z","advisories":[],"bugzilla":"1473214","bugzilla_description":"CVE-2017-11472 kernel: ACPI operand cache leak in acpi_ns_terminate()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11472.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.9"},{"CVE":"CVE-2017-7477","severity":"important","public_date":"2017-04-24T00:00:00Z","advisories":["RHSA-2017:1615","RHSA-2017:1616"],"bugzilla":"1445207","bugzilla_description":"CVE-2017-7477 kernel: net: Heap overflow in skb_to_sgvec in macsec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-0:3.10.0-514.26.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-8831","severity":"low","public_date":"2017-04-24T00:00:00Z","advisories":[],"bugzilla":"1449980","bugzilla_description":"CVE-2017-8831 kernel: Double fetch vulnerability in saa7164_bus_get function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8831.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.0"},{"CVE":"CVE-2007-6761","severity":"moderate","public_date":"2017-04-24T00:00:00Z","advisories":[],"bugzilla":"1458182","bugzilla_description":"CVE-2007-6761 kernel: Improper initialization of videobuf_mapping data structures","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6761.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-7979","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1444501","bugzilla_description":"CVE-2017-7979 kernel: cookie feature in packet action API implementation mishandles tb nlattr array","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7979.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7618","severity":"low","public_date":"2017-04-10T00:00:00Z","advisories":[],"bugzilla":"1441093","bugzilla_description":"CVE-2017-7618 kernel: Infinite recursion in ahash.c by triggering EBUSY on a full queue","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7618.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7616","severity":"moderate","public_date":"2017-04-08T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2018:1854","RHSA-2017:2077"],"bugzilla":"1441088","bugzilla_description":"CVE-2017-7616 kernel: Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-390","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2017-10810","severity":"low","public_date":"2017-04-06T00:00:00Z","advisories":[],"bugzilla":"1468023","bugzilla_description":"CVE-2017-10810 Kernel: virtio-gpu: memory leakage while creating gpu object","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10810.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"4.1"},{"CVE":"CVE-2017-7374","severity":"low","public_date":"2017-03-31T00:00:00Z","advisories":[],"bugzilla":"1438394","bugzilla_description":"CVE-2017-7374 kernel: use-after-free in keyring key revocation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7374.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2017-8106","severity":"moderate","public_date":"2017-03-31T00:00:00Z","advisories":[],"bugzilla":"1445828","bugzilla_description":"CVE-2017-8106 kernel: Null pointer dereference on host in INVEPT emulation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8106.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2017-7346","severity":"low","public_date":"2017-03-30T00:00:00Z","advisories":[],"bugzilla":"1437431","bugzilla_description":"CVE-2017-7346 kernel: drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7346.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7319","severity":null,"public_date":"2017-03-30T00:00:00Z","advisories":[],"bugzilla":"1440877","bugzilla_description":"CVE-2017-7319 kernel: Sending SIGIO signal to any process via fcntl","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7319.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-7286","severity":null,"public_date":"2017-03-29T00:00:00Z","advisories":[],"bugzilla":"1440871","bugzilla_description":"CVE-2017-7286 kernel: Inode integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7286.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2017-7294","severity":"moderate","public_date":"2017-03-28T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1436798","bugzilla_description":"CVE-2017-7294 kernel: drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7294.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2017-7261","severity":"low","public_date":"2017-03-24T00:00:00Z","advisories":[],"bugzilla":"1435719","bugzilla_description":"CVE-2017-7261 kernel: drm/vmwgfx: check that number of mip levels is above zero","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-839","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7261.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18249","severity":"moderate","public_date":"2017-03-22T00:00:00Z","advisories":[],"bugzilla":"1560968","bugzilla_description":"CVE-2017-18249 kernel: Race condition in fs/f2fs/node.c:add_free_nid() function allows local users to cause denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18249.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7277","severity":"low","public_date":"2017-03-18T00:00:00Z","advisories":[],"bugzilla":"1436629","bugzilla_description":"CVE-2017-7277 kernel: Mishandling SCM_TIMESTAMPING_OPT_STATS feature causes out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7277.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2017-6874","severity":"moderate","public_date":"2017-03-06T00:00:00Z","advisories":[],"bugzilla":"1432429","bugzilla_description":"CVE-2017-6874 kernel: Race condition in kernel/ucount.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6874.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8925","severity":"low","public_date":"2017-03-06T00:00:00Z","advisories":[],"bugzilla":"1451393","bugzilla_description":"CVE-2017-8925 kernel: Reference count mishandling in the omninet_open function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8925.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8924","severity":"low","public_date":"2017-03-06T00:00:00Z","advisories":[],"bugzilla":"1451399","bugzilla_description":"CVE-2017-8924 kernel: Information leak in completion handler in edge_bulk_in_callback function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8924.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-8065","severity":"moderate","public_date":"2017-02-27T00:00:00Z","advisories":[],"bugzilla":"1445338","bugzilla_description":"CVE-2017-8065 kernel: crypto/ccm.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8065.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8066","severity":"moderate","public_date":"2017-02-24T00:00:00Z","advisories":[],"bugzilla":"1445339","bugzilla_description":"CVE-2017-8066 kernel: gs_usb.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8066.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-6353","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":[],"bugzilla":"1428907","bugzilla_description":"CVE-2017-6353 kernel: Possible double free in stcp_sendmsg() (incorrect fix for CVE-2017-5986)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6353.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-18255","severity":"low","public_date":"2017-02-23T00:00:00Z","advisories":[],"bugzilla":"1563069","bugzilla_description":"CVE-2017-18255 kernel: Integer overflow in events/core.c:perf_cpu_time_max_percent_handler() can allow for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18255.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.4"},{"CVE":"CVE-2017-6347","severity":"moderate","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427984","bugzilla_description":"CVE-2017-6347 kernel: ipv4: Incorrect IP_CHECKSUM handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-6348","severity":"moderate","public_date":"2017-02-17T00:00:00Z","advisories":[],"bugzilla":"1428491","bugzilla_description":"CVE-2017-6348 kernel: net: Improper lock dropping in the hashbin_delete function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6348.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-8062","severity":"moderate","public_date":"2017-02-15T00:00:00Z","advisories":[],"bugzilla":"1445332","bugzilla_description":"CVE-2017-8062 kernel: dw2102.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8062.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-6346","severity":"moderate","public_date":"2017-02-14T00:00:00Z","advisories":[],"bugzilla":"1428487","bugzilla_description":"CVE-2017-6346 kernel: net: Race condition in net/packet/af_packet.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6346.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-6345","severity":"moderate","public_date":"2017-02-13T00:00:00Z","advisories":[],"bugzilla":"1428485","bugzilla_description":"CVE-2017-6345 kernel: llc: skb->sk set without skb->destructor","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6345.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2017-5972","severity":"moderate","public_date":"2017-02-12T00:00:00Z","advisories":[],"bugzilla":"1422081","bugzilla_description":"CVE-2017-5972 kernel: SYN cookie protection mechanism not properly implemented","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5972.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8061","severity":"moderate","public_date":"2017-02-12T00:00:00Z","advisories":[],"bugzilla":"1445333","bugzilla_description":"CVE-2017-8061 kernel: dvb-usb-firmware.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8061.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5967","severity":"low","public_date":"2017-02-10T00:00:00Z","advisories":[],"bugzilla":"1422138","bugzilla_description":"CVE-2017-5967 kernel: Time subsystem allows local users to discover real PID values","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5967.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-10661","severity":"moderate","public_date":"2017-02-10T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2020:0036","RHSA-2018:3083","RHSA-2019:4057","RHSA-2019:4058"],"bugzilla":"1481136","bugzilla_description":"CVE-2017-10661 kernel: Handling of might_cancel queueing is not properly pretected against race","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-693.61.1.el7","kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt","kernel-0:3.10.0-957.el7","kernel-0:3.10.0-862.46.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10661.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-8636","severity":"moderate","public_date":"2017-02-07T00:00:00Z","advisories":[],"bugzilla":"1421981","bugzilla_description":"CVE-2016-8636 kernel: Integer overflow in the RDMA over infiniband software implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8636.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2017-5986","severity":"moderate","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:1308"],"bugzilla":"1420276","bugzilla_description":"CVE-2017-5986 kernel: Reachable BUG_ON from userspace in sctp_wait_for_sndbuf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":["kernel-0:3.10.0-514.21.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5986.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5897","severity":"low","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1419848","bugzilla_description":"CVE-2017-5897 kernel: ip6_gre: Invalid reads in ip6gre_err","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2017-8063","severity":"moderate","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1445334","bugzilla_description":"CVE-2017-8063 kernel: cxusb.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8063.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8070","severity":"moderate","public_date":"2017-02-04T00:00:00Z","advisories":[],"bugzilla":"1445328","bugzilla_description":"CVE-2017-8070 kernel: catc.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8070.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8068","severity":"moderate","public_date":"2017-02-04T00:00:00Z","advisories":[],"bugzilla":"1445341","bugzilla_description":"CVE-2017-8068 kernel: pegasus.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8068.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8069","severity":"moderate","public_date":"2017-02-04T00:00:00Z","advisories":[],"bugzilla":"1445343","bugzilla_description":"CVE-2017-8069 kernel: rtl8150.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8069.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8064","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":[],"bugzilla":"1445336","bugzilla_description":"CVE-2017-8064 kernel: dvb_usb_core.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8064.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8067","severity":"moderate","public_date":"2017-02-01T00:00:00Z","advisories":[],"bugzilla":"1445340","bugzilla_description":"CVE-2017-8067 kernel: virtio_console.c interacts incorrectly with the CONFIG_VMAP_STACK option","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8067.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8072","severity":"moderate","public_date":"2017-01-30T00:00:00Z","advisories":[],"bugzilla":"1445330","bugzilla_description":"CVE-2017-8072 kernel: cp2112_gpio_direction_input does not have the expected EIO error status for a zero-length report","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8072.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8071","severity":"moderate","public_date":"2017-01-30T00:00:00Z","advisories":[],"bugzilla":"1445331","bugzilla_description":"CVE-2017-8071 kernel: hid-cp2112.c uses a spinlock without considering that sleeping is possible in a USB HID request callback","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8071.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8405","severity":"low","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1426132","bugzilla_description":"CVE-2016-8405 kernel: Copying color maps to userspace vulnerable to heap-buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8405.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2016-10142","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:0817"],"bugzilla":"1415908","bugzilla_description":"CVE-2016-10142 kernel - IPV6 fragmentation flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-406","affected_packages":["kernel-0:2.6.32-696.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10142.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.8"},{"CVE":"CVE-2017-2596","severity":"moderate","public_date":"2017-01-24T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1417812","bugzilla_description":"CVE-2017-2596 Kernel: kvm: page reference leakage in handle_vmon","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-772","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2596.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2017-18257","severity":"low","public_date":"2017-01-22T00:00:00Z","advisories":[],"bugzilla":"1565455","bugzilla_description":"CVE-2017-18257 kernel: Inifinite loop caused by integer overflow in fs/f2fs/data.c:__get_data_block() allows for denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18257.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5669","severity":"low","public_date":"2017-01-20T00:00:00Z","advisories":[],"bugzilla":"1427239","bugzilla_description":"CVE-2017-5669 kernel: Shmat allows mmap null page protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5669.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-5576","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1416436","bugzilla_description":"CVE-2017-5576 kernel: vc4: Integer overflow in temporary allocation layout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5576.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2017-5577","severity":"low","public_date":"2017-01-18T00:00:00Z","advisories":[],"bugzilla":"1416437","bugzilla_description":"CVE-2017-5577 kernel: vc4: Heap-buffer overflow due to failing checks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5577.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-5550","severity":"moderate","public_date":"2017-01-15T00:00:00Z","advisories":[],"bugzilla":"1416116","bugzilla_description":"CVE-2017-5550 kernel: Information leak due to fencepost error in pipe_advance()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5550.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2017-5547","severity":"low","public_date":"2017-01-13T00:00:00Z","advisories":[],"bugzilla":"1416096","bugzilla_description":"CVE-2017-5547 kernel: DMA buffers on stack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5547.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2017-2583","severity":"moderate","public_date":"2017-01-12T00:00:00Z","advisories":["RHSA-2017:1615","RHSA-2017:1616"],"bugzilla":"1414735","bugzilla_description":"CVE-2017-2583 Kernel: Kvm: vmx/svm potential privilege escalation inside guest","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-250","affected_packages":["kernel-rt-0:3.10.0-514.26.1.rt56.442.el7","kernel-0:3.10.0-514.26.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2583.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2017-5548","severity":"moderate","public_date":"2017-01-12T00:00:00Z","advisories":[],"bugzilla":"1416110","bugzilla_description":"CVE-2017-5548 kernel: Using stack for buffers in ieee802154","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5548.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-2584","severity":"low","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1413001","bugzilla_description":"CVE-2017-2584 Kernel: kvm: use after free in complete_emulated_mmio","cvss_score":5.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:C","CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2584.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-5546","severity":"moderate","public_date":"2017-01-11T00:00:00Z","advisories":[],"bugzilla":"1415733","bugzilla_description":"CVE-2017-5546 kernel: SLAB freelist randomization produces duplicate entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5546.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5549","severity":"low","public_date":"2017-01-10T00:00:00Z","advisories":[],"bugzilla":"1416114","bugzilla_description":"CVE-2017-5549 kernel: Incorrect line-state error handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-209","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5549.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8106","severity":"moderate","public_date":"2017-01-09T00:00:00Z","advisories":[],"bugzilla":"1386646","bugzilla_description":"CVE-2016-8106 kernel: DoS of Intel Ethernet controllers after a period of IPv6 fragment flood","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8106.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-0403","severity":"important","public_date":"2017-01-01T00:00:00Z","advisories":[],"bugzilla":"1417833","bugzilla_description":"CVE-2017-0403 kernel: Privilege escalation in Android performance subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0403.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-0404","severity":"important","public_date":"2017-01-01T00:00:00Z","advisories":[],"bugzilla":"1417834","bugzilla_description":"CVE-2017-0404 kernel: Privilege escalation in Android sound subsystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0404.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9588","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1404924","bugzilla_description":"CVE-2016-9588 Kernel: kvm: nVMX: uncaught software exceptions in L1 guest leads to DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-248","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9588.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2016-10154","severity":"moderate","public_date":"2016-12-14T00:00:00Z","advisories":[],"bugzilla":"1416104","bugzilla_description":"CVE-2016-10154 kernel: smbencrypt() points a scatterlist to the stack causing DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10154.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9919","severity":"important","public_date":"2016-12-08T00:00:00Z","advisories":[],"bugzilla":"1403260","bugzilla_description":"CVE-2016-9919 kernel: Linux panic on fragemented IPv6 traffic (icmp6_send)","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9919.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-8967","severity":"important","public_date":"2016-12-08T00:00:00Z","advisories":[],"bugzilla":"1404284","bugzilla_description":"CVE-2015-8967 kernel: arm64: Strict page permission bypass","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8967.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-8399","severity":"moderate","public_date":"2016-12-05T00:00:00Z","advisories":["RHSA-2017:2930","RHSA-2017:2931","RHSA-2017:0869","RHSA-2017:0817"],"bugzilla":"1403833","bugzilla_description":"CVE-2016-8399 kernel: net: Out of bounds stack read in memcpy_fromiovec","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":["kernel-rt-0:3.10.0-693.5.2.rt56.626.el7","kernel-0:2.6.32-573.41.1.el6","kernel-0:2.6.32-696.el6","kernel-0:3.10.0-693.5.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-10147","severity":"moderate","public_date":"2016-12-02T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1404200","bugzilla_description":"CVE-2016-10147 kernel: Kernel crash by spawning mcrypt(alg) with incompatible algorithm","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10147.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10153","severity":"moderate","public_date":"2016-12-02T00:00:00Z","advisories":[],"bugzilla":"1416101","bugzilla_description":"CVE-2016-10153 kernel: introduce ceph_crypt() for in-place en/decryption","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10153.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9685","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2669","RHSA-2017:2077"],"bugzilla":"1396941","bugzilla_description":"CVE-2016-9685 kernel: Memory leaks in xfs_attr_list.c error paths","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-772","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-rt-1:3.10.0-693.2.1.rt56.585.el6rt","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9685.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2016-10150","severity":"important","public_date":"2016-11-30T00:00:00Z","advisories":[],"bugzilla":"1414506","bugzilla_description":"CVE-2016-10150 Kernel: Kvm: a use-after-free while creating devices","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10150.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2016-9755","severity":"moderate","public_date":"2016-11-26T00:00:00Z","advisories":[],"bugzilla":"1400904","bugzilla_description":"CVE-2016-9755 kernel: netfilter: Out-of-bounds write due to a signedness issue when defragmenting IPv6 packets","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9755.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-9777","severity":"important","public_date":"2016-11-23T00:00:00Z","advisories":[],"bugzilla":"1400804","bugzilla_description":"CVE-2016-9777 Kernel: kvm: out of bounds memory access via vcpu_id","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9777.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2016-9756","severity":"low","public_date":"2016-11-22T00:00:00Z","advisories":[],"bugzilla":"1400468","bugzilla_description":"CVE-2016-9756 Kernel: kvm: stack memory information leakage","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9756.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"4.1"},{"CVE":"CVE-2017-12168","severity":"moderate","public_date":"2016-11-18T00:00:00Z","advisories":["RHEA-2017:3163"],"bugzilla":"1492984","bugzilla_description":"CVE-2017-12168 Kernel: kvm: ARM64: assert failure when accessing PMCCNTR register","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-617","affected_packages":["kernel-alt-0:4.11.0-44.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12168.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-9279","severity":"moderate","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1396669","bugzilla_description":"CVE-2016-9279 kernel: Use After Free in /dev/fimg2d","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9279.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9278","severity":"moderate","public_date":"2016-11-09T00:00:00Z","advisories":[],"bugzilla":"1396670","bugzilla_description":"CVE-2016-9278 kernel: Kernel Crash on /dev/fimg2d ioctl command","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9278.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-8632","severity":"moderate","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1390832","bugzilla_description":"CVE-2016-8632 kernel: TIPC subsystem: tipc_msg_build() doesn't validate MTU, may cause memory corruption.","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8632.json"},{"CVE":"CVE-2016-9191","severity":"moderate","public_date":"2016-11-05T00:00:00Z","advisories":[],"bugzilla":"1392439","bugzilla_description":"CVE-2016-9191 kernel: Local DoS via cgroup offline code","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9191.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9644","severity":"important","public_date":"2016-11-03T00:00:00Z","advisories":[],"bugzilla":"1399528","bugzilla_description":"CVE-2016-9644 kernel: Incorrect fix for CVE-2016-9178","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9644.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8630","severity":"important","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2017:0386","RHSA-2017:0387"],"bugzilla":"1393350","bugzilla_description":"CVE-2016-8630 kernel: kvm: x86: NULL pointer dereference during instruction decode","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-514.10.2.el7","kernel-rt-0:3.10.0-514.10.2.rt56.435.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8630.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-8660","severity":"low","public_date":"2016-10-13T00:00:00Z","advisories":[],"bugzilla":"1384851","bugzilla_description":"CVE-2016-8660 kernel: xfs: local DoS due to a page lock order bug in the XFS seek hole/data implementation","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8660.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9083","severity":"important","public_date":"2016-10-12T00:00:00Z","advisories":["RHSA-2017:0386","RHSA-2017:0387"],"bugzilla":"1389258","bugzilla_description":"CVE-2016-9083 kernel: State machine confusion bug in vfio driver leading to memory corruption","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-391","affected_packages":["kernel-0:3.10.0-514.10.2.el7","kernel-rt-0:3.10.0-514.10.2.rt56.435.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9083.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-9084","severity":"moderate","public_date":"2016-10-12T00:00:00Z","advisories":["RHSA-2017:0386","RHSA-2017:0387"],"bugzilla":"1389259","bugzilla_description":"CVE-2016-9084 kernel: Integer overflow when using kzalloc in vfio driver","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":["kernel-0:3.10.0-514.10.2.el7","kernel-rt-0:3.10.0-514.10.2.rt56.435.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9084.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2017-15102","severity":"low","public_date":"2016-09-19T00:00:00Z","advisories":[],"bugzilla":"1505905","bugzilla_description":"CVE-2017-15102 kernel: NULL pointer dereference due to race condition in probe function of legousbtower driver","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15102.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2016-10044","severity":"moderate","public_date":"2016-09-16T00:00:00Z","advisories":[],"bugzilla":"1420236","bugzilla_description":"CVE-2016-10044 kernel: aio_mount function does not properly restrict execute access","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10044.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-7425","severity":"low","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1377330","bugzilla_description":"CVE-2016-7425 kernel: SCSI arcmsr driver: Buffer overflow in arcmsr_iop_message_xfer()","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7425.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-9178","severity":"low","public_date":"2016-09-15T00:00:00Z","advisories":[],"bugzilla":"1391908","bugzilla_description":"CVE-2016-9178 kernel: Information leak in get_user_ex function","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9178.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-10318","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1439768","bugzilla_description":"CVE-2016-10318 kernel: User can assign an encryption policy to a directory owned by a different user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10318.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-8658","severity":"low","public_date":"2016-09-07T00:00:00Z","advisories":[],"bugzilla":"1384403","bugzilla_description":"CVE-2016-8658 kernel: Stack buffer overflow in brcmf_cfg80211_start_ap","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:C","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8658.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2015-8953","severity":"moderate","public_date":"2016-08-23T00:00:00Z","advisories":[],"bugzilla":"1367814","bugzilla_description":"CVE-2015-8953 kernel: overlayfs: Double dentry reference leak in copy-up failure","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:C","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8953.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2015-8952","severity":"low","public_date":"2016-08-22T00:00:00Z","advisories":[],"bugzilla":"1360968","bugzilla_description":"CVE-2015-8952 kernel: mbcache code subject to softlockup DOS in cache management","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8952.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6327","severity":"moderate","public_date":"2016-08-19T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1354525","bugzilla_description":"CVE-2016-6327 kernel: infiniband: Kernel crash by sending ABORT_TASK command","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6327.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-3841","severity":"important","public_date":"2016-08-08T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2695","RHSA-2016:2584","RHSA-2016:0855"],"bugzilla":"1364971","bugzilla_description":"CVE-2016-3841 kernel: use-after-free via crafted IPV6 sendmsg for raw / tcp / udp / l2tp sockets.","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-667","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7","kernel-0:3.10.0-327.41.3.el7","kernel-0:2.6.32-642.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2016-3857","severity":"important","public_date":"2016-08-05T00:00:00Z","advisories":[],"bugzilla":"1381188","bugzilla_description":"CVE-2016-3857 kernel: privilege escalation in sys_oabi_*() in arm kernel","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-6480","severity":"moderate","public_date":"2016-08-01T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2017:0817"],"bugzilla":"1362466","bugzilla_description":"CVE-2016-6480 kernel: scsi: aacraid: double fetch in ioctl_send_fib()","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-362","affected_packages":["kernel-0:2.6.32-696.el6","kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6480.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2017-0605","severity":"low","public_date":"2016-08-01T00:00:00Z","advisories":[],"bugzilla":"1450028","bugzilla_description":"CVE-2017-0605 kernel: Stack corruption due to string copy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0605.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-6516","severity":"important","public_date":"2016-07-31T00:00:00Z","advisories":[],"bugzilla":"1362457","bugzilla_description":"CVE-2016-6516 kernel: vfs: ioctl: double fetch leading to heap overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6516.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2016-6492","severity":"important","public_date":"2016-07-30T00:00:00Z","advisories":[],"bugzilla":"1363702","bugzilla_description":"CVE-2016-6492 kernel: privilege escalation flaw in mediatek driver","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6492.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.4"},{"CVE":"CVE-2016-5412","severity":"moderate","public_date":"2016-07-28T00:00:00Z","advisories":["RHSA-2016:2574"],"bugzilla":"1349916","bugzilla_description":"CVE-2016-5412 Kernel: powerpc: kvm: Infinite loop via H_CEDE hypercall when running under hypervisor-mode","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-835","affected_packages":["kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5412.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.4"},{"CVE":"CVE-2016-9313","severity":"moderate","public_date":"2016-07-22T00:00:00Z","advisories":[],"bugzilla":"1399519","bugzilla_description":"CVE-2016-9313 kernel: security/keys/big_key.c mishandles unsuccessful crypto registration","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-3044","severity":"important","public_date":"2016-07-22T00:00:00Z","advisories":["RHSA-2016:1033","RHSA-2016:2574"],"bugzilla":"1400495","bugzilla_description":"CVE-2016-3044 kernel: Infinite loop vulnerability in KVM","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-835","affected_packages":["kernel-0:3.10.0-514.el7","kernel-0:3.10.0-327.18.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3044.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.4"},{"CVE":"CVE-2016-5400","severity":"low","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1358184","bugzilla_description":"CVE-2016-5400 kernel: memory leak in airspy usb driver","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5400.json","cvss3_scoring_vector":"AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2016-6213","severity":"low","public_date":"2016-07-13T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1356471","bugzilla_description":"CVE-2016-6213 kernel: Overflowing kernel mount table using shared bind mount","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-770","affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6213.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-6197","severity":"moderate","public_date":"2016-07-11T00:00:00Z","advisories":["RHSA-2016:1847","RHSA-2016:1875"],"bugzilla":"1355650","bugzilla_description":"CVE-2016-6197 kernel: overlayfs: missing upper dentry verification before unlink and rename","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-362","affected_packages":["kernel-0:3.10.0-327.36.1.el7","kernel-rt-0:3.10.0-327.36.1.rt56.237.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6197.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6198","severity":"moderate","public_date":"2016-07-11T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2016:1847","RHSA-2016:1875"],"bugzilla":"1355654","bugzilla_description":"CVE-2016-6198 kernel: vfs: missing detection of hardlinks in vfs_rename() on overlayfs","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-362","affected_packages":["kernel-0:3.10.0-327.36.1.el7","kernel-rt-0:3.10.0-327.36.1.rt56.237.el7","kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6187","severity":"important","public_date":"2016-07-08T00:00:00Z","advisories":[],"bugzilla":"1354383","bugzilla_description":"CVE-2016-6187 kernel: apparmor: Potential privilege escalation via oops in apparmor_setprocattr()","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6187.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6156","severity":"moderate","public_date":"2016-07-04T00:00:00Z","advisories":[],"bugzilla":"1353490","bugzilla_description":"CVE-2016-6156 kernel: Race condition vulnerability in Chrome driver","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6156.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-6136","severity":"moderate","public_date":"2016-07-04T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2017:0307"],"bugzilla":"1353533","bugzilla_description":"CVE-2016-6136 kernel: Race condition vulnerability in execve argv arguments","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-362","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:2.6.32-642.15.1.el6","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6136.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-7911","severity":"moderate","public_date":"2016-07-01T00:00:00Z","advisories":[],"bugzilla":"1399722","bugzilla_description":"CVE-2016-7911 kernel: Use after free in sys_ioprio_get()","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7911.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-5829","severity":"moderate","public_date":"2016-06-25T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2016:2006"],"bugzilla":"1350509","bugzilla_description":"CVE-2016-5829 kernel: Heap buffer overflow in hiddev driver","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["kernel-0:2.6.32-642.6.1.el6","kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5829.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-5828","severity":"moderate","public_date":"2016-06-24T00:00:00Z","advisories":["RHSA-2016:2574"],"bugzilla":"1349917","bugzilla_description":"CVE-2016-5828 Kernel: powerpc: tm: crash via exec system call on PPC","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5828.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-1237","severity":"important","public_date":"2016-06-24T00:00:00Z","advisories":[],"bugzilla":"1350845","bugzilla_description":"CVE-2016-1237 kernel: Missing check for permissions when setting ACL","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-863","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1237.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-1583","severity":"important","public_date":"2016-06-10T00:00:00Z","advisories":["RHSA-2016:2124","RHSA-2017:2760","RHSA-2016:2766"],"bugzilla":"1344721","bugzilla_description":"CVE-2016-1583 kernel: Stack overflow via ecryptfs and /proc/$pid/environ","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["kernel-0:2.6.32-573.47.1.el6","kernel-0:2.6.18-416.el5","kernel-0:2.6.32-642.11.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1583.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-5243","severity":"low","public_date":"2016-06-03T00:00:00Z","advisories":[],"bugzilla":"1343335","bugzilla_description":"CVE-2016-5243 kernel: Information leak in tipc_nl_compat_link_dump","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5243.json"},{"CVE":"CVE-2016-5244","severity":"low","public_date":"2016-06-03T00:00:00Z","advisories":[],"bugzilla":"1343337","bugzilla_description":"CVE-2016-5244 kernel: Information leak in rds_inc_info_copy","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5244.json"},{"CVE":"CVE-2016-2143","severity":"moderate","public_date":"2016-06-01T00:00:00Z","advisories":["RHSA-2016:1539","RHSA-2016:2766"],"bugzilla":"1308908","bugzilla_description":"CVE-2016-2143 kernel: Fork of large process causes memory corruption","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["kernel-0:3.10.0-327.28.2.el7","kernel-0:2.6.32-642.11.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2143.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-4440","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1337806","bugzilla_description":"CVE-2016-4440 Kernel: kvm: vmx: incorrect state update leading to MSR access","cvss_score":5.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:C","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4440.json"},{"CVE":"CVE-2016-3713","severity":"moderate","public_date":"2016-05-16T00:00:00Z","advisories":[],"bugzilla":"1332139","bugzilla_description":"CVE-2016-3713 kernel: kvm: out-of-bounds access in set_var_mtrr_msr","cvss_score":5.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:C","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3713.json"},{"CVE":"CVE-2016-4951","severity":"moderate","public_date":"2016-05-16T00:00:00Z","advisories":[],"bugzilla":"1338625","bugzilla_description":"CVE-2016-4951 kernel: Null pointer dereference in tipc_nl_publ_dump","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4951.json"},{"CVE":"CVE-2014-8181","severity":"low","public_date":"2016-05-13T00:00:00Z","advisories":[],"bugzilla":"1335817","bugzilla_description":"CVE-2014-8181 kernel: scsi: do not fill dirty page content in the SG_IO buffer","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8181.json"},{"CVE":"CVE-2016-9754","severity":"important","public_date":"2016-05-13T00:00:00Z","advisories":[],"bugzilla":"1410370","bugzilla_description":"CVE-2016-9754 kernel: Integer overflow in ring_buffer_resize()","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9754.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2016-3070","severity":"low","public_date":"2016-05-10T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1308846","bugzilla_description":"CVE-2016-3070 kernel: Null pointer dereference in trace_writeback_dirty_page()","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3070.json"},{"CVE":"CVE-2016-4569","severity":"low","public_date":"2016-05-08T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1334643","bugzilla_description":"CVE-2016-4569 kernel: Information leak in Linux sound module in timer.c","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-665","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4569.json"},{"CVE":"CVE-2016-4580","severity":"low","public_date":"2016-05-08T00:00:00Z","advisories":[],"bugzilla":"1338756","bugzilla_description":"CVE-2016-4580 kernel: Information leak in x25 module","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4580.json"},{"CVE":"CVE-2016-4568","severity":"low","public_date":"2016-05-07T00:00:00Z","advisories":[],"bugzilla":"1334316","bugzilla_description":"CVE-2016-4568 kernel: videobuf2-v412: Planes array amount not verified in buffer dequeueing","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4568.json"},{"CVE":"CVE-2016-4581","severity":"moderate","public_date":"2016-05-05T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1333712","bugzilla_description":"CVE-2016-4581 kernel: Slave being first propagated copy causes oops in propagate_mnt","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4581.json"},{"CVE":"CVE-2016-4913","severity":"low","public_date":"2016-05-05T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083"],"bugzilla":"1337528","bugzilla_description":"CVE-2016-4913 kernel: Information leak when handling NM entries containing NUL","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4913.json"},{"CVE":"CVE-2016-4485","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1333309","bugzilla_description":"CVE-2016-4485 kernel: Information leak in llc module","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4485.json"},{"CVE":"CVE-2016-4486","severity":"low","public_date":"2016-05-04T00:00:00Z","advisories":[],"bugzilla":"1333316","bugzilla_description":"CVE-2016-4486 kernel: Information leak in rtnetlink","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4486.json"},{"CVE":"CVE-2016-4482","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":[],"bugzilla":"1332931","bugzilla_description":"CVE-2016-4482 kernel: information leak in devio.c","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4482.json"},{"CVE":"CVE-2016-4578","severity":"low","public_date":"2016-05-03T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1335215","bugzilla_description":"CVE-2016-4578 kernel: Information leak in events in timer.c","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-665","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4578.json"},{"CVE":"CVE-2016-4558","severity":"important","public_date":"2016-04-28T00:00:00Z","advisories":[],"bugzilla":"1334303","bugzilla_description":"CVE-2016-4558 kernel: bpf: refcnt overflow","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4558.json"},{"CVE":"CVE-2016-5728","severity":"moderate","public_date":"2016-04-27T00:00:00Z","advisories":[],"bugzilla":"1350811","bugzilla_description":"CVE-2016-5728 kernel: Race condition vulnerability in VOP driver","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5728.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2016-4557","severity":"important","public_date":"2016-04-26T00:00:00Z","advisories":[],"bugzilla":"1334307","bugzilla_description":"CVE-2016-4557 kernel: Use after free vulnerability via double fdput","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4557.json"},{"CVE":"CVE-2016-6130","severity":"low","public_date":"2016-04-25T00:00:00Z","advisories":[],"bugzilla":"1352558","bugzilla_description":"CVE-2016-6130 kernel: Race condition in sclp_ctl_ioctl_sccb function leads to information leak","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.2"},{"CVE":"CVE-2016-3695","severity":"low","public_date":"2016-04-20T00:00:00Z","advisories":[],"bugzilla":"1322755","bugzilla_description":"CVE-2016-3695 kernel: Error injection via EINJ is allowed when securelevel is enabled","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3695.json"},{"CVE":"CVE-2016-4794","severity":"moderate","public_date":"2016-04-17T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1335889","bugzilla_description":"CVE-2016-4794 kernel: Use after free in array_map_alloc","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4794.json"},{"CVE":"CVE-2016-9794","severity":"moderate","public_date":"2016-04-14T00:00:00Z","advisories":["RHSA-2016:2574"],"bugzilla":"1401494","bugzilla_description":"CVE-2016-9794 kernel: ALSA: Use-after-free in kill_fasync","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9794.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-7912","severity":"moderate","public_date":"2016-04-14T00:00:00Z","advisories":[],"bugzilla":"1403747","bugzilla_description":"CVE-2016-7912 kernel: media: use-after-free in USB gadget driver","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7912.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2015-8844","severity":"moderate","public_date":"2016-04-13T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1326540","bugzilla_description":"CVE-2015-8845 CVE-2015-8844 kernel: incorrect restoration of machine specific registers from userspace","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-772","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8844.json"},{"CVE":"CVE-2015-8845","severity":"moderate","public_date":"2016-04-13T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1326540","bugzilla_description":"CVE-2015-8845 CVE-2015-8844 kernel: incorrect restoration of machine specific registers from userspace","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-772","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8845.json"},{"CVE":"CVE-2016-3672","severity":"low","public_date":"2016-04-06T00:00:00Z","advisories":["RHSA-2018:1062","RHSA-2018:0676"],"bugzilla":"1324749","bugzilla_description":"CVE-2016-3672 kernel: unlimiting the stack disables ASLR","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-341","affected_packages":["kernel-rt-0:3.10.0-862.rt56.804.el7","kernel-0:3.10.0-862.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3672.json"},{"CVE":"CVE-2016-7914","severity":"moderate","public_date":"2016-04-06T00:00:00Z","advisories":["RHSA-2016:2574"],"bugzilla":"1404939","bugzilla_description":"CVE-2016-7914 kernel: assoc_array: don't call compare_object() on a node","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:N/A:N","CWE":"(CWE-125|CWE-476)","affected_packages":["kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7914.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2016-2187","severity":"low","public_date":"2016-03-21T00:00:00Z","advisories":[],"bugzilla":"1317017","bugzilla_description":"CVE-2016-2187 kernel: Kernel panic on invalid USB device descriptor (gtco driver)","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2187.json"},{"CVE":"CVE-2016-3689","severity":"low","public_date":"2016-03-17T00:00:00Z","advisories":[],"bugzilla":"1320060","bugzilla_description":"CVE-2016-3689 kernel: denial of service via malicious device using ims-pcu driver","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3689.json"},{"CVE":"CVE-2016-3955","severity":"important","public_date":"2016-03-17T00:00:00Z","advisories":[],"bugzilla":"1328478","bugzilla_description":"CVE-2016-3955 Kernel: usbip: buffer overflow by trusting length of incoming packets","cvss_score":7.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:P/A:C","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3955.json"},{"CVE":"CVE-2016-2117","severity":"low","public_date":"2016-03-16T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1312298","bugzilla_description":"CVE-2016-2117 kernel: Kernel memory leakage to ethernet frames due to buffer overflow in ethernet drivers","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-120","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2117.json"},{"CVE":"CVE-2016-4805","severity":"low","public_date":"2016-03-16T00:00:00Z","advisories":[],"bugzilla":"1335803","bugzilla_description":"CVE-2016-4805 kernel: Use after free vulnerability in ppp_unregister_channel","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4805.json"},{"CVE":"CVE-2016-3156","severity":"moderate","public_date":"2016-03-15T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1318172","bugzilla_description":"CVE-2016-3156 kernel: ipv4: denial of service when destroying a network interface","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3156.json"},{"CVE":"CVE-2016-2184","severity":"low","public_date":"2016-03-14T00:00:00Z","advisories":[],"bugzilla":"1317012","bugzilla_description":"CVE-2016-2184 kernel: Kernel panic on invalid USB device descriptor (snd_usb_audio driver)","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"(CWE-476|CWE-416)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2184.json"},{"CVE":"CVE-2016-2185","severity":"low","public_date":"2016-03-14T00:00:00Z","advisories":[],"bugzilla":"1317014","bugzilla_description":"CVE-2016-2185 kernel: Kernel panic on invalid USB device descriptor (ati_remote2 driver)","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2185.json"},{"CVE":"CVE-2016-2186","severity":"low","public_date":"2016-03-14T00:00:00Z","advisories":[],"bugzilla":"1317015","bugzilla_description":"CVE-2016-2186 kernel: Kernel panic on invalid USB device descriptor (powermate driver)","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2186.json"},{"CVE":"CVE-2016-2188","severity":"low","public_date":"2016-03-14T00:00:00Z","advisories":[],"bugzilla":"1317018","bugzilla_description":"CVE-2016-2188 kernel: Kernel panic on invalid USB device descriptor (iowarrior driver)","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2188.json"},{"CVE":"CVE-2017-8281","severity":"important","public_date":"2016-03-14T00:00:00Z","advisories":[],"bugzilla":"1489092","bugzilla_description":"CVE-2017-8281 kernel: use after free in the recvmmsg exit path","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8281.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-3135","severity":"low","public_date":"2016-03-10T00:00:00Z","advisories":[],"bugzilla":"1317386","bugzilla_description":"CVE-2016-3135 kernel: netfilter: size overflow in x_tables","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3135.json"},{"CVE":"CVE-2016-3138","severity":"low","public_date":"2016-03-09T00:00:00Z","advisories":[],"bugzilla":"1316204","bugzilla_description":"CVE-2016-3138 kernel: Crash on invalid USB device descriptors (cdc_acm driver)","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3138.json"},{"CVE":"CVE-2016-3139","severity":"low","public_date":"2016-03-09T00:00:00Z","advisories":[],"bugzilla":"1316993","bugzilla_description":"CVE-2016-3139 kernel: Crash on invalid USB device descriptors (wacom driver)","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3139.json"},{"CVE":"CVE-2016-3140","severity":"low","public_date":"2016-03-09T00:00:00Z","advisories":[],"bugzilla":"1316995","bugzilla_description":"CVE-2016-3140 kernel: Crash on invalid USB device descriptors (digi_acceleport driver)","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3140.json"},{"CVE":"CVE-2016-3137","severity":"low","public_date":"2016-03-09T00:00:00Z","advisories":[],"bugzilla":"1316996","bugzilla_description":"CVE-2016-3137 kernel: Crash on invalid USB device descriptors (cypress_m8 driver)","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3137.json"},{"CVE":"CVE-2016-3136","severity":"low","public_date":"2016-03-09T00:00:00Z","advisories":[],"bugzilla":"1317007","bugzilla_description":"CVE-2016-3136 kernel: Crash on invalid USB device descriptors (mct_u232 driver)","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3136.json"},{"CVE":"CVE-2016-3699","severity":"low","public_date":"2016-03-05T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1329653","bugzilla_description":"CVE-2016-3699 kernel: ACPI table override allowed when securelevel is enabled","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-358","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3699.json"},{"CVE":"CVE-2016-3951","severity":"low","public_date":"2016-03-04T00:00:00Z","advisories":[],"bugzilla":"1324782","bugzilla_description":"CVE-2016-3951 kernel: crash on invalid USB device descriptors (usbnet driver)","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3951.json"},{"CVE":"CVE-2015-1339","severity":"low","public_date":"2016-03-02T00:00:00Z","advisories":[],"bugzilla":"1314331","bugzilla_description":"CVE-2015-1339 kernel: Memory exhaustion via CUSE driver","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1339.json"},{"CVE":"CVE-2015-8816","severity":"low","public_date":"2016-02-23T00:00:00Z","advisories":[],"bugzilla":"1311589","bugzilla_description":"CVE-2015-8816 kernel: USB hub invalid memory access in hub_activate()","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8816.json"},{"CVE":"CVE-2016-2550","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":[],"bugzilla":"1311517","bugzilla_description":"CVE-2016-2550 kernel: incorrectly accounted in-flight fds","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2550.json"},{"CVE":"CVE-2016-2384","severity":"low","public_date":"2016-02-14T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2017:0817"],"bugzilla":"1308444","bugzilla_description":"CVE-2016-2384 kernel: double-free in usb-audio triggered by invalid USB descriptor","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["kernel-0:2.6.32-696.el6","kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2384.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-2383","severity":"low","public_date":"2016-02-14T00:00:00Z","advisories":[],"bugzilla":"1308452","bugzilla_description":"CVE-2016-2383 kernel: incorrect branch fixups for eBPG allow arbitrary read","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2383.json"},{"CVE":"CVE-2016-2085","severity":"moderate","public_date":"2016-02-11T00:00:00Z","advisories":[],"bugzilla":"1324867","bugzilla_description":"CVE-2016-2085 kernel: timing side channel vulnerability in the Linux Extended Verification Module","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:C/A:N","CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2085.json"},{"CVE":"CVE-2017-13167","severity":"moderate","public_date":"2016-02-09T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2017:0113"],"bugzilla":"1568821","bugzilla_description":"CVE-2017-13167 kernel: sound: a race condition in the kernel sound timer in snd_timer_user_read()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["kernel-rt-1:3.10.0-514.rt56.210.el6rt","kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2018-9422","severity":null,"public_date":"2016-02-09T00:00:00Z","advisories":[],"bugzilla":"1604217","bugzilla_description":"CVE-2018-9422 kernel: Elevation of Privilege in futex","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9422.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-0617","severity":"moderate","public_date":"2016-02-08T00:00:00Z","advisories":[],"bugzilla":"1305803","bugzilla_description":"CVE-2016-0617 kernel: hugetlbfs: fix bugs in hugetlb_vmtruncate_list()","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0617.json"},{"CVE":"CVE-2016-7917","severity":"low","public_date":"2016-02-02T00:00:00Z","advisories":[],"bugzilla":"1406358","bugzilla_description":"CVE-2016-7917 kernel: netfilter: nfnetlink: correctly validate length of batch messages","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7917.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2015-8950","severity":"low","public_date":"2016-01-28T00:00:00Z","advisories":[],"bugzilla":"1383382","bugzilla_description":"CVE-2015-8950 kernel: Missing cleaning of allocated buffers","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8950.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-2053","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1300237","bugzilla_description":"CVE-2016-2053 kernel: Kernel panic and system lockup by triggering BUG_ON() in public_key_verify_signature()","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-228","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2053.json"},{"CVE":"CVE-2016-2069","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2017:0817"],"bugzilla":"1301893","bugzilla_description":"CVE-2016-2069 kernel: race condition in the TLB flush logic","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-266","affected_packages":["kernel-0:2.6.32-696.el6","kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2069.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.9"},{"CVE":"CVE-2013-4312","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2016:0855"],"bugzilla":"1297813","bugzilla_description":"CVE-2013-4312 kernel: File descriptors passed over unix sockets are not properly accounted","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7","kernel-0:2.6.32-642.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4312.json"},{"CVE":"CVE-2016-2543","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1311554","bugzilla_description":"CVE-2016-2543 kernel: sound: GPF in snd_seq_fifo_clear","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2543.json"},{"CVE":"CVE-2016-2544","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1311558","bugzilla_description":"CVE-2016-2544 kernel: sound: use-after-free in snd_timer_stop","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2544.json"},{"CVE":"CVE-2016-2545","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1311560","bugzilla_description":"CVE-2016-2545 kernel: sound: use-after-free in snd_timer_interrupt","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2545.json"},{"CVE":"CVE-2016-2546","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1311564","bugzilla_description":"CVE-2016-2546 kernel: sound: GPF in snd_timer_user_params","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2546.json"},{"CVE":"CVE-2016-2547","severity":"moderate","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1311566","bugzilla_description":"CVE-2016-2547 kernel: sound: use-after-free in snd_timer_user_ioctl","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2547.json"},{"CVE":"CVE-2016-2548","severity":null,"public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1311568","bugzilla_description":"CVE-2016-2548 kernel: sound: linked lists of slave instances not unlinked immediately","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2548.json"},{"CVE":"CVE-2016-2549","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1311570","bugzilla_description":"CVE-2016-2549 kernel: sound: spinlock lockup in sound/core/timer.c","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2549.json"},{"CVE":"CVE-2016-7915","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":["RHSA-2016:2574"],"bugzilla":"1404733","bugzilla_description":"CVE-2016-7915 kernel: HID: core: prevent out-of-bound readings","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7915.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.1"},{"CVE":"CVE-2016-7916","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1406085","bugzilla_description":"CVE-2016-7916 kernel: proc: prevent accessing /proc/<pid>/environ until it's ready","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7916.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.3"},{"CVE":"CVE-2016-2782","severity":"low","public_date":"2016-01-12T00:00:00Z","advisories":[],"bugzilla":"1312670","bugzilla_description":"CVE-2016-2782 kernel: visor: crash on invalid USB device descriptors in treo_attach() in visor driver","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2782.json"},{"CVE":"CVE-2015-7566","severity":"low","public_date":"2016-01-11T00:00:00Z","advisories":[],"bugzilla":"1296466","bugzilla_description":"CVE-2015-7566 kernel: Crash on invalid USB device descriptors in visor driver","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7566.json"},{"CVE":"CVE-2015-8963","severity":"moderate","public_date":"2016-01-06T00:00:00Z","advisories":[],"bugzilla":"1411245","bugzilla_description":"CVE-2015-8963 kernel: Race condition on CPU unplug leading to use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8963.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-7513","severity":"moderate","public_date":"2016-01-05T00:00:00Z","advisories":[],"bugzilla":"1284847","bugzilla_description":"CVE-2015-7513 Kernel: kvm: divide by zero issue leads to DoS","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7513.json"},{"CVE":"CVE-2016-10229","severity":"important","public_date":"2015-12-30T00:00:00Z","advisories":[],"bugzilla":"1439740","bugzilla_description":"CVE-2016-10229 kernel: net: Unsafe second checksum calculation in udp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-662","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10229.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2015-8966","severity":"low","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1403817","bugzilla_description":"CVE-2015-8966 kernel: Local privileges escalation via crafted F_OFD_GETLK/F_OFD_SETLK/F_OFD_SETLKW commands","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8966.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-2847","severity":"moderate","public_date":"2015-12-28T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2017:0217"],"bugzilla":"1313428","bugzilla_description":"CVE-2016-2847 kernel: pipe: limit the per-user amount of pages allocated in pipes","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7","kernel-0:3.10.0-327.46.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2847.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-2070","severity":"moderate","public_date":"2015-12-21T00:00:00Z","advisories":[],"bugzilla":"1302219","bugzilla_description":"CVE-2016-2070 kernel: potential division by zero in TCP code","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2070.json"},{"CVE":"CVE-2015-8575","severity":"low","public_date":"2015-12-16T00:00:00Z","advisories":[],"bugzilla":"1292840","bugzilla_description":"CVE-2015-8575 kernel: information leak in sco_sock_bind()","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8575.json"},{"CVE":"CVE-2015-7553","severity":"moderate","public_date":"2015-12-15T00:00:00Z","advisories":["RHSA-2015:2152"],"bugzilla":"1288934","bugzilla_description":"CVE-2015-7553 kernel: nfnetlink race in NETLINK_NFLOG socket creation","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-362","affected_packages":["kernel-0:3.10.0-327.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7553.json"},{"CVE":"CVE-2015-8569","severity":"low","public_date":"2015-12-14T00:00:00Z","advisories":[],"bugzilla":"1292045","bugzilla_description":"CVE-2015-8569 kernel: Information leak from getsockname","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8569.json"},{"CVE":"CVE-2017-0750","severity":"moderate","public_date":"2015-12-14T00:00:00Z","advisories":[],"bugzilla":"1564028","bugzilla_description":"CVE-2017-0750 kernel: Out-of-bounds write in f2fs allows code execution when mounted malicious file system","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0750.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-8709","severity":"important","public_date":"2015-12-12T00:00:00Z","advisories":[],"bugzilla":"1295287","bugzilla_description":"CVE-2015-8709 Kernel: ptrace: potential privilege escalation in user namespaces","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-271","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8709.json"},{"CVE":"CVE-2015-7550","severity":"moderate","public_date":"2015-12-10T00:00:00Z","advisories":[],"bugzilla":"1291197","bugzilla_description":"CVE-2015-7550 kernel: User triggerable crash from race between key read and rey revoke","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7550.json"},{"CVE":"CVE-2015-8543","severity":"moderate","public_date":"2015-12-09T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584","RHSA-2016:0855"],"bugzilla":"1290475","bugzilla_description":"CVE-2015-8543 kernel: IPv6 connect causes DoS via NULL pointer dereference","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7","kernel-0:2.6.32-642.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8543.json"},{"CVE":"CVE-2015-8338","severity":"important","public_date":"2015-12-08T00:00:00Z","advisories":[],"bugzilla":"1284911","bugzilla_description":"CVE-2015-8338 xen: Long running memory operations on ARM cause DoS","cvss_score":6.3,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8338.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2015-1142857","severity":"low","public_date":"2015-12-03T00:00:00Z","advisories":[],"bugzilla":"1295480","bugzilla_description":"kernel: net: ethernet flow control vulnerability in SRIOV devices","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1142857.json"},{"CVE":"CVE-2015-8787","severity":"moderate","public_date":"2015-12-02T00:00:00Z","advisories":[],"bugzilla":"1300731","bugzilla_description":"CVE-2015-8787 kernel: Missing NULL pointer check in nf_nat_redirect_ipv4","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8787.json"},{"CVE":"CVE-2016-0723","severity":"moderate","public_date":"2015-11-27T00:00:00Z","advisories":[],"bugzilla":"1296253","bugzilla_description":"CVE-2016-0723 kernel: Kernel memory disclosure and crash in tty layer","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0723.json"},{"CVE":"CVE-2015-8964","severity":"low","public_date":"2015-11-27T00:00:00Z","advisories":[],"bugzilla":"1404655","bugzilla_description":"CVE-2015-8964 kernel: tty: Prevent ldisc drivers from re-using stale tty fields","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8964.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2015-7515","severity":"low","public_date":"2015-11-25T00:00:00Z","advisories":[],"bugzilla":"1285326","bugzilla_description":"CVE-2015-7515 kernel: aiptek: crash on invalid USB device descriptors","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7515.json"},{"CVE":"CVE-2015-7509","severity":"low","public_date":"2015-11-24T00:00:00Z","advisories":["RHSA-2016:0855"],"bugzilla":"1259222","bugzilla_description":"CVE-2015-7509 kernel: Mounting ext2 fs e2fsprogs/tests/f_orphan as ext4 crashes system","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-250","affected_packages":["kernel-0:2.6.32-642.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7509.json"},{"CVE":"CVE-2015-8324","severity":"low","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:0855"],"bugzilla":"1267261","bugzilla_description":"CVE-2015-8324 kernel: Null pointer dereference when mounting ext4","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-0:2.6.32-642.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8324.json"},{"CVE":"CVE-2015-5307","severity":"important","public_date":"2015-11-10T00:00:00Z","advisories":["RHSA-2016:0046","RHSA-2016:0024","RHSA-2015:2552","RHSA-2015:2587","RHSA-2015:2645","RHSA-2015:2636","RHSA-2016:0004"],"bugzilla":"1277172","bugzilla_description":"CVE-2015-5307 virt: guest to host DoS by triggering an infinite loop in microcode via #AC exception","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-835","affected_packages":["kernel-0:2.6.32-431.68.1.el6","kernel-0:3.10.0-229.24.2.ael7b","kernel-0:2.6.32-504.40.1.el6","kernel-0:3.10.0-327.3.1.el7","kernel-0:2.6.32-358.69.1.el6","kernel-0:2.6.32-220.65.1.el6","kernel-0:2.6.32-573.12.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5307.json"},{"CVE":"CVE-2015-8104","severity":"important","public_date":"2015-11-10T00:00:00Z","advisories":["RHSA-2016:0046","RHSA-2016:0024","RHSA-2015:2552","RHSA-2015:2645","RHSA-2015:2636","RHSA-2016:0004","RHSA-2016:0103"],"bugzilla":"1278496","bugzilla_description":"CVE-2015-8104 virt: guest to host DoS by triggering an infinite loop in microcode via #DB exception","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-835","affected_packages":["kernel-0:2.6.32-431.68.1.el6","kernel-0:2.6.32-504.40.1.el6","kernel-0:3.10.0-327.3.1.el7","kernel-0:2.6.32-358.69.1.el6","kernel-0:2.6.32-220.65.1.el6","kernel-0:3.10.0-229.26.2.el7","kernel-0:2.6.32-573.12.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8104.json"},{"CVE":"CVE-2015-8962","severity":"moderate","public_date":"2015-11-03T00:00:00Z","advisories":[],"bugzilla":"1400457","bugzilla_description":"CVE-2015-8962 kernel: Double free vulnerability in SCSI driver","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8962.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-8019","severity":"moderate","public_date":"2015-10-27T00:00:00Z","advisories":[],"bugzilla":"1276588","bugzilla_description":"CVE-2015-8019 kernel: net: buffer overflow when copying data from skbuff to userspace","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:C","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8019.json"},{"CVE":"CVE-2015-7884","severity":"low","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274726","bugzilla_description":"CVE-2015-7884 kernel: media/vivid-osd: information leak in ioctl","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7884.json"},{"CVE":"CVE-2015-7885","severity":"low","public_date":"2015-10-21T00:00:00Z","advisories":[],"bugzilla":"1274728","bugzilla_description":"CVE-2015-7885 kernel: staging/dgnc: information leak in ioctl","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7885.json"},{"CVE":"CVE-2015-8961","severity":"moderate","public_date":"2015-10-18T00:00:00Z","advisories":[],"bugzilla":"1399711","bugzilla_description":"CVE-2015-8961 kernel: Use after free in __ext4_journal_stop","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8961.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-8374","severity":"moderate","public_date":"2015-10-16T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1286261","bugzilla_description":"CVE-2015-8374 kernel: Information leak when truncating of compressed/inlined extents on BTRFS","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8374.json"},{"CVE":"CVE-2013-7445","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":[],"bugzilla":"1272995","bugzilla_description":"CVE-2013-7445 kernel: memory exhaustion via crafted Graphics Execution Manager (GEM) objects","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7445.json"},{"CVE":"CVE-2015-8785","severity":"low","public_date":"2015-10-12T00:00:00Z","advisories":[],"bugzilla":"1290642","bugzilla_description":"CVE-2015-8785 kernel: fuse: possible denial of service in fuse_fill_write_pages()","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8785.json"},{"CVE":"CVE-2015-7833","severity":"low","public_date":"2015-10-08T00:00:00Z","advisories":[],"bugzilla":"1270158","bugzilla_description":"CVE-2015-7833 kernel: usbvision: crash on invalid USB device descriptors","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7833.json"},{"CVE":"CVE-2015-7799","severity":"low","public_date":"2015-10-08T00:00:00Z","advisories":[],"bugzilla":"1271134","bugzilla_description":"CVE-2015-7799 kernel: net: slip: crash when using PPP character device driver","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7799.json"},{"CVE":"CVE-2015-5283","severity":"moderate","public_date":"2015-09-22T00:00:00Z","advisories":["RHSA-2015:2152","RHSA-2015:2411"],"bugzilla":"1257528","bugzilla_description":"CVE-2015-5283 kernel: Creating multiple sockets when SCTP module isn't loaded leads to kernel panic","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476->CWE-665","affected_packages":["kernel-0:3.10.0-327.el7","kernel-rt-0:3.10.0-327.rt56.204.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5283.json"},{"CVE":"CVE-2015-6937","severity":"moderate","public_date":"2015-09-14T00:00:00Z","advisories":[],"bugzilla":"1263139","bugzilla_description":"CVE-2015-6937 kernel: net: rds: NULL pointer dereference in net/rds/connection.c","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6937.json"},{"CVE":"CVE-2013-7446","severity":"moderate","public_date":"2015-09-10T00:00:00Z","advisories":[],"bugzilla":"1282688","bugzilla_description":"CVE-2013-7446 kernel: Unix sockets use after free - peer_wait_queue prematurely freed","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7446.json"},{"CVE":"CVE-2016-0821","severity":"moderate","public_date":"2015-09-10T00:00:00Z","advisories":[],"bugzilla":"1317571","bugzilla_description":"CVE-2016-0821 kernel: Too big poison pointer space","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0821.json"},{"CVE":"CVE-2017-13715","severity":"important","public_date":"2015-09-01T00:00:00Z","advisories":[],"bugzilla":"1485246","bugzilla_description":"CVE-2017-13715 kernel: Use of uninitialized value in __skb_flow_dissect()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13715.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2015-8746","severity":"low","public_date":"2015-08-15T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1295802","bugzilla_description":"CVE-2015-8746 kernel: when NFSv4 migration is executed, kernel oops occurs at NFS client","cvss_score":3.8,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-665","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8746.json"},{"CVE":"CVE-2015-6252","severity":"low","public_date":"2015-08-10T00:00:00Z","advisories":[],"bugzilla":"1251839","bugzilla_description":"CVE-2015-6252 kernel: vhost fd leak in ioctl VHOST_SET_LOG_FD","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6252.json"},{"CVE":"CVE-2015-9016","severity":"moderate","public_date":"2015-08-09T00:00:00Z","advisories":[],"bugzilla":"1544700","bugzilla_description":"CVE-2015-9016 kernel: Race condition in block/blk-mq.c:blk_mq_tag_to_rq() can lead to kernel oops","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9016.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2015-5156","severity":"moderate","public_date":"2015-08-06T00:00:00Z","advisories":["RHSA-2016:0855","RHSA-2015:1977","RHSA-2015:1978"],"bugzilla":"1243852","bugzilla_description":"CVE-2015-5156 kernel: buffer overflow with fraglist larger than MAX_SKB_FRAGS + 2 in virtio-net","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["kernel-rt-0:3.10.0-229.20.1.rt56.141.14.el7_1","kernel-0:3.10.0-229.20.1.ael7b","kernel-0:2.6.32-642.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5156.json"},{"CVE":"CVE-2015-5697","severity":"low","public_date":"2015-07-25T00:00:00Z","advisories":[],"bugzilla":"1249011","bugzilla_description":"CVE-2015-5697 linux kernel: information leak in md driver","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5697.json"},{"CVE":"CVE-2015-3290","severity":"important","public_date":"2015-07-22T00:00:00Z","advisories":[],"bugzilla":"1243465","bugzilla_description":"CVE-2015-3290 kernel: x86: nested NMI handler and espfix64 interaction privilege escalation","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-435","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3290.json"},{"CVE":"CVE-2015-3291","severity":"low","public_date":"2015-07-22T00:00:00Z","advisories":[],"bugzilla":"1243489","bugzilla_description":"CVE-2015-3291 kernel: x86/nmi: malicious userspace programs can cause the kernel to skip NMIs","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-440","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3291.json"},{"CVE":"CVE-2015-3288","severity":"low","public_date":"2015-07-06T00:00:00Z","advisories":["RHSA-2015:2152"],"bugzilla":"1333830","bugzilla_description":"CVE-2015-3288 kernel: zero page memory arbitrary modification","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-391","affected_packages":["kernel-0:3.10.0-327.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3288.json"},{"CVE":"CVE-2015-4177","severity":"moderate","public_date":"2015-07-01T00:00:00Z","advisories":[],"bugzilla":"1248486","bugzilla_description":"CVE-2015-4177 kernel: Race conditions in collect_mounts","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:N/A:N","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4177.json"},{"CVE":"CVE-2015-4178","severity":"moderate","public_date":"2015-07-01T00:00:00Z","advisories":[],"bugzilla":"1249849","bugzilla_description":"CVE-2015-4178 kernel: list corruption of m_list or s_list if unused","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4178.json"},{"CVE":"CVE-2015-4700","severity":"important","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2015:1788","RHSA-2015:1778"],"bugzilla":"1233615","bugzilla_description":"CVE-2015-4700 kernel: Crafted BPF filters may crash kernel during JIT optimisation","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-665","affected_packages":["kernel-rt-0:3.10.0-229.14.1.rt56.141.13.el7_1","kernel-0:3.10.0-229.14.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4700.json"},{"CVE":"CVE-2015-4692","severity":"moderate","public_date":"2015-06-04T00:00:00Z","advisories":[],"bugzilla":"1230770","bugzilla_description":"CVE-2015-4692 kernel: kvm x86: NULL pointer dereference in kvm_apic_has_events function","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4692.json"},{"CVE":"CVE-2015-8956","severity":"low","public_date":"2015-05-14T00:00:00Z","advisories":["RHSA-2016:2574","RHSA-2016:2584"],"bugzilla":"1383395","bugzilla_description":"CVE-2015-8956 kernel: NULL dereference in RFCOMM bind callback","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-rt-0:3.10.0-514.rt56.420.el7","kernel-0:3.10.0-514.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8956.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2015-5706","severity":"moderate","public_date":"2015-05-09T00:00:00Z","advisories":[],"bugzilla":"1250047","bugzilla_description":"CVE-2015-5706 kernel: Use-after-free in path lookup","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5706.json"},{"CVE":"CVE-2015-4176","severity":"moderate","public_date":"2015-05-06T00:00:00Z","advisories":[],"bugzilla":"1249442","bugzilla_description":"CVE-2015-4176 kernel:deletion of a file or directory could unmount and reveal data under a mount point.","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:N/A:N","CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4176.json"},{"CVE":"CVE-2015-3339","severity":"moderate","public_date":"2015-04-20T00:00:00Z","advisories":["RHSA-2015:2152","RHSA-2015:2411","RHSA-2015:1272"],"bugzilla":"1214030","bugzilla_description":"CVE-2015-3339 kernel: race condition between chown() and execve()","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-362","affected_packages":["kernel-0:2.6.32-573.el6","kernel-0:3.10.0-327.el7","kernel-rt-0:3.10.0-327.rt56.204.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3339.json"},{"CVE":"CVE-2015-3332","severity":"moderate","public_date":"2015-04-14T00:00:00Z","advisories":[],"bugzilla":"1213951","bugzilla_description":"CVE-2015-3332 kernel: TCP Fast Open local DoS","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3332.json"},{"CVE":"CVE-2015-6526","severity":"moderate","public_date":"2015-04-13T00:00:00Z","advisories":["RHSA-2015:2152"],"bugzilla":"1218454","bugzilla_description":"CVE-2015-6526 kernel: perf on ppc64 can loop forever getting userlevel stacktraces","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-835","affected_packages":["kernel-0:3.10.0-327.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6526.json"},{"CVE":"CVE-2015-5707","severity":"moderate","public_date":"2015-03-22T00:00:00Z","advisories":[],"bugzilla":"1250030","bugzilla_description":"CVE-2015-5707 kernel: number wraparound vulnerability in function start_req()","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5707.json"},{"CVE":"CVE-2015-8830","severity":"moderate","public_date":"2015-03-21T00:00:00Z","advisories":["RHSA-2018:3096","RHSA-2018:3083","RHSA-2018:1854"],"bugzilla":"1314275","bugzilla_description":"CVE-2015-8830 kernel: AIO write triggers integer overflow in some protocols","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-190","affected_packages":["kernel-rt-0:3.10.0-957.rt56.910.el7","kernel-0:2.6.32-754.el6","kernel-0:3.10.0-957.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8830.json"},{"CVE":"CVE-2015-8955","severity":"low","public_date":"2015-03-17T00:00:00Z","advisories":[],"bugzilla":"1383391","bugzilla_description":"CVE-2015-8955 kernel: Possible privilege escalation via groups spanning multiple HW PMUs","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8955.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.3"},{"CVE":"CVE-2016-0823","severity":"low","public_date":"2015-03-09T00:00:00Z","advisories":[],"bugzilla":"1317576","bugzilla_description":"CVE-2016-0823 kernel: Leakage of physical address mappings to non-privileged userspace","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0823.json"},{"CVE":"CVE-2015-2041","severity":"low","public_date":"2015-02-20T00:00:00Z","advisories":[],"bugzilla":"1195350","bugzilla_description":"CVE-2015-2041 kernel: llc: information leak in llc2_timeout_table","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2041.json"},{"CVE":"CVE-2015-2042","severity":"low","public_date":"2015-02-20T00:00:00Z","advisories":[],"bugzilla":"1195355","bugzilla_description":"CVE-2015-2042 kernel: rds: information handling flaw in rds sysctl files.","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2042.json"},{"CVE":"CVE-2014-9683","severity":"moderate","public_date":"2015-02-17T00:00:00Z","advisories":["RHSA-2015:1272"],"bugzilla":"1193830","bugzilla_description":"CVE-2014-9683 kernel: buffer overflow in eCryptfs","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-119","affected_packages":["kernel-0:2.6.32-573.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9683.json"},{"CVE":"CVE-2016-6786","severity":"moderate","public_date":"2015-02-04T00:00:00Z","advisories":[],"bugzilla":"1403842","bugzilla_description":"CVE-2016-6786 CVE-2016-6787 kernel: Possible privilege escalation due to lack of locking around changing event->ctx","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6786.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-6787","severity":"moderate","public_date":"2015-02-04T00:00:00Z","advisories":[],"bugzilla":"1403842","bugzilla_description":"CVE-2016-6786 CVE-2016-6787 kernel: Possible privilege escalation due to lack of locking around changing event->ctx","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-667","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6787.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-0239","severity":"low","public_date":"2015-01-27T00:00:00Z","advisories":["RHSA-2015:2152","RHSA-2015:1272"],"bugzilla":"1186448","bugzilla_description":"CVE-2015-0239 kernel: kvm: insufficient sysenter emulation when invoked from 16-bit code","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-391","affected_packages":["kernel-0:2.6.32-573.el6","kernel-0:3.10.0-327.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0239.json"},{"CVE":"CVE-2015-9004","severity":"moderate","public_date":"2015-01-23T00:00:00Z","advisories":[],"bugzilla":"1447676","bugzilla_description":"CVE-2015-9004 kernel: Allows creating groups that can't be co-scheduled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-9004.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2015-4170","severity":"moderate","public_date":"2015-01-19T00:00:00Z","advisories":["RHSA-2015:2152","RHSA-2016:1395","RHSA-2015:2411"],"bugzilla":"1218879","bugzilla_description":"CVE-2015-4170 kernel: pty layer race condition on tty ldisc shutdown.","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-667","affected_packages":["kernel-0:3.10.0-327.el7","kernel-rt-0:3.10.0-327.rt56.204.el7","kernel-0:3.10.0-229.38.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4170.json"},{"CVE":"CVE-2015-4167","severity":"moderate","public_date":"2015-01-07T00:00:00Z","advisories":[],"bugzilla":"1228204","bugzilla_description":"CVE-2015-4167 Kernel: fs: udf: Check length of extended attributes to avoid oops","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-130","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4167.json"},{"CVE":"CVE-2014-9728","severity":"moderate","public_date":"2014-12-19T00:00:00Z","advisories":[],"bugzilla":"1228229","bugzilla_description":"CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 Kernel: fs: udf: heap overflow in __udf_adinicb_readpage","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:C","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9728.json"},{"CVE":"CVE-2014-9729","severity":"moderate","public_date":"2014-12-19T00:00:00Z","advisories":[],"bugzilla":"1228229","bugzilla_description":"CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 Kernel: fs: udf: heap overflow in __udf_adinicb_readpage","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:C","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9729.json"},{"CVE":"CVE-2014-9730","severity":"moderate","public_date":"2014-12-19T00:00:00Z","advisories":[],"bugzilla":"1228229","bugzilla_description":"CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 Kernel: fs: udf: heap overflow in __udf_adinicb_readpage","cvss_score":5.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:C","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9730.json"},{"CVE":"CVE-2017-15868","severity":"moderate","public_date":"2014-12-19T00:00:00Z","advisories":[],"bugzilla":"1522893","bugzilla_description":"CVE-2017-15868 kernel: bnep_add_connection does not check if l2cap socket is available allowing privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15868.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2014-9731","severity":"low","public_date":"2014-12-18T00:00:00Z","advisories":[],"bugzilla":"1228220","bugzilla_description":"CVE-2014-9731 Kernel: fs: udf: information leakage when reading symlink","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9731.json"},{"CVE":"CVE-2014-9940","severity":"low","public_date":"2014-12-04T00:00:00Z","advisories":[],"bugzilla":"1449558","bugzilla_description":"CVE-2014-9940 kernel: Use-after-free in the regulator_ena_gpio_free function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9940.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-1350","severity":"low","public_date":"2014-11-21T00:00:00Z","advisories":[],"bugzilla":"1185139","bugzilla_description":"CVE-2015-1350 kernel: denial of service in notify_change for filesystem xattrs","cvss_score":3.2,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:P/A:P","CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1350.json"},{"CVE":"CVE-2014-8884","severity":"low","public_date":"2014-11-14T00:00:00Z","advisories":["RHSA-2015:0290","RHSA-2015:0864","RHSA-2015:0782"],"bugzilla":"1164266","bugzilla_description":"CVE-2014-8884 kernel: usb: buffer overflow in ttusb-dec","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["kernel-0:2.6.32-504.16.2.el6","kernel-0:3.10.0-229.el7","kernel-0:2.6.32-431.53.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8884.json"},{"CVE":"CVE-2014-7843","severity":"moderate","public_date":"2014-11-13T00:00:00Z","advisories":[],"bugzilla":"1163744","bugzilla_description":"CVE-2014-7843 kernel: aarch64: copying from /dev/zero causes local DoS","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-390","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7843.json"},{"CVE":"CVE-2014-8600","severity":"low","public_date":"2014-11-13T00:00:00Z","advisories":[],"bugzilla":"1164293","bugzilla_description":"CVE-2014-8600 kwebkitpart, kde-runtime: Insufficient Input Validation By IO Slaves and Webkit Part","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8600.json"},{"CVE":"CVE-2014-7841","severity":"important","public_date":"2014-11-10T00:00:00Z","advisories":["RHSA-2015:0102","RHSA-2015:0695","RHSA-2015:0087","RHSA-2015:0285","RHSA-2015:0284"],"bugzilla":"1163087","bugzilla_description":"CVE-2014-7841 kernel: net: sctp: NULL pointer dereference in af->from_addr_param on malformed packet","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-0:2.6.32-220.60.2.el6","kernel-0:2.6.32-358.56.1.el6","kernel-0:2.6.32-504.8.1.el6","kernel-0:2.6.32-431.50.1.el6","kernel-0:3.10.0-123.20.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7841.json"},{"CVE":"CVE-2014-9710","severity":"moderate","public_date":"2014-11-07T00:00:00Z","advisories":[],"bugzilla":"1205079","bugzilla_description":"CVE-2014-9710 Kernel: fs: btrfs: non-atomic xattr replace operation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9710.json"},{"CVE":"CVE-2014-8369","severity":"moderate","public_date":"2014-10-24T00:00:00Z","advisories":["RHSA-2015:0674"],"bugzilla":"1156518","bugzilla_description":"CVE-2014-8369 kernel: kvm: excessive pages un-pinning in kvm_iommu_map error path","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-504.12.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8369.json"},{"CVE":"CVE-2014-9922","severity":"moderate","public_date":"2014-10-24T00:00:00Z","advisories":[],"bugzilla":"1439087","bugzilla_description":"CVE-2014-9922 kernel: Privilege escalation in eCryptfs subsystem via a large filesystem stack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9922.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2014-3690","severity":"moderate","public_date":"2014-10-21T00:00:00Z","advisories":["RHSA-2015:0290","RHSA-2015:0864","RHSA-2015:0782"],"bugzilla":"1153322","bugzilla_description":"CVE-2014-3690 kernel: kvm: vmx: invalid host cr4 handling across vm entries","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-504.16.2.el6","kernel-0:3.10.0-229.el7","kernel-0:2.6.32-431.53.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3690.json"},{"CVE":"CVE-2018-1066","severity":"moderate","public_date":"2014-10-20T00:00:00Z","advisories":[],"bugzilla":"1539599","bugzilla_description":"CVE-2018-1066 kernel: Null pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() when empty TargetInfo is returned in NTLMSSP setup negotiation response allowing to crash client's kernel","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1066.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2014-8480","severity":"important","public_date":"2014-10-13T00:00:00Z","advisories":[],"bugzilla":"1156615","bugzilla_description":"CVE-2014-8480 CVE-2014-8481 kernel: kvm: NULL pointer dereference during rip relative instruction emulation","cvss_score":6.1,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8480.json"},{"CVE":"CVE-2014-8481","severity":"important","public_date":"2014-10-13T00:00:00Z","advisories":[],"bugzilla":"1156615","bugzilla_description":"CVE-2014-8480 CVE-2014-8481 kernel: kvm: NULL pointer dereference during rip relative instruction emulation","cvss_score":6.1,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8481.json"},{"CVE":"CVE-2014-3673","severity":"important","public_date":"2014-10-09T00:00:00Z","advisories":["RHSA-2014:1971","RHSA-2015:0115","RHSA-2014:1997","RHSA-2015:0043","RHSA-2015:0062"],"bugzilla":"1147850","bugzilla_description":"CVE-2014-3673 kernel: sctp: skb_over_panic when receiving malformed ASCONF chunks","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-20","affected_packages":["kernel-0:2.6.32-504.3.3.el6","kernel-0:2.6.32-358.55.1.el6","kernel-0:2.6.32-431.46.2.el6","kernel-0:3.10.0-123.13.1.el7","kernel-0:2.6.32-220.58.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3673.json"},{"CVE":"CVE-2014-3687","severity":"important","public_date":"2014-10-09T00:00:00Z","advisories":["RHSA-2014:1971","RHSA-2015:0115","RHSA-2014:1997","RHSA-2015:0043","RHSA-2015:0062"],"bugzilla":"1155731","bugzilla_description":"CVE-2014-3687 kernel: net: sctp: fix panic on duplicate ASCONF chunks","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-504.3.3.el6","kernel-0:2.6.32-358.55.1.el6","kernel-0:2.6.32-431.46.2.el6","kernel-0:3.10.0-123.13.1.el7","kernel-0:2.6.32-220.58.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3687.json"},{"CVE":"CVE-2014-3688","severity":"important","public_date":"2014-10-09T00:00:00Z","advisories":["RHSA-2014:1971","RHSA-2015:0115","RHSA-2014:1997","RHSA-2015:0043","RHSA-2015:0062"],"bugzilla":"1155745","bugzilla_description":"CVE-2014-3688 kernel: net: sctp: remote memory pressure from excessive queueing","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-504.3.3.el6","kernel-0:2.6.32-358.55.1.el6","kernel-0:2.6.32-431.46.2.el6","kernel-0:3.10.0-123.13.1.el7","kernel-0:2.6.32-220.58.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3688.json"},{"CVE":"CVE-2014-7970","severity":"low","public_date":"2014-10-08T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1151095","bugzilla_description":"CVE-2014-7970 Kernel: fs: VFS denial of service","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7970.json"},{"CVE":"CVE-2014-7975","severity":"low","public_date":"2014-10-08T00:00:00Z","advisories":["RHSA-2017:1842","RHSA-2017:2077"],"bugzilla":"1151108","bugzilla_description":"CVE-2014-7975 Kernel: fs: umount denial of service","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["kernel-rt-0:3.10.0-693.rt56.617.el7","kernel-0:3.10.0-693.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7975.json"},{"CVE":"CVE-2014-7284","severity":"important","public_date":"2014-10-01T00:00:00Z","advisories":[],"bugzilla":"1148788","bugzilla_description":"CVE-2014-7284 kernel: randomness degradation due to bug in net_get_random_once()","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":"CWE-456->CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7284.json"},{"CVE":"CVE-2010-5313","severity":"moderate","public_date":"2014-09-24T00:00:00Z","advisories":["RHSA-2015:2152","RHSA-2016:0855"],"bugzilla":"1163762","bugzilla_description":"CVE-2010-5313 CVE-2014-7842 kernel: kvm: reporting emulation failures to userspace","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:3.10.0-327.el7","kernel-0:2.6.32-642.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5313.json"},{"CVE":"CVE-2014-7842","severity":"moderate","public_date":"2014-09-24T00:00:00Z","advisories":["RHSA-2015:2152","RHSA-2016:0855"],"bugzilla":"1163762","bugzilla_description":"CVE-2010-5313 CVE-2014-7842 kernel: kvm: reporting emulation failures to userspace","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:3.10.0-327.el7","kernel-0:2.6.32-642.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7842.json"},{"CVE":"CVE-2014-0205","severity":"important","public_date":"2014-09-09T00:00:00Z","advisories":["RHSA-2014:1763","RHSA-2014:1167","RHSA-2014:1365"],"bugzilla":"1094455","bugzilla_description":"CVE-2014-0205 kernel: futex: refcount issue in case of requeue","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-682->CWE-416","affected_packages":["kernel-0:2.6.32-358.49.1.el6","kernel-0:2.6.32-220.56.1.el6","kernel-0:2.6.32-431.29.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0205.json"},{"CVE":"CVE-2014-3535","severity":"important","public_date":"2014-09-09T00:00:00Z","advisories":["RHSA-2014:1168","RHSA-2014:1167"],"bugzilla":"1114540","bugzilla_description":"CVE-2014-3535 Kernel: netdevice.h: NULL pointer dereference over VxLAN","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-228->CWE-476","affected_packages":["rhev-hypervisor6-0:6.5-20140821.1.el6ev","kernel-0:2.6.32-431.29.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3535.json"},{"CVE":"CVE-2014-3631","severity":"moderate","public_date":"2014-09-09T00:00:00Z","advisories":["RHSA-2014:1971"],"bugzilla":"1140325","bugzilla_description":"CVE-2014-3631 kernel: keys: incorrect termination condition in assoc array garbage collection","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:3.10.0-123.13.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3631.json"},{"CVE":"CVE-2014-3186","severity":"moderate","public_date":"2014-08-27T00:00:00Z","advisories":["RHSA-2014:1971"],"bugzilla":"1141407","bugzilla_description":"CVE-2014-3186 Kernel: HID: memory corruption via OOB write","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-787","affected_packages":["kernel-0:3.10.0-123.13.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3186.json"},{"CVE":"CVE-2014-3183","severity":"moderate","public_date":"2014-08-21T00:00:00Z","advisories":[],"bugzilla":"1141344","bugzilla_description":"CVE-2014-3183 Kernel: HID: heap overflow due to lack of bounds checking","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"(CWE-787|CWE-122)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3183.json"},{"CVE":"CVE-2014-3601","severity":"moderate","public_date":"2014-08-19T00:00:00Z","advisories":["RHSA-2014:1392"],"bugzilla":"1131951","bugzilla_description":"CVE-2014-3601 kernel: kvm: invalid parameter passing in kvm_iommu_map_pages()","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-504.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3601.json"},{"CVE":"CVE-2014-7145","severity":"moderate","public_date":"2014-08-17T00:00:00Z","advisories":["RHSA-2015:0102"],"bugzilla":"1147522","bugzilla_description":"CVE-2014-7145 Kernel: cifs: NULL pointer dereference in SMB2_tcon","cvss_score":4.6,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-0:3.10.0-123.20.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7145.json"},{"CVE":"CVE-2014-3534","severity":"important","public_date":"2014-07-21T00:00:00Z","advisories":["RHSA-2014:1023"],"bugzilla":"1114089","bugzilla_description":"CVE-2014-3534 kernel: s390: ptrace: insufficient sanitization when setting psw mask","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-697->CWE-266","affected_packages":["kernel-0:3.10.0-123.6.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3534.json"},{"CVE":"CVE-2014-5045","severity":"moderate","public_date":"2014-07-20T00:00:00Z","advisories":["RHSA-2014:1971","RHSA-2014:1392","RHSA-2015:0062"],"bugzilla":"1122472","bugzilla_description":"CVE-2014-5045 kernel: vfs: refcount issues during unmount on symlink","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-431.46.2.el6","kernel-0:2.6.32-504.el6","kernel-0:3.10.0-123.13.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5045.json"},{"CVE":"CVE-2014-4943","severity":"important","public_date":"2014-07-16T00:00:00Z","advisories":["RHSA-2014:1025","RHSA-2014:0924","RHSA-2014:0925","RHSA-2014:0923"],"bugzilla":"1119458","bugzilla_description":"CVE-2014-4943 kernel: net: pppol2tp: level handling in pppol2tp_[s,g]etsockopt()","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-431.20.5.el6","kernel-0:2.6.32-358.46.2.el6","kernel-0:2.6.32-220.54.1.el6","kernel-0:3.10.0-123.4.4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4943.json"},{"CVE":"CVE-2014-9904","severity":"low","public_date":"2014-07-16T00:00:00Z","advisories":[],"bugzilla":"1350801","bugzilla_description":"CVE-2014-9904 kernel: Integer overflow in snd_compr_allocate_buffer()","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9904.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2014-4715","severity":"moderate","public_date":"2014-07-03T00:00:00Z","advisories":[],"bugzilla":"1115767","bugzilla_description":"CVE-2014-4715 lz4: LZ4_decompress_generic() integer overflow (32-bit arches)","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4715.json"},{"CVE":"CVE-2014-4611","severity":"moderate","public_date":"2014-06-26T00:00:00Z","advisories":[],"bugzilla":"1112436","bugzilla_description":"CVE-2014-4611 lz4: LZ4_decompress_generic() integer overflow","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4611.json"},{"CVE":"CVE-2014-4608","severity":"low","public_date":"2014-06-26T00:00:00Z","advisories":["RHSA-2014:1392","RHSA-2015:0062"],"bugzilla":"1113899","bugzilla_description":"CVE-2014-4608 kernel: lzo1x_decompress_safe() integer overflow","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":["kernel-0:2.6.32-431.46.2.el6","kernel-0:2.6.32-504.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4608.json"},{"CVE":"CVE-2014-0203","severity":"moderate","public_date":"2014-06-19T00:00:00Z","advisories":["RHSA-2014:0771"],"bugzilla":"1094363","bugzilla_description":"CVE-2014-0203 kernel: fs: slab corruption due to the invalid last component type during do_filp_open()","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-431.20.3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0203.json"},{"CVE":"CVE-2014-4508","severity":"moderate","public_date":"2014-06-16T00:00:00Z","advisories":[],"bugzilla":"1111590","bugzilla_description":"CVE-2014-4508 Kernel: x86_32: BUG in syscall auditing","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4508.json"},{"CVE":"CVE-2014-4014","severity":"important","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1107966","bugzilla_description":"CVE-2014-4014 Kernel: possible privilege escalation in user namespace","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4014.json"},{"CVE":"CVE-2014-9914","severity":"moderate","public_date":"2014-06-10T00:00:00Z","advisories":[],"bugzilla":"1420250","bugzilla_description":"CVE-2014-9914 kernel: Race condition in the ip4_datagram_release_cb function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9914.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2014-1739","severity":"low","public_date":"2014-04-30T00:00:00Z","advisories":["RHSA-2014:1971"],"bugzilla":"1109774","bugzilla_description":"CVE-2014-1739 Kernel: drivers: media: an information leakage","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:3.10.0-123.13.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1739.json"},{"CVE":"CVE-2014-0155","severity":"important","public_date":"2014-04-04T00:00:00Z","advisories":[],"bugzilla":"1081589","bugzilla_description":"CVE-2014-0155 kernel: kvm: BUG caused by invalid entry in guest ioapic redirection table","cvss_score":5.5,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0155.json"},{"CVE":"CVE-2014-0077","severity":"moderate","public_date":"2014-03-27T00:00:00Z","advisories":["RHSA-2014:0475","RHSA-2014:0634","RHSA-2014:0593","RHSA-2014:0629"],"bugzilla":"1064440","bugzilla_description":"CVE-2014-0077 kernel: vhost-net: insufficiency in handling of big packets in handle_rx()","cvss_score":5.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:P/I:P/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-279.46.1.el6","kernel-0:2.6.32-431.17.1.el6","rhev-hypervisor6-0:6.5-20140603.1.el6ev","kernel-0:2.6.32-358.44.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0077.json"},{"CVE":"CVE-2014-2739","severity":"moderate","public_date":"2014-03-26T00:00:00Z","advisories":[],"bugzilla":"1085415","bugzilla_description":"CVE-2014-2739 Kernel: IB/core: crash while resolving passive side RoCE L2 address in cma req handler","cvss_score":4.6,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2739.json"},{"CVE":"CVE-2014-0055","severity":"important","public_date":"2014-03-25T00:00:00Z","advisories":["RHSA-2014:0328","RHSA-2014:0339"],"bugzilla":"1062577","bugzilla_description":"CVE-2014-0055 kernel: vhost-net: insufficient handling of error conditions in get_rx_bufs()","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-431.11.2.el6","rhev-hypervisor6-0:6.5-20140324.0.el6ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0055.json"},{"CVE":"CVE-2014-2568","severity":"low","public_date":"2014-03-18T00:00:00Z","advisories":["RHSA-2014:0786"],"bugzilla":"1079012","bugzilla_description":"CVE-2014-2568 kernel: net: potential information leak when ubuf backed skbs are skb_zerocopy()ied","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:3.10.0-123.4.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2568.json"},{"CVE":"CVE-2014-0131","severity":"low","public_date":"2014-03-10T00:00:00Z","advisories":[],"bugzilla":"1074589","bugzilla_description":"CVE-2014-0131 kernel: net: use-after-free during segmentation with zerocopy","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0131.json"},{"CVE":"CVE-2014-2673","severity":"moderate","public_date":"2014-03-07T00:00:00Z","advisories":["RHSA-2014:1023"],"bugzilla":"1083213","bugzilla_description":"CVE-2014-2673 kernel: powerpc: tm: crash when forking inside a transaction","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:3.10.0-123.6.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2673.json"},{"CVE":"CVE-2014-0049","severity":"important","public_date":"2014-03-03T00:00:00Z","advisories":[],"bugzilla":"1062368","bugzilla_description":"CVE-2014-0049 kernel: kvm: mmio_fragments out-of-the-bounds access","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0049.json"},{"CVE":"CVE-2014-0101","severity":"important","public_date":"2014-03-03T00:00:00Z","advisories":["RHSA-2014:0520","RHSA-2014:0432","RHSA-2014:0419","RHSA-2014:0328"],"bugzilla":"1070705","bugzilla_description":"CVE-2014-0101 kernel: net: sctp: null pointer dereference when processing authenticated cookie_echo chunk","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-0:2.6.32-358.41.1.el6","kernel-0:2.6.32-279.43.1.el6","kernel-0:2.6.32-220.51.1.el6","kernel-0:2.6.32-431.11.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0101.json"},{"CVE":"CVE-2014-0102","severity":"moderate","public_date":"2014-02-28T00:00:00Z","advisories":[],"bugzilla":"1072419","bugzilla_description":"CVE-2014-0102 kernel: security: keyring cycle detector DoS","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0102.json"},{"CVE":"CVE-2014-9903","severity":"low","public_date":"2014-02-16T00:00:00Z","advisories":[],"bugzilla":"1350796","bugzilla_description":"CVE-2014-9903 kernel: Information leak in sys_sched_getattr()","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9903.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2014-2039","severity":"moderate","public_date":"2014-02-03T00:00:00Z","advisories":["RHSA-2014:0771"],"bugzilla":"1067558","bugzilla_description":"CVE-2014-2039 Kernel: s390: crash due to linkage stack instructions","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-431.20.3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2039.json"},{"CVE":"CVE-2014-0038","severity":"important","public_date":"2014-01-31T00:00:00Z","advisories":[],"bugzilla":"1060023","bugzilla_description":"CVE-2014-0038 Kernel: 3.4+ arbitrary write with CONFIG_X86_X32","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0038.json"},{"CVE":"CVE-2014-2038","severity":"low","public_date":"2014-01-17T00:00:00Z","advisories":["RHSA-2014:0328"],"bugzilla":"1066939","bugzilla_description":"CVE-2014-2038 kernel: nfs: data leak during extended writes","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.32-431.11.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2038.json"},{"CVE":"CVE-2014-1446","severity":"low","public_date":"2013-12-17T00:00:00Z","advisories":[],"bugzilla":"1053620","bugzilla_description":"CVE-2014-1446 Kernel: hamradio/yam: information leak in ioctl","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1446.json"},{"CVE":"CVE-2013-4587","severity":"important","public_date":"2013-12-12T00:00:00Z","advisories":[],"bugzilla":"1030986","bugzilla_description":"CVE-2013-4587 kernel: kvm: rtc_status.dest_map out-of-bounds access","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4587.json"},{"CVE":"CVE-2013-6367","severity":"important","public_date":"2013-12-12T00:00:00Z","advisories":["RHSA-2013:1801","RHSA-2013:1802","RHSA-2014:0163","RHSA-2014:0284"],"bugzilla":"1032207","bugzilla_description":"CVE-2013-6367 kvm: division by zero in apic_get_tmcct()","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kvm-0:83-266.el5_10.1","rhev-hypervisor6-0:6.5-20131204.0.3.2.el6_5","kernel-0:2.6.32-431.1.2.el6","kernel-0:2.6.32-358.37.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6367.json"},{"CVE":"CVE-2013-6368","severity":"important","public_date":"2013-12-12T00:00:00Z","advisories":["RHSA-2013:1801","RHSA-2014:0163","RHSA-2014:0284"],"bugzilla":"1032210","bugzilla_description":"CVE-2013-6368 kvm: cross page vapic_addr access","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kvm-0:83-266.el5_10.1","kernel-0:2.6.32-431.1.2.el6","kernel-0:2.6.32-358.37.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6368.json"},{"CVE":"CVE-2013-6376","severity":"important","public_date":"2013-12-12T00:00:00Z","advisories":[],"bugzilla":"1033106","bugzilla_description":"CVE-2013-6376 kernel: kvm: BUG_ON() in apic_cluster_id()","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6376.json"},{"CVE":"CVE-2013-4513","severity":"low","public_date":"2013-11-22T00:00:00Z","advisories":[],"bugzilla":"1033582","bugzilla_description":"CVE-2013-4513 Kernel: staging: ozwpan: buffer overflow in oz_cdev_write","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4513.json"},{"CVE":"CVE-2013-6380","severity":"low","public_date":"2013-11-22T00:00:00Z","advisories":[],"bugzilla":"1033593","bugzilla_description":"CVE-2013-6380 Kernel: aacraid: invalid pointer dereference","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6380.json"},{"CVE":"CVE-2013-6381","severity":"important","public_date":"2013-11-22T00:00:00Z","advisories":["RHSA-2014:0476","RHSA-2014:0159","RHSA-2014:0285","RHSA-2014:0284"],"bugzilla":"1033600","bugzilla_description":"CVE-2013-6381 Kernel: qeth: buffer overflow in snmp ioctl","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["kernel-0:2.6.32-431.5.1.el6","kernel-0:2.6.18-371.6.1.el5","kernel-0:2.6.18-348.25.1.el5","kernel-0:2.6.32-358.37.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6381.json"},{"CVE":"CVE-2013-6382","severity":"low","public_date":"2013-11-22T00:00:00Z","advisories":[],"bugzilla":"1033603","bugzilla_description":"CVE-2013-6382 Kernel: fs: xfs: missing check for ZERO_SIZE_PTR","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6382.json"},{"CVE":"CVE-2013-7266","severity":"low","public_date":"2013-11-21T00:00:00Z","advisories":["RHSA-2014:0328"],"bugzilla":"1039845","bugzilla_description":"CVE-2013-7271 Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.32-431.11.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7266.json"},{"CVE":"CVE-2013-7267","severity":"low","public_date":"2013-11-21T00:00:00Z","advisories":[],"bugzilla":"1039845","bugzilla_description":"CVE-2013-7271 Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7267.json"},{"CVE":"CVE-2013-7268","severity":"low","public_date":"2013-11-21T00:00:00Z","advisories":[],"bugzilla":"1039845","bugzilla_description":"CVE-2013-7271 Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7268.json"},{"CVE":"CVE-2013-7269","severity":"low","public_date":"2013-11-21T00:00:00Z","advisories":[],"bugzilla":"1039845","bugzilla_description":"CVE-2013-7271 Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7269.json"},{"CVE":"CVE-2013-7270","severity":"low","public_date":"2013-11-21T00:00:00Z","advisories":["RHSA-2014:0328"],"bugzilla":"1039845","bugzilla_description":"CVE-2013-7271 Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.32-431.11.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7270.json"},{"CVE":"CVE-2013-7271","severity":"low","public_date":"2013-11-21T00:00:00Z","advisories":[],"bugzilla":"1039845","bugzilla_description":"CVE-2013-7271 Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7271.json"},{"CVE":"CVE-2013-7026","severity":"moderate","public_date":"2013-11-21T00:00:00Z","advisories":[],"bugzilla":"1039951","bugzilla_description":"CVE-2013-7026 Kernel: ipc,shm: oops caused by shm_file deletion race condition","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7026.json"},{"CVE":"CVE-2013-7348","severity":"moderate","public_date":"2013-11-19T00:00:00Z","advisories":[],"bugzilla":"1083270","bugzilla_description":"CVE-2013-7348 kernel: aio: double free in ioctx_alloc","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7348.json"},{"CVE":"CVE-2013-7264","severity":"low","public_date":"2013-11-18T00:00:00Z","advisories":[],"bugzilla":"1035875","bugzilla_description":"CVE-2013-7263 CVE-2013-7265 Kernel: net: leakage of uninitialized memory to user-space via recv syscalls","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7264.json"},{"CVE":"CVE-2013-7281","severity":"low","public_date":"2013-11-18T00:00:00Z","advisories":[],"bugzilla":"1035875","bugzilla_description":"CVE-2013-7263 CVE-2013-7265 Kernel: net: leakage of uninitialized memory to user-space via recv syscalls","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7281.json"},{"CVE":"CVE-2013-6432","severity":"moderate","public_date":"2013-11-18T00:00:00Z","advisories":[],"bugzilla":"1039046","bugzilla_description":"CVE-2013-6432 Kernel: ping: NULL pointer dereference on write to msg_name","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6432.json"},{"CVE":"CVE-2013-4579","severity":"low","public_date":"2013-11-14T00:00:00Z","advisories":[],"bugzilla":"1032753","bugzilla_description":"CVE-2013-4579 kernel: ath9k_htc driver improperly updates MAC","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4579.json"},{"CVE":"CVE-2013-4588","severity":null,"public_date":"2013-11-11T00:00:00Z","advisories":[],"bugzilla":"1030800","bugzilla_description":"CVE-2013-4588 Kernel: net: ipvs: stack buffer overflow","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4588.json"},{"CVE":"CVE-2013-4494","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":["RHSA-2014:0108"],"bugzilla":"1026243","bugzilla_description":"CVE-2013-4494 kernel: xen: Lock order reversal between page allocation and grant table locks","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-371.4.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4494.json"},{"CVE":"CVE-2013-4563","severity":"important","public_date":"2013-10-29T00:00:00Z","advisories":[],"bugzilla":"1030015","bugzilla_description":"CVE-2013-4563  kernel: net: large udp packet over IPv6 over UFO-enabled device with TBF qdisc panic","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4563.json"},{"CVE":"CVE-2014-1445","severity":"low","public_date":"2013-10-16T00:00:00Z","advisories":[],"bugzilla":"1053613","bugzilla_description":"CVE-2014-1445 Kernel: wanxl: information leak in ioctl","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1445.json"},{"CVE":"CVE-2014-1444","severity":"low","public_date":"2013-10-11T00:00:00Z","advisories":[],"bugzilla":"1053610","bugzilla_description":"CVE-2014-1444 Kernel: farsync: information leak in ioctl","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1444.json"},{"CVE":"CVE-2013-4361","severity":"low","public_date":"2013-09-30T00:00:00Z","advisories":[],"bugzilla":"1009817","bugzilla_description":"CVE-2013-4361 Kernel: Xen: Xsa-66: information leak through fbld instruction emulation","cvss_score":1.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4361.json"},{"CVE":"CVE-2013-1442","severity":"moderate","public_date":"2013-09-24T00:00:00Z","advisories":[],"bugzilla":"1006431","bugzilla_description":"CVE-2013-1442 kernel: xen: information leak on AVX and/or LWP capable CPUs","cvss_score":2.3,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1442.json"},{"CVE":"CVE-2013-2894","severity":"moderate","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"1000137","bugzilla_description":"CVE-2013-2894 Kernel: HID: lenovo-tpkbd: heap overflow flaw","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2894.json"},{"CVE":"CVE-2013-2899","severity":"moderate","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"1000373","bugzilla_description":"CVE-2013-2899 Kernel: HID: picolcd_core: NULL pointer dereference","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2899.json"},{"CVE":"CVE-2013-2898","severity":"low","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"1000474","bugzilla_description":"CVE-2013-2898 Kernel: HID: sensor-hub: memory leak flaw","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2898.json"},{"CVE":"CVE-2013-2890","severity":"moderate","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"1000519","bugzilla_description":"CVE-2013-2890 Kernel: HID: Sony heap overflow flaw","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2890.json"},{"CVE":"CVE-2013-2897","severity":"moderate","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"1000536","bugzilla_description":"CVE-2013-2897 Kernel: HID: multitouch: heap overflow flaw","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2897.json"},{"CVE":"CVE-2013-2889","severity":"moderate","public_date":"2013-08-29T00:00:00Z","advisories":["RHSA-2013:1527","RHSA-2013:1645"],"bugzilla":"999890","bugzilla_description":"CVE-2013-2889 Kernel: HID: zeroplus: heap overflow flaw","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-122","affected_packages":["rhev-hypervisor6-0:6.5-20131115.0.3.2.el6_5","kernel-0:2.6.32-431.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2889.json"},{"CVE":"CVE-2013-2891","severity":"moderate","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"999960","bugzilla_description":"CVE-2013-2891 Kernel: HID: steelseries: heap overflow flaw","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2891.json"},{"CVE":"CVE-2013-4300","severity":"important","public_date":"2013-08-22T00:00:00Z","advisories":[],"bugzilla":"1004736","bugzilla_description":"CVE-2013-4300 Kernel: net: PID spoofing privilege escalation flaw","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4300.json"},{"CVE":"CVE-2013-4254","severity":"important","public_date":"2013-08-05T00:00:00Z","advisories":[],"bugzilla":"998878","bugzilla_description":"CVE-2013-4254 Kernel: ARM: perf: NULL pointer dereference in validate_event","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4254.json"},{"CVE":"CVE-2013-7252","severity":"low","public_date":"2013-07-24T00:00:00Z","advisories":[],"bugzilla":"1048168","bugzilla_description":"CVE-2013-7252 kwallet: crypto misuse","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-327","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7252.json"},{"CVE":"CVE-2013-2212","severity":"moderate","public_date":"2013-07-24T00:00:00Z","advisories":[],"bugzilla":"986295","bugzilla_description":"CVE-2013-2212 kernel: xen: Excessive time to disable caching with HVM guests with PCI passthrough","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2212.json"},{"CVE":"CVE-2013-4125","severity":"important","public_date":"2013-07-15T00:00:00Z","advisories":[],"bugzilla":"984664","bugzilla_description":"CVE-2013-4125 kernel: ipv6: BUG_ON in fib6_add_rt2node()","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4125.json"},{"CVE":"CVE-2013-4127","severity":"important","public_date":"2013-07-03T00:00:00Z","advisories":[],"bugzilla":"984722","bugzilla_description":"CVE-2013-4127 kernel: vhost-net: use-after-free in vhost_net_flush","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4127.json"},{"CVE":"CVE-2013-1059","severity":"important","public_date":"2013-07-01T00:00:00Z","advisories":[],"bugzilla":"977356","bugzilla_description":"CVE-2013-1059 Kernel: libceph: Fix NULL pointer dereference in auth client code","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1059.json"},{"CVE":"CVE-2013-4129","severity":"moderate","public_date":"2013-07-01T00:00:00Z","advisories":[],"bugzilla":"984743","bugzilla_description":"CVE-2013-4129 kernel: bridge: kernel BUG at kernel/timer.c:729","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4129.json"},{"CVE":"CVE-2013-2224","severity":"important","public_date":"2013-06-30T00:00:00Z","advisories":["RHSA-2013:1450","RHSA-2013:1195","RHSA-2013:1173","RHSA-2013:1166"],"bugzilla":"979936","bugzilla_description":"CVE-2013-2224 kernel: net: IP_REPOPTS invalid free","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-279.37.2.el6","kernel-0:2.6.32-358.18.1.el6","kernel-0:2.6.18-348.16.1.el5","kernel-0:2.6.32-358.118.1.openstack.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2224.json"},{"CVE":"CVE-2013-1432","severity":"important","public_date":"2013-06-26T00:00:00Z","advisories":[],"bugzilla":"974250","bugzilla_description":"CVE-2013-1432 kernel: xen: Page reference counting error due to XSA-45/CVE-2013-1918 fixes","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1432.json"},{"CVE":"CVE-2013-2188","severity":"moderate","public_date":"2013-06-17T00:00:00Z","advisories":["RHSA-2013:0911"],"bugzilla":"975406","bugzilla_description":"CVE-2013-2188 kernel: fs: filp leak on ro filesystem","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-358.11.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2188.json"},{"CVE":"CVE-2013-1935","severity":"important","public_date":"2013-06-10T00:00:00Z","advisories":["RHSA-2013:0911","RHSA-2013:0907"],"bugzilla":"949981","bugzilla_description":"CVE-2013-1935 kernel: kvm: pv_eoi guest updates with interrupts disabled","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-358.11.1.el6","rhev-hypervisor6-0:6.4-20130528.0.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1935.json"},{"CVE":"CVE-2013-1943","severity":"important","public_date":"2013-06-10T00:00:00Z","advisories":["RHSA-2013:0911"],"bugzilla":"950490","bugzilla_description":"CVE-2013-1943 kernel: kvm: missing check in kvm_set_memory_region()","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["kernel-0:2.6.32-358.11.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1943.json"},{"CVE":"CVE-2013-2140","severity":"moderate","public_date":"2013-06-05T00:00:00Z","advisories":[],"bugzilla":"971146","bugzilla_description":"CVE-2013-2140 kernel: xen: blkback: insufficient permission checks for BLKIF_OP_DISCARD","cvss_score":3.8,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2140.json"},{"CVE":"CVE-2013-2076","severity":"moderate","public_date":"2013-06-03T00:00:00Z","advisories":[],"bugzilla":"964259","bugzilla_description":"CVE-2013-2076 kernel: xen: Information leak on XSAVE/XRSTOR capable AMD CPUs","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2076.json"},{"CVE":"CVE-2013-4247","severity":"moderate","public_date":"2013-05-31T00:00:00Z","advisories":[],"bugzilla":"998401","bugzilla_description":"CVE-2013-4247 kernel: cifs: off-by-one bug in build_unc_path_to_root","cvss_score":4.6,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4247.json"},{"CVE":"CVE-2013-4220","severity":"moderate","public_date":"2013-05-24T00:00:00Z","advisories":[],"bugzilla":"996380","bugzilla_description":"CVE-2013-4220 Kernel: arm64: unhandled esr by el0_sync_compat","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4220.json"},{"CVE":"CVE-2013-1918","severity":"moderate","public_date":"2013-05-02T00:00:00Z","advisories":[],"bugzilla":"956163","bugzilla_description":"CVE-2013-1918 kernel: xen: Several long latency operations are not preemptible","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1918.json"},{"CVE":"CVE-2013-1952","severity":"moderate","public_date":"2013-05-02T00:00:00Z","advisories":[],"bugzilla":"956309","bugzilla_description":"CVE-2013-1952 kernel: xen: VT-d interrupt remapping source validation flaw for bridges","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1952.json"},{"CVE":"CVE-2013-1917","severity":"important","public_date":"2013-04-18T00:00:00Z","advisories":[],"bugzilla":"950668","bugzilla_description":"CVE-2013-1917 kernel: xen: Xen PV DoS vulnerability with SYSENTER","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1917.json"},{"CVE":"CVE-2013-1919","severity":"moderate","public_date":"2013-04-18T00:00:00Z","advisories":[],"bugzilla":"950686","bugzilla_description":"CVE-2013-1919 kernel: xen: Several access permission issues with IRQs for unprivileged guests","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1919.json"},{"CVE":"CVE-2013-1964","severity":"important","public_date":"2013-04-18T00:00:00Z","advisories":[],"bugzilla":"953632","bugzilla_description":"CVE-2013-1964 xen: grant table hypercall acquire/release imbalance","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1964.json"},{"CVE":"CVE-2013-2596","severity":"important","public_date":"2013-04-09T00:00:00Z","advisories":["RHSA-2016:0450","RHSA-2015:0695","RHSA-2015:0782","RHSA-2014:1392","RHSA-2015:0803"],"bugzilla":"1034490","bugzilla_description":"CVE-2013-2596 kernel: integer overflow in fb_mmap","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":["kernel-0:2.6.18-409.el5","kernel-0:2.6.32-220.60.2.el6","kernel-0:2.6.32-504.el6","kernel-0:2.6.32-358.59.1.el6","kernel-0:2.6.32-431.53.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2596.json"},{"CVE":"CVE-2013-3223","severity":"low","public_date":"2013-04-07T00:00:00Z","advisories":[],"bugzilla":"955662","bugzilla_description":"CVE-2013-3223 Kernel: ax25: information leak via msg_name in ax25_recvmsg()","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3223.json"},{"CVE":"CVE-2013-3226","severity":"low","public_date":"2013-04-07T00:00:00Z","advisories":[],"bugzilla":"956048","bugzilla_description":"CVE-2013-3226 Kernel: Bluetooth: SCO - missing msg_namelen update in sco_sock_recvmsg","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3226.json"},{"CVE":"CVE-2013-3227","severity":"low","public_date":"2013-04-07T00:00:00Z","advisories":[],"bugzilla":"956061","bugzilla_description":"CVE-2013-3227 Kernel: caif: missing msg_namelen update in caif_seqpkt_recvmsg","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3227.json"},{"CVE":"CVE-2013-3228","severity":"low","public_date":"2013-04-07T00:00:00Z","advisories":[],"bugzilla":"956069","bugzilla_description":"CVE-2013-3228 Kernel: irda: missing msg_namelen update in irda_recvmsg_dgram","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3228.json"},{"CVE":"CVE-2013-3229","severity":"low","public_date":"2013-04-07T00:00:00Z","advisories":[],"bugzilla":"956079","bugzilla_description":"CVE-2013-3229 Kernel: iucv: missing msg_namelen update in iucv_sock_recvmsg","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3229.json"},{"CVE":"CVE-2013-3230","severity":"low","public_date":"2013-04-07T00:00:00Z","advisories":[],"bugzilla":"956088","bugzilla_description":"CVE-2013-3230 Kernel: l2tp: info leak in l2tp_ip6_recvmsg","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3230.json"},{"CVE":"CVE-2013-3232","severity":"low","public_date":"2013-04-07T00:00:00Z","advisories":[],"bugzilla":"956110","bugzilla_description":"CVE-2013-3232 Kernel: netrom: information leak via msg_name in nr_recvmsg","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3232.json"},{"CVE":"CVE-2013-3233","severity":"low","public_date":"2013-04-07T00:00:00Z","advisories":[],"bugzilla":"956125","bugzilla_description":"CVE-2013-3233 Kernel: NFC: llcp: info leaks via msg_name in llcp_sock_recvmsg","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3233.json"},{"CVE":"CVE-2013-3234","severity":"low","public_date":"2013-04-07T00:00:00Z","advisories":[],"bugzilla":"956135","bugzilla_description":"CVE-2013-3234 Kernel: rose: info leak via msg_name in rose_recvmsg","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3234.json"},{"CVE":"CVE-2013-3235","severity":"low","public_date":"2013-04-07T00:00:00Z","advisories":["RHSA-2013:1034"],"bugzilla":"956145","bugzilla_description":"CVE-2013-3235 Kernel: tipc: info leaks via msg_name in recv_msg/recv_stream","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.18-348.12.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3235.json"},{"CVE":"CVE-2013-3236","severity":"low","public_date":"2013-04-07T00:00:00Z","advisories":[],"bugzilla":"956154","bugzilla_description":"CVE-2013-3236 Kernel: VSOCK: vmci -possible info leak in vmci_transport_dgram_dequeue","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3236.json"},{"CVE":"CVE-2013-3237","severity":"low","public_date":"2013-04-07T00:00:00Z","advisories":[],"bugzilla":"956158","bugzilla_description":"CVE-2013-3237  kernel: VSOCK: Fix missing msg_namelen update in vsock_stream_recvmsg","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3237.json"},{"CVE":"CVE-2013-1796","severity":"important","public_date":"2013-03-20T00:00:00Z","advisories":["RHSA-2013:0727","RHSA-2013:0928","RHSA-2013:0746","RHSA-2013:0744","RHSA-2013:1026"],"bugzilla":"917012","bugzilla_description":"CVE-2013-1796 kernel: kvm: buffer overflow in handling of MSR_KVM_SYSTEM_TIME","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-358.6.1.el6","kernel-0:2.6.32-220.39.1.el6","kernel-0:2.6.32-279.31.1.el6","kvm-0:83-262.el5_9.3","rhev-hypervisor6-0:6.4-20130415.0.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1796.json"},{"CVE":"CVE-2013-1797","severity":"important","public_date":"2013-03-20T00:00:00Z","advisories":["RHSA-2013:0727","RHSA-2013:0928","RHSA-2013:0746","RHSA-2013:0744","RHSA-2013:1026"],"bugzilla":"917013","bugzilla_description":"CVE-2013-1797 kernel: kvm: after free issue with the handling of MSR_KVM_SYSTEM_TIME","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["kernel-0:2.6.32-358.6.1.el6","kernel-0:2.6.32-220.39.1.el6","kernel-0:2.6.32-279.31.1.el6","kvm-0:83-262.el5_9.3","rhev-hypervisor6-0:6.4-20130415.0.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1797.json"},{"CVE":"CVE-2013-1798","severity":"important","public_date":"2013-03-20T00:00:00Z","advisories":["RHSA-2013:0727","RHSA-2013:0928","RHSA-2013:0746","RHSA-2013:0744","RHSA-2013:1026"],"bugzilla":"917017","bugzilla_description":"CVE-2013-1798 kernel: kvm: out-of-bounds access in ioapic indirect register reads","cvss_score":5.9,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-358.6.1.el6","kernel-0:2.6.32-220.39.1.el6","kernel-0:2.6.32-279.31.1.el6","kvm-0:83-262.el5_9.3","rhev-hypervisor6-0:6.4-20130415.0.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1798.json"},{"CVE":"CVE-2013-1858","severity":"important","public_date":"2013-03-13T00:00:00Z","advisories":[],"bugzilla":"921448","bugzilla_description":"CVE-2013-1858 kernel: CLONE_NEWUSER | CLONE_FS chroot exploit","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1858.json"},{"CVE":"CVE-2013-2206","severity":"important","public_date":"2013-03-13T00:00:00Z","advisories":["RHSA-2013:1195","RHSA-2013:1173","RHSA-2013:1166"],"bugzilla":"976562","bugzilla_description":"CVE-2013-2206 kernel: sctp: duplicate cookie handling NULL pointer dereference","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-0:2.6.32-358.18.1.el6","kernel-0:2.6.18-348.16.1.el5","kernel-0:2.6.32-358.118.1.openstack.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2206.json"},{"CVE":"CVE-2013-1873","severity":null,"public_date":"2013-03-09T00:00:00Z","advisories":[],"bugzilla":"923652","bugzilla_description":"CVE-2013-1873 Kernel: information leaks via netlink interface","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1873.json"},{"CVE":"CVE-2013-2636","severity":"low","public_date":"2013-03-09T00:00:00Z","advisories":[],"bugzilla":"924693","bugzilla_description":"CVE-2013-2636 kernel: Information leak in the Linux ethernet bridge component","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2636.json"},{"CVE":"CVE-2013-1828","severity":"important","public_date":"2013-03-08T00:00:00Z","advisories":[],"bugzilla":"919315","bugzilla_description":"CVE-2013-1828 kernel: sctp: SCTP_GET_ASSOC_STATS stack buffer overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1828.json"},{"CVE":"CVE-2013-0309","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0496"],"bugzilla":"912898","bugzilla_description":"CVE-2013-0309 kernel: mm: thp: pmd_present and PROT_NONE local DoS","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-358.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0309.json"},{"CVE":"CVE-2013-0310","severity":"moderate","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0496"],"bugzilla":"912900","bugzilla_description":"CVE-2013-0310 kernel: net: CIPSO_V4_TAG_LOCAL tag NULL pointer dereference","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-0:2.6.32-358.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0310.json"},{"CVE":"CVE-2013-0311","severity":"important","public_date":"2013-02-19T00:00:00Z","advisories":["RHSA-2013:0928","RHSA-2013:0579","RHSA-2013:0496","RHSA-2013:0882"],"bugzilla":"912905","bugzilla_description":"CVE-2013-0311 kernel: vhost: fix length for cross region descriptor","cvss_score":6.5,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.4-20130221.0.el6","kernel-0:2.6.32-279.31.1.el6","kernel-0:2.6.32-358.el6","kernel-0:2.6.32-220.38.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0311.json"},{"CVE":"CVE-2013-0228","severity":"important","public_date":"2013-02-13T00:00:00Z","advisories":["RHSA-2013:0630"],"bugzilla":"906309","bugzilla_description":"CVE-2013-0228 kernel: xen: userspace alterable %ds access in xen_iret()","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-358.2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0228.json"},{"CVE":"CVE-2013-0231","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":["RHSA-2013:0747"],"bugzilla":"910874","bugzilla_description":"CVE-2013-0231 kernel: xen: pciback DoS via not rate limited log messages","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-348.4.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0231.json"},{"CVE":"CVE-2013-0216","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":["RHSA-2013:0747"],"bugzilla":"910883","bugzilla_description":"CVE-2013-0216 CVE-2013-0217 kernel: xen: Linux netback DoS via malicious guest ring.","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-348.4.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0216.json"},{"CVE":"CVE-2013-0217","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":[],"bugzilla":"910883","bugzilla_description":"CVE-2013-0216 CVE-2013-0217 kernel: xen: Linux netback DoS via malicious guest ring.","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0217.json"},{"CVE":"CVE-2013-0153","severity":"moderate","public_date":"2013-02-05T00:00:00Z","advisories":["RHSA-2013:0847"],"bugzilla":"910903","bugzilla_description":"CVE-2013-0153 kernel: xen: interrupt remap entries shared and old ones not cleared on AMD IOMMUs","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-348.6.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0153.json"},{"CVE":"CVE-2013-0313","severity":"moderate","public_date":"2013-01-21T00:00:00Z","advisories":[],"bugzilla":"913266","bugzilla_description":"CVE-2013-0313 kernel: evm: NULL pointer de-reference local DoS","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0313.json"},{"CVE":"CVE-2013-0190","severity":"moderate","public_date":"2013-01-16T00:00:00Z","advisories":["RHSA-2013:0496"],"bugzilla":"896038","bugzilla_description":"CVE-2013-0190 kernel: stack corruption in xen_failsafe_callback()","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-358.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0190.json"},{"CVE":"CVE-2013-0349","severity":"low","public_date":"2013-01-09T00:00:00Z","advisories":["RHSA-2013:0744"],"bugzilla":"914298","bugzilla_description":"CVE-2013-0349 kernel: bluetooth HIDP implementation information disclosure","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.32-358.6.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0349.json"},{"CVE":"CVE-2013-0160","severity":"low","public_date":"2013-01-07T00:00:00Z","advisories":[],"bugzilla":"892983","bugzilla_description":"CVE-2013-0160 kernel: /dev/ptmx to measure inter-keystroke timing","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0160.json"},{"CVE":"CVE-2013-3302","severity":"low","public_date":"2012-12-27T00:00:00Z","advisories":[],"bugzilla":"952260","bugzilla_description":"CVE-2013-3302 Kernel: cifs: NULL pointer dereference","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3302.json"},{"CVE":"CVE-2013-2015","severity":"low","public_date":"2012-12-27T00:00:00Z","advisories":[],"bugzilla":"957123","bugzilla_description":"CVE-2013-2015 Kernel: ext4: hang when mounting non-journal filesystems with orphan list","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2015.json"},{"CVE":"CVE-2013-4591","severity":"moderate","public_date":"2012-12-11T00:00:00Z","advisories":["RHSA-2013:1645","RHSA-2014:0284"],"bugzilla":"1031678","bugzilla_description":"CVE-2013-4591 kernel: nfs: missing check for buffer length in __nfs4_get_acl_uncached","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-431.el6","kernel-0:2.6.32-358.37.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4591.json"},{"CVE":"CVE-2013-4592","severity":"moderate","public_date":"2012-12-10T00:00:00Z","advisories":["RHSA-2013:1645"],"bugzilla":"1031702","bugzilla_description":"CVE-2013-4592 kernel: kvm: memory leak when memory slot is moved with assigned device","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-401","affected_packages":["kernel-0:2.6.32-431.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4592.json"},{"CVE":"CVE-2012-4461","severity":"moderate","public_date":"2012-11-06T00:00:00Z","advisories":["RHSA-2013:0223","RHSA-2013:0882"],"bugzilla":"862900","bugzilla_description":"CVE-2012-4461 kernel: kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-220.38.1.el6","kernel-0:2.6.32-279.22.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4461.json"},{"CVE":"CVE-2013-1928","severity":"low","public_date":"2012-10-25T00:00:00Z","advisories":["RHSA-2013:1645"],"bugzilla":"949567","bugzilla_description":"CVE-2013-1928 Kernel: information leak in fs/compat_ioctl.c VIDEO_SET_SPU_PALETTE","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.32-431.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1928.json"},{"CVE":"CVE-2012-6536","severity":"low","public_date":"2012-09-20T00:00:00Z","advisories":[],"bugzilla":"922039","bugzilla_description":"CVE-2012-6536 Kernel: xfrm_user: ensure user supplied esn replay window is valid","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6536.json"},{"CVE":"CVE-2012-6538","severity":"low","public_date":"2012-09-19T00:00:00Z","advisories":["RHSA-2013:0744"],"bugzilla":"922253","bugzilla_description":"CVE-2012-6538 Kernel: xfrm_user: info leak in copy_to_user_auth","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.32-358.6.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6538.json"},{"CVE":"CVE-2012-6537","severity":"low","public_date":"2012-09-19T00:00:00Z","advisories":["RHSA-2013:0747","RHSA-2013:0744"],"bugzilla":"922424","bugzilla_description":"CVE-2012-6537 Kernel: xfrm_user information leaks copy_to_user_","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.32-358.6.1.el6","kernel-0:2.6.18-348.4.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6537.json"},{"CVE":"CVE-2013-1826","severity":"moderate","public_date":"2012-09-13T00:00:00Z","advisories":["RHSA-2013:0747","RHSA-2013:0744"],"bugzilla":"919384","bugzilla_description":"CVE-2013-1826 Kernel: xfrm_user: return error pointer instead of NULL","cvss_score":3.8,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-358.6.1.el6","kernel-0:2.6.18-348.4.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1826.json"},{"CVE":"CVE-2012-6703","severity":"moderate","public_date":"2012-09-05T00:00:00Z","advisories":[],"bugzilla":"1351076","bugzilla_description":"CVE-2012-6703 kernel: Integer overflow in compress_core","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6703.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2013-1827","severity":"moderate","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:0744"],"bugzilla":"919164","bugzilla_description":"CVE-2013-1827 Kernel: dccp: check ccid before NULL poiter dereference","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-358.6.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1827.json"},{"CVE":"CVE-2012-6539","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"922133","bugzilla_description":"CVE-2012-6539 Kernel: net: info leak in compat dev_ifconf","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6539.json"},{"CVE":"CVE-2012-6540","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"922308","bugzilla_description":"CVE-2012-6540 Kernel: ipvs: information leak in getsockopt(IP_VS_SO_GET_TIMEOUT)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6540.json"},{"CVE":"CVE-2012-6541","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"922314","bugzilla_description":"CVE-2012-6541 Kernel: dccp: informaion leak via getsockopt(DCCP_SOCKOPT_CCID_TX_INFO)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6541.json"},{"CVE":"CVE-2012-6542","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:0747","RHSA-2013:1645"],"bugzilla":"922322","bugzilla_description":"CVE-2012-6542 Kernel: llc: information leak via getsockname","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.18-348.4.1.el5","kernel-0:2.6.32-431.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6542.json"},{"CVE":"CVE-2012-6543","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"922341","bugzilla_description":"CVE-2012-6543 Kernel: l2tp: information leak via getsockname","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6543.json"},{"CVE":"CVE-2012-6547","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:0747","RHSA-2013:0744"],"bugzilla":"922344","bugzilla_description":"CVE-2012-6547 Kernel: net/tun: ioctl() based information leaks","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.32-358.6.1.el6","kernel-0:2.6.18-348.4.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6547.json"},{"CVE":"CVE-2012-6548","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:1051","RHSA-2013:1080"],"bugzilla":"922353","bugzilla_description":"CVE-2012-6548 Kernel: udf: information leak on export","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.32-358.14.1.el6","kernel-0:2.6.32-358.114.1.openstack.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6548.json"},{"CVE":"CVE-2012-6549","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"922359","bugzilla_description":"CVE-2012-6549 Kernel: isofs: information leak on export","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6549.json"},{"CVE":"CVE-2012-6546","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:0747","RHSA-2013:0744"],"bugzilla":"922383","bugzilla_description":"CVE-2012-6546 Kernel: atm: information leak in getsockopt & getsockname","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.32-358.6.1.el6","kernel-0:2.6.18-348.4.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6546.json"},{"CVE":"CVE-2012-6545","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:1645","RHSA-2013:1034"],"bugzilla":"922404","bugzilla_description":"CVE-2012-6545 Kernel: Bluetooth: RFCOMM - information leak","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.32-431.el6","kernel-0:2.6.18-348.12.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6545.json"},{"CVE":"CVE-2012-6544","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:1195","RHSA-2013:1173","RHSA-2013:1034"],"bugzilla":"922414","bugzilla_description":"CVE-2012-6544 Kernel: Bluetooth: HCI & L2CAP information leaks","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.32-358.18.1.el6","kernel-0:2.6.18-348.12.1.el5","kernel-0:2.6.32-358.118.1.openstack.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6544.json"},{"CVE":"CVE-2012-3433","severity":"important","public_date":"2012-08-09T00:00:00Z","advisories":[],"bugzilla":"843582","bugzilla_description":"CVE-2012-3433 kernel: xen: HVM guest destroy p2m teardown host DoS vulnerability","cvss_score":5.5,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3433.json"},{"CVE":"CVE-2012-5517","severity":"moderate","public_date":"2012-08-01T00:00:00Z","advisories":["RHSA-2012:1580"],"bugzilla":"875374","bugzilla_description":"CVE-2012-5517 kernel: mm/hotplug: failure in propagating hot-added memory to other nodes","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-279.19.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5517.json"},{"CVE":"CVE-2012-3412","severity":"important","public_date":"2012-07-30T00:00:00Z","advisories":["RHSA-2012:1430","RHSA-2012:1375","RHSA-2012:1366","RHSA-2012:1401","RHSA-2012:1324","RHSA-2012:1323","RHSA-2012:1347"],"bugzilla":"844714","bugzilla_description":"CVE-2012-3412 kernel: sfc: potential remote denial of service through TCP MSS option","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-400","affected_packages":["kernel-0:2.6.32-131.35.1.el6","kernel-0:2.6.32-279.11.1.el6","kernel-0:2.6.18-238.45.1.el5","rhev-hypervisor6-0:6.3-20121012.0.el6_3","kernel-0:2.6.32-220.28.1.el6","kernel-0:2.6.18-308.16.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3412.json"},{"CVE":"CVE-2012-3432","severity":"moderate","public_date":"2012-07-26T00:00:00Z","advisories":[],"bugzilla":"843570","bugzilla_description":"CVE-2012-3432 kernel: xen: HVM guest user mode MMIO emulation DoS","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3432.json"},{"CVE":"CVE-2012-6647","severity":"moderate","public_date":"2012-07-20T00:00:00Z","advisories":["RHSA-2014:0981"],"bugzilla":"1097746","bugzilla_description":"CVE-2012-6647 Kernel: futex: forbid uaddr == uaddr2 in futex_wait_requeue_pi()","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-431.23.3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6647.json"},{"CVE":"CVE-2012-2744","severity":"important","public_date":"2012-07-10T00:00:00Z","advisories":["RHSA-2012:1129","RHSA-2012:1064","RHSA-2012:1148","RHSA-2012:1114"],"bugzilla":"833402","bugzilla_description":"CVE-2012-2744 kernel: netfilter: null pointer dereference in nf_ct_frag6_reasm()","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-228->CWE-476","affected_packages":["kernel-0:2.6.32-220.24.1.el6","kernel-0:2.6.32-71.40.1.el6","kernel-0:2.6.32-131.30.1.el6","kernel-0:2.6.32-279.1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2744.json"},{"CVE":"CVE-2012-2745","severity":"moderate","public_date":"2012-07-10T00:00:00Z","advisories":["RHSA-2012:1064"],"bugzilla":"833428","bugzilla_description":"CVE-2012-2745 kernel: cred: copy_process() should clear child->replacement_session_keyring","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-279.1.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2745.json"},{"CVE":"CVE-2012-3400","severity":"low","public_date":"2012-06-27T00:00:00Z","advisories":["RHSA-2012:1426","RHSA-2012:1491","RHSA-2013:0594"],"bugzilla":"843139","bugzilla_description":"CVE-2012-3400 kernel: udf: buffer overflow when parsing sparing table","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-348.2.1.el5","kernel-rt-0:3.2.33-rt50.66.el6rt","kernel-0:2.6.32-279.14.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3400.json"},{"CVE":"CVE-2012-0217","severity":"important","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:0721","RHSA-2012:0720"],"bugzilla":"813428","bugzilla_description":"CVE-2012-0217 kernel: x86-64: avoid sysret to non-canonical address","cvss_score":7.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-308.8.2.el5","kernel-0:2.6.18-238.39.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0217.json"},{"CVE":"CVE-2012-0218","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":[],"bugzilla":"813908","bugzilla_description":"CVE-2012-0218 kernel: xen: guest denial of service on syscall/sysenter exception generation","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0218.json"},{"CVE":"CVE-2012-2934","severity":"moderate","public_date":"2012-06-12T00:00:00Z","advisories":["RHSA-2012:0721"],"bugzilla":"824966","bugzilla_description":"CVE-2012-2934 kernel: denial of service due to AMD Erratum #121","cvss_score":4.6,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-308.8.2.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2934.json"},{"CVE":"CVE-2012-2137","severity":"important","public_date":"2012-06-05T00:00:00Z","advisories":["RHSA-2012:0743"],"bugzilla":"816151","bugzilla_description":"CVE-2012-2137 kernel: kvm: buffer overflow in kvm_set_irq()","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-220.23.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2137.json"},{"CVE":"CVE-2012-2372","severity":"moderate","public_date":"2012-06-05T00:00:00Z","advisories":["RHSA-2012:1540","RHSA-2012:0743"],"bugzilla":"822754","bugzilla_description":"CVE-2012-2372 kernel: rds-ping cause kernel panic","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-308.24.1.el5","kernel-0:2.6.32-220.23.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2372.json"},{"CVE":"CVE-2012-2136","severity":"important","public_date":"2012-05-29T00:00:00Z","advisories":["RHSA-2012:1087","RHSA-2012:0690","RHSA-2012:0743"],"bugzilla":"816289","bugzilla_description":"CVE-2012-2136 kernel: net: insufficient data_len validation in sock_alloc_send_pskb()","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":["kernel-0:2.6.18-238.40.1.el5","kernel-0:2.6.18-308.8.1.el5","kernel-0:2.6.32-220.23.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2136.json"},{"CVE":"CVE-2012-6701","severity":"moderate","public_date":"2012-05-21T00:00:00Z","advisories":["RHSA-2018:1854"],"bugzilla":"1314288","bugzilla_description":"CVE-2012-6701 kernel: AIO interface didn't use rw_verify_area() for checking mandatory locking on files and size of access","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":"CWE-190","affected_packages":["kernel-0:2.6.32-754.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6701.json"},{"CVE":"CVE-2012-2373","severity":"moderate","public_date":"2012-05-17T00:00:00Z","advisories":["RHSA-2012:0743"],"bugzilla":"822821","bugzilla_description":"CVE-2012-2373 kernel: mm: read_pmd_atomic: 32bit PAE pmd walk vs pmd_populate SMP race condition","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-220.23.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2373.json"},{"CVE":"CVE-2012-2319","severity":"low","public_date":"2012-05-04T00:00:00Z","advisories":["RHSA-2012:1323","RHSA-2012:1347"],"bugzilla":"819471","bugzilla_description":"CVE-2012-2319 kernel: Buffer overflow in the HFS plus filesystem (different issue than CVE-2009-4020)","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["kernel-0:2.6.18-238.45.1.el5","kernel-0:2.6.18-308.16.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2319.json"},{"CVE":"CVE-2012-6704","severity":"moderate","public_date":"2012-04-26T00:00:00Z","advisories":[],"bugzilla":"1402024","bugzilla_description":"CVE-2012-6704 kernel: Signed overflows in SO_{SND|RCV}BUF in sock_setsockopt()","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6704.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2012-2383","severity":"moderate","public_date":"2012-04-23T00:00:00Z","advisories":["RHSA-2012:1156"],"bugzilla":"824176","bugzilla_description":"CVE-2012-2383 kernel: drm/i915: integer overflow in i915_gem_execbuffer2()","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-190","affected_packages":["kernel-0:2.6.32-279.5.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2383.json"},{"CVE":"CVE-2012-2384","severity":"moderate","public_date":"2012-04-23T00:00:00Z","advisories":["RHSA-2012:1304"],"bugzilla":"824178","bugzilla_description":"CVE-2012-2384 kernel: drm/i915: integer overflow in i915_gem_do_execbuffer()","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-190","affected_packages":["kernel-0:2.6.32-279.9.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2384.json"},{"CVE":"CVE-2012-2127","severity":"moderate","public_date":"2012-04-20T00:00:00Z","advisories":[],"bugzilla":"815188","bugzilla_description":"CVE-2012-2127 kernel: pid namespace leak in kernel 3.0 and 3.1","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2127.json"},{"CVE":"CVE-2012-1583","severity":"important","public_date":"2012-04-17T00:00:00Z","advisories":["RHSA-2012:0480","RHSA-2012:0720"],"bugzilla":"752304","bugzilla_description":"CVE-2012-1583 kernel: ipv6: panic using raw sockets","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-393->CWE-119","affected_packages":["kernel-0:2.6.18-308.4.1.el5","kernel-0:2.6.18-238.39.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1583.json"},{"CVE":"CVE-2012-2119","severity":"important","public_date":"2012-04-16T00:00:00Z","advisories":["RHSA-2012:0743"],"bugzilla":"814278","bugzilla_description":"CVE-2012-2119 kernel: macvtap: zerocopy: vector length is not validated before pinning user pages","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-220.23.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2119.json"},{"CVE":"CVE-2012-2121","severity":"moderate","public_date":"2012-03-29T00:00:00Z","advisories":["RHSA-2012:0743","RHSA-2012:0676"],"bugzilla":"814149","bugzilla_description":"CVE-2012-2121 kvm: device assignment page leak","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kvm-0:83-249.el5_8.4","kernel-0:2.6.32-220.23.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2121.json"},{"CVE":"CVE-2012-1568","severity":"low","public_date":"2012-03-17T00:00:00Z","advisories":["RHSA-2012:1426","RHSA-2013:0168"],"bugzilla":"804947","bugzilla_description":"CVE-2012-1568 kernel: execshield: predictable ascii armour base address","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["kernel-0:2.6.18-348.1.1.el5","kernel-0:2.6.32-279.14.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1568.json"},{"CVE":"CVE-2012-1179","severity":"moderate","public_date":"2012-03-15T00:00:00Z","advisories":["RHSA-2012:1042","RHSA-2012:0743"],"bugzilla":"803793","bugzilla_description":"CVE-2012-1179 kernel: thp:__split_huge_page() mapcount != page_mapcount BUG_ON()","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-131.29.1.el6","kernel-0:2.6.32-220.23.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1179.json"},{"CVE":"CVE-2012-1097","severity":"moderate","public_date":"2012-03-03T00:00:00Z","advisories":["RHSA-2012:0481","RHSA-2012:1042"],"bugzilla":"799209","bugzilla_description":"CVE-2012-1097 kernel: regset: Prevent null pointer reference on readonly regsets","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-131.29.1.el6","kernel-0:2.6.32-220.13.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1097.json"},{"CVE":"CVE-2012-1146","severity":"moderate","public_date":"2012-02-24T00:00:00Z","advisories":[],"bugzilla":"800813","bugzilla_description":"CVE-2012-1146 kernel: mm: memcg: unregistring of events attached to the same eventfd can lead to oops","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1146.json"},{"CVE":"CVE-2012-1090","severity":"moderate","public_date":"2012-02-23T00:00:00Z","advisories":["RHSA-2012:0481"],"bugzilla":"798293","bugzilla_description":"CVE-2012-1090 kernel: cifs: dentry refcount leak when opening a FIFO on lookup leads to panic on unmount","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-220.13.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1090.json"},{"CVE":"CVE-2012-1601","severity":"moderate","public_date":"2012-02-07T00:00:00Z","advisories":["RHSA-2012:0571","RHSA-2012:0676"],"bugzilla":"808199","bugzilla_description":"CVE-2012-1601 kernel: kvm: irqchip_in_kernel() and vcpu->arch.apic inconsistency","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-220.17.1.el6","kvm-0:83-249.el5_8.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1601.json"},{"CVE":"CVE-2011-4325","severity":"moderate","public_date":"2012-01-10T00:00:00Z","advisories":["RHSA-2012:0007"],"bugzilla":"755455","bugzilla_description":"CVE-2011-4325 kernel: nfs: diotest4 from LTP crash client null pointer deref","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-0:2.6.18-274.17.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4325.json"},{"CVE":"CVE-2011-4348","severity":"important","public_date":"2012-01-10T00:00:00Z","advisories":["RHSA-2012:0007"],"bugzilla":"757143","bugzilla_description":"CVE-2011-4348 kernel: incomplete fix for CVE-2011-2482","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-662->CWE-362->CWE-672->CWE-119","affected_packages":["kernel-0:2.6.18-274.17.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4348.json"},{"CVE":"CVE-2012-2100","severity":"low","public_date":"2012-01-10T00:00:00Z","advisories":["RHSA-2012:1580","RHSA-2012:1445"],"bugzilla":"809687","bugzilla_description":"CVE-2012-2100 kernel: ext4: fix inconsistency in ext4_fill_flex_info()","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-308.20.1.el5","kernel-0:2.6.32-279.19.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2100.json"},{"CVE":"CVE-2012-0058","severity":"moderate","public_date":"2012-01-08T00:00:00Z","advisories":[],"bugzilla":"782696","bugzilla_description":"CVE-2012-0058 kernel: Unused iocbs in a batch should not be accounted as active","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0058.json"},{"CVE":"CVE-2012-0045","severity":"moderate","public_date":"2011-12-29T00:00:00Z","advisories":["RHSA-2012:0350","RHSA-2012:0422"],"bugzilla":"773370","bugzilla_description":"CVE-2012-0045 kernel: kvm: syscall instruction induced guest panic","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["rhev-hypervisor6-0:6.2-20120320.0.el6_2","kernel-0:2.6.32-220.7.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0045.json"},{"CVE":"CVE-2011-4622","severity":"moderate","public_date":"2011-12-14T00:00:00Z","advisories":["RHSA-2012:0051","RHSA-2012:0350"],"bugzilla":"769721","bugzilla_description":"CVE-2011-4622 kernel: kvm: pit timer with no irqchip crashes the system","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kvm-0:83-239.el5_7.1","kernel-0:2.6.32-220.7.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4622.json"},{"CVE":"CVE-2011-4604","severity":"low","public_date":"2011-12-10T00:00:00Z","advisories":[],"bugzilla":"767495","bugzilla_description":"CVE-2011-4604 kernel: bat_socket_read memory corruption","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4604.json"},{"CVE":"CVE-2012-6638","severity":"moderate","public_date":"2011-12-02T00:00:00Z","advisories":["RHSA-2014:0433","RHSA-2014:0772"],"bugzilla":"1066055","bugzilla_description":"CVE-2012-6638 Kernel: net: tcp: potential DoS via SYN+FIN messages","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["kernel-0:2.6.18-371.8.1.el5","kernel-0:2.6.18-348.27.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6638.json"},{"CVE":"CVE-2011-4347","severity":"moderate","public_date":"2011-11-20T00:00:00Z","advisories":["RHSA-2012:0350","RHSA-2012:1042","RHSA-2012:0149"],"bugzilla":"756084","bugzilla_description":"CVE-2011-4347 kernel: kvm: device assignment DoS","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-131.29.1.el6","kernel-0:2.6.32-220.7.1.el6","kvm-0:83-249.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4347.json"},{"CVE":"CVE-2011-4330","severity":"moderate","public_date":"2011-11-09T00:00:00Z","advisories":["RHSA-2012:0007","RHSA-2012:0358"],"bugzilla":"755431","bugzilla_description":"CVE-2011-4330 kernel: hfs: add sanity check for file name length","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-274.17.1.el5","kernel-0:2.6.18-238.35.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4330.json"},{"CVE":"CVE-2011-2942","severity":"moderate","public_date":"2011-10-20T00:00:00Z","advisories":["RHSA-2011:1386","RHSA-2011:1408"],"bugzilla":"730917","bugzilla_description":"CVE-2011-2942 kernel: bridge: null pointer dereference in __br_deliver","cvss_score":6.1,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":["kernel-0:2.6.18-274.7.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2942.json"},{"CVE":"CVE-2011-3347","severity":"moderate","public_date":"2011-10-20T00:00:00Z","advisories":["RHSA-2011:1386","RHSA-2011:1530","RHSA-2011:1408","RHSA-2012:0116"],"bugzilla":"736425","bugzilla_description":"CVE-2011-3347 kernel: be2net: promiscuous mode and non-member VLAN packets DoS","cvss_score":4.6,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-131.25.1.el6","kernel-0:2.6.18-274.7.1.el5","kernel-0:2.6.32-220.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3347.json"},{"CVE":"CVE-2011-5321","severity":"moderate","public_date":"2011-10-12T00:00:00Z","advisories":["RHSA-2015:1221"],"bugzilla":"1201887","bugzilla_description":"CVE-2011-5321 Kernel: tty: driver reference leakage in tty_open","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-504.30.3.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5321.json"},{"CVE":"CVE-2011-3638","severity":"moderate","public_date":"2011-09-28T00:00:00Z","advisories":["RHSA-2012:0107","RHSA-2012:0517","RHSA-2011:1530","RHSA-2012:0116"],"bugzilla":"747942","bugzilla_description":"CVE-2011-3638 kernel: ext4: ext4_ext_insert_extent() kernel oops","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-131.25.1.el6","kernel-0:2.6.18-274.18.1.el5","kernel-0:2.6.18-238.37.1.el5","kernel-0:2.6.32-220.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3638.json"},{"CVE":"CVE-2011-2482","severity":"important","public_date":"2011-08-30T00:00:00Z","advisories":["RHSA-2011:1212","RHSA-2011:1813"],"bugzilla":"714867","bugzilla_description":"CVE-2011-2482 kernel: sctp dos","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-662->CWE-362->CWE-672->CWE-476","affected_packages":["kernel-0:2.6.18-238.31.1.el5","kernel-0:2.6.18-274.3.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2482.json"},{"CVE":"CVE-2011-2519","severity":"moderate","public_date":"2011-08-30T00:00:00Z","advisories":["RHSA-2011:1212","RHSA-2011:1813"],"bugzilla":"718882","bugzilla_description":"CVE-2011-2519 kernel: xen: x86_emulate: fix SAHF emulation","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-238.31.1.el5","kernel-0:2.6.18-274.3.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2519.json"},{"CVE":"CVE-2011-1833","severity":"moderate","public_date":"2011-08-09T00:00:00Z","advisories":["RHSA-2011:1386","RHSA-2011:1350"],"bugzilla":"731172","bugzilla_description":"CVE-2011-1833 kernel: ecryptfs: mount source TOCTOU race","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-367","affected_packages":["kernel-0:2.6.32-131.17.1.el6","kernel-0:2.6.18-274.7.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1833.json"},{"CVE":"CVE-2011-2905","severity":"low","public_date":"2011-08-07T00:00:00Z","advisories":["RHSA-2011:1465"],"bugzilla":"729808","bugzilla_description":"CVE-2011-2905 kernel: perf tools: may parse user-controlled configuration file","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["kernel-0:2.6.32-131.21.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2905.json"},{"CVE":"CVE-2011-4112","severity":null,"public_date":"2011-07-26T00:00:00Z","advisories":[],"bugzilla":"751006","bugzilla_description":"CVE-2011-4112 kernel: null ptr deref at dev_queue_xmit+0x35/0x4d0","cvss_score":6.1,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4112.json"},{"CVE":"CVE-2011-2699","severity":"important","public_date":"2011-07-20T00:00:00Z","advisories":["RHSA-2011:1465","RHSA-2011:1386","RHSA-2012:0358"],"bugzilla":"723429","bugzilla_description":"CVE-2011-2699 kernel: ipv6: make fragment identifications less predictable","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-238.35.1.el5","kernel-0:2.6.18-274.7.1.el5","kernel-0:2.6.32-131.21.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2699.json"},{"CVE":"CVE-2011-1576","severity":"moderate","public_date":"2011-06-06T00:00:00Z","advisories":["RHSA-2011:0927","RHSA-2011:1253","RHSA-2011:1189","RHSA-2011:1106","RHSA-2011:1090"],"bugzilla":"695173","bugzilla_description":"CVE-2011-1576 kernel: net: Fix memory leak/corruption on VLAN GRO_DROP","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-401","affected_packages":["kernel-0:2.6.32-131.12.1.el6","kernel-0:2.6.32-71.34.1.el6","kernel-0:2.6.18-238.19.1.el5","kernel-rt-0:2.6.33.9-rt31.75.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1576.json"},{"CVE":"CVE-2011-2491","severity":"important","public_date":"2011-05-31T00:00:00Z","advisories":["RHSA-2011:1212","RHSA-2011:1253","RHSA-2011:1189","RHSA-2011:1813"],"bugzilla":"709393","bugzilla_description":"CVE-2011-2491 kernel: rpc task leak after flock()ing  NFS share","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-131.12.1.el6","kernel-0:2.6.18-238.31.1.el5","kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.18-274.3.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2491.json"},{"CVE":"CVE-2011-2492","severity":"low","public_date":"2011-05-09T00:00:00Z","advisories":["RHSA-2011:0927","RHSA-2011:1253","RHSA-2011:1189"],"bugzilla":"703019","bugzilla_description":"CVE-2011-2492 kernel: bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.32-131.12.1.el6","kernel-0:2.6.18-238.19.1.el5","kernel-rt-0:2.6.33.9-rt31.75.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2492.json"},{"CVE":"CVE-2011-1770","severity":"important","public_date":"2011-05-06T00:00:00Z","advisories":["RHSA-2011:1253","RHSA-2011:0836"],"bugzilla":"703011","bugzilla_description":"CVE-2011-1770 kernel: dccp: handle invalid feature options length","cvss_score":7.8,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-190->CWE-119","affected_packages":["kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.32-131.2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1770.json"},{"CVE":"CVE-2011-1776","severity":"low","public_date":"2011-05-06T00:00:00Z","advisories":["RHSA-2011:0927","RHSA-2011:1253","RHSA-2011:1189"],"bugzilla":"703026","bugzilla_description":"CVE-2011-1776 kernel: validate size of EFI GUID partition entries","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-131.12.1.el6","kernel-0:2.6.18-238.19.1.el5","kernel-rt-0:2.6.33.9-rt31.75.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1776.json"},{"CVE":"CVE-2011-2689","severity":"moderate","public_date":"2011-04-26T00:00:00Z","advisories":["RHSA-2011:1065","RHSA-2011:1189"],"bugzilla":"720861","bugzilla_description":"CVE-2011-2689 kernel: gfs2: make sure fallocate bytes is a multiple of blksize","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-131.12.1.el6","kernel-0:2.6.18-274.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2689.json"},{"CVE":"CVE-2012-3552","severity":"moderate","public_date":"2011-04-21T00:00:00Z","advisories":["RHSA-2012:1540","RHSA-2012:1304"],"bugzilla":"853465","bugzilla_description":"CVE-2012-3552 kernel: net: slab corruption due to improper synchronization around inet->opt","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-279.9.1.el6","kernel-0:2.6.18-308.24.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3552.json"},{"CVE":"CVE-2011-1598","severity":"moderate","public_date":"2011-04-20T00:00:00Z","advisories":["RHSA-2011:1253","RHSA-2011:0836"],"bugzilla":"698057","bugzilla_description":"CVE-2011-1598 CVE-2011-1748 kernel: missing check in can/bcm and can/raw socket releases","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.32-131.2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1598.json"},{"CVE":"CVE-2011-1748","severity":"moderate","public_date":"2011-04-20T00:00:00Z","advisories":["RHSA-2011:1253","RHSA-2011:0836"],"bugzilla":"698057","bugzilla_description":"CVE-2011-1598 CVE-2011-1748 kernel: missing check in can/bcm and can/raw socket releases","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.32-131.2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1748.json"},{"CVE":"CVE-2011-1745","severity":"important","public_date":"2011-04-14T00:00:00Z","advisories":["RHSA-2011:0927","RHSA-2011:1253","RHSA-2011:1350"],"bugzilla":"698996","bugzilla_description":"CVE-2011-1745 CVE-2011-2022 kernel: agp: insufficient pg_start parameter checking in AGPIOC_BIND and AGPIOC_UNBIND ioctls","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-238.19.1.el5","kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.32-131.17.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1745.json"},{"CVE":"CVE-2011-2022","severity":"important","public_date":"2011-04-14T00:00:00Z","advisories":["RHSA-2011:0927","RHSA-2011:1253","RHSA-2011:1350"],"bugzilla":"698996","bugzilla_description":"CVE-2011-1745 CVE-2011-2022 kernel: agp: insufficient pg_start parameter checking in AGPIOC_BIND and AGPIOC_UNBIND ioctls","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-238.19.1.el5","kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.32-131.17.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2022.json"},{"CVE":"CVE-2011-1746","severity":"important","public_date":"2011-04-14T00:00:00Z","advisories":["RHSA-2011:0927","RHSA-2011:1253","RHSA-2011:1350"],"bugzilla":"698998","bugzilla_description":"CVE-2011-1746 kernel: agp: insufficient page_count parameter checking in agp_allocate_memory()","cvss_score":6.6,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-238.19.1.el5","kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.32-131.17.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1746.json"},{"CVE":"CVE-2011-1747","severity":null,"public_date":"2011-04-14T00:00:00Z","advisories":[],"bugzilla":"698999","bugzilla_description":"CVE-2011-1747 kernel: agp: possible kernel mem exhaustion via AGPIOC_RESERVE and AGPIOC_ALLOCATE ioctls","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1747.json"},{"CVE":"CVE-2011-1577","severity":"low","public_date":"2011-04-13T00:00:00Z","advisories":["RHSA-2011:1465","RHSA-2011:1253","RHSA-2011:0833"],"bugzilla":"695976","bugzilla_description":"CVE-2011-1577 kernel: corrupted GUID partition tables can cause kernel oops","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-238.12.1.el5","kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.32-131.21.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1577.json"},{"CVE":"CVE-2011-1593","severity":"moderate","public_date":"2011-04-13T00:00:00Z","advisories":["RHSA-2011:0927","RHSA-2011:1253","RHSA-2011:1189"],"bugzilla":"697822","bugzilla_description":"CVE-2011-1593 kernel: proc: signedness issue in next_pidmap()","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-131.12.1.el6","kernel-0:2.6.18-238.19.1.el5","kernel-rt-0:2.6.33.9-rt31.75.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1593.json"},{"CVE":"CVE-2011-1479","severity":"moderate","public_date":"2011-04-05T00:00:00Z","advisories":["RHSA-2011:1253"],"bugzilla":"691793","bugzilla_description":"CVE-2011-1479 kernel: DoS (crash) due slab corruption in inotify_init1 (incomplete fix for CVE-2010-4250)","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-rt-0:2.6.33.9-rt31.75.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1479.json"},{"CVE":"CVE-2011-1494","severity":"important","public_date":"2011-04-05T00:00:00Z","advisories":["RHSA-2011:0542","RHSA-2011:0883","RHSA-2011:1253","RHSA-2011:0833"],"bugzilla":"694021","bugzilla_description":"CVE-2011-1494 CVE-2011-1495 kernel: drivers/scsi/mpt2sas: prevent heap overflows","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["kernel-0:2.6.32-71.31.1.el6","kernel-0:2.6.18-238.12.1.el5","kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.32-131.0.15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1494.json"},{"CVE":"CVE-2011-1495","severity":"important","public_date":"2011-04-05T00:00:00Z","advisories":["RHSA-2011:0542","RHSA-2011:0883","RHSA-2011:1253","RHSA-2011:0833"],"bugzilla":"694021","bugzilla_description":"CVE-2011-1494 CVE-2011-1495 kernel: drivers/scsi/mpt2sas: prevent heap overflows","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["kernel-0:2.6.32-71.31.1.el6","kernel-0:2.6.18-238.12.1.el5","kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.32-131.0.15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1495.json"},{"CVE":"CVE-2011-1771","severity":"moderate","public_date":"2011-04-05T00:00:00Z","advisories":["RHSA-2011:0836"],"bugzilla":"703016","bugzilla_description":"CVE-2011-1771 kernel: cifs oops when creating file with O_DIRECT set","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-131.2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1771.json"},{"CVE":"CVE-2011-2479","severity":"moderate","public_date":"2011-03-24T00:00:00Z","advisories":["RHSA-2011:0928"],"bugzilla":"714761","bugzilla_description":"CVE-2011-2479 kernel: thp: madvise on top of /dev/zero private mapping can lead to panic","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-131.6.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2479.json"},{"CVE":"CVE-2011-1182","severity":"low","public_date":"2011-03-23T00:00:00Z","advisories":["RHSA-2011:0883","RHSA-2011:0927","RHSA-2011:1189"],"bugzilla":"690028","bugzilla_description":"CVE-2011-1182 kernel signal spoofing issue","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["kernel-0:2.6.32-131.12.1.el6","kernel-0:2.6.32-71.31.1.el6","kernel-0:2.6.18-238.19.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1182.json"},{"CVE":"CVE-2011-4080","severity":"low","public_date":"2011-03-23T00:00:00Z","advisories":["RHSA-2012:0481"],"bugzilla":"749243","bugzilla_description":"CVE-2011-4080 kernel: sysctl: restrict write access to dmesg_restrict","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-0:2.6.32-220.13.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4080.json"},{"CVE":"CVE-2011-1493","severity":"important","public_date":"2011-03-20T00:00:00Z","advisories":[],"bugzilla":"770777","bugzilla_description":"CVE-2011-1493 CVE-2011-4913 CVE-2011-4914 kernel: multiple issues in rose protocol","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1493.json"},{"CVE":"CVE-2011-4913","severity":"important","public_date":"2011-03-20T00:00:00Z","advisories":[],"bugzilla":"770777","bugzilla_description":"CVE-2011-1493 CVE-2011-4913 CVE-2011-4914 kernel: multiple issues in rose protocol","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4913.json"},{"CVE":"CVE-2011-4914","severity":"important","public_date":"2011-03-20T00:00:00Z","advisories":[],"bugzilla":"770777","bugzilla_description":"CVE-2011-1493 CVE-2011-4913 CVE-2011-4914 kernel: multiple issues in rose protocol","cvss_score":8.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-228->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4914.json"},{"CVE":"CVE-2011-2521","severity":"moderate","public_date":"2011-03-19T00:00:00Z","advisories":["RHSA-2011:1350"],"bugzilla":"719228","bugzilla_description":"CVE-2011-2521 kernel: perf, x86: fix Intel fixed counters base initialization","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-131.17.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2521.json"},{"CVE":"CVE-2011-2693","severity":null,"public_date":"2011-03-19T00:00:00Z","advisories":[],"bugzilla":"721283","bugzilla_description":"CVE-2011-2693 kernel: panic with NMI enabled while using perf","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2693.json"},{"CVE":"CVE-2011-4611","severity":"moderate","public_date":"2011-03-16T00:00:00Z","advisories":["RHSA-2012:0350"],"bugzilla":"767914","bugzilla_description":"CVE-2011-4611 kernel: perf, powerpc: Handle events that raise an exception without overflowing","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-220.7.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4611.json"},{"CVE":"CVE-2011-1581","severity":"important","public_date":"2011-03-14T00:00:00Z","advisories":["RHSA-2011:0542"],"bugzilla":"696029","bugzilla_description":"CVE-2011-1581 kernel: bonding: Incorrect TX queue offset","cvss_score":4.6,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-131.0.15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1581.json"},{"CVE":"CVE-2011-2534","severity":"low","public_date":"2011-03-10T00:00:00Z","advisories":[],"bugzilla":"689337","bugzilla_description":"CVE-2011-2534 ipv4: netfilter: ipt_CLUSTERIP: fix buffer overflow","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2534.json"},{"CVE":"CVE-2011-0714","severity":"important","public_date":"2011-03-08T00:00:00Z","advisories":["RHSA-2011:0329"],"bugzilla":"678144","bugzilla_description":"CVE-2011-0714 kernel: deficiency in handling of invalid data packets in lockd","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-71.18.2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0714.json"},{"CVE":"CVE-2011-1160","severity":"low","public_date":"2011-03-08T00:00:00Z","advisories":["RHSA-2011:1253","RHSA-2011:1386","RHSA-2011:1350"],"bugzilla":"684671","bugzilla_description":"CVE-2011-1160 kernel: tpm infoleaks","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.32-131.17.1.el6","kernel-0:2.6.18-274.7.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1160.json"},{"CVE":"CVE-2011-1090","severity":"moderate","public_date":"2011-03-05T00:00:00Z","advisories":["RHSA-2011:0542","RHSA-2011:0883","RHSA-2011:1253","RHSA-2011:0429"],"bugzilla":"682641","bugzilla_description":"CVE-2011-1090 kernel: nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-71.31.1.el6","kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.18-238.9.1.el5","kernel-0:2.6.32-131.0.15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1090.json"},{"CVE":"CVE-2011-1023","severity":"moderate","public_date":"2011-03-02T00:00:00Z","advisories":["RHSA-2011:0542"],"bugzilla":"680345","bugzilla_description":"CVE-2011-1023 kernel: BUG_ON() in rds_send_xmit()","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-131.0.15.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1023.json"},{"CVE":"CVE-2011-2189","severity":"moderate","public_date":"2011-02-16T00:00:00Z","advisories":[],"bugzilla":"711245","bugzilla_description":"CVE-2011-2189 kernel: net_ns: oom killer fires because of slow net_ns cleanup","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2189.json"},{"CVE":"CVE-2011-1016","severity":"important","public_date":"2011-02-14T00:00:00Z","advisories":["RHSA-2011:0498"],"bugzilla":"680000","bugzilla_description":"CVE-2011-1016 kernel: drm/radeon/kms: check AA resolve registers on r300","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-71.29.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1016.json"},{"CVE":"CVE-2011-1020","severity":"moderate","public_date":"2011-02-07T00:00:00Z","advisories":["RHSA-2012:0007","RHSA-2011:1253","RHSA-2011:1530","RHSA-2012:0116"],"bugzilla":"680358","bugzilla_description":"CVE-2011-1020 kernel: no access restrictions of /proc/pid/* after setuid program exec","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["kernel-0:2.6.18-274.17.1.el5","kernel-0:2.6.32-131.25.1.el6","kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.32-220.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1020.json"},{"CVE":"CVE-2011-1478","severity":"moderate","public_date":"2011-02-02T00:00:00Z","advisories":["RHSA-2011:0421","RHSA-2011:1253","RHSA-2011:0439","RHSA-2011:0429"],"bugzilla":"691270","bugzilla_description":"CVE-2011-1478 kernel: gro: reset dev and skb_iff on skb reuse","cvss_score":5.7,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-71.24.1.el6","kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.18-238.9.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1478.json"},{"CVE":"CVE-2010-4258","severity":"moderate","public_date":"2010-12-03T00:00:00Z","advisories":[],"bugzilla":"659567","bugzilla_description":"CVE-2010-4258 kernel: failure to revert address limit override in OOPS error path","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4258.json"},{"CVE":"CVE-2010-4650","severity":null,"public_date":"2010-11-30T00:00:00Z","advisories":[],"bugzilla":"667892","bugzilla_description":"CVE-2010-4650 kernel: fuse: verify ioctl retries","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4650.json"},{"CVE":"CVE-2011-4621","severity":"moderate","public_date":"2010-11-21T00:00:00Z","advisories":["RHSA-2011:1849"],"bugzilla":"769711","bugzilla_description":"CVE-2011-4621 kernel: tight loop and no preemption can cause system stall","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-220.2.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4621.json"},{"CVE":"CVE-2018-10901","severity":"important","public_date":"2010-08-02T00:00:00Z","advisories":["RHSA-2018:2393","RHSA-2018:2394","RHSA-2018:2391","RHSA-2018:2392","RHSA-2018:2390"],"bugzilla":"1601849","bugzilla_description":"CVE-2018-10901 kernel: kvm: vmx: host GDT limit corruption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["kernel-0:2.6.32-754.3.5.el6","kernel-0:2.6.32-358.91.4.el6","kernel-0:2.6.32-504.72.4.el6","kernel-0:2.6.32-431.91.3.el6","kernel-0:2.6.32-573.60.4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10901.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2011-1585","severity":"low","public_date":"2010-08-02T00:00:00Z","advisories":["RHSA-2011:1253","RHSA-2011:1386"],"bugzilla":"697394","bugzilla_description":"CVE-2011-1585 kernel: cifs session reuse","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.18-274.7.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1585.json"},{"CVE":"CVE-2010-5329","severity":"low","public_date":"2010-07-12T00:00:00Z","advisories":[],"bugzilla":"1455067","bugzilla_description":"CVE-2010-5329 kernel: video_usercopy function uses count value of a v4l2_ext_controls data structure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5329.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2010-5328","severity":"low","public_date":"2010-05-27T00:00:00Z","advisories":[],"bugzilla":"1358840","bugzilla_description":"CVE-2010-5328 kernel: Processes having the same group as `init` can crash kernel","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5328.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2011-2525","severity":"moderate","public_date":"2010-05-21T00:00:00Z","advisories":["RHSA-2011:1065","RHSA-2011:1163"],"bugzilla":"720552","bugzilla_description":"CVE-2011-2525 kernel: kernel: net_sched: fix qdisc_notify()","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-274.el5","kernel-0:2.6.18-238.21.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2525.json"},{"CVE":"CVE-2010-4526","severity":"important","public_date":"2010-05-06T00:00:00Z","advisories":["RHSA-2011:0421","RHSA-2011:0163","RHSA-2011:1253"],"bugzilla":"664914","bugzilla_description":"CVE-2010-4526 kernel: sctp: a race between ICMP protocol unreachable and connect()","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":"CWE-662->CWE-362->CWE-672->CWE-119","affected_packages":["kernel-0:2.6.32-71.24.1.el6","kernel-0:2.6.18-238.1.1.el5","kernel-rt-0:2.6.33.9-rt31.75.el6rt"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4526.json"},{"CVE":"CVE-2013-2017","severity":"moderate","public_date":"2010-05-06T00:00:00Z","advisories":["RHSA-2013:0911"],"bugzilla":"957705","bugzilla_description":"CVE-2013-2017 kernel: veth: double-free flaw in case of congestion","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-358.11.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2017.json"},{"CVE":"CVE-2013-2128","severity":"moderate","public_date":"2010-03-30T00:00:00Z","advisories":["RHSA-2013:1051","RHSA-2013:1080"],"bugzilla":"968484","bugzilla_description":"CVE-2013-2128 Kernel: net: oops from tcp_collapse() when using splice(2)","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-358.14.1.el6","kernel-0:2.6.32-358.114.1.openstack.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2128.json"},{"CVE":"CVE-2010-3448","severity":"moderate","public_date":"2010-02-26T00:00:00Z","advisories":["RHSA-2010:0839"],"bugzilla":"652122","bugzilla_description":"CVE-2010-3448 kernel: thinkpad-acpi: lock down video output state access","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-194.26.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3448.json"},{"CVE":"CVE-2011-1767","severity":"moderate","public_date":"2010-02-16T00:00:00Z","advisories":["RHSA-2011:0928","RHSA-2011:1253"],"bugzilla":"702303","bugzilla_description":"CVE-2011-1767 CVE-2011-1768 kernel: netns vs proto registration ordering","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.32-131.6.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1767.json"},{"CVE":"CVE-2011-1768","severity":"moderate","public_date":"2010-02-16T00:00:00Z","advisories":["RHSA-2011:0928","RHSA-2011:1253"],"bugzilla":"702303","bugzilla_description":"CVE-2011-1767 CVE-2011-1768 kernel: netns vs proto registration ordering","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-rt-0:2.6.33.9-rt31.75.el6rt","kernel-0:2.6.32-131.6.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1768.json"},{"CVE":"CVE-2012-0879","severity":"moderate","public_date":"2009-12-04T00:00:00Z","advisories":["RHSA-2012:0481"],"bugzilla":"796829","bugzilla_description":"CVE-2012-0879 kernel: block: CLONE_IO io_context refcounting issues","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.32-220.13.1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0879.json"},{"CVE":"CVE-2012-4444","severity":"low","public_date":"2009-12-01T00:00:00Z","advisories":["RHSA-2012:1580","RHSA-2013:0168"],"bugzilla":"874835","bugzilla_description":"CVE-2012-4444 kernel: net: acceptation of overlapping ipv6 fragments","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["kernel-0:2.6.32-279.19.1.el6","kernel-0:2.6.18-348.1.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4444.json"},{"CVE":"CVE-2009-4067","severity":"low","public_date":"2009-10-29T00:00:00Z","advisories":["RHSA-2011:1386"],"bugzilla":"722393","bugzilla_description":"CVE-2009-4067 kernel: usb: buffer overflow in auerswald_probe()","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-274.7.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4067.json"},{"CVE":"CVE-2011-4324","severity":"moderate","public_date":"2008-12-23T00:00:00Z","advisories":["RHSA-2012:0007"],"bugzilla":"755440","bugzilla_description":"CVE-2011-4324 kernel: nfsv4: mknod(2) DoS","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-274.17.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4324.json"},{"CVE":"CVE-2012-0028","severity":"important","public_date":"2008-11-15T00:00:00Z","advisories":["RHSA-2012:0107","RHSA-2012:0358"],"bugzilla":"771764","bugzilla_description":"CVE-2012-0028 kernel: futex: clear robust_list on execve","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-274.18.1.el5","kernel-0:2.6.18-238.35.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0028.json"},{"CVE":"CVE-2006-3635","severity":"moderate","public_date":"2008-05-27T00:00:00Z","advisories":[],"bugzilla":"1483905","bugzilla_description":"CVE-2006-3635 kernel: Mishandling of invalid Register Stack Engine (RSE) state causes stack consumption and system crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3635.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2011-3209","severity":"moderate","public_date":"2008-05-01T00:00:00Z","advisories":["RHSA-2011:1386","RHSA-2011:1418","RHSA-2011:1419"],"bugzilla":"732878","bugzilla_description":"CVE-2011-3209 kernel: panic occurs when clock_gettime() is called","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["kernel-0:2.6.18-128.36.1.el5","kernel-0:2.6.18-274.7.1.el5","kernel-0:2.6.18-238.28.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3209.json"},{"CVE":"CVE-2012-3510","severity":"moderate","public_date":"2006-10-30T00:00:00Z","advisories":["RHSA-2012:1323"],"bugzilla":"849722","bugzilla_description":"CVE-2012-3510 kernel: taskstats: use-after-free in xacct_add_tsk()","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:C","CWE":"CWE-416","affected_packages":["kernel-0:2.6.18-308.16.1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3510.json"},{"CVE":"CVE-2003-1604","severity":"moderate","public_date":"2003-10-20T00:00:00Z","advisories":[],"bugzilla":"1303072","bugzilla_description":"CVE-2003-1604 kernel: Missing NULL pointer check in nf_nat_redirect_ipv4","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-1604.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/timedatex_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/timedatex_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/timedatex_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinycdb-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinycdb-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinycdb-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinycdb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinycdb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinycdb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinyxml2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinyxml2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinyxml2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinyxml2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinyxml2_security_api_results.json
new file mode 100644
index 0000000..86b5940
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tinyxml2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-11210","severity":"low","public_date":"2018-05-15T00:00:00Z","advisories":[],"bugzilla":"1579558","bugzilla_description":"CVE-2018-11210 tinyxml2: heap-based buffer over-read in the XMLDocument::Parse function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11210.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tix-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tix-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tix-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tix_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tix_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tix_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tk-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tk-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tk-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tk_security_api_results.json
new file mode 100644
index 0000000..51f3d49
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tk_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14355","severity":"important","public_date":"2020-10-06T12:00:00Z","advisories":["RHSA-2020:4187","RHSA-2020:4186","RHSA-2020:4185","RHSA-2020:4184"],"bugzilla":"1868435","bugzilla_description":"CVE-2020-14355 spice: multiple buffer overflow vulnerabilities in QUIC decoding code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["spice-gtk-0:0.35-5.el7_9.1","spice-gtk-0:0.37-1.el8_2.2","spice-0:0.14.0-9.el7_9.1","spice-0:0.14.2-1.el8_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14355.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2020-9862","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879532","bugzilla_description":"CVE-2020-9862 webkitgtk: Command injection in web inspector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9862.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-9893","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879535","bugzilla_description":"CVE-2020-9893 webkitgtk: Use-after-free may lead to application termination or arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9893.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9894","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879536","bugzilla_description":"CVE-2020-9894 webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9894.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-9895","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879538","bugzilla_description":"CVE-2020-9895 webkitgtk: Use-after-free may lead to application termination or arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9895.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-9915","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879540","bugzilla_description":"CVE-2020-9915 webkitgtk: Access issue in content security policy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9915.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2020-9925","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879541","bugzilla_description":"CVE-2020-9925 webkitgtk: A logic issue may lead to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841->CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9925.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-9802","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879545","bugzilla_description":"CVE-2020-9802 webkitgtk: Logic issue may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9802.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9803","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879557","bugzilla_description":"CVE-2020-9803 webkitgtk: Memory corruption may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9805","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879559","bugzilla_description":"CVE-2020-9805 webkitgtk: Logic issue may lead to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841->CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9805.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-9806","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879563","bugzilla_description":"CVE-2020-9806 webkitgtk: Memory corruption may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9806.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9807","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879564","bugzilla_description":"CVE-2020-9807 webkitgtk: Memory corruption may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9807.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9843","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879566","bugzilla_description":"CVE-2020-9843 webkitgtk: Input validation issue may lead to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9843.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-9850","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879568","bugzilla_description":"CVE-2020-9850 webkitgtk: Logic issue may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9850.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-13753","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879570","bugzilla_description":"CVE-2020-13753 webkitgtk: Improper access management to CLONE_NEWUSER and the TIOCSTI ioctl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284->CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13753.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"10.0"},{"CVE":"CVE-2020-3885","severity":"low","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876462","bugzilla_description":"CVE-2020-3885 webkitgtk: Incorrect processing of file URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3885.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-3894","severity":"low","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876463","bugzilla_description":"CVE-2020-3894 webkitgtk: Race condition allows reading of restricted memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3894.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-3895","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876465","bugzilla_description":"CVE-2020-3895 webkitgtk: Memory corruption triggered by a malicious web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3895.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3897","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876468","bugzilla_description":"CVE-2020-3897 webkitgtk: Type confusion leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3897.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3899","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876470","bugzilla_description":"CVE-2020-3899 webkitgtk: Memory consumption issue leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3899.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3900","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876472","bugzilla_description":"CVE-2020-3900 webkitgtk: Memory corruption  triggered by a malicious web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3900.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3901","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876473","bugzilla_description":"CVE-2020-3901 webkitgtk: Type confusion leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3901.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3902","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876476","bugzilla_description":"CVE-2020-3902 webkitgtk: Input validation issue leading to cross-site script attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3902.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11793","severity":"moderate","public_date":"2020-04-16T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1829369","bugzilla_description":"CVE-2020-11793 webkitgtk: use-after-free via crafted web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11793.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10018","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1811721","bugzilla_description":"CVE-2020-10018 webkitgtk: Use-after-free issue in accessibility/AXObjectCache.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10018.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-3862","severity":"low","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876516","bugzilla_description":"CVE-2020-3862 webkitgtk: Denial of service via incorrect memory handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3862.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-3864","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876518","bugzilla_description":"CVE-2020-3864 webkitgtk: Non-unique security origin for DOM object contexts","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3864.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-3865","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876521","bugzilla_description":"CVE-2020-3865 webkitgtk: Incorrect security check for a top-level DOM object context","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3865.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3867","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876522","bugzilla_description":"CVE-2020-3867 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3867.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-3868","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876523","bugzilla_description":"CVE-2020-3868 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3868.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8846","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1816678","bugzilla_description":"CVE-2019-8846 webkitgtk: Use after free issue may lead to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8846.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-8835","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1816684","bugzilla_description":"CVE-2019-8835 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8835.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-8844","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1816686","bugzilla_description":"CVE-2019-8844 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8844.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-4761","severity":"moderate","public_date":"2020-01-22T00:00:00Z","advisories":[],"bugzilla":"1800137","bugzilla_description":"CVE-2016-4761 webkitgtk: use-after-free leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4761.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8710","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876536","bugzilla_description":"CVE-2019-8710 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8710.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8743","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876537","bugzilla_description":"CVE-2019-8743 webkitgtk: Multiple memory corruption  issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8743.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8764","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876540","bugzilla_description":"CVE-2019-8764 webkitgtk: Incorrect state  management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8764.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8765","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876542","bugzilla_description":"CVE-2019-8765 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8765.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8766","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876543","bugzilla_description":"CVE-2019-8766 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8766.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8782","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876545","bugzilla_description":"CVE-2019-8782 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8783","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876548","bugzilla_description":"CVE-2019-8783 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8783.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8808","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876549","bugzilla_description":"CVE-2019-8808 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8808.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8811","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876550","bugzilla_description":"CVE-2019-8811 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8811.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8812","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876552","bugzilla_description":"CVE-2019-8812 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8812.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8813","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876553","bugzilla_description":"CVE-2019-8813 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8813.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8814","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876554","bugzilla_description":"CVE-2019-8814 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8814.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8815","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876555","bugzilla_description":"CVE-2019-8815 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8815.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8816","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876556","bugzilla_description":"CVE-2019-8816 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8816.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8819","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876590","bugzilla_description":"CVE-2019-8819 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8819.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8820","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876591","bugzilla_description":"CVE-2019-8820 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8820.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8821","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876592","bugzilla_description":"CVE-2019-8821 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8821.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8822","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876593","bugzilla_description":"CVE-2019-8822 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8822.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8823","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876594","bugzilla_description":"CVE-2019-8823 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8823.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8625","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876607","bugzilla_description":"CVE-2019-8625 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8625.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8674","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876608","bugzilla_description":"CVE-2019-8674 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8674.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8707","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876609","bugzilla_description":"CVE-2019-8707 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8707.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8719","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876610","bugzilla_description":"CVE-2019-8719 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8719.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8720","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876611","bugzilla_description":"CVE-2019-8720 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8726","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876612","bugzilla_description":"CVE-2019-8726 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8726.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8733","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876613","bugzilla_description":"CVE-2019-8733 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8733.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8735","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876614","bugzilla_description":"CVE-2019-8735 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8735.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8763","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876615","bugzilla_description":"CVE-2019-8763 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8763.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8768","severity":"low","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876616","bugzilla_description":"CVE-2019-8768 webkitgtk: Browsing history could not be deleted","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8768.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8769","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876617","bugzilla_description":"CVE-2019-8769 webkitgtk: Websites could reveal browsing history","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8769.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-8771","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876619","bugzilla_description":"CVE-2019-8771 webkitgtk: Violation of iframe sandboxing policy","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8771.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-8644","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876626","bugzilla_description":"CVE-2019-8644 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8644.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8649","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876628","bugzilla_description":"CVE-2019-8649 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8649.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8658","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876629","bugzilla_description":"CVE-2019-8658 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8658.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8666","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876630","bugzilla_description":"CVE-2019-8666 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8666.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8669","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876631","bugzilla_description":"CVE-2019-8669 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8669.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8671","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876632","bugzilla_description":"CVE-2019-8671 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8671.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8672","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876634","bugzilla_description":"CVE-2019-8672 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8673","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876643","bugzilla_description":"CVE-2019-8673 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8676","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876644","bugzilla_description":"CVE-2019-8676 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8676.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8677","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876645","bugzilla_description":"CVE-2019-8677 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8677.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8678","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876646","bugzilla_description":"CVE-2019-8678 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8678.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8679","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876647","bugzilla_description":"CVE-2019-8679 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8679.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8680","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876648","bugzilla_description":"CVE-2019-8680 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8680.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8681","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876650","bugzilla_description":"CVE-2019-8681 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8681.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8683","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876651","bugzilla_description":"CVE-2019-8683 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8683.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8684","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876652","bugzilla_description":"CVE-2019-8684 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8684.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8686","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876653","bugzilla_description":"CVE-2019-8686 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8686.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8687","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876655","bugzilla_description":"CVE-2019-8687 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8687.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8688","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876656","bugzilla_description":"CVE-2019-8688 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8688.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8689","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876657","bugzilla_description":"CVE-2019-8689 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8689.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8690","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876664","bugzilla_description":"CVE-2019-8690 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8690.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-6237","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876880","bugzilla_description":"CVE-2019-6237 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6237.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8571","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876881","bugzilla_description":"CVE-2019-8571 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8583","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876882","bugzilla_description":"CVE-2019-8583 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8584","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876883","bugzilla_description":"CVE-2019-8584 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8584.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8586","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876884","bugzilla_description":"CVE-2019-8586 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8587","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876887","bugzilla_description":"CVE-2019-8587 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8587.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8594","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876891","bugzilla_description":"CVE-2019-8594 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8594.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8595","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876892","bugzilla_description":"CVE-2019-8595 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8595.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8596","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876893","bugzilla_description":"CVE-2019-8596 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8597","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876894","bugzilla_description":"CVE-2019-8597 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8601","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876895","bugzilla_description":"CVE-2019-8601 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8607","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876897","bugzilla_description":"CVE-2019-8607 webkitgtk: Out-of-bounds read leading to memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8607.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-8608","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876898","bugzilla_description":"CVE-2019-8608 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8609","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876899","bugzilla_description":"CVE-2019-8609 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8609.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8610","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876900","bugzilla_description":"CVE-2019-8610 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8610.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8615","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877045","bugzilla_description":"CVE-2019-8615 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8615.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8611","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877046","bugzilla_description":"CVE-2019-8611 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8611.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8619","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877047","bugzilla_description":"CVE-2019-8619 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8622","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877048","bugzilla_description":"CVE-2019-8622 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8622.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8623","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877049","bugzilla_description":"CVE-2019-8623 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8623.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11070","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1709289","bugzilla_description":"CVE-2019-11070 webkitgtk: HTTP proxy setting deanonymization information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11070.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-7285","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1718725","bugzilla_description":"CVE-2019-7285 webkitgtk: crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-7292","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1719131","bugzilla_description":"CVE-2019-7292 webkitgtk: arbitrary code execution via malicious web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7292.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8503","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1719147","bugzilla_description":"CVE-2019-8503 webkitgtk: logic issue leads to code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8503.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8506","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719199","bugzilla_description":"CVE-2019-8506 webkitgtk: malicous web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8515","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1719204","bugzilla_description":"CVE-2019-8515 webkitgtk: malicious crafted web content leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-8518","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719206","bugzilla_description":"CVE-2019-8518 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8523","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719208","bugzilla_description":"CVE-2019-8523 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8524","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719209","bugzilla_description":"CVE-2019-8524 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8524.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8535","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719210","bugzilla_description":"CVE-2019-8535 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8535.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8536","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719213","bugzilla_description":"CVE-2019-8536 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8536.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8544","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719224","bugzilla_description":"CVE-2019-8544 webkitgtk: malicious crafted web content leads to arbitrary we content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8558","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719231","bugzilla_description":"CVE-2019-8558 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8558.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8559","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719235","bugzilla_description":"CVE-2019-8559 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8559.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8563","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719237","bugzilla_description":"CVE-2019-8563 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8551","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1719238","bugzilla_description":"CVE-2019-8551 webkitgtk: malicious web content leads to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8551.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18928","severity":"low","public_date":"2018-10-30T00:00:00Z","advisories":[],"bugzilla":"1646702","bugzilla_description":"CVE-2018-18928 icu: integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18928.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-6251","severity":"moderate","public_date":"2018-09-11T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1667409","bugzilla_description":"CVE-2019-6251 webkitgtk: processing maliciously crafted web content lead to URI spoofing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-10893","severity":"moderate","public_date":"2018-06-25T00:00:00Z","advisories":["RHSA-2020:0471","RHSA-2019:2229"],"bugzilla":"1598234","bugzilla_description":"CVE-2018-10893 spice-client: Insufficient encoding checks for LZ can cause different integer/buffer overflows","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-190)","affected_packages":["spice-gtk-0:0.26-8.el6_10.2","spice-gtk-0:0.35-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10893.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"7.6"},{"CVE":"CVE-2018-11713","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588739","bugzilla_description":"CVE-2018-11713 webkitgtk: WebSockets don't use system proxy settings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11713.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-11712","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588742","bugzilla_description":"CVE-2018-11712 webkitgtk: Improper TLS certificate verification for WebSocket connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11712.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2018-4204","severity":"moderate","public_date":"2018-05-07T00:00:00Z","advisories":[],"bugzilla":"1577374","bugzilla_description":"CVE-2018-4204 webkitgtk: memory corruption processing maliciously crafted web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-4200","severity":"moderate","public_date":"2018-05-07T00:00:00Z","advisories":[],"bugzilla":"1577385","bugzilla_description":"CVE-2018-4200 webkitgtk: memory corruption processing maliciously crafted web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4200.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-4121","severity":"moderate","public_date":"2018-05-07T00:00:00Z","advisories":[],"bugzilla":"1577387","bugzilla_description":"CVE-2018-4121 webkitgtk: memory corruption processing maliciously crafted web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4121.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2017-12194","severity":"moderate","public_date":"2018-03-14T00:00:00Z","advisories":[],"bugzilla":"1501200","bugzilla_description":"CVE-2017-12194 spice-gtk:  Integer overflows causing buffer overflows in spice-client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12194.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.5"},{"CVE":"CVE-2017-13856","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1527747","bugzilla_description":"CVE-2017-13856 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13856.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-13866","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1527756","bugzilla_description":"CVE-2017-13866 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13866.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-13870","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1527757","bugzilla_description":"CVE-2017-13870 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13870.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-7156","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1527759","bugzilla_description":"CVE-2017-7156 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7156.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-7157","severity":"moderate","public_date":"2017-12-13T00:00:00Z","advisories":[],"bugzilla":"1527760","bugzilla_description":"CVE-2017-7157 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7157.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2017-5884","severity":"low","public_date":"2017-02-01T00:00:00Z","advisories":["RHSA-2017:2258"],"bugzilla":"1418944","bugzilla_description":"CVE-2017-5884 gtk-vnc: Improper check of framebuffer boundaries when processing a tile","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["gtk-vnc-0:0.7.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5884.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-5885","severity":"low","public_date":"2017-02-01T00:00:00Z","advisories":["RHSA-2017:2258"],"bugzilla":"1418952","bugzilla_description":"CVE-2017-5885 gtk-vnc: Integer overflow when processing SetColorMapEntries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["gtk-vnc-0:0.7.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5885.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-3066","severity":"low","public_date":"2016-03-22T00:00:00Z","advisories":[],"bugzilla":"1320263","bugzilla_description":"CVE-2016-3066 spice-gtk: hijacks clipboard and sends contents to remote servers","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3066.json"},{"CVE":"CVE-2015-2330","severity":"moderate","public_date":"2015-03-17T00:00:00Z","advisories":[],"bugzilla":"1204653","bugzilla_description":"CVE-2015-2330 webkitgtk: TLS certificate late verification","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2330.json"},{"CVE":"CVE-2015-1209","severity":"important","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:0163"],"bugzilla":"1190123","bugzilla_description":"CVE-2015-1209 chromium-browser: use-after-free in DOM","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["chromium-browser-0:40.0.2214.111-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1209.json"},{"CVE":"CVE-2015-1212","severity":"important","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:0163"],"bugzilla":"1190158","bugzilla_description":"CVE-2015-1212 chromium-browser: various security fixes in Chrome 40.0.2214.111","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:40.0.2214.111-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1212.json"},{"CVE":"CVE-2013-2871","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186231","bugzilla_description":"CVE-2013-2871 webkitgtk: use-after-free vulnerability in the handling of input (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2871.json"},{"CVE":"CVE-2013-2875","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186232","bugzilla_description":"CVE-2013-2875 webkitgtk: out-of-bounds read in the SVG implementation (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2875.json"},{"CVE":"CVE-2013-2927","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186233","bugzilla_description":"CVE-2013-2927 webkitgtk: use-after-free in the HTMLFormElement::prepareForSubmission() (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2927.json"},{"CVE":"CVE-2014-1292","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186234","bugzilla_description":"CVE-2014-1292 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1292.json"},{"CVE":"CVE-2014-1297","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186236","bugzilla_description":"CVE-2014-1297 webkitgtk: improper WebProcess IPC messages validation (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1297.json"},{"CVE":"CVE-2014-1298","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186237","bugzilla_description":"CVE-2014-1298 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1298.json"},{"CVE":"CVE-2014-1299","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186238","bugzilla_description":"CVE-2014-1299 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1299.json"},{"CVE":"CVE-2014-1300","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186239","bugzilla_description":"CVE-2014-1300 webkitgtk: arbitrary code execution with root privileges (WSA-2015-0001)","cvss_score":7.3,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1300.json"},{"CVE":"CVE-2014-1303","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186241","bugzilla_description":"CVE-2014-1303 webkitgtk: heap-based buffer overflow (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1303.json"},{"CVE":"CVE-2014-1304","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186242","bugzilla_description":"CVE-2014-1304 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1304.json"},{"CVE":"CVE-2014-1305","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186243","bugzilla_description":"CVE-2014-1305 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1305.json"},{"CVE":"CVE-2014-1307","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186245","bugzilla_description":"CVE-2014-1307 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1307.json"},{"CVE":"CVE-2014-1308","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186246","bugzilla_description":"CVE-2014-1308 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1308.json"},{"CVE":"CVE-2014-1309","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186247","bugzilla_description":"CVE-2014-1309 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1309.json"},{"CVE":"CVE-2014-1311","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186248","bugzilla_description":"CVE-2014-1311 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1311.json"},{"CVE":"CVE-2014-1313","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186250","bugzilla_description":"CVE-2014-1313 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1313.json"},{"CVE":"CVE-2014-1323","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186251","bugzilla_description":"CVE-2014-1323 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1323.json"},{"CVE":"CVE-2014-1326","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186252","bugzilla_description":"CVE-2014-1326 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1326.json"},{"CVE":"CVE-2014-1329","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186253","bugzilla_description":"CVE-2014-1329 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1329.json"},{"CVE":"CVE-2014-1330","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186254","bugzilla_description":"CVE-2014-1330 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1330.json"},{"CVE":"CVE-2014-1331","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186255","bugzilla_description":"CVE-2014-1331 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1331.json"},{"CVE":"CVE-2014-1333","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186258","bugzilla_description":"CVE-2014-1333 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1333.json"},{"CVE":"CVE-2014-1334","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186259","bugzilla_description":"CVE-2014-1334 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1334.json"},{"CVE":"CVE-2014-1335","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186262","bugzilla_description":"CVE-2014-1335 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1335.json"},{"CVE":"CVE-2014-1336","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186263","bugzilla_description":"CVE-2014-1336 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1336.json"},{"CVE":"CVE-2014-1337","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186264","bugzilla_description":"CVE-2014-1337 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1337.json"},{"CVE":"CVE-2014-1338","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186265","bugzilla_description":"CVE-2014-1338 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1338.json"},{"CVE":"CVE-2014-1339","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186266","bugzilla_description":"CVE-2014-1339 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1339.json"},{"CVE":"CVE-2014-1341","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186267","bugzilla_description":"CVE-2014-1341 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1341.json"},{"CVE":"CVE-2014-1342","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186268","bugzilla_description":"CVE-2014-1342 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1342.json"},{"CVE":"CVE-2014-1343","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186269","bugzilla_description":"CVE-2014-1343 webkitgtk: arbitrary code execution and denial of service via a crafted web site (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1343.json"},{"CVE":"CVE-2014-1346","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186270","bugzilla_description":"CVE-2014-1346 webkitgtk: improper Unicode encoding interpretation (WSA-2015-0001)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1346.json"},{"CVE":"CVE-2014-1713","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186271","bugzilla_description":"CVE-2014-1713 webkitgtk: use-after-free in the AttributeSetter function (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1713.json"},{"CVE":"CVE-2014-1731","severity":"moderate","public_date":"2015-01-26T00:00:00Z","advisories":[],"bugzilla":"1186273","bugzilla_description":"CVE-2014-1731 webkitgtk: improper renderer state check in core/html/HTMLSelectElement.cpp (WSA-2015-0001)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1731.json"},{"CVE":"CVE-2014-7907","severity":"important","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2014:1894"],"bugzilla":"1165656","bugzilla_description":"CVE-2014-7907 chromium-browser: Use-after-free in blink","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["chromium-browser-0:39.0.2171.65-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7907.json"},{"CVE":"CVE-2014-7908","severity":"important","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2014:1894"],"bugzilla":"1165657","bugzilla_description":"CVE-2014-7908 chromium-browser: Integer overflow in media","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["chromium-browser-0:39.0.2171.65-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7908.json"},{"CVE":"CVE-2014-7910","severity":"moderate","public_date":"2014-11-18T00:00:00Z","advisories":["RHSA-2014:1894"],"bugzilla":"1165662","bugzilla_description":"CVE-2014-7910 chromium-browser: Unspecified security issues","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:39.0.2171.65-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7910.json"},{"CVE":"CVE-2014-1344","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181090","bugzilla_description":"CVE-2014-1344 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1344.json"},{"CVE":"CVE-2014-1384","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181095","bugzilla_description":"CVE-2014-1384 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1384.json"},{"CVE":"CVE-2014-1385","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181096","bugzilla_description":"CVE-2014-1385 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1385.json"},{"CVE":"CVE-2014-1386","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181098","bugzilla_description":"CVE-2014-1386 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1386.json"},{"CVE":"CVE-2014-1387","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181099","bugzilla_description":"CVE-2014-1387 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1387.json"},{"CVE":"CVE-2014-1388","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181101","bugzilla_description":"CVE-2014-1388 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1388.json"},{"CVE":"CVE-2014-1389","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181102","bugzilla_description":"CVE-2014-1389 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1389.json"},{"CVE":"CVE-2014-1390","severity":"moderate","public_date":"2014-11-08T00:00:00Z","advisories":[],"bugzilla":"1181103","bugzilla_description":"CVE-2014-1390 webkitgtk: arbitrary code execution and denial of service","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1390.json"},{"CVE":"CVE-2014-3194","severity":"critical","public_date":"2014-10-07T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1151383","bugzilla_description":"CVE-2014-3194 chromium: use-after-free issue in Web Workers fixed in Chrome 38.0.2125.101","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3194.json"},{"CVE":"CVE-2014-3192","severity":"critical","public_date":"2014-10-07T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1151395","bugzilla_description":"CVE-2014-3192 chromium: use-after-free in DOM, fixed in Chrome 38.0.2125.101","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3192.json"},{"CVE":"CVE-2014-3197","severity":"moderate","public_date":"2014-10-07T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1151422","bugzilla_description":"CVE-2014-3197 chromium: information leak in XSS Auditor fixed in Chrome 38.0.2125.101","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3197.json"},{"CVE":"CVE-2014-3200","severity":"critical","public_date":"2014-10-07T00:00:00Z","advisories":["RHSA-2014:1626"],"bugzilla":"1151425","bugzilla_description":"CVE-2014-3200 chromium: multiple unspecified issues fixed in Chrome 38.0.2125.101","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["chromium-browser-0:38.0.2125.101-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3200.json"},{"CVE":"CVE-2013-4324","severity":"important","public_date":"2013-09-18T00:00:00Z","advisories":["RHSA-2013:1273"],"bugzilla":"1006669","bugzilla_description":"CVE-2013-4324 spice-gtk: Insecure calling of polkit via polkit_unix_process_new()","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["spice-gtk-0:0.14-7.el6_4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4324.json"},{"CVE":"CVE-2013-4326","severity":"important","public_date":"2013-09-18T00:00:00Z","advisories":["RHSA-2013:1282"],"bugzilla":"1006677","bugzilla_description":"CVE-2013-4326 rtkit: insecure calling of polkit","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["rtkit-0:0.5-2.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4326.json"},{"CVE":"CVE-2013-7447","severity":"low","public_date":"2013-06-27T00:00:00Z","advisories":[],"bugzilla":"1306681","bugzilla_description":"CVE-2013-7447 gtk2, gtk3: Integer overflow in image handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7447.json"},{"CVE":"CVE-2012-4425","severity":"moderate","public_date":"2012-09-12T00:00:00Z","advisories":["RHSA-2012:1284"],"bugzilla":"857283","bugzilla_description":"CVE-2012-4425 spice-gtk/glib: Possible privilege escalation via un-sanitized environment variable","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["spice-gtk-0:0.11-11.el6_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4425.json"},{"CVE":"CVE-2011-3105","severity":"moderate","public_date":"2012-05-23T00:00:00Z","advisories":[],"bugzilla":"825914","bugzilla_description":"CVE-2011-3105 webkitgtk: Use-after-free in first-letter handling","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3105.json"},{"CVE":"CVE-2011-3086","severity":"moderate","public_date":"2012-05-15T00:00:00Z","advisories":[],"bugzilla":"825957","bugzilla_description":"Webkitgtk: google chrome update [15-May-2012]","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3086.json"},{"CVE":"CVE-2011-3089","severity":"moderate","public_date":"2012-05-15T00:00:00Z","advisories":[],"bugzilla":"825957","bugzilla_description":"Webkitgtk: google chrome update [15-May-2012]","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3089.json"},{"CVE":"CVE-2011-3090","severity":"moderate","public_date":"2012-05-15T00:00:00Z","advisories":[],"bugzilla":"825957","bugzilla_description":"Webkitgtk: google chrome update [15-May-2012]","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3090.json"},{"CVE":"CVE-2011-3093","severity":"moderate","public_date":"2012-05-15T00:00:00Z","advisories":[],"bugzilla":"825957","bugzilla_description":"Webkitgtk: google chrome update [15-May-2012]","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3093.json"},{"CVE":"CVE-2011-3078","severity":"moderate","public_date":"2012-05-01T00:00:00Z","advisories":[],"bugzilla":"817755","bugzilla_description":"Webkitgtk: google chrome update [30-April-2012]","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3078.json"},{"CVE":"CVE-2011-3081","severity":"moderate","public_date":"2012-05-01T00:00:00Z","advisories":[],"bugzilla":"817755","bugzilla_description":"Webkitgtk: google chrome update [30-April-2012]","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3081.json"},{"CVE":"CVE-2012-1521","severity":"moderate","public_date":"2012-05-01T00:00:00Z","advisories":[],"bugzilla":"817755","bugzilla_description":"Webkitgtk: google chrome update [30-April-2012]","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1521.json"},{"CVE":"CVE-2011-3059","severity":"moderate","public_date":"2012-03-28T00:00:00Z","advisories":[],"bugzilla":"807588","bugzilla_description":"Webkitgtk: google chrome update [28-March-2012]","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3059.json"},{"CVE":"CVE-2011-3060","severity":"moderate","public_date":"2012-03-28T00:00:00Z","advisories":[],"bugzilla":"807588","bugzilla_description":"Webkitgtk: google chrome update [28-March-2012]","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3060.json"},{"CVE":"CVE-2011-3064","severity":"moderate","public_date":"2012-03-28T00:00:00Z","advisories":[],"bugzilla":"807596","bugzilla_description":"CVE-2011-3064 WebkitGtk: Use-after-free in SVG clipping.","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3064.json"},{"CVE":"CVE-2012-2370","severity":"low","public_date":"2012-03-25T00:00:00Z","advisories":["RHSA-2013:0135"],"bugzilla":"822468","bugzilla_description":"CVE-2012-2370 gdk-pixbuf: DoS (GLib error and application abort) due to an integer overflow in the XBM image file format loader","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["gtk2-0:2.10.4-29.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2370.json"},{"CVE":"CVE-2011-3050","severity":"moderate","public_date":"2012-03-21T00:00:00Z","advisories":[],"bugzilla":"807184","bugzilla_description":"Webkitgtk: google chrome update [21-March-2012]","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3050.json"},{"CVE":"CVE-2011-3051","severity":"moderate","public_date":"2012-03-21T00:00:00Z","advisories":[],"bugzilla":"807184","bugzilla_description":"Webkitgtk: google chrome update [21-March-2012]","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3051.json"},{"CVE":"CVE-2011-3053","severity":"moderate","public_date":"2012-03-21T00:00:00Z","advisories":[],"bugzilla":"807184","bugzilla_description":"Webkitgtk: google chrome update [21-March-2012]","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3053.json"},{"CVE":"CVE-2011-3056","severity":"moderate","public_date":"2012-03-21T00:00:00Z","advisories":[],"bugzilla":"807184","bugzilla_description":"Webkitgtk: google chrome update [21-March-2012]","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3056.json"},{"CVE":"CVE-2011-2896","severity":"moderate","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2012:1180","RHSA-2012:1181","RHSA-2011:1635","RHSA-2012:0302"],"bugzilla":"727800","bugzilla_description":"CVE-2011-2896 David Koblas' GIF decoder LZW decoder buffer overflow","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gimp-2:2.6.9-4.el6_3.3","cups-1:1.3.7-30.el5","gimp-2:2.2.13-2.0.7.el5_8.5","cups-1:1.4.2-44.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2896.json"},{"CVE":"CVE-2011-2485","severity":"low","public_date":"2011-06-23T00:00:00Z","advisories":[],"bugzilla":"715337","bugzilla_description":"CVE-2011-2485 gdk-pixbuf: incorrect error detection in the GIF image loader","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2485.json"},{"CVE":"CVE-2011-0778","severity":"moderate","public_date":"2011-02-03T00:00:00Z","advisories":[],"bugzilla":"676209","bugzilla_description":"CVE-2011-0778 WebKit: restrict cross-origin drag+drop in WebKit","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0778.json"},{"CVE":"CVE-2011-0482","severity":"moderate","public_date":"2011-01-12T00:00:00Z","advisories":[],"bugzilla":"676203","bugzilla_description":"CVE-2011-0482 WebKit: Bad cast during handling of anchors causes crash via crafted HTML documents","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0482.json"},{"CVE":"CVE-2010-4577","severity":"moderate","public_date":"2010-12-13T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"667025","bugzilla_description":"CVE-2010-4577 webkit: CSS Font Face Parsing Type Confusion Vulnerability","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4577.json"},{"CVE":"CVE-2010-4578","severity":"moderate","public_date":"2010-12-13T00:00:00Z","advisories":[],"bugzilla":"676207","bugzilla_description":"CVE-2010-4578 WebKit: Stale SVG pointer in Cursors DOM","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4578.json"},{"CVE":"CVE-2010-4492","severity":"important","public_date":"2010-12-02T00:00:00Z","advisories":[],"bugzilla":"676201","bugzilla_description":"CVE-2010-4492 WebKit: Use-after-free vulnerability in SVG animations","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-416->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4492.json"},{"CVE":"CVE-2010-4493","severity":"moderate","public_date":"2010-12-02T00:00:00Z","advisories":[],"bugzilla":"676202","bugzilla_description":"CVE-2010-4493 WebKit: Use-after-free vulnerability related to handling of mouse dragging events.","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4493.json"},{"CVE":"CVE-2017-1000044","severity":"moderate","public_date":"2010-11-29T00:00:00Z","advisories":[],"bugzilla":"1426766","bugzilla_description":"CVE-2017-1000044 gtk-vnc: Incorrect boundaries check when updating framebuffer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000044.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2010-3813","severity":"moderate","public_date":"2010-11-18T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"667024","bugzilla_description":"CVE-2010-3813 webkit: HTMLLinkElement ignores dnsPrefetchingEnabled setting","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3813.json"},{"CVE":"CVE-2010-4197","severity":"moderate","public_date":"2010-11-04T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"656115","bugzilla_description":"CVE-2010-4197 WebKit: Use-after-free vulnerabiity related to text editing causes memory corruption","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4197.json"},{"CVE":"CVE-2010-4198","severity":"moderate","public_date":"2010-11-04T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"656118","bugzilla_description":"CVE-2010-4198 WebKit: Memory corruption due to improper handling of large text area","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4198.json"},{"CVE":"CVE-2010-4199","severity":"moderate","public_date":"2010-11-04T00:00:00Z","advisories":[],"bugzilla":"656122","bugzilla_description":"CVE-2010-4199 WebKit: Improper cast of an unspecified variable during processing of an SVG use element","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4199.json"},{"CVE":"CVE-2010-4201","severity":"moderate","public_date":"2010-11-04T00:00:00Z","advisories":[],"bugzilla":"656124","bugzilla_description":"CVE-2010-4201 WebKit: Use-after-free vulnerability related to text control selections","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4201.json"},{"CVE":"CVE-2010-4204","severity":"moderate","public_date":"2010-11-04T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"656126","bugzilla_description":"CVE-2010-4204 WebKit: Use-after-free vulnerability related frame object","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4204.json"},{"CVE":"CVE-2010-4206","severity":"moderate","public_date":"2010-11-04T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"656129","bugzilla_description":"CVE-2010-4206 WebKit: Array index error during processing of an SVG document","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4206.json"},{"CVE":"CVE-2010-4205","severity":"moderate","public_date":"2010-11-04T00:00:00Z","advisories":[],"bugzilla":"656132","bugzilla_description":"CVE-2010-4205 WebKit: Improper handling of data types from event objects","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4205.json"},{"CVE":"CVE-2010-4037","severity":"moderate","public_date":"2010-10-19T00:00:00Z","advisories":[],"bugzilla":"657099","bugzilla_description":"CVE-2010-4037 webkit: remote bypass of pop-up blocker","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4037.json"},{"CVE":"CVE-2010-4040","severity":"moderate","public_date":"2010-10-19T00:00:00Z","advisories":[],"bugzilla":"657101","bugzilla_description":"CVE-2010-4040 WebKit: crafted animated GIF image could cause DoS (memory corruption)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4040.json"},{"CVE":"CVE-2010-4042","severity":"moderate","public_date":"2010-10-19T00:00:00Z","advisories":[],"bugzilla":"676212","bugzilla_description":"CVE-2010-4042 WebKit: Stale elements in an element map causes webkit to crash","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4042.json"},{"CVE":"CVE-2010-1822","severity":"important","public_date":"2010-09-17T00:00:00Z","advisories":[],"bugzilla":"640290","bugzilla_description":"CVE-2010-1822 WebKit: DoS (crash) by processing certain SVG images","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1822.json"},{"CVE":"CVE-2010-3408","severity":"moderate","public_date":"2010-09-14T00:00:00Z","advisories":[],"bugzilla":"634748","bugzilla_description":"CVE-2010-3408 webkit: use-after-free vulnerability in document.close()","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3408.json"},{"CVE":"CVE-2010-3409","severity":"moderate","public_date":"2010-09-14T00:00:00Z","advisories":[],"bugzilla":"634752","bugzilla_description":"CVE-2010-3409 webkit: use-after-free vulnerability in SVG use","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3409.json"},{"CVE":"CVE-2010-3410","severity":"moderate","public_date":"2010-09-14T00:00:00Z","advisories":[],"bugzilla":"634756","bugzilla_description":"CVE-2010-3410 webkit: use-after-free vulnerability when using SVG nested elements","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3410.json"},{"CVE":"CVE-2010-1812","severity":"moderate","public_date":"2010-09-08T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"631939","bugzilla_description":"CVE-2010-1812 webkit: use-after-free flaw in handling of selections","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1812.json"},{"CVE":"CVE-2010-1813","severity":"moderate","public_date":"2010-09-08T00:00:00Z","advisories":[],"bugzilla":"631942","bugzilla_description":"CVE-2010-1813 webkit: memory corruption flaw in rendering of HTML object outlines","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1813.json"},{"CVE":"CVE-2010-1814","severity":"moderate","public_date":"2010-09-08T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"631946","bugzilla_description":"CVE-2010-1814 webkit: memory corruption flaw when handling form menus","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1814.json"},{"CVE":"CVE-2010-1815","severity":"moderate","public_date":"2010-09-08T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"631948","bugzilla_description":"CVE-2010-1815 webkit: use-after-free flaw when handling scrollbars","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1815.json"},{"CVE":"CVE-2010-1807","severity":"moderate","public_date":"2010-09-07T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"627703","bugzilla_description":"CVE-2010-1807 webkit: input validation error when parsing certain NaN values","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1807.json"},{"CVE":"CVE-2010-1806","severity":"moderate","public_date":"2010-09-07T00:00:00Z","advisories":[],"bugzilla":"627712","bugzilla_description":"CVE-2010-1806 webkit: memory corruption in handling of run-in styling (ZDI-CAN-806)","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1806.json"},{"CVE":"CVE-2010-3257","severity":"moderate","public_date":"2010-09-02T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"640357","bugzilla_description":"CVE-2010-3257 webkit: stale pointer issue with focusing","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3257.json"},{"CVE":"CVE-2010-3259","severity":"moderate","public_date":"2010-09-02T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"640360","bugzilla_description":"CVE-2010-3259 webkit: cross-origin image theft","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3259.json"},{"CVE":"CVE-2010-3255","severity":"moderate","public_date":"2010-09-02T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"645914","bugzilla_description":"CVE-2010-3255 webkit: DoS via improper handling of counter nodes","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3255.json"},{"CVE":"CVE-2010-3113","severity":"moderate","public_date":"2010-08-19T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"628032","bugzilla_description":"CVE-2010-3113 webkit: memory corruption when handling SVG documents","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3113.json"},{"CVE":"CVE-2010-3114","severity":"moderate","public_date":"2010-08-19T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"628035","bugzilla_description":"CVE-2010-3114 webkit: bad cast with text editing","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3114.json"},{"CVE":"CVE-2010-3115","severity":"moderate","public_date":"2010-08-19T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"628071","bugzilla_description":"CVE-2010-3115 webkit: address bar spoofing with history bug","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3115.json"},{"CVE":"CVE-2010-3119","severity":"moderate","public_date":"2010-08-19T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"628076","bugzilla_description":"CVE-2010-3119 webkit: DoS due to improper Ruby support","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3119.json"},{"CVE":"CVE-2010-3116","severity":"moderate","public_date":"2010-08-19T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"640353","bugzilla_description":"CVE-2010-3116 webkit: memory corruption with MIME types","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3116.json"},{"CVE":"CVE-2010-1780","severity":"moderate","public_date":"2010-08-11T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"627366","bugzilla_description":"CVE-2010-1780 CVE-2010-1782 CVE-2010-1783 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 WebKit: multiple vulnerabilities in WebKitGTK","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1780.json"},{"CVE":"CVE-2010-1782","severity":"moderate","public_date":"2010-08-11T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"627366","bugzilla_description":"CVE-2010-1780 CVE-2010-1782 CVE-2010-1783 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 WebKit: multiple vulnerabilities in WebKitGTK","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1782.json"},{"CVE":"CVE-2010-1783","severity":"moderate","public_date":"2010-08-11T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"627366","bugzilla_description":"CVE-2010-1780 CVE-2010-1782 CVE-2010-1783 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 WebKit: multiple vulnerabilities in WebKitGTK","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1783.json"},{"CVE":"CVE-2010-1784","severity":"moderate","public_date":"2010-08-11T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"627366","bugzilla_description":"CVE-2010-1780 CVE-2010-1782 CVE-2010-1783 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 WebKit: multiple vulnerabilities in WebKitGTK","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1784.json"},{"CVE":"CVE-2010-1785","severity":"moderate","public_date":"2010-08-11T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"627366","bugzilla_description":"CVE-2010-1780 CVE-2010-1782 CVE-2010-1783 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 WebKit: multiple vulnerabilities in WebKitGTK","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1785.json"},{"CVE":"CVE-2010-1786","severity":"moderate","public_date":"2010-08-11T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"627366","bugzilla_description":"CVE-2010-1780 CVE-2010-1782 CVE-2010-1783 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 WebKit: multiple vulnerabilities in WebKitGTK","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1786.json"},{"CVE":"CVE-2010-1787","severity":"moderate","public_date":"2010-08-11T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"627366","bugzilla_description":"CVE-2010-1780 CVE-2010-1782 CVE-2010-1783 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 WebKit: multiple vulnerabilities in WebKitGTK","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1787.json"},{"CVE":"CVE-2010-1788","severity":"moderate","public_date":"2010-08-11T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"627366","bugzilla_description":"CVE-2010-1780 CVE-2010-1782 CVE-2010-1783 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 WebKit: multiple vulnerabilities in WebKitGTK","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1788.json"},{"CVE":"CVE-2010-1790","severity":"moderate","public_date":"2010-08-11T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"627366","bugzilla_description":"CVE-2010-1780 CVE-2010-1782 CVE-2010-1783 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 WebKit: multiple vulnerabilities in WebKitGTK","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1790.json"},{"CVE":"CVE-2010-1792","severity":"moderate","public_date":"2010-08-11T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"627366","bugzilla_description":"CVE-2010-1780 CVE-2010-1782 CVE-2010-1783 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 WebKit: multiple vulnerabilities in WebKitGTK","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1792.json"},{"CVE":"CVE-2010-1793","severity":"moderate","public_date":"2010-08-11T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"627366","bugzilla_description":"CVE-2010-1780 CVE-2010-1782 CVE-2010-1783 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 WebKit: multiple vulnerabilities in WebKitGTK","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1793.json"},{"CVE":"CVE-2010-2901","severity":"moderate","public_date":"2010-07-10T00:00:00Z","advisories":[],"bugzilla":"676210","bugzilla_description":"CVE-2010-2901 WebKit: Memory corruption with crash in RenderObject::containingBlock()","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2901.json"},{"CVE":"CVE-2010-2647","severity":null,"public_date":"2010-07-02T00:00:00Z","advisories":[],"bugzilla":"668336","bugzilla_description":"CVE-2010-2647 Webkit:SVG ForeignObject Rendering Layout Vulnerability","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2647.json"},{"CVE":"CVE-2010-1392","severity":null,"public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596382","bugzilla_description":"CVE-2010-1392 WebKit: use-after-free vulnerabiity when rendering HTML buttons","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1392.json"},{"CVE":"CVE-2010-1119","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596386","bugzilla_description":"CVE-2010-1119 WebKit: use-after-free vulnerability in handling of attribute manipulation","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1119.json"},{"CVE":"CVE-2010-1396","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596397","bugzilla_description":"CVE-2010-1396 WebKit: use-after-free vulnerability in handling the removal of container elements (ZDI-CAN-688)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1396.json"},{"CVE":"CVE-2010-1397","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596401","bugzilla_description":"CVE-2010-1397 WebKit: use-after-free vulnerabiity when rendering a selection when the layout changes (ZDI-CAN-632)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1397.json"},{"CVE":"CVE-2010-1398","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596403","bugzilla_description":"CVE-2010-1398 WebKit: memory corruption flaw in handling of ordered list insertions (ZDI-CAN-686)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1398.json"},{"CVE":"CVE-2010-1399","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596408","bugzilla_description":"CVE-2010-1399 WebKit: uninitialized memory access vulnerability in handling of selection changes on form input elements (ZDI-CAN-687)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1399.json"},{"CVE":"CVE-2010-1400","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596424","bugzilla_description":"CVE-2010-1400 WebKit: use-after-free vulnerability in handling of caption elements","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1400.json"},{"CVE":"CVE-2010-1401","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596425","bugzilla_description":"CVE-2010-1401 WebKit: use-after-free vulnerability in handling of the ':first-letter' pseudo-element in CSS (ZDI-CAN-689)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1401.json"},{"CVE":"CVE-2010-1402","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596429","bugzilla_description":"CVE-2010-1402 WebKit: double-free vulnerability in handling of event listeners in SVG documents (ZDI-CAN-704)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1402.json"},{"CVE":"CVE-2010-1403","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596432","bugzilla_description":"CVE-2010-1403 WebKit: uninitialized memory access vulnerability in handling of 'use' elements in SVG documents (ZDI-CAN-702)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1403.json"},{"CVE":"CVE-2010-1404","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596437","bugzilla_description":"CVE-2010-1404 WebKit: use-after-free vulnerability in handling of SVG documents with multiple 'use' elements (ZDI-CAN-711)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1404.json"},{"CVE":"CVE-2010-1410","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596452","bugzilla_description":"CVE-2010-1410 WebKit: memory corruption vulnerability in handling of nested 'use' elements in SVG documents","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1410.json"},{"CVE":"CVE-2010-1749","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596454","bugzilla_description":"CVE-2010-1749 WebKit: use-after-free vulnerability in handling of CSS run-ins","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1749.json"},{"CVE":"CVE-2010-1405","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596456","bugzilla_description":"CVE-2010-1405 WebKit: use-after-free vulnerability in handling of HTML elements with custom vertical positioning","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1405.json"},{"CVE":"CVE-2010-1412","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596458","bugzilla_description":"CVE-2010-1412 WebKit: use-after-free vulnerability in handling of hover events","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1412.json"},{"CVE":"CVE-2010-1414","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596459","bugzilla_description":"CVE-2010-1414 WebKit: use-after-free vulnerability in handling of the removeChild DOM method","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1414.json"},{"CVE":"CVE-2010-1415","severity":null,"public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596460","bugzilla_description":"CVE-2010-1415 WebKit: API abuse vulnerability in handling of libxml contexts","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1415.json"},{"CVE":"CVE-2010-1417","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596471","bugzilla_description":"CVE-2010-1417 WebKit: memory corruption vulnerability in rendering of certain CSS-styled HTML content","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1417.json"},{"CVE":"CVE-2010-1419","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596478","bugzilla_description":"CVE-2010-1419 WebKit: use-after-free vulnerability in handling of certain drag and drop operations","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1419.json"},{"CVE":"CVE-2010-1758","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596479","bugzilla_description":"CVE-2010-1758 WebKit: use-after-free vulnerability in handling of DOM Range objects","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1758.json"},{"CVE":"CVE-2010-1759","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596485","bugzilla_description":"CVE-2010-1759 WebKit: use-after-free vulnerability in handling of the Node.normalize method","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1759.json"},{"CVE":"CVE-2010-1770","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596487","bugzilla_description":"CVE-2010-1770 WebKit: type checking vulnerability in handling of text nodes (ZDI-CAN-765)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1770.json"},{"CVE":"CVE-2010-1387","severity":null,"public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596493","bugzilla_description":"CVE-2010-1387 WebKit: use-after-free vulnerability in JavaScriptCore during page transitions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1387.json"},{"CVE":"CVE-2010-1766","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596494","bugzilla_description":"CVE-2010-1766 WebKit: off-by-one memory corruption flaw WebSocketHandshake::readServerHandshake()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1766.json"},{"CVE":"CVE-2010-1771","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596497","bugzilla_description":"CVE-2010-1771 WebKit: use-after-free vulnerability in font handling","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1771.json"},{"CVE":"CVE-2010-1772","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596498","bugzilla_description":"CVE-2010-1772 WebKit: use-after-free vulnerability in handling of geolocation events","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1772.json"},{"CVE":"CVE-2010-1773","severity":"low","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596500","bugzilla_description":"CVE-2010-1773 WebKit: off-by-one memory read out of bounds vulnerability in handling of HTML lists","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-193->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1773.json"},{"CVE":"CVE-2010-1774","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"596501","bugzilla_description":"CVE-2010-1774 WebKit: out-of-bounds memory access vulnerability in handling of HTML tables","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1774.json"},{"CVE":"CVE-2010-1761","severity":"critical","public_date":"2010-06-07T00:00:00Z","advisories":[],"bugzilla":"603237","bugzilla_description":"CVE-2010-1761 webkit: use-after-free vulnerability when marking layout root's parent as needing layout","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1761.json"},{"CVE":"CVE-2010-2304","severity":null,"public_date":"2010-05-24T00:00:00Z","advisories":[],"bugzilla":"606295","bugzilla_description":"CVE-2010-2304 webkitgtk: Memory corruption by rendering the list item's marker","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2304.json"},{"CVE":"CVE-2010-3812","severity":"moderate","public_date":"2010-01-01T00:00:00Z","advisories":["RHSA-2011:0177"],"bugzilla":"667022","bugzilla_description":"CVE-2010-3812 webkit: Integer overflow in WebKit's handling of Text objects","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["webkitgtk-0:1.2.6-2.el6_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3812.json"},{"CVE":"CVE-2008-0553","severity":"moderate","public_date":"2008-02-01T00:00:00Z","advisories":["RHSA-2008:0136","RHSA-2008:0135","RHSA-2008:0134"],"bugzilla":"431518","bugzilla_description":"CVE-2008-0553 tk: GIF handling buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tk-0:8.4.7-3.el4_6.1","tk-0:8.4.13-5.el5_1.1","tcltk-0:8.3.5-92.8","tcltk-0:8.3.3-75"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0553.json"},{"CVE":"CVE-2007-4772","severity":"moderate","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0038","RHSA-2008:0134","RHSA-2008:0040","RHSA-2013:0122"],"bugzilla":"316511","bugzilla_description":"CVE-2007-4772 postgresql DoS via infinite loop in regex NFA optimization code","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["postgresql-0:8.1.11-1.el5_1.1","postgresql-0:8.1.11-1.el4s1.1","tcl-0:8.4.13-6.el5","tcltk-0:8.3.5-92.8","postgresql-0:7.4.19-1.el4_6.1","postgresql-0:8.2.6-1.el5s2","tcltk-0:8.3.3-75"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4772.json"},{"CVE":"CVE-2007-5137","severity":"low","public_date":"2007-09-07T00:00:00Z","advisories":["RHSA-2008:0136"],"bugzilla":"290991","bugzilla_description":"CVE-2007-5137 Tk GIF processing buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tk-0:8.4.13-5.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5137.json"},{"CVE":"CVE-2007-0010","severity":"moderate","public_date":"2007-01-10T00:00:00Z","advisories":["RHSA-2007:0019"],"bugzilla":"1618260","bugzilla_description":"CVE-2007-0010 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gtk2-0:2.4.13-22"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0010.json"},{"CVE":"CVE-2007-5378","severity":"low","public_date":"2006-03-25T00:00:00Z","advisories":["RHSA-2008:0135","RHSA-2008:0134"],"bugzilla":"332021","bugzilla_description":"CVE-2007-5378 Tk GIF processing buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tk-0:8.4.7-3.el4_6.1","tcltk-0:8.3.5-92.8","tcltk-0:8.3.3-75"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5378.json"},{"CVE":"CVE-2005-2975","severity":"important","public_date":"2005-11-15T14:00:00Z","advisories":["RHSA-2005:810","RHSA-2005:811"],"bugzilla":"1617771","bugzilla_description":"CVE-2005-2975 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-13.el3.3","gdk-pixbuf-1:0.22.0-17.el4.3","gtk2-0:2.2.4-19","gtk2-0:2.4.13-18"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2975.json"},{"CVE":"CVE-2005-3186","severity":"important","public_date":"2005-11-03T00:00:00Z","advisories":["RHSA-2005:810","RHSA-2005:811"],"bugzilla":"1617795","bugzilla_description":"CVE-2005-3186 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-13.el3.3","gdk-pixbuf-1:0.22.0-17.el4.3","gtk2-0:2.2.4-19","gtk2-0:2.4.13-18"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3186.json"},{"CVE":"CVE-2005-0891","severity":"important","public_date":"2005-03-26T00:00:00Z","advisories":["RHSA-2005:344","RHSA-2005:343"],"bugzilla":"1617587","bugzilla_description":"CVE-2005-0891 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gtk2-0:2.4.13-14","gtk2-0:2.2.4-15","gdk-pixbuf-1:0.22.0-16.el4","gdk-pixbuf-1:0.22.0-12.el3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0891.json"},{"CVE":"CVE-2004-0782","severity":"important","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617283","bugzilla_description":"CVE-2004-0782 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0782.json"},{"CVE":"CVE-2004-0783","severity":"important","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617284","bugzilla_description":"CVE-2004-0783 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0783.json"},{"CVE":"CVE-2004-0788","severity":"moderate","public_date":"2004-09-15T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617290","bugzilla_description":"CVE-2004-0788 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0788.json"},{"CVE":"CVE-2004-0753","severity":"moderate","public_date":"2004-08-20T00:00:00Z","advisories":["RHSA-2004:466","RHSA-2004:447"],"bugzilla":"1617266","bugzilla_description":"CVE-2004-0753 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gdk-pixbuf-1:0.22.0-11.3.3","gtk2-0:2.2.4-8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0753.json"},{"CVE":"CVE-2011-2897","severity":"moderate","public_date":"2001-06-01T00:00:00Z","advisories":[],"bugzilla":"727081","bugzilla_description":"CVE-2011-2897 gdk-pixbuf: GIF loader buffer overflow when initializing decompression tables","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2897.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tlog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tlog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tlog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tmpwatch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tmpwatch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tmpwatch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tmux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tmux_security_api_results.json
new file mode 100644
index 0000000..50f5c02
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tmux_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-19387","severity":"low","public_date":"2018-11-19T00:00:00Z","advisories":[],"bugzilla":"1652127","bugzilla_description":"CVE-2018-19387 tmux: NULL Pointer Dereference in format_cb_pane_tabs in format.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19387.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tog-pegasus-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tog-pegasus-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tog-pegasus-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tog-pegasus-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tog-pegasus-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tog-pegasus-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tog-pegasus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tog-pegasus_security_api_results.json
new file mode 100644
index 0000000..d6a7021
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tog-pegasus_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-4967","severity":"moderate","public_date":"2012-02-21T00:00:00Z","advisories":[],"bugzilla":"796015","bugzilla_description":"CVE-2011-4967 tog-pegasus: xml hash table collision CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4967.json"},{"CVE":"CVE-2008-4313","severity":"important","public_date":"2008-08-14T00:00:00Z","advisories":["RHSA-2008:1001"],"bugzilla":"459217","bugzilla_description":"CVE-2008-4313 tog-pegasus: WBEM services access not restricted to dedicated user after 2.7.0 rebase","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tog-pegasus-2:2.7.0-2.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4313.json"},{"CVE":"CVE-2008-4315","severity":"low","public_date":"2008-08-14T00:00:00Z","advisories":["RHSA-2008:1001"],"bugzilla":"472017","bugzilla_description":"CVE-2008-4315 tog-pegasus: failed authentication attempts not logged via PAM","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["tog-pegasus-2:2.7.0-2.el5_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4315.json"},{"CVE":"CVE-2008-0003","severity":"critical","public_date":"2008-01-07T00:00:00Z","advisories":["RHSA-2008:0002"],"bugzilla":"426578","bugzilla_description":"CVE-2008-0003 tog-pegasus pam authentication buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["tog-pegasus-2:2.6.1-2.el5_1.1","tog-pegasus-2:2.5.1-2.el4_5.1","tog-pegasus-2:2.5.1-5.el4_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0003.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tokyocabinet-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tokyocabinet-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tokyocabinet-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tokyocabinet_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tokyocabinet_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tokyocabinet_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tomcatjss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tomcatjss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tomcatjss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/toolbox_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/toolbox_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/toolbox_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/torque-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/torque-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/torque-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/torque-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/torque-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/torque-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/torque_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/torque_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/torque_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/totem-nautilus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/totem-nautilus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/totem-nautilus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/totem-pl-parser_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/totem-pl-parser_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/totem-pl-parser_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/totem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/totem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/totem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-quote-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-quote-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-quote-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-tools-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-tools-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-tools-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-tools-pkcs11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-tools-pkcs11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-tools-pkcs11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-abrmd-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-abrmd-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-abrmd-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-abrmd-selinux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-abrmd-selinux_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-abrmd-selinux_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-abrmd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-abrmd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-abrmd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-tools_security_api_results.json
new file mode 100644
index 0000000..52e329c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-tools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-7524","severity":"moderate","public_date":"2017-06-21T00:00:00Z","advisories":[],"bugzilla":"1465341","bugzilla_description":"CVE-2017-7524 tpm2-tools: Sending password in plaintext for HMAC generation on server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7524.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-tss-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-tss-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-tss-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-tss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-tss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tpm2-tss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trace-cmd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trace-cmd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trace-cmd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/traceroute_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/traceroute_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/traceroute_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tracker-miners_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tracker-miners_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tracker-miners_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tracker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tracker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tracker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/transfig_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/transfig_security_api_results.json
new file mode 100644
index 0000000..d7eebe4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/transfig_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-19797","severity":"moderate","public_date":"2019-12-13T00:00:00Z","advisories":[],"bugzilla":"1786726","bugzilla_description":"CVE-2019-19797 transfig: out-of-bounds write in read_colordef in read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19797.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-19746","severity":"moderate","public_date":"2019-12-06T00:00:00Z","advisories":[],"bugzilla":"1787040","bugzilla_description":"CVE-2019-19746 transfig: integer overflow leads to out-of-bounds write in make_arrow in arrow.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19746.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2019-14275","severity":"low","public_date":"2019-07-26T00:00:00Z","advisories":[],"bugzilla":"1800634","bugzilla_description":"CVE-2019-14275 transfig: stack-based buffer overflow in calc_arrow in bound.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14275.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2019-19555","severity":"low","public_date":"2019-04-12T00:00:00Z","advisories":[],"bugzilla":"1800631","bugzilla_description":"CVE-2019-19555 transfig: stack-based buffer overflow in read_textobject in read.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19555.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2018-16140","severity":"low","public_date":"2018-09-12T00:00:00Z","advisories":[],"bugzilla":"1627974","bugzilla_description":"CVE-2018-16140 transfig: Buffer underwrite in read.c:get_line() via crafted FIG file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16140.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16899","severity":"low","public_date":"2017-11-20T00:00:00Z","advisories":[],"bugzilla":"1515695","bugzilla_description":"CVE-2017-16899 transfig: Array index error in the fig2dev program","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16899.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2009-4227","severity":"moderate","public_date":"2009-12-03T00:00:00Z","advisories":[],"bugzilla":"543905","bugzilla_description":"CVE-2009-4227 CVE-2009-4228 Xfig, Transfig: Stack-based buffer overflow by loading malformed .FIG files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4227.json"},{"CVE":"CVE-2009-4228","severity":"moderate","public_date":"2009-12-03T00:00:00Z","advisories":[],"bugzilla":"543905","bugzilla_description":"CVE-2009-4227 CVE-2009-4228 Xfig, Transfig: Stack-based buffer overflow by loading malformed .FIG files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4228.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tree_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tree_security_api_results.json
new file mode 100644
index 0000000..1eed823
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tree_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11840","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":["RHBA-2020:0063"],"bugzilla":"1691529","bugzilla_description":"CVE-2019-11840 golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["openshift-0:4.3.0-202001131753.git.0.0aee6a8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3204","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":[],"bugzilla":"1439748","bugzilla_description":"CVE-2017-3204 golang-googlecode-go-crypto: Go SSH library does not verify host keys by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-2623","severity":"moderate","public_date":"2017-03-02T00:00:00Z","advisories":["RHSA-2017:0444"],"bugzilla":"1422157","bugzilla_description":"CVE-2017-2623 rpm-ostree, rpm-ostree-client: fails to check gpg package signatures when layering","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["rpm-ostree-0:2017.1-5.atomic.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trousers-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trousers-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trousers-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trousers-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trousers-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trousers-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trousers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trousers_security_api_results.json
new file mode 100644
index 0000000..25c80a3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/trousers_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-24330","severity":"low","public_date":"2020-09-02T00:00:00Z","advisories":[],"bugzilla":"1870054","bugzilla_description":"CVE-2020-24330 trousers: fails to drop the root gid privilege when no longer needed","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24330.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-24332","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870052","bugzilla_description":"CVE-2020-24332 trousers: tss user can be used to create or corrupt existing files, this could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59->CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24332.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2020-24331","severity":"moderate","public_date":"2020-08-13T00:00:00Z","advisories":[],"bugzilla":"1870056","bugzilla_description":"CVE-2020-24331 trousers: tss user still has read and write access to the /etc/tcsd.conf file if tcsd is started as root","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24331.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-18898","severity":"low","public_date":"2019-11-25T00:00:00Z","advisories":[],"bugzilla":"1787080","bugzilla_description":"CVE-2019-18898 trousers: local privilege escalation from tss to root","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18898.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2012-0698","severity":"low","public_date":"2012-01-13T00:00:00Z","advisories":["RHSA-2014:1507"],"bugzilla":"781648","bugzilla_description":"CVE-2012-0698 trousers: DoS vulnerability in tcsd","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["trousers-0:0.3.13-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0698.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tss2-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tss2-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tss2-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tss2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tss2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tss2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ttmkfdir_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ttmkfdir_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ttmkfdir_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuna_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuna_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuna_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-atomic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-atomic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-atomic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-compat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-compat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-compat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-cpu-partitioning_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-cpu-partitioning_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-cpu-partitioning_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-mssql_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-mssql_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-mssql_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-oracle_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-oracle_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-profiles-oracle_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-utils-systemtap_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-utils-systemtap_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-utils-systemtap_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned_security_api_results.json
new file mode 100644
index 0000000..a08c498
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tuned_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2012-6136","severity":"low","public_date":"2012-08-02T00:00:00Z","advisories":["RHBA-2013:0386"],"bugzilla":"918813","bugzilla_description":"CVE-2012-6136 tuned: insecure permissions of tuned.pid","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["tuned-0:0.2.19-11.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6136.json"},{"CVE":"CVE-2013-1820","severity":"low","public_date":"2012-02-26T00:00:00Z","advisories":[],"bugzilla":"918229","bugzilla_description":"CVE-2013-1820 tuned: insecure permissions of pmqos-static.pid","cvss_score":4.0,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1820.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/turbojpeg-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/turbojpeg-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/turbojpeg-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/turbojpeg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/turbojpeg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/turbojpeg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/twolame-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/twolame-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/twolame-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tzdata-java_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tzdata-java_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tzdata-java_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tzdata_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tzdata_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/tzdata_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ucs-miscfixed-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ucs-miscfixed-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ucs-miscfixed-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ucx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ucx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ucx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udica_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udica_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udica_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udisks2-iscsi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udisks2-iscsi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udisks2-iscsi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udisks2-lvm2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udisks2-lvm2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udisks2-lvm2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udisks2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udisks2_security_api_results.json
new file mode 100644
index 0000000..e8af2f1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/udisks2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-17336","severity":"moderate","public_date":"2018-09-22T00:00:00Z","advisories":["RHSA-2019:2178"],"bugzilla":"1632828","bugzilla_description":"CVE-2018-17336 udisks: Format string vulnerability in udisks_log in udiskslogging.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-134","affected_packages":["udisks2-0:2.7.3-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17336.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2014-0004","severity":"important","public_date":"2014-03-10T00:00:00Z","advisories":["RHSA-2014:0293"],"bugzilla":"1049703","bugzilla_description":"CVE-2014-0004 udisks and udisks2: stack-based buffer overflow when handling long path names","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-121","affected_packages":["udisks-0:1.0.1-7.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0004.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uglify-js_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uglify-js_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uglify-js_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uid_wrapper_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uid_wrapper_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uid_wrapper_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unbound-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unbound-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unbound-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unbound-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unbound-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unbound-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unbound_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unbound_security_api_results.json
new file mode 100644
index 0000000..6caabba
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unbound_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-10772","severity":"important","public_date":"2020-06-10T00:00:00Z","advisories":["RHSA-2020:2642"],"bugzilla":"1846026","bugzilla_description":"CVE-2020-10772 unbound: incomplete fix for CVE-2020-12662 in RHEL7","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406->CWE-400","affected_packages":["unbound-0:1.6.6-5.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10772.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12662","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:2640","RHSA-2020:2419","RHSA-2020:2418","RHSA-2020:4181","RHSA-2020:2416","RHSA-2020:2414"],"bugzilla":"1837597","bugzilla_description":"CVE-2020-12662 unbound: amplification of an incoming query into a large number of queries directed to a target","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406->CWE-400","affected_packages":["unbound-0:1.7.3-11.el8_2","unbound-0:1.6.6-4.el7_8","unbound-0:1.4.20-29.el6_10.1","unbound-0:1.7.3-9.el8_0","unbound-0:1.7.3-9.el8_1","unbound-0:1.6.6-2.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12662.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12663","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:2640","RHSA-2020:2419","RHSA-2020:2418","RHSA-2020:4181","RHSA-2020:2416","RHSA-2020:2414"],"bugzilla":"1837604","bugzilla_description":"CVE-2020-12663 unbound: infinite loop via malformed DNS answers received from upstream servers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-835","affected_packages":["unbound-0:1.7.3-11.el8_2","unbound-0:1.6.6-4.el7_8","unbound-0:1.4.20-29.el6_10.1","unbound-0:1.7.3-9.el8_0","unbound-0:1.7.3-9.el8_1","unbound-0:1.6.6-2.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-18934","severity":"moderate","public_date":"2019-11-26T00:00:00Z","advisories":["RHSA-2020:1716"],"bugzilla":"1776762","bugzilla_description":"CVE-2019-18934 unbound: command injection with data coming from a specially crafted IPSECKEY answer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["unbound-0:1.7.3-10.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18934.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-16866","severity":"low","public_date":"2019-10-03T00:00:00Z","advisories":[],"bugzilla":"1767955","bugzilla_description":"CVE-2019-16866 unbound: uninitialized memory accesses leads to crash via a crafted NOTIFY query","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16866.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000134","severity":"moderate","public_date":"2018-03-16T00:00:00Z","advisories":["RHSA-2018:1713"],"bugzilla":"1557531","bugzilla_description":"CVE-2018-1000134 unboundid-ldapsdk: Incorrect Access Control vulnerability in process function in SimpleBindRequest class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["unboundid-ldapsdk-0:4.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000134.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-15105","severity":"moderate","public_date":"2018-01-19T00:00:00Z","advisories":[],"bugzilla":"1507049","bugzilla_description":"CVE-2017-15105 unbound: Improper validation of wildcard synthesized NSEC records","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2014-8602","severity":"low","public_date":"2014-12-08T00:00:00Z","advisories":["RHSA-2015:2455"],"bugzilla":"1172065","bugzilla_description":"CVE-2014-8602 unbound: specially crafted request can lead to denial of service","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["unbound-0:1.4.20-26.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8602.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unicode-ucd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unicode-ucd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unicode-ucd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unit-api-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unit-api-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unit-api-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unit-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unit-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unit-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/units_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/units_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/units_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unixODBC-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unixODBC-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unixODBC-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unixODBC_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unixODBC_security_api_results.json
new file mode 100644
index 0000000..f33f902
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unixODBC_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-7485","severity":"moderate","public_date":"2018-02-27T00:00:00Z","advisories":["RHSA-2019:2336"],"bugzilla":"1549636","bugzilla_description":"CVE-2018-7485 unixODBC: Insecure buffer copy in SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["unixODBC-0:2.3.1-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7485.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-7409","severity":"moderate","public_date":"2018-01-02T00:00:00Z","advisories":["RHSA-2019:2336"],"bugzilla":"1548305","bugzilla_description":"CVE-2018-7409 unixODBC: Buffer overflow in unicode_to_ansi_copy() can lead to crash or other unspecified impact","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["unixODBC-0:2.3.1-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7409.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2012-2657","severity":"low","public_date":"2012-05-29T00:00:00Z","advisories":[],"bugzilla":"826262","bugzilla_description":"CVE-2012-2657 unixodbc: buffer overflow due to improper checking of FILESDN= input","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2657.json"},{"CVE":"CVE-2012-2658","severity":"low","public_date":"2012-05-29T00:00:00Z","advisories":[],"bugzilla":"826263","bugzilla_description":"CVE-2012-2658 unixodbc: buffer overflow due to improper checking of DRIVER= input","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2658.json"},{"CVE":"CVE-2011-1145","severity":"low","public_date":"2011-03-09T00:00:00Z","advisories":[],"bugzilla":"684036","bugzilla_description":"CVE-2011-1145 unixODBC: possible buffer overrun in SQLDriverConnect()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1145.json"},{"CVE":"CVE-2009-3736","severity":"moderate","public_date":"2009-11-16T00:00:00Z","advisories":["RHSA-2009:1646","RHSA-2010:0039"],"bugzilla":"537941","bugzilla_description":"CVE-2009-3736 libtool: libltdl may load and execute code from a library in the current directory","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libtool-0:1.5.6-5.el4_8","gcc-0:4.1.2-46.el5_4.2","libtool-0:1.4.3-7","gcc-0:3.2.3-60","gcc-0:3.4.6-11.el4_8.1","libtool-0:1.5.22-7.el5_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3736.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unzip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unzip_security_api_results.json
new file mode 100644
index 0000000..7a4cae8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/unzip_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-13232","severity":"low","public_date":"2019-07-02T00:00:00Z","advisories":["RHSA-2020:2486","RHSA-2020:1181","RHSA-2020:1787"],"bugzilla":"1727761","bugzilla_description":"CVE-2019-13232 unzip: overlapping of files in ZIP container leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["unzip-0:6.0-43.el8","unzip-0:6.0-21.el7","unzip-0:6.0-20.el7_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-18384","severity":"low","public_date":"2018-09-28T00:00:00Z","advisories":["RHSA-2019:2159"],"bugzilla":"1642931","bugzilla_description":"CVE-2018-18384 unzip: Buffer overflow in list.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["unzip-0:6.0-20.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18384.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000035","severity":"low","public_date":"2018-02-07T00:00:00Z","advisories":[],"bugzilla":"1537043","bugzilla_description":"CVE-2018-1000035 unzip: Heap-based buffer overflow in fileio.c:UzpPassword function allows code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000035.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1000032","severity":"moderate","public_date":"2018-02-07T00:00:00Z","advisories":[],"bugzilla":"1537055","bugzilla_description":"CVE-2018-1000032 unzip: Heap-based buffer overflow in charset_to_intern()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000032.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1000031","severity":"low","public_date":"2018-02-07T00:00:00Z","advisories":[],"bugzilla":"1537059","bugzilla_description":"CVE-2018-1000031 unzip: Heap-based out-of-bounds write in fileio.c:set_zipfn_sgmnt_name() possibly causing crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000031.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000033","severity":"low","public_date":"2018-02-07T00:00:00Z","advisories":[],"bugzilla":"1537062","bugzilla_description":"CVE-2018-1000033 unzip: Heap-based out-of-bounds access in extract.c:ef_scan_for_stream() possibly causing crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000033.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000034","severity":"low","public_date":"2018-02-07T00:00:00Z","advisories":[],"bugzilla":"1543333","bugzilla_description":"CVE-2018-1000034 unzip: Invalid access in the LZMA compression algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000034.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9844","severity":"low","public_date":"2016-12-05T00:00:00Z","advisories":[],"bugzilla":"1401864","bugzilla_description":"CVE-2016-9844 unzip: methbuf[] buffer overflow in zipinfo's zi_short()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9844.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-7696","severity":"moderate","public_date":"2015-09-07T00:00:00Z","advisories":[],"bugzilla":"1260944","bugzilla_description":"CVE-2015-7696 CVE-2015-7697 unzip: Heap overflow and DoS in 6.0","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7696.json"},{"CVE":"CVE-2015-7697","severity":"moderate","public_date":"2015-09-07T00:00:00Z","advisories":[],"bugzilla":"1260944","bugzilla_description":"CVE-2015-7696 CVE-2015-7697 unzip: Heap overflow and DoS in 6.0","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7697.json"},{"CVE":"CVE-2015-1315","severity":"moderate","public_date":"2015-02-17T00:00:00Z","advisories":[],"bugzilla":"1192603","bugzilla_description":"CVE-2015-1315 unzip: charset_to_intern() buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1315.json"},{"CVE":"CVE-2014-8139","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":["RHSA-2015:0700"],"bugzilla":"1174844","bugzilla_description":"CVE-2014-8139 unzip: CRC32 verification heap-based buffer overread (oCERT-2014-011)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["unzip-0:6.0-15.ael7b","unzip-0:6.0-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8139.json"},{"CVE":"CVE-2014-8140","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":["RHSA-2015:0700"],"bugzilla":"1174851","bugzilla_description":"CVE-2014-8140 unzip: out-of-bounds write issue in test_compr_eb() (oCERT-2014-011)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-190->CWE-120","affected_packages":["unzip-0:6.0-15.ael7b","unzip-0:6.0-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8140.json"},{"CVE":"CVE-2014-8141","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":["RHSA-2015:0700"],"bugzilla":"1174856","bugzilla_description":"CVE-2014-8141 unzip: getZip64Data() out-of-bounds read issues (oCERT-2014-011)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["unzip-0:6.0-15.ael7b","unzip-0:6.0-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8141.json"},{"CVE":"CVE-2014-9913","severity":"low","public_date":"2014-11-03T00:00:00Z","advisories":[],"bugzilla":"1401865","bugzilla_description":"CVE-2014-9913 unzip: methbuf[] buffer overflow in unzip's list_files()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9913.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-9636","severity":"moderate","public_date":"2014-11-02T00:00:00Z","advisories":["RHSA-2015:0700"],"bugzilla":"1184985","bugzilla_description":"CVE-2014-9636 unzip: out-of-bounds read/write in test_compr_eb() in extract.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-122","affected_packages":["unzip-0:6.0-15.ael7b","unzip-0:6.0-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9636.json"},{"CVE":"CVE-2008-0888","severity":"moderate","public_date":"2008-03-17T00:00:00Z","advisories":["RHSA-2008:0196"],"bugzilla":"431438","bugzilla_description":"CVE-2008-0888 unzip: free() called for uninitialized or already freed pointer","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["unzip-0:5.50-36.EL3","unzip-0:5.50-31.EL2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0888.json"},{"CVE":"CVE-2005-4667","severity":"low","public_date":"2005-12-19T00:00:00Z","advisories":["RHBA-2007:0418","RHSA-2007:0203"],"bugzilla":"1617861","bugzilla_description":"CVE-2005-4667 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["unzip-0:5.50-35.EL3","unzip-0:5.51-9.EL4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4667.json"},{"CVE":"CVE-2005-2475","severity":"low","public_date":"2005-08-02T00:00:00Z","advisories":["RHBA-2007:0418","RHSA-2007:0203"],"bugzilla":"1617723","bugzilla_description":"CVE-2005-2475 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["unzip-0:5.50-35.EL3","unzip-0:5.51-9.EL4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2475.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-lib-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-lib-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-lib-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-lib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-lib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-lib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-se-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-se-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-se-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-se_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-se_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-se_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-systems-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-systems-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-systems-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-systems_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-systems_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uom-systems_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/upower-devel-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/upower-devel-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/upower-devel-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/upower-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/upower-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/upower-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/upower_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/upower_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/upower_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urlview_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urlview_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urlview_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-bookman-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-bookman-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-bookman-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-c059-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-c059-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-c059-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-d050000l-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-d050000l-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-d050000l-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-fonts-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-fonts-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-fonts-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-fonts-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-fonts-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-fonts-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-gothic-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-gothic-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-gothic-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-nimbus-mono-ps-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-nimbus-mono-ps-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-nimbus-mono-ps-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-nimbus-roman-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-nimbus-roman-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-nimbus-roman-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-nimbus-sans-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-nimbus-sans-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-nimbus-sans-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-p052-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-p052-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-p052-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-standard-symbols-ps-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-standard-symbols-ps-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-standard-symbols-ps-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-z003-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-z003-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/urw-base35-z003-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usb_modeswitch-data_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usb_modeswitch-data_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usb_modeswitch-data_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usb_modeswitch_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usb_modeswitch_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usb_modeswitch_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbguard-dbus_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbguard-dbus_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbguard-dbus_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbguard-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbguard-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbguard-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbguard_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbguard_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbguard_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbmuxd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbmuxd_security_api_results.json
new file mode 100644
index 0000000..b31ef06
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbmuxd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-5104","severity":"low","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1339988","bugzilla_description":"CVE-2016-5104 libimobiledevice: Sockets listening on INADDR_ANY","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5104.json"},{"CVE":"CVE-2012-0065","severity":"low","public_date":"2012-01-12T00:00:00Z","advisories":[],"bugzilla":"783318","bugzilla_description":"CVE-2012-0065 usbmuxd 1.0.7 receive_packet() Buffer Overflow Vulnerability","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0065.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbredir-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbredir-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbredir-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbredir_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbredir_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbredir_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbutils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbutils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usbutils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usermode-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usermode-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usermode-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usermode_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usermode_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/usermode_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/userspace-rcu-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/userspace-rcu-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/userspace-rcu-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/userspace-rcu_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/userspace-rcu_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/userspace-rcu_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ustr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ustr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ustr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/utf8proc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/utf8proc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/utf8proc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uthash-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uthash-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uthash-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/util-linux-user_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/util-linux-user_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/util-linux-user_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/util-linux_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/util-linux_security_api_results.json
new file mode 100644
index 0000000..d16a16a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/util-linux_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-7738","severity":"moderate","public_date":"2018-03-07T00:00:00Z","advisories":[],"bugzilla":"1552641","bugzilla_description":"CVE-2018-7738 util-linux: Shell command injection in unescaped bash-completed mount point names","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7738.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-2616","severity":"moderate","public_date":"2017-02-22T00:00:00Z","advisories":["RHSA-2017:0654","RHSA-2017:0907"],"bugzilla":"1418710","bugzilla_description":"CVE-2017-2616 util-linux: Sending SIGKILL to other processes with root privileges via su","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":["coreutils-0:8.4-46.el6","util-linux-0:2.23.2-33.el7_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-5011","severity":"low","public_date":"2016-07-11T00:00:00Z","advisories":["RHSA-2016:2605"],"bugzilla":"1349741","bugzilla_description":"CVE-2016-5011 util-linux: Extended partition loop in MBR partition table leads to DOS","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["util-linux-0:2.23.2-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5011.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.6"},{"CVE":"CVE-2016-2779","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312852","bugzilla_description":"CVE-2016-2779 util-linux: runuser tty hijack via TIOCSTI ioctl","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-270","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2779.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2015-5218","severity":"low","public_date":"2015-09-02T00:00:00Z","advisories":[],"bugzilla":"1259322","bugzilla_description":"CVE-2015-5218 colcrt: global-buffer-overflow","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5218.json"},{"CVE":"CVE-2015-5224","severity":"low","public_date":"2015-08-24T00:00:00Z","advisories":[],"bugzilla":"1256686","bugzilla_description":"CVE-2015-5224 util-linux: File name collision due to incorrect mkstemp use","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5224.json"},{"CVE":"CVE-2014-9114","severity":"moderate","public_date":"2014-11-26T00:00:00Z","advisories":[],"bugzilla":"1168485","bugzilla_description":"CVE-2014-9114 util-linux: command injection flaw in blkid","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9114.json"},{"CVE":"CVE-2013-0157","severity":"low","public_date":"2013-01-05T00:00:00Z","advisories":["RHSA-2013:0517"],"bugzilla":"892330","bugzilla_description":"CVE-2013-0157 util-linux: mount folder existence information disclosure","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["util-linux-ng-0:2.17.2-12.9.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0157.json"},{"CVE":"CVE-2011-1675","severity":"low","public_date":"2011-03-03T00:00:00Z","advisories":["RHSA-2012:0307","RHSA-2011:1691"],"bugzilla":"695916","bugzilla_description":"CVE-2011-1675 util-linux: mount fails to anticipate RLIMIT_FSIZE","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["util-linux-ng-0:2.17.2-12.4.el6","util-linux-0:2.13-0.59.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1675.json"},{"CVE":"CVE-2011-1676","severity":null,"public_date":"2011-03-03T00:00:00Z","advisories":[],"bugzilla":"695921","bugzilla_description":"CVE-2011-1676 util-linux: mount does not remove /etc/mtab.tmp after failed mount entry addition","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1676.json"},{"CVE":"CVE-2011-1677","severity":"low","public_date":"2011-03-03T00:00:00Z","advisories":["RHSA-2012:0307","RHSA-2011:1691"],"bugzilla":"695924","bugzilla_description":"CVE-2011-1677 util-linux: umount may fail to remove /etc/mtab~ lock file","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["util-linux-ng-0:2.17.2-12.4.el6","util-linux-0:2.13-0.59.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1677.json"},{"CVE":"CVE-2011-0721","severity":"moderate","public_date":"2011-02-15T00:00:00Z","advisories":[],"bugzilla":"678897","bugzilla_description":"CVE-2011-0721 shadow: Multiple CRLF injections in chfn and chsh","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0721.json"},{"CVE":"CVE-2010-3879","severity":"low","public_date":"2010-11-02T00:00:00Z","advisories":["RHSA-2011:1083"],"bugzilla":"651183","bugzilla_description":"CVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["fuse-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3879.json"},{"CVE":"CVE-2011-0541","severity":"low","public_date":"2010-11-02T00:00:00Z","advisories":["RHSA-2011:1083"],"bugzilla":"651183","bugzilla_description":"CVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["fuse-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0541.json"},{"CVE":"CVE-2011-0542","severity":"low","public_date":"2010-11-02T00:00:00Z","advisories":["RHSA-2011:1083"],"bugzilla":"651183","bugzilla_description":"CVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["fuse-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0542.json"},{"CVE":"CVE-2011-0543","severity":"low","public_date":"2010-11-02T00:00:00Z","advisories":["RHSA-2011:1083"],"bugzilla":"651183","bugzilla_description":"CVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack","cvss_score":2.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["fuse-0:2.8.3-3.el6_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0543.json"},{"CVE":"CVE-2008-1926","severity":"low","public_date":"2008-04-21T00:00:00Z","advisories":["RHBA-2009:0070","RHSA-2009:0981"],"bugzilla":"443925","bugzilla_description":"CVE-2008-1926 util-linux: audit log injection via login","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/AU:N/C:N/I:P/A:N","CWE":null,"affected_packages":["util-linux-0:2.12a-24.el4","util-linux-0:2.13-0.50.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1926.json"},{"CVE":"CVE-2007-5191","severity":"moderate","public_date":"2007-09-20T00:00:00Z","advisories":["RHSA-2007:0969"],"bugzilla":"320041","bugzilla_description":"CVE-2007-5191 util-linux (u)mount doesn't drop privileges properly when calling helpers","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["util-linux-0:2.12a-17.el4_6.1","util-linux-0:2.11y-31.24","util-linux-0:2.13-0.45.el5_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5191.json"},{"CVE":"CVE-2006-7108","severity":"low","public_date":"2006-01-09T00:00:00Z","advisories":["RHSA-2007:0235"],"bugzilla":"1618255","bugzilla_description":"CVE-2006-7108 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["util-linux-0:2.12a-16.EL4.25"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7108.json"},{"CVE":"CVE-2005-2876","severity":"moderate","public_date":"2005-09-13T00:00:00Z","advisories":["RHSA-2005:782"],"bugzilla":"1617764","bugzilla_description":"CVE-2005-2876 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["util-linux-0:2.12a-16.EL4.12","util-linux-0:2.11y-31.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2876.json"},{"CVE":"CVE-2001-1494","severity":"low","public_date":"2001-12-12T00:00:00Z","advisories":["RHSA-2005:782"],"bugzilla":"1616708","bugzilla_description":"CVE-2001-1494 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["util-linux-0:2.12a-16.EL4.12","util-linux-0:2.11y-31.11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2001-1494.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uuid-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uuid-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uuid-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uuid_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uuid_security_api_results.json
new file mode 100644
index 0000000..b449165
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uuid_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-8851","severity":"moderate","public_date":"2016-03-30T00:00:00Z","advisories":["RHBA-2016:1343"],"bugzilla":"1327056","bugzilla_description":"CVE-2015-8851 nodejs-node-uuid: insecure entropy source - Math.random()","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8851.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uuidd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uuidd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/uuidd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vala-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vala-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vala-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vala_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vala_security_api_results.json
new file mode 100644
index 0000000..133b008
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vala_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-8154","severity":"important","public_date":"2015-01-13T00:00:00Z","advisories":[],"bugzilla":"1181404","bugzilla_description":"CVE-2014-8154 Vala: Heap-buffer overflow in vala-gstreamer bindings at Gst.MapInfo()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8154.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/valgrind-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/valgrind-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/valgrind-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/valgrind_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/valgrind_security_api_results.json
new file mode 100644
index 0000000..d203409
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/valgrind_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2008-4865","severity":"low","public_date":"2008-10-27T00:00:00Z","advisories":["RHEA-2010:0272"],"bugzilla":"469657","bugzilla_description":"CVE-2008-4865 valgrind: .valgrindrc loaded from untrusted locations","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["valgrind-1:3.5.0-1.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4865.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish-modules_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish-modules_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish-modules_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish_security_api_results.json
new file mode 100644
index 0000000..062a57c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/varnish_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-11653","severity":"moderate","public_date":"2020-02-04T00:00:00Z","advisories":[],"bugzilla":"1813867","bugzilla_description":"CVE-2020-11653 varnish: remote clients may cause Varnish to assert and restart which could result in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11653.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20637","severity":"low","public_date":"2019-10-21T00:00:00Z","advisories":[],"bugzilla":"1772362","bugzilla_description":"CVE-2019-20637 varnish: not clearing pointer between two client requests leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20637.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-15892","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":[],"bugzilla":"1756079","bugzilla_description":"CVE-2019-15892 varnish: denial of service handling certain crafted HTTP/1 requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15892.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-8807","severity":"moderate","public_date":"2017-11-15T00:00:00Z","advisories":[],"bugzilla":"1513523","bugzilla_description":"CVE-2017-8807 varnish: Data leak - ‘-sfile’ Stevedore transient objects","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-12425","severity":"moderate","public_date":"2017-08-02T00:00:00Z","advisories":[],"bugzilla":"1477222","bugzilla_description":"CVE-2017-12425 varnish: Missing check for integer overflow when handling chunk sizes in HTTP requests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12425.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2015-8852","severity":"important","public_date":"2015-03-12T00:00:00Z","advisories":[],"bugzilla":"1328361","bugzilla_description":"CVE-2015-8852 varnish: http smuggling issues","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-113","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8852.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vdo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vdo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vdo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity-demo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity-demo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity-demo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity-manual_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity-manual_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity-manual_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/velocity_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/veritysetup_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/veritysetup_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/veritysetup_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vhostmd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vhostmd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vhostmd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-X11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-X11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-X11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-enhanced_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-enhanced_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-enhanced_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-minimal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-minimal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vim-minimal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vinagre_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vinagre_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vinagre_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vino_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vino_security_api_results.json
new file mode 100644
index 0000000..68201af
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vino_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-14405","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860325","bugzilla_description":"CVE-2020-14405 libvncserver: libvncclient/rfbproto.c does not limit TextChat size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-14403","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860334","bugzilla_description":"CVE-2020-14403 libvncserver: libvncserver/hextile.c allows out-of-bounds access via encodings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14403.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-14404","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860337","bugzilla_description":"CVE-2020-14404 libvncserver: libvncserver/rre.c allows out-of-bounds access via encodings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14404.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2020-14396","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860340","bugzilla_description":"CVE-2020-14396 libvncserver: libvncclient/tls_openssl.c has a NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14396.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14397","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860344","bugzilla_description":"CVE-2020-14397 libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14397.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14398","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860348","bugzilla_description":"CVE-2020-14398 libvncserver: an improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14398.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-14399","severity":null,"public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860354","bugzilla_description":"CVE-2020-14399 libvncserver: byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14399.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-14400","severity":null,"public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860361","bugzilla_description":"CVE-2020-14400 libvncserver: byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14400.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-14401","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860364","bugzilla_description":"CVE-2020-14401 libvncserver: libvncserver/scale.c has a pixel_value integer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14401.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2020-14402","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1860367","bugzilla_description":"CVE-2020-14402 libvncserver: libvncserver/corre.c allows out-of-bounds access via encodings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14402.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2019-15681","severity":"low","public_date":"2019-10-30T00:00:00Z","advisories":[],"bugzilla":"1854761","bugzilla_description":"CVE-2019-15681 libvncserver: information disclosure and ASLR bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15681.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2012-4429","severity":"moderate","public_date":"2012-06-20T00:00:00Z","advisories":["RHSA-2013:0169"],"bugzilla":"857250","bugzilla_description":"CVE-2012-4429 vino: information leak and authentication bypass","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["vino-0:2.28.1-8.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4429.json"},{"CVE":"CVE-2011-0904","severity":"low","public_date":"2011-05-02T00:00:00Z","advisories":["RHSA-2013:0169"],"bugzilla":"694455","bugzilla_description":"CVE-2011-0904 vino: Out of bounds read flaw by processing certain client raw encoding framebuffer update requests","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["vino-0:2.28.1-8.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0904.json"},{"CVE":"CVE-2011-0905","severity":"low","public_date":"2011-05-02T00:00:00Z","advisories":["RHSA-2013:0169"],"bugzilla":"694456","bugzilla_description":"CVE-2011-0905 vino: Out of bounds read flaw by processing certain client tight encoding framebuffer update requests","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["vino-0:2.28.1-8.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0905.json"},{"CVE":"CVE-2013-5745","severity":"moderate","public_date":"2010-04-21T00:00:00Z","advisories":["RHSA-2013:1452"],"bugzilla":"910082","bugzilla_description":"CVE-2013-5745 vino: denial of service flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["vino-0:2.28.1-9.el6_4","vino-0:2.13.5-10.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5745.json"},{"CVE":"CVE-2011-1165","severity":"low","public_date":"2009-09-08T00:00:00Z","advisories":["RHSA-2013:0169"],"bugzilla":"678846","bugzilla_description":"CVE-2011-1165 vino-preferences does not warn about UPnP especially with no password and no confirmation.","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["vino-0:2.28.1-8.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1165.json"},{"CVE":"CVE-2011-1164","severity":"low","public_date":"2009-03-17T00:00:00Z","advisories":["RHSA-2013:0169"],"bugzilla":"553477","bugzilla_description":"CVE-2011-1164 vino: vino-preferences incorrectly indicates that computer is only reachable over local network","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["vino-0:2.28.1-8.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1164.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-dib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-dib_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-dib_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-install_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-install_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-install_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-manager-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-manager-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-manager-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-manager_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-manager_security_api_results.json
new file mode 100644
index 0000000..d70b59a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-manager_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-10183","severity":"low","public_date":"2019-07-02T00:00:00Z","advisories":["RHSA-2019:3464"],"bugzilla":"1726232","bugzilla_description":"CVE-2019-10183 virt-install: unattended option leaks password via command line argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["virt-manager-0:2.2.1-2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10183.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-p2v-maker_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-p2v-maker_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-p2v-maker_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-top_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-top_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-top_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-v2v_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-v2v_security_api_results.json
new file mode 100644
index 0000000..26adc43
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-v2v_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-1773","severity":"low","public_date":"2010-01-23T00:00:00Z","advisories":["RHSA-2011:1615"],"bugzilla":"702754","bugzilla_description":"CVE-2011-1773 virt-v2v: vnc password protection is missing after vm conversion","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["virt-v2v-0:0.8.3-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1773.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-viewer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-viewer_security_api_results.json
new file mode 100644
index 0000000..909f978
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-viewer_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-9252","severity":"low","public_date":"2018-04-02T00:00:00Z","advisories":[],"bugzilla":"1565333","bugzilla_description":"CVE-2018-9252 jasper: reachable assertion in jpc_abstorelstepsize() in jpc_enc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9252.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9055","severity":"low","public_date":"2018-03-26T00:00:00Z","advisories":[],"bugzilla":"1561699","bugzilla_description":"CVE-2018-9055 jasper: reachable assertion in jpc_firstone() in jpc_math.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9055.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-3737","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523504","bugzilla_description":"CVE-2017-3737 openssl: Read/write after SSL object in error state","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3738","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523510","bugzilla_description":"CVE-2017-3738 openssl: rsaz_1024_mul_avx2 overflow bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3736","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1509169","bugzilla_description":"CVE-2017-3736 openssl: bn_sqrx8x_internal carry bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":["openssl-1:1.0.2k-12.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-1000257","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2017:3263","RHSA-2018:2486"],"bugzilla":"1503705","bugzilla_description":"CVE-2017-1000257 curl: IMAP FETCH response out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-42.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-5130","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2997"],"bugzilla":"1503537","bugzilla_description":"CVE-2017-5130 chromium-browser: heap overflow in libxml2","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["chromium-browser-0:62.0.3202.62-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5130.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-1000256","severity":"low","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1503658","bugzilla_description":"CVE-2017-1000256 libvirt: TLS certificate verification disabled for clients","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000256.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2017-15286","severity":"low","public_date":"2017-10-12T00:00:00Z","advisories":[],"bugzilla":"1510438","bugzilla_description":"CVE-2017-15286 sqlite: NULL pointer dereference in tableColumnList","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15286.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000254","severity":"moderate","public_date":"2017-10-04T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1495541","bugzilla_description":"CVE-2017-1000254 curl: FTP PWD response parser out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-15232","severity":"low","public_date":"2017-09-30T00:00:00Z","advisories":[],"bugzilla":"1500678","bugzilla_description":"CVE-2017-15232 libjpeg-turbo: NULL pointer dereference in jdpostct.c and jquant1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14229","severity":"moderate","public_date":"2017-09-11T00:00:00Z","advisories":[],"bugzilla":"1491853","bugzilla_description":"CVE-2017-14229 jasper: excessive looping in jpc_dec_tileinit()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14229.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14132","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":[],"bugzilla":"1489304","bugzilla_description":"CVE-2017-14132 jasper: heap-based buffer over-read in jas_image_ishomosamp()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-3735","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":["RHSA-2018:3221"],"bugzilla":"1486144","bugzilla_description":"CVE-2017-3735 openssl: Malformed X.509 IPAdressFamily could cause OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-13685","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":[],"bugzilla":"1488881","bugzilla_description":"CVE-2017-13685 sqlite: Local DoS via dump_callback function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13685.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-0379","severity":"moderate","public_date":"2017-08-27T00:00:00Z","advisories":[],"bugzilla":"1485921","bugzilla_description":"CVE-2017-0379 libgcrypt: Missing input validation for X25519 curve","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0379.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-13745","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488958","bugzilla_description":"CVE-2017-13745 jasper: reachable abort in jpc_dec_process_sot()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13745.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13746","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488959","bugzilla_description":"CVE-2017-13746 jasper: reachable assertion in jpc_dec_process_siz() - dec->numvtiles","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13746.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13747","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488960","bugzilla_description":"CVE-2017-13747 jasper: reachable assertion in jpc_floorlog2()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13747.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13748","severity":"moderate","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488961","bugzilla_description":"CVE-2017-13748 jasper: tile memory not released on image parsing errors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13748.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13749","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488962","bugzilla_description":"CVE-2017-13749 jasper: reachable assertion in jpc_pi_nextrpcl()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13749.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13750","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488963","bugzilla_description":"CVE-2017-13750 jasper: reachable assertion in jpc_dec_process_siz() - dec->numhtiles","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13750.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13751","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488964","bugzilla_description":"CVE-2017-13751 jasper: reachable assertion in calcstepsizes()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13751.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13752","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488965","bugzilla_description":"CVE-2017-13752 jasper: reachable assertion in jpc_dequantize()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13752.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000101","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1478309","bugzilla_description":"CVE-2017-1000101 curl: URL globbing out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2017-1000100","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1478310","bugzilla_description":"CVE-2017-1000100 curl: TFTP sends more than buffer size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-1000099","severity":"moderate","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1478316","bugzilla_description":"CVE-2017-1000099 curl: FILE buffer read out of bounds","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000099.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-9614","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475742","bugzilla_description":"CVE-2017-9614 libjpeg-turbo: Invalid memory access in the fill_input_buffer function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9614.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7000","severity":"moderate","public_date":"2017-07-25T00:00:00Z","advisories":["RHSA-2017:1833"],"bugzilla":"1475207","bugzilla_description":"CVE-2017-7000 chromium-browser: pointer disclosure in sqlite","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["chromium-browser-0:60.0.3112.78-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-10989","severity":"low","public_date":"2017-07-06T00:00:00Z","advisories":[],"bugzilla":"1469672","bugzilla_description":"CVE-2017-10989 sqlite: Heap-buffer overflow in the getNodeSize function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10989.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2017-7526","severity":"moderate","public_date":"2017-06-29T00:00:00Z","advisories":[],"bugzilla":"1466265","bugzilla_description":"CVE-2017-7526 libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-10790","severity":"low","public_date":"2017-06-22T00:00:00Z","advisories":[],"bugzilla":"1473192","bugzilla_description":"CVE-2017-10790 libtasn1: NULL pointer dereference in the _asn1_check_identifier function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10790.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9814","severity":"low","public_date":"2017-06-21T00:00:00Z","advisories":[],"bugzilla":"1472788","bugzilla_description":"CVE-2017-9814 cairo: Out-of-bounds read due to mishandling of unexpected malloc(0) call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9502","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1461321","bugzilla_description":"CVE-2017-9502 curl: URL file scheme drive letter buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9502.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-9233","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1462729","bugzilla_description":"CVE-2017-9233 expat: Inifinite loop due to invalid XML in external entity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-9782","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1463993","bugzilla_description":"CVE-2017-9782 jasper: cdef.ents[] heap-based buffer over-read in jp2_decode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9782.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7507","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:2292"],"bugzilla":"1454621","bugzilla_description":"CVE-2017-7507 gnutls: Crash upon receiving well-formed status_request extension","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-9526","severity":"low","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1459887","bugzilla_description":"CVE-2017-9526 libgcrypt: Possible timing attack on EdDSA session key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-6891","severity":"low","public_date":"2017-05-18T00:00:00Z","advisories":[],"bugzilla":"1456763","bugzilla_description":"CVE-2017-6891 libtasn1: Stack-based buffer overflow in asn1_find_node()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6891.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7475","severity":"low","public_date":"2017-04-23T00:00:00Z","advisories":[],"bugzilla":"1447949","bugzilla_description":"CVE-2017-7475 cairo: NULL pointer dereference with a crafted font file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7475.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7468","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443381","bugzilla_description":"CVE-2017-7468 curl: TLS session resumption client cert bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-7375","severity":"moderate","public_date":"2017-04-17T00:00:00Z","advisories":[],"bugzilla":"1462203","bugzilla_description":"CVE-2017-7375 libxml2: Missing validation for external entities in xmlParsePEReference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7375.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-7376","severity":"low","public_date":"2017-04-17T00:00:00Z","advisories":[],"bugzilla":"1462216","bugzilla_description":"CVE-2017-7376 libxml2: Incorrect limit used for port values","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-0663","severity":"moderate","public_date":"2017-04-17T00:00:00Z","advisories":[],"bugzilla":"1462225","bugzilla_description":"CVE-2017-0663 libxml2: Heap buffer overflow in xmlAddID","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0663.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-7869","severity":"moderate","public_date":"2017-04-14T00:00:00Z","advisories":["RHSA-2017:2292"],"bugzilla":"1443033","bugzilla_description":"CVE-2017-7869 gnutls: Out-of-bounds write related to the cdk_pkt_read function (GNUTLS-SA-2017-3)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-7407","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1439190","bugzilla_description":"CVE-2017-7407 curl: --write-out out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7407.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2017-2628","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":["RHSA-2017:0847"],"bugzilla":"1422464","bugzilla_description":"CVE-2017-2628 curl: negotiate not treated as connection-oriented (incomplete fix for CVE-2015-3148)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["curl-0:7.19.7-53.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2628.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-8287","severity":"moderate","public_date":"2017-03-26T00:00:00Z","advisories":[],"bugzilla":"1446073","bugzilla_description":"CVE-2017-8287 freetype: heap-based buffer overflow related to the t1_builder_close_contour function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8287.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-8105","severity":"moderate","public_date":"2017-03-24T00:00:00Z","advisories":[],"bugzilla":"1446500","bugzilla_description":"CVE-2017-8105 freetype: heap-based buffer overflow related to the t1_decoder_parse_charstrings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8105.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-7857","severity":"moderate","public_date":"2017-03-08T00:00:00Z","advisories":[],"bugzilla":"1444898","bugzilla_description":"CVE-2017-7857 freetype: heap-based buffer overflow related to the TT_Get_MM_Var function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7858","severity":"moderate","public_date":"2017-03-07T00:00:00Z","advisories":[],"bugzilla":"1444904","bugzilla_description":"CVE-2017-7858 freetype: out-of-bounds write related to the TT_Get_MM_Var and sfnt_init_face functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7858.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-1000050","severity":"low","public_date":"2017-03-05T00:00:00Z","advisories":["RHSA-2018:3253"],"bugzilla":"1472888","bugzilla_description":"CVE-2017-1000050 jasper: NULL pointer exception in jp2_encode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000050.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-2629","severity":"moderate","public_date":"2017-02-22T00:00:00Z","advisories":[],"bugzilla":"1425746","bugzilla_description":"CVE-2017-2629 curl: SSL_VERIFYSTATUS ignored","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-6313","severity":"moderate","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427217","bugzilla_description":"CVE-2017-6313 gdk-pixbuf: Integer underflow in io-icns.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-6314","severity":"low","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427218","bugzilla_description":"CVE-2017-6314 gdk-pixbuf: Infinite loop in io-tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6314.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6312","severity":"low","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427221","bugzilla_description":"CVE-2017-6312 gdk-pixbuf: Out-of-bounds read in io-ico.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6312.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-3733","severity":"important","public_date":"2017-02-16T00:00:00Z","advisories":[],"bugzilla":"1421695","bugzilla_description":"CVE-2017-3733 openssl: Encrypt-Then-Mac renegotiation crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3733.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-2635","severity":"moderate","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1427090","bugzilla_description":"CVE-2017-2635 libvirt: Null pointer dereference when updating storage size on empty drives","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2017-6311","severity":"low","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1427222","bugzilla_description":"CVE-2017-6311 gdk-pixbuf: NULL pointer dereference in gdk-pixbuf-thumbnailer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6311.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7864","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":[],"bugzilla":"1444911","bugzilla_description":"CVE-2017-7864 freetype: heap-based buffer overflow related to the tt_size_reset function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-5884","severity":"low","public_date":"2017-02-01T00:00:00Z","advisories":["RHSA-2017:2258"],"bugzilla":"1418944","bugzilla_description":"CVE-2017-5884 gtk-vnc: Improper check of framebuffer boundaries when processing a tile","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["gtk-vnc-0:0.7.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5884.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-5885","severity":"low","public_date":"2017-02-01T00:00:00Z","advisories":["RHSA-2017:2258"],"bugzilla":"1418952","bugzilla_description":"CVE-2017-5885 gtk-vnc: Integer overflow when processing SetColorMapEntries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["gtk-vnc-0:0.7.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5885.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-3731","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2017:0286","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416852","bugzilla_description":"CVE-2017-3731 openssl: Truncated packet could crash via OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["openssl-0:1.0.1e-48.el6_8.4","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3731.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3730","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":[],"bugzilla":"1416855","bugzilla_description":"CVE-2017-3730 openssl: Bad (EC)DHE parameters cause a client crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3730.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3732","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416856","bugzilla_description":"CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-6850","severity":"moderate","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1434458","bugzilla_description":"CVE-2017-6850 jasper: uninitialized pointer use in jp2_cdef_destroy()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6850.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-6852","severity":"moderate","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1434459","bugzilla_description":"CVE-2017-6852 jasper: Out of bounds heap read in jpc_dec_decodepkt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6852.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-6851","severity":"low","public_date":"2017-01-21T00:00:00Z","advisories":[],"bugzilla":"1435324","bugzilla_description":"CVE-2017-6851 jasper: Invalid memory read in jas_matrix_bindsub (jas_seq.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6851.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5844","severity":"low","public_date":"2017-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419600","bugzilla_description":"CVE-2017-5844 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5844.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5841","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419589","bugzilla_description":"CVE-2017-5841 gstreamer-plugins-good: Heap out-of-bounds read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5842","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419591","bugzilla_description":"CVE-2017-5842 gstreamer-plugins-base: Out-of-bounds heap read in html_context_handle_element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5843","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419592","bugzilla_description":"CVE-2017-5843 gstreamer-plugins-bad-free: Use after free in gst_mini_object_unref / gst_tag_list_unref / gst_mxf_demux_update_essence_tracks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5837","severity":"low","public_date":"2017-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419584","bugzilla_description":"CVE-2017-5837 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-7056","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1802","RHSA-2017:1801","RHBA-2017:1929"],"bugzilla":"1412120","bugzilla_description":"CVE-2016-7056 openssl: ECDSA P-256 timing attack key recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.0.2k-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7056.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-10087","severity":"low","public_date":"2016-12-29T00:00:00Z","advisories":[],"bugzilla":"1409617","bugzilla_description":"CVE-2016-10087 libpng: NULL pointer dereference in png_set_text_2()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9600","severity":"low","public_date":"2016-12-29T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1410026","bugzilla_description":"CVE-2016-9600 jasper: JP2 encoder NULL pointer dereference due to uninitialized cmprof_","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9600.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-9594","severity":"moderate","public_date":"2016-12-23T00:00:00Z","advisories":[],"bugzilla":"1408385","bugzilla_description":"CVE-2016-9594 curl: Unitialized random","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9594.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-10328","severity":"moderate","public_date":"2016-12-23T00:00:00Z","advisories":[],"bugzilla":"1444895","bugzilla_description":"CVE-2016-10328 freetype: heap-based buffer overflow related to the cff_parser_run function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10328.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9586","severity":"low","public_date":"2016-12-21T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1406712","bugzilla_description":"CVE-2016-9586 curl: printf floating point buffer overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9586.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-9591","severity":"low","public_date":"2016-12-16T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1406405","bugzilla_description":"CVE-2016-9591 jasper: use-after-free / double-free in JPC encoder","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9591.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9583","severity":"low","public_date":"2016-12-09T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1405148","bugzilla_description":"CVE-2016-9583 jasper: integer overflows leading to out of bounds read in packet iterators in JPC decoder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9583.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10198","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419558","bugzilla_description":"CVE-2016-10198 gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10199","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419580","bugzilla_description":"CVE-2016-10199 gstreamer-plugins-good: Out of bounds read in qtdemux_tag_add_str_full","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8872","severity":"low","public_date":"2016-11-28T00:00:00Z","advisories":[],"bugzilla":"1449541","bugzilla_description":"CVE-2017-8872 libxml2: Out-of-bounds read in htmlParseTryOrFinish","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8872.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2016-8654","severity":"important","public_date":"2016-11-25T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1399167","bugzilla_description":"CVE-2016-8654 jasper: heap-based buffer overflow in QMFB code in JPC codec","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8654.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9813","severity":"low","public_date":"2016-11-25T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401934","bugzilla_description":"CVE-2016-9813 gstreamer-plugins-bad-free: NULL pointer dereference in mpegts parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-476","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9812","severity":"low","public_date":"2016-11-24T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401930","bugzilla_description":"CVE-2016-9812 gstreamer1-plugins-bad-free: Out-of-bounds read in gst_mpegts_section_new","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9809","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021"],"bugzilla":"1401880","bugzilla_description":"CVE-2016-9809 gstreamer-plugins-bad-free: Off-by-one read in gst_h264_parse_set_caps","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":["gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9809.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9811","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1401918","bugzilla_description":"CVE-2016-9811 gstreamer: Out of bounds heap read in windows_icon_typefind","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9807","severity":"low","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1401874","bugzilla_description":"CVE-2016-9807 gstreamer-plugins-good: Invalid memory read in flx_decode_chunks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9634","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9635","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9636","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9808","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9560","severity":"important","public_date":"2016-11-20T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1398256","bugzilla_description":"CVE-2016-9560 jasper: stack-based buffer overflow in jpc_dec_tileinit()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9560.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-5503","severity":"moderate","public_date":"2016-11-20T00:00:00Z","advisories":[],"bugzilla":"1416056","bugzilla_description":"CVE-2017-5503 jasper: invalid memory write in dec_clnpass()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5503.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5505","severity":"moderate","public_date":"2016-11-20T00:00:00Z","advisories":[],"bugzilla":"1416068","bugzilla_description":"CVE-2017-5505 jasper: Invalid memory read in jas_matrix_asl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5505.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5504","severity":"moderate","public_date":"2016-11-20T00:00:00Z","advisories":[],"bugzilla":"1416069","bugzilla_description":"CVE-2017-5504 jasper: Invalid memory read in jpc_undo_roi","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5504.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-9396","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2018:3253"],"bugzilla":"1396978","bugzilla_description":"CVE-2016-9396 jasper: reachable assertion in JPC_NOMINALGAIN()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9396.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9397","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396979","bugzilla_description":"CVE-2016-9397 jasper: reachable assertion in jpc_dequantize()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9397.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9398","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396980","bugzilla_description":"CVE-2016-9398 jasper: reachable assertion in jpc_floorlog2()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9398.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9399","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396981","bugzilla_description":"CVE-2016-9399 jasper: reachable assertion in calcstepsizes()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9445","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021","RHSA-2016:2974"],"bugzilla":"1395767","bugzilla_description":"CVE-2016-9445 gstreamer-plugins-bad-free: Integer overflow when allocating render buffer in VMnc decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9445.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9063","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396540","bugzilla_description":"CVE-2016-9063 firefox: Possible integer overflow to fix inside XML_Parse in Expat","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9063.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9447","severity":"moderate","public_date":"2016-11-14T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2016:2974"],"bugzilla":"1395126","bugzilla_description":"CVE-2016-9447 gstreamer-plugins-bad-free: Memory corruption flaw in NSF decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9395","severity":"low","public_date":"2016-11-12T00:00:00Z","advisories":[],"bugzilla":"1396977","bugzilla_description":"CVE-2016-9395 jasper: reachable assertion failure in jas_seq2d_create()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9395.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9557","severity":"low","public_date":"2016-11-12T00:00:00Z","advisories":[],"bugzilla":"1398251","bugzilla_description":"CVE-2016-9557 jasper: signed integer overflow in jas_image_create()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9557.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9262","severity":"moderate","public_date":"2016-11-06T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1393882","bugzilla_description":"CVE-2016-9262 jasper: integer truncation in jas_image_cmpt_create()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9262.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10251","severity":"low","public_date":"2016-11-04T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1434461","bugzilla_description":"CVE-2016-10251 jasper: integer overflow in jpc_pi_nextcprl(), leading to out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10251.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8615","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388370","bugzilla_description":"CVE-2016-8615 curl: Cookie injection for other servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-99","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8616","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388371","bugzilla_description":"CVE-2016-8616 curl: Case insensitive password comparison","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8616.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-8617","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388377","bugzilla_description":"CVE-2016-8617 curl: Out-of-bounds write via unchecked multiplication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-787","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8618","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388378","bugzilla_description":"CVE-2016-8618 curl: Double-free in curl_maprintf","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8619","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388379","bugzilla_description":"CVE-2016-8619 curl: Double-free in krb5 code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8619.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8620","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1388382","bugzilla_description":"CVE-2016-8620 curl: Glob parser write/read out of bounds","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-120","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8620.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-8621","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388385","bugzilla_description":"CVE-2016-8621 curl: curl_getdate out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8621.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8622","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388386","bugzilla_description":"CVE-2016-8622 curl: URL unescape heap overflow via integer truncation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-190->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-8623","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388388","bugzilla_description":"CVE-2016-8623 curl: Use-after-free via shared cookies","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8623.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8624","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388390","bugzilla_description":"CVE-2016-8624 curl: Invalid URL parsing with '#'","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8625","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388392","bugzilla_description":"CVE-2016-8625 curl: IDNA 2003 makes curl use wrong host","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8625.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9392","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396971","bugzilla_description":"CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 jasper: insufficient SIZ marker segment data sanity checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9392.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9393","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396971","bugzilla_description":"CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 jasper: insufficient SIZ marker segment data sanity checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9393.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9394","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396971","bugzilla_description":"CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 jasper: insufficient SIZ marker segment data sanity checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9394.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5498","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416060","bugzilla_description":"CVE-2017-5498 jasper: Left shift of negative value in jas_fast32_asl() in jas_math.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5498.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5499","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416061","bugzilla_description":"CVE-2017-5499 jasper: Signed integer overflow in jpc_dequantize() in jpc_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5499.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5500","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416063","bugzilla_description":"CVE-2017-5500 jasper: Invalid exponent shift in jpc_calcabsstepsize() in jpc_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5500.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5501","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416064","bugzilla_description":"CVE-2017-5501 jasper: Signed integer overflow in jpc_tsfb_getbands2() in jpc_tsfb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5501.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5502","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416066","bugzilla_description":"CVE-2017-5502 jasper: Left shift of negative value in jp2_validate() in jp2_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5502.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9391","severity":"low","public_date":"2016-10-25T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396967","bugzilla_description":"CVE-2016-9391 jasper: reachable assertions in the JPC bitstream code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9391.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9388","severity":"low","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396962","bugzilla_description":"CVE-2016-9388 jasper: reachable assertions in RAS encoder/decoder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9388.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9389","severity":"low","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396963","bugzilla_description":"CVE-2016-9389 jasper: reachable assertions caused by insufficient component domains checks in ICT/RCT in JPC codec","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9389.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9390","severity":"low","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396965","bugzilla_description":"CVE-2016-9390 jasper: insufficient SIZ marker tilexoff and tileyoff checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9390.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10249","severity":"important","public_date":"2016-10-23T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1388840","bugzilla_description":"CVE-2016-10249 jasper: integer overflow in jas_matrix_create()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10249.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9387","severity":"low","public_date":"2016-10-23T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396959","bugzilla_description":"CVE-2016-9387 jasper: integer overflow in jpc_dec_process_siz()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-190","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9387.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2016-10248","severity":"low","public_date":"2016-10-20T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1434447","bugzilla_description":"CVE-2016-10248 jasper: NULL pointer dereference in jpc_tsfb_synthesize()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10248.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8887","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1388828","bugzilla_description":"CVE-2016-8887 jasper: uninitialized pointer use in jp2_box_get()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8887.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10250","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1388829","bugzilla_description":"CVE-2016-10250 jasper: Null pointer dereference in jp2_colr_destroy (incomplete fix for CVE-2016-8887)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10250.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8886","severity":"low","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1388880","bugzilla_description":"CVE-2016-8886 jasper: no upper limit on memory allocations in jas_malloc()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8886.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8880","severity":null,"public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1388863","bugzilla_description":"CVE-2016-8880 jasper: heap buffer overflow in jpc_dec_cp_setfromcox() (rejected duplicate of CVE-2011-4516)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8880.json"},{"CVE":"CVE-2016-8881","severity":null,"public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1388864","bugzilla_description":"CVE-2016-8881 jasper: insufficient memory allocation in jpc_crg_getparms() (rejected duplicate of CVE-2011-4517)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8881.json"},{"CVE":"CVE-2016-8882","severity":"moderate","public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1388866","bugzilla_description":"CVE-2016-8882 jasper: uninitialized tile->pi pointer use in JPC decoder","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8883","severity":"low","public_date":"2016-10-17T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1388870","bugzilla_description":"CVE-2016-8883 jasper: reachable asserts in jpc_dec_tiledecode()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8883.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8690","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385499","bugzilla_description":"CVE-2016-8690 CVE-2016-8884 CVE-2016-8885 jasper: missing jas_matrix_create() parameter checks","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8690.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8884","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385499","bugzilla_description":"CVE-2016-8690 CVE-2016-8884 CVE-2016-8885 jasper: missing jas_matrix_create() parameter checks","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8884.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8885","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385499","bugzilla_description":"CVE-2016-8690 CVE-2016-8884 CVE-2016-8885 jasper: missing jas_matrix_create() parameter checks","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8691","severity":"low","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385502","bugzilla_description":"CVE-2016-8691 CVE-2016-8692 jasper: missing SIZ marker segment XRsiz and YRsiz fields range check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-369","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8691.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8692","severity":"low","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385502","bugzilla_description":"CVE-2016-8691 CVE-2016-8692 jasper: missing SIZ marker segment XRsiz and YRsiz fields range check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-369","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8692.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8693","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385507","bugzilla_description":"CVE-2016-8693 jasper: incorrect handling of bufsize 0 in mem_resize()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8693.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9082","severity":"low","public_date":"2016-10-05T00:00:00Z","advisories":[],"bugzilla":"1312337","bugzilla_description":"CVE-2016-9082 cairo: Out of bounds read in read_png/write_png in cairo-png.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9082.json"},{"CVE":"CVE-2016-7167","severity":"low","public_date":"2016-09-14T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2017:2016","RHSA-2018:2486"],"bugzilla":"1375906","bugzilla_description":"CVE-2016-7167 curl: escape and unescape integer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["curl-0:7.29.0-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2016-7141","severity":"low","public_date":"2016-09-05T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1373229","bugzilla_description":"CVE-2016-7141 curl: Incorrect reuse of client certificates","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7141.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-10244","severity":"moderate","public_date":"2016-08-25T00:00:00Z","advisories":[],"bugzilla":"1429965","bugzilla_description":"CVE-2016-10244 freetype: parse_charstrings function in type1/t1load.c does not ensure that a font contains a glyph name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-4973","severity":"moderate","public_date":"2016-08-17T00:00:00Z","advisories":[],"bugzilla":"1324759","bugzilla_description":"CVE-2016-4973 gcc: Targets using libssp for SSP are missing -D_FORTIFY_SOURCE functionality","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4973.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2016-5384","severity":"moderate","public_date":"2016-08-05T00:00:00Z","advisories":["RHSA-2016:2601"],"bugzilla":"1350891","bugzilla_description":"CVE-2016-5384 fontconfig: Possible double free due to insufficiently validated cache files","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["fontconfig-0:2.10.95-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5384.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2016-5419","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1362183","bugzilla_description":"CVE-2016-5419 curl: TLS session resumption client cert bypass","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5419.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-5420","severity":"low","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1362190","bugzilla_description":"CVE-2016-5420 curl: Re-using connection with wrong client cert","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5420.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-5421","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1362199","bugzilla_description":"CVE-2016-5421 curl: Use of connection struct after free","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5421.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-6352","severity":"moderate","public_date":"2016-07-13T00:00:00Z","advisories":[],"bugzilla":"1349751","bugzilla_description":"CVE-2016-6352 gdk-pixbuf: Out-of-bounds write in OneLine32() function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6352.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-4456","severity":"moderate","public_date":"2016-06-06T00:00:00Z","advisories":[],"bugzilla":"1343505","bugzilla_description":"CVE-2016-4456 gnutls: Environment variable GNUTLS_KEYLOGFILE is obtained via insecure getenv()","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2016-3739","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1335430","bugzilla_description":"CVE-2016-3739 curl: TLS certificate name check bypass with mbedTLS and PolarSSL","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3739.json"},{"CVE":"CVE-2016-4008","severity":"moderate","public_date":"2016-04-11T00:00:00Z","advisories":[],"bugzilla":"1325965","bugzilla_description":"CVE-2016-4008 libtasn1: infinite loop while parsing DER certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4008.json"},{"CVE":"CVE-2016-3616","severity":"moderate","public_date":"2016-03-30T00:00:00Z","advisories":["RHSA-2019:2052"],"bugzilla":"1319661","bugzilla_description":"CVE-2016-3616 libjpeg: null pointer dereference in cjpeg","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3616.json"},{"CVE":"CVE-2016-1577","severity":"moderate","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1314466","bugzilla_description":"CVE-2016-1577 jasper: double free issue in jas_iccattrval_destroy()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1577.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-2116","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1314472","bugzilla_description":"CVE-2016-2116 jasper: memory leak in jas_iccprof_createfrombuf()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2116.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5848","severity":"low","public_date":"2016-01-30T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419583","bugzilla_description":"CVE-2017-5848 gstreamer-plugins-bad-free: Invalid memory read in gst_ps_demux_parse_psm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5848.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-2089","severity":"low","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1302636","bugzilla_description":"CVE-2016-2089 jasper: matrix rows_ NULL pointer dereference in jas_matrix_clip()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2089.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2015-7552","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHBA-2017:2100"],"bugzilla":"1378894","bugzilla_description":"CVE-2015-7552 gdk-pixbuf: Heap-based buffer overflow in the gdk_pixbuf_flip function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["gdk-pixbuf2-0:2.36.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7552.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5845","severity":"low","public_date":"2016-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419582","bugzilla_description":"CVE-2017-5845 gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5845.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5840","severity":"low","public_date":"2016-01-18T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419588","bugzilla_description":"CVE-2017-5840 gstreamer-plugins-good: Out of bounds heap read in qtdemux_parse_samples","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5839","severity":"low","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419586","bugzilla_description":"CVE-2017-5839 gstreamer-plugins-base: Stack overflow in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5839.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5838","severity":"low","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419587","bugzilla_description":"CVE-2017-5838 gstreamer: Out-of-bounds read in gst_date_time_new_from_iso8601_string()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer1-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5838.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-1867","severity":"low","public_date":"2016-01-13T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1298135","bugzilla_description":"CVE-2016-1867 jasper: out-of-bounds read in jpc_pi_nextcprl()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1867.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2015-8751","severity":"moderate","public_date":"2015-12-24T00:00:00Z","advisories":[],"bugzilla":"1296949","bugzilla_description":"CVE-2015-8751 jasper: integer overflow in the jas_matrix_create() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8751.json"},{"CVE":"CVE-2015-5203","severity":"moderate","public_date":"2015-08-16T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1254242","bugzilla_description":"CVE-2015-5203 jasper: integer overflow in jas_image_cmpt_create()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5203.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-3622","severity":"moderate","public_date":"2015-04-30T00:00:00Z","advisories":["RHSA-2017:1860"],"bugzilla":"1218141","bugzilla_description":"CVE-2015-3622 libtasn1: heap overflow flaw in _asn1_extract_der_octet()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libtasn1-0:4.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-3153","severity":"moderate","public_date":"2015-04-29T00:00:00Z","advisories":[],"bugzilla":"1217341","bugzilla_description":"CVE-2015-3153 curl: sensitive HTTP server headers also sent to proxies","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3153.json"},{"CVE":"CVE-2015-3143","severity":"moderate","public_date":"2015-04-22T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1213306","bugzilla_description":"CVE-2015-3143 curl: re-using authenticated connection when unauthenticated","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3143.json"},{"CVE":"CVE-2015-3144","severity":"low","public_date":"2015-04-22T00:00:00Z","advisories":[],"bugzilla":"1213335","bugzilla_description":"CVE-2015-3144 curl: host name out of boundary memory access","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-129->CWE-131->CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3144.json"},{"CVE":"CVE-2015-3145","severity":"low","public_date":"2015-04-22T00:00:00Z","advisories":[],"bugzilla":"1213347","bugzilla_description":"CVE-2015-3145 curl: cookie parser out of boundary memory access","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-129->CWE-131->CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3145.json"},{"CVE":"CVE-2015-3148","severity":"moderate","public_date":"2015-04-22T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1213351","bugzilla_description":"CVE-2015-3148 curl: Negotiate not treated as connection-oriented","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3148.json"},{"CVE":"CVE-2015-3308","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":[],"bugzilla":"1212459","bugzilla_description":"CVE-2015-3308 gnutls: use-after-free flaw in CRL distribution points parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3308.json"},{"CVE":"CVE-2015-2806","severity":"low","public_date":"2015-03-26T00:00:00Z","advisories":["RHSA-2017:1860"],"bugzilla":"1207192","bugzilla_description":"CVE-2015-2806 libtasn1: stack overflow in asn1_der_decoding","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtasn1-0:4.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2806.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-0291","severity":"important","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202338","bugzilla_description":"CVE-2015-0291 openssl: ClientHello sigalgs NULL pointer dereference DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0291.json"},{"CVE":"CVE-2015-0290","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202345","bugzilla_description":"CVE-2015-0290 openssl: multiblock corrupted pointer","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0290.json"},{"CVE":"CVE-2015-0207","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202351","bugzilla_description":"CVE-2015-0207 openssl: DTLS segmentation fault in DTLSv1_listen","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0207.json"},{"CVE":"CVE-2015-0286","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0752","RHSA-2016:2957","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202366","bugzilla_description":"CVE-2015-0286 openssl: invalid pointer use in ASN1_TYPE_cmp()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822->CWE-125","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0286.json"},{"CVE":"CVE-2015-0208","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202369","bugzilla_description":"CVE-2015-0208 openssl: segmentation fault for invalid PSS parameters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0208.json"},{"CVE":"CVE-2015-0287","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202380","bugzilla_description":"CVE-2015-0287 openssl: ASN.1 structure reuse memory corruption","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0287.json"},{"CVE":"CVE-2015-0289","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202384","bugzilla_description":"CVE-2015-0289 openssl: PKCS7 NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0289.json"},{"CVE":"CVE-2015-0292","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202395","bugzilla_description":"CVE-2015-0292 openssl: integer underflow leading to buffer overflow in base64 decoding","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-120","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0292.json"},{"CVE":"CVE-2015-0293","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2016:0490","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0445","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1202404","bugzilla_description":"CVE-2015-0293 openssl: assertion failure in SSLv2 servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0293.json"},{"CVE":"CVE-2015-1787","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202406","bugzilla_description":"CVE-2015-1787 openssl: segmentation fault in client authentication with empty CKE and DHE","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1787.json"},{"CVE":"CVE-2015-0285","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202410","bugzilla_description":"CVE-2015-0285 openssl: handshake with unseeded PRNG","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-335","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0285.json"},{"CVE":"CVE-2015-0288","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHEA-2015:1770","RHEA-2015:1771","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202418","bugzilla_description":"CVE-2015-0288 openssl: X509_to_X509_REQ NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0288.json"},{"CVE":"CVE-2009-5146","severity":"moderate","public_date":"2015-03-16T00:00:00Z","advisories":[],"bugzilla":"1203232","bugzilla_description":"CVE-2009-5146 openssl: memory leak in hostname TLS extension","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5146.json"},{"CVE":"CVE-2015-0282","severity":"moderate","public_date":"2015-03-11T00:00:00Z","advisories":["RHSA-2015:1457"],"bugzilla":"1194371","bugzilla_description":"CVE-2015-0282 gnutls: RSA PKCS#1 signature verification forgery","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["gnutls-0:2.8.5-18.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0282.json"},{"CVE":"CVE-2015-0294","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":["RHSA-2015:1457"],"bugzilla":"1196323","bugzilla_description":"CVE-2015-0294 gnutls: certificate algorithm consistency checking issue","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-295","affected_packages":["gnutls-0:2.8.5-18.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0294.json"},{"CVE":"CVE-2014-3591","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198145","bugzilla_description":"CVE-2014-3591 libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3591.json"},{"CVE":"CVE-2015-0837","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198147","bugzilla_description":"CVE-2015-0837 libgcrypt: last-level cache side-channel attack","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0837.json"},{"CVE":"CVE-2015-0209","severity":"low","public_date":"2015-02-09T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:0752","RHSA-2016:2957","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1196737","bugzilla_description":"CVE-2015-0209 openssl: use-after-free on invalid EC private key import","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0209.json"},{"CVE":"CVE-2014-9674","severity":"important","public_date":"2015-02-08T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191190","bugzilla_description":"CVE-2014-9674 freetype: multiple integer overflows Mac_Read_POST_Resource() leading to heap-based buffer overflows","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9674.json"},{"CVE":"CVE-2014-9675","severity":"low","public_date":"2015-02-08T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191192","bugzilla_description":"CVE-2014-9675 freetype: information leak in _bdf_add_property()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9675.json"},{"CVE":"CVE-2016-5008","severity":"moderate","public_date":"2015-01-18T00:00:00Z","advisories":["RHSA-2016:2577"],"bugzilla":"1351514","bugzilla_description":"CVE-2016-5008 libvirt: Setting empty VNC password allows access to unauthorized users","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libvirt-0:2.0.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5008.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2014-8150","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1178692","bugzilla_description":"CVE-2014-8150 curl: URL request injection vulnerability in parseurlandfillconn()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-113","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8150.json"},{"CVE":"CVE-2014-9656","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191078","bugzilla_description":"CVE-2014-9656 freetype: integer underflow in the tt_sbit_decoder_load_image()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9656.json"},{"CVE":"CVE-2014-9657","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191079","bugzilla_description":"CVE-2014-9657 freetype: off-by-one buffer over-read in tt_face_load_hdmx()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9657.json"},{"CVE":"CVE-2014-9658","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191080","bugzilla_description":"CVE-2014-9658 freetype: buffer over-read and integer underflow in tt_face_load_kern()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-190->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9658.json"},{"CVE":"CVE-2014-9659","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191081","bugzilla_description":"CVE-2014-9659 freetype: stack-based buffer overflow in cff/cf2intrp.c in the CFF CharString interpreter","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9659.json"},{"CVE":"CVE-2014-9660","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191082","bugzilla_description":"CVE-2014-9660 freetype: missing ENDCHAR NULL pointer dereference in the _bdf_parse_glyphs()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9660.json"},{"CVE":"CVE-2014-9661","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191083","bugzilla_description":"CVE-2014-9661 freetype: out of bounds read in Type42 font parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9661.json"},{"CVE":"CVE-2014-9662","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191084","bugzilla_description":"CVE-2014-9662 freetype: heap-based buffer overflow in cff/cf2ft.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9662.json"},{"CVE":"CVE-2014-9663","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191085","bugzilla_description":"CVE-2014-9663 freetype: out-of-bounds read in tt_cmap4_validate()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9663.json"},{"CVE":"CVE-2014-9664","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191086","bugzilla_description":"CVE-2014-9664 freetype: off-by-one buffer over-read in parse_charstrings() / t42_parse_charstrings()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9664.json"},{"CVE":"CVE-2014-9665","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191087","bugzilla_description":"CVE-2014-9665 freetype: integer overflow leading to heap-based buffer overflow in Load_SBit_Png()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9665.json"},{"CVE":"CVE-2014-9666","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191089","bugzilla_description":"CVE-2014-9666 freetype: integer overflow in tt_sbit_decoder_init() leading to out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9666.json"},{"CVE":"CVE-2014-9667","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191090","bugzilla_description":"CVE-2014-9667 freetype: integer overflow in tt_face_load_font_dir() leading to out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9667.json"},{"CVE":"CVE-2014-9668","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191091","bugzilla_description":"CVE-2014-9668 freetype: integer overflow in woff_open_font() leading to heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9668.json"},{"CVE":"CVE-2014-9669","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191092","bugzilla_description":"CVE-2014-9669 freetype: multiple integer overflows leading to buffer over-reads in cmap handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9669.json"},{"CVE":"CVE-2014-9670","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191093","bugzilla_description":"CVE-2014-9670 freetype: integer overflow in pcf_get_encodings() leading to NULL pointer dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-476","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9670.json"},{"CVE":"CVE-2014-9671","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191094","bugzilla_description":"CVE-2014-9671 freetype: integer overflow in pcf_get_properties() leading to NULL pointer dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-476","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9671.json"},{"CVE":"CVE-2014-9672","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191095","bugzilla_description":"CVE-2014-9672 freetype: Array index error in the parse_fond function in base/ftmac.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-129","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9672.json"},{"CVE":"CVE-2014-9673","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191096","bugzilla_description":"CVE-2014-9673 freetype: integer signedness error in Mac_Read_POST_Resource() leading to heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-122","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9673.json"},{"CVE":"CVE-2014-3707","severity":"moderate","public_date":"2014-11-05T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1154941","bugzilla_description":"CVE-2014-3707 curl: incorrect handle duplication after COPYPOSTFIELDS","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"(CWE-125|CWE-416)","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3707.json"},{"CVE":"CVE-2014-3513","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1652","RHSA-2014:1692"],"bugzilla":"1152953","bugzilla_description":"CVE-2014-3513 openssl: SRTP memory leak causes crash when using specially-crafted handshake message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-30.el6_6.2","openssl-1:1.0.1e-34.el7_0.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3513.json"},{"CVE":"CVE-2014-3566","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2015:1546","RHSA-2015:1545","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2014:1881","RHSA-2014:1880","RHSA-2015:0080","RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2014:1920","RHSA-2015:0067","RHSA-2015:0012","RHSA-2015:0011","RHSA-2015:0264","RHSA-2015:0010","RHSA-2015:0086","RHSA-2015:0085","RHBA-2014:1857"],"bugzilla":"1152789","bugzilla_description":"CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-636|CWE-757)","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","openshift-origin-node-proxy-0:1.16.4.2-1.el6op","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","openshift-origin-node-proxy-0:1.22.3.4-1.el6op","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json"},{"CVE":"CVE-2014-3613","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1136154","bugzilla_description":"CVE-2014-3613 curl: incorrect handling of IP addresses in cookie domain","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20->CWE-284","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3613.json"},{"CVE":"CVE-2014-3620","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":[],"bugzilla":"1138846","bugzilla_description":"CVE-2014-3620 curl: cookies accepted for TLDs","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3620.json"},{"CVE":"CVE-2014-3508","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127490","bugzilla_description":"CVE-2014-3508 openssl: information leak in pretty printing functions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3508.json"},{"CVE":"CVE-2014-5139","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1127491","bugzilla_description":"CVE-2014-5139 openssl: crash with SRP ciphersuite in Server Hello message","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5139.json"},{"CVE":"CVE-2014-3505","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127499","bugzilla_description":"CVE-2014-3505 openssl: DTLS packet processing double free","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-672","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3505.json"},{"CVE":"CVE-2014-3506","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127500","bugzilla_description":"CVE-2014-3506 openssl: DTLS memory exhaustion","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-862->CWE-400","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3506.json"},{"CVE":"CVE-2014-3507","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1052","RHSA-2014:1054"],"bugzilla":"1127502","bugzilla_description":"CVE-2014-3507 openssl: DTLS memory leak from zero-length fragments","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3507.json"},{"CVE":"CVE-2014-3510","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127503","bugzilla_description":"CVE-2014-3510 openssl: DTLS anonymous (EC)DH denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3510.json"},{"CVE":"CVE-2014-3512","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1127505","bugzilla_description":"CVE-2014-3512 openssl: SRP buffer overrun","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3512.json"},{"CVE":"CVE-2014-0224","severity":"important","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0630","RHSA-2014:0631","RHSA-2014:0624","RHSA-2014:0679","RHSA-2014:0632","RHSA-2014:0633","RHSA-2014:0627","RHSA-2014:0628","RHSA-2014:0625","RHSA-2014:0626","RHSA-2014:0629","RHSA-2014:0680"],"bugzilla":"1103586","bugzilla_description":"CVE-2014-0224 openssl: SSL/TLS MITM vulnerability","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-841","affected_packages":["openssl-0:0.9.8e-27.el5_10.3","openssl-0:1.0.1e-16.el6_5.14","openssl097a-0:0.9.7a-12.el5_10.1","openssl098e-0:0.9.8e-18.el6_5.2","openssl-1:1.0.1e-34.el7_0.3","openssl098e-0:0.9.8e-29.el7_0.2","rhev-hypervisor6-0:6.5-20140603.1.el6ev","openssl-0:0.9.8e-26.el5_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0224.json"},{"CVE":"CVE-2014-0221","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625","RHSA-2014:1021","RHSA-2014:1053","RHSA-2014:1086"],"bugzilla":"1103593","bugzilla_description":"CVE-2014-0221 openssl: DoS when sending invalid DTLS handshake","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["openssl-0:0.9.8e-27.el5_10.4","openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0221.json"},{"CVE":"CVE-2014-0195","severity":"important","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1103598","bugzilla_description":"CVE-2014-0195 openssl: Buffer overflow via DTLS invalid fragment","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-119","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0195.json"},{"CVE":"CVE-2014-3470","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1103600","bugzilla_description":"CVE-2014-3470 openssl: client-side denial of service when using anonymous ECDH","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3470.json"},{"CVE":"CVE-2014-0198","severity":"moderate","public_date":"2014-04-21T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1093837","bugzilla_description":"CVE-2014-0198 openssl: SSL_MODE_RELEASE_BUFFERS NULL pointer dereference in do_ssl3_write()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0198.json"},{"CVE":"CVE-2010-5298","severity":"moderate","public_date":"2014-04-08T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1087195","bugzilla_description":"CVE-2010-5298 openssl: freelist misuse causing a possible use-after-free","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5298.json"},{"CVE":"CVE-2014-5116","severity":null,"public_date":"2014-02-14T00:00:00Z","advisories":[],"bugzilla":"1124500","bugzilla_description":"CVE-2014-5116 cairo: NULL pointer dereference in cairo_image_surface_get_data()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5116.json"},{"CVE":"CVE-2017-1000044","severity":"moderate","public_date":"2010-11-29T00:00:00Z","advisories":[],"bugzilla":"1426766","bugzilla_description":"CVE-2017-1000044 gtk-vnc: Incorrect boundaries check when updating framebuffer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000044.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-1000376","severity":"moderate","public_date":null,"advisories":[],"bugzilla":"1462164","bugzilla_description":"CVE-2017-1000376 libffi: Requests an executable stack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000376.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-what_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-what_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-what_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-who_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-who_security_api_results.json
new file mode 100644
index 0000000..b0ed0f3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt-who_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-0189","severity":"moderate","public_date":"2014-03-26T00:00:00Z","advisories":["RHBA-2014:1206","RHBA-2014:1513","RHSA-2015:0430"],"bugzilla":"1088732","bugzilla_description":"CVE-2014-0189 virt-who: plaintext hypervisor passwords in world-readable /etc/sysconfig/virt-who configuration file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-732|CWE-522)","affected_packages":["virt-who-0:0.11-5.el7","virt-who-0:0.9-6.el5","virt-who-0:0.10-8.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0189.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt_security_api_results.json
new file mode 100644
index 0000000..8a49f57
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virt_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-27661","severity":"low","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1890653","bugzilla_description":"CVE-2020-27661 QEMU: divide by zero in dwc2_handle_packet() in hw/usb/hcd-dwc2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-27661.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-25637","severity":"moderate","public_date":"2020-09-30T00:00:00Z","advisories":[],"bugzilla":"1881037","bugzilla_description":"CVE-2020-25637 libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25637.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2020-24750","severity":"important","public_date":"2020-09-18T00:00:00Z","advisories":["RHSA-2020:4173"],"bugzilla":"1882310","bugzilla_description":"CVE-2020-24750 jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-maven35-jackson-databind-0:2.7.6-2.11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24750.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-26160","severity":"moderate","public_date":"2020-09-15T00:00:00Z","advisories":[],"bugzilla":"1883371","bugzilla_description":"CVE-2020-26160 jwt-go: access restriction bypass vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26160.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2020-14364","severity":"important","public_date":"2020-08-24T12:00:00Z","advisories":["RHSA-2020:4049","RHSA-2020:4115","RHSA-2020:4048","RHSA-2020:4059","RHSA-2020:4047","RHSA-2020:4058","RHSA-2020:4079","RHSA-2020:4167","RHSA-2020:4056","RHSA-2020:4078","RHSA-2020:4111","RHSA-2020:4055","RHSA-2020:4176","RHSA-2020:4054","RHSA-2020:4053","RHSA-2020:4052","RHSA-2020:4162","RHSA-2020:4051","RHSA-2020:4172","RHSA-2020:4050","RHSA-2020:4291","RHSA-2020:4290"],"bugzilla":"1869201","bugzilla_description":"CVE-2020-14364 QEMU: usb: out-of-bounds r/w access issue while processing usb packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["qemu-kvm-10:1.5.3-105.el7_2.20","qemu-kvm-rhev-10:2.12.0-33.el7_7.12","qemu-kvm-10:1.5.3-175.el7_9.1","qemu-kvm-10:1.5.3-160.el7_6.8","qemu-kvm-10:1.5.3-141.el7_4.11","qemu-kvm-ma-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-18.el7_6.12","qemu-kvm-2:0.12.1.2-2.448.el6_6.9","virt:rhel-8000020200910175113.f8e95b4e","qemu-kvm-ma-10:2.12.0-18.el7_6.7","qemu-kvm-10:1.5.3-167.el7_7.7","qemu-kvm-2:0.12.1.2-2.506.el6_10.8","qemu-kvm-2:0.12.1.2-2.415.el6_5.21","qemu-kvm-ma-10:2.12.0-48.el7_9.1","virt:rhel-8020020200909224913.4cda2c84","qemu-kvm-rhev-10:2.12.0-48.el7_9.1","qemu-kvm-10:1.5.3-126.el7_3.18","redhat-virtualization-host-0:4.4.2-20200930.0.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14364.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-14333","severity":"moderate","public_date":"2020-08-17T09:30:00Z","advisories":["RHSA-2020:3807"],"bugzilla":"1858184","bugzilla_description":"CVE-2020-14333 ovirt-engine: Reflected cross site scripting vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14333.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-24352","severity":"low","public_date":"2020-08-14T00:00:00Z","advisories":[],"bugzilla":"1847584","bugzilla_description":"CVE-2020-24352 QEMU: out-of-bounds read/write in ati-vga device emulation in ati_2d_blt()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24352.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2020-17380","severity":"moderate","public_date":"2020-08-11T00:00:00Z","advisories":[],"bugzilla":"1862167","bugzilla_description":"CVE-2020-17380 QEMU: heap buffer overflow in sdhci_sdma_transfer_multi_blocks() in hw/sd/sdhci.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17380.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10775","severity":"moderate","public_date":"2020-08-04T09:00:00Z","advisories":["RHSA-2020:3247"],"bugzilla":"1847420","bugzilla_description":"CVE-2020-10775 ovirt-engine: Redirect to arbitrary URL allows for phishing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-451->CWE-601","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10775.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2020-15708","severity":"moderate","public_date":"2020-08-04T00:00:00Z","advisories":[],"bugzilla":"1866270","bugzilla_description":"CVE-2020-15708 libvirt: incorrect permissions on the UNIX domain socket allows local attacker to escalate privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15708.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-16092","severity":"low","public_date":"2020-07-27T00:00:00Z","advisories":[],"bugzilla":"1860283","bugzilla_description":"CVE-2020-16092 QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16092.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-14339","severity":"important","public_date":"2020-07-17T00:00:00Z","advisories":["RHSA-2020:3586"],"bugzilla":"1860069","bugzilla_description":"CVE-2020-14339 libvirt: leak of /dev/mapper/control into QEMU guests","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14339.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-15859","severity":"moderate","public_date":"2020-07-16T00:00:00Z","advisories":[],"bugzilla":"1859168","bugzilla_description":"CVE-2020-15859 QEMU: net: e1000e: use-after-free while sending packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15859.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2020-15863","severity":"low","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1853725","bugzilla_description":"CVE-2020-15863 QEMU: stack-based overflow in xgmac_enet_send() in hw/net/xgmac.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15863.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2020-15366","severity":"moderate","public_date":"2020-07-04T00:00:00Z","advisories":[],"bugzilla":"1857977","bugzilla_description":"CVE-2020-15366 nodejs-ajv: prototype pollution via crafted JSON schema in ajv.validate function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-471","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15366.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-25084","severity":"low","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1879652","bugzilla_description":"CVE-2020-25084 QEMU: usb: use-after-free issue while setting up packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25084.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2020-25085","severity":"moderate","public_date":"2020-06-24T00:00:00Z","advisories":[],"bugzilla":"1879671","bugzilla_description":"CVE-2020-25085 QEMU: sdhci: out-of-bounds access issue while doing multi block SDMA","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25085.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-14316","severity":"important","public_date":"2020-06-23T00:00:00Z","advisories":["RHSA-2020:3194"],"bugzilla":"1848951","bugzilla_description":"CVE-2020-14316 kubevirt: VMIs can be used to access host files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.0-71","container-native-virtualization/virt-api:v2.4.0-58"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14316.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.9"},{"CVE":"CVE-2020-15469","severity":"low","public_date":"2020-06-17T00:00:00Z","advisories":[],"bugzilla":"1853154","bugzilla_description":"CVE-2020-15469 QEMU: MMIO ops null pointer dereference may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15469.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.3"},{"CVE":"CVE-2020-14040","severity":"moderate","public_date":"2020-06-17T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:3369","RHSA-2020:3578","RHSA-2020:4214","RHSA-2020:3783","RHSA-2020:3087","RHSA-2020:3780","RHSA-2020:3372","RHSA-2020:3727"],"bugzilla":"1853652","bugzilla_description":"CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openshift3/ose-docker-registry:v3.11.286-1","servicemesh-grafana-0:6.4.3-13.el8","distributed-tracing/jaeger-query-rhel7:1.17.5-3","kiali-0:v1.12.10.redhat2-1.el7","ior-0:1.1.6-1.el8","openshift4/ose-cluster-version-operator:v4.5.0-202008280601.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.5-3","distributed-tracing/jaeger-all-in-one-rhel7:1.17.5-3","distributed-tracing/jaeger-rhel7-operator:1.17.5-3","servicemesh-0:1.1.6-1.el8","servicemesh-cni-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift4/ose-cluster-network-operator:v4.4.0-202009120105.p0","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.5-3","openshift4/ose-cluster-svcat-controller-manager-operator:v4.5.0-202008280221.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.5.0-202009112201.p0","distributed-tracing/jaeger-collector-rhel7:1.17.5-3","openshift4/ose-elasticsearch-operator:v4.5.0-202008310950.p0","servicemesh-operator-0:1.1.6-2.el8","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14040.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-10761","severity":"moderate","public_date":"2020-06-08T00:00:00Z","advisories":["RHBA-2020:3172"],"bugzilla":"1843707","bugzilla_description":"CVE-2020-10761 QEMU: nbd: reachable assertion failure in nbd_negotiate_send_rep_verr via remote client","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10761.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-13791","severity":"low","public_date":"2020-06-03T00:00:00Z","advisories":[],"bugzilla":"1843764","bugzilla_description":"CVE-2020-13791 QEMU: ati-vga: OOB access while reading PCI configuration may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13791.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2020-13800","severity":"low","public_date":"2020-06-03T00:00:00Z","advisories":[],"bugzilla":"1843771","bugzilla_description":"CVE-2020-13800 QEMU: ati-vga: infinite recursion in ati_mm_read/write calls may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13800.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2020-10749","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":["RHSA-2020:2412","RHSA-2020:2684","RHSA-2020:2443","RHSA-2020:2592","RHSA-2020:3194","RHSA-2020:2403"],"bugzilla":"1833220","bugzilla_description":"CVE-2020-10749 containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-300","affected_packages":["openshift4/ose-multus-cni:v4.5.0-202007012112.p0","containernetworking-plugins-0:0.8.3-3.el7_8","containernetworking-plugins-0:0.8.6-1.rhaos4.3.el7","openshift4/ose-container-networking-plugins-rhel7:v4.5.0-202007012112.p0","container-native-virtualization/kubevirt-ssp-operator:v2.4.0-71","container-native-virtualization/virt-api:v2.4.0-58"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10749.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.0"},{"CVE":"CVE-2020-13754","severity":"moderate","public_date":"2020-06-01T00:00:00Z","advisories":[],"bugzilla":"1842363","bugzilla_description":"CVE-2020-13754 QEMU: msix: OOB access during mmio operations may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13754.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2020-10756","severity":"moderate","public_date":"2020-05-27T00:00:00Z","advisories":["RHSA-2020:3586","RHSA-2020:4059"],"bugzilla":"1835986","bugzilla_description":"CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["virt:rhel-8020020200909224913.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10756.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-13253","severity":"low","public_date":"2020-05-20T00:00:00Z","advisories":[],"bugzilla":"1838546","bugzilla_description":"CVE-2020-13253 QEMU: sd: OOB access could crash the guest resulting in DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13253.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-13361","severity":"low","public_date":"2020-05-15T00:00:00Z","advisories":[],"bugzilla":"1840980","bugzilla_description":"CVE-2020-13361 QEMU: es1370: OOB access due to incorrect frame count leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13361.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2020-13659","severity":"low","public_date":"2020-05-14T00:00:00Z","advisories":[],"bugzilla":"1842496","bugzilla_description":"CVE-2020-13659 QEMU: exec: address_space_map returns NULL without setting length to zero may lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13659.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2020-13765","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":[],"bugzilla":"1842912","bugzilla_description":"CVE-2020-13765 QEMU: loader: OOB access while loading registered ROM may lead to code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13765.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-13362","severity":"low","public_date":"2020-05-07T00:00:00Z","advisories":[],"bugzilla":"1840999","bugzilla_description":"CVE-2020-13362 QEMU: megasas: OOB read access due to invalid index leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13362.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.2"},{"CVE":"CVE-2019-16769","severity":"moderate","public_date":"2020-05-04T00:00:00Z","advisories":["RHSA-2020:2796"],"bugzilla":"1848092","bugzilla_description":"CVE-2019-16769 npm-serialize-javascript: XSS via unsafe characters in serialized regular expressions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["servicemesh-grafana-0:6.4.3-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16769.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-10717","severity":"low","public_date":"2020-04-30T00:00:00Z","advisories":["RHBA-2020:3172"],"bugzilla":"1827808","bugzilla_description":"CVE-2020-10717 QEMU: virtiofsd: guest may open maximum file descriptor to cause DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10717.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-8203","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:3807","RHSA-2020:3370"],"bugzilla":"1857412","bugzilla_description":"CVE-2020-8203 nodejs-lodash: prototype pollution in zipObjectDeep function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","distributed-tracing/jaeger-query-rhel7:1.17.6-1","ovirt-web-ui-0:1.6.4-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8203.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2020-14301","severity":"low","public_date":"2020-04-14T00:00:00Z","advisories":["RHBA-2020:3172"],"bugzilla":"1848640","bugzilla_description":"CVE-2020-14301 libvirt: leak of sensitive cookie information via dumpxml","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14301.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2020-11869","severity":"low","public_date":"2020-04-07T00:00:00Z","advisories":[],"bugzilla":"1809955","bugzilla_description":"CVE-2020-11869 qemu: integer overflow in ati_2d_blt() in hw/display/ati-2d.c could lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->(CWE-125|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11869.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2020-10702","severity":"low","public_date":"2020-04-02T00:00:00Z","advisories":["RHBA-2020:3172"],"bugzilla":"1809948","bugzilla_description":"CVE-2020-10702 qemu: weak signature generation in Pointer Authentication support for ARM","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10702.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2020-1983","severity":"moderate","public_date":"2020-04-02T00:00:00Z","advisories":["RHBA-2020:3172","RHSA-2020:4079","RHSA-2020:3053","RHSA-2020:4290"],"bugzilla":"1829825","bugzilla_description":"CVE-2020-1983 QEMU: slirp: use-after-free in ip_reass() function in ip_input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["qemu-kvm-10:1.5.3-175.el7_9.1","container-tools:rhel8-8020120200601155013.ffd2803a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1983.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-7660","severity":"moderate","public_date":"2020-04-01T00:00:00Z","advisories":["RHSA-2020:2796","RHSA-2020:2861"],"bugzilla":"1844228","bugzilla_description":"CVE-2020-7660 npm-serialize-javascript: allows remote attackers to inject arbitrary code via the function deleteFunctions within index.js","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["servicemesh-grafana-0:6.2.2-38.el8","servicemesh-grafana-0:6.4.3-11.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7660.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-10701","severity":"moderate","public_date":"2020-03-20T00:00:00Z","advisories":[],"bugzilla":"1819163","bugzilla_description":"CVE-2020-10701 libvirt: guest agent timeout can be set under read-only mode leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10701.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-7598","severity":"moderate","public_date":"2020-03-10T00:00:00Z","advisories":["RHSA-2020:2895","RHSA-2020:3247","RHSA-2020:2852","RHSA-2020:2992","RHSA-2020:2362","RHSA-2020:2848","RHSA-2020:3042","RHSA-2020:2849","RHSA-2020:2847","RHSA-2020:3084"],"bugzilla":"1813344","bugzilla_description":"CVE-2020-7598 nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["nodejs:12-8020020200630155331.4cda2c84","nodejs:10-8000020200617115915.f8e95b4e","kiali-0:v1.0.11.redhat1-1.el7","rh-nodejs12-nodejs-0:12.18.2-1.el7","servicemesh-grafana-0:6.2.2-36.el8","rh-nodejs10-nodejs-0:10.21.0-3.el7","nodejs:12-8010020200630154708.c27ad7f8","nodejs:10-8020020200617141353.4cda2c84","nodejs:10-8010020200617134056.c27ad7f8","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7598.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12430","severity":"moderate","public_date":"2020-02-19T00:00:00Z","advisories":[],"bugzilla":"1828190","bugzilla_description":"CVE-2020-12430 libvirt: memory leak in domstats may allow read-only user to perform DoS attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12430.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-8608","severity":"important","public_date":"2020-01-27T00:00:00Z","advisories":["RHSA-2020:2774","RHSA-2020:2730","RHSA-2020:2773","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:2342","RHSA-2020:1352","RHBA-2020:0527","RHSA-2020:1351","RHSA-2020:1208","RHSA-2020:0889","RHSA-2020:1209","RHSA-2020:2844","RHSA-2020:1379","RHSA-2020:1403","RHSA-2020:3040","RHSA-2020:1292"],"bugzilla":"1798453","bugzilla_description":"CVE-2020-8608 QEMU: Slirp: potential OOB access due to unsafe snprintf() usages","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-160.el7_6.7","virt:rhel-8020020200601195459.4cda2c84","slirp4netns-0:0.3.0-8.el7_7","qemu-kvm-ma-10:2.12.0-33.el7_7.3","slirp4netns-0:0.4.2-4.git21fdece.el8","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-10:1.5.3-167.el7_7.6","qemu-kvm-10:1.5.3-173.el7_8.1","virt:rhel-8000020200526192422.f8e95b4e","qemu-kvm-2:0.12.1.2-2.506.el6_10.7","qemu-kvm-ma-10:2.12.0-44.el7_8.1","container-tools:rhel8-8010120200326094405.f8993c42"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-1711","severity":"important","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:0773","RHSA-2020:1300","RHSA-2020:1352","RHSA-2020:2472","RHSA-2020:1296","RHSA-2020:1505","RHSA-2020:0669","RHSA-2020:1150","RHSA-2020:0731","RHSA-2020:1358","RHSA-2020:0730","RHSA-2020:1216"],"bugzilla":"1794290","bugzilla_description":"CVE-2020-1711 QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["virt:rhel-8000020200331183759.f8e95b4e","qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-ma-10:2.10.0-21.el7_5.5","qemu-kvm-ma-10:2.12.0-33.el7_7.3","virt:rhel-8010020200304114113.c27ad7f8","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","qemu-kvm-ma-10:2.12.0-18.el7_6.5","qemu-kvm-ma-10:2.12.0-44.el7","qemu-kvm-rhev-10:2.12.0-44.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1711.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.0"},{"CVE":"CVE-2020-14415","severity":"low","public_date":"2020-01-20T00:00:00Z","advisories":[],"bugzilla":"1848117","bugzilla_description":"CVE-2020-14415 QEMU: division by zero in oss_write() in audio/ossaudio.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14415.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2020-10703","severity":"moderate","public_date":"2020-01-14T00:00:00Z","advisories":["RHSA-2020:4000"],"bugzilla":"1816650","bugzilla_description":"CVE-2020-10703 libvirt: Potential denial of service via active pool without target path","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libvirt-0:4.5.0-36.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10703.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-7039","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":["RHSA-2020:2730","RHSA-2020:1344","RHSA-2020:1300","RHSA-2020:1261","RHSA-2020:1360","RHSA-2020:2342","RHSA-2020:1352","RHSA-2020:1351","RHSA-2020:1296","RHSA-2020:0889","RHSA-2020:0775","RHSA-2020:1116","RHSA-2020:1358","RHSA-2020:0348","RHBA-2020:0390","RHSA-2020:1150"],"bugzilla":"1791551","bugzilla_description":"CVE-2020-7039 QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7_7.10","qemu-kvm-10:1.5.3-173.el7","slirp4netns-0:0.3.0-8.el7_7","container-tools:1.0-8010020200206144344.c294d161","qemu-kvm-ma-10:2.12.0-33.el7_7.3","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","virt:rhel-8000020200305185300.f8e95b4e","qemu-kvm-rhev-10:2.12.0-44.el7_8.1","qemu-kvm-ma-10:2.12.0-44.el7","qemu-kvm-rhev-10:2.12.0-44.el7","container-tools:rhel8-8010120200116121758.53d07e52","qemu-kvm-10:1.5.3-167.el7_7.6","slirp4netns-0:0.4.2-3.git21fdece.el8","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","virt:rhel-8010020200304114113.c27ad7f8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7039.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2020-1701","severity":"moderate","public_date":"2020-01-07T00:00:00Z","advisories":[],"bugzilla":"1792092","bugzilla_description":"CVE-2020-1701 virt-handler: virt-handler daemonset clusterroles allows retrieval of secrets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1701.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2020-7211","severity":"low","public_date":"2019-12-30T00:00:00Z","advisories":["RHBA-2020:0390"],"bugzilla":"1792130","bugzilla_description":"CVE-2020-7211 QEMU: Slirp: potential directory traversal using relative paths via tftp server on Windows host","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["slirp4netns-0:0.4.2-3.git21fdece.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7211.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2020-12829","severity":"moderate","public_date":"2019-12-23T00:00:00Z","advisories":[],"bugzilla":"1808510","bugzilla_description":"CVE-2020-12829 qemu: OOB read and write due to integer overflow in sm501_2d_operation() in hw/display/sm501.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->(CWE-125|CWE-787)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12829.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2019-20485","severity":"moderate","public_date":"2019-12-05T00:00:00Z","advisories":["RHSA-2020:4000"],"bugzilla":"1809740","bugzilla_description":"CVE-2019-20485 libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["libvirt-0:4.5.0-36.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20485.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2019-10195","severity":"moderate","public_date":"2019-11-26T00:00:00Z","advisories":["RHBA-2019:4268","RHSA-2020:0378","RHSA-2020:1269"],"bugzilla":"1726223","bugzilla_description":"CVE-2019-10195 ipa: Batch API logging user passwords to /var/log/httpd/error_log","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532->CWE-200","affected_packages":["idm:DL1-8010020191127093529.6573b795","ipa-0:4.6.5-11.el7_7.4","idm:DL1-8000020200217171713.2874843d"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10195.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.7"},{"CVE":"CVE-2018-12207","severity":"important","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3941","RHSA-2019:3843","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0026","RHSA-2020:0028","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3916","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1646768","bugzilla_description":"CVE-2018-12207 hw: Machine Check Error on Page Size Change (IFU)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12207.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-11135","severity":"moderate","public_date":"2019-11-12T18:00:00Z","advisories":["RHSA-2019:3841","RHSA-2019:3842","RHSA-2019:3843","RHSA-2020:0366","RHSA-2019:3832","RHSA-2019:3833","RHSA-2019:3844","RHBA-2019:3869","RHSA-2019:3860","RHSA-2019:3840","RHSA-2020:0555","RHSA-2020:0026","RHSA-2020:0279","RHSA-2020:0730","RHSA-2020:0028","RHSA-2020:0666","RHSA-2020:0204","RHSA-2019:3838","RHSA-2019:3839","RHSA-2019:3834","RHSA-2019:3835","RHSA-2019:3836","RHSA-2019:3837","RHSA-2019:3936"],"bugzilla":"1753062","bugzilla_description":"CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-203","affected_packages":["redhat-virtualization-host-0:4.2-20191107.0.el7_6","redhat-virtualization-host-0:4.3.6-20191108.0.el7_7","qemu-kvm-10:1.5.3-160.el7_6.5","kernel-rt-0:3.10.0-1062.4.2.rt56.1028.el7","virt:rhel-8010020191216093608.c27ad7f8","kernel-0:2.6.32-504.81.3.el6","kernel-0:2.6.32-431.96.3.el6","kernel-0:3.10.0-327.82.2.el7","kernel-0:3.10.0-957.38.2.el7","kernel-rt-1:3.10.0-693.60.2.rt56.655.el6rt","qemu-kvm-rhev-10:2.12.0-18.el7_6.9","kernel-0:3.10.0-862.43.2.el7","kernel-0:2.6.32-754.24.2.el6","kernel-0:4.18.0-147.0.2.el8_1","qemu-kvm-10:1.5.3-167.el7_7.4","kpatch-patch-4_18_0-147-0:1-3.el8_1","kernel-0:3.10.0-514.70.2.el7","redhat-coreos-42.81.20191112.3","kernel-0:3.10.0-1062.4.2.el7","kernel-0:4.18.0-80.15.1.el8_0","kernel-rt-0:4.18.0-147.0.2.rt24.94.el8_1","kernel-0:3.10.0-693.60.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11135.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-20922","severity":"moderate","public_date":"2019-11-04T00:00:00Z","advisories":[],"bugzilla":"1882256","bugzilla_description":"CVE-2019-20922 nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20922.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-20920","severity":"moderate","public_date":"2019-11-04T00:00:00Z","advisories":[],"bugzilla":"1882260","bugzilla_description":"CVE-2019-20920 nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20920.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:L","cvss3_score":"8.1"},{"CVE":"CVE-2019-10218","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:0943","RHSA-2020:1084","RHSA-2020:1878"],"bugzilla":"1763137","bugzilla_description":"CVE-2019-10218 samba: smb client vulnerable to filenames containing path separators","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.11.6-104.el7rhgs","samba-0:4.10.4-10.el7","samba-0:4.11.2-13.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10218.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-14833","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":[],"bugzilla":"1764126","bugzilla_description":"CVE-2019-14833 samba: AD DC check password script does not receive full password when non-ASCII characters are used","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14833.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-14847","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":[],"bugzilla":"1764142","bugzilla_description":"CVE-2019-14847 samba: samba AD DC LDAP denial of service via dirsync","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14847.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2019-17498","severity":"moderate","public_date":"2019-10-16T00:00:00Z","advisories":["RHSA-2020:3915"],"bugzilla":"1766898","bugzilla_description":"CVE-2019-17498 libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-190|CWE-200|CWE-400)","affected_packages":["libssh2-0:1.8.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17498.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-14287","severity":"important","public_date":"2019-10-14T15:00:00Z","advisories":["RHSA-2019:3754","RHSA-2019:3204","RHSA-2019:3941","RHSA-2019:3755","RHSA-2019:3205","RHSA-2020:0388","RHSA-2019:3694","RHSA-2019:3278","RHSA-2019:3895","RHSA-2019:3197","RHSA-2019:4191","RHSA-2019:3916","RHSA-2019:3219","RHSA-2019:3209","RHBA-2019:3248","RHBA-2019:3303"],"bugzilla":"1760531","bugzilla_description":"CVE-2019-14287 sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":["redhat-virtualization-host-0:4.2-20191022.0.el7_6","sudo-0:1.7.2p1-31.el5_11.1","sudo-0:1.8.23-3.el7_6.1","sudo-0:1.8.25p1-4.el8_0.2","sudo-0:1.8.6p3-29.el6_10.2","sudo-0:1.8.6p7-17.el7_2.2","sudo-0:1.8.19p2-12.el7_4.1","sudo-0:1.8.6p3-12.el6_5.2","redhat-coreos-42.81.20191107.0","sudo-0:1.8.19p2-14.el7_5.1","sudo-0:1.8.6p7-23.el7_3.2","sudo-0:1.8.6p3-15.el6_6.2","sudo-0:1.8.25p1-8.el8_1","sudo-0:1.8.23-4.el7_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14287.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-14844","severity":"important","public_date":"2019-09-26T00:00:00Z","advisories":[],"bugzilla":"1753589","bugzilla_description":"CVE-2019-14844 krb5: reversed strlcpy() allows client to crash the KDC","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14844.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-14850","severity":"low","public_date":"2019-09-20T00:00:00Z","advisories":["RHSA-2020:1167"],"bugzilla":"1757258","bugzilla_description":"CVE-2019-14850 nbdkit: denial of service due to premature opening of back-end connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406","affected_packages":["nbdkit-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14850.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2019-14826","severity":"low","public_date":"2019-09-17T00:00:00Z","advisories":[],"bugzilla":"1746944","bugzilla_description":"CVE-2019-14826 ipa: Session not terminated after logout","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-613","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14826.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"1.8"},{"CVE":"CVE-2019-14835","severity":"important","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2019:2854","RHSA-2019:2865","RHSA-2019:2864","RHSA-2019:2863","RHSA-2019:2830","RHSA-2019:2862","RHBA-2019:3151","RHSA-2019:2869","RHSA-2019:2924","RHSA-2019:2901","RHSA-2019:2900","RHSA-2019:2867","RHSA-2019:2889","RHSA-2019:2899","RHSA-2019:2866","RHSA-2019:2829","RHSA-2019:2828","RHSA-2019:2827"],"bugzilla":"1750727","bugzilla_description":"CVE-2019-14835 kernel: vhost-net: guest to host kernel escape during migration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["redhat-coreos-42.80.20191022.0","redhat-virtualization-host-0:4.2-20190919.0.el7_6","kernel-0:2.6.32-754.23.1.el6","kernel-rt-0:3.10.0-1062.1.2.rt56.1025.el7","kernel-0:3.10.0-1062.1.2.el7","kernel-0:3.10.0-862.41.2.el7","kernel-0:3.10.0-693.59.1.el7","kernel-0:3.10.0-514.69.1.el7","kernel-0:3.10.0-327.82.1.el7","kernel-0:4.18.0-80.11.2.el8_0","kernel-0:2.6.32-504.81.2.el6","kernel-0:2.6.32-431.96.2.el6","kernel-0:3.10.0-957.35.2.el7","kernel-alt-0:4.14.0-115.13.1.el7a","kernel-rt-0:4.18.0-80.11.2.rt9.157.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14835.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2019-20382","severity":"low","public_date":"2019-09-17T00:00:00Z","advisories":["RHSA-2020:2774","RHSA-2020:3267","RHSA-2020:4167","RHSA-2020:3906","RHSA-2020:3907"],"bugzilla":"1810390","bugzilla_description":"CVE-2019-20382 QEMU: vnc: memory leakage upon disconnect","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401->CWE-772","affected_packages":["qemu-kvm-ma-10:2.12.0-48.el7","qemu-kvm-10:1.5.3-175.el7","virt:rhel-8020020200601195459.4cda2c84","qemu-kvm-rhev-10:2.12.0-48.el7_9.1","qemu-kvm-rhev-10:2.12.0-18.el7_6.12","qemu-kvm-rhev-10:2.12.0-48.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20382.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2019-20808","severity":"low","public_date":"2019-09-13T00:00:00Z","advisories":[],"bugzilla":"1841136","bugzilla_description":"CVE-2019-20808 QEMU: out-of-bounds read in ati_cursor_define() function in hw/display/ati.c leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20808.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2019-10197","severity":"moderate","public_date":"2019-09-03T00:00:00Z","advisories":["RHSA-2020:1084","RHSA-2020:1878","RHSA-2019:4023","RHSA-2019:3253"],"bugzilla":"1746225","bugzilla_description":"CVE-2019-10197 samba: Combination of parameters and permissions can allow user to escape from the share path definition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.9.8-110.el6rhs","samba-0:4.10.4-10.el7","samba-0:4.11.2-13.el8","samba-0:4.9.8-109.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10197.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-14867","severity":"important","public_date":"2019-08-26T00:00:00Z","advisories":["RHBA-2019:4268","RHSA-2020:0378","RHSA-2020:1269"],"bugzilla":"1766920","bugzilla_description":"CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-94|CWE-400)","affected_packages":["idm:DL1-8010020191127093529.6573b795","ipa-0:4.6.5-11.el7_7.4","idm:DL1-8000020200217171713.2874843d"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14867.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-15034","severity":"important","public_date":"2019-08-12T00:00:00Z","advisories":[],"bugzilla":"1812659","bugzilla_description":"CVE-2019-15034 qemu: hw/display/bochs-display.c does not ensure a sufficient PCI config space allocation leading to a buffer overflow involving the PCIe extended config space","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15034.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2019-10744","severity":"important","public_date":"2019-08-09T00:00:00Z","advisories":["RHSA-2020:2819","RHSA-2019:3024","RHSA-2020:2362"],"bugzilla":"1739497","bugzilla_description":"CVE-2019-10744 nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ovirt-web-ui-0:1.6.0-1.el7ev","servicemesh-grafana-0:6.2.2-36.el8","jaeger-0:v1.13.1.redhat7-1.el7","distributed-tracing/jaeger-query-rhel7:1.17.2-3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10744.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2019-1125","severity":"moderate","public_date":"2019-08-06T17:00:00Z","advisories":["RHSA-2019:2476","RHSA-2019:2696","RHSA-2019:2695","RHSA-2019:2473","RHSA-2019:2975","RHSA-2019:2600","RHSA-2019:2411","RHSA-2019:2730","RHSA-2019:3220","RHSA-2019:3011","RHBA-2019:3151","RHSA-2019:2900","RHSA-2019:2405","RHSA-2019:2899","RHSA-2019:2609","RHBA-2019:3248"],"bugzilla":"1724389","bugzilla_description":"CVE-2019-1125 kernel: hw: Spectre SWAPGS gadget vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385->CWE-200","affected_packages":["kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0","redhat-virtualization-host-0:4.2-20191022.0.el7_6","kernel-0:3.10.0-957.38.1.el7","kernel-0:3.10.0-862.43.1.el7","redhat-coreos-42.80.20191022.0","kernel-0:2.6.32-431.96.1.el6","kernel-0:2.6.32-754.18.2.el6","kernel-0:4.18.0-80.7.2.el8_0","kernel-0:2.6.32-504.80.2.el6","kernel-0:3.10.0-514.69.1.el7","kernel-0:3.10.0-327.82.1.el7","kernel-rt-0:3.10.0-1062.1.1.rt56.1024.el7","kernel-0:3.10.0-693.58.1.el7","kernel-rt-1:3.10.0-693.58.1.rt56.652.el6rt","kernel-0:3.10.0-1062.1.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1125.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-14378","severity":"important","public_date":"2019-07-28T00:00:00Z","advisories":["RHBA-2019:3723","RHSA-2019:3742","RHSA-2020:2126","RHSA-2019:3787","RHSA-2020:0366","RHSA-2019:3403","RHSA-2019:4344","RHSA-2020:2342","RHSA-2019:3179","RHSA-2020:2065","RHSA-2020:0889","RHSA-2019:3494","RHSA-2020:0775","RHSA-2020:1216","RHSA-2019:3968"],"bugzilla":"1734745","bugzilla_description":"CVE-2019-14378 QEMU: slirp: heap buffer overflow during packet reassembly","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["container-tools:rhel8-8010020190927090915.4985cc55","container-tools:1.0-8010020190927091243.4985cc55","qemu-kvm-10:1.5.3-160.el7_6.6","qemu-kvm-10:1.5.3-167.el7_7.4","qemu-kvm-2:0.12.1.2-2.506.el6_10.6","qemu-kvm-ma-10:2.12.0-33.el7_7.1","slirp4netns-0:0.3.0-8.el7_7","qemu-kvm-rhev-10:2.12.0-33.el7_7.4","qemu-kvm-rhev-10:2.12.0-18.el7_6.11","qemu-kvm-ma-10:2.12.0-18.el7_6.6","qemu-kvm-rhev-10:2.12.0-44.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14378.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-20454","severity":"moderate","public_date":"2019-07-28T00:00:00Z","advisories":["RHSA-2020:3662"],"bugzilla":"1735494","bugzilla_description":"CVE-2019-20454 pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["php:7.3-8020020200715124551.ceb1cf90"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20454.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13272","severity":"important","public_date":"2019-07-16T00:00:00Z","advisories":["RHSA-2019:2809","RHBA-2019:3151","RHSA-2019:2411","RHSA-2019:2405"],"bugzilla":"1730895","bugzilla_description":"CVE-2019-13272 kernel: broken permission and object lifetime handling for PTRACE_TRACEME","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":["kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0","redhat-coreos-42.80.20191022.0","kernel-0:4.18.0-80.7.2.el8_0","kernel-alt-0:4.14.0-115.12.1.el7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13272.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-13115","severity":"moderate","public_date":"2019-07-16T00:00:00Z","advisories":[],"bugzilla":"1731324","bugzilla_description":"CVE-2019-13115 libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2019-10183","severity":"low","public_date":"2019-07-02T00:00:00Z","advisories":["RHSA-2019:3464"],"bugzilla":"1726232","bugzilla_description":"CVE-2019-10183 virt-install: unattended option leaks password via command line argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["virt-manager-0:2.2.1-2.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10183.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2019-13164","severity":"low","public_date":"2019-06-28T00:00:00Z","advisories":[],"bugzilla":"1722559","bugzilla_description":"CVE-2019-13164 Qemu: qemu-bridge-helper ACL can be bypassed when names are too long","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2019-10166","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720114","bugzilla_description":"CVE-2019-10166 libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10166.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-10161","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1578","RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720115","bugzilla_description":"CVE-2019-10161 libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","libvirt-0:0.10.2-64.el6_10.2","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10167","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720117","bugzilla_description":"CVE-2019-10167 libvirt: arbitrary command execution via virConnectGetDomainCapabilities API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-284|CWE-250)","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10168","severity":"important","public_date":"2019-06-20T12:00:00Z","advisories":["RHSA-2019:1699","RHSA-2019:1762","RHSA-2019:1579","RHSA-2019:1580"],"bugzilla":"1720118","bugzilla_description":"CVE-2019-10168 libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-284|CWE-250)","affected_packages":["libvirt-0:4.5.0-10.el7_6.12","virt:8.0.0-8000020190620145550.f8e95b4e","virt:rhel-8000020190618154454.f8e95b4e","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10168.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-12435","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1711816","bugzilla_description":"CVE-2019-12435 samba: AD DC Denial of Service in DNS management server","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12435.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-12436","severity":"moderate","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1711837","bugzilla_description":"CVE-2019-12436 samba: NULL pointer dereference in Samba LDAP server leading to crash and Dos","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12436.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-11477","severity":"important","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719123","bugzilla_description":"CVE-2019-11477 Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11477.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11478","severity":"moderate","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719128","bugzilla_description":"CVE-2019-11478 Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11478.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-11479","severity":"moderate","public_date":"2019-06-17T17:00:00Z","advisories":["RHSA-2019:1486","RHSA-2019:1485","RHSA-2019:1484","RHSA-2019:1594","RHSA-2019:1483","RHSA-2019:1479","RHSA-2019:1699","RHSA-2019:1489","RHSA-2019:1488","RHSA-2019:1487","RHSA-2019:1482","RHSA-2019:1481","RHSA-2019:1480","RHSA-2019:1490","RHBA-2019:3151","RHSA-2019:1602"],"bugzilla":"1719129","bugzilla_description":"CVE-2019-11479 kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["kernel-0:3.10.0-693.50.3.el7","kernel-0:2.6.32-754.15.3.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-327.79.2.el7","redhat-virtualization-host-0:4.3.4-20190620.3.el7_6","kernel-0:3.10.0-957.21.3.el7","kernel-rt-1:3.10.0-693.50.3.rt56.644.el6rt","kernel-0:4.18.0-80.4.2.el8_0","kernel-0:2.6.32-431.95.3.el6","kernel-rt-0:3.10.0-957.21.3.rt56.935.el7","kernel-0:3.10.0-514.66.2.el7","kernel-0:2.6.32-504.79.3.el6","kernel-alt-0:4.14.0-115.8.2.el7a","kernel-0:3.10.0-862.34.2.el7","kernel-rt-0:4.18.0-80.4.2.rt9.152.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11479.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2019-10160","severity":"important","public_date":"2019-06-03T00:00:00Z","advisories":["RHSA-2019:1587","RHSA-2019:1700","RHSA-2019:2437"],"bugzilla":"1718388","bugzilla_description":"CVE-2019-10160 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python27-python-0:2.7.16-6.el6","python27-python-0:2.7.16-6.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","python-0:2.7.5-80.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10160.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-10175","severity":"moderate","public_date":"2019-06-01T19:00:00Z","advisories":[],"bugzilla":"1721264","bugzilla_description":"CVE-2019-10175 containerized-data-importer: Exposed read access to all storage currently allocated to PVCs regardless of namespace","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284->CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10175.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-10132","severity":"important","public_date":"2019-05-21T12:00:00Z","advisories":["RHSA-2019:1264","RHSA-2019:1268","RHSA-2019:1455"],"bugzilla":"1706067","bugzilla_description":"CVE-2019-10132 libvirt: wrong permissions in systemd admin-sock due to missing SocketMode parameter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["virt:rhel-8000020190516125745.55190bc5","virt:8.0.0-8000020190530233731.55190bc5","libvirt-0:4.5.0-10.el7_6.10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-10139","severity":"moderate","public_date":"2019-05-17T00:00:00Z","advisories":["RHSA-2019:2433","RHSA-2019:2437"],"bugzilla":"1709829","bugzilla_description":"CVE-2019-10139 cockpit-ovirt: admin and appliance passwords saved in plain text variable file during HE deployment","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","cockpit-ovirt-0:0.13.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10139.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2019-13173","severity":"moderate","public_date":"2019-05-15T00:00:00Z","advisories":[],"bugzilla":"1710570","bugzilla_description":"CVE-2019-13173 nodejs-fstream: File overwrite in fstream.DirWriter() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13173.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2018-12126","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646781","bugzilla_description":"CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12126.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-12130","severity":"important","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1646784","bugzilla_description":"CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203->CWE-385->CWE-226","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12130.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2018-12127","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1667782","bugzilla_description":"CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12127.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11091","severity":"moderate","public_date":"2019-05-14T17:00:00Z","advisories":["RHSA-2019:1178","RHSA-2019:1177","RHSA-2019:1155","RHSA-2019:1199","RHSA-2019:1198","RHSA-2019:1176","RHSA-2019:1197","RHSA-2019:1175","RHSA-2019:1455","RHSA-2019:1179","RHSA-2019:1170","RHSA-2019:1190","RHSA-2019:1196","RHSA-2019:1174","RHSA-2019:1195","RHSA-2019:1194","RHSA-2019:1172","RHSA-2019:1193","RHSA-2019:1171","RHSA-2019:1189","RHSA-2019:1167","RHSA-2019:1200","RHSA-2019:2553","RHSA-2019:1188","RHSA-2019:1187","RHSA-2019:1186","RHSA-2019:1204","RHSA-2019:1203","RHSA-2019:1169","RHSA-2019:1202","RHSA-2019:1168","RHSA-2019:1201","RHSA-2019:1181","RHSA-2019:1180","RHSA-2019:1185","RHSA-2019:1184","RHSA-2019:1183","RHSA-2019:1182","RHBA-2019:3151","RHSA-2019:1208","RHSA-2019:1207","RHSA-2019:1206","RHSA-2019:1205","RHSA-2019:1209"],"bugzilla":"1705312","bugzilla_description":"CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-203->CWE-385","affected_packages":["qemu-kvm-10:1.5.3-160.el7_6.2","libvirt-0:3.2.0-14.el7_4.13","vdsm-0:4.20.49-1.el7ev","qemu-kvm-10:1.5.3-141.el7_4.10","kernel-rt-1:3.10.0-693.47.2.rt56.641.el6rt","virt:rhel-8000020190510171727.55190bc5","libvirt-0:0.10.2-46.el6_6.10","qemu-kvm-10:1.5.3-126.el7_3.17","kernel-rt-0:4.18.0-80.1.2.rt9.145.el8_0","redhat-virtualization-host-0:4.3-20190512.0.el7_6","libvirt-0:0.10.2-64.el6_10.1","qemu-kvm-2:0.12.1.2-2.506.el6_10.3","libvirt-0:3.9.0-14.el7_5.9","rhvm-setup-plugins-0:4.2.14-1.el7ev","kernel-rt-0:3.10.0-957.12.2.rt56.929.el7","libvirt-0:2.0.0-10.el7_3.14","kernel-0:3.10.0-327.78.2.el7","kernel-0:2.6.32-431.94.2.el6","redhat-coreos-42.80.20191022.0","kernel-0:3.10.0-514.64.2.el7","kernel-0:4.18.0-80.1.2.el8_0","kernel-0:3.10.0-957.12.2.el7","vdsm-0:4.30.13-4.el7ev","kernel-0:3.10.0-862.32.2.el7","qemu-kvm-rhev-10:2.12.0-18.el7_6.5","qemu-kvm-2:0.12.1.2-2.448.el6_6.8","qemu-kvm-10:1.5.3-156.el7_5.7","kernel-0:2.6.32-504.78.2.el6","libvirt-0:0.10.2-29.el6_5.18","rhvm-setup-plugins-0:4.3.1-1.el7ev","kernel-0:3.10.0-693.47.2.el7","libvirt-0:1.2.17-13.el7_2.10","virt:8.0.0-8000020190530233731.55190bc5","qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-2:0.12.1.2-2.415.el6_5.20","libvirt-0:4.5.0-10.el7_6.9","kernel-0:2.6.32-754.14.2.el6","qemu-kvm-10:1.5.3-105.el7_2.19","rhvm-appliance-0:4.3-20190506.0.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11091.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss3_score":"3.8"},{"CVE":"CVE-2018-16860","severity":"moderate","public_date":"2019-05-14T00:00:00Z","advisories":[],"bugzilla":"1705877","bugzilla_description":"CVE-2018-16860 samba: S4U2Self with unkeyed checksum","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-0223","severity":"moderate","public_date":"2019-04-23T00:00:00Z","advisories":["RHSA-2019:1398","RHSA-2019:2782","RHSA-2019:2781","RHSA-2019:2777","RHSA-2019:1400","RHSA-2019:1399","RHSA-2019:0886","RHSA-2019:2779","RHSA-2019:2778","RHSA-2019:2780"],"bugzilla":"1702439","bugzilla_description":"CVE-2019-0223 qpid-proton: TLS Man in the Middle Vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-300","affected_packages":["qpid-proton-0:0.27.0-3.el7","qpid-proton-0:0.27.0-3.el6","qpid-proton-0:0.9-22.el5","qpid-proton-0:0.28.0-1.el8","qpid-proton-0:0.28.0-1.el7","qpid-proton-0:0.16.0-14.el7sat","qpid-proton-0:0.16.0-14.el6sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0223.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2016-10746","severity":"moderate","public_date":"2019-04-18T00:00:00Z","advisories":[],"bugzilla":"1705507","bugzilla_description":"CVE-2016-10746 libvirt: libvirt-domain.c supports virDomainGetTime API calls with an RO connection instead of RW connection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-648","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10746.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-11324","severity":"moderate","public_date":"2019-04-17T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:2804","RHSA-2020:1916","RHSA-2020:1605","RHBA-2020:2785","RHSA-2019:3590"],"bugzilla":"1702473","bugzilla_description":"CVE-2019-11324 python-urllib3: Certification mishandle when error should be thrown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-pip-0:9.0.3-7.el7_8","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-20916","severity":"moderate","public_date":"2019-04-16T00:00:00Z","advisories":["RHSA-2020:4285","RHSA-2020:4273"],"bugzilla":"1868135","bugzilla_description":"CVE-2019-20916 python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["python27-python-pip-0:8.1.2-6.el7","rh-python36-python-virtualenv-0:15.1.0-3.el6","python27-python-virtualenv-0:13.1.0-4.el7","rh-python36-python-pip-0:9.0.1-5.el7","rh-python36-python-pip-0:9.0.1-5.el6","rh-python36-python-virtualenv-0:15.1.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20916.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2019-9494","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699141","bugzilla_description":"CVE-2019-9494 wpa_supplicant: SAE Timing-based and Cache-based side-channel attack against WPA3's Dragonfly handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9494.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9495","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699149","bugzilla_description":"CVE-2019-9495 wpa_supplicant: EAP-pwd cache side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9495.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9497","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699164","bugzilla_description":"CVE-2019-9497 wpa_supplicant: EAP-pwd server not checking for reflection attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9497.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-9498","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699168","bugzilla_description":"CVE-2019-9498 wpa_supplicant: EAP-pwd server missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9498.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-9499","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699170","bugzilla_description":"CVE-2019-9499 wpa_supplicant: EAP-pwd peer missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9499.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-3870","severity":"moderate","public_date":"2019-04-09T00:00:00Z","advisories":[],"bugzilla":"1689010","bugzilla_description":"CVE-2019-3870 samba: World writable files in Samba AD DC private/ dir","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3870.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.1"},{"CVE":"CVE-2019-3880","severity":"moderate","public_date":"2019-04-09T00:00:00Z","advisories":["RHSA-2019:2099","RHSA-2019:1967","RHSA-2019:1966","RHSA-2019:3582"],"bugzilla":"1691518","bugzilla_description":"CVE-2019-3880 samba: save registry file outside share as unprivileged user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["samba-0:4.9.8-105.el7rhgs","samba-0:4.9.1-6.el7","samba-0:4.10.4-1.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3880.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2019-3886","severity":"low","public_date":"2019-04-03T00:00:00Z","advisories":["RHBA-2019:3723"],"bugzilla":"1694880","bugzilla_description":"CVE-2019-3886 libvirt: virsh domhostname command discloses guest hostname in readonly mode","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3886.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-4300","severity":"moderate","public_date":"2019-04-03T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1695929","bugzilla_description":"CVE-2018-4300 cups: Session cookie generated by the CUPS web interface is easy to guess","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4300.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"7.3"},{"CVE":"CVE-2018-12183","severity":"moderate","public_date":"2019-03-29T00:00:00Z","advisories":[],"bugzilla":"1694077","bugzilla_description":"CVE-2018-12183 edk2: stack overflow in DxeCore leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12183.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2018-12182","severity":"moderate","public_date":"2019-03-28T00:00:00Z","advisories":[],"bugzilla":"1694081","bugzilla_description":"CVE-2018-12182 edk2: insufficient memory write in SMM service leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12182.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-12179","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":[],"bugzilla":"1694072","bugzilla_description":"CVE-2018-12179 edk2: improper configuration insystem firmware leads to privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12179.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-3879","severity":"important","public_date":"2019-03-25T00:00:00Z","advisories":["RHBA-2019:0802"],"bugzilla":"1684978","bugzilla_description":"CVE-2019-3879 ovirt-engine: Missing permissions check in web ui allows a user with basic privileges to delete disks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["org.ovirt.engine-root-0:4.2.8.7-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3879.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9755","severity":"low","public_date":"2019-03-21T00:00:00Z","advisories":["RHBA-2019:3723","RHSA-2019:3345","RHSA-2019:2308"],"bugzilla":"1691624","bugzilla_description":"CVE-2019-9755 ntfs-3g: heap-based buffer overflow leads to local root privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libguestfs-winsupport-0:7.2-3.el7","virt:rhel-8010020190916153839.cdc1202b"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-3855","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687303","bugzilla_description":"CVE-2019-3855 libssh2: Integer overflow in transport read resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3856","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687304","bugzilla_description":"CVE-2019-3856 libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3856.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3857","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687305","bugzilla_description":"CVE-2019-3857 libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3857.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-3858","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687306","bugzilla_description":"CVE-2019-3858 libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3858.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3859","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687307","bugzilla_description":"CVE-2019-3859 libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3859.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3860","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":[],"bugzilla":"1687310","bugzilla_description":"CVE-2019-3860 libssh2: Out-of-bounds reads with specially crafted SFTP packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3861","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2136"],"bugzilla":"1687311","bugzilla_description":"CVE-2019-3861 libssh2: Out-of-bounds reads with specially crafted SSH packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libssh2-0:1.8.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3861.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2019-3862","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:1884"],"bugzilla":"1687312","bugzilla_description":"CVE-2019-3862 libssh2: Out-of-bounds memory comparison with specially crafted message channel request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["libssh2-0:1.4.3-12.el7_6.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3862.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-3863","severity":"important","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:2399","RHSA-2019:1791","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:0679","RHSA-2019:1943"],"bugzilla":"1687313","bugzilla_description":"CVE-2019-3863 libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-787","affected_packages":["libssh2-0:1.4.3-11.el7_3.1","libssh2-0:1.4.3-11.el7_5.1","libssh2-0:1.4.3-11.el7_4.1","libssh2-0:1.4.2-3.el6_10.1","virt:rhel-8000020190510171727.55190bc5","libssh2-0:1.4.3-12.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3863.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11236","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHBA-2020:2804","RHSA-2020:1605","RHSA-2020:0851","RHBA-2020:2785","RHSA-2019:2272","RHBA-2020:1540","RHSA-2019:3590","RHSA-2020:1916","RHSA-2020:2081"],"bugzilla":"1700824","bugzilla_description":"CVE-2019-11236 python-urllib3: CRLF injection due to not encoding the '\\r\\n' sequence leading to possible attack on internal service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.10.2-7.el7","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-3816","severity":"important","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2019:0972","RHSA-2019:0638"],"bugzilla":"1667070","bugzilla_description":"CVE-2019-3816 openwsman: Disclosure of arbitrary files outside of the registered URIs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openwsman-0:2.6.3-6.git4391e5c.el7_6","openwsman-0:2.6.5-5.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-3833","severity":"moderate","public_date":"2019-03-12T00:00:00Z","advisories":["RHSA-2020:3940"],"bugzilla":"1674478","bugzilla_description":"CVE-2019-3833 openwsman: Infinite loop in process_connection() allows denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["openwsman-0:2.6.3-7.git4391e5c.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3833.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-8936","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":[],"bugzilla":"1686605","bugzilla_description":"CVE-2019-8936 ntp: Crafted null dereference attack in authenticated mode 6 packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-9924","severity":"moderate","public_date":"2019-03-07T00:00:00Z","advisories":["RHSA-2020:1113","RHSA-2020:3474","RHBA-2020:1539","RHSA-2020:3592","RHSA-2020:3803","RHBA-2020:1540"],"bugzilla":"1691774","bugzilla_description":"CVE-2019-9924 bash: BASH_CMD is writable in restricted bash shells","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","bash-0:4.2.46-34.el7","bash-0:4.2.46-32.el7_6","bash-0:4.2.46-34.el7_7","bash-0:4.2.46-30.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9924.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2019-9636","severity":"important","public_date":"2019-03-06T00:00:00Z","advisories":["RHBA-2019:0763","RHSA-2019:2980","RHSA-2019:0806","RHSA-2019:1467","RHSA-2019:0981","RHSA-2019:0710","RHSA-2019:0765","RHSA-2019:0997","RHSA-2019:3170","RHBA-2019:0764","RHSA-2019:0902"],"bugzilla":"1688543","bugzilla_description":"CVE-2019-9636 python: Information Disclosure due to urlsplit improper NFKC normalization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-172","affected_packages":["python3-0:3.6.8-2.el8_0","python27-python-0:2.7.13-4.el6","rhvm-appliance-0:4.2-20190411.1.el7","python27-python-0:2.7.13-6.el7","python-0:2.7.5-59.el7_4","python-0:2.7.5-70.el7_5","rh-python36-python-0:3.6.3-4.el6","redhat-virtualization-host-0:4.2-20190411.1.el7_6","python27:2.7-8000020190410132513.c0efe978","rh-python35-python-0:3.5.1-12.el7","rh-python35-python-0:3.5.1-12.el6","python-0:2.7.5-77.el7_6","python-0:2.6.6-68.el6_10","rh-python36-python-0:3.6.3-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-3841","severity":"moderate","public_date":"2019-02-26T21:30:00Z","advisories":[],"bugzilla":"1677117","bugzilla_description":"CVE-2019-3841 kubevirt/virt-cdi-importer: improper TLS certificate validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3841.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2018-12178","severity":"important","public_date":"2019-02-26T00:00:00Z","advisories":[],"bugzilla":"1683326","bugzilla_description":"CVE-2018-12178 edk2: improper DNS packet size check","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12178.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"7.2"},{"CVE":"CVE-2018-12180","severity":"important","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:0809","RHSA-2019:1116","RHSA-2019:0968"],"bugzilla":"1683372","bugzilla_description":"CVE-2018-12180 edk2: Buffer Overflow in BlockIo service for RAM disk","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-787","affected_packages":["ovmf-0:20180508-3.gitee3198e672e2.el7_6.1","redhat-virtualization-host-0:4.3-20190418.0.el7_6","edk2-0:20180508gitee3198e672e2-9.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"8.3"},{"CVE":"CVE-2019-1559","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:2304","RHSA-2019:2439","RHSA-2019:3929","RHSA-2019:2437","RHSA-2019:2471"],"bugzilla":"1683804","bugzilla_description":"CVE-2019-1559 openssl: 0-byte record padding oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["openssl-0:1.0.1e-58.el6_10","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","openssl-1:1.0.2k-19.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1559.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-10194","severity":"moderate","public_date":"2019-02-26T00:00:00Z","advisories":["RHSA-2019:2499"],"bugzilla":"1726007","bugzilla_description":"CVE-2019-10194 ovirt-engine-metrics: disclosure of sensitive passwords in log files and ansible playbooks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["ovirt-engine-metrics-0:1.3.3.3-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10194.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2019-6454","severity":"important","public_date":"2019-02-18T00:00:00Z","advisories":["RHSA-2019:0990","RHSA-2019:0461","RHSA-2019:0368","RHBA-2019:3151","RHSA-2019:1322","RHSA-2019:0457","RHSA-2019:1502","RHSA-2019:2805"],"bugzilla":"1667032","bugzilla_description":"CVE-2019-6454 systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["systemd-0:219-62.el7_6.5","rhvm-appliance-0:4.2-20190224.0.el7","systemd-0:219-42.el7_4.16","redhat-coreos-42.80.20191022.0","systemd-0:239-13.el8_0.3","systemd-0:219-57.el7_5.6","systemd-0:219-30.el7_3.14","redhat-virtualization-host-0:4.2-20190219.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6454.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-3831","severity":"moderate","public_date":"2019-02-14T00:00:00Z","advisories":["RHSA-2019:0457","RHSA-2019:0458"],"bugzilla":"1677108","bugzilla_description":"CVE-2019-3831 vdsm: privilege escalation to root via systemd_run","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["vdsm-0:4.20.47-1.el7ev","redhat-virtualization-host-0:4.2-20190219.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3831.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.4"},{"CVE":"CVE-2019-20921","severity":"moderate","public_date":"2019-02-14T00:00:00Z","advisories":[],"bugzilla":"1882273","bugzilla_description":"CVE-2019-20921 nodejs-bootstrap-select: not escaping title values on <option> may lead to XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20921.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8331","severity":"moderate","public_date":"2019-02-11T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2020:3936"],"bugzilla":"1686454","bugzilla_description":"CVE-2019-8331 bootstrap: XSS in the tooltip or popover data-template attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","ovirt-web-ui-0:1.6.0-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-ui-extensions-0:1.2.2-1.el8ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8331.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-16838","severity":"low","public_date":"2019-02-04T00:00:00Z","advisories":["RHSA-2019:2177","RHSA-2019:3651","RHSA-2019:2437","RHBA-2019:3303"],"bugzilla":"1640820","bugzilla_description":"CVE-2018-16838 sssd: improper implementation of GPOs due to too restrictive permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["redhat-coreos-42.81.20191107.0","sssd-0:1.16.4-21.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","sssd-0:2.2.0-19.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16838.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-3813","severity":"important","public_date":"2019-01-28T18:00:00Z","advisories":["RHSA-2019:0231","RHSA-2019:0232","RHSA-2019:0457"],"bugzilla":"1665371","bugzilla_description":"CVE-2019-3813 spice: Off-by-one error in array access in spice/server/memslot.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-193","affected_packages":["spice-0:0.14.0-6.el7_6.1","redhat-virtualization-host-0:4.2-20190219.0.el7_6","spice-server-0:0.12.4-16.el6_10.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3813.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-3630","severity":"moderate","public_date":"2019-01-26T00:00:00Z","advisories":[],"bugzilla":"1683653","bugzilla_description":"CVE-2018-3630 ovmf: Logic error in FV parsing in MdeModulePkg\\Core\\Pei\\FwVol\\FwVol.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3630.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.6"},{"CVE":"CVE-2018-18508","severity":"moderate","public_date":"2019-01-22T00:00:00Z","advisories":["RHSA-2019:1951"],"bugzilla":"1671310","bugzilla_description":"CVE-2018-18508 nss: NULL pointer dereference in several CMS functions resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["nss-0:3.44.0-7.el8_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-1000020","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1672888","bugzilla_description":"CVE-2019-1000020 libarchive: Infinite recursion in archive_read_support_format_iso9660.c resulting in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1000020.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-1000019","severity":"moderate","public_date":"2019-01-20T00:00:00Z","advisories":["RHSA-2019:3698","RHSA-2019:2298","RHBA-2019:3303"],"bugzilla":"1672892","bugzilla_description":"CVE-2019-1000019 libarchive: Out of bounds read in archive_read_support_format_7zip.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libarchive-0:3.3.2-7.el8","libarchive-0:3.1.2-12.el7","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1000019.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-3840","severity":"moderate","public_date":"2019-01-10T00:00:00Z","advisories":["RHSA-2019:2294"],"bugzilla":"1665228","bugzilla_description":"CVE-2019-3840 libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["libvirt-0:4.5.0-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3840.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H","cvss3_score":"5.8"},{"CVE":"CVE-2018-16889","severity":"moderate","public_date":"2019-01-10T00:00:00Z","advisories":["RHSA-2019:2541","RHSA-2019:2538"],"bugzilla":"1665334","bugzilla_description":"CVE-2018-16889 ceph: debug logging for v4 auth does not sanitize encryption keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["ceph-2:12.2.12-45.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16889.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-16864","severity":"important","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:0342","RHSA-2019:0361","RHSA-2019:0049","RHSA-2019:2402","RHSA-2019:0204","RHSA-2019:0271"],"bugzilla":"1653855","bugzilla_description":"CVE-2018-16864 systemd: stack overflow when calling syslog from a command with long cmdline","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["systemd-0:219-30.el7_3.13","systemd-0:219-57.el7_5.5","rhvm-appliance-0:4.2-20190129.0.el7","systemd-0:219-62.el7_6.2","systemd-0:219-42.el7_4.13","redhat-virtualization-host-0:4.2-20190129.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.4"},{"CVE":"CVE-2018-16865","severity":"important","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:0342","RHSA-2019:0361","RHSA-2019:0049","RHSA-2019:2402","RHSA-2019:0204","RHSA-2019:0271"],"bugzilla":"1653861","bugzilla_description":"CVE-2018-16865 systemd: stack overflow when receiving many journald entries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["systemd-0:219-30.el7_3.13","systemd-0:219-57.el7_5.5","rhvm-appliance-0:4.2-20190129.0.el7","systemd-0:219-62.el7_6.2","systemd-0:219-42.el7_4.13","redhat-virtualization-host-0:4.2-20190129.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16865.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-16866","severity":"moderate","public_date":"2019-01-09T18:00:00Z","advisories":["RHSA-2019:3222","RHSA-2020:0593","RHSA-2020:1264","RHSA-2019:2091"],"bugzilla":"1653867","bugzilla_description":"CVE-2018-16866 systemd: out-of-bounds read when parsing a crafted syslog message","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125->CWE-200","affected_packages":["systemd-0:219-57.el7_5.9","systemd-0:219-62.el7_6.11","systemd-0:219-67.el7","systemd-0:219-42.el7_4.20"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16866.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-16846","severity":"moderate","public_date":"2019-01-07T00:00:00Z","advisories":["RHSA-2019:2541","RHSA-2019:2538"],"bugzilla":"1644461","bugzilla_description":"CVE-2018-16846 ceph: ListBucket max-keys has no defined limit in the RGW codebase","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":["ceph-2:12.2.12-45.el7cp"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16846.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-12247","severity":null,"public_date":"2019-01-07T00:00:00Z","advisories":[],"bugzilla":"1712834","bugzilla_description":"CVE-2019-12247 QEMU: qemu-guest-agent: integer overflow while running guest-exec command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12247.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2018-20815","severity":"important","public_date":"2018-12-14T00:00:00Z","advisories":["RHSA-2019:2553","RHSA-2019:1881","RHSA-2019:1175","RHSA-2019:1743","RHSA-2019:1723","RHSA-2019:1667","RHSA-2019:2507","RHSA-2019:1968"],"bugzilla":"1693101","bugzilla_description":"CVE-2018-20815 QEMU: device_tree: heap buffer overflow while loading device tree blob","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["qemu-kvm-rhev-10:2.12.0-33.el7","qemu-kvm-ma-10:2.12.0-18.el7_6.4","virt:rhel-8000020190510171727.55190bc5","qemu-kvm-rhev-10:2.12.0-18.el7_6.6","qemu-kvm-rhev-10:2.12.0-18.el7_6.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20815.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-3804","severity":"moderate","public_date":"2018-12-13T00:00:00Z","advisories":["RHSA-2019:0482","RHSA-2019:1571","RHSA-2019:1569"],"bugzilla":"1663567","bugzilla_description":"CVE-2019-3804 cockpit: Crash when parsing invalid base64 headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["rhvm-appliance-0:4.3-20190605.0.el7","cockpit-0:173.2-1.el7","redhat-virtualization-host-0:4.3-20190610.0.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3804.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-4700","severity":"moderate","public_date":"2018-12-07T00:00:00Z","advisories":["RHSA-2020:1050"],"bugzilla":"1649347","bugzilla_description":"CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-384","affected_packages":["cups-1:1.6.3-43.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-4700.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"7.3"},{"CVE":"CVE-2018-19788","severity":"moderate","public_date":"2018-12-03T00:00:00Z","advisories":["RHSA-2019:2046","RHSA-2019:3232"],"bugzilla":"1655925","bugzilla_description":"CVE-2018-19788 polkit: Improper handling of user with uid > INT_MAX leading to authentication bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["polkit-0:0.112-22.el7","polkit-0:0.112-18.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19788.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-16868","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1654929","bugzilla_description":"CVE-2018-16868 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16868.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-16869","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":[],"bugzilla":"1654930","bugzilla_description":"CVE-2018-16869 nettle: Leaky data conversion exposing a manager oracle","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16869.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2018-12404","severity":"moderate","public_date":"2018-11-30T00:00:00Z","advisories":["RHSA-2019:2237"],"bugzilla":"1657913","bugzilla_description":"CVE-2018-12404 nss: Cache side-channel variant of the Bleichenbacher attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["nss-0:3.44.0-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12404.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-18311","severity":"important","public_date":"2018-11-29T00:00:00Z","advisories":["RHSA-2019:0001","RHSA-2019:0010","RHSA-2019:2400","RHSA-2019:1942","RHSA-2019:1790","RHSA-2019:0109"],"bugzilla":"1646730","bugzilla_description":"CVE-2018-18311 perl: Integer overflow leading to buffer overflow in Perl_my_setenv()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-120","affected_packages":["rh-perl524-perl-4:5.24.0-381.el6","perl-4:5.16.3-294.el7_6","rh-perl524-perl-4:5.24.0-381.el7","perl-4:5.16.3-292.el7_5.1","perl-4:5.16.3-292.el7_4.1","rh-perl526-perl-4:5.26.3-405.el7","perl-4:5.16.3-291.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18311.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-1000845","severity":null,"public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1661252","bugzilla_description":"CVE-2018-1000845 avahi: DNS amplification and reflection to spoofed addresses","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000845.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-5407","severity":"moderate","public_date":"2018-10-30T00:00:00Z","advisories":["RHSA-2019:3931","RHSA-2019:3932","RHSA-2019:0483","RHSA-2019:2125","RHSA-2019:3929","RHSA-2019:3933","RHSA-2019:3935"],"bugzilla":"1645695","bugzilla_description":"CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openssl-1:1.0.2k-16.el7_6.1","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-15688","severity":"important","public_date":"2018-10-26T00:00:00Z","advisories":["RHSA-2019:0049","RHSA-2018:3665"],"bugzilla":"1639067","bugzilla_description":"CVE-2018-15688 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131->CWE-190->CWE-122","affected_packages":["NetworkManager-1:1.12.0-8.el7_6","systemd-0:219-62.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15688.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-17204","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0053","RHSA-2019:0081","RHSA-2018:3500"],"bugzilla":"1632522","bugzilla_description":"CVE-2018-17204 openvswitch: Mishandle of group mods in lib/ofp-util.c:parse_group_prop_ntr_selection_method() allows for assertion failure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openvswitch-0:2.9.0-83.el7fdp.1","openvswitch-0:2.9.0-70.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.7"},{"CVE":"CVE-2018-17205","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0053","RHSA-2019:0081","RHSA-2018:3500"],"bugzilla":"1632525","bugzilla_description":"CVE-2018-17205 openvswitch: Error during bundle commit in ofproto/ofproto.c:ofproto_rule_insert__() allows for crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["openvswitch-0:2.9.0-83.el7fdp.1","openvswitch-0:2.9.0-70.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17205.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.4"},{"CVE":"CVE-2018-17206","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2019:0053","RHSA-2019:0081","RHSA-2018:3500"],"bugzilla":"1632528","bugzilla_description":"CVE-2018-17206 openvswitch: Buffer over-read in lib/ofp-actions.c:decode_bundle()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openvswitch-0:2.9.0-83.el7fdp.1","openvswitch-0:2.9.0-70.el7fdp.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17206.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"4.9"},{"CVE":"CVE-2018-17942","severity":"low","public_date":"2018-09-19T00:00:00Z","advisories":[],"bugzilla":"1635896","bugzilla_description":"CVE-2018-17942 gnulib: heap-based buffer overflow in convert_to_decimal function in vasnprintf.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17942.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000805","severity":"critical","public_date":"2018-09-07T00:00:00Z","advisories":["RHBA-2018:3497","RHSA-2018:3470","RHSA-2018:3406","RHSA-2018:3347"],"bugzilla":"1637263","bugzilla_description":"CVE-2018-1000805 python-paramiko: Authentication bypass in auth_handler.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-305","affected_packages":["redhat-virtualization-host-0:4.2-20181026.0.el7_6","python-paramiko-0:1.7.5-5.el6_10","python-paramiko-0:2.1.1-9.el7","rhvm-appliance-0:4.2-20181026.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000805.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-20676","severity":"moderate","public_date":"2018-08-10T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668082","bugzilla_description":"CVE-2018-20676 bootstrap: XSS in the tooltip data-viewport attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20676.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-20677","severity":"moderate","public_date":"2018-08-10T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668089","bugzilla_description":"CVE-2018-20677 bootstrap: XSS in the affix configuration target property","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20677.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-6470","severity":"moderate","public_date":"2018-07-14T00:00:00Z","advisories":["RHSA-2019:3525","RHSA-2019:2060"],"bugzilla":"1708641","bugzilla_description":"CVE-2019-6470 dhcp: double-deletion of the released addresses in the dhcpv6 code leading to crash and possible DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["dhcp-12:4.3.6-34.el8","dhcp-12:4.2.5-77.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-18074","severity":"low","public_date":"2018-06-29T00:00:00Z","advisories":["RHSA-2019:2035","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHBA-2020:1540"],"bugzilla":"1643829","bugzilla_description":"CVE-2018-18074 python-requests: Redirect from HTTPS to HTTP does not remove Authorization header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-requests-0:2.6.0-5.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18074.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.6"},{"CVE":"CVE-2018-1072","severity":"low","public_date":"2018-06-26T00:00:00Z","advisories":["RHSA-2018:2071"],"bugzilla":"1553522","bugzilla_description":"CVE-2018-1072 ovirt-engine-setup: unfiltered db password in engine-backup log","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["org.ovirt.engine-root-0:4.2.4.5-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1072.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2018-12617","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1594054","bugzilla_description":"CVE-2018-12617 Qemu: qemu-guest-agent: Integer overflow causes segmentation fault in qmp_guest_file_read()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2018-10841","severity":"important","public_date":"2018-06-20T10:00:00Z","advisories":["RHSA-2018:1954","RHSA-2018:1955"],"bugzilla":"1582043","bugzilla_description":"CVE-2018-10841 glusterfs: access trusted peer group via remote-host command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["glusterfs-0:3.8.4-54.11.el6","glusterfs-0:3.8.4-54.10.el7","glusterfs-0:3.8.4-54.11.el6rhs","glusterfs-0:3.8.4-54.10.el7rhgs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10841.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.6"},{"CVE":"CVE-2019-0161","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2019:2125","RHSA-2019:2437"],"bugzilla":"1694065","bugzilla_description":"CVE-2019-0161 edk2: stack overflow in XHCI causing denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121->CWE-400","affected_packages":["redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","ovmf-0:20180508-6.gitee3198e672e2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0161.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.9"},{"CVE":"CVE-2018-1075","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2018:2071"],"bugzilla":"1542508","bugzilla_description":"CVE-2018-1075 ovirt-engine: Unfiltered password when choosing manual db provisioning","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["org.ovirt.engine-root-0:4.2.4.5-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1075.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2018-14040","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601614","bugzilla_description":"CVE-2018-14040 bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14040.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-14042","severity":"moderate","public_date":"2018-05-29T00:00:00Z","advisories":["RHSA-2020:3936"],"bugzilla":"1601617","bugzilla_description":"CVE-2018-14042 bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-3639","severity":"important","public_date":"2018-05-21T21:00:00Z","advisories":["RHSA-2018:1648","RHSA-2018:1967","RHSA-2018:1649","RHSA-2018:1965","RHSA-2018:1646","RHSA-2018:1647","RHSA-2018:2216","RHSA-2018:1644","RHSA-2018:1688","RHSA-2018:1645","RHSA-2018:1689","RHSA-2018:2250","RHSA-2018:2171","RHSA-2018:2172","RHSA-2018:3425","RHSA-2018:1686","RHSA-2018:1642","RHSA-2018:2258","RHSA-2018:3424","RHSA-2018:1643","RHSA-2018:1640","RHSA-2018:3423","RHSA-2018:1641","RHSA-2018:1639","RHSA-2019:1046","RHSA-2018:1637","RHSA-2018:1638","RHSA-2018:1635","RHSA-2018:2328","RHSA-2018:1636","RHSA-2018:1633","RHSA-2018:1710","RHSA-2018:1997","RHSA-2018:1711","RHSA-2018:2162","RHSA-2018:2161","RHSA-2018:1675","RHSA-2018:1632","RHSA-2018:2006","RHSA-2018:1676","RHSA-2018:2003","RHSA-2018:2289","RHSA-2018:1630","RHSA-2018:1674","RHSA-2018:2246","RHSA-2018:2001","RHSA-2018:2364","RHSA-2018:2164","RHSA-2018:2363","RHSA-2018:1826","RHSA-2018:1629","RHSA-2018:1668","RHSA-2018:3407","RHSA-2018:1669","RHSA-2019:0148","RHSA-2018:1666","RHSA-2018:1667","RHSA-2018:2394","RHSA-2018:1664","RHSA-2018:1665","RHSA-2018:3402","RHSA-2018:3401","RHSA-2018:1662","RHSA-2018:3400","RHSA-2018:1663","RHSA-2018:1660","RHSA-2018:1661","RHSA-2018:2396","RHSA-2018:1738","RHSA-2018:2948","RHSA-2018:1659","RHSA-2018:2309","RHSA-2018:1737","RHSA-2018:1657","RHSA-2018:1658","RHSA-2018:1655","RHSA-2018:1854","RHSA-2018:1656","RHSA-2018:2228","RHSA-2018:1690","RHSA-2018:2060","RHSA-2018:1653","RHSA-2018:1654","RHSA-2018:1651","RHSA-2018:1652","RHSA-2018:1696","RHSA-2018:3399","RHSA-2018:1650","RHSA-2018:3398","RHSA-2018:2387","RHSA-2018:3397","RHSA-2018:3396"],"bugzilla":"1566890","bugzilla_description":"CVE-2018-3639 hw: cpu: speculative store bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-200","affected_packages":["qemu-kvm-rhev-10:2.10.0-21.el7_5.4","qemu-kvm-rhev-10:2.10.0-21.el7_5.3","kernel-rt-0:3.10.0-862.6.3.rt56.811.el7","libvirt-0:0.10.2-54.el6_7.8","libvirt-0:0.10.2-54.el6_7.9","kernel-alt-0:4.14.0-115.el7a","kernel-0:2.6.32-573.55.4.el6","qemu-kvm-10:1.5.3-141.el7_4.7","kernel-0:2.6.18-433.el5","kernel-0:2.6.32-754.2.1.el6","kernel-0:2.6.32-358.88.4.el6","libvirt-0:3.9.0-14.el7_5.6","libvirt-0:2.0.0-10.el7_3.13","vdsm-0:4.20.27.2-1.el7ev","rhev-hypervisor7-0:7.3-20180521.1.el6ev","libvirt-0:3.9.0-14.el7_5.5","libvirt-0:2.0.0-10.el7_3.12","rhevm-setup-plugins-0:3.6.7-1.el6ev","kernel-0:2.6.32-358.91.4.el6","qemu-kvm-2:0.12.1.2-2.448.el6_6.6","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5","qemu-kvm-rhev-10:2.9.0-16.el7_4.17","qemu-kvm-2:0.12.1.2-2.448.el6_6.7","qemu-kvm-rhev-10:2.9.0-16.el7_4.18","rhvm-setup-plugins-0:4.3.0-1.el7ev","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9","libvirt-0:0.10.2-29.el6_5.16","qemu-kvm-2:0.12.1.2-2.415.el6_5.18","rhvm-setup-plugins-0:4.2.10-1.el7ev","libvirt-0:0.10.2-29.el6_5.17","qemu-kvm-2:0.12.1.2-2.415.el6_5.19","kernel-0:3.10.0-514.53.1.el7","kernel-0:2.6.18-348.40.1.el5","libvirt-0:0.10.2-18.el6_4.18","kernel-0:2.6.32-431.89.4.el6","kernel-alt-0:4.14.0-49.8.1.el7a","kernel-0:3.10.0-327.71.1.el7","kernel-0:2.6.32-573.59.1.el6","kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt","libvirt-0:1.2.17-13.el7_2.8","rhev-hypervisor7-0:7.3-20180710.1.el6ev","libvirt-0:0.10.2-18.el6_4.17","libvirt-0:1.2.17-13.el7_2.9","kernel-0:2.6.32-696.30.1.el6","libvirt-0:3.2.0-14.el7_4.10","qemu-kvm-2:0.12.1.2-2.503.el6_9.6","libvirt-0:3.2.0-14.el7_4.11","redhat-virtualization-host-0:3.6-20180521.0","org.ovirt.engine-root-0:3.6.13.2-1","kernel-0:3.10.0-693.25.7.el7","qemu-kvm-2:0.12.1.2-2.355.el6_4.11","qemu-kvm-2:0.12.1.2-2.355.el6_4.12","kernel-0:3.10.0-862.3.2.el7","kernel-0:3.10.0-693.33.1.el7","qemu-kvm-10:1.5.3-156.el7_5.3","qemu-kvm-10:1.5.3-126.el7_3.14","qemu-kvm-10:1.5.3-156.el7_5.2","redhat-virtualization-host-0:4.2-20180518.2","rhev-hypervisor7-0:7.3-20180521.1.el7ev","vdsm-0:4.17.45-1.el7ev","kernel-0:3.10.0-862.6.3.el7","qemu-kvm-2:0.12.1.2-2.506.el6_10.1","kernel-0:2.6.32-573.60.1.el6","qemu-kvm-rhev-10:2.6.0-28.el7_3.17","java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5","kernel-0:2.6.32-754.el6","qemu-kvm-2:0.12.1.2-2.479.el6_7.7","qemu-kvm-2:0.12.1.2-2.479.el6_7.8","java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9","kernel-0:3.10.0-514.48.5.el7","kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt","kernel-0:2.6.32-504.72.1.el6","kernel-0:3.10.0-693.37.4.el7","libvirt-0:0.10.2-46.el6_6.9","libvirt-0:0.10.2-46.el6_6.8","kernel-rt-0:3.10.0-862.3.2.rt56.808.el7","rhvm-setup-plugins-0:4.2.9-1.el7ev","libvirt-0:0.10.2-62.el6_9.2","qemu-kvm-10:1.5.3-105.el7_2.18","qemu-kvm-10:1.5.3-105.el7_2.17","kernel-0:2.6.32-504.69.3.el6","org.ovirt.engine-root-0:4.2.3.6-1","kernel-0:3.10.0-327.66.5.el7","kernel-0:3.10.0-514.51.1.el7","rhev-hypervisor7-0:7.3-20180710.1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3639.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2018-1117","severity":"low","public_date":"2018-05-15T00:00:00Z","advisories":["RHSA-2018:1452"],"bugzilla":"1574776","bugzilla_description":"CVE-2018-1117 ovirt-ansible-roles: passwords revealed in ansible log when provisioning new provider","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["ovirt-ansible-roles-0:1.0.6-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1117.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2018-1257","severity":"low","public_date":"2018-05-09T00:00:00Z","advisories":["RHSA-2018:3768","RHSA-2018:1809"],"bugzilla":"1578578","bugzilla_description":"CVE-2018-1257 spring-framework: ReDoS Attack with spring-messaging","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-1087","severity":"important","public_date":"2018-05-08T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1347","RHSA-2018:1710","RHSA-2018:1348","RHSA-2018:1524","RHSA-2018:1711","RHSA-2018:1345","RHSA-2018:1355"],"bugzilla":"1566837","bugzilla_description":"CVE-2018-1087 Kernel: KVM: error in exception handling leads to wrong debug stack value","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.25.4.el7","redhat-virtualization-host-0:3.6-20180521.0","kernel-0:3.10.0-862.2.3.el7","rhev-hypervisor7-0:7.3-20180521.1.el7ev","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","rhev-hypervisor7-0:7.3-20180521.1.el6ev","kernel-0:3.10.0-327.66.3.el7","kernel-0:3.10.0-514.48.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1087.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2018-8897","severity":"moderate","public_date":"2018-05-08T00:00:00Z","advisories":["RHSA-2018:1318","RHSA-2018:1319","RHSA-2018:1349","RHSA-2018:1347","RHSA-2018:1710","RHSA-2018:1348","RHSA-2018:1524","RHSA-2018:1711","RHSA-2018:1345","RHSA-2018:1346","RHSA-2018:1354","RHSA-2018:1355","RHSA-2018:1352","RHSA-2018:1353","RHSA-2018:1350","RHSA-2018:1351"],"bugzilla":"1567074","bugzilla_description":"CVE-2018-8897 Kernel: error in exception handling leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-250","affected_packages":["kernel-0:3.10.0-693.25.4.el7","redhat-virtualization-host-0:3.6-20180521.0","kernel-0:2.6.32-696.28.1.el6","kernel-0:2.6.18-431.el5","kernel-0:2.6.32-504.68.2.el6","kernel-rt-1:3.10.0-693.25.4.rt56.613.el6rt","kernel-0:3.10.0-514.48.3.el7","kernel-0:2.6.32-358.88.2.el6","kernel-0:2.6.32-573.55.2.el6","kernel-0:2.6.32-431.89.2.el6","kernel-0:3.10.0-862.2.3.el7","rhev-hypervisor7-0:7.3-20180521.1.el7ev","kernel-0:2.6.18-348.39.2.el5","kernel-rt-0:3.10.0-862.2.3.rt56.806.el7","rhev-hypervisor7-0:7.3-20180521.1.el6ev","kernel-0:3.10.0-327.66.3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8897.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-1074","severity":"low","public_date":"2018-04-26T00:00:00Z","advisories":["RHBA-2018:1219"],"bugzilla":"1553529","bugzilla_description":"CVE-2018-1074 ovirt-engine: API exposes power management credentials to administrators","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["org.ovirt.engine-root-0:4.1.11.2-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1074.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"7.7"},{"CVE":"CVE-2018-9252","severity":"low","public_date":"2018-04-02T00:00:00Z","advisories":[],"bugzilla":"1565333","bugzilla_description":"CVE-2018-9252 jasper: reachable assertion in jpc_abstorelstepsize() in jpc_enc.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9252.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9055","severity":"low","public_date":"2018-03-26T00:00:00Z","advisories":[],"bugzilla":"1561699","bugzilla_description":"CVE-2018-9055 jasper: reachable assertion in jpc_firstone() in jpc_math.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9055.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-20060","severity":"moderate","public_date":"2018-03-26T00:00:00Z","advisories":["RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHSA-2019:2272","RHBA-2020:1540"],"bugzilla":"1649153","bugzilla_description":"CVE-2018-20060 python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-urllib3-0:1.10.2-7.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-1064","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":["RHSA-2018:1929","RHSA-2018:1396"],"bugzilla":"1550672","bugzilla_description":"CVE-2018-1064 libvirt: Incomplete fix for CVE-2018-5748 triggered by QEMU guest agent","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["libvirt-0:0.10.2-64.el6","libvirt-0:3.9.0-14.el7_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1064.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000095","severity":"moderate","public_date":"2018-03-12T00:00:00Z","advisories":[],"bugzilla":"1542165","bugzilla_description":"CVE-2018-1000095 ovirt-engine: stored XSS in snapshot description and comment","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000095.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2018-3737","severity":"moderate","public_date":"2018-03-12T00:00:00Z","advisories":["RHSA-2020:2625"],"bugzilla":"1567228","bugzilla_description":"CVE-2018-3737 nodejs-sshpk: ReDoS when parsing crafted invalid public keys in lib/formats/ssh.js","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["rh-nodejs8-nodejs-0:8.17.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1062","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":["RHBA-2018:0135"],"bugzilla":"1549944","bugzilla_description":"CVE-2018-1062 ovirt-engine: When Wipe After Delete (WAD) and Enable Discard are both enabled for a VM disk, discarded data might not be wiped after the disk is removed.","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":["org.ovirt.engine-root-0:4.1.9.1-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1062.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2018-3721","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":[],"bugzilla":"1545884","bugzilla_description":"CVE-2018-3721 lodash: Prototype pollution in utilities function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3721.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2018-3728","severity":"low","public_date":"2018-02-15T00:00:00Z","advisories":["RHSA-2018:1264","RHSA-2018:1263"],"bugzilla":"1545893","bugzilla_description":"CVE-2018-3728 hoek: Prototype pollution in utilities function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rhmap46/redis:2.8.21-40"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3728.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2018-6764","severity":"moderate","public_date":"2018-02-05T00:00:00Z","advisories":["RHSA-2018:3113"],"bugzilla":"1541444","bugzilla_description":"CVE-2018-6764 libvirt: guest could inject executable code via libnss_dns.so loaded by libvirt_lxc before init","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-179","affected_packages":["libvirt-0:4.5.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6764.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2018-1000018","severity":"moderate","public_date":"2018-01-24T00:00:00Z","advisories":[],"bugzilla":"1537904","bugzilla_description":"CVE-2018-1000018 ovirt-hosted-engine-setup: root password exposed in log file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000018.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-5748","severity":"low","public_date":"2018-01-16T00:00:00Z","advisories":["RHSA-2018:1929","RHSA-2018:1396"],"bugzilla":"1528396","bugzilla_description":"CVE-2018-5748 libvirt: Resource exhaustion via qemuMonitorIORead() method","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["libvirt-0:0.10.2-64.el6","libvirt-0:3.9.0-14.el7_5.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5748.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2017-3737","severity":"moderate","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523504","bugzilla_description":"CVE-2017-3737 openssl: Read/write after SSL object in error state","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-391","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3737.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3738","severity":"low","public_date":"2017-12-07T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1523510","bugzilla_description":"CVE-2017-3738 openssl: rsaz_1024_mul_avx2 overflow bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["openssl-1:1.0.2k-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3738.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-15113","severity":"low","public_date":"2017-11-13T00:00:00Z","advisories":["RHEA-2017:3138"],"bugzilla":"1512365","bugzilla_description":"CVE-2017-15113 ovirt-engine: DEBUG logging includes unmasked passwords","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-212","affected_packages":["org.ovirt.engine-root-0:4.1.7.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15113.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.2"},{"CVE":"CVE-2017-3736","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:0998","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1509169","bugzilla_description":"CVE-2017-3736 openssl: bn_sqrx8x_internal carry bug on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":["openssl-1:1.0.2k-12.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3736.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-16231","severity":null,"public_date":"2017-11-01T00:00:00Z","advisories":[],"bugzilla":"1700392","bugzilla_description":"CVE-2017-16231 pcre: self-recursive call in match() in pcre_exec.c leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16231.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-1000257","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2017:3263","RHSA-2018:2486"],"bugzilla":"1503705","bugzilla_description":"CVE-2017-1000257 curl: IMAP FETCH response out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-42.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-5130","severity":"important","public_date":"2017-10-17T00:00:00Z","advisories":["RHSA-2017:2997"],"bugzilla":"1503537","bugzilla_description":"CVE-2017-5130 chromium-browser: heap overflow in libxml2","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["chromium-browser-0:62.0.3202.62-2.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5130.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-1000256","severity":"low","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1503658","bugzilla_description":"CVE-2017-1000256 libvirt: TLS certificate verification disabled for clients","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000256.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2017-15286","severity":"low","public_date":"2017-10-12T00:00:00Z","advisories":[],"bugzilla":"1510438","bugzilla_description":"CVE-2017-15286 sqlite: NULL pointer dereference in tableColumnList","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15286.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000254","severity":"moderate","public_date":"2017-10-04T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1495541","bugzilla_description":"CVE-2017-1000254 curl: FTP PWD response parser out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000254.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-15232","severity":"low","public_date":"2017-09-30T00:00:00Z","advisories":[],"bugzilla":"1500678","bugzilla_description":"CVE-2017-15232 libjpeg-turbo: NULL pointer dereference in jdpostct.c and jquant1.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14229","severity":"moderate","public_date":"2017-09-11T00:00:00Z","advisories":[],"bugzilla":"1491853","bugzilla_description":"CVE-2017-14229 jasper: excessive looping in jpc_dec_tileinit()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14229.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-16113","severity":"moderate","public_date":"2017-09-08T00:00:00Z","advisories":[],"bugzilla":"1588385","bugzilla_description":"CVE-2017-16113 nodejs-parsejson: Regular Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16113.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-16138","severity":"moderate","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1500700","bugzilla_description":"CVE-2017-16138 nodejs-mime: Regular expression Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16138.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-16137","severity":"moderate","public_date":"2017-09-05T00:00:00Z","advisories":[],"bugzilla":"1500705","bugzilla_description":"CVE-2017-16137 nodejs-debug: Regular expression Denial of Service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16137.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-14132","severity":"low","public_date":"2017-09-01T00:00:00Z","advisories":[],"bugzilla":"1489304","bugzilla_description":"CVE-2017-14132 jasper: heap-based buffer over-read in jas_image_ishomosamp()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14132.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-3735","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":["RHSA-2018:3221"],"bugzilla":"1486144","bugzilla_description":"CVE-2017-3735 openssl: Malformed X.509 IPAdressFamily could cause OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["openssl-1:1.0.2k-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-13685","severity":"low","public_date":"2017-08-28T00:00:00Z","advisories":[],"bugzilla":"1488881","bugzilla_description":"CVE-2017-13685 sqlite: Local DoS via dump_callback function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13685.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-0379","severity":"moderate","public_date":"2017-08-27T00:00:00Z","advisories":[],"bugzilla":"1485921","bugzilla_description":"CVE-2017-0379 libgcrypt: Missing input validation for X25519 curve","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0379.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-13745","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488958","bugzilla_description":"CVE-2017-13745 jasper: reachable abort in jpc_dec_process_sot()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13745.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13746","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488959","bugzilla_description":"CVE-2017-13746 jasper: reachable assertion in jpc_dec_process_siz() - dec->numvtiles","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13746.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13747","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488960","bugzilla_description":"CVE-2017-13747 jasper: reachable assertion in jpc_floorlog2()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13747.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13748","severity":"moderate","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488961","bugzilla_description":"CVE-2017-13748 jasper: tile memory not released on image parsing errors","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13748.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13749","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488962","bugzilla_description":"CVE-2017-13749 jasper: reachable assertion in jpc_pi_nextrpcl()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13749.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13750","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488963","bugzilla_description":"CVE-2017-13750 jasper: reachable assertion in jpc_dec_process_siz() - dec->numhtiles","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13750.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13751","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488964","bugzilla_description":"CVE-2017-13751 jasper: reachable assertion in calcstepsizes()","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13751.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-13752","severity":"low","public_date":"2017-08-25T00:00:00Z","advisories":[],"bugzilla":"1488965","bugzilla_description":"CVE-2017-13752 jasper: reachable assertion in jpc_dequantize()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13752.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-1000101","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1478309","bugzilla_description":"CVE-2017-1000101 curl: URL globbing out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000101.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.2"},{"CVE":"CVE-2017-1000100","severity":"low","public_date":"2017-08-09T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1478310","bugzilla_description":"CVE-2017-1000100 curl: TFTP sends more than buffer size","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000100.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2017-1000099","severity":"moderate","public_date":"2017-08-09T00:00:00Z","advisories":[],"bugzilla":"1478316","bugzilla_description":"CVE-2017-1000099 curl: FILE buffer read out of bounds","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000099.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"4.7"},{"CVE":"CVE-2017-7510","severity":"moderate","public_date":"2017-07-27T00:00:00Z","advisories":["RHEA-2017:1814"],"bugzilla":"1456590","bugzilla_description":"CVE-2017-7510 RHV 4: ovirt-engine exposes cloud-init root password via REST API","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["org.ovirt.engine-root-0:4.1.4.2-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7510.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-9614","severity":"low","public_date":"2017-07-26T00:00:00Z","advisories":[],"bugzilla":"1475742","bugzilla_description":"CVE-2017-9614 libjpeg-turbo: Invalid memory access in the fill_input_buffer function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9614.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7000","severity":"moderate","public_date":"2017-07-25T00:00:00Z","advisories":["RHSA-2017:1833"],"bugzilla":"1475207","bugzilla_description":"CVE-2017-7000 chromium-browser: pointer disclosure in sqlite","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["chromium-browser-0:60.0.3112.78-1.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7000.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2017-11164","severity":"low","public_date":"2017-07-10T00:00:00Z","advisories":[],"bugzilla":"1470107","bugzilla_description":"CVE-2017-11164 pcre: OP_KETRMAX feature in the match function in pcre_exec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11164.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-10989","severity":"low","public_date":"2017-07-06T00:00:00Z","advisories":[],"bugzilla":"1469672","bugzilla_description":"CVE-2017-10989 sqlite: Heap-buffer overflow in the getNodeSize function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10989.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"3.6"},{"CVE":"CVE-2017-7526","severity":"moderate","public_date":"2017-06-29T00:00:00Z","advisories":[],"bugzilla":"1466265","bugzilla_description":"CVE-2017-7526 libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2017-10790","severity":"low","public_date":"2017-06-22T00:00:00Z","advisories":[],"bugzilla":"1473192","bugzilla_description":"CVE-2017-10790 libtasn1: NULL pointer dereference in the _asn1_check_identifier function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-10790.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9814","severity":"low","public_date":"2017-06-21T00:00:00Z","advisories":[],"bugzilla":"1472788","bugzilla_description":"CVE-2017-9814 cairo: Out-of-bounds read due to mishandling of unexpected malloc(0) call","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9814.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9502","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1461321","bugzilla_description":"CVE-2017-9502 curl: URL file scheme drive letter buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9502.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-9233","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1462729","bugzilla_description":"CVE-2017-9233 expat: Inifinite loop due to invalid XML in external entity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2017-9782","severity":"low","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1463993","bugzilla_description":"CVE-2017-9782 jasper: cdef.ents[] heap-based buffer over-read in jp2_decode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9782.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7507","severity":"moderate","public_date":"2017-06-07T00:00:00Z","advisories":["RHSA-2017:2292"],"bugzilla":"1454621","bugzilla_description":"CVE-2017-7507 gnutls: Crash upon receiving well-formed status_request extension","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-9526","severity":"low","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1459887","bugzilla_description":"CVE-2017-9526 libgcrypt: Possible timing attack on EdDSA session key","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9526.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-6891","severity":"low","public_date":"2017-05-18T00:00:00Z","advisories":[],"bugzilla":"1456763","bugzilla_description":"CVE-2017-6891 libtasn1: Stack-based buffer overflow in asn1_find_node()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6891.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7475","severity":"low","public_date":"2017-04-23T00:00:00Z","advisories":[],"bugzilla":"1447949","bugzilla_description":"CVE-2017-7475 cairo: NULL pointer dereference with a crafted font file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7475.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7468","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":[],"bugzilla":"1443381","bugzilla_description":"CVE-2017-7468 curl: TLS session resumption client cert bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2018-16881","severity":"moderate","public_date":"2017-04-19T00:00:00Z","advisories":["RHBA-2019:2501","RHSA-2019:2110","RHSA-2019:2439","RHSA-2019:2437"],"bugzilla":"1658366","bugzilla_description":"CVE-2018-16881 rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-190","affected_packages":["rsyslog-0:8.24.0-41.el7_7","rhvm-appliance-0:4.3-20190722.0.el7","redhat-virtualization-host-0:4.3.5-20190722.0.el7_7","rsyslog-0:8.24.0-38.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16881.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-7375","severity":"moderate","public_date":"2017-04-17T00:00:00Z","advisories":[],"bugzilla":"1462203","bugzilla_description":"CVE-2017-7375 libxml2: Missing validation for external entities in xmlParsePEReference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7375.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-7376","severity":"low","public_date":"2017-04-17T00:00:00Z","advisories":[],"bugzilla":"1462216","bugzilla_description":"CVE-2017-7376 libxml2: Incorrect limit used for port values","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-682","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-0663","severity":"moderate","public_date":"2017-04-17T00:00:00Z","advisories":[],"bugzilla":"1462225","bugzilla_description":"CVE-2017-0663 libxml2: Heap buffer overflow in xmlAddID","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0663.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-7869","severity":"moderate","public_date":"2017-04-14T00:00:00Z","advisories":["RHSA-2017:2292"],"bugzilla":"1443033","bugzilla_description":"CVE-2017-7869 gnutls: Out-of-bounds write related to the cdk_pkt_read function (GNUTLS-SA-2017-3)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["gnutls-0:3.3.26-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2017-7407","severity":"low","public_date":"2017-04-04T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1439190","bugzilla_description":"CVE-2017-7407 curl: --write-out out of bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7407.json","cvss3_scoring_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"2.4"},{"CVE":"CVE-2017-2628","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":["RHSA-2017:0847"],"bugzilla":"1422464","bugzilla_description":"CVE-2017-2628 curl: negotiate not treated as connection-oriented (incomplete fix for CVE-2015-3148)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["curl-0:7.19.7-53.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2628.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2017-8287","severity":"moderate","public_date":"2017-03-26T00:00:00Z","advisories":[],"bugzilla":"1446073","bugzilla_description":"CVE-2017-8287 freetype: heap-based buffer overflow related to the t1_builder_close_contour function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8287.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-8105","severity":"moderate","public_date":"2017-03-24T00:00:00Z","advisories":[],"bugzilla":"1446500","bugzilla_description":"CVE-2017-8105 freetype: heap-based buffer overflow related to the t1_decoder_parse_charstrings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8105.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-7244","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437364","bugzilla_description":"CVE-2017-7244 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7245","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437367","bugzilla_description":"CVE-2017-7245 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7245.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-7246","severity":"low","public_date":"2017-03-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1437369","bugzilla_description":"CVE-2017-7246 pcre: stack-based buffer overflow write in pcre32_copy_substring","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7246.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-8399","severity":"moderate","public_date":"2017-03-10T00:00:00Z","advisories":[],"bugzilla":"1449629","bugzilla_description":"CVE-2017-8399 pcre2: Stack-based buffer overflow in pcre2_match.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7857","severity":"moderate","public_date":"2017-03-08T00:00:00Z","advisories":[],"bugzilla":"1444898","bugzilla_description":"CVE-2017-7857 freetype: heap-based buffer overflow related to the TT_Get_MM_Var function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7857.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-7858","severity":"moderate","public_date":"2017-03-07T00:00:00Z","advisories":[],"bugzilla":"1444904","bugzilla_description":"CVE-2017-7858 freetype: out-of-bounds write related to the TT_Get_MM_Var and sfnt_init_face functions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7858.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-1000050","severity":"low","public_date":"2017-03-05T00:00:00Z","advisories":["RHSA-2018:3253"],"bugzilla":"1472888","bugzilla_description":"CVE-2017-1000050 jasper: NULL pointer exception in jp2_encode()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000050.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-7186","severity":"moderate","public_date":"2017-02-23T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1434504","bugzilla_description":"CVE-2017-7186 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7186.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-2629","severity":"moderate","public_date":"2017-02-22T00:00:00Z","advisories":[],"bugzilla":"1425746","bugzilla_description":"CVE-2017-2629 curl: SSL_VERIFYSTATUS ignored","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2629.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2017-6313","severity":"moderate","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427217","bugzilla_description":"CVE-2017-6313 gdk-pixbuf: Integer underflow in io-icns.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-6314","severity":"low","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427218","bugzilla_description":"CVE-2017-6314 gdk-pixbuf: Infinite loop in io-tiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6314.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-6312","severity":"low","public_date":"2017-02-21T00:00:00Z","advisories":[],"bugzilla":"1427221","bugzilla_description":"CVE-2017-6312 gdk-pixbuf: Out-of-bounds read in io-ico.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6312.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-3733","severity":"important","public_date":"2017-02-16T00:00:00Z","advisories":[],"bugzilla":"1421695","bugzilla_description":"CVE-2017-3733 openssl: Encrypt-Then-Mac renegotiation crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3733.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6004","severity":"moderate","public_date":"2017-02-14T00:00:00Z","advisories":["RHSA-2018:2486"],"bugzilla":"1425365","bugzilla_description":"CVE-2017-6004 pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-2635","severity":"moderate","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1427090","bugzilla_description":"CVE-2017-2635 libvirt: Null pointer dereference when updating storage size on empty drives","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2016-9578","severity":"moderate","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:0549","RHSA-2017:0254","RHSA-2017:0253","RHSA-2017:0552"],"bugzilla":"1399566","bugzilla_description":"CVE-2016-9578 spice: Remote DoS via crafted message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-770","affected_packages":["spice-server-0:0.12.4-13.el6_8.2","spice-0:0.12.4-20.el7_3","rhevm-appliance-0:20170307.0-1","redhat-virtualization-host-0:4.0-20170307.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9578.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9577","severity":"moderate","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:0549","RHSA-2017:0254","RHSA-2017:0253","RHSA-2017:0552"],"bugzilla":"1401603","bugzilla_description":"CVE-2016-9577 spice: Buffer overflow in main_channel_alloc_msg_rcv_buf when reading large messages","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-20->CWE-122","affected_packages":["spice-server-0:0.12.4-13.el6_8.2","spice-0:0.12.4-20.el7_3","rhevm-appliance-0:20170307.0-1","redhat-virtualization-host-0:4.0-20170307.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2017-2614","severity":"important","public_date":"2017-02-06T00:00:00Z","advisories":["RHSA-2017:0257"],"bugzilla":"1417702","bugzilla_description":"CVE-2017-2614 rhev-m-4: Fails to validate existing expired passwords when changing a password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["ovirt-engine-extension-aaa-jdbc-0:1.1.3-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2614.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cvss3_score":"6.8"},{"CVE":"CVE-2017-6311","severity":"low","public_date":"2017-02-05T00:00:00Z","advisories":[],"bugzilla":"1427222","bugzilla_description":"CVE-2017-6311 gdk-pixbuf: NULL pointer dereference in gdk-pixbuf-thumbnailer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6311.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7864","severity":"moderate","public_date":"2017-02-02T00:00:00Z","advisories":[],"bugzilla":"1444911","bugzilla_description":"CVE-2017-7864 freetype: heap-based buffer overflow related to the tt_size_reset function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7864.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-5884","severity":"low","public_date":"2017-02-01T00:00:00Z","advisories":["RHSA-2017:2258"],"bugzilla":"1418944","bugzilla_description":"CVE-2017-5884 gtk-vnc: Improper check of framebuffer boundaries when processing a tile","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":["gtk-vnc-0:0.7.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5884.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-5885","severity":"low","public_date":"2017-02-01T00:00:00Z","advisories":["RHSA-2017:2258"],"bugzilla":"1418952","bugzilla_description":"CVE-2017-5885 gtk-vnc: Integer overflow when processing SetColorMapEntries","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":["gtk-vnc-0:0.7.0-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5885.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2017-3731","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2017:0286","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416852","bugzilla_description":"CVE-2017-3731 openssl: Truncated packet could crash via OOB read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["openssl-0:1.0.1e-48.el6_8.4","openssl-1:1.0.1e-60.el7_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3731.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3730","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":[],"bugzilla":"1416855","bugzilla_description":"CVE-2017-3730 openssl: Bad (EC)DHE parameters cause a client crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3730.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-3732","severity":"moderate","public_date":"2017-01-26T00:00:00Z","advisories":["RHSA-2018:2185","RHSA-2018:2713","RHSA-2018:2568","RHSA-2018:2575","RHSA-2018:2186","RHSA-2018:2187"],"bugzilla":"1416856","bugzilla_description":"CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on x86_64","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7","java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3732.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-6850","severity":"moderate","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1434458","bugzilla_description":"CVE-2017-6850 jasper: uninitialized pointer use in jp2_cdef_destroy()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6850.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-6852","severity":"moderate","public_date":"2017-01-25T00:00:00Z","advisories":[],"bugzilla":"1434459","bugzilla_description":"CVE-2017-6852 jasper: Out of bounds heap read in jpc_dec_decodepkt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6852.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-6851","severity":"low","public_date":"2017-01-21T00:00:00Z","advisories":[],"bugzilla":"1435324","bugzilla_description":"CVE-2017-6851 jasper: Invalid memory read in jas_matrix_bindsub (jas_seq.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6851.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5844","severity":"low","public_date":"2017-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419600","bugzilla_description":"CVE-2017-5844 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5844.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5841","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419589","bugzilla_description":"CVE-2017-5841 gstreamer-plugins-good: Heap out-of-bounds read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5842","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419591","bugzilla_description":"CVE-2017-5842 gstreamer-plugins-base: Out-of-bounds heap read in html_context_handle_element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5843","severity":"low","public_date":"2017-01-19T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419592","bugzilla_description":"CVE-2017-5843 gstreamer-plugins-bad-free: Use after free in gst_mini_object_unref / gst_tag_list_unref / gst_mxf_demux_update_essence_tracks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5837","severity":"low","public_date":"2017-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419584","bugzilla_description":"CVE-2017-5837 gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5837.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-7056","severity":"moderate","public_date":"2017-01-10T00:00:00Z","advisories":["RHSA-2017:1413","RHSA-2017:1415","RHSA-2017:1414","RHSA-2017:1802","RHSA-2017:1801","RHBA-2017:1929"],"bugzilla":"1412120","bugzilla_description":"CVE-2016-7056 openssl: ECDSA P-256 timing attack key recovery","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":["openssl-1:1.0.2k-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7056.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2016-10087","severity":"low","public_date":"2016-12-29T00:00:00Z","advisories":[],"bugzilla":"1409617","bugzilla_description":"CVE-2016-10087 libpng: NULL pointer dereference in png_set_text_2()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10087.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9600","severity":"low","public_date":"2016-12-29T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1410026","bugzilla_description":"CVE-2016-9600 jasper: JP2 encoder NULL pointer dereference due to uninitialized cmprof_","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9600.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.7"},{"CVE":"CVE-2016-9594","severity":"moderate","public_date":"2016-12-23T00:00:00Z","advisories":[],"bugzilla":"1408385","bugzilla_description":"CVE-2016-9594 curl: Unitialized random","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9594.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-10328","severity":"moderate","public_date":"2016-12-23T00:00:00Z","advisories":[],"bugzilla":"1444895","bugzilla_description":"CVE-2016-10328 freetype: heap-based buffer overflow related to the cff_parser_run function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10328.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9586","severity":"low","public_date":"2016-12-21T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1406712","bugzilla_description":"CVE-2016-9586 curl: printf floating point buffer overflow","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9586.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-9591","severity":"low","public_date":"2016-12-16T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1406405","bugzilla_description":"CVE-2016-9591 jasper: use-after-free / double-free in JPC encoder","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9591.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9583","severity":"low","public_date":"2016-12-09T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1405148","bugzilla_description":"CVE-2016-9583 jasper: integer overflows leading to out of bounds read in packet iterators in JPC decoder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9583.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10198","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419558","bugzilla_description":"CVE-2016-10198 gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10198.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10199","severity":"low","public_date":"2016-12-01T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419580","bugzilla_description":"CVE-2016-10199 gstreamer-plugins-good: Out of bounds read in qtdemux_tag_add_str_full","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10199.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-8872","severity":"low","public_date":"2016-11-28T00:00:00Z","advisories":[],"bugzilla":"1449541","bugzilla_description":"CVE-2017-8872 libxml2: Out-of-bounds read in htmlParseTryOrFinish","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8872.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2016-8654","severity":"important","public_date":"2016-11-25T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1399167","bugzilla_description":"CVE-2016-8654 jasper: heap-based buffer overflow in QMFB code in JPC codec","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8654.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9813","severity":"low","public_date":"2016-11-25T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401934","bugzilla_description":"CVE-2016-9813 gstreamer-plugins-bad-free: NULL pointer dereference in mpegts parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-476","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9813.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9812","severity":"low","public_date":"2016-11-24T00:00:00Z","advisories":["RHSA-2017:0021"],"bugzilla":"1401930","bugzilla_description":"CVE-2016-9812 gstreamer1-plugins-bad-free: Out-of-bounds read in gst_mpegts_section_new","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9812.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9809","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021"],"bugzilla":"1401880","bugzilla_description":"CVE-2016-9809 gstreamer-plugins-bad-free: Off-by-one read in gst_h264_parse_set_caps","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":["gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9809.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9811","severity":"low","public_date":"2016-11-23T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1401918","bugzilla_description":"CVE-2016-9811 gstreamer: Out of bounds heap read in windows_icon_typefind","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9811.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9807","severity":"low","public_date":"2016-11-22T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1401874","bugzilla_description":"CVE-2016-9807 gstreamer-plugins-good: Invalid memory read in flx_decode_chunks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9807.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2016-9634","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9634.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9635","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9635.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9636","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9636.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9808","severity":"moderate","public_date":"2016-11-21T00:00:00Z","advisories":["RHSA-2017:0019","RHSA-2017:0020","RHSA-2016:2975"],"bugzilla":"1397441","bugzilla_description":"CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["gstreamer1-plugins-good-0:1.4.5-3.el7_3","gstreamer-plugins-good-0:0.10.23-4.el6_8","gstreamer-plugins-good-0:0.10.31-12.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9808.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9560","severity":"important","public_date":"2016-11-20T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1398256","bugzilla_description":"CVE-2016-9560 jasper: stack-based buffer overflow in jpc_dec_tileinit()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9560.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-5503","severity":"moderate","public_date":"2016-11-20T00:00:00Z","advisories":[],"bugzilla":"1416056","bugzilla_description":"CVE-2017-5503 jasper: invalid memory write in dec_clnpass()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5503.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5505","severity":"moderate","public_date":"2016-11-20T00:00:00Z","advisories":[],"bugzilla":"1416068","bugzilla_description":"CVE-2017-5505 jasper: Invalid memory read in jas_matrix_asl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5505.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2017-5504","severity":"moderate","public_date":"2016-11-20T00:00:00Z","advisories":[],"bugzilla":"1416069","bugzilla_description":"CVE-2017-5504 jasper: Invalid memory read in jpc_undo_roi","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5504.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-9396","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":["RHSA-2018:3253"],"bugzilla":"1396978","bugzilla_description":"CVE-2016-9396 jasper: reachable assertion in JPC_NOMINALGAIN()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9396.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9397","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396979","bugzilla_description":"CVE-2016-9397 jasper: reachable assertion in jpc_dequantize()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9397.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9398","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396980","bugzilla_description":"CVE-2016-9398 jasper: reachable assertion in jpc_floorlog2()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9398.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9399","severity":"low","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396981","bugzilla_description":"CVE-2016-9399 jasper: reachable assertion in calcstepsizes()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9399.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9445","severity":"moderate","public_date":"2016-11-15T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2017:0021","RHSA-2016:2974"],"bugzilla":"1395767","bugzilla_description":"CVE-2016-9445 gstreamer-plugins-bad-free: Integer overflow when allocating render buffer in VMnc decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3","gstreamer1-plugins-bad-free-0:1.4.5-6.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9445.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9063","severity":"low","public_date":"2016-11-15T00:00:00Z","advisories":[],"bugzilla":"1396540","bugzilla_description":"CVE-2016-9063 firefox: Possible integer overflow to fix inside XML_Parse in Expat","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9063.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.1"},{"CVE":"CVE-2016-9447","severity":"moderate","public_date":"2016-11-14T00:00:00Z","advisories":["RHSA-2017:0018","RHSA-2016:2974"],"bugzilla":"1395126","bugzilla_description":"CVE-2016-9447 gstreamer-plugins-bad-free: Memory corruption flaw in NSF decoder","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["gstreamer-plugins-bad-free-0:0.10.19-5.el6_8","gstreamer-plugins-bad-free-0:0.10.23-22.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-9395","severity":"low","public_date":"2016-11-12T00:00:00Z","advisories":[],"bugzilla":"1396977","bugzilla_description":"CVE-2016-9395 jasper: reachable assertion failure in jas_seq2d_create()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9395.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9557","severity":"low","public_date":"2016-11-12T00:00:00Z","advisories":[],"bugzilla":"1398251","bugzilla_description":"CVE-2016-9557 jasper: signed integer overflow in jas_image_create()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9557.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9262","severity":"moderate","public_date":"2016-11-06T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1393882","bugzilla_description":"CVE-2016-9262 jasper: integer truncation in jas_image_cmpt_create()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-681","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9262.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10251","severity":"low","public_date":"2016-11-04T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1434461","bugzilla_description":"CVE-2016-10251 jasper: integer overflow in jpc_pi_nextcprl(), leading to out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190->CWE-125","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10251.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8615","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388370","bugzilla_description":"CVE-2016-8615 curl: Cookie injection for other servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-99","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8615.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8616","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388371","bugzilla_description":"CVE-2016-8616 curl: Case insensitive password comparison","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8616.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-8617","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388377","bugzilla_description":"CVE-2016-8617 curl: Out-of-bounds write via unchecked multiplication","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-787","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8618","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388378","bugzilla_description":"CVE-2016-8618 curl: Double-free in curl_maprintf","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8618.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8619","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388379","bugzilla_description":"CVE-2016-8619 curl: Double-free in krb5 code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8619.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8620","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1388382","bugzilla_description":"CVE-2016-8620 curl: Glob parser write/read out of bounds","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-120","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8620.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2016-8621","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388385","bugzilla_description":"CVE-2016-8621 curl: curl_getdate out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8621.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8622","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388386","bugzilla_description":"CVE-2016-8622 curl: URL unescape heap overflow via integer truncation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-190->CWE-122","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-8623","severity":"low","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388388","bugzilla_description":"CVE-2016-8623 curl: Use-after-free via shared cookies","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8623.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2016-8624","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388390","bugzilla_description":"CVE-2016-8624 curl: Invalid URL parsing with '#'","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-8625","severity":"moderate","public_date":"2016-11-02T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2018:2486"],"bugzilla":"1388392","bugzilla_description":"CVE-2016-8625 curl: IDNA 2003 makes curl use wrong host","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8625.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-9392","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396971","bugzilla_description":"CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 jasper: insufficient SIZ marker segment data sanity checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9392.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9393","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396971","bugzilla_description":"CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 jasper: insufficient SIZ marker segment data sanity checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9393.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9394","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396971","bugzilla_description":"CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 jasper: insufficient SIZ marker segment data sanity checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9394.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5498","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416060","bugzilla_description":"CVE-2017-5498 jasper: Left shift of negative value in jas_fast32_asl() in jas_math.h","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5498.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5499","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416061","bugzilla_description":"CVE-2017-5499 jasper: Signed integer overflow in jpc_dequantize() in jpc_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5499.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5500","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416063","bugzilla_description":"CVE-2017-5500 jasper: Invalid exponent shift in jpc_calcabsstepsize() in jpc_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5500.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5501","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416064","bugzilla_description":"CVE-2017-5501 jasper: Signed integer overflow in jpc_tsfb_getbands2() in jpc_tsfb.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5501.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2017-5502","severity":"low","public_date":"2016-10-28T00:00:00Z","advisories":[],"bugzilla":"1416066","bugzilla_description":"CVE-2017-5502 jasper: Left shift of negative value in jp2_validate() in jp2_dec.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5502.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2016-9391","severity":"low","public_date":"2016-10-25T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396967","bugzilla_description":"CVE-2016-9391 jasper: reachable assertions in the JPC bitstream code","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9391.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9388","severity":"low","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396962","bugzilla_description":"CVE-2016-9388 jasper: reachable assertions in RAS encoder/decoder","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9388.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9389","severity":"low","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396963","bugzilla_description":"CVE-2016-9389 jasper: reachable assertions caused by insufficient component domains checks in ICT/RCT in JPC codec","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9389.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-9390","severity":"low","public_date":"2016-10-24T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396965","bugzilla_description":"CVE-2016-9390 jasper: insufficient SIZ marker tilexoff and tileyoff checks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9390.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-10249","severity":"important","public_date":"2016-10-23T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1388840","bugzilla_description":"CVE-2016-10249 jasper: integer overflow in jas_matrix_create()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10249.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2016-9387","severity":"low","public_date":"2016-10-23T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1396959","bugzilla_description":"CVE-2016-9387 jasper: integer overflow in jpc_dec_process_siz()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":"CWE-190","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9387.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"2.5"},{"CVE":"CVE-2016-10248","severity":"low","public_date":"2016-10-20T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1434447","bugzilla_description":"CVE-2016-10248 jasper: NULL pointer dereference in jpc_tsfb_synthesize()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10248.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8887","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1388828","bugzilla_description":"CVE-2016-8887 jasper: uninitialized pointer use in jp2_box_get()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8887.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10250","severity":"moderate","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1388829","bugzilla_description":"CVE-2016-10250 jasper: Null pointer dereference in jp2_colr_destroy (incomplete fix for CVE-2016-8887)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10250.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8886","severity":"low","public_date":"2016-10-18T00:00:00Z","advisories":[],"bugzilla":"1388880","bugzilla_description":"CVE-2016-8886 jasper: no upper limit on memory allocations in jas_malloc()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8886.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-8880","severity":null,"public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1388863","bugzilla_description":"CVE-2016-8880 jasper: heap buffer overflow in jpc_dec_cp_setfromcox() (rejected duplicate of CVE-2011-4516)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8880.json"},{"CVE":"CVE-2016-8881","severity":null,"public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1388864","bugzilla_description":"CVE-2016-8881 jasper: insufficient memory allocation in jpc_crg_getparms() (rejected duplicate of CVE-2011-4517)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8881.json"},{"CVE":"CVE-2016-8882","severity":"moderate","public_date":"2016-10-17T00:00:00Z","advisories":[],"bugzilla":"1388866","bugzilla_description":"CVE-2016-8882 jasper: uninitialized tile->pi pointer use in JPC decoder","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8882.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8883","severity":"low","public_date":"2016-10-17T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1388870","bugzilla_description":"CVE-2016-8883 jasper: reachable asserts in jpc_dec_tiledecode()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8883.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8690","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385499","bugzilla_description":"CVE-2016-8690 CVE-2016-8884 CVE-2016-8885 jasper: missing jas_matrix_create() parameter checks","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8690.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8884","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385499","bugzilla_description":"CVE-2016-8690 CVE-2016-8884 CVE-2016-8885 jasper: missing jas_matrix_create() parameter checks","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8884.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8885","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385499","bugzilla_description":"CVE-2016-8690 CVE-2016-8884 CVE-2016-8885 jasper: missing jas_matrix_create() parameter checks","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-8691","severity":"low","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385502","bugzilla_description":"CVE-2016-8691 CVE-2016-8692 jasper: missing SIZ marker segment XRsiz and YRsiz fields range check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-369","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8691.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8692","severity":"low","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385502","bugzilla_description":"CVE-2016-8691 CVE-2016-8692 jasper: missing SIZ marker segment XRsiz and YRsiz fields range check","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-369","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8692.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-8693","severity":"moderate","public_date":"2016-10-15T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1385507","bugzilla_description":"CVE-2016-8693 jasper: incorrect handling of bufsize 0 in mem_resize()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8693.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9082","severity":"low","public_date":"2016-10-05T00:00:00Z","advisories":[],"bugzilla":"1312337","bugzilla_description":"CVE-2016-9082 cairo: Out of bounds read in read_png/write_png in cairo-png.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9082.json"},{"CVE":"CVE-2016-7167","severity":"low","public_date":"2016-09-14T00:00:00Z","advisories":["RHSA-2018:3558","RHSA-2017:2016","RHSA-2018:2486"],"bugzilla":"1375906","bugzilla_description":"CVE-2016-7167 curl: escape and unescape integer overflows","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["curl-0:7.29.0-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7167.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2016-7141","severity":"low","public_date":"2016-09-05T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1373229","bugzilla_description":"CVE-2016-7141 curl: Incorrect reuse of client certificates","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7141.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-4443","severity":"moderate","public_date":"2016-09-02T00:00:00Z","advisories":["RHSA-2016:1929"],"bugzilla":"1335106","bugzilla_description":"CVE-2016-4443 org.ovirt.engine-root: engine-setup logs contained information for extracting admin password","cvss_score":4.9,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:N/A:N","CWE":"CWE-532","affected_packages":["org.ovirt.engine-root-0:3.6.9.2-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4443.json"},{"CVE":"CVE-2016-5432","severity":"moderate","public_date":"2016-08-30T00:00:00Z","advisories":["RHSA-2016:1967"],"bugzilla":"1371428","bugzilla_description":"CVE-2016-5432 ovirt-engine: ovirt-engine-provisiondb logs contain DB username and password in plain text","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-312","affected_packages":["org.ovirt.engine-root-0:4.0.4.4-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5432.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-6338","severity":"low","public_date":"2016-08-27T00:00:00Z","advisories":["RHSA-2017:3427"],"bugzilla":"1369285","bugzilla_description":"CVE-2016-6338 ovirt-engine: webadmin log out must logout all sessions","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["org.ovirt.engine-root-0:4.1.8.2-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6338.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2016-6341","severity":"moderate","public_date":"2016-08-26T00:00:00Z","advisories":[],"bugzilla":"1369793","bugzilla_description":"CVE-2016-6341 ovirt-engine: DWH_DB_PASSWORD is in cleartext in the log files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-312","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6341.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2016-10244","severity":"moderate","public_date":"2016-08-25T00:00:00Z","advisories":[],"bugzilla":"1429965","bugzilla_description":"CVE-2016-10244 freetype: parse_charstrings function in type1/t1load.c does not ensure that a font contains a glyph name","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10244.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-4973","severity":"moderate","public_date":"2016-08-17T00:00:00Z","advisories":[],"bugzilla":"1324759","bugzilla_description":"CVE-2016-4973 gcc: Targets using libssp for SSP are missing -D_FORTIFY_SOURCE functionality","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4973.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss3_score":"3.6"},{"CVE":"CVE-2016-5384","severity":"moderate","public_date":"2016-08-05T00:00:00Z","advisories":["RHSA-2016:2601"],"bugzilla":"1350891","bugzilla_description":"CVE-2016-5384 fontconfig: Possible double free due to insufficiently validated cache files","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":["fontconfig-0:2.10.95-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5384.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2016-5419","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1362183","bugzilla_description":"CVE-2016-5419 curl: TLS session resumption client cert bypass","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5419.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2016-5420","severity":"low","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2016:2575","RHSA-2018:3558","RHSA-2016:2957"],"bugzilla":"1362190","bugzilla_description":"CVE-2016-5420 curl: Re-using connection with wrong client cert","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6","curl-0:7.29.0-35.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5420.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2016-5421","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":["RHSA-2018:3558"],"bugzilla":"1362199","bugzilla_description":"CVE-2016-5421 curl: Use of connection struct after free","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["httpd24-curl-0:7.61.1-1.el7","httpd24-curl-0:7.61.1-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5421.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-6310","severity":"moderate","public_date":"2016-08-03T00:00:00Z","advisories":[],"bugzilla":"1363738","bugzilla_description":"CVE-2016-6310 ovirt-engine: ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD disclosed in log file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-532","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6310.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"4.0"},{"CVE":"CVE-2017-16042","severity":"important","public_date":"2016-07-21T00:00:00Z","advisories":[],"bugzilla":"1585953","bugzilla_description":"CVE-2017-16042 nodejs-growl: Does not properly sanitize input before passing it to exec","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16042.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-6352","severity":"moderate","public_date":"2016-07-13T00:00:00Z","advisories":[],"bugzilla":"1349751","bugzilla_description":"CVE-2016-6352 gdk-pixbuf: Out-of-bounds write in OneLine32() function","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6352.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2016-10735","severity":"moderate","public_date":"2016-06-27T00:00:00Z","advisories":["RHSA-2020:0133","RHSA-2020:0132","RHSA-2019:3023","RHSA-2019:1456","RHBA-2019:1076","RHBA-2019:1570","RHSA-2020:3936"],"bugzilla":"1668097","bugzilla_description":"CVE-2016-10735 bootstrap: XSS in the data-target attribute","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["ipa-0:4.6.8-5.el7","ovirt-engine-api-explorer-0:0.0.4-1.el7ev","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10735.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2016-4456","severity":"moderate","public_date":"2016-06-06T00:00:00Z","advisories":[],"bugzilla":"1343505","bugzilla_description":"CVE-2016-4456 gnutls: Environment variable GNUTLS_KEYLOGFILE is obtained via insecure getenv()","cvss_score":5.6,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4456.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"6.3"},{"CVE":"CVE-2016-3739","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1335430","bugzilla_description":"CVE-2016-3739 curl: TLS certificate name check bypass with mbedTLS and PolarSSL","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3739.json"},{"CVE":"CVE-2016-3113","severity":"moderate","public_date":"2016-04-13T00:00:00Z","advisories":[],"bugzilla":"1326598","bugzilla_description":"CVE-2016-3113 ovirt-engine: Reflected XSS when submitting config file for VNC/SPICE Connection","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3113.json"},{"CVE":"CVE-2016-4008","severity":"moderate","public_date":"2016-04-11T00:00:00Z","advisories":[],"bugzilla":"1325965","bugzilla_description":"CVE-2016-4008 libtasn1: infinite loop while parsing DER certificates","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4008.json"},{"CVE":"CVE-2016-3616","severity":"moderate","public_date":"2016-03-30T00:00:00Z","advisories":["RHSA-2019:2052"],"bugzilla":"1319661","bugzilla_description":"CVE-2016-3616 libjpeg: null pointer dereference in cjpeg","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-476","affected_packages":["libjpeg-turbo-0:1.2.90-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3616.json"},{"CVE":"CVE-2014-9769","severity":"moderate","public_date":"2016-03-23T00:00:00Z","advisories":[],"bugzilla":"1320995","bugzilla_description":"CVE-2014-9769 pcre: incorrect nested table jumps when JIT is used (8.36/6)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9769.json"},{"CVE":"CVE-2016-1577","severity":"moderate","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1314466","bugzilla_description":"CVE-2016-1577 jasper: double free issue in jas_iccattrval_destroy()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1577.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-2116","severity":"low","public_date":"2016-03-03T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1314472","bugzilla_description":"CVE-2016-2116 jasper: memory leak in jas_iccprof_createfrombuf()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2116.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-3077","severity":"low","public_date":"2016-02-24T00:00:00Z","advisories":["RHBA-2016:0583"],"bugzilla":"1321972","bugzilla_description":"CVE-2016-3077 ovirt-engine: Crash of API when parsing unxepected version number","cvss_score":2.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["org.ovirt.engine-root-0:3.6.4.1-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3077.json"},{"CVE":"CVE-2016-3191","severity":"important","public_date":"2016-02-09T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:1025"],"bugzilla":"1311503","bugzilla_description":"CVE-2016-3191 pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3191.json"},{"CVE":"CVE-2017-5848","severity":"low","public_date":"2016-01-30T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419583","bugzilla_description":"CVE-2017-5848 gstreamer-plugins-bad-free: Invalid memory read in gst_ps_demux_parse_psm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["gstreamer1-plugins-bad-free-0:1.10.4-2.el7","gstreamer-plugins-bad-free-0:0.10.23-23.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5848.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-2089","severity":"low","public_date":"2016-01-27T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1302636","bugzilla_description":"CVE-2016-2089 jasper: matrix rows_ NULL pointer dereference in jas_matrix_clip()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2089.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2015-7552","severity":"moderate","public_date":"2016-01-25T00:00:00Z","advisories":["RHBA-2017:2100"],"bugzilla":"1378894","bugzilla_description":"CVE-2015-7552 gdk-pixbuf: Heap-based buffer overflow in the gdk_pixbuf_flip function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["gdk-pixbuf2-0:2.36.5-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7552.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5845","severity":"low","public_date":"2016-01-20T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419582","bugzilla_description":"CVE-2017-5845 gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5845.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5840","severity":"low","public_date":"2016-01-18T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419588","bugzilla_description":"CVE-2017-5840 gstreamer-plugins-good: Out of bounds heap read in qtdemux_parse_samples","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer-plugins-good-0:0.10.31-13.el7","gstreamer1-plugins-good-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5839","severity":"low","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419586","bugzilla_description":"CVE-2017-5839 gstreamer-plugins-base: Stack overflow in gst_riff_create_audio_caps","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":["gstreamer1-plugins-base-0:1.10.4-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5839.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2017-5838","severity":"low","public_date":"2016-01-15T00:00:00Z","advisories":["RHSA-2017:2060"],"bugzilla":"1419587","bugzilla_description":"CVE-2017-5838 gstreamer: Out-of-bounds read in gst_date_time_new_from_iso8601_string()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["gstreamer1-0:1.10.4-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5838.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-1867","severity":"low","public_date":"2016-01-13T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1298135","bugzilla_description":"CVE-2016-1867 jasper: out-of-bounds read in jpc_pi_nextcprl()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1867.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-1283","severity":"important","public_date":"2016-01-04T00:00:00Z","advisories":["RHSA-2016:1132"],"bugzilla":"1295385","bugzilla_description":"CVE-2016-1283 pcre: heap buffer overflow in handling of duplicate named groups (8.39/14)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1283.json"},{"CVE":"CVE-2015-8751","severity":"moderate","public_date":"2015-12-24T00:00:00Z","advisories":[],"bugzilla":"1296949","bugzilla_description":"CVE-2015-8751 jasper: integer overflow in the jas_matrix_create() function","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8751.json"},{"CVE":"CVE-2015-5313","severity":"moderate","public_date":"2015-12-11T00:00:00Z","advisories":["RHSA-2016:2577"],"bugzilla":"1277121","bugzilla_description":"CVE-2015-5313 libvirt: filesystem storage volume names path traversal flaw","cvss_score":4.9,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:C/A:N","CWE":"CWE-22","affected_packages":["libvirt-0:2.0.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5313.json"},{"CVE":"CVE-2015-8383","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287614","bugzilla_description":"CVE-2015-8383 pcre: Buffer overflow caused by repeated conditional group (8.38/3)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8383.json"},{"CVE":"CVE-2015-3210","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3210.json"},{"CVE":"CVE-2015-8384","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287623","bugzilla_description":"CVE-2015-3210 CVE-2015-8384 pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8384.json"},{"CVE":"CVE-2015-8385","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287629","bugzilla_description":"CVE-2015-8385 pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8385.json"},{"CVE":"CVE-2015-8386","severity":"low","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287636","bugzilla_description":"CVE-2015-8386 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8386.json"},{"CVE":"CVE-2015-8387","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287646","bugzilla_description":"CVE-2015-8387 pcre: Integer overflow in subroutine calls (8.38/8)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8387.json"},{"CVE":"CVE-2015-8389","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287659","bugzilla_description":"CVE-2015-8389 pcre: infinite recursion in JIT compiler when processing certain patterns (8.38/21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8389.json"},{"CVE":"CVE-2015-8390","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287666","bugzilla_description":"CVE-2015-8390 pcre: uninitialized memory read triggered by malformed posix character class (8.38/22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8390.json"},{"CVE":"CVE-2015-8391","severity":"moderate","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1287671","bugzilla_description":"CVE-2015-8391 pcre: inefficient posix character class syntax check (8.38/16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8391.json"},{"CVE":"CVE-2015-8392","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287690","bugzilla_description":"CVE-2015-8392 pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8392.json"},{"CVE":"CVE-2015-8393","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287695","bugzilla_description":"CVE-2015-8393 pcre: pcregrep -q is not always quiet (8.38/28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8393.json"},{"CVE":"CVE-2015-8394","severity":null,"public_date":"2015-11-23T00:00:00Z","advisories":[],"bugzilla":"1287702","bugzilla_description":"CVE-2015-8394 pcre: Integer overflow caused by missing check for certain conditions (8.38/31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8394.json"},{"CVE":"CVE-2015-8381","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8381.json"},{"CVE":"CVE-2015-8395","severity":"important","public_date":"2015-11-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750"],"bugzilla":"1287711","bugzilla_description":"CVE-2015-8381 CVE-2015-8395 pcre: Buffer overflow caused by duplicate named references (8.38/36)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8395.json"},{"CVE":"CVE-2015-5247","severity":"low","public_date":"2015-09-03T00:00:00Z","advisories":[],"bugzilla":"1259350","bugzilla_description":"CVE-2015-5247 libvirt: denial of service when volume creation fails on NFS pool","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5247.json"},{"CVE":"CVE-2015-5262","severity":"low","public_date":"2015-09-03T00:00:00Z","advisories":[],"bugzilla":"1261538","bugzilla_description":"CVE-2015-5262 jakarta-commons-httpclient, httpcomponents-core: missing HTTPS connection timeout","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5262.json"},{"CVE":"CVE-2015-5203","severity":"moderate","public_date":"2015-08-16T00:00:00Z","advisories":["RHSA-2017:1208"],"bugzilla":"1254242","bugzilla_description":"CVE-2015-5203 jasper: integer overflow in jas_image_cmpt_create()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["jasper-0:1.900.1-30.el7_3","jasper-0:1.900.1-21.el6_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5203.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2015-5160","severity":"moderate","public_date":"2015-08-10T00:00:00Z","advisories":["RHSA-2016:2577"],"bugzilla":"1245647","bugzilla_description":"CVE-2015-5160 libvirt: Ceph id/key leaked in the process list","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libvirt-0:2.0.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5160.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2015-5073","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5073.json"},{"CVE":"CVE-2015-8388","severity":"moderate","public_date":"2015-06-23T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1237223","bugzilla_description":"CVE-2015-5073 CVE-2015-8388 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8388.json"},{"CVE":"CVE-2015-3217","severity":"moderate","public_date":"2015-06-03T00:00:00Z","advisories":["RHSA-2016:1132","RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1228283","bugzilla_description":"CVE-2015-3217 pcre: stack overflow caused by mishandled group empty match (8.38/11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-mariadb100-mariadb-1:10.0.25-4.el6","rh-mariadb100-mariadb-1:10.0.25-4.el7","rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3217.json"},{"CVE":"CVE-2015-8380","severity":null,"public_date":"2015-06-01T00:00:00Z","advisories":[],"bugzilla":"1285413","bugzilla_description":"CVE-2015-8380 pcre: OOB write when pcre_exec() is called with ovecsize of 1 (8.38/10)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8380.json"},{"CVE":"CVE-2015-3622","severity":"moderate","public_date":"2015-04-30T00:00:00Z","advisories":["RHSA-2017:1860"],"bugzilla":"1218141","bugzilla_description":"CVE-2015-3622 libtasn1: heap overflow flaw in _asn1_extract_der_octet()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-122","affected_packages":["libtasn1-0:4.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2015-3153","severity":"moderate","public_date":"2015-04-29T00:00:00Z","advisories":[],"bugzilla":"1217341","bugzilla_description":"CVE-2015-3153 curl: sensitive HTTP server headers also sent to proxies","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3153.json"},{"CVE":"CVE-2015-3143","severity":"moderate","public_date":"2015-04-22T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1213306","bugzilla_description":"CVE-2015-3143 curl: re-using authenticated connection when unauthenticated","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3143.json"},{"CVE":"CVE-2015-3144","severity":"low","public_date":"2015-04-22T00:00:00Z","advisories":[],"bugzilla":"1213335","bugzilla_description":"CVE-2015-3144 curl: host name out of boundary memory access","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-129->CWE-131->CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3144.json"},{"CVE":"CVE-2015-3145","severity":"low","public_date":"2015-04-22T00:00:00Z","advisories":[],"bugzilla":"1213347","bugzilla_description":"CVE-2015-3145 curl: cookie parser out of boundary memory access","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125->CWE-129->CWE-131->CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3145.json"},{"CVE":"CVE-2015-3148","severity":"moderate","public_date":"2015-04-22T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1213351","bugzilla_description":"CVE-2015-3148 curl: Negotiate not treated as connection-oriented","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3148.json"},{"CVE":"CVE-2015-3308","severity":"moderate","public_date":"2015-04-16T00:00:00Z","advisories":[],"bugzilla":"1212459","bugzilla_description":"CVE-2015-3308 gnutls: use-after-free flaw in CRL distribution points parsing","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3308.json"},{"CVE":"CVE-2015-2806","severity":"low","public_date":"2015-03-26T00:00:00Z","advisories":["RHSA-2017:1860"],"bugzilla":"1207192","bugzilla_description":"CVE-2015-2806 libtasn1: stack overflow in asn1_der_decoding","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libtasn1-0:4.10-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2806.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-0291","severity":"important","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202338","bugzilla_description":"CVE-2015-0291 openssl: ClientHello sigalgs NULL pointer dereference DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0291.json"},{"CVE":"CVE-2015-0290","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202345","bugzilla_description":"CVE-2015-0290 openssl: multiblock corrupted pointer","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0290.json"},{"CVE":"CVE-2015-0207","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202351","bugzilla_description":"CVE-2015-0207 openssl: DTLS segmentation fault in DTLSv1_listen","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0207.json"},{"CVE":"CVE-2015-0286","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0752","RHSA-2016:2957","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202366","bugzilla_description":"CVE-2015-0286 openssl: invalid pointer use in ASN1_TYPE_cmp()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-822->CWE-125","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0286.json"},{"CVE":"CVE-2015-0208","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202369","bugzilla_description":"CVE-2015-0208 openssl: segmentation fault for invalid PSS parameters","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0208.json"},{"CVE":"CVE-2015-0287","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202380","bugzilla_description":"CVE-2015-0287 openssl: ASN.1 structure reuse memory corruption","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0287.json"},{"CVE":"CVE-2015-0289","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202384","bugzilla_description":"CVE-2015-0289 openssl: PKCS7 NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0289.json"},{"CVE":"CVE-2015-0292","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202395","bugzilla_description":"CVE-2015-0292 openssl: integer underflow leading to buffer overflow in base64 decoding","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-120","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0292.json"},{"CVE":"CVE-2015-0293","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2016:0490","RHSA-2015:0752","RHSA-2016:0372","RHSA-2016:0304","RHSA-2016:0306","RHSA-2015:0716","RHSA-2015:0715","RHSA-2016:0445","RHSA-2016:0303","RHSA-2016:0446"],"bugzilla":"1202404","bugzilla_description":"CVE-2015-0293 openssl: assertion failure in SSLv2 servers","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-617","affected_packages":["openssl-0:1.0.1e-16.el6_5.16","openssl-0:1.0.1e-30.el6_6.7","openssl-0:0.9.7a-43.23.el4","openssl-0:0.9.8e-26.el5_9.5","openssl-0:1.0.0-27.el6_4.5","openssl098e-0:0.9.8e-20.el6_7.1","openssl-1:1.0.1e-42.el7_1.4","openssl098e-0:0.9.8e-29.el7_2.3","openssl-0:0.9.8e-33.el5_11","openssl-0:0.9.8e-12.el5_6.13","openssl-0:1.0.0-20.el6_2.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0293.json"},{"CVE":"CVE-2015-1787","severity":"moderate","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202406","bugzilla_description":"CVE-2015-1787 openssl: segmentation fault in client authentication with empty CKE and DHE","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1787.json"},{"CVE":"CVE-2015-0285","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":[],"bugzilla":"1202410","bugzilla_description":"CVE-2015-0285 openssl: handshake with unseeded PRNG","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-335","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0285.json"},{"CVE":"CVE-2015-0288","severity":"low","public_date":"2015-03-19T00:00:00Z","advisories":["RHSA-2015:0800","RHSA-2015:0752","RHEA-2015:1770","RHEA-2015:1771","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1202418","bugzilla_description":"CVE-2015-0288 openssl: X509_to_X509_REQ NULL pointer dereference","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4","openssl-0:0.9.8e-33.el5_11"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0288.json"},{"CVE":"CVE-2009-5146","severity":"moderate","public_date":"2015-03-16T00:00:00Z","advisories":[],"bugzilla":"1203232","bugzilla_description":"CVE-2009-5146 openssl: memory leak in hostname TLS extension","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-5146.json"},{"CVE":"CVE-2015-0282","severity":"moderate","public_date":"2015-03-11T00:00:00Z","advisories":["RHSA-2015:1457"],"bugzilla":"1194371","bugzilla_description":"CVE-2015-0282 gnutls: RSA PKCS#1 signature verification forgery","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":["gnutls-0:2.8.5-18.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0282.json"},{"CVE":"CVE-2014-8170","severity":"moderate","public_date":"2015-03-05T00:00:00Z","advisories":[],"bugzilla":"1194745","bugzilla_description":"CVE-2014-8170 ovirt-node: unsafe quoting in command lines","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8170.json"},{"CVE":"CVE-2015-1780","severity":"moderate","public_date":"2015-03-05T00:00:00Z","advisories":[],"bugzilla":"1199389","bugzilla_description":"CVE-2015-1780 oVirt: Users with MANIPULATE_STORAGE_DOMAIN can attach a storage domain to any data-center","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","CWE":"CWE-285","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1780.json"},{"CVE":"CVE-2015-0294","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":["RHSA-2015:1457"],"bugzilla":"1196323","bugzilla_description":"CVE-2015-0294 gnutls: certificate algorithm consistency checking issue","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-295","affected_packages":["gnutls-0:2.8.5-18.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0294.json"},{"CVE":"CVE-2014-3591","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198145","bugzilla_description":"CVE-2014-3591 libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3591.json"},{"CVE":"CVE-2015-0837","severity":"low","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1198147","bugzilla_description":"CVE-2015-0837 libgcrypt: last-level cache side-channel attack","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0837.json"},{"CVE":"CVE-2014-3706","severity":"moderate","public_date":"2015-02-20T00:00:00Z","advisories":[],"bugzilla":"1154977","bugzilla_description":"CVE-2014-3706 ovirt-engine: connection does not validate certificate attributes.","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3706.json"},{"CVE":"CVE-2014-7851","severity":"moderate","public_date":"2015-02-17T00:00:00Z","advisories":["RHBA-2015:0230"],"bugzilla":"1165311","bugzilla_description":"CVE-2014-7851 ovirt-engine-webadmin: does not invalidate all sessions upon logout","cvss_score":4.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-613","affected_packages":["org.ovirt.engine-root-0:3.5.0-32"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7851.json"},{"CVE":"CVE-2015-0209","severity":"low","public_date":"2015-02-09T00:00:00Z","advisories":["RHSA-2016:1089","RHSA-2015:0752","RHSA-2016:2957","RHSA-2015:0716","RHSA-2015:0715"],"bugzilla":"1196737","bugzilla_description":"CVE-2015-0209 openssl: use-after-free on invalid EC private key import","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-416","affected_packages":["openssl-0:1.0.1e-30.el6_6.7","openssl-1:1.0.1e-42.el7_1.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0209.json"},{"CVE":"CVE-2014-9674","severity":"important","public_date":"2015-02-08T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191190","bugzilla_description":"CVE-2014-9674 freetype: multiple integer overflows Mac_Read_POST_Resource() leading to heap-based buffer overflows","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9674.json"},{"CVE":"CVE-2014-9675","severity":"low","public_date":"2015-02-08T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191192","bugzilla_description":"CVE-2014-9675 freetype: information leak in _bdf_add_property()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9675.json"},{"CVE":"CVE-2015-0237","severity":"moderate","public_date":"2015-02-04T00:00:00Z","advisories":["RHSA-2015:0888"],"bugzilla":"1184716","bugzilla_description":"CVE-2015-0237 vdsm: Users attempting a live storage migration create snapshot without snapshot creation permissions","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:S/C:N/I:N/A:C","CWE":"CWE-732","affected_packages":["org.ovirt.engine-root-0:3.5.1-4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0237.json"},{"CVE":"CVE-2015-0236","severity":"low","public_date":"2015-01-22T00:00:00Z","advisories":["RHSA-2015:0323"],"bugzilla":"1184431","bugzilla_description":"CVE-2015-0236 libvirt: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save images and snapshots objects","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-285->CWE-200","affected_packages":["libvirt-0:1.2.8-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0236.json"},{"CVE":"CVE-2016-5008","severity":"moderate","public_date":"2015-01-18T00:00:00Z","advisories":["RHSA-2016:2577"],"bugzilla":"1351514","bugzilla_description":"CVE-2016-5008 libvirt: Setting empty VNC password allows access to unauthorized users","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libvirt-0:2.0.0-10.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5008.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2014-8150","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1178692","bugzilla_description":"CVE-2014-8150 curl: URL request injection vulnerability in parseurlandfillconn()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-113","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8150.json"},{"CVE":"CVE-2015-0257","severity":"low","public_date":"2015-01-04T00:00:00Z","advisories":["RHSA-2015:0888"],"bugzilla":"1189085","bugzilla_description":"CVE-2015-0257 ovirt-engine-dwh: incorrect permissions on plugin file containing passwords","cvss_score":3.5,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:P","CWE":"(CWE-522|CWE-732)","affected_packages":["org.ovirt.engine-root-0:3.5.1-4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0257.json"},{"CVE":"CVE-2014-8136","severity":"low","public_date":"2014-12-17T00:00:00Z","advisories":["RHSA-2015:0323"],"bugzilla":"1176176","bugzilla_description":"CVE-2014-8136 libvirt: local denial of service in qemu/qemu_driver.c","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:1.2.8-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8136.json"},{"CVE":"CVE-2014-8135","severity":"moderate","public_date":"2014-12-17T00:00:00Z","advisories":[],"bugzilla":"1176182","bugzilla_description":"CVE-2014-8135 libvirt: local denial of service in storage/storage_driver.c","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8135.json"},{"CVE":"CVE-2015-3215","severity":"important","public_date":"2014-12-15T00:00:00Z","advisories":["RHSA-2015:1044","RHSA-2015:1043"],"bugzilla":"1227634","bugzilla_description":"CVE-2015-3215 virtio-win: netkvm: malformed packet can cause BSOD","cvss_score":6.1,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-20","affected_packages":["virtio-win-0:1.7.4-1.el7","virtio-win-0:1.7.4-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3215.json"},{"CVE":"CVE-2014-8131","severity":"low","public_date":"2014-12-05T00:00:00Z","advisories":[],"bugzilla":"1172569","bugzilla_description":"CVE-2014-8131 libvirt: deadlock and segfault in qemuConnectGetAllDomainStats","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8131.json"},{"CVE":"CVE-2014-9656","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191078","bugzilla_description":"CVE-2014-9656 freetype: integer underflow in the tt_sbit_decoder_load_image()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9656.json"},{"CVE":"CVE-2014-9657","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191079","bugzilla_description":"CVE-2014-9657 freetype: off-by-one buffer over-read in tt_face_load_hdmx()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9657.json"},{"CVE":"CVE-2014-9658","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191080","bugzilla_description":"CVE-2014-9658 freetype: buffer over-read and integer underflow in tt_face_load_kern()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-190->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9658.json"},{"CVE":"CVE-2014-9659","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191081","bugzilla_description":"CVE-2014-9659 freetype: stack-based buffer overflow in cff/cf2intrp.c in the CFF CharString interpreter","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9659.json"},{"CVE":"CVE-2014-9660","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191082","bugzilla_description":"CVE-2014-9660 freetype: missing ENDCHAR NULL pointer dereference in the _bdf_parse_glyphs()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9660.json"},{"CVE":"CVE-2014-9661","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191083","bugzilla_description":"CVE-2014-9661 freetype: out of bounds read in Type42 font parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9661.json"},{"CVE":"CVE-2014-9662","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191084","bugzilla_description":"CVE-2014-9662 freetype: heap-based buffer overflow in cff/cf2ft.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9662.json"},{"CVE":"CVE-2014-9663","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191085","bugzilla_description":"CVE-2014-9663 freetype: out-of-bounds read in tt_cmap4_validate()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9663.json"},{"CVE":"CVE-2014-9664","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191086","bugzilla_description":"CVE-2014-9664 freetype: off-by-one buffer over-read in parse_charstrings() / t42_parse_charstrings()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-193->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9664.json"},{"CVE":"CVE-2014-9665","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191087","bugzilla_description":"CVE-2014-9665 freetype: integer overflow leading to heap-based buffer overflow in Load_SBit_Png()","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9665.json"},{"CVE":"CVE-2014-9666","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191089","bugzilla_description":"CVE-2014-9666 freetype: integer overflow in tt_sbit_decoder_init() leading to out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9666.json"},{"CVE":"CVE-2014-9667","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191090","bugzilla_description":"CVE-2014-9667 freetype: integer overflow in tt_face_load_font_dir() leading to out-of-bounds read","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9667.json"},{"CVE":"CVE-2014-9668","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191091","bugzilla_description":"CVE-2014-9668 freetype: integer overflow in woff_open_font() leading to heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9668.json"},{"CVE":"CVE-2014-9669","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191092","bugzilla_description":"CVE-2014-9669 freetype: multiple integer overflows leading to buffer over-reads in cmap handling","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9669.json"},{"CVE":"CVE-2014-9670","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191093","bugzilla_description":"CVE-2014-9670 freetype: integer overflow in pcf_get_encodings() leading to NULL pointer dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-476","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9670.json"},{"CVE":"CVE-2014-9671","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191094","bugzilla_description":"CVE-2014-9671 freetype: integer overflow in pcf_get_properties() leading to NULL pointer dereference","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-476","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9671.json"},{"CVE":"CVE-2014-9672","severity":"low","public_date":"2014-11-24T00:00:00Z","advisories":[],"bugzilla":"1191095","bugzilla_description":"CVE-2014-9672 freetype: Array index error in the parse_fond function in base/ftmac.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-129","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9672.json"},{"CVE":"CVE-2014-9673","severity":"important","public_date":"2014-11-24T00:00:00Z","advisories":["RHSA-2015:0696"],"bugzilla":"1191096","bugzilla_description":"CVE-2014-9673 freetype: integer signedness error in Mac_Read_POST_Resource() leading to heap-based buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-122","affected_packages":["freetype-0:2.3.11-15.el6_6.1","freetype-0:2.4.11-10.ael7b_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9673.json"},{"CVE":"CVE-2014-3707","severity":"moderate","public_date":"2014-11-05T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1154941","bugzilla_description":"CVE-2014-3707 curl: incorrect handle duplication after COPYPOSTFIELDS","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:P","CWE":"(CWE-125|CWE-416)","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3707.json"},{"CVE":"CVE-2014-7823","severity":"low","public_date":"2014-11-05T00:00:00Z","advisories":["RHSA-2014:1873","RHSA-2015:0008"],"bugzilla":"1160817","bugzilla_description":"CVE-2014-7823 libvirt: dumpxml: information leak with migratable flag","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libvirt-0:0.10.2-46.el6_6.2","libvirt-0:1.1.1-29.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7823.json"},{"CVE":"CVE-2014-3513","severity":"important","public_date":"2014-10-15T00:00:00Z","advisories":["RHSA-2014:1652","RHSA-2014:1692"],"bugzilla":"1152953","bugzilla_description":"CVE-2014-3513 openssl: SRTP memory leak causes crash when using specially-crafted handshake message","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-30.el6_6.2","openssl-1:1.0.1e-34.el7_0.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3513.json"},{"CVE":"CVE-2014-3566","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHSA-2015:1546","RHSA-2015:1545","RHSA-2015:0069","RHSA-2015:0079","RHSA-2015:0068","RHSA-2014:1881","RHSA-2014:1880","RHSA-2015:0080","RHSA-2014:1882","RHSA-2014:1877","RHSA-2014:1876","RHSA-2014:1920","RHSA-2015:0067","RHSA-2015:0012","RHSA-2015:0011","RHSA-2015:0264","RHSA-2015:0010","RHSA-2015:0086","RHSA-2015:0085","RHBA-2014:1857"],"bugzilla":"1152789","bugzilla_description":"CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-636|CWE-757)","affected_packages":["java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0","java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6","openshift-origin-node-proxy-0:1.16.4.2-1.el6op","java-1.7.1-ibm-1:1.7.1.2.0-1jpp.3.el7_0","java-1.7.0-ibm-1:1.7.0.8.0-1jpp.1.el6_6","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0","java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5","java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11","java-1.6.0-ibm-1:1.6.0.16.2-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6","java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6","java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7","openshift-origin-node-proxy-0:1.22.3.4-1.el6op","java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json"},{"CVE":"CVE-2014-3657","severity":"moderate","public_date":"2014-10-01T00:00:00Z","advisories":["RHSA-2014:1873","RHSA-2014:1352"],"bugzilla":"1145667","bugzilla_description":"CVE-2014-3657 libvirt: domain_conf: domain deadlock DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["libvirt-0:0.10.2-46.el6_6.2","libvirt-0:1.1.1-29.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3657.json"},{"CVE":"CVE-2014-3633","severity":"moderate","public_date":"2014-09-17T00:00:00Z","advisories":["RHSA-2014:1873","RHSA-2014:1352"],"bugzilla":"1141131","bugzilla_description":"CVE-2014-3633 libvirt: qemu: out-of-bounds read access in qemuDomainGetBlockIoTune() due to invalid index","cvss_score":3.2,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:N/A:P","CWE":"CWE-125","affected_packages":["libvirt-0:0.10.2-46.el6_6.2","libvirt-0:1.1.1-29.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3633.json"},{"CVE":"CVE-2014-3613","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":["RHSA-2015:1254","RHSA-2015:2159"],"bugzilla":"1136154","bugzilla_description":"CVE-2014-3613 curl: incorrect handling of IP addresses in cookie domain","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20->CWE-284","affected_packages":["curl-0:7.29.0-25.el7","curl-0:7.19.7-46.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3613.json"},{"CVE":"CVE-2014-3620","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":[],"bugzilla":"1138846","bugzilla_description":"CVE-2014-3620 curl: cookies accepted for TLDs","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-20->CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3620.json"},{"CVE":"CVE-2014-3573","severity":"moderate","public_date":"2014-09-04T00:00:00Z","advisories":["RHSA-2014:1161"],"bugzilla":"1125795","bugzilla_description":"CVE-2014-3573 oVirt Engine: XML eXternal Entity (XXE) flaw in backend module","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["org.ovirt.engine-root-0:3.4.1-2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3573.json"},{"CVE":"CVE-2014-3577","severity":"important","public_date":"2014-08-18T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2016:1773","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1082","RHSA-2014:1320","RHSA-2014:1166","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1146","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2016:1931","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1834","RHSA-2014:1833","RHSA-2015:1177","RHSA-2014:1836","RHSA-2015:1176","RHSA-2014:1835"],"bugzilla":"1129074","bugzilla_description":"CVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","httpcomponents-client-0:4.2.5-5.el7_0","org.ovirt.engine-root-0:3.5.0-29","jakarta-commons-httpclient-1:3.1-16.el7_0","thermostat1-httpcomponents-client-0:4.2.5-3.4.el6.1","jakarta-commons-httpclient-1:3.1-0.9.el6_5","jakarta-commons-httpclient-1:3.0-7jpp.4.el5_10","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3577.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2012-6153","severity":"important","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2015:0851","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0158","RHSA-2015:0234","RHSA-2015:0850","RHSA-2014:1162","RHSA-2014:1320","RHSA-2015:1888","RHSA-2014:1163","RHSA-2014:1323","RHSA-2014:1322","RHSA-2014:1321","RHSA-2014:2019","RHSA-2014:1904","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0125","RHSA-2014:2020","RHSA-2014:1892","RHSA-2014:1891","RHSA-2014:1098","RHSA-2014:1834","RHSA-2014:1833","RHSA-2014:1836","RHSA-2014:1835"],"bugzilla":"1129916","bugzilla_description":"CVE-2012-6153 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-297","affected_packages":["httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el5","devtoolset-2-httpcomponents-client-0:4.2.1-6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el6","httpcomponents-eap6-0:6-12.redhat_2.1.ep6.el7","apache-cxf-0:2.2.12-14.patch_09.el6","org.ovirt.engine-root-0:3.5.0-29","apache-cxf-0:2.2.12-14.patch_09.ep5.el5","apache-cxf-0:2.2.12-14.patch_09.ep5.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6153.json"},{"CVE":"CVE-2015-2328","severity":"moderate","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:1025"],"bugzilla":"1285399","bugzilla_description":"CVE-2015-2328 pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2328.json"},{"CVE":"CVE-2014-3508","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127490","bugzilla_description":"CVE-2014-3508 openssl: information leak in pretty printing functions","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3508.json"},{"CVE":"CVE-2014-5139","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1127491","bugzilla_description":"CVE-2014-5139 openssl: crash with SRP ciphersuite in Server Hello message","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5139.json"},{"CVE":"CVE-2014-3505","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127499","bugzilla_description":"CVE-2014-3505 openssl: DTLS packet processing double free","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-672","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3505.json"},{"CVE":"CVE-2014-3506","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127500","bugzilla_description":"CVE-2014-3506 openssl: DTLS memory exhaustion","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-862->CWE-400","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3506.json"},{"CVE":"CVE-2014-3507","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1052","RHSA-2014:1054"],"bugzilla":"1127502","bugzilla_description":"CVE-2014-3507 openssl: DTLS memory leak from zero-length fragments","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3507.json"},{"CVE":"CVE-2014-3510","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":["RHSA-2014:1256","RHSA-2014:1052","RHSA-2014:1297","RHSA-2014:1054","RHSA-2014:1053"],"bugzilla":"1127503","bugzilla_description":"CVE-2014-3510 openssl: DTLS anonymous (EC)DH denial of service","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.15","openssl-0:0.9.8e-27.el5_10.4","openssl-1:1.0.1e-34.el7_0.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3510.json"},{"CVE":"CVE-2014-3512","severity":"moderate","public_date":"2014-08-06T00:00:00Z","advisories":[],"bugzilla":"1127505","bugzilla_description":"CVE-2014-3512 openssl: SRP buffer overrun","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3512.json"},{"CVE":"CVE-2014-3559","severity":"moderate","public_date":"2014-08-04T00:00:00Z","advisories":["RHSA-2014:1002"],"bugzilla":"1121925","bugzilla_description":"CVE-2014-3559 ovirt-engine-backend: memory snapshots not wiped when deleting a VM with wipe-after-delete (WAD) enabled for its disks","cvss_score":3.5,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","CWE":"CWE-212","affected_packages":["org.ovirt.engine-root-0:3.4.0-31"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3559.json"},{"CVE":"CVE-2015-2327","severity":"moderate","public_date":"2014-07-11T00:00:00Z","advisories":["RHBA-2015:2142","RHSA-2016:2750"],"bugzilla":"1285408","bugzilla_description":"CVE-2015-2327 pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-674","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","pcre-0:8.32-15.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2327.json"},{"CVE":"CVE-2014-3485","severity":"moderate","public_date":"2014-06-30T00:00:00Z","advisories":["RHSA-2014:0814"],"bugzilla":"1107472","bugzilla_description":"CVE-2014-3485 ovirt-engine-api: XML eXternal Entity (XXE) flaw","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["org.ovirt.engine-root-0:3.4.0-22"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3485.json"},{"CVE":"CVE-2014-0224","severity":"important","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0630","RHSA-2014:0631","RHSA-2014:0624","RHSA-2014:0679","RHSA-2014:0632","RHSA-2014:0633","RHSA-2014:0627","RHSA-2014:0628","RHSA-2014:0625","RHSA-2014:0626","RHSA-2014:0629","RHSA-2014:0680"],"bugzilla":"1103586","bugzilla_description":"CVE-2014-0224 openssl: SSL/TLS MITM vulnerability","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-841","affected_packages":["openssl-0:0.9.8e-27.el5_10.3","openssl-0:1.0.1e-16.el6_5.14","openssl097a-0:0.9.7a-12.el5_10.1","openssl098e-0:0.9.8e-18.el6_5.2","openssl-1:1.0.1e-34.el7_0.3","openssl098e-0:0.9.8e-29.el7_0.2","rhev-hypervisor6-0:6.5-20140603.1.el6ev","openssl-0:0.9.8e-26.el5_9.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0224.json"},{"CVE":"CVE-2014-0221","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625","RHSA-2014:1021","RHSA-2014:1053","RHSA-2014:1086"],"bugzilla":"1103593","bugzilla_description":"CVE-2014-0221 openssl: DoS when sending invalid DTLS handshake","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-400","affected_packages":["openssl-0:0.9.8e-27.el5_10.4","openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0221.json"},{"CVE":"CVE-2014-0195","severity":"important","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1103598","bugzilla_description":"CVE-2014-0195 openssl: Buffer overflow via DTLS invalid fragment","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-119","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0195.json"},{"CVE":"CVE-2014-3470","severity":"moderate","public_date":"2014-06-05T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1103600","bugzilla_description":"CVE-2014-3470 openssl: client-side denial of service when using anonymous ECDH","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3470.json"},{"CVE":"CVE-2014-0199","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2014:0558"],"bugzilla":"1094222","bugzilla_description":"CVE-2014-0199 ovirt-engine-reports: setup script logs database password in cleartext","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["ovirt_engine_reports-root-0:3.3.3-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0199.json"},{"CVE":"CVE-2014-0200","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2014:0558"],"bugzilla":"1094229","bugzilla_description":"CVE-2014-0200 ovirt-engine-reports: js-jboss7-ds.xml is world-readable","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":["ovirt_engine_reports-root-0:3.3.3-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0200.json"},{"CVE":"CVE-2014-0201","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2014:0558"],"bugzilla":"1094231","bugzilla_description":"CVE-2014-0201 ovirt-engine-reports: various configuration files are world-readable","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732->CWE-200","affected_packages":["ovirt_engine_reports-root-0:3.3.3-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0201.json"},{"CVE":"CVE-2014-0202","severity":"low","public_date":"2014-05-27T00:00:00Z","advisories":["RHSA-2014:0559"],"bugzilla":"1094234","bugzilla_description":"CVE-2014-0202 ovirt-engine-dwh: setup script logs database password in cleartext","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-522","affected_packages":["ovirt_engine_dwh-root-0:3.3.3-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0202.json"},{"CVE":"CVE-2014-0179","severity":"moderate","public_date":"2014-05-06T00:00:00Z","advisories":["RHSA-2014:0914","RHSA-2014:0560"],"bugzilla":"1088290","bugzilla_description":"CVE-2014-0179 CVE-2014-5177 libvirt: unsafe parsing of XML documents allows libvirt DoS and/or arbitrary file read","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-611","affected_packages":["libvirt-0:1.1.1-29.el7_0.1","libvirt-0:0.10.2-29.el6_5.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0179.json"},{"CVE":"CVE-2014-5177","severity":"moderate","public_date":"2014-05-06T00:00:00Z","advisories":["RHSA-2014:0914"],"bugzilla":"1088290","bugzilla_description":"CVE-2014-0179 CVE-2014-5177 libvirt: unsafe parsing of XML documents allows libvirt DoS and/or arbitrary file read","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-611","affected_packages":["libvirt-0:1.1.1-29.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5177.json"},{"CVE":"CVE-2014-0198","severity":"moderate","public_date":"2014-04-21T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1093837","bugzilla_description":"CVE-2014-0198 openssl: SSL_MODE_RELEASE_BUFFERS NULL pointer dereference in do_ssl3_write()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0198.json"},{"CVE":"CVE-2010-5298","severity":"moderate","public_date":"2014-04-08T00:00:00Z","advisories":["RHSA-2014:0679","RHSA-2014:0628","RHSA-2014:0625"],"bugzilla":"1087195","bugzilla_description":"CVE-2010-5298 openssl: freelist misuse causing a possible use-after-free","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["openssl-0:1.0.1e-16.el6_5.14","openssl-1:1.0.1e-34.el7_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5298.json"},{"CVE":"CVE-2014-0189","severity":"moderate","public_date":"2014-03-26T00:00:00Z","advisories":["RHBA-2014:1206","RHBA-2014:1513","RHSA-2015:0430"],"bugzilla":"1088732","bugzilla_description":"CVE-2014-0189 virt-who: plaintext hypervisor passwords in world-readable /etc/sysconfig/virt-who configuration file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"(CWE-732|CWE-522)","affected_packages":["virt-who-0:0.11-5.el7","virt-who-0:0.9-6.el5","virt-who-0:0.10-8.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0189.json"},{"CVE":"CVE-2014-0151","severity":"moderate","public_date":"2014-03-17T00:00:00Z","advisories":["RHSA-2015:0158"],"bugzilla":"1081849","bugzilla_description":"CVE-2014-0151 ovirt-engine: cross-site request forgery (CSRF)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-352","affected_packages":["org.ovirt.engine-root-0:3.5.0-29"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0151.json"},{"CVE":"CVE-2014-0152","severity":"moderate","public_date":"2014-03-17T00:00:00Z","advisories":["RHSA-2014:0506"],"bugzilla":"1081860","bugzilla_description":"CVE-2014-0152 ovirt-engine-webadmin: session fixation","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-384","affected_packages":["org.ovirt.engine-root-0:3.4.0-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0152.json"},{"CVE":"CVE-2014-0153","severity":"moderate","public_date":"2014-03-17T00:00:00Z","advisories":["RHSA-2014:0506"],"bugzilla":"1081875","bugzilla_description":"CVE-2014-0153 ovirt-engine-api: session ID stored in HTML5 local storage","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-522","affected_packages":["org.ovirt.engine-root-0:3.4.0-21"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0153.json"},{"CVE":"CVE-2014-0154","severity":"moderate","public_date":"2014-03-17T00:00:00Z","advisories":["RHSA-2015:0158"],"bugzilla":"1081896","bugzilla_description":"CVE-2014-0154 ovirt-engine-webadmin: HttpOnly flag is not included when the session ID is set","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-522","affected_packages":["org.ovirt.engine-root-0:3.5.0-29"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0154.json"},{"CVE":"CVE-2014-0036","severity":"moderate","public_date":"2014-03-05T00:00:00Z","advisories":[],"bugzilla":"1058595","bugzilla_description":"CVE-2014-0036 rubygem-rbovirt: unsafe use of rest-client","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0036.json"},{"CVE":"CVE-2014-5116","severity":null,"public_date":"2014-02-14T00:00:00Z","advisories":[],"bugzilla":"1124500","bugzilla_description":"CVE-2014-5116 cairo: NULL pointer dereference in cairo_image_surface_get_data()","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5116.json"},{"CVE":"CVE-2013-6434","severity":"important","public_date":"2014-01-21T00:00:00Z","advisories":["RHSA-2014:0038"],"bugzilla":"1039839","bugzilla_description":"CVE-2013-6434 rhev: remote-viewer spice tls-stripping issue","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-300","affected_packages":["org.ovirt.engine-root-0:3.3.0-45"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6434.json"},{"CVE":"CVE-2014-0028","severity":"moderate","public_date":"2014-01-15T00:00:00Z","advisories":[],"bugzilla":"1048637","bugzilla_description":"CVE-2014-0028 libvirt: event registration bypasses domain:getattr ACL","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0028.json"},{"CVE":"CVE-2014-1447","severity":"moderate","public_date":"2013-12-31T00:00:00Z","advisories":["RHSA-2014:0103"],"bugzilla":"1052957","bugzilla_description":"CVE-2014-1447 libvirt: denial of service with keepalive","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-29.el6_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1447.json"},{"CVE":"CVE-2013-6436","severity":"moderate","public_date":"2013-12-20T00:00:00Z","advisories":[],"bugzilla":"1042252","bugzilla_description":"CVE-2013-6436 libvirt: crash in lxcDomainGetMemoryParameters","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6436.json"},{"CVE":"CVE-2013-6457","severity":"moderate","public_date":"2013-12-20T00:00:00Z","advisories":[],"bugzilla":"1048629","bugzilla_description":"CVE-2013-6457 libvirt: avoid crashing if calling 'virsh numatune' on an inactive domain (libxl)","cvss_score":5.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6457.json"},{"CVE":"CVE-2013-6456","severity":"moderate","public_date":"2013-12-17T00:00:00Z","advisories":[],"bugzilla":"1048627","bugzilla_description":"CVE-2013-6456 libvirt: unsafe usage of paths under /proc/$PID/root","cvss_score":6.2,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:P/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6456.json"},{"CVE":"CVE-2013-6441","severity":"moderate","public_date":"2013-12-16T00:00:00Z","advisories":[],"bugzilla":"1045988","bugzilla_description":"CVE-2013-6441 lxc: sshd template allow privilege escalation on host","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6441.json"},{"CVE":"CVE-2013-6458","severity":"moderate","public_date":"2013-12-13T00:00:00Z","advisories":["RHSA-2014:0103"],"bugzilla":"1048631","bugzilla_description":"CVE-2013-6458 qemu: job usage issue in several APIs leading to libvirtd crash","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libvirt-0:0.10.2-29.el6_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6458.json"},{"CVE":"CVE-2013-4400","severity":"important","public_date":"2013-10-21T00:00:00Z","advisories":[],"bugzilla":"1015228","bugzilla_description":"CVE-2013-4400 libvirt: virt-login-shell arbitrary file overwrites vulnerability","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4400.json"},{"CVE":"CVE-2013-4401","severity":"important","public_date":"2013-10-21T00:00:00Z","advisories":[],"bugzilla":"1015259","bugzilla_description":"CVE-2013-4401 libvirt: unintended API access due to incorrect permissions checks","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4401.json"},{"CVE":"CVE-2014-8991","severity":"low","public_date":"2013-10-09T00:00:00Z","advisories":[],"bugzilla":"1166137","bugzilla_description":"CVE-2014-8991 python-pip: local DoS vulnerability","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8991.json"},{"CVE":"CVE-2013-4399","severity":"moderate","public_date":"2013-09-27T00:00:00Z","advisories":[],"bugzilla":"1015214","bugzilla_description":"CVE-2013-4399 libvirt: unprivileged user can crash libvirtd when ACLs are enabled","cvss_score":5.5,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:N/I:N/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4399.json"},{"CVE":"CVE-2013-7336","severity":"moderate","public_date":"2013-09-19T00:00:00Z","advisories":["RHBA-2013:1581"],"bugzilla":"1077620","bugzilla_description":"CVE-2013-7336 libvirt: unprivileged user can crash libvirtd during spice migration","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-29.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7336.json"},{"CVE":"CVE-2013-4311","severity":"important","public_date":"2013-09-18T00:00:00Z","advisories":["RHSA-2013:1272"],"bugzilla":"1005332","bugzilla_description":"CVE-2013-4311 libvirt: insecure calling of polkit","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libvirt-0:0.10.2-18.el6_4.14"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4311.json"},{"CVE":"CVE-2013-4296","severity":"moderate","public_date":"2013-09-18T00:00:00Z","advisories":["RHSA-2013:1272"],"bugzilla":"1006173","bugzilla_description":"CVE-2013-4296 libvirt: invalid free in remoteDispatchDomainMemoryStats","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-18.el6_4.14"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4296.json"},{"CVE":"CVE-2013-4181","severity":"moderate","public_date":"2013-09-10T00:00:00Z","advisories":["RHSA-2013:1210"],"bugzilla":"988774","bugzilla_description":"CVE-2013-4181 ovirt-engine: RedirectServlet cross-site scripting flaw","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["org.ovirt.engine-root-0:3.2.0-42"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4181.json"},{"CVE":"CVE-2013-4297","severity":"moderate","public_date":"2013-09-03T00:00:00Z","advisories":[],"bugzilla":"1006505","bugzilla_description":"CVE-2013-4297 libvirt: invalid free in virFileNBDDeviceAssociate","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4297.json"},{"CVE":"CVE-2013-4292","severity":"moderate","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"1002666","bugzilla_description":"CVE-2013-4292 libvirt: unbounded RPC arrays in remote protocol","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4292.json"},{"CVE":"CVE-2013-5651","severity":"moderate","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"1006493","bugzilla_description":"CVE-2013-5651 libvirt: virBitmapParse out-of-bounds read access","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5651.json"},{"CVE":"CVE-2013-4291","severity":"low","public_date":"2013-08-29T00:00:00Z","advisories":[],"bugzilla":"1006509","bugzilla_description":"CVE-2013-4291 libvirt: supplementary groups not adjusted correctly when parsing label","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4291.json"},{"CVE":"CVE-2013-7440","severity":"low","public_date":"2013-08-12T00:00:00Z","advisories":["RHSA-2016:1166","RHEA-2014:1175"],"bugzilla":"1224999","bugzilla_description":"CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["python27-python-pip-0:7.1.0-2.el7","python27-python-pip-0:7.1.0-2.el6","python27-python-virtualenv-0:13.1.0-1.el7","python-pymongo-0:2.5.2-3.el6sat","python27-python-0:2.7.8-14.el7","python27-python-0:2.7.8-16.el6","python27-python-virtualenv-0:13.1.0-1.el6","python27-python-pymongo-0:3.2.1-1.el7","python27-python-pymongo-0:3.2.1-1.el6","python-requests-0:2.2.1-1.el7sat"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7440.json"},{"CVE":"CVE-2013-4239","severity":"important","public_date":"2013-08-05T00:00:00Z","advisories":[],"bugzilla":"996241","bugzilla_description":"CVE-2013-4239 libvirt: memory corruption in xenDaemonListDefinedDomains function","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4239.json"},{"CVE":"CVE-2013-5123","severity":"moderate","public_date":"2013-07-31T00:00:00Z","advisories":[],"bugzilla":"1066692","bugzilla_description":"CVE-2013-5123 python-pip: insecure software download with mirroring support","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5123.json"},{"CVE":"CVE-2013-2231","severity":"important","public_date":"2013-07-22T00:00:00Z","advisories":["RHSA-2013:1100","RHSA-2013:1101"],"bugzilla":"980757","bugzilla_description":"CVE-2013-2231 qemu: qemu-ga win32 service unquoted search path","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-428","affected_packages":["virtio-win-0:1.6.5-6.el6_4","qemu-kvm-2:0.12.1.2-2.355.el6_4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2231.json"},{"CVE":"CVE-2013-4153","severity":"important","public_date":"2013-07-16T00:00:00Z","advisories":[],"bugzilla":"986383","bugzilla_description":"CVE-2013-4153 libvirt: double free of returned JSON array in qemuAgentGetVCPUs()","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4153.json"},{"CVE":"CVE-2013-4154","severity":"moderate","public_date":"2013-07-16T00:00:00Z","advisories":[],"bugzilla":"986386","bugzilla_description":"CVE-2013-4154 libvirt: crash of libvirtd without guest agent configuration","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4154.json"},{"CVE":"CVE-2013-2230","severity":"moderate","public_date":"2013-07-10T00:00:00Z","advisories":[],"bugzilla":"981476","bugzilla_description":"CVE-2013-2230 libvirt: multiple registered events crash","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2230.json"},{"CVE":"CVE-2013-2218","severity":"important","public_date":"2013-07-01T00:00:00Z","advisories":[],"bugzilla":"980112","bugzilla_description":"CVE-2013-2218 libvirt: virConnectListAllInterfaces crash","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2218.json"},{"CVE":"CVE-2013-2144","severity":"moderate","public_date":"2013-06-10T00:00:00Z","advisories":["RHSA-2013:0888"],"bugzilla":"971058","bugzilla_description":"CVE-2013-2144 rhevm: insufficient target domain permission check when cloning a VM from a snapshot","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["org.ovirt.engine-root-0:3.2.0-30"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2144.json"},{"CVE":"CVE-2013-1633","severity":"moderate","public_date":"2013-06-02T00:00:00Z","advisories":[],"bugzilla":"994182","bugzilla_description":"CVE-2013-1633 python-setuptools: easy_install insecure installation mechanism","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1633.json"},{"CVE":"CVE-2013-1962","severity":"moderate","public_date":"2013-05-16T00:00:00Z","advisories":["RHSA-2013:0831"],"bugzilla":"953107","bugzilla_description":"CVE-2013-1962 libvirt: DoS (max count of open files exhaustion) due sockets leak in the storage pool","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-18.el6_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1962.json"},{"CVE":"CVE-2013-2007","severity":"moderate","public_date":"2013-05-06T00:00:00Z","advisories":["RHSA-2013:0896"],"bugzilla":"956082","bugzilla_description":"CVE-2013-2007 qemu: guest agent creates files with insecure permissions in deamon mode","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.355.el6_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2007.json"},{"CVE":"CVE-2013-0293","severity":"important","public_date":"2013-02-28T00:00:00Z","advisories":[],"bugzilla":"911699","bugzilla_description":"CVE-2013-0293 rhev: rhev-h: Lock screen accepts F2 to drop to shell","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0293.json"},{"CVE":"CVE-2013-1766","severity":"moderate","public_date":"2013-02-25T00:00:00Z","advisories":[],"bugzilla":"915718","bugzilla_description":"CVE-2013-1766 libvirt: kvm-group writable storage","cvss_score":3.5,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1766.json"},{"CVE":"CVE-2013-0168","severity":"moderate","public_date":"2013-02-04T00:00:00Z","advisories":["RHSA-2013:0211"],"bugzilla":"893355","bugzilla_description":"CVE-2013-0168 rhev-m: insufficient MoveDisk target domain permission checks","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":null,"affected_packages":["org.ovirt.engine-root-0:3.1.0-43"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0168.json"},{"CVE":"CVE-2013-0170","severity":"important","public_date":"2013-01-28T00:00:00Z","advisories":["RHSA-2013:0199"],"bugzilla":"893450","bugzilla_description":"CVE-2013-0170 libvirt: use-after-free in virNetMessageFree()","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-416","affected_packages":["libvirt-0:0.9.10-21.el6_3.8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0170.json"},{"CVE":"CVE-2012-6115","severity":"moderate","public_date":"2012-12-17T00:00:00Z","advisories":["RHSA-2013:0211"],"bugzilla":"905865","bugzilla_description":"CVE-2012-6115 rhev: rhevm-manage-domains logs admin passwords","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":["org.ovirt.engine-root-0:3.1.0-43"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6115.json"},{"CVE":"CVE-2011-4316","severity":"moderate","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2012:1506"],"bugzilla":"754876","bugzilla_description":"CVE-2011-4316 SPICE screen locking race condition","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","CWE":null,"affected_packages":["org.ovirt.engine-root-0:3.1.0-32"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4316.json"},{"CVE":"CVE-2012-0860","severity":"important","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2012:1506","RHSA-2012:1508"],"bugzilla":"790730","bugzilla_description":"CVE-2012-0860 rhev: vds_installer insecure /tmp use","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-377","affected_packages":["vdsm-0:4.9.6-44.0.el6_3","org.ovirt.engine-root-0:3.1.0-32"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0860.json"},{"CVE":"CVE-2012-0861","severity":"important","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2012:1506","RHSA-2012:1505","RHSA-2012:1508"],"bugzilla":"790754","bugzilla_description":"CVE-2012-0861 rhev: vds_installer is prone to MITM when downloading 2nd stage installer","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-295","affected_packages":["vdsm-0:4.9.6-44.0.el6_3","rhev-hypervisor6-0:6.3-20121121.0.el6_3","org.ovirt.engine-root-0:3.1.0-32"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0861.json"},{"CVE":"CVE-2012-2696","severity":"low","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2012:1506"],"bugzilla":"831565","bugzilla_description":"CVE-2012-2696 rhev: backend allows unprivileged queries","cvss_score":2.7,"cvss_scoring_vector":"AV:A/AC:L/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["org.ovirt.engine-root-0:3.1.0-32"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2696.json"},{"CVE":"CVE-2012-5516","severity":"moderate","public_date":"2012-12-04T00:00:00Z","advisories":["RHSA-2012:1506"],"bugzilla":"875370","bugzilla_description":"CVE-2012-5516 rhev-m: MoveDisk ignores the disk's wipe-after-delete property","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["org.ovirt.engine-root-0:3.1.0-32"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5516.json"},{"CVE":"CVE-2012-3445","severity":"moderate","public_date":"2012-07-30T00:00:00Z","advisories":["RHSA-2012:1202"],"bugzilla":"844734","bugzilla_description":"CVE-2012-3445 libvirt: crash in virTypedParameterArrayClear","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.9.10-21.el6_3.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3445.json"},{"CVE":"CVE-2012-4423","severity":"moderate","public_date":"2012-07-24T00:00:00Z","advisories":["RHSA-2012:1359"],"bugzilla":"857133","bugzilla_description":"CVE-2012-4423 libvirt: null function pointer invocation in virNetServerProgramDispatchCall()","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.9.10-21.el6_3.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4423.json"},{"CVE":"CVE-2012-3411","severity":"moderate","public_date":"2012-07-09T00:00:00Z","advisories":["RHSA-2013:0579","RHSA-2013:0276","RHSA-2013:0277"],"bugzilla":"833033","bugzilla_description":"CVE-2012-3411 libvirt+dnsmasq: DNS configured to answer DNS queries from non-virtual networks","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.10.2-18.el6","rhev-hypervisor6-0:6.4-20130221.0.el6","dnsmasq-0:2.48-13.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3411.json"},{"CVE":"CVE-2012-2693","severity":"low","public_date":"2012-04-28T00:00:00Z","advisories":["RHSA-2012:0748","RHSA-2013:0127"],"bugzilla":"831164","bugzilla_description":"CVE-2012-2693 libvirt: address bus= device= when identicle vendor ID/product IDs usb devices attached are ignored","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["libvirt-0:0.8.2-29.el5","libvirt-0:0.9.10-21.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2693.json"},{"CVE":"CVE-2011-5245","severity":"moderate","public_date":"2011-12-30T00:00:00Z","advisories":["RHSA-2012:0519","RHSA-2012:1056","RHSA-2012:1058","RHSA-2012:0441","RHSA-2012:1057","RHSA-2012:0421","RHSA-2012:1059","RHSA-2012:1125","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"785631","bugzilla_description":"CVE-2011-5245 CVE-2012-0818 RESTEasy: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el4","org.ovirt.engine-root-0:3.0.3_0001-3","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el6","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5245.json"},{"CVE":"CVE-2012-0818","severity":"moderate","public_date":"2011-12-30T00:00:00Z","advisories":["RHSA-2013:1263","RHSA-2012:0519","RHSA-2012:1056","RHSA-2012:1058","RHSA-2012:0441","RHSA-2012:1057","RHSA-2012:0421","RHSA-2012:1059","RHSA-2012:1125","RHSA-2014:0371","RHSA-2014:0372"],"bugzilla":"785631","bugzilla_description":"CVE-2011-5245 CVE-2012-0818 RESTEasy: XML eXternal Entity (XXE) flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el4","org.ovirt.engine-root-0:3.0.3_0001-3","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el6","resteasy-0:1.2.1-10.CP02_patch01.1.ep5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0818.json"},{"CVE":"CVE-2011-4600","severity":"low","public_date":"2011-12-09T00:00:00Z","advisories":["RHBA-2012:0013"],"bugzilla":"765964","bugzilla_description":"CVE-2011-4600 libvirt: unintended firewall port exposure after restarting libvirtd when defining a bridged forward-mode network","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libvirt-0:0.9.4-23.el6_2.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4600.json"},{"CVE":"CVE-2011-2212","severity":"important","public_date":"2011-07-05T00:00:00Z","advisories":["RHSA-2011:0919"],"bugzilla":"713589","bugzilla_description":"CVE-2011-2212 qemu-kvm: virtqueue: too-large indirect descriptor buffer overflow","cvss_score":7.4,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:C/I:C/A:C","CWE":"CWE-119","affected_packages":["qemu-kvm-2:0.12.1.2-2.160.el6_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2212.json"},{"CVE":"CVE-2011-2511","severity":"moderate","public_date":"2011-06-24T00:00:00Z","advisories":["RHSA-2011:1197","RHSA-2011:1019"],"bugzilla":"717199","bugzilla_description":"CVE-2011-2511 libvirt: integer overflow in VirDomainGetVcpus","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["libvirt-0:0.8.7-18.el6_1.1","libvirt-0:0.8.2-22.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2511.json"},{"CVE":"CVE-2011-2178","severity":"moderate","public_date":"2011-05-31T00:00:00Z","advisories":[],"bugzilla":"709769","bugzilla_description":"CVE-2011-2178 libvirt: regression introduced in disk probe logic","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2178.json"},{"CVE":"CVE-2011-1486","severity":"moderate","public_date":"2011-03-23T00:00:00Z","advisories":["RHSA-2011:0478","RHSA-2011:0479"],"bugzilla":"693391","bugzilla_description":"CVE-2011-1486 libvirt: error reporting in libvirtd is not thread safe","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.8.2-15.el5_6.4","libvirt-0:0.8.1-27.el6_0.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1486.json"},{"CVE":"CVE-2011-1146","severity":"important","public_date":"2011-03-02T00:00:00Z","advisories":["RHSA-2011:0391"],"bugzilla":"683650","bugzilla_description":"CVE-2011-1146 libvirt: several API calls do not honour read-only connection","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libvirt-0:0.8.1-27.el6_0.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1146.json"},{"CVE":"CVE-2017-1000044","severity":"moderate","public_date":"2010-11-29T00:00:00Z","advisories":[],"bugzilla":"1426766","bugzilla_description":"CVE-2017-1000044 gtk-vnc: Incorrect boundaries check when updating framebuffer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000044.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2010-2242","severity":"low","public_date":"2010-07-12T00:00:00Z","advisories":["RHSA-2010:0615"],"bugzilla":"602455","bugzilla_description":"CVE-2010-2242 libvirt: improperly mapped source privileged ports may allow for obtaining privileged resources on the host","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:N/I:P/A:N","CWE":null,"affected_packages":["libvirt-0:0.6.3-33.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2242.json"},{"CVE":"CVE-2010-2237","severity":"moderate","public_date":"2010-07-12T00:00:00Z","advisories":[],"bugzilla":"607810","bugzilla_description":"CVE-2010-2237 libvirt: ignoring defined main disk format when looking up disk backing stores","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2237.json"},{"CVE":"CVE-2010-2238","severity":"moderate","public_date":"2010-07-12T00:00:00Z","advisories":[],"bugzilla":"607811","bugzilla_description":"CVE-2010-2238 libvirt: ignoring defined disk backing store format when recursing into disk image backing stores","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2238.json"},{"CVE":"CVE-2010-2239","severity":"low","public_date":"2010-07-12T00:00:00Z","advisories":["RHSA-2010:0615"],"bugzilla":"607812","bugzilla_description":"CVE-2010-2239 libvirt: not setting user defined backing store format when creating new image","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:C/I:N/A:N","CWE":null,"affected_packages":["libvirt-0:0.6.3-33.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2239.json"},{"CVE":"CVE-2011-1773","severity":"low","public_date":"2010-01-23T00:00:00Z","advisories":["RHSA-2011:1615"],"bugzilla":"702754","bugzilla_description":"CVE-2011-1773 virt-v2v: vnc password protection is missing after vm conversion","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["virt-v2v-0:0.8.3-5.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1773.json"},{"CVE":"CVE-2009-0036","severity":"moderate","public_date":"2009-01-27T00:00:00Z","advisories":["RHSA-2009:0382"],"bugzilla":"484947","bugzilla_description":"CVE-2009-0036 libvirt: libvirt_proxy buffer overflow","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libvirt-0:0.3.3-14.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0036.json"},{"CVE":"CVE-2008-5086","severity":"moderate","public_date":"2008-12-17T00:00:00Z","advisories":["RHSA-2009:0382"],"bugzilla":"476560","bugzilla_description":"CVE-2008-5086 libvirt: missing checks for read-only connection","cvss_score":3.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:P","CWE":null,"affected_packages":["libvirt-0:0.3.3-14.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5086.json"},{"CVE":"CVE-2017-1000376","severity":"moderate","public_date":null,"advisories":[],"bugzilla":"1462164","bugzilla_description":"CVE-2017-1000376 libffi: Requests an executable stack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000376.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virtio-win_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virtio-win_security_api_results.json
new file mode 100644
index 0000000..e23c272
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/virtio-win_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-12247","severity":null,"public_date":"2019-01-07T00:00:00Z","advisories":[],"bugzilla":"1712834","bugzilla_description":"CVE-2019-12247 QEMU: qemu-guest-agent: integer overflow while running guest-exec command","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12247.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2018-12617","severity":"low","public_date":"2018-06-22T00:00:00Z","advisories":[],"bugzilla":"1594054","bugzilla_description":"CVE-2018-12617 Qemu: qemu-guest-agent: Integer overflow causes segmentation fault in qmp_guest_file_read()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"3.8"},{"CVE":"CVE-2015-3215","severity":"important","public_date":"2014-12-15T00:00:00Z","advisories":["RHSA-2015:1044","RHSA-2015:1043"],"bugzilla":"1227634","bugzilla_description":"CVE-2015-3215 virtio-win: netkvm: malformed packet can cause BSOD","cvss_score":6.1,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:C","CWE":"CWE-20","affected_packages":["virtio-win-0:1.7.4-1.el7","virtio-win-0:1.7.4-1.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3215.json"},{"CVE":"CVE-2013-2231","severity":"important","public_date":"2013-07-22T00:00:00Z","advisories":["RHSA-2013:1100","RHSA-2013:1101"],"bugzilla":"980757","bugzilla_description":"CVE-2013-2231 qemu: qemu-ga win32 service unquoted search path","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-428","affected_packages":["virtio-win-0:1.6.5-6.el6_4","qemu-kvm-2:0.12.1.2-2.355.el6_4.6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2231.json"},{"CVE":"CVE-2013-2007","severity":"moderate","public_date":"2013-05-06T00:00:00Z","advisories":["RHSA-2013:0896"],"bugzilla":"956082","bugzilla_description":"CVE-2013-2007 qemu: guest agent creates files with insecure permissions in deamon mode","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["qemu-kvm-2:0.12.1.2-2.355.el6_4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2007.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vm-dump-metrics-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vm-dump-metrics-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vm-dump-metrics-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vm-dump-metrics_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vm-dump-metrics_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vm-dump-metrics_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/voikko-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/voikko-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/voikko-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/volume_key-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/volume_key-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/volume_key-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/volume_key-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/volume_key-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/volume_key-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/volume_key_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/volume_key_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/volume_key_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vorbis-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vorbis-tools_security_api_results.json
new file mode 100644
index 0000000..acdccca
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vorbis-tools_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-11331","severity":"low","public_date":"2017-07-30T00:00:00Z","advisories":[],"bugzilla":"1480656","bugzilla_description":"CVE-2017-11331 vorbis-tools: Invalid memory allocation in wav_open function in oggenc/audio.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11331.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-6749","severity":"low","public_date":"2015-08-30T00:00:00Z","advisories":[],"bugzilla":"1258443","bugzilla_description":"CVE-2015-6749 vorbis-tools: invalid AIFF file causes alloca() buffer overflow","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6749.json"},{"CVE":"CVE-2014-9638","severity":"low","public_date":"2015-01-18T00:00:00Z","advisories":[],"bugzilla":"1184448","bugzilla_description":"CVE-2014-9638 vorbis-tools: division by zero on crafted WAV file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9638.json"},{"CVE":"CVE-2014-9639","severity":"low","public_date":"2015-01-18T00:00:00Z","advisories":[],"bugzilla":"1184449","bugzilla_description":"CVE-2014-9639 vorbis-tools: integer overflow on crafted WAV file","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9639.json"},{"CVE":"CVE-2014-9640","severity":"low","public_date":"2014-06-20T00:00:00Z","advisories":[],"bugzilla":"1185272","bugzilla_description":"CVE-2014-9640 vorbis-tools: segfault when trying to encode trivial raw input","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9640.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vsftpd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vsftpd_security_api_results.json
new file mode 100644
index 0000000..c51f3e1
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vsftpd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-1419","severity":null,"public_date":"2015-01-19T00:00:00Z","advisories":[],"bugzilla":"1187041","bugzilla_description":"CVE-2015-1419 vsftpd: access restrictions bypass","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1419.json"},{"CVE":"CVE-2011-2523","severity":"important","public_date":"2011-07-04T00:00:00Z","advisories":[],"bugzilla":"1778781","bugzilla_description":"CVE-2011-2523 vsftpd: backdoor which opens a shell on port 6200/tcp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2011-0762","severity":"important","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0337"],"bugzilla":"681667","bugzilla_description":"CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["vsftpd-0:2.0.1-9.el4","vsftpd-0:2.0.5-16.el5_6.1","vsftpd-0:2.2.2-6.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0762.json"},{"CVE":"CVE-2007-5962","severity":"low","public_date":"2008-05-21T00:00:00Z","advisories":["RHSA-2008:0295"],"bugzilla":"397011","bugzilla_description":"CVE-2007-5962 vsftpd: memory leak when deny_file option is set","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["vsftpd-0:2.0.5-12.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5962.json"},{"CVE":"CVE-2008-2375","severity":"moderate","public_date":"2006-06-28T00:00:00Z","advisories":["RHSA-2008:0680","RHSA-2008:0579"],"bugzilla":"453376","bugzilla_description":"CVE-2008-2375 older vsftpd authentication memory leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-401","affected_packages":["vsftpd-0:2.0.1-6.el4","vsftpd-0:1.2.1-3E.16"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2375.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vte-profile_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vte-profile_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vte-profile_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vte291-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vte291-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vte291-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vte291_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vte291_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vte291_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-headers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-headers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-headers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-loader-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-loader-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-loader-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-loader_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-loader_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-loader_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-validation-layers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-validation-layers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/vulkan-validation-layers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/watchdog_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/watchdog_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/watchdog_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wavpack-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wavpack-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wavpack-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wavpack_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wavpack_security_api_results.json
new file mode 100644
index 0000000..f0b0ffa
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wavpack_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-1010319","severity":"low","public_date":"2019-08-06T00:00:00Z","advisories":["RHSA-2020:1581"],"bugzilla":"1737740","bugzilla_description":"CVE-2019-1010319 wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665->CWE-369","affected_packages":["wavpack-0:5.1.0-15.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010319.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.5"},{"CVE":"CVE-2019-1010317","severity":"low","public_date":"2019-08-06T00:00:00Z","advisories":["RHSA-2020:1581"],"bugzilla":"1737747","bugzilla_description":"CVE-2019-1010317 wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-665","affected_packages":["wavpack-0:5.1.0-15.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010317.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2019-1010315","severity":"low","public_date":"2019-07-12T00:00:00Z","advisories":["RHSA-2020:1581"],"bugzilla":"1729418","bugzilla_description":"CVE-2019-1010315 wavpack: Divide by zero in ParseDsdiffHeaderConfig leads to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":["wavpack-0:5.1.0-15.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010315.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2019-11498","severity":"low","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2020:1581"],"bugzilla":"1704633","bugzilla_description":"CVE-2019-11498 wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":["wavpack-0:5.1.0-15.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11498.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-19841","severity":"low","public_date":"2018-11-29T00:00:00Z","advisories":["RHSA-2020:1581"],"bugzilla":"1661449","bugzilla_description":"CVE-2018-19841 wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["wavpack-0:5.1.0-15.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19840","severity":"low","public_date":"2018-11-26T00:00:00Z","advisories":["RHSA-2020:1581"],"bugzilla":"1661448","bugzilla_description":"CVE-2018-19840 wawpack: Infinite loop in WavpackPackInit function lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["wavpack-0:5.1.0-15.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-10536","severity":"moderate","public_date":"2018-04-22T00:00:00Z","advisories":[],"bugzilla":"1574719","bugzilla_description":"CVE-2018-10536 wavpack: out of bounds write in ParseRiffHeaderConfig in riff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10536.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-10537","severity":"moderate","public_date":"2018-04-22T00:00:00Z","advisories":[],"bugzilla":"1574726","bugzilla_description":"CVE-2018-10537 wavpack: out of bounds write in ParseWave64HeaderConfig in wave64.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10537.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-10538","severity":"moderate","public_date":"2018-04-22T00:00:00Z","advisories":[],"bugzilla":"1574728","bugzilla_description":"CVE-2018-10538 wavpack: out of bounds write in ParseRiffHeaderConfig in riff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10538.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-10539","severity":"moderate","public_date":"2018-04-22T00:00:00Z","advisories":[],"bugzilla":"1574729","bugzilla_description":"CVE-2018-10539 wavpack: out of bounds write in ParseDsdiffHeaderConfig in dsdiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10539.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-10540","severity":"moderate","public_date":"2018-04-22T00:00:00Z","advisories":[],"bugzilla":"1574731","bugzilla_description":"CVE-2018-10540 wavpack: out of bounds write in ParseWave64HeaderConfig in wave64.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10540.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-7253","severity":"low","public_date":"2018-02-19T00:00:00Z","advisories":[],"bugzilla":"1547719","bugzilla_description":"CVE-2018-7253 wavpack: Heap-based buffer over-read in ParseDsdiffHeaderConfig function in cli/dsdiff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7253.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7254","severity":"low","public_date":"2018-02-19T00:00:00Z","advisories":[],"bugzilla":"1547735","bugzilla_description":"CVE-2018-7254 wavpack: Global buffer over-read in ParseCaffHeaderConfig function in cli/caff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7254.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6767","severity":"low","public_date":"2018-02-03T00:00:00Z","advisories":[],"bugzilla":"1542550","bugzilla_description":"CVE-2018-6767 wavpack: stack buffer overread via crafted wav file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6767.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-10170","severity":"moderate","public_date":"2016-12-20T00:00:00Z","advisories":[],"bugzilla":"1417851","bugzilla_description":"CVE-2016-10170 wavpack: Heap out of bounds read in WriteCaffHeader / caff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10170.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-10171","severity":"moderate","public_date":"2016-12-20T00:00:00Z","advisories":[],"bugzilla":"1417852","bugzilla_description":"CVE-2016-10171 wavpack: Heap out of bounds read in unreorder_channels / wvunpack.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10171.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-10172","severity":"moderate","public_date":"2016-12-20T00:00:00Z","advisories":[],"bugzilla":"1417853","bugzilla_description":"CVE-2016-10172 wavpack: Heap out of bounds read in read_new_config_info / open_utils.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10172.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-10169","severity":"moderate","public_date":"2016-12-18T00:00:00Z","advisories":[],"bugzilla":"1417850","bugzilla_description":"CVE-2016-10169 wavpack: Global buffer overread in read_code / read_words.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10169.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"4.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wayland-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wayland-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wayland-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wayland-protocols-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wayland-protocols-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wayland-protocols-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/web-assets-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/web-assets-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/web-assets-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/web-assets-filesystem_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/web-assets-filesystem_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/web-assets-filesystem_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-jsc-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-jsc-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-jsc-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-jsc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-jsc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-jsc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-plugin-process-gtk2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-plugin-process-gtk2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3-plugin-process-gtk2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3_security_api_results.json
new file mode 100644
index 0000000..25992c6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webkit2gtk3_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-9862","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879532","bugzilla_description":"CVE-2020-9862 webkitgtk: Command injection in web inspector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9862.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2020-9893","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879535","bugzilla_description":"CVE-2020-9893 webkitgtk: Use-after-free may lead to application termination or arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119->CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9893.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9894","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879536","bugzilla_description":"CVE-2020-9894 webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9894.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-9895","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879538","bugzilla_description":"CVE-2020-9895 webkitgtk: Use-after-free may lead to application termination or arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9895.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-9915","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879540","bugzilla_description":"CVE-2020-9915 webkitgtk: Access issue in content security policy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9915.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2020-9925","severity":"moderate","public_date":"2020-07-29T00:00:00Z","advisories":[],"bugzilla":"1879541","bugzilla_description":"CVE-2020-9925 webkitgtk: A logic issue may lead to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841->CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9925.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-9802","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879545","bugzilla_description":"CVE-2020-9802 webkitgtk: Logic issue may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9802.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9803","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879557","bugzilla_description":"CVE-2020-9803 webkitgtk: Memory corruption may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9803.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9805","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879559","bugzilla_description":"CVE-2020-9805 webkitgtk: Logic issue may lead to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841->CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9805.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-9806","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879563","bugzilla_description":"CVE-2020-9806 webkitgtk: Memory corruption may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9806.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9807","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879564","bugzilla_description":"CVE-2020-9807 webkitgtk: Memory corruption may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9807.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-9843","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879566","bugzilla_description":"CVE-2020-9843 webkitgtk: Input validation issue may lead to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9843.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2020-9850","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879568","bugzilla_description":"CVE-2020-9850 webkitgtk: Logic issue may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9850.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2020-13753","severity":"moderate","public_date":"2020-07-10T00:00:00Z","advisories":[],"bugzilla":"1879570","bugzilla_description":"CVE-2020-13753 webkitgtk: Improper access management to CLONE_NEWUSER and the TIOCSTI ioctl","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284->CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13753.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"10.0"},{"CVE":"CVE-2020-3885","severity":"low","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876462","bugzilla_description":"CVE-2020-3885 webkitgtk: Incorrect processing of file URLs","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3885.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-3894","severity":"low","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876463","bugzilla_description":"CVE-2020-3894 webkitgtk: Race condition allows reading of restricted memory","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3894.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2020-3895","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876465","bugzilla_description":"CVE-2020-3895 webkitgtk: Memory corruption triggered by a malicious web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3895.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3897","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876468","bugzilla_description":"CVE-2020-3897 webkitgtk: Type confusion leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3897.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3899","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876470","bugzilla_description":"CVE-2020-3899 webkitgtk: Memory consumption issue leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3899.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3900","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876472","bugzilla_description":"CVE-2020-3900 webkitgtk: Memory corruption  triggered by a malicious web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3900.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3901","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876473","bugzilla_description":"CVE-2020-3901 webkitgtk: Type confusion leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3901.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3902","severity":"moderate","public_date":"2020-04-27T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876476","bugzilla_description":"CVE-2020-3902 webkitgtk: Input validation issue leading to cross-site script attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3902.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11793","severity":"moderate","public_date":"2020-04-16T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1829369","bugzilla_description":"CVE-2020-11793 webkitgtk: use-after-free via crafted web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11793.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-10018","severity":"moderate","public_date":"2020-03-02T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1811721","bugzilla_description":"CVE-2020-10018 webkitgtk: Use-after-free issue in accessibility/AXObjectCache.cpp","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10018.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-3862","severity":"low","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876516","bugzilla_description":"CVE-2020-3862 webkitgtk: Denial of service via incorrect memory handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3862.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2020-3864","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876518","bugzilla_description":"CVE-2020-3864 webkitgtk: Non-unique security origin for DOM object contexts","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3864.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2020-3865","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876521","bugzilla_description":"CVE-2020-3865 webkitgtk: Incorrect security check for a top-level DOM object context","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3865.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2020-3867","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876522","bugzilla_description":"CVE-2020-3867 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3867.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-3868","severity":"moderate","public_date":"2020-02-14T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876523","bugzilla_description":"CVE-2020-3868 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-3868.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8846","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1816678","bugzilla_description":"CVE-2019-8846 webkitgtk: Use after free issue may lead to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8846.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-8835","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1816684","bugzilla_description":"CVE-2019-8835 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8835.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-8844","severity":"moderate","public_date":"2020-01-23T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1816686","bugzilla_description":"CVE-2019-8844 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8844.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-4761","severity":"moderate","public_date":"2020-01-22T00:00:00Z","advisories":[],"bugzilla":"1800137","bugzilla_description":"CVE-2016-4761 webkitgtk: use-after-free leads to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4761.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8710","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876536","bugzilla_description":"CVE-2019-8710 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8710.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8743","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876537","bugzilla_description":"CVE-2019-8743 webkitgtk: Multiple memory corruption  issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8743.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8764","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876540","bugzilla_description":"CVE-2019-8764 webkitgtk: Incorrect state  management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8764.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8765","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876542","bugzilla_description":"CVE-2019-8765 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8765.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8766","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876543","bugzilla_description":"CVE-2019-8766 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8766.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8782","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876545","bugzilla_description":"CVE-2019-8782 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8783","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876548","bugzilla_description":"CVE-2019-8783 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8783.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8808","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876549","bugzilla_description":"CVE-2019-8808 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8808.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8811","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876550","bugzilla_description":"CVE-2019-8811 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8811.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8812","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876552","bugzilla_description":"CVE-2019-8812 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8812.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8813","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876553","bugzilla_description":"CVE-2019-8813 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8813.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8814","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876554","bugzilla_description":"CVE-2019-8814 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8814.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8815","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876555","bugzilla_description":"CVE-2019-8815 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8815.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8816","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876556","bugzilla_description":"CVE-2019-8816 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8816.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8819","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876590","bugzilla_description":"CVE-2019-8819 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8819.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8820","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876591","bugzilla_description":"CVE-2019-8820 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8820.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8821","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876592","bugzilla_description":"CVE-2019-8821 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8821.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8822","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876593","bugzilla_description":"CVE-2019-8822 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8822.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8823","severity":"moderate","public_date":"2019-11-08T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876594","bugzilla_description":"CVE-2019-8823 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8823.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8625","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876607","bugzilla_description":"CVE-2019-8625 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8625.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8674","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876608","bugzilla_description":"CVE-2019-8674 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8674.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8707","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876609","bugzilla_description":"CVE-2019-8707 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8707.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8719","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876610","bugzilla_description":"CVE-2019-8719 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8719.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8720","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876611","bugzilla_description":"CVE-2019-8720 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8720.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8726","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876612","bugzilla_description":"CVE-2019-8726 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8726.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8733","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876613","bugzilla_description":"CVE-2019-8733 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8733.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8735","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876614","bugzilla_description":"CVE-2019-8735 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8735.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8763","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876615","bugzilla_description":"CVE-2019-8763 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8763.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8768","severity":"low","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876616","bugzilla_description":"CVE-2019-8768 webkitgtk: Browsing history could not be deleted","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8768.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-8769","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876617","bugzilla_description":"CVE-2019-8769 webkitgtk: Websites could reveal browsing history","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8769.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-8771","severity":"moderate","public_date":"2019-10-29T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1876619","bugzilla_description":"CVE-2019-8771 webkitgtk: Violation of iframe sandboxing policy","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8771.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2019-8644","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876626","bugzilla_description":"CVE-2019-8644 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8644.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8649","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876628","bugzilla_description":"CVE-2019-8649 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8649.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8658","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876629","bugzilla_description":"CVE-2019-8658 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8658.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-8666","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876630","bugzilla_description":"CVE-2019-8666 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8666.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8669","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876631","bugzilla_description":"CVE-2019-8669 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8669.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8671","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876632","bugzilla_description":"CVE-2019-8671 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8671.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8672","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876634","bugzilla_description":"CVE-2019-8672 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8672.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8673","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876643","bugzilla_description":"CVE-2019-8673 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8673.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8676","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876644","bugzilla_description":"CVE-2019-8676 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8676.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8677","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876645","bugzilla_description":"CVE-2019-8677 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8677.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8678","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876646","bugzilla_description":"CVE-2019-8678 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8678.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8679","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876647","bugzilla_description":"CVE-2019-8679 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8679.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8680","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876648","bugzilla_description":"CVE-2019-8680 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8680.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8681","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876650","bugzilla_description":"CVE-2019-8681 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8681.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8683","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876651","bugzilla_description":"CVE-2019-8683 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8683.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8684","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876652","bugzilla_description":"CVE-2019-8684 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8684.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8686","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876653","bugzilla_description":"CVE-2019-8686 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8686.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8687","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876655","bugzilla_description":"CVE-2019-8687 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8687.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8688","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHEA-2019:4262"],"bugzilla":"1876656","bugzilla_description":"CVE-2019-8688 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.4-2.el8_1","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8688.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8689","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876657","bugzilla_description":"CVE-2019-8689 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8689.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8690","severity":"moderate","public_date":"2019-08-29T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876664","bugzilla_description":"CVE-2019-8690 webkitgtk: Incorrect state management leading to universal cross-site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8690.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-6237","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876880","bugzilla_description":"CVE-2019-6237 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6237.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8571","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876881","bugzilla_description":"CVE-2019-8571 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8571.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8583","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876882","bugzilla_description":"CVE-2019-8583 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8583.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8584","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876883","bugzilla_description":"CVE-2019-8584 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8584.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8586","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876884","bugzilla_description":"CVE-2019-8586 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8587","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876887","bugzilla_description":"CVE-2019-8587 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8587.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8594","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876891","bugzilla_description":"CVE-2019-8594 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8594.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8595","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876892","bugzilla_description":"CVE-2019-8595 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8595.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8596","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876893","bugzilla_description":"CVE-2019-8596 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8596.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8597","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876894","bugzilla_description":"CVE-2019-8597 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8597.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8601","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876895","bugzilla_description":"CVE-2019-8601 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8601.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8607","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876897","bugzilla_description":"CVE-2019-8607 webkitgtk: Out-of-bounds read leading to memory disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8607.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-8608","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876898","bugzilla_description":"CVE-2019-8608 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8608.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8609","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876899","bugzilla_description":"CVE-2019-8609 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8609.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8610","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1876900","bugzilla_description":"CVE-2019-8610 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8610.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8615","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877045","bugzilla_description":"CVE-2019-8615 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8615.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8611","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877046","bugzilla_description":"CVE-2019-8611 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8611.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8619","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877047","bugzilla_description":"CVE-2019-8619 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8619.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8622","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877048","bugzilla_description":"CVE-2019-8622 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8622.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-8623","severity":"moderate","public_date":"2019-05-20T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1877049","bugzilla_description":"CVE-2019-8623 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8623.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2019-11070","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1709289","bugzilla_description":"CVE-2019-11070 webkitgtk: HTTP proxy setting deanonymization information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11070.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-7285","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1718725","bugzilla_description":"CVE-2019-7285 webkitgtk: crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7285.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-7292","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1719131","bugzilla_description":"CVE-2019-7292 webkitgtk: arbitrary code execution via malicious web content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7292.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8503","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1719147","bugzilla_description":"CVE-2019-8503 webkitgtk: logic issue leads to code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8503.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8506","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719199","bugzilla_description":"CVE-2019-8506 webkitgtk: malicous web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8515","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1719204","bugzilla_description":"CVE-2019-8515 webkitgtk: malicious crafted web content leads to information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8515.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-8518","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719206","bugzilla_description":"CVE-2019-8518 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8518.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8523","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719208","bugzilla_description":"CVE-2019-8523 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8523.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8524","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719209","bugzilla_description":"CVE-2019-8524 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8524.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8535","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719210","bugzilla_description":"CVE-2019-8535 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8535.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8536","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719213","bugzilla_description":"CVE-2019-8536 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8536.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8544","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719224","bugzilla_description":"CVE-2019-8544 webkitgtk: malicious crafted web content leads to arbitrary we content","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8558","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719231","bugzilla_description":"CVE-2019-8558 webkitgtk: malicious crafted web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8558.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8559","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719235","bugzilla_description":"CVE-2019-8559 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8559.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8563","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1719237","bugzilla_description":"CVE-2019-8563 webkitgtk: malicious web content leads to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-94","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8563.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2019-8551","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":["RHSA-2020:4035"],"bugzilla":"1719238","bugzilla_description":"CVE-2019-8551 webkitgtk: malicious web content leads to cross site scripting","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8551.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-6251","severity":"moderate","public_date":"2018-09-11T00:00:00Z","advisories":["RHSA-2020:4035","RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1667409","bugzilla_description":"CVE-2019-6251 webkitgtk: processing maliciously crafted web content lead to URI spoofing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["webkit2gtk3-0:2.24.3-1.el8","redhat-coreos-42.81.20191107.0","webkitgtk4-0:2.28.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6251.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2018-11713","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588739","bugzilla_description":"CVE-2018-11713 webkitgtk: WebSockets don't use system proxy settings","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11713.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2018-11712","severity":"moderate","public_date":"2018-06-07T00:00:00Z","advisories":[],"bugzilla":"1588742","bugzilla_description":"CVE-2018-11712 webkitgtk: Improper TLS certificate verification for WebSocket connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11712.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webrtc-audio-processing_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webrtc-audio-processing_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/webrtc-audio-processing_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/weld-parent_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/weld-parent_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/weld-parent_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wget_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wget_security_api_results.json
new file mode 100644
index 0000000..541dd31
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wget_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-5953","severity":"important","public_date":"2019-04-03T00:00:00Z","advisories":["RHSA-2019:0983","RHSA-2019:3168","RHSA-2019:2979","RHSA-2019:1228"],"bugzilla":"1695679","bugzilla_description":"CVE-2019-5953 wget: do_conversion() heap-based buffer overflow vulnerability","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["wget-0:1.19.5-7.el8_0.1","wget-0:1.14-18.el7_6.1","wget-0:1.14-15.el7_4.2","wget-0:1.14-16.el7_5.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5953.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-20483","severity":"moderate","public_date":"2018-12-26T00:00:00Z","advisories":["RHSA-2019:3701","RHBA-2019:3303"],"bugzilla":"1662705","bugzilla_description":"CVE-2018-20483 wget: Information exposure in set_file_metadata function in xattr.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["curl-0:7.61.1-11.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20483.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-0494","severity":"moderate","public_date":"2018-05-06T00:00:00Z","advisories":["RHSA-2018:3052"],"bugzilla":"1575634","bugzilla_description":"CVE-2018-0494 wget: Cookie injection allows malicious website to write arbitrary cookie entries into cookie jar","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["wget-0:1.14-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0494.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2017-13089","severity":"important","public_date":"2017-10-26T15:00:00Z","advisories":["RHSA-2017:3075"],"bugzilla":"1505444","bugzilla_description":"CVE-2017-13089 wget: Stack-based buffer overflow in HTTP protocol handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["wget-0:1.14-15.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13089.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-13090","severity":"important","public_date":"2017-10-26T15:00:00Z","advisories":["RHSA-2017:3075"],"bugzilla":"1505445","bugzilla_description":"CVE-2017-13090 wget: Heap-based buffer overflow in HTTP protocol handling","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["wget-0:1.14-15.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13090.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2017-6508","severity":"low","public_date":"2017-03-07T00:00:00Z","advisories":[],"bugzilla":"1429984","bugzilla_description":"CVE-2017-6508 wget: CRLF injection in the url_parse function in url.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2016-7098","severity":null,"public_date":"2016-08-11T00:00:00Z","advisories":[],"bugzilla":"1328137","bugzilla_description":"CVE-2016-7098 wget: files rejected by access list are kept on the disk for the duration of HTTP connection","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7098.json"},{"CVE":"CVE-2016-4971","severity":"moderate","public_date":"2016-06-09T00:00:00Z","advisories":["RHSA-2016:2587"],"bugzilla":"1343666","bugzilla_description":"CVE-2016-4971 wget: Lack of filename checking allows arbitrary file upload via FTP redirect","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-73","affected_packages":["wget-0:1.14-13.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4971.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2014-4877","severity":"moderate","public_date":"2014-10-27T00:00:00Z","advisories":["RHSA-2014:1764","RHSA-2014:1955"],"bugzilla":"1139181","bugzilla_description":"CVE-2014-4877 wget: FTP symlink arbitrary filesystem access","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-59","affected_packages":["wget-0:1.12-1.12.el6_5","wget-0:1.12-5.el6_6.1","wget-0:1.14-10.el7_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4877.json"},{"CVE":"CVE-2010-2252","severity":"low","public_date":"2010-05-17T00:00:00Z","advisories":["RHSA-2014:0151"],"bugzilla":"602797","bugzilla_description":"CVE-2010-2252 wget: multiple HTTP client download filename vulnerability [OCERT 2010-001]","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["wget-0:1.12-1.11.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2252.json"},{"CVE":"CVE-2009-3490","severity":"moderate","public_date":"2009-08-12T00:00:00Z","advisories":["RHSA-2009:1549"],"bugzilla":"520454","bugzilla_description":"CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["wget-0:1.10.2-0.30E.1","wget-0:1.10.2-1.el4_8.1","wget-0:1.11.4-2.el5_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3490.json"},{"CVE":"CVE-2005-3185","severity":"important","public_date":"2005-10-12T00:00:00Z","advisories":["RHSA-2005:807","RHSA-2005:812"],"bugzilla":"1617794","bugzilla_description":"CVE-2005-3185 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["curl-0:7.10.6-7.rhel3","wget-0:1.10.2-0.40E","wget-0:1.10.2-0.30E","curl-0:7.12.1-6.rhel4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3185.json"},{"CVE":"CVE-2004-1487","severity":"low","public_date":"2004-12-10T00:00:00Z","advisories":["RHSA-2005:771"],"bugzilla":"1617413","bugzilla_description":"CVE-2004-1487 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wget-0:1.10.1-2.4E.1","wget-0:1.10.1-1.30E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1487.json"},{"CVE":"CVE-2004-1488","severity":"low","public_date":"2004-12-10T00:00:00Z","advisories":["RHSA-2005:771"],"bugzilla":"1617414","bugzilla_description":"CVE-2004-1488 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wget-0:1.10.1-2.4E.1","wget-0:1.10.1-1.30E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1488.json"},{"CVE":"CVE-2004-2014","severity":"low","public_date":"2004-05-16T00:00:00Z","advisories":["RHSA-2005:771"],"bugzilla":"1617420","bugzilla_description":"CVE-2004-2014 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wget-0:1.10.1-2.4E.1","wget-0:1.10.1-1.30E.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-2014.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/which_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/which_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/which_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/whois-nls_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/whois-nls_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/whois-nls_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/whois_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/whois_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/whois_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wireshark-cli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wireshark-cli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wireshark-cli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wireshark-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wireshark-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wireshark-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wireshark_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wireshark_security_api_results.json
new file mode 100644
index 0000000..a999e51
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wireshark_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-26575","severity":"moderate","public_date":"2020-10-06T00:00:00Z","advisories":[],"bugzilla":"1886047","bugzilla_description":"CVE-2020-26575 wireshark: FBZERO dissector could enter an infinite loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26575.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-25862","severity":"moderate","public_date":"2020-09-23T00:00:00Z","advisories":[],"bugzilla":"1886041","bugzilla_description":"CVE-2020-25862 wireshark: TCP dissector crash (wnpa-sec-2020-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25862.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-25863","severity":"moderate","public_date":"2020-09-23T00:00:00Z","advisories":[],"bugzilla":"1886044","bugzilla_description":"CVE-2020-25863 wireshark: MIME multipart dissector crash (wnpa-sec-2020-11)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25863.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-25866","severity":"moderate","public_date":"2020-09-23T00:00:00Z","advisories":[],"bugzilla":"1886051","bugzilla_description":"CVE-2020-25866 wireshark: BLIP dissector crash (wnpa-sec-2020-13)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25866.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-17498","severity":"moderate","public_date":"2020-08-12T00:00:00Z","advisories":[],"bugzilla":"1868885","bugzilla_description":"CVE-2020-17498 wireshark: Kafka protocol dissector could crash (wnpa-sec-2020-10)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-17498.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15466","severity":"moderate","public_date":"2020-07-05T00:00:00Z","advisories":[],"bugzilla":"1854882","bugzilla_description":"CVE-2020-15466 wireshark: GVCP dissector infinite loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15466.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-13164","severity":"moderate","public_date":"2020-04-02T00:00:00Z","advisories":[],"bugzilla":"1839874","bugzilla_description":"CVE-2020-13164 wireshark: NFS dissector crash (wnpa-sec-2020-08)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13164.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-11647","severity":"moderate","public_date":"2020-04-01T00:00:00Z","advisories":[],"bugzilla":"1824157","bugzilla_description":"CVE-2020-11647 wireshark: BACapp dissector crash (wnpa-sec-2020-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-121|CWE-674)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11647.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9429","severity":"moderate","public_date":"2020-02-28T00:00:00Z","advisories":[],"bugzilla":"1828780","bugzilla_description":"CVE-2020-9429 wireshark: WireGuard dissector could crash due to NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9429.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9431","severity":"low","public_date":"2020-02-26T00:00:00Z","advisories":[],"bugzilla":"1814586","bugzilla_description":"CVE-2020-9431 wireshark: LTE RRC dissector memory leak could result in excessive memory resource consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9431.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9430","severity":"moderate","public_date":"2020-02-26T00:00:00Z","advisories":[],"bugzilla":"1814615","bugzilla_description":"CVE-2020-9430 wireshark: injecting a malformed packet may cause WiMax DLMAP dissector to crash due to out-of-bound read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9430.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-9428","severity":"moderate","public_date":"2020-02-26T00:00:00Z","advisories":[],"bugzilla":"1814622","bugzilla_description":"CVE-2020-9428 wireshark: injecting a malformed packet may cause the EAP dissector to crash due to out-of-bounds read","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9428.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7044","severity":"moderate","public_date":"2020-01-15T00:00:00Z","advisories":[],"bugzilla":"1796459","bugzilla_description":"CVE-2020-7044 wireshark: WASSP dissector crash (wnpa-sec-2020-01)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7044.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-7045","severity":"moderate","public_date":"2020-01-15T00:00:00Z","advisories":[],"bugzilla":"1798671","bugzilla_description":"CVE-2020-7045 wireshark: invalid memory access in BT ATT dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7045.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-16319","severity":"moderate","public_date":"2019-08-25T00:00:00Z","advisories":[],"bugzilla":"1775149","bugzilla_description":"CVE-2019-16319 wireshark: gryphon dissector infinite loop (wnpa-sec-2019-21)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16319.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-19553","severity":"moderate","public_date":"2019-08-02T00:00:00Z","advisories":[],"bugzilla":"1782988","bugzilla_description":"CVE-2019-19553 wireshark: CMS dissector crash (wnpa-sec-2019-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-13619","severity":"moderate","public_date":"2019-07-17T00:00:00Z","advisories":[],"bugzilla":"1731022","bugzilla_description":"CVE-2019-13619 wireshark: ASN.1 BER dissector crash (wnpa-sec-2019-20)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13619.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-12295","severity":"moderate","public_date":"2019-05-21T00:00:00Z","advisories":[],"bugzilla":"1831675","bugzilla_description":"CVE-2019-12295 wireshark: missing dissection recursion checks leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12295.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10901","severity":"moderate","public_date":"2019-03-19T00:00:00Z","advisories":[],"bugzilla":"1697938","bugzilla_description":"CVE-2019-10901 wireshark: LDSS dissector crash (wnpa-sec-2019-17)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10901.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10902","severity":"moderate","public_date":"2019-03-19T00:00:00Z","advisories":[],"bugzilla":"1697942","bugzilla_description":"CVE-2019-10902 wireshark: TSDNS dissector crash (wnpa-sec-2019-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10902.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10896","severity":"moderate","public_date":"2019-03-18T00:00:00Z","advisories":[],"bugzilla":"1697944","bugzilla_description":"CVE-2019-10896 wireshark: DOF dissector crash (wnpa-sec-2019-15)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10896.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10894","severity":"moderate","public_date":"2019-03-18T00:00:00Z","advisories":[],"bugzilla":"1697947","bugzilla_description":"CVE-2019-10894 wireshark: GSS-API dissector crash (wnpa-sec-2019-14)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10894.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10900","severity":"moderate","public_date":"2019-03-18T00:00:00Z","advisories":[],"bugzilla":"1697952","bugzilla_description":"CVE-2019-10900 wireshark: Rbm dissector infinite loop (wnpa-sec-2019-13)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10900.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10898","severity":"moderate","public_date":"2019-03-10T00:00:00Z","advisories":[],"bugzilla":"1697955","bugzilla_description":"CVE-2019-10898 wireshark: GSUP dissector infinite loop (wnpa-sec-2019-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10898.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10903","severity":"moderate","public_date":"2019-03-05T00:00:00Z","advisories":[],"bugzilla":"1697898","bugzilla_description":"CVE-2019-10903 wireshark: DCERPC SPOOLSS dissector crash (wnpa-sec-2019-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10903.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-10897","severity":"moderate","public_date":"2019-03-04T00:00:00Z","advisories":[],"bugzilla":"1697961","bugzilla_description":"CVE-2019-10897 wireshark: IEEE 802.11 dissector infinite loop (wnpa-sec-2019-11 )","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10897.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.5"},{"CVE":"CVE-2019-10899","severity":"moderate","public_date":"2019-03-01T00:00:00Z","advisories":[],"bugzilla":"1697979","bugzilla_description":"CVE-2019-10899 wireshark: SRVLOC dissector crash (wnpa-sec-2019-10)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10899.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9214","severity":"moderate","public_date":"2019-02-27T00:00:00Z","advisories":[],"bugzilla":"1684115","bugzilla_description":"CVE-2019-9214 wireshark: null-deference read in RPCAP dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9214.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10895","severity":"moderate","public_date":"2019-02-13T00:00:00Z","advisories":[],"bugzilla":"1697982","bugzilla_description":"CVE-2019-10895 wireshark: NetScaler file parser crash (wnpa-sec-2019-09)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10895.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9208","severity":"moderate","public_date":"2019-01-29T00:00:00Z","advisories":[],"bugzilla":"1685001","bugzilla_description":"CVE-2019-9208 wireshark: null-pointer dereference in TCAP dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9208.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9209","severity":"low","public_date":"2019-01-25T00:00:00Z","advisories":[],"bugzilla":"1685009","bugzilla_description":"CVE-2019-9209 wireshark: Stack-based off-by-one buffer overflow in dissect_ber_GeneralizedTime","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9209.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-5721","severity":"moderate","public_date":"2019-01-08T00:00:00Z","advisories":[],"bugzilla":"1666277","bugzilla_description":"CVE-2019-5721 wireshark: use-after-free in ENIP dissector results in denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5721.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-5716","severity":"low","public_date":"2019-01-08T00:00:00Z","advisories":[],"bugzilla":"1667579","bugzilla_description":"CVE-2019-5716 wireshark: reachable assertion in fast_ensure_contiguous() from 6LoWPAN dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-617","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5716.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-5717","severity":"low","public_date":"2019-01-08T00:00:00Z","advisories":[],"bugzilla":"1667581","bugzilla_description":"CVE-2019-5717 wireshark: P_MUL dissector crash in epan/dissectors/packet-p_mul.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5717.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-5718","severity":"low","public_date":"2019-01-08T00:00:00Z","advisories":[],"bugzilla":"1667586","bugzilla_description":"CVE-2019-5718 wireshark: out-of-bounds read in get_t61_string() in epan/charsets.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5718.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.5"},{"CVE":"CVE-2019-5719","severity":"low","public_date":"2019-01-08T00:00:00Z","advisories":[],"bugzilla":"1667592","bugzilla_description":"CVE-2019-5719 wireshark: ISAKMP dissector crash in epan/dissectors/packet-isakmp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5719.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-19622","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2020:1047"],"bugzilla":"1655932","bugzilla_description":"CVE-2018-19622 wireshark: Infinite loop in the MMSE dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["wireshark-0:1.10.14-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19622.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-19623","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1655933","bugzilla_description":"CVE-2018-19623 wireshark: Heap buffer overflow in packet-lbmpdm.c:dissect_segment_ofstable() allows denial of service or possibly arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19623.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-19624","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1655934","bugzilla_description":"CVE-2018-19624 wireshark: NULL pointer dereference resulting in a PVFS dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19624.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-19625","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1655935","bugzilla_description":"CVE-2018-19625 wireshark: Heap-based buffer over-read in the dissection engine","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19625.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-19626","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1655936","bugzilla_description":"CVE-2018-19626 wireshark: DCOM dissector crash resulting in information leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19626.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-19627","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1655940","bugzilla_description":"CVE-2018-19627 wireshark: IxVeriWave parser crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19627.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.1"},{"CVE":"CVE-2018-19628","severity":"low","public_date":"2018-11-27T00:00:00Z","advisories":[],"bugzilla":"1655941","bugzilla_description":"CVE-2018-19628 wireshark: ZigBee ZCL dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-369","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19628.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-18227","severity":"moderate","public_date":"2018-10-10T00:00:00Z","advisories":[],"bugzilla":"1642909","bugzilla_description":"CVE-2018-18227 wireshark: MS-WSP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18227.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-18226","severity":"moderate","public_date":"2018-10-10T00:00:00Z","advisories":[],"bugzilla":"1642910","bugzilla_description":"CVE-2018-18226 wireshark: Steam IHS Discovery dissector memory leak","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18226.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-18225","severity":"moderate","public_date":"2018-10-10T00:00:00Z","advisories":[],"bugzilla":"1642913","bugzilla_description":"CVE-2018-18225 wireshark: CoAP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18225.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-12086","severity":"moderate","public_date":"2018-10-10T00:00:00Z","advisories":[],"bugzilla":"1642915","bugzilla_description":"CVE-2018-12086 wireshark: OpcUa dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12086.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-16058","severity":"moderate","public_date":"2018-08-29T00:00:00Z","advisories":[],"bugzilla":"1625921","bugzilla_description":"CVE-2018-16058 wireshark: Bluetooth AVDTP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16058.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-16056","severity":"moderate","public_date":"2018-08-29T00:00:00Z","advisories":[],"bugzilla":"1625922","bugzilla_description":"CVE-2018-16056 wireshark: Bluetooth Attribute Protocol dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16056.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-16057","severity":"low","public_date":"2018-08-29T00:00:00Z","advisories":["RHSA-2020:1047"],"bugzilla":"1625925","bugzilla_description":"CVE-2018-16057 wireshark: Radiotap dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["wireshark-0:1.10.14-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16057.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2018-14342","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1607321","bugzilla_description":"CVE-2018-14342 wireshark: BGP dissector large loop (wnpa-sec-2018-34)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14342.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14344","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1607322","bugzilla_description":"CVE-2018-14344 wireshark: ISMP dissector crash (wnpa-sec-2018-35)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14344.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14340","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2020:1047"],"bugzilla":"1607323","bugzilla_description":"CVE-2018-14340 wireshark: Multiple dissectors could crash (wnpa-sec-2018-36)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["wireshark-0:1.10.14-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14340.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14343","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1607324","bugzilla_description":"CVE-2018-14343 wireshark: ASN.1 BER and related dissectors crash (wnpa-sec-2018-37)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14343.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14339","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1607325","bugzilla_description":"CVE-2018-14339 wireshark: MMSE dissector infinite loop (wnpa-sec-2018-38)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14339.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14341","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2020:1047"],"bugzilla":"1607326","bugzilla_description":"CVE-2018-14341 wireshark: DICOM dissector infinite loop (wnpa-sec-2018-39)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["wireshark-0:1.10.14-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14341.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14368","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":["RHSA-2020:1047"],"bugzilla":"1607327","bugzilla_description":"CVE-2018-14368 wireshark: Bazaar dissector infinite loop (wnpa-sec-2018-40)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["wireshark-0:1.10.14-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14368.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14369","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1607328","bugzilla_description":"CVE-2018-14369 wireshark: HTTP2 dissector infinite loop (wnpa-sec-2018-41)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14369.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14367","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1607329","bugzilla_description":"CVE-2018-14367 wireshark: CoAP dissector infinite loop (wnpa-sec-2018-42)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14367.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14370","severity":"moderate","public_date":"2018-07-18T00:00:00Z","advisories":[],"bugzilla":"1607331","bugzilla_description":"CVE-2018-14370 wireshark: IEEE dissector infinite loop (wnpa-sec-2018-43)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14370.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-14438","severity":"moderate","public_date":"2018-06-28T00:00:00Z","advisories":[],"bugzilla":"1609948","bugzilla_description":"CVE-2018-14438 wireshark: Improper Access Control in create_app_running_mutex function in wsutil/file_util.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14438.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-11359","severity":"moderate","public_date":"2018-05-18T00:00:00Z","advisories":[],"bugzilla":"1581778","bugzilla_description":"CVE-2018-11359 wireshark: Out-of-bounds Read in proto.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11359.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-11358","severity":"moderate","public_date":"2018-05-13T00:00:00Z","advisories":[],"bugzilla":"1581773","bugzilla_description":"CVE-2018-11358 wireshark: Use after free in packet-q931.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2018-11355","severity":"moderate","public_date":"2018-05-12T00:00:00Z","advisories":[],"bugzilla":"1581758","bugzilla_description":"CVE-2018-11355 wireshark: Heap-based Buffer Overflow in packet-rtcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11355.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-11356","severity":"moderate","public_date":"2018-05-12T00:00:00Z","advisories":[],"bugzilla":"1581768","bugzilla_description":"CVE-2018-11356 wireshark: DNS dissector crash  in packet-dns.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11356.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-11357","severity":"moderate","public_date":"2018-05-12T00:00:00Z","advisories":[],"bugzilla":"1581771","bugzilla_description":"CVE-2018-11357 wireshark: Uncontrolled Resource Consumption in epan/tvbuff.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11357.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-11360","severity":"moderate","public_date":"2018-05-12T00:00:00Z","advisories":[],"bugzilla":"1581781","bugzilla_description":"CVE-2018-11360 wireshark: Heap-based Buffer Overflow in packet-gsm_a_dtap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11360.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2018-11361","severity":"moderate","public_date":"2018-05-12T00:00:00Z","advisories":[],"bugzilla":"1581782","bugzilla_description":"CVE-2018-11361 wireshark: Heap-based Buffer Overflow in dot11decrypt.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11361.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-11354","severity":"moderate","public_date":"2018-05-02T00:00:00Z","advisories":[],"bugzilla":"1581752","bugzilla_description":"CVE-2018-11354 wireshark: Out-of-bounds Read in packet-ieee1905.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11354.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-11362","severity":"moderate","public_date":"2018-04-24T00:00:00Z","advisories":["RHSA-2020:1047"],"bugzilla":"1581787","bugzilla_description":"CVE-2018-11362 wireshark: Out-of-bounds read in packet-ldss.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["wireshark-0:1.10.14-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11362.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-9263","severity":"low","public_date":"2018-03-28T00:00:00Z","advisories":[],"bugzilla":"1565749","bugzilla_description":"CVE-2018-9263 wireshark: Kerberos dissector crash in epan/dissectors/packet-kerberos.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9263.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9257","severity":"low","public_date":"2018-03-14T00:00:00Z","advisories":[],"bugzilla":"1565683","bugzilla_description":"CVE-2018-9257 wireshark: infinite loop in the CQL dissector in epan/dissectors/packet-cql.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9257.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-9264","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565751","bugzilla_description":"CVE-2018-9264 wireshark: memory leak in ui/failure_message.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9264.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9265","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565785","bugzilla_description":"CVE-2018-9265 wireshark: memory leak in epan/dissectors/packet-tn3270.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9265.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9266","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565789","bugzilla_description":"CVE-2018-9266 wireshark: memory leak in epan/dissectors/packet-isup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9266.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9267","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565798","bugzilla_description":"CVE-2018-9267 wireshark: memory leak in epan/dissectors/packet-lapd.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9267.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9268","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565812","bugzilla_description":"CVE-2018-9268 wireshark: memory leak in epan/dissectors/packet-smb2.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9268.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9269","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565813","bugzilla_description":"CVE-2018-9269 wireshark: memory leak in epan/dissectors/packet-giop.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9269.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9270","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565817","bugzilla_description":"CVE-2018-9270 wireshark: memory leak in epan/oids.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9270.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9271","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565823","bugzilla_description":"CVE-2018-9271 wireshark: memory leak in epan/dissectors/packet-multipart.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9271.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9272","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565825","bugzilla_description":"CVE-2018-9272 wireshark: memory leak in epan/dissectors/packet-h223.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9272.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9273","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565832","bugzilla_description":"CVE-2018-9273 wireshark: memory leak in epan/dissectors/packet-pcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9273.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9274","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":[],"bugzilla":"1565833","bugzilla_description":"CVE-2018-9274 wireshark: memory leak in ui/failure_message.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9274.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9256","severity":"low","public_date":"2018-03-02T00:00:00Z","advisories":[],"bugzilla":"1565674","bugzilla_description":"CVE-2018-9256 wireshark: stack overflow via crafted LWAPP Layer 3 Packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9256.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9258","severity":"low","public_date":"2018-03-02T00:00:00Z","advisories":[],"bugzilla":"1565710","bugzilla_description":"CVE-2018-9258 wireshark: TCP dissector could crash in epan/dissectors/packet-tcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-841","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9258.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9260","severity":"low","public_date":"2018-03-02T00:00:00Z","advisories":[],"bugzilla":"1565731","bugzilla_description":"CVE-2018-9260 wireshark: IEEE 802.15.4 dissector crash  in epan/dissectors/packet-ieee802154.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9260.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9261","severity":"low","public_date":"2018-03-02T00:00:00Z","advisories":[],"bugzilla":"1565742","bugzilla_description":"CVE-2018-9261 wireshark: NBAP dissector crash in epan/dissectors/packet-nbap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-9262","severity":"low","public_date":"2018-03-02T00:00:00Z","advisories":[],"bugzilla":"1565743","bugzilla_description":"CVE-2018-9262 wireshark: VLAN dissector crash in epan/dissectors/packet-vlan.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9262.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-7337","severity":"low","public_date":"2018-02-19T00:00:00Z","advisories":[],"bugzilla":"1549265","bugzilla_description":"CVE-2018-7337 wireshark: DOCSIS dissector crash in packet-docsis.c by injecting a malformed packet","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7337.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7335","severity":"low","public_date":"2018-02-18T00:00:00Z","advisories":[],"bugzilla":"1549244","bugzilla_description":"CVE-2018-7335 wireshark: IEEE 802.11 dissector crash in airpdcap.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7335.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7419","severity":"low","public_date":"2018-02-18T00:00:00Z","advisories":[],"bugzilla":"1549308","bugzilla_description":"CVE-2018-7419 wireshark: NBAP dissector crash in nbap.cnf","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7419.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7417","severity":"low","public_date":"2018-02-11T00:00:00Z","advisories":[],"bugzilla":"1549301","bugzilla_description":"CVE-2018-7417 wireshark: IPMI dissector crash in packet-ipmi-picmg.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-170","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7417.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7418","severity":"low","public_date":"2018-02-11T00:00:00Z","advisories":["RHSA-2020:1047"],"bugzilla":"1549305","bugzilla_description":"CVE-2018-7418 wireshark: SIGCOMP dissector crash in packet-sigcomp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["wireshark-0:1.10.14-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7418.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7420","severity":"low","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1549284","bugzilla_description":"CVE-2018-7420 wireshark: Pcapng file parser crash in pcapng.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-770","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7420.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7320","severity":"low","public_date":"2018-02-06T00:00:00Z","advisories":[],"bugzilla":"1549277","bugzilla_description":"CVE-2018-7320 wireshark: Heap-based Buffer Overflow in SIGCOMP dissector crash in packet-sigcomp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7320.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6836","severity":"low","public_date":"2018-02-05T00:00:00Z","advisories":[],"bugzilla":"1543582","bugzilla_description":"CVE-2018-6836 wireshark: free operation on an uninitialized memory address in wiretap/netmon.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6836.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7336","severity":"low","public_date":"2018-01-30T00:00:00Z","advisories":[],"bugzilla":"1549270","bugzilla_description":"CVE-2018-7336 wireshark: FCP dissector crash in packet-fcp.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7336.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7334","severity":"low","public_date":"2018-01-13T00:00:00Z","advisories":[],"bugzilla":"1549255","bugzilla_description":"CVE-2018-7334 wireshark: out of bounds access in UMTS MAC dissector in packet-umts_mac.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7334.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-5334","severity":"moderate","public_date":"2018-01-11T00:00:00Z","advisories":[],"bugzilla":"1534361","bugzilla_description":"CVE-2018-5334 wireshark: IxVeriWave file parser crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5334.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-5335","severity":"moderate","public_date":"2018-01-11T00:00:00Z","advisories":[],"bugzilla":"1534364","bugzilla_description":"CVE-2018-5335 wireshark: WCP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5335.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2018-5336","severity":"moderate","public_date":"2018-01-11T00:00:00Z","advisories":[],"bugzilla":"1534374","bugzilla_description":"CVE-2018-5336 wireshark: Missing recursion limit in epan/tvbparse.c can cause multiple dissectors to crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5336.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-17997","severity":"moderate","public_date":"2017-12-29T00:00:00Z","advisories":[],"bugzilla":"1530893","bugzilla_description":"CVE-2017-17997 wireshark: Misuse of NULL pointer in MRDISC dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17997.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-17935","severity":"low","public_date":"2017-12-27T00:00:00Z","advisories":[],"bugzilla":"1529592","bugzilla_description":"CVE-2017-17935 Wireshark: denial of service in the File_read_line function in epan/wslua/wslua_file.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17935.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2017-17084","severity":"moderate","public_date":"2017-11-30T00:00:00Z","advisories":[],"bugzilla":"1524471","bugzilla_description":"CVE-2017-17084 wireshark: IWARP_MPA dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17084.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-17083","severity":"moderate","public_date":"2017-11-30T00:00:00Z","advisories":[],"bugzilla":"1524474","bugzilla_description":"CVE-2017-17083 wireshark: NetBIOS dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17083.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-17085","severity":"moderate","public_date":"2017-11-30T00:00:00Z","advisories":[],"bugzilla":"1524475","bugzilla_description":"CVE-2017-17085 wireshark: CIP Safety dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17085.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15189","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1500762","bugzilla_description":"CVE-2017-15189 wireshark: DOCSIS infinite loop","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15189.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15190","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1500763","bugzilla_description":"CVE-2017-15190 wireshark: RTSP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15190.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15191","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1500765","bugzilla_description":"CVE-2017-15191 wireshark: DMP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15191.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15192","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1500767","bugzilla_description":"CVE-2017-15192 wireshark: BT ATT dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15192.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-15193","severity":"moderate","public_date":"2017-10-10T00:00:00Z","advisories":[],"bugzilla":"1500768","bugzilla_description":"CVE-2017-15193 wireshark: MBIM dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15193.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-13767","severity":"moderate","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1486628","bugzilla_description":"CVE-2017-13767 wireshark: MSDP dissector infinite loop (wnpa-sec-2017-38)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13767.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-13766","severity":"moderate","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1486629","bugzilla_description":"CVE-2017-13766 wireshark: Profinet I/O buffer overrun (wnpa-sec-2017-39)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13766.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-13764","severity":"moderate","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1486630","bugzilla_description":"CVE-2017-13764 wireshark: Modbus dissector crash (wnpa-sec-2017-40)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13764.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-13765","severity":"moderate","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1486631","bugzilla_description":"CVE-2017-13765 wireshark: IrCOMM dissector buffer overrun (wnpa-sec-2017-41)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13765.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-11408","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":[],"bugzilla":"1472766","bugzilla_description":"CVE-2017-11408 wireshark: AMQP dissector crash (wnpa-sec-2017-34)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11408.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-11407","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":[],"bugzilla":"1472767","bugzilla_description":"CVE-2017-11407 wireshark: MQ dissector crash (wnpa-sec-2017-35)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11407.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-11406","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":[],"bugzilla":"1472768","bugzilla_description":"CVE-2017-11406 wireshark: DOCSIS infinite loop (wnpa-sec-2017-36)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11406.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-11409","severity":"moderate","public_date":"2017-07-18T00:00:00Z","advisories":[],"bugzilla":"1472769","bugzilla_description":"CVE-2017-11409 wireshark: GPRS LLC dissector large loop. (wnpa-sec-2017-37)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11409.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9766","severity":"low","public_date":"2017-06-19T00:00:00Z","advisories":[],"bugzilla":"1464051","bugzilla_description":"CVE-2017-9766 wireshark: PROFINET IO data with a high recursion depth can cause stack exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9766.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9617","severity":"low","public_date":"2017-06-13T00:00:00Z","advisories":[],"bugzilla":"1464050","bugzilla_description":"CVE-2017-9617 wireshark: Deeply nested DAAP data may cause stack exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9617.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-9616","severity":"low","public_date":"2017-06-08T00:00:00Z","advisories":[],"bugzilla":"1464048","bugzilla_description":"CVE-2017-9616 wireshark: Overly deep mp4 chunks may cause stack exhaustion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-9259","severity":"low","public_date":"2017-06-08T00:00:00Z","advisories":[],"bugzilla":"1565721","bugzilla_description":"CVE-2018-9259 wirehsark: MP4 dissector crash in epan/dissectors/file-mp4.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-9259.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-9352","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458136","bugzilla_description":"CVE-2017-9352 wireshark: Bazaar dissector infinite loop (wnpa-sec-2017-22)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9352.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9348","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458137","bugzilla_description":"CVE-2017-9348 wireshark: DOF dissector read overflow (wnpa-sec-2017-23)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9348.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9351","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458138","bugzilla_description":"CVE-2017-9351 wireshark: DHCP dissector read overflow (wnpa-sec-2017-24)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9351.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9346","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458139","bugzilla_description":"CVE-2017-9346 wireshark: SoulSeek dissector infinite loop (wnpa-sec-2017-25)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9346.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9345","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458140","bugzilla_description":"CVE-2017-9345 wireshark: DNS dissector infinite loop (wnpa-sec-2017-26)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9345.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9349","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458141","bugzilla_description":"CVE-2017-9349 wireshark: DICOM dissector infinite loop (wnpa-sec-2017-27)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9349.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-11411","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458142","bugzilla_description":"CVE-2017-9350 CVE-2017-11411 wireshark: openSAFETY dissector memory exhaustion (wnpa-sec-2017-28)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11411.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9350","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458142","bugzilla_description":"CVE-2017-9350 CVE-2017-11411 wireshark: openSAFETY dissector memory exhaustion (wnpa-sec-2017-28)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9350.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9344","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458143","bugzilla_description":"CVE-2017-9344 wireshark: BT L2CAP dissector divide by zero (wnpa-sec-2017-29)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9344.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9343","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458144","bugzilla_description":"CVE-2017-9343 wireshark: MSNIP dissector crash (wnpa-sec-2017-30)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9343.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9347","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458145","bugzilla_description":"CVE-2017-9347 wireshark: ROS dissector crash (wnpa-sec-2017-31)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9347.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9354","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458147","bugzilla_description":"CVE-2017-9354 wireshark: RGMP dissector crash (wnpa-sec-2017-32)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9354.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-9353","severity":"moderate","public_date":"2017-06-01T00:00:00Z","advisories":[],"bugzilla":"1458148","bugzilla_description":"CVE-2017-9353 wireshark: IPv6 dissector crash (wnpa-sec-2017-33)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9353.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7703","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441969","bugzilla_description":"CVE-2017-7703 wireshark: IMAP dissector crash (wnpa-sec-2017-12)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7703.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-11410","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441970","bugzilla_description":"CVE-2017-7702 CVE-2017-11410 wireshark: WBXML dissector infinite loop (wnpa-sec-2017-13)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11410.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7702","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441970","bugzilla_description":"CVE-2017-7702 CVE-2017-11410 wireshark: WBXML dissector infinite loop (wnpa-sec-2017-13)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7702.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7700","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441971","bugzilla_description":"CVE-2017-7700 wireshark: NetScaler file parser infinite loop (wnpa-sec-2017-14)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7700.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7705","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441972","bugzilla_description":"CVE-2017-7705 wireshark: RPCoRDMA dissector infinite loop (wnpa-sec-2017-15)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7705.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7701","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441973","bugzilla_description":"CVE-2017-7701 wireshark: BGP dissector infinite loop (wnpa-sec-2017-16)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7701.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7704","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441975","bugzilla_description":"CVE-2017-7704 wireshark: DOF dissector infinite loop (wnpa-sec-2017-17)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7704.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7747","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441976","bugzilla_description":"CVE-2017-7747 wireshark: PacketBB dissector crash (wnpa-sec-2017-18)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7747.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7746","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441978","bugzilla_description":"CVE-2017-7746 wireshark: SLSK dissector long loop (wnpa-sec-2017-19)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7746.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7745","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441979","bugzilla_description":"CVE-2017-7745 wireshark: SIGCOMP dissector infinite loop (wnpa-sec-2017-20)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-7748","severity":"moderate","public_date":"2017-04-12T00:00:00Z","advisories":[],"bugzilla":"1441980","bugzilla_description":"CVE-2017-7748 wireshark: WSP dissector infinite loop (wnpa-sec-2017-21)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7748.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6469","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429579","bugzilla_description":"CVE-2017-6469 wireshark: LDSS dissector crash (wnpa-sec-2017-03)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6469.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6472","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429580","bugzilla_description":"CVE-2017-6472 wireshark: RTMPT dissector infinite loop (wnpa-sec-2017-04)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6472.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6471","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429581","bugzilla_description":"CVE-2017-6471 wireshark: WSP infinite loop (wnpa-sec-2017-05)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6471.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6474","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429583","bugzilla_description":"CVE-2017-6474 wireshark: NetScaler file parser infinite loop (wnpa-sec-2017-07)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6474.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6468","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429585","bugzilla_description":"CVE-2017-6468 wireshark: NetScaler file parser crash (wnpa-sec-2017-08)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6468.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6473","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429586","bugzilla_description":"CVE-2017-6473 wireshark: K12 file parser crash (wnpa-sec-2017-09)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6473.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6470","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429588","bugzilla_description":"CVE-2017-6470 wireshark: IAX2 infinite loop (wnpa-sec-2017-10)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6470.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6467","severity":"moderate","public_date":"2017-03-03T00:00:00Z","advisories":[],"bugzilla":"1429589","bugzilla_description":"CVE-2017-6467 wireshark: Netscaler file parser infinite loop (wnpa-sec-2017-11)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6467.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-6014","severity":"low","public_date":"2017-02-16T00:00:00Z","advisories":[],"bugzilla":"1425375","bugzilla_description":"CVE-2017-6014 wireshark: Memory exhaustion/infinite loop via malformed STANAG 4607 capture file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-835|CWE-400)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6014.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5596","severity":"moderate","public_date":"2017-01-23T00:00:00Z","advisories":[],"bugzilla":"1415964","bugzilla_description":"CVE-2017-5596 wireshark: ASTERIX infinite loop (wnpa-sec-2017-01)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5596.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-5597","severity":"moderate","public_date":"2017-01-23T00:00:00Z","advisories":[],"bugzilla":"1415965","bugzilla_description":"CVE-2017-5597 wireshark: DHCPv6 large loop (wnpa-sec-2017-02)","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5597.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-9372","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396409","bugzilla_description":"CVE-2016-9372 wireshark: Profinet I/O dissector long loop (wnpa-sec-2016-58)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9372.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-9374","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396410","bugzilla_description":"CVE-2016-9374 wireshark: AllJoyn crash (wnpa-sec-2016-59)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9374.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-9376","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396411","bugzilla_description":"CVE-2016-9376 wireshark: OpenFlow crash (wnpa-sec-2016-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9376.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-9373","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396413","bugzilla_description":"CVE-2016-9373 wireshark: DCERPC crash (wnpa-sec-2016-61)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9373.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-9375","severity":"moderate","public_date":"2016-11-16T00:00:00Z","advisories":[],"bugzilla":"1396415","bugzilla_description":"CVE-2016-9375 wireshark: DTN infinite loop (wnpa-sec-2016-62)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9375.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7957","severity":"moderate","public_date":"2016-10-04T00:00:00Z","advisories":[],"bugzilla":"1381837","bugzilla_description":"CVE-2016-7957 wireshark: Bluetooth L2CAP dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7957.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7958","severity":"moderate","public_date":"2016-10-04T00:00:00Z","advisories":[],"bugzilla":"1381838","bugzilla_description":"CVE-2016-7958 wireshark: NCP dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7958.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7175","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1375109","bugzilla_description":"CVE-2016-7175 wireshark: QNX6 QNET dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7175.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7176","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1375112","bugzilla_description":"CVE-2016-7176 wireshark: H.225 dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7176.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7177","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1375115","bugzilla_description":"CVE-2016-7177 wireshark: Catapult DCT2000 dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7177.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7178","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1375116","bugzilla_description":"CVE-2016-7178 wireshark: UMTS FP dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7178.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7179","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1375118","bugzilla_description":"CVE-2016-7179 wireshark: Catapult DCT2000 dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7179.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-7180","severity":"moderate","public_date":"2016-09-08T00:00:00Z","advisories":[],"bugzilla":"1375119","bugzilla_description":"CVE-2016-7180 wireshark: IPMI Trace dissector crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7180.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6505","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361135","bugzilla_description":"CVE-2016-6505 wireshark: PacketBB crash (wnpa-sec-2016-41)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6505.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6506","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361137","bugzilla_description":"CVE-2016-6506 wireshark: WSP infinite loop (wnpa-sec-2016-42)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6506.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6507","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361138","bugzilla_description":"CVE-2016-6507 wireshark: MMSE infinite loop (wnpa-sec-2016-43)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6508","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361139","bugzilla_description":"CVE-2016-6508 wireshark: RLC long loop (wnpa-sec-2016-44)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6508.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6509","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361140","bugzilla_description":"CVE-2016-6509 wireshark: LDSS dissector crash (wnpa-sec-2016-45)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6509.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6510","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361141","bugzilla_description":"CVE-2016-6510 wireshark: RLC dissector crash (wnpa-sec-2016-46)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6510.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6511","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361142","bugzilla_description":"CVE-2016-6511 wireshark: OpenFlow long loop (wnpa-sec-2016-47)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6511.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6512","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361143","bugzilla_description":"CVE-2016-6512 wireshark: MMSE, WAP, WBXML, and WSP infinite loop. (wnpa-sec-2016-48)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6512.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-6513","severity":"moderate","public_date":"2016-07-27T00:00:00Z","advisories":[],"bugzilla":"1361144","bugzilla_description":"CVE-2016-6513 wireshark: WBXML crash (wnpa-sec-2016-49)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6513.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-5350","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343963","bugzilla_description":"CVE-2016-5350 wireshark: SPOOLS infinite loop (wnpa-sec-2016-29)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5350.json"},{"CVE":"CVE-2016-5351","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343964","bugzilla_description":"CVE-2016-5351 wireshark: IEEE 802.11 dissector crash (wnpa-sec-2016-30)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5351.json"},{"CVE":"CVE-2016-5352","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343965","bugzilla_description":"CVE-2016-5352 wireshark: IEEE 802.11 dissector crash (wnpa-sec-2016-31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5352.json"},{"CVE":"CVE-2016-5353","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343966","bugzilla_description":"CVE-2016-5353 wireshark: UMTS FP crash (wnpa-sec-2016-32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5353.json"},{"CVE":"CVE-2016-5354","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343967","bugzilla_description":"CVE-2016-5354 wireshark: USB dissector crash (wnpa-sec-2016-33)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5354.json"},{"CVE":"CVE-2016-5355","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343968","bugzilla_description":"CVE-2016-5355 wireshark: Toshiba file parser crash (wnpa-sec-2016-34)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5355.json"},{"CVE":"CVE-2016-5356","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343969","bugzilla_description":"CVE-2016-5356 wireshark: CoSine file parser crash (wnpa-sec-2016-35)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5356.json"},{"CVE":"CVE-2016-5357","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343970","bugzilla_description":"CVE-2016-5357 wireshark: NetScreen file parser crash (wnpa-sec-2016-36)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5357.json"},{"CVE":"CVE-2016-5358","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343971","bugzilla_description":"CVE-2016-5358 wireshark: Ethernet dissector crash (wnpa-sec-2016-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5358.json"},{"CVE":"CVE-2016-5359","severity":"moderate","public_date":"2016-06-07T00:00:00Z","advisories":[],"bugzilla":"1343972","bugzilla_description":"CVE-2016-5359 wireshark: WBXML infinite loop (wnpa-sec-2016-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5359.json"},{"CVE":"CVE-2016-4076","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330066","bugzilla_description":"CVE-2016-4076 wireshark: NCP dissector crash (wnpa-sec-2016-19)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4076.json"},{"CVE":"CVE-2016-4077","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330067","bugzilla_description":"CVE-2016-4077 wireshark: TShark reassembly crash (wnpa-sec-2016-20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4077.json"},{"CVE":"CVE-2016-4078","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330068","bugzilla_description":"CVE-2016-4078 wireshark: IEEE 802.11 dissector crash (wnpa-sec-2016-21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4078.json"},{"CVE":"CVE-2016-4079","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330069","bugzilla_description":"CVE-2016-4079 wireshark: PKTC dissector crash (wnpa-sec-2016-22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4079.json"},{"CVE":"CVE-2016-4080","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330070","bugzilla_description":"CVE-2016-4080 wireshark: PKTC dissector crash (wnpa-sec-2016-23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4080.json"},{"CVE":"CVE-2016-4081","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330071","bugzilla_description":"CVE-2016-4081 wireshark: IAX2 infinite loop (wnpa-sec-2016-24)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4081.json"},{"CVE":"CVE-2016-4006","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330073","bugzilla_description":"CVE-2016-4006 wireshark: Wireshark and TShark crash (wnpa-sec-2016-25)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4006.json"},{"CVE":"CVE-2016-4082","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330075","bugzilla_description":"CVE-2016-4082 wireshark: GSM CBCH dissector crash (wnpa-sec-2016-26)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4082.json"},{"CVE":"CVE-2016-4083","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330076","bugzilla_description":"CVE-2016-4083 CVE-2016-4084 wireshark: MS-WSP dissector crash (wnpa-sec-2016-27)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4083.json"},{"CVE":"CVE-2016-4084","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330076","bugzilla_description":"CVE-2016-4083 CVE-2016-4084 wireshark: MS-WSP dissector crash (wnpa-sec-2016-27)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4084.json"},{"CVE":"CVE-2016-4085","severity":"moderate","public_date":"2016-04-22T00:00:00Z","advisories":[],"bugzilla":"1330077","bugzilla_description":"CVE-2016-4085 wireshark: NCP dissector crash (wnpa-sec-2016-28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4085.json"},{"CVE":"CVE-2016-2521","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312776","bugzilla_description":"CVE-2016-2521 wireshark: DLL hijacking vulnerability (wnpa-sec-2016-01)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2521.json"},{"CVE":"CVE-2016-2522","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312777","bugzilla_description":"CVE-2016-2522 wireshark: ASN.1 BER dissector crash (wnpa-sec-2016-02)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2522.json"},{"CVE":"CVE-2016-2523","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312779","bugzilla_description":"CVE-2016-2523 wireshark: DNP3 dissector infinite loop (wnpa-sec-2016-03)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2523.json"},{"CVE":"CVE-2016-2524","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312780","bugzilla_description":"CVE-2016-2524 wireshark: X.509AF crash (wnpa-sec-2016-04)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2524.json"},{"CVE":"CVE-2016-2525","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312781","bugzilla_description":"CVE-2016-2525 wireshark: HTTP/2 dissector crash (wnpa-sec-2016-05)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2525.json"},{"CVE":"CVE-2016-2526","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312783","bugzilla_description":"CVE-2016-2526 wireshark: HiQnet dissector crash (wnpa-sec-2016-06)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2526.json"},{"CVE":"CVE-2016-2527","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312784","bugzilla_description":"CVE-2016-2527 wireshark: 3GPP TS 32.423 Trace file parser crash (wnpa-sec-2016-07)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2527.json"},{"CVE":"CVE-2016-2528","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312785","bugzilla_description":"CVE-2016-2528 wireshark: LBMC dissector crash (wnpa-sec-2016-08)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2528.json"},{"CVE":"CVE-2016-2529","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312787","bugzilla_description":"CVE-2016-2529 wireshark: iSeries file parser crash (wnpa-sec-2016-09)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2529.json"},{"CVE":"CVE-2016-2530","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312790","bugzilla_description":"CVE-2016-2530 CVE-2016-2531 wireshark: RSL dissector crash (wnpa-sec-2016-10)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2530.json"},{"CVE":"CVE-2016-2531","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312790","bugzilla_description":"CVE-2016-2530 CVE-2016-2531 wireshark: RSL dissector crash (wnpa-sec-2016-10)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2531.json"},{"CVE":"CVE-2016-2532","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312792","bugzilla_description":"CVE-2016-2532 wireshark: LLRP dissector crash (wnpa-sec-2016-11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2532.json"},{"CVE":"CVE-2016-4415","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312795","bugzilla_description":"CVE-2016-4415 wireshark: Ixia IxVeriWave file parser crash (wnpa-sec-2016-12)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4415.json"},{"CVE":"CVE-2016-4416","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312796","bugzilla_description":"CVE-2016-4416 wireshark: IEEE 802.11 dissector crash (wnpa-sec-2016-13)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4416.json"},{"CVE":"CVE-2016-4417","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312797","bugzilla_description":"CVE-2016-4417 wireshark: GSM A-bis OML dissector crash (wnpa-sec-2016-14)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4417.json"},{"CVE":"CVE-2016-4418","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312798","bugzilla_description":"CVE-2016-4418 wireshark: ASN.1 BER dissector crash (wnpa-sec-2016-15)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4418.json"},{"CVE":"CVE-2016-4419","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312799","bugzilla_description":"CVE-2016-4419 wireshark: SPICE dissector large loop (wnpa-sec-2016-16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4419.json"},{"CVE":"CVE-2016-4420","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312800","bugzilla_description":"CVE-2016-4420 wireshark: NFS dissector crash (wnpa-sec-2016-17)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4420.json"},{"CVE":"CVE-2016-4421","severity":"moderate","public_date":"2016-02-26T00:00:00Z","advisories":[],"bugzilla":"1312801","bugzilla_description":"CVE-2016-4421 wireshark: ASN.1 BER dissector crash. (wnpa-sec-2016-18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4421.json"},{"CVE":"CVE-2015-8711","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296054","bugzilla_description":"CVE-2015-8711 wireshark: NBAP dissector crashes (wnpa-sec-2015-31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8711.json"},{"CVE":"CVE-2015-8712","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296055","bugzilla_description":"CVE-2015-8712 CVE-2015-8713 wireshark: UMTS FP dissector crashes (wnpa-sec-2015-32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8712.json"},{"CVE":"CVE-2015-8713","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296055","bugzilla_description":"CVE-2015-8712 CVE-2015-8713 wireshark: UMTS FP dissector crashes (wnpa-sec-2015-32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8713.json"},{"CVE":"CVE-2015-8714","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296056","bugzilla_description":"CVE-2015-8714 wireshark: DCOM dissector crash (wnpa-sec-2015-33)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-456","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8714.json"},{"CVE":"CVE-2015-8715","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296057","bugzilla_description":"CVE-2015-8715 wireshark: AllJoyn dissector infinite loop (wnpa-sec-2015-34)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8715.json"},{"CVE":"CVE-2015-8716","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296059","bugzilla_description":"CVE-2015-8716 wireshark: T.38 dissector crash (wnpa-sec-2015-35)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8716.json"},{"CVE":"CVE-2015-8717","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296061","bugzilla_description":"CVE-2015-8717 wireshark: SDP dissector crash (wnpa-sec-2015-36)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8717.json"},{"CVE":"CVE-2015-8718","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296062","bugzilla_description":"CVE-2015-8718 wireshark: NLM dissector crash (wnpa-sec-2015-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8718.json"},{"CVE":"CVE-2015-8719","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296063","bugzilla_description":"CVE-2015-8719 wireshark: DNS dissector crash (wnpa-sec-2015-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8719.json"},{"CVE":"CVE-2015-8720","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296064","bugzilla_description":"CVE-2015-8720 wireshark: BER dissector crash (wnpa-sec-2015-39)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8720.json"},{"CVE":"CVE-2015-8721","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296065","bugzilla_description":"CVE-2015-8721 wireshark: Zlib decompression crash (wnpa-sec-2015-40)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8721.json"},{"CVE":"CVE-2015-8722","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296066","bugzilla_description":"CVE-2015-8722 wireshark: SCTP dissector crash (wnpa-sec-2015-41)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8722.json"},{"CVE":"CVE-2015-8723","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296067","bugzilla_description":"CVE-2015-8723 CVE-2015-8724 wireshark: 802.11 decryption crash (wnpa-sec-2015-42)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-121|CWE-122)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8723.json"},{"CVE":"CVE-2015-8724","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296067","bugzilla_description":"CVE-2015-8723 CVE-2015-8724 wireshark: 802.11 decryption crash (wnpa-sec-2015-42)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-121|CWE-122)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8724.json"},{"CVE":"CVE-2015-8725","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296068","bugzilla_description":"CVE-2015-8725 wireshark: DIAMETER dissector crash (wnpa-sec-2015-43)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8725.json"},{"CVE":"CVE-2015-8726","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296070","bugzilla_description":"CVE-2015-8726 wireshark: VeriWave file parser crashes (wnpa-sec-2015-44)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-125|CWE-121)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8726.json"},{"CVE":"CVE-2015-8727","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296072","bugzilla_description":"CVE-2015-8727 wireshark: RSVP dissector crash (wnpa-sec-2015-45)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8727.json"},{"CVE":"CVE-2015-8728","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296075","bugzilla_description":"CVE-2015-8728 wireshark: ANSI A & GSM A dissector crashes (wnpa-sec-2015-46)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8728.json"},{"CVE":"CVE-2015-8729","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296077","bugzilla_description":"CVE-2015-8729 wireshark: Ascend file parser crash (wnpa-sec-2015-47)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8729.json"},{"CVE":"CVE-2015-8730","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296078","bugzilla_description":"CVE-2015-8730 wireshark: NBAP dissector crash (wnpa-sec-2015-48)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8730.json"},{"CVE":"CVE-2015-8731","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296079","bugzilla_description":"CVE-2015-8731 wireshark: RSL dissector crash (wnpa-sec-2015-49)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8731.json"},{"CVE":"CVE-2015-8732","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296081","bugzilla_description":"CVE-2015-8732 wireshark: ZigBee ZCL dissector crash (wnpa-sec-2015-50)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8732.json"},{"CVE":"CVE-2015-8733","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296082","bugzilla_description":"CVE-2015-8733 wireshark: Sniffer file parser crash (wnpa-sec-2015-51)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"(CWE-122|CWE-125)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8733.json"},{"CVE":"CVE-2015-8734","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296083","bugzilla_description":"CVE-2015-8734 wireshark: NWP dissector crash (wnpa-sec-2015-52)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8734.json"},{"CVE":"CVE-2015-8735","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296084","bugzilla_description":"CVE-2015-8735 wireshark: BT ATT dissector crash (wnpa-sec-2015-53)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8735.json"},{"CVE":"CVE-2015-8736","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296085","bugzilla_description":"CVE-2015-8736 wireshark: MP2T file parser crash (wnpa-sec-2015-54)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8736.json"},{"CVE":"CVE-2015-8737","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296086","bugzilla_description":"CVE-2015-8737 wireshark: MP2T file parser crash (wnpa-sec-2015-55)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8737.json"},{"CVE":"CVE-2015-8738","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296087","bugzilla_description":"CVE-2015-8738 wireshark: S7COMM dissector crash (wnpa-sec-2015-56)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8738.json"},{"CVE":"CVE-2015-8739","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296088","bugzilla_description":"CVE-2015-8739 wireshark: IPMI dissector crash (wnpa-sec-2015-57)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8739.json"},{"CVE":"CVE-2015-8740","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296089","bugzilla_description":"CVE-2015-8740 wireshark: TDS dissector crash (wnpa-sec-2015-58)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8740.json"},{"CVE":"CVE-2015-8741","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296090","bugzilla_description":"CVE-2015-8741 wireshark: PPI dissector crash (wnpa-sec-2015-59)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8741.json"},{"CVE":"CVE-2015-8742","severity":"moderate","public_date":"2015-12-29T00:00:00Z","advisories":[],"bugzilla":"1296091","bugzilla_description":"CVE-2015-8742 wireshark: MS-WSP dissector crash (wnpa-sec-2015-60)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8742.json"},{"CVE":"CVE-2015-7830","severity":"moderate","public_date":"2015-10-14T00:00:00Z","advisories":[],"bugzilla":"1272016","bugzilla_description":"CVE-2015-7830 wireshark: Pcapng file parser crash","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-704->CWE-480","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7830.json"},{"CVE":"CVE-2015-6241","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1253352","bugzilla_description":"CVE-2015-6241 wireshark: protocol tree crash (wnpa-sec-2015-21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6241.json"},{"CVE":"CVE-2015-6242","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1253353","bugzilla_description":"CVE-2015-6242 wireshark: memory manager crash (wnpa-sec-2015-22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6242.json"},{"CVE":"CVE-2015-6243","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1253354","bugzilla_description":"CVE-2015-6243 wireshark: Dissector table crash (wnpa-sec-2015-23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6243.json"},{"CVE":"CVE-2015-6244","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1253355","bugzilla_description":"CVE-2015-6244 wireshark: ZigBee dissector crash (wnpa-sec-2015-24)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-130","affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6244.json"},{"CVE":"CVE-2015-6245","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1253356","bugzilla_description":"CVE-2015-6245 wireshark: GSM RLC/MAC dissector infinite loop (wnpa-sec-2015-25)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6245.json"},{"CVE":"CVE-2015-6246","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1253357","bugzilla_description":"CVE-2015-6246 wireshark: WaveAgent dissector crash (wnpa-sec-2015-26)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6246.json"},{"CVE":"CVE-2015-6247","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1253359","bugzilla_description":"CVE-2015-6247 wireshark: OpenFlow dissector infinite loop (wnpa-sec-2015-27)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6247.json"},{"CVE":"CVE-2015-6248","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1253360","bugzilla_description":"CVE-2015-6248 wireshark: Ptvcursor crash (wnpa-sec-2015-28)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6248.json"},{"CVE":"CVE-2015-6249","severity":"moderate","public_date":"2015-08-11T00:00:00Z","advisories":[],"bugzilla":"1253361","bugzilla_description":"CVE-2015-6249 wireshark: WCCP dissector crash (wnpa-sec-2015-29)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6249.json"},{"CVE":"CVE-2015-4651","severity":"low","public_date":"2015-06-17T00:00:00Z","advisories":[],"bugzilla":"1234415","bugzilla_description":"CVE-2015-4651 wireshark: WCCP dissector crash (wnpa-sec-2015-19)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4651.json"},{"CVE":"CVE-2015-4652","severity":"low","public_date":"2015-06-17T00:00:00Z","advisories":[],"bugzilla":"1234416","bugzilla_description":"CVE-2015-4652 wireshark: GSM DTAP dissector crash (wnpa-sec-2015-20)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4652.json"},{"CVE":"CVE-2015-3808","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1222433","bugzilla_description":"CVE-2015-3808 CVE-2015-3809 wireshark: LBMR infinite loop (wnpa-sec-2015-12)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3808.json"},{"CVE":"CVE-2015-3809","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1222433","bugzilla_description":"CVE-2015-3808 CVE-2015-3809 wireshark: LBMR infinite loop (wnpa-sec-2015-12)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3809.json"},{"CVE":"CVE-2015-3810","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1222434","bugzilla_description":"CVE-2015-3810 wireshark: WebSocket DoS (wnpa-sec-2015-13)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3810.json"},{"CVE":"CVE-2015-3811","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2017:0631","RHSA-2015:2393"],"bugzilla":"1222436","bugzilla_description":"CVE-2015-3811 wireshark: WCP dissector crash (wnpa-sec-2015-14)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-665","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-25.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3811.json"},{"CVE":"CVE-2015-3812","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2017:0631","RHSA-2015:2393"],"bugzilla":"1222437","bugzilla_description":"CVE-2015-3812 wireshark: X11 memory leak (wnpa-sec-2015-15)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-25.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3812.json"},{"CVE":"CVE-2015-3813","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":["RHSA-2017:0631","RHSA-2015:2393"],"bugzilla":"1222438","bugzilla_description":"CVE-2015-3813 wireshark: Reassembly memory leak (wnpa-sec-2015-16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-25.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3813.json"},{"CVE":"CVE-2015-3814","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1222439","bugzilla_description":"CVE-2015-3814 wireshark: IEEE 802.11 infinite loop (wnpa-sec-2015-17)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3814.json"},{"CVE":"CVE-2015-3815","severity":"moderate","public_date":"2015-05-12T00:00:00Z","advisories":[],"bugzilla":"1222440","bugzilla_description":"CVE-2015-3815 wireshark: Android Logcat file parser crash (wnpa-sec-2015-18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3815.json"},{"CVE":"CVE-2015-3182","severity":"moderate","public_date":"2015-05-07T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1219409","bugzilla_description":"CVE-2015-3182 wireshark: crash on sample file genbroad.snoop","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-704","affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3182.json"},{"CVE":"CVE-2015-2187","severity":"low","public_date":"2015-03-04T00:00:00Z","advisories":[],"bugzilla":"1199162","bugzilla_description":"CVE-2015-2187 wireshark: ATN-CPDLC dissector could crash (wnpa-sec-2015-06)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2187.json"},{"CVE":"CVE-2015-2188","severity":"low","public_date":"2015-03-04T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1199163","bugzilla_description":"CVE-2015-2188 wireshark: The WCP dissector could crash while decompressing data (wnpa-sec-2015-07)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2188.json"},{"CVE":"CVE-2015-2189","severity":"low","public_date":"2015-03-04T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1199165","bugzilla_description":"CVE-2015-2189 wireshark: The pcapng file parser could crash (wnpa-sec-2015-08)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2189.json"},{"CVE":"CVE-2015-2190","severity":"low","public_date":"2015-03-04T00:00:00Z","advisories":[],"bugzilla":"1199166","bugzilla_description":"CVE-2015-2190 wireshark: LLDP dissector could crash (wnpa-sec-2015-09)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2190.json"},{"CVE":"CVE-2015-2191","severity":"low","public_date":"2015-03-04T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1199167","bugzilla_description":"CVE-2015-2191 wireshark: The TNEF dissector could go into an infinite loop on 32-bit architectures (wnpa-sec-2015-10)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2191.json"},{"CVE":"CVE-2015-2192","severity":"low","public_date":"2015-03-04T00:00:00Z","advisories":[],"bugzilla":"1199168","bugzilla_description":"CVE-2015-2192 wireshark: SCSI OSD dissector could go into an infinite loop (wnpa-sec-2015-11)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2192.json"},{"CVE":"CVE-2015-0559","severity":"moderate","public_date":"2015-01-07T00:00:00Z","advisories":[],"bugzilla":"1180167","bugzilla_description":"CVE-2015-0559 CVE-2015-0560 wireshark: WCCP dissector crash (wnpa-sec-2015-01)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0559.json"},{"CVE":"CVE-2015-0560","severity":"moderate","public_date":"2015-01-07T00:00:00Z","advisories":[],"bugzilla":"1180167","bugzilla_description":"CVE-2015-0559 CVE-2015-0560 wireshark: WCCP dissector crash (wnpa-sec-2015-01)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0560.json"},{"CVE":"CVE-2015-0561","severity":"moderate","public_date":"2015-01-07T00:00:00Z","advisories":[],"bugzilla":"1180171","bugzilla_description":"CVE-2015-0561 wireshark: LPP dissector crash (wnpa-sec-2015-02)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0561.json"},{"CVE":"CVE-2015-0562","severity":"moderate","public_date":"2015-01-07T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1180182","bugzilla_description":"CVE-2015-0562 wireshark: DEC DNA Routing Protocol dissector crash (wnpa-sec-2015-03)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0562.json"},{"CVE":"CVE-2015-0563","severity":"moderate","public_date":"2015-01-07T00:00:00Z","advisories":["RHSA-2015:2393"],"bugzilla":"1180195","bugzilla_description":"CVE-2015-0563 wireshark: SMTP dissector crash (wnpa-sec-2015-04)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-131","affected_packages":["wireshark-0:1.10.14-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0563.json"},{"CVE":"CVE-2015-0564","severity":"moderate","public_date":"2015-01-07T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1180197","bugzilla_description":"CVE-2015-0564 wireshark: TLS/SSL decryption crash (wnpa-sec-2015-05)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-131","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0564.json"},{"CVE":"CVE-2014-8710","severity":"moderate","public_date":"2014-11-04T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1163584","bugzilla_description":"CVE-2014-8710 wireshark: SigComp dissector crash (wnpa-sec-2014-20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8710.json"},{"CVE":"CVE-2014-8714","severity":"moderate","public_date":"2014-10-20T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1163581","bugzilla_description":"CVE-2014-8714 wireshark: TN5250 infinite loop (wnpa-sec-2014-23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8714.json"},{"CVE":"CVE-2014-8711","severity":"moderate","public_date":"2014-10-17T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1163583","bugzilla_description":"CVE-2014-8711 wireshark: AMQP dissector crash (wnpa-sec-2014-21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8711.json"},{"CVE":"CVE-2014-8712","severity":"moderate","public_date":"2014-10-09T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1163582","bugzilla_description":"CVE-2014-8712 CVE-2014-8713 wireshark: NCP dissector crashes (wnpa-sec-2014-22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8712.json"},{"CVE":"CVE-2014-8713","severity":"moderate","public_date":"2014-10-09T00:00:00Z","advisories":["RHSA-2015:2393","RHSA-2015:1460"],"bugzilla":"1163582","bugzilla_description":"CVE-2014-8712 CVE-2014-8713 wireshark: NCP dissector crashes (wnpa-sec-2014-22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.10.14-7.el7","wireshark-0:1.8.10-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8713.json"},{"CVE":"CVE-2014-6429","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142602","bugzilla_description":"CVE-2014-6429 CVE-2014-6430 CVE-2014-6431 CVE-2014-6432 wireshark: DOS Sniffer file parser flaw (wnpa-sec-2014-19)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6429.json"},{"CVE":"CVE-2014-6430","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142602","bugzilla_description":"CVE-2014-6429 CVE-2014-6430 CVE-2014-6431 CVE-2014-6432 wireshark: DOS Sniffer file parser flaw (wnpa-sec-2014-19)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6430.json"},{"CVE":"CVE-2014-6431","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142602","bugzilla_description":"CVE-2014-6429 CVE-2014-6430 CVE-2014-6431 CVE-2014-6432 wireshark: DOS Sniffer file parser flaw (wnpa-sec-2014-19)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6431.json"},{"CVE":"CVE-2014-6432","severity":"moderate","public_date":"2014-09-10T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142602","bugzilla_description":"CVE-2014-6429 CVE-2014-6430 CVE-2014-6431 CVE-2014-6432 wireshark: DOS Sniffer file parser flaw (wnpa-sec-2014-19)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6432.json"},{"CVE":"CVE-2014-6428","severity":"moderate","public_date":"2014-09-07T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142603","bugzilla_description":"CVE-2014-6428 wireshark: SES dissector crash (wnpa-sec-2014-18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-456","affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6428.json"},{"CVE":"CVE-2014-6427","severity":"moderate","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2014:1676"],"bugzilla":"1142604","bugzilla_description":"CVE-2014-6427 wireshark: RTSP dissector crash (wnpa-sec-2014-17)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6427.json"},{"CVE":"CVE-2014-6426","severity":"moderate","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2014:1676"],"bugzilla":"1142606","bugzilla_description":"CVE-2014-6426 wireshark: HIP dissector infinite loop (wnpa-sec-2014-16)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6426.json"},{"CVE":"CVE-2014-6424","severity":"moderate","public_date":"2014-08-13T00:00:00Z","advisories":["RHSA-2014:1676"],"bugzilla":"1142609","bugzilla_description":"CVE-2014-6424 wireshark: Netflow dissector crash (wnpa-sec-2014-14)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6424.json"},{"CVE":"CVE-2014-6425","severity":"moderate","public_date":"2014-08-07T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142608","bugzilla_description":"CVE-2014-6425 wireshark: CUPS dissector crash (wnpa-sec-2014-15)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-228->CWE-125","affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6425.json"},{"CVE":"CVE-2014-6423","severity":"moderate","public_date":"2014-08-01T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142610","bugzilla_description":"CVE-2014-6423 wireshark: MEGACO dissector infinite loop (wnpa-sec-2014-13)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6423.json"},{"CVE":"CVE-2014-5161","severity":"moderate","public_date":"2014-07-31T00:00:00Z","advisories":[],"bugzilla":"1125767","bugzilla_description":"CVE-2014-5161 CVE-2014-5162 wireshark: Catapult DCT2000 and IrDA dissectors buffer underrun (wnpa-sec-2014-08)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5161.json"},{"CVE":"CVE-2014-5162","severity":"moderate","public_date":"2014-07-31T00:00:00Z","advisories":[],"bugzilla":"1125767","bugzilla_description":"CVE-2014-5161 CVE-2014-5162 wireshark: Catapult DCT2000 and IrDA dissectors buffer underrun (wnpa-sec-2014-08)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5162.json"},{"CVE":"CVE-2014-5163","severity":"moderate","public_date":"2014-06-21T00:00:00Z","advisories":[],"bugzilla":"1125766","bugzilla_description":"CVE-2014-5163 wireshark: GTP and GSM Management dissectors crash (wnpa-sec-2014-09)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5163.json"},{"CVE":"CVE-2014-5165","severity":"moderate","public_date":"2014-06-17T00:00:00Z","advisories":[],"bugzilla":"1125761","bugzilla_description":"CVE-2014-5165 wireshark: ASN.1 BER dissector crash (wnpa-sec-2014-11)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5165.json"},{"CVE":"CVE-2014-2907","severity":"moderate","public_date":"2014-04-22T00:00:00Z","advisories":[],"bugzilla":"1090177","bugzilla_description":"CVE-2014-2907 wireshark: RTP dissector crash (wnpa-sec-2014-06)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2907.json"},{"CVE":"CVE-2014-4020","severity":"moderate","public_date":"2014-04-17T00:00:00Z","advisories":[],"bugzilla":"1109034","bugzilla_description":"CVE-2014-4020 wireshark: Frame metadissector crash (wnpa-sec-2014-07)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4020.json"},{"CVE":"CVE-2014-4174","severity":"moderate","public_date":"2014-04-09T00:00:00Z","advisories":[],"bugzilla":"1086033","bugzilla_description":"CVE-2014-4174 libpcap: file parser crash (wnpa-sec-2014-05)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4174.json"},{"CVE":"CVE-2014-6421","severity":"moderate","public_date":"2014-03-23T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142611","bugzilla_description":"CVE-2014-6421 CVE-2014-6422 wireshark: RTP dissector crash (wnpa-sec-2014-12)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6421.json"},{"CVE":"CVE-2014-6422","severity":"moderate","public_date":"2014-03-23T00:00:00Z","advisories":["RHSA-2014:1676","RHSA-2014:1677"],"bugzilla":"1142611","bugzilla_description":"CVE-2014-6421 CVE-2014-6422 wireshark: RTP dissector crash (wnpa-sec-2014-12)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":["wireshark-0:1.8.10-8.el6_6","wireshark-0:1.0.15-7.el5_11","wireshark-0:1.10.3-12.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-6422.json"},{"CVE":"CVE-2014-2299","severity":"moderate","public_date":"2014-03-07T00:00:00Z","advisories":["RHSA-2014:0342","RHSA-2014:0341"],"bugzilla":"1074109","bugzilla_description":"CVE-2014-2299 wireshark: buffer overflow in MPEG file parser (wnpa-sec-2014-04)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["wireshark-0:1.8.10-7.el6_5","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2299.json"},{"CVE":"CVE-2014-2283","severity":"moderate","public_date":"2014-03-07T00:00:00Z","advisories":["RHSA-2014:0342"],"bugzilla":"1074111","bugzilla_description":"CVE-2014-2283 wireshark: RLC dissector crash (wnpa-sec-2014-03)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-7.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2283.json"},{"CVE":"CVE-2014-2282","severity":"moderate","public_date":"2014-03-07T00:00:00Z","advisories":[],"bugzilla":"1074112","bugzilla_description":"CVE-2014-2282 wireshark: M3UA dissector crash (wnpa-sec-2014-02)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2282.json"},{"CVE":"CVE-2014-2281","severity":"moderate","public_date":"2014-03-07T00:00:00Z","advisories":["RHSA-2014:0342","RHSA-2014:0341"],"bugzilla":"1074114","bugzilla_description":"CVE-2014-2281 wireshark: NFS dissector crash (wnpa-sec-2014-01)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":["wireshark-0:1.8.10-7.el6_5","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2281.json"},{"CVE":"CVE-2014-5164","severity":"moderate","public_date":"2014-02-21T00:00:00Z","advisories":[],"bugzilla":"1125763","bugzilla_description":"CVE-2014-5164 wireshark: RLC dissector crash (wnpa-sec-2014-10)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5164.json"},{"CVE":"CVE-2013-7112","severity":"low","public_date":"2013-12-17T00:00:00Z","advisories":["RHSA-2014:0342","RHSA-2014:0341"],"bugzilla":"1044508","bugzilla_description":"CVE-2013-7112 wireshark: SIP dissector could go into an infinite loop (wnpa-sec-2013-66)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-7.el6_5","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7112.json"},{"CVE":"CVE-2013-7113","severity":"low","public_date":"2013-12-17T00:00:00Z","advisories":[],"bugzilla":"1044509","bugzilla_description":"CVE-2013-7113 wireshark: BSSGP dissector could crash (wnpa-sec-2013-67)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7113.json"},{"CVE":"CVE-2013-7114","severity":"low","public_date":"2013-12-17T00:00:00Z","advisories":["RHSA-2014:0342"],"bugzilla":"1044510","bugzilla_description":"CVE-2013-7114 wireshark: NTLMSSP v2 dissector could crash (wnpa-sec-2013-68)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-7.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-7114.json"},{"CVE":"CVE-2013-6336","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":["RHSA-2014:0342"],"bugzilla":"1026534","bugzilla_description":"CVE-2013-6336 wireshark: IEEE 802.15.4 dissector crash (wnpa-sec-2013-61)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-7.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6336.json"},{"CVE":"CVE-2013-6337","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":["RHSA-2014:0342"],"bugzilla":"1026538","bugzilla_description":"CVE-2013-6337 wireshark: NBAP dissector crash (wnpa-sec-2013-62)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-7.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6337.json"},{"CVE":"CVE-2013-6338","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":["RHSA-2014:0342"],"bugzilla":"1026539","bugzilla_description":"CVE-2013-6338 wireshark: SIP dissector crash (wnpa-sec-2013-63)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-7.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6338.json"},{"CVE":"CVE-2013-6339","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":["RHSA-2014:0342"],"bugzilla":"1026540","bugzilla_description":"CVE-2013-6339 wireshark: ActiveMQ OpenWire dissector large loop (wnpa-sec-2013-64)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-7.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6339.json"},{"CVE":"CVE-2013-6340","severity":"moderate","public_date":"2013-11-01T00:00:00Z","advisories":["RHSA-2014:0342"],"bugzilla":"1026541","bugzilla_description":"CVE-2013-6340 wireshark: TCP dissector crash (wnpa-sec-2013-65)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-7.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6340.json"},{"CVE":"CVE-2013-5717","severity":"low","public_date":"2013-09-10T00:00:00Z","advisories":[],"bugzilla":"1007177","bugzilla_description":"CVE-2013-5717 wireshark: Bluetooth HCI ACL dissector crash (wnpa-sec-2013-54, upstream bug 8827)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5717.json"},{"CVE":"CVE-2013-5718","severity":"low","public_date":"2013-09-10T00:00:00Z","advisories":[],"bugzilla":"1007182","bugzilla_description":"CVE-2013-5718 wireshark: NBAP dissector crash (wnpa-sec-2013-55, upstream bug 9005)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5718.json"},{"CVE":"CVE-2013-5719","severity":"low","public_date":"2013-09-10T00:00:00Z","advisories":[],"bugzilla":"1007185","bugzilla_description":"CVE-2013-5719 wireshark: ASSA R3 dissector crash (wnpa-sec-2013-56, upstream bug 9020)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5719.json"},{"CVE":"CVE-2013-5720","severity":"low","public_date":"2013-09-10T00:00:00Z","advisories":[],"bugzilla":"1007192","bugzilla_description":"CVE-2013-5720 wireshark: RTPS dissector crash (wnpa-sec-2013-57)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5720.json"},{"CVE":"CVE-2013-5721","severity":"low","public_date":"2013-09-10T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"1007197","bugzilla_description":"CVE-2013-5721 wireshark: MQ dissector crash (wnpa-sec-2013-58, upstream bug 9079)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5721.json"},{"CVE":"CVE-2013-5722","severity":"low","public_date":"2013-09-10T00:00:00Z","advisories":[],"bugzilla":"1007201","bugzilla_description":"CVE-2013-5722 wireshark: LDAP dissector crash (wnpa-sec-2013-59)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5722.json"},{"CVE":"CVE-2013-4920","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990155","bugzilla_description":"CVE-2013-4920 wireshark: DoS (application crash) in the P1 dissector (wnpa-sec-2013-42)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4920.json"},{"CVE":"CVE-2013-4921","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990156","bugzilla_description":"CVE-2013-4921 wireshark: Off-by-one (application crash) in the Radiotap dissector (wnpa-sec-2013-43)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4921.json"},{"CVE":"CVE-2013-4922","severity":"moderate","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990157","bugzilla_description":"CVE-2013-4922 wireshark: Double-free in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4922.json"},{"CVE":"CVE-2013-4923","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990160","bugzilla_description":"CVE-2013-4923 wireshark: Memory leak (DoS, memory consumption) in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4923.json"},{"CVE":"CVE-2013-4924","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990163","bugzilla_description":"CVE-2013-4924 wireshark: Assertion failure in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4924.json"},{"CVE":"CVE-2013-4925","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990164","bugzilla_description":"CVE-2013-4925 wireshark: Integer signedness error in the DCOM ISystemActivator dissector (wnpa-sec-2013-44)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4925.json"},{"CVE":"CVE-2013-4926","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990165","bugzilla_description":"CVE-2013-4926 wireshark: DoS in the DCOM ISystemActivator dissector due improper remaining data to process presence check (wnpa-sec-2013-44)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4926.json"},{"CVE":"CVE-2013-4927","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"990166","bugzilla_description":"CVE-2013-4927 wireshark: Integer signedness error in the Bluetooth SDP dissector (wnpa-sec-2013-45)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4927.json"},{"CVE":"CVE-2013-4928","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990167","bugzilla_description":"CVE-2013-4928 wireshark: Integer signedness error in the Bluetooth OBEX dissector (wnpa-sec-2013-46)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4928.json"},{"CVE":"CVE-2013-4929","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990168","bugzilla_description":"CVE-2013-4929 wireshark: DoS (infinite loop) in the DIS dissector (wnpa-sec-2013-47)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4929.json"},{"CVE":"CVE-2013-4930","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":[],"bugzilla":"990169","bugzilla_description":"CVE-2013-4930 wireshark: Assertion failure in the DVB-CI dissector (wnpa-sec-2013-48)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4930.json"},{"CVE":"CVE-2013-4931","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"990170","bugzilla_description":"CVE-2013-4931 wireshark: DoS (infinite loop) in the GSM RR dissector (wnpa-sec-2013-49)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4931.json"},{"CVE":"CVE-2013-4932","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"990172","bugzilla_description":"CVE-2013-4932 wireshark: Multiple array index errors in the GSM A Common dissector (wnpa-sec-2013-50)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4932.json"},{"CVE":"CVE-2013-4933","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"990175","bugzilla_description":"CVE-2013-4933 wireshark: DoS (application crash) in the Netmon file parser (wnpa-sec-2013-51)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4933.json"},{"CVE":"CVE-2013-4934","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"990178","bugzilla_description":"CVE-2013-4934 wireshark: DoS (application crash) in the Netmon file parser (wnpa-sec-2013-51) (A different flaw than CVE-2013-4933)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4934.json"},{"CVE":"CVE-2013-4935","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"990179","bugzilla_description":"CVE-2013-4935 wireshark: DoS (application crash) in the ASN.1 PER dissector (wnpa-sec-2013-52)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4935.json"},{"CVE":"CVE-2013-4936","severity":"low","public_date":"2013-07-26T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"990180","bugzilla_description":"CVE-2013-4936 wireshark: DoS (NULL pointer dereference, crash) in the PROFINET Real-Time dissector (wnpa-sec-2013-53)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4936.json"},{"CVE":"CVE-2013-4074","severity":"low","public_date":"2013-06-07T00:00:00Z","advisories":[],"bugzilla":"972679","bugzilla_description":"CVE-2013-4074 wireshark: DoS (crash) in the CAPWAP dissector (wnpa-sec-2013-32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4074.json"},{"CVE":"CVE-2013-4075","severity":"low","public_date":"2013-06-07T00:00:00Z","advisories":["RHSA-2017:0631"],"bugzilla":"972680","bugzilla_description":"CVE-2013-4075 wireshark: DoS (crash) in the GMR-1 BCCH dissector (wnpa-sec-2013-33)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-25.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4075.json"},{"CVE":"CVE-2013-4076","severity":"moderate","public_date":"2013-06-07T00:00:00Z","advisories":[],"bugzilla":"972681","bugzilla_description":"CVE-2013-4076 wireshark: Invalid free in the PPP dissector (wnpa-sec-2013-34)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4076.json"},{"CVE":"CVE-2013-4077","severity":"moderate","public_date":"2013-06-07T00:00:00Z","advisories":[],"bugzilla":"972682","bugzilla_description":"CVE-2013-4077 wireshark: Array index error in the NBAP dissector (wnpa-sec-2013-35)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4077.json"},{"CVE":"CVE-2013-4078","severity":"low","public_date":"2013-06-07T00:00:00Z","advisories":[],"bugzilla":"972683","bugzilla_description":"CVE-2013-4078 wireshark: DoS (infinite loop) in the RDP dissector (wnpa-sec-2013-36)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4078.json"},{"CVE":"CVE-2013-4079","severity":"low","public_date":"2013-06-07T00:00:00Z","advisories":[],"bugzilla":"972684","bugzilla_description":"CVE-2013-4079 wireshark: DoS (infinite loop, application hang) in the GSM CBCH dissector (wnpa-sec-2013-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4079.json"},{"CVE":"CVE-2013-4080","severity":"low","public_date":"2013-06-07T00:00:00Z","advisories":[],"bugzilla":"972685","bugzilla_description":"CVE-2013-4080 wireshark: DoS (infinite loop, CPU & memory consumption) in the Assa Abloy R3 dissector (wnpa-sec-2013-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4080.json"},{"CVE":"CVE-2013-4081","severity":"low","public_date":"2013-06-07T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"972686","bugzilla_description":"CVE-2013-4081 wireshark: DoS (infinite loop) in the HTTP dissector (wnpa-sec-2013-39)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4081.json"},{"CVE":"CVE-2013-4082","severity":"moderate","public_date":"2013-06-07T00:00:00Z","advisories":[],"bugzilla":"972687","bugzilla_description":"CVE-2013-4082 wireshark: Heap-based buffer overflow in the Ixia IxVeriWave file parser (wnpa-sec-2013-40)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4082.json"},{"CVE":"CVE-2013-4083","severity":"moderate","public_date":"2013-06-07T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"972688","bugzilla_description":"CVE-2013-4083 wireshark: Invalid free in the DCP ETSI dissector (wnpa-sec-2013-41)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4083.json"},{"CVE":"CVE-2013-3562","severity":"low","public_date":"2013-05-17T00:00:00Z","advisories":[],"bugzilla":"965112","bugzilla_description":"CVE-2013-3562 wireshark: DoS (stack overflow, crash) in the Websocket dissector (wnpa-sec-2013-29, upstream #8448, #8499)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3562.json"},{"CVE":"CVE-2013-3560","severity":"low","public_date":"2013-05-17T00:00:00Z","advisories":[],"bugzilla":"965186","bugzilla_description":"CVE-2013-3560 wireshark: DoS (crash) in the MPEG DSM-CC dissector (wnpa-sec-2013-28, upstream #8481)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3560.json"},{"CVE":"CVE-2013-3559","severity":"moderate","public_date":"2013-05-17T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"965190","bugzilla_description":"CVE-2013-3559 wireshark: DoS (crash) in the DCP ETSI dissector (wnpa-sec-2013-27, upstream #8231, #8540, #8541)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3559.json"},{"CVE":"CVE-2013-3558","severity":"low","public_date":"2013-05-17T00:00:00Z","advisories":[],"bugzilla":"965192","bugzilla_description":"CVE-2013-3558 wireshark: DoS (crash) in the PPP CCP dissector (wnpa-sec-2013-26, upstream #8638)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3558.json"},{"CVE":"CVE-2013-3557","severity":"low","public_date":"2013-05-17T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"965193","bugzilla_description":"CVE-2013-3557 wireshark: DoS (crash) in the ASN.1 BER dissector (wnpa-sec-2013-25, upstream #8599)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3557.json"},{"CVE":"CVE-2013-3555","severity":"low","public_date":"2013-05-17T00:00:00Z","advisories":[],"bugzilla":"965194","bugzilla_description":"CVE-2013-3555 wireshark: DoS (crash) in the GTPv2 dissector (wnpa-sec-2013-24, upstream #8493)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3555.json"},{"CVE":"CVE-2013-3556","severity":"low","public_date":"2013-05-17T00:00:00Z","advisories":[],"bugzilla":"966054","bugzilla_description":"CVE-2013-3556 wireshark: DoS (crash) in the ASN.1 BER dissector (wnpa-sec-2013-25, upstream #8599)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3556.json"},{"CVE":"CVE-2013-3561","severity":"low","public_date":"2013-05-17T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"966331","bugzilla_description":"CVE-2013-3561 wireshark: Multiple Denial of Service flaws","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-3561.json"},{"CVE":"CVE-2013-2475","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919129","bugzilla_description":"CVE-2013-2475 wireshark: TCP dissector crash (wnpa-sec-2013-10, upstream bug 8274)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2475.json"},{"CVE":"CVE-2013-2476","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919130","bugzilla_description":"CVE-2013-2476 wireshark: Infinite loop in the HART/IP dissector (wnpa-sec-2013-11, upstream bug 8360)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2476.json"},{"CVE":"CVE-2013-2477","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919131","bugzilla_description":"CVE-2013-2477 wireshark: Crash in the CSN.1 dissector (wnpa-sec-2013-12, upstream bug 8383)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2477.json"},{"CVE":"CVE-2013-2478","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919133","bugzilla_description":"CVE-2013-2478 wireshark: Crash in the MS-MMS dissector (wnpa-sec-2013-13, upstream bug 8382)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2478.json"},{"CVE":"CVE-2013-2479","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919135","bugzilla_description":"CVE-2013-2479 wireshark: Infinite loop in the MPLS Echo dissector (wnpa-sec-2013-14, upstream bug 8039)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2479.json"},{"CVE":"CVE-2013-2480","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919137","bugzilla_description":"CVE-2013-2480 wireshark: Crash in the RTPS and RTPS2 dissectors (wnpa-sec-2013-15, upstream bug 8332)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2480.json"},{"CVE":"CVE-2013-2481","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919139","bugzilla_description":"CVE-2013-2481 wireshark: Crash in the Mount dissector (wnpa-sec-2013-16, upstream bug 8335)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2481.json"},{"CVE":"CVE-2013-2482","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919141","bugzilla_description":"CVE-2013-2482 wireshark: Infinite loop in the AMPQ dissector (wnpa-sec-2013-17, upstream bug 8337)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2482.json"},{"CVE":"CVE-2013-2483","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919142","bugzilla_description":"CVE-2013-2483 wireshark: Divide by zero in the ACN dissector (wnpa-sec-2013-18, upstream bug 8340)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2483.json"},{"CVE":"CVE-2013-2484","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919143","bugzilla_description":"CVE-2013-2484 wireshark: Crash in the CIMD dissector (wnpa-sec-2013-19, upstream bug 8346)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2484.json"},{"CVE":"CVE-2013-2485","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919144","bugzilla_description":"CVE-2013-2485 wireshark: Infinite loop in the FCSP dissector (wnpa-sec-2013-20, upstream bug 8359)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2485.json"},{"CVE":"CVE-2013-2486","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919146","bugzilla_description":"CVE-2013-2486 wireshark: Infinite loop in the RELOAD dissector (wnpa-sec-2013-21, upstream bug 8364) [A different flaw than CVE-2013-2487]","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2486.json"},{"CVE":"CVE-2013-2487","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919147","bugzilla_description":"CVE-2013-2487 wireshark: Infinite loop in the RELOAD dissector (wnpa-sec-2013-21, upstream bug 8364) [A different flaw than CVE-2013-2486]","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2487.json"},{"CVE":"CVE-2013-2488","severity":"low","public_date":"2013-03-06T00:00:00Z","advisories":[],"bugzilla":"919148","bugzilla_description":"CVE-2013-2488 wireshark: Crash in the DTLS dissector (wnpa-sec-2013-22, upstream bug 8380)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2488.json"},{"CVE":"CVE-2013-1572","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906328","bugzilla_description":"CVE-2013-1572 wireshark: Infinite loop in the Slow Protocols dissector (wnpa-sec-2013-01, bug 8036)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1572.json"},{"CVE":"CVE-2013-1573","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906329","bugzilla_description":"CVE-2013-1573 wireshark: Infinite loop in the CSN.1 dissector (wnpa-sec-2013-01, bug 8037)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1573.json"},{"CVE":"CVE-2013-1574","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906330","bugzilla_description":"CVE-2013-1574 wireshark: Infinite loop in the Bluetooth HCI dissector (wnpa-sec-2013-01, bug 8038)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1574.json"},{"CVE":"CVE-2013-1575","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906331","bugzilla_description":"CVE-2013-1575 wireshark: Infinite loop in the R3 dissector (wnpa-sec-2013-01, bug 8040)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1575.json"},{"CVE":"CVE-2013-1576","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906332","bugzilla_description":"CVE-2013-1576 wireshark: Infinite loop in the SDP dissector (wnpa-sec-2013-01, bug 8041)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1576.json"},{"CVE":"CVE-2013-1577","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906333","bugzilla_description":"CVE-2013-1577 wireshark: Infinite loop in the SIP dissector (wnpa-sec-2013-01, bug 8042)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1577.json"},{"CVE":"CVE-2013-1578","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906335","bugzilla_description":"CVE-2013-1578 wireshark: MPLS payload starting with valid-looking ethernet address dissected twice (wnpa-sec-2013-01, bug 8043)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1578.json"},{"CVE":"CVE-2013-1579","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906337","bugzilla_description":"CVE-2013-1579 wireshark: Nested loop (crash) in the  RTPS dissector (wnpa-sec-2013-01, bug 8198)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1579.json"},{"CVE":"CVE-2013-1580","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906339","bugzilla_description":"CVE-2013-1580 wireshark: Infinite loop in the DOCSIS 3.0 CM-STATUS dissector (wnpa-sec-2013-01, bug 8199)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1580.json"},{"CVE":"CVE-2013-1581","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906342","bugzilla_description":"CVE-2013-1581 wireshark: Infinite loop in the DCP-ETSI dissector (wnpa-sec-2013-01, bug 8222)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1581.json"},{"CVE":"CVE-2013-1582","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906343","bugzilla_description":"CVE-2013-1582 wireshark: Infinite loop / crash in the CLNP dissector (wnpa-sec-2013-02, bug 7871)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1582.json"},{"CVE":"CVE-2013-1583","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906344","bugzilla_description":"CVE-2013-1583 wireshark: Invalid read (crash) in the DTN dissector (wnpa-sec-2013-03, bug 7945)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1583.json"},{"CVE":"CVE-2013-1584","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906347","bugzilla_description":"CVE-2013-1584 wireshark: Invalid read (crash) in the DTN dissector (wnpa-sec-2013-03, bug 7945) [A different issue than CVE-2013-1583]","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1584.json"},{"CVE":"CVE-2013-1585","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906348","bugzilla_description":"CVE-2013-1585 wireshark: MS-MMC dissector crash (wnpa-sec-2013-04, bug 8112)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1585.json"},{"CVE":"CVE-2013-1586","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906349","bugzilla_description":"CVE-2013-1586 wireshark: DTLS dissector crash (wnpa-sec-2013-05, bug 8111)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1586.json"},{"CVE":"CVE-2013-1587","severity":"low","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906350","bugzilla_description":"CVE-2013-1587 wireshark: ROHC dissector crash (wnpa-sec-2013-06, bug 7679)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1587.json"},{"CVE":"CVE-2013-1588","severity":"moderate","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906351","bugzilla_description":"CVE-2013-1588 wireshark: DCP-ETSI dissector crash (wnpa-sec-2013-07, bug 8213)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1588.json"},{"CVE":"CVE-2013-1589","severity":"moderate","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906353","bugzilla_description":"CVE-2013-1589 wireshark: Wireshark dissection engine invalid read / crash (wnpa-sec-2013-08, bug 8197)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1589.json"},{"CVE":"CVE-2013-1590","severity":"moderate","public_date":"2013-01-29T00:00:00Z","advisories":[],"bugzilla":"906354","bugzilla_description":"CVE-2013-1590 wireshark: Buffer overflow in the NTLMSSP dissector (wnpa-sec-2013-09)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1590.json"},{"CVE":"CVE-2012-5602","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881701","bugzilla_description":"CVE-2012-5602 CVE-2012-6058 wireshark: DoS (infinite loop) in the ICMPv6 dissector (wnpa-sec-2012-40)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5602.json"},{"CVE":"CVE-2012-6058","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881701","bugzilla_description":"CVE-2012-5602 CVE-2012-6058 wireshark: DoS (infinite loop) in the ICMPv6 dissector (wnpa-sec-2012-40)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6058.json"},{"CVE":"CVE-2012-5601","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881706","bugzilla_description":"CVE-2012-5601 CVE-2012-6055 wireshark: DoS (infinite loop) in the 3GPP2 A11 dissector (wnpa-sec-2012-39)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5601.json"},{"CVE":"CVE-2012-6055","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881706","bugzilla_description":"CVE-2012-5601 CVE-2012-6055 wireshark: DoS (infinite loop) in the 3GPP2 A11 dissector (wnpa-sec-2012-39)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6055.json"},{"CVE":"CVE-2012-5600","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881742","bugzilla_description":"CVE-2012-5600 CVE-2012-6062 wireshark: DoS (infinite loop) in the RTCP dissector (wnpa-sec-2012-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5600.json"},{"CVE":"CVE-2012-6062","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881742","bugzilla_description":"CVE-2012-5600 CVE-2012-6062 wireshark: DoS (infinite loop) in the RTCP dissector (wnpa-sec-2012-38)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6062.json"},{"CVE":"CVE-2012-5599","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881748","bugzilla_description":"CVE-2012-5599 CVE-2012-6061 wireshark: DoS (infinite loop) in the WTP dissector (wnpa-sec-2012-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5599.json"},{"CVE":"CVE-2012-6061","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881748","bugzilla_description":"CVE-2012-5599 CVE-2012-6061 wireshark: DoS (infinite loop) in the WTP dissector (wnpa-sec-2012-37)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6061.json"},{"CVE":"CVE-2012-5598","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881771","bugzilla_description":"CVE-2012-5598 CVE-2012-6060 wireshark: DoS (infinite loop) in the iSCSI dissector (wnpa-sec-2012-36)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5598.json"},{"CVE":"CVE-2012-6060","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881771","bugzilla_description":"CVE-2012-5598 CVE-2012-6060 wireshark: DoS (infinite loop) in the iSCSI dissector (wnpa-sec-2012-36)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6060.json"},{"CVE":"CVE-2012-5597","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"881790","bugzilla_description":"CVE-2012-5597 CVE-2012-6059 wireshark: DoS (crash) in the ISAKMP dissector (wnpa-sec-2012-35)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5597.json"},{"CVE":"CVE-2012-6059","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"881790","bugzilla_description":"CVE-2012-5597 CVE-2012-6059 wireshark: DoS (crash) in the ISAKMP dissector (wnpa-sec-2012-35)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6059.json"},{"CVE":"CVE-2012-5596","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881805","bugzilla_description":"CVE-2012-5596 CVE-2012-6057 wireshark: DoS (infinite loop) in the EIGRP dissector (wnpa-sec-2012-34)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5596.json"},{"CVE":"CVE-2012-6057","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881805","bugzilla_description":"CVE-2012-5596 CVE-2012-6057 wireshark: DoS (infinite loop) in the EIGRP dissector (wnpa-sec-2012-34)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6057.json"},{"CVE":"CVE-2012-5595","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881809","bugzilla_description":"CVE-2012-5595 CVE-2012-6056 wireshark: DoS (infinite loop) in the SCTP dissector (wnpa-sec-2012-33)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5595.json"},{"CVE":"CVE-2012-6056","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":["RHSA-2013:1569","RHSA-2014:0341"],"bugzilla":"881809","bugzilla_description":"CVE-2012-5595 CVE-2012-6056 wireshark: DoS (infinite loop) in the SCTP dissector (wnpa-sec-2012-33)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6056.json"},{"CVE":"CVE-2012-5594","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881816","bugzilla_description":"CVE-2012-5594 CVE-2012-6054 wireshark: DoS (infinite loop) in the sFlow dissector (wnpa-sec-2012-32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5594.json"},{"CVE":"CVE-2012-6054","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881816","bugzilla_description":"CVE-2012-5594 CVE-2012-6054 wireshark: DoS (infinite loop) in the sFlow dissector (wnpa-sec-2012-32)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6054.json"},{"CVE":"CVE-2012-5593","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881822","bugzilla_description":"CVE-2012-5593 CVE-2012-6053 wireshark: DoS (infinite loop) in the USB dissector (wnpa-sec-2012-31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5593.json"},{"CVE":"CVE-2012-6053","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881822","bugzilla_description":"CVE-2012-5593 CVE-2012-6053 wireshark: DoS (infinite loop) in the USB dissector (wnpa-sec-2012-31)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6053.json"},{"CVE":"CVE-2012-5592","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881855","bugzilla_description":"CVE-2012-5592 CVE-2012-6052 wireshark: pcap-ng hostname disclosure (wnpa-sec-2012-30)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5592.json"},{"CVE":"CVE-2012-6052","severity":"low","public_date":"2012-11-28T00:00:00Z","advisories":[],"bugzilla":"881855","bugzilla_description":"CVE-2012-5592 CVE-2012-6052 wireshark: pcap-ng hostname disclosure (wnpa-sec-2012-30)","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6052.json"},{"CVE":"CVE-2012-5237","severity":"low","public_date":"2012-10-02T00:00:00Z","advisories":[],"bugzilla":"862504","bugzilla_description":"CVE-2012-5237 wireshark: Infinite loop in the HSRP dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5237.json"},{"CVE":"CVE-2012-5238","severity":"low","public_date":"2012-10-02T00:00:00Z","advisories":[],"bugzilla":"862507","bugzilla_description":"CVE-2012-5238 wireshark: Application abort due to wrong variable type in PPP dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5238.json"},{"CVE":"CVE-2012-5239","severity":"low","public_date":"2012-10-02T00:00:00Z","advisories":[],"bugzilla":"862508","bugzilla_description":"CVE-2012-5239 wireshark: Infinite loop in the DRDA dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5239.json"},{"CVE":"CVE-2012-5240","severity":"moderate","public_date":"2012-10-02T00:00:00Z","advisories":[],"bugzilla":"862510","bugzilla_description":"CVE-2012-5240 wireshark: Stack-based buffer overflow in the LDP dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5240.json"},{"CVE":"CVE-2012-3548","severity":"low","public_date":"2012-08-21T00:00:00Z","advisories":[],"bugzilla":"849926","bugzilla_description":"CVE-2012-3548 wireshark (X >= 1.6.8): DoS (excessive CPU use and infinite loop) in DRDA dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3548.json"},{"CVE":"CVE-2012-4285","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:0125","RHSA-2013:1569"],"bugzilla":"848541","bugzilla_description":"CVE-2012-4285 wireshark: crash due to zero division in DCP ETSI dissector (wnpa-sec-2012-13)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4285.json"},{"CVE":"CVE-2012-4287","severity":"moderate","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848544","bugzilla_description":"CVE-2012-4287 wireshark: DoS via excessive CPU consumption in MongoDB dissector (wnpa-sec-2012-14)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4287.json"},{"CVE":"CVE-2012-4288","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"848548","bugzilla_description":"CVE-2012-4288 wireshark: DoS via excessive resource consumption in XTP dissector (wnpa-sec-2012-15)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4288.json"},{"CVE":"CVE-2012-4294","severity":"moderate","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848554","bugzilla_description":"CVE-2012-4294 CVE-2012-4295 wireshark: buffer overflow in ERF dissector (wnpa-sec-2012-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4294.json"},{"CVE":"CVE-2012-4295","severity":"moderate","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848554","bugzilla_description":"CVE-2012-4294 CVE-2012-4295 wireshark: buffer overflow in ERF dissector (wnpa-sec-2012-16)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4295.json"},{"CVE":"CVE-2012-4289","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:0125","RHSA-2013:1569"],"bugzilla":"848561","bugzilla_description":"CVE-2012-4289 wireshark: DoS via excessive CPU consumption in AFP dissector (wnpa-sec-2012-17)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4289.json"},{"CVE":"CVE-2012-4296","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848565","bugzilla_description":"CVE-2012-4296 wireshark: DoS via excessive CPU consumption in RTPS2 dissector (wnpa-sec-2012-18)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4296.json"},{"CVE":"CVE-2012-4297","severity":"moderate","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848568","bugzilla_description":"CVE-2012-4297 wireshark: buffer overflow in GSM RLC MAC dissector (wnpa-sec-2012-19)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4297.json"},{"CVE":"CVE-2012-4291","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:0125","RHSA-2013:1569"],"bugzilla":"848572","bugzilla_description":"CVE-2012-4291 wireshark: DoS via excessive system resource consumption in CIP dissector (wnpa-sec-2012-20)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4291.json"},{"CVE":"CVE-2012-4292","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"848575","bugzilla_description":"CVE-2012-4292 wireshark: crash in STUN dissector (wnpa-sec-2012-21)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4292.json"},{"CVE":"CVE-2012-4293","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848577","bugzilla_description":"CVE-2012-4293 wireshark: premature exit in EtherCAT Mailbox dissector (wnpa-sec-2012-22)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4293.json"},{"CVE":"CVE-2012-4290","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":["RHSA-2013:0125","RHSA-2013:1569"],"bugzilla":"848578","bugzilla_description":"CVE-2012-4290 wireshark: DoS via excessive CPU consumption in CTDB dissector (wnpa-sec-2012-23)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6","wireshark-0:1.0.15-5.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4290.json"},{"CVE":"CVE-2012-4286","severity":"low","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848584","bugzilla_description":"CVE-2012-4286 wireshark: crash due to zero division in pcnap-ng file parser (wnpa-sec-2012-24)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4286.json"},{"CVE":"CVE-2012-4298","severity":"moderate","public_date":"2012-08-15T00:00:00Z","advisories":[],"bugzilla":"848588","bugzilla_description":"CVE-2012-4298 wireshark: buffer overflow in Ixia IxVeriWave file parser (wnpa-sec-2012-25)","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4298.json"},{"CVE":"CVE-2012-4048","severity":"moderate","public_date":"2012-07-22T00:00:00Z","advisories":[],"bugzilla":"842516","bugzilla_description":"CVE-2012-4048 wireshark: Out-of-bounds memory write in PPP dissector","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4048.json"},{"CVE":"CVE-2012-4049","severity":"low","public_date":"2012-07-22T00:00:00Z","advisories":[],"bugzilla":"842518","bugzilla_description":"CVE-2012-4049 wireshark: Excessive CPU usage in NFS dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4049.json"},{"CVE":"CVE-2012-2392","severity":"low","public_date":"2012-05-21T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"824411","bugzilla_description":"CVE-2012-2392 wireshark: Infinite and large loops in ANSI MAP, ASF, IEEE 802.11, IEEE 802.3, and LTP dissectors (wnpa-sec-2012-08)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2392.json"},{"CVE":"CVE-2012-2393","severity":"low","public_date":"2012-05-21T00:00:00Z","advisories":[],"bugzilla":"824413","bugzilla_description":"CVE-2012-2393 wireshark: Memory allocation flaw in the DIAMETER dissector (wnpa-sec-2012-09)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2393.json"},{"CVE":"CVE-2012-2394","severity":"low","public_date":"2012-05-21T00:00:00Z","advisories":[],"bugzilla":"824419","bugzilla_description":"CVE-2012-2394 wireshark: Denial of service (crash) due memory alignment problem on SPARC and Itanium processors (wnpa-sec-2012-10)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2394.json"},{"CVE":"CVE-2012-3825","severity":"low","public_date":"2012-04-16T00:00:00Z","advisories":["RHSA-2013:1569"],"bugzilla":"836960","bugzilla_description":"CVE-2012-3825 wireshark: Integer overflows in BACapp and Bluetooth HCI dissectors, leading to DoS (wnpa-sec-2012-08)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["wireshark-0:1.8.10-4.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3825.json"},{"CVE":"CVE-2012-3826","severity":"low","public_date":"2012-04-16T00:00:00Z","advisories":[],"bugzilla":"836961","bugzilla_description":"CVE-2012-3826 wireshark: Integer overflows in the R3 dissector, leading to DoS (wnpa-sec-2012-08)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3826.json"},{"CVE":"CVE-2012-1596","severity":"low","public_date":"2012-02-11T00:00:00Z","advisories":[],"bugzilla":"807661","bugzilla_description":"CVE-2012-1596 wireshark: MP2T dissector memory allocation flaw","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1596.json"},{"CVE":"CVE-2012-1593","severity":"low","public_date":"2012-02-10T00:00:00Z","advisories":[],"bugzilla":"807611","bugzilla_description":"CVE-2012-1593 wireshark: NULL pointer dereference in ANSI A dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1593.json"},{"CVE":"CVE-2012-1594","severity":"low","public_date":"2012-02-08T00:00:00Z","advisories":[],"bugzilla":"807624","bugzilla_description":"CVE-2012-1594 wireshark: Infinite loop in the IEEE 802.11 dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1594.json"},{"CVE":"CVE-2012-1595","severity":"moderate","public_date":"2012-02-07T00:00:00Z","advisories":["RHSA-2012:0509"],"bugzilla":"807644","bugzilla_description":"CVE-2012-1595 wireshark: Heap-based buffer overflow when reading ERF packets from pcap/pcap-ng trace files","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1595.json"},{"CVE":"CVE-2012-0041","severity":"low","public_date":"2012-01-10T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"773726","bugzilla_description":"CVE-2012-0041 wireshark: multiple file parser vulnerabilities (wnpa-sec-2012-01)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0041.json"},{"CVE":"CVE-2012-0042","severity":"low","public_date":"2012-01-10T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"773728","bugzilla_description":"CVE-2012-0042 wireshark: NULL pointer vulnerabilities (wnpa-sec-2012-02)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0042.json"},{"CVE":"CVE-2012-0043","severity":"moderate","public_date":"2012-01-10T00:00:00Z","advisories":[],"bugzilla":"773729","bugzilla_description":"CVE-2012-0043 wireshark: RLC dissector buffer overflow (wnpa-sec-2012-03)","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0043.json"},{"CVE":"CVE-2012-0066","severity":"low","public_date":"2012-01-10T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"783360","bugzilla_description":"CVE-2012-0066 Wireshark: Dos via large buffer allocation request","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0066.json"},{"CVE":"CVE-2012-0067","severity":"low","public_date":"2012-01-10T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"783363","bugzilla_description":"CVE-2012-0067 Wireshark: Dos due to integer overflow in IPTrace capture format parser","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0067.json"},{"CVE":"CVE-2012-0068","severity":"moderate","public_date":"2012-01-10T00:00:00Z","advisories":[],"bugzilla":"783370","bugzilla_description":"CVE-2012-0068 Wireshark: Heap-buffer underflow when parsing LANalyzer packet capture files","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0068.json"},{"CVE":"CVE-2011-4102","severity":"moderate","public_date":"2011-10-21T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"750648","bugzilla_description":"CVE-2011-4102 wireshark: buffer overflow in the ERF file reader","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4102.json"},{"CVE":"CVE-2011-4101","severity":"low","public_date":"2011-10-20T00:00:00Z","advisories":[],"bugzilla":"750645","bugzilla_description":"CVE-2011-4101 wireshark: NULL pointer dereference in Infiniband dissector can cause a crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4101.json"},{"CVE":"CVE-2011-4100","severity":"low","public_date":"2011-09-16T00:00:00Z","advisories":[],"bugzilla":"750643","bugzilla_description":"CVE-2011-4100 wireshark: uninitialized variable in the CSN.1 dissector can cause a crash","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4100.json"},{"CVE":"CVE-2011-3266","severity":"low","public_date":"2011-07-28T00:00:00Z","advisories":[],"bugzilla":"732947","bugzilla_description":"CVE-2011-3266 Wireshark proto_tree_add_item DoS","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3266.json"},{"CVE":"CVE-2011-3360","severity":"low","public_date":"2011-07-28T00:00:00Z","advisories":[],"bugzilla":"737784","bugzilla_description":"CVE-2011-3360 Wireshark: Lua script execution vulnerability","cvss_score":4.1,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3360.json"},{"CVE":"CVE-2011-2698","severity":"low","public_date":"2011-06-20T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"723215","bugzilla_description":"CVE-2011-2698 wireshark: Infinite loop in the ANSI A Interface (IS-634/IOS) dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2698.json"},{"CVE":"CVE-2011-1957","severity":"low","public_date":"2011-05-31T00:00:00Z","advisories":["RHSA-2012:0509"],"bugzilla":"710021","bugzilla_description":"CVE-2011-1957 wireshark: Infinite loop in the DICOM dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1957.json"},{"CVE":"CVE-2011-1959","severity":"low","public_date":"2011-05-31T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"710039","bugzilla_description":"CVE-2011-1959 wireshark: Stack-based buffer over-read from tvbuff buffer when reading snoop capture files","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1959.json"},{"CVE":"CVE-2011-2174","severity":"low","public_date":"2011-05-31T00:00:00Z","advisories":["RHSA-2012:0509"],"bugzilla":"710097","bugzilla_description":"CVE-2011-2174 wireshark: Double-free flaw by uncompressing of a zlib compressed packet","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2174.json"},{"CVE":"CVE-2011-2175","severity":"low","public_date":"2011-05-31T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"710109","bugzilla_description":"CVE-2011-2175 wireshark: Heap-based buffer over-read in Visual Networks dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2175.json"},{"CVE":"CVE-2011-1958","severity":"low","public_date":"2011-05-31T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2013:0125"],"bugzilla":"710184","bugzilla_description":"CVE-2011-1958 wireshark (64bit): NULL pointer dereference by processing of a corrupted Diameter dictionary file","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["wireshark-0:1.0.15-5.el5","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1958.json"},{"CVE":"CVE-2011-2597","severity":"low","public_date":"2011-05-31T00:00:00Z","advisories":["RHSA-2012:0509"],"bugzilla":"719753","bugzilla_description":"CVE-2011-2597 wireshark: infinite loop DoS in lucent/ascend file parser","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2597.json"},{"CVE":"CVE-2011-1590","severity":"moderate","public_date":"2011-04-15T00:00:00Z","advisories":["RHSA-2012:0509"],"bugzilla":"697741","bugzilla_description":"CVE-2011-1590 Wireshark: Use-after-free causes heap-based buffer overflow in X.509if dissector","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1590.json"},{"CVE":"CVE-2011-0024","severity":"moderate","public_date":"2011-03-21T00:00:00Z","advisories":["RHSA-2011:0370"],"bugzilla":"671331","bugzilla_description":"CVE-2011-0024 wireshark: heap-based buffer overflow in wireshark < 1.2 when reading malformed capture files","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["wireshark-0:1.0.15-2.el4","wireshark-0:1.0.15-1.el5_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0024.json"},{"CVE":"CVE-2011-1139","severity":"low","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0370","RHSA-2011:0369"],"bugzilla":"681748","bugzilla_description":"CVE-2011-1139 Wireshark: Denial Of Service (application crash) via a pcap-ng file that contains a large packet-length field","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.2.15-1.el6_0.1","wireshark-0:1.0.15-2.el4","wireshark-0:1.0.15-1.el5_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1139.json"},{"CVE":"CVE-2011-1138","severity":"low","public_date":"2011-03-01T00:00:00Z","advisories":[],"bugzilla":"681753","bugzilla_description":"CVE-2011-1138 Wireshark: Off-by-one error in the dissect_6lowpan_iphc function causes application crash (Denial Of Service)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-193","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1138.json"},{"CVE":"CVE-2011-1140","severity":"low","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0370","RHSA-2011:0369"],"bugzilla":"681754","bugzilla_description":"CVE-2011-1140 Wireshark: Multiple stack consumption vulnerabilities caused DoS via crafted SMB or CLDAP packet","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.2.15-1.el6_0.1","wireshark-0:1.0.15-2.el4","wireshark-0:1.0.15-1.el5_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1140.json"},{"CVE":"CVE-2011-1141","severity":"low","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2011:0370","RHSA-2011:0369"],"bugzilla":"681756","bugzilla_description":"CVE-2011-1141 Wireshark: Malformed LDAP filter string causes Denial of Service via excessive memory consumption","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.2.15-1.el6_0.1","wireshark-0:1.0.15-2.el4","wireshark-0:1.0.15-1.el5_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1141.json"},{"CVE":"CVE-2011-1142","severity":"low","public_date":"2011-03-01T00:00:00Z","advisories":[],"bugzilla":"681758","bugzilla_description":"CVE-2011-1142 Wireshark: Stack consumption vulnerability in BER dissector can cause DoS","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1142.json"},{"CVE":"CVE-2011-1143","severity":"low","public_date":"2011-03-01T00:00:00Z","advisories":["RHSA-2012:0509","RHSA-2011:0370"],"bugzilla":"681760","bugzilla_description":"CVE-2011-1143 Wireshark: Null pointer dereference causing application crash when reading malformed pcap file","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["wireshark-0:1.0.15-2.el4","wireshark-0:1.0.15-1.el5_6.4","wireshark-0:1.2.15-2.el6_2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1143.json"},{"CVE":"CVE-2011-0713","severity":"moderate","public_date":"2011-02-16T00:00:00Z","advisories":["RHSA-2011:0369"],"bugzilla":"678198","bugzilla_description":"CVE-2011-0713 Wireshark: heap-based buffer overflow when reading malformed Nokia DCT3 phone signalling traces","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["wireshark-0:1.2.15-1.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0713.json"},{"CVE":"CVE-2011-0538","severity":"low","public_date":"2011-02-03T00:00:00Z","advisories":["RHSA-2011:0370","RHSA-2011:0369"],"bugzilla":"676232","bugzilla_description":"CVE-2011-0538 Wireshark: memory corruption when reading a malformed pcap file (upstream bug #5652)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.2.15-1.el6_0.1","wireshark-0:1.0.15-2.el4","wireshark-0:1.0.15-1.el5_6.4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0538.json"},{"CVE":"CVE-2011-0444","severity":"moderate","public_date":"2011-01-11T00:00:00Z","advisories":["RHSA-2011:0369"],"bugzilla":"669441","bugzilla_description":"CVE-2011-0444 wireshark: buffer overflow in MAC-LTE disector (upstream bug #5530)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P/","CWE":null,"affected_packages":["wireshark-0:1.2.15-1.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0444.json"},{"CVE":"CVE-2011-0445","severity":"moderate","public_date":"2011-01-11T00:00:00Z","advisories":[],"bugzilla":"669443","bugzilla_description":"CVE-2011-0445 wireshark: DoS via crafted packets to ASN.1 BER dissector (upstream bug #5537)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0445.json"},{"CVE":"CVE-2010-4538","severity":"moderate","public_date":"2010-12-31T00:00:00Z","advisories":["RHSA-2011:0013"],"bugzilla":"666894","bugzilla_description":"CVE-2010-4538 Wireshark: Stack-based array index error in ENTTEC dissector (upstream bug #5539)","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-1.el4_8.3","wireshark-0:1.0.15-1.el5_5.3","wireshark-0:1.2.13-1.el6_0.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4538.json"},{"CVE":"CVE-2010-4301","severity":"low","public_date":"2010-11-18T00:00:00Z","advisories":[],"bugzilla":"656437","bugzilla_description":"CVE-2010-4301 Wireshark: Infinite loop in Zigbee ZCL dissector","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P/","CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4301.json"},{"CVE":"CVE-2010-4300","severity":"moderate","public_date":"2010-11-18T00:00:00Z","advisories":["RHSA-2010:0924"],"bugzilla":"656456","bugzilla_description":"CVE-2010-4300 Wireshark: Heap-based buffer overflow in LDSS dissector","cvss_score":4.9,"cvss_scoring_vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["wireshark-0:1.2.13-1.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4300.json"},{"CVE":"CVE-2010-3445","severity":"low","public_date":"2010-09-13T00:00:00Z","advisories":["RHSA-2010:0924","RHSA-2011:0370"],"bugzilla":"639486","bugzilla_description":"CVE-2010-3445 wireshark: stack overflow in BER dissector","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-2.el4","wireshark-0:1.0.15-1.el5_6.4","wireshark-0:1.2.13-1.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3445.json"},{"CVE":"CVE-2010-2283","severity":"low","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0625"],"bugzilla":"604290","bugzilla_description":"CVE-2010-2283 wireshark: SMB dissector NULL pointer dereference","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["wireshark-0:1.0.15-1.el4_8.1","wireshark-0:1.0.15-1.el5_5.1","wireshark-0:1.0.15-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2283.json"},{"CVE":"CVE-2010-2284","severity":"low","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0625"],"bugzilla":"604292","bugzilla_description":"CVE-2010-2284 wireshark: ASN.1 BER dissector stack overrun","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-1.el4_8.1","wireshark-0:1.0.15-1.el5_5.1","wireshark-0:1.0.15-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2284.json"},{"CVE":"CVE-2010-2285","severity":null,"public_date":"2010-06-09T00:00:00Z","advisories":[],"bugzilla":"604299","bugzilla_description":"CVE-2010-2285 wireshark: SMB PIPE dissector NULL pointer dereference","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2285.json"},{"CVE":"CVE-2010-2286","severity":"low","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0625"],"bugzilla":"604302","bugzilla_description":"CVE-2010-2286 wireshark: SigComp UDVM dissector infinite loop","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-835","affected_packages":["wireshark-0:1.0.15-1.el4_8.1","wireshark-0:1.0.15-1.el5_5.1","wireshark-0:1.0.15-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2286.json"},{"CVE":"CVE-2010-2287","severity":"moderate","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0625"],"bugzilla":"604308","bugzilla_description":"CVE-2010-2995 wireshark: SigComp UDVM dissector buffer overruns","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-1.el4_8.1","wireshark-0:1.0.15-1.el5_5.1","wireshark-0:1.0.15-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2287.json"},{"CVE":"CVE-2010-2995","severity":"moderate","public_date":"2010-06-09T00:00:00Z","advisories":["RHSA-2010:0625"],"bugzilla":"604308","bugzilla_description":"CVE-2010-2995 wireshark: SigComp UDVM dissector buffer overruns","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-1.el4_8.1","wireshark-0:1.0.15-1.el5_5.1","wireshark-0:1.0.15-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2995.json"},{"CVE":"CVE-2010-1455","severity":"low","public_date":"2010-05-05T00:00:00Z","advisories":["RHSA-2010:0625"],"bugzilla":"590613","bugzilla_description":"CVE-2010-1455 wireshark: DOCSIS dissector crash","cvss_score":1.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.15-1.el4_8.1","wireshark-0:1.0.15-1.el5_5.1","wireshark-0:1.0.15-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1455.json"},{"CVE":"CVE-2010-0304","severity":"moderate","public_date":"2010-01-27T00:00:00Z","advisories":["RHSA-2010:0360"],"bugzilla":"559793","bugzilla_description":"CVE-2010-0304 wireshark: crash in LWRES dissector","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.11-1.el5_5.5","wireshark-0:1.0.11-EL3.6","wireshark-0:1.0.11-1.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0304.json"},{"CVE":"CVE-2009-4377","severity":"moderate","public_date":"2009-12-17T00:00:00Z","advisories":["RHSA-2010:0360"],"bugzilla":"549578","bugzilla_description":"CVE-2009-4377 wireshark: invalid pointer dereference in SMB/SMB2 dissectors","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.11-1.el5_5.5","wireshark-0:1.0.11-EL3.6","wireshark-0:1.0.11-1.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4377.json"},{"CVE":"CVE-2009-3550","severity":"low","public_date":"2009-10-27T00:00:00Z","advisories":["RHSA-2010:0360"],"bugzilla":"531260","bugzilla_description":"CVE-2009-3550 Wireshark: NULL pointer dereference in the DCERPC over SMB packet disassembly","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-476","affected_packages":["wireshark-0:1.0.11-1.el5_5.5","wireshark-0:1.0.11-EL3.6","wireshark-0:1.0.11-1.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3550.json"},{"CVE":"CVE-2009-3829","severity":"low","public_date":"2009-10-05T00:00:00Z","advisories":["RHSA-2010:0360"],"bugzilla":"532479","bugzilla_description":"CVE-2009-3829 wireshark: unsigned integer wrap vulnerability in ERF reader (VU#676492)","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.11-1.el5_5.5","wireshark-0:1.0.11-EL3.6","wireshark-0:1.0.11-1.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3829.json"},{"CVE":"CVE-2009-2562","severity":"moderate","public_date":"2009-07-20T00:00:00Z","advisories":["RHSA-2010:0360"],"bugzilla":"512987","bugzilla_description":"CVE-2009-2562 Wireshark: Integer overflow in the AFS dissector","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190","affected_packages":["wireshark-0:1.0.11-1.el5_5.5","wireshark-0:1.0.11-EL3.6","wireshark-0:1.0.11-1.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2562.json"},{"CVE":"CVE-2009-2563","severity":"low","public_date":"2009-07-20T00:00:00Z","advisories":["RHSA-2010:0360"],"bugzilla":"512992","bugzilla_description":"CVE-2009-2563 Wireshark: Null-ptr dereference in the InfiniBand dissector","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.11-1.el5_5.5","wireshark-0:1.0.11-EL3.6","wireshark-0:1.0.11-1.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2563.json"},{"CVE":"CVE-2009-2560","severity":"low","public_date":"2009-07-20T00:00:00Z","advisories":["RHSA-2010:0360"],"bugzilla":"513008","bugzilla_description":"CVE-2009-2560 Wireshark: various flaws in a) RADIUS, b) Bluetooth L2CAP, c) MIOP dissectors (DoS)","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.11-1.el5_5.5","wireshark-0:1.0.11-EL3.6","wireshark-0:1.0.11-1.el4_8.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2560.json"},{"CVE":"CVE-2009-1829","severity":"low","public_date":"2009-05-21T00:00:00Z","advisories":["RHSA-2009:1100"],"bugzilla":"501929","bugzilla_description":"CVE-2009-1829 wireshark: PCNFSD dissector crash","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.8-1.el4_8.1","wireshark-0:1.0.8-1.el5_3.1","wireshark-0:1.0.8-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1829.json"},{"CVE":"CVE-2009-1268","severity":"low","public_date":"2009-04-08T00:00:00Z","advisories":["RHSA-2009:1100"],"bugzilla":"495119","bugzilla_description":"CVE-2009-1268 Wireshark CHAP dissector crash","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.8-1.el4_8.1","wireshark-0:1.0.8-1.el5_3.1","wireshark-0:1.0.8-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1268.json"},{"CVE":"CVE-2009-1269","severity":"low","public_date":"2009-04-08T00:00:00Z","advisories":["RHSA-2009:1100"],"bugzilla":"495121","bugzilla_description":"CVE-2009-1269 Wireshark Tektronix .rf5 file crash","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.8-1.el4_8.1","wireshark-0:1.0.8-1.el5_3.1","wireshark-0:1.0.8-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1269.json"},{"CVE":"CVE-2009-1210","severity":"moderate","public_date":"2009-03-30T00:00:00Z","advisories":["RHSA-2009:1100"],"bugzilla":"493973","bugzilla_description":"CVE-2009-1210 wireshark: format string in PROFINET dissector","cvss_score":5.8,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.8-1.el4_8.1","wireshark-0:1.0.8-1.el5_3.1","wireshark-0:1.0.8-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1210.json"},{"CVE":"CVE-2009-0599","severity":"moderate","public_date":"2009-02-06T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"485888","bugzilla_description":"CVE-2009-0599 wireshark: buffer overflows in NetScreen snoop file reader","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0599.json"},{"CVE":"CVE-2009-0600","severity":"low","public_date":"2009-02-06T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"485889","bugzilla_description":"CVE-2009-0600 wireshark: denial of service (application crash) via a crafted Tektronix K12 text capture file","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0600.json"},{"CVE":"CVE-2008-6472","severity":"low","public_date":"2008-12-08T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"490370","bugzilla_description":"CVE-2008-6472 wireshark: DoS vulnerability in WLCCP dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-6472.json"},{"CVE":"CVE-2008-5285","severity":"low","public_date":"2008-11-22T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"472737","bugzilla_description":"CVE-2008-5285 wireshark: DoS (infinite loop) in SMTP dissector via large SMTP request","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5285.json"},{"CVE":"CVE-2008-4681","severity":"low","public_date":"2008-10-20T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"468167","bugzilla_description":"CVE-2008-4681 wireshark: DoS (app crash or abort) in Bluetooth RFCOMM dissector via unknown packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4681.json"},{"CVE":"CVE-2008-4680","severity":"low","public_date":"2008-10-01T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"468166","bugzilla_description":"CVE-2008-4680 wireshark: DoS (app crash or abort) via malformed USB Request Block (URB).","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4680.json"},{"CVE":"CVE-2008-4682","severity":"low","public_date":"2008-10-01T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"468169","bugzilla_description":"CVE-2008-4682 wireshark: DoS (app abort) via a malformed  .ncf file with an unknown/unexpected packet type","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4682.json"},{"CVE":"CVE-2008-4685","severity":"low","public_date":"2008-09-13T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"468175","bugzilla_description":"CVE-2008-4685 wireshark: DoS (app crash or abort) in Q.931 dissector via certain packets","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4685.json"},{"CVE":"CVE-2008-3146","severity":"moderate","public_date":"2008-09-03T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"461242","bugzilla_description":"CVE-2008-3146 wireshark: multiple buffer overflows in NCP dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3146.json"},{"CVE":"CVE-2008-3932","severity":"low","public_date":"2008-09-03T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"461243","bugzilla_description":"CVE-2008-3932 wireshark: infinite loop in the NCP dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3932.json"},{"CVE":"CVE-2008-3933","severity":"low","public_date":"2008-09-03T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"461244","bugzilla_description":"CVE-2008-3933 wireshark: crash triggered by zlib-compressed packet data","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3933.json"},{"CVE":"CVE-2008-3934","severity":"low","public_date":"2008-09-03T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"461245","bugzilla_description":"CVE-2008-3934 wireshark: crash via crafted Tektronix .rf5 file","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3934.json"},{"CVE":"CVE-2008-3145","severity":"low","public_date":"2008-07-10T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"454984","bugzilla_description":"CVE-2008-3145 wireshark: crash in the packet reassembling","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3145.json"},{"CVE":"CVE-2008-3137","severity":"low","public_date":"2008-06-30T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"454970","bugzilla_description":"CVE-2008-3137 wireshark: crash in the GSM SMS dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3137.json"},{"CVE":"CVE-2008-3138","severity":"low","public_date":"2008-06-30T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"454971","bugzilla_description":"CVE-2008-3138 wireshark: unexpected exit in the PANA and KISMET dissectors","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3138.json"},{"CVE":"CVE-2008-3141","severity":"low","public_date":"2008-06-30T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"454975","bugzilla_description":"CVE-2008-3141 wireshark: memory disclosure in the RMI dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3141.json"},{"CVE":"CVE-2008-4684","severity":"low","public_date":"2008-05-16T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"468174","bugzilla_description":"CVE-2008-4684 wireshark: DoS (app crash) via certain series of packets by enabling the (1) PRP or (2) MATE post dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4684.json"},{"CVE":"CVE-2008-1563","severity":"low","public_date":"2008-03-28T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"439943","bugzilla_description":"CVE-2008-1563 wireshark: crash in SCCP dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1563.json"},{"CVE":"CVE-2008-1561","severity":"low","public_date":"2008-03-28T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"440014","bugzilla_description":"CVE-2008-1561 wireshark: crash in X.509sat and Roofnet dissectors","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1561.json"},{"CVE":"CVE-2008-1562","severity":"low","public_date":"2008-03-28T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"440015","bugzilla_description":"CVE-2008-1562 wireshark: crash in LDAP dissector","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1562.json"},{"CVE":"CVE-2007-3393","severity":"low","public_date":"2007-05-26T00:00:00Z","advisories":["RHSA-2007:0709","RHSA-2008:0059","RHSA-2007:0710"],"bugzilla":"246221","bugzilla_description":"CVE-2007-3393 Wireshark corrupts the stack when inspecting BOOTP traffic","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.6-1.el5","wireshark-0:0.99.6-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3393.json"},{"CVE":"CVE-2008-4683","severity":"moderate","public_date":"2007-04-04T00:00:00Z","advisories":["RHSA-2009:0313"],"bugzilla":"468171","bugzilla_description":"CVE-2008-4683 wireshark: DoS (app crash or abort) in Bluetooth ACL dissector  via a packet with an invalid length","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.6-EL3.3","wireshark-0:1.0.6-2.el4_7","wireshark-0:1.0.6-2.el5_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-4683.json"},{"CVE":"CVE-2007-3391","severity":"low","public_date":"2007-03-10T00:00:00Z","advisories":["RHSA-2007:0709","RHSA-2008:0059","RHSA-2007:0710"],"bugzilla":"245797","bugzilla_description":"CVE-2007-3391 Wireshark loops infinitely when inspecting DCP ETSI traffic","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.6-1.el5","wireshark-0:0.99.6-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3391.json"},{"CVE":"CVE-2007-3390","severity":"low","public_date":"2007-03-05T00:00:00Z","advisories":["RHSA-2007:0709","RHSA-2008:0059","RHSA-2007:0710"],"bugzilla":"246225","bugzilla_description":"CVE-2007-3390 Wireshark crashes when inspecting iSeries traffic","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.6-1.el5","wireshark-0:0.99.6-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3390.json"},{"CVE":"CVE-2008-1070","severity":"low","public_date":"2007-02-27T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"435481","bugzilla_description":"CVE-2008-1070 wireshark: SCTP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1070.json"},{"CVE":"CVE-2008-1071","severity":"low","public_date":"2007-02-27T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"435482","bugzilla_description":"CVE-2008-1071 wireshark: SNMP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1071.json"},{"CVE":"CVE-2008-1072","severity":"low","public_date":"2007-02-27T00:00:00Z","advisories":["RHSA-2008:0890"],"bugzilla":"435483","bugzilla_description":"CVE-2008-1072 wireshark: TFTP dissector crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:1.0.3-3.el4_7","wireshark-0:1.0.3-4.el5_2","wireshark-0:1.0.3-EL3.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1072.json"},{"CVE":"CVE-2007-3389","severity":"low","public_date":"2007-02-22T00:00:00Z","advisories":["RHSA-2007:0709","RHSA-2008:0059","RHSA-2007:0710"],"bugzilla":"245796","bugzilla_description":"CVE-2007-3389 Wireshark crashes when inspecting HTTP traffic","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.6-1.el5","wireshark-0:0.99.6-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3389.json"},{"CVE":"CVE-2007-3392","severity":"low","public_date":"2007-02-17T00:00:00Z","advisories":["RHSA-2007:0709","RHSA-2008:0059","RHSA-2007:0710"],"bugzilla":"246229","bugzilla_description":"CVE-2007-3392 Wireshark crashes when inspecting MMS traffic","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.6-1.el5","wireshark-0:0.99.6-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3392.json"},{"CVE":"CVE-2007-0456","severity":"low","public_date":"2007-02-01T00:00:00Z","advisories":["RHSA-2007:0066"],"bugzilla":"227140","bugzilla_description":"CVE-2007-0456 Multiple Wireshark issues (CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.5-1.el5","wireshark-0:0.99.5-EL3.1","wireshark-0:0.99.5-AS21.3","wireshark-0:0.99.5-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0456.json"},{"CVE":"CVE-2007-0457","severity":"low","public_date":"2007-02-01T00:00:00Z","advisories":["RHSA-2007:0066"],"bugzilla":"227140","bugzilla_description":"CVE-2007-0456 Multiple Wireshark issues (CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.5-1.el5","wireshark-0:0.99.5-EL3.1","wireshark-0:0.99.5-AS21.3","wireshark-0:0.99.5-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0457.json"},{"CVE":"CVE-2007-0458","severity":"low","public_date":"2007-02-01T00:00:00Z","advisories":["RHSA-2007:0066"],"bugzilla":"227140","bugzilla_description":"CVE-2007-0456 Multiple Wireshark issues (CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.5-1.el5","wireshark-0:0.99.5-EL3.1","wireshark-0:0.99.5-AS21.3","wireshark-0:0.99.5-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0458.json"},{"CVE":"CVE-2007-0459","severity":"low","public_date":"2007-02-01T00:00:00Z","advisories":["RHSA-2007:0066"],"bugzilla":"227140","bugzilla_description":"CVE-2007-0456 Multiple Wireshark issues (CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.5-1.el5","wireshark-0:0.99.5-EL3.1","wireshark-0:0.99.5-AS21.3","wireshark-0:0.99.5-EL4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0459.json"},{"CVE":"CVE-2006-4574","severity":"moderate","public_date":"2006-10-30T00:00:00Z","advisories":["RHSA-2006:0726"],"bugzilla":"1618197","bugzilla_description":"CVE-2006-4574 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.4-EL3.1","wireshark-0:0.99.4-EL4.1","wireshark-0:0.99.4-AS21.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4574.json"},{"CVE":"CVE-2006-4805","severity":"moderate","public_date":"2006-10-30T00:00:00Z","advisories":["RHSA-2006:0726"],"bugzilla":"1618202","bugzilla_description":"CVE-2006-4805 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.4-EL3.1","wireshark-0:0.99.4-EL4.1","wireshark-0:0.99.4-AS21.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4805.json"},{"CVE":"CVE-2006-5468","severity":"moderate","public_date":"2006-10-30T00:00:00Z","advisories":["RHSA-2006:0726"],"bugzilla":"1618215","bugzilla_description":"CVE-2006-5468 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.4-EL3.1","wireshark-0:0.99.4-EL4.1","wireshark-0:0.99.4-AS21.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5468.json"},{"CVE":"CVE-2006-5469","severity":"moderate","public_date":"2006-10-30T00:00:00Z","advisories":["RHSA-2006:0726"],"bugzilla":"1618216","bugzilla_description":"CVE-2006-5469 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.4-EL3.1","wireshark-0:0.99.4-EL4.1","wireshark-0:0.99.4-AS21.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5469.json"},{"CVE":"CVE-2006-5740","severity":"moderate","public_date":"2006-10-30T00:00:00Z","advisories":["RHSA-2006:0726"],"bugzilla":"1618222","bugzilla_description":"CVE-2006-5740 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.4-EL3.1","wireshark-0:0.99.4-EL4.1","wireshark-0:0.99.4-AS21.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5740.json"},{"CVE":"CVE-2006-4330","severity":"low","public_date":"2006-08-23T00:00:00Z","advisories":["RHSA-2006:0658"],"bugzilla":"1618178","bugzilla_description":"CVE-2006-4330 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.3-EL3.2","wireshark-0:0.99.3-EL4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4330.json"},{"CVE":"CVE-2006-4331","severity":"low","public_date":"2006-08-23T00:00:00Z","advisories":["RHSA-2006:0658"],"bugzilla":"1618179","bugzilla_description":"CVE-2006-4331 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.3-EL3.2","wireshark-0:0.99.3-EL4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4331.json"},{"CVE":"CVE-2006-4333","severity":"low","public_date":"2006-08-23T00:00:00Z","advisories":["RHSA-2006:0658"],"bugzilla":"1618180","bugzilla_description":"CVE-2006-4333 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.3-EL3.2","wireshark-0:0.99.3-EL4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4333.json"},{"CVE":"CVE-2006-3627","severity":"low","public_date":"2006-07-17T00:00:00Z","advisories":["RHSA-2006:0602"],"bugzilla":"1618146","bugzilla_description":"CVE-2006-3627 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.2-EL4.1","wireshark-0:0.99.2-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3627.json"},{"CVE":"CVE-2006-3628","severity":"moderate","public_date":"2006-07-17T00:00:00Z","advisories":["RHSA-2006:0602"],"bugzilla":"1618147","bugzilla_description":"CVE-2006-3628 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.2-EL4.1","wireshark-0:0.99.2-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3628.json"},{"CVE":"CVE-2006-3629","severity":"low","public_date":"2006-07-17T00:00:00Z","advisories":["RHSA-2006:0602"],"bugzilla":"1618148","bugzilla_description":"CVE-2006-3629 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.2-EL4.1","wireshark-0:0.99.2-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3629.json"},{"CVE":"CVE-2006-3630","severity":"moderate","public_date":"2006-07-17T00:00:00Z","advisories":["RHSA-2006:0602"],"bugzilla":"1618149","bugzilla_description":"CVE-2006-3630 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.2-EL4.1","wireshark-0:0.99.2-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3630.json"},{"CVE":"CVE-2006-3631","severity":"low","public_date":"2006-07-17T00:00:00Z","advisories":["RHSA-2006:0602"],"bugzilla":"1618150","bugzilla_description":"CVE-2006-3631 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.2-EL4.1","wireshark-0:0.99.2-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3631.json"},{"CVE":"CVE-2006-3632","severity":"moderate","public_date":"2006-07-17T00:00:00Z","advisories":["RHSA-2006:0602"],"bugzilla":"1618151","bugzilla_description":"CVE-2006-3632 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["wireshark-0:0.99.2-EL4.1","wireshark-0:0.99.2-EL3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3632.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wodim_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wodim_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wodim_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/woff2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/woff2_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/woff2_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/words_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/words_security_api_results.json
new file mode 100644
index 0000000..cd314ee
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/words_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-12855","severity":"moderate","public_date":"2019-07-09T00:00:00Z","advisories":[],"bugzilla":"1728206","bugzilla_description":"CVE-2019-12855 python-twisted: XMPP  support in words.protocols.jabber.xmlstream in Twisted does not verify certificates allowing for a MITM connections","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12855.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wpa_supplicant_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wpa_supplicant_security_api_results.json
new file mode 100644
index 0000000..b36d2b9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wpa_supplicant_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2020-12695","severity":"moderate","public_date":"2020-06-08T00:00:00Z","advisories":[],"bugzilla":"1846006","bugzilla_description":"CVE-2020-12695 hostapd: UPnP SUBSCRIBE misbehavior in WPS AP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-400|CWE-918)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12695.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-10064","severity":"moderate","public_date":"2020-02-27T00:00:00Z","advisories":[],"bugzilla":"1811069","bugzilla_description":"CVE-2019-10064 hostapd: Not preventig the use of low quality PRNG in EAP mode leads to insufficient entropy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10064.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-16275","severity":"moderate","public_date":"2019-09-11T00:00:00Z","advisories":[],"bugzilla":"1767023","bugzilla_description":"CVE-2019-16275 wpa_supplicant: AP mode PMF disconnection protection bypass","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16275.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-13377","severity":"moderate","public_date":"2019-08-03T00:00:00Z","advisories":[],"bugzilla":"1737665","bugzilla_description":"CVE-2019-13377 wpa_supplicant: Timing-based side-channel attack against WPA3's Dragonfly handshake when using Brainpool curves","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13377.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2019-11555","severity":"moderate","public_date":"2019-04-18T00:00:00Z","advisories":[],"bugzilla":"1703417","bugzilla_description":"CVE-2019-11555 wpa_supplicant: NULL pointer dereference due to improper fragmentation reassembly state validation in EAP-pwd implementation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11555.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2019-9494","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699141","bugzilla_description":"CVE-2019-9494 wpa_supplicant: SAE Timing-based and Cache-based side-channel attack against WPA3's Dragonfly handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9494.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9495","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699149","bugzilla_description":"CVE-2019-9495 wpa_supplicant: EAP-pwd cache side-channel attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-203","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9495.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-9496","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699153","bugzilla_description":"CVE-2019-9496 hostapd: SAE confirm missing state validation in hostapd/AP","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-642","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9496.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2019-9497","severity":"moderate","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699164","bugzilla_description":"CVE-2019-9497 wpa_supplicant: EAP-pwd server not checking for reflection attack","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9497.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"4.3"},{"CVE":"CVE-2019-9498","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699168","bugzilla_description":"CVE-2019-9498 wpa_supplicant: EAP-pwd server missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9498.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-9499","severity":"important","public_date":"2019-04-10T00:00:00Z","advisories":[],"bugzilla":"1699170","bugzilla_description":"CVE-2019-9499 wpa_supplicant: EAP-pwd peer missing commit validation for scalar/element","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-345","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9499.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-14526","severity":"moderate","public_date":"2018-08-08T00:00:00Z","advisories":["RHSA-2018:3107"],"bugzilla":"1614520","bugzilla_description":"CVE-2018-14526 wpa_supplicant: Unauthenticated EAPOL-Key decryption in wpa_supplicant","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["wpa_supplicant-1:2.6-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14526.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.3"},{"CVE":"CVE-2017-13077","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2911","RHSA-2017:2907"],"bugzilla":"1491692","bugzilla_description":"CVE-2017-13077 wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1","wpa_supplicant-1:0.7.3-9.el6_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13077.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13078","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2911","RHSA-2017:2907"],"bugzilla":"1491693","bugzilla_description":"CVE-2017-13078 wpa_supplicant: Reinstallation of the group key in the 4-way handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1","wpa_supplicant-1:0.7.3-9.el6_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13078.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13079","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1491694","bugzilla_description":"CVE-2017-13079 wpa_supplicant: Reinstallation of the integrity group key in the 4-way handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13079.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13080","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2911","RHSA-2017:2907"],"bugzilla":"1491696","bugzilla_description":"CVE-2017-13080 wpa_supplicant: Reinstallation of the group key in the group key handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1","wpa_supplicant-1:0.7.3-9.el6_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13080.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13081","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1491697","bugzilla_description":"CVE-2017-13081 wpa_supplicant: Reinstallation of the integrity group key in the group key handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13081.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13082","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2907"],"bugzilla":"1491698","bugzilla_description":"CVE-2017-13082 wpa_supplicant: Accepting a retransmitted FT Reassociation Request and reinstalling the pairwise key while processing it","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13082.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13084","severity":"low","public_date":"2017-10-16T00:00:00Z","advisories":[],"bugzilla":"1500301","bugzilla_description":"CVE-2017-13084 wpa_supplicant: reinstallation of the STK key in the PeerKey handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13084.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13086","severity":"low","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2907"],"bugzilla":"1500302","bugzilla_description":"CVE-2017-13086 wpa_supplicant: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13086.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13087","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2911","RHSA-2017:2907"],"bugzilla":"1500303","bugzilla_description":"CVE-2017-13087 wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1","wpa_supplicant-1:0.7.3-9.el6_9.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13087.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2017-13088","severity":"important","public_date":"2017-10-16T00:00:00Z","advisories":["RHSA-2017:2907"],"bugzilla":"1500304","bugzilla_description":"CVE-2017-13088 wpa_supplicant: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-323","affected_packages":["wpa_supplicant-1:2.6-5.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13088.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"8.1"},{"CVE":"CVE-2016-4476","severity":"low","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1332422","bugzilla_description":"CVE-2016-4476 wpa_supplicant, hostapd: denial of service via crafted WPA/WPA2 passphrase parameter","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4476.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2016-4477","severity":"moderate","public_date":"2016-05-02T00:00:00Z","advisories":[],"bugzilla":"1332423","bugzilla_description":"CVE-2016-4477 wpa_supplicant: local configuration update allows privilege escalation","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4477.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-10743","severity":"moderate","public_date":"2016-02-19T00:00:00Z","advisories":[],"bugzilla":"1811037","bugzilla_description":"CVE-2016-10743 hostapd: Not preventig the use of low quality PRNG leads to insufficient entropy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10743.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2015-5310","severity":"low","public_date":"2015-11-10T00:00:00Z","advisories":[],"bugzilla":"1277857","bugzilla_description":"CVE-2015-5310 wpa_supplicant: unauthorized WNM Sleep Mode GTK control","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5310.json"},{"CVE":"CVE-2015-5316","severity":"low","public_date":"2015-11-10T00:00:00Z","advisories":[],"bugzilla":"1277865","bugzilla_description":"CVE-2015-5316 wpa_supplicant: EAP-pwd peer error path failure on unexpected Confirm message","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5316.json"},{"CVE":"CVE-2015-5315","severity":"low","public_date":"2015-11-10T00:00:00Z","advisories":[],"bugzilla":"1278377","bugzilla_description":"CVE-2015-5315 wpa_supplicant: EAP-pwd missing last fragment length validation","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5315.json"},{"CVE":"CVE-2015-8041","severity":"low","public_date":"2015-07-08T00:00:00Z","advisories":[],"bugzilla":"1241905","bugzilla_description":"CVE-2015-8041 hostapd and wpa_supplicant: Incomplete WPS and P2P NFC NDEF record payload length validation","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-190->(CWE-125|CWE-835)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8041.json"},{"CVE":"CVE-2015-4143","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1219449","bugzilla_description":"CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 wpa_supplicant and hostapd: EAP-pwd missing payload length validation","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4143.json"},{"CVE":"CVE-2015-4144","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1219449","bugzilla_description":"CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 wpa_supplicant and hostapd: EAP-pwd missing payload length validation","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4144.json"},{"CVE":"CVE-2015-4145","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1219449","bugzilla_description":"CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 wpa_supplicant and hostapd: EAP-pwd missing payload length validation","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4145.json"},{"CVE":"CVE-2015-4146","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1219449","bugzilla_description":"CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 wpa_supplicant and hostapd: EAP-pwd missing payload length validation","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4146.json"},{"CVE":"CVE-2015-4141","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":[],"bugzilla":"1221172","bugzilla_description":"CVE-2015-4141 wpa_supplicant and hostapd: WPS UPnP vulnerability with HTTP chunked transfer encoding","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->(CWE-121|CWE-122)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4141.json"},{"CVE":"CVE-2015-4142","severity":"low","public_date":"2015-05-04T00:00:00Z","advisories":["RHSA-2015:1439","RHSA-2015:1090"],"bugzilla":"1221178","bugzilla_description":"CVE-2015-4142 wpa_supplicant and hostapd: integer underflow in AP mode WMM Action frame processing","cvss_score":2.9,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["wpa_supplicant-1:0.7.3-6.el6","wpa_supplicant-1:2.0-17.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4142.json"},{"CVE":"CVE-2015-1863","severity":"important","public_date":"2015-04-22T00:00:00Z","advisories":["RHSA-2015:1090"],"bugzilla":"1211191","bugzilla_description":"CVE-2015-1863 wpa_supplicant: P2P SSID processing vulnerability","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-20->CWE-122","affected_packages":["wpa_supplicant-1:2.0-17.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1863.json"},{"CVE":"CVE-2015-0210","severity":null,"public_date":"2015-01-28T00:00:00Z","advisories":[],"bugzilla":"1178921","bugzilla_description":"CVE-2015-0210 wpa_supplicant: broken certificate subject check","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0210.json"},{"CVE":"CVE-2014-3686","severity":"moderate","public_date":"2014-10-10T00:00:00Z","advisories":["RHSA-2014:1956"],"bugzilla":"1151259","bugzilla_description":"CVE-2014-3686 wpa_supplicant and hostapd: wpa_cli and hostapd_cli remote command execution issue","cvss_score":5.4,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-78","affected_packages":["wpa_supplicant-1:2.0-13.el7_0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3686.json"},{"CVE":"CVE-2012-4445","severity":"moderate","public_date":"2012-10-08T00:00:00Z","advisories":[],"bugzilla":"859918","bugzilla_description":"CVE-2012-4445 hostapd, wpa_supplicant: DoS (abort) by processing certain fragmented EAP-TLS messages","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4445.json"},{"CVE":"CVE-2012-1096","severity":"low","public_date":"2012-02-29T00:00:00Z","advisories":[],"bugzilla":"769807","bugzilla_description":"CVE-2012-1096 NetworkManager, wpa_supplicant: Improper x509v3 certificate and key file paths sanitization","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1096.json"},{"CVE":"CVE-2006-7246","severity":"moderate","public_date":"2006-05-10T00:00:00Z","advisories":[],"bugzilla":"756418","bugzilla_description":"CVE-2006-7246 NetworkManager, wpa_supplicant (WPA-Enterprise): Verify that the certificate is from trusted CA and matches the specified subject","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7246.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wqy-microhei-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wqy-microhei-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wqy-microhei-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wqy-unibit-fonts_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wqy-unibit-fonts_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wqy-unibit-fonts_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wsmancli_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wsmancli_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/wsmancli_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/x3270-text_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/x3270-text_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/x3270-text_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/x3270-x11_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/x3270-x11_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/x3270-x11_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/x3270_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/x3270_security_api_results.json
new file mode 100644
index 0000000..086c49f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/x3270_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-5662","severity":"moderate","public_date":"2013-03-20T00:00:00Z","advisories":[],"bugzilla":"889373","bugzilla_description":"CVE-2012-5662 x3270: does not properly validate SSL certificates","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5662.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-demo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-demo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-demo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-manual_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-manual_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-manual_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-xsltc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-xsltc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2-xsltc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2_security_api_results.json
new file mode 100644
index 0000000..b608a6b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xalan-j2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-0107","severity":"important","public_date":"2014-03-24T00:00:00Z","advisories":["RHSA-2015:1009","RHSA-2014:1290","RHSA-2014:0590","RHSA-2014:1291","RHSA-2015:1888","RHSA-2014:1351","RHSA-2014:0591","RHSA-2014:0454","RHSA-2014:1995","RHSA-2014:1059","RHSA-2014:0453","RHSA-2014:0348","RHSA-2014:1007","RHSA-2014:1369","RHSA-2014:0818","RHSA-2014:0819"],"bugzilla":"1080248","bugzilla_description":"CVE-2014-0107 Xalan-Java: insufficient constraints in secure processing feature","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-358","affected_packages":["xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el5","xalan-j2-0:2.7.0-6jpp.2","xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el6","xalan-j2-0:2.7.1-12_patch_08.ep5.el6","xalan-j2-0:2.7.1-12_patch_08.ep5.el4","xalan-j2-0:2.7.1-12_patch_08.ep5.el5","xalan-j2-0:2.7.0-9.9.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0107.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xbean-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xbean-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xbean-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xbean_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xbean_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xbean_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-proto_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-proto_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-proto_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-image-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-image-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-image-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-image_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-image_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-image_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-keysyms-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-keysyms-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-keysyms-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-keysyms_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-keysyms_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-keysyms_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-renderutil-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-renderutil-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-renderutil-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-renderutil_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-renderutil_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-renderutil_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-wm-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-wm-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-wm-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-wm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-wm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util-wm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xcb-util_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdelta_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdelta_security_api_results.json
new file mode 100644
index 0000000..44d91db
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdelta_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2014-9765","severity":"moderate","public_date":"2014-10-12T00:00:00Z","advisories":[],"bugzilla":"1305463","bugzilla_description":"CVE-2014-9765 xdelta: buffer overflow in main_get_appheader","cvss_score":4.6,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9765.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-desktop-portal-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-desktop-portal-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-desktop-portal-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-desktop-portal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-desktop-portal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-desktop-portal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-user-dirs-gtk_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-user-dirs-gtk_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-user-dirs-gtk_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-user-dirs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-user-dirs_security_api_results.json
new file mode 100644
index 0000000..3c848c5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-user-dirs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-15131","severity":"low","public_date":"2017-01-12T00:00:00Z","advisories":["RHSA-2018:0842"],"bugzilla":"1455094","bugzilla_description":"CVE-2017-15131 xdg-user-dirs, gnome-session: Xsession creation of XDG user directories does not honor system umask policy","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-266","affected_packages":["xdg-user-dirs-0:0.15-5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15131.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.3"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-utils_security_api_results.json
new file mode 100644
index 0000000..6461b07
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xdg-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-18266","severity":"low","public_date":"2017-11-18T00:00:00Z","advisories":[],"bugzilla":"1578767","bugzilla_description":"CVE-2017-18266 xdg-utils: Argument injection vulnerability in open_envvar() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18266.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2015-1877","severity":"moderate","public_date":"2015-02-11T00:00:00Z","advisories":[],"bugzilla":"1194205","bugzilla_description":"CVE-2015-1877 xdg-utils: command injection vulnerability due to local variables collision in xdg-open","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1877.json"},{"CVE":"CVE-2014-9622","severity":"moderate","public_date":"2013-06-10T00:00:00Z","advisories":[],"bugzilla":"1183629","bugzilla_description":"CVE-2014-9622 xdg-utils: Eval injection in xdg-open allows arbitrary command execution on crafted URL","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-95","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9622.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xerces-j2-demo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xerces-j2-demo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xerces-j2-demo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xerces-j2-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xerces-j2-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xerces-j2-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xerces-j2_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xerces-j2_security_api_results.json
new file mode 100644
index 0000000..2fbd2a5
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xerces-j2_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-0881","severity":"moderate","public_date":"2014-07-08T00:00:00Z","advisories":[],"bugzilla":"787104","bugzilla_description":"CVE-2012-0881 xml: xerces-j2 hash table collisions CPU usage DoS (oCERT-2011-003)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0881.json"},{"CVE":"CVE-2013-4002","severity":"moderate","public_date":"2013-10-15T00:00:00Z","advisories":["RHSA-2013:1451","RHSA-2013:1440","RHSA-2015:0765","RHSA-2015:0720","RHSA-2015:0269","RHSA-2015:0235","RHSA-2015:0675","RHSA-2015:0234","RHSA-2015:0773","RHSA-2013:1081","RHSA-2013:1060","RHSA-2014:0414","RHSA-2014:1823","RHSA-2014:1822","RHSA-2014:1821","RHSA-2013:1505","RHSA-2013:1447","RHSA-2014:1319","RHSA-2013:1059","RHSA-2014:1818"],"bugzilla":"1019176","bugzilla_description":"CVE-2013-4002 Xerces-J2 OpenJDK: XML parsing Denial of Service (JAXP, 8017298)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":["java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10","java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4","xerces-j2-0:2.7.1-12.7.el6_5","xerces-j2-0:2.11.0-17.el7_0","java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9","java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9","java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10","java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4","java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4","java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10","java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4002.json"},{"CVE":"CVE-2009-2625","severity":"moderate","public_date":"2009-08-05T00:00:00Z","advisories":["RHSA-2012:1537","RHSA-2009:1582","RHSA-2012:0725","RHSA-2009:1236","RHSA-2012:1232","RHSA-2009:1199","RHSA-2009:1650","RHSA-2009:1551","RHSA-2009:1201","RHSA-2009:1200","RHSA-2009:1662","RHSA-2009:1636","RHSA-2009:1649","RHSA-2009:1505","RHSA-2009:1637","RHSA-2009:1615","RHSA-2011:0858","RHSA-2013:0763","RHSA-2010:0043"],"bugzilla":"512921","bugzilla_description":"CVE-2009-2625 xerces-j2, JDK: XML parsing Denial-Of-Service (6845701)","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["jasperreports-server-pro-0:4.7.1-2.el6ev","java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el5","java-1.4.2-ibm-0:1.4.2.13.1-1jpp.1.el3","java-1.4.2-ibm-0:1.4.2.13.2.sap-1jpp.4.el5_3","java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4","xerces-j2-0:2.7.1-12.6.el6_0","java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4","java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el4","java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5","xerces-j2-0:2.7.1-7jpp.2.el5_4.2","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el4","java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2625.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xfsdump_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xfsdump_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xfsdump_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xfsprogs-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xfsprogs-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xfsprogs-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xfsprogs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xfsprogs_security_api_results.json
new file mode 100644
index 0000000..e1d002b
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xfsprogs_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-2150","severity":"low","public_date":"2015-07-23T00:00:00Z","advisories":["RHSA-2015:2151"],"bugzilla":"817696","bugzilla_description":"CVE-2012-2150 xfsprogs: xfs_metadump information disclosure flaw","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-200","affected_packages":["xfsprogs-0:3.2.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2150.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xhtml1-dtds_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xhtml1-dtds_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xhtml1-dtds_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xinetd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xinetd_security_api_results.json
new file mode 100644
index 0000000..91d74cf
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xinetd_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-0862","severity":"low","public_date":"2012-05-09T00:00:00Z","advisories":["RHSA-2013:0499","RHSA-2013:1302"],"bugzilla":"790940","bugzilla_description":"CVE-2012-0862 xinetd: enables unintentional services over tcpmux port","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["xinetd-2:2.3.14-19.el5","xinetd-2:2.3.14-38.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0862.json"},{"CVE":"CVE-2013-4342","severity":"moderate","public_date":"2005-08-23T00:00:00Z","advisories":["RHSA-2013:1409"],"bugzilla":"1006100","bugzilla_description":"CVE-2013-4342 xinetd: ignores user and group directives for tcpmux services","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-266->CWE-863","affected_packages":["xinetd-2:2.3.14-20.el5_10","xinetd-2:2.3.14-39.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4342.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xkeyboard-config-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xkeyboard-config-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xkeyboard-config-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xkeyboard-config_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xkeyboard-config_security_api_results.json
new file mode 100644
index 0000000..784e107
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xkeyboard-config_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-0064","severity":"low","public_date":"2012-01-19T00:00:00Z","advisories":[],"bugzilla":"783039","bugzilla_description":"CVE-2012-0064 xkeyboard-config: screen-saver unlock via xkb debug key actions","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0064.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-apis-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-apis-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-apis-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-apis-manual_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-apis-manual_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-apis-manual_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-apis_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-apis_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-apis_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-resolver-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-resolver-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-resolver-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-resolver_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-resolver_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xml-commons-resolver_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-c++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-c++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-c++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-client++_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-client++_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-client++_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-client_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-client_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-client_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c_security_api_results.json
new file mode 100644
index 0000000..8c6c912
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlrpc-c_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-17570","severity":"important","public_date":"2020-01-16T00:00:00Z","advisories":["RHSA-2020:0310","RHSA-2020:0983"],"bugzilla":"1775193","bugzilla_description":"CVE-2019-17570 xmlrpc: Deserialization of server-side exception from faultCause in XMLRPC error response","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-java-common-xmlrpc-1:3.1.3-8.17.el7","rh-java-common-xmlrpc-1:3.1.3-8.17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17570.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2019-15903","severity":"low","public_date":"2019-09-04T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2019:3237","RHSA-2019:3756","RHSA-2019:3210","RHSA-2019:3196","RHSA-2020:2646","RHSA-2020:2644","RHSA-2019:3193"],"bugzilla":"1752592","bugzilla_description":"CVE-2019-15903 expat: heap-based buffer over-read via crafted XML input","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-122|CWE-125)","affected_packages":["thunderbird-0:68.2.0-2.el6_10","thunderbird-0:68.2.0-1.el8_0","firefox-0:68.2.0-2.el8_0","thunderbird-0:68.2.0-1.el7_7","expat-0:2.1.0-12.el7","firefox-0:68.2.0-1.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15903.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2018-20843","severity":"moderate","public_date":"2019-06-24T00:00:00Z","advisories":["RHSA-2020:3952","RHSA-2020:2646","RHSA-2020:2644"],"bugzilla":"1723723","bugzilla_description":"CVE-2018-20843 expat: large number of colons in input makes parser consume high amount of resources, leading to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["expat-0:2.1.0-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20843.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-9233","severity":"moderate","public_date":"2017-06-14T00:00:00Z","advisories":[],"bugzilla":"1462729","bugzilla_description":"CVE-2017-9233 expat: Inifinite loop due to invalid XML in external entity","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9233.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"6.5"},{"CVE":"CVE-2016-5300","severity":"moderate","public_date":"2016-06-04T00:00:00Z","advisories":[],"bugzilla":"1343085","bugzilla_description":"CVE-2016-5300 expat: Little entropy used for hash initialization","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-331","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5300.json"},{"CVE":"CVE-2016-5002","severity":"moderate","public_date":"2016-05-24T00:00:00Z","advisories":["RHSA-2018:3768"],"bugzilla":"1508110","bugzilla_description":"CVE-2016-5002 xmlrpc: XML external entity vulnerability SSRF via a crafted DTD","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611->CWE-918","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5002.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2016-5003","severity":"important","public_date":"2016-05-24T00:00:00Z","advisories":["RHSA-2018:2317","RHSA-2018:1779","RHSA-2018:3768","RHSA-2018:1784","RHSA-2018:1780"],"bugzilla":"1508123","bugzilla_description":"CVE-2016-5003 xmlrpc: Deserialization of untrusted Java object through <ex:serializable> tag","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-502","affected_packages":["rh-java-common-xmlrpc-1:3.1.3-8.16.el6","xmlrpc-1:3.1.3-9.el7_5","xmlrpc3-0:3.0-4.17.el6_9","rh-java-common-xmlrpc-1:3.1.3-8.16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5003.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-5004","severity":"low","public_date":"2016-05-24T00:00:00Z","advisories":[],"bugzilla":"1508129","bugzilla_description":"CVE-2016-5004 xmlrpc: DoS through decompression-bomb attack when Content-Encoding=gzip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-409","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5004.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cvss3_score":"5.0"},{"CVE":"CVE-2016-0718","severity":"moderate","public_date":"2016-05-17T00:00:00Z","advisories":["RHSA-2016:2824","RHSA-2018:2486"],"bugzilla":"1296102","bugzilla_description":"CVE-2016-0718 expat: Out-of-bounds heap read on crafted input causing crash","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-125","affected_packages":["expat-0:2.0.1-13.el6_8","expat-0:2.1.0-10.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0718.json"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2012-6702","severity":"moderate","public_date":"2015-02-27T00:00:00Z","advisories":[],"bugzilla":"1319731","bugzilla_description":"CVE-2012-6702 expat: Using XML_Parse before rand() results into non-random output","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-330","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6702.json"},{"CVE":"CVE-2012-0876","severity":"moderate","public_date":"2012-03-03T00:00:00Z","advisories":["RHSA-2017:3239","RHSA-2016:0062","RHSA-2016:2957","RHSA-2012:0731"],"bugzilla":"786617","bugzilla_description":"CVE-2012-0876 expat: hash table collisions CPU usage DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-407","affected_packages":["expat-0:1.95.8-11.el5_8","expat-0:2.0.1-11.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0876.json"},{"CVE":"CVE-2012-1148","severity":"moderate","public_date":"2012-03-03T00:00:00Z","advisories":["RHSA-2016:2957","RHSA-2012:0731"],"bugzilla":"801648","bugzilla_description":"CVE-2012-1148 expat: Memory leak in poolGrow","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-401","affected_packages":["expat-0:1.95.8-11.el5_8","expat-0:2.0.1-11.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1148.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2009-3560","severity":"moderate","public_date":"2009-12-02T00:00:00Z","advisories":["RHSA-2017:3239","RHSA-2011:0896","RHSA-2009:1625"],"bugzilla":"533174","bugzilla_description":"CVE-2009-3560 expat: buffer over-read and crash in big2_toUtf8() on XML with malformed UTF-8 sequences","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["expat-0:1.95.7-4.el4_8.2","expat-0:1.95.5-6.2","expat-0:1.95.8-8.3.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3560.json"},{"CVE":"CVE-2009-3720","severity":"moderate","public_date":"2009-01-17T00:00:00Z","advisories":["RHSA-2017:3239","RHSA-2011:0896","RHSA-2009:1625","RHSA-2010:0002","RHSA-2011:0491","RHSA-2011:0492","RHSA-2009:1572"],"bugzilla":"531697","bugzilla_description":"CVE-2009-3720 expat: buffer over-read and crash on XML with malformed UTF-8 sequences","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["expat-0:1.95.7-4.el4_8.2","expat-0:1.95.5-6.2","python-0:2.3.4-14.10.el4","expat-0:1.95.8-8.3.el5_4.2","python-0:2.4.3-44.el5","4Suite-0:0.11.1-15","PyXML-0:0.8.3-6.el4_8.2","4Suite-0:1.0-3.el4_8.1","PyXML-0:0.8.4-4.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3720.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-gcrypt_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-gcrypt_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-gcrypt_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-gnutls-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-gnutls-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-gnutls-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-gnutls_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-gnutls_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-gnutls_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-nss_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-nss_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-nss_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-openssl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-openssl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-openssl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-openssl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-openssl_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1-openssl_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1_security_api_results.json
new file mode 100644
index 0000000..a3454ce
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlsec1_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-1000061","severity":"moderate","public_date":"2017-03-30T00:00:00Z","advisories":["RHSA-2017:2492"],"bugzilla":"1437311","bugzilla_description":"CVE-2017-1000061 xmlsec1: xmlsec vulnerable to external entity expansion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["xmlsec1-0:1.2.20-7.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2011-1425","severity":"moderate","public_date":"2011-03-31T00:00:00Z","advisories":["RHSA-2011:0486"],"bugzilla":"692133","bugzilla_description":"CVE-2011-1425 xmlsec1: arbitrary file creation when verifying signatures","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["xmlsec1-0:1.2.9-8.1.2","xmlsec1-0:1.2.6-3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1425.json"},{"CVE":"CVE-2009-0217","severity":"moderate","public_date":"2009-07-14T00:00:00Z","advisories":["RHSA-2009:1636","RHSA-2009:1649","RHSA-2009:1637","RHSA-2009:1428","RHSA-2009:1694","RHSA-2009:1650","RHSA-2010:0043","RHSA-2009:1201","RHSA-2009:1200"],"bugzilla":"511915","bugzilla_description":"CVE-2009-0217 xmlsec1, mono, xml-security-c, xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["xmlsec1-0:1.2.9-8.1.1","java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4","xmlsec1-0:1.2.6-3.1","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0217.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlstreambuffer_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlstreambuffer_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlstreambuffer_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlto_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlto_security_api_results.json
new file mode 100644
index 0000000..5f9c86c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlto_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-9628","severity":"moderate","public_date":"2019-03-11T00:00:00Z","advisories":[],"bugzilla":"1695997","bugzilla_description":"CVE-2019-9628 xmltooling: XML parser class fails to trap exceptions on malformed XML declaration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9628.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-0486","severity":"important","public_date":"2018-01-12T00:00:00Z","advisories":[],"bugzilla":"1534647","bugzilla_description":"CVE-2018-0486 xmltooling: impersonation attack and sensitive information disclosure in the Service Provider via crafted DTD","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","cvss3_score":"8.7"},{"CVE":"CVE-2015-0851","severity":"moderate","public_date":"2015-07-21T00:00:00Z","advisories":[],"bugzilla":"1248504","bugzilla_description":"CVE-2015-0851 xmltooling: incorrect processing of well-formed but invalid XML","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0851.json"},{"CVE":"CVE-2013-6440","severity":"moderate","public_date":"2013-12-11T00:00:00Z","advisories":["RHSA-2014:1995","RHSA-2014:0452","RHSA-2014:1290","RHSA-2014:0171","RHSA-2014:0172","RHSA-2014:1291","RHSA-2014:0170","RHSA-2014:0195"],"bugzilla":"1043332","bugzilla_description":"CVE-2013-6440 XMLTooling-J/OpenSAML Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6440.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmltoman_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmltoman_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmltoman_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlunit-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlunit-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlunit-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlunit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlunit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmlunit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-api_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-api_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-api_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-bisect_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-bisect_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-bisect_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-connector-aether_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-connector-aether_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-connector-aether_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-connector-ivy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-connector-ivy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-connector-ivy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-core_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-core_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-core_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-install_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-install_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-install_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-minimal_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-minimal_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-minimal_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-mojo_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-mojo_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-mojo_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-parent-pom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-parent-pom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-parent-pom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-resolve_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-resolve_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-resolve_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-subst_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-subst_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-subst_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-tools-pom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-tools-pom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn-tools-pom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xmvn_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-sgml-doctools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-sgml-doctools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-sgml-doctools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-apps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-apps_security_api_results.json
new file mode 100644
index 0000000..b655d37
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-apps_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-2504","severity":"low","public_date":"2011-06-29T00:00:00Z","advisories":["RHSA-2013:0502"],"bugzilla":"717672","bugzilla_description":"CVE-2011-2504 x11perfcomp has dot in its path","cvss_score":3.5,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:P/I:P/A:P","CWE":"CWE-829","affected_packages":["xorg-x11-apps-0:7.6-6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2504.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-docs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-docs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-docs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drivers_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drivers_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drivers_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-ati_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-ati_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-ati_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-dummy_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-dummy_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-dummy_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-evdev-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-evdev-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-evdev-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-evdev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-evdev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-evdev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-fbdev_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-fbdev_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-fbdev_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-intel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-intel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-intel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-libinput-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-libinput-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-libinput-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-libinput_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-libinput_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-libinput_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-nouveau_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-nouveau_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-nouveau_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-qxl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-qxl_security_api_results.json
new file mode 100644
index 0000000..4bbb749
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-qxl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2013-0241","severity":"moderate","public_date":"2011-08-03T00:00:00Z","advisories":["RHSA-2013:0218"],"bugzilla":"906032","bugzilla_description":"CVE-2013-0241 qxl: synchronous io guest DoS","cvss_score":4.6,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["xorg-x11-drv-qxl-0:0.0.14-14.el6_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0241.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-v4l_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-v4l_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-v4l_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-vesa_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-vesa_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-vesa_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-vmware_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-vmware_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-vmware_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-wacom-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-wacom-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-wacom-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-wacom-serial-support_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-wacom-serial-support_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-wacom-serial-support_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-wacom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-wacom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-drv-wacom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-font-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-font-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-font-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-100dpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-100dpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-100dpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-75dpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-75dpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-75dpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-1-100dpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-1-100dpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-1-100dpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-1-75dpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-1-75dpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-1-75dpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-14-100dpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-14-100dpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-14-100dpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-14-75dpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-14-75dpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-14-75dpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-15-100dpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-15-100dpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-15-100dpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-15-75dpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-15-75dpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-15-75dpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-2-100dpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-2-100dpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-2-100dpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-2-75dpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-2-75dpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-2-75dpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-9-100dpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-9-100dpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-9-100dpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-9-75dpi_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-9-75dpi_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ISO8859-9-75dpi_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-Type1_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-Type1_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-Type1_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-cyrillic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-cyrillic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-cyrillic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ethiopic_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ethiopic_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-ethiopic_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-misc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-misc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-fonts-misc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-proto-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-proto-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-proto-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xdmx_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xdmx_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xdmx_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xephyr_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xephyr_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xephyr_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xnest_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xnest_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xnest_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xorg_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xorg_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xorg_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xspice_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xspice_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xspice_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xvfb_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xvfb_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xvfb_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xwayland_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xwayland_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-Xwayland_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-utils_security_api_results.json
new file mode 100644
index 0000000..a9ece77
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-server-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2011-0465","severity":"moderate","public_date":"2011-04-05T00:00:00Z","advisories":["RHSA-2011:0432","RHSA-2011:0433"],"bugzilla":"680196","bugzilla_description":"CVE-2011-0465 xorg: xrdb code execution via crafted X client hostname","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["xorg-x11-server-utils-0:7.4-15.el6_0.1","xorg-x11-0:6.8.2-1.EL.67","xorg-x11-server-utils-0:7.1-5.el5_6.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0465.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-util-macros_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-util-macros_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-util-macros_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xauth_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xauth_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xauth_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xbitmaps_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xbitmaps_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xbitmaps_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xinit-session_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xinit-session_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xinit-session_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xinit_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xinit_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xinit_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xkb-utils-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xkb-utils-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xkb-utils-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xkb-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xkb-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xkb-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xtrans-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xtrans-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorg-x11-xtrans-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorriso_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorriso_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xorriso_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xrestop_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xrestop_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xrestop_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsane-common_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsane-common_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsane-common_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsane-gimp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsane-gimp_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsane-gimp_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsane_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsane_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsane_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsom_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsom_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xsom_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xterm-resize_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xterm-resize_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xterm-resize_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xterm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xterm_security_api_results.json
new file mode 100644
index 0000000..f28e623
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xterm_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2008-2383","severity":"important","public_date":"2008-12-29T00:00:00Z","advisories":["RHSA-2009:0018","RHSA-2009:0019"],"bugzilla":"478888","bugzilla_description":"CVE-2008-2383 xterm: arbitrary command injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["hanterm-xf-1:2.0.5-5.AS21.2","xterm-0:215-5.el5_2.2","xterm-0:179-11.EL3","xterm-0:192-8.el4_7.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2383.json"},{"CVE":"CVE-2007-2797","severity":"low","public_date":"2006-12-19T00:00:00Z","advisories":["RHSA-2007:0701"],"bugzilla":"239070","bugzilla_description":"CVE-2007-2797 Wrong settings for the tty (mesg: error: tty device is not owned by group `tty')","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["xterm-0:192-8.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2797.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-java-javadoc_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-java-javadoc_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-java-javadoc_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-java_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-java_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-java_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-lzma-compat_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-lzma-compat_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz-lzma-compat_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz_security_api_results.json
new file mode 100644
index 0000000..88d2760
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/xz_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2015-4035","severity":"moderate","public_date":"2015-05-18T00:00:00Z","advisories":[],"bugzilla":"1223341","bugzilla_description":"CVE-2015-4035 xzgrep: incorrect parsing of filenames containing a semicolon","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4035.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yajl-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yajl-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yajl-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yajl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yajl_security_api_results.json
new file mode 100644
index 0000000..d2ca008
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yajl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2017-16516","severity":"moderate","public_date":"2017-11-02T00:00:00Z","advisories":[],"bugzilla":"1524439","bugzilla_description":"CVE-2017-16516 rubygem-yajl-ruby: Yajl::Parser.new.parse incorrect parsing","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16516.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yasm_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yasm_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yasm_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-libs_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-libs_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-libs_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-xsl_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-xsl_security_api_results.json
new file mode 100644
index 0000000..57fa01a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp-xsl_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-6662","severity":"moderate","public_date":"2012-11-27T00:00:00Z","advisories":["RHSA-2015:0442","RHSA-2015:1462"],"bugzilla":"1166064","bugzilla_description":"CVE-2012-6662 jquery-ui: XSS vulnerability in default content in Tooltip widget","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:3.0.0-47.el6","ipa-0:4.1.0-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6662.json"},{"CVE":"CVE-2010-5312","severity":"moderate","public_date":"2010-09-03T00:00:00Z","advisories":["RHSA-2015:0442","RHSA-2015:1462"],"bugzilla":"1166041","bugzilla_description":"CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:3.0.0-47.el6","ipa-0:4.1.0-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5312.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp_security_api_results.json
new file mode 100644
index 0000000..57fa01a
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yelp_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2012-6662","severity":"moderate","public_date":"2012-11-27T00:00:00Z","advisories":["RHSA-2015:0442","RHSA-2015:1462"],"bugzilla":"1166064","bugzilla_description":"CVE-2012-6662 jquery-ui: XSS vulnerability in default content in Tooltip widget","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:3.0.0-47.el6","ipa-0:4.1.0-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6662.json"},{"CVE":"CVE-2010-5312","severity":"moderate","public_date":"2010-09-03T00:00:00Z","advisories":["RHSA-2015:0442","RHSA-2015:1462"],"bugzilla":"1166041","bugzilla_description":"CVE-2010-5312 jquery-ui: XSS vulnerability in jQuery.ui.dialog title option","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":"CWE-79","affected_packages":["ipa-0:3.0.0-47.el6","ipa-0:4.1.0-18.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5312.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yp-tools_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yp-tools_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yp-tools_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ypbind_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ypbind_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ypbind_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ypserv_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ypserv_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/ypserv_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yum-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yum-utils_security_api_results.json
new file mode 100644
index 0000000..1a72d33
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yum-utils_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10897","severity":"important","public_date":"2018-07-11T00:00:00Z","advisories":["RHSA-2018:2284","RHSA-2018:2626","RHSA-2018:2285"],"bugzilla":"1600221","bugzilla_description":"CVE-2018-10897 yum-utils: reposync: improper path validation may lead to directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["yum-utils-0:1.1.30-42.el6_10","yum-utils-0:1.1.31-46.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yum_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yum_security_api_results.json
new file mode 100644
index 0000000..274aea8
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/yum_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-10897","severity":"important","public_date":"2018-07-11T00:00:00Z","advisories":["RHSA-2018:2284","RHSA-2018:2626","RHSA-2018:2285"],"bugzilla":"1600221","bugzilla_description":"CVE-2018-10897 yum-utils: reposync: improper path validation may lead to directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["yum-utils-0:1.1.30-42.el6_10","yum-utils-0:1.1.31-46.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2014-0022","severity":"important","public_date":"2014-01-13T00:00:00Z","advisories":["RHSA-2014:1004"],"bugzilla":"1057377","bugzilla_description":"CVE-2014-0022 yum: yum-cron installs unsigned packages","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-252->CWE-347","affected_packages":["yum-updatesd-1:0.9-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0022.json"},{"CVE":"CVE-2013-1910","severity":"moderate","public_date":"2013-03-27T00:00:00Z","advisories":[],"bugzilla":"910446","bugzilla_description":"yum: Not removing bad metadata and using it in next run","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1910.json"},{"CVE":"CVE-2008-3270","severity":"moderate","public_date":"2008-08-14T00:00:00Z","advisories":["RHSA-2008:0815"],"bugzilla":"457113","bugzilla_description":"CVE-2008-3270 yum-rhn-plugin: does not verify SSL certificate for all communication with RHN server","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["yum-rhn-plugin-0:0.5.3-12.el5_2.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3270.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zenity_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zenity_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zenity_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zip_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zip_security_api_results.json
new file mode 100644
index 0000000..772c578
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zip_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-13232","severity":"low","public_date":"2019-07-02T00:00:00Z","advisories":["RHSA-2020:2486","RHSA-2020:1181","RHSA-2020:1787"],"bugzilla":"1727761","bugzilla_description":"CVE-2019-13232 unzip: overlapping of files in ZIP container leads to denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["unzip-0:6.0-43.el8","unzip-0:6.0-21.el7","unzip-0:6.0-20.el7_7.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13232.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2019-12900","severity":"low","public_date":"2019-06-19T00:00:00Z","advisories":[],"bugzilla":"1724459","bugzilla_description":"CVE-2019-12900 bzip2: out-of-bounds write in function BZ2_decompress","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12900.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-18384","severity":"low","public_date":"2018-09-28T00:00:00Z","advisories":["RHSA-2019:2159"],"bugzilla":"1642931","bugzilla_description":"CVE-2018-18384 unzip: Buffer overflow in list.c resulting in a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":["unzip-0:6.0-20.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18384.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-17828","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2020:1178","RHSA-2020:1653"],"bugzilla":"1635888","bugzilla_description":"CVE-2018-17828 zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["zziplib-0:0.13.62-12.el7","zziplib-0:0.13.68-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17828.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-16548","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2019:2196"],"bugzilla":"1626200","bugzilla_description":"CVE-2018-16548 zziplib: Memory leak triggered in the function __zzip_parse_root_directory in zip.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["zziplib-0:0.13.62-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16548.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-10860","severity":"moderate","public_date":"2018-06-28T00:00:00Z","advisories":[],"bugzilla":"1591449","bugzilla_description":"CVE-2018-10860 perl-Archive-Zip: Directory traversal in Archive::Zip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10860.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-1002201","severity":"important","public_date":"2018-06-05T00:00:00Z","advisories":[],"bugzilla":"1584395","bugzilla_description":"CVE-2018-1002201 zt-zip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002201.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-1002202","severity":"important","public_date":"2018-06-05T00:00:00Z","advisories":[],"bugzilla":"1584409","bugzilla_description":"CVE-2018-1002202 zip4j: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002202.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"6.3"},{"CVE":"CVE-2018-1000544","severity":"moderate","public_date":"2018-06-05T00:00:00Z","advisories":["RHSA-2018:3466"],"bugzilla":"1593001","bugzilla_description":"CVE-2018-1000544 rubyzip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->(CWE-22|CWE-59)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000544.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"4.8"},{"CVE":"CVE-2018-10115","severity":"important","public_date":"2018-05-01T00:00:00Z","advisories":[],"bugzilla":"1574414","bugzilla_description":"CVE-2018-10115 p7zip: unitialized memory due to incorrect logic of RAR decoder might lead to arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-7726","severity":"low","public_date":"2018-03-07T00:00:00Z","advisories":["RHSA-2018:3229"],"bugzilla":"1554672","bugzilla_description":"CVE-2018-7726 zziplib: Bus error in zip.c:__zzip_parse_root_directory() cause crash via crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["zziplib-0:0.13.62-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7726.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-7727","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":["RHSA-2018:3229"],"bugzilla":"1554676","bugzilla_description":"CVE-2018-7727 zziplib: Memory leak in memdisk.c:zzip_mem_disk_new() can lead to denial of service via crafted zip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["zziplib-0:0.13.62-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7727.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6869","severity":"low","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1543941","bugzilla_description":"CVE-2018-6869 zziplib: uncontrolled memory allocation in __zzip_parse_root_directory in zzip/zip.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-1000035","severity":"low","public_date":"2018-02-07T00:00:00Z","advisories":[],"bugzilla":"1537043","bugzilla_description":"CVE-2018-1000035 unzip: Heap-based buffer overflow in fileio.c:UzpPassword function allows code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000035.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1000032","severity":"moderate","public_date":"2018-02-07T00:00:00Z","advisories":[],"bugzilla":"1537055","bugzilla_description":"CVE-2018-1000032 unzip: Heap-based buffer overflow in charset_to_intern()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000032.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-1000031","severity":"low","public_date":"2018-02-07T00:00:00Z","advisories":[],"bugzilla":"1537059","bugzilla_description":"CVE-2018-1000031 unzip: Heap-based out-of-bounds write in fileio.c:set_zipfn_sgmnt_name() possibly causing crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000031.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000033","severity":"low","public_date":"2018-02-07T00:00:00Z","advisories":[],"bugzilla":"1537062","bugzilla_description":"CVE-2018-1000033 unzip: Heap-based out-of-bounds access in extract.c:ef_scan_for_stream() possibly causing crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000033.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-1000034","severity":"low","public_date":"2018-02-07T00:00:00Z","advisories":[],"bugzilla":"1543333","bugzilla_description":"CVE-2018-1000034 unzip: Invalid access in the LZMA compression algorithm","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000034.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-7725","severity":"low","public_date":"2018-02-07T00:00:00Z","advisories":["RHSA-2018:3229"],"bugzilla":"1554662","bugzilla_description":"CVE-2018-7725 zziplib: out of bound read in mmapped.c:zzip_disk_fread() causes crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["zziplib-0:0.13.62-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7725.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-6484","severity":"low","public_date":"2018-02-02T00:00:00Z","advisories":[],"bugzilla":"1541256","bugzilla_description":"CVE-2018-6484 zziplib: Loading of misaligned memory address in zip.c:__zzip_fetch_disk_trailer can lead to a denial of service via crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6484.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6542","severity":"low","public_date":"2018-02-02T00:00:00Z","advisories":[],"bugzilla":"1542257","bugzilla_description":"CVE-2018-6542 zziplib:  bus error in zzip_disk_findfirst function in zzip/mmapped.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6542.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6540","severity":"low","public_date":"2018-02-02T00:00:00Z","advisories":[],"bugzilla":"1542261","bugzilla_description":"CVE-2018-6540 zziplib: bus error in zzip_disk_findfirst function in zzip/mmapped.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6540.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6541","severity":"low","public_date":"2018-02-01T00:00:00Z","advisories":["RHSA-2019:2196"],"bugzilla":"1598244","bugzilla_description":"CVE-2018-6541 zziplib: Bus error caused by loading of a misaligned address inzzip/zip.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["zziplib-0:0.13.62-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6541.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6381","severity":"low","public_date":"2018-01-29T00:00:00Z","advisories":[],"bugzilla":"1540183","bugzilla_description":"CVE-2018-6381 zziplib: Invalid memory access in the zzip_disk_fread function in zzip/mmapped.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6381.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-17969","severity":"important","public_date":"2018-01-25T00:00:00Z","advisories":[],"bugzilla":"1538457","bugzilla_description":"CVE-2017-17969 p7zip: heap-based buffer overflow in 7zip/Compress/ShrinkDecoder.cpp can allow an attacker to write arbitrary data and cause a crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17969.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3_score":"9.1"},{"CVE":"CVE-2018-5996","severity":"important","public_date":"2018-01-23T00:00:00Z","advisories":[],"bugzilla":"1538470","bugzilla_description":"CVE-2018-5996 p7zip: memory corruption in RAR decompression","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-121|CWE-122)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5996.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2017-14107","severity":"low","public_date":"2017-08-29T00:00:00Z","advisories":[],"bugzilla":"1489000","bugzilla_description":"CVE-2017-14107 libzip: Memory allocation failure in _zip_cdir_grow function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14107.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-12858","severity":"low","public_date":"2017-08-23T00:00:00Z","advisories":[],"bugzilla":"1484514","bugzilla_description":"CVE-2017-12858 libzip: Double free in _zip_dirent_read function in zip_dirent.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12858.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5974","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422507","bugzilla_description":"CVE-2017-5974 zziplib: heap-based buffer overflow in __zzip_get32 (fetch.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5974.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5975","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422509","bugzilla_description":"CVE-2017-5975 zziplib: heap-based buffer overflow in __zzip_get64 (fetch.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5976","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422510","bugzilla_description":"CVE-2017-5976 zziplib: heap-based buffer overflow in zzip_mem_entry_extra_block (memdisk.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5976.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5977","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422512","bugzilla_description":"CVE-2017-5977 zziplib: invalid memory read in zzip_mem_entry_extra_block (memdisk.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5977.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5978","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422513","bugzilla_description":"CVE-2017-5978 zziplib: out of bounds read in zzip_mem_entry_new (memdisk.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5979","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422514","bugzilla_description":"CVE-2017-5979 zziplib: NULL pointer dereference in prescan_entry (fseeko.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5979.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5980","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422515","bugzilla_description":"CVE-2017-5980 zziplib: NULL pointer dereference in zzip_mem_entry_new (memdisk.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5980.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5981","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422516","bugzilla_description":"CVE-2017-5981 zziplib: assertion failure in seeko.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5946","severity":"moderate","public_date":"2017-02-04T00:00:00Z","advisories":[],"bugzilla":"1427937","bugzilla_description":"CVE-2017-5946 rubygem-rubyzip: Directory traversal in the Zip::File component","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5946.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2016-9844","severity":"low","public_date":"2016-12-05T00:00:00Z","advisories":[],"bugzilla":"1401864","bugzilla_description":"CVE-2016-9844 unzip: methbuf[] buffer overflow in zipinfo's zi_short()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9844.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-5399","severity":"moderate","public_date":"2016-07-18T00:00:00Z","advisories":["RHSA-2016:2750","RHSA-2016:2598"],"bugzilla":"1358395","bugzilla_description":"CVE-2016-5399 php: Improper error handling in bzread()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-390","affected_packages":["rh-php56-php-0:5.6.25-1.el6","rh-php56-php-0:5.6.25-1.el7","php-0:5.4.16-42.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5399.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2016-3189","severity":"low","public_date":"2016-06-20T00:00:00Z","advisories":[],"bugzilla":"1319648","bugzilla_description":"CVE-2016-3189 bzip2: heap use after free in bzip2recover","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3189.json"},{"CVE":"CVE-2015-7696","severity":"moderate","public_date":"2015-09-07T00:00:00Z","advisories":[],"bugzilla":"1260944","bugzilla_description":"CVE-2015-7696 CVE-2015-7697 unzip: Heap overflow and DoS in 6.0","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7696.json"},{"CVE":"CVE-2015-7697","severity":"moderate","public_date":"2015-09-07T00:00:00Z","advisories":[],"bugzilla":"1260944","bugzilla_description":"CVE-2015-7696 CVE-2015-7697 unzip: Heap overflow and DoS in 6.0","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7697.json"},{"CVE":"CVE-2015-2331","severity":"important","public_date":"2015-03-18T00:00:00Z","advisories":[],"bugzilla":"1204676","bugzilla_description":"CVE-2015-2331 libzip: integer overflow when processing ZIP archives","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2331.json"},{"CVE":"CVE-2015-1315","severity":"moderate","public_date":"2015-02-17T00:00:00Z","advisories":[],"bugzilla":"1192603","bugzilla_description":"CVE-2015-1315 unzip: charset_to_intern() buffer overflow","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1315.json"},{"CVE":"CVE-2018-1002204","severity":"moderate","public_date":"2015-01-08T00:00:00Z","advisories":[],"bugzilla":"1584400","bugzilla_description":"CVE-2018-1002204 nodejs-adm-zip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1002204.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2014-8139","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":["RHSA-2015:0700"],"bugzilla":"1174844","bugzilla_description":"CVE-2014-8139 unzip: CRC32 verification heap-based buffer overread (oCERT-2014-011)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-190->CWE-125","affected_packages":["unzip-0:6.0-15.ael7b","unzip-0:6.0-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8139.json"},{"CVE":"CVE-2014-8140","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":["RHSA-2015:0700"],"bugzilla":"1174851","bugzilla_description":"CVE-2014-8140 unzip: out-of-bounds write issue in test_compr_eb() (oCERT-2014-011)","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-20->CWE-190->CWE-120","affected_packages":["unzip-0:6.0-15.ael7b","unzip-0:6.0-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8140.json"},{"CVE":"CVE-2014-8141","severity":"low","public_date":"2014-12-22T00:00:00Z","advisories":["RHSA-2015:0700"],"bugzilla":"1174856","bugzilla_description":"CVE-2014-8141 unzip: getZip64Data() out-of-bounds read issues (oCERT-2014-011)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":["unzip-0:6.0-15.ael7b","unzip-0:6.0-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8141.json"},{"CVE":"CVE-2014-9913","severity":"low","public_date":"2014-11-03T00:00:00Z","advisories":[],"bugzilla":"1401865","bugzilla_description":"CVE-2014-9913 unzip: methbuf[] buffer overflow in unzip's list_files()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9913.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-9636","severity":"moderate","public_date":"2014-11-02T00:00:00Z","advisories":["RHSA-2015:0700"],"bugzilla":"1184985","bugzilla_description":"CVE-2014-9636 unzip: out-of-bounds read/write in test_compr_eb() in extract.c","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-122","affected_packages":["unzip-0:6.0-15.ael7b","unzip-0:6.0-2.el6_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9636.json"},{"CVE":"CVE-2012-1162","severity":"moderate","public_date":"2012-03-20T00:00:00Z","advisories":[],"bugzilla":"802564","bugzilla_description":"CVE-2012-1162 libzip: heap overflow flaw when processing malformed zip file","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1162.json"},{"CVE":"CVE-2012-1163","severity":"moderate","public_date":"2012-03-20T00:00:00Z","advisories":[],"bugzilla":"803028","bugzilla_description":"CVE-2012-1163 libzip: integer overflow when processing malformed zip file","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1163.json"},{"CVE":"CVE-2011-2895","severity":"important","public_date":"2011-08-10T00:00:00Z","advisories":["RHSA-2011:1154","RHSA-2011:1155","RHSA-2011:1161","RHSA-2011:1834"],"bugzilla":"727624","bugzilla_description":"CVE-2011-2895 BSD compress LZW decoder buffer overflow","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["libXfont-0:1.2.2-1.0.3.el5_6","libXfont-0:1.4.1-2.el6_1","freetype-0:2.1.9-19.el4","xorg-x11-0:6.8.2-1.EL.69","libXfont-0:1.2.2-1.0.4.el5_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2895.json"},{"CVE":"CVE-2011-0421","severity":"low","public_date":"2011-01-30T00:00:00Z","advisories":[],"bugzilla":"688735","bugzilla_description":"CVE-2011-0421 php/libzip: segfault with FL_UNCHANGED on empty archive in zip_name_locate()","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0421.json"},{"CVE":"CVE-2010-0405","severity":"important","public_date":"2010-09-20T00:00:00Z","advisories":["RHSA-2010:0858","RHSA-2010:0703"],"bugzilla":"627882","bugzilla_description":"CVE-2010-0405 bzip2: integer overflow flaw in BZ2_decompress","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["bzip2-0:1.0.3-6.el5_5","bzip2-0:1.0.5-7.el6_0","bzip2-0:1.0.2-14.EL3","bzip2-0:1.0.2-16.el4_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0405.json"},{"CVE":"CVE-2010-0001","severity":"moderate","public_date":"2010-01-20T00:00:00Z","advisories":["RHSA-2010:0061"],"bugzilla":"554418","bugzilla_description":"CVE-2010-0001 gzip: (64 bit) Integer underflow by decompressing LZW format files","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["gzip-0:1.3.3-15.rhel3","gzip-0:1.3.5-11.el5_4.1","gzip-0:1.3.3-18.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0001.json"},{"CVE":"CVE-2008-1372","severity":"moderate","public_date":"2008-03-18T00:00:00Z","advisories":["RHSA-2008:0893"],"bugzilla":"438118","bugzilla_description":"CVE-2008-1372 bzip2: crash on malformed archive file","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bzip2-0:1.0.2-12.EL3","bzip2-0:1.0.3-4.el5_2","bzip2-0:1.0.1-5.EL2.1","bzip2-0:1.0.2-14.el4_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1372.json"},{"CVE":"CVE-2008-0888","severity":"moderate","public_date":"2008-03-17T00:00:00Z","advisories":["RHSA-2008:0196"],"bugzilla":"431438","bugzilla_description":"CVE-2008-0888 unzip: free() called for uninitialized or already freed pointer","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["unzip-0:5.50-36.EL3","unzip-0:5.50-31.EL2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0888.json"},{"CVE":"CVE-2006-4335","severity":"low","public_date":"2006-12-02T00:00:00Z","advisories":["RHSA-2006:0667"],"bugzilla":"220595","bugzilla_description":"CVE-2006-4335 CVE-2006-4336 CVE-2006-4337 multiple vulnerabilities in lha","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-16.rhel4","gzip-0:1.3.3-13.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4335.json"},{"CVE":"CVE-2006-4336","severity":"low","public_date":"2006-12-02T00:00:00Z","advisories":["RHSA-2006:0667"],"bugzilla":"220595","bugzilla_description":"CVE-2006-4335 CVE-2006-4336 CVE-2006-4337 multiple vulnerabilities in lha","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-16.rhel4","gzip-0:1.3.3-13.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4336.json"},{"CVE":"CVE-2006-4337","severity":"low","public_date":"2006-12-02T00:00:00Z","advisories":["RHSA-2006:0667"],"bugzilla":"220595","bugzilla_description":"CVE-2006-4335 CVE-2006-4336 CVE-2006-4337 multiple vulnerabilities in lha","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-16.rhel4","gzip-0:1.3.3-13.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4337.json"},{"CVE":"CVE-2006-4334","severity":"low","public_date":"2006-09-19T00:00:00Z","advisories":["RHSA-2006:0667"],"bugzilla":"1618181","bugzilla_description":"CVE-2006-4334 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-16.rhel4","gzip-0:1.3.3-13.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4334.json"},{"CVE":"CVE-2006-4338","severity":"low","public_date":"2006-09-19T00:00:00Z","advisories":["RHSA-2006:0667"],"bugzilla":"1618182","bugzilla_description":"CVE-2006-4338 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-16.rhel4","gzip-0:1.3.3-13.rhel3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4338.json"},{"CVE":"CVE-2005-4667","severity":"low","public_date":"2005-12-19T00:00:00Z","advisories":["RHBA-2007:0418","RHSA-2007:0203"],"bugzilla":"1617861","bugzilla_description":"CVE-2005-4667 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["unzip-0:5.50-35.EL3","unzip-0:5.51-9.EL4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4667.json"},{"CVE":"CVE-2005-2475","severity":"low","public_date":"2005-08-02T00:00:00Z","advisories":["RHBA-2007:0418","RHSA-2007:0203"],"bugzilla":"1617723","bugzilla_description":"CVE-2005-2475 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["unzip-0:5.50-35.EL3","unzip-0:5.51-9.EL4.5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2475.json"},{"CVE":"CVE-2005-0758","severity":"low","public_date":"2005-04-22T00:00:00Z","advisories":["RHSA-2005:357","RHSA-2005:474"],"bugzilla":"1617573","bugzilla_description":"CVE-2005-0758 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-12.rhel3","gzip-0:1.3.3-15.rhel4","bzip2-0:1.0.2-11.EL3.4","bzip2-0:1.0.2-13.EL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0758.json"},{"CVE":"CVE-2005-1228","severity":"low","public_date":"2005-04-18T00:00:00Z","advisories":["RHSA-2005:357"],"bugzilla":"1617616","bugzilla_description":"CVE-2005-1228 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-12.rhel3","gzip-0:1.3.3-15.rhel4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1228.json"},{"CVE":"CVE-2005-0988","severity":"low","public_date":"2005-04-04T00:00:00Z","advisories":["RHSA-2005:357"],"bugzilla":"1617595","bugzilla_description":"CVE-2005-0988 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["gzip-0:1.3.3-12.rhel3","gzip-0:1.3.3-15.rhel4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0988.json"},{"CVE":"CVE-2005-0953","severity":"low","public_date":"2005-03-30T00:00:00Z","advisories":["RHSA-2005:474"],"bugzilla":"1617590","bugzilla_description":"CVE-2005-0953 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bzip2-0:1.0.2-11.EL3.4","bzip2-0:1.0.2-13.EL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0953.json"},{"CVE":"CVE-2005-1260","severity":"low","public_date":"2005-02-15T00:00:00Z","advisories":["RHSA-2005:474"],"bugzilla":"1617617","bugzilla_description":"CVE-2005-1260 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["bzip2-0:1.0.2-11.EL3.4","bzip2-0:1.0.2-13.EL4.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1260.json"},{"CVE":"CVE-2004-1010","severity":"low","public_date":"2004-11-03T00:00:00Z","advisories":["RHSA-2004:634"],"bugzilla":"1617348","bugzilla_description":"CVE-2004-1010 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["zip-0:2.3-16.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-1010.json"},{"CVE":"CVE-2003-0367","severity":"moderate","public_date":"2003-07-02T00:00:00Z","advisories":[],"bugzilla":"1850889","bugzilla_description":"CVE-2003-0367 gzip: symlink attack on temporary files leads to arbitrary file overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"(CWE-20|CWE-377)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0367.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"6.2"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zlib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zlib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zlib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zlib-static_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zlib-static_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zlib-static_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zlib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zlib_security_api_results.json
new file mode 100644
index 0000000..400c00d
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zlib_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2016-9843","severity":"low","public_date":"2016-09-29T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402351","bugzilla_description":"CVE-2016-9843 zlib: Big-endian out-of-bounds pointer","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9843.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9840","severity":"low","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402345","bugzilla_description":"CVE-2016-9840 zlib: Out-of-bounds pointer arithmetic in inftrees.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9840.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9841","severity":"low","public_date":"2016-09-22T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402346","bugzilla_description":"CVE-2016-9841 zlib: Out-of-bounds pointer arithmetic in inffast.c","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9841.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-9842","severity":"low","public_date":"2016-09-06T00:00:00Z","advisories":["RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3453","RHSA-2017:1220","RHSA-2017:1222","RHSA-2017:1221","RHSA-2017:3047"],"bugzilla":"1402348","bugzilla_description":"CVE-2016-9842 zlib: Undefined left shift of negative number","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["java-1.6.0-sun-1:1.6.0.171-1jpp.4.el6","java-1.7.0-oracle-1:1.7.0.161-1jpp.4.el7","java-1.6.0-ibm-1:1.6.0.16.45-1jpp.1.el6_9","java-1.8.0-oracle-1:1.8.0.151-1jpp.1.el6","java-1.6.0-sun-1:1.6.0.171-1jpp.4.el7","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.2.el6_9","java-1.7.1-ibm-1:1.7.1.4.5-1jpp.1.el7_3","java-1.8.0-ibm-1:1.8.0.5.5-1jpp.1.el6_9","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el6_9","java-1.7.0-oracle-1:1.7.0.161-1jpp.3.el6","java-1.8.0-oracle-1:1.8.0.151-1jpp.5.el7","java-1.8.0-ibm-1:1.8.0.4.5-1jpp.1.el7_3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9842.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2005-1849","severity":"important","public_date":"2005-08-20T00:00:00Z","advisories":["RHSA-2005:584","RHSA-2008:0264","RHSA-2008:0629","RHSA-2008:0525"],"bugzilla":"430649","bugzilla_description":"CVE-2005-1849 zlib DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["zlib-0:1.2.1.2-1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1849.json"},{"CVE":"CVE-2005-2096","severity":"important","public_date":"2005-07-06T00:00:00Z","advisories":["RHSA-2008:0264","RHSA-2008:0629","RHSA-2008:0525","RHSA-2005:569"],"bugzilla":"430650","bugzilla_description":"CVE-2005-2096 zlib DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["zlib-0:1.2.1.2-1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2096.json"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zsh-html_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zsh-html_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zsh-html_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zsh_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zsh_security_api_results.json
new file mode 100644
index 0000000..a5922e3
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zsh_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2019-20044","severity":"important","public_date":"2020-02-16T00:00:00Z","advisories":["RHSA-2020:0892","RHSA-2020:0903","RHSA-2020:0978","RHSA-2020:0853"],"bugzilla":"1804859","bugzilla_description":"CVE-2019-20044 zsh: insecure dropping of privileges when unsetting PRIVILEGED option","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":["zsh-0:5.5.1-6.el8_0.2","zsh-0:4.3.11-11.el6_10","zsh-0:5.0.2-34.el7_7.2","zsh-0:5.5.1-6.el8_1.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20044.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-13259","severity":"moderate","public_date":"2018-09-04T00:00:00Z","advisories":["RHSA-2019:2017"],"bugzilla":"1626184","bugzilla_description":"CVE-2018-13259 zsh: Improper handling of shebang line longer than 64","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["zsh-0:5.0.2-33.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-13259.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-0502","severity":null,"public_date":"2018-09-04T00:00:00Z","advisories":[],"bugzilla":"1626187","bugzilla_description":"CVE-2018-0502 zsh: Improper parsing of the shebang line with special chars","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0502.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2018-1100","severity":"low","public_date":"2018-04-07T00:00:00Z","advisories":["RHSA-2018:3073","RHSA-2018:1932"],"bugzilla":"1563395","bugzilla_description":"CVE-2018-1100 zsh: buffer overflow in utils.c:checkmailpath() can lead to local arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120->CWE-121","affected_packages":["zsh-0:4.3.11-8.el6","zsh-0:5.0.2-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1100.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1083","severity":"moderate","public_date":"2018-03-26T00:00:00Z","advisories":["RHSA-2018:3073","RHSA-2018:1932"],"bugzilla":"1557382","bugzilla_description":"CVE-2018-1083 zsh: Stack-based buffer overflow in gen_matches_files() at compctl.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120->CWE-121","affected_packages":["zsh-0:4.3.11-8.el6","zsh-0:5.0.2-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1083.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-1071","severity":"low","public_date":"2018-03-09T00:00:00Z","advisories":["RHSA-2018:3073"],"bugzilla":"1553531","bugzilla_description":"CVE-2018-1071 zsh: Stack-based buffer overflow in exec.c:hashcmd()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["zsh-0:5.0.2-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1071.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-10070","severity":"low","public_date":"2018-02-26T00:00:00Z","advisories":[],"bugzilla":"1549287","bugzilla_description":"CVE-2014-10070 zsh: privilege escalation via environment variables","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-95","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-10070.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2018-7549","severity":"low","public_date":"2017-12-22T00:00:00Z","advisories":["RHSA-2018:3073"],"bugzilla":"1549858","bugzilla_description":"CVE-2018-7549 zsh: crash on copying empty hash table","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["zsh-0:5.0.2-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7549.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-18205","severity":"low","public_date":"2017-06-13T00:00:00Z","advisories":["RHSA-2018:3073"],"bugzilla":"1549862","bugzilla_description":"CVE-2017-18205 zsh: NULL dereference in cd in sh compatibility mode under given circumstances","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":["zsh-0:5.0.2-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18205.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.0"},{"CVE":"CVE-2017-18206","severity":"low","public_date":"2017-05-09T00:00:00Z","advisories":["RHSA-2018:3073","RHSA-2018:1932"],"bugzilla":"1549861","bugzilla_description":"CVE-2017-18206 zsh: buffer overrun in symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120->CWE-121","affected_packages":["zsh-0:4.3.11-8.el6","zsh-0:5.0.2-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18206.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7548","severity":"low","public_date":"2017-03-24T00:00:00Z","advisories":[],"bugzilla":"1549841","bugzilla_description":"CVE-2018-7548 zsh: null-pointer deref when using ${(PA)...} on an empty array result","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7548.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2016-10714","severity":"low","public_date":"2016-11-17T00:00:00Z","advisories":[],"bugzilla":"1551765","bugzilla_description":"CVE-2016-10714 zsh: Off-by-one error results in undersized buffers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10714.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2014-10071","severity":"low","public_date":"2014-10-06T00:00:00Z","advisories":["RHSA-2018:3073"],"bugzilla":"1549855","bugzilla_description":"CVE-2014-10071 zsh: buffer overflow for very long fds in >& fd syntax","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120->CWE-121","affected_packages":["zsh-0:5.0.2-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-10071.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"2.8"},{"CVE":"CVE-2014-10072","severity":"low","public_date":"2014-01-20T00:00:00Z","advisories":["RHSA-2018:3073","RHSA-2018:1932"],"bugzilla":"1549836","bugzilla_description":"CVE-2014-10072 zsh: buffer overflow when scanning very long directory paths for symbolic links","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":["zsh-0:4.3.11-8.el6","zsh-0:5.0.2-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-10072.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L","cvss3_score":"5.0"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zstd_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zstd_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zstd_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zziplib-devel_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zziplib-devel_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zziplib-devel_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zziplib-utils_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zziplib-utils_security_api_results.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zziplib-utils_security_api_results.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zziplib_security_api_results.json b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zziplib_security_api_results.json
new file mode 100644
index 0000000..6489df0
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/security_api_results/zziplib_security_api_results.json
@@ -0,0 +1 @@
+[{"CVE":"CVE-2018-17828","severity":"moderate","public_date":"2018-09-25T00:00:00Z","advisories":["RHSA-2020:1178","RHSA-2020:1653"],"bugzilla":"1635888","bugzilla_description":"CVE-2018-17828 zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["zziplib-0:0.13.62-12.el7","zziplib-0:0.13.68-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17828.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.5"},{"CVE":"CVE-2018-16548","severity":"low","public_date":"2018-09-05T00:00:00Z","advisories":["RHSA-2019:2196"],"bugzilla":"1626200","bugzilla_description":"CVE-2018-16548 zziplib: Memory leak triggered in the function __zzip_parse_root_directory in zip.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["zziplib-0:0.13.62-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16548.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2018-7726","severity":"low","public_date":"2018-03-07T00:00:00Z","advisories":["RHSA-2018:3229"],"bugzilla":"1554672","bugzilla_description":"CVE-2018-7726 zziplib: Bus error in zip.c:__zzip_parse_root_directory() cause crash via crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["zziplib-0:0.13.62-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7726.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-7727","severity":"low","public_date":"2018-03-06T00:00:00Z","advisories":["RHSA-2018:3229"],"bugzilla":"1554676","bugzilla_description":"CVE-2018-7727 zziplib: Memory leak in memdisk.c:zzip_mem_disk_new() can lead to denial of service via crafted zip","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-772","affected_packages":["zziplib-0:0.13.62-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7727.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6869","severity":"low","public_date":"2018-02-08T00:00:00Z","advisories":[],"bugzilla":"1543941","bugzilla_description":"CVE-2018-6869 zziplib: uncontrolled memory allocation in __zzip_parse_root_directory in zzip/zip.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6869.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2018-7725","severity":"low","public_date":"2018-02-07T00:00:00Z","advisories":["RHSA-2018:3229"],"bugzilla":"1554662","bugzilla_description":"CVE-2018-7725 zziplib: out of bound read in mmapped.c:zzip_disk_fread() causes crash","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["zziplib-0:0.13.62-9.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7725.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2018-6484","severity":"low","public_date":"2018-02-02T00:00:00Z","advisories":[],"bugzilla":"1541256","bugzilla_description":"CVE-2018-6484 zziplib: Loading of misaligned memory address in zip.c:__zzip_fetch_disk_trailer can lead to a denial of service via crafted zip file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6484.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6542","severity":"low","public_date":"2018-02-02T00:00:00Z","advisories":[],"bugzilla":"1542257","bugzilla_description":"CVE-2018-6542 zziplib:  bus error in zzip_disk_findfirst function in zzip/mmapped.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-393","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6542.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6540","severity":"low","public_date":"2018-02-02T00:00:00Z","advisories":[],"bugzilla":"1542261","bugzilla_description":"CVE-2018-6540 zziplib: bus error in zzip_disk_findfirst function in zzip/mmapped.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-131","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6540.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6541","severity":"low","public_date":"2018-02-01T00:00:00Z","advisories":["RHSA-2019:2196"],"bugzilla":"1598244","bugzilla_description":"CVE-2018-6541 zziplib: Bus error caused by loading of a misaligned address inzzip/zip.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["zziplib-0:0.13.62-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6541.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2018-6381","severity":"low","public_date":"2018-01-29T00:00:00Z","advisories":[],"bugzilla":"1540183","bugzilla_description":"CVE-2018-6381 zziplib: Invalid memory access in the zzip_disk_fread function in zzip/mmapped.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-119","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-6381.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-5974","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422507","bugzilla_description":"CVE-2017-5974 zziplib: heap-based buffer overflow in __zzip_get32 (fetch.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5974.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5975","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422509","bugzilla_description":"CVE-2017-5975 zziplib: heap-based buffer overflow in __zzip_get64 (fetch.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5975.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5976","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422510","bugzilla_description":"CVE-2017-5976 zziplib: heap-based buffer overflow in zzip_mem_entry_extra_block (memdisk.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5976.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5977","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422512","bugzilla_description":"CVE-2017-5977 zziplib: invalid memory read in zzip_mem_entry_extra_block (memdisk.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5977.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5978","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422513","bugzilla_description":"CVE-2017-5978 zziplib: out of bounds read in zzip_mem_entry_new (memdisk.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5978.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5979","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422514","bugzilla_description":"CVE-2017-5979 zziplib: NULL pointer dereference in prescan_entry (fseeko.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5979.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5980","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422515","bugzilla_description":"CVE-2017-5980 zziplib: NULL pointer dereference in zzip_mem_entry_new (memdisk.c)","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5980.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2017-5981","severity":"low","public_date":"2017-02-09T00:00:00Z","advisories":[],"bugzilla":"1422516","bugzilla_description":"CVE-2017-5981 zziplib: assertion failure in seeko.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5981.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"}]
\ No newline at end of file
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/table-1.csv b/tools/redhat_package_manifest_scraper/data/redhat8/table-1.csv
new file mode 100644
index 0000000..427bf18
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/table-1.csv
@@ -0,0 +1,1331 @@
+,Package,License
+0,aajohan-comfortaa-fonts,OFL
+1,acl,GPLv2+
+2,acpica-tools,GPLv2
+3,adcli,LGPLv2+
+4,adcli-doc,LGPLv2+
+5,arpwatch,BSD with advertising
+6,at,GPLv3+ and GPLv2+ and ISC and MIT and Public Domain
+7,atlas,BSD
+8,atlas-corei2,BSD
+9,atlas-corei2-devel,BSD
+10,atlas-devel,BSD
+11,atlas-z10,BSD
+12,atlas-z10-devel,BSD
+13,atlas-z196,BSD
+14,atlas-z196-devel,BSD
+15,attr,GPLv2+
+16,audispd-plugins,GPLv2+
+17,audispd-plugins-zos,GPLv2+
+18,audit,GPLv2+
+19,audit-libs,LGPLv2+
+20,audit-libs-devel,LGPLv2+
+21,augeas,LGPLv2+
+22,augeas-libs,LGPLv2+
+23,authselect,GPLv3+
+24,authselect-libs,GPLv3+
+25,autofs,GPLv2+
+26,avahi,LGPLv2+
+27,avahi-autoipd,LGPLv2+
+28,avahi-glib,LGPLv2+
+29,avahi-gobject,LGPLv2+
+30,avahi-libs,LGPLv2+
+31,basesystem,Public Domain
+32,bash,GPLv3+
+33,bash-completion,GPLv2+
+34,bash-doc,GPLv3+
+35,bc,GPLv2+
+36,bind-export-devel,MPLv2.0
+37,bind-export-libs,MPLv2.0
+38,binutils,GPLv3+
+39,biosdevname,GPLv2
+40,blktrace,GPLv2+
+41,bluez,GPLv2+
+42,bluez-hid2hci,GPLv2+
+43,bluez-libs,GPLv2+
+44,bluez-obexd,GPLv2+
+45,bolt,LGPLv2+
+46,boom-boot,GPLv2
+47,boom-boot-conf,GPLv2
+48,boom-boot-grub2,GPLv2
+49,bpftool,GPLv2
+50,brotli,MIT
+51,bsdtar,BSD
+52,bubblewrap,LGPLv2+
+53,bzip2,BSD
+54,bzip2-devel,BSD
+55,bzip2-libs,BSD
+56,c-ares,MIT
+57,c-ares-devel,MIT
+58,ca-certificates,Public Domain
+59,cachefilesd,GPLv2+
+60,checkpolicy,GPLv2
+61,chkconfig,GPLv2
+62,chrony,GPLv2
+63,chrpath,GPL+
+64,cifs-utils,GPLv3
+65,cockpit,LGPLv2+
+66,cockpit-bridge,LGPLv2+
+67,cockpit-doc,LGPLv2+
+68,cockpit-system,LGPLv2+
+69,cockpit-ws,LGPLv2+
+70,conntrack-tools,GPLv2
+71,coreutils,GPLv3+
+72,coreutils-common,GPLv3+
+73,coreutils-single,GPLv3+
+74,cpio,GPLv3+
+75,cracklib,LGPLv2+
+76,cracklib-dicts,LGPLv2+
+77,crda,ISC
+78,cronie,MIT and BSD and ISC and GPLv2+
+79,cronie-anacron,MIT and BSD and ISC and GPLv2+
+80,cronie-noanacron,MIT and BSD and ISC and GPLv2+
+81,crontabs,Public Domain and GPLv2
+82,crypto-policies,LGPLv2+
+83,cryptsetup,GPLv2+ and LGPLv2+
+84,cryptsetup-libs,GPLv2+ and LGPLv2+
+85,cryptsetup-reencrypt,GPLv2+ and LGPLv2+
+86,ctdb,GPLv3+ and LGPLv3+
+87,ctdb-tests,GPLv3+ and LGPLv3+
+88,cups-libs,LGPLv2 and zlib
+89,curl,MIT
+90,cyrus-sasl,BSD with advertising
+91,cyrus-sasl-devel,BSD with advertising
+92,cyrus-sasl-gs2,BSD with advertising
+93,cyrus-sasl-gssapi,BSD with advertising
+94,cyrus-sasl-ldap,BSD with advertising
+95,cyrus-sasl-lib,BSD with advertising
+96,cyrus-sasl-md5,BSD with advertising
+97,cyrus-sasl-ntlm,BSD with advertising
+98,cyrus-sasl-plain,BSD with advertising
+99,cyrus-sasl-scram,BSD with advertising
+100,daxctl,GPLv2
+101,daxctl-libs,LGPLv2
+102,dbus,(GPLv2+ or AFL) and GPLv2+
+103,dbus-common,(GPLv2+ or AFL) and GPLv2+
+104,dbus-daemon,(GPLv2+ or AFL) and GPLv2+
+105,dbus-glib,AFL and GPLv2+
+106,dbus-libs,(GPLv2+ or AFL) and GPLv2+
+107,dbus-tools,(GPLv2+ or AFL) and GPLv2+
+108,dbxtool,GPLv2
+109,dejavu-fonts-common,Bitstream Vera and Public Domain
+110,dejavu-sans-fonts,Bitstream Vera and Public Domain
+111,dejavu-sans-mono-fonts,Bitstream Vera and Public Domain
+112,dejavu-serif-fonts,Bitstream Vera and Public Domain
+113,device-mapper,GPLv2
+114,device-mapper-event,GPLv2
+115,device-mapper-event-libs,LGPLv2
+116,device-mapper-libs,LGPLv2
+117,device-mapper-multipath,GPLv2
+118,device-mapper-multipath-libs,GPLv2 and LGPLv2+
+119,device-mapper-persistent-data,GPLv3+
+120,dhcp-client,ISC
+121,dhcp-common,ISC
+122,dhcp-libs,ISC
+123,dhcp-relay,ISC
+124,dhcp-server,ISC
+125,diffutils,GPLv3+
+126,dlm-lib,GPLv2 and GPLv2+ and LGPLv2+
+127,dmidecode,GPLv2+
+128,dnf,GPLv2+ and GPLv2 and GPL
+129,dnf-automatic,GPLv2+ and GPLv2 and GPL
+130,dnf-data,GPLv2+ and GPLv2 and GPL
+131,dnf-plugin-subscription-manager,GPLv2
+132,dnf-plugins-core,GPLv2+
+133,dos2unix,BSD
+134,dosfstools,GPLv3+
+135,dracut,GPLv2+ and LGPLv2+
+136,dracut-caps,GPLv2+ and LGPLv2+
+137,dracut-config-generic,GPLv2+ and LGPLv2+
+138,dracut-config-rescue,GPLv2+ and LGPLv2+
+139,dracut-live,GPLv2+ and LGPLv2+
+140,dracut-network,GPLv2+ and LGPLv2+
+141,dracut-squash,GPLv2+ and LGPLv2+
+142,dracut-tools,GPLv2+ and LGPLv2+
+143,dump,BSD
+144,e2fsprogs,GPLv2
+145,e2fsprogs-devel,GPLv2 and LGPLv2
+146,e2fsprogs-libs,GPLv2 and LGPLv2
+147,ed,GPLv3+ and GFDL
+148,efi-filesystem,GPLv3+
+149,efibootmgr,GPLv2+
+150,efivar,LGPLv2.1
+151,efivar-libs,LGPLv2.1
+152,elfutils,GPLv3+ and (GPLv2+ or LGPLv3+) and GFDL
+153,elfutils-default-yama-scope,GPLv2+ or LGPLv3+
+154,elfutils-devel,GPLv2+ or LGPLv3+
+155,elfutils-libelf,GPLv2+ or LGPLv3+
+156,elfutils-libelf-devel,GPLv2+ or LGPLv3+
+157,elfutils-libs,GPLv2+ or LGPLv3+
+158,emacs-filesystem,GPLv3+ and CC0-1.0
+159,environment-modules,GPLv2+
+160,ethtool,GPLv2
+161,expat,MIT
+162,expat-devel,MIT
+163,expect,Public Domain
+164,fcoe-utils,GPLv2
+165,file,BSD
+166,file-libs,BSD
+167,filesystem,Public Domain
+168,findutils,GPLv3+
+169,fipscheck,BSD
+170,fipscheck-lib,BSD
+171,firewalld,GPLv2+
+172,firewalld-filesystem,GPLv2+
+173,fontconfig,MIT and Public Domain and UCD
+174,fontconfig-devel,MIT and Public Domain and UCD
+175,fontpackages-filesystem,Public Domain
+176,freeipmi,GPLv3+
+177,freeipmi-bmc-watchdog,GPLv3+
+178,freeipmi-ipmidetectd,GPLv3+
+179,freeipmi-ipmiseld,GPLv3+
+180,freetype,(FTL or GPLv2+) and BSD and MIT and Public Domain and zlib with acknowledgement
+181,freetype-devel,(FTL or GPLv2+) and BSD and MIT and Public Domain and zlib with acknowledgement
+182,fuse,GPL+
+183,fuse-common,GPL+
+184,fuse-devel,LGPLv2+
+185,fuse-libs,LGPLv2+
+186,fuse3,GPL+
+187,fuse3-devel,LGPLv2+
+188,fuse3-libs,LGPLv2+
+189,fwupd,LGPLv2+
+190,fwupdate,GPLv2+
+191,fwupdate-efi,GPLv2+
+192,fwupdate-libs,GPLv2+
+193,fxload,GPLv2+
+194,gamin,LGPLv2
+195,gawk,GPLv3+ and GPLv2+ and LGPLv2+ and BSD
+196,gdbm,GPLv3+
+197,gdbm-devel,GPLv3+
+198,gdbm-libs,GPLv3+
+199,gdisk,GPLv2
+200,gdk-pixbuf2,LGPLv2+
+201,genwqe-tools,ASL 2.0
+202,genwqe-vpd,ASL 2.0
+203,genwqe-zlib,ASL 2.0
+204,genwqe-zlib-devel,ASL 2.0
+205,gettext,GPLv3+ and LGPLv2+
+206,gettext-common-devel,GPLv3+
+207,gettext-devel,LGPLv2+ and GPLv3+
+208,gettext-libs,LGPLv2+ and GPLv3+
+209,gfs2-utils,GPLv2+ and LGPLv2+
+210,glib-networking,LGPLv2+
+211,glib2,LGPLv2+
+212,glib2-devel,LGPLv2+
+213,glib2-fam,LGPLv2+
+214,glib2-tests,LGPLv2+
+215,glibc,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+216,glibc-all-langpacks,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+217,glibc-common,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+218,glibc-devel,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+219,glibc-headers,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+220,glibc-langpack-aa,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+221,glibc-langpack-af,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+222,glibc-langpack-agr,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+223,glibc-langpack-ak,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+224,glibc-langpack-am,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+225,glibc-langpack-an,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+226,glibc-langpack-anp,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+227,glibc-langpack-ar,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+228,glibc-langpack-as,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+229,glibc-langpack-ast,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+230,glibc-langpack-ayc,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+231,glibc-langpack-az,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+232,glibc-langpack-be,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+233,glibc-langpack-bem,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+234,glibc-langpack-ber,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+235,glibc-langpack-bg,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+236,glibc-langpack-bhb,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+237,glibc-langpack-bho,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+238,glibc-langpack-bi,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+239,glibc-langpack-bn,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+240,glibc-langpack-bo,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+241,glibc-langpack-br,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+242,glibc-langpack-brx,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+243,glibc-langpack-bs,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+244,glibc-langpack-byn,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+245,glibc-langpack-ca,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+246,glibc-langpack-ce,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+247,glibc-langpack-chr,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+248,glibc-langpack-cmn,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+249,glibc-langpack-crh,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+250,glibc-langpack-cs,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+251,glibc-langpack-csb,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+252,glibc-langpack-cv,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+253,glibc-langpack-cy,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+254,glibc-langpack-da,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+255,glibc-langpack-de,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+256,glibc-langpack-doi,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+257,glibc-langpack-dsb,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+258,glibc-langpack-dv,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+259,glibc-langpack-dz,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+260,glibc-langpack-el,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+261,glibc-langpack-en,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+262,glibc-langpack-eo,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+263,glibc-langpack-es,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+264,glibc-langpack-et,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+265,glibc-langpack-eu,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+266,glibc-langpack-fa,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+267,glibc-langpack-ff,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+268,glibc-langpack-fi,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+269,glibc-langpack-fil,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+270,glibc-langpack-fo,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+271,glibc-langpack-fr,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+272,glibc-langpack-fur,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+273,glibc-langpack-fy,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+274,glibc-langpack-ga,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+275,glibc-langpack-gd,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+276,glibc-langpack-gez,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+277,glibc-langpack-gl,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+278,glibc-langpack-gu,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+279,glibc-langpack-gv,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+280,glibc-langpack-ha,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+281,glibc-langpack-hak,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+282,glibc-langpack-he,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+283,glibc-langpack-hi,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+284,glibc-langpack-hif,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+285,glibc-langpack-hne,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+286,glibc-langpack-hr,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+287,glibc-langpack-hsb,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+288,glibc-langpack-ht,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+289,glibc-langpack-hu,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+290,glibc-langpack-hy,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+291,glibc-langpack-ia,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+292,glibc-langpack-id,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+293,glibc-langpack-ig,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+294,glibc-langpack-ik,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+295,glibc-langpack-is,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+296,glibc-langpack-it,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+297,glibc-langpack-iu,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+298,glibc-langpack-ja,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+299,glibc-langpack-ka,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+300,glibc-langpack-kab,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+301,glibc-langpack-kk,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+302,glibc-langpack-kl,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+303,glibc-langpack-km,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+304,glibc-langpack-kn,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+305,glibc-langpack-ko,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+306,glibc-langpack-kok,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+307,glibc-langpack-ks,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+308,glibc-langpack-ku,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+309,glibc-langpack-kw,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+310,glibc-langpack-ky,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+311,glibc-langpack-lb,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+312,glibc-langpack-lg,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+313,glibc-langpack-li,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+314,glibc-langpack-lij,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+315,glibc-langpack-ln,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+316,glibc-langpack-lo,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+317,glibc-langpack-lt,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+318,glibc-langpack-lv,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+319,glibc-langpack-lzh,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+320,glibc-langpack-mag,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+321,glibc-langpack-mai,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+322,glibc-langpack-mfe,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+323,glibc-langpack-mg,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+324,glibc-langpack-mhr,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+325,glibc-langpack-mi,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+326,glibc-langpack-miq,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+327,glibc-langpack-mjw,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+328,glibc-langpack-mk,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+329,glibc-langpack-ml,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+330,glibc-langpack-mn,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+331,glibc-langpack-mni,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+332,glibc-langpack-mr,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+333,glibc-langpack-ms,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+334,glibc-langpack-mt,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+335,glibc-langpack-my,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+336,glibc-langpack-nan,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+337,glibc-langpack-nb,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+338,glibc-langpack-nds,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+339,glibc-langpack-ne,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+340,glibc-langpack-nhn,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+341,glibc-langpack-niu,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+342,glibc-langpack-nl,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+343,glibc-langpack-nn,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+344,glibc-langpack-nr,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+345,glibc-langpack-nso,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+346,glibc-langpack-oc,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+347,glibc-langpack-om,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+348,glibc-langpack-or,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+349,glibc-langpack-os,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+350,glibc-langpack-pa,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+351,glibc-langpack-pap,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+352,glibc-langpack-pl,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+353,glibc-langpack-ps,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+354,glibc-langpack-pt,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+355,glibc-langpack-quz,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+356,glibc-langpack-raj,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+357,glibc-langpack-ro,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+358,glibc-langpack-ru,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+359,glibc-langpack-rw,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+360,glibc-langpack-sa,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+361,glibc-langpack-sah,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+362,glibc-langpack-sat,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+363,glibc-langpack-sc,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+364,glibc-langpack-sd,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+365,glibc-langpack-se,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+366,glibc-langpack-sgs,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+367,glibc-langpack-shn,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+368,glibc-langpack-shs,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+369,glibc-langpack-si,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+370,glibc-langpack-sid,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+371,glibc-langpack-sk,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+372,glibc-langpack-sl,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+373,glibc-langpack-sm,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+374,glibc-langpack-so,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+375,glibc-langpack-sq,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+376,glibc-langpack-sr,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+377,glibc-langpack-ss,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+378,glibc-langpack-st,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+379,glibc-langpack-sv,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+380,glibc-langpack-sw,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+381,glibc-langpack-szl,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+382,glibc-langpack-ta,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+383,glibc-langpack-tcy,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+384,glibc-langpack-te,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+385,glibc-langpack-tg,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+386,glibc-langpack-th,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+387,glibc-langpack-the,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+388,glibc-langpack-ti,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+389,glibc-langpack-tig,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+390,glibc-langpack-tk,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+391,glibc-langpack-tl,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+392,glibc-langpack-tn,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+393,glibc-langpack-to,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+394,glibc-langpack-tpi,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+395,glibc-langpack-tr,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+396,glibc-langpack-ts,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+397,glibc-langpack-tt,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+398,glibc-langpack-ug,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+399,glibc-langpack-uk,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+400,glibc-langpack-unm,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+401,glibc-langpack-ur,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+402,glibc-langpack-uz,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+403,glibc-langpack-ve,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+404,glibc-langpack-vi,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+405,glibc-langpack-wa,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+406,glibc-langpack-wae,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+407,glibc-langpack-wal,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+408,glibc-langpack-wo,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+409,glibc-langpack-xh,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+410,glibc-langpack-yi,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+411,glibc-langpack-yo,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+412,glibc-langpack-yue,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+413,glibc-langpack-yuw,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+414,glibc-langpack-zh,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+415,glibc-langpack-zu,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+416,glibc-locale-source,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+417,glibc-minimal-langpack,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+418,glusterfs,GPLv2 or LGPLv3+
+419,glusterfs-client-xlators,GPLv2 or LGPLv3+
+420,glusterfs-fuse,GPLv2 or LGPLv3+
+421,glusterfs-libs,GPLv2 or LGPLv3+
+422,glusterfs-rdma,GPLv2 or LGPLv3+
+423,gmp,LGPLv3+ or GPLv2+
+424,gmp-c++,LGPLv3+ or GPLv2+
+425,gmp-devel,LGPLv3+ or GPLv2+
+426,gnupg2,GPLv3+
+427,gnupg2-smime,GPLv3+
+428,gnutls,GPLv3+ and LGPLv2+
+429,gobject-introspection,"GPLv2+, LGPLv2+, MIT"
+430,gpgme,LGPLv2+
+431,gpgmepp,LGPLv2+
+432,grep,GPLv3+
+433,groff-base,GPLv3+ and GFDL and BSD and MIT
+434,grub2-common,GPLv3+
+435,grub2-efi-aa64,GPLv3+
+436,grub2-efi-aa64-cdboot,GPLv3+
+437,grub2-efi-aa64-modules,GPLv3+
+438,grub2-efi-ia32,GPLv3+
+439,grub2-efi-ia32-cdboot,GPLv3+
+440,grub2-efi-ia32-modules,GPLv3+
+441,grub2-efi-x64,GPLv3+
+442,grub2-efi-x64-cdboot,GPLv3+
+443,grub2-efi-x64-modules,GPLv3+
+444,grub2-pc,GPLv3+
+445,grub2-pc-modules,GPLv3+
+446,grub2-ppc64le,GPLv3+
+447,grub2-ppc64le-modules,GPLv3+
+448,grub2-tools,GPLv3+
+449,grub2-tools-efi,GPLv3+
+450,grub2-tools-extra,GPLv3+
+451,grub2-tools-minimal,GPLv3+
+452,grubby,GPLv2+
+453,gsettings-desktop-schemas,LGPLv2+
+454,gssproxy,MIT
+455,gzip,GPLv3+ and GFDL
+456,hardlink,GPLv2+
+457,hdparm,BSD
+458,hostname,GPLv2+
+459,hwdata,GPLv2+
+460,hwloc,BSD
+461,hwloc-libs,BSD
+462,ibacm,GPLv2 or BSD
+463,icu,MIT and UCD and Public Domain
+464,ima-evm-utils,GPLv2
+465,infiniband-diags,GPLv2 or BSD
+466,info,GPLv3+
+467,initscripts,GPLv2
+468,integritysetup,GPLv2+ and LGPLv2+
+469,intel-cmt-cat,BSD
+470,iotop,GPLv2+
+471,ipcalc,GPLv2+
+472,iproute,GPLv2+ and Public Domain
+473,iproute-tc,GPLv2+
+474,iprutils,CPL
+475,ipset,GPLv2
+476,ipset-libs,GPLv2
+477,ipset-service,GPLv2
+478,iptables,GPLv2 and Artistic 2.0 and ISC
+479,iptables-arptables,GPLv2 and Artistic 2.0 and ISC
+480,iptables-devel,GPLv2 and Artistic 2.0 and ISC
+481,iptables-ebtables,GPLv2 and Artistic 2.0 and ISC
+482,iptables-libs,GPLv2 and Artistic 2.0 and ISC
+483,iptables-services,GPLv2 and Artistic 2.0 and ISC
+484,iptables-utils,GPLv2 and Artistic 2.0 and ISC
+485,iptraf-ng,GPLv2+
+486,iptstate,zlib
+487,iputils,BSD and GPLv2+
+488,iputils-ninfod,BSD and GPLv2+
+489,irqbalance,GPLv2
+490,iscsi-initiator-utils,GPLv2+
+491,iscsi-initiator-utils-iscsiuio,BSD
+492,isns-utils,LGPLv2+
+493,isns-utils-devel,LGPLv2+
+494,isns-utils-libs,LGPLv2+
+495,iw,ISC
+496,iwl100-firmware,"Redistributable, no modification permitted"
+497,iwl1000-firmware,"Redistributable, no modification permitted"
+498,iwl105-firmware,"Redistributable, no modification permitted"
+499,iwl135-firmware,"Redistributable, no modification permitted"
+500,iwl2000-firmware,"Redistributable, no modification permitted"
+501,iwl2030-firmware,"Redistributable, no modification permitted"
+502,iwl3160-firmware,"Redistributable, no modification permitted"
+503,iwl3945-firmware,"Redistributable, no modification permitted"
+504,iwl4965-firmware,"Redistributable, no modification permitted"
+505,iwl5000-firmware,"Redistributable, no modification permitted"
+506,iwl5150-firmware,"Redistributable, no modification permitted"
+507,iwl6000-firmware,"Redistributable, no modification permitted"
+508,iwl6000g2a-firmware,"Redistributable, no modification permitted"
+509,iwl6000g2b-firmware,"Redistributable, no modification permitted"
+510,iwl6050-firmware,"Redistributable, no modification permitted"
+511,iwl7260-firmware,"Redistributable, no modification permitted"
+512,iwpmd,GPLv2 or BSD
+513,jansson,MIT
+514,jimtcl,BSD
+515,json-c,MIT
+516,json-glib,LGPLv2+
+517,kabi-dw,GPLv3+
+518,kbd,GPLv2+
+519,kbd-legacy,GPLv2+
+520,kbd-misc,GPLv2+
+521,kernel,"GPLv2 and Redistributable, no modification permitted"
+522,kernel-abi-whitelists,"GPLv2 and Redistributable, no modification permitted"
+523,kernel-core,"GPLv2 and Redistributable, no modification permitted"
+524,kernel-cross-headers,"GPLv2 and Redistributable, no modification permitted"
+525,kernel-debug,"GPLv2 and Redistributable, no modification permitted"
+526,kernel-debug-core,"GPLv2 and Redistributable, no modification permitted"
+527,kernel-debug-devel,"GPLv2 and Redistributable, no modification permitted"
+528,kernel-debug-modules,"GPLv2 and Redistributable, no modification permitted"
+529,kernel-debug-modules-extra,"GPLv2 and Redistributable, no modification permitted"
+530,kernel-devel,"GPLv2 and Redistributable, no modification permitted"
+531,kernel-doc,"GPLv2 and Redistributable, no modification permitted"
+532,kernel-headers,"GPLv2 and Redistributable, no modification permitted"
+533,kernel-modules,"GPLv2 and Redistributable, no modification permitted"
+534,kernel-modules-extra,"GPLv2 and Redistributable, no modification permitted"
+535,kernel-tools,GPLv2
+536,kernel-tools-libs,GPLv2
+537,kernel-zfcpdump,"GPLv2 and Redistributable, no modification permitted"
+538,kernel-zfcpdump-core,"GPLv2 and Redistributable, no modification permitted"
+539,kernel-zfcpdump-devel,"GPLv2 and Redistributable, no modification permitted"
+540,kernel-zfcpdump-modules,"GPLv2 and Redistributable, no modification permitted"
+541,kernel-zfcpdump-modules-extra,"GPLv2 and Redistributable, no modification permitted"
+542,kexec-tools,GPLv2
+543,keyutils,GPLv2+ and LGPLv2+
+544,keyutils-libs,GPLv2+ and LGPLv2+
+545,keyutils-libs-devel,GPLv2+ and LGPLv2+
+546,kmod,GPLv2+
+547,kmod-kvdo,GPLv2+
+548,kmod-libs,LGPLv2+
+549,kpartx,GPLv2
+550,kpatch,GPLv2
+551,krb5-devel,MIT
+552,krb5-libs,MIT
+553,krb5-pkinit,MIT
+554,krb5-server,MIT
+555,krb5-server-ldap,MIT
+556,krb5-workstation,MIT
+557,ksc,GPLv2+
+558,ldb-tools,LGPLv3+
+559,ledmon,GPLv2+
+560,less,GPLv3+ or BSD
+561,libacl,LGPLv2+
+562,libacl-devel,LGPLv2+
+563,libaio,LGPLv2+
+564,libaio-devel,LGPLv2+
+565,libappstream-glib,LGPLv2+
+566,libarchive,BSD
+567,libasan,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+568,libassuan,LGPLv2+ and GPLv3+
+569,libatomic,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+570,libatomic-static,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+571,libattr,LGPLv2+
+572,libattr-devel,LGPLv2+
+573,libbasicobjects,GPLv3+
+574,libblkid,LGPLv2+
+575,libblkid-devel,LGPLv2+
+576,libbpf,LGPLv2 or BSD
+577,libcap,GPLv2
+578,libcap-devel,GPLv2
+579,libcap-ng,LGPLv2+
+580,libcap-ng-devel,LGPLv2+
+581,libcap-ng-utils,GPLv2+
+582,libcgroup,LGPLv2+
+583,libcgroup-pam,LGPLv2+
+584,libcgroup-tools,LGPLv2+
+585,libcollection,LGPLv3+
+586,libcom_err,MIT
+587,libcom_err-devel,MIT
+588,libcomps,GPLv2+
+589,libcomps-devel,GPLv2+
+590,libconfig,LGPLv2+
+591,libcroco,LGPLv2
+592,libcurl,MIT
+593,libcurl-devel,MIT
+594,libcurl-minimal,MIT
+595,libcxl,ASL 2.0
+596,libdaemon,LGPLv2+
+597,libdb,BSD and LGPLv2 and Sleepycat
+598,libdb-utils,BSD and LGPLv2 and Sleepycat
+599,libdhash,LGPLv3+
+600,libdmmp,GPLv3+
+601,libdnf,LGPLv2+
+602,libedit,BSD
+603,liberation-fonts,OFL
+604,liberation-fonts-common,OFL
+605,liberation-mono-fonts,OFL
+606,liberation-narrow-fonts,Liberation
+607,liberation-sans-fonts,OFL
+608,liberation-serif-fonts,OFL
+609,libertas-sd8686-firmware,"Redistributable, no modification permitted"
+610,libertas-sd8787-firmware,"Redistributable, no modification permitted"
+611,libertas-usb8388-firmware,"Redistributable, no modification permitted"
+612,libertas-usb8388-olpc-firmware,"Redistributable, no modification permitted"
+613,libevent,BSD and ISC
+614,libevent-doc,BSD and MIT
+615,libfabric,BSD or GPLv2
+616,libfdisk,LGPLv2+
+617,libfdisk-devel,LGPLv2+
+618,libffi,MIT
+619,libffi-devel,MIT
+620,libgcab1,LGPLv2+
+621,libgcc,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+622,libgcrypt,LGPLv2+
+623,libgcrypt-devel,LGPLv2+ and GPLv2+
+624,libgfortran,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+625,libgomp,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+626,libgomp-offload-nvptx,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+627,libgpg-error,LGPLv2+
+628,libgpg-error-devel,LGPLv2+
+629,libgudev,LGPLv2+
+630,libgusb,LGPLv2+
+631,libhbaapi,SNIA
+632,libhbalinux,LGPLv2
+633,libhbalinux-devel,LGPLv2
+634,libhugetlbfs,LGPLv2+
+635,libhugetlbfs-devel,LGPLv2+
+636,libhugetlbfs-utils,LGPLv2+
+637,libibumad,GPLv2 or BSD
+638,libibverbs,GPLv2 or BSD
+639,libibverbs-utils,GPLv2 or BSD
+640,libica,CPL
+641,libica-devel,CPL
+642,libical,LGPLv2 or MPLv2.0
+643,libicu,MIT and UCD and Public Domain
+644,libicu-devel,MIT and UCD and Public Domain
+645,libicu-doc,MIT and UCD and Public Domain
+646,libidn2,(GPLv2+ or LGPLv3+) and GPLv3+
+647,libini_config,LGPLv3+
+648,libipa_hbac,LGPLv3+
+649,libitm,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+650,libkadm5,MIT
+651,libkcapi,BSD or GPLv2
+652,libkcapi-hmaccalc,BSD or GPLv2
+653,libkeepalive,MIT
+654,libksba,(LGPLv3+ or GPLv2+) and GPLv3+
+655,libldb,LGPLv3+
+656,libldb-devel,LGPLv3+
+657,liblsan,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+658,libmbim,LGPLv2+
+659,libmbim-utils,GPLv2+
+660,libmetalink,MIT
+661,libmicrohttpd,LGPLv2+
+662,libmnl,LGPLv2+
+663,libmodman,LGPLv2+
+664,libmodulemd,MIT
+665,libmodulemd1,MIT
+666,libmount,LGPLv2+
+667,libndp,LGPLv2+
+668,libnetfilter_conntrack,GPLv2+
+669,libnetfilter_cthelper,GPLv2
+670,libnetfilter_cttimeout,GPLv2+
+671,libnetfilter_queue,GPLv2
+672,libnfnetlink,GPLv2+
+673,libnfsidmap,BSD
+674,libnftnl,GPLv2+
+675,libnghttp2,MIT
+676,libnl3,LGPLv2
+677,libnl3-cli,LGPLv2
+678,libnl3-devel,LGPLv2
+679,libnl3-doc,LGPLv2
+680,libnsl,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+681,libnsl2,BSD and LGPLv2+
+682,libocxl,ASL 2.0
+683,libpath_utils,LGPLv3+
+684,libpcap,BSD with advertising
+685,libpciaccess,MIT
+686,libpeas,LGPLv2+
+687,libpipeline,GPLv3+
+688,libpkgconf,ISC
+689,libpng,zlib
+690,libpng-devel,zlib
+691,libproxy,LGPLv2+
+692,libpsl,MIT
+693,libpsm2,BSD or GPLv2
+694,libpsm2-compat,BSD or GPLv2
+695,libpwquality,BSD or GPLv2+
+696,libqb,LGPLv2+
+697,libqb-devel,LGPLv2+
+698,libqmi,LGPLv2+
+699,libqmi-utils,GPLv2+
+700,libquadmath,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+701,librabbitmq,MIT
+702,librdmacm,GPLv2 or BSD
+703,librdmacm-utils,GPLv2 or BSD
+704,libref_array,LGPLv3+
+705,librepo,LGPLv2+
+706,libreport-filesystem,GPLv2+
+707,librhsm,LGPLv2+
+708,librtas,LGPL
+709,librtas-devel,LGPL
+710,libseccomp,LGPLv2
+711,libsecret,LGPLv2+
+712,libsecret-devel,LGPLv2+
+713,libselinux,Public Domain
+714,libselinux-devel,Public Domain
+715,libselinux-utils,Public Domain
+716,libsemanage,LGPLv2+
+717,libsepol,LGPLv2+
+718,libsepol-devel,LGPLv2+
+719,libservicelog,LGPLv2 and GPLv2+
+720,libservicelog-devel,LGPLv2 and GPLv2+
+721,libsigsegv,GPLv2+
+722,libsmartcols,LGPLv2+
+723,libsmartcols-devel,LGPLv2+
+724,libsmbclient,GPLv3+ and LGPLv3+
+725,libsmbios,GPLv2+ or OSL 2.1
+726,libsolv,BSD
+727,libsoup,LGPLv2
+728,libss,MIT
+729,libssh,LGPLv2+
+730,libssh-config,LGPLv2+
+731,libsss_autofs,LGPLv3+
+732,libsss_certmap,LGPLv3+
+733,libsss_idmap,LGPLv3+
+734,libsss_nss_idmap,LGPLv3+
+735,libsss_simpleifp,GPLv3+
+736,libsss_sudo,LGPLv3+
+737,libstdc++,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+738,libstemmer,BSD
+739,libstoragemgmt,LGPLv2+
+740,libstoragemgmt-arcconf-plugin,LGPLv2+
+741,libstoragemgmt-hpsa-plugin,LGPLv2+
+742,libstoragemgmt-local-plugin,LGPLv2+
+743,libstoragemgmt-megaraid-plugin,LGPLv2+
+744,libstoragemgmt-nfs-plugin,LGPLv2+
+745,libstoragemgmt-nfs-plugin-clibs,LGPLv2+
+746,libstoragemgmt-nstor-plugin,LGPLv2+
+747,libstoragemgmt-smis-plugin,LGPLv2+
+748,libstoragemgmt-udev,LGPLv2+
+749,libsysfs,LGPLv2+
+750,libtalloc,LGPLv3+
+751,libtalloc-devel,LGPLv3+
+752,libtasn1,GPLv3+ and LGPLv2+
+753,libtdb,LGPLv3+
+754,libtdb-devel,LGPLv3+
+755,libteam,LGPLv2+
+756,libteam-doc,LGPLv2+
+757,libtevent,LGPLv3+
+758,libtevent-devel,LGPLv3+
+759,libtirpc,SISSL and BSD
+760,libtirpc-devel,SISSL and BSD
+761,libtool-ltdl,LGPLv2+
+762,libtsan,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+763,libubsan,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+764,libunistring,GPLv2+ or LGPLv3+
+765,libusb,LGPLv2+
+766,libusbx,LGPLv2+
+767,libusbx-devel,LGPLv2+
+768,libusbx-devel-doc,LGPLv2+
+769,libuser,LGPLv2+
+770,libutempter,LGPLv2+
+771,libuuid,BSD
+772,libuuid-devel,BSD
+773,libvarlink,ASL 2.0
+774,libvarlink-util,ASL 2.0
+775,libverto,MIT
+776,libverto-devel,MIT
+777,libverto-libevent,MIT
+778,libvpd,LGPLv2+
+779,libwbclient,GPLv3+ and LGPLv3+
+780,libxcrypt,LGPLv2+ and BSD and Public Domain
+781,libxcrypt-devel,LGPLv2+ and BSD and Public Domain
+782,libxml2,MIT
+783,libxslt,MIT
+784,libyaml,MIT
+785,libzfcphbaapi,CPL
+786,libzfcphbaapi-docs,CPL
+787,libzstd,BSD and GPLv2
+788,libzstd-devel,BSD and GPLv2
+789,linux-firmware,"GPL+ and GPLv2+ and MIT and Redistributable, no modification permitted"
+790,lksctp-tools,GPLv2 and GPLv2+ and LGPLv2 and MIT
+791,lksctp-tools-devel,GPLv2 and GPLv2+ and LGPLv2 and MIT
+792,lksctp-tools-doc,GPLv2 and GPLv2+ and LGPLv2 and MIT
+793,lldpad,GPLv2
+794,lm_sensors,GPLv2+ and Verbatim and MIT
+795,lm_sensors-devel,LGPLv2+ and Verbatim
+796,lm_sensors-libs,LGPLv2+
+797,lockdev,LGPLv2
+798,logrotate,GPLv2+
+799,logwatch,MIT
+800,lrzsz,GPLv2+
+801,lshw,GPLv2
+802,lsof,zlib and Sendmail and LGPLv2+
+803,lsscsi,GPLv2+
+804,lsvpd,GPLv2+
+805,lua-libs,MIT
+806,lvm2,GPLv2
+807,lvm2-dbusd,GPLv2
+808,lvm2-libs,LGPLv2
+809,lvm2-lockd,GPLv2
+810,lz4,GPLv2+ and BSD
+811,lz4-devel,GPLv2+ and BSD
+812,lz4-libs,GPLv2+ and BSD
+813,lzo,GPLv2+
+814,lzo-devel,GPLv2+
+815,lzo-minilzo,GPLv2+
+816,lzop,GPLv2+
+817,m4,GPLv3+
+818,mailcap,Public Domain and MIT
+819,mailx,BSD with advertising and MPLv1.1
+820,make,GPLv3+
+821,make-devel,GPLv3+
+822,man-db,GPLv2+ and GPLv3+
+823,man-db-cron,GPLv2+ and GPLv3+
+824,man-pages,GPL+ and GPLv2+ and BSD and MIT and Copyright only and IEEE
+825,mcelog,GPLv2
+826,mcstrans,GPL+
+827,mdadm,GPLv2+
+828,memtest86+,GPLv2
+829,microcode_ctl,"CC0 and Redistributable, no modification permitted"
+830,microdnf,GPLv3+
+831,minicom,GPLv2+ and LGPLv2+ and Public Domain
+832,mksh,MirOS and ISC and BSD
+833,mlocate,GPLv2
+834,mobile-broadband-provider-info,Public Domain
+835,ModemManager,GPLv2+
+836,ModemManager-glib,GPLv2+
+837,mokutil,GPLv3+
+838,mozjs52,MPLv2.0 and MPLv1.1 and BSD and GPLv2+ and GPLv3+ and LGPLv2.1 and LGPLv2.1+ and AFL and ASL 2.0
+839,mozjs60,MPLv2.0 and MPLv1.1 and BSD and GPLv2+ and GPLv3+ and LGPLv2+ and AFL and ASL 2.0
+840,mpfr,LGPLv3+ and GPLv3+ and GFDL
+841,mtools,GPLv3+
+842,mtr,GPLv2
+843,nano,GPLv3+
+844,ncurses,MIT
+845,ncurses-base,MIT
+846,ncurses-c++-libs,MIT
+847,ncurses-compat-libs,MIT
+848,ncurses-devel,MIT
+849,ncurses-libs,MIT
+850,ncurses-term,MIT
+851,ndctl,GPLv2
+852,ndctl-libs,LGPLv2
+853,net-snmp-libs,BSD
+854,net-tools,GPLv2+
+855,netconsole-service,GPLv2
+856,netlabel_tools,GPLv2
+857,nettle,LGPLv3+ or GPLv2+
+858,network-scripts,GPLv2
+859,network-scripts-team,LGPLv2+
+860,NetworkManager,GPLv2+ and LGPLv2+
+861,NetworkManager-adsl,GPLv2+ and LGPLv2+
+862,NetworkManager-bluetooth,GPLv2+ and LGPLv2+
+863,NetworkManager-config-connectivity-redhat,GPLv2+ and LGPLv2+
+864,NetworkManager-config-server,GPLv2+ and LGPLv2+
+865,NetworkManager-dispatcher-routing-rules,GPLv2+ and LGPLv2+
+866,NetworkManager-libnm,LGPLv2+
+867,NetworkManager-ovs,GPLv2+ and LGPLv2+
+868,NetworkManager-ppp,GPLv2+ and LGPLv2+
+869,NetworkManager-team,GPLv2+ and LGPLv2+
+870,NetworkManager-tui,GPLv2+ and LGPLv2+
+871,NetworkManager-wifi,GPLv2+ and LGPLv2+
+872,NetworkManager-wwan,GPLv2+ and LGPLv2+
+873,newt,LGPLv2
+874,nfs-utils,MIT and GPLv2 and GPLv2+ and BSD
+875,nfs4-acl-tools,BSD
+876,nftables,GPLv2
+877,npth,LGPLv2+
+878,nscd,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+879,nss_db,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+880,nss_nis,LGPLv2+
+881,ntsysv,GPLv2
+882,numactl,GPLv2
+883,numactl-devel,LGPLv2 and GPLv2
+884,numactl-libs,LGPLv2 and GPLv2
+885,numad,LGPLv2
+886,numatop,BSD
+887,nvme-cli,GPLv2+
+888,nvmetcli,ASL 2.0
+889,opa-address-resolution,BSD or GPLv2
+890,opa-basic-tools,BSD or GPLv2
+891,opa-fastfabric,BSD or GPLv2
+892,opa-fm,GPLv2 or BSD
+893,opa-libopamgt,BSD or GPLv2
+894,opal-firmware,ASL 2.0
+895,opal-prd,ASL 2.0
+896,opal-utils,ASL 2.0
+897,opencryptoki,CPL
+898,opencryptoki-ccatok,CPL
+899,opencryptoki-ep11tok,CPL
+900,opencryptoki-icatok,CPL
+901,opencryptoki-icsftok,CPL
+902,opencryptoki-libs,CPL
+903,opencryptoki-swtok,CPL
+904,opencryptoki-tpmtok,CPL
+905,openhpi,BSD
+906,openhpi-libs,BSD
+907,OpenIPMI,LGPLv2+ and GPLv2+ or BSD
+908,OpenIPMI-lanserv,LGPLv2+ and GPLv2+ or BSD
+909,OpenIPMI-libs,LGPLv2+ and GPLv2+ or BSD
+910,OpenIPMI-perl,LGPLv2+ and GPLv2+ or BSD
+911,openldap,OpenLDAP
+912,openldap-clients,OpenLDAP
+913,openldap-devel,OpenLDAP
+914,opensc,LGPLv2+
+915,opensm,GPLv2 or BSD
+916,opensm-libs,GPLv2 or BSD
+917,openssh,BSD
+918,openssh-cavs,BSD
+919,openssh-clients,BSD
+920,openssh-keycat,BSD
+921,openssh-ldap,BSD
+922,openssh-server,BSD
+923,openssl,OpenSSL
+924,openssl-devel,OpenSSL
+925,openssl-ibmca,ASL 2.0
+926,openssl-ibmpkcs11,OpenSSL
+927,openssl-libs,OpenSSL
+928,openssl-perl,OpenSSL
+929,openssl-pkcs11,LGPLv2+ and BSD
+930,os-prober,GPLv2+ and GPL+
+931,p11-kit,BSD
+932,p11-kit-devel,BSD
+933,p11-kit-server,BSD
+934,p11-kit-trust,BSD
+935,pam,BSD and GPLv2+
+936,pam-devel,BSD and GPLv2+
+937,pam_cifscreds,GPLv3
+938,pam_ssh_agent_auth,BSD
+939,parted,GPLv3+
+940,passwd,BSD or GPL+
+941,patch,GPLv3+
+942,pciutils,GPLv2+
+943,pciutils-devel,GPLv2+
+944,pciutils-libs,GPLv2+
+945,pcre,BSD
+946,pcre-cpp,BSD
+947,pcre-devel,BSD
+948,pcre-utf16,BSD
+949,pcre-utf32,BSD
+950,pcre2,BSD
+951,pcre2-devel,BSD
+952,pcre2-utf16,BSD
+953,pcre2-utf32,BSD
+954,pcsc-lite,BSD
+955,pcsc-lite-ccid,LGPLv2+
+956,pcsc-lite-doc,BSD
+957,pcsc-lite-libs,BSD
+958,perf,GPLv2
+959,perftest,GPLv2 or BSD
+960,perl-Algorithm-Diff,GPL+ or Artistic
+961,perl-Archive-Tar,GPL+ or Artistic
+962,perl-Carp,GPL+ or Artistic
+963,perl-Compress-Raw-Bzip2,GPL+ or Artistic
+964,perl-Compress-Raw-Zlib,(GPL+ or Artistic) and zlib
+965,perl-constant,GPL+ or Artistic
+966,perl-Data-Dumper,GPL+ or Artistic
+967,perl-Date-Manip,GPL+ or Artistic
+968,perl-DBD-SQLite,(GPL+ or Artistic) and Public Domain
+969,perl-DBI,GPL+ or Artistic
+970,perl-Encode,(GPL+ or Artistic) and Artistic 2.0 and UCD
+971,perl-Errno,GPL+ or Artistic
+972,perl-Exporter,GPL+ or Artistic
+973,perl-File-Path,GPL+ or Artistic
+974,perl-File-Temp,GPL+ or Artistic
+975,perl-Getopt-Long,GPLv2+ or Artistic
+976,perl-HTTP-Tiny,GPL+ or Artistic
+977,perl-interpreter,(GPL+ or Artistic) and (GPLv2+ or Artistic) and BSD and Public Domain and UCD
+978,perl-IO,GPL+ or Artistic
+979,perl-IO-Compress,GPL+ or Artistic
+980,perl-IO-Zlib,GPL+ or Artistic
+981,perl-libs,(GPL+ or Artistic) and HSRL and MIT and UCD
+982,perl-macros,GPL+ or Artistic
+983,perl-Math-BigInt,GPL+ or Artistic
+984,perl-Math-Complex,GPL+ or Artistic
+985,perl-MIME-Base64,(GPL+ or Artistic) and MIT
+986,perl-parent,GPL+ or Artistic
+987,perl-Parse-Yapp,GPL+ or Artistic
+988,perl-PathTools,(GPL+ or Artistic) and BSD
+989,perl-Pod-Escapes,GPL+ or Artistic
+990,perl-Pod-Perldoc,GPL+ or Artistic
+991,perl-Pod-Simple,GPL+ or Artistic
+992,perl-Pod-Usage,GPL+ or Artistic
+993,perl-podlators,(GPL+ or Artistic) and FSFAP
+994,perl-Scalar-List-Utils,GPL+ or Artistic
+995,perl-Socket,GPL+ or Artistic
+996,perl-Storable,GPL+ or Artistic
+997,perl-Sys-CPU,(GPL+ or Artistic) and (LGPLv3 or Artistic 2.0)
+998,perl-Sys-MemInfo,GPL+ or Artistic
+999,perl-Term-ANSIColor,GPL+ or Artistic
+1000,perl-Term-Cap,GPL+ or Artistic
+1001,perl-Text-Diff,(GPL+ or Artistic) and (GPLv2+ or Artistic) and MIT
+1002,perl-Text-ParseWords,GPL+ or Artistic
+1003,perl-Text-Tabs+Wrap,TTWL
+1004,perl-threads,GPL+ or Artistic
+1005,perl-threads-shared,GPL+ or Artistic
+1006,perl-Time-Local,GPL+ or Artistic
+1007,perl-Unicode-Normalize,GPL+ or Artistic
+1008,pigz,zlib
+1009,pkgconf,ISC
+1010,pkgconf-m4,GPLv2+ with exceptions
+1011,pkgconf-pkg-config,ISC
+1012,platform-python,Python
+1013,platform-python-pip,MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
+1014,platform-python-setuptools,MIT
+1015,policycoreutils,GPLv2
+1016,policycoreutils-dbus,GPLv2
+1017,policycoreutils-devel,GPLv2
+1018,policycoreutils-newrole,GPLv2
+1019,policycoreutils-python-utils,GPLv2
+1020,policycoreutils-restorecond,GPLv2
+1021,polkit,LGPLv2+
+1022,polkit-devel,LGPLv2+
+1023,polkit-docs,LGPLv2+
+1024,polkit-libs,LGPLv2+
+1025,polkit-pkla-compat,LGPLv2+
+1026,popt,MIT
+1027,popt-devel,MIT
+1028,portreserve,GPLv2+
+1029,postfix,(IBM and GPLv2+) or (EPL-2.0 and GPLv2+)
+1030,powerpc-utils,GPLv2
+1031,powerpc-utils-core,GPLv2
+1032,ppc64-diag,GPLv2
+1033,ppp,BSD and LGPLv2+ and GPLv2+ and Public Domain
+1034,prefixdevname,MIT
+1035,procps-ng,GPL+ and GPLv2 and GPLv2+ and GPLv3+ and LGPLv2+
+1036,procps-ng-i18n,GPL+ and GPLv2 and GPLv2+ and GPLv3+ and LGPLv2+
+1037,ps_mem,LGPLv2
+1038,psacct,GPLv3+
+1039,psmisc,GPLv2+
+1040,publicsuffix-list,MPLv2.0
+1041,publicsuffix-list-dafsa,MPLv2.0
+1042,python3-asn1crypto,MIT
+1043,python3-audit,LGPLv2+
+1044,python3-avahi,LGPLv2+
+1045,python3-boom,GPLv2
+1046,python3-cffi,MIT
+1047,python3-chardet,LGPLv2
+1048,python3-configobj,BSD
+1049,python3-configshell,ASL 2.0
+1050,python3-cryptography,ASL 2.0 or BSD
+1051,python3-dateutil,BSD
+1052,python3-dbus,MIT
+1053,python3-decorator,BSD
+1054,python3-dmidecode,GPLv2
+1055,python3-dnf,GPLv2+ and GPLv2 and GPL
+1056,python3-dnf-plugin-post-transaction-actions,GPLv2+
+1057,python3-dnf-plugin-versionlock,GPLv2+
+1058,python3-dnf-plugins-core,GPLv2+
+1059,python3-dns,MIT
+1060,python3-ethtool,GPLv2
+1061,python3-firewall,GPLv2+
+1062,python3-gobject-base,LGPLv2+ and MIT
+1063,python3-gpg,LGPLv2+
+1064,python3-hawkey,LGPLv2+
+1065,python3-idna,BSD and Python and Unicode
+1066,python3-iniparse,MIT and Python
+1067,python3-inotify,MIT
+1068,python3-iscsi-initiator-utils,GPLv2+
+1069,python3-jwt,MIT
+1070,python3-kmod,LGPLv2+
+1071,python3-ldb,LGPLv3+
+1072,python3-libcomps,GPLv2+
+1073,python3-libdnf,LGPLv2+
+1074,python3-libipa_hbac,LGPLv3+
+1075,python3-libnl3,LGPLv2
+1076,python3-libproxy,LGPLv2+
+1077,python3-librepo,LGPLv2+
+1078,python3-libs,Python
+1079,python3-libselinux,Public Domain
+1080,python3-libsemanage,LGPLv2+
+1081,python3-libsss_nss_idmap,LGPLv3+
+1082,python3-libstoragemgmt,LGPLv2+
+1083,python3-libstoragemgmt-clibs,LGPLv2+
+1084,python3-libuser,LGPLv2+
+1085,python3-libxml2,MIT
+1086,python3-linux-procfs,GPLv2
+1087,python3-magic,BSD
+1088,python3-nftables,GPLv2
+1089,python3-oauthlib,BSD
+1090,python3-openipmi,LGPLv2+ and GPLv2+ or BSD
+1091,python3-perf,"GPLv2 and Redistributable, no modification permitted"
+1092,python3-pip-wheel,MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
+1093,python3-ply,BSD
+1094,python3-policycoreutils,GPLv2
+1095,python3-pwquality,BSD or GPLv2+
+1096,python3-pycparser,BSD
+1097,python3-pyparsing,MIT
+1098,python3-pysocks,BSD
+1099,python3-pyudev,LGPLv2+
+1100,python3-pywbem,LGPLv2
+1101,python3-pyyaml,MIT
+1102,python3-requests,ASL 2.0
+1103,python3-requests-oauthlib,ISC
+1104,python3-rpm,GPLv2+
+1105,python3-rtslib,ASL 2.0
+1106,python3-samba,GPLv3+ and LGPLv3+
+1107,python3-samba-test,GPLv3+ and LGPLv3+
+1108,python3-schedutils,GPLv2
+1109,python3-setools,GPLv2
+1110,python3-setuptools,MIT
+1111,python3-setuptools-wheel,MIT
+1112,python3-six,MIT
+1113,python3-slip,GPLv2+
+1114,python3-slip-dbus,GPLv2+
+1115,python3-sss,LGPLv3+
+1116,python3-sss-murmur,LGPLv3+
+1117,python3-sssdconfig,GPLv3+
+1118,python3-subscription-manager-rhsm,GPLv2
+1119,python3-syspurpose,GPLv2
+1120,python3-talloc,LGPLv3+
+1121,python3-tdb,LGPLv3+
+1122,python3-test,Python
+1123,python3-tevent,LGPLv3+
+1124,python3-urllib3,MIT
+1125,python3-urwid,LGPLv2+
+1126,python3-varlink,ASL 2.0
+1127,qclib,BSD
+1128,qclib-devel,BSD
+1129,quota,BSD and GPLv2 and GPLv2+
+1130,quota-doc,BSD and GPLv2 and GPLv2+
+1131,quota-nld,BSD and GPLv2 and GPLv2+
+1132,quota-nls,BSD and LGPLv2+ and GPLv2 and GPLv2+
+1133,quota-rpc,BSD and LGPLv2+ and GPLv2 and GPLv2+
+1134,quota-warnquota,BSD and GPLv2 and GPLv2+
+1135,rasdaemon,GPLv2
+1136,rdma-core,GPLv2 or BSD
+1137,rdma-core-devel,GPLv2 or BSD
+1138,readline,GPLv3+
+1139,readline-devel,GPLv3+
+1140,readonly-root,GPLv2
+1141,realmd,LGPLv2+
+1142,redhat-indexhtml,Distributable
+1143,redhat-logos,"Licensed only for approved usage, see COPYING for details."
+1144,redhat-logos-httpd,"Licensed only for approved usage, see COPYING for details."
+1145,redhat-release,GPLv2
+1146,redhat-release-eula,Not applicable
+1147,rhsm-icons,GPLv2
+1148,rmt,CDDL
+1149,rng-tools,GPLv2+
+1150,rootfiles,Public Domain
+1151,rpcbind,BSD
+1152,rpm,GPLv2+
+1153,rpm-apidocs,GPLv2+
+1154,rpm-build-libs,GPLv2+ and LGPLv2+ with exceptions
+1155,rpm-cron,GPLv2+
+1156,rpm-devel,GPLv2+ and LGPLv2+ with exceptions
+1157,rpm-libs,GPLv2+ and LGPLv2+ with exceptions
+1158,rpm-plugin-ima,GPLv2+
+1159,rpm-plugin-prioreset,GPLv2+
+1160,rpm-plugin-selinux,GPLv2+
+1161,rpm-plugin-syslog,GPLv2+
+1162,rpm-plugin-systemd-inhibit,GPLv2+
+1163,rpm-sign,GPLv2+
+1164,rsync,GPLv3+
+1165,rsync-daemon,GPLv3+
+1166,s390utils-base,MIT and CPL
+1167,samba,GPLv3+ and LGPLv3+
+1168,samba-client,GPLv3+ and LGPLv3+
+1169,samba-client-libs,GPLv3+ and LGPLv3+
+1170,samba-common,GPLv3+ and LGPLv3+
+1171,samba-common-libs,GPLv3+ and LGPLv3+
+1172,samba-common-tools,GPLv3+ and LGPLv3+
+1173,samba-krb5-printing,GPLv3+ and LGPLv3+
+1174,samba-libs,GPLv3+ and LGPLv3+
+1175,samba-pidl,GPLv3+ and LGPLv3+
+1176,samba-test,GPLv3+ and LGPLv3+
+1177,samba-test-libs,GPLv3+ and LGPLv3+
+1178,samba-winbind,GPLv3+ and LGPLv3+
+1179,samba-winbind-clients,GPLv3+ and LGPLv3+
+1180,samba-winbind-krb5-locator,GPLv3+ and LGPLv3+
+1181,samba-winbind-modules,GPLv3+ and LGPLv3+
+1182,sanlock-lib,GPLv2 and GPLv2+ and LGPLv2+
+1183,sed,GPLv3+
+1184,selinux-policy,GPLv2+
+1185,selinux-policy-devel,GPLv2+
+1186,selinux-policy-doc,GPLv2+
+1187,selinux-policy-minimum,GPLv2+
+1188,selinux-policy-mls,GPLv2+
+1189,selinux-policy-sandbox,GPLv2+
+1190,selinux-policy-targeted,GPLv2+
+1191,servicelog,GPLv2
+1192,setools-console,GPLv2
+1193,setserial,GPL+
+1194,setup,Public Domain
+1195,sg3_utils,GPLv2+ and BSD
+1196,sg3_utils-libs,GPLv2+ and BSD
+1197,sgml-common,GPL+
+1198,sgpio,GPLv2+
+1199,shadow-utils,BSD and GPLv2+
+1200,shared-mime-info,GPLv2+
+1201,shim-aa64,BSD
+1202,shim-ia32,BSD
+1203,shim-x64,BSD
+1204,slang,GPLv2+
+1205,smartmontools,GPLv2+
+1206,smc-tools,EPL
+1207,snappy,BSD
+1208,sos,GPLv2+
+1209,sos-audit,GPLv2+
+1210,spax,CDDL
+1211,sqlite,Public Domain
+1212,sqlite-devel,Public Domain
+1213,sqlite-doc,Public Domain
+1214,sqlite-libs,Public Domain
+1215,squashfs-tools,GPLv2+
+1216,srp_daemon,GPLv2 or BSD
+1217,sssd,GPLv3+
+1218,sssd-ad,GPLv3+
+1219,sssd-client,LGPLv3+
+1220,sssd-common,GPLv3+
+1221,sssd-common-pac,GPLv3+
+1222,sssd-dbus,GPLv3+
+1223,sssd-ipa,GPLv3+
+1224,sssd-kcm,GPLv3+
+1225,sssd-krb5,GPLv3+
+1226,sssd-krb5-common,GPLv3+
+1227,sssd-ldap,GPLv3+
+1228,sssd-libwbclient,GPLv3+ and LGPLv3+
+1229,sssd-nfs-idmap,GPLv3+
+1230,sssd-polkit-rules,GPLv3+
+1231,sssd-proxy,GPLv3+
+1232,sssd-tools,GPLv3+
+1233,sssd-winbind-idmap,GPLv3+ and LGPLv3+
+1234,star,CDDL
+1235,strace,LGPL-2.1+ and GPL-2.0+
+1236,stunnel,GPLv2
+1237,subscription-manager,GPLv2
+1238,subscription-manager-cockpit,GPLv2
+1239,subscription-manager-plugin-ostree,GPLv2
+1240,subscription-manager-rhsm-certificates,GPLv2
+1241,sudo,ISC
+1242,symlinks,Copyright only
+1243,sysfsutils,GPLv2
+1244,syslinux,GPLv2+
+1245,syslinux-extlinux,GPLv2+
+1246,syslinux-extlinux-nonlinux,GPLv2+
+1247,syslinux-nonlinux,GPLv2+
+1248,syslinux-tftpboot,GPLv2+
+1249,system-storage-manager,GPLv2+
+1250,systemd,LGPLv2+ and MIT and GPLv2+
+1251,systemd-container,LGPLv2+
+1252,systemd-devel,LGPLv2+ and MIT
+1253,systemd-journal-remote,LGPLv2+
+1254,systemd-libs,LGPLv2+ and MIT
+1255,systemd-pam,LGPLv2+ and MIT and GPLv2+
+1256,systemd-tests,LGPLv2+
+1257,systemd-udev,LGPLv2+
+1258,tar,GPLv3+
+1259,target-restore,ASL 2.0
+1260,tboot,BSD
+1261,tcl,TCL
+1262,tcl-devel,TCL
+1263,tcl-doc,TCL
+1264,tdb-tools,LGPLv3+
+1265,teamd,LGPLv2+
+1266,time,GPLv3+ and GFDL
+1267,timedatex,GPLv2+
+1268,tmpwatch,GPLv2
+1269,tmux,ISC and BSD
+1270,tpm-quote-tools,BSD
+1271,tpm-tools,CPL
+1272,tpm-tools-pkcs11,CPL
+1273,tpm2-abrmd,BSD
+1274,tpm2-abrmd-selinux,BSD
+1275,tpm2-tools,BSD
+1276,tpm2-tss,BSD
+1277,tpm2-tss-devel,BSD
+1278,trace-cmd,GPLv2 and LGPLv2
+1279,traceroute,GPLv2+
+1280,tree,GPLv2+
+1281,trousers,BSD
+1282,trousers-lib,BSD
+1283,tss2,BSD
+1284,tuna,GPLv2
+1285,tuned,GPLv2+
+1286,tuned-profiles-atomic,GPLv2+
+1287,tuned-profiles-compat,GPLv2+
+1288,tuned-profiles-cpu-partitioning,GPLv2+
+1289,tuned-profiles-mssql,GPLv2+
+1290,tuned-profiles-oracle,GPLv2+
+1291,tzdata,Public Domain
+1292,units,GPLv3+
+1293,unzip,BSD
+1294,usb_modeswitch,GPLv2+
+1295,usb_modeswitch-data,GPLv2+
+1296,usbutils,GPLv2+
+1297,usermode,GPLv2+
+1298,userspace-rcu,LGPLv2+
+1299,util-linux,GPLv2 and GPLv2+ and LGPLv2+ and BSD with advertising and Public Domain
+1300,util-linux-user,GPLv2
+1301,uuidd,GPLv2
+1302,vdo,GPLv2
+1303,veritysetup,GPLv2+ and LGPLv2+
+1304,vim-minimal,Vim and MIT
+1305,virt-what,GPLv2+
+1306,vm-dump-metrics,GPLv2+
+1307,vm-dump-metrics-devel,GPLv2+
+1308,watchdog,GPLv2+
+1309,which,GPLv3
+1310,words,Public Domain
+1311,wpa_supplicant,BSD
+1312,x3270,BSD
+1313,x3270-text,BSD
+1314,xdelta,ASL 2.0
+1315,xfsdump,GPL+
+1316,xfsprogs,GPL+ and LGPLv2+
+1317,xfsprogs-devel,GPL+ and LGPLv2+
+1318,xml-common,GPL+
+1319,xmlrpc-c,BSD and MIT
+1320,xmlrpc-c-client,BSD and MIT
+1321,xz,GPLv2+ and Public Domain
+1322,xz-devel,Public Domain
+1323,xz-libs,Public Domain
+1324,yum,GPLv2+ and GPLv2 and GPL
+1325,yum-utils,GPLv2+
+1326,zip,BSD
+1327,zlib,zlib and Boost
+1328,zlib-devel,zlib and Boost
+1329,zsh,MIT
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/table-2.csv b/tools/redhat_package_manifest_scraper/data/redhat8/table-2.csv
new file mode 100644
index 0000000..03a4339
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/table-2.csv
@@ -0,0 +1,4195 @@
+,Package,License
+0,389-ds-base,GPLv3+
+1,389-ds-base-devel,GPLv3+
+2,389-ds-base-legacy-tools,GPLv3+
+3,389-ds-base-libs,GPLv3+
+4,389-ds-base-snmp,GPLv3+
+5,abattis-cantarell-fonts,OFL
+6,abrt,GPLv2+
+7,abrt-addon-ccpp,GPLv2+
+8,abrt-addon-coredump-helper,GPLv2+
+9,abrt-addon-kerneloops,GPLv2+
+10,abrt-addon-pstoreoops,GPLv2+
+11,abrt-addon-vmcore,GPLv2+
+12,abrt-addon-xorg,GPLv2+
+13,abrt-cli,GPLv2+
+14,abrt-cli-ng,GPLv2+
+15,abrt-console-notification,GPLv2+
+16,abrt-dbus,GPLv2+
+17,abrt-desktop,GPLv2+
+18,abrt-gui,GPLv2+
+19,abrt-gui-libs,GPLv2+
+20,abrt-java-connector,GPLv2+
+21,abrt-libs,GPLv2+
+22,abrt-plugin-machine-id,GPLv2+
+23,abrt-plugin-sosreport,GPLv2+
+24,abrt-tui,GPLv2+
+25,accountsservice,GPLv3+
+26,accountsservice-libs,GPLv3+
+27,acpid,GPLv2+
+28,adobe-mappings-cmap,BSD
+29,adobe-mappings-cmap-deprecated,BSD
+30,adobe-mappings-pdf,BSD
+31,adwaita-cursor-theme,LGPLv3+ or CC-BY-SA
+32,adwaita-gtk2-theme,LGPLv2+
+33,adwaita-icon-theme,LGPLv3+ or CC-BY-SA
+34,adwaita-qt,LGPLv2+
+35,aide,GPLv2+
+36,alsa-firmware,GPL+ and BSD and GPLv2+ and GPLv2 and LGPLv2+
+37,alsa-lib,LGPLv2+
+38,alsa-lib-devel,LGPLv2+
+39,alsa-plugins-arcamav,LGPLv2+
+40,alsa-plugins-maemo,LGPLv2+
+41,alsa-plugins-oss,LGPLv2+
+42,alsa-plugins-pulseaudio,LGPLv2+
+43,alsa-plugins-samplerate,GPLv2+
+44,alsa-plugins-speex,LGPLv2+
+45,alsa-plugins-upmix,LGPLv2+
+46,alsa-plugins-usbstream,LGPLv2+
+47,alsa-plugins-vdownmix,LGPLv2+
+48,alsa-tools-firmware,GPLv2+
+49,alsa-ucm,BSD
+50,alsa-utils,GPLv2+
+51,alsa-utils-alsabat,GPLv2+
+52,amanda,BSD and GPLv3+ and GPLv2+ and GPLv2
+53,amanda-client,BSD and GPLv3+ and GPLv2+ and GPLv2
+54,amanda-libs,BSD and GPLv3+ and GPLv2+ and GPLv2
+55,amanda-server,BSD and GPLv3+ and GPLv2+ and GPLv2
+56,anaconda,GPLv2+ and MIT
+57,anaconda-core,GPLv2+ and MIT
+58,anaconda-dracut,GPLv2+ and MIT
+59,anaconda-gui,GPLv2+ and MIT
+60,anaconda-install-env-deps,GPLv2+ and MIT
+61,anaconda-tui,GPLv2+ and MIT
+62,anaconda-user-help,CC-BY-SA
+63,anaconda-widgets,GPLv2+ and MIT
+64,annobin,GPLv3+
+65,ansible-freeipa,GPLv3+
+66,ant,ASL 2.0
+67,ant-lib,ASL 2.0
+68,aopalliance,Public Domain
+69,apache-commons-cli,ASL 2.0
+70,apache-commons-codec,ASL 2.0
+71,apache-commons-collections,ASL 2.0
+72,apache-commons-io,ASL 2.0
+73,apache-commons-lang,ASL 2.0
+74,apache-commons-lang3,ASL 2.0
+75,apache-commons-logging,ASL 2.0
+76,apcu-panel,PHP
+77,appstream-data,CC0 and CC-BY and CC-BY-SA and GFDL
+78,apr,ASL 2.0 and BSD with advertising and ISC and BSD
+79,apr-devel,ASL 2.0 and BSD with advertising and ISC and BSD
+80,apr-util,ASL 2.0
+81,apr-util-bdb,ASL 2.0
+82,apr-util-devel,ASL 2.0
+83,apr-util-ldap,ASL 2.0
+84,apr-util-mysql,ASL 2.0
+85,apr-util-odbc,ASL 2.0
+86,apr-util-openssl,ASL 2.0
+87,apr-util-pgsql,ASL 2.0
+88,apr-util-sqlite,ASL 2.0
+89,asciidoc,GPL+ and GPLv2+
+90,aspell,LGPLv2+ and LGPLv2 and GPLv2+ and BSD
+91,aspell-en,MIT and BSD
+92,aspnetcore-runtime-3.0,MIT and ASL 2.0 and BSD
+93,aspnetcore-runtime-3.1,MIT and ASL 2.0 and BSD
+94,aspnetcore-targeting-pack-3.0,MIT and ASL 2.0 and BSD
+95,aspnetcore-targeting-pack-3.1,MIT and ASL 2.0 and BSD
+96,at-spi2-atk,LGPLv2+
+97,at-spi2-atk-devel,LGPLv2+
+98,at-spi2-core,LGPLv2+
+99,at-spi2-core-devel,LGPLv2+
+100,atinject,ASL 2.0
+101,atk,LGPLv2+
+102,atk-devel,LGPLv2+
+103,atkmm,LGPLv2+
+104,authd,GPLv2+
+105,authselect-compat,GPLv3+
+106,autoconf,GPLv2+ and GFDL
+107,autocorr-af,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+108,autocorr-bg,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+109,autocorr-ca,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+110,autocorr-cs,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+111,autocorr-da,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+112,autocorr-de,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+113,autocorr-en,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+114,autocorr-es,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+115,autocorr-fa,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+116,autocorr-fi,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+117,autocorr-fr,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+118,autocorr-ga,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+119,autocorr-hr,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+120,autocorr-hu,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+121,autocorr-is,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+122,autocorr-it,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+123,autocorr-ja,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+124,autocorr-ko,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+125,autocorr-lb,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+126,autocorr-lt,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+127,autocorr-mn,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+128,autocorr-nl,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+129,autocorr-pl,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+130,autocorr-pt,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+131,autocorr-ro,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+132,autocorr-ru,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+133,autocorr-sk,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+134,autocorr-sl,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+135,autocorr-sr,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+136,autocorr-sv,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+137,autocorr-tr,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+138,autocorr-vi,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+139,autocorr-zh,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+140,autogen-libopts,LGPLv3+
+141,automake,GPLv2+ and GFDL and Public Domain and MIT
+142,avahi-ui-gtk3,LGPLv2+
+143,babel,BSD
+144,babl,LGPLv3+ and GPLv3+
+145,bacula-client,AGPLv3 with exceptions
+146,bacula-common,AGPLv3 with exceptions
+147,bacula-console,AGPLv3 with exceptions
+148,bacula-director,AGPLv3 with exceptions
+149,bacula-libs,AGPLv3 with exceptions
+150,bacula-libs-sql,AGPLv3 with exceptions
+151,bacula-logwatch,AGPLv3 with exceptions
+152,bacula-storage,AGPLv3 with exceptions
+153,baobab,GPLv2+ and GFDL
+154,bcc,ASL 2.0
+155,bcc-tools,ASL 2.0
+156,bea-stax-api,ASL 1.1 and ASL 2.0
+157,bind,MPLv2.0
+158,bind-chroot,MPLv2.0
+159,bind-devel,MPLv2.0
+160,bind-dyndb-ldap,GPLv2+
+161,bind-libs,MPLv2.0
+162,bind-libs-lite,MPLv2.0
+163,bind-license,MPLv2.0
+164,bind-lite-devel,MPLv2.0
+165,bind-pkcs11,MPLv2.0
+166,bind-pkcs11-devel,MPLv2.0
+167,bind-pkcs11-libs,MPLv2.0
+168,bind-pkcs11-utils,MPLv2.0
+169,bind-sdb,MPLv2.0
+170,bind-sdb-chroot,MPLv2.0
+171,bind-utils,MPLv2.0
+172,binutils-devel,GPLv3+
+173,bison,GPLv3+
+174,bison-runtime,GPLv3+
+175,bitmap-console-fonts,GPLv2
+176,bitmap-fangsongti-fonts,MIT
+177,bitmap-fixed-fonts,GPLv2
+178,bitmap-fonts-compat,GPLv2 and MIT and Lucida
+179,bitmap-lucida-typewriter-fonts,Lucida
+180,blas,BSD
+181,blas64,BSD
+182,blivet-data,LGPLv2+
+183,bluez-cups,GPLv2+
+184,bogofilter,GPLv2
+185,boost,Boost and MIT and Python
+186,boost-atomic,Boost and MIT and Python
+187,boost-chrono,Boost and MIT and Python
+188,boost-container,Boost and MIT and Python
+189,boost-context,Boost and MIT and Python
+190,boost-coroutine,Boost and MIT and Python
+191,boost-date-time,Boost and MIT and Python
+192,boost-devel,Boost and MIT and Python
+193,boost-fiber,Boost and MIT and Python
+194,boost-filesystem,Boost and MIT and Python
+195,boost-graph,Boost and MIT and Python
+196,boost-iostreams,Boost and MIT and Python
+197,boost-locale,Boost and MIT and Python
+198,boost-log,Boost and MIT and Python
+199,boost-math,Boost and MIT and Python
+200,boost-program-options,Boost and MIT and Python
+201,boost-random,Boost and MIT and Python
+202,boost-regex,Boost and MIT and Python
+203,boost-serialization,Boost and MIT and Python
+204,boost-signals,Boost and MIT and Python
+205,boost-stacktrace,Boost and MIT and Python
+206,boost-system,Boost and MIT and Python
+207,boost-test,Boost and MIT and Python
+208,boost-thread,Boost and MIT and Python
+209,boost-timer,Boost and MIT and Python
+210,boost-type_erasure,Boost and MIT and Python
+211,boost-wave,Boost and MIT and Python
+212,bpftrace,ASL 2.0
+213,bpg-algeti-fonts,GPL+ with exceptions
+214,bpg-chveulebrivi-fonts,GPL+ with exceptions
+215,bpg-classic-fonts,GPL+ with exceptions
+216,bpg-courier-fonts,GPL+ with exceptions
+217,bpg-courier-s-fonts,GPL+ with exceptions
+218,bpg-dedaena-block-fonts,GPL+ with exceptions
+219,bpg-dejavu-sans-fonts,Bitstream Vera
+220,bpg-elite-fonts,GPL+ with exceptions
+221,bpg-excelsior-caps-fonts,Bitstream Vera
+222,bpg-excelsior-condenced-fonts,Bitstream Vera
+223,bpg-excelsior-fonts,Bitstream Vera
+224,bpg-fonts-common,GPL+ with exceptions
+225,bpg-glaho-fonts,GPL+ with exceptions
+226,bpg-gorda-fonts,GPL+ with exceptions
+227,bpg-ingiri-fonts,GPL+ with exceptions
+228,bpg-irubaqidze-fonts,GPL+ with exceptions
+229,bpg-mikhail-stephan-fonts,GPL+ with exceptions
+230,bpg-mrgvlovani-caps-fonts,GPL+ with exceptions
+231,bpg-mrgvlovani-fonts,GPL+ with exceptions
+232,bpg-nateli-caps-fonts,GPL+ with exceptions
+233,bpg-nateli-condenced-fonts,GPL+ with exceptions
+234,bpg-nateli-fonts,GPL+ with exceptions
+235,bpg-nino-medium-cond-fonts,GPL+ with exceptions
+236,bpg-nino-medium-fonts,GPL+ with exceptions
+237,bpg-sans-fonts,GPL+ with exceptions
+238,bpg-sans-medium-fonts,GPL+ with exceptions
+239,bpg-sans-modern-fonts,Bitstream Vera
+240,bpg-sans-regular-fonts,GPL+ with exceptions
+241,bpg-serif-fonts,GPL+ with exceptions
+242,bpg-serif-modern-fonts,Bitstream Vera
+243,bpg-ucnobi-fonts,GPL+ with exceptions
+244,brasero,GPLv3+
+245,brasero-libs,GPLv3+
+246,brasero-nautilus,GPLv3+
+247,brlapi,LGPLv2+
+248,brlapi-java,LGPLv2+
+249,brltty,LGPLv2+
+250,brltty-at-spi2,LGPLv2+
+251,brltty-docs,LGPLv2+
+252,brltty-dracut,LGPLv2+
+253,brltty-espeak-ng,LGPLv2+
+254,brltty-xw,LGPLv2+
+255,buildah,ASL 2.0
+256,buildah-tests,ASL 2.0
+257,byacc,Public Domain
+258,byteman,LGPLv2+
+259,byteman-javadoc,LGPLv2+
+260,c2esp,GPLv2+
+261,cairo,LGPLv2 or MPLv1.1
+262,cairo-devel,LGPLv2 or MPLv1.1
+263,cairo-gobject,LGPLv2 or MPLv1.1
+264,cairo-gobject-devel,LGPLv2 or MPLv1.1
+265,cairomm,LGPLv2+
+266,cargo,(ASL 2.0 or MIT) and (BSD and MIT)
+267,cargo-doc,(ASL 2.0 or MIT) and (BSD and MIT)
+268,cdi-api,ASL 2.0
+269,cdparanoia,GPLv2 and LGPLv2
+270,cdparanoia-libs,LGPLv2
+271,cdrdao,GPLv2+
+272,celt051,BSD
+273,certmonger,GPLv3+
+274,cgdcbxd,GPLv2
+275,check,LGPLv2+
+276,check-devel,LGPLv2+
+277,cheese,GPLv2+
+278,cheese-libs,GPLv2+
+279,chrome-gnome-shell,GPLv3+
+280,cim-schema,DMTF
+281,cjose,MIT
+282,cjose-devel,MIT
+283,clang,NCSA
+284,clang-analyzer,NCSA and MIT
+285,clang-devel,NCSA
+286,clang-libs,NCSA
+287,clang-tools-extra,NCSA
+288,cldr-emoji-annotation,LGPLv2+ and Unicode
+289,clevis,GPLv3+
+290,clevis-dracut,GPLv3+
+291,clevis-luks,GPLv3+
+292,clevis-systemd,GPLv3+
+293,clevis-udisks2,GPLv3+
+294,clippy,(ASL 2.0 or MIT) and (BSD and MIT)
+295,cloud-init,GPLv3
+296,cloud-utils-growpart,GPLv3
+297,clucene-contribs-lib,LGPLv2+ or ASL 2.0
+298,clucene-core,LGPLv2+ or ASL 2.0
+299,clutter,LGPLv2+
+300,clutter-gst2,LGPLv2+
+301,clutter-gst3,LGPLv2+
+302,clutter-gtk,LGPLv2+
+303,cmake,BSD and MIT and zlib
+304,cmake-data,BSD and MIT and zlib
+305,cmake-doc,BSD and MIT and zlib
+306,cmake-filesystem,BSD and MIT and zlib
+307,cmake-gui,BSD and MIT and zlib
+308,cmake-rpm-macros,BSD and MIT and zlib
+309,cockpit-composer,MIT
+310,cockpit-dashboard,LGPLv2+
+311,cockpit-machines,LGPLv2+
+312,cockpit-packagekit,LGPLv2+
+313,cockpit-pcp,LGPLv2+
+314,cockpit-podman,LGPLv2+
+315,cockpit-session-recording,LGPLv2+
+316,cockpit-storaged,LGPLv2+
+317,cogl,LGPLv2+
+318,color-filesystem,Public Domain
+319,colord,GPLv2+ and LGPLv2+
+320,colord-gtk,LGPLv2+
+321,colord-libs,GPLv2+ and LGPLv2+
+322,compat-exiv2-026,GPLv2+
+323,compat-libgfortran-48,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+324,compat-libpthread-nonshared,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+325,compat-libtiff3,libtiff
+326,compat-openssl10,OpenSSL
+327,compiler-rt,NCSA or MIT
+328,composer-cli,GPLv2+
+329,conmon,ASL 2.0
+330,container-exception-logger,GPLv2+
+331,container-selinux,GPLv2
+332,containernetworking-plugins,ASL 2.0
+333,containers-common,ASL 2.0
+334,convmv,GPLv2 or GPLv3
+335,copy-jdk-configs,BSD
+336,corosynclib,BSD
+337,cpp,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+338,crash,GPLv3
+339,crash-gcore-command,GPLv2
+340,crash-ptdump-command,GPLv2
+341,crash-trace-command,GPLv2
+342,createrepo_c,GPLv2+
+343,createrepo_c-devel,GPLv2+
+344,createrepo_c-libs,GPLv2+
+345,crit,GPLv2
+346,criu,GPLv2
+347,cryptsetup-devel,GPLv2+ and LGPLv2+
+348,cscope,BSD and GPLv2+
+349,ctags,GPLv2+ and LGPLv2+ and Public Domain
+350,culmus-aharoni-clm-fonts,GPLv2
+351,culmus-caladings-clm-fonts,GPLv2
+352,culmus-david-clm-fonts,GPLv2
+353,culmus-drugulin-clm-fonts,GPLv2
+354,culmus-ellinia-clm-fonts,GPLv2
+355,culmus-fonts-common,GPLv2
+356,culmus-frank-ruehl-clm-fonts,GPLv2
+357,culmus-hadasim-clm-fonts,GPLv2
+358,culmus-keteryg-fonts,GPLv2
+359,culmus-miriam-clm-fonts,GPLv2
+360,culmus-miriam-mono-clm-fonts,GPLv2
+361,culmus-nachlieli-clm-fonts,GPLv2
+362,culmus-shofar-fonts,GPLv2
+363,culmus-simple-clm-fonts,GPLv2
+364,culmus-stamashkenaz-clm-fonts,GPLv2
+365,culmus-stamsefarad-clm-fonts,GPLv2
+366,culmus-yehuda-clm-fonts,GPLv2
+367,CUnit,LGPLv2+
+368,cups,GPLv2+ and LGPLv2 with exceptions and AML
+369,cups-client,GPLv2
+370,cups-devel,LGPLv2
+371,cups-filesystem,GPLv2+ and LGPLv2 with exceptions and AML
+372,cups-filters,GPLv2 and GPLv2+ and GPLv3 and GPLv3+ and LGPLv2+ and MIT and BSD with advertising
+373,cups-filters-libs,LGPLv2 and MIT
+374,cups-ipptool,GPLv2+ and LGPLv2 with exceptions and AML
+375,cups-lpd,GPLv2+ and LGPLv2 with exceptions and AML
+376,cups-pk-helper,GPLv2+
+377,custodia,GPLv3+
+378,cyrus-imapd,BSD
+379,cyrus-imapd-utils,BSD
+380,cyrus-imapd-vzic,GPLv2+
+381,cyrus-sasl-sql,BSD with advertising
+382,daxctl-devel,LGPLv2
+383,daxio,BSD
+384,dbus-devel,(GPLv2+ or AFL) and GPLv2+
+385,dbus-glib-devel,AFL and GPLv2+
+386,dbus-x11,(GPLv2+ or AFL) and GPLv2+
+387,dconf,LGPLv2+ and GPLv2+ and GPLv3+
+388,dconf-editor,LGPLv2+
+389,dcraw,GPLv2+
+390,delve,MIT
+391,desktop-file-utils,GPLv2+
+392,devhelp,GPLv2+ and LGPL2+
+393,devhelp-libs,GPLv2+ and LGPL2+
+394,dialog,LGPLv2
+395,diffstat,MIT
+396,directory-maven-plugin,ASL 2.0
+397,directory-maven-plugin-javadoc,ASL 2.0
+398,dirsplit,GPLv2
+399,dleyna-connector-dbus,LGPLv2
+400,dleyna-core,LGPLv2
+401,dleyna-renderer,LGPLv2
+402,dleyna-server,LGPLv2
+403,dnf-plugin-spacewalk,GPLv2
+404,dnsmasq,GPLv2 or GPLv3
+405,dnsmasq-utils,GPLv2 or GPLv3
+406,dnssec-trigger,BSD
+407,dnssec-trigger-panel,BSD
+408,docbook-dtds,Copyright only
+409,docbook-style-xsl,DMIT
+410,dotconf,LGPLv2
+411,dotnet,MIT and ASL 2.0 and BSD
+412,dotnet-apphost-pack-3.0,MIT and ASL 2.0 and BSD
+413,dotnet-apphost-pack-3.1,MIT and ASL 2.0 and BSD
+414,dotnet-host,MIT and ASL 2.0 and BSD
+415,dotnet-host-fxr-2.1,MIT and ASL 2.0 and BSD
+416,dotnet-hostfxr-3.0,MIT and ASL 2.0 and BSD
+417,dotnet-hostfxr-3.1,MIT and ASL 2.0 and BSD
+418,dotnet-runtime-2.1,MIT and ASL 2.0 and BSD
+419,dotnet-runtime-3.0,MIT and ASL 2.0 and BSD
+420,dotnet-runtime-3.1,MIT and ASL 2.0 and BSD
+421,dotnet-sdk-2.1,MIT and ASL 2.0 and BSD
+422,dotnet-sdk-2.1.5xx,MIT and ASL 2.0 and BSD
+423,dotnet-sdk-3.0,MIT and ASL 2.0 and BSD
+424,dotnet-sdk-3.1,MIT and ASL 2.0 and BSD
+425,dotnet-targeting-pack-3.0,MIT and ASL 2.0 and BSD
+426,dotnet-targeting-pack-3.1,MIT and ASL 2.0 and BSD
+427,dotnet-templates-3.0,MIT and ASL 2.0 and BSD
+428,dotnet-templates-3.1,MIT and ASL 2.0 and BSD
+429,dovecot,MIT and LGPLv2
+430,dovecot-mysql,MIT and LGPLv2
+431,dovecot-pgsql,MIT and LGPLv2
+432,dovecot-pigeonhole,MIT and LGPLv2
+433,dpdk,BSD and LGPLv2 and GPLv2
+434,dpdk-devel,BSD and LGPLv2 and GPLv2
+435,dpdk-doc,BSD and LGPLv2 and GPLv2
+436,dpdk-tools,BSD and LGPLv2 and GPLv2
+437,driverctl,LGPLv2
+438,dropwatch,GPLv2+
+439,drpm,LGPLv2+ and BSD
+440,dvd+rw-tools,GPLv2
+441,dwz,GPLv2+ and GPLv3+
+442,dyninst,LGPLv2+
+443,edk2-aarch64,BSD-2-Clause-Patent and OpenSSL
+444,edk2-ovmf,BSD-2-Clause-Patent and OpenSSL
+445,ee4j-parent,EPL-2.0 or GPLv2 with exceptions
+446,efi-srpm-macros,GPLv3+
+447,egl-wayland,MIT
+448,elfutils-debuginfod-client,GPLv3+ and (GPLv2+ or LGPLv3+)
+449,elfutils-debuginfod-client-devel,GPLv2+ or LGPLv3+
+450,emacs,GPLv3+ and CC0-1.0
+451,emacs-common,GPLv3+ and GFDL and BSD
+452,emacs-lucid,GPLv3+ and CC0-1.0
+453,emacs-nox,GPLv3+ and CC0-1.0
+454,emacs-terminal,GPLv3+ and CC0-1.0
+455,enchant,LGPLv2+
+456,enchant2,LGPLv2+
+457,enscript,GPLv3+ and LGPLv2+ and GPLv2+
+458,eog,GPLv2+ and GFDL
+459,esc,GPL+
+460,espeak-ng,GPLv3+
+461,evemu,GPLv3+
+462,evemu-libs,LGPLv3+
+463,evince,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+464,evince-browser-plugin,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+465,evince-libs,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+466,evince-nautilus,GPLv2+ and GPLv3+ and LGPLv2+ and MIT and Afmparse
+467,evolution,GPLv2+ and GFDL
+468,evolution-bogofilter,GPLv2+ and GFDL
+469,evolution-data-server,LGPLv2+
+470,evolution-data-server-devel,LGPLv2+
+471,evolution-data-server-langpacks,LGPLv2+
+472,evolution-ews,LGPLv2
+473,evolution-ews-langpacks,LGPLv2
+474,evolution-help,GPLv2+ and GFDL
+475,evolution-langpacks,GPLv2+ and GFDL
+476,evolution-mapi,LGPLv2+
+477,evolution-mapi-langpacks,LGPLv2+
+478,evolution-pst,GPLv2+ and GFDL
+479,evolution-spamassassin,GPLv2+ and GFDL
+480,exchange-bmc-os-info,BSD
+481,exempi,BSD
+482,exiv2,GPLv2+
+483,exiv2-libs,GPLv2+
+484,fabtests,BSD and (BSD or GPLv2) and MIT
+485,fapolicyd,GPLv3+
+486,farstream02,LGPLv2+ and GPLv2+
+487,fence-agents-all,GPLv2+ and LGPLv2+ and ASL 2.0
+488,fence-agents-amt-ws,ASL 2.0
+489,fence-agents-apc,GPLv2+ and LGPLv2+
+490,fence-agents-apc-snmp,GPLv2+ and LGPLv2+
+491,fence-agents-bladecenter,GPLv2+ and LGPLv2+
+492,fence-agents-brocade,GPLv2+ and LGPLv2+
+493,fence-agents-cisco-mds,GPLv2+ and LGPLv2+
+494,fence-agents-cisco-ucs,GPLv2+ and LGPLv2+
+495,fence-agents-common,GPLv2+ and LGPLv2+
+496,fence-agents-compute,GPLv2+ and LGPLv2+
+497,fence-agents-drac5,GPLv2+ and LGPLv2+
+498,fence-agents-eaton-snmp,GPLv2+ and LGPLv2+
+499,fence-agents-emerson,GPLv2+ and LGPLv2+
+500,fence-agents-eps,GPLv2+ and LGPLv2+
+501,fence-agents-heuristics-ping,GPLv2+ and LGPLv2+
+502,fence-agents-hpblade,GPLv2+ and LGPLv2+
+503,fence-agents-ibmblade,GPLv2+ and LGPLv2+
+504,fence-agents-ifmib,GPLv2+ and LGPLv2+
+505,fence-agents-ilo-moonshot,GPLv2+ and LGPLv2+
+506,fence-agents-ilo-mp,GPLv2+ and LGPLv2+
+507,fence-agents-ilo-ssh,GPLv2+ and LGPLv2+
+508,fence-agents-ilo2,GPLv2+ and LGPLv2+
+509,fence-agents-intelmodular,GPLv2+ and LGPLv2+
+510,fence-agents-ipdu,GPLv2+ and LGPLv2+
+511,fence-agents-ipmilan,GPLv2+ and LGPLv2+
+512,fence-agents-kdump,GPLv2+ and LGPLv2+
+513,fence-agents-lpar,GPLv2+ and LGPLv2+
+514,fence-agents-mpath,GPLv2+ and LGPLv2+
+515,fence-agents-redfish,GPLv2+ and LGPLv2+
+516,fence-agents-rhevm,GPLv2+ and LGPLv2+
+517,fence-agents-rsa,GPLv2+ and LGPLv2+
+518,fence-agents-rsb,GPLv2+ and LGPLv2+
+519,fence-agents-sbd,GPLv2+ and LGPLv2+
+520,fence-agents-scsi,GPLv2+ and LGPLv2+
+521,fence-agents-virsh,GPLv2+ and LGPLv2+
+522,fence-agents-vmware-rest,GPLv2+ and LGPLv2+
+523,fence-agents-vmware-soap,GPLv2+ and LGPLv2+
+524,fence-agents-wti,GPLv2+ and LGPLv2+
+525,fence-agents-zvm,GPLv2+ and LGPLv2+
+526,fence-virt,GPLv2+
+527,fence-virtd,GPLv2+
+528,fence-virtd-libvirt,GPLv2+
+529,fence-virtd-multicast,GPLv2+
+530,fence-virtd-serial,GPLv2+
+531,fence-virtd-tcp,GPLv2+
+532,fetchmail,GPL+ and Public Domain
+533,fftw,GPLv2+
+534,fftw-devel,GPLv2+
+535,fftw-libs,GPLv2+
+536,fftw-libs-double,GPLv2+
+537,fftw-libs-long,GPLv2+
+538,fftw-libs-quad,GPLv2+
+539,fftw-libs-single,GPLv2+
+540,fftw-static,GPLv2+
+541,file-roller,GPLv2+
+542,fio,GPLv2
+543,firefox,MPLv1.1 or GPLv2+ or LGPLv2+
+544,firewall-applet,GPLv2+
+545,firewall-config,GPLv2+
+546,flac-libs,BSD and GPLv2+ and GFDL
+547,flatpak,LGPLv2+
+548,flatpak-builder,LGPLv2+ and GPLv2+
+549,flatpak-libs,LGPLv2+
+550,flatpak-selinux,LGPLv2+
+551,flatpak-session-helper,LGPLv2+
+552,flex,BSD and LGPLv2+
+553,flex-doc,BSD and LGPLv2+
+554,fltk,LGPLv2+ with exceptions
+555,flute,W3C and LGPLv2+
+556,fontawesome-fonts,OFL
+557,fonts-tweak-tool,LGPLv3+
+558,foomatic,GPLv2+
+559,foomatic-db,GPLv2+
+560,foomatic-db-filesystem,Public Domain
+561,foomatic-db-ppds,GPLv2+ and MIT
+562,fprintd,GPLv2+
+563,fprintd-pam,GPLv2+
+564,freeglut,MIT
+565,freeglut-devel,MIT
+566,freeradius,GPLv2+ and LGPLv2+
+567,freeradius-devel,GPLv2+ and LGPLv2+
+568,freeradius-doc,GPLv2+ and LGPLv2+
+569,freeradius-krb5,GPLv2+ and LGPLv2+
+570,freeradius-ldap,GPLv2+ and LGPLv2+
+571,freeradius-mysql,GPLv2+ and LGPLv2+
+572,freeradius-perl,GPLv2+ and LGPLv2+
+573,freeradius-postgresql,GPLv2+ and LGPLv2+
+574,freeradius-rest,GPLv2+ and LGPLv2+
+575,freeradius-sqlite,GPLv2+ and LGPLv2+
+576,freeradius-unixODBC,GPLv2+ and LGPLv2+
+577,freeradius-utils,GPLv2+ and LGPLv2+
+578,freerdp,ASL 2.0
+579,freerdp-libs,ASL 2.0
+580,frei0r-plugins,GPLv2+
+581,frei0r-plugins-opencv,GPLv2+
+582,fribidi,LGPLv2+ and UCD
+583,fribidi-devel,LGPLv2+ and UCD
+584,frr,GPLv2+
+585,frr-contrib,GPLv2+
+586,ftp,BSD with advertising
+587,fuse-overlayfs,GPLv3+
+588,galera,GPLv2
+589,gavl,GPLv3+
+590,gc,BSD
+591,gcc,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+592,gcc-c++,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+593,gcc-gdb-plugin,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+594,gcc-gfortran,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+595,gcc-offload-nvptx,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+596,gcc-toolset-9,GPLv2+
+597,gcc-toolset-9-annobin,GPLv3+
+598,gcc-toolset-9-binutils,GPLv3+
+599,gcc-toolset-9-binutils-devel,GPLv3+
+600,gcc-toolset-9-build,GPLv2+
+601,gcc-toolset-9-dwz,GPLv2+ and GPLv3+
+602,gcc-toolset-9-dyninst,LGPLv2+
+603,gcc-toolset-9-elfutils,GPLv3+ and (GPLv2+ or LGPLv3+)
+604,gcc-toolset-9-elfutils-devel,GPLv2+ or LGPLv3+
+605,gcc-toolset-9-elfutils-libelf,GPLv2+ or LGPLv3+
+606,gcc-toolset-9-elfutils-libelf-devel,GPLv2+ or LGPLv3+
+607,gcc-toolset-9-elfutils-libs,GPLv2+ or LGPLv3+
+608,gcc-toolset-9-gcc,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+609,gcc-toolset-9-gcc-c++,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+610,gcc-toolset-9-gcc-gdb-plugin,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+611,gcc-toolset-9-gcc-gfortran,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+612,gcc-toolset-9-gdb,GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and LGPLv3+ and BSD and Public Domain and GFDL
+613,gcc-toolset-9-gdb-doc,GFDL
+614,gcc-toolset-9-gdb-gdbserver,GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and LGPLv3+ and BSD and Public Domain and GFDL
+615,gcc-toolset-9-libasan-devel,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+616,gcc-toolset-9-libatomic-devel,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+617,gcc-toolset-9-libitm-devel,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+618,gcc-toolset-9-liblsan-devel,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+619,gcc-toolset-9-libquadmath-devel,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+620,gcc-toolset-9-libstdc++-devel,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+621,gcc-toolset-9-libstdc++-docs,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+622,gcc-toolset-9-libtsan-devel,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+623,gcc-toolset-9-libubsan-devel,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+624,gcc-toolset-9-ltrace,GPLv2+
+625,gcc-toolset-9-make,GPLv3+
+626,gcc-toolset-9-make-devel,GPLv3+
+627,gcc-toolset-9-perftools,GPLv2+
+628,gcc-toolset-9-runtime,GPLv2+
+629,gcc-toolset-9-strace,LGPL-2.1+ and GPL-2.0+
+630,gcc-toolset-9-systemtap,GPLv2+
+631,gcc-toolset-9-systemtap-client,GPLv2+
+632,gcc-toolset-9-systemtap-devel,GPLv2+
+633,gcc-toolset-9-systemtap-initscript,GPLv2+
+634,gcc-toolset-9-systemtap-runtime,GPLv2+
+635,gcc-toolset-9-systemtap-sdt-devel,GPLv2+ and Public Domain
+636,gcc-toolset-9-systemtap-server,GPLv2+
+637,gcc-toolset-9-toolchain,GPLv2+
+638,gcc-toolset-9-valgrind,GPLv2+
+639,gcc-toolset-9-valgrind-devel,GPLv2+
+640,GConf2,LGPLv2+ and GPLv2+
+641,gcr,LGPLv2+
+642,gcr-devel,LGPLv2+
+643,gd,MIT
+644,gd-devel,MIT
+645,gdb,GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and LGPLv3+ and BSD and Public Domain and GFDL
+646,gdb-doc,GFDL
+647,gdb-gdbserver,GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and LGPLv3+ and BSD and Public Domain and GFDL
+648,gdb-headless,GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and LGPLv3+ and BSD and Public Domain and GFDL
+649,gdk-pixbuf2-devel,LGPLv2+
+650,gdk-pixbuf2-modules,LGPLv2+
+651,gdm,GPLv2+
+652,gedit,GPLv2+ and GFDL
+653,gedit-plugin-bookmarks,GPLv2+
+654,gedit-plugin-bracketcompletion,GPLv2+
+655,gedit-plugin-codecomment,GPLv2+
+656,gedit-plugin-colorpicker,GPLv2+
+657,gedit-plugin-colorschemer,GPLv2+
+658,gedit-plugin-commander,GPLv2+
+659,gedit-plugin-drawspaces,GPLv2+
+660,gedit-plugin-findinfiles,GPLv2+
+661,gedit-plugin-joinlines,GPLv2+
+662,gedit-plugin-multiedit,GPLv2+
+663,gedit-plugin-smartspaces,GPLv2+
+664,gedit-plugin-terminal,GPLv2+
+665,gedit-plugin-textsize,GPLv2+
+666,gedit-plugin-translate,GPLv2+
+667,gedit-plugin-wordcompletion,GPLv2+
+668,gedit-plugins,GPLv2+
+669,gedit-plugins-data,GPLv2+
+670,gegl,LGPLv3+ and GPLv3+
+671,gegl04,LGPLv3+
+672,genisoimage,GPLv2
+673,geoclue2,GPLv2+
+674,geoclue2-demos,GPLv2+
+675,geoclue2-libs,LGPLv2+
+676,geocode-glib,LGPLv2+
+677,geocode-glib-devel,LGPLv2+
+678,geoipupdate,GPLv2
+679,geolite2-city,CC-BY-SA
+680,geolite2-country,CC-BY-SA
+681,geronimo-annotation,ASL 2.0
+682,gfbgraph,LGPLv2+
+683,ghc-srpm-macros,GPLv2+
+684,ghostscript,AGPLv3+
+685,giflib,MIT
+686,gimp,GPLv3+ and GPLv3
+687,gimp-devel,LGPLv3+
+688,gimp-devel-tools,LGPLv3+
+689,gimp-libs,LGPLv3+
+690,git,GPLv2
+691,git-all,GPLv2
+692,git-clang-format,NCSA
+693,git-core,GPLv2
+694,git-core-doc,GPLv2
+695,git-daemon,GPLv2
+696,git-email,GPLv2
+697,git-gui,GPLv2
+698,git-instaweb,GPLv2
+699,git-subtree,GPLv2
+700,git-svn,GPLv2
+701,gitk,GPLv2
+702,gitweb,GPLv2
+703,gjs,MIT and (MPLv1.1 or GPLv2+ or LGPLv2+)
+704,gl-manpages,MIT and Open Publication
+705,glade-libs,GPLv2+ and LGPLv2+
+706,glassfish-el-api,(CDDL or GPLv2 with exceptions) and ASL 2.0
+707,glassfish-fastinfoset,ASL 2.0
+708,glassfish-jaxb-api,CDDL or GPLv2 with exception
+709,glassfish-jaxb-core,CDDL-1.1 and GPLv2 with exceptions
+710,glassfish-jaxb-runtime,CDDL-1.1 and GPLv2 with exceptions
+711,glassfish-jaxb-txw2,CDDL-1.1 and GPLv2 with exceptions
+712,glibc-utils,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+713,glibmm24,LGPLv2+
+714,glusterfs-api,GPLv2 or LGPLv3+
+715,glusterfs-cli,GPLv2 or LGPLv3+
+716,glx-utils,MIT
+717,gnome-abrt,GPLv2+
+718,gnome-autoar,LGPLv2+
+719,gnome-backgrounds,GPLv2
+720,gnome-backgrounds-extras,GPLv2
+721,gnome-bluetooth,GPLv2+
+722,gnome-bluetooth-libs,LGPLv2+
+723,gnome-boxes,LGPLv2+
+724,gnome-calculator,GPLv3+
+725,gnome-characters,BSD and GPLv2+
+726,gnome-classic-session,GPLv2+
+727,gnome-color-manager,GPLv2+
+728,gnome-control-center,GPLv2+ and CC-BY-SA
+729,gnome-control-center-filesystem,GPLv2+ and CC-BY-SA
+730,gnome-desktop3,GPLv2+ and LGPLv2+
+731,gnome-desktop3-devel,LGPLv2+
+732,gnome-disk-utility,GPLv2+
+733,gnome-font-viewer,GPLv2+
+734,gnome-getting-started-docs,CC-BY-SA
+735,gnome-getting-started-docs-cs,CC-BY-SA
+736,gnome-getting-started-docs-de,CC-BY-SA
+737,gnome-getting-started-docs-es,CC-BY-SA
+738,gnome-getting-started-docs-fr,CC-BY-SA
+739,gnome-getting-started-docs-gl,CC-BY-SA
+740,gnome-getting-started-docs-hu,CC-BY-SA
+741,gnome-getting-started-docs-it,CC-BY-SA
+742,gnome-getting-started-docs-pl,CC-BY-SA
+743,gnome-getting-started-docs-pt_BR,CC-BY-SA
+744,gnome-getting-started-docs-ru,CC-BY-SA
+745,gnome-initial-setup,GPLv2+
+746,gnome-keyring,GPLv2+ and LGPLv2+
+747,gnome-keyring-pam,LGPLv2+
+748,gnome-logs,GPLv3+
+749,gnome-menus,LGPLv2+
+750,gnome-online-accounts,LGPLv2+
+751,gnome-online-accounts-devel,LGPLv2+
+752,gnome-online-miners,GPLv2+ and LGPLv2+ and MIT
+753,gnome-photos,GPLv3+ and LGPLv2+
+754,gnome-photos-tests,GPLv3+ and LGPLv2+
+755,gnome-remote-desktop,GPLv2+
+756,gnome-screenshot,GPLv2+
+757,gnome-session,GPLv2+
+758,gnome-session-wayland-session,GPLv2+
+759,gnome-session-xsession,GPLv2+
+760,gnome-settings-daemon,GPLv2+
+761,gnome-shell,GPLv2+
+762,gnome-shell-extension-apps-menu,GPLv2+
+763,gnome-shell-extension-auto-move-windows,GPLv2+
+764,gnome-shell-extension-common,GPLv2+
+765,gnome-shell-extension-dash-to-dock,GPLv2+
+766,gnome-shell-extension-desktop-icons,GPLv3+
+767,gnome-shell-extension-disable-screenshield,GPLv2+
+768,gnome-shell-extension-drive-menu,GPLv2+
+769,gnome-shell-extension-horizontal-workspaces,GPLv3+
+770,gnome-shell-extension-launch-new-instance,GPLv2+
+771,gnome-shell-extension-native-window-placement,GPLv2+
+772,gnome-shell-extension-no-hot-corner,GPLv2+
+773,gnome-shell-extension-panel-favorites,GPLv2+
+774,gnome-shell-extension-places-menu,GPLv2+
+775,gnome-shell-extension-screenshot-window-sizer,GPLv2+
+776,gnome-shell-extension-systemMonitor,GPLv2+
+777,gnome-shell-extension-top-icons,GPLv2+
+778,gnome-shell-extension-updates-dialog,GPLv2+
+779,gnome-shell-extension-user-theme,GPLv2+
+780,gnome-shell-extension-window-grouper,GPLv2+
+781,gnome-shell-extension-window-list,GPLv2+
+782,gnome-shell-extension-windowsNavigator,GPLv2+
+783,gnome-shell-extension-workspace-indicator,GPLv2+
+784,gnome-software,GPLv2+
+785,gnome-software-editor,GPLv2+
+786,gnome-system-monitor,GPLv2+
+787,gnome-terminal,GPLv3+ and GFDL and LGPLv2+
+788,gnome-terminal-nautilus,GPLv3+ and GFDL and LGPLv2+
+789,gnome-themes-standard,LGPLv2+
+790,gnome-tweaks,GPLv3 and CC0
+791,gnome-user-docs,CC-BY-SA
+792,gnome-video-effects,GPLv2
+793,gnu-free-fonts-common,GPLv3+ with exceptions
+794,gnu-free-mono-fonts,GPLv3+ with exceptions
+795,gnu-free-sans-fonts,GPLv3+ with exceptions
+796,gnu-free-serif-fonts,GPLv3+ with exceptions
+797,gnuplot,gnuplot and MIT
+798,gnuplot-common,gnuplot and MIT
+799,gnutls-c++,GPLv3+ and LGPLv2+
+800,gnutls-dane,GPLv3+ and LGPLv2+
+801,gnutls-devel,GPLv3+ and LGPLv2+
+802,gnutls-utils,GPLv3+
+803,go-srpm-macros,GPLv3+
+804,go-toolset,BSD and Public Domain
+805,golang,BSD and Public Domain
+806,golang-bin,BSD and Public Domain
+807,golang-docs,BSD and Public Domain
+808,golang-misc,BSD and Public Domain
+809,golang-race,BSD and Public Domain
+810,golang-src,BSD and Public Domain
+811,golang-tests,BSD and Public Domain
+812,gom,LGPLv2+
+813,google-crosextra-caladea-fonts,ASL 2.0
+814,google-crosextra-carlito-fonts,OFL
+815,google-droid-kufi-fonts,ASL 2.0
+816,google-droid-sans-fonts,ASL 2.0
+817,google-droid-sans-mono-fonts,ASL 2.0
+818,google-droid-serif-fonts,ASL 2.0
+819,google-guice,ASL 2.0
+820,google-noto-cjk-fonts-common,OFL
+821,google-noto-emoji-color-fonts,OFL and ASL 2.0
+822,google-noto-emoji-fonts,OFL and ASL 2.0
+823,google-noto-fonts-common,OFL
+824,google-noto-kufi-arabic-fonts,OFL
+825,google-noto-mono-fonts,OFL
+826,google-noto-naskh-arabic-fonts,OFL
+827,google-noto-naskh-arabic-ui-fonts,OFL
+828,google-noto-nastaliq-urdu-fonts,OFL
+829,google-noto-sans-armenian-fonts,OFL
+830,google-noto-sans-avestan-fonts,OFL
+831,google-noto-sans-balinese-fonts,OFL
+832,google-noto-sans-bamum-fonts,OFL
+833,google-noto-sans-batak-fonts,OFL
+834,google-noto-sans-bengali-fonts,OFL
+835,google-noto-sans-bengali-ui-fonts,OFL
+836,google-noto-sans-brahmi-fonts,OFL
+837,google-noto-sans-buginese-fonts,OFL
+838,google-noto-sans-buhid-fonts,OFL
+839,google-noto-sans-canadian-aboriginal-fonts,OFL
+840,google-noto-sans-carian-fonts,OFL
+841,google-noto-sans-cham-fonts,OFL
+842,google-noto-sans-cherokee-fonts,OFL
+843,google-noto-sans-cjk-ttc-fonts,OFL
+844,google-noto-sans-coptic-fonts,OFL
+845,google-noto-sans-cuneiform-fonts,OFL
+846,google-noto-sans-cypriot-fonts,OFL
+847,google-noto-sans-deseret-fonts,OFL
+848,google-noto-sans-devanagari-fonts,OFL
+849,google-noto-sans-devanagari-ui-fonts,OFL
+850,google-noto-sans-egyptian-hieroglyphs-fonts,OFL
+851,google-noto-sans-ethiopic-fonts,OFL
+852,google-noto-sans-fonts,OFL
+853,google-noto-sans-georgian-fonts,OFL
+854,google-noto-sans-glagolitic-fonts,OFL
+855,google-noto-sans-gothic-fonts,OFL
+856,google-noto-sans-gujarati-fonts,OFL
+857,google-noto-sans-gujarati-ui-fonts,OFL
+858,google-noto-sans-gurmukhi-fonts,OFL
+859,google-noto-sans-gurmukhi-ui-fonts,OFL
+860,google-noto-sans-hanunoo-fonts,OFL
+861,google-noto-sans-hebrew-fonts,OFL
+862,google-noto-sans-imperial-aramaic-fonts,OFL
+863,google-noto-sans-inscriptional-pahlavi-fonts,OFL
+864,google-noto-sans-inscriptional-parthian-fonts,OFL
+865,google-noto-sans-javanese-fonts,OFL
+866,google-noto-sans-kaithi-fonts,OFL
+867,google-noto-sans-kannada-fonts,OFL
+868,google-noto-sans-kannada-ui-fonts,OFL
+869,google-noto-sans-kayah-li-fonts,OFL
+870,google-noto-sans-kharoshthi-fonts,OFL
+871,google-noto-sans-khmer-fonts,OFL
+872,google-noto-sans-khmer-ui-fonts,OFL
+873,google-noto-sans-lao-fonts,OFL
+874,google-noto-sans-lao-ui-fonts,OFL
+875,google-noto-sans-lepcha-fonts,OFL
+876,google-noto-sans-limbu-fonts,OFL
+877,google-noto-sans-linear-b-fonts,OFL
+878,google-noto-sans-lisu-fonts,OFL
+879,google-noto-sans-lycian-fonts,OFL
+880,google-noto-sans-lydian-fonts,OFL
+881,google-noto-sans-malayalam-fonts,OFL
+882,google-noto-sans-malayalam-ui-fonts,OFL
+883,google-noto-sans-mandaic-fonts,OFL
+884,google-noto-sans-meetei-mayek-fonts,OFL
+885,google-noto-sans-mongolian-fonts,OFL
+886,google-noto-sans-myanmar-fonts,OFL
+887,google-noto-sans-myanmar-ui-fonts,OFL
+888,google-noto-sans-new-tai-lue-fonts,OFL
+889,google-noto-sans-nko-fonts,OFL
+890,google-noto-sans-ogham-fonts,OFL
+891,google-noto-sans-ol-chiki-fonts,OFL
+892,google-noto-sans-old-italic-fonts,OFL
+893,google-noto-sans-old-persian-fonts,OFL
+894,google-noto-sans-old-south-arabian-fonts,OFL
+895,google-noto-sans-old-turkic-fonts,OFL
+896,google-noto-sans-oriya-fonts,OFL
+897,google-noto-sans-oriya-ui-fonts,OFL
+898,google-noto-sans-osmanya-fonts,OFL
+899,google-noto-sans-phags-pa-fonts,OFL
+900,google-noto-sans-phoenician-fonts,OFL
+901,google-noto-sans-rejang-fonts,OFL
+902,google-noto-sans-runic-fonts,OFL
+903,google-noto-sans-samaritan-fonts,OFL
+904,google-noto-sans-saurashtra-fonts,OFL
+905,google-noto-sans-shavian-fonts,OFL
+906,google-noto-sans-sinhala-fonts,OFL
+907,google-noto-sans-sundanese-fonts,OFL
+908,google-noto-sans-syloti-nagri-fonts,OFL
+909,google-noto-sans-symbols-fonts,OFL
+910,google-noto-sans-syriac-eastern-fonts,OFL
+911,google-noto-sans-syriac-estrangela-fonts,OFL
+912,google-noto-sans-syriac-western-fonts,OFL
+913,google-noto-sans-tagalog-fonts,OFL
+914,google-noto-sans-tagbanwa-fonts,OFL
+915,google-noto-sans-tai-le-fonts,OFL
+916,google-noto-sans-tai-tham-fonts,OFL
+917,google-noto-sans-tai-viet-fonts,OFL
+918,google-noto-sans-tamil-fonts,OFL
+919,google-noto-sans-tamil-ui-fonts,OFL
+920,google-noto-sans-telugu-fonts,OFL
+921,google-noto-sans-telugu-ui-fonts,OFL
+922,google-noto-sans-thaana-fonts,OFL
+923,google-noto-sans-thai-fonts,OFL
+924,google-noto-sans-thai-ui-fonts,OFL
+925,google-noto-sans-tibetan-fonts,OFL
+926,google-noto-sans-tifinagh-fonts,OFL
+927,google-noto-sans-ugaritic-fonts,OFL
+928,google-noto-sans-ui-fonts,OFL
+929,google-noto-sans-vai-fonts,OFL
+930,google-noto-sans-yi-fonts,OFL
+931,google-noto-serif-armenian-fonts,OFL
+932,google-noto-serif-bengali-fonts,OFL
+933,google-noto-serif-cjk-ttc-fonts,OFL
+934,google-noto-serif-devanagari-fonts,OFL
+935,google-noto-serif-fonts,OFL
+936,google-noto-serif-georgian-fonts,OFL
+937,google-noto-serif-gujarati-fonts,OFL
+938,google-noto-serif-kannada-fonts,OFL
+939,google-noto-serif-khmer-fonts,OFL
+940,google-noto-serif-lao-fonts,OFL
+941,google-noto-serif-malayalam-fonts,OFL
+942,google-noto-serif-tamil-fonts,OFL
+943,google-noto-serif-telugu-fonts,OFL
+944,google-noto-serif-thai-fonts,OFL
+945,gpm,GPLv2 and GPLv2+ with exceptions and GPLv3+ and Verbatim and Copyright only
+946,gpm-devel,GPLv2 and GPLv2+ with exceptions and GPLv3+ and Verbatim and Copyright only
+947,gpm-libs,GPLv2 and GPLv2+ with exceptions and GPLv3+ and Verbatim and Copyright only
+948,grafana,ASL 2.0
+949,grafana-azure-monitor,ASL 2.0
+950,grafana-cloudwatch,ASL 2.0
+951,grafana-elasticsearch,ASL 2.0
+952,grafana-graphite,ASL 2.0
+953,grafana-influxdb,ASL 2.0
+954,grafana-loki,ASL 2.0
+955,grafana-mssql,ASL 2.0
+956,grafana-mysql,ASL 2.0
+957,grafana-opentsdb,ASL 2.0
+958,grafana-pcp,ASL 2.0
+959,grafana-postgres,ASL 2.0
+960,grafana-prometheus,ASL 2.0
+961,grafana-stackdriver,ASL 2.0
+962,graphite2,(LGPLv2+ or GPLv2+ or MPL) and (Netscape or GPLv2+ or LGPLv2+)
+963,graphite2-devel,(LGPLv2+ or GPLv2+ or MPL) and (Netscape or GPLv2+ or LGPLv2+)
+964,graphviz,EPL-1.0
+965,grilo,LGPLv2+
+966,grilo-plugins,LGPLv2+
+967,gsettings-desktop-schemas,LGPLv2+
+968,gsettings-desktop-schemas-devel,LGPLv2+
+969,gsl,GPLv3 and GFDL and BSD
+970,gsl-devel,GPLv3 and GFDL and BSD
+971,gsm,MIT
+972,gsound,LGPLv2
+973,gspell,LGPLv2+
+974,gssdp,LGPLv2+
+975,gssntlmssp,LGPLv3+
+976,gstreamer1,LGPLv2+
+977,gstreamer1-devel,LGPLv2+
+978,gstreamer1-plugins-bad-free,LGPLv2+ and LGPLv2
+979,gstreamer1-plugins-base,LGPLv2+
+980,gstreamer1-plugins-base-devel,LGPLv2+
+981,gstreamer1-plugins-good,LGPLv2+
+982,gstreamer1-plugins-good-gtk,LGPLv2+
+983,gstreamer1-plugins-ugly-free,LGPLv2+ and LGPLv2
+984,gtk-update-icon-cache,LGPLv2+
+985,gtk-vnc2,LGPLv2+
+986,gtk2,LGPLv2+
+987,gtk2-devel,LGPLv2+
+988,gtk2-devel-docs,LGPLv2+
+989,gtk2-immodule-xim,LGPLv2+
+990,gtk2-immodules,LGPLv2+
+991,gtk3,LGPLv2+
+992,gtk3-devel,LGPLv2+
+993,gtk3-immodule-xim,LGPLv2+
+994,gtkmm24,LGPLv2+
+995,gtkmm30,LGPLv2+
+996,gtksourceview3,LGPLv2+
+997,gtkspell,GPLv2+
+998,gtkspell3,GPLv2+
+999,guava,ASL 2.0 and CC0
+1000,guava20,ASL 2.0 and CC0
+1001,gubbi-fonts,GPLv3+ with exceptions
+1002,guile,LGPLv3+
+1003,gupnp,LGPLv2+
+1004,gupnp-av,LGPLv2+
+1005,gupnp-dlna,LGPLv2+
+1006,gupnp-igd,LGPLv2+
+1007,gutenprint,GPLv2+
+1008,gutenprint-cups,GPLv2+
+1009,gutenprint-doc,GPLv2+
+1010,gutenprint-libs,GPLv2+
+1011,gutenprint-libs-ui,GPLv2+
+1012,gutenprint-plugin,GPLv2+
+1013,gvfs,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+1014,gvfs-afc,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+1015,gvfs-afp,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+1016,gvfs-archive,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+1017,gvfs-client,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+1018,gvfs-devel,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+1019,gvfs-fuse,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+1020,gvfs-goa,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+1021,gvfs-gphoto2,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+1022,gvfs-mtp,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+1023,gvfs-smb,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+1024,gvnc,LGPLv2+
+1025,haproxy,GPLv2+
+1026,harfbuzz,MIT
+1027,harfbuzz-devel,MIT
+1028,harfbuzz-icu,MIT
+1029,hawtjni-runtime,ASL 2.0 and EPL and BSD
+1030,hesiod,MIT
+1031,hexchat,GPLv2+
+1032,hexchat-devel,GPLv2+
+1033,hexedit,GPLv2+
+1034,hicolor-icon-theme,GPLv2+
+1035,highlight,GPLv3
+1036,highlight-gui,GPLv3
+1037,hivex,LGPLv2
+1038,hivex-devel,LGPLv2
+1039,hplip,GPLv2+ and MIT and BSD and IJG and Public Domain and GPLv2+ with exceptions and ISC
+1040,hplip-common,GPLv2+
+1041,hplip-gui,BSD
+1042,hplip-libs,GPLv2+ and MIT
+1043,hspell,AGPLv3
+1044,http-parser,MIT
+1045,httpcomponents-client,ASL 2.0
+1046,httpcomponents-core,ASL 2.0
+1047,httpd,ASL 2.0
+1048,httpd-devel,ASL 2.0
+1049,httpd-filesystem,ASL 2.0
+1050,httpd-manual,ASL 2.0
+1051,httpd-tools,ASL 2.0
+1052,hunspell,LGPLv2+ or GPLv2+ or MPLv1.1
+1053,hunspell-af,LGPLv2+
+1054,hunspell-ak,LGPLv3
+1055,hunspell-am,GPL+
+1056,hunspell-ar,GPLv2 or LGPLv2 or MPLv1.1
+1057,hunspell-as,GPLv2+ or LGPLv2+ or MPLv1.1
+1058,hunspell-ast,GPLv3+
+1059,hunspell-az,GPLv2+
+1060,hunspell-be,GPL+ and LGPLv2+
+1061,hunspell-ber,GPL+ or LGPLv2+ or MPLv1.1
+1062,hunspell-bg,GPLv2+ or LGPLv2+ or MPLv1.1
+1063,hunspell-bn,GPLv2+
+1064,hunspell-br,LGPLv2+
+1065,hunspell-ca,GPLv2+
+1066,hunspell-cop,GPLv3+
+1067,hunspell-cs,GPL+
+1068,hunspell-csb,GPLv2+
+1069,hunspell-cv,GPLv3+ or LGPLv3+ or MPLv1.1
+1070,hunspell-cy,GPL+
+1071,hunspell-da,GPLv2+
+1072,hunspell-de,GPLv2 or GPLv3
+1073,hunspell-devel,LGPLv2+ or GPLv2+ or MPLv1.1
+1074,hunspell-dsb,GPLv2+
+1075,hunspell-el,GPLv2+ or LGPLv2+ or MPLv1.1
+1076,hunspell-en,LGPLv2+ and LGPLv2 and BSD
+1077,hunspell-en-GB,LGPLv2+ and LGPLv2 and BSD
+1078,hunspell-en-US,LGPLv2+ and LGPLv2 and BSD
+1079,hunspell-eo,LGPLv3
+1080,hunspell-es,LGPLv3+ or GPLv3+ or MPLv1.1
+1081,hunspell-es-AR,LGPLv3+ or GPLv3+ or MPLv1.1
+1082,hunspell-es-BO,LGPLv3+ or GPLv3+ or MPLv1.1
+1083,hunspell-es-CL,LGPLv3+ or GPLv3+ or MPLv1.1
+1084,hunspell-es-CO,LGPLv3+ or GPLv3+ or MPLv1.1
+1085,hunspell-es-CR,LGPLv3+ or GPLv3+ or MPLv1.1
+1086,hunspell-es-CU,LGPLv3+ or GPLv3+ or MPLv1.1
+1087,hunspell-es-DO,LGPLv3+ or GPLv3+ or MPLv1.1
+1088,hunspell-es-EC,LGPLv3+ or GPLv3+ or MPLv1.1
+1089,hunspell-es-ES,LGPLv3+ or GPLv3+ or MPLv1.1
+1090,hunspell-es-GT,LGPLv3+ or GPLv3+ or MPLv1.1
+1091,hunspell-es-HN,LGPLv3+ or GPLv3+ or MPLv1.1
+1092,hunspell-es-MX,LGPLv3+ or GPLv3+ or MPLv1.1
+1093,hunspell-es-NI,LGPLv3+ or GPLv3+ or MPLv1.1
+1094,hunspell-es-PA,LGPLv3+ or GPLv3+ or MPLv1.1
+1095,hunspell-es-PE,LGPLv3+ or GPLv3+ or MPLv1.1
+1096,hunspell-es-PR,LGPLv3+ or GPLv3+ or MPLv1.1
+1097,hunspell-es-PY,LGPLv3+ or GPLv3+ or MPLv1.1
+1098,hunspell-es-SV,LGPLv3+ or GPLv3+ or MPLv1.1
+1099,hunspell-es-US,LGPLv3+ or GPLv3+ or MPLv1.1
+1100,hunspell-es-UY,LGPLv3+ or GPLv3+ or MPLv1.1
+1101,hunspell-es-VE,LGPLv3+ or GPLv3+ or MPLv1.1
+1102,hunspell-et,LGPLv2+ and LPPL
+1103,hunspell-eu,GPLv2
+1104,hunspell-fa,GPLv2+
+1105,hunspell-fj,LGPLv2+ or GPLv2+ or MPLv1.1
+1106,hunspell-fo,GPLv2+
+1107,hunspell-fr,MPLv2.0
+1108,hunspell-fur,GPLv2+
+1109,hunspell-fy,LGPLv2+
+1110,hunspell-ga,GPLv2+
+1111,hunspell-gd,GPLv2+ and GPLv3+
+1112,hunspell-gl,GPLv2
+1113,hunspell-grc,GPL+ or LGPLv2+
+1114,hunspell-gu,GPL+
+1115,hunspell-gv,GPL+
+1116,hunspell-haw,GPLv2+
+1117,hunspell-he,AGPLv3
+1118,hunspell-hi,GPLv2+
+1119,hunspell-hil,GPLv2+
+1120,hunspell-hr,LGPLv2+ or SISSL
+1121,hunspell-hsb,GPLv2+
+1122,hunspell-ht,GPLv3+
+1123,hunspell-hu,LGPLv2+ or GPLv2+ or MPLv1.1
+1124,hunspell-hy,GPLv2+
+1125,hunspell-ia,LGPLv2+
+1126,hunspell-id,GPLv2
+1127,hunspell-is,GPLv2+
+1128,hunspell-it,GPLv3+
+1129,hunspell-kk,GPLv2+ or LGPLv2+ or MPLv1.1
+1130,hunspell-km,GPLv3
+1131,hunspell-kn,GPLv2+ or LGPLv2+ or MPLv1.1
+1132,hunspell-ko,MPLv1.1 or GPLv2 or LGPLv2
+1133,hunspell-ku,GPLv3 or LGPLv3 or MPLv1.1
+1134,hunspell-ky,GPLv2+
+1135,hunspell-la,GPLv2+
+1136,hunspell-lb,EUPL 1.1
+1137,hunspell-ln,GPLv2+
+1138,hunspell-lt,BSD
+1139,hunspell-lv,LGPLv2+
+1140,hunspell-mai,GPLv2+ or LGPLv2+ or MPLv1.1
+1141,hunspell-mg,GPLv2+
+1142,hunspell-mi,GPLv3+
+1143,hunspell-mk,GPL+
+1144,hunspell-ml,GPLv3+
+1145,hunspell-mn,GPLv2
+1146,hunspell-mos,LGPLv3
+1147,hunspell-mr,LGPLv2+
+1148,hunspell-ms,GFDL and GPL+
+1149,hunspell-mt,LGPLv2+
+1150,hunspell-nb,GPL+
+1151,hunspell-nds,GPLv2+
+1152,hunspell-ne,LGPLv2
+1153,hunspell-nl,BSD or CC-BY
+1154,hunspell-nn,GPL+
+1155,hunspell-nr,LGPLv2+
+1156,hunspell-nso,LGPLv2+
+1157,hunspell-ny,GPLv3+
+1158,hunspell-oc,GPLv3+
+1159,hunspell-om,GPLv3+
+1160,hunspell-or,GPLv2+
+1161,hunspell-pa,GPLv2+
+1162,hunspell-pl,LGPLv2+ or GPL+ or MPLv1.1 or ASL 2.0 or CC-BY-SA
+1163,hunspell-pt,((LGPLv3 or MPL) and LGPLv2) and (GPLv2 or LGPLv2 or MPLv1.1)
+1164,hunspell-qu,AGPLv3
+1165,hunspell-quh,GPLv2+
+1166,hunspell-ro,GPLv2+ or LGPLv2+ or MPLv1.1
+1167,hunspell-ru,BSD
+1168,hunspell-rw,GPLv2+
+1169,hunspell-sc,AGPLv3+ and GPLv2
+1170,hunspell-se,GPLv3
+1171,hunspell-shs,GPLv2+
+1172,hunspell-si,GPLv2+
+1173,hunspell-sk,LGPLv2 or GPLv2 or MPLv1.1
+1174,hunspell-sl,GPL+ or LGPLv2+
+1175,hunspell-smj,GPLv3
+1176,hunspell-so,GPLv2+
+1177,hunspell-sq,GPLv2+
+1178,hunspell-sr,LGPLv3
+1179,hunspell-ss,LGPLv2+
+1180,hunspell-st,LGPLv2+
+1181,hunspell-sv,LGPLv3
+1182,hunspell-sw,LGPLv2+
+1183,hunspell-ta,GPLv2+
+1184,hunspell-te,GPL+
+1185,hunspell-tet,GPLv2+
+1186,hunspell-th,LGPLv2+
+1187,hunspell-ti,GPL+
+1188,hunspell-tk,GPLv2+
+1189,hunspell-tl,GPLv2+
+1190,hunspell-tn,GPLv3+
+1191,hunspell-tpi,GPLv3+
+1192,hunspell-ts,LGPLv2+
+1193,hunspell-uk,GPLv2+ or LGPLv2+ or MPLv1.1
+1194,hunspell-ur,LGPLv2+
+1195,hunspell-uz,GPLv2+
+1196,hunspell-ve,LGPLv2+
+1197,hunspell-vi,GPLv2
+1198,hunspell-wa,LGPLv2+
+1199,hunspell-xh,LGPLv2+
+1200,hunspell-yi,LGPLv2+ or GPLv2+ or MPLv1.1
+1201,hunspell-zu,GPLv3+
+1202,hwloc-gui,BSD
+1203,hwloc-plugins,BSD
+1204,hyperv-daemons,GPLv2
+1205,hyperv-daemons-license,GPLv2
+1206,hyperv-tools,GPLv2
+1207,hypervfcopyd,GPLv2
+1208,hypervkvpd,GPLv2
+1209,hypervvssd,GPLv2
+1210,hyphen,GPLv2 or LGPLv2+ or MPLv1.1
+1211,hyphen-af,LGPLv2+
+1212,hyphen-as,LGPLv3+
+1213,hyphen-be,GPL+ and LGPLv2+
+1214,hyphen-bg,GPLv2+ or LGPLv2+ or MPLv1.1
+1215,hyphen-bn,LGPLv3+
+1216,hyphen-ca,GPLv3
+1217,hyphen-cs,GPL+
+1218,hyphen-cy,LPPL
+1219,hyphen-da,LGPLv2+
+1220,hyphen-de,LGPLv2+
+1221,hyphen-el,LGPLv2+
+1222,hyphen-en,GPLv2 or LGPLv2+ or MPLv1.1
+1223,hyphen-es,LGPLv3+ or GPLv3+ or MPLv1.1
+1224,hyphen-et,LGPLv2+ and LPPL
+1225,hyphen-eu,LPPL
+1226,hyphen-fa,LPPL
+1227,hyphen-fo,GPL+
+1228,hyphen-fr,LGPLv2+
+1229,hyphen-ga,GPL+
+1230,hyphen-gl,GPLv3
+1231,hyphen-grc,LPPL
+1232,hyphen-gu,LGPLv3+
+1233,hyphen-hi,LGPLv3+
+1234,hyphen-hr,LGPLv2+ or SISSL
+1235,hyphen-hsb,LPPL
+1236,hyphen-hu,GPLv2
+1237,hyphen-ia,LPPL
+1238,hyphen-id,GPL+
+1239,hyphen-is,LGPLv2+ or SISSL
+1240,hyphen-it,LGPLv2+
+1241,hyphen-kn,LGPLv3+
+1242,hyphen-ku,GPLv2+ or LGPLv2+
+1243,hyphen-lt,LPPL
+1244,hyphen-lv,LGPLv2+
+1245,hyphen-mi,GPLv3+
+1246,hyphen-ml,LGPLv3+
+1247,hyphen-mn,LPPL
+1248,hyphen-mr,LGPLv3+
+1249,hyphen-nb,GPL+
+1250,hyphen-nl,GPLv2
+1251,hyphen-nn,GPL+
+1252,hyphen-or,LGPLv3+
+1253,hyphen-pa,LGPLv3+
+1254,hyphen-pl,LGPLv2+
+1255,hyphen-pt,GPL+
+1256,hyphen-ro,GPLv2+
+1257,hyphen-ru,LGPLv2+
+1258,hyphen-sa,LPPL
+1259,hyphen-sk,GPL+
+1260,hyphen-sl,LGPLv2+
+1261,hyphen-sr,LGPLv3
+1262,hyphen-sv,LGPLv2+ or GPLv2+
+1263,hyphen-ta,LGPLv3+
+1264,hyphen-te,LGPLv3+
+1265,hyphen-tk,Public Domain
+1266,hyphen-uk,GPLv2+
+1267,hyphen-zu,LGPLv2+
+1268,i2c-tools,GPLv2+
+1269,i2c-tools-perl,GPLv2+
+1270,ibus,LGPLv2+
+1271,ibus-gtk2,LGPLv2+
+1272,ibus-gtk3,LGPLv2+
+1273,ibus-hangul,GPLv2+
+1274,ibus-kkc,GPLv2+
+1275,ibus-libpinyin,GPLv2+
+1276,ibus-libs,LGPLv2+
+1277,ibus-libzhuyin,GPLv2+
+1278,ibus-m17n,GPLv2+
+1279,ibus-sayura,GPLv2+
+1280,ibus-setup,LGPLv2+
+1281,ibus-table,LGPLv2+
+1282,ibus-table-chinese,GPLv3+
+1283,ibus-table-chinese-array,Freely redistributable without restriction
+1284,ibus-table-chinese-cangjie,Freely redistributable without restriction
+1285,ibus-table-chinese-cantonese,GPLv2 and GPLv3+ and Freely redistributable without restriction
+1286,ibus-table-chinese-easy,GPLv2
+1287,ibus-table-chinese-erbi,GPLv2+
+1288,ibus-table-chinese-quick,Freely redistributable without restriction
+1289,ibus-table-chinese-scj,GPLv3+
+1290,ibus-table-chinese-stroke5,GPLv3+
+1291,ibus-table-chinese-wu,GPLv2+
+1292,ibus-table-chinese-wubi-haifeng,BSD
+1293,ibus-table-chinese-wubi-jidian,Freely redistributable without restriction
+1294,ibus-table-chinese-yong,GPLv3
+1295,ibus-typing-booster,GPLv3+
+1296,ibus-wayland,LGPLv2+
+1297,icedax,GPLv2
+1298,icedtea-web,LGPLv2+ and GPLv2 with exceptions
+1299,icedtea-web-javadoc,LGPLv2+ and GPLv2 with exceptions
+1300,icoutils,GPLv3+
+1301,idn2,GPLv3+
+1302,iio-sensor-proxy,GPLv3+
+1303,ilmbase,BSD
+1304,initial-setup,GPLv2+
+1305,initial-setup-gui,GPLv2+
+1306,inkscape,GPLv2+ and CC-BY
+1307,inkscape-docs,GPLv2+ and CC-BY
+1308,inkscape-view,GPLv2+ and CC-BY
+1309,insights-client,GPLv2+
+1310,intel-gpu-tools,MIT
+1311,intltool,GPLv2 with exceptions
+1312,iowatcher,GPLv2+
+1313,ipa-client,GPLv3+
+1314,ipa-client-common,GPLv3+
+1315,ipa-client-samba,GPLv3+
+1316,ipa-common,GPLv3+
+1317,ipa-healthcheck,GPLv3
+1318,ipa-healthcheck-core,GPLv3
+1319,ipa-idoverride-memberof-plugin,GPLv3+
+1320,ipa-python-compat,GPLv3+
+1321,ipa-server,GPLv3+
+1322,ipa-server-common,GPLv3+
+1323,ipa-server-dns,GPLv3+
+1324,ipa-server-trust-ad,GPLv3+
+1325,iperf3,BSD
+1326,ipmievd,BSD
+1327,ipmitool,BSD
+1328,ipvsadm,GPLv2+
+1329,ipxe-bootimgs,GPLv2 with additional permissions and BSD
+1330,ipxe-roms,GPLv2 with additional permissions and BSD
+1331,ipxe-roms-qemu,GPLv2 with additional permissions and BSD
+1332,irssi,GPLv2+
+1333,isl,MIT
+1334,iso-codes,LGPLv2+
+1335,iso-codes-devel,LGPLv2+
+1336,isomd5sum,GPLv2+
+1337,istack-commons-runtime,CDDL-1.1 and GPLv2 with exceptions
+1338,istack-commons-tools,CDDL-1.1 and GPLv2 with exceptions
+1339,itstool,GPLv3+
+1340,jackson-annotations,ASL 2.0
+1341,jackson-core,ASL 2.0
+1342,jackson-databind,ASL 2.0 and LGPLv2+
+1343,jackson-jaxrs-json-provider,ASL 2.0
+1344,jackson-jaxrs-providers,ASL 2.0
+1345,jackson-module-jaxb-annotations,ASL 2.0
+1346,jaf,BSD
+1347,jaf-javadoc,BSD
+1348,jakarta-commons-httpclient,ASL 2.0 and (ASL 2.0 or LGPLv2+)
+1349,jansi,ASL 2.0
+1350,jansi-native,ASL 2.0
+1351,jansson-devel,MIT
+1352,jasper-libs,JasPer
+1353,java-1.8.0-openjdk,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1354,java-1.8.0-openjdk-accessibility,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1355,java-1.8.0-openjdk-demo,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1356,java-1.8.0-openjdk-devel,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1357,java-1.8.0-openjdk-headless,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1358,java-1.8.0-openjdk-javadoc,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1359,java-1.8.0-openjdk-javadoc-zip,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1360,java-1.8.0-openjdk-src,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib
+1361,java-11-openjdk,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1362,java-11-openjdk-demo,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1363,java-11-openjdk-devel,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1364,java-11-openjdk-headless,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1365,java-11-openjdk-javadoc,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1366,java-11-openjdk-javadoc-zip,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1367,java-11-openjdk-jmods,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1368,java-11-openjdk-src,ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA
+1369,java-atk-wrapper,LGPLv2+
+1370,javapackages-filesystem,BSD
+1371,javapackages-tools,BSD
+1372,javassist,MPLv1.1 or LGPLv2+ or ASL 2.0
+1373,javassist-javadoc,MPLv1.1 or LGPLv2+ or ASL 2.0
+1374,jbig2dec-libs,GPLv2
+1375,jbigkit-libs,GPLv2+
+1376,jboss-annotations-1.2-api,CDDL or GPLv2 with exceptions
+1377,jboss-interceptors-1.2-api,CDDL or GPLv2 with exceptions
+1378,jboss-jaxrs-2.0-api,(CDDL or GPLv2 with exceptions) and ASL 2.0
+1379,jboss-logging,ASL 2.0
+1380,jboss-logging-tools,ASL 2.0 and LGPLv2+
+1381,jcl-over-slf4j,MIT and ASL 2.0
+1382,jdeparser,ASL 2.0
+1383,jline,BSD
+1384,jmc,UPL
+1385,jmc-core,UPL
+1386,jmc-core-javadoc,UPL
+1387,jna,(LGPLv2 or ASL 2.0) and ASL 2.0
+1388,jolokia-jvm-agent,ASL 2.0
+1389,jomolhari-fonts,OFL
+1390,jose,ASL 2.0
+1391,jq,MIT and ASL 2.0 and CC-BY and GPLv3
+1392,json-glib-devel,LGPLv2+
+1393,jsoup,MIT
+1394,jsr-305,BSD and CC-BY
+1395,jss,MPLv1.1 or GPLv2+ or LGPLv2+
+1396,jss-javadoc,MPLv1.1 or GPLv2+ or LGPLv2+
+1397,Judy,LGPLv2+
+1398,julietaula-montserrat-fonts,OFL
+1399,kacst-art-fonts,GPLv2
+1400,kacst-book-fonts,GPLv2
+1401,kacst-decorative-fonts,GPLv2
+1402,kacst-digital-fonts,GPLv2
+1403,kacst-farsi-fonts,GPLv2
+1404,kacst-fonts-common,GPLv2
+1405,kacst-letter-fonts,GPLv2
+1406,kacst-naskh-fonts,GPLv2
+1407,kacst-office-fonts,GPLv2
+1408,kacst-one-fonts,GPLv2
+1409,kacst-pen-fonts,GPLv2
+1410,kacst-poster-fonts,GPLv2
+1411,kacst-qurn-fonts,GPLv2
+1412,kacst-screen-fonts,GPLv2
+1413,kacst-title-fonts,GPLv2
+1414,kacst-titlel-fonts,GPLv2
+1415,kdump-anaconda-addon,GPLv2
+1416,keepalived,GPLv2+
+1417,kernel-rpm-macros,GPL+
+1418,kernelshark,GPLv2 and LGPLv2
+1419,keybinder3,MIT
+1420,keycloak-httpd-client-install,GPLv3
+1421,khmeros-base-fonts,LGPLv2+
+1422,khmeros-battambang-fonts,LGPLv2+
+1423,khmeros-bokor-fonts,LGPLv2+
+1424,khmeros-fonts-common,LGPLv2+
+1425,khmeros-handwritten-fonts,LGPLv2+
+1426,khmeros-metal-chrieng-fonts,LGPLv2+
+1427,khmeros-muol-fonts,LGPLv2+
+1428,khmeros-siemreap-fonts,LGPLv2+
+1429,koan,GPLv2+
+1430,ksh,EPL
+1431,kurdit-unikurd-web-fonts,GPLv3
+1432,kyotocabinet-libs,GPLv3
+1433,lame-libs,GPLv2+
+1434,langpacks-af,GPLv2+
+1435,langpacks-am,GPLv2+
+1436,langpacks-ar,GPLv2+
+1437,langpacks-as,GPLv2+
+1438,langpacks-ast,GPLv2+
+1439,langpacks-be,GPLv2+
+1440,langpacks-bg,GPLv2+
+1441,langpacks-bn,GPLv2+
+1442,langpacks-br,GPLv2+
+1443,langpacks-bs,GPLv2+
+1444,langpacks-ca,GPLv2+
+1445,langpacks-cs,GPLv2+
+1446,langpacks-cy,GPLv2+
+1447,langpacks-da,GPLv2+
+1448,langpacks-de,GPLv2+
+1449,langpacks-el,GPLv2+
+1450,langpacks-en,GPLv2+
+1451,langpacks-en_GB,GPLv2+
+1452,langpacks-es,GPLv2+
+1453,langpacks-et,GPLv2+
+1454,langpacks-eu,GPLv2+
+1455,langpacks-fa,GPLv2+
+1456,langpacks-fi,GPLv2+
+1457,langpacks-fr,GPLv2+
+1458,langpacks-ga,GPLv2+
+1459,langpacks-gl,GPLv2+
+1460,langpacks-gu,GPLv2+
+1461,langpacks-he,GPLv2+
+1462,langpacks-hi,GPLv2+
+1463,langpacks-hr,GPLv2+
+1464,langpacks-hu,GPLv2+
+1465,langpacks-ia,GPLv2+
+1466,langpacks-id,GPLv2+
+1467,langpacks-is,GPLv2+
+1468,langpacks-it,GPLv2+
+1469,langpacks-ja,GPLv2+
+1470,langpacks-kk,GPLv2+
+1471,langpacks-kn,GPLv2+
+1472,langpacks-ko,GPLv2+
+1473,langpacks-lt,GPLv2+
+1474,langpacks-lv,GPLv2+
+1475,langpacks-mai,GPLv2+
+1476,langpacks-mk,GPLv2+
+1477,langpacks-ml,GPLv2+
+1478,langpacks-mr,GPLv2+
+1479,langpacks-ms,GPLv2+
+1480,langpacks-nb,GPLv2+
+1481,langpacks-ne,GPLv2+
+1482,langpacks-nl,GPLv2+
+1483,langpacks-nn,GPLv2+
+1484,langpacks-nr,GPLv2+
+1485,langpacks-nso,GPLv2+
+1486,langpacks-or,GPLv2+
+1487,langpacks-pa,GPLv2+
+1488,langpacks-pl,GPLv2+
+1489,langpacks-pt,GPLv2+
+1490,langpacks-pt_BR,GPLv2+
+1491,langpacks-ro,GPLv2+
+1492,langpacks-ru,GPLv2+
+1493,langpacks-si,GPLv2+
+1494,langpacks-sk,GPLv2+
+1495,langpacks-sl,GPLv2+
+1496,langpacks-sq,GPLv2+
+1497,langpacks-sr,GPLv2+
+1498,langpacks-ss,GPLv2+
+1499,langpacks-sv,GPLv2+
+1500,langpacks-ta,GPLv2+
+1501,langpacks-te,GPLv2+
+1502,langpacks-th,GPLv2+
+1503,langpacks-tn,GPLv2+
+1504,langpacks-tr,GPLv2+
+1505,langpacks-ts,GPLv2+
+1506,langpacks-uk,GPLv2+
+1507,langpacks-ur,GPLv2+
+1508,langpacks-ve,GPLv2+
+1509,langpacks-vi,GPLv2+
+1510,langpacks-xh,GPLv2+
+1511,langpacks-zh_CN,GPLv2+
+1512,langpacks-zh_TW,GPLv2+
+1513,langpacks-zu,GPLv2+
+1514,langtable,GPLv3+
+1515,langtable-data,GPLv3+ and MIT
+1516,lapack,BSD
+1517,lapack64,BSD
+1518,lasso,GPLv2+
+1519,lato-fonts,OFL
+1520,lcms2,MIT
+1521,ldapjdk,MPLv1.1 or GPLv2+ or LGPLv2+
+1522,ldapjdk-javadoc,MPLv1.1 or GPLv2+ or LGPLv2+
+1523,ldns,BSD
+1524,lemon,Public Domain
+1525,lftp,GPLv3+
+1526,lftp-scripts,GPLv3+
+1527,liba52,GPLv2
+1528,libabw,MPLv2.0
+1529,libao,GPLv2+
+1530,libappindicator-gtk3,LGPLv2 and LGPLv3
+1531,libasyncns,LGPLv2+
+1532,libatasmart,LGPLv2+
+1533,libatomic_ops,GPLv2 and MIT
+1534,libavc1394,GPLv2+ and LGPLv2+
+1535,libbabeltrace,MIT and GPLv2
+1536,libbase,LGPLv2
+1537,libblockdev,LGPLv2+
+1538,libblockdev-crypto,LGPLv2+
+1539,libblockdev-dm,LGPLv2+
+1540,libblockdev-fs,LGPLv2+
+1541,libblockdev-kbd,LGPLv2+
+1542,libblockdev-loop,LGPLv2+
+1543,libblockdev-lvm,LGPLv2+
+1544,libblockdev-lvm-dbus,LGPLv2+
+1545,libblockdev-mdraid,LGPLv2+
+1546,libblockdev-mpath,LGPLv2+
+1547,libblockdev-nvdimm,LGPLv2+
+1548,libblockdev-part,LGPLv2+
+1549,libblockdev-plugins-all,LGPLv2+
+1550,libblockdev-s390,LGPLv2+
+1551,libblockdev-swap,LGPLv2+
+1552,libblockdev-utils,LGPLv2+
+1553,libblockdev-vdo,LGPLv2+
+1554,libbluray,LGPLv2+
+1555,libburn,GPLv2+
+1556,libbytesize,LGPLv2+
+1557,libcacard,LGPLv2+
+1558,libcanberra,LGPLv2+
+1559,libcanberra-devel,LGPLv2+
+1560,libcanberra-gtk2,LGPLv2+
+1561,libcanberra-gtk3,LGPLv2+
+1562,libcdio,GPLv3+
+1563,libcdio-paranoia,GPLv3+
+1564,libcdr,MPLv2.0 and Public Domain
+1565,libcmis,GPLv2+ or LGPLv2+ or MPLv1.1
+1566,libcmpiCppImpl0,EPL
+1567,libdatrie,LGPLv2+
+1568,libdazzle,GPLv3+
+1569,libdb-devel,BSD and LGPLv2 and Sleepycat
+1570,libdbusmenu,LGPLv3 or LGPLv2 and GPLv3
+1571,libdbusmenu-gtk3,LGPLv3 or LGPLv2 and GPLv3
+1572,libdc1394,LGPLv2+
+1573,libdmapsharing,LGPLv2+
+1574,libdmx,MIT
+1575,libdnet,BSD
+1576,libdrm,MIT
+1577,libdrm-devel,MIT
+1578,libdv,LGPLv2+
+1579,libdvdnav,GPLv2+
+1580,libdvdread,GPLv2+
+1581,libdwarf,LGPLv2
+1582,libeasyfc,LGPLv3+
+1583,libeasyfc-gobject,LGPLv3+
+1584,libecap,BSD
+1585,libecap-devel,BSD
+1586,libepoxy,MIT
+1587,libepoxy-devel,MIT
+1588,libepubgen,MPLv2.0
+1589,libestr,LGPLv2+
+1590,libetonyek,MPLv2.0
+1591,libev,BSD or GPLv2+
+1592,libev-devel,BSD or GPLv2+
+1593,libev-libevent-devel,BSD or GPLv2+
+1594,libev-source,BSD or GPLv2+
+1595,libevdev,MIT
+1596,libevent-devel,BSD
+1597,libexif,LGPLv2+
+1598,libexttextcat,BSD
+1599,libfastjson,MIT
+1600,libfdt,GPLv2+
+1601,libfontenc,MIT
+1602,libfonts,LGPLv2 and UCD
+1603,libformula,LGPLv2
+1604,libfprint,LGPLv2+
+1605,libfreehand,MPLv2.0
+1606,libgdata,LGPLv2+
+1607,libgdata-devel,LGPLv2+
+1608,libgdither,GPLv2+
+1609,libgee,LGPLv2+
+1610,libgexiv2,GPLv2+
+1611,libgit2,GPLv2 with exceptions
+1612,libgit2-glib,LGPLv2+
+1613,libglvnd,MIT
+1614,libglvnd-core-devel,MIT
+1615,libglvnd-devel,MIT
+1616,libglvnd-egl,MIT
+1617,libglvnd-gles,MIT
+1618,libglvnd-glx,MIT
+1619,libglvnd-opengl,MIT
+1620,libgnomekbd,LGPLv2+
+1621,libgovirt,LGPLv2+
+1622,libgphoto2,GPLv2+ and GPLv2
+1623,libgpod,LGPLv2+
+1624,libgs,AGPLv3+
+1625,libgsf,LGPLv2
+1626,libgtop2,GPLv2+
+1627,libguestfs,LGPLv2+
+1628,libguestfs-bash-completion,LGPLv2+
+1629,libguestfs-benchmarking,LGPLv2+
+1630,libguestfs-devel,LGPLv2+
+1631,libguestfs-gfs2,LGPLv2+
+1632,libguestfs-gobject,LGPLv2+
+1633,libguestfs-gobject-devel,LGPLv2+
+1634,libguestfs-inspect-icons,LGPLv2+
+1635,libguestfs-java,LGPLv2+
+1636,libguestfs-java-devel,LGPLv2+
+1637,libguestfs-javadoc,LGPLv2+
+1638,libguestfs-man-pages-ja,LGPLv2+
+1639,libguestfs-man-pages-uk,LGPLv2+
+1640,libguestfs-rescue,LGPLv2+
+1641,libguestfs-rsync,LGPLv2+
+1642,libguestfs-tools,GPLv2+
+1643,libguestfs-tools-c,GPLv2+
+1644,libguestfs-winsupport,GPLv2+
+1645,libguestfs-xfs,LGPLv2+
+1646,libgweather,GPLv2+
+1647,libgweather-devel,GPLv2+
+1648,libgxps,LGPLv2+
+1649,libhangul,LGPLv2+
+1650,libi2c,LGPLv2+
+1651,libical-devel,LGPLv2 or MPLv2.0
+1652,libICE,MIT
+1653,libICE-devel,MIT
+1654,libidn,LGPLv2+ and GPLv3+ and GFDL
+1655,libiec61883,LGPLv2+
+1656,libieee1284,GPLv2+
+1657,libieee1284-devel,GPLv2+
+1658,libijs,AGPLv3+
+1659,libimobiledevice,LGPLv2+
+1660,libindicator-gtk3,GPLv3
+1661,libinput,MIT
+1662,libinput-utils,MIT
+1663,libipt,BSD
+1664,libiptcdata,LGPLv2+
+1665,libiscsi,LGPLv2+
+1666,libiscsi-devel,LGPLv2+
+1667,libiscsi-utils,GPLv2+
+1668,libisoburn,GPLv2+
+1669,libisofs,GPLv2+ and LGPLv2+
+1670,libitm-devel,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1671,libjose,ASL 2.0
+1672,libjose-devel,ASL 2.0
+1673,libjpeg-turbo,IJG
+1674,libjpeg-turbo-devel,IJG
+1675,libjpeg-turbo-utils,IJG
+1676,libkkc,GPLv3+
+1677,libkkc-common,GPLv3+
+1678,libkkc-data,GPLv3+
+1679,liblangtag,LGPLv3+ or MPLv2.0
+1680,liblangtag-data,UCD
+1681,liblayout,LGPLv2+ and UCD
+1682,libloader,LGPLv2
+1683,liblockfile,GPLv2+ and LGPLv2+
+1684,liblognorm,LGPLv2+
+1685,liblognorm-doc,LGPLv2+
+1686,liblouis,LGPLv3+
+1687,libluksmeta,LGPLv2+
+1688,libluksmeta-devel,LGPLv2+
+1689,libmad,GPLv2+
+1690,libmalaga,GPLv2+
+1691,libmatchbox,LGPLv2+
+1692,libmaxminddb,ASL 2.0 and BSD
+1693,libmaxminddb-devel,ASL 2.0 and BSD
+1694,libmcpp,BSD
+1695,libmediaart,LGPLv2+
+1696,libmemcached,BSD
+1697,libmemcached-libs,BSD
+1698,libmng,zlib
+1699,libmng-devel,zlib
+1700,libmpc,LGPLv3+ and GFDL
+1701,libmpcdec,BSD
+1702,libmspack,LGPLv2
+1703,libmspub,MPLv2.0
+1704,libmtp,LGPLv2+
+1705,libmusicbrainz5,LGPLv2
+1706,libmwaw,LGPLv2+ or MPLv2.0
+1707,libnet,BSD
+1708,libnice,LGPLv2 and MPLv1.1
+1709,libnice-gstreamer1,LGPLv2 and MPLv1.1
+1710,libnma,GPLv2+
+1711,libnotify,LGPLv2+
+1712,libnotify-devel,LGPLv2+
+1713,liboauth,MIT
+1714,liboauth-devel,MIT
+1715,libodfgen,LGPLv2+ or MPLv2.0
+1716,libogg,BSD
+1717,libomp,NCSA
+1718,libomp-devel,NCSA
+1719,libomp-test,NCSA
+1720,libopenraw,LGPLv3+
+1721,liborcus,MPLv2.0
+1722,libosinfo,LGPLv2+
+1723,libotf,LGPLv2+
+1724,libpagemaker,MPLv2.0
+1725,libpaper,GPLv2
+1726,libpeas-gtk,LGPLv2+
+1727,libpeas-loader-python3,LGPLv2+
+1728,libpfm,MIT
+1729,libpfm-devel,MIT
+1730,libpinyin,GPLv3+
+1731,libpinyin-data,GPLv3+
+1732,libplist,LGPLv2+
+1733,libpmem,BSD
+1734,libpmem-devel,BSD
+1735,libpmemblk,BSD
+1736,libpmemblk-devel,BSD
+1737,libpmemlog,BSD
+1738,libpmemlog-devel,BSD
+1739,libpmemobj,BSD
+1740,libpmemobj++-devel,BSD
+1741,libpmemobj++-doc,BSD
+1742,libpmemobj-devel,BSD
+1743,libpmempool,BSD
+1744,libpmempool-devel,BSD
+1745,libpng12,zlib
+1746,libpng15,zlib
+1747,libpq,PostgreSQL
+1748,libpq-devel,PostgreSQL
+1749,libproxy-bin,LGPLv2+
+1750,libproxy-gnome,LGPLv2+
+1751,libproxy-networkmanager,LGPLv2+
+1752,libproxy-webkitgtk4,LGPLv2+
+1753,libpst-libs,GPLv2+
+1754,libpurple,BSD and GPLv2+ and GPLv2 and LGPLv2+ and MIT
+1755,libquadmath-devel,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1756,libquvi,AGPLv3+
+1757,libquvi-scripts,AGPLv3+
+1758,libqxp,MPLv2.0
+1759,librados2,LGPL-2.1 and CC-BY-SA-1.0 and GPL-2.0 and BSL-1.0 and BSD-3-Clause and MIT
+1760,LibRaw,BSD and (CDDL or LGPLv2)
+1761,libraw1394,LGPLv2+
+1762,librbd1,LGPL-2.1 and CC-BY-SA-1.0 and GPL-2.0 and BSL-1.0 and BSD-3-Clause and MIT
+1763,librdkafka,BSD
+1764,librelp,GPLv3+
+1765,libreoffice-base,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1766,libreoffice-calc,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1767,libreoffice-core,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1768,libreoffice-data,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1769,libreoffice-draw,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1770,libreoffice-emailmerge,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1771,libreoffice-filters,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1772,libreoffice-gdb-debug-support,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1773,libreoffice-graphicfilter,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1774,libreoffice-gtk2,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1775,libreoffice-gtk3,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1776,libreoffice-help-ar,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1777,libreoffice-help-bg,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1778,libreoffice-help-bn,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1779,libreoffice-help-ca,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1780,libreoffice-help-cs,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1781,libreoffice-help-da,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1782,libreoffice-help-de,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1783,libreoffice-help-dz,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1784,libreoffice-help-el,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1785,libreoffice-help-en,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1786,libreoffice-help-es,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1787,libreoffice-help-et,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1788,libreoffice-help-eu,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1789,libreoffice-help-fi,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1790,libreoffice-help-fr,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1791,libreoffice-help-gl,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1792,libreoffice-help-gu,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1793,libreoffice-help-he,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1794,libreoffice-help-hi,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1795,libreoffice-help-hr,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1796,libreoffice-help-hu,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1797,libreoffice-help-id,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1798,libreoffice-help-it,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1799,libreoffice-help-ja,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1800,libreoffice-help-ko,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1801,libreoffice-help-lt,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1802,libreoffice-help-lv,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1803,libreoffice-help-nb,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1804,libreoffice-help-nl,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1805,libreoffice-help-nn,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1806,libreoffice-help-pl,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1807,libreoffice-help-pt-BR,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1808,libreoffice-help-pt-PT,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1809,libreoffice-help-ro,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1810,libreoffice-help-ru,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1811,libreoffice-help-si,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1812,libreoffice-help-sk,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1813,libreoffice-help-sl,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1814,libreoffice-help-sv,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1815,libreoffice-help-ta,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1816,libreoffice-help-tr,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1817,libreoffice-help-uk,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1818,libreoffice-help-zh-Hans,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1819,libreoffice-help-zh-Hant,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1820,libreoffice-impress,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1821,libreoffice-langpack-af,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1822,libreoffice-langpack-ar,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1823,libreoffice-langpack-as,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1824,libreoffice-langpack-bg,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1825,libreoffice-langpack-bn,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1826,libreoffice-langpack-br,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1827,libreoffice-langpack-ca,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1828,libreoffice-langpack-cs,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1829,libreoffice-langpack-cy,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1830,libreoffice-langpack-da,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1831,libreoffice-langpack-de,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1832,libreoffice-langpack-dz,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1833,libreoffice-langpack-el,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1834,libreoffice-langpack-en,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1835,libreoffice-langpack-es,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1836,libreoffice-langpack-et,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1837,libreoffice-langpack-eu,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1838,libreoffice-langpack-fa,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1839,libreoffice-langpack-fi,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1840,libreoffice-langpack-fr,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1841,libreoffice-langpack-ga,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1842,libreoffice-langpack-gl,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1843,libreoffice-langpack-gu,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1844,libreoffice-langpack-he,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1845,libreoffice-langpack-hi,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1846,libreoffice-langpack-hr,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1847,libreoffice-langpack-hu,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1848,libreoffice-langpack-id,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1849,libreoffice-langpack-it,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1850,libreoffice-langpack-ja,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1851,libreoffice-langpack-kk,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1852,libreoffice-langpack-kn,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1853,libreoffice-langpack-ko,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1854,libreoffice-langpack-lt,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1855,libreoffice-langpack-lv,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1856,libreoffice-langpack-mai,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1857,libreoffice-langpack-ml,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1858,libreoffice-langpack-mr,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1859,libreoffice-langpack-nb,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1860,libreoffice-langpack-nl,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1861,libreoffice-langpack-nn,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1862,libreoffice-langpack-nr,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1863,libreoffice-langpack-nso,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1864,libreoffice-langpack-or,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1865,libreoffice-langpack-pa,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1866,libreoffice-langpack-pl,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1867,libreoffice-langpack-pt-BR,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1868,libreoffice-langpack-pt-PT,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1869,libreoffice-langpack-ro,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1870,libreoffice-langpack-ru,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1871,libreoffice-langpack-si,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1872,libreoffice-langpack-sk,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1873,libreoffice-langpack-sl,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1874,libreoffice-langpack-sr,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1875,libreoffice-langpack-ss,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1876,libreoffice-langpack-st,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1877,libreoffice-langpack-sv,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1878,libreoffice-langpack-ta,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1879,libreoffice-langpack-te,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1880,libreoffice-langpack-th,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1881,libreoffice-langpack-tn,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1882,libreoffice-langpack-tr,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1883,libreoffice-langpack-ts,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1884,libreoffice-langpack-uk,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1885,libreoffice-langpack-ve,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1886,libreoffice-langpack-xh,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1887,libreoffice-langpack-zh-Hans,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1888,libreoffice-langpack-zh-Hant,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1889,libreoffice-langpack-zu,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1890,libreoffice-math,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1891,libreoffice-ogltrans,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1892,libreoffice-opensymbol-fonts,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1893,libreoffice-pdfimport,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1894,libreoffice-pyuno,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1895,libreoffice-ure,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1896,libreoffice-ure-common,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1897,libreoffice-voikko,GPLv3+
+1898,libreoffice-wiki-publisher,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1899,libreoffice-writer,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1900,libreoffice-x11,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1901,libreoffice-xsltfilter,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+1902,libreofficekit,MPLv2.0
+1903,libreport,GPLv2+
+1904,libreport-anaconda,GPLv2+
+1905,libreport-cli,GPLv2+
+1906,libreport-gtk,GPLv2+
+1907,libreport-newt,GPLv2+
+1908,libreport-plugin-bugzilla,GPLv2+
+1909,libreport-plugin-kerneloops,GPLv2+
+1910,libreport-plugin-logger,GPLv2+
+1911,libreport-plugin-mailx,GPLv2+
+1912,libreport-plugin-reportuploader,GPLv2+
+1913,libreport-plugin-rhtsupport,GPLv2+
+1914,libreport-plugin-ureport,GPLv2+
+1915,libreport-rhel,GPLv2+
+1916,libreport-rhel-anaconda-bugzilla,GPLv2+
+1917,libreport-rhel-bugzilla,GPLv2+
+1918,libreport-web,GPLv2+
+1919,librepository,LGPLv2
+1920,libreswan,GPLv2
+1921,librevenge,(LGPLv2+ or MPLv2.0) and BSD
+1922,librevenge-gdb,(LGPLv2+ or MPLv2.0) and BSD
+1923,librpmem,BSD
+1924,librpmem-devel,BSD
+1925,librsvg2,LGPLv2+
+1926,librsvg2-devel,LGPLv2+
+1927,librsvg2-tools,LGPLv2+
+1928,libsamplerate,BSD
+1929,libsane-hpaio,GPLv2+
+1930,libseccomp-devel,LGPLv2
+1931,libselinux-python,Public Domain
+1932,libselinux-ruby,Public Domain
+1933,libserf,ASL 2.0
+1934,libserializer,LGPLv2+
+1935,libshout,LGPLv2+
+1936,libsigc++20,LGPLv2+
+1937,libSM,MIT
+1938,libSM-devel,MIT
+1939,libsmi,GPLv2+ and BSD
+1940,libsndfile,LGPLv2+ and GPLv2+ and BSD
+1941,libsoup-devel,LGPLv2
+1942,libspectre,GPLv2+
+1943,libspiro,GPLv3+
+1944,libsrtp,BSD
+1945,libssh-devel,LGPLv2+
+1946,libstaroffice,MPLv2.0 or LGPLv2+
+1947,libstdc++-devel,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1948,libstdc++-docs,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+1949,libtar,MIT
+1950,libtasn1-devel,GPLv3+ and LGPLv2+
+1951,libtasn1-tools,GPLv3+
+1952,libthai,LGPLv2+
+1953,libtheora,BSD
+1954,libtiff,libtiff
+1955,libtiff-devel,libtiff
+1956,libtimezonemap,GPLv3
+1957,libtool,GPLv2+ and LGPLv2+ and GFDL
+1958,libtool-ltdl-devel,LGPLv2+
+1959,libucil,GPLv2+
+1960,libudisks2,LGPLv2+
+1961,libunicap,GPLv2+
+1962,liburing,LGPLv2+
+1963,libusal,GPLv2
+1964,libusbmuxd,LGPLv2+
+1965,libuv,MIT and BSD and ISC
+1966,libv4l,LGPLv2+ and GPLv2
+1967,libva,MIT
+1968,libva-devel,MIT
+1969,libvdpau,MIT
+1970,libvirt,LGPLv2+
+1971,libvirt-admin,LGPLv2+
+1972,libvirt-bash-completion,LGPLv2+
+1973,libvirt-client,LGPLv2+
+1974,libvirt-daemon,LGPLv2+
+1975,libvirt-daemon-config-network,LGPLv2+
+1976,libvirt-daemon-config-nwfilter,LGPLv2+
+1977,libvirt-daemon-driver-interface,LGPLv2+
+1978,libvirt-daemon-driver-network,LGPLv2+
+1979,libvirt-daemon-driver-nodedev,LGPLv2+
+1980,libvirt-daemon-driver-nwfilter,LGPLv2+
+1981,libvirt-daemon-driver-qemu,LGPLv2+
+1982,libvirt-daemon-driver-secret,LGPLv2+
+1983,libvirt-daemon-driver-storage,LGPLv2+
+1984,libvirt-daemon-driver-storage-core,LGPLv2+
+1985,libvirt-daemon-driver-storage-disk,LGPLv2+
+1986,libvirt-daemon-driver-storage-gluster,LGPLv2+
+1987,libvirt-daemon-driver-storage-iscsi,LGPLv2+
+1988,libvirt-daemon-driver-storage-logical,LGPLv2+
+1989,libvirt-daemon-driver-storage-mpath,LGPLv2+
+1990,libvirt-daemon-driver-storage-rbd,LGPLv2+
+1991,libvirt-daemon-driver-storage-scsi,LGPLv2+
+1992,libvirt-daemon-kvm,LGPLv2+
+1993,libvirt-dbus,LGPLv2+
+1994,libvirt-devel,LGPLv2+
+1995,libvirt-docs,LGPLv2+
+1996,libvirt-gconfig,LGPLv2+
+1997,libvirt-glib,LGPLv2+
+1998,libvirt-gobject,LGPLv2+
+1999,libvirt-libs,LGPLv2+
+2000,libvirt-lock-sanlock,LGPLv2+
+2001,libvirt-nss,LGPLv2+
+2002,libvisio,MPLv2.0
+2003,libvisual,LGPLv2+
+2004,libvma,GPLv2 or BSD
+2005,libvmem,BSD
+2006,libvmem-devel,BSD
+2007,libvmmalloc,BSD
+2008,libvmmalloc-devel,BSD
+2009,libvncserver,GPLv2+
+2010,libvoikko,GPLv2+
+2011,libvorbis,BSD
+2012,libvpx,BSD
+2013,libwacom,MIT
+2014,libwacom-data,MIT
+2015,libwayland-client,MIT
+2016,libwayland-cursor,MIT
+2017,libwayland-egl,MIT
+2018,libwayland-server,MIT
+2019,libwebp,BSD
+2020,libwebp-devel,BSD
+2021,libwinpr,ASL 2.0
+2022,libwinpr-devel,ASL 2.0
+2023,libwmf,LGPLv2+ and GPLv2+ and GPL+
+2024,libwmf-lite,LGPLv2+ and GPLv2+ and GPL+
+2025,libwnck3,LGPLv2+
+2026,libwpd,LGPLv2+ or MPLv2.0
+2027,libwpg,LGPLv2+ or MPLv2.0
+2028,libwps,LGPLv2+ or MPLv2.0
+2029,libwsman1,BSD
+2030,libX11,MIT
+2031,libX11-common,MIT
+2032,libX11-devel,MIT
+2033,libX11-xcb,MIT
+2034,libXau,MIT
+2035,libXau-devel,MIT
+2036,libXaw,MIT
+2037,libXaw-devel,MIT
+2038,libxcb,MIT
+2039,libxcb-devel,MIT
+2040,libXcomposite,MIT
+2041,libXcomposite-devel,MIT
+2042,libXcursor,MIT
+2043,libXcursor-devel,MIT
+2044,libXdamage,MIT
+2045,libXdamage-devel,MIT
+2046,libXdmcp,MIT
+2047,libXext,MIT
+2048,libXext-devel,MIT
+2049,libXfixes,MIT
+2050,libXfixes-devel,MIT
+2051,libXfont2,MIT
+2052,libXft,MIT
+2053,libXft-devel,MIT
+2054,libXi,MIT
+2055,libXi-devel,MIT
+2056,libXinerama,MIT
+2057,libXinerama-devel,MIT
+2058,libxkbcommon,MIT
+2059,libxkbcommon-devel,MIT
+2060,libxkbcommon-x11,MIT
+2061,libxkbfile,MIT
+2062,libxklavier,LGPLv2+
+2063,libxml2-devel,MIT
+2064,libXmu,MIT
+2065,libXmu-devel,MIT
+2066,libXNVCtrl,GPLv2+
+2067,libXp,MIT
+2068,libXp-devel,MIT
+2069,libXpm,MIT
+2070,libXpm-devel,MIT
+2071,libXrandr,MIT
+2072,libXrandr-devel,MIT
+2073,libXrender,MIT
+2074,libXrender-devel,MIT
+2075,libXres,MIT
+2076,libXScrnSaver,MIT
+2077,libXScrnSaver-devel,MIT
+2078,libxshmfence,MIT
+2079,libxshmfence-devel,MIT
+2080,libxslt-devel,MIT
+2081,libXt,MIT
+2082,libXt-devel,MIT
+2083,libXtst,MIT
+2084,libXtst-devel,MIT
+2085,libXv,MIT
+2086,libXv-devel,MIT
+2087,libXvMC,MIT
+2088,libXxf86dga,MIT
+2089,libXxf86dga-devel,MIT
+2090,libXxf86misc,MIT
+2091,libXxf86misc-devel,MIT
+2092,libXxf86vm,MIT
+2093,libXxf86vm-devel,MIT
+2094,libyami,ASL 2.0
+2095,libyang,BSD
+2096,libzhuyin,GPLv3+
+2097,libzip,BSD
+2098,libzip-devel,BSD
+2099,libzip-tools,BSD
+2100,libzmf,MPLv2.0
+2101,linuxconsoletools,GPLv2+
+2102,linuxptp,GPLv2+
+2103,lklug-fonts,GPLv2
+2104,lld,NCSA
+2105,lld-devel,NCSA
+2106,lld-libs,NCSA
+2107,lld-test,NCSA
+2108,lldb,NCSA
+2109,lldb-devel,NCSA
+2110,lldpd,ISC
+2111,lldpd-devel,ISC
+2112,llvm,NCSA
+2113,llvm-devel,NCSA
+2114,llvm-doc,NCSA
+2115,llvm-googletest,NCSA
+2116,llvm-libs,NCSA
+2117,llvm-static,NCSA
+2118,llvm-test,NCSA
+2119,llvm-toolset,NCSA
+2120,lm_sensors-sensord,GPLv2+ and Verbatim and MIT
+2121,lmdb-libs,OpenLDAP
+2122,log4j12,ASL 2.0
+2123,log4j12-javadoc,ASL 2.0
+2124,lohit-assamese-fonts,OFL
+2125,lohit-bengali-fonts,OFL
+2126,lohit-devanagari-fonts,OFL
+2127,lohit-gujarati-fonts,OFL
+2128,lohit-gurmukhi-fonts,OFL
+2129,lohit-kannada-fonts,OFL
+2130,lohit-malayalam-fonts,OFL
+2131,lohit-marathi-fonts,OFL
+2132,lohit-nepali-fonts,OFL
+2133,lohit-odia-fonts,OFL
+2134,lohit-tamil-fonts,OFL
+2135,lohit-telugu-fonts,OFL
+2136,lorax,GPLv2+
+2137,lorax-composer,GPLv2+
+2138,lorax-lmc-novirt,GPLv2+
+2139,lorax-lmc-virt,GPLv2+
+2140,lorax-templates-generic,GPLv2+
+2141,lorax-templates-rhel,GPLv2+
+2142,lpsolve,LGPLv2+
+2143,lshw-gui,GPLv2
+2144,ltrace,GPLv2+
+2145,lttng-ust,LGPLv2 and GPLv2 and MIT
+2146,lua,MIT
+2147,lua-expat,MIT
+2148,lua-guestfs,LGPLv2+
+2149,lua-json,MIT
+2150,lua-lpeg,MIT
+2151,lua-socket,MIT
+2152,luksmeta,LGPLv2+
+2153,m17n-db,LGPLv2+
+2154,m17n-lib,LGPLv2+
+2155,madan-fonts,GPL+
+2156,mailman,GPLv2+
+2157,malaga,GPLv2+
+2158,malaga-suomi-voikko,GPLv2+
+2159,mallard-rng,MIT
+2160,man-pages-overrides,GPL+ and GPLv2+ and BSD and MIT and Copyright only and IEEE
+2161,mariadb,GPLv2 with exceptions and LGPLv2 and BSD
+2162,mariadb-backup,GPLv2 with exceptions and LGPLv2 and BSD
+2163,mariadb-common,GPLv2 with exceptions and LGPLv2 and BSD
+2164,mariadb-connector-c,LGPLv2+
+2165,mariadb-connector-c-config,LGPLv2+
+2166,mariadb-connector-c-devel,LGPLv2+
+2167,mariadb-connector-odbc,LGPLv2+
+2168,mariadb-devel,GPLv2 with exceptions and LGPLv2 and BSD
+2169,mariadb-embedded,GPLv2 with exceptions and LGPLv2 and BSD
+2170,mariadb-embedded-devel,GPLv2 with exceptions and LGPLv2 and BSD
+2171,mariadb-errmsg,GPLv2 with exceptions and LGPLv2 and BSD
+2172,mariadb-gssapi-server,GPLv2 with exceptions and LGPLv2 and BSD
+2173,mariadb-java-client,BSD and LGPLv2+
+2174,mariadb-oqgraph-engine,GPLv2 with exceptions and LGPLv2 and BSD
+2175,mariadb-server,GPLv2 with exceptions and LGPLv2 and BSD
+2176,mariadb-server-galera,GPLv2 with exceptions and LGPLv2 and BSD
+2177,mariadb-server-utils,GPLv2 with exceptions and LGPLv2 and BSD
+2178,mariadb-test,GPLv2 with exceptions and LGPLv2 and BSD
+2179,marisa,BSD or LGPLv2+
+2180,matchbox-window-manager,GPLv2+
+2181,maven,ASL 2.0 and MIT
+2182,maven-lib,ASL 2.0 and MIT
+2183,maven-openjdk11,ASL 2.0 and MIT
+2184,maven-openjdk8,ASL 2.0 and MIT
+2185,maven-resolver,ASL 2.0
+2186,maven-resolver-api,ASL 2.0
+2187,maven-resolver-connector-basic,ASL 2.0
+2188,maven-resolver-impl,ASL 2.0
+2189,maven-resolver-spi,ASL 2.0
+2190,maven-resolver-transport-wagon,ASL 2.0
+2191,maven-resolver-util,ASL 2.0
+2192,maven-shared-utils,ASL 2.0
+2193,maven-wagon,ASL 2.0
+2194,maven-wagon-file,ASL 2.0
+2195,maven-wagon-http,ASL 2.0
+2196,maven-wagon-http-shared,ASL 2.0
+2197,maven-wagon-provider-api,ASL 2.0
+2198,mc,GPLv3+
+2199,mcpp,BSD
+2200,meanwhile,LGPLv2+
+2201,mecab,BSD or LGPLv2+ or GPL+
+2202,mecab-ipadic,mecab-ipadic
+2203,mecab-ipadic-EUCJP,mecab-ipadic
+2204,media-player-info,BSD
+2205,memcached,BSD
+2206,memkind,BSD
+2207,mercurial,GPLv2+
+2208,mercurial-hgk,GPLv2+
+2209,mesa-dri-drivers,MIT
+2210,mesa-filesystem,MIT
+2211,mesa-libEGL,MIT
+2212,mesa-libEGL-devel,MIT
+2213,mesa-libgbm,MIT
+2214,mesa-libGL,MIT
+2215,mesa-libGL-devel,MIT
+2216,mesa-libglapi,MIT
+2217,mesa-libGLU,MIT
+2218,mesa-libGLU-devel,MIT
+2219,mesa-libGLw,MIT
+2220,mesa-libGLw-devel,MIT
+2221,mesa-libOSMesa,MIT
+2222,mesa-libxatracker,MIT
+2223,mesa-vdpau-drivers,MIT
+2224,mesa-vulkan-devel,MIT
+2225,mesa-vulkan-drivers,MIT
+2226,metacity,GPLv2+
+2227,mod_auth_gssapi,MIT
+2228,mod_auth_mellon,GPLv2+
+2229,mod_auth_mellon-diagnostics,GPLv2+
+2230,mod_auth_openidc,ASL 2.0
+2231,mod_authnz_pam,ASL 2.0
+2232,mod_dav_svn,ASL 2.0
+2233,mod_fcgid,ASL 2.0
+2234,mod_http2,ASL 2.0
+2235,mod_intercept_form_submit,ASL 2.0
+2236,mod_ldap,ASL 2.0
+2237,mod_lookup_identity,ASL 2.0
+2238,mod_md,ASL 2.0
+2239,mod_proxy_html,ASL 2.0
+2240,mod_security,ASL 2.0
+2241,mod_security-mlogc,ASL 2.0
+2242,mod_security_crs,ASL 2.0
+2243,mod_session,ASL 2.0
+2244,mod_ssl,ASL 2.0
+2245,motif,LGPLv2+
+2246,motif-devel,LGPLv2+
+2247,motif-static,LGPLv2+
+2248,mousetweaks,GPLv3 and GFDL
+2249,mozilla-filesystem,MPLv1.1
+2250,mozvoikko,GPLv2+
+2251,mpfr-devel,LGPLv3+ and GPLv3+ and GFDL
+2252,mpg123,LGPLv2+
+2253,mpg123-libs,LGPLv2+
+2254,mpg123-plugins-pulseaudio,LGPLv2+
+2255,mpich,MIT
+2256,mpich-devel,MIT
+2257,mpitests-mpich,CPL and BSD
+2258,mpitests-mvapich2,CPL and BSD
+2259,mpitests-mvapich2-psm2,CPL and BSD
+2260,mpitests-openmpi,CPL and BSD
+2261,mrtg,GPLv2+
+2262,mstflint,GPLv2+ or BSD
+2263,mt-st,GPL+
+2264,mtdev,MIT
+2265,mtr-gtk,GPLv2
+2266,mtx,GPLv2
+2267,multilib-rpm-config,GPLv2+
+2268,munge,GPLv3+ and LGPLv3+
+2269,munge-libs,GPLv3+ and LGPLv3+
+2270,mutt,GPLv2+ and Public Domain
+2271,mutter,GPLv2+
+2272,mvapich2,BSD and MIT
+2273,mvapich2-psm2,BSD and MIT
+2274,mysql,GPLv2 with exceptions and LGPLv2 and BSD
+2275,mysql-common,GPLv2 with exceptions and LGPLv2 and BSD
+2276,mysql-devel,GPLv2 with exceptions and LGPLv2 and BSD
+2277,mysql-errmsg,GPLv2 with exceptions and LGPLv2 and BSD
+2278,mysql-libs,GPLv2 with exceptions and LGPLv2 and BSD
+2279,mysql-server,GPLv2 with exceptions and LGPLv2 and BSD
+2280,mysql-test,GPLv2 with exceptions and LGPLv2 and BSD
+2281,mythes,BSD and MIT
+2282,mythes-bg,GPLv2+ or LGPLv2+ or MPLv1.1
+2283,mythes-ca,GPL+
+2284,mythes-cs,MIT
+2285,mythes-da,GPLv2 or LGPLv2 or MPLv1.1
+2286,mythes-de,LGPLv2+
+2287,mythes-el,GPLv2+
+2288,mythes-en,BSD and Artistic clarified
+2289,mythes-es,LGPLv2+
+2290,mythes-fr,LGPLv2+
+2291,mythes-ga,GFDL
+2292,mythes-hu,GPLv2+ and (GPLv2+ or LGPLv2+ or MPLv1.1) and GPLv2 and (GPL+ or LGPLv2+ or MPLv1.1)
+2293,mythes-it,AGPLv3+
+2294,mythes-lb,EUPL 1.1
+2295,mythes-lv,LGPLv2+
+2296,mythes-mi,Public Domain
+2297,mythes-nb,GPL+
+2298,mythes-ne,LGPLv2
+2299,mythes-nl,BSD or CC-BY
+2300,mythes-nn,GPL+
+2301,mythes-pl,LGPLv2
+2302,mythes-pt,GPLv2+
+2303,mythes-ro,GPLv2+
+2304,mythes-ru,LGPLv2+
+2305,mythes-sk,MIT
+2306,mythes-sl,LGPLv2+
+2307,mythes-sv,MIT
+2308,mythes-uk,(GPLv2+ or LGPLv2+) and (GPLv2+ or LGPLv2+ or MPLv1.1) and GPLv2+
+2309,nafees-web-naskh-fonts,Bitstream Vera
+2310,nautilus,GPLv3+
+2311,nautilus-extensions,LGPLv2+
+2312,nautilus-sendto,GPLv2+
+2313,navilu-fonts,OFL
+2314,nbdkit,BSD
+2315,nbdkit-bash-completion,BSD
+2316,nbdkit-basic-plugins,BSD
+2317,nbdkit-devel,BSD
+2318,nbdkit-example-plugins,BSD
+2319,nbdkit-plugin-gzip,BSD
+2320,nbdkit-plugin-python-common,BSD
+2321,nbdkit-plugin-python3,BSD
+2322,nbdkit-plugin-vddk,BSD
+2323,nbdkit-plugin-xz,BSD
+2324,ncompress,Public Domain
+2325,ndctl-devel,LGPLv2
+2326,neon,LGPLv2+
+2327,net-snmp,BSD
+2328,net-snmp-agent-libs,BSD
+2329,net-snmp-devel,BSD
+2330,net-snmp-utils,BSD
+2331,netcf,LGPLv2+
+2332,netcf-devel,LGPLv2+
+2333,netcf-libs,LGPLv2+
+2334,netpbm,BSD and GPLv2 and IJG and MIT and Public Domain
+2335,netpbm-progs,BSD and GPLv2 and IJG and MIT and Public Domain
+2336,netstandard-targeting-pack-2.1,MIT and ASL 2.0 and BSD
+2337,nettle-devel,LGPLv3+ or GPLv2+
+2338,network-manager-applet,GPLv2+
+2339,network-scripts-ppp,BSD and LGPLv2+ and GPLv2+ and Public Domain
+2340,NetworkManager-cloud-setup,GPLv2+ and LGPLv2+
+2341,NetworkManager-libreswan,GPLv2+
+2342,NetworkManager-libreswan-gnome,GPLv2+
+2343,newt-devel,LGPLv2
+2344,nginx,BSD
+2345,nginx-all-modules,BSD
+2346,nginx-filesystem,BSD
+2347,nginx-mod-http-image-filter,BSD
+2348,nginx-mod-http-perl,BSD
+2349,nginx-mod-http-xslt-filter,BSD
+2350,nginx-mod-mail,BSD
+2351,nginx-mod-stream,BSD
+2352,nm-connection-editor,GPLv2+
+2353,nmap,Nmap
+2354,nmap-ncat,Nmap
+2355,nmstate,LGPLv2+
+2356,nodejs,MIT and ASL 2.0 and ISC and BSD
+2357,nodejs-devel,MIT and ASL 2.0 and ISC and BSD
+2358,nodejs-docs,MIT and ASL 2.0 and ISC and BSD
+2359,nodejs-nodemon,MIT
+2360,nodejs-packaging,MIT
+2361,npm,MIT and ASL 2.0 and ISC and BSD
+2362,nspr,MPLv2.0
+2363,nspr-devel,MPLv2.0
+2364,nss,MPLv2.0
+2365,nss-altfiles,LGPLv2+
+2366,nss-devel,MPLv2.0
+2367,nss-pam-ldapd,LGPLv2+
+2368,nss-softokn,MPLv2.0
+2369,nss-softokn-devel,MPLv2.0
+2370,nss-softokn-freebl,MPLv2.0
+2371,nss-softokn-freebl-devel,MPLv2.0
+2372,nss-sysinit,MPLv2.0
+2373,nss-tools,MPLv2.0
+2374,nss-util,MPLv2.0
+2375,nss-util-devel,MPLv2.0
+2376,nss_wrapper,BSD
+2377,ntpstat,MIT
+2378,ocaml-srpm-macros,GPLv2+
+2379,oci-systemd-hook,GPLv3+
+2380,oci-umount,GPLv3+
+2381,ocl-icd,BSD
+2382,oddjob,BSD
+2383,oddjob-mkhomedir,BSD
+2384,omping,ISC
+2385,ongres-scram,BSD
+2386,ongres-scram-client,BSD
+2387,oniguruma,BSD
+2388,open-sans-fonts,ASL 2.0
+2389,open-vm-tools,GPLv2
+2390,open-vm-tools-desktop,GPLv2
+2391,openal-soft,LGPLv2+
+2392,openblas,BSD
+2393,openblas-srpm-macros,MIT
+2394,openblas-threads,BSD
+2395,openchange,GPLv3+ and Public Domain
+2396,opencl-filesystem,Public Domain
+2397,opencv-contrib,BSD
+2398,opencv-core,BSD
+2399,opendnssec,BSD
+2400,OpenEXR-libs,BSD
+2401,openjpeg2,BSD and MIT
+2402,openjpeg2-devel-docs,BSD and MIT
+2403,openjpeg2-tools,BSD and MIT
+2404,openmpi,BSD and MIT and Romio
+2405,openmpi-devel,BSD and MIT and Romio
+2406,openscap,LGPLv2+
+2407,openscap-devel,LGPLv2+
+2408,openscap-engine-sce,LGPLv2+
+2409,openscap-python3,LGPLv2+
+2410,openscap-scanner,LGPLv2+
+2411,openscap-utils,LGPLv2+
+2412,openslp,BSD
+2413,openssh-askpass,BSD
+2414,openwsman-client,BSD
+2415,openwsman-python3,BSD
+2416,openwsman-server,BSD
+2417,opus,BSD
+2418,orc,BSD
+2419,orc-compiler,BSD
+2420,orc-devel,BSD
+2421,orca,LGPLv2+
+2422,osad,GPLv2
+2423,oscap-anaconda-addon,GPLv2+
+2424,osinfo-db,LGPLv2+
+2425,osinfo-db-tools,GPLv2+
+2426,ostree,LGPLv2+
+2427,ostree-devel,LGPLv2+
+2428,ostree-grub2,LGPLv2+
+2429,ostree-libs,LGPLv2+
+2430,overpass-fonts,OFL or LGPLv2+
+2431,overpass-mono-fonts,OFL or LGPLv2+
+2432,owasp-java-encoder,BSD
+2433,owasp-java-encoder-javadoc,BSD
+2434,pacemaker-cluster-libs,GPLv2+ and LGPLv2+
+2435,pacemaker-libs,GPLv2+ and LGPLv2+
+2436,pacemaker-schemas,GPLv2+
+2437,PackageKit,GPLv2+ and LGPLv2+
+2438,PackageKit-command-not-found,GPLv2+ and LGPLv2+
+2439,PackageKit-cron,GPLv2+ and LGPLv2+
+2440,PackageKit-glib,GPLv2+ and LGPLv2+
+2441,PackageKit-gstreamer-plugin,GPLv2+ and LGPLv2+
+2442,PackageKit-gtk3-module,GPLv2+ and LGPLv2+
+2443,pakchois,LGPLv2+
+2444,paktype-naqsh-fonts,GPLv2 with exceptions
+2445,paktype-naskh-basic-fonts,GPLv2 with exceptions
+2446,paktype-tehreer-fonts,GPLv2 with exceptions
+2447,pango,LGPLv2+
+2448,pango-devel,LGPLv2+
+2449,pangomm,LGPLv2+
+2450,papi,BSD
+2451,papi-devel,BSD
+2452,papi-libs,BSD
+2453,paps,LGPLv2+
+2454,paps-libs,LGPLv2+
+2455,paratype-pt-sans-caption-fonts,OFL
+2456,paratype-pt-sans-fonts,OFL
+2457,parfait,ASL 2.0
+2458,parfait-examples,ASL 2.0
+2459,parfait-javadoc,ASL 2.0
+2460,patchutils,GPLv2+
+2461,pavucontrol,GPLv2+
+2462,pcaudiolib,GPLv3+
+2463,pcp,GPLv2+ and LGPLv2+ and CC-BY
+2464,pcp-conf,LGPLv2+
+2465,pcp-devel,GPLv2+ and LGPLv2+
+2466,pcp-doc,GPLv2+ and CC-BY
+2467,pcp-export-pcp2elasticsearch,GPLv2+
+2468,pcp-export-pcp2graphite,GPLv2+
+2469,pcp-export-pcp2influxdb,GPLv2+
+2470,pcp-export-pcp2json,GPLv2+
+2471,pcp-export-pcp2spark,GPLv2+
+2472,pcp-export-pcp2xml,GPLv2+
+2473,pcp-export-pcp2zabbix,GPLv2+
+2474,pcp-export-zabbix-agent,GPLv2+
+2475,pcp-gui,GPLv2+ and LGPLv2+ and LGPLv2+ with exceptions
+2476,pcp-import-collectl2pcp,LGPLv2+
+2477,pcp-import-ganglia2pcp,LGPLv2+
+2478,pcp-import-iostat2pcp,LGPLv2+
+2479,pcp-import-mrtg2pcp,LGPLv2+
+2480,pcp-import-sar2pcp,LGPLv2+
+2481,pcp-libs,LGPLv2+
+2482,pcp-libs-devel,GPLv2+ and LGPLv2+
+2483,pcp-manager,GPLv2+
+2484,pcp-parfait-agent,ASL 2.0
+2485,pcp-pmda-activemq,GPLv2+
+2486,pcp-pmda-apache,GPLv2+
+2487,pcp-pmda-bash,GPLv2+
+2488,pcp-pmda-bcc,ASL 2.0 and GPLv2+
+2489,pcp-pmda-bind2,GPLv2+
+2490,pcp-pmda-bonding,GPLv2+
+2491,pcp-pmda-bpftrace,ASL 2.0 and GPLv2+
+2492,pcp-pmda-cifs,GPLv2+
+2493,pcp-pmda-cisco,GPLv2+
+2494,pcp-pmda-dbping,GPLv2+
+2495,pcp-pmda-dm,GPLv2+
+2496,pcp-pmda-docker,GPLv2+
+2497,pcp-pmda-ds389,GPLv2+
+2498,pcp-pmda-ds389log,GPLv2+
+2499,pcp-pmda-elasticsearch,GPLv2+
+2500,pcp-pmda-gfs2,GPLv2+
+2501,pcp-pmda-gluster,GPLv2+
+2502,pcp-pmda-gpfs,GPLv2+
+2503,pcp-pmda-gpsd,GPLv2+
+2504,pcp-pmda-haproxy,GPLv2+
+2505,pcp-pmda-infiniband,GPLv2+
+2506,pcp-pmda-json,GPLv2+
+2507,pcp-pmda-libvirt,GPLv2+
+2508,pcp-pmda-lio,GPLv2+
+2509,pcp-pmda-lmsensors,GPLv2+
+2510,pcp-pmda-logger,GPLv2+
+2511,pcp-pmda-lustre,GPLv2+
+2512,pcp-pmda-lustrecomm,GPLv2+
+2513,pcp-pmda-mailq,GPLv2+
+2514,pcp-pmda-memcache,GPLv2+
+2515,pcp-pmda-mic,GPLv2+
+2516,pcp-pmda-mounts,GPLv2+
+2517,pcp-pmda-mssql,GPLv2+
+2518,pcp-pmda-mysql,GPLv2+
+2519,pcp-pmda-named,GPLv2+
+2520,pcp-pmda-netcheck,GPLv2+
+2521,pcp-pmda-netfilter,GPLv2+
+2522,pcp-pmda-news,GPLv2+
+2523,pcp-pmda-nfsclient,GPLv2+
+2524,pcp-pmda-nginx,GPLv2+
+2525,pcp-pmda-nvidia-gpu,GPLv2+
+2526,pcp-pmda-openmetrics,GPLv2+
+2527,pcp-pmda-oracle,GPLv2+
+2528,pcp-pmda-pdns,GPLv2+
+2529,pcp-pmda-perfevent,GPLv2+
+2530,pcp-pmda-podman,GPLv2+
+2531,pcp-pmda-postfix,GPLv2+
+2532,pcp-pmda-postgresql,GPLv2+
+2533,pcp-pmda-redis,GPLv2+
+2534,pcp-pmda-roomtemp,GPLv2+
+2535,pcp-pmda-rpm,GPLv2+
+2536,pcp-pmda-rsyslog,GPLv2+
+2537,pcp-pmda-samba,GPLv2+
+2538,pcp-pmda-sendmail,GPLv2+
+2539,pcp-pmda-shping,GPLv2+
+2540,pcp-pmda-slurm,GPLv2+
+2541,pcp-pmda-smart,GPLv2+
+2542,pcp-pmda-snmp,GPLv2+
+2543,pcp-pmda-summary,GPLv2+
+2544,pcp-pmda-systemd,GPLv2+
+2545,pcp-pmda-trace,GPLv2+
+2546,pcp-pmda-unbound,GPLv2+
+2547,pcp-pmda-vmware,GPLv2+
+2548,pcp-pmda-weblog,GPLv2+
+2549,pcp-pmda-zimbra,GPLv2+
+2550,pcp-pmda-zswap,GPLv2+
+2551,pcp-selinux,GPLv2+ and CC-BY
+2552,pcp-system-tools,GPLv2+
+2553,pcp-testsuite,GPLv2+
+2554,pcp-zeroconf,GPLv2+
+2555,pentaho-libxml,LGPLv2
+2556,pentaho-reporting-flow-engine,LGPLv2+
+2557,peripety,MIT
+2558,perl,GPL+ or Artistic
+2559,perl-Algorithm-Diff,GPL+ or Artistic
+2560,perl-App-cpanminus,GPL+ or Artistic
+2561,perl-Archive-Tar,GPL+ or Artistic
+2562,perl-Archive-Zip,(GPL+ or Artistic) and BSD
+2563,perl-Attribute-Handlers,GPL+ or Artistic
+2564,perl-Authen-SASL,GPL+ or Artistic
+2565,perl-autodie,GPL+ or Artistic
+2566,perl-B-Debug,GPL+ or Artistic
+2567,perl-B-Lint,GPL+ or Artistic
+2568,perl-bignum,GPL+ or Artistic
+2569,perl-Bit-Vector,(GPLv2+ or Artistic) and LGPLv2+
+2570,perl-Carp,GPL+ or Artistic
+2571,perl-Carp-Clan,GPL+ or Artistic
+2572,perl-CGI,(GPL+ or Artistic) and Artistic 2.0
+2573,perl-Class-Inspector,GPL+ or Artistic
+2574,perl-Class-ISA,GPL+ or Artistic
+2575,perl-Compress-Bzip2,GPL+ or Artistic
+2576,perl-Compress-Raw-Bzip2,GPL+ or Artistic
+2577,perl-Compress-Raw-Zlib,(GPL+ or Artistic) and zlib
+2578,perl-Config-Perl-V,GPL+ or Artistic
+2579,perl-constant,GPL+ or Artistic
+2580,perl-Convert-ASN1,GPL+ or Artistic
+2581,perl-core,GPL+ or Artistic
+2582,perl-CPAN,GPL+ or Artistic
+2583,perl-CPAN-DistnameInfo,GPL+ or Artistic
+2584,perl-CPAN-Meta,GPL+ or Artistic
+2585,perl-CPAN-Meta-Check,GPL+ or Artistic
+2586,perl-CPAN-Meta-Requirements,GPL+ or Artistic
+2587,perl-CPAN-Meta-YAML,GPL+ or Artistic
+2588,perl-Crypt-OpenSSL-Bignum,GPL+ or Artistic
+2589,perl-Crypt-OpenSSL-Random,GPL+ or Artistic
+2590,perl-Crypt-OpenSSL-RSA,GPL+ or Artistic
+2591,perl-Data-Dump,GPL+ or Artistic
+2592,perl-Data-Dumper,GPL+ or Artistic
+2593,perl-Data-OptList,GPL+ or Artistic
+2594,perl-Data-Section,GPL+ or Artistic
+2595,perl-Date-Calc,GPL+ or Artistic
+2596,perl-DB_File,GPL+ or Artistic
+2597,perl-DBD-MySQL,GPL+ or Artistic
+2598,perl-DBD-Pg,GPLv2+ or Artistic
+2599,perl-DBD-SQLite,(GPL+ or Artistic) and Public Domain
+2600,perl-DBI,GPL+ or Artistic
+2601,perl-devel,(GPL+ or Artistic) and UCD
+2602,perl-Devel-Peek,GPL+ or Artistic
+2603,perl-Devel-PPPort,GPL+ or Artistic
+2604,perl-Devel-SelfStubber,GPL+ or Artistic
+2605,perl-Devel-Size,GPL+ or Artistic
+2606,perl-Digest,GPL+ or Artistic
+2607,perl-Digest-HMAC,GPL+ or Artistic
+2608,perl-Digest-MD5,(GPL+ or Artistic) and BSD
+2609,perl-Digest-SHA,GPL+ or Artistic
+2610,perl-Encode,(GPL+ or Artistic) and Artistic 2.0 and UCD
+2611,perl-Encode-Detect,MPLv1.1 or GPLv2+ or LGPLv2+
+2612,perl-Encode-devel,(GPL+ or Artistic) and UCD
+2613,perl-Encode-Locale,GPL+ or Artistic
+2614,perl-encoding,GPL+ or Artistic
+2615,perl-Env,GPL+ or Artistic
+2616,perl-Errno,GPL+ or Artistic
+2617,perl-Error,(GPL+ or Artistic) and MIT
+2618,perl-experimental,GPL+ or Artistic
+2619,perl-Exporter,GPL+ or Artistic
+2620,perl-ExtUtils-CBuilder,GPL+ or Artistic
+2621,perl-ExtUtils-Command,GPL+ or Artistic
+2622,perl-ExtUtils-Embed,GPL+ or Artistic
+2623,perl-ExtUtils-Install,GPL+ or Artistic
+2624,perl-ExtUtils-MakeMaker,GPL+ or Artistic
+2625,perl-ExtUtils-Manifest,GPL+ or Artistic
+2626,perl-ExtUtils-Miniperl,GPL+ or Artistic
+2627,perl-ExtUtils-MM-Utils,GPL+ or Artistic
+2628,perl-ExtUtils-ParseXS,GPL+ or Artistic
+2629,perl-FCGI,OML
+2630,perl-Fedora-VSP,GPLv3+
+2631,perl-File-CheckTree,GPL+ or Artistic
+2632,perl-File-Fetch,GPL+ or Artistic
+2633,perl-File-HomeDir,GPL+ or Artistic
+2634,perl-File-Listing,GPL+ or Artistic
+2635,perl-File-Path,GPL+ or Artistic
+2636,perl-File-pushd,ASL 2.0
+2637,perl-File-ShareDir,GPL+ or Artistic
+2638,perl-File-Slurp,GPL+ or Artistic
+2639,perl-File-Temp,GPL+ or Artistic
+2640,perl-File-Which,GPL+ or Artistic
+2641,perl-Filter,GPL+ or Artistic
+2642,perl-Filter-Simple,GPL+ or Artistic
+2643,perl-generators,GPL+
+2644,perl-Getopt-Long,GPLv2+ or Artistic
+2645,perl-Git,GPLv2
+2646,perl-Git-SVN,GPLv2
+2647,perl-GSSAPI,GPL+ or Artistic
+2648,perl-hivex,LGPLv2
+2649,perl-homedir,GPL+ or Artistic
+2650,perl-HTML-Parser,GPL+ or Artistic
+2651,perl-HTML-Tagset,GPL+ or Artistic
+2652,perl-HTTP-Cookies,GPL+ or Artistic
+2653,perl-HTTP-Date,GPL+ or Artistic
+2654,perl-HTTP-Message,GPL+ or Artistic
+2655,perl-HTTP-Negotiate,GPL+ or Artistic
+2656,perl-HTTP-Tiny,GPL+ or Artistic
+2657,perl-inc-latest,ASL 2.0
+2658,perl-interpreter,GPL+ or Artistic
+2659,perl-IO,GPL+ or Artistic
+2660,perl-IO-Compress,GPL+ or Artistic
+2661,perl-IO-HTML,GPL+ or Artistic
+2662,perl-IO-Multiplex,GPL+ or Artistic
+2663,perl-IO-Socket-INET6,GPL+ or Artistic
+2664,perl-IO-Socket-IP,GPL+ or Artistic
+2665,perl-IO-Socket-SSL,(GPL+ or Artistic) and MPLv2.0
+2666,perl-IO-Zlib,GPL+ or Artistic
+2667,perl-IPC-Cmd,GPL+ or Artistic
+2668,perl-IPC-System-Simple,GPL+ or Artistic
+2669,perl-IPC-SysV,GPL+ or Artistic
+2670,perl-JSON,GPL+ or Artistic
+2671,perl-JSON-PP,GPL+ or Artistic
+2672,perl-LDAP,GPL+ or Artistic
+2673,perl-libintl-perl,GPLv3+ and LGPLv2+
+2674,perl-libnet,GPL+ or Artistic
+2675,perl-libnetcfg,GPL+ or Artistic
+2676,perl-libs,(GPL+ or Artistic) and HSLR and MIT and UCD
+2677,perl-libwww-perl,GPL+ or Artistic
+2678,perl-libxml-perl,(GPL+ or Artistic) and Public Domain
+2679,perl-local-lib,GPL+ or Artistic
+2680,perl-Locale-Codes,GPL+ or Artistic
+2681,perl-Locale-Maketext,GPL+ or Artistic
+2682,perl-Locale-Maketext-Simple,MIT
+2683,perl-LWP-MediaTypes,(GPL+ or Artistic) and Public Domain
+2684,perl-LWP-Protocol-https,GPL+ or Artistic
+2685,perl-macros,GPL+ or Artistic
+2686,perl-Mail-DKIM,GPL+ or Artistic
+2687,perl-Mail-SPF,BSD
+2688,perl-MailTools,GPL+ or Artistic
+2689,perl-Math-BigInt,GPL+ or Artistic
+2690,perl-Math-BigInt-FastCalc,GPL+ or Artistic
+2691,perl-Math-BigRat,GPL+ or Artistic
+2692,perl-Math-Complex,GPL+ or Artistic
+2693,perl-Memoize,GPL+ or Artistic
+2694,perl-MIME-Base64,(GPL+ or Artistic) and MIT
+2695,perl-Module-Build,GPL+ or Artistic
+2696,perl-Module-CoreList,GPL+ or Artistic
+2697,perl-Module-CoreList-tools,GPL+ or Artistic
+2698,perl-Module-CPANfile,GPL+ or Artistic
+2699,perl-Module-Load,GPL+ or Artistic
+2700,perl-Module-Load-Conditional,GPL+ or Artistic
+2701,perl-Module-Loaded,GPL+ or Artistic
+2702,perl-Module-Metadata,GPL+ or Artistic
+2703,perl-Module-Pluggable,GPL+ or Artistic
+2704,perl-Module-Runtime,GPL+ or Artistic
+2705,perl-Mozilla-CA,MPLv2.0
+2706,perl-Mozilla-LDAP,GPLv2+ and LGPLv2+ and MPLv1.1
+2707,perl-MRO-Compat,GPL+ or Artistic
+2708,perl-Net-DNS,(GPL+ or Artistic) and MIT
+2709,perl-Net-HTTP,GPL+ or Artistic
+2710,perl-Net-Ping,GPL+ or Artistic
+2711,perl-Net-Server,GPL+ or Artistic
+2712,perl-Net-SMTP-SSL,GPL+ or Artistic
+2713,perl-Net-SSLeay,Artistic 2.0
+2714,perl-NetAddr-IP,GPLv2+ and (GPLv2+ or Artistic clarified)
+2715,perl-NTLM,GPL+ or Artistic
+2716,perl-open,GPL+ or Artistic
+2717,perl-Package-Generator,GPL+ or Artistic
+2718,perl-Params-Check,GPL+ or Artistic
+2719,perl-Params-Util,GPL+ or Artistic
+2720,perl-parent,GPL+ or Artistic
+2721,perl-Parse-PMFile,GPL+ or Artistic
+2722,perl-PathTools,(GPL+ or Artistic) and BSD
+2723,perl-PCP-LogImport,GPLv2+
+2724,perl-PCP-LogSummary,GPLv2+
+2725,perl-PCP-MMV,GPLv2+
+2726,perl-PCP-PMDA,GPLv2+
+2727,perl-Perl-OSType,GPL+ or Artistic
+2728,perl-perlfaq,(GPL+ or Artistic) and Public Domain
+2729,perl-PerlIO-via-QuotedPrint,GPL+ or Artistic
+2730,perl-Pod-Checker,GPL+ or Artistic
+2731,perl-Pod-Escapes,GPL+ or Artistic
+2732,perl-Pod-Html,GPL+ or Artistic
+2733,perl-Pod-LaTeX,GPL+ or Artistic
+2734,perl-Pod-Parser,GPL+ or Artistic
+2735,perl-Pod-Perldoc,GPL+ or Artistic
+2736,perl-Pod-Plainer,GPL+ or Artistic
+2737,perl-Pod-Simple,GPL+ or Artistic
+2738,perl-Pod-Usage,GPL+ or Artistic
+2739,perl-podlators,(GPL+ or Artistic) and MIT
+2740,perl-Scalar-List-Utils,GPL+ or Artistic
+2741,perl-SelfLoader,GPL+ or Artistic
+2742,perl-SNMP_Session,Artistic 2.0
+2743,perl-Socket,GPL+ or Artistic
+2744,perl-Socket6,BSD
+2745,perl-Software-License,GPL+ or Artistic
+2746,perl-srpm-macros,GPLv3+
+2747,perl-Storable,GPL+ or Artistic
+2748,perl-String-CRC32,Public Domain
+2749,perl-String-ShellQuote,(GPL+ or Artistic) and GPLv2+
+2750,perl-Sub-Exporter,GPL+ or Artistic
+2751,perl-Sub-Install,GPL+ or Artistic
+2752,perl-Sys-Guestfs,LGPLv2+
+2753,perl-Sys-Syslog,GPL+ or Artistic
+2754,perl-Sys-Virt,GPLv2+ or Artistic
+2755,perl-Term-ANSIColor,GPL+ or Artistic
+2756,perl-Term-Cap,GPL+ or Artistic
+2757,perl-TermReadKey,(Copyright only) and (Artistic or GPL+)
+2758,perl-Test,GPL+ or Artistic
+2759,perl-Test-Harness,GPL+ or Artistic
+2760,perl-Test-Simple,(GPL+ or Artistic) and CC0 and Public Domain
+2761,perl-tests,GPL+ or Artistic
+2762,perl-Text-Balanced,GPL+ or Artistic
+2763,perl-Text-Diff,(GPL+ or Artistic) and (GPLv2+ or Artistic) and MIT
+2764,perl-Text-Glob,GPL+ or Artistic
+2765,perl-Text-ParseWords,GPL+ or Artistic
+2766,perl-Text-Soundex,(Copyright only) and (GPL+ or Artistic)
+2767,perl-Text-Tabs+Wrap,TTWL
+2768,perl-Text-Template,(GPL+ or Artistic) and (GPLv2+ or Artistic)
+2769,perl-Text-Unidecode,GPL+ or Artistic
+2770,perl-Thread-Queue,GPL+ or Artistic
+2771,perl-threads,GPL+ or Artistic
+2772,perl-threads-shared,GPL+ or Artistic
+2773,perl-Time-HiRes,GPL+ or Artistic
+2774,perl-Time-Local,GPL+ or Artistic
+2775,perl-Time-Piece,(GPL+ or Artistic) and BSD
+2776,perl-TimeDate,GPL+ or Artistic
+2777,perl-Try-Tiny,MIT
+2778,perl-Unicode-Collate,(GPL+ or Artistic) and Unicode
+2779,perl-Unicode-Normalize,GPL+ or Artistic
+2780,perl-Unix-Syslog,Artistic 2.0
+2781,perl-URI,GPL+ or Artistic
+2782,perl-utils,GPL+ or Artistic
+2783,perl-version,GPL+ or Artistic
+2784,perl-WWW-RobotRules,GPL+ or Artistic
+2785,perl-XML-Catalog,GPL+ or Artistic
+2786,perl-XML-LibXML,(GPL+ or Artistic) and MIT
+2787,perl-XML-NamespaceSupport,GPL+ or Artistic
+2788,perl-XML-Parser,GPL+ or Artistic
+2789,perl-XML-SAX,GPL+ or Artistic
+2790,perl-XML-SAX-Base,GPL+ or Artistic
+2791,perl-XML-Simple,GPL+ or Artistic
+2792,perl-XML-TokeParser,GPL+ or Artistic
+2793,perl-XML-XPath,Artistic 2.0 and (GPL+ or Artistic)
+2794,perl-YAML,GPL+ or Artistic
+2795,pesign,GPLv2
+2796,pgaudit,PostgreSQL
+2797,php,PHP and Zend and BSD and MIT and ASL 1.0 and NCSA
+2798,php-bcmath,PHP and LGPLv2+
+2799,php-cli,PHP and Zend and BSD and MIT and ASL 1.0
+2800,php-common,PHP and BSD
+2801,php-dba,PHP
+2802,php-dbg,PHP and Zend and BSD and MIT and ASL 1.0 and NCSA
+2803,php-devel,PHP and Zend and BSD and MIT and ASL 1.0 and NCSA
+2804,php-embedded,PHP and Zend and BSD and MIT and ASL 1.0
+2805,php-enchant,PHP
+2806,php-fpm,PHP and Zend and BSD and MIT and ASL 1.0
+2807,php-gd,PHP
+2808,php-gmp,PHP
+2809,php-intl,PHP
+2810,php-json,PHP
+2811,php-ldap,PHP
+2812,php-mbstring,PHP and LGPLv2 and OpenLDAP
+2813,php-mysqlnd,PHP
+2814,php-odbc,PHP
+2815,php-opcache,PHP
+2816,php-pdo,PHP
+2817,php-pear,BSD and LGPLv3+
+2818,php-pecl-apcu,PHP
+2819,php-pecl-apcu-devel,PHP
+2820,php-pecl-rrd,BSD
+2821,php-pecl-xdebug,PHP
+2822,php-pecl-zip,PHP
+2823,php-pgsql,PHP
+2824,php-process,PHP
+2825,php-recode,PHP
+2826,php-snmp,PHP
+2827,php-soap,PHP
+2828,php-xml,PHP
+2829,php-xmlrpc,PHP and BSD
+2830,pidgin,BSD and GPLv2+ and GPLv2 and LGPLv2+ and MIT
+2831,pidgin-sipe,GPLv2+
+2832,pinentry,GPLv2+
+2833,pinentry-emacs,GPLv2+
+2834,pinentry-gnome3,GPLv2+
+2835,pinentry-gtk,GPLv2+
+2836,pinfo,GPLv2
+2837,pipewire,LGPLv2+
+2838,pipewire-devel,LGPLv2+
+2839,pipewire-doc,LGPLv2+
+2840,pipewire-libs,LGPLv2+
+2841,pipewire-utils,LGPLv2+
+2842,pixman,MIT
+2843,pixman-devel,MIT
+2844,pki-base,GPLv2 and LGPLv2
+2845,pki-base-java,GPLv2 and LGPLv2
+2846,pki-ca,GPLv2 and LGPLv2
+2847,pki-kra,GPLv2 and LGPLv2
+2848,pki-server,GPLv2 and LGPLv2
+2849,pki-servlet-4.0-api,ASL 2.0
+2850,pki-servlet-engine,ASL 2.0
+2851,pki-symkey,GPLv2 and LGPLv2
+2852,pki-tools,GPLv2 and LGPLv2
+2853,platform-python,Python
+2854,platform-python-coverage,ASL 2.0 and MIT and (MIT or GPL)
+2855,platform-python-debug,Python
+2856,platform-python-devel,Python
+2857,plexus-cipher,ASL 2.0
+2858,plexus-classworlds,ASL 2.0 and Plexus
+2859,plexus-containers-component-annotations,ASL 2.0 and MIT and xpp
+2860,plexus-interpolation,ASL 2.0 and ASL 1.1 and MIT
+2861,plexus-sec-dispatcher,ASL 2.0
+2862,plexus-utils,ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
+2863,plymouth,GPLv2+
+2864,plymouth-core-libs,GPLv2+
+2865,plymouth-graphics-libs,GPLv2+
+2866,plymouth-plugin-fade-throbber,GPLv2+
+2867,plymouth-plugin-label,GPLv2+
+2868,plymouth-plugin-script,GPLv2+
+2869,plymouth-plugin-space-flares,GPLv2+
+2870,plymouth-plugin-throbgress,GPLv2+
+2871,plymouth-plugin-two-step,GPLv2+
+2872,plymouth-scripts,GPLv2+
+2873,plymouth-system-theme,GPLv2+
+2874,plymouth-theme-charge,GPLv2+
+2875,plymouth-theme-fade-in,GPLv2+
+2876,plymouth-theme-script,GPLv2+
+2877,plymouth-theme-solar,GPLv2+
+2878,plymouth-theme-spinfinity,GPLv2+
+2879,plymouth-theme-spinner,GPLv2+
+2880,pmdk-convert,BSD
+2881,pmempool,BSD
+2882,pmix,BSD
+2883,pmreorder,BSD
+2884,pnm2ppa,GPLv2+
+2885,podman,ASL 2.0
+2886,podman-docker,ASL 2.0
+2887,podman-remote,ASL 2.0
+2888,podman-tests,ASL 2.0
+2889,policycoreutils-gui,GPLv2
+2890,policycoreutils-sandbox,GPLv2
+2891,poppler,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+2892,poppler-data,BSD and GPLv2
+2893,poppler-glib,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+2894,poppler-utils,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+2895,postfix-cdb,(IBM and GPLv2+) or (EPL-2.0 and GPLv2+)
+2896,postfix-ldap,(IBM and GPLv2+) or (EPL-2.0 and GPLv2+)
+2897,postfix-mysql,(IBM and GPLv2+) or (EPL-2.0 and GPLv2+)
+2898,postfix-pcre,(IBM and GPLv2+) or (EPL-2.0 and GPLv2+)
+2899,postfix-perl-scripts,(IBM and GPLv2+) or (EPL-2.0 and GPLv2+)
+2900,postfix-pgsql,(IBM and GPLv2+) or (EPL-2.0 and GPLv2+)
+2901,postfix-sqlite,(IBM and GPLv2+) or (EPL-2.0 and GPLv2+)
+2902,postgres-decoderbufs,MIT
+2903,postgresql,PostgreSQL
+2904,postgresql-contrib,PostgreSQL
+2905,postgresql-docs,PostgreSQL
+2906,postgresql-jdbc,BSD
+2907,postgresql-jdbc-javadoc,BSD
+2908,postgresql-odbc,LGPLv2+
+2909,postgresql-odbc-tests,LGPLv2+
+2910,postgresql-plperl,PostgreSQL
+2911,postgresql-plpython3,PostgreSQL
+2912,postgresql-pltcl,PostgreSQL
+2913,postgresql-server,PostgreSQL
+2914,postgresql-server-devel,PostgreSQL
+2915,postgresql-static,PostgreSQL
+2916,postgresql-test,PostgreSQL
+2917,postgresql-test-rpm-macros,PostgreSQL
+2918,postgresql-upgrade,PostgreSQL
+2919,postgresql-upgrade-devel,PostgreSQL
+2920,potrace,GPLv2+
+2921,powertop,GPLv2
+2922,pptp,GPLv2+
+2923,procmail,GPLv2+ or Artistic
+2924,prometheus-jmx-exporter,ASL 2.0
+2925,protobuf,BSD
+2926,protobuf-c,BSD
+2927,protobuf-lite,BSD
+2928,pulseaudio,LGPLv2+
+2929,pulseaudio-libs,LGPLv2+
+2930,pulseaudio-libs-devel,LGPLv2+
+2931,pulseaudio-libs-glib2,LGPLv2+
+2932,pulseaudio-module-bluetooth,LGPLv2+
+2933,pulseaudio-module-x11,LGPLv2+
+2934,pulseaudio-utils,LGPLv2+
+2935,purple-sipe,GPLv2+
+2936,pygobject2,"LGPLv2+, MIT"
+2937,pygobject2-codegen,"LGPLv2+, MIT"
+2938,pygobject2-devel,"LGPLv2+, MIT"
+2939,pygobject2-doc,"LGPLv2+, MIT"
+2940,pygtk2,LGPLv2+
+2941,pygtk2-codegen,LGPLv2+
+2942,pygtk2-devel,LGPLv2+
+2943,pygtk2-doc,LGPLv2+
+2944,pykickstart,GPLv2 and MIT
+2945,python-nose-docs,LGPLv2+ and Public Domain
+2946,python-nss-doc,MPLv2.0 or GPLv2+ or LGPLv2+
+2947,python-podman-api,LGPLv2
+2948,python-psycopg2-doc,LGPLv3+ with exceptions
+2949,python-pymongo-doc,ASL 2.0 and MIT
+2950,python-qt5-rpm-macros,GPLv3
+2951,python-rpm-macros,MIT
+2952,python-sqlalchemy-doc,MIT
+2953,python-srpm-macros,MIT
+2954,python-virtualenv-doc,MIT
+2955,python2,Python
+2956,python2-attrs,MIT
+2957,python2-babel,BSD
+2958,python2-backports,Public Domain
+2959,python2-backports-ssl_match_hostname,Python
+2960,python2-bson,ASL 2.0 and MIT
+2961,python2-cairo,MPLv1.1 or LGPLv2
+2962,python2-cairo-devel,MPLv1.1 or LGPLv2
+2963,python2-chardet,LGPLv2
+2964,python2-coverage,ASL 2.0 and MIT and (MIT or GPL)
+2965,python2-Cython,ASL 2.0
+2966,python2-debug,Python
+2967,python2-devel,Python
+2968,python2-dns,MIT
+2969,python2-docs,Python
+2970,python2-docs-info,Python
+2971,python2-docutils,Public Domain and BSD and Python and GPLv3+
+2972,python2-funcsigs,ASL 2.0
+2973,python2-idna,BSD and Python and Unicode
+2974,python2-ipaddress,Python
+2975,python2-jinja2,BSD
+2976,python2-libs,Python
+2977,python2-lxml,BSD
+2978,python2-markupsafe,BSD
+2979,python2-mock,BSD
+2980,python2-nose,LGPLv2+ and Public Domain
+2981,python2-numpy,BSD and Python
+2982,python2-numpy-doc,BSD and Python
+2983,python2-numpy-f2py,BSD and Python
+2984,python2-pip,MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
+2985,python2-pip-wheel,MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
+2986,python2-pluggy,MIT
+2987,python2-psycopg2,LGPLv3+ with exceptions
+2988,python2-psycopg2-debug,LGPLv3+ with exceptions
+2989,python2-psycopg2-tests,LGPLv3+ with exceptions
+2990,python2-py,MIT and Public Domain
+2991,python2-pygments,BSD
+2992,python2-pymongo,ASL 2.0 and MIT
+2993,python2-pymongo-gridfs,ASL 2.0 and MIT
+2994,python2-PyMySQL,MIT
+2995,python2-pysocks,BSD
+2996,python2-pytest,MIT
+2997,python2-pytest-mock,MIT
+2998,python2-pytz,MIT
+2999,python2-pyyaml,MIT
+3000,python2-requests,ASL 2.0
+3001,python2-rpm-macros,MIT
+3002,python2-scipy,BSD and Boost and Public Domain
+3003,python2-scour,ASL 2.0
+3004,python2-setuptools,MIT
+3005,python2-setuptools-wheel,MIT
+3006,python2-setuptools_scm,MIT
+3007,python2-six,MIT
+3008,python2-sqlalchemy,MIT
+3009,python2-test,Python
+3010,python2-tkinter,Python
+3011,python2-tools,Python
+3012,python2-urllib3,MIT
+3013,python2-virtualenv,MIT
+3014,python2-wheel,MIT
+3015,python2-wheel-wheel,MIT
+3016,python3-abrt,GPLv2+
+3017,python3-abrt-addon,GPLv2+
+3018,python3-abrt-container-addon,GPLv2+
+3019,python3-abrt-doc,GPLv2+
+3020,python3-argcomplete,ASL 2.0
+3021,python3-argh,LGPLv3+
+3022,python3-attrs,MIT
+3023,python3-augeas,LGPLv2+
+3024,python3-babel,BSD
+3025,python3-bcc,ASL 2.0
+3026,python3-bind,MPLv2.0
+3027,python3-blivet,LGPLv2+
+3028,python3-blockdev,LGPLv2+
+3029,python3-brlapi,LGPLv2+
+3030,python3-bson,ASL 2.0 and MIT
+3031,python3-bytesize,LGPLv2+
+3032,python3-cairo,MPLv1.1 or LGPLv2
+3033,python3-clang,NCSA
+3034,python3-click,BSD
+3035,python3-coverage,ASL 2.0 and MIT and (MIT or GPL)
+3036,python3-cpio,LGPLv2+
+3037,python3-createrepo_c,GPLv2+
+3038,python3-criu,GPLv2
+3039,python3-cups,GPLv2+
+3040,python3-custodia,GPLv3+
+3041,python3-dbus-client-gen,MPLv2.0
+3042,python3-dbus-python-client-gen,MPLv2.0
+3043,python3-dbus-signature-pyparsing,ASL 2.0
+3044,python3-distro,ASL 2.0
+3045,python3-dnf-plugin-spacewalk,GPLv2
+3046,python3-docs,Python
+3047,python3-docutils,Public Domain and BSD and Python and GPLv3+
+3048,python3-enchant,LGPLv2+
+3049,python3-evdev,BSD
+3050,python3-flask,BSD
+3051,python3-gevent,MIT
+3052,python3-gobject,LGPLv2+ and MIT
+3053,python3-gobject-base,LGPLv2+ and MIT
+3054,python3-greenlet,MIT
+3055,python3-gssapi,ISC
+3056,python3-hivex,LGPLv2
+3057,python3-html5lib,MIT
+3058,python3-humanize,MIT
+3059,python3-hwdata,GPLv2
+3060,python3-idle,Python
+3061,python3-into-dbus-python,ASL 2.0
+3062,python3-ipaclient,GPLv3+
+3063,python3-ipalib,GPLv3+
+3064,python3-ipaserver,GPLv3+
+3065,python3-itsdangerous,BSD
+3066,python3-jabberpy,LGPLv2+
+3067,python3-jinja2,BSD
+3068,python3-jmespath,MIT
+3069,python3-jsonpatch,BSD
+3070,python3-jsonpointer,BSD
+3071,python3-jsonschema,MIT
+3072,python3-justbases,GPLv2+
+3073,python3-justbytes,GPLv2+
+3074,python3-jwcrypto,LGPLv3+
+3075,python3-kdcproxy,MIT
+3076,python3-keycloak-httpd-client-install,GPLv3
+3077,python3-kickstart,GPLv2 and MIT
+3078,python3-koan,GPLv2+
+3079,python3-langtable,GPLv3+
+3080,python3-ldap,Python
+3081,python3-lib389,GPLv3+
+3082,python3-libguestfs,LGPLv2+
+3083,python3-libnmstate,LGPLv2+
+3084,python3-libreport,GPLv2+
+3085,python3-libvirt,LGPLv2+
+3086,python3-libvoikko,GPLv2+
+3087,python3-lit,NCSA
+3088,python3-lldb,NCSA
+3089,python3-louis,LGPLv3+
+3090,python3-lxml,BSD
+3091,python3-mako,(MIT and Python) and (BSD or GPLv2)
+3092,python3-markupsafe,BSD
+3093,python3-meh,GPLv2+
+3094,python3-meh-gui,GPLv2+
+3095,python3-mod_wsgi,ASL 2.0
+3096,python3-netaddr,BSD
+3097,python3-netifaces,MIT
+3098,python3-networkx,BSD
+3099,python3-networkx-core,BSD
+3100,python3-newt,LGPLv2
+3101,python3-nose,LGPLv2+ and Public Domain
+3102,python3-nss,MPLv2.0 or GPLv2+ or LGPLv2+
+3103,python3-ntplib,MIT
+3104,python3-numpy,BSD and Python
+3105,python3-numpy-f2py,BSD and Python
+3106,python3-ordered-set,MIT
+3107,python3-osa-common,GPLv2
+3108,python3-osad,GPLv2
+3109,python3-pcp,GPLv2+
+3110,python3-pexpect,MIT
+3111,python3-pid,ASL 2.0
+3112,python3-pillow,MIT
+3113,python3-pip,MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
+3114,python3-pki,GPLv2 and LGPLv2
+3115,python3-pluggy,MIT
+3116,python3-prettytable,BSD
+3117,python3-productmd,LGPLv2+
+3118,python3-protobuf,BSD
+3119,python3-psutil,BSD
+3120,python3-psycopg2,LGPLv3+ with exceptions
+3121,python3-ptyprocess,ISC
+3122,python3-py,MIT and Public Domain
+3123,python3-pyasn1,BSD
+3124,python3-pyasn1-modules,BSD
+3125,python3-pyatspi,LGPLv2 and GPLv2
+3126,python3-pycurl,LGPLv2+ or MIT
+3127,python3-pydbus,LGPLv2+
+3128,python3-pygments,BSD
+3129,python3-pymongo,ASL 2.0 and MIT
+3130,python3-pymongo-gridfs,ASL 2.0 and MIT
+3131,python3-PyMySQL,MIT
+3132,python3-pyOpenSSL,ASL 2.0
+3133,python3-pyparted,GPLv2+
+3134,python3-pyqt5-sip,GPLv2 or GPLv3 and (GPLv3+ with exceptions)
+3135,python3-pyserial,Python
+3136,python3-pytest,MIT
+3137,python3-pytoml,MIT
+3138,python3-pytz,MIT
+3139,python3-pyusb,BSD
+3140,python3-pyxdg,LGPLv2
+3141,python3-qrcode,BSD
+3142,python3-qrcode-core,BSD
+3143,python3-qt5,GPLv3
+3144,python3-qt5-base,GPLv3
+3145,python3-reportlab,BSD
+3146,python3-requests-file,ASL 2.0
+3147,python3-requests-ftp,ASL 2.0
+3148,python3-rhn-check,GPLv2
+3149,python3-rhn-client-tools,GPLv2
+3150,python3-rhn-setup,GPLv2
+3151,python3-rhn-setup-gnome,GPLv2
+3152,python3-rhn-virtualization-common,GPLv2
+3153,python3-rhn-virtualization-host,GPLv2
+3154,python3-rhncfg,GPLv2
+3155,python3-rhncfg-actions,GPLv2
+3156,python3-rhncfg-client,GPLv2
+3157,python3-rhncfg-management,GPLv2
+3158,python3-rhnlib,GPLv2
+3159,python3-rhnpush,GPLv2
+3160,python3-rpm-generators,GPLv2+
+3161,python3-rpm-macros,MIT
+3162,python3-rpmfluff,GPLv2+
+3163,python3-sanlock,GPLv2 and GPLv2+ and LGPLv2+
+3164,python3-scipy,BSD and LGPLv2+
+3165,python3-semantic_version,BSD
+3166,python3-simpleline,GPLv2+
+3167,python3-spacewalk-abrt,GPLv2
+3168,python3-spacewalk-backend-libs,GPLv2
+3169,python3-spacewalk-koan,GPLv2
+3170,python3-spacewalk-oscap,GPLv2
+3171,python3-spacewalk-usix,GPLv2
+3172,python3-speechd,GPLv2+
+3173,python3-sqlalchemy,MIT
+3174,python3-suds,LGPLv3+
+3175,python3-sushy,ASL 2.0
+3176,python3-systemd,LGPLv2+
+3177,python3-tbb,ASL 2.0
+3178,python3-test,Python
+3179,python3-tkinter,Python
+3180,python3-unbound,BSD
+3181,python3-virtualenv,MIT
+3182,python3-webencodings,BSD
+3183,python3-werkzeug,BSD
+3184,python3-wheel,MIT
+3185,python3-wheel-wheel,MIT
+3186,python3-yubico,BSD
+3187,python36,Python
+3188,python36-debug,Python
+3189,python36-devel,Python
+3190,python36-rpm-macros,Python
+3191,python38,Python
+3192,python38-asn1crypto,MIT
+3193,python38-babel,BSD
+3194,python38-cffi,MIT
+3195,python38-chardet,LGPLv2
+3196,python38-cryptography,ASL 2.0 or BSD
+3197,python38-Cython,ASL 2.0
+3198,python38-debug,Python
+3199,python38-devel,Python
+3200,python38-idle,Python
+3201,python38-idna,BSD and Python and Unicode
+3202,python38-jinja2,BSD
+3203,python38-libs,Python
+3204,python38-lxml,BSD
+3205,python38-markupsafe,BSD
+3206,python38-mod_wsgi,ASL 2.0
+3207,python38-numpy,BSD
+3208,python38-numpy-doc,BSD and Python and ASL 2.0
+3209,python38-numpy-f2py,BSD and Python and ASL 2.0
+3210,python38-pip,MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
+3211,python38-pip-wheel,MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)
+3212,python38-ply,BSD
+3213,python38-psutil,BSD
+3214,python38-psycopg2,LGPLv3+ with exceptions
+3215,python38-psycopg2-doc,LGPLv3+ with exceptions
+3216,python38-psycopg2-tests,LGPLv3+ with exceptions
+3217,python38-pycparser,BSD
+3218,python38-PyMySQL,MIT
+3219,python38-pysocks,BSD
+3220,python38-pytz,MIT
+3221,python38-pyyaml,MIT
+3222,python38-requests,ASL 2.0
+3223,python38-rpm-macros,Python
+3224,python38-scipy,BSD and Boost and Public Domain
+3225,python38-setuptools,MIT and (BSD or ASL 2.0)
+3226,python38-setuptools-wheel,MIT and (BSD or ASL 2.0)
+3227,python38-six,MIT
+3228,python38-test,Python
+3229,python38-tkinter,Python
+3230,python38-urllib3,MIT
+3231,python38-wheel,MIT
+3232,python38-wheel-wheel,MIT
+3233,qemu-guest-agent,GPLv2 and GPLv2+ and CC-BY
+3234,qemu-img,GPLv2 and GPLv2+ and CC-BY
+3235,qemu-kvm,GPLv2 and GPLv2+ and CC-BY
+3236,qemu-kvm-block-curl,GPLv2 and GPLv2+ and CC-BY
+3237,qemu-kvm-block-gluster,GPLv2 and GPLv2+ and CC-BY
+3238,qemu-kvm-block-iscsi,GPLv2 and GPLv2+ and CC-BY
+3239,qemu-kvm-block-rbd,GPLv2 and GPLv2+ and CC-BY
+3240,qemu-kvm-block-ssh,GPLv2 and GPLv2+ and CC-BY
+3241,qemu-kvm-common,GPLv2 and GPLv2+ and CC-BY
+3242,qemu-kvm-core,GPLv2 and GPLv2+ and CC-BY
+3243,qgnomeplatform,LGPLv2+
+3244,qgpgme,LGPLv2+
+3245,qpdf,(Artistic 2.0 or ASL 2.0) and MIT
+3246,qpdf-doc,(Artistic 2.0 or ASL 2.0) and MIT
+3247,qpdf-libs,(Artistic 2.0 or ASL 2.0) and MIT
+3248,qperf,GPLv2 or BSD
+3249,qrencode,LGPLv2+
+3250,qrencode-libs,LGPLv2+
+3251,qt5-assistant,LGPLv3 or LGPLv2
+3252,qt5-designer,LGPLv3 or LGPLv2
+3253,qt5-doctools,LGPLv3 or LGPLv2
+3254,qt5-linguist,LGPLv3 or LGPLv2
+3255,qt5-qdbusviewer,LGPLv3 or LGPLv2
+3256,qt5-qt3d,LGPLv2 with exceptions or GPLv3 with exceptions
+3257,qt5-qt3d-devel,LGPLv2 with exceptions or GPLv3 with exceptions
+3258,qt5-qt3d-examples,LGPLv2 with exceptions or GPLv3 with exceptions
+3259,qt5-qtbase,LGPLv2 with exceptions or GPLv3 with exceptions
+3260,qt5-qtbase-common,LGPLv2 with exceptions or GPLv3 with exceptions
+3261,qt5-qtbase-devel,LGPLv2 with exceptions or GPLv3 with exceptions
+3262,qt5-qtbase-examples,LGPLv2 with exceptions or GPLv3 with exceptions
+3263,qt5-qtbase-gui,LGPLv2 with exceptions or GPLv3 with exceptions
+3264,qt5-qtbase-mysql,LGPLv2 with exceptions or GPLv3 with exceptions
+3265,qt5-qtbase-odbc,LGPLv2 with exceptions or GPLv3 with exceptions
+3266,qt5-qtbase-postgresql,LGPLv2 with exceptions or GPLv3 with exceptions
+3267,qt5-qtbase-private-devel,LGPLv2 with exceptions or GPLv3 with exceptions
+3268,qt5-qtcanvas3d,LGPLv2 with exceptions or GPLv3 with exceptions
+3269,qt5-qtcanvas3d-examples,LGPLv2 with exceptions or GPLv3 with exceptions
+3270,qt5-qtconnectivity,LGPLv2 with exceptions or GPLv3 with exceptions
+3271,qt5-qtconnectivity-devel,LGPLv2 with exceptions or GPLv3 with exceptions
+3272,qt5-qtconnectivity-examples,LGPLv2 with exceptions or GPLv3 with exceptions
+3273,qt5-qtdeclarative,LGPLv2 with exceptions or GPLv3 with exceptions
+3274,qt5-qtdeclarative-devel,LGPLv2 with exceptions or GPLv3 with exceptions
+3275,qt5-qtdeclarative-examples,LGPLv2 with exceptions or GPLv3 with exceptions
+3276,qt5-qtdoc,GFDL
+3277,qt5-qtgraphicaleffects,LGPLv2 with exceptions or GPLv3 with exceptions
+3278,qt5-qtimageformats,LGPLv2 with exceptions or GPLv3 with exceptions
+3279,qt5-qtlocation,LGPLv2 with exceptions or GPLv3 with exceptions
+3280,qt5-qtlocation-devel,LGPLv2 with exceptions or GPLv3 with exceptions
+3281,qt5-qtlocation-examples,LGPLv2 with exceptions or GPLv3 with exceptions
+3282,qt5-qtmultimedia,LGPLv2 with exceptions or GPLv3 with exceptions
+3283,qt5-qtmultimedia-devel,LGPLv2 with exceptions or GPLv3 with exceptions
+3284,qt5-qtmultimedia-examples,LGPLv2 with exceptions or GPLv3 with exceptions
+3285,qt5-qtquickcontrols,LGPLv2 or LGPLv3 and GFDL
+3286,qt5-qtquickcontrols-examples,LGPLv2 or LGPLv3 and GFDL
+3287,qt5-qtquickcontrols2,GPLv2+ or LGPLv3 and GFDL
+3288,qt5-qtquickcontrols2-examples,GPLv2+ or LGPLv3 and GFDL
+3289,qt5-qtscript,LGPLv2 with exceptions or GPLv3 with exceptions
+3290,qt5-qtscript-devel,LGPLv2 with exceptions or GPLv3 with exceptions
+3291,qt5-qtscript-examples,LGPLv2 with exceptions or GPLv3 with exceptions
+3292,qt5-qtsensors,LGPLv2 with exceptions or GPLv3 with exceptions
+3293,qt5-qtsensors-devel,LGPLv2 with exceptions or GPLv3 with exceptions
+3294,qt5-qtsensors-examples,LGPLv2 with exceptions or GPLv3 with exceptions
+3295,qt5-qtserialbus,LGPLv2 with exceptions or GPLv3 with exceptions
+3296,qt5-qtserialbus-examples,LGPLv2 with exceptions or GPLv3 with exceptions
+3297,qt5-qtserialport,LGPLv2 with exceptions or GPLv3 with exceptions
+3298,qt5-qtserialport-devel,LGPLv2 with exceptions or GPLv3 with exceptions
+3299,qt5-qtserialport-examples,LGPLv2 with exceptions or GPLv3 with exceptions
+3300,qt5-qtsvg,LGPLv2 with exceptions or GPLv3 with exceptions
+3301,qt5-qtsvg-devel,LGPLv2 with exceptions or GPLv3 with exceptions
+3302,qt5-qtsvg-examples,LGPLv2 with exceptions or GPLv3 with exceptions
+3303,qt5-qttools,LGPLv3 or LGPLv2
+3304,qt5-qttools-common,LGPLv3 or LGPLv2
+3305,qt5-qttools-devel,LGPLv3 or LGPLv2
+3306,qt5-qttools-examples,LGPLv3 or LGPLv2
+3307,qt5-qttools-libs-designer,LGPLv3 or LGPLv2
+3308,qt5-qttools-libs-designercomponents,LGPLv3 or LGPLv2
+3309,qt5-qttools-libs-help,LGPLv3 or LGPLv2
+3310,qt5-qttranslations,LGPLv2 with exceptions or GPLv3 with exceptions and GFDL
+3311,qt5-qtwayland,LGPLv3
+3312,qt5-qtwayland-examples,LGPLv3
+3313,qt5-qtwebchannel,LGPLv2 with exceptions or GPLv3 with exceptions
+3314,qt5-qtwebchannel-devel,LGPLv2 with exceptions or GPLv3 with exceptions
+3315,qt5-qtwebchannel-examples,LGPLv2 with exceptions or GPLv3 with exceptions
+3316,qt5-qtwebsockets,LGPLv2 with exceptions or GPLv3 with exceptions
+3317,qt5-qtwebsockets-devel,LGPLv2 with exceptions or GPLv3 with exceptions
+3318,qt5-qtwebsockets-examples,LGPLv2 with exceptions or GPLv3 with exceptions
+3319,qt5-qtx11extras,LGPLv2 with exceptions or GPLv3 with exceptions
+3320,qt5-qtx11extras-devel,LGPLv2 with exceptions or GPLv3 with exceptions
+3321,qt5-qtxmlpatterns,LGPLv2 with exceptions or GPLv3 with exceptions
+3322,qt5-qtxmlpatterns-devel,LGPLv2 with exceptions or GPLv3 with exceptions
+3323,qt5-qtxmlpatterns-examples,LGPLv2 with exceptions or GPLv3 with exceptions
+3324,qt5-rpm-macros,GPLv3
+3325,qt5-srpm-macros,GPLv3
+3326,radvd,BSD with advertising
+3327,raptor2,GPLv2+ or LGPLv2+ or ASL 2.0
+3328,rarian,LGPLv2+
+3329,rarian-compat,GPLv2+
+3330,rasqal,LGPLv2+ or ASL 2.0
+3331,rear,GPLv3
+3332,recode,GPLv2+
+3333,redfish-finder,GPLv2
+3334,redhat-backgrounds,"Licensed only for approved usage, see COPYING for details."
+3335,redhat-logos-ipa,"Licensed only for approved usage, see COPYING for details."
+3336,redhat-lsb,GPLv2
+3337,redhat-lsb-core,GPLv2
+3338,redhat-lsb-cxx,GPLv2
+3339,redhat-lsb-desktop,GPLv2
+3340,redhat-lsb-languages,GPLv2
+3341,redhat-lsb-printing,GPLv2
+3342,redhat-lsb-submod-multimedia,GPLv2
+3343,redhat-lsb-submod-security,GPLv2
+3344,redhat-menus,GPL+
+3345,redhat-rpm-config,GPL+
+3346,redhat-support-lib-python,ASL 2.0
+3347,redhat-support-tool,ASL 2.0
+3348,redis,BSD and MIT
+3349,redis-devel,BSD and MIT
+3350,redis-doc,CC-BY-SA
+3351,redland,LGPLv2+ or ASL 2.0
+3352,relaxngDatatype,BSD
+3353,rest,LGPLv2
+3354,resteasy,ASL 2.0 and CDDL
+3355,rhel-system-roles,GPLv3+ and MIT and BSD
+3356,rhn-check,GPLv2
+3357,rhn-client-tools,GPLv2
+3358,rhn-custom-info,GPLv2
+3359,rhn-setup,GPLv2
+3360,rhn-setup-gnome,GPLv2
+3361,rhn-virtualization-host,GPLv2
+3362,rhncfg,GPLv2
+3363,rhncfg-actions,GPLv2
+3364,rhncfg-client,GPLv2
+3365,rhncfg-management,GPLv2
+3366,rhnlib,GPLv2
+3367,rhnpush,GPLv2
+3368,rhnsd,GPLv2
+3369,rhsm-gtk,GPLv2
+3370,rhythmbox,GPLv2+ with exceptions and GFDL
+3371,rls,(ASL 2.0 or MIT) and (BSD and MIT)
+3372,rpm-build,GPLv2+
+3373,rpm-mpi-hooks,MIT
+3374,rpm-ostree,LGPLv2+
+3375,rpm-ostree-libs,LGPLv2+
+3376,rpmdevtools,GPLv2+ and GPLv2
+3377,rpmemd,BSD
+3378,rpmlint,GPLv2
+3379,rrdtool,GPLv2+ with exceptions
+3380,rrdtool-perl,GPLv2+ with exceptions
+3381,rsyslog,(GPLv3+ and ASL 2.0)
+3382,rsyslog-crypto,(GPLv3+ and ASL 2.0)
+3383,rsyslog-doc,(GPLv3+ and ASL 2.0)
+3384,rsyslog-elasticsearch,(GPLv3+ and ASL 2.0)
+3385,rsyslog-gnutls,(GPLv3+ and ASL 2.0)
+3386,rsyslog-gssapi,(GPLv3+ and ASL 2.0)
+3387,rsyslog-kafka,(GPLv3+ and ASL 2.0)
+3388,rsyslog-mmaudit,(GPLv3+ and ASL 2.0)
+3389,rsyslog-mmjsonparse,(GPLv3+ and ASL 2.0)
+3390,rsyslog-mmkubernetes,(GPLv3+ and ASL 2.0)
+3391,rsyslog-mmnormalize,(GPLv3+ and ASL 2.0)
+3392,rsyslog-mmsnmptrapd,(GPLv3+ and ASL 2.0)
+3393,rsyslog-mysql,(GPLv3+ and ASL 2.0)
+3394,rsyslog-pgsql,(GPLv3+ and ASL 2.0)
+3395,rsyslog-relp,(GPLv3+ and ASL 2.0)
+3396,rsyslog-snmp,(GPLv3+ and ASL 2.0)
+3397,rtkit,GPLv3+ and BSD
+3398,ruby,(Ruby or BSD) and Public Domain and MIT and CC0 and zlib and UCD
+3399,ruby-devel,(Ruby or BSD) and Public Domain and MIT and CC0 and zlib and UCD
+3400,ruby-doc,(Ruby or BSD) and Public Domain and MIT and CC0 and zlib and UCD
+3401,ruby-hivex,LGPLv2
+3402,ruby-irb,(Ruby or BSD) and Public Domain and MIT and CC0 and zlib and UCD
+3403,ruby-libguestfs,LGPLv2+
+3404,ruby-libs,Ruby or BSD
+3405,rubygem-abrt,MIT
+3406,rubygem-abrt-doc,MIT
+3407,rubygem-bigdecimal,Ruby or BSD
+3408,rubygem-bson,ASL 2.0
+3409,rubygem-bson-doc,ASL 2.0
+3410,rubygem-bundler,MIT
+3411,rubygem-bundler-doc,MIT
+3412,rubygem-did_you_mean,MIT
+3413,rubygem-io-console,(Ruby or BSD) and Public Domain and MIT and CC0 and zlib and UCD
+3414,rubygem-irb,(Ruby or BSD) and Public Domain and MIT and CC0 and zlib and UCD
+3415,rubygem-json,(Ruby or GPLv2) and UCD
+3416,rubygem-minitest,MIT
+3417,rubygem-mongo,ASL 2.0
+3418,rubygem-mongo-doc,ASL 2.0
+3419,rubygem-mysql2,MIT
+3420,rubygem-mysql2-doc,MIT
+3421,rubygem-net-telnet,(Ruby or BSD) and Public Domain and MIT and CC0 and zlib and UCD
+3422,rubygem-openssl,Ruby or BSD
+3423,rubygem-pg,(BSD or Ruby) and PostgreSQL
+3424,rubygem-pg-doc,(BSD or Ruby) and PostgreSQL
+3425,rubygem-power_assert,Ruby or BSD
+3426,rubygem-psych,MIT
+3427,rubygem-rake,MIT
+3428,rubygem-rdoc,GPLv2 and Ruby and MIT and OFL
+3429,rubygem-test-unit,(Ruby or BSD) and (Ruby or BSD or Python) and (Ruby or BSD or LGPLv2+)
+3430,rubygem-xmlrpc,Ruby or BSD
+3431,rubygems,Ruby or MIT
+3432,rubygems-devel,Ruby or MIT
+3433,runc,ASL 2.0
+3434,rust,(ASL 2.0 or MIT) and (BSD and MIT)
+3435,rust-analysis,(ASL 2.0 or MIT) and (BSD and MIT)
+3436,rust-debugger-common,(ASL 2.0 or MIT) and (BSD and MIT)
+3437,rust-doc,(ASL 2.0 or MIT) and (BSD and MIT)
+3438,rust-gdb,(ASL 2.0 or MIT) and (BSD and MIT)
+3439,rust-lldb,(ASL 2.0 or MIT) and (BSD and MIT)
+3440,rust-src,(ASL 2.0 or MIT) and (BSD and MIT)
+3441,rust-srpm-macros,MIT
+3442,rust-std-static,(ASL 2.0 or MIT) and (BSD and MIT)
+3443,rust-toolset,ASL 2.0 or MIT
+3444,rustfmt,(ASL 2.0 or MIT) and (BSD and MIT)
+3445,s390utils,MIT
+3446,s390utils-cmsfs,GPLv2
+3447,s390utils-cmsfs-fuse,MIT
+3448,s390utils-cpacfstatsd,MIT
+3449,s390utils-cpuplugd,MIT
+3450,s390utils-hmcdrvfs,MIT
+3451,s390utils-iucvterm,MIT
+3452,s390utils-mon_statd,MIT
+3453,s390utils-osasnmpd,MIT
+3454,s390utils-zdsfs,MIT
+3455,s390utils-ziomon,MIT
+3456,saab-fonts,GPLv2+ with exceptions
+3457,sac,W3C
+3458,samyak-devanagari-fonts,GPLv3+ with exceptions
+3459,samyak-fonts-common,GPLv3+ with exceptions
+3460,samyak-gujarati-fonts,GPLv3+ with exceptions
+3461,samyak-malayalam-fonts,GPLv3+ with exceptions
+3462,samyak-odia-fonts,GPLv3+ with exceptions
+3463,samyak-tamil-fonts,GPLv3+ with exceptions
+3464,sane-backends,GPLv2+ and GPLv2+ with exceptions and Public Domain and IJG and LGPLv2+ and MIT
+3465,sane-backends-daemon,GPLv2+ and GPLv2+ with exceptions and Public Domain and IJG and LGPLv2+ and MIT
+3466,sane-backends-devel,GPLv2+ and GPLv2+ with exceptions and Public Domain and IJG and LGPLv2+ and MIT
+3467,sane-backends-doc,GPLv2+ and GPLv2+ with exceptions and Public Domain and IJG and LGPLv2+ and MIT
+3468,sane-backends-drivers-cameras,GPLv2+ and GPLv2+ with exceptions and Public Domain and IJG and LGPLv2+ and MIT
+3469,sane-backends-drivers-scanners,GPLv2+ and GPLv2+ with exceptions and Public Domain and IJG and LGPLv2+ and MIT
+3470,sane-backends-libs,GPLv2+ and GPLv2+ with exceptions and Public Domain and IJG and LGPLv2+ and MIT
+3471,sane-frontends,GPLv2+ and LGPLv2+ and GPLv2+ with exceptions
+3472,sanlk-reset,GPLv2 and GPLv2+ and LGPLv2+
+3473,sanlock,GPLv2 and GPLv2+ and LGPLv2+
+3474,sanlock-lib,GPLv2 and GPLv2+ and LGPLv2+
+3475,sassist,MIT
+3476,satyr,GPLv2+
+3477,sbc,GPLv2 and LGPLv2+
+3478,sbd,GPLv2+
+3479,sblim-cmpi-base,EPL-1.0
+3480,sblim-indication_helper,EPL-1.0
+3481,sblim-sfcb,EPL-1.0
+3482,sblim-sfcc,EPL-1.0
+3483,sblim-sfcCommon,EPL
+3484,sblim-wbemcli,EPL-1.0
+3485,scala,BSD and CC0 and Public Domain
+3486,scala-apidoc,BSD and CC0 and Public Domain
+3487,scala-swing,BSD and CC0 and Public Domain
+3488,scap-security-guide,BSD
+3489,scap-security-guide-doc,BSD
+3490,scap-workbench,GPLv3+
+3491,scl-utils,GPLv2+
+3492,scl-utils-build,GPLv2+
+3493,scrub,GPLv2+
+3494,SDL,LGPLv2+
+3495,SDL-devel,LGPLv2+
+3496,seabios,LGPLv3
+3497,seabios-bin,LGPLv3
+3498,seahorse,GPLv2+ and LGPLv2+
+3499,seavgabios-bin,LGPLv3
+3500,sendmail,Sendmail
+3501,sendmail-cf,Sendmail
+3502,sendmail-doc,Sendmail
+3503,sendmail-milter,Sendmail
+3504,setools,GPLv2
+3505,setools-console-analyses,GPLv2
+3506,setools-gui,GPLv2
+3507,setroubleshoot,GPLv2+
+3508,setroubleshoot-plugins,GPLv2+
+3509,setroubleshoot-server,GPLv2+
+3510,sgabios,ASL 2.0
+3511,sgabios-bin,ASL 2.0
+3512,si-units,BSD
+3513,si-units-javadoc,BSD
+3514,sil-abyssinica-fonts,OFL
+3515,sil-nuosu-fonts,OFL
+3516,sil-padauk-book-fonts,OFL
+3517,sil-padauk-fonts,OFL
+3518,sil-scheherazade-fonts,OFL
+3519,sip,GPLv2 or GPLv3 and (GPLv3+ with exceptions)
+3520,sisu,EPL-1.0 and BSD
+3521,sisu-inject,EPL-1.0 and BSD
+3522,sisu-plexus,EPL-1.0 and BSD
+3523,skkdic,GPLv2+
+3524,skopeo,ASL 2.0
+3525,skopeo-tests,ASL 2.0
+3526,slang-devel,GPLv2+
+3527,slapi-nis,GPLv2
+3528,slf4j,MIT and ASL 2.0
+3529,slf4j-jdk14,MIT and ASL 2.0
+3530,slirp4netns,GPLv2
+3531,SLOF,BSD
+3532,smc-anjalioldlipi-fonts,OFL
+3533,smc-dyuthi-fonts,GPLv3+ with exceptions
+3534,smc-fonts-common,GPLv3+ with exceptions and GPLv2+ with exceptions and GPLv2+ and GPLv2 and GPL+
+3535,smc-kalyani-fonts,GPLv3+ with exceptions
+3536,smc-meera-fonts,GPLv2+ with exceptions
+3537,smc-rachana-fonts,GPLv2+
+3538,smc-raghumalayalam-fonts,GPLv2
+3539,smc-suruma-fonts,GPLv3 with exceptions
+3540,socat,GPLv2
+3541,softhsm,BSD
+3542,softhsm-devel,BSD
+3543,sos-collector,GPLv2
+3544,sound-theme-freedesktop,GPLv2+ and LGPLv2+ and CC-BY-SA and CC-BY
+3545,soundtouch,LGPLv2+
+3546,source-highlight,GPLv3+
+3547,spacewalk-abrt,GPLv2
+3548,spacewalk-client-cert,GPLv2
+3549,spacewalk-koan,GPLv2
+3550,spacewalk-oscap,GPLv2
+3551,spacewalk-remote-utils,GPLv2
+3552,spacewalk-usix,GPLv2
+3553,spamassassin,ASL 2.0
+3554,speech-dispatcher,GPLv2+ and GPLv2
+3555,speech-dispatcher-espeak-ng,GPLv2+ and GPLv2
+3556,speex,BSD
+3557,speexdsp,BSD
+3558,spice-client-win-x64,GPLv2+
+3559,spice-client-win-x86,GPLv2+
+3560,spice-glib,LGPLv2+
+3561,spice-glib-devel,LGPLv2+
+3562,spice-gtk,LGPLv2+
+3563,spice-gtk-tools,LGPLv2+
+3564,spice-gtk3,LGPLv2+
+3565,spice-gtk3-devel,LGPLv2+
+3566,spice-gtk3-vala,LGPLv2+
+3567,spice-protocol,BSD and LGPLv2+
+3568,spice-qxl-wddm-dod,ASL 2.0
+3569,spice-qxl-xddm,GPLv2
+3570,spice-server,LGPLv2+
+3571,spice-streaming-agent,ASL 2.0
+3572,spice-vdagent,GPLv3+
+3573,spice-vdagent-win-x64,GPLv2+
+3574,spice-vdagent-win-x86,GPLv2+
+3575,spirv-tools,ASL 2.0
+3576,spirv-tools-libs,ASL 2.0
+3577,splix,GPLv2
+3578,squid,GPLv2+ and (LGPLv2+ and MIT and BSD and Public Domain)
+3579,sscg,BSD
+3580,startup-notification,LGPLv2
+3581,startup-notification-devel,LGPLv2
+3582,stax-ex,CDDL or GPLv2
+3583,stix-fonts,OFL
+3584,stix-math-fonts,OFL
+3585,stratis-cli,ASL 2.0
+3586,stratisd,MPLv2.0
+3587,subscription-manager-initial-setup-addon,GPLv2
+3588,subscription-manager-migration,GPLv2
+3589,subscription-manager-migration-data,CC0
+3590,subversion,ASL 2.0
+3591,subversion-devel,ASL 2.0
+3592,subversion-gnome,ASL 2.0
+3593,subversion-javahl,ASL 2.0
+3594,subversion-libs,ASL 2.0
+3595,subversion-perl,ASL 2.0
+3596,subversion-tools,ASL 2.0
+3597,suitesparse,(LGPLv2+ or BSD) and LGPLv2+ and GPLv2+
+3598,supermin,GPLv2+
+3599,supermin-devel,GPLv2+
+3600,sushi,GPLv2+ with exceptions
+3601,swig,GPLv3+ and BSD
+3602,swig-doc,BSD
+3603,swig-gdb,BSD
+3604,switcheroo-control,GPLv3
+3605,sysfsutils,GPLv2
+3606,sysstat,GPLv2+
+3607,system-config-printer-libs,GPLv2+
+3608,system-config-printer-udev,GPLv2+
+3609,systemtap,GPLv2+
+3610,systemtap-client,GPLv2+
+3611,systemtap-devel,GPLv2+
+3612,systemtap-exporter,GPLv2+
+3613,systemtap-initscript,GPLv2+
+3614,systemtap-runtime,GPLv2+
+3615,systemtap-runtime-java,GPLv2+
+3616,systemtap-runtime-python3,GPLv2+
+3617,systemtap-runtime-virtguest,GPLv2+
+3618,systemtap-runtime-virthost,GPLv2+
+3619,systemtap-sdt-devel,GPLv2+ and Public Domain
+3620,systemtap-server,GPLv2+
+3621,taglib,LGPLv2 or MPLv1.1
+3622,tagsoup,ASL 2.0 and (GPLv2+ or AFL)
+3623,tang,GPLv3+
+3624,targetcli,ASL 2.0
+3625,tbb,ASL 2.0
+3626,tbb-devel,ASL 2.0
+3627,tbb-doc,ASL 2.0
+3628,tcl,TCL
+3629,tcl-brlapi,LGPLv2+
+3630,tcpdump,BSD with advertising
+3631,tcsh,BSD
+3632,teckit,LGPLv2+ or CPL
+3633,telnet,BSD
+3634,telnet-server,BSD
+3635,tex-fonts-hebrew,GPL+ and LPPL
+3636,texlive,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3637,texlive-adjustbox,LPPL
+3638,texlive-ae,LPPL
+3639,texlive-algorithms,LGPLv2+
+3640,texlive-amscls,LPPL
+3641,texlive-amsfonts,OFSFLD
+3642,texlive-amsmath,LPPL
+3643,texlive-anyfontsize,LPPL
+3644,texlive-anysize,Public Domain
+3645,texlive-appendix,LPPL
+3646,texlive-arabxetex,LPPL
+3647,texlive-arphic,Freely redistributable without restriction
+3648,texlive-attachfile,LPPL 1.3
+3649,texlive-avantgar,GPL+
+3650,texlive-awesomebox,WTFPL
+3651,texlive-babel,LPPL
+3652,texlive-babel-english,LPPL 1.3
+3653,texlive-babelbib,LPPL
+3654,texlive-base,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3655,texlive-beamer,GPL+
+3656,texlive-bera,Bitstream vera
+3657,texlive-beton,LPPL
+3658,texlive-bibtex,Knuth
+3659,texlive-bibtopic,GPL+
+3660,texlive-bidi,LPPL 1.3
+3661,texlive-bigfoot,GPLv2+
+3662,texlive-bookman,GPL+
+3663,texlive-booktabs,GPL+
+3664,texlive-breakurl,LPPL
+3665,texlive-breqn,LPPL 1.3
+3666,texlive-capt-of,LPPL
+3667,texlive-caption,LPPL 1.3
+3668,texlive-carlisle,LPPL
+3669,texlive-changebar,LPPL
+3670,texlive-changepage,LPPL 1.3
+3671,texlive-charter,Copyright only
+3672,texlive-chngcntr,LPPL
+3673,texlive-cite,Copyright only
+3674,texlive-cjk,GPL+
+3675,texlive-classpack,LPPL 1.3
+3676,texlive-cm,Knuth
+3677,texlive-cm-lgc,GPL+
+3678,texlive-cm-super,GPL+
+3679,texlive-cmap,LPPL
+3680,texlive-cmextra,LPPL
+3681,texlive-cns,LPPL
+3682,texlive-collectbox,LPPL
+3683,texlive-collection-basic,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3684,texlive-collection-fontsrecommended,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3685,texlive-collection-htmlxml,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3686,texlive-collection-latex,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3687,texlive-collection-latexrecommended,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3688,texlive-collection-xetex,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3689,texlive-colortbl,LPPL
+3690,texlive-courier,GPL+
+3691,texlive-crop,LPPL
+3692,texlive-csquotes,LPPL
+3693,texlive-ctable,LPPL
+3694,texlive-ctablestack,LPPL
+3695,texlive-currfile,LPPL 1.3
+3696,texlive-datetime,LPPL 1.3
+3697,texlive-dvipdfmx,GPL+
+3698,texlive-dvipng,LGPLv2+
+3699,texlive-dvips,GPL+
+3700,texlive-dvisvgm,GPL+
+3701,texlive-ec,ec
+3702,texlive-eepic,Public Domain
+3703,texlive-enctex,GPL+
+3704,texlive-enumitem,LPPL
+3705,texlive-environ,LPPL
+3706,texlive-epsf,Public Domain
+3707,texlive-epstopdf,BSD
+3708,texlive-eqparbox,LPPL 1.3
+3709,texlive-eso-pic,LPPL 1.2
+3710,texlive-etex,Knuth
+3711,texlive-etex-pkg,LPPL
+3712,texlive-etoolbox,LPPL 1.3
+3713,texlive-euenc,LPPL 1.3
+3714,texlive-euler,LPPL
+3715,texlive-euro,LPPL
+3716,texlive-eurosym,Eurosym
+3717,texlive-extsizes,LPPL
+3718,texlive-fancybox,LPPL 1.2
+3719,texlive-fancyhdr,LPPL
+3720,texlive-fancyref,GPL+
+3721,texlive-fancyvrb,LPPL
+3722,texlive-filecontents,LPPL
+3723,texlive-filehook,LPPL 1.3
+3724,texlive-finstrut,LPPL 1.3
+3725,texlive-fix2col,LPPL
+3726,texlive-fixlatvian,LPPL 1.3
+3727,texlive-float,LPPL
+3728,texlive-fmtcount,LPPL 1.3
+3729,texlive-fncychap,LPPL 1.3
+3730,texlive-fontawesome,LPPL 1.3
+3731,texlive-fontbook,LPPL 1.3
+3732,texlive-fonts-tlwg,GPL+
+3733,texlive-fontspec,LPPL 1.3
+3734,texlive-fontware,LPPL
+3735,texlive-fontwrap,GPL+
+3736,texlive-footmisc,LPPL 1.3
+3737,texlive-fp,LPPL
+3738,texlive-fpl,GPL+
+3739,texlive-framed,Copyright only
+3740,texlive-garuda-c90,LPPL
+3741,texlive-geometry,LPPL
+3742,texlive-glyphlist,LPPL
+3743,texlive-graphics,LPPL 1.3
+3744,texlive-graphics-cfg,Public Domain
+3745,texlive-graphics-def,LPPL
+3746,texlive-gsftopk,GPL+
+3747,texlive-helvetic,GPL+
+3748,texlive-hyperref,LPPL
+3749,texlive-hyph-utf8,Copyright only
+3750,texlive-hyphen-base,LPPL
+3751,texlive-hyphenat,LPPL 1.3
+3752,texlive-ifetex,LPPL 1.3
+3753,texlive-ifluatex,LPPL 1.3
+3754,texlive-ifmtarg,LPPL
+3755,texlive-ifoddpage,LPPL
+3756,texlive-iftex,LPPL 1.3
+3757,texlive-ifxetex,LPPL
+3758,texlive-import,Public Domain
+3759,texlive-index,LPPL
+3760,texlive-jadetex,MIT
+3761,texlive-jknapltx,GPL+
+3762,texlive-kastrup,LPPL
+3763,texlive-kerkis,LPPL
+3764,texlive-knuth-lib,Knuth
+3765,texlive-knuth-local,Knuth
+3766,texlive-koma-script,LPPL
+3767,texlive-kpathsea,LGPLv2+
+3768,texlive-l3experimental,LPPL 1.3
+3769,texlive-l3kernel,LPPL 1.3
+3770,texlive-l3packages,LPPL 1.3
+3771,texlive-lastpage,GPLv2+
+3772,texlive-latex,LPPL 1.3
+3773,texlive-latex-fonts,LPPL
+3774,texlive-latex2man,LPPL
+3775,texlive-latexconfig,LPPL
+3776,texlive-lettrine,LPPL
+3777,texlive-lib,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3778,texlive-linegoal,LPPL 1.3
+3779,texlive-lineno,LPPL
+3780,texlive-listings,LPPL
+3781,texlive-lm,GFSL
+3782,texlive-lm-math,LPPL
+3783,texlive-ltabptch,LPPL
+3784,texlive-ltxmisc,Public Domain
+3785,texlive-lua-alt-getopt,MIT
+3786,texlive-lualatex-math,LPPL 1.3
+3787,texlive-lualibs,GPLv2+
+3788,texlive-luaotfload,GPLv2+
+3789,texlive-luatex,GPLv2+
+3790,texlive-luatex85,LPPL
+3791,texlive-luatexbase,Public Domain
+3792,texlive-makecmds,LPPL
+3793,texlive-makeindex,MakeIndex
+3794,texlive-manfnt-font,LPPL
+3795,texlive-marginnote,LPPL
+3796,texlive-marvosym,OFSFLD
+3797,texlive-mathpazo,GPL+
+3798,texlive-mathspec,LPPL
+3799,texlive-mathtools,LPPL 1.3
+3800,texlive-mdwtools,GPL+
+3801,texlive-memoir,LPPL
+3802,texlive-metafont,Knuth
+3803,texlive-metalogo,LPPL
+3804,texlive-metapost,LGPLv2+
+3805,texlive-mflogo,LPPL
+3806,texlive-mflogo-font,Knuth
+3807,texlive-mfnfss,LPPL
+3808,texlive-mfware,Knuth
+3809,texlive-microtype,LPPL
+3810,texlive-mnsymbol,Public Domain
+3811,texlive-mparhack,GPL+
+3812,texlive-mptopdf,LPPL
+3813,texlive-ms,LPPL
+3814,texlive-multido,LPPL
+3815,texlive-multirow,LPPL
+3816,texlive-natbib,LPPL
+3817,texlive-ncctools,LPPL
+3818,texlive-ncntrsbk,GPL+
+3819,texlive-needspace,LPPL
+3820,texlive-norasi-c90,LPPL
+3821,texlive-ntgclass,LPPL
+3822,texlive-oberdiek,LPPL
+3823,texlive-overpic,LPPL
+3824,texlive-palatino,GPL+
+3825,texlive-paralist,LPPL
+3826,texlive-parallel,LPPL
+3827,texlive-parskip,LPPL
+3828,texlive-passivetex,MIT
+3829,texlive-pdfpages,LPPL
+3830,texlive-pdftex,GPL+
+3831,texlive-pgf,LPPL 1.3
+3832,texlive-philokalia,OFL
+3833,texlive-placeins,Public Domain
+3834,texlive-plain,LPPL
+3835,texlive-polyglossia,LPPL 1.3
+3836,texlive-powerdot,LPPL 1.3
+3837,texlive-preprint,LPPL
+3838,texlive-psfrag,psfrag
+3839,texlive-pslatex,LPPL
+3840,texlive-psnfss,LPPL
+3841,texlive-pspicture,LPPL
+3842,texlive-pst-3d,LPPL
+3843,texlive-pst-blur,LPPL
+3844,texlive-pst-coil,LPPL
+3845,texlive-pst-eps,LPPL
+3846,texlive-pst-fill,LPPL
+3847,texlive-pst-grad,LPPL
+3848,texlive-pst-math,LPPL
+3849,texlive-pst-node,LPPL
+3850,texlive-pst-plot,LPPL
+3851,texlive-pst-slpe,LPPL
+3852,texlive-pst-text,LPPL
+3853,texlive-pst-tree,LPPL
+3854,texlive-pstricks,LPPL 1.3
+3855,texlive-pstricks-add,LPPL
+3856,texlive-ptext,LPPL 1.2
+3857,texlive-pxfonts,GPL+
+3858,texlive-qstest,LPPL
+3859,texlive-rcs,GPL+
+3860,texlive-realscripts,LPPL 1.3
+3861,texlive-rsfs,rsfs
+3862,texlive-sansmath,Public Domain
+3863,texlive-sauerj,LPPL
+3864,texlive-scheme-basic,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3865,texlive-section,LPPL
+3866,texlive-sectsty,LPPL
+3867,texlive-seminar,LPPL 1.2
+3868,texlive-sepnum,LPPL
+3869,texlive-setspace,Copyright only
+3870,texlive-showexpl,LPPL
+3871,texlive-soul,LPPL
+3872,texlive-stmaryrd,LPPL
+3873,texlive-subfig,LPPL
+3874,texlive-subfigure,LPPL
+3875,texlive-svn-prov,LPPL
+3876,texlive-symbol,GPL+
+3877,texlive-t2,LPPL
+3878,texlive-tabu,LPPL 1.3
+3879,texlive-tabulary,LPPL
+3880,texlive-tetex,GPL+ and GPLv2+ and LPPL
+3881,texlive-tex,Knuth
+3882,texlive-tex-gyre,GFSL
+3883,texlive-tex-gyre-math,LPPL
+3884,texlive-tex-ini-files,Public Domain
+3885,texlive-tex4ht,LPPL
+3886,texlive-texconfig,LPPL
+3887,texlive-texlive-common-doc,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+3888,texlive-texlive-docindex,LPPL
+3889,texlive-texlive-en,LPPL
+3890,texlive-texlive-msg-translations,LPPL
+3891,texlive-texlive-scripts,LPPL
+3892,texlive-texlive.infra,LPPL
+3893,texlive-textcase,LPPL
+3894,texlive-textpos,GPL+
+3895,texlive-threeparttable,Threeparttable
+3896,texlive-thumbpdf,LPPL
+3897,texlive-times,GPL+
+3898,texlive-tipa,LPPL
+3899,texlive-titlesec,LPPL
+3900,texlive-titling,LPPL
+3901,texlive-tocloft,LPPL 1.3
+3902,texlive-tools,LPPL
+3903,texlive-trimspaces,LPPL
+3904,texlive-txfonts,GPL+
+3905,texlive-type1cm,LPPL
+3906,texlive-typehtml,LPPL
+3907,texlive-ucharclasses,Public Domain
+3908,texlive-ucs,LPPL 1.3
+3909,texlive-uhc,LPPL
+3910,texlive-ulem,Copyright only
+3911,texlive-underscore,LPPL
+3912,texlive-unicode-data,LPPL and Unicode
+3913,texlive-unicode-math,LPPL 1.3
+3914,texlive-unisugar,LPPL 1.3
+3915,texlive-updmap-map,Public Domain
+3916,texlive-upquote,LPPL 1.2
+3917,texlive-url,LPPL
+3918,texlive-utopia,Utopia
+3919,texlive-varwidth,LPPL
+3920,texlive-wadalab,Wadalab
+3921,texlive-was,LPPL
+3922,texlive-wasy,Public Domain
+3923,texlive-wasy2-ps,Public Domain
+3924,texlive-wasysym,LPPL
+3925,texlive-wrapfig,LPPL
+3926,texlive-xcolor,LPPL
+3927,texlive-xdvi,MIT
+3928,texlive-xecjk,LPPL
+3929,texlive-xecolor,LPPL 1.3
+3930,texlive-xecyr,LPPL
+3931,texlive-xeindex,LPPL
+3932,texlive-xepersian,LPPL 1.3
+3933,texlive-xesearch,LPPL
+3934,texlive-xetex,MIT
+3935,texlive-xetex-itrans,LPPL 1.3
+3936,texlive-xetex-pstricks,Public Domain
+3937,texlive-xetex-tibetan,LPPL
+3938,texlive-xetexconfig,LPPL
+3939,texlive-xetexfontinfo,ASL 2.0
+3940,texlive-xifthen,LPPL
+3941,texlive-xkeyval,LPPL
+3942,texlive-xltxtra,LPPL
+3943,texlive-xmltex,LPPL
+3944,texlive-xmltexconfig,LPPL
+3945,texlive-xstring,LPPL
+3946,texlive-xtab,LPPL
+3947,texlive-xunicode,LPPL 1.3
+3948,texlive-zapfchan,GPL+
+3949,texlive-zapfding,GPL+
+3950,tftp,BSD
+3951,tftp-server,BSD
+3952,thai-scalable-fonts-common,GPLv2+ and Bitstream Vera
+3953,thai-scalable-garuda-fonts,GPLv2+ and Bitstream Vera
+3954,thai-scalable-kinnari-fonts,GPLv2+ and Bitstream Vera
+3955,thai-scalable-laksaman-fonts,GPLv2+ and Bitstream Vera
+3956,thai-scalable-loma-fonts,GPLv2+ and Bitstream Vera
+3957,thai-scalable-norasi-fonts,GPLv2+ and Bitstream Vera
+3958,thai-scalable-purisa-fonts,GPLv2+ and Bitstream Vera
+3959,thai-scalable-sawasdee-fonts,GPLv2+ and Bitstream Vera
+3960,thai-scalable-tlwgmono-fonts,GPLv2+ and Bitstream Vera
+3961,thai-scalable-tlwgtypewriter-fonts,GPLv2+ and Bitstream Vera
+3962,thai-scalable-tlwgtypist-fonts,GPLv2+ and Bitstream Vera
+3963,thai-scalable-tlwgtypo-fonts,GPLv2+ and Bitstream Vera
+3964,thai-scalable-umpush-fonts,GPLv2+ and Bitstream Vera
+3965,thai-scalable-waree-fonts,GPLv2+ and Bitstream Vera
+3966,theora-tools,BSD
+3967,thunderbird,MPLv1.1 or GPLv2+ or LGPLv2+
+3968,tibetan-machine-uni-fonts,GPLv3+ with exceptions
+3969,tigervnc,GPLv2+
+3970,tigervnc-icons,GPLv2+
+3971,tigervnc-license,GPLv2+
+3972,tigervnc-server,GPLv2+
+3973,tigervnc-server-applet,GPLv2+
+3974,tigervnc-server-minimal,GPLv2+
+3975,tigervnc-server-module,GPLv2+
+3976,tinycdb,Public Domain
+3977,tix,TCL
+3978,tk,TCL
+3979,tk-devel,TCL
+3980,tlog,GPLv2+
+3981,tog-pegasus,MIT
+3982,tog-pegasus-libs,MIT
+3983,tokyocabinet,LGPLv2+
+3984,tomcatjss,LGPLv2+
+3985,toolbox,ASL 2.0
+3986,torque-libs,OpenPBS and TORQUEv1.1
+3987,totem,GPLv2+ with exceptions
+3988,totem-nautilus,GPLv2+ with exceptions
+3989,totem-pl-parser,LGPLv2+
+3990,tracker,GPLv2+
+3991,tracker-miners,GPLv2+ and LGPLv2+
+3992,ttmkfdir,LGPLv2+
+3993,tuned-gtk,GPLv2+
+3994,tuned-utils,GPLv2+
+3995,tuned-utils-systemtap,GPLv2+
+3996,turbojpeg,IJG
+3997,twolame-libs,LGPLv2+
+3998,tzdata-java,Public Domain
+3999,ucs-miscfixed-fonts,Public Domain
+4000,ucx,BSD
+4001,udica,GPLv3+
+4002,udisks2,GPLv2+
+4003,udisks2-iscsi,LGPLv2+
+4004,udisks2-lvm2,LGPLv2+
+4005,unbound,BSD
+4006,unbound-devel,BSD
+4007,unbound-libs,BSD
+4008,unicode-ucd,MIT
+4009,unit-api,BSD
+4010,unit-api-javadoc,BSD
+4011,unixODBC,GPLv2+ and LGPLv2+
+4012,unixODBC-devel,GPLv2+ and LGPLv2+
+4013,uom-lib,BSD
+4014,uom-lib-javadoc,BSD
+4015,uom-parent,BSD
+4016,uom-se,BSD
+4017,uom-se-javadoc,BSD
+4018,uom-systems,BSD
+4019,uom-systems-javadoc,BSD
+4020,upower,GPLv2+
+4021,urlview,GPLv2+
+4022,urw-base35-bookman-fonts,AGPLv3
+4023,urw-base35-c059-fonts,AGPLv3
+4024,urw-base35-d050000l-fonts,AGPLv3
+4025,urw-base35-fonts,AGPLv3
+4026,urw-base35-fonts-common,AGPLv3
+4027,urw-base35-gothic-fonts,AGPLv3
+4028,urw-base35-nimbus-mono-ps-fonts,AGPLv3
+4029,urw-base35-nimbus-roman-fonts,AGPLv3
+4030,urw-base35-nimbus-sans-fonts,AGPLv3
+4031,urw-base35-p052-fonts,AGPLv3
+4032,urw-base35-standard-symbols-ps-fonts,AGPLv3
+4033,urw-base35-z003-fonts,AGPLv3
+4034,usbguard,GPLv2+
+4035,usbguard-dbus,GPLv2+
+4036,usbguard-tools,GPLv2+
+4037,usbmuxd,GPLv3+ or GPLv2+
+4038,usbredir,LGPLv2+
+4039,usermode-gtk,GPLv2+
+4040,utf8proc,Unicode and MIT
+4041,uuid,MIT
+4042,valgrind,GPLv2+
+4043,valgrind-devel,GPLv2+
+4044,varnish,BSD
+4045,varnish-devel,BSD
+4046,varnish-docs,BSD
+4047,varnish-modules,BSD
+4048,velocity,ASL 2.0
+4049,vhostmd,GPLv2+
+4050,vim-common,Vim and MIT
+4051,vim-enhanced,Vim and MIT
+4052,vim-filesystem,Vim and MIT
+4053,vim-X11,Vim and MIT
+4054,vinagre,GPLv2+
+4055,vino,GPLv2+
+4056,virt-dib,GPLv2+
+4057,virt-install,GPLv2+
+4058,virt-manager,GPLv2+
+4059,virt-manager-common,GPLv2+
+4060,virt-p2v-maker,GPLv2+
+4061,virt-top,GPLv2+
+4062,virt-v2v,GPLv2+
+4063,virt-viewer,GPLv2+
+4064,virt-who,GPLv2+
+4065,virtio-win,BSD and Apache and GPLv2
+4066,voikko-tools,GPLv2+
+4067,volume_key,GPLv2 and (MPLv1.1 or GPLv2 or LGPLv2)
+4068,volume_key-devel,GPLv2 and (MPLv1.1 or GPLv2 or LGPLv2)
+4069,volume_key-libs,GPLv2 and (MPLv1.1 or GPLv2 or LGPLv2)
+4070,vorbis-tools,GPLv2
+4071,vsftpd,GPLv2 with exceptions
+4072,vte-profile,GPLv3+
+4073,vte291,LGPLv2+
+4074,vulkan-headers,ASL 2.0
+4075,vulkan-loader,ASL 2.0
+4076,vulkan-loader-devel,ASL 2.0
+4077,vulkan-tools,ASL 2.0
+4078,vulkan-validation-layers,ASL 2.0
+4079,WALinuxAgent,ASL 2.0
+4080,wavpack,BSD
+4081,wayland-devel,MIT
+4082,wayland-protocols-devel,MIT
+4083,webkit2gtk3,LGPLv2
+4084,webkit2gtk3-devel,LGPLv2
+4085,webkit2gtk3-jsc,LGPLv2
+4086,webkit2gtk3-jsc-devel,LGPLv2
+4087,webkit2gtk3-plugin-process-gtk2,LGPLv2
+4088,webrtc-audio-processing,BSD and MIT
+4089,wget,GPLv3+
+4090,whois,GPLv2+
+4091,whois-nls,GPLv2+
+4092,wireshark,GPL+
+4093,wireshark-cli,GPL+
+4094,wodim,GPLv2
+4095,woff2,MIT
+4096,wqy-microhei-fonts,ASL 2.0 or GPLv3 with exceptions
+4097,wqy-unibit-fonts,GPLv2 with exceptions
+4098,wsmancli,BSD
+4099,x3270-x11,BSD
+4100,xalan-j2,ASL 2.0 and W3C
+4101,Xaw3d,MIT and GPLv3+
+4102,xcb-util,MIT
+4103,xcb-util-image,MIT
+4104,xcb-util-keysyms,MIT
+4105,xcb-util-renderutil,MIT
+4106,xcb-util-wm,MIT
+4107,xdg-desktop-portal,LGPLv2+
+4108,xdg-desktop-portal-gtk,LGPLv2+
+4109,xdg-user-dirs,GPLv2+ and MIT
+4110,xdg-user-dirs-gtk,GPL+
+4111,xdg-utils,MIT
+4112,xerces-j2,ASL 2.0 and W3C
+4113,xinetd,xinetd
+4114,xkeyboard-config,MIT
+4115,xkeyboard-config-devel,MIT
+4116,xml-commons-apis,ASL 2.0 and W3C and Public Domain
+4117,xml-commons-resolver,ASL 2.0
+4118,xmlsec1,MIT
+4119,xmlsec1-nss,MIT
+4120,xmlsec1-openssl,MIT
+4121,xmlstreambuffer,CDDL or GPLv2 with exceptions
+4122,xmlto,GPLv2+
+4123,xorg-sgml-doctools,MIT
+4124,xorg-x11-docs,MIT
+4125,xorg-x11-drivers,MIT
+4126,xorg-x11-drv-ati,MIT
+4127,xorg-x11-drv-dummy,MIT
+4128,xorg-x11-drv-evdev,MIT
+4129,xorg-x11-drv-evdev-devel,MIT
+4130,xorg-x11-drv-fbdev,MIT
+4131,xorg-x11-drv-intel,MIT
+4132,xorg-x11-drv-libinput,MIT
+4133,xorg-x11-drv-nouveau,MIT
+4134,xorg-x11-drv-qxl,MIT
+4135,xorg-x11-drv-v4l,MIT
+4136,xorg-x11-drv-vesa,MIT
+4137,xorg-x11-drv-vmware,MIT
+4138,xorg-x11-drv-wacom,GPLv2+
+4139,xorg-x11-drv-wacom-serial-support,GPLv2+
+4140,xorg-x11-font-utils,MIT
+4141,xorg-x11-fonts-100dpi,MIT and Lucida and Public Domain
+4142,xorg-x11-fonts-75dpi,MIT and Lucida and Public Domain
+4143,xorg-x11-fonts-cyrillic,MIT and Lucida and Public Domain
+4144,xorg-x11-fonts-ethiopic,MIT and Lucida and Public Domain
+4145,xorg-x11-fonts-ISO8859-1-100dpi,MIT and Lucida and Public Domain
+4146,xorg-x11-fonts-ISO8859-1-75dpi,MIT and Lucida and Public Domain
+4147,xorg-x11-fonts-ISO8859-14-100dpi,MIT and Lucida and Public Domain
+4148,xorg-x11-fonts-ISO8859-14-75dpi,MIT and Lucida and Public Domain
+4149,xorg-x11-fonts-ISO8859-15-100dpi,MIT and Lucida and Public Domain
+4150,xorg-x11-fonts-ISO8859-15-75dpi,MIT and Lucida and Public Domain
+4151,xorg-x11-fonts-ISO8859-2-100dpi,MIT and Lucida and Public Domain
+4152,xorg-x11-fonts-ISO8859-2-75dpi,MIT and Lucida and Public Domain
+4153,xorg-x11-fonts-ISO8859-9-100dpi,MIT and Lucida and Public Domain
+4154,xorg-x11-fonts-ISO8859-9-75dpi,MIT and Lucida and Public Domain
+4155,xorg-x11-fonts-misc,MIT and Lucida and Public Domain
+4156,xorg-x11-fonts-Type1,MIT and Lucida and Public Domain
+4157,xorg-x11-proto-devel,MIT
+4158,xorg-x11-server-common,MIT
+4159,xorg-x11-server-utils,MIT
+4160,xorg-x11-server-Xdmx,MIT
+4161,xorg-x11-server-Xephyr,MIT
+4162,xorg-x11-server-Xnest,MIT
+4163,xorg-x11-server-Xorg,MIT
+4164,xorg-x11-server-Xspice,MIT
+4165,xorg-x11-server-Xvfb,MIT and GPLv2
+4166,xorg-x11-server-Xwayland,MIT
+4167,xorg-x11-utils,MIT
+4168,xorg-x11-xauth,MIT
+4169,xorg-x11-xbitmaps,MIT
+4170,xorg-x11-xinit,MIT
+4171,xorg-x11-xinit-session,MIT
+4172,xorg-x11-xkb-utils,MIT
+4173,xorriso,GPLv2+
+4174,xrestop,GPLv2+
+4175,xsane,GPLv2+ and LGPLv2+
+4176,xsane-common,GPLv2+ and LGPLv2+
+4177,xsane-gimp,GPLv2+ and LGPLv2+
+4178,xsom,CDDL-1.1 or GPLv2 with exceptions
+4179,xterm,MIT
+4180,xterm-resize,MIT
+4181,yajl,ISC
+4182,yelp,LGPLv2+ and ASL 2.0 and GPLv2+
+4183,yelp-libs,LGPLv2+ and ASL 2.0 and GPLv2+
+4184,yelp-tools,GPLv2+
+4185,yelp-xsl,LGPLv2+ and GPLv2+
+4186,yp-tools,GPLv2
+4187,ypbind,GPLv2
+4188,ypserv,GPLv2
+4189,zenity,LGPLv2+
+4190,zsh-html,MIT
+4191,zstd,BSD and GPLv2
+4192,zziplib,LGPLv2+ or MPLv1.1
+4193,zziplib-utils,LGPLv2+ or MPLv1.1
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/table-3.csv b/tools/redhat_package_manifest_scraper/data/redhat8/table-3.csv
new file mode 100644
index 0000000..dcb01f4
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/table-3.csv
@@ -0,0 +1,60 @@
+,Module,Stream,Packages
+0,389-ds,1.4,"389-ds-base, 389-ds-base-debuginfo, 389-ds-base-debugsource, 389-ds-base-devel, 389-ds-base-legacy-tools, 389-ds-base-legacy-tools-debuginfo, 389-ds-base-libs, 389-ds-base-libs-debuginfo, 389-ds-base-snmp, 389-ds-base-snmp-debuginfo, python3-lib389"
+1,ant,1.10,"ant, ant-lib"
+2,container-tools,1.0,"buildah, buildah-debuginfo, buildah-debugsource, container-selinux, containernetworking-plugins, containernetworking-plugins-debuginfo, containernetworking-plugins-debugsource, containers-common, crit, criu, criu-debuginfo, criu-debugsource, fuse-overlayfs, fuse-overlayfs-debuginfo, fuse-overlayfs-debugsource, oci-systemd-hook, oci-systemd-hook-debuginfo, oci-systemd-hook-debugsource, oci-umount, oci-umount-debuginfo, oci-umount-debugsource, podman, podman-debuginfo, podman-debugsource, podman-docker, python3-criu, runc, runc-debuginfo, runc-debugsource, skopeo, skopeo-debuginfo, skopeo-debugsource, slirp4netns, slirp4netns-debuginfo, slirp4netns-debugsource"
+3,container-tools,2.0,"buildah, buildah-debuginfo, buildah-debugsource, buildah-tests, buildah-tests-debuginfo, cockpit-podman, conmon, container-selinux, containernetworking-plugins, containernetworking-plugins-debuginfo, containernetworking-plugins-debugsource, containers-common, crit, criu, criu-debuginfo, criu-debugsource, fuse-overlayfs, fuse-overlayfs-debuginfo, fuse-overlayfs-debugsource, podman, podman-debuginfo, podman-debugsource, podman-docker, podman-remote, podman-remote-debuginfo, podman-tests, python-podman-api, python3-criu, runc, runc-debuginfo, runc-debugsource, skopeo, skopeo-debuginfo, skopeo-debugsource, skopeo-tests, slirp4netns, slirp4netns-debuginfo, slirp4netns-debugsource, toolbox, udica"
+4,container-tools,rhel8,"buildah, buildah-debuginfo, buildah-debugsource, buildah-tests, buildah-tests-debuginfo, cockpit-podman, conmon, container-selinux, containernetworking-plugins, containernetworking-plugins-debuginfo, containernetworking-plugins-debugsource, containers-common, crit, criu, criu-debuginfo, criu-debugsource, fuse-overlayfs, fuse-overlayfs-debuginfo, fuse-overlayfs-debugsource, podman, podman-debuginfo, podman-debugsource, podman-docker, podman-remote, podman-remote-debuginfo, podman-tests, python-podman-api, python3-criu, runc, runc-debuginfo, runc-debugsource, skopeo, skopeo-debuginfo, skopeo-debugsource, skopeo-tests, slirp4netns, slirp4netns-debuginfo, slirp4netns-debugsource, toolbox, udica"
+5,freeradius,3.0,"freeradius, freeradius-debuginfo, freeradius-debugsource, freeradius-devel, freeradius-doc, freeradius-krb5, freeradius-krb5-debuginfo, freeradius-ldap, freeradius-ldap-debuginfo, freeradius-mysql, freeradius-mysql-debuginfo, freeradius-perl, freeradius-perl-debuginfo, freeradius-postgresql, freeradius-postgresql-debuginfo, freeradius-rest, freeradius-rest-debuginfo, freeradius-sqlite, freeradius-sqlite-debuginfo, freeradius-unixODBC, freeradius-unixODBC-debuginfo, freeradius-utils, freeradius-utils-debuginfo"
+6,gimp,2.8,"gimp, gimp-debuginfo, gimp-debugsource, gimp-devel, gimp-devel-tools, gimp-devel-tools-debuginfo, gimp-libs, gimp-libs-debuginfo, pygobject2, pygobject2-codegen, pygobject2-debuginfo, pygobject2-debugsource, pygobject2-devel, pygobject2-doc, pygtk2, pygtk2-codegen, pygtk2-debuginfo, pygtk2-debugsource, pygtk2-devel, pygtk2-doc, python2-cairo, python2-cairo-debuginfo, python2-cairo-devel, python2-pycairo"
+7,go-toolset,rhel8,"delve, delve-debuginfo, delve-debugsource, go-toolset, golang, golang-bin, golang-docs, golang-misc, golang-race, golang-src, golang-tests"
+8,httpd,2.4,"httpd, httpd-debuginfo, httpd-debugsource, httpd-devel, httpd-filesystem, httpd-manual, httpd-tools, httpd-tools-debuginfo, mod_http2, mod_http2-debuginfo, mod_http2-debugsource, mod_ldap, mod_ldap-debuginfo, mod_md, mod_md-debuginfo, mod_md-debugsource, mod_proxy_html, mod_proxy_html-debuginfo, mod_session, mod_session-debuginfo, mod_ssl, mod_ssl-debuginfo"
+9,idm,client,"ipa, ipa-client, ipa-client-common, ipa-client-debuginfo, ipa-client-samba, ipa-common, ipa-debuginfo, ipa-debugsource, ipa-healthcheck, ipa-healthcheck-core, ipa-python-compat, python-jwcrypto, python-qrcode, python-yubico, python3-ipaclient, python3-ipalib, python3-jwcrypto, python3-pyusb, python3-qrcode, python3-qrcode-core, python3-yubico, pyusb"
+10,idm,DL1,"bind-dyndb-ldap, bind-dyndb-ldap-debuginfo, bind-dyndb-ldap-debugsource, custodia, ipa, ipa-client, ipa-client-common, ipa-client-debuginfo, ipa-client-samba, ipa-common, ipa-debuginfo, ipa-debugsource, ipa-healthcheck, ipa-healthcheck-core, ipa-idoverride-memberof, ipa-idoverride-memberof-plugin, ipa-python-compat, ipa-server, ipa-server-common, ipa-server-debuginfo, ipa-server-dns, ipa-server-trust-ad, ipa-server-trust-ad-debuginfo, opendnssec, opendnssec-debuginfo, opendnssec-debugsource, python-jwcrypto, python-kdcproxy, python-qrcode, python-yubico, python3-custodia, python3-ipaclient, python3-ipalib, python3-ipaserver, python3-jwcrypto, python3-kdcproxy, python3-pyusb, python3-qrcode, python3-qrcode-core, python3-yubico, pyusb, slapi-nis, slapi-nis-debuginfo, slapi-nis-debugsource, softhsm, softhsm-debuginfo, softhsm-debugsource, softhsm-devel"
+11,inkscape,0.92.3,"inkscape, inkscape-debuginfo, inkscape-debugsource, inkscape-docs, inkscape-view, inkscape-view-debuginfo, python-scour, python2-scour"
+12,javapackages-runtime,201801,"javapackages-filesystem, javapackages-tools"
+13,jmc,rhel8,"directory-maven-plugin, directory-maven-plugin-javadoc, ee4j-parent, jaf, jaf-javadoc, jmc, jmc-core, jmc-core-javadoc, owasp-java-encoder, owasp-java-encoder-javadoc"
+14,libselinux-python,2.8,"libselinux, libselinux-python, libselinux-python-debuginfo"
+15,llvm-toolset,rhel8,"clang, clang-analyzer, clang-debuginfo, clang-debugsource, clang-devel, clang-libs, clang-libs-debuginfo, clang-tools-extra, clang-tools-extra-debuginfo, compiler-rt, compiler-rt-debuginfo, compiler-rt-debugsource, git-clang-format, libomp, libomp-debuginfo, libomp-debugsource, libomp-devel, libomp-test, lld, lld-debuginfo, lld-debugsource, lld-devel, lld-libs, lld-libs-debuginfo, lld-test, lld-test-debuginfo, lldb, lldb-debuginfo, lldb-debugsource, lldb-devel, llvm, llvm-debuginfo, llvm-debugsource, llvm-devel, llvm-devel-debuginfo, llvm-doc, llvm-googletest, llvm-libs, llvm-libs-debuginfo, llvm-static, llvm-test, llvm-test-debuginfo, llvm-toolset, python-lit, python3-clang, python3-lit, python3-lldb"
+16,mailman,2.1,"mailman, mailman-debuginfo, mailman-debugsource"
+17,mariadb,10.3,"galera, galera-debuginfo, galera-debugsource, Judy, Judy-debuginfo, Judy-debugsource, mariadb, mariadb-backup, mariadb-backup-debuginfo, mariadb-common, mariadb-debuginfo, mariadb-debugsource, mariadb-devel, mariadb-embedded, mariadb-embedded-debuginfo, mariadb-embedded-devel, mariadb-errmsg, mariadb-gssapi-server, mariadb-gssapi-server-debuginfo, mariadb-oqgraph-engine, mariadb-oqgraph-engine-debuginfo, mariadb-server, mariadb-server-debuginfo, mariadb-server-galera, mariadb-server-utils, mariadb-server-utils-debuginfo, mariadb-test, mariadb-test-debuginfo"
+18,maven,3.5,"aopalliance, apache-commons-cli, apache-commons-codec, apache-commons-io, apache-commons-lang3, apache-commons-logging, atinject, cdi-api, geronimo-annotation, glassfish-el, glassfish-el-api, google-guice, guava20, hawtjni, hawtjni-runtime, httpcomponents-client, httpcomponents-core, jansi, jansi-native, jboss-interceptors-1.2-api, jcl-over-slf4j, jsoup, maven, maven-lib, maven-resolver, maven-resolver-api, maven-resolver-connector-basic, maven-resolver-impl, maven-resolver-spi, maven-resolver-transport-wagon, maven-resolver-util, maven-shared-utils, maven-wagon, maven-wagon-file, maven-wagon-http, maven-wagon-http-shared, maven-wagon-provider-api, plexus-cipher, plexus-classworlds, plexus-containers, plexus-containers-component-annotations, plexus-interpolation, plexus-sec-dispatcher, plexus-utils, sisu, sisu-inject, sisu-plexus, slf4j"
+19,maven,3.6,"aopalliance, apache-commons-cli, apache-commons-codec, apache-commons-io, apache-commons-lang3, atinject, cdi-api, geronimo-annotation, google-guice, guava, httpcomponents-client, httpcomponents-core, jansi, jcl-over-slf4j, jsoup, jsr-305, maven, maven-lib, maven-openjdk11, maven-openjdk8, maven-resolver, maven-shared-utils, maven-wagon, plexus-cipher, plexus-classworlds, plexus-containers, plexus-containers-component-annotations, plexus-interpolation, plexus-sec-dispatcher, plexus-utils, sisu, slf4j"
+20,mercurial,4.8,"mercurial, mercurial-debuginfo, mercurial-debugsource, mercurial-hgk"
+21,mod_auth_openidc,2.3,"cjose, cjose-debuginfo, cjose-debugsource, cjose-devel, mod_auth_openidc, mod_auth_openidc-debuginfo, mod_auth_openidc-debugsource"
+22,mysql,8.0,"mecab, mecab-debuginfo, mecab-debugsource, mecab-ipadic, mecab-ipadic-EUCJP, mysql, mysql-common, mysql-debuginfo, mysql-debugsource, mysql-devel, mysql-devel-debuginfo, mysql-errmsg, mysql-libs, mysql-libs-debuginfo, mysql-server, mysql-server-debuginfo, mysql-test, mysql-test-debuginfo"
+23,nginx,1.14,"nginx, nginx-all-modules, nginx-debuginfo, nginx-debugsource, nginx-filesystem, nginx-mod-http-image-filter, nginx-mod-http-image-filter-debuginfo, nginx-mod-http-perl, nginx-mod-http-perl-debuginfo, nginx-mod-http-xslt-filter, nginx-mod-http-xslt-filter-debuginfo, nginx-mod-mail, nginx-mod-mail-debuginfo, nginx-mod-stream, nginx-mod-stream-debuginfo"
+24,nginx,1.16,"nginx, nginx-all-modules, nginx-debuginfo, nginx-debugsource, nginx-filesystem, nginx-mod-http-image-filter, nginx-mod-http-image-filter-debuginfo, nginx-mod-http-perl, nginx-mod-http-perl-debuginfo, nginx-mod-http-xslt-filter, nginx-mod-http-xslt-filter-debuginfo, nginx-mod-mail, nginx-mod-mail-debuginfo, nginx-mod-stream, nginx-mod-stream-debuginfo"
+25,nodejs,10,"nodejs, nodejs-debuginfo, nodejs-debugsource, nodejs-devel, nodejs-devel-debuginfo, nodejs-docs, nodejs-nodemon, nodejs-packaging, npm"
+26,nodejs,12,"nodejs, nodejs-debuginfo, nodejs-debugsource, nodejs-devel, nodejs-docs, nodejs-nodemon, nodejs-packaging, npm"
+27,parfait,0.5,"log4j12, log4j12-javadoc, parfait, parfait-examples, parfait-javadoc, pcp-parfait-agent, si-units, si-units-javadoc, unit-api, unit-api-javadoc, uom-lib, uom-lib-javadoc, uom-parent, uom-se, uom-se-javadoc, uom-systems, uom-systems-javadoc"
+28,perl,5.24,"perl, perl-Algorithm-Diff, perl-Archive-Tar, perl-Archive-Zip, perl-Attribute-Handlers, perl-autodie, perl-B-Debug, perl-bignum, perl-Carp, perl-Compress-Bzip2, perl-Compress-Bzip2-debuginfo, perl-Compress-Bzip2-debugsource, perl-Compress-Raw-Bzip2, perl-Compress-Raw-Bzip2-debuginfo, perl-Compress-Raw-Bzip2-debugsource, perl-Compress-Raw-Zlib, perl-Compress-Raw-Zlib-debuginfo, perl-Compress-Raw-Zlib-debugsource, perl-Config-Perl-V, perl-constant, perl-core, perl-CPAN, perl-CPAN-Meta, perl-CPAN-Meta-Requirements, perl-CPAN-Meta-YAML, perl-Data-Dumper, perl-Data-Dumper-debuginfo, perl-Data-Dumper-debugsource, perl-Data-OptList, perl-Data-Section, perl-DB_File, perl-DB_File-debuginfo, perl-DB_File-debugsource, perl-debuginfo, perl-debugsource, perl-devel, perl-Devel-Peek, perl-Devel-Peek-debuginfo, perl-Devel-PPPort, perl-Devel-PPPort-debuginfo, perl-Devel-PPPort-debugsource, perl-Devel-SelfStubber, perl-Devel-Size, perl-Devel-Size-debuginfo, perl-Devel-Size-debugsource, perl-Digest, perl-Digest-MD5, perl-Digest-MD5-debuginfo, perl-Digest-MD5-debugsource, perl-Digest-SHA, perl-Digest-SHA-debuginfo, perl-Digest-SHA-debugsource, perl-Encode, perl-Encode-debuginfo, perl-Encode-debugsource, perl-Encode-devel, perl-encoding, perl-Env, perl-Errno, perl-experimental, perl-Exporter, perl-ExtUtils-CBuilder, perl-ExtUtils-Command, perl-ExtUtils-Embed, perl-ExtUtils-Install, perl-ExtUtils-MakeMaker, perl-ExtUtils-Manifest, perl-ExtUtils-Miniperl, perl-ExtUtils-MM-Utils, perl-ExtUtils-ParseXS, perl-Fedora-VSP, perl-File-Fetch, perl-File-HomeDir, perl-File-Path, perl-File-Temp, perl-File-Which, perl-Filter, perl-Filter-debuginfo, perl-Filter-debugsource, perl-Filter-Simple, perl-generators, perl-Getopt-Long, perl-homedir, perl-HTTP-Tiny, perl-inc-latest, perl-interpreter, perl-IO, perl-IO-Compress, perl-IO-debuginfo, perl-IO-Socket-IP, perl-IO-Zlib, perl-IPC-Cmd, perl-IPC-System-Simple, perl-IPC-SysV, perl-IPC-SysV-debuginfo, perl-IPC-SysV-debugsource, perl-JSON-PP, perl-libnet, perl-libnetcfg, perl-libs, perl-libs-debuginfo, perl-local-lib, perl-Locale-Codes, perl-Locale-Maketext, perl-Locale-Maketext-Simple, perl-macros, perl-Math-BigInt, perl-Math-BigInt-FastCalc, perl-Math-BigInt-FastCalc-debuginfo, perl-Math-BigInt-FastCalc-debugsource, perl-Math-BigRat, perl-Math-Complex, perl-Memoize, perl-MIME-Base64, perl-MIME-Base64-debuginfo, perl-MIME-Base64-debugsource, perl-Module-Build, perl-Module-CoreList, perl-Module-CoreList-tools, perl-Module-Load, perl-Module-Load-Conditional, perl-Module-Loaded, perl-Module-Metadata, perl-MRO-Compat, perl-Net-Ping, perl-open, perl-Package-Generator, perl-Params-Check, perl-Params-Util, perl-Params-Util-debuginfo, perl-Params-Util-debugsource, perl-parent, perl-PathTools, perl-PathTools-debuginfo, perl-PathTools-debugsource, perl-Perl-OSType, perl-perlfaq, perl-PerlIO-via-QuotedPrint, perl-Pod-Checker, perl-Pod-Escapes, perl-Pod-Html, perl-Pod-Parser, perl-Pod-Perldoc, perl-Pod-Simple, perl-Pod-Usage, perl-podlators, perl-Scalar-List-Utils, perl-Scalar-List-Utils-debuginfo, perl-Scalar-List-Utils-debugsource, perl-SelfLoader, perl-Socket, perl-Socket-debuginfo, perl-Socket-debugsource, perl-Software-License, perl-Storable, perl-Storable-debuginfo, perl-Storable-debugsource, perl-Sub-Exporter, perl-Sub-Install, perl-Sys-Syslog, perl-Sys-Syslog-debuginfo, perl-Sys-Syslog-debugsource, perl-Term-ANSIColor, perl-Term-Cap, perl-Test, perl-Test-Harness, perl-Test-Simple, perl-tests, perl-Text-Balanced, perl-Text-Diff, perl-Text-Glob, perl-Text-ParseWords, perl-Text-Tabs+Wrap, perl-Text-Template, perl-Thread-Queue, perl-threads, perl-threads-debuginfo, perl-threads-debugsource, perl-threads-shared, perl-threads-shared-debuginfo, perl-threads-shared-debugsource, perl-Time-HiRes, perl-Time-HiRes-debuginfo, perl-Time-HiRes-debugsource, perl-Time-Local, perl-Time-Piece, perl-Time-Piece-debuginfo, perl-Unicode-Collate, perl-Unicode-Collate-debuginfo, perl-Unicode-Collate-debugsource, perl-Unicode-Normalize, perl-Unicode-Normalize-debuginfo, perl-Unicode-Normalize-debugsource, perl-URI, perl-utils, perl-version, perl-version-debuginfo, perl-version-debugsource"
+29,perl,5.26,"perl, perl-Algorithm-Diff, perl-Archive-Tar, perl-Archive-Zip, perl-Attribute-Handlers, perl-autodie, perl-B-Debug, perl-bignum, perl-Carp, perl-Compress-Bzip2, perl-Compress-Raw-Bzip2, perl-Compress-Raw-Zlib, perl-Config-Perl-V, perl-constant, perl-CPAN, perl-CPAN-Meta, perl-CPAN-Meta-Requirements, perl-CPAN-Meta-YAML, perl-Data-Dumper, perl-Data-OptList, perl-Data-Section, perl-DB_File, perl-devel, perl-Devel-Peek, perl-Devel-PPPort, perl-Devel-SelfStubber, perl-Devel-Size, perl-Digest, perl-Digest-MD5, perl-Digest-SHA, perl-Encode, perl-Encode-devel, perl-encoding, perl-Env, perl-Errno, perl-experimental, perl-Exporter, perl-ExtUtils-CBuilder, perl-ExtUtils-Command, perl-ExtUtils-Embed, perl-ExtUtils-Install, perl-ExtUtils-MakeMaker, perl-ExtUtils-Manifest, perl-ExtUtils-Miniperl, perl-ExtUtils-MM-Utils, perl-ExtUtils-ParseXS, perl-Fedora-VSP, perl-File-Fetch, perl-File-HomeDir, perl-File-Path, perl-File-Temp, perl-File-Which, perl-Filter, perl-Filter-Simple, perl-generators, perl-Getopt-Long, perl-homedir, perl-HTTP-Tiny, perl-inc-latest, perl-interpreter, perl-IO, perl-IO-Compress, perl-IO-Socket-IP, perl-IO-Zlib, perl-IPC-Cmd, perl-IPC-System-Simple, perl-IPC-SysV, perl-JSON-PP, perl-libnet, perl-libnetcfg, perl-libs, perl-local-lib, perl-Locale-Codes, perl-Locale-Maketext, perl-Locale-Maketext-Simple, perl-macros, perl-Math-BigInt, perl-Math-BigInt-FastCalc, perl-Math-BigRat, perl-Math-Complex, perl-Memoize, perl-MIME-Base64, perl-Module-Build, perl-Module-CoreList, perl-Module-CoreList-tools, perl-Module-Load, perl-Module-Load-Conditional, perl-Module-Loaded, perl-Module-Metadata, perl-MRO-Compat, perl-Net-Ping, perl-open, perl-Package-Generator, perl-Params-Check, perl-Params-Util, perl-parent, perl-PathTools, perl-Perl-OSType, perl-perlfaq, perl-PerlIO-via-QuotedPrint, perl-Pod-Checker, perl-Pod-Escapes, perl-Pod-Html, perl-Pod-Parser, perl-Pod-Perldoc, perl-Pod-Simple, perl-Pod-Usage, perl-podlators, perl-Scalar-List-Utils, perl-SelfLoader, perl-Socket, perl-Software-License, perl-Storable, perl-Sub-Exporter, perl-Sub-Install, perl-Sys-Syslog, perl-Term-ANSIColor, perl-Term-Cap, perl-Test, perl-Test-Harness, perl-Test-Simple, perl-tests, perl-Text-Balanced, perl-Text-Diff, perl-Text-Glob, perl-Text-ParseWords, perl-Text-Tabs+Wrap, perl-Text-Template, perl-Thread-Queue, perl-threads, perl-threads-shared, perl-Time-HiRes, perl-Time-Local, perl-Time-Piece, perl-Unicode-Collate, perl-Unicode-Normalize, perl-URI, perl-utils, perl-version"
+30,perl-App-cpanminus,1.7044,"perl-App-cpanminus, perl-CPAN-DistnameInfo, perl-CPAN-Meta-Check, perl-File-pushd, perl-Module-CPANfile, perl-Parse-PMFile, perl-String-ShellQuote"
+31,perl-DBD-MySQL,4.046,"perl-DBD-MySQL, perl-DBD-MySQL-debuginfo, perl-DBD-MySQL-debugsource"
+32,perl-DBD-Pg,3.7,"perl-DBD-Pg, perl-DBD-Pg-debuginfo, perl-DBD-Pg-debugsource"
+33,perl-DBD-SQLite,1.58,"perl-DBD-SQLite, perl-DBD-SQLite-debuginfo, perl-DBD-SQLite-debugsource"
+34,perl-DBI,1.641,"perl-DBI, perl-DBI-debuginfo, perl-DBI-debugsource"
+35,perl-FCGI,0.78,"perl-FCGI, perl-FCGI-debuginfo, perl-FCGI-debugsource"
+36,perl-YAML,1.24,perl-YAML
+37,php,7.2,"apcu-panel, libzip, libzip-debuginfo, libzip-debugsource, libzip-devel, libzip-tools, libzip-tools-debuginfo, php, php-bcmath, php-bcmath-debuginfo, php-cli, php-cli-debuginfo, php-common, php-common-debuginfo, php-dba, php-dba-debuginfo, php-dbg, php-dbg-debuginfo, php-debuginfo, php-debugsource, php-devel, php-embedded, php-embedded-debuginfo, php-enchant, php-enchant-debuginfo, php-fpm, php-fpm-debuginfo, php-gd, php-gd-debuginfo, php-gmp, php-gmp-debuginfo, php-intl, php-intl-debuginfo, php-json, php-json-debuginfo, php-ldap, php-ldap-debuginfo, php-mbstring, php-mbstring-debuginfo, php-mysqlnd, php-mysqlnd-debuginfo, php-odbc, php-odbc-debuginfo, php-opcache, php-opcache-debuginfo, php-pdo, php-pdo-debuginfo, php-pear, php-pecl-apcu, php-pecl-apcu-debuginfo, php-pecl-apcu-debugsource, php-pecl-apcu-devel, php-pecl-zip, php-pecl-zip-debuginfo, php-pecl-zip-debugsource, php-pgsql, php-pgsql-debuginfo, php-process, php-process-debuginfo, php-recode, php-recode-debuginfo, php-snmp, php-snmp-debuginfo, php-soap, php-soap-debuginfo, php-xml, php-xml-debuginfo, php-xmlrpc, php-xmlrpc-debuginfo"
+38,php,7.3,"apcu-panel, libzip, libzip-debuginfo, libzip-debugsource, libzip-devel, libzip-tools, libzip-tools-debuginfo, php, php-bcmath, php-bcmath-debuginfo, php-cli, php-cli-debuginfo, php-common, php-common-debuginfo, php-dba, php-dba-debuginfo, php-dbg, php-dbg-debuginfo, php-debuginfo, php-debugsource, php-devel, php-embedded, php-embedded-debuginfo, php-enchant, php-enchant-debuginfo, php-fpm, php-fpm-debuginfo, php-gd, php-gd-debuginfo, php-gmp, php-gmp-debuginfo, php-intl, php-intl-debuginfo, php-json, php-json-debuginfo, php-ldap, php-ldap-debuginfo, php-mbstring, php-mbstring-debuginfo, php-mysqlnd, php-mysqlnd-debuginfo, php-odbc, php-odbc-debuginfo, php-opcache, php-opcache-debuginfo, php-pdo, php-pdo-debuginfo, php-pear, php-pecl-apcu, php-pecl-apcu-debuginfo, php-pecl-apcu-debugsource, php-pecl-apcu-devel, php-pecl-rrd, php-pecl-rrd-debuginfo, php-pecl-rrd-debugsource, php-pecl-xdebug, php-pecl-xdebug-debuginfo, php-pecl-xdebug-debugsource, php-pecl-zip, php-pecl-zip-debuginfo, php-pecl-zip-debugsource, php-pgsql, php-pgsql-debuginfo, php-process, php-process-debuginfo, php-recode, php-recode-debuginfo, php-snmp, php-snmp-debuginfo, php-soap, php-soap-debuginfo, php-xml, php-xml-debuginfo, php-xmlrpc, php-xmlrpc-debuginfo"
+39,pki-core,10.6,"jss, jss-debuginfo, jss-debugsource, jss-javadoc, ldapjdk, ldapjdk-javadoc, pki-base, pki-base-java, pki-ca, pki-core, pki-core-debuginfo, pki-core-debugsource, pki-kra, pki-server, pki-symkey, pki-symkey-debuginfo, pki-tools, pki-tools-debuginfo, python3-pki, tomcatjss"
+40,pki-deps,10.6,"apache-commons-collections, apache-commons-lang, bea-stax, bea-stax-api, glassfish-fastinfoset, glassfish-jaxb, glassfish-jaxb-api, glassfish-jaxb-core, glassfish-jaxb-runtime, glassfish-jaxb-txw2, ipa-healthcheck, ipa-healthcheck-core, jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-json-provider, jackson-jaxrs-providers, jackson-module-jaxb-annotations, jakarta-commons-httpclient, javassist, javassist-javadoc, pki-servlet-4.0-api, pki-servlet-engine, python-nss, python-nss-debugsource, python-nss-doc, python3-nss, python3-nss-debuginfo, relaxngDatatype, resteasy, slf4j, slf4j-jdk14, stax-ex, velocity, xalan-j2, xerces-j2, xml-commons-apis, xml-commons-resolver, xmlstreambuffer, xsom"
+41,postgresql,10,"postgresql, postgresql-contrib, postgresql-contrib-debuginfo, postgresql-debuginfo, postgresql-debugsource, postgresql-docs, postgresql-docs-debuginfo, postgresql-plperl, postgresql-plperl-debuginfo, postgresql-plpython3, postgresql-plpython3-debuginfo, postgresql-pltcl, postgresql-pltcl-debuginfo, postgresql-server, postgresql-server-debuginfo, postgresql-server-devel, postgresql-server-devel-debuginfo, postgresql-static, postgresql-test, postgresql-test-debuginfo, postgresql-test-rpm-macros, postgresql-upgrade, postgresql-upgrade-debuginfo, postgresql-upgrade-devel, postgresql-upgrade-devel-debuginfo"
+42,postgresql,12,"pgaudit, pgaudit-debuginfo, pgaudit-debugsource, postgres-decoderbufs, postgres-decoderbufs-debuginfo, postgres-decoderbufs-debugsource, postgresql, postgresql-contrib, postgresql-contrib-debuginfo, postgresql-debuginfo, postgresql-debugsource, postgresql-docs, postgresql-docs-debuginfo, postgresql-plperl, postgresql-plperl-debuginfo, postgresql-plpython3, postgresql-plpython3-debuginfo, postgresql-pltcl, postgresql-pltcl-debuginfo, postgresql-server, postgresql-server-debuginfo, postgresql-server-devel, postgresql-server-devel-debuginfo, postgresql-static, postgresql-test, postgresql-test-debuginfo, postgresql-test-rpm-macros, postgresql-upgrade, postgresql-upgrade-debuginfo, postgresql-upgrade-devel, postgresql-upgrade-devel-debuginfo"
+43,postgresql,9.6,"postgresql, postgresql-contrib, postgresql-contrib-debuginfo, postgresql-debuginfo, postgresql-debugsource, postgresql-docs, postgresql-docs-debuginfo, postgresql-plperl, postgresql-plperl-debuginfo, postgresql-plpython3, postgresql-plpython3-debuginfo, postgresql-pltcl, postgresql-pltcl-debuginfo, postgresql-server, postgresql-server-debuginfo, postgresql-server-devel, postgresql-server-devel-debuginfo, postgresql-static, postgresql-test, postgresql-test-debuginfo, postgresql-test-rpm-macros"
+44,python27,2.7,"babel, Cython, Cython-debugsource, numpy, numpy-debugsource, pytest, python-attrs, python-backports, python-backports-ssl_match_hostname, python-chardet, python-coverage, python-coverage-debugsource, python-dns, python-docs, python-docutils, python-funcsigs, python-idna, python-ipaddress, python-jinja2, python-lxml, python-lxml-debugsource, python-markupsafe, python-mock, python-nose, python-nose-docs, python-pluggy, python-psycopg2, python-psycopg2-debuginfo, python-psycopg2-debugsource, python-psycopg2-doc, python-py, python-pygments, python-pymongo, python-pymongo-debuginfo, python-pymongo-debugsource, python-PyMySQL, python-pysocks, python-pytest-mock, python-requests, python-setuptools_scm, python-six, python-sqlalchemy, python-sqlalchemy-doc, python-urllib3, python-virtualenv, python-wheel, python2, python2-attrs, python2-babel, python2-backports, python2-backports-ssl_match_hostname, python2-bson, python2-bson-debuginfo, python2-chardet, python2-coverage, python2-coverage-debuginfo, python2-Cython, python2-Cython-debuginfo, python2-debug, python2-debuginfo, python2-debugsource, python2-devel, python2-dns, python2-docs, python2-docs-info, python2-docutils, python2-funcsigs, python2-idna, python2-ipaddress, python2-jinja2, python2-libs, python2-lxml, python2-lxml-debuginfo, python2-markupsafe, python2-mock, python2-nose, python2-numpy, python2-numpy-debuginfo, python2-numpy-doc, python2-numpy-f2py, python2-pip, python2-pip-wheel, python2-pluggy, python2-psycopg2, python2-psycopg2-debug, python2-psycopg2-debug-debuginfo, python2-psycopg2-debuginfo, python2-psycopg2-tests, python2-py, python2-pygments, python2-pymongo, python2-pymongo-debuginfo, python2-pymongo-gridfs, python2-PyMySQL, python2-pysocks, python2-pytest, python2-pytest-mock, python2-pytz, python2-pyyaml, python2-pyyaml-debuginfo, python2-requests, python2-rpm-macros, python2-scipy, python2-scipy-debuginfo, python2-setuptools, python2-setuptools-wheel, python2-setuptools_scm, python2-six, python2-sqlalchemy, python2-test, python2-tkinter, python2-tools, python2-urllib3, python2-virtualenv, python2-wheel, python2-wheel-wheel, pytz, PyYAML, PyYAML-debugsource, scipy, scipy-debugsource"
+45,python36,3.6,"python-distro, python-docs, python-docutils, python-nose, python-nose-docs, python-pygments, python-pymongo, python-pymongo-debuginfo, python-pymongo-debugsource, python-pymongo-doc, python-PyMySQL, python-sqlalchemy, python-sqlalchemy-doc, python-virtualenv, python-virtualenv-doc, python-wheel, python3-bson, python3-bson-debuginfo, python3-distro, python3-docs, python3-docutils, python3-nose, python3-pygments, python3-pymongo, python3-pymongo-debuginfo, python3-pymongo-gridfs, python3-PyMySQL, python3-scipy, python3-scipy-debuginfo, python3-sqlalchemy, python3-virtualenv, python3-wheel, python3-wheel-wheel, python36, python36-debug, python36-devel, python36-rpm-macros, scipy, scipy-debugsource"
+46,python38,3.8,"babel, Cython, Cython-debugsource, mod_wsgi, numpy, numpy-debugsource, python-asn1crypto, python-cffi, python-cffi-debugsource, python-chardet, python-cryptography, python-cryptography-debugsource, python-idna, python-jinja2, python-lxml, python-lxml-debugsource, python-markupsafe, python-markupsafe-debugsource, python-ply, python-psutil, python-psutil-debugsource, python-psycopg2, python-psycopg2-debugsource, python-pycparser, python-PyMySQL, python-pysocks, python-requests, python-six, python-urllib3, python-wheel, python38, python38-asn1crypto, python38-babel, python38-cffi, python38-cffi-debuginfo, python38-chardet, python38-cryptography, python38-cryptography-debuginfo, python38-Cython, python38-Cython-debuginfo, python38-debug, python38-debuginfo, python38-debugsource, python38-devel, python38-idle, python38-idna, python38-jinja2, python38-libs, python38-lxml, python38-lxml-debuginfo, python38-markupsafe, python38-markupsafe-debuginfo, python38-mod_wsgi, python38-numpy, python38-numpy-debuginfo, python38-numpy-doc, python38-numpy-f2py, python38-pip, python38-pip-wheel, python38-ply, python38-psutil, python38-psutil-debuginfo, python38-psycopg2, python38-psycopg2-debuginfo, python38-psycopg2-doc, python38-psycopg2-tests, python38-pycparser, python38-PyMySQL, python38-pysocks, python38-pytz, python38-pyyaml, python38-pyyaml-debuginfo, python38-requests, python38-rpm-macros, python38-scipy, python38-scipy-debuginfo, python38-setuptools, python38-setuptools-wheel, python38-six, python38-test, python38-tkinter, python38-urllib3, python38-wheel, python38-wheel-wheel, python3x-pip, python3x-setuptools, pytz, PyYAML, PyYAML-debugsource, scipy, scipy-debugsource"
+47,redis,5,"redis, redis-debuginfo, redis-debugsource, redis-devel, redis-doc"
+48,rhn-tools,1.0,"cobbler, koan, osad, python3-koan, python3-osa-common, python3-osad, python3-rhn-virtualization-common, python3-rhn-virtualization-host, python3-rhncfg, python3-rhncfg-actions, python3-rhncfg-client, python3-rhncfg-management, python3-rhnpush, python3-spacewalk-abrt, python3-spacewalk-backend-libs, python3-spacewalk-koan, python3-spacewalk-oscap, python3-spacewalk-usix, rhn-custom-info, rhn-virtualization, rhn-virtualization-host, rhncfg, rhncfg-actions, rhncfg-client, rhncfg-management, rhnpush, spacewalk-abrt, spacewalk-backend, spacewalk-client-cert, spacewalk-koan, spacewalk-oscap, spacewalk-remote-utils, spacewalk-usix"
+49,ruby,2.5,"ruby, ruby-debuginfo, ruby-debugsource, ruby-devel, ruby-doc, ruby-irb, ruby-libs, ruby-libs-debuginfo, rubygem-abrt, rubygem-abrt-doc, rubygem-bigdecimal, rubygem-bigdecimal-debuginfo, rubygem-bson, rubygem-bson-debuginfo, rubygem-bson-debugsource, rubygem-bson-doc, rubygem-bundler, rubygem-bundler-doc, rubygem-did_you_mean, rubygem-io-console, rubygem-io-console-debuginfo, rubygem-json, rubygem-json-debuginfo, rubygem-minitest, rubygem-mongo, rubygem-mongo-doc, rubygem-mysql2, rubygem-mysql2-debuginfo, rubygem-mysql2-debugsource, rubygem-mysql2-doc, rubygem-net-telnet, rubygem-openssl, rubygem-openssl-debuginfo, rubygem-pg, rubygem-pg-debuginfo, rubygem-pg-debugsource, rubygem-pg-doc, rubygem-power_assert, rubygem-psych, rubygem-psych-debuginfo, rubygem-rake, rubygem-rdoc, rubygem-test-unit, rubygem-xmlrpc, rubygems, rubygems-devel"
+50,ruby,2.6,"ruby, ruby-debuginfo, ruby-debugsource, ruby-devel, ruby-doc, ruby-libs, ruby-libs-debuginfo, rubygem-abrt, rubygem-abrt-doc, rubygem-bigdecimal, rubygem-bigdecimal-debuginfo, rubygem-bson, rubygem-bson-debuginfo, rubygem-bson-debugsource, rubygem-bson-doc, rubygem-bundler, rubygem-did_you_mean, rubygem-io-console, rubygem-io-console-debuginfo, rubygem-irb, rubygem-json, rubygem-json-debuginfo, rubygem-minitest, rubygem-mongo, rubygem-mongo-doc, rubygem-mysql2, rubygem-mysql2-debuginfo, rubygem-mysql2-debugsource, rubygem-mysql2-doc, rubygem-net-telnet, rubygem-openssl, rubygem-openssl-debuginfo, rubygem-pg, rubygem-pg-debuginfo, rubygem-pg-debugsource, rubygem-pg-doc, rubygem-power_assert, rubygem-psych, rubygem-psych-debuginfo, rubygem-rake, rubygem-rdoc, rubygem-test-unit, rubygem-xmlrpc, rubygems, rubygems-devel"
+51,rust-toolset,rhel8,"cargo, cargo-debuginfo, cargo-doc, clippy, clippy-debuginfo, rls, rls-debuginfo, rust, rust-analysis, rust-debugger-common, rust-debuginfo, rust-debugsource, rust-doc, rust-gdb, rust-lldb, rust-src, rust-std-static, rust-toolset, rustfmt, rustfmt-debuginfo"
+52,satellite-5-client,1.0,"dnf-plugin-spacewalk, python3-dnf-plugin-spacewalk, python3-rhn-check, python3-rhn-client-tools, python3-rhn-setup, python3-rhn-setup-gnome, python3-rhnlib, rhn-check, rhn-client-tools, rhn-setup, rhn-setup-gnome, rhnlib, rhnsd, rhnsd-debuginfo, rhnsd-debugsource"
+53,scala,2.10,"hawtjni, hawtjni-runtime, jansi, jansi-native, jline, scala, scala-apidoc, scala-swing"
+54,squid,4,"libecap, libecap-debuginfo, libecap-debugsource, libecap-devel, squid, squid-debuginfo, squid-debugsource"
+55,subversion,1.10,"libserf, libserf-debuginfo, libserf-debugsource, mod_dav_svn, mod_dav_svn-debuginfo, subversion, subversion-debuginfo, subversion-debugsource, subversion-devel, subversion-devel-debuginfo, subversion-gnome, subversion-gnome-debuginfo, subversion-javahl, subversion-libs, subversion-libs-debuginfo, subversion-perl, subversion-perl-debuginfo, subversion-tools, subversion-tools-debuginfo, utf8proc, utf8proc-debuginfo, utf8proc-debugsource"
+56,swig,3.0,"swig, swig-debuginfo, swig-debugsource, swig-doc, swig-gdb"
+57,varnish,6,"varnish, varnish-devel, varnish-docs, varnish-modules, varnish-modules-debuginfo, varnish-modules-debugsource"
+58,virt,rhel,"hivex, hivex-debuginfo, hivex-debugsource, hivex-devel, libguestfs, libguestfs-bash-completion, libguestfs-benchmarking, libguestfs-benchmarking-debuginfo, libguestfs-debuginfo, libguestfs-debugsource, libguestfs-devel, libguestfs-gfs2, libguestfs-gobject, libguestfs-gobject-debuginfo, libguestfs-gobject-devel, libguestfs-inspect-icons, libguestfs-java, libguestfs-java-debuginfo, libguestfs-java-devel, libguestfs-javadoc, libguestfs-man-pages-ja, libguestfs-man-pages-uk, libguestfs-rescue, libguestfs-rsync, libguestfs-tools, libguestfs-tools-c, libguestfs-tools-c-debuginfo, libguestfs-winsupport, libguestfs-xfs, libiscsi, libiscsi-debuginfo, libiscsi-debugsource, libiscsi-devel, libiscsi-utils, libiscsi-utils-debuginfo, libvirt, libvirt-admin, libvirt-admin-debuginfo, libvirt-bash-completion, libvirt-client, libvirt-client-debuginfo, libvirt-daemon, libvirt-daemon-config-network, libvirt-daemon-config-nwfilter, libvirt-daemon-debuginfo, libvirt-daemon-driver-interface, libvirt-daemon-driver-interface-debuginfo, libvirt-daemon-driver-network, libvirt-daemon-driver-network-debuginfo, libvirt-daemon-driver-nodedev, libvirt-daemon-driver-nodedev-debuginfo, libvirt-daemon-driver-nwfilter, libvirt-daemon-driver-nwfilter-debuginfo, libvirt-daemon-driver-qemu, libvirt-daemon-driver-qemu-debuginfo, libvirt-daemon-driver-secret, libvirt-daemon-driver-secret-debuginfo, libvirt-daemon-driver-storage, libvirt-daemon-driver-storage-core, libvirt-daemon-driver-storage-core-debuginfo, libvirt-daemon-driver-storage-disk, libvirt-daemon-driver-storage-disk-debuginfo, libvirt-daemon-driver-storage-gluster, libvirt-daemon-driver-storage-gluster-debuginfo, libvirt-daemon-driver-storage-iscsi, libvirt-daemon-driver-storage-iscsi-debuginfo, libvirt-daemon-driver-storage-logical, libvirt-daemon-driver-storage-logical-debuginfo, libvirt-daemon-driver-storage-mpath, libvirt-daemon-driver-storage-mpath-debuginfo, libvirt-daemon-driver-storage-rbd, libvirt-daemon-driver-storage-rbd-debuginfo, libvirt-daemon-driver-storage-scsi, libvirt-daemon-driver-storage-scsi-debuginfo, libvirt-daemon-kvm, libvirt-dbus, libvirt-dbus-debuginfo, libvirt-dbus-debugsource, libvirt-debuginfo, libvirt-debugsource, libvirt-devel, libvirt-docs, libvirt-libs, libvirt-libs-debuginfo, libvirt-lock-sanlock, libvirt-lock-sanlock-debuginfo, libvirt-nss, libvirt-nss-debuginfo, libvirt-python, libvirt-python-debugsource, lua-guestfs, lua-guestfs-debuginfo, nbdkit, nbdkit-bash-completion, nbdkit-basic-plugins, nbdkit-basic-plugins-debuginfo, nbdkit-debuginfo, nbdkit-debugsource, nbdkit-devel, nbdkit-example-plugins, nbdkit-example-plugins-debuginfo, nbdkit-plugin-gzip, nbdkit-plugin-gzip-debuginfo, nbdkit-plugin-python-common, nbdkit-plugin-python3, nbdkit-plugin-python3-debuginfo, nbdkit-plugin-vddk, nbdkit-plugin-vddk-debuginfo, nbdkit-plugin-xz, nbdkit-plugin-xz-debuginfo, netcf, netcf-debuginfo, netcf-debugsource, netcf-devel, netcf-libs, netcf-libs-debuginfo, perl-hivex, perl-hivex-debuginfo, perl-Sys-Guestfs, perl-Sys-Guestfs-debuginfo, perl-Sys-Virt, perl-Sys-Virt-debuginfo, perl-Sys-Virt-debugsource, python3-hivex, python3-hivex-debuginfo, python3-libguestfs, python3-libguestfs-debuginfo, python3-libvirt, python3-libvirt-debuginfo, qemu-guest-agent, qemu-guest-agent-debuginfo, qemu-img, qemu-img-debuginfo, qemu-kvm, qemu-kvm-block-curl, qemu-kvm-block-curl-debuginfo, qemu-kvm-block-gluster, qemu-kvm-block-gluster-debuginfo, qemu-kvm-block-iscsi, qemu-kvm-block-iscsi-debuginfo, qemu-kvm-block-rbd, qemu-kvm-block-rbd-debuginfo, qemu-kvm-block-ssh, qemu-kvm-block-ssh-debuginfo, qemu-kvm-common, qemu-kvm-common-debuginfo, qemu-kvm-core, qemu-kvm-core-debuginfo, qemu-kvm-debuginfo, qemu-kvm-debugsource, ruby-hivex, ruby-hivex-debuginfo, ruby-libguestfs, ruby-libguestfs-debuginfo, seabios, seabios-bin, seavgabios-bin, sgabios, sgabios-bin, SLOF, supermin, supermin-debuginfo, supermin-debugsource, supermin-devel, virt-dib, virt-dib-debuginfo, virt-v2v, virt-v2v-debuginfo"
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/table-4.csv b/tools/redhat_package_manifest_scraper/data/redhat8/table-4.csv
new file mode 100644
index 0000000..84d4837
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/table-4.csv
@@ -0,0 +1,1569 @@
+,Package,License
+0,accountsservice-devel,GPLv3+
+1,ant,ASL 2.0
+2,ant-antlr,ASL 2.0
+3,ant-apache-bcel,ASL 2.0
+4,ant-apache-bsf,ASL 2.0
+5,ant-apache-log4j,ASL 2.0
+6,ant-apache-oro,ASL 2.0
+7,ant-apache-regexp,ASL 2.0
+8,ant-apache-resolver,ASL 2.0
+9,ant-apache-xalan2,ASL 2.0
+10,ant-commons-logging,ASL 2.0
+11,ant-commons-net,ASL 2.0
+12,ant-contrib,ASL 2.0 and ASL 1.1
+13,ant-contrib-javadoc,ASL 2.0 and ASL 1.1
+14,ant-javadoc,ASL 2.0
+15,ant-javamail,ASL 2.0
+16,ant-jdepend,ASL 2.0
+17,ant-jmf,ASL 2.0
+18,ant-jsch,ASL 2.0
+19,ant-junit,ASL 2.0
+20,ant-lib,ASL 2.0
+21,ant-manual,ASL 2.0
+22,ant-swing,ASL 2.0
+23,ant-testutil,ASL 2.0
+24,ant-xz,ASL 2.0
+25,antlr-C++,ANTLR-PD
+26,antlr-javadoc,ANTLR-PD
+27,antlr-manual,ANTLR-PD
+28,antlr-tool,ANTLR-PD
+29,aopalliance,Public Domain
+30,aopalliance-javadoc,Public Domain
+31,apache-commons-beanutils,ASL 2.0
+32,apache-commons-beanutils-javadoc,ASL 2.0
+33,apache-commons-cli,ASL 2.0
+34,apache-commons-cli-javadoc,ASL 2.0
+35,apache-commons-codec,ASL 2.0
+36,apache-commons-codec-javadoc,ASL 2.0
+37,apache-commons-collections,ASL 2.0
+38,apache-commons-collections-javadoc,ASL 2.0
+39,apache-commons-collections-testframework,ASL 2.0
+40,apache-commons-compress,ASL 2.0
+41,apache-commons-compress-javadoc,ASL 2.0
+42,apache-commons-exec,ASL 2.0
+43,apache-commons-exec-javadoc,ASL 2.0
+44,apache-commons-io,ASL 2.0
+45,apache-commons-io-javadoc,ASL 2.0
+46,apache-commons-jxpath,ASL 2.0
+47,apache-commons-jxpath-javadoc,ASL 2.0
+48,apache-commons-lang,ASL 2.0
+49,apache-commons-lang-javadoc,ASL 2.0
+50,apache-commons-lang3,ASL 2.0
+51,apache-commons-lang3-javadoc,ASL 2.0
+52,apache-commons-logging,ASL 2.0
+53,apache-commons-logging-javadoc,ASL 2.0
+54,apache-commons-net,ASL 2.0
+55,apache-commons-net-javadoc,ASL 2.0
+56,apache-commons-parent,ASL 2.0
+57,apache-ivy,ASL 2.0
+58,apache-ivy-javadoc,ASL 2.0
+59,apache-parent,ASL 2.0
+60,apache-resource-bundles,ASL 2.0
+61,aqute-bnd,ASL 2.0
+62,aqute-bnd-javadoc,ASL 2.0
+63,aqute-bndlib,ASL 2.0
+64,asciidoc-doc,GPL+ and GPLv2+
+65,aspell-devel,LGPLv2+ and LGPLv2 and GPLv2+ and BSD
+66,assertj-core,ASL 2.0
+67,assertj-core-javadoc,ASL 2.0
+68,atinject,ASL 2.0
+69,atinject-javadoc,ASL 2.0
+70,atinject-tck,ASL 2.0
+71,atkmm-devel,LGPLv2+
+72,atkmm-doc,LGPLv2+
+73,augeas-devel,LGPLv2+
+74,autoconf-archive,GPLv3+ with exceptions
+75,autoconf213,GPLv2+
+76,autogen,GPLv3+
+77,autotrace,GPLv2+ and LGPLv2+
+78,avahi-compat-howl,LGPLv2+
+79,avahi-compat-howl-devel,LGPLv2+
+80,avahi-compat-libdns_sd,LGPLv2+
+81,avahi-compat-libdns_sd-devel,LGPLv2+
+82,avahi-devel,LGPLv2+
+83,babl-devel,LGPLv3+ and GPLv3+
+84,babl-devel-docs,LGPLv3+ and GPLv3+
+85,bcc-devel,ASL 2.0
+86,bcc-doc,ASL 2.0
+87,bcel,ASL 2.0
+88,bcel-javadoc,ASL 2.0
+89,beust-jcommander,ASL 2.0
+90,beust-jcommander-javadoc,ASL 2.0
+91,bison-devel,GPLv3+
+92,blas-devel,BSD
+93,bluez-libs-devel,GPLv2+
+94,bnd-maven-plugin,ASL 2.0
+95,boost-build,Boost and MIT and Python
+96,boost-doc,Boost and MIT and Python
+97,boost-examples,Boost and MIT and Python
+98,boost-graph-mpich,Boost and MIT and Python
+99,boost-graph-openmpi,Boost and MIT and Python
+100,boost-jam,Boost and MIT and Python
+101,boost-mpich,Boost and MIT and Python
+102,boost-mpich-devel,Boost and MIT and Python
+103,boost-mpich-python3,Boost and MIT and Python
+104,boost-numpy3,Boost and MIT and Python
+105,boost-openmpi,Boost and MIT and Python
+106,boost-openmpi-devel,Boost and MIT and Python
+107,boost-openmpi-python3,Boost and MIT and Python
+108,boost-python3,Boost and MIT and Python
+109,boost-python3-devel,Boost and MIT and Python
+110,boost-static,Boost and MIT and Python
+111,brasero-devel,GPLv3+
+112,brasero-libs,GPLv3+
+113,brlapi-devel,LGPLv2+
+114,brotli-devel,MIT
+115,bsf,ASL 2.0
+116,bsf-javadoc,ASL 2.0
+117,bsh,ASL 2.0 and BSD and Public Domain
+118,bsh-javadoc,ASL 2.0 and BSD and Public Domain
+119,bsh-manual,ASL 2.0 and BSD and Public Domain
+120,byaccj,Public Domain
+121,cairomm-devel,LGPLv2+
+122,cairomm-doc,LGPLv2+
+123,cal10n,MIT
+124,cal10n-javadoc,MIT
+125,cdi-api,ASL 2.0
+126,cdi-api-javadoc,ASL 2.0
+127,cdparanoia-devel,LGPLv2
+128,celt051-devel,BSD
+129,cglib,ASL 2.0 and BSD
+130,cglib-javadoc,ASL 2.0 and BSD
+131,clucene-contribs-lib,LGPLv2+ or ASL 2.0
+132,clucene-core-devel,LGPLv2+ or ASL 2.0
+133,clutter-devel,LGPLv2+
+134,clutter-doc,LGPLv2+
+135,clutter-gst3-devel,LGPLv2+
+136,clutter-gtk-devel,LGPLv2+
+137,codemodel,CDDL-1.1 or GPLv2 with exceptions
+138,cogl-devel,LGPLv2+
+139,cogl-doc,LGPLv2+
+140,colord-devel,GPLv2+ and LGPLv2+
+141,colord-devel-docs,GPLv2+ and LGPLv2+
+142,colord-gtk-devel,LGPLv2+
+143,compat-guile18,LGPLv2+
+144,compat-guile18-devel,LGPLv2+
+145,corosync-vqsim,BSD
+146,cppcheck,GPLv3+
+147,cppunit,LGPLv2+
+148,cppunit-devel,LGPLv2+
+149,cppunit-doc,LGPLv2+
+150,cracklib-devel,LGPLv2+
+151,crash-devel,GPLv3
+152,ctags-etags,GPLv2+ and LGPLv2+ and Public Domain
+153,CUnit-devel,LGPLv2+
+154,cups-filters-devel,LGPLv2 and MIT
+155,daxctl-devel,LGPLv2
+156,dblatex,GPLv2+ and GPLv2 and LPPL and DMIT and Public Domain
+157,dbus-c++,LGPLv2+
+158,dbus-c++-devel,LGPLv2+
+159,dbus-c++-glib,LGPLv2+
+160,dconf-devel,LGPLv2+ and GPLv2+ and GPLv3+
+161,dejagnu,GPLv3+
+162,devhelp,GPLv2+ and LGPL2+
+163,devhelp-devel,GPLv2+ and LGPL2+
+164,device-mapper-devel,LGPLv2
+165,device-mapper-event-devel,LGPLv2
+166,device-mapper-multipath-devel,GPLv2
+167,djvulibre,GPLv2+
+168,djvulibre-devel,GPLv2+
+169,djvulibre-libs,GPLv2+
+170,docbook-style-dsssl,DMIT
+171,docbook-utils,GPLv2+
+172,docbook2X,MIT
+173,docbook5-schemas,Freely redistributable without restriction
+174,dotconf-devel,LGPLv2
+175,dovecot,MIT and LGPLv2
+176,dovecot-devel,MIT and LGPLv2
+177,doxygen,GPL+
+178,doxygen-doxywizard,GPL+
+179,doxygen-latex,GPL+
+180,drpm-devel,LGPLv2+ and BSD
+181,dtc,GPLv2+
+182,dwarves,GPLv2
+183,dyninst-devel,LGPLv2+
+184,dyninst-doc,LGPLv2+
+185,dyninst-static,LGPLv2+
+186,dyninst-testsuite,LGPLv2+
+187,easymock,ASL 2.0
+188,easymock-javadoc,ASL 2.0
+189,eglexternalplatform-devel,MIT
+190,eigen3-devel,MPLv2.0 and LGPLv2+ and BSD
+191,elfutils-devel-static,GPLv2+ or LGPLv3+
+192,elfutils-libelf-devel-static,GPLv2+ or LGPLv3+
+193,elinks,GPLv2
+194,enca,GPLv2
+195,enca-devel,GPLv2
+196,enchant-devel,LGPLv2+
+197,enchant2-devel,LGPLv2+
+198,evolution-data-server-doc,LGPLv2+
+199,evolution-data-server-perl,LGPLv2+
+200,evolution-data-server-tests,LGPLv2+
+201,evolution-devel,GPLv2+ and GFDL
+202,exec-maven-plugin,ASL 2.0
+203,exec-maven-plugin-javadoc,ASL 2.0
+204,execstack,GPLv2+
+205,exempi-devel,BSD
+206,exiv2,GPLv2+
+207,exiv2-devel,GPLv2+
+208,exiv2-doc,GPLv2+
+209,exiv2-libs,GPLv2+
+210,felix-osgi-compendium,ASL 2.0
+211,felix-osgi-compendium-javadoc,ASL 2.0
+212,felix-osgi-core,ASL 2.0
+213,felix-osgi-core-javadoc,ASL 2.0
+214,felix-osgi-foundation,ASL 2.0
+215,felix-osgi-foundation-javadoc,ASL 2.0
+216,felix-parent,ASL 2.0
+217,felix-utils,ASL 2.0
+218,felix-utils-javadoc,ASL 2.0
+219,fftw-doc,GPLv2+
+220,file-devel,BSD
+221,fipscheck-devel,BSD
+222,flac,BSD and GPLv2+ and GFDL
+223,flac-devel,BSD and GPLv2+ and GFDL
+224,flex-devel,BSD and LGPLv2+
+225,flite,MIT
+226,flite-devel,MIT
+227,fltk-devel,LGPLv2+ with exceptions
+228,fontawesome-fonts-web,OFL and MIT
+229,fontconfig-devel-doc,MIT and Public Domain and UCD
+230,fontforge,GPLv3+
+231,fontpackages-devel,LGPLv3+
+232,forge-parent,ASL 2.0
+233,freeipmi-devel,GPLv3+
+234,freerdp-devel,ASL 2.0
+235,frei0r-devel,GPLv2+
+236,frei0r-plugins,GPLv2+
+237,fuse-sshfs,GPLv2
+238,fusesource-pom,ASL 2.0
+239,gamin-devel,LGPLv2
+240,gc-devel,BSD
+241,gcc-plugin-devel,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+242,gcc-toolset-9-dyninst-devel,LGPLv2+
+243,gcc-toolset-9-dyninst-doc,LGPLv2+
+244,gcc-toolset-9-dyninst-static,LGPLv2+
+245,gcc-toolset-9-dyninst-testsuite,LGPLv2+
+246,gcc-toolset-9-gcc-plugin-devel,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+247,GConf2-devel,LGPLv2+ and GPLv2+
+248,gdk-pixbuf2-xlib,LGPLv2+
+249,gdk-pixbuf2-xlib-devel,LGPLv2+
+250,gegl04-devel,LGPLv3+
+251,geoclue2-devel,GPLv2+
+252,geronimo-annotation,ASL 2.0
+253,geronimo-annotation-javadoc,ASL 2.0
+254,geronimo-jms,ASL 2.0
+255,geronimo-jms-javadoc,ASL 2.0
+256,geronimo-jpa,ASL 2.0
+257,geronimo-jpa-javadoc,ASL 2.0
+258,geronimo-parent-poms,ASL 2.0
+259,gflags,BSD
+260,gflags-devel,BSD
+261,ghostscript-doc,AGPLv3+
+262,ghostscript-tools-dvipdf,AGPLv3+
+263,ghostscript-tools-fonts,AGPLv3+
+264,ghostscript-tools-printing,AGPLv3+
+265,ghostscript-x11,AGPLv3+
+266,giflib-devel,MIT
+267,gjs-devel,MIT and (MPLv1.1 or GPLv2+ or LGPLv2+)
+268,glade-devel,GPLv2+ and LGPLv2+
+269,glassfish-annotation-api,CDDL or GPLv2 with exceptions
+270,glassfish-annotation-api-javadoc,CDDL or GPLv2 with exceptions
+271,glassfish-el,CDDL-1.1 or GPLv2 with exceptions
+272,glassfish-el-api,(CDDL or GPLv2 with exceptions) and ASL 2.0
+273,glassfish-el-javadoc,CDDL-1.1 or GPLv2 with exceptions
+274,glassfish-jsp-api,(CDDL-1.1 or GPLv2 with exceptions) and ASL 2.0
+275,glassfish-jsp-api-javadoc,(CDDL-1.1 or GPLv2 with exceptions) and ASL 2.0
+276,glassfish-legal,CDDL or GPLv2 with exceptions
+277,glassfish-master-pom,CDDL or GPLv2 with exceptions
+278,glassfish-servlet-api,(CDDL or GPLv2 with exceptions) and ASL 2.0
+279,glassfish-servlet-api-javadoc,(CDDL or GPLv2 with exceptions) and ASL 2.0
+280,glew-devel,BSD and MIT
+281,glib2-doc,LGPLv2+
+282,glib2-static,LGPLv2+
+283,glibc-benchtests,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+284,glibc-nss-devel,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+285,glibc-static,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+286,glibmm24-devel,LGPLv2+
+287,glibmm24-doc,LGPLv2+
+288,glm-devel,MIT
+289,glm-doc,MIT
+290,glog,BSD
+291,glog-devel,BSD
+292,glusterfs-api-devel,GPLv2 or LGPLv3+
+293,glusterfs-devel,GPLv2 or LGPLv3+
+294,gmock,BSD and ASL2.0
+295,gmock-devel,BSD and ASL2.0
+296,gnome-bluetooth,GPLv2+
+297,gnome-bluetooth-libs-devel,LGPLv2+
+298,gnome-common,GPLv2+
+299,gnome-menus-devel,LGPLv2+
+300,gnu-efi,BSD
+301,gnu-efi-devel,BSD
+302,gnuplot-doc,gnuplot and MIT
+303,go-compilers-golang-compiler,GPLv3+
+304,gobject-introspection-devel,"GPLv2+, LGPLv2+, MIT"
+305,google-guice,ASL 2.0
+306,google-guice-javadoc,ASL 2.0
+307,google-noto-sans-cjk-jp-fonts,OFL
+308,google-roboto-slab-fonts,ASL 2.0
+309,gperf,GPLv3+
+310,gpgme-devel,LGPLv2+
+311,gpgmepp-devel,LGPLv2+
+312,graphviz-devel,EPL-1.0
+313,graphviz-doc,EPL-1.0
+314,graphviz-gd,EPL-1.0
+315,graphviz-python3,EPL-1.0
+316,grilo-devel,LGPLv2+
+317,groff,GPLv3+ and GFDL and BSD and MIT
+318,gsm-devel,MIT
+319,gspell-devel,LGPLv2+
+320,gspell-doc,LGPLv2+
+321,gssdp-devel,LGPLv2+
+322,gssdp-docs,LGPLv2+
+323,gstreamer1-plugins-bad-free-devel,LGPLv2+ and LGPLv2
+324,gtest,BSD and ASL2.0
+325,gtest-devel,BSD and ASL2.0
+326,gtk-doc,GPLv2+ and GFDL
+327,gtkmm24-devel,LGPLv2+
+328,gtkmm24-docs,LGPLv2+
+329,gtkmm30-devel,LGPLv2+
+330,gtkmm30-doc,LGPLv2+
+331,gtksourceview3-devel,LGPLv2+
+332,gtkspell,GPLv2+
+333,gtkspell-devel,GPLv2+
+334,gtkspell3-devel,GPLv2+
+335,guava20,ASL 2.0 and CC0
+336,guava20-javadoc,ASL 2.0 and CC0
+337,guava20-testlib,ASL 2.0 and CC0
+338,guice-assistedinject,ASL 2.0
+339,guice-bom,ASL 2.0
+340,guice-extensions,ASL 2.0
+341,guice-grapher,ASL 2.0
+342,guice-jmx,ASL 2.0
+343,guice-jndi,ASL 2.0
+344,guice-multibindings,ASL 2.0
+345,guice-parent,ASL 2.0
+346,guice-servlet,ASL 2.0
+347,guice-testlib,ASL 2.0
+348,guice-throwingproviders,ASL 2.0
+349,guile-devel,LGPLv3+
+350,gupnp-devel,LGPLv2+
+351,gupnp-igd-devel,LGPLv2+
+352,gvfs,GPLv3 and LGPLv2+ and BSD and MPLv2.0
+353,hamcrest,BSD
+354,hamcrest-core,BSD
+355,hamcrest-demo,BSD
+356,hamcrest-javadoc,BSD
+357,hawtjni,ASL 2.0 and EPL-1.0 and BSD
+358,hawtjni-javadoc,ASL 2.0 and EPL-1.0 and BSD
+359,hawtjni-runtime,ASL 2.0 and EPL-1.0 and BSD
+360,help2man,GPLv3+
+361,hesiod-devel,MIT
+362,hivex,LGPLv2
+363,hivex-devel,LGPLv2
+364,http-parser-devel,MIT
+365,httpcomponents-client,ASL 2.0
+366,httpcomponents-client-cache,ASL 2.0
+367,httpcomponents-client-javadoc,ASL 2.0
+368,httpcomponents-core,ASL 2.0
+369,httpcomponents-core-javadoc,ASL 2.0
+370,httpcomponents-project,ASL 2.0
+371,hwloc-devel,BSD
+372,hyphen-devel,GPLv2 or LGPLv2+ or MPLv1.1
+373,ibus-devel,LGPLv2+
+374,ibus-devel-docs,LGPLv2+
+375,ilmbase-devel,BSD
+376,ima-evm-utils-devel,GPLv2
+377,imake,MIT
+378,iproute-devel,GPLv2+
+379,ipset-devel,GPLv2
+380,irssi-devel,GPLv2+
+381,isl-devel,MIT
+382,iso-codes-devel,LGPLv2+
+383,isorelax,MIT and ASL 1.1
+384,isorelax-javadoc,MIT and ASL 1.1
+385,istack-commons,CDDL-1.1 and GPLv2 with exceptions
+386,ivy-local,BSD
+387,jakarta-commons-httpclient,ASL 2.0 and (ASL 2.0 or LGPLv2+)
+388,jakarta-commons-httpclient-demo,ASL 2.0 and (ASL 2.0 or LGPLv2+)
+389,jakarta-commons-httpclient-javadoc,ASL 2.0 and (ASL 2.0 or LGPLv2+)
+390,jakarta-commons-httpclient-manual,ASL 2.0 and (ASL 2.0 or LGPLv2+)
+391,jakarta-oro,ASL 1.1
+392,jakarta-oro-javadoc,ASL 1.1
+393,jansi,ASL 2.0
+394,jansi-javadoc,ASL 2.0
+395,jansi-native,ASL 2.0
+396,jansi-native-javadoc,ASL 2.0
+397,jasper-devel,JasPer
+398,java_cup,MIT
+399,java_cup-javadoc,MIT
+400,java_cup-manual,MIT
+401,javacc,BSD
+402,javacc-demo,BSD
+403,javacc-javadoc,BSD
+404,javacc-manual,BSD
+405,javacc-maven-plugin,ASL 2.0
+406,javacc-maven-plugin-javadoc,ASL 2.0
+407,javamail,CDDL-1.0 or GPLv2 with exceptions
+408,javamail-javadoc,CDDL-1.0 or GPLv2 with exceptions
+409,javapackages-filesystem,BSD
+410,javapackages-local,BSD
+411,javapackages-tools,BSD
+412,javassist,MPLv1.1 or LGPLv2+ or ASL 2.0
+413,javassist-javadoc,MPLv1.1 or LGPLv2+ or ASL 2.0
+414,jaxen,BSD and W3C
+415,jaxen-demo,BSD and W3C
+416,jaxen-javadoc,BSD and W3C
+417,jbigkit-devel,GPLv2+
+418,jboss-interceptors-1.2-api,CDDL or GPLv2 with exceptions
+419,jboss-interceptors-1.2-api-javadoc,CDDL or GPLv2 with exceptions
+420,jboss-parent,CC0
+421,jcl-over-slf4j,MIT and ASL 2.0
+422,jdepend,BSD
+423,jdepend-demo,BSD
+424,jdepend-javadoc,BSD
+425,jdependency,ASL 2.0
+426,jdependency-javadoc,ASL 2.0
+427,jdom,Saxpath
+428,jdom-demo,Saxpath
+429,jdom-javadoc,Saxpath
+430,jdom2,Saxpath
+431,jdom2-javadoc,Saxpath
+432,jflex,BSD
+433,jflex-javadoc,BSD
+434,jimtcl-devel,BSD
+435,jline,BSD
+436,jline-javadoc,BSD
+437,js-uglify,BSD
+438,jsch,BSD
+439,jsch-javadoc,BSD
+440,json-c-devel,MIT
+441,json-c-doc,MIT
+442,json-glib-devel,LGPLv2+
+443,jsoup,MIT
+444,jsoup-javadoc,MIT
+445,jsr-305,BSD and CC-BY
+446,jsr-305-javadoc,BSD and CC-BY
+447,jtidy,zlib
+448,jtidy-javadoc,zlib
+449,jul-to-slf4j,MIT and ASL 2.0
+450,junit,EPL-1.0
+451,junit-javadoc,EPL-1.0
+452,junit-manual,EPL-1.0
+453,jvnet-parent,ASL 2.0
+454,jzlib,BSD
+455,jzlib-demo,BSD
+456,jzlib-javadoc,BSD
+457,kernel-tools-libs-devel,GPLv2
+458,keybinder3-devel,MIT
+459,keybinder3-doc,MIT
+460,kmod-devel,GPLv2+
+461,ladspa,LGPLv2+
+462,ladspa-devel,LGPLv2+
+463,lame-devel,GPLv2+
+464,lapack-devel,BSD
+465,lapack-static,BSD
+466,latex2html,GPLv2+
+467,lcms2-devel,MIT
+468,ldns-devel,BSD
+469,lensfun,LGPLv3 and CC-BY-SA
+470,lensfun-devel,LGPLv3
+471,leptonica,BSD and Leptonica
+472,leptonica-devel,BSD and Leptonica
+473,libaec,BSD
+474,libaec-devel,BSD
+475,libao-devel,GPLv2+
+476,libappindicator-gtk3-devel,LGPLv2 and LGPLv3
+477,libappstream-glib-devel,LGPLv2+
+478,libarchive-devel,BSD
+479,libassuan-devel,LGPLv2+ and GPLv3+
+480,libasyncns-devel,LGPLv2+
+481,libatasmart-devel,LGPLv2+
+482,libatomic_ops-devel,GPLv2 and MIT
+483,libbasicobjects-devel,GPLv3+
+484,libbpf-devel,LGPLv2 or BSD
+485,libbpf-static,LGPLv2 or BSD
+486,libburn-devel,GPLv2+
+487,libcacard-devel,LGPLv2+
+488,libcdio-devel,GPLv3+
+489,libcdio-paranoia-devel,GPLv3+
+490,libcephfs-devel,LGPL-2.1 and CC-BY-SA-1.0 and GPL-2.0 and BSL-1.0 and BSD-3-Clause and MIT
+491,libcephfs2,LGPL-2.1 and CC-BY-SA-1.0 and GPL-2.0 and BSL-1.0 and BSD-3-Clause and MIT
+492,libchamplain,LGPLv2+
+493,libchamplain-devel,LGPLv2+
+494,libchamplain-gtk,LGPLv2+
+495,libcmocka,ASL 2.0
+496,libcmocka-devel,ASL 2.0
+497,libcollection-devel,LGPLv3+
+498,libconfig-devel,LGPLv2+
+499,libcroco-devel,LGPLv2
+500,libcxl-devel,ASL 2.0
+501,libdaemon-devel,LGPLv2+
+502,libdap,LGPLv2+
+503,libdap-devel,LGPLv2+
+504,libdatrie-devel,LGPLv2+
+505,libdb-cxx,BSD and LGPLv2 and Sleepycat
+506,libdb-cxx-devel,BSD and LGPLv2 and Sleepycat
+507,libdb-devel-doc,BSD and LGPLv2 and Sleepycat
+508,libdb-sql,BSD and LGPLv2 and Sleepycat
+509,libdb-sql-devel,BSD and LGPLv2 and Sleepycat
+510,libdbusmenu-devel,LGPLv3 or LGPLv2 and GPLv3
+511,libdbusmenu-doc,LGPLv3 or LGPLv2 and GPLv3
+512,libdbusmenu-gtk3-devel,LGPLv3 or LGPLv2 and GPLv3
+513,libdnet,BSD
+514,libdnet-devel,BSD
+515,libdv,LGPLv2+
+516,libdv-devel,LGPLv2+
+517,libdvdread-devel,GPLv2+
+518,libdwarf,LGPLv2
+519,libdwarf-devel,LGPLv2
+520,libdwarf-static,LGPLv2
+521,libdwarf-tools,GPLv2
+522,libdwarves1,GPLv2
+523,libedit-devel,BSD
+524,libEMF,LGPLv2+ and GPLv2+
+525,libEMF-devel,LGPLv2+ and GPLv2+
+526,libeot,MPLv2.0
+527,libetonyek,MPLv2.0
+528,libetonyek-devel,MPLv2.0
+529,libevdev-devel,MIT
+530,libexif-devel,LGPLv2+
+531,libfabric-devel,BSD or GPLv2
+532,libfdt,GPLv2+
+533,libfdt-devel,GPLv2+
+534,libfontenc-devel,MIT
+535,libgee-devel,LGPLv2+
+536,libgexiv2,GPLv2+
+537,libgexiv2-devel,GPLv2+
+538,libgit2-devel,GPLv2 with exceptions
+539,libgit2-glib-devel,LGPLv2+
+540,libGLEW,BSD and MIT
+541,libgnomekbd-devel,LGPLv2+
+542,libgphoto2-devel,GPLv2+ and GPLv2
+543,libgpod,LGPLv2+
+544,libgpod-devel,LGPLv2+
+545,libgpod-doc,GFDL
+546,libgs-devel,AGPLv3+
+547,libgsf,LGPLv2
+548,libgsf-devel,LGPLv2
+549,libgtop2-devel,GPLv2+
+550,libgudev-devel,LGPLv2+
+551,libguestfs-winsupport,GPLv2+
+552,libgusb-devel,LGPLv2+
+553,libgxps-devel,LGPLv2+
+554,libhbaapi-devel,SNIA
+555,libIDL,LGPLv2+
+556,libIDL-devel,LGPLv2+
+557,libidn-devel,LGPLv2+ and GPLv3+ and GFDL
+558,libidn2-devel,(GPLv2+ or LGPLv3+) and GPLv3+
+559,libiec61883-devel,LGPLv2+
+560,libimobiledevice,LGPLv2+
+561,libimobiledevice-devel,LGPLv2+
+562,libindicator-gtk3-devel,GPLv3
+563,libini_config-devel,LGPLv3+
+564,libinput-devel,MIT
+565,libiscsi,LGPLv2+
+566,libiscsi-devel,LGPLv2+
+567,libiscsi-utils,GPLv2+
+568,libisoburn-devel,GPLv2+
+569,libisofs-devel,GPLv2+ and LGPLv2+
+570,libknet1,LGPLv2+
+571,libknet1-devel,LGPLv2+
+572,libksba-devel,(LGPLv3+ or GPLv2+) and GPLv3+
+573,liblangtag,LGPLv3+ or MPLv2.0
+574,liblangtag-data,UCD
+575,liblangtag-devel,LGPLv3+ or MPLv2.0
+576,liblangtag-doc,LGPLv3+ or MPLv2.0
+577,liblangtag-gobject,LGPLv3+ or MPLv2.0
+578,liblockfile-devel,GPLv2+ and LGPLv2+
+579,libmad,GPLv2+
+580,libmad-devel,GPLv2+
+581,libmemcached,BSD
+582,libmemcached-devel,BSD
+583,libmicrohttpd-devel,LGPLv2+
+584,libmicrohttpd-doc,LGPLv2+
+585,libmnl-devel,LGPLv2+
+586,libmodulemd-devel,MIT
+587,libmount-devel,LGPLv2+
+588,libmpc-devel,LGPLv3+ and GFDL
+589,libmpcdec-devel,BSD
+590,libmspack,LGPLv2
+591,libmspack-devel,LGPLv2
+592,libmtp-devel,LGPLv2+
+593,libmusicbrainz5-devel,LGPLv2
+594,libnet-devel,BSD
+595,libnetfilter_conntrack-devel,GPLv2+
+596,libnetfilter_queue-devel,GPLv2
+597,libnfnetlink-devel,GPLv2+
+598,libnfsidmap-devel,MIT and GPLv2 and GPLv2+ and BSD
+599,libnftnl-devel,GPLv2+
+600,libnghttp2-devel,MIT
+601,libnice-devel,LGPLv2 and MPLv1.1
+602,libnma-devel,GPLv2+
+603,libnsl2-devel,BSD and LGPLv2+
+604,libocxl-devel,ASL 2.0
+605,libocxl-docs,ASL 2.0
+606,libodfgen,LGPLv2+ or MPLv2.0
+607,libodfgen-devel,LGPLv2+ or MPLv2.0
+608,libogg-devel,BSD
+609,libogg-devel-docs,BSD
+610,liboggz,BSD
+611,libopenraw-devel,LGPLv3+
+612,libopenraw-gnome,LGPLv3+
+613,libopenraw-gnome-devel,LGPLv3+
+614,libpaper-devel,GPLv2
+615,libpath_utils-devel,LGPLv3+
+616,libpcap-devel,BSD with advertising
+617,libpciaccess-devel,MIT
+618,libpeas-devel,LGPLv2+
+619,libpeas-gtk,LGPLv2+
+620,libpfm-static,MIT
+621,libplist,LGPLv2+
+622,libplist-devel,LGPLv2+
+623,libpmem-debug,BSD
+624,libpmemblk-debug,BSD
+625,libpmemlog-debug,BSD
+626,libpmemobj-debug,BSD
+627,libpmempool-debug,BSD
+628,libproxy-devel,LGPLv2+
+629,libpsm2-devel,BSD or GPLv2
+630,libpurple-devel,BSD and GPLv2+ and GPLv2 and LGPLv2+ and MIT
+631,libpwquality-devel,BSD or GPLv2+
+632,libqhull,Qhull
+633,libqhull_p,Qhull
+634,libqhull_r,Qhull
+635,libquvi,AGPLv3+
+636,libquvi-devel,AGPLv3+
+637,libquvi-scripts,AGPLv3+
+638,librabbitmq-devel,MIT
+639,librados-devel,LGPL-2.1 and CC-BY-SA-1.0 and GPL-2.0 and BSL-1.0 and BSD-3-Clause and MIT
+640,libradosstriper-devel,LGPL-2.1 and CC-BY-SA-1.0 and GPL-2.0 and BSL-1.0 and BSD-3-Clause and MIT
+641,libradosstriper1,LGPL-2.1 and CC-BY-SA-1.0 and GPL-2.0 and BSL-1.0 and BSD-3-Clause and MIT
+642,LibRaw-devel,BSD and (CDDL or LGPLv2)
+643,libraw1394-devel,LGPLv2+
+644,librbd-devel,LGPL-2.1 and CC-BY-SA-1.0 and GPL-2.0 and BSL-1.0 and BSD-3-Clause and MIT
+645,librdkafka-devel,BSD
+646,libref_array-devel,LGPLv3+
+647,libreoffice-gtk2,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+648,libreoffice-sdk,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+649,libreoffice-sdk-doc,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+650,libreoffice-x11,(MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
+651,librevenge-devel,(LGPLv2+ or MPLv2.0) and BSD
+652,librpmem-debug,BSD
+653,librx,GPLv2+
+654,librx-devel,GPLv2+
+655,libsamplerate-devel,BSD
+656,libsass,MIT
+657,libsass-devel,MIT
+658,libseccomp-devel,LGPLv2
+659,libsepol-static,LGPLv2+
+660,libshout-devel,LGPLv2+
+661,libsigc++20-devel,LGPLv2+
+662,libsigc++20-doc,LGPLv2+
+663,libsigsegv-devel,GPLv2+
+664,libsmbclient-devel,GPLv3+ and LGPLv3+
+665,libsndfile-devel,LGPLv2+ and GPLv2+ and BSD
+666,libspectre-devel,GPLv2+
+667,libsrtp-devel,BSD
+668,libsss_nss_idmap-devel,LGPLv3+
+669,libstdc++-static,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD
+670,libstemmer-devel,BSD
+671,libsysfs-devel,LGPLv2+
+672,libthai-devel,LGPLv2+
+673,libtheora-devel,BSD
+674,libtiff-tools,libtiff
+675,libucil-devel,GPLv2+
+676,libunicap-devel,GPLv2+
+677,libuninameslist,BSD
+678,libunistring-devel,GPLv2+ or LGPLv3+
+679,libusb-devel,LGPLv2+
+680,libusbmuxd,LGPLv2+
+681,libusbmuxd-devel,LGPLv2+
+682,libutempter-devel,LGPLv2+
+683,libv4l-devel,LGPLv2+
+684,libvarlink-devel,ASL 2.0
+685,libvdpau-devel,MIT
+686,libvirt,LGPLv2+
+687,libvirt-admin,LGPLv2+
+688,libvirt-bash-completion,LGPLv2+
+689,libvirt-client,LGPLv2+
+690,libvirt-daemon,LGPLv2+
+691,libvirt-daemon-config-network,LGPLv2+
+692,libvirt-daemon-config-nwfilter,LGPLv2+
+693,libvirt-daemon-driver-interface,LGPLv2+
+694,libvirt-daemon-driver-network,LGPLv2+
+695,libvirt-daemon-driver-nodedev,LGPLv2+
+696,libvirt-daemon-driver-nwfilter,LGPLv2+
+697,libvirt-daemon-driver-secret,LGPLv2+
+698,libvirt-daemon-driver-storage,LGPLv2+
+699,libvirt-daemon-driver-storage-core,LGPLv2+
+700,libvirt-daemon-driver-storage-disk,LGPLv2+
+701,libvirt-daemon-driver-storage-iscsi,LGPLv2+
+702,libvirt-daemon-driver-storage-logical,LGPLv2+
+703,libvirt-daemon-driver-storage-mpath,LGPLv2+
+704,libvirt-daemon-driver-storage-rbd,LGPLv2+
+705,libvirt-daemon-driver-storage-scsi,LGPLv2+
+706,libvirt-dbus,LGPLv2+
+707,libvirt-devel,LGPLv2+
+708,libvirt-docs,LGPLv2+
+709,libvirt-glib,LGPLv2+
+710,libvirt-libs,LGPLv2+
+711,libvirt-nss,LGPLv2+
+712,libvisio,MPLv2.0
+713,libvisio-devel,MPLv2.0
+714,libvisual-devel,LGPLv2+
+715,libvmem-debug,BSD
+716,libvmmalloc-debug,BSD
+717,libvncserver,GPLv2+
+718,libvncserver-devel,GPLv2+
+719,libvorbis-devel,BSD
+720,libvorbis-devel-docs,BSD
+721,libvpd-devel,LGPLv2+
+722,libvpx-devel,BSD
+723,libwacom-devel,MIT
+724,libwbclient-devel,GPLv3+ and LGPLv3+
+725,libwmf-devel,LGPLv2+ and GPLv2+ and GPL+
+726,libwnck3-devel,LGPLv2+
+727,libwpd-devel,LGPLv2+ or MPLv2.0
+728,libwpd-doc,LGPLv2+ or MPLv2.0
+729,libwpg-devel,LGPLv2+ or MPLv2.0
+730,libwpg-doc,LGPLv2+ or MPLv2.0
+731,libwps,LGPLv2+ or MPLv2.0
+732,libwps-devel,LGPLv2+ or MPLv2.0
+733,libwps-doc,LGPLv2+ or MPLv2.0
+734,libwsman-devel,BSD
+735,libxcrypt-static,LGPLv2+ and BSD and Public Domain
+736,libXdmcp-devel,MIT
+737,libXfont2-devel,MIT
+738,libxkbcommon-x11,MIT
+739,libxkbcommon-x11-devel,MIT
+740,libxkbfile-devel,MIT
+741,libxklavier-devel,LGPLv2+
+742,libXNVCtrl-devel,GPLv2+
+743,libXres-devel,MIT
+744,libXvMC-devel,MIT
+745,libyaml-devel,MIT
+746,linuxdoc-tools,MIT
+747,lockdev-devel,LGPLv2
+748,log4j-over-slf4j,MIT and ASL 2.0
+749,log4j12,ASL 2.0
+750,log4j12-javadoc,ASL 2.0
+751,lttng-ust-devel,LGPLv2 and GPLv2 and MIT
+752,lua,MIT
+753,lua-devel,MIT
+754,lua-expat,MIT
+755,lua-filesystem,MIT
+756,lua-json,MIT
+757,lua-lpeg,MIT
+758,lua-lunit,MIT
+759,lua-posix,MIT
+760,lua-socket,MIT
+761,lvm2-devel,LGPLv2
+762,lynx,GPLv2
+763,maven,ASL 2.0 and MIT
+764,maven-antrun-plugin,ASL 2.0
+765,maven-antrun-plugin-javadoc,ASL 2.0
+766,maven-archiver,ASL 2.0
+767,maven-archiver-javadoc,ASL 2.0
+768,maven-artifact,ASL 2.0
+769,maven-artifact-manager,ASL 2.0
+770,maven-artifact-resolver,ASL 2.0
+771,maven-artifact-resolver-javadoc,ASL 2.0
+772,maven-artifact-transfer,ASL 2.0
+773,maven-artifact-transfer-javadoc,ASL 2.0
+774,maven-assembly-plugin,ASL 2.0
+775,maven-assembly-plugin-javadoc,ASL 2.0
+776,maven-cal10n-plugin,MIT
+777,maven-clean-plugin,ASL 2.0
+778,maven-clean-plugin-javadoc,ASL 2.0
+779,maven-common-artifact-filters,ASL 2.0
+780,maven-common-artifact-filters-javadoc,ASL 2.0
+781,maven-compiler-plugin,ASL 2.0
+782,maven-compiler-plugin-javadoc,ASL 2.0
+783,maven-dependency-analyzer,ASL 2.0
+784,maven-dependency-analyzer-javadoc,ASL 2.0
+785,maven-dependency-plugin,ASL 2.0
+786,maven-dependency-plugin-javadoc,ASL 2.0
+787,maven-dependency-tree,ASL 2.0
+788,maven-dependency-tree-javadoc,ASL 2.0
+789,maven-doxia,ASL 2.0
+790,maven-doxia-core,ASL 2.0
+791,maven-doxia-javadoc,ASL 2.0
+792,maven-doxia-logging-api,ASL 2.0
+793,maven-doxia-module-apt,ASL 2.0
+794,maven-doxia-module-confluence,ASL 2.0
+795,maven-doxia-module-docbook-simple,ASL 2.0
+796,maven-doxia-module-fml,ASL 2.0
+797,maven-doxia-module-latex,ASL 2.0
+798,maven-doxia-module-rtf,ASL 2.0
+799,maven-doxia-module-twiki,ASL 2.0
+800,maven-doxia-module-xdoc,ASL 2.0
+801,maven-doxia-module-xhtml,ASL 2.0
+802,maven-doxia-modules,ASL 2.0
+803,maven-doxia-sink-api,ASL 2.0
+804,maven-doxia-sitetools,ASL 2.0
+805,maven-doxia-sitetools-javadoc,ASL 2.0
+806,maven-doxia-test-docs,ASL 2.0
+807,maven-doxia-tests,ASL 2.0
+808,maven-enforcer,ASL 2.0
+809,maven-enforcer-api,ASL 2.0
+810,maven-enforcer-javadoc,ASL 2.0
+811,maven-enforcer-plugin,ASL 2.0
+812,maven-enforcer-rules,ASL 2.0
+813,maven-failsafe-plugin,ASL 2.0 and CPL
+814,maven-file-management,ASL 2.0
+815,maven-file-management-javadoc,ASL 2.0
+816,maven-filtering,ASL 2.0
+817,maven-filtering-javadoc,ASL 2.0
+818,maven-hawtjni-plugin,ASL 2.0 and EPL-1.0 and BSD
+819,maven-install-plugin,ASL 2.0
+820,maven-install-plugin-javadoc,ASL 2.0
+821,maven-invoker,ASL 2.0
+822,maven-invoker-javadoc,ASL 2.0
+823,maven-invoker-plugin,ASL 2.0
+824,maven-invoker-plugin-javadoc,ASL 2.0
+825,maven-jar-plugin,ASL 2.0
+826,maven-jar-plugin-javadoc,ASL 2.0
+827,maven-javadoc,ASL 2.0 and MIT
+828,maven-lib,ASL 2.0 and MIT
+829,maven-local,BSD
+830,maven-model,ASL 2.0
+831,maven-monitor,ASL 2.0
+832,maven-parent,ASL 2.0
+833,maven-plugin-annotations,ASL 2.0
+834,maven-plugin-build-helper,MIT
+835,maven-plugin-build-helper-javadoc,MIT
+836,maven-plugin-bundle,ASL 2.0
+837,maven-plugin-bundle-javadoc,ASL 2.0
+838,maven-plugin-descriptor,ASL 2.0
+839,maven-plugin-plugin,ASL 2.0
+840,maven-plugin-registry,ASL 2.0
+841,maven-plugin-testing,ASL 2.0
+842,maven-plugin-testing-harness,ASL 2.0
+843,maven-plugin-testing-javadoc,ASL 2.0
+844,maven-plugin-testing-tools,ASL 2.0
+845,maven-plugin-tools,ASL 2.0
+846,maven-plugin-tools-annotations,ASL 2.0
+847,maven-plugin-tools-ant,ASL 2.0
+848,maven-plugin-tools-api,ASL 2.0
+849,maven-plugin-tools-beanshell,ASL 2.0
+850,maven-plugin-tools-generators,ASL 2.0
+851,maven-plugin-tools-java,ASL 2.0
+852,maven-plugin-tools-javadoc,ASL 2.0
+853,maven-plugin-tools-javadocs,ASL 2.0
+854,maven-plugin-tools-model,ASL 2.0
+855,maven-plugins-pom,ASL 2.0
+856,maven-profile,ASL 2.0
+857,maven-project,ASL 2.0
+858,maven-remote-resources-plugin,ASL 2.0
+859,maven-remote-resources-plugin-javadoc,ASL 2.0
+860,maven-reporting-api,ASL 2.0
+861,maven-reporting-api-javadoc,ASL 2.0
+862,maven-reporting-impl,ASL 2.0
+863,maven-reporting-impl-javadoc,ASL 2.0
+864,maven-resolver,ASL 2.0
+865,maven-resolver-api,ASL 2.0
+866,maven-resolver-connector-basic,ASL 2.0
+867,maven-resolver-impl,ASL 2.0
+868,maven-resolver-javadoc,ASL 2.0
+869,maven-resolver-spi,ASL 2.0
+870,maven-resolver-test-util,ASL 2.0
+871,maven-resolver-transport-classpath,ASL 2.0
+872,maven-resolver-transport-file,ASL 2.0
+873,maven-resolver-transport-http,ASL 2.0
+874,maven-resolver-transport-wagon,ASL 2.0
+875,maven-resolver-util,ASL 2.0
+876,maven-resources-plugin,ASL 2.0
+877,maven-resources-plugin-javadoc,ASL 2.0
+878,maven-script,ASL 2.0
+879,maven-script-ant,ASL 2.0
+880,maven-script-beanshell,ASL 2.0
+881,maven-script-interpreter,ASL 2.0
+882,maven-script-interpreter-javadoc,ASL 2.0
+883,maven-settings,ASL 2.0
+884,maven-shade-plugin,ASL 2.0
+885,maven-shade-plugin-javadoc,ASL 2.0
+886,maven-shared,ASL 2.0
+887,maven-shared-incremental,ASL 2.0
+888,maven-shared-incremental-javadoc,ASL 2.0
+889,maven-shared-io,ASL 2.0
+890,maven-shared-io-javadoc,ASL 2.0
+891,maven-shared-utils,ASL 2.0
+892,maven-shared-utils-javadoc,ASL 2.0
+893,maven-source-plugin,ASL 2.0
+894,maven-source-plugin-javadoc,ASL 2.0
+895,maven-surefire,ASL 2.0 and CPL
+896,maven-surefire-javadoc,ASL 2.0 and CPL
+897,maven-surefire-plugin,ASL 2.0 and CPL
+898,maven-surefire-provider-junit,ASL 2.0 and CPL
+899,maven-surefire-provider-testng,ASL 2.0 and CPL
+900,maven-surefire-report-parser,ASL 2.0 and CPL
+901,maven-surefire-report-plugin,ASL 2.0 and CPL
+902,maven-test-tools,ASL 2.0
+903,maven-toolchain,ASL 2.0
+904,maven-verifier,ASL 2.0
+905,maven-verifier-javadoc,ASL 2.0
+906,maven-wagon,ASL 2.0
+907,maven-wagon-file,ASL 2.0
+908,maven-wagon-ftp,ASL 2.0
+909,maven-wagon-http,ASL 2.0
+910,maven-wagon-http-lightweight,ASL 2.0
+911,maven-wagon-http-shared,ASL 2.0
+912,maven-wagon-javadoc,ASL 2.0
+913,maven-wagon-provider-api,ASL 2.0
+914,maven-wagon-providers,ASL 2.0
+915,maven2-javadoc,ASL 2.0
+916,memkind-devel,BSD
+917,mesa-libgbm-devel,MIT
+918,mesa-libOSMesa-devel,MIT
+919,meson,ASL 2.0
+920,metis,ASL 2.0 and BSD and LGPLv2+
+921,metis-devel,ASL 2.0 and BSD and LGPLv2+
+922,mingw-binutils-generic,GPLv2+ and LGPLv2+ and GPLv3+ and LGPLv3+
+923,mingw-filesystem-base,GPLv2+
+924,mingw32-binutils,GPLv2+ and LGPLv2+ and GPLv3+ and LGPLv3+
+925,mingw32-bzip2,BSD
+926,mingw32-bzip2-static,BSD
+927,mingw32-cairo,LGPLv2 or MPLv1.1
+928,mingw32-cpp,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions
+929,mingw32-crt,Public Domain and ZPLv2.1
+930,mingw32-expat,MIT
+931,mingw32-filesystem,GPLv2+
+932,mingw32-fontconfig,MIT
+933,mingw32-freetype,FTL or GPLv2+
+934,mingw32-freetype-static,FTL or GPLv2+
+935,mingw32-gcc,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions
+936,mingw32-gcc-c++,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions
+937,mingw32-gettext,GPLv2+ and LGPLv2+
+938,mingw32-gettext-static,GPLv2+ and LGPLv2+
+939,mingw32-glib2,LGPLv2+
+940,mingw32-glib2-static,LGPLv2+
+941,mingw32-gstreamer1,LGPLv2+
+942,mingw32-harfbuzz,MIT
+943,mingw32-harfbuzz-static,MIT
+944,mingw32-headers,Public Domain and LGPLv2+ and ZPLv2.1
+945,mingw32-icu,MIT and UCD and Public Domain
+946,mingw32-libffi,BSD
+947,mingw32-libjpeg-turbo,wxWidgets
+948,mingw32-libjpeg-turbo-static,wxWidgets
+949,mingw32-libpng,zlib
+950,mingw32-libpng-static,zlib
+951,mingw32-libtiff,libtiff
+952,mingw32-libtiff-static,libtiff
+953,mingw32-openssl,OpenSSL
+954,mingw32-pcre,BSD
+955,mingw32-pcre-static,BSD
+956,mingw32-pixman,MIT
+957,mingw32-pkg-config,GPLv2+
+958,mingw32-readline,GPLv2+
+959,mingw32-spice-vdagent,GPLv2+
+960,mingw32-sqlite,Public Domain
+961,mingw32-sqlite-static,Public Domain
+962,mingw32-termcap,GPLv2+
+963,mingw32-win-iconv,Public Domain
+964,mingw32-win-iconv-static,Public Domain
+965,mingw32-winpthreads,MIT and BSD
+966,mingw32-winpthreads-static,MIT and BSD
+967,mingw32-zlib,zlib
+968,mingw32-zlib-static,zlib
+969,mingw64-binutils,GPLv2+ and LGPLv2+ and GPLv3+ and LGPLv3+
+970,mingw64-bzip2,BSD
+971,mingw64-bzip2-static,BSD
+972,mingw64-cairo,LGPLv2 or MPLv1.1
+973,mingw64-cpp,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions
+974,mingw64-crt,Public Domain and ZPLv2.1
+975,mingw64-expat,MIT
+976,mingw64-filesystem,GPLv2+
+977,mingw64-fontconfig,MIT
+978,mingw64-freetype,FTL or GPLv2+
+979,mingw64-freetype-static,FTL or GPLv2+
+980,mingw64-gcc,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions
+981,mingw64-gcc-c++,GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions
+982,mingw64-gettext,GPLv2+ and LGPLv2+
+983,mingw64-gettext-static,GPLv2+ and LGPLv2+
+984,mingw64-glib2,LGPLv2+
+985,mingw64-glib2-static,LGPLv2+
+986,mingw64-gstreamer1,LGPLv2+
+987,mingw64-harfbuzz,MIT
+988,mingw64-harfbuzz-static,MIT
+989,mingw64-headers,Public Domain and LGPLv2+ and ZPLv2.1
+990,mingw64-icu,MIT and UCD and Public Domain
+991,mingw64-libffi,BSD
+992,mingw64-libjpeg-turbo,wxWidgets
+993,mingw64-libjpeg-turbo-static,wxWidgets
+994,mingw64-libpng,zlib
+995,mingw64-libpng-static,zlib
+996,mingw64-libtiff,libtiff
+997,mingw64-libtiff-static,libtiff
+998,mingw64-openssl,OpenSSL
+999,mingw64-pcre,BSD
+1000,mingw64-pcre-static,BSD
+1001,mingw64-pixman,MIT
+1002,mingw64-pkg-config,GPLv2+
+1003,mingw64-readline,GPLv2+
+1004,mingw64-spice-vdagent,GPLv2+
+1005,mingw64-sqlite,Public Domain
+1006,mingw64-sqlite-static,Public Domain
+1007,mingw64-termcap,GPLv2+
+1008,mingw64-win-iconv,Public Domain
+1009,mingw64-win-iconv-static,Public Domain
+1010,mingw64-winpthreads,MIT and BSD
+1011,mingw64-winpthreads-static,MIT and BSD
+1012,mingw64-zlib,zlib
+1013,mingw64-zlib-static,zlib
+1014,mockito,MIT
+1015,mockito-javadoc,MIT
+1016,modello,ASL 2.0 and BSD and MIT
+1017,modello-javadoc,ASL 2.0 and BSD and MIT
+1018,ModemManager,GPLv2+
+1019,ModemManager-devel,GPLv2+
+1020,ModemManager-glib-devel,GPLv2+
+1021,mojo-parent,ASL 2.0
+1022,mozjs52-devel,MPLv2.0 and MPLv1.1 and BSD and GPLv2+ and GPLv3+ and LGPLv2.1 and LGPLv2.1+ and AFL and ASL 2.0
+1023,mozjs60-devel,MPLv2.0 and MPLv1.1 and BSD and GPLv2+ and GPLv3+ and LGPLv2+ and AFL and ASL 2.0
+1024,mpg123-devel,LGPLv2+
+1025,mtdev-devel,MIT
+1026,munge-devel,GPLv3+ and LGPLv3+
+1027,munge-maven-plugin,CDDL-1.0
+1028,munge-maven-plugin-javadoc,CDDL-1.0
+1029,mutter-devel,GPLv2+
+1030,mythes-devel,BSD and MIT
+1031,nasm,BSD
+1032,nautilus,GPLv3+
+1033,nautilus-devel,LGPLv2+
+1034,ndctl-devel,LGPLv2
+1035,neon-devel,LGPLv2+ and GPLv2+
+1036,netcf,LGPLv2+
+1037,netcf-devel,LGPLv2+
+1038,netcf-libs,LGPLv2+
+1039,netpbm-devel,BSD and GPLv2 and IJG and MIT and Public Domain
+1040,netpbm-doc,BSD and GPLv2 and IJG and MIT and Public Domain
+1041,NetworkManager-libnm-devel,LGPLv2+
+1042,nghttp2,MIT
+1043,ninja-build,ASL 2.0
+1044,nkf,BSD
+1045,nss_hesiod,LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL
+1046,objectweb-asm,BSD
+1047,objectweb-asm-javadoc,BSD
+1048,objectweb-pom,ASL 2.0
+1049,objenesis,ASL 2.0
+1050,objenesis-javadoc,ASL 2.0
+1051,ocaml,QPL and (LGPLv2+ with exceptions)
+1052,ocaml-camlp4,LGPLv2+ with exceptions
+1053,ocaml-camlp4-devel,LGPLv2+ with exceptions
+1054,ocaml-compiler-libs,QPL and (LGPLv2+ with exceptions)
+1055,ocaml-cppo,BSD
+1056,ocaml-extlib,LGPLv2+ with exceptions
+1057,ocaml-extlib-devel,LGPLv2+ with exceptions
+1058,ocaml-findlib,BSD
+1059,ocaml-findlib-devel,BSD
+1060,ocaml-hivex,LGPLv2
+1061,ocaml-hivex-devel,LGPLv2
+1062,ocaml-labltk,LGPLv2+ with exceptions
+1063,ocaml-labltk-devel,LGPLv2+ with exceptions
+1064,ocaml-libguestfs,LGPLv2+
+1065,ocaml-libguestfs-devel,LGPLv2+
+1066,ocaml-ocamlbuild,LGPLv2+ with exceptions
+1067,ocaml-ocamlbuild-devel,LGPLv2+ with exceptions
+1068,ocaml-ocamldoc,QPL and (LGPLv2+ with exceptions)
+1069,ocaml-runtime,QPL and (LGPLv2+ with exceptions)
+1070,ocl-icd-devel,BSD
+1071,oniguruma-devel,BSD
+1072,openal-soft-devel,LGPLv2+
+1073,openblas-devel,BSD
+1074,openblas-openmp,BSD
+1075,openblas-openmp64,BSD
+1076,openblas-openmp64_,BSD
+1077,openblas-Rblas,BSD
+1078,openblas-serial64,BSD
+1079,openblas-serial64_,BSD
+1080,openblas-static,BSD
+1081,openblas-threads64,BSD
+1082,openblas-threads64_,BSD
+1083,opencl-filesystem,Public Domain
+1084,opencl-headers,MIT
+1085,opencryptoki-devel,CPL
+1086,opencv-devel,BSD
+1087,OpenEXR-devel,BSD
+1088,OpenIPMI-devel,LGPLv2+ and GPLv2+ or BSD
+1089,openjade,DMIT
+1090,openjpeg2-devel,BSD and MIT
+1091,openjpeg2-tools,BSD and MIT
+1092,openscap-engine-sce-devel,LGPLv2+
+1093,opensm-devel,GPLv2 or BSD
+1094,opensp,MIT
+1095,opensp-devel,MIT
+1096,opus-devel,BSD
+1097,os-maven-plugin,ASL 2.0
+1098,os-maven-plugin-javadoc,ASL 2.0
+1099,osgi-annotation,ASL 2.0
+1100,osgi-annotation-javadoc,ASL 2.0
+1101,osgi-compendium,ASL 2.0
+1102,osgi-compendium-javadoc,ASL 2.0
+1103,osgi-core,ASL 2.0
+1104,osgi-core-javadoc,ASL 2.0
+1105,PackageKit-glib-devel,GPLv2+ and LGPLv2+
+1106,pandoc,GPLv2+
+1107,pandoc-common,GPLv2+
+1108,pangomm-devel,LGPLv2+
+1109,pangomm-doc,LGPLv2+
+1110,papi-testsuite,BSD
+1111,parted-devel,GPLv3+
+1112,pcre-static,BSD
+1113,pcsc-lite-devel,BSD
+1114,perl-AnyEvent,GPL+ or Artistic
+1115,perl-B-Hooks-EndOfScope,GPL+ or Artistic
+1116,perl-Canary-Stability,GPL+ or Artistic
+1117,perl-Capture-Tiny,ASL 2.0
+1118,perl-Class-Accessor,GPL+ or Artistic
+1119,perl-Class-Data-Inheritable,GPL+ or Artistic
+1120,perl-Class-Factory-Util,GPL+ or Artistic
+1121,perl-Class-Method-Modifiers,GPL+ or Artistic
+1122,perl-Class-Singleton,GPL+ or Artistic
+1123,perl-Class-Tiny,ASL 2.0
+1124,perl-Class-XSAccessor,GPL+ or Artistic
+1125,perl-Clone,GPL+ or Artistic
+1126,perl-common-sense,GPL+ or Artistic
+1127,perl-Config-AutoConf,GPL+ or Artistic
+1128,perl-Data-UUID,BSD and MIT
+1129,perl-Date-ISO8601,GPL+ or Artistic
+1130,perl-DateTime,Artistic 2.0
+1131,perl-DateTime-Format-Builder,Artistic 2.0 and (GPL+ or Artistic)
+1132,perl-DateTime-Format-HTTP,GPL+ or Artistic
+1133,perl-DateTime-Format-ISO8601,GPL+ or Artistic
+1134,perl-DateTime-Format-Mail,GPL+ or Artistic
+1135,perl-DateTime-Format-Strptime,Artistic 2.0
+1136,perl-DateTime-Locale,(GPL+ or Artistic) and Unicode
+1137,perl-DateTime-TimeZone,(GPL+ or Artistic) and Public Domain
+1138,perl-DateTime-TimeZone-SystemV,GPL+ or Artistic
+1139,perl-DateTime-TimeZone-Tzfile,GPL+ or Artistic
+1140,perl-Devel-CallChecker,GPL+ or Artistic
+1141,perl-Devel-Caller,GPL+ or Artistic
+1142,perl-Devel-CheckLib,GPL+ or Artistic
+1143,perl-Devel-GlobalDestruction,GPL+ or Artistic
+1144,perl-Devel-LexAlias,GPL+ or Artistic
+1145,perl-Devel-StackTrace,Artistic 2.0
+1146,perl-Devel-Symdump,GPL+ or Artistic
+1147,perl-Digest-CRC,Public Domain
+1148,perl-Digest-SHA1,GPL+ or Artistic
+1149,perl-Dist-CheckConflicts,GPL+ or Artistic
+1150,perl-DynaLoader-Functions,GPL+ or Artistic
+1151,perl-Eval-Closure,GPL+ or Artistic
+1152,perl-Exception-Class,GPL+ or Artistic
+1153,perl-Exporter-Tiny,GPL+ or Artistic
+1154,perl-File-BaseDir,GPL+ or Artistic
+1155,perl-File-chdir,GPL+ or Artistic
+1156,perl-File-Copy-Recursive,GPL+ or Artistic
+1157,perl-File-DesktopEntry,GPL+ or Artistic
+1158,perl-File-Find-Object,GPLv2+ or Artistic 2.0
+1159,perl-File-Find-Rule,GPL+ or Artistic
+1160,perl-File-MimeInfo,GPL+ or Artistic
+1161,perl-File-ReadBackwards,GPL+ or Artistic
+1162,perl-File-Remove,GPL+ or Artistic
+1163,perl-hivex,LGPLv2
+1164,perl-HTML-Tree,GPL+ or Artistic
+1165,perl-HTTP-Daemon,GPL+ or Artistic
+1166,perl-Import-Into,GPL+ or Artistic
+1167,perl-Importer,GPL+ or Artistic
+1168,perl-IO-All,GPL+ or Artistic
+1169,perl-IO-String,GPL+ or Artistic
+1170,perl-IO-stringy,GPL+ or Artistic
+1171,perl-IO-Tty,(GPL+ or Artistic) and BSD
+1172,perl-IPC-Run,GPL+ or Artistic
+1173,perl-IPC-Run3,GPL+ or Artistic or BSD
+1174,perl-JSON-XS,GPL+ or Artistic
+1175,perl-List-MoreUtils,(GPL+ or Artistic) and ASL 2.0
+1176,perl-List-MoreUtils-XS,(GPL+ or Artistic) and ASL 2.0
+1177,perl-Locale-gettext,GPL+ or Artistic
+1178,perl-MIME-Charset,GPL+ or Artistic
+1179,perl-MIME-Types,GPL+ or Artistic
+1180,perl-Module-Implementation,Artistic 2.0
+1181,perl-Module-Install,GPL+ or Artistic
+1182,perl-Module-Install-AuthorTests,GPL+ or Artistic
+1183,perl-Module-Install-ReadmeFromPod,GPL+ or Artistic
+1184,perl-Module-ScanDeps,GPL+ or Artistic
+1185,perl-namespace-autoclean,GPL+ or Artistic
+1186,perl-namespace-clean,GPL+ or Artistic
+1187,perl-NKF,BSD
+1188,perl-Number-Compare,GPL+ or Artistic
+1189,perl-Package-DeprecationManager,Artistic 2.0
+1190,perl-Package-Stash,GPL+ or Artistic
+1191,perl-Package-Stash-XS,GPL+ or Artistic
+1192,perl-PadWalker,GPL+ or Artistic
+1193,perl-Params-Classify,GPL+ or Artistic
+1194,perl-Params-Validate,Artistic 2.0 and (GPL+ or Artistic)
+1195,perl-Params-ValidationCompiler,Artistic 2.0
+1196,perl-Path-Tiny,ASL 2.0
+1197,perl-Perl-Destruct-Level,GPL+ or Artistic
+1198,perl-PerlIO-utf8_strict,GPL+ or Artistic
+1199,perl-Pod-Coverage,GPL+ or Artistic
+1200,perl-Pod-Markdown,GPL+ or Artistic
+1201,perl-prefork,GPL+ or Artistic
+1202,perl-Readonly,GPL+ or Artistic
+1203,perl-Ref-Util,MIT
+1204,perl-Ref-Util-XS,MIT
+1205,perl-Role-Tiny,GPL+ or Artistic
+1206,perl-Scope-Guard,GPL+ or Artistic
+1207,perl-SGMLSpm,GPLv2+
+1208,perl-Specio,Artistic 2.0
+1209,perl-Sub-Exporter-Progressive,GPL+ or Artistic
+1210,perl-Sub-Identify,GPL+ or Artistic
+1211,perl-Sub-Info,GPL+ or Artistic
+1212,perl-Sub-Name,GPL+ or Artistic
+1213,perl-Sub-Uplevel,GPL+ or Artistic
+1214,perl-SUPER,GPL+ or Artistic
+1215,perl-Switch,GPL+ or Artistic
+1216,perl-Sys-Virt,GPLv2+ or Artistic
+1217,perl-Taint-Runtime,GPL+ or Artistic
+1218,perl-Term-Size-Any,GPL+ or Artistic
+1219,perl-Term-Size-Perl,GPL+ or Artistic
+1220,perl-Term-Table,GPL+ or Artistic
+1221,perl-Test-Deep,GPL+ or Artistic
+1222,perl-Test-Differences,GPL+ or Artistic
+1223,perl-Test-Exception,GPL+ or Artistic
+1224,perl-Test-Fatal,GPL+ or Artistic
+1225,perl-Test-LongString,GPL+ or Artistic
+1226,perl-Test-NoWarnings,LGPLv2+
+1227,perl-Test-Pod,GPL+ or Artistic
+1228,perl-Test-Pod-Coverage,Artistic 2.0
+1229,perl-Test-Requires,GPL+ or Artistic
+1230,perl-Test-Taint,GPL+ or Artistic
+1231,perl-Test-Warn,GPL+ or Artistic
+1232,perl-Test-Warnings,GPL+ or Artistic
+1233,perl-Test2-Suite,GPL+ or Artistic
+1234,perl-Text-CharWidth,GPL+ or Artistic
+1235,perl-Text-WrapI18N,GPL+ or Artistic
+1236,perl-Tie-IxHash,GPL+ or Artistic
+1237,perl-Tk,(GPL+ or Artistic) and SWL
+1238,perl-Tk-devel,(GPL+ or Artistic) and SWL
+1239,perl-Types-Serialiser,GPL+ or Artistic
+1240,perl-Unicode-EastAsianWidth,CC0
+1241,perl-Unicode-LineBreak,GPL+ or Artistic
+1242,perl-Unicode-UTF8,GPL+ or Artistic
+1243,perl-Variable-Magic,GPL+ or Artistic
+1244,perl-XML-DOM,GPL+ or Artistic
+1245,perl-XML-RegExp,GPL+ or Artistic
+1246,perl-XML-Twig,GPL+ or Artistic
+1247,perl-YAML-LibYAML,GPL+ or Artistic
+1248,perl-YAML-Syck,BSD and MIT
+1249,perl-YAML-Tiny,GPL+ or Artistic
+1250,perltidy,GPLv2+
+1251,pidgin-devel,BSD and GPLv2+ and GPLv2 and LGPLv2+ and MIT
+1252,plexus-ant-factory,ASL 2.0
+1253,plexus-ant-factory-javadoc,ASL 2.0
+1254,plexus-archiver,ASL 2.0
+1255,plexus-archiver-javadoc,ASL 2.0
+1256,plexus-bsh-factory,MIT
+1257,plexus-bsh-factory-javadoc,MIT
+1258,plexus-build-api,ASL 2.0
+1259,plexus-build-api-javadoc,ASL 2.0
+1260,plexus-cipher,ASL 2.0
+1261,plexus-cipher-javadoc,ASL 2.0
+1262,plexus-classworlds,ASL 2.0 and Plexus
+1263,plexus-classworlds-javadoc,ASL 2.0 and Plexus
+1264,plexus-cli,ASL 2.0
+1265,plexus-cli-javadoc,ASL 2.0
+1266,plexus-compiler,MIT and ASL 2.0
+1267,plexus-compiler-extras,MIT and ASL 2.0 and ASL 1.1
+1268,plexus-compiler-javadoc,MIT and ASL 2.0 and ASL 1.1
+1269,plexus-compiler-pom,MIT and ASL 2.0
+1270,plexus-component-api,ASL 2.0
+1271,plexus-component-api-javadoc,ASL 2.0
+1272,plexus-component-factories-pom,ASL 2.0
+1273,plexus-components-pom,ASL 2.0
+1274,plexus-containers,ASL 2.0 and MIT and xpp
+1275,plexus-containers-component-annotations,ASL 2.0 and MIT and xpp
+1276,plexus-containers-component-javadoc,ASL 2.0 and MIT and xpp
+1277,plexus-containers-component-metadata,ASL 2.0 and MIT and xpp
+1278,plexus-containers-container-default,ASL 2.0 and MIT and xpp
+1279,plexus-containers-javadoc,ASL 2.0 and MIT and xpp
+1280,plexus-i18n,ASL 2.0
+1281,plexus-i18n-javadoc,ASL 2.0
+1282,plexus-interactivity,MIT
+1283,plexus-interactivity-api,MIT
+1284,plexus-interactivity-javadoc,MIT
+1285,plexus-interactivity-jline,MIT
+1286,plexus-interpolation,ASL 2.0 and ASL 1.1 and MIT
+1287,plexus-interpolation-javadoc,ASL 2.0 and ASL 1.1 and MIT
+1288,plexus-io,ASL 2.0
+1289,plexus-io-javadoc,ASL 2.0
+1290,plexus-languages,ASL 2.0
+1291,plexus-languages-javadoc,ASL 2.0
+1292,plexus-pom,ASL 2.0
+1293,plexus-resources,MIT
+1294,plexus-resources-javadoc,MIT
+1295,plexus-sec-dispatcher,ASL 2.0
+1296,plexus-sec-dispatcher-javadoc,ASL 2.0
+1297,plexus-utils,ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
+1298,plexus-utils-javadoc,ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain
+1299,plexus-velocity,ASL 2.0
+1300,plexus-velocity-javadoc,ASL 2.0
+1301,plotutils,GPLv2+ and GPLv3+
+1302,plotutils-devel,GPLv2+ and GPLv3+
+1303,po4a,GPL+
+1304,poppler-cpp,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+1305,poppler-cpp-devel,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+1306,poppler-devel,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+1307,poppler-glib-devel,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+1308,poppler-qt5,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+1309,poppler-qt5-devel,(GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT
+1310,powermock-api-easymock,ASL 2.0
+1311,powermock-api-mockito,ASL 2.0 and MIT
+1312,powermock-api-support,ASL 2.0
+1313,powermock-common,ASL 2.0
+1314,powermock-core,ASL 2.0
+1315,powermock-javadoc,ASL 2.0
+1316,powermock-junit4,ASL 2.0
+1317,powermock-reflect,ASL 2.0
+1318,powermock-testng,ASL 2.0
+1319,ppp,BSD and LGPLv2+ and GPLv2+ and Public Domain
+1320,ppp-devel,BSD and LGPLv2+ and GPLv2+ and Public Domain
+1321,pps-tools-devel,GPLv2+
+1322,protobuf-c-compiler,BSD
+1323,protobuf-c-devel,BSD
+1324,protobuf-compiler,BSD
+1325,protobuf-devel,BSD
+1326,pstoedit,GPLv2+
+1327,ptscotch-mpich,CeCILL-C
+1328,ptscotch-mpich-devel,CeCILL-C
+1329,ptscotch-mpich-devel-parmetis,CeCILL-C
+1330,ptscotch-openmpi,CeCILL-C
+1331,ptscotch-openmpi-devel,CeCILL-C
+1332,pygobject3-devel,LGPLv2+ and MIT
+1333,python-cups-doc,GPLv2+
+1334,python-sphinx-locale,BSD
+1335,python2-iso8601,MIT
+1336,python3-Cython,ASL 2.0
+1337,python3-greenlet,MIT
+1338,python3-greenlet-devel,MIT
+1339,python3-hivex,LGPLv2
+1340,python3-httplib2,MIT
+1341,python3-hypothesis,MPLv2.0
+1342,python3-imagesize,MIT
+1343,python3-iso8601,MIT
+1344,python3-javapackages,BSD
+1345,python3-lesscpy,MIT
+1346,python3-libpfm,MIT
+1347,python3-libvirt,LGPLv2+
+1348,python3-markdown,BSD
+1349,python3-mock,BSD
+1350,python3-mpich,MIT
+1351,python3-openmpi,BSD and MIT and Romio
+1352,python3-packaging,BSD or ASL 2.0
+1353,python3-pyxattr,LGPLv2+
+1354,python3-qt5-devel,GPLv3
+1355,python3-rrdtool,GPLv2+ with exceptions
+1356,python3-scons,MIT
+1357,python3-setuptools_scm,MIT
+1358,python3-sip-devel,GPLv2 or GPLv3 and (GPLv3+ with exceptions)
+1359,python3-snowballstemmer,BSD
+1360,python3-sphinx,BSD and Public Domain and Python and (MIT or GPLv2)
+1361,python3-sphinx-theme-alabaster,BSD
+1362,python3-sphinx_rtd_theme,MIT
+1363,python3-sphinxcontrib-websupport,BSD
+1364,python3-sure,GPLv3+
+1365,python3-unittest2,BSD
+1366,python3-whoosh,BSD
+1367,python38-atomicwrites,MIT
+1368,python38-attrs,MIT
+1369,python38-more-itertools,MIT
+1370,python38-packaging,BSD or ASL 2.0
+1371,python38-pluggy,MIT
+1372,python38-py,MIT and Public Domain
+1373,python38-pyparsing,MIT
+1374,python38-pytest,MIT
+1375,python38-wcwidth,MIT
+1376,qdox,ASL 2.0
+1377,qdox-javadoc,ASL 2.0
+1378,qemu-kvm-tests,GPLv2 and GPLv2+ and CC-BY
+1379,qhull-devel,Qhull
+1380,qrencode-devel,LGPLv2+
+1381,qt5-devel,GPLv3
+1382,qt5-qtbase-static,LGPLv2 with exceptions or GPLv3 with exceptions
+1383,qt5-qtdeclarative-static,LGPLv2 with exceptions or GPLv3 with exceptions
+1384,qt5-qtquickcontrols2-devel,GPLv2+ or LGPLv3 and GFDL
+1385,qt5-qttools-static,LGPLv3 or LGPLv2
+1386,qt5-qtwayland-devel,LGPLv3
+1387,raptor2,GPLv2+ or LGPLv2+ or ASL 2.0
+1388,raptor2-devel,GPLv2+ or LGPLv2+ or ASL 2.0
+1389,rasqal,LGPLv2+ or ASL 2.0
+1390,rasqal-devel,LGPLv2+ or ASL 2.0
+1391,re2c,Public Domain
+1392,recode-devel,GPLv2+
+1393,redland,LGPLv2+ or ASL 2.0
+1394,redland-devel,LGPLv2+ or ASL 2.0
+1395,regexp,ASL 2.0
+1396,regexp-javadoc,ASL 2.0
+1397,rpcgen,BSD and LGPLv2+
+1398,rpcsvc-proto-devel,BSD and LGPLv2+
+1399,rrdtool-devel,GPLv2+ with exceptions
+1400,rrdtool-doc,GPLv2+ with exceptions
+1401,rrdtool-lua,GPLv2+ with exceptions
+1402,rrdtool-ruby,GPLv2+ with exceptions
+1403,rrdtool-tcl,GPLv2+ with exceptions
+1404,ruby-hivex,LGPLv2
+1405,rubygem-diff-lcs,GPLv2+ or Artistic or MIT
+1406,rubygem-rspec,MIT
+1407,rubygem-rspec-core,MIT
+1408,rubygem-rspec-expectations,MIT
+1409,rubygem-rspec-mocks,MIT
+1410,rubygem-rspec-support,MIT
+1411,s390utils-devel,MIT
+1412,sanlock-devel,GPLv2 and GPLv2+ and LGPLv2+
+1413,sblim-cmpi-devel,EPL
+1414,sblim-sfcc-devel,EPL-1.0
+1415,scotch,CeCILL-C
+1416,scotch-devel,CeCILL-C
+1417,SDL2,zlib and MIT
+1418,SDL2-devel,zlib and MIT
+1419,SDL2-static,zlib and MIT
+1420,sendmail-milter-devel,Sendmail
+1421,sg3_utils-devel,GPLv2+ and BSD
+1422,sgabios,ASL 2.0
+1423,sharutils,GPLv3+ and (GPLv3+ and BSD) and (LGPLv3+ or BSD) and LGPLv2+ and Public Domain and GFDL
+1424,shim-unsigned-aarch64,BSD
+1425,shim-unsigned-x64,BSD
+1426,sip,GPLv2 or GPLv3 and (GPLv3+ with exceptions)
+1427,sisu-inject,EPL-1.0 and BSD
+1428,sisu-javadoc,EPL-1.0 and BSD
+1429,sisu-mojos,EPL-1.0
+1430,sisu-mojos-javadoc,EPL-1.0
+1431,sisu-plexus,EPL-1.0 and BSD
+1432,slf4j,MIT and ASL 2.0
+1433,slf4j-ext,MIT and ASL 2.0
+1434,slf4j-javadoc,MIT and ASL 2.0
+1435,slf4j-jcl,MIT and ASL 2.0
+1436,slf4j-jdk14,MIT and ASL 2.0
+1437,slf4j-log4j12,MIT and ASL 2.0
+1438,slf4j-manual,MIT and ASL 2.0
+1439,slf4j-sources,MIT and ASL 2.0
+1440,snappy-devel,BSD
+1441,socket_wrapper,BSD
+1442,sombok,GPLv2+ or Artistic clarified
+1443,sombok-devel,GPLv2+ or Artistic clarified
+1444,sonatype-oss-parent,ASL 2.0
+1445,sonatype-plugins-parent,ASL 2.0
+1446,soundtouch-devel,LGPLv2+
+1447,sparsehash-devel,BSD
+1448,spec-version-maven-plugin,CDDL or GPLv2 with exceptions
+1449,spec-version-maven-plugin-javadoc,CDDL or GPLv2 with exceptions
+1450,speech-dispatcher-devel,GPLv2+
+1451,speech-dispatcher-doc,GPLv2+
+1452,speex-devel,BSD
+1453,speexdsp-devel,BSD
+1454,spice-parent,ASL 2.0
+1455,spice-server-devel,LGPLv2+
+1456,spirv-tools-devel,ASL 2.0
+1457,spirv-tools-libs,ASL 2.0
+1458,suitesparse-devel,(LGPLv2+ or BSD) and LGPLv2+ and GPLv2+
+1459,SuperLU,BSD and GPLV2+
+1460,SuperLU-devel,BSD and GPLV2+
+1461,taglib-devel,LGPLv2 or MPLv1.1
+1462,testng,ASL 2.0
+1463,testng-javadoc,ASL 2.0
+1464,texi2html,GPLv2+ and OFSFDL and (CC-BY-SA or GPLv2)
+1465,texinfo,GPLv3+
+1466,texinfo-tex,GPLv3+
+1467,texlive-lib-devel,Artistic 2.0 and GPLv2 and GPLv2+ and LGPLv2+ and LPPL and MIT and Public Domain and UCD and Utopia
+1468,tinycdb-devel,Public Domain
+1469,tinyxml2,zlib
+1470,tinyxml2-devel,zlib
+1471,tix-devel,TCL
+1472,tog-pegasus-devel,MIT
+1473,tokyocabinet-devel,LGPLv2+
+1474,torque,OpenPBS and TORQUEv1.1
+1475,torque-devel,OpenPBS and TORQUEv1.1
+1476,tpm-tools-devel,CPL
+1477,tpm2-abrmd-devel,BSD
+1478,transfig,MIT
+1479,trousers-devel,BSD
+1480,tss2-devel,BSD
+1481,turbojpeg-devel,IJG
+1482,uglify-js,BSD
+1483,uid_wrapper,GPLv3+
+1484,upower-devel,GPLv2+
+1485,upower-devel-docs,GPLv2+
+1486,urw-base35-fonts-devel,AGPLv3
+1487,usbredir-devel,LGPLv2+
+1488,userspace-rcu-devel,LGPLv2+
+1489,ustr,MIT or LGPLv2+ or BSD
+1490,uthash-devel,BSD
+1491,uuid-devel,MIT
+1492,vala,LGPLv2+ and BSD
+1493,vala-devel,LGPLv2+ and BSD
+1494,velocity,ASL 2.0
+1495,velocity-demo,ASL 2.0
+1496,velocity-javadoc,ASL 2.0
+1497,velocity-manual,ASL 2.0
+1498,vte291-devel,LGPLv2+
+1499,wavpack-devel,BSD
+1500,web-assets-devel,MIT
+1501,web-assets-filesystem,Public Domain
+1502,weld-parent,ASL 2.0
+1503,wireshark-devel,GPL+
+1504,xalan-j2,ASL 2.0 and W3C
+1505,xalan-j2-demo,ASL 2.0
+1506,xalan-j2-javadoc,ASL 2.0
+1507,xalan-j2-manual,ASL 2.0
+1508,xalan-j2-xsltc,ASL 2.0
+1509,Xaw3d-devel,MIT and GPLv3+
+1510,xbean,ASL 2.0
+1511,xbean-javadoc,ASL 2.0
+1512,xcb-proto,MIT
+1513,xcb-util-devel,MIT
+1514,xcb-util-image-devel,MIT
+1515,xcb-util-keysyms-devel,MIT
+1516,xcb-util-renderutil-devel,MIT
+1517,xcb-util-wm-devel,MIT
+1518,xerces-j2,ASL 2.0 and W3C
+1519,xerces-j2-demo,ASL 2.0 and W3C
+1520,xerces-j2-javadoc,ASL 2.0 and W3C
+1521,xhtml1-dtds,W3C
+1522,xkeyboard-config-devel,MIT
+1523,xml-commons-apis,ASL 2.0 and W3C and Public Domain
+1524,xml-commons-apis-javadoc,ASL 2.0 and W3C and Public Domain
+1525,xml-commons-apis-manual,ASL 2.0 and W3C and Public Domain
+1526,xml-commons-resolver,ASL 2.0
+1527,xml-commons-resolver-javadoc,ASL 2.0
+1528,xmlrpc-c-c++,BSD and MIT
+1529,xmlrpc-c-client++,BSD and MIT
+1530,xmlrpc-c-devel,BSD and MIT
+1531,xmlsec1-devel,MIT
+1532,xmlsec1-gcrypt,MIT
+1533,xmlsec1-gnutls,MIT
+1534,xmlsec1-gnutls-devel,MIT
+1535,xmlsec1-openssl-devel,MIT
+1536,xmltoman,GPLv2+
+1537,xmlunit,BSD
+1538,xmlunit-javadoc,BSD
+1539,xmvn,ASL 2.0
+1540,xmvn-api,ASL 2.0
+1541,xmvn-bisect,ASL 2.0
+1542,xmvn-connector-aether,ASL 2.0
+1543,xmvn-connector-ivy,ASL 2.0
+1544,xmvn-core,ASL 2.0
+1545,xmvn-install,ASL 2.0
+1546,xmvn-javadoc,ASL 2.0
+1547,xmvn-minimal,ASL 2.0
+1548,xmvn-mojo,ASL 2.0
+1549,xmvn-parent-pom,ASL 2.0
+1550,xmvn-resolve,ASL 2.0
+1551,xmvn-subst,ASL 2.0
+1552,xmvn-tools-pom,ASL 2.0
+1553,xorg-x11-apps,MIT
+1554,xorg-x11-drv-libinput-devel,MIT
+1555,xorg-x11-drv-wacom-devel,GPLv2+
+1556,xorg-x11-server-devel,MIT
+1557,xorg-x11-util-macros,MIT
+1558,xorg-x11-xkb-utils-devel,MIT
+1559,xorg-x11-xtrans-devel,MIT
+1560,xz-java,Public Domain
+1561,xz-java-javadoc,Public Domain
+1562,xz-lzma-compat,Public Domain
+1563,yajl-devel,ISC
+1564,yasm,BSD and (GPLv2+ or Artistic or LGPLv2+) and LGPLv2
+1565,yelp-devel,LGPLv2+ and ASL 2.0 and GPLv2+
+1566,zlib-static,zlib and Boost
+1567,zziplib-devel,LGPLv2+ or MPLv1.1
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/table-5.csv b/tools/redhat_package_manifest_scraper/data/redhat8/table-5.csv
new file mode 100644
index 0000000..cd644b6
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/table-5.csv
@@ -0,0 +1,4 @@
+,Module,Stream,Packages
+0,javapackages-tools,201801,"ant, ant-antlr, ant-apache-bcel, ant-apache-bsf, ant-apache-log4j, ant-apache-oro, ant-apache-regexp, ant-apache-resolver, ant-apache-xalan2, ant-commons-logging, ant-commons-net, ant-contrib, ant-contrib-javadoc, ant-javadoc, ant-javamail, ant-jdepend, ant-jmf, ant-jsch, ant-junit, ant-lib, ant-manual, ant-swing, ant-testutil, ant-xz, antlr, antlr-C++, antlr-javadoc, antlr-manual, antlr-tool, aopalliance, aopalliance-javadoc, apache-commons-beanutils, apache-commons-beanutils-javadoc, apache-commons-cli, apache-commons-cli-javadoc, apache-commons-codec, apache-commons-codec-javadoc, apache-commons-collections, apache-commons-collections-javadoc, apache-commons-collections-testframework, apache-commons-compress, apache-commons-compress-javadoc, apache-commons-exec, apache-commons-exec-javadoc, apache-commons-io, apache-commons-io-javadoc, apache-commons-jxpath, apache-commons-jxpath-javadoc, apache-commons-lang, apache-commons-lang-javadoc, apache-commons-lang3, apache-commons-lang3-javadoc, apache-commons-logging, apache-commons-logging-javadoc, apache-commons-net, apache-commons-net-javadoc, apache-commons-parent, apache-ivy, apache-ivy-javadoc, apache-parent, apache-resource-bundles, aqute-bnd, aqute-bnd-javadoc, aqute-bndlib, assertj-core, assertj-core-javadoc, atinject, atinject-javadoc, atinject-tck, bcel, bcel-javadoc, beust-jcommander, beust-jcommander-javadoc, bnd-maven-plugin, bsf, bsf-javadoc, bsh, bsh-javadoc, bsh-manual, byaccj, byaccj-debuginfo, byaccj-debugsource, cal10n, cal10n-javadoc, cdi-api, cdi-api-javadoc, cglib, cglib-javadoc, easymock, easymock-javadoc, exec-maven-plugin, exec-maven-plugin-javadoc, felix-osgi-compendium, felix-osgi-compendium-javadoc, felix-osgi-core, felix-osgi-core-javadoc, felix-osgi-foundation, felix-osgi-foundation-javadoc, felix-parent, felix-utils, felix-utils-javadoc, forge-parent, fusesource-pom, geronimo-annotation, geronimo-annotation-javadoc, geronimo-jms, geronimo-jms-javadoc, geronimo-jpa, geronimo-jpa-javadoc, geronimo-parent-poms, glassfish-annotation-api, glassfish-annotation-api-javadoc, glassfish-el, glassfish-el-api, glassfish-el-javadoc, glassfish-jsp-api, glassfish-jsp-api-javadoc, glassfish-legal, glassfish-master-pom, glassfish-servlet-api, glassfish-servlet-api-javadoc, google-guice, google-guice-javadoc, guava20, guava20-javadoc, guava20-testlib, guice-assistedinject, guice-bom, guice-extensions, guice-grapher, guice-jmx, guice-jndi, guice-multibindings, guice-parent, guice-servlet, guice-testlib, guice-throwingproviders, hamcrest, hamcrest-core, hamcrest-demo, hamcrest-javadoc, hawtjni, hawtjni-javadoc, hawtjni-runtime, httpcomponents-client, httpcomponents-client-cache, httpcomponents-client-javadoc, httpcomponents-core, httpcomponents-core-javadoc, httpcomponents-project, isorelax, isorelax-javadoc, ivy-local, jakarta-commons-httpclient, jakarta-commons-httpclient-demo, jakarta-commons-httpclient-javadoc, jakarta-commons-httpclient-manual, jakarta-oro, jakarta-oro-javadoc, jansi, jansi-javadoc, jansi-native, jansi-native-javadoc, java_cup, java_cup-javadoc, java_cup-manual, javacc, javacc-demo, javacc-javadoc, javacc-manual, javacc-maven-plugin, javacc-maven-plugin-javadoc, javamail, javamail-javadoc, javapackages-filesystem, javapackages-local, javapackages-tools, javassist, javassist-javadoc, jaxen, jaxen-demo, jaxen-javadoc, jboss-interceptors-1.2-api, jboss-interceptors-1.2-api-javadoc, jboss-parent, jcl-over-slf4j, jdepend, jdepend-demo, jdepend-javadoc, jdependency, jdependency-javadoc, jdom, jdom-demo, jdom-javadoc, jdom2, jdom2-javadoc, jflex, jflex-javadoc, jline, jline-javadoc, jsch, jsch-javadoc, jsoup, jsoup-javadoc, jsr-305, jsr-305-javadoc, jtidy, jtidy-javadoc, jul-to-slf4j, junit, junit-javadoc, junit-manual, jvnet-parent, jzlib, jzlib-demo, jzlib-javadoc, log4j-over-slf4j, log4j12, log4j12-javadoc, maven, maven-antrun-plugin, maven-antrun-plugin-javadoc, maven-archiver, maven-archiver-javadoc, maven-artifact, maven-artifact-manager, maven-artifact-resolver, maven-artifact-resolver-javadoc, maven-artifact-transfer, maven-artifact-transfer-javadoc, maven-assembly-plugin, maven-assembly-plugin-javadoc, maven-cal10n-plugin, maven-clean-plugin, maven-clean-plugin-javadoc, maven-common-artifact-filters, maven-common-artifact-filters-javadoc, maven-compiler-plugin, maven-compiler-plugin-javadoc, maven-dependency-analyzer, maven-dependency-analyzer-javadoc, maven-dependency-plugin, maven-dependency-plugin-javadoc, maven-dependency-tree, maven-dependency-tree-javadoc, maven-doxia, maven-doxia-core, maven-doxia-javadoc, maven-doxia-logging-api, maven-doxia-module-apt, maven-doxia-module-confluence, maven-doxia-module-docbook-simple, maven-doxia-module-fml, maven-doxia-module-latex, maven-doxia-module-rtf, maven-doxia-module-twiki, maven-doxia-module-xdoc, maven-doxia-module-xhtml, maven-doxia-modules, maven-doxia-sink-api, maven-doxia-sitetools, maven-doxia-sitetools-javadoc, maven-doxia-test-docs, maven-doxia-tests, maven-enforcer, maven-enforcer-api, maven-enforcer-javadoc, maven-enforcer-plugin, maven-enforcer-rules, maven-failsafe-plugin, maven-file-management, maven-file-management-javadoc, maven-filtering, maven-filtering-javadoc, maven-hawtjni-plugin, maven-install-plugin, maven-install-plugin-javadoc, maven-invoker, maven-invoker-javadoc, maven-invoker-plugin, maven-invoker-plugin-javadoc, maven-jar-plugin, maven-jar-plugin-javadoc, maven-javadoc, maven-lib, maven-local, maven-model, maven-monitor, maven-parent, maven-plugin-annotations, maven-plugin-build-helper, maven-plugin-build-helper-javadoc, maven-plugin-bundle, maven-plugin-bundle-javadoc, maven-plugin-descriptor, maven-plugin-plugin, maven-plugin-registry, maven-plugin-testing, maven-plugin-testing-harness, maven-plugin-testing-javadoc, maven-plugin-testing-tools, maven-plugin-tools, maven-plugin-tools-annotations, maven-plugin-tools-ant, maven-plugin-tools-api, maven-plugin-tools-beanshell, maven-plugin-tools-generators, maven-plugin-tools-java, maven-plugin-tools-javadoc, maven-plugin-tools-javadocs, maven-plugin-tools-model, maven-plugins-pom, maven-profile, maven-project, maven-remote-resources-plugin, maven-remote-resources-plugin-javadoc, maven-reporting-api, maven-reporting-api-javadoc, maven-reporting-impl, maven-reporting-impl-javadoc, maven-resolver, maven-resolver-api, maven-resolver-connector-basic, maven-resolver-impl, maven-resolver-javadoc, maven-resolver-spi, maven-resolver-test-util, maven-resolver-transport-classpath, maven-resolver-transport-file, maven-resolver-transport-http, maven-resolver-transport-wagon, maven-resolver-util, maven-resources-plugin, maven-resources-plugin-javadoc, maven-script, maven-script-ant, maven-script-beanshell, maven-script-interpreter, maven-script-interpreter-javadoc, maven-settings, maven-shade-plugin, maven-shade-plugin-javadoc, maven-shared, maven-shared-incremental, maven-shared-incremental-javadoc, maven-shared-io, maven-shared-io-javadoc, maven-shared-utils, maven-shared-utils-javadoc, maven-source-plugin, maven-source-plugin-javadoc, maven-surefire, maven-surefire-javadoc, maven-surefire-plugin, maven-surefire-provider-junit, maven-surefire-provider-testng, maven-surefire-report-parser, maven-surefire-report-plugin, maven-test-tools, maven-toolchain, maven-verifier, maven-verifier-javadoc, maven-wagon, maven-wagon-file, maven-wagon-ftp, maven-wagon-http, maven-wagon-http-lightweight, maven-wagon-http-shared, maven-wagon-javadoc, maven-wagon-provider-api, maven-wagon-providers, maven2, maven2-javadoc, mockito, mockito-javadoc, modello, modello-javadoc, mojo-parent, munge-maven-plugin, munge-maven-plugin-javadoc, objectweb-asm, objectweb-asm-javadoc, objectweb-pom, objenesis, objenesis-javadoc, os-maven-plugin, os-maven-plugin-javadoc, osgi-annotation, osgi-annotation-javadoc, osgi-compendium, osgi-compendium-javadoc, osgi-core, osgi-core-javadoc, plexus-ant-factory, plexus-ant-factory-javadoc, plexus-archiver, plexus-archiver-javadoc, plexus-bsh-factory, plexus-bsh-factory-javadoc, plexus-build-api, plexus-build-api-javadoc, plexus-cipher, plexus-cipher-javadoc, plexus-classworlds, plexus-classworlds-javadoc, plexus-cli, plexus-cli-javadoc, plexus-compiler, plexus-compiler-extras, plexus-compiler-javadoc, plexus-compiler-pom, plexus-component-api, plexus-component-api-javadoc, plexus-component-factories-pom, plexus-components-pom, plexus-containers, plexus-containers-component-annotations, plexus-containers-component-javadoc, plexus-containers-component-metadata, plexus-containers-container-default, plexus-containers-javadoc, plexus-i18n, plexus-i18n-javadoc, plexus-interactivity, plexus-interactivity-api, plexus-interactivity-javadoc, plexus-interactivity-jline, plexus-interpolation, plexus-interpolation-javadoc, plexus-io, plexus-io-javadoc, plexus-languages, plexus-languages-javadoc, plexus-pom, plexus-resources, plexus-resources-javadoc, plexus-sec-dispatcher, plexus-sec-dispatcher-javadoc, plexus-utils, plexus-utils-javadoc, plexus-velocity, plexus-velocity-javadoc, powermock, powermock-api-easymock, powermock-api-mockito, powermock-api-support, powermock-common, powermock-core, powermock-javadoc, powermock-junit4, powermock-reflect, powermock-testng, python3-javapackages, qdox, qdox-javadoc, regexp, regexp-javadoc, sisu, sisu-inject, sisu-javadoc, sisu-mojos, sisu-mojos-javadoc, sisu-plexus, slf4j, slf4j-ext, slf4j-javadoc, slf4j-jcl, slf4j-jdk14, slf4j-log4j12, slf4j-manual, slf4j-sources, sonatype-oss-parent, sonatype-plugins-parent, spec-version-maven-plugin, spec-version-maven-plugin-javadoc, spice-parent, testng, testng-javadoc, velocity, velocity-demo, velocity-javadoc, velocity-manual, weld-parent, xalan-j2, xalan-j2-demo, xalan-j2-javadoc, xalan-j2-manual, xalan-j2-xsltc, xbean, xbean-javadoc, xerces-j2, xerces-j2-demo, xerces-j2-javadoc, xml-commons-apis, xml-commons-apis-javadoc, xml-commons-apis-manual, xml-commons-resolver, xml-commons-resolver-javadoc, xmlunit, xmlunit-javadoc, xmvn, xmvn-api, xmvn-bisect, xmvn-connector-aether, xmvn-connector-ivy, xmvn-core, xmvn-install, xmvn-javadoc, xmvn-minimal, xmvn-mojo, xmvn-parent-pom, xmvn-resolve, xmvn-subst, xmvn-tools-pom, xz-java, xz-java-javadoc"
+1,python38-devel,3.8,"pytest, python-atomicwrites, python-attrs, python-more-itertools, python-packaging, python-pluggy, python-py, python-wcwidth, python38-atomicwrites, python38-attrs, python38-more-itertools, python38-packaging, python38-pluggy, python38-py, python38-pyparsing, python38-pytest, python38-wcwidth, python3x-pyparsing"
+2,virt-devel,rhel,"hivex, hivex-debuginfo, hivex-debugsource, hivex-devel, libguestfs-winsupport, libiscsi, libiscsi-debuginfo, libiscsi-debugsource, libiscsi-devel, libiscsi-utils, libiscsi-utils-debuginfo, libvirt, libvirt-admin, libvirt-admin-debuginfo, libvirt-bash-completion, libvirt-client, libvirt-client-debuginfo, libvirt-daemon, libvirt-daemon-config-network, libvirt-daemon-config-nwfilter, libvirt-daemon-debuginfo, libvirt-daemon-driver-interface, libvirt-daemon-driver-interface-debuginfo, libvirt-daemon-driver-network, libvirt-daemon-driver-network-debuginfo, libvirt-daemon-driver-nodedev, libvirt-daemon-driver-nodedev-debuginfo, libvirt-daemon-driver-nwfilter, libvirt-daemon-driver-nwfilter-debuginfo, libvirt-daemon-driver-secret, libvirt-daemon-driver-secret-debuginfo, libvirt-daemon-driver-storage, libvirt-daemon-driver-storage-core, libvirt-daemon-driver-storage-core-debuginfo, libvirt-daemon-driver-storage-disk, libvirt-daemon-driver-storage-disk-debuginfo, libvirt-daemon-driver-storage-iscsi, libvirt-daemon-driver-storage-iscsi-debuginfo, libvirt-daemon-driver-storage-logical, libvirt-daemon-driver-storage-logical-debuginfo, libvirt-daemon-driver-storage-mpath, libvirt-daemon-driver-storage-mpath-debuginfo, libvirt-daemon-driver-storage-rbd, libvirt-daemon-driver-storage-rbd-debuginfo, libvirt-daemon-driver-storage-scsi, libvirt-daemon-driver-storage-scsi-debuginfo, libvirt-dbus, libvirt-dbus-debuginfo, libvirt-dbus-debugsource, libvirt-debuginfo, libvirt-debugsource, libvirt-devel, libvirt-docs, libvirt-libs, libvirt-libs-debuginfo, libvirt-nss, libvirt-nss-debuginfo, libvirt-python-debugsource, netcf, netcf-debuginfo, netcf-debugsource, netcf-devel, netcf-libs, netcf-libs-debuginfo, ocaml-hivex, ocaml-hivex-debuginfo, ocaml-hivex-devel, ocaml-libguestfs, ocaml-libguestfs-debuginfo, ocaml-libguestfs-devel, perl-hivex, perl-hivex-debuginfo, perl-Sys-Virt, perl-Sys-Virt-debuginfo, perl-Sys-Virt-debugsource, python3-hivex, python3-hivex-debuginfo, python3-libvirt, python3-libvirt-debuginfo, qemu-kvm-tests, qemu-kvm-tests-debuginfo, ruby-hivex, ruby-hivex-debuginfo, seabios, sgabios, SLOF"
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/table-6.csv b/tools/redhat_package_manifest_scraper/data/redhat8/table-6.csv
new file mode 100644
index 0000000..5ce754f
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/table-6.csv
@@ -0,0 +1,10 @@
+,Package,License
+0,dptfxtract,Intel
+1,java-1.8.0-ibm,IBM Binary Code License
+2,java-1.8.0-ibm-demo,IBM Binary Code License
+3,java-1.8.0-ibm-devel,IBM Binary Code License
+4,java-1.8.0-ibm-headless,IBM Binary Code License
+5,java-1.8.0-ibm-jdbc,IBM Binary Code License
+6,java-1.8.0-ibm-plugin,IBM Binary Code License
+7,java-1.8.0-ibm-src,IBM Binary Code License
+8,java-1.8.0-ibm-webstart,IBM Binary Code License
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/table-7.csv b/tools/redhat_package_manifest_scraper/data/redhat8/table-7.csv
new file mode 100644
index 0000000..5ff0716
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/table-7.csv
@@ -0,0 +1,57 @@
+,Package,License
+0,awscli,ASL 2.0 and MIT
+1,booth,GPLv2+
+2,booth-arbitrator,GPLv2+
+3,booth-core,GPLv2+
+4,booth-site,GPLv2+
+5,booth-test,GPLv2+
+6,clufter-bin,GPLv2+
+7,clufter-cli,GPLv2+
+8,clufter-common,GPLv2+
+9,clufter-lib-ccs,GPLv2+
+10,clufter-lib-general,GPLv2+
+11,clufter-lib-pcs,GPLv2+
+12,corosync,BSD
+13,corosync-qdevice,BSD
+14,corosync-qnetd,BSD
+15,corosynclib-devel,BSD
+16,fence-agents-aliyun,GPLv2+ and LGPLv2+ and ASL 2.0 and BSD and MIT
+17,fence-agents-aws,GPLv2+ and LGPLv2+
+18,fence-agents-azure-arm,GPLv2+ and LGPLv2+
+19,fence-agents-gce,GPLv2+ and LGPLv2+
+20,libknet1,LGPLv2+
+21,libknet1-compress-bzip2-plugin,LGPLv2+
+22,libknet1-compress-lz4-plugin,LGPLv2+
+23,libknet1-compress-lzma-plugin,LGPLv2+
+24,libknet1-compress-lzo2-plugin,LGPLv2+
+25,libknet1-compress-plugins-all,LGPLv2+
+26,libknet1-compress-zlib-plugin,LGPLv2+
+27,libknet1-crypto-nss-plugin,LGPLv2+
+28,libknet1-crypto-openssl-plugin,LGPLv2+
+29,libknet1-crypto-plugins-all,LGPLv2+
+30,libknet1-plugins-all,LGPLv2+
+31,libnozzle1,LGPLv2+
+32,pacemaker,GPLv2+ and LGPLv2+
+33,pacemaker-cli,GPLv2+ and LGPLv2+
+34,pacemaker-cts,GPLv2+ and LGPLv2+
+35,pacemaker-doc,CC-BY-SA-4.0
+36,pacemaker-libs-devel,GPLv2+ and LGPLv2+
+37,pacemaker-nagios-plugins-metadata,GPLv3
+38,pacemaker-remote,GPLv2+ and LGPLv2+
+39,pcs,GPLv2 and ASL 2.0 and MIT
+40,pcs-snmp,GPLv2 and BSD-2-Clause
+41,python3-azure-sdk,MIT and ASL 2.0 and MPLv2.0 and BSD and Python
+42,python3-boto3,ASL 2.0
+43,python3-botocore,ASL 2.0
+44,python3-clufter,GPLv2+ and GFDL
+45,python3-fasteners,ASL 2.0
+46,python3-gflags,BSD
+47,python3-google-api-client,ASL 2.0
+48,python3-httplib2,MIT
+49,python3-oauth2client,ASL 2.0
+50,python3-s3transfer,ASL 2.0
+51,python3-uritemplate,BSD
+52,resource-agents,GPLv2+ and LGPLv2+
+53,resource-agents-aliyun,GPLv2+ and LGPLv2+ and ASL 2.0 and BSD and MIT
+54,resource-agents-gcp,GPLv2+ and LGPLv2+ and BSD and ASL 2.0 and MIT and Python
+55,spausedd,BSD
diff --git a/tools/redhat_package_manifest_scraper/data/redhat8/table-8.csv b/tools/redhat_package_manifest_scraper/data/redhat8/table-8.csv
new file mode 100644
index 0000000..104e13c
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/data/redhat8/table-8.csv
@@ -0,0 +1,59 @@
+,Package,License
+0,awscli,ASL 2.0 and MIT
+1,booth,GPLv2+
+2,booth-arbitrator,GPLv2+
+3,booth-core,GPLv2+
+4,booth-site,GPLv2+
+5,booth-test,GPLv2+
+6,clufter-bin,GPLv2+
+7,clufter-cli,GPLv2+
+8,clufter-common,GPLv2+
+9,clufter-lib-ccs,GPLv2+
+10,clufter-lib-general,GPLv2+
+11,clufter-lib-pcs,GPLv2+
+12,cmirror,GPLv2
+13,corosync,BSD
+14,corosync-qdevice,BSD
+15,corosync-qnetd,BSD
+16,corosynclib-devel,BSD
+17,dlm,GPLv2 and GPLv2+ and LGPLv2+
+18,fence-agents-aliyun,GPLv2+ and LGPLv2+ and ASL 2.0 and BSD and MIT
+19,fence-agents-aws,GPLv2+ and LGPLv2+
+20,fence-agents-azure-arm,GPLv2+ and LGPLv2+
+21,fence-agents-gce,GPLv2+ and LGPLv2+
+22,libknet1,LGPLv2+
+23,libknet1-compress-bzip2-plugin,LGPLv2+
+24,libknet1-compress-lz4-plugin,LGPLv2+
+25,libknet1-compress-lzma-plugin,LGPLv2+
+26,libknet1-compress-lzo2-plugin,LGPLv2+
+27,libknet1-compress-plugins-all,LGPLv2+
+28,libknet1-compress-zlib-plugin,LGPLv2+
+29,libknet1-crypto-nss-plugin,LGPLv2+
+30,libknet1-crypto-openssl-plugin,LGPLv2+
+31,libknet1-crypto-plugins-all,LGPLv2+
+32,libknet1-plugins-all,LGPLv2+
+33,libnozzle1,LGPLv2+
+34,pacemaker,GPLv2+ and LGPLv2+
+35,pacemaker-cli,GPLv2+ and LGPLv2+
+36,pacemaker-cts,GPLv2+ and LGPLv2+
+37,pacemaker-doc,CC-BY-SA-4.0
+38,pacemaker-libs-devel,GPLv2+ and LGPLv2+
+39,pacemaker-nagios-plugins-metadata,GPLv3
+40,pacemaker-remote,GPLv2+ and LGPLv2+
+41,pcs,GPLv2 and ASL 2.0 and MIT
+42,pcs-snmp,GPLv2 and BSD-2-Clause
+43,python3-azure-sdk,MIT and ASL 2.0 and MPLv2.0 and BSD and Python
+44,python3-boto3,ASL 2.0
+45,python3-botocore,ASL 2.0
+46,python3-clufter,GPLv2+ and GFDL
+47,python3-fasteners,ASL 2.0
+48,python3-gflags,BSD
+49,python3-google-api-client,ASL 2.0
+50,python3-httplib2,MIT
+51,python3-oauth2client,ASL 2.0
+52,python3-s3transfer,ASL 2.0
+53,python3-uritemplate,BSD
+54,resource-agents,GPLv2+ and LGPLv2+
+55,resource-agents-aliyun,GPLv2+ and LGPLv2+ and ASL 2.0 and BSD and MIT
+56,resource-agents-gcp,GPLv2+ and LGPLv2+ and BSD and ASL 2.0 and MIT and Python
+57,spausedd,BSD
diff --git a/tools/redhat_package_manifest_scraper/html_table_extractor.py b/tools/redhat_package_manifest_scraper/html_table_extractor.py
new file mode 100755
index 0000000..65a68e9
--- /dev/null
+++ b/tools/redhat_package_manifest_scraper/html_table_extractor.py
@@ -0,0 +1,87 @@
+import requests
+import pandas as pd
+from bs4 import BeautifulSoup as bs
+
+USER_AGENT = "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36"
+# US english
+LANGUAGE = "en-US,en;q=0.5"
+
+def get_soup(url):
+    """Constructs and returns a soup using the HTML content of `url` passed"""
+    # initialize a session
+    session = requests.Session()
+    # set the User-Agent as a regular browser
+    session.headers['User-Agent'] = USER_AGENT
+    # request for english content (optional)
+    session.headers['Accept-Language'] = LANGUAGE
+    session.headers['Content-Language'] = LANGUAGE
+    # make the request
+    html = session.get(url)
+    # return the soup
+    return bs(html.content, "html.parser")
+
+
+def get_all_tables(soup):
+    """Extracts and returns all tables in a soup object"""
+    return soup.find_all("table")
+
+
+def get_table_headers(table):
+    """Given a table soup, returns all the headers"""
+    headers = []
+    for th in table.find("tr").find_all("th"):
+        headers.append(th.text.strip())
+    return headers
+
+
+def get_table_rows(table):
+    """Given a table, returns all its rows"""
+    rows = []
+    for tr in table.find_all("tr")[1:]:
+        cells = []
+        # grab all td tags in this table row
+        tds = tr.find_all("td")
+        if len(tds) == 0:
+            # if no td tags, search for th tags
+            # can be found especially in wikipedia tables below the table
+            ths = tr.find_all("th")
+            for th in ths:
+                cells.append(th.text.strip())
+        else:
+            # use regular td tags
+            for td in tds:
+                cells.append(td.text.strip())
+        rows.append(cells)
+    return rows
+
+
+def save_as_csv(table_name, headers, rows):
+    pd.DataFrame(rows, columns=headers).to_csv(f"{table_name}.csv")
+
+
+def main(url):
+    # get the soup
+    soup = get_soup(url)
+    # extract all the tables from the web page
+    tables = get_all_tables(soup)
+    print(f"[+] Found a total of {len(tables)} tables.")
+    # iterate over all tables
+    for i, table in enumerate(tables, start=1):
+        # get the table headers
+        headers = get_table_headers(table)
+        # get all the rows of the table
+        rows = get_table_rows(table)
+        # save table as csv file
+        table_name = f"table-{i}"
+        print(f"[+] Saving {table_name}")
+        save_as_csv(table_name, headers, rows)
+
+
+if __name__ == "__main__":
+    import sys
+    try:
+        url = sys.argv[1]
+    except IndexError:
+        print("Please specify a URL.\nUsage: python html_table_extractor.py [URL]")
+        exit(1)
+    main(url)
diff --git a/tutorials/pydata-book b/tutorials/pydata-book
new file mode 160000
index 0000000..3b178c6
--- /dev/null
+++ b/tutorials/pydata-book
@@ -0,0 +1 @@
+Subproject commit 3b178c65c8a8f48a2a314f60626ae1905e5f02cb